From d49c4b11644c35f36f01f9bb3c3fc71519db4edd Mon Sep 17 00:00:00 2001 From: developer29 Date: Wed, 22 Jan 2020 15:46:43 +0100 Subject: [PATCH] Version 1.7.0.0 Stripped DER encoded (empty) OID in case of "NONE with RSA" algorithms used --- .gitignore | 7 - .gitmodules | 3 + App.config | 6 - ClassDiagram1.cd | 2 - DLAsn1Tools.cs | 111 - Program.cs | 22 - Properties/AssemblyInfo.cs | 36 - Properties/Resources.Designer.cs | 63 - Properties/Settings.Designer.cs | 26 - Properties/Settings.settings | 7 - bc-sharp-crypto/bzip2/src/BZip2Constants.cs | 103 - .../bzip2/src/CBZip2InputStream.cs | 921 ----- .../bzip2/src/CBZip2OutputStream.cs | 1709 -------- bc-sharp-crypto/bzip2/src/CRC.cs | 134 - bc-sharp-crypto/legal and licecing.txt | 12 - bc-sharp-crypto/src/AssemblyInfo.cs | 119 - bc-sharp-crypto/src/asn1/ASN1Generator.cs | 27 - .../src/asn1/ASN1OctetStringParser.cs | 10 - .../src/asn1/ASN1SequenceParser.cs | 8 - bc-sharp-crypto/src/asn1/ASN1SetParser.cs | 8 - bc-sharp-crypto/src/asn1/ASN1StreamParser.cs | 234 -- .../src/asn1/ASN1TaggedObjectParser.cs | 10 - bc-sharp-crypto/src/asn1/Asn1Encodable.cs | 78 - .../src/asn1/Asn1EncodableVector.cs | 93 - bc-sharp-crypto/src/asn1/Asn1Exception.cs | 30 - bc-sharp-crypto/src/asn1/Asn1InputStream.cs | 371 -- bc-sharp-crypto/src/asn1/Asn1Null.cs | 18 - bc-sharp-crypto/src/asn1/Asn1Object.cs | 70 - bc-sharp-crypto/src/asn1/Asn1OctetString.cs | 119 - bc-sharp-crypto/src/asn1/Asn1OutputStream.cs | 35 - .../src/asn1/Asn1ParsingException.cs | 29 - bc-sharp-crypto/src/asn1/Asn1Sequence.cs | 268 -- bc-sharp-crypto/src/asn1/Asn1Set.cs | 372 -- bc-sharp-crypto/src/asn1/Asn1TaggedObject.cs | 188 - bc-sharp-crypto/src/asn1/Asn1Tags.cs | 36 - bc-sharp-crypto/src/asn1/BERBitString.cs | 43 - bc-sharp-crypto/src/asn1/BERGenerator.cs | 102 - .../src/asn1/BEROctetStringGenerator.cs | 133 - .../src/asn1/BEROctetStringParser.cs | 36 - .../src/asn1/BERSequenceGenerator.cs | 24 - bc-sharp-crypto/src/asn1/BERSequenceParser.cs | 24 - bc-sharp-crypto/src/asn1/BERSetGenerator.cs | 24 - bc-sharp-crypto/src/asn1/BERSetParser.cs | 24 - .../src/asn1/BERTaggedObjectParser.cs | 71 - .../src/asn1/BerApplicationSpecific.cs | 15 - .../src/asn1/BerApplicationSpecificParser.cs | 29 - bc-sharp-crypto/src/asn1/BerNull.cs | 35 - bc-sharp-crypto/src/asn1/BerOctetString.cs | 135 - bc-sharp-crypto/src/asn1/BerOutputStream.cs | 36 - bc-sharp-crypto/src/asn1/BerSequence.cs | 69 - bc-sharp-crypto/src/asn1/BerSet.cs | 70 - bc-sharp-crypto/src/asn1/BerTaggedObject.cs | 108 - .../src/asn1/ConstructedOctetStream.cs | 102 - bc-sharp-crypto/src/asn1/DERExternal.cs | 202 - bc-sharp-crypto/src/asn1/DERExternalParser.cs | 26 - bc-sharp-crypto/src/asn1/DERGenerator.cs | 107 - .../src/asn1/DEROctetStringParser.cs | 36 - .../src/asn1/DERSequenceGenerator.cs | 40 - bc-sharp-crypto/src/asn1/DERSequenceParser.cs | 24 - bc-sharp-crypto/src/asn1/DERSetGenerator.cs | 40 - bc-sharp-crypto/src/asn1/DERSetParser.cs | 24 - .../src/asn1/DefiniteLengthInputStream.cs | 100 - .../src/asn1/DerApplicationSpecific.cs | 237 -- bc-sharp-crypto/src/asn1/DerBMPString.cs | 117 - bc-sharp-crypto/src/asn1/DerBitString.cs | 276 -- bc-sharp-crypto/src/asn1/DerBoolean.cs | 124 - bc-sharp-crypto/src/asn1/DerEnumerated.cs | 135 - bc-sharp-crypto/src/asn1/DerGeneralString.cs | 81 - .../src/asn1/DerGeneralizedTime.cs | 320 -- bc-sharp-crypto/src/asn1/DerGraphicString.cs | 103 - bc-sharp-crypto/src/asn1/DerIA5String.cs | 145 - bc-sharp-crypto/src/asn1/DerInteger.cs | 128 - bc-sharp-crypto/src/asn1/DerNull.cs | 41 - bc-sharp-crypto/src/asn1/DerNumericString.cs | 138 - .../src/asn1/DerObjectIdentifier.cs | 347 -- bc-sharp-crypto/src/asn1/DerOctetString.cs | 34 - bc-sharp-crypto/src/asn1/DerOutputStream.cs | 171 - .../src/asn1/DerPrintableString.cs | 163 - bc-sharp-crypto/src/asn1/DerSequence.cs | 88 - bc-sharp-crypto/src/asn1/DerSet.cs | 111 - bc-sharp-crypto/src/asn1/DerStringBase.cs | 22 - bc-sharp-crypto/src/asn1/DerT61String.cs | 102 - bc-sharp-crypto/src/asn1/DerTaggedObject.cs | 72 - bc-sharp-crypto/src/asn1/DerUTCTime.cs | 267 -- bc-sharp-crypto/src/asn1/DerUTF8String.cs | 98 - .../src/asn1/DerUniversalString.cs | 107 - bc-sharp-crypto/src/asn1/DerVideotexString.cs | 103 - bc-sharp-crypto/src/asn1/DerVisibleString.cs | 111 - .../asn1/IAsn1ApplicationSpecificParser.cs | 10 - bc-sharp-crypto/src/asn1/IAsn1Choice.cs | 17 - bc-sharp-crypto/src/asn1/IAsn1Convertible.cs | 7 - bc-sharp-crypto/src/asn1/IAsn1String.cs | 10 - .../src/asn1/IndefiniteLengthInputStream.cs | 170 - .../src/asn1/LazyASN1InputStream.cs | 33 - bc-sharp-crypto/src/asn1/LazyDERSequence.cs | 80 - bc-sharp-crypto/src/asn1/LazyDERSet.cs | 80 - .../src/asn1/LimitedInputStream.cs | 35 - bc-sharp-crypto/src/asn1/OidTokenizer.cs | 45 - .../src/asn1/anssi/ANSSINamedCurves.cs | 123 - .../src/asn1/anssi/ANSSIObjectIdentifiers.cs | 13 - .../src/asn1/bc/BCObjectIdentifiers.cs | 39 - .../src/asn1/cmp/CAKeyUpdAnnContent.cs | 62 - .../src/asn1/cmp/CertConfirmContent.cs | 49 - bc-sharp-crypto/src/asn1/cmp/CertOrEncCert.cs | 86 - .../src/asn1/cmp/CertRepMessage.cs | 96 - bc-sharp-crypto/src/asn1/cmp/CertResponse.cs | 116 - bc-sharp-crypto/src/asn1/cmp/CertStatus.cs | 85 - .../src/asn1/cmp/CertifiedKeyPair.cs | 115 - bc-sharp-crypto/src/asn1/cmp/Challenge.cs | 80 - .../src/asn1/cmp/CmpCertificate.cs | 81 - .../src/asn1/cmp/CmpObjectIdentifiers.cs | 106 - bc-sharp-crypto/src/asn1/cmp/CrlAnnContent.cs | 50 - .../src/asn1/cmp/ErrorMsgContent.cs | 95 - bc-sharp-crypto/src/asn1/cmp/GenMsgContent.cs | 54 - bc-sharp-crypto/src/asn1/cmp/GenRepContent.cs | 54 - .../src/asn1/cmp/InfoTypeAndValue.cs | 123 - .../src/asn1/cmp/KeyRecRepContent.cs | 117 - bc-sharp-crypto/src/asn1/cmp/OobCertHash.cs | 88 - bc-sharp-crypto/src/asn1/cmp/PKIBody.cs | 187 - .../src/asn1/cmp/PKIConfirmContent.cs | 36 - .../src/asn1/cmp/PKIFailureInfo.cs | 96 - bc-sharp-crypto/src/asn1/cmp/PKIFreeText.cs | 99 - bc-sharp-crypto/src/asn1/cmp/PKIHeader.cs | 238 -- .../src/asn1/cmp/PKIHeaderBuilder.cs | 223 - bc-sharp-crypto/src/asn1/cmp/PKIMessage.cs | 140 - bc-sharp-crypto/src/asn1/cmp/PKIMessages.cs | 54 - bc-sharp-crypto/src/asn1/cmp/PKIStatus.cs | 63 - bc-sharp-crypto/src/asn1/cmp/PKIStatusInfo.cs | 166 - bc-sharp-crypto/src/asn1/cmp/PbmParameter.cs | 101 - .../src/asn1/cmp/PollRepContent.cs | 68 - .../src/asn1/cmp/PollReqContent.cs | 61 - .../src/asn1/cmp/PopoDecKeyChallContent.cs | 49 - .../src/asn1/cmp/PopoDecKeyRespContent.cs | 49 - bc-sharp-crypto/src/asn1/cmp/ProtectedPart.cs | 60 - bc-sharp-crypto/src/asn1/cmp/RevAnnContent.cs | 87 - bc-sharp-crypto/src/asn1/cmp/RevDetails.cs | 75 - bc-sharp-crypto/src/asn1/cmp/RevRepContent.cs | 113 - .../src/asn1/cmp/RevRepContentBuilder.cs | 55 - bc-sharp-crypto/src/asn1/cmp/RevReqContent.cs | 54 - bc-sharp-crypto/src/asn1/cms/Attribute.cs | 70 - .../src/asn1/cms/AttributeTable.cs | 231 -- bc-sharp-crypto/src/asn1/cms/Attributes.cs | 55 - .../src/asn1/cms/AuthEnvelopedData.cs | 205 - .../src/asn1/cms/AuthEnvelopedDataParser.cs | 145 - .../src/asn1/cms/AuthenticatedData.cs | 271 -- .../src/asn1/cms/AuthenticatedDataParser.cs | 182 - bc-sharp-crypto/src/asn1/cms/CMSAttributes.cs | 14 - .../src/asn1/cms/CMSObjectIdentifiers.cs | 28 - .../src/asn1/cms/CompressedData.cs | 96 - .../src/asn1/cms/CompressedDataParser.cs | 47 - bc-sharp-crypto/src/asn1/cms/ContentInfo.cs | 88 - .../src/asn1/cms/ContentInfoParser.cs | 40 - .../src/asn1/cms/EncryptedContentInfo.cs | 94 - .../asn1/cms/EncryptedContentInfoParser.cs | 46 - bc-sharp-crypto/src/asn1/cms/EncryptedData.cs | 97 - bc-sharp-crypto/src/asn1/cms/EnvelopedData.cs | 176 - .../src/asn1/cms/EnvelopedDataParser.cs | 107 - bc-sharp-crypto/src/asn1/cms/Evidence.cs | 49 - .../src/asn1/cms/IssuerAndSerialNumber.cs | 64 - bc-sharp-crypto/src/asn1/cms/KEKIdentifier.cs | 119 - .../src/asn1/cms/KEKRecipientInfo.cs | 106 - .../asn1/cms/KeyAgreeRecipientIdentifier.cs | 94 - .../src/asn1/cms/KeyAgreeRecipientInfo.cs | 141 - .../src/asn1/cms/KeyTransRecipientInfo.cs | 99 - bc-sharp-crypto/src/asn1/cms/MetaData.cs | 94 - .../src/asn1/cms/OriginatorIdentifierOrKey.cs | 168 - .../src/asn1/cms/OriginatorInfo.cs | 121 - .../src/asn1/cms/OriginatorPublicKey.cs | 88 - .../src/asn1/cms/OtherKeyAttribute.cs | 70 - .../src/asn1/cms/OtherRecipientInfo.cs | 83 - .../src/asn1/cms/OtherRevocationInfoFormat.cs | 77 - .../src/asn1/cms/PasswordRecipientInfo.cs | 133 - .../src/asn1/cms/RecipientEncryptedKey.cs | 90 - .../src/asn1/cms/RecipientIdentifier.cs | 89 - bc-sharp-crypto/src/asn1/cms/RecipientInfo.cs | 145 - .../src/asn1/cms/RecipientKeyIdentifier.cs | 137 - bc-sharp-crypto/src/asn1/cms/SCVPReqRes.cs | 77 - bc-sharp-crypto/src/asn1/cms/SignedData.cs | 287 -- .../src/asn1/cms/SignedDataParser.cs | 114 - .../src/asn1/cms/SignerIdentifier.cs | 89 - bc-sharp-crypto/src/asn1/cms/SignerInfo.cs | 185 - bc-sharp-crypto/src/asn1/cms/Time.cs | 115 - .../src/asn1/cms/TimeStampAndCRL.cs | 62 - .../src/asn1/cms/TimeStampTokenEvidence.cs | 65 - .../src/asn1/cms/TimeStampedData.cs | 95 - .../src/asn1/cms/TimeStampedDataParser.cs | 76 - .../src/asn1/cms/ecc/MQVuserKeyingMaterial.cs | 105 - .../src/asn1/crmf/AttributeTypeAndValue.cs | 68 - bc-sharp-crypto/src/asn1/crmf/CertId.cs | 59 - .../src/asn1/crmf/CertReqMessages.cs | 54 - bc-sharp-crypto/src/asn1/crmf/CertReqMsg.cs | 112 - bc-sharp-crypto/src/asn1/crmf/CertRequest.cs | 82 - bc-sharp-crypto/src/asn1/crmf/CertTemplate.cs | 149 - .../src/asn1/crmf/CertTemplateBuilder.cs | 125 - bc-sharp-crypto/src/asn1/crmf/Controls.cs | 54 - .../src/asn1/crmf/CrmfObjectIdentifiers.cs | 23 - bc-sharp-crypto/src/asn1/crmf/EncKeyWithID.cs | 103 - bc-sharp-crypto/src/asn1/crmf/EncryptedKey.cs | 78 - .../src/asn1/crmf/EncryptedValue.cs | 154 - .../src/asn1/crmf/OptionalValidity.cs | 71 - .../src/asn1/crmf/PKIArchiveOptions.cs | 107 - .../src/asn1/crmf/PKIPublicationInfo.cs | 66 - bc-sharp-crypto/src/asn1/crmf/PKMacValue.cs | 90 - bc-sharp-crypto/src/asn1/crmf/PopoPrivKey.cs | 84 - .../src/asn1/crmf/PopoSigningKey.cs | 116 - .../src/asn1/crmf/PopoSigningKeyInput.cs | 116 - .../src/asn1/crmf/ProofOfPossession.cs | 100 - .../src/asn1/crmf/SinglePubInfo.cs | 59 - .../src/asn1/crmf/SubsequentMessage.cs | 27 - .../cryptopro/CryptoProObjectIdentifiers.cs | 51 - .../asn1/cryptopro/ECGOST3410NamedCurves.cs | 184 - .../cryptopro/ECGOST3410ParamSetParameters.cs | 87 - .../src/asn1/cryptopro/GOST28147Parameters.cs | 63 - .../asn1/cryptopro/GOST3410NamedParameters.cs | 123 - .../cryptopro/GOST3410ParamSetParameters.cs | 87 - .../GOST3410PublicKeyAlgParameters.cs | 99 - .../src/asn1/eac/EACObjectIdentifiers.cs | 50 - .../src/asn1/esf/CertificateValues.cs | 86 - .../src/asn1/esf/CommitmentTypeIdentifier.cs | 17 - .../src/asn1/esf/CommitmentTypeIndication.cs | 95 - .../src/asn1/esf/CommitmentTypeQualifier.cs | 119 - .../src/asn1/esf/CompleteCertificateRefs.cs | 85 - .../src/asn1/esf/CompleteRevocationRefs.cs | 85 - bc-sharp-crypto/src/asn1/esf/CrlIdentifier.cs | 111 - bc-sharp-crypto/src/asn1/esf/CrlListID.cs | 90 - bc-sharp-crypto/src/asn1/esf/CrlOcspRef.cs | 113 - .../src/asn1/esf/CrlValidatedID.cs | 91 - bc-sharp-crypto/src/asn1/esf/ESFAttributes.cs | 25 - .../src/asn1/esf/OcspIdentifier.cs | 78 - bc-sharp-crypto/src/asn1/esf/OcspListID.cs | 89 - .../src/asn1/esf/OcspResponsesID.cs | 94 - bc-sharp-crypto/src/asn1/esf/OtherCertID.cs | 94 - bc-sharp-crypto/src/asn1/esf/OtherHash.cs | 88 - .../src/asn1/esf/OtherHashAlgAndValue.cs | 95 - bc-sharp-crypto/src/asn1/esf/OtherRevRefs.cs | 80 - bc-sharp-crypto/src/asn1/esf/OtherRevVals.cs | 80 - .../src/asn1/esf/OtherSigningCertificate.cs | 139 - .../src/asn1/esf/RevocationValues.cs | 165 - .../src/asn1/esf/SigPolicyQualifierInfo.cs | 73 - .../src/asn1/esf/SignaturePolicyId.cs | 146 - .../src/asn1/esf/SignaturePolicyIdentifier.cs | 66 - .../src/asn1/esf/SignerAttribute.cs | 97 - .../src/asn1/esf/SignerLocation.cs | 144 - bc-sharp-crypto/src/asn1/ess/ContentHints.cs | 94 - .../src/asn1/ess/ContentIdentifier.cs | 67 - bc-sharp-crypto/src/asn1/ess/ESSCertID.cs | 94 - bc-sharp-crypto/src/asn1/ess/ESSCertIDv2.cs | 146 - bc-sharp-crypto/src/asn1/ess/OtherCertID.cs | 134 - .../src/asn1/ess/OtherSigningCertificate.cs | 110 - .../src/asn1/ess/SigningCertificate.cs | 109 - .../src/asn1/ess/SigningCertificateV2.cs | 113 - bc-sharp-crypto/src/asn1/gm/GMNamedCurves.cs | 157 - .../src/asn1/gm/GMObjectIdentifiers.cs | 85 - .../src/asn1/gnu/GNUObjectIdentifiers.cs | 36 - .../src/asn1/iana/IANAObjectIdentifiers.cs | 18 - .../src/asn1/icao/CscaMasterList.cs | 83 - .../src/asn1/icao/DataGroupHash.cs | 86 - .../src/asn1/icao/ICAOObjectIdentifiers.cs | 34 - .../src/asn1/icao/LDSSecurityObject.cs | 145 - .../src/asn1/icao/LDSVersionInfo.cs | 61 - .../asn1/isismtt/ISISMTTObjectIdentifiers.cs | 177 - .../src/asn1/isismtt/ocsp/CertHash.cs | 122 - .../asn1/isismtt/ocsp/RequestedCertificate.cs | 188 - .../x509/AdditionalInformationSyntax.cs | 71 - .../src/asn1/isismtt/x509/AdmissionSyntax.cs | 278 -- .../src/asn1/isismtt/x509/Admissions.cs | 187 - .../isismtt/x509/DeclarationOfMajority.cs | 172 - .../src/asn1/isismtt/x509/MonetaryLimit.cs | 122 - .../src/asn1/isismtt/x509/NamingAuthority.cs | 215 - .../asn1/isismtt/x509/ProcurationSyntax.cs | 233 -- .../src/asn1/isismtt/x509/ProfessionInfo.cs | 387 -- .../src/asn1/isismtt/x509/Restriction.cs | 82 - .../src/asn1/kisa/KISAObjectIdentifiers.cs | 8 - .../microsoft/MicrosoftObjectIdentifiers.cs | 19 - .../src/asn1/misc/CAST5CBCParameters.cs | 74 - bc-sharp-crypto/src/asn1/misc/IDEACBCPar.cs | 68 - .../src/asn1/misc/MiscObjectIdentifiers.cs | 79 - .../src/asn1/misc/NetscapeCertType.cs | 54 - .../src/asn1/misc/NetscapeRevocationURL.cs | 18 - .../src/asn1/misc/VerisignCzagExtension.cs | 18 - .../src/asn1/mozilla/PublicKeyAndChallenge.cs | 68 - .../src/asn1/nist/NISTNamedCurves.cs | 102 - .../src/asn1/nist/NISTObjectIdentifiers.cs | 71 - .../src/asn1/ntt/NTTObjectIdentifiers.cs | 14 - .../src/asn1/ocsp/BasicOCSPResponse.cs | 137 - bc-sharp-crypto/src/asn1/ocsp/CertID.cs | 99 - bc-sharp-crypto/src/asn1/ocsp/CertStatus.cs | 96 - bc-sharp-crypto/src/asn1/ocsp/CrlID.cs | 82 - .../src/asn1/ocsp/OCSPObjectIdentifiers.cs | 23 - bc-sharp-crypto/src/asn1/ocsp/OCSPRequest.cs | 89 - bc-sharp-crypto/src/asn1/ocsp/OCSPResponse.cs | 90 - .../src/asn1/ocsp/OCSPResponseStatus.cs | 41 - bc-sharp-crypto/src/asn1/ocsp/Request.cs | 91 - bc-sharp-crypto/src/asn1/ocsp/ResponderID.cs | 107 - .../src/asn1/ocsp/ResponseBytes.cs | 82 - bc-sharp-crypto/src/asn1/ocsp/ResponseData.cs | 158 - bc-sharp-crypto/src/asn1/ocsp/RevokedInfo.cs | 96 - .../src/asn1/ocsp/ServiceLocator.cs | 95 - bc-sharp-crypto/src/asn1/ocsp/Signature.cs | 115 - .../src/asn1/ocsp/SingleResponse.cs | 137 - bc-sharp-crypto/src/asn1/ocsp/TBSRequest.cs | 151 - .../src/asn1/oiw/ElGamalParameter.cs | 47 - .../src/asn1/oiw/OIWObjectIdentifiers.cs | 29 - bc-sharp-crypto/src/asn1/pkcs/Attribute.cs | 79 - .../src/asn1/pkcs/AuthenticatedSafe.cs | 37 - bc-sharp-crypto/src/asn1/pkcs/CertBag.cs | 46 - .../src/asn1/pkcs/CertificationRequest.cs | 87 - .../src/asn1/pkcs/CertificationRequestInfo.cs | 137 - bc-sharp-crypto/src/asn1/pkcs/ContentInfo.cs | 74 - bc-sharp-crypto/src/asn1/pkcs/DHParameter.cs | 72 - .../src/asn1/pkcs/EncryptedData.cs | 105 - .../src/asn1/pkcs/EncryptedPrivateKeyInfo.cs | 79 - .../src/asn1/pkcs/EncryptionScheme.cs | 49 - .../src/asn1/pkcs/IssuerAndSerialNumber.cs | 72 - .../src/asn1/pkcs/KeyDerivationFunc.cs | 21 - bc-sharp-crypto/src/asn1/pkcs/MacData.cs | 96 - bc-sharp-crypto/src/asn1/pkcs/PBEParameter.cs | 60 - .../src/asn1/pkcs/PBES2Parameters.cs | 65 - bc-sharp-crypto/src/asn1/pkcs/PBKDF2Params.cs | 144 - .../src/asn1/pkcs/PKCS12PBEParams.cs | 63 - .../src/asn1/pkcs/PKCSObjectIdentifiers.cs | 293 -- bc-sharp-crypto/src/asn1/pkcs/Pfx.cs | 65 - .../src/asn1/pkcs/PrivateKeyInfo.cs | 135 - .../src/asn1/pkcs/RC2CBCParameter.cs | 80 - .../src/asn1/pkcs/RSAESOAEPparams.cs | 146 - .../src/asn1/pkcs/RSAPrivateKeyStructure.cs | 146 - .../src/asn1/pkcs/RSASSAPSSparams.cs | 166 - bc-sharp-crypto/src/asn1/pkcs/SafeBag.cs | 70 - bc-sharp-crypto/src/asn1/pkcs/SignedData.cs | 157 - bc-sharp-crypto/src/asn1/pkcs/SignerInfo.cs | 154 - .../src/asn1/sec/ECPrivateKeyStructure.cs | 184 - .../src/asn1/sec/SECNamedCurves.cs | 1184 ------ .../src/asn1/sec/SECObjectIdentifiers.cs | 52 - .../src/asn1/smime/SMIMEAttributes.cs | 11 - .../src/asn1/smime/SMIMECapabilities.cs | 134 - .../asn1/smime/SMIMECapabilitiesAttribute.cs | 16 - .../src/asn1/smime/SMIMECapability.cs | 101 - .../src/asn1/smime/SMIMECapabilityVector.cs | 37 - .../SMIMEEncryptionKeyPreferenceAttribute.cs | 44 - .../asn1/teletrust/TeleTrusTNamedCurves.cs | 470 --- .../teletrust/TeleTrusTObjectIdentifiers.cs | 45 - bc-sharp-crypto/src/asn1/tsp/Accuracy.cs | 151 - .../src/asn1/tsp/MessageImprint.cs | 75 - bc-sharp-crypto/src/asn1/tsp/TSTInfo.cs | 250 -- bc-sharp-crypto/src/asn1/tsp/TimeStampReq.cs | 165 - bc-sharp-crypto/src/asn1/tsp/TimeStampResp.cs | 80 - bc-sharp-crypto/src/asn1/util/Asn1Dump.cs | 381 -- bc-sharp-crypto/src/asn1/util/Dump.cs | 30 - bc-sharp-crypto/src/asn1/util/FilterStream.cs | 83 - .../src/asn1/x500/DirectoryString.cs | 77 - .../src/asn1/x509/AccessDescription.cs | 85 - .../src/asn1/x509/AlgorithmIdentifier.cs | 96 - .../src/asn1/x509/AttCertIssuer.cs | 86 - .../src/asn1/x509/AttCertValidityPeriod.cs | 78 - bc-sharp-crypto/src/asn1/x509/Attribute.cs | 82 - .../src/asn1/x509/AttributeCertificate.cs | 86 - .../src/asn1/x509/AttributeCertificateInfo.cs | 156 - .../src/asn1/x509/AttributeTable.cs | 73 - .../asn1/x509/AuthorityInformationAccess.cs | 98 - .../src/asn1/x509/AuthorityKeyIdentifier.cs | 211 - .../src/asn1/x509/BasicConstraints.cs | 133 - bc-sharp-crypto/src/asn1/x509/CRLDistPoint.cs | 93 - bc-sharp-crypto/src/asn1/x509/CRLNumber.cs | 30 - bc-sharp-crypto/src/asn1/x509/CRLReason.cs | 61 - bc-sharp-crypto/src/asn1/x509/CertPolicyId.cs | 20 - .../src/asn1/x509/CertificateList.cs | 113 - .../src/asn1/x509/CertificatePair.cs | 162 - .../src/asn1/x509/CertificatePolicies.cs | 81 - bc-sharp-crypto/src/asn1/x509/DSAParameter.cs | 78 - bc-sharp-crypto/src/asn1/x509/DigestInfo.cs | 78 - bc-sharp-crypto/src/asn1/x509/DisplayText.cs | 174 - .../src/asn1/x509/DistributionPoint.cs | 161 - .../src/asn1/x509/DistributionPointName.cs | 130 - .../src/asn1/x509/ExtendedKeyUsage.cs | 132 - bc-sharp-crypto/src/asn1/x509/GeneralName.cs | 425 -- bc-sharp-crypto/src/asn1/x509/GeneralNames.cs | 95 - .../src/asn1/x509/GeneralSubtree.cs | 189 - bc-sharp-crypto/src/asn1/x509/Holder.cs | 259 -- .../src/asn1/x509/IetfAttrSyntax.cs | 161 - bc-sharp-crypto/src/asn1/x509/IssuerSerial.cs | 100 - .../src/asn1/x509/IssuingDistributionPoint.cs | 247 -- bc-sharp-crypto/src/asn1/x509/KeyPurposeId.cs | 38 - bc-sharp-crypto/src/asn1/x509/KeyUsage.cs | 78 - .../src/asn1/x509/NameConstraints.cs | 120 - .../src/asn1/x509/NoticeReference.cs | 143 - .../src/asn1/x509/ObjectDigestInfo.cs | 179 - .../src/asn1/x509/PolicyInformation.cs | 80 - .../src/asn1/x509/PolicyMappings.cs | 70 - .../src/asn1/x509/PolicyQualifierId.cs | 28 - .../src/asn1/x509/PolicyQualifierInfo.cs | 95 - .../src/asn1/x509/PrivateKeyUsagePeriod.cs | 84 - .../src/asn1/x509/RSAPublicKeyStructure.cs | 93 - bc-sharp-crypto/src/asn1/x509/ReasonFlags.cs | 45 - bc-sharp-crypto/src/asn1/x509/RoleSyntax.cs | 230 -- .../asn1/x509/SubjectDirectoryAttributes.cs | 142 - .../src/asn1/x509/SubjectKeyIdentifier.cs | 142 - .../src/asn1/x509/SubjectPublicKeyInfo.cs | 102 - bc-sharp-crypto/src/asn1/x509/TBSCertList.cs | 275 -- .../src/asn1/x509/TBSCertificateStructure.cs | 185 - bc-sharp-crypto/src/asn1/x509/Target.cs | 141 - .../src/asn1/x509/TargetInformation.cs | 125 - bc-sharp-crypto/src/asn1/x509/Targets.cs | 123 - bc-sharp-crypto/src/asn1/x509/Time.cs | 122 - bc-sharp-crypto/src/asn1/x509/UserNotice.cs | 130 - .../asn1/x509/V1TBSCertificateGenerator.cs | 108 - .../V2AttributeCertificateInfoGenerator.cs | 137 - bc-sharp-crypto/src/asn1/x509/V2Form.cs | 137 - .../src/asn1/x509/V2TBSCertListGenerator.cs | 201 - .../asn1/x509/V3TBSCertificateGenerator.cs | 168 - .../src/asn1/x509/X509Attributes.cs | 9 - .../src/asn1/x509/X509CertificateStructure.cs | 132 - .../asn1/x509/X509DefaultEntryConverter.cs | 63 - .../src/asn1/x509/X509Extension.cs | 79 - .../src/asn1/x509/X509Extensions.cs | 456 --- .../src/asn1/x509/X509ExtensionsGenerator.cs | 81 - bc-sharp-crypto/src/asn1/x509/X509Name.cs | 1077 ----- .../src/asn1/x509/X509NameEntryConverter.cs | 89 - .../src/asn1/x509/X509NameTokenizer.cs | 104 - .../src/asn1/x509/X509ObjectIdentifiers.cs | 59 - .../src/asn1/x509/qualified/BiometricData.cs | 110 - .../x509/qualified/ETSIQCObjectIdentifiers.cs | 19 - .../x509/qualified/Iso4217CurrencyCode.cs | 84 - .../src/asn1/x509/qualified/MonetaryValue.cs | 83 - .../src/asn1/x509/qualified/QCStatement.cs | 84 - .../qualified/RFC3739QCObjectIdentifiers.cs | 21 - .../x509/qualified/SemanticsInformation.cs | 124 - .../x509/qualified/TypeOfBiometricData.cs | 91 - .../src/asn1/x509/sigi/NameOrPseudonym.cs | 178 - .../src/asn1/x509/sigi/PersonalData.cs | 211 - .../asn1/x509/sigi/SigIObjectIdentifiers.cs | 49 - .../src/asn1/x9/DHDomainParameters.cs | 118 - bc-sharp-crypto/src/asn1/x9/DHPublicKey.cs | 46 - .../src/asn1/x9/DHValidationParms.cs | 64 - .../src/asn1/x9/ECNamedCurveTable.cs | 162 - .../src/asn1/x9/KeySpecificInfo.cs | 58 - bc-sharp-crypto/src/asn1/x9/OtherInfo.cs | 88 - .../src/asn1/x9/X962NamedCurves.cs | 751 ---- bc-sharp-crypto/src/asn1/x9/X962Parameters.cs | 88 - bc-sharp-crypto/src/asn1/x9/X9Curve.cs | 146 - bc-sharp-crypto/src/asn1/x9/X9ECParameters.cs | 233 -- .../src/asn1/x9/X9ECParametersHolder.cs | 25 - bc-sharp-crypto/src/asn1/x9/X9ECPoint.cs | 80 - bc-sharp-crypto/src/asn1/x9/X9FieldElement.cs | 69 - bc-sharp-crypto/src/asn1/x9/X9FieldID.cs | 132 - .../src/asn1/x9/X9IntegerConverter.cs | 40 - .../src/asn1/x9/X9ObjectIdentifiers.cs | 137 - .../src/bcpg/ArmoredInputStream.cs | 524 --- .../src/bcpg/ArmoredOutputStream.cs | 375 -- bc-sharp-crypto/src/bcpg/BcpgInputStream.cs | 363 -- bc-sharp-crypto/src/bcpg/BcpgObject.cs | 22 - bc-sharp-crypto/src/bcpg/BcpgOutputStream.cs | 404 -- .../src/bcpg/CompressedDataPacket.cs | 24 - .../src/bcpg/CompressionAlgorithmTags.cs | 11 - bc-sharp-crypto/src/bcpg/ContainedPacket.cs | 22 - bc-sharp-crypto/src/bcpg/Crc24.cs | 46 - bc-sharp-crypto/src/bcpg/DsaPublicBcpgKey.cs | 80 - bc-sharp-crypto/src/bcpg/DsaSecretBcpgKey.cs | 61 - bc-sharp-crypto/src/bcpg/ECDHPublicBCPGKey.cs | 102 - .../src/bcpg/ECDsaPublicBCPGKey.cs | 34 - bc-sharp-crypto/src/bcpg/ECPublicBCPGKey.cs | 97 - bc-sharp-crypto/src/bcpg/ECSecretBCPGKey.cs | 56 - .../src/bcpg/ElGamalPublicBcpgKey.cs | 71 - .../src/bcpg/ElGamalSecretBcpgKey.cs | 61 - .../src/bcpg/ExperimentalPacket.cs | 38 - bc-sharp-crypto/src/bcpg/HashAlgorithmTags.cs | 19 - bc-sharp-crypto/src/bcpg/IBcpgKey.cs | 16 - bc-sharp-crypto/src/bcpg/InputStreamPacket.cs | 20 - bc-sharp-crypto/src/bcpg/LiteralDataPacket.cs | 57 - bc-sharp-crypto/src/bcpg/MPInteger.cs | 59 - bc-sharp-crypto/src/bcpg/MarkerPacket.cs | 24 - .../src/bcpg/ModDetectionCodePacket.cs | 42 - .../src/bcpg/OnePassSignaturePacket.cs | 93 - .../src/bcpg/OutputStreamPacket.cs | 24 - bc-sharp-crypto/src/bcpg/Packet.cs | 7 - bc-sharp-crypto/src/bcpg/PacketTags.cs | 30 - .../src/bcpg/PublicKeyAlgorithmTags.cs | 32 - .../src/bcpg/PublicKeyEncSessionPacket.cs | 115 - bc-sharp-crypto/src/bcpg/PublicKeyPacket.cs | 121 - .../src/bcpg/PublicSubkeyPacket.cs | 30 - bc-sharp-crypto/src/bcpg/RsaPublicBcpgKey.cs | 66 - bc-sharp-crypto/src/bcpg/RsaSecretBcpgKey.cs | 114 - bc-sharp-crypto/src/bcpg/S2k.cs | 149 - bc-sharp-crypto/src/bcpg/SecretKeyPacket.cs | 170 - .../src/bcpg/SecretSubkeyPacket.cs | 43 - bc-sharp-crypto/src/bcpg/SignaturePacket.cs | 477 --- .../src/bcpg/SignatureSubpacket.cs | 94 - .../src/bcpg/SignatureSubpacketTags.cs | 33 - .../src/bcpg/SignatureSubpacketsReader.cs | 128 - .../src/bcpg/SymmetricEncDataPacket.cs | 15 - .../src/bcpg/SymmetricEncIntegrityPacket.cs | 18 - .../src/bcpg/SymmetricKeyAlgorithmTags.cs | 23 - .../src/bcpg/SymmetricKeyEncSessionPacket.cs | 91 - bc-sharp-crypto/src/bcpg/TrustPacket.cs | 43 - .../src/bcpg/UserAttributePacket.cs | 61 - .../src/bcpg/UserAttributeSubpacket.cs | 90 - .../src/bcpg/UserAttributeSubpacketTags.cs | 10 - .../src/bcpg/UserAttributeSubpacketsReader.cs | 65 - bc-sharp-crypto/src/bcpg/UserIdPacket.cs | 37 - bc-sharp-crypto/src/bcpg/attr/ImageAttrib.cs | 72 - .../src/bcpg/sig/EmbeddedSignature.cs | 19 - bc-sharp-crypto/src/bcpg/sig/Exportable.cs | 46 - bc-sharp-crypto/src/bcpg/sig/Features.cs | 75 - bc-sharp-crypto/src/bcpg/sig/IssuerKeyId.cs | 62 - .../src/bcpg/sig/KeyExpirationTime.cs | 55 - bc-sharp-crypto/src/bcpg/sig/KeyFlags.cs | 75 - bc-sharp-crypto/src/bcpg/sig/NotationData.cs | 113 - .../src/bcpg/sig/PreferredAlgorithms.cs | 53 - bc-sharp-crypto/src/bcpg/sig/PrimaryUserId.cs | 47 - bc-sharp-crypto/src/bcpg/sig/Revocable.cs | 47 - bc-sharp-crypto/src/bcpg/sig/RevocationKey.cs | 63 - .../src/bcpg/sig/RevocationKeyTags.cs | 9 - .../src/bcpg/sig/RevocationReason.cs | 59 - .../src/bcpg/sig/RevocationReasonTags.cs | 14 - .../src/bcpg/sig/SignatureCreationTime.cs | 51 - .../src/bcpg/sig/SignatureExpirationTime.cs | 51 - bc-sharp-crypto/src/bcpg/sig/SignerUserId.cs | 53 - .../src/bcpg/sig/TrustSignature.cs | 44 - .../src/cms/BaseDigestCalculator.cs | 23 - .../CMSAttributeTableGenerationException.cs | 28 - .../src/cms/CMSAttributeTableGenerator.cs | 25 - .../src/cms/CMSAuthEnvelopedData.cs | 112 - .../src/cms/CMSAuthEnvelopedGenerator.cs | 16 - .../src/cms/CMSAuthenticatedData.cs | 137 - .../src/cms/CMSAuthenticatedDataGenerator.cs | 156 - .../src/cms/CMSAuthenticatedDataParser.cs | 214 - .../CMSAuthenticatedDataStreamGenerator.cs | 297 -- .../src/cms/CMSAuthenticatedGenerator.cs | 35 - bc-sharp-crypto/src/cms/CMSCompressedData.cs | 108 - .../src/cms/CMSCompressedDataGenerator.cs | 67 - .../src/cms/CMSCompressedDataParser.cs | 57 - .../cms/CMSCompressedDataStreamGenerator.cs | 158 - .../src/cms/CMSContentInfoParser.cs | 48 - bc-sharp-crypto/src/cms/CMSEnvelopedData.cs | 115 - .../src/cms/CMSEnvelopedDataGenerator.cs | 178 - .../src/cms/CMSEnvelopedDataParser.cs | 161 - .../cms/CMSEnvelopedDataStreamGenerator.cs | 308 -- .../src/cms/CMSEnvelopedGenerator.cs | 331 -- bc-sharp-crypto/src/cms/CMSEnvelopedHelper.cs | 311 -- bc-sharp-crypto/src/cms/CMSException.cs | 28 - bc-sharp-crypto/src/cms/CMSPBEKey.cs | 109 - bc-sharp-crypto/src/cms/CMSProcessable.cs | 19 - .../src/cms/CMSProcessableByteArray.cs | 36 - bc-sharp-crypto/src/cms/CMSProcessableFile.cs | 52 - .../src/cms/CMSProcessableInputStream.cs | 53 - bc-sharp-crypto/src/cms/CMSReadable.cs | 10 - bc-sharp-crypto/src/cms/CMSSecureReadable.cs | 14 - bc-sharp-crypto/src/cms/CMSSignedData.cs | 425 -- .../src/cms/CMSSignedDataGenerator.cs | 585 --- .../src/cms/CMSSignedDataParser.cs | 450 --- .../src/cms/CMSSignedDataStreamGenerator.cs | 929 ----- bc-sharp-crypto/src/cms/CMSSignedGenerator.cs | 267 -- bc-sharp-crypto/src/cms/CMSSignedHelper.cs | 426 -- bc-sharp-crypto/src/cms/CMSStreamException.cs | 29 - bc-sharp-crypto/src/cms/CMSTypedStream.cs | 72 - bc-sharp-crypto/src/cms/CMSUtils.cs | 186 - .../cms/CounterSignatureDigestCalculator.cs | 28 - ...ultAuthenticatedAttributeTableGenerator.cs | 90 - .../DefaultSignedAttributeTableGenerator.cs | 124 - bc-sharp-crypto/src/cms/DigOutputStream.cs | 28 - bc-sharp-crypto/src/cms/IDigestCalculator.cs | 9 - .../src/cms/KEKRecipientInfoGenerator.cs | 138 - .../src/cms/KEKRecipientInformation.cs | 62 - .../src/cms/KeyAgreeRecipientInfoGenerator.cs | 171 - .../src/cms/KeyAgreeRecipientInformation.cs | 226 -- .../src/cms/KeyTransRecipientInfoGenerator.cs | 87 - .../src/cms/KeyTransRecipientInformation.cs | 113 - bc-sharp-crypto/src/cms/MacOutputStream.cs | 28 - bc-sharp-crypto/src/cms/OriginatorId.cs | 51 - .../src/cms/OriginatorInfoGenerator.cs | 42 - .../src/cms/OriginatorInformation.cs | 96 - bc-sharp-crypto/src/cms/PKCS5Scheme2PBEKey.cs | 64 - .../src/cms/PKCS5Scheme2UTF8PBEKey.cs | 64 - .../src/cms/PasswordRecipientInfoGenerator.cs | 70 - .../src/cms/PasswordRecipientInformation.cs | 79 - bc-sharp-crypto/src/cms/RecipientId.cs | 58 - .../src/cms/RecipientInfoGenerator.cs | 26 - .../src/cms/RecipientInformation.cs | 126 - .../src/cms/RecipientInformationStore.cs | 86 - bc-sharp-crypto/src/cms/SigOutputStream.cs | 43 - bc-sharp-crypto/src/cms/SignerId.cs | 51 - .../src/cms/SignerInfoGenerator.cs | 166 - bc-sharp-crypto/src/cms/SignerInformation.cs | 761 ---- .../src/cms/SignerInformationStore.cs | 95 - .../src/cms/SimpleAttributeTableGenerator.cs | 28 - .../src/crypto/AsymmetricCipherKeyPair.cs | 52 - .../src/crypto/AsymmetricKeyParameter.cs | 47 - .../src/crypto/BufferedAeadBlockCipher.cs | 247 -- .../crypto/BufferedAsymmetricBlockCipher.cs | 152 - .../src/crypto/BufferedBlockCipher.cs | 367 -- .../src/crypto/BufferedCipherBase.cs | 113 - .../src/crypto/BufferedIesCipher.cs | 113 - .../src/crypto/BufferedStreamCipher.cs | 131 - bc-sharp-crypto/src/crypto/Check.cs | 25 - .../src/crypto/CipherKeyGenerator.cs | 83 - bc-sharp-crypto/src/crypto/CryptoException.cs | 28 - .../src/crypto/DataLengthException.cs | 42 - .../src/crypto/IAsymmetricBlockCipher.cs | 30 - .../IAsymmetricCipherKeyPairGenerator.cs | 24 - bc-sharp-crypto/src/crypto/IBasicAgreement.cs | 29 - bc-sharp-crypto/src/crypto/IBlockCipher.cs | 36 - bc-sharp-crypto/src/crypto/IBlockResult.cs | 24 - bc-sharp-crypto/src/crypto/IBufferedCipher.cs | 44 - .../src/crypto/ICipherParameters.cs | 11 - bc-sharp-crypto/src/crypto/IDSA.cs | 40 - .../src/crypto/IDerivationFunction.cs | 24 - .../src/crypto/IDerivationParameters.cs | 11 - bc-sharp-crypto/src/crypto/IDigest.cs | 61 - bc-sharp-crypto/src/crypto/IEntropySource.cs | 29 - .../src/crypto/IEntropySourceProvider.cs | 17 - bc-sharp-crypto/src/crypto/IMac.cs | 69 - .../src/crypto/ISignatureFactory.cs | 23 - bc-sharp-crypto/src/crypto/ISigner.cs | 50 - .../src/crypto/ISignerWithRecovery.cs | 37 - .../src/crypto/IStreamCalculator.cs | 23 - bc-sharp-crypto/src/crypto/IStreamCipher.cs | 45 - bc-sharp-crypto/src/crypto/IVerifier.cs | 25 - .../src/crypto/IVerifierFactory.cs | 21 - .../src/crypto/IVerifierFactoryProvider.cs | 18 - bc-sharp-crypto/src/crypto/IWrapper.cs | 18 - bc-sharp-crypto/src/crypto/IXof.cs | 31 - .../src/crypto/InvalidCipherTextException.cs | 40 - .../src/crypto/KeyGenerationParameters.cs | 55 - .../src/crypto/MaxBytesExceededException.cs | 32 - .../src/crypto/OutputLengthException.cs | 28 - .../src/crypto/PbeParametersGenerator.cs | 202 - .../src/crypto/StreamBlockCipher.cs | 109 - .../src/crypto/agreement/DHAgreement.cs | 99 - .../src/crypto/agreement/DHBasicAgreement.cs | 72 - .../src/crypto/agreement/DHStandardGroups.cs | 307 -- .../crypto/agreement/ECDHBasicAgreement.cs | 60 - .../crypto/agreement/ECDHCBasicAgreement.cs | 68 - .../agreement/ECDHWithKdfBasicAgreement.cs | 63 - .../crypto/agreement/ECMqvBasicAgreement.cs | 93 - .../agreement/ECMqvWithKdfBasicAgreement.cs | 63 - .../agreement/jpake/JPakeParticipant.cs | 456 --- .../agreement/jpake/JPakePrimeOrderGroup.cs | 103 - .../agreement/jpake/JPakePrimeOrderGroups.cs | 108 - .../agreement/jpake/JPakeRound1Payload.cs | 101 - .../agreement/jpake/JPakeRound2Payload.cs | 72 - .../agreement/jpake/JPakeRound3Payload.cs | 51 - .../crypto/agreement/jpake/JPakeUtilities.cs | 390 -- .../crypto/agreement/kdf/DHKdfParameters.cs | 57 - .../crypto/agreement/kdf/DHKekGenerator.cs | 112 - .../crypto/agreement/kdf/ECDHKekGenerator.cs | 55 - .../src/crypto/agreement/srp/SRP6Client.cs | 164 - .../src/crypto/agreement/srp/SRP6Server.cs | 163 - .../agreement/srp/SRP6StandardGroups.cs | 159 - .../src/crypto/agreement/srp/SRP6Utilities.cs | 153 - .../agreement/srp/SRP6VerifierGenerator.cs | 55 - .../src/crypto/digests/DSTU7564Digest.cs | 562 --- .../src/crypto/digests/GOST3411Digest.cs | 356 -- .../src/crypto/digests/GOST3411_2012Digest.cs | 1036 ----- .../crypto/digests/GOST3411_2012_256Digest.cs | 54 - .../crypto/digests/GOST3411_2012_512Digest.cs | 43 - .../src/crypto/digests/GeneralDigest.cs | 133 - .../src/crypto/digests/KeccakDigest.cs | 479 --- .../src/crypto/digests/LongDigest.cs | 355 -- .../src/crypto/digests/MD2Digest.cs | 269 -- .../src/crypto/digests/MD4Digest.cs | 292 -- .../src/crypto/digests/MD5Digest.cs | 313 -- .../src/crypto/digests/NonMemoableDigest.cs | 62 - .../src/crypto/digests/NullDigest.cs | 49 - .../src/crypto/digests/RipeMD128Digest.cs | 484 --- .../src/crypto/digests/RipeMD160Digest.cs | 445 -- .../src/crypto/digests/RipeMD256Digest.cs | 430 -- .../src/crypto/digests/RipeMD320Digest.cs | 459 --- .../src/crypto/digests/SHA3Digest.cs | 85 - .../src/crypto/digests/SM3Digest.cs | 328 -- .../src/crypto/digests/Sha1Digest.cs | 284 -- .../src/crypto/digests/Sha224Digest.cs | 289 -- .../src/crypto/digests/Sha256Digest.cs | 330 -- .../src/crypto/digests/Sha384Digest.cs | 101 - .../src/crypto/digests/Sha512Digest.cs | 104 - .../src/crypto/digests/Sha512tDigest.cs | 200 - .../src/crypto/digests/ShakeDigest.cs | 119 - .../src/crypto/digests/ShortenedDigest.cs | 82 - .../src/crypto/digests/SkeinDigest.cs | 117 - .../src/crypto/digests/SkeinEngine.cs | 804 ---- .../src/crypto/digests/TigerDigest.cs | 883 ---- .../src/crypto/digests/WhirlpoolDigest.cs | 413 -- .../src/crypto/ec/CustomNamedCurves.cs | 913 ----- .../src/crypto/encodings/ISO9796d1Encoding.cs | 273 -- .../src/crypto/encodings/OaepEncoding.cs | 345 -- .../src/crypto/encodings/Pkcs1Encoding.cs | 384 -- .../src/crypto/engines/AesEngine.cs | 610 --- .../src/crypto/engines/AesFastEngine.cs | 948 ----- .../src/crypto/engines/AesLightEngine.cs | 504 --- .../src/crypto/engines/AesWrapEngine.cs | 16 - .../src/crypto/engines/BlowfishEngine.cs | 553 --- .../src/crypto/engines/CamelliaEngine.cs | 668 --- .../src/crypto/engines/CamelliaLightEngine.cs | 580 --- .../src/crypto/engines/CamelliaWrapEngine.cs | 16 - .../src/crypto/engines/Cast5Engine.cs | 802 ---- .../src/crypto/engines/Cast6Engine.cs | 279 -- .../src/crypto/engines/ChaCha7539Engine.cs | 65 - .../src/crypto/engines/ChaChaEngine.cs | 157 - .../src/crypto/engines/DesEdeEngine.cs | 100 - .../src/crypto/engines/DesEdeWrapEngine.cs | 322 -- .../src/crypto/engines/DesEngine.cs | 475 --- .../src/crypto/engines/Dstu7624Engine.cs | 766 ---- .../src/crypto/engines/Dstu7624WrapEngine.cs | 216 - .../src/crypto/engines/ElGamalEngine.cs | 178 - .../src/crypto/engines/GOST28147Engine.cs | 368 -- .../src/crypto/engines/HC128Engine.cs | 235 -- .../src/crypto/engines/HC256Engine.cs | 224 - .../src/crypto/engines/ISAACEngine.cs | 212 - .../src/crypto/engines/IdeaEngine.cs | 332 -- .../src/crypto/engines/IesEngine.cs | 243 -- .../src/crypto/engines/NaccacheSternEngine.cs | 358 -- .../src/crypto/engines/NoekeonEngine.cs | 241 -- .../src/crypto/engines/NullEngine.cs | 69 - .../src/crypto/engines/RC2Engine.cs | 311 -- .../src/crypto/engines/RC2WrapEngine.cs | 370 -- .../src/crypto/engines/RC4Engine.cs | 139 - .../src/crypto/engines/RC532Engine.cs | 294 -- .../src/crypto/engines/RC564Engine.cs | 295 -- .../src/crypto/engines/RC6Engine.cs | 361 -- .../src/crypto/engines/RFC3211WrapEngine.cs | 168 - .../src/crypto/engines/RFC3394WrapEngine.cs | 178 - .../src/crypto/engines/RSABlindedEngine.cs | 128 - .../src/crypto/engines/RSABlindingEngine.cs | 139 - .../src/crypto/engines/RSACoreEngine.cs | 156 - .../src/crypto/engines/RijndaelEngine.cs | 738 ---- .../src/crypto/engines/RsaEngine.cs | 78 - .../src/crypto/engines/SEEDEngine.cs | 360 -- .../src/crypto/engines/SEEDWrapEngine.cs | 16 - .../src/crypto/engines/Salsa20Engine.cs | 362 -- .../src/crypto/engines/SerpentEngine.cs | 292 -- .../src/crypto/engines/SerpentEngineBase.cs | 469 --- .../src/crypto/engines/SkipjackEngine.cs | 254 -- .../src/crypto/engines/TEAEngine.cs | 166 - .../src/crypto/engines/ThreefishEngine.cs | 1491 ------- .../src/crypto/engines/TnepresEngine.cs | 299 -- .../src/crypto/engines/TwofishEngine.cs | 675 ---- .../src/crypto/engines/VMPCEngine.cs | 133 - .../src/crypto/engines/VMPCKSA3Engine.cs | 51 - .../src/crypto/engines/XSalsa20Engine.cs | 64 - .../src/crypto/engines/XTEAEngine.cs | 166 - .../src/crypto/generators/BCrypt.cs | 617 --- .../generators/BaseKdfBytesGenerator.cs | 132 - .../generators/DHBasicKeyPairGenerator.cs | 38 - .../crypto/generators/DHKeyGeneratorHelper.cs | 72 - .../crypto/generators/DHKeyPairGenerator.cs | 38 - .../generators/DHParametersGenerator.cs | 45 - .../crypto/generators/DHParametersHelper.cs | 156 - .../crypto/generators/DesEdeKeyGenerator.cs | 67 - .../src/crypto/generators/DesKeyGenerator.cs | 57 - .../crypto/generators/DsaKeyPairGenerator.cs | 72 - .../generators/DsaParametersGenerator.cs | 355 -- .../crypto/generators/ECKeyPairGenerator.cs | 162 - .../generators/ElGamalKeyPairGenerator.cs | 40 - .../generators/ElGamalParametersGenerator.cs | 46 - .../generators/GOST3410KeyPairGenerator.cs | 82 - .../generators/GOST3410ParametersGenerator.cs | 530 --- .../crypto/generators/HKDFBytesGenerator.cs | 153 - .../crypto/generators/Kdf1BytesGenerator.cs | 26 - .../crypto/generators/Kdf2BytesGenerator.cs | 27 - .../crypto/generators/Mgf1BytesGenerator.cs | 117 - .../NaccacheSternKeyPairGenerator.cs | 268 -- .../src/crypto/generators/OpenBsdBCrypt.cs | 270 -- .../OpenSSLPBEParametersGenerator.cs | 167 - .../generators/Pkcs12ParametersGenerator.cs | 243 -- .../generators/Pkcs5S1ParametersGenerator.cs | 160 - .../generators/Pkcs5S2ParametersGenerator.cs | 178 - .../crypto/generators/Poly1305KeyGenerator.cs | 116 - .../generators/RSABlindingFactorGenerator.cs | 69 - .../crypto/generators/RsaKeyPairGenerator.cs | 163 - .../src/crypto/generators/SCrypt.cs | 140 - bc-sharp-crypto/src/crypto/io/CipherStream.cs | 252 -- bc-sharp-crypto/src/crypto/io/DigestStream.cs | 151 - bc-sharp-crypto/src/crypto/io/MacStream.cs | 150 - bc-sharp-crypto/src/crypto/io/SignerStream.cs | 151 - bc-sharp-crypto/src/crypto/macs/CMac.cs | 257 -- .../src/crypto/macs/CbcBlockCipherMac.cs | 209 - .../src/crypto/macs/CfbBlockCipherMac.cs | 368 -- .../src/crypto/macs/DSTU7564Mac.cs | 143 - .../src/crypto/macs/DSTU7624Mac.cs | 160 - bc-sharp-crypto/src/crypto/macs/GMac.cs | 112 - .../src/crypto/macs/GOST28147Mac.cs | 297 -- bc-sharp-crypto/src/crypto/macs/HMac.cs | 154 - .../src/crypto/macs/ISO9797Alg3Mac.cs | 275 -- bc-sharp-crypto/src/crypto/macs/Poly1305.cs | 293 -- bc-sharp-crypto/src/crypto/macs/SipHash.cs | 199 - bc-sharp-crypto/src/crypto/macs/SkeinMac.cs | 118 - bc-sharp-crypto/src/crypto/macs/VMPCMac.cs | 173 - .../src/crypto/modes/CbcBlockCipher.cs | 241 -- .../src/crypto/modes/CcmBlockCipher.cs | 449 --- .../src/crypto/modes/CfbBlockCipher.cs | 224 - .../src/crypto/modes/CtsBlockCipher.cs | 253 -- .../src/crypto/modes/EAXBlockCipher.cs | 379 -- .../src/crypto/modes/GCMBlockCipher.cs | 594 --- .../src/crypto/modes/GOFBBlockCipher.cs | 234 -- .../src/crypto/modes/IAeadBlockCipher.cs | 105 - .../src/crypto/modes/KCcmBlockCipher.cs | 490 --- .../src/crypto/modes/KCtrBlockCipher.cs | 235 -- .../src/crypto/modes/OCBBlockCipher.cs | 565 --- .../src/crypto/modes/OfbBlockCipher.cs | 182 - .../src/crypto/modes/OpenPgpCfbBlockCipher.cs | 337 -- .../src/crypto/modes/SicBlockCipher.cs | 120 - .../crypto/modes/gcm/BasicGcmExponentiator.cs | 40 - .../crypto/modes/gcm/BasicGcmMultiplier.cs | 22 - .../src/crypto/modes/gcm/GcmUtilities.cs | 319 -- .../src/crypto/modes/gcm/IGcmExponentiator.cs | 10 - .../src/crypto/modes/gcm/IGcmMultiplier.cs | 10 - .../modes/gcm/Tables1kGcmExponentiator.cs | 59 - .../modes/gcm/Tables64kGcmMultiplier.cs | 77 - .../crypto/modes/gcm/Tables8kGcmMultiplier.cs | 103 - .../src/crypto/operators/Asn1Signature.cs | 555 --- .../src/crypto/paddings/BlockCipherPadding.cs | 43 - .../src/crypto/paddings/ISO10126d2Padding.cs | 76 - .../src/crypto/paddings/ISO7816d4Padding.cs | 79 - .../paddings/PaddedBufferedBlockCipher.cs | 285 -- .../src/crypto/paddings/Pkcs7Padding.cs | 76 - .../src/crypto/paddings/TbcPadding.cs | 79 - .../src/crypto/paddings/X923Padding.cs | 82 - .../src/crypto/paddings/ZeroBytePadding.cs | 68 - .../src/crypto/parameters/AEADParameters.cs | 65 - .../src/crypto/parameters/CcmParameters.cs | 26 - .../parameters/DHKeyGenerationParameters.cs | 31 - .../src/crypto/parameters/DHKeyParameters.cs | 76 - .../src/crypto/parameters/DHParameters.cs | 185 - .../parameters/DHPrivateKeyParameters.cs | 60 - .../parameters/DHPublicKeyParameters.cs | 79 - .../parameters/DHValidationParameters.cs | 59 - .../DSAParameterGenerationParameters.cs | 74 - .../src/crypto/parameters/DesEdeParameters.cs | 140 - .../src/crypto/parameters/DesParameters.cs | 139 - .../parameters/DsaKeyGenerationParameters.cs | 26 - .../src/crypto/parameters/DsaKeyParameters.cs | 59 - .../src/crypto/parameters/DsaParameters.cs | 85 - .../parameters/DsaPrivateKeyParameters.cs | 53 - .../parameters/DsaPublicKeyParameters.cs | 68 - .../parameters/DsaValidationParameters.cs | 72 - .../crypto/parameters/ECDomainParameters.cs | 117 - .../parameters/ECKeyGenerationParameters.cs | 41 - .../src/crypto/parameters/ECKeyParameters.cs | 136 - .../parameters/ECPrivateKeyParameters.cs | 87 - .../parameters/ECPublicKeyParameters.cs | 101 - .../ElGamalKeyGenerationParameters.cs | 31 - .../crypto/parameters/ElGamalKeyParameters.cs | 59 - .../crypto/parameters/ElGamalParameters.cs | 81 - .../parameters/ElGamalPrivateKeyParameters.cs | 53 - .../parameters/ElGamalPublicKeyParameters.cs | 53 - .../GOST3410KeyGenerationParameters.cs | 55 - .../parameters/GOST3410KeyParameters.cs | 58 - .../crypto/parameters/GOST3410Parameters.cs | 86 - .../GOST3410PrivateKeyParameters.cs | 41 - .../parameters/GOST3410PublicKeyParameters.cs | 40 - .../GOST3410ValidationParameters.cs | 51 - .../src/crypto/parameters/HKDFParameters.cs | 119 - .../parameters/ISO18033KDFParameters.cs | 25 - .../src/crypto/parameters/IesParameters.cs | 49 - .../parameters/IesWithCipherParameters.cs | 33 - .../src/crypto/parameters/KdfParameters.cs | 33 - .../src/crypto/parameters/KeyParameter.cs | 43 - .../src/crypto/parameters/MgfParameters.cs | 31 - .../crypto/parameters/MqvPrivateParameters.cs | 64 - .../crypto/parameters/MqvPublicParameters.cs | 36 - .../NaccacheSternKeyGenerationParameters.cs | 98 - .../parameters/NaccacheSternKeyParameters.cs | 44 - .../NaccacheSternPrivateKeyParameters.cs | 79 - .../src/crypto/parameters/ParametersWithIV.cs | 43 - .../crypto/parameters/ParametersWithRandom.cs | 48 - .../crypto/parameters/ParametersWithSBox.cs | 24 - .../crypto/parameters/ParametersWithSalt.cs | 39 - .../src/crypto/parameters/RC2Parameters.cs | 47 - .../src/crypto/parameters/RC5Parameters.cs | 27 - .../parameters/RSABlindingParameters.cs | 34 - .../parameters/RsaKeyGenerationParameters.cs | 55 - .../src/crypto/parameters/RsaKeyParameters.cs | 85 - .../parameters/RsaPrivateCrtKeyParameters.cs | 104 - .../src/crypto/parameters/SkeinParameters.cs | 286 -- .../crypto/parameters/Srp6GroupParameters.cs | 27 - .../TweakableBlockCipherParameters.cs | 40 - .../crypto/prng/BasicEntropySourceProvider.cs | 71 - .../prng/CryptoApiEntropySourceProvider.cs | 70 - .../crypto/prng/CryptoApiRandomGenerator.cs | 66 - .../src/crypto/prng/DigestRandomGenerator.cs | 127 - .../src/crypto/prng/EntropyUtilities.cs | 30 - .../src/crypto/prng/IDrbgProvider.cs | 11 - .../src/crypto/prng/IRandomGenerator.cs | 26 - .../crypto/prng/ReversedWindowGenerator.cs | 98 - .../src/crypto/prng/SP800SecureRandom.cs | 95 - .../crypto/prng/SP800SecureRandomBuilder.cs | 208 - .../src/crypto/prng/ThreadedSeedGenerator.cs | 129 - .../src/crypto/prng/VMPCRandomGenerator.cs | 114 - bc-sharp-crypto/src/crypto/prng/X931Rng.cs | 146 - .../src/crypto/prng/X931SecureRandom.cs | 70 - .../crypto/prng/X931SecureRandomBuilder.cs | 87 - .../src/crypto/prng/drbg/CtrSP800Drbg.cs | 466 --- .../src/crypto/prng/drbg/DrbgUtilities.cs | 103 - .../src/crypto/prng/drbg/HMacSP800Drbg.cs | 186 - .../src/crypto/prng/drbg/HashSP800Drbg.cs | 287 -- .../src/crypto/prng/drbg/ISP80090Drbg.cs | 35 - .../src/crypto/signers/DsaDigestSigner.cs | 145 - .../src/crypto/signers/DsaSigner.cs | 156 - .../src/crypto/signers/ECDsaSigner.cs | 240 -- .../src/crypto/signers/ECGOST3410Signer.cs | 162 - .../src/crypto/signers/ECNRSigner.cs | 188 - .../crypto/signers/GOST3410DigestSigner.cs | 145 - .../src/crypto/signers/GOST3410Signer.cs | 132 - .../src/crypto/signers/GenericSigner.cs | 130 - .../src/crypto/signers/HMacDsaKCalculator.cs | 150 - .../src/crypto/signers/IDsaKCalculator.cs | 44 - .../src/crypto/signers/Iso9796d2PssSigner.cs | 619 --- .../src/crypto/signers/Iso9796d2Signer.cs | 556 --- .../src/crypto/signers/IsoTrailers.cs | 57 - .../src/crypto/signers/PssSigner.cs | 386 -- .../crypto/signers/RandomDsaKCalculator.cs | 44 - .../src/crypto/signers/RsaDigestSigner.cs | 217 - .../src/crypto/signers/X931Signer.cs | 225 -- .../tls/AbstractTlsAgreementCredentials.cs | 12 - .../crypto/tls/AbstractTlsCipherFactory.cs | 15 - .../src/crypto/tls/AbstractTlsClient.cs | 256 -- .../src/crypto/tls/AbstractTlsContext.cs | 152 - .../src/crypto/tls/AbstractTlsCredentials.cs | 10 - .../tls/AbstractTlsEncryptionCredentials.cs | 12 - .../src/crypto/tls/AbstractTlsKeyExchange.cs | 177 - .../src/crypto/tls/AbstractTlsPeer.cs | 48 - .../src/crypto/tls/AbstractTlsServer.cs | 351 -- .../src/crypto/tls/AbstractTlsSigner.cs | 50 - .../tls/AbstractTlsSignerCredentials.cs | 20 - .../src/crypto/tls/AlertDescription.cs | 304 -- bc-sharp-crypto/src/crypto/tls/AlertLevel.cs | 29 - .../src/crypto/tls/BasicTlsPskIdentity.cs | 43 - .../src/crypto/tls/BulkCipherAlgorithm.cs | 25 - bc-sharp-crypto/src/crypto/tls/ByteQueue.cs | 211 - .../src/crypto/tls/ByteQueueStream.cs | 110 - .../src/crypto/tls/CertChainType.cs | 18 - bc-sharp-crypto/src/crypto/tls/Certificate.cs | 136 - .../src/crypto/tls/CertificateRequest.cs | 156 - .../src/crypto/tls/CertificateStatus.cs | 102 - .../crypto/tls/CertificateStatusRequest.cs | 95 - .../src/crypto/tls/CertificateStatusType.cs | 12 - .../src/crypto/tls/CertificateType.cs | 18 - .../src/crypto/tls/CertificateUrl.cs | 125 - .../src/crypto/tls/Chacha20Poly1305.cs | 199 - .../src/crypto/tls/ChangeCipherSpec.cs | 9 - bc-sharp-crypto/src/crypto/tls/CipherSuite.cs | 377 -- bc-sharp-crypto/src/crypto/tls/CipherType.cs | 20 - .../crypto/tls/ClientAuthenticationType.cs | 14 - .../src/crypto/tls/ClientCertificateType.cs | 23 - .../src/crypto/tls/CombinedHash.cs | 133 - .../src/crypto/tls/CompressionMethod.cs | 22 - .../src/crypto/tls/ConnectionEnd.cs | 15 - bc-sharp-crypto/src/crypto/tls/ContentType.cs | 14 - .../src/crypto/tls/DatagramTransport.cs | 23 - .../tls/DefaultTlsAgreementCredentials.cs | 69 - .../src/crypto/tls/DefaultTlsCipherFactory.cs | 227 -- .../src/crypto/tls/DefaultTlsClient.cs | 113 - .../tls/DefaultTlsEncryptionCredentials.cs | 52 - .../src/crypto/tls/DefaultTlsServer.cs | 166 - .../crypto/tls/DefaultTlsSignerCredentials.cs | 93 - .../crypto/tls/DefaultTlsSrpGroupVerifier.cs | 70 - .../src/crypto/tls/DeferredHash.cs | 201 - .../src/crypto/tls/DigestInputBuffer.cs | 37 - .../src/crypto/tls/DigitallySigned.cs | 70 - .../src/crypto/tls/DtlsClientProtocol.cs | 857 ---- bc-sharp-crypto/src/crypto/tls/DtlsEpoch.cs | 51 - .../src/crypto/tls/DtlsHandshakeRetransmit.cs | 11 - .../src/crypto/tls/DtlsProtocol.cs | 92 - .../src/crypto/tls/DtlsReassembler.cs | 125 - .../src/crypto/tls/DtlsRecordLayer.cs | 530 --- .../src/crypto/tls/DtlsReliableHandshake.cs | 434 -- .../src/crypto/tls/DtlsReplayWindow.cs | 85 - .../src/crypto/tls/DtlsServerProtocol.cs | 696 ---- .../src/crypto/tls/DtlsTransport.cs | 77 - bc-sharp-crypto/src/crypto/tls/ECBasisType.cs | 16 - bc-sharp-crypto/src/crypto/tls/ECCurveType.cs | 29 - .../src/crypto/tls/ECPointFormat.cs | 16 - .../src/crypto/tls/EncryptionAlgorithm.cs | 69 - .../src/crypto/tls/ExporterLabel.cs | 37 - .../src/crypto/tls/ExtensionType.cs | 128 - .../src/crypto/tls/FiniteFieldDheGroup.cs | 21 - .../src/crypto/tls/HandshakeType.cs | 40 - .../src/crypto/tls/HashAlgorithm.cs | 49 - .../src/crypto/tls/HeartbeatExtension.cs | 52 - .../src/crypto/tls/HeartbeatMessage.cs | 109 - .../src/crypto/tls/HeartbeatMessageType.cs | 18 - .../src/crypto/tls/HeartbeatMode.cs | 18 - .../src/crypto/tls/KeyExchangeAlgorithm.cs | 54 - .../src/crypto/tls/MacAlgorithm.cs | 25 - .../src/crypto/tls/MaxFragmentLength.cs | 20 - bc-sharp-crypto/src/crypto/tls/NameType.cs | 17 - bc-sharp-crypto/src/crypto/tls/NamedCurve.cs | 77 - .../src/crypto/tls/NewSessionTicket.cs | 53 - .../src/crypto/tls/OcspStatusRequest.cs | 131 - .../src/crypto/tls/PrfAlgorithm.cs | 24 - .../src/crypto/tls/ProtocolVersion.cs | 159 - .../src/crypto/tls/PskTlsClient.cs | 70 - .../src/crypto/tls/PskTlsServer.cs | 93 - .../src/crypto/tls/RecordStream.cs | 412 -- .../src/crypto/tls/SecurityParameters.cs | 103 - .../src/crypto/tls/ServerDHParams.cs | 61 - bc-sharp-crypto/src/crypto/tls/ServerName.cs | 105 - .../src/crypto/tls/ServerNameList.cs | 105 - .../crypto/tls/ServerOnlyTlsAuthentication.cs | 15 - .../src/crypto/tls/ServerSrpParams.cs | 75 - .../src/crypto/tls/SessionParameters.cs | 165 - .../src/crypto/tls/SignatureAlgorithm.cs | 15 - .../crypto/tls/SignatureAndHashAlgorithm.cs | 94 - .../src/crypto/tls/SignerInputBuffer.cs | 37 - .../tls/SimulatedTlsSrpIdentityManager.cs | 69 - .../src/crypto/tls/SrpTlsClient.cs | 104 - .../src/crypto/tls/SrpTlsServer.cs | 121 - .../src/crypto/tls/SrtpProtectionProfile.cs | 21 - bc-sharp-crypto/src/crypto/tls/Ssl3Mac.cs | 110 - .../src/crypto/tls/SupplementalDataEntry.cs | 26 - .../src/crypto/tls/SupplementalDataType.cs | 13 - .../src/crypto/tls/TlsAeadCipher.cs | 249 -- .../src/crypto/tls/TlsAgreementCredentials.cs | 12 - .../src/crypto/tls/TlsAuthentication.cs | 31 - .../src/crypto/tls/TlsBlockCipher.cs | 395 -- bc-sharp-crypto/src/crypto/tls/TlsCipher.cs | 16 - .../src/crypto/tls/TlsCipherFactory.cs | 11 - bc-sharp-crypto/src/crypto/tls/TlsClient.cs | 148 - .../src/crypto/tls/TlsClientContext.cs | 11 - .../src/crypto/tls/TlsClientContextImpl.cs | 20 - .../src/crypto/tls/TlsClientProtocol.cs | 912 ----- .../src/crypto/tls/TlsCompression.cs | 12 - bc-sharp-crypto/src/crypto/tls/TlsContext.cs | 45 - .../src/crypto/tls/TlsCredentials.cs | 9 - .../src/crypto/tls/TlsDHKeyExchange.cs | 259 -- .../src/crypto/tls/TlsDHUtilities.cs | 462 --- .../src/crypto/tls/TlsDeflateCompression.cs | 68 - .../src/crypto/tls/TlsDheKeyExchange.cs | 94 - .../src/crypto/tls/TlsDsaSigner.cs | 82 - .../src/crypto/tls/TlsDssSigner.cs | 26 - .../src/crypto/tls/TlsECDHKeyExchange.cs | 252 -- .../src/crypto/tls/TlsECDheKeyExchange.cs | 131 - .../src/crypto/tls/TlsECDsaSigner.cs | 26 - .../src/crypto/tls/TlsEccUtilities.cs | 705 ---- .../crypto/tls/TlsEncryptionCredentials.cs | 12 - .../src/crypto/tls/TlsException.cs | 14 - .../src/crypto/tls/TlsExtensionsUtilities.cs | 368 -- .../src/crypto/tls/TlsFatalAlert.cs | 26 - .../src/crypto/tls/TlsFatalAlertReceived.cs | 21 - .../src/crypto/tls/TlsHandshakeHash.cs | 22 - .../src/crypto/tls/TlsKeyExchange.cs | 54 - bc-sharp-crypto/src/crypto/tls/TlsMac.cs | 173 - .../crypto/tls/TlsNoCloseNotifyException.cs | 23 - .../src/crypto/tls/TlsNullCipher.cs | 118 - .../src/crypto/tls/TlsNullCompression.cs | 19 - bc-sharp-crypto/src/crypto/tls/TlsPeer.cs | 62 - bc-sharp-crypto/src/crypto/tls/TlsProtocol.cs | 1450 ------- .../src/crypto/tls/TlsProtocolHandler.cs | 39 - .../src/crypto/tls/TlsPskIdentity.cs | 15 - .../src/crypto/tls/TlsPskIdentityManager.cs | 11 - .../src/crypto/tls/TlsPskKeyExchange.cs | 328 -- .../src/crypto/tls/TlsRsaKeyExchange.cs | 140 - .../src/crypto/tls/TlsRsaSigner.cs | 102 - .../src/crypto/tls/TlsRsaUtilities.cs | 132 - bc-sharp-crypto/src/crypto/tls/TlsServer.cs | 93 - .../src/crypto/tls/TlsServerContext.cs | 11 - .../src/crypto/tls/TlsServerContextImpl.cs | 20 - .../src/crypto/tls/TlsServerProtocol.cs | 833 ---- bc-sharp-crypto/src/crypto/tls/TlsSession.cs | 15 - .../src/crypto/tls/TlsSessionImpl.cs | 54 - bc-sharp-crypto/src/crypto/tls/TlsSigner.cs | 29 - .../src/crypto/tls/TlsSignerCredentials.cs | 14 - .../src/crypto/tls/TlsSrpGroupVerifier.cs | 17 - .../src/crypto/tls/TlsSrpIdentityManager.cs | 21 - .../src/crypto/tls/TlsSrpKeyExchange.cs | 285 -- .../src/crypto/tls/TlsSrpLoginParameters.cs | 36 - .../src/crypto/tls/TlsSrpUtilities.cs | 74 - .../src/crypto/tls/TlsSrtpUtilities.cs | 62 - bc-sharp-crypto/src/crypto/tls/TlsStream.cs | 97 - .../src/crypto/tls/TlsStreamCipher.cs | 152 - .../src/crypto/tls/TlsUtilities.cs | 2398 ----------- bc-sharp-crypto/src/crypto/tls/UrlAndHash.cs | 94 - bc-sharp-crypto/src/crypto/tls/UseSrtpData.cs | 56 - .../src/crypto/tls/UserMappingType.cs | 13 - bc-sharp-crypto/src/crypto/util/Pack.cs | 345 -- bc-sharp-crypto/src/math/BigInteger.cs | 3592 ----------------- bc-sharp-crypto/src/math/Primes.cs | 629 --- bc-sharp-crypto/src/math/ec/ECAlgorithms.cs | 479 --- bc-sharp-crypto/src/math/ec/ECCurve.cs | 1131 ------ bc-sharp-crypto/src/math/ec/ECFieldElement.cs | 928 ----- bc-sharp-crypto/src/math/ec/ECPoint.cs | 2064 ---------- bc-sharp-crypto/src/math/ec/ECPointMap.cs | 9 - bc-sharp-crypto/src/math/ec/LongArray.cs | 2201 ---------- bc-sharp-crypto/src/math/ec/ScaleXPointMap.cs | 20 - bc-sharp-crypto/src/math/ec/ScaleYPointMap.cs | 20 - .../src/math/ec/SimpleLookupTable.cs | 35 - .../src/math/ec/abc/SimpleBigDecimal.cs | 241 -- bc-sharp-crypto/src/math/ec/abc/Tnaf.cs | 845 ---- .../src/math/ec/abc/ZTauElement.cs | 36 - .../src/math/ec/custom/djb/Curve25519.cs | 77 - .../src/math/ec/custom/djb/Curve25519Field.cs | 253 -- .../ec/custom/djb/Curve25519FieldElement.cs | 233 -- .../src/math/ec/custom/djb/Curve25519Point.cs | 313 -- .../src/math/ec/custom/gm/SM2P256V1Curve.cs | 77 - .../src/math/ec/custom/gm/SM2P256V1Field.cs | 307 -- .../ec/custom/gm/SM2P256V1FieldElement.cs | 211 - .../src/math/ec/custom/gm/SM2P256V1Point.cs | 279 -- .../src/math/ec/custom/sec/SecP128R1Curve.cs | 78 - .../src/math/ec/custom/sec/SecP128R1Field.cs | 218 - .../ec/custom/sec/SecP128R1FieldElement.cs | 198 - .../src/math/ec/custom/sec/SecP128R1Point.cs | 279 -- .../src/math/ec/custom/sec/SecP160K1Curve.cs | 74 - .../src/math/ec/custom/sec/SecP160K1Point.cs | 269 -- .../src/math/ec/custom/sec/SecP160R1Curve.cs | 78 - .../src/math/ec/custom/sec/SecP160R1Field.cs | 186 - .../ec/custom/sec/SecP160R1FieldElement.cs | 203 - .../src/math/ec/custom/sec/SecP160R1Point.cs | 279 -- .../src/math/ec/custom/sec/SecP160R2Curve.cs | 78 - .../src/math/ec/custom/sec/SecP160R2Field.cs | 178 - .../ec/custom/sec/SecP160R2FieldElement.cs | 218 - .../src/math/ec/custom/sec/SecP160R2Point.cs | 279 -- .../src/math/ec/custom/sec/SecP192K1Curve.cs | 75 - .../src/math/ec/custom/sec/SecP192K1Field.cs | 178 - .../ec/custom/sec/SecP192K1FieldElement.cs | 213 - .../src/math/ec/custom/sec/SecP192K1Point.cs | 267 -- .../src/math/ec/custom/sec/SecP192R1Curve.cs | 78 - .../src/math/ec/custom/sec/SecP192R1Field.cs | 283 -- .../ec/custom/sec/SecP192R1FieldElement.cs | 188 - .../src/math/ec/custom/sec/SecP192R1Point.cs | 279 -- .../src/math/ec/custom/sec/SecP224K1Curve.cs | 75 - .../src/math/ec/custom/sec/SecP224K1Field.cs | 179 - .../ec/custom/sec/SecP224K1FieldElement.cs | 242 -- .../src/math/ec/custom/sec/SecP224K1Point.cs | 267 -- .../src/math/ec/custom/sec/SecP224R1Curve.cs | 78 - .../src/math/ec/custom/sec/SecP224R1Field.cs | 297 -- .../ec/custom/sec/SecP224R1FieldElement.cs | 269 -- .../src/math/ec/custom/sec/SecP224R1Point.cs | 279 -- .../src/math/ec/custom/sec/SecP256K1Curve.cs | 75 - .../src/math/ec/custom/sec/SecP256K1Field.cs | 180 - .../ec/custom/sec/SecP256K1FieldElement.cs | 214 - .../src/math/ec/custom/sec/SecP256K1Point.cs | 267 -- .../src/math/ec/custom/sec/SecP256R1Curve.cs | 77 - .../src/math/ec/custom/sec/SecP256R1Field.cs | 312 -- .../ec/custom/sec/SecP256R1FieldElement.cs | 188 - .../src/math/ec/custom/sec/SecP256R1Point.cs | 279 -- .../src/math/ec/custom/sec/SecP384R1Curve.cs | 77 - .../src/math/ec/custom/sec/SecP384R1Field.cs | 295 -- .../ec/custom/sec/SecP384R1FieldElement.cs | 210 - .../src/math/ec/custom/sec/SecP384R1Point.cs | 280 -- .../src/math/ec/custom/sec/SecP521R1Curve.cs | 77 - .../src/math/ec/custom/sec/SecP521R1Field.cs | 155 - .../ec/custom/sec/SecP521R1FieldElement.cs | 167 - .../src/math/ec/custom/sec/SecP521R1Point.cs | 275 -- .../src/math/ec/custom/sec/SecT113Field.cs | 225 -- .../math/ec/custom/sec/SecT113FieldElement.cs | 216 - .../src/math/ec/custom/sec/SecT113R1Curve.cs | 98 - .../src/math/ec/custom/sec/SecT113R1Point.cs | 281 -- .../src/math/ec/custom/sec/SecT113R2Curve.cs | 98 - .../src/math/ec/custom/sec/SecT113R2Point.cs | 291 -- .../src/math/ec/custom/sec/SecT131Field.cs | 330 -- .../math/ec/custom/sec/SecT131FieldElement.cs | 216 - .../src/math/ec/custom/sec/SecT131R1Curve.cs | 98 - .../src/math/ec/custom/sec/SecT131R1Point.cs | 287 -- .../src/math/ec/custom/sec/SecT131R2Curve.cs | 98 - .../src/math/ec/custom/sec/SecT131R2Point.cs | 283 -- .../src/math/ec/custom/sec/SecT163Field.cs | 340 -- .../math/ec/custom/sec/SecT163FieldElement.cs | 216 - .../src/math/ec/custom/sec/SecT163K1Curve.cs | 104 - .../src/math/ec/custom/sec/SecT163K1Point.cs | 281 -- .../src/math/ec/custom/sec/SecT163R1Curve.cs | 98 - .../src/math/ec/custom/sec/SecT163R1Point.cs | 283 -- .../src/math/ec/custom/sec/SecT163R2Curve.cs | 98 - .../src/math/ec/custom/sec/SecT163R2Point.cs | 286 -- .../src/math/ec/custom/sec/SecT193Field.cs | 305 -- .../math/ec/custom/sec/SecT193FieldElement.cs | 216 - .../src/math/ec/custom/sec/SecT193R1Curve.cs | 98 - .../src/math/ec/custom/sec/SecT193R1Point.cs | 283 -- .../src/math/ec/custom/sec/SecT193R2Curve.cs | 98 - .../src/math/ec/custom/sec/SecT193R2Point.cs | 283 -- .../src/math/ec/custom/sec/SecT233Field.cs | 317 -- .../math/ec/custom/sec/SecT233FieldElement.cs | 216 - .../src/math/ec/custom/sec/SecT233K1Curve.cs | 104 - .../src/math/ec/custom/sec/SecT233K1Point.cs | 295 -- .../src/math/ec/custom/sec/SecT233R1Curve.cs | 98 - .../src/math/ec/custom/sec/SecT233R1Point.cs | 278 -- .../src/math/ec/custom/sec/SecT239Field.cs | 328 -- .../math/ec/custom/sec/SecT239FieldElement.cs | 216 - .../src/math/ec/custom/sec/SecT239K1Curve.cs | 104 - .../src/math/ec/custom/sec/SecT239K1Point.cs | 290 -- .../src/math/ec/custom/sec/SecT283Field.cs | 402 -- .../math/ec/custom/sec/SecT283FieldElement.cs | 216 - .../src/math/ec/custom/sec/SecT283K1Curve.cs | 104 - .../src/math/ec/custom/sec/SecT283K1Point.cs | 289 -- .../src/math/ec/custom/sec/SecT283R1Curve.cs | 98 - .../src/math/ec/custom/sec/SecT283R1Point.cs | 278 -- .../src/math/ec/custom/sec/SecT409Field.cs | 331 -- .../math/ec/custom/sec/SecT409FieldElement.cs | 216 - .../src/math/ec/custom/sec/SecT409K1Curve.cs | 104 - .../src/math/ec/custom/sec/SecT409K1Point.cs | 289 -- .../src/math/ec/custom/sec/SecT409R1Curve.cs | 98 - .../src/math/ec/custom/sec/SecT409R1Point.cs | 278 -- .../src/math/ec/custom/sec/SecT571Field.cs | 333 -- .../math/ec/custom/sec/SecT571FieldElement.cs | 216 - .../src/math/ec/custom/sec/SecT571K1Curve.cs | 104 - .../src/math/ec/custom/sec/SecT571K1Point.cs | 289 -- .../src/math/ec/custom/sec/SecT571R1Curve.cs | 102 - .../src/math/ec/custom/sec/SecT571R1Point.cs | 278 -- .../src/math/ec/endo/ECEndomorphism.cs | 11 - .../src/math/ec/endo/GlvEndomorphism.cs | 10 - .../src/math/ec/endo/GlvTypeBEndomorphism.cs | 55 - .../src/math/ec/endo/GlvTypeBParameters.cs | 60 - .../ec/multiplier/AbstractECMultiplier.cs | 24 - .../math/ec/multiplier/DoubleAddMultiplier.cs | 24 - .../src/math/ec/multiplier/ECMultiplier.cs | 18 - .../ec/multiplier/FixedPointCombMultiplier.cs | 59 - .../ec/multiplier/FixedPointPreCompInfo.cs | 34 - .../math/ec/multiplier/FixedPointUtilities.cs | 72 - .../src/math/ec/multiplier/GlvMultiplier.cs | 40 - .../ec/multiplier/MixedNafR2LMultiplier.cs | 75 - .../multiplier/MontgomeryLadderMultiplier.cs | 25 - .../math/ec/multiplier/NafL2RMultiplier.cs | 30 - .../math/ec/multiplier/NafR2LMultiplier.cs | 31 - .../src/math/ec/multiplier/PreCompInfo.cs | 11 - .../math/ec/multiplier/ReferenceMultiplier.cs | 11 - .../math/ec/multiplier/WNafL2RMultiplier.cs | 98 - .../src/math/ec/multiplier/WNafPreCompInfo.cs | 46 - .../src/math/ec/multiplier/WNafUtilities.cs | 524 --- .../math/ec/multiplier/WTauNafMultiplier.cs | 125 - .../math/ec/multiplier/WTauNafPreCompInfo.cs | 24 - .../multiplier/ZSignedDigitL2RMultiplier.cs | 29 - .../multiplier/ZSignedDigitR2LMultiplier.cs | 30 - .../src/math/field/FiniteFields.cs | 54 - .../src/math/field/GF2Polynomial.cs | 46 - .../field/GenericPolynomialExtensionField.cs | 63 - .../src/math/field/IExtensionField.cs | 12 - .../src/math/field/IFiniteField.cs | 11 - bc-sharp-crypto/src/math/field/IPolynomial.cs | 15 - .../math/field/IPolynomialExtensionField.cs | 10 - bc-sharp-crypto/src/math/field/PrimeField.cs | 44 - bc-sharp-crypto/src/math/raw/Interleave.cs | 107 - bc-sharp-crypto/src/math/raw/Mod.cs | 186 - bc-sharp-crypto/src/math/raw/Nat.cs | 1053 ----- bc-sharp-crypto/src/math/raw/Nat128.cs | 856 ---- bc-sharp-crypto/src/math/raw/Nat160.cs | 874 ---- bc-sharp-crypto/src/math/raw/Nat192.cs | 1048 ----- bc-sharp-crypto/src/math/raw/Nat224.cs | 1176 ------ bc-sharp-crypto/src/math/raw/Nat256.cs | 1387 ------- bc-sharp-crypto/src/math/raw/Nat320.cs | 98 - bc-sharp-crypto/src/math/raw/Nat384.cs | 46 - bc-sharp-crypto/src/math/raw/Nat448.cs | 100 - bc-sharp-crypto/src/math/raw/Nat512.cs | 46 - bc-sharp-crypto/src/math/raw/Nat576.cs | 102 - bc-sharp-crypto/src/ocsp/BasicOCSPResp.cs | 220 - .../src/ocsp/BasicOCSPRespGenerator.cs | 313 -- bc-sharp-crypto/src/ocsp/CertificateID.cs | 141 - bc-sharp-crypto/src/ocsp/CertificateStatus.cs | 9 - bc-sharp-crypto/src/ocsp/OCSPException.cs | 28 - bc-sharp-crypto/src/ocsp/OCSPReq.cs | 268 -- bc-sharp-crypto/src/ocsp/OCSPReqGenerator.cs | 243 -- bc-sharp-crypto/src/ocsp/OCSPResp.cs | 100 - bc-sharp-crypto/src/ocsp/OCSPRespGenerator.cs | 54 - bc-sharp-crypto/src/ocsp/OCSPRespStatus.cs | 22 - bc-sharp-crypto/src/ocsp/OCSPUtil.cs | 132 - bc-sharp-crypto/src/ocsp/Req.cs | 38 - bc-sharp-crypto/src/ocsp/RespData.cs | 60 - bc-sharp-crypto/src/ocsp/RespID.cs | 72 - bc-sharp-crypto/src/ocsp/RevokedStatus.cs | 58 - bc-sharp-crypto/src/ocsp/SingleResp.cs | 81 - bc-sharp-crypto/src/ocsp/UnknownStatus.cs | 15 - .../src/openpgp/IStreamGenerator.cs | 7 - bc-sharp-crypto/src/openpgp/PGPKeyRing.cs | 79 - bc-sharp-crypto/src/openpgp/PGPObject.cs | 9 - ...GPUserAttributeSubpacketVectorGenerator.cs | 33 - .../src/openpgp/PgpCompressedData.cs | 50 - .../src/openpgp/PgpCompressedDataGenerator.cs | 221 - .../src/openpgp/PgpDataValidationException.cs | 18 - .../src/openpgp/PgpEncryptedData.cs | 151 - .../src/openpgp/PgpEncryptedDataGenerator.cs | 598 --- .../src/openpgp/PgpEncryptedDataList.cs | 72 - bc-sharp-crypto/src/openpgp/PgpException.cs | 22 - .../src/openpgp/PgpExperimental.cs | 16 - bc-sharp-crypto/src/openpgp/PgpKeyFlags.cs | 13 - bc-sharp-crypto/src/openpgp/PgpKeyPair.cs | 67 - .../src/openpgp/PgpKeyRingGenerator.cs | 402 -- .../src/openpgp/PgpKeyValidationException.cs | 18 - bc-sharp-crypto/src/openpgp/PgpLiteralData.cs | 63 - .../src/openpgp/PgpLiteralDataGenerator.cs | 182 - bc-sharp-crypto/src/openpgp/PgpMarker.cs | 18 - .../src/openpgp/PgpObjectFactory.cs | 143 - .../src/openpgp/PgpOnePassSignature.cs | 179 - .../src/openpgp/PgpOnePassSignatureList.cs | 51 - bc-sharp-crypto/src/openpgp/PgpPad.cs | 45 - .../src/openpgp/PgpPbeEncryptedData.cs | 160 - bc-sharp-crypto/src/openpgp/PgpPrivateKey.cs | 51 - bc-sharp-crypto/src/openpgp/PgpPublicKey.cs | 980 ----- .../src/openpgp/PgpPublicKeyEncryptedData.cs | 272 -- .../src/openpgp/PgpPublicKeyRing.cs | 200 - .../src/openpgp/PgpPublicKeyRingBundle.cs | 279 -- bc-sharp-crypto/src/openpgp/PgpSecretKey.cs | 1295 ------ .../src/openpgp/PgpSecretKeyRing.cs | 308 -- .../src/openpgp/PgpSecretKeyRingBundle.cs | 280 -- bc-sharp-crypto/src/openpgp/PgpSignature.cs | 447 -- .../src/openpgp/PgpSignatureGenerator.cs | 393 -- .../src/openpgp/PgpSignatureList.cs | 51 - .../openpgp/PgpSignatureSubpacketGenerator.cs | 210 - .../openpgp/PgpSignatureSubpacketVector.cs | 239 -- .../PgpUserAttributeSubpacketVector.cs | 81 - bc-sharp-crypto/src/openpgp/PgpUtilities.cs | 518 --- .../src/openpgp/PgpV3SignatureGenerator.cs | 199 - .../src/openpgp/Rfc6637Utilities.cs | 138 - bc-sharp-crypto/src/openpgp/SXprUtilities.cs | 102 - .../src/openpgp/WrappedGeneratorStream.cs | 37 - .../src/openssl/EncryptionException.cs | 25 - .../src/openssl/IPasswordFinder.cs | 9 - .../src/openssl/MiscPemGenerator.cs | 275 -- bc-sharp-crypto/src/openssl/PEMException.cs | 25 - bc-sharp-crypto/src/openssl/PEMReader.cs | 401 -- bc-sharp-crypto/src/openssl/PEMUtilities.cs | 158 - bc-sharp-crypto/src/openssl/PEMWriter.cs | 61 - .../src/openssl/PasswordException.cs | 25 - bc-sharp-crypto/src/openssl/Pkcs8Generator.cs | 111 - .../src/pkcs/AsymmetricKeyEntry.cs | 60 - .../pkcs/EncryptedPrivateKeyInfoFactory.cs | 64 - .../src/pkcs/PKCS12StoreBuilder.cs | 41 - .../src/pkcs/Pkcs10CertificationRequest.cs | 464 --- .../Pkcs10CertificationRequestDelaySigned.cs | 150 - bc-sharp-crypto/src/pkcs/Pkcs12Entry.cs | 64 - bc-sharp-crypto/src/pkcs/Pkcs12Store.cs | 1100 ----- bc-sharp-crypto/src/pkcs/Pkcs12Utilities.cs | 77 - .../src/pkcs/PrivateKeyInfoFactory.cs | 205 - .../src/pkcs/X509CertificateEntry.cs | 60 - bc-sharp-crypto/src/pkix/CertStatus.cs | 35 - .../src/pkix/PkixAttrCertChecker.cs | 57 - .../src/pkix/PkixAttrCertPathBuilder.cs | 215 - .../src/pkix/PkixAttrCertPathValidator.cs | 76 - .../src/pkix/PkixBuilderParameters.cs | 140 - bc-sharp-crypto/src/pkix/PkixCertPath.cs | 460 --- .../src/pkix/PkixCertPathBuilder.cs | 205 - .../src/pkix/PkixCertPathBuilderException.cs | 22 - .../src/pkix/PkixCertPathBuilderResult.cs | 45 - .../src/pkix/PkixCertPathChecker.cs | 99 - .../src/pkix/PkixCertPathValidator.cs | 420 -- .../pkix/PkixCertPathValidatorException.cs | 221 - .../src/pkix/PkixCertPathValidatorResult.cs | 69 - .../pkix/PkixCertPathValidatorUtilities.cs | 1194 ------ bc-sharp-crypto/src/pkix/PkixCrlUtilities.cs | 114 - .../src/pkix/PkixNameConstraintValidator.cs | 1939 --------- .../PkixNameConstraintValidatorException.cs | 16 - bc-sharp-crypto/src/pkix/PkixParameters.cs | 893 ---- bc-sharp-crypto/src/pkix/PkixPolicyNode.cs | 158 - bc-sharp-crypto/src/pkix/ReasonsMask.cs | 96 - .../src/pkix/Rfc3280CertPathUtilities.cs | 2448 ----------- .../src/pkix/Rfc3281CertPathUtilities.cs | 608 --- bc-sharp-crypto/src/pkix/TrustAnchor.cs | 259 -- .../src/security/AgreementUtilities.cs | 105 - .../src/security/CipherUtilities.cs | 755 ---- .../src/security/DigestUtilities.cs | 222 - .../src/security/DotNetUtilities.cs | 245 -- .../src/security/GeneralSecurityException.cs | 29 - .../src/security/GeneratorUtilities.cs | 352 -- .../src/security/InvalidKeyException.cs | 14 - .../src/security/InvalidParameterException.cs | 14 - bc-sharp-crypto/src/security/KeyException.cs | 14 - bc-sharp-crypto/src/security/MacUtilities.cs | 256 -- .../src/security/NoSuchAlgorithmException.cs | 15 - .../src/security/ParameterUtilities.cs | 325 -- bc-sharp-crypto/src/security/PbeUtilities.cs | 663 --- .../src/security/PrivateKeyFactory.cs | 222 - .../src/security/PublicKeyFactory.cs | 253 -- bc-sharp-crypto/src/security/SecureRandom.cs | 262 -- .../src/security/SecurityUtilityException.cs | 36 - .../src/security/SignatureException.cs | 14 - .../src/security/SignerUtilities.cs | 566 --- .../src/security/WrapperUtilities.cs | 153 - .../cert/CertificateEncodingException.cs | 14 - .../src/security/cert/CertificateException.cs | 14 - .../cert/CertificateExpiredException.cs | 14 - .../cert/CertificateNotYetValidException.cs | 14 - .../cert/CertificateParsingException.cs | 14 - .../src/security/cert/CrlException.cs | 14 - bc-sharp-crypto/src/tsp/GenTimeAccuracy.cs | 33 - bc-sharp-crypto/src/tsp/TSPAlgorithms.cs | 48 - bc-sharp-crypto/src/tsp/TSPException.cs | 28 - bc-sharp-crypto/src/tsp/TSPUtil.cs | 202 - .../src/tsp/TSPValidationException.cs | 44 - bc-sharp-crypto/src/tsp/TimeStampRequest.cs | 186 - .../src/tsp/TimeStampRequestGenerator.cs | 139 - bc-sharp-crypto/src/tsp/TimeStampResponse.cs | 184 - .../src/tsp/TimeStampResponseGenerator.cs | 209 - bc-sharp-crypto/src/tsp/TimeStampToken.cs | 305 -- .../src/tsp/TimeStampTokenGenerator.cs | 245 -- bc-sharp-crypto/src/tsp/TimeStampTokenInfo.cs | 107 - bc-sharp-crypto/src/util/Arrays.cs | 704 ---- bc-sharp-crypto/src/util/BigIntegers.cs | 90 - bc-sharp-crypto/src/util/Enums.cs | 78 - bc-sharp-crypto/src/util/IMemoable.cs | 29 - bc-sharp-crypto/src/util/Integers.cs | 17 - .../src/util/MemoableResetException.cs | 27 - bc-sharp-crypto/src/util/Platform.cs | 229 -- bc-sharp-crypto/src/util/Strings.cs | 103 - bc-sharp-crypto/src/util/Times.cs | 14 - bc-sharp-crypto/src/util/TypeExtensions.cs | 17 - .../util/collections/CollectionUtilities.cs | 64 - .../src/util/collections/EmptyEnumerable.cs | 44 - .../src/util/collections/EnumerableProxy.cs | 25 - .../src/util/collections/HashSet.cs | 99 - bc-sharp-crypto/src/util/collections/ISet.cs | 19 - .../src/util/collections/LinkedDictionary.cs | 178 - .../collections/UnmodifiableDictionary.cs | 64 - .../UnmodifiableDictionaryProxy.cs | 66 - .../src/util/collections/UnmodifiableList.cs | 67 - .../util/collections/UnmodifiableListProxy.cs | 61 - .../src/util/collections/UnmodifiableSet.cs | 59 - .../util/collections/UnmodifiableSetProxy.cs | 56 - .../src/util/date/DateTimeObject.cs | 25 - .../src/util/date/DateTimeUtilities.cs | 47 - bc-sharp-crypto/src/util/encoders/Base64.cs | 120 - .../src/util/encoders/Base64Encoder.cs | 324 -- .../src/util/encoders/BufferedDecoder.cs | 117 - .../src/util/encoders/BufferedEncoder.cs | 117 - bc-sharp-crypto/src/util/encoders/Hex.cs | 130 - .../src/util/encoders/HexEncoder.cs | 176 - .../src/util/encoders/HexTranslator.cs | 108 - bc-sharp-crypto/src/util/encoders/IEncoder.cs | 18 - .../src/util/encoders/Translator.cs | 19 - .../src/util/encoders/UrlBase64.cs | 127 - .../src/util/encoders/UrlBase64Encoder.cs | 31 - .../src/util/io/BaseInputStream.cs | 64 - .../src/util/io/BaseOutputStream.cs | 69 - bc-sharp-crypto/src/util/io/FilterStream.cs | 78 - .../src/util/io/NullOutputStream.cs | 18 - bc-sharp-crypto/src/util/io/PushbackStream.cs | 52 - .../src/util/io/StreamOverflowException.cs | 30 - bc-sharp-crypto/src/util/io/Streams.cs | 100 - bc-sharp-crypto/src/util/io/TeeInputStream.cs | 64 - .../src/util/io/TeeOutputStream.cs | 52 - .../src/util/io/pem/PemGenerationException.cs | 29 - bc-sharp-crypto/src/util/io/pem/PemHeader.cs | 55 - bc-sharp-crypto/src/util/io/pem/PemObject.cs | 47 - .../src/util/io/pem/PemObjectGenerator.cs | 13 - .../src/util/io/pem/PemObjectParser.cs | 17 - bc-sharp-crypto/src/util/io/pem/PemReader.cs | 96 - bc-sharp-crypto/src/util/io/pem/PemWriter.cs | 120 - bc-sharp-crypto/src/util/net/IPAddress.cs | 197 - bc-sharp-crypto/src/util/zlib/Adler32.cs | 88 - bc-sharp-crypto/src/util/zlib/Deflate.cs | 1640 -------- bc-sharp-crypto/src/util/zlib/InfBlocks.cs | 618 --- bc-sharp-crypto/src/util/zlib/InfCodes.cs | 611 --- bc-sharp-crypto/src/util/zlib/InfTree.cs | 523 --- bc-sharp-crypto/src/util/zlib/Inflate.cs | 387 -- bc-sharp-crypto/src/util/zlib/JZlib.cs | 73 - bc-sharp-crypto/src/util/zlib/StaticTree.cs | 152 - bc-sharp-crypto/src/util/zlib/Tree.cs | 367 -- .../src/util/zlib/ZDeflaterOutputStream.cs | 171 - .../src/util/zlib/ZInflaterInputStream.cs | 140 - bc-sharp-crypto/src/util/zlib/ZInputStream.cs | 238 -- .../src/util/zlib/ZOutputStream.cs | 265 -- bc-sharp-crypto/src/util/zlib/ZStream.cs | 214 - .../src/x509/AttributeCertificateHolder.cs | 442 -- .../src/x509/AttributeCertificateIssuer.cs | 199 - .../src/x509/IX509AttributeCertificate.cs | 57 - bc-sharp-crypto/src/x509/IX509Extension.cs | 27 - bc-sharp-crypto/src/x509/PEMParser.cs | 95 - bc-sharp-crypto/src/x509/PrincipalUtil.cs | 70 - .../src/x509/SubjectPublicKeyInfoFactory.cs | 184 - .../src/x509/X509AttrCertParser.cs | 173 - bc-sharp-crypto/src/x509/X509Attribute.cs | 76 - .../src/x509/X509CertPairParser.cs | 95 - bc-sharp-crypto/src/x509/X509Certificate.cs | 604 --- .../src/x509/X509CertificatePair.cs | 123 - .../src/x509/X509CertificateParser.cs | 183 - bc-sharp-crypto/src/x509/X509Crl.cs | 426 -- bc-sharp-crypto/src/x509/X509CrlEntry.cs | 201 - bc-sharp-crypto/src/x509/X509CrlParser.cs | 195 - bc-sharp-crypto/src/x509/X509ExtensionBase.cs | 82 - bc-sharp-crypto/src/x509/X509KeyUsage.cs | 59 - bc-sharp-crypto/src/x509/X509SignatureUtil.cs | 128 - bc-sharp-crypto/src/x509/X509Utilities.cs | 187 - .../src/x509/X509V1CertificateGenerator.cs | 210 - .../src/x509/X509V2AttributeCertificate.cs | 280 -- .../X509V2AttributeCertificateGenerator.cs | 203 - .../src/x509/X509V2CRLGenerator.cs | 278 -- .../src/x509/X509V3CertificateGenerator.cs | 344 -- .../AuthorityKeyIdentifierStructure.cs | 102 - .../SubjectKeyIdentifierStructure.cs | 49 - .../src/x509/extension/X509ExtensionUtil.cs | 91 - .../src/x509/store/IX509Selector.cs | 15 - bc-sharp-crypto/src/x509/store/IX509Store.cs | 11 - .../src/x509/store/IX509StoreParameters.cs | 8 - .../src/x509/store/NoSuchStoreException.cs | 28 - .../x509/store/X509AttrCertStoreSelector.cs | 376 -- .../x509/store/X509CertPairStoreSelector.cs | 92 - .../src/x509/store/X509CertStoreSelector.cs | 337 -- .../src/x509/store/X509CollectionStore.cs | 51 - .../store/X509CollectionStoreParameters.cs | 60 - .../src/x509/store/X509CrlStoreSelector.cs | 283 -- .../src/x509/store/X509StoreException.cs | 28 - .../src/x509/store/X509StoreFactory.cs | 62 - bin/x64/Debug/CSR.pem | 10 - bin/x64/Debug/certificate.pem | 17 - bin/x64/Debug/ufr-signer.exe | Bin 2444288 -> 0 bytes bin/x64/Debug/ufr-signer.exe.config | 6 - bin/x64/Release/DL CHAIN CARD INITIALIZER.exe | Bin 2178048 -> 0 bytes bin/x64/Release/hosturl.txt | 1 - bin/x64/Release/ufr-signer.exe | Bin 0 -> 2313728 bytes bin/x64/Release/ufr-signer.exe.config | 6 - bin/x86/Debug/ufr-signer.exe | Bin 2444800 -> 0 bytes bin/x86/Debug/ufr-signer.exe.config | 6 - bin/x86/Release/ufr-signer.exe | Bin 2179072 -> 0 bytes bin/x86/Release/ufr-signer.exe.config | 6 - frmCSR.Designer.cs | 523 +++ frmCSR.cs | 1688 ++++++++ frmMain.resx => frmCSR.resx | 0 frmExtKeyUsage.Designer.cs | 249 ++ frmExtKeyUsage.cs | 129 + .../Resources.resx => frmExtKeyUsage.resx | 13 +- frmKeyUsage.Designer.cs | 213 + frmKeyUsage.cs | 108 + frmKeyUsage.resx | 120 + frmMain.cs | 1010 ----- frmMain.designer.cs | 214 - frmPassword.cs | 25 + frmPassword.designer.cs | 104 + frmPassword.resx | 120 + frmPin.Designer.cs | 105 + frmPin.cs | 81 + frmPin.resx | 120 + frmQCStatements.Designer.cs | 162 + frmQCStatements.cs | 71 + frmQCStatements.resx | 120 + lib | 2 +- uFCoder.cs | 1225 ------ ufr-signer.csproj | 1624 -------- ufr-signer.sln | 28 - 1522 files changed, 3950 insertions(+), 241968 deletions(-) delete mode 100644 .gitignore delete mode 100644 App.config delete mode 100644 ClassDiagram1.cd delete mode 100644 DLAsn1Tools.cs delete mode 100644 Program.cs delete mode 100644 Properties/AssemblyInfo.cs delete mode 100644 Properties/Resources.Designer.cs delete mode 100644 Properties/Settings.Designer.cs delete mode 100644 Properties/Settings.settings delete mode 100644 bc-sharp-crypto/bzip2/src/BZip2Constants.cs delete mode 100644 bc-sharp-crypto/bzip2/src/CBZip2InputStream.cs delete mode 100644 bc-sharp-crypto/bzip2/src/CBZip2OutputStream.cs delete mode 100644 bc-sharp-crypto/bzip2/src/CRC.cs delete mode 100644 bc-sharp-crypto/legal and licecing.txt delete mode 100644 bc-sharp-crypto/src/AssemblyInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/ASN1Generator.cs delete mode 100644 bc-sharp-crypto/src/asn1/ASN1OctetStringParser.cs delete mode 100644 bc-sharp-crypto/src/asn1/ASN1SequenceParser.cs delete mode 100644 bc-sharp-crypto/src/asn1/ASN1SetParser.cs delete mode 100644 bc-sharp-crypto/src/asn1/ASN1StreamParser.cs delete mode 100644 bc-sharp-crypto/src/asn1/ASN1TaggedObjectParser.cs delete mode 100644 bc-sharp-crypto/src/asn1/Asn1Encodable.cs delete mode 100644 bc-sharp-crypto/src/asn1/Asn1EncodableVector.cs delete mode 100644 bc-sharp-crypto/src/asn1/Asn1Exception.cs delete mode 100644 bc-sharp-crypto/src/asn1/Asn1InputStream.cs delete mode 100644 bc-sharp-crypto/src/asn1/Asn1Null.cs delete mode 100644 bc-sharp-crypto/src/asn1/Asn1Object.cs delete mode 100644 bc-sharp-crypto/src/asn1/Asn1OctetString.cs delete mode 100644 bc-sharp-crypto/src/asn1/Asn1OutputStream.cs delete mode 100644 bc-sharp-crypto/src/asn1/Asn1ParsingException.cs delete mode 100644 bc-sharp-crypto/src/asn1/Asn1Sequence.cs delete mode 100644 bc-sharp-crypto/src/asn1/Asn1Set.cs delete mode 100644 bc-sharp-crypto/src/asn1/Asn1TaggedObject.cs delete mode 100644 bc-sharp-crypto/src/asn1/Asn1Tags.cs delete mode 100644 bc-sharp-crypto/src/asn1/BERBitString.cs delete mode 100644 bc-sharp-crypto/src/asn1/BERGenerator.cs delete mode 100644 bc-sharp-crypto/src/asn1/BEROctetStringGenerator.cs delete mode 100644 bc-sharp-crypto/src/asn1/BEROctetStringParser.cs delete mode 100644 bc-sharp-crypto/src/asn1/BERSequenceGenerator.cs delete mode 100644 bc-sharp-crypto/src/asn1/BERSequenceParser.cs delete mode 100644 bc-sharp-crypto/src/asn1/BERSetGenerator.cs delete mode 100644 bc-sharp-crypto/src/asn1/BERSetParser.cs delete mode 100644 bc-sharp-crypto/src/asn1/BERTaggedObjectParser.cs delete mode 100644 bc-sharp-crypto/src/asn1/BerApplicationSpecific.cs delete mode 100644 bc-sharp-crypto/src/asn1/BerApplicationSpecificParser.cs delete mode 100644 bc-sharp-crypto/src/asn1/BerNull.cs delete mode 100644 bc-sharp-crypto/src/asn1/BerOctetString.cs delete mode 100644 bc-sharp-crypto/src/asn1/BerOutputStream.cs delete mode 100644 bc-sharp-crypto/src/asn1/BerSequence.cs delete mode 100644 bc-sharp-crypto/src/asn1/BerSet.cs delete mode 100644 bc-sharp-crypto/src/asn1/BerTaggedObject.cs delete mode 100644 bc-sharp-crypto/src/asn1/ConstructedOctetStream.cs delete mode 100644 bc-sharp-crypto/src/asn1/DERExternal.cs delete mode 100644 bc-sharp-crypto/src/asn1/DERExternalParser.cs delete mode 100644 bc-sharp-crypto/src/asn1/DERGenerator.cs delete mode 100644 bc-sharp-crypto/src/asn1/DEROctetStringParser.cs delete mode 100644 bc-sharp-crypto/src/asn1/DERSequenceGenerator.cs delete mode 100644 bc-sharp-crypto/src/asn1/DERSequenceParser.cs delete mode 100644 bc-sharp-crypto/src/asn1/DERSetGenerator.cs delete mode 100644 bc-sharp-crypto/src/asn1/DERSetParser.cs delete mode 100644 bc-sharp-crypto/src/asn1/DefiniteLengthInputStream.cs delete mode 100644 bc-sharp-crypto/src/asn1/DerApplicationSpecific.cs delete mode 100644 bc-sharp-crypto/src/asn1/DerBMPString.cs delete mode 100644 bc-sharp-crypto/src/asn1/DerBitString.cs delete mode 100644 bc-sharp-crypto/src/asn1/DerBoolean.cs delete mode 100644 bc-sharp-crypto/src/asn1/DerEnumerated.cs delete mode 100644 bc-sharp-crypto/src/asn1/DerGeneralString.cs delete mode 100644 bc-sharp-crypto/src/asn1/DerGeneralizedTime.cs delete mode 100644 bc-sharp-crypto/src/asn1/DerGraphicString.cs delete mode 100644 bc-sharp-crypto/src/asn1/DerIA5String.cs delete mode 100644 bc-sharp-crypto/src/asn1/DerInteger.cs delete mode 100644 bc-sharp-crypto/src/asn1/DerNull.cs delete mode 100644 bc-sharp-crypto/src/asn1/DerNumericString.cs delete mode 100644 bc-sharp-crypto/src/asn1/DerObjectIdentifier.cs delete mode 100644 bc-sharp-crypto/src/asn1/DerOctetString.cs delete mode 100644 bc-sharp-crypto/src/asn1/DerOutputStream.cs delete mode 100644 bc-sharp-crypto/src/asn1/DerPrintableString.cs delete mode 100644 bc-sharp-crypto/src/asn1/DerSequence.cs delete mode 100644 bc-sharp-crypto/src/asn1/DerSet.cs delete mode 100644 bc-sharp-crypto/src/asn1/DerStringBase.cs delete mode 100644 bc-sharp-crypto/src/asn1/DerT61String.cs delete mode 100644 bc-sharp-crypto/src/asn1/DerTaggedObject.cs delete mode 100644 bc-sharp-crypto/src/asn1/DerUTCTime.cs delete mode 100644 bc-sharp-crypto/src/asn1/DerUTF8String.cs delete mode 100644 bc-sharp-crypto/src/asn1/DerUniversalString.cs delete mode 100644 bc-sharp-crypto/src/asn1/DerVideotexString.cs delete mode 100644 bc-sharp-crypto/src/asn1/DerVisibleString.cs delete mode 100644 bc-sharp-crypto/src/asn1/IAsn1ApplicationSpecificParser.cs delete mode 100644 bc-sharp-crypto/src/asn1/IAsn1Choice.cs delete mode 100644 bc-sharp-crypto/src/asn1/IAsn1Convertible.cs delete mode 100644 bc-sharp-crypto/src/asn1/IAsn1String.cs delete mode 100644 bc-sharp-crypto/src/asn1/IndefiniteLengthInputStream.cs delete mode 100644 bc-sharp-crypto/src/asn1/LazyASN1InputStream.cs delete mode 100644 bc-sharp-crypto/src/asn1/LazyDERSequence.cs delete mode 100644 bc-sharp-crypto/src/asn1/LazyDERSet.cs delete mode 100644 bc-sharp-crypto/src/asn1/LimitedInputStream.cs delete mode 100644 bc-sharp-crypto/src/asn1/OidTokenizer.cs delete mode 100644 bc-sharp-crypto/src/asn1/anssi/ANSSINamedCurves.cs delete mode 100644 bc-sharp-crypto/src/asn1/anssi/ANSSIObjectIdentifiers.cs delete mode 100644 bc-sharp-crypto/src/asn1/bc/BCObjectIdentifiers.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/CAKeyUpdAnnContent.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/CertConfirmContent.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/CertOrEncCert.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/CertRepMessage.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/CertResponse.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/CertStatus.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/CertifiedKeyPair.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/Challenge.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/CmpCertificate.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/CmpObjectIdentifiers.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/CrlAnnContent.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/ErrorMsgContent.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/GenMsgContent.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/GenRepContent.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/InfoTypeAndValue.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/KeyRecRepContent.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/OobCertHash.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/PKIBody.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/PKIConfirmContent.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/PKIFailureInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/PKIFreeText.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/PKIHeader.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/PKIHeaderBuilder.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/PKIMessage.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/PKIMessages.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/PKIStatus.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/PKIStatusInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/PbmParameter.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/PollRepContent.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/PollReqContent.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/PopoDecKeyChallContent.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/PopoDecKeyRespContent.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/ProtectedPart.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/RevAnnContent.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/RevDetails.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/RevRepContent.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/RevRepContentBuilder.cs delete mode 100644 bc-sharp-crypto/src/asn1/cmp/RevReqContent.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/Attribute.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/AttributeTable.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/Attributes.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/AuthEnvelopedData.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/AuthEnvelopedDataParser.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/AuthenticatedData.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/AuthenticatedDataParser.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/CMSAttributes.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/CMSObjectIdentifiers.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/CompressedData.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/CompressedDataParser.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/ContentInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/ContentInfoParser.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/EncryptedContentInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/EncryptedContentInfoParser.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/EncryptedData.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/EnvelopedData.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/EnvelopedDataParser.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/Evidence.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/IssuerAndSerialNumber.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/KEKIdentifier.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/KEKRecipientInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/KeyAgreeRecipientIdentifier.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/KeyAgreeRecipientInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/KeyTransRecipientInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/MetaData.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/OriginatorIdentifierOrKey.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/OriginatorInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/OriginatorPublicKey.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/OtherKeyAttribute.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/OtherRecipientInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/OtherRevocationInfoFormat.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/PasswordRecipientInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/RecipientEncryptedKey.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/RecipientIdentifier.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/RecipientInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/RecipientKeyIdentifier.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/SCVPReqRes.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/SignedData.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/SignedDataParser.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/SignerIdentifier.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/SignerInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/Time.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/TimeStampAndCRL.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/TimeStampTokenEvidence.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/TimeStampedData.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/TimeStampedDataParser.cs delete mode 100644 bc-sharp-crypto/src/asn1/cms/ecc/MQVuserKeyingMaterial.cs delete mode 100644 bc-sharp-crypto/src/asn1/crmf/AttributeTypeAndValue.cs delete mode 100644 bc-sharp-crypto/src/asn1/crmf/CertId.cs delete mode 100644 bc-sharp-crypto/src/asn1/crmf/CertReqMessages.cs delete mode 100644 bc-sharp-crypto/src/asn1/crmf/CertReqMsg.cs delete mode 100644 bc-sharp-crypto/src/asn1/crmf/CertRequest.cs delete mode 100644 bc-sharp-crypto/src/asn1/crmf/CertTemplate.cs delete mode 100644 bc-sharp-crypto/src/asn1/crmf/CertTemplateBuilder.cs delete mode 100644 bc-sharp-crypto/src/asn1/crmf/Controls.cs delete mode 100644 bc-sharp-crypto/src/asn1/crmf/CrmfObjectIdentifiers.cs delete mode 100644 bc-sharp-crypto/src/asn1/crmf/EncKeyWithID.cs delete mode 100644 bc-sharp-crypto/src/asn1/crmf/EncryptedKey.cs delete mode 100644 bc-sharp-crypto/src/asn1/crmf/EncryptedValue.cs delete mode 100644 bc-sharp-crypto/src/asn1/crmf/OptionalValidity.cs delete mode 100644 bc-sharp-crypto/src/asn1/crmf/PKIArchiveOptions.cs delete mode 100644 bc-sharp-crypto/src/asn1/crmf/PKIPublicationInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/crmf/PKMacValue.cs delete mode 100644 bc-sharp-crypto/src/asn1/crmf/PopoPrivKey.cs delete mode 100644 bc-sharp-crypto/src/asn1/crmf/PopoSigningKey.cs delete mode 100644 bc-sharp-crypto/src/asn1/crmf/PopoSigningKeyInput.cs delete mode 100644 bc-sharp-crypto/src/asn1/crmf/ProofOfPossession.cs delete mode 100644 bc-sharp-crypto/src/asn1/crmf/SinglePubInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/crmf/SubsequentMessage.cs delete mode 100644 bc-sharp-crypto/src/asn1/cryptopro/CryptoProObjectIdentifiers.cs delete mode 100644 bc-sharp-crypto/src/asn1/cryptopro/ECGOST3410NamedCurves.cs delete mode 100644 bc-sharp-crypto/src/asn1/cryptopro/ECGOST3410ParamSetParameters.cs delete mode 100644 bc-sharp-crypto/src/asn1/cryptopro/GOST28147Parameters.cs delete mode 100644 bc-sharp-crypto/src/asn1/cryptopro/GOST3410NamedParameters.cs delete mode 100644 bc-sharp-crypto/src/asn1/cryptopro/GOST3410ParamSetParameters.cs delete mode 100644 bc-sharp-crypto/src/asn1/cryptopro/GOST3410PublicKeyAlgParameters.cs delete mode 100644 bc-sharp-crypto/src/asn1/eac/EACObjectIdentifiers.cs delete mode 100644 bc-sharp-crypto/src/asn1/esf/CertificateValues.cs delete mode 100644 bc-sharp-crypto/src/asn1/esf/CommitmentTypeIdentifier.cs delete mode 100644 bc-sharp-crypto/src/asn1/esf/CommitmentTypeIndication.cs delete mode 100644 bc-sharp-crypto/src/asn1/esf/CommitmentTypeQualifier.cs delete mode 100644 bc-sharp-crypto/src/asn1/esf/CompleteCertificateRefs.cs delete mode 100644 bc-sharp-crypto/src/asn1/esf/CompleteRevocationRefs.cs delete mode 100644 bc-sharp-crypto/src/asn1/esf/CrlIdentifier.cs delete mode 100644 bc-sharp-crypto/src/asn1/esf/CrlListID.cs delete mode 100644 bc-sharp-crypto/src/asn1/esf/CrlOcspRef.cs delete mode 100644 bc-sharp-crypto/src/asn1/esf/CrlValidatedID.cs delete mode 100644 bc-sharp-crypto/src/asn1/esf/ESFAttributes.cs delete mode 100644 bc-sharp-crypto/src/asn1/esf/OcspIdentifier.cs delete mode 100644 bc-sharp-crypto/src/asn1/esf/OcspListID.cs delete mode 100644 bc-sharp-crypto/src/asn1/esf/OcspResponsesID.cs delete mode 100644 bc-sharp-crypto/src/asn1/esf/OtherCertID.cs delete mode 100644 bc-sharp-crypto/src/asn1/esf/OtherHash.cs delete mode 100644 bc-sharp-crypto/src/asn1/esf/OtherHashAlgAndValue.cs delete mode 100644 bc-sharp-crypto/src/asn1/esf/OtherRevRefs.cs delete mode 100644 bc-sharp-crypto/src/asn1/esf/OtherRevVals.cs delete mode 100644 bc-sharp-crypto/src/asn1/esf/OtherSigningCertificate.cs delete mode 100644 bc-sharp-crypto/src/asn1/esf/RevocationValues.cs delete mode 100644 bc-sharp-crypto/src/asn1/esf/SigPolicyQualifierInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/esf/SignaturePolicyId.cs delete mode 100644 bc-sharp-crypto/src/asn1/esf/SignaturePolicyIdentifier.cs delete mode 100644 bc-sharp-crypto/src/asn1/esf/SignerAttribute.cs delete mode 100644 bc-sharp-crypto/src/asn1/esf/SignerLocation.cs delete mode 100644 bc-sharp-crypto/src/asn1/ess/ContentHints.cs delete mode 100644 bc-sharp-crypto/src/asn1/ess/ContentIdentifier.cs delete mode 100644 bc-sharp-crypto/src/asn1/ess/ESSCertID.cs delete mode 100644 bc-sharp-crypto/src/asn1/ess/ESSCertIDv2.cs delete mode 100644 bc-sharp-crypto/src/asn1/ess/OtherCertID.cs delete mode 100644 bc-sharp-crypto/src/asn1/ess/OtherSigningCertificate.cs delete mode 100644 bc-sharp-crypto/src/asn1/ess/SigningCertificate.cs delete mode 100644 bc-sharp-crypto/src/asn1/ess/SigningCertificateV2.cs delete mode 100644 bc-sharp-crypto/src/asn1/gm/GMNamedCurves.cs delete mode 100644 bc-sharp-crypto/src/asn1/gm/GMObjectIdentifiers.cs delete mode 100644 bc-sharp-crypto/src/asn1/gnu/GNUObjectIdentifiers.cs delete mode 100644 bc-sharp-crypto/src/asn1/iana/IANAObjectIdentifiers.cs delete mode 100644 bc-sharp-crypto/src/asn1/icao/CscaMasterList.cs delete mode 100644 bc-sharp-crypto/src/asn1/icao/DataGroupHash.cs delete mode 100644 bc-sharp-crypto/src/asn1/icao/ICAOObjectIdentifiers.cs delete mode 100644 bc-sharp-crypto/src/asn1/icao/LDSSecurityObject.cs delete mode 100644 bc-sharp-crypto/src/asn1/icao/LDSVersionInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/isismtt/ISISMTTObjectIdentifiers.cs delete mode 100644 bc-sharp-crypto/src/asn1/isismtt/ocsp/CertHash.cs delete mode 100644 bc-sharp-crypto/src/asn1/isismtt/ocsp/RequestedCertificate.cs delete mode 100644 bc-sharp-crypto/src/asn1/isismtt/x509/AdditionalInformationSyntax.cs delete mode 100644 bc-sharp-crypto/src/asn1/isismtt/x509/AdmissionSyntax.cs delete mode 100644 bc-sharp-crypto/src/asn1/isismtt/x509/Admissions.cs delete mode 100644 bc-sharp-crypto/src/asn1/isismtt/x509/DeclarationOfMajority.cs delete mode 100644 bc-sharp-crypto/src/asn1/isismtt/x509/MonetaryLimit.cs delete mode 100644 bc-sharp-crypto/src/asn1/isismtt/x509/NamingAuthority.cs delete mode 100644 bc-sharp-crypto/src/asn1/isismtt/x509/ProcurationSyntax.cs delete mode 100644 bc-sharp-crypto/src/asn1/isismtt/x509/ProfessionInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/isismtt/x509/Restriction.cs delete mode 100644 bc-sharp-crypto/src/asn1/kisa/KISAObjectIdentifiers.cs delete mode 100644 bc-sharp-crypto/src/asn1/microsoft/MicrosoftObjectIdentifiers.cs delete mode 100644 bc-sharp-crypto/src/asn1/misc/CAST5CBCParameters.cs delete mode 100644 bc-sharp-crypto/src/asn1/misc/IDEACBCPar.cs delete mode 100644 bc-sharp-crypto/src/asn1/misc/MiscObjectIdentifiers.cs delete mode 100644 bc-sharp-crypto/src/asn1/misc/NetscapeCertType.cs delete mode 100644 bc-sharp-crypto/src/asn1/misc/NetscapeRevocationURL.cs delete mode 100644 bc-sharp-crypto/src/asn1/misc/VerisignCzagExtension.cs delete mode 100644 bc-sharp-crypto/src/asn1/mozilla/PublicKeyAndChallenge.cs delete mode 100644 bc-sharp-crypto/src/asn1/nist/NISTNamedCurves.cs delete mode 100644 bc-sharp-crypto/src/asn1/nist/NISTObjectIdentifiers.cs delete mode 100644 bc-sharp-crypto/src/asn1/ntt/NTTObjectIdentifiers.cs delete mode 100644 bc-sharp-crypto/src/asn1/ocsp/BasicOCSPResponse.cs delete mode 100644 bc-sharp-crypto/src/asn1/ocsp/CertID.cs delete mode 100644 bc-sharp-crypto/src/asn1/ocsp/CertStatus.cs delete mode 100644 bc-sharp-crypto/src/asn1/ocsp/CrlID.cs delete mode 100644 bc-sharp-crypto/src/asn1/ocsp/OCSPObjectIdentifiers.cs delete mode 100644 bc-sharp-crypto/src/asn1/ocsp/OCSPRequest.cs delete mode 100644 bc-sharp-crypto/src/asn1/ocsp/OCSPResponse.cs delete mode 100644 bc-sharp-crypto/src/asn1/ocsp/OCSPResponseStatus.cs delete mode 100644 bc-sharp-crypto/src/asn1/ocsp/Request.cs delete mode 100644 bc-sharp-crypto/src/asn1/ocsp/ResponderID.cs delete mode 100644 bc-sharp-crypto/src/asn1/ocsp/ResponseBytes.cs delete mode 100644 bc-sharp-crypto/src/asn1/ocsp/ResponseData.cs delete mode 100644 bc-sharp-crypto/src/asn1/ocsp/RevokedInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/ocsp/ServiceLocator.cs delete mode 100644 bc-sharp-crypto/src/asn1/ocsp/Signature.cs delete mode 100644 bc-sharp-crypto/src/asn1/ocsp/SingleResponse.cs delete mode 100644 bc-sharp-crypto/src/asn1/ocsp/TBSRequest.cs delete mode 100644 bc-sharp-crypto/src/asn1/oiw/ElGamalParameter.cs delete mode 100644 bc-sharp-crypto/src/asn1/oiw/OIWObjectIdentifiers.cs delete mode 100644 bc-sharp-crypto/src/asn1/pkcs/Attribute.cs delete mode 100644 bc-sharp-crypto/src/asn1/pkcs/AuthenticatedSafe.cs delete mode 100644 bc-sharp-crypto/src/asn1/pkcs/CertBag.cs delete mode 100644 bc-sharp-crypto/src/asn1/pkcs/CertificationRequest.cs delete mode 100644 bc-sharp-crypto/src/asn1/pkcs/CertificationRequestInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/pkcs/ContentInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/pkcs/DHParameter.cs delete mode 100644 bc-sharp-crypto/src/asn1/pkcs/EncryptedData.cs delete mode 100644 bc-sharp-crypto/src/asn1/pkcs/EncryptedPrivateKeyInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/pkcs/EncryptionScheme.cs delete mode 100644 bc-sharp-crypto/src/asn1/pkcs/IssuerAndSerialNumber.cs delete mode 100644 bc-sharp-crypto/src/asn1/pkcs/KeyDerivationFunc.cs delete mode 100644 bc-sharp-crypto/src/asn1/pkcs/MacData.cs delete mode 100644 bc-sharp-crypto/src/asn1/pkcs/PBEParameter.cs delete mode 100644 bc-sharp-crypto/src/asn1/pkcs/PBES2Parameters.cs delete mode 100644 bc-sharp-crypto/src/asn1/pkcs/PBKDF2Params.cs delete mode 100644 bc-sharp-crypto/src/asn1/pkcs/PKCS12PBEParams.cs delete mode 100644 bc-sharp-crypto/src/asn1/pkcs/PKCSObjectIdentifiers.cs delete mode 100644 bc-sharp-crypto/src/asn1/pkcs/Pfx.cs delete mode 100644 bc-sharp-crypto/src/asn1/pkcs/PrivateKeyInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/pkcs/RC2CBCParameter.cs delete mode 100644 bc-sharp-crypto/src/asn1/pkcs/RSAESOAEPparams.cs delete mode 100644 bc-sharp-crypto/src/asn1/pkcs/RSAPrivateKeyStructure.cs delete mode 100644 bc-sharp-crypto/src/asn1/pkcs/RSASSAPSSparams.cs delete mode 100644 bc-sharp-crypto/src/asn1/pkcs/SafeBag.cs delete mode 100644 bc-sharp-crypto/src/asn1/pkcs/SignedData.cs delete mode 100644 bc-sharp-crypto/src/asn1/pkcs/SignerInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/sec/ECPrivateKeyStructure.cs delete mode 100644 bc-sharp-crypto/src/asn1/sec/SECNamedCurves.cs delete mode 100644 bc-sharp-crypto/src/asn1/sec/SECObjectIdentifiers.cs delete mode 100644 bc-sharp-crypto/src/asn1/smime/SMIMEAttributes.cs delete mode 100644 bc-sharp-crypto/src/asn1/smime/SMIMECapabilities.cs delete mode 100644 bc-sharp-crypto/src/asn1/smime/SMIMECapabilitiesAttribute.cs delete mode 100644 bc-sharp-crypto/src/asn1/smime/SMIMECapability.cs delete mode 100644 bc-sharp-crypto/src/asn1/smime/SMIMECapabilityVector.cs delete mode 100644 bc-sharp-crypto/src/asn1/smime/SMIMEEncryptionKeyPreferenceAttribute.cs delete mode 100644 bc-sharp-crypto/src/asn1/teletrust/TeleTrusTNamedCurves.cs delete mode 100644 bc-sharp-crypto/src/asn1/teletrust/TeleTrusTObjectIdentifiers.cs delete mode 100644 bc-sharp-crypto/src/asn1/tsp/Accuracy.cs delete mode 100644 bc-sharp-crypto/src/asn1/tsp/MessageImprint.cs delete mode 100644 bc-sharp-crypto/src/asn1/tsp/TSTInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/tsp/TimeStampReq.cs delete mode 100644 bc-sharp-crypto/src/asn1/tsp/TimeStampResp.cs delete mode 100644 bc-sharp-crypto/src/asn1/util/Asn1Dump.cs delete mode 100644 bc-sharp-crypto/src/asn1/util/Dump.cs delete mode 100644 bc-sharp-crypto/src/asn1/util/FilterStream.cs delete mode 100644 bc-sharp-crypto/src/asn1/x500/DirectoryString.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/AccessDescription.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/AlgorithmIdentifier.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/AttCertIssuer.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/AttCertValidityPeriod.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/Attribute.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/AttributeCertificate.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/AttributeCertificateInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/AttributeTable.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/AuthorityInformationAccess.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/AuthorityKeyIdentifier.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/BasicConstraints.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/CRLDistPoint.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/CRLNumber.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/CRLReason.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/CertPolicyId.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/CertificateList.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/CertificatePair.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/CertificatePolicies.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/DSAParameter.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/DigestInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/DisplayText.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/DistributionPoint.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/DistributionPointName.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/ExtendedKeyUsage.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/GeneralName.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/GeneralNames.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/GeneralSubtree.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/Holder.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/IetfAttrSyntax.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/IssuerSerial.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/IssuingDistributionPoint.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/KeyPurposeId.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/KeyUsage.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/NameConstraints.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/NoticeReference.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/ObjectDigestInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/PolicyInformation.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/PolicyMappings.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/PolicyQualifierId.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/PolicyQualifierInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/PrivateKeyUsagePeriod.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/RSAPublicKeyStructure.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/ReasonFlags.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/RoleSyntax.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/SubjectDirectoryAttributes.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/SubjectKeyIdentifier.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/SubjectPublicKeyInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/TBSCertList.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/TBSCertificateStructure.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/Target.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/TargetInformation.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/Targets.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/Time.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/UserNotice.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/V1TBSCertificateGenerator.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/V2AttributeCertificateInfoGenerator.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/V2Form.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/V2TBSCertListGenerator.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/V3TBSCertificateGenerator.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/X509Attributes.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/X509CertificateStructure.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/X509DefaultEntryConverter.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/X509Extension.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/X509Extensions.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/X509ExtensionsGenerator.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/X509Name.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/X509NameEntryConverter.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/X509NameTokenizer.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/X509ObjectIdentifiers.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/qualified/BiometricData.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/qualified/ETSIQCObjectIdentifiers.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/qualified/Iso4217CurrencyCode.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/qualified/MonetaryValue.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/qualified/QCStatement.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/qualified/RFC3739QCObjectIdentifiers.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/qualified/SemanticsInformation.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/qualified/TypeOfBiometricData.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/sigi/NameOrPseudonym.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/sigi/PersonalData.cs delete mode 100644 bc-sharp-crypto/src/asn1/x509/sigi/SigIObjectIdentifiers.cs delete mode 100644 bc-sharp-crypto/src/asn1/x9/DHDomainParameters.cs delete mode 100644 bc-sharp-crypto/src/asn1/x9/DHPublicKey.cs delete mode 100644 bc-sharp-crypto/src/asn1/x9/DHValidationParms.cs delete mode 100644 bc-sharp-crypto/src/asn1/x9/ECNamedCurveTable.cs delete mode 100644 bc-sharp-crypto/src/asn1/x9/KeySpecificInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/x9/OtherInfo.cs delete mode 100644 bc-sharp-crypto/src/asn1/x9/X962NamedCurves.cs delete mode 100644 bc-sharp-crypto/src/asn1/x9/X962Parameters.cs delete mode 100644 bc-sharp-crypto/src/asn1/x9/X9Curve.cs delete mode 100644 bc-sharp-crypto/src/asn1/x9/X9ECParameters.cs delete mode 100644 bc-sharp-crypto/src/asn1/x9/X9ECParametersHolder.cs delete mode 100644 bc-sharp-crypto/src/asn1/x9/X9ECPoint.cs delete mode 100644 bc-sharp-crypto/src/asn1/x9/X9FieldElement.cs delete mode 100644 bc-sharp-crypto/src/asn1/x9/X9FieldID.cs delete mode 100644 bc-sharp-crypto/src/asn1/x9/X9IntegerConverter.cs delete mode 100644 bc-sharp-crypto/src/asn1/x9/X9ObjectIdentifiers.cs delete mode 100644 bc-sharp-crypto/src/bcpg/ArmoredInputStream.cs delete mode 100644 bc-sharp-crypto/src/bcpg/ArmoredOutputStream.cs delete mode 100644 bc-sharp-crypto/src/bcpg/BcpgInputStream.cs delete mode 100644 bc-sharp-crypto/src/bcpg/BcpgObject.cs delete mode 100644 bc-sharp-crypto/src/bcpg/BcpgOutputStream.cs delete mode 100644 bc-sharp-crypto/src/bcpg/CompressedDataPacket.cs delete mode 100644 bc-sharp-crypto/src/bcpg/CompressionAlgorithmTags.cs delete mode 100644 bc-sharp-crypto/src/bcpg/ContainedPacket.cs delete mode 100644 bc-sharp-crypto/src/bcpg/Crc24.cs delete mode 100644 bc-sharp-crypto/src/bcpg/DsaPublicBcpgKey.cs delete mode 100644 bc-sharp-crypto/src/bcpg/DsaSecretBcpgKey.cs delete mode 100644 bc-sharp-crypto/src/bcpg/ECDHPublicBCPGKey.cs delete mode 100644 bc-sharp-crypto/src/bcpg/ECDsaPublicBCPGKey.cs delete mode 100644 bc-sharp-crypto/src/bcpg/ECPublicBCPGKey.cs delete mode 100644 bc-sharp-crypto/src/bcpg/ECSecretBCPGKey.cs delete mode 100644 bc-sharp-crypto/src/bcpg/ElGamalPublicBcpgKey.cs delete mode 100644 bc-sharp-crypto/src/bcpg/ElGamalSecretBcpgKey.cs delete mode 100644 bc-sharp-crypto/src/bcpg/ExperimentalPacket.cs delete mode 100644 bc-sharp-crypto/src/bcpg/HashAlgorithmTags.cs delete mode 100644 bc-sharp-crypto/src/bcpg/IBcpgKey.cs delete mode 100644 bc-sharp-crypto/src/bcpg/InputStreamPacket.cs delete mode 100644 bc-sharp-crypto/src/bcpg/LiteralDataPacket.cs delete mode 100644 bc-sharp-crypto/src/bcpg/MPInteger.cs delete mode 100644 bc-sharp-crypto/src/bcpg/MarkerPacket.cs delete mode 100644 bc-sharp-crypto/src/bcpg/ModDetectionCodePacket.cs delete mode 100644 bc-sharp-crypto/src/bcpg/OnePassSignaturePacket.cs delete mode 100644 bc-sharp-crypto/src/bcpg/OutputStreamPacket.cs delete mode 100644 bc-sharp-crypto/src/bcpg/Packet.cs delete mode 100644 bc-sharp-crypto/src/bcpg/PacketTags.cs delete mode 100644 bc-sharp-crypto/src/bcpg/PublicKeyAlgorithmTags.cs delete mode 100644 bc-sharp-crypto/src/bcpg/PublicKeyEncSessionPacket.cs delete mode 100644 bc-sharp-crypto/src/bcpg/PublicKeyPacket.cs delete mode 100644 bc-sharp-crypto/src/bcpg/PublicSubkeyPacket.cs delete mode 100644 bc-sharp-crypto/src/bcpg/RsaPublicBcpgKey.cs delete mode 100644 bc-sharp-crypto/src/bcpg/RsaSecretBcpgKey.cs delete mode 100644 bc-sharp-crypto/src/bcpg/S2k.cs delete mode 100644 bc-sharp-crypto/src/bcpg/SecretKeyPacket.cs delete mode 100644 bc-sharp-crypto/src/bcpg/SecretSubkeyPacket.cs delete mode 100644 bc-sharp-crypto/src/bcpg/SignaturePacket.cs delete mode 100644 bc-sharp-crypto/src/bcpg/SignatureSubpacket.cs delete mode 100644 bc-sharp-crypto/src/bcpg/SignatureSubpacketTags.cs delete mode 100644 bc-sharp-crypto/src/bcpg/SignatureSubpacketsReader.cs delete mode 100644 bc-sharp-crypto/src/bcpg/SymmetricEncDataPacket.cs delete mode 100644 bc-sharp-crypto/src/bcpg/SymmetricEncIntegrityPacket.cs delete mode 100644 bc-sharp-crypto/src/bcpg/SymmetricKeyAlgorithmTags.cs delete mode 100644 bc-sharp-crypto/src/bcpg/SymmetricKeyEncSessionPacket.cs delete mode 100644 bc-sharp-crypto/src/bcpg/TrustPacket.cs delete mode 100644 bc-sharp-crypto/src/bcpg/UserAttributePacket.cs delete mode 100644 bc-sharp-crypto/src/bcpg/UserAttributeSubpacket.cs delete mode 100644 bc-sharp-crypto/src/bcpg/UserAttributeSubpacketTags.cs delete mode 100644 bc-sharp-crypto/src/bcpg/UserAttributeSubpacketsReader.cs delete mode 100644 bc-sharp-crypto/src/bcpg/UserIdPacket.cs delete mode 100644 bc-sharp-crypto/src/bcpg/attr/ImageAttrib.cs delete mode 100644 bc-sharp-crypto/src/bcpg/sig/EmbeddedSignature.cs delete mode 100644 bc-sharp-crypto/src/bcpg/sig/Exportable.cs delete mode 100644 bc-sharp-crypto/src/bcpg/sig/Features.cs delete mode 100644 bc-sharp-crypto/src/bcpg/sig/IssuerKeyId.cs delete mode 100644 bc-sharp-crypto/src/bcpg/sig/KeyExpirationTime.cs delete mode 100644 bc-sharp-crypto/src/bcpg/sig/KeyFlags.cs delete mode 100644 bc-sharp-crypto/src/bcpg/sig/NotationData.cs delete mode 100644 bc-sharp-crypto/src/bcpg/sig/PreferredAlgorithms.cs delete mode 100644 bc-sharp-crypto/src/bcpg/sig/PrimaryUserId.cs delete mode 100644 bc-sharp-crypto/src/bcpg/sig/Revocable.cs delete mode 100644 bc-sharp-crypto/src/bcpg/sig/RevocationKey.cs delete mode 100644 bc-sharp-crypto/src/bcpg/sig/RevocationKeyTags.cs delete mode 100644 bc-sharp-crypto/src/bcpg/sig/RevocationReason.cs delete mode 100644 bc-sharp-crypto/src/bcpg/sig/RevocationReasonTags.cs delete mode 100644 bc-sharp-crypto/src/bcpg/sig/SignatureCreationTime.cs delete mode 100644 bc-sharp-crypto/src/bcpg/sig/SignatureExpirationTime.cs delete mode 100644 bc-sharp-crypto/src/bcpg/sig/SignerUserId.cs delete mode 100644 bc-sharp-crypto/src/bcpg/sig/TrustSignature.cs delete mode 100644 bc-sharp-crypto/src/cms/BaseDigestCalculator.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSAttributeTableGenerationException.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSAttributeTableGenerator.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSAuthEnvelopedData.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSAuthEnvelopedGenerator.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSAuthenticatedData.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSAuthenticatedDataGenerator.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSAuthenticatedDataParser.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSAuthenticatedDataStreamGenerator.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSAuthenticatedGenerator.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSCompressedData.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSCompressedDataGenerator.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSCompressedDataParser.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSCompressedDataStreamGenerator.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSContentInfoParser.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSEnvelopedData.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSEnvelopedDataGenerator.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSEnvelopedDataParser.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSEnvelopedDataStreamGenerator.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSEnvelopedGenerator.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSEnvelopedHelper.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSException.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSPBEKey.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSProcessable.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSProcessableByteArray.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSProcessableFile.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSProcessableInputStream.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSReadable.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSSecureReadable.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSSignedData.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSSignedDataGenerator.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSSignedDataParser.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSSignedDataStreamGenerator.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSSignedGenerator.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSSignedHelper.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSStreamException.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSTypedStream.cs delete mode 100644 bc-sharp-crypto/src/cms/CMSUtils.cs delete mode 100644 bc-sharp-crypto/src/cms/CounterSignatureDigestCalculator.cs delete mode 100644 bc-sharp-crypto/src/cms/DefaultAuthenticatedAttributeTableGenerator.cs delete mode 100644 bc-sharp-crypto/src/cms/DefaultSignedAttributeTableGenerator.cs delete mode 100644 bc-sharp-crypto/src/cms/DigOutputStream.cs delete mode 100644 bc-sharp-crypto/src/cms/IDigestCalculator.cs delete mode 100644 bc-sharp-crypto/src/cms/KEKRecipientInfoGenerator.cs delete mode 100644 bc-sharp-crypto/src/cms/KEKRecipientInformation.cs delete mode 100644 bc-sharp-crypto/src/cms/KeyAgreeRecipientInfoGenerator.cs delete mode 100644 bc-sharp-crypto/src/cms/KeyAgreeRecipientInformation.cs delete mode 100644 bc-sharp-crypto/src/cms/KeyTransRecipientInfoGenerator.cs delete mode 100644 bc-sharp-crypto/src/cms/KeyTransRecipientInformation.cs delete mode 100644 bc-sharp-crypto/src/cms/MacOutputStream.cs delete mode 100644 bc-sharp-crypto/src/cms/OriginatorId.cs delete mode 100644 bc-sharp-crypto/src/cms/OriginatorInfoGenerator.cs delete mode 100644 bc-sharp-crypto/src/cms/OriginatorInformation.cs delete mode 100644 bc-sharp-crypto/src/cms/PKCS5Scheme2PBEKey.cs delete mode 100644 bc-sharp-crypto/src/cms/PKCS5Scheme2UTF8PBEKey.cs delete mode 100644 bc-sharp-crypto/src/cms/PasswordRecipientInfoGenerator.cs delete mode 100644 bc-sharp-crypto/src/cms/PasswordRecipientInformation.cs delete mode 100644 bc-sharp-crypto/src/cms/RecipientId.cs delete mode 100644 bc-sharp-crypto/src/cms/RecipientInfoGenerator.cs delete mode 100644 bc-sharp-crypto/src/cms/RecipientInformation.cs delete mode 100644 bc-sharp-crypto/src/cms/RecipientInformationStore.cs delete mode 100644 bc-sharp-crypto/src/cms/SigOutputStream.cs delete mode 100644 bc-sharp-crypto/src/cms/SignerId.cs delete mode 100644 bc-sharp-crypto/src/cms/SignerInfoGenerator.cs delete mode 100644 bc-sharp-crypto/src/cms/SignerInformation.cs delete mode 100644 bc-sharp-crypto/src/cms/SignerInformationStore.cs delete mode 100644 bc-sharp-crypto/src/cms/SimpleAttributeTableGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/AsymmetricCipherKeyPair.cs delete mode 100644 bc-sharp-crypto/src/crypto/AsymmetricKeyParameter.cs delete mode 100644 bc-sharp-crypto/src/crypto/BufferedAeadBlockCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/BufferedAsymmetricBlockCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/BufferedBlockCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/BufferedCipherBase.cs delete mode 100644 bc-sharp-crypto/src/crypto/BufferedIesCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/BufferedStreamCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/Check.cs delete mode 100644 bc-sharp-crypto/src/crypto/CipherKeyGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/CryptoException.cs delete mode 100644 bc-sharp-crypto/src/crypto/DataLengthException.cs delete mode 100644 bc-sharp-crypto/src/crypto/IAsymmetricBlockCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/IAsymmetricCipherKeyPairGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/IBasicAgreement.cs delete mode 100644 bc-sharp-crypto/src/crypto/IBlockCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/IBlockResult.cs delete mode 100644 bc-sharp-crypto/src/crypto/IBufferedCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/ICipherParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/IDSA.cs delete mode 100644 bc-sharp-crypto/src/crypto/IDerivationFunction.cs delete mode 100644 bc-sharp-crypto/src/crypto/IDerivationParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/IDigest.cs delete mode 100644 bc-sharp-crypto/src/crypto/IEntropySource.cs delete mode 100644 bc-sharp-crypto/src/crypto/IEntropySourceProvider.cs delete mode 100644 bc-sharp-crypto/src/crypto/IMac.cs delete mode 100644 bc-sharp-crypto/src/crypto/ISignatureFactory.cs delete mode 100644 bc-sharp-crypto/src/crypto/ISigner.cs delete mode 100644 bc-sharp-crypto/src/crypto/ISignerWithRecovery.cs delete mode 100644 bc-sharp-crypto/src/crypto/IStreamCalculator.cs delete mode 100644 bc-sharp-crypto/src/crypto/IStreamCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/IVerifier.cs delete mode 100644 bc-sharp-crypto/src/crypto/IVerifierFactory.cs delete mode 100644 bc-sharp-crypto/src/crypto/IVerifierFactoryProvider.cs delete mode 100644 bc-sharp-crypto/src/crypto/IWrapper.cs delete mode 100644 bc-sharp-crypto/src/crypto/IXof.cs delete mode 100644 bc-sharp-crypto/src/crypto/InvalidCipherTextException.cs delete mode 100644 bc-sharp-crypto/src/crypto/KeyGenerationParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/MaxBytesExceededException.cs delete mode 100644 bc-sharp-crypto/src/crypto/OutputLengthException.cs delete mode 100644 bc-sharp-crypto/src/crypto/PbeParametersGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/StreamBlockCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/agreement/DHAgreement.cs delete mode 100644 bc-sharp-crypto/src/crypto/agreement/DHBasicAgreement.cs delete mode 100644 bc-sharp-crypto/src/crypto/agreement/DHStandardGroups.cs delete mode 100644 bc-sharp-crypto/src/crypto/agreement/ECDHBasicAgreement.cs delete mode 100644 bc-sharp-crypto/src/crypto/agreement/ECDHCBasicAgreement.cs delete mode 100644 bc-sharp-crypto/src/crypto/agreement/ECDHWithKdfBasicAgreement.cs delete mode 100644 bc-sharp-crypto/src/crypto/agreement/ECMqvBasicAgreement.cs delete mode 100644 bc-sharp-crypto/src/crypto/agreement/ECMqvWithKdfBasicAgreement.cs delete mode 100644 bc-sharp-crypto/src/crypto/agreement/jpake/JPakeParticipant.cs delete mode 100644 bc-sharp-crypto/src/crypto/agreement/jpake/JPakePrimeOrderGroup.cs delete mode 100644 bc-sharp-crypto/src/crypto/agreement/jpake/JPakePrimeOrderGroups.cs delete mode 100644 bc-sharp-crypto/src/crypto/agreement/jpake/JPakeRound1Payload.cs delete mode 100644 bc-sharp-crypto/src/crypto/agreement/jpake/JPakeRound2Payload.cs delete mode 100644 bc-sharp-crypto/src/crypto/agreement/jpake/JPakeRound3Payload.cs delete mode 100644 bc-sharp-crypto/src/crypto/agreement/jpake/JPakeUtilities.cs delete mode 100644 bc-sharp-crypto/src/crypto/agreement/kdf/DHKdfParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/agreement/kdf/DHKekGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/agreement/kdf/ECDHKekGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/agreement/srp/SRP6Client.cs delete mode 100644 bc-sharp-crypto/src/crypto/agreement/srp/SRP6Server.cs delete mode 100644 bc-sharp-crypto/src/crypto/agreement/srp/SRP6StandardGroups.cs delete mode 100644 bc-sharp-crypto/src/crypto/agreement/srp/SRP6Utilities.cs delete mode 100644 bc-sharp-crypto/src/crypto/agreement/srp/SRP6VerifierGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/DSTU7564Digest.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/GOST3411Digest.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/GOST3411_2012Digest.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/GOST3411_2012_256Digest.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/GOST3411_2012_512Digest.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/GeneralDigest.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/KeccakDigest.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/LongDigest.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/MD2Digest.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/MD4Digest.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/MD5Digest.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/NonMemoableDigest.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/NullDigest.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/RipeMD128Digest.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/RipeMD160Digest.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/RipeMD256Digest.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/RipeMD320Digest.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/SHA3Digest.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/SM3Digest.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/Sha1Digest.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/Sha224Digest.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/Sha256Digest.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/Sha384Digest.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/Sha512Digest.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/Sha512tDigest.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/ShakeDigest.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/ShortenedDigest.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/SkeinDigest.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/SkeinEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/TigerDigest.cs delete mode 100644 bc-sharp-crypto/src/crypto/digests/WhirlpoolDigest.cs delete mode 100644 bc-sharp-crypto/src/crypto/ec/CustomNamedCurves.cs delete mode 100644 bc-sharp-crypto/src/crypto/encodings/ISO9796d1Encoding.cs delete mode 100644 bc-sharp-crypto/src/crypto/encodings/OaepEncoding.cs delete mode 100644 bc-sharp-crypto/src/crypto/encodings/Pkcs1Encoding.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/AesEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/AesFastEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/AesLightEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/AesWrapEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/BlowfishEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/CamelliaEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/CamelliaLightEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/CamelliaWrapEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/Cast5Engine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/Cast6Engine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/ChaCha7539Engine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/ChaChaEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/DesEdeEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/DesEdeWrapEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/DesEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/Dstu7624Engine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/Dstu7624WrapEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/ElGamalEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/GOST28147Engine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/HC128Engine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/HC256Engine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/ISAACEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/IdeaEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/IesEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/NaccacheSternEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/NoekeonEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/NullEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/RC2Engine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/RC2WrapEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/RC4Engine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/RC532Engine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/RC564Engine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/RC6Engine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/RFC3211WrapEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/RFC3394WrapEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/RSABlindedEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/RSABlindingEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/RSACoreEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/RijndaelEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/RsaEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/SEEDEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/SEEDWrapEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/Salsa20Engine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/SerpentEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/SerpentEngineBase.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/SkipjackEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/TEAEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/ThreefishEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/TnepresEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/TwofishEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/VMPCEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/VMPCKSA3Engine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/XSalsa20Engine.cs delete mode 100644 bc-sharp-crypto/src/crypto/engines/XTEAEngine.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/BCrypt.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/BaseKdfBytesGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/DHBasicKeyPairGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/DHKeyGeneratorHelper.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/DHKeyPairGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/DHParametersGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/DHParametersHelper.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/DesEdeKeyGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/DesKeyGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/DsaKeyPairGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/DsaParametersGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/ECKeyPairGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/ElGamalKeyPairGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/ElGamalParametersGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/GOST3410KeyPairGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/GOST3410ParametersGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/HKDFBytesGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/Kdf1BytesGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/Kdf2BytesGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/Mgf1BytesGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/NaccacheSternKeyPairGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/OpenBsdBCrypt.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/OpenSSLPBEParametersGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/Pkcs12ParametersGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/Pkcs5S1ParametersGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/Pkcs5S2ParametersGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/Poly1305KeyGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/RSABlindingFactorGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/RsaKeyPairGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/generators/SCrypt.cs delete mode 100644 bc-sharp-crypto/src/crypto/io/CipherStream.cs delete mode 100644 bc-sharp-crypto/src/crypto/io/DigestStream.cs delete mode 100644 bc-sharp-crypto/src/crypto/io/MacStream.cs delete mode 100644 bc-sharp-crypto/src/crypto/io/SignerStream.cs delete mode 100644 bc-sharp-crypto/src/crypto/macs/CMac.cs delete mode 100644 bc-sharp-crypto/src/crypto/macs/CbcBlockCipherMac.cs delete mode 100644 bc-sharp-crypto/src/crypto/macs/CfbBlockCipherMac.cs delete mode 100644 bc-sharp-crypto/src/crypto/macs/DSTU7564Mac.cs delete mode 100644 bc-sharp-crypto/src/crypto/macs/DSTU7624Mac.cs delete mode 100644 bc-sharp-crypto/src/crypto/macs/GMac.cs delete mode 100644 bc-sharp-crypto/src/crypto/macs/GOST28147Mac.cs delete mode 100644 bc-sharp-crypto/src/crypto/macs/HMac.cs delete mode 100644 bc-sharp-crypto/src/crypto/macs/ISO9797Alg3Mac.cs delete mode 100644 bc-sharp-crypto/src/crypto/macs/Poly1305.cs delete mode 100644 bc-sharp-crypto/src/crypto/macs/SipHash.cs delete mode 100644 bc-sharp-crypto/src/crypto/macs/SkeinMac.cs delete mode 100644 bc-sharp-crypto/src/crypto/macs/VMPCMac.cs delete mode 100644 bc-sharp-crypto/src/crypto/modes/CbcBlockCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/modes/CcmBlockCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/modes/CfbBlockCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/modes/CtsBlockCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/modes/EAXBlockCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/modes/GCMBlockCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/modes/GOFBBlockCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/modes/IAeadBlockCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/modes/KCcmBlockCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/modes/KCtrBlockCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/modes/OCBBlockCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/modes/OfbBlockCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/modes/OpenPgpCfbBlockCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/modes/SicBlockCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/modes/gcm/BasicGcmExponentiator.cs delete mode 100644 bc-sharp-crypto/src/crypto/modes/gcm/BasicGcmMultiplier.cs delete mode 100644 bc-sharp-crypto/src/crypto/modes/gcm/GcmUtilities.cs delete mode 100644 bc-sharp-crypto/src/crypto/modes/gcm/IGcmExponentiator.cs delete mode 100644 bc-sharp-crypto/src/crypto/modes/gcm/IGcmMultiplier.cs delete mode 100644 bc-sharp-crypto/src/crypto/modes/gcm/Tables1kGcmExponentiator.cs delete mode 100644 bc-sharp-crypto/src/crypto/modes/gcm/Tables64kGcmMultiplier.cs delete mode 100644 bc-sharp-crypto/src/crypto/modes/gcm/Tables8kGcmMultiplier.cs delete mode 100644 bc-sharp-crypto/src/crypto/operators/Asn1Signature.cs delete mode 100644 bc-sharp-crypto/src/crypto/paddings/BlockCipherPadding.cs delete mode 100644 bc-sharp-crypto/src/crypto/paddings/ISO10126d2Padding.cs delete mode 100644 bc-sharp-crypto/src/crypto/paddings/ISO7816d4Padding.cs delete mode 100644 bc-sharp-crypto/src/crypto/paddings/PaddedBufferedBlockCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/paddings/Pkcs7Padding.cs delete mode 100644 bc-sharp-crypto/src/crypto/paddings/TbcPadding.cs delete mode 100644 bc-sharp-crypto/src/crypto/paddings/X923Padding.cs delete mode 100644 bc-sharp-crypto/src/crypto/paddings/ZeroBytePadding.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/AEADParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/CcmParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/DHKeyGenerationParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/DHKeyParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/DHParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/DHPrivateKeyParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/DHPublicKeyParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/DHValidationParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/DSAParameterGenerationParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/DesEdeParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/DesParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/DsaKeyGenerationParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/DsaKeyParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/DsaParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/DsaPrivateKeyParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/DsaPublicKeyParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/DsaValidationParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/ECDomainParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/ECKeyGenerationParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/ECKeyParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/ECPrivateKeyParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/ECPublicKeyParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/ElGamalKeyGenerationParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/ElGamalKeyParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/ElGamalParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/ElGamalPrivateKeyParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/ElGamalPublicKeyParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/GOST3410KeyGenerationParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/GOST3410KeyParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/GOST3410Parameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/GOST3410PrivateKeyParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/GOST3410PublicKeyParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/GOST3410ValidationParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/HKDFParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/ISO18033KDFParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/IesParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/IesWithCipherParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/KdfParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/KeyParameter.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/MgfParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/MqvPrivateParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/MqvPublicParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/NaccacheSternKeyGenerationParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/NaccacheSternKeyParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/NaccacheSternPrivateKeyParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/ParametersWithIV.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/ParametersWithRandom.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/ParametersWithSBox.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/ParametersWithSalt.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/RC2Parameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/RC5Parameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/RSABlindingParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/RsaKeyGenerationParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/RsaKeyParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/RsaPrivateCrtKeyParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/SkeinParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/Srp6GroupParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/parameters/TweakableBlockCipherParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/prng/BasicEntropySourceProvider.cs delete mode 100644 bc-sharp-crypto/src/crypto/prng/CryptoApiEntropySourceProvider.cs delete mode 100644 bc-sharp-crypto/src/crypto/prng/CryptoApiRandomGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/prng/DigestRandomGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/prng/EntropyUtilities.cs delete mode 100644 bc-sharp-crypto/src/crypto/prng/IDrbgProvider.cs delete mode 100644 bc-sharp-crypto/src/crypto/prng/IRandomGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/prng/ReversedWindowGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/prng/SP800SecureRandom.cs delete mode 100644 bc-sharp-crypto/src/crypto/prng/SP800SecureRandomBuilder.cs delete mode 100644 bc-sharp-crypto/src/crypto/prng/ThreadedSeedGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/prng/VMPCRandomGenerator.cs delete mode 100644 bc-sharp-crypto/src/crypto/prng/X931Rng.cs delete mode 100644 bc-sharp-crypto/src/crypto/prng/X931SecureRandom.cs delete mode 100644 bc-sharp-crypto/src/crypto/prng/X931SecureRandomBuilder.cs delete mode 100644 bc-sharp-crypto/src/crypto/prng/drbg/CtrSP800Drbg.cs delete mode 100644 bc-sharp-crypto/src/crypto/prng/drbg/DrbgUtilities.cs delete mode 100644 bc-sharp-crypto/src/crypto/prng/drbg/HMacSP800Drbg.cs delete mode 100644 bc-sharp-crypto/src/crypto/prng/drbg/HashSP800Drbg.cs delete mode 100644 bc-sharp-crypto/src/crypto/prng/drbg/ISP80090Drbg.cs delete mode 100644 bc-sharp-crypto/src/crypto/signers/DsaDigestSigner.cs delete mode 100644 bc-sharp-crypto/src/crypto/signers/DsaSigner.cs delete mode 100644 bc-sharp-crypto/src/crypto/signers/ECDsaSigner.cs delete mode 100644 bc-sharp-crypto/src/crypto/signers/ECGOST3410Signer.cs delete mode 100644 bc-sharp-crypto/src/crypto/signers/ECNRSigner.cs delete mode 100644 bc-sharp-crypto/src/crypto/signers/GOST3410DigestSigner.cs delete mode 100644 bc-sharp-crypto/src/crypto/signers/GOST3410Signer.cs delete mode 100644 bc-sharp-crypto/src/crypto/signers/GenericSigner.cs delete mode 100644 bc-sharp-crypto/src/crypto/signers/HMacDsaKCalculator.cs delete mode 100644 bc-sharp-crypto/src/crypto/signers/IDsaKCalculator.cs delete mode 100644 bc-sharp-crypto/src/crypto/signers/Iso9796d2PssSigner.cs delete mode 100644 bc-sharp-crypto/src/crypto/signers/Iso9796d2Signer.cs delete mode 100644 bc-sharp-crypto/src/crypto/signers/IsoTrailers.cs delete mode 100644 bc-sharp-crypto/src/crypto/signers/PssSigner.cs delete mode 100644 bc-sharp-crypto/src/crypto/signers/RandomDsaKCalculator.cs delete mode 100644 bc-sharp-crypto/src/crypto/signers/RsaDigestSigner.cs delete mode 100644 bc-sharp-crypto/src/crypto/signers/X931Signer.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/AbstractTlsAgreementCredentials.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/AbstractTlsCipherFactory.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/AbstractTlsClient.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/AbstractTlsContext.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/AbstractTlsCredentials.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/AbstractTlsEncryptionCredentials.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/AbstractTlsKeyExchange.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/AbstractTlsPeer.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/AbstractTlsServer.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/AbstractTlsSigner.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/AbstractTlsSignerCredentials.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/AlertDescription.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/AlertLevel.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/BasicTlsPskIdentity.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/BulkCipherAlgorithm.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/ByteQueue.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/ByteQueueStream.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/CertChainType.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/Certificate.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/CertificateRequest.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/CertificateStatus.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/CertificateStatusRequest.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/CertificateStatusType.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/CertificateType.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/CertificateUrl.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/Chacha20Poly1305.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/ChangeCipherSpec.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/CipherSuite.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/CipherType.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/ClientAuthenticationType.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/ClientCertificateType.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/CombinedHash.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/CompressionMethod.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/ConnectionEnd.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/ContentType.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/DatagramTransport.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/DefaultTlsAgreementCredentials.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/DefaultTlsCipherFactory.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/DefaultTlsClient.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/DefaultTlsEncryptionCredentials.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/DefaultTlsServer.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/DefaultTlsSignerCredentials.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/DefaultTlsSrpGroupVerifier.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/DeferredHash.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/DigestInputBuffer.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/DigitallySigned.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/DtlsClientProtocol.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/DtlsEpoch.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/DtlsHandshakeRetransmit.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/DtlsProtocol.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/DtlsReassembler.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/DtlsRecordLayer.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/DtlsReliableHandshake.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/DtlsReplayWindow.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/DtlsServerProtocol.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/DtlsTransport.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/ECBasisType.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/ECCurveType.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/ECPointFormat.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/EncryptionAlgorithm.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/ExporterLabel.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/ExtensionType.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/FiniteFieldDheGroup.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/HandshakeType.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/HashAlgorithm.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/HeartbeatExtension.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/HeartbeatMessage.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/HeartbeatMessageType.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/HeartbeatMode.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/KeyExchangeAlgorithm.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/MacAlgorithm.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/MaxFragmentLength.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/NameType.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/NamedCurve.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/NewSessionTicket.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/OcspStatusRequest.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/PrfAlgorithm.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/ProtocolVersion.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/PskTlsClient.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/PskTlsServer.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/RecordStream.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/SecurityParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/ServerDHParams.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/ServerName.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/ServerNameList.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/ServerOnlyTlsAuthentication.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/ServerSrpParams.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/SessionParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/SignatureAlgorithm.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/SignatureAndHashAlgorithm.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/SignerInputBuffer.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/SimulatedTlsSrpIdentityManager.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/SrpTlsClient.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/SrpTlsServer.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/SrtpProtectionProfile.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/Ssl3Mac.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/SupplementalDataEntry.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/SupplementalDataType.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsAeadCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsAgreementCredentials.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsAuthentication.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsBlockCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsCipherFactory.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsClient.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsClientContext.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsClientContextImpl.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsClientProtocol.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsCompression.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsContext.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsCredentials.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsDHKeyExchange.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsDHUtilities.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsDeflateCompression.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsDheKeyExchange.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsDsaSigner.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsDssSigner.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsECDHKeyExchange.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsECDheKeyExchange.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsECDsaSigner.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsEccUtilities.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsEncryptionCredentials.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsException.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsExtensionsUtilities.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsFatalAlert.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsFatalAlertReceived.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsHandshakeHash.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsKeyExchange.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsMac.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsNoCloseNotifyException.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsNullCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsNullCompression.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsPeer.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsProtocol.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsProtocolHandler.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsPskIdentity.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsPskIdentityManager.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsPskKeyExchange.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsRsaKeyExchange.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsRsaSigner.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsRsaUtilities.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsServer.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsServerContext.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsServerContextImpl.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsServerProtocol.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsSession.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsSessionImpl.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsSigner.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsSignerCredentials.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsSrpGroupVerifier.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsSrpIdentityManager.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsSrpKeyExchange.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsSrpLoginParameters.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsSrpUtilities.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsSrtpUtilities.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsStream.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsStreamCipher.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/TlsUtilities.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/UrlAndHash.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/UseSrtpData.cs delete mode 100644 bc-sharp-crypto/src/crypto/tls/UserMappingType.cs delete mode 100644 bc-sharp-crypto/src/crypto/util/Pack.cs delete mode 100644 bc-sharp-crypto/src/math/BigInteger.cs delete mode 100644 bc-sharp-crypto/src/math/Primes.cs delete mode 100644 bc-sharp-crypto/src/math/ec/ECAlgorithms.cs delete mode 100644 bc-sharp-crypto/src/math/ec/ECCurve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/ECFieldElement.cs delete mode 100644 bc-sharp-crypto/src/math/ec/ECPoint.cs delete mode 100644 bc-sharp-crypto/src/math/ec/ECPointMap.cs delete mode 100644 bc-sharp-crypto/src/math/ec/LongArray.cs delete mode 100644 bc-sharp-crypto/src/math/ec/ScaleXPointMap.cs delete mode 100644 bc-sharp-crypto/src/math/ec/ScaleYPointMap.cs delete mode 100644 bc-sharp-crypto/src/math/ec/SimpleLookupTable.cs delete mode 100644 bc-sharp-crypto/src/math/ec/abc/SimpleBigDecimal.cs delete mode 100644 bc-sharp-crypto/src/math/ec/abc/Tnaf.cs delete mode 100644 bc-sharp-crypto/src/math/ec/abc/ZTauElement.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/djb/Curve25519.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/djb/Curve25519Field.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/djb/Curve25519FieldElement.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/djb/Curve25519Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/gm/SM2P256V1Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/gm/SM2P256V1Field.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/gm/SM2P256V1FieldElement.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/gm/SM2P256V1Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP128R1Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP128R1Field.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP128R1FieldElement.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP128R1Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP160K1Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP160K1Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP160R1Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP160R1Field.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP160R1FieldElement.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP160R1Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP160R2Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP160R2Field.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP160R2FieldElement.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP160R2Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP192K1Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP192K1Field.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP192K1FieldElement.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP192K1Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP192R1Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP192R1Field.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP192R1FieldElement.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP192R1Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP224K1Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP224K1Field.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP224K1FieldElement.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP224K1Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP224R1Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP224R1Field.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP224R1FieldElement.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP224R1Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP256K1Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP256K1Field.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP256K1FieldElement.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP256K1Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP256R1Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP256R1Field.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP256R1FieldElement.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP256R1Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP384R1Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP384R1Field.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP384R1FieldElement.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP384R1Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP521R1Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP521R1Field.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP521R1FieldElement.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecP521R1Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT113Field.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT113FieldElement.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT113R1Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT113R1Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT113R2Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT113R2Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT131Field.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT131FieldElement.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT131R1Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT131R1Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT131R2Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT131R2Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT163Field.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT163FieldElement.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT163K1Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT163K1Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT163R1Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT163R1Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT163R2Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT163R2Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT193Field.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT193FieldElement.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT193R1Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT193R1Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT193R2Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT193R2Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT233Field.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT233FieldElement.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT233K1Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT233K1Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT233R1Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT233R1Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT239Field.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT239FieldElement.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT239K1Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT239K1Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT283Field.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT283FieldElement.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT283K1Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT283K1Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT283R1Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT283R1Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT409Field.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT409FieldElement.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT409K1Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT409K1Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT409R1Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT409R1Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT571Field.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT571FieldElement.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT571K1Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT571K1Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT571R1Curve.cs delete mode 100644 bc-sharp-crypto/src/math/ec/custom/sec/SecT571R1Point.cs delete mode 100644 bc-sharp-crypto/src/math/ec/endo/ECEndomorphism.cs delete mode 100644 bc-sharp-crypto/src/math/ec/endo/GlvEndomorphism.cs delete mode 100644 bc-sharp-crypto/src/math/ec/endo/GlvTypeBEndomorphism.cs delete mode 100644 bc-sharp-crypto/src/math/ec/endo/GlvTypeBParameters.cs delete mode 100644 bc-sharp-crypto/src/math/ec/multiplier/AbstractECMultiplier.cs delete mode 100644 bc-sharp-crypto/src/math/ec/multiplier/DoubleAddMultiplier.cs delete mode 100644 bc-sharp-crypto/src/math/ec/multiplier/ECMultiplier.cs delete mode 100644 bc-sharp-crypto/src/math/ec/multiplier/FixedPointCombMultiplier.cs delete mode 100644 bc-sharp-crypto/src/math/ec/multiplier/FixedPointPreCompInfo.cs delete mode 100644 bc-sharp-crypto/src/math/ec/multiplier/FixedPointUtilities.cs delete mode 100644 bc-sharp-crypto/src/math/ec/multiplier/GlvMultiplier.cs delete mode 100644 bc-sharp-crypto/src/math/ec/multiplier/MixedNafR2LMultiplier.cs delete mode 100644 bc-sharp-crypto/src/math/ec/multiplier/MontgomeryLadderMultiplier.cs delete mode 100644 bc-sharp-crypto/src/math/ec/multiplier/NafL2RMultiplier.cs delete mode 100644 bc-sharp-crypto/src/math/ec/multiplier/NafR2LMultiplier.cs delete mode 100644 bc-sharp-crypto/src/math/ec/multiplier/PreCompInfo.cs delete mode 100644 bc-sharp-crypto/src/math/ec/multiplier/ReferenceMultiplier.cs delete mode 100644 bc-sharp-crypto/src/math/ec/multiplier/WNafL2RMultiplier.cs delete mode 100644 bc-sharp-crypto/src/math/ec/multiplier/WNafPreCompInfo.cs delete mode 100644 bc-sharp-crypto/src/math/ec/multiplier/WNafUtilities.cs delete mode 100644 bc-sharp-crypto/src/math/ec/multiplier/WTauNafMultiplier.cs delete mode 100644 bc-sharp-crypto/src/math/ec/multiplier/WTauNafPreCompInfo.cs delete mode 100644 bc-sharp-crypto/src/math/ec/multiplier/ZSignedDigitL2RMultiplier.cs delete mode 100644 bc-sharp-crypto/src/math/ec/multiplier/ZSignedDigitR2LMultiplier.cs delete mode 100644 bc-sharp-crypto/src/math/field/FiniteFields.cs delete mode 100644 bc-sharp-crypto/src/math/field/GF2Polynomial.cs delete mode 100644 bc-sharp-crypto/src/math/field/GenericPolynomialExtensionField.cs delete mode 100644 bc-sharp-crypto/src/math/field/IExtensionField.cs delete mode 100644 bc-sharp-crypto/src/math/field/IFiniteField.cs delete mode 100644 bc-sharp-crypto/src/math/field/IPolynomial.cs delete mode 100644 bc-sharp-crypto/src/math/field/IPolynomialExtensionField.cs delete mode 100644 bc-sharp-crypto/src/math/field/PrimeField.cs delete mode 100644 bc-sharp-crypto/src/math/raw/Interleave.cs delete mode 100644 bc-sharp-crypto/src/math/raw/Mod.cs delete mode 100644 bc-sharp-crypto/src/math/raw/Nat.cs delete mode 100644 bc-sharp-crypto/src/math/raw/Nat128.cs delete mode 100644 bc-sharp-crypto/src/math/raw/Nat160.cs delete mode 100644 bc-sharp-crypto/src/math/raw/Nat192.cs delete mode 100644 bc-sharp-crypto/src/math/raw/Nat224.cs delete mode 100644 bc-sharp-crypto/src/math/raw/Nat256.cs delete mode 100644 bc-sharp-crypto/src/math/raw/Nat320.cs delete mode 100644 bc-sharp-crypto/src/math/raw/Nat384.cs delete mode 100644 bc-sharp-crypto/src/math/raw/Nat448.cs delete mode 100644 bc-sharp-crypto/src/math/raw/Nat512.cs delete mode 100644 bc-sharp-crypto/src/math/raw/Nat576.cs delete mode 100644 bc-sharp-crypto/src/ocsp/BasicOCSPResp.cs delete mode 100644 bc-sharp-crypto/src/ocsp/BasicOCSPRespGenerator.cs delete mode 100644 bc-sharp-crypto/src/ocsp/CertificateID.cs delete mode 100644 bc-sharp-crypto/src/ocsp/CertificateStatus.cs delete mode 100644 bc-sharp-crypto/src/ocsp/OCSPException.cs delete mode 100644 bc-sharp-crypto/src/ocsp/OCSPReq.cs delete mode 100644 bc-sharp-crypto/src/ocsp/OCSPReqGenerator.cs delete mode 100644 bc-sharp-crypto/src/ocsp/OCSPResp.cs delete mode 100644 bc-sharp-crypto/src/ocsp/OCSPRespGenerator.cs delete mode 100644 bc-sharp-crypto/src/ocsp/OCSPRespStatus.cs delete mode 100644 bc-sharp-crypto/src/ocsp/OCSPUtil.cs delete mode 100644 bc-sharp-crypto/src/ocsp/Req.cs delete mode 100644 bc-sharp-crypto/src/ocsp/RespData.cs delete mode 100644 bc-sharp-crypto/src/ocsp/RespID.cs delete mode 100644 bc-sharp-crypto/src/ocsp/RevokedStatus.cs delete mode 100644 bc-sharp-crypto/src/ocsp/SingleResp.cs delete mode 100644 bc-sharp-crypto/src/ocsp/UnknownStatus.cs delete mode 100644 bc-sharp-crypto/src/openpgp/IStreamGenerator.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PGPKeyRing.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PGPObject.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PGPUserAttributeSubpacketVectorGenerator.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpCompressedData.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpCompressedDataGenerator.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpDataValidationException.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpEncryptedData.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpEncryptedDataGenerator.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpEncryptedDataList.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpException.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpExperimental.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpKeyFlags.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpKeyPair.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpKeyRingGenerator.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpKeyValidationException.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpLiteralData.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpLiteralDataGenerator.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpMarker.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpObjectFactory.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpOnePassSignature.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpOnePassSignatureList.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpPad.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpPbeEncryptedData.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpPrivateKey.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpPublicKey.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpPublicKeyEncryptedData.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpPublicKeyRing.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpPublicKeyRingBundle.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpSecretKey.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpSecretKeyRing.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpSecretKeyRingBundle.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpSignature.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpSignatureGenerator.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpSignatureList.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpSignatureSubpacketGenerator.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpSignatureSubpacketVector.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpUserAttributeSubpacketVector.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpUtilities.cs delete mode 100644 bc-sharp-crypto/src/openpgp/PgpV3SignatureGenerator.cs delete mode 100644 bc-sharp-crypto/src/openpgp/Rfc6637Utilities.cs delete mode 100644 bc-sharp-crypto/src/openpgp/SXprUtilities.cs delete mode 100644 bc-sharp-crypto/src/openpgp/WrappedGeneratorStream.cs delete mode 100644 bc-sharp-crypto/src/openssl/EncryptionException.cs delete mode 100644 bc-sharp-crypto/src/openssl/IPasswordFinder.cs delete mode 100644 bc-sharp-crypto/src/openssl/MiscPemGenerator.cs delete mode 100644 bc-sharp-crypto/src/openssl/PEMException.cs delete mode 100644 bc-sharp-crypto/src/openssl/PEMReader.cs delete mode 100644 bc-sharp-crypto/src/openssl/PEMUtilities.cs delete mode 100644 bc-sharp-crypto/src/openssl/PEMWriter.cs delete mode 100644 bc-sharp-crypto/src/openssl/PasswordException.cs delete mode 100644 bc-sharp-crypto/src/openssl/Pkcs8Generator.cs delete mode 100644 bc-sharp-crypto/src/pkcs/AsymmetricKeyEntry.cs delete mode 100644 bc-sharp-crypto/src/pkcs/EncryptedPrivateKeyInfoFactory.cs delete mode 100644 bc-sharp-crypto/src/pkcs/PKCS12StoreBuilder.cs delete mode 100644 bc-sharp-crypto/src/pkcs/Pkcs10CertificationRequest.cs delete mode 100644 bc-sharp-crypto/src/pkcs/Pkcs10CertificationRequestDelaySigned.cs delete mode 100644 bc-sharp-crypto/src/pkcs/Pkcs12Entry.cs delete mode 100644 bc-sharp-crypto/src/pkcs/Pkcs12Store.cs delete mode 100644 bc-sharp-crypto/src/pkcs/Pkcs12Utilities.cs delete mode 100644 bc-sharp-crypto/src/pkcs/PrivateKeyInfoFactory.cs delete mode 100644 bc-sharp-crypto/src/pkcs/X509CertificateEntry.cs delete mode 100644 bc-sharp-crypto/src/pkix/CertStatus.cs delete mode 100644 bc-sharp-crypto/src/pkix/PkixAttrCertChecker.cs delete mode 100644 bc-sharp-crypto/src/pkix/PkixAttrCertPathBuilder.cs delete mode 100644 bc-sharp-crypto/src/pkix/PkixAttrCertPathValidator.cs delete mode 100644 bc-sharp-crypto/src/pkix/PkixBuilderParameters.cs delete mode 100644 bc-sharp-crypto/src/pkix/PkixCertPath.cs delete mode 100644 bc-sharp-crypto/src/pkix/PkixCertPathBuilder.cs delete mode 100644 bc-sharp-crypto/src/pkix/PkixCertPathBuilderException.cs delete mode 100644 bc-sharp-crypto/src/pkix/PkixCertPathBuilderResult.cs delete mode 100644 bc-sharp-crypto/src/pkix/PkixCertPathChecker.cs delete mode 100644 bc-sharp-crypto/src/pkix/PkixCertPathValidator.cs delete mode 100644 bc-sharp-crypto/src/pkix/PkixCertPathValidatorException.cs delete mode 100644 bc-sharp-crypto/src/pkix/PkixCertPathValidatorResult.cs delete mode 100644 bc-sharp-crypto/src/pkix/PkixCertPathValidatorUtilities.cs delete mode 100644 bc-sharp-crypto/src/pkix/PkixCrlUtilities.cs delete mode 100644 bc-sharp-crypto/src/pkix/PkixNameConstraintValidator.cs delete mode 100644 bc-sharp-crypto/src/pkix/PkixNameConstraintValidatorException.cs delete mode 100644 bc-sharp-crypto/src/pkix/PkixParameters.cs delete mode 100644 bc-sharp-crypto/src/pkix/PkixPolicyNode.cs delete mode 100644 bc-sharp-crypto/src/pkix/ReasonsMask.cs delete mode 100644 bc-sharp-crypto/src/pkix/Rfc3280CertPathUtilities.cs delete mode 100644 bc-sharp-crypto/src/pkix/Rfc3281CertPathUtilities.cs delete mode 100644 bc-sharp-crypto/src/pkix/TrustAnchor.cs delete mode 100644 bc-sharp-crypto/src/security/AgreementUtilities.cs delete mode 100644 bc-sharp-crypto/src/security/CipherUtilities.cs delete mode 100644 bc-sharp-crypto/src/security/DigestUtilities.cs delete mode 100644 bc-sharp-crypto/src/security/DotNetUtilities.cs delete mode 100644 bc-sharp-crypto/src/security/GeneralSecurityException.cs delete mode 100644 bc-sharp-crypto/src/security/GeneratorUtilities.cs delete mode 100644 bc-sharp-crypto/src/security/InvalidKeyException.cs delete mode 100644 bc-sharp-crypto/src/security/InvalidParameterException.cs delete mode 100644 bc-sharp-crypto/src/security/KeyException.cs delete mode 100644 bc-sharp-crypto/src/security/MacUtilities.cs delete mode 100644 bc-sharp-crypto/src/security/NoSuchAlgorithmException.cs delete mode 100644 bc-sharp-crypto/src/security/ParameterUtilities.cs delete mode 100644 bc-sharp-crypto/src/security/PbeUtilities.cs delete mode 100644 bc-sharp-crypto/src/security/PrivateKeyFactory.cs delete mode 100644 bc-sharp-crypto/src/security/PublicKeyFactory.cs delete mode 100644 bc-sharp-crypto/src/security/SecureRandom.cs delete mode 100644 bc-sharp-crypto/src/security/SecurityUtilityException.cs delete mode 100644 bc-sharp-crypto/src/security/SignatureException.cs delete mode 100644 bc-sharp-crypto/src/security/SignerUtilities.cs delete mode 100644 bc-sharp-crypto/src/security/WrapperUtilities.cs delete mode 100644 bc-sharp-crypto/src/security/cert/CertificateEncodingException.cs delete mode 100644 bc-sharp-crypto/src/security/cert/CertificateException.cs delete mode 100644 bc-sharp-crypto/src/security/cert/CertificateExpiredException.cs delete mode 100644 bc-sharp-crypto/src/security/cert/CertificateNotYetValidException.cs delete mode 100644 bc-sharp-crypto/src/security/cert/CertificateParsingException.cs delete mode 100644 bc-sharp-crypto/src/security/cert/CrlException.cs delete mode 100644 bc-sharp-crypto/src/tsp/GenTimeAccuracy.cs delete mode 100644 bc-sharp-crypto/src/tsp/TSPAlgorithms.cs delete mode 100644 bc-sharp-crypto/src/tsp/TSPException.cs delete mode 100644 bc-sharp-crypto/src/tsp/TSPUtil.cs delete mode 100644 bc-sharp-crypto/src/tsp/TSPValidationException.cs delete mode 100644 bc-sharp-crypto/src/tsp/TimeStampRequest.cs delete mode 100644 bc-sharp-crypto/src/tsp/TimeStampRequestGenerator.cs delete mode 100644 bc-sharp-crypto/src/tsp/TimeStampResponse.cs delete mode 100644 bc-sharp-crypto/src/tsp/TimeStampResponseGenerator.cs delete mode 100644 bc-sharp-crypto/src/tsp/TimeStampToken.cs delete mode 100644 bc-sharp-crypto/src/tsp/TimeStampTokenGenerator.cs delete mode 100644 bc-sharp-crypto/src/tsp/TimeStampTokenInfo.cs delete mode 100644 bc-sharp-crypto/src/util/Arrays.cs delete mode 100644 bc-sharp-crypto/src/util/BigIntegers.cs delete mode 100644 bc-sharp-crypto/src/util/Enums.cs delete mode 100644 bc-sharp-crypto/src/util/IMemoable.cs delete mode 100644 bc-sharp-crypto/src/util/Integers.cs delete mode 100644 bc-sharp-crypto/src/util/MemoableResetException.cs delete mode 100644 bc-sharp-crypto/src/util/Platform.cs delete mode 100644 bc-sharp-crypto/src/util/Strings.cs delete mode 100644 bc-sharp-crypto/src/util/Times.cs delete mode 100644 bc-sharp-crypto/src/util/TypeExtensions.cs delete mode 100644 bc-sharp-crypto/src/util/collections/CollectionUtilities.cs delete mode 100644 bc-sharp-crypto/src/util/collections/EmptyEnumerable.cs delete mode 100644 bc-sharp-crypto/src/util/collections/EnumerableProxy.cs delete mode 100644 bc-sharp-crypto/src/util/collections/HashSet.cs delete mode 100644 bc-sharp-crypto/src/util/collections/ISet.cs delete mode 100644 bc-sharp-crypto/src/util/collections/LinkedDictionary.cs delete mode 100644 bc-sharp-crypto/src/util/collections/UnmodifiableDictionary.cs delete mode 100644 bc-sharp-crypto/src/util/collections/UnmodifiableDictionaryProxy.cs delete mode 100644 bc-sharp-crypto/src/util/collections/UnmodifiableList.cs delete mode 100644 bc-sharp-crypto/src/util/collections/UnmodifiableListProxy.cs delete mode 100644 bc-sharp-crypto/src/util/collections/UnmodifiableSet.cs delete mode 100644 bc-sharp-crypto/src/util/collections/UnmodifiableSetProxy.cs delete mode 100644 bc-sharp-crypto/src/util/date/DateTimeObject.cs delete mode 100644 bc-sharp-crypto/src/util/date/DateTimeUtilities.cs delete mode 100644 bc-sharp-crypto/src/util/encoders/Base64.cs delete mode 100644 bc-sharp-crypto/src/util/encoders/Base64Encoder.cs delete mode 100644 bc-sharp-crypto/src/util/encoders/BufferedDecoder.cs delete mode 100644 bc-sharp-crypto/src/util/encoders/BufferedEncoder.cs delete mode 100644 bc-sharp-crypto/src/util/encoders/Hex.cs delete mode 100644 bc-sharp-crypto/src/util/encoders/HexEncoder.cs delete mode 100644 bc-sharp-crypto/src/util/encoders/HexTranslator.cs delete mode 100644 bc-sharp-crypto/src/util/encoders/IEncoder.cs delete mode 100644 bc-sharp-crypto/src/util/encoders/Translator.cs delete mode 100644 bc-sharp-crypto/src/util/encoders/UrlBase64.cs delete mode 100644 bc-sharp-crypto/src/util/encoders/UrlBase64Encoder.cs delete mode 100644 bc-sharp-crypto/src/util/io/BaseInputStream.cs delete mode 100644 bc-sharp-crypto/src/util/io/BaseOutputStream.cs delete mode 100644 bc-sharp-crypto/src/util/io/FilterStream.cs delete mode 100644 bc-sharp-crypto/src/util/io/NullOutputStream.cs delete mode 100644 bc-sharp-crypto/src/util/io/PushbackStream.cs delete mode 100644 bc-sharp-crypto/src/util/io/StreamOverflowException.cs delete mode 100644 bc-sharp-crypto/src/util/io/Streams.cs delete mode 100644 bc-sharp-crypto/src/util/io/TeeInputStream.cs delete mode 100644 bc-sharp-crypto/src/util/io/TeeOutputStream.cs delete mode 100644 bc-sharp-crypto/src/util/io/pem/PemGenerationException.cs delete mode 100644 bc-sharp-crypto/src/util/io/pem/PemHeader.cs delete mode 100644 bc-sharp-crypto/src/util/io/pem/PemObject.cs delete mode 100644 bc-sharp-crypto/src/util/io/pem/PemObjectGenerator.cs delete mode 100644 bc-sharp-crypto/src/util/io/pem/PemObjectParser.cs delete mode 100644 bc-sharp-crypto/src/util/io/pem/PemReader.cs delete mode 100644 bc-sharp-crypto/src/util/io/pem/PemWriter.cs delete mode 100644 bc-sharp-crypto/src/util/net/IPAddress.cs delete mode 100644 bc-sharp-crypto/src/util/zlib/Adler32.cs delete mode 100644 bc-sharp-crypto/src/util/zlib/Deflate.cs delete mode 100644 bc-sharp-crypto/src/util/zlib/InfBlocks.cs delete mode 100644 bc-sharp-crypto/src/util/zlib/InfCodes.cs delete mode 100644 bc-sharp-crypto/src/util/zlib/InfTree.cs delete mode 100644 bc-sharp-crypto/src/util/zlib/Inflate.cs delete mode 100644 bc-sharp-crypto/src/util/zlib/JZlib.cs delete mode 100644 bc-sharp-crypto/src/util/zlib/StaticTree.cs delete mode 100644 bc-sharp-crypto/src/util/zlib/Tree.cs delete mode 100644 bc-sharp-crypto/src/util/zlib/ZDeflaterOutputStream.cs delete mode 100644 bc-sharp-crypto/src/util/zlib/ZInflaterInputStream.cs delete mode 100644 bc-sharp-crypto/src/util/zlib/ZInputStream.cs delete mode 100644 bc-sharp-crypto/src/util/zlib/ZOutputStream.cs delete mode 100644 bc-sharp-crypto/src/util/zlib/ZStream.cs delete mode 100644 bc-sharp-crypto/src/x509/AttributeCertificateHolder.cs delete mode 100644 bc-sharp-crypto/src/x509/AttributeCertificateIssuer.cs delete mode 100644 bc-sharp-crypto/src/x509/IX509AttributeCertificate.cs delete mode 100644 bc-sharp-crypto/src/x509/IX509Extension.cs delete mode 100644 bc-sharp-crypto/src/x509/PEMParser.cs delete mode 100644 bc-sharp-crypto/src/x509/PrincipalUtil.cs delete mode 100644 bc-sharp-crypto/src/x509/SubjectPublicKeyInfoFactory.cs delete mode 100644 bc-sharp-crypto/src/x509/X509AttrCertParser.cs delete mode 100644 bc-sharp-crypto/src/x509/X509Attribute.cs delete mode 100644 bc-sharp-crypto/src/x509/X509CertPairParser.cs delete mode 100644 bc-sharp-crypto/src/x509/X509Certificate.cs delete mode 100644 bc-sharp-crypto/src/x509/X509CertificatePair.cs delete mode 100644 bc-sharp-crypto/src/x509/X509CertificateParser.cs delete mode 100644 bc-sharp-crypto/src/x509/X509Crl.cs delete mode 100644 bc-sharp-crypto/src/x509/X509CrlEntry.cs delete mode 100644 bc-sharp-crypto/src/x509/X509CrlParser.cs delete mode 100644 bc-sharp-crypto/src/x509/X509ExtensionBase.cs delete mode 100644 bc-sharp-crypto/src/x509/X509KeyUsage.cs delete mode 100644 bc-sharp-crypto/src/x509/X509SignatureUtil.cs delete mode 100644 bc-sharp-crypto/src/x509/X509Utilities.cs delete mode 100644 bc-sharp-crypto/src/x509/X509V1CertificateGenerator.cs delete mode 100644 bc-sharp-crypto/src/x509/X509V2AttributeCertificate.cs delete mode 100644 bc-sharp-crypto/src/x509/X509V2AttributeCertificateGenerator.cs delete mode 100644 bc-sharp-crypto/src/x509/X509V2CRLGenerator.cs delete mode 100644 bc-sharp-crypto/src/x509/X509V3CertificateGenerator.cs delete mode 100644 bc-sharp-crypto/src/x509/extension/AuthorityKeyIdentifierStructure.cs delete mode 100644 bc-sharp-crypto/src/x509/extension/SubjectKeyIdentifierStructure.cs delete mode 100644 bc-sharp-crypto/src/x509/extension/X509ExtensionUtil.cs delete mode 100644 bc-sharp-crypto/src/x509/store/IX509Selector.cs delete mode 100644 bc-sharp-crypto/src/x509/store/IX509Store.cs delete mode 100644 bc-sharp-crypto/src/x509/store/IX509StoreParameters.cs delete mode 100644 bc-sharp-crypto/src/x509/store/NoSuchStoreException.cs delete mode 100644 bc-sharp-crypto/src/x509/store/X509AttrCertStoreSelector.cs delete mode 100644 bc-sharp-crypto/src/x509/store/X509CertPairStoreSelector.cs delete mode 100644 bc-sharp-crypto/src/x509/store/X509CertStoreSelector.cs delete mode 100644 bc-sharp-crypto/src/x509/store/X509CollectionStore.cs delete mode 100644 bc-sharp-crypto/src/x509/store/X509CollectionStoreParameters.cs delete mode 100644 bc-sharp-crypto/src/x509/store/X509CrlStoreSelector.cs delete mode 100644 bc-sharp-crypto/src/x509/store/X509StoreException.cs delete mode 100644 bc-sharp-crypto/src/x509/store/X509StoreFactory.cs delete mode 100644 bin/x64/Debug/CSR.pem delete mode 100644 bin/x64/Debug/certificate.pem delete mode 100644 bin/x64/Debug/ufr-signer.exe delete mode 100644 bin/x64/Debug/ufr-signer.exe.config delete mode 100644 bin/x64/Release/DL CHAIN CARD INITIALIZER.exe delete mode 100644 bin/x64/Release/hosturl.txt create mode 100644 bin/x64/Release/ufr-signer.exe delete mode 100644 bin/x64/Release/ufr-signer.exe.config delete mode 100644 bin/x86/Debug/ufr-signer.exe delete mode 100644 bin/x86/Debug/ufr-signer.exe.config delete mode 100644 bin/x86/Release/ufr-signer.exe delete mode 100644 bin/x86/Release/ufr-signer.exe.config create mode 100644 frmCSR.Designer.cs create mode 100644 frmCSR.cs rename frmMain.resx => frmCSR.resx (100%) create mode 100644 frmExtKeyUsage.Designer.cs create mode 100644 frmExtKeyUsage.cs rename Properties/Resources.resx => frmExtKeyUsage.resx (90%) create mode 100644 frmKeyUsage.Designer.cs create mode 100644 frmKeyUsage.cs create mode 100644 frmKeyUsage.resx delete mode 100644 frmMain.cs delete mode 100644 frmMain.designer.cs create mode 100644 frmPassword.cs create mode 100644 frmPassword.designer.cs create mode 100644 frmPassword.resx create mode 100644 frmPin.Designer.cs create mode 100644 frmPin.cs create mode 100644 frmPin.resx create mode 100644 frmQCStatements.Designer.cs create mode 100644 frmQCStatements.cs create mode 100644 frmQCStatements.resx delete mode 100644 uFCoder.cs delete mode 100644 ufr-signer.csproj delete mode 100644 ufr-signer.sln diff --git a/.gitignore b/.gitignore deleted file mode 100644 index 865f8a8..0000000 --- a/.gitignore +++ /dev/null @@ -1,7 +0,0 @@ -obj -*.o -.vs -*.suo -*.csproj.user -*.pdb -*.vshost.* \ No newline at end of file diff --git a/.gitmodules b/.gitmodules index b270676..6b36391 100644 --- a/.gitmodules +++ b/.gitmodules @@ -1,3 +1,6 @@ [submodule "lib"] path = lib url = https://git.d-logic.net/nfc-rfid-reader-sdk/ufr-lib.git +[submodule "ufr-lib"] + path = lib + url = https://git.d-logic.net/nfc-rfid-reader-sdk/ufr-lib.git diff --git a/App.config b/App.config deleted file mode 100644 index 8324aa6..0000000 --- a/App.config +++ /dev/null @@ -1,6 +0,0 @@ - - - - - - \ No newline at end of file diff --git a/ClassDiagram1.cd b/ClassDiagram1.cd deleted file mode 100644 index 7b89419..0000000 --- a/ClassDiagram1.cd +++ /dev/null @@ -1,2 +0,0 @@ - - \ No newline at end of file diff --git a/DLAsn1Tools.cs b/DLAsn1Tools.cs deleted file mode 100644 index 5865879..0000000 --- a/DLAsn1Tools.cs +++ /dev/null @@ -1,111 +0,0 @@ -using System; -using System.Collections.Generic; -using System.Linq; -using System.Text; -using System.Threading.Tasks; - -namespace uFRSigner -{ - class DLogicAsn1Tools - { - //------------------------------------------------------------------------------ - const UInt32 ASN1_MAX_LEN_BYTES = 4; - //------------------------------------------------------------------------------ - - public static bool asn1DecodeLength(byte[] bx, ref UInt32 len, out UInt32 len_bytes) - { - - len_bytes = 0; - - if ((bx[0] & 0x80) != 0x80) - { - len_bytes = 1; - len = bx[0]; - return true; - } - - len_bytes = (UInt32)bx[0] & 0x7F; - - if (len_bytes > ASN1_MAX_LEN_BYTES) - { - len_bytes = 0; - return false; - } - - if ((len_bytes < (ASN1_MAX_LEN_BYTES + 1)) && (len_bytes > 0)) - { - // Big Endian decoding: - for (int i = (Int32)len_bytes; i > 0; i--) - { - len |= (uint)bx[i] << (8 * ((byte)len_bytes - i)); - } - } - else - { - len_bytes = 0; - return false; - } - - len_bytes += 1; - return true; - } - - private static byte[] removeArrItemAt(byte[] inArr, int idx) - { - byte[] res = new byte[inArr.Length - 1]; - - inArr.Take(idx + 1).ToArray().CopyTo(res, 0); - inArr.Skip(idx + 1).ToArray().CopyTo(res, idx); - - return res; - } - - public static byte[] fixEccSignatureSequence(byte[] der_sig) - { - byte[] res = der_sig.ToArray(); - int der_idx = 0, der_tmp_idx; - uint der_len = 0, der_len_len, der_seq_len_len; - - if (res[der_idx++] != 0x30) - throw new Exception("ASN.1 DER signature format error"); - if (!asn1DecodeLength(res.Skip(der_idx).ToArray(), ref der_len, out der_len_len)) - throw new Exception("ASN.1 DER signature format error"); - - der_seq_len_len = der_len_len; - - der_idx += (int)der_len_len; - if (res[der_idx++] != 2) - throw new Exception("ASN.1 DER signature format error"); - der_tmp_idx = der_idx; // Points to a length TLV field - if (!asn1DecodeLength(res.Skip(der_idx).ToArray(), ref der_len, out der_len_len)) - throw new Exception("ASN.1 DER signature format error"); - der_idx += (int)der_len_len; - if ((res[der_idx] == 0) && ((res[der_idx + 1] & 0x80) == 0)) - { - res = removeArrItemAt(res, der_idx); - --der_len; - if (der_len_len != 1) - throw new Exception("ASN.1 DER signature format error-"); - --res[der_tmp_idx]; - --res[der_seq_len_len]; - } - der_idx += (int)der_len; - if (res[der_idx++] != 2) - throw new Exception("ASN.1 DER signature format error"); - der_tmp_idx = der_idx; // Points to a length TLV field - if (!asn1DecodeLength(res.Skip(der_idx).ToArray(), ref der_len, out der_len_len)) - throw new Exception("ASN.1 DER signature format error"); - der_idx += (int)der_len_len; - if ((res[der_idx] == 0) && ((res[der_idx + 1] & 0x80) == 0)) - { - res = removeArrItemAt(res, der_idx); - if (der_len_len != 1) - throw new Exception("ASN.1 DER signature format error--"); - --res[der_tmp_idx]; - --res[der_seq_len_len]; - } - - return res; - } - } -} diff --git a/Program.cs b/Program.cs deleted file mode 100644 index 03f002a..0000000 --- a/Program.cs +++ /dev/null @@ -1,22 +0,0 @@ -using System; -using System.Collections.Generic; -using System.Linq; -using System.Threading.Tasks; -using System.Windows.Forms; - -namespace uFRSigner -{ - static class Program - { - /// - /// The main entry point for the application. - /// - [STAThread] - static void Main() - { - Application.EnableVisualStyles(); - Application.SetCompatibleTextRenderingDefault(false); - Application.Run(new frmMain()); - } - } -} diff --git a/Properties/AssemblyInfo.cs b/Properties/AssemblyInfo.cs deleted file mode 100644 index d962708..0000000 --- a/Properties/AssemblyInfo.cs +++ /dev/null @@ -1,36 +0,0 @@ -using System.Reflection; -using System.Runtime.CompilerServices; -using System.Runtime.InteropServices; - -// General Information about an assembly is controlled through the following -// set of attributes. Change these attribute values to modify the information -// associated with an assembly. -[assembly: AssemblyTitle("ufr-signer")] -[assembly: AssemblyDescription("")] -[assembly: AssemblyConfiguration("")] -[assembly: AssemblyCompany("")] -[assembly: AssemblyProduct("ufr-signer")] -[assembly: AssemblyCopyright("Copyright © 2017")] -[assembly: AssemblyTrademark("")] -[assembly: AssemblyCulture("")] - -// Setting ComVisible to false makes the types in this assembly not visible -// to COM components. If you need to access a type in this assembly from -// COM, set the ComVisible attribute to true on that type. -[assembly: ComVisible(false)] - -// The following GUID is for the ID of the typelib if this project is exposed to COM -[assembly: Guid("0d346cc0-83c5-4117-b2e6-2a33686b3fc0")] - -// Version information for an assembly consists of the following four values: -// -// Major Version -// Minor Version -// Build Number -// Revision -// -// You can specify all the values or you can default the Build and Revision Numbers -// by using the '*' as shown below: -// [assembly: AssemblyVersion("1.0.*")] -[assembly: AssemblyVersion("1.7.0.0")] -[assembly: AssemblyFileVersion("1.7.0.0")] diff --git a/Properties/Resources.Designer.cs b/Properties/Resources.Designer.cs deleted file mode 100644 index 31bfbea..0000000 --- a/Properties/Resources.Designer.cs +++ /dev/null @@ -1,63 +0,0 @@ -//------------------------------------------------------------------------------ -// -// This code was generated by a tool. -// Runtime Version:4.0.30319.42000 -// -// Changes to this file may cause incorrect behavior and will be lost if -// the code is regenerated. -// -//------------------------------------------------------------------------------ - -namespace uFRSigner.Properties { - using System; - - - /// - /// A strongly-typed resource class, for looking up localized strings, etc. - /// - // This class was auto-generated by the StronglyTypedResourceBuilder - // class via a tool like ResGen or Visual Studio. - // To add or remove a member, edit your .ResX file then rerun ResGen - // with the /str option, or rebuild your VS project. - [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Resources.Tools.StronglyTypedResourceBuilder", "4.0.0.0")] - [global::System.Diagnostics.DebuggerNonUserCodeAttribute()] - [global::System.Runtime.CompilerServices.CompilerGeneratedAttribute()] - internal class Resources { - - private static global::System.Resources.ResourceManager resourceMan; - - private static global::System.Globalization.CultureInfo resourceCulture; - - [global::System.Diagnostics.CodeAnalysis.SuppressMessageAttribute("Microsoft.Performance", "CA1811:AvoidUncalledPrivateCode")] - internal Resources() { - } - - /// - /// Returns the cached ResourceManager instance used by this class. - /// - [global::System.ComponentModel.EditorBrowsableAttribute(global::System.ComponentModel.EditorBrowsableState.Advanced)] - internal static global::System.Resources.ResourceManager ResourceManager { - get { - if (object.ReferenceEquals(resourceMan, null)) { - global::System.Resources.ResourceManager temp = new global::System.Resources.ResourceManager("uFRSigner.Properties.Resources", typeof(Resources).Assembly); - resourceMan = temp; - } - return resourceMan; - } - } - - /// - /// Overrides the current thread's CurrentUICulture property for all - /// resource lookups using this strongly typed resource class. - /// - [global::System.ComponentModel.EditorBrowsableAttribute(global::System.ComponentModel.EditorBrowsableState.Advanced)] - internal static global::System.Globalization.CultureInfo Culture { - get { - return resourceCulture; - } - set { - resourceCulture = value; - } - } - } -} diff --git a/Properties/Settings.Designer.cs b/Properties/Settings.Designer.cs deleted file mode 100644 index d4a0aad..0000000 --- a/Properties/Settings.Designer.cs +++ /dev/null @@ -1,26 +0,0 @@ -//------------------------------------------------------------------------------ -// -// This code was generated by a tool. -// Runtime Version:4.0.30319.42000 -// -// Changes to this file may cause incorrect behavior and will be lost if -// the code is regenerated. -// -//------------------------------------------------------------------------------ - -namespace uFRSigner.Properties { - - - [global::System.Runtime.CompilerServices.CompilerGeneratedAttribute()] - [global::System.CodeDom.Compiler.GeneratedCodeAttribute("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "14.0.0.0")] - internal sealed partial class Settings : global::System.Configuration.ApplicationSettingsBase { - - private static Settings defaultInstance = ((Settings)(global::System.Configuration.ApplicationSettingsBase.Synchronized(new Settings()))); - - public static Settings Default { - get { - return defaultInstance; - } - } - } -} diff --git a/Properties/Settings.settings b/Properties/Settings.settings deleted file mode 100644 index 3964565..0000000 --- a/Properties/Settings.settings +++ /dev/null @@ -1,7 +0,0 @@ - - - - - - - diff --git a/bc-sharp-crypto/bzip2/src/BZip2Constants.cs b/bc-sharp-crypto/bzip2/src/BZip2Constants.cs deleted file mode 100644 index 4a5442d..0000000 --- a/bc-sharp-crypto/bzip2/src/BZip2Constants.cs +++ /dev/null @@ -1,103 +0,0 @@ -/* - * Licensed to the Apache Software Foundation (ASF) under one or more - * contributor license agreements. See the NOTICE file distributed with - * this work for additional information regarding copyright ownership. - * The ASF licenses this file to You under the Apache License, Version 2.0 - * (the "License"); you may not use this file except in compliance with - * the License. You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - * - */ - -/* - * This package is based on the work done by Keiron Liddle, Aftex Software - * to whom the Ant project is very grateful for his - * great code. - */ - -using System; - -namespace Org.BouncyCastle.Apache.Bzip2 -{ - /** - * Base class for both the compress and decompress classes. - * Holds common arrays, and static data. - * - * @author Keiron Liddle - */ - public class BZip2Constants { - - public const int baseBlockSize = 100000; - public const int MAX_ALPHA_SIZE = 258; - public const int MAX_CODE_LEN = 23; - public const int RUNA = 0; - public const int RUNB = 1; - public const int N_GROUPS = 6; - public const int G_SIZE = 50; - public const int N_ITERS = 4; - public const int MAX_SELECTORS = (2 + (900000 / G_SIZE)); - public const int NUM_OVERSHOOT_BYTES = 20; - - public static readonly int[] rNums = { - 619, 720, 127, 481, 931, 816, 813, 233, 566, 247, - 985, 724, 205, 454, 863, 491, 741, 242, 949, 214, - 733, 859, 335, 708, 621, 574, 73, 654, 730, 472, - 419, 436, 278, 496, 867, 210, 399, 680, 480, 51, - 878, 465, 811, 169, 869, 675, 611, 697, 867, 561, - 862, 687, 507, 283, 482, 129, 807, 591, 733, 623, - 150, 238, 59, 379, 684, 877, 625, 169, 643, 105, - 170, 607, 520, 932, 727, 476, 693, 425, 174, 647, - 73, 122, 335, 530, 442, 853, 695, 249, 445, 515, - 909, 545, 703, 919, 874, 474, 882, 500, 594, 612, - 641, 801, 220, 162, 819, 984, 589, 513, 495, 799, - 161, 604, 958, 533, 221, 400, 386, 867, 600, 782, - 382, 596, 414, 171, 516, 375, 682, 485, 911, 276, - 98, 553, 163, 354, 666, 933, 424, 341, 533, 870, - 227, 730, 475, 186, 263, 647, 537, 686, 600, 224, - 469, 68, 770, 919, 190, 373, 294, 822, 808, 206, - 184, 943, 795, 384, 383, 461, 404, 758, 839, 887, - 715, 67, 618, 276, 204, 918, 873, 777, 604, 560, - 951, 160, 578, 722, 79, 804, 96, 409, 713, 940, - 652, 934, 970, 447, 318, 353, 859, 672, 112, 785, - 645, 863, 803, 350, 139, 93, 354, 99, 820, 908, - 609, 772, 154, 274, 580, 184, 79, 626, 630, 742, - 653, 282, 762, 623, 680, 81, 927, 626, 789, 125, - 411, 521, 938, 300, 821, 78, 343, 175, 128, 250, - 170, 774, 972, 275, 999, 639, 495, 78, 352, 126, - 857, 956, 358, 619, 580, 124, 737, 594, 701, 612, - 669, 112, 134, 694, 363, 992, 809, 743, 168, 974, - 944, 375, 748, 52, 600, 747, 642, 182, 862, 81, - 344, 805, 988, 739, 511, 655, 814, 334, 249, 515, - 897, 955, 664, 981, 649, 113, 974, 459, 893, 228, - 433, 837, 553, 268, 926, 240, 102, 654, 459, 51, - 686, 754, 806, 760, 493, 403, 415, 394, 687, 700, - 946, 670, 656, 610, 738, 392, 760, 799, 887, 653, - 978, 321, 576, 617, 626, 502, 894, 679, 243, 440, - 680, 879, 194, 572, 640, 724, 926, 56, 204, 700, - 707, 151, 457, 449, 797, 195, 791, 558, 945, 679, - 297, 59, 87, 824, 713, 663, 412, 693, 342, 606, - 134, 108, 571, 364, 631, 212, 174, 643, 304, 329, - 343, 97, 430, 751, 497, 314, 983, 374, 822, 928, - 140, 206, 73, 263, 980, 736, 876, 478, 430, 305, - 170, 514, 364, 692, 829, 82, 855, 953, 676, 246, - 369, 970, 294, 750, 807, 827, 150, 790, 288, 923, - 804, 378, 215, 828, 592, 281, 565, 555, 710, 82, - 896, 831, 547, 261, 524, 462, 293, 465, 502, 56, - 661, 821, 976, 991, 658, 869, 905, 758, 745, 193, - 768, 550, 608, 933, 378, 286, 215, 979, 792, 961, - 61, 688, 793, 644, 986, 403, 106, 366, 905, 644, - 372, 567, 466, 434, 645, 210, 389, 550, 919, 135, - 780, 773, 635, 389, 707, 100, 626, 958, 165, 504, - 920, 176, 193, 713, 857, 265, 203, 50, 668, 108, - 645, 990, 626, 197, 510, 357, 358, 850, 858, 364, - 936, 638 - }; - } -} \ No newline at end of file diff --git a/bc-sharp-crypto/bzip2/src/CBZip2InputStream.cs b/bc-sharp-crypto/bzip2/src/CBZip2InputStream.cs deleted file mode 100644 index 82ff83e..0000000 --- a/bc-sharp-crypto/bzip2/src/CBZip2InputStream.cs +++ /dev/null @@ -1,921 +0,0 @@ -/* - * Licensed to the Apache Software Foundation (ASF) under one or more - * contributor license agreements. See the NOTICE file distributed with - * this work for additional information regarding copyright ownership. - * The ASF licenses this file to You under the Apache License, Version 2.0 - * (the "License"); you may not use this file except in compliance with - * the License. You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - * - */ - -/* - * This package is based on the work done by Keiron Liddle, Aftex Software - * to whom the Ant project is very grateful for his - * great code. - */ - -using System; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Apache.Bzip2 -{ - /** - * An input stream that decompresses from the BZip2 format (with the file - * header chars) to be read as any other stream. - * - * @author Keiron Liddle - * - * NB: note this class has been modified to read the leading BZ from the - * start of the BZIP2 stream to make it compatible with other PGP programs. - */ - public class CBZip2InputStream : Stream - { - private static void Cadvise() { - //System.out.Println("CRC Error"); - //throw new CCoruptionError(); - } - -// private static void BadBGLengths() { -// Cadvise(); -// } -// -// private static void BitStreamEOF() { -// Cadvise(); -// } - - private static void CompressedStreamEOF() { - Cadvise(); - } - - private void MakeMaps() { - int i; - nInUse = 0; - for (i = 0; i < 256; i++) { - if (inUse[i]) { - seqToUnseq[nInUse] = (char) i; - unseqToSeq[i] = (char) nInUse; - nInUse++; - } - } - } - - /* - index of the last char in the block, so - the block size == last + 1. - */ - private int last; - - /* - index in zptr[] of original string after sorting. - */ - private int origPtr; - - /* - always: in the range 0 .. 9. - The current block size is 100000 * this number. - */ - private int blockSize100k; - - private bool blockRandomised; - - private int bsBuff; - private int bsLive; - private CRC mCrc = new CRC(); - - private bool[] inUse = new bool[256]; - private int nInUse; - - private char[] seqToUnseq = new char[256]; - private char[] unseqToSeq = new char[256]; - - private char[] selector = new char[BZip2Constants.MAX_SELECTORS]; - private char[] selectorMtf = new char[BZip2Constants.MAX_SELECTORS]; - - private int[] tt; - private char[] ll8; - - /* - freq table collected to save a pass over the data - during decompression. - */ - private int[] unzftab = new int[256]; - - private int[][] limit = InitIntArray(BZip2Constants.N_GROUPS, BZip2Constants.MAX_ALPHA_SIZE); - private int[][] basev = InitIntArray(BZip2Constants.N_GROUPS, BZip2Constants.MAX_ALPHA_SIZE); - private int[][] perm = InitIntArray(BZip2Constants.N_GROUPS, BZip2Constants.MAX_ALPHA_SIZE); - private int[] minLens = new int[BZip2Constants.N_GROUPS]; - - private Stream bsStream; - - private bool streamEnd = false; - - private int currentChar = -1; - - private const int START_BLOCK_STATE = 1; - private const int RAND_PART_A_STATE = 2; - private const int RAND_PART_B_STATE = 3; - private const int RAND_PART_C_STATE = 4; - private const int NO_RAND_PART_A_STATE = 5; - private const int NO_RAND_PART_B_STATE = 6; - private const int NO_RAND_PART_C_STATE = 7; - - private int currentState = START_BLOCK_STATE; - - private int storedBlockCRC, storedCombinedCRC; - private int computedBlockCRC, computedCombinedCRC; - - int i2, count, chPrev, ch2; - int i, tPos; - int rNToGo = 0; - int rTPos = 0; - int j2; - char z; - - public CBZip2InputStream(Stream zStream) { - ll8 = null; - tt = null; - BsSetStream(zStream); - Initialize(); - InitBlock(); - SetupBlock(); - } - - internal static int[][] InitIntArray(int n1, int n2) { - int[][] a = new int[n1][]; - for (int k = 0; k < n1; ++k) { - a[k] = new int[n2]; - } - return a; - } - - internal static char[][] InitCharArray(int n1, int n2) { - char[][] a = new char[n1][]; - for (int k = 0; k < n1; ++k) { - a[k] = new char[n2]; - } - return a; - } - - public override int ReadByte() { - if (streamEnd) { - return -1; - } else { - int retChar = currentChar; - switch (currentState) { - case START_BLOCK_STATE: - break; - case RAND_PART_A_STATE: - break; - case RAND_PART_B_STATE: - SetupRandPartB(); - break; - case RAND_PART_C_STATE: - SetupRandPartC(); - break; - case NO_RAND_PART_A_STATE: - break; - case NO_RAND_PART_B_STATE: - SetupNoRandPartB(); - break; - case NO_RAND_PART_C_STATE: - SetupNoRandPartC(); - break; - default: - break; - } - return retChar; - } - } - - private void Initialize() { - char magic3, magic4; - magic3 = BsGetUChar(); - magic4 = BsGetUChar(); - if (magic3 != 'B' && magic4 != 'Z') - { - throw new IOException("Not a BZIP2 marked stream"); - } - magic3 = BsGetUChar(); - magic4 = BsGetUChar(); - if (magic3 != 'h' || magic4 < '1' || magic4 > '9') { - BsFinishedWithStream(); - streamEnd = true; - return; - } - - SetDecompressStructureSizes(magic4 - '0'); - computedCombinedCRC = 0; - } - - private void InitBlock() { - char magic1, magic2, magic3, magic4; - char magic5, magic6; - magic1 = BsGetUChar(); - magic2 = BsGetUChar(); - magic3 = BsGetUChar(); - magic4 = BsGetUChar(); - magic5 = BsGetUChar(); - magic6 = BsGetUChar(); - if (magic1 == 0x17 && magic2 == 0x72 && magic3 == 0x45 - && magic4 == 0x38 && magic5 == 0x50 && magic6 == 0x90) { - Complete(); - return; - } - - if (magic1 != 0x31 || magic2 != 0x41 || magic3 != 0x59 - || magic4 != 0x26 || magic5 != 0x53 || magic6 != 0x59) { - BadBlockHeader(); - streamEnd = true; - return; - } - - storedBlockCRC = BsGetInt32(); - - if (BsR(1) == 1) { - blockRandomised = true; - } else { - blockRandomised = false; - } - - // currBlockNo++; - GetAndMoveToFrontDecode(); - - mCrc.InitialiseCRC(); - currentState = START_BLOCK_STATE; - } - - private void EndBlock() { - computedBlockCRC = mCrc.GetFinalCRC(); - /* A bad CRC is considered a fatal error. */ - if (storedBlockCRC != computedBlockCRC) { - CrcError(); - } - - computedCombinedCRC = (computedCombinedCRC << 1) - | (int)(((uint)computedCombinedCRC) >> 31); - computedCombinedCRC ^= computedBlockCRC; - } - - private void Complete() { - storedCombinedCRC = BsGetInt32(); - if (storedCombinedCRC != computedCombinedCRC) { - CrcError(); - } - - BsFinishedWithStream(); - streamEnd = true; - } - - private static void BlockOverrun() { - Cadvise(); - } - - private static void BadBlockHeader() { - Cadvise(); - } - - private static void CrcError() { - Cadvise(); - } - - private void BsFinishedWithStream() { - try { - if (this.bsStream != null) { - Platform.Dispose(this.bsStream); - this.bsStream = null; - } - } catch { - //ignore - } - } - - private void BsSetStream(Stream f) { - bsStream = f; - bsLive = 0; - bsBuff = 0; - } - - private int BsR(int n) { - int v; - while (bsLive < n) { - int zzi; - char thech = '\0'; - try { - thech = (char) bsStream.ReadByte(); - } catch (IOException) { - CompressedStreamEOF(); - } - if (thech == '\uffff') { - CompressedStreamEOF(); - } - zzi = thech; - bsBuff = (bsBuff << 8) | (zzi & 0xff); - bsLive += 8; - } - - v = (bsBuff >> (bsLive - n)) & ((1 << n) - 1); - bsLive -= n; - return v; - } - - private char BsGetUChar() { - return (char) BsR(8); - } - - private int BsGetint() { - int u = 0; - u = (u << 8) | BsR(8); - u = (u << 8) | BsR(8); - u = (u << 8) | BsR(8); - u = (u << 8) | BsR(8); - return u; - } - - private int BsGetIntVS(int numBits) { - return (int) BsR(numBits); - } - - private int BsGetInt32() { - return (int) BsGetint(); - } - - private void HbCreateDecodeTables(int[] limit, int[] basev, - int[] perm, char[] length, - int minLen, int maxLen, int alphaSize) { - int pp, i, j, vec; - - pp = 0; - for (i = minLen; i <= maxLen; i++) { - for (j = 0; j < alphaSize; j++) { - if (length[j] == i) { - perm[pp] = j; - pp++; - } - } - } - - for (i = 0; i < BZip2Constants.MAX_CODE_LEN; i++) { - basev[i] = 0; - } - for (i = 0; i < alphaSize; i++) { - basev[length[i] + 1]++; - } - - for (i = 1; i < BZip2Constants.MAX_CODE_LEN; i++) { - basev[i] += basev[i - 1]; - } - - for (i = 0; i < BZip2Constants.MAX_CODE_LEN; i++) { - limit[i] = 0; - } - vec = 0; - - for (i = minLen; i <= maxLen; i++) { - vec += (basev[i + 1] - basev[i]); - limit[i] = vec - 1; - vec <<= 1; - } - for (i = minLen + 1; i <= maxLen; i++) { - basev[i] = ((limit[i - 1] + 1) << 1) - basev[i]; - } - } - - private void RecvDecodingTables() { - char[][] len = InitCharArray(BZip2Constants.N_GROUPS, BZip2Constants.MAX_ALPHA_SIZE); - int i, j, t, nGroups, nSelectors, alphaSize; - int minLen, maxLen; - bool[] inUse16 = new bool[16]; - - /* Receive the mapping table */ - for (i = 0; i < 16; i++) { - if (BsR(1) == 1) { - inUse16[i] = true; - } else { - inUse16[i] = false; - } - } - - for (i = 0; i < 256; i++) { - inUse[i] = false; - } - - for (i = 0; i < 16; i++) { - if (inUse16[i]) { - for (j = 0; j < 16; j++) { - if (BsR(1) == 1) { - inUse[i * 16 + j] = true; - } - } - } - } - - MakeMaps(); - alphaSize = nInUse + 2; - - /* Now the selectors */ - nGroups = BsR(3); - nSelectors = BsR(15); - for (i = 0; i < nSelectors; i++) { - j = 0; - while (BsR(1) == 1) { - j++; - } - selectorMtf[i] = (char) j; - } - - /* Undo the MTF values for the selectors. */ - { - char[] pos = new char[BZip2Constants.N_GROUPS]; - char tmp, v; - for (v = '\0'; v < nGroups; v++) { - pos[v] = v; - } - - for (i = 0; i < nSelectors; i++) { - v = selectorMtf[i]; - tmp = pos[v]; - while (v > 0) { - pos[v] = pos[v - 1]; - v--; - } - pos[0] = tmp; - selector[i] = tmp; - } - } - - /* Now the coding tables */ - for (t = 0; t < nGroups; t++) { - int curr = BsR(5); - for (i = 0; i < alphaSize; i++) { - while (BsR(1) == 1) { - if (BsR(1) == 0) { - curr++; - } else { - curr--; - } - } - len[t][i] = (char) curr; - } - } - - /* Create the Huffman decoding tables */ - for (t = 0; t < nGroups; t++) { - minLen = 32; - maxLen = 0; - for (i = 0; i < alphaSize; i++) { - if (len[t][i] > maxLen) { - maxLen = len[t][i]; - } - if (len[t][i] < minLen) { - minLen = len[t][i]; - } - } - HbCreateDecodeTables(limit[t], basev[t], perm[t], len[t], minLen, - maxLen, alphaSize); - minLens[t] = minLen; - } - } - - private void GetAndMoveToFrontDecode() { - char[] yy = new char[256]; - int i, j, nextSym, limitLast; - int EOB, groupNo, groupPos; - - limitLast = BZip2Constants.baseBlockSize * blockSize100k; - origPtr = BsGetIntVS(24); - - RecvDecodingTables(); - EOB = nInUse + 1; - groupNo = -1; - groupPos = 0; - - /* - Setting up the unzftab entries here is not strictly - necessary, but it does save having to do it later - in a separate pass, and so saves a block's worth of - cache misses. - */ - for (i = 0; i <= 255; i++) { - unzftab[i] = 0; - } - - for (i = 0; i <= 255; i++) { - yy[i] = (char) i; - } - - last = -1; - - { - int zt, zn, zvec, zj; - if (groupPos == 0) { - groupNo++; - groupPos = BZip2Constants.G_SIZE; - } - groupPos--; - zt = selector[groupNo]; - zn = minLens[zt]; - zvec = BsR(zn); - while (zvec > limit[zt][zn]) { - zn++; - { - { - while (bsLive < 1) { - int zzi; - char thech = '\0'; - try { - thech = (char) bsStream.ReadByte(); - } catch (IOException) { - CompressedStreamEOF(); - } - if (thech == '\uffff') { - CompressedStreamEOF(); - } - zzi = thech; - bsBuff = (bsBuff << 8) | (zzi & 0xff); - bsLive += 8; - } - } - zj = (bsBuff >> (bsLive - 1)) & 1; - bsLive--; - } - zvec = (zvec << 1) | zj; - } - nextSym = perm[zt][zvec - basev[zt][zn]]; - } - - while (true) { - - if (nextSym == EOB) { - break; - } - - if (nextSym == BZip2Constants.RUNA || nextSym == BZip2Constants.RUNB) { - char ch; - int s = -1; - int N = 1; - do { - if (nextSym == BZip2Constants.RUNA) { - s = s + (0 + 1) * N; - } else if (nextSym == BZip2Constants.RUNB) { - s = s + (1 + 1) * N; - } - N = N * 2; - { - int zt, zn, zvec, zj; - if (groupPos == 0) { - groupNo++; - groupPos = BZip2Constants.G_SIZE; - } - groupPos--; - zt = selector[groupNo]; - zn = minLens[zt]; - zvec = BsR(zn); - while (zvec > limit[zt][zn]) { - zn++; - { - { - while (bsLive < 1) { - int zzi; - char thech = '\0'; - try { - thech = (char) bsStream.ReadByte(); - } catch (IOException) { - CompressedStreamEOF(); - } - if (thech == '\uffff') { - CompressedStreamEOF(); - } - zzi = thech; - bsBuff = (bsBuff << 8) | (zzi & 0xff); - bsLive += 8; - } - } - zj = (bsBuff >> (bsLive - 1)) & 1; - bsLive--; - } - zvec = (zvec << 1) | zj; - } - nextSym = perm[zt][zvec - basev[zt][zn]]; - } - } while (nextSym == BZip2Constants.RUNA || nextSym == BZip2Constants.RUNB); - - s++; - ch = seqToUnseq[yy[0]]; - unzftab[ch] += s; - - while (s > 0) { - last++; - ll8[last] = ch; - s--; - } - - if (last >= limitLast) { - BlockOverrun(); - } - continue; - } else { - char tmp; - last++; - if (last >= limitLast) { - BlockOverrun(); - } - - tmp = yy[nextSym - 1]; - unzftab[seqToUnseq[tmp]]++; - ll8[last] = seqToUnseq[tmp]; - - /* - This loop is hammered during decompression, - hence the unrolling. - - for (j = nextSym-1; j > 0; j--) yy[j] = yy[j-1]; - */ - - j = nextSym - 1; - for (; j > 3; j -= 4) { - yy[j] = yy[j - 1]; - yy[j - 1] = yy[j - 2]; - yy[j - 2] = yy[j - 3]; - yy[j - 3] = yy[j - 4]; - } - for (; j > 0; j--) { - yy[j] = yy[j - 1]; - } - - yy[0] = tmp; - { - int zt, zn, zvec, zj; - if (groupPos == 0) { - groupNo++; - groupPos = BZip2Constants.G_SIZE; - } - groupPos--; - zt = selector[groupNo]; - zn = minLens[zt]; - zvec = BsR(zn); - while (zvec > limit[zt][zn]) { - zn++; - { - { - while (bsLive < 1) { - int zzi; - char thech = '\0'; - try { - thech = (char) bsStream.ReadByte(); - } catch (IOException) { - CompressedStreamEOF(); - } - zzi = thech; - bsBuff = (bsBuff << 8) | (zzi & 0xff); - bsLive += 8; - } - } - zj = (bsBuff >> (bsLive - 1)) & 1; - bsLive--; - } - zvec = (zvec << 1) | zj; - } - nextSym = perm[zt][zvec - basev[zt][zn]]; - } - continue; - } - } - } - - private void SetupBlock() { - int[] cftab = new int[257]; - char ch; - - cftab[0] = 0; - for (i = 1; i <= 256; i++) { - cftab[i] = unzftab[i - 1]; - } - for (i = 1; i <= 256; i++) { - cftab[i] += cftab[i - 1]; - } - - for (i = 0; i <= last; i++) { - ch = (char) ll8[i]; - tt[cftab[ch]] = i; - cftab[ch]++; - } - cftab = null; - - tPos = tt[origPtr]; - - count = 0; - i2 = 0; - ch2 = 256; /* not a char and not EOF */ - - if (blockRandomised) { - rNToGo = 0; - rTPos = 0; - SetupRandPartA(); - } else { - SetupNoRandPartA(); - } - } - - private void SetupRandPartA() { - if (i2 <= last) { - chPrev = ch2; - ch2 = ll8[tPos]; - tPos = tt[tPos]; - if (rNToGo == 0) { - rNToGo = BZip2Constants.rNums[rTPos]; - rTPos++; - if (rTPos == 512) { - rTPos = 0; - } - } - rNToGo--; - ch2 ^= (int) ((rNToGo == 1) ? 1 : 0); - i2++; - - currentChar = ch2; - currentState = RAND_PART_B_STATE; - mCrc.UpdateCRC(ch2); - } else { - EndBlock(); - InitBlock(); - SetupBlock(); - } - } - - private void SetupNoRandPartA() { - if (i2 <= last) { - chPrev = ch2; - ch2 = ll8[tPos]; - tPos = tt[tPos]; - i2++; - - currentChar = ch2; - currentState = NO_RAND_PART_B_STATE; - mCrc.UpdateCRC(ch2); - } else { - EndBlock(); - InitBlock(); - SetupBlock(); - } - } - - private void SetupRandPartB() { - if (ch2 != chPrev) { - currentState = RAND_PART_A_STATE; - count = 1; - SetupRandPartA(); - } else { - count++; - if (count >= 4) { - z = ll8[tPos]; - tPos = tt[tPos]; - if (rNToGo == 0) { - rNToGo = BZip2Constants.rNums[rTPos]; - rTPos++; - if (rTPos == 512) { - rTPos = 0; - } - } - rNToGo--; - z ^= (char)((rNToGo == 1) ? 1 : 0); - j2 = 0; - currentState = RAND_PART_C_STATE; - SetupRandPartC(); - } else { - currentState = RAND_PART_A_STATE; - SetupRandPartA(); - } - } - } - - private void SetupRandPartC() { - if (j2 < (int) z) { - currentChar = ch2; - mCrc.UpdateCRC(ch2); - j2++; - } else { - currentState = RAND_PART_A_STATE; - i2++; - count = 0; - SetupRandPartA(); - } - } - - private void SetupNoRandPartB() { - if (ch2 != chPrev) { - currentState = NO_RAND_PART_A_STATE; - count = 1; - SetupNoRandPartA(); - } else { - count++; - if (count >= 4) { - z = ll8[tPos]; - tPos = tt[tPos]; - currentState = NO_RAND_PART_C_STATE; - j2 = 0; - SetupNoRandPartC(); - } else { - currentState = NO_RAND_PART_A_STATE; - SetupNoRandPartA(); - } - } - } - - private void SetupNoRandPartC() { - if (j2 < (int) z) { - currentChar = ch2; - mCrc.UpdateCRC(ch2); - j2++; - } else { - currentState = NO_RAND_PART_A_STATE; - i2++; - count = 0; - SetupNoRandPartA(); - } - } - - private void SetDecompressStructureSizes(int newSize100k) { - if (!(0 <= newSize100k && newSize100k <= 9 && 0 <= blockSize100k - && blockSize100k <= 9)) { - // throw new IOException("Invalid block size"); - } - - blockSize100k = newSize100k; - - if (newSize100k == 0) { - return; - } - - int n = BZip2Constants.baseBlockSize * newSize100k; - ll8 = new char[n]; - tt = new int[n]; - } - - public override void Flush() { - } - - public override int Read(byte[] buffer, int offset, int count) { - int c = -1; - int k; - for (k = 0; k < count; ++k) { - c = ReadByte(); - if (c == -1) - break; - buffer[k + offset] = (byte)c; - } - return k; - } - - public override long Seek(long offset, SeekOrigin origin) { - return 0; - } - - public override void SetLength(long value) { - } - - public override void Write(byte[] buffer, int offset, int count) { - } - - public override bool CanRead { - get { - return true; - } - } - - public override bool CanSeek { - get { - return false; - } - } - - public override bool CanWrite { - get { - return false; - } - } - - public override long Length { - get { - return 0; - } - } - - public override long Position { - get { - return 0; - } - set { - } - } - } -} \ No newline at end of file diff --git a/bc-sharp-crypto/bzip2/src/CBZip2OutputStream.cs b/bc-sharp-crypto/bzip2/src/CBZip2OutputStream.cs deleted file mode 100644 index ffac073..0000000 --- a/bc-sharp-crypto/bzip2/src/CBZip2OutputStream.cs +++ /dev/null @@ -1,1709 +0,0 @@ -/* - * Licensed to the Apache Software Foundation (ASF) under one or more - * contributor license agreements. See the NOTICE file distributed with - * this work for additional information regarding copyright ownership. - * The ASF licenses this file to You under the Apache License, Version 2.0 - * (the "License"); you may not use this file except in compliance with - * the License. You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - * - */ - -/* - * This package is based on the work done by Keiron Liddle, Aftex Software - * to whom the Ant project is very grateful for his - * great code. - */ - -using System; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Apache.Bzip2 -{ - /** - * An output stream that compresses into the BZip2 format (with the file - * header chars) into another stream. - * - * @author Keiron Liddle - * - * TODO: Update to BZip2 1.0.1 - * NB: note this class has been modified to add a leading BZ to the - * start of the BZIP2 stream to make it compatible with other PGP programs. - */ - public class CBZip2OutputStream : Stream - { - protected const int SETMASK = (1 << 21); - protected const int CLEARMASK = (~SETMASK); - protected const int GREATER_ICOST = 15; - protected const int LESSER_ICOST = 0; - protected const int SMALL_THRESH = 20; - protected const int DEPTH_THRESH = 10; - - /* - If you are ever unlucky/improbable enough - to get a stack overflow whilst sorting, - increase the following constant and try - again. In practice I have never seen the - stack go above 27 elems, so the following - limit seems very generous. - */ - protected const int QSORT_STACK_SIZE = 1000; - private bool finished; - - private static void Panic() { - //System.out.Println("panic"); - //throw new CError(); - } - - private void MakeMaps() { - int i; - nInUse = 0; - for (i = 0; i < 256; i++) { - if (inUse[i]) { - seqToUnseq[nInUse] = (char) i; - unseqToSeq[i] = (char) nInUse; - nInUse++; - } - } - } - - protected static void HbMakeCodeLengths(char[] len, int[] freq, - int alphaSize, int maxLen) { - /* - Nodes and heap entries run from 1. Entry 0 - for both the heap and nodes is a sentinel. - */ - int nNodes, nHeap, n1, n2, i, j, k; - bool tooLong; - - int[] heap = new int[BZip2Constants.MAX_ALPHA_SIZE + 2]; - int[] weight = new int[BZip2Constants.MAX_ALPHA_SIZE * 2]; - int[] parent = new int[BZip2Constants.MAX_ALPHA_SIZE * 2]; - - for (i = 0; i < alphaSize; i++) { - weight[i + 1] = (freq[i] == 0 ? 1 : freq[i]) << 8; - } - - while (true) { - nNodes = alphaSize; - nHeap = 0; - - heap[0] = 0; - weight[0] = 0; - parent[0] = -2; - - for (i = 1; i <= alphaSize; i++) { - parent[i] = -1; - nHeap++; - heap[nHeap] = i; - { - int zz, tmp; - zz = nHeap; - tmp = heap[zz]; - while (weight[tmp] < weight[heap[zz >> 1]]) { - heap[zz] = heap[zz >> 1]; - zz >>= 1; - } - heap[zz] = tmp; - } - } - if (!(nHeap < (BZip2Constants.MAX_ALPHA_SIZE + 2))) { - Panic(); - } - - while (nHeap > 1) { - n1 = heap[1]; - heap[1] = heap[nHeap]; - nHeap--; - { - int zz = 0, yy = 0, tmp = 0; - zz = 1; - tmp = heap[zz]; - while (true) { - yy = zz << 1; - if (yy > nHeap) { - break; - } - if (yy < nHeap - && weight[heap[yy + 1]] < weight[heap[yy]]) { - yy++; - } - if (weight[tmp] < weight[heap[yy]]) { - break; - } - heap[zz] = heap[yy]; - zz = yy; - } - heap[zz] = tmp; - } - n2 = heap[1]; - heap[1] = heap[nHeap]; - nHeap--; - { - int zz = 0, yy = 0, tmp = 0; - zz = 1; - tmp = heap[zz]; - while (true) { - yy = zz << 1; - if (yy > nHeap) { - break; - } - if (yy < nHeap - && weight[heap[yy + 1]] < weight[heap[yy]]) { - yy++; - } - if (weight[tmp] < weight[heap[yy]]) { - break; - } - heap[zz] = heap[yy]; - zz = yy; - } - heap[zz] = tmp; - } - nNodes++; - parent[n1] = parent[n2] = nNodes; - - weight[nNodes] = (int)((uint)((weight[n1] & 0xffffff00) - + (weight[n2] & 0xffffff00)) - | (uint)(1 + (((weight[n1] & 0x000000ff) > - (weight[n2] & 0x000000ff)) ? - (weight[n1] & 0x000000ff) : - (weight[n2] & 0x000000ff)))); - - parent[nNodes] = -1; - nHeap++; - heap[nHeap] = nNodes; - { - int zz = 0, tmp = 0; - zz = nHeap; - tmp = heap[zz]; - while (weight[tmp] < weight[heap[zz >> 1]]) { - heap[zz] = heap[zz >> 1]; - zz >>= 1; - } - heap[zz] = tmp; - } - } - if (!(nNodes < (BZip2Constants.MAX_ALPHA_SIZE * 2))) { - Panic(); - } - - tooLong = false; - for (i = 1; i <= alphaSize; i++) { - j = 0; - k = i; - while (parent[k] >= 0) { - k = parent[k]; - j++; - } - len[i - 1] = (char) j; - if (j > maxLen) { - tooLong = true; - } - } - - if (!tooLong) { - break; - } - - for (i = 1; i < alphaSize; i++) { - j = weight[i] >> 8; - j = 1 + (j / 2); - weight[i] = j << 8; - } - } - } - - /* - index of the last char in the block, so - the block size == last + 1. - */ - int last; - - /* - index in zptr[] of original string after sorting. - */ - int origPtr; - - /* - always: in the range 0 .. 9. - The current block size is 100000 * this number. - */ - int blockSize100k; - - bool blockRandomised; - - int bytesOut; - int bsBuff; - int bsLive; - CRC mCrc = new CRC(); - - private bool[] inUse = new bool[256]; - private int nInUse; - - private char[] seqToUnseq = new char[256]; - private char[] unseqToSeq = new char[256]; - - private char[] selector = new char[BZip2Constants.MAX_SELECTORS]; - private char[] selectorMtf = new char[BZip2Constants.MAX_SELECTORS]; - - private char[] block; - private int[] quadrant; - private int[] zptr; - private short[] szptr; - private int[] ftab; - - private int nMTF; - - private int[] mtfFreq = new int[BZip2Constants.MAX_ALPHA_SIZE]; - - /* - * Used when sorting. If too many long comparisons - * happen, we stop sorting, randomise the block - * slightly, and try again. - */ - private int workFactor; - private int workDone; - private int workLimit; - private bool firstAttempt; - private int nBlocksRandomised; - - private int currentChar = -1; - private int runLength = 0; - - public CBZip2OutputStream(Stream inStream) : this(inStream, 9) { - } - - public CBZip2OutputStream(Stream inStream, int inBlockSize) - { - block = null; - quadrant = null; - zptr = null; - ftab = null; - - inStream.WriteByte((byte)'B'); - inStream.WriteByte((byte)'Z'); - - BsSetStream(inStream); - - workFactor = 50; - if (inBlockSize > 9) { - inBlockSize = 9; - } - if (inBlockSize < 1) { - inBlockSize = 1; - } - blockSize100k = inBlockSize; - AllocateCompressStructures(); - Initialize(); - InitBlock(); - } - - /** - * - * modified by Oliver Merkel, 010128 - * - */ - public override void WriteByte(byte bv) { - int b = (256 + bv) % 256; - if (currentChar != -1) { - if (currentChar == b) { - runLength++; - if (runLength > 254) { - WriteRun(); - currentChar = -1; - runLength = 0; - } - } else { - WriteRun(); - runLength = 1; - currentChar = b; - } - } else { - currentChar = b; - runLength++; - } - } - - private void WriteRun() { - if (last < allowableBlockSize) { - inUse[currentChar] = true; - for (int i = 0; i < runLength; i++) { - mCrc.UpdateCRC((char) currentChar); - } - switch (runLength) { - case 1: - last++; - block[last + 1] = (char) currentChar; - break; - case 2: - last++; - block[last + 1] = (char) currentChar; - last++; - block[last + 1] = (char) currentChar; - break; - case 3: - last++; - block[last + 1] = (char) currentChar; - last++; - block[last + 1] = (char) currentChar; - last++; - block[last + 1] = (char) currentChar; - break; - default: - inUse[runLength - 4] = true; - last++; - block[last + 1] = (char) currentChar; - last++; - block[last + 1] = (char) currentChar; - last++; - block[last + 1] = (char) currentChar; - last++; - block[last + 1] = (char) currentChar; - last++; - block[last + 1] = (char) (runLength - 4); - break; - } - } else { - EndBlock(); - InitBlock(); - WriteRun(); - } - } - - bool closed = false; - -// protected void Finalize() { -// Close(); -// } - -#if PORTABLE - protected override void Dispose(bool disposing) - { - if (disposing) - { - if (closed) - return; - - Finish(); - closed = true; - Platform.Dispose(this.bsStream); - } - base.Dispose(disposing); - } -#else - public override void Close() { - if (closed) - return; - - Finish(); - - closed = true; - Platform.Dispose(this.bsStream); - - base.Close(); - } -#endif - - public void Finish() { - if (finished) { - return; - } - - if (runLength > 0) { - WriteRun(); - } - currentChar = -1; - EndBlock(); - EndCompression(); - finished = true; - Flush(); - } - - public override void Flush() { - bsStream.Flush(); - } - - private int blockCRC, combinedCRC; - - private void Initialize() { - bytesOut = 0; - nBlocksRandomised = 0; - - /* Write `magic' bytes h indicating file-format == huffmanised, - followed by a digit indicating blockSize100k. - */ - BsPutUChar('h'); - BsPutUChar('0' + blockSize100k); - - combinedCRC = 0; - } - - private int allowableBlockSize; - - private void InitBlock() { - // blockNo++; - mCrc.InitialiseCRC(); - last = -1; - // ch = 0; - - for (int i = 0; i < 256; i++) { - inUse[i] = false; - } - - /* 20 is just a paranoia constant */ - allowableBlockSize = BZip2Constants.baseBlockSize * blockSize100k - 20; - } - - private void EndBlock() { - blockCRC = mCrc.GetFinalCRC(); - combinedCRC = (combinedCRC << 1) | (int)(((uint)combinedCRC) >> 31); - combinedCRC ^= blockCRC; - - /* sort the block and establish posn of original string */ - DoReversibleTransformation(); - - /* - A 6-byte block header, the value chosen arbitrarily - as 0x314159265359 :-). A 32 bit value does not really - give a strong enough guarantee that the value will not - appear by chance in the compressed datastream. Worst-case - probability of this event, for a 900k block, is about - 2.0e-3 for 32 bits, 1.0e-5 for 40 bits and 4.0e-8 for 48 bits. - For a compressed file of size 100Gb -- about 100000 blocks -- - only a 48-bit marker will do. NB: normal compression/ - decompression do *not* rely on these statistical properties. - They are only important when trying to recover blocks from - damaged files. - */ - BsPutUChar(0x31); - BsPutUChar(0x41); - BsPutUChar(0x59); - BsPutUChar(0x26); - BsPutUChar(0x53); - BsPutUChar(0x59); - - /* Now the block's CRC, so it is in a known place. */ - BsPutint(blockCRC); - - /* Now a single bit indicating randomisation. */ - if (blockRandomised) { - BsW(1, 1); - nBlocksRandomised++; - } else { - BsW(1, 0); - } - - /* Finally, block's contents proper. */ - MoveToFrontCodeAndSend(); - } - - private void EndCompression() { - /* - Now another magic 48-bit number, 0x177245385090, to - indicate the end of the last block. (Sqrt(pi), if - you want to know. I did want to use e, but it contains - too much repetition -- 27 18 28 18 28 46 -- for me - to feel statistically comfortable. Call me paranoid.) - */ - BsPutUChar(0x17); - BsPutUChar(0x72); - BsPutUChar(0x45); - BsPutUChar(0x38); - BsPutUChar(0x50); - BsPutUChar(0x90); - - BsPutint(combinedCRC); - - BsFinishedWithStream(); - } - - private void HbAssignCodes(int[] code, char[] length, int minLen, - int maxLen, int alphaSize) { - int n, vec, i; - - vec = 0; - for (n = minLen; n <= maxLen; n++) { - for (i = 0; i < alphaSize; i++) { - if (length[i] == n) { - code[i] = vec; - vec++; - } - }; - vec <<= 1; - } - } - - private void BsSetStream(Stream f) { - bsStream = f; - bsLive = 0; - bsBuff = 0; - bytesOut = 0; - } - - private void BsFinishedWithStream() { - while (bsLive > 0) { - int ch = (bsBuff >> 24); - try { - bsStream.WriteByte((byte)ch); // write 8-bit - } catch (IOException e) { - throw e; - } - bsBuff <<= 8; - bsLive -= 8; - bytesOut++; - } - } - - private void BsW(int n, int v) { - while (bsLive >= 8) { - int ch = (bsBuff >> 24); - try { - bsStream.WriteByte((byte)ch); // write 8-bit - } catch (IOException e) { - throw e; - } - bsBuff <<= 8; - bsLive -= 8; - bytesOut++; - } - bsBuff |= (v << (32 - bsLive - n)); - bsLive += n; - } - - private void BsPutUChar(int c) { - BsW(8, c); - } - - private void BsPutint(int u) { - BsW(8, (u >> 24) & 0xff); - BsW(8, (u >> 16) & 0xff); - BsW(8, (u >> 8) & 0xff); - BsW(8, u & 0xff); - } - - private void BsPutIntVS(int numBits, int c) { - BsW(numBits, c); - } - - private void SendMTFValues() { - char[][] len = CBZip2InputStream.InitCharArray(BZip2Constants.N_GROUPS, BZip2Constants.MAX_ALPHA_SIZE); - - int v, t, i, j, gs, ge, totc, bt, bc, iter; - int nSelectors = 0, alphaSize, minLen, maxLen, selCtr; - int nGroups; - - alphaSize = nInUse + 2; - for (t = 0; t < BZip2Constants.N_GROUPS; t++) { - for (v = 0; v < alphaSize; v++) { - len[t][v] = (char) GREATER_ICOST; - } - } - - /* Decide how many coding tables to use */ - if (nMTF <= 0) { - Panic(); - } - - if (nMTF < 200) { - nGroups = 2; - } else if (nMTF < 600) { - nGroups = 3; - } else if (nMTF < 1200) { - nGroups = 4; - } else if (nMTF < 2400) { - nGroups = 5; - } else { - nGroups = 6; - } - - /* Generate an initial set of coding tables */ { - int nPart, remF, tFreq, aFreq; - - nPart = nGroups; - remF = nMTF; - gs = 0; - while (nPart > 0) { - tFreq = remF / nPart; - ge = gs - 1; - aFreq = 0; - while (aFreq < tFreq && ge < alphaSize - 1) { - ge++; - aFreq += mtfFreq[ge]; - } - - if (ge > gs && nPart != nGroups && nPart != 1 - && ((nGroups - nPart) % 2 == 1)) { - aFreq -= mtfFreq[ge]; - ge--; - } - - for (v = 0; v < alphaSize; v++) { - if (v >= gs && v <= ge) { - len[nPart - 1][v] = (char) LESSER_ICOST; - } else { - len[nPart - 1][v] = (char) GREATER_ICOST; - } - } - - nPart--; - gs = ge + 1; - remF -= aFreq; - } - } - - int[][] rfreq = CBZip2InputStream.InitIntArray(BZip2Constants.N_GROUPS, BZip2Constants.MAX_ALPHA_SIZE); - int[] fave = new int[BZip2Constants.N_GROUPS]; - short[] cost = new short[BZip2Constants.N_GROUPS]; - /* - Iterate up to N_ITERS times to improve the tables. - */ - for (iter = 0; iter < BZip2Constants.N_ITERS; iter++) { - for (t = 0; t < nGroups; t++) { - fave[t] = 0; - } - - for (t = 0; t < nGroups; t++) { - for (v = 0; v < alphaSize; v++) { - rfreq[t][v] = 0; - } - } - - nSelectors = 0; - totc = 0; - gs = 0; - while (true) { - - /* Set group start & end marks. */ - if (gs >= nMTF) { - break; - } - ge = gs + BZip2Constants.G_SIZE - 1; - if (ge >= nMTF) { - ge = nMTF - 1; - } - - /* - Calculate the cost of this group as coded - by each of the coding tables. - */ - for (t = 0; t < nGroups; t++) { - cost[t] = 0; - } - - if (nGroups == 6) { - short cost0, cost1, cost2, cost3, cost4, cost5; - cost0 = cost1 = cost2 = cost3 = cost4 = cost5 = 0; - for (i = gs; i <= ge; i++) { - short icv = szptr[i]; - cost0 += (short)len[0][icv]; - cost1 += (short)len[1][icv]; - cost2 += (short)len[2][icv]; - cost3 += (short)len[3][icv]; - cost4 += (short)len[4][icv]; - cost5 += (short)len[5][icv]; - } - cost[0] = cost0; - cost[1] = cost1; - cost[2] = cost2; - cost[3] = cost3; - cost[4] = cost4; - cost[5] = cost5; - } else { - for (i = gs; i <= ge; i++) { - short icv = szptr[i]; - for (t = 0; t < nGroups; t++) { - cost[t] += (short)len[t][icv]; - } - } - } - - /* - Find the coding table which is best for this group, - and record its identity in the selector table. - */ - bc = 999999999; - bt = -1; - for (t = 0; t < nGroups; t++) { - if (cost[t] < bc) { - bc = cost[t]; - bt = t; - } - }; - totc += bc; - fave[bt]++; - selector[nSelectors] = (char) bt; - nSelectors++; - - /* - Increment the symbol frequencies for the selected table. - */ - for (i = gs; i <= ge; i++) { - rfreq[bt][szptr[i]]++; - } - - gs = ge + 1; - } - - /* - Recompute the tables based on the accumulated frequencies. - */ - for (t = 0; t < nGroups; t++) { - HbMakeCodeLengths(len[t], rfreq[t], alphaSize, 20); - } - } - - rfreq = null; - fave = null; - cost = null; - - if (!(nGroups < 8)) { - Panic(); - } - if (!(nSelectors < 32768 && nSelectors <= (2 + (900000 / BZip2Constants.G_SIZE)))) { - Panic(); - } - - - /* Compute MTF values for the selectors. */ - { - char[] pos = new char[BZip2Constants.N_GROUPS]; - char ll_i, tmp2, tmp; - for (i = 0; i < nGroups; i++) { - pos[i] = (char) i; - } - for (i = 0; i < nSelectors; i++) { - ll_i = selector[i]; - j = 0; - tmp = pos[j]; - while (ll_i != tmp) { - j++; - tmp2 = tmp; - tmp = pos[j]; - pos[j] = tmp2; - } - pos[0] = tmp; - selectorMtf[i] = (char) j; - } - } - - int[][] code = CBZip2InputStream.InitIntArray(BZip2Constants.N_GROUPS, BZip2Constants.MAX_ALPHA_SIZE); - - /* Assign actual codes for the tables. */ - for (t = 0; t < nGroups; t++) { - minLen = 32; - maxLen = 0; - for (i = 0; i < alphaSize; i++) { - if (len[t][i] > maxLen) { - maxLen = len[t][i]; - } - if (len[t][i] < minLen) { - minLen = len[t][i]; - } - } - if (maxLen > 20) { - Panic(); - } - if (minLen < 1) { - Panic(); - } - HbAssignCodes(code[t], len[t], minLen, maxLen, alphaSize); - } - - /* Transmit the mapping table. */ - { - bool[] inUse16 = new bool[16]; - for (i = 0; i < 16; i++) { - inUse16[i] = false; - for (j = 0; j < 16; j++) { - if (inUse[i * 16 + j]) { - inUse16[i] = true; - } - } - } - - for (i = 0; i < 16; i++) { - if (inUse16[i]) { - BsW(1, 1); - } else { - BsW(1, 0); - } - } - - for (i = 0; i < 16; i++) { - if (inUse16[i]) { - for (j = 0; j < 16; j++) { - if (inUse[i * 16 + j]) { - BsW(1, 1); - } else { - BsW(1, 0); - } - } - } - } - - } - - /* Now the selectors. */ - BsW(3, nGroups); - BsW(15, nSelectors); - for (i = 0; i < nSelectors; i++) { - for (j = 0; j < selectorMtf[i]; j++) { - BsW(1, 1); - } - BsW(1, 0); - } - - /* Now the coding tables. */ - for (t = 0; t < nGroups; t++) { - int curr = len[t][0]; - BsW(5, curr); - for (i = 0; i < alphaSize; i++) { - while (curr < len[t][i]) { - BsW(2, 2); - curr++; /* 10 */ - } - while (curr > len[t][i]) { - BsW(2, 3); - curr--; /* 11 */ - } - BsW(1, 0); - } - } - - /* And finally, the block data proper */ - selCtr = 0; - gs = 0; - while (true) { - if (gs >= nMTF) { - break; - } - ge = gs + BZip2Constants.G_SIZE - 1; - if (ge >= nMTF) { - ge = nMTF - 1; - } - for (i = gs; i <= ge; i++) { - BsW(len[selector[selCtr]][szptr[i]], - code[selector[selCtr]][szptr[i]]); - } - - gs = ge + 1; - selCtr++; - } - if (!(selCtr == nSelectors)) { - Panic(); - } - } - - private void MoveToFrontCodeAndSend() { - BsPutIntVS(24, origPtr); - GenerateMTFValues(); - SendMTFValues(); - } - - private Stream bsStream; - - private void SimpleSort(int lo, int hi, int d) { - int i, j, h, bigN, hp; - int v; - - bigN = hi - lo + 1; - if (bigN < 2) { - return; - } - - hp = 0; - while (incs[hp] < bigN) { - hp++; - } - hp--; - - for (; hp >= 0; hp--) { - h = incs[hp]; - - i = lo + h; - while (true) { - /* copy 1 */ - if (i > hi) { - break; - } - v = zptr[i]; - j = i; - while (FullGtU(zptr[j - h] + d, v + d)) { - zptr[j] = zptr[j - h]; - j = j - h; - if (j <= (lo + h - 1)) { - break; - } - } - zptr[j] = v; - i++; - - /* copy 2 */ - if (i > hi) { - break; - } - v = zptr[i]; - j = i; - while (FullGtU(zptr[j - h] + d, v + d)) { - zptr[j] = zptr[j - h]; - j = j - h; - if (j <= (lo + h - 1)) { - break; - } - } - zptr[j] = v; - i++; - - /* copy 3 */ - if (i > hi) { - break; - } - v = zptr[i]; - j = i; - while (FullGtU(zptr[j - h] + d, v + d)) { - zptr[j] = zptr[j - h]; - j = j - h; - if (j <= (lo + h - 1)) { - break; - } - } - zptr[j] = v; - i++; - - if (workDone > workLimit && firstAttempt) { - return; - } - } - } - } - - private void Vswap(int p1, int p2, int n) { - int temp = 0; - while (n > 0) { - temp = zptr[p1]; - zptr[p1] = zptr[p2]; - zptr[p2] = temp; - p1++; - p2++; - n--; - } - } - - private char Med3(char a, char b, char c) { - char t; - if (a > b) { - t = a; - a = b; - b = t; - } - if (b > c) { - t = b; - b = c; - c = t; - } - if (a > b) { - b = a; - } - return b; - } - - internal class StackElem { - internal int ll; - internal int hh; - internal int dd; - } - - private void QSort3(int loSt, int hiSt, int dSt) { - int unLo, unHi, ltLo, gtHi, med, n, m; - int sp, lo, hi, d; - StackElem[] stack = new StackElem[QSORT_STACK_SIZE]; - for (int count = 0; count < QSORT_STACK_SIZE; count++) { - stack[count] = new StackElem(); - } - - sp = 0; - - stack[sp].ll = loSt; - stack[sp].hh = hiSt; - stack[sp].dd = dSt; - sp++; - - while (sp > 0) { - if (sp >= QSORT_STACK_SIZE) { - Panic(); - } - - sp--; - lo = stack[sp].ll; - hi = stack[sp].hh; - d = stack[sp].dd; - - if (hi - lo < SMALL_THRESH || d > DEPTH_THRESH) { - SimpleSort(lo, hi, d); - if (workDone > workLimit && firstAttempt) { - return; - } - continue; - } - - med = Med3(block[zptr[lo] + d + 1], - block[zptr[hi ] + d + 1], - block[zptr[(lo + hi) >> 1] + d + 1]); - - unLo = ltLo = lo; - unHi = gtHi = hi; - - while (true) { - while (true) { - if (unLo > unHi) { - break; - } - n = ((int) block[zptr[unLo] + d + 1]) - med; - if (n == 0) { - int temp = 0; - temp = zptr[unLo]; - zptr[unLo] = zptr[ltLo]; - zptr[ltLo] = temp; - ltLo++; - unLo++; - continue; - }; - if (n > 0) { - break; - } - unLo++; - } - while (true) { - if (unLo > unHi) { - break; - } - n = ((int) block[zptr[unHi] + d + 1]) - med; - if (n == 0) { - int temp = 0; - temp = zptr[unHi]; - zptr[unHi] = zptr[gtHi]; - zptr[gtHi] = temp; - gtHi--; - unHi--; - continue; - }; - if (n < 0) { - break; - } - unHi--; - } - if (unLo > unHi) { - break; - } - int tempx = zptr[unLo]; - zptr[unLo] = zptr[unHi]; - zptr[unHi] = tempx; - unLo++; - unHi--; - } - - if (gtHi < ltLo) { - stack[sp].ll = lo; - stack[sp].hh = hi; - stack[sp].dd = d + 1; - sp++; - continue; - } - - n = ((ltLo - lo) < (unLo - ltLo)) ? (ltLo - lo) : (unLo - ltLo); - Vswap(lo, unLo - n, n); - m = ((hi - gtHi) < (gtHi - unHi)) ? (hi - gtHi) : (gtHi - unHi); - Vswap(unLo, hi - m + 1, m); - - n = lo + unLo - ltLo - 1; - m = hi - (gtHi - unHi) + 1; - - stack[sp].ll = lo; - stack[sp].hh = n; - stack[sp].dd = d; - sp++; - - stack[sp].ll = n + 1; - stack[sp].hh = m - 1; - stack[sp].dd = d + 1; - sp++; - - stack[sp].ll = m; - stack[sp].hh = hi; - stack[sp].dd = d; - sp++; - } - } - - private void MainSort() { - int i, j, ss, sb; - int[] runningOrder = new int[256]; - int[] copy = new int[256]; - bool[] bigDone = new bool[256]; - int c1, c2; - int numQSorted; - - /* - In the various block-sized structures, live data runs - from 0 to last+NUM_OVERSHOOT_BYTES inclusive. First, - set up the overshoot area for block. - */ - - // if (verbosity >= 4) fprintf ( stderr, " sort initialise ...\n" ); - for (i = 0; i < BZip2Constants.NUM_OVERSHOOT_BYTES; i++) { - block[last + i + 2] = block[(i % (last + 1)) + 1]; - } - for (i = 0; i <= last + BZip2Constants.NUM_OVERSHOOT_BYTES; i++) { - quadrant[i] = 0; - } - - block[0] = (char) (block[last + 1]); - - if (last < 4000) { - /* - Use SimpleSort(), since the full sorting mechanism - has quite a large constant overhead. - */ - for (i = 0; i <= last; i++) { - zptr[i] = i; - } - firstAttempt = false; - workDone = workLimit = 0; - SimpleSort(0, last, 0); - } else { - numQSorted = 0; - for (i = 0; i <= 255; i++) { - bigDone[i] = false; - } - - for (i = 0; i <= 65536; i++) { - ftab[i] = 0; - } - - c1 = block[0]; - for (i = 0; i <= last; i++) { - c2 = block[i + 1]; - ftab[(c1 << 8) + c2]++; - c1 = c2; - } - - for (i = 1; i <= 65536; i++) { - ftab[i] += ftab[i - 1]; - } - - c1 = block[1]; - for (i = 0; i < last; i++) { - c2 = block[i + 2]; - j = (c1 << 8) + c2; - c1 = c2; - ftab[j]--; - zptr[ftab[j]] = i; - } - - j = ((block[last + 1]) << 8) + (block[1]); - ftab[j]--; - zptr[ftab[j]] = last; - - /* - Now ftab contains the first loc of every small bucket. - Calculate the running order, from smallest to largest - big bucket. - */ - - for (i = 0; i <= 255; i++) { - runningOrder[i] = i; - } - - { - int vv; - int h = 1; - do { - h = 3 * h + 1; - } - while (h <= 256); - do { - h = h / 3; - for (i = h; i <= 255; i++) { - vv = runningOrder[i]; - j = i; - while ((ftab[((runningOrder[j - h]) + 1) << 8] - - ftab[(runningOrder[j - h]) << 8]) > - (ftab[((vv) + 1) << 8] - ftab[(vv) << 8])) { - runningOrder[j] = runningOrder[j - h]; - j = j - h; - if (j <= (h - 1)) { - break; - } - } - runningOrder[j] = vv; - } - } while (h != 1); - } - - /* - The main sorting loop. - */ - for (i = 0; i <= 255; i++) { - - /* - Process big buckets, starting with the least full. - */ - ss = runningOrder[i]; - - /* - Complete the big bucket [ss] by quicksorting - any unsorted small buckets [ss, j]. Hopefully - previous pointer-scanning phases have already - completed many of the small buckets [ss, j], so - we don't have to sort them at all. - */ - for (j = 0; j <= 255; j++) { - sb = (ss << 8) + j; - if (!((ftab[sb] & SETMASK) == SETMASK)) { - int lo = ftab[sb] & CLEARMASK; - int hi = (ftab[sb + 1] & CLEARMASK) - 1; - if (hi > lo) { - QSort3(lo, hi, 2); - numQSorted += (hi - lo + 1); - if (workDone > workLimit && firstAttempt) { - return; - } - } - ftab[sb] |= SETMASK; - } - } - - /* - The ss big bucket is now done. Record this fact, - and update the quadrant descriptors. Remember to - update quadrants in the overshoot area too, if - necessary. The "if (i < 255)" test merely skips - this updating for the last bucket processed, since - updating for the last bucket is pointless. - */ - bigDone[ss] = true; - - if (i < 255) { - int bbStart = ftab[ss << 8] & CLEARMASK; - int bbSize = (ftab[(ss + 1) << 8] & CLEARMASK) - bbStart; - int shifts = 0; - - while ((bbSize >> shifts) > 65534) { - shifts++; - } - - for (j = 0; j < bbSize; j++) { - int a2update = zptr[bbStart + j]; - int qVal = (j >> shifts); - quadrant[a2update] = qVal; - if (a2update < BZip2Constants.NUM_OVERSHOOT_BYTES) { - quadrant[a2update + last + 1] = qVal; - } - } - - if (!(((bbSize - 1) >> shifts) <= 65535)) { - Panic(); - } - } - - /* - Now scan this big bucket so as to synthesise the - sorted order for small buckets [t, ss] for all t != ss. - */ - for (j = 0; j <= 255; j++) { - copy[j] = ftab[(j << 8) + ss] & CLEARMASK; - } - - for (j = ftab[ss << 8] & CLEARMASK; - j < (ftab[(ss + 1) << 8] & CLEARMASK); j++) { - c1 = block[zptr[j]]; - if (!bigDone[c1]) { - zptr[copy[c1]] = zptr[j] == 0 ? last : zptr[j] - 1; - copy[c1]++; - } - } - - for (j = 0; j <= 255; j++) { - ftab[(j << 8) + ss] |= SETMASK; - } - } - } - } - - private void RandomiseBlock() { - int i; - int rNToGo = 0; - int rTPos = 0; - for (i = 0; i < 256; i++) { - inUse[i] = false; - } - - for (i = 0; i <= last; i++) { - if (rNToGo == 0) { - rNToGo = (char) BZip2Constants.rNums[rTPos]; - rTPos++; - if (rTPos == 512) { - rTPos = 0; - } - } - rNToGo--; - block[i + 1] ^= (char)((rNToGo == 1) ? 1 : 0); - // handle 16 bit signed numbers - block[i + 1] &= (char)0xFF; - - inUse[block[i + 1]] = true; - } - } - - private void DoReversibleTransformation() { - int i; - - workLimit = workFactor * last; - workDone = 0; - blockRandomised = false; - firstAttempt = true; - - MainSort(); - - if (workDone > workLimit && firstAttempt) { - RandomiseBlock(); - workLimit = workDone = 0; - blockRandomised = true; - firstAttempt = false; - MainSort(); - } - - origPtr = -1; - for (i = 0; i <= last; i++) { - if (zptr[i] == 0) { - origPtr = i; - break; - } - }; - - if (origPtr == -1) { - Panic(); - } - } - - private bool FullGtU(int i1, int i2) { - int k; - char c1, c2; - int s1, s2; - - c1 = block[i1 + 1]; - c2 = block[i2 + 1]; - if (c1 != c2) { - return (c1 > c2); - } - i1++; - i2++; - - c1 = block[i1 + 1]; - c2 = block[i2 + 1]; - if (c1 != c2) { - return (c1 > c2); - } - i1++; - i2++; - - c1 = block[i1 + 1]; - c2 = block[i2 + 1]; - if (c1 != c2) { - return (c1 > c2); - } - i1++; - i2++; - - c1 = block[i1 + 1]; - c2 = block[i2 + 1]; - if (c1 != c2) { - return (c1 > c2); - } - i1++; - i2++; - - c1 = block[i1 + 1]; - c2 = block[i2 + 1]; - if (c1 != c2) { - return (c1 > c2); - } - i1++; - i2++; - - c1 = block[i1 + 1]; - c2 = block[i2 + 1]; - if (c1 != c2) { - return (c1 > c2); - } - i1++; - i2++; - - k = last + 1; - - do { - c1 = block[i1 + 1]; - c2 = block[i2 + 1]; - if (c1 != c2) { - return (c1 > c2); - } - s1 = quadrant[i1]; - s2 = quadrant[i2]; - if (s1 != s2) { - return (s1 > s2); - } - i1++; - i2++; - - c1 = block[i1 + 1]; - c2 = block[i2 + 1]; - if (c1 != c2) { - return (c1 > c2); - } - s1 = quadrant[i1]; - s2 = quadrant[i2]; - if (s1 != s2) { - return (s1 > s2); - } - i1++; - i2++; - - c1 = block[i1 + 1]; - c2 = block[i2 + 1]; - if (c1 != c2) { - return (c1 > c2); - } - s1 = quadrant[i1]; - s2 = quadrant[i2]; - if (s1 != s2) { - return (s1 > s2); - } - i1++; - i2++; - - c1 = block[i1 + 1]; - c2 = block[i2 + 1]; - if (c1 != c2) { - return (c1 > c2); - } - s1 = quadrant[i1]; - s2 = quadrant[i2]; - if (s1 != s2) { - return (s1 > s2); - } - i1++; - i2++; - - if (i1 > last) { - i1 -= last; - i1--; - }; - if (i2 > last) { - i2 -= last; - i2--; - }; - - k -= 4; - workDone++; - } while (k >= 0); - - return false; - } - - /* - Knuth's increments seem to work better - than Incerpi-Sedgewick here. Possibly - because the number of elems to sort is - usually small, typically <= 20. - */ - private int[] incs = { 1, 4, 13, 40, 121, 364, 1093, 3280, - 9841, 29524, 88573, 265720, - 797161, 2391484 }; - - private void AllocateCompressStructures() { - int n = BZip2Constants.baseBlockSize * blockSize100k; - block = new char[(n + 1 + BZip2Constants.NUM_OVERSHOOT_BYTES)]; - quadrant = new int[(n + BZip2Constants.NUM_OVERSHOOT_BYTES)]; - zptr = new int[n]; - ftab = new int[65537]; - - if (block == null || quadrant == null || zptr == null - || ftab == null) { - //int totalDraw = (n + 1 + NUM_OVERSHOOT_BYTES) + (n + NUM_OVERSHOOT_BYTES) + n + 65537; - //compressOutOfMemory ( totalDraw, n ); - } - - /* - The back end needs a place to store the MTF values - whilst it calculates the coding tables. We could - put them in the zptr array. However, these values - will fit in a short, so we overlay szptr at the - start of zptr, in the hope of reducing the number - of cache misses induced by the multiple traversals - of the MTF values when calculating coding tables. - Seems to improve compression speed by about 1%. - */ - // szptr = zptr; - - - szptr = new short[2 * n]; - } - - private void GenerateMTFValues() { - char[] yy = new char[256]; - int i, j; - char tmp; - char tmp2; - int zPend; - int wr; - int EOB; - - MakeMaps(); - EOB = nInUse + 1; - - for (i = 0; i <= EOB; i++) { - mtfFreq[i] = 0; - } - - wr = 0; - zPend = 0; - for (i = 0; i < nInUse; i++) { - yy[i] = (char) i; - } - - - for (i = 0; i <= last; i++) { - char ll_i; - - ll_i = unseqToSeq[block[zptr[i]]]; - - j = 0; - tmp = yy[j]; - while (ll_i != tmp) { - j++; - tmp2 = tmp; - tmp = yy[j]; - yy[j] = tmp2; - }; - yy[0] = tmp; - - if (j == 0) { - zPend++; - } else { - if (zPend > 0) { - zPend--; - while (true) { - switch (zPend % 2) { - case 0: - szptr[wr] = (short) BZip2Constants.RUNA; - wr++; - mtfFreq[BZip2Constants.RUNA]++; - break; - case 1: - szptr[wr] = (short) BZip2Constants.RUNB; - wr++; - mtfFreq[BZip2Constants.RUNB]++; - break; - }; - if (zPend < 2) { - break; - } - zPend = (zPend - 2) / 2; - }; - zPend = 0; - } - szptr[wr] = (short) (j + 1); - wr++; - mtfFreq[j + 1]++; - } - } - - if (zPend > 0) { - zPend--; - while (true) { - switch (zPend % 2) { - case 0: - szptr[wr] = (short) BZip2Constants.RUNA; - wr++; - mtfFreq[BZip2Constants.RUNA]++; - break; - case 1: - szptr[wr] = (short) BZip2Constants.RUNB; - wr++; - mtfFreq[BZip2Constants.RUNB]++; - break; - } - if (zPend < 2) { - break; - } - zPend = (zPend - 2) / 2; - } - } - - szptr[wr] = (short) EOB; - wr++; - mtfFreq[EOB]++; - - nMTF = wr; - } - - public override int Read(byte[] buffer, int offset, int count) { - return 0; - } - - public override long Seek(long offset, SeekOrigin origin) { - return 0; - } - - public override void SetLength(long value) { - } - - public override void Write(byte[] buffer, int offset, int count) { - for (int k = 0; k < count; ++k) { - WriteByte(buffer[k + offset]); - } - } - - public override bool CanRead { - get { - return false; - } - } - - public override bool CanSeek { - get { - return false; - } - } - - public override bool CanWrite { - get { - return true; - } - } - - public override long Length { - get { - return 0; - } - } - - public override long Position { - get { - return 0; - } - set { - } - } - } -} \ No newline at end of file diff --git a/bc-sharp-crypto/bzip2/src/CRC.cs b/bc-sharp-crypto/bzip2/src/CRC.cs deleted file mode 100644 index 278a9f3..0000000 --- a/bc-sharp-crypto/bzip2/src/CRC.cs +++ /dev/null @@ -1,134 +0,0 @@ -/* - * Licensed to the Apache Software Foundation (ASF) under one or more - * contributor license agreements. See the NOTICE file distributed with - * this work for additional information regarding copyright ownership. - * The ASF licenses this file to You under the Apache License, Version 2.0 - * (the "License"); you may not use this file except in compliance with - * the License. You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - * - */ - -/* - * This package is based on the work done by Keiron Liddle), Aftex Software - * to whom the Ant project is very grateful for his - * great code. - */ - -using System; - -namespace Org.BouncyCastle.Apache.Bzip2 -{ - /** - * A simple class the hold and calculate the CRC for sanity checking - * of the data. - * - * @author Keiron Liddle - */ - internal class CRC - { - public static readonly int[] crc32Table = { - unchecked((int)0x00000000), unchecked((int)0x04c11db7), unchecked((int)0x09823b6e), unchecked((int)0x0d4326d9), - unchecked((int)0x130476dc), unchecked((int)0x17c56b6b), unchecked((int)0x1a864db2), unchecked((int)0x1e475005), - unchecked((int)0x2608edb8), unchecked((int)0x22c9f00f), unchecked((int)0x2f8ad6d6), unchecked((int)0x2b4bcb61), - unchecked((int)0x350c9b64), unchecked((int)0x31cd86d3), unchecked((int)0x3c8ea00a), unchecked((int)0x384fbdbd), - unchecked((int)0x4c11db70), unchecked((int)0x48d0c6c7), unchecked((int)0x4593e01e), unchecked((int)0x4152fda9), - unchecked((int)0x5f15adac), unchecked((int)0x5bd4b01b), unchecked((int)0x569796c2), unchecked((int)0x52568b75), - unchecked((int)0x6a1936c8), unchecked((int)0x6ed82b7f), unchecked((int)0x639b0da6), unchecked((int)0x675a1011), - unchecked((int)0x791d4014), unchecked((int)0x7ddc5da3), unchecked((int)0x709f7b7a), unchecked((int)0x745e66cd), - unchecked((int)0x9823b6e0), unchecked((int)0x9ce2ab57), unchecked((int)0x91a18d8e), unchecked((int)0x95609039), - unchecked((int)0x8b27c03c), unchecked((int)0x8fe6dd8b), unchecked((int)0x82a5fb52), unchecked((int)0x8664e6e5), - unchecked((int)0xbe2b5b58), unchecked((int)0xbaea46ef), unchecked((int)0xb7a96036), unchecked((int)0xb3687d81), - unchecked((int)0xad2f2d84), unchecked((int)0xa9ee3033), unchecked((int)0xa4ad16ea), unchecked((int)0xa06c0b5d), - unchecked((int)0xd4326d90), unchecked((int)0xd0f37027), unchecked((int)0xddb056fe), unchecked((int)0xd9714b49), - unchecked((int)0xc7361b4c), unchecked((int)0xc3f706fb), unchecked((int)0xceb42022), unchecked((int)0xca753d95), - unchecked((int)0xf23a8028), unchecked((int)0xf6fb9d9f), unchecked((int)0xfbb8bb46), unchecked((int)0xff79a6f1), - unchecked((int)0xe13ef6f4), unchecked((int)0xe5ffeb43), unchecked((int)0xe8bccd9a), unchecked((int)0xec7dd02d), - unchecked((int)0x34867077), unchecked((int)0x30476dc0), unchecked((int)0x3d044b19), unchecked((int)0x39c556ae), - unchecked((int)0x278206ab), unchecked((int)0x23431b1c), unchecked((int)0x2e003dc5), unchecked((int)0x2ac12072), - unchecked((int)0x128e9dcf), unchecked((int)0x164f8078), unchecked((int)0x1b0ca6a1), unchecked((int)0x1fcdbb16), - unchecked((int)0x018aeb13), unchecked((int)0x054bf6a4), unchecked((int)0x0808d07d), unchecked((int)0x0cc9cdca), - unchecked((int)0x7897ab07), unchecked((int)0x7c56b6b0), unchecked((int)0x71159069), unchecked((int)0x75d48dde), - unchecked((int)0x6b93dddb), unchecked((int)0x6f52c06c), unchecked((int)0x6211e6b5), unchecked((int)0x66d0fb02), - unchecked((int)0x5e9f46bf), unchecked((int)0x5a5e5b08), unchecked((int)0x571d7dd1), unchecked((int)0x53dc6066), - unchecked((int)0x4d9b3063), unchecked((int)0x495a2dd4), unchecked((int)0x44190b0d), unchecked((int)0x40d816ba), - unchecked((int)0xaca5c697), unchecked((int)0xa864db20), unchecked((int)0xa527fdf9), unchecked((int)0xa1e6e04e), - unchecked((int)0xbfa1b04b), unchecked((int)0xbb60adfc), unchecked((int)0xb6238b25), unchecked((int)0xb2e29692), - unchecked((int)0x8aad2b2f), unchecked((int)0x8e6c3698), unchecked((int)0x832f1041), unchecked((int)0x87ee0df6), - unchecked((int)0x99a95df3), unchecked((int)0x9d684044), unchecked((int)0x902b669d), unchecked((int)0x94ea7b2a), - unchecked((int)0xe0b41de7), unchecked((int)0xe4750050), unchecked((int)0xe9362689), unchecked((int)0xedf73b3e), - unchecked((int)0xf3b06b3b), unchecked((int)0xf771768c), unchecked((int)0xfa325055), unchecked((int)0xfef34de2), - unchecked((int)0xc6bcf05f), unchecked((int)0xc27dede8), unchecked((int)0xcf3ecb31), unchecked((int)0xcbffd686), - unchecked((int)0xd5b88683), unchecked((int)0xd1799b34), unchecked((int)0xdc3abded), unchecked((int)0xd8fba05a), - unchecked((int)0x690ce0ee), unchecked((int)0x6dcdfd59), unchecked((int)0x608edb80), unchecked((int)0x644fc637), - unchecked((int)0x7a089632), unchecked((int)0x7ec98b85), unchecked((int)0x738aad5c), unchecked((int)0x774bb0eb), - unchecked((int)0x4f040d56), unchecked((int)0x4bc510e1), unchecked((int)0x46863638), unchecked((int)0x42472b8f), - unchecked((int)0x5c007b8a), unchecked((int)0x58c1663d), unchecked((int)0x558240e4), unchecked((int)0x51435d53), - unchecked((int)0x251d3b9e), unchecked((int)0x21dc2629), unchecked((int)0x2c9f00f0), unchecked((int)0x285e1d47), - unchecked((int)0x36194d42), unchecked((int)0x32d850f5), unchecked((int)0x3f9b762c), unchecked((int)0x3b5a6b9b), - unchecked((int)0x0315d626), unchecked((int)0x07d4cb91), unchecked((int)0x0a97ed48), unchecked((int)0x0e56f0ff), - unchecked((int)0x1011a0fa), unchecked((int)0x14d0bd4d), unchecked((int)0x19939b94), unchecked((int)0x1d528623), - unchecked((int)0xf12f560e), unchecked((int)0xf5ee4bb9), unchecked((int)0xf8ad6d60), unchecked((int)0xfc6c70d7), - unchecked((int)0xe22b20d2), unchecked((int)0xe6ea3d65), unchecked((int)0xeba91bbc), unchecked((int)0xef68060b), - unchecked((int)0xd727bbb6), unchecked((int)0xd3e6a601), unchecked((int)0xdea580d8), unchecked((int)0xda649d6f), - unchecked((int)0xc423cd6a), unchecked((int)0xc0e2d0dd), unchecked((int)0xcda1f604), unchecked((int)0xc960ebb3), - unchecked((int)0xbd3e8d7e), unchecked((int)0xb9ff90c9), unchecked((int)0xb4bcb610), unchecked((int)0xb07daba7), - unchecked((int)0xae3afba2), unchecked((int)0xaafbe615), unchecked((int)0xa7b8c0cc), unchecked((int)0xa379dd7b), - unchecked((int)0x9b3660c6), unchecked((int)0x9ff77d71), unchecked((int)0x92b45ba8), unchecked((int)0x9675461f), - unchecked((int)0x8832161a), unchecked((int)0x8cf30bad), unchecked((int)0x81b02d74), unchecked((int)0x857130c3), - unchecked((int)0x5d8a9099), unchecked((int)0x594b8d2e), unchecked((int)0x5408abf7), unchecked((int)0x50c9b640), - unchecked((int)0x4e8ee645), unchecked((int)0x4a4ffbf2), unchecked((int)0x470cdd2b), unchecked((int)0x43cdc09c), - unchecked((int)0x7b827d21), unchecked((int)0x7f436096), unchecked((int)0x7200464f), unchecked((int)0x76c15bf8), - unchecked((int)0x68860bfd), unchecked((int)0x6c47164a), unchecked((int)0x61043093), unchecked((int)0x65c52d24), - unchecked((int)0x119b4be9), unchecked((int)0x155a565e), unchecked((int)0x18197087), unchecked((int)0x1cd86d30), - unchecked((int)0x029f3d35), unchecked((int)0x065e2082), unchecked((int)0x0b1d065b), unchecked((int)0x0fdc1bec), - unchecked((int)0x3793a651), unchecked((int)0x3352bbe6), unchecked((int)0x3e119d3f), unchecked((int)0x3ad08088), - unchecked((int)0x2497d08d), unchecked((int)0x2056cd3a), unchecked((int)0x2d15ebe3), unchecked((int)0x29d4f654), - unchecked((int)0xc5a92679), unchecked((int)0xc1683bce), unchecked((int)0xcc2b1d17), unchecked((int)0xc8ea00a0), - unchecked((int)0xd6ad50a5), unchecked((int)0xd26c4d12), unchecked((int)0xdf2f6bcb), unchecked((int)0xdbee767c), - unchecked((int)0xe3a1cbc1), unchecked((int)0xe760d676), unchecked((int)0xea23f0af), unchecked((int)0xeee2ed18), - unchecked((int)0xf0a5bd1d), unchecked((int)0xf464a0aa), unchecked((int)0xf9278673), unchecked((int)0xfde69bc4), - unchecked((int)0x89b8fd09), unchecked((int)0x8d79e0be), unchecked((int)0x803ac667), unchecked((int)0x84fbdbd0), - unchecked((int)0x9abc8bd5), unchecked((int)0x9e7d9662), unchecked((int)0x933eb0bb), unchecked((int)0x97ffad0c), - unchecked((int)0xafb010b1), unchecked((int)0xab710d06), unchecked((int)0xa6322bdf), unchecked((int)0xa2f33668), - unchecked((int)0xbcb4666d), unchecked((int)0xb8757bda), unchecked((int)0xb5365d03), unchecked((int)0xb1f740b4) - }; - - public CRC() { - InitialiseCRC(); - } - - internal void InitialiseCRC() { - globalCrc = unchecked((int)0xffffffff); - } - - internal int GetFinalCRC() { - return ~globalCrc; - } - - internal int GetGlobalCRC() { - return globalCrc; - } - - internal void SetGlobalCRC(int newCrc) { - globalCrc = newCrc; - } - - internal void UpdateCRC(int inCh) { - int temp = (globalCrc >> 24) ^ inCh; - if (temp < 0) { - temp = 256 + temp; - } - globalCrc = (globalCrc << 8) ^ CRC.crc32Table[temp]; - } - - internal int globalCrc; - } -} \ No newline at end of file diff --git a/bc-sharp-crypto/legal and licecing.txt b/bc-sharp-crypto/legal and licecing.txt deleted file mode 100644 index 00ab0a4..0000000 --- a/bc-sharp-crypto/legal and licecing.txt +++ /dev/null @@ -1,12 +0,0 @@ -Please note: our license is an adaptation of the MIT X11 License and should be read as such. - -Please also note: this licensing model is made possible through funding from donations and the sale of support contracts. - -LICENSE -Copyright (c) 2000 - 2017 The Legion of the Bouncy Castle Inc. (http://www.bouncycastle.org) - -Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: - -The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. - -THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. diff --git a/bc-sharp-crypto/src/AssemblyInfo.cs b/bc-sharp-crypto/src/AssemblyInfo.cs deleted file mode 100644 index bb9811d..0000000 --- a/bc-sharp-crypto/src/AssemblyInfo.cs +++ /dev/null @@ -1,119 +0,0 @@ -using System; -using System.Reflection; -//using System.Security.Permissions; - -#if PORTABLE -using System.Linq; -#else -using System.Runtime.InteropServices; -#endif - -// -// General Information about an assembly is controlled through the following -// set of attributes. Change these attribute values to modify the information -// associated with an assembly. -// -[assembly: AssemblyTitle("BouncyCastle.Crypto")] -[assembly: AssemblyDescription("Bouncy Castle Cryptography API")] -[assembly: AssemblyConfiguration("")] -[assembly: AssemblyCompany("The Legion of the Bouncy Castle Inc.")] -[assembly: AssemblyProduct("Bouncy Castle for .NET")] -[assembly: AssemblyCopyright("Copyright (C) 2000-2015")] -[assembly: AssemblyTrademark("")] -[assembly: AssemblyCulture("")] - -// -// Version information for an assembly consists of the following four values: -// -// Major Version -// Minor Version -// Build Number -// Revision -// -// You can specify all the values or you can default the Revision and Build Numbers -// by using the '*' as shown below: - -[assembly: AssemblyVersion("1.8.1.0")] -[assembly: AssemblyFileVersion("1.8.15362.1")] -[assembly: AssemblyInformationalVersion("1.8.1")] - -// -// In order to sign your assembly you must specify a key to use. Refer to the -// Microsoft .NET Framework documentation for more information on assembly signing. -// -// Use the attributes below to control which key is used for signing. -// -// Notes: -// (*) If no key is specified, the assembly is not signed. -// (*) KeyName refers to a key that has been installed in the Crypto Service -// Provider (CSP) on your machine. KeyFile refers to a file which contains -// a key. -// (*) If the KeyFile and the KeyName values are both specified, the -// following processing occurs: -// (1) If the KeyName can be found in the CSP, that key is used. -// (2) If the KeyName does not exist and the KeyFile does exist, the key -// in the KeyFile is installed into the CSP and used. -// (*) In order to create a KeyFile, you can use the sn.exe (Strong Name) utility. -// When specifying the KeyFile, the location of the KeyFile should be -// relative to the project output directory which is -// %Project Directory%\obj\. For example, if your KeyFile is -// located in the project directory, you would specify the AssemblyKeyFile -// attribute as [assembly: AssemblyKeyFile("..\\..\\mykey.snk")] -// (*) Delay Signing is an advanced option - see the Microsoft .NET Framework -// documentation for more information on this. -// -[assembly: AssemblyDelaySign(false)] -#if STRONG_NAME -[assembly: AssemblyKeyFile(@"../BouncyCastle.snk")] -#endif - -[assembly: CLSCompliant(true)] -#if !PORTABLE -[assembly: ComVisible(false)] -#endif - -// Start with no permissions -//[assembly: PermissionSet(SecurityAction.RequestOptional, Unrestricted=false)] -//...and explicitly add those we need - -// see Org.BouncyCastle.Crypto.Encodings.Pkcs1Encoding.StrictLengthEnabledProperty -//[assembly: EnvironmentPermission(SecurityAction.RequestOptional, Read="Org.BouncyCastle.Pkcs1.Strict")] - -internal class AssemblyInfo -{ - private static string version = null; - - public static string Version - { - get - { - if (version == null) - { -#if PORTABLE -#if NEW_REFLECTION - var a = typeof(AssemblyInfo).GetTypeInfo().Assembly; - var c = a.GetCustomAttributes(typeof(AssemblyVersionAttribute)); -#else - var a = typeof(AssemblyInfo).Assembly; - var c = a.GetCustomAttributes(typeof(AssemblyVersionAttribute), false); -#endif - var v = (AssemblyVersionAttribute)c.FirstOrDefault(); - if (v != null) - { - version = v.Version; - } -#else - version = Assembly.GetExecutingAssembly().GetName().Version.ToString(); -#endif - - // if we're still here, then don't try again - if (version == null) - { - version = string.Empty; - } - } - - return version; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/ASN1Generator.cs b/bc-sharp-crypto/src/asn1/ASN1Generator.cs deleted file mode 100644 index e560517..0000000 --- a/bc-sharp-crypto/src/asn1/ASN1Generator.cs +++ /dev/null @@ -1,27 +0,0 @@ -using System.Collections; -using System.IO; - -namespace Org.BouncyCastle.Asn1 -{ - public abstract class Asn1Generator - { - private Stream _out; - - protected Asn1Generator( - Stream outStream) - { - _out = outStream; - } - - protected Stream Out - { - get { return _out; } - } - - public abstract void AddObject(Asn1Encodable obj); - - public abstract Stream GetRawOutputStream(); - - public abstract void Close(); - } -} diff --git a/bc-sharp-crypto/src/asn1/ASN1OctetStringParser.cs b/bc-sharp-crypto/src/asn1/ASN1OctetStringParser.cs deleted file mode 100644 index 5815aa4..0000000 --- a/bc-sharp-crypto/src/asn1/ASN1OctetStringParser.cs +++ /dev/null @@ -1,10 +0,0 @@ -using System.IO; - -namespace Org.BouncyCastle.Asn1 -{ - public interface Asn1OctetStringParser - : IAsn1Convertible - { - Stream GetOctetStream(); - } -} diff --git a/bc-sharp-crypto/src/asn1/ASN1SequenceParser.cs b/bc-sharp-crypto/src/asn1/ASN1SequenceParser.cs deleted file mode 100644 index 9e88ac7..0000000 --- a/bc-sharp-crypto/src/asn1/ASN1SequenceParser.cs +++ /dev/null @@ -1,8 +0,0 @@ -namespace Org.BouncyCastle.Asn1 -{ - public interface Asn1SequenceParser - : IAsn1Convertible - { - IAsn1Convertible ReadObject(); - } -} diff --git a/bc-sharp-crypto/src/asn1/ASN1SetParser.cs b/bc-sharp-crypto/src/asn1/ASN1SetParser.cs deleted file mode 100644 index d1b9c64..0000000 --- a/bc-sharp-crypto/src/asn1/ASN1SetParser.cs +++ /dev/null @@ -1,8 +0,0 @@ -namespace Org.BouncyCastle.Asn1 -{ - public interface Asn1SetParser - : IAsn1Convertible - { - IAsn1Convertible ReadObject(); - } -} diff --git a/bc-sharp-crypto/src/asn1/ASN1StreamParser.cs b/bc-sharp-crypto/src/asn1/ASN1StreamParser.cs deleted file mode 100644 index 0c6b441..0000000 --- a/bc-sharp-crypto/src/asn1/ASN1StreamParser.cs +++ /dev/null @@ -1,234 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Asn1 -{ - public class Asn1StreamParser - { - private readonly Stream _in; - private readonly int _limit; - - private readonly byte[][] tmpBuffers; - - public Asn1StreamParser( - Stream inStream) - : this(inStream, Asn1InputStream.FindLimit(inStream)) - { - } - - public Asn1StreamParser( - Stream inStream, - int limit) - { - if (!inStream.CanRead) - throw new ArgumentException("Expected stream to be readable", "inStream"); - - this._in = inStream; - this._limit = limit; - this.tmpBuffers = new byte[16][]; - } - - public Asn1StreamParser( - byte[] encoding) - : this(new MemoryStream(encoding, false), encoding.Length) - { - } - - internal IAsn1Convertible ReadIndef(int tagValue) - { - // Note: INDEF => CONSTRUCTED - - // TODO There are other tags that may be constructed (e.g. BIT_STRING) - switch (tagValue) - { - case Asn1Tags.External: - return new DerExternalParser(this); - case Asn1Tags.OctetString: - return new BerOctetStringParser(this); - case Asn1Tags.Sequence: - return new BerSequenceParser(this); - case Asn1Tags.Set: - return new BerSetParser(this); - default: - throw new Asn1Exception("unknown BER object encountered: 0x" + tagValue.ToString("X")); - } - } - - internal IAsn1Convertible ReadImplicit(bool constructed, int tag) - { - if (_in is IndefiniteLengthInputStream) - { - if (!constructed) - throw new IOException("indefinite length primitive encoding encountered"); - - return ReadIndef(tag); - } - - if (constructed) - { - switch (tag) - { - case Asn1Tags.Set: - return new DerSetParser(this); - case Asn1Tags.Sequence: - return new DerSequenceParser(this); - case Asn1Tags.OctetString: - return new BerOctetStringParser(this); - } - } - else - { - switch (tag) - { - case Asn1Tags.Set: - throw new Asn1Exception("sequences must use constructed encoding (see X.690 8.9.1/8.10.1)"); - case Asn1Tags.Sequence: - throw new Asn1Exception("sets must use constructed encoding (see X.690 8.11.1/8.12.1)"); - case Asn1Tags.OctetString: - return new DerOctetStringParser((DefiniteLengthInputStream)_in); - } - } - - throw new Asn1Exception("implicit tagging not implemented"); - } - - internal Asn1Object ReadTaggedObject(bool constructed, int tag) - { - if (!constructed) - { - // Note: !CONSTRUCTED => IMPLICIT - DefiniteLengthInputStream defIn = (DefiniteLengthInputStream)_in; - return new DerTaggedObject(false, tag, new DerOctetString(defIn.ToArray())); - } - - Asn1EncodableVector v = ReadVector(); - - if (_in is IndefiniteLengthInputStream) - { - return v.Count == 1 - ? new BerTaggedObject(true, tag, v[0]) - : new BerTaggedObject(false, tag, BerSequence.FromVector(v)); - } - - return v.Count == 1 - ? new DerTaggedObject(true, tag, v[0]) - : new DerTaggedObject(false, tag, DerSequence.FromVector(v)); - } - - public virtual IAsn1Convertible ReadObject() - { - int tag = _in.ReadByte(); - if (tag == -1) - return null; - - // turn of looking for "00" while we resolve the tag - Set00Check(false); - - // - // calculate tag number - // - int tagNo = Asn1InputStream.ReadTagNumber(_in, tag); - - bool isConstructed = (tag & Asn1Tags.Constructed) != 0; - - // - // calculate length - // - int length = Asn1InputStream.ReadLength(_in, _limit); - - if (length < 0) // indefinite length method - { - if (!isConstructed) - throw new IOException("indefinite length primitive encoding encountered"); - - IndefiniteLengthInputStream indIn = new IndefiniteLengthInputStream(_in, _limit); - Asn1StreamParser sp = new Asn1StreamParser(indIn, _limit); - - if ((tag & Asn1Tags.Application) != 0) - { - return new BerApplicationSpecificParser(tagNo, sp); - } - - if ((tag & Asn1Tags.Tagged) != 0) - { - return new BerTaggedObjectParser(true, tagNo, sp); - } - - return sp.ReadIndef(tagNo); - } - else - { - DefiniteLengthInputStream defIn = new DefiniteLengthInputStream(_in, length); - - if ((tag & Asn1Tags.Application) != 0) - { - return new DerApplicationSpecific(isConstructed, tagNo, defIn.ToArray()); - } - - if ((tag & Asn1Tags.Tagged) != 0) - { - return new BerTaggedObjectParser(isConstructed, tagNo, new Asn1StreamParser(defIn)); - } - - if (isConstructed) - { - // TODO There are other tags that may be constructed (e.g. BitString) - switch (tagNo) - { - case Asn1Tags.OctetString: - // - // yes, people actually do this... - // - return new BerOctetStringParser(new Asn1StreamParser(defIn)); - case Asn1Tags.Sequence: - return new DerSequenceParser(new Asn1StreamParser(defIn)); - case Asn1Tags.Set: - return new DerSetParser(new Asn1StreamParser(defIn)); - case Asn1Tags.External: - return new DerExternalParser(new Asn1StreamParser(defIn)); - default: - throw new IOException("unknown tag " + tagNo + " encountered"); - } - } - - // Some primitive encodings can be handled by parsers too... - switch (tagNo) - { - case Asn1Tags.OctetString: - return new DerOctetStringParser(defIn); - } - - try - { - return Asn1InputStream.CreatePrimitiveDerObject(tagNo, defIn, tmpBuffers); - } - catch (ArgumentException e) - { - throw new Asn1Exception("corrupted stream detected", e); - } - } - } - - private void Set00Check( - bool enabled) - { - if (_in is IndefiniteLengthInputStream) - { - ((IndefiniteLengthInputStream) _in).SetEofOn00(enabled); - } - } - - internal Asn1EncodableVector ReadVector() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - IAsn1Convertible obj; - while ((obj = ReadObject()) != null) - { - v.Add(obj.ToAsn1Object()); - } - - return v; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/ASN1TaggedObjectParser.cs b/bc-sharp-crypto/src/asn1/ASN1TaggedObjectParser.cs deleted file mode 100644 index 32327a2..0000000 --- a/bc-sharp-crypto/src/asn1/ASN1TaggedObjectParser.cs +++ /dev/null @@ -1,10 +0,0 @@ -namespace Org.BouncyCastle.Asn1 -{ - public interface Asn1TaggedObjectParser - : IAsn1Convertible - { - int TagNo { get; } - - IAsn1Convertible GetObjectParser(int tag, bool isExplicit); - } -} diff --git a/bc-sharp-crypto/src/asn1/Asn1Encodable.cs b/bc-sharp-crypto/src/asn1/Asn1Encodable.cs deleted file mode 100644 index e3dd9a1..0000000 --- a/bc-sharp-crypto/src/asn1/Asn1Encodable.cs +++ /dev/null @@ -1,78 +0,0 @@ -using System.IO; - -namespace Org.BouncyCastle.Asn1 -{ - public abstract class Asn1Encodable - : IAsn1Convertible - { - public const string Der = "DER"; - public const string Ber = "BER"; - - public byte[] GetEncoded() - { - MemoryStream bOut = new MemoryStream(); - Asn1OutputStream aOut = new Asn1OutputStream(bOut); - - aOut.WriteObject(this); - - return bOut.ToArray(); - } - - public byte[] GetEncoded( - string encoding) - { - if (encoding.Equals(Der)) - { - MemoryStream bOut = new MemoryStream(); - DerOutputStream dOut = new DerOutputStream(bOut); - - dOut.WriteObject(this); - - return bOut.ToArray(); - } - - return GetEncoded(); - } - - /** - * Return the DER encoding of the object, null if the DER encoding can not be made. - * - * @return a DER byte array, null otherwise. - */ - public byte[] GetDerEncoded() - { - try - { - return GetEncoded(Der); - } - catch (IOException) - { - return null; - } - } - - public sealed override int GetHashCode() - { - return ToAsn1Object().CallAsn1GetHashCode(); - } - - public sealed override bool Equals( - object obj) - { - if (obj == this) - return true; - - IAsn1Convertible other = obj as IAsn1Convertible; - - if (other == null) - return false; - - Asn1Object o1 = ToAsn1Object(); - Asn1Object o2 = other.ToAsn1Object(); - - return o1 == o2 || o1.CallAsn1Equals(o2); - } - - public abstract Asn1Object ToAsn1Object(); - } -} diff --git a/bc-sharp-crypto/src/asn1/Asn1EncodableVector.cs b/bc-sharp-crypto/src/asn1/Asn1EncodableVector.cs deleted file mode 100644 index 49532fe..0000000 --- a/bc-sharp-crypto/src/asn1/Asn1EncodableVector.cs +++ /dev/null @@ -1,93 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1 -{ - public class Asn1EncodableVector - : IEnumerable - { - private IList v = Platform.CreateArrayList(); - - public static Asn1EncodableVector FromEnumerable( - IEnumerable e) - { - Asn1EncodableVector v = new Asn1EncodableVector(); - foreach (Asn1Encodable obj in e) - { - v.Add(obj); - } - return v; - } - -// public Asn1EncodableVector() -// { -// } - - public Asn1EncodableVector( - params Asn1Encodable[] v) - { - Add(v); - } - -// public void Add( -// Asn1Encodable obj) -// { -// v.Add(obj); -// } - - public void Add( - params Asn1Encodable[] objs) - { - foreach (Asn1Encodable obj in objs) - { - v.Add(obj); - } - } - - public void AddOptional( - params Asn1Encodable[] objs) - { - if (objs != null) - { - foreach (Asn1Encodable obj in objs) - { - if (obj != null) - { - v.Add(obj); - } - } - } - } - - public Asn1Encodable this[ - int index] - { - get { return (Asn1Encodable) v[index]; } - } - - [Obsolete("Use 'object[index]' syntax instead")] - public Asn1Encodable Get( - int index) - { - return this[index]; - } - - [Obsolete("Use 'Count' property instead")] - public int Size - { - get { return v.Count; } - } - - public int Count - { - get { return v.Count; } - } - - public IEnumerator GetEnumerator() - { - return v.GetEnumerator(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/Asn1Exception.cs b/bc-sharp-crypto/src/asn1/Asn1Exception.cs deleted file mode 100644 index 1dfe173..0000000 --- a/bc-sharp-crypto/src/asn1/Asn1Exception.cs +++ /dev/null @@ -1,30 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Asn1 -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class Asn1Exception - : IOException - { - public Asn1Exception() - : base() - { - } - - public Asn1Exception( - string message) - : base(message) - { - } - - public Asn1Exception( - string message, - Exception exception) - : base(message, exception) - { - } - } -} diff --git a/bc-sharp-crypto/src/asn1/Asn1InputStream.cs b/bc-sharp-crypto/src/asn1/Asn1InputStream.cs deleted file mode 100644 index a94ae52..0000000 --- a/bc-sharp-crypto/src/asn1/Asn1InputStream.cs +++ /dev/null @@ -1,371 +0,0 @@ -using System; -using System.Diagnostics; -using System.IO; - -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Asn1 -{ - /** - * a general purpose ASN.1 decoder - note: this class differs from the - * others in that it returns null after it has read the last object in - * the stream. If an ASN.1 Null is encountered a Der/BER Null object is - * returned. - */ - public class Asn1InputStream - : FilterStream - { - private readonly int limit; - - private readonly byte[][] tmpBuffers; - - internal static int FindLimit(Stream input) - { - if (input is LimitedInputStream) - { - return ((LimitedInputStream)input).GetRemaining(); - } - else if (input is MemoryStream) - { - MemoryStream mem = (MemoryStream)input; - return (int)(mem.Length - mem.Position); - } - - return int.MaxValue; - } - - public Asn1InputStream( - Stream inputStream) - : this(inputStream, FindLimit(inputStream)) - { - } - - /** - * Create an ASN1InputStream where no DER object will be longer than limit. - * - * @param input stream containing ASN.1 encoded data. - * @param limit maximum size of a DER encoded object. - */ - public Asn1InputStream( - Stream inputStream, - int limit) - : base(inputStream) - { - this.limit = limit; - this.tmpBuffers = new byte[16][]; - } - - /** - * Create an ASN1InputStream based on the input byte array. The length of DER objects in - * the stream is automatically limited to the length of the input array. - * - * @param input array containing ASN.1 encoded data. - */ - public Asn1InputStream( - byte[] input) - : this(new MemoryStream(input, false), input.Length) - { - } - - /** - * build an object given its tag and the number of bytes to construct it from. - */ - private Asn1Object BuildObject( - int tag, - int tagNo, - int length) - { - bool isConstructed = (tag & Asn1Tags.Constructed) != 0; - - DefiniteLengthInputStream defIn = new DefiniteLengthInputStream(this.s, length); - - if ((tag & Asn1Tags.Application) != 0) - { - return new DerApplicationSpecific(isConstructed, tagNo, defIn.ToArray()); - } - - if ((tag & Asn1Tags.Tagged) != 0) - { - return new Asn1StreamParser(defIn).ReadTaggedObject(isConstructed, tagNo); - } - - if (isConstructed) - { - // TODO There are other tags that may be constructed (e.g. BitString) - switch (tagNo) - { - case Asn1Tags.OctetString: - // - // yes, people actually do this... - // - return new BerOctetString(BuildDerEncodableVector(defIn)); - case Asn1Tags.Sequence: - return CreateDerSequence(defIn); - case Asn1Tags.Set: - return CreateDerSet(defIn); - case Asn1Tags.External: - return new DerExternal(BuildDerEncodableVector(defIn)); - default: - throw new IOException("unknown tag " + tagNo + " encountered"); - } - } - - return CreatePrimitiveDerObject(tagNo, defIn, tmpBuffers); - } - - internal Asn1EncodableVector BuildEncodableVector() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - Asn1Object o; - while ((o = ReadObject()) != null) - { - v.Add(o); - } - - return v; - } - - internal virtual Asn1EncodableVector BuildDerEncodableVector( - DefiniteLengthInputStream dIn) - { - return new Asn1InputStream(dIn).BuildEncodableVector(); - } - - internal virtual DerSequence CreateDerSequence( - DefiniteLengthInputStream dIn) - { - return DerSequence.FromVector(BuildDerEncodableVector(dIn)); - } - - internal virtual DerSet CreateDerSet( - DefiniteLengthInputStream dIn) - { - return DerSet.FromVector(BuildDerEncodableVector(dIn), false); - } - - public Asn1Object ReadObject() - { - int tag = ReadByte(); - if (tag <= 0) - { - if (tag == 0) - throw new IOException("unexpected end-of-contents marker"); - - return null; - } - - // - // calculate tag number - // - int tagNo = ReadTagNumber(this.s, tag); - - bool isConstructed = (tag & Asn1Tags.Constructed) != 0; - - // - // calculate length - // - int length = ReadLength(this.s, limit); - - if (length < 0) // indefinite length method - { - if (!isConstructed) - throw new IOException("indefinite length primitive encoding encountered"); - - IndefiniteLengthInputStream indIn = new IndefiniteLengthInputStream(this.s, limit); - Asn1StreamParser sp = new Asn1StreamParser(indIn, limit); - - if ((tag & Asn1Tags.Application) != 0) - { - return new BerApplicationSpecificParser(tagNo, sp).ToAsn1Object(); - } - - if ((tag & Asn1Tags.Tagged) != 0) - { - return new BerTaggedObjectParser(true, tagNo, sp).ToAsn1Object(); - } - - // TODO There are other tags that may be constructed (e.g. BitString) - switch (tagNo) - { - case Asn1Tags.OctetString: - return new BerOctetStringParser(sp).ToAsn1Object(); - case Asn1Tags.Sequence: - return new BerSequenceParser(sp).ToAsn1Object(); - case Asn1Tags.Set: - return new BerSetParser(sp).ToAsn1Object(); - case Asn1Tags.External: - return new DerExternalParser(sp).ToAsn1Object(); - default: - throw new IOException("unknown BER object encountered"); - } - } - else - { - try - { - return BuildObject(tag, tagNo, length); - } - catch (ArgumentException e) - { - throw new Asn1Exception("corrupted stream detected", e); - } - } - } - - internal static int ReadTagNumber( - Stream s, - int tag) - { - int tagNo = tag & 0x1f; - - // - // with tagged object tag number is bottom 5 bits, or stored at the start of the content - // - if (tagNo == 0x1f) - { - tagNo = 0; - - int b = s.ReadByte(); - - // X.690-0207 8.1.2.4.2 - // "c) bits 7 to 1 of the first subsequent octet shall not all be zero." - if ((b & 0x7f) == 0) // Note: -1 will pass - { - throw new IOException("Corrupted stream - invalid high tag number found"); - } - - while ((b >= 0) && ((b & 0x80) != 0)) - { - tagNo |= (b & 0x7f); - tagNo <<= 7; - b = s.ReadByte(); - } - - if (b < 0) - throw new EndOfStreamException("EOF found inside tag value."); - - tagNo |= (b & 0x7f); - } - - return tagNo; - } - - internal static int ReadLength( - Stream s, - int limit) - { - int length = s.ReadByte(); - if (length < 0) - throw new EndOfStreamException("EOF found when length expected"); - - if (length == 0x80) - return -1; // indefinite-length encoding - - if (length > 127) - { - int size = length & 0x7f; - - // Note: The invalid long form "0xff" (see X.690 8.1.3.5c) will be caught here - if (size > 4) - throw new IOException("DER length more than 4 bytes: " + size); - - length = 0; - for (int i = 0; i < size; i++) - { - int next = s.ReadByte(); - - if (next < 0) - throw new EndOfStreamException("EOF found reading length"); - - length = (length << 8) + next; - } - - if (length < 0) - throw new IOException("Corrupted stream - negative length found"); - - if (length >= limit) // after all we must have read at least 1 byte - throw new IOException("Corrupted stream - out of bounds length found"); - } - - return length; - } - - internal static byte[] GetBuffer(DefiniteLengthInputStream defIn, byte[][] tmpBuffers) - { - int len = defIn.GetRemaining(); - if (len >= tmpBuffers.Length) - { - return defIn.ToArray(); - } - - byte[] buf = tmpBuffers[len]; - if (buf == null) - { - buf = tmpBuffers[len] = new byte[len]; - } - - defIn.ReadAllIntoByteArray(buf); - - return buf; - } - - internal static Asn1Object CreatePrimitiveDerObject( - int tagNo, - DefiniteLengthInputStream defIn, - byte[][] tmpBuffers) - { - switch (tagNo) - { - case Asn1Tags.Boolean: - return DerBoolean.FromOctetString(GetBuffer(defIn, tmpBuffers)); - case Asn1Tags.Enumerated: - return DerEnumerated.FromOctetString(GetBuffer(defIn, tmpBuffers)); - case Asn1Tags.ObjectIdentifier: - return DerObjectIdentifier.FromOctetString(GetBuffer(defIn, tmpBuffers)); - } - - byte[] bytes = defIn.ToArray(); - - switch (tagNo) - { - case Asn1Tags.BitString: - return DerBitString.FromAsn1Octets(bytes); - case Asn1Tags.BmpString: - return new DerBmpString(bytes); - case Asn1Tags.GeneralizedTime: - return new DerGeneralizedTime(bytes); - case Asn1Tags.GeneralString: - return new DerGeneralString(bytes); - case Asn1Tags.GraphicString: - return new DerGraphicString(bytes); - case Asn1Tags.IA5String: - return new DerIA5String(bytes); - case Asn1Tags.Integer: - return new DerInteger(bytes); - case Asn1Tags.Null: - return DerNull.Instance; // actual content is ignored (enforce 0 length?) - case Asn1Tags.NumericString: - return new DerNumericString(bytes); - case Asn1Tags.OctetString: - return new DerOctetString(bytes); - case Asn1Tags.PrintableString: - return new DerPrintableString(bytes); - case Asn1Tags.T61String: - return new DerT61String(bytes); - case Asn1Tags.UniversalString: - return new DerUniversalString(bytes); - case Asn1Tags.UtcTime: - return new DerUtcTime(bytes); - case Asn1Tags.Utf8String: - return new DerUtf8String(bytes); - case Asn1Tags.VideotexString: - return new DerVideotexString(bytes); - case Asn1Tags.VisibleString: - return new DerVisibleString(bytes); - default: - throw new IOException("unknown tag " + tagNo + " encountered"); - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/Asn1Null.cs b/bc-sharp-crypto/src/asn1/Asn1Null.cs deleted file mode 100644 index d54019f..0000000 --- a/bc-sharp-crypto/src/asn1/Asn1Null.cs +++ /dev/null @@ -1,18 +0,0 @@ -namespace Org.BouncyCastle.Asn1 -{ - /** - * A Null object. - */ - public abstract class Asn1Null - : Asn1Object - { - internal Asn1Null() - { - } - - public override string ToString() - { - return "NULL"; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/Asn1Object.cs b/bc-sharp-crypto/src/asn1/Asn1Object.cs deleted file mode 100644 index 4faa81a..0000000 --- a/bc-sharp-crypto/src/asn1/Asn1Object.cs +++ /dev/null @@ -1,70 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Asn1 -{ - public abstract class Asn1Object - : Asn1Encodable - { - /// Create a base ASN.1 object from a byte array. - /// The byte array to parse. - /// The base ASN.1 object represented by the byte array. - /// - /// If there is a problem parsing the data, or parsing an object did not exhaust the available data. - /// - public static Asn1Object FromByteArray( - byte[] data) - { - try - { - MemoryStream input = new MemoryStream(data, false); - Asn1InputStream asn1 = new Asn1InputStream(input, data.Length); - Asn1Object result = asn1.ReadObject(); - if (input.Position != input.Length) - throw new IOException("extra data found after object"); - return result; - } - catch (InvalidCastException) - { - throw new IOException("cannot recognise object in byte array"); - } - } - - /// Read a base ASN.1 object from a stream. - /// The stream to parse. - /// The base ASN.1 object represented by the byte array. - /// If there is a problem parsing the data. - public static Asn1Object FromStream( - Stream inStr) - { - try - { - return new Asn1InputStream(inStr).ReadObject(); - } - catch (InvalidCastException) - { - throw new IOException("cannot recognise object in stream"); - } - } - - public sealed override Asn1Object ToAsn1Object() - { - return this; - } - - internal abstract void Encode(DerOutputStream derOut); - - protected abstract bool Asn1Equals(Asn1Object asn1Object); - protected abstract int Asn1GetHashCode(); - - internal bool CallAsn1Equals(Asn1Object obj) - { - return Asn1Equals(obj); - } - - internal int CallAsn1GetHashCode() - { - return Asn1GetHashCode(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/Asn1OctetString.cs b/bc-sharp-crypto/src/asn1/Asn1OctetString.cs deleted file mode 100644 index 73b6e51..0000000 --- a/bc-sharp-crypto/src/asn1/Asn1OctetString.cs +++ /dev/null @@ -1,119 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Asn1 -{ - public abstract class Asn1OctetString - : Asn1Object, Asn1OctetStringParser - { - internal byte[] str; - - /** - * return an Octet string from a tagged object. - * - * @param obj the tagged object holding the object we want. - * @param explicitly true if the object is meant to be explicitly - * tagged false otherwise. - * @exception ArgumentException if the tagged object cannot - * be converted. - */ - public static Asn1OctetString GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - Asn1Object o = obj.GetObject(); - - if (isExplicit || o is Asn1OctetString) - { - return GetInstance(o); - } - - return BerOctetString.FromSequence(Asn1Sequence.GetInstance(o)); - } - - /** - * return an Octet string from the given object. - * - * @param obj the object we want converted. - * @exception ArgumentException if the object cannot be converted. - */ - public static Asn1OctetString GetInstance(object obj) - { - if (obj == null || obj is Asn1OctetString) - { - return (Asn1OctetString)obj; - } - - // TODO: this needs to be deleted in V2 - if (obj is Asn1TaggedObject) - return GetInstance(((Asn1TaggedObject)obj).GetObject()); - - throw new ArgumentException("illegal object in GetInstance: " + Platform.GetTypeName(obj)); - } - - /** - * @param string the octets making up the octet string. - */ - internal Asn1OctetString( - byte[] str) - { - if (str == null) - throw new ArgumentNullException("str"); - - this.str = str; - } - - internal Asn1OctetString( - Asn1Encodable obj) - { - try - { - this.str = obj.GetEncoded(Asn1Encodable.Der); - } - catch (IOException e) - { - throw new ArgumentException("Error processing object : " + e.ToString()); - } - } - - public Stream GetOctetStream() - { - return new MemoryStream(str, false); - } - - public Asn1OctetStringParser Parser - { - get { return this; } - } - - public virtual byte[] GetOctets() - { - return str; - } - - protected override int Asn1GetHashCode() - { - return Arrays.GetHashCode(GetOctets()); - } - - protected override bool Asn1Equals( - Asn1Object asn1Object) - { - DerOctetString other = asn1Object as DerOctetString; - - if (other == null) - return false; - - return Arrays.AreEqual(GetOctets(), other.GetOctets()); - } - - public override string ToString() - { - return "#" + Hex.ToHexString(str); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/Asn1OutputStream.cs b/bc-sharp-crypto/src/asn1/Asn1OutputStream.cs deleted file mode 100644 index 39c8b1e..0000000 --- a/bc-sharp-crypto/src/asn1/Asn1OutputStream.cs +++ /dev/null @@ -1,35 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Asn1 -{ - public class Asn1OutputStream - : DerOutputStream - { - public Asn1OutputStream(Stream os) : base(os) - { - } - - [Obsolete("Use version taking an Asn1Encodable arg instead")] - public override void WriteObject( - object obj) - { - if (obj == null) - { - WriteNull(); - } - else if (obj is Asn1Object) - { - ((Asn1Object)obj).Encode(this); - } - else if (obj is Asn1Encodable) - { - ((Asn1Encodable)obj).ToAsn1Object().Encode(this); - } - else - { - throw new IOException("object not Asn1Encodable"); - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/Asn1ParsingException.cs b/bc-sharp-crypto/src/asn1/Asn1ParsingException.cs deleted file mode 100644 index 84cdb78..0000000 --- a/bc-sharp-crypto/src/asn1/Asn1ParsingException.cs +++ /dev/null @@ -1,29 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1 -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class Asn1ParsingException - : InvalidOperationException - { - public Asn1ParsingException() - : base() - { - } - - public Asn1ParsingException( - string message) - : base(message) - { - } - - public Asn1ParsingException( - string message, - Exception exception) - : base(message, exception) - { - } - } -} diff --git a/bc-sharp-crypto/src/asn1/Asn1Sequence.cs b/bc-sharp-crypto/src/asn1/Asn1Sequence.cs deleted file mode 100644 index 849f5e3..0000000 --- a/bc-sharp-crypto/src/asn1/Asn1Sequence.cs +++ /dev/null @@ -1,268 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Asn1 -{ - public abstract class Asn1Sequence - : Asn1Object, IEnumerable - { - private readonly IList seq; - - /** - * return an Asn1Sequence from the given object. - * - * @param obj the object we want converted. - * @exception ArgumentException if the object cannot be converted. - */ - public static Asn1Sequence GetInstance( - object obj) - { - if (obj == null || obj is Asn1Sequence) - { - return (Asn1Sequence)obj; - } - else if (obj is Asn1SequenceParser) - { - return Asn1Sequence.GetInstance(((Asn1SequenceParser)obj).ToAsn1Object()); - } - else if (obj is byte[]) - { - try - { - return Asn1Sequence.GetInstance(FromByteArray((byte[])obj)); - } - catch (IOException e) - { - throw new ArgumentException("failed to construct sequence from byte[]: " + e.Message); - } - } - else if (obj is Asn1Encodable) - { - Asn1Object primitive = ((Asn1Encodable)obj).ToAsn1Object(); - - if (primitive is Asn1Sequence) - { - return (Asn1Sequence)primitive; - } - } - - throw new ArgumentException("Unknown object in GetInstance: " + Platform.GetTypeName(obj), "obj"); - } - - /** - * Return an ASN1 sequence from a tagged object. There is a special - * case here, if an object appears to have been explicitly tagged on - * reading but we were expecting it to be implicitly tagged in the - * normal course of events it indicates that we lost the surrounding - * sequence - so we need to add it back (this will happen if the tagged - * object is a sequence that contains other sequences). If you are - * dealing with implicitly tagged sequences you really should - * be using this method. - * - * @param obj the tagged object. - * @param explicitly true if the object is meant to be explicitly tagged, - * false otherwise. - * @exception ArgumentException if the tagged object cannot - * be converted. - */ - public static Asn1Sequence GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - Asn1Object inner = obj.GetObject(); - - if (explicitly) - { - if (!obj.IsExplicit()) - throw new ArgumentException("object implicit - explicit expected."); - - return (Asn1Sequence) inner; - } - - // - // constructed object which appears to be explicitly tagged - // when it should be implicit means we have to add the - // surrounding sequence. - // - if (obj.IsExplicit()) - { - if (obj is BerTaggedObject) - { - return new BerSequence(inner); - } - - return new DerSequence(inner); - } - - if (inner is Asn1Sequence) - { - return (Asn1Sequence) inner; - } - - throw new ArgumentException("Unknown object in GetInstance: " + Platform.GetTypeName(obj), "obj"); - } - - protected internal Asn1Sequence( - int capacity) - { - seq = Platform.CreateArrayList(capacity); - } - - public virtual IEnumerator GetEnumerator() - { - return seq.GetEnumerator(); - } - - [Obsolete("Use GetEnumerator() instead")] - public IEnumerator GetObjects() - { - return GetEnumerator(); - } - - private class Asn1SequenceParserImpl - : Asn1SequenceParser - { - private readonly Asn1Sequence outer; - private readonly int max; - private int index; - - public Asn1SequenceParserImpl( - Asn1Sequence outer) - { - this.outer = outer; - this.max = outer.Count; - } - - public IAsn1Convertible ReadObject() - { - if (index == max) - return null; - - Asn1Encodable obj = outer[index++]; - - if (obj is Asn1Sequence) - return ((Asn1Sequence)obj).Parser; - - if (obj is Asn1Set) - return ((Asn1Set)obj).Parser; - - // NB: Asn1OctetString implements Asn1OctetStringParser directly -// if (obj is Asn1OctetString) -// return ((Asn1OctetString)obj).Parser; - - return obj; - } - - public Asn1Object ToAsn1Object() - { - return outer; - } - } - - public virtual Asn1SequenceParser Parser - { - get { return new Asn1SequenceParserImpl(this); } - } - - /** - * return the object at the sequence position indicated by index. - * - * @param index the sequence number (starting at zero) of the object - * @return the object at the sequence position indicated by index. - */ - public virtual Asn1Encodable this[int index] - { - get { return (Asn1Encodable) seq[index]; } - } - - [Obsolete("Use 'object[index]' syntax instead")] - public Asn1Encodable GetObjectAt( - int index) - { - return this[index]; - } - - [Obsolete("Use 'Count' property instead")] - public int Size - { - get { return Count; } - } - - public virtual int Count - { - get { return seq.Count; } - } - - protected override int Asn1GetHashCode() - { - int hc = Count; - - foreach (object o in this) - { - hc *= 17; - if (o == null) - { - hc ^= DerNull.Instance.GetHashCode(); - } - else - { - hc ^= o.GetHashCode(); - } - } - - return hc; - } - - protected override bool Asn1Equals( - Asn1Object asn1Object) - { - Asn1Sequence other = asn1Object as Asn1Sequence; - - if (other == null) - return false; - - if (Count != other.Count) - return false; - - IEnumerator s1 = GetEnumerator(); - IEnumerator s2 = other.GetEnumerator(); - - while (s1.MoveNext() && s2.MoveNext()) - { - Asn1Object o1 = GetCurrent(s1).ToAsn1Object(); - Asn1Object o2 = GetCurrent(s2).ToAsn1Object(); - - if (!o1.Equals(o2)) - return false; - } - - return true; - } - - private Asn1Encodable GetCurrent(IEnumerator e) - { - Asn1Encodable encObj = (Asn1Encodable)e.Current; - - // unfortunately null was allowed as a substitute for DER null - if (encObj == null) - return DerNull.Instance; - - return encObj; - } - - protected internal void AddObject( - Asn1Encodable obj) - { - seq.Add(obj); - } - - public override string ToString() - { - return CollectionUtilities.ToString(seq); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/Asn1Set.cs b/bc-sharp-crypto/src/asn1/Asn1Set.cs deleted file mode 100644 index bf83dbd..0000000 --- a/bc-sharp-crypto/src/asn1/Asn1Set.cs +++ /dev/null @@ -1,372 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -#if PORTABLE -using System.Collections.Generic; -using System.Linq; -#endif - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Asn1 -{ - abstract public class Asn1Set - : Asn1Object, IEnumerable - { - private readonly IList _set; - - /** - * return an ASN1Set from the given object. - * - * @param obj the object we want converted. - * @exception ArgumentException if the object cannot be converted. - */ - public static Asn1Set GetInstance( - object obj) - { - if (obj == null || obj is Asn1Set) - { - return (Asn1Set)obj; - } - else if (obj is Asn1SetParser) - { - return Asn1Set.GetInstance(((Asn1SetParser)obj).ToAsn1Object()); - } - else if (obj is byte[]) - { - try - { - return Asn1Set.GetInstance(FromByteArray((byte[])obj)); - } - catch (IOException e) - { - throw new ArgumentException("failed to construct set from byte[]: " + e.Message); - } - } - else if (obj is Asn1Encodable) - { - Asn1Object primitive = ((Asn1Encodable)obj).ToAsn1Object(); - - if (primitive is Asn1Set) - { - return (Asn1Set)primitive; - } - } - - throw new ArgumentException("Unknown object in GetInstance: " + Platform.GetTypeName(obj), "obj"); - } - - /** - * Return an ASN1 set from a tagged object. There is a special - * case here, if an object appears to have been explicitly tagged on - * reading but we were expecting it to be implicitly tagged in the - * normal course of events it indicates that we lost the surrounding - * set - so we need to add it back (this will happen if the tagged - * object is a sequence that contains other sequences). If you are - * dealing with implicitly tagged sets you really should - * be using this method. - * - * @param obj the tagged object. - * @param explicitly true if the object is meant to be explicitly tagged - * false otherwise. - * @exception ArgumentException if the tagged object cannot - * be converted. - */ - public static Asn1Set GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - Asn1Object inner = obj.GetObject(); - - if (explicitly) - { - if (!obj.IsExplicit()) - throw new ArgumentException("object implicit - explicit expected."); - - return (Asn1Set) inner; - } - - // - // constructed object which appears to be explicitly tagged - // and it's really implicit means we have to add the - // surrounding sequence. - // - if (obj.IsExplicit()) - { - return new DerSet(inner); - } - - if (inner is Asn1Set) - { - return (Asn1Set) inner; - } - - // - // in this case the parser returns a sequence, convert it - // into a set. - // - if (inner is Asn1Sequence) - { - Asn1EncodableVector v = new Asn1EncodableVector(); - Asn1Sequence s = (Asn1Sequence) inner; - - foreach (Asn1Encodable ae in s) - { - v.Add(ae); - } - - // TODO Should be able to construct set directly from sequence? - return new DerSet(v, false); - } - - throw new ArgumentException("Unknown object in GetInstance: " + Platform.GetTypeName(obj), "obj"); - } - - protected internal Asn1Set( - int capacity) - { - _set = Platform.CreateArrayList(capacity); - } - - public virtual IEnumerator GetEnumerator() - { - return _set.GetEnumerator(); - } - - [Obsolete("Use GetEnumerator() instead")] - public IEnumerator GetObjects() - { - return GetEnumerator(); - } - - /** - * return the object at the set position indicated by index. - * - * @param index the set number (starting at zero) of the object - * @return the object at the set position indicated by index. - */ - public virtual Asn1Encodable this[int index] - { - get { return (Asn1Encodable) _set[index]; } - } - - [Obsolete("Use 'object[index]' syntax instead")] - public Asn1Encodable GetObjectAt( - int index) - { - return this[index]; - } - - [Obsolete("Use 'Count' property instead")] - public int Size - { - get { return Count; } - } - - public virtual int Count - { - get { return _set.Count; } - } - - public virtual Asn1Encodable[] ToArray() - { - Asn1Encodable[] values = new Asn1Encodable[this.Count]; - for (int i = 0; i < this.Count; ++i) - { - values[i] = this[i]; - } - return values; - } - - private class Asn1SetParserImpl - : Asn1SetParser - { - private readonly Asn1Set outer; - private readonly int max; - private int index; - - public Asn1SetParserImpl( - Asn1Set outer) - { - this.outer = outer; - this.max = outer.Count; - } - - public IAsn1Convertible ReadObject() - { - if (index == max) - return null; - - Asn1Encodable obj = outer[index++]; - if (obj is Asn1Sequence) - return ((Asn1Sequence)obj).Parser; - - if (obj is Asn1Set) - return ((Asn1Set)obj).Parser; - - // NB: Asn1OctetString implements Asn1OctetStringParser directly -// if (obj is Asn1OctetString) -// return ((Asn1OctetString)obj).Parser; - - return obj; - } - - public virtual Asn1Object ToAsn1Object() - { - return outer; - } - } - - public Asn1SetParser Parser - { - get { return new Asn1SetParserImpl(this); } - } - - protected override int Asn1GetHashCode() - { - int hc = Count; - - foreach (object o in this) - { - hc *= 17; - if (o == null) - { - hc ^= DerNull.Instance.GetHashCode(); - } - else - { - hc ^= o.GetHashCode(); - } - } - - return hc; - } - - protected override bool Asn1Equals( - Asn1Object asn1Object) - { - Asn1Set other = asn1Object as Asn1Set; - - if (other == null) - return false; - - if (Count != other.Count) - { - return false; - } - - IEnumerator s1 = GetEnumerator(); - IEnumerator s2 = other.GetEnumerator(); - - while (s1.MoveNext() && s2.MoveNext()) - { - Asn1Object o1 = GetCurrent(s1).ToAsn1Object(); - Asn1Object o2 = GetCurrent(s2).ToAsn1Object(); - - if (!o1.Equals(o2)) - return false; - } - - return true; - } - - private Asn1Encodable GetCurrent(IEnumerator e) - { - Asn1Encodable encObj = (Asn1Encodable)e.Current; - - // unfortunately null was allowed as a substitute for DER null - if (encObj == null) - return DerNull.Instance; - - return encObj; - } - - protected internal void Sort() - { - if (_set.Count < 2) - return; - -#if PORTABLE - var sorted = _set.Cast() - .Select(a => new { Item = a, Key = a.GetEncoded(Asn1Encodable.Der) }) - .OrderBy(t => t.Key, new DerComparer()) - .Select(t => t.Item) - .ToList(); - - for (int i = 0; i < _set.Count; ++i) - { - _set[i] = sorted[i]; - } -#else - Asn1Encodable[] items = new Asn1Encodable[_set.Count]; - byte[][] keys = new byte[_set.Count][]; - - for (int i = 0; i < _set.Count; ++i) - { - Asn1Encodable item = (Asn1Encodable)_set[i]; - items[i] = item; - keys[i] = item.GetEncoded(Asn1Encodable.Der); - } - - Array.Sort(keys, items, new DerComparer()); - - for (int i = 0; i < _set.Count; ++i) - { - _set[i] = items[i]; - } -#endif - } - - protected internal void AddObject(Asn1Encodable obj) - { - _set.Add(obj); - } - - public override string ToString() - { - return CollectionUtilities.ToString(_set); - } - -#if PORTABLE - private class DerComparer - : IComparer - { - public int Compare(byte[] x, byte[] y) - { - byte[] a = x, b = y; -#else - private class DerComparer - : IComparer - { - public int Compare(object x, object y) - { - byte[] a = (byte[])x, b = (byte[])y; -#endif - int len = System.Math.Min(a.Length, b.Length); - for (int i = 0; i != len; ++i) - { - byte ai = a[i], bi = b[i]; - if (ai != bi) - return ai < bi ? -1 : 1; - } - if (a.Length > b.Length) - return AllZeroesFrom(a, len) ? 0 : 1; - if (a.Length < b.Length) - return AllZeroesFrom(b, len) ? 0 : -1; - return 0; - } - - private bool AllZeroesFrom(byte[] bs, int pos) - { - while (pos < bs.Length) - { - if (bs[pos++] != 0) - return false; - } - return true; - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/Asn1TaggedObject.cs b/bc-sharp-crypto/src/asn1/Asn1TaggedObject.cs deleted file mode 100644 index a6d4b2c..0000000 --- a/bc-sharp-crypto/src/asn1/Asn1TaggedObject.cs +++ /dev/null @@ -1,188 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1 -{ - /** - * ASN.1 TaggedObject - in ASN.1 notation this is any object preceded by - * a [n] where n is some number - these are assumed to follow the construction - * rules (as with sequences). - */ - public abstract class Asn1TaggedObject - : Asn1Object, Asn1TaggedObjectParser - { - internal static bool IsConstructed(bool isExplicit, Asn1Object obj) - { - if (isExplicit || obj is Asn1Sequence || obj is Asn1Set) - return true; - Asn1TaggedObject tagged = obj as Asn1TaggedObject; - if (tagged == null) - return false; - return IsConstructed(tagged.IsExplicit(), tagged.GetObject()); - } - - internal int tagNo; -// internal bool empty; - internal bool explicitly = true; - internal Asn1Encodable obj; - - static public Asn1TaggedObject GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - if (explicitly) - { - return (Asn1TaggedObject) obj.GetObject(); - } - - throw new ArgumentException("implicitly tagged tagged object"); - } - - static public Asn1TaggedObject GetInstance( - object obj) - { - if (obj == null || obj is Asn1TaggedObject) - { - return (Asn1TaggedObject) obj; - } - - throw new ArgumentException("Unknown object in GetInstance: " + Platform.GetTypeName(obj), "obj"); - } - - /** - * @param tagNo the tag number for this object. - * @param obj the tagged object. - */ - protected Asn1TaggedObject( - int tagNo, - Asn1Encodable obj) - { - this.explicitly = true; - this.tagNo = tagNo; - this.obj = obj; - } - - /** - * @param explicitly true if the object is explicitly tagged. - * @param tagNo the tag number for this object. - * @param obj the tagged object. - */ - protected Asn1TaggedObject( - bool explicitly, - int tagNo, - Asn1Encodable obj) - { - // IAsn1Choice marker interface 'insists' on explicit tagging - this.explicitly = explicitly || (obj is IAsn1Choice); - this.tagNo = tagNo; - this.obj = obj; - } - - protected override bool Asn1Equals( - Asn1Object asn1Object) - { - Asn1TaggedObject other = asn1Object as Asn1TaggedObject; - - if (other == null) - return false; - - return this.tagNo == other.tagNo -// && this.empty == other.empty - && this.explicitly == other.explicitly // TODO Should this be part of equality? - && Platform.Equals(GetObject(), other.GetObject()); - } - - protected override int Asn1GetHashCode() - { - int code = tagNo.GetHashCode(); - - // TODO: actually this is wrong - the problem is that a re-encoded - // object may end up with a different hashCode due to implicit - // tagging. As implicit tagging is ambiguous if a sequence is involved - // it seems the only correct method for both equals and hashCode is to - // compare the encodings... -// code ^= explicitly.GetHashCode(); - - if (obj != null) - { - code ^= obj.GetHashCode(); - } - - return code; - } - - public int TagNo - { - get { return tagNo; } - } - - /** - * return whether or not the object may be explicitly tagged. - *

- * Note: if the object has been read from an input stream, the only - * time you can be sure if isExplicit is returning the true state of - * affairs is if it returns false. An implicitly tagged object may appear - * to be explicitly tagged, so you need to understand the context under - * which the reading was done as well, see GetObject below.

- */ - public bool IsExplicit() - { - return explicitly; - } - - public bool IsEmpty() - { - return false; //empty; - } - - /** - * return whatever was following the tag. - *

- * Note: tagged objects are generally context dependent if you're - * trying to extract a tagged object you should be going via the - * appropriate GetInstance method.

- */ - public Asn1Object GetObject() - { - if (obj != null) - { - return obj.ToAsn1Object(); - } - - return null; - } - - /** - * Return the object held in this tagged object as a parser assuming it has - * the type of the passed in tag. If the object doesn't have a parser - * associated with it, the base object is returned. - */ - public IAsn1Convertible GetObjectParser( - int tag, - bool isExplicit) - { - switch (tag) - { - case Asn1Tags.Set: - return Asn1Set.GetInstance(this, isExplicit).Parser; - case Asn1Tags.Sequence: - return Asn1Sequence.GetInstance(this, isExplicit).Parser; - case Asn1Tags.OctetString: - return Asn1OctetString.GetInstance(this, isExplicit).Parser; - } - - if (isExplicit) - { - return GetObject(); - } - - throw Platform.CreateNotImplementedException("implicit tagging for tag: " + tag); - } - - public override string ToString() - { - return "[" + tagNo + "]" + obj; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/Asn1Tags.cs b/bc-sharp-crypto/src/asn1/Asn1Tags.cs deleted file mode 100644 index 32ac6bc..0000000 --- a/bc-sharp-crypto/src/asn1/Asn1Tags.cs +++ /dev/null @@ -1,36 +0,0 @@ -namespace Org.BouncyCastle.Asn1 -{ - public class Asn1Tags - { - public const int Boolean = 0x01; - public const int Integer = 0x02; - public const int BitString = 0x03; - public const int OctetString = 0x04; - public const int Null = 0x05; - public const int ObjectIdentifier = 0x06; - public const int External = 0x08; - public const int Enumerated = 0x0a; - public const int Sequence = 0x10; - public const int SequenceOf = 0x10; // for completeness - public const int Set = 0x11; - public const int SetOf = 0x11; // for completeness - - public const int NumericString = 0x12; - public const int PrintableString = 0x13; - public const int T61String = 0x14; - public const int VideotexString = 0x15; - public const int IA5String = 0x16; - public const int UtcTime = 0x17; - public const int GeneralizedTime = 0x18; - public const int GraphicString = 0x19; - public const int VisibleString = 0x1a; - public const int GeneralString = 0x1b; - public const int UniversalString = 0x1c; - public const int BmpString = 0x1e; - public const int Utf8String = 0x0c; - - public const int Constructed = 0x20; - public const int Application = 0x40; - public const int Tagged = 0x80; - } -} diff --git a/bc-sharp-crypto/src/asn1/BERBitString.cs b/bc-sharp-crypto/src/asn1/BERBitString.cs deleted file mode 100644 index d8cd003..0000000 --- a/bc-sharp-crypto/src/asn1/BERBitString.cs +++ /dev/null @@ -1,43 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1 -{ - public class BerBitString - : DerBitString - { - public BerBitString(byte[] data, int padBits) - : base(data, padBits) - { - } - - public BerBitString(byte[] data) - : base(data) - { - } - - public BerBitString(int namedBits) - : base(namedBits) - { - } - - public BerBitString(Asn1Encodable obj) - : base(obj) - { - } - - internal override void Encode( - DerOutputStream derOut) - { - if (derOut is Asn1OutputStream || derOut is BerOutputStream) - { - derOut.WriteEncoded(Asn1Tags.BitString, (byte)mPadBits, mData); - } - else - { - base.Encode(derOut); - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/BERGenerator.cs b/bc-sharp-crypto/src/asn1/BERGenerator.cs deleted file mode 100644 index 271572c..0000000 --- a/bc-sharp-crypto/src/asn1/BERGenerator.cs +++ /dev/null @@ -1,102 +0,0 @@ -using System.IO; - -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Asn1 -{ - public class BerGenerator - : Asn1Generator - { - private bool _tagged = false; - private bool _isExplicit; - private int _tagNo; - - protected BerGenerator( - Stream outStream) - : base(outStream) - { - } - - public BerGenerator( - Stream outStream, - int tagNo, - bool isExplicit) - : base(outStream) - { - _tagged = true; - _isExplicit = isExplicit; - _tagNo = tagNo; - } - - public override void AddObject( - Asn1Encodable obj) - { - new BerOutputStream(Out).WriteObject(obj); - } - - public override Stream GetRawOutputStream() - { - return Out; - } - - public override void Close() - { - WriteBerEnd(); - } - - private void WriteHdr( - int tag) - { - Out.WriteByte((byte) tag); - Out.WriteByte(0x80); - } - - protected void WriteBerHeader( - int tag) - { - if (_tagged) - { - int tagNum = _tagNo | Asn1Tags.Tagged; - - if (_isExplicit) - { - WriteHdr(tagNum | Asn1Tags.Constructed); - WriteHdr(tag); - } - else - { - if ((tag & Asn1Tags.Constructed) != 0) - { - WriteHdr(tagNum | Asn1Tags.Constructed); - } - else - { - WriteHdr(tagNum); - } - } - } - else - { - WriteHdr(tag); - } - } - - protected void WriteBerBody( - Stream contentStream) - { - Streams.PipeAll(contentStream, Out); - } - - protected void WriteBerEnd() - { - Out.WriteByte(0x00); - Out.WriteByte(0x00); - - if (_tagged && _isExplicit) // write extra end for tag header - { - Out.WriteByte(0x00); - Out.WriteByte(0x00); - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/BEROctetStringGenerator.cs b/bc-sharp-crypto/src/asn1/BEROctetStringGenerator.cs deleted file mode 100644 index f34538f..0000000 --- a/bc-sharp-crypto/src/asn1/BEROctetStringGenerator.cs +++ /dev/null @@ -1,133 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Asn1 -{ - public class BerOctetStringGenerator - : BerGenerator - { - public BerOctetStringGenerator(Stream outStream) - : base(outStream) - { - WriteBerHeader(Asn1Tags.Constructed | Asn1Tags.OctetString); - } - - public BerOctetStringGenerator( - Stream outStream, - int tagNo, - bool isExplicit) - : base(outStream, tagNo, isExplicit) - { - WriteBerHeader(Asn1Tags.Constructed | Asn1Tags.OctetString); - } - - public Stream GetOctetOutputStream() - { - return GetOctetOutputStream(new byte[1000]); // limit for CER encoding. - } - - public Stream GetOctetOutputStream( - int bufSize) - { - return bufSize < 1 - ? GetOctetOutputStream() - : GetOctetOutputStream(new byte[bufSize]); - } - - public Stream GetOctetOutputStream( - byte[] buf) - { - return new BufferedBerOctetStream(this, buf); - } - - private class BufferedBerOctetStream - : BaseOutputStream - { - private byte[] _buf; - private int _off; - private readonly BerOctetStringGenerator _gen; - private readonly DerOutputStream _derOut; - - internal BufferedBerOctetStream( - BerOctetStringGenerator gen, - byte[] buf) - { - _gen = gen; - _buf = buf; - _off = 0; - _derOut = new DerOutputStream(_gen.Out); - } - - public override void WriteByte( - byte b) - { - _buf[_off++] = b; - - if (_off == _buf.Length) - { - DerOctetString.Encode(_derOut, _buf, 0, _off); - _off = 0; - } - } - - public override void Write( - byte[] buf, - int offset, - int len) - { - while (len > 0) - { - int numToCopy = System.Math.Min(len, _buf.Length - _off); - - if (numToCopy == _buf.Length) - { - DerOctetString.Encode(_derOut, buf, offset, numToCopy); - } - else - { - Array.Copy(buf, offset, _buf, _off, numToCopy); - - _off += numToCopy; - if (_off < _buf.Length) - break; - - DerOctetString.Encode(_derOut, _buf, 0, _off); - _off = 0; - } - - offset += numToCopy; - len -= numToCopy; - } - } - -#if PORTABLE - protected override void Dispose(bool disposing) - { - if (disposing) - { - if (_off != 0) - { - DerOctetString.Encode(_derOut, _buf, 0, _off); - } - - _gen.WriteBerEnd(); - } - base.Dispose(disposing); - } -#else - public override void Close() - { - if (_off != 0) - { - DerOctetString.Encode(_derOut, _buf, 0, _off); - } - - _gen.WriteBerEnd(); - base.Close(); - } -#endif - } - } -} diff --git a/bc-sharp-crypto/src/asn1/BEROctetStringParser.cs b/bc-sharp-crypto/src/asn1/BEROctetStringParser.cs deleted file mode 100644 index 3bfd2a9..0000000 --- a/bc-sharp-crypto/src/asn1/BEROctetStringParser.cs +++ /dev/null @@ -1,36 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Asn1 -{ - public class BerOctetStringParser - : Asn1OctetStringParser - { - private readonly Asn1StreamParser _parser; - - internal BerOctetStringParser( - Asn1StreamParser parser) - { - _parser = parser; - } - - public Stream GetOctetStream() - { - return new ConstructedOctetStream(_parser); - } - - public Asn1Object ToAsn1Object() - { - try - { - return new BerOctetString(Streams.ReadAll(GetOctetStream())); - } - catch (IOException e) - { - throw new Asn1ParsingException("IOException converting stream to byte array: " + e.Message, e); - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/BERSequenceGenerator.cs b/bc-sharp-crypto/src/asn1/BERSequenceGenerator.cs deleted file mode 100644 index 5ea2c9b..0000000 --- a/bc-sharp-crypto/src/asn1/BERSequenceGenerator.cs +++ /dev/null @@ -1,24 +0,0 @@ -using System.IO; - -namespace Org.BouncyCastle.Asn1 -{ - public class BerSequenceGenerator - : BerGenerator - { - public BerSequenceGenerator( - Stream outStream) - : base(outStream) - { - WriteBerHeader(Asn1Tags.Constructed | Asn1Tags.Sequence); - } - - public BerSequenceGenerator( - Stream outStream, - int tagNo, - bool isExplicit) - : base(outStream, tagNo, isExplicit) - { - WriteBerHeader(Asn1Tags.Constructed | Asn1Tags.Sequence); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/BERSequenceParser.cs b/bc-sharp-crypto/src/asn1/BERSequenceParser.cs deleted file mode 100644 index 8474b8d..0000000 --- a/bc-sharp-crypto/src/asn1/BERSequenceParser.cs +++ /dev/null @@ -1,24 +0,0 @@ -namespace Org.BouncyCastle.Asn1 -{ - public class BerSequenceParser - : Asn1SequenceParser - { - private readonly Asn1StreamParser _parser; - - internal BerSequenceParser( - Asn1StreamParser parser) - { - this._parser = parser; - } - - public IAsn1Convertible ReadObject() - { - return _parser.ReadObject(); - } - - public Asn1Object ToAsn1Object() - { - return new BerSequence(_parser.ReadVector()); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/BERSetGenerator.cs b/bc-sharp-crypto/src/asn1/BERSetGenerator.cs deleted file mode 100644 index 72b1f90..0000000 --- a/bc-sharp-crypto/src/asn1/BERSetGenerator.cs +++ /dev/null @@ -1,24 +0,0 @@ -using System.IO; - -namespace Org.BouncyCastle.Asn1 -{ - public class BerSetGenerator - : BerGenerator - { - public BerSetGenerator( - Stream outStream) - : base(outStream) - { - WriteBerHeader(Asn1Tags.Constructed | Asn1Tags.Set); - } - - public BerSetGenerator( - Stream outStream, - int tagNo, - bool isExplicit) - : base(outStream, tagNo, isExplicit) - { - WriteBerHeader(Asn1Tags.Constructed | Asn1Tags.Set); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/BERSetParser.cs b/bc-sharp-crypto/src/asn1/BERSetParser.cs deleted file mode 100644 index aa9ccbc..0000000 --- a/bc-sharp-crypto/src/asn1/BERSetParser.cs +++ /dev/null @@ -1,24 +0,0 @@ -namespace Org.BouncyCastle.Asn1 -{ - public class BerSetParser - : Asn1SetParser - { - private readonly Asn1StreamParser _parser; - - internal BerSetParser( - Asn1StreamParser parser) - { - this._parser = parser; - } - - public IAsn1Convertible ReadObject() - { - return _parser.ReadObject(); - } - - public Asn1Object ToAsn1Object() - { - return new BerSet(_parser.ReadVector(), false); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/BERTaggedObjectParser.cs b/bc-sharp-crypto/src/asn1/BERTaggedObjectParser.cs deleted file mode 100644 index 354437a..0000000 --- a/bc-sharp-crypto/src/asn1/BERTaggedObjectParser.cs +++ /dev/null @@ -1,71 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1 -{ - public class BerTaggedObjectParser - : Asn1TaggedObjectParser - { - private bool _constructed; - private int _tagNumber; - private Asn1StreamParser _parser; - - [Obsolete] - internal BerTaggedObjectParser( - int baseTag, - int tagNumber, - Stream contentStream) - : this((baseTag & Asn1Tags.Constructed) != 0, tagNumber, new Asn1StreamParser(contentStream)) - { - } - - internal BerTaggedObjectParser( - bool constructed, - int tagNumber, - Asn1StreamParser parser) - { - _constructed = constructed; - _tagNumber = tagNumber; - _parser = parser; - } - - public bool IsConstructed - { - get { return _constructed; } - } - - public int TagNo - { - get { return _tagNumber; } - } - - public IAsn1Convertible GetObjectParser( - int tag, - bool isExplicit) - { - if (isExplicit) - { - if (!_constructed) - throw new IOException("Explicit tags must be constructed (see X.690 8.14.2)"); - - return _parser.ReadObject(); - } - - return _parser.ReadImplicit(_constructed, tag); - } - - public Asn1Object ToAsn1Object() - { - try - { - return _parser.ReadTaggedObject(_constructed, _tagNumber); - } - catch (IOException e) - { - throw new Asn1ParsingException(e.Message); - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/BerApplicationSpecific.cs b/bc-sharp-crypto/src/asn1/BerApplicationSpecific.cs deleted file mode 100644 index 65fbecb..0000000 --- a/bc-sharp-crypto/src/asn1/BerApplicationSpecific.cs +++ /dev/null @@ -1,15 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1 -{ - public class BerApplicationSpecific - : DerApplicationSpecific - { - public BerApplicationSpecific( - int tagNo, - Asn1EncodableVector vec) - : base(tagNo, vec) - { - } - } -} diff --git a/bc-sharp-crypto/src/asn1/BerApplicationSpecificParser.cs b/bc-sharp-crypto/src/asn1/BerApplicationSpecificParser.cs deleted file mode 100644 index 7d2c4b3..0000000 --- a/bc-sharp-crypto/src/asn1/BerApplicationSpecificParser.cs +++ /dev/null @@ -1,29 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1 -{ - public class BerApplicationSpecificParser - : IAsn1ApplicationSpecificParser - { - private readonly int tag; - private readonly Asn1StreamParser parser; - - internal BerApplicationSpecificParser( - int tag, - Asn1StreamParser parser) - { - this.tag = tag; - this.parser = parser; - } - - public IAsn1Convertible ReadObject() - { - return parser.ReadObject(); - } - - public Asn1Object ToAsn1Object() - { - return new BerApplicationSpecific(tag, parser.ReadVector()); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/BerNull.cs b/bc-sharp-crypto/src/asn1/BerNull.cs deleted file mode 100644 index 0751bba..0000000 --- a/bc-sharp-crypto/src/asn1/BerNull.cs +++ /dev/null @@ -1,35 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1 -{ - /** - * A BER Null object. - */ - public class BerNull - : DerNull - { - public static new readonly BerNull Instance = new BerNull(0); - - [Obsolete("Use static Instance object")] - public BerNull() - { - } - - private BerNull(int dummy) : base(dummy) - { - } - - internal override void Encode( - DerOutputStream derOut) - { - if (derOut is Asn1OutputStream || derOut is BerOutputStream) - { - derOut.WriteByte(Asn1Tags.Null); - } - else - { - base.Encode(derOut); - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/BerOctetString.cs b/bc-sharp-crypto/src/asn1/BerOctetString.cs deleted file mode 100644 index a7c8ad3..0000000 --- a/bc-sharp-crypto/src/asn1/BerOctetString.cs +++ /dev/null @@ -1,135 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1 -{ - public class BerOctetString - : DerOctetString, IEnumerable - { - public static BerOctetString FromSequence(Asn1Sequence seq) - { - IList v = Platform.CreateArrayList(); - - foreach (Asn1Encodable obj in seq) - { - v.Add(obj); - } - - return new BerOctetString(v); - } - - private const int MaxLength = 1000; - - /** - * convert a vector of octet strings into a single byte string - */ - private static byte[] ToBytes( - IEnumerable octs) - { - MemoryStream bOut = new MemoryStream(); - foreach (DerOctetString o in octs) - { - byte[] octets = o.GetOctets(); - bOut.Write(octets, 0, octets.Length); - } - return bOut.ToArray(); - } - - private readonly IEnumerable octs; - - /// The octets making up the octet string. - public BerOctetString( - byte[] str) - : base(str) - { - } - - public BerOctetString( - IEnumerable octets) - : base(ToBytes(octets)) - { - this.octs = octets; - } - - public BerOctetString( - Asn1Object obj) - : base(obj) - { - } - - public BerOctetString( - Asn1Encodable obj) - : base(obj.ToAsn1Object()) - { - } - - public override byte[] GetOctets() - { - return str; - } - - /** - * return the DER octets that make up this string. - */ - public IEnumerator GetEnumerator() - { - if (octs == null) - { - return GenerateOcts().GetEnumerator(); - } - - return octs.GetEnumerator(); - } - - [Obsolete("Use GetEnumerator() instead")] - public IEnumerator GetObjects() - { - return GetEnumerator(); - } - - private IList GenerateOcts() - { - IList vec = Platform.CreateArrayList(); - for (int i = 0; i < str.Length; i += MaxLength) - { - int end = System.Math.Min(str.Length, i + MaxLength); - - byte[] nStr = new byte[end - i]; - - Array.Copy(str, i, nStr, 0, nStr.Length); - - vec.Add(new DerOctetString(nStr)); - } - return vec; - } - - internal override void Encode( - DerOutputStream derOut) - { - if (derOut is Asn1OutputStream || derOut is BerOutputStream) - { - derOut.WriteByte(Asn1Tags.Constructed | Asn1Tags.OctetString); - - derOut.WriteByte(0x80); - - // - // write out the octet array - // - foreach (DerOctetString oct in this) - { - derOut.WriteObject(oct); - } - - derOut.WriteByte(0x00); - derOut.WriteByte(0x00); - } - else - { - base.Encode(derOut); - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/BerOutputStream.cs b/bc-sharp-crypto/src/asn1/BerOutputStream.cs deleted file mode 100644 index b3ece10..0000000 --- a/bc-sharp-crypto/src/asn1/BerOutputStream.cs +++ /dev/null @@ -1,36 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Asn1 -{ - // TODO Make Obsolete in favour of Asn1OutputStream? - public class BerOutputStream - : DerOutputStream - { - public BerOutputStream(Stream os) : base(os) - { - } - - [Obsolete("Use version taking an Asn1Encodable arg instead")] - public override void WriteObject( - object obj) - { - if (obj == null) - { - WriteNull(); - } - else if (obj is Asn1Object) - { - ((Asn1Object)obj).Encode(this); - } - else if (obj is Asn1Encodable) - { - ((Asn1Encodable)obj).ToAsn1Object().Encode(this); - } - else - { - throw new IOException("object not BerEncodable"); - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/BerSequence.cs b/bc-sharp-crypto/src/asn1/BerSequence.cs deleted file mode 100644 index 70b43fc..0000000 --- a/bc-sharp-crypto/src/asn1/BerSequence.cs +++ /dev/null @@ -1,69 +0,0 @@ -namespace Org.BouncyCastle.Asn1 -{ - public class BerSequence - : DerSequence - { - public static new readonly BerSequence Empty = new BerSequence(); - - public static new BerSequence FromVector( - Asn1EncodableVector v) - { - return v.Count < 1 ? Empty : new BerSequence(v); - } - - /** - * create an empty sequence - */ - public BerSequence() - { - } - - /** - * create a sequence containing one object - */ - public BerSequence( - Asn1Encodable obj) - : base(obj) - { - } - - public BerSequence( - params Asn1Encodable[] v) - : base(v) - { - } - - /** - * create a sequence containing a vector of objects. - */ - public BerSequence( - Asn1EncodableVector v) - : base(v) - { - } - - /* - */ - internal override void Encode( - DerOutputStream derOut) - { - if (derOut is Asn1OutputStream || derOut is BerOutputStream) - { - derOut.WriteByte(Asn1Tags.Sequence | Asn1Tags.Constructed); - derOut.WriteByte(0x80); - - foreach (Asn1Encodable o in this) - { - derOut.WriteObject(o); - } - - derOut.WriteByte(0x00); - derOut.WriteByte(0x00); - } - else - { - base.Encode(derOut); - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/BerSet.cs b/bc-sharp-crypto/src/asn1/BerSet.cs deleted file mode 100644 index a181e17..0000000 --- a/bc-sharp-crypto/src/asn1/BerSet.cs +++ /dev/null @@ -1,70 +0,0 @@ -namespace Org.BouncyCastle.Asn1 -{ - public class BerSet - : DerSet - { - public static new readonly BerSet Empty = new BerSet(); - - public static new BerSet FromVector( - Asn1EncodableVector v) - { - return v.Count < 1 ? Empty : new BerSet(v); - } - - internal static new BerSet FromVector( - Asn1EncodableVector v, - bool needsSorting) - { - return v.Count < 1 ? Empty : new BerSet(v, needsSorting); - } - - /** - * create an empty sequence - */ - public BerSet() - { - } - - /** - * create a set containing one object - */ - public BerSet(Asn1Encodable obj) : base(obj) - { - } - - /** - * create a set containing a vector of objects. - */ - public BerSet(Asn1EncodableVector v) : base(v, false) - { - } - - internal BerSet(Asn1EncodableVector v, bool needsSorting) : base(v, needsSorting) - { - } - - /* - */ - internal override void Encode( - DerOutputStream derOut) - { - if (derOut is Asn1OutputStream || derOut is BerOutputStream) - { - derOut.WriteByte(Asn1Tags.Set | Asn1Tags.Constructed); - derOut.WriteByte(0x80); - - foreach (Asn1Encodable o in this) - { - derOut.WriteObject(o); - } - - derOut.WriteByte(0x00); - derOut.WriteByte(0x00); - } - else - { - base.Encode(derOut); - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/BerTaggedObject.cs b/bc-sharp-crypto/src/asn1/BerTaggedObject.cs deleted file mode 100644 index fd0bdc2..0000000 --- a/bc-sharp-crypto/src/asn1/BerTaggedObject.cs +++ /dev/null @@ -1,108 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1 -{ - /** - * BER TaggedObject - in ASN.1 notation this is any object preceded by - * a [n] where n is some number - these are assumed to follow the construction - * rules (as with sequences). - */ - public class BerTaggedObject - : DerTaggedObject - { - /** - * @param tagNo the tag number for this object. - * @param obj the tagged object. - */ - public BerTaggedObject( - int tagNo, - Asn1Encodable obj) - : base(tagNo, obj) - { - } - - /** - * @param explicitly true if an explicitly tagged object. - * @param tagNo the tag number for this object. - * @param obj the tagged object. - */ - public BerTaggedObject( - bool explicitly, - int tagNo, - Asn1Encodable obj) - : base(explicitly, tagNo, obj) - { - } - - /** - * create an implicitly tagged object that contains a zero - * length sequence. - */ - public BerTaggedObject( - int tagNo) - : base(false, tagNo, BerSequence.Empty) - { - } - - internal override void Encode( - DerOutputStream derOut) - { - if (derOut is Asn1OutputStream || derOut is BerOutputStream) - { - derOut.WriteTag((byte)(Asn1Tags.Constructed | Asn1Tags.Tagged), tagNo); - derOut.WriteByte(0x80); - - if (!IsEmpty()) - { - if (!explicitly) - { - IEnumerable eObj; - if (obj is Asn1OctetString) - { - if (obj is BerOctetString) - { - eObj = (BerOctetString) obj; - } - else - { - Asn1OctetString octs = (Asn1OctetString)obj; - eObj = new BerOctetString(octs.GetOctets()); - } - } - else if (obj is Asn1Sequence) - { - eObj = (Asn1Sequence) obj; - } - else if (obj is Asn1Set) - { - eObj = (Asn1Set) obj; - } - else - { - throw Platform.CreateNotImplementedException(Platform.GetTypeName(obj)); - } - - foreach (Asn1Encodable o in eObj) - { - derOut.WriteObject(o); - } - } - else - { - derOut.WriteObject(obj); - } - } - - derOut.WriteByte(0x00); - derOut.WriteByte(0x00); - } - else - { - base.Encode(derOut); - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/ConstructedOctetStream.cs b/bc-sharp-crypto/src/asn1/ConstructedOctetStream.cs deleted file mode 100644 index 1773b22..0000000 --- a/bc-sharp-crypto/src/asn1/ConstructedOctetStream.cs +++ /dev/null @@ -1,102 +0,0 @@ -using System.IO; - -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Asn1 -{ - internal class ConstructedOctetStream - : BaseInputStream - { - private readonly Asn1StreamParser _parser; - - private bool _first = true; - private Stream _currentStream; - - internal ConstructedOctetStream( - Asn1StreamParser parser) - { - _parser = parser; - } - - public override int Read(byte[] buffer, int offset, int count) - { - if (_currentStream == null) - { - if (!_first) - return 0; - - Asn1OctetStringParser s = (Asn1OctetStringParser)_parser.ReadObject(); - - if (s == null) - return 0; - - _first = false; - _currentStream = s.GetOctetStream(); - } - - int totalRead = 0; - - for (;;) - { - int numRead = _currentStream.Read(buffer, offset + totalRead, count - totalRead); - - if (numRead > 0) - { - totalRead += numRead; - - if (totalRead == count) - return totalRead; - } - else - { - Asn1OctetStringParser aos = (Asn1OctetStringParser)_parser.ReadObject(); - - if (aos == null) - { - _currentStream = null; - return totalRead; - } - - _currentStream = aos.GetOctetStream(); - } - } - } - - public override int ReadByte() - { - if (_currentStream == null) - { - if (!_first) - return 0; - - Asn1OctetStringParser s = (Asn1OctetStringParser)_parser.ReadObject(); - - if (s == null) - return 0; - - _first = false; - _currentStream = s.GetOctetStream(); - } - - for (;;) - { - int b = _currentStream.ReadByte(); - - if (b >= 0) - { - return b; - } - - Asn1OctetStringParser aos = (Asn1OctetStringParser)_parser.ReadObject(); - - if (aos == null) - { - _currentStream = null; - return -1; - } - - _currentStream = aos.GetOctetStream(); - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DERExternal.cs b/bc-sharp-crypto/src/asn1/DERExternal.cs deleted file mode 100644 index c299751..0000000 --- a/bc-sharp-crypto/src/asn1/DERExternal.cs +++ /dev/null @@ -1,202 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1 -{ - /** - * Class representing the DER-type External - */ - public class DerExternal - : Asn1Object - { - private DerObjectIdentifier directReference; - private DerInteger indirectReference; - private Asn1Object dataValueDescriptor; - private int encoding; - private Asn1Object externalContent; - - public DerExternal( - Asn1EncodableVector vector) - { - int offset = 0; - Asn1Object enc = GetObjFromVector(vector, offset); - if (enc is DerObjectIdentifier) - { - directReference = (DerObjectIdentifier)enc; - offset++; - enc = GetObjFromVector(vector, offset); - } - if (enc is DerInteger) - { - indirectReference = (DerInteger) enc; - offset++; - enc = GetObjFromVector(vector, offset); - } - if (!(enc is Asn1TaggedObject)) - { - dataValueDescriptor = enc; - offset++; - enc = GetObjFromVector(vector, offset); - } - - if (vector.Count != offset + 1) - throw new ArgumentException("input vector too large", "vector"); - - if (!(enc is Asn1TaggedObject)) - throw new ArgumentException("No tagged object found in vector. Structure doesn't seem to be of type External", "vector"); - - Asn1TaggedObject obj = (Asn1TaggedObject)enc; - - // Use property accessor to include check on value - Encoding = obj.TagNo; - - if (encoding < 0 || encoding > 2) - throw new InvalidOperationException("invalid encoding value"); - - externalContent = obj.GetObject(); - } - - /** - * Creates a new instance of DerExternal - * See X.690 for more informations about the meaning of these parameters - * @param directReference The direct reference or null if not set. - * @param indirectReference The indirect reference or null if not set. - * @param dataValueDescriptor The data value descriptor or null if not set. - * @param externalData The external data in its encoded form. - */ - public DerExternal(DerObjectIdentifier directReference, DerInteger indirectReference, Asn1Object dataValueDescriptor, DerTaggedObject externalData) - : this(directReference, indirectReference, dataValueDescriptor, externalData.TagNo, externalData.ToAsn1Object()) - { - } - - /** - * Creates a new instance of DerExternal. - * See X.690 for more informations about the meaning of these parameters - * @param directReference The direct reference or null if not set. - * @param indirectReference The indirect reference or null if not set. - * @param dataValueDescriptor The data value descriptor or null if not set. - * @param encoding The encoding to be used for the external data - * @param externalData The external data - */ - public DerExternal(DerObjectIdentifier directReference, DerInteger indirectReference, Asn1Object dataValueDescriptor, int encoding, Asn1Object externalData) - { - DirectReference = directReference; - IndirectReference = indirectReference; - DataValueDescriptor = dataValueDescriptor; - Encoding = encoding; - ExternalContent = externalData.ToAsn1Object(); - } - - internal override void Encode(DerOutputStream derOut) - { - MemoryStream ms = new MemoryStream(); - WriteEncodable(ms, directReference); - WriteEncodable(ms, indirectReference); - WriteEncodable(ms, dataValueDescriptor); - WriteEncodable(ms, new DerTaggedObject(Asn1Tags.External, externalContent)); - - derOut.WriteEncoded(Asn1Tags.Constructed, Asn1Tags.External, ms.ToArray()); - } - - protected override int Asn1GetHashCode() - { - int ret = externalContent.GetHashCode(); - if (directReference != null) - { - ret ^= directReference.GetHashCode(); - } - if (indirectReference != null) - { - ret ^= indirectReference.GetHashCode(); - } - if (dataValueDescriptor != null) - { - ret ^= dataValueDescriptor.GetHashCode(); - } - return ret; - } - - protected override bool Asn1Equals( - Asn1Object asn1Object) - { - if (this == asn1Object) - return true; - - DerExternal other = asn1Object as DerExternal; - - if (other == null) - return false; - - return Platform.Equals(directReference, other.directReference) - && Platform.Equals(indirectReference, other.indirectReference) - && Platform.Equals(dataValueDescriptor, other.dataValueDescriptor) - && externalContent.Equals(other.externalContent); - } - - public Asn1Object DataValueDescriptor - { - get { return dataValueDescriptor; } - set { this.dataValueDescriptor = value; } - } - - public DerObjectIdentifier DirectReference - { - get { return directReference; } - set { this.directReference = value; } - } - - /** - * The encoding of the content. Valid values are - *
    - *
  • 0 single-ASN1-type
    • - *
  • 1 OCTET STRING
    • - *
  • 2 BIT STRING
    • - *
- */ - public int Encoding - { - get - { - return encoding; - } - set - { - if (encoding < 0 || encoding > 2) - throw new InvalidOperationException("invalid encoding value: " + encoding); - - this.encoding = value; - } - } - - public Asn1Object ExternalContent - { - get { return externalContent; } - set { this.externalContent = value; } - } - - public DerInteger IndirectReference - { - get { return indirectReference; } - set { this.indirectReference = value; } - } - - private static Asn1Object GetObjFromVector(Asn1EncodableVector v, int index) - { - if (v.Count <= index) - throw new ArgumentException("too few objects in input vector", "v"); - - return v[index].ToAsn1Object(); - } - - private static void WriteEncodable(MemoryStream ms, Asn1Encodable e) - { - if (e != null) - { - byte[] bs = e.GetDerEncoded(); - ms.Write(bs, 0, bs.Length); - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DERExternalParser.cs b/bc-sharp-crypto/src/asn1/DERExternalParser.cs deleted file mode 100644 index 70e426f..0000000 --- a/bc-sharp-crypto/src/asn1/DERExternalParser.cs +++ /dev/null @@ -1,26 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Asn1 -{ - public class DerExternalParser - : Asn1Encodable - { - private readonly Asn1StreamParser _parser; - - public DerExternalParser(Asn1StreamParser parser) - { - this._parser = parser; - } - - public IAsn1Convertible ReadObject() - { - return _parser.ReadObject(); - } - - public override Asn1Object ToAsn1Object() - { - return new DerExternal(_parser.ReadVector()); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DERGenerator.cs b/bc-sharp-crypto/src/asn1/DERGenerator.cs deleted file mode 100644 index aab40fe..0000000 --- a/bc-sharp-crypto/src/asn1/DERGenerator.cs +++ /dev/null @@ -1,107 +0,0 @@ -using System.IO; - -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Asn1 -{ - public abstract class DerGenerator - : Asn1Generator - { - private bool _tagged = false; - private bool _isExplicit; - private int _tagNo; - - protected DerGenerator( - Stream outStream) - : base(outStream) - { - } - - protected DerGenerator( - Stream outStream, - int tagNo, - bool isExplicit) - : base(outStream) - { - _tagged = true; - _isExplicit = isExplicit; - _tagNo = tagNo; - } - - private static void WriteLength( - Stream outStr, - int length) - { - if (length > 127) - { - int size = 1; - int val = length; - - while ((val >>= 8) != 0) - { - size++; - } - - outStr.WriteByte((byte)(size | 0x80)); - - for (int i = (size - 1) * 8; i >= 0; i -= 8) - { - outStr.WriteByte((byte)(length >> i)); - } - } - else - { - outStr.WriteByte((byte)length); - } - } - - internal static void WriteDerEncoded( - Stream outStream, - int tag, - byte[] bytes) - { - outStream.WriteByte((byte) tag); - WriteLength(outStream, bytes.Length); - outStream.Write(bytes, 0, bytes.Length); - } - - internal void WriteDerEncoded( - int tag, - byte[] bytes) - { - if (_tagged) - { - int tagNum = _tagNo | Asn1Tags.Tagged; - - if (_isExplicit) - { - int newTag = _tagNo | Asn1Tags.Constructed | Asn1Tags.Tagged; - MemoryStream bOut = new MemoryStream(); - WriteDerEncoded(bOut, tag, bytes); - WriteDerEncoded(Out, newTag, bOut.ToArray()); - } - else - { - if ((tag & Asn1Tags.Constructed) != 0) - { - tagNum |= Asn1Tags.Constructed; - } - - WriteDerEncoded(Out, tagNum, bytes); - } - } - else - { - WriteDerEncoded(Out, tag, bytes); - } - } - - internal static void WriteDerEncoded( - Stream outStr, - int tag, - Stream inStr) - { - WriteDerEncoded(outStr, tag, Streams.ReadAll(inStr)); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DEROctetStringParser.cs b/bc-sharp-crypto/src/asn1/DEROctetStringParser.cs deleted file mode 100644 index b0d3ad8..0000000 --- a/bc-sharp-crypto/src/asn1/DEROctetStringParser.cs +++ /dev/null @@ -1,36 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Asn1 -{ - public class DerOctetStringParser - : Asn1OctetStringParser - { - private readonly DefiniteLengthInputStream stream; - - internal DerOctetStringParser( - DefiniteLengthInputStream stream) - { - this.stream = stream; - } - - public Stream GetOctetStream() - { - return stream; - } - - public Asn1Object ToAsn1Object() - { - try - { - return new DerOctetString(stream.ToArray()); - } - catch (IOException e) - { - throw new InvalidOperationException("IOException converting stream to byte array: " + e.Message, e); - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DERSequenceGenerator.cs b/bc-sharp-crypto/src/asn1/DERSequenceGenerator.cs deleted file mode 100644 index 4c2bfd0..0000000 --- a/bc-sharp-crypto/src/asn1/DERSequenceGenerator.cs +++ /dev/null @@ -1,40 +0,0 @@ -using System.IO; - -namespace Org.BouncyCastle.Asn1 -{ - public class DerSequenceGenerator - : DerGenerator - { - private readonly MemoryStream _bOut = new MemoryStream(); - - public DerSequenceGenerator( - Stream outStream) - : base(outStream) - { - } - - public DerSequenceGenerator( - Stream outStream, - int tagNo, - bool isExplicit) - : base(outStream, tagNo, isExplicit) - { - } - - public override void AddObject( - Asn1Encodable obj) - { - new DerOutputStream(_bOut).WriteObject(obj); - } - - public override Stream GetRawOutputStream() - { - return _bOut; - } - - public override void Close() - { - WriteDerEncoded(Asn1Tags.Constructed | Asn1Tags.Sequence, _bOut.ToArray()); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DERSequenceParser.cs b/bc-sharp-crypto/src/asn1/DERSequenceParser.cs deleted file mode 100644 index 69c2b9b..0000000 --- a/bc-sharp-crypto/src/asn1/DERSequenceParser.cs +++ /dev/null @@ -1,24 +0,0 @@ -namespace Org.BouncyCastle.Asn1 -{ - public class DerSequenceParser - : Asn1SequenceParser - { - private readonly Asn1StreamParser _parser; - - internal DerSequenceParser( - Asn1StreamParser parser) - { - this._parser = parser; - } - - public IAsn1Convertible ReadObject() - { - return _parser.ReadObject(); - } - - public Asn1Object ToAsn1Object() - { - return new DerSequence(_parser.ReadVector()); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DERSetGenerator.cs b/bc-sharp-crypto/src/asn1/DERSetGenerator.cs deleted file mode 100644 index 455ca88..0000000 --- a/bc-sharp-crypto/src/asn1/DERSetGenerator.cs +++ /dev/null @@ -1,40 +0,0 @@ -using System.IO; - -namespace Org.BouncyCastle.Asn1 -{ - public class DerSetGenerator - : DerGenerator - { - private readonly MemoryStream _bOut = new MemoryStream(); - - public DerSetGenerator( - Stream outStream) - : base(outStream) - { - } - - public DerSetGenerator( - Stream outStream, - int tagNo, - bool isExplicit) - : base(outStream, tagNo, isExplicit) - { - } - - public override void AddObject( - Asn1Encodable obj) - { - new DerOutputStream(_bOut).WriteObject(obj); - } - - public override Stream GetRawOutputStream() - { - return _bOut; - } - - public override void Close() - { - WriteDerEncoded(Asn1Tags.Constructed | Asn1Tags.Set, _bOut.ToArray()); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DERSetParser.cs b/bc-sharp-crypto/src/asn1/DERSetParser.cs deleted file mode 100644 index d67f135..0000000 --- a/bc-sharp-crypto/src/asn1/DERSetParser.cs +++ /dev/null @@ -1,24 +0,0 @@ -namespace Org.BouncyCastle.Asn1 -{ - public class DerSetParser - : Asn1SetParser - { - private readonly Asn1StreamParser _parser; - - internal DerSetParser( - Asn1StreamParser parser) - { - this._parser = parser; - } - - public IAsn1Convertible ReadObject() - { - return _parser.ReadObject(); - } - - public Asn1Object ToAsn1Object() - { - return new DerSet(_parser.ReadVector(), false); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DefiniteLengthInputStream.cs b/bc-sharp-crypto/src/asn1/DefiniteLengthInputStream.cs deleted file mode 100644 index 4ae803c..0000000 --- a/bc-sharp-crypto/src/asn1/DefiniteLengthInputStream.cs +++ /dev/null @@ -1,100 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Asn1 -{ - class DefiniteLengthInputStream - : LimitedInputStream - { - private static readonly byte[] EmptyBytes = new byte[0]; - - private readonly int _originalLength; - private int _remaining; - - internal DefiniteLengthInputStream( - Stream inStream, - int length) - : base(inStream, length) - { - if (length < 0) - throw new ArgumentException("negative lengths not allowed", "length"); - - this._originalLength = length; - this._remaining = length; - - if (length == 0) - { - SetParentEofDetect(true); - } - } - - internal int Remaining - { - get { return _remaining; } - } - - public override int ReadByte() - { - if (_remaining == 0) - return -1; - - int b = _in.ReadByte(); - - if (b < 0) - throw new EndOfStreamException("DEF length " + _originalLength + " object truncated by " + _remaining); - - if (--_remaining == 0) - { - SetParentEofDetect(true); - } - - return b; - } - - public override int Read( - byte[] buf, - int off, - int len) - { - if (_remaining == 0) - return 0; - - int toRead = System.Math.Min(len, _remaining); - int numRead = _in.Read(buf, off, toRead); - - if (numRead < 1) - throw new EndOfStreamException("DEF length " + _originalLength + " object truncated by " + _remaining); - - if ((_remaining -= numRead) == 0) - { - SetParentEofDetect(true); - } - - return numRead; - } - - internal void ReadAllIntoByteArray(byte[] buf) - { - if (_remaining != buf.Length) - throw new ArgumentException("buffer length not right for data"); - - if ((_remaining -= Streams.ReadFully(_in, buf)) != 0) - throw new EndOfStreamException("DEF length " + _originalLength + " object truncated by " + _remaining); - SetParentEofDetect(true); - } - - internal byte[] ToArray() - { - if (_remaining == 0) - return EmptyBytes; - - byte[] bytes = new byte[_remaining]; - if ((_remaining -= Streams.ReadFully(_in, bytes)) != 0) - throw new EndOfStreamException("DEF length " + _originalLength + " object truncated by " + _remaining); - SetParentEofDetect(true); - return bytes; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DerApplicationSpecific.cs b/bc-sharp-crypto/src/asn1/DerApplicationSpecific.cs deleted file mode 100644 index 52467fa..0000000 --- a/bc-sharp-crypto/src/asn1/DerApplicationSpecific.cs +++ /dev/null @@ -1,237 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1 -{ - /** - * Base class for an application specific object - */ - public class DerApplicationSpecific - : Asn1Object - { - private readonly bool isConstructed; - private readonly int tag; - private readonly byte[] octets; - - internal DerApplicationSpecific( - bool isConstructed, - int tag, - byte[] octets) - { - this.isConstructed = isConstructed; - this.tag = tag; - this.octets = octets; - } - - public DerApplicationSpecific( - int tag, - byte[] octets) - : this(false, tag, octets) - { - } - - public DerApplicationSpecific( - int tag, - Asn1Encodable obj) - : this(true, tag, obj) - { - } - - public DerApplicationSpecific( - bool isExplicit, - int tag, - Asn1Encodable obj) - { - Asn1Object asn1Obj = obj.ToAsn1Object(); - - byte[] data = asn1Obj.GetDerEncoded(); - - this.isConstructed = Asn1TaggedObject.IsConstructed(isExplicit, asn1Obj); - this.tag = tag; - - if (isExplicit) - { - this.octets = data; - } - else - { - int lenBytes = GetLengthOfHeader(data); - byte[] tmp = new byte[data.Length - lenBytes]; - Array.Copy(data, lenBytes, tmp, 0, tmp.Length); - this.octets = tmp; - } - } - - public DerApplicationSpecific( - int tagNo, - Asn1EncodableVector vec) - { - this.tag = tagNo; - this.isConstructed = true; - MemoryStream bOut = new MemoryStream(); - - for (int i = 0; i != vec.Count; i++) - { - try - { - byte[] bs = vec[i].GetDerEncoded(); - bOut.Write(bs, 0, bs.Length); - } - catch (IOException e) - { - throw new InvalidOperationException("malformed object", e); - } - } - this.octets = bOut.ToArray(); - } - - private int GetLengthOfHeader( - byte[] data) - { - int length = data[1]; // TODO: assumes 1 byte tag - - if (length == 0x80) - { - return 2; // indefinite-length encoding - } - - if (length > 127) - { - int size = length & 0x7f; - - // Note: The invalid long form "0xff" (see X.690 8.1.3.5c) will be caught here - if (size > 4) - { - throw new InvalidOperationException("DER length more than 4 bytes: " + size); - } - - return size + 2; - } - - return 2; - } - - public bool IsConstructed() - { - return isConstructed; - } - - public byte[] GetContents() - { - return octets; - } - - public int ApplicationTag - { - get { return tag; } - } - - /** - * Return the enclosed object assuming explicit tagging. - * - * @return the resulting object - * @throws IOException if reconstruction fails. - */ - public Asn1Object GetObject() - { - return FromByteArray(GetContents()); - } - - /** - * Return the enclosed object assuming implicit tagging. - * - * @param derTagNo the type tag that should be applied to the object's contents. - * @return the resulting object - * @throws IOException if reconstruction fails. - */ - public Asn1Object GetObject( - int derTagNo) - { - if (derTagNo >= 0x1f) - throw new IOException("unsupported tag number"); - - byte[] orig = this.GetEncoded(); - byte[] tmp = ReplaceTagNumber(derTagNo, orig); - - if ((orig[0] & Asn1Tags.Constructed) != 0) - { - tmp[0] |= Asn1Tags.Constructed; - } - - return FromByteArray(tmp); - } - - internal override void Encode( - DerOutputStream derOut) - { - int classBits = Asn1Tags.Application; - if (isConstructed) - { - classBits |= Asn1Tags.Constructed; - } - - derOut.WriteEncoded(classBits, tag, octets); - } - - protected override bool Asn1Equals( - Asn1Object asn1Object) - { - DerApplicationSpecific other = asn1Object as DerApplicationSpecific; - - if (other == null) - return false; - - return this.isConstructed == other.isConstructed - && this.tag == other.tag - && Arrays.AreEqual(this.octets, other.octets); - } - - protected override int Asn1GetHashCode() - { - return isConstructed.GetHashCode() ^ tag.GetHashCode() ^ Arrays.GetHashCode(octets); - } - - private byte[] ReplaceTagNumber( - int newTag, - byte[] input) - { - int tagNo = input[0] & 0x1f; - int index = 1; - // - // with tagged object tag number is bottom 5 bits, or stored at the start of the content - // - if (tagNo == 0x1f) - { - tagNo = 0; - - int b = input[index++] & 0xff; - - // X.690-0207 8.1.2.4.2 - // "c) bits 7 to 1 of the first subsequent octet shall not all be zero." - if ((b & 0x7f) == 0) // Note: -1 will pass - { - throw new InvalidOperationException("corrupted stream - invalid high tag number found"); - } - - while ((b >= 0) && ((b & 0x80) != 0)) - { - tagNo |= (b & 0x7f); - tagNo <<= 7; - b = input[index++] & 0xff; - } - - tagNo |= (b & 0x7f); - } - - byte[] tmp = new byte[input.Length - index + 1]; - - Array.Copy(input, index, tmp, 1, tmp.Length - 1); - - tmp[0] = (byte)newTag; - - return tmp; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DerBMPString.cs b/bc-sharp-crypto/src/asn1/DerBMPString.cs deleted file mode 100644 index 33d950f..0000000 --- a/bc-sharp-crypto/src/asn1/DerBMPString.cs +++ /dev/null @@ -1,117 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1 -{ - /** - * Der BMPString object. - */ - public class DerBmpString - : DerStringBase - { - private readonly string str; - - /** - * return a BMP string from the given object. - * - * @param obj the object we want converted. - * @exception ArgumentException if the object cannot be converted. - */ - public static DerBmpString GetInstance( - object obj) - { - if (obj == null || obj is DerBmpString) - { - return (DerBmpString)obj; - } - - throw new ArgumentException("illegal object in GetInstance: " + Platform.GetTypeName(obj)); - } - - /** - * return a BMP string from a tagged object. - * - * @param obj the tagged object holding the object we want - * @param explicitly true if the object is meant to be explicitly - * tagged false otherwise. - * @exception ArgumentException if the tagged object cannot - * be converted. - */ - public static DerBmpString GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - Asn1Object o = obj.GetObject(); - - if (isExplicit || o is DerBmpString) - { - return GetInstance(o); - } - - return new DerBmpString(Asn1OctetString.GetInstance(o).GetOctets()); - } - - /** - * basic constructor - byte encoded string. - */ - public DerBmpString( - byte[] str) - { - if (str == null) - throw new ArgumentNullException("str"); - - char[] cs = new char[str.Length / 2]; - - for (int i = 0; i != cs.Length; i++) - { - cs[i] = (char)((str[2 * i] << 8) | (str[2 * i + 1] & 0xff)); - } - - this.str = new string(cs); - } - - /** - * basic constructor - */ - public DerBmpString( - string str) - { - if (str == null) - throw new ArgumentNullException("str"); - - this.str = str; - } - - public override string GetString() - { - return str; - } - - protected override bool Asn1Equals( - Asn1Object asn1Object) - { - DerBmpString other = asn1Object as DerBmpString; - - if (other == null) - return false; - - return this.str.Equals(other.str); - } - - internal override void Encode( - DerOutputStream derOut) - { - char[] c = str.ToCharArray(); - byte[] b = new byte[c.Length * 2]; - - for (int i = 0; i != c.Length; i++) - { - b[2 * i] = (byte)(c[i] >> 8); - b[2 * i + 1] = (byte)c[i]; - } - - derOut.WriteEncoded(Asn1Tags.BmpString, b); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DerBitString.cs b/bc-sharp-crypto/src/asn1/DerBitString.cs deleted file mode 100644 index 26adc57..0000000 --- a/bc-sharp-crypto/src/asn1/DerBitString.cs +++ /dev/null @@ -1,276 +0,0 @@ -using System; -using System.Diagnostics; -using System.Text; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1 -{ - public class DerBitString - : DerStringBase - { - private static readonly char[] table - = { '0', '1', '2', '3', '4', '5', '6', '7', '8', '9', 'A', 'B', 'C', 'D', 'E', 'F' }; - - protected readonly byte[] mData; - protected readonly int mPadBits; - - /** - * return a Bit string from the passed in object - * - * @exception ArgumentException if the object cannot be converted. - */ - public static DerBitString GetInstance( - object obj) - { - if (obj == null || obj is DerBitString) - { - return (DerBitString) obj; - } - if (obj is byte[]) - { - try - { - return (DerBitString)FromByteArray((byte[])obj); - } - catch (Exception e) - { - throw new ArgumentException("encoding error in GetInstance: " + e.ToString()); - } - } - - throw new ArgumentException("illegal object in GetInstance: " + Platform.GetTypeName(obj)); - } - - /** - * return a Bit string from a tagged object. - * - * @param obj the tagged object holding the object we want - * @param explicitly true if the object is meant to be explicitly - * tagged false otherwise. - * @exception ArgumentException if the tagged object cannot - * be converted. - */ - public static DerBitString GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - Asn1Object o = obj.GetObject(); - - if (isExplicit || o is DerBitString) - { - return GetInstance(o); - } - - return FromAsn1Octets(((Asn1OctetString)o).GetOctets()); - } - - /** - * @param data the octets making up the bit string. - * @param padBits the number of extra bits at the end of the string. - */ - public DerBitString( - byte[] data, - int padBits) - { - if (data == null) - throw new ArgumentNullException("data"); - if (padBits < 0 || padBits > 7) - throw new ArgumentException("must be in the range 0 to 7", "padBits"); - if (data.Length == 0 && padBits != 0) - throw new ArgumentException("if 'data' is empty, 'padBits' must be 0"); - - this.mData = Arrays.Clone(data); - this.mPadBits = padBits; - } - - public DerBitString( - byte[] data) - : this(data, 0) - { - } - - public DerBitString( - int namedBits) - { - if (namedBits == 0) - { - this.mData = new byte[0]; - this.mPadBits = 0; - return; - } - - int bits = BigInteger.BitLen(namedBits); - int bytes = (bits + 7) / 8; - - Debug.Assert(0 < bytes && bytes <= 4); - - byte[] data = new byte[bytes]; - --bytes; - - for (int i = 0; i < bytes; i++) - { - data[i] = (byte)namedBits; - namedBits >>= 8; - } - - Debug.Assert((namedBits & 0xFF) != 0); - - data[bytes] = (byte)namedBits; - - int padBits = 0; - while ((namedBits & (1 << padBits)) == 0) - { - ++padBits; - } - - Debug.Assert(padBits < 8); - - this.mData = data; - this.mPadBits = padBits; - } - - public DerBitString( - Asn1Encodable obj) - : this(obj.GetDerEncoded()) - { - } - - /** - * Return the octets contained in this BIT STRING, checking that this BIT STRING really - * does represent an octet aligned string. Only use this method when the standard you are - * following dictates that the BIT STRING will be octet aligned. - * - * @return a copy of the octet aligned data. - */ - public virtual byte[] GetOctets() - { - if (mPadBits != 0) - throw new InvalidOperationException("attempt to get non-octet aligned data from BIT STRING"); - - return Arrays.Clone(mData); - } - - public virtual byte[] GetBytes() - { - byte[] data = Arrays.Clone(mData); - - // DER requires pad bits be zero - if (mPadBits > 0) - { - data[data.Length - 1] &= (byte)(0xFF << mPadBits); - } - - return data; - } - - public virtual int PadBits - { - get { return mPadBits; } - } - - /** - * @return the value of the bit string as an int (truncating if necessary) - */ - public virtual int IntValue - { - get - { - int value = 0, length = System.Math.Min(4, mData.Length); - for (int i = 0; i < length; ++i) - { - value |= (int)mData[i] << (8 * i); - } - if (mPadBits > 0 && length == mData.Length) - { - int mask = (1 << mPadBits) - 1; - value &= ~(mask << (8 * (length - 1))); - } - return value; - } - } - - internal override void Encode( - DerOutputStream derOut) - { - if (mPadBits > 0) - { - int last = mData[mData.Length - 1]; - int mask = (1 << mPadBits) - 1; - int unusedBits = last & mask; - - if (unusedBits != 0) - { - byte[] contents = Arrays.Prepend(mData, (byte)mPadBits); - - /* - * X.690-0207 11.2.1: Each unused bit in the final octet of the encoding of a bit string value shall be set to zero. - */ - contents[contents.Length - 1] = (byte)(last ^ unusedBits); - - derOut.WriteEncoded(Asn1Tags.BitString, contents); - return; - } - } - - derOut.WriteEncoded(Asn1Tags.BitString, (byte)mPadBits, mData); - } - - protected override int Asn1GetHashCode() - { - return mPadBits.GetHashCode() ^ Arrays.GetHashCode(mData); - } - - protected override bool Asn1Equals( - Asn1Object asn1Object) - { - DerBitString other = asn1Object as DerBitString; - - if (other == null) - return false; - - return this.mPadBits == other.mPadBits - && Arrays.AreEqual(this.mData, other.mData); - } - - public override string GetString() - { - StringBuilder buffer = new StringBuilder("#"); - - byte[] str = GetDerEncoded(); - - for (int i = 0; i != str.Length; i++) - { - uint ubyte = str[i]; - buffer.Append(table[(ubyte >> 4) & 0xf]); - buffer.Append(table[str[i] & 0xf]); - } - - return buffer.ToString(); - } - - internal static DerBitString FromAsn1Octets(byte[] octets) - { - if (octets.Length < 1) - throw new ArgumentException("truncated BIT STRING detected", "octets"); - - int padBits = octets[0]; - byte[] data = Arrays.CopyOfRange(octets, 1, octets.Length); - - if (padBits > 0 && padBits < 8 && data.Length > 0) - { - int last = data[data.Length - 1]; - int mask = (1 << padBits) - 1; - - if ((last & mask) != 0) - { - return new BerBitString(data, padBits); - } - } - - return new DerBitString(data, padBits); - } - } -} - diff --git a/bc-sharp-crypto/src/asn1/DerBoolean.cs b/bc-sharp-crypto/src/asn1/DerBoolean.cs deleted file mode 100644 index 709f4dd..0000000 --- a/bc-sharp-crypto/src/asn1/DerBoolean.cs +++ /dev/null @@ -1,124 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1 -{ - public class DerBoolean - : Asn1Object - { - private readonly byte value; - - public static readonly DerBoolean False = new DerBoolean(false); - public static readonly DerBoolean True = new DerBoolean(true); - - /** - * return a bool from the passed in object. - * - * @exception ArgumentException if the object cannot be converted. - */ - public static DerBoolean GetInstance( - object obj) - { - if (obj == null || obj is DerBoolean) - { - return (DerBoolean) obj; - } - - throw new ArgumentException("illegal object in GetInstance: " + Platform.GetTypeName(obj)); - } - - /** - * return a DerBoolean from the passed in bool. - */ - public static DerBoolean GetInstance( - bool value) - { - return value ? True : False; - } - - /** - * return a Boolean from a tagged object. - * - * @param obj the tagged object holding the object we want - * @param explicitly true if the object is meant to be explicitly - * tagged false otherwise. - * @exception ArgumentException if the tagged object cannot - * be converted. - */ - public static DerBoolean GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - Asn1Object o = obj.GetObject(); - - if (isExplicit || o is DerBoolean) - { - return GetInstance(o); - } - - return FromOctetString(((Asn1OctetString)o).GetOctets()); - } - - public DerBoolean( - byte[] val) - { - if (val.Length != 1) - throw new ArgumentException("byte value should have 1 byte in it", "val"); - - // TODO Are there any constraints on the possible byte values? - this.value = val[0]; - } - - private DerBoolean( - bool value) - { - this.value = value ? (byte)0xff : (byte)0; - } - - public bool IsTrue - { - get { return value != 0; } - } - - internal override void Encode( - DerOutputStream derOut) - { - // TODO Should we make sure the byte value is one of '0' or '0xff' here? - derOut.WriteEncoded(Asn1Tags.Boolean, new byte[]{ value }); - } - - protected override bool Asn1Equals( - Asn1Object asn1Object) - { - DerBoolean other = asn1Object as DerBoolean; - - if (other == null) - return false; - - return IsTrue == other.IsTrue; - } - - protected override int Asn1GetHashCode() - { - return IsTrue.GetHashCode(); - } - - public override string ToString() - { - return IsTrue ? "TRUE" : "FALSE"; - } - - internal static DerBoolean FromOctetString(byte[] value) - { - if (value.Length != 1) - { - throw new ArgumentException("BOOLEAN value should have 1 byte in it", "value"); - } - - byte b = value[0]; - - return b == 0 ? False : b == 0xFF ? True : new DerBoolean(value); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DerEnumerated.cs b/bc-sharp-crypto/src/asn1/DerEnumerated.cs deleted file mode 100644 index db27065..0000000 --- a/bc-sharp-crypto/src/asn1/DerEnumerated.cs +++ /dev/null @@ -1,135 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1 -{ - public class DerEnumerated - : Asn1Object - { - private readonly byte[] bytes; - - /** - * return an integer from the passed in object - * - * @exception ArgumentException if the object cannot be converted. - */ - public static DerEnumerated GetInstance( - object obj) - { - if (obj == null || obj is DerEnumerated) - { - return (DerEnumerated)obj; - } - - throw new ArgumentException("illegal object in GetInstance: " + Platform.GetTypeName(obj)); - } - - /** - * return an Enumerated from a tagged object. - * - * @param obj the tagged object holding the object we want - * @param explicitly true if the object is meant to be explicitly - * tagged false otherwise. - * @exception ArgumentException if the tagged object cannot - * be converted. - */ - public static DerEnumerated GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - Asn1Object o = obj.GetObject(); - - if (isExplicit || o is DerEnumerated) - { - return GetInstance(o); - } - - return FromOctetString(((Asn1OctetString)o).GetOctets()); - } - - public DerEnumerated( - int val) - { - bytes = BigInteger.ValueOf(val).ToByteArray(); - } - - public DerEnumerated( - BigInteger val) - { - bytes = val.ToByteArray(); - } - - public DerEnumerated( - byte[] bytes) - { - if (bytes.Length > 1) - { - if (bytes[0] == 0 && (bytes[1] & 0x80) == 0) - { - throw new ArgumentException("malformed enumerated"); - } - if (bytes[0] == (byte)0xff && (bytes[1] & 0x80) != 0) - { - throw new ArgumentException("malformed enumerated"); - } - } - this.bytes = Arrays.Clone(bytes); - } - - public BigInteger Value - { - get { return new BigInteger(bytes); } - } - - internal override void Encode( - DerOutputStream derOut) - { - derOut.WriteEncoded(Asn1Tags.Enumerated, bytes); - } - - protected override bool Asn1Equals( - Asn1Object asn1Object) - { - DerEnumerated other = asn1Object as DerEnumerated; - - if (other == null) - return false; - - return Arrays.AreEqual(this.bytes, other.bytes); - } - - protected override int Asn1GetHashCode() - { - return Arrays.GetHashCode(bytes); - } - - private static readonly DerEnumerated[] cache = new DerEnumerated[12]; - - internal static DerEnumerated FromOctetString(byte[] enc) - { - if (enc.Length == 0) - { - throw new ArgumentException("ENUMERATED has zero length", "enc"); - } - - if (enc.Length == 1) - { - int value = enc[0]; - if (value < cache.Length) - { - DerEnumerated cached = cache[value]; - if (cached != null) - { - return cached; - } - - return cache[value] = new DerEnumerated(Arrays.Clone(enc)); - } - } - - return new DerEnumerated(Arrays.Clone(enc)); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DerGeneralString.cs b/bc-sharp-crypto/src/asn1/DerGeneralString.cs deleted file mode 100644 index 553b0e0..0000000 --- a/bc-sharp-crypto/src/asn1/DerGeneralString.cs +++ /dev/null @@ -1,81 +0,0 @@ -using System; -using System.Text; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1 -{ - public class DerGeneralString - : DerStringBase - { - private readonly string str; - - public static DerGeneralString GetInstance( - object obj) - { - if (obj == null || obj is DerGeneralString) - { - return (DerGeneralString) obj; - } - - throw new ArgumentException("illegal object in GetInstance: " - + Platform.GetTypeName(obj)); - } - - public static DerGeneralString GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - Asn1Object o = obj.GetObject(); - - if (isExplicit || o is DerGeneralString) - { - return GetInstance(o); - } - - return new DerGeneralString(((Asn1OctetString)o).GetOctets()); - } - - public DerGeneralString( - byte[] str) - : this(Strings.FromAsciiByteArray(str)) - { - } - - public DerGeneralString( - string str) - { - if (str == null) - throw new ArgumentNullException("str"); - - this.str = str; - } - - public override string GetString() - { - return str; - } - - public byte[] GetOctets() - { - return Strings.ToAsciiByteArray(str); - } - - internal override void Encode( - DerOutputStream derOut) - { - derOut.WriteEncoded(Asn1Tags.GeneralString, GetOctets()); - } - - protected override bool Asn1Equals( - Asn1Object asn1Object) - { - DerGeneralString other = asn1Object as DerGeneralString; - - if (other == null) - return false; - - return this.str.Equals(other.str); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DerGeneralizedTime.cs b/bc-sharp-crypto/src/asn1/DerGeneralizedTime.cs deleted file mode 100644 index b224ebe..0000000 --- a/bc-sharp-crypto/src/asn1/DerGeneralizedTime.cs +++ /dev/null @@ -1,320 +0,0 @@ -using System; -using System.Globalization; -using System.Text; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1 -{ - /** - * Generalized time object. - */ - public class DerGeneralizedTime - : Asn1Object - { - private readonly string time; - - /** - * return a generalized time from the passed in object - * - * @exception ArgumentException if the object cannot be converted. - */ - public static DerGeneralizedTime GetInstance( - object obj) - { - if (obj == null || obj is DerGeneralizedTime) - { - return (DerGeneralizedTime)obj; - } - - throw new ArgumentException("illegal object in GetInstance: " + Platform.GetTypeName(obj), "obj"); - } - - /** - * return a Generalized Time object from a tagged object. - * - * @param obj the tagged object holding the object we want - * @param explicitly true if the object is meant to be explicitly - * tagged false otherwise. - * @exception ArgumentException if the tagged object cannot - * be converted. - */ - public static DerGeneralizedTime GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - Asn1Object o = obj.GetObject(); - - if (isExplicit || o is DerGeneralizedTime) - { - return GetInstance(o); - } - - return new DerGeneralizedTime(((Asn1OctetString)o).GetOctets()); - } - - /** - * The correct format for this is YYYYMMDDHHMMSS[.f]Z, or without the Z - * for local time, or Z+-HHMM on the end, for difference between local - * time and UTC time. The fractional second amount f must consist of at - * least one number with trailing zeroes removed. - * - * @param time the time string. - * @exception ArgumentException if string is an illegal format. - */ - public DerGeneralizedTime( - string time) - { - this.time = time; - - try - { - ToDateTime(); - } - catch (FormatException e) - { - throw new ArgumentException("invalid date string: " + e.Message); - } - } - - /** - * base constructor from a local time object - */ - public DerGeneralizedTime( - DateTime time) - { -#if PORTABLE - this.time = time.ToUniversalTime().ToString(@"yyyyMMddHHmmss\Z"); -#else - this.time = time.ToString(@"yyyyMMddHHmmss\Z"); -#endif - } - - internal DerGeneralizedTime( - byte[] bytes) - { - // - // explicitly convert to characters - // - this.time = Strings.FromAsciiByteArray(bytes); - } - - /** - * Return the time. - * @return The time string as it appeared in the encoded object. - */ - public string TimeString - { - get { return time; } - } - - /** - * return the time - always in the form of - * YYYYMMDDhhmmssGMT(+hh:mm|-hh:mm). - *

- * Normally in a certificate we would expect "Z" rather than "GMT", - * however adding the "GMT" means we can just use: - * 

-         *     dateF = new SimpleDateFormat("yyyyMMddHHmmssz");
-         *
- * To read in the time and Get a date which is compatible with our local - * time zone.

- */ - public string GetTime() - { - // - // standardise the format. - // - if (time[time.Length - 1] == 'Z') - { - return time.Substring(0, time.Length - 1) + "GMT+00:00"; - } - else - { - int signPos = time.Length - 5; - char sign = time[signPos]; - if (sign == '-' || sign == '+') - { - return time.Substring(0, signPos) - + "GMT" - + time.Substring(signPos, 3) - + ":" - + time.Substring(signPos + 3); - } - else - { - signPos = time.Length - 3; - sign = time[signPos]; - if (sign == '-' || sign == '+') - { - return time.Substring(0, signPos) - + "GMT" - + time.Substring(signPos) - + ":00"; - } - } - } - - return time + CalculateGmtOffset(); - } - - private string CalculateGmtOffset() - { - char sign = '+'; - DateTime time = ToDateTime(); - -#if SILVERLIGHT || PORTABLE - long offset = time.Ticks - time.ToUniversalTime().Ticks; - if (offset < 0) - { - sign = '-'; - offset = -offset; - } - int hours = (int)(offset / TimeSpan.TicksPerHour); - int minutes = (int)(offset / TimeSpan.TicksPerMinute) % 60; -#else - // Note: GetUtcOffset incorporates Daylight Savings offset - TimeSpan offset = TimeZone.CurrentTimeZone.GetUtcOffset(time); - if (offset.CompareTo(TimeSpan.Zero) < 0) - { - sign = '-'; - offset = offset.Duration(); - } - int hours = offset.Hours; - int minutes = offset.Minutes; -#endif - - return "GMT" + sign + Convert(hours) + ":" + Convert(minutes); - } - - private static string Convert( - int time) - { - if (time < 10) - { - return "0" + time; - } - - return time.ToString(); - } - - public DateTime ToDateTime() - { - string formatStr; - string d = time; - bool makeUniversal = false; - - if (Platform.EndsWith(d, "Z")) - { - if (HasFractionalSeconds) - { - int fCount = d.Length - d.IndexOf('.') - 2; - formatStr = @"yyyyMMddHHmmss." + FString(fCount) + @"\Z"; - } - else - { - formatStr = @"yyyyMMddHHmmss\Z"; - } - } - else if (time.IndexOf('-') > 0 || time.IndexOf('+') > 0) - { - d = GetTime(); - makeUniversal = true; - - if (HasFractionalSeconds) - { - int fCount = Platform.IndexOf(d, "GMT") - 1 - d.IndexOf('.'); - formatStr = @"yyyyMMddHHmmss." + FString(fCount) + @"'GMT'zzz"; - } - else - { - formatStr = @"yyyyMMddHHmmss'GMT'zzz"; - } - } - else - { - if (HasFractionalSeconds) - { - int fCount = d.Length - 1 - d.IndexOf('.'); - formatStr = @"yyyyMMddHHmmss." + FString(fCount); - } - else - { - formatStr = @"yyyyMMddHHmmss"; - } - - // TODO? -// dateF.setTimeZone(new SimpleTimeZone(0, TimeZone.getDefault().getID())); - } - - return ParseDateString(d, formatStr, makeUniversal); - } - - private string FString( - int count) - { - StringBuilder sb = new StringBuilder(); - for (int i = 0; i < count; ++i) - { - sb.Append('f'); - } - return sb.ToString(); - } - - private DateTime ParseDateString(string s, string format, bool makeUniversal) - { - /* - * NOTE: DateTime.Kind and DateTimeStyles.AssumeUniversal not available in .NET 1.1 - */ - DateTimeStyles style = DateTimeStyles.None; - if (Platform.EndsWith(format, "Z")) - { - try - { - style = (DateTimeStyles)Enums.GetEnumValue(typeof(DateTimeStyles), "AssumeUniversal"); - } - catch (Exception) - { - } - - style |= DateTimeStyles.AdjustToUniversal; - } - - DateTime dt = DateTime.ParseExact(s, format, DateTimeFormatInfo.InvariantInfo, style); - - return makeUniversal ? dt.ToUniversalTime() : dt; - } - - private bool HasFractionalSeconds - { - get { return time.IndexOf('.') == 14; } - } - - private byte[] GetOctets() - { - return Strings.ToAsciiByteArray(time); - } - - internal override void Encode( - DerOutputStream derOut) - { - derOut.WriteEncoded(Asn1Tags.GeneralizedTime, GetOctets()); - } - - protected override bool Asn1Equals( - Asn1Object asn1Object) - { - DerGeneralizedTime other = asn1Object as DerGeneralizedTime; - - if (other == null) - return false; - - return this.time.Equals(other.time); - } - - protected override int Asn1GetHashCode() - { - return time.GetHashCode(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DerGraphicString.cs b/bc-sharp-crypto/src/asn1/DerGraphicString.cs deleted file mode 100644 index f213f46..0000000 --- a/bc-sharp-crypto/src/asn1/DerGraphicString.cs +++ /dev/null @@ -1,103 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1 -{ - public class DerGraphicString - : DerStringBase - { - private readonly byte[] mString; - - /** - * return a Graphic String from the passed in object - * - * @param obj a DerGraphicString or an object that can be converted into one. - * @exception IllegalArgumentException if the object cannot be converted. - * @return a DerGraphicString instance, or null. - */ - public static DerGraphicString GetInstance(object obj) - { - if (obj == null || obj is DerGraphicString) - { - return (DerGraphicString)obj; - } - - if (obj is byte[]) - { - try - { - return (DerGraphicString)FromByteArray((byte[])obj); - } - catch (Exception e) - { - throw new ArgumentException("encoding error in GetInstance: " + e.ToString(), "obj"); - } - } - - throw new ArgumentException("illegal object in GetInstance: " + Platform.GetTypeName(obj), "obj"); - } - - /** - * return a Graphic String from a tagged object. - * - * @param obj the tagged object holding the object we want - * @param explicit true if the object is meant to be explicitly - * tagged false otherwise. - * @exception IllegalArgumentException if the tagged object cannot - * be converted. - * @return a DerGraphicString instance, or null. - */ - public static DerGraphicString GetInstance(Asn1TaggedObject obj, bool isExplicit) - { - Asn1Object o = obj.GetObject(); - - if (isExplicit || o is DerGraphicString) - { - return GetInstance(o); - } - - return new DerGraphicString(((Asn1OctetString)o).GetOctets()); - } - - /** - * basic constructor - with bytes. - * @param string the byte encoding of the characters making up the string. - */ - public DerGraphicString(byte[] encoding) - { - this.mString = Arrays.Clone(encoding); - } - - public override string GetString() - { - return Strings.FromByteArray(mString); - } - - public byte[] GetOctets() - { - return Arrays.Clone(mString); - } - - internal override void Encode(DerOutputStream derOut) - { - derOut.WriteEncoded(Asn1Tags.GraphicString, mString); - } - - protected override int Asn1GetHashCode() - { - return Arrays.GetHashCode(mString); - } - - protected override bool Asn1Equals( - Asn1Object asn1Object) - { - DerGraphicString other = asn1Object as DerGraphicString; - - if (other == null) - return false; - - return Arrays.AreEqual(mString, other.mString); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DerIA5String.cs b/bc-sharp-crypto/src/asn1/DerIA5String.cs deleted file mode 100644 index 63e9158..0000000 --- a/bc-sharp-crypto/src/asn1/DerIA5String.cs +++ /dev/null @@ -1,145 +0,0 @@ -using System; -using System.Text; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1 -{ - /** - * Der IA5String object - this is an ascii string. - */ - public class DerIA5String - : DerStringBase - { - private readonly string str; - - /** - * return a IA5 string from the passed in object - * - * @exception ArgumentException if the object cannot be converted. - */ - public static DerIA5String GetInstance( - object obj) - { - if (obj == null || obj is DerIA5String) - { - return (DerIA5String)obj; - } - - throw new ArgumentException("illegal object in GetInstance: " + Platform.GetTypeName(obj)); - } - - /** - * return an IA5 string from a tagged object. - * - * @param obj the tagged object holding the object we want - * @param explicitly true if the object is meant to be explicitly - * tagged false otherwise. - * @exception ArgumentException if the tagged object cannot - * be converted. - */ - public static DerIA5String GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - Asn1Object o = obj.GetObject(); - - if (isExplicit || o is DerIA5String) - { - return GetInstance(o); - } - - return new DerIA5String(((Asn1OctetString)o).GetOctets()); - } - - /** - * basic constructor - with bytes. - */ - public DerIA5String( - byte[] str) - : this(Strings.FromAsciiByteArray(str), false) - { - } - - /** - * basic constructor - without validation. - */ - public DerIA5String( - string str) - : this(str, false) - { - } - - /** - * Constructor with optional validation. - * - * @param string the base string to wrap. - * @param validate whether or not to check the string. - * @throws ArgumentException if validate is true and the string - * contains characters that should not be in an IA5String. - */ - public DerIA5String( - string str, - bool validate) - { - if (str == null) - throw new ArgumentNullException("str"); - if (validate && !IsIA5String(str)) - throw new ArgumentException("string contains illegal characters", "str"); - - this.str = str; - } - - public override string GetString() - { - return str; - } - - public byte[] GetOctets() - { - return Strings.ToAsciiByteArray(str); - } - - internal override void Encode( - DerOutputStream derOut) - { - derOut.WriteEncoded(Asn1Tags.IA5String, GetOctets()); - } - - protected override int Asn1GetHashCode() - { - return this.str.GetHashCode(); - } - - protected override bool Asn1Equals( - Asn1Object asn1Object) - { - DerIA5String other = asn1Object as DerIA5String; - - if (other == null) - return false; - - return this.str.Equals(other.str); - } - - /** - * return true if the passed in String can be represented without - * loss as an IA5String, false otherwise. - * - * @return true if in printable set, false otherwise. - */ - public static bool IsIA5String( - string str) - { - foreach (char ch in str) - { - if (ch > 0x007f) - { - return false; - } - } - - return true; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DerInteger.cs b/bc-sharp-crypto/src/asn1/DerInteger.cs deleted file mode 100644 index 5b240d2..0000000 --- a/bc-sharp-crypto/src/asn1/DerInteger.cs +++ /dev/null @@ -1,128 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1 -{ - public class DerInteger - : Asn1Object - { - private readonly byte[] bytes; - - /** - * return an integer from the passed in object - * - * @exception ArgumentException if the object cannot be converted. - */ - public static DerInteger GetInstance( - object obj) - { - if (obj == null || obj is DerInteger) - { - return (DerInteger)obj; - } - - throw new ArgumentException("illegal object in GetInstance: " + Platform.GetTypeName(obj)); - } - - /** - * return an Integer from a tagged object. - * - * @param obj the tagged object holding the object we want - * @param isExplicit true if the object is meant to be explicitly - * tagged false otherwise. - * @exception ArgumentException if the tagged object cannot - * be converted. - */ - public static DerInteger GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - if (obj == null) - throw new ArgumentNullException("obj"); - - Asn1Object o = obj.GetObject(); - - if (isExplicit || o is DerInteger) - { - return GetInstance(o); - } - - return new DerInteger(Asn1OctetString.GetInstance(o).GetOctets()); - } - - public DerInteger( - int value) - { - bytes = BigInteger.ValueOf(value).ToByteArray(); - } - - public DerInteger( - BigInteger value) - { - if (value == null) - throw new ArgumentNullException("value"); - - bytes = value.ToByteArray(); - } - - public DerInteger( - byte[] bytes) - { - if (bytes.Length > 1) - { - if (bytes[0] == 0 && (bytes[1] & 0x80) == 0) - { - throw new ArgumentException("malformed integer"); - } - if (bytes[0] == (byte)0xff && (bytes[1] & 0x80) != 0) - { - throw new ArgumentException("malformed integer"); - } - } - this.bytes = Arrays.Clone(bytes); - } - - public BigInteger Value - { - get { return new BigInteger(bytes); } - } - - /** - * in some cases positive values Get crammed into a space, - * that's not quite big enough... - */ - public BigInteger PositiveValue - { - get { return new BigInteger(1, bytes); } - } - - internal override void Encode( - DerOutputStream derOut) - { - derOut.WriteEncoded(Asn1Tags.Integer, bytes); - } - - protected override int Asn1GetHashCode() - { - return Arrays.GetHashCode(bytes); - } - - protected override bool Asn1Equals( - Asn1Object asn1Object) - { - DerInteger other = asn1Object as DerInteger; - - if (other == null) - return false; - - return Arrays.AreEqual(this.bytes, other.bytes); - } - - public override string ToString() - { - return Value.ToString(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DerNull.cs b/bc-sharp-crypto/src/asn1/DerNull.cs deleted file mode 100644 index a802f64..0000000 --- a/bc-sharp-crypto/src/asn1/DerNull.cs +++ /dev/null @@ -1,41 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1 -{ - /** - * A Null object. - */ - public class DerNull - : Asn1Null - { - public static readonly DerNull Instance = new DerNull(0); - - byte[] zeroBytes = new byte[0]; - - [Obsolete("Use static Instance object")] - public DerNull() - { - } - - protected internal DerNull(int dummy) - { - } - - internal override void Encode( - DerOutputStream derOut) - { - derOut.WriteEncoded(Asn1Tags.Null, zeroBytes); - } - - protected override bool Asn1Equals( - Asn1Object asn1Object) - { - return asn1Object is DerNull; - } - - protected override int Asn1GetHashCode() - { - return -1; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DerNumericString.cs b/bc-sharp-crypto/src/asn1/DerNumericString.cs deleted file mode 100644 index a729f9e..0000000 --- a/bc-sharp-crypto/src/asn1/DerNumericString.cs +++ /dev/null @@ -1,138 +0,0 @@ -using System; -using System.Text; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1 -{ - /** - * Der NumericString object - this is an ascii string of characters {0,1,2,3,4,5,6,7,8,9, }. - */ - public class DerNumericString - : DerStringBase - { - private readonly string str; - - /** - * return a Numeric string from the passed in object - * - * @exception ArgumentException if the object cannot be converted. - */ - public static DerNumericString GetInstance( - object obj) - { - if (obj == null || obj is DerNumericString) - { - return (DerNumericString)obj; - } - - throw new ArgumentException("illegal object in GetInstance: " + Platform.GetTypeName(obj)); - } - - /** - * return an Numeric string from a tagged object. - * - * @param obj the tagged object holding the object we want - * @param explicitly true if the object is meant to be explicitly - * tagged false otherwise. - * @exception ArgumentException if the tagged object cannot - * be converted. - */ - public static DerNumericString GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - Asn1Object o = obj.GetObject(); - - if (isExplicit || o is DerNumericString) - { - return GetInstance(o); - } - - return new DerNumericString(Asn1OctetString.GetInstance(o).GetOctets()); - } - - /** - * basic constructor - with bytes. - */ - public DerNumericString( - byte[] str) - : this(Strings.FromAsciiByteArray(str), false) - { - } - - /** - * basic constructor - without validation.. - */ - public DerNumericString( - string str) - : this(str, false) - { - } - - /** - * Constructor with optional validation. - * - * @param string the base string to wrap. - * @param validate whether or not to check the string. - * @throws ArgumentException if validate is true and the string - * contains characters that should not be in a NumericString. - */ - public DerNumericString( - string str, - bool validate) - { - if (str == null) - throw new ArgumentNullException("str"); - if (validate && !IsNumericString(str)) - throw new ArgumentException("string contains illegal characters", "str"); - - this.str = str; - } - - public override string GetString() - { - return str; - } - - public byte[] GetOctets() - { - return Strings.ToAsciiByteArray(str); - } - - internal override void Encode( - DerOutputStream derOut) - { - derOut.WriteEncoded(Asn1Tags.NumericString, GetOctets()); - } - - protected override bool Asn1Equals( - Asn1Object asn1Object) - { - DerNumericString other = asn1Object as DerNumericString; - - if (other == null) - return false; - - return this.str.Equals(other.str); - } - - /** - * Return true if the string can be represented as a NumericString ('0'..'9', ' ') - * - * @param str string to validate. - * @return true if numeric, fale otherwise. - */ - public static bool IsNumericString( - string str) - { - foreach (char ch in str) - { - if (ch > 0x007f || (ch != ' ' && !char.IsDigit(ch))) - return false; - } - - return true; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DerObjectIdentifier.cs b/bc-sharp-crypto/src/asn1/DerObjectIdentifier.cs deleted file mode 100644 index 6ac2b7e..0000000 --- a/bc-sharp-crypto/src/asn1/DerObjectIdentifier.cs +++ /dev/null @@ -1,347 +0,0 @@ -using System; -using System.IO; -using System.Text; -using System.Text.RegularExpressions; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1 -{ - public class DerObjectIdentifier - : Asn1Object - { - private readonly string identifier; - - private byte[] body = null; - - /** - * return an Oid from the passed in object - * - * @exception ArgumentException if the object cannot be converted. - */ - public static DerObjectIdentifier GetInstance(object obj) - { - if (obj == null || obj is DerObjectIdentifier) - return (DerObjectIdentifier) obj; - if (obj is byte[]) - return FromOctetString((byte[])obj); - throw new ArgumentException("illegal object in GetInstance: " + Platform.GetTypeName(obj), "obj"); - } - - /** - * return an object Identifier from a tagged object. - * - * @param obj the tagged object holding the object we want - * @param explicitly true if the object is meant to be explicitly - * tagged false otherwise. - * @exception ArgumentException if the tagged object cannot - * be converted. - */ - public static DerObjectIdentifier GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(obj.GetObject()); - } - - public DerObjectIdentifier( - string identifier) - { - if (identifier == null) - throw new ArgumentNullException("identifier"); - if (!IsValidIdentifier(identifier)) - throw new FormatException("string " + identifier + " not an OID"); - - this.identifier = identifier; - } - - internal DerObjectIdentifier(DerObjectIdentifier oid, string branchID) - { - if (!IsValidBranchID(branchID, 0)) - throw new ArgumentException("string " + branchID + " not a valid OID branch", "branchID"); - - this.identifier = oid.Id + "." + branchID; - } - - // TODO Change to ID? - public string Id - { - get { return identifier; } - } - - public virtual DerObjectIdentifier Branch(string branchID) - { - return new DerObjectIdentifier(this, branchID); - } - - /** - * Return true if this oid is an extension of the passed in branch, stem. - * @param stem the arc or branch that is a possible parent. - * @return true if the branch is on the passed in stem, false otherwise. - */ - public virtual bool On(DerObjectIdentifier stem) - { - string id = Id, stemId = stem.Id; - return id.Length > stemId.Length && id[stemId.Length] == '.' && Platform.StartsWith(id, stemId); - } - - internal DerObjectIdentifier(byte[] bytes) - { - this.identifier = MakeOidStringFromBytes(bytes); - this.body = Arrays.Clone(bytes); - } - - private void WriteField( - Stream outputStream, - long fieldValue) - { - byte[] result = new byte[9]; - int pos = 8; - result[pos] = (byte)(fieldValue & 0x7f); - while (fieldValue >= (1L << 7)) - { - fieldValue >>= 7; - result[--pos] = (byte)((fieldValue & 0x7f) | 0x80); - } - outputStream.Write(result, pos, 9 - pos); - } - - private void WriteField( - Stream outputStream, - BigInteger fieldValue) - { - int byteCount = (fieldValue.BitLength + 6) / 7; - if (byteCount == 0) - { - outputStream.WriteByte(0); - } - else - { - BigInteger tmpValue = fieldValue; - byte[] tmp = new byte[byteCount]; - for (int i = byteCount-1; i >= 0; i--) - { - tmp[i] = (byte) ((tmpValue.IntValue & 0x7f) | 0x80); - tmpValue = tmpValue.ShiftRight(7); - } - tmp[byteCount-1] &= 0x7f; - outputStream.Write(tmp, 0, tmp.Length); - } - } - - private void DoOutput(MemoryStream bOut) - { - OidTokenizer tok = new OidTokenizer(identifier); - - string token = tok.NextToken(); - int first = int.Parse(token) * 40; - - token = tok.NextToken(); - if (token.Length <= 18) - { - WriteField(bOut, first + Int64.Parse(token)); - } - else - { - WriteField(bOut, new BigInteger(token).Add(BigInteger.ValueOf(first))); - } - - while (tok.HasMoreTokens) - { - token = tok.NextToken(); - if (token.Length <= 18) - { - WriteField(bOut, Int64.Parse(token)); - } - else - { - WriteField(bOut, new BigInteger(token)); - } - } - } - - internal byte[] GetBody() - { - lock (this) - { - if (body == null) - { - MemoryStream bOut = new MemoryStream(); - DoOutput(bOut); - body = bOut.ToArray(); - } - } - - return body; - } - - internal override void Encode( - DerOutputStream derOut) - { - derOut.WriteEncoded(Asn1Tags.ObjectIdentifier, GetBody()); - } - - protected override int Asn1GetHashCode() - { - return identifier.GetHashCode(); - } - - protected override bool Asn1Equals( - Asn1Object asn1Object) - { - DerObjectIdentifier other = asn1Object as DerObjectIdentifier; - - if (other == null) - return false; - - return this.identifier.Equals(other.identifier); - } - - public override string ToString() - { - return identifier; - } - - private static bool IsValidBranchID( - String branchID, int start) - { - bool periodAllowed = false; - - int pos = branchID.Length; - while (--pos >= start) - { - char ch = branchID[pos]; - - // TODO Leading zeroes? - if ('0' <= ch && ch <= '9') - { - periodAllowed = true; - continue; - } - - if (ch == '.') - { - if (!periodAllowed) - return false; - - periodAllowed = false; - continue; - } - - return false; - } - - return periodAllowed; - } - - private static bool IsValidIdentifier(string identifier) - { - if (identifier.Length < 3 || identifier[1] != '.') - return false; - - char first = identifier[0]; - if (first < '0' || first > '2') - return false; - - return IsValidBranchID(identifier, 2); - } - - private const long LONG_LIMIT = (long.MaxValue >> 7) - 0x7f; - - private static string MakeOidStringFromBytes( - byte[] bytes) - { - StringBuilder objId = new StringBuilder(); - long value = 0; - BigInteger bigValue = null; - bool first = true; - - for (int i = 0; i != bytes.Length; i++) - { - int b = bytes[i]; - - if (value <= LONG_LIMIT) - { - value += (b & 0x7f); - if ((b & 0x80) == 0) // end of number reached - { - if (first) - { - if (value < 40) - { - objId.Append('0'); - } - else if (value < 80) - { - objId.Append('1'); - value -= 40; - } - else - { - objId.Append('2'); - value -= 80; - } - first = false; - } - - objId.Append('.'); - objId.Append(value); - value = 0; - } - else - { - value <<= 7; - } - } - else - { - if (bigValue == null) - { - bigValue = BigInteger.ValueOf(value); - } - bigValue = bigValue.Or(BigInteger.ValueOf(b & 0x7f)); - if ((b & 0x80) == 0) - { - if (first) - { - objId.Append('2'); - bigValue = bigValue.Subtract(BigInteger.ValueOf(80)); - first = false; - } - - objId.Append('.'); - objId.Append(bigValue); - bigValue = null; - value = 0; - } - else - { - bigValue = bigValue.ShiftLeft(7); - } - } - } - - return objId.ToString(); - } - - private static readonly DerObjectIdentifier[] cache = new DerObjectIdentifier[1024]; - - internal static DerObjectIdentifier FromOctetString(byte[] enc) - { - int hashCode = Arrays.GetHashCode(enc); - int first = hashCode & 1023; - - lock (cache) - { - DerObjectIdentifier entry = cache[first]; - if (entry != null && Arrays.AreEqual(enc, entry.GetBody())) - { - return entry; - } - - return cache[first] = new DerObjectIdentifier(enc); - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DerOctetString.cs b/bc-sharp-crypto/src/asn1/DerOctetString.cs deleted file mode 100644 index c046c94..0000000 --- a/bc-sharp-crypto/src/asn1/DerOctetString.cs +++ /dev/null @@ -1,34 +0,0 @@ -namespace Org.BouncyCastle.Asn1 -{ - public class DerOctetString - : Asn1OctetString - { - /// The octets making up the octet string. - public DerOctetString( - byte[] str) - : base(str) - { - } - - public DerOctetString( - Asn1Encodable obj) - : base(obj) - { - } - - internal override void Encode( - DerOutputStream derOut) - { - derOut.WriteEncoded(Asn1Tags.OctetString, str); - } - - internal static void Encode( - DerOutputStream derOut, - byte[] bytes, - int offset, - int length) - { - derOut.WriteEncoded(Asn1Tags.OctetString, bytes, offset, length); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DerOutputStream.cs b/bc-sharp-crypto/src/asn1/DerOutputStream.cs deleted file mode 100644 index 69d5d5f..0000000 --- a/bc-sharp-crypto/src/asn1/DerOutputStream.cs +++ /dev/null @@ -1,171 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Asn1 -{ - public class DerOutputStream - : FilterStream - { - public DerOutputStream(Stream os) - : base(os) - { - } - - private void WriteLength( - int length) - { - if (length > 127) - { - int size = 1; - uint val = (uint)length; - - while ((val >>= 8) != 0) - { - size++; - } - - WriteByte((byte)(size | 0x80)); - - for (int i = (size - 1) * 8; i >= 0; i -= 8) - { - WriteByte((byte)(length >> i)); - } - } - else - { - WriteByte((byte)length); - } - } - - internal void WriteEncoded( - int tag, - byte[] bytes) - { - WriteByte((byte)tag); - WriteLength(bytes.Length); - Write(bytes, 0, bytes.Length); - } - - internal void WriteEncoded( - int tag, - byte first, - byte[] bytes) - { - WriteByte((byte)tag); - WriteLength(bytes.Length + 1); - WriteByte(first); - Write(bytes, 0, bytes.Length); - } - - internal void WriteEncoded( - int tag, - byte[] bytes, - int offset, - int length) - { - WriteByte((byte)tag); - WriteLength(length); - Write(bytes, offset, length); - } - - internal void WriteTag( - int flags, - int tagNo) - { - if (tagNo < 31) - { - WriteByte((byte)(flags | tagNo)); - } - else - { - WriteByte((byte)(flags | 0x1f)); - if (tagNo < 128) - { - WriteByte((byte)tagNo); - } - else - { - byte[] stack = new byte[5]; - int pos = stack.Length; - - stack[--pos] = (byte)(tagNo & 0x7F); - - do - { - tagNo >>= 7; - stack[--pos] = (byte)(tagNo & 0x7F | 0x80); - } - while (tagNo > 127); - - Write(stack, pos, stack.Length - pos); - } - } - } - - internal void WriteEncoded( - int flags, - int tagNo, - byte[] bytes) - { - WriteTag(flags, tagNo); - WriteLength(bytes.Length); - Write(bytes, 0, bytes.Length); - } - - protected void WriteNull() - { - WriteByte(Asn1Tags.Null); - WriteByte(0x00); - } - - [Obsolete("Use version taking an Asn1Encodable arg instead")] - public virtual void WriteObject( - object obj) - { - if (obj == null) - { - WriteNull(); - } - else if (obj is Asn1Object) - { - ((Asn1Object)obj).Encode(this); - } - else if (obj is Asn1Encodable) - { - ((Asn1Encodable)obj).ToAsn1Object().Encode(this); - } - else - { - throw new IOException("object not Asn1Object"); - } - } - - public virtual void WriteObject( - Asn1Encodable obj) - { - if (obj == null) - { - WriteNull(); - } - else - { - obj.ToAsn1Object().Encode(this); - } - } - - public virtual void WriteObject( - Asn1Object obj) - { - if (obj == null) - { - WriteNull(); - } - else - { - obj.Encode(this); - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DerPrintableString.cs b/bc-sharp-crypto/src/asn1/DerPrintableString.cs deleted file mode 100644 index e179734..0000000 --- a/bc-sharp-crypto/src/asn1/DerPrintableString.cs +++ /dev/null @@ -1,163 +0,0 @@ -using System; -using System.Text; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1 -{ - /** - * Der PrintableString object. - */ - public class DerPrintableString - : DerStringBase - { - private readonly string str; - - /** - * return a printable string from the passed in object. - * - * @exception ArgumentException if the object cannot be converted. - */ - public static DerPrintableString GetInstance( - object obj) - { - if (obj == null || obj is DerPrintableString) - { - return (DerPrintableString)obj; - } - - throw new ArgumentException("illegal object in GetInstance: " + Platform.GetTypeName(obj)); - } - - /** - * return a Printable string from a tagged object. - * - * @param obj the tagged object holding the object we want - * @param explicitly true if the object is meant to be explicitly - * tagged false otherwise. - * @exception ArgumentException if the tagged object cannot - * be converted. - */ - public static DerPrintableString GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - Asn1Object o = obj.GetObject(); - - if (isExplicit || o is DerPrintableString) - { - return GetInstance(o); - } - - return new DerPrintableString(Asn1OctetString.GetInstance(o).GetOctets()); - } - - /** - * basic constructor - byte encoded string. - */ - public DerPrintableString( - byte[] str) - : this(Strings.FromAsciiByteArray(str), false) - { - } - - /** - * basic constructor - this does not validate the string - */ - public DerPrintableString( - string str) - : this(str, false) - { - } - - /** - * Constructor with optional validation. - * - * @param string the base string to wrap. - * @param validate whether or not to check the string. - * @throws ArgumentException if validate is true and the string - * contains characters that should not be in a PrintableString. - */ - public DerPrintableString( - string str, - bool validate) - { - if (str == null) - throw new ArgumentNullException("str"); - if (validate && !IsPrintableString(str)) - throw new ArgumentException("string contains illegal characters", "str"); - - this.str = str; - } - - public override string GetString() - { - return str; - } - - public byte[] GetOctets() - { - return Strings.ToAsciiByteArray(str); - } - - internal override void Encode( - DerOutputStream derOut) - { - derOut.WriteEncoded(Asn1Tags.PrintableString, GetOctets()); - } - - protected override bool Asn1Equals( - Asn1Object asn1Object) - { - DerPrintableString other = asn1Object as DerPrintableString; - - if (other == null) - return false; - - return this.str.Equals(other.str); - } - - /** - * return true if the passed in String can be represented without - * loss as a PrintableString, false otherwise. - * - * @return true if in printable set, false otherwise. - */ - public static bool IsPrintableString( - string str) - { - foreach (char ch in str) - { - if (ch > 0x007f) - return false; - - if (char.IsLetterOrDigit(ch)) - continue; - -// if (char.IsPunctuation(ch)) -// continue; - - switch (ch) - { - case ' ': - case '\'': - case '(': - case ')': - case '+': - case '-': - case '.': - case ':': - case '=': - case '?': - case '/': - case ',': - continue; - } - - return false; - } - - return true; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DerSequence.cs b/bc-sharp-crypto/src/asn1/DerSequence.cs deleted file mode 100644 index a76cf28..0000000 --- a/bc-sharp-crypto/src/asn1/DerSequence.cs +++ /dev/null @@ -1,88 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1 -{ - public class DerSequence - : Asn1Sequence - { - public static readonly DerSequence Empty = new DerSequence(); - - public static DerSequence FromVector( - Asn1EncodableVector v) - { - return v.Count < 1 ? Empty : new DerSequence(v); - } - - /** - * create an empty sequence - */ - public DerSequence() - : base(0) - { - } - - /** - * create a sequence containing one object - */ - public DerSequence( - Asn1Encodable obj) - : base(1) - { - AddObject(obj); - } - - public DerSequence( - params Asn1Encodable[] v) - : base(v.Length) - { - foreach (Asn1Encodable ae in v) - { - AddObject(ae); - } - } - - /** - * create a sequence containing a vector of objects. - */ - public DerSequence( - Asn1EncodableVector v) - : base(v.Count) - { - foreach (Asn1Encodable ae in v) - { - AddObject(ae); - } - } - - /* - * A note on the implementation: - *

- * As Der requires the constructed, definite-length model to - * be used for structured types, this varies slightly from the - * ASN.1 descriptions given. Rather than just outputing Sequence, - * we also have to specify Constructed, and the objects length. - */ - internal override void Encode( - DerOutputStream derOut) - { - // TODO Intermediate buffer could be avoided if we could calculate expected length - MemoryStream bOut = new MemoryStream(); - DerOutputStream dOut = new DerOutputStream(bOut); - - foreach (Asn1Encodable obj in this) - { - dOut.WriteObject(obj); - } - - Platform.Dispose(dOut); - - byte[] bytes = bOut.ToArray(); - - derOut.WriteEncoded(Asn1Tags.Sequence | Asn1Tags.Constructed, bytes); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DerSet.cs b/bc-sharp-crypto/src/asn1/DerSet.cs deleted file mode 100644 index 3df1a67..0000000 --- a/bc-sharp-crypto/src/asn1/DerSet.cs +++ /dev/null @@ -1,111 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1 -{ - /** - * A Der encoded set object - */ - public class DerSet - : Asn1Set - { - public static readonly DerSet Empty = new DerSet(); - - public static DerSet FromVector( - Asn1EncodableVector v) - { - return v.Count < 1 ? Empty : new DerSet(v); - } - - internal static DerSet FromVector( - Asn1EncodableVector v, - bool needsSorting) - { - return v.Count < 1 ? Empty : new DerSet(v, needsSorting); - } - - /** - * create an empty set - */ - public DerSet() - : base(0) - { - } - - /** - * @param obj - a single object that makes up the set. - */ - public DerSet( - Asn1Encodable obj) - : base(1) - { - AddObject(obj); - } - - public DerSet( - params Asn1Encodable[] v) - : base(v.Length) - { - foreach (Asn1Encodable o in v) - { - AddObject(o); - } - - Sort(); - } - - /** - * @param v - a vector of objects making up the set. - */ - public DerSet( - Asn1EncodableVector v) - : this(v, true) - { - } - - internal DerSet( - Asn1EncodableVector v, - bool needsSorting) - : base(v.Count) - { - foreach (Asn1Encodable o in v) - { - AddObject(o); - } - - if (needsSorting) - { - Sort(); - } - } - - /* - * A note on the implementation: - *

- * As Der requires the constructed, definite-length model to - * be used for structured types, this varies slightly from the - * ASN.1 descriptions given. Rather than just outputing Set, - * we also have to specify Constructed, and the objects length. - */ - internal override void Encode( - DerOutputStream derOut) - { - // TODO Intermediate buffer could be avoided if we could calculate expected length - MemoryStream bOut = new MemoryStream(); - DerOutputStream dOut = new DerOutputStream(bOut); - - foreach (Asn1Encodable obj in this) - { - dOut.WriteObject(obj); - } - - Platform.Dispose(dOut); - - byte[] bytes = bOut.ToArray(); - - derOut.WriteEncoded(Asn1Tags.Set | Asn1Tags.Constructed, bytes); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DerStringBase.cs b/bc-sharp-crypto/src/asn1/DerStringBase.cs deleted file mode 100644 index 2a5fb04..0000000 --- a/bc-sharp-crypto/src/asn1/DerStringBase.cs +++ /dev/null @@ -1,22 +0,0 @@ -namespace Org.BouncyCastle.Asn1 -{ - public abstract class DerStringBase - : Asn1Object, IAsn1String - { - protected DerStringBase() - { - } - - public abstract string GetString(); - - public override string ToString() - { - return GetString(); - } - - protected override int Asn1GetHashCode() - { - return GetString().GetHashCode(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DerT61String.cs b/bc-sharp-crypto/src/asn1/DerT61String.cs deleted file mode 100644 index 746ccfe..0000000 --- a/bc-sharp-crypto/src/asn1/DerT61String.cs +++ /dev/null @@ -1,102 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1 -{ - /** - * Der T61String (also the teletex string) - 8-bit characters - */ - public class DerT61String - : DerStringBase - { - private readonly string str; - - /** - * return a T61 string from the passed in object. - * - * @exception ArgumentException if the object cannot be converted. - */ - public static DerT61String GetInstance( - object obj) - { - if (obj == null || obj is DerT61String) - { - return (DerT61String)obj; - } - - throw new ArgumentException("illegal object in GetInstance: " + Platform.GetTypeName(obj)); - } - - /** - * return an T61 string from a tagged object. - * - * @param obj the tagged object holding the object we want - * @param explicitly true if the object is meant to be explicitly - * tagged false otherwise. - * @exception ArgumentException if the tagged object cannot - * be converted. - */ - public static DerT61String GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - Asn1Object o = obj.GetObject(); - - if (isExplicit || o is DerT61String) - { - return GetInstance(o); - } - - return new DerT61String(Asn1OctetString.GetInstance(o).GetOctets()); - } - - /** - * basic constructor - with bytes. - */ - public DerT61String( - byte[] str) - : this(Strings.FromByteArray(str)) - { - } - - /** - * basic constructor - with string. - */ - public DerT61String( - string str) - { - if (str == null) - throw new ArgumentNullException("str"); - - this.str = str; - } - - public override string GetString() - { - return str; - } - - internal override void Encode( - DerOutputStream derOut) - { - derOut.WriteEncoded(Asn1Tags.T61String, GetOctets()); - } - - public byte[] GetOctets() - { - return Strings.ToByteArray(str); - } - - protected override bool Asn1Equals( - Asn1Object asn1Object) - { - DerT61String other = asn1Object as DerT61String; - - if (other == null) - return false; - - return this.str.Equals(other.str); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DerTaggedObject.cs b/bc-sharp-crypto/src/asn1/DerTaggedObject.cs deleted file mode 100644 index 717d724..0000000 --- a/bc-sharp-crypto/src/asn1/DerTaggedObject.cs +++ /dev/null @@ -1,72 +0,0 @@ -namespace Org.BouncyCastle.Asn1 -{ - /** - * DER TaggedObject - in ASN.1 notation this is any object preceded by - * a [n] where n is some number - these are assumed to follow the construction - * rules (as with sequences). - */ - public class DerTaggedObject - : Asn1TaggedObject - { - /** - * @param tagNo the tag number for this object. - * @param obj the tagged object. - */ - public DerTaggedObject( - int tagNo, - Asn1Encodable obj) - : base(tagNo, obj) - { - } - - /** - * @param explicitly true if an explicitly tagged object. - * @param tagNo the tag number for this object. - * @param obj the tagged object. - */ - public DerTaggedObject( - bool explicitly, - int tagNo, - Asn1Encodable obj) - : base(explicitly, tagNo, obj) - { - } - - /** - * create an implicitly tagged object that contains a zero - * length sequence. - */ - public DerTaggedObject( - int tagNo) - : base(false, tagNo, DerSequence.Empty) - { - } - - internal override void Encode( - DerOutputStream derOut) - { - if (!IsEmpty()) - { - byte[] bytes = obj.GetDerEncoded(); - - if (explicitly) - { - derOut.WriteEncoded(Asn1Tags.Constructed | Asn1Tags.Tagged, tagNo, bytes); - } - else - { - // - // need to mark constructed types... (preserve Constructed tag) - // - int flags = (bytes[0] & Asn1Tags.Constructed) | Asn1Tags.Tagged; - derOut.WriteTag(flags, tagNo); - derOut.Write(bytes, 1, bytes.Length - 1); - } - } - else - { - derOut.WriteEncoded(Asn1Tags.Constructed | Asn1Tags.Tagged, tagNo, new byte[0]); - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DerUTCTime.cs b/bc-sharp-crypto/src/asn1/DerUTCTime.cs deleted file mode 100644 index 99af8bf..0000000 --- a/bc-sharp-crypto/src/asn1/DerUTCTime.cs +++ /dev/null @@ -1,267 +0,0 @@ -using System; -using System.Globalization; -using System.Text; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1 -{ - /** - * UTC time object. - */ - public class DerUtcTime - : Asn1Object - { - private readonly string time; - - /** - * return an UTC Time from the passed in object. - * - * @exception ArgumentException if the object cannot be converted. - */ - public static DerUtcTime GetInstance( - object obj) - { - if (obj == null || obj is DerUtcTime) - { - return (DerUtcTime)obj; - } - - throw new ArgumentException("illegal object in GetInstance: " + Platform.GetTypeName(obj)); - } - - /** - * return an UTC Time from a tagged object. - * - * @param obj the tagged object holding the object we want - * @param explicitly true if the object is meant to be explicitly - * tagged false otherwise. - * @exception ArgumentException if the tagged object cannot - * be converted. - */ - public static DerUtcTime GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - Asn1Object o = obj.GetObject(); - - if (isExplicit || o is DerUtcTime) - { - return GetInstance(o); - } - - return new DerUtcTime(((Asn1OctetString)o).GetOctets()); - } - - /** - * The correct format for this is YYMMDDHHMMSSZ (it used to be that seconds were - * never encoded. When you're creating one of these objects from scratch, that's - * what you want to use, otherwise we'll try to deal with whatever Gets read from - * the input stream... (this is why the input format is different from the GetTime() - * method output). - *

- * @param time the time string.

- */ - public DerUtcTime( - string time) - { - if (time == null) - throw new ArgumentNullException("time"); - - this.time = time; - - try - { - ToDateTime(); - } - catch (FormatException e) - { - throw new ArgumentException("invalid date string: " + e.Message); - } - } - - /** - * base constructor from a DateTime object - */ - public DerUtcTime( - DateTime time) - { -#if PORTABLE - this.time = time.ToUniversalTime().ToString("yyMMddHHmmss", CultureInfo.InvariantCulture) + "Z"; -#else - this.time = time.ToString("yyMMddHHmmss", CultureInfo.InvariantCulture) + "Z"; -#endif - } - - internal DerUtcTime( - byte[] bytes) - { - // - // explicitly convert to characters - // - this.time = Strings.FromAsciiByteArray(bytes); - } - -// public DateTime ToDateTime() -// { -// string tm = this.AdjustedTimeString; -// -// return new DateTime( -// Int16.Parse(tm.Substring(0, 4)), -// Int16.Parse(tm.Substring(4, 2)), -// Int16.Parse(tm.Substring(6, 2)), -// Int16.Parse(tm.Substring(8, 2)), -// Int16.Parse(tm.Substring(10, 2)), -// Int16.Parse(tm.Substring(12, 2))); -// } - - /** - * return the time as a date based on whatever a 2 digit year will return. For - * standardised processing use ToAdjustedDateTime(). - * - * @return the resulting date - * @exception ParseException if the date string cannot be parsed. - */ - public DateTime ToDateTime() - { - return ParseDateString(TimeString, @"yyMMddHHmmss'GMT'zzz"); - } - - /** - * return the time as an adjusted date - * in the range of 1950 - 2049. - * - * @return a date in the range of 1950 to 2049. - * @exception ParseException if the date string cannot be parsed. - */ - public DateTime ToAdjustedDateTime() - { - return ParseDateString(AdjustedTimeString, @"yyyyMMddHHmmss'GMT'zzz"); - } - - private DateTime ParseDateString( - string dateStr, - string formatStr) - { - DateTime dt = DateTime.ParseExact( - dateStr, - formatStr, - DateTimeFormatInfo.InvariantInfo); - - return dt.ToUniversalTime(); - } - - /** - * return the time - always in the form of - * YYMMDDhhmmssGMT(+hh:mm|-hh:mm). - *

- * Normally in a certificate we would expect "Z" rather than "GMT", - * however adding the "GMT" means we can just use: - * 

-         *     dateF = new SimpleDateFormat("yyMMddHHmmssz");
-         *
- * To read in the time and Get a date which is compatible with our local - * time zone.

- *

- * Note: In some cases, due to the local date processing, this - * may lead to unexpected results. If you want to stick the normal - * convention of 1950 to 2049 use the GetAdjustedTime() method.

- */ - public string TimeString - { - get - { - // - // standardise the format. - // - if (time.IndexOf('-') < 0 && time.IndexOf('+') < 0) - { - if (time.Length == 11) - { - return time.Substring(0, 10) + "00GMT+00:00"; - } - else - { - return time.Substring(0, 12) + "GMT+00:00"; - } - } - else - { - int index = time.IndexOf('-'); - if (index < 0) - { - index = time.IndexOf('+'); - } - string d = time; - - if (index == time.Length - 3) - { - d += "00"; - } - - if (index == 10) - { - return d.Substring(0, 10) + "00GMT" + d.Substring(10, 3) + ":" + d.Substring(13, 2); - } - else - { - return d.Substring(0, 12) + "GMT" + d.Substring(12, 3) + ":" + d.Substring(15, 2); - } - } - } - } - - [Obsolete("Use 'AdjustedTimeString' property instead")] - public string AdjustedTime - { - get { return AdjustedTimeString; } - } - - /// - /// Return a time string as an adjusted date with a 4 digit year. - /// This goes in the range of 1950 - 2049. - /// - public string AdjustedTimeString - { - get - { - string d = TimeString; - string c = d[0] < '5' ? "20" : "19"; - - return c + d; - } - } - - private byte[] GetOctets() - { - return Strings.ToAsciiByteArray(time); - } - - internal override void Encode( - DerOutputStream derOut) - { - derOut.WriteEncoded(Asn1Tags.UtcTime, GetOctets()); - } - - protected override bool Asn1Equals( - Asn1Object asn1Object) - { - DerUtcTime other = asn1Object as DerUtcTime; - - if (other == null) - return false; - - return this.time.Equals(other.time); - } - - protected override int Asn1GetHashCode() - { - return time.GetHashCode(); - } - - public override string ToString() - { - return time; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DerUTF8String.cs b/bc-sharp-crypto/src/asn1/DerUTF8String.cs deleted file mode 100644 index 758a506..0000000 --- a/bc-sharp-crypto/src/asn1/DerUTF8String.cs +++ /dev/null @@ -1,98 +0,0 @@ -using System; -using System.Text; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1 -{ - /** - * Der UTF8String object. - */ - public class DerUtf8String - : DerStringBase - { - private readonly string str; - - /** - * return an UTF8 string from the passed in object. - * - * @exception ArgumentException if the object cannot be converted. - */ - public static DerUtf8String GetInstance( - object obj) - { - if (obj == null || obj is DerUtf8String) - { - return (DerUtf8String)obj; - } - - throw new ArgumentException("illegal object in GetInstance: " + Platform.GetTypeName(obj)); - } - - /** - * return an UTF8 string from a tagged object. - * - * @param obj the tagged object holding the object we want - * @param explicitly true if the object is meant to be explicitly - * tagged false otherwise. - * @exception ArgumentException if the tagged object cannot - * be converted. - */ - public static DerUtf8String GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - Asn1Object o = obj.GetObject(); - - if (isExplicit || o is DerUtf8String) - { - return GetInstance(o); - } - - return new DerUtf8String(Asn1OctetString.GetInstance(o).GetOctets()); - } - - /** - * basic constructor - byte encoded string. - */ - public DerUtf8String( - byte[] str) - : this(Encoding.UTF8.GetString(str, 0, str.Length)) - { - } - - /** - * basic constructor - */ - public DerUtf8String( - string str) - { - if (str == null) - throw new ArgumentNullException("str"); - - this.str = str; - } - - public override string GetString() - { - return str; - } - - protected override bool Asn1Equals( - Asn1Object asn1Object) - { - DerUtf8String other = asn1Object as DerUtf8String; - - if (other == null) - return false; - - return this.str.Equals(other.str); - } - - internal override void Encode( - DerOutputStream derOut) - { - derOut.WriteEncoded(Asn1Tags.Utf8String, Encoding.UTF8.GetBytes(str)); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DerUniversalString.cs b/bc-sharp-crypto/src/asn1/DerUniversalString.cs deleted file mode 100644 index 284d0f8..0000000 --- a/bc-sharp-crypto/src/asn1/DerUniversalString.cs +++ /dev/null @@ -1,107 +0,0 @@ -using System; -using System.Text; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1 -{ - /** - * Der UniversalString object. - */ - public class DerUniversalString - : DerStringBase - { - private static readonly char[] table = { '0', '1', '2', '3', '4', '5', '6', '7', '8', '9', 'A', 'B', 'C', 'D', 'E', 'F' }; - - private readonly byte[] str; - - /** - * return a Universal string from the passed in object. - * - * @exception ArgumentException if the object cannot be converted. - */ - public static DerUniversalString GetInstance( - object obj) - { - if (obj == null || obj is DerUniversalString) - { - return (DerUniversalString)obj; - } - - throw new ArgumentException("illegal object in GetInstance: " + Platform.GetTypeName(obj)); - } - - /** - * return a Universal string from a tagged object. - * - * @param obj the tagged object holding the object we want - * @param explicitly true if the object is meant to be explicitly - * tagged false otherwise. - * @exception ArgumentException if the tagged object cannot - * be converted. - */ - public static DerUniversalString GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - Asn1Object o = obj.GetObject(); - - if (isExplicit || o is DerUniversalString) - { - return GetInstance(o); - } - - return new DerUniversalString(Asn1OctetString.GetInstance(o).GetOctets()); - } - - /** - * basic constructor - byte encoded string. - */ - public DerUniversalString( - byte[] str) - { - if (str == null) - throw new ArgumentNullException("str"); - - this.str = str; - } - - public override string GetString() - { - StringBuilder buffer = new StringBuilder("#"); - byte[] enc = GetDerEncoded(); - - for (int i = 0; i != enc.Length; i++) - { - uint ubyte = enc[i]; - buffer.Append(table[(ubyte >> 4) & 0xf]); - buffer.Append(table[enc[i] & 0xf]); - } - - return buffer.ToString(); - } - - public byte[] GetOctets() - { - return (byte[]) str.Clone(); - } - - internal override void Encode( - DerOutputStream derOut) - { - derOut.WriteEncoded(Asn1Tags.UniversalString, this.str); - } - - protected override bool Asn1Equals( - Asn1Object asn1Object) - { - DerUniversalString other = asn1Object as DerUniversalString; - - if (other == null) - return false; - -// return this.GetString().Equals(other.GetString()); - return Arrays.AreEqual(this.str, other.str); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DerVideotexString.cs b/bc-sharp-crypto/src/asn1/DerVideotexString.cs deleted file mode 100644 index b254010..0000000 --- a/bc-sharp-crypto/src/asn1/DerVideotexString.cs +++ /dev/null @@ -1,103 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1 -{ - public class DerVideotexString - : DerStringBase - { - private readonly byte[] mString; - - /** - * return a Videotex String from the passed in object - * - * @param obj a DERVideotexString or an object that can be converted into one. - * @exception IllegalArgumentException if the object cannot be converted. - * @return a DERVideotexString instance, or null. - */ - public static DerVideotexString GetInstance(object obj) - { - if (obj == null || obj is DerVideotexString) - { - return (DerVideotexString)obj; - } - - if (obj is byte[]) - { - try - { - return (DerVideotexString)FromByteArray((byte[])obj); - } - catch (Exception e) - { - throw new ArgumentException("encoding error in GetInstance: " + e.ToString(), "obj"); - } - } - - throw new ArgumentException("illegal object in GetInstance: " + Platform.GetTypeName(obj), "obj"); - } - - /** - * return a Videotex String from a tagged object. - * - * @param obj the tagged object holding the object we want - * @param explicit true if the object is meant to be explicitly - * tagged false otherwise. - * @exception IllegalArgumentException if the tagged object cannot - * be converted. - * @return a DERVideotexString instance, or null. - */ - public static DerVideotexString GetInstance(Asn1TaggedObject obj, bool isExplicit) - { - Asn1Object o = obj.GetObject(); - - if (isExplicit || o is DerVideotexString) - { - return GetInstance(o); - } - - return new DerVideotexString(((Asn1OctetString)o).GetOctets()); - } - - /** - * basic constructor - with bytes. - * @param string the byte encoding of the characters making up the string. - */ - public DerVideotexString(byte[] encoding) - { - this.mString = Arrays.Clone(encoding); - } - - public override string GetString() - { - return Strings.FromByteArray(mString); - } - - public byte[] GetOctets() - { - return Arrays.Clone(mString); - } - - internal override void Encode(DerOutputStream derOut) - { - derOut.WriteEncoded(Asn1Tags.VideotexString, mString); - } - - protected override int Asn1GetHashCode() - { - return Arrays.GetHashCode(mString); - } - - protected override bool Asn1Equals( - Asn1Object asn1Object) - { - DerVideotexString other = asn1Object as DerVideotexString; - - if (other == null) - return false; - - return Arrays.AreEqual(mString, other.mString); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/DerVisibleString.cs b/bc-sharp-crypto/src/asn1/DerVisibleString.cs deleted file mode 100644 index e111220..0000000 --- a/bc-sharp-crypto/src/asn1/DerVisibleString.cs +++ /dev/null @@ -1,111 +0,0 @@ -using System; -using System.Text; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1 -{ - /** - * Der VisibleString object. - */ - public class DerVisibleString - : DerStringBase - { - private readonly string str; - - /** - * return a Visible string from the passed in object. - * - * @exception ArgumentException if the object cannot be converted. - */ - public static DerVisibleString GetInstance( - object obj) - { - if (obj == null || obj is DerVisibleString) - { - return (DerVisibleString)obj; - } - - if (obj is Asn1OctetString) - { - return new DerVisibleString(((Asn1OctetString)obj).GetOctets()); - } - - if (obj is Asn1TaggedObject) - { - return GetInstance(((Asn1TaggedObject)obj).GetObject()); - } - - throw new ArgumentException("illegal object in GetInstance: " + Platform.GetTypeName(obj)); - } - - /** - * return a Visible string from a tagged object. - * - * @param obj the tagged object holding the object we want - * @param explicitly true if the object is meant to be explicitly - * tagged false otherwise. - * @exception ArgumentException if the tagged object cannot - * be converted. - */ - public static DerVisibleString GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(obj.GetObject()); - } - - /** - * basic constructor - byte encoded string. - */ - public DerVisibleString( - byte[] str) - : this(Strings.FromAsciiByteArray(str)) - { - } - - /** - * basic constructor - */ - public DerVisibleString( - string str) - { - if (str == null) - throw new ArgumentNullException("str"); - - this.str = str; - } - - public override string GetString() - { - return str; - } - - public byte[] GetOctets() - { - return Strings.ToAsciiByteArray(str); - } - - internal override void Encode( - DerOutputStream derOut) - { - derOut.WriteEncoded(Asn1Tags.VisibleString, GetOctets()); - } - - protected override bool Asn1Equals( - Asn1Object asn1Object) - { - DerVisibleString other = asn1Object as DerVisibleString; - - if (other == null) - return false; - - return this.str.Equals(other.str); - } - - protected override int Asn1GetHashCode() - { - return this.str.GetHashCode(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/IAsn1ApplicationSpecificParser.cs b/bc-sharp-crypto/src/asn1/IAsn1ApplicationSpecificParser.cs deleted file mode 100644 index 89cf64c..0000000 --- a/bc-sharp-crypto/src/asn1/IAsn1ApplicationSpecificParser.cs +++ /dev/null @@ -1,10 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1 -{ - public interface IAsn1ApplicationSpecificParser - : IAsn1Convertible - { - IAsn1Convertible ReadObject(); - } -} diff --git a/bc-sharp-crypto/src/asn1/IAsn1Choice.cs b/bc-sharp-crypto/src/asn1/IAsn1Choice.cs deleted file mode 100644 index ecd76e4..0000000 --- a/bc-sharp-crypto/src/asn1/IAsn1Choice.cs +++ /dev/null @@ -1,17 +0,0 @@ - -namespace Org.BouncyCastle.Asn1 -{ - /** - * Marker interface for CHOICE objects - if you implement this in a roll-your-own - * object, any attempt to tag the object implicitly will convert the tag to an - * explicit one as the encoding rules require. - *

- * If you use this interface your class should also implement the getInstance - * pattern which takes a tag object and the tagging mode used. - *

- */ - public interface IAsn1Choice - { - // marker interface - } -} diff --git a/bc-sharp-crypto/src/asn1/IAsn1Convertible.cs b/bc-sharp-crypto/src/asn1/IAsn1Convertible.cs deleted file mode 100644 index d3f83af..0000000 --- a/bc-sharp-crypto/src/asn1/IAsn1Convertible.cs +++ /dev/null @@ -1,7 +0,0 @@ -namespace Org.BouncyCastle.Asn1 -{ - public interface IAsn1Convertible - { - Asn1Object ToAsn1Object(); - } -} diff --git a/bc-sharp-crypto/src/asn1/IAsn1String.cs b/bc-sharp-crypto/src/asn1/IAsn1String.cs deleted file mode 100644 index cbc2635..0000000 --- a/bc-sharp-crypto/src/asn1/IAsn1String.cs +++ /dev/null @@ -1,10 +0,0 @@ -namespace Org.BouncyCastle.Asn1 -{ - /** - * basic interface for Der string objects. - */ - public interface IAsn1String - { - string GetString(); - } -} diff --git a/bc-sharp-crypto/src/asn1/IndefiniteLengthInputStream.cs b/bc-sharp-crypto/src/asn1/IndefiniteLengthInputStream.cs deleted file mode 100644 index 09d0e3a..0000000 --- a/bc-sharp-crypto/src/asn1/IndefiniteLengthInputStream.cs +++ /dev/null @@ -1,170 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Asn1 -{ - class IndefiniteLengthInputStream - : LimitedInputStream - { - private int _lookAhead; - private bool _eofOn00 = true; - - internal IndefiniteLengthInputStream( - Stream inStream, - int limit) - : base(inStream, limit) - { - _lookAhead = RequireByte(); - CheckForEof(); - } - - internal void SetEofOn00( - bool eofOn00) - { - _eofOn00 = eofOn00; - if (_eofOn00) - { - CheckForEof(); - } - } - - private bool CheckForEof() - { - if (_lookAhead == 0x00) - { - int extra = RequireByte(); - if (extra != 0) - { - throw new IOException("malformed end-of-contents marker"); - } - - _lookAhead = -1; - SetParentEofDetect(true); - return true; - } - return _lookAhead < 0; - } - - public override int Read( - byte[] buffer, - int offset, - int count) - { - // Only use this optimisation if we aren't checking for 00 - if (_eofOn00 || count <= 1) - return base.Read(buffer, offset, count); - - if (_lookAhead < 0) - return 0; - - int numRead = _in.Read(buffer, offset + 1, count - 1); - - if (numRead <= 0) - { - // Corrupted stream - throw new EndOfStreamException(); - } - - buffer[offset] = (byte)_lookAhead; - _lookAhead = RequireByte(); - - return numRead + 1; - } - - public override int ReadByte() - { - if (_eofOn00 && CheckForEof()) - return -1; - - int result = _lookAhead; - _lookAhead = RequireByte(); - return result; - } - - private int RequireByte() - { - int b = _in.ReadByte(); - if (b < 0) - { - // Corrupted stream - throw new EndOfStreamException(); - } - return b; - } - } -} - -//using System; -//using System.IO; - -//namespace Org.BouncyCastle.Asn1 -//{ -// class IndefiniteLengthInputStream -// : LimitedInputStream -// { -// private bool _eofReached = false; -// private bool _eofOn00 = true; - -// internal IndefiniteLengthInputStream( -// Stream inStream, -// int limit) -// : base(inStream, limit) -// { -// } - -// internal void SetEofOn00( -// bool eofOn00) -// { -// _eofOn00 = eofOn00; -// } - -// public override int Read( -// byte[] buffer, -// int offset, -// int count) -// { -// if (_eofReached) -// return 0; - -// if (_eofOn00) -// return base.Read(buffer, offset, count); - -// int numRead = _in.Read(buffer, offset, count); - -// if (numRead <= 0) -// throw new EndOfStreamException(); - -// return numRead; -// } - -// public override int ReadByte() -// { -// if (_eofReached) -// return -1; - -// int b1 = _in.ReadByte(); - -// if (b1 < 0) -// throw new EndOfStreamException(); - -// if (b1 == 0 && _eofOn00) -// { -// int b2 = _in.ReadByte(); - -// if (b2 < 0) -// throw new EndOfStreamException(); - -// if (b2 == 0) -// { -// _eofReached = true; -// SetParentEofDetect(true); -// return -1; -// } - -// throw new InvalidDataException(); -// } - -// return b1; -// } -// } -//} diff --git a/bc-sharp-crypto/src/asn1/LazyASN1InputStream.cs b/bc-sharp-crypto/src/asn1/LazyASN1InputStream.cs deleted file mode 100644 index 4cf2305..0000000 --- a/bc-sharp-crypto/src/asn1/LazyASN1InputStream.cs +++ /dev/null @@ -1,33 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Asn1 -{ - public class LazyAsn1InputStream - : Asn1InputStream - { - public LazyAsn1InputStream( - byte[] input) - : base(input) - { - } - - public LazyAsn1InputStream( - Stream inputStream) - : base(inputStream) - { - } - - internal override DerSequence CreateDerSequence( - DefiniteLengthInputStream dIn) - { - return new LazyDerSequence(dIn.ToArray()); - } - - internal override DerSet CreateDerSet( - DefiniteLengthInputStream dIn) - { - return new LazyDerSet(dIn.ToArray()); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/LazyDERSequence.cs b/bc-sharp-crypto/src/asn1/LazyDERSequence.cs deleted file mode 100644 index 7301bc1..0000000 --- a/bc-sharp-crypto/src/asn1/LazyDERSequence.cs +++ /dev/null @@ -1,80 +0,0 @@ -using System; -using System.Collections; -using System.Diagnostics; - -namespace Org.BouncyCastle.Asn1 -{ - internal class LazyDerSequence - : DerSequence - { - private byte[] encoded; - - internal LazyDerSequence( - byte[] encoded) - { - this.encoded = encoded; - } - - private void Parse() - { - lock (this) - { - if (encoded != null) - { - Asn1InputStream e = new LazyAsn1InputStream(encoded); - - Asn1Object o; - while ((o = e.ReadObject()) != null) - { - AddObject(o); - } - - encoded = null; - } - } - } - - public override Asn1Encodable this[int index] - { - get - { - Parse(); - - return base[index]; - } - } - - public override IEnumerator GetEnumerator() - { - Parse(); - - return base.GetEnumerator(); - } - - public override int Count - { - get - { - Parse(); - - return base.Count; - } - } - - internal override void Encode( - DerOutputStream derOut) - { - lock (this) - { - if (encoded == null) - { - base.Encode(derOut); - } - else - { - derOut.WriteEncoded(Asn1Tags.Sequence | Asn1Tags.Constructed, encoded); - } - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/LazyDERSet.cs b/bc-sharp-crypto/src/asn1/LazyDERSet.cs deleted file mode 100644 index e6c9319..0000000 --- a/bc-sharp-crypto/src/asn1/LazyDERSet.cs +++ /dev/null @@ -1,80 +0,0 @@ -using System; -using System.Collections; -using System.Diagnostics; - -namespace Org.BouncyCastle.Asn1 -{ - internal class LazyDerSet - : DerSet - { - private byte[] encoded; - - internal LazyDerSet( - byte[] encoded) - { - this.encoded = encoded; - } - - private void Parse() - { - lock (this) - { - if (encoded != null) - { - Asn1InputStream e = new LazyAsn1InputStream(encoded); - - Asn1Object o; - while ((o = e.ReadObject()) != null) - { - AddObject(o); - } - - encoded = null; - } - } - } - - public override Asn1Encodable this[int index] - { - get - { - Parse(); - - return base[index]; - } - } - - public override IEnumerator GetEnumerator() - { - Parse(); - - return base.GetEnumerator(); - } - - public override int Count - { - get - { - Parse(); - - return base.Count; - } - } - - internal override void Encode( - DerOutputStream derOut) - { - lock (this) - { - if (encoded == null) - { - base.Encode(derOut); - } - else - { - derOut.WriteEncoded(Asn1Tags.Set | Asn1Tags.Constructed, encoded); - } - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/LimitedInputStream.cs b/bc-sharp-crypto/src/asn1/LimitedInputStream.cs deleted file mode 100644 index 62486aa..0000000 --- a/bc-sharp-crypto/src/asn1/LimitedInputStream.cs +++ /dev/null @@ -1,35 +0,0 @@ -using System.IO; - -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Asn1 -{ - internal abstract class LimitedInputStream - : BaseInputStream - { - protected readonly Stream _in; - private int _limit; - - internal LimitedInputStream( - Stream inStream, - int limit) - { - this._in = inStream; - this._limit = limit; - } - - internal virtual int GetRemaining() - { - // TODO: maybe one day this can become more accurate - return _limit; - } - - protected virtual void SetParentEofDetect(bool on) - { - if (_in is IndefiniteLengthInputStream) - { - ((IndefiniteLengthInputStream)_in).SetEofOn00(on); - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/OidTokenizer.cs b/bc-sharp-crypto/src/asn1/OidTokenizer.cs deleted file mode 100644 index 6e76e8c..0000000 --- a/bc-sharp-crypto/src/asn1/OidTokenizer.cs +++ /dev/null @@ -1,45 +0,0 @@ -namespace Org.BouncyCastle.Asn1 -{ - /** - * class for breaking up an Oid into it's component tokens, ala - * java.util.StringTokenizer. We need this class as some of the - * lightweight Java environment don't support classes like - * StringTokenizer. - */ - public class OidTokenizer - { - private string oid; - private int index; - - public OidTokenizer( - string oid) - { - this.oid = oid; - } - - public bool HasMoreTokens - { - get { return index != -1; } - } - - public string NextToken() - { - if (index == -1) - { - return null; - } - - int end = oid.IndexOf('.', index); - if (end == -1) - { - string lastToken = oid.Substring(index); - index = -1; - return lastToken; - } - - string nextToken = oid.Substring(index, end - index); - index = end + 1; - return nextToken; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/anssi/ANSSINamedCurves.cs b/bc-sharp-crypto/src/asn1/anssi/ANSSINamedCurves.cs deleted file mode 100644 index d0c90eb..0000000 --- a/bc-sharp-crypto/src/asn1/anssi/ANSSINamedCurves.cs +++ /dev/null @@ -1,123 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Asn1.Anssi -{ - public class AnssiNamedCurves - { - private static ECCurve ConfigureCurve(ECCurve curve) - { - return curve; - } - - private static BigInteger FromHex(string hex) - { - return new BigInteger(1, Hex.Decode(hex)); - } - - /* - * FRP256v1 - */ - internal class Frp256v1Holder - : X9ECParametersHolder - { - private Frp256v1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Frp256v1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger p = FromHex("F1FD178C0B3AD58F10126DE8CE42435B3961ADBCABC8CA6DE8FCF353D86E9C03"); - BigInteger a = FromHex("F1FD178C0B3AD58F10126DE8CE42435B3961ADBCABC8CA6DE8FCF353D86E9C00"); - BigInteger b = FromHex("EE353FCA5428A9300D4ABA754A44C00FDFEC0C9AE4B1A1803075ED967B7BB73F"); - byte[] S = null; - BigInteger n = FromHex("F1FD178C0B3AD58F10126DE8CE42435B53DC67E140D2BF941FFDD459C6D655E1"); - BigInteger h = BigInteger.One; - - ECCurve curve = ConfigureCurve(new FpCurve(p, a, b, n, h)); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "B6B3D4C356C139EB31183D4749D423958C27D2DCAF98B70164C97A2DD98F5CFF" - + "6142E0F7C8B204911F9271F0F3ECEF8C2701C307E8E4C9E183115A1554062CFB")); - - return new X9ECParameters(curve, G, n, h, S); - } - }; - - - private static readonly IDictionary objIds = Platform.CreateHashtable(); - private static readonly IDictionary curves = Platform.CreateHashtable(); - private static readonly IDictionary names = Platform.CreateHashtable(); - - private static void DefineCurve( - string name, - DerObjectIdentifier oid, - X9ECParametersHolder holder) - { - objIds.Add(Platform.ToUpperInvariant(name), oid); - names.Add(oid, name); - curves.Add(oid, holder); - } - - static AnssiNamedCurves() - { - DefineCurve("FRP256v1", AnssiObjectIdentifiers.FRP256v1, Frp256v1Holder.Instance); - } - - public static X9ECParameters GetByName( - string name) - { - DerObjectIdentifier oid = GetOid(name); - return oid == null ? null : GetByOid(oid); - } - - /** - * return the X9ECParameters object for the named curve represented by - * the passed in object identifier. Null if the curve isn't present. - * - * @param oid an object identifier representing a named curve, if present. - */ - public static X9ECParameters GetByOid( - DerObjectIdentifier oid) - { - X9ECParametersHolder holder = (X9ECParametersHolder)curves[oid]; - return holder == null ? null : holder.Parameters; - } - - /** - * return the object identifier signified by the passed in name. Null - * if there is no object identifier associated with name. - * - * @return the object identifier associated with name, if present. - */ - public static DerObjectIdentifier GetOid( - string name) - { - return (DerObjectIdentifier)objIds[Platform.ToUpperInvariant(name)]; - } - - /** - * return the named curve name represented by the given object identifier. - */ - public static string GetName( - DerObjectIdentifier oid) - { - return (string)names[oid]; - } - - /** - * returns an enumeration containing the name strings for curves - * contained in this structure. - */ - public static IEnumerable Names - { - get { return new EnumerableProxy(names.Values); } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/anssi/ANSSIObjectIdentifiers.cs b/bc-sharp-crypto/src/asn1/anssi/ANSSIObjectIdentifiers.cs deleted file mode 100644 index d230832..0000000 --- a/bc-sharp-crypto/src/asn1/anssi/ANSSIObjectIdentifiers.cs +++ /dev/null @@ -1,13 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.Anssi -{ - public sealed class AnssiObjectIdentifiers - { - private AnssiObjectIdentifiers() - { - } - - public static readonly DerObjectIdentifier FRP256v1 = new DerObjectIdentifier("1.2.250.1.223.101.256.1"); - } -} diff --git a/bc-sharp-crypto/src/asn1/bc/BCObjectIdentifiers.cs b/bc-sharp-crypto/src/asn1/bc/BCObjectIdentifiers.cs deleted file mode 100644 index 075e538..0000000 --- a/bc-sharp-crypto/src/asn1/bc/BCObjectIdentifiers.cs +++ /dev/null @@ -1,39 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.BC -{ - public abstract class BCObjectIdentifiers - { - // iso.org.dod.internet.private.enterprise.legion-of-the-bouncy-castle - // 1.3.6.1.4.1.22554 - public static readonly DerObjectIdentifier bc = new DerObjectIdentifier("1.3.6.1.4.1.22554"); - - // pbe(1) algorithms - public static readonly DerObjectIdentifier bc_pbe = new DerObjectIdentifier(bc + ".1"); - - // SHA-1(1) - public static readonly DerObjectIdentifier bc_pbe_sha1 = new DerObjectIdentifier(bc_pbe + ".1"); - - // SHA-2(2) . (SHA-256(1)|SHA-384(2)|SHA-512(3)|SHA-224(4)) - public static readonly DerObjectIdentifier bc_pbe_sha256 = new DerObjectIdentifier(bc_pbe + ".2.1"); - public static readonly DerObjectIdentifier bc_pbe_sha384 = new DerObjectIdentifier(bc_pbe + ".2.2"); - public static readonly DerObjectIdentifier bc_pbe_sha512 = new DerObjectIdentifier(bc_pbe + ".2.3"); - public static readonly DerObjectIdentifier bc_pbe_sha224 = new DerObjectIdentifier(bc_pbe + ".2.4"); - - // PKCS-5(1)|PKCS-12(2) - public static readonly DerObjectIdentifier bc_pbe_sha1_pkcs5 = new DerObjectIdentifier(bc_pbe_sha1 + ".1"); - public static readonly DerObjectIdentifier bc_pbe_sha1_pkcs12 = new DerObjectIdentifier(bc_pbe_sha1 + ".2"); - - public static readonly DerObjectIdentifier bc_pbe_sha256_pkcs5 = new DerObjectIdentifier(bc_pbe_sha256 + ".1"); - public static readonly DerObjectIdentifier bc_pbe_sha256_pkcs12 = new DerObjectIdentifier(bc_pbe_sha256 + ".2"); - - // AES(1) . (CBC-128(2)|CBC-192(22)|CBC-256(42)) - public static readonly DerObjectIdentifier bc_pbe_sha1_pkcs12_aes128_cbc = new DerObjectIdentifier(bc_pbe_sha1_pkcs12 + ".1.2"); - public static readonly DerObjectIdentifier bc_pbe_sha1_pkcs12_aes192_cbc = new DerObjectIdentifier(bc_pbe_sha1_pkcs12 + ".1.22"); - public static readonly DerObjectIdentifier bc_pbe_sha1_pkcs12_aes256_cbc = new DerObjectIdentifier(bc_pbe_sha1_pkcs12 + ".1.42"); - - public static readonly DerObjectIdentifier bc_pbe_sha256_pkcs12_aes128_cbc = new DerObjectIdentifier(bc_pbe_sha256_pkcs12 + ".1.2"); - public static readonly DerObjectIdentifier bc_pbe_sha256_pkcs12_aes192_cbc = new DerObjectIdentifier(bc_pbe_sha256_pkcs12 + ".1.22"); - public static readonly DerObjectIdentifier bc_pbe_sha256_pkcs12_aes256_cbc = new DerObjectIdentifier(bc_pbe_sha256_pkcs12 + ".1.42"); - } -} \ No newline at end of file diff --git a/bc-sharp-crypto/src/asn1/cmp/CAKeyUpdAnnContent.cs b/bc-sharp-crypto/src/asn1/cmp/CAKeyUpdAnnContent.cs deleted file mode 100644 index b74bac8..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/CAKeyUpdAnnContent.cs +++ /dev/null @@ -1,62 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class CAKeyUpdAnnContent - : Asn1Encodable - { - private readonly CmpCertificate oldWithNew; - private readonly CmpCertificate newWithOld; - private readonly CmpCertificate newWithNew; - - private CAKeyUpdAnnContent(Asn1Sequence seq) - { - oldWithNew = CmpCertificate.GetInstance(seq[0]); - newWithOld = CmpCertificate.GetInstance(seq[1]); - newWithNew = CmpCertificate.GetInstance(seq[2]); - } - - public static CAKeyUpdAnnContent GetInstance(object obj) - { - if (obj is CAKeyUpdAnnContent) - return (CAKeyUpdAnnContent)obj; - - if (obj is Asn1Sequence) - return new CAKeyUpdAnnContent((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public virtual CmpCertificate OldWithNew - { - get { return oldWithNew; } - } - - public virtual CmpCertificate NewWithOld - { - get { return newWithOld; } - } - - public virtual CmpCertificate NewWithNew - { - get { return newWithNew; } - } - - /** - * 
-		 * CAKeyUpdAnnContent ::= SEQUENCE {
-		 *                             oldWithNew   CmpCertificate, -- old pub signed with new priv
-		 *                             newWithOld   CmpCertificate, -- new pub signed with old priv
-		 *                             newWithNew   CmpCertificate  -- new pub signed with new priv
-		 *  }
-		 *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(oldWithNew, newWithOld, newWithNew); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/CertConfirmContent.cs b/bc-sharp-crypto/src/asn1/cmp/CertConfirmContent.cs deleted file mode 100644 index 370a9e7..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/CertConfirmContent.cs +++ /dev/null @@ -1,49 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class CertConfirmContent - : Asn1Encodable - { - private readonly Asn1Sequence content; - - private CertConfirmContent(Asn1Sequence seq) - { - content = seq; - } - - public static CertConfirmContent GetInstance(object obj) - { - if (obj is CertConfirmContent) - return (CertConfirmContent)obj; - - if (obj is Asn1Sequence) - return new CertConfirmContent((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public virtual CertStatus[] ToCertStatusArray() - { - CertStatus[] result = new CertStatus[content.Count]; - for (int i = 0; i != result.Length; i++) - { - result[i] = CertStatus.GetInstance(content[i]); - } - return result; - } - - /** - * 
-		 * CertConfirmContent ::= SEQUENCE OF CertStatus
-		 *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - return content; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/CertOrEncCert.cs b/bc-sharp-crypto/src/asn1/cmp/CertOrEncCert.cs deleted file mode 100644 index eb200e1..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/CertOrEncCert.cs +++ /dev/null @@ -1,86 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.Crmf; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class CertOrEncCert - : Asn1Encodable, IAsn1Choice - { - private readonly CmpCertificate certificate; - private readonly EncryptedValue encryptedCert; - - private CertOrEncCert(Asn1TaggedObject tagged) - { - if (tagged.TagNo == 0) - { - certificate = CmpCertificate.GetInstance(tagged.GetObject()); - } - else if (tagged.TagNo == 1) - { - encryptedCert = EncryptedValue.GetInstance(tagged.GetObject()); - } - else - { - throw new ArgumentException("unknown tag: " + tagged.TagNo, "tagged"); - } - } - - public static CertOrEncCert GetInstance(object obj) - { - if (obj is CertOrEncCert) - return (CertOrEncCert)obj; - - if (obj is Asn1TaggedObject) - return new CertOrEncCert((Asn1TaggedObject)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public CertOrEncCert(CmpCertificate certificate) - { - if (certificate == null) - throw new ArgumentNullException("certificate"); - - this.certificate = certificate; - } - - public CertOrEncCert(EncryptedValue encryptedCert) - { - if (encryptedCert == null) - throw new ArgumentNullException("encryptedCert"); - - this.encryptedCert = encryptedCert; - } - - public virtual CmpCertificate Certificate - { - get { return certificate; } - } - - public virtual EncryptedValue EncryptedCert - { - get { return encryptedCert; } - } - - /** - * 
-		 * CertOrEncCert ::= CHOICE {
-		 *                      certificate     [0] CMPCertificate,
-		 *                      encryptedCert   [1] EncryptedValue
-		 *           }
-		 *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - if (certificate != null) - { - return new DerTaggedObject(true, 0, certificate); - } - - return new DerTaggedObject(true, 1, encryptedCert); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/CertRepMessage.cs b/bc-sharp-crypto/src/asn1/cmp/CertRepMessage.cs deleted file mode 100644 index 8286978..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/CertRepMessage.cs +++ /dev/null @@ -1,96 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class CertRepMessage - : Asn1Encodable - { - private readonly Asn1Sequence caPubs; - private readonly Asn1Sequence response; - - private CertRepMessage(Asn1Sequence seq) - { - int index = 0; - - if (seq.Count > 1) - { - caPubs = Asn1Sequence.GetInstance((Asn1TaggedObject)seq[index++], true); - } - - response = Asn1Sequence.GetInstance(seq[index]); - } - - public static CertRepMessage GetInstance(object obj) - { - if (obj is CertRepMessage) - return (CertRepMessage)obj; - - if (obj is Asn1Sequence) - return new CertRepMessage((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public CertRepMessage(CmpCertificate[] caPubs, CertResponse[] response) - { - if (response == null) - throw new ArgumentNullException("response"); - - if (caPubs != null) - { - this.caPubs = new DerSequence(caPubs); - } - - this.response = new DerSequence(response); - } - - public virtual CmpCertificate[] GetCAPubs() - { - if (caPubs == null) - return null; - - CmpCertificate[] results = new CmpCertificate[caPubs.Count]; - for (int i = 0; i != results.Length; ++i) - { - results[i] = CmpCertificate.GetInstance(caPubs[i]); - } - return results; - } - - public virtual CertResponse[] GetResponse() - { - CertResponse[] results = new CertResponse[response.Count]; - for (int i = 0; i != results.Length; ++i) - { - results[i] = CertResponse.GetInstance(response[i]); - } - return results; - } - - /** - * 
-		 * CertRepMessage ::= SEQUENCE {
-		 *                          caPubs       [1] SEQUENCE SIZE (1..MAX) OF CMPCertificate
-		 *                                                                             OPTIONAL,
-		 *                          response         SEQUENCE OF CertResponse
-		 * }
-		 *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - if (caPubs != null) - { - v.Add(new DerTaggedObject(true, 1, caPubs)); - } - - v.Add(response); - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/CertResponse.cs b/bc-sharp-crypto/src/asn1/cmp/CertResponse.cs deleted file mode 100644 index 843fd92..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/CertResponse.cs +++ /dev/null @@ -1,116 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class CertResponse - : Asn1Encodable - { - private readonly DerInteger certReqId; - private readonly PkiStatusInfo status; - private readonly CertifiedKeyPair certifiedKeyPair; - private readonly Asn1OctetString rspInfo; - - private CertResponse(Asn1Sequence seq) - { - certReqId = DerInteger.GetInstance(seq[0]); - status = PkiStatusInfo.GetInstance(seq[1]); - - if (seq.Count >= 3) - { - if (seq.Count == 3) - { - Asn1Encodable o = seq[2]; - if (o is Asn1OctetString) - { - rspInfo = Asn1OctetString.GetInstance(o); - } - else - { - certifiedKeyPair = CertifiedKeyPair.GetInstance(o); - } - } - else - { - certifiedKeyPair = CertifiedKeyPair.GetInstance(seq[2]); - rspInfo = Asn1OctetString.GetInstance(seq[3]); - } - } - } - - public static CertResponse GetInstance(object obj) - { - if (obj is CertResponse) - return (CertResponse)obj; - - if (obj is Asn1Sequence) - return new CertResponse((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public CertResponse( - DerInteger certReqId, - PkiStatusInfo status) - : this(certReqId, status, null, null) - { - } - - public CertResponse( - DerInteger certReqId, - PkiStatusInfo status, - CertifiedKeyPair certifiedKeyPair, - Asn1OctetString rspInfo) - { - if (certReqId == null) - throw new ArgumentNullException("certReqId"); - - if (status == null) - throw new ArgumentNullException("status"); - - this.certReqId = certReqId; - this.status = status; - this.certifiedKeyPair = certifiedKeyPair; - this.rspInfo = rspInfo; - } - - public virtual DerInteger CertReqID - { - get { return certReqId; } - } - - public virtual PkiStatusInfo Status - { - get { return status; } - } - - public virtual CertifiedKeyPair CertifiedKeyPair - { - get { return certifiedKeyPair; } - } - - /** - * 
-		 * CertResponse ::= SEQUENCE {
-		 *                            certReqId           INTEGER,
-		 *                            -- to match this response with corresponding request (a value
-		 *                            -- of -1 is to be used if certReqId is not specified in the
-		 *                            -- corresponding request)
-		 *                            status              PKIStatusInfo,
-		 *                            certifiedKeyPair    CertifiedKeyPair    OPTIONAL,
-		 *                            rspInfo             OCTET STRING        OPTIONAL
-		 *                            -- analogous to the id-regInfo-utf8Pairs string defined
-		 *                            -- for regInfo in CertReqMsg [CRMF]
-		 *             }
-		 *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(certReqId, status); - v.AddOptional(certifiedKeyPair, rspInfo); - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/CertStatus.cs b/bc-sharp-crypto/src/asn1/cmp/CertStatus.cs deleted file mode 100644 index d437b57..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/CertStatus.cs +++ /dev/null @@ -1,85 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class CertStatus - : Asn1Encodable - { - private readonly Asn1OctetString certHash; - private readonly DerInteger certReqId; - private readonly PkiStatusInfo statusInfo; - - private CertStatus(Asn1Sequence seq) - { - certHash = Asn1OctetString.GetInstance(seq[0]); - certReqId = DerInteger.GetInstance(seq[1]); - - if (seq.Count > 2) - { - statusInfo = PkiStatusInfo.GetInstance(seq[2]); - } - } - - public CertStatus(byte[] certHash, BigInteger certReqId) - { - this.certHash = new DerOctetString(certHash); - this.certReqId = new DerInteger(certReqId); - } - - public CertStatus(byte[] certHash, BigInteger certReqId, PkiStatusInfo statusInfo) - { - this.certHash = new DerOctetString(certHash); - this.certReqId = new DerInteger(certReqId); - this.statusInfo = statusInfo; - } - - public static CertStatus GetInstance(object obj) - { - if (obj is CertStatus) - return (CertStatus)obj; - - if (obj is Asn1Sequence) - return new CertStatus((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public virtual Asn1OctetString CertHash - { - get { return certHash; } - } - - public virtual DerInteger CertReqID - { - get { return certReqId; } - } - - public virtual PkiStatusInfo StatusInfo - { - get { return statusInfo; } - } - - /** - * 
-		 * CertStatus ::= SEQUENCE {
-		 *                   certHash    OCTET STRING,
-		 *                   -- the hash of the certificate, using the same hash algorithm
-		 *                   -- as is used to create and verify the certificate signature
-		 *                   certReqId   INTEGER,
-		 *                   -- to match this confirmation with the corresponding req/rep
-		 *                   statusInfo  PKIStatusInfo OPTIONAL
-		 * }
-		 *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(certHash, certReqId); - v.AddOptional(statusInfo); - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/CertifiedKeyPair.cs b/bc-sharp-crypto/src/asn1/cmp/CertifiedKeyPair.cs deleted file mode 100644 index c06f000..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/CertifiedKeyPair.cs +++ /dev/null @@ -1,115 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.Crmf; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class CertifiedKeyPair - : Asn1Encodable - { - private readonly CertOrEncCert certOrEncCert; - private readonly EncryptedValue privateKey; - private readonly PkiPublicationInfo publicationInfo; - - private CertifiedKeyPair(Asn1Sequence seq) - { - certOrEncCert = CertOrEncCert.GetInstance(seq[0]); - - if (seq.Count >= 2) - { - if (seq.Count == 2) - { - Asn1TaggedObject tagged = Asn1TaggedObject.GetInstance(seq[1]); - if (tagged.TagNo == 0) - { - privateKey = EncryptedValue.GetInstance(tagged.GetObject()); - } - else - { - publicationInfo = PkiPublicationInfo.GetInstance(tagged.GetObject()); - } - } - else - { - privateKey = EncryptedValue.GetInstance(Asn1TaggedObject.GetInstance(seq[1])); - publicationInfo = PkiPublicationInfo.GetInstance(Asn1TaggedObject.GetInstance(seq[2])); - } - } - } - - public static CertifiedKeyPair GetInstance(object obj) - { - if (obj is CertifiedKeyPair) - return (CertifiedKeyPair)obj; - - if (obj is Asn1Sequence) - return new CertifiedKeyPair((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public CertifiedKeyPair( - CertOrEncCert certOrEncCert) - : this(certOrEncCert, null, null) - { - } - - public CertifiedKeyPair( - CertOrEncCert certOrEncCert, - EncryptedValue privateKey, - PkiPublicationInfo publicationInfo - ) - { - if (certOrEncCert == null) - throw new ArgumentNullException("certOrEncCert"); - - this.certOrEncCert = certOrEncCert; - this.privateKey = privateKey; - this.publicationInfo = publicationInfo; - } - - public virtual CertOrEncCert CertOrEncCert - { - get { return certOrEncCert; } - } - - public virtual EncryptedValue PrivateKey - { - get { return privateKey; } - } - - public virtual PkiPublicationInfo PublicationInfo - { - get { return publicationInfo; } - } - - /** - * 
-		 * CertifiedKeyPair ::= SEQUENCE {
-		 *                                  certOrEncCert       CertOrEncCert,
-		 *                                  privateKey      [0] EncryptedValue      OPTIONAL,
-		 *                                  -- see [CRMF] for comment on encoding
-		 *                                  publicationInfo [1] PKIPublicationInfo  OPTIONAL
-		 *       }
-		 *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(certOrEncCert); - - if (privateKey != null) - { - v.Add(new DerTaggedObject(true, 0, privateKey)); - } - - if (publicationInfo != null) - { - v.Add(new DerTaggedObject(true, 1, publicationInfo)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/Challenge.cs b/bc-sharp-crypto/src/asn1/cmp/Challenge.cs deleted file mode 100644 index 5c78c2a..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/Challenge.cs +++ /dev/null @@ -1,80 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class Challenge - : Asn1Encodable - { - private readonly AlgorithmIdentifier owf; - private readonly Asn1OctetString witness; - private readonly Asn1OctetString challenge; - - private Challenge(Asn1Sequence seq) - { - int index = 0; - - if (seq.Count == 3) - { - owf = AlgorithmIdentifier.GetInstance(seq[index++]); - } - - witness = Asn1OctetString.GetInstance(seq[index++]); - challenge = Asn1OctetString.GetInstance(seq[index]); - } - - public static Challenge GetInstance(object obj) - { - if (obj is Challenge) - return (Challenge)obj; - - if (obj is Asn1Sequence) - return new Challenge((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public virtual AlgorithmIdentifier Owf - { - get { return owf; } - } - - /** - * 
-		 * Challenge ::= SEQUENCE {
-		 *                 owf                 AlgorithmIdentifier  OPTIONAL,
-		 *
-		 *                 -- MUST be present in the first Challenge; MAY be omitted in
-		 *                 -- any subsequent Challenge in POPODecKeyChallContent (if
-		 *                 -- omitted, then the owf used in the immediately preceding
-		 *                 -- Challenge is to be used).
-		 *
-		 *                 witness             OCTET STRING,
-		 *                 -- the result of applying the one-way function (owf) to a
-		 *                 -- randomly-generated INTEGER, A.  [Note that a different
-		 *                 -- INTEGER MUST be used for each Challenge.]
-		 *                 challenge           OCTET STRING
-		 *                 -- the encryption (under the public key for which the cert.
-		 *                 -- request is being made) of Rand, where Rand is specified as
-		 *                 --   Rand ::= SEQUENCE {
-		 *                 --      int      INTEGER,
-		 *                 --       - the randomly-generated INTEGER A (above)
-		 *                 --      sender   GeneralName
-		 *                 --       - the sender's name (as included in PKIHeader)
-		 *                 --   }
-		 *      }
-		 *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - v.AddOptional(owf); - v.Add(witness); - v.Add(challenge); - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/CmpCertificate.cs b/bc-sharp-crypto/src/asn1/cmp/CmpCertificate.cs deleted file mode 100644 index 33356b4..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/CmpCertificate.cs +++ /dev/null @@ -1,81 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class CmpCertificate - : Asn1Encodable, IAsn1Choice - { - private readonly X509CertificateStructure x509v3PKCert; - private readonly AttributeCertificate x509v2AttrCert; - - /** - * Note: the addition of attribute certificates is a BC extension. - */ - public CmpCertificate(AttributeCertificate x509v2AttrCert) - { - this.x509v2AttrCert = x509v2AttrCert; - } - - public CmpCertificate(X509CertificateStructure x509v3PKCert) - { - if (x509v3PKCert.Version != 3) - throw new ArgumentException("only version 3 certificates allowed", "x509v3PKCert"); - - this.x509v3PKCert = x509v3PKCert; - } - - public static CmpCertificate GetInstance(object obj) - { - if (obj is CmpCertificate) - return (CmpCertificate)obj; - - if (obj is Asn1Sequence) - return new CmpCertificate(X509CertificateStructure.GetInstance(obj)); - - if (obj is Asn1TaggedObject) - return new CmpCertificate(AttributeCertificate.GetInstance(((Asn1TaggedObject)obj).GetObject())); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public virtual bool IsX509v3PKCert - { - get { return x509v3PKCert != null; } - } - - public virtual X509CertificateStructure X509v3PKCert - { - get { return x509v3PKCert; } - } - - public virtual AttributeCertificate X509v2AttrCert - { - get { return x509v2AttrCert; } - } - - /** - * 
-         * CMPCertificate ::= CHOICE {
-         *            x509v3PKCert        Certificate
-         *            x509v2AttrCert      [1] AttributeCertificate
-         *  }
-         *
- * Note: the addition of attribute certificates is a BC extension. - * - * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - if (x509v2AttrCert != null) - { - // explicit following CMP conventions - return new DerTaggedObject(true, 1, x509v2AttrCert); - } - - return x509v3PKCert.ToAsn1Object(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/CmpObjectIdentifiers.cs b/bc-sharp-crypto/src/asn1/cmp/CmpObjectIdentifiers.cs deleted file mode 100644 index 7e82741..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/CmpObjectIdentifiers.cs +++ /dev/null @@ -1,106 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public abstract class CmpObjectIdentifiers - { - // RFC 4210 - - // id-PasswordBasedMac OBJECT IDENTIFIER ::= {1 2 840 113533 7 66 13} - public static readonly DerObjectIdentifier passwordBasedMac = new DerObjectIdentifier("1.2.840.113533.7.66.13"); - - // id-DHBasedMac OBJECT IDENTIFIER ::= {1 2 840 113533 7 66 30} - public static readonly DerObjectIdentifier dhBasedMac = new DerObjectIdentifier("1.2.840.113533.7.66.30"); - - // Example InfoTypeAndValue contents include, but are not limited - // to, the following (un-comment in this ASN.1 module and use as - // appropriate for a given environment): - // - // id-it-caProtEncCert OBJECT IDENTIFIER ::= {id-it 1} - // CAProtEncCertValue ::= CMPCertificate - // id-it-signKeyPairTypes OBJECT IDENTIFIER ::= {id-it 2} - // SignKeyPairTypesValue ::= SEQUENCE OF AlgorithmIdentifier - // id-it-encKeyPairTypes OBJECT IDENTIFIER ::= {id-it 3} - // EncKeyPairTypesValue ::= SEQUENCE OF AlgorithmIdentifier - // id-it-preferredSymmAlg OBJECT IDENTIFIER ::= {id-it 4} - // PreferredSymmAlgValue ::= AlgorithmIdentifier - // id-it-caKeyUpdateInfo OBJECT IDENTIFIER ::= {id-it 5} - // CAKeyUpdateInfoValue ::= CAKeyUpdAnnContent - // id-it-currentCRL OBJECT IDENTIFIER ::= {id-it 6} - // CurrentCRLValue ::= CertificateList - // id-it-unsupportedOIDs OBJECT IDENTIFIER ::= {id-it 7} - // UnsupportedOIDsValue ::= SEQUENCE OF OBJECT IDENTIFIER - // id-it-keyPairParamReq OBJECT IDENTIFIER ::= {id-it 10} - // KeyPairParamReqValue ::= OBJECT IDENTIFIER - // id-it-keyPairParamRep OBJECT IDENTIFIER ::= {id-it 11} - // KeyPairParamRepValue ::= AlgorithmIdentifer - // id-it-revPassphrase OBJECT IDENTIFIER ::= {id-it 12} - // RevPassphraseValue ::= EncryptedValue - // id-it-implicitConfirm OBJECT IDENTIFIER ::= {id-it 13} - // ImplicitConfirmValue ::= NULL - // id-it-confirmWaitTime OBJECT IDENTIFIER ::= {id-it 14} - // ConfirmWaitTimeValue ::= GeneralizedTime - // id-it-origPKIMessage OBJECT IDENTIFIER ::= {id-it 15} - // OrigPKIMessageValue ::= PKIMessages - // id-it-suppLangTags OBJECT IDENTIFIER ::= {id-it 16} - // SuppLangTagsValue ::= SEQUENCE OF UTF8String - // - // where - // - // id-pkix OBJECT IDENTIFIER ::= { - // iso(1) identified-organization(3) - // dod(6) internet(1) security(5) mechanisms(5) pkix(7)} - // and - // id-it OBJECT IDENTIFIER ::= {id-pkix 4} - public static readonly DerObjectIdentifier it_caProtEncCert = new DerObjectIdentifier("1.3.6.1.5.5.7.4.1"); - public static readonly DerObjectIdentifier it_signKeyPairTypes = new DerObjectIdentifier("1.3.6.1.5.5.7.4.2"); - public static readonly DerObjectIdentifier it_encKeyPairTypes = new DerObjectIdentifier("1.3.6.1.5.5.7.4.3"); - public static readonly DerObjectIdentifier it_preferredSymAlg = new DerObjectIdentifier("1.3.6.1.5.5.7.4.4"); - public static readonly DerObjectIdentifier it_caKeyUpdateInfo = new DerObjectIdentifier("1.3.6.1.5.5.7.4.5"); - public static readonly DerObjectIdentifier it_currentCRL = new DerObjectIdentifier("1.3.6.1.5.5.7.4.6"); - public static readonly DerObjectIdentifier it_unsupportedOIDs = new DerObjectIdentifier("1.3.6.1.5.5.7.4.7"); - public static readonly DerObjectIdentifier it_keyPairParamReq = new DerObjectIdentifier("1.3.6.1.5.5.7.4.10"); - public static readonly DerObjectIdentifier it_keyPairParamRep = new DerObjectIdentifier("1.3.6.1.5.5.7.4.11"); - public static readonly DerObjectIdentifier it_revPassphrase = new DerObjectIdentifier("1.3.6.1.5.5.7.4.12"); - public static readonly DerObjectIdentifier it_implicitConfirm = new DerObjectIdentifier("1.3.6.1.5.5.7.4.13"); - public static readonly DerObjectIdentifier it_confirmWaitTime = new DerObjectIdentifier("1.3.6.1.5.5.7.4.14"); - public static readonly DerObjectIdentifier it_origPKIMessage = new DerObjectIdentifier("1.3.6.1.5.5.7.4.15"); - public static readonly DerObjectIdentifier it_suppLangTags = new DerObjectIdentifier("1.3.6.1.5.5.7.4.16"); - - // RFC 4211 - - // id-pkix OBJECT IDENTIFIER ::= { iso(1) identified-organization(3) - // dod(6) internet(1) security(5) mechanisms(5) pkix(7) } - // - // arc for Internet X.509 PKI protocols and their components - // id-pkip OBJECT IDENTIFIER :: { id-pkix pkip(5) } - // - // arc for Registration Controls in CRMF - // id-regCtrl OBJECT IDENTIFIER ::= { id-pkip regCtrl(1) } - // - // arc for Registration Info in CRMF - // id-regInfo OBJECT IDENTIFIER ::= { id-pkip id-regInfo(2) } - - public static readonly DerObjectIdentifier regCtrl_regToken = new DerObjectIdentifier("1.3.6.1.5.5.7.5.1.1"); - public static readonly DerObjectIdentifier regCtrl_authenticator = new DerObjectIdentifier("1.3.6.1.5.5.7.5.1.2"); - public static readonly DerObjectIdentifier regCtrl_pkiPublicationInfo = new DerObjectIdentifier("1.3.6.1.5.5.7.5.1.3"); - public static readonly DerObjectIdentifier regCtrl_pkiArchiveOptions = new DerObjectIdentifier("1.3.6.1.5.5.7.5.1.4"); - public static readonly DerObjectIdentifier regCtrl_oldCertID = new DerObjectIdentifier("1.3.6.1.5.5.7.5.1.5"); - public static readonly DerObjectIdentifier regCtrl_protocolEncrKey = new DerObjectIdentifier("1.3.6.1.5.5.7.5.1.6"); - - // From RFC4210: - // id-regCtrl-altCertTemplate OBJECT IDENTIFIER ::= {id-regCtrl 7} - public static readonly DerObjectIdentifier regCtrl_altCertTemplate = new DerObjectIdentifier("1.3.6.1.5.5.7.5.1.7"); - - public static readonly DerObjectIdentifier regInfo_utf8Pairs = new DerObjectIdentifier("1.3.6.1.5.5.7.5.2.1"); - public static readonly DerObjectIdentifier regInfo_certReq = new DerObjectIdentifier("1.3.6.1.5.5.7.5.2.2"); - - // id-smime OBJECT IDENTIFIER ::= { iso(1) member-body(2) - // us(840) rsadsi(113549) pkcs(1) pkcs9(9) 16 } - // - // id-ct OBJECT IDENTIFIER ::= { id-smime 1 } -- content types - // - // id-ct-encKeyWithID OBJECT IDENTIFIER ::= {id-ct 21} - public static readonly DerObjectIdentifier ct_encKeyWithID = new DerObjectIdentifier("1.2.840.113549.1.9.16.1.21"); - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/CrlAnnContent.cs b/bc-sharp-crypto/src/asn1/cmp/CrlAnnContent.cs deleted file mode 100644 index db8ecfa..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/CrlAnnContent.cs +++ /dev/null @@ -1,50 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class CrlAnnContent - : Asn1Encodable - { - private readonly Asn1Sequence content; - - private CrlAnnContent(Asn1Sequence seq) - { - content = seq; - } - - public static CrlAnnContent GetInstance(object obj) - { - if (obj is CrlAnnContent) - return (CrlAnnContent)obj; - - if (obj is Asn1Sequence) - return new CrlAnnContent((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public virtual CertificateList[] ToCertificateListArray() - { - CertificateList[] result = new CertificateList[content.Count]; - for (int i = 0; i != result.Length; ++ i) - { - result[i] = CertificateList.GetInstance(content[i]); - } - return result; - } - - /** - * 
-		 * CrlAnnContent ::= SEQUENCE OF CertificateList
-		 *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - return content; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/ErrorMsgContent.cs b/bc-sharp-crypto/src/asn1/cmp/ErrorMsgContent.cs deleted file mode 100644 index 5d2132b..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/ErrorMsgContent.cs +++ /dev/null @@ -1,95 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class ErrorMsgContent - : Asn1Encodable - { - private readonly PkiStatusInfo pkiStatusInfo; - private readonly DerInteger errorCode; - private readonly PkiFreeText errorDetails; - - private ErrorMsgContent(Asn1Sequence seq) - { - pkiStatusInfo = PkiStatusInfo.GetInstance(seq[0]); - - for (int pos = 1; pos < seq.Count; ++pos) - { - Asn1Encodable ae = seq[pos]; - if (ae is DerInteger) - { - errorCode = DerInteger.GetInstance(ae); - } - else - { - errorDetails = PkiFreeText.GetInstance(ae); - } - } - } - - public static ErrorMsgContent GetInstance(object obj) - { - if (obj is ErrorMsgContent) - return (ErrorMsgContent)obj; - - if (obj is Asn1Sequence) - return new ErrorMsgContent((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public ErrorMsgContent(PkiStatusInfo pkiStatusInfo) - : this(pkiStatusInfo, null, null) - { - } - - public ErrorMsgContent( - PkiStatusInfo pkiStatusInfo, - DerInteger errorCode, - PkiFreeText errorDetails) - { - if (pkiStatusInfo == null) - throw new ArgumentNullException("pkiStatusInfo"); - - this.pkiStatusInfo = pkiStatusInfo; - this.errorCode = errorCode; - this.errorDetails = errorDetails; - } - - public virtual PkiStatusInfo PkiStatusInfo - { - get { return pkiStatusInfo; } - } - - public virtual DerInteger ErrorCode - { - get { return errorCode; } - } - - public virtual PkiFreeText ErrorDetails - { - get { return errorDetails; } - } - - /** - * 
-		 * ErrorMsgContent ::= SEQUENCE {
-		 *                        pKIStatusInfo          PKIStatusInfo,
-		 *                        errorCode              INTEGER           OPTIONAL,
-		 *                        -- implementation-specific error codes
-		 *                        errorDetails           PKIFreeText       OPTIONAL
-		 *                        -- implementation-specific error details
-		 * }
-		 *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(pkiStatusInfo); - v.AddOptional(errorCode, errorDetails); - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/GenMsgContent.cs b/bc-sharp-crypto/src/asn1/cmp/GenMsgContent.cs deleted file mode 100644 index f3142b5..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/GenMsgContent.cs +++ /dev/null @@ -1,54 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class GenMsgContent - : Asn1Encodable - { - private readonly Asn1Sequence content; - - private GenMsgContent(Asn1Sequence seq) - { - content = seq; - } - - public static GenMsgContent GetInstance(object obj) - { - if (obj is GenMsgContent) - return (GenMsgContent)obj; - - if (obj is Asn1Sequence) - return new GenMsgContent((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public GenMsgContent(params InfoTypeAndValue[] itv) - { - content = new DerSequence(itv); - } - - public virtual InfoTypeAndValue[] ToInfoTypeAndValueArray() - { - InfoTypeAndValue[] result = new InfoTypeAndValue[content.Count]; - for (int i = 0; i != result.Length; ++i) - { - result[i] = InfoTypeAndValue.GetInstance(content[i]); - } - return result; - } - - /** - * 
-		 * GenMsgContent ::= SEQUENCE OF InfoTypeAndValue
-		 *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - return content; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/GenRepContent.cs b/bc-sharp-crypto/src/asn1/cmp/GenRepContent.cs deleted file mode 100644 index 3c3573e..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/GenRepContent.cs +++ /dev/null @@ -1,54 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class GenRepContent - : Asn1Encodable - { - private readonly Asn1Sequence content; - - private GenRepContent(Asn1Sequence seq) - { - content = seq; - } - - public static GenRepContent GetInstance(object obj) - { - if (obj is GenRepContent) - return (GenRepContent)obj; - - if (obj is Asn1Sequence) - return new GenRepContent((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public GenRepContent(params InfoTypeAndValue[] itv) - { - content = new DerSequence(itv); - } - - public virtual InfoTypeAndValue[] ToInfoTypeAndValueArray() - { - InfoTypeAndValue[] result = new InfoTypeAndValue[content.Count]; - for (int i = 0; i != result.Length; ++i) - { - result[i] = InfoTypeAndValue.GetInstance(content[i]); - } - return result; - } - - /** - * 
-		 * GenRepContent ::= SEQUENCE OF InfoTypeAndValue
-		 *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - return content; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/InfoTypeAndValue.cs b/bc-sharp-crypto/src/asn1/cmp/InfoTypeAndValue.cs deleted file mode 100644 index 0ce6f73..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/InfoTypeAndValue.cs +++ /dev/null @@ -1,123 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - /** - * Example InfoTypeAndValue contents include, but are not limited - * to, the following (un-comment in this ASN.1 module and use as - * appropriate for a given environment): - * 
-     *   id-it-caProtEncCert    OBJECT IDENTIFIER ::= {id-it 1}
-     *      CAProtEncCertValue      ::= CMPCertificate
-     *   id-it-signKeyPairTypes OBJECT IDENTIFIER ::= {id-it 2}
-     *     SignKeyPairTypesValue   ::= SEQUENCE OF AlgorithmIdentifier
-     *   id-it-encKeyPairTypes  OBJECT IDENTIFIER ::= {id-it 3}
-     *     EncKeyPairTypesValue    ::= SEQUENCE OF AlgorithmIdentifier
-     *   id-it-preferredSymmAlg OBJECT IDENTIFIER ::= {id-it 4}
-     *      PreferredSymmAlgValue   ::= AlgorithmIdentifier
-     *   id-it-caKeyUpdateInfo  OBJECT IDENTIFIER ::= {id-it 5}
-     *      CAKeyUpdateInfoValue    ::= CAKeyUpdAnnContent
-     *   id-it-currentCRL       OBJECT IDENTIFIER ::= {id-it 6}
-     *      CurrentCRLValue         ::= CertificateList
-     *   id-it-unsupportedOIDs  OBJECT IDENTIFIER ::= {id-it 7}
-     *      UnsupportedOIDsValue    ::= SEQUENCE OF OBJECT IDENTIFIER
-     *   id-it-keyPairParamReq  OBJECT IDENTIFIER ::= {id-it 10}
-     *      KeyPairParamReqValue    ::= OBJECT IDENTIFIER
-     *   id-it-keyPairParamRep  OBJECT IDENTIFIER ::= {id-it 11}
-     *      KeyPairParamRepValue    ::= AlgorithmIdentifer
-     *   id-it-revPassphrase    OBJECT IDENTIFIER ::= {id-it 12}
-     *      RevPassphraseValue      ::= EncryptedValue
-     *   id-it-implicitConfirm  OBJECT IDENTIFIER ::= {id-it 13}
-     *      ImplicitConfirmValue    ::= NULL
-     *   id-it-confirmWaitTime  OBJECT IDENTIFIER ::= {id-it 14}
-     *      ConfirmWaitTimeValue    ::= GeneralizedTime
-     *   id-it-origPKIMessage   OBJECT IDENTIFIER ::= {id-it 15}
-     *      OrigPKIMessageValue     ::= PKIMessages
-     *   id-it-suppLangTags     OBJECT IDENTIFIER ::= {id-it 16}
-     *      SuppLangTagsValue       ::= SEQUENCE OF UTF8String
-     *
-     * where
-     *
-     *   id-pkix OBJECT IDENTIFIER ::= {
-     *      iso(1) identified-organization(3)
-     *      dod(6) internet(1) security(5) mechanisms(5) pkix(7)}
-     * and
-     *      id-it   OBJECT IDENTIFIER ::= {id-pkix 4}
-     *
- */ - public class InfoTypeAndValue - : Asn1Encodable - { - private readonly DerObjectIdentifier infoType; - private readonly Asn1Encodable infoValue; - - private InfoTypeAndValue(Asn1Sequence seq) - { - infoType = DerObjectIdentifier.GetInstance(seq[0]); - - if (seq.Count > 1) - { - infoValue = (Asn1Encodable)seq[1]; - } - } - - public static InfoTypeAndValue GetInstance(object obj) - { - if (obj is InfoTypeAndValue) - return (InfoTypeAndValue)obj; - - if (obj is Asn1Sequence) - return new InfoTypeAndValue((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public InfoTypeAndValue( - DerObjectIdentifier infoType) - { - this.infoType = infoType; - this.infoValue = null; - } - - public InfoTypeAndValue( - DerObjectIdentifier infoType, - Asn1Encodable optionalValue) - { - this.infoType = infoType; - this.infoValue = optionalValue; - } - - public virtual DerObjectIdentifier InfoType - { - get { return infoType; } - } - - public virtual Asn1Encodable InfoValue - { - get { return infoValue; } - } - - /** - * 
-         * InfoTypeAndValue ::= SEQUENCE {
-         *                         infoType               OBJECT IDENTIFIER,
-         *                         infoValue              ANY DEFINED BY infoType  OPTIONAL
-         * }
-         *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(infoType); - - if (infoValue != null) - { - v.Add(infoValue); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/KeyRecRepContent.cs b/bc-sharp-crypto/src/asn1/cmp/KeyRecRepContent.cs deleted file mode 100644 index 00c4612..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/KeyRecRepContent.cs +++ /dev/null @@ -1,117 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class KeyRecRepContent - : Asn1Encodable - { - private readonly PkiStatusInfo status; - private readonly CmpCertificate newSigCert; - private readonly Asn1Sequence caCerts; - private readonly Asn1Sequence keyPairHist; - - private KeyRecRepContent(Asn1Sequence seq) - { - status = PkiStatusInfo.GetInstance(seq[0]); - - for (int pos = 1; pos < seq.Count; ++pos) - { - Asn1TaggedObject tObj = Asn1TaggedObject.GetInstance(seq[pos]); - - switch (tObj.TagNo) - { - case 0: - newSigCert = CmpCertificate.GetInstance(tObj.GetObject()); - break; - case 1: - caCerts = Asn1Sequence.GetInstance(tObj.GetObject()); - break; - case 2: - keyPairHist = Asn1Sequence.GetInstance(tObj.GetObject()); - break; - default: - throw new ArgumentException("unknown tag number: " + tObj.TagNo, "seq"); - } - } - } - - public static KeyRecRepContent GetInstance(object obj) - { - if (obj is KeyRecRepContent) - return (KeyRecRepContent)obj; - - if (obj is Asn1Sequence) - return new KeyRecRepContent((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public virtual PkiStatusInfo Status - { - get { return status; } - } - - public virtual CmpCertificate NewSigCert - { - get { return newSigCert; } - } - - public virtual CmpCertificate[] GetCACerts() - { - if (caCerts == null) - return null; - - CmpCertificate[] results = new CmpCertificate[caCerts.Count]; - for (int i = 0; i != results.Length; ++i) - { - results[i] = CmpCertificate.GetInstance(caCerts[i]); - } - return results; - } - - public virtual CertifiedKeyPair[] GetKeyPairHist() - { - if (keyPairHist == null) - return null; - - CertifiedKeyPair[] results = new CertifiedKeyPair[keyPairHist.Count]; - for (int i = 0; i != results.Length; ++i) - { - results[i] = CertifiedKeyPair.GetInstance(keyPairHist[i]); - } - return results; - } - - /** - * 
-		 * KeyRecRepContent ::= SEQUENCE {
-		 *                         status                  PKIStatusInfo,
-		 *                         newSigCert          [0] CMPCertificate OPTIONAL,
-		 *                         caCerts             [1] SEQUENCE SIZE (1..MAX) OF
-		 *                                                           CMPCertificate OPTIONAL,
-		 *                         keyPairHist         [2] SEQUENCE SIZE (1..MAX) OF
-		 *                                                           CertifiedKeyPair OPTIONAL
-		 *              }
-		 *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(status); - AddOptional(v, 0, newSigCert); - AddOptional(v, 1, caCerts); - AddOptional(v, 2, keyPairHist); - return new DerSequence(v); - } - - private void AddOptional(Asn1EncodableVector v, int tagNo, Asn1Encodable obj) - { - if (obj != null) - { - v.Add(new DerTaggedObject(true, tagNo, obj)); - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/OobCertHash.cs b/bc-sharp-crypto/src/asn1/cmp/OobCertHash.cs deleted file mode 100644 index cd8192b..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/OobCertHash.cs +++ /dev/null @@ -1,88 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.Crmf; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class OobCertHash - : Asn1Encodable - { - private readonly AlgorithmIdentifier hashAlg; - private readonly CertId certId; - private readonly DerBitString hashVal; - - private OobCertHash(Asn1Sequence seq) - { - int index = seq.Count - 1; - - hashVal = DerBitString.GetInstance(seq[index--]); - - for (int i = index; i >= 0; i--) - { - Asn1TaggedObject tObj = (Asn1TaggedObject)seq[i]; - - if (tObj.TagNo == 0) - { - hashAlg = AlgorithmIdentifier.GetInstance(tObj, true); - } - else - { - certId = CertId.GetInstance(tObj, true); - } - } - } - - public static OobCertHash GetInstance(object obj) - { - if (obj is OobCertHash) - return (OobCertHash)obj; - - if (obj is Asn1Sequence) - return new OobCertHash((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public virtual AlgorithmIdentifier HashAlg - { - get { return hashAlg; } - } - - public virtual CertId CertID - { - get { return certId; } - } - - /** - * 
-		 * OobCertHash ::= SEQUENCE {
-		 *                      hashAlg     [0] AlgorithmIdentifier     OPTIONAL,
-		 *                      certId      [1] CertId                  OPTIONAL,
-		 *                      hashVal         BIT STRING
-		 *                      -- hashVal is calculated over the Der encoding of the
-		 *                      -- self-signed certificate with the identifier certID.
-		 *       }
-		 *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - AddOptional(v, 0, hashAlg); - AddOptional(v, 1, certId); - v.Add(hashVal); - return new DerSequence(v); - } - - private void AddOptional(Asn1EncodableVector v, int tagNo, Asn1Encodable obj) - { - if (obj != null) - { - v.Add(new DerTaggedObject(true, tagNo, obj)); - } - } - } -} - diff --git a/bc-sharp-crypto/src/asn1/cmp/PKIBody.cs b/bc-sharp-crypto/src/asn1/cmp/PKIBody.cs deleted file mode 100644 index f17eed6..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/PKIBody.cs +++ /dev/null @@ -1,187 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.Crmf; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class PkiBody - : Asn1Encodable, IAsn1Choice - { - public const int TYPE_INIT_REQ = 0; - public const int TYPE_INIT_REP = 1; - public const int TYPE_CERT_REQ = 2; - public const int TYPE_CERT_REP = 3; - public const int TYPE_P10_CERT_REQ = 4; - public const int TYPE_POPO_CHALL = 5; - public const int TYPE_POPO_REP = 6; - public const int TYPE_KEY_UPDATE_REQ = 7; - public const int TYPE_KEY_UPDATE_REP = 8; - public const int TYPE_KEY_RECOVERY_REQ = 9; - public const int TYPE_KEY_RECOVERY_REP = 10; - public const int TYPE_REVOCATION_REQ = 11; - public const int TYPE_REVOCATION_REP = 12; - public const int TYPE_CROSS_CERT_REQ = 13; - public const int TYPE_CROSS_CERT_REP = 14; - public const int TYPE_CA_KEY_UPDATE_ANN = 15; - public const int TYPE_CERT_ANN = 16; - public const int TYPE_REVOCATION_ANN = 17; - public const int TYPE_CRL_ANN = 18; - public const int TYPE_CONFIRM = 19; - public const int TYPE_NESTED = 20; - public const int TYPE_GEN_MSG = 21; - public const int TYPE_GEN_REP = 22; - public const int TYPE_ERROR = 23; - public const int TYPE_CERT_CONFIRM = 24; - public const int TYPE_POLL_REQ = 25; - public const int TYPE_POLL_REP = 26; - - private int tagNo; - private Asn1Encodable body; - - public static PkiBody GetInstance(object obj) - { - if (obj is PkiBody) - return (PkiBody)obj; - - if (obj is Asn1TaggedObject) - return new PkiBody((Asn1TaggedObject)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - private PkiBody(Asn1TaggedObject tagged) - { - tagNo = tagged.TagNo; - body = GetBodyForType(tagNo, tagged.GetObject()); - } - - /** - * Creates a new PkiBody. - * @param type one of the TYPE_* constants - * @param content message content - */ - public PkiBody( - int type, - Asn1Encodable content) - { - tagNo = type; - body = GetBodyForType(type, content); - } - - private static Asn1Encodable GetBodyForType( - int type, - Asn1Encodable o) - { - switch (type) - { - case TYPE_INIT_REQ: - return CertReqMessages.GetInstance(o); - case TYPE_INIT_REP: - return CertRepMessage.GetInstance(o); - case TYPE_CERT_REQ: - return CertReqMessages.GetInstance(o); - case TYPE_CERT_REP: - return CertRepMessage.GetInstance(o); - case TYPE_P10_CERT_REQ: - return CertificationRequest.GetInstance(o); - case TYPE_POPO_CHALL: - return PopoDecKeyChallContent.GetInstance(o); - case TYPE_POPO_REP: - return PopoDecKeyRespContent.GetInstance(o); - case TYPE_KEY_UPDATE_REQ: - return CertReqMessages.GetInstance(o); - case TYPE_KEY_UPDATE_REP: - return CertRepMessage.GetInstance(o); - case TYPE_KEY_RECOVERY_REQ: - return CertReqMessages.GetInstance(o); - case TYPE_KEY_RECOVERY_REP: - return KeyRecRepContent.GetInstance(o); - case TYPE_REVOCATION_REQ: - return RevReqContent.GetInstance(o); - case TYPE_REVOCATION_REP: - return RevRepContent.GetInstance(o); - case TYPE_CROSS_CERT_REQ: - return CertReqMessages.GetInstance(o); - case TYPE_CROSS_CERT_REP: - return CertRepMessage.GetInstance(o); - case TYPE_CA_KEY_UPDATE_ANN: - return CAKeyUpdAnnContent.GetInstance(o); - case TYPE_CERT_ANN: - return CmpCertificate.GetInstance(o); - case TYPE_REVOCATION_ANN: - return RevAnnContent.GetInstance(o); - case TYPE_CRL_ANN: - return CrlAnnContent.GetInstance(o); - case TYPE_CONFIRM: - return PkiConfirmContent.GetInstance(o); - case TYPE_NESTED: - return PkiMessages.GetInstance(o); - case TYPE_GEN_MSG: - return GenMsgContent.GetInstance(o); - case TYPE_GEN_REP: - return GenRepContent.GetInstance(o); - case TYPE_ERROR: - return ErrorMsgContent.GetInstance(o); - case TYPE_CERT_CONFIRM: - return CertConfirmContent.GetInstance(o); - case TYPE_POLL_REQ: - return PollReqContent.GetInstance(o); - case TYPE_POLL_REP: - return PollRepContent.GetInstance(o); - default: - throw new ArgumentException("unknown tag number: " + type, "type"); - } - } - - public virtual int Type - { - get { return tagNo; } - } - - public virtual Asn1Encodable Content - { - get { return body; } - } - - /** - * 
-         * PkiBody ::= CHOICE {       -- message-specific body elements
-         *        ir       [0]  CertReqMessages,        --Initialization Request
-         *        ip       [1]  CertRepMessage,         --Initialization Response
-         *        cr       [2]  CertReqMessages,        --Certification Request
-         *        cp       [3]  CertRepMessage,         --Certification Response
-         *        p10cr    [4]  CertificationRequest,   --imported from [PKCS10]
-         *        popdecc  [5]  POPODecKeyChallContent, --pop Challenge
-         *        popdecr  [6]  POPODecKeyRespContent,  --pop Response
-         *        kur      [7]  CertReqMessages,        --Key Update Request
-         *        kup      [8]  CertRepMessage,         --Key Update Response
-         *        krr      [9]  CertReqMessages,        --Key Recovery Request
-         *        krp      [10] KeyRecRepContent,       --Key Recovery Response
-         *        rr       [11] RevReqContent,          --Revocation Request
-         *        rp       [12] RevRepContent,          --Revocation Response
-         *        ccr      [13] CertReqMessages,        --Cross-Cert. Request
-         *        ccp      [14] CertRepMessage,         --Cross-Cert. Response
-         *        ckuann   [15] CAKeyUpdAnnContent,     --CA Key Update Ann.
-         *        cann     [16] CertAnnContent,         --Certificate Ann.
-         *        rann     [17] RevAnnContent,          --Revocation Ann.
-         *        crlann   [18] CRLAnnContent,          --CRL Announcement
-         *        pkiconf  [19] PKIConfirmContent,      --Confirmation
-         *        nested   [20] NestedMessageContent,   --Nested Message
-         *        genm     [21] GenMsgContent,          --General Message
-         *        genp     [22] GenRepContent,          --General Response
-         *        error    [23] ErrorMsgContent,        --Error Message
-         *        certConf [24] CertConfirmContent,     --Certificate confirm
-         *        pollReq  [25] PollReqContent,         --Polling request
-         *        pollRep  [26] PollRepContent          --Polling response
-         * }
-         *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - return new DerTaggedObject(true, tagNo, body); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/PKIConfirmContent.cs b/bc-sharp-crypto/src/asn1/cmp/PKIConfirmContent.cs deleted file mode 100644 index d154427..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/PKIConfirmContent.cs +++ /dev/null @@ -1,36 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class PkiConfirmContent - : Asn1Encodable - { - public static PkiConfirmContent GetInstance(object obj) - { - if (obj is PkiConfirmContent) - return (PkiConfirmContent)obj; - - if (obj is Asn1Null) - return new PkiConfirmContent(); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public PkiConfirmContent() - { - } - - /** - * 
-		 * PkiConfirmContent ::= NULL
-		 *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - return DerNull.Instance; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/PKIFailureInfo.cs b/bc-sharp-crypto/src/asn1/cmp/PKIFailureInfo.cs deleted file mode 100644 index 75a3ff0..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/PKIFailureInfo.cs +++ /dev/null @@ -1,96 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - /** - * 
-     * PKIFailureInfo ::= BIT STRING {
-     * badAlg               (0),
-     *   -- unrecognized or unsupported Algorithm Identifier
-     * badMessageCheck      (1), -- integrity check failed (e.g., signature did not verify)
-     * badRequest           (2),
-     *   -- transaction not permitted or supported
-     * badTime              (3), -- messageTime was not sufficiently close to the system time, as defined by local policy
-     * badCertId            (4), -- no certificate could be found matching the provided criteria
-     * badDataFormat        (5),
-     *   -- the data submitted has the wrong format
-     * wrongAuthority       (6), -- the authority indicated in the request is different from the one creating the response token
-     * incorrectData        (7), -- the requester's data is incorrect (for notary services)
-     * missingTimeStamp     (8), -- when the timestamp is missing but should be there (by policy)
-     * badPOP               (9)  -- the proof-of-possession failed
-     * certRevoked         (10),
-     * certConfirmed       (11),
-     * wrongIntegrity      (12),
-     * badRecipientNonce   (13), 
-     * timeNotAvailable    (14),
-     *   -- the TSA's time source is not available
-     * unacceptedPolicy    (15),
-     *   -- the requested TSA policy is not supported by the TSA
-     * unacceptedExtension (16),
-     *   -- the requested extension is not supported by the TSA
-     * addInfoNotAvailable (17)
-     *   -- the additional information requested could not be understood
-     *   -- or is not available
-     * badSenderNonce      (18),
-     * badCertTemplate     (19),
-     * signerNotTrusted    (20),
-     * transactionIdInUse  (21),
-     * unsupportedVersion  (22),
-     * notAuthorized       (23),
-     * systemUnavail       (24),    
-     * systemFailure       (25),
-     *   -- the request cannot be handled due to system failure
-     * duplicateCertReq    (26) 
-     *
- */ - public class PkiFailureInfo - : DerBitString - { - public const int BadAlg = (1 << 7); // unrecognized or unsupported Algorithm Identifier - public const int BadMessageCheck = (1 << 6); // integrity check failed (e.g., signature did not verify) - public const int BadRequest = (1 << 5); - public const int BadTime = (1 << 4); // -- messageTime was not sufficiently close to the system time, as defined by local policy - public const int BadCertId = (1 << 3); // no certificate could be found matching the provided criteria - public const int BadDataFormat = (1 << 2); - public const int WrongAuthority = (1 << 1); // the authority indicated in the request is different from the one creating the response token - public const int IncorrectData = 1; // the requester's data is incorrect (for notary services) - public const int MissingTimeStamp = (1 << 15); // when the timestamp is missing but should be there (by policy) - public const int BadPop = (1 << 14); // the proof-of-possession failed - public const int CertRevoked = (1 << 13); - public const int CertConfirmed = (1 << 12); - public const int WrongIntegrity = (1 << 11); - public const int BadRecipientNonce = (1 << 10); - public const int TimeNotAvailable = (1 << 9); // the TSA's time source is not available - public const int UnacceptedPolicy = (1 << 8); // the requested TSA policy is not supported by the TSA - public const int UnacceptedExtension = (1 << 23); //the requested extension is not supported by the TSA - public const int AddInfoNotAvailable = (1 << 22); //the additional information requested could not be understood or is not available - public const int BadSenderNonce = (1 << 21); - public const int BadCertTemplate = (1 << 20); - public const int SignerNotTrusted = (1 << 19); - public const int TransactionIdInUse = (1 << 18); - public const int UnsupportedVersion = (1 << 17); - public const int NotAuthorized = (1 << 16); - public const int SystemUnavail = (1 << 31); - public const int SystemFailure = (1 << 30); //the request cannot be handled due to system failure - public const int DuplicateCertReq = (1 << 29); - - /** - * Basic constructor. - */ - public PkiFailureInfo(int info) - : base(info) - { - } - - public PkiFailureInfo( - DerBitString info) - : base(info.GetBytes(), info.PadBits) - { - } - - public override string ToString() - { - return "PkiFailureInfo: 0x" + this.IntValue.ToString("X"); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/PKIFreeText.cs b/bc-sharp-crypto/src/asn1/cmp/PKIFreeText.cs deleted file mode 100644 index fef5254..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/PKIFreeText.cs +++ /dev/null @@ -1,99 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class PkiFreeText - : Asn1Encodable - { - internal Asn1Sequence strings; - - public static PkiFreeText GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - return GetInstance(Asn1Sequence.GetInstance(obj, isExplicit)); - } - - public static PkiFreeText GetInstance( - object obj) - { - if (obj is PkiFreeText) - { - return (PkiFreeText)obj; - } - else if (obj is Asn1Sequence) - { - return new PkiFreeText((Asn1Sequence)obj); - } - - throw new ArgumentException("Unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public PkiFreeText( - Asn1Sequence seq) - { - foreach (object o in seq) - { - if (!(o is DerUtf8String)) - { - throw new ArgumentException("attempt to insert non UTF8 STRING into PkiFreeText"); - } - } - - this.strings = seq; - } - - public PkiFreeText( - DerUtf8String p) - { - strings = new DerSequence(p); - } - - /** - * Return the number of string elements present. - * - * @return number of elements present. - */ - [Obsolete("Use 'Count' property instead")] - public int Size - { - get { return strings.Count; } - } - - public int Count - { - get { return strings.Count; } - } - - /** - * Return the UTF8STRING at index. - * - * @param index index of the string of interest - * @return the string at index. - */ - public DerUtf8String this[int index] - { - get { return (DerUtf8String) strings[index]; } - } - - [Obsolete("Use 'object[index]' syntax instead")] - public DerUtf8String GetStringAt( - int index) - { - return this[index]; - } - - /** - * 
-		 * PkiFreeText ::= SEQUENCE SIZE (1..MAX) OF UTF8String
-		 *
- */ - public override Asn1Object ToAsn1Object() - { - return strings; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/PKIHeader.cs b/bc-sharp-crypto/src/asn1/cmp/PKIHeader.cs deleted file mode 100644 index 577cb45..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/PKIHeader.cs +++ /dev/null @@ -1,238 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class PkiHeader - : Asn1Encodable - { - /** - * Value for a "null" recipient or sender. - */ - public static readonly GeneralName NULL_NAME = new GeneralName(X509Name.GetInstance(new DerSequence())); - - public static readonly int CMP_1999 = 1; - public static readonly int CMP_2000 = 2; - - private readonly DerInteger pvno; - private readonly GeneralName sender; - private readonly GeneralName recipient; - private readonly DerGeneralizedTime messageTime; - private readonly AlgorithmIdentifier protectionAlg; - private readonly Asn1OctetString senderKID; // KeyIdentifier - private readonly Asn1OctetString recipKID; // KeyIdentifier - private readonly Asn1OctetString transactionID; - private readonly Asn1OctetString senderNonce; - private readonly Asn1OctetString recipNonce; - private readonly PkiFreeText freeText; - private readonly Asn1Sequence generalInfo; - - private PkiHeader(Asn1Sequence seq) - { - pvno = DerInteger.GetInstance(seq[0]); - sender = GeneralName.GetInstance(seq[1]); - recipient = GeneralName.GetInstance(seq[2]); - - for (int pos = 3; pos < seq.Count; ++pos) - { - Asn1TaggedObject tObj = (Asn1TaggedObject)seq[pos]; - - switch (tObj.TagNo) - { - case 0: - messageTime = DerGeneralizedTime.GetInstance(tObj, true); - break; - case 1: - protectionAlg = AlgorithmIdentifier.GetInstance(tObj, true); - break; - case 2: - senderKID = Asn1OctetString.GetInstance(tObj, true); - break; - case 3: - recipKID = Asn1OctetString.GetInstance(tObj, true); - break; - case 4: - transactionID = Asn1OctetString.GetInstance(tObj, true); - break; - case 5: - senderNonce = Asn1OctetString.GetInstance(tObj, true); - break; - case 6: - recipNonce = Asn1OctetString.GetInstance(tObj, true); - break; - case 7: - freeText = PkiFreeText.GetInstance(tObj, true); - break; - case 8: - generalInfo = Asn1Sequence.GetInstance(tObj, true); - break; - default: - throw new ArgumentException("unknown tag number: " + tObj.TagNo, "seq"); - } - } - } - - public static PkiHeader GetInstance(object obj) - { - if (obj is PkiHeader) - return (PkiHeader)obj; - - if (obj is Asn1Sequence) - return new PkiHeader((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public PkiHeader( - int pvno, - GeneralName sender, - GeneralName recipient) - : this(new DerInteger(pvno), sender, recipient) - { - } - - private PkiHeader( - DerInteger pvno, - GeneralName sender, - GeneralName recipient) - { - this.pvno = pvno; - this.sender = sender; - this.recipient = recipient; - } - - public virtual DerInteger Pvno - { - get { return pvno; } - } - - public virtual GeneralName Sender - { - get { return sender; } - } - - public virtual GeneralName Recipient - { - get { return recipient; } - } - - public virtual DerGeneralizedTime MessageTime - { - get { return messageTime; } - } - - public virtual AlgorithmIdentifier ProtectionAlg - { - get { return protectionAlg; } - } - - public virtual Asn1OctetString SenderKID - { - get { return senderKID; } - } - - public virtual Asn1OctetString RecipKID - { - get { return recipKID; } - } - - public virtual Asn1OctetString TransactionID - { - get { return transactionID; } - } - - public virtual Asn1OctetString SenderNonce - { - get { return senderNonce; } - } - - public virtual Asn1OctetString RecipNonce - { - get { return recipNonce; } - } - - public virtual PkiFreeText FreeText - { - get { return freeText; } - } - - public virtual InfoTypeAndValue[] GetGeneralInfo() - { - if (generalInfo == null) - { - return null; - } - InfoTypeAndValue[] results = new InfoTypeAndValue[generalInfo.Count]; - for (int i = 0; i < results.Length; i++) - { - results[i] = InfoTypeAndValue.GetInstance(generalInfo[i]); - } - return results; - } - - /** - * 
-         *  PkiHeader ::= SEQUENCE {
-         *            pvno                INTEGER     { cmp1999(1), cmp2000(2) },
-         *            sender              GeneralName,
-         *            -- identifies the sender
-         *            recipient           GeneralName,
-         *            -- identifies the intended recipient
-         *            messageTime     [0] GeneralizedTime         OPTIONAL,
-         *            -- time of production of this message (used when sender
-         *            -- believes that the transport will be "suitable"; i.e.,
-         *            -- that the time will still be meaningful upon receipt)
-         *            protectionAlg   [1] AlgorithmIdentifier     OPTIONAL,
-         *            -- algorithm used for calculation of protection bits
-         *            senderKID       [2] KeyIdentifier           OPTIONAL,
-         *            recipKID        [3] KeyIdentifier           OPTIONAL,
-         *            -- to identify specific keys used for protection
-         *            transactionID   [4] OCTET STRING            OPTIONAL,
-         *            -- identifies the transaction; i.e., this will be the same in
-         *            -- corresponding request, response, certConf, and PKIConf
-         *            -- messages
-         *            senderNonce     [5] OCTET STRING            OPTIONAL,
-         *            recipNonce      [6] OCTET STRING            OPTIONAL,
-         *            -- nonces used to provide replay protection, senderNonce
-         *            -- is inserted by the creator of this message; recipNonce
-         *            -- is a nonce previously inserted in a related message by
-         *            -- the intended recipient of this message
-         *            freeText        [7] PKIFreeText             OPTIONAL,
-         *            -- this may be used to indicate context-specific instructions
-         *            -- (this field is intended for human consumption)
-         *            generalInfo     [8] SEQUENCE SIZE (1..MAX) OF
-         *                                 InfoTypeAndValue     OPTIONAL
-         *            -- this may be used to convey context-specific information
-         *            -- (this field not primarily intended for human consumption)
-         * }
-         *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(pvno, sender, recipient); - - AddOptional(v, 0, messageTime); - AddOptional(v, 1, protectionAlg); - AddOptional(v, 2, senderKID); - AddOptional(v, 3, recipKID); - AddOptional(v, 4, transactionID); - AddOptional(v, 5, senderNonce); - AddOptional(v, 6, recipNonce); - AddOptional(v, 7, freeText); - AddOptional(v, 8, generalInfo); - - return new DerSequence(v); - } - - private static void AddOptional(Asn1EncodableVector v, int tagNo, Asn1Encodable obj) - { - if (obj != null) - { - v.Add(new DerTaggedObject(true, tagNo, obj)); - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/PKIHeaderBuilder.cs b/bc-sharp-crypto/src/asn1/cmp/PKIHeaderBuilder.cs deleted file mode 100644 index 00073c0..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/PKIHeaderBuilder.cs +++ /dev/null @@ -1,223 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class PkiHeaderBuilder - { - private DerInteger pvno; - private GeneralName sender; - private GeneralName recipient; - private DerGeneralizedTime messageTime; - private AlgorithmIdentifier protectionAlg; - private Asn1OctetString senderKID; // KeyIdentifier - private Asn1OctetString recipKID; // KeyIdentifier - private Asn1OctetString transactionID; - private Asn1OctetString senderNonce; - private Asn1OctetString recipNonce; - private PkiFreeText freeText; - private Asn1Sequence generalInfo; - - public PkiHeaderBuilder( - int pvno, - GeneralName sender, - GeneralName recipient) - : this(new DerInteger(pvno), sender, recipient) - { - } - - private PkiHeaderBuilder( - DerInteger pvno, - GeneralName sender, - GeneralName recipient) - { - this.pvno = pvno; - this.sender = sender; - this.recipient = recipient; - } - - public virtual PkiHeaderBuilder SetMessageTime(DerGeneralizedTime time) - { - messageTime = time; - return this; - } - - public virtual PkiHeaderBuilder SetProtectionAlg(AlgorithmIdentifier aid) - { - protectionAlg = aid; - return this; - } - - public virtual PkiHeaderBuilder SetSenderKID(byte[] kid) - { - return SetSenderKID(kid == null ? null : new DerOctetString(kid)); - } - - public virtual PkiHeaderBuilder SetSenderKID(Asn1OctetString kid) - { - senderKID = kid; - return this; - } - - public virtual PkiHeaderBuilder SetRecipKID(byte[] kid) - { - return SetRecipKID(kid == null ? null : new DerOctetString(kid)); - } - - public virtual PkiHeaderBuilder SetRecipKID(DerOctetString kid) - { - recipKID = kid; - return this; - } - - public virtual PkiHeaderBuilder SetTransactionID(byte[] tid) - { - return SetTransactionID(tid == null ? null : new DerOctetString(tid)); - } - - public virtual PkiHeaderBuilder SetTransactionID(Asn1OctetString tid) - { - transactionID = tid; - return this; - } - - public virtual PkiHeaderBuilder SetSenderNonce(byte[] nonce) - { - return SetSenderNonce(nonce == null ? null : new DerOctetString(nonce)); - } - - public virtual PkiHeaderBuilder SetSenderNonce(Asn1OctetString nonce) - { - senderNonce = nonce; - return this; - } - - public virtual PkiHeaderBuilder SetRecipNonce(byte[] nonce) - { - return SetRecipNonce(nonce == null ? null : new DerOctetString(nonce)); - } - - public virtual PkiHeaderBuilder SetRecipNonce(Asn1OctetString nonce) - { - recipNonce = nonce; - return this; - } - - public virtual PkiHeaderBuilder SetFreeText(PkiFreeText text) - { - freeText = text; - return this; - } - - public virtual PkiHeaderBuilder SetGeneralInfo(InfoTypeAndValue genInfo) - { - return SetGeneralInfo(MakeGeneralInfoSeq(genInfo)); - } - - public virtual PkiHeaderBuilder SetGeneralInfo(InfoTypeAndValue[] genInfos) - { - return SetGeneralInfo(MakeGeneralInfoSeq(genInfos)); - } - - public virtual PkiHeaderBuilder SetGeneralInfo(Asn1Sequence seqOfInfoTypeAndValue) - { - generalInfo = seqOfInfoTypeAndValue; - return this; - } - - private static Asn1Sequence MakeGeneralInfoSeq( - InfoTypeAndValue generalInfo) - { - return new DerSequence(generalInfo); - } - - private static Asn1Sequence MakeGeneralInfoSeq( - InfoTypeAndValue[] generalInfos) - { - Asn1Sequence genInfoSeq = null; - if (generalInfos != null) - { - Asn1EncodableVector v = new Asn1EncodableVector(); - for (int i = 0; i < generalInfos.Length; ++i) - { - v.Add(generalInfos[i]); - } - genInfoSeq = new DerSequence(v); - } - return genInfoSeq; - } - - /** - * 
-		 *  PKIHeader ::= SEQUENCE {
-		 *            pvno                INTEGER     { cmp1999(1), cmp2000(2) },
-		 *            sender              GeneralName,
-		 *            -- identifies the sender
-		 *            recipient           GeneralName,
-		 *            -- identifies the intended recipient
-		 *            messageTime     [0] GeneralizedTime         OPTIONAL,
-		 *            -- time of production of this message (used when sender
-		 *            -- believes that the transport will be "suitable"; i.e.,
-		 *            -- that the time will still be meaningful upon receipt)
-		 *            protectionAlg   [1] AlgorithmIdentifier     OPTIONAL,
-		 *            -- algorithm used for calculation of protection bits
-		 *            senderKID       [2] KeyIdentifier           OPTIONAL,
-		 *            recipKID        [3] KeyIdentifier           OPTIONAL,
-		 *            -- to identify specific keys used for protection
-		 *            transactionID   [4] OCTET STRING            OPTIONAL,
-		 *            -- identifies the transaction; i.e., this will be the same in
-		 *            -- corresponding request, response, certConf, and PKIConf
-		 *            -- messages
-		 *            senderNonce     [5] OCTET STRING            OPTIONAL,
-		 *            recipNonce      [6] OCTET STRING            OPTIONAL,
-		 *            -- nonces used to provide replay protection, senderNonce
-		 *            -- is inserted by the creator of this message; recipNonce
-		 *            -- is a nonce previously inserted in a related message by
-		 *            -- the intended recipient of this message
-		 *            freeText        [7] PKIFreeText             OPTIONAL,
-		 *            -- this may be used to indicate context-specific instructions
-		 *            -- (this field is intended for human consumption)
-		 *            generalInfo     [8] SEQUENCE SIZE (1..MAX) OF
-		 *                                 InfoTypeAndValue     OPTIONAL
-		 *            -- this may be used to convey context-specific information
-		 *            -- (this field not primarily intended for human consumption)
-		 * }
-		 *
- * @return a basic ASN.1 object representation. - */ - public virtual PkiHeader Build() - { - Asn1EncodableVector v = new Asn1EncodableVector(pvno, sender, recipient); - AddOptional(v, 0, messageTime); - AddOptional(v, 1, protectionAlg); - AddOptional(v, 2, senderKID); - AddOptional(v, 3, recipKID); - AddOptional(v, 4, transactionID); - AddOptional(v, 5, senderNonce); - AddOptional(v, 6, recipNonce); - AddOptional(v, 7, freeText); - AddOptional(v, 8, generalInfo); - - messageTime = null; - protectionAlg = null; - senderKID = null; - recipKID = null; - transactionID = null; - senderNonce = null; - recipNonce = null; - freeText = null; - generalInfo = null; - - return PkiHeader.GetInstance(new DerSequence(v)); - } - - private void AddOptional(Asn1EncodableVector v, int tagNo, Asn1Encodable obj) - { - if (obj != null) - { - v.Add(new DerTaggedObject(true, tagNo, obj)); - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/PKIMessage.cs b/bc-sharp-crypto/src/asn1/cmp/PKIMessage.cs deleted file mode 100644 index 086a2d9..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/PKIMessage.cs +++ /dev/null @@ -1,140 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class PkiMessage - : Asn1Encodable - { - private readonly PkiHeader header; - private readonly PkiBody body; - private readonly DerBitString protection; - private readonly Asn1Sequence extraCerts; - - private PkiMessage(Asn1Sequence seq) - { - header = PkiHeader.GetInstance(seq[0]); - body = PkiBody.GetInstance(seq[1]); - - for (int pos = 2; pos < seq.Count; ++pos) - { - Asn1TaggedObject tObj = (Asn1TaggedObject)seq[pos].ToAsn1Object(); - - if (tObj.TagNo == 0) - { - protection = DerBitString.GetInstance(tObj, true); - } - else - { - extraCerts = Asn1Sequence.GetInstance(tObj, true); - } - } - } - - public static PkiMessage GetInstance(object obj) - { - if (obj is PkiMessage) - return (PkiMessage)obj; - - if (obj != null) - return new PkiMessage(Asn1Sequence.GetInstance(obj)); - - return null; - } - - /** - * Creates a new PkiMessage. - * - * @param header message header - * @param body message body - * @param protection message protection (may be null) - * @param extraCerts extra certificates (may be null) - */ - public PkiMessage( - PkiHeader header, - PkiBody body, - DerBitString protection, - CmpCertificate[] extraCerts) - { - this.header = header; - this.body = body; - this.protection = protection; - if (extraCerts != null) - { - this.extraCerts = new DerSequence(extraCerts); - } - } - - public PkiMessage( - PkiHeader header, - PkiBody body, - DerBitString protection) - : this(header, body, protection, null) - { - } - - public PkiMessage( - PkiHeader header, - PkiBody body) - : this(header, body, null, null) - { - } - - public virtual PkiHeader Header - { - get { return header; } - } - - public virtual PkiBody Body - { - get { return body; } - } - - public virtual DerBitString Protection - { - get { return protection; } - } - - public virtual CmpCertificate[] GetExtraCerts() - { - if (extraCerts == null) - return null; - - CmpCertificate[] results = new CmpCertificate[extraCerts.Count]; - for (int i = 0; i < results.Length; ++i) - { - results[i] = CmpCertificate.GetInstance(extraCerts[i]); - } - return results; - } - - /** - * 
-         * PkiMessage ::= SEQUENCE {
-         *                  header           PKIHeader,
-         *                  body             PKIBody,
-         *                  protection   [0] PKIProtection OPTIONAL,
-         *                  extraCerts   [1] SEQUENCE SIZE (1..MAX) OF CMPCertificate
-         *                                                                     OPTIONAL
-         * }
-         *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(header, body); - - AddOptional(v, 0, protection); - AddOptional(v, 1, extraCerts); - - return new DerSequence(v); - } - - private static void AddOptional(Asn1EncodableVector v, int tagNo, Asn1Encodable obj) - { - if (obj != null) - { - v.Add(new DerTaggedObject(true, tagNo, obj)); - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/PKIMessages.cs b/bc-sharp-crypto/src/asn1/cmp/PKIMessages.cs deleted file mode 100644 index eb01e54..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/PKIMessages.cs +++ /dev/null @@ -1,54 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class PkiMessages - : Asn1Encodable - { - private Asn1Sequence content; - - private PkiMessages(Asn1Sequence seq) - { - content = seq; - } - - public static PkiMessages GetInstance(object obj) - { - if (obj is PkiMessages) - return (PkiMessages)obj; - - if (obj is Asn1Sequence) - return new PkiMessages((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public PkiMessages(params PkiMessage[] msgs) - { - content = new DerSequence(msgs); - } - - public virtual PkiMessage[] ToPkiMessageArray() - { - PkiMessage[] result = new PkiMessage[content.Count]; - for (int i = 0; i != result.Length; ++i) - { - result[i] = PkiMessage.GetInstance(content[i]); - } - return result; - } - - /** - * 
-         * PkiMessages ::= SEQUENCE SIZE (1..MAX) OF PkiMessage
-         *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - return content; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/PKIStatus.cs b/bc-sharp-crypto/src/asn1/cmp/PKIStatus.cs deleted file mode 100644 index ba757df..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/PKIStatus.cs +++ /dev/null @@ -1,63 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public enum PkiStatus - { - Granted = 0, - GrantedWithMods = 1, - Rejection = 2, - Waiting = 3, - RevocationWarning = 4, - RevocationNotification = 5, - KeyUpdateWarning = 6, - } - - public class PkiStatusEncodable - : Asn1Encodable - { - public static readonly PkiStatusEncodable granted = new PkiStatusEncodable(PkiStatus.Granted); - public static readonly PkiStatusEncodable grantedWithMods = new PkiStatusEncodable(PkiStatus.GrantedWithMods); - public static readonly PkiStatusEncodable rejection = new PkiStatusEncodable(PkiStatus.Rejection); - public static readonly PkiStatusEncodable waiting = new PkiStatusEncodable(PkiStatus.Waiting); - public static readonly PkiStatusEncodable revocationWarning = new PkiStatusEncodable(PkiStatus.RevocationWarning); - public static readonly PkiStatusEncodable revocationNotification = new PkiStatusEncodable(PkiStatus.RevocationNotification); - public static readonly PkiStatusEncodable keyUpdateWaiting = new PkiStatusEncodable(PkiStatus.KeyUpdateWarning); - - private readonly DerInteger status; - - private PkiStatusEncodable(PkiStatus status) - : this(new DerInteger((int)status)) - { - } - - private PkiStatusEncodable(DerInteger status) - { - this.status = status; - } - - public static PkiStatusEncodable GetInstance(object obj) - { - if (obj is PkiStatusEncodable) - return (PkiStatusEncodable)obj; - - if (obj is DerInteger) - return new PkiStatusEncodable((DerInteger)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public virtual BigInteger Value - { - get { return status.Value; } - } - - public override Asn1Object ToAsn1Object() - { - return status; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/PKIStatusInfo.cs b/bc-sharp-crypto/src/asn1/cmp/PKIStatusInfo.cs deleted file mode 100644 index b19bf74..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/PKIStatusInfo.cs +++ /dev/null @@ -1,166 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class PkiStatusInfo - : Asn1Encodable - { - DerInteger status; - PkiFreeText statusString; - DerBitString failInfo; - - public static PkiStatusInfo GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - return GetInstance(Asn1Sequence.GetInstance(obj, isExplicit)); - } - - public static PkiStatusInfo GetInstance( - object obj) - { - if (obj is PkiStatusInfo) - { - return (PkiStatusInfo)obj; - } - else if (obj is Asn1Sequence) - { - return new PkiStatusInfo((Asn1Sequence)obj); - } - - throw new ArgumentException("Unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public PkiStatusInfo( - Asn1Sequence seq) - { - this.status = DerInteger.GetInstance(seq[0]); - - this.statusString = null; - this.failInfo = null; - - if (seq.Count > 2) - { - this.statusString = PkiFreeText.GetInstance(seq[1]); - this.failInfo = DerBitString.GetInstance(seq[2]); - } - else if (seq.Count > 1) - { - object obj = seq[1]; - if (obj is DerBitString) - { - this.failInfo = DerBitString.GetInstance(obj); - } - else - { - this.statusString = PkiFreeText.GetInstance(obj); - } - } - } - - /** - * @param status - */ - public PkiStatusInfo(int status) - { - this.status = new DerInteger(status); - } - - /** - * @param status - * @param statusString - */ - public PkiStatusInfo( - int status, - PkiFreeText statusString) - { - this.status = new DerInteger(status); - this.statusString = statusString; - } - - public PkiStatusInfo( - int status, - PkiFreeText statusString, - PkiFailureInfo failInfo) - { - this.status = new DerInteger(status); - this.statusString = statusString; - this.failInfo = failInfo; - } - - public BigInteger Status - { - get - { - return status.Value; - } - } - - public PkiFreeText StatusString - { - get - { - return statusString; - } - } - - public DerBitString FailInfo - { - get - { - return failInfo; - } - } - - /** - * 
-		 * PkiStatusInfo ::= SEQUENCE {
-		 *     status        PKIStatus,                (INTEGER)
-		 *     statusString  PkiFreeText     OPTIONAL,
-		 *     failInfo      PkiFailureInfo  OPTIONAL  (BIT STRING)
-		 * }
-		 *
-		 * PKIStatus:
-		 *   granted                (0), -- you got exactly what you asked for
-		 *   grantedWithMods        (1), -- you got something like what you asked for
-		 *   rejection              (2), -- you don't get it, more information elsewhere in the message
-		 *   waiting                (3), -- the request body part has not yet been processed, expect to hear more later
-		 *   revocationWarning      (4), -- this message contains a warning that a revocation is imminent
-		 *   revocationNotification (5), -- notification that a revocation has occurred
-		 *   keyUpdateWarning       (6)  -- update already done for the oldCertId specified in CertReqMsg
-		 *
-		 * PkiFailureInfo:
-		 *   badAlg           (0), -- unrecognized or unsupported Algorithm Identifier
-		 *   badMessageCheck  (1), -- integrity check failed (e.g., signature did not verify)
-		 *   badRequest       (2), -- transaction not permitted or supported
-		 *   badTime          (3), -- messageTime was not sufficiently close to the system time, as defined by local policy
-		 *   badCertId        (4), -- no certificate could be found matching the provided criteria
-		 *   badDataFormat    (5), -- the data submitted has the wrong format
-		 *   wrongAuthority   (6), -- the authority indicated in the request is different from the one creating the response token
-		 *   incorrectData    (7), -- the requester's data is incorrect (for notary services)
-		 *   missingTimeStamp (8), -- when the timestamp is missing but should be there (by policy)
-		 *   badPOP           (9)  -- the proof-of-possession failed
-		 *
-		 *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(status); - - if (statusString != null) - { - v.Add(statusString); - } - - if (failInfo!= null) - { - v.Add(failInfo); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/PbmParameter.cs b/bc-sharp-crypto/src/asn1/cmp/PbmParameter.cs deleted file mode 100644 index 206b89b..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/PbmParameter.cs +++ /dev/null @@ -1,101 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class PbmParameter - : Asn1Encodable - { - private Asn1OctetString salt; - private AlgorithmIdentifier owf; - private DerInteger iterationCount; - private AlgorithmIdentifier mac; - - private PbmParameter(Asn1Sequence seq) - { - salt = Asn1OctetString.GetInstance(seq[0]); - owf = AlgorithmIdentifier.GetInstance(seq[1]); - iterationCount = DerInteger.GetInstance(seq[2]); - mac = AlgorithmIdentifier.GetInstance(seq[3]); - } - - public static PbmParameter GetInstance(object obj) - { - if (obj is PbmParameter) - return (PbmParameter)obj; - - if (obj is Asn1Sequence) - return new PbmParameter((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public PbmParameter( - byte[] salt, - AlgorithmIdentifier owf, - int iterationCount, - AlgorithmIdentifier mac) - : this(new DerOctetString(salt), owf, new DerInteger(iterationCount), mac) - { - } - - public PbmParameter( - Asn1OctetString salt, - AlgorithmIdentifier owf, - DerInteger iterationCount, - AlgorithmIdentifier mac) - { - this.salt = salt; - this.owf = owf; - this.iterationCount = iterationCount; - this.mac = mac; - } - - public virtual Asn1OctetString Salt - { - get { return salt; } - } - - public virtual AlgorithmIdentifier Owf - { - get { return owf; } - } - - public virtual DerInteger IterationCount - { - get { return iterationCount; } - } - - public virtual AlgorithmIdentifier Mac - { - get { return mac; } - } - - /** - * 
-         *  PbmParameter ::= SEQUENCE {
-         *                        salt                OCTET STRING,
-         *                        -- note:  implementations MAY wish to limit acceptable sizes
-         *                        -- of this string to values appropriate for their environment
-         *                        -- in order to reduce the risk of denial-of-service attacks
-         *                        owf                 AlgorithmIdentifier,
-         *                        -- AlgId for a One-Way Function (SHA-1 recommended)
-         *                        iterationCount      INTEGER,
-         *                        -- number of times the OWF is applied
-         *                        -- note:  implementations MAY wish to limit acceptable sizes
-         *                        -- of this integer to values appropriate for their environment
-         *                        -- in order to reduce the risk of denial-of-service attacks
-         *                        mac                 AlgorithmIdentifier
-         *                        -- the MAC AlgId (e.g., DES-MAC, Triple-DES-MAC [PKCS11],
-         *    }   -- or HMAC [RFC2104, RFC2202])
-         *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(salt, owf, iterationCount, mac); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/PollRepContent.cs b/bc-sharp-crypto/src/asn1/cmp/PollRepContent.cs deleted file mode 100644 index f8bb098..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/PollRepContent.cs +++ /dev/null @@ -1,68 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class PollRepContent - : Asn1Encodable - { - private readonly DerInteger certReqId; - private readonly DerInteger checkAfter; - private readonly PkiFreeText reason; - - private PollRepContent(Asn1Sequence seq) - { - certReqId = DerInteger.GetInstance(seq[0]); - checkAfter = DerInteger.GetInstance(seq[1]); - - if (seq.Count > 2) - { - reason = PkiFreeText.GetInstance(seq[2]); - } - } - - public static PollRepContent GetInstance(object obj) - { - if (obj is PollRepContent) - return (PollRepContent)obj; - - if (obj is Asn1Sequence) - return new PollRepContent((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public virtual DerInteger CertReqID - { - get { return certReqId; } - } - - public virtual DerInteger CheckAfter - { - get { return checkAfter; } - } - - public virtual PkiFreeText Reason - { - get { return reason; } - } - - /** - * 
-		 * PollRepContent ::= SEQUENCE OF SEQUENCE {
-		 *         certReqId              INTEGER,
-		 *         checkAfter             INTEGER,  -- time in seconds
-		 *         reason                 PKIFreeText OPTIONAL
-		 *     }
-		 *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(certReqId, checkAfter); - v.AddOptional(reason); - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/PollReqContent.cs b/bc-sharp-crypto/src/asn1/cmp/PollReqContent.cs deleted file mode 100644 index dd9b0c3..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/PollReqContent.cs +++ /dev/null @@ -1,61 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class PollReqContent - : Asn1Encodable - { - private readonly Asn1Sequence content; - - private PollReqContent(Asn1Sequence seq) - { - content = seq; - } - - public static PollReqContent GetInstance(object obj) - { - if (obj is PollReqContent) - return (PollReqContent)obj; - - if (obj is Asn1Sequence) - return new PollReqContent((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public virtual DerInteger[][] GetCertReqIDs() - { - DerInteger[][] result = new DerInteger[content.Count][]; - for (int i = 0; i != result.Length; ++i) - { - result[i] = SequenceToDerIntegerArray((Asn1Sequence)content[i]); - } - return result; - } - - private static DerInteger[] SequenceToDerIntegerArray(Asn1Sequence seq) - { - DerInteger[] result = new DerInteger[seq.Count]; - for (int i = 0; i != result.Length; ++i) - { - result[i] = DerInteger.GetInstance(seq[i]); - } - return result; - } - - /** - * 
-		 * PollReqContent ::= SEQUENCE OF SEQUENCE {
-		 *                        certReqId              INTEGER
-		 * }
-		 *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - return content; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/PopoDecKeyChallContent.cs b/bc-sharp-crypto/src/asn1/cmp/PopoDecKeyChallContent.cs deleted file mode 100644 index 03a13a5..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/PopoDecKeyChallContent.cs +++ /dev/null @@ -1,49 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class PopoDecKeyChallContent - : Asn1Encodable - { - private readonly Asn1Sequence content; - - private PopoDecKeyChallContent(Asn1Sequence seq) - { - content = seq; - } - - public static PopoDecKeyChallContent GetInstance(object obj) - { - if (obj is PopoDecKeyChallContent) - return (PopoDecKeyChallContent)obj; - - if (obj is Asn1Sequence) - return new PopoDecKeyChallContent((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public virtual Challenge[] ToChallengeArray() - { - Challenge[] result = new Challenge[content.Count]; - for (int i = 0; i != result.Length; ++i) - { - result[i] = Challenge.GetInstance(content[i]); - } - return result; - } - - /** - * 
-	     * PopoDecKeyChallContent ::= SEQUENCE OF Challenge
-	     *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - return content; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/PopoDecKeyRespContent.cs b/bc-sharp-crypto/src/asn1/cmp/PopoDecKeyRespContent.cs deleted file mode 100644 index 73f59b7..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/PopoDecKeyRespContent.cs +++ /dev/null @@ -1,49 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class PopoDecKeyRespContent - : Asn1Encodable - { - private readonly Asn1Sequence content; - - private PopoDecKeyRespContent(Asn1Sequence seq) - { - content = seq; - } - - public static PopoDecKeyRespContent GetInstance(object obj) - { - if (obj is PopoDecKeyRespContent) - return (PopoDecKeyRespContent)obj; - - if (obj is Asn1Sequence) - return new PopoDecKeyRespContent((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public virtual DerInteger[] ToDerIntegerArray() - { - DerInteger[] result = new DerInteger[content.Count]; - for (int i = 0; i != result.Length; ++i) - { - result[i] = DerInteger.GetInstance(content[i]); - } - return result; - } - - /** - * 
-		 * PopoDecKeyRespContent ::= SEQUENCE OF INTEGER
-		 *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - return content; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/ProtectedPart.cs b/bc-sharp-crypto/src/asn1/cmp/ProtectedPart.cs deleted file mode 100644 index ed90708..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/ProtectedPart.cs +++ /dev/null @@ -1,60 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class ProtectedPart - : Asn1Encodable - { - private readonly PkiHeader header; - private readonly PkiBody body; - - private ProtectedPart(Asn1Sequence seq) - { - header = PkiHeader.GetInstance(seq[0]); - body = PkiBody.GetInstance(seq[1]); - } - - public static ProtectedPart GetInstance(object obj) - { - if (obj is ProtectedPart) - return (ProtectedPart)obj; - - if (obj is Asn1Sequence) - return new ProtectedPart((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public ProtectedPart(PkiHeader header, PkiBody body) - { - this.header = header; - this.body = body; - } - - public virtual PkiHeader Header - { - get { return header; } - } - - public virtual PkiBody Body - { - get { return body; } - } - - /** - * 
-		 * ProtectedPart ::= SEQUENCE {
-		 *                    header    PKIHeader,
-		 *                    body      PKIBody
-		 * }
-		 *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(header, body); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/RevAnnContent.cs b/bc-sharp-crypto/src/asn1/cmp/RevAnnContent.cs deleted file mode 100644 index d5d4262..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/RevAnnContent.cs +++ /dev/null @@ -1,87 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.Crmf; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class RevAnnContent - : Asn1Encodable - { - private readonly PkiStatusEncodable status; - private readonly CertId certId; - private readonly DerGeneralizedTime willBeRevokedAt; - private readonly DerGeneralizedTime badSinceDate; - private readonly X509Extensions crlDetails; - - private RevAnnContent(Asn1Sequence seq) - { - status = PkiStatusEncodable.GetInstance(seq[0]); - certId = CertId.GetInstance(seq[1]); - willBeRevokedAt = DerGeneralizedTime.GetInstance(seq[2]); - badSinceDate = DerGeneralizedTime.GetInstance(seq[3]); - - if (seq.Count > 4) - { - crlDetails = X509Extensions.GetInstance(seq[4]); - } - } - - public static RevAnnContent GetInstance(object obj) - { - if (obj is RevAnnContent) - return (RevAnnContent)obj; - - if (obj is Asn1Sequence) - return new RevAnnContent((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public virtual PkiStatusEncodable Status - { - get { return status; } - } - - public virtual CertId CertID - { - get { return certId; } - } - - public virtual DerGeneralizedTime WillBeRevokedAt - { - get { return willBeRevokedAt; } - } - - public virtual DerGeneralizedTime BadSinceDate - { - get { return badSinceDate; } - } - - public virtual X509Extensions CrlDetails - { - get { return crlDetails; } - } - - /** - * 
-		 * RevAnnContent ::= SEQUENCE {
-		 *       status              PKIStatus,
-		 *       certId              CertId,
-		 *       willBeRevokedAt     GeneralizedTime,
-		 *       badSinceDate        GeneralizedTime,
-		 *       crlDetails          Extensions  OPTIONAL
-		 *        -- extra CRL details (e.g., crl number, reason, location, etc.)
-		 * }
-		 *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(status, certId, willBeRevokedAt, badSinceDate); - v.AddOptional(crlDetails); - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/RevDetails.cs b/bc-sharp-crypto/src/asn1/cmp/RevDetails.cs deleted file mode 100644 index 7d2a65a..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/RevDetails.cs +++ /dev/null @@ -1,75 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.Crmf; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class RevDetails - : Asn1Encodable - { - private readonly CertTemplate certDetails; - private readonly X509Extensions crlEntryDetails; - - private RevDetails(Asn1Sequence seq) - { - certDetails = CertTemplate.GetInstance(seq[0]); - crlEntryDetails = seq.Count <= 1 - ? null - : X509Extensions.GetInstance(seq[1]); - } - - public static RevDetails GetInstance(object obj) - { - if (obj is RevDetails) - return (RevDetails)obj; - - if (obj is Asn1Sequence) - return new RevDetails((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public RevDetails(CertTemplate certDetails) - : this(certDetails, null) - { - } - - public RevDetails(CertTemplate certDetails, X509Extensions crlEntryDetails) - { - this.certDetails = certDetails; - this.crlEntryDetails = crlEntryDetails; - } - - public virtual CertTemplate CertDetails - { - get { return certDetails; } - } - - public virtual X509Extensions CrlEntryDetails - { - get { return crlEntryDetails; } - } - - /** - * 
-		* RevDetails ::= SEQUENCE {
-		*                  certDetails         CertTemplate,
-		*                   -- allows requester to specify as much as they can about
-		*                   -- the cert. for which revocation is requested
-		*                   -- (e.g., for cases in which serialNumber is not available)
-		*                   crlEntryDetails     Extensions       OPTIONAL
-		*                   -- requested crlEntryExtensions
-		*             }
-		*
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(certDetails); - v.AddOptional(crlEntryDetails); - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/RevRepContent.cs b/bc-sharp-crypto/src/asn1/cmp/RevRepContent.cs deleted file mode 100644 index 8e382a6..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/RevRepContent.cs +++ /dev/null @@ -1,113 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.Crmf; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class RevRepContent - : Asn1Encodable - { - private readonly Asn1Sequence status; - private readonly Asn1Sequence revCerts; - private readonly Asn1Sequence crls; - - private RevRepContent(Asn1Sequence seq) - { - status = Asn1Sequence.GetInstance(seq[0]); - - for (int pos = 1; pos < seq.Count; ++pos) - { - Asn1TaggedObject tObj = Asn1TaggedObject.GetInstance(seq[pos]); - - if (tObj.TagNo == 0) - { - revCerts = Asn1Sequence.GetInstance(tObj, true); - } - else - { - crls = Asn1Sequence.GetInstance(tObj, true); - } - } - } - - public static RevRepContent GetInstance(object obj) - { - if (obj is RevRepContent) - return (RevRepContent)obj; - - if (obj is Asn1Sequence) - return new RevRepContent((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public virtual PkiStatusInfo[] GetStatus() - { - PkiStatusInfo[] results = new PkiStatusInfo[status.Count]; - for (int i = 0; i != results.Length; ++i) - { - results[i] = PkiStatusInfo.GetInstance(status[i]); - } - return results; - } - - public virtual CertId[] GetRevCerts() - { - if (revCerts == null) - return null; - - CertId[] results = new CertId[revCerts.Count]; - for (int i = 0; i != results.Length; ++i) - { - results[i] = CertId.GetInstance(revCerts[i]); - } - return results; - } - - public virtual CertificateList[] GetCrls() - { - if (crls == null) - return null; - - CertificateList[] results = new CertificateList[crls.Count]; - for (int i = 0; i != results.Length; ++i) - { - results[i] = CertificateList.GetInstance(crls[i]); - } - return results; - } - - /** - * 
-		 * RevRepContent ::= SEQUENCE {
-		 *        status       SEQUENCE SIZE (1..MAX) OF PKIStatusInfo,
-		 *        -- in same order as was sent in RevReqContent
-		 *        revCerts [0] SEQUENCE SIZE (1..MAX) OF CertId OPTIONAL,
-		 *        -- IDs for which revocation was requested
-		 *        -- (same order as status)
-		 *        crls     [1] SEQUENCE SIZE (1..MAX) OF CertificateList OPTIONAL
-		 *        -- the resulting CRLs (there may be more than one)
-		 *   }
-		 *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(status); - AddOptional(v, 0, revCerts); - AddOptional(v, 1, crls); - return new DerSequence(v); - } - - private void AddOptional(Asn1EncodableVector v, int tagNo, Asn1Encodable obj) - { - if (obj != null) - { - v.Add(new DerTaggedObject(true, tagNo, obj)); - } - } - } -} - diff --git a/bc-sharp-crypto/src/asn1/cmp/RevRepContentBuilder.cs b/bc-sharp-crypto/src/asn1/cmp/RevRepContentBuilder.cs deleted file mode 100644 index cc17d1d..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/RevRepContentBuilder.cs +++ /dev/null @@ -1,55 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.Crmf; -using Org.BouncyCastle.Asn1.X509; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class RevRepContentBuilder - { - private readonly Asn1EncodableVector status = new Asn1EncodableVector(); - private readonly Asn1EncodableVector revCerts = new Asn1EncodableVector(); - private readonly Asn1EncodableVector crls = new Asn1EncodableVector(); - - public virtual RevRepContentBuilder Add(PkiStatusInfo status) - { - this.status.Add(status); - return this; - } - - public virtual RevRepContentBuilder Add(PkiStatusInfo status, CertId certId) - { - if (this.status.Count != this.revCerts.Count) - throw new InvalidOperationException("status and revCerts sequence must be in common order"); - - this.status.Add(status); - this.revCerts.Add(certId); - return this; - } - - public virtual RevRepContentBuilder AddCrl(CertificateList crl) - { - this.crls.Add(crl); - return this; - } - - public virtual RevRepContent Build() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - v.Add(new DerSequence(status)); - - if (revCerts.Count != 0) - { - v.Add(new DerTaggedObject(true, 0, new DerSequence(revCerts))); - } - - if (crls.Count != 0) - { - v.Add(new DerTaggedObject(true, 1, new DerSequence(crls))); - } - - return RevRepContent.GetInstance(new DerSequence(v)); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cmp/RevReqContent.cs b/bc-sharp-crypto/src/asn1/cmp/RevReqContent.cs deleted file mode 100644 index 1522d37..0000000 --- a/bc-sharp-crypto/src/asn1/cmp/RevReqContent.cs +++ /dev/null @@ -1,54 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cmp -{ - public class RevReqContent - : Asn1Encodable - { - private readonly Asn1Sequence content; - - private RevReqContent(Asn1Sequence seq) - { - content = seq; - } - - public static RevReqContent GetInstance(object obj) - { - if (obj is RevReqContent) - return (RevReqContent)obj; - - if (obj is Asn1Sequence) - return new RevReqContent((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public RevReqContent(params RevDetails[] revDetails) - { - this.content = new DerSequence(revDetails); - } - - public virtual RevDetails[] ToRevDetailsArray() - { - RevDetails[] result = new RevDetails[content.Count]; - for (int i = 0; i != result.Length; ++i) - { - result[i] = RevDetails.GetInstance(content[i]); - } - return result; - } - - /** - * 
-		 * RevReqContent ::= SEQUENCE OF RevDetails
-		 *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - return content; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/Attribute.cs b/bc-sharp-crypto/src/asn1/cms/Attribute.cs deleted file mode 100644 index 69ac441..0000000 --- a/bc-sharp-crypto/src/asn1/cms/Attribute.cs +++ /dev/null @@ -1,70 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class Attribute - : Asn1Encodable - { - private DerObjectIdentifier attrType; - private Asn1Set attrValues; - - /** - * return an Attribute object from the given object. - * - * @param o the object we want converted. - * @exception ArgumentException if the object cannot be converted. - */ - public static Attribute GetInstance( - object obj) - { - if (obj == null || obj is Attribute) - return (Attribute) obj; - - if (obj is Asn1Sequence) - return new Attribute((Asn1Sequence) obj); - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public Attribute( - Asn1Sequence seq) - { - attrType = (DerObjectIdentifier)seq[0]; - attrValues = (Asn1Set)seq[1]; - } - - public Attribute( - DerObjectIdentifier attrType, - Asn1Set attrValues) - { - this.attrType = attrType; - this.attrValues = attrValues; - } - - public DerObjectIdentifier AttrType - { - get { return attrType; } - } - - public Asn1Set AttrValues - { - get { return attrValues; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-        * Attribute ::= SEQUENCE {
-        *     attrType OBJECT IDENTIFIER,
-        *     attrValues SET OF AttributeValue
-        * }
-        *
- */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(attrType, attrValues); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/AttributeTable.cs b/bc-sharp-crypto/src/asn1/cms/AttributeTable.cs deleted file mode 100644 index 8d357f1..0000000 --- a/bc-sharp-crypto/src/asn1/cms/AttributeTable.cs +++ /dev/null @@ -1,231 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class AttributeTable - { - private readonly IDictionary attributes; - -#if !(SILVERLIGHT || PORTABLE) - [Obsolete] - public AttributeTable( - Hashtable attrs) - { - this.attributes = Platform.CreateHashtable(attrs); - } -#endif - - public AttributeTable( - IDictionary attrs) - { - this.attributes = Platform.CreateHashtable(attrs); - } - - public AttributeTable( - Asn1EncodableVector v) - { - this.attributes = Platform.CreateHashtable(v.Count); - - foreach (Asn1Encodable o in v) - { - Attribute a = Attribute.GetInstance(o); - - AddAttribute(a); - } - } - - public AttributeTable( - Asn1Set s) - { - this.attributes = Platform.CreateHashtable(s.Count); - - for (int i = 0; i != s.Count; i++) - { - Attribute a = Attribute.GetInstance(s[i]); - - AddAttribute(a); - } - } - - public AttributeTable( - Attributes attrs) - : this(Asn1Set.GetInstance(attrs.ToAsn1Object())) - { - } - - private void AddAttribute( - Attribute a) - { - DerObjectIdentifier oid = a.AttrType; - object obj = attributes[oid]; - - if (obj == null) - { - attributes[oid] = a; - } - else - { - IList v; - - if (obj is Attribute) - { - v = Platform.CreateArrayList(); - - v.Add(obj); - v.Add(a); - } - else - { - v = (IList) obj; - - v.Add(a); - } - - attributes[oid] = v; - } - } - - /// Return the first attribute matching the given OBJECT IDENTIFIER - public Attribute this[DerObjectIdentifier oid] - { - get - { - object obj = attributes[oid]; - - if (obj is IList) - { - return (Attribute)((IList)obj)[0]; - } - - return (Attribute) obj; - } - } - - [Obsolete("Use 'object[oid]' syntax instead")] - public Attribute Get( - DerObjectIdentifier oid) - { - return this[oid]; - } - - /** - * Return all the attributes matching the OBJECT IDENTIFIER oid. The vector will be - * empty if there are no attributes of the required type present. - * - * @param oid type of attribute required. - * @return a vector of all the attributes found of type oid. - */ - public Asn1EncodableVector GetAll( - DerObjectIdentifier oid) - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - object obj = attributes[oid]; - - if (obj is IList) - { - foreach (Attribute a in (IList)obj) - { - v.Add(a); - } - } - else if (obj != null) - { - v.Add((Attribute) obj); - } - - return v; - } - - public int Count - { - get - { - int total = 0; - - foreach (object o in attributes.Values) - { - if (o is IList) - { - total += ((IList)o).Count; - } - else - { - ++total; - } - } - - return total; - } - } - - public IDictionary ToDictionary() - { - return Platform.CreateHashtable(attributes); - } - -#if !(SILVERLIGHT || PORTABLE) - [Obsolete("Use 'ToDictionary' instead")] - public Hashtable ToHashtable() - { - return new Hashtable(attributes); - } -#endif - - public Asn1EncodableVector ToAsn1EncodableVector() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - foreach (object obj in attributes.Values) - { - if (obj is IList) - { - foreach (object el in (IList)obj) - { - v.Add(Attribute.GetInstance(el)); - } - } - else - { - v.Add(Attribute.GetInstance(obj)); - } - } - - return v; - } - - public Attributes ToAttributes() - { - return new Attributes(this.ToAsn1EncodableVector()); - } - - /** - * Return a new table with the passed in attribute added. - * - * @param attrType - * @param attrValue - * @return - */ - public AttributeTable Add(DerObjectIdentifier attrType, Asn1Encodable attrValue) - { - AttributeTable newTable = new AttributeTable(attributes); - - newTable.AddAttribute(new Attribute(attrType, new DerSet(attrValue))); - - return newTable; - } - - public AttributeTable Remove(DerObjectIdentifier attrType) - { - AttributeTable newTable = new AttributeTable(attributes); - - newTable.attributes.Remove(attrType); - - return newTable; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/Attributes.cs b/bc-sharp-crypto/src/asn1/cms/Attributes.cs deleted file mode 100644 index 5b6b130..0000000 --- a/bc-sharp-crypto/src/asn1/cms/Attributes.cs +++ /dev/null @@ -1,55 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class Attributes - : Asn1Encodable - { - private readonly Asn1Set attributes; - - private Attributes(Asn1Set attributes) - { - this.attributes = attributes; - } - - public Attributes(Asn1EncodableVector v) - { - attributes = new BerSet(v); - } - - public static Attributes GetInstance(object obj) - { - if (obj is Attributes) - return (Attributes)obj; - - if (obj != null) - return new Attributes(Asn1Set.GetInstance(obj)); - - return null; - } - - public virtual Attribute[] GetAttributes() - { - Attribute[] rv = new Attribute[attributes.Count]; - - for (int i = 0; i != rv.Length; i++) - { - rv[i] = Attribute.GetInstance(attributes[i]); - } - - return rv; - } - - /** - * 
-         * Attributes ::=
-         *   SET SIZE(1..MAX) OF Attribute -- according to RFC 5652
-         *
- * @return - */ - public override Asn1Object ToAsn1Object() - { - return attributes; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/AuthEnvelopedData.cs b/bc-sharp-crypto/src/asn1/cms/AuthEnvelopedData.cs deleted file mode 100644 index c30ec6b..0000000 --- a/bc-sharp-crypto/src/asn1/cms/AuthEnvelopedData.cs +++ /dev/null @@ -1,205 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class AuthEnvelopedData - : Asn1Encodable - { - private DerInteger version; - private OriginatorInfo originatorInfo; - private Asn1Set recipientInfos; - private EncryptedContentInfo authEncryptedContentInfo; - private Asn1Set authAttrs; - private Asn1OctetString mac; - private Asn1Set unauthAttrs; - - public AuthEnvelopedData( - OriginatorInfo originatorInfo, - Asn1Set recipientInfos, - EncryptedContentInfo authEncryptedContentInfo, - Asn1Set authAttrs, - Asn1OctetString mac, - Asn1Set unauthAttrs) - { - // "It MUST be set to 0." - this.version = new DerInteger(0); - - this.originatorInfo = originatorInfo; - - // TODO - // "There MUST be at least one element in the collection." - this.recipientInfos = recipientInfos; - - this.authEncryptedContentInfo = authEncryptedContentInfo; - - // TODO - // "The authAttrs MUST be present if the content type carried in - // EncryptedContentInfo is not id-data." - this.authAttrs = authAttrs; - - this.mac = mac; - - this.unauthAttrs = unauthAttrs; - } - - private AuthEnvelopedData( - Asn1Sequence seq) - { - int index = 0; - - // TODO - // "It MUST be set to 0." - Asn1Object tmp = seq[index++].ToAsn1Object(); - version = (DerInteger)tmp; - - tmp = seq[index++].ToAsn1Object(); - if (tmp is Asn1TaggedObject) - { - originatorInfo = OriginatorInfo.GetInstance((Asn1TaggedObject)tmp, false); - tmp = seq[index++].ToAsn1Object(); - } - - // TODO - // "There MUST be at least one element in the collection." - recipientInfos = Asn1Set.GetInstance(tmp); - - tmp = seq[index++].ToAsn1Object(); - authEncryptedContentInfo = EncryptedContentInfo.GetInstance(tmp); - - tmp = seq[index++].ToAsn1Object(); - if (tmp is Asn1TaggedObject) - { - authAttrs = Asn1Set.GetInstance((Asn1TaggedObject)tmp, false); - tmp = seq[index++].ToAsn1Object(); - } - else - { - // TODO - // "The authAttrs MUST be present if the content type carried in - // EncryptedContentInfo is not id-data." - } - - mac = Asn1OctetString.GetInstance(tmp); - - if (seq.Count > index) - { - tmp = seq[index++].ToAsn1Object(); - unauthAttrs = Asn1Set.GetInstance((Asn1TaggedObject)tmp, false); - } - } - - /** - * return an AuthEnvelopedData object from a tagged object. - * - * @param obj the tagged object holding the object we want. - * @param isExplicit true if the object is meant to be explicitly - * tagged false otherwise. - * @throws ArgumentException if the object held by the - * tagged object cannot be converted. - */ - public static AuthEnvelopedData GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - return GetInstance(Asn1Sequence.GetInstance(obj, isExplicit)); - } - - /** - * return an AuthEnvelopedData object from the given object. - * - * @param obj the object we want converted. - * @throws ArgumentException if the object cannot be converted. - */ - public static AuthEnvelopedData GetInstance( - object obj) - { - if (obj == null || obj is AuthEnvelopedData) - return (AuthEnvelopedData)obj; - - if (obj is Asn1Sequence) - return new AuthEnvelopedData((Asn1Sequence)obj); - - throw new ArgumentException("Invalid AuthEnvelopedData: " + Platform.GetTypeName(obj)); - } - - public DerInteger Version - { - get { return version; } - } - - public OriginatorInfo OriginatorInfo - { - get { return originatorInfo; } - } - - public Asn1Set RecipientInfos - { - get { return recipientInfos; } - } - - public EncryptedContentInfo AuthEncryptedContentInfo - { - get { return authEncryptedContentInfo; } - } - - public Asn1Set AuthAttrs - { - get { return authAttrs; } - } - - public Asn1OctetString Mac - { - get { return mac; } - } - - public Asn1Set UnauthAttrs - { - get { return unauthAttrs; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-		 * AuthEnvelopedData ::= SEQUENCE {
-		 *   version CMSVersion,
-		 *   originatorInfo [0] IMPLICIT OriginatorInfo OPTIONAL,
-		 *   recipientInfos RecipientInfos,
-		 *   authEncryptedContentInfo EncryptedContentInfo,
-		 *   authAttrs [1] IMPLICIT AuthAttributes OPTIONAL,
-		 *   mac MessageAuthenticationCode,
-		 *   unauthAttrs [2] IMPLICIT UnauthAttributes OPTIONAL }
-		 *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(version); - - if (originatorInfo != null) - { - v.Add(new DerTaggedObject(false, 0, originatorInfo)); - } - - v.Add(recipientInfos, authEncryptedContentInfo); - - // "authAttrs optionally contains the authenticated attributes." - if (authAttrs != null) - { - // "AuthAttributes MUST be DER encoded, even if the rest of the - // AuthEnvelopedData structure is BER encoded." - v.Add(new DerTaggedObject(false, 1, authAttrs)); - } - - v.Add(mac); - - // "unauthAttrs optionally contains the unauthenticated attributes." - if (unauthAttrs != null) - { - v.Add(new DerTaggedObject(false, 2, unauthAttrs)); - } - - return new BerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/AuthEnvelopedDataParser.cs b/bc-sharp-crypto/src/asn1/cms/AuthEnvelopedDataParser.cs deleted file mode 100644 index 35cb3bf..0000000 --- a/bc-sharp-crypto/src/asn1/cms/AuthEnvelopedDataParser.cs +++ /dev/null @@ -1,145 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.Cms -{ - /** - * Produce an object suitable for an Asn1OutputStream. - * - * 
-	 * AuthEnvelopedData ::= SEQUENCE {
-	 *   version CMSVersion,
-	 *   originatorInfo [0] IMPLICIT OriginatorInfo OPTIONAL,
-	 *   recipientInfos RecipientInfos,
-	 *   authEncryptedContentInfo EncryptedContentInfo,
-	 *   authAttrs [1] IMPLICIT AuthAttributes OPTIONAL,
-	 *   mac MessageAuthenticationCode,
-	 *   unauthAttrs [2] IMPLICIT UnauthAttributes OPTIONAL }
-	 *
- */ - public class AuthEnvelopedDataParser - { - private Asn1SequenceParser seq; - private DerInteger version; - private IAsn1Convertible nextObject; - private bool originatorInfoCalled; - - public AuthEnvelopedDataParser( - Asn1SequenceParser seq) - { - this.seq = seq; - - // TODO - // "It MUST be set to 0." - this.version = (DerInteger)seq.ReadObject(); - } - - public DerInteger Version - { - get { return version; } - } - - public OriginatorInfo GetOriginatorInfo() - { - originatorInfoCalled = true; - - if (nextObject == null) - { - nextObject = seq.ReadObject(); - } - - if (nextObject is Asn1TaggedObjectParser && ((Asn1TaggedObjectParser)nextObject).TagNo == 0) - { - Asn1SequenceParser originatorInfo = (Asn1SequenceParser) ((Asn1TaggedObjectParser)nextObject).GetObjectParser(Asn1Tags.Sequence, false); - nextObject = null; - return OriginatorInfo.GetInstance(originatorInfo.ToAsn1Object()); - } - - return null; - } - - public Asn1SetParser GetRecipientInfos() - { - if (!originatorInfoCalled) - { - GetOriginatorInfo(); - } - - if (nextObject == null) - { - nextObject = seq.ReadObject(); - } - - Asn1SetParser recipientInfos = (Asn1SetParser)nextObject; - nextObject = null; - return recipientInfos; - } - - public EncryptedContentInfoParser GetAuthEncryptedContentInfo() - { - if (nextObject == null) - { - nextObject = seq.ReadObject(); - } - - if (nextObject != null) - { - Asn1SequenceParser o = (Asn1SequenceParser) nextObject; - nextObject = null; - return new EncryptedContentInfoParser(o); - } - - return null; - } - - public Asn1SetParser GetAuthAttrs() - { - if (nextObject == null) - { - nextObject = seq.ReadObject(); - } - - if (nextObject is Asn1TaggedObjectParser) - { - IAsn1Convertible o = nextObject; - nextObject = null; - return (Asn1SetParser)((Asn1TaggedObjectParser)o).GetObjectParser(Asn1Tags.Set, false); - } - - // TODO - // "The authAttrs MUST be present if the content type carried in - // EncryptedContentInfo is not id-data." - - return null; - } - - public Asn1OctetString GetMac() - { - if (nextObject == null) - { - nextObject = seq.ReadObject(); - } - - IAsn1Convertible o = nextObject; - nextObject = null; - - return Asn1OctetString.GetInstance(o.ToAsn1Object()); - } - - public Asn1SetParser GetUnauthAttrs() - { - if (nextObject == null) - { - nextObject = seq.ReadObject(); - } - - if (nextObject != null) - { - IAsn1Convertible o = nextObject; - nextObject = null; - return (Asn1SetParser)((Asn1TaggedObjectParser)o).GetObjectParser(Asn1Tags.Set, false); - } - - return null; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/AuthenticatedData.cs b/bc-sharp-crypto/src/asn1/cms/AuthenticatedData.cs deleted file mode 100644 index 6f13a6f..0000000 --- a/bc-sharp-crypto/src/asn1/cms/AuthenticatedData.cs +++ /dev/null @@ -1,271 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class AuthenticatedData - : Asn1Encodable - { - private DerInteger version; - private OriginatorInfo originatorInfo; - private Asn1Set recipientInfos; - private AlgorithmIdentifier macAlgorithm; - private AlgorithmIdentifier digestAlgorithm; - private ContentInfo encapsulatedContentInfo; - private Asn1Set authAttrs; - private Asn1OctetString mac; - private Asn1Set unauthAttrs; - - public AuthenticatedData( - OriginatorInfo originatorInfo, - Asn1Set recipientInfos, - AlgorithmIdentifier macAlgorithm, - AlgorithmIdentifier digestAlgorithm, - ContentInfo encapsulatedContent, - Asn1Set authAttrs, - Asn1OctetString mac, - Asn1Set unauthAttrs) - { - if (digestAlgorithm != null || authAttrs != null) - { - if (digestAlgorithm == null || authAttrs == null) - { - throw new ArgumentException("digestAlgorithm and authAttrs must be set together"); - } - } - - version = new DerInteger(CalculateVersion(originatorInfo)); - - this.originatorInfo = originatorInfo; - this.macAlgorithm = macAlgorithm; - this.digestAlgorithm = digestAlgorithm; - this.recipientInfos = recipientInfos; - this.encapsulatedContentInfo = encapsulatedContent; - this.authAttrs = authAttrs; - this.mac = mac; - this.unauthAttrs = unauthAttrs; - } - - private AuthenticatedData( - Asn1Sequence seq) - { - int index = 0; - - version = (DerInteger)seq[index++]; - - Asn1Encodable tmp = seq[index++]; - if (tmp is Asn1TaggedObject) - { - originatorInfo = OriginatorInfo.GetInstance((Asn1TaggedObject)tmp, false); - tmp = seq[index++]; - } - - recipientInfos = Asn1Set.GetInstance(tmp); - macAlgorithm = AlgorithmIdentifier.GetInstance(seq[index++]); - - tmp = seq[index++]; - if (tmp is Asn1TaggedObject) - { - digestAlgorithm = AlgorithmIdentifier.GetInstance((Asn1TaggedObject)tmp, false); - tmp = seq[index++]; - } - - encapsulatedContentInfo = ContentInfo.GetInstance(tmp); - - tmp = seq[index++]; - if (tmp is Asn1TaggedObject) - { - authAttrs = Asn1Set.GetInstance((Asn1TaggedObject)tmp, false); - tmp = seq[index++]; - } - - mac = Asn1OctetString.GetInstance(tmp); - - if (seq.Count > index) - { - unauthAttrs = Asn1Set.GetInstance((Asn1TaggedObject)seq[index], false); - } - } - - /** - * return an AuthenticatedData object from a tagged object. - * - * @param obj the tagged object holding the object we want. - * @param isExplicit true if the object is meant to be explicitly - * tagged false otherwise. - * @throws ArgumentException if the object held by the - * tagged object cannot be converted. - */ - public static AuthenticatedData GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - return GetInstance(Asn1Sequence.GetInstance(obj, isExplicit)); - } - - /** - * return an AuthenticatedData object from the given object. - * - * @param obj the object we want converted. - * @throws ArgumentException if the object cannot be converted. - */ - public static AuthenticatedData GetInstance( - object obj) - { - if (obj == null || obj is AuthenticatedData) - { - return (AuthenticatedData)obj; - } - - if (obj is Asn1Sequence) - { - return new AuthenticatedData((Asn1Sequence)obj); - } - - throw new ArgumentException("Invalid AuthenticatedData: " + Platform.GetTypeName(obj)); - } - - public DerInteger Version - { - get { return version; } - } - - public OriginatorInfo OriginatorInfo - { - get { return originatorInfo; } - } - - public Asn1Set RecipientInfos - { - get { return recipientInfos; } - } - - public AlgorithmIdentifier MacAlgorithm - { - get { return macAlgorithm; } - } - - public AlgorithmIdentifier DigestAlgorithm - { - get { return digestAlgorithm; } - } - - public ContentInfo EncapsulatedContentInfo - { - get { return encapsulatedContentInfo; } - } - - public Asn1Set AuthAttrs - { - get { return authAttrs; } - } - - public Asn1OctetString Mac - { - get { return mac; } - } - - public Asn1Set UnauthAttrs - { - get { return unauthAttrs; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-		 * AuthenticatedData ::= SEQUENCE {
-		 *       version CMSVersion,
-		 *       originatorInfo [0] IMPLICIT OriginatorInfo OPTIONAL,
-		 *       recipientInfos RecipientInfos,
-		 *       macAlgorithm MessageAuthenticationCodeAlgorithm,
-		 *       digestAlgorithm [1] DigestAlgorithmIdentifier OPTIONAL,
-		 *       encapContentInfo EncapsulatedContentInfo,
-		 *       authAttrs [2] IMPLICIT AuthAttributes OPTIONAL,
-		 *       mac MessageAuthenticationCode,
-		 *       unauthAttrs [3] IMPLICIT UnauthAttributes OPTIONAL }
-		 *
-		 * AuthAttributes ::= SET SIZE (1..MAX) OF Attribute
-		 *
-		 * UnauthAttributes ::= SET SIZE (1..MAX) OF Attribute
-		 *
-		 * MessageAuthenticationCode ::= OCTET STRING
-		 *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(version); - - if (originatorInfo != null) - { - v.Add(new DerTaggedObject(false, 0, originatorInfo)); - } - - v.Add(recipientInfos, macAlgorithm); - - if (digestAlgorithm != null) - { - v.Add(new DerTaggedObject(false, 1, digestAlgorithm)); - } - - v.Add(encapsulatedContentInfo); - - if (authAttrs != null) - { - v.Add(new DerTaggedObject(false, 2, authAttrs)); - } - - v.Add(mac); - - if (unauthAttrs != null) - { - v.Add(new DerTaggedObject(false, 3, unauthAttrs)); - } - - return new BerSequence(v); - } - - public static int CalculateVersion(OriginatorInfo origInfo) - { - if (origInfo == null) - return 0; - - int ver = 0; - - foreach (object obj in origInfo.Certificates) - { - if (obj is Asn1TaggedObject) - { - Asn1TaggedObject tag = (Asn1TaggedObject)obj; - - if (tag.TagNo == 2) - { - ver = 1; - } - else if (tag.TagNo == 3) - { - ver = 3; - break; - } - } - } - - foreach (object obj in origInfo.Crls) - { - if (obj is Asn1TaggedObject) - { - Asn1TaggedObject tag = (Asn1TaggedObject)obj; - - if (tag.TagNo == 1) - { - ver = 3; - break; - } - } - } - - return ver; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/AuthenticatedDataParser.cs b/bc-sharp-crypto/src/asn1/cms/AuthenticatedDataParser.cs deleted file mode 100644 index 4b80d1b..0000000 --- a/bc-sharp-crypto/src/asn1/cms/AuthenticatedDataParser.cs +++ /dev/null @@ -1,182 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; - -namespace Org.BouncyCastle.Asn1.Cms -{ - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-	 * AuthenticatedData ::= SEQUENCE {
-	 *       version CMSVersion,
-	 *       originatorInfo [0] IMPLICIT OriginatorInfo OPTIONAL,
-	 *       recipientInfos RecipientInfos,
-	 *       macAlgorithm MessageAuthenticationCodeAlgorithm,
-	 *       digestAlgorithm [1] DigestAlgorithmIdentifier OPTIONAL,
-	 *       encapContentInfo EncapsulatedContentInfo,
-	 *       authAttrs [2] IMPLICIT AuthAttributes OPTIONAL,
-	 *       mac MessageAuthenticationCode,
-	 *       unauthAttrs [3] IMPLICIT UnauthAttributes OPTIONAL }
-	 *
-	 * AuthAttributes ::= SET SIZE (1..MAX) OF Attribute
-	 *
-	 * UnauthAttributes ::= SET SIZE (1..MAX) OF Attribute
-	 *
-	 * MessageAuthenticationCode ::= OCTET STRING
-	 *
- */ - public class AuthenticatedDataParser - { - private Asn1SequenceParser seq; - private DerInteger version; - private IAsn1Convertible nextObject; - private bool originatorInfoCalled; - - public AuthenticatedDataParser( - Asn1SequenceParser seq) - { - this.seq = seq; - this.version = (DerInteger)seq.ReadObject(); - } - - public DerInteger Version - { - get { return version; } - } - - public OriginatorInfo GetOriginatorInfo() - { - originatorInfoCalled = true; - - if (nextObject == null) - { - nextObject = seq.ReadObject(); - } - - if (nextObject is Asn1TaggedObjectParser && ((Asn1TaggedObjectParser)nextObject).TagNo == 0) - { - Asn1SequenceParser originatorInfo = (Asn1SequenceParser) ((Asn1TaggedObjectParser)nextObject).GetObjectParser(Asn1Tags.Sequence, false); - nextObject = null; - return OriginatorInfo.GetInstance(originatorInfo.ToAsn1Object()); - } - - return null; - } - - public Asn1SetParser GetRecipientInfos() - { - if (!originatorInfoCalled) - { - GetOriginatorInfo(); - } - - if (nextObject == null) - { - nextObject = seq.ReadObject(); - } - - Asn1SetParser recipientInfos = (Asn1SetParser)nextObject; - nextObject = null; - return recipientInfos; - } - - public AlgorithmIdentifier GetMacAlgorithm() - { - if (nextObject == null) - { - nextObject = seq.ReadObject(); - } - - if (nextObject != null) - { - Asn1SequenceParser o = (Asn1SequenceParser)nextObject; - nextObject = null; - return AlgorithmIdentifier.GetInstance(o.ToAsn1Object()); - } - - return null; - } - - public AlgorithmIdentifier GetDigestAlgorithm() - { - if (nextObject == null) - { - nextObject = seq.ReadObject(); - } - - if (nextObject is Asn1TaggedObjectParser) - { - AlgorithmIdentifier obj = AlgorithmIdentifier.GetInstance( - (Asn1TaggedObject)nextObject.ToAsn1Object(), false); - nextObject = null; - return obj; - } - - return null; - } - - public ContentInfoParser GetEnapsulatedContentInfo() - { - if (nextObject == null) - { - nextObject = seq.ReadObject(); - } - - if (nextObject != null) - { - Asn1SequenceParser o = (Asn1SequenceParser)nextObject; - nextObject = null; - return new ContentInfoParser(o); - } - - return null; - } - - public Asn1SetParser GetAuthAttrs() - { - if (nextObject == null) - { - nextObject = seq.ReadObject(); - } - - if (nextObject is Asn1TaggedObjectParser) - { - IAsn1Convertible o = nextObject; - nextObject = null; - return (Asn1SetParser)((Asn1TaggedObjectParser)o).GetObjectParser(Asn1Tags.Set, false); - } - - return null; - } - - public Asn1OctetString GetMac() - { - if (nextObject == null) - { - nextObject = seq.ReadObject(); - } - - IAsn1Convertible o = nextObject; - nextObject = null; - - return Asn1OctetString.GetInstance(o.ToAsn1Object()); - } - - public Asn1SetParser GetUnauthAttrs() - { - if (nextObject == null) - { - nextObject = seq.ReadObject(); - } - - if (nextObject != null) - { - IAsn1Convertible o = nextObject; - nextObject = null; - return (Asn1SetParser)((Asn1TaggedObjectParser)o).GetObjectParser(Asn1Tags.Set, false); - } - - return null; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/CMSAttributes.cs b/bc-sharp-crypto/src/asn1/cms/CMSAttributes.cs deleted file mode 100644 index fca2b67..0000000 --- a/bc-sharp-crypto/src/asn1/cms/CMSAttributes.cs +++ /dev/null @@ -1,14 +0,0 @@ -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Pkcs; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public abstract class CmsAttributes - { - public static readonly DerObjectIdentifier ContentType = PkcsObjectIdentifiers.Pkcs9AtContentType; - public static readonly DerObjectIdentifier MessageDigest = PkcsObjectIdentifiers.Pkcs9AtMessageDigest; - public static readonly DerObjectIdentifier SigningTime = PkcsObjectIdentifiers.Pkcs9AtSigningTime; - public static readonly DerObjectIdentifier CounterSignature = PkcsObjectIdentifiers.Pkcs9AtCounterSignature; - public static readonly DerObjectIdentifier ContentHint = PkcsObjectIdentifiers.IdAAContentHint; - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/CMSObjectIdentifiers.cs b/bc-sharp-crypto/src/asn1/cms/CMSObjectIdentifiers.cs deleted file mode 100644 index 2ad0a3c..0000000 --- a/bc-sharp-crypto/src/asn1/cms/CMSObjectIdentifiers.cs +++ /dev/null @@ -1,28 +0,0 @@ -using Org.BouncyCastle.Asn1.Pkcs; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public abstract class CmsObjectIdentifiers - { - public static readonly DerObjectIdentifier Data = PkcsObjectIdentifiers.Data; - public static readonly DerObjectIdentifier SignedData = PkcsObjectIdentifiers.SignedData; - public static readonly DerObjectIdentifier EnvelopedData = PkcsObjectIdentifiers.EnvelopedData; - public static readonly DerObjectIdentifier SignedAndEnvelopedData = PkcsObjectIdentifiers.SignedAndEnvelopedData; - public static readonly DerObjectIdentifier DigestedData = PkcsObjectIdentifiers.DigestedData; - public static readonly DerObjectIdentifier EncryptedData = PkcsObjectIdentifiers.EncryptedData; - public static readonly DerObjectIdentifier AuthenticatedData = PkcsObjectIdentifiers.IdCTAuthData; - public static readonly DerObjectIdentifier CompressedData = PkcsObjectIdentifiers.IdCTCompressedData; - public static readonly DerObjectIdentifier AuthEnvelopedData = PkcsObjectIdentifiers.IdCTAuthEnvelopedData; - public static readonly DerObjectIdentifier timestampedData = PkcsObjectIdentifiers.IdCTTimestampedData; - - /** - * The other Revocation Info arc - * id-ri OBJECT IDENTIFIER ::= { iso(1) identified-organization(3) - * dod(6) internet(1) security(5) mechanisms(5) pkix(7) ri(16) } - */ - public static readonly DerObjectIdentifier id_ri = new DerObjectIdentifier("1.3.6.1.5.5.7.16"); - - public static readonly DerObjectIdentifier id_ri_ocsp_response = id_ri.Branch("2"); - public static readonly DerObjectIdentifier id_ri_scvp = id_ri.Branch("4"); - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/CompressedData.cs b/bc-sharp-crypto/src/asn1/cms/CompressedData.cs deleted file mode 100644 index 154ed35..0000000 --- a/bc-sharp-crypto/src/asn1/cms/CompressedData.cs +++ /dev/null @@ -1,96 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cms -{ - /** - * RFC 3274 - CMS Compressed Data. - * 
-     * CompressedData ::= Sequence {
-     *  version CMSVersion,
-     *  compressionAlgorithm CompressionAlgorithmIdentifier,
-     *  encapContentInfo EncapsulatedContentInfo
-     * }
-     *
- */ - public class CompressedData - : Asn1Encodable - { - private DerInteger version; - private AlgorithmIdentifier compressionAlgorithm; - private ContentInfo encapContentInfo; - - public CompressedData( - AlgorithmIdentifier compressionAlgorithm, - ContentInfo encapContentInfo) - { - this.version = new DerInteger(0); - this.compressionAlgorithm = compressionAlgorithm; - this.encapContentInfo = encapContentInfo; - } - - public CompressedData( - Asn1Sequence seq) - { - this.version = (DerInteger) seq[0]; - this.compressionAlgorithm = AlgorithmIdentifier.GetInstance(seq[1]); - this.encapContentInfo = ContentInfo.GetInstance(seq[2]); - } - - /** - * return a CompressedData object from a tagged object. - * - * @param ato the tagged object holding the object we want. - * @param explicitly true if the object is meant to be explicitly - * tagged false otherwise. - * @exception ArgumentException if the object held by the - * tagged object cannot be converted. - */ - public static CompressedData GetInstance( - Asn1TaggedObject ato, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(ato, explicitly)); - } - - /** - * return a CompressedData object from the given object. - * - * @param _obj the object we want converted. - * @exception ArgumentException if the object cannot be converted. - */ - public static CompressedData GetInstance( - object obj) - { - if (obj == null || obj is CompressedData) - return (CompressedData)obj; - - if (obj is Asn1Sequence) - return new CompressedData((Asn1Sequence) obj); - - throw new ArgumentException("Invalid CompressedData: " + Platform.GetTypeName(obj)); - } - - public DerInteger Version - { - get { return version; } - } - - public AlgorithmIdentifier CompressionAlgorithmIdentifier - { - get { return compressionAlgorithm; } - } - - public ContentInfo EncapContentInfo - { - get { return encapContentInfo; } - } - - public override Asn1Object ToAsn1Object() - { - return new BerSequence(version, compressionAlgorithm, encapContentInfo); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/CompressedDataParser.cs b/bc-sharp-crypto/src/asn1/cms/CompressedDataParser.cs deleted file mode 100644 index 7c53453..0000000 --- a/bc-sharp-crypto/src/asn1/cms/CompressedDataParser.cs +++ /dev/null @@ -1,47 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; - -namespace Org.BouncyCastle.Asn1.Cms -{ - /** - * RFC 3274 - CMS Compressed Data. - * 
-	* CompressedData ::= SEQUENCE {
-	*  version CMSVersion,
-	*  compressionAlgorithm CompressionAlgorithmIdentifier,
-	*  encapContentInfo EncapsulatedContentInfo
-	* }
-	*
- */ - public class CompressedDataParser - { - private DerInteger _version; - private AlgorithmIdentifier _compressionAlgorithm; - private ContentInfoParser _encapContentInfo; - - public CompressedDataParser( - Asn1SequenceParser seq) - { - this._version = (DerInteger)seq.ReadObject(); - this._compressionAlgorithm = AlgorithmIdentifier.GetInstance(seq.ReadObject().ToAsn1Object()); - this._encapContentInfo = new ContentInfoParser((Asn1SequenceParser)seq.ReadObject()); - } - - public DerInteger Version - { - get { return _version; } - } - - public AlgorithmIdentifier CompressionAlgorithmIdentifier - { - get { return _compressionAlgorithm; } - } - - public ContentInfoParser GetEncapContentInfo() - { - return _encapContentInfo; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/ContentInfo.cs b/bc-sharp-crypto/src/asn1/cms/ContentInfo.cs deleted file mode 100644 index f130a4b..0000000 --- a/bc-sharp-crypto/src/asn1/cms/ContentInfo.cs +++ /dev/null @@ -1,88 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class ContentInfo - : Asn1Encodable - { - private readonly DerObjectIdentifier contentType; - private readonly Asn1Encodable content; - - public static ContentInfo GetInstance( - object obj) - { - if (obj == null || obj is ContentInfo) - return (ContentInfo) obj; - - if (obj is Asn1Sequence) - return new ContentInfo((Asn1Sequence) obj); - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj)); - } - - public static ContentInfo GetInstance(Asn1TaggedObject obj, bool isExplicit) - { - return GetInstance(Asn1Sequence.GetInstance(obj, isExplicit)); - } - - private ContentInfo( - Asn1Sequence seq) - { - if (seq.Count < 1 || seq.Count > 2) - throw new ArgumentException("Bad sequence size: " + seq.Count, "seq"); - - contentType = (DerObjectIdentifier) seq[0]; - - if (seq.Count > 1) - { - Asn1TaggedObject tagged = (Asn1TaggedObject) seq[1]; - if (!tagged.IsExplicit() || tagged.TagNo != 0) - throw new ArgumentException("Bad tag for 'content'", "seq"); - - content = tagged.GetObject(); - } - } - - public ContentInfo( - DerObjectIdentifier contentType, - Asn1Encodable content) - { - this.contentType = contentType; - this.content = content; - } - - public DerObjectIdentifier ContentType - { - get { return contentType; } - } - - public Asn1Encodable Content - { - get { return content; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * ContentInfo ::= Sequence {
-         *          contentType ContentType,
-         *          content
-         *          [0] EXPLICIT ANY DEFINED BY contentType OPTIONAL }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(contentType); - - if (content != null) - { - v.Add(new BerTaggedObject(0, content)); - } - - return new BerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/ContentInfoParser.cs b/bc-sharp-crypto/src/asn1/cms/ContentInfoParser.cs deleted file mode 100644 index 541cc0f..0000000 --- a/bc-sharp-crypto/src/asn1/cms/ContentInfoParser.cs +++ /dev/null @@ -1,40 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.Cms -{ - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-	* ContentInfo ::= SEQUENCE {
-	*          contentType ContentType,
-	*          content
-	*          [0] EXPLICIT ANY DEFINED BY contentType OPTIONAL }
-	*
- */ - public class ContentInfoParser - { - private DerObjectIdentifier contentType; - private Asn1TaggedObjectParser content; - - public ContentInfoParser( - Asn1SequenceParser seq) - { - contentType = (DerObjectIdentifier)seq.ReadObject(); - content = (Asn1TaggedObjectParser)seq.ReadObject(); - } - - public DerObjectIdentifier ContentType - { - get { return contentType; } - } - - public IAsn1Convertible GetContent( - int tag) - { - if (content == null) - return null; - - return content.GetObjectParser(tag, true); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/EncryptedContentInfo.cs b/bc-sharp-crypto/src/asn1/cms/EncryptedContentInfo.cs deleted file mode 100644 index 999f2a0..0000000 --- a/bc-sharp-crypto/src/asn1/cms/EncryptedContentInfo.cs +++ /dev/null @@ -1,94 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class EncryptedContentInfo - : Asn1Encodable - { - private DerObjectIdentifier contentType; - private AlgorithmIdentifier contentEncryptionAlgorithm; - private Asn1OctetString encryptedContent; - - public EncryptedContentInfo( - DerObjectIdentifier contentType, - AlgorithmIdentifier contentEncryptionAlgorithm, - Asn1OctetString encryptedContent) - { - this.contentType = contentType; - this.contentEncryptionAlgorithm = contentEncryptionAlgorithm; - this.encryptedContent = encryptedContent; - } - - public EncryptedContentInfo( - Asn1Sequence seq) - { - contentType = (DerObjectIdentifier) seq[0]; - contentEncryptionAlgorithm = AlgorithmIdentifier.GetInstance(seq[1]); - - if (seq.Count > 2) - { - encryptedContent = Asn1OctetString.GetInstance( - (Asn1TaggedObject) seq[2], false); - } - } - - /** - * return an EncryptedContentInfo object from the given object. - * - * @param obj the object we want converted. - * @exception ArgumentException if the object cannot be converted. - */ - public static EncryptedContentInfo GetInstance( - object obj) - { - if (obj == null || obj is EncryptedContentInfo) - return (EncryptedContentInfo)obj; - - if (obj is Asn1Sequence) - return new EncryptedContentInfo((Asn1Sequence)obj); - - throw new ArgumentException("Invalid EncryptedContentInfo: " + Platform.GetTypeName(obj)); - } - - public DerObjectIdentifier ContentType - { - get { return contentType; } - } - - public AlgorithmIdentifier ContentEncryptionAlgorithm - { - get { return contentEncryptionAlgorithm; } - } - - public Asn1OctetString EncryptedContent - { - get { return encryptedContent; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * EncryptedContentInfo ::= Sequence {
-         *     contentType ContentType,
-         *     contentEncryptionAlgorithm ContentEncryptionAlgorithmIdentifier,
-         *     encryptedContent [0] IMPLICIT EncryptedContent OPTIONAL
-         * }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector( - contentType, contentEncryptionAlgorithm); - - if (encryptedContent != null) - { - v.Add(new BerTaggedObject(false, 0, encryptedContent)); - } - - return new BerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/EncryptedContentInfoParser.cs b/bc-sharp-crypto/src/asn1/cms/EncryptedContentInfoParser.cs deleted file mode 100644 index af748b1..0000000 --- a/bc-sharp-crypto/src/asn1/cms/EncryptedContentInfoParser.cs +++ /dev/null @@ -1,46 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; - -namespace Org.BouncyCastle.Asn1.Cms -{ - /** - * 
-	* EncryptedContentInfo ::= SEQUENCE {
-	*     contentType ContentType,
-	*     contentEncryptionAlgorithm ContentEncryptionAlgorithmIdentifier,
-	*     encryptedContent [0] IMPLICIT EncryptedContent OPTIONAL
-	* }
-	*
- */ - public class EncryptedContentInfoParser - { - private DerObjectIdentifier _contentType; - private AlgorithmIdentifier _contentEncryptionAlgorithm; - private Asn1TaggedObjectParser _encryptedContent; - - public EncryptedContentInfoParser( - Asn1SequenceParser seq) - { - _contentType = (DerObjectIdentifier)seq.ReadObject(); - _contentEncryptionAlgorithm = AlgorithmIdentifier.GetInstance(seq.ReadObject().ToAsn1Object()); - _encryptedContent = (Asn1TaggedObjectParser)seq.ReadObject(); - } - - public DerObjectIdentifier ContentType - { - get { return _contentType; } - } - - public AlgorithmIdentifier ContentEncryptionAlgorithm - { - get { return _contentEncryptionAlgorithm; } - } - - public IAsn1Convertible GetEncryptedContent( - int tag) - { - return _encryptedContent.GetObjectParser(tag, false); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/EncryptedData.cs b/bc-sharp-crypto/src/asn1/cms/EncryptedData.cs deleted file mode 100644 index b8492d1..0000000 --- a/bc-sharp-crypto/src/asn1/cms/EncryptedData.cs +++ /dev/null @@ -1,97 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class EncryptedData - : Asn1Encodable - { - private readonly DerInteger version; - private readonly EncryptedContentInfo encryptedContentInfo; - private readonly Asn1Set unprotectedAttrs; - - public static EncryptedData GetInstance( - object obj) - { - if (obj is EncryptedData) - return (EncryptedData) obj; - - if (obj is Asn1Sequence) - return new EncryptedData((Asn1Sequence) obj); - - throw new ArgumentException("Invalid EncryptedData: " + Platform.GetTypeName(obj)); - } - - public EncryptedData( - EncryptedContentInfo encInfo) - : this(encInfo, null) - { - } - - public EncryptedData( - EncryptedContentInfo encInfo, - Asn1Set unprotectedAttrs) - { - if (encInfo == null) - throw new ArgumentNullException("encInfo"); - - this.version = new DerInteger((unprotectedAttrs == null) ? 0 : 2); - this.encryptedContentInfo = encInfo; - this.unprotectedAttrs = unprotectedAttrs; - } - - private EncryptedData( - Asn1Sequence seq) - { - if (seq == null) - throw new ArgumentNullException("seq"); - if (seq.Count < 2 || seq.Count > 3) - throw new ArgumentException("Bad sequence size: " + seq.Count, "seq"); - - this.version = DerInteger.GetInstance(seq[0]); - this.encryptedContentInfo = EncryptedContentInfo.GetInstance(seq[1]); - - if (seq.Count > 2) - { - this.unprotectedAttrs = Asn1Set.GetInstance((Asn1TaggedObject)seq[2], false); - } - } - - public virtual DerInteger Version - { - get { return version; } - } - - public virtual EncryptedContentInfo EncryptedContentInfo - { - get { return encryptedContentInfo; } - } - - public virtual Asn1Set UnprotectedAttrs - { - get { return unprotectedAttrs; } - } - - /** - * 
-		*       EncryptedData ::= SEQUENCE {
-		*                     version CMSVersion,
-		*                     encryptedContentInfo EncryptedContentInfo,
-		*                     unprotectedAttrs [1] IMPLICIT UnprotectedAttributes OPTIONAL }
-		*
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(version, encryptedContentInfo); - - if (unprotectedAttrs != null) - { - v.Add(new BerTaggedObject(false, 1, unprotectedAttrs)); - } - - return new BerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/EnvelopedData.cs b/bc-sharp-crypto/src/asn1/cms/EnvelopedData.cs deleted file mode 100644 index 09f291a..0000000 --- a/bc-sharp-crypto/src/asn1/cms/EnvelopedData.cs +++ /dev/null @@ -1,176 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class EnvelopedData - : Asn1Encodable - { - private DerInteger version; - private OriginatorInfo originatorInfo; - private Asn1Set recipientInfos; - private EncryptedContentInfo encryptedContentInfo; - private Asn1Set unprotectedAttrs; - - public EnvelopedData( - OriginatorInfo originatorInfo, - Asn1Set recipientInfos, - EncryptedContentInfo encryptedContentInfo, - Asn1Set unprotectedAttrs) - { - this.version = new DerInteger(CalculateVersion(originatorInfo, recipientInfos, unprotectedAttrs)); - this.originatorInfo = originatorInfo; - this.recipientInfos = recipientInfos; - this.encryptedContentInfo = encryptedContentInfo; - this.unprotectedAttrs = unprotectedAttrs; - } - - public EnvelopedData( - OriginatorInfo originatorInfo, - Asn1Set recipientInfos, - EncryptedContentInfo encryptedContentInfo, - Attributes unprotectedAttrs) - { - this.version = new DerInteger(CalculateVersion(originatorInfo, recipientInfos, Asn1Set.GetInstance(unprotectedAttrs))); - this.originatorInfo = originatorInfo; - this.recipientInfos = recipientInfos; - this.encryptedContentInfo = encryptedContentInfo; - this.unprotectedAttrs = Asn1Set.GetInstance(unprotectedAttrs); - } - - [Obsolete("Use 'GetInstance' instead")] - public EnvelopedData( - Asn1Sequence seq) - { - int index = 0; - - version = (DerInteger) seq[index++]; - - object tmp = seq[index++]; - - if (tmp is Asn1TaggedObject) - { - originatorInfo = OriginatorInfo.GetInstance((Asn1TaggedObject) tmp, false); - tmp = seq[index++]; - } - - recipientInfos = Asn1Set.GetInstance(tmp); - encryptedContentInfo = EncryptedContentInfo.GetInstance(seq[index++]); - - if (seq.Count > index) - { - unprotectedAttrs = Asn1Set.GetInstance((Asn1TaggedObject) seq[index], false); - } - } - - /** - * return an EnvelopedData object from a tagged object. - * - * @param obj the tagged object holding the object we want. - * @param explicitly true if the object is meant to be explicitly - * tagged false otherwise. - * @exception ArgumentException if the object held by the - * tagged object cannot be converted. - */ - public static EnvelopedData GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - /** - * return an EnvelopedData object from the given object. - * - * @param obj the object we want converted. - * @exception ArgumentException if the object cannot be converted. - */ - public static EnvelopedData GetInstance( - object obj) - { - if (obj is EnvelopedData) - return (EnvelopedData)obj; - if (obj == null) - return null; - return new EnvelopedData(Asn1Sequence.GetInstance(obj)); - } - - public DerInteger Version - { - get { return version; } - } - - public OriginatorInfo OriginatorInfo - { - get { return originatorInfo; } - } - - public Asn1Set RecipientInfos - { - get { return recipientInfos; } - } - - public EncryptedContentInfo EncryptedContentInfo - { - get { return encryptedContentInfo; } - } - - public Asn1Set UnprotectedAttrs - { - get { return unprotectedAttrs; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * EnvelopedData ::= Sequence {
-         *     version CMSVersion,
-         *     originatorInfo [0] IMPLICIT OriginatorInfo OPTIONAL,
-         *     recipientInfos RecipientInfos,
-         *     encryptedContentInfo EncryptedContentInfo,
-         *     unprotectedAttrs [1] IMPLICIT UnprotectedAttributes OPTIONAL
-         * }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(version); - - if (originatorInfo != null) - { - v.Add(new DerTaggedObject(false, 0, originatorInfo)); - } - - v.Add(recipientInfos, encryptedContentInfo); - - if (unprotectedAttrs != null) - { - v.Add(new DerTaggedObject(false, 1, unprotectedAttrs)); - } - - return new BerSequence(v); - } - - public static int CalculateVersion(OriginatorInfo originatorInfo, Asn1Set recipientInfos, Asn1Set unprotectedAttrs) - { - if (originatorInfo != null || unprotectedAttrs != null) - { - return 2; - } - - foreach (object o in recipientInfos) - { - RecipientInfo ri = RecipientInfo.GetInstance(o); - - if (ri.Version.Value.IntValue != 0) - { - return 2; - } - } - - return 0; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/EnvelopedDataParser.cs b/bc-sharp-crypto/src/asn1/cms/EnvelopedDataParser.cs deleted file mode 100644 index 5993537..0000000 --- a/bc-sharp-crypto/src/asn1/cms/EnvelopedDataParser.cs +++ /dev/null @@ -1,107 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.Cms -{ - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-	* EnvelopedData ::= SEQUENCE {
-	*     version CMSVersion,
-	*     originatorInfo [0] IMPLICIT OriginatorInfo OPTIONAL,
-	*     recipientInfos RecipientInfos,
-	*     encryptedContentInfo EncryptedContentInfo,
-	*     unprotectedAttrs [1] IMPLICIT UnprotectedAttributes OPTIONAL
-	* }
-	*
- */ - public class EnvelopedDataParser - { - private Asn1SequenceParser _seq; - private DerInteger _version; - private IAsn1Convertible _nextObject; - private bool _originatorInfoCalled; - - public EnvelopedDataParser( - Asn1SequenceParser seq) - { - this._seq = seq; - this._version = (DerInteger)seq.ReadObject(); - } - - public DerInteger Version - { - get { return _version; } - } - - public OriginatorInfo GetOriginatorInfo() - { - _originatorInfoCalled = true; - - if (_nextObject == null) - { - _nextObject = _seq.ReadObject(); - } - - if (_nextObject is Asn1TaggedObjectParser && ((Asn1TaggedObjectParser)_nextObject).TagNo == 0) - { - Asn1SequenceParser originatorInfo = (Asn1SequenceParser) - ((Asn1TaggedObjectParser)_nextObject).GetObjectParser(Asn1Tags.Sequence, false); - _nextObject = null; - return OriginatorInfo.GetInstance(originatorInfo.ToAsn1Object()); - } - - return null; - } - - public Asn1SetParser GetRecipientInfos() - { - if (!_originatorInfoCalled) - { - GetOriginatorInfo(); - } - - if (_nextObject == null) - { - _nextObject = _seq.ReadObject(); - } - - Asn1SetParser recipientInfos = (Asn1SetParser)_nextObject; - _nextObject = null; - return recipientInfos; - } - - public EncryptedContentInfoParser GetEncryptedContentInfo() - { - if (_nextObject == null) - { - _nextObject = _seq.ReadObject(); - } - - if (_nextObject != null) - { - Asn1SequenceParser o = (Asn1SequenceParser) _nextObject; - _nextObject = null; - return new EncryptedContentInfoParser(o); - } - - return null; - } - - public Asn1SetParser GetUnprotectedAttrs() - { - if (_nextObject == null) - { - _nextObject = _seq.ReadObject(); - } - - if (_nextObject != null) - { - IAsn1Convertible o = _nextObject; - _nextObject = null; - return (Asn1SetParser)((Asn1TaggedObjectParser)o).GetObjectParser(Asn1Tags.Set, false); - } - - return null; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/Evidence.cs b/bc-sharp-crypto/src/asn1/cms/Evidence.cs deleted file mode 100644 index 8374aed..0000000 --- a/bc-sharp-crypto/src/asn1/cms/Evidence.cs +++ /dev/null @@ -1,49 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class Evidence - : Asn1Encodable, IAsn1Choice - { - private TimeStampTokenEvidence tstEvidence; - - public Evidence(TimeStampTokenEvidence tstEvidence) - { - this.tstEvidence = tstEvidence; - } - - private Evidence(Asn1TaggedObject tagged) - { - if (tagged.TagNo == 0) - { - this.tstEvidence = TimeStampTokenEvidence.GetInstance(tagged, false); - } - } - - public static Evidence GetInstance(object obj) - { - if (obj is Evidence) - return (Evidence)obj; - - if (obj is Asn1TaggedObject) - return new Evidence(Asn1TaggedObject.GetInstance(obj)); - - throw new ArgumentException("Unknown object in GetInstance: " + Platform.GetTypeName(obj), "obj"); - } - - public virtual TimeStampTokenEvidence TstEvidence - { - get { return tstEvidence; } - } - - public override Asn1Object ToAsn1Object() - { - if (tstEvidence != null) - return new DerTaggedObject(false, 0, tstEvidence); - - return null; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/IssuerAndSerialNumber.cs b/bc-sharp-crypto/src/asn1/cms/IssuerAndSerialNumber.cs deleted file mode 100644 index b509e7e..0000000 --- a/bc-sharp-crypto/src/asn1/cms/IssuerAndSerialNumber.cs +++ /dev/null @@ -1,64 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class IssuerAndSerialNumber - : Asn1Encodable - { - private X509Name name; - private DerInteger serialNumber; - - public static IssuerAndSerialNumber GetInstance(object obj) - { - if (obj == null) - return null; - IssuerAndSerialNumber existing = obj as IssuerAndSerialNumber; - if (existing != null) - return existing; - return new IssuerAndSerialNumber(Asn1Sequence.GetInstance(obj)); - } - - [Obsolete("Use GetInstance() instead")] - public IssuerAndSerialNumber( - Asn1Sequence seq) - { - this.name = X509Name.GetInstance(seq[0]); - this.serialNumber = (DerInteger) seq[1]; - } - - public IssuerAndSerialNumber( - X509Name name, - BigInteger serialNumber) - { - this.name = name; - this.serialNumber = new DerInteger(serialNumber); - } - - public IssuerAndSerialNumber( - X509Name name, - DerInteger serialNumber) - { - this.name = name; - this.serialNumber = serialNumber; - } - - public X509Name Name - { - get { return name; } - } - - public DerInteger SerialNumber - { - get { return serialNumber; } - } - - public override Asn1Object ToAsn1Object() - { - return new DerSequence(name, serialNumber); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/KEKIdentifier.cs b/bc-sharp-crypto/src/asn1/cms/KEKIdentifier.cs deleted file mode 100644 index a422174..0000000 --- a/bc-sharp-crypto/src/asn1/cms/KEKIdentifier.cs +++ /dev/null @@ -1,119 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class KekIdentifier - : Asn1Encodable - { - private Asn1OctetString keyIdentifier; - private DerGeneralizedTime date; - private OtherKeyAttribute other; - - public KekIdentifier( - byte[] keyIdentifier, - DerGeneralizedTime date, - OtherKeyAttribute other) - { - this.keyIdentifier = new DerOctetString(keyIdentifier); - this.date = date; - this.other = other; - } - - public KekIdentifier( - Asn1Sequence seq) - { - keyIdentifier = (Asn1OctetString) seq[0]; - - switch (seq.Count) - { - case 1: - break; - case 2: - if (seq[1] is DerGeneralizedTime) - { - date = (DerGeneralizedTime) seq[1]; - } - else - { - other = OtherKeyAttribute.GetInstance(seq[2]); - } - break; - case 3: - date = (DerGeneralizedTime) seq[1]; - other = OtherKeyAttribute.GetInstance(seq[2]); - break; - default: - throw new ArgumentException("Invalid KekIdentifier"); - } - } - - /** - * return a KekIdentifier object from a tagged object. - * - * @param obj the tagged object holding the object we want. - * @param explicitly true if the object is meant to be explicitly - * tagged false otherwise. - * @exception ArgumentException if the object held by the - * tagged object cannot be converted. - */ - public static KekIdentifier GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - /** - * return a KekIdentifier object from the given object. - * - * @param obj the object we want converted. - * @exception ArgumentException if the object cannot be converted. - */ - public static KekIdentifier GetInstance( - object obj) - { - if (obj == null || obj is KekIdentifier) - return (KekIdentifier)obj; - - if (obj is Asn1Sequence) - return new KekIdentifier((Asn1Sequence)obj); - - throw new ArgumentException("Invalid KekIdentifier: " + Platform.GetTypeName(obj)); - } - - public Asn1OctetString KeyIdentifier - { - get { return keyIdentifier; } - } - - public DerGeneralizedTime Date - { - get { return date; } - } - - public OtherKeyAttribute Other - { - get { return other; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * KekIdentifier ::= Sequence {
-         *     keyIdentifier OCTET STRING,
-         *     date GeneralizedTime OPTIONAL,
-         *     other OtherKeyAttribute OPTIONAL
-         * }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(keyIdentifier); - v.AddOptional(date, other); - return new DerSequence(v); - } - } -} - diff --git a/bc-sharp-crypto/src/asn1/cms/KEKRecipientInfo.cs b/bc-sharp-crypto/src/asn1/cms/KEKRecipientInfo.cs deleted file mode 100644 index 810e7fc..0000000 --- a/bc-sharp-crypto/src/asn1/cms/KEKRecipientInfo.cs +++ /dev/null @@ -1,106 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class KekRecipientInfo - : Asn1Encodable - { - private DerInteger version; - private KekIdentifier kekID; - private AlgorithmIdentifier keyEncryptionAlgorithm; - private Asn1OctetString encryptedKey; - - public KekRecipientInfo( - KekIdentifier kekID, - AlgorithmIdentifier keyEncryptionAlgorithm, - Asn1OctetString encryptedKey) - { - this.version = new DerInteger(4); - this.kekID = kekID; - this.keyEncryptionAlgorithm = keyEncryptionAlgorithm; - this.encryptedKey = encryptedKey; - } - - public KekRecipientInfo( - Asn1Sequence seq) - { - version = (DerInteger) seq[0]; - kekID = KekIdentifier.GetInstance(seq[1]); - keyEncryptionAlgorithm = AlgorithmIdentifier.GetInstance(seq[2]); - encryptedKey = (Asn1OctetString) seq[3]; - } - - /** - * return a KekRecipientInfo object from a tagged object. - * - * @param obj the tagged object holding the object we want. - * @param explicitly true if the object is meant to be explicitly - * tagged false otherwise. - * @exception ArgumentException if the object held by the - * tagged object cannot be converted. - */ - public static KekRecipientInfo GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - /** - * return a KekRecipientInfo object from the given object. - * - * @param obj the object we want converted. - * @exception ArgumentException if the object cannot be converted. - */ - public static KekRecipientInfo GetInstance( - object obj) - { - if (obj == null || obj is KekRecipientInfo) - return (KekRecipientInfo)obj; - - if(obj is Asn1Sequence) - return new KekRecipientInfo((Asn1Sequence)obj); - - throw new ArgumentException("Invalid KekRecipientInfo: " + Platform.GetTypeName(obj)); - } - - public DerInteger Version - { - get { return version; } - } - - public KekIdentifier KekID - { - get { return kekID; } - } - - public AlgorithmIdentifier KeyEncryptionAlgorithm - { - get { return keyEncryptionAlgorithm; } - } - - public Asn1OctetString EncryptedKey - { - get { return encryptedKey; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * KekRecipientInfo ::= Sequence {
-         *     version CMSVersion,  -- always set to 4
-         *     kekID KekIdentifier,
-         *     keyEncryptionAlgorithm KeyEncryptionAlgorithmIdentifier,
-         *     encryptedKey EncryptedKey
-         * }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(version, kekID, keyEncryptionAlgorithm, encryptedKey); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/KeyAgreeRecipientIdentifier.cs b/bc-sharp-crypto/src/asn1/cms/KeyAgreeRecipientIdentifier.cs deleted file mode 100644 index 0256c2d..0000000 --- a/bc-sharp-crypto/src/asn1/cms/KeyAgreeRecipientIdentifier.cs +++ /dev/null @@ -1,94 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class KeyAgreeRecipientIdentifier - : Asn1Encodable, IAsn1Choice - { - /** - * return an KeyAgreeRecipientIdentifier object from a tagged object. - * - * @param obj the tagged object holding the object we want. - * @param isExplicit true if the object is meant to be explicitly - * tagged false otherwise. - * @exception ArgumentException if the object held by the - * tagged object cannot be converted. - */ - public static KeyAgreeRecipientIdentifier GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - return GetInstance(Asn1Sequence.GetInstance(obj, isExplicit)); - } - - /** - * return an KeyAgreeRecipientIdentifier object from the given object. - * - * @param obj the object we want converted. - * @exception ArgumentException if the object cannot be converted. - */ - public static KeyAgreeRecipientIdentifier GetInstance( - object obj) - { - if (obj == null || obj is KeyAgreeRecipientIdentifier) - return (KeyAgreeRecipientIdentifier)obj; - - if (obj is Asn1Sequence) - return new KeyAgreeRecipientIdentifier(IssuerAndSerialNumber.GetInstance(obj)); - - if (obj is Asn1TaggedObject && ((Asn1TaggedObject)obj).TagNo == 0) - { - return new KeyAgreeRecipientIdentifier(RecipientKeyIdentifier.GetInstance( - (Asn1TaggedObject)obj, false)); - } - - throw new ArgumentException("Invalid KeyAgreeRecipientIdentifier: " + Platform.GetTypeName(obj), "obj"); - } - - private readonly IssuerAndSerialNumber issuerSerial; - private readonly RecipientKeyIdentifier rKeyID; - - public KeyAgreeRecipientIdentifier( - IssuerAndSerialNumber issuerSerial) - { - this.issuerSerial = issuerSerial; - } - - public KeyAgreeRecipientIdentifier( - RecipientKeyIdentifier rKeyID) - { - this.rKeyID = rKeyID; - } - - public IssuerAndSerialNumber IssuerAndSerialNumber - { - get { return issuerSerial; } - } - - public RecipientKeyIdentifier RKeyID - { - get { return rKeyID; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-		 * KeyAgreeRecipientIdentifier ::= CHOICE {
-		 *     issuerAndSerialNumber IssuerAndSerialNumber,
-		 *     rKeyId [0] IMPLICIT RecipientKeyIdentifier
-		 * }
-		 *
- */ - public override Asn1Object ToAsn1Object() - { - if (issuerSerial != null) - { - return issuerSerial.ToAsn1Object(); - } - - return new DerTaggedObject(false, 0, rKeyID); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/KeyAgreeRecipientInfo.cs b/bc-sharp-crypto/src/asn1/cms/KeyAgreeRecipientInfo.cs deleted file mode 100644 index 62a3892..0000000 --- a/bc-sharp-crypto/src/asn1/cms/KeyAgreeRecipientInfo.cs +++ /dev/null @@ -1,141 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class KeyAgreeRecipientInfo - : Asn1Encodable - { - private DerInteger version; - private OriginatorIdentifierOrKey originator; - private Asn1OctetString ukm; - private AlgorithmIdentifier keyEncryptionAlgorithm; - private Asn1Sequence recipientEncryptedKeys; - - public KeyAgreeRecipientInfo( - OriginatorIdentifierOrKey originator, - Asn1OctetString ukm, - AlgorithmIdentifier keyEncryptionAlgorithm, - Asn1Sequence recipientEncryptedKeys) - { - this.version = new DerInteger(3); - this.originator = originator; - this.ukm = ukm; - this.keyEncryptionAlgorithm = keyEncryptionAlgorithm; - this.recipientEncryptedKeys = recipientEncryptedKeys; - } - - public KeyAgreeRecipientInfo( - Asn1Sequence seq) - { - int index = 0; - - version = (DerInteger) seq[index++]; - originator = OriginatorIdentifierOrKey.GetInstance( - (Asn1TaggedObject) seq[index++], true); - - if (seq[index] is Asn1TaggedObject) - { - ukm = Asn1OctetString.GetInstance( - (Asn1TaggedObject) seq[index++], true); - } - - keyEncryptionAlgorithm = AlgorithmIdentifier.GetInstance( - seq[index++]); - - recipientEncryptedKeys = (Asn1Sequence) seq[index++]; - } - - /** - * return a KeyAgreeRecipientInfo object from a tagged object. - * - * @param obj the tagged object holding the object we want. - * @param explicitly true if the object is meant to be explicitly - * tagged false otherwise. - * @exception ArgumentException if the object held by the - * tagged object cannot be converted. - */ - public static KeyAgreeRecipientInfo GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - /** - * return a KeyAgreeRecipientInfo object from the given object. - * - * @param obj the object we want converted. - * @exception ArgumentException if the object cannot be converted. - */ - public static KeyAgreeRecipientInfo GetInstance( - object obj) - { - if (obj == null || obj is KeyAgreeRecipientInfo) - return (KeyAgreeRecipientInfo)obj; - - if (obj is Asn1Sequence) - return new KeyAgreeRecipientInfo((Asn1Sequence)obj); - - throw new ArgumentException( - "Illegal object in KeyAgreeRecipientInfo: " + Platform.GetTypeName(obj)); - - } - - public DerInteger Version - { - get { return version; } - } - - public OriginatorIdentifierOrKey Originator - { - get { return originator; } - } - - public Asn1OctetString UserKeyingMaterial - { - get { return ukm; } - } - - public AlgorithmIdentifier KeyEncryptionAlgorithm - { - get { return keyEncryptionAlgorithm; } - } - - public Asn1Sequence RecipientEncryptedKeys - { - get { return recipientEncryptedKeys; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * KeyAgreeRecipientInfo ::= Sequence {
-         *     version CMSVersion,  -- always set to 3
-         *     originator [0] EXPLICIT OriginatorIdentifierOrKey,
-         *     ukm [1] EXPLICIT UserKeyingMaterial OPTIONAL,
-         *     keyEncryptionAlgorithm KeyEncryptionAlgorithmIdentifier,
-         *     recipientEncryptedKeys RecipientEncryptedKeys
-         * }
-		 *
-		 * UserKeyingMaterial ::= OCTET STRING
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector( - version, new DerTaggedObject(true, 0, originator)); - - if (ukm != null) - { - v.Add(new DerTaggedObject(true, 1, ukm)); - } - - v.Add(keyEncryptionAlgorithm, recipientEncryptedKeys); - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/KeyTransRecipientInfo.cs b/bc-sharp-crypto/src/asn1/cms/KeyTransRecipientInfo.cs deleted file mode 100644 index 5e4fd22..0000000 --- a/bc-sharp-crypto/src/asn1/cms/KeyTransRecipientInfo.cs +++ /dev/null @@ -1,99 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class KeyTransRecipientInfo - : Asn1Encodable - { - private DerInteger version; - private RecipientIdentifier rid; - private AlgorithmIdentifier keyEncryptionAlgorithm; - private Asn1OctetString encryptedKey; - - public KeyTransRecipientInfo( - RecipientIdentifier rid, - AlgorithmIdentifier keyEncryptionAlgorithm, - Asn1OctetString encryptedKey) - { - if (rid.ToAsn1Object() is Asn1TaggedObject) - { - this.version = new DerInteger(2); - } - else - { - this.version = new DerInteger(0); - } - - this.rid = rid; - this.keyEncryptionAlgorithm = keyEncryptionAlgorithm; - this.encryptedKey = encryptedKey; - } - - public KeyTransRecipientInfo( - Asn1Sequence seq) - { - this.version = (DerInteger) seq[0]; - this.rid = RecipientIdentifier.GetInstance(seq[1]); - this.keyEncryptionAlgorithm = AlgorithmIdentifier.GetInstance(seq[2]); - this.encryptedKey = (Asn1OctetString) seq[3]; - } - - /** - * return a KeyTransRecipientInfo object from the given object. - * - * @param obj the object we want converted. - * @exception ArgumentException if the object cannot be converted. - */ - public static KeyTransRecipientInfo GetInstance( - object obj) - { - if (obj == null || obj is KeyTransRecipientInfo) - return (KeyTransRecipientInfo) obj; - - if(obj is Asn1Sequence) - return new KeyTransRecipientInfo((Asn1Sequence) obj); - - throw new ArgumentException( - "Illegal object in KeyTransRecipientInfo: " + Platform.GetTypeName(obj)); - } - - public DerInteger Version - { - get { return version; } - } - - public RecipientIdentifier RecipientIdentifier - { - get { return rid; } - } - - public AlgorithmIdentifier KeyEncryptionAlgorithm - { - get { return keyEncryptionAlgorithm; } - } - - public Asn1OctetString EncryptedKey - { - get { return encryptedKey; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * KeyTransRecipientInfo ::= Sequence {
-         *     version CMSVersion,  -- always set to 0 or 2
-         *     rid RecipientIdentifier,
-         *     keyEncryptionAlgorithm KeyEncryptionAlgorithmIdentifier,
-         *     encryptedKey EncryptedKey
-         * }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(version, rid, keyEncryptionAlgorithm, encryptedKey); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/MetaData.cs b/bc-sharp-crypto/src/asn1/cms/MetaData.cs deleted file mode 100644 index ad2b5c4..0000000 --- a/bc-sharp-crypto/src/asn1/cms/MetaData.cs +++ /dev/null @@ -1,94 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class MetaData - : Asn1Encodable - { - private DerBoolean hashProtected; - private DerUtf8String fileName; - private DerIA5String mediaType; - private Attributes otherMetaData; - - public MetaData( - DerBoolean hashProtected, - DerUtf8String fileName, - DerIA5String mediaType, - Attributes otherMetaData) - { - this.hashProtected = hashProtected; - this.fileName = fileName; - this.mediaType = mediaType; - this.otherMetaData = otherMetaData; - } - - private MetaData(Asn1Sequence seq) - { - this.hashProtected = DerBoolean.GetInstance(seq[0]); - - int index = 1; - - if (index < seq.Count && seq[index] is DerUtf8String) - { - this.fileName = DerUtf8String.GetInstance(seq[index++]); - } - if (index < seq.Count && seq[index] is DerIA5String) - { - this.mediaType = DerIA5String.GetInstance(seq[index++]); - } - if (index < seq.Count) - { - this.otherMetaData = Attributes.GetInstance(seq[index++]); - } - } - - public static MetaData GetInstance(object obj) - { - if (obj is MetaData) - return (MetaData)obj; - - if (obj != null) - return new MetaData(Asn1Sequence.GetInstance(obj)); - - return null; - } - - /** - * 
-		 * MetaData ::= SEQUENCE {
-		 *   hashProtected        BOOLEAN,
-		 *   fileName             UTF8String OPTIONAL,
-		 *   mediaType            IA5String OPTIONAL,
-		 *   otherMetaData        Attributes OPTIONAL
-		 * }
-		 *
- * @return - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(hashProtected); - v.AddOptional(fileName, mediaType, otherMetaData); - return new DerSequence(v); - } - - public virtual bool IsHashProtected - { - get { return hashProtected.IsTrue; } - } - - public virtual DerUtf8String FileName - { - get { return fileName; } - } - - public virtual DerIA5String MediaType - { - get { return mediaType; } - } - - public virtual Attributes OtherMetaData - { - get { return otherMetaData; } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/OriginatorIdentifierOrKey.cs b/bc-sharp-crypto/src/asn1/cms/OriginatorIdentifierOrKey.cs deleted file mode 100644 index f197fe9..0000000 --- a/bc-sharp-crypto/src/asn1/cms/OriginatorIdentifierOrKey.cs +++ /dev/null @@ -1,168 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class OriginatorIdentifierOrKey - : Asn1Encodable, IAsn1Choice - { - private Asn1Encodable id; - - public OriginatorIdentifierOrKey( - IssuerAndSerialNumber id) - { - this.id = id; - } - - [Obsolete("Use version taking a 'SubjectKeyIdentifier'")] - public OriginatorIdentifierOrKey( - Asn1OctetString id) - : this(new SubjectKeyIdentifier(id)) - { - } - - public OriginatorIdentifierOrKey( - SubjectKeyIdentifier id) - { - this.id = new DerTaggedObject(false, 0, id); - } - - public OriginatorIdentifierOrKey( - OriginatorPublicKey id) - { - this.id = new DerTaggedObject(false, 1, id); - } - - [Obsolete("Use more specific version")] - public OriginatorIdentifierOrKey( - Asn1Object id) - { - this.id = id; - } - - private OriginatorIdentifierOrKey( - Asn1TaggedObject id) - { - // TODO Add validation - this.id = id; - } - - /** - * return an OriginatorIdentifierOrKey object from a tagged object. - * - * @param o the tagged object holding the object we want. - * @param explicitly true if the object is meant to be explicitly - * tagged false otherwise. - * @exception ArgumentException if the object held by the - * tagged object cannot be converted. - */ - public static OriginatorIdentifierOrKey GetInstance( - Asn1TaggedObject o, - bool explicitly) - { - if (!explicitly) - { - throw new ArgumentException( - "Can't implicitly tag OriginatorIdentifierOrKey"); - } - - return GetInstance(o.GetObject()); - } - - /** - * return an OriginatorIdentifierOrKey object from the given object. - * - * @param o the object we want converted. - * @exception ArgumentException if the object cannot be converted. - */ - public static OriginatorIdentifierOrKey GetInstance( - object o) - { - if (o == null || o is OriginatorIdentifierOrKey) - return (OriginatorIdentifierOrKey)o; - - if (o is IssuerAndSerialNumber) - return new OriginatorIdentifierOrKey((IssuerAndSerialNumber)o); - - if (o is SubjectKeyIdentifier) - return new OriginatorIdentifierOrKey((SubjectKeyIdentifier)o); - - if (o is OriginatorPublicKey) - return new OriginatorIdentifierOrKey((OriginatorPublicKey)o); - - if (o is Asn1TaggedObject) - return new OriginatorIdentifierOrKey((Asn1TaggedObject)o); - - throw new ArgumentException("Invalid OriginatorIdentifierOrKey: " + Platform.GetTypeName(o)); - } - - public Asn1Encodable ID - { - get { return id; } - } - - public IssuerAndSerialNumber IssuerAndSerialNumber - { - get - { - if (id is IssuerAndSerialNumber) - { - return (IssuerAndSerialNumber)id; - } - - return null; - } - } - - public SubjectKeyIdentifier SubjectKeyIdentifier - { - get - { - if (id is Asn1TaggedObject && ((Asn1TaggedObject)id).TagNo == 0) - { - return SubjectKeyIdentifier.GetInstance((Asn1TaggedObject)id, false); - } - - return null; - } - } - - [Obsolete("Use 'OriginatorPublicKey' property")] - public OriginatorPublicKey OriginatorKey - { - get { return OriginatorPublicKey; } - } - - public OriginatorPublicKey OriginatorPublicKey - { - get - { - if (id is Asn1TaggedObject && ((Asn1TaggedObject)id).TagNo == 1) - { - return OriginatorPublicKey.GetInstance((Asn1TaggedObject)id, false); - } - - return null; - } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * OriginatorIdentifierOrKey ::= CHOICE {
-         *     issuerAndSerialNumber IssuerAndSerialNumber,
-         *     subjectKeyIdentifier [0] SubjectKeyIdentifier,
-         *     originatorKey [1] OriginatorPublicKey
-         * }
-         *
-         * SubjectKeyIdentifier ::= OCTET STRING
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return id.ToAsn1Object(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/OriginatorInfo.cs b/bc-sharp-crypto/src/asn1/cms/OriginatorInfo.cs deleted file mode 100644 index 33b049e..0000000 --- a/bc-sharp-crypto/src/asn1/cms/OriginatorInfo.cs +++ /dev/null @@ -1,121 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class OriginatorInfo - : Asn1Encodable - { - private Asn1Set certs; - private Asn1Set crls; - - public OriginatorInfo( - Asn1Set certs, - Asn1Set crls) - { - this.certs = certs; - this.crls = crls; - } - - public OriginatorInfo( - Asn1Sequence seq) - { - switch (seq.Count) - { - case 0: // empty - break; - case 1: - Asn1TaggedObject o = (Asn1TaggedObject) seq[0]; - switch (o.TagNo) - { - case 0 : - certs = Asn1Set.GetInstance(o, false); - break; - case 1 : - crls = Asn1Set.GetInstance(o, false); - break; - default: - throw new ArgumentException("Bad tag in OriginatorInfo: " + o.TagNo); - } - break; - case 2: - certs = Asn1Set.GetInstance((Asn1TaggedObject) seq[0], false); - crls = Asn1Set.GetInstance((Asn1TaggedObject) seq[1], false); - break; - default: - throw new ArgumentException("OriginatorInfo too big"); - } - } - - /** - * return an OriginatorInfo object from a tagged object. - * - * @param obj the tagged object holding the object we want. - * @param explicitly true if the object is meant to be explicitly - * tagged false otherwise. - * @exception ArgumentException if the object held by the - * tagged object cannot be converted. - */ - public static OriginatorInfo GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - /** - * return an OriginatorInfo object from the given object. - * - * @param obj the object we want converted. - * @exception ArgumentException if the object cannot be converted. - */ - public static OriginatorInfo GetInstance( - object obj) - { - if (obj == null || obj is OriginatorInfo) - return (OriginatorInfo)obj; - - if (obj is Asn1Sequence) - return new OriginatorInfo((Asn1Sequence)obj); - - throw new ArgumentException("Invalid OriginatorInfo: " + Platform.GetTypeName(obj)); - } - - public Asn1Set Certificates - { - get { return certs; } - } - - public Asn1Set Crls - { - get { return crls; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * OriginatorInfo ::= Sequence {
-         *     certs [0] IMPLICIT CertificateSet OPTIONAL,
-         *     crls [1] IMPLICIT CertificateRevocationLists OPTIONAL
-         * }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - if (certs != null) - { - v.Add(new DerTaggedObject(false, 0, certs)); - } - - if (crls != null) - { - v.Add(new DerTaggedObject(false, 1, crls)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/OriginatorPublicKey.cs b/bc-sharp-crypto/src/asn1/cms/OriginatorPublicKey.cs deleted file mode 100644 index 9f29c62..0000000 --- a/bc-sharp-crypto/src/asn1/cms/OriginatorPublicKey.cs +++ /dev/null @@ -1,88 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class OriginatorPublicKey - : Asn1Encodable - { - private readonly AlgorithmIdentifier mAlgorithm; - private readonly DerBitString mPublicKey; - - public OriginatorPublicKey( - AlgorithmIdentifier algorithm, - byte[] publicKey) - { - this.mAlgorithm = algorithm; - this.mPublicKey = new DerBitString(publicKey); - } - - [Obsolete("Use 'GetInstance' instead")] - public OriginatorPublicKey( - Asn1Sequence seq) - { - this.mAlgorithm = AlgorithmIdentifier.GetInstance(seq[0]); - this.mPublicKey = DerBitString.GetInstance(seq[1]); - } - - /** - * return an OriginatorPublicKey object from a tagged object. - * - * @param obj the tagged object holding the object we want. - * @param explicitly true if the object is meant to be explicitly - * tagged false otherwise. - * @exception ArgumentException if the object held by the - * tagged object cannot be converted. - */ - public static OriginatorPublicKey GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - /** - * return an OriginatorPublicKey object from the given object. - * - * @param obj the object we want converted. - * @exception ArgumentException if the object cannot be converted. - */ - public static OriginatorPublicKey GetInstance( - object obj) - { - if (obj == null || obj is OriginatorPublicKey) - return (OriginatorPublicKey)obj; - - if (obj is Asn1Sequence) - return new OriginatorPublicKey(Asn1Sequence.GetInstance(obj)); - - throw new ArgumentException("Invalid OriginatorPublicKey: " + Platform.GetTypeName(obj)); - } - - public AlgorithmIdentifier Algorithm - { - get { return mAlgorithm; } - } - - public DerBitString PublicKey - { - get { return mPublicKey; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * OriginatorPublicKey ::= Sequence {
-         *     algorithm AlgorithmIdentifier,
-         *     publicKey BIT STRING
-         * }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(mAlgorithm, mPublicKey); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/OtherKeyAttribute.cs b/bc-sharp-crypto/src/asn1/cms/OtherKeyAttribute.cs deleted file mode 100644 index 285c881..0000000 --- a/bc-sharp-crypto/src/asn1/cms/OtherKeyAttribute.cs +++ /dev/null @@ -1,70 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class OtherKeyAttribute - : Asn1Encodable - { - private DerObjectIdentifier keyAttrId; - private Asn1Encodable keyAttr; - - /** - * return an OtherKeyAttribute object from the given object. - * - * @param o the object we want converted. - * @exception ArgumentException if the object cannot be converted. - */ - public static OtherKeyAttribute GetInstance( - object obj) - { - if (obj == null || obj is OtherKeyAttribute) - return (OtherKeyAttribute) obj; - - if (obj is Asn1Sequence) - return new OtherKeyAttribute((Asn1Sequence) obj); - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public OtherKeyAttribute( - Asn1Sequence seq) - { - keyAttrId = (DerObjectIdentifier) seq[0]; - keyAttr = seq[1]; - } - - public OtherKeyAttribute( - DerObjectIdentifier keyAttrId, - Asn1Encodable keyAttr) - { - this.keyAttrId = keyAttrId; - this.keyAttr = keyAttr; - } - - public DerObjectIdentifier KeyAttrId - { - get { return keyAttrId; } - } - - public Asn1Encodable KeyAttr - { - get { return keyAttr; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * OtherKeyAttribute ::= Sequence {
-         *     keyAttrId OBJECT IDENTIFIER,
-         *     keyAttr ANY DEFINED BY keyAttrId OPTIONAL
-         * }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(keyAttrId, keyAttr); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/OtherRecipientInfo.cs b/bc-sharp-crypto/src/asn1/cms/OtherRecipientInfo.cs deleted file mode 100644 index 80dd68e..0000000 --- a/bc-sharp-crypto/src/asn1/cms/OtherRecipientInfo.cs +++ /dev/null @@ -1,83 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class OtherRecipientInfo - : Asn1Encodable - { - private readonly DerObjectIdentifier oriType; - private readonly Asn1Encodable oriValue; - - public OtherRecipientInfo( - DerObjectIdentifier oriType, - Asn1Encodable oriValue) - { - this.oriType = oriType; - this.oriValue = oriValue; - } - - [Obsolete("Use GetInstance() instead")] - public OtherRecipientInfo( - Asn1Sequence seq) - { - oriType = DerObjectIdentifier.GetInstance(seq[0]); - oriValue = seq[1]; - } - - /** - * return a OtherRecipientInfo object from a tagged object. - * - * @param obj the tagged object holding the object we want. - * @param explicitly true if the object is meant to be explicitly - * tagged false otherwise. - * @exception ArgumentException if the object held by the - * tagged object cannot be converted. - */ - public static OtherRecipientInfo GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - /** - * return a OtherRecipientInfo object from the given object. - * - * @param obj the object we want converted. - * @exception ArgumentException if the object cannot be converted. - */ - public static OtherRecipientInfo GetInstance( - object obj) - { - if (obj == null) - return null; - OtherRecipientInfo existing = obj as OtherRecipientInfo; - if (existing != null) - return existing; - return new OtherRecipientInfo(Asn1Sequence.GetInstance(obj)); - } - - public virtual DerObjectIdentifier OriType - { - get { return oriType; } - } - - public virtual Asn1Encodable OriValue - { - get { return oriValue; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * OtherRecipientInfo ::= Sequence {
-         *    oriType OBJECT IDENTIFIER,
-         *    oriValue ANY DEFINED BY oriType }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(oriType, oriValue); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/OtherRevocationInfoFormat.cs b/bc-sharp-crypto/src/asn1/cms/OtherRevocationInfoFormat.cs deleted file mode 100644 index 7835489..0000000 --- a/bc-sharp-crypto/src/asn1/cms/OtherRevocationInfoFormat.cs +++ /dev/null @@ -1,77 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class OtherRevocationInfoFormat - : Asn1Encodable - { - private readonly DerObjectIdentifier otherRevInfoFormat; - private readonly Asn1Encodable otherRevInfo; - - public OtherRevocationInfoFormat( - DerObjectIdentifier otherRevInfoFormat, - Asn1Encodable otherRevInfo) - { - this.otherRevInfoFormat = otherRevInfoFormat; - this.otherRevInfo = otherRevInfo; - } - - private OtherRevocationInfoFormat(Asn1Sequence seq) - { - otherRevInfoFormat = DerObjectIdentifier.GetInstance(seq[0]); - otherRevInfo = seq[1]; - } - - /** - * return a OtherRevocationInfoFormat object from a tagged object. - * - * @param obj the tagged object holding the object we want. - * @param explicit true if the object is meant to be explicitly - * tagged false otherwise. - * @exception IllegalArgumentException if the object held by the - * tagged object cannot be converted. - */ - public static OtherRevocationInfoFormat GetInstance(Asn1TaggedObject obj, bool isExplicit) - { - return GetInstance(Asn1Sequence.GetInstance(obj, isExplicit)); - } - - /** - * return a OtherRevocationInfoFormat object from the given object. - * - * @param obj the object we want converted. - * @exception IllegalArgumentException if the object cannot be converted. - */ - public static OtherRevocationInfoFormat GetInstance(object obj) - { - if (obj is OtherRevocationInfoFormat) - return (OtherRevocationInfoFormat)obj; - if (obj != null) - return new OtherRevocationInfoFormat(Asn1Sequence.GetInstance(obj)); - return null; - } - - public virtual DerObjectIdentifier InfoFormat - { - get { return otherRevInfoFormat; } - } - - public virtual Asn1Encodable Info - { - get { return otherRevInfo; } - } - - /** - * Produce an object suitable for an ASN1OutputStream. - * 
-         * OtherRevocationInfoFormat ::= SEQUENCE {
-         *      otherRevInfoFormat OBJECT IDENTIFIER,
-         *      otherRevInfo ANY DEFINED BY otherRevInfoFormat }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(otherRevInfoFormat, otherRevInfo); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/PasswordRecipientInfo.cs b/bc-sharp-crypto/src/asn1/cms/PasswordRecipientInfo.cs deleted file mode 100644 index 7f275fd..0000000 --- a/bc-sharp-crypto/src/asn1/cms/PasswordRecipientInfo.cs +++ /dev/null @@ -1,133 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class PasswordRecipientInfo - : Asn1Encodable - { - private readonly DerInteger version; - private readonly AlgorithmIdentifier keyDerivationAlgorithm; - private readonly AlgorithmIdentifier keyEncryptionAlgorithm; - private readonly Asn1OctetString encryptedKey; - - public PasswordRecipientInfo( - AlgorithmIdentifier keyEncryptionAlgorithm, - Asn1OctetString encryptedKey) - { - this.version = new DerInteger(0); - this.keyEncryptionAlgorithm = keyEncryptionAlgorithm; - this.encryptedKey = encryptedKey; - } - - public PasswordRecipientInfo( - AlgorithmIdentifier keyDerivationAlgorithm, - AlgorithmIdentifier keyEncryptionAlgorithm, - Asn1OctetString encryptedKey) - { - this.version = new DerInteger(0); - this.keyDerivationAlgorithm = keyDerivationAlgorithm; - this.keyEncryptionAlgorithm = keyEncryptionAlgorithm; - this.encryptedKey = encryptedKey; - } - - public PasswordRecipientInfo( - Asn1Sequence seq) - { - version = (DerInteger) seq[0]; - - if (seq[1] is Asn1TaggedObject) - { - keyDerivationAlgorithm = AlgorithmIdentifier.GetInstance((Asn1TaggedObject) seq[1], false); - keyEncryptionAlgorithm = AlgorithmIdentifier.GetInstance(seq[2]); - encryptedKey = (Asn1OctetString) seq[3]; - } - else - { - keyEncryptionAlgorithm = AlgorithmIdentifier.GetInstance(seq[1]); - encryptedKey = (Asn1OctetString) seq[2]; - } - } - - /** - * return a PasswordRecipientInfo object from a tagged object. - * - * @param obj the tagged object holding the object we want. - * @param explicitly true if the object is meant to be explicitly - * tagged false otherwise. - * @exception ArgumentException if the object held by the - * tagged object cannot be converted. - */ - public static PasswordRecipientInfo GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - /** - * return a PasswordRecipientInfo object from the given object. - * - * @param obj the object we want converted. - * @exception ArgumentException if the object cannot be converted. - */ - public static PasswordRecipientInfo GetInstance( - object obj) - { - if (obj == null || obj is PasswordRecipientInfo) - return (PasswordRecipientInfo) obj; - - if (obj is Asn1Sequence) - return new PasswordRecipientInfo((Asn1Sequence) obj); - - throw new ArgumentException("Invalid PasswordRecipientInfo: " + Platform.GetTypeName(obj)); - } - - public DerInteger Version - { - get { return version; } - } - - public AlgorithmIdentifier KeyDerivationAlgorithm - { - get { return keyDerivationAlgorithm; } - } - - public AlgorithmIdentifier KeyEncryptionAlgorithm - { - get { return keyEncryptionAlgorithm; } - } - - public Asn1OctetString EncryptedKey - { - get { return encryptedKey; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * PasswordRecipientInfo ::= Sequence {
-         *   version CMSVersion,   -- Always set to 0
-         *   keyDerivationAlgorithm [0] KeyDerivationAlgorithmIdentifier
-         *                             OPTIONAL,
-         *  keyEncryptionAlgorithm KeyEncryptionAlgorithmIdentifier,
-         *  encryptedKey EncryptedKey }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(version); - - if (keyDerivationAlgorithm != null) - { - v.Add(new DerTaggedObject(false, 0, keyDerivationAlgorithm)); - } - - v.Add(keyEncryptionAlgorithm, encryptedKey); - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/RecipientEncryptedKey.cs b/bc-sharp-crypto/src/asn1/cms/RecipientEncryptedKey.cs deleted file mode 100644 index 1afba4a..0000000 --- a/bc-sharp-crypto/src/asn1/cms/RecipientEncryptedKey.cs +++ /dev/null @@ -1,90 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class RecipientEncryptedKey - : Asn1Encodable - { - private readonly KeyAgreeRecipientIdentifier identifier; - private readonly Asn1OctetString encryptedKey; - - private RecipientEncryptedKey( - Asn1Sequence seq) - { - identifier = KeyAgreeRecipientIdentifier.GetInstance(seq[0]); - encryptedKey = (Asn1OctetString) seq[1]; - } - - /** - * return an RecipientEncryptedKey object from a tagged object. - * - * @param obj the tagged object holding the object we want. - * @param isExplicit true if the object is meant to be explicitly - * tagged false otherwise. - * @exception ArgumentException if the object held by the - * tagged object cannot be converted. - */ - public static RecipientEncryptedKey GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - return GetInstance(Asn1Sequence.GetInstance(obj, isExplicit)); - } - - /** - * return a RecipientEncryptedKey object from the given object. - * - * @param obj the object we want converted. - * @exception ArgumentException if the object cannot be converted. - */ - public static RecipientEncryptedKey GetInstance( - object obj) - { - if (obj == null || obj is RecipientEncryptedKey) - { - return (RecipientEncryptedKey) obj; - } - - if (obj is Asn1Sequence) - { - return new RecipientEncryptedKey((Asn1Sequence) obj); - } - - throw new ArgumentException("Invalid RecipientEncryptedKey: " + Platform.GetTypeName(obj), "obj"); - } - - public RecipientEncryptedKey( - KeyAgreeRecipientIdentifier id, - Asn1OctetString encryptedKey) - { - this.identifier = id; - this.encryptedKey = encryptedKey; - } - - public KeyAgreeRecipientIdentifier Identifier - { - get { return identifier; } - } - - public Asn1OctetString EncryptedKey - { - get { return encryptedKey; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-		 * RecipientEncryptedKey ::= SEQUENCE {
-		 *     rid KeyAgreeRecipientIdentifier,
-		 *     encryptedKey EncryptedKey
-		 * }
-		 *
- */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(identifier, encryptedKey); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/RecipientIdentifier.cs b/bc-sharp-crypto/src/asn1/cms/RecipientIdentifier.cs deleted file mode 100644 index f29fa8d..0000000 --- a/bc-sharp-crypto/src/asn1/cms/RecipientIdentifier.cs +++ /dev/null @@ -1,89 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class RecipientIdentifier - : Asn1Encodable, IAsn1Choice - { - private Asn1Encodable id; - - public RecipientIdentifier( - IssuerAndSerialNumber id) - { - this.id = id; - } - - public RecipientIdentifier( - Asn1OctetString id) - { - this.id = new DerTaggedObject(false, 0, id); - } - - public RecipientIdentifier( - Asn1Object id) - { - this.id = id; - } - - /** - * return a RecipientIdentifier object from the given object. - * - * @param o the object we want converted. - * @exception ArgumentException if the object cannot be converted. - */ - public static RecipientIdentifier GetInstance( - object o) - { - if (o == null || o is RecipientIdentifier) - return (RecipientIdentifier)o; - - if (o is IssuerAndSerialNumber) - return new RecipientIdentifier((IssuerAndSerialNumber) o); - - if (o is Asn1OctetString) - return new RecipientIdentifier((Asn1OctetString) o); - - if (o is Asn1Object) - return new RecipientIdentifier((Asn1Object) o); - - throw new ArgumentException( - "Illegal object in RecipientIdentifier: " + Platform.GetTypeName(o)); - } - - public bool IsTagged - { - get { return (id is Asn1TaggedObject); } - } - - public Asn1Encodable ID - { - get - { - if (id is Asn1TaggedObject) - { - return Asn1OctetString.GetInstance((Asn1TaggedObject) id, false); - } - - return IssuerAndSerialNumber.GetInstance(id); - } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * RecipientIdentifier ::= CHOICE {
-         *     issuerAndSerialNumber IssuerAndSerialNumber,
-         *     subjectKeyIdentifier [0] SubjectKeyIdentifier
-         * }
-         *
-         * SubjectKeyIdentifier ::= OCTET STRING
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return id.ToAsn1Object(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/RecipientInfo.cs b/bc-sharp-crypto/src/asn1/cms/RecipientInfo.cs deleted file mode 100644 index c03ad90..0000000 --- a/bc-sharp-crypto/src/asn1/cms/RecipientInfo.cs +++ /dev/null @@ -1,145 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class RecipientInfo - : Asn1Encodable, IAsn1Choice - { - internal Asn1Encodable info; - - public RecipientInfo( - KeyTransRecipientInfo info) - { - this.info = info; - } - - public RecipientInfo( - KeyAgreeRecipientInfo info) - { - this.info = new DerTaggedObject(false, 1, info); - } - - public RecipientInfo( - KekRecipientInfo info) - { - this.info = new DerTaggedObject(false, 2, info); - } - - public RecipientInfo( - PasswordRecipientInfo info) - { - this.info = new DerTaggedObject(false, 3, info); - } - - public RecipientInfo( - OtherRecipientInfo info) - { - this.info = new DerTaggedObject(false, 4, info); - } - - public RecipientInfo( - Asn1Object info) - { - this.info = info; - } - - public static RecipientInfo GetInstance( - object o) - { - if (o == null || o is RecipientInfo) - return (RecipientInfo) o; - - if (o is Asn1Sequence) - return new RecipientInfo((Asn1Sequence) o); - - if (o is Asn1TaggedObject) - return new RecipientInfo((Asn1TaggedObject) o); - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(o)); - } - - public DerInteger Version - { - get - { - if (info is Asn1TaggedObject) - { - Asn1TaggedObject o = (Asn1TaggedObject) info; - - switch (o.TagNo) - { - case 1: - return KeyAgreeRecipientInfo.GetInstance(o, false).Version; - case 2: - return GetKekInfo(o).Version; - case 3: - return PasswordRecipientInfo.GetInstance(o, false).Version; - case 4: - return new DerInteger(0); // no syntax version for OtherRecipientInfo - default: - throw new InvalidOperationException("unknown tag"); - } - } - - return KeyTransRecipientInfo.GetInstance(info).Version; - } - } - - public bool IsTagged - { - get { return info is Asn1TaggedObject; } - } - - public Asn1Encodable Info - { - get - { - if (info is Asn1TaggedObject) - { - Asn1TaggedObject o = (Asn1TaggedObject) info; - - switch (o.TagNo) - { - case 1: - return KeyAgreeRecipientInfo.GetInstance(o, false); - case 2: - return GetKekInfo(o); - case 3: - return PasswordRecipientInfo.GetInstance(o, false); - case 4: - return OtherRecipientInfo.GetInstance(o, false); - default: - throw new InvalidOperationException("unknown tag"); - } - } - - return KeyTransRecipientInfo.GetInstance(info); - } - } - - private KekRecipientInfo GetKekInfo( - Asn1TaggedObject o) - { - // For compatibility with erroneous version, we don't always pass 'false' here - return KekRecipientInfo.GetInstance(o, o.IsExplicit()); - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * RecipientInfo ::= CHOICE {
-         *     ktri KeyTransRecipientInfo,
-         *     kari [1] KeyAgreeRecipientInfo,
-         *     kekri [2] KekRecipientInfo,
-         *     pwri [3] PasswordRecipientInfo,
-         *     ori [4] OtherRecipientInfo }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return info.ToAsn1Object(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/RecipientKeyIdentifier.cs b/bc-sharp-crypto/src/asn1/cms/RecipientKeyIdentifier.cs deleted file mode 100644 index 995ddab..0000000 --- a/bc-sharp-crypto/src/asn1/cms/RecipientKeyIdentifier.cs +++ /dev/null @@ -1,137 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class RecipientKeyIdentifier - : Asn1Encodable - { - private Asn1OctetString subjectKeyIdentifier; - private DerGeneralizedTime date; - private OtherKeyAttribute other; - - public RecipientKeyIdentifier( - Asn1OctetString subjectKeyIdentifier, - DerGeneralizedTime date, - OtherKeyAttribute other) - { - this.subjectKeyIdentifier = subjectKeyIdentifier; - this.date = date; - this.other = other; - } - - public RecipientKeyIdentifier( - byte[] subjectKeyIdentifier) - : this(subjectKeyIdentifier, null, null) - { - } - - public RecipientKeyIdentifier( - byte[] subjectKeyIdentifier, - DerGeneralizedTime date, - OtherKeyAttribute other) - { - this.subjectKeyIdentifier = new DerOctetString(subjectKeyIdentifier); - this.date = date; - this.other = other; - } - - public RecipientKeyIdentifier( - Asn1Sequence seq) - { - subjectKeyIdentifier = Asn1OctetString.GetInstance( - seq[0]); - - switch(seq.Count) - { - case 1: - break; - case 2: - if (seq[1] is DerGeneralizedTime) - { - date = (DerGeneralizedTime) seq[1]; - } - else - { - other = OtherKeyAttribute.GetInstance(seq[2]); - } - break; - case 3: - date = (DerGeneralizedTime) seq[1]; - other = OtherKeyAttribute.GetInstance(seq[2]); - break; - default: - throw new ArgumentException("Invalid RecipientKeyIdentifier"); - } - } - - /** - * return a RecipientKeyIdentifier object from a tagged object. - * - * @param _ato the tagged object holding the object we want. - * @param _explicit true if the object is meant to be explicitly - * tagged false otherwise. - * @exception ArgumentException if the object held by the - * tagged object cannot be converted. - */ - public static RecipientKeyIdentifier GetInstance( - Asn1TaggedObject ato, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(ato, explicitly)); - } - - /** - * return a RecipientKeyIdentifier object from the given object. - * - * @param _obj the object we want converted. - * @exception ArgumentException if the object cannot be converted. - */ - public static RecipientKeyIdentifier GetInstance( - object obj) - { - if (obj == null || obj is RecipientKeyIdentifier) - return (RecipientKeyIdentifier) obj; - - if (obj is Asn1Sequence) - return new RecipientKeyIdentifier((Asn1Sequence) obj); - - throw new ArgumentException("Invalid RecipientKeyIdentifier: " + Platform.GetTypeName(obj)); - } - - public Asn1OctetString SubjectKeyIdentifier - { - get { return subjectKeyIdentifier; } - } - - public DerGeneralizedTime Date - { - get { return date; } - } - - public OtherKeyAttribute OtherKeyAttribute - { - get { return other; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * RecipientKeyIdentifier ::= Sequence {
-         *     subjectKeyIdentifier SubjectKeyIdentifier,
-         *     date GeneralizedTime OPTIONAL,
-         *     other OtherKeyAttribute OPTIONAL
-         * }
-         *
-         * SubjectKeyIdentifier ::= OCTET STRING
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(subjectKeyIdentifier); - v.AddOptional(date, other); - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/SCVPReqRes.cs b/bc-sharp-crypto/src/asn1/cms/SCVPReqRes.cs deleted file mode 100644 index 486979a..0000000 --- a/bc-sharp-crypto/src/asn1/cms/SCVPReqRes.cs +++ /dev/null @@ -1,77 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class ScvpReqRes - : Asn1Encodable - { - private readonly ContentInfo request; - private readonly ContentInfo response; - - public static ScvpReqRes GetInstance(object obj) - { - if (obj is ScvpReqRes) - return (ScvpReqRes)obj; - if (obj != null) - return new ScvpReqRes(Asn1Sequence.GetInstance(obj)); - return null; - } - - private ScvpReqRes(Asn1Sequence seq) - { - if (seq[0] is Asn1TaggedObject) - { - this.request = ContentInfo.GetInstance(Asn1TaggedObject.GetInstance(seq[0]), true); - this.response = ContentInfo.GetInstance(seq[1]); - } - else - { - this.request = null; - this.response = ContentInfo.GetInstance(seq[0]); - } - } - - public ScvpReqRes(ContentInfo response) - : this(null, response) - { - } - - public ScvpReqRes(ContentInfo request, ContentInfo response) - { - this.request = request; - this.response = response; - } - - public virtual ContentInfo Request - { - get { return request; } - } - - public virtual ContentInfo Response - { - get { return response; } - } - - /** - * 
-         *    ScvpReqRes ::= SEQUENCE {
-         *    request  [0] EXPLICIT ContentInfo OPTIONAL,
-         *    response     ContentInfo }
-         *
- * @return the ASN.1 primitive representation. - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - if (request != null) - { - v.Add(new DerTaggedObject(true, 0, request)); - } - - v.Add(response); - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/SignedData.cs b/bc-sharp-crypto/src/asn1/cms/SignedData.cs deleted file mode 100644 index 957b81c..0000000 --- a/bc-sharp-crypto/src/asn1/cms/SignedData.cs +++ /dev/null @@ -1,287 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cms -{ - /** - * a signed data object. - */ - public class SignedData - : Asn1Encodable - { - private static readonly DerInteger Version1 = new DerInteger(1); - private static readonly DerInteger Version3 = new DerInteger(3); - private static readonly DerInteger Version4 = new DerInteger(4); - private static readonly DerInteger Version5 = new DerInteger(5); - - private readonly DerInteger version; - private readonly Asn1Set digestAlgorithms; - private readonly ContentInfo contentInfo; - private readonly Asn1Set certificates; - private readonly Asn1Set crls; - private readonly Asn1Set signerInfos; - private readonly bool certsBer; - private readonly bool crlsBer; - - public static SignedData GetInstance( - object obj) - { - if (obj is SignedData) - return (SignedData) obj; - - if (obj is Asn1Sequence) - return new SignedData((Asn1Sequence) obj); - - throw new ArgumentException("Unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public SignedData( - Asn1Set digestAlgorithms, - ContentInfo contentInfo, - Asn1Set certificates, - Asn1Set crls, - Asn1Set signerInfos) - { - this.version = CalculateVersion(contentInfo.ContentType, certificates, crls, signerInfos); - this.digestAlgorithms = digestAlgorithms; - this.contentInfo = contentInfo; - this.certificates = certificates; - this.crls = crls; - this.signerInfos = signerInfos; - this.crlsBer = crls is BerSet; - this.certsBer = certificates is BerSet; - } - - // RFC3852, section 5.1: - // IF ((certificates is present) AND - // (any certificates with a type of other are present)) OR - // ((crls is present) AND - // (any crls with a type of other are present)) - // THEN version MUST be 5 - // ELSE - // IF (certificates is present) AND - // (any version 2 attribute certificates are present) - // THEN version MUST be 4 - // ELSE - // IF ((certificates is present) AND - // (any version 1 attribute certificates are present)) OR - // (any SignerInfo structures are version 3) OR - // (encapContentInfo eContentType is other than id-data) - // THEN version MUST be 3 - // ELSE version MUST be 1 - // - private DerInteger CalculateVersion( - DerObjectIdentifier contentOid, - Asn1Set certs, - Asn1Set crls, - Asn1Set signerInfs) - { - bool otherCert = false; - bool otherCrl = false; - bool attrCertV1Found = false; - bool attrCertV2Found = false; - - if (certs != null) - { - foreach (object obj in certs) - { - if (obj is Asn1TaggedObject) - { - Asn1TaggedObject tagged = (Asn1TaggedObject)obj; - - if (tagged.TagNo == 1) - { - attrCertV1Found = true; - } - else if (tagged.TagNo == 2) - { - attrCertV2Found = true; - } - else if (tagged.TagNo == 3) - { - otherCert = true; - break; - } - } - } - } - - if (otherCert) - { - return Version5; - } - - if (crls != null) - { - foreach (object obj in crls) - { - if (obj is Asn1TaggedObject) - { - otherCrl = true; - break; - } - } - } - - if (otherCrl) - { - return Version5; - } - - if (attrCertV2Found) - { - return Version4; - } - - if (attrCertV1Found || !CmsObjectIdentifiers.Data.Equals(contentOid) || CheckForVersion3(signerInfs)) - { - return Version3; - } - - return Version1; - } - - private bool CheckForVersion3( - Asn1Set signerInfs) - { - foreach (object obj in signerInfs) - { - SignerInfo s = SignerInfo.GetInstance(obj); - - if (s.Version.Value.IntValue == 3) - { - return true; - } - } - - return false; - } - - private SignedData( - Asn1Sequence seq) - { - IEnumerator e = seq.GetEnumerator(); - - e.MoveNext(); - version = (DerInteger)e.Current; - - e.MoveNext(); - digestAlgorithms = ((Asn1Set)e.Current); - - e.MoveNext(); - contentInfo = ContentInfo.GetInstance(e.Current); - - while (e.MoveNext()) - { - Asn1Object o = (Asn1Object)e.Current; - - // - // an interesting feature of SignedData is that there appear - // to be varying implementations... - // for the moment we ignore anything which doesn't fit. - // - if (o is Asn1TaggedObject) - { - Asn1TaggedObject tagged = (Asn1TaggedObject)o; - - switch (tagged.TagNo) - { - case 0: - certsBer = tagged is BerTaggedObject; - certificates = Asn1Set.GetInstance(tagged, false); - break; - case 1: - crlsBer = tagged is BerTaggedObject; - crls = Asn1Set.GetInstance(tagged, false); - break; - default: - throw new ArgumentException("unknown tag value " + tagged.TagNo); - } - } - else - { - signerInfos = (Asn1Set) o; - } - } - } - - public DerInteger Version - { - get { return version; } - } - - public Asn1Set DigestAlgorithms - { - get { return digestAlgorithms; } - } - - public ContentInfo EncapContentInfo - { - get { return contentInfo; } - } - - public Asn1Set Certificates - { - get { return certificates; } - } - - public Asn1Set CRLs - { - get { return crls; } - } - - public Asn1Set SignerInfos - { - get { return signerInfos; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * SignedData ::= Sequence {
-         *     version CMSVersion,
-         *     digestAlgorithms DigestAlgorithmIdentifiers,
-         *     encapContentInfo EncapsulatedContentInfo,
-         *     certificates [0] IMPLICIT CertificateSet OPTIONAL,
-         *     crls [1] IMPLICIT CertificateRevocationLists OPTIONAL,
-         *     signerInfos SignerInfos
-         *   }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector( - version, digestAlgorithms, contentInfo); - - if (certificates != null) - { - if (certsBer) - { - v.Add(new BerTaggedObject(false, 0, certificates)); - } - else - { - v.Add(new DerTaggedObject(false, 0, certificates)); - } - } - - if (crls != null) - { - if (crlsBer) - { - v.Add(new BerTaggedObject(false, 1, crls)); - } - else - { - v.Add(new DerTaggedObject(false, 1, crls)); - } - } - - v.Add(signerInfos); - - return new BerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/SignedDataParser.cs b/bc-sharp-crypto/src/asn1/cms/SignedDataParser.cs deleted file mode 100644 index cd07f40..0000000 --- a/bc-sharp-crypto/src/asn1/cms/SignedDataParser.cs +++ /dev/null @@ -1,114 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cms -{ - /** - * 
-	* SignedData ::= SEQUENCE {
-	*     version CMSVersion,
-	*     digestAlgorithms DigestAlgorithmIdentifiers,
-	*     encapContentInfo EncapsulatedContentInfo,
-	*     certificates [0] IMPLICIT CertificateSet OPTIONAL,
-	*     crls [1] IMPLICIT CertificateRevocationLists OPTIONAL,
-	*     signerInfos SignerInfos
-	*   }
-	*
- */ - public class SignedDataParser - { - private Asn1SequenceParser _seq; - private DerInteger _version; - private object _nextObject; - private bool _certsCalled; - private bool _crlsCalled; - - public static SignedDataParser GetInstance( - object o) - { - if (o is Asn1Sequence) - return new SignedDataParser(((Asn1Sequence)o).Parser); - - if (o is Asn1SequenceParser) - return new SignedDataParser((Asn1SequenceParser)o); - - throw new IOException("unknown object encountered: " + Platform.GetTypeName(o)); - } - - public SignedDataParser( - Asn1SequenceParser seq) - { - this._seq = seq; - this._version = (DerInteger)seq.ReadObject(); - } - - public DerInteger Version - { - get { return _version; } - } - - public Asn1SetParser GetDigestAlgorithms() - { - return (Asn1SetParser)_seq.ReadObject(); - } - - public ContentInfoParser GetEncapContentInfo() - { - return new ContentInfoParser((Asn1SequenceParser)_seq.ReadObject()); - } - - public Asn1SetParser GetCertificates() - { - _certsCalled = true; - _nextObject = _seq.ReadObject(); - - if (_nextObject is Asn1TaggedObjectParser && ((Asn1TaggedObjectParser)_nextObject).TagNo == 0) - { - Asn1SetParser certs = (Asn1SetParser)((Asn1TaggedObjectParser)_nextObject).GetObjectParser(Asn1Tags.Set, false); - _nextObject = null; - - return certs; - } - - return null; - } - - public Asn1SetParser GetCrls() - { - if (!_certsCalled) - throw new IOException("GetCerts() has not been called."); - - _crlsCalled = true; - - if (_nextObject == null) - { - _nextObject = _seq.ReadObject(); - } - - if (_nextObject is Asn1TaggedObjectParser && ((Asn1TaggedObjectParser)_nextObject).TagNo == 1) - { - Asn1SetParser crls = (Asn1SetParser)((Asn1TaggedObjectParser)_nextObject).GetObjectParser(Asn1Tags.Set, false); - _nextObject = null; - - return crls; - } - - return null; - } - - public Asn1SetParser GetSignerInfos() - { - if (!_certsCalled || !_crlsCalled) - throw new IOException("GetCerts() and/or GetCrls() has not been called."); - - if (_nextObject == null) - { - _nextObject = _seq.ReadObject(); - } - - return (Asn1SetParser)_nextObject; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/SignerIdentifier.cs b/bc-sharp-crypto/src/asn1/cms/SignerIdentifier.cs deleted file mode 100644 index 195ab74..0000000 --- a/bc-sharp-crypto/src/asn1/cms/SignerIdentifier.cs +++ /dev/null @@ -1,89 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class SignerIdentifier - : Asn1Encodable, IAsn1Choice - { - private Asn1Encodable id; - - public SignerIdentifier( - IssuerAndSerialNumber id) - { - this.id = id; - } - - public SignerIdentifier( - Asn1OctetString id) - { - this.id = new DerTaggedObject(false, 0, id); - } - - public SignerIdentifier( - Asn1Object id) - { - this.id = id; - } - - /** - * return a SignerIdentifier object from the given object. - * - * @param o the object we want converted. - * @exception ArgumentException if the object cannot be converted. - */ - public static SignerIdentifier GetInstance( - object o) - { - if (o == null || o is SignerIdentifier) - return (SignerIdentifier) o; - - if (o is IssuerAndSerialNumber) - return new SignerIdentifier((IssuerAndSerialNumber) o); - - if (o is Asn1OctetString) - return new SignerIdentifier((Asn1OctetString) o); - - if (o is Asn1Object) - return new SignerIdentifier((Asn1Object) o); - - throw new ArgumentException( - "Illegal object in SignerIdentifier: " + Platform.GetTypeName(o)); - } - - public bool IsTagged - { - get { return (id is Asn1TaggedObject); } - } - - public Asn1Encodable ID - { - get - { - if (id is Asn1TaggedObject) - { - return Asn1OctetString.GetInstance((Asn1TaggedObject)id, false); - } - - return id; - } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * SignerIdentifier ::= CHOICE {
-         *     issuerAndSerialNumber IssuerAndSerialNumber,
-         *     subjectKeyIdentifier [0] SubjectKeyIdentifier
-         * }
-         *
-         * SubjectKeyIdentifier ::= OCTET STRING
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return id.ToAsn1Object(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/SignerInfo.cs b/bc-sharp-crypto/src/asn1/cms/SignerInfo.cs deleted file mode 100644 index b6bd319..0000000 --- a/bc-sharp-crypto/src/asn1/cms/SignerInfo.cs +++ /dev/null @@ -1,185 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class SignerInfo - : Asn1Encodable - { - private DerInteger version; - private SignerIdentifier sid; - private AlgorithmIdentifier digAlgorithm; - private Asn1Set authenticatedAttributes; - private AlgorithmIdentifier digEncryptionAlgorithm; - private Asn1OctetString encryptedDigest; - private Asn1Set unauthenticatedAttributes; - - public static SignerInfo GetInstance( - object obj) - { - if (obj == null || obj is SignerInfo) - return (SignerInfo) obj; - - if (obj is Asn1Sequence) - return new SignerInfo((Asn1Sequence) obj); - - throw new ArgumentException("Unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public SignerInfo( - SignerIdentifier sid, - AlgorithmIdentifier digAlgorithm, - Asn1Set authenticatedAttributes, - AlgorithmIdentifier digEncryptionAlgorithm, - Asn1OctetString encryptedDigest, - Asn1Set unauthenticatedAttributes) - { - this.version = new DerInteger(sid.IsTagged ? 3 : 1); - this.sid = sid; - this.digAlgorithm = digAlgorithm; - this.authenticatedAttributes = authenticatedAttributes; - this.digEncryptionAlgorithm = digEncryptionAlgorithm; - this.encryptedDigest = encryptedDigest; - this.unauthenticatedAttributes = unauthenticatedAttributes; - } - - public SignerInfo( - SignerIdentifier sid, - AlgorithmIdentifier digAlgorithm, - Attributes authenticatedAttributes, - AlgorithmIdentifier digEncryptionAlgorithm, - Asn1OctetString encryptedDigest, - Attributes unauthenticatedAttributes) - { - this.version = new DerInteger(sid.IsTagged ? 3 : 1); - this.sid = sid; - this.digAlgorithm = digAlgorithm; - this.authenticatedAttributes = Asn1Set.GetInstance(authenticatedAttributes); - this.digEncryptionAlgorithm = digEncryptionAlgorithm; - this.encryptedDigest = encryptedDigest; - this.unauthenticatedAttributes = Asn1Set.GetInstance(unauthenticatedAttributes); - } - - [Obsolete("Use 'GetInstance' instead")] - public SignerInfo( - Asn1Sequence seq) - { - IEnumerator e = seq.GetEnumerator(); - - e.MoveNext(); - version = (DerInteger) e.Current; - - e.MoveNext(); - sid = SignerIdentifier.GetInstance(e.Current); - - e.MoveNext(); - digAlgorithm = AlgorithmIdentifier.GetInstance(e.Current); - - e.MoveNext(); - object obj = e.Current; - - if (obj is Asn1TaggedObject) - { - authenticatedAttributes = Asn1Set.GetInstance((Asn1TaggedObject) obj, false); - - e.MoveNext(); - digEncryptionAlgorithm = AlgorithmIdentifier.GetInstance(e.Current); - } - else - { - authenticatedAttributes = null; - digEncryptionAlgorithm = AlgorithmIdentifier.GetInstance(obj); - } - - e.MoveNext(); - encryptedDigest = DerOctetString.GetInstance(e.Current); - - if (e.MoveNext()) - { - unauthenticatedAttributes = Asn1Set.GetInstance((Asn1TaggedObject) e.Current, false); - } - else - { - unauthenticatedAttributes = null; - } - } - - public DerInteger Version - { - get { return version; } - } - - public SignerIdentifier SignerID - { - get { return sid; } - } - - public Asn1Set AuthenticatedAttributes - { - get { return authenticatedAttributes; } - } - - public AlgorithmIdentifier DigestAlgorithm - { - get { return digAlgorithm; } - } - - public Asn1OctetString EncryptedDigest - { - get { return encryptedDigest; } - } - - public AlgorithmIdentifier DigestEncryptionAlgorithm - { - get { return digEncryptionAlgorithm; } - } - - public Asn1Set UnauthenticatedAttributes - { - get { return unauthenticatedAttributes; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         *  SignerInfo ::= Sequence {
-         *      version Version,
-         *      SignerIdentifier sid,
-         *      digestAlgorithm DigestAlgorithmIdentifier,
-         *      authenticatedAttributes [0] IMPLICIT Attributes OPTIONAL,
-         *      digestEncryptionAlgorithm DigestEncryptionAlgorithmIdentifier,
-         *      encryptedDigest EncryptedDigest,
-         *      unauthenticatedAttributes [1] IMPLICIT Attributes OPTIONAL
-         *  }
-         *
-         *  EncryptedDigest ::= OCTET STRING
-         *
-         *  DigestAlgorithmIdentifier ::= AlgorithmIdentifier
-         *
-         *  DigestEncryptionAlgorithmIdentifier ::= AlgorithmIdentifier
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector( - version, sid, digAlgorithm); - - if (authenticatedAttributes != null) - { - v.Add(new DerTaggedObject(false, 0, authenticatedAttributes)); - } - - v.Add(digEncryptionAlgorithm, encryptedDigest); - - if (unauthenticatedAttributes != null) - { - v.Add(new DerTaggedObject(false, 1, unauthenticatedAttributes)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/Time.cs b/bc-sharp-crypto/src/asn1/cms/Time.cs deleted file mode 100644 index 52fb4f9..0000000 --- a/bc-sharp-crypto/src/asn1/cms/Time.cs +++ /dev/null @@ -1,115 +0,0 @@ -using System; -using System.Globalization; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class Time - : Asn1Encodable, IAsn1Choice - { - private readonly Asn1Object time; - - public static Time GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(obj.GetObject()); - } - - public Time( - Asn1Object time) - { - if (time == null) - throw new ArgumentNullException("time"); - if (!(time is DerUtcTime) && !(time is DerGeneralizedTime)) - throw new ArgumentException("unknown object passed to Time"); - - this.time = time; - } - - /** - * creates a time object from a given date - if the date is between 1950 - * and 2049 a UTCTime object is Generated, otherwise a GeneralizedTime - * is used. - */ - public Time( - DateTime date) - { - string d = date.ToString("yyyyMMddHHmmss", CultureInfo.InvariantCulture) + "Z"; - - int year = int.Parse(d.Substring(0, 4)); - - if (year < 1950 || year > 2049) - { - time = new DerGeneralizedTime(d); - } - else - { - time = new DerUtcTime(d.Substring(2)); - } - } - - public static Time GetInstance( - object obj) - { - if (obj == null || obj is Time) - return (Time)obj; - if (obj is DerUtcTime) - return new Time((DerUtcTime)obj); - if (obj is DerGeneralizedTime) - return new Time((DerGeneralizedTime)obj); - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public string TimeString - { - get - { - if (time is DerUtcTime) - { - return ((DerUtcTime)time).AdjustedTimeString; - } - else - { - return ((DerGeneralizedTime)time).GetTime(); - } - } - } - - public DateTime Date - { - get - { - try - { - if (time is DerUtcTime) - { - return ((DerUtcTime)time).ToAdjustedDateTime(); - } - - return ((DerGeneralizedTime)time).ToDateTime(); - } - catch (FormatException e) - { - // this should never happen - throw new InvalidOperationException("invalid date string: " + e.Message); - } - } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * Time ::= CHOICE {
-         *             utcTime        UTCTime,
-         *             generalTime    GeneralizedTime }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return time; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/TimeStampAndCRL.cs b/bc-sharp-crypto/src/asn1/cms/TimeStampAndCRL.cs deleted file mode 100644 index 4cb5f2a..0000000 --- a/bc-sharp-crypto/src/asn1/cms/TimeStampAndCRL.cs +++ /dev/null @@ -1,62 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class TimeStampAndCrl - : Asn1Encodable - { - private ContentInfo timeStamp; - private X509.CertificateList crl; - - public TimeStampAndCrl(ContentInfo timeStamp) - { - this.timeStamp = timeStamp; - } - - private TimeStampAndCrl(Asn1Sequence seq) - { - this.timeStamp = ContentInfo.GetInstance(seq[0]); - if (seq.Count == 2) - { - this.crl = X509.CertificateList.GetInstance(seq[1]); - } - } - - public static TimeStampAndCrl GetInstance(object obj) - { - if (obj is TimeStampAndCrl) - return (TimeStampAndCrl)obj; - - if (obj != null) - return new TimeStampAndCrl(Asn1Sequence.GetInstance(obj)); - - return null; - } - - public virtual ContentInfo TimeStampToken - { - get { return this.timeStamp; } - } - - public virtual X509.CertificateList Crl - { - get { return this.crl; } - } - - /** - * 
-		 * TimeStampAndCRL ::= SEQUENCE {
-		 *     timeStamp   TimeStampToken,          -- according to RFC 3161
-		 *     crl         CertificateList OPTIONAL -- according to RFC 5280
-		 *  }
-		 *
- * @return - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(timeStamp); - v.AddOptional(crl); - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/TimeStampTokenEvidence.cs b/bc-sharp-crypto/src/asn1/cms/TimeStampTokenEvidence.cs deleted file mode 100644 index 8625d05..0000000 --- a/bc-sharp-crypto/src/asn1/cms/TimeStampTokenEvidence.cs +++ /dev/null @@ -1,65 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class TimeStampTokenEvidence - : Asn1Encodable - { - private TimeStampAndCrl[] timeStampAndCrls; - - public TimeStampTokenEvidence(TimeStampAndCrl[] timeStampAndCrls) - { - this.timeStampAndCrls = timeStampAndCrls; - } - - public TimeStampTokenEvidence(TimeStampAndCrl timeStampAndCrl) - { - this.timeStampAndCrls = new TimeStampAndCrl[]{ timeStampAndCrl }; - } - - private TimeStampTokenEvidence(Asn1Sequence seq) - { - this.timeStampAndCrls = new TimeStampAndCrl[seq.Count]; - - int count = 0; - - foreach (Asn1Encodable ae in seq) - { - this.timeStampAndCrls[count++] = TimeStampAndCrl.GetInstance(ae.ToAsn1Object()); - } - } - - public static TimeStampTokenEvidence GetInstance(Asn1TaggedObject tagged, bool isExplicit) - { - return GetInstance(Asn1Sequence.GetInstance(tagged, isExplicit)); - } - - public static TimeStampTokenEvidence GetInstance(object obj) - { - if (obj is TimeStampTokenEvidence) - return (TimeStampTokenEvidence)obj; - - if (obj != null) - return new TimeStampTokenEvidence(Asn1Sequence.GetInstance(obj)); - - return null; - } - - public virtual TimeStampAndCrl[] ToTimeStampAndCrlArray() - { - return (TimeStampAndCrl[])timeStampAndCrls.Clone(); - } - - /** - * 
-		 * TimeStampTokenEvidence ::=
-		 *    SEQUENCE SIZE(1..MAX) OF TimeStampAndCrl
-		 *
- * @return - */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(timeStampAndCrls); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/TimeStampedData.cs b/bc-sharp-crypto/src/asn1/cms/TimeStampedData.cs deleted file mode 100644 index 15448a9..0000000 --- a/bc-sharp-crypto/src/asn1/cms/TimeStampedData.cs +++ /dev/null @@ -1,95 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class TimeStampedData - : Asn1Encodable - { - private DerInteger version; - private DerIA5String dataUri; - private MetaData metaData; - private Asn1OctetString content; - private Evidence temporalEvidence; - - public TimeStampedData(DerIA5String dataUri, MetaData metaData, Asn1OctetString content, - Evidence temporalEvidence) - { - this.version = new DerInteger(1); - this.dataUri = dataUri; - this.metaData = metaData; - this.content = content; - this.temporalEvidence = temporalEvidence; - } - - private TimeStampedData(Asn1Sequence seq) - { - this.version = DerInteger.GetInstance(seq[0]); - - int index = 1; - if (seq[index] is DerIA5String) - { - this.dataUri = DerIA5String.GetInstance(seq[index++]); - } - if (seq[index] is MetaData || seq[index] is Asn1Sequence) - { - this.metaData = MetaData.GetInstance(seq[index++]); - } - if (seq[index] is Asn1OctetString) - { - this.content = Asn1OctetString.GetInstance(seq[index++]); - } - this.temporalEvidence = Evidence.GetInstance(seq[index]); - } - - public static TimeStampedData GetInstance(object obj) - { - if (obj is TimeStampedData) - return (TimeStampedData)obj; - - if (obj != null) - return new TimeStampedData(Asn1Sequence.GetInstance(obj)); - - return null; - } - - public virtual DerIA5String DataUri - { - get { return dataUri; } - } - - public MetaData MetaData - { - get { return metaData; } - } - - public Asn1OctetString Content - { - get { return content; } - } - - public Evidence TemporalEvidence - { - get { return temporalEvidence; } - } - - /** - * 
-		 * TimeStampedData ::= SEQUENCE {
-		 *   version              INTEGER { v1(1) },
-		 *   dataUri              IA5String OPTIONAL,
-		 *   metaData             MetaData OPTIONAL,
-		 *   content              OCTET STRING OPTIONAL,
-		 *   temporalEvidence     Evidence
-		 * }
-		 *
- * @return - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(version); - v.AddOptional(dataUri, metaData, content); - v.Add(temporalEvidence); - return new BerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/TimeStampedDataParser.cs b/bc-sharp-crypto/src/asn1/cms/TimeStampedDataParser.cs deleted file mode 100644 index 90307bf..0000000 --- a/bc-sharp-crypto/src/asn1/cms/TimeStampedDataParser.cs +++ /dev/null @@ -1,76 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.Cms -{ - public class TimeStampedDataParser - { - private DerInteger version; - private DerIA5String dataUri; - private MetaData metaData; - private Asn1OctetStringParser content; - private Evidence temporalEvidence; - private Asn1SequenceParser parser; - - private TimeStampedDataParser(Asn1SequenceParser parser) - { - this.parser = parser; - this.version = DerInteger.GetInstance(parser.ReadObject()); - - Asn1Object obj = parser.ReadObject().ToAsn1Object(); - - if (obj is DerIA5String) - { - this.dataUri = DerIA5String.GetInstance(obj); - obj = parser.ReadObject().ToAsn1Object(); - } - - if (//obj is MetaData || - obj is Asn1SequenceParser) - { - this.metaData = MetaData.GetInstance(obj.ToAsn1Object()); - obj = parser.ReadObject().ToAsn1Object(); - } - - if (obj is Asn1OctetStringParser) - { - this.content = (Asn1OctetStringParser)obj; - } - } - - public static TimeStampedDataParser GetInstance(object obj) - { - if (obj is Asn1Sequence) - return new TimeStampedDataParser(((Asn1Sequence)obj).Parser); - - if (obj is Asn1SequenceParser) - return new TimeStampedDataParser((Asn1SequenceParser)obj); - - return null; - } - - public virtual DerIA5String DataUri - { - get { return dataUri; } - } - - public virtual MetaData MetaData - { - get { return metaData; } - } - - public virtual Asn1OctetStringParser Content - { - get { return content; } - } - - public virtual Evidence GetTemporalEvidence() - { - if (temporalEvidence == null) - { - temporalEvidence = Evidence.GetInstance(parser.ReadObject().ToAsn1Object()); - } - - return temporalEvidence; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cms/ecc/MQVuserKeyingMaterial.cs b/bc-sharp-crypto/src/asn1/cms/ecc/MQVuserKeyingMaterial.cs deleted file mode 100644 index dc4ac1a..0000000 --- a/bc-sharp-crypto/src/asn1/cms/ecc/MQVuserKeyingMaterial.cs +++ /dev/null @@ -1,105 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Cms.Ecc -{ - public class MQVuserKeyingMaterial - : Asn1Encodable - { - private OriginatorPublicKey ephemeralPublicKey; - private Asn1OctetString addedukm; - - public MQVuserKeyingMaterial( - OriginatorPublicKey ephemeralPublicKey, - Asn1OctetString addedukm) - { - // TODO Check ephemeralPublicKey not null - - this.ephemeralPublicKey = ephemeralPublicKey; - this.addedukm = addedukm; - } - - private MQVuserKeyingMaterial( - Asn1Sequence seq) - { - // TODO Check seq has either 1 or 2 elements - - this.ephemeralPublicKey = OriginatorPublicKey.GetInstance(seq[0]); - - if (seq.Count > 1) - { - this.addedukm = Asn1OctetString.GetInstance( - (Asn1TaggedObject)seq[1], true); - } - } - - /** - * return an AuthEnvelopedData object from a tagged object. - * - * @param obj the tagged object holding the object we want. - * @param isExplicit true if the object is meant to be explicitly - * tagged false otherwise. - * @throws ArgumentException if the object held by the - * tagged object cannot be converted. - */ - public static MQVuserKeyingMaterial GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - return GetInstance(Asn1Sequence.GetInstance(obj, isExplicit)); - } - - /** - * return an AuthEnvelopedData object from the given object. - * - * @param obj the object we want converted. - * @throws ArgumentException if the object cannot be converted. - */ - public static MQVuserKeyingMaterial GetInstance( - object obj) - { - if (obj == null || obj is MQVuserKeyingMaterial) - { - return (MQVuserKeyingMaterial)obj; - } - - if (obj is Asn1Sequence) - { - return new MQVuserKeyingMaterial((Asn1Sequence)obj); - } - - throw new ArgumentException("Invalid MQVuserKeyingMaterial: " + Platform.GetTypeName(obj)); - } - - public OriginatorPublicKey EphemeralPublicKey - { - get { return ephemeralPublicKey; } - } - - public Asn1OctetString AddedUkm - { - get { return addedukm; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-		* MQVuserKeyingMaterial ::= SEQUENCE {
-		*   ephemeralPublicKey OriginatorPublicKey,
-		*   addedukm [0] EXPLICIT UserKeyingMaterial OPTIONAL  }
-		*
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(ephemeralPublicKey); - - if (addedukm != null) - { - v.Add(new DerTaggedObject(true, 0, addedukm)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/crmf/AttributeTypeAndValue.cs b/bc-sharp-crypto/src/asn1/crmf/AttributeTypeAndValue.cs deleted file mode 100644 index 0a4b5bd..0000000 --- a/bc-sharp-crypto/src/asn1/crmf/AttributeTypeAndValue.cs +++ /dev/null @@ -1,68 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Crmf -{ - public class AttributeTypeAndValue - : Asn1Encodable - { - private readonly DerObjectIdentifier type; - private readonly Asn1Encodable value; - - private AttributeTypeAndValue(Asn1Sequence seq) - { - type = (DerObjectIdentifier)seq[0]; - value = (Asn1Encodable)seq[1]; - } - - public static AttributeTypeAndValue GetInstance(object obj) - { - if (obj is AttributeTypeAndValue) - return (AttributeTypeAndValue)obj; - - if (obj is Asn1Sequence) - return new AttributeTypeAndValue((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public AttributeTypeAndValue( - String oid, - Asn1Encodable value) - : this(new DerObjectIdentifier(oid), value) - { - } - - public AttributeTypeAndValue( - DerObjectIdentifier type, - Asn1Encodable value) - { - this.type = type; - this.value = value; - } - - public virtual DerObjectIdentifier Type - { - get { return type; } - } - - public virtual Asn1Encodable Value - { - get { return value; } - } - - /** - * 
-         * AttributeTypeAndValue ::= SEQUENCE {
-         *           type         OBJECT IDENTIFIER,
-         *           value        ANY DEFINED BY type }
-         *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(type, value); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/crmf/CertId.cs b/bc-sharp-crypto/src/asn1/crmf/CertId.cs deleted file mode 100644 index f0cc946..0000000 --- a/bc-sharp-crypto/src/asn1/crmf/CertId.cs +++ /dev/null @@ -1,59 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Crmf -{ - public class CertId - : Asn1Encodable - { - private readonly GeneralName issuer; - private readonly DerInteger serialNumber; - - private CertId(Asn1Sequence seq) - { - issuer = GeneralName.GetInstance(seq[0]); - serialNumber = DerInteger.GetInstance(seq[1]); - } - - public static CertId GetInstance(object obj) - { - if (obj is CertId) - return (CertId)obj; - - if (obj is Asn1Sequence) - return new CertId((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public static CertId GetInstance(Asn1TaggedObject obj, bool isExplicit) - { - return GetInstance(Asn1Sequence.GetInstance(obj, isExplicit)); - } - - public virtual GeneralName Issuer - { - get { return issuer; } - } - - public virtual DerInteger SerialNumber - { - get { return serialNumber; } - } - - /** - * 
-         * CertId ::= SEQUENCE {
-         *                 issuer           GeneralName,
-         *                 serialNumber     INTEGER }
-         *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(issuer, serialNumber); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/crmf/CertReqMessages.cs b/bc-sharp-crypto/src/asn1/crmf/CertReqMessages.cs deleted file mode 100644 index 422950b..0000000 --- a/bc-sharp-crypto/src/asn1/crmf/CertReqMessages.cs +++ /dev/null @@ -1,54 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Crmf -{ - public class CertReqMessages - : Asn1Encodable - { - private readonly Asn1Sequence content; - - private CertReqMessages(Asn1Sequence seq) - { - content = seq; - } - - public static CertReqMessages GetInstance(object obj) - { - if (obj is CertReqMessages) - return (CertReqMessages)obj; - - if (obj is Asn1Sequence) - return new CertReqMessages((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public CertReqMessages(params CertReqMsg[] msgs) - { - content = new DerSequence(msgs); - } - - public virtual CertReqMsg[] ToCertReqMsgArray() - { - CertReqMsg[] result = new CertReqMsg[content.Count]; - for (int i = 0; i != result.Length; ++i) - { - result[i] = CertReqMsg.GetInstance(content[i]); - } - return result; - } - - /** - * 
-         * CertReqMessages ::= SEQUENCE SIZE (1..MAX) OF CertReqMsg
-         *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - return content; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/crmf/CertReqMsg.cs b/bc-sharp-crypto/src/asn1/crmf/CertReqMsg.cs deleted file mode 100644 index 03ce32d..0000000 --- a/bc-sharp-crypto/src/asn1/crmf/CertReqMsg.cs +++ /dev/null @@ -1,112 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.Crmf -{ - public class CertReqMsg - : Asn1Encodable - { - private readonly CertRequest certReq; - private readonly ProofOfPossession popo; - private readonly Asn1Sequence regInfo; - - private CertReqMsg(Asn1Sequence seq) - { - certReq = CertRequest.GetInstance(seq[0]); - - for (int pos = 1; pos < seq.Count; ++pos) - { - object o = seq[pos]; - - if (o is Asn1TaggedObject || o is ProofOfPossession) - { - popo = ProofOfPossession.GetInstance(o); - } - else - { - regInfo = Asn1Sequence.GetInstance(o); - } - } - } - - public static CertReqMsg GetInstance(object obj) - { - if (obj is CertReqMsg) - return (CertReqMsg)obj; - - if (obj != null) - return new CertReqMsg(Asn1Sequence.GetInstance(obj)); - - return null; - } - - public static CertReqMsg GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - return GetInstance(Asn1Sequence.GetInstance(obj, isExplicit)); - } - - /** - * Creates a new CertReqMsg. - * @param certReq CertRequest - * @param popo may be null - * @param regInfo may be null - */ - public CertReqMsg( - CertRequest certReq, - ProofOfPossession popo, - AttributeTypeAndValue[] regInfo) - { - if (certReq == null) - throw new ArgumentNullException("certReq"); - - this.certReq = certReq; - this.popo = popo; - - if (regInfo != null) - { - this.regInfo = new DerSequence(regInfo); - } - } - - public virtual CertRequest CertReq - { - get { return certReq; } - } - - public virtual ProofOfPossession Popo - { - get { return popo; } - } - - public virtual AttributeTypeAndValue[] GetRegInfo() - { - if (regInfo == null) - return null; - - AttributeTypeAndValue[] results = new AttributeTypeAndValue[regInfo.Count]; - for (int i = 0; i != results.Length; ++i) - { - results[i] = AttributeTypeAndValue.GetInstance(regInfo[i]); - } - return results; - } - - /** - * 
-         * CertReqMsg ::= SEQUENCE {
-         *                    certReq   CertRequest,
-         *                    pop       ProofOfPossession  OPTIONAL,
-         *                    -- content depends upon key type
-         *                    regInfo   SEQUENCE SIZE(1..MAX) OF AttributeTypeAndValue OPTIONAL }
-         *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(certReq); - v.AddOptional(popo, regInfo); - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/crmf/CertRequest.cs b/bc-sharp-crypto/src/asn1/crmf/CertRequest.cs deleted file mode 100644 index 625a9b5..0000000 --- a/bc-sharp-crypto/src/asn1/crmf/CertRequest.cs +++ /dev/null @@ -1,82 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.Crmf -{ - public class CertRequest - : Asn1Encodable - { - private readonly DerInteger certReqId; - private readonly CertTemplate certTemplate; - private readonly Controls controls; - - private CertRequest(Asn1Sequence seq) - { - certReqId = DerInteger.GetInstance(seq[0]); - certTemplate = CertTemplate.GetInstance(seq[1]); - if (seq.Count > 2) - { - controls = Controls.GetInstance(seq[2]); - } - } - - public static CertRequest GetInstance(object obj) - { - if (obj is CertRequest) - return (CertRequest)obj; - - if (obj != null) - return new CertRequest(Asn1Sequence.GetInstance(obj)); - - return null; - } - - public CertRequest( - int certReqId, - CertTemplate certTemplate, - Controls controls) - : this(new DerInteger(certReqId), certTemplate, controls) - { - } - - public CertRequest( - DerInteger certReqId, - CertTemplate certTemplate, - Controls controls) - { - this.certReqId = certReqId; - this.certTemplate = certTemplate; - this.controls = controls; - } - - public virtual DerInteger CertReqID - { - get { return certReqId; } - } - - public virtual CertTemplate CertTemplate - { - get { return certTemplate; } - } - - public virtual Controls Controls - { - get { return controls; } - } - - /** - * 
-         * CertRequest ::= SEQUENCE {
-         *                      certReqId     INTEGER,          -- ID for matching request and reply
-         *                      certTemplate  CertTemplate,  -- Selected fields of cert to be issued
-         *                      controls      Controls OPTIONAL }   -- Attributes affecting issuance
-         *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(certReqId, certTemplate); - v.AddOptional(controls); - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/crmf/CertTemplate.cs b/bc-sharp-crypto/src/asn1/crmf/CertTemplate.cs deleted file mode 100644 index 3de9f1d..0000000 --- a/bc-sharp-crypto/src/asn1/crmf/CertTemplate.cs +++ /dev/null @@ -1,149 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; - -namespace Org.BouncyCastle.Asn1.Crmf -{ - public class CertTemplate - : Asn1Encodable - { - private readonly Asn1Sequence seq; - - private readonly DerInteger version; - private readonly DerInteger serialNumber; - private readonly AlgorithmIdentifier signingAlg; - private readonly X509Name issuer; - private readonly OptionalValidity validity; - private readonly X509Name subject; - private readonly SubjectPublicKeyInfo publicKey; - private readonly DerBitString issuerUID; - private readonly DerBitString subjectUID; - private readonly X509Extensions extensions; - - private CertTemplate(Asn1Sequence seq) - { - this.seq = seq; - - foreach (Asn1TaggedObject tObj in seq) - { - switch (tObj.TagNo) - { - case 0: - version = DerInteger.GetInstance(tObj, false); - break; - case 1: - serialNumber = DerInteger.GetInstance(tObj, false); - break; - case 2: - signingAlg = AlgorithmIdentifier.GetInstance(tObj, false); - break; - case 3: - issuer = X509Name.GetInstance(tObj, true); // CHOICE - break; - case 4: - validity = OptionalValidity.GetInstance(Asn1Sequence.GetInstance(tObj, false)); - break; - case 5: - subject = X509Name.GetInstance(tObj, true); // CHOICE - break; - case 6: - publicKey = SubjectPublicKeyInfo.GetInstance(tObj, false); - break; - case 7: - issuerUID = DerBitString.GetInstance(tObj, false); - break; - case 8: - subjectUID = DerBitString.GetInstance(tObj, false); - break; - case 9: - extensions = X509Extensions.GetInstance(tObj, false); - break; - default: - throw new ArgumentException("unknown tag: " + tObj.TagNo, "seq"); - } - } - } - - public static CertTemplate GetInstance(object obj) - { - if (obj is CertTemplate) - return (CertTemplate)obj; - - if (obj != null) - return new CertTemplate(Asn1Sequence.GetInstance(obj)); - - return null; - } - - public virtual int Version - { - get { return version.Value.IntValue; } - } - - public virtual DerInteger SerialNumber - { - get { return serialNumber; } - } - - public virtual AlgorithmIdentifier SigningAlg - { - get { return signingAlg; } - } - - public virtual X509Name Issuer - { - get { return issuer; } - } - - public virtual OptionalValidity Validity - { - get { return validity; } - } - - public virtual X509Name Subject - { - get { return subject; } - } - - public virtual SubjectPublicKeyInfo PublicKey - { - get { return publicKey; } - } - - public virtual DerBitString IssuerUID - { - get { return issuerUID; } - } - - public virtual DerBitString SubjectUID - { - get { return subjectUID; } - } - - public virtual X509Extensions Extensions - { - get { return extensions; } - } - - /** - * 
-         *  CertTemplate ::= SEQUENCE {
-         *      version      [0] Version               OPTIONAL,
-         *      serialNumber [1] INTEGER               OPTIONAL,
-         *      signingAlg   [2] AlgorithmIdentifier   OPTIONAL,
-         *      issuer       [3] Name                  OPTIONAL,
-         *      validity     [4] OptionalValidity      OPTIONAL,
-         *      subject      [5] Name                  OPTIONAL,
-         *      publicKey    [6] SubjectPublicKeyInfo  OPTIONAL,
-         *      issuerUID    [7] UniqueIdentifier      OPTIONAL,
-         *      subjectUID   [8] UniqueIdentifier      OPTIONAL,
-         *      extensions   [9] Extensions            OPTIONAL }
-         *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - return seq; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/crmf/CertTemplateBuilder.cs b/bc-sharp-crypto/src/asn1/crmf/CertTemplateBuilder.cs deleted file mode 100644 index 51c73c4..0000000 --- a/bc-sharp-crypto/src/asn1/crmf/CertTemplateBuilder.cs +++ /dev/null @@ -1,125 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; - -namespace Org.BouncyCastle.Asn1.Crmf -{ - public class CertTemplateBuilder - { - private DerInteger version; - private DerInteger serialNumber; - private AlgorithmIdentifier signingAlg; - private X509Name issuer; - private OptionalValidity validity; - private X509Name subject; - private SubjectPublicKeyInfo publicKey; - private DerBitString issuerUID; - private DerBitString subjectUID; - private X509Extensions extensions; - - /** Sets the X.509 version. Note: for X509v3, use 2 here. */ - public virtual CertTemplateBuilder SetVersion(int ver) - { - version = new DerInteger(ver); - return this; - } - - public virtual CertTemplateBuilder SetSerialNumber(DerInteger ser) - { - serialNumber = ser; - return this; - } - - public virtual CertTemplateBuilder SetSigningAlg(AlgorithmIdentifier aid) - { - signingAlg = aid; - return this; - } - - public virtual CertTemplateBuilder SetIssuer(X509Name name) - { - issuer = name; - return this; - } - - public virtual CertTemplateBuilder SetValidity(OptionalValidity v) - { - validity = v; - return this; - } - - public virtual CertTemplateBuilder SetSubject(X509Name name) - { - subject = name; - return this; - } - - public virtual CertTemplateBuilder SetPublicKey(SubjectPublicKeyInfo spki) - { - publicKey = spki; - return this; - } - - /** Sets the issuer unique ID (deprecated in X.509v3) */ - public virtual CertTemplateBuilder SetIssuerUID(DerBitString uid) - { - issuerUID = uid; - return this; - } - - /** Sets the subject unique ID (deprecated in X.509v3) */ - public virtual CertTemplateBuilder SetSubjectUID(DerBitString uid) - { - subjectUID = uid; - return this; - } - - public virtual CertTemplateBuilder SetExtensions(X509Extensions extens) - { - extensions = extens; - return this; - } - - /** - * 
-         *  CertTemplate ::= SEQUENCE {
-         *      version      [0] Version               OPTIONAL,
-         *      serialNumber [1] INTEGER               OPTIONAL,
-         *      signingAlg   [2] AlgorithmIdentifier   OPTIONAL,
-         *      issuer       [3] Name                  OPTIONAL,
-         *      validity     [4] OptionalValidity      OPTIONAL,
-         *      subject      [5] Name                  OPTIONAL,
-         *      publicKey    [6] SubjectPublicKeyInfo  OPTIONAL,
-         *      issuerUID    [7] UniqueIdentifier      OPTIONAL,
-         *      subjectUID   [8] UniqueIdentifier      OPTIONAL,
-         *      extensions   [9] Extensions            OPTIONAL }
-         *
- * @return a basic ASN.1 object representation. - */ - public virtual CertTemplate Build() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - AddOptional(v, 0, false, version); - AddOptional(v, 1, false, serialNumber); - AddOptional(v, 2, false, signingAlg); - AddOptional(v, 3, true, issuer); // CHOICE - AddOptional(v, 4, false, validity); - AddOptional(v, 5, true, subject); // CHOICE - AddOptional(v, 6, false, publicKey); - AddOptional(v, 7, false, issuerUID); - AddOptional(v, 8, false, subjectUID); - AddOptional(v, 9, false, extensions); - - return CertTemplate.GetInstance(new DerSequence(v)); - } - - private void AddOptional(Asn1EncodableVector v, int tagNo, bool isExplicit, Asn1Encodable obj) - { - if (obj != null) - { - v.Add(new DerTaggedObject(isExplicit, tagNo, obj)); - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/crmf/Controls.cs b/bc-sharp-crypto/src/asn1/crmf/Controls.cs deleted file mode 100644 index e8b9f3d..0000000 --- a/bc-sharp-crypto/src/asn1/crmf/Controls.cs +++ /dev/null @@ -1,54 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Crmf -{ - public class Controls - : Asn1Encodable - { - private readonly Asn1Sequence content; - - private Controls(Asn1Sequence seq) - { - content = seq; - } - - public static Controls GetInstance(object obj) - { - if (obj is Controls) - return (Controls)obj; - - if (obj is Asn1Sequence) - return new Controls((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public Controls(params AttributeTypeAndValue[] atvs) - { - content = new DerSequence(atvs); - } - - public virtual AttributeTypeAndValue[] ToAttributeTypeAndValueArray() - { - AttributeTypeAndValue[] result = new AttributeTypeAndValue[content.Count]; - for (int i = 0; i != result.Length; ++i) - { - result[i] = AttributeTypeAndValue.GetInstance(content[i]); - } - return result; - } - - /** - * 
-         * Controls  ::= SEQUENCE SIZE(1..MAX) OF AttributeTypeAndValue
-         *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - return content; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/crmf/CrmfObjectIdentifiers.cs b/bc-sharp-crypto/src/asn1/crmf/CrmfObjectIdentifiers.cs deleted file mode 100644 index eaa1f7b..0000000 --- a/bc-sharp-crypto/src/asn1/crmf/CrmfObjectIdentifiers.cs +++ /dev/null @@ -1,23 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.Pkcs; - -namespace Org.BouncyCastle.Asn1.Crmf -{ - public abstract class CrmfObjectIdentifiers - { - public static readonly DerObjectIdentifier id_pkix = new DerObjectIdentifier("1.3.6.1.5.5.7"); - - // arc for Internet X.509 PKI protocols and their components - - public static readonly DerObjectIdentifier id_pkip = id_pkix.Branch("5"); - - public static readonly DerObjectIdentifier id_regCtrl = id_pkip.Branch("1"); - public static readonly DerObjectIdentifier id_regCtrl_regToken = id_regCtrl.Branch("1"); - public static readonly DerObjectIdentifier id_regCtrl_authenticator = id_regCtrl.Branch("2"); - public static readonly DerObjectIdentifier id_regCtrl_pkiPublicationInfo = id_regCtrl.Branch("3"); - public static readonly DerObjectIdentifier id_regCtrl_pkiArchiveOptions = id_regCtrl.Branch("4"); - - public static readonly DerObjectIdentifier id_ct_encKeyWithID = new DerObjectIdentifier(PkcsObjectIdentifiers.IdCT + ".21"); - } -} diff --git a/bc-sharp-crypto/src/asn1/crmf/EncKeyWithID.cs b/bc-sharp-crypto/src/asn1/crmf/EncKeyWithID.cs deleted file mode 100644 index 6de56fa..0000000 --- a/bc-sharp-crypto/src/asn1/crmf/EncKeyWithID.cs +++ /dev/null @@ -1,103 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.X509; - -namespace Org.BouncyCastle.Asn1.Crmf -{ - public class EncKeyWithID - : Asn1Encodable - { - private readonly PrivateKeyInfo privKeyInfo; - private readonly Asn1Encodable identifier; - - public static EncKeyWithID GetInstance(object obj) - { - if (obj is EncKeyWithID) - return (EncKeyWithID)obj; - - if (obj != null) - return new EncKeyWithID(Asn1Sequence.GetInstance(obj)); - - return null; - } - - private EncKeyWithID(Asn1Sequence seq) - { - this.privKeyInfo = PrivateKeyInfo.GetInstance(seq[0]); - - if (seq.Count > 1) - { - if (!(seq[1] is DerUtf8String)) - { - this.identifier = GeneralName.GetInstance(seq[1]); - } - else - { - this.identifier = (Asn1Encodable)seq[1]; - } - } - else - { - this.identifier = null; - } - } - - public EncKeyWithID(PrivateKeyInfo privKeyInfo) - { - this.privKeyInfo = privKeyInfo; - this.identifier = null; - } - - public EncKeyWithID(PrivateKeyInfo privKeyInfo, DerUtf8String str) - { - this.privKeyInfo = privKeyInfo; - this.identifier = str; - } - - public EncKeyWithID(PrivateKeyInfo privKeyInfo, GeneralName generalName) - { - this.privKeyInfo = privKeyInfo; - this.identifier = generalName; - } - - public virtual PrivateKeyInfo PrivateKey - { - get { return privKeyInfo; } - } - - public virtual bool HasIdentifier - { - get { return identifier != null; } - } - - public virtual bool IsIdentifierUtf8String - { - get { return identifier is DerUtf8String; } - } - - public virtual Asn1Encodable Identifier - { - get { return identifier; } - } - - /** - * 
-         * EncKeyWithID ::= SEQUENCE {
-         *      privateKey           PrivateKeyInfo,
-         *      identifier CHOICE {
-         *         string               UTF8String,
-         *         generalName          GeneralName
-         *     } OPTIONAL
-         * }
-         *
- * @return - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(privKeyInfo); - v.AddOptional(identifier); - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/crmf/EncryptedKey.cs b/bc-sharp-crypto/src/asn1/crmf/EncryptedKey.cs deleted file mode 100644 index 850fbd2..0000000 --- a/bc-sharp-crypto/src/asn1/crmf/EncryptedKey.cs +++ /dev/null @@ -1,78 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.Cms; - -namespace Org.BouncyCastle.Asn1.Crmf -{ - public class EncryptedKey - : Asn1Encodable, IAsn1Choice - { - private readonly EnvelopedData envelopedData; - private readonly EncryptedValue encryptedValue; - - public static EncryptedKey GetInstance(object o) - { - if (o is EncryptedKey) - { - return (EncryptedKey)o; - } - else if (o is Asn1TaggedObject) - { - return new EncryptedKey(EnvelopedData.GetInstance((Asn1TaggedObject)o, false)); - } - else if (o is EncryptedValue) - { - return new EncryptedKey((EncryptedValue)o); - } - else - { - return new EncryptedKey(EncryptedValue.GetInstance(o)); - } - } - - public EncryptedKey(EnvelopedData envelopedData) - { - this.envelopedData = envelopedData; - } - - public EncryptedKey(EncryptedValue encryptedValue) - { - this.encryptedValue = encryptedValue; - } - - public virtual bool IsEncryptedValue - { - get { return encryptedValue != null; } - } - - public virtual Asn1Encodable Value - { - get - { - if (encryptedValue != null) - return encryptedValue; - - return envelopedData; - } - } - - /** - * 
-         *    EncryptedKey ::= CHOICE {
-         *        encryptedValue        EncryptedValue, -- deprecated
-         *        envelopedData     [0] EnvelopedData }
-         *        -- The encrypted private key MUST be placed in the envelopedData
-         *        -- encryptedContentInfo encryptedContent OCTET STRING.
-         *
- */ - public override Asn1Object ToAsn1Object() - { - if (encryptedValue != null) - { - return encryptedValue.ToAsn1Object(); - } - - return new DerTaggedObject(false, 0, envelopedData); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/crmf/EncryptedValue.cs b/bc-sharp-crypto/src/asn1/crmf/EncryptedValue.cs deleted file mode 100644 index 83122e2..0000000 --- a/bc-sharp-crypto/src/asn1/crmf/EncryptedValue.cs +++ /dev/null @@ -1,154 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; - -namespace Org.BouncyCastle.Asn1.Crmf -{ - public class EncryptedValue - : Asn1Encodable - { - private readonly AlgorithmIdentifier intendedAlg; - private readonly AlgorithmIdentifier symmAlg; - private readonly DerBitString encSymmKey; - private readonly AlgorithmIdentifier keyAlg; - private readonly Asn1OctetString valueHint; - private readonly DerBitString encValue; - - private EncryptedValue(Asn1Sequence seq) - { - int index = 0; - while (seq[index] is Asn1TaggedObject) - { - Asn1TaggedObject tObj = (Asn1TaggedObject)seq[index]; - - switch (tObj.TagNo) - { - case 0: - intendedAlg = AlgorithmIdentifier.GetInstance(tObj, false); - break; - case 1: - symmAlg = AlgorithmIdentifier.GetInstance(tObj, false); - break; - case 2: - encSymmKey = DerBitString.GetInstance(tObj, false); - break; - case 3: - keyAlg = AlgorithmIdentifier.GetInstance(tObj, false); - break; - case 4: - valueHint = Asn1OctetString.GetInstance(tObj, false); - break; - } - ++index; - } - - encValue = DerBitString.GetInstance(seq[index]); - } - - public static EncryptedValue GetInstance(object obj) - { - if (obj is EncryptedValue) - return (EncryptedValue)obj; - - if (obj != null) - return new EncryptedValue(Asn1Sequence.GetInstance(obj)); - - return null; - } - - public EncryptedValue( - AlgorithmIdentifier intendedAlg, - AlgorithmIdentifier symmAlg, - DerBitString encSymmKey, - AlgorithmIdentifier keyAlg, - Asn1OctetString valueHint, - DerBitString encValue) - { - if (encValue == null) - { - throw new ArgumentNullException("encValue"); - } - - this.intendedAlg = intendedAlg; - this.symmAlg = symmAlg; - this.encSymmKey = encSymmKey; - this.keyAlg = keyAlg; - this.valueHint = valueHint; - this.encValue = encValue; - } - - public virtual AlgorithmIdentifier IntendedAlg - { - get { return intendedAlg; } - } - - public virtual AlgorithmIdentifier SymmAlg - { - get { return symmAlg; } - } - - public virtual DerBitString EncSymmKey - { - get { return encSymmKey; } - } - - public virtual AlgorithmIdentifier KeyAlg - { - get { return keyAlg; } - } - - public virtual Asn1OctetString ValueHint - { - get { return valueHint; } - } - - public virtual DerBitString EncValue - { - get { return encValue; } - } - - /** - * 
-         * EncryptedValue ::= SEQUENCE {
-         *                     intendedAlg   [0] AlgorithmIdentifier  OPTIONAL,
-         *                     -- the intended algorithm for which the value will be used
-         *                     symmAlg       [1] AlgorithmIdentifier  OPTIONAL,
-         *                     -- the symmetric algorithm used to encrypt the value
-         *                     encSymmKey    [2] BIT STRING           OPTIONAL,
-         *                     -- the (encrypted) symmetric key used to encrypt the value
-         *                     keyAlg        [3] AlgorithmIdentifier  OPTIONAL,
-         *                     -- algorithm used to encrypt the symmetric key
-         *                     valueHint     [4] OCTET STRING         OPTIONAL,
-         *                     -- a brief description or identifier of the encValue content
-         *                     -- (may be meaningful only to the sending entity, and used only
-         *                     -- if EncryptedValue might be re-examined by the sending entity
-         *                     -- in the future)
-         *                     encValue       BIT STRING }
-         *                     -- the encrypted value itself
-         *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - AddOptional(v, 0, intendedAlg); - AddOptional(v, 1, symmAlg); - AddOptional(v, 2, encSymmKey); - AddOptional(v, 3, keyAlg); - AddOptional(v, 4, valueHint); - - v.Add(encValue); - - return new DerSequence(v); - } - - private void AddOptional(Asn1EncodableVector v, int tagNo, Asn1Encodable obj) - { - if (obj != null) - { - v.Add(new DerTaggedObject(false, tagNo, obj)); - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/crmf/OptionalValidity.cs b/bc-sharp-crypto/src/asn1/crmf/OptionalValidity.cs deleted file mode 100644 index d1a0f7f..0000000 --- a/bc-sharp-crypto/src/asn1/crmf/OptionalValidity.cs +++ /dev/null @@ -1,71 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; - -namespace Org.BouncyCastle.Asn1.Crmf -{ - public class OptionalValidity - : Asn1Encodable - { - private readonly Time notBefore; - private readonly Time notAfter; - - private OptionalValidity(Asn1Sequence seq) - { - foreach (Asn1TaggedObject tObj in seq) - { - if (tObj.TagNo == 0) - { - notBefore = Time.GetInstance(tObj, true); - } - else - { - notAfter = Time.GetInstance(tObj, true); - } - } - } - - public static OptionalValidity GetInstance(object obj) - { - if (obj == null || obj is OptionalValidity) - return (OptionalValidity)obj; - - return new OptionalValidity(Asn1Sequence.GetInstance(obj)); - } - - public virtual Time NotBefore - { - get { return notBefore; } - } - - public virtual Time NotAfter - { - get { return notAfter; } - } - - /** - * 
-         * OptionalValidity ::= SEQUENCE {
-         *                        notBefore  [0] Time OPTIONAL,
-         *                        notAfter   [1] Time OPTIONAL } --at least one MUST be present
-         *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - if (notBefore != null) - { - v.Add(new DerTaggedObject(true, 0, notBefore)); - } - - if (notAfter != null) - { - v.Add(new DerTaggedObject(true, 1, notAfter)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/crmf/PKIArchiveOptions.cs b/bc-sharp-crypto/src/asn1/crmf/PKIArchiveOptions.cs deleted file mode 100644 index 1813d87..0000000 --- a/bc-sharp-crypto/src/asn1/crmf/PKIArchiveOptions.cs +++ /dev/null @@ -1,107 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Crmf -{ - public class PkiArchiveOptions - : Asn1Encodable, IAsn1Choice - { - public const int encryptedPrivKey = 0; - public const int keyGenParameters = 1; - public const int archiveRemGenPrivKey = 2; - - private readonly Asn1Encodable value; - - public static PkiArchiveOptions GetInstance(object obj) - { - if (obj is PkiArchiveOptions) - return (PkiArchiveOptions)obj; - - if (obj is Asn1TaggedObject) - return new PkiArchiveOptions((Asn1TaggedObject)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - private PkiArchiveOptions(Asn1TaggedObject tagged) - { - switch (tagged.TagNo) - { - case encryptedPrivKey: - value = EncryptedKey.GetInstance(tagged.GetObject()); - break; - case keyGenParameters: - value = Asn1OctetString.GetInstance(tagged, false); - break; - case archiveRemGenPrivKey: - value = DerBoolean.GetInstance(tagged, false); - break; - default: - throw new ArgumentException("unknown tag number: " + tagged.TagNo, "tagged"); - } - } - - public PkiArchiveOptions(EncryptedKey encKey) - { - this.value = encKey; - } - - public PkiArchiveOptions(Asn1OctetString keyGenParameters) - { - this.value = keyGenParameters; - } - - public PkiArchiveOptions(bool archiveRemGenPrivKey) - { - this.value = DerBoolean.GetInstance(archiveRemGenPrivKey); - } - - public virtual int Type - { - get - { - if (value is EncryptedKey) - return encryptedPrivKey; - - if (value is Asn1OctetString) - return keyGenParameters; - - return archiveRemGenPrivKey; - } - } - - public virtual Asn1Encodable Value - { - get { return value; } - } - - /** - * 
-         *  PkiArchiveOptions ::= CHOICE {
-         *      encryptedPrivKey     [0] EncryptedKey,
-         *      -- the actual value of the private key
-         *      keyGenParameters     [1] KeyGenParameters,
-         *      -- parameters which allow the private key to be re-generated
-         *      archiveRemGenPrivKey [2] BOOLEAN }
-         *      -- set to TRUE if sender wishes receiver to archive the private
-         *      -- key of a key pair that the receiver generates in response to
-         *      -- this request; set to FALSE if no archival is desired.
-         *
- */ - public override Asn1Object ToAsn1Object() - { - if (value is EncryptedKey) - { - return new DerTaggedObject(true, encryptedPrivKey, value); // choice - } - - if (value is Asn1OctetString) - { - return new DerTaggedObject(false, keyGenParameters, value); - } - - return new DerTaggedObject(false, archiveRemGenPrivKey, value); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/crmf/PKIPublicationInfo.cs b/bc-sharp-crypto/src/asn1/crmf/PKIPublicationInfo.cs deleted file mode 100644 index a7d2bc6..0000000 --- a/bc-sharp-crypto/src/asn1/crmf/PKIPublicationInfo.cs +++ /dev/null @@ -1,66 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Crmf -{ - public class PkiPublicationInfo - : Asn1Encodable - { - private readonly DerInteger action; - private readonly Asn1Sequence pubInfos; - - private PkiPublicationInfo(Asn1Sequence seq) - { - action = DerInteger.GetInstance(seq[0]); - pubInfos = Asn1Sequence.GetInstance(seq[1]); - } - - public static PkiPublicationInfo GetInstance(object obj) - { - if (obj is PkiPublicationInfo) - return (PkiPublicationInfo)obj; - - if (obj is Asn1Sequence) - return new PkiPublicationInfo((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public virtual DerInteger Action - { - get { return action; } - } - - public virtual SinglePubInfo[] GetPubInfos() - { - if (pubInfos == null) - return null; - - SinglePubInfo[] results = new SinglePubInfo[pubInfos.Count]; - for (int i = 0; i != results.Length; ++i) - { - results[i] = SinglePubInfo.GetInstance(pubInfos[i]); - } - return results; - } - - /** - * 
-         * PkiPublicationInfo ::= SEQUENCE {
-         *                  action     INTEGER {
-         *                                 dontPublish (0),
-         *                                 pleasePublish (1) },
-         *                  pubInfos  SEQUENCE SIZE (1..MAX) OF SinglePubInfo OPTIONAL }
-         * -- pubInfos MUST NOT be present if action is "dontPublish"
-         * -- (if action is "pleasePublish" and pubInfos is omitted,
-         * -- "dontCare" is assumed)
-         *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(action, pubInfos); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/crmf/PKMacValue.cs b/bc-sharp-crypto/src/asn1/crmf/PKMacValue.cs deleted file mode 100644 index e104c08..0000000 --- a/bc-sharp-crypto/src/asn1/crmf/PKMacValue.cs +++ /dev/null @@ -1,90 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.Cmp; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Crmf -{ - /** - * Password-based MAC value for use with POPOSigningKeyInput. - */ - public class PKMacValue - : Asn1Encodable - { - private readonly AlgorithmIdentifier algID; - private readonly DerBitString macValue; - - private PKMacValue(Asn1Sequence seq) - { - this.algID = AlgorithmIdentifier.GetInstance(seq[0]); - this.macValue = DerBitString.GetInstance(seq[1]); - } - - public static PKMacValue GetInstance(object obj) - { - if (obj is PKMacValue) - return (PKMacValue)obj; - - if (obj is Asn1Sequence) - return new PKMacValue((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public static PKMacValue GetInstance(Asn1TaggedObject obj, bool isExplicit) - { - return GetInstance(Asn1Sequence.GetInstance(obj, isExplicit)); - } - - /** - * Creates a new PKMACValue. - * @param params parameters for password-based MAC - * @param value MAC of the DER-encoded SubjectPublicKeyInfo - */ - public PKMacValue( - PbmParameter pbmParams, - DerBitString macValue) - : this(new AlgorithmIdentifier(CmpObjectIdentifiers.passwordBasedMac, pbmParams), macValue) - { - } - - /** - * Creates a new PKMACValue. - * @param aid CMPObjectIdentifiers.passwordBasedMAC, with PBMParameter - * @param value MAC of the DER-encoded SubjectPublicKeyInfo - */ - public PKMacValue( - AlgorithmIdentifier algID, - DerBitString macValue) - { - this.algID = algID; - this.macValue = macValue; - } - - public virtual AlgorithmIdentifier AlgID - { - get { return algID; } - } - - public virtual DerBitString MacValue - { - get { return macValue; } - } - - /** - * 
-         * PKMACValue ::= SEQUENCE {
-         *      algId  AlgorithmIdentifier,
-         *      -- algorithm value shall be PasswordBasedMac 1.2.840.113533.7.66.13
-         *      -- parameter value is PBMParameter
-         *      value  BIT STRING }
-         *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(algID, macValue); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/crmf/PopoPrivKey.cs b/bc-sharp-crypto/src/asn1/crmf/PopoPrivKey.cs deleted file mode 100644 index 0cedc51..0000000 --- a/bc-sharp-crypto/src/asn1/crmf/PopoPrivKey.cs +++ /dev/null @@ -1,84 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.Cms; - -namespace Org.BouncyCastle.Asn1.Crmf -{ - public class PopoPrivKey - : Asn1Encodable, IAsn1Choice - { - public const int thisMessage = 0; - public const int subsequentMessage = 1; - public const int dhMAC = 2; - public const int agreeMAC = 3; - public const int encryptedKey = 4; - - private readonly int tagNo; - private readonly Asn1Encodable obj; - - private PopoPrivKey(Asn1TaggedObject obj) - { - this.tagNo = obj.TagNo; - - switch (tagNo) - { - case thisMessage: - this.obj = DerBitString.GetInstance(obj, false); - break; - case subsequentMessage: - this.obj = SubsequentMessage.ValueOf(DerInteger.GetInstance(obj, false).Value.IntValue); - break; - case dhMAC: - this.obj = DerBitString.GetInstance(obj, false); - break; - case agreeMAC: - this.obj = PKMacValue.GetInstance(obj, false); - break; - case encryptedKey: - this.obj = EnvelopedData.GetInstance(obj, false); - break; - default: - throw new ArgumentException("unknown tag in PopoPrivKey", "obj"); - } - } - - public static PopoPrivKey GetInstance(Asn1TaggedObject tagged, bool isExplicit) - { - return new PopoPrivKey(Asn1TaggedObject.GetInstance(tagged.GetObject())); - } - - public PopoPrivKey(SubsequentMessage msg) - { - this.tagNo = subsequentMessage; - this.obj = msg; - } - - public virtual int Type - { - get { return tagNo; } - } - - public virtual Asn1Encodable Value - { - get { return obj; } - } - - /** - * 
-         * PopoPrivKey ::= CHOICE {
-         *        thisMessage       [0] BIT STRING,         -- Deprecated
-         *         -- possession is proven in this message (which contains the private
-         *         -- key itself (encrypted for the CA))
-         *        subsequentMessage [1] SubsequentMessage,
-         *         -- possession will be proven in a subsequent message
-         *        dhMAC             [2] BIT STRING,         -- Deprecated
-         *        agreeMAC          [3] PKMACValue,
-         *        encryptedKey      [4] EnvelopedData }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return new DerTaggedObject(false, tagNo, obj); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/crmf/PopoSigningKey.cs b/bc-sharp-crypto/src/asn1/crmf/PopoSigningKey.cs deleted file mode 100644 index 1c24db8..0000000 --- a/bc-sharp-crypto/src/asn1/crmf/PopoSigningKey.cs +++ /dev/null @@ -1,116 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Crmf -{ - public class PopoSigningKey - : Asn1Encodable - { - private readonly PopoSigningKeyInput poposkInput; - private readonly AlgorithmIdentifier algorithmIdentifier; - private readonly DerBitString signature; - - private PopoSigningKey(Asn1Sequence seq) - { - int index = 0; - - if (seq[index] is Asn1TaggedObject) - { - Asn1TaggedObject tagObj - = (Asn1TaggedObject) seq[index++]; - if (tagObj.TagNo != 0) - { - throw new ArgumentException( "Unknown PopoSigningKeyInput tag: " + tagObj.TagNo, "seq"); - } - poposkInput = PopoSigningKeyInput.GetInstance(tagObj.GetObject()); - } - algorithmIdentifier = AlgorithmIdentifier.GetInstance(seq[index++]); - signature = DerBitString.GetInstance(seq[index]); - } - - public static PopoSigningKey GetInstance(object obj) - { - if (obj is PopoSigningKey) - return (PopoSigningKey)obj; - - if (obj is Asn1Sequence) - return new PopoSigningKey((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public static PopoSigningKey GetInstance(Asn1TaggedObject obj, bool isExplicit) - { - return GetInstance(Asn1Sequence.GetInstance(obj, isExplicit)); - } - - /** - * Creates a new Proof of Possession object for a signing key. - * @param poposkIn the PopoSigningKeyInput structure, or null if the - * CertTemplate includes both subject and publicKey values. - * @param aid the AlgorithmIdentifier used to sign the proof of possession. - * @param signature a signature over the DER-encoded value of poposkIn, - * or the DER-encoded value of certReq if poposkIn is null. - */ - public PopoSigningKey( - PopoSigningKeyInput poposkIn, - AlgorithmIdentifier aid, - DerBitString signature) - { - this.poposkInput = poposkIn; - this.algorithmIdentifier = aid; - this.signature = signature; - } - - public virtual PopoSigningKeyInput PoposkInput - { - get { return poposkInput; } - } - - public virtual AlgorithmIdentifier AlgorithmIdentifier - { - get { return algorithmIdentifier; } - } - - public virtual DerBitString Signature - { - get { return signature; } - } - - /** - * 
-         * PopoSigningKey ::= SEQUENCE {
-         *                      poposkInput           [0] PopoSigningKeyInput OPTIONAL,
-         *                      algorithmIdentifier   AlgorithmIdentifier,
-         *                      signature             BIT STRING }
-         *  -- The signature (using "algorithmIdentifier") is on the
-         *  -- DER-encoded value of poposkInput.  NOTE: If the CertReqMsg
-         *  -- certReq CertTemplate contains the subject and publicKey values,
-         *  -- then poposkInput MUST be omitted and the signature MUST be
-         *  -- computed on the DER-encoded value of CertReqMsg certReq.  If
-         *  -- the CertReqMsg certReq CertTemplate does not contain the public
-         *  -- key and subject values, then poposkInput MUST be present and
-         *  -- MUST be signed.  This strategy ensures that the public key is
-         *  -- not present in both the poposkInput and CertReqMsg certReq
-         *  -- CertTemplate fields.
-         *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - if (poposkInput != null) - { - v.Add(new DerTaggedObject(false, 0, poposkInput)); - } - - v.Add(algorithmIdentifier); - v.Add(signature); - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/crmf/PopoSigningKeyInput.cs b/bc-sharp-crypto/src/asn1/crmf/PopoSigningKeyInput.cs deleted file mode 100644 index e43fa13..0000000 --- a/bc-sharp-crypto/src/asn1/crmf/PopoSigningKeyInput.cs +++ /dev/null @@ -1,116 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Crmf -{ - public class PopoSigningKeyInput - : Asn1Encodable - { - private readonly GeneralName sender; - private readonly PKMacValue publicKeyMac; - private readonly SubjectPublicKeyInfo publicKey; - - private PopoSigningKeyInput(Asn1Sequence seq) - { - Asn1Encodable authInfo = (Asn1Encodable)seq[0]; - - if (authInfo is Asn1TaggedObject) - { - Asn1TaggedObject tagObj = (Asn1TaggedObject)authInfo; - if (tagObj.TagNo != 0) - { - throw new ArgumentException("Unknown authInfo tag: " + tagObj.TagNo, "seq"); - } - sender = GeneralName.GetInstance(tagObj.GetObject()); - } - else - { - publicKeyMac = PKMacValue.GetInstance(authInfo); - } - - publicKey = SubjectPublicKeyInfo.GetInstance(seq[1]); - } - - public static PopoSigningKeyInput GetInstance(object obj) - { - if (obj is PopoSigningKeyInput) - return (PopoSigningKeyInput)obj; - - if (obj is Asn1Sequence) - return new PopoSigningKeyInput((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - /** Creates a new PopoSigningKeyInput with sender name as authInfo. */ - public PopoSigningKeyInput( - GeneralName sender, - SubjectPublicKeyInfo spki) - { - this.sender = sender; - this.publicKey = spki; - } - - /** Creates a new PopoSigningKeyInput using password-based MAC. */ - public PopoSigningKeyInput( - PKMacValue pkmac, - SubjectPublicKeyInfo spki) - { - this.publicKeyMac = pkmac; - this.publicKey = spki; - } - - /** Returns the sender field, or null if authInfo is publicKeyMac */ - public virtual GeneralName Sender - { - get { return sender; } - } - - /** Returns the publicKeyMac field, or null if authInfo is sender */ - public virtual PKMacValue PublicKeyMac - { - get { return publicKeyMac; } - } - - public virtual SubjectPublicKeyInfo PublicKey - { - get { return publicKey; } - } - - /** - * 
-         * PopoSigningKeyInput ::= SEQUENCE {
-         *        authInfo             CHOICE {
-         *                                 sender              [0] GeneralName,
-         *                                 -- used only if an authenticated identity has been
-         *                                 -- established for the sender (e.g., a DN from a
-         *                                 -- previously-issued and currently-valid certificate
-         *                                 publicKeyMac        PKMacValue },
-         *                                 -- used if no authenticated GeneralName currently exists for
-         *                                 -- the sender; publicKeyMac contains a password-based MAC
-         *                                 -- on the DER-encoded value of publicKey
-         *        publicKey           SubjectPublicKeyInfo }  -- from CertTemplate
-         *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - if (sender != null) - { - v.Add(new DerTaggedObject(false, 0, sender)); - } - else - { - v.Add(publicKeyMac); - } - - v.Add(publicKey); - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/crmf/ProofOfPossession.cs b/bc-sharp-crypto/src/asn1/crmf/ProofOfPossession.cs deleted file mode 100644 index 8957169..0000000 --- a/bc-sharp-crypto/src/asn1/crmf/ProofOfPossession.cs +++ /dev/null @@ -1,100 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Crmf -{ - public class ProofOfPossession - : Asn1Encodable, IAsn1Choice - { - public const int TYPE_RA_VERIFIED = 0; - public const int TYPE_SIGNING_KEY = 1; - public const int TYPE_KEY_ENCIPHERMENT = 2; - public const int TYPE_KEY_AGREEMENT = 3; - - private readonly int tagNo; - private readonly Asn1Encodable obj; - - private ProofOfPossession(Asn1TaggedObject tagged) - { - tagNo = tagged.TagNo; - switch (tagNo) - { - case 0: - obj = DerNull.Instance; - break; - case 1: - obj = PopoSigningKey.GetInstance(tagged, false); - break; - case 2: - case 3: - obj = PopoPrivKey.GetInstance(tagged, false); - break; - default: - throw new ArgumentException("unknown tag: " + tagNo, "tagged"); - } - } - - public static ProofOfPossession GetInstance(object obj) - { - if (obj is ProofOfPossession) - return (ProofOfPossession)obj; - - if (obj is Asn1TaggedObject) - return new ProofOfPossession((Asn1TaggedObject)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - /** Creates a ProofOfPossession with type raVerified. */ - public ProofOfPossession() - { - tagNo = TYPE_RA_VERIFIED; - obj = DerNull.Instance; - } - - /** Creates a ProofOfPossession for a signing key. */ - public ProofOfPossession(PopoSigningKey Poposk) - { - tagNo = TYPE_SIGNING_KEY; - obj = Poposk; - } - - /** - * Creates a ProofOfPossession for key encipherment or agreement. - * @param type one of TYPE_KEY_ENCIPHERMENT or TYPE_KEY_AGREEMENT - */ - public ProofOfPossession(int type, PopoPrivKey privkey) - { - tagNo = type; - obj = privkey; - } - - public virtual int Type - { - get { return tagNo; } - } - - public virtual Asn1Encodable Object - { - get { return obj; } - } - - /** - * 
-         * ProofOfPossession ::= CHOICE {
-         *                           raVerified        [0] NULL,
-         *                           -- used if the RA has already verified that the requester is in
-         *                           -- possession of the private key
-         *                           signature         [1] PopoSigningKey,
-         *                           keyEncipherment   [2] PopoPrivKey,
-         *                           keyAgreement      [3] PopoPrivKey }
-         *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - return new DerTaggedObject(false, tagNo, obj); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/crmf/SinglePubInfo.cs b/bc-sharp-crypto/src/asn1/crmf/SinglePubInfo.cs deleted file mode 100644 index 5205ce3..0000000 --- a/bc-sharp-crypto/src/asn1/crmf/SinglePubInfo.cs +++ /dev/null @@ -1,59 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Crmf -{ - public class SinglePubInfo - : Asn1Encodable - { - private readonly DerInteger pubMethod; - private readonly GeneralName pubLocation; - - private SinglePubInfo(Asn1Sequence seq) - { - pubMethod = DerInteger.GetInstance(seq[0]); - - if (seq.Count == 2) - { - pubLocation = GeneralName.GetInstance(seq[1]); - } - } - - public static SinglePubInfo GetInstance(object obj) - { - if (obj is SinglePubInfo) - return (SinglePubInfo)obj; - - if (obj is Asn1Sequence) - return new SinglePubInfo((Asn1Sequence)obj); - - throw new ArgumentException("Invalid object: " + Platform.GetTypeName(obj), "obj"); - } - - public virtual GeneralName PubLocation - { - get { return pubLocation; } - } - - /** - * 
-         * SinglePubInfo ::= SEQUENCE {
-         *        pubMethod    INTEGER {
-         *           dontCare    (0),
-         *           x500        (1),
-         *           web         (2),
-         *           ldap        (3) },
-         *       pubLocation  GeneralName OPTIONAL }
-         *
- * @return a basic ASN.1 object representation. - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(pubMethod); - v.AddOptional(pubLocation); - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/crmf/SubsequentMessage.cs b/bc-sharp-crypto/src/asn1/crmf/SubsequentMessage.cs deleted file mode 100644 index cc1c164..0000000 --- a/bc-sharp-crypto/src/asn1/crmf/SubsequentMessage.cs +++ /dev/null @@ -1,27 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.Crmf -{ - public class SubsequentMessage - : DerInteger - { - public static readonly SubsequentMessage encrCert = new SubsequentMessage(0); - public static readonly SubsequentMessage challengeResp = new SubsequentMessage(1); - - private SubsequentMessage(int value) - : base(value) - { - } - - public static SubsequentMessage ValueOf(int value) - { - if (value == 0) - return encrCert; - - if (value == 1) - return challengeResp; - - throw new ArgumentException("unknown value: " + value, "value"); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cryptopro/CryptoProObjectIdentifiers.cs b/bc-sharp-crypto/src/asn1/cryptopro/CryptoProObjectIdentifiers.cs deleted file mode 100644 index e2f2c18..0000000 --- a/bc-sharp-crypto/src/asn1/cryptopro/CryptoProObjectIdentifiers.cs +++ /dev/null @@ -1,51 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; - -namespace Org.BouncyCastle.Asn1.CryptoPro -{ - public abstract class CryptoProObjectIdentifiers - { - // GOST Algorithms OBJECT IDENTIFIERS : - // { iso(1) member-body(2) ru(643) rans(2) cryptopro(2)} - public const string GostID = "1.2.643.2.2"; - - public static readonly DerObjectIdentifier GostR3411 = new DerObjectIdentifier(GostID + ".9"); - public static readonly DerObjectIdentifier GostR3411Hmac = new DerObjectIdentifier(GostID + ".10"); - - public static readonly DerObjectIdentifier GostR28147Cbc = new DerObjectIdentifier(GostID + ".21"); - - public static readonly DerObjectIdentifier ID_Gost28147_89_CryptoPro_A_ParamSet = new DerObjectIdentifier(GostID + ".31.1"); - - public static readonly DerObjectIdentifier GostR3410x94 = new DerObjectIdentifier(GostID + ".20"); - public static readonly DerObjectIdentifier GostR3410x2001 = new DerObjectIdentifier(GostID + ".19"); - public static readonly DerObjectIdentifier GostR3411x94WithGostR3410x94 = new DerObjectIdentifier(GostID + ".4"); - public static readonly DerObjectIdentifier GostR3411x94WithGostR3410x2001 = new DerObjectIdentifier(GostID + ".3"); - - // { iso(1) member-body(2) ru(643) rans(2) cryptopro(2) hashes(30) } - public static readonly DerObjectIdentifier GostR3411x94CryptoProParamSet = new DerObjectIdentifier(GostID + ".30.1"); - - // { iso(1) member-body(2) ru(643) rans(2) cryptopro(2) signs(32) } - public static readonly DerObjectIdentifier GostR3410x94CryptoProA = new DerObjectIdentifier(GostID + ".32.2"); - public static readonly DerObjectIdentifier GostR3410x94CryptoProB = new DerObjectIdentifier(GostID + ".32.3"); - public static readonly DerObjectIdentifier GostR3410x94CryptoProC = new DerObjectIdentifier(GostID + ".32.4"); - public static readonly DerObjectIdentifier GostR3410x94CryptoProD = new DerObjectIdentifier(GostID + ".32.5"); - - // { iso(1) member-body(2) ru(643) rans(2) cryptopro(2) exchanges(33) } - public static readonly DerObjectIdentifier GostR3410x94CryptoProXchA = new DerObjectIdentifier(GostID + ".33.1"); - public static readonly DerObjectIdentifier GostR3410x94CryptoProXchB = new DerObjectIdentifier(GostID + ".33.2"); - public static readonly DerObjectIdentifier GostR3410x94CryptoProXchC = new DerObjectIdentifier(GostID + ".33.3"); - - //{ iso(1) member-body(2)ru(643) rans(2) cryptopro(2) ecc-signs(35) } - public static readonly DerObjectIdentifier GostR3410x2001CryptoProA = new DerObjectIdentifier(GostID + ".35.1"); - public static readonly DerObjectIdentifier GostR3410x2001CryptoProB = new DerObjectIdentifier(GostID + ".35.2"); - public static readonly DerObjectIdentifier GostR3410x2001CryptoProC = new DerObjectIdentifier(GostID + ".35.3"); - - // { iso(1) member-body(2) ru(643) rans(2) cryptopro(2) ecc-exchanges(36) } - public static readonly DerObjectIdentifier GostR3410x2001CryptoProXchA = new DerObjectIdentifier(GostID + ".36.0"); - public static readonly DerObjectIdentifier GostR3410x2001CryptoProXchB = new DerObjectIdentifier(GostID + ".36.1"); - - public static readonly DerObjectIdentifier GostElSgDH3410Default = new DerObjectIdentifier(GostID + ".36.0"); - public static readonly DerObjectIdentifier GostElSgDH3410x1 = new DerObjectIdentifier(GostID + ".36.1"); - } -} diff --git a/bc-sharp-crypto/src/asn1/cryptopro/ECGOST3410NamedCurves.cs b/bc-sharp-crypto/src/asn1/cryptopro/ECGOST3410NamedCurves.cs deleted file mode 100644 index 32d3103..0000000 --- a/bc-sharp-crypto/src/asn1/cryptopro/ECGOST3410NamedCurves.cs +++ /dev/null @@ -1,184 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Asn1.CryptoPro -{ - /** - * table of the available named parameters for GOST 3410-2001. - */ - public sealed class ECGost3410NamedCurves - { - private ECGost3410NamedCurves() - { - } - - internal static readonly IDictionary objIds = Platform.CreateHashtable(); - internal static readonly IDictionary parameters = Platform.CreateHashtable(); - internal static readonly IDictionary names = Platform.CreateHashtable(); - - static ECGost3410NamedCurves() - { - BigInteger mod_p = new BigInteger("115792089237316195423570985008687907853269984665640564039457584007913129639319"); - BigInteger mod_q = new BigInteger("115792089237316195423570985008687907853073762908499243225378155805079068850323"); - - FpCurve curve = new FpCurve( - mod_p, // p - new BigInteger("115792089237316195423570985008687907853269984665640564039457584007913129639316"), // a - new BigInteger("166"), // b - mod_q, - BigInteger.One); - - ECDomainParameters ecParams = new ECDomainParameters( - curve, - curve.CreatePoint( - new BigInteger("1"), // x - new BigInteger("64033881142927202683649881450433473985931760268884941288852745803908878638612")), // y - mod_q); - - parameters[CryptoProObjectIdentifiers.GostR3410x2001CryptoProA] = ecParams; - - mod_p = new BigInteger("115792089237316195423570985008687907853269984665640564039457584007913129639319"); - mod_q = new BigInteger("115792089237316195423570985008687907853073762908499243225378155805079068850323"); - - curve = new FpCurve( - mod_p, // p - new BigInteger("115792089237316195423570985008687907853269984665640564039457584007913129639316"), - new BigInteger("166"), - mod_q, - BigInteger.One); - - ecParams = new ECDomainParameters( - curve, - curve.CreatePoint( - new BigInteger("1"), // x - new BigInteger("64033881142927202683649881450433473985931760268884941288852745803908878638612")), // y - mod_q); - - parameters[CryptoProObjectIdentifiers.GostR3410x2001CryptoProXchA] = ecParams; - - mod_p = new BigInteger("57896044618658097711785492504343953926634992332820282019728792003956564823193"); //p - mod_q = new BigInteger("57896044618658097711785492504343953927102133160255826820068844496087732066703"); //q - - curve = new FpCurve( - mod_p, // p - new BigInteger("57896044618658097711785492504343953926634992332820282019728792003956564823190"), // a - new BigInteger("28091019353058090096996979000309560759124368558014865957655842872397301267595"), // b - mod_q, - BigInteger.One); - - ecParams = new ECDomainParameters( - curve, - curve.CreatePoint( - new BigInteger("1"), // x - new BigInteger("28792665814854611296992347458380284135028636778229113005756334730996303888124")), // y - mod_q); // q - - parameters[CryptoProObjectIdentifiers.GostR3410x2001CryptoProB] = ecParams; - - mod_p = new BigInteger("70390085352083305199547718019018437841079516630045180471284346843705633502619"); - mod_q = new BigInteger("70390085352083305199547718019018437840920882647164081035322601458352298396601"); - - curve = new FpCurve( - mod_p, // p - new BigInteger("70390085352083305199547718019018437841079516630045180471284346843705633502616"), - new BigInteger("32858"), - mod_q, - BigInteger.One); - - ecParams = new ECDomainParameters( - curve, - curve.CreatePoint( - new BigInteger("0"), - new BigInteger("29818893917731240733471273240314769927240550812383695689146495261604565990247")), - mod_q); - - parameters[CryptoProObjectIdentifiers.GostR3410x2001CryptoProXchB] = ecParams; - - mod_p = new BigInteger("70390085352083305199547718019018437841079516630045180471284346843705633502619"); //p - mod_q = new BigInteger("70390085352083305199547718019018437840920882647164081035322601458352298396601"); //q - curve = new FpCurve( - mod_p, // p - new BigInteger("70390085352083305199547718019018437841079516630045180471284346843705633502616"), // a - new BigInteger("32858"), // b - mod_q, - BigInteger.One); - - ecParams = new ECDomainParameters( - curve, - curve.CreatePoint( - new BigInteger("0"), // x - new BigInteger("29818893917731240733471273240314769927240550812383695689146495261604565990247")), // y - mod_q); // q - - parameters[CryptoProObjectIdentifiers.GostR3410x2001CryptoProC] = ecParams; - - objIds["GostR3410-2001-CryptoPro-A"] = CryptoProObjectIdentifiers.GostR3410x2001CryptoProA; - objIds["GostR3410-2001-CryptoPro-B"] = CryptoProObjectIdentifiers.GostR3410x2001CryptoProB; - objIds["GostR3410-2001-CryptoPro-C"] = CryptoProObjectIdentifiers.GostR3410x2001CryptoProC; - objIds["GostR3410-2001-CryptoPro-XchA"] = CryptoProObjectIdentifiers.GostR3410x2001CryptoProXchA; - objIds["GostR3410-2001-CryptoPro-XchB"] = CryptoProObjectIdentifiers.GostR3410x2001CryptoProXchB; - - names[CryptoProObjectIdentifiers.GostR3410x2001CryptoProA] = "GostR3410-2001-CryptoPro-A"; - names[CryptoProObjectIdentifiers.GostR3410x2001CryptoProB] = "GostR3410-2001-CryptoPro-B"; - names[CryptoProObjectIdentifiers.GostR3410x2001CryptoProC] = "GostR3410-2001-CryptoPro-C"; - names[CryptoProObjectIdentifiers.GostR3410x2001CryptoProXchA] = "GostR3410-2001-CryptoPro-XchA"; - names[CryptoProObjectIdentifiers.GostR3410x2001CryptoProXchB] = "GostR3410-2001-CryptoPro-XchB"; - } - - /** - * return the ECDomainParameters object for the given OID, null if it - * isn't present. - * - * @param oid an object identifier representing a named parameters, if present. - */ - public static ECDomainParameters GetByOid( - DerObjectIdentifier oid) - { - return (ECDomainParameters) parameters[oid]; - } - - /** - * returns an enumeration containing the name strings for curves - * contained in this structure. - */ - public static IEnumerable Names - { - get { return new EnumerableProxy(names.Values); } - } - - public static ECDomainParameters GetByName( - string name) - { - DerObjectIdentifier oid = (DerObjectIdentifier) objIds[name]; - - if (oid != null) - { - return (ECDomainParameters) parameters[oid]; - } - - return null; - } - - /** - * return the named curve name represented by the given object identifier. - */ - public static string GetName( - DerObjectIdentifier oid) - { - return (string) names[oid]; - } - - public static DerObjectIdentifier GetOid( - string name) - { - return (DerObjectIdentifier) objIds[name]; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cryptopro/ECGOST3410ParamSetParameters.cs b/bc-sharp-crypto/src/asn1/cryptopro/ECGOST3410ParamSetParameters.cs deleted file mode 100644 index 8e568a2..0000000 --- a/bc-sharp-crypto/src/asn1/cryptopro/ECGOST3410ParamSetParameters.cs +++ /dev/null @@ -1,87 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.CryptoPro -{ - public class ECGost3410ParamSetParameters - : Asn1Encodable - { - internal readonly DerInteger p, q, a, b, x, y; - - public static ECGost3410ParamSetParameters GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static ECGost3410ParamSetParameters GetInstance( - object obj) - { - if (obj == null || obj is ECGost3410ParamSetParameters) - { - return (ECGost3410ParamSetParameters) obj; - } - - if (obj is Asn1Sequence) - { - return new ECGost3410ParamSetParameters((Asn1Sequence) obj); - } - - throw new ArgumentException("Invalid GOST3410Parameter: " + Platform.GetTypeName(obj)); - } - - public ECGost3410ParamSetParameters( - BigInteger a, - BigInteger b, - BigInteger p, - BigInteger q, - int x, - BigInteger y) - { - this.a = new DerInteger(a); - this.b = new DerInteger(b); - this.p = new DerInteger(p); - this.q = new DerInteger(q); - this.x = new DerInteger(x); - this.y = new DerInteger(y); - } - - public ECGost3410ParamSetParameters( - Asn1Sequence seq) - { - if (seq.Count != 6) - throw new ArgumentException("Wrong number of elements in sequence", "seq"); - - this.a = DerInteger.GetInstance(seq[0]); - this.b = DerInteger.GetInstance(seq[1]); - this.p = DerInteger.GetInstance(seq[2]); - this.q = DerInteger.GetInstance(seq[3]); - this.x = DerInteger.GetInstance(seq[4]); - this.y = DerInteger.GetInstance(seq[5]); - } - - public BigInteger P - { - get { return p.PositiveValue; } - } - - public BigInteger Q - { - get { return q.PositiveValue; } - } - - public BigInteger A - { - get { return a.PositiveValue; } - } - - public override Asn1Object ToAsn1Object() - { - return new DerSequence(a, b, p, q, x, y); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cryptopro/GOST28147Parameters.cs b/bc-sharp-crypto/src/asn1/cryptopro/GOST28147Parameters.cs deleted file mode 100644 index fc0d792..0000000 --- a/bc-sharp-crypto/src/asn1/cryptopro/GOST28147Parameters.cs +++ /dev/null @@ -1,63 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.CryptoPro -{ - public class Gost28147Parameters - : Asn1Encodable - { - private readonly Asn1OctetString iv; - private readonly DerObjectIdentifier paramSet; - - public static Gost28147Parameters GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static Gost28147Parameters GetInstance( - object obj) - { - if (obj == null || obj is Gost28147Parameters) - { - return (Gost28147Parameters) obj; - } - - if (obj is Asn1Sequence) - { - return new Gost28147Parameters((Asn1Sequence) obj); - } - - throw new ArgumentException("Invalid GOST3410Parameter: " + Platform.GetTypeName(obj)); - } - - private Gost28147Parameters( - Asn1Sequence seq) - { - if (seq.Count != 2) - throw new ArgumentException("Wrong number of elements in sequence", "seq"); - - this.iv = Asn1OctetString.GetInstance(seq[0]); - this.paramSet = DerObjectIdentifier.GetInstance(seq[1]); - } - - /** - * 
-         * Gost28147-89-Parameters ::=
-         *               SEQUENCE {
-         *                       iv                   Gost28147-89-IV,
-         *                       encryptionParamSet   OBJECT IDENTIFIER
-         *                }
-         *
-         *   Gost28147-89-IV ::= OCTET STRING (SIZE (8))
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(iv, paramSet); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cryptopro/GOST3410NamedParameters.cs b/bc-sharp-crypto/src/asn1/cryptopro/GOST3410NamedParameters.cs deleted file mode 100644 index 66dba51..0000000 --- a/bc-sharp-crypto/src/asn1/cryptopro/GOST3410NamedParameters.cs +++ /dev/null @@ -1,123 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Asn1.CryptoPro -{ - /** - * table of the available named parameters for GOST 3410-94. - */ - public sealed class Gost3410NamedParameters - { - private Gost3410NamedParameters() - { - } - - private static readonly IDictionary objIds = Platform.CreateHashtable(); - private static readonly IDictionary parameters = Platform.CreateHashtable(); - - private static readonly Gost3410ParamSetParameters cryptoProA = new Gost3410ParamSetParameters( - 1024, - new BigInteger("127021248288932417465907042777176443525787653508916535812817507265705031260985098497423188333483401180925999995120988934130659205614996724254121049274349357074920312769561451689224110579311248812610229678534638401693520013288995000362260684222750813532307004517341633685004541062586971416883686778842537820383"), - new BigInteger("68363196144955700784444165611827252895102170888761442055095051287550314083023"), - new BigInteger("100997906755055304772081815535925224869841082572053457874823515875577147990529272777244152852699298796483356699682842027972896052747173175480590485607134746852141928680912561502802222185647539190902656116367847270145019066794290930185446216399730872221732889830323194097355403213400972588322876850946740663962") - // validationAlgorithm { - // algorithm - // id-GostR3410-94-bBis, - // parameters - // GostR3410-94-ValidationBisParameters: { - // x0 1376285941, - // c 3996757427 - // } - // } - - ); - - private static readonly Gost3410ParamSetParameters cryptoProB = new Gost3410ParamSetParameters( - 1024, - new BigInteger("139454871199115825601409655107690713107041707059928031797758001454375765357722984094124368522288239833039114681648076688236921220737322672160740747771700911134550432053804647694904686120113087816240740184800477047157336662926249423571248823968542221753660143391485680840520336859458494803187341288580489525163"), - new BigInteger("79885141663410976897627118935756323747307951916507639758300472692338873533959"), - new BigInteger("42941826148615804143873447737955502392672345968607143066798112994089471231420027060385216699563848719957657284814898909770759462613437669456364882730370838934791080835932647976778601915343474400961034231316672578686920482194932878633360203384797092684342247621055760235016132614780652761028509445403338652341") - // validationAlgorithm { - // algorithm - // id-GostR3410-94-bBis, - // parameters - // GostR3410-94-ValidationBisParameters: { - // x0 1536654555, - // c 1855361757, - // d 14408629386140014567655 - //4902939282056547857802241461782996702017713059974755104394739915140 - //6115284791024439062735788342744854120601660303926203867703556828005 - //8957203818114895398976594425537561271800850306 - // } - // } - //} - ); - - private static readonly Gost3410ParamSetParameters cryptoProXchA = new Gost3410ParamSetParameters( - 1024, - new BigInteger("142011741597563481196368286022318089743276138395243738762872573441927459393512718973631166078467600360848946623567625795282774719212241929071046134208380636394084512691828894000571524625445295769349356752728956831541775441763139384457191755096847107846595662547942312293338483924514339614727760681880609734239"), - new BigInteger("91771529896554605945588149018382750217296858393520724172743325725474374979801"), - new BigInteger("133531813272720673433859519948319001217942375967847486899482359599369642528734712461590403327731821410328012529253871914788598993103310567744136196364803064721377826656898686468463277710150809401182608770201615324990468332931294920912776241137878030224355746606283971659376426832674269780880061631528163475887") - ); - - static Gost3410NamedParameters() - { - parameters[CryptoProObjectIdentifiers.GostR3410x94CryptoProA] = cryptoProA; - parameters[CryptoProObjectIdentifiers.GostR3410x94CryptoProB] = cryptoProB; - //parameters[CryptoProObjectIdentifiers.GostR3410x94CryptoProC] = cryptoProC; - //parameters[CryptoProObjectIdentifiers.GostR3410x94CryptoProD] = cryptoProD; - parameters[CryptoProObjectIdentifiers.GostR3410x94CryptoProXchA] = cryptoProXchA; - //parameters[CryptoProObjectIdentifiers.GostR3410x94CryptoProXchB] = cryptoProXchA; - //parameters[CryptoProObjectIdentifiers.GostR3410x94CryptoProXchC] = cryptoProXchA; - - objIds["GostR3410-94-CryptoPro-A"] = CryptoProObjectIdentifiers.GostR3410x94CryptoProA; - objIds["GostR3410-94-CryptoPro-B"] = CryptoProObjectIdentifiers.GostR3410x94CryptoProB; - objIds["GostR3410-94-CryptoPro-XchA"] = CryptoProObjectIdentifiers.GostR3410x94CryptoProXchA; - } - - /** - * return the GOST3410ParamSetParameters object for the given OID, null if it - * isn't present. - * - * @param oid an object identifier representing a named parameters, if present. - */ - public static Gost3410ParamSetParameters GetByOid( - DerObjectIdentifier oid) - { - return (Gost3410ParamSetParameters) parameters[oid]; - } - - /** - * returns an enumeration containing the name strings for parameters - * contained in this structure. - */ - public static IEnumerable Names - { - get { return new EnumerableProxy(objIds.Keys); } - } - - public static Gost3410ParamSetParameters GetByName( - string name) - { - DerObjectIdentifier oid = (DerObjectIdentifier) objIds[name]; - - if (oid != null) - { - return (Gost3410ParamSetParameters) parameters[oid]; - } - - return null; - } - - public static DerObjectIdentifier GetOid( - string name) - { - return (DerObjectIdentifier) objIds[name]; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cryptopro/GOST3410ParamSetParameters.cs b/bc-sharp-crypto/src/asn1/cryptopro/GOST3410ParamSetParameters.cs deleted file mode 100644 index b347f8d..0000000 --- a/bc-sharp-crypto/src/asn1/cryptopro/GOST3410ParamSetParameters.cs +++ /dev/null @@ -1,87 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.CryptoPro -{ - public class Gost3410ParamSetParameters - : Asn1Encodable - { - private readonly int keySize; - private readonly DerInteger p, q, a; - - public static Gost3410ParamSetParameters GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static Gost3410ParamSetParameters GetInstance( - object obj) - { - if (obj == null || obj is Gost3410ParamSetParameters) - { - return (Gost3410ParamSetParameters) obj; - } - - if (obj is Asn1Sequence) - { - return new Gost3410ParamSetParameters((Asn1Sequence) obj); - } - - throw new ArgumentException("Invalid GOST3410Parameter: " + Platform.GetTypeName(obj)); - } - - public Gost3410ParamSetParameters( - int keySize, - BigInteger p, - BigInteger q, - BigInteger a) - { - this.keySize = keySize; - this.p = new DerInteger(p); - this.q = new DerInteger(q); - this.a = new DerInteger(a); - } - - private Gost3410ParamSetParameters( - Asn1Sequence seq) - { - if (seq.Count != 4) - throw new ArgumentException("Wrong number of elements in sequence", "seq"); - - this.keySize = DerInteger.GetInstance(seq[0]).Value.IntValue; - this.p = DerInteger.GetInstance(seq[1]); - this.q = DerInteger.GetInstance(seq[2]); - this.a = DerInteger.GetInstance(seq[3]); - } - - public int KeySize - { - get { return keySize; } - } - - public BigInteger P - { - get { return p.PositiveValue; } - } - - public BigInteger Q - { - get { return q.PositiveValue; } - } - - public BigInteger A - { - get { return a.PositiveValue; } - } - - public override Asn1Object ToAsn1Object() - { - return new DerSequence(new DerInteger(keySize), p, q, a); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/cryptopro/GOST3410PublicKeyAlgParameters.cs b/bc-sharp-crypto/src/asn1/cryptopro/GOST3410PublicKeyAlgParameters.cs deleted file mode 100644 index 10c45ba..0000000 --- a/bc-sharp-crypto/src/asn1/cryptopro/GOST3410PublicKeyAlgParameters.cs +++ /dev/null @@ -1,99 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.CryptoPro -{ - public class Gost3410PublicKeyAlgParameters - : Asn1Encodable - { - private DerObjectIdentifier publicKeyParamSet; - private DerObjectIdentifier digestParamSet; - private DerObjectIdentifier encryptionParamSet; - - public static Gost3410PublicKeyAlgParameters GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static Gost3410PublicKeyAlgParameters GetInstance( - object obj) - { - if (obj == null || obj is Gost3410PublicKeyAlgParameters) - { - return (Gost3410PublicKeyAlgParameters) obj; - } - - if (obj is Asn1Sequence) - { - return new Gost3410PublicKeyAlgParameters((Asn1Sequence) obj); - } - - throw new ArgumentException("Invalid GOST3410Parameter: " + Platform.GetTypeName(obj)); - } - - public Gost3410PublicKeyAlgParameters( - DerObjectIdentifier publicKeyParamSet, - DerObjectIdentifier digestParamSet) - : this (publicKeyParamSet, digestParamSet, null) - { - } - - public Gost3410PublicKeyAlgParameters( - DerObjectIdentifier publicKeyParamSet, - DerObjectIdentifier digestParamSet, - DerObjectIdentifier encryptionParamSet) - { - if (publicKeyParamSet == null) - throw new ArgumentNullException("publicKeyParamSet"); - if (digestParamSet == null) - throw new ArgumentNullException("digestParamSet"); - - this.publicKeyParamSet = publicKeyParamSet; - this.digestParamSet = digestParamSet; - this.encryptionParamSet = encryptionParamSet; - } - - public Gost3410PublicKeyAlgParameters( - Asn1Sequence seq) - { - this.publicKeyParamSet = (DerObjectIdentifier) seq[0]; - this.digestParamSet = (DerObjectIdentifier) seq[1]; - - if (seq.Count > 2) - { - this.encryptionParamSet = (DerObjectIdentifier) seq[2]; - } - } - - public DerObjectIdentifier PublicKeyParamSet - { - get { return publicKeyParamSet; } - } - - public DerObjectIdentifier DigestParamSet - { - get { return digestParamSet; } - } - - public DerObjectIdentifier EncryptionParamSet - { - get { return encryptionParamSet; } - } - - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector( - publicKeyParamSet, digestParamSet); - - if (encryptionParamSet != null) - { - v.Add(encryptionParamSet); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/eac/EACObjectIdentifiers.cs b/bc-sharp-crypto/src/asn1/eac/EACObjectIdentifiers.cs deleted file mode 100644 index d54ef0e..0000000 --- a/bc-sharp-crypto/src/asn1/eac/EACObjectIdentifiers.cs +++ /dev/null @@ -1,50 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; - -namespace Org.BouncyCastle.Asn1.Eac -{ - public abstract class EacObjectIdentifiers - { - // bsi-de OBJECT IDENTIFIER ::= { - // itu-t(0) identified-organization(4) etsi(0) - // reserved(127) etsi-identified-organization(0) 7 - // } - public static readonly DerObjectIdentifier bsi_de = new DerObjectIdentifier("0.4.0.127.0.7"); - - // id-PK OBJECT IDENTIFIER ::= { - // bsi-de protocols(2) smartcard(2) 1 - // } - public static readonly DerObjectIdentifier id_PK = new DerObjectIdentifier(bsi_de + ".2.2.1"); - - public static readonly DerObjectIdentifier id_PK_DH = new DerObjectIdentifier(id_PK + ".1"); - public static readonly DerObjectIdentifier id_PK_ECDH = new DerObjectIdentifier(id_PK + ".2"); - - // id-CA OBJECT IDENTIFIER ::= { - // bsi-de protocols(2) smartcard(2) 3 - // } - public static readonly DerObjectIdentifier id_CA = new DerObjectIdentifier(bsi_de + ".2.2.3"); - public static readonly DerObjectIdentifier id_CA_DH = new DerObjectIdentifier(id_CA + ".1"); - public static readonly DerObjectIdentifier id_CA_DH_3DES_CBC_CBC = new DerObjectIdentifier(id_CA_DH + ".1"); - public static readonly DerObjectIdentifier id_CA_ECDH = new DerObjectIdentifier(id_CA + ".2"); - public static readonly DerObjectIdentifier id_CA_ECDH_3DES_CBC_CBC = new DerObjectIdentifier(id_CA_ECDH + ".1"); - - // - // id-TA OBJECT IDENTIFIER ::= { - // bsi-de protocols(2) smartcard(2) 2 - // } - public static readonly DerObjectIdentifier id_TA = new DerObjectIdentifier(bsi_de + ".2.2.2"); - - public static readonly DerObjectIdentifier id_TA_RSA = new DerObjectIdentifier(id_TA + ".1"); - public static readonly DerObjectIdentifier id_TA_RSA_v1_5_SHA_1 = new DerObjectIdentifier(id_TA_RSA + ".1"); - public static readonly DerObjectIdentifier id_TA_RSA_v1_5_SHA_256 = new DerObjectIdentifier(id_TA_RSA + ".2"); - public static readonly DerObjectIdentifier id_TA_RSA_PSS_SHA_1 = new DerObjectIdentifier(id_TA_RSA + ".3"); - public static readonly DerObjectIdentifier id_TA_RSA_PSS_SHA_256 = new DerObjectIdentifier(id_TA_RSA + ".4"); - public static readonly DerObjectIdentifier id_TA_ECDSA = new DerObjectIdentifier(id_TA + ".2"); - public static readonly DerObjectIdentifier id_TA_ECDSA_SHA_1 = new DerObjectIdentifier(id_TA_ECDSA + ".1"); - public static readonly DerObjectIdentifier id_TA_ECDSA_SHA_224 = new DerObjectIdentifier(id_TA_ECDSA + ".2"); - public static readonly DerObjectIdentifier id_TA_ECDSA_SHA_256 = new DerObjectIdentifier(id_TA_ECDSA + ".3"); - public static readonly DerObjectIdentifier id_TA_ECDSA_SHA_384 = new DerObjectIdentifier(id_TA_ECDSA + ".4"); - public static readonly DerObjectIdentifier id_TA_ECDSA_SHA_512 = new DerObjectIdentifier(id_TA_ECDSA + ".5"); - } -} diff --git a/bc-sharp-crypto/src/asn1/esf/CertificateValues.cs b/bc-sharp-crypto/src/asn1/esf/CertificateValues.cs deleted file mode 100644 index 30a7191..0000000 --- a/bc-sharp-crypto/src/asn1/esf/CertificateValues.cs +++ /dev/null @@ -1,86 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Asn1.Esf -{ - /// - /// RFC 3126: 4.3.1 Certificate Values Attribute Definition - /// - /// CertificateValues ::= SEQUENCE OF Certificate - /// - /// - public class CertificateValues - : Asn1Encodable - { - private readonly Asn1Sequence certificates; - - public static CertificateValues GetInstance( - object obj) - { - if (obj == null || obj is CertificateValues) - return (CertificateValues) obj; - - if (obj is Asn1Sequence) - return new CertificateValues((Asn1Sequence) obj); - - throw new ArgumentException( - "Unknown object in 'CertificateValues' factory: " - + Platform.GetTypeName(obj), - "obj"); - } - - private CertificateValues( - Asn1Sequence seq) - { - if (seq == null) - throw new ArgumentNullException("seq"); - - foreach (Asn1Encodable ae in seq) - { - X509CertificateStructure.GetInstance(ae.ToAsn1Object()); - } - - this.certificates = seq; - } - - public CertificateValues( - params X509CertificateStructure[] certificates) - { - if (certificates == null) - throw new ArgumentNullException("certificates"); - - this.certificates = new DerSequence(certificates); - } - - public CertificateValues( - IEnumerable certificates) - { - if (certificates == null) - throw new ArgumentNullException("certificates"); - if (!CollectionUtilities.CheckElementsAreOfType(certificates, typeof(X509CertificateStructure))) - throw new ArgumentException("Must contain only 'X509CertificateStructure' objects", "certificates"); - - this.certificates = new DerSequence( - Asn1EncodableVector.FromEnumerable(certificates)); - } - - public X509CertificateStructure[] GetCertificates() - { - X509CertificateStructure[] result = new X509CertificateStructure[certificates.Count]; - for (int i = 0; i < certificates.Count; ++i) - { - result[i] = X509CertificateStructure.GetInstance(certificates[i]); - } - return result; - } - - public override Asn1Object ToAsn1Object() - { - return certificates; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/esf/CommitmentTypeIdentifier.cs b/bc-sharp-crypto/src/asn1/esf/CommitmentTypeIdentifier.cs deleted file mode 100644 index 65cd45b..0000000 --- a/bc-sharp-crypto/src/asn1/esf/CommitmentTypeIdentifier.cs +++ /dev/null @@ -1,17 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Pkcs; - -namespace Org.BouncyCastle.Asn1.Esf -{ - public abstract class CommitmentTypeIdentifier - { - public static readonly DerObjectIdentifier ProofOfOrigin = PkcsObjectIdentifiers.IdCtiEtsProofOfOrigin; - public static readonly DerObjectIdentifier ProofOfReceipt = PkcsObjectIdentifiers.IdCtiEtsProofOfReceipt; - public static readonly DerObjectIdentifier ProofOfDelivery = PkcsObjectIdentifiers.IdCtiEtsProofOfDelivery; - public static readonly DerObjectIdentifier ProofOfSender = PkcsObjectIdentifiers.IdCtiEtsProofOfSender; - public static readonly DerObjectIdentifier ProofOfApproval = PkcsObjectIdentifiers.IdCtiEtsProofOfApproval; - public static readonly DerObjectIdentifier ProofOfCreation = PkcsObjectIdentifiers.IdCtiEtsProofOfCreation; - } -} diff --git a/bc-sharp-crypto/src/asn1/esf/CommitmentTypeIndication.cs b/bc-sharp-crypto/src/asn1/esf/CommitmentTypeIndication.cs deleted file mode 100644 index 196a613..0000000 --- a/bc-sharp-crypto/src/asn1/esf/CommitmentTypeIndication.cs +++ /dev/null @@ -1,95 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Esf -{ - public class CommitmentTypeIndication - : Asn1Encodable - { - private readonly DerObjectIdentifier commitmentTypeId; - private readonly Asn1Sequence commitmentTypeQualifier; - - public static CommitmentTypeIndication GetInstance( - object obj) - { - if (obj == null || obj is CommitmentTypeIndication) - return (CommitmentTypeIndication) obj; - - if (obj is Asn1Sequence) - return new CommitmentTypeIndication((Asn1Sequence) obj); - - throw new ArgumentException( - "Unknown object in 'CommitmentTypeIndication' factory: " - + Platform.GetTypeName(obj), - "obj"); - } - - public CommitmentTypeIndication( - Asn1Sequence seq) - { - if (seq == null) - throw new ArgumentNullException("seq"); - if (seq.Count < 1 || seq.Count > 2) - throw new ArgumentException("Bad sequence size: " + seq.Count, "seq"); - - this.commitmentTypeId = (DerObjectIdentifier) seq[0].ToAsn1Object(); - - if (seq.Count > 1) - { - this.commitmentTypeQualifier = (Asn1Sequence) seq[1].ToAsn1Object(); - } - } - - public CommitmentTypeIndication( - DerObjectIdentifier commitmentTypeId) - : this(commitmentTypeId, null) - { - } - - public CommitmentTypeIndication( - DerObjectIdentifier commitmentTypeId, - Asn1Sequence commitmentTypeQualifier) - { - if (commitmentTypeId == null) - throw new ArgumentNullException("commitmentTypeId"); - - this.commitmentTypeId = commitmentTypeId; - - if (commitmentTypeQualifier != null) - { - this.commitmentTypeQualifier = commitmentTypeQualifier; - } - } - - public DerObjectIdentifier CommitmentTypeID - { - get { return commitmentTypeId; } - } - - public Asn1Sequence CommitmentTypeQualifier - { - get { return commitmentTypeQualifier; } - } - - /** - * 
-        * CommitmentTypeIndication ::= SEQUENCE {
-        *      commitmentTypeId   CommitmentTypeIdentifier,
-        *      commitmentTypeQualifier   SEQUENCE SIZE (1..MAX) OF
-        *              CommitmentTypeQualifier OPTIONAL }
-        *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(commitmentTypeId); - - if (commitmentTypeQualifier != null) - { - v.Add(commitmentTypeQualifier); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/esf/CommitmentTypeQualifier.cs b/bc-sharp-crypto/src/asn1/esf/CommitmentTypeQualifier.cs deleted file mode 100644 index 30bf0ed..0000000 --- a/bc-sharp-crypto/src/asn1/esf/CommitmentTypeQualifier.cs +++ /dev/null @@ -1,119 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Esf -{ - /** - * Commitment type qualifiers, used in the Commitment-Type-Indication attribute (RFC3126). - * - * 
-    *   CommitmentTypeQualifier ::= SEQUENCE {
-    *       commitmentTypeIdentifier  CommitmentTypeIdentifier,
-    *       qualifier          ANY DEFINED BY commitmentTypeIdentifier OPTIONAL }
-    *
- */ - public class CommitmentTypeQualifier - : Asn1Encodable - { - private readonly DerObjectIdentifier commitmentTypeIdentifier; - private readonly Asn1Object qualifier; - - /** - * Creates a new CommitmentTypeQualifier instance. - * - * @param commitmentTypeIdentifier a CommitmentTypeIdentifier value - */ - public CommitmentTypeQualifier( - DerObjectIdentifier commitmentTypeIdentifier) - : this(commitmentTypeIdentifier, null) - { - } - - /** - * Creates a new CommitmentTypeQualifier instance. - * - * @param commitmentTypeIdentifier a CommitmentTypeIdentifier value - * @param qualifier the qualifier, defined by the above field. - */ - public CommitmentTypeQualifier( - DerObjectIdentifier commitmentTypeIdentifier, - Asn1Encodable qualifier) - { - if (commitmentTypeIdentifier == null) - throw new ArgumentNullException("commitmentTypeIdentifier"); - - this.commitmentTypeIdentifier = commitmentTypeIdentifier; - - if (qualifier != null) - { - this.qualifier = qualifier.ToAsn1Object(); - } - } - - /** - * Creates a new CommitmentTypeQualifier instance. - * - * @param as CommitmentTypeQualifier structure - * encoded as an Asn1Sequence. - */ - public CommitmentTypeQualifier( - Asn1Sequence seq) - { - if (seq == null) - throw new ArgumentNullException("seq"); - if (seq.Count < 1 || seq.Count > 2) - throw new ArgumentException("Bad sequence size: " + seq.Count, "seq"); - - commitmentTypeIdentifier = (DerObjectIdentifier) seq[0].ToAsn1Object(); - - if (seq.Count > 1) - { - qualifier = seq[1].ToAsn1Object(); - } - } - - public static CommitmentTypeQualifier GetInstance( - object obj) - { - if (obj == null || obj is CommitmentTypeQualifier) - return (CommitmentTypeQualifier) obj; - - if (obj is Asn1Sequence) - return new CommitmentTypeQualifier((Asn1Sequence) obj); - - throw new ArgumentException( - "Unknown object in 'CommitmentTypeQualifier' factory: " - + Platform.GetTypeName(obj), - "obj"); - } - - public DerObjectIdentifier CommitmentTypeIdentifier - { - get { return commitmentTypeIdentifier; } - } - - public Asn1Object Qualifier - { - get { return qualifier; } - } - - /** - * Returns a DER-encodable representation of this instance. - * - * @return a Asn1Object value - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector( - commitmentTypeIdentifier); - - if (qualifier != null) - { - v.Add(qualifier); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/esf/CompleteCertificateRefs.cs b/bc-sharp-crypto/src/asn1/esf/CompleteCertificateRefs.cs deleted file mode 100644 index af93700..0000000 --- a/bc-sharp-crypto/src/asn1/esf/CompleteCertificateRefs.cs +++ /dev/null @@ -1,85 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Asn1.Esf -{ - /// - /// RFC 3126: 4.2.1 Complete Certificate Refs Attribute Definition - /// - /// CompleteCertificateRefs ::= SEQUENCE OF OtherCertID - /// - /// - public class CompleteCertificateRefs - : Asn1Encodable - { - private readonly Asn1Sequence otherCertIDs; - - public static CompleteCertificateRefs GetInstance( - object obj) - { - if (obj == null || obj is CompleteCertificateRefs) - return (CompleteCertificateRefs) obj; - - if (obj is Asn1Sequence) - return new CompleteCertificateRefs((Asn1Sequence) obj); - - throw new ArgumentException( - "Unknown object in 'CompleteCertificateRefs' factory: " - + Platform.GetTypeName(obj), - "obj"); - } - - private CompleteCertificateRefs( - Asn1Sequence seq) - { - if (seq == null) - throw new ArgumentNullException("seq"); - - foreach (Asn1Encodable ae in seq) - { - OtherCertID.GetInstance(ae.ToAsn1Object()); - } - - this.otherCertIDs = seq; - } - - public CompleteCertificateRefs( - params OtherCertID[] otherCertIDs) - { - if (otherCertIDs == null) - throw new ArgumentNullException("otherCertIDs"); - - this.otherCertIDs = new DerSequence(otherCertIDs); - } - - public CompleteCertificateRefs( - IEnumerable otherCertIDs) - { - if (otherCertIDs == null) - throw new ArgumentNullException("otherCertIDs"); - if (!CollectionUtilities.CheckElementsAreOfType(otherCertIDs, typeof(OtherCertID))) - throw new ArgumentException("Must contain only 'OtherCertID' objects", "otherCertIDs"); - - this.otherCertIDs = new DerSequence( - Asn1EncodableVector.FromEnumerable(otherCertIDs)); - } - - public OtherCertID[] GetOtherCertIDs() - { - OtherCertID[] result = new OtherCertID[otherCertIDs.Count]; - for (int i = 0; i < otherCertIDs.Count; ++i) - { - result[i] = OtherCertID.GetInstance(otherCertIDs[i].ToAsn1Object()); - } - return result; - } - - public override Asn1Object ToAsn1Object() - { - return otherCertIDs; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/esf/CompleteRevocationRefs.cs b/bc-sharp-crypto/src/asn1/esf/CompleteRevocationRefs.cs deleted file mode 100644 index 348e63f..0000000 --- a/bc-sharp-crypto/src/asn1/esf/CompleteRevocationRefs.cs +++ /dev/null @@ -1,85 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Asn1.Esf -{ - /// - /// RFC 3126: 4.2.2 Complete Revocation Refs Attribute Definition - /// - /// CompleteRevocationRefs ::= SEQUENCE OF CrlOcspRef - /// - /// - public class CompleteRevocationRefs - : Asn1Encodable - { - private readonly Asn1Sequence crlOcspRefs; - - public static CompleteRevocationRefs GetInstance( - object obj) - { - if (obj == null || obj is CompleteRevocationRefs) - return (CompleteRevocationRefs) obj; - - if (obj is Asn1Sequence) - return new CompleteRevocationRefs((Asn1Sequence) obj); - - throw new ArgumentException( - "Unknown object in 'CompleteRevocationRefs' factory: " - + Platform.GetTypeName(obj), - "obj"); - } - - private CompleteRevocationRefs( - Asn1Sequence seq) - { - if (seq == null) - throw new ArgumentNullException("seq"); - - foreach (Asn1Encodable ae in seq) - { - CrlOcspRef.GetInstance(ae.ToAsn1Object()); - } - - this.crlOcspRefs = seq; - } - - public CompleteRevocationRefs( - params CrlOcspRef[] crlOcspRefs) - { - if (crlOcspRefs == null) - throw new ArgumentNullException("crlOcspRefs"); - - this.crlOcspRefs = new DerSequence(crlOcspRefs); - } - - public CompleteRevocationRefs( - IEnumerable crlOcspRefs) - { - if (crlOcspRefs == null) - throw new ArgumentNullException("crlOcspRefs"); - if (!CollectionUtilities.CheckElementsAreOfType(crlOcspRefs, typeof(CrlOcspRef))) - throw new ArgumentException("Must contain only 'CrlOcspRef' objects", "crlOcspRefs"); - - this.crlOcspRefs = new DerSequence( - Asn1EncodableVector.FromEnumerable(crlOcspRefs)); - } - - public CrlOcspRef[] GetCrlOcspRefs() - { - CrlOcspRef[] result = new CrlOcspRef[crlOcspRefs.Count]; - for (int i = 0; i < crlOcspRefs.Count; ++i) - { - result[i] = CrlOcspRef.GetInstance(crlOcspRefs[i].ToAsn1Object()); - } - return result; - } - - public override Asn1Object ToAsn1Object() - { - return crlOcspRefs; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/esf/CrlIdentifier.cs b/bc-sharp-crypto/src/asn1/esf/CrlIdentifier.cs deleted file mode 100644 index 96b50e2..0000000 --- a/bc-sharp-crypto/src/asn1/esf/CrlIdentifier.cs +++ /dev/null @@ -1,111 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Esf -{ - /// - /// RFC 3126: 4.2.2 Complete Revocation Refs Attribute Definition - /// - /// CrlIdentifier ::= SEQUENCE - /// { - /// crlissuer Name, - /// crlIssuedTime UTCTime, - /// crlNumber INTEGER OPTIONAL - /// } - /// - /// - public class CrlIdentifier - : Asn1Encodable - { - private readonly X509Name crlIssuer; - private readonly DerUtcTime crlIssuedTime; - private readonly DerInteger crlNumber; - - public static CrlIdentifier GetInstance( - object obj) - { - if (obj == null || obj is CrlIdentifier) - return (CrlIdentifier) obj; - - if (obj is Asn1Sequence) - return new CrlIdentifier((Asn1Sequence) obj); - - throw new ArgumentException( - "Unknown object in 'CrlIdentifier' factory: " - + Platform.GetTypeName(obj), - "obj"); - } - - private CrlIdentifier( - Asn1Sequence seq) - { - if (seq == null) - throw new ArgumentNullException("seq"); - if (seq.Count < 2 || seq.Count > 3) - throw new ArgumentException("Bad sequence size: " + seq.Count, "seq"); - - this.crlIssuer = X509Name.GetInstance(seq[0]); - this.crlIssuedTime = DerUtcTime.GetInstance(seq[1]); - - if (seq.Count > 2) - { - this.crlNumber = DerInteger.GetInstance(seq[2]); - } - } - - public CrlIdentifier( - X509Name crlIssuer, - DateTime crlIssuedTime) - : this(crlIssuer, crlIssuedTime, null) - { - } - - public CrlIdentifier( - X509Name crlIssuer, - DateTime crlIssuedTime, - BigInteger crlNumber) - { - if (crlIssuer == null) - throw new ArgumentNullException("crlIssuer"); - - this.crlIssuer = crlIssuer; - this.crlIssuedTime = new DerUtcTime(crlIssuedTime); - - if (crlNumber != null) - { - this.crlNumber = new DerInteger(crlNumber); - } - } - - public X509Name CrlIssuer - { - get { return crlIssuer; } - } - - public DateTime CrlIssuedTime - { - get { return crlIssuedTime.ToAdjustedDateTime(); } - } - - public BigInteger CrlNumber - { - get { return crlNumber == null ? null : crlNumber.Value; } - } - - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector( - crlIssuer.ToAsn1Object(), crlIssuedTime); - - if (crlNumber != null) - { - v.Add(crlNumber); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/esf/CrlListID.cs b/bc-sharp-crypto/src/asn1/esf/CrlListID.cs deleted file mode 100644 index fbd4fb2..0000000 --- a/bc-sharp-crypto/src/asn1/esf/CrlListID.cs +++ /dev/null @@ -1,90 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Asn1.Esf -{ - /// - /// RFC 3126: 4.2.2 Complete Revocation Refs Attribute Definition - /// - /// CRLListID ::= SEQUENCE - /// { - /// crls SEQUENCE OF CrlValidatedID - /// } - /// - /// - public class CrlListID - : Asn1Encodable - { - private readonly Asn1Sequence crls; - - public static CrlListID GetInstance( - object obj) - { - if (obj == null || obj is CrlListID) - return (CrlListID) obj; - - if (obj is Asn1Sequence) - return new CrlListID((Asn1Sequence) obj); - - throw new ArgumentException( - "Unknown object in 'CrlListID' factory: " - + Platform.GetTypeName(obj), - "obj"); - } - - private CrlListID( - Asn1Sequence seq) - { - if (seq == null) - throw new ArgumentNullException("seq"); - if (seq.Count != 1) - throw new ArgumentException("Bad sequence size: " + seq.Count, "seq"); - - this.crls = (Asn1Sequence) seq[0].ToAsn1Object(); - - foreach (Asn1Encodable ae in this.crls) - { - CrlValidatedID.GetInstance(ae.ToAsn1Object()); - } - } - - public CrlListID( - params CrlValidatedID[] crls) - { - if (crls == null) - throw new ArgumentNullException("crls"); - - this.crls = new DerSequence(crls); - } - - public CrlListID( - IEnumerable crls) - { - if (crls == null) - throw new ArgumentNullException("crls"); - if (!CollectionUtilities.CheckElementsAreOfType(crls, typeof(CrlValidatedID))) - throw new ArgumentException("Must contain only 'CrlValidatedID' objects", "crls"); - - this.crls = new DerSequence( - Asn1EncodableVector.FromEnumerable(crls)); - } - - public CrlValidatedID[] GetCrls() - { - CrlValidatedID[] result = new CrlValidatedID[crls.Count]; - for (int i = 0; i < crls.Count; ++i) - { - result[i] = CrlValidatedID.GetInstance(crls[i].ToAsn1Object()); - } - return result; - } - - public override Asn1Object ToAsn1Object() - { - return new DerSequence(crls); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/esf/CrlOcspRef.cs b/bc-sharp-crypto/src/asn1/esf/CrlOcspRef.cs deleted file mode 100644 index 6153e0c..0000000 --- a/bc-sharp-crypto/src/asn1/esf/CrlOcspRef.cs +++ /dev/null @@ -1,113 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Esf -{ - /// - /// RFC 3126: 4.2.2 Complete Revocation Refs Attribute Definition - /// - /// CrlOcspRef ::= SEQUENCE { - /// crlids [0] CRLListID OPTIONAL, - /// ocspids [1] OcspListID OPTIONAL, - /// otherRev [2] OtherRevRefs OPTIONAL - /// } - /// - /// - public class CrlOcspRef - : Asn1Encodable - { - private readonly CrlListID crlids; - private readonly OcspListID ocspids; - private readonly OtherRevRefs otherRev; - - public static CrlOcspRef GetInstance( - object obj) - { - if (obj == null || obj is CrlOcspRef) - return (CrlOcspRef) obj; - - if (obj is Asn1Sequence) - return new CrlOcspRef((Asn1Sequence) obj); - - throw new ArgumentException( - "Unknown object in 'CrlOcspRef' factory: " - + Platform.GetTypeName(obj), - "obj"); - } - - private CrlOcspRef( - Asn1Sequence seq) - { - if (seq == null) - throw new ArgumentNullException("seq"); - - foreach (Asn1TaggedObject taggedObj in seq) - { - Asn1Object asn1Obj = taggedObj.GetObject(); - - switch (taggedObj.TagNo) - { - case 0: - this.crlids = CrlListID.GetInstance(asn1Obj); - break; - case 1: - this.ocspids = OcspListID.GetInstance(asn1Obj); - break; - case 2: - this.otherRev = OtherRevRefs.GetInstance(asn1Obj); - break; - default: - throw new ArgumentException("Illegal tag in CrlOcspRef", "seq"); - } - } - } - - public CrlOcspRef( - CrlListID crlids, - OcspListID ocspids, - OtherRevRefs otherRev) - { - this.crlids = crlids; - this.ocspids = ocspids; - this.otherRev = otherRev; - } - - public CrlListID CrlIDs - { - get { return crlids; } - } - - public OcspListID OcspIDs - { - get { return ocspids; } - } - - public OtherRevRefs OtherRev - { - get { return otherRev; } - } - - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - if (crlids != null) - { - v.Add(new DerTaggedObject(true, 0, crlids.ToAsn1Object())); - } - - if (ocspids != null) - { - v.Add(new DerTaggedObject(true, 1, ocspids.ToAsn1Object())); - } - - if (otherRev != null) - { - v.Add(new DerTaggedObject(true, 2, otherRev.ToAsn1Object())); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/esf/CrlValidatedID.cs b/bc-sharp-crypto/src/asn1/esf/CrlValidatedID.cs deleted file mode 100644 index e8cd17a..0000000 --- a/bc-sharp-crypto/src/asn1/esf/CrlValidatedID.cs +++ /dev/null @@ -1,91 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Esf -{ - /// - /// RFC 3126: 4.2.2 Complete Revocation Refs Attribute Definition - /// - /// CrlValidatedID ::= SEQUENCE { - /// crlHash OtherHash, - /// crlIdentifier CrlIdentifier OPTIONAL} - /// - /// - public class CrlValidatedID - : Asn1Encodable - { - private readonly OtherHash crlHash; - private readonly CrlIdentifier crlIdentifier; - - public static CrlValidatedID GetInstance( - object obj) - { - if (obj == null || obj is CrlValidatedID) - return (CrlValidatedID) obj; - - if (obj is Asn1Sequence) - return new CrlValidatedID((Asn1Sequence) obj); - - throw new ArgumentException( - "Unknown object in 'CrlValidatedID' factory: " - + Platform.GetTypeName(obj), - "obj"); - } - - private CrlValidatedID( - Asn1Sequence seq) - { - if (seq == null) - throw new ArgumentNullException("seq"); - if (seq.Count < 1 || seq.Count > 2) - throw new ArgumentException("Bad sequence size: " + seq.Count, "seq"); - - this.crlHash = OtherHash.GetInstance(seq[0].ToAsn1Object()); - - if (seq.Count > 1) - { - this.crlIdentifier = CrlIdentifier.GetInstance(seq[1].ToAsn1Object()); - } - } - - public CrlValidatedID( - OtherHash crlHash) - : this(crlHash, null) - { - } - - public CrlValidatedID( - OtherHash crlHash, - CrlIdentifier crlIdentifier) - { - if (crlHash == null) - throw new ArgumentNullException("crlHash"); - - this.crlHash = crlHash; - this.crlIdentifier = crlIdentifier; - } - - public OtherHash CrlHash - { - get { return crlHash; } - } - - public CrlIdentifier CrlIdentifier - { - get { return crlIdentifier; } - } - - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(crlHash.ToAsn1Object()); - - if (crlIdentifier != null) - { - v.Add(crlIdentifier.ToAsn1Object()); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/esf/ESFAttributes.cs b/bc-sharp-crypto/src/asn1/esf/ESFAttributes.cs deleted file mode 100644 index 9401ffb..0000000 --- a/bc-sharp-crypto/src/asn1/esf/ESFAttributes.cs +++ /dev/null @@ -1,25 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Pkcs; - -namespace Org.BouncyCastle.Asn1.Esf -{ - public abstract class EsfAttributes - { - public static readonly DerObjectIdentifier SigPolicyId = PkcsObjectIdentifiers.IdAAEtsSigPolicyID; - public static readonly DerObjectIdentifier CommitmentType = PkcsObjectIdentifiers.IdAAEtsCommitmentType; - public static readonly DerObjectIdentifier SignerLocation = PkcsObjectIdentifiers.IdAAEtsSignerLocation; - public static readonly DerObjectIdentifier SignerAttr = PkcsObjectIdentifiers.IdAAEtsSignerAttr; - public static readonly DerObjectIdentifier OtherSigCert = PkcsObjectIdentifiers.IdAAEtsOtherSigCert; - public static readonly DerObjectIdentifier ContentTimestamp = PkcsObjectIdentifiers.IdAAEtsContentTimestamp; - public static readonly DerObjectIdentifier CertificateRefs = PkcsObjectIdentifiers.IdAAEtsCertificateRefs; - public static readonly DerObjectIdentifier RevocationRefs = PkcsObjectIdentifiers.IdAAEtsRevocationRefs; - public static readonly DerObjectIdentifier CertValues = PkcsObjectIdentifiers.IdAAEtsCertValues; - public static readonly DerObjectIdentifier RevocationValues = PkcsObjectIdentifiers.IdAAEtsRevocationValues; - public static readonly DerObjectIdentifier EscTimeStamp = PkcsObjectIdentifiers.IdAAEtsEscTimeStamp; - public static readonly DerObjectIdentifier CertCrlTimestamp = PkcsObjectIdentifiers.IdAAEtsCertCrlTimestamp; - public static readonly DerObjectIdentifier ArchiveTimestamp = PkcsObjectIdentifiers.IdAAEtsArchiveTimestamp; - public static readonly DerObjectIdentifier ArchiveTimestampV2 = new DerObjectIdentifier(PkcsObjectIdentifiers.IdAA + ".48"); - } -} diff --git a/bc-sharp-crypto/src/asn1/esf/OcspIdentifier.cs b/bc-sharp-crypto/src/asn1/esf/OcspIdentifier.cs deleted file mode 100644 index e65f1cf..0000000 --- a/bc-sharp-crypto/src/asn1/esf/OcspIdentifier.cs +++ /dev/null @@ -1,78 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.Ocsp; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Esf -{ - /// - /// RFC 3126: 4.2.2 Complete Revocation Refs Attribute Definition - /// - /// OcspIdentifier ::= SEQUENCE { - /// ocspResponderID ResponderID, - /// -- As in OCSP response data - /// producedAt GeneralizedTime - /// -- As in OCSP response data - /// } - /// - /// - public class OcspIdentifier - : Asn1Encodable - { - private readonly ResponderID ocspResponderID; - private readonly DerGeneralizedTime producedAt; - - public static OcspIdentifier GetInstance( - object obj) - { - if (obj == null || obj is OcspIdentifier) - return (OcspIdentifier) obj; - - if (obj is Asn1Sequence) - return new OcspIdentifier((Asn1Sequence) obj); - - throw new ArgumentException( - "Unknown object in 'OcspIdentifier' factory: " - + Platform.GetTypeName(obj), - "obj"); - } - - private OcspIdentifier( - Asn1Sequence seq) - { - if (seq == null) - throw new ArgumentNullException("seq"); - if (seq.Count != 2) - throw new ArgumentException("Bad sequence size: " + seq.Count, "seq"); - - this.ocspResponderID = ResponderID.GetInstance(seq[0].ToAsn1Object()); - this.producedAt = (DerGeneralizedTime) seq[1].ToAsn1Object(); - } - - public OcspIdentifier( - ResponderID ocspResponderID, - DateTime producedAt) - { - if (ocspResponderID == null) - throw new ArgumentNullException(); - - this.ocspResponderID = ocspResponderID; - this.producedAt = new DerGeneralizedTime(producedAt); - } - - public ResponderID OcspResponderID - { - get { return ocspResponderID; } - } - - public DateTime ProducedAt - { - get { return producedAt.ToDateTime(); } - } - - public override Asn1Object ToAsn1Object() - { - return new DerSequence(ocspResponderID, producedAt); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/esf/OcspListID.cs b/bc-sharp-crypto/src/asn1/esf/OcspListID.cs deleted file mode 100644 index 1c8edb1..0000000 --- a/bc-sharp-crypto/src/asn1/esf/OcspListID.cs +++ /dev/null @@ -1,89 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Asn1.Esf -{ - /// - /// RFC 3126: 4.2.2 Complete Revocation Refs Attribute Definition - /// - /// OcspListID ::= SEQUENCE { - /// ocspResponses SEQUENCE OF OcspResponsesID - /// } - /// - /// - public class OcspListID - : Asn1Encodable - { - private readonly Asn1Sequence ocspResponses; - - public static OcspListID GetInstance( - object obj) - { - if (obj == null || obj is OcspListID) - return (OcspListID) obj; - - if (obj is Asn1Sequence) - return new OcspListID((Asn1Sequence) obj); - - throw new ArgumentException( - "Unknown object in 'OcspListID' factory: " - + Platform.GetTypeName(obj), - "obj"); - } - - private OcspListID( - Asn1Sequence seq) - { - if (seq == null) - throw new ArgumentNullException("seq"); - if (seq.Count != 1) - throw new ArgumentException("Bad sequence size: " + seq.Count, "seq"); - - this.ocspResponses = (Asn1Sequence) seq[0].ToAsn1Object(); - - foreach (Asn1Encodable ae in this.ocspResponses) - { - OcspResponsesID.GetInstance(ae.ToAsn1Object()); - } - } - - public OcspListID( - params OcspResponsesID[] ocspResponses) - { - if (ocspResponses == null) - throw new ArgumentNullException("ocspResponses"); - - this.ocspResponses = new DerSequence(ocspResponses); - } - - public OcspListID( - IEnumerable ocspResponses) - { - if (ocspResponses == null) - throw new ArgumentNullException("ocspResponses"); - if (!CollectionUtilities.CheckElementsAreOfType(ocspResponses, typeof(OcspResponsesID))) - throw new ArgumentException("Must contain only 'OcspResponsesID' objects", "ocspResponses"); - - this.ocspResponses = new DerSequence( - Asn1EncodableVector.FromEnumerable(ocspResponses)); - } - - public OcspResponsesID[] GetOcspResponses() - { - OcspResponsesID[] result = new OcspResponsesID[ocspResponses.Count]; - for (int i = 0; i < ocspResponses.Count; ++i) - { - result[i] = OcspResponsesID.GetInstance(ocspResponses[i].ToAsn1Object()); - } - return result; - } - - public override Asn1Object ToAsn1Object() - { - return new DerSequence(ocspResponses); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/esf/OcspResponsesID.cs b/bc-sharp-crypto/src/asn1/esf/OcspResponsesID.cs deleted file mode 100644 index 8718188..0000000 --- a/bc-sharp-crypto/src/asn1/esf/OcspResponsesID.cs +++ /dev/null @@ -1,94 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Esf -{ - /// - /// RFC 3126: 4.2.2 Complete Revocation Refs Attribute Definition - /// - /// OcspResponsesID ::= SEQUENCE { - /// ocspIdentifier OcspIdentifier, - /// ocspRepHash OtherHash OPTIONAL - /// } - /// - /// - public class OcspResponsesID - : Asn1Encodable - { - private readonly OcspIdentifier ocspIdentifier; - private readonly OtherHash ocspRepHash; - - public static OcspResponsesID GetInstance( - object obj) - { - if (obj == null || obj is OcspResponsesID) - return (OcspResponsesID) obj; - - if (obj is Asn1Sequence) - return new OcspResponsesID((Asn1Sequence) obj); - - throw new ArgumentException( - "Unknown object in 'OcspResponsesID' factory: " - + Platform.GetTypeName(obj), - "obj"); - } - - private OcspResponsesID( - Asn1Sequence seq) - { - if (seq == null) - throw new ArgumentNullException("seq"); - if (seq.Count < 1 || seq.Count > 2) - throw new ArgumentException("Bad sequence size: " + seq.Count, "seq"); - - this.ocspIdentifier = OcspIdentifier.GetInstance(seq[0].ToAsn1Object()); - - if (seq.Count > 1) - { - this.ocspRepHash = OtherHash.GetInstance(seq[1].ToAsn1Object()); - } - } - - public OcspResponsesID( - OcspIdentifier ocspIdentifier) - : this(ocspIdentifier, null) - { - } - - public OcspResponsesID( - OcspIdentifier ocspIdentifier, - OtherHash ocspRepHash) - { - if (ocspIdentifier == null) - throw new ArgumentNullException("ocspIdentifier"); - - this.ocspIdentifier = ocspIdentifier; - this.ocspRepHash = ocspRepHash; - } - - public OcspIdentifier OcspIdentifier - { - get { return ocspIdentifier; } - } - - public OtherHash OcspRepHash - { - get { return ocspRepHash; } - } - - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector( - ocspIdentifier.ToAsn1Object()); - - if (ocspRepHash != null) - { - v.Add(ocspRepHash.ToAsn1Object()); - } - - return new DerSequence(v); - } - - } -} diff --git a/bc-sharp-crypto/src/asn1/esf/OtherCertID.cs b/bc-sharp-crypto/src/asn1/esf/OtherCertID.cs deleted file mode 100644 index 19d173a..0000000 --- a/bc-sharp-crypto/src/asn1/esf/OtherCertID.cs +++ /dev/null @@ -1,94 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Esf -{ - /// - /// - /// OtherCertID ::= SEQUENCE { - /// otherCertHash OtherHash, - /// issuerSerial IssuerSerial OPTIONAL - /// } - /// - /// - public class OtherCertID - : Asn1Encodable - { - private readonly OtherHash otherCertHash; - private readonly IssuerSerial issuerSerial; - - public static OtherCertID GetInstance( - object obj) - { - if (obj == null || obj is OtherCertID) - return (OtherCertID) obj; - - if (obj is Asn1Sequence) - return new OtherCertID((Asn1Sequence) obj); - - throw new ArgumentException( - "Unknown object in 'OtherCertID' factory: " - + Platform.GetTypeName(obj), - "obj"); - } - - private OtherCertID( - Asn1Sequence seq) - { - if (seq == null) - throw new ArgumentNullException("seq"); - if (seq.Count < 1 || seq.Count > 2) - throw new ArgumentException("Bad sequence size: " + seq.Count, "seq"); - - this.otherCertHash = OtherHash.GetInstance(seq[0].ToAsn1Object()); - - if (seq.Count > 1) - { - this.issuerSerial = IssuerSerial.GetInstance(seq[1].ToAsn1Object()); - } - } - - public OtherCertID( - OtherHash otherCertHash) - : this(otherCertHash, null) - { - } - - public OtherCertID( - OtherHash otherCertHash, - IssuerSerial issuerSerial) - { - if (otherCertHash == null) - throw new ArgumentNullException("otherCertHash"); - - this.otherCertHash = otherCertHash; - this.issuerSerial = issuerSerial; - } - - public OtherHash OtherCertHash - { - get { return otherCertHash; } - } - - public IssuerSerial IssuerSerial - { - get { return issuerSerial; } - } - - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector( - otherCertHash.ToAsn1Object()); - - if (issuerSerial != null) - { - v.Add(issuerSerial.ToAsn1Object()); - } - - return new DerSequence(v); - } - - } -} diff --git a/bc-sharp-crypto/src/asn1/esf/OtherHash.cs b/bc-sharp-crypto/src/asn1/esf/OtherHash.cs deleted file mode 100644 index 2ee1624..0000000 --- a/bc-sharp-crypto/src/asn1/esf/OtherHash.cs +++ /dev/null @@ -1,88 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.Oiw; -using Org.BouncyCastle.Asn1.X509; - -namespace Org.BouncyCastle.Asn1.Esf -{ - /// - /// - /// OtherHash ::= CHOICE { - /// sha1Hash OtherHashValue, -- This contains a SHA-1 hash - /// otherHash OtherHashAlgAndValue - /// } - /// - /// OtherHashValue ::= OCTET STRING - /// - /// - public class OtherHash - : Asn1Encodable, IAsn1Choice - { - private readonly Asn1OctetString sha1Hash; - private readonly OtherHashAlgAndValue otherHash; - - public static OtherHash GetInstance( - object obj) - { - if (obj == null || obj is OtherHash) - return (OtherHash) obj; - - if (obj is Asn1OctetString) - return new OtherHash((Asn1OctetString) obj); - - return new OtherHash( - OtherHashAlgAndValue.GetInstance(obj)); - } - - public OtherHash( - byte[] sha1Hash) - { - if (sha1Hash == null) - throw new ArgumentNullException("sha1Hash"); - - this.sha1Hash = new DerOctetString(sha1Hash); - } - - public OtherHash( - Asn1OctetString sha1Hash) - { - if (sha1Hash == null) - throw new ArgumentNullException("sha1Hash"); - - this.sha1Hash = sha1Hash; - } - - public OtherHash( - OtherHashAlgAndValue otherHash) - { - if (otherHash == null) - throw new ArgumentNullException("otherHash"); - - this.otherHash = otherHash; - } - - public AlgorithmIdentifier HashAlgorithm - { - get - { - return otherHash == null - ? new AlgorithmIdentifier(OiwObjectIdentifiers.IdSha1) - : otherHash.HashAlgorithm; - } - } - - public byte[] GetHashValue() - { - return otherHash == null - ? sha1Hash.GetOctets() - : otherHash.GetHashValue(); - } - - public override Asn1Object ToAsn1Object() - { - return otherHash == null - ? sha1Hash - : otherHash.ToAsn1Object(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/esf/OtherHashAlgAndValue.cs b/bc-sharp-crypto/src/asn1/esf/OtherHashAlgAndValue.cs deleted file mode 100644 index 00eb24c..0000000 --- a/bc-sharp-crypto/src/asn1/esf/OtherHashAlgAndValue.cs +++ /dev/null @@ -1,95 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Esf -{ - /// - /// Summary description for OtherHashAlgAndValue. - /// - /// - /// - /// OtherHashAlgAndValue ::= SEQUENCE { - /// hashAlgorithm AlgorithmIdentifier, - /// hashValue OtherHashValue - /// } - /// - /// OtherHashValue ::= OCTET STRING - /// - /// - public class OtherHashAlgAndValue - : Asn1Encodable - { - private readonly AlgorithmIdentifier hashAlgorithm; - private readonly Asn1OctetString hashValue; - - public static OtherHashAlgAndValue GetInstance( - object obj) - { - if (obj == null || obj is OtherHashAlgAndValue) - return (OtherHashAlgAndValue) obj; - - if (obj is Asn1Sequence) - return new OtherHashAlgAndValue((Asn1Sequence) obj); - - throw new ArgumentException( - "Unknown object in 'OtherHashAlgAndValue' factory: " - + Platform.GetTypeName(obj), - "obj"); - } - - private OtherHashAlgAndValue( - Asn1Sequence seq) - { - if (seq == null) - throw new ArgumentNullException("seq"); - if (seq.Count != 2) - throw new ArgumentException("Bad sequence size: " + seq.Count, "seq"); - - this.hashAlgorithm = AlgorithmIdentifier.GetInstance(seq[0].ToAsn1Object()); - this.hashValue = (Asn1OctetString) seq[1].ToAsn1Object(); - } - - public OtherHashAlgAndValue( - AlgorithmIdentifier hashAlgorithm, - byte[] hashValue) - { - if (hashAlgorithm == null) - throw new ArgumentNullException("hashAlgorithm"); - if (hashValue == null) - throw new ArgumentNullException("hashValue"); - - this.hashAlgorithm = hashAlgorithm; - this.hashValue = new DerOctetString(hashValue); - } - - public OtherHashAlgAndValue( - AlgorithmIdentifier hashAlgorithm, - Asn1OctetString hashValue) - { - if (hashAlgorithm == null) - throw new ArgumentNullException("hashAlgorithm"); - if (hashValue == null) - throw new ArgumentNullException("hashValue"); - - this.hashAlgorithm = hashAlgorithm; - this.hashValue = hashValue; - } - - public AlgorithmIdentifier HashAlgorithm - { - get { return hashAlgorithm; } - } - - public byte[] GetHashValue() - { - return hashValue.GetOctets(); - } - - public override Asn1Object ToAsn1Object() - { - return new DerSequence(hashAlgorithm, hashValue); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/esf/OtherRevRefs.cs b/bc-sharp-crypto/src/asn1/esf/OtherRevRefs.cs deleted file mode 100644 index 446031e..0000000 --- a/bc-sharp-crypto/src/asn1/esf/OtherRevRefs.cs +++ /dev/null @@ -1,80 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Esf -{ - /// - /// RFC 3126: 4.2.2 Complete Revocation Refs Attribute Definition - /// - /// OtherRevRefs ::= SEQUENCE - /// { - /// otherRevRefType OtherRevRefType, - /// otherRevRefs ANY DEFINED BY otherRevRefType - /// } - /// - /// OtherRevRefType ::= OBJECT IDENTIFIER - /// - /// - public class OtherRevRefs - : Asn1Encodable - { - private readonly DerObjectIdentifier otherRevRefType; - private readonly Asn1Object otherRevRefs; - - public static OtherRevRefs GetInstance( - object obj) - { - if (obj == null || obj is OtherRevRefs) - return (OtherRevRefs) obj; - - if (obj is Asn1Sequence) - return new OtherRevRefs((Asn1Sequence) obj); - - throw new ArgumentException( - "Unknown object in 'OtherRevRefs' factory: " - + Platform.GetTypeName(obj), - "obj"); - } - - private OtherRevRefs( - Asn1Sequence seq) - { - if (seq == null) - throw new ArgumentNullException("seq"); - if (seq.Count != 2) - throw new ArgumentException("Bad sequence size: " + seq.Count, "seq"); - - this.otherRevRefType = (DerObjectIdentifier) seq[0].ToAsn1Object(); - this.otherRevRefs = seq[1].ToAsn1Object(); - } - - public OtherRevRefs( - DerObjectIdentifier otherRevRefType, - Asn1Encodable otherRevRefs) - { - if (otherRevRefType == null) - throw new ArgumentNullException("otherRevRefType"); - if (otherRevRefs == null) - throw new ArgumentNullException("otherRevRefs"); - - this.otherRevRefType = otherRevRefType; - this.otherRevRefs = otherRevRefs.ToAsn1Object(); - } - - public DerObjectIdentifier OtherRevRefType - { - get { return otherRevRefType; } - } - - public Asn1Object OtherRevRefsObject - { - get { return otherRevRefs; } - } - - public override Asn1Object ToAsn1Object() - { - return new DerSequence(otherRevRefType, otherRevRefs); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/esf/OtherRevVals.cs b/bc-sharp-crypto/src/asn1/esf/OtherRevVals.cs deleted file mode 100644 index 7b90456..0000000 --- a/bc-sharp-crypto/src/asn1/esf/OtherRevVals.cs +++ /dev/null @@ -1,80 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Esf -{ - /// - /// RFC 3126: 4.3.2 Revocation Values Attribute Definition - /// - /// OtherRevVals ::= SEQUENCE - /// { - /// otherRevValType OtherRevValType, - /// otherRevVals ANY DEFINED BY otherRevValType - /// } - /// - /// OtherRevValType ::= OBJECT IDENTIFIER - /// - /// - public class OtherRevVals - : Asn1Encodable - { - private readonly DerObjectIdentifier otherRevValType; - private readonly Asn1Object otherRevVals; - - public static OtherRevVals GetInstance( - object obj) - { - if (obj == null || obj is OtherRevVals) - return (OtherRevVals) obj; - - if (obj is Asn1Sequence) - return new OtherRevVals((Asn1Sequence) obj); - - throw new ArgumentException( - "Unknown object in 'OtherRevVals' factory: " - + Platform.GetTypeName(obj), - "obj"); - } - - private OtherRevVals( - Asn1Sequence seq) - { - if (seq == null) - throw new ArgumentNullException("seq"); - if (seq.Count != 2) - throw new ArgumentException("Bad sequence size: " + seq.Count, "seq"); - - this.otherRevValType = (DerObjectIdentifier) seq[0].ToAsn1Object(); - this.otherRevVals = seq[1].ToAsn1Object(); - } - - public OtherRevVals( - DerObjectIdentifier otherRevValType, - Asn1Encodable otherRevVals) - { - if (otherRevValType == null) - throw new ArgumentNullException("otherRevValType"); - if (otherRevVals == null) - throw new ArgumentNullException("otherRevVals"); - - this.otherRevValType = otherRevValType; - this.otherRevVals = otherRevVals.ToAsn1Object(); - } - - public DerObjectIdentifier OtherRevValType - { - get { return otherRevValType; } - } - - public Asn1Object OtherRevValsObject - { - get { return otherRevVals; } - } - - public override Asn1Object ToAsn1Object() - { - return new DerSequence(otherRevValType, otherRevVals); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/esf/OtherSigningCertificate.cs b/bc-sharp-crypto/src/asn1/esf/OtherSigningCertificate.cs deleted file mode 100644 index f7b9f5e..0000000 --- a/bc-sharp-crypto/src/asn1/esf/OtherSigningCertificate.cs +++ /dev/null @@ -1,139 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Asn1.Esf -{ - /// - /// - /// OtherSigningCertificate ::= SEQUENCE { - /// certs SEQUENCE OF OtherCertID, - /// policies SEQUENCE OF PolicyInformation OPTIONAL - /// } - /// - /// - public class OtherSigningCertificate - : Asn1Encodable - { - private readonly Asn1Sequence certs; - private readonly Asn1Sequence policies; - - public static OtherSigningCertificate GetInstance( - object obj) - { - if (obj == null || obj is OtherSigningCertificate) - return (OtherSigningCertificate) obj; - - if (obj is Asn1Sequence) - return new OtherSigningCertificate((Asn1Sequence) obj); - - throw new ArgumentException( - "Unknown object in 'OtherSigningCertificate' factory: " - + Platform.GetTypeName(obj), - "obj"); - } - - private OtherSigningCertificate( - Asn1Sequence seq) - { - if (seq == null) - throw new ArgumentNullException("seq"); - if (seq.Count < 1 || seq.Count > 2) - throw new ArgumentException("Bad sequence size: " + seq.Count, "seq"); - - this.certs = Asn1Sequence.GetInstance(seq[0].ToAsn1Object()); - - if (seq.Count > 1) - { - this.policies = Asn1Sequence.GetInstance(seq[1].ToAsn1Object()); - } - } - - public OtherSigningCertificate( - params OtherCertID[] certs) - : this(certs, null) - { - } - - public OtherSigningCertificate( - OtherCertID[] certs, - params PolicyInformation[] policies) - { - if (certs == null) - throw new ArgumentNullException("certs"); - - this.certs = new DerSequence(certs); - - if (policies != null) - { - this.policies = new DerSequence(policies); - } - } - - public OtherSigningCertificate( - IEnumerable certs) - : this(certs, null) - { - } - - public OtherSigningCertificate( - IEnumerable certs, - IEnumerable policies) - { - if (certs == null) - throw new ArgumentNullException("certs"); - if (!CollectionUtilities.CheckElementsAreOfType(certs, typeof(OtherCertID))) - throw new ArgumentException("Must contain only 'OtherCertID' objects", "certs"); - - this.certs = new DerSequence( - Asn1EncodableVector.FromEnumerable(certs)); - - if (policies != null) - { - if (!CollectionUtilities.CheckElementsAreOfType(policies, typeof(PolicyInformation))) - throw new ArgumentException("Must contain only 'PolicyInformation' objects", "policies"); - - this.policies = new DerSequence( - Asn1EncodableVector.FromEnumerable(policies)); - } - } - - public OtherCertID[] GetCerts() - { - OtherCertID[] cs = new OtherCertID[certs.Count]; - for (int i = 0; i < certs.Count; ++i) - { - cs[i] = OtherCertID.GetInstance(certs[i].ToAsn1Object()); - } - return cs; - } - - public PolicyInformation[] GetPolicies() - { - if (policies == null) - return null; - - PolicyInformation[] ps = new PolicyInformation[policies.Count]; - for (int i = 0; i < policies.Count; ++i) - { - ps[i] = PolicyInformation.GetInstance(policies[i].ToAsn1Object()); - } - return ps; - } - - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(certs); - - if (policies != null) - { - v.Add(policies); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/esf/RevocationValues.cs b/bc-sharp-crypto/src/asn1/esf/RevocationValues.cs deleted file mode 100644 index a7b47b4..0000000 --- a/bc-sharp-crypto/src/asn1/esf/RevocationValues.cs +++ /dev/null @@ -1,165 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1.Ocsp; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Asn1.Esf -{ - /// - /// RFC 5126: 6.3.4. revocation-values Attribute Definition - /// - /// RevocationValues ::= SEQUENCE { - /// crlVals [0] SEQUENCE OF CertificateList OPTIONAL, - /// ocspVals [1] SEQUENCE OF BasicOCSPResponse OPTIONAL, - /// otherRevVals [2] OtherRevVals OPTIONAL - /// } - /// - /// - public class RevocationValues - : Asn1Encodable - { - private readonly Asn1Sequence crlVals; - private readonly Asn1Sequence ocspVals; - private readonly OtherRevVals otherRevVals; - - public static RevocationValues GetInstance( - object obj) - { - if (obj == null || obj is RevocationValues) - return (RevocationValues) obj; - - return new RevocationValues(Asn1Sequence.GetInstance(obj)); - } - - private RevocationValues( - Asn1Sequence seq) - { - if (seq == null) - throw new ArgumentNullException("seq"); - if (seq.Count > 3) - throw new ArgumentException("Bad sequence size: " + seq.Count, "seq"); - - foreach (Asn1TaggedObject taggedObj in seq) - { - Asn1Object asn1Obj = taggedObj.GetObject(); - switch (taggedObj.TagNo) - { - case 0: - Asn1Sequence crlValsSeq = (Asn1Sequence) asn1Obj; - foreach (Asn1Encodable ae in crlValsSeq) - { - CertificateList.GetInstance(ae.ToAsn1Object()); - } - this.crlVals = crlValsSeq; - break; - case 1: - Asn1Sequence ocspValsSeq = (Asn1Sequence) asn1Obj; - foreach (Asn1Encodable ae in ocspValsSeq) - { - BasicOcspResponse.GetInstance(ae.ToAsn1Object()); - } - this.ocspVals = ocspValsSeq; - break; - case 2: - this.otherRevVals = OtherRevVals.GetInstance(asn1Obj); - break; - default: - throw new ArgumentException("Illegal tag in RevocationValues", "seq"); - } - } - } - - public RevocationValues( - CertificateList[] crlVals, - BasicOcspResponse[] ocspVals, - OtherRevVals otherRevVals) - { - if (crlVals != null) - { - this.crlVals = new DerSequence(crlVals); - } - - if (ocspVals != null) - { - this.ocspVals = new DerSequence(ocspVals); - } - - this.otherRevVals = otherRevVals; - } - - public RevocationValues( - IEnumerable crlVals, - IEnumerable ocspVals, - OtherRevVals otherRevVals) - { - if (crlVals != null) - { - if (!CollectionUtilities.CheckElementsAreOfType(crlVals, typeof(CertificateList))) - throw new ArgumentException("Must contain only 'CertificateList' objects", "crlVals"); - - this.crlVals = new DerSequence( - Asn1EncodableVector.FromEnumerable(crlVals)); - } - - if (ocspVals != null) - { - if (!CollectionUtilities.CheckElementsAreOfType(ocspVals, typeof(BasicOcspResponse))) - throw new ArgumentException("Must contain only 'BasicOcspResponse' objects", "ocspVals"); - - this.ocspVals = new DerSequence( - Asn1EncodableVector.FromEnumerable(ocspVals)); - } - - this.otherRevVals = otherRevVals; - } - - public CertificateList[] GetCrlVals() - { - CertificateList[] result = new CertificateList[crlVals.Count]; - for (int i = 0; i < crlVals.Count; ++i) - { - result[i] = CertificateList.GetInstance(crlVals[i].ToAsn1Object()); - } - return result; - } - - public BasicOcspResponse[] GetOcspVals() - { - BasicOcspResponse[] result = new BasicOcspResponse[ocspVals.Count]; - for (int i = 0; i < ocspVals.Count; ++i) - { - result[i] = BasicOcspResponse.GetInstance(ocspVals[i].ToAsn1Object()); - } - return result; - } - - public OtherRevVals OtherRevVals - { - get { return otherRevVals; } - } - - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - if (crlVals != null) - { - v.Add(new DerTaggedObject(true, 0, crlVals)); - } - - if (ocspVals != null) - { - v.Add(new DerTaggedObject(true, 1, ocspVals)); - } - - if (otherRevVals != null) - { - v.Add(new DerTaggedObject(true, 2, otherRevVals.ToAsn1Object())); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/esf/SigPolicyQualifierInfo.cs b/bc-sharp-crypto/src/asn1/esf/SigPolicyQualifierInfo.cs deleted file mode 100644 index 470c5c8..0000000 --- a/bc-sharp-crypto/src/asn1/esf/SigPolicyQualifierInfo.cs +++ /dev/null @@ -1,73 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Esf -{ - /// - /// - /// SigPolicyQualifierInfo ::= SEQUENCE { - /// sigPolicyQualifierId SigPolicyQualifierId, - /// sigQualifier ANY DEFINED BY sigPolicyQualifierId - /// } - /// - /// SigPolicyQualifierId ::= OBJECT IDENTIFIER - /// - /// - public class SigPolicyQualifierInfo - : Asn1Encodable - { - private readonly DerObjectIdentifier sigPolicyQualifierId; - private readonly Asn1Object sigQualifier; - - public static SigPolicyQualifierInfo GetInstance( - object obj) - { - if (obj == null || obj is SigPolicyQualifierInfo) - return (SigPolicyQualifierInfo) obj; - - if (obj is Asn1Sequence) - return new SigPolicyQualifierInfo((Asn1Sequence) obj); - - throw new ArgumentException( - "Unknown object in 'SigPolicyQualifierInfo' factory: " - + Platform.GetTypeName(obj), - "obj"); - } - - private SigPolicyQualifierInfo( - Asn1Sequence seq) - { - if (seq == null) - throw new ArgumentNullException("seq"); - if (seq.Count != 2) - throw new ArgumentException("Bad sequence size: " + seq.Count, "seq"); - - this.sigPolicyQualifierId = (DerObjectIdentifier) seq[0].ToAsn1Object(); - this.sigQualifier = seq[1].ToAsn1Object(); - } - - public SigPolicyQualifierInfo( - DerObjectIdentifier sigPolicyQualifierId, - Asn1Encodable sigQualifier) - { - this.sigPolicyQualifierId = sigPolicyQualifierId; - this.sigQualifier = sigQualifier.ToAsn1Object(); - } - - public DerObjectIdentifier SigPolicyQualifierId - { - get { return sigPolicyQualifierId; } - } - - public Asn1Object SigQualifier - { - get { return sigQualifier; } - } - - public override Asn1Object ToAsn1Object() - { - return new DerSequence(sigPolicyQualifierId, sigQualifier); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/esf/SignaturePolicyId.cs b/bc-sharp-crypto/src/asn1/esf/SignaturePolicyId.cs deleted file mode 100644 index 7146bb4..0000000 --- a/bc-sharp-crypto/src/asn1/esf/SignaturePolicyId.cs +++ /dev/null @@ -1,146 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Asn1.Esf -{ - /// - /// - /// SignaturePolicyId ::= SEQUENCE { - /// sigPolicyIdentifier SigPolicyId, - /// sigPolicyHash SigPolicyHash, - /// sigPolicyQualifiers SEQUENCE SIZE (1..MAX) OF SigPolicyQualifierInfo OPTIONAL - /// } - /// - /// SigPolicyId ::= OBJECT IDENTIFIER - /// - /// SigPolicyHash ::= OtherHashAlgAndValue - /// - /// - public class SignaturePolicyId - : Asn1Encodable - { - private readonly DerObjectIdentifier sigPolicyIdentifier; - private readonly OtherHashAlgAndValue sigPolicyHash; - private readonly Asn1Sequence sigPolicyQualifiers; - - public static SignaturePolicyId GetInstance( - object obj) - { - if (obj == null || obj is SignaturePolicyId) - return (SignaturePolicyId) obj; - - if (obj is Asn1Sequence) - return new SignaturePolicyId((Asn1Sequence) obj); - - throw new ArgumentException( - "Unknown object in 'SignaturePolicyId' factory: " - + Platform.GetTypeName(obj), - "obj"); - } - - private SignaturePolicyId( - Asn1Sequence seq) - { - if (seq == null) - throw new ArgumentNullException("seq"); - if (seq.Count < 2 || seq.Count > 3) - throw new ArgumentException("Bad sequence size: " + seq.Count, "seq"); - - this.sigPolicyIdentifier = (DerObjectIdentifier) seq[0].ToAsn1Object(); - this.sigPolicyHash = OtherHashAlgAndValue.GetInstance(seq[1].ToAsn1Object()); - - if (seq.Count > 2) - { - this.sigPolicyQualifiers = (Asn1Sequence) seq[2].ToAsn1Object(); - } - } - - public SignaturePolicyId( - DerObjectIdentifier sigPolicyIdentifier, - OtherHashAlgAndValue sigPolicyHash) - : this(sigPolicyIdentifier, sigPolicyHash, null) - { - } - - public SignaturePolicyId( - DerObjectIdentifier sigPolicyIdentifier, - OtherHashAlgAndValue sigPolicyHash, - params SigPolicyQualifierInfo[] sigPolicyQualifiers) - { - if (sigPolicyIdentifier == null) - throw new ArgumentNullException("sigPolicyIdentifier"); - if (sigPolicyHash == null) - throw new ArgumentNullException("sigPolicyHash"); - - this.sigPolicyIdentifier = sigPolicyIdentifier; - this.sigPolicyHash = sigPolicyHash; - - if (sigPolicyQualifiers != null) - { - this.sigPolicyQualifiers = new DerSequence(sigPolicyQualifiers); - } - } - - public SignaturePolicyId( - DerObjectIdentifier sigPolicyIdentifier, - OtherHashAlgAndValue sigPolicyHash, - IEnumerable sigPolicyQualifiers) - { - if (sigPolicyIdentifier == null) - throw new ArgumentNullException("sigPolicyIdentifier"); - if (sigPolicyHash == null) - throw new ArgumentNullException("sigPolicyHash"); - - this.sigPolicyIdentifier = sigPolicyIdentifier; - this.sigPolicyHash = sigPolicyHash; - - if (sigPolicyQualifiers != null) - { - if (!CollectionUtilities.CheckElementsAreOfType(sigPolicyQualifiers, typeof(SigPolicyQualifierInfo))) - throw new ArgumentException("Must contain only 'SigPolicyQualifierInfo' objects", "sigPolicyQualifiers"); - - this.sigPolicyQualifiers = new DerSequence( - Asn1EncodableVector.FromEnumerable(sigPolicyQualifiers)); - } - } - - public DerObjectIdentifier SigPolicyIdentifier - { - get { return sigPolicyIdentifier; } - } - - public OtherHashAlgAndValue SigPolicyHash - { - get { return sigPolicyHash; } - } - - public SigPolicyQualifierInfo[] GetSigPolicyQualifiers() - { - if (sigPolicyQualifiers == null) - return null; - - SigPolicyQualifierInfo[] infos = new SigPolicyQualifierInfo[sigPolicyQualifiers.Count]; - for (int i = 0; i < sigPolicyQualifiers.Count; ++i) - { - infos[i] = SigPolicyQualifierInfo.GetInstance(sigPolicyQualifiers[i]); - } - return infos; - } - - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector( - sigPolicyIdentifier, sigPolicyHash.ToAsn1Object()); - - if (sigPolicyQualifiers != null) - { - v.Add(sigPolicyQualifiers.ToAsn1Object()); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/esf/SignaturePolicyIdentifier.cs b/bc-sharp-crypto/src/asn1/esf/SignaturePolicyIdentifier.cs deleted file mode 100644 index 12257f2..0000000 --- a/bc-sharp-crypto/src/asn1/esf/SignaturePolicyIdentifier.cs +++ /dev/null @@ -1,66 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Esf -{ - /// - /// - /// SignaturePolicyIdentifier ::= CHOICE { - /// SignaturePolicyId SignaturePolicyId, - /// SignaturePolicyImplied SignaturePolicyImplied - /// } - /// - /// SignaturePolicyImplied ::= NULL - /// - /// - public class SignaturePolicyIdentifier - : Asn1Encodable, IAsn1Choice - { - private readonly SignaturePolicyId sigPolicy; - - public static SignaturePolicyIdentifier GetInstance( - object obj) - { - if (obj == null || obj is SignaturePolicyIdentifier) - return (SignaturePolicyIdentifier) obj; - - if (obj is SignaturePolicyId) - return new SignaturePolicyIdentifier((SignaturePolicyId) obj); - - if (obj is Asn1Null) - return new SignaturePolicyIdentifier(); - - throw new ArgumentException( - "Unknown object in 'SignaturePolicyIdentifier' factory: " - + Platform.GetTypeName(obj), - "obj"); - } - - public SignaturePolicyIdentifier() - { - this.sigPolicy = null; - } - - public SignaturePolicyIdentifier( - SignaturePolicyId signaturePolicyId) - { - if (signaturePolicyId == null) - throw new ArgumentNullException("signaturePolicyId"); - - this.sigPolicy = signaturePolicyId; - } - - public SignaturePolicyId SignaturePolicyId - { - get { return sigPolicy; } - } - - public override Asn1Object ToAsn1Object() - { - return sigPolicy == null - ? DerNull.Instance - : sigPolicy.ToAsn1Object(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/esf/SignerAttribute.cs b/bc-sharp-crypto/src/asn1/esf/SignerAttribute.cs deleted file mode 100644 index 39bd910..0000000 --- a/bc-sharp-crypto/src/asn1/esf/SignerAttribute.cs +++ /dev/null @@ -1,97 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Esf -{ - public class SignerAttribute - : Asn1Encodable - { - private Asn1Sequence claimedAttributes; - private AttributeCertificate certifiedAttributes; - - public static SignerAttribute GetInstance( - object obj) - { - if (obj == null || obj is SignerAttribute) - return (SignerAttribute) obj; - - if (obj is Asn1Sequence) - return new SignerAttribute(obj); - - throw new ArgumentException( - "Unknown object in 'SignerAttribute' factory: " - + Platform.GetTypeName(obj), - "obj"); - } - - private SignerAttribute( - object obj) - { - Asn1Sequence seq = (Asn1Sequence) obj; - DerTaggedObject taggedObject = (DerTaggedObject) seq[0]; - if (taggedObject.TagNo == 0) - { - claimedAttributes = Asn1Sequence.GetInstance(taggedObject, true); - } - else if (taggedObject.TagNo == 1) - { - certifiedAttributes = AttributeCertificate.GetInstance(taggedObject); - } - else - { - throw new ArgumentException("illegal tag.", "obj"); - } - } - - public SignerAttribute( - Asn1Sequence claimedAttributes) - { - this.claimedAttributes = claimedAttributes; - } - - public SignerAttribute( - AttributeCertificate certifiedAttributes) - { - this.certifiedAttributes = certifiedAttributes; - } - - public virtual Asn1Sequence ClaimedAttributes - { - get { return claimedAttributes; } - } - - public virtual AttributeCertificate CertifiedAttributes - { - get { return certifiedAttributes; } - } - - /** - * - * 
-		*  SignerAttribute ::= SEQUENCE OF CHOICE {
-		*      claimedAttributes   [0] ClaimedAttributes,
-		*      certifiedAttributes [1] CertifiedAttributes }
-		*
-		*  ClaimedAttributes ::= SEQUENCE OF Attribute
-		*  CertifiedAttributes ::= AttributeCertificate -- as defined in RFC 3281: see clause 4.1.
-		*
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - if (claimedAttributes != null) - { - v.Add(new DerTaggedObject(0, claimedAttributes)); - } - else - { - v.Add(new DerTaggedObject(1, certifiedAttributes)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/esf/SignerLocation.cs b/bc-sharp-crypto/src/asn1/esf/SignerLocation.cs deleted file mode 100644 index d2cef51..0000000 --- a/bc-sharp-crypto/src/asn1/esf/SignerLocation.cs +++ /dev/null @@ -1,144 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; - -namespace Org.BouncyCastle.Asn1.Esf -{ - /** - * Signer-Location attribute (RFC3126). - * - * 
-	*   SignerLocation ::= SEQUENCE {
-	*       countryName        [0] DirectoryString OPTIONAL,
-	*       localityName       [1] DirectoryString OPTIONAL,
-	*       postalAddress      [2] PostalAddress OPTIONAL }
-	*
-	*   PostalAddress ::= SEQUENCE SIZE(1..6) OF DirectoryString
-	*
- */ - public class SignerLocation - : Asn1Encodable - { - // TODO Should these be using DirectoryString? - private DerUtf8String countryName; - private DerUtf8String localityName; - private Asn1Sequence postalAddress; - - public SignerLocation( - Asn1Sequence seq) - { - foreach (Asn1TaggedObject obj in seq) - { - switch (obj.TagNo) - { - case 0: - this.countryName = DerUtf8String.GetInstance(obj, true); - break; - case 1: - this.localityName = DerUtf8String.GetInstance(obj, true); - break; - case 2: - bool isExplicit = obj.IsExplicit(); // handle erroneous implicitly tagged sequences - this.postalAddress = Asn1Sequence.GetInstance(obj, isExplicit); - if (postalAddress != null && postalAddress.Count > 6) - throw new ArgumentException("postal address must contain less than 6 strings"); - break; - default: - throw new ArgumentException("illegal tag"); - } - } - } - - public SignerLocation( - DerUtf8String countryName, - DerUtf8String localityName, - Asn1Sequence postalAddress) - { - if (postalAddress != null && postalAddress.Count > 6) - { - throw new ArgumentException("postal address must contain less than 6 strings"); - } - - if (countryName != null) - { - this.countryName = DerUtf8String.GetInstance(countryName.ToAsn1Object()); - } - - if (localityName != null) - { - this.localityName = DerUtf8String.GetInstance(localityName.ToAsn1Object()); - } - - if (postalAddress != null) - { - this.postalAddress = (Asn1Sequence) postalAddress.ToAsn1Object(); - } - } - - public static SignerLocation GetInstance( - object obj) - { - if (obj == null || obj is SignerLocation) - { - return (SignerLocation) obj; - } - - return new SignerLocation(Asn1Sequence.GetInstance(obj)); - } - - public DerUtf8String CountryName - { - get { return countryName; } - } - - public DerUtf8String LocalityName - { - get { return localityName; } - } - - public Asn1Sequence PostalAddress - { - get { return postalAddress; } - } - - /** - * 
-		*   SignerLocation ::= SEQUENCE {
-		*       countryName        [0] DirectoryString OPTIONAL,
-		*       localityName       [1] DirectoryString OPTIONAL,
-		*       postalAddress      [2] PostalAddress OPTIONAL }
-		*
-		*   PostalAddress ::= SEQUENCE SIZE(1..6) OF DirectoryString
-		*
-		*   DirectoryString ::= CHOICE {
-		*         teletexString           TeletexString (SIZE (1..MAX)),
-		*         printableString         PrintableString (SIZE (1..MAX)),
-		*         universalString         UniversalString (SIZE (1..MAX)),
-		*         utf8String              UTF8String (SIZE (1.. MAX)),
-		*         bmpString               BMPString (SIZE (1..MAX)) }
-		*
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - if (countryName != null) - { - v.Add(new DerTaggedObject(true, 0, countryName)); - } - - if (localityName != null) - { - v.Add(new DerTaggedObject(true, 1, localityName)); - } - - if (postalAddress != null) - { - v.Add(new DerTaggedObject(true, 2, postalAddress)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/ess/ContentHints.cs b/bc-sharp-crypto/src/asn1/ess/ContentHints.cs deleted file mode 100644 index cfd174b..0000000 --- a/bc-sharp-crypto/src/asn1/ess/ContentHints.cs +++ /dev/null @@ -1,94 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Ess -{ - public class ContentHints - : Asn1Encodable - { - private readonly DerUtf8String contentDescription; - private readonly DerObjectIdentifier contentType; - - public static ContentHints GetInstance( - object o) - { - if (o == null || o is ContentHints) - { - return (ContentHints)o; - } - - if (o is Asn1Sequence) - { - return new ContentHints((Asn1Sequence)o); - } - - throw new ArgumentException("unknown object in 'ContentHints' factory : " - + Platform.GetTypeName(o) + "."); - } - - /** - * constructor - */ - private ContentHints( - Asn1Sequence seq) - { - IAsn1Convertible field = seq[0]; - if (field.ToAsn1Object() is DerUtf8String) - { - contentDescription = DerUtf8String.GetInstance(field); - contentType = DerObjectIdentifier.GetInstance(seq[1]); - } - else - { - contentType = DerObjectIdentifier.GetInstance(seq[0]); - } - } - - public ContentHints( - DerObjectIdentifier contentType) - { - this.contentType = contentType; - this.contentDescription = null; - } - - public ContentHints( - DerObjectIdentifier contentType, - DerUtf8String contentDescription) - { - this.contentType = contentType; - this.contentDescription = contentDescription; - } - - public DerObjectIdentifier ContentType - { - get { return contentType; } - } - - public DerUtf8String ContentDescription - { - get { return contentDescription; } - } - - /** - * 
-		 * ContentHints ::= SEQUENCE {
-		 *   contentDescription UTF8String (SIZE (1..MAX)) OPTIONAL,
-		 *   contentType ContentType }
-		 *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - if (contentDescription != null) - { - v.Add(contentDescription); - } - - v.Add(contentType); - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/ess/ContentIdentifier.cs b/bc-sharp-crypto/src/asn1/ess/ContentIdentifier.cs deleted file mode 100644 index 430185e..0000000 --- a/bc-sharp-crypto/src/asn1/ess/ContentIdentifier.cs +++ /dev/null @@ -1,67 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Ess -{ - public class ContentIdentifier - : Asn1Encodable - { - private Asn1OctetString value; - - public static ContentIdentifier GetInstance( - object o) - { - if (o == null || o is ContentIdentifier) - { - return (ContentIdentifier) o; - } - - if (o is Asn1OctetString) - { - return new ContentIdentifier((Asn1OctetString) o); - } - - throw new ArgumentException( - "unknown object in 'ContentIdentifier' factory : " - + Platform.GetTypeName(o) + "."); - } - - /** - * Create from OCTET STRING whose octets represent the identifier. - */ - public ContentIdentifier( - Asn1OctetString value) - { - this.value = value; - } - - /** - * Create from byte array representing the identifier. - */ - public ContentIdentifier( - byte[] value) - : this(new DerOctetString(value)) - { - } - - public Asn1OctetString Value - { - get { return value; } - } - - /** - * The definition of ContentIdentifier is - * 
-		 * ContentIdentifier ::=  OCTET STRING
-		 *
- * id-aa-contentIdentifier OBJECT IDENTIFIER ::= { iso(1) - * member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs9(9) - * smime(16) id-aa(2) 7 } - */ - public override Asn1Object ToAsn1Object() - { - return value; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/ess/ESSCertID.cs b/bc-sharp-crypto/src/asn1/ess/ESSCertID.cs deleted file mode 100644 index b4465ea..0000000 --- a/bc-sharp-crypto/src/asn1/ess/ESSCertID.cs +++ /dev/null @@ -1,94 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Ess -{ - public class EssCertID - : Asn1Encodable - { - private Asn1OctetString certHash; - private IssuerSerial issuerSerial; - - public static EssCertID GetInstance( - object o) - { - if (o == null || o is EssCertID) - { - return (EssCertID) o; - } - - if (o is Asn1Sequence) - { - return new EssCertID((Asn1Sequence) o); - } - - throw new ArgumentException( - "unknown object in 'EssCertID' factory : " - + Platform.GetTypeName(o) + "."); - } - - /** - * constructor - */ - public EssCertID( - Asn1Sequence seq) - { - if (seq.Count < 1 || seq.Count > 2) - { - throw new ArgumentException("Bad sequence size: " + seq.Count); - } - - this.certHash = Asn1OctetString.GetInstance(seq[0]); - - if (seq.Count > 1) - { - issuerSerial = IssuerSerial.GetInstance(seq[1]); - } - } - - public EssCertID( - byte[] hash) - { - certHash = new DerOctetString(hash); - } - - public EssCertID( - byte[] hash, - IssuerSerial issuerSerial) - { - this.certHash = new DerOctetString(hash); - this.issuerSerial = issuerSerial; - } - - public byte[] GetCertHash() - { - return certHash.GetOctets(); - } - - public IssuerSerial IssuerSerial - { - get { return issuerSerial; } - } - - /** - * 
-		 * EssCertID ::= SEQUENCE {
-		 *     certHash Hash,
-		 *     issuerSerial IssuerSerial OPTIONAL }
-		 *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(certHash); - - if (issuerSerial != null) - { - v.Add(issuerSerial); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/ess/ESSCertIDv2.cs b/bc-sharp-crypto/src/asn1/ess/ESSCertIDv2.cs deleted file mode 100644 index 35ce699..0000000 --- a/bc-sharp-crypto/src/asn1/ess/ESSCertIDv2.cs +++ /dev/null @@ -1,146 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Ess -{ - public class EssCertIDv2 - : Asn1Encodable - { - private readonly AlgorithmIdentifier hashAlgorithm; - private readonly byte[] certHash; - private readonly IssuerSerial issuerSerial; - - private static readonly AlgorithmIdentifier DefaultAlgID = new AlgorithmIdentifier( - NistObjectIdentifiers.IdSha256); - - public static EssCertIDv2 GetInstance(object obj) - { - if (obj == null) - return null; - EssCertIDv2 existing = obj as EssCertIDv2; - if (existing != null) - return existing; - return new EssCertIDv2(Asn1Sequence.GetInstance(obj)); - } - - private EssCertIDv2( - Asn1Sequence seq) - { - if (seq.Count > 3) - throw new ArgumentException("Bad sequence size: " + seq.Count, "seq"); - - int count = 0; - - if (seq[0] is Asn1OctetString) - { - // Default value - this.hashAlgorithm = DefaultAlgID; - } - else - { - this.hashAlgorithm = AlgorithmIdentifier.GetInstance(seq[count++].ToAsn1Object()); - } - - this.certHash = Asn1OctetString.GetInstance(seq[count++].ToAsn1Object()).GetOctets(); - - if (seq.Count > count) - { - this.issuerSerial = IssuerSerial.GetInstance( - Asn1Sequence.GetInstance(seq[count].ToAsn1Object())); - } - } - - public EssCertIDv2(byte[] certHash) - : this(null, certHash, null) - { - } - - public EssCertIDv2( - AlgorithmIdentifier algId, - byte[] certHash) - : this(algId, certHash, null) - { - } - - public EssCertIDv2( - byte[] certHash, - IssuerSerial issuerSerial) - : this(null, certHash, issuerSerial) - { - } - - public EssCertIDv2( - AlgorithmIdentifier algId, - byte[] certHash, - IssuerSerial issuerSerial) - { - if (algId == null) - { - // Default value - this.hashAlgorithm = DefaultAlgID; - } - else - { - this.hashAlgorithm = algId; - } - - this.certHash = certHash; - this.issuerSerial = issuerSerial; - } - - public AlgorithmIdentifier HashAlgorithm - { - get { return this.hashAlgorithm; } - } - - public byte[] GetCertHash() - { - return Arrays.Clone(certHash); - } - - public IssuerSerial IssuerSerial - { - get { return issuerSerial; } - } - - /** - * 
-         * EssCertIDv2 ::=  SEQUENCE {
-         *     hashAlgorithm     AlgorithmIdentifier
-         *              DEFAULT {algorithm id-sha256},
-         *     certHash          Hash,
-         *     issuerSerial      IssuerSerial OPTIONAL
-         * }
-         *
-         * Hash ::= OCTET STRING
-         *
-         * IssuerSerial ::= SEQUENCE {
-         *     issuer         GeneralNames,
-         *     serialNumber   CertificateSerialNumber
-         * }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - if (!hashAlgorithm.Equals(DefaultAlgID)) - { - v.Add(hashAlgorithm); - } - - v.Add(new DerOctetString(certHash).ToAsn1Object()); - - if (issuerSerial != null) - { - v.Add(issuerSerial); - } - - return new DerSequence(v); - } - - } -} diff --git a/bc-sharp-crypto/src/asn1/ess/OtherCertID.cs b/bc-sharp-crypto/src/asn1/ess/OtherCertID.cs deleted file mode 100644 index 7794c81..0000000 --- a/bc-sharp-crypto/src/asn1/ess/OtherCertID.cs +++ /dev/null @@ -1,134 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.Oiw; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Ess -{ - [Obsolete("Use version in Asn1.Esf instead")] - public class OtherCertID - : Asn1Encodable - { - private Asn1Encodable otherCertHash; - private IssuerSerial issuerSerial; - - public static OtherCertID GetInstance( - object o) - { - if (o == null || o is OtherCertID) - { - return (OtherCertID) o; - } - - if (o is Asn1Sequence) - { - return new OtherCertID((Asn1Sequence) o); - } - - throw new ArgumentException( - "unknown object in 'OtherCertID' factory : " - + Platform.GetTypeName(o) + "."); - } - - /** - * constructor - */ - public OtherCertID( - Asn1Sequence seq) - { - if (seq.Count < 1 || seq.Count > 2) - { - throw new ArgumentException("Bad sequence size: " + seq.Count); - } - - if (seq[0].ToAsn1Object() is Asn1OctetString) - { - otherCertHash = Asn1OctetString.GetInstance(seq[0]); - } - else - { - otherCertHash = DigestInfo.GetInstance(seq[0]); - } - - if (seq.Count > 1) - { - issuerSerial = IssuerSerial.GetInstance(Asn1Sequence.GetInstance(seq[1])); - } - } - - public OtherCertID( - AlgorithmIdentifier algId, - byte[] digest) - { - this.otherCertHash = new DigestInfo(algId, digest); - } - - public OtherCertID( - AlgorithmIdentifier algId, - byte[] digest, - IssuerSerial issuerSerial) - { - this.otherCertHash = new DigestInfo(algId, digest); - this.issuerSerial = issuerSerial; - } - - public AlgorithmIdentifier AlgorithmHash - { - get - { - if (otherCertHash.ToAsn1Object() is Asn1OctetString) - { - // SHA-1 - return new AlgorithmIdentifier(OiwObjectIdentifiers.IdSha1); - } - - return DigestInfo.GetInstance(otherCertHash).AlgorithmID; - } - } - - public byte[] GetCertHash() - { - if (otherCertHash.ToAsn1Object() is Asn1OctetString) - { - // SHA-1 - return ((Asn1OctetString) otherCertHash.ToAsn1Object()).GetOctets(); - } - - return DigestInfo.GetInstance(otherCertHash).GetDigest(); - } - - public IssuerSerial IssuerSerial - { - get { return issuerSerial; } - } - - /** - * 
-		 * OtherCertID ::= SEQUENCE {
-		 *     otherCertHash    OtherHash,
-		 *     issuerSerial     IssuerSerial OPTIONAL }
-		 *
-		 * OtherHash ::= CHOICE {
-		 *     sha1Hash     OCTET STRING,
-		 *     otherHash    OtherHashAlgAndValue }
-		 *
-		 * OtherHashAlgAndValue ::= SEQUENCE {
-		 *     hashAlgorithm    AlgorithmIdentifier,
-		 *     hashValue        OCTET STRING }
-		 *
-		 *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(otherCertHash); - - if (issuerSerial != null) - { - v.Add(issuerSerial); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/ess/OtherSigningCertificate.cs b/bc-sharp-crypto/src/asn1/ess/OtherSigningCertificate.cs deleted file mode 100644 index 6cef92b..0000000 --- a/bc-sharp-crypto/src/asn1/ess/OtherSigningCertificate.cs +++ /dev/null @@ -1,110 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Ess -{ - [Obsolete("Use version in Asn1.Esf instead")] - public class OtherSigningCertificate - : Asn1Encodable - { - private Asn1Sequence certs, policies; - - public static OtherSigningCertificate GetInstance( - object o) - { - if (o == null || o is OtherSigningCertificate) - { - return (OtherSigningCertificate) o; - } - - if (o is Asn1Sequence) - { - return new OtherSigningCertificate((Asn1Sequence) o); - } - - throw new ArgumentException( - "unknown object in 'OtherSigningCertificate' factory : " - + Platform.GetTypeName(o) + "."); - } - - /** - * constructors - */ - public OtherSigningCertificate( - Asn1Sequence seq) - { - if (seq.Count < 1 || seq.Count > 2) - { - throw new ArgumentException("Bad sequence size: " + seq.Count); - } - - this.certs = Asn1Sequence.GetInstance(seq[0]); - - if (seq.Count > 1) - { - this.policies = Asn1Sequence.GetInstance(seq[1]); - } - } - - public OtherSigningCertificate( - OtherCertID otherCertID) - { - certs = new DerSequence(otherCertID); - } - - public OtherCertID[] GetCerts() - { - OtherCertID[] cs = new OtherCertID[certs.Count]; - - for (int i = 0; i != certs.Count; ++i) - { - cs[i] = OtherCertID.GetInstance(certs[i]); - } - - return cs; - } - - public PolicyInformation[] GetPolicies() - { - if (policies == null) - { - return null; - } - - PolicyInformation[] ps = new PolicyInformation[policies.Count]; - - for (int i = 0; i != policies.Count; i++) - { - ps[i] = PolicyInformation.GetInstance(policies[i]); - } - - return ps; - } - - /** - * The definition of OtherSigningCertificate is - * 
-		 * OtherSigningCertificate ::=  SEQUENCE {
-		 *      certs        SEQUENCE OF OtherCertID,
-		 *      policies     SEQUENCE OF PolicyInformation OPTIONAL
-		 * }
-		 *
- * id-aa-ets-otherSigCert OBJECT IDENTIFIER ::= { iso(1) - * member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs9(9) - * smime(16) id-aa(2) 19 } - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(certs); - - if (policies != null) - { - v.Add(policies); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/ess/SigningCertificate.cs b/bc-sharp-crypto/src/asn1/ess/SigningCertificate.cs deleted file mode 100644 index 51f67c1..0000000 --- a/bc-sharp-crypto/src/asn1/ess/SigningCertificate.cs +++ /dev/null @@ -1,109 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Ess -{ - public class SigningCertificate - : Asn1Encodable - { - private Asn1Sequence certs, policies; - - public static SigningCertificate GetInstance( - object o) - { - if (o == null || o is SigningCertificate) - { - return (SigningCertificate) o; - } - - if (o is Asn1Sequence) - { - return new SigningCertificate((Asn1Sequence) o); - } - - throw new ArgumentException( - "unknown object in 'SigningCertificate' factory : " - + Platform.GetTypeName(o) + "."); - } - - /** - * constructors - */ - public SigningCertificate( - Asn1Sequence seq) - { - if (seq.Count < 1 || seq.Count > 2) - { - throw new ArgumentException("Bad sequence size: " + seq.Count); - } - - this.certs = Asn1Sequence.GetInstance(seq[0]); - - if (seq.Count > 1) - { - this.policies = Asn1Sequence.GetInstance(seq[1]); - } - } - - public SigningCertificate( - EssCertID essCertID) - { - certs = new DerSequence(essCertID); - } - - public EssCertID[] GetCerts() - { - EssCertID[] cs = new EssCertID[certs.Count]; - - for (int i = 0; i != certs.Count; i++) - { - cs[i] = EssCertID.GetInstance(certs[i]); - } - - return cs; - } - - public PolicyInformation[] GetPolicies() - { - if (policies == null) - { - return null; - } - - PolicyInformation[] ps = new PolicyInformation[policies.Count]; - - for (int i = 0; i != policies.Count; i++) - { - ps[i] = PolicyInformation.GetInstance(policies[i]); - } - - return ps; - } - - /** - * The definition of SigningCertificate is - * 
-		 * SigningCertificate ::=  SEQUENCE {
-		 *      certs        SEQUENCE OF EssCertID,
-		 *      policies     SEQUENCE OF PolicyInformation OPTIONAL
-		 * }
-		 *
- * id-aa-signingCertificate OBJECT IDENTIFIER ::= { iso(1) - * member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs9(9) - * smime(16) id-aa(2) 12 } - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(certs); - - if (policies != null) - { - v.Add(policies); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/ess/SigningCertificateV2.cs b/bc-sharp-crypto/src/asn1/ess/SigningCertificateV2.cs deleted file mode 100644 index 91eda9e..0000000 --- a/bc-sharp-crypto/src/asn1/ess/SigningCertificateV2.cs +++ /dev/null @@ -1,113 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Ess -{ - public class SigningCertificateV2 - : Asn1Encodable - { - private readonly Asn1Sequence certs; - private readonly Asn1Sequence policies; - - public static SigningCertificateV2 GetInstance( - object o) - { - if (o == null || o is SigningCertificateV2) - return (SigningCertificateV2) o; - - if (o is Asn1Sequence) - return new SigningCertificateV2((Asn1Sequence) o); - - throw new ArgumentException( - "unknown object in 'SigningCertificateV2' factory : " - + Platform.GetTypeName(o) + "."); - } - - private SigningCertificateV2( - Asn1Sequence seq) - { - if (seq.Count < 1 || seq.Count > 2) - throw new ArgumentException("Bad sequence size: " + seq.Count, "seq"); - - this.certs = Asn1Sequence.GetInstance(seq[0].ToAsn1Object()); - - if (seq.Count > 1) - { - this.policies = Asn1Sequence.GetInstance(seq[1].ToAsn1Object()); - } - } - - public SigningCertificateV2( - EssCertIDv2 cert) - { - this.certs = new DerSequence(cert); - } - - public SigningCertificateV2( - EssCertIDv2[] certs) - { - this.certs = new DerSequence(certs); - } - - public SigningCertificateV2( - EssCertIDv2[] certs, - PolicyInformation[] policies) - { - this.certs = new DerSequence(certs); - - if (policies != null) - { - this.policies = new DerSequence(policies); - } - } - - public EssCertIDv2[] GetCerts() - { - EssCertIDv2[] certIds = new EssCertIDv2[certs.Count]; - for (int i = 0; i != certs.Count; i++) - { - certIds[i] = EssCertIDv2.GetInstance(certs[i]); - } - return certIds; - } - - public PolicyInformation[] GetPolicies() - { - if (policies == null) - return null; - - PolicyInformation[] policyInformations = new PolicyInformation[policies.Count]; - for (int i = 0; i != policies.Count; i++) - { - policyInformations[i] = PolicyInformation.GetInstance(policies[i]); - } - return policyInformations; - } - - /** - * The definition of SigningCertificateV2 is - * 
-         * SigningCertificateV2 ::=  SEQUENCE {
-         *      certs        SEQUENCE OF EssCertIDv2,
-         *      policies     SEQUENCE OF PolicyInformation OPTIONAL
-         * }
-         *
- * id-aa-signingCertificateV2 OBJECT IDENTIFIER ::= { iso(1) - * member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs9(9) - * smime(16) id-aa(2) 47 } - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(certs); - - if (policies != null) - { - v.Add(policies); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/gm/GMNamedCurves.cs b/bc-sharp-crypto/src/asn1/gm/GMNamedCurves.cs deleted file mode 100644 index e2ec6d8..0000000 --- a/bc-sharp-crypto/src/asn1/gm/GMNamedCurves.cs +++ /dev/null @@ -1,157 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC; -using Org.BouncyCastle.Math.EC.Endo; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Asn1.GM -{ - public sealed class GMNamedCurves - { - private GMNamedCurves() - { - } - - private static ECCurve ConfigureCurve(ECCurve curve) - { - return curve; - } - - private static BigInteger FromHex(string hex) - { - return new BigInteger(1, Hex.Decode(hex)); - } - - /* - * sm2p256v1 - */ - internal class SM2P256V1Holder - : X9ECParametersHolder - { - private SM2P256V1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new SM2P256V1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger p = FromHex("FFFFFFFEFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF00000000FFFFFFFFFFFFFFFF"); - BigInteger a = FromHex("FFFFFFFEFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF00000000FFFFFFFFFFFFFFFC"); - BigInteger b = FromHex("28E9FA9E9D9F5E344D5A9E4BCF6509A7F39789F515AB8F92DDBCBD414D940E93"); - byte[] S = null; - BigInteger n = FromHex("FFFFFFFEFFFFFFFFFFFFFFFFFFFFFFFF7203DF6B21C6052B53BBF40939D54123"); - BigInteger h = BigInteger.One; - - ECCurve curve = ConfigureCurve(new FpCurve(p, a, b, n, h)); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "32C4AE2C1F1981195F9904466A39C9948FE30BBFF2660BE1715A4589334C74C7" - + "BC3736A2F4F6779C59BDCEE36B692153D0A9877CC62A474002DF32E52139F0A0")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * wapip192v1 - */ - internal class WapiP192V1Holder - : X9ECParametersHolder - { - private WapiP192V1Holder() { } - - internal static readonly X9ECParametersHolder Instance = new WapiP192V1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger p = FromHex("BDB6F4FE3E8B1D9E0DA8C0D46F4C318CEFE4AFE3B6B8551F"); - BigInteger a = FromHex("BB8E5E8FBC115E139FE6A814FE48AAA6F0ADA1AA5DF91985"); - BigInteger b = FromHex("1854BEBDC31B21B7AEFC80AB0ECD10D5B1B3308E6DBF11C1"); - byte[] S = null; - BigInteger n = FromHex("BDB6F4FE3E8B1D9E0DA8C0D40FC962195DFAE76F56564677"); - BigInteger h = BigInteger.One; - - ECCurve curve = ConfigureCurve(new FpCurve(p, a, b, n, h)); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "4AD5F7048DE709AD51236DE6" + "5E4D4B482C836DC6E4106640" - + "02BB3A02D4AAADACAE24817A" + "4CA3A1B014B5270432DB27D2")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - - private static readonly IDictionary objIds = Platform.CreateHashtable(); - private static readonly IDictionary curves = Platform.CreateHashtable(); - private static readonly IDictionary names = Platform.CreateHashtable(); - - private static void DefineCurve( - string name, - DerObjectIdentifier oid, - X9ECParametersHolder holder) - { - objIds.Add(Platform.ToUpperInvariant(name), oid); - names.Add(oid, name); - curves.Add(oid, holder); - } - - static GMNamedCurves() - { - DefineCurve("wapip192v1", GMObjectIdentifiers.wapip192v1, WapiP192V1Holder.Instance); - DefineCurve("sm2p256v1", GMObjectIdentifiers.sm2p256v1, SM2P256V1Holder.Instance); - } - - public static X9ECParameters GetByName( - string name) - { - DerObjectIdentifier oid = GetOid(name); - return oid == null ? null : GetByOid(oid); - } - - /** - * return the X9ECParameters object for the named curve represented by - * the passed in object identifier. Null if the curve isn't present. - * - * @param oid an object identifier representing a named curve, if present. - */ - public static X9ECParameters GetByOid( - DerObjectIdentifier oid) - { - X9ECParametersHolder holder = (X9ECParametersHolder)curves[oid]; - return holder == null ? null : holder.Parameters; - } - - /** - * return the object identifier signified by the passed in name. Null - * if there is no object identifier associated with name. - * - * @return the object identifier associated with name, if present. - */ - public static DerObjectIdentifier GetOid( - string name) - { - return (DerObjectIdentifier)objIds[Platform.ToUpperInvariant(name)]; - } - - /** - * return the named curve name represented by the given object identifier. - */ - public static string GetName( - DerObjectIdentifier oid) - { - return (string)names[oid]; - } - - /** - * returns an enumeration containing the name strings for curves - * contained in this structure. - */ - public static IEnumerable Names - { - get { return new EnumerableProxy(names.Values); } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/gm/GMObjectIdentifiers.cs b/bc-sharp-crypto/src/asn1/gm/GMObjectIdentifiers.cs deleted file mode 100644 index edb3a41..0000000 --- a/bc-sharp-crypto/src/asn1/gm/GMObjectIdentifiers.cs +++ /dev/null @@ -1,85 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.GM -{ - public abstract class GMObjectIdentifiers - { - public static readonly DerObjectIdentifier sm_scheme = new DerObjectIdentifier("1.2.156.10197.1"); - - public static readonly DerObjectIdentifier sm6_ecb = sm_scheme.Branch("101.1"); - public static readonly DerObjectIdentifier sm6_cbc = sm_scheme.Branch("101.2"); - public static readonly DerObjectIdentifier sm6_ofb128 = sm_scheme.Branch("101.3"); - public static readonly DerObjectIdentifier sm6_cfb128 = sm_scheme.Branch("101.4"); - - public static readonly DerObjectIdentifier sm1_ecb = sm_scheme.Branch("102.1"); - public static readonly DerObjectIdentifier sm1_cbc = sm_scheme.Branch("102.2"); - public static readonly DerObjectIdentifier sm1_ofb128 = sm_scheme.Branch("102.3"); - public static readonly DerObjectIdentifier sm1_cfb128 = sm_scheme.Branch("102.4"); - public static readonly DerObjectIdentifier sm1_cfb1 = sm_scheme.Branch("102.5"); - public static readonly DerObjectIdentifier sm1_cfb8 = sm_scheme.Branch("102.6"); - - public static readonly DerObjectIdentifier ssf33_ecb = sm_scheme.Branch("103.1"); - public static readonly DerObjectIdentifier ssf33_cbc = sm_scheme.Branch("103.2"); - public static readonly DerObjectIdentifier ssf33_ofb128 = sm_scheme.Branch("103.3"); - public static readonly DerObjectIdentifier ssf33_cfb128 = sm_scheme.Branch("103.4"); - public static readonly DerObjectIdentifier ssf33_cfb1 = sm_scheme.Branch("103.5"); - public static readonly DerObjectIdentifier ssf33_cfb8 = sm_scheme.Branch("103.6"); - - public static readonly DerObjectIdentifier sms4_ecb = sm_scheme.Branch("104.1"); - public static readonly DerObjectIdentifier sms4_cbc = sm_scheme.Branch("104.2"); - public static readonly DerObjectIdentifier sms4_ofb128 = sm_scheme.Branch("104.3"); - public static readonly DerObjectIdentifier sms4_cfb128 = sm_scheme.Branch("104.4"); - public static readonly DerObjectIdentifier sms4_cfb1 = sm_scheme.Branch("104.5"); - public static readonly DerObjectIdentifier sms4_cfb8 = sm_scheme.Branch("104.6"); - public static readonly DerObjectIdentifier sms4_ctr = sm_scheme.Branch("104.7"); - public static readonly DerObjectIdentifier sms4_gcm = sm_scheme.Branch("104.8"); - public static readonly DerObjectIdentifier sms4_ccm = sm_scheme.Branch("104.9"); - public static readonly DerObjectIdentifier sms4_xts = sm_scheme.Branch("104.10"); - public static readonly DerObjectIdentifier sms4_wrap = sm_scheme.Branch("104.11"); - public static readonly DerObjectIdentifier sms4_wrap_pad = sm_scheme.Branch("104.12"); - public static readonly DerObjectIdentifier sms4_ocb = sm_scheme.Branch("104.100"); - - public static readonly DerObjectIdentifier sm5 = sm_scheme.Branch("201"); - - public static readonly DerObjectIdentifier sm2p256v1 = sm_scheme.Branch("301"); - public static readonly DerObjectIdentifier sm2sign = sm_scheme.Branch("301.1"); - public static readonly DerObjectIdentifier sm2exchange = sm_scheme.Branch("301.2"); - public static readonly DerObjectIdentifier sm2encrypt = sm_scheme.Branch("301.3"); - - public static readonly DerObjectIdentifier wapip192v1 = sm_scheme.Branch("301.101"); - - public static readonly DerObjectIdentifier sm2encrypt_recommendedParameters = sm2encrypt.Branch("1"); - public static readonly DerObjectIdentifier sm2encrypt_specifiedParameters = sm2encrypt.Branch("2"); - public static readonly DerObjectIdentifier sm2encrypt_with_sm3 = sm2encrypt.Branch("2.1"); - public static readonly DerObjectIdentifier sm2encrypt_with_sha1 = sm2encrypt.Branch("2.2"); - public static readonly DerObjectIdentifier sm2encrypt_with_sha224 = sm2encrypt.Branch("2.3"); - public static readonly DerObjectIdentifier sm2encrypt_with_sha256 = sm2encrypt.Branch("2.4"); - public static readonly DerObjectIdentifier sm2encrypt_with_sha384 = sm2encrypt.Branch("2.5"); - public static readonly DerObjectIdentifier sm2encrypt_with_sha512 = sm2encrypt.Branch("2.6"); - public static readonly DerObjectIdentifier sm2encrypt_with_rmd160 = sm2encrypt.Branch("2.7"); - public static readonly DerObjectIdentifier sm2encrypt_with_whirlpool = sm2encrypt.Branch("2.8"); - public static readonly DerObjectIdentifier sm2encrypt_with_blake2b512 = sm2encrypt.Branch("2.9"); - public static readonly DerObjectIdentifier sm2encrypt_with_blake2s256 = sm2encrypt.Branch("2.10"); - public static readonly DerObjectIdentifier sm2encrypt_with_md5 = sm2encrypt.Branch("2.11"); - - public static readonly DerObjectIdentifier id_sm9PublicKey = sm_scheme.Branch("302"); - public static readonly DerObjectIdentifier sm9sign = sm_scheme.Branch("302.1"); - public static readonly DerObjectIdentifier sm9keyagreement = sm_scheme.Branch("302.2"); - public static readonly DerObjectIdentifier sm9encrypt = sm_scheme.Branch("302.3"); - - public static readonly DerObjectIdentifier sm3 = sm_scheme.Branch("401"); - - public static readonly DerObjectIdentifier hmac_sm3 = sm3.Branch("2"); - - public static readonly DerObjectIdentifier sm2sign_with_sm3 = sm_scheme.Branch("501"); - public static readonly DerObjectIdentifier sm2sign_with_sha1 = sm_scheme.Branch("502"); - public static readonly DerObjectIdentifier sm2sign_with_sha256 = sm_scheme.Branch("503"); - public static readonly DerObjectIdentifier sm2sign_with_sha512 = sm_scheme.Branch("504"); - public static readonly DerObjectIdentifier sm2sign_with_sha224 = sm_scheme.Branch("505"); - public static readonly DerObjectIdentifier sm2sign_with_sha384 = sm_scheme.Branch("506"); - public static readonly DerObjectIdentifier sm2sign_with_rmd160 = sm_scheme.Branch("507"); - public static readonly DerObjectIdentifier sm2sign_with_whirlpool = sm_scheme.Branch("520"); - public static readonly DerObjectIdentifier sm2sign_with_blake2b512 = sm_scheme.Branch("521"); - public static readonly DerObjectIdentifier sm2sign_with_blake2s256 = sm_scheme.Branch("522"); - } -} \ No newline at end of file diff --git a/bc-sharp-crypto/src/asn1/gnu/GNUObjectIdentifiers.cs b/bc-sharp-crypto/src/asn1/gnu/GNUObjectIdentifiers.cs deleted file mode 100644 index b322ef2..0000000 --- a/bc-sharp-crypto/src/asn1/gnu/GNUObjectIdentifiers.cs +++ /dev/null @@ -1,36 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.Gnu -{ - public abstract class GnuObjectIdentifiers - { - public static readonly DerObjectIdentifier Gnu = new DerObjectIdentifier("1.3.6.1.4.1.11591.1"); // GNU Radius - public static readonly DerObjectIdentifier GnuPG = new DerObjectIdentifier("1.3.6.1.4.1.11591.2"); // GnuPG (Ägypten) - public static readonly DerObjectIdentifier Notation = new DerObjectIdentifier("1.3.6.1.4.1.11591.2.1"); // notation - public static readonly DerObjectIdentifier PkaAddress = new DerObjectIdentifier("1.3.6.1.4.1.11591.2.1.1"); // pkaAddress - public static readonly DerObjectIdentifier GnuRadar = new DerObjectIdentifier("1.3.6.1.4.1.11591.3"); // GNU Radar - public static readonly DerObjectIdentifier DigestAlgorithm = new DerObjectIdentifier("1.3.6.1.4.1.11591.12"); // digestAlgorithm - public static readonly DerObjectIdentifier Tiger192 = new DerObjectIdentifier("1.3.6.1.4.1.11591.12.2"); // TIGER/192 - public static readonly DerObjectIdentifier EncryptionAlgorithm = new DerObjectIdentifier("1.3.6.1.4.1.11591.13"); // encryptionAlgorithm - public static readonly DerObjectIdentifier Serpent = new DerObjectIdentifier("1.3.6.1.4.1.11591.13.2"); // Serpent - public static readonly DerObjectIdentifier Serpent128Ecb = new DerObjectIdentifier("1.3.6.1.4.1.11591.13.2.1"); // Serpent-128-ECB - public static readonly DerObjectIdentifier Serpent128Cbc = new DerObjectIdentifier("1.3.6.1.4.1.11591.13.2.2"); // Serpent-128-CBC - public static readonly DerObjectIdentifier Serpent128Ofb = new DerObjectIdentifier("1.3.6.1.4.1.11591.13.2.3"); // Serpent-128-OFB - public static readonly DerObjectIdentifier Serpent128Cfb = new DerObjectIdentifier("1.3.6.1.4.1.11591.13.2.4"); // Serpent-128-CFB - public static readonly DerObjectIdentifier Serpent192Ecb = new DerObjectIdentifier("1.3.6.1.4.1.11591.13.2.21"); // Serpent-192-ECB - public static readonly DerObjectIdentifier Serpent192Cbc = new DerObjectIdentifier("1.3.6.1.4.1.11591.13.2.22"); // Serpent-192-CBC - public static readonly DerObjectIdentifier Serpent192Ofb = new DerObjectIdentifier("1.3.6.1.4.1.11591.13.2.23"); // Serpent-192-OFB - public static readonly DerObjectIdentifier Serpent192Cfb = new DerObjectIdentifier("1.3.6.1.4.1.11591.13.2.24"); // Serpent-192-CFB - public static readonly DerObjectIdentifier Serpent256Ecb = new DerObjectIdentifier("1.3.6.1.4.1.11591.13.2.41"); // Serpent-256-ECB - public static readonly DerObjectIdentifier Serpent256Cbc = new DerObjectIdentifier("1.3.6.1.4.1.11591.13.2.42"); // Serpent-256-CBC - public static readonly DerObjectIdentifier Serpent256Ofb = new DerObjectIdentifier("1.3.6.1.4.1.11591.13.2.43"); // Serpent-256-OFB - public static readonly DerObjectIdentifier Serpent256Cfb = new DerObjectIdentifier("1.3.6.1.4.1.11591.13.2.44"); // Serpent-256-CFB - public static readonly DerObjectIdentifier Crc = new DerObjectIdentifier("1.3.6.1.4.1.11591.14"); // CRC algorithms - public static readonly DerObjectIdentifier Crc32 = new DerObjectIdentifier("1.3.6.1.4.1.11591.14.1"); // CRC 32 - - /** 1.3.6.1.4.1.11591.15 - ellipticCurve */ - public static readonly DerObjectIdentifier EllipticCurve = new DerObjectIdentifier("1.3.6.1.4.1.11591.15"); - - public static readonly DerObjectIdentifier Ed25519 = EllipticCurve.Branch("1"); - } -} diff --git a/bc-sharp-crypto/src/asn1/iana/IANAObjectIdentifiers.cs b/bc-sharp-crypto/src/asn1/iana/IANAObjectIdentifiers.cs deleted file mode 100644 index 63343f5..0000000 --- a/bc-sharp-crypto/src/asn1/iana/IANAObjectIdentifiers.cs +++ /dev/null @@ -1,18 +0,0 @@ -namespace Org.BouncyCastle.Asn1.Iana -{ - public abstract class IanaObjectIdentifiers - { - // id-SHA1 OBJECT IDENTIFIER ::= - // {iso(1) identified-organization(3) dod(6) internet(1) security(5) mechanisms(5) ipsec(8) isakmpOakley(1)} - // - - public static readonly DerObjectIdentifier IsakmpOakley = new DerObjectIdentifier("1.3.6.1.5.5.8.1"); - - public static readonly DerObjectIdentifier HmacMD5 = new DerObjectIdentifier(IsakmpOakley + ".1"); - public static readonly DerObjectIdentifier HmacSha1 = new DerObjectIdentifier(IsakmpOakley + ".2"); - - public static readonly DerObjectIdentifier HmacTiger = new DerObjectIdentifier(IsakmpOakley + ".3"); - - public static readonly DerObjectIdentifier HmacRipeMD160 = new DerObjectIdentifier(IsakmpOakley + ".4"); - } -} diff --git a/bc-sharp-crypto/src/asn1/icao/CscaMasterList.cs b/bc-sharp-crypto/src/asn1/icao/CscaMasterList.cs deleted file mode 100644 index 6890d8a..0000000 --- a/bc-sharp-crypto/src/asn1/icao/CscaMasterList.cs +++ /dev/null @@ -1,83 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; - -namespace Org.BouncyCastle.Asn1.Icao -{ - /** - * The CscaMasterList object. This object can be wrapped in a - * CMSSignedData to be published in LDAP. - * - * 
-	 * CscaMasterList ::= SEQUENCE {
-	 *   version                CscaMasterListVersion,
-	 *   certList               SET OF Certificate }
-	 *   
-	 * CscaMasterListVersion :: INTEGER {v0(0)}
-	 *
- */ - public class CscaMasterList - : Asn1Encodable - { - private DerInteger version = new DerInteger(0); - private X509CertificateStructure[] certList; - - public static CscaMasterList GetInstance( - object obj) - { - if (obj is CscaMasterList) - return (CscaMasterList)obj; - - if (obj != null) - return new CscaMasterList(Asn1Sequence.GetInstance(obj)); - - return null; - } - - private CscaMasterList( - Asn1Sequence seq) - { - if (seq == null || seq.Count == 0) - throw new ArgumentException("null or empty sequence passed."); - - if (seq.Count != 2) - throw new ArgumentException("Incorrect sequence size: " + seq.Count); - - this.version = DerInteger.GetInstance(seq[0]); - - Asn1Set certSet = Asn1Set.GetInstance(seq[1]); - - this.certList = new X509CertificateStructure[certSet.Count]; - for (int i = 0; i < certList.Length; i++) - { - certList[i] = X509CertificateStructure.GetInstance(certSet[i]); - } - } - - public CscaMasterList( - X509CertificateStructure[] certStructs) - { - certList = CopyCertList(certStructs); - } - - public virtual int Version - { - get { return version.Value.IntValue; } - } - - public X509CertificateStructure[] GetCertStructs() - { - return CopyCertList(certList); - } - - private static X509CertificateStructure[] CopyCertList(X509CertificateStructure[] orig) - { - return (X509CertificateStructure[])orig.Clone(); - } - - public override Asn1Object ToAsn1Object() - { - return new DerSequence(version, new DerSet(certList)); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/icao/DataGroupHash.cs b/bc-sharp-crypto/src/asn1/icao/DataGroupHash.cs deleted file mode 100644 index e0d7eee..0000000 --- a/bc-sharp-crypto/src/asn1/icao/DataGroupHash.cs +++ /dev/null @@ -1,86 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; - -namespace Org.BouncyCastle.Asn1.Icao -{ - /** - * The DataGroupHash object. - * 
-    * DataGroupHash  ::=  SEQUENCE {
-    *      dataGroupNumber         DataGroupNumber,
-    *      dataGroupHashValue     OCTET STRING }
-    *
-    * DataGroupNumber ::= INTEGER {
-    *         dataGroup1    (1),
-    *         dataGroup1    (2),
-    *         dataGroup1    (3),
-    *         dataGroup1    (4),
-    *         dataGroup1    (5),
-    *         dataGroup1    (6),
-    *         dataGroup1    (7),
-    *         dataGroup1    (8),
-    *         dataGroup1    (9),
-    *         dataGroup1    (10),
-    *         dataGroup1    (11),
-    *         dataGroup1    (12),
-    *         dataGroup1    (13),
-    *         dataGroup1    (14),
-    *         dataGroup1    (15),
-    *         dataGroup1    (16) }
-    *
-    *
- */ - public class DataGroupHash - : Asn1Encodable - { - private readonly DerInteger dataGroupNumber; - private readonly Asn1OctetString dataGroupHashValue; - - public static DataGroupHash GetInstance( - object obj) - { - if (obj is DataGroupHash) - return (DataGroupHash)obj; - - if (obj != null) - return new DataGroupHash(Asn1Sequence.GetInstance(obj)); - - return null; - } - - private DataGroupHash( - Asn1Sequence seq) - { - if (seq.Count != 2) - throw new ArgumentException("Wrong number of elements in sequence", "seq"); - - this.dataGroupNumber = DerInteger.GetInstance(seq[0]); - this.dataGroupHashValue = Asn1OctetString.GetInstance(seq[1]); - } - - public DataGroupHash( - int dataGroupNumber, - Asn1OctetString dataGroupHashValue) - { - this.dataGroupNumber = new DerInteger(dataGroupNumber); - this.dataGroupHashValue = dataGroupHashValue; - } - - public int DataGroupNumber - { - get { return dataGroupNumber.Value.IntValue; } - } - - public Asn1OctetString DataGroupHashValue - { - get { return dataGroupHashValue; } - } - - public override Asn1Object ToAsn1Object() - { - return new DerSequence(dataGroupNumber, dataGroupHashValue); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/icao/ICAOObjectIdentifiers.cs b/bc-sharp-crypto/src/asn1/icao/ICAOObjectIdentifiers.cs deleted file mode 100644 index 389d4da..0000000 --- a/bc-sharp-crypto/src/asn1/icao/ICAOObjectIdentifiers.cs +++ /dev/null @@ -1,34 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.Icao -{ - public abstract class IcaoObjectIdentifiers - { - // - // base id - // - public static readonly DerObjectIdentifier IdIcao = new DerObjectIdentifier("2.23.136"); - - public static readonly DerObjectIdentifier IdIcaoMrtd = IdIcao.Branch("1"); - public static readonly DerObjectIdentifier IdIcaoMrtdSecurity = IdIcaoMrtd.Branch("1"); - - // LDS security object, see ICAO Doc 9303-Volume 2-Section IV-A3.2 - public static readonly DerObjectIdentifier IdIcaoLdsSecurityObject = IdIcaoMrtdSecurity.Branch("1"); - - // CSCA master list, see TR CSCA Countersigning and Master List issuance - public static readonly DerObjectIdentifier IdIcaoCscaMasterList = IdIcaoMrtdSecurity.Branch("2"); - public static readonly DerObjectIdentifier IdIcaoCscaMasterListSigningKey = IdIcaoMrtdSecurity.Branch("3"); - - // document type list, see draft TR LDS and PKI Maintenance, par. 3.2.1 - public static readonly DerObjectIdentifier IdIcaoDocumentTypeList = IdIcaoMrtdSecurity.Branch("4"); - - // Active Authentication protocol, see draft TR LDS and PKI Maintenance, - // par. 5.2.2 - public static readonly DerObjectIdentifier IdIcaoAAProtocolObject = IdIcaoMrtdSecurity.Branch("5"); - - // CSCA name change and key reoll-over, see draft TR LDS and PKI - // Maintenance, par. 3.2.1 - public static readonly DerObjectIdentifier IdIcaoExtensions = IdIcaoMrtdSecurity.Branch("6"); - public static readonly DerObjectIdentifier IdIcaoExtensionsNamechangekeyrollover = IdIcaoExtensions.Branch("1"); - } -} diff --git a/bc-sharp-crypto/src/asn1/icao/LDSSecurityObject.cs b/bc-sharp-crypto/src/asn1/icao/LDSSecurityObject.cs deleted file mode 100644 index c33ca68..0000000 --- a/bc-sharp-crypto/src/asn1/icao/LDSSecurityObject.cs +++ /dev/null @@ -1,145 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Asn1.Icao -{ - /** - * The LDSSecurityObject object (V1.8). - * 
-	 * LDSSecurityObject ::= SEQUENCE {
-	 *   version                LDSSecurityObjectVersion,
-	 *   hashAlgorithm          DigestAlgorithmIdentifier,
-	 *   dataGroupHashValues    SEQUENCE SIZE (2..ub-DataGroups) OF DataHashGroup,
-	 *   ldsVersionInfo         LDSVersionInfo OPTIONAL
-	 *     -- if present, version MUST be v1 }
-	 *
-	 * DigestAlgorithmIdentifier ::= AlgorithmIdentifier,
-	 *
-	 * LDSSecurityObjectVersion :: INTEGER {V0(0)}
-	 *
- */ - public class LdsSecurityObject - : Asn1Encodable - { - public const int UBDataGroups = 16; - - private DerInteger version = new DerInteger(0); - private AlgorithmIdentifier digestAlgorithmIdentifier; - private DataGroupHash[] datagroupHash; - private LdsVersionInfo versionInfo; - - public static LdsSecurityObject GetInstance( - object obj) - { - if (obj is LdsSecurityObject) - return (LdsSecurityObject)obj; - - if (obj != null) - return new LdsSecurityObject(Asn1Sequence.GetInstance(obj)); - - return null; - } - - private LdsSecurityObject( - Asn1Sequence seq) - { - if (seq == null || seq.Count == 0) - throw new ArgumentException("null or empty sequence passed."); - - IEnumerator e = seq.GetEnumerator(); - - // version - e.MoveNext(); - version = DerInteger.GetInstance(e.Current); - // digestAlgorithmIdentifier - e.MoveNext(); - digestAlgorithmIdentifier = AlgorithmIdentifier.GetInstance(e.Current); - - e.MoveNext(); - Asn1Sequence datagroupHashSeq = Asn1Sequence.GetInstance(e.Current); - - if (version.Value.Equals(BigInteger.One)) - { - e.MoveNext(); - versionInfo = LdsVersionInfo.GetInstance(e.Current); - } - - CheckDatagroupHashSeqSize(datagroupHashSeq.Count); - - datagroupHash = new DataGroupHash[datagroupHashSeq.Count]; - for (int i= 0; i< datagroupHashSeq.Count; i++) - { - datagroupHash[i] = DataGroupHash.GetInstance(datagroupHashSeq[i]); - } - } - - public LdsSecurityObject( - AlgorithmIdentifier digestAlgorithmIdentifier, - DataGroupHash[] datagroupHash) - { - this.version = new DerInteger(0); - this.digestAlgorithmIdentifier = digestAlgorithmIdentifier; - this.datagroupHash = datagroupHash; - - CheckDatagroupHashSeqSize(datagroupHash.Length); - } - - - public LdsSecurityObject( - AlgorithmIdentifier digestAlgorithmIdentifier, - DataGroupHash[] datagroupHash, - LdsVersionInfo versionInfo) - { - this.version = new DerInteger(1); - this.digestAlgorithmIdentifier = digestAlgorithmIdentifier; - this.datagroupHash = datagroupHash; - this.versionInfo = versionInfo; - - CheckDatagroupHashSeqSize(datagroupHash.Length); - } - - private void CheckDatagroupHashSeqSize(int size) - { - if (size < 2 || size > UBDataGroups) - throw new ArgumentException("wrong size in DataGroupHashValues : not in (2.."+ UBDataGroups +")"); - } - - public BigInteger Version - { - get { return version.Value; } - } - - public AlgorithmIdentifier DigestAlgorithmIdentifier - { - get { return digestAlgorithmIdentifier; } - } - - public DataGroupHash[] GetDatagroupHash() - { - return datagroupHash; - } - - public LdsVersionInfo VersionInfo - { - get { return versionInfo; } - } - - public override Asn1Object ToAsn1Object() - { - DerSequence hashSeq = new DerSequence(datagroupHash); - - Asn1EncodableVector v = new Asn1EncodableVector(version, digestAlgorithmIdentifier, hashSeq); - - if (versionInfo != null) - { - v.Add(versionInfo); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/icao/LDSVersionInfo.cs b/bc-sharp-crypto/src/asn1/icao/LDSVersionInfo.cs deleted file mode 100644 index 2cdcad2..0000000 --- a/bc-sharp-crypto/src/asn1/icao/LDSVersionInfo.cs +++ /dev/null @@ -1,61 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.Icao -{ - public class LdsVersionInfo - : Asn1Encodable - { - private DerPrintableString ldsVersion; - private DerPrintableString unicodeVersion; - - public LdsVersionInfo(string ldsVersion, string unicodeVersion) - { - this.ldsVersion = new DerPrintableString(ldsVersion); - this.unicodeVersion = new DerPrintableString(unicodeVersion); - } - - private LdsVersionInfo(Asn1Sequence seq) - { - if (seq.Count != 2) - throw new ArgumentException("sequence wrong size for LDSVersionInfo", "seq"); - - this.ldsVersion = DerPrintableString.GetInstance(seq[0]); - this.unicodeVersion = DerPrintableString.GetInstance(seq[1]); - } - - public static LdsVersionInfo GetInstance(object obj) - { - if (obj is LdsVersionInfo) - return (LdsVersionInfo)obj; - - if (obj != null) - return new LdsVersionInfo(Asn1Sequence.GetInstance(obj)); - - return null; - } - - public virtual string GetLdsVersion() - { - return ldsVersion.GetString(); - } - - public virtual string GetUnicodeVersion() - { - return unicodeVersion.GetString(); - } - - /** - * 
-		 * LDSVersionInfo ::= SEQUENCE {
-		 *    ldsVersion PRINTABLE STRING
-		 *    unicodeVersion PRINTABLE STRING
-		 *  }
-		 *
- * @return - */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(ldsVersion, unicodeVersion); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/isismtt/ISISMTTObjectIdentifiers.cs b/bc-sharp-crypto/src/asn1/isismtt/ISISMTTObjectIdentifiers.cs deleted file mode 100644 index af60b03..0000000 --- a/bc-sharp-crypto/src/asn1/isismtt/ISISMTTObjectIdentifiers.cs +++ /dev/null @@ -1,177 +0,0 @@ -namespace Org.BouncyCastle.Asn1.IsisMtt -{ - public abstract class IsisMttObjectIdentifiers - { - public static readonly DerObjectIdentifier IdIsisMtt = new DerObjectIdentifier("1.3.36.8"); - - public static readonly DerObjectIdentifier IdIsisMttCP = new DerObjectIdentifier(IdIsisMtt + ".1"); - - /** - * The id-isismtt-cp-accredited OID indicates that the certificate is a - * qualified certificate according to Directive 1999/93/EC of the European - * Parliament and of the Council of 13 December 1999 on a Community - * Framework for Electronic Signatures, which additionally conforms the - * special requirements of the SigG and has been issued by an accredited CA. - */ - public static readonly DerObjectIdentifier IdIsisMttCPAccredited = new DerObjectIdentifier(IdIsisMttCP + ".1"); - - public static readonly DerObjectIdentifier IdIsisMttAT = new DerObjectIdentifier(IdIsisMtt + ".3"); - - /** - * Certificate extensionDate of certificate generation - * - * 
-		 *		DateOfCertGenSyntax ::= GeneralizedTime
-		 *
- */ - public static readonly DerObjectIdentifier IdIsisMttATDateOfCertGen = new DerObjectIdentifier(IdIsisMttAT + ".1"); - - /** - * Attribute to indicate that the certificate holder may sign in the name of - * a third person. May also be used as extension in a certificate. - */ - public static readonly DerObjectIdentifier IdIsisMttATProcuration = new DerObjectIdentifier(IdIsisMttAT + ".2"); - - /** - * Attribute to indicate admissions to certain professions. May be used as - * attribute in attribute certificate or as extension in a certificate - */ - public static readonly DerObjectIdentifier IdIsisMttATAdmission = new DerObjectIdentifier(IdIsisMttAT + ".3"); - - /** - * Monetary limit for transactions. The QcEuMonetaryLimit QC statement MUST - * be used in new certificates in place of the extension/attribute - * MonetaryLimit since January 1, 2004. For the sake of backward - * compatibility with certificates already in use, SigG conforming - * components MUST support MonetaryLimit (as well as QcEuLimitValue). - */ - public static readonly DerObjectIdentifier IdIsisMttATMonetaryLimit = new DerObjectIdentifier(IdIsisMttAT + ".4"); - - /** - * A declaration of majority. May be used as attribute in attribute - * certificate or as extension in a certificate - */ - public static readonly DerObjectIdentifier IdIsisMttATDeclarationOfMajority = new DerObjectIdentifier(IdIsisMttAT + ".5"); - - /** - * - * Serial number of the smart card containing the corresponding private key - * - * 
-		 *		ICCSNSyntax ::= OCTET STRING (SIZE(8..20))
-		 *
- */ - public static readonly DerObjectIdentifier IdIsisMttATIccsn = new DerObjectIdentifier(IdIsisMttAT + ".6"); - - /** - * - * Reference for a file of a smartcard that stores the public key of this - * certificate and that is used as �security anchor�. - * - * 
-		 *		PKReferenceSyntax ::= OCTET STRING (SIZE(20))
-		 *
- */ - public static readonly DerObjectIdentifier IdIsisMttATPKReference = new DerObjectIdentifier(IdIsisMttAT + ".7"); - - /** - * Some other restriction regarding the usage of this certificate. May be - * used as attribute in attribute certificate or as extension in a - * certificate. - * - * 
-		 *		RestrictionSyntax ::= DirectoryString (SIZE(1..1024))
-		 *
- * - * @see Org.BouncyCastle.Asn1.IsisMtt.X509.Restriction - */ - public static readonly DerObjectIdentifier IdIsisMttATRestriction = new DerObjectIdentifier(IdIsisMttAT + ".8"); - - /** - * - * (Single)Request extension: Clients may include this extension in a - * (single) Request to request the responder to send the certificate in the - * response message along with the status information. Besides the LDAP - * service, this extension provides another mechanism for the distribution - * of certificates, which MAY optionally be provided by certificate - * repositories. - * - * 
-		 *		RetrieveIfAllowed ::= BOOLEAN
-		 *
- */ - public static readonly DerObjectIdentifier IdIsisMttATRetrieveIfAllowed = new DerObjectIdentifier(IdIsisMttAT + ".9"); - - /** - * SingleOCSPResponse extension: The certificate requested by the client by - * inserting the RetrieveIfAllowed extension in the request, will be - * returned in this extension. - * - * @see Org.BouncyCastle.Asn1.IsisMtt.Ocsp.RequestedCertificate - */ - public static readonly DerObjectIdentifier IdIsisMttATRequestedCertificate = new DerObjectIdentifier(IdIsisMttAT + ".10"); - - /** - * Base ObjectIdentifier for naming authorities - */ - public static readonly DerObjectIdentifier IdIsisMttATNamingAuthorities = new DerObjectIdentifier(IdIsisMttAT + ".11"); - - /** - * SingleOCSPResponse extension: Date, when certificate has been published - * in the directory and status information has become available. Currently, - * accrediting authorities enforce that SigG-conforming OCSP servers include - * this extension in the responses. - * - * 
-		 *		CertInDirSince ::= GeneralizedTime
-		 *
- */ - public static readonly DerObjectIdentifier IdIsisMttATCertInDirSince = new DerObjectIdentifier(IdIsisMttAT + ".12"); - - /** - * Hash of a certificate in OCSP. - * - * @see Org.BouncyCastle.Asn1.IsisMtt.Ocsp.CertHash - */ - public static readonly DerObjectIdentifier IdIsisMttATCertHash = new DerObjectIdentifier(IdIsisMttAT + ".13"); - - /** - * 
-		 *		NameAtBirth ::= DirectoryString(SIZE(1..64)
-		 *
- * - * Used in - * {@link Org.BouncyCastle.Asn1.X509.SubjectDirectoryAttributes SubjectDirectoryAttributes} - */ - public static readonly DerObjectIdentifier IdIsisMttATNameAtBirth = new DerObjectIdentifier(IdIsisMttAT + ".14"); - - /** - * Some other information of non-restrictive nature regarding the usage of - * this certificate. May be used as attribute in atribute certificate or as - * extension in a certificate. - * - * 
-		 *               AdditionalInformationSyntax ::= DirectoryString (SIZE(1..2048))
-		 *
- * - * @see Org.BouncyCastle.Asn1.IsisMtt.X509.AdditionalInformationSyntax - */ - public static readonly DerObjectIdentifier IdIsisMttATAdditionalInformation = new DerObjectIdentifier(IdIsisMttAT + ".15"); - - /** - * Indicates that an attribute certificate exists, which limits the - * usability of this public key certificate. Whenever verifying a signature - * with the help of this certificate, the content of the corresponding - * attribute certificate should be concerned. This extension MUST be - * included in a PKC, if a corresponding attribute certificate (having the - * PKC as base certificate) contains some attribute that restricts the - * usability of the PKC too. Attribute certificates with restricting content - * MUST always be included in the signed document. - * - * 
-		 *		LiabilityLimitationFlagSyntax ::= BOOLEAN
-		 *
- */ - public static readonly DerObjectIdentifier IdIsisMttATLiabilityLimitationFlag = new DerObjectIdentifier("0.2.262.1.10.12.0"); - } -} diff --git a/bc-sharp-crypto/src/asn1/isismtt/ocsp/CertHash.cs b/bc-sharp-crypto/src/asn1/isismtt/ocsp/CertHash.cs deleted file mode 100644 index 5773e1c..0000000 --- a/bc-sharp-crypto/src/asn1/isismtt/ocsp/CertHash.cs +++ /dev/null @@ -1,122 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.IsisMtt.Ocsp -{ - /** - * ISIS-MTT PROFILE: The responder may include this extension in a response to - * send the hash of the requested certificate to the responder. This hash is - * cryptographically bound to the certificate and serves as evidence that the - * certificate is known to the responder (i.e. it has been issued and is present - * in the directory). Hence, this extension is a means to provide a positive - * statement of availability as described in T8.[8]. As explained in T13.[1], - * clients may rely on this information to be able to validate signatures after - * the expiry of the corresponding certificate. Hence, clients MUST support this - * extension. If a positive statement of availability is to be delivered, this - * extension syntax and OID MUST be used. - *

- *

- * 

-	*     CertHash ::= SEQUENCE {
-	*       hashAlgorithm AlgorithmIdentifier,
-	*       certificateHash OCTET STRING
-	*     }
-	*
- */ - public class CertHash - : Asn1Encodable - { - private readonly AlgorithmIdentifier hashAlgorithm; - private readonly byte[] certificateHash; - - public static CertHash GetInstance( - object obj) - { - if (obj == null || obj is CertHash) - { - return (CertHash) obj; - } - - if (obj is Asn1Sequence) - { - return new CertHash((Asn1Sequence) obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - /** - * Constructor from Asn1Sequence. - *

- * The sequence is of type CertHash: - *

- * 

-		*     CertHash ::= SEQUENCE {
-		*       hashAlgorithm AlgorithmIdentifier,
-		*       certificateHash OCTET STRING
-		*     }
-		*
- * - * @param seq The ASN.1 sequence. - */ - private CertHash( - Asn1Sequence seq) - { - if (seq.Count != 2) - throw new ArgumentException("Bad sequence size: " + seq.Count); - - this.hashAlgorithm = AlgorithmIdentifier.GetInstance(seq[0]); - this.certificateHash = DerOctetString.GetInstance(seq[1]).GetOctets(); - } - - /** - * Constructor from a given details. - * - * @param hashAlgorithm The hash algorithm identifier. - * @param certificateHash The hash of the whole DER encoding of the certificate. - */ - public CertHash( - AlgorithmIdentifier hashAlgorithm, - byte[] certificateHash) - { - if (hashAlgorithm == null) - throw new ArgumentNullException("hashAlgorithm"); - if (certificateHash == null) - throw new ArgumentNullException("certificateHash"); - - this.hashAlgorithm = hashAlgorithm; - this.certificateHash = (byte[]) certificateHash.Clone(); - } - - public AlgorithmIdentifier HashAlgorithm - { - get { return hashAlgorithm; } - } - - public byte[] CertificateHash - { - get { return (byte[]) certificateHash.Clone(); } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - *

- * Returns: - *

- * 

-		*     CertHash ::= SEQUENCE {
-		*       hashAlgorithm AlgorithmIdentifier,
-		*       certificateHash OCTET STRING
-		*     }
-		*
- * - * @return an Asn1Object - */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(hashAlgorithm, new DerOctetString(certificateHash)); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/isismtt/ocsp/RequestedCertificate.cs b/bc-sharp-crypto/src/asn1/isismtt/ocsp/RequestedCertificate.cs deleted file mode 100644 index 413b3bd..0000000 --- a/bc-sharp-crypto/src/asn1/isismtt/ocsp/RequestedCertificate.cs +++ /dev/null @@ -1,188 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.IsisMtt.Ocsp -{ - /** - * ISIS-MTT-Optional: The certificate requested by the client by inserting the - * RetrieveIfAllowed extension in the request, will be returned in this - * extension. - *

- * ISIS-MTT-SigG: The signature act allows publishing certificates only then, - * when the certificate owner gives his isExplicit permission. Accordingly, there - * may be �nondownloadable� certificates, about which the responder must provide - * status information, but MUST NOT include them in the response. Clients may - * get therefore the following three kind of answers on a single request - * including the RetrieveIfAllowed extension: - *

    - *
  • a) the responder supports the extension and is allowed to publish the - * certificate: RequestedCertificate returned including the requested - * certificate
    • - *
  • b) the responder supports the extension but is NOT allowed to publish - * the certificate: RequestedCertificate returned including an empty OCTET - * STRING
    • - *
  • c) the responder does not support the extension: RequestedCertificate is - * not included in the response
    • - *
- * Clients requesting RetrieveIfAllowed MUST be able to handle these cases. If - * any of the OCTET STRING options is used, it MUST contain the DER encoding of - * the requested certificate. - *

- * 

-	*            RequestedCertificate ::= CHOICE {
-	*              Certificate Certificate,
-	*              publicKeyCertificate [0] EXPLICIT OCTET STRING,
-	*              attributeCertificate [1] EXPLICIT OCTET STRING
-	*            }
-	*
- */ - public class RequestedCertificate - : Asn1Encodable, IAsn1Choice - { - public enum Choice - { - Certificate = -1, - PublicKeyCertificate = 0, - AttributeCertificate = 1 - } - - private readonly X509CertificateStructure cert; - private readonly byte[] publicKeyCert; - private readonly byte[] attributeCert; - - public static RequestedCertificate GetInstance( - object obj) - { - if (obj == null || obj is RequestedCertificate) - { - return (RequestedCertificate) obj; - } - - if (obj is Asn1Sequence) - { - return new RequestedCertificate(X509CertificateStructure.GetInstance(obj)); - } - - if (obj is Asn1TaggedObject) - { - return new RequestedCertificate((Asn1TaggedObject) obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public static RequestedCertificate GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - if (!isExplicit) - throw new ArgumentException("choice item must be explicitly tagged"); - - return GetInstance(obj.GetObject()); - } - - private RequestedCertificate( - Asn1TaggedObject tagged) - { - switch ((Choice) tagged.TagNo) - { - case Choice.AttributeCertificate: - this.attributeCert = Asn1OctetString.GetInstance(tagged, true).GetOctets(); - break; - case Choice.PublicKeyCertificate: - this.publicKeyCert = Asn1OctetString.GetInstance(tagged, true).GetOctets(); - break; - default: - throw new ArgumentException("unknown tag number: " + tagged.TagNo); - } - } - - /** - * Constructor from a given details. - *

- * Only one parameter can be given. All other must be null. - * - * @param certificate Given as Certificate - */ - public RequestedCertificate( - X509CertificateStructure certificate) - { - this.cert = certificate; - } - - public RequestedCertificate( - Choice type, - byte[] certificateOctets) - : this(new DerTaggedObject((int) type, new DerOctetString(certificateOctets))) - { - } - - public Choice Type - { - get - { - if (cert != null) - return Choice.Certificate; - - if (publicKeyCert != null) - return Choice.PublicKeyCertificate; - - return Choice.AttributeCertificate; - } - } - - public byte[] GetCertificateBytes() - { - if (cert != null) - { - try - { - return cert.GetEncoded(); - } - catch (IOException e) - { - throw new InvalidOperationException("can't decode certificate: " + e); - } - } - - if (publicKeyCert != null) - return publicKeyCert; - - return attributeCert; - } - - - /** - * Produce an object suitable for an Asn1OutputStream. - *

- * Returns: - *

- * 

-		*            RequestedCertificate ::= CHOICE {
-		*              Certificate Certificate,
-		*              publicKeyCertificate [0] EXPLICIT OCTET STRING,
-		*              attributeCertificate [1] EXPLICIT OCTET STRING
-		*            }
-		*
- * - * @return an Asn1Object - */ - public override Asn1Object ToAsn1Object() - { - if (publicKeyCert != null) - { - return new DerTaggedObject(0, new DerOctetString(publicKeyCert)); - } - - if (attributeCert != null) - { - return new DerTaggedObject(1, new DerOctetString(attributeCert)); - } - - return cert.ToAsn1Object(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/isismtt/x509/AdditionalInformationSyntax.cs b/bc-sharp-crypto/src/asn1/isismtt/x509/AdditionalInformationSyntax.cs deleted file mode 100644 index 53a8e98..0000000 --- a/bc-sharp-crypto/src/asn1/isismtt/x509/AdditionalInformationSyntax.cs +++ /dev/null @@ -1,71 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X500; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.IsisMtt.X509 -{ - /** - * Some other information of non-restrictive nature regarding the usage of this - * certificate. - * - * 
-	*    AdditionalInformationSyntax ::= DirectoryString (SIZE(1..2048))
-	*
- */ - public class AdditionalInformationSyntax - : Asn1Encodable - { - private readonly DirectoryString information; - - public static AdditionalInformationSyntax GetInstance( - object obj) - { - if (obj is AdditionalInformationSyntax) - return (AdditionalInformationSyntax) obj; - - if (obj is IAsn1String) - return new AdditionalInformationSyntax(DirectoryString.GetInstance(obj)); - - throw new ArgumentException("Unknown object in GetInstance: " + Platform.GetTypeName(obj), "obj"); - } - - private AdditionalInformationSyntax( - DirectoryString information) - { - this.information = information; - } - - /** - * Constructor from a given details. - * - * @param information The describtion of the information. - */ - public AdditionalInformationSyntax( - string information) - { - this.information = new DirectoryString(information); - } - - public virtual DirectoryString Information - { - get { return information; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - *

- * Returns: - *

- * 

-		*   AdditionalInformationSyntax ::= DirectoryString (SIZE(1..2048))
-		*
- * - * @return an Asn1Object - */ - public override Asn1Object ToAsn1Object() - { - return information.ToAsn1Object(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/isismtt/x509/AdmissionSyntax.cs b/bc-sharp-crypto/src/asn1/isismtt/x509/AdmissionSyntax.cs deleted file mode 100644 index 4b6264a..0000000 --- a/bc-sharp-crypto/src/asn1/isismtt/x509/AdmissionSyntax.cs +++ /dev/null @@ -1,278 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.IsisMtt.X509 -{ - /** - * Attribute to indicate admissions to certain professions. - *

- * 

-    *     AdmissionSyntax ::= SEQUENCE
-    *     {
-    *       admissionAuthority GeneralName OPTIONAL,
-    *       contentsOfAdmissions SEQUENCE OF Admissions
-    *     }
-    * 

-    *     Admissions ::= SEQUENCE
-    *     {
-    *       admissionAuthority [0] EXPLICIT GeneralName OPTIONAL
-    *       namingAuthority [1] EXPLICIT NamingAuthority OPTIONAL
-    *       professionInfos SEQUENCE OF ProfessionInfo
-    *     }
-    * 

-    *     NamingAuthority ::= SEQUENCE
-    *     {
-    *       namingAuthorityId OBJECT IDENTIFIER OPTIONAL,
-    *       namingAuthorityUrl IA5String OPTIONAL,
-    *       namingAuthorityText DirectoryString(SIZE(1..128)) OPTIONAL
-    *     }
-    * 

-    *     ProfessionInfo ::= SEQUENCE
-    *     {
-    *       namingAuthority [0] EXPLICIT NamingAuthority OPTIONAL,
-    *       professionItems SEQUENCE OF DirectoryString (SIZE(1..128)),
-    *       professionOIDs SEQUENCE OF OBJECT IDENTIFIER OPTIONAL,
-    *       registrationNumber PrintableString(SIZE(1..128)) OPTIONAL,
-    *       addProfessionInfo OCTET STRING OPTIONAL
-    *     }
-    *
- *

- *

- * ISIS-MTT PROFILE: The relatively complex structure of AdmissionSyntax - * supports the following concepts and requirements: - *

    - *
  • External institutions (e.g. professional associations, chambers, unions, - * administrative bodies, companies, etc.), which are responsible for granting - * and verifying professional admissions, are indicated by means of the data - * field admissionAuthority. An admission authority is indicated by a - * GeneralName object. Here an X.501 directory name (distinguished name) can be - * indicated in the field directoryName, a URL address can be indicated in the - * field uniformResourceIdentifier, and an object identifier can be indicated in - * the field registeredId.
    • - *
  • The names of authorities which are responsible for the administration of - * title registers are indicated in the data field namingAuthority. The name of - * the authority can be identified by an object identifier in the field - * namingAuthorityId, by means of a text string in the field - * namingAuthorityText, by means of a URL address in the field - * namingAuthorityUrl, or by a combination of them. For example, the text string - * can contain the name of the authority, the country and the name of the title - * register. The URL-option refers to a web page which contains lists with - * officially registered professions (text and possibly OID) as well as - * further information on these professions. Object identifiers for the - * component namingAuthorityId are grouped under the OID-branch - * id-isis-at-namingAuthorities and must be applied for.
    • - *
  • See http://www.teletrust.de/anwend.asp?Id=30200&Sprache=E_&HomePG=0 - * for an application form and http://www.teletrust.de/links.asp?id=30220,11 - * for an overview of registered naming authorities.
    • - *
  • By means of the data type ProfessionInfo certain professions, - * specializations, disciplines, fields of activity, etc. are identified. A - * profession is represented by one or more text strings, resp. profession OIDs - * in the fields professionItems and professionOIDs and by a registration number - * in the field registrationNumber. An indication in text form must always be - * present, whereas the other indications are optional. The component - * addProfessionInfo may contain additional applicationspecific information in - * DER-encoded form.
    • - *
- *

- * By means of different namingAuthority-OIDs or profession OIDs hierarchies of - * professions, specializations, disciplines, fields of activity, etc. can be - * expressed. The issuing admission authority should always be indicated (field - * admissionAuthority), whenever a registration number is presented. Still, - * information on admissions can be given without indicating an admission or a - * naming authority by the exclusive use of the component professionItems. In - * this case the certification authority is responsible for the verification of - * the admission information. - *

- *

- *

- * This attribute is single-valued. Still, several admissions can be captured in - * the sequence structure of the component contentsOfAdmissions of - * AdmissionSyntax or in the component professionInfos of Admissions. The - * component admissionAuthority of AdmissionSyntax serves as default value for - * the component admissionAuthority of Admissions. Within the latter component - * the default value can be overwritten, in case that another authority is - * responsible. The component namingAuthority of Admissions serves as a default - * value for the component namingAuthority of ProfessionInfo. Within the latter - * component the default value can be overwritten, in case that another naming - * authority needs to be recorded. - *

- * The length of the string objects is limited to 128 characters. It is - * recommended to indicate a namingAuthorityURL in all issued attribute - * certificates. If a namingAuthorityURL is indicated, the field professionItems - * of ProfessionInfo should contain only registered titles. If the field - * professionOIDs exists, it has to contain the OIDs of the professions listed - * in professionItems in the same order. In general, the field professionInfos - * should contain only one entry, unless the admissions that are to be listed - * are logically connected (e.g. they have been issued under the same admission - * number). - * - * @see Org.BouncyCastle.Asn1.IsisMtt.X509.Admissions - * @see Org.BouncyCastle.Asn1.IsisMtt.X509.ProfessionInfo - * @see Org.BouncyCastle.Asn1.IsisMtt.X509.NamingAuthority - */ - public class AdmissionSyntax - : Asn1Encodable - { - private readonly GeneralName admissionAuthority; - private readonly Asn1Sequence contentsOfAdmissions; - - public static AdmissionSyntax GetInstance( - object obj) - { - if (obj == null || obj is AdmissionSyntax) - { - return (AdmissionSyntax)obj; - } - - if (obj is Asn1Sequence) - { - return new AdmissionSyntax((Asn1Sequence)obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - /** - * Constructor from Asn1Sequence. - *

- * The sequence is of type ProcurationSyntax: - *

- * 

-        *     AdmissionSyntax ::= SEQUENCE
-        *     {
-        *       admissionAuthority GeneralName OPTIONAL,
-        *       contentsOfAdmissions SEQUENCE OF Admissions
-        *     }
-        * 

-        *     Admissions ::= SEQUENCE
-        *     {
-        *       admissionAuthority [0] EXPLICIT GeneralName OPTIONAL
-        *       namingAuthority [1] EXPLICIT NamingAuthority OPTIONAL
-        *       professionInfos SEQUENCE OF ProfessionInfo
-        *     }
-        * 

-        *     NamingAuthority ::= SEQUENCE
-        *     {
-        *       namingAuthorityId OBJECT IDENTIFIER OPTIONAL,
-        *       namingAuthorityUrl IA5String OPTIONAL,
-        *       namingAuthorityText DirectoryString(SIZE(1..128)) OPTIONAL
-        *     }
-        * 

-        *     ProfessionInfo ::= SEQUENCE
-        *     {
-        *       namingAuthority [0] EXPLICIT NamingAuthority OPTIONAL,
-        *       professionItems SEQUENCE OF DirectoryString (SIZE(1..128)),
-        *       professionOIDs SEQUENCE OF OBJECT IDENTIFIER OPTIONAL,
-        *       registrationNumber PrintableString(SIZE(1..128)) OPTIONAL,
-        *       addProfessionInfo OCTET STRING OPTIONAL
-        *     }
-        *
- * - * @param seq The ASN.1 sequence. - */ - private AdmissionSyntax( - Asn1Sequence seq) - { - switch (seq.Count) - { - case 1: - this.contentsOfAdmissions = DerSequence.GetInstance(seq[0]); - break; - case 2: - admissionAuthority = GeneralName.GetInstance(seq[0]); - contentsOfAdmissions = DerSequence.GetInstance(seq[1]); - break; - default: - throw new ArgumentException("Bad sequence size: " + seq.Count); - } - } - - /** - * Constructor from given details. - * - * @param admissionAuthority The admission authority. - * @param contentsOfAdmissions The admissions. - */ - public AdmissionSyntax( - GeneralName admissionAuthority, - Asn1Sequence contentsOfAdmissions) - { - this.admissionAuthority = admissionAuthority; - this.contentsOfAdmissions = contentsOfAdmissions; - } - - /** - * Produce an object suitable for an Asn1OutputStream. - *

- * Returns: - *

- * 

-        *     AdmissionSyntax ::= SEQUENCE
-        *     {
-        *       admissionAuthority GeneralName OPTIONAL,
-        *       contentsOfAdmissions SEQUENCE OF Admissions
-        *     }
-        * 

-        *     Admissions ::= SEQUENCE
-        *     {
-        *       admissionAuthority [0] EXPLICIT GeneralName OPTIONAL
-        *       namingAuthority [1] EXPLICIT NamingAuthority OPTIONAL
-        *       professionInfos SEQUENCE OF ProfessionInfo
-        *     }
-        * 

-        *     NamingAuthority ::= SEQUENCE
-        *     {
-        *       namingAuthorityId OBJECT IDENTIFIER OPTIONAL,
-        *       namingAuthorityUrl IA5String OPTIONAL,
-        *       namingAuthorityText DirectoryString(SIZE(1..128)) OPTIONAL
-        *     }
-        * 

-        *     ProfessionInfo ::= SEQUENCE
-        *     {
-        *       namingAuthority [0] EXPLICIT NamingAuthority OPTIONAL,
-        *       professionItems SEQUENCE OF DirectoryString (SIZE(1..128)),
-        *       professionOIDs SEQUENCE OF OBJECT IDENTIFIER OPTIONAL,
-        *       registrationNumber PrintableString(SIZE(1..128)) OPTIONAL,
-        *       addProfessionInfo OCTET STRING OPTIONAL
-        *     }
-        *
- * - * @return an Asn1Object - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector vec = new Asn1EncodableVector(); - if (admissionAuthority != null) - { - vec.Add(admissionAuthority); - } - vec.Add(contentsOfAdmissions); - return new DerSequence(vec); - } - - /** - * @return Returns the admissionAuthority if present, null otherwise. - */ - public virtual GeneralName AdmissionAuthority - { - get { return admissionAuthority; } - } - - /** - * @return Returns the contentsOfAdmissions. - */ - public virtual Admissions[] GetContentsOfAdmissions() - { - Admissions[] result = new Admissions[contentsOfAdmissions.Count]; - - for (int i = 0; i < contentsOfAdmissions.Count; ++i) - { - result[i] = Admissions.GetInstance(contentsOfAdmissions[i]); - } - - return result; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/isismtt/x509/Admissions.cs b/bc-sharp-crypto/src/asn1/isismtt/x509/Admissions.cs deleted file mode 100644 index e914db0..0000000 --- a/bc-sharp-crypto/src/asn1/isismtt/x509/Admissions.cs +++ /dev/null @@ -1,187 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.IsisMtt.X509 -{ - /** - * An Admissions structure. - *

- * 

-	*            Admissions ::= SEQUENCE
-	*            {
-	*              admissionAuthority [0] EXPLICIT GeneralName OPTIONAL
-	*              namingAuthority [1] EXPLICIT NamingAuthority OPTIONAL
-	*              professionInfos SEQUENCE OF ProfessionInfo
-	*            }
-	* 

-	*
- * - * @see Org.BouncyCastle.Asn1.IsisMtt.X509.AdmissionSyntax - * @see Org.BouncyCastle.Asn1.IsisMtt.X509.ProfessionInfo - * @see Org.BouncyCastle.Asn1.IsisMtt.X509.NamingAuthority - */ - public class Admissions - : Asn1Encodable - { - private readonly GeneralName admissionAuthority; - private readonly NamingAuthority namingAuthority; - private readonly Asn1Sequence professionInfos; - - public static Admissions GetInstance( - object obj) - { - if (obj == null || obj is Admissions) - { - return (Admissions) obj; - } - - if (obj is Asn1Sequence) - { - return new Admissions((Asn1Sequence) obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - /** - * Constructor from Asn1Sequence. - *

- * The sequence is of type ProcurationSyntax: - *

- * 

-		*            Admissions ::= SEQUENCE
-		*            {
-		*              admissionAuthority [0] EXPLICIT GeneralName OPTIONAL
-		*              namingAuthority [1] EXPLICIT NamingAuthority OPTIONAL
-		*              professionInfos SEQUENCE OF ProfessionInfo
-		*            }
-		*
- * - * @param seq The ASN.1 sequence. - */ - private Admissions( - Asn1Sequence seq) - { - if (seq.Count > 3) - throw new ArgumentException("Bad sequence size: " + seq.Count); - - IEnumerator e = seq.GetEnumerator(); - - e.MoveNext(); - Asn1Encodable o = (Asn1Encodable) e.Current; - if (o is Asn1TaggedObject) - { - switch (((Asn1TaggedObject)o).TagNo) - { - case 0: - admissionAuthority = GeneralName.GetInstance((Asn1TaggedObject)o, true); - break; - case 1: - namingAuthority = NamingAuthority.GetInstance((Asn1TaggedObject)o, true); - break; - default: - throw new ArgumentException("Bad tag number: " + ((Asn1TaggedObject)o).TagNo); - } - e.MoveNext(); - o = (Asn1Encodable) e.Current; - } - if (o is Asn1TaggedObject) - { - switch (((Asn1TaggedObject)o).TagNo) - { - case 1: - namingAuthority = NamingAuthority.GetInstance((Asn1TaggedObject)o, true); - break; - default: - throw new ArgumentException("Bad tag number: " + ((Asn1TaggedObject)o).TagNo); - } - e.MoveNext(); - o = (Asn1Encodable) e.Current; - } - professionInfos = Asn1Sequence.GetInstance(o); - if (e.MoveNext()) - { - throw new ArgumentException("Bad object encountered: " + Platform.GetTypeName(e.Current)); - } - } - - /** - * Constructor from a given details. - *

- * Parameter professionInfos is mandatory. - * - * @param admissionAuthority The admission authority. - * @param namingAuthority The naming authority. - * @param professionInfos The profession infos. - */ - public Admissions( - GeneralName admissionAuthority, - NamingAuthority namingAuthority, - ProfessionInfo[] professionInfos) - { - this.admissionAuthority = admissionAuthority; - this.namingAuthority = namingAuthority; - this.professionInfos = new DerSequence(professionInfos); - } - - public virtual GeneralName AdmissionAuthority - { - get { return admissionAuthority; } - } - - public virtual NamingAuthority NamingAuthority - { - get { return namingAuthority; } - } - - public ProfessionInfo[] GetProfessionInfos() - { - ProfessionInfo[] infos = new ProfessionInfo[professionInfos.Count]; - int count = 0; - foreach (Asn1Encodable ae in professionInfos) - { - infos[count++] = ProfessionInfo.GetInstance(ae); - } - return infos; - } - - /** - * Produce an object suitable for an Asn1OutputStream. - *

- * Returns: - *

- * 

-		*       Admissions ::= SEQUENCE
-		*       {
-		*         admissionAuthority [0] EXPLICIT GeneralName OPTIONAL
-		*         namingAuthority [1] EXPLICIT NamingAuthority OPTIONAL
-		*         professionInfos SEQUENCE OF ProfessionInfo
-		*       }
-		* 

-		*
- * - * @return an Asn1Object - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector vec = new Asn1EncodableVector(); - - if (admissionAuthority != null) - { - vec.Add(new DerTaggedObject(true, 0, admissionAuthority)); - } - - if (namingAuthority != null) - { - vec.Add(new DerTaggedObject(true, 1, namingAuthority)); - } - - vec.Add(professionInfos); - - return new DerSequence(vec); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/isismtt/x509/DeclarationOfMajority.cs b/bc-sharp-crypto/src/asn1/isismtt/x509/DeclarationOfMajority.cs deleted file mode 100644 index c4ebb2b..0000000 --- a/bc-sharp-crypto/src/asn1/isismtt/x509/DeclarationOfMajority.cs +++ /dev/null @@ -1,172 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.IsisMtt.X509 -{ - /** - * A declaration of majority. - *

- * 

-	*           DeclarationOfMajoritySyntax ::= CHOICE
-	*           {
-	*             notYoungerThan [0] IMPLICIT INTEGER,
-	*             fullAgeAtCountry [1] IMPLICIT SEQUENCE
-	*             {
-	*               fullAge BOOLEAN DEFAULT TRUE,
-	*               country PrintableString (SIZE(2))
-	*             }
-	*             dateOfBirth [2] IMPLICIT GeneralizedTime
-	*           }
-	*
- *

- * fullAgeAtCountry indicates the majority of the owner with respect to the laws - * of a specific country. - */ - public class DeclarationOfMajority - : Asn1Encodable, IAsn1Choice - { - public enum Choice - { - NotYoungerThan = 0, - FullAgeAtCountry = 1, - DateOfBirth = 2 - }; - - private readonly Asn1TaggedObject declaration; - - public DeclarationOfMajority( - int notYoungerThan) - { - declaration = new DerTaggedObject(false, 0, new DerInteger(notYoungerThan)); - } - - public DeclarationOfMajority( - bool fullAge, - string country) - { - if (country.Length > 2) - throw new ArgumentException("country can only be 2 characters"); - - DerPrintableString countryString = new DerPrintableString(country, true); - - DerSequence seq; - if (fullAge) - { - seq = new DerSequence(countryString); - } - else - { - seq = new DerSequence(DerBoolean.False, countryString); - } - - this.declaration = new DerTaggedObject(false, 1, seq); - } - - public DeclarationOfMajority( - DerGeneralizedTime dateOfBirth) - { - this.declaration = new DerTaggedObject(false, 2, dateOfBirth); - } - - public static DeclarationOfMajority GetInstance( - object obj) - { - if (obj == null || obj is DeclarationOfMajority) - { - return (DeclarationOfMajority) obj; - } - - if (obj is Asn1TaggedObject) - { - return new DeclarationOfMajority((Asn1TaggedObject) obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - private DeclarationOfMajority( - Asn1TaggedObject o) - { - if (o.TagNo > 2) - throw new ArgumentException("Bad tag number: " + o.TagNo); - - this.declaration = o; - } - - /** - * Produce an object suitable for an Asn1OutputStream. - *

- * Returns: - *

- * 

-		*           DeclarationOfMajoritySyntax ::= CHOICE
-		*           {
-		*             notYoungerThan [0] IMPLICIT INTEGER,
-		*             fullAgeAtCountry [1] IMPLICIT SEQUENCE
-		*             {
-		*               fullAge BOOLEAN DEFAULT TRUE,
-		*               country PrintableString (SIZE(2))
-		*             }
-		*             dateOfBirth [2] IMPLICIT GeneralizedTime
-		*           }
-		*
- * - * @return an Asn1Object - */ - public override Asn1Object ToAsn1Object() - { - return declaration; - } - - public Choice Type - { - get { return (Choice) declaration.TagNo; } - } - - /** - * @return notYoungerThan if that's what we are, -1 otherwise - */ - public virtual int NotYoungerThan - { - get - { - switch ((Choice) declaration.TagNo) - { - case Choice.NotYoungerThan: - return DerInteger.GetInstance(declaration, false).Value.IntValue; - default: - return -1; - } - } - } - - public virtual Asn1Sequence FullAgeAtCountry - { - get - { - switch ((Choice) declaration.TagNo) - { - case Choice.FullAgeAtCountry: - return Asn1Sequence.GetInstance(declaration, false); - default: - return null; - } - } - } - - public virtual DerGeneralizedTime DateOfBirth - { - get - { - switch ((Choice) declaration.TagNo) - { - case Choice.DateOfBirth: - return DerGeneralizedTime.GetInstance(declaration, false); - default: - return null; - } - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/isismtt/x509/MonetaryLimit.cs b/bc-sharp-crypto/src/asn1/isismtt/x509/MonetaryLimit.cs deleted file mode 100644 index b792fff..0000000 --- a/bc-sharp-crypto/src/asn1/isismtt/x509/MonetaryLimit.cs +++ /dev/null @@ -1,122 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.IsisMtt.X509 -{ - /** - * Monetary limit for transactions. The QcEuMonetaryLimit QC statement MUST be - * used in new certificates in place of the extension/attribute MonetaryLimit - * since January 1, 2004. For the sake of backward compatibility with - * certificates already in use, components SHOULD support MonetaryLimit (as well - * as QcEuLimitValue). - *

- * Indicates a monetary limit within which the certificate holder is authorized - * to act. (This value DOES NOT express a limit on the liability of the - * certification authority). - *

- * 

-	*    MonetaryLimitSyntax ::= SEQUENCE
-	*    {
-	*      currency PrintableString (SIZE(3)),
-	*      amount INTEGER,
-	*      exponent INTEGER
-	*    }
-	*
- *

- * currency must be the ISO code. - *

- * value = amount�10*exponent - */ - public class MonetaryLimit - : Asn1Encodable - { - private readonly DerPrintableString currency; - private readonly DerInteger amount; - private readonly DerInteger exponent; - - public static MonetaryLimit GetInstance( - object obj) - { - if (obj == null || obj is MonetaryLimit) - { - return (MonetaryLimit) obj; - } - - if (obj is Asn1Sequence) - { - return new MonetaryLimit(Asn1Sequence.GetInstance(obj)); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - private MonetaryLimit( - Asn1Sequence seq) - { - if (seq.Count != 3) - throw new ArgumentException("Bad sequence size: " + seq.Count); - - currency = DerPrintableString.GetInstance(seq[0]); - amount = DerInteger.GetInstance(seq[1]); - exponent = DerInteger.GetInstance(seq[2]); - } - - /** - * Constructor from a given details. - *

- *

- * value = amount�10^exponent - * - * @param currency The currency. Must be the ISO code. - * @param amount The amount - * @param exponent The exponent - */ - public MonetaryLimit( - string currency, - int amount, - int exponent) - { - this.currency = new DerPrintableString(currency, true); - this.amount = new DerInteger(amount); - this.exponent = new DerInteger(exponent); - } - - public virtual string Currency - { - get { return currency.GetString(); } - } - - public virtual BigInteger Amount - { - get { return amount.Value; } - } - - public virtual BigInteger Exponent - { - get { return exponent.Value; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - *

- * Returns: - *

- * 

-		*    MonetaryLimitSyntax ::= SEQUENCE
-		*    {
-		*      currency PrintableString (SIZE(3)),
-		*      amount INTEGER,
-		*      exponent INTEGER
-		*    }
-		*
- * - * @return an Asn1Object - */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(currency, amount, exponent); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/isismtt/x509/NamingAuthority.cs b/bc-sharp-crypto/src/asn1/isismtt/x509/NamingAuthority.cs deleted file mode 100644 index 35539f4..0000000 --- a/bc-sharp-crypto/src/asn1/isismtt/x509/NamingAuthority.cs +++ /dev/null @@ -1,215 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1.X500; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.IsisMtt.X509 -{ - /** - * Names of authorities which are responsible for the administration of title - * registers. - * - * 
-	*             NamingAuthority ::= SEQUENCE 
-	*             {
-	*               namingAuthorityID OBJECT IDENTIFIER OPTIONAL,
-	*               namingAuthorityUrl IA5String OPTIONAL,
-	*               namingAuthorityText DirectoryString(SIZE(1..128)) OPTIONAL
-	*             }
-	*
- * @see Org.BouncyCastle.Asn1.IsisMtt.X509.AdmissionSyntax - * - */ - public class NamingAuthority - : Asn1Encodable - { - /** - * Profession OIDs should always be defined under the OID branch of the - * responsible naming authority. At the time of this writing, the work group - * �Recht, Wirtschaft, Steuern� (�Law, Economy, Taxes�) is registered as the - * first naming authority under the OID id-isismtt-at-namingAuthorities. - */ - public static readonly DerObjectIdentifier IdIsisMttATNamingAuthoritiesRechtWirtschaftSteuern - = new DerObjectIdentifier(IsisMttObjectIdentifiers.IdIsisMttATNamingAuthorities + ".1"); - - private readonly DerObjectIdentifier namingAuthorityID; - private readonly string namingAuthorityUrl; - private readonly DirectoryString namingAuthorityText; - - public static NamingAuthority GetInstance( - object obj) - { - if (obj == null || obj is NamingAuthority) - { - return (NamingAuthority) obj; - } - - if (obj is Asn1Sequence) - { - return new NamingAuthority((Asn1Sequence) obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public static NamingAuthority GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - return GetInstance(Asn1Sequence.GetInstance(obj, isExplicit)); - } - - /** - * Constructor from Asn1Sequence. - *

- *

- * 

-		*             NamingAuthority ::= SEQUENCE
-		*             {
-		*               namingAuthorityID OBJECT IDENTIFIER OPTIONAL,
-		*               namingAuthorityUrl IA5String OPTIONAL,
-		*               namingAuthorityText DirectoryString(SIZE(1..128)) OPTIONAL
-		*             }
-		*
- * - * @param seq The ASN.1 sequence. - */ - private NamingAuthority( - Asn1Sequence seq) - { - if (seq.Count > 3) - throw new ArgumentException("Bad sequence size: " + seq.Count); - - IEnumerator e = seq.GetEnumerator(); - - if (e.MoveNext()) - { - Asn1Encodable o = (Asn1Encodable) e.Current; - if (o is DerObjectIdentifier) - { - namingAuthorityID = (DerObjectIdentifier) o; - } - else if (o is DerIA5String) - { - namingAuthorityUrl = DerIA5String.GetInstance(o).GetString(); - } - else if (o is IAsn1String) - { - namingAuthorityText = DirectoryString.GetInstance(o); - } - else - { - throw new ArgumentException("Bad object encountered: " + Platform.GetTypeName(o)); - } - } - - if (e.MoveNext()) - { - Asn1Encodable o = (Asn1Encodable) e.Current; - if (o is DerIA5String) - { - namingAuthorityUrl = DerIA5String.GetInstance(o).GetString(); - } - else if (o is IAsn1String) - { - namingAuthorityText = DirectoryString.GetInstance(o); - } - else - { - throw new ArgumentException("Bad object encountered: " + Platform.GetTypeName(o)); - } - } - - if (e.MoveNext()) - { - Asn1Encodable o = (Asn1Encodable) e.Current; - if (o is IAsn1String) - { - namingAuthorityText = DirectoryString.GetInstance(o); - } - else - { - throw new ArgumentException("Bad object encountered: " + Platform.GetTypeName(o)); - } - } - } - - /** - * @return Returns the namingAuthorityID. - */ - public virtual DerObjectIdentifier NamingAuthorityID - { - get { return namingAuthorityID; } - } - - /** - * @return Returns the namingAuthorityText. - */ - public virtual DirectoryString NamingAuthorityText - { - get { return namingAuthorityText; } - } - - /** - * @return Returns the namingAuthorityUrl. - */ - public virtual string NamingAuthorityUrl - { - get { return namingAuthorityUrl; } - } - - /** - * Constructor from given details. - *

- * All parameters can be combined. - * - * @param namingAuthorityID ObjectIdentifier for naming authority. - * @param namingAuthorityUrl URL for naming authority. - * @param namingAuthorityText Textual representation of naming authority. - */ - public NamingAuthority( - DerObjectIdentifier namingAuthorityID, - string namingAuthorityUrl, - DirectoryString namingAuthorityText) - { - this.namingAuthorityID = namingAuthorityID; - this.namingAuthorityUrl = namingAuthorityUrl; - this.namingAuthorityText = namingAuthorityText; - } - - /** - * Produce an object suitable for an Asn1OutputStream. - *

- * Returns: - *

- * 

-		*             NamingAuthority ::= SEQUENCE
-		*             {
-		*               namingAuthorityID OBJECT IDENTIFIER OPTIONAL,
-		*               namingAuthorityUrl IA5String OPTIONAL,
-		*               namingAuthorityText DirectoryString(SIZE(1..128)) OPTIONAL
-		*             }
-		*
- * - * @return an Asn1Object - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector vec = new Asn1EncodableVector(); - if (namingAuthorityID != null) - { - vec.Add(namingAuthorityID); - } - if (namingAuthorityUrl != null) - { - vec.Add(new DerIA5String(namingAuthorityUrl, true)); - } - if (namingAuthorityText != null) - { - vec.Add(namingAuthorityText); - } - return new DerSequence(vec); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/isismtt/x509/ProcurationSyntax.cs b/bc-sharp-crypto/src/asn1/isismtt/x509/ProcurationSyntax.cs deleted file mode 100644 index f423646..0000000 --- a/bc-sharp-crypto/src/asn1/isismtt/x509/ProcurationSyntax.cs +++ /dev/null @@ -1,233 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1.X500; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.IsisMtt.X509 -{ - /** - * Attribute to indicate that the certificate holder may sign in the name of a - * third person. - *

- * ISIS-MTT PROFILE: The corresponding ProcurationSyntax contains either the - * name of the person who is represented (subcomponent thirdPerson) or a - * reference to his/her base certificate (in the component signingFor, - * subcomponent certRef), furthermore the optional components country and - * typeSubstitution to indicate the country whose laws apply, and respectively - * the type of procuration (e.g. manager, procuration, custody). - *

- *

- * ISIS-MTT PROFILE: The GeneralName MUST be of type directoryName and MAY only - * contain: - RFC3039 attributes, except pseudonym (countryName, commonName, - * surname, givenName, serialNumber, organizationName, organizationalUnitName, - * stateOrProvincename, localityName, postalAddress) and - SubjectDirectoryName - * attributes (title, dateOfBirth, placeOfBirth, gender, countryOfCitizenship, - * countryOfResidence and NameAtBirth). - *

- * 
-	*               ProcurationSyntax ::= SEQUENCE {
-	*                 country [1] EXPLICIT PrintableString(SIZE(2)) OPTIONAL,
-	*                 typeOfSubstitution [2] EXPLICIT DirectoryString (SIZE(1..128)) OPTIONAL,
-	*                 signingFor [3] EXPLICIT SigningFor 
-	*               }
-	*               
-	*               SigningFor ::= CHOICE 
-	*               { 
-	*                 thirdPerson GeneralName,
-	*                 certRef IssuerSerial 
-	*               }
-	*
- * - */ - public class ProcurationSyntax - : Asn1Encodable - { - private readonly string country; - private readonly DirectoryString typeOfSubstitution; - private readonly GeneralName thirdPerson; - private readonly IssuerSerial certRef; - - public static ProcurationSyntax GetInstance( - object obj) - { - if (obj == null || obj is ProcurationSyntax) - { - return (ProcurationSyntax) obj; - } - - if (obj is Asn1Sequence) - { - return new ProcurationSyntax((Asn1Sequence) obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - /** - * Constructor from Asn1Sequence. - *

- * The sequence is of type ProcurationSyntax: - *

- * 

-		*               ProcurationSyntax ::= SEQUENCE {
-		*                 country [1] EXPLICIT PrintableString(SIZE(2)) OPTIONAL,
-		*                 typeOfSubstitution [2] EXPLICIT DirectoryString (SIZE(1..128)) OPTIONAL,
-		*                 signingFor [3] EXPLICIT SigningFor
-		*               }
-		* 

-		*               SigningFor ::= CHOICE
-		*               {
-		*                 thirdPerson GeneralName,
-		*                 certRef IssuerSerial
-		*               }
-		*
- * - * @param seq The ASN.1 sequence. - */ - private ProcurationSyntax( - Asn1Sequence seq) - { - if (seq.Count < 1 || seq.Count > 3) - throw new ArgumentException("Bad sequence size: " + seq.Count); - - IEnumerator e = seq.GetEnumerator(); - - while (e.MoveNext()) - { - Asn1TaggedObject o = Asn1TaggedObject.GetInstance(e.Current); - switch (o.TagNo) - { - case 1: - country = DerPrintableString.GetInstance(o, true).GetString(); - break; - case 2: - typeOfSubstitution = DirectoryString.GetInstance(o, true); - break; - case 3: - Asn1Object signingFor = o.GetObject(); - if (signingFor is Asn1TaggedObject) - { - thirdPerson = GeneralName.GetInstance(signingFor); - } - else - { - certRef = IssuerSerial.GetInstance(signingFor); - } - break; - default: - throw new ArgumentException("Bad tag number: " + o.TagNo); - } - } - } - - /** - * Constructor from a given details. - *

- *

- * Either generalName or certRef MUST be - * null. - * - * @param country The country code whose laws apply. - * @param typeOfSubstitution The type of procuration. - * @param certRef Reference to certificate of the person who is represented. - */ - public ProcurationSyntax( - string country, - DirectoryString typeOfSubstitution, - IssuerSerial certRef) - { - this.country = country; - this.typeOfSubstitution = typeOfSubstitution; - this.thirdPerson = null; - this.certRef = certRef; - } - - /** - * Constructor from a given details. - *

- *

- * Either generalName or certRef MUST be - * null. - * - * @param country The country code whose laws apply. - * @param typeOfSubstitution The type of procuration. - * @param thirdPerson The GeneralName of the person who is represented. - */ - public ProcurationSyntax( - string country, - DirectoryString typeOfSubstitution, - GeneralName thirdPerson) - { - this.country = country; - this.typeOfSubstitution = typeOfSubstitution; - this.thirdPerson = thirdPerson; - this.certRef = null; - } - - public virtual string Country - { - get { return country; } - } - - public virtual DirectoryString TypeOfSubstitution - { - get { return typeOfSubstitution; } - } - - public virtual GeneralName ThirdPerson - { - get { return thirdPerson; } - } - - public virtual IssuerSerial CertRef - { - get { return certRef; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - *

- * Returns: - *

- * 

-		*               ProcurationSyntax ::= SEQUENCE {
-		*                 country [1] EXPLICIT PrintableString(SIZE(2)) OPTIONAL,
-		*                 typeOfSubstitution [2] EXPLICIT DirectoryString (SIZE(1..128)) OPTIONAL,
-		*                 signingFor [3] EXPLICIT SigningFor
-		*               }
-		* 

-		*               SigningFor ::= CHOICE
-		*               {
-		*                 thirdPerson GeneralName,
-		*                 certRef IssuerSerial
-		*               }
-		*
- * - * @return an Asn1Object - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector vec = new Asn1EncodableVector(); - if (country != null) - { - vec.Add(new DerTaggedObject(true, 1, new DerPrintableString(country, true))); - } - if (typeOfSubstitution != null) - { - vec.Add(new DerTaggedObject(true, 2, typeOfSubstitution)); - } - if (thirdPerson != null) - { - vec.Add(new DerTaggedObject(true, 3, thirdPerson)); - } - else - { - vec.Add(new DerTaggedObject(true, 3, certRef)); - } - - return new DerSequence(vec); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/isismtt/x509/ProfessionInfo.cs b/bc-sharp-crypto/src/asn1/isismtt/x509/ProfessionInfo.cs deleted file mode 100644 index 671a465..0000000 --- a/bc-sharp-crypto/src/asn1/isismtt/x509/ProfessionInfo.cs +++ /dev/null @@ -1,387 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1.X500; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.IsisMtt.X509 -{ - /** - * Professions, specializations, disciplines, fields of activity, etc. - * - * 
-	*               ProfessionInfo ::= SEQUENCE 
-	*               {
-	*                 namingAuthority [0] EXPLICIT NamingAuthority OPTIONAL,
-	*                 professionItems SEQUENCE OF DirectoryString (SIZE(1..128)),
-	*                 professionOids SEQUENCE OF OBJECT IDENTIFIER OPTIONAL,
-	*                 registrationNumber PrintableString(SIZE(1..128)) OPTIONAL,
-	*                 addProfessionInfo OCTET STRING OPTIONAL 
-	*               }
-	*
- * - * @see Org.BouncyCastle.Asn1.IsisMtt.X509.AdmissionSyntax - */ - public class ProfessionInfo - : Asn1Encodable - { - /** - * Rechtsanw�ltin - */ - public static readonly DerObjectIdentifier Rechtsanwltin = new DerObjectIdentifier( - NamingAuthority.IdIsisMttATNamingAuthoritiesRechtWirtschaftSteuern + ".1"); - - /** - * Rechtsanwalt - */ - public static readonly DerObjectIdentifier Rechtsanwalt = new DerObjectIdentifier( - NamingAuthority.IdIsisMttATNamingAuthoritiesRechtWirtschaftSteuern + ".2"); - - /** - * Rechtsbeistand - */ - public static readonly DerObjectIdentifier Rechtsbeistand = new DerObjectIdentifier( - NamingAuthority.IdIsisMttATNamingAuthoritiesRechtWirtschaftSteuern + ".3"); - - /** - * Steuerberaterin - */ - public static readonly DerObjectIdentifier Steuerberaterin = new DerObjectIdentifier( - NamingAuthority.IdIsisMttATNamingAuthoritiesRechtWirtschaftSteuern + ".4"); - - /** - * Steuerberater - */ - public static readonly DerObjectIdentifier Steuerberater = new DerObjectIdentifier( - NamingAuthority.IdIsisMttATNamingAuthoritiesRechtWirtschaftSteuern + ".5"); - - /** - * Steuerbevollm�chtigte - */ - public static readonly DerObjectIdentifier Steuerbevollmchtigte = new DerObjectIdentifier( - NamingAuthority.IdIsisMttATNamingAuthoritiesRechtWirtschaftSteuern + ".6"); - - /** - * Steuerbevollm�chtigter - */ - public static readonly DerObjectIdentifier Steuerbevollmchtigter = new DerObjectIdentifier( - NamingAuthority.IdIsisMttATNamingAuthoritiesRechtWirtschaftSteuern + ".7"); - - /** - * Notarin - */ - public static readonly DerObjectIdentifier Notarin = new DerObjectIdentifier( - NamingAuthority.IdIsisMttATNamingAuthoritiesRechtWirtschaftSteuern + ".8"); - - /** - * Notar - */ - public static readonly DerObjectIdentifier Notar = new DerObjectIdentifier( - NamingAuthority.IdIsisMttATNamingAuthoritiesRechtWirtschaftSteuern + ".9"); - - /** - * Notarvertreterin - */ - public static readonly DerObjectIdentifier Notarvertreterin = new DerObjectIdentifier( - NamingAuthority.IdIsisMttATNamingAuthoritiesRechtWirtschaftSteuern + ".10"); - - /** - * Notarvertreter - */ - public static readonly DerObjectIdentifier Notarvertreter = new DerObjectIdentifier( - NamingAuthority.IdIsisMttATNamingAuthoritiesRechtWirtschaftSteuern + ".11"); - - /** - * Notariatsverwalterin - */ - public static readonly DerObjectIdentifier Notariatsverwalterin = new DerObjectIdentifier( - NamingAuthority.IdIsisMttATNamingAuthoritiesRechtWirtschaftSteuern + ".12"); - - /** - * Notariatsverwalter - */ - public static readonly DerObjectIdentifier Notariatsverwalter = new DerObjectIdentifier( - NamingAuthority.IdIsisMttATNamingAuthoritiesRechtWirtschaftSteuern + ".13"); - - /** - * Wirtschaftspr�ferin - */ - public static readonly DerObjectIdentifier Wirtschaftsprferin = new DerObjectIdentifier( - NamingAuthority.IdIsisMttATNamingAuthoritiesRechtWirtschaftSteuern + ".14"); - - /** - * Wirtschaftspr�fer - */ - public static readonly DerObjectIdentifier Wirtschaftsprfer = new DerObjectIdentifier( - NamingAuthority.IdIsisMttATNamingAuthoritiesRechtWirtschaftSteuern + ".15"); - - /** - * Vereidigte Buchpr�ferin - */ - public static readonly DerObjectIdentifier VereidigteBuchprferin = new DerObjectIdentifier( - NamingAuthority.IdIsisMttATNamingAuthoritiesRechtWirtschaftSteuern + ".16"); - - /** - * Vereidigter Buchpr�fer - */ - public static readonly DerObjectIdentifier VereidigterBuchprfer = new DerObjectIdentifier( - NamingAuthority.IdIsisMttATNamingAuthoritiesRechtWirtschaftSteuern + ".17"); - - /** - * Patentanw�ltin - */ - public static readonly DerObjectIdentifier Patentanwltin = new DerObjectIdentifier( - NamingAuthority.IdIsisMttATNamingAuthoritiesRechtWirtschaftSteuern + ".18"); - - /** - * Patentanwalt - */ - public static readonly DerObjectIdentifier Patentanwalt = new DerObjectIdentifier( - NamingAuthority.IdIsisMttATNamingAuthoritiesRechtWirtschaftSteuern + ".19"); - - private readonly NamingAuthority namingAuthority; - private readonly Asn1Sequence professionItems; - private readonly Asn1Sequence professionOids; - private readonly string registrationNumber; - private readonly Asn1OctetString addProfessionInfo; - - public static ProfessionInfo GetInstance( - object obj) - { - if (obj == null || obj is ProfessionInfo) - { - return (ProfessionInfo) obj; - } - - if (obj is Asn1Sequence) - { - return new ProfessionInfo((Asn1Sequence) obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - /** - * Constructor from Asn1Sequence. - *

- *

- * 

-		*               ProfessionInfo ::= SEQUENCE
-		*               {
-		*                 namingAuthority [0] EXPLICIT NamingAuthority OPTIONAL,
-		*                 professionItems SEQUENCE OF DirectoryString (SIZE(1..128)),
-		*                 professionOids SEQUENCE OF OBJECT IDENTIFIER OPTIONAL,
-		*                 registrationNumber PrintableString(SIZE(1..128)) OPTIONAL,
-		*                 addProfessionInfo OCTET STRING OPTIONAL
-		*               }
-		*
- * - * @param seq The ASN.1 sequence. - */ - private ProfessionInfo( - Asn1Sequence seq) - { - if (seq.Count > 5) - throw new ArgumentException("Bad sequence size: " + seq.Count); - - IEnumerator e = seq.GetEnumerator(); - - e.MoveNext(); - Asn1Encodable o = (Asn1Encodable) e.Current; - - if (o is Asn1TaggedObject) - { - Asn1TaggedObject ato = (Asn1TaggedObject) o; - if (ato.TagNo != 0) - throw new ArgumentException("Bad tag number: " + ato.TagNo); - - namingAuthority = NamingAuthority.GetInstance(ato, true); - e.MoveNext(); - o = (Asn1Encodable) e.Current; - } - - professionItems = Asn1Sequence.GetInstance(o); - - if (e.MoveNext()) - { - o = (Asn1Encodable) e.Current; - if (o is Asn1Sequence) - { - professionOids = Asn1Sequence.GetInstance(o); - } - else if (o is DerPrintableString) - { - registrationNumber = DerPrintableString.GetInstance(o).GetString(); - } - else if (o is Asn1OctetString) - { - addProfessionInfo = Asn1OctetString.GetInstance(o); - } - else - { - throw new ArgumentException("Bad object encountered: " + Platform.GetTypeName(o)); - } - } - - if (e.MoveNext()) - { - o = (Asn1Encodable) e.Current; - if (o is DerPrintableString) - { - registrationNumber = DerPrintableString.GetInstance(o).GetString(); - } - else if (o is DerOctetString) - { - addProfessionInfo = (DerOctetString) o; - } - else - { - throw new ArgumentException("Bad object encountered: " + Platform.GetTypeName(o)); - } - } - - if (e.MoveNext()) - { - o = (Asn1Encodable) e.Current; - if (o is DerOctetString) - { - addProfessionInfo = (DerOctetString) o; - } - else - { - throw new ArgumentException("Bad object encountered: " + Platform.GetTypeName(o)); - } - } - } - - /** - * Constructor from given details. - *

- * professionItems is mandatory, all other parameters are - * optional. - * - * @param namingAuthority The naming authority. - * @param professionItems Directory strings of the profession. - * @param professionOids DERObjectIdentfier objects for the - * profession. - * @param registrationNumber Registration number. - * @param addProfessionInfo Additional infos in encoded form. - */ - public ProfessionInfo( - NamingAuthority namingAuthority, - DirectoryString[] professionItems, - DerObjectIdentifier[] professionOids, - string registrationNumber, - Asn1OctetString addProfessionInfo) - { - this.namingAuthority = namingAuthority; - this.professionItems = new DerSequence(professionItems); - if (professionOids != null) - { - this.professionOids = new DerSequence(professionOids); - } - this.registrationNumber = registrationNumber; - this.addProfessionInfo = addProfessionInfo; - } - - /** - * Produce an object suitable for an Asn1OutputStream. - *

- * Returns: - *

- * 

-		*               ProfessionInfo ::= SEQUENCE
-		*               {
-		*                 namingAuthority [0] EXPLICIT NamingAuthority OPTIONAL,
-		*                 professionItems SEQUENCE OF DirectoryString (SIZE(1..128)),
-		*                 professionOids SEQUENCE OF OBJECT IDENTIFIER OPTIONAL,
-		*                 registrationNumber PrintableString(SIZE(1..128)) OPTIONAL,
-		*                 addProfessionInfo OCTET STRING OPTIONAL
-		*               }
-		*
- * - * @return an Asn1Object - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector vec = new Asn1EncodableVector(); - if (namingAuthority != null) - { - vec.Add(new DerTaggedObject(true, 0, namingAuthority)); - } - vec.Add(professionItems); - if (professionOids != null) - { - vec.Add(professionOids); - } - if (registrationNumber != null) - { - vec.Add(new DerPrintableString(registrationNumber, true)); - } - if (addProfessionInfo != null) - { - vec.Add(addProfessionInfo); - } - return new DerSequence(vec); - } - - /** - * @return Returns the addProfessionInfo. - */ - public virtual Asn1OctetString AddProfessionInfo - { - get { return addProfessionInfo; } - } - - /** - * @return Returns the namingAuthority. - */ - public virtual NamingAuthority NamingAuthority - { - get { return namingAuthority; } - } - - /** - * @return Returns the professionItems. - */ - public virtual DirectoryString[] GetProfessionItems() - { - DirectoryString[] result = new DirectoryString[professionItems.Count]; - - for (int i = 0; i < professionItems.Count; ++i) - { - result[i] = DirectoryString.GetInstance(professionItems[i]); - } - - return result; - } - - /** - * @return Returns the professionOids. - */ - public virtual DerObjectIdentifier[] GetProfessionOids() - { - if (professionOids == null) - { - return new DerObjectIdentifier[0]; - } - - DerObjectIdentifier[] result = new DerObjectIdentifier[professionOids.Count]; - - for (int i = 0; i < professionOids.Count; ++i) - { - result[i] = DerObjectIdentifier.GetInstance(professionOids[i]); - } - - return result; - } - - /** - * @return Returns the registrationNumber. - */ - public virtual string RegistrationNumber - { - get { return registrationNumber; } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/isismtt/x509/Restriction.cs b/bc-sharp-crypto/src/asn1/isismtt/x509/Restriction.cs deleted file mode 100644 index 75df252..0000000 --- a/bc-sharp-crypto/src/asn1/isismtt/x509/Restriction.cs +++ /dev/null @@ -1,82 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X500; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.IsisMtt.X509 -{ - /** - * Some other restriction regarding the usage of this certificate. - *

- * 

-	*  RestrictionSyntax ::= DirectoryString (SIZE(1..1024))
-	*
- */ - public class Restriction - : Asn1Encodable - { - private readonly DirectoryString restriction; - - public static Restriction GetInstance( - object obj) - { - if (obj is Restriction) - return (Restriction) obj; - - if (obj is IAsn1String) - return new Restriction(DirectoryString.GetInstance(obj)); - - throw new ArgumentException("Unknown object in GetInstance: " + Platform.GetTypeName(obj), "obj"); - } - - /** - * Constructor from DirectoryString. - *

- * The DirectoryString is of type RestrictionSyntax: - *

- * 

-		*      RestrictionSyntax ::= DirectoryString (SIZE(1..1024))
-		*
- * - * @param restriction A IAsn1String. - */ - private Restriction( - DirectoryString restriction) - { - this.restriction = restriction; - } - - /** - * Constructor from a given details. - * - * @param restriction The description of the restriction. - */ - public Restriction( - string restriction) - { - this.restriction = new DirectoryString(restriction); - } - - public virtual DirectoryString RestrictionString - { - get { return restriction; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - *

- * Returns: - *

- * 

-		*      RestrictionSyntax ::= DirectoryString (SIZE(1..1024))
-		* 

-		*
- * - * @return an Asn1Object - */ - public override Asn1Object ToAsn1Object() - { - return restriction.ToAsn1Object(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/kisa/KISAObjectIdentifiers.cs b/bc-sharp-crypto/src/asn1/kisa/KISAObjectIdentifiers.cs deleted file mode 100644 index 05351ec..0000000 --- a/bc-sharp-crypto/src/asn1/kisa/KISAObjectIdentifiers.cs +++ /dev/null @@ -1,8 +0,0 @@ -namespace Org.BouncyCastle.Asn1.Kisa -{ - public abstract class KisaObjectIdentifiers - { - public static readonly DerObjectIdentifier IdSeedCbc = new DerObjectIdentifier("1.2.410.200004.1.4"); - public static readonly DerObjectIdentifier IdNpkiAppCmsSeedWrap = new DerObjectIdentifier("1.2.410.200004.7.1.1.1"); - } -} diff --git a/bc-sharp-crypto/src/asn1/microsoft/MicrosoftObjectIdentifiers.cs b/bc-sharp-crypto/src/asn1/microsoft/MicrosoftObjectIdentifiers.cs deleted file mode 100644 index bc48c3f..0000000 --- a/bc-sharp-crypto/src/asn1/microsoft/MicrosoftObjectIdentifiers.cs +++ /dev/null @@ -1,19 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.Microsoft -{ - public abstract class MicrosoftObjectIdentifiers - { - // - // Microsoft - // iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) Microsoft(311) - // - public static readonly DerObjectIdentifier Microsoft = new DerObjectIdentifier("1.3.6.1.4.1.311"); - public static readonly DerObjectIdentifier MicrosoftCertTemplateV1 = Microsoft.Branch("20.2"); - public static readonly DerObjectIdentifier MicrosoftCAVersion = Microsoft.Branch("21.1"); - public static readonly DerObjectIdentifier MicrosoftPrevCACertHash = Microsoft.Branch("21.2"); - public static readonly DerObjectIdentifier MicrosoftCrlNextPublish = Microsoft.Branch("21.4"); - public static readonly DerObjectIdentifier MicrosoftCertTemplateV2 = Microsoft.Branch("21.7"); - public static readonly DerObjectIdentifier MicrosoftAppPolicies = Microsoft.Branch("21.10"); - } -} diff --git a/bc-sharp-crypto/src/asn1/misc/CAST5CBCParameters.cs b/bc-sharp-crypto/src/asn1/misc/CAST5CBCParameters.cs deleted file mode 100644 index 51fd660..0000000 --- a/bc-sharp-crypto/src/asn1/misc/CAST5CBCParameters.cs +++ /dev/null @@ -1,74 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Misc -{ - public class Cast5CbcParameters - : Asn1Encodable - { - private readonly DerInteger keyLength; - private readonly Asn1OctetString iv; - - public static Cast5CbcParameters GetInstance( - object o) - { - if (o is Cast5CbcParameters) - { - return (Cast5CbcParameters) o; - } - - if (o is Asn1Sequence) - { - return new Cast5CbcParameters((Asn1Sequence) o); - } - - throw new ArgumentException("unknown object in Cast5CbcParameters factory"); - } - - public Cast5CbcParameters( - byte[] iv, - int keyLength) - { - this.iv = new DerOctetString(iv); - this.keyLength = new DerInteger(keyLength); - } - - private Cast5CbcParameters( - Asn1Sequence seq) - { - if (seq.Count != 2) - throw new ArgumentException("Wrong number of elements in sequence", "seq"); - - iv = (Asn1OctetString) seq[0]; - keyLength = (DerInteger) seq[1]; - } - - public byte[] GetIV() - { - return Arrays.Clone(iv.GetOctets()); - } - - public int KeyLength - { - get { return keyLength.Value.IntValue; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * cast5CBCParameters ::= Sequence {
-         *                           iv         OCTET STRING DEFAULT 0,
-         *                                  -- Initialization vector
-         *                           keyLength  Integer
-         *                                  -- Key length, in bits
-         *                      }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(iv, keyLength); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/misc/IDEACBCPar.cs b/bc-sharp-crypto/src/asn1/misc/IDEACBCPar.cs deleted file mode 100644 index 72a60b9..0000000 --- a/bc-sharp-crypto/src/asn1/misc/IDEACBCPar.cs +++ /dev/null @@ -1,68 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; - -namespace Org.BouncyCastle.Asn1.Misc -{ - public class IdeaCbcPar - : Asn1Encodable - { - internal Asn1OctetString iv; - - public static IdeaCbcPar GetInstance( - object o) - { - if (o is IdeaCbcPar) - { - return (IdeaCbcPar) o; - } - - if (o is Asn1Sequence) - { - return new IdeaCbcPar((Asn1Sequence) o); - } - - throw new ArgumentException("unknown object in IDEACBCPar factory"); - } - - public IdeaCbcPar( - byte[] iv) - { - this.iv = new DerOctetString(iv); - } - - private IdeaCbcPar( - Asn1Sequence seq) - { - if (seq.Count == 1) - { - iv = (Asn1OctetString) seq[0]; - } - } - - public byte[] GetIV() - { - return iv == null ? null : iv.GetOctets(); - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * IDEA-CBCPar ::= Sequence {
-         *                      iv    OCTET STRING OPTIONAL -- exactly 8 octets
-         *                  }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - if (iv != null) - { - v.Add(iv); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/misc/MiscObjectIdentifiers.cs b/bc-sharp-crypto/src/asn1/misc/MiscObjectIdentifiers.cs deleted file mode 100644 index 8128b69..0000000 --- a/bc-sharp-crypto/src/asn1/misc/MiscObjectIdentifiers.cs +++ /dev/null @@ -1,79 +0,0 @@ -namespace Org.BouncyCastle.Asn1.Misc -{ - public abstract class MiscObjectIdentifiers - { - // - // Netscape - // iso/itu(2) joint-assign(16) us(840) uscompany(1) Netscape(113730) cert-extensions(1) } - // - public static readonly DerObjectIdentifier Netscape = new DerObjectIdentifier("2.16.840.1.113730.1"); - public static readonly DerObjectIdentifier NetscapeCertType = Netscape.Branch("1"); - public static readonly DerObjectIdentifier NetscapeBaseUrl = Netscape.Branch("2"); - public static readonly DerObjectIdentifier NetscapeRevocationUrl = Netscape.Branch("3"); - public static readonly DerObjectIdentifier NetscapeCARevocationUrl = Netscape.Branch("4"); - public static readonly DerObjectIdentifier NetscapeRenewalUrl = Netscape.Branch("7"); - public static readonly DerObjectIdentifier NetscapeCAPolicyUrl = Netscape.Branch("8"); - public static readonly DerObjectIdentifier NetscapeSslServerName = Netscape.Branch("12"); - public static readonly DerObjectIdentifier NetscapeCertComment = Netscape.Branch("13"); - - // - // Verisign - // iso/itu(2) joint-assign(16) us(840) uscompany(1) verisign(113733) cert-extensions(1) } - // - public static readonly DerObjectIdentifier Verisign = new DerObjectIdentifier("2.16.840.1.113733.1"); - - // - // CZAG - country, zip, age, and gender - // - public static readonly DerObjectIdentifier VerisignCzagExtension = Verisign.Branch("6.3"); - - public static readonly DerObjectIdentifier VerisignPrivate_6_9 = Verisign.Branch("6.9"); - public static readonly DerObjectIdentifier VerisignOnSiteJurisdictionHash = Verisign.Branch("6.11"); - public static readonly DerObjectIdentifier VerisignBitString_6_13 = Verisign.Branch("6.13"); - - // D&B D-U-N-S number - public static readonly DerObjectIdentifier VerisignDnbDunsNumber = Verisign.Branch("6.15"); - - public static readonly DerObjectIdentifier VerisignIssStrongCrypto = Verisign.Branch("8.1"); - - // - // Novell - // iso/itu(2) country(16) us(840) organization(1) novell(113719) - // - public static readonly string Novell = "2.16.840.1.113719"; - public static readonly DerObjectIdentifier NovellSecurityAttribs = new DerObjectIdentifier(Novell + ".1.9.4.1"); - - // - // Entrust - // iso(1) member-body(16) us(840) nortelnetworks(113533) entrust(7) - // - public static readonly string Entrust = "1.2.840.113533.7"; - public static readonly DerObjectIdentifier EntrustVersionExtension = new DerObjectIdentifier(Entrust + ".65.0"); - - // - // Ascom - // - public static readonly DerObjectIdentifier as_sys_sec_alg_ideaCBC = new DerObjectIdentifier("1.3.6.1.4.1.188.7.1.1.2"); - - // - // Peter Gutmann's Cryptlib - // - public static readonly DerObjectIdentifier cryptlib = new DerObjectIdentifier("1.3.6.1.4.1.3029"); - - public static readonly DerObjectIdentifier cryptlib_algorithm = cryptlib.Branch("1"); - public static readonly DerObjectIdentifier cryptlib_algorithm_blowfish_ECB = cryptlib_algorithm.Branch("1.1"); - public static readonly DerObjectIdentifier cryptlib_algorithm_blowfish_CBC = cryptlib_algorithm.Branch("1.2"); - public static readonly DerObjectIdentifier cryptlib_algorithm_blowfish_CFB = cryptlib_algorithm.Branch("1.3"); - public static readonly DerObjectIdentifier cryptlib_algorithm_blowfish_OFB = cryptlib_algorithm.Branch("1.4"); - - // - // Blake2b - // - public static readonly DerObjectIdentifier blake2 = new DerObjectIdentifier("1.3.6.1.4.1.1722.12.2"); - - public static readonly DerObjectIdentifier id_blake2b160 = blake2.Branch("1.5"); - public static readonly DerObjectIdentifier id_blake2b256 = blake2.Branch("1.8"); - public static readonly DerObjectIdentifier id_blake2b384 = blake2.Branch("1.12"); - public static readonly DerObjectIdentifier id_blake2b512 = blake2.Branch("1.16"); - } -} diff --git a/bc-sharp-crypto/src/asn1/misc/NetscapeCertType.cs b/bc-sharp-crypto/src/asn1/misc/NetscapeCertType.cs deleted file mode 100644 index d809eae..0000000 --- a/bc-sharp-crypto/src/asn1/misc/NetscapeCertType.cs +++ /dev/null @@ -1,54 +0,0 @@ -using Org.BouncyCastle.Asn1; - -namespace Org.BouncyCastle.Asn1.Misc -{ - /** - * The NetscapeCertType object. - * 
-     *    NetscapeCertType ::= BIT STRING {
-     *         SSLClient               (0),
-     *         SSLServer               (1),
-     *         S/MIME                  (2),
-     *         Object Signing          (3),
-     *         Reserved                (4),
-     *         SSL CA                  (5),
-     *         S/MIME CA               (6),
-     *         Object Signing CA       (7) }
-     *
- */ - public class NetscapeCertType - : DerBitString - { - public const int SslClient = (1 << 7); - public const int SslServer = (1 << 6); - public const int Smime = (1 << 5); - public const int ObjectSigning = (1 << 4); - public const int Reserved = (1 << 3); - public const int SslCA = (1 << 2); - public const int SmimeCA = (1 << 1); - public const int ObjectSigningCA = (1 << 0); - - /** - * Basic constructor. - * - * @param usage - the bitwise OR of the Key Usage flags giving the - * allowed uses for the key. - * e.g. (X509NetscapeCertType.sslCA | X509NetscapeCertType.smimeCA) - */ - public NetscapeCertType(int usage) - : base(usage) - { - } - - public NetscapeCertType(DerBitString usage) - : base(usage.GetBytes(), usage.PadBits) - { - } - - public override string ToString() - { - byte[] data = GetBytes(); - return "NetscapeCertType: 0x" + (data[0] & 0xff).ToString("X"); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/misc/NetscapeRevocationURL.cs b/bc-sharp-crypto/src/asn1/misc/NetscapeRevocationURL.cs deleted file mode 100644 index 6cac031..0000000 --- a/bc-sharp-crypto/src/asn1/misc/NetscapeRevocationURL.cs +++ /dev/null @@ -1,18 +0,0 @@ -using Org.BouncyCastle.Asn1; - -namespace Org.BouncyCastle.Asn1.Misc -{ - public class NetscapeRevocationUrl - : DerIA5String - { - public NetscapeRevocationUrl(DerIA5String str) - : base(str.GetString()) - { - } - - public override string ToString() - { - return "NetscapeRevocationUrl: " + this.GetString(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/misc/VerisignCzagExtension.cs b/bc-sharp-crypto/src/asn1/misc/VerisignCzagExtension.cs deleted file mode 100644 index 1c3054b..0000000 --- a/bc-sharp-crypto/src/asn1/misc/VerisignCzagExtension.cs +++ /dev/null @@ -1,18 +0,0 @@ -using Org.BouncyCastle.Asn1; - -namespace Org.BouncyCastle.Asn1.Misc -{ - public class VerisignCzagExtension - : DerIA5String - { - public VerisignCzagExtension(DerIA5String str) - : base(str.GetString()) - { - } - - public override string ToString() - { - return "VerisignCzagExtension: " + this.GetString(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/mozilla/PublicKeyAndChallenge.cs b/bc-sharp-crypto/src/asn1/mozilla/PublicKeyAndChallenge.cs deleted file mode 100644 index ff2a119..0000000 --- a/bc-sharp-crypto/src/asn1/mozilla/PublicKeyAndChallenge.cs +++ /dev/null @@ -1,68 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Mozilla -{ - /** - * This is designed to parse - * the PublicKeyAndChallenge created by the KEYGEN tag included by - * Mozilla based browsers. - * 
-	 *  PublicKeyAndChallenge ::= SEQUENCE {
-	 *    spki SubjectPublicKeyInfo,
-	 *    challenge IA5STRING
-	 *  }
-	 *
-	 *
- */ - public class PublicKeyAndChallenge - : Asn1Encodable - { - private Asn1Sequence pkacSeq; - private SubjectPublicKeyInfo spki; - private DerIA5String challenge; - - public static PublicKeyAndChallenge GetInstance( - object obj) - { - if (obj is PublicKeyAndChallenge) - { - return (PublicKeyAndChallenge) obj; - } - - if (obj is Asn1Sequence) - { - return new PublicKeyAndChallenge((Asn1Sequence) obj); - } - - throw new ArgumentException( - "unknown object in 'PublicKeyAndChallenge' factory : " - + Platform.GetTypeName(obj) + "."); - } - - public PublicKeyAndChallenge( - Asn1Sequence seq) - { - pkacSeq = seq; - spki = SubjectPublicKeyInfo.GetInstance(seq[0]); - challenge = DerIA5String.GetInstance(seq[1]); - } - - public override Asn1Object ToAsn1Object() - { - return pkacSeq; - } - - public SubjectPublicKeyInfo SubjectPublicKeyInfo - { - get { return spki; } - } - - public DerIA5String Challenge - { - get { return challenge; } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/nist/NISTNamedCurves.cs b/bc-sharp-crypto/src/asn1/nist/NISTNamedCurves.cs deleted file mode 100644 index f6c1598..0000000 --- a/bc-sharp-crypto/src/asn1/nist/NISTNamedCurves.cs +++ /dev/null @@ -1,102 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Sec; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Asn1.Nist -{ - /** - * Utility class for fetching curves using their NIST names as published in FIPS-PUB 186-3 - */ - public sealed class NistNamedCurves - { - private NistNamedCurves() - { - } - - private static readonly IDictionary objIds = Platform.CreateHashtable(); - private static readonly IDictionary names = Platform.CreateHashtable(); - - private static void DefineCurveAlias( - string name, - DerObjectIdentifier oid) - { - objIds.Add(Platform.ToUpperInvariant(name), oid); - names.Add(oid, name); - } - - static NistNamedCurves() - { - DefineCurveAlias("B-163", SecObjectIdentifiers.SecT163r2); - DefineCurveAlias("B-233", SecObjectIdentifiers.SecT233r1); - DefineCurveAlias("B-283", SecObjectIdentifiers.SecT283r1); - DefineCurveAlias("B-409", SecObjectIdentifiers.SecT409r1); - DefineCurveAlias("B-571", SecObjectIdentifiers.SecT571r1); - - DefineCurveAlias("K-163", SecObjectIdentifiers.SecT163k1); - DefineCurveAlias("K-233", SecObjectIdentifiers.SecT233k1); - DefineCurveAlias("K-283", SecObjectIdentifiers.SecT283k1); - DefineCurveAlias("K-409", SecObjectIdentifiers.SecT409k1); - DefineCurveAlias("K-571", SecObjectIdentifiers.SecT571k1); - - DefineCurveAlias("P-192", SecObjectIdentifiers.SecP192r1); - DefineCurveAlias("P-224", SecObjectIdentifiers.SecP224r1); - DefineCurveAlias("P-256", SecObjectIdentifiers.SecP256r1); - DefineCurveAlias("P-384", SecObjectIdentifiers.SecP384r1); - DefineCurveAlias("P-521", SecObjectIdentifiers.SecP521r1); - } - - public static X9ECParameters GetByName( - string name) - { - DerObjectIdentifier oid = GetOid(name); - return oid == null ? null : GetByOid(oid); - } - - /** - * return the X9ECParameters object for the named curve represented by - * the passed in object identifier. Null if the curve isn't present. - * - * @param oid an object identifier representing a named curve, if present. - */ - public static X9ECParameters GetByOid( - DerObjectIdentifier oid) - { - return SecNamedCurves.GetByOid(oid); - } - - /** - * return the object identifier signified by the passed in name. Null - * if there is no object identifier associated with name. - * - * @return the object identifier associated with name, if present. - */ - public static DerObjectIdentifier GetOid( - string name) - { - return (DerObjectIdentifier) objIds[Platform.ToUpperInvariant(name)]; - } - - /** - * return the named curve name represented by the given object identifier. - */ - public static string GetName( - DerObjectIdentifier oid) - { - return (string) names[oid]; - } - - /** - * returns an enumeration containing the name strings for curves - * contained in this structure. - */ - public static IEnumerable Names - { - get { return new EnumerableProxy(names.Values); } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/nist/NISTObjectIdentifiers.cs b/bc-sharp-crypto/src/asn1/nist/NISTObjectIdentifiers.cs deleted file mode 100644 index 55b9d8e..0000000 --- a/bc-sharp-crypto/src/asn1/nist/NISTObjectIdentifiers.cs +++ /dev/null @@ -1,71 +0,0 @@ -using Org.BouncyCastle.Asn1; - -namespace Org.BouncyCastle.Asn1.Nist -{ - public sealed class NistObjectIdentifiers - { - private NistObjectIdentifiers() - { - } - - // - // NIST - // iso/itu(2) joint-assign(16) us(840) organization(1) gov(101) csor(3) - - // - // nistalgorithms(4) - // - public static readonly DerObjectIdentifier NistAlgorithm = new DerObjectIdentifier("2.16.840.1.101.3.4"); - - public static readonly DerObjectIdentifier HashAlgs = NistAlgorithm.Branch("2"); - - public static readonly DerObjectIdentifier IdSha256 = HashAlgs.Branch("1"); - public static readonly DerObjectIdentifier IdSha384 = HashAlgs.Branch("2"); - public static readonly DerObjectIdentifier IdSha512 = HashAlgs.Branch("3"); - public static readonly DerObjectIdentifier IdSha224 = HashAlgs.Branch("4"); - public static readonly DerObjectIdentifier IdSha512_224 = HashAlgs.Branch("5"); - public static readonly DerObjectIdentifier IdSha512_256 = HashAlgs.Branch("6"); - public static readonly DerObjectIdentifier IdSha3_224 = HashAlgs.Branch("7"); - public static readonly DerObjectIdentifier IdSha3_256 = HashAlgs.Branch("8"); - public static readonly DerObjectIdentifier IdSha3_384 = HashAlgs.Branch("9"); - public static readonly DerObjectIdentifier IdSha3_512 = HashAlgs.Branch("10"); - public static readonly DerObjectIdentifier IdShake128 = HashAlgs.Branch("11"); - public static readonly DerObjectIdentifier IdShake256 = HashAlgs.Branch("12"); - - public static readonly DerObjectIdentifier Aes = new DerObjectIdentifier(NistAlgorithm + ".1"); - - public static readonly DerObjectIdentifier IdAes128Ecb = new DerObjectIdentifier(Aes + ".1"); - public static readonly DerObjectIdentifier IdAes128Cbc = new DerObjectIdentifier(Aes + ".2"); - public static readonly DerObjectIdentifier IdAes128Ofb = new DerObjectIdentifier(Aes + ".3"); - public static readonly DerObjectIdentifier IdAes128Cfb = new DerObjectIdentifier(Aes + ".4"); - public static readonly DerObjectIdentifier IdAes128Wrap = new DerObjectIdentifier(Aes + ".5"); - public static readonly DerObjectIdentifier IdAes128Gcm = new DerObjectIdentifier(Aes + ".6"); - public static readonly DerObjectIdentifier IdAes128Ccm = new DerObjectIdentifier(Aes + ".7"); - - public static readonly DerObjectIdentifier IdAes192Ecb = new DerObjectIdentifier(Aes + ".21"); - public static readonly DerObjectIdentifier IdAes192Cbc = new DerObjectIdentifier(Aes + ".22"); - public static readonly DerObjectIdentifier IdAes192Ofb = new DerObjectIdentifier(Aes + ".23"); - public static readonly DerObjectIdentifier IdAes192Cfb = new DerObjectIdentifier(Aes + ".24"); - public static readonly DerObjectIdentifier IdAes192Wrap = new DerObjectIdentifier(Aes + ".25"); - public static readonly DerObjectIdentifier IdAes192Gcm = new DerObjectIdentifier(Aes + ".26"); - public static readonly DerObjectIdentifier IdAes192Ccm = new DerObjectIdentifier(Aes + ".27"); - - public static readonly DerObjectIdentifier IdAes256Ecb = new DerObjectIdentifier(Aes + ".41"); - public static readonly DerObjectIdentifier IdAes256Cbc = new DerObjectIdentifier(Aes + ".42"); - public static readonly DerObjectIdentifier IdAes256Ofb = new DerObjectIdentifier(Aes + ".43"); - public static readonly DerObjectIdentifier IdAes256Cfb = new DerObjectIdentifier(Aes + ".44"); - public static readonly DerObjectIdentifier IdAes256Wrap = new DerObjectIdentifier(Aes + ".45"); - public static readonly DerObjectIdentifier IdAes256Gcm = new DerObjectIdentifier(Aes + ".46"); - public static readonly DerObjectIdentifier IdAes256Ccm = new DerObjectIdentifier(Aes + ".47"); - - // - // signatures - // - public static readonly DerObjectIdentifier IdDsaWithSha2 = new DerObjectIdentifier(NistAlgorithm + ".3"); - - public static readonly DerObjectIdentifier DsaWithSha224 = new DerObjectIdentifier(IdDsaWithSha2 + ".1"); - public static readonly DerObjectIdentifier DsaWithSha256 = new DerObjectIdentifier(IdDsaWithSha2 + ".2"); - public static readonly DerObjectIdentifier DsaWithSha384 = new DerObjectIdentifier(IdDsaWithSha2 + ".3"); - public static readonly DerObjectIdentifier DsaWithSha512 = new DerObjectIdentifier(IdDsaWithSha2 + ".4"); - } -} diff --git a/bc-sharp-crypto/src/asn1/ntt/NTTObjectIdentifiers.cs b/bc-sharp-crypto/src/asn1/ntt/NTTObjectIdentifiers.cs deleted file mode 100644 index cd25956..0000000 --- a/bc-sharp-crypto/src/asn1/ntt/NTTObjectIdentifiers.cs +++ /dev/null @@ -1,14 +0,0 @@ -namespace Org.BouncyCastle.Asn1.Ntt -{ - /// From RFC 3657 - public abstract class NttObjectIdentifiers - { - public static readonly DerObjectIdentifier IdCamellia128Cbc = new DerObjectIdentifier("1.2.392.200011.61.1.1.1.2"); - public static readonly DerObjectIdentifier IdCamellia192Cbc = new DerObjectIdentifier("1.2.392.200011.61.1.1.1.3"); - public static readonly DerObjectIdentifier IdCamellia256Cbc = new DerObjectIdentifier("1.2.392.200011.61.1.1.1.4"); - - public static readonly DerObjectIdentifier IdCamellia128Wrap = new DerObjectIdentifier("1.2.392.200011.61.1.1.3.2"); - public static readonly DerObjectIdentifier IdCamellia192Wrap = new DerObjectIdentifier("1.2.392.200011.61.1.1.3.3"); - public static readonly DerObjectIdentifier IdCamellia256Wrap = new DerObjectIdentifier("1.2.392.200011.61.1.1.3.4"); - } -} diff --git a/bc-sharp-crypto/src/asn1/ocsp/BasicOCSPResponse.cs b/bc-sharp-crypto/src/asn1/ocsp/BasicOCSPResponse.cs deleted file mode 100644 index e6aa1f8..0000000 --- a/bc-sharp-crypto/src/asn1/ocsp/BasicOCSPResponse.cs +++ /dev/null @@ -1,137 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Ocsp -{ - public class BasicOcspResponse - : Asn1Encodable - { - private readonly ResponseData tbsResponseData; - private readonly AlgorithmIdentifier signatureAlgorithm; - private readonly DerBitString signature; - private readonly Asn1Sequence certs; - - public static BasicOcspResponse GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static BasicOcspResponse GetInstance( - object obj) - { - if (obj == null || obj is BasicOcspResponse) - { - return (BasicOcspResponse)obj; - } - - if (obj is Asn1Sequence) - { - return new BasicOcspResponse((Asn1Sequence)obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public BasicOcspResponse( - ResponseData tbsResponseData, - AlgorithmIdentifier signatureAlgorithm, - DerBitString signature, - Asn1Sequence certs) - { - this.tbsResponseData = tbsResponseData; - this.signatureAlgorithm = signatureAlgorithm; - this.signature = signature; - this.certs = certs; - } - - private BasicOcspResponse( - Asn1Sequence seq) - { - this.tbsResponseData = ResponseData.GetInstance(seq[0]); - this.signatureAlgorithm = AlgorithmIdentifier.GetInstance(seq[1]); - this.signature = (DerBitString)seq[2]; - - if (seq.Count > 3) - { - this.certs = Asn1Sequence.GetInstance((Asn1TaggedObject)seq[3], true); - } - } - - [Obsolete("Use TbsResponseData property instead")] - public ResponseData GetTbsResponseData() - { - return tbsResponseData; - } - - public ResponseData TbsResponseData - { - get { return tbsResponseData; } - } - - [Obsolete("Use SignatureAlgorithm property instead")] - public AlgorithmIdentifier GetSignatureAlgorithm() - { - return signatureAlgorithm; - } - - public AlgorithmIdentifier SignatureAlgorithm - { - get { return signatureAlgorithm; } - } - - [Obsolete("Use Signature property instead")] - public DerBitString GetSignature() - { - return signature; - } - - public DerBitString Signature - { - get { return signature; } - } - - public byte[] GetSignatureOctets() - { - return signature.GetOctets(); - } - - [Obsolete("Use Certs property instead")] - public Asn1Sequence GetCerts() - { - return certs; - } - - public Asn1Sequence Certs - { - get { return certs; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * BasicOcspResponse       ::= Sequence {
-         *      tbsResponseData      ResponseData,
-         *      signatureAlgorithm   AlgorithmIdentifier,
-         *      signature            BIT STRING,
-         *      certs                [0] EXPLICIT Sequence OF Certificate OPTIONAL }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector( - tbsResponseData, signatureAlgorithm, signature); - - if (certs != null) - { - v.Add(new DerTaggedObject(true, 0, certs)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/ocsp/CertID.cs b/bc-sharp-crypto/src/asn1/ocsp/CertID.cs deleted file mode 100644 index 523f6b8..0000000 --- a/bc-sharp-crypto/src/asn1/ocsp/CertID.cs +++ /dev/null @@ -1,99 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Ocsp -{ - public class CertID - : Asn1Encodable - { - private readonly AlgorithmIdentifier hashAlgorithm; - private readonly Asn1OctetString issuerNameHash; - private readonly Asn1OctetString issuerKeyHash; - private readonly DerInteger serialNumber; - - public static CertID GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static CertID GetInstance( - object obj) - { - if (obj == null || obj is CertID) - { - return (CertID)obj; - } - - if (obj is Asn1Sequence) - { - return new CertID((Asn1Sequence)obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public CertID( - AlgorithmIdentifier hashAlgorithm, - Asn1OctetString issuerNameHash, - Asn1OctetString issuerKeyHash, - DerInteger serialNumber) - { - this.hashAlgorithm = hashAlgorithm; - this.issuerNameHash = issuerNameHash; - this.issuerKeyHash = issuerKeyHash; - this.serialNumber = serialNumber; - } - - private CertID( - Asn1Sequence seq) - { - if (seq.Count != 4) - throw new ArgumentException("Wrong number of elements in sequence", "seq"); - - this.hashAlgorithm = AlgorithmIdentifier.GetInstance(seq[0]); - this.issuerNameHash = Asn1OctetString.GetInstance(seq[1]); - this.issuerKeyHash = Asn1OctetString.GetInstance(seq[2]); - this.serialNumber = DerInteger.GetInstance(seq[3]); - } - - public AlgorithmIdentifier HashAlgorithm - { - get { return hashAlgorithm; } - } - - public Asn1OctetString IssuerNameHash - { - get { return issuerNameHash; } - } - - public Asn1OctetString IssuerKeyHash - { - get { return issuerKeyHash; } - } - - public DerInteger SerialNumber - { - get { return serialNumber; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * CertID          ::=     Sequence {
-         *     hashAlgorithm       AlgorithmIdentifier,
-         *     issuerNameHash      OCTET STRING, -- Hash of Issuer's DN
-         *     issuerKeyHash       OCTET STRING, -- Hash of Issuers public key
-         *     serialNumber        CertificateSerialNumber }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(hashAlgorithm, issuerNameHash, issuerKeyHash, serialNumber); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/ocsp/CertStatus.cs b/bc-sharp-crypto/src/asn1/ocsp/CertStatus.cs deleted file mode 100644 index 7dd99b8..0000000 --- a/bc-sharp-crypto/src/asn1/ocsp/CertStatus.cs +++ /dev/null @@ -1,96 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Ocsp -{ - public class CertStatus - : Asn1Encodable, IAsn1Choice - { - private readonly int tagNo; - private readonly Asn1Encodable value; - - /** - * create a CertStatus object with a tag of zero. - */ - public CertStatus() - { - tagNo = 0; - value = DerNull.Instance; - } - - public CertStatus( - RevokedInfo info) - { - tagNo = 1; - value = info; - } - - public CertStatus( - int tagNo, - Asn1Encodable value) - { - this.tagNo = tagNo; - this.value = value; - } - - public CertStatus( - Asn1TaggedObject choice) - { - this.tagNo = choice.TagNo; - - switch (choice.TagNo) - { - case 1: - value = RevokedInfo.GetInstance(choice, false); - break; - case 0: - case 2: - value = DerNull.Instance; - break; - default: - throw new ArgumentException("Unknown tag encountered: " + choice.TagNo); - } - } - - public static CertStatus GetInstance( - object obj) - { - if (obj == null || obj is CertStatus) - { - return (CertStatus)obj; - } - - if (obj is Asn1TaggedObject) - { - return new CertStatus((Asn1TaggedObject)obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public int TagNo - { - get { return tagNo; } - } - - public Asn1Encodable Status - { - get { return value; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         *  CertStatus ::= CHOICE {
-         *                  good        [0]     IMPLICIT Null,
-         *                  revoked     [1]     IMPLICIT RevokedInfo,
-         *                  unknown     [2]     IMPLICIT UnknownInfo }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return new DerTaggedObject(false, tagNo, value); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/ocsp/CrlID.cs b/bc-sharp-crypto/src/asn1/ocsp/CrlID.cs deleted file mode 100644 index cfb3d6f..0000000 --- a/bc-sharp-crypto/src/asn1/ocsp/CrlID.cs +++ /dev/null @@ -1,82 +0,0 @@ -using System; -using System.Collections; - -namespace Org.BouncyCastle.Asn1.Ocsp -{ - public class CrlID - : Asn1Encodable - { - private readonly DerIA5String crlUrl; - private readonly DerInteger crlNum; - private readonly DerGeneralizedTime crlTime; - - // TODO Add GetInstance method(s) and amke this private? - public CrlID( - Asn1Sequence seq) - { - foreach (Asn1TaggedObject o in seq) - { - switch (o.TagNo) - { - case 0: - crlUrl = DerIA5String.GetInstance(o, true); - break; - case 1: - crlNum = DerInteger.GetInstance(o, true); - break; - case 2: - crlTime = DerGeneralizedTime.GetInstance(o, true); - break; - default: - throw new ArgumentException("unknown tag number: " + o.TagNo); - } - } - } - - public DerIA5String CrlUrl - { - get { return crlUrl; } - } - - public DerInteger CrlNum - { - get { return crlNum; } - } - - public DerGeneralizedTime CrlTime - { - get { return crlTime; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * CrlID ::= Sequence {
-         *     crlUrl               [0]     EXPLICIT IA5String OPTIONAL,
-         *     crlNum               [1]     EXPLICIT Integer OPTIONAL,
-         *     crlTime              [2]     EXPLICIT GeneralizedTime OPTIONAL }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - if (crlUrl != null) - { - v.Add(new DerTaggedObject(true, 0, crlUrl)); - } - - if (crlNum != null) - { - v.Add(new DerTaggedObject(true, 1, crlNum)); - } - - if (crlTime != null) - { - v.Add(new DerTaggedObject(true, 2, crlTime)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/ocsp/OCSPObjectIdentifiers.cs b/bc-sharp-crypto/src/asn1/ocsp/OCSPObjectIdentifiers.cs deleted file mode 100644 index a37c855..0000000 --- a/bc-sharp-crypto/src/asn1/ocsp/OCSPObjectIdentifiers.cs +++ /dev/null @@ -1,23 +0,0 @@ -using Org.BouncyCastle.Asn1; - -namespace Org.BouncyCastle.Asn1.Ocsp -{ - public abstract class OcspObjectIdentifiers - { - internal const string PkixOcspId = "1.3.6.1.5.5.7.48.1"; - - public static readonly DerObjectIdentifier PkixOcsp = new DerObjectIdentifier(PkixOcspId); - public static readonly DerObjectIdentifier PkixOcspBasic = new DerObjectIdentifier(PkixOcspId + ".1"); - - // - // extensions - // - public static readonly DerObjectIdentifier PkixOcspNonce = new DerObjectIdentifier(PkixOcsp + ".2"); - public static readonly DerObjectIdentifier PkixOcspCrl = new DerObjectIdentifier(PkixOcsp + ".3"); - - public static readonly DerObjectIdentifier PkixOcspResponse = new DerObjectIdentifier(PkixOcsp + ".4"); - public static readonly DerObjectIdentifier PkixOcspNocheck = new DerObjectIdentifier(PkixOcsp + ".5"); - public static readonly DerObjectIdentifier PkixOcspArchiveCutoff = new DerObjectIdentifier(PkixOcsp + ".6"); - public static readonly DerObjectIdentifier PkixOcspServiceLocator = new DerObjectIdentifier(PkixOcsp + ".7"); - } -} diff --git a/bc-sharp-crypto/src/asn1/ocsp/OCSPRequest.cs b/bc-sharp-crypto/src/asn1/ocsp/OCSPRequest.cs deleted file mode 100644 index 2407678..0000000 --- a/bc-sharp-crypto/src/asn1/ocsp/OCSPRequest.cs +++ /dev/null @@ -1,89 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Ocsp -{ - public class OcspRequest - : Asn1Encodable - { - private readonly TbsRequest tbsRequest; - private readonly Signature optionalSignature; - - public static OcspRequest GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static OcspRequest GetInstance( - object obj) - { - if (obj == null || obj is OcspRequest) - { - return (OcspRequest)obj; - } - - if (obj is Asn1Sequence) - { - return new OcspRequest((Asn1Sequence)obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public OcspRequest( - TbsRequest tbsRequest, - Signature optionalSignature) - { - if (tbsRequest == null) - throw new ArgumentNullException("tbsRequest"); - - this.tbsRequest = tbsRequest; - this.optionalSignature = optionalSignature; - } - - private OcspRequest( - Asn1Sequence seq) - { - tbsRequest = TbsRequest.GetInstance(seq[0]); - - if (seq.Count == 2) - { - optionalSignature = Signature.GetInstance( - (Asn1TaggedObject)seq[1], true); - } - } - - public TbsRequest TbsRequest - { - get { return tbsRequest; } - } - - public Signature OptionalSignature - { - get { return optionalSignature; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * OcspRequest     ::=     Sequence {
-         *     tbsRequest                  TBSRequest,
-         *     optionalSignature   [0]     EXPLICIT Signature OPTIONAL }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(tbsRequest); - - if (optionalSignature != null) - { - v.Add(new DerTaggedObject(true, 0, optionalSignature)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/ocsp/OCSPResponse.cs b/bc-sharp-crypto/src/asn1/ocsp/OCSPResponse.cs deleted file mode 100644 index 9477b61..0000000 --- a/bc-sharp-crypto/src/asn1/ocsp/OCSPResponse.cs +++ /dev/null @@ -1,90 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Ocsp -{ - public class OcspResponse - : Asn1Encodable - { - private readonly OcspResponseStatus responseStatus; - private readonly ResponseBytes responseBytes; - - public static OcspResponse GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static OcspResponse GetInstance( - object obj) - { - if (obj == null || obj is OcspResponse) - { - return (OcspResponse)obj; - } - - if (obj is Asn1Sequence) - { - return new OcspResponse((Asn1Sequence)obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public OcspResponse( - OcspResponseStatus responseStatus, - ResponseBytes responseBytes) - { - if (responseStatus == null) - throw new ArgumentNullException("responseStatus"); - - this.responseStatus = responseStatus; - this.responseBytes = responseBytes; - } - - private OcspResponse( - Asn1Sequence seq) - { - responseStatus = new OcspResponseStatus( - DerEnumerated.GetInstance(seq[0])); - - if (seq.Count == 2) - { - responseBytes = ResponseBytes.GetInstance( - (Asn1TaggedObject)seq[1], true); - } - } - - public OcspResponseStatus ResponseStatus - { - get { return responseStatus; } - } - - public ResponseBytes ResponseBytes - { - get { return responseBytes; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * OcspResponse ::= Sequence {
-         *     responseStatus         OcspResponseStatus,
-         *     responseBytes          [0] EXPLICIT ResponseBytes OPTIONAL }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(responseStatus); - - if (responseBytes != null) - { - v.Add(new DerTaggedObject(true, 0, responseBytes)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/ocsp/OCSPResponseStatus.cs b/bc-sharp-crypto/src/asn1/ocsp/OCSPResponseStatus.cs deleted file mode 100644 index 653317e..0000000 --- a/bc-sharp-crypto/src/asn1/ocsp/OCSPResponseStatus.cs +++ /dev/null @@ -1,41 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; - -namespace Org.BouncyCastle.Asn1.Ocsp -{ - public class OcspResponseStatus - : DerEnumerated - { - public const int Successful = 0; - public const int MalformedRequest = 1; - public const int InternalError = 2; - public const int TryLater = 3; - public const int SignatureRequired = 5; - public const int Unauthorized = 6; - - /** - * The OcspResponseStatus enumeration. - * 
-         * OcspResponseStatus ::= Enumerated {
-         *     successful            (0),  --Response has valid confirmations
-         *     malformedRequest      (1),  --Illegal confirmation request
-         *     internalError         (2),  --Internal error in issuer
-         *     tryLater              (3),  --Try again later
-         *                                 --(4) is not used
-         *     sigRequired           (5),  --Must sign the request
-         *     unauthorized          (6)   --Request unauthorized
-         * }
-         *
- */ - public OcspResponseStatus(int value) - : base(value) - { - } - - public OcspResponseStatus(DerEnumerated value) - : base(value.Value.IntValue) - { - } - } -} diff --git a/bc-sharp-crypto/src/asn1/ocsp/Request.cs b/bc-sharp-crypto/src/asn1/ocsp/Request.cs deleted file mode 100644 index 26e81ba..0000000 --- a/bc-sharp-crypto/src/asn1/ocsp/Request.cs +++ /dev/null @@ -1,91 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Ocsp -{ - public class Request - : Asn1Encodable - { - private readonly CertID reqCert; - private readonly X509Extensions singleRequestExtensions; - - public static Request GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static Request GetInstance( - object obj) - { - if (obj == null || obj is Request) - { - return (Request)obj; - } - - if (obj is Asn1Sequence) - { - return new Request((Asn1Sequence)obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public Request( - CertID reqCert, - X509Extensions singleRequestExtensions) - { - if (reqCert == null) - throw new ArgumentNullException("reqCert"); - - this.reqCert = reqCert; - this.singleRequestExtensions = singleRequestExtensions; - } - - private Request( - Asn1Sequence seq) - { - reqCert = CertID.GetInstance(seq[0]); - - if (seq.Count == 2) - { - singleRequestExtensions = X509Extensions.GetInstance( - (Asn1TaggedObject)seq[1], true); - } - } - - public CertID ReqCert - { - get { return reqCert; } - } - - public X509Extensions SingleRequestExtensions - { - get { return singleRequestExtensions; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * Request         ::=     Sequence {
-         *     reqCert                     CertID,
-         *     singleRequestExtensions     [0] EXPLICIT Extensions OPTIONAL }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(reqCert); - - if (singleRequestExtensions != null) - { - v.Add(new DerTaggedObject(true, 0, singleRequestExtensions)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/ocsp/ResponderID.cs b/bc-sharp-crypto/src/asn1/ocsp/ResponderID.cs deleted file mode 100644 index 143b173..0000000 --- a/bc-sharp-crypto/src/asn1/ocsp/ResponderID.cs +++ /dev/null @@ -1,107 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; - -namespace Org.BouncyCastle.Asn1.Ocsp -{ - public class ResponderID - : Asn1Encodable, IAsn1Choice - { - private readonly Asn1Encodable id; - - public static ResponderID GetInstance( - object obj) - { - if (obj == null || obj is ResponderID) - { - return (ResponderID)obj; - } - - if (obj is DerOctetString) - { - return new ResponderID((DerOctetString)obj); - } - - if (obj is Asn1TaggedObject) - { - Asn1TaggedObject o = (Asn1TaggedObject)obj; - - if (o.TagNo == 1) - { - return new ResponderID(X509Name.GetInstance(o, true)); - } - - return new ResponderID(Asn1OctetString.GetInstance(o, true)); - } - - return new ResponderID(X509Name.GetInstance(obj)); - } - - public ResponderID( - Asn1OctetString id) - { - if (id == null) - throw new ArgumentNullException("id"); - - this.id = id; - } - - public ResponderID( - X509Name id) - { - if (id == null) - throw new ArgumentNullException("id"); - - this.id = id; - } - - public static ResponderID GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - return GetInstance(obj.GetObject()); // must be explicitly tagged - } - - public virtual byte[] GetKeyHash() - { - if (id is Asn1OctetString) - { - return ((Asn1OctetString)id).GetOctets(); - } - - return null; - } - - public virtual X509Name Name - { - get - { - if (id is Asn1OctetString) - { - return null; - } - - return X509Name.GetInstance(id); - } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * ResponderID ::= CHOICE {
-         *      byName          [1] Name,
-         *      byKey           [2] KeyHash }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - if (id is Asn1OctetString) - { - return new DerTaggedObject(true, 2, id); - } - - return new DerTaggedObject(true, 1, id); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/ocsp/ResponseBytes.cs b/bc-sharp-crypto/src/asn1/ocsp/ResponseBytes.cs deleted file mode 100644 index d3ea044..0000000 --- a/bc-sharp-crypto/src/asn1/ocsp/ResponseBytes.cs +++ /dev/null @@ -1,82 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Ocsp -{ - public class ResponseBytes - : Asn1Encodable - { - private readonly DerObjectIdentifier responseType; - private readonly Asn1OctetString response; - - public static ResponseBytes GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static ResponseBytes GetInstance( - object obj) - { - if (obj == null || obj is ResponseBytes) - { - return (ResponseBytes)obj; - } - - if (obj is Asn1Sequence) - { - return new ResponseBytes((Asn1Sequence)obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public ResponseBytes( - DerObjectIdentifier responseType, - Asn1OctetString response) - { - if (responseType == null) - throw new ArgumentNullException("responseType"); - if (response == null) - throw new ArgumentNullException("response"); - - this.responseType = responseType; - this.response = response; - } - - private ResponseBytes( - Asn1Sequence seq) - { - if (seq.Count != 2) - throw new ArgumentException("Wrong number of elements in sequence", "seq"); - - this.responseType = DerObjectIdentifier.GetInstance(seq[0]); - this.response = Asn1OctetString.GetInstance(seq[1]); - } - - public DerObjectIdentifier ResponseType - { - get { return responseType; } - } - - public Asn1OctetString Response - { - get { return response; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * ResponseBytes ::=       Sequence {
-         *     responseType   OBJECT IDENTIFIER,
-         *     response       OCTET STRING }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(responseType, response); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/ocsp/ResponseData.cs b/bc-sharp-crypto/src/asn1/ocsp/ResponseData.cs deleted file mode 100644 index 70620cb..0000000 --- a/bc-sharp-crypto/src/asn1/ocsp/ResponseData.cs +++ /dev/null @@ -1,158 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Ocsp -{ - public class ResponseData - : Asn1Encodable - { - private static readonly DerInteger V1 = new DerInteger(0); - - private readonly bool versionPresent; - private readonly DerInteger version; - private readonly ResponderID responderID; - private readonly DerGeneralizedTime producedAt; - private readonly Asn1Sequence responses; - private readonly X509Extensions responseExtensions; - - public static ResponseData GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static ResponseData GetInstance( - object obj) - { - if (obj == null || obj is ResponseData) - { - return (ResponseData)obj; - } - - if (obj is Asn1Sequence) - { - return new ResponseData((Asn1Sequence)obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public ResponseData( - DerInteger version, - ResponderID responderID, - DerGeneralizedTime producedAt, - Asn1Sequence responses, - X509Extensions responseExtensions) - { - this.version = version; - this.responderID = responderID; - this.producedAt = producedAt; - this.responses = responses; - this.responseExtensions = responseExtensions; - } - - public ResponseData( - ResponderID responderID, - DerGeneralizedTime producedAt, - Asn1Sequence responses, - X509Extensions responseExtensions) - : this(V1, responderID, producedAt, responses, responseExtensions) - { - } - - private ResponseData( - Asn1Sequence seq) - { - int index = 0; - - Asn1Encodable enc = seq[0]; - if (enc is Asn1TaggedObject) - { - Asn1TaggedObject o = (Asn1TaggedObject)enc; - - if (o.TagNo == 0) - { - this.versionPresent = true; - this.version = DerInteger.GetInstance(o, true); - index++; - } - else - { - this.version = V1; - } - } - else - { - this.version = V1; - } - - this.responderID = ResponderID.GetInstance(seq[index++]); - this.producedAt = (DerGeneralizedTime)seq[index++]; - this.responses = (Asn1Sequence)seq[index++]; - - if (seq.Count > index) - { - this.responseExtensions = X509Extensions.GetInstance( - (Asn1TaggedObject)seq[index], true); - } - } - - public DerInteger Version - { - get { return version; } - } - - public ResponderID ResponderID - { - get { return responderID; } - } - - public DerGeneralizedTime ProducedAt - { - get { return producedAt; } - } - - public Asn1Sequence Responses - { - get { return responses; } - } - - public X509Extensions ResponseExtensions - { - get { return responseExtensions; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * ResponseData ::= Sequence {
-         *     version              [0] EXPLICIT Version DEFAULT v1,
-         *     responderID              ResponderID,
-         *     producedAt               GeneralizedTime,
-         *     responses                Sequence OF SingleResponse,
-         *     responseExtensions   [1] EXPLICIT Extensions OPTIONAL }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - if (versionPresent || !version.Equals(V1)) - { - v.Add(new DerTaggedObject(true, 0, version)); - } - - v.Add(responderID, producedAt, responses); - - if (responseExtensions != null) - { - v.Add(new DerTaggedObject(true, 1, responseExtensions)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/ocsp/RevokedInfo.cs b/bc-sharp-crypto/src/asn1/ocsp/RevokedInfo.cs deleted file mode 100644 index ee9e554..0000000 --- a/bc-sharp-crypto/src/asn1/ocsp/RevokedInfo.cs +++ /dev/null @@ -1,96 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Ocsp -{ - public class RevokedInfo - : Asn1Encodable - { - private readonly DerGeneralizedTime revocationTime; - private readonly CrlReason revocationReason; - - public static RevokedInfo GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static RevokedInfo GetInstance( - object obj) - { - if (obj == null || obj is RevokedInfo) - { - return (RevokedInfo) obj; - } - - if (obj is Asn1Sequence) - { - return new RevokedInfo((Asn1Sequence) obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public RevokedInfo( - DerGeneralizedTime revocationTime) - : this(revocationTime, null) - { - } - - public RevokedInfo( - DerGeneralizedTime revocationTime, - CrlReason revocationReason) - { - if (revocationTime == null) - throw new ArgumentNullException("revocationTime"); - - this.revocationTime = revocationTime; - this.revocationReason = revocationReason; - } - - private RevokedInfo( - Asn1Sequence seq) - { - this.revocationTime = (DerGeneralizedTime) seq[0]; - - if (seq.Count > 1) - { - this.revocationReason = new CrlReason( - DerEnumerated.GetInstance((Asn1TaggedObject) seq[1], true)); - } - } - - public DerGeneralizedTime RevocationTime - { - get { return revocationTime; } - } - - public CrlReason RevocationReason - { - get { return revocationReason; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * RevokedInfo ::= Sequence {
-         *      revocationTime              GeneralizedTime,
-         *      revocationReason    [0]     EXPLICIT CRLReason OPTIONAL }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(revocationTime); - - if (revocationReason != null) - { - v.Add(new DerTaggedObject(true, 0, revocationReason)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/ocsp/ServiceLocator.cs b/bc-sharp-crypto/src/asn1/ocsp/ServiceLocator.cs deleted file mode 100644 index 4ba252b..0000000 --- a/bc-sharp-crypto/src/asn1/ocsp/ServiceLocator.cs +++ /dev/null @@ -1,95 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Ocsp -{ - public class ServiceLocator - : Asn1Encodable - { - private readonly X509Name issuer; - private readonly Asn1Object locator; - - public static ServiceLocator GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static ServiceLocator GetInstance( - object obj) - { - if (obj == null || obj is ServiceLocator) - { - return (ServiceLocator) obj; - } - - if (obj is Asn1Sequence) - { - return new ServiceLocator((Asn1Sequence) obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public ServiceLocator( - X509Name issuer) - : this(issuer, null) - { - } - - public ServiceLocator( - X509Name issuer, - Asn1Object locator) - { - if (issuer == null) - throw new ArgumentNullException("issuer"); - - this.issuer = issuer; - this.locator = locator; - } - - private ServiceLocator( - Asn1Sequence seq) - { - this.issuer = X509Name.GetInstance(seq[0]); - - if (seq.Count > 1) - { - this.locator = seq[1].ToAsn1Object(); - } - } - - public X509Name Issuer - { - get { return issuer; } - } - - public Asn1Object Locator - { - get { return locator; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * ServiceLocator ::= Sequence {
-         *     issuer    Name,
-         *     locator   AuthorityInfoAccessSyntax OPTIONAL }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(issuer); - - if (locator != null) - { - v.Add(locator); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/ocsp/Signature.cs b/bc-sharp-crypto/src/asn1/ocsp/Signature.cs deleted file mode 100644 index d6b4ccf..0000000 --- a/bc-sharp-crypto/src/asn1/ocsp/Signature.cs +++ /dev/null @@ -1,115 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Ocsp -{ - public class Signature - : Asn1Encodable - { - internal AlgorithmIdentifier signatureAlgorithm; - internal DerBitString signatureValue; - internal Asn1Sequence certs; - - public static Signature GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static Signature GetInstance( - object obj) - { - if (obj == null || obj is Signature) - { - return (Signature)obj; - } - - if (obj is Asn1Sequence) - { - return new Signature((Asn1Sequence)obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public Signature( - AlgorithmIdentifier signatureAlgorithm, - DerBitString signatureValue) - : this(signatureAlgorithm, signatureValue, null) - { - } - - public Signature( - AlgorithmIdentifier signatureAlgorithm, - DerBitString signatureValue, - Asn1Sequence certs) - { - if (signatureAlgorithm == null) - throw new ArgumentException("signatureAlgorithm"); - if (signatureValue == null) - throw new ArgumentException("signatureValue"); - - this.signatureAlgorithm = signatureAlgorithm; - this.signatureValue = signatureValue; - this.certs = certs; - } - - private Signature( - Asn1Sequence seq) - { - signatureAlgorithm = AlgorithmIdentifier.GetInstance(seq[0]); - signatureValue = (DerBitString)seq[1]; - - if (seq.Count == 3) - { - certs = Asn1Sequence.GetInstance( - (Asn1TaggedObject)seq[2], true); - } - } - - public AlgorithmIdentifier SignatureAlgorithm - { - get { return signatureAlgorithm; } - } - - public DerBitString SignatureValue - { - get { return signatureValue; } - } - - public byte[] GetSignatureOctets() - { - return signatureValue.GetOctets(); - } - - public Asn1Sequence Certs - { - get { return certs; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * Signature       ::=     Sequence {
-         *     signatureAlgorithm      AlgorithmIdentifier,
-         *     signature               BIT STRING,
-         *     certs               [0] EXPLICIT Sequence OF Certificate OPTIONAL}
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector( - signatureAlgorithm, signatureValue); - - if (certs != null) - { - v.Add(new DerTaggedObject(true, 0, certs)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/ocsp/SingleResponse.cs b/bc-sharp-crypto/src/asn1/ocsp/SingleResponse.cs deleted file mode 100644 index 544232a..0000000 --- a/bc-sharp-crypto/src/asn1/ocsp/SingleResponse.cs +++ /dev/null @@ -1,137 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Ocsp -{ - public class SingleResponse - : Asn1Encodable - { - private readonly CertID certID; - private readonly CertStatus certStatus; - private readonly DerGeneralizedTime thisUpdate; - private readonly DerGeneralizedTime nextUpdate; - private readonly X509Extensions singleExtensions; - - public SingleResponse( - CertID certID, - CertStatus certStatus, - DerGeneralizedTime thisUpdate, - DerGeneralizedTime nextUpdate, - X509Extensions singleExtensions) - { - this.certID = certID; - this.certStatus = certStatus; - this.thisUpdate = thisUpdate; - this.nextUpdate = nextUpdate; - this.singleExtensions = singleExtensions; - } - - public SingleResponse( - Asn1Sequence seq) - { - this.certID = CertID.GetInstance(seq[0]); - this.certStatus = CertStatus.GetInstance(seq[1]); - this.thisUpdate = (DerGeneralizedTime)seq[2]; - - if (seq.Count > 4) - { - this.nextUpdate = DerGeneralizedTime.GetInstance( - (Asn1TaggedObject) seq[3], true); - this.singleExtensions = X509Extensions.GetInstance( - (Asn1TaggedObject) seq[4], true); - } - else if (seq.Count > 3) - { - Asn1TaggedObject o = (Asn1TaggedObject) seq[3]; - - if (o.TagNo == 0) - { - this.nextUpdate = DerGeneralizedTime.GetInstance(o, true); - } - else - { - this.singleExtensions = X509Extensions.GetInstance(o, true); - } - } - } - - public static SingleResponse GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static SingleResponse GetInstance( - object obj) - { - if (obj == null || obj is SingleResponse) - { - return (SingleResponse)obj; - } - - if (obj is Asn1Sequence) - { - return new SingleResponse((Asn1Sequence)obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public CertID CertId - { - get { return certID; } - } - - public CertStatus CertStatus - { - get { return certStatus; } - } - - public DerGeneralizedTime ThisUpdate - { - get { return thisUpdate; } - } - - public DerGeneralizedTime NextUpdate - { - get { return nextUpdate; } - } - - public X509Extensions SingleExtensions - { - get { return singleExtensions; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         *  SingleResponse ::= Sequence {
-         *          certID                       CertID,
-         *          certStatus                   CertStatus,
-         *          thisUpdate                   GeneralizedTime,
-         *          nextUpdate         [0]       EXPLICIT GeneralizedTime OPTIONAL,
-         *          singleExtensions   [1]       EXPLICIT Extensions OPTIONAL }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector( - certID, certStatus, thisUpdate); - - if (nextUpdate != null) - { - v.Add(new DerTaggedObject(true, 0, nextUpdate)); - } - - if (singleExtensions != null) - { - v.Add(new DerTaggedObject(true, 1, singleExtensions)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/ocsp/TBSRequest.cs b/bc-sharp-crypto/src/asn1/ocsp/TBSRequest.cs deleted file mode 100644 index 1ad8649..0000000 --- a/bc-sharp-crypto/src/asn1/ocsp/TBSRequest.cs +++ /dev/null @@ -1,151 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Ocsp -{ - public class TbsRequest - : Asn1Encodable - { - private static readonly DerInteger V1 = new DerInteger(0); - - private readonly DerInteger version; - private readonly GeneralName requestorName; - private readonly Asn1Sequence requestList; - private readonly X509Extensions requestExtensions; - - private bool versionSet; - - public static TbsRequest GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static TbsRequest GetInstance( - object obj) - { - if (obj == null || obj is TbsRequest) - { - return (TbsRequest)obj; - } - - if (obj is Asn1Sequence) - { - return new TbsRequest((Asn1Sequence)obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public TbsRequest( - GeneralName requestorName, - Asn1Sequence requestList, - X509Extensions requestExtensions) - { - this.version = V1; - this.requestorName = requestorName; - this.requestList = requestList; - this.requestExtensions = requestExtensions; - } - - private TbsRequest( - Asn1Sequence seq) - { - int index = 0; - - Asn1Encodable enc = seq[0]; - if (enc is Asn1TaggedObject) - { - Asn1TaggedObject o = (Asn1TaggedObject) enc; - - if (o.TagNo == 0) - { - versionSet = true; - version = DerInteger.GetInstance(o, true); - index++; - } - else - { - version = V1; - } - } - else - { - version = V1; - } - - if (seq[index] is Asn1TaggedObject) - { - requestorName = GeneralName.GetInstance((Asn1TaggedObject) seq[index++], true); - } - - requestList = (Asn1Sequence) seq[index++]; - - if (seq.Count == (index + 1)) - { - requestExtensions = X509Extensions.GetInstance((Asn1TaggedObject) seq[index], true); - } - } - - public DerInteger Version - { - get { return version; } - } - - public GeneralName RequestorName - { - get { return requestorName; } - } - - public Asn1Sequence RequestList - { - get { return requestList; } - } - - public X509Extensions RequestExtensions - { - get { return requestExtensions; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * TBSRequest      ::=     Sequence {
-         *     version             [0]     EXPLICIT Version DEFAULT v1,
-         *     requestorName       [1]     EXPLICIT GeneralName OPTIONAL,
-         *     requestList                 Sequence OF Request,
-         *     requestExtensions   [2]     EXPLICIT Extensions OPTIONAL }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - // - // if default don't include - unless explicitly provided. Not strictly correct - // but required for some requests - // - if (!version.Equals(V1) || versionSet) - { - v.Add(new DerTaggedObject(true, 0, version)); - } - - if (requestorName != null) - { - v.Add(new DerTaggedObject(true, 1, requestorName)); - } - - v.Add(requestList); - - if (requestExtensions != null) - { - v.Add(new DerTaggedObject(true, 2, requestExtensions)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/oiw/ElGamalParameter.cs b/bc-sharp-crypto/src/asn1/oiw/ElGamalParameter.cs deleted file mode 100644 index 3e020f0..0000000 --- a/bc-sharp-crypto/src/asn1/oiw/ElGamalParameter.cs +++ /dev/null @@ -1,47 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Asn1.Oiw -{ - public class ElGamalParameter - : Asn1Encodable - { - internal DerInteger p, g; - - public ElGamalParameter( - BigInteger p, - BigInteger g) - { - this.p = new DerInteger(p); - this.g = new DerInteger(g); - } - - public ElGamalParameter( - Asn1Sequence seq) - { - if (seq.Count != 2) - throw new ArgumentException("Wrong number of elements in sequence", "seq"); - - p = DerInteger.GetInstance(seq[0]); - g = DerInteger.GetInstance(seq[1]); - } - - public BigInteger P - { - get { return p.PositiveValue; } - } - - public BigInteger G - { - get { return g.PositiveValue; } - } - - public override Asn1Object ToAsn1Object() - { - return new DerSequence(p, g); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/oiw/OIWObjectIdentifiers.cs b/bc-sharp-crypto/src/asn1/oiw/OIWObjectIdentifiers.cs deleted file mode 100644 index 3da2263..0000000 --- a/bc-sharp-crypto/src/asn1/oiw/OIWObjectIdentifiers.cs +++ /dev/null @@ -1,29 +0,0 @@ -namespace Org.BouncyCastle.Asn1.Oiw -{ - public abstract class OiwObjectIdentifiers - { - public static readonly DerObjectIdentifier MD4WithRsa = new DerObjectIdentifier("1.3.14.3.2.2"); - public static readonly DerObjectIdentifier MD5WithRsa = new DerObjectIdentifier("1.3.14.3.2.3"); - public static readonly DerObjectIdentifier MD4WithRsaEncryption = new DerObjectIdentifier("1.3.14.3.2.4"); - - public static readonly DerObjectIdentifier DesEcb = new DerObjectIdentifier("1.3.14.3.2.6"); - public static readonly DerObjectIdentifier DesCbc = new DerObjectIdentifier("1.3.14.3.2.7"); - public static readonly DerObjectIdentifier DesOfb = new DerObjectIdentifier("1.3.14.3.2.8"); - public static readonly DerObjectIdentifier DesCfb = new DerObjectIdentifier("1.3.14.3.2.9"); - - public static readonly DerObjectIdentifier DesEde = new DerObjectIdentifier("1.3.14.3.2.17"); - - // id-SHA1 OBJECT IDENTIFIER ::= - // {iso(1) identified-organization(3) oiw(14) secsig(3) algorithms(2) 26 } // - public static readonly DerObjectIdentifier IdSha1 = new DerObjectIdentifier("1.3.14.3.2.26"); - - public static readonly DerObjectIdentifier DsaWithSha1 = new DerObjectIdentifier("1.3.14.3.2.27"); - - public static readonly DerObjectIdentifier Sha1WithRsa = new DerObjectIdentifier("1.3.14.3.2.29"); - - // ElGamal Algorithm OBJECT IDENTIFIER ::= - // {iso(1) identified-organization(3) oiw(14) dirservsig(7) algorithm(2) encryption(1) 1 } - // - public static readonly DerObjectIdentifier ElGamalAlgorithm = new DerObjectIdentifier("1.3.14.7.2.1.1"); - } -} diff --git a/bc-sharp-crypto/src/asn1/pkcs/Attribute.cs b/bc-sharp-crypto/src/asn1/pkcs/Attribute.cs deleted file mode 100644 index 1858285..0000000 --- a/bc-sharp-crypto/src/asn1/pkcs/Attribute.cs +++ /dev/null @@ -1,79 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Pkcs -{ - public class AttributePkcs - : Asn1Encodable - { - private readonly DerObjectIdentifier attrType; - private readonly Asn1Set attrValues; - - /** - * return an Attribute object from the given object. - * - * @param o the object we want converted. - * @exception ArgumentException if the object cannot be converted. - */ - public static AttributePkcs GetInstance( - object obj) - { - AttributePkcs attr = obj as AttributePkcs; - if (obj == null || attr != null) - { - return attr; - } - - Asn1Sequence seq = obj as Asn1Sequence; - if (seq != null) - { - return new AttributePkcs(seq); - } - - throw new ArgumentException("Unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - private AttributePkcs( - Asn1Sequence seq) - { - if (seq.Count != 2) - throw new ArgumentException("Wrong number of elements in sequence", "seq"); - - attrType = DerObjectIdentifier.GetInstance(seq[0]); - attrValues = Asn1Set.GetInstance(seq[1]); - } - - public AttributePkcs( - DerObjectIdentifier attrType, - Asn1Set attrValues) - { - this.attrType = attrType; - this.attrValues = attrValues; - } - - public DerObjectIdentifier AttrType - { - get { return attrType; } - } - - public Asn1Set AttrValues - { - get { return attrValues; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * Attr ::= Sequence {
-         *     attrType OBJECT IDENTIFIER,
-         *     attrValues Set OF AttributeValue
-         * }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(attrType, attrValues); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/pkcs/AuthenticatedSafe.cs b/bc-sharp-crypto/src/asn1/pkcs/AuthenticatedSafe.cs deleted file mode 100644 index f3dabb8..0000000 --- a/bc-sharp-crypto/src/asn1/pkcs/AuthenticatedSafe.cs +++ /dev/null @@ -1,37 +0,0 @@ -using Org.BouncyCastle.Asn1; - -namespace Org.BouncyCastle.Asn1.Pkcs -{ - public class AuthenticatedSafe - : Asn1Encodable - { - private readonly ContentInfo[] info; - - public AuthenticatedSafe( - Asn1Sequence seq) - { - info = new ContentInfo[seq.Count]; - - for (int i = 0; i != info.Length; i++) - { - info[i] = ContentInfo.GetInstance(seq[i]); - } - } - - public AuthenticatedSafe( - ContentInfo[] info) - { - this.info = (ContentInfo[]) info.Clone(); - } - - public ContentInfo[] GetContentInfo() - { - return (ContentInfo[]) info.Clone(); - } - - public override Asn1Object ToAsn1Object() - { - return new BerSequence(info); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/pkcs/CertBag.cs b/bc-sharp-crypto/src/asn1/pkcs/CertBag.cs deleted file mode 100644 index b6f4c8a..0000000 --- a/bc-sharp-crypto/src/asn1/pkcs/CertBag.cs +++ /dev/null @@ -1,46 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.Pkcs -{ - public class CertBag - : Asn1Encodable - { -// private readonly Asn1Sequence seq; - private readonly DerObjectIdentifier certID; - private readonly Asn1Object certValue; - - public CertBag( - Asn1Sequence seq) - { - if (seq.Count != 2) - throw new ArgumentException("Wrong number of elements in sequence", "seq"); - -// this.seq = seq; - this.certID = DerObjectIdentifier.GetInstance(seq[0]); - this.certValue = DerTaggedObject.GetInstance(seq[1]).GetObject(); - } - - public CertBag( - DerObjectIdentifier certID, - Asn1Object certValue) - { - this.certID = certID; - this.certValue = certValue; - } - - public DerObjectIdentifier CertID - { - get { return certID; } - } - - public Asn1Object CertValue - { - get { return certValue; } - } - - public override Asn1Object ToAsn1Object() - { - return new DerSequence(certID, new DerTaggedObject(0, certValue)); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/pkcs/CertificationRequest.cs b/bc-sharp-crypto/src/asn1/pkcs/CertificationRequest.cs deleted file mode 100644 index 98caa22..0000000 --- a/bc-sharp-crypto/src/asn1/pkcs/CertificationRequest.cs +++ /dev/null @@ -1,87 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; - -namespace Org.BouncyCastle.Asn1.Pkcs -{ - /** - * Pkcs10 Certfication request object. - * 
-     * CertificationRequest ::= Sequence {
-     *   certificationRequestInfo  CertificationRequestInfo,
-     *   signatureAlgorithm        AlgorithmIdentifier{{ SignatureAlgorithms }},
-     *   signature                 BIT STRING
-     * }
-     *
- */ - public class CertificationRequest - : Asn1Encodable - { - protected CertificationRequestInfo reqInfo; - protected AlgorithmIdentifier sigAlgId; - protected DerBitString sigBits; - - public static CertificationRequest GetInstance( - object obj) - { - if (obj is CertificationRequest) - return (CertificationRequest)obj; - - if (obj != null) - return new CertificationRequest((Asn1Sequence)obj); - - return null; - } - - protected CertificationRequest() - { - } - - public CertificationRequest( - CertificationRequestInfo requestInfo, - AlgorithmIdentifier algorithm, - DerBitString signature) - { - this.reqInfo = requestInfo; - this.sigAlgId = algorithm; - this.sigBits = signature; - } - - [Obsolete("Use 'GetInstance' instead")] - public CertificationRequest( - Asn1Sequence seq) - { - if (seq.Count != 3) - throw new ArgumentException("Wrong number of elements in sequence", "seq"); - - reqInfo = CertificationRequestInfo.GetInstance(seq[0]); - sigAlgId = AlgorithmIdentifier.GetInstance(seq[1]); - sigBits = DerBitString.GetInstance(seq[2]); - } - - public CertificationRequestInfo GetCertificationRequestInfo() - { - return reqInfo; - } - - public AlgorithmIdentifier SignatureAlgorithm - { - get { return sigAlgId; } - } - - public DerBitString Signature - { - get { return sigBits; } - } - - public byte[] GetSignatureOctets() - { - return sigBits.GetOctets(); - } - - public override Asn1Object ToAsn1Object() - { - return new DerSequence(reqInfo, sigAlgId, sigBits); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/pkcs/CertificationRequestInfo.cs b/bc-sharp-crypto/src/asn1/pkcs/CertificationRequestInfo.cs deleted file mode 100644 index 6d98013..0000000 --- a/bc-sharp-crypto/src/asn1/pkcs/CertificationRequestInfo.cs +++ /dev/null @@ -1,137 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; - -namespace Org.BouncyCastle.Asn1.Pkcs -{ - /** - * Pkcs10 CertificationRequestInfo object. - * 
-     *  CertificationRequestInfo ::= Sequence {
-     *   version             Integer { v1(0) } (v1,...),
-     *   subject             Name,
-     *   subjectPKInfo   SubjectPublicKeyInfo{{ PKInfoAlgorithms }},
-     *   attributes          [0] Attributes{{ CRIAttributes }}
-     *  }
-     *
-     *  Attributes { ATTRIBUTE:IOSet } ::= Set OF Attr{{ IOSet }}
-     *
-     *  Attr { ATTRIBUTE:IOSet } ::= Sequence {
-     *    type    ATTRIBUTE.&id({IOSet}),
-     *    values  Set SIZE(1..MAX) OF ATTRIBUTE.&Type({IOSet}{\@type})
-     *  }
-     *
- */ - public class CertificationRequestInfo - : Asn1Encodable - { - internal DerInteger version = new DerInteger(0); - internal X509Name subject; - internal SubjectPublicKeyInfo subjectPKInfo; - internal Asn1Set attributes; - - public static CertificationRequestInfo GetInstance(object obj) - { - if (obj is CertificationRequestInfo) - return (CertificationRequestInfo)obj; - if (obj != null) - return new CertificationRequestInfo(Asn1Sequence.GetInstance(obj)); - return null; - } - - public CertificationRequestInfo( - X509Name subject, - SubjectPublicKeyInfo pkInfo, - Asn1Set attributes) - { - this.subject = subject; - this.subjectPKInfo = pkInfo; - this.attributes = attributes; - - ValidateAttributes(attributes); - - if (subject == null || version == null || subjectPKInfo == null) - { - throw new ArgumentException( - "Not all mandatory fields set in CertificationRequestInfo generator."); - } - } - - private CertificationRequestInfo( - Asn1Sequence seq) - { - version = (DerInteger) seq[0]; - - subject = X509Name.GetInstance(seq[1]); - subjectPKInfo = SubjectPublicKeyInfo.GetInstance(seq[2]); - - // - // some CertificationRequestInfo objects seem to treat this field - // as optional. - // - if (seq.Count > 3) - { - DerTaggedObject tagobj = (DerTaggedObject) seq[3]; - attributes = Asn1Set.GetInstance(tagobj, false); - } - - ValidateAttributes(attributes); - - if (subject == null || version == null || subjectPKInfo == null) - { - throw new ArgumentException( - "Not all mandatory fields set in CertificationRequestInfo generator."); - } - } - - public DerInteger Version - { - get { return version; } - } - - public X509Name Subject - { - get { return subject; } - } - - public SubjectPublicKeyInfo SubjectPublicKeyInfo - { - get { return subjectPKInfo; } - } - - public Asn1Set Attributes - { - get { return attributes; } - } - - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector( - version, subject, subjectPKInfo); - - if (attributes != null) - { - v.Add(new DerTaggedObject(false, 0, attributes)); - } - - return new DerSequence(v); - } - - private static void ValidateAttributes(Asn1Set attributes) - { - if (attributes == null) - return; - - foreach (Asn1Encodable ae in attributes) - { - Asn1Object obj = ae.ToAsn1Object(); - AttributePkcs attr = AttributePkcs.GetInstance(obj); - if (attr.AttrType.Equals(PkcsObjectIdentifiers.Pkcs9AtChallengePassword)) - { - if (attr.AttrValues.Count != 1) - throw new ArgumentException("challengePassword attribute must have one value"); - } - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/pkcs/ContentInfo.cs b/bc-sharp-crypto/src/asn1/pkcs/ContentInfo.cs deleted file mode 100644 index 526a3c4..0000000 --- a/bc-sharp-crypto/src/asn1/pkcs/ContentInfo.cs +++ /dev/null @@ -1,74 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; - -namespace Org.BouncyCastle.Asn1.Pkcs -{ - public class ContentInfo - : Asn1Encodable - { - private readonly DerObjectIdentifier contentType; - private readonly Asn1Encodable content; - - public static ContentInfo GetInstance(object obj) - { - if (obj == null) - return null; - ContentInfo existing = obj as ContentInfo; - if (existing != null) - return existing; - return new ContentInfo(Asn1Sequence.GetInstance(obj)); - } - - private ContentInfo( - Asn1Sequence seq) - { - contentType = (DerObjectIdentifier) seq[0]; - - if (seq.Count > 1) - { - content = ((Asn1TaggedObject) seq[1]).GetObject(); - } - } - - public ContentInfo( - DerObjectIdentifier contentType, - Asn1Encodable content) - { - this.contentType = contentType; - this.content = content; - } - - public DerObjectIdentifier ContentType - { - get { return contentType; } - } - - public Asn1Encodable Content - { - get { return content; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * ContentInfo ::= Sequence {
-         *          contentType ContentType,
-         *          content
-         *          [0] EXPLICIT ANY DEFINED BY contentType OPTIONAL }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(contentType); - - if (content != null) - { - v.Add(new BerTaggedObject(0, content)); - } - - return new BerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/pkcs/DHParameter.cs b/bc-sharp-crypto/src/asn1/pkcs/DHParameter.cs deleted file mode 100644 index 25a091a..0000000 --- a/bc-sharp-crypto/src/asn1/pkcs/DHParameter.cs +++ /dev/null @@ -1,72 +0,0 @@ -using Org.BouncyCastle.Asn1; -using System; -using System.Collections; - -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Asn1.Pkcs -{ - public class DHParameter - : Asn1Encodable - { - internal DerInteger p, g, l; - - public DHParameter( - BigInteger p, - BigInteger g, - int l) - { - this.p = new DerInteger(p); - this.g = new DerInteger(g); - - if (l != 0) - { - this.l = new DerInteger(l); - } - } - - public DHParameter( - Asn1Sequence seq) - { - IEnumerator e = seq.GetEnumerator(); - - e.MoveNext(); - p = (DerInteger)e.Current; - - e.MoveNext(); - g = (DerInteger)e.Current; - - if (e.MoveNext()) - { - l = (DerInteger) e.Current; - } - } - - public BigInteger P - { - get { return p.PositiveValue; } - } - - public BigInteger G - { - get { return g.PositiveValue; } - } - - public BigInteger L - { - get { return l == null ? null : l.PositiveValue; } - } - - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(p, g); - - if (this.l != null) - { - v.Add(l); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/pkcs/EncryptedData.cs b/bc-sharp-crypto/src/asn1/pkcs/EncryptedData.cs deleted file mode 100644 index 7e95eb5..0000000 --- a/bc-sharp-crypto/src/asn1/pkcs/EncryptedData.cs +++ /dev/null @@ -1,105 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Pkcs -{ - /** - * The EncryptedData object. - * 
-     *      EncryptedData ::= Sequence {
-     *           version Version,
-     *           encryptedContentInfo EncryptedContentInfo
-     *      }
-     *
-     *
-     *      EncryptedContentInfo ::= Sequence {
-     *          contentType ContentType,
-     *          contentEncryptionAlgorithm  ContentEncryptionAlgorithmIdentifier,
-     *          encryptedContent [0] IMPLICIT EncryptedContent OPTIONAL
-     *    }
-     *
-     *    EncryptedContent ::= OCTET STRING
-     *
- */ - public class EncryptedData - : Asn1Encodable - { - private readonly Asn1Sequence data; -// private readonly DerObjectIdentifier bagId; -// private readonly Asn1Object bagValue; - - public static EncryptedData GetInstance( - object obj) - { - if (obj is EncryptedData) - { - return (EncryptedData) obj; - } - - if (obj is Asn1Sequence) - { - return new EncryptedData((Asn1Sequence) obj); - } - - throw new ArgumentException("Unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - private EncryptedData( - Asn1Sequence seq) - { - if (seq.Count != 2) - throw new ArgumentException("Wrong number of elements in sequence", "seq"); - - int version = ((DerInteger) seq[0]).Value.IntValue; - if (version != 0) - { - throw new ArgumentException("sequence not version 0"); - } - - this.data = (Asn1Sequence) seq[1]; - } - - public EncryptedData( - DerObjectIdentifier contentType, - AlgorithmIdentifier encryptionAlgorithm, - Asn1Encodable content) - { - data = new BerSequence( - contentType, - encryptionAlgorithm.ToAsn1Object(), - new BerTaggedObject(false, 0, content)); - } - - public DerObjectIdentifier ContentType - { - get { return (DerObjectIdentifier) data[0]; } - } - - public AlgorithmIdentifier EncryptionAlgorithm - { - get { return AlgorithmIdentifier.GetInstance(data[1]); } - } - - public Asn1OctetString Content - { - get - { - if (data.Count == 3) - { - DerTaggedObject o = (DerTaggedObject) data[2]; - - return Asn1OctetString.GetInstance(o, false); - } - - return null; - } - } - - public override Asn1Object ToAsn1Object() - { - return new BerSequence(new DerInteger(0), data); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/pkcs/EncryptedPrivateKeyInfo.cs b/bc-sharp-crypto/src/asn1/pkcs/EncryptedPrivateKeyInfo.cs deleted file mode 100644 index 9870270..0000000 --- a/bc-sharp-crypto/src/asn1/pkcs/EncryptedPrivateKeyInfo.cs +++ /dev/null @@ -1,79 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Pkcs -{ - public class EncryptedPrivateKeyInfo - : Asn1Encodable - { - private readonly AlgorithmIdentifier algId; - private readonly Asn1OctetString data; - - private EncryptedPrivateKeyInfo( - Asn1Sequence seq) - { - if (seq.Count != 2) - throw new ArgumentException("Wrong number of elements in sequence", "seq"); - - algId = AlgorithmIdentifier.GetInstance(seq[0]); - data = Asn1OctetString.GetInstance(seq[1]); - } - - public EncryptedPrivateKeyInfo( - AlgorithmIdentifier algId, - byte[] encoding) - { - this.algId = algId; - this.data = new DerOctetString(encoding); - } - - public static EncryptedPrivateKeyInfo GetInstance( - object obj) - { - if (obj is EncryptedPrivateKeyInfo) - { - return (EncryptedPrivateKeyInfo) obj; - } - - if (obj is Asn1Sequence) - { - return new EncryptedPrivateKeyInfo((Asn1Sequence) obj); - } - - throw new ArgumentException("Unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public AlgorithmIdentifier EncryptionAlgorithm - { - get { return algId; } - } - - public byte[] GetEncryptedData() - { - return data.GetOctets(); - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * EncryptedPrivateKeyInfo ::= Sequence {
-         *      encryptionAlgorithm AlgorithmIdentifier {{KeyEncryptionAlgorithms}},
-         *      encryptedData EncryptedData
-         * }
-         *
-         * EncryptedData ::= OCTET STRING
-         *
-         * KeyEncryptionAlgorithms ALGORITHM-IDENTIFIER ::= {
-         *          ... -- For local profiles
-         * }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(algId, data); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/pkcs/EncryptionScheme.cs b/bc-sharp-crypto/src/asn1/pkcs/EncryptionScheme.cs deleted file mode 100644 index 7b90ece..0000000 --- a/bc-sharp-crypto/src/asn1/pkcs/EncryptionScheme.cs +++ /dev/null @@ -1,49 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Pkcs -{ - public class EncryptionScheme - : AlgorithmIdentifier - { - public EncryptionScheme( - DerObjectIdentifier objectID, - Asn1Encodable parameters) - : base(objectID, parameters) - { - } - - internal EncryptionScheme( - Asn1Sequence seq) - : this((DerObjectIdentifier)seq[0], seq[1]) - { - } - - public new static EncryptionScheme GetInstance(object obj) - { - if (obj is EncryptionScheme) - { - return (EncryptionScheme)obj; - } - - if (obj is Asn1Sequence) - { - return new EncryptionScheme((Asn1Sequence)obj); - } - - throw new ArgumentException("Unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public Asn1Object Asn1Object - { - get { return Parameters.ToAsn1Object(); } - } - - public override Asn1Object ToAsn1Object() - { - return new DerSequence(Algorithm, Parameters); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/pkcs/IssuerAndSerialNumber.cs b/bc-sharp-crypto/src/asn1/pkcs/IssuerAndSerialNumber.cs deleted file mode 100644 index da863cb..0000000 --- a/bc-sharp-crypto/src/asn1/pkcs/IssuerAndSerialNumber.cs +++ /dev/null @@ -1,72 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Pkcs -{ - public class IssuerAndSerialNumber - : Asn1Encodable - { - private readonly X509Name name; - private readonly DerInteger certSerialNumber; - - public static IssuerAndSerialNumber GetInstance( - object obj) - { - if (obj is IssuerAndSerialNumber) - { - return (IssuerAndSerialNumber) obj; - } - - if (obj is Asn1Sequence) - { - return new IssuerAndSerialNumber((Asn1Sequence) obj); - } - - throw new ArgumentException("Unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - private IssuerAndSerialNumber( - Asn1Sequence seq) - { - if (seq.Count != 2) - throw new ArgumentException("Wrong number of elements in sequence", "seq"); - - this.name = X509Name.GetInstance(seq[0]); - this.certSerialNumber = DerInteger.GetInstance(seq[1]); - } - - public IssuerAndSerialNumber( - X509Name name, - BigInteger certSerialNumber) - { - this.name = name; - this.certSerialNumber = new DerInteger(certSerialNumber); - } - - public IssuerAndSerialNumber( - X509Name name, - DerInteger certSerialNumber) - { - this.name = name; - this.certSerialNumber = certSerialNumber; - } - - public X509Name Name - { - get { return name; } - } - - public DerInteger CertificateSerialNumber - { - get { return certSerialNumber; } - } - - public override Asn1Object ToAsn1Object() - { - return new DerSequence(name, certSerialNumber); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/pkcs/KeyDerivationFunc.cs b/bc-sharp-crypto/src/asn1/pkcs/KeyDerivationFunc.cs deleted file mode 100644 index 9fc8985..0000000 --- a/bc-sharp-crypto/src/asn1/pkcs/KeyDerivationFunc.cs +++ /dev/null @@ -1,21 +0,0 @@ -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; - -namespace Org.BouncyCastle.Asn1.Pkcs -{ - public class KeyDerivationFunc - : AlgorithmIdentifier - { - internal KeyDerivationFunc(Asn1Sequence seq) - : base(seq) - { - } - - public KeyDerivationFunc( - DerObjectIdentifier id, - Asn1Encodable parameters) - : base(id, parameters) - { - } - } -} \ No newline at end of file diff --git a/bc-sharp-crypto/src/asn1/pkcs/MacData.cs b/bc-sharp-crypto/src/asn1/pkcs/MacData.cs deleted file mode 100644 index c4b7df1..0000000 --- a/bc-sharp-crypto/src/asn1/pkcs/MacData.cs +++ /dev/null @@ -1,96 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Pkcs -{ - public class MacData - : Asn1Encodable - { - internal DigestInfo digInfo; - internal byte[] salt; - internal BigInteger iterationCount; - - public static MacData GetInstance( - object obj) - { - if (obj is MacData) - { - return (MacData) obj; - } - - if (obj is Asn1Sequence) - { - return new MacData((Asn1Sequence) obj); - } - - throw new ArgumentException("Unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - private MacData( - Asn1Sequence seq) - { - this.digInfo = DigestInfo.GetInstance(seq[0]); - this.salt = ((Asn1OctetString) seq[1]).GetOctets(); - - if (seq.Count == 3) - { - this.iterationCount = ((DerInteger) seq[2]).Value; - } - else - { - this.iterationCount = BigInteger.One; - } - } - - public MacData( - DigestInfo digInfo, - byte[] salt, - int iterationCount) - { - this.digInfo = digInfo; - this.salt = (byte[]) salt.Clone(); - this.iterationCount = BigInteger.ValueOf(iterationCount); - } - - public DigestInfo Mac - { - get { return digInfo; } - } - - public byte[] GetSalt() - { - return (byte[]) salt.Clone(); - } - - public BigInteger IterationCount - { - get { return iterationCount; } - } - - /** - * 
-		 * MacData ::= SEQUENCE {
-		 *     mac      DigestInfo,
-		 *     macSalt  OCTET STRING,
-		 *     iterations INTEGER DEFAULT 1
-		 *     -- Note: The default is for historic reasons and its use is deprecated. A
-		 *     -- higher value, like 1024 is recommended.
-		 *
- * @return the basic DERObject construction. - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(digInfo, new DerOctetString(salt)); - - if (!iterationCount.Equals(BigInteger.One)) - { - v.Add(new DerInteger(iterationCount)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/pkcs/PBEParameter.cs b/bc-sharp-crypto/src/asn1/pkcs/PBEParameter.cs deleted file mode 100644 index 56cea5f..0000000 --- a/bc-sharp-crypto/src/asn1/pkcs/PBEParameter.cs +++ /dev/null @@ -1,60 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Pkcs -{ - public class PbeParameter - : Asn1Encodable - { - private readonly Asn1OctetString salt; - private readonly DerInteger iterationCount; - - public static PbeParameter GetInstance(object obj) - { - if (obj is PbeParameter || obj == null) - { - return (PbeParameter) obj; - } - - if (obj is Asn1Sequence) - { - return new PbeParameter((Asn1Sequence) obj); - } - - throw new ArgumentException("Unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - private PbeParameter(Asn1Sequence seq) - { - if (seq.Count != 2) - throw new ArgumentException("Wrong number of elements in sequence", "seq"); - - salt = Asn1OctetString.GetInstance(seq[0]); - iterationCount = DerInteger.GetInstance(seq[1]); - } - - public PbeParameter(byte[] salt, int iterationCount) - { - this.salt = new DerOctetString(salt); - this.iterationCount = new DerInteger(iterationCount); - } - - public byte[] GetSalt() - { - return salt.GetOctets(); - } - - public BigInteger IterationCount - { - get { return iterationCount.Value; } - } - - public override Asn1Object ToAsn1Object() - { - return new DerSequence(salt, iterationCount); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/pkcs/PBES2Parameters.cs b/bc-sharp-crypto/src/asn1/pkcs/PBES2Parameters.cs deleted file mode 100644 index fc6904e..0000000 --- a/bc-sharp-crypto/src/asn1/pkcs/PBES2Parameters.cs +++ /dev/null @@ -1,65 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.Pkcs -{ - public class PbeS2Parameters - : Asn1Encodable - { - private readonly KeyDerivationFunc func; - private readonly EncryptionScheme scheme; - - public static PbeS2Parameters GetInstance(object obj) - { - if (obj == null) - return null; - PbeS2Parameters existing = obj as PbeS2Parameters; - if (existing != null) - return existing; - return new PbeS2Parameters(Asn1Sequence.GetInstance(obj)); - } - - public PbeS2Parameters(KeyDerivationFunc keyDevFunc, EncryptionScheme encScheme) - { - this.func = keyDevFunc; - this.scheme = encScheme; - } - - [Obsolete("Use GetInstance() instead")] - public PbeS2Parameters( - Asn1Sequence seq) - { - if (seq.Count != 2) - throw new ArgumentException("Wrong number of elements in sequence", "seq"); - - Asn1Sequence funcSeq = (Asn1Sequence)seq[0].ToAsn1Object(); - - // TODO Not sure if this special case is really necessary/appropriate - if (funcSeq[0].Equals(PkcsObjectIdentifiers.IdPbkdf2)) - { - func = new KeyDerivationFunc(PkcsObjectIdentifiers.IdPbkdf2, - Pbkdf2Params.GetInstance(funcSeq[1])); - } - else - { - func = new KeyDerivationFunc(funcSeq); - } - - scheme = EncryptionScheme.GetInstance(seq[1].ToAsn1Object()); - } - - public KeyDerivationFunc KeyDerivationFunc - { - get { return func; } - } - - public EncryptionScheme EncryptionScheme - { - get { return scheme; } - } - - public override Asn1Object ToAsn1Object() - { - return new DerSequence(func, scheme); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/pkcs/PBKDF2Params.cs b/bc-sharp-crypto/src/asn1/pkcs/PBKDF2Params.cs deleted file mode 100644 index 279f30d..0000000 --- a/bc-sharp-crypto/src/asn1/pkcs/PBKDF2Params.cs +++ /dev/null @@ -1,144 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Pkcs -{ - public class Pbkdf2Params - : Asn1Encodable - { - private static AlgorithmIdentifier algid_hmacWithSHA1 = new AlgorithmIdentifier(PkcsObjectIdentifiers.IdHmacWithSha1, DerNull.Instance); - - private readonly Asn1OctetString octStr; - private readonly DerInteger iterationCount, keyLength; - private readonly AlgorithmIdentifier prf; - - public static Pbkdf2Params GetInstance( - object obj) - { - if (obj == null || obj is Pbkdf2Params) - return (Pbkdf2Params)obj; - - if (obj is Asn1Sequence) - return new Pbkdf2Params((Asn1Sequence)obj); - - throw new ArgumentException("Unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public Pbkdf2Params( - Asn1Sequence seq) - { - if (seq.Count < 2 || seq.Count > 4) - throw new ArgumentException("Wrong number of elements in sequence", "seq"); - - this.octStr = (Asn1OctetString)seq[0]; - this.iterationCount = (DerInteger)seq[1]; - - Asn1Encodable kl = null, d = null; - if (seq.Count > 3) - { - kl = seq[2]; - d = seq[3]; - } - else if (seq.Count > 2) - { - if (seq[2] is DerInteger) - { - kl = seq[2]; - } - else - { - d = seq[2]; - } - } - if (kl != null) - { - keyLength = (DerInteger)kl; - } - if (d != null) - { - prf = AlgorithmIdentifier.GetInstance(d); - } - } - - public Pbkdf2Params( - byte[] salt, - int iterationCount) - { - this.octStr = new DerOctetString(salt); - this.iterationCount = new DerInteger(iterationCount); - } - - public Pbkdf2Params( - byte[] salt, - int iterationCount, - int keyLength) - : this(salt, iterationCount) - { - this.keyLength = new DerInteger(keyLength); - } - - public Pbkdf2Params( - byte[] salt, - int iterationCount, - int keyLength, - AlgorithmIdentifier prf) - : this(salt, iterationCount, keyLength) - { - this.prf = prf; - } - - public Pbkdf2Params( - byte[] salt, - int iterationCount, - AlgorithmIdentifier prf) - : this(salt, iterationCount) - { - this.prf = prf; - } - - public byte[] GetSalt() - { - return octStr.GetOctets(); - } - - public BigInteger IterationCount - { - get { return iterationCount.Value; } - } - - public BigInteger KeyLength - { - get { return keyLength == null ? null : keyLength.Value; } - } - - public bool IsDefaultPrf - { - get { return prf == null || prf.Equals(algid_hmacWithSHA1); } - } - - public AlgorithmIdentifier Prf - { - get { return prf != null ? prf : algid_hmacWithSHA1; } - } - - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector( - octStr, iterationCount); - - if (keyLength != null) - { - v.Add(keyLength); - } - if (!IsDefaultPrf) - { - v.Add(prf); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/pkcs/PKCS12PBEParams.cs b/bc-sharp-crypto/src/asn1/pkcs/PKCS12PBEParams.cs deleted file mode 100644 index b41c289..0000000 --- a/bc-sharp-crypto/src/asn1/pkcs/PKCS12PBEParams.cs +++ /dev/null @@ -1,63 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Pkcs -{ - public class Pkcs12PbeParams - : Asn1Encodable - { - private readonly DerInteger iterations; - private readonly Asn1OctetString iv; - - public Pkcs12PbeParams( - byte[] salt, - int iterations) - { - this.iv = new DerOctetString(salt); - this.iterations = new DerInteger(iterations); - } - - private Pkcs12PbeParams( - Asn1Sequence seq) - { - if (seq.Count != 2) - throw new ArgumentException("Wrong number of elements in sequence", "seq"); - - iv = Asn1OctetString.GetInstance(seq[0]); - iterations = DerInteger.GetInstance(seq[1]); - } - - public static Pkcs12PbeParams GetInstance( - object obj) - { - if (obj is Pkcs12PbeParams) - { - return (Pkcs12PbeParams) obj; - } - - if (obj is Asn1Sequence) - { - return new Pkcs12PbeParams((Asn1Sequence) obj); - } - - throw new ArgumentException("Unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public BigInteger Iterations - { - get { return iterations.Value; } - } - - public byte[] GetIV() - { - return iv.GetOctets(); - } - - public override Asn1Object ToAsn1Object() - { - return new DerSequence(iv, iterations); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/pkcs/PKCSObjectIdentifiers.cs b/bc-sharp-crypto/src/asn1/pkcs/PKCSObjectIdentifiers.cs deleted file mode 100644 index 1a9a03e..0000000 --- a/bc-sharp-crypto/src/asn1/pkcs/PKCSObjectIdentifiers.cs +++ /dev/null @@ -1,293 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.Pkcs -{ - public abstract class PkcsObjectIdentifiers - { - // - // pkcs-1 OBJECT IDENTIFIER ::= { - // iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) 1 } - // - public const string Pkcs1 = "1.2.840.113549.1.1"; - internal static readonly DerObjectIdentifier Pkcs1Oid = new DerObjectIdentifier(Pkcs1); - - public static readonly DerObjectIdentifier RsaEncryption = Pkcs1Oid.Branch("1"); - public static readonly DerObjectIdentifier MD2WithRsaEncryption = Pkcs1Oid.Branch("2"); - public static readonly DerObjectIdentifier MD4WithRsaEncryption = Pkcs1Oid.Branch("3"); - public static readonly DerObjectIdentifier MD5WithRsaEncryption = Pkcs1Oid.Branch("4"); - public static readonly DerObjectIdentifier Sha1WithRsaEncryption = Pkcs1Oid.Branch("5"); - public static readonly DerObjectIdentifier SrsaOaepEncryptionSet = Pkcs1Oid.Branch("6"); - public static readonly DerObjectIdentifier IdRsaesOaep = Pkcs1Oid.Branch("7"); - public static readonly DerObjectIdentifier IdMgf1 = Pkcs1Oid.Branch("8"); - public static readonly DerObjectIdentifier IdPSpecified = Pkcs1Oid.Branch("9"); - public static readonly DerObjectIdentifier IdRsassaPss = Pkcs1Oid.Branch("10"); - public static readonly DerObjectIdentifier Sha256WithRsaEncryption = Pkcs1Oid.Branch("11"); - public static readonly DerObjectIdentifier Sha384WithRsaEncryption = Pkcs1Oid.Branch("12"); - public static readonly DerObjectIdentifier Sha512WithRsaEncryption = Pkcs1Oid.Branch("13"); - public static readonly DerObjectIdentifier Sha224WithRsaEncryption = Pkcs1Oid.Branch("14"); - /** PKCS#1: 1.2.840.113549.1.1.15 */ - public static readonly DerObjectIdentifier Sha512_224WithRSAEncryption = Pkcs1Oid.Branch("15"); - /** PKCS#1: 1.2.840.113549.1.1.16 */ - public static readonly DerObjectIdentifier Sha512_256WithRSAEncryption = Pkcs1Oid.Branch("16"); - - // - // pkcs-3 OBJECT IDENTIFIER ::= { - // iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) 3 } - // - public const string Pkcs3 = "1.2.840.113549.1.3"; - - public static readonly DerObjectIdentifier DhKeyAgreement = new DerObjectIdentifier(Pkcs3 + ".1"); - - // - // pkcs-5 OBJECT IDENTIFIER ::= { - // iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) 5 } - // - public const string Pkcs5 = "1.2.840.113549.1.5"; - - public static readonly DerObjectIdentifier PbeWithMD2AndDesCbc = new DerObjectIdentifier(Pkcs5 + ".1"); - public static readonly DerObjectIdentifier PbeWithMD2AndRC2Cbc = new DerObjectIdentifier(Pkcs5 + ".4"); - public static readonly DerObjectIdentifier PbeWithMD5AndDesCbc = new DerObjectIdentifier(Pkcs5 + ".3"); - public static readonly DerObjectIdentifier PbeWithMD5AndRC2Cbc = new DerObjectIdentifier(Pkcs5 + ".6"); - public static readonly DerObjectIdentifier PbeWithSha1AndDesCbc = new DerObjectIdentifier(Pkcs5 + ".10"); - public static readonly DerObjectIdentifier PbeWithSha1AndRC2Cbc = new DerObjectIdentifier(Pkcs5 + ".11"); - - public static readonly DerObjectIdentifier IdPbeS2 = new DerObjectIdentifier(Pkcs5 + ".13"); - public static readonly DerObjectIdentifier IdPbkdf2 = new DerObjectIdentifier(Pkcs5 + ".12"); - - // - // encryptionAlgorithm OBJECT IDENTIFIER ::= { - // iso(1) member-body(2) us(840) rsadsi(113549) 3 } - // - public const string EncryptionAlgorithm = "1.2.840.113549.3"; - - public static readonly DerObjectIdentifier DesEde3Cbc = new DerObjectIdentifier(EncryptionAlgorithm + ".7"); - public static readonly DerObjectIdentifier RC2Cbc = new DerObjectIdentifier(EncryptionAlgorithm + ".2"); - - // - // object identifiers for digests - // - public const string DigestAlgorithm = "1.2.840.113549.2"; - - // - // md2 OBJECT IDENTIFIER ::= - // {iso(1) member-body(2) US(840) rsadsi(113549) DigestAlgorithm(2) 2} - // - public static readonly DerObjectIdentifier MD2 = new DerObjectIdentifier(DigestAlgorithm + ".2"); - - // - // md4 OBJECT IDENTIFIER ::= - // {iso(1) member-body(2) US(840) rsadsi(113549) DigestAlgorithm(2) 4} - // - public static readonly DerObjectIdentifier MD4 = new DerObjectIdentifier(DigestAlgorithm + ".4"); - - // - // md5 OBJECT IDENTIFIER ::= - // {iso(1) member-body(2) US(840) rsadsi(113549) DigestAlgorithm(2) 5} - // - public static readonly DerObjectIdentifier MD5 = new DerObjectIdentifier(DigestAlgorithm + ".5"); - - public static readonly DerObjectIdentifier IdHmacWithSha1 = new DerObjectIdentifier(DigestAlgorithm + ".7"); - public static readonly DerObjectIdentifier IdHmacWithSha224 = new DerObjectIdentifier(DigestAlgorithm + ".8"); - public static readonly DerObjectIdentifier IdHmacWithSha256 = new DerObjectIdentifier(DigestAlgorithm + ".9"); - public static readonly DerObjectIdentifier IdHmacWithSha384 = new DerObjectIdentifier(DigestAlgorithm + ".10"); - public static readonly DerObjectIdentifier IdHmacWithSha512 = new DerObjectIdentifier(DigestAlgorithm + ".11"); - - // - // pkcs-7 OBJECT IDENTIFIER ::= { - // iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) 7 } - // - public const string Pkcs7 = "1.2.840.113549.1.7"; - - public static readonly DerObjectIdentifier Data = new DerObjectIdentifier(Pkcs7 + ".1"); - public static readonly DerObjectIdentifier SignedData = new DerObjectIdentifier(Pkcs7 + ".2"); - public static readonly DerObjectIdentifier EnvelopedData = new DerObjectIdentifier(Pkcs7 + ".3"); - public static readonly DerObjectIdentifier SignedAndEnvelopedData = new DerObjectIdentifier(Pkcs7 + ".4"); - public static readonly DerObjectIdentifier DigestedData = new DerObjectIdentifier(Pkcs7 + ".5"); - public static readonly DerObjectIdentifier EncryptedData = new DerObjectIdentifier(Pkcs7 + ".6"); - - // - // pkcs-9 OBJECT IDENTIFIER ::= { - // iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) 9 } - // - public const string Pkcs9 = "1.2.840.113549.1.9"; - - public static readonly DerObjectIdentifier Pkcs9AtEmailAddress = new DerObjectIdentifier(Pkcs9 + ".1"); - public static readonly DerObjectIdentifier Pkcs9AtUnstructuredName = new DerObjectIdentifier(Pkcs9 + ".2"); - public static readonly DerObjectIdentifier Pkcs9AtContentType = new DerObjectIdentifier(Pkcs9 + ".3"); - public static readonly DerObjectIdentifier Pkcs9AtMessageDigest = new DerObjectIdentifier(Pkcs9 + ".4"); - public static readonly DerObjectIdentifier Pkcs9AtSigningTime = new DerObjectIdentifier(Pkcs9 + ".5"); - public static readonly DerObjectIdentifier Pkcs9AtCounterSignature = new DerObjectIdentifier(Pkcs9 + ".6"); - public static readonly DerObjectIdentifier Pkcs9AtChallengePassword = new DerObjectIdentifier(Pkcs9 + ".7"); - public static readonly DerObjectIdentifier Pkcs9AtUnstructuredAddress = new DerObjectIdentifier(Pkcs9 + ".8"); - public static readonly DerObjectIdentifier Pkcs9AtExtendedCertificateAttributes = new DerObjectIdentifier(Pkcs9 + ".9"); - public static readonly DerObjectIdentifier Pkcs9AtSigningDescription = new DerObjectIdentifier(Pkcs9 + ".13"); - public static readonly DerObjectIdentifier Pkcs9AtExtensionRequest = new DerObjectIdentifier(Pkcs9 + ".14"); - public static readonly DerObjectIdentifier Pkcs9AtSmimeCapabilities = new DerObjectIdentifier(Pkcs9 + ".15"); - public static readonly DerObjectIdentifier IdSmime = new DerObjectIdentifier(Pkcs9 + ".16"); - - public static readonly DerObjectIdentifier Pkcs9AtFriendlyName = new DerObjectIdentifier(Pkcs9 + ".20"); - public static readonly DerObjectIdentifier Pkcs9AtLocalKeyID = new DerObjectIdentifier(Pkcs9 + ".21"); - - [Obsolete("Use X509Certificate instead")] - public static readonly DerObjectIdentifier X509CertType = new DerObjectIdentifier(Pkcs9 + ".22.1"); - - public const string CertTypes = Pkcs9 + ".22"; - public static readonly DerObjectIdentifier X509Certificate = new DerObjectIdentifier(CertTypes + ".1"); - public static readonly DerObjectIdentifier SdsiCertificate = new DerObjectIdentifier(CertTypes + ".2"); - - public const string CrlTypes = Pkcs9 + ".23"; - public static readonly DerObjectIdentifier X509Crl = new DerObjectIdentifier(CrlTypes + ".1"); - - public static readonly DerObjectIdentifier IdAlg = IdSmime.Branch("3"); - - public static readonly DerObjectIdentifier IdAlgEsdh = IdAlg.Branch("5"); - public static readonly DerObjectIdentifier IdAlgCms3DesWrap = IdAlg.Branch("6"); - public static readonly DerObjectIdentifier IdAlgCmsRC2Wrap = IdAlg.Branch("7"); - public static readonly DerObjectIdentifier IdAlgPwriKek = IdAlg.Branch("9"); - public static readonly DerObjectIdentifier IdAlgSsdh = IdAlg.Branch("10"); - - /* - * 
-         * -- RSA-KEM Key Transport Algorithm
-         *
-         * id-rsa-kem OID ::= {
-         *      iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1)
-         *      pkcs-9(9) smime(16) alg(3) 14
-         *   }
-         *
- */ - public static readonly DerObjectIdentifier IdRsaKem = IdAlg.Branch("14"); - - // - // SMIME capability sub oids. - // - public static readonly DerObjectIdentifier PreferSignedData = Pkcs9AtSmimeCapabilities.Branch("1"); - public static readonly DerObjectIdentifier CannotDecryptAny = Pkcs9AtSmimeCapabilities.Branch("2"); - public static readonly DerObjectIdentifier SmimeCapabilitiesVersions = Pkcs9AtSmimeCapabilities.Branch("3"); - - // - // other SMIME attributes - // - public static readonly DerObjectIdentifier IdAAReceiptRequest = IdSmime.Branch("2.1"); - - // - // id-ct OBJECT IDENTIFIER ::= {iso(1) member-body(2) usa(840) - // rsadsi(113549) pkcs(1) pkcs-9(9) smime(16) ct(1)} - // - public const string IdCT = "1.2.840.113549.1.9.16.1"; - - public static readonly DerObjectIdentifier IdCTAuthData = new DerObjectIdentifier(IdCT + ".2"); - public static readonly DerObjectIdentifier IdCTTstInfo = new DerObjectIdentifier(IdCT + ".4"); - public static readonly DerObjectIdentifier IdCTCompressedData = new DerObjectIdentifier(IdCT + ".9"); - public static readonly DerObjectIdentifier IdCTAuthEnvelopedData = new DerObjectIdentifier(IdCT + ".23"); - public static readonly DerObjectIdentifier IdCTTimestampedData = new DerObjectIdentifier(IdCT + ".31"); - - // - // id-cti OBJECT IDENTIFIER ::= {iso(1) member-body(2) usa(840) - // rsadsi(113549) pkcs(1) pkcs-9(9) smime(16) cti(6)} - // - public const string IdCti = "1.2.840.113549.1.9.16.6"; - - public static readonly DerObjectIdentifier IdCtiEtsProofOfOrigin = new DerObjectIdentifier(IdCti + ".1"); - public static readonly DerObjectIdentifier IdCtiEtsProofOfReceipt = new DerObjectIdentifier(IdCti + ".2"); - public static readonly DerObjectIdentifier IdCtiEtsProofOfDelivery = new DerObjectIdentifier(IdCti + ".3"); - public static readonly DerObjectIdentifier IdCtiEtsProofOfSender = new DerObjectIdentifier(IdCti + ".4"); - public static readonly DerObjectIdentifier IdCtiEtsProofOfApproval = new DerObjectIdentifier(IdCti + ".5"); - public static readonly DerObjectIdentifier IdCtiEtsProofOfCreation = new DerObjectIdentifier(IdCti + ".6"); - - // - // id-aa OBJECT IDENTIFIER ::= {iso(1) member-body(2) usa(840) - // rsadsi(113549) pkcs(1) pkcs-9(9) smime(16) attributes(2)} - // - public const string IdAA = "1.2.840.113549.1.9.16.2"; - public static readonly DerObjectIdentifier IdAAOid = new DerObjectIdentifier(IdAA); - - public static readonly DerObjectIdentifier IdAAContentHint = new DerObjectIdentifier(IdAA + ".4"); // See RFC 2634 - public static readonly DerObjectIdentifier IdAAMsgSigDigest = new DerObjectIdentifier(IdAA + ".5"); - public static readonly DerObjectIdentifier IdAAContentReference = new DerObjectIdentifier(IdAA + ".10"); - - /* - * id-aa-encrypKeyPref OBJECT IDENTIFIER ::= {id-aa 11} - * - */ - public static readonly DerObjectIdentifier IdAAEncrypKeyPref = new DerObjectIdentifier(IdAA + ".11"); - public static readonly DerObjectIdentifier IdAASigningCertificate = new DerObjectIdentifier(IdAA + ".12"); - public static readonly DerObjectIdentifier IdAASigningCertificateV2 = new DerObjectIdentifier(IdAA + ".47"); - - public static readonly DerObjectIdentifier IdAAContentIdentifier = new DerObjectIdentifier(IdAA + ".7"); // See RFC 2634 - - /* - * RFC 3126 - */ - public static readonly DerObjectIdentifier IdAASignatureTimeStampToken = new DerObjectIdentifier(IdAA + ".14"); - - public static readonly DerObjectIdentifier IdAAEtsSigPolicyID = new DerObjectIdentifier(IdAA + ".15"); - public static readonly DerObjectIdentifier IdAAEtsCommitmentType = new DerObjectIdentifier(IdAA + ".16"); - public static readonly DerObjectIdentifier IdAAEtsSignerLocation = new DerObjectIdentifier(IdAA + ".17"); - public static readonly DerObjectIdentifier IdAAEtsSignerAttr = new DerObjectIdentifier(IdAA + ".18"); - public static readonly DerObjectIdentifier IdAAEtsOtherSigCert = new DerObjectIdentifier(IdAA + ".19"); - public static readonly DerObjectIdentifier IdAAEtsContentTimestamp = new DerObjectIdentifier(IdAA + ".20"); - public static readonly DerObjectIdentifier IdAAEtsCertificateRefs = new DerObjectIdentifier(IdAA + ".21"); - public static readonly DerObjectIdentifier IdAAEtsRevocationRefs = new DerObjectIdentifier(IdAA + ".22"); - public static readonly DerObjectIdentifier IdAAEtsCertValues = new DerObjectIdentifier(IdAA + ".23"); - public static readonly DerObjectIdentifier IdAAEtsRevocationValues = new DerObjectIdentifier(IdAA + ".24"); - public static readonly DerObjectIdentifier IdAAEtsEscTimeStamp = new DerObjectIdentifier(IdAA + ".25"); - public static readonly DerObjectIdentifier IdAAEtsCertCrlTimestamp = new DerObjectIdentifier(IdAA + ".26"); - public static readonly DerObjectIdentifier IdAAEtsArchiveTimestamp = new DerObjectIdentifier(IdAA + ".27"); - - /** PKCS#9: 1.2.840.113549.1.9.16.6.2.37 - RFC 4108 */ - public static readonly DerObjectIdentifier IdAADecryptKeyID = IdAAOid.Branch("37"); - - /** PKCS#9: 1.2.840.113549.1.9.16.6.2.38 - RFC 4108 */ - public static readonly DerObjectIdentifier IdAAImplCryptoAlgs = IdAAOid.Branch("38"); - - /** PKCS#9: 1.2.840.113549.1.9.16.2.54 RFC7030*/ - public static readonly DerObjectIdentifier IdAAAsymmDecryptKeyID = IdAAOid.Branch("54"); - - /** PKCS#9: 1.2.840.113549.1.9.16.2.43 RFC7030*/ - public static readonly DerObjectIdentifier IdAAImplCompressAlgs = IdAAOid.Branch("43"); - /** PKCS#9: 1.2.840.113549.1.9.16.2.40 RFC7030*/ - public static readonly DerObjectIdentifier IdAACommunityIdentifiers = IdAAOid.Branch("40"); - - [Obsolete("Use 'IdAAEtsSigPolicyID' instead")] - public static readonly DerObjectIdentifier IdAASigPolicyID = IdAAEtsSigPolicyID; - [Obsolete("Use 'IdAAEtsCommitmentType' instead")] - public static readonly DerObjectIdentifier IdAACommitmentType = IdAAEtsCommitmentType; - [Obsolete("Use 'IdAAEtsSignerLocation' instead")] - public static readonly DerObjectIdentifier IdAASignerLocation = IdAAEtsSignerLocation; - [Obsolete("Use 'IdAAEtsOtherSigCert' instead")] - public static readonly DerObjectIdentifier IdAAOtherSigCert = IdAAEtsOtherSigCert; - - // - // id-spq OBJECT IDENTIFIER ::= {iso(1) member-body(2) usa(840) - // rsadsi(113549) pkcs(1) pkcs-9(9) smime(16) id-spq(5)} - // - public const string IdSpq = "1.2.840.113549.1.9.16.5"; - - public static readonly DerObjectIdentifier IdSpqEtsUri = new DerObjectIdentifier(IdSpq + ".1"); - public static readonly DerObjectIdentifier IdSpqEtsUNotice = new DerObjectIdentifier(IdSpq + ".2"); - - // - // pkcs-12 OBJECT IDENTIFIER ::= { - // iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) 12 } - // - public const string Pkcs12 = "1.2.840.113549.1.12"; - public const string BagTypes = Pkcs12 + ".10.1"; - - public static readonly DerObjectIdentifier KeyBag = new DerObjectIdentifier(BagTypes + ".1"); - public static readonly DerObjectIdentifier Pkcs8ShroudedKeyBag = new DerObjectIdentifier(BagTypes + ".2"); - public static readonly DerObjectIdentifier CertBag = new DerObjectIdentifier(BagTypes + ".3"); - public static readonly DerObjectIdentifier CrlBag = new DerObjectIdentifier(BagTypes + ".4"); - public static readonly DerObjectIdentifier SecretBag = new DerObjectIdentifier(BagTypes + ".5"); - public static readonly DerObjectIdentifier SafeContentsBag = new DerObjectIdentifier(BagTypes + ".6"); - - public const string Pkcs12PbeIds = Pkcs12 + ".1"; - - public static readonly DerObjectIdentifier PbeWithShaAnd128BitRC4 = new DerObjectIdentifier(Pkcs12PbeIds + ".1"); - public static readonly DerObjectIdentifier PbeWithShaAnd40BitRC4 = new DerObjectIdentifier(Pkcs12PbeIds + ".2"); - public static readonly DerObjectIdentifier PbeWithShaAnd3KeyTripleDesCbc = new DerObjectIdentifier(Pkcs12PbeIds + ".3"); - public static readonly DerObjectIdentifier PbeWithShaAnd2KeyTripleDesCbc = new DerObjectIdentifier(Pkcs12PbeIds + ".4"); - public static readonly DerObjectIdentifier PbeWithShaAnd128BitRC2Cbc = new DerObjectIdentifier(Pkcs12PbeIds + ".5"); - public static readonly DerObjectIdentifier PbewithShaAnd40BitRC2Cbc = new DerObjectIdentifier(Pkcs12PbeIds + ".6"); - } -} diff --git a/bc-sharp-crypto/src/asn1/pkcs/Pfx.cs b/bc-sharp-crypto/src/asn1/pkcs/Pfx.cs deleted file mode 100644 index 9676f64..0000000 --- a/bc-sharp-crypto/src/asn1/pkcs/Pfx.cs +++ /dev/null @@ -1,65 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Asn1.Pkcs -{ - /** - * the infamous Pfx from Pkcs12 - */ - public class Pfx - : Asn1Encodable - { - private ContentInfo contentInfo; - private MacData macData; - - public Pfx( - Asn1Sequence seq) - { - BigInteger version = ((DerInteger) seq[0]).Value; - if (version.IntValue != 3) - { - throw new ArgumentException("wrong version for PFX PDU"); - } - - contentInfo = ContentInfo.GetInstance(seq[1]); - - if (seq.Count == 3) - { - macData = MacData.GetInstance(seq[2]); - } - } - - public Pfx( - ContentInfo contentInfo, - MacData macData) - { - this.contentInfo = contentInfo; - this.macData = macData; - } - - public ContentInfo AuthSafe - { - get { return contentInfo; } - } - - public MacData MacData - { - get { return macData; } - } - - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector( - new DerInteger(3), contentInfo); - - if (macData != null) - { - v.Add(macData); - } - - return new BerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/pkcs/PrivateKeyInfo.cs b/bc-sharp-crypto/src/asn1/pkcs/PrivateKeyInfo.cs deleted file mode 100644 index c5be7a3..0000000 --- a/bc-sharp-crypto/src/asn1/pkcs/PrivateKeyInfo.cs +++ /dev/null @@ -1,135 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Asn1.Pkcs -{ - public class PrivateKeyInfo - : Asn1Encodable - { - private readonly Asn1OctetString privKey; - private readonly AlgorithmIdentifier algID; - private readonly Asn1Set attributes; - - public static PrivateKeyInfo GetInstance(Asn1TaggedObject obj, bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static PrivateKeyInfo GetInstance( - object obj) - { - if (obj == null) - return null; - if (obj is PrivateKeyInfo) - return (PrivateKeyInfo) obj; - return new PrivateKeyInfo(Asn1Sequence.GetInstance(obj)); - } - - public PrivateKeyInfo(AlgorithmIdentifier algID, Asn1Encodable privateKey) - : this(algID, privateKey, null) - { - } - - public PrivateKeyInfo( - AlgorithmIdentifier algID, - Asn1Encodable privateKey, - Asn1Set attributes) - { - this.algID = algID; - this.privKey = new DerOctetString(privateKey.GetEncoded(Asn1Encodable.Der)); - this.attributes = attributes; - } - - private PrivateKeyInfo(Asn1Sequence seq) - { - IEnumerator e = seq.GetEnumerator(); - - e.MoveNext(); - BigInteger version = ((DerInteger)e.Current).Value; - if (version.IntValue != 0) - { - throw new ArgumentException("wrong version for private key info: " + version.IntValue); - } - - e.MoveNext(); - algID = AlgorithmIdentifier.GetInstance(e.Current); - e.MoveNext(); - privKey = Asn1OctetString.GetInstance(e.Current); - - if (e.MoveNext()) - { - attributes = Asn1Set.GetInstance((Asn1TaggedObject)e.Current, false); - } - } - - public virtual AlgorithmIdentifier PrivateKeyAlgorithm - { - get { return algID; } - } - - [Obsolete("Use 'PrivateKeyAlgorithm' property instead")] - public virtual AlgorithmIdentifier AlgorithmID - { - get { return algID; } - } - - public virtual Asn1Object ParsePrivateKey() - { - return Asn1Object.FromByteArray(privKey.GetOctets()); - } - - [Obsolete("Use 'ParsePrivateKey' instead")] - public virtual Asn1Object PrivateKey - { - get - { - try - { - return ParsePrivateKey(); - } - catch (IOException) - { - throw new InvalidOperationException("unable to parse private key"); - } - } - } - - public virtual Asn1Set Attributes - { - get { return attributes; } - } - - /** - * write out an RSA private key with its associated information - * as described in Pkcs8. - * 
-         *      PrivateKeyInfo ::= Sequence {
-         *                              version Version,
-         *                              privateKeyAlgorithm AlgorithmIdentifier {{PrivateKeyAlgorithms}},
-         *                              privateKey PrivateKey,
-         *                              attributes [0] IMPLICIT Attributes OPTIONAL
-         *                          }
-         *      Version ::= Integer {v1(0)} (v1,...)
-         *
-         *      PrivateKey ::= OCTET STRING
-         *
-         *      Attributes ::= Set OF Attr
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(new DerInteger(0), algID, privKey); - - if (attributes != null) - { - v.Add(new DerTaggedObject(false, 0, attributes)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/pkcs/RC2CBCParameter.cs b/bc-sharp-crypto/src/asn1/pkcs/RC2CBCParameter.cs deleted file mode 100644 index 880ca74..0000000 --- a/bc-sharp-crypto/src/asn1/pkcs/RC2CBCParameter.cs +++ /dev/null @@ -1,80 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Pkcs -{ - public class RC2CbcParameter - : Asn1Encodable - { - internal DerInteger version; - internal Asn1OctetString iv; - - public static RC2CbcParameter GetInstance( - object obj) - { - if (obj is Asn1Sequence) - { - return new RC2CbcParameter((Asn1Sequence) obj); - } - - throw new ArgumentException("Unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public RC2CbcParameter( - byte[] iv) - { - this.iv = new DerOctetString(iv); - } - - public RC2CbcParameter( - int parameterVersion, - byte[] iv) - { - this.version = new DerInteger(parameterVersion); - this.iv = new DerOctetString(iv); - } - - private RC2CbcParameter( - Asn1Sequence seq) - { - if (seq.Count == 1) - { - iv = (Asn1OctetString)seq[0]; - } - else - { - version = (DerInteger)seq[0]; - iv = (Asn1OctetString)seq[1]; - } - } - - public BigInteger RC2ParameterVersion - { - get - { - return version == null ? null : version.Value; - } - } - - public byte[] GetIV() - { - return Arrays.Clone(iv.GetOctets()); - } - - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - if (version != null) - { - v.Add(version); - } - - v.Add(iv); - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/pkcs/RSAESOAEPparams.cs b/bc-sharp-crypto/src/asn1/pkcs/RSAESOAEPparams.cs deleted file mode 100644 index 0cf22f8..0000000 --- a/bc-sharp-crypto/src/asn1/pkcs/RSAESOAEPparams.cs +++ /dev/null @@ -1,146 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.Oiw; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Pkcs -{ - public class RsaesOaepParameters - : Asn1Encodable - { - private AlgorithmIdentifier hashAlgorithm; - private AlgorithmIdentifier maskGenAlgorithm; - private AlgorithmIdentifier pSourceAlgorithm; - - public readonly static AlgorithmIdentifier DefaultHashAlgorithm = new AlgorithmIdentifier(OiwObjectIdentifiers.IdSha1, DerNull.Instance); - public readonly static AlgorithmIdentifier DefaultMaskGenFunction = new AlgorithmIdentifier(PkcsObjectIdentifiers.IdMgf1, DefaultHashAlgorithm); - public readonly static AlgorithmIdentifier DefaultPSourceAlgorithm = new AlgorithmIdentifier(PkcsObjectIdentifiers.IdPSpecified, new DerOctetString(new byte[0])); - - public static RsaesOaepParameters GetInstance( - object obj) - { - if (obj is RsaesOaepParameters) - { - return (RsaesOaepParameters)obj; - } - else if (obj is Asn1Sequence) - { - return new RsaesOaepParameters((Asn1Sequence)obj); - } - - throw new ArgumentException("Unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - /** - * The default version - */ - public RsaesOaepParameters() - { - hashAlgorithm = DefaultHashAlgorithm; - maskGenAlgorithm = DefaultMaskGenFunction; - pSourceAlgorithm = DefaultPSourceAlgorithm; - } - - public RsaesOaepParameters( - AlgorithmIdentifier hashAlgorithm, - AlgorithmIdentifier maskGenAlgorithm, - AlgorithmIdentifier pSourceAlgorithm) - { - this.hashAlgorithm = hashAlgorithm; - this.maskGenAlgorithm = maskGenAlgorithm; - this.pSourceAlgorithm = pSourceAlgorithm; - } - - public RsaesOaepParameters( - Asn1Sequence seq) - { - hashAlgorithm = DefaultHashAlgorithm; - maskGenAlgorithm = DefaultMaskGenFunction; - pSourceAlgorithm = DefaultPSourceAlgorithm; - - for (int i = 0; i != seq.Count; i++) - { - Asn1TaggedObject o = (Asn1TaggedObject)seq[i]; - - switch (o.TagNo) - { - case 0: - hashAlgorithm = AlgorithmIdentifier.GetInstance(o, true); - break; - case 1: - maskGenAlgorithm = AlgorithmIdentifier.GetInstance(o, true); - break; - case 2: - pSourceAlgorithm = AlgorithmIdentifier.GetInstance(o, true); - break; - default: - throw new ArgumentException("unknown tag"); - } - } - } - - public AlgorithmIdentifier HashAlgorithm - { - get { return hashAlgorithm; } - } - - public AlgorithmIdentifier MaskGenAlgorithm - { - get { return maskGenAlgorithm; } - } - - public AlgorithmIdentifier PSourceAlgorithm - { - get { return pSourceAlgorithm; } - } - - /** - * 
-		 *  RSAES-OAEP-params ::= SEQUENCE {
-		 *     hashAlgorithm      [0] OAEP-PSSDigestAlgorithms     DEFAULT sha1,
-		 *     maskGenAlgorithm   [1] PKCS1MGFAlgorithms  DEFAULT mgf1SHA1,
-		 *     pSourceAlgorithm   [2] PKCS1PSourceAlgorithms  DEFAULT pSpecifiedEmpty
-		 *   }
-		 *
-		 *   OAEP-PSSDigestAlgorithms    ALGORITHM-IDENTIFIER ::= {
-		 *     { OID id-sha1 PARAMETERS NULL   }|
-		 *     { OID id-sha256 PARAMETERS NULL }|
-		 *     { OID id-sha384 PARAMETERS NULL }|
-		 *     { OID id-sha512 PARAMETERS NULL },
-		 *     ...  -- Allows for future expansion --
-		 *   }
-		 *   PKCS1MGFAlgorithms    ALGORITHM-IDENTIFIER ::= {
-		 *     { OID id-mgf1 PARAMETERS OAEP-PSSDigestAlgorithms },
-		 *    ...  -- Allows for future expansion --
-		 *   }
-		 *   PKCS1PSourceAlgorithms    ALGORITHM-IDENTIFIER ::= {
-		 *     { OID id-pSpecified PARAMETERS OCTET STRING },
-		 *     ...  -- Allows for future expansion --
-		 *  }
-		 *
- * @return the asn1 primitive representing the parameters. - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - if (!hashAlgorithm.Equals(DefaultHashAlgorithm)) - { - v.Add(new DerTaggedObject(true, 0, hashAlgorithm)); - } - - if (!maskGenAlgorithm.Equals(DefaultMaskGenFunction)) - { - v.Add(new DerTaggedObject(true, 1, maskGenAlgorithm)); - } - - if (!pSourceAlgorithm.Equals(DefaultPSourceAlgorithm)) - { - v.Add(new DerTaggedObject(true, 2, pSourceAlgorithm)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/pkcs/RSAPrivateKeyStructure.cs b/bc-sharp-crypto/src/asn1/pkcs/RSAPrivateKeyStructure.cs deleted file mode 100644 index 7212991..0000000 --- a/bc-sharp-crypto/src/asn1/pkcs/RSAPrivateKeyStructure.cs +++ /dev/null @@ -1,146 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Asn1.Pkcs -{ - public class RsaPrivateKeyStructure - : Asn1Encodable - { - private readonly BigInteger modulus; - private readonly BigInteger publicExponent; - private readonly BigInteger privateExponent; - private readonly BigInteger prime1; - private readonly BigInteger prime2; - private readonly BigInteger exponent1; - private readonly BigInteger exponent2; - private readonly BigInteger coefficient; - - public static RsaPrivateKeyStructure GetInstance(Asn1TaggedObject obj, bool isExplicit) - { - return GetInstance(Asn1Sequence.GetInstance(obj, isExplicit)); - } - - public static RsaPrivateKeyStructure GetInstance(object obj) - { - if (obj == null) - return null; - if (obj is RsaPrivateKeyStructure) - return (RsaPrivateKeyStructure)obj; - return new RsaPrivateKeyStructure(Asn1Sequence.GetInstance(obj)); - } - - public RsaPrivateKeyStructure( - BigInteger modulus, - BigInteger publicExponent, - BigInteger privateExponent, - BigInteger prime1, - BigInteger prime2, - BigInteger exponent1, - BigInteger exponent2, - BigInteger coefficient) - { - this.modulus = modulus; - this.publicExponent = publicExponent; - this.privateExponent = privateExponent; - this.prime1 = prime1; - this.prime2 = prime2; - this.exponent1 = exponent1; - this.exponent2 = exponent2; - this.coefficient = coefficient; - } - - [Obsolete("Use 'GetInstance' method(s) instead")] - public RsaPrivateKeyStructure( - Asn1Sequence seq) - { - BigInteger version = ((DerInteger) seq[0]).Value; - if (version.IntValue != 0) - throw new ArgumentException("wrong version for RSA private key"); - - modulus = ((DerInteger) seq[1]).Value; - publicExponent = ((DerInteger) seq[2]).Value; - privateExponent = ((DerInteger) seq[3]).Value; - prime1 = ((DerInteger) seq[4]).Value; - prime2 = ((DerInteger) seq[5]).Value; - exponent1 = ((DerInteger) seq[6]).Value; - exponent2 = ((DerInteger) seq[7]).Value; - coefficient = ((DerInteger) seq[8]).Value; - } - - public BigInteger Modulus - { - get { return modulus; } - } - - public BigInteger PublicExponent - { - get { return publicExponent; } - } - - public BigInteger PrivateExponent - { - get { return privateExponent; } - } - - public BigInteger Prime1 - { - get { return prime1; } - } - - public BigInteger Prime2 - { - get { return prime2; } - } - - public BigInteger Exponent1 - { - get { return exponent1; } - } - - public BigInteger Exponent2 - { - get { return exponent2; } - } - - public BigInteger Coefficient - { - get { return coefficient; } - } - - /** - * This outputs the key in Pkcs1v2 format. - * 
-         *      RsaPrivateKey ::= Sequence {
-         *                          version Version,
-         *                          modulus Integer, -- n
-         *                          publicExponent Integer, -- e
-         *                          privateExponent Integer, -- d
-         *                          prime1 Integer, -- p
-         *                          prime2 Integer, -- q
-         *                          exponent1 Integer, -- d mod (p-1)
-         *                          exponent2 Integer, -- d mod (q-1)
-         *                          coefficient Integer -- (inverse of q) mod p
-         *                      }
-         *
-         *      Version ::= Integer
-         *
- *

This routine is written to output Pkcs1 version 0, private keys.

- */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence( - new DerInteger(0), // version - new DerInteger(Modulus), - new DerInteger(PublicExponent), - new DerInteger(PrivateExponent), - new DerInteger(Prime1), - new DerInteger(Prime2), - new DerInteger(Exponent1), - new DerInteger(Exponent2), - new DerInteger(Coefficient)); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/pkcs/RSASSAPSSparams.cs b/bc-sharp-crypto/src/asn1/pkcs/RSASSAPSSparams.cs deleted file mode 100644 index 85849c3..0000000 --- a/bc-sharp-crypto/src/asn1/pkcs/RSASSAPSSparams.cs +++ /dev/null @@ -1,166 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.Oiw; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Pkcs -{ - public class RsassaPssParameters - : Asn1Encodable - { - private AlgorithmIdentifier hashAlgorithm; - private AlgorithmIdentifier maskGenAlgorithm; - private DerInteger saltLength; - private DerInteger trailerField; - - public readonly static AlgorithmIdentifier DefaultHashAlgorithm = new AlgorithmIdentifier(OiwObjectIdentifiers.IdSha1, DerNull.Instance); - public readonly static AlgorithmIdentifier DefaultMaskGenFunction = new AlgorithmIdentifier(PkcsObjectIdentifiers.IdMgf1, DefaultHashAlgorithm); - public readonly static DerInteger DefaultSaltLength = new DerInteger(20); - public readonly static DerInteger DefaultTrailerField = new DerInteger(1); - - public static RsassaPssParameters GetInstance( - object obj) - { - if (obj == null || obj is RsassaPssParameters) - { - return (RsassaPssParameters)obj; - } - - if (obj is Asn1Sequence) - { - return new RsassaPssParameters((Asn1Sequence)obj); - } - - throw new ArgumentException("Unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - /** - * The default version - */ - public RsassaPssParameters() - { - hashAlgorithm = DefaultHashAlgorithm; - maskGenAlgorithm = DefaultMaskGenFunction; - saltLength = DefaultSaltLength; - trailerField = DefaultTrailerField; - } - - public RsassaPssParameters( - AlgorithmIdentifier hashAlgorithm, - AlgorithmIdentifier maskGenAlgorithm, - DerInteger saltLength, - DerInteger trailerField) - { - this.hashAlgorithm = hashAlgorithm; - this.maskGenAlgorithm = maskGenAlgorithm; - this.saltLength = saltLength; - this.trailerField = trailerField; - } - - public RsassaPssParameters( - Asn1Sequence seq) - { - hashAlgorithm = DefaultHashAlgorithm; - maskGenAlgorithm = DefaultMaskGenFunction; - saltLength = DefaultSaltLength; - trailerField = DefaultTrailerField; - - for (int i = 0; i != seq.Count; i++) - { - Asn1TaggedObject o = (Asn1TaggedObject)seq[i]; - - switch (o.TagNo) - { - case 0: - hashAlgorithm = AlgorithmIdentifier.GetInstance(o, true); - break; - case 1: - maskGenAlgorithm = AlgorithmIdentifier.GetInstance(o, true); - break; - case 2: - saltLength = DerInteger.GetInstance(o, true); - break; - case 3: - trailerField = DerInteger.GetInstance(o, true); - break; - default: - throw new ArgumentException("unknown tag"); - } - } - } - - public AlgorithmIdentifier HashAlgorithm - { - get { return hashAlgorithm; } - } - - public AlgorithmIdentifier MaskGenAlgorithm - { - get { return maskGenAlgorithm; } - } - - public DerInteger SaltLength - { - get { return saltLength; } - } - - public DerInteger TrailerField - { - get { return trailerField; } - } - - /** - * 
-		 * RSASSA-PSS-params ::= SEQUENCE {
-		 *   hashAlgorithm      [0] OAEP-PSSDigestAlgorithms  DEFAULT sha1,
-		 *    maskGenAlgorithm   [1] PKCS1MGFAlgorithms  DEFAULT mgf1SHA1,
-		 *    saltLength         [2] INTEGER  DEFAULT 20,
-		 *    trailerField       [3] TrailerField  DEFAULT trailerFieldBC
-		 *  }
-		 *
-		 * OAEP-PSSDigestAlgorithms    ALGORITHM-IDENTIFIER ::= {
-		 *    { OID id-sha1 PARAMETERS NULL   }|
-		 *    { OID id-sha256 PARAMETERS NULL }|
-		 *    { OID id-sha384 PARAMETERS NULL }|
-		 *    { OID id-sha512 PARAMETERS NULL },
-		 *    ...  -- Allows for future expansion --
-		 * }
-		 *
-		 * PKCS1MGFAlgorithms    ALGORITHM-IDENTIFIER ::= {
-		 *   { OID id-mgf1 PARAMETERS OAEP-PSSDigestAlgorithms },
-		 *    ...  -- Allows for future expansion --
-		 * }
-		 *
-		 * TrailerField ::= INTEGER { trailerFieldBC(1) }
-		 *
- * @return the asn1 primitive representing the parameters. - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - if (!hashAlgorithm.Equals(DefaultHashAlgorithm)) - { - v.Add(new DerTaggedObject(true, 0, hashAlgorithm)); - } - - if (!maskGenAlgorithm.Equals(DefaultMaskGenFunction)) - { - v.Add(new DerTaggedObject(true, 1, maskGenAlgorithm)); - } - - if (!saltLength.Equals(DefaultSaltLength)) - { - v.Add(new DerTaggedObject(true, 2, saltLength)); - } - - if (!trailerField.Equals(DefaultTrailerField)) - { - v.Add(new DerTaggedObject(true, 3, trailerField)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/pkcs/SafeBag.cs b/bc-sharp-crypto/src/asn1/pkcs/SafeBag.cs deleted file mode 100644 index 4b9350b..0000000 --- a/bc-sharp-crypto/src/asn1/pkcs/SafeBag.cs +++ /dev/null @@ -1,70 +0,0 @@ -using Org.BouncyCastle.Asn1; - -namespace Org.BouncyCastle.Asn1.Pkcs -{ - public class SafeBag - : Asn1Encodable - { - private readonly DerObjectIdentifier bagID; - private readonly Asn1Object bagValue; - private readonly Asn1Set bagAttributes; - - public SafeBag( - DerObjectIdentifier oid, - Asn1Object obj) - { - this.bagID = oid; - this.bagValue = obj; - this.bagAttributes = null; - } - - public SafeBag( - DerObjectIdentifier oid, - Asn1Object obj, - Asn1Set bagAttributes) - { - this.bagID = oid; - this.bagValue = obj; - this.bagAttributes = bagAttributes; - } - - public SafeBag( - Asn1Sequence seq) - { - this.bagID = (DerObjectIdentifier) seq[0]; - this.bagValue = ((DerTaggedObject) seq[1]).GetObject(); - if (seq.Count == 3) - { - this.bagAttributes = (Asn1Set) seq[2]; - } - } - - public DerObjectIdentifier BagID - { - get { return bagID; } - } - - public Asn1Object BagValue - { - get { return bagValue; } - } - - public Asn1Set BagAttributes - { - get { return bagAttributes; } - } - - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector( - bagID, new DerTaggedObject(0, bagValue)); - - if (bagAttributes != null) - { - v.Add(bagAttributes); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/pkcs/SignedData.cs b/bc-sharp-crypto/src/asn1/pkcs/SignedData.cs deleted file mode 100644 index 6e72bd0..0000000 --- a/bc-sharp-crypto/src/asn1/pkcs/SignedData.cs +++ /dev/null @@ -1,157 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; - -namespace Org.BouncyCastle.Asn1.Pkcs -{ - /** - * a Pkcs#7 signed data object. - */ - public class SignedData - : Asn1Encodable - { - private readonly DerInteger version; - private readonly Asn1Set digestAlgorithms; - private readonly ContentInfo contentInfo; - private readonly Asn1Set certificates; - private readonly Asn1Set crls; - private readonly Asn1Set signerInfos; - - public static SignedData GetInstance(object obj) - { - if (obj == null) - return null; - SignedData existing = obj as SignedData; - if (existing != null) - return existing; - return new SignedData(Asn1Sequence.GetInstance(obj)); - } - - public SignedData( - DerInteger _version, - Asn1Set _digestAlgorithms, - ContentInfo _contentInfo, - Asn1Set _certificates, - Asn1Set _crls, - Asn1Set _signerInfos) - { - version = _version; - digestAlgorithms = _digestAlgorithms; - contentInfo = _contentInfo; - certificates = _certificates; - crls = _crls; - signerInfos = _signerInfos; - } - - private SignedData( - Asn1Sequence seq) - { - IEnumerator e = seq.GetEnumerator(); - - e.MoveNext(); - version = (DerInteger) e.Current; - - e.MoveNext(); - digestAlgorithms = (Asn1Set) e.Current; - - e.MoveNext(); - contentInfo = ContentInfo.GetInstance(e.Current); - - while (e.MoveNext()) - { - Asn1Object o = (Asn1Object) e.Current; - - // - // an interesting feature of SignedData is that there appear to be varying implementations... - // for the moment we ignore anything which doesn't fit. - // - if (o is DerTaggedObject) - { - DerTaggedObject tagged = (DerTaggedObject) o; - - switch (tagged.TagNo) - { - case 0: - certificates = Asn1Set.GetInstance(tagged, false); - break; - case 1: - crls = Asn1Set.GetInstance(tagged, false); - break; - default: - throw new ArgumentException("unknown tag value " + tagged.TagNo); - } - } - else - { - signerInfos = (Asn1Set) o; - } - } - } - - public DerInteger Version - { - get { return version; } - } - - public Asn1Set DigestAlgorithms - { - get { return digestAlgorithms; } - } - - public ContentInfo ContentInfo - { - get { return contentInfo; } - } - - public Asn1Set Certificates - { - get { return certificates; } - } - - public Asn1Set Crls - { - get { return crls; } - } - - public Asn1Set SignerInfos - { - get { return signerInfos; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         *  SignedData ::= Sequence {
-         *      version Version,
-         *      digestAlgorithms DigestAlgorithmIdentifiers,
-         *      contentInfo ContentInfo,
-         *      certificates
-         *          [0] IMPLICIT ExtendedCertificatesAndCertificates
-         *                   OPTIONAL,
-         *      crls
-         *          [1] IMPLICIT CertificateRevocationLists OPTIONAL,
-         *      signerInfos SignerInfos }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector( - version, digestAlgorithms, contentInfo); - - if (certificates != null) - { - v.Add(new DerTaggedObject(false, 0, certificates)); - } - - if (crls != null) - { - v.Add(new DerTaggedObject(false, 1, crls)); - } - - v.Add(signerInfos); - - return new BerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/pkcs/SignerInfo.cs b/bc-sharp-crypto/src/asn1/pkcs/SignerInfo.cs deleted file mode 100644 index a3dc48b..0000000 --- a/bc-sharp-crypto/src/asn1/pkcs/SignerInfo.cs +++ /dev/null @@ -1,154 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Pkcs -{ - /** - * a Pkcs#7 signer info object. - */ - public class SignerInfo - : Asn1Encodable - { - private DerInteger version; - private IssuerAndSerialNumber issuerAndSerialNumber; - private AlgorithmIdentifier digAlgorithm; - private Asn1Set authenticatedAttributes; - private AlgorithmIdentifier digEncryptionAlgorithm; - private Asn1OctetString encryptedDigest; - private Asn1Set unauthenticatedAttributes; - - public static SignerInfo GetInstance( - object obj) - { - if (obj is SignerInfo) - { - return (SignerInfo) obj; - } - - if (obj is Asn1Sequence) - { - return new SignerInfo((Asn1Sequence) obj); - } - - throw new ArgumentException("Unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public SignerInfo( - DerInteger version, - IssuerAndSerialNumber issuerAndSerialNumber, - AlgorithmIdentifier digAlgorithm, - Asn1Set authenticatedAttributes, - AlgorithmIdentifier digEncryptionAlgorithm, - Asn1OctetString encryptedDigest, - Asn1Set unauthenticatedAttributes) - { - this.version = version; - this.issuerAndSerialNumber = issuerAndSerialNumber; - this.digAlgorithm = digAlgorithm; - this.authenticatedAttributes = authenticatedAttributes; - this.digEncryptionAlgorithm = digEncryptionAlgorithm; - this.encryptedDigest = encryptedDigest; - this.unauthenticatedAttributes = unauthenticatedAttributes; - } - - public SignerInfo( - Asn1Sequence seq) - { - IEnumerator e = seq.GetEnumerator(); - - e.MoveNext(); - version = (DerInteger) e.Current; - - e.MoveNext(); - issuerAndSerialNumber = IssuerAndSerialNumber.GetInstance(e.Current); - - e.MoveNext(); - digAlgorithm = AlgorithmIdentifier.GetInstance(e.Current); - - e.MoveNext(); - object obj = e.Current; - - if (obj is Asn1TaggedObject) - { - authenticatedAttributes = Asn1Set.GetInstance((Asn1TaggedObject) obj, false); - - e.MoveNext(); - digEncryptionAlgorithm = AlgorithmIdentifier.GetInstance(e.Current); - } - else - { - authenticatedAttributes = null; - digEncryptionAlgorithm = AlgorithmIdentifier.GetInstance(obj); - } - - e.MoveNext(); - encryptedDigest = DerOctetString.GetInstance(e.Current); - - if (e.MoveNext()) - { - unauthenticatedAttributes = Asn1Set.GetInstance((Asn1TaggedObject)e.Current, false); - } - else - { - unauthenticatedAttributes = null; - } - } - - public DerInteger Version { get { return version; } } - - public IssuerAndSerialNumber IssuerAndSerialNumber { get { return issuerAndSerialNumber; } } - - public Asn1Set AuthenticatedAttributes { get { return authenticatedAttributes; } } - - public AlgorithmIdentifier DigestAlgorithm { get { return digAlgorithm; } } - - public Asn1OctetString EncryptedDigest { get { return encryptedDigest; } } - - public AlgorithmIdentifier DigestEncryptionAlgorithm { get { return digEncryptionAlgorithm; } } - - public Asn1Set UnauthenticatedAttributes { get { return unauthenticatedAttributes; } } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         *  SignerInfo ::= Sequence {
-         *      version Version,
-         *      issuerAndSerialNumber IssuerAndSerialNumber,
-         *      digestAlgorithm DigestAlgorithmIdentifier,
-         *      authenticatedAttributes [0] IMPLICIT Attributes OPTIONAL,
-         *      digestEncryptionAlgorithm DigestEncryptionAlgorithmIdentifier,
-         *      encryptedDigest EncryptedDigest,
-         *      unauthenticatedAttributes [1] IMPLICIT Attributes OPTIONAL
-         *  }
-         *
-         *  EncryptedDigest ::= OCTET STRING
-         *
-         *  DigestAlgorithmIdentifier ::= AlgorithmIdentifier
-         *
-         *  DigestEncryptionAlgorithmIdentifier ::= AlgorithmIdentifier
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector( - version, issuerAndSerialNumber, digAlgorithm); - - if (authenticatedAttributes != null) - { - v.Add(new DerTaggedObject(false, 0, authenticatedAttributes)); - } - - v.Add(digEncryptionAlgorithm, encryptedDigest); - - if (unauthenticatedAttributes != null) - { - v.Add(new DerTaggedObject(false, 1, unauthenticatedAttributes)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/sec/ECPrivateKeyStructure.cs b/bc-sharp-crypto/src/asn1/sec/ECPrivateKeyStructure.cs deleted file mode 100644 index 32e020c..0000000 --- a/bc-sharp-crypto/src/asn1/sec/ECPrivateKeyStructure.cs +++ /dev/null @@ -1,184 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Sec -{ - /** - * the elliptic curve private key object from SEC 1 - */ - public class ECPrivateKeyStructure - : Asn1Encodable - { - private readonly Asn1Sequence seq; - - public static ECPrivateKeyStructure GetInstance(object obj) - { - if (obj == null) - return null; - if (obj is ECPrivateKeyStructure) - return (ECPrivateKeyStructure)obj; - return new ECPrivateKeyStructure(Asn1Sequence.GetInstance(obj)); - } - - [Obsolete("Use 'GetInstance' instead")] - public ECPrivateKeyStructure( - Asn1Sequence seq) - { - if (seq == null) - throw new ArgumentNullException("seq"); - - this.seq = seq; - } - - [Obsolete("Use constructor which takes 'orderBitLength' instead, to guarantee correct encoding")] - public ECPrivateKeyStructure( - BigInteger key) - { - if (key == null) - throw new ArgumentNullException("key"); - - this.seq = new DerSequence( - new DerInteger(1), - new DerOctetString(key.ToByteArrayUnsigned())); - } - - public ECPrivateKeyStructure( - int orderBitLength, - BigInteger key) - { - if (key == null) - throw new ArgumentNullException("key"); - if (orderBitLength < key.BitLength) - throw new ArgumentException("must be >= key bitlength", "orderBitLength"); - - byte[] bytes = BigIntegers.AsUnsignedByteArray((orderBitLength + 7) / 8, key); - - this.seq = new DerSequence( - new DerInteger(1), - new DerOctetString(bytes)); - } - - [Obsolete("Use constructor which takes 'orderBitLength' instead, to guarantee correct encoding")] - public ECPrivateKeyStructure( - BigInteger key, - Asn1Encodable parameters) - : this(key, null, parameters) - { - } - - [Obsolete("Use constructor which takes 'orderBitLength' instead, to guarantee correct encoding")] - public ECPrivateKeyStructure( - BigInteger key, - DerBitString publicKey, - Asn1Encodable parameters) - { - if (key == null) - throw new ArgumentNullException("key"); - - Asn1EncodableVector v = new Asn1EncodableVector( - new DerInteger(1), - new DerOctetString(key.ToByteArrayUnsigned())); - - if (parameters != null) - { - v.Add(new DerTaggedObject(true, 0, parameters)); - } - - if (publicKey != null) - { - v.Add(new DerTaggedObject(true, 1, publicKey)); - } - - this.seq = new DerSequence(v); - } - - public ECPrivateKeyStructure( - int orderBitLength, - BigInteger key, - Asn1Encodable parameters) - : this(orderBitLength, key, null, parameters) - { - } - - public ECPrivateKeyStructure( - int orderBitLength, - BigInteger key, - DerBitString publicKey, - Asn1Encodable parameters) - { - if (key == null) - throw new ArgumentNullException("key"); - if (orderBitLength < key.BitLength) - throw new ArgumentException("must be >= key bitlength", "orderBitLength"); - - byte[] bytes = BigIntegers.AsUnsignedByteArray((orderBitLength + 7) / 8, key); - - Asn1EncodableVector v = new Asn1EncodableVector( - new DerInteger(1), - new DerOctetString(bytes)); - - if (parameters != null) - { - v.Add(new DerTaggedObject(true, 0, parameters)); - } - - if (publicKey != null) - { - v.Add(new DerTaggedObject(true, 1, publicKey)); - } - - this.seq = new DerSequence(v); - } - - public virtual BigInteger GetKey() - { - Asn1OctetString octs = (Asn1OctetString) seq[1]; - - return new BigInteger(1, octs.GetOctets()); - } - - public virtual DerBitString GetPublicKey() - { - return (DerBitString) GetObjectInTag(1); - } - - public virtual Asn1Object GetParameters() - { - return GetObjectInTag(0); - } - - private Asn1Object GetObjectInTag(int tagNo) - { - foreach (Asn1Encodable ae in seq) - { - Asn1Object obj = ae.ToAsn1Object(); - - if (obj is Asn1TaggedObject) - { - Asn1TaggedObject tag = (Asn1TaggedObject) obj; - if (tag.TagNo == tagNo) - { - return tag.GetObject(); - } - } - } - - return null; - } - - /** - * ECPrivateKey ::= SEQUENCE { - * version INTEGER { ecPrivkeyVer1(1) } (ecPrivkeyVer1), - * privateKey OCTET STRING, - * parameters [0] Parameters OPTIONAL, - * publicKey [1] BIT STRING OPTIONAL } - */ - public override Asn1Object ToAsn1Object() - { - return seq; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/sec/SECNamedCurves.cs b/bc-sharp-crypto/src/asn1/sec/SECNamedCurves.cs deleted file mode 100644 index b753ac5..0000000 --- a/bc-sharp-crypto/src/asn1/sec/SECNamedCurves.cs +++ /dev/null @@ -1,1184 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC; -using Org.BouncyCastle.Math.EC.Endo; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Asn1.Sec -{ - public sealed class SecNamedCurves - { - private SecNamedCurves() - { - } - - private static ECCurve ConfigureCurve(ECCurve curve) - { - return curve; - } - - private static ECCurve ConfigureCurveGlv(ECCurve c, GlvTypeBParameters p) - { - return c.Configure().SetEndomorphism(new GlvTypeBEndomorphism(c, p)).Create(); - } - - private static BigInteger FromHex(string hex) - { - return new BigInteger(1, Hex.Decode(hex)); - } - - /* - * secp112r1 - */ - internal class Secp112r1Holder - : X9ECParametersHolder - { - private Secp112r1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Secp112r1Holder(); - - protected override X9ECParameters CreateParameters() - { - // p = (2^128 - 3) / 76439 - BigInteger p = FromHex("DB7C2ABF62E35E668076BEAD208B"); - BigInteger a = FromHex("DB7C2ABF62E35E668076BEAD2088"); - BigInteger b = FromHex("659EF8BA043916EEDE8911702B22"); - byte[] S = Hex.Decode("00F50B028E4D696E676875615175290472783FB1"); - BigInteger n = FromHex("DB7C2ABF62E35E7628DFAC6561C5"); - BigInteger h = BigInteger.One; - - ECCurve curve = ConfigureCurve(new FpCurve(p, a, b, n, h)); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "09487239995A5EE76B55F9C2F098" - + "A89CE5AF8724C0A23E0E0FF77500")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * secp112r2 - */ - internal class Secp112r2Holder - : X9ECParametersHolder - { - private Secp112r2Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Secp112r2Holder(); - - protected override X9ECParameters CreateParameters() - { - // p = (2^128 - 3) / 76439 - BigInteger p = FromHex("DB7C2ABF62E35E668076BEAD208B"); - BigInteger a = FromHex("6127C24C05F38A0AAAF65C0EF02C"); - BigInteger b = FromHex("51DEF1815DB5ED74FCC34C85D709"); - byte[] S = Hex.Decode("002757A1114D696E6768756151755316C05E0BD4"); - BigInteger n = FromHex("36DF0AAFD8B8D7597CA10520D04B"); - BigInteger h = BigInteger.ValueOf(4); - - ECCurve curve = ConfigureCurve(new FpCurve(p, a, b, n, h)); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "4BA30AB5E892B4E1649DD0928643" - + "ADCD46F5882E3747DEF36E956E97")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * secp128r1 - */ - internal class Secp128r1Holder - : X9ECParametersHolder - { - private Secp128r1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Secp128r1Holder(); - - protected override X9ECParameters CreateParameters() - { - // p = 2^128 - 2^97 - 1 - BigInteger p = FromHex("FFFFFFFDFFFFFFFFFFFFFFFFFFFFFFFF"); - BigInteger a = FromHex("FFFFFFFDFFFFFFFFFFFFFFFFFFFFFFFC"); - BigInteger b = FromHex("E87579C11079F43DD824993C2CEE5ED3"); - byte[] S = Hex.Decode("000E0D4D696E6768756151750CC03A4473D03679"); - BigInteger n = FromHex("FFFFFFFE0000000075A30D1B9038A115"); - BigInteger h = BigInteger.One; - - ECCurve curve = ConfigureCurve(new FpCurve(p, a, b, n, h)); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "161FF7528B899B2D0C28607CA52C5B86" - + "CF5AC8395BAFEB13C02DA292DDED7A83")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * secp128r2 - */ - internal class Secp128r2Holder - : X9ECParametersHolder - { - private Secp128r2Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Secp128r2Holder(); - - protected override X9ECParameters CreateParameters() - { - // p = 2^128 - 2^97 - 1 - BigInteger p = FromHex("FFFFFFFDFFFFFFFFFFFFFFFFFFFFFFFF"); - BigInteger a = FromHex("D6031998D1B3BBFEBF59CC9BBFF9AEE1"); - BigInteger b = FromHex("5EEEFCA380D02919DC2C6558BB6D8A5D"); - byte[] S = Hex.Decode("004D696E67687561517512D8F03431FCE63B88F4"); - BigInteger n = FromHex("3FFFFFFF7FFFFFFFBE0024720613B5A3"); - BigInteger h = BigInteger.ValueOf(4); - - ECCurve curve = ConfigureCurve(new FpCurve(p, a, b, n, h)); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "7B6AA5D85E572983E6FB32A7CDEBC140" - + "27B6916A894D3AEE7106FE805FC34B44")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * secp160k1 - */ - internal class Secp160k1Holder - : X9ECParametersHolder - { - private Secp160k1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Secp160k1Holder(); - - protected override X9ECParameters CreateParameters() - { - // p = 2^160 - 2^32 - 2^14 - 2^12 - 2^9 - 2^8 - 2^7 - 2^3 - 2^2 - 1 - BigInteger p = FromHex("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFAC73"); - BigInteger a = BigInteger.Zero; - BigInteger b = BigInteger.ValueOf(7); - byte[] S = null; - BigInteger n = FromHex("0100000000000000000001B8FA16DFAB9ACA16B6B3"); - BigInteger h = BigInteger.One; - - GlvTypeBParameters glv = new GlvTypeBParameters( - new BigInteger("9ba48cba5ebcb9b6bd33b92830b2a2e0e192f10a", 16), - new BigInteger("c39c6c3b3a36d7701b9c71a1f5804ae5d0003f4", 16), - new BigInteger[]{ - new BigInteger("9162fbe73984472a0a9e", 16), - new BigInteger("-96341f1138933bc2f505", 16) }, - new BigInteger[]{ - new BigInteger("127971af8721782ecffa3", 16), - new BigInteger("9162fbe73984472a0a9e", 16) }, - new BigInteger("9162fbe73984472a0a9d0590", 16), - new BigInteger("96341f1138933bc2f503fd44", 16), - 176); - - ECCurve curve = ConfigureCurveGlv(new FpCurve(p, a, b, n, h), glv); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "3B4C382CE37AA192A4019E763036F4F5DD4D7EBB" - + "938CF935318FDCED6BC28286531733C3F03C4FEE")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * secp160r1 - */ - internal class Secp160r1Holder - : X9ECParametersHolder - { - private Secp160r1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Secp160r1Holder(); - - protected override X9ECParameters CreateParameters() - { - // p = 2^160 - 2^31 - 1 - BigInteger p = FromHex("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF7FFFFFFF"); - BigInteger a = FromHex("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF7FFFFFFC"); - BigInteger b = FromHex("1C97BEFC54BD7A8B65ACF89F81D4D4ADC565FA45"); - byte[] S = Hex.Decode("1053CDE42C14D696E67687561517533BF3F83345"); - BigInteger n = FromHex("0100000000000000000001F4C8F927AED3CA752257"); - BigInteger h = BigInteger.One; - - ECCurve curve = ConfigureCurve(new FpCurve(p, a, b, n, h)); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "4A96B5688EF573284664698968C38BB913CBFC82" - + "23A628553168947D59DCC912042351377AC5FB32")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * secp160r2 - */ - internal class Secp160r2Holder - : X9ECParametersHolder - { - private Secp160r2Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Secp160r2Holder(); - - protected override X9ECParameters CreateParameters() - { - // p = 2^160 - 2^32 - 2^14 - 2^12 - 2^9 - 2^8 - 2^7 - 2^3 - 2^2 - 1 - BigInteger p = FromHex("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFAC73"); - BigInteger a = FromHex("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFAC70"); - BigInteger b = FromHex("B4E134D3FB59EB8BAB57274904664D5AF50388BA"); - byte[] S = Hex.Decode("B99B99B099B323E02709A4D696E6768756151751"); - BigInteger n = FromHex("0100000000000000000000351EE786A818F3A1A16B"); - BigInteger h = BigInteger.One; - - ECCurve curve = ConfigureCurve(new FpCurve(p, a, b, n, h)); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "52DCB034293A117E1F4FF11B30F7199D3144CE6D" - + "FEAFFEF2E331F296E071FA0DF9982CFEA7D43F2E")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * secp192k1 - */ - internal class Secp192k1Holder - : X9ECParametersHolder - { - private Secp192k1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Secp192k1Holder(); - - protected override X9ECParameters CreateParameters() - { - // p = 2^192 - 2^32 - 2^12 - 2^8 - 2^7 - 2^6 - 2^3 - 1 - BigInteger p = FromHex("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFEE37"); - BigInteger a = BigInteger.Zero; - BigInteger b = BigInteger.ValueOf(3); - byte[] S = null; - BigInteger n = FromHex("FFFFFFFFFFFFFFFFFFFFFFFE26F2FC170F69466A74DEFD8D"); - BigInteger h = BigInteger.One; - - GlvTypeBParameters glv = new GlvTypeBParameters( - new BigInteger("bb85691939b869c1d087f601554b96b80cb4f55b35f433c2", 16), - new BigInteger("3d84f26c12238d7b4f3d516613c1759033b1a5800175d0b1", 16), - new BigInteger[]{ - new BigInteger("71169be7330b3038edb025f1", 16), - new BigInteger("-b3fb3400dec5c4adceb8655c", 16) }, - new BigInteger[]{ - new BigInteger("12511cfe811d0f4e6bc688b4d", 16), - new BigInteger("71169be7330b3038edb025f1", 16) }, - new BigInteger("71169be7330b3038edb025f1d0f9", 16), - new BigInteger("b3fb3400dec5c4adceb8655d4c94", 16), - 208); - - ECCurve curve = ConfigureCurveGlv(new FpCurve(p, a, b, n, h), glv); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "DB4FF10EC057E9AE26B07D0280B7F4341DA5D1B1EAE06C7D" - + "9B2F2F6D9C5628A7844163D015BE86344082AA88D95E2F9D")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * secp192r1 - */ - internal class Secp192r1Holder - : X9ECParametersHolder - { - private Secp192r1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Secp192r1Holder(); - - protected override X9ECParameters CreateParameters() - { - // p = 2^192 - 2^64 - 1 - BigInteger p = FromHex("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFFFFFFFFFF"); - BigInteger a = FromHex("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFFFFFFFFFC"); - BigInteger b = FromHex("64210519E59C80E70FA7E9AB72243049FEB8DEECC146B9B1"); - byte[] S = Hex.Decode("3045AE6FC8422F64ED579528D38120EAE12196D5"); - BigInteger n = FromHex("FFFFFFFFFFFFFFFFFFFFFFFF99DEF836146BC9B1B4D22831"); - BigInteger h = BigInteger.One; - - ECCurve curve = ConfigureCurve(new FpCurve(p, a, b, n, h)); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "188DA80EB03090F67CBF20EB43A18800F4FF0AFD82FF1012" - + "07192B95FFC8DA78631011ED6B24CDD573F977A11E794811")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * secp224k1 - */ - internal class Secp224k1Holder - : X9ECParametersHolder - { - private Secp224k1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Secp224k1Holder(); - - protected override X9ECParameters CreateParameters() - { - // p = 2^224 - 2^32 - 2^12 - 2^11 - 2^9 - 2^7 - 2^4 - 2 - 1 - BigInteger p = FromHex("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFE56D"); - BigInteger a = BigInteger.Zero; - BigInteger b = BigInteger.ValueOf(5); - byte[] S = null; - BigInteger n = FromHex("010000000000000000000000000001DCE8D2EC6184CAF0A971769FB1F7"); - BigInteger h = BigInteger.One; - - GlvTypeBParameters glv = new GlvTypeBParameters( - new BigInteger("fe0e87005b4e83761908c5131d552a850b3f58b749c37cf5b84d6768", 16), - new BigInteger("60dcd2104c4cbc0be6eeefc2bdd610739ec34e317f9b33046c9e4788", 16), - new BigInteger[]{ - new BigInteger("6b8cf07d4ca75c88957d9d670591", 16), - new BigInteger("-b8adf1378a6eb73409fa6c9c637d", 16) }, - new BigInteger[]{ - new BigInteger("1243ae1b4d71613bc9f780a03690e", 16), - new BigInteger("6b8cf07d4ca75c88957d9d670591", 16) }, - new BigInteger("6b8cf07d4ca75c88957d9d67059037a4", 16), - new BigInteger("b8adf1378a6eb73409fa6c9c637ba7f5", 16), - 240); - - ECCurve curve = ConfigureCurveGlv(new FpCurve(p, a, b, n, h), glv); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "A1455B334DF099DF30FC28A169A467E9E47075A90F7E650EB6B7A45C" - + "7E089FED7FBA344282CAFBD6F7E319F7C0B0BD59E2CA4BDB556D61A5")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * secp224r1 - */ - internal class Secp224r1Holder - : X9ECParametersHolder - { - private Secp224r1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Secp224r1Holder(); - - protected override X9ECParameters CreateParameters() - { - // p = 2^224 - 2^96 + 1 - BigInteger p = FromHex("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF000000000000000000000001"); - BigInteger a = FromHex("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFFFFFFFFFFFFFFFFFE"); - BigInteger b = FromHex("B4050A850C04B3ABF54132565044B0B7D7BFD8BA270B39432355FFB4"); - byte[] S = Hex.Decode("BD71344799D5C7FCDC45B59FA3B9AB8F6A948BC5"); - BigInteger n = FromHex("FFFFFFFFFFFFFFFFFFFFFFFFFFFF16A2E0B8F03E13DD29455C5C2A3D"); - BigInteger h = BigInteger.One; - - ECCurve curve = ConfigureCurve(new FpCurve(p, a, b, n, h)); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "B70E0CBD6BB4BF7F321390B94A03C1D356C21122343280D6115C1D21" - + "BD376388B5F723FB4C22DFE6CD4375A05A07476444D5819985007E34")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * secp256k1 - */ - internal class Secp256k1Holder - : X9ECParametersHolder - { - private Secp256k1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Secp256k1Holder(); - - protected override X9ECParameters CreateParameters() - { - // p = 2^256 - 2^32 - 2^9 - 2^8 - 2^7 - 2^6 - 2^4 - 1 - BigInteger p = FromHex("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFC2F"); - BigInteger a = BigInteger.Zero; - BigInteger b = BigInteger.ValueOf(7); - byte[] S = null; - BigInteger n = FromHex("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364141"); - BigInteger h = BigInteger.One; - - GlvTypeBParameters glv = new GlvTypeBParameters( - new BigInteger("7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee", 16), - new BigInteger("5363ad4cc05c30e0a5261c028812645a122e22ea20816678df02967c1b23bd72", 16), - new BigInteger[]{ - new BigInteger("3086d221a7d46bcde86c90e49284eb15", 16), - new BigInteger("-e4437ed6010e88286f547fa90abfe4c3", 16) }, - new BigInteger[]{ - new BigInteger("114ca50f7a8e2f3f657c1108d9d44cfd8", 16), - new BigInteger("3086d221a7d46bcde86c90e49284eb15", 16) }, - new BigInteger("3086d221a7d46bcde86c90e49284eb153dab", 16), - new BigInteger("e4437ed6010e88286f547fa90abfe4c42212", 16), - 272); - - ECCurve curve = ConfigureCurveGlv(new FpCurve(p, a, b, n, h), glv); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "79BE667EF9DCBBAC55A06295CE870B07029BFCDB2DCE28D959F2815B16F81798" - + "483ADA7726A3C4655DA4FBFC0E1108A8FD17B448A68554199C47D08FFB10D4B8")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * secp256r1 - */ - internal class Secp256r1Holder - : X9ECParametersHolder - { - private Secp256r1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Secp256r1Holder(); - - protected override X9ECParameters CreateParameters() - { - // p = 2^224 (2^32 - 1) + 2^192 + 2^96 - 1 - BigInteger p = FromHex("FFFFFFFF00000001000000000000000000000000FFFFFFFFFFFFFFFFFFFFFFFF"); - BigInteger a = FromHex("FFFFFFFF00000001000000000000000000000000FFFFFFFFFFFFFFFFFFFFFFFC"); - BigInteger b = FromHex("5AC635D8AA3A93E7B3EBBD55769886BC651D06B0CC53B0F63BCE3C3E27D2604B"); - byte[] S = Hex.Decode("C49D360886E704936A6678E1139D26B7819F7E90"); - BigInteger n = FromHex("FFFFFFFF00000000FFFFFFFFFFFFFFFFBCE6FAADA7179E84F3B9CAC2FC632551"); - BigInteger h = BigInteger.One; - - ECCurve curve = ConfigureCurve(new FpCurve(p, a, b, n, h)); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "6B17D1F2E12C4247F8BCE6E563A440F277037D812DEB33A0F4A13945D898C296" - + "4FE342E2FE1A7F9B8EE7EB4A7C0F9E162BCE33576B315ECECBB6406837BF51F5")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * secp384r1 - */ - internal class Secp384r1Holder - : X9ECParametersHolder - { - private Secp384r1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Secp384r1Holder(); - - protected override X9ECParameters CreateParameters() - { - // p = 2^384 - 2^128 - 2^96 + 2^32 - 1 - BigInteger p = FromHex("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFF0000000000000000FFFFFFFF"); - BigInteger a = FromHex("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFF0000000000000000FFFFFFFC"); - BigInteger b = FromHex("B3312FA7E23EE7E4988E056BE3F82D19181D9C6EFE8141120314088F5013875AC656398D8A2ED19D2A85C8EDD3EC2AEF"); - byte[] S = Hex.Decode("A335926AA319A27A1D00896A6773A4827ACDAC73"); - BigInteger n = FromHex("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFC7634D81F4372DDF581A0DB248B0A77AECEC196ACCC52973"); - BigInteger h = BigInteger.One; - - ECCurve curve = ConfigureCurve(new FpCurve(p, a, b, n, h)); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "AA87CA22BE8B05378EB1C71EF320AD746E1D3B628BA79B9859F741E082542A385502F25DBF55296C3A545E3872760AB7" - + "3617DE4A96262C6F5D9E98BF9292DC29F8F41DBD289A147CE9DA3113B5F0B8C00A60B1CE1D7E819D7A431D7C90EA0E5F")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * secp521r1 - */ - internal class Secp521r1Holder - : X9ECParametersHolder - { - private Secp521r1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Secp521r1Holder(); - - protected override X9ECParameters CreateParameters() - { - // p = 2^521 - 1 - BigInteger p = FromHex("01FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF"); - BigInteger a = FromHex("01FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFC"); - BigInteger b = FromHex("0051953EB9618E1C9A1F929A21A0B68540EEA2DA725B99B315F3B8B489918EF109E156193951EC7E937B1652C0BD3BB1BF073573DF883D2C34F1EF451FD46B503F00"); - byte[] S = Hex.Decode("D09E8800291CB85396CC6717393284AAA0DA64BA"); - BigInteger n = FromHex("01FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFA51868783BF2F966B7FCC0148F709A5D03BB5C9B8899C47AEBB6FB71E91386409"); - BigInteger h = BigInteger.One; - - ECCurve curve = ConfigureCurve(new FpCurve(p, a, b, n, h)); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "00C6858E06B70404E9CD9E3ECB662395B4429C648139053FB521F828AF606B4D3DBAA14B5E77EFE75928FE1DC127A2FFA8DE3348B3C1856A429BF97E7E31C2E5BD66" - + "011839296A789A3BC0045C8A5FB42C7D1BD998F54449579B446817AFBD17273E662C97EE72995EF42640C550B9013FAD0761353C7086A272C24088BE94769FD16650")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * sect113r1 - */ - internal class Sect113r1Holder - : X9ECParametersHolder - { - private Sect113r1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Sect113r1Holder(); - - private const int m = 113; - private const int k = 9; - - protected override X9ECParameters CreateParameters() - { - BigInteger a = FromHex("003088250CA6E7C7FE649CE85820F7"); - BigInteger b = FromHex("00E8BEE4D3E2260744188BE0E9C723"); - byte[] S = Hex.Decode("10E723AB14D696E6768756151756FEBF8FCB49A9"); - BigInteger n = FromHex("0100000000000000D9CCEC8A39E56F"); - BigInteger h = BigInteger.ValueOf(2); - - ECCurve curve = new F2mCurve(m, k, a, b, n, h); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "009D73616F35F4AB1407D73562C10F" - + "00A52830277958EE84D1315ED31886")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * sect113r2 - */ - internal class Sect113r2Holder - : X9ECParametersHolder - { - private Sect113r2Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Sect113r2Holder(); - - private const int m = 113; - private const int k = 9; - - protected override X9ECParameters CreateParameters() - { - BigInteger a = FromHex("00689918DBEC7E5A0DD6DFC0AA55C7"); - BigInteger b = FromHex("0095E9A9EC9B297BD4BF36E059184F"); - byte[] S = Hex.Decode("10C0FB15760860DEF1EEF4D696E676875615175D"); - BigInteger n = FromHex("010000000000000108789B2496AF93"); - BigInteger h = BigInteger.ValueOf(2); - - ECCurve curve = new F2mCurve(m, k, a, b, n, h); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "01A57A6A7B26CA5EF52FCDB8164797" - + "00B3ADC94ED1FE674C06E695BABA1D")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * sect131r1 - */ - internal class Sect131r1Holder - : X9ECParametersHolder - { - private Sect131r1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Sect131r1Holder(); - - private const int m = 131; - private const int k1 = 2; - private const int k2 = 3; - private const int k3 = 8; - - protected override X9ECParameters CreateParameters() - { - BigInteger a = FromHex("07A11B09A76B562144418FF3FF8C2570B8"); - BigInteger b = FromHex("0217C05610884B63B9C6C7291678F9D341"); - byte[] S = Hex.Decode("4D696E676875615175985BD3ADBADA21B43A97E2"); - BigInteger n = FromHex("0400000000000000023123953A9464B54D"); - BigInteger h = BigInteger.ValueOf(2); - - ECCurve curve = new F2mCurve(m, k1, k2, k3, a, b, n, h); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "0081BAF91FDF9833C40F9C181343638399" - + "078C6E7EA38C001F73C8134B1B4EF9E150")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * sect131r2 - */ - internal class Sect131r2Holder - : X9ECParametersHolder - { - private Sect131r2Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Sect131r2Holder(); - - private const int m = 131; - private const int k1 = 2; - private const int k2 = 3; - private const int k3 = 8; - - protected override X9ECParameters CreateParameters() - { - BigInteger a = FromHex("03E5A88919D7CAFCBF415F07C2176573B2"); - BigInteger b = FromHex("04B8266A46C55657AC734CE38F018F2192"); - byte[] S = Hex.Decode("985BD3ADBAD4D696E676875615175A21B43A97E3"); - BigInteger n = FromHex("0400000000000000016954A233049BA98F"); - BigInteger h = BigInteger.ValueOf(2); - - ECCurve curve = new F2mCurve(m, k1, k2, k3, a, b, n, h); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "0356DCD8F2F95031AD652D23951BB366A8" - + "0648F06D867940A5366D9E265DE9EB240F")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * sect163k1 - */ - internal class Sect163k1Holder - : X9ECParametersHolder - { - private Sect163k1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Sect163k1Holder(); - - private const int m = 163; - private const int k1 = 3; - private const int k2 = 6; - private const int k3 = 7; - - protected override X9ECParameters CreateParameters() - { - BigInteger a = BigInteger.One; - BigInteger b = BigInteger.One; - byte[] S = null; - BigInteger n = FromHex("04000000000000000000020108A2E0CC0D99F8A5EF"); - BigInteger h = BigInteger.ValueOf(2); - - ECCurve curve = new F2mCurve(m, k1, k2, k3, a, b, n, h); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "02FE13C0537BBC11ACAA07D793DE4E6D5E5C94EEE8" - + "0289070FB05D38FF58321F2E800536D538CCDAA3D9")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * sect163r1 - */ - internal class Sect163r1Holder - : X9ECParametersHolder - { - private Sect163r1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Sect163r1Holder(); - - private const int m = 163; - private const int k1 = 3; - private const int k2 = 6; - private const int k3 = 7; - - protected override X9ECParameters CreateParameters() - { - BigInteger a = FromHex("07B6882CAAEFA84F9554FF8428BD88E246D2782AE2"); - BigInteger b = FromHex("0713612DCDDCB40AAB946BDA29CA91F73AF958AFD9"); - byte[] S = Hex.Decode("24B7B137C8A14D696E6768756151756FD0DA2E5C"); - BigInteger n = FromHex("03FFFFFFFFFFFFFFFFFFFF48AAB689C29CA710279B"); - BigInteger h = BigInteger.ValueOf(2); - - ECCurve curve = new F2mCurve(m, k1, k2, k3, a, b, n, h); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "0369979697AB43897789566789567F787A7876A654" - + "00435EDB42EFAFB2989D51FEFCE3C80988F41FF883")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * sect163r2 - */ - internal class Sect163r2Holder - : X9ECParametersHolder - { - private Sect163r2Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Sect163r2Holder(); - - private const int m = 163; - private const int k1 = 3; - private const int k2 = 6; - private const int k3 = 7; - - protected override X9ECParameters CreateParameters() - { - BigInteger a = BigInteger.One; - BigInteger b = FromHex("020A601907B8C953CA1481EB10512F78744A3205FD"); - byte[] S = Hex.Decode("85E25BFE5C86226CDB12016F7553F9D0E693A268"); - BigInteger n = FromHex("040000000000000000000292FE77E70C12A4234C33"); - BigInteger h = BigInteger.ValueOf(2); - - ECCurve curve = new F2mCurve(m, k1, k2, k3, a, b, n, h); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "03F0EBA16286A2D57EA0991168D4994637E8343E36" - + "00D51FBC6C71A0094FA2CDD545B11C5C0C797324F1")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * sect193r1 - */ - internal class Sect193r1Holder - : X9ECParametersHolder - { - private Sect193r1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Sect193r1Holder(); - - private const int m = 193; - private const int k = 15; - - protected override X9ECParameters CreateParameters() - { - BigInteger a = FromHex("0017858FEB7A98975169E171F77B4087DE098AC8A911DF7B01"); - BigInteger b = FromHex("00FDFB49BFE6C3A89FACADAA7A1E5BBC7CC1C2E5D831478814"); - byte[] S = Hex.Decode("103FAEC74D696E676875615175777FC5B191EF30"); - BigInteger n = FromHex("01000000000000000000000000C7F34A778F443ACC920EBA49"); - BigInteger h = BigInteger.ValueOf(2); - - ECCurve curve = new F2mCurve(m, k, a, b, n, h); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "01F481BC5F0FF84A74AD6CDF6FDEF4BF6179625372D8C0C5E1" - + "0025E399F2903712CCF3EA9E3A1AD17FB0B3201B6AF7CE1B05")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * sect193r2 - */ - internal class Sect193r2Holder - : X9ECParametersHolder - { - private Sect193r2Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Sect193r2Holder(); - - private const int m = 193; - private const int k = 15; - - protected override X9ECParameters CreateParameters() - { - BigInteger a = FromHex("0163F35A5137C2CE3EA6ED8667190B0BC43ECD69977702709B"); - BigInteger b = FromHex("00C9BB9E8927D4D64C377E2AB2856A5B16E3EFB7F61D4316AE"); - byte[] S = Hex.Decode("10B7B4D696E676875615175137C8A16FD0DA2211"); - BigInteger n = FromHex("010000000000000000000000015AAB561B005413CCD4EE99D5"); - BigInteger h = BigInteger.ValueOf(2); - - ECCurve curve = new F2mCurve(m, k, a, b, n, h); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "00D9B67D192E0367C803F39E1A7E82CA14A651350AAE617E8F" - + "01CE94335607C304AC29E7DEFBD9CA01F596F927224CDECF6C")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * sect233k1 - */ - internal class Sect233k1Holder - : X9ECParametersHolder - { - private Sect233k1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Sect233k1Holder(); - - private const int m = 233; - private const int k = 74; - - protected override X9ECParameters CreateParameters() - { - BigInteger a = BigInteger.Zero; - BigInteger b = BigInteger.One; - byte[] S = null; - BigInteger n = FromHex("8000000000000000000000000000069D5BB915BCD46EFB1AD5F173ABDF"); - BigInteger h = BigInteger.ValueOf(4); - - ECCurve curve = new F2mCurve(m, k, a, b, n, h); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "017232BA853A7E731AF129F22FF4149563A419C26BF50A4C9D6EEFAD6126" - + "01DB537DECE819B7F70F555A67C427A8CD9BF18AEB9B56E0C11056FAE6A3")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * sect233r1 - */ - internal class Sect233r1Holder - : X9ECParametersHolder - { - private Sect233r1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Sect233r1Holder(); - - private const int m = 233; - private const int k = 74; - - protected override X9ECParameters CreateParameters() - { - BigInteger a = BigInteger.One; - BigInteger b = FromHex("0066647EDE6C332C7F8C0923BB58213B333B20E9CE4281FE115F7D8F90AD"); - byte[] S = Hex.Decode("74D59FF07F6B413D0EA14B344B20A2DB049B50C3"); - BigInteger n = FromHex("01000000000000000000000000000013E974E72F8A6922031D2603CFE0D7"); - BigInteger h = BigInteger.ValueOf(2); - - ECCurve curve = new F2mCurve(m, k, a, b, n, h); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "00FAC9DFCBAC8313BB2139F1BB755FEF65BC391F8B36F8F8EB7371FD558B" - + "01006A08A41903350678E58528BEBF8A0BEFF867A7CA36716F7E01F81052")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * sect239k1 - */ - internal class Sect239k1Holder - : X9ECParametersHolder - { - private Sect239k1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Sect239k1Holder(); - - private const int m = 239; - private const int k = 158; - - protected override X9ECParameters CreateParameters() - { - BigInteger a = BigInteger.Zero; - BigInteger b = BigInteger.One; - byte[] S = null; - BigInteger n = FromHex("2000000000000000000000000000005A79FEC67CB6E91F1C1DA800E478A5"); - BigInteger h = BigInteger.ValueOf(4); - - ECCurve curve = new F2mCurve(m, k, a, b, n, h); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "29A0B6A887A983E9730988A68727A8B2D126C44CC2CC7B2A6555193035DC" - + "76310804F12E549BDB011C103089E73510ACB275FC312A5DC6B76553F0CA")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * sect283k1 - */ - internal class Sect283k1Holder - : X9ECParametersHolder - { - private Sect283k1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Sect283k1Holder(); - - private const int m = 283; - private const int k1 = 5; - private const int k2 = 7; - private const int k3 = 12; - - protected override X9ECParameters CreateParameters() - { - BigInteger a = BigInteger.Zero; - BigInteger b = BigInteger.One; - byte[] S = null; - BigInteger n = FromHex("01FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFE9AE2ED07577265DFF7F94451E061E163C61"); - BigInteger h = BigInteger.ValueOf(4); - - ECCurve curve = new F2mCurve(m, k1, k2, k3, a, b, n, h); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "0503213F78CA44883F1A3B8162F188E553CD265F23C1567A16876913B0C2AC2458492836" - + "01CCDA380F1C9E318D90F95D07E5426FE87E45C0E8184698E45962364E34116177DD2259")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * sect283r1 - */ - internal class Sect283r1Holder - : X9ECParametersHolder - { - private Sect283r1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Sect283r1Holder(); - - private const int m = 283; - private const int k1 = 5; - private const int k2 = 7; - private const int k3 = 12; - - protected override X9ECParameters CreateParameters() - { - BigInteger a = BigInteger.One; - BigInteger b = FromHex("027B680AC8B8596DA5A4AF8A19A0303FCA97FD7645309FA2A581485AF6263E313B79A2F5"); - byte[] S = Hex.Decode("77E2B07370EB0F832A6DD5B62DFC88CD06BB84BE"); - BigInteger n = FromHex("03FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEF90399660FC938A90165B042A7CEFADB307"); - BigInteger h = BigInteger.ValueOf(2); - - ECCurve curve = new F2mCurve(m, k1, k2, k3, a, b, n, h); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "05F939258DB7DD90E1934F8C70B0DFEC2EED25B8557EAC9C80E2E198F8CDBECD86B12053" - + "03676854FE24141CB98FE6D4B20D02B4516FF702350EDDB0826779C813F0DF45BE8112F4")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * sect409k1 - */ - internal class Sect409k1Holder - : X9ECParametersHolder - { - private Sect409k1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Sect409k1Holder(); - - private const int m = 409; - private const int k = 87; - - protected override X9ECParameters CreateParameters() - { - BigInteger a = BigInteger.Zero; - BigInteger b = BigInteger.One; - byte[] S = null; - BigInteger n = FromHex("7FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFE5F83B2D4EA20400EC4557D5ED3E3E7CA5B4B5C83B8E01E5FCF"); - BigInteger h = BigInteger.ValueOf(4); - - ECCurve curve = new F2mCurve(m, k, a, b, n, h); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "0060F05F658F49C1AD3AB1890F7184210EFD0987E307C84C27ACCFB8F9F67CC2C460189EB5AAAA62EE222EB1B35540CFE9023746" - + "01E369050B7C4E42ACBA1DACBF04299C3460782F918EA427E6325165E9EA10E3DA5F6C42E9C55215AA9CA27A5863EC48D8E0286B")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * sect409r1 - */ - internal class Sect409r1Holder - : X9ECParametersHolder - { - private Sect409r1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Sect409r1Holder(); - - private const int m = 409; - private const int k = 87; - - protected override X9ECParameters CreateParameters() - { - BigInteger a = BigInteger.One; - BigInteger b = FromHex("0021A5C2C8EE9FEB5C4B9A753B7B476B7FD6422EF1F3DD674761FA99D6AC27C8A9A197B272822F6CD57A55AA4F50AE317B13545F"); - byte[] S = Hex.Decode("4099B5A457F9D69F79213D094C4BCD4D4262210B"); - BigInteger n = FromHex("010000000000000000000000000000000000000000000000000001E2AAD6A612F33307BE5FA47C3C9E052F838164CD37D9A21173"); - BigInteger h = BigInteger.ValueOf(2); - - ECCurve curve = new F2mCurve(m, k, a, b, n, h); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "015D4860D088DDB3496B0C6064756260441CDE4AF1771D4DB01FFE5B34E59703DC255A868A1180515603AEAB60794E54BB7996A7" - + "0061B1CFAB6BE5F32BBFA78324ED106A7636B9C5A7BD198D0158AA4F5488D08F38514F1FDF4B4F40D2181B3681C364BA0273C706")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * sect571k1 - */ - internal class Sect571k1Holder - : X9ECParametersHolder - { - private Sect571k1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Sect571k1Holder(); - - private const int m = 571; - private const int k1 = 2; - private const int k2 = 5; - private const int k3 = 10; - - protected override X9ECParameters CreateParameters() - { - BigInteger a = BigInteger.Zero; - BigInteger b = BigInteger.One; - byte[] S = null; - BigInteger n = FromHex("020000000000000000000000000000000000000000000000000000000000000000000000131850E1F19A63E4B391A8DB917F4138B630D84BE5D639381E91DEB45CFE778F637C1001"); - BigInteger h = BigInteger.ValueOf(4); - - ECCurve curve = new F2mCurve(m, k1, k2, k3, a, b, n, h); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "026EB7A859923FBC82189631F8103FE4AC9CA2970012D5D46024804801841CA44370958493B205E647DA304DB4CEB08CBBD1BA39494776FB988B47174DCA88C7E2945283A01C8972" - + "0349DC807F4FBF374F4AEADE3BCA95314DD58CEC9F307A54FFC61EFC006D8A2C9D4979C0AC44AEA74FBEBBB9F772AEDCB620B01A7BA7AF1B320430C8591984F601CD4C143EF1C7A3")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - /* - * sect571r1 - */ - internal class Sect571r1Holder - : X9ECParametersHolder - { - private Sect571r1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Sect571r1Holder(); - - private const int m = 571; - private const int k1 = 2; - private const int k2 = 5; - private const int k3 = 10; - - protected override X9ECParameters CreateParameters() - { - BigInteger a = BigInteger.One; - BigInteger b = FromHex("02F40E7E2221F295DE297117B7F3D62F5C6A97FFCB8CEFF1CD6BA8CE4A9A18AD84FFABBD8EFA59332BE7AD6756A66E294AFD185A78FF12AA520E4DE739BACA0C7FFEFF7F2955727A"); - byte[] S = Hex.Decode("2AA058F73A0E33AB486B0F610410C53A7F132310"); - BigInteger n = FromHex("03FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFE661CE18FF55987308059B186823851EC7DD9CA1161DE93D5174D66E8382E9BB2FE84E47"); - BigInteger h = BigInteger.ValueOf(2); - - ECCurve curve = new F2mCurve(m, k1, k2, k3, a, b, n, h); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "0303001D34B856296C16C0D40D3CD7750A93D1D2955FA80AA5F40FC8DB7B2ABDBDE53950F4C0D293CDD711A35B67FB1499AE60038614F1394ABFA3B4C850D927E1E7769C8EEC2D19" - + "037BF27342DA639B6DCCFFFEB73D69D78C6C27A6009CBBCA1980F8533921E8A684423E43BAB08A576291AF8F461BB2A8B3531D2F0485C19B16E2F1516E23DD3C1A4827AF1B8AC15B")); - - return new X9ECParameters(curve, G, n, h, S); - } - } - - - private static readonly IDictionary objIds = Platform.CreateHashtable(); - private static readonly IDictionary curves = Platform.CreateHashtable(); - private static readonly IDictionary names = Platform.CreateHashtable(); - - private static void DefineCurve( - string name, - DerObjectIdentifier oid, - X9ECParametersHolder holder) - { - objIds.Add(Platform.ToUpperInvariant(name), oid); - names.Add(oid, name); - curves.Add(oid, holder); - } - - static SecNamedCurves() - { - DefineCurve("secp112r1", SecObjectIdentifiers.SecP112r1, Secp112r1Holder.Instance); - DefineCurve("secp112r2", SecObjectIdentifiers.SecP112r2, Secp112r2Holder.Instance); - DefineCurve("secp128r1", SecObjectIdentifiers.SecP128r1, Secp128r1Holder.Instance); - DefineCurve("secp128r2", SecObjectIdentifiers.SecP128r2, Secp128r2Holder.Instance); - DefineCurve("secp160k1", SecObjectIdentifiers.SecP160k1, Secp160k1Holder.Instance); - DefineCurve("secp160r1", SecObjectIdentifiers.SecP160r1, Secp160r1Holder.Instance); - DefineCurve("secp160r2", SecObjectIdentifiers.SecP160r2, Secp160r2Holder.Instance); - DefineCurve("secp192k1", SecObjectIdentifiers.SecP192k1, Secp192k1Holder.Instance); - DefineCurve("secp192r1", SecObjectIdentifiers.SecP192r1, Secp192r1Holder.Instance); - DefineCurve("secp224k1", SecObjectIdentifiers.SecP224k1, Secp224k1Holder.Instance); - DefineCurve("secp224r1", SecObjectIdentifiers.SecP224r1, Secp224r1Holder.Instance); - DefineCurve("secp256k1", SecObjectIdentifiers.SecP256k1, Secp256k1Holder.Instance); - DefineCurve("secp256r1", SecObjectIdentifiers.SecP256r1, Secp256r1Holder.Instance); - DefineCurve("secp384r1", SecObjectIdentifiers.SecP384r1, Secp384r1Holder.Instance); - DefineCurve("secp521r1", SecObjectIdentifiers.SecP521r1, Secp521r1Holder.Instance); - - DefineCurve("sect113r1", SecObjectIdentifiers.SecT113r1, Sect113r1Holder.Instance); - DefineCurve("sect113r2", SecObjectIdentifiers.SecT113r2, Sect113r2Holder.Instance); - DefineCurve("sect131r1", SecObjectIdentifiers.SecT131r1, Sect131r1Holder.Instance); - DefineCurve("sect131r2", SecObjectIdentifiers.SecT131r2, Sect131r2Holder.Instance); - DefineCurve("sect163k1", SecObjectIdentifiers.SecT163k1, Sect163k1Holder.Instance); - DefineCurve("sect163r1", SecObjectIdentifiers.SecT163r1, Sect163r1Holder.Instance); - DefineCurve("sect163r2", SecObjectIdentifiers.SecT163r2, Sect163r2Holder.Instance); - DefineCurve("sect193r1", SecObjectIdentifiers.SecT193r1, Sect193r1Holder.Instance); - DefineCurve("sect193r2", SecObjectIdentifiers.SecT193r2, Sect193r2Holder.Instance); - DefineCurve("sect233k1", SecObjectIdentifiers.SecT233k1, Sect233k1Holder.Instance); - DefineCurve("sect233r1", SecObjectIdentifiers.SecT233r1, Sect233r1Holder.Instance); - DefineCurve("sect239k1", SecObjectIdentifiers.SecT239k1, Sect239k1Holder.Instance); - DefineCurve("sect283k1", SecObjectIdentifiers.SecT283k1, Sect283k1Holder.Instance); - DefineCurve("sect283r1", SecObjectIdentifiers.SecT283r1, Sect283r1Holder.Instance); - DefineCurve("sect409k1", SecObjectIdentifiers.SecT409k1, Sect409k1Holder.Instance); - DefineCurve("sect409r1", SecObjectIdentifiers.SecT409r1, Sect409r1Holder.Instance); - DefineCurve("sect571k1", SecObjectIdentifiers.SecT571k1, Sect571k1Holder.Instance); - DefineCurve("sect571r1", SecObjectIdentifiers.SecT571r1, Sect571r1Holder.Instance); - } - - public static X9ECParameters GetByName( - string name) - { - DerObjectIdentifier oid = GetOid(name); - return oid == null ? null : GetByOid(oid); - } - - /** - * return the X9ECParameters object for the named curve represented by - * the passed in object identifier. Null if the curve isn't present. - * - * @param oid an object identifier representing a named curve, if present. - */ - public static X9ECParameters GetByOid( - DerObjectIdentifier oid) - { - X9ECParametersHolder holder = (X9ECParametersHolder)curves[oid]; - return holder == null ? null : holder.Parameters; - } - - /** - * return the object identifier signified by the passed in name. Null - * if there is no object identifier associated with name. - * - * @return the object identifier associated with name, if present. - */ - public static DerObjectIdentifier GetOid( - string name) - { - return (DerObjectIdentifier)objIds[Platform.ToUpperInvariant(name)]; - } - - /** - * return the named curve name represented by the given object identifier. - */ - public static string GetName( - DerObjectIdentifier oid) - { - return (string)names[oid]; - } - - /** - * returns an enumeration containing the name strings for curves - * contained in this structure. - */ - public static IEnumerable Names - { - get { return new EnumerableProxy(names.Values); } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/sec/SECObjectIdentifiers.cs b/bc-sharp-crypto/src/asn1/sec/SECObjectIdentifiers.cs deleted file mode 100644 index afc10e1..0000000 --- a/bc-sharp-crypto/src/asn1/sec/SECObjectIdentifiers.cs +++ /dev/null @@ -1,52 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X9; - -namespace Org.BouncyCastle.Asn1.Sec -{ - public abstract class SecObjectIdentifiers - { - /** - * EllipticCurve OBJECT IDENTIFIER ::= { - * iso(1) identified-organization(3) certicom(132) curve(0) - * } - */ - public static readonly DerObjectIdentifier EllipticCurve = new DerObjectIdentifier("1.3.132.0"); - - public static readonly DerObjectIdentifier SecT163k1 = new DerObjectIdentifier(EllipticCurve + ".1"); - public static readonly DerObjectIdentifier SecT163r1 = new DerObjectIdentifier(EllipticCurve + ".2"); - public static readonly DerObjectIdentifier SecT239k1 = new DerObjectIdentifier(EllipticCurve + ".3"); - public static readonly DerObjectIdentifier SecT113r1 = new DerObjectIdentifier(EllipticCurve + ".4"); - public static readonly DerObjectIdentifier SecT113r2 = new DerObjectIdentifier(EllipticCurve + ".5"); - public static readonly DerObjectIdentifier SecP112r1 = new DerObjectIdentifier(EllipticCurve + ".6"); - public static readonly DerObjectIdentifier SecP112r2 = new DerObjectIdentifier(EllipticCurve + ".7"); - public static readonly DerObjectIdentifier SecP160r1 = new DerObjectIdentifier(EllipticCurve + ".8"); - public static readonly DerObjectIdentifier SecP160k1 = new DerObjectIdentifier(EllipticCurve + ".9"); - public static readonly DerObjectIdentifier SecP256k1 = new DerObjectIdentifier(EllipticCurve + ".10"); - public static readonly DerObjectIdentifier SecT163r2 = new DerObjectIdentifier(EllipticCurve + ".15"); - public static readonly DerObjectIdentifier SecT283k1 = new DerObjectIdentifier(EllipticCurve + ".16"); - public static readonly DerObjectIdentifier SecT283r1 = new DerObjectIdentifier(EllipticCurve + ".17"); - public static readonly DerObjectIdentifier SecT131r1 = new DerObjectIdentifier(EllipticCurve + ".22"); - public static readonly DerObjectIdentifier SecT131r2 = new DerObjectIdentifier(EllipticCurve + ".23"); - public static readonly DerObjectIdentifier SecT193r1 = new DerObjectIdentifier(EllipticCurve + ".24"); - public static readonly DerObjectIdentifier SecT193r2 = new DerObjectIdentifier(EllipticCurve + ".25"); - public static readonly DerObjectIdentifier SecT233k1 = new DerObjectIdentifier(EllipticCurve + ".26"); - public static readonly DerObjectIdentifier SecT233r1 = new DerObjectIdentifier(EllipticCurve + ".27"); - public static readonly DerObjectIdentifier SecP128r1 = new DerObjectIdentifier(EllipticCurve + ".28"); - public static readonly DerObjectIdentifier SecP128r2 = new DerObjectIdentifier(EllipticCurve + ".29"); - public static readonly DerObjectIdentifier SecP160r2 = new DerObjectIdentifier(EllipticCurve + ".30"); - public static readonly DerObjectIdentifier SecP192k1 = new DerObjectIdentifier(EllipticCurve + ".31"); - public static readonly DerObjectIdentifier SecP224k1 = new DerObjectIdentifier(EllipticCurve + ".32"); - public static readonly DerObjectIdentifier SecP224r1 = new DerObjectIdentifier(EllipticCurve + ".33"); - public static readonly DerObjectIdentifier SecP384r1 = new DerObjectIdentifier(EllipticCurve + ".34"); - public static readonly DerObjectIdentifier SecP521r1 = new DerObjectIdentifier(EllipticCurve + ".35"); - public static readonly DerObjectIdentifier SecT409k1 = new DerObjectIdentifier(EllipticCurve + ".36"); - public static readonly DerObjectIdentifier SecT409r1 = new DerObjectIdentifier(EllipticCurve + ".37"); - public static readonly DerObjectIdentifier SecT571k1 = new DerObjectIdentifier(EllipticCurve + ".38"); - public static readonly DerObjectIdentifier SecT571r1 = new DerObjectIdentifier(EllipticCurve + ".39"); - - public static readonly DerObjectIdentifier SecP192r1 = X9ObjectIdentifiers.Prime192v1; - public static readonly DerObjectIdentifier SecP256r1 = X9ObjectIdentifiers.Prime256v1; - } -} \ No newline at end of file diff --git a/bc-sharp-crypto/src/asn1/smime/SMIMEAttributes.cs b/bc-sharp-crypto/src/asn1/smime/SMIMEAttributes.cs deleted file mode 100644 index e154e5e..0000000 --- a/bc-sharp-crypto/src/asn1/smime/SMIMEAttributes.cs +++ /dev/null @@ -1,11 +0,0 @@ -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Pkcs; - -namespace Org.BouncyCastle.Asn1.Smime -{ - public abstract class SmimeAttributes - { - public static readonly DerObjectIdentifier SmimeCapabilities = PkcsObjectIdentifiers.Pkcs9AtSmimeCapabilities; - public static readonly DerObjectIdentifier EncrypKeyPref = PkcsObjectIdentifiers.IdAAEncrypKeyPref; - } -} diff --git a/bc-sharp-crypto/src/asn1/smime/SMIMECapabilities.cs b/bc-sharp-crypto/src/asn1/smime/SMIMECapabilities.cs deleted file mode 100644 index 5bf48f3..0000000 --- a/bc-sharp-crypto/src/asn1/smime/SMIMECapabilities.cs +++ /dev/null @@ -1,134 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.X509; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Smime -{ - /** - * Handler class for dealing with S/MIME Capabilities - */ - public class SmimeCapabilities - : Asn1Encodable - { - /** - * general preferences - */ - public static readonly DerObjectIdentifier PreferSignedData = PkcsObjectIdentifiers.PreferSignedData; - public static readonly DerObjectIdentifier CannotDecryptAny = PkcsObjectIdentifiers.CannotDecryptAny; - public static readonly DerObjectIdentifier SmimeCapabilitesVersions = PkcsObjectIdentifiers.SmimeCapabilitiesVersions; - - /** - * encryption algorithms preferences - */ - public static readonly DerObjectIdentifier Aes256Cbc = NistObjectIdentifiers.IdAes256Cbc; - public static readonly DerObjectIdentifier Aes192Cbc = NistObjectIdentifiers.IdAes192Cbc; - public static readonly DerObjectIdentifier Aes128Cbc = NistObjectIdentifiers.IdAes128Cbc; - public static readonly DerObjectIdentifier IdeaCbc = new DerObjectIdentifier("1.3.6.1.4.1.188.7.1.1.2"); - public static readonly DerObjectIdentifier Cast5Cbc = new DerObjectIdentifier("1.2.840.113533.7.66.10"); - public static readonly DerObjectIdentifier DesCbc = new DerObjectIdentifier("1.3.14.3.2.7"); - public static readonly DerObjectIdentifier DesEde3Cbc = PkcsObjectIdentifiers.DesEde3Cbc; - public static readonly DerObjectIdentifier RC2Cbc = PkcsObjectIdentifiers.RC2Cbc; - - private Asn1Sequence capabilities; - - /** - * return an Attr object from the given object. - * - * @param o the object we want converted. - * @exception ArgumentException if the object cannot be converted. - */ - public static SmimeCapabilities GetInstance( - object obj) - { - if (obj == null || obj is SmimeCapabilities) - { - return (SmimeCapabilities) obj; - } - - if (obj is Asn1Sequence) - { - return new SmimeCapabilities((Asn1Sequence) obj); - } - - if (obj is AttributeX509) - { - return new SmimeCapabilities( - (Asn1Sequence)(((AttributeX509) obj).AttrValues[0])); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public SmimeCapabilities( - Asn1Sequence seq) - { - capabilities = seq; - } - -#if !(SILVERLIGHT || PORTABLE) - [Obsolete("Use 'GetCapabilitiesForOid' instead")] - public ArrayList GetCapabilities( - DerObjectIdentifier capability) - { - ArrayList list = new ArrayList(); - DoGetCapabilitiesForOid(capability, list); - return list; - } -#endif - - /** - * returns an ArrayList with 0 or more objects of all the capabilities - * matching the passed in capability Oid. If the Oid passed is null the - * entire set is returned. - */ - public IList GetCapabilitiesForOid( - DerObjectIdentifier capability) - { - IList list = Platform.CreateArrayList(); - DoGetCapabilitiesForOid(capability, list); - return list; - } - - private void DoGetCapabilitiesForOid(DerObjectIdentifier capability, IList list) - { - if (capability == null) - { - foreach (object o in capabilities) - { - SmimeCapability cap = SmimeCapability.GetInstance(o); - - list.Add(cap); - } - } - else - { - foreach (object o in capabilities) - { - SmimeCapability cap = SmimeCapability.GetInstance(o); - - if (capability.Equals(cap.CapabilityID)) - { - list.Add(cap); - } - } - } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * SMIMECapabilities ::= Sequence OF SMIMECapability
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return capabilities; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/smime/SMIMECapabilitiesAttribute.cs b/bc-sharp-crypto/src/asn1/smime/SMIMECapabilitiesAttribute.cs deleted file mode 100644 index 310c478..0000000 --- a/bc-sharp-crypto/src/asn1/smime/SMIMECapabilitiesAttribute.cs +++ /dev/null @@ -1,16 +0,0 @@ -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; - -namespace Org.BouncyCastle.Asn1.Smime -{ - public class SmimeCapabilitiesAttribute - : AttributeX509 - { - public SmimeCapabilitiesAttribute( - SmimeCapabilityVector capabilities) - : base(SmimeAttributes.SmimeCapabilities, - new DerSet(new DerSequence(capabilities.ToAsn1EncodableVector()))) - { - } - } -} diff --git a/bc-sharp-crypto/src/asn1/smime/SMIMECapability.cs b/bc-sharp-crypto/src/asn1/smime/SMIMECapability.cs deleted file mode 100644 index 5709cb8..0000000 --- a/bc-sharp-crypto/src/asn1/smime/SMIMECapability.cs +++ /dev/null @@ -1,101 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Pkcs; - -namespace Org.BouncyCastle.Asn1.Smime -{ - public class SmimeCapability - : Asn1Encodable - { - /** - * general preferences - */ - public static readonly DerObjectIdentifier PreferSignedData = PkcsObjectIdentifiers.PreferSignedData; - public static readonly DerObjectIdentifier CannotDecryptAny = PkcsObjectIdentifiers.CannotDecryptAny; - public static readonly DerObjectIdentifier SmimeCapabilitiesVersions = PkcsObjectIdentifiers.SmimeCapabilitiesVersions; - - /** - * encryption algorithms preferences - */ - public static readonly DerObjectIdentifier DesCbc = new DerObjectIdentifier("1.3.14.3.2.7"); - public static readonly DerObjectIdentifier DesEde3Cbc = PkcsObjectIdentifiers.DesEde3Cbc; - public static readonly DerObjectIdentifier RC2Cbc = PkcsObjectIdentifiers.RC2Cbc; - - private DerObjectIdentifier capabilityID; - private Asn1Object parameters; - - public SmimeCapability( - Asn1Sequence seq) - { - capabilityID = (DerObjectIdentifier) seq[0].ToAsn1Object(); - - if (seq.Count > 1) - { - parameters = seq[1].ToAsn1Object(); - } - } - - public SmimeCapability( - DerObjectIdentifier capabilityID, - Asn1Encodable parameters) - { - if (capabilityID == null) - throw new ArgumentNullException("capabilityID"); - - this.capabilityID = capabilityID; - - if (parameters != null) - { - this.parameters = parameters.ToAsn1Object(); - } - } - - public static SmimeCapability GetInstance( - object obj) - { - if (obj == null || obj is SmimeCapability) - { - return (SmimeCapability) obj; - } - - if (obj is Asn1Sequence) - { - return new SmimeCapability((Asn1Sequence) obj); - } - - throw new ArgumentException("Invalid SmimeCapability"); - } - - public DerObjectIdentifier CapabilityID - { - get { return capabilityID; } - } - - public Asn1Object Parameters - { - get { return parameters; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * SMIMECapability ::= Sequence {
-         *     capabilityID OBJECT IDENTIFIER,
-         *     parameters ANY DEFINED BY capabilityID OPTIONAL
-         * }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(capabilityID); - - if (parameters != null) - { - v.Add(parameters); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/smime/SMIMECapabilityVector.cs b/bc-sharp-crypto/src/asn1/smime/SMIMECapabilityVector.cs deleted file mode 100644 index 842825b..0000000 --- a/bc-sharp-crypto/src/asn1/smime/SMIMECapabilityVector.cs +++ /dev/null @@ -1,37 +0,0 @@ -using Org.BouncyCastle.Asn1; - -namespace Org.BouncyCastle.Asn1.Smime -{ - /** - * Handler for creating a vector S/MIME Capabilities - */ - public class SmimeCapabilityVector - { - private readonly Asn1EncodableVector capabilities = new Asn1EncodableVector(); - - public void AddCapability( - DerObjectIdentifier capability) - { - capabilities.Add(new DerSequence(capability)); - } - - public void AddCapability( - DerObjectIdentifier capability, - int value) - { - capabilities.Add(new DerSequence(capability, new DerInteger(value))); - } - - public void AddCapability( - DerObjectIdentifier capability, - Asn1Encodable parameters) - { - capabilities.Add(new DerSequence(capability, parameters)); - } - - public Asn1EncodableVector ToAsn1EncodableVector() - { - return capabilities; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/smime/SMIMEEncryptionKeyPreferenceAttribute.cs b/bc-sharp-crypto/src/asn1/smime/SMIMEEncryptionKeyPreferenceAttribute.cs deleted file mode 100644 index 19c5fd7..0000000 --- a/bc-sharp-crypto/src/asn1/smime/SMIMEEncryptionKeyPreferenceAttribute.cs +++ /dev/null @@ -1,44 +0,0 @@ -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.X509; - -namespace Org.BouncyCastle.Asn1.Smime -{ - /** - * The SmimeEncryptionKeyPreference object. - * 
-     * SmimeEncryptionKeyPreference ::= CHOICE {
-     *     issuerAndSerialNumber   [0] IssuerAndSerialNumber,
-     *     receipentKeyId          [1] RecipientKeyIdentifier,
-     *     subjectAltKeyIdentifier [2] SubjectKeyIdentifier
-     * }
-     *
- */ - public class SmimeEncryptionKeyPreferenceAttribute - : AttributeX509 - { - public SmimeEncryptionKeyPreferenceAttribute( - IssuerAndSerialNumber issAndSer) - : base(SmimeAttributes.EncrypKeyPref, - new DerSet(new DerTaggedObject(false, 0, issAndSer))) - { - } - - public SmimeEncryptionKeyPreferenceAttribute( - RecipientKeyIdentifier rKeyID) - : base(SmimeAttributes.EncrypKeyPref, - new DerSet(new DerTaggedObject(false, 1, rKeyID))) - { - } - - /** - * @param sKeyId the subjectKeyIdentifier value (normally the X.509 one) - */ - public SmimeEncryptionKeyPreferenceAttribute( - Asn1OctetString sKeyID) - : base(SmimeAttributes.EncrypKeyPref, - new DerSet(new DerTaggedObject(false, 2, sKeyID))) - { - } - } -} diff --git a/bc-sharp-crypto/src/asn1/teletrust/TeleTrusTNamedCurves.cs b/bc-sharp-crypto/src/asn1/teletrust/TeleTrusTNamedCurves.cs deleted file mode 100644 index 9a82db3..0000000 --- a/bc-sharp-crypto/src/asn1/teletrust/TeleTrusTNamedCurves.cs +++ /dev/null @@ -1,470 +0,0 @@ -using System.Collections; - -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Asn1.TeleTrust -{ - /** - * elliptic curves defined in "ECC Brainpool Standard Curves and Curve Generation" - * http://www.ecc-brainpool.org/download/draft_pkix_additional_ecc_dp.txt - */ - public class TeleTrusTNamedCurves - { - private static ECCurve ConfigureCurve(ECCurve curve) - { - return curve; - } - - internal class BrainpoolP160r1Holder - : X9ECParametersHolder - { - private BrainpoolP160r1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new BrainpoolP160r1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("E95E4A5F737059DC60DF5991D45029409E60FC09", 16); - BigInteger h = new BigInteger("01", 16); - - ECCurve curve = ConfigureCurve(new FpCurve( - new BigInteger("E95E4A5F737059DC60DFC7AD95B3D8139515620F", 16), // q - new BigInteger("340E7BE2A280EB74E2BE61BADA745D97E8F7C300", 16), // a - new BigInteger("1E589A8595423412134FAA2DBDEC95C8D8675E58", 16), // b - n, h)); - - return new X9ECParameters( - curve, - new X9ECPoint(curve, Hex.Decode("04BED5AF16EA3F6A4F62938C4631EB5AF7BDBCDBC31667CB477A1A8EC338F94741669C976316DA6321")), // G - n, h); - } - } - - internal class BrainpoolP160t1Holder - : X9ECParametersHolder - { - private BrainpoolP160t1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new BrainpoolP160t1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("E95E4A5F737059DC60DF5991D45029409E60FC09", 16); - BigInteger h = new BigInteger("01", 16); - - ECCurve curve = ConfigureCurve(new FpCurve( - // new BigInteger("24DBFF5DEC9B986BBFE5295A29BFBAE45E0F5D0B", 16), // Z - new BigInteger("E95E4A5F737059DC60DFC7AD95B3D8139515620F", 16), // q - new BigInteger("E95E4A5F737059DC60DFC7AD95B3D8139515620C", 16), // a' - new BigInteger("7A556B6DAE535B7B51ED2C4D7DAA7A0B5C55F380", 16), // b' - n, h)); - - return new X9ECParameters( - curve, - new X9ECPoint(curve, Hex.Decode("04B199B13B9B34EFC1397E64BAEB05ACC265FF2378ADD6718B7C7C1961F0991B842443772152C9E0AD")), // G - n, h); - } - } - - internal class BrainpoolP192r1Holder - : X9ECParametersHolder - { - private BrainpoolP192r1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new BrainpoolP192r1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("C302F41D932A36CDA7A3462F9E9E916B5BE8F1029AC4ACC1", 16); - BigInteger h = new BigInteger("01", 16); - - ECCurve curve = ConfigureCurve(new FpCurve( - new BigInteger("C302F41D932A36CDA7A3463093D18DB78FCE476DE1A86297", 16), // q - new BigInteger("6A91174076B1E0E19C39C031FE8685C1CAE040E5C69A28EF", 16), // a - new BigInteger("469A28EF7C28CCA3DC721D044F4496BCCA7EF4146FBF25C9", 16), // b - n, h)); - - return new X9ECParameters( - curve, - new X9ECPoint(curve, Hex.Decode("04C0A0647EAAB6A48753B033C56CB0F0900A2F5C4853375FD614B690866ABD5BB88B5F4828C1490002E6773FA2FA299B8F")), // G - n, h); - } - } - - internal class BrainpoolP192t1Holder - : X9ECParametersHolder - { - private BrainpoolP192t1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new BrainpoolP192t1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("C302F41D932A36CDA7A3462F9E9E916B5BE8F1029AC4ACC1", 16); - BigInteger h = new BigInteger("01", 16); - - ECCurve curve = ConfigureCurve(new FpCurve( - //new BigInteger("1B6F5CC8DB4DC7AF19458A9CB80DC2295E5EB9C3732104CB") //Z - new BigInteger("C302F41D932A36CDA7A3463093D18DB78FCE476DE1A86297", 16), // q - new BigInteger("C302F41D932A36CDA7A3463093D18DB78FCE476DE1A86294", 16), // a' - new BigInteger("13D56FFAEC78681E68F9DEB43B35BEC2FB68542E27897B79", 16), // b' - n, h)); - - return new X9ECParameters( - curve, - new X9ECPoint(curve, Hex.Decode("043AE9E58C82F63C30282E1FE7BBF43FA72C446AF6F4618129097E2C5667C2223A902AB5CA449D0084B7E5B3DE7CCC01C9")), // G' - n, h); - } - } - - internal class BrainpoolP224r1Holder - : X9ECParametersHolder - { - private BrainpoolP224r1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new BrainpoolP224r1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("D7C134AA264366862A18302575D0FB98D116BC4B6DDEBCA3A5A7939F", 16); - BigInteger h = new BigInteger("01", 16); - - ECCurve curve = ConfigureCurve(new FpCurve( - new BigInteger("D7C134AA264366862A18302575D1D787B09F075797DA89F57EC8C0FF", 16), // q - new BigInteger("68A5E62CA9CE6C1C299803A6C1530B514E182AD8B0042A59CAD29F43", 16), // a - new BigInteger("2580F63CCFE44138870713B1A92369E33E2135D266DBB372386C400B", 16), // b - n, h)); - - return new X9ECParameters( - curve, - new X9ECPoint(curve, Hex.Decode("040D9029AD2C7E5CF4340823B2A87DC68C9E4CE3174C1E6EFDEE12C07D58AA56F772C0726F24C6B89E4ECDAC24354B9E99CAA3F6D3761402CD")), // G - n, h); - } - } - - internal class BrainpoolP224t1Holder - : X9ECParametersHolder - { - private BrainpoolP224t1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new BrainpoolP224t1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("D7C134AA264366862A18302575D0FB98D116BC4B6DDEBCA3A5A7939F", 16); - BigInteger h = new BigInteger("01", 16); - - ECCurve curve = ConfigureCurve(new FpCurve( - //new BigInteger("2DF271E14427A346910CF7A2E6CFA7B3F484E5C2CCE1C8B730E28B3F") //Z - new BigInteger("D7C134AA264366862A18302575D1D787B09F075797DA89F57EC8C0FF", 16), // q - new BigInteger("D7C134AA264366862A18302575D1D787B09F075797DA89F57EC8C0FC", 16), // a' - new BigInteger("4B337D934104CD7BEF271BF60CED1ED20DA14C08B3BB64F18A60888D", 16), // b' - n, h)); - - return new X9ECParameters( - curve, - new X9ECPoint(curve, Hex.Decode("046AB1E344CE25FF3896424E7FFE14762ECB49F8928AC0C76029B4D5800374E9F5143E568CD23F3F4D7C0D4B1E41C8CC0D1C6ABD5F1A46DB4C")), // G' - n, h); - } - } - - internal class BrainpoolP256r1Holder - : X9ECParametersHolder - { - private BrainpoolP256r1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new BrainpoolP256r1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("A9FB57DBA1EEA9BC3E660A909D838D718C397AA3B561A6F7901E0E82974856A7", 16); - BigInteger h = new BigInteger("01", 16); - - ECCurve curve = ConfigureCurve(new FpCurve( - new BigInteger("A9FB57DBA1EEA9BC3E660A909D838D726E3BF623D52620282013481D1F6E5377", 16), // q - new BigInteger("7D5A0975FC2C3057EEF67530417AFFE7FB8055C126DC5C6CE94A4B44F330B5D9", 16), // a - new BigInteger("26DC5C6CE94A4B44F330B5D9BBD77CBF958416295CF7E1CE6BCCDC18FF8C07B6", 16), // b - n, h)); - - return new X9ECParameters( - curve, - new X9ECPoint(curve, Hex.Decode("048BD2AEB9CB7E57CB2C4B482FFC81B7AFB9DE27E1E3BD23C23A4453BD9ACE3262547EF835C3DAC4FD97F8461A14611DC9C27745132DED8E545C1D54C72F046997")), // G - n, h); - } - } - - internal class BrainpoolP256t1Holder - : X9ECParametersHolder - { - private BrainpoolP256t1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new BrainpoolP256t1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("A9FB57DBA1EEA9BC3E660A909D838D718C397AA3B561A6F7901E0E82974856A7", 16); - BigInteger h = new BigInteger("01", 16); - - ECCurve curve = ConfigureCurve(new FpCurve( - //new BigInteger("3E2D4BD9597B58639AE7AA669CAB9837CF5CF20A2C852D10F655668DFC150EF0") //Z - new BigInteger("A9FB57DBA1EEA9BC3E660A909D838D726E3BF623D52620282013481D1F6E5377", 16), // q - new BigInteger("A9FB57DBA1EEA9BC3E660A909D838D726E3BF623D52620282013481D1F6E5374", 16), // a' - new BigInteger("662C61C430D84EA4FE66A7733D0B76B7BF93EBC4AF2F49256AE58101FEE92B04", 16), // b' - n, h)); - - return new X9ECParameters( - curve, - new X9ECPoint(curve, Hex.Decode("04A3E8EB3CC1CFE7B7732213B23A656149AFA142C47AAFBC2B79A191562E1305F42D996C823439C56D7F7B22E14644417E69BCB6DE39D027001DABE8F35B25C9BE")), // G' - n, h); - } - } - - internal class BrainpoolP320r1Holder - : X9ECParametersHolder - { - private BrainpoolP320r1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new BrainpoolP320r1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("D35E472036BC4FB7E13C785ED201E065F98FCFA5B68F12A32D482EC7EE8658E98691555B44C59311", 16); - BigInteger h = new BigInteger("01", 16); - - ECCurve curve = ConfigureCurve(new FpCurve( - new BigInteger("D35E472036BC4FB7E13C785ED201E065F98FCFA6F6F40DEF4F92B9EC7893EC28FCD412B1F1B32E27", 16), // q - new BigInteger("3EE30B568FBAB0F883CCEBD46D3F3BB8A2A73513F5EB79DA66190EB085FFA9F492F375A97D860EB4", 16), // a - new BigInteger("520883949DFDBC42D3AD198640688A6FE13F41349554B49ACC31DCCD884539816F5EB4AC8FB1F1A6", 16), // b - n, h)); - - return new X9ECParameters( - curve, - new X9ECPoint(curve, Hex.Decode("0443BD7E9AFB53D8B85289BCC48EE5BFE6F20137D10A087EB6E7871E2A10A599C710AF8D0D39E2061114FDD05545EC1CC8AB4093247F77275E0743FFED117182EAA9C77877AAAC6AC7D35245D1692E8EE1")), // G - n, h); - } - } - - internal class BrainpoolP320t1Holder - : X9ECParametersHolder - { - private BrainpoolP320t1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new BrainpoolP320t1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("D35E472036BC4FB7E13C785ED201E065F98FCFA5B68F12A32D482EC7EE8658E98691555B44C59311", 16); - BigInteger h = new BigInteger("01", 16); - - ECCurve curve = ConfigureCurve(new FpCurve( - //new BigInteger("15F75CAF668077F7E85B42EB01F0A81FF56ECD6191D55CB82B7D861458A18FEFC3E5AB7496F3C7B1") //Z - new BigInteger("D35E472036BC4FB7E13C785ED201E065F98FCFA6F6F40DEF4F92B9EC7893EC28FCD412B1F1B32E27", 16), // q - new BigInteger("D35E472036BC4FB7E13C785ED201E065F98FCFA6F6F40DEF4F92B9EC7893EC28FCD412B1F1B32E24", 16), // a' - new BigInteger("A7F561E038EB1ED560B3D147DB782013064C19F27ED27C6780AAF77FB8A547CEB5B4FEF422340353", 16), // b' - n, h)); - - return new X9ECParameters( - curve, - new X9ECPoint(curve, Hex.Decode("04925BE9FB01AFC6FB4D3E7D4990010F813408AB106C4F09CB7EE07868CC136FFF3357F624A21BED5263BA3A7A27483EBF6671DBEF7ABB30EBEE084E58A0B077AD42A5A0989D1EE71B1B9BC0455FB0D2C3")), // G' - n, h); - } - } - - internal class BrainpoolP384r1Holder - : X9ECParametersHolder - { - private BrainpoolP384r1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new BrainpoolP384r1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("8CB91E82A3386D280F5D6F7E50E641DF152F7109ED5456B31F166E6CAC0425A7CF3AB6AF6B7FC3103B883202E9046565", 16); - BigInteger h = new BigInteger("01", 16); - - ECCurve curve = ConfigureCurve(new FpCurve( - new BigInteger("8CB91E82A3386D280F5D6F7E50E641DF152F7109ED5456B412B1DA197FB71123ACD3A729901D1A71874700133107EC53", 16), // q - new BigInteger("7BC382C63D8C150C3C72080ACE05AFA0C2BEA28E4FB22787139165EFBA91F90F8AA5814A503AD4EB04A8C7DD22CE2826", 16), // a - new BigInteger("4A8C7DD22CE28268B39B55416F0447C2FB77DE107DCD2A62E880EA53EEB62D57CB4390295DBC9943AB78696FA504C11", 16), // b - n, h)); - - return new X9ECParameters( - curve, - new X9ECPoint(curve, Hex.Decode("041D1C64F068CF45FFA2A63A81B7C13F6B8847A3E77EF14FE3DB7FCAFE0CBD10E8E826E03436D646AAEF87B2E247D4AF1E8ABE1D7520F9C2A45CB1EB8E95CFD55262B70B29FEEC5864E19C054FF99129280E4646217791811142820341263C5315")), // G - n, h); - } - } - - internal class BrainpoolP384t1Holder - : X9ECParametersHolder - { - private BrainpoolP384t1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new BrainpoolP384t1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("8CB91E82A3386D280F5D6F7E50E641DF152F7109ED5456B31F166E6CAC0425A7CF3AB6AF6B7FC3103B883202E9046565", 16); - BigInteger h = new BigInteger("01", 16); - - ECCurve curve = ConfigureCurve(new FpCurve( - //new BigInteger("41DFE8DD399331F7166A66076734A89CD0D2BCDB7D068E44E1F378F41ECBAE97D2D63DBC87BCCDDCCC5DA39E8589291C") //Z - new BigInteger("8CB91E82A3386D280F5D6F7E50E641DF152F7109ED5456B412B1DA197FB71123ACD3A729901D1A71874700133107EC53", 16), // q - new BigInteger("8CB91E82A3386D280F5D6F7E50E641DF152F7109ED5456B412B1DA197FB71123ACD3A729901D1A71874700133107EC50", 16), // a' - new BigInteger("7F519EADA7BDA81BD826DBA647910F8C4B9346ED8CCDC64E4B1ABD11756DCE1D2074AA263B88805CED70355A33B471EE", 16), // b' - n, h)); - - return new X9ECParameters( - curve, - new X9ECPoint(curve, Hex.Decode("0418DE98B02DB9A306F2AFCD7235F72A819B80AB12EBD653172476FECD462AABFFC4FF191B946A5F54D8D0AA2F418808CC25AB056962D30651A114AFD2755AD336747F93475B7A1FCA3B88F2B6A208CCFE469408584DC2B2912675BF5B9E582928")), // G' - n, h); - } - } - - internal class BrainpoolP512r1Holder - : X9ECParametersHolder - { - private BrainpoolP512r1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new BrainpoolP512r1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("AADD9DB8DBE9C48B3FD4E6AE33C9FC07CB308DB3B3C9D20ED6639CCA70330870553E5C414CA92619418661197FAC10471DB1D381085DDADDB58796829CA90069", 16); - BigInteger h = new BigInteger("01", 16); - - ECCurve curve = ConfigureCurve(new FpCurve( - new BigInteger("AADD9DB8DBE9C48B3FD4E6AE33C9FC07CB308DB3B3C9D20ED6639CCA703308717D4D9B009BC66842AECDA12AE6A380E62881FF2F2D82C68528AA6056583A48F3", 16), // q - new BigInteger("7830A3318B603B89E2327145AC234CC594CBDD8D3DF91610A83441CAEA9863BC2DED5D5AA8253AA10A2EF1C98B9AC8B57F1117A72BF2C7B9E7C1AC4D77FC94CA", 16), // a - new BigInteger("3DF91610A83441CAEA9863BC2DED5D5AA8253AA10A2EF1C98B9AC8B57F1117A72BF2C7B9E7C1AC4D77FC94CADC083E67984050B75EBAE5DD2809BD638016F723", 16), // b - n, h)); - - return new X9ECParameters( - curve, - new X9ECPoint(curve, Hex.Decode("0481AEE4BDD82ED9645A21322E9C4C6A9385ED9F70B5D916C1B43B62EEF4D0098EFF3B1F78E2D0D48D50D1687B93B97D5F7C6D5047406A5E688B352209BCB9F8227DDE385D566332ECC0EABFA9CF7822FDF209F70024A57B1AA000C55B881F8111B2DCDE494A5F485E5BCA4BD88A2763AED1CA2B2FA8F0540678CD1E0F3AD80892")), // G - n, h); - } - } - - internal class BrainpoolP512t1Holder - : X9ECParametersHolder - { - private BrainpoolP512t1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new BrainpoolP512t1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("AADD9DB8DBE9C48B3FD4E6AE33C9FC07CB308DB3B3C9D20ED6639CCA70330870553E5C414CA92619418661197FAC10471DB1D381085DDADDB58796829CA90069", 16); - BigInteger h = new BigInteger("01", 16); - - ECCurve curve = ConfigureCurve(new FpCurve( - //new BigInteger("12EE58E6764838B69782136F0F2D3BA06E27695716054092E60A80BEDB212B64E585D90BCE13761F85C3F1D2A64E3BE8FEA2220F01EBA5EEB0F35DBD29D922AB") //Z - new BigInteger("AADD9DB8DBE9C48B3FD4E6AE33C9FC07CB308DB3B3C9D20ED6639CCA703308717D4D9B009BC66842AECDA12AE6A380E62881FF2F2D82C68528AA6056583A48F3", 16), // q - new BigInteger("AADD9DB8DBE9C48B3FD4E6AE33C9FC07CB308DB3B3C9D20ED6639CCA703308717D4D9B009BC66842AECDA12AE6A380E62881FF2F2D82C68528AA6056583A48F0", 16), // a' - new BigInteger("7CBBBCF9441CFAB76E1890E46884EAE321F70C0BCB4981527897504BEC3E36A62BCDFA2304976540F6450085F2DAE145C22553B465763689180EA2571867423E", 16), // b' - n, h)); - - return new X9ECParameters( - curve, - new X9ECPoint(curve, Hex.Decode("04640ECE5C12788717B9C1BA06CBC2A6FEBA85842458C56DDE9DB1758D39C0313D82BA51735CDB3EA499AA77A7D6943A64F7A3F25FE26F06B51BAA2696FA9035DA5B534BD595F5AF0FA2C892376C84ACE1BB4E3019B71634C01131159CAE03CEE9D9932184BEEF216BD71DF2DADF86A627306ECFF96DBB8BACE198B61E00F8B332")), // G' - n, h); - } - } - - - private static readonly IDictionary objIds = Platform.CreateHashtable(); - private static readonly IDictionary curves = Platform.CreateHashtable(); - private static readonly IDictionary names = Platform.CreateHashtable(); - - private static void DefineCurve( - string name, - DerObjectIdentifier oid, - X9ECParametersHolder holder) - { - objIds.Add(Platform.ToUpperInvariant(name), oid); - names.Add(oid, name); - curves.Add(oid, holder); - } - - static TeleTrusTNamedCurves() - { - DefineCurve("brainpoolP160r1", TeleTrusTObjectIdentifiers.BrainpoolP160R1, BrainpoolP160r1Holder.Instance); - DefineCurve("brainpoolP160t1", TeleTrusTObjectIdentifiers.BrainpoolP160T1, BrainpoolP160t1Holder.Instance); - DefineCurve("brainpoolP192r1", TeleTrusTObjectIdentifiers.BrainpoolP192R1, BrainpoolP192r1Holder.Instance); - DefineCurve("brainpoolP192t1", TeleTrusTObjectIdentifiers.BrainpoolP192T1, BrainpoolP192t1Holder.Instance); - DefineCurve("brainpoolP224r1", TeleTrusTObjectIdentifiers.BrainpoolP224R1, BrainpoolP224r1Holder.Instance); - DefineCurve("brainpoolP224t1", TeleTrusTObjectIdentifiers.BrainpoolP224T1, BrainpoolP224t1Holder.Instance); - DefineCurve("brainpoolP256r1", TeleTrusTObjectIdentifiers.BrainpoolP256R1, BrainpoolP256r1Holder.Instance); - DefineCurve("brainpoolP256t1", TeleTrusTObjectIdentifiers.BrainpoolP256T1, BrainpoolP256t1Holder.Instance); - DefineCurve("brainpoolP320r1", TeleTrusTObjectIdentifiers.BrainpoolP320R1, BrainpoolP320r1Holder.Instance); - DefineCurve("brainpoolP320t1", TeleTrusTObjectIdentifiers.BrainpoolP320T1, BrainpoolP320t1Holder.Instance); - DefineCurve("brainpoolP384r1", TeleTrusTObjectIdentifiers.BrainpoolP384R1, BrainpoolP384r1Holder.Instance); - DefineCurve("brainpoolP384t1", TeleTrusTObjectIdentifiers.BrainpoolP384T1, BrainpoolP384t1Holder.Instance); - DefineCurve("brainpoolP512r1", TeleTrusTObjectIdentifiers.BrainpoolP512R1, BrainpoolP512r1Holder.Instance); - DefineCurve("brainpoolP512t1", TeleTrusTObjectIdentifiers.BrainpoolP512T1, BrainpoolP512t1Holder.Instance); - } - - public static X9ECParameters GetByName( - string name) - { - DerObjectIdentifier oid = GetOid(name); - return oid == null ? null : GetByOid(oid); - } - - /** - * return the X9ECParameters object for the named curve represented by - * the passed in object identifier. Null if the curve isn't present. - * - * @param oid an object identifier representing a named curve, if present. - */ - public static X9ECParameters GetByOid( - DerObjectIdentifier oid) - { - X9ECParametersHolder holder = (X9ECParametersHolder)curves[oid]; - return holder == null ? null : holder.Parameters; - } - - /** - * return the object identifier signified by the passed in name. Null - * if there is no object identifier associated with name. - * - * @return the object identifier associated with name, if present. - */ - public static DerObjectIdentifier GetOid( - string name) - { - return (DerObjectIdentifier)objIds[Platform.ToUpperInvariant(name)]; - } - - /** - * return the named curve name represented by the given object identifier. - */ - public static string GetName( - DerObjectIdentifier oid) - { - return (string)names[oid]; - } - - /** - * returns an enumeration containing the name strings for curves - * contained in this structure. - */ - public static IEnumerable Names - { - get { return new EnumerableProxy(names.Values); } - } - - public static DerObjectIdentifier GetOid( - short curvesize, - bool twisted) - { - return GetOid("brainpoolP" + curvesize + (twisted ? "t" : "r") + "1"); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/teletrust/TeleTrusTObjectIdentifiers.cs b/bc-sharp-crypto/src/asn1/teletrust/TeleTrusTObjectIdentifiers.cs deleted file mode 100644 index 56e7084..0000000 --- a/bc-sharp-crypto/src/asn1/teletrust/TeleTrusTObjectIdentifiers.cs +++ /dev/null @@ -1,45 +0,0 @@ -namespace Org.BouncyCastle.Asn1.TeleTrust -{ - public sealed class TeleTrusTObjectIdentifiers - { - private TeleTrusTObjectIdentifiers() - { - } - - public static readonly DerObjectIdentifier TeleTrusTAlgorithm = new DerObjectIdentifier("1.3.36.3"); - - public static readonly DerObjectIdentifier RipeMD160 = new DerObjectIdentifier(TeleTrusTAlgorithm + ".2.1"); - public static readonly DerObjectIdentifier RipeMD128 = new DerObjectIdentifier(TeleTrusTAlgorithm + ".2.2"); - public static readonly DerObjectIdentifier RipeMD256 = new DerObjectIdentifier(TeleTrusTAlgorithm + ".2.3"); - - public static readonly DerObjectIdentifier TeleTrusTRsaSignatureAlgorithm = new DerObjectIdentifier(TeleTrusTAlgorithm + ".3.1"); - - public static readonly DerObjectIdentifier RsaSignatureWithRipeMD160 = new DerObjectIdentifier(TeleTrusTRsaSignatureAlgorithm + ".2"); - public static readonly DerObjectIdentifier RsaSignatureWithRipeMD128 = new DerObjectIdentifier(TeleTrusTRsaSignatureAlgorithm + ".3"); - public static readonly DerObjectIdentifier RsaSignatureWithRipeMD256 = new DerObjectIdentifier(TeleTrusTRsaSignatureAlgorithm + ".4"); - - public static readonly DerObjectIdentifier ECSign = new DerObjectIdentifier(TeleTrusTAlgorithm + ".3.2"); - - public static readonly DerObjectIdentifier ECSignWithSha1 = new DerObjectIdentifier(ECSign + ".1"); - public static readonly DerObjectIdentifier ECSignWithRipeMD160 = new DerObjectIdentifier(ECSign + ".2"); - - public static readonly DerObjectIdentifier EccBrainpool = new DerObjectIdentifier(TeleTrusTAlgorithm + ".3.2.8"); - public static readonly DerObjectIdentifier EllipticCurve = new DerObjectIdentifier(EccBrainpool + ".1"); - public static readonly DerObjectIdentifier VersionOne = new DerObjectIdentifier(EllipticCurve + ".1"); - - public static readonly DerObjectIdentifier BrainpoolP160R1 = new DerObjectIdentifier(VersionOne + ".1"); - public static readonly DerObjectIdentifier BrainpoolP160T1 = new DerObjectIdentifier(VersionOne + ".2"); - public static readonly DerObjectIdentifier BrainpoolP192R1 = new DerObjectIdentifier(VersionOne + ".3"); - public static readonly DerObjectIdentifier BrainpoolP192T1 = new DerObjectIdentifier(VersionOne + ".4"); - public static readonly DerObjectIdentifier BrainpoolP224R1 = new DerObjectIdentifier(VersionOne + ".5"); - public static readonly DerObjectIdentifier BrainpoolP224T1 = new DerObjectIdentifier(VersionOne + ".6"); - public static readonly DerObjectIdentifier BrainpoolP256R1 = new DerObjectIdentifier(VersionOne + ".7"); - public static readonly DerObjectIdentifier BrainpoolP256T1 = new DerObjectIdentifier(VersionOne + ".8"); - public static readonly DerObjectIdentifier BrainpoolP320R1 = new DerObjectIdentifier(VersionOne + ".9"); - public static readonly DerObjectIdentifier BrainpoolP320T1 = new DerObjectIdentifier(VersionOne + ".10"); - public static readonly DerObjectIdentifier BrainpoolP384R1 = new DerObjectIdentifier(VersionOne + ".11"); - public static readonly DerObjectIdentifier BrainpoolP384T1 = new DerObjectIdentifier(VersionOne + ".12"); - public static readonly DerObjectIdentifier BrainpoolP512R1 = new DerObjectIdentifier(VersionOne + ".13"); - public static readonly DerObjectIdentifier BrainpoolP512T1 = new DerObjectIdentifier(VersionOne + ".14"); - } -} diff --git a/bc-sharp-crypto/src/asn1/tsp/Accuracy.cs b/bc-sharp-crypto/src/asn1/tsp/Accuracy.cs deleted file mode 100644 index 9f2c7e8..0000000 --- a/bc-sharp-crypto/src/asn1/tsp/Accuracy.cs +++ /dev/null @@ -1,151 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Tsp -{ - public class Accuracy - : Asn1Encodable - { - private readonly DerInteger seconds; - private readonly DerInteger millis; - private readonly DerInteger micros; - - // constants - protected const int MinMillis = 1; - protected const int MaxMillis = 999; - protected const int MinMicros = 1; - protected const int MaxMicros = 999; - - public Accuracy( - DerInteger seconds, - DerInteger millis, - DerInteger micros) - { - //Verifications - if (millis != null - && (millis.Value.IntValue < MinMillis - || millis.Value.IntValue > MaxMillis)) - { - throw new ArgumentException( - "Invalid millis field : not in (1..999)"); - } - - if (micros != null - && (micros.Value.IntValue < MinMicros - || micros.Value.IntValue > MaxMicros)) - { - throw new ArgumentException( - "Invalid micros field : not in (1..999)"); - } - - this.seconds = seconds; - this.millis = millis; - this.micros = micros; - } - - private Accuracy( - Asn1Sequence seq) - { - for (int i = 0; i < seq.Count; ++i) - { - // seconds - if (seq[i] is DerInteger) - { - seconds = (DerInteger) seq[i]; - } - else if (seq[i] is DerTaggedObject) - { - DerTaggedObject extra = (DerTaggedObject) seq[i]; - - switch (extra.TagNo) - { - case 0: - millis = DerInteger.GetInstance(extra, false); - if (millis.Value.IntValue < MinMillis - || millis.Value.IntValue > MaxMillis) - { - throw new ArgumentException( - "Invalid millis field : not in (1..999)."); - } - break; - case 1: - micros = DerInteger.GetInstance(extra, false); - if (micros.Value.IntValue < MinMicros - || micros.Value.IntValue > MaxMicros) - { - throw new ArgumentException( - "Invalid micros field : not in (1..999)."); - } - break; - default: - throw new ArgumentException("Invalig tag number"); - } - } - } - } - - public static Accuracy GetInstance( - object o) - { - if (o == null || o is Accuracy) - { - return (Accuracy) o; - } - - if (o is Asn1Sequence) - { - return new Accuracy((Asn1Sequence) o); - } - - throw new ArgumentException( - "Unknown object in 'Accuracy' factory: " + Platform.GetTypeName(o)); - } - - public DerInteger Seconds - { - get { return seconds; } - } - - public DerInteger Millis - { - get { return millis; } - } - - public DerInteger Micros - { - get { return micros; } - } - - /** - * 
-		 * Accuracy ::= SEQUENCE {
-		 *             seconds        INTEGER              OPTIONAL,
-		 *             millis     [0] INTEGER  (1..999)    OPTIONAL,
-		 *             micros     [1] INTEGER  (1..999)    OPTIONAL
-		 *             }
-		 *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - if (seconds != null) - { - v.Add(seconds); - } - - if (millis != null) - { - v.Add(new DerTaggedObject(false, 0, millis)); - } - - if (micros != null) - { - v.Add(new DerTaggedObject(false, 1, micros)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/tsp/MessageImprint.cs b/bc-sharp-crypto/src/asn1/tsp/MessageImprint.cs deleted file mode 100644 index 44ef7d1..0000000 --- a/bc-sharp-crypto/src/asn1/tsp/MessageImprint.cs +++ /dev/null @@ -1,75 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Tsp -{ - public class MessageImprint - : Asn1Encodable - { - private readonly AlgorithmIdentifier hashAlgorithm; - private readonly byte[] hashedMessage; - - /** - * @param o - * @return a MessageImprint object. - */ - public static MessageImprint GetInstance( - object o) - { - if (o == null || o is MessageImprint) - { - return (MessageImprint) o; - } - - if (o is Asn1Sequence) - { - return new MessageImprint((Asn1Sequence) o); - } - - throw new ArgumentException( - "Unknown object in 'MessageImprint' factory: " + Platform.GetTypeName(o)); - } - - private MessageImprint( - Asn1Sequence seq) - { - if (seq.Count != 2) - throw new ArgumentException("Wrong number of elements in sequence", "seq"); - - this.hashAlgorithm = AlgorithmIdentifier.GetInstance(seq[0]); - this.hashedMessage = Asn1OctetString.GetInstance(seq[1]).GetOctets(); - } - - public MessageImprint( - AlgorithmIdentifier hashAlgorithm, - byte[] hashedMessage) - { - this.hashAlgorithm = hashAlgorithm; - this.hashedMessage = hashedMessage; - } - - public AlgorithmIdentifier HashAlgorithm - { - get { return hashAlgorithm; } - } - - public byte[] GetHashedMessage() - { - return hashedMessage; - } - - /** - * 
-		 *    MessageImprint ::= SEQUENCE  {
-		 *       hashAlgorithm                AlgorithmIdentifier,
-		 *       hashedMessage                OCTET STRING  }
-		 *
- */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(hashAlgorithm, new DerOctetString(hashedMessage)); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/tsp/TSTInfo.cs b/bc-sharp-crypto/src/asn1/tsp/TSTInfo.cs deleted file mode 100644 index 89f3e8b..0000000 --- a/bc-sharp-crypto/src/asn1/tsp/TSTInfo.cs +++ /dev/null @@ -1,250 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Tsp -{ - public class TstInfo - : Asn1Encodable - { - private readonly DerInteger version; - private readonly DerObjectIdentifier tsaPolicyId; - private readonly MessageImprint messageImprint; - private readonly DerInteger serialNumber; - private readonly DerGeneralizedTime genTime; - private readonly Accuracy accuracy; - private readonly DerBoolean ordering; - private readonly DerInteger nonce; - private readonly GeneralName tsa; - private readonly X509Extensions extensions; - - public static TstInfo GetInstance( - object o) - { - if (o == null || o is TstInfo) - { - return (TstInfo) o; - } - - if (o is Asn1Sequence) - { - return new TstInfo((Asn1Sequence) o); - } - - if (o is Asn1OctetString) - { - try - { - byte[] octets = ((Asn1OctetString)o).GetOctets(); - return GetInstance(Asn1Object.FromByteArray(octets)); - } - catch (IOException) - { - throw new ArgumentException( - "Bad object format in 'TstInfo' factory."); - } - } - - throw new ArgumentException( - "Unknown object in 'TstInfo' factory: " + Platform.GetTypeName(o)); - } - - private TstInfo( - Asn1Sequence seq) - { - IEnumerator e = seq.GetEnumerator(); - - // version - e.MoveNext(); - version = DerInteger.GetInstance(e.Current); - - // tsaPolicy - e.MoveNext(); - tsaPolicyId = DerObjectIdentifier.GetInstance(e.Current); - - // messageImprint - e.MoveNext(); - messageImprint = MessageImprint.GetInstance(e.Current); - - // serialNumber - e.MoveNext(); - serialNumber = DerInteger.GetInstance(e.Current); - - // genTime - e.MoveNext(); - genTime = DerGeneralizedTime.GetInstance(e.Current); - - // default for ordering - ordering = DerBoolean.False; - - while (e.MoveNext()) - { - Asn1Object o = (Asn1Object) e.Current; - - if (o is Asn1TaggedObject) - { - DerTaggedObject tagged = (DerTaggedObject) o; - - switch (tagged.TagNo) - { - case 0: - tsa = GeneralName.GetInstance(tagged, true); - break; - case 1: - extensions = X509Extensions.GetInstance(tagged, false); - break; - default: - throw new ArgumentException("Unknown tag value " + tagged.TagNo); - } - } - - if (o is DerSequence) - { - accuracy = Accuracy.GetInstance(o); - } - - if (o is DerBoolean) - { - ordering = DerBoolean.GetInstance(o); - } - - if (o is DerInteger) - { - nonce = DerInteger.GetInstance(o); - } - } - } - - public TstInfo( - DerObjectIdentifier tsaPolicyId, - MessageImprint messageImprint, - DerInteger serialNumber, - DerGeneralizedTime genTime, - Accuracy accuracy, - DerBoolean ordering, - DerInteger nonce, - GeneralName tsa, - X509Extensions extensions) - { - this.version = new DerInteger(1); - this.tsaPolicyId = tsaPolicyId; - this.messageImprint = messageImprint; - this.serialNumber = serialNumber; - this.genTime = genTime; - this.accuracy = accuracy; - this.ordering = ordering; - this.nonce = nonce; - this.tsa = tsa; - this.extensions = extensions; - } - - public DerInteger Version - { - get { return version; } - } - - public MessageImprint MessageImprint - { - get { return messageImprint; } - } - - public DerObjectIdentifier Policy - { - get { return tsaPolicyId; } - } - - public DerInteger SerialNumber - { - get { return serialNumber; } - } - - public Accuracy Accuracy - { - get { return accuracy; } - } - - public DerGeneralizedTime GenTime - { - get { return genTime; } - } - - public DerBoolean Ordering - { - get { return ordering; } - } - - public DerInteger Nonce - { - get { return nonce; } - } - - public GeneralName Tsa - { - get { return tsa; } - } - - public X509Extensions Extensions - { - get { return extensions; } - } - - /** - * 
-		 *
-		 *     TstInfo ::= SEQUENCE  {
-		 *        version                      INTEGER  { v1(1) },
-		 *        policy                       TSAPolicyId,
-		 *        messageImprint               MessageImprint,
-		 *          -- MUST have the same value as the similar field in
-		 *          -- TimeStampReq
-		 *        serialNumber                 INTEGER,
-		 *         -- Time-Stamping users MUST be ready to accommodate integers
-		 *         -- up to 160 bits.
-		 *        genTime                      GeneralizedTime,
-		 *        accuracy                     Accuracy                 OPTIONAL,
-		 *        ordering                     BOOLEAN             DEFAULT FALSE,
-		 *        nonce                        INTEGER                  OPTIONAL,
-		 *          -- MUST be present if the similar field was present
-		 *          -- in TimeStampReq.  In that case it MUST have the same value.
-		 *        tsa                          [0] GeneralName          OPTIONAL,
-		 *        extensions                   [1] IMPLICIT Extensions   OPTIONAL  }
-		 *
-		 *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector( - version, tsaPolicyId, messageImprint, serialNumber, genTime); - - if (accuracy != null) - { - v.Add(accuracy); - } - - if (ordering != null && ordering.IsTrue) - { - v.Add(ordering); - } - - if (nonce != null) - { - v.Add(nonce); - } - - if (tsa != null) - { - v.Add(new DerTaggedObject(true, 0, tsa)); - } - - if (extensions != null) - { - v.Add(new DerTaggedObject(false, 1, extensions)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/tsp/TimeStampReq.cs b/bc-sharp-crypto/src/asn1/tsp/TimeStampReq.cs deleted file mode 100644 index 5b05f33..0000000 --- a/bc-sharp-crypto/src/asn1/tsp/TimeStampReq.cs +++ /dev/null @@ -1,165 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Tsp -{ - public class TimeStampReq - : Asn1Encodable - { - private readonly DerInteger version; - private readonly MessageImprint messageImprint; - private readonly DerObjectIdentifier tsaPolicy; - private readonly DerInteger nonce; - private readonly DerBoolean certReq; - private readonly X509Extensions extensions; - - public static TimeStampReq GetInstance( - object o) - { - if (o == null || o is TimeStampReq) - { - return (TimeStampReq) o; - } - - if (o is Asn1Sequence) - { - return new TimeStampReq((Asn1Sequence) o); - } - - throw new ArgumentException( - "Unknown object in 'TimeStampReq' factory: " + Platform.GetTypeName(o)); - } - - private TimeStampReq( - Asn1Sequence seq) - { - int nbObjects = seq.Count; - int seqStart = 0; - - // version - version = DerInteger.GetInstance(seq[seqStart++]); - - // messageImprint - messageImprint = MessageImprint.GetInstance(seq[seqStart++]); - - for (int opt = seqStart; opt < nbObjects; opt++) - { - // tsaPolicy - if (seq[opt] is DerObjectIdentifier) - { - tsaPolicy = DerObjectIdentifier.GetInstance(seq[opt]); - } - // nonce - else if (seq[opt] is DerInteger) - { - nonce = DerInteger.GetInstance(seq[opt]); - } - // certReq - else if (seq[opt] is DerBoolean) - { - certReq = DerBoolean.GetInstance(seq[opt]); - } - // extensions - else if (seq[opt] is Asn1TaggedObject) - { - Asn1TaggedObject tagged = (Asn1TaggedObject) seq[opt]; - if (tagged.TagNo == 0) - { - extensions = X509Extensions.GetInstance(tagged, false); - } - } - } - } - - public TimeStampReq( - MessageImprint messageImprint, - DerObjectIdentifier tsaPolicy, - DerInteger nonce, - DerBoolean certReq, - X509Extensions extensions) - { - // default - this.version = new DerInteger(1); - - this.messageImprint = messageImprint; - this.tsaPolicy = tsaPolicy; - this.nonce = nonce; - this.certReq = certReq; - this.extensions = extensions; - } - - public DerInteger Version - { - get { return version; } - } - - public MessageImprint MessageImprint - { - get { return messageImprint; } - } - - public DerObjectIdentifier ReqPolicy - { - get { return tsaPolicy; } - } - - public DerInteger Nonce - { - get { return nonce; } - } - - public DerBoolean CertReq - { - get { return certReq; } - } - - public X509Extensions Extensions - { - get { return extensions; } - } - - /** - * 
-		 * TimeStampReq ::= SEQUENCE  {
-		 *  version                      INTEGER  { v1(1) },
-		 *  messageImprint               MessageImprint,
-		 *    --a hash algorithm OID and the hash value of the data to be
-		 *    --time-stamped
-		 *  reqPolicy             TSAPolicyId              OPTIONAL,
-		 *  nonce                 INTEGER                  OPTIONAL,
-		 *  certReq               BOOLEAN                  DEFAULT FALSE,
-		 *  extensions            [0] IMPLICIT Extensions  OPTIONAL
-		 * }
-		 *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector( - version, messageImprint); - - if (tsaPolicy != null) - { - v.Add(tsaPolicy); - } - - if (nonce != null) - { - v.Add(nonce); - } - - if (certReq != null && certReq.IsTrue) - { - v.Add(certReq); - } - - if (extensions != null) - { - v.Add(new DerTaggedObject(false, 0, extensions)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/tsp/TimeStampResp.cs b/bc-sharp-crypto/src/asn1/tsp/TimeStampResp.cs deleted file mode 100644 index b910260..0000000 --- a/bc-sharp-crypto/src/asn1/tsp/TimeStampResp.cs +++ /dev/null @@ -1,80 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.Cmp; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Tsp -{ - public class TimeStampResp - : Asn1Encodable - { - private readonly PkiStatusInfo pkiStatusInfo; - private readonly ContentInfo timeStampToken; - - public static TimeStampResp GetInstance( - object o) - { - if (o == null || o is TimeStampResp) - { - return (TimeStampResp) o; - } - - if (o is Asn1Sequence) - { - return new TimeStampResp((Asn1Sequence) o); - } - - throw new ArgumentException( - "Unknown object in 'TimeStampResp' factory: " + Platform.GetTypeName(o)); - } - - private TimeStampResp( - Asn1Sequence seq) - { - this.pkiStatusInfo = PkiStatusInfo.GetInstance(seq[0]); - - if (seq.Count > 1) - { - this.timeStampToken = ContentInfo.GetInstance(seq[1]); - } - } - - public TimeStampResp( - PkiStatusInfo pkiStatusInfo, - ContentInfo timeStampToken) - { - this.pkiStatusInfo = pkiStatusInfo; - this.timeStampToken = timeStampToken; - } - - public PkiStatusInfo Status - { - get { return pkiStatusInfo; } - } - - public ContentInfo TimeStampToken - { - get { return timeStampToken; } - } - - /** - * 
-		 * TimeStampResp ::= SEQUENCE  {
-		 *   status                  PkiStatusInfo,
-		 *   timeStampToken          TimeStampToken     OPTIONAL  }
-		 *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(pkiStatusInfo); - - if (timeStampToken != null) - { - v.Add(timeStampToken); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/util/Asn1Dump.cs b/bc-sharp-crypto/src/asn1/util/Asn1Dump.cs deleted file mode 100644 index 6a21ee2..0000000 --- a/bc-sharp-crypto/src/asn1/util/Asn1Dump.cs +++ /dev/null @@ -1,381 +0,0 @@ -using System; -using System.Collections; -using System.IO; -using System.Text; - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Asn1.Utilities -{ - public sealed class Asn1Dump - { - private static readonly string NewLine = Platform.NewLine; - - private Asn1Dump() - { - } - - private const string Tab = " "; - private const int SampleSize = 32; - - /** - * dump a Der object as a formatted string with indentation - * - * @param obj the Asn1Object to be dumped out. - */ - private static void AsString( - string indent, - bool verbose, - Asn1Object obj, - StringBuilder buf) - { - if (obj is Asn1Sequence) - { - string tab = indent + Tab; - buf.Append(indent); - if (obj is BerSequence) - { - buf.Append("BER Sequence"); - } - else if (obj is DerSequence) - { - buf.Append("DER Sequence"); - } - else - { - buf.Append("Sequence"); - } - - buf.Append(NewLine); - - foreach (Asn1Encodable o in ((Asn1Sequence)obj)) - { - if (o == null || o is Asn1Null) - { - buf.Append(tab); - buf.Append("NULL"); - buf.Append(NewLine); - } - else - { - AsString(tab, verbose, o.ToAsn1Object(), buf); - } - } - } - else if (obj is DerTaggedObject) - { - string tab = indent + Tab; - buf.Append(indent); - if (obj is BerTaggedObject) - { - buf.Append("BER Tagged ["); - } - else - { - buf.Append("Tagged ["); - } - - DerTaggedObject o = (DerTaggedObject)obj; - - buf.Append(((int)o.TagNo).ToString()); - buf.Append(']'); - - if (!o.IsExplicit()) - { - buf.Append(" IMPLICIT "); - } - - buf.Append(NewLine); - - if (o.IsEmpty()) - { - buf.Append(tab); - buf.Append("EMPTY"); - buf.Append(NewLine); - } - else - { - AsString(tab, verbose, o.GetObject(), buf); - } - } - else if (obj is BerSet) - { - string tab = indent + Tab; - - buf.Append(indent); - buf.Append("BER Set"); - buf.Append(NewLine); - - foreach (Asn1Encodable o in ((Asn1Set)obj)) - { - if (o == null) - { - buf.Append(tab); - buf.Append("NULL"); - buf.Append(NewLine); - } - else - { - AsString(tab, verbose, o.ToAsn1Object(), buf); - } - } - } - else if (obj is DerSet) - { - string tab = indent + Tab; - - buf.Append(indent); - buf.Append("DER Set"); - buf.Append(NewLine); - - foreach (Asn1Encodable o in ((Asn1Set)obj)) - { - if (o == null) - { - buf.Append(tab); - buf.Append("NULL"); - buf.Append(NewLine); - } - else - { - AsString(tab, verbose, o.ToAsn1Object(), buf); - } - } - } - else if (obj is DerObjectIdentifier) - { - buf.Append(indent + "ObjectIdentifier(" + ((DerObjectIdentifier)obj).Id + ")" + NewLine); - } - else if (obj is DerBoolean) - { - buf.Append(indent + "Boolean(" + ((DerBoolean)obj).IsTrue + ")" + NewLine); - } - else if (obj is DerInteger) - { - buf.Append(indent + "Integer(" + ((DerInteger)obj).Value + ")" + NewLine); - } - else if (obj is BerOctetString) - { - byte[] octets = ((Asn1OctetString)obj).GetOctets(); - string extra = verbose ? dumpBinaryDataAsString(indent, octets) : ""; - buf.Append(indent + "BER Octet String" + "[" + octets.Length + "] " + extra + NewLine); - } - else if (obj is DerOctetString) - { - byte[] octets = ((Asn1OctetString)obj).GetOctets(); - string extra = verbose ? dumpBinaryDataAsString(indent, octets) : ""; - buf.Append(indent + "DER Octet String" + "[" + octets.Length + "] " + extra + NewLine); - } - else if (obj is DerBitString) - { - DerBitString bt = (DerBitString)obj; - byte[] bytes = bt.GetBytes(); - string extra = verbose ? dumpBinaryDataAsString(indent, bytes) : ""; - buf.Append(indent + "DER Bit String" + "[" + bytes.Length + ", " + bt.PadBits + "] " + extra + NewLine); - } - else if (obj is DerIA5String) - { - buf.Append(indent + "IA5String(" + ((DerIA5String)obj).GetString() + ") " + NewLine); - } - else if (obj is DerUtf8String) - { - buf.Append(indent + "UTF8String(" + ((DerUtf8String)obj).GetString() + ") " + NewLine); - } - else if (obj is DerPrintableString) - { - buf.Append(indent + "PrintableString(" + ((DerPrintableString)obj).GetString() + ") " + NewLine); - } - else if (obj is DerVisibleString) - { - buf.Append(indent + "VisibleString(" + ((DerVisibleString)obj).GetString() + ") " + NewLine); - } - else if (obj is DerBmpString) - { - buf.Append(indent + "BMPString(" + ((DerBmpString)obj).GetString() + ") " + NewLine); - } - else if (obj is DerT61String) - { - buf.Append(indent + "T61String(" + ((DerT61String)obj).GetString() + ") " + NewLine); - } - else if (obj is DerGraphicString) - { - buf.Append(indent + "GraphicString(" + ((DerGraphicString)obj).GetString() + ") " + NewLine); - } - else if (obj is DerVideotexString) - { - buf.Append(indent + "VideotexString(" + ((DerVideotexString)obj).GetString() + ") " + NewLine); - } - else if (obj is DerUtcTime) - { - buf.Append(indent + "UTCTime(" + ((DerUtcTime)obj).TimeString + ") " + NewLine); - } - else if (obj is DerGeneralizedTime) - { - buf.Append(indent + "GeneralizedTime(" + ((DerGeneralizedTime)obj).GetTime() + ") " + NewLine); - } - else if (obj is BerApplicationSpecific) - { - buf.Append(outputApplicationSpecific("BER", indent, verbose, (BerApplicationSpecific)obj)); - } - else if (obj is DerApplicationSpecific) - { - buf.Append(outputApplicationSpecific("DER", indent, verbose, (DerApplicationSpecific)obj)); - } - else if (obj is DerEnumerated) - { - DerEnumerated en = (DerEnumerated)obj; - buf.Append(indent + "DER Enumerated(" + en.Value + ")" + NewLine); - } - else if (obj is DerExternal) - { - DerExternal ext = (DerExternal)obj; - buf.Append(indent + "External " + NewLine); - string tab = indent + Tab; - - if (ext.DirectReference != null) - { - buf.Append(tab + "Direct Reference: " + ext.DirectReference.Id + NewLine); - } - if (ext.IndirectReference != null) - { - buf.Append(tab + "Indirect Reference: " + ext.IndirectReference.ToString() + NewLine); - } - if (ext.DataValueDescriptor != null) - { - AsString(tab, verbose, ext.DataValueDescriptor, buf); - } - buf.Append(tab + "Encoding: " + ext.Encoding + NewLine); - AsString(tab, verbose, ext.ExternalContent, buf); - } - else - { - buf.Append(indent + obj.ToString() + NewLine); - } - } - - private static string outputApplicationSpecific( - string type, - string indent, - bool verbose, - DerApplicationSpecific app) - { - StringBuilder buf = new StringBuilder(); - - if (app.IsConstructed()) - { - try - { - Asn1Sequence s = Asn1Sequence.GetInstance(app.GetObject(Asn1Tags.Sequence)); - buf.Append(indent + type + " ApplicationSpecific[" + app.ApplicationTag + "]" + NewLine); - foreach (Asn1Encodable ae in s) - { - AsString(indent + Tab, verbose, ae.ToAsn1Object(), buf); - } - } - catch (IOException e) - { - buf.Append(e); - } - return buf.ToString(); - } - - return indent + type + " ApplicationSpecific[" + app.ApplicationTag + "] (" - + Hex.ToHexString(app.GetContents()) + ")" + NewLine; - } - - [Obsolete("Use version accepting Asn1Encodable")] - public static string DumpAsString( - object obj) - { - if (obj is Asn1Encodable) - { - StringBuilder buf = new StringBuilder(); - AsString("", false, ((Asn1Encodable)obj).ToAsn1Object(), buf); - return buf.ToString(); - } - - return "unknown object type " + obj.ToString(); - } - - /** - * dump out a DER object as a formatted string, in non-verbose mode - * - * @param obj the Asn1Encodable to be dumped out. - * @return the resulting string. - */ - public static string DumpAsString( - Asn1Encodable obj) - { - return DumpAsString(obj, false); - } - - /** - * Dump out the object as a string - * - * @param obj the Asn1Encodable to be dumped out. - * @param verbose if true, dump out the contents of octet and bit strings. - * @return the resulting string. - */ - public static string DumpAsString( - Asn1Encodable obj, - bool verbose) - { - StringBuilder buf = new StringBuilder(); - AsString("", verbose, obj.ToAsn1Object(), buf); - return buf.ToString(); - } - - private static string dumpBinaryDataAsString(string indent, byte[] bytes) - { - indent += Tab; - - StringBuilder buf = new StringBuilder(NewLine); - - for (int i = 0; i < bytes.Length; i += SampleSize) - { - if (bytes.Length - i > SampleSize) - { - buf.Append(indent); - buf.Append(Hex.ToHexString(bytes, i, SampleSize)); - buf.Append(Tab); - buf.Append(calculateAscString(bytes, i, SampleSize)); - buf.Append(NewLine); - } - else - { - buf.Append(indent); - buf.Append(Hex.ToHexString(bytes, i, bytes.Length - i)); - for (int j = bytes.Length - i; j != SampleSize; j++) - { - buf.Append(" "); - } - buf.Append(Tab); - buf.Append(calculateAscString(bytes, i, bytes.Length - i)); - buf.Append(NewLine); - } - } - - return buf.ToString(); - } - - private static string calculateAscString( - byte[] bytes, - int off, - int len) - { - StringBuilder buf = new StringBuilder(); - - for (int i = off; i != off + len; i++) - { - char c = (char)bytes[i]; - if (c >= ' ' && c <= '~') - { - buf.Append(c); - } - } - - return buf.ToString(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/util/Dump.cs b/bc-sharp-crypto/src/asn1/util/Dump.cs deleted file mode 100644 index e313fe8..0000000 --- a/bc-sharp-crypto/src/asn1/util/Dump.cs +++ /dev/null @@ -1,30 +0,0 @@ -#if !PORTABLE -using System; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Utilities -{ - public sealed class Dump - { - private Dump() - { - } - - public static void Main(string[] args) - { - FileStream fIn = File.OpenRead(args[0]); - Asn1InputStream bIn = new Asn1InputStream(fIn); - - Asn1Object obj; - while ((obj = bIn.ReadObject()) != null) - { - Console.WriteLine(Asn1Dump.DumpAsString(obj)); - } - - Platform.Dispose(bIn); - } - } -} -#endif diff --git a/bc-sharp-crypto/src/asn1/util/FilterStream.cs b/bc-sharp-crypto/src/asn1/util/FilterStream.cs deleted file mode 100644 index 0c38c5b..0000000 --- a/bc-sharp-crypto/src/asn1/util/FilterStream.cs +++ /dev/null @@ -1,83 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.Utilities -{ - [Obsolete("Use Org.BouncyCastle.Utilities.IO.FilterStream")] - public class FilterStream : Stream - { - [Obsolete("Use Org.BouncyCastle.Utilities.IO.FilterStream")] - public FilterStream(Stream s) - { - this.s = s; - } - public override bool CanRead - { - get { return s.CanRead; } - } - public override bool CanSeek - { - get { return s.CanSeek; } - } - public override bool CanWrite - { - get { return s.CanWrite; } - } - public override long Length - { - get { return s.Length; } - } - public override long Position - { - get { return s.Position; } - set { s.Position = value; } - } -#if PORTABLE - protected override void Dispose(bool disposing) - { - if (disposing) - { - Platform.Dispose(s); - } - base.Dispose(disposing); - } -#else - public override void Close() - { - Platform.Dispose(s); - base.Close(); - } -#endif - public override void Flush() - { - s.Flush(); - } - public override long Seek(long offset, SeekOrigin origin) - { - return s.Seek(offset, origin); - } - public override void SetLength(long value) - { - s.SetLength(value); - } - public override int Read(byte[] buffer, int offset, int count) - { - return s.Read(buffer, offset, count); - } - public override int ReadByte() - { - return s.ReadByte(); - } - public override void Write(byte[] buffer, int offset, int count) - { - s.Write(buffer, offset, count); - } - public override void WriteByte(byte value) - { - s.WriteByte(value); - } - protected readonly Stream s; - } -} diff --git a/bc-sharp-crypto/src/asn1/x500/DirectoryString.cs b/bc-sharp-crypto/src/asn1/x500/DirectoryString.cs deleted file mode 100644 index d907c64..0000000 --- a/bc-sharp-crypto/src/asn1/x500/DirectoryString.cs +++ /dev/null @@ -1,77 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X500 -{ - public class DirectoryString - : Asn1Encodable, IAsn1Choice, IAsn1String - { - private readonly DerStringBase str; - - public static DirectoryString GetInstance( - object obj) - { - if (obj is DirectoryString) - { - return (DirectoryString) obj; - } - - if (obj is DerStringBase) - { - if (obj is DerT61String - || obj is DerPrintableString - || obj is DerUniversalString - || obj is DerUtf8String - || obj is DerBmpString) - { - return new DirectoryString((DerStringBase) obj); - } - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public static DirectoryString GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - if (!isExplicit) - throw new ArgumentException("choice item must be explicitly tagged"); - - return GetInstance(obj.GetObject()); - } - - private DirectoryString( - DerStringBase str) - { - this.str = str; - } - - public DirectoryString( - string str) - { - this.str = new DerUtf8String(str); - } - - public string GetString() - { - return str.GetString(); - } - - /** - * 
-		 *  DirectoryString ::= CHOICE {
-		 *    teletexString               TeletexString (SIZE (1..MAX)),
-		 *    printableString             PrintableString (SIZE (1..MAX)),
-		 *    universalString             UniversalString (SIZE (1..MAX)),
-		 *    utf8String                  UTF8String (SIZE (1..MAX)),
-		 *    bmpString                   BMPString (SIZE (1..MAX))  }
-		 *
- */ - public override Asn1Object ToAsn1Object() - { - return str.ToAsn1Object(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/AccessDescription.cs b/bc-sharp-crypto/src/asn1/x509/AccessDescription.cs deleted file mode 100644 index 47374be..0000000 --- a/bc-sharp-crypto/src/asn1/x509/AccessDescription.cs +++ /dev/null @@ -1,85 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * The AccessDescription object. - * 
-	 * AccessDescription  ::=  SEQUENCE {
-	 *       accessMethod          OBJECT IDENTIFIER,
-	 *       accessLocation        GeneralName  }
-	 *
- */ - public class AccessDescription - : Asn1Encodable - { - public readonly static DerObjectIdentifier IdADCAIssuers = new DerObjectIdentifier("1.3.6.1.5.5.7.48.2"); - public readonly static DerObjectIdentifier IdADOcsp = new DerObjectIdentifier("1.3.6.1.5.5.7.48.1"); - - private readonly DerObjectIdentifier accessMethod; - private readonly GeneralName accessLocation; - - public static AccessDescription GetInstance( - object obj) - { - if (obj is AccessDescription) - return (AccessDescription) obj; - - if (obj is Asn1Sequence) - return new AccessDescription((Asn1Sequence) obj); - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - private AccessDescription( - Asn1Sequence seq) - { - if (seq.Count != 2) - throw new ArgumentException("wrong number of elements in sequence"); - - accessMethod = DerObjectIdentifier.GetInstance(seq[0]); - accessLocation = GeneralName.GetInstance(seq[1]); - } - - /** - * create an AccessDescription with the oid and location provided. - */ - public AccessDescription( - DerObjectIdentifier oid, - GeneralName location) - { - accessMethod = oid; - accessLocation = location; - } - - /** - * - * @return the access method. - */ - public DerObjectIdentifier AccessMethod - { - get { return accessMethod; } - } - - /** - * - * @return the access location - */ - public GeneralName AccessLocation - { - get { return accessLocation; } - } - - public override Asn1Object ToAsn1Object() - { - return new DerSequence(accessMethod, accessLocation); - } - - public override string ToString() - { - return "AccessDescription: Oid(" + this.accessMethod.Id + ")"; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/AlgorithmIdentifier.cs b/bc-sharp-crypto/src/asn1/x509/AlgorithmIdentifier.cs deleted file mode 100644 index 00e7ad8..0000000 --- a/bc-sharp-crypto/src/asn1/x509/AlgorithmIdentifier.cs +++ /dev/null @@ -1,96 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.X509 -{ - public class AlgorithmIdentifier - : Asn1Encodable - { - private readonly DerObjectIdentifier algorithm; - private readonly Asn1Encodable parameters; - - public static AlgorithmIdentifier GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static AlgorithmIdentifier GetInstance( - object obj) - { - if (obj == null) - return null; - if (obj is AlgorithmIdentifier) - return (AlgorithmIdentifier)obj; - return new AlgorithmIdentifier(Asn1Sequence.GetInstance(obj)); - } - - public AlgorithmIdentifier( - DerObjectIdentifier algorithm) - { - this.algorithm = algorithm; - } - - [Obsolete("Use version taking a DerObjectIdentifier")] - public AlgorithmIdentifier( - string algorithm) - { - this.algorithm = new DerObjectIdentifier(algorithm); - } - - public AlgorithmIdentifier( - DerObjectIdentifier algorithm, - Asn1Encodable parameters) - { - this.algorithm = algorithm; - this.parameters = parameters; - } - - internal AlgorithmIdentifier( - Asn1Sequence seq) - { - if (seq.Count < 1 || seq.Count > 2) - throw new ArgumentException("Bad sequence size: " + seq.Count); - - this.algorithm = DerObjectIdentifier.GetInstance(seq[0]); - this.parameters = seq.Count < 2 ? null : seq[1]; - } - - /// - /// Return the OID in the Algorithm entry of this identifier. - /// - public virtual DerObjectIdentifier Algorithm - { - get { return algorithm; } - } - - [Obsolete("Use 'Algorithm' property instead")] - public virtual DerObjectIdentifier ObjectID - { - get { return algorithm; } - } - - /// - /// Return the parameters structure in the Parameters entry of this identifier. - /// - public virtual Asn1Encodable Parameters - { - get { return parameters; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         *      AlgorithmIdentifier ::= Sequence {
-         *                            algorithm OBJECT IDENTIFIER,
-         *                            parameters ANY DEFINED BY algorithm OPTIONAL }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(algorithm); - v.AddOptional(parameters); - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/AttCertIssuer.cs b/bc-sharp-crypto/src/asn1/x509/AttCertIssuer.cs deleted file mode 100644 index 407c4ae..0000000 --- a/bc-sharp-crypto/src/asn1/x509/AttCertIssuer.cs +++ /dev/null @@ -1,86 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - public class AttCertIssuer - : Asn1Encodable, IAsn1Choice - { - internal readonly Asn1Encodable obj; - internal readonly Asn1Object choiceObj; - - public static AttCertIssuer GetInstance( - object obj) - { - if (obj is AttCertIssuer) - { - return (AttCertIssuer)obj; - } - else if (obj is V2Form) - { - return new AttCertIssuer(V2Form.GetInstance(obj)); - } - else if (obj is GeneralNames) - { - return new AttCertIssuer((GeneralNames)obj); - } - else if (obj is Asn1TaggedObject) - { - return new AttCertIssuer(V2Form.GetInstance((Asn1TaggedObject)obj, false)); - } - else if (obj is Asn1Sequence) - { - return new AttCertIssuer(GeneralNames.GetInstance(obj)); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public static AttCertIssuer GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - return GetInstance(obj.GetObject()); // must be explictly tagged - } - - /// - /// Don't use this one if you are trying to be RFC 3281 compliant. - /// Use it for v1 attribute certificates only. - /// - /// Our GeneralNames structure - public AttCertIssuer( - GeneralNames names) - { - obj = names; - choiceObj = obj.ToAsn1Object(); - } - - public AttCertIssuer( - V2Form v2Form) - { - obj = v2Form; - choiceObj = new DerTaggedObject(false, 0, obj); - } - - public Asn1Encodable Issuer - { - get { return obj; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         *  AttCertIssuer ::= CHOICE {
-         *       v1Form   GeneralNames,  -- MUST NOT be used in this
-         *                               -- profile
-         *       v2Form   [0] V2Form     -- v2 only
-         *  }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return choiceObj; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/AttCertValidityPeriod.cs b/bc-sharp-crypto/src/asn1/x509/AttCertValidityPeriod.cs deleted file mode 100644 index d31e074..0000000 --- a/bc-sharp-crypto/src/asn1/x509/AttCertValidityPeriod.cs +++ /dev/null @@ -1,78 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - public class AttCertValidityPeriod - : Asn1Encodable - { - private readonly DerGeneralizedTime notBeforeTime; - private readonly DerGeneralizedTime notAfterTime; - - public static AttCertValidityPeriod GetInstance( - object obj) - { - if (obj is AttCertValidityPeriod || obj == null) - { - return (AttCertValidityPeriod) obj; - } - - if (obj is Asn1Sequence) - { - return new AttCertValidityPeriod((Asn1Sequence) obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public static AttCertValidityPeriod GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - private AttCertValidityPeriod( - Asn1Sequence seq) - { - if (seq.Count != 2) - throw new ArgumentException("Bad sequence size: " + seq.Count); - - notBeforeTime = DerGeneralizedTime.GetInstance(seq[0]); - notAfterTime = DerGeneralizedTime.GetInstance(seq[1]); - } - - public AttCertValidityPeriod( - DerGeneralizedTime notBeforeTime, - DerGeneralizedTime notAfterTime) - { - this.notBeforeTime = notBeforeTime; - this.notAfterTime = notAfterTime; - } - - public DerGeneralizedTime NotBeforeTime - { - get { return notBeforeTime; } - } - - public DerGeneralizedTime NotAfterTime - { - get { return notAfterTime; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         *  AttCertValidityPeriod  ::= Sequence {
-         *       notBeforeTime  GeneralizedTime,
-         *       notAfterTime   GeneralizedTime
-         *  }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(notBeforeTime, notAfterTime); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/Attribute.cs b/bc-sharp-crypto/src/asn1/x509/Attribute.cs deleted file mode 100644 index da59b42..0000000 --- a/bc-sharp-crypto/src/asn1/x509/Attribute.cs +++ /dev/null @@ -1,82 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - public class AttributeX509 - : Asn1Encodable - { - private readonly DerObjectIdentifier attrType; - private readonly Asn1Set attrValues; - - /** - * return an Attr object from the given object. - * - * @param o the object we want converted. - * @exception ArgumentException if the object cannot be converted. - */ - public static AttributeX509 GetInstance( - object obj) - { - if (obj == null || obj is AttributeX509) - { - return (AttributeX509) obj; - } - - if (obj is Asn1Sequence) - { - return new AttributeX509((Asn1Sequence) obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - private AttributeX509( - Asn1Sequence seq) - { - if (seq.Count != 2) - throw new ArgumentException("Bad sequence size: " + seq.Count); - - attrType = DerObjectIdentifier.GetInstance(seq[0]); - attrValues = Asn1Set.GetInstance(seq[1]); - } - - public AttributeX509( - DerObjectIdentifier attrType, - Asn1Set attrValues) - { - this.attrType = attrType; - this.attrValues = attrValues; - } - - public DerObjectIdentifier AttrType - { - get { return attrType; } - } - - public Asn1Encodable[] GetAttributeValues() - { - return attrValues.ToArray(); - } - - public Asn1Set AttrValues - { - get { return attrValues; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * Attr ::= Sequence {
-         *     attrType OBJECT IDENTIFIER,
-         *     attrValues Set OF AttributeValue
-         * }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(attrType, attrValues); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/AttributeCertificate.cs b/bc-sharp-crypto/src/asn1/x509/AttributeCertificate.cs deleted file mode 100644 index 41893b6..0000000 --- a/bc-sharp-crypto/src/asn1/x509/AttributeCertificate.cs +++ /dev/null @@ -1,86 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; - -namespace Org.BouncyCastle.Asn1.X509 -{ - public class AttributeCertificate - : Asn1Encodable - { - private readonly AttributeCertificateInfo acinfo; - private readonly AlgorithmIdentifier signatureAlgorithm; - private readonly DerBitString signatureValue; - - /** - * @param obj - * @return - */ - public static AttributeCertificate GetInstance( - object obj) - { - if (obj is AttributeCertificate) - return (AttributeCertificate) obj; - - if (obj != null) - return new AttributeCertificate(Asn1Sequence.GetInstance(obj)); - - return null; - } - - public AttributeCertificate( - AttributeCertificateInfo acinfo, - AlgorithmIdentifier signatureAlgorithm, - DerBitString signatureValue) - { - this.acinfo = acinfo; - this.signatureAlgorithm = signatureAlgorithm; - this.signatureValue = signatureValue; - } - - private AttributeCertificate( - Asn1Sequence seq) - { - if (seq.Count != 3) - throw new ArgumentException("Bad sequence size: " + seq.Count); - - this.acinfo = AttributeCertificateInfo.GetInstance(seq[0]); - this.signatureAlgorithm = AlgorithmIdentifier.GetInstance(seq[1]); - this.signatureValue = DerBitString.GetInstance(seq[2]); - } - - public AttributeCertificateInfo ACInfo - { - get { return acinfo; } - } - - public AlgorithmIdentifier SignatureAlgorithm - { - get { return signatureAlgorithm; } - } - - public DerBitString SignatureValue - { - get { return signatureValue; } - } - - public byte[] GetSignatureOctets() - { - return signatureValue.GetOctets(); - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         *  AttributeCertificate ::= Sequence {
-         *       acinfo               AttributeCertificateInfo,
-         *       signatureAlgorithm   AlgorithmIdentifier,
-         *       signatureValue       BIT STRING
-         *  }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(acinfo, signatureAlgorithm, signatureValue); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/AttributeCertificateInfo.cs b/bc-sharp-crypto/src/asn1/x509/AttributeCertificateInfo.cs deleted file mode 100644 index 526f8e6..0000000 --- a/bc-sharp-crypto/src/asn1/x509/AttributeCertificateInfo.cs +++ /dev/null @@ -1,156 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - public class AttributeCertificateInfo - : Asn1Encodable - { - internal readonly DerInteger version; - internal readonly Holder holder; - internal readonly AttCertIssuer issuer; - internal readonly AlgorithmIdentifier signature; - internal readonly DerInteger serialNumber; - internal readonly AttCertValidityPeriod attrCertValidityPeriod; - internal readonly Asn1Sequence attributes; - internal readonly DerBitString issuerUniqueID; - internal readonly X509Extensions extensions; - - public static AttributeCertificateInfo GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - return GetInstance(Asn1Sequence.GetInstance(obj, isExplicit)); - } - - public static AttributeCertificateInfo GetInstance( - object obj) - { - if (obj is AttributeCertificateInfo) - { - return (AttributeCertificateInfo) obj; - } - - if (obj is Asn1Sequence) - { - return new AttributeCertificateInfo((Asn1Sequence) obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - private AttributeCertificateInfo( - Asn1Sequence seq) - { - if (seq.Count < 7 || seq.Count > 9) - { - throw new ArgumentException("Bad sequence size: " + seq.Count); - } - - this.version = DerInteger.GetInstance(seq[0]); - this.holder = Holder.GetInstance(seq[1]); - this.issuer = AttCertIssuer.GetInstance(seq[2]); - this.signature = AlgorithmIdentifier.GetInstance(seq[3]); - this.serialNumber = DerInteger.GetInstance(seq[4]); - this.attrCertValidityPeriod = AttCertValidityPeriod.GetInstance(seq[5]); - this.attributes = Asn1Sequence.GetInstance(seq[6]); - - for (int i = 7; i < seq.Count; i++) - { - Asn1Encodable obj = (Asn1Encodable) seq[i]; - - if (obj is DerBitString) - { - this.issuerUniqueID = DerBitString.GetInstance(seq[i]); - } - else if (obj is Asn1Sequence || obj is X509Extensions) - { - this.extensions = X509Extensions.GetInstance(seq[i]); - } - } - } - - public DerInteger Version - { - get { return version; } - } - - public Holder Holder - { - get { return holder; } - } - - public AttCertIssuer Issuer - { - get { return issuer; } - } - - public AlgorithmIdentifier Signature - { - get { return signature; } - } - - public DerInteger SerialNumber - { - get { return serialNumber; } - } - - public AttCertValidityPeriod AttrCertValidityPeriod - { - get { return attrCertValidityPeriod; } - } - - public Asn1Sequence Attributes - { - get { return attributes; } - } - - public DerBitString IssuerUniqueID - { - get { return issuerUniqueID; } - } - - public X509Extensions Extensions - { - get { return extensions; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         *  AttributeCertificateInfo ::= Sequence {
-         *       version              AttCertVersion -- version is v2,
-         *       holder               Holder,
-         *       issuer               AttCertIssuer,
-         *       signature            AlgorithmIdentifier,
-         *       serialNumber         CertificateSerialNumber,
-         *       attrCertValidityPeriod   AttCertValidityPeriod,
-         *       attributes           Sequence OF Attr,
-         *       issuerUniqueID       UniqueIdentifier OPTIONAL,
-         *       extensions           Extensions OPTIONAL
-         *  }
-         *
-         *  AttCertVersion ::= Integer { v2(1) }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector( - version, holder, issuer, signature, serialNumber, - attrCertValidityPeriod, attributes); - - if (issuerUniqueID != null) - { - v.Add(issuerUniqueID); - } - - if (extensions != null) - { - v.Add(extensions); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/AttributeTable.cs b/bc-sharp-crypto/src/asn1/x509/AttributeTable.cs deleted file mode 100644 index 33faad6..0000000 --- a/bc-sharp-crypto/src/asn1/x509/AttributeTable.cs +++ /dev/null @@ -1,73 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - public class AttributeTable - { - private readonly IDictionary attributes; - - public AttributeTable( - IDictionary attrs) - { - this.attributes = Platform.CreateHashtable(attrs); - } - -#if !(SILVERLIGHT || PORTABLE) - [Obsolete] - public AttributeTable( - Hashtable attrs) - { - this.attributes = Platform.CreateHashtable(attrs); - } -#endif - - public AttributeTable( - Asn1EncodableVector v) - { - this.attributes = Platform.CreateHashtable(v.Count); - - for (int i = 0; i != v.Count; i++) - { - AttributeX509 a = AttributeX509.GetInstance(v[i]); - - attributes.Add(a.AttrType, a); - } - } - - public AttributeTable( - Asn1Set s) - { - this.attributes = Platform.CreateHashtable(s.Count); - - for (int i = 0; i != s.Count; i++) - { - AttributeX509 a = AttributeX509.GetInstance(s[i]); - - attributes.Add(a.AttrType, a); - } - } - - public AttributeX509 Get( - DerObjectIdentifier oid) - { - return (AttributeX509) attributes[oid]; - } - -#if !(SILVERLIGHT || PORTABLE) - [Obsolete("Use 'ToDictionary' instead")] - public Hashtable ToHashtable() - { - return new Hashtable(attributes); - } -#endif - - public IDictionary ToDictionary() - { - return Platform.CreateHashtable(attributes); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/AuthorityInformationAccess.cs b/bc-sharp-crypto/src/asn1/x509/AuthorityInformationAccess.cs deleted file mode 100644 index 9329e2b..0000000 --- a/bc-sharp-crypto/src/asn1/x509/AuthorityInformationAccess.cs +++ /dev/null @@ -1,98 +0,0 @@ -using System; -using System.Collections; -using System.Text; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * The AuthorityInformationAccess object. - * 
-     * id-pe-authorityInfoAccess OBJECT IDENTIFIER ::= { id-pe 1 }
-     *
-     * AuthorityInfoAccessSyntax  ::=
-     *      Sequence SIZE (1..MAX) OF AccessDescription
-     * AccessDescription  ::=  Sequence {
-     *       accessMethod          OBJECT IDENTIFIER,
-     *       accessLocation        GeneralName  }
-     *
-     * id-ad OBJECT IDENTIFIER ::= { id-pkix 48 }
-     * id-ad-caIssuers OBJECT IDENTIFIER ::= { id-ad 2 }
-     * id-ad-ocsp OBJECT IDENTIFIER ::= { id-ad 1 }
-     *
- */ - public class AuthorityInformationAccess - : Asn1Encodable - { - private readonly AccessDescription[] descriptions; - - public static AuthorityInformationAccess GetInstance(object obj) - { - if (obj is AuthorityInformationAccess) - return (AuthorityInformationAccess)obj; - if (obj == null) - return null; - return new AuthorityInformationAccess(Asn1Sequence.GetInstance(obj)); - } - - private AuthorityInformationAccess( - Asn1Sequence seq) - { - if (seq.Count < 1) - throw new ArgumentException("sequence may not be empty"); - - this.descriptions = new AccessDescription[seq.Count]; - - for (int i = 0; i < seq.Count; ++i) - { - descriptions[i] = AccessDescription.GetInstance(seq[i]); - } - } - - public AuthorityInformationAccess( - AccessDescription description) - { - this.descriptions = new AccessDescription[]{ description }; - } - - /** - * create an AuthorityInformationAccess with the oid and location provided. - */ - public AuthorityInformationAccess(DerObjectIdentifier oid, GeneralName location) - : this(new AccessDescription(oid, location)) - { - } - - public AccessDescription[] GetAccessDescriptions() - { - return (AccessDescription[])descriptions.Clone(); - } - - public override Asn1Object ToAsn1Object() - { - return new DerSequence(descriptions); - } - - public override string ToString() - { - //return "AuthorityInformationAccess: Oid(" + this.descriptions[0].AccessMethod.Id + ")"; - - StringBuilder buf = new StringBuilder(); - string sep = Platform.NewLine; - - buf.Append("AuthorityInformationAccess:"); - buf.Append(sep); - - foreach (AccessDescription description in descriptions) - { - buf.Append(" "); - buf.Append(description); - buf.Append(sep); - } - - return buf.ToString(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/AuthorityKeyIdentifier.cs b/bc-sharp-crypto/src/asn1/x509/AuthorityKeyIdentifier.cs deleted file mode 100644 index d5a9048..0000000 --- a/bc-sharp-crypto/src/asn1/x509/AuthorityKeyIdentifier.cs +++ /dev/null @@ -1,211 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * The AuthorityKeyIdentifier object. - * 
-     * id-ce-authorityKeyIdentifier OBJECT IDENTIFIER ::=  { id-ce 35 }
-     *
-     *   AuthorityKeyIdentifier ::= Sequence {
-     *      keyIdentifier             [0] IMPLICIT KeyIdentifier           OPTIONAL,
-     *      authorityCertIssuer       [1] IMPLICIT GeneralNames            OPTIONAL,
-     *      authorityCertSerialNumber [2] IMPLICIT CertificateSerialNumber OPTIONAL  }
-     *
-     *   KeyIdentifier ::= OCTET STRING
-     *
- * - */ - public class AuthorityKeyIdentifier - : Asn1Encodable - { - internal readonly Asn1OctetString keyidentifier; - internal readonly GeneralNames certissuer; - internal readonly DerInteger certserno; - - public static AuthorityKeyIdentifier GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static AuthorityKeyIdentifier GetInstance( - object obj) - { - if (obj is AuthorityKeyIdentifier) - { - return (AuthorityKeyIdentifier) obj; - } - - if (obj is Asn1Sequence) - { - return new AuthorityKeyIdentifier((Asn1Sequence) obj); - } - - if (obj is X509Extension) - { - return GetInstance(X509Extension.ConvertValueToObject((X509Extension) obj)); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - protected internal AuthorityKeyIdentifier( - Asn1Sequence seq) - { - foreach (Asn1TaggedObject o in seq) - { - switch (o.TagNo) - { - case 0: - this.keyidentifier = Asn1OctetString.GetInstance(o, false); - break; - case 1: - this.certissuer = GeneralNames.GetInstance(o, false); - break; - case 2: - this.certserno = DerInteger.GetInstance(o, false); - break; - default: - throw new ArgumentException("illegal tag"); - } - } - } - - /** - * - * Calulates the keyidentifier using a SHA1 hash over the BIT STRING - * from SubjectPublicKeyInfo as defined in RFC2459. - * - * Example of making a AuthorityKeyIdentifier: - * 
-	     *   SubjectPublicKeyInfo apki = new SubjectPublicKeyInfo((ASN1Sequence)new ASN1InputStream(
-		 *       publicKey.getEncoded()).readObject());
-         *   AuthorityKeyIdentifier aki = new AuthorityKeyIdentifier(apki);
-         *
- * - **/ - public AuthorityKeyIdentifier( - SubjectPublicKeyInfo spki) - { - IDigest digest = new Sha1Digest(); - byte[] resBuf = new byte[digest.GetDigestSize()]; - - byte[] bytes = spki.PublicKeyData.GetBytes(); - digest.BlockUpdate(bytes, 0, bytes.Length); - digest.DoFinal(resBuf, 0); - this.keyidentifier = new DerOctetString(resBuf); - } - - /** - * create an AuthorityKeyIdentifier with the GeneralNames tag and - * the serial number provided as well. - */ - public AuthorityKeyIdentifier( - SubjectPublicKeyInfo spki, - GeneralNames name, - BigInteger serialNumber) - { - IDigest digest = new Sha1Digest(); - byte[] resBuf = new byte[digest.GetDigestSize()]; - - byte[] bytes = spki.PublicKeyData.GetBytes(); - digest.BlockUpdate(bytes, 0, bytes.Length); - digest.DoFinal(resBuf, 0); - - this.keyidentifier = new DerOctetString(resBuf); - this.certissuer = name; - this.certserno = new DerInteger(serialNumber); - } - - /** - * create an AuthorityKeyIdentifier with the GeneralNames tag and - * the serial number provided. - */ - public AuthorityKeyIdentifier( - GeneralNames name, - BigInteger serialNumber) - { - this.keyidentifier = null; - this.certissuer = GeneralNames.GetInstance(name.ToAsn1Object()); - this.certserno = new DerInteger(serialNumber); - } - - /** - * create an AuthorityKeyIdentifier with a precomputed key identifier - */ - public AuthorityKeyIdentifier( - byte[] keyIdentifier) - { - this.keyidentifier = new DerOctetString(keyIdentifier); - this.certissuer = null; - this.certserno = null; - } - - /** - * create an AuthorityKeyIdentifier with a precomupted key identifier - * and the GeneralNames tag and the serial number provided as well. - */ - public AuthorityKeyIdentifier( - byte[] keyIdentifier, - GeneralNames name, - BigInteger serialNumber) - { - this.keyidentifier = new DerOctetString(keyIdentifier); - this.certissuer = GeneralNames.GetInstance(name.ToAsn1Object()); - this.certserno = new DerInteger(serialNumber); - } - - public byte[] GetKeyIdentifier() - { - return keyidentifier == null ? null : keyidentifier.GetOctets(); - } - - public GeneralNames AuthorityCertIssuer - { - get { return certissuer; } - } - - public BigInteger AuthorityCertSerialNumber - { - get { return certserno == null ? null : certserno.Value; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - if (keyidentifier != null) - { - v.Add(new DerTaggedObject(false, 0, keyidentifier)); - } - - if (certissuer != null) - { - v.Add(new DerTaggedObject(false, 1, certissuer)); - } - - if (certserno != null) - { - v.Add(new DerTaggedObject(false, 2, certserno)); - } - - return new DerSequence(v); - } - - public override string ToString() - { - return ("AuthorityKeyIdentifier: KeyID(" + this.keyidentifier.GetOctets() + ")"); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/BasicConstraints.cs b/bc-sharp-crypto/src/asn1/x509/BasicConstraints.cs deleted file mode 100644 index 098801f..0000000 --- a/bc-sharp-crypto/src/asn1/x509/BasicConstraints.cs +++ /dev/null @@ -1,133 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - public class BasicConstraints - : Asn1Encodable - { - private readonly DerBoolean cA; - private readonly DerInteger pathLenConstraint; - - public static BasicConstraints GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static BasicConstraints GetInstance( - object obj) - { - if (obj == null || obj is BasicConstraints) - { - return (BasicConstraints) obj; - } - - if (obj is Asn1Sequence) - { - return new BasicConstraints((Asn1Sequence) obj); - } - - if (obj is X509Extension) - { - return GetInstance(X509Extension.ConvertValueToObject((X509Extension) obj)); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - private BasicConstraints( - Asn1Sequence seq) - { - if (seq.Count > 0) - { - if (seq[0] is DerBoolean) - { - this.cA = DerBoolean.GetInstance(seq[0]); - } - else - { - this.pathLenConstraint = DerInteger.GetInstance(seq[0]); - } - - if (seq.Count > 1) - { - if (this.cA == null) - throw new ArgumentException("wrong sequence in constructor", "seq"); - - this.pathLenConstraint = DerInteger.GetInstance(seq[1]); - } - } - } - - public BasicConstraints( - bool cA) - { - if (cA) - { - this.cA = DerBoolean.True; - } - } - - /** - * create a cA=true object for the given path length constraint. - * - * @param pathLenConstraint - */ - public BasicConstraints( - int pathLenConstraint) - { - this.cA = DerBoolean.True; - this.pathLenConstraint = new DerInteger(pathLenConstraint); - } - - public bool IsCA() - { - return cA != null && cA.IsTrue; - } - - public BigInteger PathLenConstraint - { - get { return pathLenConstraint == null ? null : pathLenConstraint.Value; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * BasicConstraints := Sequence {
-         *    cA                  Boolean DEFAULT FALSE,
-         *    pathLenConstraint   Integer (0..MAX) OPTIONAL
-         * }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - if (cA != null) - { - v.Add(cA); - } - - if (pathLenConstraint != null) // yes some people actually do this when cA is false... - { - v.Add(pathLenConstraint); - } - - return new DerSequence(v); - } - - public override string ToString() - { - if (pathLenConstraint == null) - { - return "BasicConstraints: isCa(" + this.IsCA() + ")"; - } - - return "BasicConstraints: isCa(" + this.IsCA() + "), pathLenConstraint = " + pathLenConstraint.Value; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/CRLDistPoint.cs b/bc-sharp-crypto/src/asn1/x509/CRLDistPoint.cs deleted file mode 100644 index 56ba79c..0000000 --- a/bc-sharp-crypto/src/asn1/x509/CRLDistPoint.cs +++ /dev/null @@ -1,93 +0,0 @@ -using System; -using System.Text; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - public class CrlDistPoint - : Asn1Encodable - { - internal readonly Asn1Sequence seq; - - public static CrlDistPoint GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static CrlDistPoint GetInstance( - object obj) - { - if (obj is CrlDistPoint || obj == null) - { - return (CrlDistPoint) obj; - } - - if (obj is Asn1Sequence) - { - return new CrlDistPoint((Asn1Sequence) obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - private CrlDistPoint( - Asn1Sequence seq) - { - this.seq = seq; - } - - public CrlDistPoint( - DistributionPoint[] points) - { - seq = new DerSequence(points); - } - - /** - * Return the distribution points making up the sequence. - * - * @return DistributionPoint[] - */ - public DistributionPoint[] GetDistributionPoints() - { - DistributionPoint[] dp = new DistributionPoint[seq.Count]; - - for (int i = 0; i != seq.Count; ++i) - { - dp[i] = DistributionPoint.GetInstance(seq[i]); - } - - return dp; - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * CrlDistPoint ::= Sequence SIZE {1..MAX} OF DistributionPoint
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return seq; - } - - public override string ToString() - { - StringBuilder buf = new StringBuilder(); - string sep = Platform.NewLine; - - buf.Append("CRLDistPoint:"); - buf.Append(sep); - DistributionPoint[] dp = GetDistributionPoints(); - for (int i = 0; i != dp.Length; i++) - { - buf.Append(" "); - buf.Append(dp[i]); - buf.Append(sep); - } - return buf.ToString(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/CRLNumber.cs b/bc-sharp-crypto/src/asn1/x509/CRLNumber.cs deleted file mode 100644 index d744416..0000000 --- a/bc-sharp-crypto/src/asn1/x509/CRLNumber.cs +++ /dev/null @@ -1,30 +0,0 @@ -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * The CRLNumber object. - * 
-     * CRLNumber::= Integer(0..MAX)
-     *
- */ - public class CrlNumber - : DerInteger - { - public CrlNumber( - BigInteger number) - : base(number) - { - } - - public BigInteger Number - { - get { return PositiveValue; } - } - - public override string ToString() - { - return "CRLNumber: " + Number; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/CRLReason.cs b/bc-sharp-crypto/src/asn1/x509/CRLReason.cs deleted file mode 100644 index e8eb53a..0000000 --- a/bc-sharp-crypto/src/asn1/x509/CRLReason.cs +++ /dev/null @@ -1,61 +0,0 @@ -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * The CRLReason enumeration. - * 
-     * CRLReason ::= Enumerated {
-     *  unspecified             (0),
-     *  keyCompromise           (1),
-     *  cACompromise            (2),
-     *  affiliationChanged      (3),
-     *  superseded              (4),
-     *  cessationOfOperation    (5),
-     *  certificateHold         (6),
-     *  removeFromCRL           (8),
-     *  privilegeWithdrawn      (9),
-     *  aACompromise           (10)
-     * }
-     *
- */ - public class CrlReason - : DerEnumerated - { - public const int Unspecified = 0; - public const int KeyCompromise = 1; - public const int CACompromise = 2; - public const int AffiliationChanged = 3; - public const int Superseded = 4; - public const int CessationOfOperation = 5; - public const int CertificateHold = 6; - // 7 -> Unknown - public const int RemoveFromCrl = 8; - public const int PrivilegeWithdrawn = 9; - public const int AACompromise = 10; - - private static readonly string[] ReasonString = new string[] - { - "Unspecified", "KeyCompromise", "CACompromise", "AffiliationChanged", - "Superseded", "CessationOfOperation", "CertificateHold", "Unknown", - "RemoveFromCrl", "PrivilegeWithdrawn", "AACompromise" - }; - - public CrlReason( - int reason) - : base(reason) - { - } - - public CrlReason( - DerEnumerated reason) - : base(reason.Value.IntValue) - { - } - - public override string ToString() - { - int reason = Value.IntValue; - string str = (reason < 0 || reason > 10) ? "Invalid" : ReasonString[reason]; - return "CrlReason: " + str; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/CertPolicyId.cs b/bc-sharp-crypto/src/asn1/x509/CertPolicyId.cs deleted file mode 100644 index 11cebcd..0000000 --- a/bc-sharp-crypto/src/asn1/x509/CertPolicyId.cs +++ /dev/null @@ -1,20 +0,0 @@ -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * CertPolicyId, used in the CertificatePolicies and PolicyMappings - * X509V3 Extensions. - * - * 
-     *     CertPolicyId ::= OBJECT IDENTIFIER
-     *
- */ - public class CertPolicyID - : DerObjectIdentifier - { - public CertPolicyID( - string id) - : base(id) - { - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/CertificateList.cs b/bc-sharp-crypto/src/asn1/x509/CertificateList.cs deleted file mode 100644 index 567cf13..0000000 --- a/bc-sharp-crypto/src/asn1/x509/CertificateList.cs +++ /dev/null @@ -1,113 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * PKIX RFC-2459 - * - * The X.509 v2 CRL syntax is as follows. For signature calculation, - * the data that is to be signed is ASN.1 Der encoded. - * - * 
-     * CertificateList  ::=  Sequence  {
-     *      tbsCertList          TbsCertList,
-     *      signatureAlgorithm   AlgorithmIdentifier,
-     *      signatureValue       BIT STRING  }
-     *
- */ - public class CertificateList - : Asn1Encodable - { - private readonly TbsCertificateList tbsCertList; - private readonly AlgorithmIdentifier sigAlgID; - private readonly DerBitString sig; - - public static CertificateList GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static CertificateList GetInstance( - object obj) - { - if (obj is CertificateList) - return (CertificateList) obj; - - if (obj != null) - return new CertificateList(Asn1Sequence.GetInstance(obj)); - - return null; - } - - private CertificateList( - Asn1Sequence seq) - { - if (seq.Count != 3) - throw new ArgumentException("sequence wrong size for CertificateList", "seq"); - - tbsCertList = TbsCertificateList.GetInstance(seq[0]); - sigAlgID = AlgorithmIdentifier.GetInstance(seq[1]); - sig = DerBitString.GetInstance(seq[2]); - } - - public TbsCertificateList TbsCertList - { - get { return tbsCertList; } - } - - public CrlEntry[] GetRevokedCertificates() - { - return tbsCertList.GetRevokedCertificates(); - } - - public IEnumerable GetRevokedCertificateEnumeration() - { - return tbsCertList.GetRevokedCertificateEnumeration(); - } - - public AlgorithmIdentifier SignatureAlgorithm - { - get { return sigAlgID; } - } - - public DerBitString Signature - { - get { return sig; } - } - - public byte[] GetSignatureOctets() - { - return sig.GetOctets(); - } - - public int Version - { - get { return tbsCertList.Version; } - } - - public X509Name Issuer - { - get { return tbsCertList.Issuer; } - } - - public Time ThisUpdate - { - get { return tbsCertList.ThisUpdate; } - } - - public Time NextUpdate - { - get { return tbsCertList.NextUpdate; } - } - - public override Asn1Object ToAsn1Object() - { - return new DerSequence(tbsCertList, sigAlgID, sig); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/CertificatePair.cs b/bc-sharp-crypto/src/asn1/x509/CertificatePair.cs deleted file mode 100644 index da92360..0000000 --- a/bc-sharp-crypto/src/asn1/x509/CertificatePair.cs +++ /dev/null @@ -1,162 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * This class helps to support crossCerfificatePairs in a LDAP directory - * according RFC 2587 - * - * 
-	*     crossCertificatePairATTRIBUTE::={
-	*       WITH SYNTAX   CertificatePair
-	*       EQUALITY MATCHING RULE certificatePairExactMatch
-	*       ID joint-iso-ccitt(2) ds(5) attributeType(4) crossCertificatePair(40)}
-	*
- * - *
The forward elements of the crossCertificatePair attribute of a - * CA's directory entry shall be used to store all, except self-issued - * certificates issued to this CA. Optionally, the reverse elements of the - * crossCertificatePair attribute, of a CA's directory entry may contain a - * subset of certificates issued by this CA to other CAs. When both the forward - * and the reverse elements are present in a single attribute value, issuer name - * in one certificate shall match the subject name in the other and vice versa, - * and the subject public key in one certificate shall be capable of verifying - * the digital signature on the other certificate and vice versa. - * - * When a reverse element is present, the forward element value and the reverse - * element value need not be stored in the same attribute value; in other words, - * they can be stored in either a single attribute value or two attribute - * values.
- * - * 
-	*       CertificatePair ::= SEQUENCE {
-	*         forward		[0]	Certificate OPTIONAL,
-	*         reverse		[1]	Certificate OPTIONAL,
-	*         -- at least one of the pair shall be present -- }
-	*
- */ - public class CertificatePair - : Asn1Encodable - { - private X509CertificateStructure forward, reverse; - - public static CertificatePair GetInstance( - object obj) - { - if (obj == null || obj is CertificatePair) - { - return (CertificatePair) obj; - } - - if (obj is Asn1Sequence) - { - return new CertificatePair((Asn1Sequence) obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - /** - * Constructor from Asn1Sequence. - *

- * The sequence is of type CertificatePair: - *

- * 

-		*       CertificatePair ::= SEQUENCE {
-		*         forward		[0]	Certificate OPTIONAL,
-		*         reverse		[1]	Certificate OPTIONAL,
-		*         -- at least one of the pair shall be present -- }
-		*
- * - * @param seq The ASN.1 sequence. - */ - private CertificatePair( - Asn1Sequence seq) - { - if (seq.Count != 1 && seq.Count != 2) - { - throw new ArgumentException("Bad sequence size: " + seq.Count, "seq"); - } - - foreach (object obj in seq) - { - Asn1TaggedObject o = Asn1TaggedObject.GetInstance(obj); - if (o.TagNo == 0) - { - forward = X509CertificateStructure.GetInstance(o, true); - } - else if (o.TagNo == 1) - { - reverse = X509CertificateStructure.GetInstance(o, true); - } - else - { - throw new ArgumentException("Bad tag number: " + o.TagNo); - } - } - } - - /** - * Constructor from a given details. - * - * @param forward Certificates issued to this CA. - * @param reverse Certificates issued by this CA to other CAs. - */ - public CertificatePair( - X509CertificateStructure forward, - X509CertificateStructure reverse) - { - this.forward = forward; - this.reverse = reverse; - } - - /** - * Produce an object suitable for an Asn1OutputStream. - *

- * Returns: - *

- * 

-		*       CertificatePair ::= SEQUENCE {
-		*         forward		[0]	Certificate OPTIONAL,
-		*         reverse		[1]	Certificate OPTIONAL,
-		*         -- at least one of the pair shall be present -- }
-		*
- * - * @return a DERObject - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector vec = new Asn1EncodableVector(); - - if (forward != null) - { - vec.Add(new DerTaggedObject(0, forward)); - } - - if (reverse != null) - { - vec.Add(new DerTaggedObject(1, reverse)); - } - - return new DerSequence(vec); - } - - /** - * @return Returns the forward. - */ - public X509CertificateStructure Forward - { - get { return forward; } - } - - /** - * @return Returns the reverse. - */ - public X509CertificateStructure Reverse - { - get { return reverse; } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/CertificatePolicies.cs b/bc-sharp-crypto/src/asn1/x509/CertificatePolicies.cs deleted file mode 100644 index a83565b..0000000 --- a/bc-sharp-crypto/src/asn1/x509/CertificatePolicies.cs +++ /dev/null @@ -1,81 +0,0 @@ -using System; -using System.Text; - -namespace Org.BouncyCastle.Asn1.X509 -{ - public class CertificatePolicies - : Asn1Encodable - { - private readonly PolicyInformation[] policyInformation; - - public static CertificatePolicies GetInstance(object obj) - { - if (obj == null || obj is CertificatePolicies) - return (CertificatePolicies)obj; - - return new CertificatePolicies(Asn1Sequence.GetInstance(obj)); - } - - public static CertificatePolicies GetInstance(Asn1TaggedObject obj, bool isExplicit) - { - return GetInstance(Asn1Sequence.GetInstance(obj, isExplicit)); - } - - /** - * Construct a CertificatePolicies object containing one PolicyInformation. - * - * @param name the name to be contained. - */ - public CertificatePolicies(PolicyInformation name) - { - this.policyInformation = new PolicyInformation[] { name }; - } - - public CertificatePolicies(PolicyInformation[] policyInformation) - { - this.policyInformation = policyInformation; - } - - private CertificatePolicies(Asn1Sequence seq) - { - this.policyInformation = new PolicyInformation[seq.Count]; - - for (int i = 0; i < seq.Count; ++i) - { - policyInformation[i] = PolicyInformation.GetInstance(seq[i]); - } - } - - public virtual PolicyInformation[] GetPolicyInformation() - { - return (PolicyInformation[])policyInformation.Clone(); - } - - /** - * Produce an object suitable for an ASN1OutputStream. - * 
-         * CertificatePolicies ::= SEQUENCE SIZE {1..MAX} OF PolicyInformation
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(policyInformation); - } - - public override string ToString() - { - StringBuilder sb = new StringBuilder("CertificatePolicies:"); - if (policyInformation != null && policyInformation.Length > 0) - { - sb.Append(' '); - sb.Append(policyInformation[0]); - for (int i = 1; i < policyInformation.Length; ++i) - { - sb.Append(", "); - sb.Append(policyInformation[i]); - } - } - return sb.ToString(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/DSAParameter.cs b/bc-sharp-crypto/src/asn1/x509/DSAParameter.cs deleted file mode 100644 index 2eb6502..0000000 --- a/bc-sharp-crypto/src/asn1/x509/DSAParameter.cs +++ /dev/null @@ -1,78 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - public class DsaParameter - : Asn1Encodable - { - internal readonly DerInteger p, q, g; - - public static DsaParameter GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static DsaParameter GetInstance( - object obj) - { - if(obj == null || obj is DsaParameter) - { - return (DsaParameter) obj; - } - - if(obj is Asn1Sequence) - { - return new DsaParameter((Asn1Sequence) obj); - } - - throw new ArgumentException("Invalid DsaParameter: " + Platform.GetTypeName(obj)); - } - - public DsaParameter( - BigInteger p, - BigInteger q, - BigInteger g) - { - this.p = new DerInteger(p); - this.q = new DerInteger(q); - this.g = new DerInteger(g); - } - - private DsaParameter( - Asn1Sequence seq) - { - if (seq.Count != 3) - throw new ArgumentException("Bad sequence size: " + seq.Count, "seq"); - - this.p = DerInteger.GetInstance(seq[0]); - this.q = DerInteger.GetInstance(seq[1]); - this.g = DerInteger.GetInstance(seq[2]); - } - - public BigInteger P - { - get { return p.PositiveValue; } - } - - public BigInteger Q - { - get { return q.PositiveValue; } - } - - public BigInteger G - { - get { return g.PositiveValue; } - } - - public override Asn1Object ToAsn1Object() - { - return new DerSequence(p, q, g); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/DigestInfo.cs b/bc-sharp-crypto/src/asn1/x509/DigestInfo.cs deleted file mode 100644 index 3ac535e..0000000 --- a/bc-sharp-crypto/src/asn1/x509/DigestInfo.cs +++ /dev/null @@ -1,78 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * The DigestInfo object. - * 
-     * DigestInfo::=Sequence{
-     *          digestAlgorithm  AlgorithmIdentifier,
-     *          digest OCTET STRING }
-     *
- */ - public class DigestInfo - : Asn1Encodable - { - private readonly byte[] digest; - private readonly AlgorithmIdentifier algID; - - public static DigestInfo GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static DigestInfo GetInstance( - object obj) - { - if (obj is DigestInfo) - { - return (DigestInfo) obj; - } - - if (obj is Asn1Sequence) - { - return new DigestInfo((Asn1Sequence) obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public DigestInfo( - AlgorithmIdentifier algID, - byte[] digest) - { - this.digest = digest; - this.algID = algID; - } - - private DigestInfo( - Asn1Sequence seq) - { - if (seq.Count != 2) - throw new ArgumentException("Wrong number of elements in sequence", "seq"); - - algID = AlgorithmIdentifier.GetInstance(seq[0]); - digest = Asn1OctetString.GetInstance(seq[1]).GetOctets(); - } - - public AlgorithmIdentifier AlgorithmID - { - get { return algID; } - } - - public byte[] GetDigest() - { - return digest; - } - - public override Asn1Object ToAsn1Object() - { - return new DerSequence(algID, new DerOctetString(digest)); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/DisplayText.cs b/bc-sharp-crypto/src/asn1/x509/DisplayText.cs deleted file mode 100644 index 39b3c98..0000000 --- a/bc-sharp-crypto/src/asn1/x509/DisplayText.cs +++ /dev/null @@ -1,174 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * DisplayText class, used in - * CertificatePolicies X509 V3 extensions (in policy qualifiers). - * - *

It stores a string in a chosen encoding. - * 

-	 * DisplayText ::= CHOICE {
-	 *      ia5String        IA5String      (SIZE (1..200)),
-	 *      visibleString    VisibleString  (SIZE (1..200)),
-	 *      bmpString        BMPString      (SIZE (1..200)),
-	 *      utf8String       UTF8String     (SIZE (1..200)) }
-	 *

- * @see PolicyQualifierInfo - * @see PolicyInformation - */ - public class DisplayText - : Asn1Encodable, IAsn1Choice - { - /** - * Constant corresponding to ia5String encoding. - * - */ - public const int ContentTypeIA5String = 0; - /** - * Constant corresponding to bmpString encoding. - * - */ - public const int ContentTypeBmpString = 1; - /** - * Constant corresponding to utf8String encoding. - * - */ - public const int ContentTypeUtf8String = 2; - /** - * Constant corresponding to visibleString encoding. - * - */ - public const int ContentTypeVisibleString = 3; - /** - * Describe constant DisplayTextMaximumSize here. - * - */ - public const int DisplayTextMaximumSize = 200; - - internal readonly int contentType; - internal readonly IAsn1String contents; - - /** - * Creates a new DisplayText instance. - * - * @param type the desired encoding type for the text. - * @param text the text to store. Strings longer than 200 - * characters are truncated. - */ - public DisplayText( - int type, - string text) - { - if (text.Length > DisplayTextMaximumSize) - { - // RFC3280 limits these strings to 200 chars - // truncate the string - text = text.Substring(0, DisplayTextMaximumSize); - } - - contentType = type; - switch (type) - { - case ContentTypeIA5String: - contents = (IAsn1String)new DerIA5String (text); - break; - case ContentTypeUtf8String: - contents = (IAsn1String)new DerUtf8String(text); - break; - case ContentTypeVisibleString: - contents = (IAsn1String)new DerVisibleString(text); - break; - case ContentTypeBmpString: - contents = (IAsn1String)new DerBmpString(text); - break; - default: - contents = (IAsn1String)new DerUtf8String(text); - break; - } - } - -// /** -// * return true if the passed in string can be represented without -// * loss as a PrintableString, false otherwise. -// */ -// private bool CanBePrintable( -// string str) -// { -// for (int i = str.Length - 1; i >= 0; i--) -// { -// if (str[i] > 0x007f) -// { -// return false; -// } -// } -// -// return true; -// } - - /** - * Creates a new DisplayText instance. - * - * @param text the text to encapsulate. Strings longer than 200 - * characters are truncated. - */ - public DisplayText( - string text) - { - // by default use UTF8String - if (text.Length > DisplayTextMaximumSize) - { - text = text.Substring(0, DisplayTextMaximumSize); - } - - contentType = ContentTypeUtf8String; - contents = new DerUtf8String(text); - } - - /** - * Creates a new DisplayText instance. - *

Useful when reading back a DisplayText class - * from it's Asn1Encodable form.

- * - * @param contents an Asn1Encodable instance. - */ - public DisplayText( - IAsn1String contents) - { - this.contents = contents; - } - - public static DisplayText GetInstance( - object obj) - { - if (obj is IAsn1String) - { - return new DisplayText((IAsn1String) obj); - } - - if (obj is DisplayText) - { - return (DisplayText) obj; - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public override Asn1Object ToAsn1Object() - { - return (Asn1Object) contents; - } - - /** - * Returns the stored string object. - * - * @return the stored text as a string. - */ - public string GetString() - { - return contents.GetString(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/DistributionPoint.cs b/bc-sharp-crypto/src/asn1/x509/DistributionPoint.cs deleted file mode 100644 index 40814c7..0000000 --- a/bc-sharp-crypto/src/asn1/x509/DistributionPoint.cs +++ /dev/null @@ -1,161 +0,0 @@ -using System; -using System.Text; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * The DistributionPoint object. - * 
-     * DistributionPoint ::= Sequence {
-     *      distributionPoint [0] DistributionPointName OPTIONAL,
-     *      reasons           [1] ReasonFlags OPTIONAL,
-     *      cRLIssuer         [2] GeneralNames OPTIONAL
-     * }
-     *
- */ - public class DistributionPoint - : Asn1Encodable - { - internal readonly DistributionPointName distributionPoint; - internal readonly ReasonFlags reasons; - internal readonly GeneralNames cRLIssuer; - - public static DistributionPoint GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static DistributionPoint GetInstance( - object obj) - { - if(obj == null || obj is DistributionPoint) - { - return (DistributionPoint) obj; - } - - if(obj is Asn1Sequence) - { - return new DistributionPoint((Asn1Sequence) obj); - } - - throw new ArgumentException("Invalid DistributionPoint: " + Platform.GetTypeName(obj)); - } - - private DistributionPoint( - Asn1Sequence seq) - { - for (int i = 0; i != seq.Count; i++) - { - Asn1TaggedObject t = Asn1TaggedObject.GetInstance(seq[i]); - - switch (t.TagNo) - { - case 0: - distributionPoint = DistributionPointName.GetInstance(t, true); - break; - case 1: - reasons = new ReasonFlags(DerBitString.GetInstance(t, false)); - break; - case 2: - cRLIssuer = GeneralNames.GetInstance(t, false); - break; - } - } - } - - public DistributionPoint( - DistributionPointName distributionPointName, - ReasonFlags reasons, - GeneralNames crlIssuer) - { - this.distributionPoint = distributionPointName; - this.reasons = reasons; - this.cRLIssuer = crlIssuer; - } - - public DistributionPointName DistributionPointName - { - get { return distributionPoint; } - } - - public ReasonFlags Reasons - { - get { return reasons; } - } - - public GeneralNames CrlIssuer - { - get { return cRLIssuer; } - } - - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - if (distributionPoint != null) - { - // - // as this is a CHOICE it must be explicitly tagged - // - v.Add(new DerTaggedObject(0, distributionPoint)); - } - - if (reasons != null) - { - v.Add(new DerTaggedObject(false, 1, reasons)); - } - - if (cRLIssuer != null) - { - v.Add(new DerTaggedObject(false, 2, cRLIssuer)); - } - - return new DerSequence(v); - } - - public override string ToString() - { - string sep = Platform.NewLine; - StringBuilder buf = new StringBuilder(); - buf.Append("DistributionPoint: ["); - buf.Append(sep); - if (distributionPoint != null) - { - appendObject(buf, sep, "distributionPoint", distributionPoint.ToString()); - } - if (reasons != null) - { - appendObject(buf, sep, "reasons", reasons.ToString()); - } - if (cRLIssuer != null) - { - appendObject(buf, sep, "cRLIssuer", cRLIssuer.ToString()); - } - buf.Append("]"); - buf.Append(sep); - return buf.ToString(); - } - - private void appendObject( - StringBuilder buf, - string sep, - string name, - string val) - { - string indent = " "; - - buf.Append(indent); - buf.Append(name); - buf.Append(":"); - buf.Append(sep); - buf.Append(indent); - buf.Append(indent); - buf.Append(val); - buf.Append(sep); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/DistributionPointName.cs b/bc-sharp-crypto/src/asn1/x509/DistributionPointName.cs deleted file mode 100644 index 43fdaf5..0000000 --- a/bc-sharp-crypto/src/asn1/x509/DistributionPointName.cs +++ /dev/null @@ -1,130 +0,0 @@ -using System; -using System.Text; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * The DistributionPointName object. - * 
-     * DistributionPointName ::= CHOICE {
-     *     fullName                 [0] GeneralNames,
-     *     nameRelativeToCRLIssuer  [1] RDN
-     * }
-     *
- */ - public class DistributionPointName - : Asn1Encodable, IAsn1Choice - { - internal readonly Asn1Encodable name; - internal readonly int type; - - public const int FullName = 0; - public const int NameRelativeToCrlIssuer = 1; - - public static DistributionPointName GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1TaggedObject.GetInstance(obj, true)); - } - - public static DistributionPointName GetInstance( - object obj) - { - if (obj == null || obj is DistributionPointName) - { - return (DistributionPointName) obj; - } - - if (obj is Asn1TaggedObject) - { - return new DistributionPointName((Asn1TaggedObject) obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public DistributionPointName( - int type, - Asn1Encodable name) - { - this.type = type; - this.name = name; - } - - public DistributionPointName( - GeneralNames name) - : this(FullName, name) - { - } - - public int PointType - { - get { return type; } - } - - public Asn1Encodable Name - { - get { return name; } - } - - public DistributionPointName( - Asn1TaggedObject obj) - { - this.type = obj.TagNo; - - if (type == FullName) - { - this.name = GeneralNames.GetInstance(obj, false); - } - else - { - this.name = Asn1Set.GetInstance(obj, false); - } - } - - public override Asn1Object ToAsn1Object() - { - return new DerTaggedObject(false, type, name); - } - - public override string ToString() - { - string sep = Platform.NewLine; - StringBuilder buf = new StringBuilder(); - buf.Append("DistributionPointName: ["); - buf.Append(sep); - if (type == FullName) - { - appendObject(buf, sep, "fullName", name.ToString()); - } - else - { - appendObject(buf, sep, "nameRelativeToCRLIssuer", name.ToString()); - } - buf.Append("]"); - buf.Append(sep); - return buf.ToString(); - } - - private void appendObject( - StringBuilder buf, - string sep, - string name, - string val) - { - string indent = " "; - - buf.Append(indent); - buf.Append(name); - buf.Append(":"); - buf.Append(sep); - buf.Append(indent); - buf.Append(indent); - buf.Append(val); - buf.Append(sep); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/ExtendedKeyUsage.cs b/bc-sharp-crypto/src/asn1/x509/ExtendedKeyUsage.cs deleted file mode 100644 index 8f7e6a3..0000000 --- a/bc-sharp-crypto/src/asn1/x509/ExtendedKeyUsage.cs +++ /dev/null @@ -1,132 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * The extendedKeyUsage object. - * 
-     *      extendedKeyUsage ::= Sequence SIZE (1..MAX) OF KeyPurposeId
-     *
- */ - public class ExtendedKeyUsage - : Asn1Encodable - { - internal readonly IDictionary usageTable = Platform.CreateHashtable(); - internal readonly Asn1Sequence seq; - - public static ExtendedKeyUsage GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static ExtendedKeyUsage GetInstance( - object obj) - { - if (obj is ExtendedKeyUsage) - { - return (ExtendedKeyUsage) obj; - } - - if (obj is Asn1Sequence) - { - return new ExtendedKeyUsage((Asn1Sequence) obj); - } - - if (obj is X509Extension) - { - return GetInstance(X509Extension.ConvertValueToObject((X509Extension) obj)); - } - - throw new ArgumentException("Invalid ExtendedKeyUsage: " + Platform.GetTypeName(obj)); - } - - private ExtendedKeyUsage( - Asn1Sequence seq) - { - this.seq = seq; - - foreach (object o in seq) - { - if (!(o is DerObjectIdentifier)) - throw new ArgumentException("Only DerObjectIdentifier instances allowed in ExtendedKeyUsage."); - - this.usageTable[o] = o; - } - } - - public ExtendedKeyUsage( - params KeyPurposeID[] usages) - { - this.seq = new DerSequence(usages); - - foreach (KeyPurposeID usage in usages) - { - this.usageTable[usage] = usage; - } - } - -#if !(SILVERLIGHT || PORTABLE) - [Obsolete] - public ExtendedKeyUsage( - ArrayList usages) - : this((IEnumerable)usages) - { - } -#endif - - public ExtendedKeyUsage( - IEnumerable usages) - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - foreach (object usage in usages) - { - Asn1Encodable o = KeyPurposeID.GetInstance(usage); - - v.Add(o); - this.usageTable[o] = o; - } - - this.seq = new DerSequence(v); - } - - public bool HasKeyPurposeId( - KeyPurposeID keyPurposeId) - { - return usageTable.Contains(keyPurposeId); - } - -#if !(SILVERLIGHT || PORTABLE) - [Obsolete("Use 'GetAllUsages'")] - public ArrayList GetUsages() - { - return new ArrayList(usageTable.Values); - } -#endif - - /** - * Returns all extended key usages. - * The returned ArrayList contains DerObjectIdentifier instances. - * @return An ArrayList with all key purposes. - */ - public IList GetAllUsages() - { - return Platform.CreateArrayList(usageTable.Values); - } - - public int Count - { - get { return usageTable.Count; } - } - - public override Asn1Object ToAsn1Object() - { - return seq; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/GeneralName.cs b/bc-sharp-crypto/src/asn1/x509/GeneralName.cs deleted file mode 100644 index 6288617..0000000 --- a/bc-sharp-crypto/src/asn1/x509/GeneralName.cs +++ /dev/null @@ -1,425 +0,0 @@ -using System; -using System.Collections; -using System.Globalization; -using System.IO; -using System.Text; - -using Org.BouncyCastle.Utilities; -using NetUtils = Org.BouncyCastle.Utilities.Net; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * The GeneralName object. - * 
-     * GeneralName ::= CHOICE {
-     *      otherName                       [0]     OtherName,
-     *      rfc822Name                      [1]     IA5String,
-     *      dNSName                         [2]     IA5String,
-     *      x400Address                     [3]     ORAddress,
-     *      directoryName                   [4]     Name,
-     *      ediPartyName                    [5]     EDIPartyName,
-     *      uniformResourceIdentifier       [6]     IA5String,
-     *      iPAddress                       [7]     OCTET STRING,
-     *      registeredID                    [8]     OBJECT IDENTIFIER}
-     *
-     * OtherName ::= Sequence {
-     *      type-id    OBJECT IDENTIFIER,
-     *      value      [0] EXPLICIT ANY DEFINED BY type-id }
-     *
-     * EDIPartyName ::= Sequence {
-     *      nameAssigner            [0]     DirectoryString OPTIONAL,
-     *      partyName               [1]     DirectoryString }
-     *
- */ - public class GeneralName - : Asn1Encodable, IAsn1Choice - { - public const int OtherName = 0; - public const int Rfc822Name = 1; - public const int DnsName = 2; - public const int X400Address = 3; - public const int DirectoryName = 4; - public const int EdiPartyName = 5; - public const int UniformResourceIdentifier = 6; - public const int IPAddress = 7; - public const int RegisteredID = 8; - - internal readonly Asn1Encodable obj; - internal readonly int tag; - private X509Name x509Name; - - public GeneralName( -int v, X509Name directoryName) - { - this.obj = directoryName; - this.tag = 4; - } - - /** - * When the subjectAltName extension contains an Internet mail address, - * the address MUST be included as an rfc822Name. The format of an - * rfc822Name is an "addr-spec" as defined in RFC 822 [RFC 822]. - * - * When the subjectAltName extension contains a domain name service - * label, the domain name MUST be stored in the dNSName (an IA5String). - * The name MUST be in the "preferred name syntax," as specified by RFC - * 1034 [RFC 1034]. - * - * When the subjectAltName extension contains a URI, the name MUST be - * stored in the uniformResourceIdentifier (an IA5String). The name MUST - * be a non-relative URL, and MUST follow the URL syntax and encoding - * rules specified in [RFC 1738]. The name must include both a scheme - * (e.g., "http" or "ftp") and a scheme-specific-part. The scheme- - * specific-part must include a fully qualified domain name or IP - * address as the host. - * - * When the subjectAltName extension contains a iPAddress, the address - * MUST be stored in the octet string in "network byte order," as - * specified in RFC 791 [RFC 791]. The least significant bit (LSB) of - * each octet is the LSB of the corresponding byte in the network - * address. For IP Version 4, as specified in RFC 791, the octet string - * MUST contain exactly four octets. For IP Version 6, as specified in - * RFC 1883, the octet string MUST contain exactly sixteen octets [RFC - * 1883]. - */ - public GeneralName( - Asn1Object name, - int tag) - { - this.obj = name; - this.tag = tag; - } - - public GeneralName( - int tag, - Asn1Encodable name) - { - this.obj = name; - this.tag = tag; - } - - /** - * Create a GeneralName for the given tag from the passed in string. - *

- * This constructor can handle: - *

    - *
  • rfc822Name
    • - *
  • iPAddress
    • - *
  • directoryName
    • - *
  • dNSName
    • - *
  • uniformResourceIdentifier
    • - *
  • registeredID
    • - *
- * For x400Address, otherName and ediPartyName there is no common string - * format defined. - *

- * Note: A directory name can be encoded in different ways into a byte - * representation. Be aware of this if the byte representation is used for - * comparing results. - *

- * - * @param tag tag number - * @param name string representation of name - * @throws ArgumentException if the string encoding is not correct or - * not supported. - */ - public GeneralName( - int tag, - string name) - { - this.tag = tag; - - if (tag == Rfc822Name || tag == DnsName || tag == UniformResourceIdentifier) - { - this.obj = new DerIA5String(name); - } - else if (tag == RegisteredID) - { - this.obj = new DerObjectIdentifier(name); - } - else if (tag == DirectoryName) - { - this.obj = new X509Name(name); - } - else if (tag == IPAddress) - { - byte[] enc = toGeneralNameEncoding(name); - if (enc == null) - throw new ArgumentException("IP Address is invalid", "name"); - - this.obj = new DerOctetString(enc); - } - else - { - throw new ArgumentException("can't process string for tag: " + tag, "tag"); - } - } - - public GeneralName(X509Name x509Name) - { - this.x509Name = x509Name; - } - - public static GeneralName GetInstance( - object obj) - { - if (obj == null || obj is GeneralName) - { - return (GeneralName) obj; - } - - if (obj is Asn1TaggedObject) - { - Asn1TaggedObject tagObj = (Asn1TaggedObject) obj; - int tag = tagObj.TagNo; - - switch (tag) - { - case OtherName: - return new GeneralName(tag, Asn1Sequence.GetInstance(tagObj, false)); - case Rfc822Name: - return new GeneralName(tag, DerIA5String.GetInstance(tagObj, false)); - case DnsName: - return new GeneralName(tag, DerIA5String.GetInstance(tagObj, false)); - case X400Address: - throw new ArgumentException("unknown tag: " + tag); - case DirectoryName: - return new GeneralName(tag, X509Name.GetInstance(tagObj, true)); - case EdiPartyName: - return new GeneralName(tag, Asn1Sequence.GetInstance(tagObj, false)); - case UniformResourceIdentifier: - return new GeneralName(tag, DerIA5String.GetInstance(tagObj, false)); - case IPAddress: - return new GeneralName(tag, Asn1OctetString.GetInstance(tagObj, false)); - case RegisteredID: - return new GeneralName(tag, DerObjectIdentifier.GetInstance(tagObj, false)); - } - } - - if (obj is byte[]) - { - try - { - return GetInstance(Asn1Object.FromByteArray((byte[])obj)); - } - catch (IOException) - { - throw new ArgumentException("unable to parse encoded general name"); - } - } - - throw new ArgumentException("unknown object in GetInstance: " + Platform.GetTypeName(obj), "obj"); - } - - public static GeneralName GetInstance( - Asn1TaggedObject tagObj, - bool explicitly) - { - return GetInstance(Asn1TaggedObject.GetInstance(tagObj, true)); - } - - public int TagNo - { - get { return tag; } - } - - public Asn1Encodable Name - { - get { return obj; } - } - - public override string ToString() - { - StringBuilder buf = new StringBuilder(); - buf.Append(tag); - buf.Append(": "); - - switch (tag) - { - case Rfc822Name: - case DnsName: - case UniformResourceIdentifier: - buf.Append(DerIA5String.GetInstance(obj).GetString()); - break; - case DirectoryName: - buf.Append(X509Name.GetInstance(obj).ToString()); - break; - default: - buf.Append(obj.ToString()); - break; - } - - return buf.ToString(); - } - - private byte[] toGeneralNameEncoding( - string ip) - { - if (NetUtils.IPAddress.IsValidIPv6WithNetmask(ip) || NetUtils.IPAddress.IsValidIPv6(ip)) - { - int slashIndex = ip.IndexOf('/'); - - if (slashIndex < 0) - { - byte[] addr = new byte[16]; - int[] parsedIp = parseIPv6(ip); - copyInts(parsedIp, addr, 0); - - return addr; - } - else - { - byte[] addr = new byte[32]; - int[] parsedIp = parseIPv6(ip.Substring(0, slashIndex)); - copyInts(parsedIp, addr, 0); - string mask = ip.Substring(slashIndex + 1); - if (mask.IndexOf(':') > 0) - { - parsedIp = parseIPv6(mask); - } - else - { - parsedIp = parseMask(mask); - } - copyInts(parsedIp, addr, 16); - - return addr; - } - } - else if (NetUtils.IPAddress.IsValidIPv4WithNetmask(ip) || NetUtils.IPAddress.IsValidIPv4(ip)) - { - int slashIndex = ip.IndexOf('/'); - - if (slashIndex < 0) - { - byte[] addr = new byte[4]; - - parseIPv4(ip, addr, 0); - - return addr; - } - else - { - byte[] addr = new byte[8]; - - parseIPv4(ip.Substring(0, slashIndex), addr, 0); - - string mask = ip.Substring(slashIndex + 1); - if (mask.IndexOf('.') > 0) - { - parseIPv4(mask, addr, 4); - } - else - { - parseIPv4Mask(mask, addr, 4); - } - - return addr; - } - } - - return null; - } - - private void parseIPv4Mask(string mask, byte[] addr, int offset) - { - int maskVal = Int32.Parse(mask); - - for (int i = 0; i != maskVal; i++) - { - addr[(i / 8) + offset] |= (byte)(1 << (i % 8)); - } - } - - private void parseIPv4(string ip, byte[] addr, int offset) - { - foreach (string token in ip.Split('.', '/')) - { - addr[offset++] = (byte)Int32.Parse(token); - } - } - - private int[] parseMask(string mask) - { - int[] res = new int[8]; - int maskVal = Int32.Parse(mask); - - for (int i = 0; i != maskVal; i++) - { - res[i / 16] |= 1 << (i % 16); - } - return res; - } - - private void copyInts(int[] parsedIp, byte[] addr, int offSet) - { - for (int i = 0; i != parsedIp.Length; i++) - { - addr[(i * 2) + offSet] = (byte)(parsedIp[i] >> 8); - addr[(i * 2 + 1) + offSet] = (byte)parsedIp[i]; - } - } - - private int[] parseIPv6(string ip) - { - if (Platform.StartsWith(ip, "::")) - { - ip = ip.Substring(1); - } - else if (Platform.EndsWith(ip, "::")) - { - ip = ip.Substring(0, ip.Length - 1); - } - - IEnumerator sEnum = ip.Split(':').GetEnumerator(); - - int index = 0; - int[] val = new int[8]; - - int doubleColon = -1; - - while (sEnum.MoveNext()) - { - string e = (string) sEnum.Current; - - if (e.Length == 0) - { - doubleColon = index; - val[index++] = 0; - } - else - { - if (e.IndexOf('.') < 0) - { - val[index++] = Int32.Parse(e, NumberStyles.AllowHexSpecifier); - } - else - { - string[] tokens = e.Split('.'); - - val[index++] = (Int32.Parse(tokens[0]) << 8) | Int32.Parse(tokens[1]); - val[index++] = (Int32.Parse(tokens[2]) << 8) | Int32.Parse(tokens[3]); - } - } - } - - if (index != val.Length) - { - Array.Copy(val, doubleColon, val, val.Length - (index - doubleColon), index - doubleColon); - for (int i = doubleColon; i != val.Length - (index - doubleColon); i++) - { - val[i] = 0; - } - } - - return val; - } - - public override Asn1Object ToAsn1Object() - { - // Explicitly tagged if DirectoryName - return new DerTaggedObject(tag == DirectoryName, tag, obj); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/GeneralNames.cs b/bc-sharp-crypto/src/asn1/x509/GeneralNames.cs deleted file mode 100644 index fcd2ecb..0000000 --- a/bc-sharp-crypto/src/asn1/x509/GeneralNames.cs +++ /dev/null @@ -1,95 +0,0 @@ -using System; -using System.Text; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - public class GeneralNames - : Asn1Encodable - { - private readonly GeneralName[] names; - - public static GeneralNames GetInstance( - object obj) - { - if (obj == null || obj is GeneralNames) - { - return (GeneralNames) obj; - } - - if (obj is Asn1Sequence) - { - return new GeneralNames((Asn1Sequence) obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public static GeneralNames GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - /// Construct a GeneralNames object containing one GeneralName. - /// The name to be contained. - public GeneralNames( - GeneralName name) - { - names = new GeneralName[]{ name }; - } - - public GeneralNames( - GeneralName[] names) - { - this.names = (GeneralName[])names.Clone(); - } - - private GeneralNames( - Asn1Sequence seq) - { - this.names = new GeneralName[seq.Count]; - - for (int i = 0; i != seq.Count; i++) - { - names[i] = GeneralName.GetInstance(seq[i]); - } - } - - public GeneralName[] GetNames() - { - return (GeneralName[]) names.Clone(); - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-		 * GeneralNames ::= Sequence SIZE {1..MAX} OF GeneralName
-		 *
- */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(names); - } - - public override string ToString() - { - StringBuilder buf = new StringBuilder(); - string sep = Platform.NewLine; - - buf.Append("GeneralNames:"); - buf.Append(sep); - - foreach (GeneralName name in names) - { - buf.Append(" "); - buf.Append(name); - buf.Append(sep); - } - - return buf.ToString(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/GeneralSubtree.cs b/bc-sharp-crypto/src/asn1/x509/GeneralSubtree.cs deleted file mode 100644 index e918a02..0000000 --- a/bc-sharp-crypto/src/asn1/x509/GeneralSubtree.cs +++ /dev/null @@ -1,189 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * Class for containing a restriction object subtrees in NameConstraints. See - * RFC 3280. - * - * 
-	 *
-	 *       GeneralSubtree ::= SEQUENCE
-	 *       {
-	 *         baseName                    GeneralName,
-	 *         minimum         [0]     BaseDistance DEFAULT 0,
-	 *         maximum         [1]     BaseDistance OPTIONAL
-	 *       }
-	 *
- * - * @see org.bouncycastle.asn1.x509.NameConstraints - * - */ - public class GeneralSubtree - : Asn1Encodable - { - private readonly GeneralName baseName; - private readonly DerInteger minimum; - private readonly DerInteger maximum; - - private GeneralSubtree( - Asn1Sequence seq) - { - baseName = GeneralName.GetInstance(seq[0]); - - switch (seq.Count) - { - case 1: - break; - case 2: - { - Asn1TaggedObject o = Asn1TaggedObject.GetInstance(seq[1]); - switch (o.TagNo) - { - case 0: - minimum = DerInteger.GetInstance(o, false); - break; - case 1: - maximum = DerInteger.GetInstance(o, false); - break; - default: - throw new ArgumentException("Bad tag number: " + o.TagNo); - } - break; - } - case 3: - { - { - Asn1TaggedObject oMin = Asn1TaggedObject.GetInstance(seq[1]); - if (oMin.TagNo != 0) - throw new ArgumentException("Bad tag number for 'minimum': " + oMin.TagNo); - minimum = DerInteger.GetInstance(oMin, false); - } - - { - Asn1TaggedObject oMax = Asn1TaggedObject.GetInstance(seq[2]); - if (oMax.TagNo != 1) - throw new ArgumentException("Bad tag number for 'maximum': " + oMax.TagNo); - maximum = DerInteger.GetInstance(oMax, false); - } - - break; - } - default: - throw new ArgumentException("Bad sequence size: " + seq.Count); - } - } - - /** - * Constructor from a given details. - * - * According RFC 3280, the minimum and maximum fields are not used with any - * name forms, thus minimum MUST be zero, and maximum MUST be absent. - *

- * If minimum is null, zero is assumed, if - * maximum is null, maximum is absent.

- * - * @param baseName - * A restriction. - * @param minimum - * Minimum - * - * @param maximum - * Maximum - */ - public GeneralSubtree( - GeneralName baseName, - BigInteger minimum, - BigInteger maximum) - { - this.baseName = baseName; - if (minimum != null) - { - this.minimum = new DerInteger(minimum); - } - if (maximum != null) - { - this.maximum = new DerInteger(maximum); - } - } - - public GeneralSubtree( - GeneralName baseName) - : this(baseName, null, null) - { - } - - public static GeneralSubtree GetInstance( - Asn1TaggedObject o, - bool isExplicit) - { - return new GeneralSubtree(Asn1Sequence.GetInstance(o, isExplicit)); - } - - public static GeneralSubtree GetInstance( - object obj) - { - if (obj == null) - { - return null; - } - - if (obj is GeneralSubtree) - { - return (GeneralSubtree) obj; - } - - return new GeneralSubtree(Asn1Sequence.GetInstance(obj)); - } - - public GeneralName Base - { - get { return baseName; } - } - - public BigInteger Minimum - { - get { return minimum == null ? BigInteger.Zero : minimum.Value; } - } - - public BigInteger Maximum - { - get { return maximum == null ? null : maximum.Value; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * - * Returns: - * - * 
-		 *       GeneralSubtree ::= SEQUENCE
-		 *       {
-		 *         baseName                    GeneralName,
-		 *         minimum         [0]     BaseDistance DEFAULT 0,
-		 *         maximum         [1]     BaseDistance OPTIONAL
-		 *       }
-		 *
- * - * @return a DERObject - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(baseName); - - if (minimum != null && minimum.Value.SignValue != 0) - { - v.Add(new DerTaggedObject(false, 0, minimum)); - } - - if (maximum != null) - { - v.Add(new DerTaggedObject(false, 1, maximum)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/Holder.cs b/bc-sharp-crypto/src/asn1/x509/Holder.cs deleted file mode 100644 index 6e5315b..0000000 --- a/bc-sharp-crypto/src/asn1/x509/Holder.cs +++ /dev/null @@ -1,259 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * The Holder object. - *

- * For an v2 attribute certificate this is: - * - * 

-	 *            Holder ::= SEQUENCE {
-	 *                  baseCertificateID   [0] IssuerSerial OPTIONAL,
-	 *                           -- the issuer and serial number of
-	 *                           -- the holder's Public Key Certificate
-	 *                  entityName          [1] GeneralNames OPTIONAL,
-	 *                           -- the name of the claimant or role
-	 *                  objectDigestInfo    [2] ObjectDigestInfo OPTIONAL
-	 *                           -- used to directly authenticate the holder,
-	 *                           -- for example, an executable
-	 *            }
-	 *
- *

- *

- * For an v1 attribute certificate this is: - * - * 

-	 *         subject CHOICE {
-	 *          baseCertificateID [0] IssuerSerial,
-	 *          -- associated with a Public Key Certificate
-	 *          subjectName [1] GeneralNames },
-	 *          -- associated with a name
-	 *
- *

- */ - public class Holder - : Asn1Encodable - { - internal readonly IssuerSerial baseCertificateID; - internal readonly GeneralNames entityName; - internal readonly ObjectDigestInfo objectDigestInfo; - private readonly int version; - - public static Holder GetInstance( - object obj) - { - if (obj is Holder) - { - return (Holder) obj; - } - - if (obj is Asn1Sequence) - { - return new Holder((Asn1Sequence) obj); - } - - if (obj is Asn1TaggedObject) - { - return new Holder((Asn1TaggedObject) obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - /** - * Constructor for a holder for an v1 attribute certificate. - * - * @param tagObj The ASN.1 tagged holder object. - */ - public Holder( - Asn1TaggedObject tagObj) - { - switch (tagObj.TagNo) - { - case 0: - baseCertificateID = IssuerSerial.GetInstance(tagObj, false); - break; - case 1: - entityName = GeneralNames.GetInstance(tagObj, false); - break; - default: - throw new ArgumentException("unknown tag in Holder"); - } - - this.version = 0; - } - - /** - * Constructor for a holder for an v2 attribute certificate. * - * - * @param seq The ASN.1 sequence. - */ - private Holder( - Asn1Sequence seq) - { - if (seq.Count > 3) - throw new ArgumentException("Bad sequence size: " + seq.Count); - - for (int i = 0; i != seq.Count; i++) - { - Asn1TaggedObject tObj = Asn1TaggedObject.GetInstance(seq[i]); - - switch (tObj.TagNo) - { - case 0: - baseCertificateID = IssuerSerial.GetInstance(tObj, false); - break; - case 1: - entityName = GeneralNames.GetInstance(tObj, false); - break; - case 2: - objectDigestInfo = ObjectDigestInfo.GetInstance(tObj, false); - break; - default: - throw new ArgumentException("unknown tag in Holder"); - } - } - - this.version = 1; - } - - public Holder( - IssuerSerial baseCertificateID) - : this(baseCertificateID, 1) - { - } - - /** - * Constructs a holder from a IssuerSerial. - * @param baseCertificateID The IssuerSerial. - * @param version The version of the attribute certificate. - */ - public Holder( - IssuerSerial baseCertificateID, - int version) - { - this.baseCertificateID = baseCertificateID; - this.version = version; - } - - /** - * Returns 1 for v2 attribute certificates or 0 for v1 attribute - * certificates. - * @return The version of the attribute certificate. - */ - public int Version - { - get { return version; } - } - - /** - * Constructs a holder with an entityName for v2 attribute certificates or - * with a subjectName for v1 attribute certificates. - * - * @param entityName The entity or subject name. - */ - public Holder( - GeneralNames entityName) - : this(entityName, 1) - { - } - - /** - * Constructs a holder with an entityName for v2 attribute certificates or - * with a subjectName for v1 attribute certificates. - * - * @param entityName The entity or subject name. - * @param version The version of the attribute certificate. - */ - public Holder( - GeneralNames entityName, - int version) - { - this.entityName = entityName; - this.version = version; - } - - /** - * Constructs a holder from an object digest info. - * - * @param objectDigestInfo The object digest info object. - */ - public Holder( - ObjectDigestInfo objectDigestInfo) - { - this.objectDigestInfo = objectDigestInfo; - this.version = 1; - } - - public IssuerSerial BaseCertificateID - { - get { return baseCertificateID; } - } - - /** - * Returns the entityName for an v2 attribute certificate or the subjectName - * for an v1 attribute certificate. - * - * @return The entityname or subjectname. - */ - public GeneralNames EntityName - { - get { return entityName; } - } - - public ObjectDigestInfo ObjectDigestInfo - { - get { return objectDigestInfo; } - } - - /** - * The Holder object. - * 
-         *  Holder ::= Sequence {
-         *        baseCertificateID   [0] IssuerSerial OPTIONAL,
-         *                 -- the issuer and serial number of
-         *                 -- the holder's Public Key Certificate
-         *        entityName          [1] GeneralNames OPTIONAL,
-         *                 -- the name of the claimant or role
-         *        objectDigestInfo    [2] ObjectDigestInfo OPTIONAL
-         *                 -- used to directly authenticate the holder,
-         *                 -- for example, an executable
-         *  }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - if (version == 1) - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - if (baseCertificateID != null) - { - v.Add(new DerTaggedObject(false, 0, baseCertificateID)); - } - - if (entityName != null) - { - v.Add(new DerTaggedObject(false, 1, entityName)); - } - - if (objectDigestInfo != null) - { - v.Add(new DerTaggedObject(false, 2, objectDigestInfo)); - } - - return new DerSequence(v); - } - - if (entityName != null) - { - return new DerTaggedObject(false, 1, entityName); - } - - return new DerTaggedObject(false, 0, baseCertificateID); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/IetfAttrSyntax.cs b/bc-sharp-crypto/src/asn1/x509/IetfAttrSyntax.cs deleted file mode 100644 index e719865..0000000 --- a/bc-sharp-crypto/src/asn1/x509/IetfAttrSyntax.cs +++ /dev/null @@ -1,161 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * Implementation of IetfAttrSyntax as specified by RFC3281. - */ - public class IetfAttrSyntax - : Asn1Encodable - { - public const int ValueOctets = 1; - public const int ValueOid = 2; - public const int ValueUtf8 = 3; - - internal readonly GeneralNames policyAuthority; - internal readonly Asn1EncodableVector values = new Asn1EncodableVector(); - - internal int valueChoice = -1; - - /** - * - */ - public IetfAttrSyntax( - Asn1Sequence seq) - { - int i = 0; - - if (seq[0] is Asn1TaggedObject) - { - policyAuthority = GeneralNames.GetInstance(((Asn1TaggedObject)seq[0]), false); - i++; - } - else if (seq.Count == 2) - { // VOMS fix - policyAuthority = GeneralNames.GetInstance(seq[0]); - i++; - } - - if (!(seq[i] is Asn1Sequence)) - { - throw new ArgumentException("Non-IetfAttrSyntax encoding"); - } - - seq = (Asn1Sequence) seq[i]; - - foreach (Asn1Object obj in seq) - { - int type; - - if (obj is DerObjectIdentifier) - { - type = ValueOid; - } - else if (obj is DerUtf8String) - { - type = ValueUtf8; - } - else if (obj is DerOctetString) - { - type = ValueOctets; - } - else - { - throw new ArgumentException("Bad value type encoding IetfAttrSyntax"); - } - - if (valueChoice < 0) - { - valueChoice = type; - } - - if (type != valueChoice) - { - throw new ArgumentException("Mix of value types in IetfAttrSyntax"); - } - - values.Add(obj); - } - } - - public GeneralNames PolicyAuthority - { - get { return policyAuthority; } - } - - public int ValueType - { - get { return valueChoice; } - } - - public object[] GetValues() - { - if (this.ValueType == ValueOctets) - { - Asn1OctetString[] tmp = new Asn1OctetString[values.Count]; - - for (int i = 0; i != tmp.Length; i++) - { - tmp[i] = (Asn1OctetString) values[i]; - } - - return tmp; - } - - if (this.ValueType == ValueOid) - { - DerObjectIdentifier[] tmp = new DerObjectIdentifier[values.Count]; - - for (int i = 0; i != tmp.Length; i++) - { - tmp[i] = (DerObjectIdentifier) values[i]; - } - - return tmp; - } - - { - DerUtf8String[] tmp = new DerUtf8String[values.Count]; - - for (int i = 0; i != tmp.Length; i++) - { - tmp[i] = (DerUtf8String) values[i]; - } - - return tmp; - } - } - - /** - * - * 
-         *
-         *  IetfAttrSyntax ::= Sequence {
-         *    policyAuthority [0] GeneralNames OPTIONAL,
-         *    values Sequence OF CHOICE {
-         *      octets OCTET STRING,
-         *      oid OBJECT IDENTIFIER,
-         *      string UTF8String
-         *    }
-         *  }
-         *
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - if (policyAuthority != null) - { - v.Add(new DerTaggedObject(0, policyAuthority)); - } - - v.Add(new DerSequence(values)); - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/IssuerSerial.cs b/bc-sharp-crypto/src/asn1/x509/IssuerSerial.cs deleted file mode 100644 index 1e47e02..0000000 --- a/bc-sharp-crypto/src/asn1/x509/IssuerSerial.cs +++ /dev/null @@ -1,100 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - public class IssuerSerial - : Asn1Encodable - { - internal readonly GeneralNames issuer; - internal readonly DerInteger serial; - internal readonly DerBitString issuerUid; - - public static IssuerSerial GetInstance( - object obj) - { - if (obj == null || obj is IssuerSerial) - { - return (IssuerSerial) obj; - } - - if (obj is Asn1Sequence) - { - return new IssuerSerial((Asn1Sequence) obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public static IssuerSerial GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - private IssuerSerial( - Asn1Sequence seq) - { - if (seq.Count != 2 && seq.Count != 3) - { - throw new ArgumentException("Bad sequence size: " + seq.Count); - } - - issuer = GeneralNames.GetInstance(seq[0]); - serial = DerInteger.GetInstance(seq[1]); - - if (seq.Count == 3) - { - issuerUid = DerBitString.GetInstance(seq[2]); - } - } - - public IssuerSerial( - GeneralNames issuer, - DerInteger serial) - { - this.issuer = issuer; - this.serial = serial; - } - - public GeneralNames Issuer - { - get { return issuer; } - } - - public DerInteger Serial - { - get { return serial; } - } - - public DerBitString IssuerUid - { - get { return issuerUid; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         *  IssuerSerial  ::=  Sequence {
-         *       issuer         GeneralNames,
-         *       serial         CertificateSerialNumber,
-         *       issuerUid      UniqueIdentifier OPTIONAL
-         *  }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector( - issuer, serial); - - if (issuerUid != null) - { - v.Add(issuerUid); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/IssuingDistributionPoint.cs b/bc-sharp-crypto/src/asn1/x509/IssuingDistributionPoint.cs deleted file mode 100644 index 8e9362b..0000000 --- a/bc-sharp-crypto/src/asn1/x509/IssuingDistributionPoint.cs +++ /dev/null @@ -1,247 +0,0 @@ -using System; -using System.Text; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * 
-	 * IssuingDistributionPoint ::= SEQUENCE { 
-	 *   distributionPoint          [0] DistributionPointName OPTIONAL, 
-	 *   onlyContainsUserCerts      [1] BOOLEAN DEFAULT FALSE, 
-	 *   onlyContainsCACerts        [2] BOOLEAN DEFAULT FALSE, 
-	 *   onlySomeReasons            [3] ReasonFlags OPTIONAL, 
-	 *   indirectCRL                [4] BOOLEAN DEFAULT FALSE,
-	 *   onlyContainsAttributeCerts [5] BOOLEAN DEFAULT FALSE }
-	 *
- */ - public class IssuingDistributionPoint - : Asn1Encodable - { - private readonly DistributionPointName _distributionPoint; - private readonly bool _onlyContainsUserCerts; - private readonly bool _onlyContainsCACerts; - private readonly ReasonFlags _onlySomeReasons; - private readonly bool _indirectCRL; - private readonly bool _onlyContainsAttributeCerts; - - private readonly Asn1Sequence seq; - - public static IssuingDistributionPoint GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static IssuingDistributionPoint GetInstance( - object obj) - { - if (obj == null || obj is IssuingDistributionPoint) - { - return (IssuingDistributionPoint) obj; - } - - if (obj is Asn1Sequence) - { - return new IssuingDistributionPoint((Asn1Sequence) obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - /** - * Constructor from given details. - * - * @param distributionPoint - * May contain an URI as pointer to most current CRL. - * @param onlyContainsUserCerts Covers revocation information for end certificates. - * @param onlyContainsCACerts Covers revocation information for CA certificates. - * - * @param onlySomeReasons - * Which revocation reasons does this point cover. - * @param indirectCRL - * If true then the CRL contains revocation - * information about certificates ssued by other CAs. - * @param onlyContainsAttributeCerts Covers revocation information for attribute certificates. - */ - public IssuingDistributionPoint( - DistributionPointName distributionPoint, - bool onlyContainsUserCerts, - bool onlyContainsCACerts, - ReasonFlags onlySomeReasons, - bool indirectCRL, - bool onlyContainsAttributeCerts) - { - this._distributionPoint = distributionPoint; - this._indirectCRL = indirectCRL; - this._onlyContainsAttributeCerts = onlyContainsAttributeCerts; - this._onlyContainsCACerts = onlyContainsCACerts; - this._onlyContainsUserCerts = onlyContainsUserCerts; - this._onlySomeReasons = onlySomeReasons; - - Asn1EncodableVector vec = new Asn1EncodableVector(); - if (distributionPoint != null) - { // CHOICE item so explicitly tagged - vec.Add(new DerTaggedObject(true, 0, distributionPoint)); - } - if (onlyContainsUserCerts) - { - vec.Add(new DerTaggedObject(false, 1, DerBoolean.True)); - } - if (onlyContainsCACerts) - { - vec.Add(new DerTaggedObject(false, 2, DerBoolean.True)); - } - if (onlySomeReasons != null) - { - vec.Add(new DerTaggedObject(false, 3, onlySomeReasons)); - } - if (indirectCRL) - { - vec.Add(new DerTaggedObject(false, 4, DerBoolean.True)); - } - if (onlyContainsAttributeCerts) - { - vec.Add(new DerTaggedObject(false, 5, DerBoolean.True)); - } - - seq = new DerSequence(vec); - } - - /** - * Constructor from Asn1Sequence - */ - private IssuingDistributionPoint( - Asn1Sequence seq) - { - this.seq = seq; - - for (int i = 0; i != seq.Count; i++) - { - Asn1TaggedObject o = Asn1TaggedObject.GetInstance(seq[i]); - - switch (o.TagNo) - { - case 0: - // CHOICE so explicit - _distributionPoint = DistributionPointName.GetInstance(o, true); - break; - case 1: - _onlyContainsUserCerts = DerBoolean.GetInstance(o, false).IsTrue; - break; - case 2: - _onlyContainsCACerts = DerBoolean.GetInstance(o, false).IsTrue; - break; - case 3: - _onlySomeReasons = new ReasonFlags(ReasonFlags.GetInstance(o, false)); - break; - case 4: - _indirectCRL = DerBoolean.GetInstance(o, false).IsTrue; - break; - case 5: - _onlyContainsAttributeCerts = DerBoolean.GetInstance(o, false).IsTrue; - break; - default: - throw new ArgumentException("unknown tag in IssuingDistributionPoint"); - } - } - } - - public bool OnlyContainsUserCerts - { - get { return _onlyContainsUserCerts; } - } - - public bool OnlyContainsCACerts - { - get { return _onlyContainsCACerts; } - } - - public bool IsIndirectCrl - { - get { return _indirectCRL; } - } - - public bool OnlyContainsAttributeCerts - { - get { return _onlyContainsAttributeCerts; } - } - - /** - * @return Returns the distributionPoint. - */ - public DistributionPointName DistributionPoint - { - get { return _distributionPoint; } - } - - /** - * @return Returns the onlySomeReasons. - */ - public ReasonFlags OnlySomeReasons - { - get { return _onlySomeReasons; } - } - - public override Asn1Object ToAsn1Object() - { - return seq; - } - - public override string ToString() - { - string sep = Platform.NewLine; - StringBuilder buf = new StringBuilder(); - - buf.Append("IssuingDistributionPoint: ["); - buf.Append(sep); - if (_distributionPoint != null) - { - appendObject(buf, sep, "distributionPoint", _distributionPoint.ToString()); - } - if (_onlyContainsUserCerts) - { - appendObject(buf, sep, "onlyContainsUserCerts", _onlyContainsUserCerts.ToString()); - } - if (_onlyContainsCACerts) - { - appendObject(buf, sep, "onlyContainsCACerts", _onlyContainsCACerts.ToString()); - } - if (_onlySomeReasons != null) - { - appendObject(buf, sep, "onlySomeReasons", _onlySomeReasons.ToString()); - } - if (_onlyContainsAttributeCerts) - { - appendObject(buf, sep, "onlyContainsAttributeCerts", _onlyContainsAttributeCerts.ToString()); - } - if (_indirectCRL) - { - appendObject(buf, sep, "indirectCRL", _indirectCRL.ToString()); - } - buf.Append("]"); - buf.Append(sep); - return buf.ToString(); - } - - private void appendObject( - StringBuilder buf, - string sep, - string name, - string val) - { - string indent = " "; - - buf.Append(indent); - buf.Append(name); - buf.Append(":"); - buf.Append(sep); - buf.Append(indent); - buf.Append(indent); - buf.Append(val); - buf.Append(sep); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/KeyPurposeId.cs b/bc-sharp-crypto/src/asn1/x509/KeyPurposeId.cs deleted file mode 100644 index 1a564b9..0000000 --- a/bc-sharp-crypto/src/asn1/x509/KeyPurposeId.cs +++ /dev/null @@ -1,38 +0,0 @@ -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * The KeyPurposeID object. - * 
-     *     KeyPurposeID ::= OBJECT IDENTIFIER
-     *
- */ - public sealed class KeyPurposeID - : DerObjectIdentifier - { - private const string IdKP = "1.3.6.1.5.5.7.3"; - - private KeyPurposeID( - string id) - : base(id) - { - } - - public static readonly KeyPurposeID AnyExtendedKeyUsage = new KeyPurposeID(X509Extensions.ExtendedKeyUsage.Id + ".0"); - public static readonly KeyPurposeID IdKPServerAuth = new KeyPurposeID(IdKP + ".1"); - public static readonly KeyPurposeID IdKPClientAuth = new KeyPurposeID(IdKP + ".2"); - public static readonly KeyPurposeID IdKPCodeSigning = new KeyPurposeID(IdKP + ".3"); - public static readonly KeyPurposeID IdKPEmailProtection = new KeyPurposeID(IdKP + ".4"); - public static readonly KeyPurposeID IdKPIpsecEndSystem = new KeyPurposeID(IdKP + ".5"); - public static readonly KeyPurposeID IdKPIpsecTunnel = new KeyPurposeID(IdKP + ".6"); - public static readonly KeyPurposeID IdKPIpsecUser = new KeyPurposeID(IdKP + ".7"); - public static readonly KeyPurposeID IdKPTimeStamping = new KeyPurposeID(IdKP + ".8"); - public static readonly KeyPurposeID IdKPOcspSigning = new KeyPurposeID(IdKP + ".9"); - - // - // microsoft key purpose ids - // - public static readonly KeyPurposeID IdKPSmartCardLogon = new KeyPurposeID("1.3.6.1.4.1.311.20.2.2"); - - public static readonly KeyPurposeID IdKPMacAddress = new KeyPurposeID("1.3.6.1.1.1.1.22"); - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/KeyUsage.cs b/bc-sharp-crypto/src/asn1/x509/KeyUsage.cs deleted file mode 100644 index aeaffb7..0000000 --- a/bc-sharp-crypto/src/asn1/x509/KeyUsage.cs +++ /dev/null @@ -1,78 +0,0 @@ -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * The KeyUsage object. - * 
-     *    id-ce-keyUsage OBJECT IDENTIFIER ::=  { id-ce 15 }
-     *
-     *    KeyUsage ::= BIT STRING {
-     *         digitalSignature        (0),
-     *         nonRepudiation          (1),
-     *         keyEncipherment         (2),
-     *         dataEncipherment        (3),
-     *         keyAgreement            (4),
-     *         keyCertSign             (5),
-     *         cRLSign                 (6),
-     *         encipherOnly            (7),
-     *         decipherOnly            (8) }
-     *
- */ - public class KeyUsage - : DerBitString - { - public const int DigitalSignature = (1 << 7); - public const int NonRepudiation = (1 << 6); - public const int KeyEncipherment = (1 << 5); - public const int DataEncipherment = (1 << 4); - public const int KeyAgreement = (1 << 3); - public const int KeyCertSign = (1 << 2); - public const int CrlSign = (1 << 1); - public const int EncipherOnly = (1 << 0); - public const int DecipherOnly = (1 << 15); - - public static new KeyUsage GetInstance( - object obj) - { - if (obj is KeyUsage) - { - return (KeyUsage)obj; - } - - if (obj is X509Extension) - { - return GetInstance(X509Extension.ConvertValueToObject((X509Extension) obj)); - } - - return new KeyUsage(DerBitString.GetInstance(obj)); - } - - /** - * Basic constructor. - * - * @param usage - the bitwise OR of the Key Usage flags giving the - * allowed uses for the key. - * e.g. (KeyUsage.keyEncipherment | KeyUsage.dataEncipherment) - */ - public KeyUsage(int usage) - : base(usage) - { - } - - private KeyUsage( - DerBitString usage) - : base(usage.GetBytes(), usage.PadBits) - { - } - - public override string ToString() - { - byte[] data = GetBytes(); - if (data.Length == 1) - { - return "KeyUsage: 0x" + (data[0] & 0xff).ToString("X"); - } - - return "KeyUsage: 0x" + ((data[1] & 0xff) << 8 | (data[0] & 0xff)).ToString("X"); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/NameConstraints.cs b/bc-sharp-crypto/src/asn1/x509/NameConstraints.cs deleted file mode 100644 index 0c5fea8..0000000 --- a/bc-sharp-crypto/src/asn1/x509/NameConstraints.cs +++ /dev/null @@ -1,120 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - public class NameConstraints - : Asn1Encodable - { - private Asn1Sequence permitted, excluded; - - public static NameConstraints GetInstance( - object obj) - { - if (obj == null || obj is NameConstraints) - { - return (NameConstraints) obj; - } - - if (obj is Asn1Sequence) - { - return new NameConstraints((Asn1Sequence) obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public NameConstraints( - Asn1Sequence seq) - { - foreach (Asn1TaggedObject o in seq) - { - switch (o.TagNo) - { - case 0: - permitted = Asn1Sequence.GetInstance(o, false); - break; - case 1: - excluded = Asn1Sequence.GetInstance(o, false); - break; - } - } - } - -#if !(SILVERLIGHT || PORTABLE) - public NameConstraints( - ArrayList permitted, - ArrayList excluded) - : this((IList)permitted, (IList)excluded) - { - } -#endif - - /** - * Constructor from a given details. - * - *

permitted and excluded are Vectors of GeneralSubtree objects.

- * - * @param permitted Permitted subtrees - * @param excluded Excluded subtrees - */ - public NameConstraints( - IList permitted, - IList excluded) - { - if (permitted != null) - { - this.permitted = CreateSequence(permitted); - } - - if (excluded != null) - { - this.excluded = CreateSequence(excluded); - } - } - - private DerSequence CreateSequence( - IList subtrees) - { - GeneralSubtree[] gsts = new GeneralSubtree[subtrees.Count]; - for (int i = 0; i < subtrees.Count; ++i) - { - gsts[i] = (GeneralSubtree)subtrees[i]; - } - return new DerSequence(gsts); - } - - public Asn1Sequence PermittedSubtrees - { - get { return permitted; } - } - - public Asn1Sequence ExcludedSubtrees - { - get { return excluded; } - } - - /* - * NameConstraints ::= SEQUENCE { permittedSubtrees [0] GeneralSubtrees - * OPTIONAL, excludedSubtrees [1] GeneralSubtrees OPTIONAL } - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - if (permitted != null) - { - v.Add(new DerTaggedObject(false, 0, permitted)); - } - - if (excluded != null) - { - v.Add(new DerTaggedObject(false, 1, excluded)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/NoticeReference.cs b/bc-sharp-crypto/src/asn1/x509/NoticeReference.cs deleted file mode 100644 index f0d3a7b..0000000 --- a/bc-sharp-crypto/src/asn1/x509/NoticeReference.cs +++ /dev/null @@ -1,143 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * NoticeReference class, used in - * CertificatePolicies X509 V3 extensions - * (in policy qualifiers). - * - * 
-     *  NoticeReference ::= Sequence {
-     *      organization     DisplayText,
-     *      noticeNumbers    Sequence OF Integer }
-     *
-     *
- * - * @see PolicyQualifierInfo - * @see PolicyInformation - */ - public class NoticeReference - : Asn1Encodable - { - private readonly DisplayText organization; - private readonly Asn1Sequence noticeNumbers; - - private static Asn1EncodableVector ConvertVector(IList numbers) - { - Asn1EncodableVector av = new Asn1EncodableVector(); - - foreach (object o in numbers) - { - DerInteger di; - - if (o is BigInteger) - { - di = new DerInteger((BigInteger)o); - } - else if (o is int) - { - di = new DerInteger((int)o); - } - else - { - throw new ArgumentException(); - } - - av.Add(di); - } - return av; - } - - /** - * Creates a new NoticeReference instance. - * - * @param organization a String value - * @param numbers a Vector value - */ - public NoticeReference(string organization, IList numbers) - : this(organization, ConvertVector(numbers)) - { - } - - /** - * Creates a new NoticeReference instance. - * - * @param organization a String value - * @param noticeNumbers an ASN1EncodableVector value - */ - public NoticeReference(string organization, Asn1EncodableVector noticeNumbers) - : this(new DisplayText(organization), noticeNumbers) - { - } - - /** - * Creates a new NoticeReference instance. - * - * @param organization displayText - * @param noticeNumbers an ASN1EncodableVector value - */ - public NoticeReference(DisplayText organization, Asn1EncodableVector noticeNumbers) - { - this.organization = organization; - this.noticeNumbers = new DerSequence(noticeNumbers); - } - - /** - * Creates a new NoticeReference instance. - *

Useful for reconstructing a NoticeReference - * instance from its encodable/encoded form.

- * - * @param as an Asn1Sequence value obtained from either - * calling @{link ToAsn1Object()} for a NoticeReference - * instance or from parsing it from a Der-encoded stream. - */ - private NoticeReference(Asn1Sequence seq) - { - if (seq.Count != 2) - throw new ArgumentException("Bad sequence size: " + seq.Count, "seq"); - - organization = DisplayText.GetInstance(seq[0]); - noticeNumbers = Asn1Sequence.GetInstance(seq[1]); - } - - public static NoticeReference GetInstance(object obj) - { - if (obj is NoticeReference) - return (NoticeReference)obj; - if (obj == null) - return null; - return new NoticeReference(Asn1Sequence.GetInstance(obj)); - } - - public virtual DisplayText Organization - { - get { return organization; } - } - - public virtual DerInteger[] GetNoticeNumbers() - { - DerInteger[] tmp = new DerInteger[noticeNumbers.Count]; - - for (int i = 0; i != noticeNumbers.Count; ++i) - { - tmp[i] = DerInteger.GetInstance(noticeNumbers[i]); - } - - return tmp; - } - - /** - * Describe ToAsn1Object method here. - * - * @return a Asn1Object value - */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(organization, noticeNumbers); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/ObjectDigestInfo.cs b/bc-sharp-crypto/src/asn1/x509/ObjectDigestInfo.cs deleted file mode 100644 index 9cd9a5f..0000000 --- a/bc-sharp-crypto/src/asn1/x509/ObjectDigestInfo.cs +++ /dev/null @@ -1,179 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * ObjectDigestInfo ASN.1 structure used in v2 attribute certificates. - * - * 
-	 *  
-	 *    ObjectDigestInfo ::= SEQUENCE {
-	 *         digestedObjectType  ENUMERATED {
-	 *                 publicKey            (0),
-	 *                 publicKeyCert        (1),
-	 *                 otherObjectTypes     (2) },
-	 *                         -- otherObjectTypes MUST NOT
-	 *                         -- be used in this profile
-	 *         otherObjectTypeID   OBJECT IDENTIFIER OPTIONAL,
-	 *         digestAlgorithm     AlgorithmIdentifier,
-	 *         objectDigest        BIT STRING
-	 *    }
-	 *   
-	 *
- * - */ - public class ObjectDigestInfo - : Asn1Encodable - { - /** - * The public key is hashed. - */ - public const int PublicKey = 0; - - /** - * The public key certificate is hashed. - */ - public const int PublicKeyCert = 1; - - /** - * An other object is hashed. - */ - public const int OtherObjectDigest = 2; - - internal readonly DerEnumerated digestedObjectType; - internal readonly DerObjectIdentifier otherObjectTypeID; - internal readonly AlgorithmIdentifier digestAlgorithm; - internal readonly DerBitString objectDigest; - - public static ObjectDigestInfo GetInstance( - object obj) - { - if (obj == null || obj is ObjectDigestInfo) - { - return (ObjectDigestInfo) obj; - } - - if (obj is Asn1Sequence) - { - return new ObjectDigestInfo((Asn1Sequence) obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public static ObjectDigestInfo GetInstance( - Asn1TaggedObject obj, - bool isExplicit) - { - return GetInstance(Asn1Sequence.GetInstance(obj, isExplicit)); - } - - /** - * Constructor from given details. - *

- * If digestedObjectType is not {@link #publicKeyCert} or - * {@link #publicKey} otherObjectTypeID must be given, - * otherwise it is ignored.

- * - * @param digestedObjectType The digest object type. - * @param otherObjectTypeID The object type ID for - * otherObjectDigest. - * @param digestAlgorithm The algorithm identifier for the hash. - * @param objectDigest The hash value. - */ - public ObjectDigestInfo( - int digestedObjectType, - string otherObjectTypeID, - AlgorithmIdentifier digestAlgorithm, - byte[] objectDigest) - { - this.digestedObjectType = new DerEnumerated(digestedObjectType); - - if (digestedObjectType == OtherObjectDigest) - { - this.otherObjectTypeID = new DerObjectIdentifier(otherObjectTypeID); - } - - this.digestAlgorithm = digestAlgorithm; - - this.objectDigest = new DerBitString(objectDigest); - } - - private ObjectDigestInfo( - Asn1Sequence seq) - { - if (seq.Count > 4 || seq.Count < 3) - { - throw new ArgumentException("Bad sequence size: " + seq.Count); - } - - digestedObjectType = DerEnumerated.GetInstance(seq[0]); - - int offset = 0; - - if (seq.Count == 4) - { - otherObjectTypeID = DerObjectIdentifier.GetInstance(seq[1]); - offset++; - } - - digestAlgorithm = AlgorithmIdentifier.GetInstance(seq[1 + offset]); - objectDigest = DerBitString.GetInstance(seq[2 + offset]); - } - - public DerEnumerated DigestedObjectType - { - get { return digestedObjectType; } - } - - public DerObjectIdentifier OtherObjectTypeID - { - get { return otherObjectTypeID; } - } - - public AlgorithmIdentifier DigestAlgorithm - { - get { return digestAlgorithm; } - } - - public DerBitString ObjectDigest - { - get { return objectDigest; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * - * 
-		 *  
-		 *    ObjectDigestInfo ::= SEQUENCE {
-		 *         digestedObjectType  ENUMERATED {
-		 *                 publicKey            (0),
-		 *                 publicKeyCert        (1),
-		 *                 otherObjectTypes     (2) },
-		 *                         -- otherObjectTypes MUST NOT
-		 *                         -- be used in this profile
-		 *         otherObjectTypeID   OBJECT IDENTIFIER OPTIONAL,
-		 *         digestAlgorithm     AlgorithmIdentifier,
-		 *         objectDigest        BIT STRING
-		 *    }
-		 *   
-		 *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(digestedObjectType); - - if (otherObjectTypeID != null) - { - v.Add(otherObjectTypeID); - } - - v.Add(digestAlgorithm, objectDigest); - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/PolicyInformation.cs b/bc-sharp-crypto/src/asn1/x509/PolicyInformation.cs deleted file mode 100644 index 29d2450..0000000 --- a/bc-sharp-crypto/src/asn1/x509/PolicyInformation.cs +++ /dev/null @@ -1,80 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.X509 -{ - public class PolicyInformation - : Asn1Encodable - { - private readonly DerObjectIdentifier policyIdentifier; - private readonly Asn1Sequence policyQualifiers; - - private PolicyInformation( - Asn1Sequence seq) - { - if (seq.Count < 1 || seq.Count > 2) - { - throw new ArgumentException("Bad sequence size: " + seq.Count); - } - - policyIdentifier = DerObjectIdentifier.GetInstance(seq[0]); - - if (seq.Count > 1) - { - policyQualifiers = Asn1Sequence.GetInstance(seq[1]); - } - } - - public PolicyInformation( - DerObjectIdentifier policyIdentifier) - { - this.policyIdentifier = policyIdentifier; - } - - public PolicyInformation( - DerObjectIdentifier policyIdentifier, - Asn1Sequence policyQualifiers) - { - this.policyIdentifier = policyIdentifier; - this.policyQualifiers = policyQualifiers; - } - - public static PolicyInformation GetInstance( - object obj) - { - if (obj == null || obj is PolicyInformation) - { - return (PolicyInformation) obj; - } - - return new PolicyInformation(Asn1Sequence.GetInstance(obj)); - } - - public DerObjectIdentifier PolicyIdentifier - { - get { return policyIdentifier; } - } - - public Asn1Sequence PolicyQualifiers - { - get { return policyQualifiers; } - } - - /* - * PolicyInformation ::= Sequence { - * policyIdentifier CertPolicyId, - * policyQualifiers Sequence SIZE (1..MAX) OF - * PolicyQualifierInfo OPTIONAL } - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(policyIdentifier); - - if (policyQualifiers != null) - { - v.Add(policyQualifiers); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/PolicyMappings.cs b/bc-sharp-crypto/src/asn1/x509/PolicyMappings.cs deleted file mode 100644 index 928ad13..0000000 --- a/bc-sharp-crypto/src/asn1/x509/PolicyMappings.cs +++ /dev/null @@ -1,70 +0,0 @@ -using System.Collections; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * PolicyMappings V3 extension, described in RFC3280. - * 
-	 *    PolicyMappings ::= Sequence SIZE (1..MAX) OF Sequence {
-	 *      issuerDomainPolicy      CertPolicyId,
-	 *      subjectDomainPolicy     CertPolicyId }
-	 *
- * - * @see RFC 3280, section 4.2.1.6 - */ - public class PolicyMappings - : Asn1Encodable - { - private readonly Asn1Sequence seq; - - /** - * Creates a new PolicyMappings instance. - * - * @param seq an Asn1Sequence constructed as specified - * in RFC 3280 - */ - public PolicyMappings( - Asn1Sequence seq) - { - this.seq = seq; - } - -#if !(SILVERLIGHT || PORTABLE) - public PolicyMappings( - Hashtable mappings) - : this((IDictionary)mappings) - { - } -#endif - - /** - * Creates a new PolicyMappings instance. - * - * @param mappings a HashMap value that maps - * string oids - * to other string oids. - */ - public PolicyMappings( - IDictionary mappings) - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - foreach (string idp in mappings.Keys) - { - string sdp = (string) mappings[idp]; - - v.Add( - new DerSequence( - new DerObjectIdentifier(idp), - new DerObjectIdentifier(sdp))); - } - - seq = new DerSequence(v); - } - - public override Asn1Object ToAsn1Object() - { - return seq; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/PolicyQualifierId.cs b/bc-sharp-crypto/src/asn1/x509/PolicyQualifierId.cs deleted file mode 100644 index c858f08..0000000 --- a/bc-sharp-crypto/src/asn1/x509/PolicyQualifierId.cs +++ /dev/null @@ -1,28 +0,0 @@ -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * PolicyQualifierId, used in the CertificatePolicies - * X509V3 extension. - * - * 
-	 *    id-qt          OBJECT IDENTIFIER ::=  { id-pkix 2 }
-	 *    id-qt-cps      OBJECT IDENTIFIER ::=  { id-qt 1 }
-	 *    id-qt-unotice  OBJECT IDENTIFIER ::=  { id-qt 2 }
-	 *  PolicyQualifierId ::=
-	 *       OBJECT IDENTIFIER ( id-qt-cps | id-qt-unotice )
-	 *
- */ - public sealed class PolicyQualifierID : DerObjectIdentifier - { - private const string IdQt = "1.3.6.1.5.5.7.2"; - - private PolicyQualifierID( - string id) - : base(id) - { - } - - public static readonly PolicyQualifierID IdQtCps = new PolicyQualifierID(IdQt + ".1"); - public static readonly PolicyQualifierID IdQtUnotice = new PolicyQualifierID(IdQt + ".2"); - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/PolicyQualifierInfo.cs b/bc-sharp-crypto/src/asn1/x509/PolicyQualifierInfo.cs deleted file mode 100644 index 3cf6d7e..0000000 --- a/bc-sharp-crypto/src/asn1/x509/PolicyQualifierInfo.cs +++ /dev/null @@ -1,95 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * Policy qualifiers, used in the X509V3 CertificatePolicies - * extension. - * - * 
-     *   PolicyQualifierInfo ::= Sequence {
-     *       policyQualifierId  PolicyQualifierId,
-     *       qualifier          ANY DEFINED BY policyQualifierId }
-     *
- */ - public class PolicyQualifierInfo - : Asn1Encodable - { - private readonly DerObjectIdentifier policyQualifierId; - private readonly Asn1Encodable qualifier; - - /** - * Creates a new PolicyQualifierInfo instance. - * - * @param policyQualifierId a PolicyQualifierId value - * @param qualifier the qualifier, defined by the above field. - */ - public PolicyQualifierInfo( - DerObjectIdentifier policyQualifierId, - Asn1Encodable qualifier) - { - this.policyQualifierId = policyQualifierId; - this.qualifier = qualifier; - } - - /** - * Creates a new PolicyQualifierInfo containing a - * cPSuri qualifier. - * - * @param cps the CPS (certification practice statement) uri as a - * string. - */ - public PolicyQualifierInfo( - string cps) - { - policyQualifierId = PolicyQualifierID.IdQtCps; - qualifier = new DerIA5String(cps); - } - - /** - * Creates a new PolicyQualifierInfo instance. - * - * @param as PolicyQualifierInfo X509 structure - * encoded as an Asn1Sequence. - */ - private PolicyQualifierInfo( - Asn1Sequence seq) - { - if (seq.Count != 2) - throw new ArgumentException("Bad sequence size: " + seq.Count, "seq"); - - policyQualifierId = DerObjectIdentifier.GetInstance(seq[0]); - qualifier = seq[1]; - } - - public static PolicyQualifierInfo GetInstance( - object obj) - { - if (obj is PolicyQualifierInfo) - return (PolicyQualifierInfo)obj; - if (obj == null) - return null; - return new PolicyQualifierInfo(Asn1Sequence.GetInstance(obj)); - } - - public virtual DerObjectIdentifier PolicyQualifierId - { - get { return policyQualifierId; } - } - - public virtual Asn1Encodable Qualifier - { - get { return qualifier; } - } - - /** - * Returns a Der-encodable representation of this instance. - * - * @return a Asn1Object value - */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(policyQualifierId, qualifier); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/PrivateKeyUsagePeriod.cs b/bc-sharp-crypto/src/asn1/x509/PrivateKeyUsagePeriod.cs deleted file mode 100644 index a3d7a36..0000000 --- a/bc-sharp-crypto/src/asn1/x509/PrivateKeyUsagePeriod.cs +++ /dev/null @@ -1,84 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /// - /// 
-	/// PrivateKeyUsagePeriod ::= SEQUENCE
-	/// {
-	/// notBefore       [0]     GeneralizedTime OPTIONAL,
-	/// notAfter        [1]     GeneralizedTime OPTIONAL }
-	///
- /// - public class PrivateKeyUsagePeriod - : Asn1Encodable - { - public static PrivateKeyUsagePeriod GetInstance( - object obj) - { - if (obj is PrivateKeyUsagePeriod) - { - return (PrivateKeyUsagePeriod) obj; - } - - if (obj is Asn1Sequence) - { - return new PrivateKeyUsagePeriod((Asn1Sequence) obj); - } - - if (obj is X509Extension) - { - return GetInstance(X509Extension.ConvertValueToObject((X509Extension) obj)); - } - - throw new ArgumentException("unknown object in GetInstance: " + Platform.GetTypeName(obj), "obj"); - } - - private DerGeneralizedTime _notBefore, _notAfter; - - private PrivateKeyUsagePeriod( - Asn1Sequence seq) - { - foreach (Asn1TaggedObject tObj in seq) - { - if (tObj.TagNo == 0) - { - _notBefore = DerGeneralizedTime.GetInstance(tObj, false); - } - else if (tObj.TagNo == 1) - { - _notAfter = DerGeneralizedTime.GetInstance(tObj, false); - } - } - } - - public DerGeneralizedTime NotBefore - { - get { return _notBefore; } - } - - public DerGeneralizedTime NotAfter - { - get { return _notAfter; } - } - - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - if (_notBefore != null) - { - v.Add(new DerTaggedObject(false, 0, _notBefore)); - } - - if (_notAfter != null) - { - v.Add(new DerTaggedObject(false, 1, _notAfter)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/RSAPublicKeyStructure.cs b/bc-sharp-crypto/src/asn1/x509/RSAPublicKeyStructure.cs deleted file mode 100644 index 20fdd96..0000000 --- a/bc-sharp-crypto/src/asn1/x509/RSAPublicKeyStructure.cs +++ /dev/null @@ -1,93 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - public class RsaPublicKeyStructure - : Asn1Encodable - { - private BigInteger modulus; - private BigInteger publicExponent; - - public static RsaPublicKeyStructure GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static RsaPublicKeyStructure GetInstance( - object obj) - { - if (obj == null || obj is RsaPublicKeyStructure) - { - return (RsaPublicKeyStructure) obj; - } - - if (obj is Asn1Sequence) - { - return new RsaPublicKeyStructure((Asn1Sequence) obj); - } - - throw new ArgumentException("Invalid RsaPublicKeyStructure: " + Platform.GetTypeName(obj)); - } - - public RsaPublicKeyStructure( - BigInteger modulus, - BigInteger publicExponent) - { - if (modulus == null) - throw new ArgumentNullException("modulus"); - if (publicExponent == null) - throw new ArgumentNullException("publicExponent"); - if (modulus.SignValue <= 0) - throw new ArgumentException("Not a valid RSA modulus", "modulus"); - if (publicExponent.SignValue <= 0) - throw new ArgumentException("Not a valid RSA public exponent", "publicExponent"); - - this.modulus = modulus; - this.publicExponent = publicExponent; - } - - private RsaPublicKeyStructure( - Asn1Sequence seq) - { - if (seq.Count != 2) - throw new ArgumentException("Bad sequence size: " + seq.Count); - - // Note: we are accepting technically incorrect (i.e. negative) values here - modulus = DerInteger.GetInstance(seq[0]).PositiveValue; - publicExponent = DerInteger.GetInstance(seq[1]).PositiveValue; - } - - public BigInteger Modulus - { - get { return modulus; } - } - - public BigInteger PublicExponent - { - get { return publicExponent; } - } - - /** - * This outputs the key in Pkcs1v2 format. - * 
-         *      RSAPublicKey ::= Sequence {
-         *                          modulus Integer, -- n
-         *                          publicExponent Integer, -- e
-         *                      }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence( - new DerInteger(Modulus), - new DerInteger(PublicExponent)); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/ReasonFlags.cs b/bc-sharp-crypto/src/asn1/x509/ReasonFlags.cs deleted file mode 100644 index ad45e84..0000000 --- a/bc-sharp-crypto/src/asn1/x509/ReasonFlags.cs +++ /dev/null @@ -1,45 +0,0 @@ -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * The ReasonFlags object. - * 
-     * ReasonFlags ::= BIT STRING {
-     *    unused(0),
-     *    keyCompromise(1),
-     *    cACompromise(2),
-     *    affiliationChanged(3),
-     *    superseded(4),
-     *    cessationOfOperation(5),
-     *    certficateHold(6)
-     * }
-     *
- */ - public class ReasonFlags - : DerBitString - { - public const int Unused = (1 << 7); - public const int KeyCompromise = (1 << 6); - public const int CACompromise = (1 << 5); - public const int AffiliationChanged = (1 << 4); - public const int Superseded = (1 << 3); - public const int CessationOfOperation = (1 << 2); - public const int CertificateHold = (1 << 1); - public const int PrivilegeWithdrawn = (1 << 0); - public const int AACompromise = (1 << 15); - - /** - * @param reasons - the bitwise OR of the Key Reason flags giving the - * allowed uses for the key. - */ - public ReasonFlags(int reasons) - : base(reasons) - { - } - - public ReasonFlags( - DerBitString reasons) - : base(reasons.GetBytes(), reasons.PadBits) - { - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/RoleSyntax.cs b/bc-sharp-crypto/src/asn1/x509/RoleSyntax.cs deleted file mode 100644 index 48c3c6c..0000000 --- a/bc-sharp-crypto/src/asn1/x509/RoleSyntax.cs +++ /dev/null @@ -1,230 +0,0 @@ -using System; -using System.Text; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * Implementation of the RoleSyntax object as specified by the RFC3281. - * - * 
-	* RoleSyntax ::= SEQUENCE {
-	*                 roleAuthority  [0] GeneralNames OPTIONAL,
-	*                 roleName       [1] GeneralName
-	*           }
-	*
- */ - public class RoleSyntax - : Asn1Encodable - { - private readonly GeneralNames roleAuthority; - private readonly GeneralName roleName; - - /** - * RoleSyntax factory method. - * @param obj the object used to construct an instance of - * RoleSyntax. It must be an instance of RoleSyntax - * or Asn1Sequence. - * @return the instance of RoleSyntax built from the - * supplied object. - * @throws java.lang.ArgumentException if the object passed - * to the factory is not an instance of RoleSyntax or - * Asn1Sequence. - */ - public static RoleSyntax GetInstance( - object obj) - { - if (obj is RoleSyntax) - return (RoleSyntax)obj; - - if (obj != null) - return new RoleSyntax(Asn1Sequence.GetInstance(obj)); - - return null; - } - - /** - * Constructor. - * @param roleAuthority the role authority of this RoleSyntax. - * @param roleName the role name of this RoleSyntax. - */ - public RoleSyntax( - GeneralNames roleAuthority, - GeneralName roleName) - { - if (roleName == null - || roleName.TagNo != GeneralName.UniformResourceIdentifier - || ((IAsn1String) roleName.Name).GetString().Equals("")) - { - throw new ArgumentException("the role name MUST be non empty and MUST " + - "use the URI option of GeneralName"); - } - - this.roleAuthority = roleAuthority; - this.roleName = roleName; - } - - /** - * Constructor. Invoking this constructor is the same as invoking - * new RoleSyntax(null, roleName). - * @param roleName the role name of this RoleSyntax. - */ - public RoleSyntax( - GeneralName roleName) - : this(null, roleName) - { - } - - /** - * Utility constructor. Takes a string argument representing - * the role name, builds a GeneralName to hold the role name - * and calls the constructor that takes a GeneralName. - * @param roleName - */ - public RoleSyntax( - string roleName) - : this(new GeneralName(GeneralName.UniformResourceIdentifier, - (roleName == null)? "": roleName)) - { - } - - /** - * Constructor that builds an instance of RoleSyntax by - * extracting the encoded elements from the Asn1Sequence - * object supplied. - * @param seq an instance of Asn1Sequence that holds - * the encoded elements used to build this RoleSyntax. - */ - private RoleSyntax( - Asn1Sequence seq) - { - if (seq.Count < 1 || seq.Count > 2) - { - throw new ArgumentException("Bad sequence size: " + seq.Count); - } - - for (int i = 0; i != seq.Count; i++) - { - Asn1TaggedObject taggedObject = Asn1TaggedObject.GetInstance(seq[i]); - switch (taggedObject.TagNo) - { - case 0: - roleAuthority = GeneralNames.GetInstance(taggedObject, false); - break; - case 1: - roleName = GeneralName.GetInstance(taggedObject, true); - break; - default: - throw new ArgumentException("Unknown tag in RoleSyntax"); - } - } - } - - /** - * Gets the role authority of this RoleSyntax. - * @return an instance of GeneralNames holding the - * role authority of this RoleSyntax. - */ - public GeneralNames RoleAuthority - { - get { return this.roleAuthority; } - } - - /** - * Gets the role name of this RoleSyntax. - * @return an instance of GeneralName holding the - * role name of this RoleSyntax. - */ - public GeneralName RoleName - { - get { return this.roleName; } - } - - /** - * Gets the role name as a java.lang.string object. - * @return the role name of this RoleSyntax represented as a - * string object. - */ - public string GetRoleNameAsString() - { - return ((IAsn1String) this.roleName.Name).GetString(); - } - - /** - * Gets the role authority as a string[] object. - * @return the role authority of this RoleSyntax represented as a - * string[] array. - */ - public string[] GetRoleAuthorityAsString() - { - if (roleAuthority == null) - { - return new string[0]; - } - - GeneralName[] names = roleAuthority.GetNames(); - string[] namesString = new string[names.Length]; - for(int i = 0; i < names.Length; i++) - { - Asn1Encodable asn1Value = names[i].Name; - if (asn1Value is IAsn1String) - { - namesString[i] = ((IAsn1String) asn1Value).GetString(); - } - else - { - namesString[i] = asn1Value.ToString(); - } - } - - return namesString; - } - - /** - * Implementation of the method ToAsn1Object as - * required by the superclass ASN1Encodable. - * - * 
-		* RoleSyntax ::= SEQUENCE {
-		*                 roleAuthority  [0] GeneralNames OPTIONAL,
-		*                 roleName       [1] GeneralName
-		*           }
-		*
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - if (this.roleAuthority != null) - { - v.Add(new DerTaggedObject(false, 0, roleAuthority)); - } - - v.Add(new DerTaggedObject(true, 1, roleName)); - - return new DerSequence(v); - } - - public override string ToString() - { - StringBuilder buff = new StringBuilder("Name: " + this.GetRoleNameAsString() + - " - Auth: "); - - if (this.roleAuthority == null || roleAuthority.GetNames().Length == 0) - { - buff.Append("N/A"); - } - else - { - string[] names = this.GetRoleAuthorityAsString(); - buff.Append('[').Append(names[0]); - for(int i = 1; i < names.Length; i++) - { - buff.Append(", ").Append(names[i]); - } - buff.Append(']'); - } - - return buff.ToString(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/SubjectDirectoryAttributes.cs b/bc-sharp-crypto/src/asn1/x509/SubjectDirectoryAttributes.cs deleted file mode 100644 index 77923e0..0000000 --- a/bc-sharp-crypto/src/asn1/x509/SubjectDirectoryAttributes.cs +++ /dev/null @@ -1,142 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * This extension may contain further X.500 attributes of the subject. See also - * RFC 3039. - * - * 
-	 *     SubjectDirectoryAttributes ::= Attributes
-	 *     Attributes ::= SEQUENCE SIZE (1..MAX) OF Attribute
-	 *     Attribute ::= SEQUENCE
-	 *     {
-	 *       type AttributeType
-	 *       values SET OF AttributeValue
-	 *     }
-	 *
-	 *     AttributeType ::= OBJECT IDENTIFIER
-	 *     AttributeValue ::= ANY DEFINED BY AttributeType
-	 *
- * - * @see org.bouncycastle.asn1.x509.X509Name for AttributeType ObjectIdentifiers. - */ - public class SubjectDirectoryAttributes - : Asn1Encodable - { - private readonly IList attributes; - - public static SubjectDirectoryAttributes GetInstance( - object obj) - { - if (obj == null || obj is SubjectDirectoryAttributes) - { - return (SubjectDirectoryAttributes) obj; - } - - if (obj is Asn1Sequence) - { - return new SubjectDirectoryAttributes((Asn1Sequence) obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - /** - * Constructor from Asn1Sequence. - * - * The sequence is of type SubjectDirectoryAttributes: - * - * 
-		 *      SubjectDirectoryAttributes ::= Attributes
-		 *      Attributes ::= SEQUENCE SIZE (1..MAX) OF Attribute
-		 *      Attribute ::= SEQUENCE
-		 *      {
-		 *        type AttributeType
-		 *        values SET OF AttributeValue
-		 *      }
-		 *
-		 *      AttributeType ::= OBJECT IDENTIFIER
-		 *      AttributeValue ::= ANY DEFINED BY AttributeType
-		 *
- * - * @param seq - * The ASN.1 sequence. - */ - private SubjectDirectoryAttributes( - Asn1Sequence seq) - { - this.attributes = Platform.CreateArrayList(); - foreach (object o in seq) - { - Asn1Sequence s = Asn1Sequence.GetInstance(o); - attributes.Add(AttributeX509.GetInstance(s)); - } - } - -#if !(SILVERLIGHT || PORTABLE) - [Obsolete] - public SubjectDirectoryAttributes( - ArrayList attributes) - : this((IList)attributes) - { - } -#endif - - /** - * Constructor from an ArrayList of attributes. - * - * The ArrayList consists of attributes of type {@link Attribute Attribute} - * - * @param attributes The attributes. - * - */ - public SubjectDirectoryAttributes( - IList attributes) - { - this.attributes = Platform.CreateArrayList(attributes); - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * - * Returns: - * - * 
-		 *      SubjectDirectoryAttributes ::= Attributes
-		 *      Attributes ::= SEQUENCE SIZE (1..MAX) OF Attribute
-		 *      Attribute ::= SEQUENCE
-		 *      {
-		 *        type AttributeType
-		 *        values SET OF AttributeValue
-		 *      }
-		 *
-		 *      AttributeType ::= OBJECT IDENTIFIER
-		 *      AttributeValue ::= ANY DEFINED BY AttributeType
-		 *
- * - * @return a DERObject - */ - public override Asn1Object ToAsn1Object() - { - AttributeX509[] v = new AttributeX509[attributes.Count]; - for (int i = 0; i < attributes.Count; ++i) - { - v[i] = (AttributeX509)attributes[i]; - } - return new DerSequence(v); - } - - /** - * @return Returns the attributes. - */ - public IEnumerable Attributes - { - get { return new EnumerableProxy(attributes); } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/SubjectKeyIdentifier.cs b/bc-sharp-crypto/src/asn1/x509/SubjectKeyIdentifier.cs deleted file mode 100644 index f2e6cc0..0000000 --- a/bc-sharp-crypto/src/asn1/x509/SubjectKeyIdentifier.cs +++ /dev/null @@ -1,142 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * The SubjectKeyIdentifier object. - * 
-     * SubjectKeyIdentifier::= OCTET STRING
-     *
- */ - public class SubjectKeyIdentifier - : Asn1Encodable - { - private readonly byte[] keyIdentifier; - - public static SubjectKeyIdentifier GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1OctetString.GetInstance(obj, explicitly)); - } - - public static SubjectKeyIdentifier GetInstance( - object obj) - { - if (obj is SubjectKeyIdentifier) - { - return (SubjectKeyIdentifier) obj; - } - - if (obj is SubjectPublicKeyInfo) - { - return new SubjectKeyIdentifier((SubjectPublicKeyInfo) obj); - } - - if (obj is Asn1OctetString) - { - return new SubjectKeyIdentifier((Asn1OctetString) obj); - } - - if (obj is X509Extension) - { - return GetInstance(X509Extension.ConvertValueToObject((X509Extension) obj)); - } - - throw new ArgumentException("Invalid SubjectKeyIdentifier: " + Platform.GetTypeName(obj)); - } - - public SubjectKeyIdentifier( - byte[] keyID) - { - if (keyID == null) - throw new ArgumentNullException("keyID"); - - this.keyIdentifier = keyID; - } - - public SubjectKeyIdentifier( - Asn1OctetString keyID) - { - this.keyIdentifier = keyID.GetOctets(); - } - - /** - * Calculates the keyIdentifier using a SHA1 hash over the BIT STRING - * from SubjectPublicKeyInfo as defined in RFC3280. - * - * @param spki the subject public key info. - */ - public SubjectKeyIdentifier( - SubjectPublicKeyInfo spki) - { - this.keyIdentifier = GetDigest(spki); - } - - public byte[] GetKeyIdentifier() - { - return keyIdentifier; - } - - public override Asn1Object ToAsn1Object() - { - return new DerOctetString(keyIdentifier); - } - - /** - * Return a RFC 3280 type 1 key identifier. As in: - * 
-		 * (1) The keyIdentifier is composed of the 160-bit SHA-1 hash of the
-		 * value of the BIT STRING subjectPublicKey (excluding the tag,
-		 * length, and number of unused bits).
-		 *
- * @param keyInfo the key info object containing the subjectPublicKey field. - * @return the key identifier. - */ - public static SubjectKeyIdentifier CreateSha1KeyIdentifier( - SubjectPublicKeyInfo keyInfo) - { - return new SubjectKeyIdentifier(keyInfo); - } - - /** - * Return a RFC 3280 type 2 key identifier. As in: - * 
-		 * (2) The keyIdentifier is composed of a four bit type field with
-		 * the value 0100 followed by the least significant 60 bits of the
-		 * SHA-1 hash of the value of the BIT STRING subjectPublicKey.
-		 *
- * @param keyInfo the key info object containing the subjectPublicKey field. - * @return the key identifier. - */ - public static SubjectKeyIdentifier CreateTruncatedSha1KeyIdentifier( - SubjectPublicKeyInfo keyInfo) - { - byte[] dig = GetDigest(keyInfo); - byte[] id = new byte[8]; - - Array.Copy(dig, dig.Length - 8, id, 0, id.Length); - - id[0] &= 0x0f; - id[0] |= 0x40; - - return new SubjectKeyIdentifier(id); - } - - private static byte[] GetDigest( - SubjectPublicKeyInfo spki) - { - IDigest digest = new Sha1Digest(); - byte[] resBuf = new byte[digest.GetDigestSize()]; - - byte[] bytes = spki.PublicKeyData.GetBytes(); - digest.BlockUpdate(bytes, 0, bytes.Length); - digest.DoFinal(resBuf, 0); - return resBuf; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/SubjectPublicKeyInfo.cs b/bc-sharp-crypto/src/asn1/x509/SubjectPublicKeyInfo.cs deleted file mode 100644 index 477329b..0000000 --- a/bc-sharp-crypto/src/asn1/x509/SubjectPublicKeyInfo.cs +++ /dev/null @@ -1,102 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * The object that contains the public key stored in a certficate. - *

- * The GetEncoded() method in the public keys in the JCE produces a DER - * encoded one of these.

- */ - public class SubjectPublicKeyInfo - : Asn1Encodable - { - private readonly AlgorithmIdentifier algID; - private readonly DerBitString keyData; - - public static SubjectPublicKeyInfo GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static SubjectPublicKeyInfo GetInstance( - object obj) - { - if (obj is SubjectPublicKeyInfo) - return (SubjectPublicKeyInfo) obj; - - if (obj != null) - return new SubjectPublicKeyInfo(Asn1Sequence.GetInstance(obj)); - - return null; - } - - public SubjectPublicKeyInfo( - AlgorithmIdentifier algID, - Asn1Encodable publicKey) - { - this.keyData = new DerBitString(publicKey); - this.algID = algID; - } - - public SubjectPublicKeyInfo( - AlgorithmIdentifier algID, - byte[] publicKey) - { - this.keyData = new DerBitString(publicKey); - this.algID = algID; - } - - private SubjectPublicKeyInfo( - Asn1Sequence seq) - { - if (seq.Count != 2) - throw new ArgumentException("Bad sequence size: " + seq.Count, "seq"); - - this.algID = AlgorithmIdentifier.GetInstance(seq[0]); - this.keyData = DerBitString.GetInstance(seq[1]); - } - - public AlgorithmIdentifier AlgorithmID - { - get { return algID; } - } - - /** - * for when the public key is an encoded object - if the bitstring - * can't be decoded this routine raises an IOException. - * - * @exception IOException - if the bit string doesn't represent a Der - * encoded object. - */ - public Asn1Object GetPublicKey() - { - return Asn1Object.FromByteArray(keyData.GetOctets()); - } - - /** - * for when the public key is raw bits... - */ - public DerBitString PublicKeyData - { - get { return keyData; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * SubjectPublicKeyInfo ::= Sequence {
-         *                          algorithm AlgorithmIdentifier,
-         *                          publicKey BIT STRING }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(algID, keyData); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/TBSCertList.cs b/bc-sharp-crypto/src/asn1/x509/TBSCertList.cs deleted file mode 100644 index 5767a7f..0000000 --- a/bc-sharp-crypto/src/asn1/x509/TBSCertList.cs +++ /dev/null @@ -1,275 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Asn1.X509 -{ - public class CrlEntry - : Asn1Encodable - { - internal Asn1Sequence seq; - internal DerInteger userCertificate; - internal Time revocationDate; - internal X509Extensions crlEntryExtensions; - - public CrlEntry( - Asn1Sequence seq) - { - if (seq.Count < 2 || seq.Count > 3) - { - throw new ArgumentException("Bad sequence size: " + seq.Count); - } - - this.seq = seq; - - userCertificate = DerInteger.GetInstance(seq[0]); - revocationDate = Time.GetInstance(seq[1]); - } - - public DerInteger UserCertificate - { - get { return userCertificate; } - } - - public Time RevocationDate - { - get { return revocationDate; } - } - - public X509Extensions Extensions - { - get - { - if (crlEntryExtensions == null && seq.Count == 3) - { - crlEntryExtensions = X509Extensions.GetInstance(seq[2]); - } - - return crlEntryExtensions; - } - } - - public override Asn1Object ToAsn1Object() - { - return seq; - } - } - - /** - * PKIX RFC-2459 - TbsCertList object. - * 
-     * TbsCertList  ::=  Sequence  {
-     *      version                 Version OPTIONAL,
-     *                                   -- if present, shall be v2
-     *      signature               AlgorithmIdentifier,
-     *      issuer                  Name,
-     *      thisUpdate              Time,
-     *      nextUpdate              Time OPTIONAL,
-     *      revokedCertificates     Sequence OF Sequence  {
-     *           userCertificate         CertificateSerialNumber,
-     *           revocationDate          Time,
-     *           crlEntryExtensions      Extensions OPTIONAL
-     *                                         -- if present, shall be v2
-     *                                }  OPTIONAL,
-     *      crlExtensions           [0]  EXPLICIT Extensions OPTIONAL
-     *                                         -- if present, shall be v2
-     *                                }
-     *
- */ - public class TbsCertificateList - : Asn1Encodable - { - private class RevokedCertificatesEnumeration - : IEnumerable - { - private readonly IEnumerable en; - - internal RevokedCertificatesEnumeration( - IEnumerable en) - { - this.en = en; - } - - public IEnumerator GetEnumerator() - { - return new RevokedCertificatesEnumerator(en.GetEnumerator()); - } - - private class RevokedCertificatesEnumerator - : IEnumerator - { - private readonly IEnumerator e; - - internal RevokedCertificatesEnumerator( - IEnumerator e) - { - this.e = e; - } - - public bool MoveNext() - { - return e.MoveNext(); - } - - public void Reset() - { - e.Reset(); - } - - public object Current - { - get { return new CrlEntry(Asn1Sequence.GetInstance(e.Current)); } - } - } - } - - internal Asn1Sequence seq; - internal DerInteger version; - internal AlgorithmIdentifier signature; - internal X509Name issuer; - internal Time thisUpdate; - internal Time nextUpdate; - internal Asn1Sequence revokedCertificates; - internal X509Extensions crlExtensions; - - public static TbsCertificateList GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static TbsCertificateList GetInstance( - object obj) - { - TbsCertificateList list = obj as TbsCertificateList; - - if (obj == null || list != null) - { - return list; - } - - if (obj is Asn1Sequence) - { - return new TbsCertificateList((Asn1Sequence) obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - internal TbsCertificateList( - Asn1Sequence seq) - { - if (seq.Count < 3 || seq.Count > 7) - { - throw new ArgumentException("Bad sequence size: " + seq.Count); - } - - int seqPos = 0; - - this.seq = seq; - - if (seq[seqPos] is DerInteger) - { - version = DerInteger.GetInstance(seq[seqPos++]); - } - else - { - version = new DerInteger(0); - } - - signature = AlgorithmIdentifier.GetInstance(seq[seqPos++]); - issuer = X509Name.GetInstance(seq[seqPos++]); - thisUpdate = Time.GetInstance(seq[seqPos++]); - - if (seqPos < seq.Count - && (seq[seqPos] is DerUtcTime - || seq[seqPos] is DerGeneralizedTime - || seq[seqPos] is Time)) - { - nextUpdate = Time.GetInstance(seq[seqPos++]); - } - - if (seqPos < seq.Count - && !(seq[seqPos] is DerTaggedObject)) - { - revokedCertificates = Asn1Sequence.GetInstance(seq[seqPos++]); - } - - if (seqPos < seq.Count - && seq[seqPos] is DerTaggedObject) - { - crlExtensions = X509Extensions.GetInstance(seq[seqPos]); - } - } - - public int Version - { - get { return version.Value.IntValue + 1; } - } - - public DerInteger VersionNumber - { - get { return version; } - } - - public AlgorithmIdentifier Signature - { - get { return signature; } - } - - public X509Name Issuer - { - get { return issuer; } - } - - public Time ThisUpdate - { - get { return thisUpdate; } - } - - public Time NextUpdate - { - get { return nextUpdate; } - } - - public CrlEntry[] GetRevokedCertificates() - { - if (revokedCertificates == null) - { - return new CrlEntry[0]; - } - - CrlEntry[] entries = new CrlEntry[revokedCertificates.Count]; - - for (int i = 0; i < entries.Length; i++) - { - entries[i] = new CrlEntry(Asn1Sequence.GetInstance(revokedCertificates[i])); - } - - return entries; - } - - public IEnumerable GetRevokedCertificateEnumeration() - { - if (revokedCertificates == null) - { - return EmptyEnumerable.Instance; - } - - return new RevokedCertificatesEnumeration(revokedCertificates); - } - - public X509Extensions Extensions - { - get { return crlExtensions; } - } - - public override Asn1Object ToAsn1Object() - { - return seq; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/TBSCertificateStructure.cs b/bc-sharp-crypto/src/asn1/x509/TBSCertificateStructure.cs deleted file mode 100644 index fc7c39b..0000000 --- a/bc-sharp-crypto/src/asn1/x509/TBSCertificateStructure.cs +++ /dev/null @@ -1,185 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.Pkcs; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * The TbsCertificate object. - * 
-     * TbsCertificate ::= Sequence {
-     *      version          [ 0 ]  Version DEFAULT v1(0),
-     *      serialNumber            CertificateSerialNumber,
-     *      signature               AlgorithmIdentifier,
-     *      issuer                  Name,
-     *      validity                Validity,
-     *      subject                 Name,
-     *      subjectPublicKeyInfo    SubjectPublicKeyInfo,
-     *      issuerUniqueID    [ 1 ] IMPLICIT UniqueIdentifier OPTIONAL,
-     *      subjectUniqueID   [ 2 ] IMPLICIT UniqueIdentifier OPTIONAL,
-     *      extensions        [ 3 ] Extensions OPTIONAL
-     *      }
-     *
- *

- * Note: issuerUniqueID and subjectUniqueID are both deprecated by the IETF. This class - * will parse them, but you really shouldn't be creating new ones.

- */ - public class TbsCertificateStructure - : Asn1Encodable - { - internal Asn1Sequence seq; - internal DerInteger version; - internal DerInteger serialNumber; - internal AlgorithmIdentifier signature; - internal X509Name issuer; - internal Time startDate, endDate; - internal X509Name subject; - internal SubjectPublicKeyInfo subjectPublicKeyInfo; - internal DerBitString issuerUniqueID; - internal DerBitString subjectUniqueID; - internal X509Extensions extensions; - - public static TbsCertificateStructure GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static TbsCertificateStructure GetInstance( - object obj) - { - if (obj is TbsCertificateStructure) - return (TbsCertificateStructure) obj; - - if (obj != null) - return new TbsCertificateStructure(Asn1Sequence.GetInstance(obj)); - - return null; - } - - internal TbsCertificateStructure( - Asn1Sequence seq) - { - int seqStart = 0; - - this.seq = seq; - - // - // some certficates don't include a version number - we assume v1 - // - if (seq[0] is DerTaggedObject) - { - version = DerInteger.GetInstance((Asn1TaggedObject)seq[0], true); - } - else - { - seqStart = -1; // field 0 is missing! - version = new DerInteger(0); - } - - serialNumber = DerInteger.GetInstance(seq[seqStart + 1]); - - signature = AlgorithmIdentifier.GetInstance(seq[seqStart + 2]); - issuer = X509Name.GetInstance(seq[seqStart + 3]); - - // - // before and after dates - // - Asn1Sequence dates = (Asn1Sequence)seq[seqStart + 4]; - - startDate = Time.GetInstance(dates[0]); - endDate = Time.GetInstance(dates[1]); - - subject = X509Name.GetInstance(seq[seqStart + 5]); - - // - // public key info. - // - subjectPublicKeyInfo = SubjectPublicKeyInfo.GetInstance(seq[seqStart + 6]); - - for (int extras = seq.Count - (seqStart + 6) - 1; extras > 0; extras--) - { - DerTaggedObject extra = (DerTaggedObject) seq[seqStart + 6 + extras]; - - switch (extra.TagNo) - { - case 1: - issuerUniqueID = DerBitString.GetInstance(extra, false); - break; - case 2: - subjectUniqueID = DerBitString.GetInstance(extra, false); - break; - case 3: - extensions = X509Extensions.GetInstance(extra); - break; - } - } - } - - public int Version - { - get { return version.Value.IntValue + 1; } - } - - public DerInteger VersionNumber - { - get { return version; } - } - - public DerInteger SerialNumber - { - get { return serialNumber; } - } - - public AlgorithmIdentifier Signature - { - get { return signature; } - } - - public X509Name Issuer - { - get { return issuer; } - } - - public Time StartDate - { - get { return startDate; } - } - - public Time EndDate - { - get { return endDate; } - } - - public X509Name Subject - { - get { return subject; } - } - - public SubjectPublicKeyInfo SubjectPublicKeyInfo - { - get { return subjectPublicKeyInfo; } - } - - public DerBitString IssuerUniqueID - { - get { return issuerUniqueID; } - } - - public DerBitString SubjectUniqueID - { - get { return subjectUniqueID; } - } - - public X509Extensions Extensions - { - get { return extensions; } - } - - public override Asn1Object ToAsn1Object() - { - return seq; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/Target.cs b/bc-sharp-crypto/src/asn1/x509/Target.cs deleted file mode 100644 index 7c4f9db..0000000 --- a/bc-sharp-crypto/src/asn1/x509/Target.cs +++ /dev/null @@ -1,141 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * Target structure used in target information extension for attribute - * certificates from RFC 3281. - * - * 
-	 *     Target  ::= CHOICE {
-	 *       targetName          [0] GeneralName,
-	 *       targetGroup         [1] GeneralName,
-	 *       targetCert          [2] TargetCert
-	 *     }
-	 *
- * - *

- * The targetCert field is currently not supported and must not be used - * according to RFC 3281.

- */ - public class Target - : Asn1Encodable, IAsn1Choice - { - public enum Choice - { - Name = 0, - Group = 1 - }; - - private readonly GeneralName targetName; - private readonly GeneralName targetGroup; - - /** - * Creates an instance of a Target from the given object. - *

- * obj can be a Target or a {@link Asn1TaggedObject}

- * - * @param obj The object. - * @return A Target instance. - * @throws ArgumentException if the given object cannot be - * interpreted as Target. - */ - public static Target GetInstance( - object obj) - { - if (obj is Target) - { - return (Target) obj; - } - - if (obj is Asn1TaggedObject) - { - return new Target((Asn1TaggedObject) obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - /** - * Constructor from Asn1TaggedObject. - * - * @param tagObj The tagged object. - * @throws ArgumentException if the encoding is wrong. - */ - private Target( - Asn1TaggedObject tagObj) - { - switch ((Choice) tagObj.TagNo) - { - case Choice.Name: // GeneralName is already a choice so explicit - targetName = GeneralName.GetInstance(tagObj, true); - break; - case Choice.Group: - targetGroup = GeneralName.GetInstance(tagObj, true); - break; - default: - throw new ArgumentException("unknown tag: " + tagObj.TagNo); - } - } - - /** - * Constructor from given details. - *

- * Exactly one of the parameters must be not null.

- * - * @param type the choice type to apply to the name. - * @param name the general name. - * @throws ArgumentException if type is invalid. - */ - public Target( - Choice type, - GeneralName name) - : this(new DerTaggedObject((int) type, name)) - { - } - - /** - * @return Returns the targetGroup. - */ - public virtual GeneralName TargetGroup - { - get { return targetGroup; } - } - - /** - * @return Returns the targetName. - */ - public virtual GeneralName TargetName - { - get { return targetName; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * - * Returns: - * - * 
-		 *     Target  ::= CHOICE {
-		 *       targetName          [0] GeneralName,
-		 *       targetGroup         [1] GeneralName,
-		 *       targetCert          [2] TargetCert
-		 *     }
-		 *
- * - * @return an Asn1Object - */ - public override Asn1Object ToAsn1Object() - { - // GeneralName is a choice already so most be explicitly tagged - if (targetName != null) - { - return new DerTaggedObject(true, 0, targetName); - } - - return new DerTaggedObject(true, 1, targetGroup); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/TargetInformation.cs b/bc-sharp-crypto/src/asn1/x509/TargetInformation.cs deleted file mode 100644 index 2bf2189..0000000 --- a/bc-sharp-crypto/src/asn1/x509/TargetInformation.cs +++ /dev/null @@ -1,125 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * Target information extension for attributes certificates according to RFC - * 3281. - * - * 
-	 *           SEQUENCE OF Targets
-	 *
- * - */ - public class TargetInformation - : Asn1Encodable - { - private readonly Asn1Sequence targets; - - /** - * Creates an instance of a TargetInformation from the given object. - *

- * obj can be a TargetInformation or a {@link Asn1Sequence}

- * - * @param obj The object. - * @return A TargetInformation instance. - * @throws ArgumentException if the given object cannot be interpreted as TargetInformation. - */ - public static TargetInformation GetInstance( - object obj) - { - if (obj is TargetInformation) - { - return (TargetInformation) obj; - } - - if (obj is Asn1Sequence) - { - return new TargetInformation((Asn1Sequence) obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - /** - * Constructor from a Asn1Sequence. - * - * @param seq The Asn1Sequence. - * @throws ArgumentException if the sequence does not contain - * correctly encoded Targets elements. - */ - private TargetInformation( - Asn1Sequence targets) - { - this.targets = targets; - } - - /** - * Returns the targets in this target information extension. - *

- * The ArrayList is cloned before it is returned.

- * - * @return Returns the targets. - */ - public virtual Targets[] GetTargetsObjects() - { - Targets[] result = new Targets[targets.Count]; - - for (int i = 0; i < targets.Count; ++i) - { - result[i] = Targets.GetInstance(targets[i]); - } - - return result; - } - - /** - * Constructs a target information from a single targets element. - * According to RFC 3281 only one targets element must be produced. - * - * @param targets A Targets instance. - */ - public TargetInformation( - Targets targets) - { - this.targets = new DerSequence(targets); - } - - /** - * According to RFC 3281 only one targets element must be produced. If - * multiple targets are given they must be merged in - * into one targets element. - * - * @param targets An array with {@link Targets}. - */ - public TargetInformation( - Target[] targets) - : this(new Targets(targets)) - { - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * - * Returns: - * - * 
-		 *          SEQUENCE OF Targets
-		 *
- * - *

- * According to RFC 3281 only one targets element must be produced. If - * multiple targets are given in the constructor they are merged into one - * targets element. If this was produced from a - * {@link Org.BouncyCastle.Asn1.Asn1Sequence} the encoding is kept.

- * - * @return an Asn1Object - */ - public override Asn1Object ToAsn1Object() - { - return targets; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/Targets.cs b/bc-sharp-crypto/src/asn1/x509/Targets.cs deleted file mode 100644 index 0387e1f..0000000 --- a/bc-sharp-crypto/src/asn1/x509/Targets.cs +++ /dev/null @@ -1,123 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * Targets structure used in target information extension for attribute - * certificates from RFC 3281. - * - * 
-	 *            Targets ::= SEQUENCE OF Target
-	 *           
-	 *            Target  ::= CHOICE {
-	 *              targetName          [0] GeneralName,
-	 *              targetGroup         [1] GeneralName,
-	 *              targetCert          [2] TargetCert
-	 *            }
-	 *           
-	 *            TargetCert  ::= SEQUENCE {
-	 *              targetCertificate    IssuerSerial,
-	 *              targetName           GeneralName OPTIONAL,
-	 *              certDigestInfo       ObjectDigestInfo OPTIONAL
-	 *            }
-	 *
- * - * @see org.bouncycastle.asn1.x509.Target - * @see org.bouncycastle.asn1.x509.TargetInformation - */ - public class Targets - : Asn1Encodable - { - private readonly Asn1Sequence targets; - - /** - * Creates an instance of a Targets from the given object. - *

- * obj can be a Targets or a {@link Asn1Sequence}

- * - * @param obj The object. - * @return A Targets instance. - * @throws ArgumentException if the given object cannot be interpreted as Target. - */ - public static Targets GetInstance( - object obj) - { - if (obj is Targets) - { - return (Targets) obj; - } - - if (obj is Asn1Sequence) - { - return new Targets((Asn1Sequence) obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - /** - * Constructor from Asn1Sequence. - * - * @param targets The ASN.1 SEQUENCE. - * @throws ArgumentException if the contents of the sequence are - * invalid. - */ - private Targets( - Asn1Sequence targets) - { - this.targets = targets; - } - - /** - * Constructor from given targets. - *

- * The ArrayList is copied.

- * - * @param targets An ArrayList of {@link Target}s. - * @see Target - * @throws ArgumentException if the ArrayList contains not only Targets. - */ - public Targets( - Target[] targets) - { - this.targets = new DerSequence(targets); - } - - /** - * Returns the targets in an ArrayList. - *

- * The ArrayList is cloned before it is returned.

- * - * @return Returns the targets. - */ - public virtual Target[] GetTargets() - { - Target[] result = new Target[targets.Count]; - - for (int i = 0; i < targets.Count; ++i) - { - result[i] = Target.GetInstance(targets[i]); - } - - return result; - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * - * Returns: - * - * 
-		 *            Targets ::= SEQUENCE OF Target
-		 *
- * - * @return an Asn1Object - */ - public override Asn1Object ToAsn1Object() - { - return targets; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/Time.cs b/bc-sharp-crypto/src/asn1/x509/Time.cs deleted file mode 100644 index fa3936d..0000000 --- a/bc-sharp-crypto/src/asn1/x509/Time.cs +++ /dev/null @@ -1,122 +0,0 @@ -using System; -using System.Globalization; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - public class Time - : Asn1Encodable, IAsn1Choice - { - private readonly Asn1Object time; - - public static Time GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(obj.GetObject()); - } - - public Time( - Asn1Object time) - { - if (time == null) - throw new ArgumentNullException("time"); - if (!(time is DerUtcTime) && !(time is DerGeneralizedTime)) - throw new ArgumentException("unknown object passed to Time"); - - this.time = time; - } - - /** - * creates a time object from a given date - if the date is between 1950 - * and 2049 a UTCTime object is Generated, otherwise a GeneralizedTime - * is used. - */ - public Time( - DateTime date) - { -#if PORTABLE - string d = date.ToUniversalTime().ToString("yyyyMMddHHmmss", CultureInfo.InvariantCulture) + "Z"; -#else - string d = date.ToString("yyyyMMddHHmmss", CultureInfo.InvariantCulture) + "Z"; -#endif - - int year = int.Parse(d.Substring(0, 4)); - - if (year < 1950 || year > 2049) - { - time = new DerGeneralizedTime(d); - } - else - { - time = new DerUtcTime(d.Substring(2)); - } - } - - public static Time GetInstance( - object obj) - { - if (obj == null || obj is Time) - return (Time)obj; - if (obj is DerUtcTime) - return new Time((DerUtcTime)obj); - if (obj is DerGeneralizedTime) - return new Time((DerGeneralizedTime)obj); - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - public string GetTime() - { - if (time is DerUtcTime) - { - return ((DerUtcTime) time).AdjustedTimeString; - } - - return ((DerGeneralizedTime) time).GetTime(); - } - - /// - /// Return our time as DateTime. - /// - /// A date time. - public DateTime ToDateTime() - { - try - { - if (time is DerUtcTime) - { - return ((DerUtcTime)time).ToAdjustedDateTime(); - } - else - { - return ((DerGeneralizedTime)time).ToDateTime(); - } - } - catch (FormatException e) - { - // this should never happen - throw new InvalidOperationException("invalid date string: " + e.Message); - } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * Time ::= CHOICE {
-         *             utcTime        UTCTime,
-         *             generalTime    GeneralizedTime }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return time; - } - - public override string ToString() - { - return GetTime(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/UserNotice.cs b/bc-sharp-crypto/src/asn1/x509/UserNotice.cs deleted file mode 100644 index f409164..0000000 --- a/bc-sharp-crypto/src/asn1/x509/UserNotice.cs +++ /dev/null @@ -1,130 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * UserNotice class, used in - * CertificatePolicies X509 extensions (in policy - * qualifiers). - * 
-     * UserNotice ::= Sequence {
-     *      noticeRef        NoticeReference OPTIONAL,
-     *      explicitText     DisplayText OPTIONAL}
-     *
-     *
- * - * @see PolicyQualifierId - * @see PolicyInformation - */ - public class UserNotice - : Asn1Encodable - { - private readonly NoticeReference noticeRef; - private readonly DisplayText explicitText; - - /** - * Creates a new UserNotice instance. - * - * @param noticeRef a NoticeReference value - * @param explicitText a DisplayText value - */ - public UserNotice( - NoticeReference noticeRef, - DisplayText explicitText) - { - this.noticeRef = noticeRef; - this.explicitText = explicitText; - } - - /** - * Creates a new UserNotice instance. - * - * @param noticeRef a NoticeReference value - * @param str the explicitText field as a string. - */ - public UserNotice( - NoticeReference noticeRef, - string str) - : this(noticeRef, new DisplayText(str)) - { - } - - /** - * Creates a new UserNotice instance. - *

Useful from reconstructing a UserNotice instance - * from its encodable/encoded form. - * - * @param as an ASN1Sequence value obtained from either - * calling @{link toASN1Object()} for a UserNotice - * instance or from parsing it from a DER-encoded stream.

- */ - [Obsolete("Use GetInstance() instead")] - public UserNotice( - Asn1Sequence seq) - { - if (seq.Count == 2) - { - noticeRef = NoticeReference.GetInstance(seq[0]); - explicitText = DisplayText.GetInstance(seq[1]); - } - else if (seq.Count == 1) - { - if (seq[0].ToAsn1Object() is Asn1Sequence) - { - noticeRef = NoticeReference.GetInstance(seq[0]); - explicitText = null; - } - else - { - noticeRef = null; - explicitText = DisplayText.GetInstance(seq[0]); - } - } - else if (seq.Count == 0) - { - noticeRef = null; // neither field set! - explicitText = null; - } - else - { - throw new ArgumentException("Bad sequence size: " + seq.Count); - } - } - - public static UserNotice GetInstance(object obj) - { - if (obj is UserNotice) - return (UserNotice)obj; - if (obj == null) - return null; - return new UserNotice(Asn1Sequence.GetInstance(obj)); - } - - public virtual NoticeReference NoticeRef - { - get { return noticeRef; } - } - - public virtual DisplayText ExplicitText - { - get { return explicitText; } - } - - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector av = new Asn1EncodableVector(); - - if (noticeRef != null) - { - av.Add(noticeRef); - } - - if (explicitText != null) - { - av.Add(explicitText); - } - - return new DerSequence(av); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/V1TBSCertificateGenerator.cs b/bc-sharp-crypto/src/asn1/x509/V1TBSCertificateGenerator.cs deleted file mode 100644 index 20b525a..0000000 --- a/bc-sharp-crypto/src/asn1/x509/V1TBSCertificateGenerator.cs +++ /dev/null @@ -1,108 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * Generator for Version 1 TbsCertificateStructures. - * 
-     * TbsCertificate ::= Sequence {
-     *      version          [ 0 ]  Version DEFAULT v1(0),
-     *      serialNumber            CertificateSerialNumber,
-     *      signature               AlgorithmIdentifier,
-     *      issuer                  Name,
-     *      validity                Validity,
-     *      subject                 Name,
-     *      subjectPublicKeyInfo    SubjectPublicKeyInfo,
-     *      }
-     *
- * - */ - public class V1TbsCertificateGenerator - { - internal DerTaggedObject version = new DerTaggedObject(0, new DerInteger(0)); - internal DerInteger serialNumber; - internal AlgorithmIdentifier signature; - internal X509Name issuer; - internal Time startDate, endDate; - internal X509Name subject; - internal SubjectPublicKeyInfo subjectPublicKeyInfo; - - public V1TbsCertificateGenerator() - { - } - - public void SetSerialNumber( - DerInteger serialNumber) - { - this.serialNumber = serialNumber; - } - - public void SetSignature( - AlgorithmIdentifier signature) - { - this.signature = signature; - } - - public void SetIssuer( - X509Name issuer) - { - this.issuer = issuer; - } - - public void SetStartDate( - Time startDate) - { - this.startDate = startDate; - } - - public void SetStartDate( - DerUtcTime startDate) - { - this.startDate = new Time(startDate); - } - - public void SetEndDate( - Time endDate) - { - this.endDate = endDate; - } - - public void SetEndDate( - DerUtcTime endDate) - { - this.endDate = new Time(endDate); - } - - public void SetSubject( - X509Name subject) - { - this.subject = subject; - } - - public void SetSubjectPublicKeyInfo( - SubjectPublicKeyInfo pubKeyInfo) - { - this.subjectPublicKeyInfo = pubKeyInfo; - } - - public TbsCertificateStructure GenerateTbsCertificate() - { - if ((serialNumber == null) || (signature == null) - || (issuer == null) || (startDate == null) || (endDate == null) - || (subject == null) || (subjectPublicKeyInfo == null)) - { - throw new InvalidOperationException("not all mandatory fields set in V1 TBScertificate generator"); - } - - return new TbsCertificateStructure( - new DerSequence( - //version, - not required as default value - serialNumber, - signature, - issuer, - new DerSequence(startDate, endDate), // before and after dates - subject, - subjectPublicKeyInfo)); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/V2AttributeCertificateInfoGenerator.cs b/bc-sharp-crypto/src/asn1/x509/V2AttributeCertificateInfoGenerator.cs deleted file mode 100644 index 02580b5..0000000 --- a/bc-sharp-crypto/src/asn1/x509/V2AttributeCertificateInfoGenerator.cs +++ /dev/null @@ -1,137 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * Generator for Version 2 AttributeCertificateInfo - * 
-     * AttributeCertificateInfo ::= Sequence {
-     *       version              AttCertVersion -- version is v2,
-     *       holder               Holder,
-     *       issuer               AttCertIssuer,
-     *       signature            AlgorithmIdentifier,
-     *       serialNumber         CertificateSerialNumber,
-     *       attrCertValidityPeriod   AttCertValidityPeriod,
-     *       attributes           Sequence OF Attr,
-     *       issuerUniqueID       UniqueIdentifier OPTIONAL,
-     *       extensions           Extensions OPTIONAL
-     * }
-     *
- * - */ - public class V2AttributeCertificateInfoGenerator - { - internal DerInteger version; - internal Holder holder; - internal AttCertIssuer issuer; - internal AlgorithmIdentifier signature; - internal DerInteger serialNumber; -// internal AttCertValidityPeriod attrCertValidityPeriod; - internal Asn1EncodableVector attributes; - internal DerBitString issuerUniqueID; - internal X509Extensions extensions; - internal DerGeneralizedTime startDate, endDate; - - public V2AttributeCertificateInfoGenerator() - { - this.version = new DerInteger(1); - attributes = new Asn1EncodableVector(); - } - - public void SetHolder( - Holder holder) - { - this.holder = holder; - } - - public void AddAttribute( - string oid, - Asn1Encodable value) - { - attributes.Add(new AttributeX509(new DerObjectIdentifier(oid), new DerSet(value))); - } - - /** - * @param attribute - */ - public void AddAttribute(AttributeX509 attribute) - { - attributes.Add(attribute); - } - - public void SetSerialNumber( - DerInteger serialNumber) - { - this.serialNumber = serialNumber; - } - - public void SetSignature( - AlgorithmIdentifier signature) - { - this.signature = signature; - } - - public void SetIssuer( - AttCertIssuer issuer) - { - this.issuer = issuer; - } - - public void SetStartDate( - DerGeneralizedTime startDate) - { - this.startDate = startDate; - } - - public void SetEndDate( - DerGeneralizedTime endDate) - { - this.endDate = endDate; - } - - public void SetIssuerUniqueID( - DerBitString issuerUniqueID) - { - this.issuerUniqueID = issuerUniqueID; - } - - public void SetExtensions( - X509Extensions extensions) - { - this.extensions = extensions; - } - - public AttributeCertificateInfo GenerateAttributeCertificateInfo() - { - if ((serialNumber == null) || (signature == null) - || (issuer == null) || (startDate == null) || (endDate == null) - || (holder == null) || (attributes == null)) - { - throw new InvalidOperationException("not all mandatory fields set in V2 AttributeCertificateInfo generator"); - } - - Asn1EncodableVector v = new Asn1EncodableVector( - version, holder, issuer, signature, serialNumber); - - // - // before and after dates => AttCertValidityPeriod - // - v.Add(new AttCertValidityPeriod(startDate, endDate)); - - // Attributes - v.Add(new DerSequence(attributes)); - - if (issuerUniqueID != null) - { - v.Add(issuerUniqueID); - } - - if (extensions != null) - { - v.Add(extensions); - } - - return AttributeCertificateInfo.GetInstance(new DerSequence(v)); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/V2Form.cs b/bc-sharp-crypto/src/asn1/x509/V2Form.cs deleted file mode 100644 index 2c6e54a..0000000 --- a/bc-sharp-crypto/src/asn1/x509/V2Form.cs +++ /dev/null @@ -1,137 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.X509 -{ - public class V2Form - : Asn1Encodable - { - internal GeneralNames issuerName; - internal IssuerSerial baseCertificateID; - internal ObjectDigestInfo objectDigestInfo; - - public static V2Form GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static V2Form GetInstance(object obj) - { - if (obj is V2Form) - return (V2Form)obj; - if (obj != null) - return new V2Form(Asn1Sequence.GetInstance(obj)); - return null; - } - - public V2Form(GeneralNames issuerName) - : this(issuerName, null, null) - { - } - - public V2Form(GeneralNames issuerName, IssuerSerial baseCertificateID) - : this(issuerName, baseCertificateID, null) - { - } - - public V2Form(GeneralNames issuerName, ObjectDigestInfo objectDigestInfo) - : this(issuerName, null, objectDigestInfo) - { - } - - public V2Form( - GeneralNames issuerName, - IssuerSerial baseCertificateID, - ObjectDigestInfo objectDigestInfo) - { - this.issuerName = issuerName; - this.baseCertificateID = baseCertificateID; - this.objectDigestInfo = objectDigestInfo; - } - - private V2Form( - Asn1Sequence seq) - { - if (seq.Count > 3) - { - throw new ArgumentException("Bad sequence size: " + seq.Count); - } - - int index = 0; - - if (!(seq[0] is Asn1TaggedObject)) - { - index++; - this.issuerName = GeneralNames.GetInstance(seq[0]); - } - - for (int i = index; i != seq.Count; i++) - { - Asn1TaggedObject o = Asn1TaggedObject.GetInstance(seq[i]); - if (o.TagNo == 0) - { - baseCertificateID = IssuerSerial.GetInstance(o, false); - } - else if (o.TagNo == 1) - { - objectDigestInfo = ObjectDigestInfo.GetInstance(o, false); - } - else - { - throw new ArgumentException("Bad tag number: " + o.TagNo); - } - } - } - - public GeneralNames IssuerName - { - get { return issuerName; } - } - - public IssuerSerial BaseCertificateID - { - get { return baseCertificateID; } - } - - public ObjectDigestInfo ObjectDigestInfo - { - get { return objectDigestInfo; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         *  V2Form ::= Sequence {
-         *       issuerName            GeneralNames  OPTIONAL,
-         *       baseCertificateID     [0] IssuerSerial  OPTIONAL,
-         *       objectDigestInfo      [1] ObjectDigestInfo  OPTIONAL
-         *         -- issuerName MUST be present in this profile
-         *         -- baseCertificateID and objectDigestInfo MUST NOT
-         *         -- be present in this profile
-         *  }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - if (issuerName != null) - { - v.Add(issuerName); - } - - if (baseCertificateID != null) - { - v.Add(new DerTaggedObject(false, 0, baseCertificateID)); - } - - if (objectDigestInfo != null) - { - v.Add(new DerTaggedObject(false, 1, objectDigestInfo)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/V2TBSCertListGenerator.cs b/bc-sharp-crypto/src/asn1/x509/V2TBSCertListGenerator.cs deleted file mode 100644 index 2c92918..0000000 --- a/bc-sharp-crypto/src/asn1/x509/V2TBSCertListGenerator.cs +++ /dev/null @@ -1,201 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * Generator for Version 2 TbsCertList structures. - * 
-     *  TbsCertList  ::=  Sequence  {
-     *       version                 Version OPTIONAL,
-     *                                    -- if present, shall be v2
-     *       signature               AlgorithmIdentifier,
-     *       issuer                  Name,
-     *       thisUpdate              Time,
-     *       nextUpdate              Time OPTIONAL,
-     *       revokedCertificates     Sequence OF Sequence  {
-     *            userCertificate         CertificateSerialNumber,
-     *            revocationDate          Time,
-     *            crlEntryExtensions      Extensions OPTIONAL
-     *                                          -- if present, shall be v2
-     *                                 }  OPTIONAL,
-     *       crlExtensions           [0]  EXPLICIT Extensions OPTIONAL
-     *                                          -- if present, shall be v2
-     *                                 }
-     *
- * - * Note: This class may be subject to change - */ - public class V2TbsCertListGenerator - { - private DerInteger version = new DerInteger(1); - private AlgorithmIdentifier signature; - private X509Name issuer; - private Time thisUpdate, nextUpdate; - private X509Extensions extensions; - private IList crlEntries; - - public V2TbsCertListGenerator() - { - } - - public void SetSignature( - AlgorithmIdentifier signature) - { - this.signature = signature; - } - - public void SetIssuer( - X509Name issuer) - { - this.issuer = issuer; - } - - public void SetThisUpdate( - DerUtcTime thisUpdate) - { - this.thisUpdate = new Time(thisUpdate); - } - - public void SetNextUpdate( - DerUtcTime nextUpdate) - { - this.nextUpdate = (nextUpdate != null) - ? new Time(nextUpdate) - : null; - } - - public void SetThisUpdate( - Time thisUpdate) - { - this.thisUpdate = thisUpdate; - } - - public void SetNextUpdate( - Time nextUpdate) - { - this.nextUpdate = nextUpdate; - } - - public void AddCrlEntry( - Asn1Sequence crlEntry) - { - if (crlEntries == null) - { - crlEntries = Platform.CreateArrayList(); - } - - crlEntries.Add(crlEntry); - } - - public void AddCrlEntry(DerInteger userCertificate, DerUtcTime revocationDate, int reason) - { - AddCrlEntry(userCertificate, new Time(revocationDate), reason); - } - - public void AddCrlEntry(DerInteger userCertificate, Time revocationDate, int reason) - { - AddCrlEntry(userCertificate, revocationDate, reason, null); - } - - public void AddCrlEntry(DerInteger userCertificate, Time revocationDate, int reason, - DerGeneralizedTime invalidityDate) - { - IList extOids = Platform.CreateArrayList(); - IList extValues = Platform.CreateArrayList(); - - if (reason != 0) - { - CrlReason crlReason = new CrlReason(reason); - - try - { - extOids.Add(X509Extensions.ReasonCode); - extValues.Add(new X509Extension(false, new DerOctetString(crlReason.GetEncoded()))); - } - catch (IOException e) - { - throw new ArgumentException("error encoding reason: " + e); - } - } - - if (invalidityDate != null) - { - try - { - extOids.Add(X509Extensions.InvalidityDate); - extValues.Add(new X509Extension(false, new DerOctetString(invalidityDate.GetEncoded()))); - } - catch (IOException e) - { - throw new ArgumentException("error encoding invalidityDate: " + e); - } - } - - if (extOids.Count != 0) - { - AddCrlEntry(userCertificate, revocationDate, new X509Extensions(extOids, extValues)); - } - else - { - AddCrlEntry(userCertificate, revocationDate, null); - } - } - - public void AddCrlEntry(DerInteger userCertificate, Time revocationDate, X509Extensions extensions) - { - Asn1EncodableVector v = new Asn1EncodableVector( - userCertificate, revocationDate); - - if (extensions != null) - { - v.Add(extensions); - } - - AddCrlEntry(new DerSequence(v)); - } - - public void SetExtensions( - X509Extensions extensions) - { - this.extensions = extensions; - } - - public TbsCertificateList GenerateTbsCertList() - { - if ((signature == null) || (issuer == null) || (thisUpdate == null)) - { - throw new InvalidOperationException("Not all mandatory fields set in V2 TbsCertList generator."); - } - - Asn1EncodableVector v = new Asn1EncodableVector( - version, signature, issuer, thisUpdate); - - if (nextUpdate != null) - { - v.Add(nextUpdate); - } - - // Add CRLEntries if they exist - if (crlEntries != null) - { - Asn1Sequence[] certs = new Asn1Sequence[crlEntries.Count]; - for (int i = 0; i < crlEntries.Count; ++i) - { - certs[i] = (Asn1Sequence)crlEntries[i]; - } - v.Add(new DerSequence(certs)); - } - - if (extensions != null) - { - v.Add(new DerTaggedObject(0, extensions)); - } - - return new TbsCertificateList(new DerSequence(v)); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/V3TBSCertificateGenerator.cs b/bc-sharp-crypto/src/asn1/x509/V3TBSCertificateGenerator.cs deleted file mode 100644 index beb469a..0000000 --- a/bc-sharp-crypto/src/asn1/x509/V3TBSCertificateGenerator.cs +++ /dev/null @@ -1,168 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * Generator for Version 3 TbsCertificateStructures. - * 
-     * TbsCertificate ::= Sequence {
-     *      version          [ 0 ]  Version DEFAULT v1(0),
-     *      serialNumber            CertificateSerialNumber,
-     *      signature               AlgorithmIdentifier,
-     *      issuer                  Name,
-     *      validity                Validity,
-     *      subject                 Name,
-     *      subjectPublicKeyInfo    SubjectPublicKeyInfo,
-     *      issuerUniqueID    [ 1 ] IMPLICIT UniqueIdentifier OPTIONAL,
-     *      subjectUniqueID   [ 2 ] IMPLICIT UniqueIdentifier OPTIONAL,
-     *      extensions        [ 3 ] Extensions OPTIONAL
-     *      }
-     *
- * - */ - public class V3TbsCertificateGenerator - { - internal DerTaggedObject version = new DerTaggedObject(0, new DerInteger(2)); - internal DerInteger serialNumber; - internal AlgorithmIdentifier signature; - internal X509Name issuer; - internal Time startDate, endDate; - internal X509Name subject; - internal SubjectPublicKeyInfo subjectPublicKeyInfo; - internal X509Extensions extensions; - - private bool altNamePresentAndCritical; - private DerBitString issuerUniqueID; - private DerBitString subjectUniqueID; - - public V3TbsCertificateGenerator() - { - } - - public void SetSerialNumber( - DerInteger serialNumber) - { - this.serialNumber = serialNumber; - } - - public void SetSignature( - AlgorithmIdentifier signature) - { - this.signature = signature; - } - - public void SetIssuer( - X509Name issuer) - { - this.issuer = issuer; - } - - public void SetStartDate( - DerUtcTime startDate) - { - this.startDate = new Time(startDate); - } - - public void SetStartDate( - Time startDate) - { - this.startDate = startDate; - } - - public void SetEndDate( - DerUtcTime endDate) - { - this.endDate = new Time(endDate); - } - - public void SetEndDate( - Time endDate) - { - this.endDate = endDate; - } - - public void SetSubject( - X509Name subject) - { - this.subject = subject; - } - - public void SetIssuerUniqueID( - DerBitString uniqueID) - { - this.issuerUniqueID = uniqueID; - } - - public void SetSubjectUniqueID( - DerBitString uniqueID) - { - this.subjectUniqueID = uniqueID; - } - - public void SetSubjectPublicKeyInfo( - SubjectPublicKeyInfo pubKeyInfo) - { - this.subjectPublicKeyInfo = pubKeyInfo; - } - - public void SetExtensions( - X509Extensions extensions) - { - this.extensions = extensions; - - if (extensions != null) - { - X509Extension altName = extensions.GetExtension(X509Extensions.SubjectAlternativeName); - - if (altName != null && altName.IsCritical) - { - altNamePresentAndCritical = true; - } - } - } - - public TbsCertificateStructure GenerateTbsCertificate() - { - if ((serialNumber == null) || (signature == null) - || (issuer == null) || (startDate == null) || (endDate == null) - || (subject == null && !altNamePresentAndCritical) - || (subjectPublicKeyInfo == null)) - { - throw new InvalidOperationException("not all mandatory fields set in V3 TBScertificate generator"); - } - - DerSequence validity = new DerSequence(startDate, endDate); // before and after dates - - Asn1EncodableVector v = new Asn1EncodableVector( - version, serialNumber, signature, issuer, validity); - - if (subject != null) - { - v.Add(subject); - } - else - { - v.Add(DerSequence.Empty); - } - - v.Add(subjectPublicKeyInfo); - - if (issuerUniqueID != null) - { - v.Add(new DerTaggedObject(false, 1, issuerUniqueID)); - } - - if (subjectUniqueID != null) - { - v.Add(new DerTaggedObject(false, 2, subjectUniqueID)); - } - - if (extensions != null) - { - v.Add(new DerTaggedObject(3, extensions)); - } - - return new TbsCertificateStructure(new DerSequence(v)); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/X509Attributes.cs b/bc-sharp-crypto/src/asn1/x509/X509Attributes.cs deleted file mode 100644 index 291329a..0000000 --- a/bc-sharp-crypto/src/asn1/x509/X509Attributes.cs +++ /dev/null @@ -1,9 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.X509 -{ - public class X509Attributes - { - public static readonly DerObjectIdentifier RoleSyntax = new DerObjectIdentifier("2.5.4.72"); - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/X509CertificateStructure.cs b/bc-sharp-crypto/src/asn1/x509/X509CertificateStructure.cs deleted file mode 100644 index 6e7c85d..0000000 --- a/bc-sharp-crypto/src/asn1/x509/X509CertificateStructure.cs +++ /dev/null @@ -1,132 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.Pkcs; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * an X509Certificate structure. - * 
-     *  Certificate ::= Sequence {
-     *      tbsCertificate          TbsCertificate,
-     *      signatureAlgorithm      AlgorithmIdentifier,
-     *      signature               BIT STRING
-     *  }
-     *
- */ - public class X509CertificateStructure - : Asn1Encodable - { - private readonly TbsCertificateStructure tbsCert; - private readonly AlgorithmIdentifier sigAlgID; - private readonly DerBitString sig; - - public static X509CertificateStructure GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static X509CertificateStructure GetInstance( - object obj) - { - if (obj is X509CertificateStructure) - return (X509CertificateStructure)obj; - if (obj == null) - return null; - return new X509CertificateStructure(Asn1Sequence.GetInstance(obj)); - } - - public X509CertificateStructure( - TbsCertificateStructure tbsCert, - AlgorithmIdentifier sigAlgID, - DerBitString sig) - { - if (tbsCert == null) - throw new ArgumentNullException("tbsCert"); - if (sigAlgID == null) - throw new ArgumentNullException("sigAlgID"); - if (sig == null) - throw new ArgumentNullException("sig"); - - this.tbsCert = tbsCert; - this.sigAlgID = sigAlgID; - this.sig = sig; - } - - private X509CertificateStructure( - Asn1Sequence seq) - { - if (seq.Count != 3) - throw new ArgumentException("sequence wrong size for a certificate", "seq"); - - // - // correct x509 certficate - // - tbsCert = TbsCertificateStructure.GetInstance(seq[0]); - sigAlgID = AlgorithmIdentifier.GetInstance(seq[1]); - sig = DerBitString.GetInstance(seq[2]); - } - - public TbsCertificateStructure TbsCertificate - { - get { return tbsCert; } - } - - public int Version - { - get { return tbsCert.Version; } - } - - public DerInteger SerialNumber - { - get { return tbsCert.SerialNumber; } - } - - public X509Name Issuer - { - get { return tbsCert.Issuer; } - } - - public Time StartDate - { - get { return tbsCert.StartDate; } - } - - public Time EndDate - { - get { return tbsCert.EndDate; } - } - - public X509Name Subject - { - get { return tbsCert.Subject; } - } - - public SubjectPublicKeyInfo SubjectPublicKeyInfo - { - get { return tbsCert.SubjectPublicKeyInfo; } - } - - public AlgorithmIdentifier SignatureAlgorithm - { - get { return sigAlgID; } - } - - public DerBitString Signature - { - get { return sig; } - } - - public byte[] GetSignatureOctets() - { - return sig.GetOctets(); - } - - public override Asn1Object ToAsn1Object() - { - return new DerSequence(tbsCert, sigAlgID, sig); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/X509DefaultEntryConverter.cs b/bc-sharp-crypto/src/asn1/x509/X509DefaultEntryConverter.cs deleted file mode 100644 index 7282ead..0000000 --- a/bc-sharp-crypto/src/asn1/x509/X509DefaultEntryConverter.cs +++ /dev/null @@ -1,63 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * The default converter for X509 DN entries when going from their - * string value to ASN.1 strings. - */ - public class X509DefaultEntryConverter - : X509NameEntryConverter - { - /** - * Apply default conversion for the given value depending on the oid - * and the character range of the value. - * - * @param oid the object identifier for the DN entry - * @param value the value associated with it - * @return the ASN.1 equivalent for the string value. - */ - public override Asn1Object GetConvertedValue( - DerObjectIdentifier oid, - string value) - { - if (value.Length != 0 && value[0] == '#') - { - try - { - return ConvertHexEncoded(value, 1); - } - catch (IOException) - { - throw new Exception("can't recode value for oid " + oid.Id); - } - } - - if (value.Length != 0 && value[0] == '\\') - { - value = value.Substring(1); - } - - if (oid.Equals(X509Name.EmailAddress) || oid.Equals(X509Name.DC)) - { - return new DerIA5String(value); - } - - if (oid.Equals(X509Name.DateOfBirth)) // accept time string as well as # (for compatibility) - { - return new DerGeneralizedTime(value); - } - - if (oid.Equals(X509Name.C) - || oid.Equals(X509Name.SerialNumber) - || oid.Equals(X509Name.DnQualifier) - || oid.Equals(X509Name.TelephoneNumber)) - { - return new DerPrintableString(value); - } - - return new DerUtf8String(value); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/X509Extension.cs b/bc-sharp-crypto/src/asn1/x509/X509Extension.cs deleted file mode 100644 index 430ce44..0000000 --- a/bc-sharp-crypto/src/asn1/x509/X509Extension.cs +++ /dev/null @@ -1,79 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * an object for the elements in the X.509 V3 extension block. - */ - public class X509Extension - { - internal bool critical; - internal Asn1OctetString value; - - public X509Extension( - DerBoolean critical, - Asn1OctetString value) - { - if (critical == null) - { - throw new ArgumentNullException("critical"); - } - - this.critical = critical.IsTrue; - this.value = value; - } - - public X509Extension( - bool critical, - Asn1OctetString value) - { - this.critical = critical; - this.value = value; - } - - public bool IsCritical { get { return critical; } } - - public Asn1OctetString Value { get { return value; } } - - public Asn1Encodable GetParsedValue() - { - return ConvertValueToObject(this); - } - - public override int GetHashCode() - { - int vh = this.Value.GetHashCode(); - - return IsCritical ? vh : ~vh; - } - - public override bool Equals( - object obj) - { - X509Extension other = obj as X509Extension; - if (other == null) - { - return false; - } - - return Value.Equals(other.Value) && IsCritical == other.IsCritical; - } - - /// Convert the value of the passed in extension to an object. - /// The extension to parse. - /// The object the value string contains. - /// If conversion is not possible. - public static Asn1Object ConvertValueToObject( - X509Extension ext) - { - try - { - return Asn1Object.FromByteArray(ext.Value.GetOctets()); - } - catch (Exception e) - { - throw new ArgumentException("can't convert extension", e); - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/X509Extensions.cs b/bc-sharp-crypto/src/asn1/x509/X509Extensions.cs deleted file mode 100644 index 049d728..0000000 --- a/bc-sharp-crypto/src/asn1/x509/X509Extensions.cs +++ /dev/null @@ -1,456 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Asn1.X509 -{ - public class X509Extensions - : Asn1Encodable - { - /** - * Subject Directory Attributes - */ - public static readonly DerObjectIdentifier SubjectDirectoryAttributes = new DerObjectIdentifier("2.5.29.9"); - - /** - * Subject Key Identifier - */ - public static readonly DerObjectIdentifier SubjectKeyIdentifier = new DerObjectIdentifier("2.5.29.14"); - - /** - * Key Usage - */ - public static readonly DerObjectIdentifier KeyUsage = new DerObjectIdentifier("2.5.29.15"); - - /** - * Private Key Usage Period - */ - public static readonly DerObjectIdentifier PrivateKeyUsagePeriod = new DerObjectIdentifier("2.5.29.16"); - - /** - * Subject Alternative Name - */ - public static readonly DerObjectIdentifier SubjectAlternativeName = new DerObjectIdentifier("2.5.29.17"); - - /** - * Issuer Alternative Name - */ - public static readonly DerObjectIdentifier IssuerAlternativeName = new DerObjectIdentifier("2.5.29.18"); - - /** - * Basic Constraints - */ - public static readonly DerObjectIdentifier BasicConstraints = new DerObjectIdentifier("2.5.29.19"); - - /** - * CRL Number - */ - public static readonly DerObjectIdentifier CrlNumber = new DerObjectIdentifier("2.5.29.20"); - - /** - * Reason code - */ - public static readonly DerObjectIdentifier ReasonCode = new DerObjectIdentifier("2.5.29.21"); - - /** - * Hold Instruction Code - */ - public static readonly DerObjectIdentifier InstructionCode = new DerObjectIdentifier("2.5.29.23"); - - /** - * Invalidity Date - */ - public static readonly DerObjectIdentifier InvalidityDate = new DerObjectIdentifier("2.5.29.24"); - - /** - * Delta CRL indicator - */ - public static readonly DerObjectIdentifier DeltaCrlIndicator = new DerObjectIdentifier("2.5.29.27"); - - /** - * Issuing Distribution Point - */ - public static readonly DerObjectIdentifier IssuingDistributionPoint = new DerObjectIdentifier("2.5.29.28"); - - /** - * Certificate Issuer - */ - public static readonly DerObjectIdentifier CertificateIssuer = new DerObjectIdentifier("2.5.29.29"); - - /** - * Name Constraints - */ - public static readonly DerObjectIdentifier NameConstraints = new DerObjectIdentifier("2.5.29.30"); - - /** - * CRL Distribution Points - */ - public static readonly DerObjectIdentifier CrlDistributionPoints = new DerObjectIdentifier("2.5.29.31"); - - /** - * Certificate Policies - */ - public static readonly DerObjectIdentifier CertificatePolicies = new DerObjectIdentifier("2.5.29.32"); - - /** - * Policy Mappings - */ - public static readonly DerObjectIdentifier PolicyMappings = new DerObjectIdentifier("2.5.29.33"); - - /** - * Authority Key Identifier - */ - public static readonly DerObjectIdentifier AuthorityKeyIdentifier = new DerObjectIdentifier("2.5.29.35"); - - /** - * Policy Constraints - */ - public static readonly DerObjectIdentifier PolicyConstraints = new DerObjectIdentifier("2.5.29.36"); - - /** - * Extended Key Usage - */ - public static readonly DerObjectIdentifier ExtendedKeyUsage = new DerObjectIdentifier("2.5.29.37"); - - /** - * Freshest CRL - */ - public static readonly DerObjectIdentifier FreshestCrl = new DerObjectIdentifier("2.5.29.46"); - - /** - * Inhibit Any Policy - */ - public static readonly DerObjectIdentifier InhibitAnyPolicy = new DerObjectIdentifier("2.5.29.54"); - - /** - * Authority Info Access - */ - public static readonly DerObjectIdentifier AuthorityInfoAccess = new DerObjectIdentifier("1.3.6.1.5.5.7.1.1"); - - /** - * Subject Info Access - */ - public static readonly DerObjectIdentifier SubjectInfoAccess = new DerObjectIdentifier("1.3.6.1.5.5.7.1.11"); - - /** - * Logo Type - */ - public static readonly DerObjectIdentifier LogoType = new DerObjectIdentifier("1.3.6.1.5.5.7.1.12"); - - /** - * BiometricInfo - */ - public static readonly DerObjectIdentifier BiometricInfo = new DerObjectIdentifier("1.3.6.1.5.5.7.1.2"); - - /** - * QCStatements - */ - public static readonly DerObjectIdentifier QCStatements = new DerObjectIdentifier("1.3.6.1.5.5.7.1.3"); - - /** - * Audit identity extension in attribute certificates. - */ - public static readonly DerObjectIdentifier AuditIdentity = new DerObjectIdentifier("1.3.6.1.5.5.7.1.4"); - - /** - * NoRevAvail extension in attribute certificates. - */ - public static readonly DerObjectIdentifier NoRevAvail = new DerObjectIdentifier("2.5.29.56"); - - /** - * TargetInformation extension in attribute certificates. - */ - public static readonly DerObjectIdentifier TargetInformation = new DerObjectIdentifier("2.5.29.55"); - - /** - * Expired Certificates on CRL extension - */ - public static readonly DerObjectIdentifier ExpiredCertsOnCrl = new DerObjectIdentifier("2.5.29.60"); - - private readonly IDictionary extensions = Platform.CreateHashtable(); - private readonly IList ordering; - - public static X509Extensions GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static X509Extensions GetInstance( - object obj) - { - if (obj == null || obj is X509Extensions) - { - return (X509Extensions) obj; - } - - if (obj is Asn1Sequence) - { - return new X509Extensions((Asn1Sequence) obj); - } - - if (obj is Asn1TaggedObject) - { - return GetInstance(((Asn1TaggedObject) obj).GetObject()); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - /** - * Constructor from Asn1Sequence. - * - * the extensions are a list of constructed sequences, either with (Oid, OctetString) or (Oid, Boolean, OctetString) - */ - private X509Extensions( - Asn1Sequence seq) - { - this.ordering = Platform.CreateArrayList(); - - foreach (Asn1Encodable ae in seq) - { - Asn1Sequence s = Asn1Sequence.GetInstance(ae.ToAsn1Object()); - - if (s.Count < 2 || s.Count > 3) - throw new ArgumentException("Bad sequence size: " + s.Count); - - DerObjectIdentifier oid = DerObjectIdentifier.GetInstance(s[0].ToAsn1Object()); - - bool isCritical = s.Count == 3 - && DerBoolean.GetInstance(s[1].ToAsn1Object()).IsTrue; - - Asn1OctetString octets = Asn1OctetString.GetInstance(s[s.Count - 1].ToAsn1Object()); - - extensions.Add(oid, new X509Extension(isCritical, octets)); - ordering.Add(oid); - } - } - - /** - * constructor from a table of extensions. - *

- * it's is assumed the table contains Oid/string pairs.

- */ - public X509Extensions( - IDictionary extensions) - : this(null, extensions) - { - } - - /** - * Constructor from a table of extensions with ordering. - *

- * It's is assumed the table contains Oid/string pairs.

- */ - public X509Extensions( - IList ordering, - IDictionary extensions) - { - if (ordering == null) - { - this.ordering = Platform.CreateArrayList(extensions.Keys); - } - else - { - this.ordering = Platform.CreateArrayList(ordering); - } - - foreach (DerObjectIdentifier oid in this.ordering) - { - this.extensions.Add(oid, (X509Extension)extensions[oid]); - } - } - - /** - * Constructor from two vectors - * - * @param objectIDs an ArrayList of the object identifiers. - * @param values an ArrayList of the extension values. - */ - public X509Extensions( - IList oids, - IList values) - { - this.ordering = Platform.CreateArrayList(oids); - - int count = 0; - foreach (DerObjectIdentifier oid in this.ordering) - { - this.extensions.Add(oid, (X509Extension)values[count++]); - } - } - -#if !(SILVERLIGHT || PORTABLE) - /** - * constructor from a table of extensions. - *

- * it's is assumed the table contains Oid/string pairs.

- */ - [Obsolete] - public X509Extensions( - Hashtable extensions) - : this(null, extensions) - { - } - - /** - * Constructor from a table of extensions with ordering. - *

- * It's is assumed the table contains Oid/string pairs.

- */ - [Obsolete] - public X509Extensions( - ArrayList ordering, - Hashtable extensions) - { - if (ordering == null) - { - this.ordering = Platform.CreateArrayList(extensions.Keys); - } - else - { - this.ordering = Platform.CreateArrayList(ordering); - } - - foreach (DerObjectIdentifier oid in this.ordering) - { - this.extensions.Add(oid, (X509Extension) extensions[oid]); - } - } - - /** - * Constructor from two vectors - * - * @param objectIDs an ArrayList of the object identifiers. - * @param values an ArrayList of the extension values. - */ - [Obsolete] - public X509Extensions( - ArrayList oids, - ArrayList values) - { - this.ordering = Platform.CreateArrayList(oids); - - int count = 0; - foreach (DerObjectIdentifier oid in this.ordering) - { - this.extensions.Add(oid, (X509Extension) values[count++]); - } - } -#endif - - [Obsolete("Use ExtensionOids IEnumerable property")] - public IEnumerator Oids() - { - return ExtensionOids.GetEnumerator(); - } - - /** - * return an Enumeration of the extension field's object ids. - */ - public IEnumerable ExtensionOids - { - get { return new EnumerableProxy(ordering); } - } - - /** - * return the extension represented by the object identifier - * passed in. - * - * @return the extension if it's present, null otherwise. - */ - public X509Extension GetExtension( - DerObjectIdentifier oid) - { - return (X509Extension) extensions[oid]; - } - - /** - * 
-		 *     Extensions        ::=   SEQUENCE SIZE (1..MAX) OF Extension
-		 *
-		 *     Extension         ::=   SEQUENCE {
-		 *        extnId            EXTENSION.&id ({ExtensionSet}),
-		 *        critical          BOOLEAN DEFAULT FALSE,
-		 *        extnValue         OCTET STRING }
-		 *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector vec = new Asn1EncodableVector(); - - foreach (DerObjectIdentifier oid in ordering) - { - X509Extension ext = (X509Extension) extensions[oid]; - Asn1EncodableVector v = new Asn1EncodableVector(oid); - - if (ext.IsCritical) - { - v.Add(DerBoolean.True); - } - - v.Add(ext.Value); - - vec.Add(new DerSequence(v)); - } - - return new DerSequence(vec); - } - - public bool Equivalent( - X509Extensions other) - { - if (extensions.Count != other.extensions.Count) - return false; - - foreach (DerObjectIdentifier oid in extensions.Keys) - { - if (!extensions[oid].Equals(other.extensions[oid])) - return false; - } - - return true; - } - - public DerObjectIdentifier[] GetExtensionOids() - { - return ToOidArray(ordering); - } - - public DerObjectIdentifier[] GetNonCriticalExtensionOids() - { - return GetExtensionOids(false); - } - - public DerObjectIdentifier[] GetCriticalExtensionOids() - { - return GetExtensionOids(true); - } - - private DerObjectIdentifier[] GetExtensionOids(bool isCritical) - { - IList oids = Platform.CreateArrayList(); - - foreach (DerObjectIdentifier oid in this.ordering) - { - X509Extension ext = (X509Extension)extensions[oid]; - if (ext.IsCritical == isCritical) - { - oids.Add(oid); - } - } - - return ToOidArray(oids); - } - - private static DerObjectIdentifier[] ToOidArray(IList oids) - { - DerObjectIdentifier[] oidArray = new DerObjectIdentifier[oids.Count]; - oids.CopyTo(oidArray, 0); - return oidArray; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/X509ExtensionsGenerator.cs b/bc-sharp-crypto/src/asn1/x509/X509ExtensionsGenerator.cs deleted file mode 100644 index d6f567b..0000000 --- a/bc-sharp-crypto/src/asn1/x509/X509ExtensionsGenerator.cs +++ /dev/null @@ -1,81 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /// Generator for X.509 extensions - public class X509ExtensionsGenerator - { - private IDictionary extensions = Platform.CreateHashtable(); - private IList extOrdering = Platform.CreateArrayList(); - - /// Reset the generator - public void Reset() - { - extensions = Platform.CreateHashtable(); - extOrdering = Platform.CreateArrayList(); - } - - /// - /// Add an extension with the given oid and the passed in value to be included - /// in the OCTET STRING associated with the extension. - /// - /// OID for the extension. - /// True if critical, false otherwise. - /// The ASN.1 object to be included in the extension. - public void AddExtension( - DerObjectIdentifier oid, - bool critical, - Asn1Encodable extValue) - { - byte[] encoded; - try - { - encoded = extValue.GetDerEncoded(); - } - catch (Exception e) - { - throw new ArgumentException("error encoding value: " + e); - } - - this.AddExtension(oid, critical, encoded); - } - - /// - /// Add an extension with the given oid and the passed in byte array to be wrapped - /// in the OCTET STRING associated with the extension. - /// - /// OID for the extension. - /// True if critical, false otherwise. - /// The byte array to be wrapped. - public void AddExtension( - DerObjectIdentifier oid, - bool critical, - byte[] extValue) - { - if (extensions.Contains(oid)) - { - throw new ArgumentException("extension " + oid + " already added"); - } - - extOrdering.Add(oid); - extensions.Add(oid, new X509Extension(critical, new DerOctetString(extValue))); - } - - /// Return true if there are no extension present in this generator. - /// True if empty, false otherwise - public bool IsEmpty - { - get { return extOrdering.Count < 1; } - } - - /// Generate an X509Extensions object based on the current state of the generator. - /// An X509Extensions object - public X509Extensions Generate() - { - return new X509Extensions(extOrdering, extensions); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/X509Name.cs b/bc-sharp-crypto/src/asn1/x509/X509Name.cs deleted file mode 100644 index 01a7ec0..0000000 --- a/bc-sharp-crypto/src/asn1/x509/X509Name.cs +++ /dev/null @@ -1,1077 +0,0 @@ -using System; -using System.Collections; -using System.IO; -using System.Text; - -#if SILVERLIGHT || PORTABLE -using System.Collections.Generic; -#endif - -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * 
-    *     RDNSequence ::= SEQUENCE OF RelativeDistinguishedName
-    *
-    *     RelativeDistinguishedName ::= SET SIZE (1..MAX) OF AttributeTypeAndValue
-    *
-    *     AttributeTypeAndValue ::= SEQUENCE {
-    *                                   type  OBJECT IDENTIFIER,
-    *                                   value ANY }
-    *
- */ - public class X509Name - : Asn1Encodable - { - /** - * country code - StringType(SIZE(2)) - */ - public static readonly DerObjectIdentifier C = new DerObjectIdentifier("2.5.4.6"); - - /** - * organization - StringType(SIZE(1..64)) - */ - public static readonly DerObjectIdentifier O = new DerObjectIdentifier("2.5.4.10"); - - /** - * organizational unit name - StringType(SIZE(1..64)) - */ - public static readonly DerObjectIdentifier OU = new DerObjectIdentifier("2.5.4.11"); - - /** - * Title - */ - public static readonly DerObjectIdentifier T = new DerObjectIdentifier("2.5.4.12"); - - /** - * common name - StringType(SIZE(1..64)) - */ - public static readonly DerObjectIdentifier CN = new DerObjectIdentifier("2.5.4.3"); - - /** - * street - StringType(SIZE(1..64)) - */ - public static readonly DerObjectIdentifier Street = new DerObjectIdentifier("2.5.4.9"); - - /** - * device serial number name - StringType(SIZE(1..64)) - */ - public static readonly DerObjectIdentifier SerialNumber = new DerObjectIdentifier("2.5.4.5"); - - /** - * locality name - StringType(SIZE(1..64)) - */ - public static readonly DerObjectIdentifier L = new DerObjectIdentifier("2.5.4.7"); - - /** - * state, or province name - StringType(SIZE(1..64)) - */ - public static readonly DerObjectIdentifier ST = new DerObjectIdentifier("2.5.4.8"); - - /** - * Naming attributes of type X520name - */ - public static readonly DerObjectIdentifier Surname = new DerObjectIdentifier("2.5.4.4"); - public static readonly DerObjectIdentifier GivenName = new DerObjectIdentifier("2.5.4.42"); - public static readonly DerObjectIdentifier Initials = new DerObjectIdentifier("2.5.4.43"); - public static readonly DerObjectIdentifier Generation = new DerObjectIdentifier("2.5.4.44"); - public static readonly DerObjectIdentifier UniqueIdentifier = new DerObjectIdentifier("2.5.4.45"); - - /** - * businessCategory - DirectoryString(SIZE(1..128) - */ - public static readonly DerObjectIdentifier BusinessCategory = new DerObjectIdentifier( - "2.5.4.15"); - - /** - * postalCode - DirectoryString(SIZE(1..40) - */ - public static readonly DerObjectIdentifier PostalCode = new DerObjectIdentifier( - "2.5.4.17"); - - /** - * dnQualifier - DirectoryString(SIZE(1..64) - */ - public static readonly DerObjectIdentifier DnQualifier = new DerObjectIdentifier( - "2.5.4.46"); - - /** - * RFC 3039 Pseudonym - DirectoryString(SIZE(1..64) - */ - public static readonly DerObjectIdentifier Pseudonym = new DerObjectIdentifier( - "2.5.4.65"); - - /** - * RFC 3039 DateOfBirth - GeneralizedTime - YYYYMMDD000000Z - */ - public static readonly DerObjectIdentifier DateOfBirth = new DerObjectIdentifier( - "1.3.6.1.5.5.7.9.1"); - - /** - * RFC 3039 PlaceOfBirth - DirectoryString(SIZE(1..128) - */ - public static readonly DerObjectIdentifier PlaceOfBirth = new DerObjectIdentifier( - "1.3.6.1.5.5.7.9.2"); - - /** - * RFC 3039 DateOfBirth - PrintableString (SIZE(1)) -- "M", "F", "m" or "f" - */ - public static readonly DerObjectIdentifier Gender = new DerObjectIdentifier( - "1.3.6.1.5.5.7.9.3"); - - /** - * RFC 3039 CountryOfCitizenship - PrintableString (SIZE (2)) -- ISO 3166 - * codes only - */ - public static readonly DerObjectIdentifier CountryOfCitizenship = new DerObjectIdentifier( - "1.3.6.1.5.5.7.9.4"); - - /** - * RFC 3039 CountryOfCitizenship - PrintableString (SIZE (2)) -- ISO 3166 - * codes only - */ - public static readonly DerObjectIdentifier CountryOfResidence = new DerObjectIdentifier( - "1.3.6.1.5.5.7.9.5"); - - /** - * ISIS-MTT NameAtBirth - DirectoryString(SIZE(1..64) - */ - public static readonly DerObjectIdentifier NameAtBirth = new DerObjectIdentifier("1.3.36.8.3.14"); - - /** - * RFC 3039 PostalAddress - SEQUENCE SIZE (1..6) OF - * DirectoryString(SIZE(1..30)) - */ - public static readonly DerObjectIdentifier PostalAddress = new DerObjectIdentifier("2.5.4.16"); - - /** - * RFC 2256 dmdName - */ - public static readonly DerObjectIdentifier DmdName = new DerObjectIdentifier("2.5.4.54"); - - /** - * id-at-telephoneNumber - */ - public static readonly DerObjectIdentifier TelephoneNumber = X509ObjectIdentifiers.id_at_telephoneNumber; - - /** - * id-at-name - */ - public static readonly DerObjectIdentifier Name = X509ObjectIdentifiers.id_at_name; - - /** - * Email address (RSA PKCS#9 extension) - IA5String. - *

Note: if you're trying to be ultra orthodox, don't use this! It shouldn't be in here.

- */ - public static readonly DerObjectIdentifier EmailAddress = PkcsObjectIdentifiers.Pkcs9AtEmailAddress; - - /** - * more from PKCS#9 - */ - public static readonly DerObjectIdentifier UnstructuredName = PkcsObjectIdentifiers.Pkcs9AtUnstructuredName; - public static readonly DerObjectIdentifier UnstructuredAddress = PkcsObjectIdentifiers.Pkcs9AtUnstructuredAddress; - - /** - * email address in Verisign certificates - */ - public static readonly DerObjectIdentifier E = EmailAddress; - - /* - * others... - */ - public static readonly DerObjectIdentifier DC = new DerObjectIdentifier("0.9.2342.19200300.100.1.25"); - - /** - * LDAP User id. - */ - public static readonly DerObjectIdentifier UID = new DerObjectIdentifier("0.9.2342.19200300.100.1.1"); - - /** - * determines whether or not strings should be processed and printed - * from back to front. - */ -// public static bool DefaultReverse = false; - public static bool DefaultReverse - { - get { return defaultReverse[0]; } - set { defaultReverse[0] = value; } - } - - private static readonly bool[] defaultReverse = { false }; - -#if SILVERLIGHT || PORTABLE - /** - * default look up table translating OID values into their common symbols following - * the convention in RFC 2253 with a few extras - */ - public static readonly IDictionary DefaultSymbols = Platform.CreateHashtable(); - - /** - * look up table translating OID values into their common symbols following the convention in RFC 2253 - */ - public static readonly IDictionary RFC2253Symbols = Platform.CreateHashtable(); - - /** - * look up table translating OID values into their common symbols following the convention in RFC 1779 - * - */ - public static readonly IDictionary RFC1779Symbols = Platform.CreateHashtable(); - - /** - * look up table translating common symbols into their OIDS. - */ - public static readonly IDictionary DefaultLookup = Platform.CreateHashtable(); -#else - /** - * default look up table translating OID values into their common symbols following - * the convention in RFC 2253 with a few extras - */ - public static readonly Hashtable DefaultSymbols = new Hashtable(); - - /** - * look up table translating OID values into their common symbols following the convention in RFC 2253 - */ - public static readonly Hashtable RFC2253Symbols = new Hashtable(); - - /** - * look up table translating OID values into their common symbols following the convention in RFC 1779 - * - */ - public static readonly Hashtable RFC1779Symbols = new Hashtable(); - - /** - * look up table translating common symbols into their OIDS. - */ - public static readonly Hashtable DefaultLookup = new Hashtable(); -#endif - - static X509Name() - { - DefaultSymbols.Add(C, "C"); - DefaultSymbols.Add(O, "O"); - DefaultSymbols.Add(T, "T"); - DefaultSymbols.Add(OU, "OU"); - DefaultSymbols.Add(CN, "CN"); - DefaultSymbols.Add(L, "L"); - DefaultSymbols.Add(ST, "ST"); - DefaultSymbols.Add(SerialNumber, "SERIALNUMBER"); - DefaultSymbols.Add(EmailAddress, "E"); - DefaultSymbols.Add(DC, "DC"); - DefaultSymbols.Add(UID, "UID"); - DefaultSymbols.Add(Street, "STREET"); - DefaultSymbols.Add(Surname, "SURNAME"); - DefaultSymbols.Add(GivenName, "GIVENNAME"); - DefaultSymbols.Add(Initials, "INITIALS"); - DefaultSymbols.Add(Generation, "GENERATION"); - DefaultSymbols.Add(UnstructuredAddress, "unstructuredAddress"); - DefaultSymbols.Add(UnstructuredName, "unstructuredName"); - DefaultSymbols.Add(UniqueIdentifier, "UniqueIdentifier"); - DefaultSymbols.Add(DnQualifier, "DN"); - DefaultSymbols.Add(Pseudonym, "Pseudonym"); - DefaultSymbols.Add(PostalAddress, "PostalAddress"); - DefaultSymbols.Add(NameAtBirth, "NameAtBirth"); - DefaultSymbols.Add(CountryOfCitizenship, "CountryOfCitizenship"); - DefaultSymbols.Add(CountryOfResidence, "CountryOfResidence"); - DefaultSymbols.Add(Gender, "Gender"); - DefaultSymbols.Add(PlaceOfBirth, "PlaceOfBirth"); - DefaultSymbols.Add(DateOfBirth, "DateOfBirth"); - DefaultSymbols.Add(PostalCode, "PostalCode"); - DefaultSymbols.Add(BusinessCategory, "BusinessCategory"); - DefaultSymbols.Add(TelephoneNumber, "TelephoneNumber"); - - RFC2253Symbols.Add(C, "C"); - RFC2253Symbols.Add(O, "O"); - RFC2253Symbols.Add(OU, "OU"); - RFC2253Symbols.Add(CN, "CN"); - RFC2253Symbols.Add(L, "L"); - RFC2253Symbols.Add(ST, "ST"); - RFC2253Symbols.Add(Street, "STREET"); - RFC2253Symbols.Add(DC, "DC"); - RFC2253Symbols.Add(UID, "UID"); - - RFC1779Symbols.Add(C, "C"); - RFC1779Symbols.Add(O, "O"); - RFC1779Symbols.Add(OU, "OU"); - RFC1779Symbols.Add(CN, "CN"); - RFC1779Symbols.Add(L, "L"); - RFC1779Symbols.Add(ST, "ST"); - RFC1779Symbols.Add(Street, "STREET"); - - DefaultLookup.Add("c", C); - DefaultLookup.Add("o", O); - DefaultLookup.Add("t", T); - DefaultLookup.Add("ou", OU); - DefaultLookup.Add("cn", CN); - DefaultLookup.Add("l", L); - DefaultLookup.Add("st", ST); - DefaultLookup.Add("serialnumber", SerialNumber); - DefaultLookup.Add("street", Street); - DefaultLookup.Add("emailaddress", E); - DefaultLookup.Add("dc", DC); - DefaultLookup.Add("e", E); - DefaultLookup.Add("uid", UID); - DefaultLookup.Add("surname", Surname); - DefaultLookup.Add("givenname", GivenName); - DefaultLookup.Add("initials", Initials); - DefaultLookup.Add("generation", Generation); - DefaultLookup.Add("unstructuredaddress", UnstructuredAddress); - DefaultLookup.Add("unstructuredname", UnstructuredName); - DefaultLookup.Add("uniqueidentifier", UniqueIdentifier); - DefaultLookup.Add("dn", DnQualifier); - DefaultLookup.Add("pseudonym", Pseudonym); - DefaultLookup.Add("postaladdress", PostalAddress); - DefaultLookup.Add("nameofbirth", NameAtBirth); - DefaultLookup.Add("countryofcitizenship", CountryOfCitizenship); - DefaultLookup.Add("countryofresidence", CountryOfResidence); - DefaultLookup.Add("gender", Gender); - DefaultLookup.Add("placeofbirth", PlaceOfBirth); - DefaultLookup.Add("dateofbirth", DateOfBirth); - DefaultLookup.Add("postalcode", PostalCode); - DefaultLookup.Add("businesscategory", BusinessCategory); - DefaultLookup.Add("telephonenumber", TelephoneNumber); - } - - private readonly IList ordering = Platform.CreateArrayList(); - private readonly X509NameEntryConverter converter; - - private IList values = Platform.CreateArrayList(); - private IList added = Platform.CreateArrayList(); - private Asn1Sequence seq; - - /** - * Return a X509Name based on the passed in tagged object. - * - * @param obj tag object holding name. - * @param explicitly true if explicitly tagged false otherwise. - * @return the X509Name - */ - public static X509Name GetInstance( - Asn1TaggedObject obj, - bool explicitly) - { - return GetInstance(Asn1Sequence.GetInstance(obj, explicitly)); - } - - public static X509Name GetInstance( - object obj) - { - if (obj == null || obj is X509Name) - return (X509Name)obj; - - if (obj != null) - return new X509Name(Asn1Sequence.GetInstance(obj)); - - throw new ArgumentException("null object in factory", "obj"); - } - - protected X509Name() - { - } - - /** - * Constructor from Asn1Sequence - * - * the principal will be a list of constructed sets, each containing an (OID, string) pair. - */ - protected X509Name( - Asn1Sequence seq) - { - this.seq = seq; - - foreach (Asn1Encodable asn1Obj in seq) - { - Asn1Set asn1Set = Asn1Set.GetInstance(asn1Obj.ToAsn1Object()); - - for (int i = 0; i < asn1Set.Count; i++) - { - Asn1Sequence s = Asn1Sequence.GetInstance(asn1Set[i].ToAsn1Object()); - - if (s.Count != 2) - throw new ArgumentException("badly sized pair"); - - ordering.Add(DerObjectIdentifier.GetInstance(s[0].ToAsn1Object())); - - Asn1Object derValue = s[1].ToAsn1Object(); - if (derValue is IAsn1String && !(derValue is DerUniversalString)) - { - string v = ((IAsn1String)derValue).GetString(); - if (Platform.StartsWith(v, "#")) - { - v = "\\" + v; - } - - values.Add(v); - } - else - { - values.Add("#" + Hex.ToHexString(derValue.GetEncoded())); - } - - added.Add(i != 0); - } - } - } - - /** - * Constructor from a table of attributes with ordering. - *

- * it's is assumed the table contains OID/string pairs, and the contents - * of the table are copied into an internal table as part of the - * construction process. The ordering ArrayList should contain the OIDs - * in the order they are meant to be encoded or printed in ToString.

- */ - public X509Name( - IList ordering, - IDictionary attributes) - : this(ordering, attributes, new X509DefaultEntryConverter()) - { - } - - /** - * Constructor from a table of attributes with ordering. - *

- * it's is assumed the table contains OID/string pairs, and the contents - * of the table are copied into an internal table as part of the - * construction process. The ordering ArrayList should contain the OIDs - * in the order they are meant to be encoded or printed in ToString.

- *

- * The passed in converter will be used to convert the strings into their - * ASN.1 counterparts.

- */ - public X509Name( - IList ordering, - IDictionary attributes, - X509NameEntryConverter converter) - { - this.converter = converter; - - foreach (DerObjectIdentifier oid in ordering) - { - object attribute = attributes[oid]; - if (attribute == null) - { - throw new ArgumentException("No attribute for object id - " + oid + " - passed to distinguished name"); - } - - this.ordering.Add(oid); - this.added.Add(false); - this.values.Add(attribute); // copy the hash table - } - } - - /** - * Takes two vectors one of the oids and the other of the values. - */ - public X509Name( - IList oids, - IList values) - : this(oids, values, new X509DefaultEntryConverter()) - { - } - - /** - * Takes two vectors one of the oids and the other of the values. - *

- * The passed in converter will be used to convert the strings into their - * ASN.1 counterparts.

- */ - public X509Name( - IList oids, - IList values, - X509NameEntryConverter converter) - { - this.converter = converter; - - if (oids.Count != values.Count) - { - throw new ArgumentException("'oids' must be same length as 'values'."); - } - - for (int i = 0; i < oids.Count; i++) - { - this.ordering.Add(oids[i]); - this.values.Add(values[i]); - this.added.Add(false); - } - } - - /** - * Takes an X509 dir name as a string of the format "C=AU, ST=Victoria", or - * some such, converting it into an ordered set of name attributes. - */ - public X509Name( - string dirName) - : this(DefaultReverse, (IDictionary)DefaultLookup, dirName) - { - } - - /** - * Takes an X509 dir name as a string of the format "C=AU, ST=Victoria", or - * some such, converting it into an ordered set of name attributes with each - * string value being converted to its associated ASN.1 type using the passed - * in converter. - */ - public X509Name( - string dirName, - X509NameEntryConverter converter) - : this(DefaultReverse, DefaultLookup, dirName, converter) - { - } - - /** - * Takes an X509 dir name as a string of the format "C=AU, ST=Victoria", or - * some such, converting it into an ordered set of name attributes. If reverse - * is true, create the encoded version of the sequence starting from the - * last element in the string. - */ - public X509Name( - bool reverse, - string dirName) - : this(reverse, (IDictionary)DefaultLookup, dirName) - { - } - - /** - * Takes an X509 dir name as a string of the format "C=AU, ST=Victoria", or - * some such, converting it into an ordered set of name attributes with each - * string value being converted to its associated ASN.1 type using the passed - * in converter. If reverse is true the ASN.1 sequence representing the DN will - * be built by starting at the end of the string, rather than the start. - */ - public X509Name( - bool reverse, - string dirName, - X509NameEntryConverter converter) - : this(reverse, DefaultLookup, dirName, converter) - { - } - - /** - * Takes an X509 dir name as a string of the format "C=AU, ST=Victoria", or - * some such, converting it into an ordered set of name attributes. lookUp - * should provide a table of lookups, indexed by lowercase only strings and - * yielding a DerObjectIdentifier, other than that OID. and numeric oids - * will be processed automatically. - *
- * If reverse is true, create the encoded version of the sequence - * starting from the last element in the string. - * @param reverse true if we should start scanning from the end (RFC 2553). - * @param lookUp table of names and their oids. - * @param dirName the X.500 string to be parsed. - */ - public X509Name( - bool reverse, - IDictionary lookUp, - string dirName) - : this(reverse, lookUp, dirName, new X509DefaultEntryConverter()) - { - } - - private DerObjectIdentifier DecodeOid( - string name, - IDictionary lookUp) - { - if (Platform.StartsWith(Platform.ToUpperInvariant(name), "OID.")) - { - return new DerObjectIdentifier(name.Substring(4)); - } - else if (name[0] >= '0' && name[0] <= '9') - { - return new DerObjectIdentifier(name); - } - - DerObjectIdentifier oid = (DerObjectIdentifier)lookUp[Platform.ToLowerInvariant(name)]; - if (oid == null) - { - throw new ArgumentException("Unknown object id - " + name + " - passed to distinguished name"); - } - - return oid; - } - - /** - * Takes an X509 dir name as a string of the format "C=AU, ST=Victoria", or - * some such, converting it into an ordered set of name attributes. lookUp - * should provide a table of lookups, indexed by lowercase only strings and - * yielding a DerObjectIdentifier, other than that OID. and numeric oids - * will be processed automatically. The passed in converter is used to convert the - * string values to the right of each equals sign to their ASN.1 counterparts. - *
- * @param reverse true if we should start scanning from the end, false otherwise. - * @param lookUp table of names and oids. - * @param dirName the string dirName - * @param converter the converter to convert string values into their ASN.1 equivalents - */ - public X509Name( - bool reverse, - IDictionary lookUp, - string dirName, - X509NameEntryConverter converter) - { - this.converter = converter; - X509NameTokenizer nTok = new X509NameTokenizer(dirName); - - while (nTok.HasMoreTokens()) - { - string token = nTok.NextToken(); - int index = token.IndexOf('='); - - if (index == -1) - { - throw new ArgumentException("badly formated directory string"); - } - - string name = token.Substring(0, index); - string value = token.Substring(index + 1); - DerObjectIdentifier oid = DecodeOid(name, lookUp); - - if (value.IndexOf('+') > 0) - { - X509NameTokenizer vTok = new X509NameTokenizer(value, '+'); - string v = vTok.NextToken(); - - this.ordering.Add(oid); - this.values.Add(v); - this.added.Add(false); - - while (vTok.HasMoreTokens()) - { - string sv = vTok.NextToken(); - int ndx = sv.IndexOf('='); - - string nm = sv.Substring(0, ndx); - string vl = sv.Substring(ndx + 1); - this.ordering.Add(DecodeOid(nm, lookUp)); - this.values.Add(vl); - this.added.Add(true); - } - } - else - { - this.ordering.Add(oid); - this.values.Add(value); - this.added.Add(false); - } - } - - if (reverse) - { -// this.ordering.Reverse(); -// this.values.Reverse(); -// this.added.Reverse(); - IList o = Platform.CreateArrayList(); - IList v = Platform.CreateArrayList(); - IList a = Platform.CreateArrayList(); - int count = 1; - - for (int i = 0; i < this.ordering.Count; i++) - { - if (!((bool) this.added[i])) - { - count = 0; - } - - int index = count++; - - o.Insert(index, this.ordering[i]); - v.Insert(index, this.values[i]); - a.Insert(index, this.added[i]); - } - - this.ordering = o; - this.values = v; - this.added = a; - } - } - - /** - * return an IList of the oids in the name, in the order they were found. - */ - public IList GetOidList() - { - return Platform.CreateArrayList(ordering); - } - - /** - * return an IList of the values found in the name, in the order they - * were found. - */ - public IList GetValueList() - { - return GetValueList(null); - } - - /** - * return an IList of the values found in the name, in the order they - * were found, with the DN label corresponding to passed in oid. - */ - public IList GetValueList(DerObjectIdentifier oid) - { - IList v = Platform.CreateArrayList(); - for (int i = 0; i != values.Count; i++) - { - if (null == oid || oid.Equals(ordering[i])) - { - string val = (string)values[i]; - - if (Platform.StartsWith(val, "\\#")) - { - val = val.Substring(1); - } - - v.Add(val); - } - } - return v; - } - - public override Asn1Object ToAsn1Object() - { - if (seq == null) - { - Asn1EncodableVector vec = new Asn1EncodableVector(); - Asn1EncodableVector sVec = new Asn1EncodableVector(); - DerObjectIdentifier lstOid = null; - - for (int i = 0; i != ordering.Count; i++) - { - DerObjectIdentifier oid = (DerObjectIdentifier)ordering[i]; - string str = (string)values[i]; - - if (lstOid == null - || ((bool)this.added[i])) - { - } - else - { - vec.Add(new DerSet(sVec)); - sVec = new Asn1EncodableVector(); - } - - sVec.Add( - new DerSequence( - oid, - converter.GetConvertedValue(oid, str))); - - lstOid = oid; - } - - vec.Add(new DerSet(sVec)); - - seq = new DerSequence(vec); - } - - return seq; - } - - /// The X509Name object to test equivalency against. - /// If true, the order of elements must be the same, - /// as well as the values associated with each element. - public bool Equivalent( - X509Name other, - bool inOrder) - { - if (!inOrder) - return this.Equivalent(other); - - if (other == null) - return false; - - if (other == this) - return true; - - int orderingSize = ordering.Count; - - if (orderingSize != other.ordering.Count) - return false; - - for (int i = 0; i < orderingSize; i++) - { - DerObjectIdentifier oid = (DerObjectIdentifier) ordering[i]; - DerObjectIdentifier oOid = (DerObjectIdentifier) other.ordering[i]; - - if (!oid.Equals(oOid)) - return false; - - string val = (string) values[i]; - string oVal = (string) other.values[i]; - - if (!equivalentStrings(val, oVal)) - return false; - } - - return true; - } - - /** - * test for equivalence - note: case is ignored. - */ - public bool Equivalent( - X509Name other) - { - if (other == null) - return false; - - if (other == this) - return true; - - int orderingSize = ordering.Count; - - if (orderingSize != other.ordering.Count) - { - return false; - } - - bool[] indexes = new bool[orderingSize]; - int start, end, delta; - - if (ordering[0].Equals(other.ordering[0])) // guess forward - { - start = 0; - end = orderingSize; - delta = 1; - } - else // guess reversed - most common problem - { - start = orderingSize - 1; - end = -1; - delta = -1; - } - - for (int i = start; i != end; i += delta) - { - bool found = false; - DerObjectIdentifier oid = (DerObjectIdentifier)ordering[i]; - string value = (string)values[i]; - - for (int j = 0; j < orderingSize; j++) - { - if (indexes[j]) - { - continue; - } - - DerObjectIdentifier oOid = (DerObjectIdentifier)other.ordering[j]; - - if (oid.Equals(oOid)) - { - string oValue = (string)other.values[j]; - - if (equivalentStrings(value, oValue)) - { - indexes[j] = true; - found = true; - break; - } - } - } - - if (!found) - { - return false; - } - } - - return true; - } - - private static bool equivalentStrings( - string s1, - string s2) - { - string v1 = canonicalize(s1); - string v2 = canonicalize(s2); - - if (!v1.Equals(v2)) - { - v1 = stripInternalSpaces(v1); - v2 = stripInternalSpaces(v2); - - if (!v1.Equals(v2)) - { - return false; - } - } - - return true; - } - - private static string canonicalize( - string s) - { - string v = Platform.ToLowerInvariant(s).Trim(); - - if (Platform.StartsWith(v, "#")) - { - Asn1Object obj = decodeObject(v); - - if (obj is IAsn1String) - { - v = Platform.ToLowerInvariant(((IAsn1String)obj).GetString()).Trim(); - } - } - - return v; - } - - private static Asn1Object decodeObject( - string v) - { - try - { - return Asn1Object.FromByteArray(Hex.Decode(v.Substring(1))); - } - catch (IOException e) - { - throw new InvalidOperationException("unknown encoding in name: " + e.Message, e); - } - } - - private static string stripInternalSpaces( - string str) - { - StringBuilder res = new StringBuilder(); - - if (str.Length != 0) - { - char c1 = str[0]; - - res.Append(c1); - - for (int k = 1; k < str.Length; k++) - { - char c2 = str[k]; - if (!(c1 == ' ' && c2 == ' ')) - { - res.Append(c2); - } - c1 = c2; - } - } - - return res.ToString(); - } - - private void AppendValue( - StringBuilder buf, - IDictionary oidSymbols, - DerObjectIdentifier oid, - string val) - { - string sym = (string)oidSymbols[oid]; - - if (sym != null) - { - buf.Append(sym); - } - else - { - buf.Append(oid.Id); - } - - buf.Append('='); - - int index = buf.Length; - - buf.Append(val); - - int end = buf.Length; - - if (Platform.StartsWith(val, "\\#")) - { - index += 2; - } - - while (index != end) - { - if ((buf[index] == ',') - || (buf[index] == '"') - || (buf[index] == '\\') - || (buf[index] == '+') - || (buf[index] == '=') - || (buf[index] == '<') - || (buf[index] == '>') - || (buf[index] == ';')) - { - buf.Insert(index++, "\\"); - end++; - } - - index++; - } - } - - /** - * convert the structure to a string - if reverse is true the - * oids and values are listed out starting with the last element - * in the sequence (ala RFC 2253), otherwise the string will begin - * with the first element of the structure. If no string definition - * for the oid is found in oidSymbols the string value of the oid is - * added. Two standard symbol tables are provided DefaultSymbols, and - * RFC2253Symbols as part of this class. - * - * @param reverse if true start at the end of the sequence and work back. - * @param oidSymbols look up table strings for oids. - */ - public string ToString( - bool reverse, - IDictionary oidSymbols) - { -#if SILVERLIGHT || PORTABLE - List components = new List(); -#else - ArrayList components = new ArrayList(); -#endif - - StringBuilder ava = null; - - for (int i = 0; i < ordering.Count; i++) - { - if ((bool) added[i]) - { - ava.Append('+'); - AppendValue(ava, oidSymbols, - (DerObjectIdentifier)ordering[i], - (string)values[i]); - } - else - { - ava = new StringBuilder(); - AppendValue(ava, oidSymbols, - (DerObjectIdentifier)ordering[i], - (string)values[i]); - components.Add(ava); - } - } - - if (reverse) - { - components.Reverse(); - } - - StringBuilder buf = new StringBuilder(); - - if (components.Count > 0) - { - buf.Append(components[0].ToString()); - - for (int i = 1; i < components.Count; ++i) - { - buf.Append(','); - buf.Append(components[i].ToString()); - } - } - - return buf.ToString(); - } - - public override string ToString() - { - return ToString(DefaultReverse, (IDictionary)DefaultSymbols); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/X509NameEntryConverter.cs b/bc-sharp-crypto/src/asn1/x509/X509NameEntryConverter.cs deleted file mode 100644 index 5872656..0000000 --- a/bc-sharp-crypto/src/asn1/x509/X509NameEntryConverter.cs +++ /dev/null @@ -1,89 +0,0 @@ -using System; -using System.Globalization; -using System.IO; -using System.Text; - -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * It turns out that the number of standard ways the fields in a DN should be - * encoded into their ASN.1 counterparts is rapidly approaching the - * number of machines on the internet. By default the X509Name class - * will produce UTF8Strings in line with the current recommendations (RFC 3280). - *

- * An example of an encoder look like below: - * 

-     * public class X509DirEntryConverter
-     *     : X509NameEntryConverter
-     * {
-     *     public Asn1Object GetConvertedValue(
-     *         DerObjectIdentifier  oid,
-     *         string               value)
-     *     {
-     *         if (str.Length() != 0 && str.charAt(0) == '#')
-     *         {
-     *             return ConvertHexEncoded(str, 1);
-     *         }
-     *         if (oid.Equals(EmailAddress))
-     *         {
-     *             return new DerIA5String(str);
-     *         }
-     *         else if (CanBePrintable(str))
-     *         {
-     *             return new DerPrintableString(str);
-     *         }
-     *         else if (CanBeUTF8(str))
-     *         {
-     *             return new DerUtf8String(str);
-     *         }
-     *         else
-     *         {
-     *             return new DerBmpString(str);
-     *         }
-     *     }
-     * }
-	 *
- *

- */ - public abstract class X509NameEntryConverter - { - /** - * Convert an inline encoded hex string rendition of an ASN.1 - * object back into its corresponding ASN.1 object. - * - * @param str the hex encoded object - * @param off the index at which the encoding starts - * @return the decoded object - */ - protected Asn1Object ConvertHexEncoded( - string hexString, - int offset) - { - string str = hexString.Substring(offset); - - return Asn1Object.FromByteArray(Hex.Decode(str)); - } - - /** - * return true if the passed in string can be represented without - * loss as a PrintableString, false otherwise. - */ - protected bool CanBePrintable( - string str) - { - return DerPrintableString.IsPrintableString(str); - } - - /** - * Convert the passed in string value into the appropriate ASN.1 - * encoded object. - * - * @param oid the oid associated with the value in the DN. - * @param value the value of the particular DN component. - * @return the ASN.1 equivalent for the value. - */ - public abstract Asn1Object GetConvertedValue(DerObjectIdentifier oid, string value); - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/X509NameTokenizer.cs b/bc-sharp-crypto/src/asn1/x509/X509NameTokenizer.cs deleted file mode 100644 index ab55295..0000000 --- a/bc-sharp-crypto/src/asn1/x509/X509NameTokenizer.cs +++ /dev/null @@ -1,104 +0,0 @@ -using System.Text; - -namespace Org.BouncyCastle.Asn1.X509 -{ - /** - * class for breaking up an X500 Name into it's component tokens, ala - * java.util.StringTokenizer. We need this class as some of the - * lightweight Java environment don't support classes like - * StringTokenizer. - */ - public class X509NameTokenizer - { - private string value; - private int index; - private char separator; - private StringBuilder buffer = new StringBuilder(); - - public X509NameTokenizer( - string oid) - : this(oid, ',') - { - } - - public X509NameTokenizer( - string oid, - char separator) - { - this.value = oid; - this.index = -1; - this.separator = separator; - } - - public bool HasMoreTokens() - { - return index != value.Length; - } - - public string NextToken() - { - if (index == value.Length) - { - return null; - } - - int end = index + 1; - bool quoted = false; - bool escaped = false; - - buffer.Remove(0, buffer.Length); - - while (end != value.Length) - { - char c = value[end]; - - if (c == '"') - { - if (!escaped) - { - quoted = !quoted; - } - else - { - buffer.Append(c); - escaped = false; - } - } - else - { - if (escaped || quoted) - { - if (c == '#' && buffer[buffer.Length - 1] == '=') - { - buffer.Append('\\'); - } - else if (c == '+' && separator != '+') - { - buffer.Append('\\'); - } - buffer.Append(c); - escaped = false; - } - else if (c == '\\') - { - escaped = true; - } - else if (c == separator) - { - break; - } - else - { - buffer.Append(c); - } - } - - end++; - } - - index = end; - - return buffer.ToString().Trim(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/X509ObjectIdentifiers.cs b/bc-sharp-crypto/src/asn1/x509/X509ObjectIdentifiers.cs deleted file mode 100644 index f00e314..0000000 --- a/bc-sharp-crypto/src/asn1/x509/X509ObjectIdentifiers.cs +++ /dev/null @@ -1,59 +0,0 @@ -namespace Org.BouncyCastle.Asn1.X509 -{ - public abstract class X509ObjectIdentifiers - { - // - // base id - // - internal const string ID = "2.5.4"; - - public static readonly DerObjectIdentifier CommonName = new DerObjectIdentifier(ID + ".3"); - public static readonly DerObjectIdentifier CountryName = new DerObjectIdentifier(ID + ".6"); - public static readonly DerObjectIdentifier LocalityName = new DerObjectIdentifier(ID + ".7"); - public static readonly DerObjectIdentifier StateOrProvinceName = new DerObjectIdentifier(ID + ".8"); - public static readonly DerObjectIdentifier Organization = new DerObjectIdentifier(ID + ".10"); - public static readonly DerObjectIdentifier OrganizationalUnitName = new DerObjectIdentifier(ID + ".11"); - - public static readonly DerObjectIdentifier id_at_telephoneNumber = new DerObjectIdentifier(ID + ".20"); - public static readonly DerObjectIdentifier id_at_name = new DerObjectIdentifier(ID + ".41"); - - // id-SHA1 OBJECT IDENTIFIER ::= - // {iso(1) identified-organization(3) oiw(14) secsig(3) algorithms(2) 26 } // - public static readonly DerObjectIdentifier IdSha1 = new DerObjectIdentifier("1.3.14.3.2.26"); - - // - // ripemd160 OBJECT IDENTIFIER ::= - // {iso(1) identified-organization(3) TeleTrust(36) algorithm(3) hashAlgorithm(2) RipeMD-160(1)} - // - public static readonly DerObjectIdentifier RipeMD160 = new DerObjectIdentifier("1.3.36.3.2.1"); - - // - // ripemd160WithRSAEncryption OBJECT IDENTIFIER ::= - // {iso(1) identified-organization(3) TeleTrust(36) algorithm(3) signatureAlgorithm(3) rsaSignature(1) rsaSignatureWithripemd160(2) } - // - public static readonly DerObjectIdentifier RipeMD160WithRsaEncryption = new DerObjectIdentifier("1.3.36.3.3.1.2"); - - public static readonly DerObjectIdentifier IdEARsa = new DerObjectIdentifier("2.5.8.1.1"); - - // id-pkix - public static readonly DerObjectIdentifier IdPkix = new DerObjectIdentifier("1.3.6.1.5.5.7"); - - // - // private internet extensions - // - public static readonly DerObjectIdentifier IdPE = new DerObjectIdentifier(IdPkix + ".1"); - - // - // authority information access - // - public static readonly DerObjectIdentifier IdAD = new DerObjectIdentifier(IdPkix + ".48"); - public static readonly DerObjectIdentifier IdADCAIssuers = new DerObjectIdentifier(IdAD + ".2"); - public static readonly DerObjectIdentifier IdADOcsp = new DerObjectIdentifier(IdAD + ".1"); - - // - // OID for ocsp and crl uri in AuthorityInformationAccess extension - // - public static readonly DerObjectIdentifier OcspAccessMethod = IdADOcsp; - public static readonly DerObjectIdentifier CrlAccessMethod = IdADCAIssuers; - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/qualified/BiometricData.cs b/bc-sharp-crypto/src/asn1/x509/qualified/BiometricData.cs deleted file mode 100644 index bb70c34..0000000 --- a/bc-sharp-crypto/src/asn1/x509/qualified/BiometricData.cs +++ /dev/null @@ -1,110 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509.Qualified -{ - /** - * The BiometricData object. - * 
-    * BiometricData  ::=  SEQUENCE {
-    *       typeOfBiometricData  TypeOfBiometricData,
-    *       hashAlgorithm        AlgorithmIdentifier,
-    *       biometricDataHash    OCTET STRING,
-    *       sourceDataUri        IA5String OPTIONAL  }
-    *
- */ - public class BiometricData - : Asn1Encodable - { - private readonly TypeOfBiometricData typeOfBiometricData; - private readonly AlgorithmIdentifier hashAlgorithm; - private readonly Asn1OctetString biometricDataHash; - private readonly DerIA5String sourceDataUri; - - public static BiometricData GetInstance( - object obj) - { - if (obj == null || obj is BiometricData) - { - return (BiometricData)obj; - } - - if (obj is Asn1Sequence) - { - return new BiometricData(Asn1Sequence.GetInstance(obj)); - } - - throw new ArgumentException("unknown object in GetInstance: " + Platform.GetTypeName(obj), "obj"); - } - - private BiometricData( - Asn1Sequence seq) - { - typeOfBiometricData = TypeOfBiometricData.GetInstance(seq[0]); - hashAlgorithm = AlgorithmIdentifier.GetInstance(seq[1]); - biometricDataHash = Asn1OctetString.GetInstance(seq[2]); - - if (seq.Count > 3) - { - sourceDataUri = DerIA5String.GetInstance(seq[3]); - } - } - - public BiometricData( - TypeOfBiometricData typeOfBiometricData, - AlgorithmIdentifier hashAlgorithm, - Asn1OctetString biometricDataHash, - DerIA5String sourceDataUri) - { - this.typeOfBiometricData = typeOfBiometricData; - this.hashAlgorithm = hashAlgorithm; - this.biometricDataHash = biometricDataHash; - this.sourceDataUri = sourceDataUri; - } - - public BiometricData( - TypeOfBiometricData typeOfBiometricData, - AlgorithmIdentifier hashAlgorithm, - Asn1OctetString biometricDataHash) - { - this.typeOfBiometricData = typeOfBiometricData; - this.hashAlgorithm = hashAlgorithm; - this.biometricDataHash = biometricDataHash; - this.sourceDataUri = null; - } - - public TypeOfBiometricData TypeOfBiometricData - { - get { return typeOfBiometricData; } - } - - public AlgorithmIdentifier HashAlgorithm - { - get { return hashAlgorithm; } - } - - public Asn1OctetString BiometricDataHash - { - get { return biometricDataHash; } - } - - public DerIA5String SourceDataUri - { - get { return sourceDataUri; } - } - - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector seq = new Asn1EncodableVector( - typeOfBiometricData, hashAlgorithm, biometricDataHash); - - if (sourceDataUri != null) - { - seq.Add(sourceDataUri); - } - - return new DerSequence(seq); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/qualified/ETSIQCObjectIdentifiers.cs b/bc-sharp-crypto/src/asn1/x509/qualified/ETSIQCObjectIdentifiers.cs deleted file mode 100644 index 86a4eee..0000000 --- a/bc-sharp-crypto/src/asn1/x509/qualified/ETSIQCObjectIdentifiers.cs +++ /dev/null @@ -1,19 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; - -namespace Org.BouncyCastle.Asn1.X509.Qualified -{ - public abstract class EtsiQCObjectIdentifiers - { - // - // base id - // - public static readonly DerObjectIdentifier IdEtsiQcs = new DerObjectIdentifier("0.4.0.1862.1"); - - public static readonly DerObjectIdentifier IdEtsiQcsQcCompliance = new DerObjectIdentifier(IdEtsiQcs+".1"); - public static readonly DerObjectIdentifier IdEtsiQcsLimitValue = new DerObjectIdentifier(IdEtsiQcs+".2"); - public static readonly DerObjectIdentifier IdEtsiQcsRetentionPeriod = new DerObjectIdentifier(IdEtsiQcs+".3"); - public static readonly DerObjectIdentifier IdEtsiQcsQcSscd = new DerObjectIdentifier(IdEtsiQcs+".4"); - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/qualified/Iso4217CurrencyCode.cs b/bc-sharp-crypto/src/asn1/x509/qualified/Iso4217CurrencyCode.cs deleted file mode 100644 index 9ec88f5..0000000 --- a/bc-sharp-crypto/src/asn1/x509/qualified/Iso4217CurrencyCode.cs +++ /dev/null @@ -1,84 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509.Qualified -{ - /** - * The Iso4217CurrencyCode object. - * 
-    * Iso4217CurrencyCode  ::=  CHOICE {
-    *       alphabetic              PrintableString (SIZE 3), --Recommended
-    *       numeric              INTEGER (1..999) }
-    * -- Alphabetic or numeric currency code as defined in ISO 4217
-    * -- It is recommended that the Alphabetic form is used
-    *
- */ - public class Iso4217CurrencyCode - : Asn1Encodable, IAsn1Choice - { - internal const int AlphabeticMaxSize = 3; - internal const int NumericMinSize = 1; - internal const int NumericMaxSize = 999; - - internal Asn1Encodable obj; -// internal int numeric; - - public static Iso4217CurrencyCode GetInstance( - object obj) - { - if (obj == null || obj is Iso4217CurrencyCode) - { - return (Iso4217CurrencyCode) obj; - } - - if (obj is DerInteger) - { - DerInteger numericobj = DerInteger.GetInstance(obj); - int numeric = numericobj.Value.IntValue; - return new Iso4217CurrencyCode(numeric); - } - - if (obj is DerPrintableString) - { - DerPrintableString alphabetic = DerPrintableString.GetInstance(obj); - return new Iso4217CurrencyCode(alphabetic.GetString()); - } - - throw new ArgumentException("unknown object in GetInstance: " + Platform.GetTypeName(obj), "obj"); - } - - public Iso4217CurrencyCode( - int numeric) - { - if (numeric > NumericMaxSize || numeric < NumericMinSize) - { - throw new ArgumentException("wrong size in numeric code : not in (" + NumericMinSize + ".." + NumericMaxSize + ")"); - } - - obj = new DerInteger(numeric); - } - - public Iso4217CurrencyCode( - string alphabetic) - { - if (alphabetic.Length > AlphabeticMaxSize) - { - throw new ArgumentException("wrong size in alphabetic code : max size is " + AlphabeticMaxSize); - } - - obj = new DerPrintableString(alphabetic); - } - - public bool IsAlphabetic { get { return obj is DerPrintableString; } } - - public string Alphabetic { get { return ((DerPrintableString) obj).GetString(); } } - - public int Numeric { get { return ((DerInteger)obj).Value.IntValue; } } - - public override Asn1Object ToAsn1Object() - { - return obj.ToAsn1Object(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/qualified/MonetaryValue.cs b/bc-sharp-crypto/src/asn1/x509/qualified/MonetaryValue.cs deleted file mode 100644 index d703de9..0000000 --- a/bc-sharp-crypto/src/asn1/x509/qualified/MonetaryValue.cs +++ /dev/null @@ -1,83 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509.Qualified -{ - /** - * The MonetaryValue object. - * 
-    * MonetaryValue  ::=  SEQUENCE {
-    *       currency              Iso4217CurrencyCode,
-    *       amount               INTEGER,
-    *       exponent             INTEGER }
-    * -- value = amount * 10^exponent
-    *
- */ - public class MonetaryValue - : Asn1Encodable - { - internal Iso4217CurrencyCode currency; - internal DerInteger amount; - internal DerInteger exponent; - - public static MonetaryValue GetInstance( - object obj) - { - if (obj == null || obj is MonetaryValue) - { - return (MonetaryValue) obj; - } - - if (obj is Asn1Sequence) - { - return new MonetaryValue(Asn1Sequence.GetInstance(obj)); - } - - throw new ArgumentException("unknown object in GetInstance: " + Platform.GetTypeName(obj), "obj"); - } - - private MonetaryValue( - Asn1Sequence seq) - { - if (seq.Count != 3) - throw new ArgumentException("Bad sequence size: " + seq.Count, "seq"); - - currency = Iso4217CurrencyCode.GetInstance(seq[0]); - amount = DerInteger.GetInstance(seq[1]); - exponent = DerInteger.GetInstance(seq[2]); - } - - public MonetaryValue( - Iso4217CurrencyCode currency, - int amount, - int exponent) - { - this.currency = currency; - this.amount = new DerInteger(amount); - this.exponent = new DerInteger(exponent); - } - - public Iso4217CurrencyCode Currency - { - get { return currency; } - } - - public BigInteger Amount - { - get { return amount.Value; } - } - - public BigInteger Exponent - { - get { return exponent.Value; } - } - - public override Asn1Object ToAsn1Object() - { - return new DerSequence(currency, amount, exponent); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/qualified/QCStatement.cs b/bc-sharp-crypto/src/asn1/x509/qualified/QCStatement.cs deleted file mode 100644 index a8e214c..0000000 --- a/bc-sharp-crypto/src/asn1/x509/qualified/QCStatement.cs +++ /dev/null @@ -1,84 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509.Qualified -{ - /** - * The QCStatement object. - * 
-    * QCStatement ::= SEQUENCE {
-    *   statementId        OBJECT IDENTIFIER,
-    *   statementInfo      ANY DEFINED BY statementId OPTIONAL}
-    *
- */ - public class QCStatement - : Asn1Encodable - { - private readonly DerObjectIdentifier qcStatementId; - private readonly Asn1Encodable qcStatementInfo; - - public static QCStatement GetInstance( - object obj) - { - if (obj == null || obj is QCStatement) - { - return (QCStatement) obj; - } - - if (obj is Asn1Sequence) - { - return new QCStatement(Asn1Sequence.GetInstance(obj)); - } - - throw new ArgumentException("unknown object in GetInstance: " + Platform.GetTypeName(obj), "obj"); - } - - private QCStatement( - Asn1Sequence seq) - { - qcStatementId = DerObjectIdentifier.GetInstance(seq[0]); - - if (seq.Count > 1) - { - qcStatementInfo = seq[1]; - } - } - - public QCStatement( - DerObjectIdentifier qcStatementId) - { - this.qcStatementId = qcStatementId; - } - - public QCStatement( - DerObjectIdentifier qcStatementId, - Asn1Encodable qcStatementInfo) - { - this.qcStatementId = qcStatementId; - this.qcStatementInfo = qcStatementInfo; - } - - public DerObjectIdentifier StatementId - { - get { return qcStatementId; } - } - - public Asn1Encodable StatementInfo - { - get { return qcStatementInfo; } - } - - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector seq = new Asn1EncodableVector(qcStatementId); - - if (qcStatementInfo != null) - { - seq.Add(qcStatementInfo); - } - - return new DerSequence(seq); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/qualified/RFC3739QCObjectIdentifiers.cs b/bc-sharp-crypto/src/asn1/x509/qualified/RFC3739QCObjectIdentifiers.cs deleted file mode 100644 index 8ebd69e..0000000 --- a/bc-sharp-crypto/src/asn1/x509/qualified/RFC3739QCObjectIdentifiers.cs +++ /dev/null @@ -1,21 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; - -namespace Org.BouncyCastle.Asn1.X509.Qualified -{ - public sealed class Rfc3739QCObjectIdentifiers - { - private Rfc3739QCObjectIdentifiers() - { - } - - // - // base id - // - public static readonly DerObjectIdentifier IdQcs = new DerObjectIdentifier("1.3.6.1.5.5.7.11"); - - public static readonly DerObjectIdentifier IdQcsPkixQCSyntaxV1 = new DerObjectIdentifier(IdQcs+".1"); - public static readonly DerObjectIdentifier IdQcsPkixQCSyntaxV2 = new DerObjectIdentifier(IdQcs+".2"); - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/qualified/SemanticsInformation.cs b/bc-sharp-crypto/src/asn1/x509/qualified/SemanticsInformation.cs deleted file mode 100644 index 5fe5f93..0000000 --- a/bc-sharp-crypto/src/asn1/x509/qualified/SemanticsInformation.cs +++ /dev/null @@ -1,124 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509.Qualified -{ - /** - * The SemanticsInformation object. - * 
-    *       SemanticsInformation ::= SEQUENCE {
-    *         semanticsIdentifier        OBJECT IDENTIFIER   OPTIONAL,
-    *         nameRegistrationAuthorities NameRegistrationAuthorities
-    *                                                         OPTIONAL }
-    *         (WITH COMPONENTS {..., semanticsIdentifier PRESENT}|
-    *          WITH COMPONENTS {..., nameRegistrationAuthorities PRESENT})
-    *
-    *     NameRegistrationAuthorities ::=  SEQUENCE SIZE (1..MAX) OF
-    *         GeneralName
-    *
- */ - public class SemanticsInformation - : Asn1Encodable - { - private readonly DerObjectIdentifier semanticsIdentifier; - private readonly GeneralName[] nameRegistrationAuthorities; - - public static SemanticsInformation GetInstance( - object obj) - { - if (obj == null || obj is SemanticsInformation) - { - return (SemanticsInformation) obj; - } - - if (obj is Asn1Sequence) - { - return new SemanticsInformation(Asn1Sequence.GetInstance(obj)); - } - - throw new ArgumentException("unknown object in GetInstance: " + Platform.GetTypeName(obj), "obj"); - } - - public SemanticsInformation( - Asn1Sequence seq) - { - if (seq.Count < 1) - { - throw new ArgumentException("no objects in SemanticsInformation"); - } - - IEnumerator e = seq.GetEnumerator(); - e.MoveNext(); - object obj = e.Current; - if (obj is DerObjectIdentifier) - { - semanticsIdentifier = DerObjectIdentifier.GetInstance(obj); - if (e.MoveNext()) - { - obj = e.Current; - } - else - { - obj = null; - } - } - - if (obj != null) - { - Asn1Sequence generalNameSeq = Asn1Sequence.GetInstance(obj ); - nameRegistrationAuthorities = new GeneralName[generalNameSeq.Count]; - for (int i= 0; i < generalNameSeq.Count; i++) - { - nameRegistrationAuthorities[i] = GeneralName.GetInstance(generalNameSeq[i]); - } - } - } - - public SemanticsInformation( - DerObjectIdentifier semanticsIdentifier, - GeneralName[] generalNames) - { - this.semanticsIdentifier = semanticsIdentifier; - this.nameRegistrationAuthorities = generalNames; - } - - public SemanticsInformation( - DerObjectIdentifier semanticsIdentifier) - { - this.semanticsIdentifier = semanticsIdentifier; - } - - public SemanticsInformation( - GeneralName[] generalNames) - { - this.nameRegistrationAuthorities = generalNames; - } - - public DerObjectIdentifier SemanticsIdentifier { get { return semanticsIdentifier; } } - - public GeneralName[] GetNameRegistrationAuthorities() - { - return nameRegistrationAuthorities; - } - - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector seq = new Asn1EncodableVector(); - - if (this.semanticsIdentifier != null) - { - seq.Add(semanticsIdentifier); - } - - if (this.nameRegistrationAuthorities != null) - { - seq.Add(new DerSequence(nameRegistrationAuthorities)); - } - - return new DerSequence(seq); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/qualified/TypeOfBiometricData.cs b/bc-sharp-crypto/src/asn1/x509/qualified/TypeOfBiometricData.cs deleted file mode 100644 index 17b7841..0000000 --- a/bc-sharp-crypto/src/asn1/x509/qualified/TypeOfBiometricData.cs +++ /dev/null @@ -1,91 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509.Qualified -{ - /** - * The TypeOfBiometricData object. - * 
-    * TypeOfBiometricData ::= CHOICE {
-    *   predefinedBiometricType   PredefinedBiometricType,
-    *   biometricDataOid          OBJECT IDENTIFIER }
-    *
-    * PredefinedBiometricType ::= INTEGER {
-    *   picture(0),handwritten-signature(1)}
-    *   (picture|handwritten-signature)
-    *
- */ - public class TypeOfBiometricData - : Asn1Encodable, IAsn1Choice - { - public const int Picture = 0; - public const int HandwrittenSignature = 1; - - internal Asn1Encodable obj; - - public static TypeOfBiometricData GetInstance( - object obj) - { - if (obj == null || obj is TypeOfBiometricData) - { - return (TypeOfBiometricData) obj; - } - - if (obj is DerInteger) - { - DerInteger predefinedBiometricTypeObj = DerInteger.GetInstance(obj); - int predefinedBiometricType = predefinedBiometricTypeObj.Value.IntValue; - - return new TypeOfBiometricData(predefinedBiometricType); - } - - if (obj is DerObjectIdentifier) - { - DerObjectIdentifier BiometricDataOid = DerObjectIdentifier.GetInstance(obj); - return new TypeOfBiometricData(BiometricDataOid); - } - - throw new ArgumentException("unknown object in GetInstance: " + Platform.GetTypeName(obj), "obj"); - } - - public TypeOfBiometricData( - int predefinedBiometricType) - { - if (predefinedBiometricType == Picture || predefinedBiometricType == HandwrittenSignature) - { - obj = new DerInteger(predefinedBiometricType); - } - else - { - throw new ArgumentException("unknow PredefinedBiometricType : " + predefinedBiometricType); - } - } - - public TypeOfBiometricData( - DerObjectIdentifier biometricDataOid) - { - obj = biometricDataOid; - } - - public bool IsPredefined - { - get { return obj is DerInteger; } - } - - public int PredefinedBiometricType - { - get { return ((DerInteger) obj).Value.IntValue; } - } - - public DerObjectIdentifier BiometricDataOid - { - get { return (DerObjectIdentifier) obj; } - } - - public override Asn1Object ToAsn1Object() - { - return obj.ToAsn1Object(); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/sigi/NameOrPseudonym.cs b/bc-sharp-crypto/src/asn1/x509/sigi/NameOrPseudonym.cs deleted file mode 100644 index 2402e38..0000000 --- a/bc-sharp-crypto/src/asn1/x509/sigi/NameOrPseudonym.cs +++ /dev/null @@ -1,178 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1.X500; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509.SigI -{ - /** - * Structure for a name or pseudonym. - * - * 
-	*       NameOrPseudonym ::= CHOICE {
-	*     	   surAndGivenName SEQUENCE {
-	*     	     surName DirectoryString,
-	*     	     givenName SEQUENCE OF DirectoryString 
-	*         },
-	*     	   pseudonym DirectoryString 
-	*       }
-	*
- * - * @see org.bouncycastle.asn1.x509.sigi.PersonalData - * - */ - public class NameOrPseudonym - : Asn1Encodable, IAsn1Choice - { - private readonly DirectoryString pseudonym; - private readonly DirectoryString surname; - private readonly Asn1Sequence givenName; - - public static NameOrPseudonym GetInstance( - object obj) - { - if (obj == null || obj is NameOrPseudonym) - { - return (NameOrPseudonym)obj; - } - - if (obj is IAsn1String) - { - return new NameOrPseudonym(DirectoryString.GetInstance(obj)); - } - - if (obj is Asn1Sequence) - { - return new NameOrPseudonym((Asn1Sequence) obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - /** - * Constructor from DERString. - *

- * The sequence is of type NameOrPseudonym: - *

- * 

-		*       NameOrPseudonym ::= CHOICE {
-		*     	   surAndGivenName SEQUENCE {
-		*     	     surName DirectoryString,
-		*     	     givenName SEQUENCE OF DirectoryString
-		*         },
-		*     	   pseudonym DirectoryString
-		*       }
-		*
- * @param pseudonym pseudonym value to use. - */ - public NameOrPseudonym( - DirectoryString pseudonym) - { - this.pseudonym = pseudonym; - } - - /** - * Constructor from Asn1Sequence. - *

- * The sequence is of type NameOrPseudonym: - *

- * 

-		*       NameOrPseudonym ::= CHOICE {
-		*     	   surAndGivenName SEQUENCE {
-		*     	     surName DirectoryString,
-		*     	     givenName SEQUENCE OF DirectoryString
-		*         },
-		*     	   pseudonym DirectoryString
-		*       }
-		*
- * - * @param seq The ASN.1 sequence. - */ - private NameOrPseudonym( - Asn1Sequence seq) - { - if (seq.Count != 2) - throw new ArgumentException("Bad sequence size: " + seq.Count); - - if (!(seq[0] is IAsn1String)) - throw new ArgumentException("Bad object encountered: " + Platform.GetTypeName(seq[0])); - - surname = DirectoryString.GetInstance(seq[0]); - givenName = Asn1Sequence.GetInstance(seq[1]); - } - - /** - * Constructor from a given details. - * - * @param pseudonym The pseudonym. - */ - public NameOrPseudonym( - string pseudonym) - : this(new DirectoryString(pseudonym)) - { - } - - /** - * Constructor from a given details. - * - * @param surname The surname. - * @param givenName A sequence of directory strings making up the givenName - */ - public NameOrPseudonym( - DirectoryString surname, - Asn1Sequence givenName) - { - this.surname = surname; - this.givenName = givenName; - } - - public DirectoryString Pseudonym - { - get { return pseudonym; } - } - - public DirectoryString Surname - { - get { return surname; } - } - - public DirectoryString[] GetGivenName() - { - DirectoryString[] items = new DirectoryString[givenName.Count]; - int count = 0; - foreach (object o in givenName) - { - items[count++] = DirectoryString.GetInstance(o); - } - return items; - } - - /** - * Produce an object suitable for an Asn1OutputStream. - *

- * Returns: - *

- * 

-		*       NameOrPseudonym ::= CHOICE {
-		*     	   surAndGivenName SEQUENCE {
-		*     	     surName DirectoryString,
-		*     	     givenName SEQUENCE OF DirectoryString
-		*         },
-		*     	   pseudonym DirectoryString
-		*       }
-		*
- * - * @return an Asn1Object - */ - public override Asn1Object ToAsn1Object() - { - if (pseudonym != null) - { - return pseudonym.ToAsn1Object(); - } - - return new DerSequence(surname, givenName); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/sigi/PersonalData.cs b/bc-sharp-crypto/src/asn1/x509/sigi/PersonalData.cs deleted file mode 100644 index dba345c..0000000 --- a/bc-sharp-crypto/src/asn1/x509/sigi/PersonalData.cs +++ /dev/null @@ -1,211 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1.X500; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X509.SigI -{ - /** - * Contains personal data for the otherName field in the subjectAltNames - * extension. - *

- * 

-	*     PersonalData ::= SEQUENCE {
-	*       nameOrPseudonym NameOrPseudonym,
-	*       nameDistinguisher [0] INTEGER OPTIONAL,
-	*       dateOfBirth [1] GeneralizedTime OPTIONAL,
-	*       placeOfBirth [2] DirectoryString OPTIONAL,
-	*       gender [3] PrintableString OPTIONAL,
-	*       postalAddress [4] DirectoryString OPTIONAL
-	*       }
-	*
- * - * @see org.bouncycastle.asn1.x509.sigi.NameOrPseudonym - * @see org.bouncycastle.asn1.x509.sigi.SigIObjectIdentifiers - */ - public class PersonalData - : Asn1Encodable - { - private readonly NameOrPseudonym nameOrPseudonym; - private readonly BigInteger nameDistinguisher; - private readonly DerGeneralizedTime dateOfBirth; - private readonly DirectoryString placeOfBirth; - private readonly string gender; - private readonly DirectoryString postalAddress; - - public static PersonalData GetInstance( - object obj) - { - if (obj == null || obj is PersonalData) - { - return (PersonalData) obj; - } - - if (obj is Asn1Sequence) - { - return new PersonalData((Asn1Sequence) obj); - } - - throw new ArgumentException("unknown object in factory: " + Platform.GetTypeName(obj), "obj"); - } - - /** - * Constructor from Asn1Sequence. - *

- * The sequence is of type NameOrPseudonym: - *

- * 

-		*     PersonalData ::= SEQUENCE {
-		*       nameOrPseudonym NameOrPseudonym,
-		*       nameDistinguisher [0] INTEGER OPTIONAL,
-		*       dateOfBirth [1] GeneralizedTime OPTIONAL,
-		*       placeOfBirth [2] DirectoryString OPTIONAL,
-		*       gender [3] PrintableString OPTIONAL,
-		*       postalAddress [4] DirectoryString OPTIONAL
-		*       }
-		*
- * - * @param seq The ASN.1 sequence. - */ - private PersonalData( - Asn1Sequence seq) - { - if (seq.Count < 1) - throw new ArgumentException("Bad sequence size: " + seq.Count); - - IEnumerator e = seq.GetEnumerator(); - e.MoveNext(); - - nameOrPseudonym = NameOrPseudonym.GetInstance(e.Current); - - while (e.MoveNext()) - { - Asn1TaggedObject o = Asn1TaggedObject.GetInstance(e.Current); - int tag = o.TagNo; - switch (tag) - { - case 0: - nameDistinguisher = DerInteger.GetInstance(o, false).Value; - break; - case 1: - dateOfBirth = DerGeneralizedTime.GetInstance(o, false); - break; - case 2: - placeOfBirth = DirectoryString.GetInstance(o, true); - break; - case 3: - gender = DerPrintableString.GetInstance(o, false).GetString(); - break; - case 4: - postalAddress = DirectoryString.GetInstance(o, true); - break; - default: - throw new ArgumentException("Bad tag number: " + o.TagNo); - } - } - } - - /** - * Constructor from a given details. - * - * @param nameOrPseudonym Name or pseudonym. - * @param nameDistinguisher Name distinguisher. - * @param dateOfBirth Date of birth. - * @param placeOfBirth Place of birth. - * @param gender Gender. - * @param postalAddress Postal Address. - */ - public PersonalData( - NameOrPseudonym nameOrPseudonym, - BigInteger nameDistinguisher, - DerGeneralizedTime dateOfBirth, - DirectoryString placeOfBirth, - string gender, - DirectoryString postalAddress) - { - this.nameOrPseudonym = nameOrPseudonym; - this.dateOfBirth = dateOfBirth; - this.gender = gender; - this.nameDistinguisher = nameDistinguisher; - this.postalAddress = postalAddress; - this.placeOfBirth = placeOfBirth; - } - - public NameOrPseudonym NameOrPseudonym - { - get { return nameOrPseudonym; } - } - - public BigInteger NameDistinguisher - { - get { return nameDistinguisher; } - } - - public DerGeneralizedTime DateOfBirth - { - get { return dateOfBirth; } - } - - public DirectoryString PlaceOfBirth - { - get { return placeOfBirth; } - } - - public string Gender - { - get { return gender; } - } - - public DirectoryString PostalAddress - { - get { return postalAddress; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - *

- * Returns: - *

- * 

-		*     PersonalData ::= SEQUENCE {
-		*       nameOrPseudonym NameOrPseudonym,
-		*       nameDistinguisher [0] INTEGER OPTIONAL,
-		*       dateOfBirth [1] GeneralizedTime OPTIONAL,
-		*       placeOfBirth [2] DirectoryString OPTIONAL,
-		*       gender [3] PrintableString OPTIONAL,
-		*       postalAddress [4] DirectoryString OPTIONAL
-		*       }
-		*
- * - * @return an Asn1Object - */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector vec = new Asn1EncodableVector(); - vec.Add(nameOrPseudonym); - if (nameDistinguisher != null) - { - vec.Add(new DerTaggedObject(false, 0, new DerInteger(nameDistinguisher))); - } - if (dateOfBirth != null) - { - vec.Add(new DerTaggedObject(false, 1, dateOfBirth)); - } - if (placeOfBirth != null) - { - vec.Add(new DerTaggedObject(true, 2, placeOfBirth)); - } - if (gender != null) - { - vec.Add(new DerTaggedObject(false, 3, new DerPrintableString(gender, true))); - } - if (postalAddress != null) - { - vec.Add(new DerTaggedObject(true, 4, postalAddress)); - } - return new DerSequence(vec); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x509/sigi/SigIObjectIdentifiers.cs b/bc-sharp-crypto/src/asn1/x509/sigi/SigIObjectIdentifiers.cs deleted file mode 100644 index 682311a..0000000 --- a/bc-sharp-crypto/src/asn1/x509/sigi/SigIObjectIdentifiers.cs +++ /dev/null @@ -1,49 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.X509.SigI -{ - /** - * Object Identifiers of SigI specifciation (German Signature Law - * Interoperability specification). - */ - public sealed class SigIObjectIdentifiers - { - private SigIObjectIdentifiers() - { - } - - public readonly static DerObjectIdentifier IdSigI = new DerObjectIdentifier("1.3.36.8"); - - /** - * Key purpose IDs for German SigI (Signature Interoperability - * Specification) - */ - public readonly static DerObjectIdentifier IdSigIKP = new DerObjectIdentifier(IdSigI + ".2"); - - /** - * Certificate policy IDs for German SigI (Signature Interoperability - * Specification) - */ - public readonly static DerObjectIdentifier IdSigICP = new DerObjectIdentifier(IdSigI + ".1"); - - /** - * Other Name IDs for German SigI (Signature Interoperability Specification) - */ - public readonly static DerObjectIdentifier IdSigION = new DerObjectIdentifier(IdSigI + ".4"); - - /** - * To be used for for the generation of directory service certificates. - */ - public static readonly DerObjectIdentifier IdSigIKPDirectoryService = new DerObjectIdentifier(IdSigIKP + ".1"); - - /** - * ID for PersonalData - */ - public static readonly DerObjectIdentifier IdSigIONPersonalData = new DerObjectIdentifier(IdSigION + ".1"); - - /** - * Certificate is conform to german signature law. - */ - public static readonly DerObjectIdentifier IdSigICPSigConform = new DerObjectIdentifier(IdSigICP + ".1"); - } -} diff --git a/bc-sharp-crypto/src/asn1/x9/DHDomainParameters.cs b/bc-sharp-crypto/src/asn1/x9/DHDomainParameters.cs deleted file mode 100644 index b8c1ac0..0000000 --- a/bc-sharp-crypto/src/asn1/x9/DHDomainParameters.cs +++ /dev/null @@ -1,118 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X9 -{ - public class DHDomainParameters - : Asn1Encodable - { - private readonly DerInteger p, g, q, j; - private readonly DHValidationParms validationParms; - - public static DHDomainParameters GetInstance(Asn1TaggedObject obj, bool isExplicit) - { - return GetInstance(Asn1Sequence.GetInstance(obj, isExplicit)); - } - - public static DHDomainParameters GetInstance(object obj) - { - if (obj == null || obj is DHDomainParameters) - return (DHDomainParameters)obj; - - if (obj is Asn1Sequence) - return new DHDomainParameters((Asn1Sequence)obj); - - throw new ArgumentException("Invalid DHDomainParameters: " + Platform.GetTypeName(obj), "obj"); - } - - public DHDomainParameters(DerInteger p, DerInteger g, DerInteger q, DerInteger j, - DHValidationParms validationParms) - { - if (p == null) - throw new ArgumentNullException("p"); - if (g == null) - throw new ArgumentNullException("g"); - if (q == null) - throw new ArgumentNullException("q"); - - this.p = p; - this.g = g; - this.q = q; - this.j = j; - this.validationParms = validationParms; - } - - private DHDomainParameters(Asn1Sequence seq) - { - if (seq.Count < 3 || seq.Count > 5) - throw new ArgumentException("Bad sequence size: " + seq.Count, "seq"); - - IEnumerator e = seq.GetEnumerator(); - this.p = DerInteger.GetInstance(GetNext(e)); - this.g = DerInteger.GetInstance(GetNext(e)); - this.q = DerInteger.GetInstance(GetNext(e)); - - Asn1Encodable next = GetNext(e); - - if (next != null && next is DerInteger) - { - this.j = DerInteger.GetInstance(next); - next = GetNext(e); - } - - if (next != null) - { - this.validationParms = DHValidationParms.GetInstance(next.ToAsn1Object()); - } - } - - private static Asn1Encodable GetNext(IEnumerator e) - { - return e.MoveNext() ? (Asn1Encodable)e.Current : null; - } - - public DerInteger P - { - get { return this.p; } - } - - public DerInteger G - { - get { return this.g; } - } - - public DerInteger Q - { - get { return this.q; } - } - - public DerInteger J - { - get { return this.j; } - } - - public DHValidationParms ValidationParms - { - get { return this.validationParms; } - } - - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(p, g, q); - - if (this.j != null) - { - v.Add(this.j); - } - - if (this.validationParms != null) - { - v.Add(this.validationParms); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x9/DHPublicKey.cs b/bc-sharp-crypto/src/asn1/x9/DHPublicKey.cs deleted file mode 100644 index 74a14a2..0000000 --- a/bc-sharp-crypto/src/asn1/x9/DHPublicKey.cs +++ /dev/null @@ -1,46 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X9 -{ - public class DHPublicKey - : Asn1Encodable - { - private readonly DerInteger y; - - public static DHPublicKey GetInstance(Asn1TaggedObject obj, bool isExplicit) - { - return GetInstance(DerInteger.GetInstance(obj, isExplicit)); - } - - public static DHPublicKey GetInstance(object obj) - { - if (obj == null || obj is DHPublicKey) - return (DHPublicKey)obj; - - if (obj is DerInteger) - return new DHPublicKey((DerInteger)obj); - - throw new ArgumentException("Invalid DHPublicKey: " + Platform.GetTypeName(obj), "obj"); - } - - public DHPublicKey(DerInteger y) - { - if (y == null) - throw new ArgumentNullException("y"); - - this.y = y; - } - - public DerInteger Y - { - get { return this.y; } - } - - public override Asn1Object ToAsn1Object() - { - return this.y; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x9/DHValidationParms.cs b/bc-sharp-crypto/src/asn1/x9/DHValidationParms.cs deleted file mode 100644 index c63c502..0000000 --- a/bc-sharp-crypto/src/asn1/x9/DHValidationParms.cs +++ /dev/null @@ -1,64 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X9 -{ - public class DHValidationParms - : Asn1Encodable - { - private readonly DerBitString seed; - private readonly DerInteger pgenCounter; - - public static DHValidationParms GetInstance(Asn1TaggedObject obj, bool isExplicit) - { - return GetInstance(Asn1Sequence.GetInstance(obj, isExplicit)); - } - - public static DHValidationParms GetInstance(object obj) - { - if (obj == null || obj is DHDomainParameters) - return (DHValidationParms)obj; - - if (obj is Asn1Sequence) - return new DHValidationParms((Asn1Sequence)obj); - - throw new ArgumentException("Invalid DHValidationParms: " + Platform.GetTypeName(obj), "obj"); - } - - public DHValidationParms(DerBitString seed, DerInteger pgenCounter) - { - if (seed == null) - throw new ArgumentNullException("seed"); - if (pgenCounter == null) - throw new ArgumentNullException("pgenCounter"); - - this.seed = seed; - this.pgenCounter = pgenCounter; - } - - private DHValidationParms(Asn1Sequence seq) - { - if (seq.Count != 2) - throw new ArgumentException("Bad sequence size: " + seq.Count, "seq"); - - this.seed = DerBitString.GetInstance(seq[0]); - this.pgenCounter = DerInteger.GetInstance(seq[1]); - } - - public DerBitString Seed - { - get { return this.seed; } - } - - public DerInteger PgenCounter - { - get { return this.pgenCounter; } - } - - public override Asn1Object ToAsn1Object() - { - return new DerSequence(seed, pgenCounter); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x9/ECNamedCurveTable.cs b/bc-sharp-crypto/src/asn1/x9/ECNamedCurveTable.cs deleted file mode 100644 index 317ef17..0000000 --- a/bc-sharp-crypto/src/asn1/x9/ECNamedCurveTable.cs +++ /dev/null @@ -1,162 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1.Anssi; -using Org.BouncyCastle.Asn1.GM; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Sec; -using Org.BouncyCastle.Asn1.TeleTrust; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Asn1.X9 -{ - /** - * A general class that reads all X9.62 style EC curve tables. - */ - public class ECNamedCurveTable - { - /** - * return a X9ECParameters object representing the passed in named - * curve. The routine returns null if the curve is not present. - * - * @param name the name of the curve requested - * @return an X9ECParameters object or null if the curve is not available. - */ - public static X9ECParameters GetByName(string name) - { - X9ECParameters ecP = X962NamedCurves.GetByName(name); - if (ecP == null) - { - ecP = SecNamedCurves.GetByName(name); - } - if (ecP == null) - { - ecP = NistNamedCurves.GetByName(name); - } - if (ecP == null) - { - ecP = TeleTrusTNamedCurves.GetByName(name); - } - if (ecP == null) - { - ecP = AnssiNamedCurves.GetByName(name); - } - if (ecP == null) - { - ecP = GMNamedCurves.GetByName(name); - } - return ecP; - } - - public static string GetName(DerObjectIdentifier oid) - { - string name = X962NamedCurves.GetName(oid); - if (name == null) - { - name = SecNamedCurves.GetName(oid); - } - if (name == null) - { - name = NistNamedCurves.GetName(oid); - } - if (name == null) - { - name = TeleTrusTNamedCurves.GetName(oid); - } - if (name == null) - { - name = AnssiNamedCurves.GetName(oid); - } - if (name == null) - { - name = GMNamedCurves.GetName(oid); - } - return name; - } - - /** - * return the object identifier signified by the passed in name. Null - * if there is no object identifier associated with name. - * - * @return the object identifier associated with name, if present. - */ - public static DerObjectIdentifier GetOid(string name) - { - DerObjectIdentifier oid = X962NamedCurves.GetOid(name); - if (oid == null) - { - oid = SecNamedCurves.GetOid(name); - } - if (oid == null) - { - oid = NistNamedCurves.GetOid(name); - } - if (oid == null) - { - oid = TeleTrusTNamedCurves.GetOid(name); - } - if (oid == null) - { - oid = AnssiNamedCurves.GetOid(name); - } - if (oid == null) - { - oid = GMNamedCurves.GetOid(name); - } - return oid; - } - - /** - * return a X9ECParameters object representing the passed in named - * curve. - * - * @param oid the object id of the curve requested - * @return an X9ECParameters object or null if the curve is not available. - */ - public static X9ECParameters GetByOid(DerObjectIdentifier oid) - { - X9ECParameters ecP = X962NamedCurves.GetByOid(oid); - if (ecP == null) - { - ecP = SecNamedCurves.GetByOid(oid); - } - - // NOTE: All the NIST curves are currently from SEC, so no point in redundant OID lookup - - if (ecP == null) - { - ecP = TeleTrusTNamedCurves.GetByOid(oid); - } - if (ecP == null) - { - ecP = AnssiNamedCurves.GetByOid(oid); - } - if (ecP == null) - { - ecP = GMNamedCurves.GetByOid(oid); - } - return ecP; - } - - /** - * return an enumeration of the names of the available curves. - * - * @return an enumeration of the names of the available curves. - */ - public static IEnumerable Names - { - get - { - IList v = Platform.CreateArrayList(); - CollectionUtilities.AddRange(v, X962NamedCurves.Names); - CollectionUtilities.AddRange(v, SecNamedCurves.Names); - CollectionUtilities.AddRange(v, NistNamedCurves.Names); - CollectionUtilities.AddRange(v, TeleTrusTNamedCurves.Names); - CollectionUtilities.AddRange(v, AnssiNamedCurves.Names); - CollectionUtilities.AddRange(v, GMNamedCurves.Names); - return v; - } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x9/KeySpecificInfo.cs b/bc-sharp-crypto/src/asn1/x9/KeySpecificInfo.cs deleted file mode 100644 index 4629864..0000000 --- a/bc-sharp-crypto/src/asn1/x9/KeySpecificInfo.cs +++ /dev/null @@ -1,58 +0,0 @@ -using System.Collections; - -namespace Org.BouncyCastle.Asn1.X9 -{ - /** - * ASN.1 def for Diffie-Hellman key exchange KeySpecificInfo structure. See - * RFC 2631, or X9.42, for further details. - */ - public class KeySpecificInfo - : Asn1Encodable - { - private DerObjectIdentifier algorithm; - private Asn1OctetString counter; - - public KeySpecificInfo( - DerObjectIdentifier algorithm, - Asn1OctetString counter) - { - this.algorithm = algorithm; - this.counter = counter; - } - - public KeySpecificInfo( - Asn1Sequence seq) - { - IEnumerator e = seq.GetEnumerator(); - - e.MoveNext(); - algorithm = (DerObjectIdentifier)e.Current; - e.MoveNext(); - counter = (Asn1OctetString)e.Current; - } - - public DerObjectIdentifier Algorithm - { - get { return algorithm; } - } - - public Asn1OctetString Counter - { - get { return counter; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         *  KeySpecificInfo ::= Sequence {
-         *      algorithm OBJECT IDENTIFIER,
-         *      counter OCTET STRING SIZE (4..4)
-         *  }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(algorithm, counter); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x9/OtherInfo.cs b/bc-sharp-crypto/src/asn1/x9/OtherInfo.cs deleted file mode 100644 index 21863bd..0000000 --- a/bc-sharp-crypto/src/asn1/x9/OtherInfo.cs +++ /dev/null @@ -1,88 +0,0 @@ -using System.Collections; - -namespace Org.BouncyCastle.Asn1.X9 -{ - /** - * ANS.1 def for Diffie-Hellman key exchange OtherInfo structure. See - * RFC 2631, or X9.42, for further details. - */ - public class OtherInfo - : Asn1Encodable - { - private KeySpecificInfo keyInfo; - private Asn1OctetString partyAInfo; - private Asn1OctetString suppPubInfo; - - public OtherInfo( - KeySpecificInfo keyInfo, - Asn1OctetString partyAInfo, - Asn1OctetString suppPubInfo) - { - this.keyInfo = keyInfo; - this.partyAInfo = partyAInfo; - this.suppPubInfo = suppPubInfo; - } - - public OtherInfo( - Asn1Sequence seq) - { - IEnumerator e = seq.GetEnumerator(); - - e.MoveNext(); - keyInfo = new KeySpecificInfo((Asn1Sequence) e.Current); - - while (e.MoveNext()) - { - DerTaggedObject o = (DerTaggedObject) e.Current; - - if (o.TagNo == 0) - { - partyAInfo = (Asn1OctetString) o.GetObject(); - } - else if ((int) o.TagNo == 2) - { - suppPubInfo = (Asn1OctetString) o.GetObject(); - } - } - } - - public KeySpecificInfo KeyInfo - { - get { return keyInfo; } - } - - public Asn1OctetString PartyAInfo - { - get { return partyAInfo; } - } - - public Asn1OctetString SuppPubInfo - { - get { return suppPubInfo; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         *  OtherInfo ::= Sequence {
-         *      keyInfo KeySpecificInfo,
-         *      partyAInfo [0] OCTET STRING OPTIONAL,
-         *      suppPubInfo [2] OCTET STRING
-         *  }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(keyInfo); - - if (partyAInfo != null) - { - v.Add(new DerTaggedObject(0, partyAInfo)); - } - - v.Add(new DerTaggedObject(2, suppPubInfo)); - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x9/X962NamedCurves.cs b/bc-sharp-crypto/src/asn1/x9/X962NamedCurves.cs deleted file mode 100644 index 14f7f81..0000000 --- a/bc-sharp-crypto/src/asn1/x9/X962NamedCurves.cs +++ /dev/null @@ -1,751 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Asn1.X9 -{ - /** - * table of the current named curves defined in X.962 EC-DSA. - */ - public sealed class X962NamedCurves - { - private X962NamedCurves() - { - } - - internal class Prime192v1Holder - : X9ECParametersHolder - { - private Prime192v1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Prime192v1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("ffffffffffffffffffffffff99def836146bc9b1b4d22831", 16); - BigInteger h = BigInteger.One; - - ECCurve cFp192v1 = new FpCurve( - new BigInteger("6277101735386680763835789423207666416083908700390324961279"), - new BigInteger("fffffffffffffffffffffffffffffffefffffffffffffffc", 16), - new BigInteger("64210519e59c80e70fa7e9ab72243049feb8deecc146b9b1", 16), - n, h); - - return new X9ECParameters( - cFp192v1, - new X9ECPoint(cFp192v1, - Hex.Decode("03188da80eb03090f67cbf20eb43a18800f4ff0afd82ff1012")), - n, h, - Hex.Decode("3045AE6FC8422f64ED579528D38120EAE12196D5")); - } - } - - internal class Prime192v2Holder - : X9ECParametersHolder - { - private Prime192v2Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Prime192v2Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("fffffffffffffffffffffffe5fb1a724dc80418648d8dd31", 16); - BigInteger h = BigInteger.One; - - ECCurve cFp192v2 = new FpCurve( - new BigInteger("6277101735386680763835789423207666416083908700390324961279"), - new BigInteger("fffffffffffffffffffffffffffffffefffffffffffffffc", 16), - new BigInteger("cc22d6dfb95c6b25e49c0d6364a4e5980c393aa21668d953", 16), - n, h); - - return new X9ECParameters( - cFp192v2, - new X9ECPoint(cFp192v2, - Hex.Decode("03eea2bae7e1497842f2de7769cfe9c989c072ad696f48034a")), - n, h, - Hex.Decode("31a92ee2029fd10d901b113e990710f0d21ac6b6")); - } - } - - internal class Prime192v3Holder - : X9ECParametersHolder - { - private Prime192v3Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Prime192v3Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("ffffffffffffffffffffffff7a62d031c83f4294f640ec13", 16); - BigInteger h = BigInteger.One; - - ECCurve cFp192v3 = new FpCurve( - new BigInteger("6277101735386680763835789423207666416083908700390324961279"), - new BigInteger("fffffffffffffffffffffffffffffffefffffffffffffffc", 16), - new BigInteger("22123dc2395a05caa7423daeccc94760a7d462256bd56916", 16), - n, h); - - return new X9ECParameters( - cFp192v3, - new X9ECPoint(cFp192v3, - Hex.Decode("027d29778100c65a1da1783716588dce2b8b4aee8e228f1896")), - n, h, - Hex.Decode("c469684435deb378c4b65ca9591e2a5763059a2e")); - } - } - - internal class Prime239v1Holder - : X9ECParametersHolder - { - private Prime239v1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Prime239v1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("7fffffffffffffffffffffff7fffff9e5e9a9f5d9071fbd1522688909d0b", 16); - BigInteger h = BigInteger.One; - - ECCurve cFp239v1 = new FpCurve( - new BigInteger("883423532389192164791648750360308885314476597252960362792450860609699839"), - new BigInteger("7fffffffffffffffffffffff7fffffffffff8000000000007ffffffffffc", 16), - new BigInteger("6b016c3bdcf18941d0d654921475ca71a9db2fb27d1d37796185c2942c0a", 16), - n, h); - - return new X9ECParameters( - cFp239v1, - new X9ECPoint(cFp239v1, - Hex.Decode("020ffa963cdca8816ccc33b8642bedf905c3d358573d3f27fbbd3b3cb9aaaf")), - n, h, - Hex.Decode("e43bb460f0b80cc0c0b075798e948060f8321b7d")); - } - } - - internal class Prime239v2Holder - : X9ECParametersHolder - { - private Prime239v2Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Prime239v2Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("7fffffffffffffffffffffff800000cfa7e8594377d414c03821bc582063", 16); - BigInteger h = BigInteger.One; - - ECCurve cFp239v2 = new FpCurve( - new BigInteger("883423532389192164791648750360308885314476597252960362792450860609699839"), - new BigInteger("7fffffffffffffffffffffff7fffffffffff8000000000007ffffffffffc", 16), - new BigInteger("617fab6832576cbbfed50d99f0249c3fee58b94ba0038c7ae84c8c832f2c", 16), - n, h); - - return new X9ECParameters( - cFp239v2, - new X9ECPoint(cFp239v2, - Hex.Decode("0238af09d98727705120c921bb5e9e26296a3cdcf2f35757a0eafd87b830e7")), - n, h, - Hex.Decode("e8b4011604095303ca3b8099982be09fcb9ae616")); - } - } - - internal class Prime239v3Holder - : X9ECParametersHolder - { - private Prime239v3Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Prime239v3Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("7fffffffffffffffffffffff7fffff975deb41b3a6057c3c432146526551", 16); - BigInteger h = BigInteger.One; - - ECCurve cFp239v3 = new FpCurve( - new BigInteger("883423532389192164791648750360308885314476597252960362792450860609699839"), - new BigInteger("7fffffffffffffffffffffff7fffffffffff8000000000007ffffffffffc", 16), - new BigInteger("255705fa2a306654b1f4cb03d6a750a30c250102d4988717d9ba15ab6d3e", 16), - n, h); - - return new X9ECParameters( - cFp239v3, - new X9ECPoint(cFp239v3, - Hex.Decode("036768ae8e18bb92cfcf005c949aa2c6d94853d0e660bbf854b1c9505fe95a")), - n, h, - Hex.Decode("7d7374168ffe3471b60a857686a19475d3bfa2ff")); - } - } - - internal class Prime256v1Holder - : X9ECParametersHolder - { - private Prime256v1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new Prime256v1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551", 16); - BigInteger h = BigInteger.One; - - ECCurve cFp256v1 = new FpCurve( - new BigInteger("115792089210356248762697446949407573530086143415290314195533631308867097853951"), - new BigInteger("ffffffff00000001000000000000000000000000fffffffffffffffffffffffc", 16), - new BigInteger("5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b", 16), - n, h); - - return new X9ECParameters( - cFp256v1, - new X9ECPoint(cFp256v1, - Hex.Decode("036b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296")), - n, h, - Hex.Decode("c49d360886e704936a6678e1139d26b7819f7e90")); - } - } - - /* - * F2m Curves - */ - internal class C2pnb163v1Holder - : X9ECParametersHolder - { - private C2pnb163v1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new C2pnb163v1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("0400000000000000000001E60FC8821CC74DAEAFC1", 16); - BigInteger h = BigInteger.Two; - - ECCurve c2m163v1 = new F2mCurve( - 163, - 1, 2, 8, - new BigInteger("072546B5435234A422E0789675F432C89435DE5242", 16), - new BigInteger("00C9517D06D5240D3CFF38C74B20B6CD4D6F9DD4D9", 16), - n, h); - - return new X9ECParameters( - c2m163v1, - new X9ECPoint(c2m163v1, - Hex.Decode("0307AF69989546103D79329FCC3D74880F33BBE803CB")), - n, h, - Hex.Decode("D2C0FB15760860DEF1EEF4D696E6768756151754")); - } - } - - internal class C2pnb163v2Holder - : X9ECParametersHolder - { - private C2pnb163v2Holder() {} - - internal static readonly X9ECParametersHolder Instance = new C2pnb163v2Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("03FFFFFFFFFFFFFFFFFFFDF64DE1151ADBB78F10A7", 16); - BigInteger h = BigInteger.Two; - - ECCurve c2m163v2 = new F2mCurve( - 163, - 1, 2, 8, - new BigInteger("0108B39E77C4B108BED981ED0E890E117C511CF072", 16), - new BigInteger("0667ACEB38AF4E488C407433FFAE4F1C811638DF20", 16), - n, h); - - return new X9ECParameters( - c2m163v2, - new X9ECPoint(c2m163v2, - Hex.Decode("030024266E4EB5106D0A964D92C4860E2671DB9B6CC5")), - n, h, - null); - } - } - - internal class C2pnb163v3Holder - : X9ECParametersHolder - { - private C2pnb163v3Holder() {} - - internal static readonly X9ECParametersHolder Instance = new C2pnb163v3Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("03FFFFFFFFFFFFFFFFFFFE1AEE140F110AFF961309", 16); - BigInteger h = BigInteger.Two; - - ECCurve c2m163v3 = new F2mCurve( - 163, - 1, 2, 8, - new BigInteger("07A526C63D3E25A256A007699F5447E32AE456B50E", 16), - new BigInteger("03F7061798EB99E238FD6F1BF95B48FEEB4854252B", 16), - n, h); - - return new X9ECParameters( - c2m163v3, - new X9ECPoint(c2m163v3, Hex.Decode("0202F9F87B7C574D0BDECF8A22E6524775F98CDEBDCB")), - n, h, - null); - } - } - - internal class C2pnb176w1Holder - : X9ECParametersHolder - { - private C2pnb176w1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new C2pnb176w1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("010092537397ECA4F6145799D62B0A19CE06FE26AD", 16); - BigInteger h = BigInteger.ValueOf(0xFF6E); - - ECCurve c2m176w1 = new F2mCurve( - 176, - 1, 2, 43, - new BigInteger("00E4E6DB2995065C407D9D39B8D0967B96704BA8E9C90B", 16), - new BigInteger("005DDA470ABE6414DE8EC133AE28E9BBD7FCEC0AE0FFF2", 16), - n, h); - - return new X9ECParameters( - c2m176w1, - new X9ECPoint(c2m176w1, - Hex.Decode("038D16C2866798B600F9F08BB4A8E860F3298CE04A5798")), - n, h, - null); - } - } - - internal class C2tnb191v1Holder - : X9ECParametersHolder - { - private C2tnb191v1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new C2tnb191v1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("40000000000000000000000004A20E90C39067C893BBB9A5", 16); - BigInteger h = BigInteger.Two; - - ECCurve c2m191v1 = new F2mCurve( - 191, - 9, - new BigInteger("2866537B676752636A68F56554E12640276B649EF7526267", 16), - new BigInteger("2E45EF571F00786F67B0081B9495A3D95462F5DE0AA185EC", 16), - n, h); - - return new X9ECParameters( - c2m191v1, - new X9ECPoint(c2m191v1, - Hex.Decode("0236B3DAF8A23206F9C4F299D7B21A9C369137F2C84AE1AA0D")), - n, h, - Hex.Decode("4E13CA542744D696E67687561517552F279A8C84")); - } - } - - internal class C2tnb191v2Holder - : X9ECParametersHolder - { - private C2tnb191v2Holder() {} - - internal static readonly X9ECParametersHolder Instance = new C2tnb191v2Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("20000000000000000000000050508CB89F652824E06B8173", 16); - BigInteger h = BigInteger.ValueOf(4); - - ECCurve c2m191v2 = new F2mCurve( - 191, - 9, - new BigInteger("401028774D7777C7B7666D1366EA432071274F89FF01E718", 16), - new BigInteger("0620048D28BCBD03B6249C99182B7C8CD19700C362C46A01", 16), - n, h); - - return new X9ECParameters( - c2m191v2, - new X9ECPoint(c2m191v2, - Hex.Decode("023809B2B7CC1B28CC5A87926AAD83FD28789E81E2C9E3BF10")), - n, h, - null); - } - } - - internal class C2tnb191v3Holder - : X9ECParametersHolder - { - private C2tnb191v3Holder() {} - - internal static readonly X9ECParametersHolder Instance = new C2tnb191v3Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("155555555555555555555555610C0B196812BFB6288A3EA3", 16); - BigInteger h = BigInteger.ValueOf(6); - - ECCurve c2m191v3 = new F2mCurve( - 191, - 9, - new BigInteger("6C01074756099122221056911C77D77E77A777E7E7E77FCB", 16), - new BigInteger("71FE1AF926CF847989EFEF8DB459F66394D90F32AD3F15E8", 16), - n, h); - - return new X9ECParameters( - c2m191v3, - new X9ECPoint(c2m191v3, - Hex.Decode("03375D4CE24FDE434489DE8746E71786015009E66E38A926DD")), - n, h, - null); - } - } - - internal class C2pnb208w1Holder - : X9ECParametersHolder - { - private C2pnb208w1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new C2pnb208w1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("0101BAF95C9723C57B6C21DA2EFF2D5ED588BDD5717E212F9D", 16); - BigInteger h = BigInteger.ValueOf(0xFE48); - - ECCurve c2m208w1 = new F2mCurve( - 208, - 1, 2, 83, - new BigInteger("0", 16), - new BigInteger("00C8619ED45A62E6212E1160349E2BFA844439FAFC2A3FD1638F9E", 16), - n, h); - - return new X9ECParameters( - c2m208w1, - new X9ECPoint(c2m208w1, - Hex.Decode("0289FDFBE4ABE193DF9559ECF07AC0CE78554E2784EB8C1ED1A57A")), - n, h, - null); - } - } - - internal class C2tnb239v1Holder - : X9ECParametersHolder - { - private C2tnb239v1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new C2tnb239v1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("2000000000000000000000000000000F4D42FFE1492A4993F1CAD666E447", 16); - BigInteger h = BigInteger.ValueOf(4); - - ECCurve c2m239v1 = new F2mCurve( - 239, - 36, - new BigInteger("32010857077C5431123A46B808906756F543423E8D27877578125778AC76", 16), - new BigInteger("790408F2EEDAF392B012EDEFB3392F30F4327C0CA3F31FC383C422AA8C16", 16), - n, h); - - return new X9ECParameters( - c2m239v1, - new X9ECPoint(c2m239v1, - Hex.Decode("0257927098FA932E7C0A96D3FD5B706EF7E5F5C156E16B7E7C86038552E91D")), - n, h, - null); - } - } - - internal class C2tnb239v2Holder - : X9ECParametersHolder - { - private C2tnb239v2Holder() {} - - internal static readonly X9ECParametersHolder Instance = new C2tnb239v2Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("1555555555555555555555555555553C6F2885259C31E3FCDF154624522D", 16); - BigInteger h = BigInteger.ValueOf(6); - - ECCurve c2m239v2 = new F2mCurve( - 239, - 36, - new BigInteger("4230017757A767FAE42398569B746325D45313AF0766266479B75654E65F", 16), - new BigInteger("5037EA654196CFF0CD82B2C14A2FCF2E3FF8775285B545722F03EACDB74B", 16), - n, h); - - return new X9ECParameters( - c2m239v2, - new X9ECPoint(c2m239v2, - Hex.Decode("0228F9D04E900069C8DC47A08534FE76D2B900B7D7EF31F5709F200C4CA205")), - n, h, - null); - } - } - - internal class C2tnb239v3Holder - : X9ECParametersHolder - { - private C2tnb239v3Holder() {} - - internal static readonly X9ECParametersHolder Instance = new C2tnb239v3Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("0CCCCCCCCCCCCCCCCCCCCCCCCCCCCCAC4912D2D9DF903EF9888B8A0E4CFF", 16); - BigInteger h = BigInteger.ValueOf(10); - - ECCurve c2m239v3 = new F2mCurve( - 239, - 36, - new BigInteger("01238774666A67766D6676F778E676B66999176666E687666D8766C66A9F", 16), - new BigInteger("6A941977BA9F6A435199ACFC51067ED587F519C5ECB541B8E44111DE1D40", 16), - n, h); - - return new X9ECParameters( - c2m239v3, - new X9ECPoint(c2m239v3, - Hex.Decode("0370F6E9D04D289C4E89913CE3530BFDE903977D42B146D539BF1BDE4E9C92")), - n, h, - null); - } - } - - internal class C2pnb272w1Holder - : X9ECParametersHolder - { - private C2pnb272w1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new C2pnb272w1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("0100FAF51354E0E39E4892DF6E319C72C8161603FA45AA7B998A167B8F1E629521", 16); - BigInteger h = BigInteger.ValueOf(0xFF06); - - ECCurve c2m272w1 = new F2mCurve( - 272, - 1, 3, 56, - new BigInteger("0091A091F03B5FBA4AB2CCF49C4EDD220FB028712D42BE752B2C40094DBACDB586FB20", 16), - new BigInteger("7167EFC92BB2E3CE7C8AAAFF34E12A9C557003D7C73A6FAF003F99F6CC8482E540F7", 16), - n, h); - - return new X9ECParameters( - c2m272w1, - new X9ECPoint(c2m272w1, - Hex.Decode("026108BABB2CEEBCF787058A056CBE0CFE622D7723A289E08A07AE13EF0D10D171DD8D")), - n, h, - null); - } - } - - internal class C2pnb304w1Holder - : X9ECParametersHolder - { - private C2pnb304w1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new C2pnb304w1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("0101D556572AABAC800101D556572AABAC8001022D5C91DD173F8FB561DA6899164443051D", 16); - BigInteger h = BigInteger.ValueOf(0xFE2E); - - ECCurve c2m304w1 = new F2mCurve( - 304, - 1, 2, 11, - new BigInteger("00FD0D693149A118F651E6DCE6802085377E5F882D1B510B44160074C1288078365A0396C8E681", 16), - new BigInteger("00BDDB97E555A50A908E43B01C798EA5DAA6788F1EA2794EFCF57166B8C14039601E55827340BE", 16), - n, h); - - return new X9ECParameters( - c2m304w1, - new X9ECPoint(c2m304w1, - Hex.Decode("02197B07845E9BE2D96ADB0F5F3C7F2CFFBD7A3EB8B6FEC35C7FD67F26DDF6285A644F740A2614")), - n, h, - null); - } - } - - internal class C2tnb359v1Holder - : X9ECParametersHolder - { - private C2tnb359v1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new C2tnb359v1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("01AF286BCA1AF286BCA1AF286BCA1AF286BCA1AF286BC9FB8F6B85C556892C20A7EB964FE7719E74F490758D3B", 16); - BigInteger h = BigInteger.ValueOf(0x4C); - - ECCurve c2m359v1 = new F2mCurve( - 359, - 68, - new BigInteger("5667676A654B20754F356EA92017D946567C46675556F19556A04616B567D223A5E05656FB549016A96656A557", 16), - new BigInteger("2472E2D0197C49363F1FE7F5B6DB075D52B6947D135D8CA445805D39BC345626089687742B6329E70680231988", 16), - n, h); - - return new X9ECParameters( - c2m359v1, - new X9ECPoint(c2m359v1, - Hex.Decode("033C258EF3047767E7EDE0F1FDAA79DAEE3841366A132E163ACED4ED2401DF9C6BDCDE98E8E707C07A2239B1B097")), - n, h, - null); - } - } - - internal class C2pnb368w1Holder - : X9ECParametersHolder - { - private C2pnb368w1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new C2pnb368w1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("010090512DA9AF72B08349D98A5DD4C7B0532ECA51CE03E2D10F3B7AC579BD87E909AE40A6F131E9CFCE5BD967", 16); - BigInteger h = BigInteger.ValueOf(0xFF70); - - ECCurve c2m368w1 = new F2mCurve( - 368, - 1, 2, 85, - new BigInteger("00E0D2EE25095206F5E2A4F9ED229F1F256E79A0E2B455970D8D0D865BD94778C576D62F0AB7519CCD2A1A906AE30D", 16), - new BigInteger("00FC1217D4320A90452C760A58EDCD30C8DD069B3C34453837A34ED50CB54917E1C2112D84D164F444F8F74786046A", 16), - n, h); - - return new X9ECParameters( - c2m368w1, - new X9ECPoint(c2m368w1, - Hex.Decode("021085E2755381DCCCE3C1557AFA10C2F0C0C2825646C5B34A394CBCFA8BC16B22E7E789E927BE216F02E1FB136A5F")), - n, h, - null); - } - } - - internal class C2tnb431r1Holder - : X9ECParametersHolder - { - private C2tnb431r1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new C2tnb431r1Holder(); - - protected override X9ECParameters CreateParameters() - { - BigInteger n = new BigInteger("0340340340340340340340340340340340340340340340340340340323C313FAB50589703B5EC68D3587FEC60D161CC149C1AD4A91", 16); - BigInteger h = BigInteger.ValueOf(0x2760); - - ECCurve c2m431r1 = new F2mCurve( - 431, - 120, - new BigInteger("1A827EF00DD6FC0E234CAF046C6A5D8A85395B236CC4AD2CF32A0CADBDC9DDF620B0EB9906D0957F6C6FEACD615468DF104DE296CD8F", 16), - new BigInteger("10D9B4A3D9047D8B154359ABFB1B7F5485B04CEB868237DDC9DEDA982A679A5A919B626D4E50A8DD731B107A9962381FB5D807BF2618", 16), - n, h); - - return new X9ECParameters( - c2m431r1, - new X9ECPoint(c2m431r1, - Hex.Decode("02120FC05D3C67A99DE161D2F4092622FECA701BE4F50F4758714E8A87BBF2A658EF8C21E7C5EFE965361F6C2999C0C247B0DBD70CE6B7")), - n, h, - null); - } - } - - private static readonly IDictionary objIds = Platform.CreateHashtable(); - private static readonly IDictionary curves = Platform.CreateHashtable(); - private static readonly IDictionary names = Platform.CreateHashtable(); - - private static void DefineCurve( - string name, - DerObjectIdentifier oid, - X9ECParametersHolder holder) - { - objIds.Add(Platform.ToUpperInvariant(name), oid); - names.Add(oid, name); - curves.Add(oid, holder); - } - - static X962NamedCurves() - { - DefineCurve("prime192v1", X9ObjectIdentifiers.Prime192v1, Prime192v1Holder.Instance); - DefineCurve("prime192v2", X9ObjectIdentifiers.Prime192v2, Prime192v2Holder.Instance); - DefineCurve("prime192v3", X9ObjectIdentifiers.Prime192v3, Prime192v3Holder.Instance); - DefineCurve("prime239v1", X9ObjectIdentifiers.Prime239v1, Prime239v1Holder.Instance); - DefineCurve("prime239v2", X9ObjectIdentifiers.Prime239v2, Prime239v2Holder.Instance); - DefineCurve("prime239v3", X9ObjectIdentifiers.Prime239v3, Prime239v3Holder.Instance); - DefineCurve("prime256v1", X9ObjectIdentifiers.Prime256v1, Prime256v1Holder.Instance); - DefineCurve("c2pnb163v1", X9ObjectIdentifiers.C2Pnb163v1, C2pnb163v1Holder.Instance); - DefineCurve("c2pnb163v2", X9ObjectIdentifiers.C2Pnb163v2, C2pnb163v2Holder.Instance); - DefineCurve("c2pnb163v3", X9ObjectIdentifiers.C2Pnb163v3, C2pnb163v3Holder.Instance); - DefineCurve("c2pnb176w1", X9ObjectIdentifiers.C2Pnb176w1, C2pnb176w1Holder.Instance); - DefineCurve("c2tnb191v1", X9ObjectIdentifiers.C2Tnb191v1, C2tnb191v1Holder.Instance); - DefineCurve("c2tnb191v2", X9ObjectIdentifiers.C2Tnb191v2, C2tnb191v2Holder.Instance); - DefineCurve("c2tnb191v3", X9ObjectIdentifiers.C2Tnb191v3, C2tnb191v3Holder.Instance); - DefineCurve("c2pnb208w1", X9ObjectIdentifiers.C2Pnb208w1, C2pnb208w1Holder.Instance); - DefineCurve("c2tnb239v1", X9ObjectIdentifiers.C2Tnb239v1, C2tnb239v1Holder.Instance); - DefineCurve("c2tnb239v2", X9ObjectIdentifiers.C2Tnb239v2, C2tnb239v2Holder.Instance); - DefineCurve("c2tnb239v3", X9ObjectIdentifiers.C2Tnb239v3, C2tnb239v3Holder.Instance); - DefineCurve("c2pnb272w1", X9ObjectIdentifiers.C2Pnb272w1, C2pnb272w1Holder.Instance); - DefineCurve("c2pnb304w1", X9ObjectIdentifiers.C2Pnb304w1, C2pnb304w1Holder.Instance); - DefineCurve("c2tnb359v1", X9ObjectIdentifiers.C2Tnb359v1, C2tnb359v1Holder.Instance); - DefineCurve("c2pnb368w1", X9ObjectIdentifiers.C2Pnb368w1, C2pnb368w1Holder.Instance); - DefineCurve("c2tnb431r1", X9ObjectIdentifiers.C2Tnb431r1, C2tnb431r1Holder.Instance); - } - - public static X9ECParameters GetByName( - string name) - { - DerObjectIdentifier oid = GetOid(name); - return oid == null ? null : GetByOid(oid); - } - - /** - * return the X9ECParameters object for the named curve represented by - * the passed in object identifier. Null if the curve isn't present. - * - * @param oid an object identifier representing a named curve, if present. - */ - public static X9ECParameters GetByOid( - DerObjectIdentifier oid) - { - X9ECParametersHolder holder = (X9ECParametersHolder)curves[oid]; - return holder == null ? null : holder.Parameters; - } - - /** - * return the object identifier signified by the passed in name. Null - * if there is no object identifier associated with name. - * - * @return the object identifier associated with name, if present. - */ - public static DerObjectIdentifier GetOid( - string name) - { - return (DerObjectIdentifier)objIds[Platform.ToUpperInvariant(name)]; - } - - /** - * return the named curve name represented by the given object identifier. - */ - public static string GetName( - DerObjectIdentifier oid) - { - return (string)names[oid]; - } - - /** - * returns an enumeration containing the name strings for curves - * contained in this structure. - */ - public static IEnumerable Names - { - get { return new EnumerableProxy(names.Values); } - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x9/X962Parameters.cs b/bc-sharp-crypto/src/asn1/x9/X962Parameters.cs deleted file mode 100644 index 04a5c9c..0000000 --- a/bc-sharp-crypto/src/asn1/x9/X962Parameters.cs +++ /dev/null @@ -1,88 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; - -namespace Org.BouncyCastle.Asn1.X9 -{ - public class X962Parameters - : Asn1Encodable, IAsn1Choice - { - private readonly Asn1Object _params; - - public static X962Parameters GetInstance( - object obj) - { - if (obj == null || obj is X962Parameters) - { - return (X962Parameters)obj; - } - - if (obj is Asn1Object) - { - return new X962Parameters((Asn1Object)obj); - } - - if (obj is byte[]) - { - try - { - return new X962Parameters(Asn1Object.FromByteArray((byte[])obj)); - } - catch (Exception e) - { - throw new ArgumentException("unable to parse encoded data: " + e.Message, e); - } - } - - throw new ArgumentException("unknown object in getInstance()"); - } - - public X962Parameters( - X9ECParameters ecParameters) - { - this._params = ecParameters.ToAsn1Object(); - } - - public X962Parameters( - DerObjectIdentifier namedCurve) - { - this._params = namedCurve; - } - - public X962Parameters( - Asn1Object obj) - { - this._params = obj; - } - - public bool IsNamedCurve - { - get { return (_params is DerObjectIdentifier); } - } - - public bool IsImplicitlyCA - { - get { return (_params is Asn1Null); } - } - - public Asn1Object Parameters - { - get { return _params; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         * Parameters ::= CHOICE {
-         *    ecParameters ECParameters,
-         *    namedCurve   CURVES.&id({CurveNames}),
-         *    implicitlyCA Null
-         * }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return _params; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x9/X9Curve.cs b/bc-sharp-crypto/src/asn1/x9/X9Curve.cs deleted file mode 100644 index f05a946..0000000 --- a/bc-sharp-crypto/src/asn1/x9/X9Curve.cs +++ /dev/null @@ -1,146 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X9 -{ - /** - * ASN.1 def for Elliptic-Curve Curve structure. See - * X9.62, for further details. - */ - public class X9Curve - : Asn1Encodable - { - private readonly ECCurve curve; - private readonly byte[] seed; - private readonly DerObjectIdentifier fieldIdentifier; - - public X9Curve( - ECCurve curve) - : this(curve, null) - { - } - - public X9Curve( - ECCurve curve, - byte[] seed) - { - if (curve == null) - throw new ArgumentNullException("curve"); - - this.curve = curve; - this.seed = Arrays.Clone(seed); - - if (ECAlgorithms.IsFpCurve(curve)) - { - this.fieldIdentifier = X9ObjectIdentifiers.PrimeField; - } - else if (ECAlgorithms.IsF2mCurve(curve)) - { - this.fieldIdentifier = X9ObjectIdentifiers.CharacteristicTwoField; - } - else - { - throw new ArgumentException("This type of ECCurve is not implemented"); - } - } - - public X9Curve( - X9FieldID fieldID, - Asn1Sequence seq) - { - if (fieldID == null) - throw new ArgumentNullException("fieldID"); - if (seq == null) - throw new ArgumentNullException("seq"); - - this.fieldIdentifier = fieldID.Identifier; - - if (fieldIdentifier.Equals(X9ObjectIdentifiers.PrimeField)) - { - BigInteger q = ((DerInteger) fieldID.Parameters).Value; - X9FieldElement x9A = new X9FieldElement(q, (Asn1OctetString) seq[0]); - X9FieldElement x9B = new X9FieldElement(q, (Asn1OctetString) seq[1]); - curve = new FpCurve(q, x9A.Value.ToBigInteger(), x9B.Value.ToBigInteger()); - } - else - { - if (fieldIdentifier.Equals(X9ObjectIdentifiers.CharacteristicTwoField)) - { - // Characteristic two field - DerSequence parameters = (DerSequence)fieldID.Parameters; - int m = ((DerInteger)parameters[0]).Value.IntValue; - DerObjectIdentifier representation - = (DerObjectIdentifier)parameters[1]; - - int k1 = 0; - int k2 = 0; - int k3 = 0; - if (representation.Equals(X9ObjectIdentifiers.TPBasis)) - { - // Trinomial basis representation - k1 = ((DerInteger)parameters[2]).Value.IntValue; - } - else - { - // Pentanomial basis representation - DerSequence pentanomial = (DerSequence) parameters[2]; - k1 = ((DerInteger) pentanomial[0]).Value.IntValue; - k2 = ((DerInteger) pentanomial[1]).Value.IntValue; - k3 = ((DerInteger) pentanomial[2]).Value.IntValue; - } - X9FieldElement x9A = new X9FieldElement(m, k1, k2, k3, (Asn1OctetString)seq[0]); - X9FieldElement x9B = new X9FieldElement(m, k1, k2, k3, (Asn1OctetString)seq[1]); - // TODO Is it possible to get the order (n) and cofactor(h) too? - curve = new F2mCurve(m, k1, k2, k3, x9A.Value.ToBigInteger(), x9B.Value.ToBigInteger()); - } - } - - if (seq.Count == 3) - { - seed = ((DerBitString) seq[2]).GetBytes(); - } - } - - public ECCurve Curve - { - get { return curve; } - } - - public byte[] GetSeed() - { - return Arrays.Clone(seed); - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         *  Curve ::= Sequence {
-         *      a               FieldElement,
-         *      b               FieldElement,
-         *      seed            BIT STRING      OPTIONAL
-         *  }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - if (fieldIdentifier.Equals(X9ObjectIdentifiers.PrimeField) - || fieldIdentifier.Equals(X9ObjectIdentifiers.CharacteristicTwoField)) - { - v.Add(new X9FieldElement(curve.A).ToAsn1Object()); - v.Add(new X9FieldElement(curve.B).ToAsn1Object()); - } - - if (seed != null) - { - v.Add(new DerBitString(seed)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x9/X9ECParameters.cs b/bc-sharp-crypto/src/asn1/x9/X9ECParameters.cs deleted file mode 100644 index 0fa3437..0000000 --- a/bc-sharp-crypto/src/asn1/x9/X9ECParameters.cs +++ /dev/null @@ -1,233 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC; -using Org.BouncyCastle.Math.Field; - -namespace Org.BouncyCastle.Asn1.X9 -{ - /** - * ASN.1 def for Elliptic-Curve ECParameters structure. See - * X9.62, for further details. - */ - public class X9ECParameters - : Asn1Encodable - { - private X9FieldID fieldID; - private ECCurve curve; - private X9ECPoint g; - private BigInteger n; - private BigInteger h; - private byte[] seed; - - public static X9ECParameters GetInstance(Object obj) - { - if (obj is X9ECParameters) - { - return (X9ECParameters)obj; - } - - if (obj != null) - { - return new X9ECParameters(Asn1Sequence.GetInstance(obj)); - } - - return null; - } - - public X9ECParameters( - Asn1Sequence seq) - { - if (!(seq[0] is DerInteger) - || !((DerInteger) seq[0]).Value.Equals(BigInteger.One)) - { - throw new ArgumentException("bad version in X9ECParameters"); - } - - X9Curve x9c = new X9Curve( - X9FieldID.GetInstance(seq[1]), - Asn1Sequence.GetInstance(seq[2])); - - this.curve = x9c.Curve; - object p = seq[3]; - - if (p is X9ECPoint) - { - this.g = ((X9ECPoint)p); - } - else - { - this.g = new X9ECPoint(curve, (Asn1OctetString)p); - } - - this.n = ((DerInteger)seq[4]).Value; - this.seed = x9c.GetSeed(); - - if (seq.Count == 6) - { - this.h = ((DerInteger)seq[5]).Value; - } - } - - public X9ECParameters( - ECCurve curve, - ECPoint g, - BigInteger n) - : this(curve, g, n, null, null) - { - } - - public X9ECParameters( - ECCurve curve, - X9ECPoint g, - BigInteger n, - BigInteger h) - : this(curve, g, n, h, null) - { - } - - public X9ECParameters( - ECCurve curve, - ECPoint g, - BigInteger n, - BigInteger h) - : this(curve, g, n, h, null) - { - } - - public X9ECParameters( - ECCurve curve, - ECPoint g, - BigInteger n, - BigInteger h, - byte[] seed) - : this(curve, new X9ECPoint(g), n, h, seed) - { - } - - public X9ECParameters( - ECCurve curve, - X9ECPoint g, - BigInteger n, - BigInteger h, - byte[] seed) - { - this.curve = curve; - this.g = g; - this.n = n; - this.h = h; - this.seed = seed; - - if (ECAlgorithms.IsFpCurve(curve)) - { - this.fieldID = new X9FieldID(curve.Field.Characteristic); - } - else if (ECAlgorithms.IsF2mCurve(curve)) - { - IPolynomialExtensionField field = (IPolynomialExtensionField)curve.Field; - int[] exponents = field.MinimalPolynomial.GetExponentsPresent(); - if (exponents.Length == 3) - { - this.fieldID = new X9FieldID(exponents[2], exponents[1]); - } - else if (exponents.Length == 5) - { - this.fieldID = new X9FieldID(exponents[4], exponents[1], exponents[2], exponents[3]); - } - else - { - throw new ArgumentException("Only trinomial and pentomial curves are supported"); - } - } - else - { - throw new ArgumentException("'curve' is of an unsupported type"); - } - } - - public ECCurve Curve - { - get { return curve; } - } - - public ECPoint G - { - get { return g.Point; } - } - - public BigInteger N - { - get { return n; } - } - - public BigInteger H - { - get { return h; } - } - - public byte[] GetSeed() - { - return seed; - } - - /** - * Return the ASN.1 entry representing the Curve. - * - * @return the X9Curve for the curve in these parameters. - */ - public X9Curve CurveEntry - { - get { return new X9Curve(curve, seed); } - } - - /** - * Return the ASN.1 entry representing the FieldID. - * - * @return the X9FieldID for the FieldID in these parameters. - */ - public X9FieldID FieldIDEntry - { - get { return fieldID; } - } - - /** - * Return the ASN.1 entry representing the base point G. - * - * @return the X9ECPoint for the base point in these parameters. - */ - public X9ECPoint BaseEntry - { - get { return g; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         *  ECParameters ::= Sequence {
-         *      version         Integer { ecpVer1(1) } (ecpVer1),
-         *      fieldID         FieldID {{FieldTypes}},
-         *      curve           X9Curve,
-         *      base            X9ECPoint,
-         *      order           Integer,
-         *      cofactor        Integer OPTIONAL
-         *  }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - Asn1EncodableVector v = new Asn1EncodableVector( - new DerInteger(BigInteger.One), - fieldID, - new X9Curve(curve, seed), - g, - new DerInteger(n)); - - if (h != null) - { - v.Add(new DerInteger(h)); - } - - return new DerSequence(v); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x9/X9ECParametersHolder.cs b/bc-sharp-crypto/src/asn1/x9/X9ECParametersHolder.cs deleted file mode 100644 index e802b73..0000000 --- a/bc-sharp-crypto/src/asn1/x9/X9ECParametersHolder.cs +++ /dev/null @@ -1,25 +0,0 @@ -namespace Org.BouncyCastle.Asn1.X9 -{ - public abstract class X9ECParametersHolder - { - private X9ECParameters parameters; - - public X9ECParameters Parameters - { - get - { - lock (this) - { - if (parameters == null) - { - parameters = CreateParameters(); - } - - return parameters; - } - } - } - - protected abstract X9ECParameters CreateParameters(); - } -} diff --git a/bc-sharp-crypto/src/asn1/x9/X9ECPoint.cs b/bc-sharp-crypto/src/asn1/x9/X9ECPoint.cs deleted file mode 100644 index 7ef4f13..0000000 --- a/bc-sharp-crypto/src/asn1/x9/X9ECPoint.cs +++ /dev/null @@ -1,80 +0,0 @@ -using Org.BouncyCastle.Math.EC; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Asn1.X9 -{ - /** - * class for describing an ECPoint as a Der object. - */ - public class X9ECPoint - : Asn1Encodable - { - private readonly Asn1OctetString encoding; - - private ECCurve c; - private ECPoint p; - - public X9ECPoint(ECPoint p) - : this(p, false) - { - } - - public X9ECPoint(ECPoint p, bool compressed) - { - this.p = p.Normalize(); - this.encoding = new DerOctetString(p.GetEncoded(compressed)); - } - - public X9ECPoint(ECCurve c, byte[] encoding) - { - this.c = c; - this.encoding = new DerOctetString(Arrays.Clone(encoding)); - } - - public X9ECPoint(ECCurve c, Asn1OctetString s) - : this(c, s.GetOctets()) - { - } - - public byte[] GetPointEncoding() - { - return Arrays.Clone(encoding.GetOctets()); - } - - public ECPoint Point - { - get - { - if (p == null) - { - p = c.DecodePoint(encoding.GetOctets()).Normalize(); - } - - return p; - } - } - - public bool IsPointCompressed - { - get - { - byte[] octets = encoding.GetOctets(); - return octets != null && octets.Length > 0 && (octets[0] == 2 || octets[0] == 3); - } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         *  ECPoint ::= OCTET STRING
-         *
- *

- * Octet string produced using ECPoint.GetEncoded().

- */ - public override Asn1Object ToAsn1Object() - { - return encoding; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x9/X9FieldElement.cs b/bc-sharp-crypto/src/asn1/x9/X9FieldElement.cs deleted file mode 100644 index 94bd96b..0000000 --- a/bc-sharp-crypto/src/asn1/x9/X9FieldElement.cs +++ /dev/null @@ -1,69 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC; - -namespace Org.BouncyCastle.Asn1.X9 -{ - /** - * Class for processing an ECFieldElement as a DER object. - */ - public class X9FieldElement - : Asn1Encodable - { - private ECFieldElement f; - - public X9FieldElement( - ECFieldElement f) - { - this.f = f; - } - - public X9FieldElement( - BigInteger p, - Asn1OctetString s) - : this(new FpFieldElement(p, new BigInteger(1, s.GetOctets()))) - { - } - - public X9FieldElement( - int m, - int k1, - int k2, - int k3, - Asn1OctetString s) - : this(new F2mFieldElement(m, k1, k2, k3, new BigInteger(1, s.GetOctets()))) - { - } - - public ECFieldElement Value - { - get { return f; } - } - - /** - * Produce an object suitable for an Asn1OutputStream. - * 
-         *  FieldElement ::= OCTET STRING
-         *
- *

- *

    - *
  1. if q is an odd prime then the field element is - * processed as an Integer and converted to an octet string - * according to x 9.62 4.3.1.
    2. - *
  2. if q is 2m then the bit string - * contained in the field element is converted into an octet - * string with the same ordering padded at the front if necessary. - *
    3. - *
- *

- */ - public override Asn1Object ToAsn1Object() - { - int byteCount = X9IntegerConverter.GetByteLength(f); - byte[] paddedBigInteger = X9IntegerConverter.IntegerToBytes(f.ToBigInteger(), byteCount); - - return new DerOctetString(paddedBigInteger); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x9/X9FieldID.cs b/bc-sharp-crypto/src/asn1/x9/X9FieldID.cs deleted file mode 100644 index 08d7d71..0000000 --- a/bc-sharp-crypto/src/asn1/x9/X9FieldID.cs +++ /dev/null @@ -1,132 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Asn1.X9 -{ - /** - * ASN.1 def for Elliptic-Curve Field ID structure. See - * X9.62, for further details. - */ - public class X9FieldID - : Asn1Encodable - { - private readonly DerObjectIdentifier id; - private readonly Asn1Object parameters; - - /** - * Constructor for elliptic curves over prime fields - * F2. - * @param primeP The prime p defining the prime field. - */ - public X9FieldID( - BigInteger primeP) - { - this.id = X9ObjectIdentifiers.PrimeField; - this.parameters = new DerInteger(primeP); - } - - /** - * Constructor for elliptic curves over binary fields - * F2m. - * @param m The exponent m of - * F2m. - * @param k1 The integer k1 where xm + - * xk1 + 1 - * represents the reduction polynomial f(z). - */ - public X9FieldID(int m, int k1) - : this(m, k1, 0, 0) - { - } - - /** - * Constructor for elliptic curves over binary fields - * F2m. - * @param m The exponent m of - * F2m. - * @param k1 The integer k1 where xm + - * xk3 + xk2 + xk1 + 1 - * represents the reduction polynomial f(z). - * @param k2 The integer k2 where xm + - * xk3 + xk2 + xk1 + 1 - * represents the reduction polynomial f(z). - * @param k3 The integer k3 where xm + - * xk3 + xk2 + xk1 + 1 - * represents the reduction polynomial f(z).. - */ - public X9FieldID( - int m, - int k1, - int k2, - int k3) - { - this.id = X9ObjectIdentifiers.CharacteristicTwoField; - - Asn1EncodableVector fieldIdParams = new Asn1EncodableVector(new DerInteger(m)); - - if (k2 == 0) - { - if (k3 != 0) - throw new ArgumentException("inconsistent k values"); - - fieldIdParams.Add( - X9ObjectIdentifiers.TPBasis, - new DerInteger(k1)); - } - else - { - if (k2 <= k1 || k3 <= k2) - throw new ArgumentException("inconsistent k values"); - - fieldIdParams.Add( - X9ObjectIdentifiers.PPBasis, - new DerSequence( - new DerInteger(k1), - new DerInteger(k2), - new DerInteger(k3))); - } - - this.parameters = new DerSequence(fieldIdParams); - } - - private X9FieldID(Asn1Sequence seq) - { - this.id = DerObjectIdentifier.GetInstance(seq[0]); - this.parameters = seq[1].ToAsn1Object(); - } - - public static X9FieldID GetInstance(object obj) - { - if (obj is X9FieldID) - return (X9FieldID)obj; - if (obj == null) - return null; - return new X9FieldID(Asn1Sequence.GetInstance(obj)); - } - - public DerObjectIdentifier Identifier - { - get { return id; } - } - - public Asn1Object Parameters - { - get { return parameters; } - } - - /** - * Produce a Der encoding of the following structure. - * 
-         *  FieldID ::= Sequence {
-         *      fieldType       FIELD-ID.&id({IOSet}),
-         *      parameters      FIELD-ID.&Type({IOSet}{@fieldType})
-         *  }
-         *
- */ - public override Asn1Object ToAsn1Object() - { - return new DerSequence(id, parameters); - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x9/X9IntegerConverter.cs b/bc-sharp-crypto/src/asn1/x9/X9IntegerConverter.cs deleted file mode 100644 index e8f4571..0000000 --- a/bc-sharp-crypto/src/asn1/x9/X9IntegerConverter.cs +++ /dev/null @@ -1,40 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC; - -namespace Org.BouncyCastle.Asn1.X9 -{ - public abstract class X9IntegerConverter - { - public static int GetByteLength(ECFieldElement fe) - { - return (fe.FieldSize + 7) / 8; - } - - public static int GetByteLength(ECCurve c) - { - return (c.FieldSize + 7) / 8; - } - - public static byte[] IntegerToBytes(BigInteger s, int qLength) - { - byte[] bytes = s.ToByteArrayUnsigned(); - - if (qLength < bytes.Length) - { - byte[] tmp = new byte[qLength]; - Array.Copy(bytes, bytes.Length - tmp.Length, tmp, 0, tmp.Length); - return tmp; - } - else if (qLength > bytes.Length) - { - byte[] tmp = new byte[qLength]; - Array.Copy(bytes, 0, tmp, tmp.Length - bytes.Length, bytes.Length); - return tmp; - } - - return bytes; - } - } -} diff --git a/bc-sharp-crypto/src/asn1/x9/X9ObjectIdentifiers.cs b/bc-sharp-crypto/src/asn1/x9/X9ObjectIdentifiers.cs deleted file mode 100644 index 9d7ecae..0000000 --- a/bc-sharp-crypto/src/asn1/x9/X9ObjectIdentifiers.cs +++ /dev/null @@ -1,137 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Asn1.X9 -{ - public abstract class X9ObjectIdentifiers - { - // - // X9.62 - // - // ansi-X9-62 OBJECT IDENTIFIER ::= { iso(1) member-body(2) - // us(840) ansi-x962(10045) } - // - - internal const string AnsiX962 = "1.2.840.10045"; - - public static readonly DerObjectIdentifier ansi_X9_62 = new DerObjectIdentifier(AnsiX962); - - public static readonly DerObjectIdentifier IdFieldType = ansi_X9_62.Branch("1"); - - public static readonly DerObjectIdentifier PrimeField = IdFieldType.Branch("1"); - public static readonly DerObjectIdentifier CharacteristicTwoField = IdFieldType.Branch("2"); - - public static readonly DerObjectIdentifier GNBasis = CharacteristicTwoField.Branch("3.1"); - public static readonly DerObjectIdentifier TPBasis = CharacteristicTwoField.Branch("3.2"); - public static readonly DerObjectIdentifier PPBasis = CharacteristicTwoField.Branch("3.3"); - - [Obsolete("Use 'id_ecSigType' instead")] - public const string IdECSigType = AnsiX962 + ".4"; - public static readonly DerObjectIdentifier id_ecSigType = ansi_X9_62.Branch("4"); - - public static readonly DerObjectIdentifier ECDsaWithSha1 = id_ecSigType.Branch("1"); - - [Obsolete("Use 'id_publicKeyType' instead")] - public const string IdPublicKeyType = AnsiX962 + ".2"; - public static readonly DerObjectIdentifier id_publicKeyType = ansi_X9_62.Branch("2"); - - public static readonly DerObjectIdentifier IdECPublicKey = id_publicKeyType.Branch("1"); - - public static readonly DerObjectIdentifier ECDsaWithSha2 = id_ecSigType.Branch("3"); - - public static readonly DerObjectIdentifier ECDsaWithSha224 = ECDsaWithSha2.Branch("1"); - public static readonly DerObjectIdentifier ECDsaWithSha256 = ECDsaWithSha2.Branch("2"); - public static readonly DerObjectIdentifier ECDsaWithSha384 = ECDsaWithSha2.Branch("3"); - public static readonly DerObjectIdentifier ECDsaWithSha512 = ECDsaWithSha2.Branch("4"); - - - // - // named curves - // - public static readonly DerObjectIdentifier EllipticCurve = ansi_X9_62.Branch("3"); - - // - // Two Curves - // - public static readonly DerObjectIdentifier CTwoCurve = EllipticCurve.Branch("0"); - - public static readonly DerObjectIdentifier C2Pnb163v1 = CTwoCurve.Branch("1"); - public static readonly DerObjectIdentifier C2Pnb163v2 = CTwoCurve.Branch("2"); - public static readonly DerObjectIdentifier C2Pnb163v3 = CTwoCurve.Branch("3"); - public static readonly DerObjectIdentifier C2Pnb176w1 = CTwoCurve.Branch("4"); - public static readonly DerObjectIdentifier C2Tnb191v1 = CTwoCurve.Branch("5"); - public static readonly DerObjectIdentifier C2Tnb191v2 = CTwoCurve.Branch("6"); - public static readonly DerObjectIdentifier C2Tnb191v3 = CTwoCurve.Branch("7"); - public static readonly DerObjectIdentifier C2Onb191v4 = CTwoCurve.Branch("8"); - public static readonly DerObjectIdentifier C2Onb191v5 = CTwoCurve.Branch("9"); - public static readonly DerObjectIdentifier C2Pnb208w1 = CTwoCurve.Branch("10"); - public static readonly DerObjectIdentifier C2Tnb239v1 = CTwoCurve.Branch("11"); - public static readonly DerObjectIdentifier C2Tnb239v2 = CTwoCurve.Branch("12"); - public static readonly DerObjectIdentifier C2Tnb239v3 = CTwoCurve.Branch("13"); - public static readonly DerObjectIdentifier C2Onb239v4 = CTwoCurve.Branch("14"); - public static readonly DerObjectIdentifier C2Onb239v5 = CTwoCurve.Branch("15"); - public static readonly DerObjectIdentifier C2Pnb272w1 = CTwoCurve.Branch("16"); - public static readonly DerObjectIdentifier C2Pnb304w1 = CTwoCurve.Branch("17"); - public static readonly DerObjectIdentifier C2Tnb359v1 = CTwoCurve.Branch("18"); - public static readonly DerObjectIdentifier C2Pnb368w1 = CTwoCurve.Branch("19"); - public static readonly DerObjectIdentifier C2Tnb431r1 = CTwoCurve.Branch("20"); - - // - // Prime - // - public static readonly DerObjectIdentifier PrimeCurve = EllipticCurve.Branch("1"); - - public static readonly DerObjectIdentifier Prime192v1 = PrimeCurve.Branch("1"); - public static readonly DerObjectIdentifier Prime192v2 = PrimeCurve.Branch("2"); - public static readonly DerObjectIdentifier Prime192v3 = PrimeCurve.Branch("3"); - public static readonly DerObjectIdentifier Prime239v1 = PrimeCurve.Branch("4"); - public static readonly DerObjectIdentifier Prime239v2 = PrimeCurve.Branch("5"); - public static readonly DerObjectIdentifier Prime239v3 = PrimeCurve.Branch("6"); - public static readonly DerObjectIdentifier Prime256v1 = PrimeCurve.Branch("7"); - - // - // DSA - // - // dsapublicnumber OBJECT IDENTIFIER ::= { iso(1) member-body(2) - // us(840) ansi-x957(10040) number-type(4) 1 } - public static readonly DerObjectIdentifier IdDsa = new DerObjectIdentifier("1.2.840.10040.4.1"); - - /** - * id-dsa-with-sha1 OBJECT IDENTIFIER ::= { iso(1) member-body(2) - * us(840) x9-57 (10040) x9cm(4) 3 } - */ - public static readonly DerObjectIdentifier IdDsaWithSha1 = new DerObjectIdentifier("1.2.840.10040.4.3"); - - /** - * X9.63 - */ - public static readonly DerObjectIdentifier X9x63Scheme = new DerObjectIdentifier("1.3.133.16.840.63.0"); - public static readonly DerObjectIdentifier DHSinglePassStdDHSha1KdfScheme = X9x63Scheme.Branch("2"); - public static readonly DerObjectIdentifier DHSinglePassCofactorDHSha1KdfScheme = X9x63Scheme.Branch("3"); - public static readonly DerObjectIdentifier MqvSinglePassSha1KdfScheme = X9x63Scheme.Branch("16"); - - /** - * X9.42 - */ - - public static readonly DerObjectIdentifier ansi_x9_42 = new DerObjectIdentifier("1.2.840.10046"); - - // - // Diffie-Hellman - // - // dhpublicnumber OBJECT IDENTIFIER ::= { iso(1) member-body(2) - // us(840) ansi-x942(10046) number-type(2) 1 } - // - public static readonly DerObjectIdentifier DHPublicNumber = ansi_x9_42.Branch("2.1"); - - public static readonly DerObjectIdentifier X9x42Schemes = ansi_x9_42.Branch("2.3"); - - public static readonly DerObjectIdentifier DHStatic = X9x42Schemes.Branch("1"); - public static readonly DerObjectIdentifier DHEphem = X9x42Schemes.Branch("2"); - public static readonly DerObjectIdentifier DHOneFlow = X9x42Schemes.Branch("3"); - public static readonly DerObjectIdentifier DHHybrid1 = X9x42Schemes.Branch("4"); - public static readonly DerObjectIdentifier DHHybrid2 = X9x42Schemes.Branch("5"); - public static readonly DerObjectIdentifier DHHybridOneFlow = X9x42Schemes.Branch("6"); - public static readonly DerObjectIdentifier Mqv2 = X9x42Schemes.Branch("7"); - public static readonly DerObjectIdentifier Mqv1 = X9x42Schemes.Branch("8"); - } -} diff --git a/bc-sharp-crypto/src/bcpg/ArmoredInputStream.cs b/bc-sharp-crypto/src/bcpg/ArmoredInputStream.cs deleted file mode 100644 index d5d9f7f..0000000 --- a/bc-sharp-crypto/src/bcpg/ArmoredInputStream.cs +++ /dev/null @@ -1,524 +0,0 @@ -using System; -using System.Collections; -using System.IO; -using System.Text; - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Bcpg -{ - /** - * reader for Base64 armored objects - read the headers and then start returning - * bytes when the data is reached. An IOException is thrown if the CRC check - * fails. - */ - public class ArmoredInputStream - : BaseInputStream - { - /* - * set up the decoding table. - */ - private readonly static byte[] decodingTable; - static ArmoredInputStream() - { - decodingTable = new byte[128]; - for (int i = 'A'; i <= 'Z'; i++) - { - decodingTable[i] = (byte)(i - 'A'); - } - for (int i = 'a'; i <= 'z'; i++) - { - decodingTable[i] = (byte)(i - 'a' + 26); - } - for (int i = '0'; i <= '9'; i++) - { - decodingTable[i] = (byte)(i - '0' + 52); - } - decodingTable['+'] = 62; - decodingTable['/'] = 63; - } - - /** - * decode the base 64 encoded input data. - * - * @return the offset the data starts in out. - */ - private int Decode( - int in0, - int in1, - int in2, - int in3, - int[] result) - { - if (in3 < 0) - { - throw new EndOfStreamException("unexpected end of file in armored stream."); - } - - int b1, b2, b3, b4; - if (in2 == '=') - { - b1 = decodingTable[in0] &0xff; - b2 = decodingTable[in1] & 0xff; - result[2] = ((b1 << 2) | (b2 >> 4)) & 0xff; - return 2; - } - else if (in3 == '=') - { - b1 = decodingTable[in0]; - b2 = decodingTable[in1]; - b3 = decodingTable[in2]; - result[1] = ((b1 << 2) | (b2 >> 4)) & 0xff; - result[2] = ((b2 << 4) | (b3 >> 2)) & 0xff; - return 1; - } - else - { - b1 = decodingTable[in0]; - b2 = decodingTable[in1]; - b3 = decodingTable[in2]; - b4 = decodingTable[in3]; - result[0] = ((b1 << 2) | (b2 >> 4)) & 0xff; - result[1] = ((b2 << 4) | (b3 >> 2)) & 0xff; - result[2] = ((b3 << 6) | b4) & 0xff; - return 0; - } - } - - Stream input; - bool start = true; - int[] outBuf = new int[3]; - int bufPtr = 3; - Crc24 crc = new Crc24(); - bool crcFound = false; - bool hasHeaders = true; - string header = null; - bool newLineFound = false; - bool clearText = false; - bool restart = false; - IList headerList= Platform.CreateArrayList(); - int lastC = 0; - bool isEndOfStream; - - /** - * Create a stream for reading a PGP armoured message, parsing up to a header - * and then reading the data that follows. - * - * @param input - */ - public ArmoredInputStream( - Stream input) - : this(input, true) - { - } - - /** - * Create an armoured input stream which will assume the data starts - * straight away, or parse for headers first depending on the value of - * hasHeaders. - * - * @param input - * @param hasHeaders true if headers are to be looked for, false otherwise. - */ - public ArmoredInputStream( - Stream input, - bool hasHeaders) - { - this.input = input; - this.hasHeaders = hasHeaders; - - if (hasHeaders) - { - ParseHeaders(); - } - - start = false; - } - - private bool ParseHeaders() - { - header = null; - - int c; - int last = 0; - bool headerFound = false; - - headerList = Platform.CreateArrayList(); - - // - // if restart we already have a header - // - if (restart) - { - headerFound = true; - } - else - { - while ((c = input.ReadByte()) >= 0) - { - if (c == '-' && (last == 0 || last == '\n' || last == '\r')) - { - headerFound = true; - break; - } - - last = c; - } - } - - if (headerFound) - { - StringBuilder Buffer = new StringBuilder("-"); - bool eolReached = false; - bool crLf = false; - - if (restart) // we've had to look ahead two '-' - { - Buffer.Append('-'); - } - - while ((c = input.ReadByte()) >= 0) - { - if (last == '\r' && c == '\n') - { - crLf = true; - } - if (eolReached && (last != '\r' && c == '\n')) - { - break; - } - if (eolReached && c == '\r') - { - break; - } - if (c == '\r' || (last != '\r' && c == '\n')) - { - string line = Buffer.ToString(); - if (line.Trim().Length < 1) - break; - headerList.Add(line); - Buffer.Length = 0; - } - - if (c != '\n' && c != '\r') - { - Buffer.Append((char)c); - eolReached = false; - } - else - { - if (c == '\r' || (last != '\r' && c == '\n')) - { - eolReached = true; - } - } - - last = c; - } - - if (crLf) - { - input.ReadByte(); // skip last \n - } - } - - if (headerList.Count > 0) - { - header = (string) headerList[0]; - } - - clearText = "-----BEGIN PGP SIGNED MESSAGE-----".Equals(header); - newLineFound = true; - - return headerFound; - } - - /** - * @return true if we are inside the clear text section of a PGP - * signed message. - */ - public bool IsClearText() - { - return clearText; - } - - /** - * @return true if the stream is actually at end of file. - */ - public bool IsEndOfStream() - { - return isEndOfStream; - } - - /** - * Return the armor header line (if there is one) - * @return the armor header line, null if none present. - */ - public string GetArmorHeaderLine() - { - return header; - } - - /** - * Return the armor headers (the lines after the armor header line), - * @return an array of armor headers, null if there aren't any. - */ - public string[] GetArmorHeaders() - { - if (headerList.Count <= 1) - { - return null; - } - - string[] hdrs = new string[headerList.Count - 1]; - for (int i = 0; i != hdrs.Length; i++) - { - hdrs[i] = (string) headerList[i + 1]; - } - - return hdrs; - } - - private int ReadIgnoreSpace() - { - int c; - do - { - c = input.ReadByte(); - } - while (c == ' ' || c == '\t'); - - return c; - } - - private int ReadIgnoreWhitespace() - { - int c; - do - { - c = input.ReadByte(); - } - while (c == ' ' || c == '\t' || c == '\r' || c == '\n'); - - return c; - } - - private int ReadByteClearText() - { - int c = input.ReadByte(); - - if (c == '\r' || (c == '\n' && lastC != '\r')) - { - newLineFound = true; - } - else if (newLineFound && c == '-') - { - c = input.ReadByte(); - if (c == '-') // a header, not dash escaped - { - clearText = false; - start = true; - restart = true; - } - else // a space - must be a dash escape - { - c = input.ReadByte(); - } - newLineFound = false; - } - else - { - if (c != '\n' && lastC != '\r') - { - newLineFound = false; - } - } - - lastC = c; - - if (c < 0) - { - isEndOfStream = true; - } - - return c; - } - - private int ReadClearText(byte[] buffer, int offset, int count) - { - int pos = offset; - try - { - int end = offset + count; - while (pos < end) - { - int c = ReadByteClearText(); - if (c == -1) - { - break; - } - buffer[pos++] = (byte) c; - } - } - catch (IOException ioe) - { - if (pos == offset) throw ioe; - } - - return pos - offset; - } - - private int DoReadByte() - { - if (bufPtr > 2 || crcFound) - { - int c = ReadIgnoreSpace(); - if (c == '\n' || c == '\r') - { - c = ReadIgnoreWhitespace(); - if (c == '=') // crc reached - { - bufPtr = Decode(ReadIgnoreSpace(), ReadIgnoreSpace(), ReadIgnoreSpace(), ReadIgnoreSpace(), outBuf); - - if (bufPtr != 0) - { - throw new IOException("no crc found in armored message."); - } - - crcFound = true; - - int i = ((outBuf[0] & 0xff) << 16) - | ((outBuf[1] & 0xff) << 8) - | (outBuf[2] & 0xff); - - if (i != crc.Value) - { - throw new IOException("crc check failed in armored message."); - } - - return ReadByte(); - } - - if (c == '-') // end of record reached - { - while ((c = input.ReadByte()) >= 0) - { - if (c == '\n' || c == '\r') - { - break; - } - } - - if (!crcFound) - { - throw new IOException("crc check not found."); - } - - crcFound = false; - start = true; - bufPtr = 3; - - if (c < 0) - { - isEndOfStream = true; - } - - return -1; - } - } - - if (c < 0) - { - isEndOfStream = true; - return -1; - } - - bufPtr = Decode(c, ReadIgnoreSpace(), ReadIgnoreSpace(), ReadIgnoreSpace(), outBuf); - } - - return outBuf[bufPtr++]; - } - - public override int ReadByte() - { - if (start) - { - if (hasHeaders) - { - ParseHeaders(); - } - - crc.Reset(); - start = false; - } - - if (clearText) - { - return ReadByteClearText(); - } - - int c = DoReadByte(); - - crc.Update(c); - - return c; - } - - public override int Read(byte[] buffer, int offset, int count) - { - if (start && count > 0) - { - if (hasHeaders) - { - ParseHeaders(); - } - start = false; - } - - if (clearText) - { - return ReadClearText(buffer, offset, count); - } - - int pos = offset; - try - { - int end = offset + count; - while (pos < end) - { - int c = DoReadByte(); - crc.Update(c); - if (c == -1) - { - break; - } - buffer[pos++] = (byte) c; - } - } - catch (IOException ioe) - { - if (pos == offset) throw ioe; - } - - return pos - offset; - } - -#if PORTABLE - protected override void Dispose(bool disposing) - { - if (disposing) - { - Platform.Dispose(input); - } - base.Dispose(disposing); - } -#else - public override void Close() - { - Platform.Dispose(input); - base.Close(); - } -#endif - } -} diff --git a/bc-sharp-crypto/src/bcpg/ArmoredOutputStream.cs b/bc-sharp-crypto/src/bcpg/ArmoredOutputStream.cs deleted file mode 100644 index 5737dd4..0000000 --- a/bc-sharp-crypto/src/bcpg/ArmoredOutputStream.cs +++ /dev/null @@ -1,375 +0,0 @@ -using System; -using System.Collections; -using System.Diagnostics; -using System.IO; -using System.Reflection; -using System.Text; - -#if PORTABLE -using System.Linq; -#endif - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Bcpg -{ - /** - * Basic output stream. - */ - public class ArmoredOutputStream - : BaseOutputStream - { - public static readonly string HeaderVersion = "Version"; - - private static readonly byte[] encodingTable = - { - (byte)'A', (byte)'B', (byte)'C', (byte)'D', (byte)'E', (byte)'F', (byte)'G', - (byte)'H', (byte)'I', (byte)'J', (byte)'K', (byte)'L', (byte)'M', (byte)'N', - (byte)'O', (byte)'P', (byte)'Q', (byte)'R', (byte)'S', (byte)'T', (byte)'U', - (byte)'V', (byte)'W', (byte)'X', (byte)'Y', (byte)'Z', - (byte)'a', (byte)'b', (byte)'c', (byte)'d', (byte)'e', (byte)'f', (byte)'g', - (byte)'h', (byte)'i', (byte)'j', (byte)'k', (byte)'l', (byte)'m', (byte)'n', - (byte)'o', (byte)'p', (byte)'q', (byte)'r', (byte)'s', (byte)'t', (byte)'u', - (byte)'v', - (byte)'w', (byte)'x', (byte)'y', (byte)'z', - (byte)'0', (byte)'1', (byte)'2', (byte)'3', (byte)'4', (byte)'5', (byte)'6', - (byte)'7', (byte)'8', (byte)'9', - (byte)'+', (byte)'/' - }; - - /** - * encode the input data producing a base 64 encoded byte array. - */ - private static void Encode( - Stream outStream, - int[] data, - int len) - { - Debug.Assert(len > 0); - Debug.Assert(len < 4); - - byte[] bs = new byte[4]; - int d1 = data[0]; - bs[0] = encodingTable[(d1 >> 2) & 0x3f]; - - switch (len) - { - case 1: - { - bs[1] = encodingTable[(d1 << 4) & 0x3f]; - bs[2] = (byte)'='; - bs[3] = (byte)'='; - break; - } - case 2: - { - int d2 = data[1]; - bs[1] = encodingTable[((d1 << 4) | (d2 >> 4)) & 0x3f]; - bs[2] = encodingTable[(d2 << 2) & 0x3f]; - bs[3] = (byte)'='; - break; - } - case 3: - { - int d2 = data[1]; - int d3 = data[2]; - bs[1] = encodingTable[((d1 << 4) | (d2 >> 4)) & 0x3f]; - bs[2] = encodingTable[((d2 << 2) | (d3 >> 6)) & 0x3f]; - bs[3] = encodingTable[d3 & 0x3f]; - break; - } - } - - outStream.Write(bs, 0, bs.Length); - } - - private readonly Stream outStream; - private int[] buf = new int[3]; - private int bufPtr = 0; - private Crc24 crc = new Crc24(); - private int chunkCount = 0; - private int lastb; - - private bool start = true; - private bool clearText = false; - private bool newLine = false; - - private string type; - - private static readonly string nl = Platform.NewLine; - private static readonly string headerStart = "-----BEGIN PGP "; - private static readonly string headerTail = "-----"; - private static readonly string footerStart = "-----END PGP "; - private static readonly string footerTail = "-----"; - - private static readonly string Version = "BCPG C# v1.8.1.0"; // + AssemblyInfo.Version; - - private readonly IDictionary headers; - - public ArmoredOutputStream(Stream outStream) - { - this.outStream = outStream; - this.headers = Platform.CreateHashtable(1); - this.headers.Add(HeaderVersion, Version); - } - - public ArmoredOutputStream(Stream outStream, IDictionary headers) - { - this.outStream = outStream; - this.headers = Platform.CreateHashtable(headers); - if (!this.headers.Contains(HeaderVersion)) - { - this.headers.Add(HeaderVersion, Version); - } - } - - /** - * Set an additional header entry. A null value will clear the entry for name. - * - * @param name the name of the header entry. - * @param v the value of the header entry. - */ - public void SetHeader(string name, string v) - { - if (v == null) - { - headers.Remove(name); - } - else - { - headers[name] = v; - } - } - - /** - * Reset the headers to only contain a Version string (if one is present). - */ - public void ResetHeaders() - { - string version = (string)headers[HeaderVersion]; - - headers.Clear(); - - if (version != null) - { - headers[HeaderVersion] = Version; - } - } - - /** - * Start a clear text signed message. - * @param hashAlgorithm - */ - public void BeginClearText( - HashAlgorithmTag hashAlgorithm) - { - string hash; - - switch (hashAlgorithm) - { - case HashAlgorithmTag.Sha1: - hash = "SHA1"; - break; - case HashAlgorithmTag.Sha256: - hash = "SHA256"; - break; - case HashAlgorithmTag.Sha384: - hash = "SHA384"; - break; - case HashAlgorithmTag.Sha512: - hash = "SHA512"; - break; - case HashAlgorithmTag.MD2: - hash = "MD2"; - break; - case HashAlgorithmTag.MD5: - hash = "MD5"; - break; - case HashAlgorithmTag.RipeMD160: - hash = "RIPEMD160"; - break; - default: - throw new IOException("unknown hash algorithm tag in beginClearText: " + hashAlgorithm); - } - - DoWrite("-----BEGIN PGP SIGNED MESSAGE-----" + nl); - DoWrite("Hash: " + hash + nl + nl); - - clearText = true; - newLine = true; - lastb = 0; - } - - public void EndClearText() - { - clearText = false; - } - - public override void WriteByte( - byte b) - { - if (clearText) - { - outStream.WriteByte(b); - - if (newLine) - { - if (!(b == '\n' && lastb == '\r')) - { - newLine = false; - } - if (b == '-') - { - outStream.WriteByte((byte)' '); - outStream.WriteByte((byte)'-'); // dash escape - } - } - if (b == '\r' || (b == '\n' && lastb != '\r')) - { - newLine = true; - } - lastb = b; - return; - } - - if (start) - { - bool newPacket = (b & 0x40) != 0; - - int tag; - if (newPacket) - { - tag = b & 0x3f; - } - else - { - tag = (b & 0x3f) >> 2; - } - - switch ((PacketTag)tag) - { - case PacketTag.PublicKey: - type = "PUBLIC KEY BLOCK"; - break; - case PacketTag.SecretKey: - type = "PRIVATE KEY BLOCK"; - break; - case PacketTag.Signature: - type = "SIGNATURE"; - break; - default: - type = "MESSAGE"; - break; - } - - DoWrite(headerStart + type + headerTail + nl); - if (headers.Contains(HeaderVersion)) - { - WriteHeaderEntry(HeaderVersion, (string)headers[HeaderVersion]); - } - - foreach (DictionaryEntry de in headers) - { - string k = (string)de.Key; - if (k != HeaderVersion) - { - string v = (string)de.Value; - WriteHeaderEntry(k, v); - } - } - - DoWrite(nl); - - start = false; - } - - if (bufPtr == 3) - { - Encode(outStream, buf, bufPtr); - bufPtr = 0; - if ((++chunkCount & 0xf) == 0) - { - DoWrite(nl); - } - } - - crc.Update(b); - buf[bufPtr++] = b & 0xff; - } - - /** - * Note: Close() does not close the underlying stream. So it is possible to write - * multiple objects using armoring to a single stream. - */ -#if PORTABLE - protected override void Dispose(bool disposing) - { - if (disposing) - { - if (type == null) - return; - - DoClose(); - - type = null; - start = true; - } - base.Dispose(disposing); - } -#else - public override void Close() - { - if (type == null) - return; - - DoClose(); - - type = null; - start = true; - - base.Close(); - } -#endif - - private void DoClose() - { - if (bufPtr > 0) - { - Encode(outStream, buf, bufPtr); - } - - DoWrite(nl + '='); - - int crcV = crc.Value; - - buf[0] = ((crcV >> 16) & 0xff); - buf[1] = ((crcV >> 8) & 0xff); - buf[2] = (crcV & 0xff); - - Encode(outStream, buf, 3); - - DoWrite(nl); - DoWrite(footerStart); - DoWrite(type); - DoWrite(footerTail); - DoWrite(nl); - - outStream.Flush(); - } - - private void WriteHeaderEntry( - string name, - string v) - { - DoWrite(name + ": " + v + nl); - } - - private void DoWrite( - string s) - { - byte[] bs = Strings.ToAsciiByteArray(s); - outStream.Write(bs, 0, bs.Length); - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/BcpgInputStream.cs b/bc-sharp-crypto/src/bcpg/BcpgInputStream.cs deleted file mode 100644 index f9627fd..0000000 --- a/bc-sharp-crypto/src/bcpg/BcpgInputStream.cs +++ /dev/null @@ -1,363 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Bcpg -{ - /// Reader for PGP objects. - public class BcpgInputStream - : BaseInputStream - { - private Stream m_in; - private bool next = false; - private int nextB; - - internal static BcpgInputStream Wrap( - Stream inStr) - { - if (inStr is BcpgInputStream) - { - return (BcpgInputStream) inStr; - } - - return new BcpgInputStream(inStr); - } - - private BcpgInputStream( - Stream inputStream) - { - this.m_in = inputStream; - } - - public override int ReadByte() - { - if (next) - { - next = false; - return nextB; - } - - return m_in.ReadByte(); - } - - public override int Read( - byte[] buffer, - int offset, - int count) - { - // Strangely, when count == 0, we should still attempt to read a byte -// if (count == 0) -// return 0; - - if (!next) - return m_in.Read(buffer, offset, count); - - // We have next byte waiting, so return it - - if (nextB < 0) - return 0; // EndOfStream - - if (buffer == null) - throw new ArgumentNullException("buffer"); - - buffer[offset] = (byte) nextB; - next = false; - - return 1; - } - - public byte[] ReadAll() - { - return Streams.ReadAll(this); - } - - public void ReadFully( - byte[] buffer, - int off, - int len) - { - if (Streams.ReadFully(this, buffer, off, len) < len) - throw new EndOfStreamException(); - } - - public void ReadFully( - byte[] buffer) - { - ReadFully(buffer, 0, buffer.Length); - } - - /// Returns the next packet tag in the stream. - public PacketTag NextPacketTag() - { - if (!next) - { - try - { - nextB = m_in.ReadByte(); - } - catch (EndOfStreamException) - { - nextB = -1; - } - - next = true; - } - - if (nextB < 0) - return (PacketTag)nextB; - - int maskB = nextB & 0x3f; - if ((nextB & 0x40) == 0) // old - { - maskB >>= 2; - } - return (PacketTag)maskB; - } - - public Packet ReadPacket() - { - int hdr = this.ReadByte(); - - if (hdr < 0) - { - return null; - } - - if ((hdr & 0x80) == 0) - { - throw new IOException("invalid header encountered"); - } - - bool newPacket = (hdr & 0x40) != 0; - PacketTag tag = 0; - int bodyLen = 0; - bool partial = false; - - if (newPacket) - { - tag = (PacketTag)(hdr & 0x3f); - - int l = this.ReadByte(); - - if (l < 192) - { - bodyLen = l; - } - else if (l <= 223) - { - int b = m_in.ReadByte(); - bodyLen = ((l - 192) << 8) + (b) + 192; - } - else if (l == 255) - { - bodyLen = (m_in.ReadByte() << 24) | (m_in.ReadByte() << 16) - | (m_in.ReadByte() << 8) | m_in.ReadByte(); - } - else - { - partial = true; - bodyLen = 1 << (l & 0x1f); - } - } - else - { - int lengthType = hdr & 0x3; - - tag = (PacketTag)((hdr & 0x3f) >> 2); - - switch (lengthType) - { - case 0: - bodyLen = this.ReadByte(); - break; - case 1: - bodyLen = (this.ReadByte() << 8) | this.ReadByte(); - break; - case 2: - bodyLen = (this.ReadByte() << 24) | (this.ReadByte() << 16) - | (this.ReadByte() << 8) | this.ReadByte(); - break; - case 3: - partial = true; - break; - default: - throw new IOException("unknown length type encountered"); - } - } - - BcpgInputStream objStream; - if (bodyLen == 0 && partial) - { - objStream = this; - } - else - { - PartialInputStream pis = new PartialInputStream(this, partial, bodyLen); - objStream = new BcpgInputStream(pis); - } - - switch (tag) - { - case PacketTag.Reserved: - return new InputStreamPacket(objStream); - case PacketTag.PublicKeyEncryptedSession: - return new PublicKeyEncSessionPacket(objStream); - case PacketTag.Signature: - return new SignaturePacket(objStream); - case PacketTag.SymmetricKeyEncryptedSessionKey: - return new SymmetricKeyEncSessionPacket(objStream); - case PacketTag.OnePassSignature: - return new OnePassSignaturePacket(objStream); - case PacketTag.SecretKey: - return new SecretKeyPacket(objStream); - case PacketTag.PublicKey: - return new PublicKeyPacket(objStream); - case PacketTag.SecretSubkey: - return new SecretSubkeyPacket(objStream); - case PacketTag.CompressedData: - return new CompressedDataPacket(objStream); - case PacketTag.SymmetricKeyEncrypted: - return new SymmetricEncDataPacket(objStream); - case PacketTag.Marker: - return new MarkerPacket(objStream); - case PacketTag.LiteralData: - return new LiteralDataPacket(objStream); - case PacketTag.Trust: - return new TrustPacket(objStream); - case PacketTag.UserId: - return new UserIdPacket(objStream); - case PacketTag.UserAttribute: - return new UserAttributePacket(objStream); - case PacketTag.PublicSubkey: - return new PublicSubkeyPacket(objStream); - case PacketTag.SymmetricEncryptedIntegrityProtected: - return new SymmetricEncIntegrityPacket(objStream); - case PacketTag.ModificationDetectionCode: - return new ModDetectionCodePacket(objStream); - case PacketTag.Experimental1: - case PacketTag.Experimental2: - case PacketTag.Experimental3: - case PacketTag.Experimental4: - return new ExperimentalPacket(tag, objStream); - default: - throw new IOException("unknown packet type encountered: " + tag); - } - } - -#if PORTABLE - protected override void Dispose(bool disposing) - { - if (disposing) - { - Platform.Dispose(m_in); - } - base.Dispose(disposing); - } -#else - public override void Close() - { - Platform.Dispose(m_in); - base.Close(); - } -#endif - - /// - /// A stream that overlays our input stream, allowing the user to only read a segment of it. - /// NB: dataLength will be negative if the segment length is in the upper range above 2**31. - /// - private class PartialInputStream - : BaseInputStream - { - private BcpgInputStream m_in; - private bool partial; - private int dataLength; - - internal PartialInputStream( - BcpgInputStream bcpgIn, - bool partial, - int dataLength) - { - this.m_in = bcpgIn; - this.partial = partial; - this.dataLength = dataLength; - } - - public override int ReadByte() - { - do - { - if (dataLength != 0) - { - int ch = m_in.ReadByte(); - if (ch < 0) - { - throw new EndOfStreamException("Premature end of stream in PartialInputStream"); - } - dataLength--; - return ch; - } - } - while (partial && ReadPartialDataLength() >= 0); - - return -1; - } - - public override int Read(byte[] buffer, int offset, int count) - { - do - { - if (dataLength != 0) - { - int readLen = (dataLength > count || dataLength < 0) ? count : dataLength; - int len = m_in.Read(buffer, offset, readLen); - if (len < 1) - { - throw new EndOfStreamException("Premature end of stream in PartialInputStream"); - } - dataLength -= len; - return len; - } - } - while (partial && ReadPartialDataLength() >= 0); - - return 0; - } - - private int ReadPartialDataLength() - { - int l = m_in.ReadByte(); - - if (l < 0) - { - return -1; - } - - partial = false; - - if (l < 192) - { - dataLength = l; - } - else if (l <= 223) - { - dataLength = ((l - 192) << 8) + (m_in.ReadByte()) + 192; - } - else if (l == 255) - { - dataLength = (m_in.ReadByte() << 24) | (m_in.ReadByte() << 16) - | (m_in.ReadByte() << 8) | m_in.ReadByte(); - } - else - { - partial = true; - dataLength = 1 << (l & 0x1f); - } - - return 0; - } - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/BcpgObject.cs b/bc-sharp-crypto/src/bcpg/BcpgObject.cs deleted file mode 100644 index 4807ad4..0000000 --- a/bc-sharp-crypto/src/bcpg/BcpgObject.cs +++ /dev/null @@ -1,22 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Bcpg -{ - /// Base class for a PGP object. - public abstract class BcpgObject - { - public virtual byte[] GetEncoded() - { - MemoryStream bOut = new MemoryStream(); - BcpgOutputStream pOut = new BcpgOutputStream(bOut); - - pOut.WriteObject(this); - - return bOut.ToArray(); - } - - public abstract void Encode(BcpgOutputStream bcpgOut); - } -} - diff --git a/bc-sharp-crypto/src/bcpg/BcpgOutputStream.cs b/bc-sharp-crypto/src/bcpg/BcpgOutputStream.cs deleted file mode 100644 index 7ab661e..0000000 --- a/bc-sharp-crypto/src/bcpg/BcpgOutputStream.cs +++ /dev/null @@ -1,404 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Bcpg -{ - /// Basic output stream. - public class BcpgOutputStream - : BaseOutputStream - { - internal static BcpgOutputStream Wrap( - Stream outStr) - { - if (outStr is BcpgOutputStream) - { - return (BcpgOutputStream) outStr; - } - - return new BcpgOutputStream(outStr); - } - - private Stream outStr; - private byte[] partialBuffer; - private int partialBufferLength; - private int partialPower; - private int partialOffset; - private const int BufferSizePower = 16; // 2^16 size buffer on long files - - /// Create a stream representing a general packet. - /// Output stream to write to. - public BcpgOutputStream( - Stream outStr) - { - if (outStr == null) - throw new ArgumentNullException("outStr"); - - this.outStr = outStr; - } - - /// Create a stream representing an old style partial object. - /// Output stream to write to. - /// The packet tag for the object. - public BcpgOutputStream( - Stream outStr, - PacketTag tag) - { - if (outStr == null) - throw new ArgumentNullException("outStr"); - - this.outStr = outStr; - this.WriteHeader(tag, true, true, 0); - } - - /// Create a stream representing a general packet. - /// Output stream to write to. - /// Packet tag. - /// Size of chunks making up the packet. - /// If true, the header is written out in old format. - public BcpgOutputStream( - Stream outStr, - PacketTag tag, - long length, - bool oldFormat) - { - if (outStr == null) - throw new ArgumentNullException("outStr"); - - this.outStr = outStr; - - if (length > 0xFFFFFFFFL) - { - this.WriteHeader(tag, false, true, 0); - this.partialBufferLength = 1 << BufferSizePower; - this.partialBuffer = new byte[partialBufferLength]; - this.partialPower = BufferSizePower; - this.partialOffset = 0; - } - else - { - this.WriteHeader(tag, oldFormat, false, length); - } - } - - /// Create a new style partial input stream buffered into chunks. - /// Output stream to write to. - /// Packet tag. - /// Size of chunks making up the packet. - public BcpgOutputStream( - Stream outStr, - PacketTag tag, - long length) - { - if (outStr == null) - throw new ArgumentNullException("outStr"); - - this.outStr = outStr; - this.WriteHeader(tag, false, false, length); - } - - /// Create a new style partial input stream buffered into chunks. - /// Output stream to write to. - /// Packet tag. - /// Buffer to use for collecting chunks. - public BcpgOutputStream( - Stream outStr, - PacketTag tag, - byte[] buffer) - { - if (outStr == null) - throw new ArgumentNullException("outStr"); - - this.outStr = outStr; - this.WriteHeader(tag, false, true, 0); - - this.partialBuffer = buffer; - - uint length = (uint) partialBuffer.Length; - for (partialPower = 0; length != 1; partialPower++) - { - length >>= 1; - } - - if (partialPower > 30) - { - throw new IOException("Buffer cannot be greater than 2^30 in length."); - } - this.partialBufferLength = 1 << partialPower; - this.partialOffset = 0; - } - - private void WriteNewPacketLength( - long bodyLen) - { - if (bodyLen < 192) - { - outStr.WriteByte((byte)bodyLen); - } - else if (bodyLen <= 8383) - { - bodyLen -= 192; - - outStr.WriteByte((byte)(((bodyLen >> 8) & 0xff) + 192)); - outStr.WriteByte((byte)bodyLen); - } - else - { - outStr.WriteByte(0xff); - outStr.WriteByte((byte)(bodyLen >> 24)); - outStr.WriteByte((byte)(bodyLen >> 16)); - outStr.WriteByte((byte)(bodyLen >> 8)); - outStr.WriteByte((byte)bodyLen); - } - } - - private void WriteHeader( - PacketTag tag, - bool oldPackets, - bool partial, - long bodyLen) - { - int hdr = 0x80; - - if (partialBuffer != null) - { - PartialFlush(true); - partialBuffer = null; - } - - if (oldPackets) - { - hdr |= ((int) tag) << 2; - - if (partial) - { - this.WriteByte((byte)(hdr | 0x03)); - } - else - { - if (bodyLen <= 0xff) - { - this.WriteByte((byte) hdr); - this.WriteByte((byte)bodyLen); - } - else if (bodyLen <= 0xffff) - { - this.WriteByte((byte)(hdr | 0x01)); - this.WriteByte((byte)(bodyLen >> 8)); - this.WriteByte((byte)(bodyLen)); - } - else - { - this.WriteByte((byte)(hdr | 0x02)); - this.WriteByte((byte)(bodyLen >> 24)); - this.WriteByte((byte)(bodyLen >> 16)); - this.WriteByte((byte)(bodyLen >> 8)); - this.WriteByte((byte)bodyLen); - } - } - } - else - { - hdr |= 0x40 | (int) tag; - this.WriteByte((byte) hdr); - - if (partial) - { - partialOffset = 0; - } - else - { - this.WriteNewPacketLength(bodyLen); - } - } - } - - private void PartialFlush( - bool isLast) - { - if (isLast) - { - WriteNewPacketLength(partialOffset); - outStr.Write(partialBuffer, 0, partialOffset); - } - else - { - outStr.WriteByte((byte)(0xE0 | partialPower)); - outStr.Write(partialBuffer, 0, partialBufferLength); - } - - partialOffset = 0; - } - - private void WritePartial( - byte b) - { - if (partialOffset == partialBufferLength) - { - PartialFlush(false); - } - - partialBuffer[partialOffset++] = b; - } - - private void WritePartial( - byte[] buffer, - int off, - int len) - { - if (partialOffset == partialBufferLength) - { - PartialFlush(false); - } - - if (len <= (partialBufferLength - partialOffset)) - { - Array.Copy(buffer, off, partialBuffer, partialOffset, len); - partialOffset += len; - } - else - { - int diff = partialBufferLength - partialOffset; - Array.Copy(buffer, off, partialBuffer, partialOffset, diff); - off += diff; - len -= diff; - PartialFlush(false); - while (len > partialBufferLength) - { - Array.Copy(buffer, off, partialBuffer, 0, partialBufferLength); - off += partialBufferLength; - len -= partialBufferLength; - PartialFlush(false); - } - Array.Copy(buffer, off, partialBuffer, 0, len); - partialOffset += len; - } - } - public override void WriteByte( - byte value) - { - if (partialBuffer != null) - { - WritePartial(value); - } - else - { - outStr.WriteByte(value); - } - } - public override void Write( - byte[] buffer, - int offset, - int count) - { - if (partialBuffer != null) - { - WritePartial(buffer, offset, count); - } - else - { - outStr.Write(buffer, offset, count); - } - } - - // Additional helper methods to write primitive types - internal virtual void WriteShort( - short n) - { - this.Write( - (byte)(n >> 8), - (byte)n); - } - internal virtual void WriteInt( - int n) - { - this.Write( - (byte)(n >> 24), - (byte)(n >> 16), - (byte)(n >> 8), - (byte)n); - } - internal virtual void WriteLong( - long n) - { - this.Write( - (byte)(n >> 56), - (byte)(n >> 48), - (byte)(n >> 40), - (byte)(n >> 32), - (byte)(n >> 24), - (byte)(n >> 16), - (byte)(n >> 8), - (byte)n); - } - - public void WritePacket( - ContainedPacket p) - { - p.Encode(this); - } - - internal void WritePacket( - PacketTag tag, - byte[] body, - bool oldFormat) - { - this.WriteHeader(tag, oldFormat, false, body.Length); - this.Write(body); - } - - public void WriteObject( - BcpgObject bcpgObject) - { - bcpgObject.Encode(this); - } - - public void WriteObjects( - params BcpgObject[] v) - { - foreach (BcpgObject o in v) - { - o.Encode(this); - } - } - - /// Flush the underlying stream. - public override void Flush() - { - outStr.Flush(); - } - - /// Finish writing out the current packet without closing the underlying stream. - public void Finish() - { - if (partialBuffer != null) - { - PartialFlush(true); - partialBuffer = null; - } - } - -#if PORTABLE - protected override void Dispose(bool disposing) - { - if (disposing) - { - this.Finish(); - outStr.Flush(); - Platform.Dispose(outStr); - } - base.Dispose(disposing); - } -#else - public override void Close() - { - this.Finish(); - outStr.Flush(); - Platform.Dispose(outStr); - base.Close(); - } -#endif - } -} diff --git a/bc-sharp-crypto/src/bcpg/CompressedDataPacket.cs b/bc-sharp-crypto/src/bcpg/CompressedDataPacket.cs deleted file mode 100644 index 2432825..0000000 --- a/bc-sharp-crypto/src/bcpg/CompressedDataPacket.cs +++ /dev/null @@ -1,24 +0,0 @@ -using System.IO; - -namespace Org.BouncyCastle.Bcpg -{ - /// Generic compressed data object. - public class CompressedDataPacket - : InputStreamPacket - { - private readonly CompressionAlgorithmTag algorithm; - - internal CompressedDataPacket( - BcpgInputStream bcpgIn) - : base(bcpgIn) - { - this.algorithm = (CompressionAlgorithmTag) bcpgIn.ReadByte(); - } - - /// The algorithm tag value. - public CompressionAlgorithmTag Algorithm - { - get { return algorithm; } - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/CompressionAlgorithmTags.cs b/bc-sharp-crypto/src/bcpg/CompressionAlgorithmTags.cs deleted file mode 100644 index 0e45229..0000000 --- a/bc-sharp-crypto/src/bcpg/CompressionAlgorithmTags.cs +++ /dev/null @@ -1,11 +0,0 @@ -namespace Org.BouncyCastle.Bcpg -{ - /// Basic tags for compression algorithms. - public enum CompressionAlgorithmTag - { - Uncompressed = 0, // Uncompressed - Zip = 1, // ZIP (RFC 1951) - ZLib = 2, // ZLIB (RFC 1950) - BZip2 = 3, // BZ2 - } -} diff --git a/bc-sharp-crypto/src/bcpg/ContainedPacket.cs b/bc-sharp-crypto/src/bcpg/ContainedPacket.cs deleted file mode 100644 index e8f387c..0000000 --- a/bc-sharp-crypto/src/bcpg/ContainedPacket.cs +++ /dev/null @@ -1,22 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Bcpg -{ - /// Basic type for a PGP packet. - public abstract class ContainedPacket - : Packet - { - public byte[] GetEncoded() - { - MemoryStream bOut = new MemoryStream(); - BcpgOutputStream pOut = new BcpgOutputStream(bOut); - - pOut.WritePacket(this); - - return bOut.ToArray(); - } - - public abstract void Encode(BcpgOutputStream bcpgOut); - } -} diff --git a/bc-sharp-crypto/src/bcpg/Crc24.cs b/bc-sharp-crypto/src/bcpg/Crc24.cs deleted file mode 100644 index 97846f4..0000000 --- a/bc-sharp-crypto/src/bcpg/Crc24.cs +++ /dev/null @@ -1,46 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Bcpg -{ - public class Crc24 - { - private const int Crc24Init = 0x0b704ce; - private const int Crc24Poly = 0x1864cfb; - - private int crc = Crc24Init; - - public Crc24() - { - } - - public void Update( - int b) - { - crc ^= b << 16; - for (int i = 0; i < 8; i++) - { - crc <<= 1; - if ((crc & 0x1000000) != 0) - { - crc ^= Crc24Poly; - } - } - } - - [Obsolete("Use 'Value' property instead")] - public int GetValue() - { - return crc; - } - - public int Value - { - get { return crc; } - } - - public void Reset() - { - crc = Crc24Init; - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/DsaPublicBcpgKey.cs b/bc-sharp-crypto/src/bcpg/DsaPublicBcpgKey.cs deleted file mode 100644 index 11294cc..0000000 --- a/bc-sharp-crypto/src/bcpg/DsaPublicBcpgKey.cs +++ /dev/null @@ -1,80 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Bcpg -{ - /// Base class for a DSA public key. - public class DsaPublicBcpgKey - : BcpgObject, IBcpgKey - { - private readonly MPInteger p, q, g, y; - - /// The stream to read the packet from. - public DsaPublicBcpgKey( - BcpgInputStream bcpgIn) - { - this.p = new MPInteger(bcpgIn); - this.q = new MPInteger(bcpgIn); - this.g = new MPInteger(bcpgIn); - this.y = new MPInteger(bcpgIn); - } - - public DsaPublicBcpgKey( - BigInteger p, - BigInteger q, - BigInteger g, - BigInteger y) - { - this.p = new MPInteger(p); - this.q = new MPInteger(q); - this.g = new MPInteger(g); - this.y = new MPInteger(y); - } - - /// The format, as a string, always "PGP". - public string Format - { - get { return "PGP"; } - } - - /// Return the standard PGP encoding of the key. - public override byte[] GetEncoded() - { - try - { - return base.GetEncoded(); - } - catch (Exception) - { - return null; - } - } - - public override void Encode( - BcpgOutputStream bcpgOut) - { - bcpgOut.WriteObjects(p, q, g, y); - } - - public BigInteger G - { - get { return g.Value; } - } - - public BigInteger P - { - get { return p.Value; } - } - - public BigInteger Q - { - get { return q.Value; } - } - - public BigInteger Y - { - get { return y.Value; } - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/DsaSecretBcpgKey.cs b/bc-sharp-crypto/src/bcpg/DsaSecretBcpgKey.cs deleted file mode 100644 index 41835d4..0000000 --- a/bc-sharp-crypto/src/bcpg/DsaSecretBcpgKey.cs +++ /dev/null @@ -1,61 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Bcpg -{ - /// Base class for a DSA secret key. - public class DsaSecretBcpgKey - : BcpgObject, IBcpgKey - { - internal MPInteger x; - - /** - * @param in - */ - public DsaSecretBcpgKey( - BcpgInputStream bcpgIn) - { - this.x = new MPInteger(bcpgIn); - } - - public DsaSecretBcpgKey( - BigInteger x) - { - this.x = new MPInteger(x); - } - - /// The format, as a string, always "PGP". - public string Format - { - get { return "PGP"; } - } - - /// Return the standard PGP encoding of the key. - public override byte[] GetEncoded() - { - try - { - return base.GetEncoded(); - } - catch (Exception) - { - return null; - } - } - - public override void Encode( - BcpgOutputStream bcpgOut) - { - bcpgOut.WriteObject(x); - } - - /** - * @return x - */ - public BigInteger X - { - get { return x.Value; } - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/ECDHPublicBCPGKey.cs b/bc-sharp-crypto/src/bcpg/ECDHPublicBCPGKey.cs deleted file mode 100644 index dc225e3..0000000 --- a/bc-sharp-crypto/src/bcpg/ECDHPublicBCPGKey.cs +++ /dev/null @@ -1,102 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Math.EC; - -namespace Org.BouncyCastle.Bcpg -{ - /// Base class for an ECDH Public Key. - public class ECDHPublicBcpgKey - : ECPublicBcpgKey - { - private byte reserved; - private HashAlgorithmTag hashFunctionId; - private SymmetricKeyAlgorithmTag symAlgorithmId; - - /// The stream to read the packet from. - public ECDHPublicBcpgKey( - BcpgInputStream bcpgIn) - : base(bcpgIn) - { - int length = bcpgIn.ReadByte(); - byte[] kdfParameters = new byte[length]; - if (kdfParameters.Length != 3) - throw new InvalidOperationException("kdf parameters size of 3 expected."); - - bcpgIn.ReadFully(kdfParameters); - - reserved = kdfParameters[0]; - hashFunctionId = (HashAlgorithmTag)kdfParameters[1]; - symAlgorithmId = (SymmetricKeyAlgorithmTag)kdfParameters[2]; - - VerifyHashAlgorithm(); - VerifySymmetricKeyAlgorithm(); - } - - public ECDHPublicBcpgKey( - DerObjectIdentifier oid, - ECPoint point, - HashAlgorithmTag hashAlgorithm, - SymmetricKeyAlgorithmTag symmetricKeyAlgorithm) - : base(oid, point) - { - reserved = 1; - hashFunctionId = hashAlgorithm; - symAlgorithmId = symmetricKeyAlgorithm; - - VerifyHashAlgorithm(); - VerifySymmetricKeyAlgorithm(); - } - - public virtual byte Reserved - { - get { return reserved; } - } - - public virtual HashAlgorithmTag HashAlgorithm - { - get { return hashFunctionId; } - } - - public virtual SymmetricKeyAlgorithmTag SymmetricKeyAlgorithm - { - get { return symAlgorithmId; } - } - - public override void Encode( - BcpgOutputStream bcpgOut) - { - base.Encode(bcpgOut); - bcpgOut.WriteByte(0x3); - bcpgOut.WriteByte(reserved); - bcpgOut.WriteByte((byte)hashFunctionId); - bcpgOut.WriteByte((byte)symAlgorithmId); - } - - private void VerifyHashAlgorithm() - { - switch ((HashAlgorithmTag)hashFunctionId) - { - case HashAlgorithmTag.Sha256: - case HashAlgorithmTag.Sha384: - case HashAlgorithmTag.Sha512: - break; - default: - throw new InvalidOperationException("Hash algorithm must be SHA-256 or stronger."); - } - } - - private void VerifySymmetricKeyAlgorithm() - { - switch ((SymmetricKeyAlgorithmTag)symAlgorithmId) - { - case SymmetricKeyAlgorithmTag.Aes128: - case SymmetricKeyAlgorithmTag.Aes192: - case SymmetricKeyAlgorithmTag.Aes256: - break; - default: - throw new InvalidOperationException("Symmetric key algorithm must be AES-128 or stronger."); - } - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/ECDsaPublicBCPGKey.cs b/bc-sharp-crypto/src/bcpg/ECDsaPublicBCPGKey.cs deleted file mode 100644 index 5f0c8ac..0000000 --- a/bc-sharp-crypto/src/bcpg/ECDsaPublicBCPGKey.cs +++ /dev/null @@ -1,34 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC; - -namespace Org.BouncyCastle.Bcpg -{ - /// Base class for an ECDSA Public Key. - public class ECDsaPublicBcpgKey - : ECPublicBcpgKey - { - /// The stream to read the packet from. - protected internal ECDsaPublicBcpgKey( - BcpgInputStream bcpgIn) - : base(bcpgIn) - { - } - - public ECDsaPublicBcpgKey( - DerObjectIdentifier oid, - ECPoint point) - : base(oid, point) - { - } - - public ECDsaPublicBcpgKey( - DerObjectIdentifier oid, - BigInteger encodedPoint) - : base(oid, encodedPoint) - { - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/ECPublicBCPGKey.cs b/bc-sharp-crypto/src/bcpg/ECPublicBCPGKey.cs deleted file mode 100644 index f328f9d..0000000 --- a/bc-sharp-crypto/src/bcpg/ECPublicBCPGKey.cs +++ /dev/null @@ -1,97 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC; - -namespace Org.BouncyCastle.Bcpg -{ - /// Base class for an EC Public Key. - public abstract class ECPublicBcpgKey - : BcpgObject, IBcpgKey - { - internal DerObjectIdentifier oid; - internal BigInteger point; - - /// The stream to read the packet from. - protected ECPublicBcpgKey( - BcpgInputStream bcpgIn) - { - this.oid = DerObjectIdentifier.GetInstance(Asn1Object.FromByteArray(ReadBytesOfEncodedLength(bcpgIn))); - this.point = new MPInteger(bcpgIn).Value; - } - - protected ECPublicBcpgKey( - DerObjectIdentifier oid, - ECPoint point) - { - this.point = new BigInteger(1, point.GetEncoded()); - this.oid = oid; - } - - protected ECPublicBcpgKey( - DerObjectIdentifier oid, - BigInteger encodedPoint) - { - this.point = encodedPoint; - this.oid = oid; - } - - /// The format, as a string, always "PGP". - public string Format - { - get { return "PGP"; } - } - - /// Return the standard PGP encoding of the key. - public override byte[] GetEncoded() - { - try - { - return base.GetEncoded(); - } - catch (IOException) - { - return null; - } - } - - public override void Encode( - BcpgOutputStream bcpgOut) - { - byte[] oid = this.oid.GetEncoded(); - bcpgOut.Write(oid, 1, oid.Length - 1); - - MPInteger point = new MPInteger(this.point); - bcpgOut.WriteObject(point); - } - - public virtual BigInteger EncodedPoint - { - get { return point; } - } - - public virtual DerObjectIdentifier CurveOid - { - get { return oid; } - } - - protected static byte[] ReadBytesOfEncodedLength( - BcpgInputStream bcpgIn) - { - int length = bcpgIn.ReadByte(); - if (length == 0 || length == 0xFF) - { - throw new IOException("future extensions not yet implemented."); - } - - byte[] buffer = new byte[length + 2]; - bcpgIn.ReadFully(buffer, 2, buffer.Length - 2); - buffer[0] = (byte)0x06; - buffer[1] = (byte)length; - - return buffer; - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/ECSecretBCPGKey.cs b/bc-sharp-crypto/src/bcpg/ECSecretBCPGKey.cs deleted file mode 100644 index 22e0a34..0000000 --- a/bc-sharp-crypto/src/bcpg/ECSecretBCPGKey.cs +++ /dev/null @@ -1,56 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Bcpg -{ - /// Base class for an EC Secret Key. - public class ECSecretBcpgKey - : BcpgObject, IBcpgKey - { - internal MPInteger x; - - public ECSecretBcpgKey( - BcpgInputStream bcpgIn) - { - this.x = new MPInteger(bcpgIn); - } - - public ECSecretBcpgKey( - BigInteger x) - { - this.x = new MPInteger(x); - } - - /// The format, as a string, always "PGP". - public string Format - { - get { return "PGP"; } - } - - /// Return the standard PGP encoding of the key. - public override byte[] GetEncoded() - { - try - { - return base.GetEncoded(); - } - catch (Exception) - { - return null; - } - } - - public override void Encode( - BcpgOutputStream bcpgOut) - { - bcpgOut.WriteObject(x); - } - - public virtual BigInteger X - { - get { return x.Value; } - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/ElGamalPublicBcpgKey.cs b/bc-sharp-crypto/src/bcpg/ElGamalPublicBcpgKey.cs deleted file mode 100644 index 808e427..0000000 --- a/bc-sharp-crypto/src/bcpg/ElGamalPublicBcpgKey.cs +++ /dev/null @@ -1,71 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Bcpg -{ - /// Base class for an ElGamal public key. - public class ElGamalPublicBcpgKey - : BcpgObject, IBcpgKey - { - internal MPInteger p, g, y; - - public ElGamalPublicBcpgKey( - BcpgInputStream bcpgIn) - { - this.p = new MPInteger(bcpgIn); - this.g = new MPInteger(bcpgIn); - this.y = new MPInteger(bcpgIn); - } - - public ElGamalPublicBcpgKey( - BigInteger p, - BigInteger g, - BigInteger y) - { - this.p = new MPInteger(p); - this.g = new MPInteger(g); - this.y = new MPInteger(y); - } - - /// The format, as a string, always "PGP". - public string Format - { - get { return "PGP"; } - } - - /// Return the standard PGP encoding of the key. - public override byte[] GetEncoded() - { - try - { - return base.GetEncoded(); - } - catch (Exception) - { - return null; - } - } - - public BigInteger P - { - get { return p.Value; } - } - - public BigInteger G - { - get { return g.Value; } - } - - public BigInteger Y - { - get { return y.Value; } - } - - public override void Encode( - BcpgOutputStream bcpgOut) - { - bcpgOut.WriteObjects(p, g, y); - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/ElGamalSecretBcpgKey.cs b/bc-sharp-crypto/src/bcpg/ElGamalSecretBcpgKey.cs deleted file mode 100644 index 2d95b29..0000000 --- a/bc-sharp-crypto/src/bcpg/ElGamalSecretBcpgKey.cs +++ /dev/null @@ -1,61 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Bcpg -{ - /// Base class for an ElGamal secret key. - public class ElGamalSecretBcpgKey - : BcpgObject, IBcpgKey - { - internal MPInteger x; - - /** - * @param in - */ - public ElGamalSecretBcpgKey( - BcpgInputStream bcpgIn) - { - this.x = new MPInteger(bcpgIn); - } - - /** - * @param x - */ - public ElGamalSecretBcpgKey( - BigInteger x) - { - this.x = new MPInteger(x); - } - - /// The format, as a string, always "PGP". - public string Format - { - get { return "PGP"; } - } - - public BigInteger X - { - get { return x.Value; } - } - - /// Return the standard PGP encoding of the key. - public override byte[] GetEncoded() - { - try - { - return base.GetEncoded(); - } - catch (Exception) - { - return null; - } - } - - public override void Encode( - BcpgOutputStream bcpgOut) - { - bcpgOut.WriteObject(x); - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/ExperimentalPacket.cs b/bc-sharp-crypto/src/bcpg/ExperimentalPacket.cs deleted file mode 100644 index 36a254b..0000000 --- a/bc-sharp-crypto/src/bcpg/ExperimentalPacket.cs +++ /dev/null @@ -1,38 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Bcpg -{ - /// Basic packet for an experimental packet. - public class ExperimentalPacket - : ContainedPacket //, PublicKeyAlgorithmTag - { - private readonly PacketTag tag; - private readonly byte[] contents; - - internal ExperimentalPacket( - PacketTag tag, - BcpgInputStream bcpgIn) - { - this.tag = tag; - - this.contents = bcpgIn.ReadAll(); - } - - public PacketTag Tag - { - get { return tag; } - } - - public byte[] GetContents() - { - return (byte[]) contents.Clone(); - } - - public override void Encode( - BcpgOutputStream bcpgOut) - { - bcpgOut.WritePacket(tag, contents, true); - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/HashAlgorithmTags.cs b/bc-sharp-crypto/src/bcpg/HashAlgorithmTags.cs deleted file mode 100644 index 96c0091..0000000 --- a/bc-sharp-crypto/src/bcpg/HashAlgorithmTags.cs +++ /dev/null @@ -1,19 +0,0 @@ -namespace Org.BouncyCastle.Bcpg -{ - /// Basic tags for hash algorithms. - public enum HashAlgorithmTag - { - MD5 = 1, // MD5 - Sha1 = 2, // SHA-1 - RipeMD160 = 3, // RIPE-MD/160 - DoubleSha = 4, // Reserved for double-width SHA (experimental) - MD2 = 5, // MD2 - Tiger192 = 6, // Reserved for TIGER/192 - Haval5pass160 = 7, // Reserved for HAVAL (5 pass, 160-bit) - - Sha256 = 8, // SHA-256 - Sha384 = 9, // SHA-384 - Sha512 = 10, // SHA-512 - Sha224 = 11, // SHA-224 - } -} diff --git a/bc-sharp-crypto/src/bcpg/IBcpgKey.cs b/bc-sharp-crypto/src/bcpg/IBcpgKey.cs deleted file mode 100644 index 2754617..0000000 --- a/bc-sharp-crypto/src/bcpg/IBcpgKey.cs +++ /dev/null @@ -1,16 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Bcpg -{ - /// Base interface for a PGP key. - public interface IBcpgKey - { - /// - /// The base format for this key - in the case of the symmetric keys it will generally - /// be raw indicating that the key is just a straight byte representation, for an asymmetric - /// key the format will be PGP, indicating the key is a string of MPIs encoded in PGP format. - /// - /// "RAW" or "PGP". - string Format { get; } - } -} diff --git a/bc-sharp-crypto/src/bcpg/InputStreamPacket.cs b/bc-sharp-crypto/src/bcpg/InputStreamPacket.cs deleted file mode 100644 index c45efab..0000000 --- a/bc-sharp-crypto/src/bcpg/InputStreamPacket.cs +++ /dev/null @@ -1,20 +0,0 @@ -namespace Org.BouncyCastle.Bcpg -{ - public class InputStreamPacket - : Packet - { - private readonly BcpgInputStream bcpgIn; - - public InputStreamPacket( - BcpgInputStream bcpgIn) - { - this.bcpgIn = bcpgIn; - } - - /// Note: you can only read from this once... - public BcpgInputStream GetInputStream() - { - return bcpgIn; - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/LiteralDataPacket.cs b/bc-sharp-crypto/src/bcpg/LiteralDataPacket.cs deleted file mode 100644 index 63a2c6d..0000000 --- a/bc-sharp-crypto/src/bcpg/LiteralDataPacket.cs +++ /dev/null @@ -1,57 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Bcpg -{ - /// Generic literal data packet. - public class LiteralDataPacket - : InputStreamPacket - { - private int format; - private byte[] fileName; - private long modDate; - - internal LiteralDataPacket( - BcpgInputStream bcpgIn) - : base(bcpgIn) - { - format = bcpgIn.ReadByte(); - int len = bcpgIn.ReadByte(); - - fileName = new byte[len]; - for (int i = 0; i != len; ++i) - { - fileName[i] = (byte)bcpgIn.ReadByte(); - } - - modDate = (((uint)bcpgIn.ReadByte() << 24) - | ((uint)bcpgIn.ReadByte() << 16) - | ((uint)bcpgIn.ReadByte() << 8) - | (uint)bcpgIn.ReadByte()) * 1000L; - } - - /// The format tag value. - public int Format - { - get { return format; } - } - - /// The modification time of the file in milli-seconds (since Jan 1, 1970 UTC) - public long ModificationTime - { - get { return modDate; } - } - - public string FileName - { - get { return Strings.FromUtf8ByteArray(fileName); } - } - - public byte[] GetRawFileName() - { - return Arrays.Clone(fileName); - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/MPInteger.cs b/bc-sharp-crypto/src/bcpg/MPInteger.cs deleted file mode 100644 index 4414072..0000000 --- a/bc-sharp-crypto/src/bcpg/MPInteger.cs +++ /dev/null @@ -1,59 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Bcpg -{ - /// A multiple precision integer - public class MPInteger - : BcpgObject - { - private readonly BigInteger val; - - public MPInteger( - BcpgInputStream bcpgIn) - { - if (bcpgIn == null) - throw new ArgumentNullException("bcpgIn"); - - int length = (bcpgIn.ReadByte() << 8) | bcpgIn.ReadByte(); - byte[] bytes = new byte[(length + 7) / 8]; - - bcpgIn.ReadFully(bytes); - - this.val = new BigInteger(1, bytes); - } - - public MPInteger( - BigInteger val) - { - if (val == null) - throw new ArgumentNullException("val"); - if (val.SignValue < 0) - throw new ArgumentException("Values must be positive", "val"); - - this.val = val; - } - - public BigInteger Value - { - get { return val; } - } - - public override void Encode( - BcpgOutputStream bcpgOut) - { - bcpgOut.WriteShort((short) val.BitLength); - bcpgOut.Write(val.ToByteArrayUnsigned()); - } - - internal static void Encode( - BcpgOutputStream bcpgOut, - BigInteger val) - { - bcpgOut.WriteShort((short) val.BitLength); - bcpgOut.Write(val.ToByteArrayUnsigned()); - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/MarkerPacket.cs b/bc-sharp-crypto/src/bcpg/MarkerPacket.cs deleted file mode 100644 index 4dc4b5a..0000000 --- a/bc-sharp-crypto/src/bcpg/MarkerPacket.cs +++ /dev/null @@ -1,24 +0,0 @@ -using System.IO; - -namespace Org.BouncyCastle.Bcpg -{ - /// Basic type for a marker packet. - public class MarkerPacket - : ContainedPacket - { - // "PGP" - byte[] marker = { (byte)0x50, (byte)0x47, (byte)0x50 }; - - public MarkerPacket( - BcpgInputStream bcpgIn) - { - bcpgIn.ReadFully(marker); - } - - public override void Encode( - BcpgOutputStream bcpgOut) - { - bcpgOut.WritePacket(PacketTag.Marker, marker, true); - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/ModDetectionCodePacket.cs b/bc-sharp-crypto/src/bcpg/ModDetectionCodePacket.cs deleted file mode 100644 index 6bb2364..0000000 --- a/bc-sharp-crypto/src/bcpg/ModDetectionCodePacket.cs +++ /dev/null @@ -1,42 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Bcpg -{ - /// Basic packet for a modification detection code packet. - public class ModDetectionCodePacket - : ContainedPacket - { - private readonly byte[] digest; - - internal ModDetectionCodePacket( - BcpgInputStream bcpgIn) - { - if (bcpgIn == null) - throw new ArgumentNullException("bcpgIn"); - - this.digest = new byte[20]; - bcpgIn.ReadFully(this.digest); - } - - public ModDetectionCodePacket( - byte[] digest) - { - if (digest == null) - throw new ArgumentNullException("digest"); - - this.digest = (byte[]) digest.Clone(); - } - - public byte[] GetDigest() - { - return (byte[]) digest.Clone(); - } - - public override void Encode( - BcpgOutputStream bcpgOut) - { - bcpgOut.WritePacket(PacketTag.ModificationDetectionCode, digest, false); - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/OnePassSignaturePacket.cs b/bc-sharp-crypto/src/bcpg/OnePassSignaturePacket.cs deleted file mode 100644 index b67df0a..0000000 --- a/bc-sharp-crypto/src/bcpg/OnePassSignaturePacket.cs +++ /dev/null @@ -1,93 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Bcpg -{ - /// Generic signature object - public class OnePassSignaturePacket - : ContainedPacket - { - private int version; - private int sigType; - private HashAlgorithmTag hashAlgorithm; - private PublicKeyAlgorithmTag keyAlgorithm; - private long keyId; - private int nested; - - internal OnePassSignaturePacket( - BcpgInputStream bcpgIn) - { - version = bcpgIn.ReadByte(); - sigType = bcpgIn.ReadByte(); - hashAlgorithm = (HashAlgorithmTag) bcpgIn.ReadByte(); - keyAlgorithm = (PublicKeyAlgorithmTag) bcpgIn.ReadByte(); - - keyId |= (long)bcpgIn.ReadByte() << 56; - keyId |= (long)bcpgIn.ReadByte() << 48; - keyId |= (long)bcpgIn.ReadByte() << 40; - keyId |= (long)bcpgIn.ReadByte() << 32; - keyId |= (long)bcpgIn.ReadByte() << 24; - keyId |= (long)bcpgIn.ReadByte() << 16; - keyId |= (long)bcpgIn.ReadByte() << 8; - keyId |= (uint)bcpgIn.ReadByte(); - - nested = bcpgIn.ReadByte(); - } - - public OnePassSignaturePacket( - int sigType, - HashAlgorithmTag hashAlgorithm, - PublicKeyAlgorithmTag keyAlgorithm, - long keyId, - bool isNested) - { - this.version = 3; - this.sigType = sigType; - this.hashAlgorithm = hashAlgorithm; - this.keyAlgorithm = keyAlgorithm; - this.keyId = keyId; - this.nested = (isNested) ? 0 : 1; - } - - public int SignatureType - { - get { return sigType; } - } - - /// The encryption algorithm tag. - public PublicKeyAlgorithmTag KeyAlgorithm - { - get { return keyAlgorithm; } - } - - /// The hash algorithm tag. - public HashAlgorithmTag HashAlgorithm - { - get { return hashAlgorithm; } - } - - public long KeyId - { - get { return keyId; } - } - - public override void Encode( - BcpgOutputStream bcpgOut) - { - MemoryStream bOut = new MemoryStream(); - BcpgOutputStream pOut = new BcpgOutputStream(bOut); - - pOut.Write( - (byte) version, - (byte) sigType, - (byte) hashAlgorithm, - (byte) keyAlgorithm); - - pOut.WriteLong(keyId); - - pOut.WriteByte((byte) nested); - - bcpgOut.WritePacket(PacketTag.OnePassSignature, bOut.ToArray(), true); - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/OutputStreamPacket.cs b/bc-sharp-crypto/src/bcpg/OutputStreamPacket.cs deleted file mode 100644 index aa8316d..0000000 --- a/bc-sharp-crypto/src/bcpg/OutputStreamPacket.cs +++ /dev/null @@ -1,24 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Bcpg -{ - public abstract class OutputStreamPacket - { - private readonly BcpgOutputStream bcpgOut; - - internal OutputStreamPacket( - BcpgOutputStream bcpgOut) - { - if (bcpgOut == null) - throw new ArgumentNullException("bcpgOut"); - - this.bcpgOut = bcpgOut; - } - - public abstract BcpgOutputStream Open(); - - public abstract void Close(); - } -} - diff --git a/bc-sharp-crypto/src/bcpg/Packet.cs b/bc-sharp-crypto/src/bcpg/Packet.cs deleted file mode 100644 index 83f6d1f..0000000 --- a/bc-sharp-crypto/src/bcpg/Packet.cs +++ /dev/null @@ -1,7 +0,0 @@ -namespace Org.BouncyCastle.Bcpg -{ - public class Packet - //: PacketTag - { - } -} diff --git a/bc-sharp-crypto/src/bcpg/PacketTags.cs b/bc-sharp-crypto/src/bcpg/PacketTags.cs deleted file mode 100644 index 5a53d4e..0000000 --- a/bc-sharp-crypto/src/bcpg/PacketTags.cs +++ /dev/null @@ -1,30 +0,0 @@ -namespace Org.BouncyCastle.Bcpg -{ - /// Basic PGP packet tag types. - public enum PacketTag - { - Reserved = 0, // Reserved - a packet tag must not have this value - PublicKeyEncryptedSession = 1, // Public-Key Encrypted Session Key Packet - Signature = 2, // Signature Packet - SymmetricKeyEncryptedSessionKey = 3, // Symmetric-Key Encrypted Session Key Packet - OnePassSignature = 4, // One-Pass Signature Packet - SecretKey = 5, // Secret Key Packet - PublicKey = 6, // Public Key Packet - SecretSubkey = 7, // Secret Subkey Packet - CompressedData = 8, // Compressed Data Packet - SymmetricKeyEncrypted = 9, // Symmetrically Encrypted Data Packet - Marker = 10, // Marker Packet - LiteralData = 11, // Literal Data Packet - Trust = 12, // Trust Packet - UserId = 13, // User ID Packet - PublicSubkey = 14, // Public Subkey Packet - UserAttribute = 17, // User attribute - SymmetricEncryptedIntegrityProtected = 18, // Symmetric encrypted, integrity protected - ModificationDetectionCode = 19, // Modification detection code - - Experimental1 = 60, // Private or Experimental Values - Experimental2 = 61, - Experimental3 = 62, - Experimental4 = 63 - } -} diff --git a/bc-sharp-crypto/src/bcpg/PublicKeyAlgorithmTags.cs b/bc-sharp-crypto/src/bcpg/PublicKeyAlgorithmTags.cs deleted file mode 100644 index 9e30b54..0000000 --- a/bc-sharp-crypto/src/bcpg/PublicKeyAlgorithmTags.cs +++ /dev/null @@ -1,32 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Bcpg -{ - /// Public Key Algorithm tag numbers. - public enum PublicKeyAlgorithmTag - { - RsaGeneral = 1, // RSA (Encrypt or Sign) - RsaEncrypt = 2, // RSA Encrypt-Only - RsaSign = 3, // RSA Sign-Only - ElGamalEncrypt = 16, // Elgamal (Encrypt-Only), see [ELGAMAL] - Dsa = 17, // DSA (Digital Signature Standard) - [Obsolete("Use 'ECDH' instead")] - EC = 18, // Reserved for Elliptic Curve - ECDH = 18, // Reserved for Elliptic Curve (actual algorithm name) - ECDsa = 19, // Reserved for ECDSA - ElGamalGeneral = 20, // Elgamal (Encrypt or Sign) - DiffieHellman = 21, // Reserved for Diffie-Hellman (X9.42, as defined for IETF-S/MIME) - - Experimental_1 = 100, - Experimental_2 = 101, - Experimental_3 = 102, - Experimental_4 = 103, - Experimental_5 = 104, - Experimental_6 = 105, - Experimental_7 = 106, - Experimental_8 = 107, - Experimental_9 = 108, - Experimental_10 = 109, - Experimental_11 = 110, - } -} diff --git a/bc-sharp-crypto/src/bcpg/PublicKeyEncSessionPacket.cs b/bc-sharp-crypto/src/bcpg/PublicKeyEncSessionPacket.cs deleted file mode 100644 index 831b5a1..0000000 --- a/bc-sharp-crypto/src/bcpg/PublicKeyEncSessionPacket.cs +++ /dev/null @@ -1,115 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Bcpg -{ - /// Basic packet for a PGP public key. - public class PublicKeyEncSessionPacket - : ContainedPacket //, PublicKeyAlgorithmTag - { - private int version; - private long keyId; - private PublicKeyAlgorithmTag algorithm; - private byte[][] data; - - internal PublicKeyEncSessionPacket( - BcpgInputStream bcpgIn) - { - version = bcpgIn.ReadByte(); - - keyId |= (long)bcpgIn.ReadByte() << 56; - keyId |= (long)bcpgIn.ReadByte() << 48; - keyId |= (long)bcpgIn.ReadByte() << 40; - keyId |= (long)bcpgIn.ReadByte() << 32; - keyId |= (long)bcpgIn.ReadByte() << 24; - keyId |= (long)bcpgIn.ReadByte() << 16; - keyId |= (long)bcpgIn.ReadByte() << 8; - keyId |= (uint)bcpgIn.ReadByte(); - - algorithm = (PublicKeyAlgorithmTag) bcpgIn.ReadByte(); - - switch ((PublicKeyAlgorithmTag) algorithm) - { - case PublicKeyAlgorithmTag.RsaEncrypt: - case PublicKeyAlgorithmTag.RsaGeneral: - data = new byte[][]{ new MPInteger(bcpgIn).GetEncoded() }; - break; - case PublicKeyAlgorithmTag.ElGamalEncrypt: - case PublicKeyAlgorithmTag.ElGamalGeneral: - MPInteger p = new MPInteger(bcpgIn); - MPInteger g = new MPInteger(bcpgIn); - data = new byte[][]{ - p.GetEncoded(), - g.GetEncoded(), - }; - break; - case PublicKeyAlgorithmTag.ECDH: - data = new byte[][]{ Streams.ReadAll(bcpgIn) }; - break; - default: - throw new IOException("unknown PGP public key algorithm encountered"); - } - } - - public PublicKeyEncSessionPacket( - long keyId, - PublicKeyAlgorithmTag algorithm, - byte[][] data) - { - this.version = 3; - this.keyId = keyId; - this.algorithm = algorithm; - this.data = new byte[data.Length][]; - for (int i = 0; i < data.Length; ++i) - { - this.data[i] = Arrays.Clone(data[i]); - } - } - - public int Version - { - get { return version; } - } - - public long KeyId - { - get { return keyId; } - } - - public PublicKeyAlgorithmTag Algorithm - { - get { return algorithm; } - } - - public byte[][] GetEncSessionKey() - { - return data; - } - - public override void Encode( - BcpgOutputStream bcpgOut) - { - MemoryStream bOut = new MemoryStream(); - BcpgOutputStream pOut = new BcpgOutputStream(bOut); - - pOut.WriteByte((byte) version); - - pOut.WriteLong(keyId); - - pOut.WriteByte((byte)algorithm); - - for (int i = 0; i < data.Length; ++i) - { - pOut.Write(data[i]); - } - - Platform.Dispose(pOut); - - bcpgOut.WritePacket(PacketTag.PublicKeyEncryptedSession , bOut.ToArray(), true); - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/PublicKeyPacket.cs b/bc-sharp-crypto/src/bcpg/PublicKeyPacket.cs deleted file mode 100644 index bbed941..0000000 --- a/bc-sharp-crypto/src/bcpg/PublicKeyPacket.cs +++ /dev/null @@ -1,121 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities.Date; - -namespace Org.BouncyCastle.Bcpg -{ - /// Basic packet for a PGP public key. - public class PublicKeyPacket - : ContainedPacket //, PublicKeyAlgorithmTag - { - private int version; - private long time; - private int validDays; - private PublicKeyAlgorithmTag algorithm; - private IBcpgKey key; - - internal PublicKeyPacket( - BcpgInputStream bcpgIn) - { - version = bcpgIn.ReadByte(); - - time = ((uint)bcpgIn.ReadByte() << 24) | ((uint)bcpgIn.ReadByte() << 16) - | ((uint)bcpgIn.ReadByte() << 8) | (uint)bcpgIn.ReadByte(); - - if (version <= 3) - { - validDays = (bcpgIn.ReadByte() << 8) | bcpgIn.ReadByte(); - } - - algorithm = (PublicKeyAlgorithmTag) bcpgIn.ReadByte(); - - switch ((PublicKeyAlgorithmTag) algorithm) - { - case PublicKeyAlgorithmTag.RsaEncrypt: - case PublicKeyAlgorithmTag.RsaGeneral: - case PublicKeyAlgorithmTag.RsaSign: - key = new RsaPublicBcpgKey(bcpgIn); - break; - case PublicKeyAlgorithmTag.Dsa: - key = new DsaPublicBcpgKey(bcpgIn); - break; - case PublicKeyAlgorithmTag.ElGamalEncrypt: - case PublicKeyAlgorithmTag.ElGamalGeneral: - key = new ElGamalPublicBcpgKey(bcpgIn); - break; - case PublicKeyAlgorithmTag.ECDH: - key = new ECDHPublicBcpgKey(bcpgIn); - break; - case PublicKeyAlgorithmTag.ECDsa: - key = new ECDsaPublicBcpgKey(bcpgIn); - break; - default: - throw new IOException("unknown PGP public key algorithm encountered"); - } - } - - /// Construct a version 4 public key packet. - public PublicKeyPacket( - PublicKeyAlgorithmTag algorithm, - DateTime time, - IBcpgKey key) - { - this.version = 4; - this.time = DateTimeUtilities.DateTimeToUnixMs(time) / 1000L; - this.algorithm = algorithm; - this.key = key; - } - - public virtual int Version - { - get { return version; } - } - - public virtual PublicKeyAlgorithmTag Algorithm - { - get { return algorithm; } - } - - public virtual int ValidDays - { - get { return validDays; } - } - - public virtual DateTime GetTime() - { - return DateTimeUtilities.UnixMsToDateTime(time * 1000L); - } - - public virtual IBcpgKey Key - { - get { return key; } - } - - public virtual byte[] GetEncodedContents() - { - MemoryStream bOut = new MemoryStream(); - BcpgOutputStream pOut = new BcpgOutputStream(bOut); - - pOut.WriteByte((byte) version); - pOut.WriteInt((int) time); - - if (version <= 3) - { - pOut.WriteShort((short) validDays); - } - - pOut.WriteByte((byte) algorithm); - - pOut.WriteObject((BcpgObject)key); - - return bOut.ToArray(); - } - - public override void Encode( - BcpgOutputStream bcpgOut) - { - bcpgOut.WritePacket(PacketTag.PublicKey, GetEncodedContents(), true); - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/PublicSubkeyPacket.cs b/bc-sharp-crypto/src/bcpg/PublicSubkeyPacket.cs deleted file mode 100644 index 6e1aeda..0000000 --- a/bc-sharp-crypto/src/bcpg/PublicSubkeyPacket.cs +++ /dev/null @@ -1,30 +0,0 @@ -using System; -using System.IO; -namespace Org.BouncyCastle.Bcpg -{ - /// Basic packet for a PGP public subkey - public class PublicSubkeyPacket - : PublicKeyPacket - { - internal PublicSubkeyPacket( - BcpgInputStream bcpgIn) - : base(bcpgIn) - { - } - - /// Construct a version 4 public subkey packet. - public PublicSubkeyPacket( - PublicKeyAlgorithmTag algorithm, - DateTime time, - IBcpgKey key) - : base(algorithm, time, key) - { - } - - public override void Encode( - BcpgOutputStream bcpgOut) - { - bcpgOut.WritePacket(PacketTag.PublicSubkey, GetEncodedContents(), true); - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/RsaPublicBcpgKey.cs b/bc-sharp-crypto/src/bcpg/RsaPublicBcpgKey.cs deleted file mode 100644 index fd2313c..0000000 --- a/bc-sharp-crypto/src/bcpg/RsaPublicBcpgKey.cs +++ /dev/null @@ -1,66 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Bcpg -{ - /// Base class for an RSA public key. - public class RsaPublicBcpgKey - : BcpgObject, IBcpgKey - { - private readonly MPInteger n, e; - - /// Construct an RSA public key from the passed in stream. - public RsaPublicBcpgKey( - BcpgInputStream bcpgIn) - { - this.n = new MPInteger(bcpgIn); - this.e = new MPInteger(bcpgIn); - } - - /// The modulus. - /// The public exponent. - public RsaPublicBcpgKey( - BigInteger n, - BigInteger e) - { - this.n = new MPInteger(n); - this.e = new MPInteger(e); - } - - public BigInteger PublicExponent - { - get { return e.Value; } - } - - public BigInteger Modulus - { - get { return n.Value; } - } - - /// The format, as a string, always "PGP". - public string Format - { - get { return "PGP"; } - } - - /// Return the standard PGP encoding of the key. - public override byte[] GetEncoded() - { - try - { - return base.GetEncoded(); - } - catch (Exception) - { - return null; - } - } - - public override void Encode( - BcpgOutputStream bcpgOut) - { - bcpgOut.WriteObjects(n, e); - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/RsaSecretBcpgKey.cs b/bc-sharp-crypto/src/bcpg/RsaSecretBcpgKey.cs deleted file mode 100644 index 5c04d9f..0000000 --- a/bc-sharp-crypto/src/bcpg/RsaSecretBcpgKey.cs +++ /dev/null @@ -1,114 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Bcpg -{ - /// Base class for an RSA secret (or priate) key. - public class RsaSecretBcpgKey - : BcpgObject, IBcpgKey - { - private readonly MPInteger d, p, q, u; - private readonly BigInteger expP, expQ, crt; - - public RsaSecretBcpgKey( - BcpgInputStream bcpgIn) - { - this.d = new MPInteger(bcpgIn); - this.p = new MPInteger(bcpgIn); - this.q = new MPInteger(bcpgIn); - this.u = new MPInteger(bcpgIn); - - this.expP = d.Value.Remainder(p.Value.Subtract(BigInteger.One)); - this.expQ = d.Value.Remainder(q.Value.Subtract(BigInteger.One)); - this.crt = q.Value.ModInverse(p.Value); - } - - public RsaSecretBcpgKey( - BigInteger d, - BigInteger p, - BigInteger q) - { - // PGP requires (p < q) - int cmp = p.CompareTo(q); - if (cmp >= 0) - { - if (cmp == 0) - throw new ArgumentException("p and q cannot be equal"); - - BigInteger tmp = p; - p = q; - q = tmp; - } - - this.d = new MPInteger(d); - this.p = new MPInteger(p); - this.q = new MPInteger(q); - this.u = new MPInteger(p.ModInverse(q)); - - this.expP = d.Remainder(p.Subtract(BigInteger.One)); - this.expQ = d.Remainder(q.Subtract(BigInteger.One)); - this.crt = q.ModInverse(p); - } - - public BigInteger Modulus - { - get { return p.Value.Multiply(q.Value); } - } - - public BigInteger PrivateExponent - { - get { return d.Value; } - } - - public BigInteger PrimeP - { - get { return p.Value; } - } - - public BigInteger PrimeQ - { - get { return q.Value; } - } - - public BigInteger PrimeExponentP - { - get { return expP; } - } - - public BigInteger PrimeExponentQ - { - get { return expQ; } - } - - public BigInteger CrtCoefficient - { - get { return crt; } - } - - /// The format, as a string, always "PGP". - public string Format - { - get { return "PGP"; } - } - - /// Return the standard PGP encoding of the key. - public override byte[] GetEncoded() - { - try - { - return base.GetEncoded(); - } - catch (Exception) - { - return null; - } - } - - public override void Encode( - BcpgOutputStream bcpgOut) - { - bcpgOut.WriteObjects(d, p, q, u); - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/S2k.cs b/bc-sharp-crypto/src/bcpg/S2k.cs deleted file mode 100644 index 33fd792..0000000 --- a/bc-sharp-crypto/src/bcpg/S2k.cs +++ /dev/null @@ -1,149 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Bcpg -{ - /// The string to key specifier class. - public class S2k - : BcpgObject - { - private const int ExpBias = 6; - - public const int Simple = 0; - public const int Salted = 1; - public const int SaltedAndIterated = 3; - public const int GnuDummyS2K = 101; - public const int GnuProtectionModeNoPrivateKey = 1; - public const int GnuProtectionModeDivertToCard = 2; - - internal int type; - internal HashAlgorithmTag algorithm; - internal byte[] iv; - internal int itCount = -1; - internal int protectionMode = -1; - - internal S2k( - Stream inStr) - { - type = inStr.ReadByte(); - algorithm = (HashAlgorithmTag) inStr.ReadByte(); - - // - // if this happens we have a dummy-S2k packet. - // - if (type != GnuDummyS2K) - { - if (type != 0) - { - iv = new byte[8]; - if (Streams.ReadFully(inStr, iv, 0, iv.Length) < iv.Length) - throw new EndOfStreamException(); - - if (type == 3) - { - itCount = inStr.ReadByte(); - } - } - } - else - { - inStr.ReadByte(); // G - inStr.ReadByte(); // N - inStr.ReadByte(); // U - protectionMode = inStr.ReadByte(); // protection mode - } - } - - public S2k( - HashAlgorithmTag algorithm) - { - this.type = 0; - this.algorithm = algorithm; - } - - public S2k( - HashAlgorithmTag algorithm, - byte[] iv) - { - this.type = 1; - this.algorithm = algorithm; - this.iv = iv; - } - - public S2k( - HashAlgorithmTag algorithm, - byte[] iv, - int itCount) - { - this.type = 3; - this.algorithm = algorithm; - this.iv = iv; - this.itCount = itCount; - } - - public virtual int Type - { - get { return type; } - } - - /// The hash algorithm. - public virtual HashAlgorithmTag HashAlgorithm - { - get { return algorithm; } - } - - /// The IV for the key generation algorithm. - public virtual byte[] GetIV() - { - return Arrays.Clone(iv); - } - - [Obsolete("Use 'IterationCount' property instead")] - public long GetIterationCount() - { - return IterationCount; - } - - /// The iteration count - public virtual long IterationCount - { - get { return (16 + (itCount & 15)) << ((itCount >> 4) + ExpBias); } - } - - /// The protection mode - only if GnuDummyS2K - public virtual int ProtectionMode - { - get { return protectionMode; } - } - - public override void Encode( - BcpgOutputStream bcpgOut) - { - bcpgOut.WriteByte((byte) type); - bcpgOut.WriteByte((byte) algorithm); - - if (type != GnuDummyS2K) - { - if (type != 0) - { - bcpgOut.Write(iv); - } - - if (type == 3) - { - bcpgOut.WriteByte((byte) itCount); - } - } - else - { - bcpgOut.WriteByte((byte) 'G'); - bcpgOut.WriteByte((byte) 'N'); - bcpgOut.WriteByte((byte) 'U'); - bcpgOut.WriteByte((byte) protectionMode); - } - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/SecretKeyPacket.cs b/bc-sharp-crypto/src/bcpg/SecretKeyPacket.cs deleted file mode 100644 index d9ceab4..0000000 --- a/bc-sharp-crypto/src/bcpg/SecretKeyPacket.cs +++ /dev/null @@ -1,170 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Bcpg -{ - /// Basic packet for a PGP secret key. - public class SecretKeyPacket - : ContainedPacket //, PublicKeyAlgorithmTag - { - public const int UsageNone = 0x00; - public const int UsageChecksum = 0xff; - public const int UsageSha1 = 0xfe; - - private PublicKeyPacket pubKeyPacket; - private readonly byte[] secKeyData; - private int s2kUsage; - private SymmetricKeyAlgorithmTag encAlgorithm; - private S2k s2k; - private byte[] iv; - - internal SecretKeyPacket( - BcpgInputStream bcpgIn) - { - if (this is SecretSubkeyPacket) - { - pubKeyPacket = new PublicSubkeyPacket(bcpgIn); - } - else - { - pubKeyPacket = new PublicKeyPacket(bcpgIn); - } - - s2kUsage = bcpgIn.ReadByte(); - - if (s2kUsage == UsageChecksum || s2kUsage == UsageSha1) - { - encAlgorithm = (SymmetricKeyAlgorithmTag) bcpgIn.ReadByte(); - s2k = new S2k(bcpgIn); - } - else - { - encAlgorithm = (SymmetricKeyAlgorithmTag) s2kUsage; - } - - if (!(s2k != null && s2k.Type == S2k.GnuDummyS2K && s2k.ProtectionMode == 0x01)) - { - if (s2kUsage != 0) - { - if (((int) encAlgorithm) < 7) - { - iv = new byte[8]; - } - else - { - iv = new byte[16]; - } - bcpgIn.ReadFully(iv); - } - } - - secKeyData = bcpgIn.ReadAll(); - } - - public SecretKeyPacket( - PublicKeyPacket pubKeyPacket, - SymmetricKeyAlgorithmTag encAlgorithm, - S2k s2k, - byte[] iv, - byte[] secKeyData) - { - this.pubKeyPacket = pubKeyPacket; - this.encAlgorithm = encAlgorithm; - - if (encAlgorithm != SymmetricKeyAlgorithmTag.Null) - { - this.s2kUsage = UsageChecksum; - } - else - { - this.s2kUsage = UsageNone; - } - - this.s2k = s2k; - this.iv = Arrays.Clone(iv); - this.secKeyData = secKeyData; - } - - public SecretKeyPacket( - PublicKeyPacket pubKeyPacket, - SymmetricKeyAlgorithmTag encAlgorithm, - int s2kUsage, - S2k s2k, - byte[] iv, - byte[] secKeyData) - { - this.pubKeyPacket = pubKeyPacket; - this.encAlgorithm = encAlgorithm; - this.s2kUsage = s2kUsage; - this.s2k = s2k; - this.iv = Arrays.Clone(iv); - this.secKeyData = secKeyData; - } - - public SymmetricKeyAlgorithmTag EncAlgorithm - { - get { return encAlgorithm; } - } - - public int S2kUsage - { - get { return s2kUsage; } - } - - public byte[] GetIV() - { - return Arrays.Clone(iv); - } - - public S2k S2k - { - get { return s2k; } - } - - public PublicKeyPacket PublicKeyPacket - { - get { return pubKeyPacket; } - } - - public byte[] GetSecretKeyData() - { - return secKeyData; - } - - public byte[] GetEncodedContents() - { - MemoryStream bOut = new MemoryStream(); - BcpgOutputStream pOut = new BcpgOutputStream(bOut); - - pOut.Write(pubKeyPacket.GetEncodedContents()); - - pOut.WriteByte((byte) s2kUsage); - - if (s2kUsage == UsageChecksum || s2kUsage == UsageSha1) - { - pOut.WriteByte((byte) encAlgorithm); - pOut.WriteObject(s2k); - } - - if (iv != null) - { - pOut.Write(iv); - } - - if (secKeyData != null && secKeyData.Length > 0) - { - pOut.Write(secKeyData); - } - - return bOut.ToArray(); - } - - public override void Encode( - BcpgOutputStream bcpgOut) - { - bcpgOut.WritePacket(PacketTag.SecretKey, GetEncodedContents(), true); - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/SecretSubkeyPacket.cs b/bc-sharp-crypto/src/bcpg/SecretSubkeyPacket.cs deleted file mode 100644 index 8f17469..0000000 --- a/bc-sharp-crypto/src/bcpg/SecretSubkeyPacket.cs +++ /dev/null @@ -1,43 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Bcpg -{ - /// Basic packet for a PGP secret key. - public class SecretSubkeyPacket - : SecretKeyPacket - { - internal SecretSubkeyPacket( - BcpgInputStream bcpgIn) - : base(bcpgIn) - { - } - - public SecretSubkeyPacket( - PublicKeyPacket pubKeyPacket, - SymmetricKeyAlgorithmTag encAlgorithm, - S2k s2k, - byte[] iv, - byte[] secKeyData) - : base(pubKeyPacket, encAlgorithm, s2k, iv, secKeyData) - { - } - - public SecretSubkeyPacket( - PublicKeyPacket pubKeyPacket, - SymmetricKeyAlgorithmTag encAlgorithm, - int s2kUsage, - S2k s2k, - byte[] iv, - byte[] secKeyData) - : base(pubKeyPacket, encAlgorithm, s2kUsage, s2k, iv, secKeyData) - { - } - - public override void Encode( - BcpgOutputStream bcpgOut) - { - bcpgOut.WritePacket(PacketTag.SecretSubkey, GetEncodedContents(), true); - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/SignaturePacket.cs b/bc-sharp-crypto/src/bcpg/SignaturePacket.cs deleted file mode 100644 index 5b91c15..0000000 --- a/bc-sharp-crypto/src/bcpg/SignaturePacket.cs +++ /dev/null @@ -1,477 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Bcpg.Sig; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Date; - -namespace Org.BouncyCastle.Bcpg -{ - /// Generic signature packet. - public class SignaturePacket - : ContainedPacket //, PublicKeyAlgorithmTag - { - private int version; - private int signatureType; - private long creationTime; - private long keyId; - private PublicKeyAlgorithmTag keyAlgorithm; - private HashAlgorithmTag hashAlgorithm; - private MPInteger[] signature; - private byte[] fingerprint; - private SignatureSubpacket[] hashedData; - private SignatureSubpacket[] unhashedData; - private byte[] signatureEncoding; - - internal SignaturePacket( - BcpgInputStream bcpgIn) - { - version = bcpgIn.ReadByte(); - - if (version == 3 || version == 2) - { -// int l = - bcpgIn.ReadByte(); - - signatureType = bcpgIn.ReadByte(); - creationTime = (((long)bcpgIn.ReadByte() << 24) | ((long)bcpgIn.ReadByte() << 16) - | ((long)bcpgIn.ReadByte() << 8) | (uint)bcpgIn.ReadByte()) * 1000L; - - keyId |= (long)bcpgIn.ReadByte() << 56; - keyId |= (long)bcpgIn.ReadByte() << 48; - keyId |= (long)bcpgIn.ReadByte() << 40; - keyId |= (long)bcpgIn.ReadByte() << 32; - keyId |= (long)bcpgIn.ReadByte() << 24; - keyId |= (long)bcpgIn.ReadByte() << 16; - keyId |= (long)bcpgIn.ReadByte() << 8; - keyId |= (uint)bcpgIn.ReadByte(); - - keyAlgorithm = (PublicKeyAlgorithmTag) bcpgIn.ReadByte(); - hashAlgorithm = (HashAlgorithmTag) bcpgIn.ReadByte(); - } - else if (version == 4) - { - signatureType = bcpgIn.ReadByte(); - keyAlgorithm = (PublicKeyAlgorithmTag) bcpgIn.ReadByte(); - hashAlgorithm = (HashAlgorithmTag) bcpgIn.ReadByte(); - - int hashedLength = (bcpgIn.ReadByte() << 8) | bcpgIn.ReadByte(); - byte[] hashed = new byte[hashedLength]; - - bcpgIn.ReadFully(hashed); - - // - // read the signature sub packet data. - // - SignatureSubpacketsParser sIn = new SignatureSubpacketsParser( - new MemoryStream(hashed, false)); - - IList v = Platform.CreateArrayList(); - SignatureSubpacket sub; - while ((sub = sIn.ReadPacket()) != null) - { - v.Add(sub); - } - - hashedData = new SignatureSubpacket[v.Count]; - - for (int i = 0; i != hashedData.Length; i++) - { - SignatureSubpacket p = (SignatureSubpacket)v[i]; - if (p is IssuerKeyId) - { - keyId = ((IssuerKeyId)p).KeyId; - } - else if (p is SignatureCreationTime) - { - creationTime = DateTimeUtilities.DateTimeToUnixMs( - ((SignatureCreationTime)p).GetTime()); - } - - hashedData[i] = p; - } - - int unhashedLength = (bcpgIn.ReadByte() << 8) | bcpgIn.ReadByte(); - byte[] unhashed = new byte[unhashedLength]; - - bcpgIn.ReadFully(unhashed); - - sIn = new SignatureSubpacketsParser(new MemoryStream(unhashed, false)); - - v.Clear(); - - while ((sub = sIn.ReadPacket()) != null) - { - v.Add(sub); - } - - unhashedData = new SignatureSubpacket[v.Count]; - - for (int i = 0; i != unhashedData.Length; i++) - { - SignatureSubpacket p = (SignatureSubpacket)v[i]; - if (p is IssuerKeyId) - { - keyId = ((IssuerKeyId)p).KeyId; - } - - unhashedData[i] = p; - } - } - else - { - throw new Exception("unsupported version: " + version); - } - - fingerprint = new byte[2]; - bcpgIn.ReadFully(fingerprint); - - switch (keyAlgorithm) - { - case PublicKeyAlgorithmTag.RsaGeneral: - case PublicKeyAlgorithmTag.RsaSign: - MPInteger v = new MPInteger(bcpgIn); - signature = new MPInteger[]{ v }; - break; - case PublicKeyAlgorithmTag.Dsa: - MPInteger r = new MPInteger(bcpgIn); - MPInteger s = new MPInteger(bcpgIn); - signature = new MPInteger[]{ r, s }; - break; - case PublicKeyAlgorithmTag.ElGamalEncrypt: // yep, this really does happen sometimes. - case PublicKeyAlgorithmTag.ElGamalGeneral: - MPInteger p = new MPInteger(bcpgIn); - MPInteger g = new MPInteger(bcpgIn); - MPInteger y = new MPInteger(bcpgIn); - signature = new MPInteger[]{ p, g, y }; - break; - case PublicKeyAlgorithmTag.ECDsa: - MPInteger ecR = new MPInteger(bcpgIn); - MPInteger ecS = new MPInteger(bcpgIn); - signature = new MPInteger[]{ ecR, ecS }; - break; - default: - if (keyAlgorithm >= PublicKeyAlgorithmTag.Experimental_1 && keyAlgorithm <= PublicKeyAlgorithmTag.Experimental_11) - { - signature = null; - MemoryStream bOut = new MemoryStream(); - int ch; - while ((ch = bcpgIn.ReadByte()) >= 0) - { - bOut.WriteByte((byte) ch); - } - signatureEncoding = bOut.ToArray(); - } - else - { - throw new IOException("unknown signature key algorithm: " + keyAlgorithm); - } - break; - } - } - - /** - * Generate a version 4 signature packet. - * - * @param signatureType - * @param keyAlgorithm - * @param hashAlgorithm - * @param hashedData - * @param unhashedData - * @param fingerprint - * @param signature - */ - public SignaturePacket( - int signatureType, - long keyId, - PublicKeyAlgorithmTag keyAlgorithm, - HashAlgorithmTag hashAlgorithm, - SignatureSubpacket[] hashedData, - SignatureSubpacket[] unhashedData, - byte[] fingerprint, - MPInteger[] signature) - : this(4, signatureType, keyId, keyAlgorithm, hashAlgorithm, hashedData, unhashedData, fingerprint, signature) - { - } - - /** - * Generate a version 2/3 signature packet. - * - * @param signatureType - * @param keyAlgorithm - * @param hashAlgorithm - * @param fingerprint - * @param signature - */ - public SignaturePacket( - int version, - int signatureType, - long keyId, - PublicKeyAlgorithmTag keyAlgorithm, - HashAlgorithmTag hashAlgorithm, - long creationTime, - byte[] fingerprint, - MPInteger[] signature) - : this(version, signatureType, keyId, keyAlgorithm, hashAlgorithm, null, null, fingerprint, signature) - { - this.creationTime = creationTime; - } - - public SignaturePacket( - int version, - int signatureType, - long keyId, - PublicKeyAlgorithmTag keyAlgorithm, - HashAlgorithmTag hashAlgorithm, - SignatureSubpacket[] hashedData, - SignatureSubpacket[] unhashedData, - byte[] fingerprint, - MPInteger[] signature) - { - this.version = version; - this.signatureType = signatureType; - this.keyId = keyId; - this.keyAlgorithm = keyAlgorithm; - this.hashAlgorithm = hashAlgorithm; - this.hashedData = hashedData; - this.unhashedData = unhashedData; - this.fingerprint = fingerprint; - this.signature = signature; - - if (hashedData != null) - { - setCreationTime(); - } - } - - public int Version - { - get { return version; } - } - - public int SignatureType - { - get { return signatureType; } - } - - /** - * return the keyId - * @return the keyId that created the signature. - */ - public long KeyId - { - get { return keyId; } - } - - /** - * return the signature trailer that must be included with the data - * to reconstruct the signature - * - * @return byte[] - */ - public byte[] GetSignatureTrailer() - { - byte[] trailer = null; - - if (version == 3) - { - trailer = new byte[5]; - - long time = creationTime / 1000L; - - trailer[0] = (byte)signatureType; - trailer[1] = (byte)(time >> 24); - trailer[2] = (byte)(time >> 16); - trailer[3] = (byte)(time >> 8); - trailer[4] = (byte)(time); - } - else - { - MemoryStream sOut = new MemoryStream(); - - sOut.WriteByte((byte)this.Version); - sOut.WriteByte((byte)this.SignatureType); - sOut.WriteByte((byte)this.KeyAlgorithm); - sOut.WriteByte((byte)this.HashAlgorithm); - - MemoryStream hOut = new MemoryStream(); - SignatureSubpacket[] hashed = this.GetHashedSubPackets(); - - for (int i = 0; i != hashed.Length; i++) - { - hashed[i].Encode(hOut); - } - - byte[] data = hOut.ToArray(); - - sOut.WriteByte((byte)(data.Length >> 8)); - sOut.WriteByte((byte)data.Length); - sOut.Write(data, 0, data.Length); - - byte[] hData = sOut.ToArray(); - - sOut.WriteByte((byte)this.Version); - sOut.WriteByte((byte)0xff); - sOut.WriteByte((byte)(hData.Length>> 24)); - sOut.WriteByte((byte)(hData.Length >> 16)); - sOut.WriteByte((byte)(hData.Length >> 8)); - sOut.WriteByte((byte)(hData.Length)); - - trailer = sOut.ToArray(); - } - - return trailer; - } - - public PublicKeyAlgorithmTag KeyAlgorithm - { - get { return keyAlgorithm; } - } - - public HashAlgorithmTag HashAlgorithm - { - get { return hashAlgorithm; } - } - - /** - * return the signature as a set of integers - note this is normalised to be the - * ASN.1 encoding of what appears in the signature packet. - */ - public MPInteger[] GetSignature() - { - return signature; - } - - /** - * Return the byte encoding of the signature section. - * @return uninterpreted signature bytes. - */ - public byte[] GetSignatureBytes() - { - if (signatureEncoding != null) - { - return (byte[]) signatureEncoding.Clone(); - } - - MemoryStream bOut = new MemoryStream(); - BcpgOutputStream bcOut = new BcpgOutputStream(bOut); - - foreach (MPInteger sigObj in signature) - { - try - { - bcOut.WriteObject(sigObj); - } - catch (IOException e) - { - throw new Exception("internal error: " + e); - } - } - - return bOut.ToArray(); - } - - public SignatureSubpacket[] GetHashedSubPackets() - { - return hashedData; - } - - public SignatureSubpacket[] GetUnhashedSubPackets() - { - return unhashedData; - } - - /// Return the creation time in milliseconds since 1 Jan., 1970 UTC. - public long CreationTime - { - get { return creationTime; } - } - - public override void Encode( - BcpgOutputStream bcpgOut) - { - MemoryStream bOut = new MemoryStream(); - BcpgOutputStream pOut = new BcpgOutputStream(bOut); - - pOut.WriteByte((byte) version); - - if (version == 3 || version == 2) - { - pOut.Write( - 5, // the length of the next block - (byte) signatureType); - - pOut.WriteInt((int)(creationTime / 1000L)); - - pOut.WriteLong(keyId); - - pOut.Write( - (byte) keyAlgorithm, - (byte) hashAlgorithm); - } - else if (version == 4) - { - pOut.Write( - (byte) signatureType, - (byte) keyAlgorithm, - (byte) hashAlgorithm); - - EncodeLengthAndData(pOut, GetEncodedSubpackets(hashedData)); - - EncodeLengthAndData(pOut, GetEncodedSubpackets(unhashedData)); - } - else - { - throw new IOException("unknown version: " + version); - } - - pOut.Write(fingerprint); - - if (signature != null) - { - pOut.WriteObjects(signature); - } - else - { - pOut.Write(signatureEncoding); - } - - bcpgOut.WritePacket(PacketTag.Signature, bOut.ToArray(), true); - } - - private static void EncodeLengthAndData( - BcpgOutputStream pOut, - byte[] data) - { - pOut.WriteShort((short) data.Length); - pOut.Write(data); - } - - private static byte[] GetEncodedSubpackets( - SignatureSubpacket[] ps) - { - MemoryStream sOut = new MemoryStream(); - - foreach (SignatureSubpacket p in ps) - { - p.Encode(sOut); - } - - return sOut.ToArray(); - } - - private void setCreationTime() - { - foreach (SignatureSubpacket p in hashedData) - { - if (p is SignatureCreationTime) - { - creationTime = DateTimeUtilities.DateTimeToUnixMs( - ((SignatureCreationTime)p).GetTime()); - break; - } - } - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/SignatureSubpacket.cs b/bc-sharp-crypto/src/bcpg/SignatureSubpacket.cs deleted file mode 100644 index d993155..0000000 --- a/bc-sharp-crypto/src/bcpg/SignatureSubpacket.cs +++ /dev/null @@ -1,94 +0,0 @@ -using System.IO; - -namespace Org.BouncyCastle.Bcpg -{ - /// Basic type for a PGP Signature sub-packet. - public class SignatureSubpacket - { - private readonly SignatureSubpacketTag type; - private readonly bool critical; - private readonly bool isLongLength; - internal byte[] data; - - protected internal SignatureSubpacket( - SignatureSubpacketTag type, - bool critical, - bool isLongLength, - byte[] data) - { - this.type = type; - this.critical = critical; - this.isLongLength = isLongLength; - this.data = data; - } - - public SignatureSubpacketTag SubpacketType - { - get { return type; } - } - - public bool IsCritical() - { - return critical; - } - - public bool IsLongLength() - { - return isLongLength; - } - - /// Return the generic data making up the packet. - public byte[] GetData() - { - return (byte[]) data.Clone(); - } - - public void Encode( - Stream os) - { - int bodyLen = data.Length + 1; - - if (isLongLength) - { - os.WriteByte(0xff); - os.WriteByte((byte)(bodyLen >> 24)); - os.WriteByte((byte)(bodyLen >> 16)); - os.WriteByte((byte)(bodyLen >> 8)); - os.WriteByte((byte)bodyLen); - } - else - { - if (bodyLen < 192) - { - os.WriteByte((byte)bodyLen); - } - else if (bodyLen <= 8383) - { - bodyLen -= 192; - - os.WriteByte((byte)(((bodyLen >> 8) & 0xff) + 192)); - os.WriteByte((byte)bodyLen); - } - else - { - os.WriteByte(0xff); - os.WriteByte((byte)(bodyLen >> 24)); - os.WriteByte((byte)(bodyLen >> 16)); - os.WriteByte((byte)(bodyLen >> 8)); - os.WriteByte((byte)bodyLen); - } - } - - if (critical) - { - os.WriteByte((byte)(0x80 | (int) type)); - } - else - { - os.WriteByte((byte) type); - } - - os.Write(data, 0, data.Length); - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/SignatureSubpacketTags.cs b/bc-sharp-crypto/src/bcpg/SignatureSubpacketTags.cs deleted file mode 100644 index 1a8e254..0000000 --- a/bc-sharp-crypto/src/bcpg/SignatureSubpacketTags.cs +++ /dev/null @@ -1,33 +0,0 @@ -namespace Org.BouncyCastle.Bcpg -{ - /** - * Basic PGP signature sub-packet tag types. - */ - public enum SignatureSubpacketTag - { - CreationTime = 2, // signature creation time - ExpireTime = 3, // signature expiration time - Exportable = 4, // exportable certification - TrustSig = 5, // trust signature - RegExp = 6, // regular expression - Revocable = 7, // revocable - KeyExpireTime = 9, // key expiration time - Placeholder = 10, // placeholder for backward compatibility - PreferredSymmetricAlgorithms = 11, // preferred symmetric algorithms - RevocationKey = 12, // revocation key - IssuerKeyId = 16, // issuer key ID - NotationData = 20, // notation data - PreferredHashAlgorithms = 21, // preferred hash algorithms - PreferredCompressionAlgorithms = 22, // preferred compression algorithms - KeyServerPreferences = 23, // key server preferences - PreferredKeyServer = 24, // preferred key server - PrimaryUserId = 25, // primary user id - PolicyUrl = 26, // policy URL - KeyFlags = 27, // key flags - SignerUserId = 28, // signer's user id - RevocationReason = 29, // reason for revocation - Features = 30, // features - SignatureTarget = 31, // signature target - EmbeddedSignature = 32 // embedded signature - } -} diff --git a/bc-sharp-crypto/src/bcpg/SignatureSubpacketsReader.cs b/bc-sharp-crypto/src/bcpg/SignatureSubpacketsReader.cs deleted file mode 100644 index 80bedb0..0000000 --- a/bc-sharp-crypto/src/bcpg/SignatureSubpacketsReader.cs +++ /dev/null @@ -1,128 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Bcpg.Sig; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Bcpg -{ - /** - * reader for signature sub-packets - */ - public class SignatureSubpacketsParser - { - private readonly Stream input; - - public SignatureSubpacketsParser( - Stream input) - { - this.input = input; - } - - public SignatureSubpacket ReadPacket() - { - int l = input.ReadByte(); - if (l < 0) - return null; - - int bodyLen = 0; - bool isLongLength = false; - - if (l < 192) - { - bodyLen = l; - } - else if (l <= 223) - { - bodyLen = ((l - 192) << 8) + (input.ReadByte()) + 192; - } - else if (l == 255) - { - isLongLength = true; - bodyLen = (input.ReadByte() << 24) | (input.ReadByte() << 16) - | (input.ReadByte() << 8) | input.ReadByte(); - } - else - { - throw new IOException("unexpected length header"); - } - - int tag = input.ReadByte(); - if (tag < 0) - throw new EndOfStreamException("unexpected EOF reading signature sub packet"); - - byte[] data = new byte[bodyLen - 1]; - - // - // this may seem a bit strange but it turns out some applications miscode the length - // in fixed length fields, so we check the length we do get, only throwing an exception if - // we really cannot continue - // - int bytesRead = Streams.ReadFully(input, data); - - bool isCritical = ((tag & 0x80) != 0); - SignatureSubpacketTag type = (SignatureSubpacketTag)(tag & 0x7f); - - if (bytesRead != data.Length) - { - switch (type) - { - case SignatureSubpacketTag.CreationTime: - data = CheckData(data, 4, bytesRead, "Signature Creation Time"); - break; - case SignatureSubpacketTag.IssuerKeyId: - data = CheckData(data, 8, bytesRead, "Issuer"); - break; - case SignatureSubpacketTag.KeyExpireTime: - data = CheckData(data, 4, bytesRead, "Signature Key Expiration Time"); - break; - case SignatureSubpacketTag.ExpireTime: - data = CheckData(data, 4, bytesRead, "Signature Expiration Time"); - break; - default: - throw new EndOfStreamException("truncated subpacket data."); - } - } - - switch (type) - { - case SignatureSubpacketTag.CreationTime: - return new SignatureCreationTime(isCritical, isLongLength, data); - case SignatureSubpacketTag.KeyExpireTime: - return new KeyExpirationTime(isCritical, isLongLength, data); - case SignatureSubpacketTag.ExpireTime: - return new SignatureExpirationTime(isCritical, isLongLength, data); - case SignatureSubpacketTag.Revocable: - return new Revocable(isCritical, isLongLength, data); - case SignatureSubpacketTag.Exportable: - return new Exportable(isCritical, isLongLength, data); - case SignatureSubpacketTag.IssuerKeyId: - return new IssuerKeyId(isCritical, isLongLength, data); - case SignatureSubpacketTag.TrustSig: - return new TrustSignature(isCritical, isLongLength, data); - case SignatureSubpacketTag.PreferredCompressionAlgorithms: - case SignatureSubpacketTag.PreferredHashAlgorithms: - case SignatureSubpacketTag.PreferredSymmetricAlgorithms: - return new PreferredAlgorithms(type, isCritical, isLongLength, data); - case SignatureSubpacketTag.KeyFlags: - return new KeyFlags(isCritical, isLongLength, data); - case SignatureSubpacketTag.PrimaryUserId: - return new PrimaryUserId(isCritical, isLongLength, data); - case SignatureSubpacketTag.SignerUserId: - return new SignerUserId(isCritical, isLongLength, data); - case SignatureSubpacketTag.NotationData: - return new NotationData(isCritical, isLongLength, data); - } - return new SignatureSubpacket(type, isCritical, isLongLength, data); - } - - private byte[] CheckData(byte[] data, int expected, int bytesRead, string name) - { - if (bytesRead != expected) - throw new EndOfStreamException("truncated " + name + " subpacket data."); - - return Arrays.CopyOfRange(data, 0, expected); - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/SymmetricEncDataPacket.cs b/bc-sharp-crypto/src/bcpg/SymmetricEncDataPacket.cs deleted file mode 100644 index 17ee55b..0000000 --- a/bc-sharp-crypto/src/bcpg/SymmetricEncDataPacket.cs +++ /dev/null @@ -1,15 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Bcpg -{ - /// Basic type for a symmetric key encrypted packet. - public class SymmetricEncDataPacket - : InputStreamPacket - { - public SymmetricEncDataPacket( - BcpgInputStream bcpgIn) - : base(bcpgIn) - { - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/SymmetricEncIntegrityPacket.cs b/bc-sharp-crypto/src/bcpg/SymmetricEncIntegrityPacket.cs deleted file mode 100644 index a9b6d06..0000000 --- a/bc-sharp-crypto/src/bcpg/SymmetricEncIntegrityPacket.cs +++ /dev/null @@ -1,18 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Bcpg -{ - public class SymmetricEncIntegrityPacket - : InputStreamPacket - { - internal readonly int version; - - internal SymmetricEncIntegrityPacket( - BcpgInputStream bcpgIn) - : base(bcpgIn) - { - version = bcpgIn.ReadByte(); - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/SymmetricKeyAlgorithmTags.cs b/bc-sharp-crypto/src/bcpg/SymmetricKeyAlgorithmTags.cs deleted file mode 100644 index e05a486..0000000 --- a/bc-sharp-crypto/src/bcpg/SymmetricKeyAlgorithmTags.cs +++ /dev/null @@ -1,23 +0,0 @@ -namespace Org.BouncyCastle.Bcpg -{ - /** - * Basic tags for symmetric key algorithms - */ - public enum SymmetricKeyAlgorithmTag - { - Null = 0, // Plaintext or unencrypted data - Idea = 1, // IDEA [IDEA] - TripleDes = 2, // Triple-DES (DES-EDE, as per spec -168 bit key derived from 192) - Cast5 = 3, // Cast5 (128 bit key, as per RFC 2144) - Blowfish = 4, // Blowfish (128 bit key, 16 rounds) [Blowfish] - Safer = 5, // Safer-SK128 (13 rounds) [Safer] - Des = 6, // Reserved for DES/SK - Aes128 = 7, // Reserved for AES with 128-bit key - Aes192 = 8, // Reserved for AES with 192-bit key - Aes256 = 9, // Reserved for AES with 256-bit key - Twofish = 10, // Reserved for Twofish - Camellia128 = 11, // Reserved for AES with 128-bit key - Camellia192 = 12, // Reserved for AES with 192-bit key - Camellia256 = 13 // Reserved for AES with 256-bit key - } -} diff --git a/bc-sharp-crypto/src/bcpg/SymmetricKeyEncSessionPacket.cs b/bc-sharp-crypto/src/bcpg/SymmetricKeyEncSessionPacket.cs deleted file mode 100644 index 0381fa3..0000000 --- a/bc-sharp-crypto/src/bcpg/SymmetricKeyEncSessionPacket.cs +++ /dev/null @@ -1,91 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Bcpg -{ - /** - * Basic type for a symmetric encrypted session key packet - */ - public class SymmetricKeyEncSessionPacket - : ContainedPacket - { - private int version; - private SymmetricKeyAlgorithmTag encAlgorithm; - private S2k s2k; - private readonly byte[] secKeyData; - - public SymmetricKeyEncSessionPacket( - BcpgInputStream bcpgIn) - { - version = bcpgIn.ReadByte(); - encAlgorithm = (SymmetricKeyAlgorithmTag) bcpgIn.ReadByte(); - - s2k = new S2k(bcpgIn); - - secKeyData = bcpgIn.ReadAll(); - } - - public SymmetricKeyEncSessionPacket( - SymmetricKeyAlgorithmTag encAlgorithm, - S2k s2k, - byte[] secKeyData) - { - this.version = 4; - this.encAlgorithm = encAlgorithm; - this.s2k = s2k; - this.secKeyData = secKeyData; - } - - /** - * @return int - */ - public SymmetricKeyAlgorithmTag EncAlgorithm - { - get { return encAlgorithm; } - } - - /** - * @return S2k - */ - public S2k S2k - { - get { return s2k; } - } - - /** - * @return byte[] - */ - public byte[] GetSecKeyData() - { - return secKeyData; - } - - /** - * @return int - */ - public int Version - { - get { return version; } - } - - public override void Encode( - BcpgOutputStream bcpgOut) - { - MemoryStream bOut = new MemoryStream(); - BcpgOutputStream pOut = new BcpgOutputStream(bOut); - - pOut.Write( - (byte) version, - (byte) encAlgorithm); - - pOut.WriteObject(s2k); - - if (secKeyData != null && secKeyData.Length > 0) - { - pOut.Write(secKeyData); - } - - bcpgOut.WritePacket(PacketTag.SymmetricKeyEncryptedSessionKey, bOut.ToArray(), true); - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/TrustPacket.cs b/bc-sharp-crypto/src/bcpg/TrustPacket.cs deleted file mode 100644 index 6f1969c..0000000 --- a/bc-sharp-crypto/src/bcpg/TrustPacket.cs +++ /dev/null @@ -1,43 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Bcpg -{ - /// Basic type for a trust packet. - public class TrustPacket - : ContainedPacket - { - private readonly byte[] levelAndTrustAmount; - - public TrustPacket( - BcpgInputStream bcpgIn) - { - MemoryStream bOut = new MemoryStream(); - - int ch; - while ((ch = bcpgIn.ReadByte()) >= 0) - { - bOut.WriteByte((byte) ch); - } - - levelAndTrustAmount = bOut.ToArray(); - } - - public TrustPacket( - int trustCode) - { - this.levelAndTrustAmount = new byte[]{ (byte) trustCode }; - } - - public byte[] GetLevelAndTrustAmount() - { - return (byte[]) levelAndTrustAmount.Clone(); - } - - public override void Encode( - BcpgOutputStream bcpgOut) - { - bcpgOut.WritePacket(PacketTag.Trust, levelAndTrustAmount, true); - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/UserAttributePacket.cs b/bc-sharp-crypto/src/bcpg/UserAttributePacket.cs deleted file mode 100644 index 20e3598..0000000 --- a/bc-sharp-crypto/src/bcpg/UserAttributePacket.cs +++ /dev/null @@ -1,61 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Bcpg -{ - /** - * Basic type for a user attribute packet. - */ - public class UserAttributePacket - : ContainedPacket - { - private readonly UserAttributeSubpacket[] subpackets; - - public UserAttributePacket( - BcpgInputStream bcpgIn) - { - UserAttributeSubpacketsParser sIn = new UserAttributeSubpacketsParser(bcpgIn); - UserAttributeSubpacket sub; - - IList v = Platform.CreateArrayList(); - while ((sub = sIn.ReadPacket()) != null) - { - v.Add(sub); - } - - subpackets = new UserAttributeSubpacket[v.Count]; - - for (int i = 0; i != subpackets.Length; i++) - { - subpackets[i] = (UserAttributeSubpacket)v[i]; - } - } - - public UserAttributePacket( - UserAttributeSubpacket[] subpackets) - { - this.subpackets = subpackets; - } - - public UserAttributeSubpacket[] GetSubpackets() - { - return subpackets; - } - - public override void Encode( - BcpgOutputStream bcpgOut) - { - MemoryStream bOut = new MemoryStream(); - - for (int i = 0; i != subpackets.Length; i++) - { - subpackets[i].Encode(bOut); - } - - bcpgOut.WritePacket(PacketTag.UserAttribute, bOut.ToArray(), false); - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/UserAttributeSubpacket.cs b/bc-sharp-crypto/src/bcpg/UserAttributeSubpacket.cs deleted file mode 100644 index 05f60ac..0000000 --- a/bc-sharp-crypto/src/bcpg/UserAttributeSubpacket.cs +++ /dev/null @@ -1,90 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Bcpg -{ - /** - * Basic type for a user attribute sub-packet. - */ - public class UserAttributeSubpacket - { - internal readonly UserAttributeSubpacketTag type; - private readonly bool longLength; // we preserve this as not everyone encodes length properly. - protected readonly byte[] data; - - protected internal UserAttributeSubpacket(UserAttributeSubpacketTag type, byte[] data) - : this(type, false, data) - { - } - - protected internal UserAttributeSubpacket(UserAttributeSubpacketTag type, bool forceLongLength, byte[] data) - { - this.type = type; - this.longLength = forceLongLength; - this.data = data; - } - - public virtual UserAttributeSubpacketTag SubpacketType - { - get { return type; } - } - - /** - * return the generic data making up the packet. - */ - public virtual byte[] GetData() - { - return data; - } - - public virtual void Encode(Stream os) - { - int bodyLen = data.Length + 1; - - if (bodyLen < 192 && !longLength) - { - os.WriteByte((byte)bodyLen); - } - else if (bodyLen <= 8383 && !longLength) - { - bodyLen -= 192; - - os.WriteByte((byte)(((bodyLen >> 8) & 0xff) + 192)); - os.WriteByte((byte)bodyLen); - } - else - { - os.WriteByte(0xff); - os.WriteByte((byte)(bodyLen >> 24)); - os.WriteByte((byte)(bodyLen >> 16)); - os.WriteByte((byte)(bodyLen >> 8)); - os.WriteByte((byte)bodyLen); - } - - os.WriteByte((byte) type); - os.Write(data, 0, data.Length); - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - UserAttributeSubpacket other = obj as UserAttributeSubpacket; - - if (other == null) - return false; - - return type == other.type - && Arrays.AreEqual(data, other.data); - } - - public override int GetHashCode() - { - return type.GetHashCode() ^ Arrays.GetHashCode(data); - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/UserAttributeSubpacketTags.cs b/bc-sharp-crypto/src/bcpg/UserAttributeSubpacketTags.cs deleted file mode 100644 index 7a9cd1d..0000000 --- a/bc-sharp-crypto/src/bcpg/UserAttributeSubpacketTags.cs +++ /dev/null @@ -1,10 +0,0 @@ -namespace Org.BouncyCastle.Bcpg -{ - /** - * Basic PGP user attribute sub-packet tag types. - */ - public enum UserAttributeSubpacketTag - { - ImageAttribute = 1 - } -} diff --git a/bc-sharp-crypto/src/bcpg/UserAttributeSubpacketsReader.cs b/bc-sharp-crypto/src/bcpg/UserAttributeSubpacketsReader.cs deleted file mode 100644 index f0cc1b8..0000000 --- a/bc-sharp-crypto/src/bcpg/UserAttributeSubpacketsReader.cs +++ /dev/null @@ -1,65 +0,0 @@ -using System; -using System.IO; -using Org.BouncyCastle.Bcpg.Attr; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Bcpg -{ - /** - * reader for user attribute sub-packets - */ - public class UserAttributeSubpacketsParser - { - private readonly Stream input; - - public UserAttributeSubpacketsParser( - Stream input) - { - this.input = input; - } - - public virtual UserAttributeSubpacket ReadPacket() - { - int l = input.ReadByte(); - if (l < 0) - return null; - - int bodyLen = 0; - bool longLength = false; - if (l < 192) - { - bodyLen = l; - } - else if (l <= 223) - { - bodyLen = ((l - 192) << 8) + (input.ReadByte()) + 192; - } - else if (l == 255) - { - bodyLen = (input.ReadByte() << 24) | (input.ReadByte() << 16) - | (input.ReadByte() << 8) | input.ReadByte(); - longLength = true; - } - else - { - throw new IOException("unrecognised length reading user attribute sub packet"); - } - - int tag = input.ReadByte(); - if (tag < 0) - throw new EndOfStreamException("unexpected EOF reading user attribute sub packet"); - - byte[] data = new byte[bodyLen - 1]; - if (Streams.ReadFully(input, data) < data.Length) - throw new EndOfStreamException(); - - UserAttributeSubpacketTag type = (UserAttributeSubpacketTag) tag; - switch (type) - { - case UserAttributeSubpacketTag.ImageAttribute: - return new ImageAttrib(longLength, data); - } - return new UserAttributeSubpacket(type, longLength, data); - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/UserIdPacket.cs b/bc-sharp-crypto/src/bcpg/UserIdPacket.cs deleted file mode 100644 index a175e74..0000000 --- a/bc-sharp-crypto/src/bcpg/UserIdPacket.cs +++ /dev/null @@ -1,37 +0,0 @@ -using System; -using System.Text; - -namespace Org.BouncyCastle.Bcpg -{ - /** - * Basic type for a user ID packet. - */ - public class UserIdPacket - : ContainedPacket - { - private readonly byte[] idData; - - public UserIdPacket( - BcpgInputStream bcpgIn) - { - this.idData = bcpgIn.ReadAll(); - } - - public UserIdPacket( - string id) - { - this.idData = Encoding.UTF8.GetBytes(id); - } - - public string GetId() - { - return Encoding.UTF8.GetString(idData, 0, idData.Length); - } - - public override void Encode( - BcpgOutputStream bcpgOut) - { - bcpgOut.WritePacket(PacketTag.UserId, idData, true); - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/attr/ImageAttrib.cs b/bc-sharp-crypto/src/bcpg/attr/ImageAttrib.cs deleted file mode 100644 index 2d0fef8..0000000 --- a/bc-sharp-crypto/src/bcpg/attr/ImageAttrib.cs +++ /dev/null @@ -1,72 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Bcpg.Attr -{ - /// Basic type for a image attribute packet. - public class ImageAttrib - : UserAttributeSubpacket - { - public enum Format : byte - { - Jpeg = 1 - } - - private static readonly byte[] Zeroes = new byte[12]; - - private int hdrLength; - private int _version; - private int _encoding; - private byte[] imageData; - - public ImageAttrib(byte[] data) - : this(false, data) - { - } - - public ImageAttrib(bool forceLongLength, byte[] data) - : base(UserAttributeSubpacketTag.ImageAttribute, forceLongLength, data) - { - hdrLength = ((data[1] & 0xff) << 8) | (data[0] & 0xff); - _version = data[2] & 0xff; - _encoding = data[3] & 0xff; - - imageData = new byte[data.Length - hdrLength]; - Array.Copy(data, hdrLength, imageData, 0, imageData.Length); - } - - public ImageAttrib( - Format imageType, - byte[] imageData) - : this(ToByteArray(imageType, imageData)) - { - } - - private static byte[] ToByteArray( - Format imageType, - byte[] imageData) - { - MemoryStream bOut = new MemoryStream(); - bOut.WriteByte(0x10); bOut.WriteByte(0x00); bOut.WriteByte(0x01); - bOut.WriteByte((byte) imageType); - bOut.Write(Zeroes, 0, Zeroes.Length); - bOut.Write(imageData, 0, imageData.Length); - return bOut.ToArray(); - } - - public virtual int Version - { - get { return _version; } - } - - public virtual int Encoding - { - get { return _encoding; } - } - - public virtual byte[] GetImageData() - { - return imageData; - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/sig/EmbeddedSignature.cs b/bc-sharp-crypto/src/bcpg/sig/EmbeddedSignature.cs deleted file mode 100644 index fffdaef..0000000 --- a/bc-sharp-crypto/src/bcpg/sig/EmbeddedSignature.cs +++ /dev/null @@ -1,19 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Bcpg.Sig -{ - /** - * Packet embedded signature - */ - public class EmbeddedSignature - : SignatureSubpacket - { - public EmbeddedSignature( - bool critical, - bool isLongLength, - byte[] data) - : base(SignatureSubpacketTag.EmbeddedSignature, critical, isLongLength, data) - { - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/sig/Exportable.cs b/bc-sharp-crypto/src/bcpg/sig/Exportable.cs deleted file mode 100644 index 4d03034..0000000 --- a/bc-sharp-crypto/src/bcpg/sig/Exportable.cs +++ /dev/null @@ -1,46 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Bcpg.Sig -{ - /** - * packet giving signature creation time. - */ - public class Exportable - : SignatureSubpacket - { - private static byte[] BooleanToByteArray(bool val) - { - byte[] data = new byte[1]; - - if (val) - { - data[0] = 1; - return data; - } - else - { - return data; - } - } - - public Exportable( - bool critical, - bool isLongLength, - byte[] data) - : base(SignatureSubpacketTag.Exportable, critical, isLongLength, data) - { - } - - public Exportable( - bool critical, - bool isExportable) - : base(SignatureSubpacketTag.Exportable, critical, false, BooleanToByteArray(isExportable)) - { - } - - public bool IsExportable() - { - return data[0] != 0; - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/sig/Features.cs b/bc-sharp-crypto/src/bcpg/sig/Features.cs deleted file mode 100644 index 2958423..0000000 --- a/bc-sharp-crypto/src/bcpg/sig/Features.cs +++ /dev/null @@ -1,75 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Bcpg.Sig -{ - /** - * packet giving signature expiration time. - */ - public class Features - : SignatureSubpacket - { - /** Identifier for the modification detection feature */ - public static readonly byte FEATURE_MODIFICATION_DETECTION = 1; - - private static byte[] FeatureToByteArray(byte feature) - { - return new byte[]{ feature }; - } - - public Features( - bool critical, - bool isLongLength, - byte[] data) - : base(SignatureSubpacketTag.Features, critical, isLongLength, data) - { - } - - public Features(bool critical, byte feature) - : base(SignatureSubpacketTag.Features, critical, false, FeatureToByteArray(feature)) - { - } - - /** - * Returns if modification detection is supported. - */ - public bool SupportsModificationDetection - { - get { return SupportsFeature(FEATURE_MODIFICATION_DETECTION); } - } - - /** - * Returns if a particular feature is supported. - */ - public bool SupportsFeature(byte feature) - { - return Array.IndexOf(data, feature) >= 0; - } - - /** - * Sets support for a particular feature. - */ - private void SetSupportsFeature(byte feature, bool support) - { - if (feature == 0) - throw new ArgumentException("cannot be 0", "feature"); - - int i = Array.IndexOf(data, feature); - if ((i >= 0) == support) - return; - - if (support) - { - data = Arrays.Append(data, feature); - } - else - { - byte[] temp = new byte[data.Length - 1]; - Array.Copy(data, 0, temp, 0, i); - Array.Copy(data, i + 1, temp, i, temp.Length - i); - data = temp; - } - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/sig/IssuerKeyId.cs b/bc-sharp-crypto/src/bcpg/sig/IssuerKeyId.cs deleted file mode 100644 index 627ea3e..0000000 --- a/bc-sharp-crypto/src/bcpg/sig/IssuerKeyId.cs +++ /dev/null @@ -1,62 +0,0 @@ -using System; - - - -namespace Org.BouncyCastle.Bcpg.Sig -{ - /** - * packet giving signature creation time. - */ - public class IssuerKeyId - : SignatureSubpacket - { - protected static byte[] KeyIdToBytes( - long keyId) - { - byte[] data = new byte[8]; - - data[0] = (byte)(keyId >> 56); - data[1] = (byte)(keyId >> 48); - data[2] = (byte)(keyId >> 40); - data[3] = (byte)(keyId >> 32); - data[4] = (byte)(keyId >> 24); - data[5] = (byte)(keyId >> 16); - data[6] = (byte)(keyId >> 8); - data[7] = (byte)keyId; - - return data; - } - - public IssuerKeyId( - bool critical, - bool isLongLength, - byte[] data) - : base(SignatureSubpacketTag.IssuerKeyId, critical, isLongLength, data) - { - } - - public IssuerKeyId( - bool critical, - long keyId) - : base(SignatureSubpacketTag.IssuerKeyId, critical, false, KeyIdToBytes(keyId)) - { - } - - public long KeyId - { - get - { - long keyId = ((long)(data[0] & 0xff) << 56) - | ((long)(data[1] & 0xff) << 48) - | ((long)(data[2] & 0xff) << 40) - | ((long)(data[3] & 0xff) << 32) - | ((long)(data[4] & 0xff) << 24) - | ((long)(data[5] & 0xff) << 16) - | ((long)(data[6] & 0xff) << 8) - | ((long)data[7] & 0xff); - - return keyId; - } - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/sig/KeyExpirationTime.cs b/bc-sharp-crypto/src/bcpg/sig/KeyExpirationTime.cs deleted file mode 100644 index dfd3e76..0000000 --- a/bc-sharp-crypto/src/bcpg/sig/KeyExpirationTime.cs +++ /dev/null @@ -1,55 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Bcpg.Sig -{ - /** - * packet giving time after creation at which the key expires. - */ - public class KeyExpirationTime - : SignatureSubpacket - { - protected static byte[] TimeToBytes( - long t) - { - byte[] data = new byte[4]; - - data[0] = (byte)(t >> 24); - data[1] = (byte)(t >> 16); - data[2] = (byte)(t >> 8); - data[3] = (byte)t; - - return data; - } - - public KeyExpirationTime( - bool critical, - bool isLongLength, - byte[] data) - : base(SignatureSubpacketTag.KeyExpireTime, critical, isLongLength, data) - { - } - - public KeyExpirationTime( - bool critical, - long seconds) - : base(SignatureSubpacketTag.KeyExpireTime, critical, false, TimeToBytes(seconds)) - { - } - - /** - * Return the number of seconds after creation time a key is valid for. - * - * @return second count for key validity. - */ - public long Time - { - get - { - long time = ((long)(data[0] & 0xff) << 24) | ((long)(data[1] & 0xff) << 16) - | ((long)(data[2] & 0xff) << 8) | ((long)data[3] & 0xff); - - return time; - } - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/sig/KeyFlags.cs b/bc-sharp-crypto/src/bcpg/sig/KeyFlags.cs deleted file mode 100644 index 5b5d85a..0000000 --- a/bc-sharp-crypto/src/bcpg/sig/KeyFlags.cs +++ /dev/null @@ -1,75 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Bcpg.Sig -{ - /** - * Packet holding the key flag values. - */ - public class KeyFlags - : SignatureSubpacket - { - public const int CertifyOther = 0x01; - public const int SignData = 0x02; - public const int EncryptComms = 0x04; - public const int EncryptStorage = 0x08; - public const int Split = 0x10; - public const int Authentication = 0x20; - public const int Shared = 0x80; - - private static byte[] IntToByteArray( - int v) - { - byte[] tmp = new byte[4]; - int size = 0; - - for (int i = 0; i != 4; i++) - { - tmp[i] = (byte)(v >> (i * 8)); - if (tmp[i] != 0) - { - size = i; - } - } - - byte[] data = new byte[size + 1]; - Array.Copy(tmp, 0, data, 0, data.Length); - return data; - } - - public KeyFlags( - bool critical, - bool isLongLength, - byte[] data) - : base(SignatureSubpacketTag.KeyFlags, critical, isLongLength, data) - { - } - - public KeyFlags( - bool critical, - int flags) - : base(SignatureSubpacketTag.KeyFlags, critical, false, IntToByteArray(flags)) - { - } - - /// - /// Return the flag values contained in the first 4 octets (note: at the moment - /// the standard only uses the first one). - /// - public int Flags - { - get - { - int flags = 0; - - for (int i = 0; i != data.Length; i++) - { - flags |= (data[i] & 0xff) << (i * 8); - } - - return flags; - } - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/sig/NotationData.cs b/bc-sharp-crypto/src/bcpg/sig/NotationData.cs deleted file mode 100644 index 9ac6f89..0000000 --- a/bc-sharp-crypto/src/bcpg/sig/NotationData.cs +++ /dev/null @@ -1,113 +0,0 @@ -using System; -using System.IO; -using System.Text; - -namespace Org.BouncyCastle.Bcpg.Sig -{ - /** - * Class provided a NotationData object according to - * RFC2440, Chapter 5.2.3.15. Notation Data - */ - public class NotationData - : SignatureSubpacket - { - public const int HeaderFlagLength = 4; - public const int HeaderNameLength = 2; - public const int HeaderValueLength = 2; - - public NotationData( - bool critical, - bool isLongLength, - byte[] data) - : base(SignatureSubpacketTag.NotationData, critical, isLongLength, data) - { - } - - public NotationData( - bool critical, - bool humanReadable, - string notationName, - string notationValue) - : base(SignatureSubpacketTag.NotationData, critical, false, - CreateData(humanReadable, notationName, notationValue)) - { - } - - private static byte[] CreateData( - bool humanReadable, - string notationName, - string notationValue) - { - MemoryStream os = new MemoryStream(); - - // (4 octets of flags, 2 octets of name length (M), - // 2 octets of value length (N), - // M octets of name data, - // N octets of value data) - - // flags - os.WriteByte(humanReadable ? (byte)0x80 : (byte)0x00); - os.WriteByte(0x0); - os.WriteByte(0x0); - os.WriteByte(0x0); - - byte[] nameData, valueData = null; - int nameLength, valueLength; - - nameData = Encoding.UTF8.GetBytes(notationName); - nameLength = System.Math.Min(nameData.Length, 0xFF); - - valueData = Encoding.UTF8.GetBytes(notationValue); - valueLength = System.Math.Min(valueData.Length, 0xFF); - - // name length - os.WriteByte((byte)(nameLength >> 8)); - os.WriteByte((byte)(nameLength >> 0)); - - // value length - os.WriteByte((byte)(valueLength >> 8)); - os.WriteByte((byte)(valueLength >> 0)); - - // name - os.Write(nameData, 0, nameLength); - - // value - os.Write(valueData, 0, valueLength); - - return os.ToArray(); - } - - public bool IsHumanReadable - { - get { return data[0] == (byte)0x80; } - } - - public string GetNotationName() - { - int nameLength = ((data[HeaderFlagLength] << 8) + (data[HeaderFlagLength + 1] << 0)); - int namePos = HeaderFlagLength + HeaderNameLength + HeaderValueLength; - - return Encoding.UTF8.GetString(data, namePos, nameLength); - } - - public string GetNotationValue() - { - int nameLength = ((data[HeaderFlagLength] << 8) + (data[HeaderFlagLength + 1] << 0)); - int valueLength = ((data[HeaderFlagLength + HeaderNameLength] << 8) + (data[HeaderFlagLength + HeaderNameLength + 1] << 0)); - int valuePos = HeaderFlagLength + HeaderNameLength + HeaderValueLength + nameLength; - - return Encoding.UTF8.GetString(data, valuePos, valueLength); - } - - public byte[] GetNotationValueBytes() - { - int nameLength = ((data[HeaderFlagLength] << 8) + (data[HeaderFlagLength + 1] << 0)); - int valueLength = ((data[HeaderFlagLength + HeaderNameLength] << 8) + (data[HeaderFlagLength + HeaderNameLength + 1] << 0)); - int valuePos = HeaderFlagLength + HeaderNameLength + HeaderValueLength + nameLength; - - byte[] bytes = new byte[valueLength]; - Array.Copy(data, valuePos, bytes, 0, valueLength); - return bytes; - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/sig/PreferredAlgorithms.cs b/bc-sharp-crypto/src/bcpg/sig/PreferredAlgorithms.cs deleted file mode 100644 index 9514bed..0000000 --- a/bc-sharp-crypto/src/bcpg/sig/PreferredAlgorithms.cs +++ /dev/null @@ -1,53 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Bcpg.Sig -{ - /** - * packet giving signature creation time. - */ - public class PreferredAlgorithms - : SignatureSubpacket - { - private static byte[] IntToByteArray( - int[] v) - { - byte[] data = new byte[v.Length]; - - for (int i = 0; i != v.Length; i++) - { - data[i] = (byte)v[i]; - } - - return data; - } - - public PreferredAlgorithms( - SignatureSubpacketTag type, - bool critical, - bool isLongLength, - byte[] data) - : base(type, critical, isLongLength, data) - { - } - - public PreferredAlgorithms( - SignatureSubpacketTag type, - bool critical, - int[] preferences) - : base(type, critical, false, IntToByteArray(preferences)) - { - } - - public int[] GetPreferences() - { - int[] v = new int[data.Length]; - - for (int i = 0; i != v.Length; i++) - { - v[i] = data[i] & 0xff; - } - - return v; - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/sig/PrimaryUserId.cs b/bc-sharp-crypto/src/bcpg/sig/PrimaryUserId.cs deleted file mode 100644 index 1f16f40..0000000 --- a/bc-sharp-crypto/src/bcpg/sig/PrimaryUserId.cs +++ /dev/null @@ -1,47 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Bcpg.Sig -{ - /** - * packet giving whether or not the signature is signed using the primary user ID for the key. - */ - public class PrimaryUserId - : SignatureSubpacket - { - private static byte[] BooleanToByteArray( - bool val) - { - byte[] data = new byte[1]; - - if (val) - { - data[0] = 1; - return data; - } - else - { - return data; - } - } - - public PrimaryUserId( - bool critical, - bool isLongLength, - byte[] data) - : base(SignatureSubpacketTag.PrimaryUserId, critical, isLongLength, data) - { - } - - public PrimaryUserId( - bool critical, - bool isPrimaryUserId) - : base(SignatureSubpacketTag.PrimaryUserId, critical, false, BooleanToByteArray(isPrimaryUserId)) - { - } - - public bool IsPrimaryUserId() - { - return data[0] != 0; - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/sig/Revocable.cs b/bc-sharp-crypto/src/bcpg/sig/Revocable.cs deleted file mode 100644 index 7aa9139..0000000 --- a/bc-sharp-crypto/src/bcpg/sig/Revocable.cs +++ /dev/null @@ -1,47 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Bcpg.Sig -{ - /** - * packet giving whether or not is revocable. - */ - public class Revocable - : SignatureSubpacket - { - private static byte[] BooleanToByteArray( - bool value) - { - byte[] data = new byte[1]; - - if (value) - { - data[0] = 1; - return data; - } - else - { - return data; - } - } - - public Revocable( - bool critical, - bool isLongLength, - byte[] data) - : base(SignatureSubpacketTag.Revocable, critical, isLongLength, data) - { - } - - public Revocable( - bool critical, - bool isRevocable) - : base(SignatureSubpacketTag.Revocable, critical, false, BooleanToByteArray(isRevocable)) - { - } - - public bool IsRevocable() - { - return data[0] != 0; - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/sig/RevocationKey.cs b/bc-sharp-crypto/src/bcpg/sig/RevocationKey.cs deleted file mode 100644 index 11467d2..0000000 --- a/bc-sharp-crypto/src/bcpg/sig/RevocationKey.cs +++ /dev/null @@ -1,63 +0,0 @@ -using System; -using System.Text; - -namespace Org.BouncyCastle.Bcpg -{ - /// - /// Represents revocation key OpenPGP signature sub packet. - /// - public class RevocationKey - : SignatureSubpacket - { - // 1 octet of class, - // 1 octet of public-key algorithm ID, - // 20 octets of fingerprint - public RevocationKey( - bool isCritical, - bool isLongLength, - byte[] data) - : base(SignatureSubpacketTag.RevocationKey, isCritical, isLongLength, data) - { - } - - public RevocationKey( - bool isCritical, - RevocationKeyTag signatureClass, - PublicKeyAlgorithmTag keyAlgorithm, - byte[] fingerprint) - : base(SignatureSubpacketTag.RevocationKey, isCritical, false, - CreateData(signatureClass, keyAlgorithm, fingerprint)) - { - } - - private static byte[] CreateData( - RevocationKeyTag signatureClass, - PublicKeyAlgorithmTag keyAlgorithm, - byte[] fingerprint) - { - byte[] data = new byte[2 + fingerprint.Length]; - data[0] = (byte)signatureClass; - data[1] = (byte)keyAlgorithm; - Array.Copy(fingerprint, 0, data, 2, fingerprint.Length); - return data; - } - - public virtual RevocationKeyTag SignatureClass - { - get { return (RevocationKeyTag)this.GetData()[0]; } - } - - public virtual PublicKeyAlgorithmTag Algorithm - { - get { return (PublicKeyAlgorithmTag)this.GetData()[1]; } - } - - public virtual byte[] GetFingerprint() - { - byte[] data = this.GetData(); - byte[] fingerprint = new byte[data.Length - 2]; - Array.Copy(data, 2, fingerprint, 0, fingerprint.Length); - return fingerprint; - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/sig/RevocationKeyTags.cs b/bc-sharp-crypto/src/bcpg/sig/RevocationKeyTags.cs deleted file mode 100644 index d76d1dc..0000000 --- a/bc-sharp-crypto/src/bcpg/sig/RevocationKeyTags.cs +++ /dev/null @@ -1,9 +0,0 @@ -namespace Org.BouncyCastle.Bcpg -{ - public enum RevocationKeyTag - : byte - { - ClassDefault = 0x80, - ClassSensitive = 0x40 - } -} diff --git a/bc-sharp-crypto/src/bcpg/sig/RevocationReason.cs b/bc-sharp-crypto/src/bcpg/sig/RevocationReason.cs deleted file mode 100644 index 42afd5f..0000000 --- a/bc-sharp-crypto/src/bcpg/sig/RevocationReason.cs +++ /dev/null @@ -1,59 +0,0 @@ -using System; -using System.Text; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Bcpg -{ - /// - /// Represents revocation reason OpenPGP signature sub packet. - /// - public class RevocationReason - : SignatureSubpacket - { - public RevocationReason(bool isCritical, bool isLongLength, byte[] data) - : base(SignatureSubpacketTag.RevocationReason, isCritical, isLongLength, data) - { - } - - public RevocationReason( - bool isCritical, - RevocationReasonTag reason, - string description) - : base(SignatureSubpacketTag.RevocationReason, isCritical, false, CreateData(reason, description)) - { - } - - private static byte[] CreateData( - RevocationReasonTag reason, - string description) - { - byte[] descriptionBytes = Strings.ToUtf8ByteArray(description); - byte[] data = new byte[1 + descriptionBytes.Length]; - - data[0] = (byte)reason; - Array.Copy(descriptionBytes, 0, data, 1, descriptionBytes.Length); - - return data; - } - - public virtual RevocationReasonTag GetRevocationReason() - { - return (RevocationReasonTag)GetData()[0]; - } - - public virtual string GetRevocationDescription() - { - byte[] data = GetData(); - if (data.Length == 1) - { - return string.Empty; - } - - byte[] description = new byte[data.Length - 1]; - Array.Copy(data, 1, description, 0, description.Length); - - return Strings.FromUtf8ByteArray(description); - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/sig/RevocationReasonTags.cs b/bc-sharp-crypto/src/bcpg/sig/RevocationReasonTags.cs deleted file mode 100644 index 524a58c..0000000 --- a/bc-sharp-crypto/src/bcpg/sig/RevocationReasonTags.cs +++ /dev/null @@ -1,14 +0,0 @@ -namespace Org.BouncyCastle.Bcpg -{ - public enum RevocationReasonTag - : byte - { - NoReason = 0, // No reason specified (key revocations or cert revocations) - KeySuperseded = 1, // Key is superseded (key revocations) - KeyCompromised = 2, // Key material has been compromised (key revocations) - KeyRetired = 3, // Key is retired and no longer used (key revocations) - UserNoLongerValid = 32, // User ID information is no longer valid (cert revocations) - - // 100-110 - Private Use - } -} diff --git a/bc-sharp-crypto/src/bcpg/sig/SignatureCreationTime.cs b/bc-sharp-crypto/src/bcpg/sig/SignatureCreationTime.cs deleted file mode 100644 index d172e5d..0000000 --- a/bc-sharp-crypto/src/bcpg/sig/SignatureCreationTime.cs +++ /dev/null @@ -1,51 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities.Date; - -namespace Org.BouncyCastle.Bcpg.Sig -{ - /** - * packet giving signature creation time. - */ - public class SignatureCreationTime - : SignatureSubpacket - { - protected static byte[] TimeToBytes( - DateTime time) - { - long t = DateTimeUtilities.DateTimeToUnixMs(time) / 1000L; - byte[] data = new byte[4]; - data[0] = (byte)(t >> 24); - data[1] = (byte)(t >> 16); - data[2] = (byte)(t >> 8); - data[3] = (byte)t; - return data; - } - - public SignatureCreationTime( - bool critical, - bool isLongLength, - byte[] data) - : base(SignatureSubpacketTag.CreationTime, critical, isLongLength, data) - { - } - - public SignatureCreationTime( - bool critical, - DateTime date) - : base(SignatureSubpacketTag.CreationTime, critical, false, TimeToBytes(date)) - { - } - - public DateTime GetTime() - { - long time = (long)( - ((uint)data[0] << 24) - | ((uint)data[1] << 16) - | ((uint)data[2] << 8) - | ((uint)data[3]) - ); - return DateTimeUtilities.UnixMsToDateTime(time * 1000L); - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/sig/SignatureExpirationTime.cs b/bc-sharp-crypto/src/bcpg/sig/SignatureExpirationTime.cs deleted file mode 100644 index 24f0a9f..0000000 --- a/bc-sharp-crypto/src/bcpg/sig/SignatureExpirationTime.cs +++ /dev/null @@ -1,51 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Bcpg.Sig -{ - /** - * packet giving signature expiration time. - */ - public class SignatureExpirationTime - : SignatureSubpacket - { - protected static byte[] TimeToBytes( - long t) - { - byte[] data = new byte[4]; - data[0] = (byte)(t >> 24); - data[1] = (byte)(t >> 16); - data[2] = (byte)(t >> 8); - data[3] = (byte)t; - return data; - } - - public SignatureExpirationTime( - bool critical, - bool isLongLength, - byte[] data) - : base(SignatureSubpacketTag.ExpireTime, critical, isLongLength, data) - { - } - - public SignatureExpirationTime( - bool critical, - long seconds) - : base(SignatureSubpacketTag.ExpireTime, critical, false, TimeToBytes(seconds)) - { - } - - /** - * return time in seconds before signature expires after creation time. - */ - public long Time - { - get - { - long time = ((long)(data[0] & 0xff) << 24) | ((long)(data[1] & 0xff) << 16) - | ((long)(data[2] & 0xff) << 8) | ((long)data[3] & 0xff); - - return time; - } - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/sig/SignerUserId.cs b/bc-sharp-crypto/src/bcpg/sig/SignerUserId.cs deleted file mode 100644 index 8ab62ed..0000000 --- a/bc-sharp-crypto/src/bcpg/sig/SignerUserId.cs +++ /dev/null @@ -1,53 +0,0 @@ -using System; - - - -namespace Org.BouncyCastle.Bcpg.Sig -{ - /** - * packet giving the User ID of the signer. - */ - public class SignerUserId - : SignatureSubpacket - { - private static byte[] UserIdToBytes( - string id) - { - byte[] idData = new byte[id.Length]; - - for (int i = 0; i != id.Length; i++) - { - idData[i] = (byte)id[i]; - } - - return idData; - } - - public SignerUserId( - bool critical, - bool isLongLength, - byte[] data) - : base(SignatureSubpacketTag.SignerUserId, critical, isLongLength, data) - { - } - - public SignerUserId( - bool critical, - string userId) - : base(SignatureSubpacketTag.SignerUserId, critical, false, UserIdToBytes(userId)) - { - } - - public string GetId() - { - char[] chars = new char[data.Length]; - - for (int i = 0; i != chars.Length; i++) - { - chars[i] = (char)(data[i] & 0xff); - } - - return new string(chars); - } - } -} diff --git a/bc-sharp-crypto/src/bcpg/sig/TrustSignature.cs b/bc-sharp-crypto/src/bcpg/sig/TrustSignature.cs deleted file mode 100644 index 9145882..0000000 --- a/bc-sharp-crypto/src/bcpg/sig/TrustSignature.cs +++ /dev/null @@ -1,44 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Bcpg.Sig -{ - /** - * packet giving trust. - */ - public class TrustSignature - : SignatureSubpacket - { - private static byte[] IntToByteArray( - int v1, - int v2) - { - return new byte[]{ (byte)v1, (byte)v2 }; - } - - public TrustSignature( - bool critical, - bool isLongLength, - byte[] data) - : base(SignatureSubpacketTag.TrustSig, critical, isLongLength, data) - { - } - - public TrustSignature( - bool critical, - int depth, - int trustAmount) - : base(SignatureSubpacketTag.TrustSig, critical, false, IntToByteArray(depth, trustAmount)) - { - } - - public int Depth - { - get { return data[0] & 0xff; } - } - - public int TrustAmount - { - get { return data[1] & 0xff; } - } - } -} diff --git a/bc-sharp-crypto/src/cms/BaseDigestCalculator.cs b/bc-sharp-crypto/src/cms/BaseDigestCalculator.cs deleted file mode 100644 index 3dcbca7..0000000 --- a/bc-sharp-crypto/src/cms/BaseDigestCalculator.cs +++ /dev/null @@ -1,23 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Cms -{ - internal class BaseDigestCalculator - : IDigestCalculator - { - private readonly byte[] digest; - - internal BaseDigestCalculator( - byte[] digest) - { - this.digest = digest; - } - - public byte[] GetDigest() - { - return Arrays.Clone(digest); - } - } -} diff --git a/bc-sharp-crypto/src/cms/CMSAttributeTableGenerationException.cs b/bc-sharp-crypto/src/cms/CMSAttributeTableGenerationException.cs deleted file mode 100644 index 87dad99..0000000 --- a/bc-sharp-crypto/src/cms/CMSAttributeTableGenerationException.cs +++ /dev/null @@ -1,28 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Cms -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class CmsAttributeTableGenerationException - : CmsException - { - public CmsAttributeTableGenerationException() - { - } - - public CmsAttributeTableGenerationException( - string name) - : base(name) - { - } - - public CmsAttributeTableGenerationException( - string name, - Exception e) - : base(name, e) - { - } - } -} diff --git a/bc-sharp-crypto/src/cms/CMSAttributeTableGenerator.cs b/bc-sharp-crypto/src/cms/CMSAttributeTableGenerator.cs deleted file mode 100644 index 92c9a29..0000000 --- a/bc-sharp-crypto/src/cms/CMSAttributeTableGenerator.cs +++ /dev/null @@ -1,25 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1.Cms; - -namespace Org.BouncyCastle.Cms -{ - /// - /// The 'Signature' parameter is only available when generating unsigned attributes. - /// - public enum CmsAttributeTableParameter - { -// const string ContentType = "contentType"; -// const string Digest = "digest"; -// const string Signature = "encryptedDigest"; -// const string DigestAlgorithmIdentifier = "digestAlgID"; - - ContentType, Digest, Signature, DigestAlgorithmIdentifier - } - - public interface CmsAttributeTableGenerator - { - AttributeTable GetAttributes(IDictionary parameters); - } -} diff --git a/bc-sharp-crypto/src/cms/CMSAuthEnvelopedData.cs b/bc-sharp-crypto/src/cms/CMSAuthEnvelopedData.cs deleted file mode 100644 index d35e946..0000000 --- a/bc-sharp-crypto/src/cms/CMSAuthEnvelopedData.cs +++ /dev/null @@ -1,112 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Cms -{ - /** - * containing class for an CMS AuthEnveloped Data object - */ - internal class CmsAuthEnvelopedData - { - internal RecipientInformationStore recipientInfoStore; - internal ContentInfo contentInfo; - - private OriginatorInfo originator; - private AlgorithmIdentifier authEncAlg; - private Asn1Set authAttrs; - private byte[] mac; - private Asn1Set unauthAttrs; - - public CmsAuthEnvelopedData( - byte[] authEnvData) - : this(CmsUtilities.ReadContentInfo(authEnvData)) - { - } - - public CmsAuthEnvelopedData( - Stream authEnvData) - : this(CmsUtilities.ReadContentInfo(authEnvData)) - { - } - - public CmsAuthEnvelopedData( - ContentInfo contentInfo) - { - this.contentInfo = contentInfo; - - AuthEnvelopedData authEnvData = AuthEnvelopedData.GetInstance(contentInfo.Content); - - this.originator = authEnvData.OriginatorInfo; - - // - // read the recipients - // - Asn1Set recipientInfos = authEnvData.RecipientInfos; - - // - // read the auth-encrypted content info - // - EncryptedContentInfo authEncInfo = authEnvData.AuthEncryptedContentInfo; - this.authEncAlg = authEncInfo.ContentEncryptionAlgorithm; - CmsSecureReadable secureReadable = new AuthEnvelopedSecureReadable(this); - - // - // build the RecipientInformationStore - // - this.recipientInfoStore = CmsEnvelopedHelper.BuildRecipientInformationStore( - recipientInfos, secureReadable); - - // FIXME These need to be passed to the AEAD cipher as AAD (Additional Authenticated Data) - this.authAttrs = authEnvData.AuthAttrs; - this.mac = authEnvData.Mac.GetOctets(); - this.unauthAttrs = authEnvData.UnauthAttrs; - } - - private class AuthEnvelopedSecureReadable : CmsSecureReadable - { - private readonly CmsAuthEnvelopedData parent; - - internal AuthEnvelopedSecureReadable(CmsAuthEnvelopedData parent) - { - this.parent = parent; - } - - public AlgorithmIdentifier Algorithm - { - get { return parent.authEncAlg; } - } - - public object CryptoObject - { - get { return null; } - } - - public CmsReadable GetReadable(KeyParameter key) - { - // TODO Create AEAD cipher instance to decrypt and calculate tag ( MAC) - throw new CmsException("AuthEnveloped data decryption not yet implemented"); - -// RFC 5084 ASN.1 Module -// -- Parameters for AlgorithmIdentifier -// -// CCMParameters ::= SEQUENCE { -// aes-nonce OCTET STRING (SIZE(7..13)), -// aes-ICVlen AES-CCM-ICVlen DEFAULT 12 } -// -// AES-CCM-ICVlen ::= INTEGER (4 | 6 | 8 | 10 | 12 | 14 | 16) -// -// GCMParameters ::= SEQUENCE { -// aes-nonce OCTET STRING, -- recommended size is 12 octets -// aes-ICVlen AES-GCM-ICVlen DEFAULT 12 } -// -// AES-GCM-ICVlen ::= INTEGER (12 | 13 | 14 | 15 | 16) - } - } - } -} diff --git a/bc-sharp-crypto/src/cms/CMSAuthEnvelopedGenerator.cs b/bc-sharp-crypto/src/cms/CMSAuthEnvelopedGenerator.cs deleted file mode 100644 index 4273cff..0000000 --- a/bc-sharp-crypto/src/cms/CMSAuthEnvelopedGenerator.cs +++ /dev/null @@ -1,16 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.Nist; - -namespace Org.BouncyCastle.Cms -{ - internal class CmsAuthEnvelopedGenerator - { - public static readonly string Aes128Ccm = NistObjectIdentifiers.IdAes128Ccm.Id; - public static readonly string Aes192Ccm = NistObjectIdentifiers.IdAes192Ccm.Id; - public static readonly string Aes256Ccm = NistObjectIdentifiers.IdAes256Ccm.Id; - public static readonly string Aes128Gcm = NistObjectIdentifiers.IdAes128Gcm.Id; - public static readonly string Aes192Gcm = NistObjectIdentifiers.IdAes192Gcm.Id; - public static readonly string Aes256Gcm = NistObjectIdentifiers.IdAes256Gcm.Id; - } -} diff --git a/bc-sharp-crypto/src/cms/CMSAuthenticatedData.cs b/bc-sharp-crypto/src/cms/CMSAuthenticatedData.cs deleted file mode 100644 index 33b4cc2..0000000 --- a/bc-sharp-crypto/src/cms/CMSAuthenticatedData.cs +++ /dev/null @@ -1,137 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Cms -{ - /** - * containing class for an CMS Authenticated Data object - */ - public class CmsAuthenticatedData - { - internal RecipientInformationStore recipientInfoStore; - internal ContentInfo contentInfo; - - private AlgorithmIdentifier macAlg; - private Asn1Set authAttrs; - private Asn1Set unauthAttrs; - private byte[] mac; - - public CmsAuthenticatedData( - byte[] authData) - : this(CmsUtilities.ReadContentInfo(authData)) - { - } - - public CmsAuthenticatedData( - Stream authData) - : this(CmsUtilities.ReadContentInfo(authData)) - { - } - - public CmsAuthenticatedData( - ContentInfo contentInfo) - { - this.contentInfo = contentInfo; - - AuthenticatedData authData = AuthenticatedData.GetInstance(contentInfo.Content); - - // - // read the recipients - // - Asn1Set recipientInfos = authData.RecipientInfos; - - this.macAlg = authData.MacAlgorithm; - - // - // read the authenticated content info - // - ContentInfo encInfo = authData.EncapsulatedContentInfo; - CmsReadable readable = new CmsProcessableByteArray( - Asn1OctetString.GetInstance(encInfo.Content).GetOctets()); - CmsSecureReadable secureReadable = new CmsEnvelopedHelper.CmsAuthenticatedSecureReadable( - this.macAlg, readable); - - // - // build the RecipientInformationStore - // - this.recipientInfoStore = CmsEnvelopedHelper.BuildRecipientInformationStore( - recipientInfos, secureReadable); - - this.authAttrs = authData.AuthAttrs; - this.mac = authData.Mac.GetOctets(); - this.unauthAttrs = authData.UnauthAttrs; - } - - public byte[] GetMac() - { - return Arrays.Clone(mac); - } - - public AlgorithmIdentifier MacAlgorithmID - { - get { return macAlg; } - } - - /** - * return the object identifier for the content MAC algorithm. - */ - public string MacAlgOid - { - get { return macAlg.Algorithm.Id; } - } - - /** - * return a store of the intended recipients for this message - */ - public RecipientInformationStore GetRecipientInfos() - { - return recipientInfoStore; - } - - /** - * return the ContentInfo - */ - public ContentInfo ContentInfo - { - get { return contentInfo; } - } - - /** - * return a table of the digested attributes indexed by - * the OID of the attribute. - */ - public Asn1.Cms.AttributeTable GetAuthAttrs() - { - if (authAttrs == null) - return null; - - return new Asn1.Cms.AttributeTable(authAttrs); - } - - /** - * return a table of the undigested attributes indexed by - * the OID of the attribute. - */ - public Asn1.Cms.AttributeTable GetUnauthAttrs() - { - if (unauthAttrs == null) - return null; - - return new Asn1.Cms.AttributeTable(unauthAttrs); - } - - /** - * return the ASN.1 encoded representation of this object. - */ - public byte[] GetEncoded() - { - return contentInfo.GetEncoded(); - } - } -} diff --git a/bc-sharp-crypto/src/cms/CMSAuthenticatedDataGenerator.cs b/bc-sharp-crypto/src/cms/CMSAuthenticatedDataGenerator.cs deleted file mode 100644 index 131a475..0000000 --- a/bc-sharp-crypto/src/cms/CMSAuthenticatedDataGenerator.cs +++ /dev/null @@ -1,156 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Generators; -using Org.BouncyCastle.Crypto.IO; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Cms -{ - /** - * General class for generating a CMS authenticated-data message. - * - * A simple example of usage. - * - * 
-	 *      CMSAuthenticatedDataGenerator  fact = new CMSAuthenticatedDataGenerator();
-	 *
-	 *      fact.addKeyTransRecipient(cert);
-	 *
-	 *      CMSAuthenticatedData         data = fact.generate(content, algorithm, "BC");
-	 *
- */ - public class CmsAuthenticatedDataGenerator - : CmsAuthenticatedGenerator - { - /** - * base constructor - */ - public CmsAuthenticatedDataGenerator() - { - } - - /** - * constructor allowing specific source of randomness - * @param rand instance of SecureRandom to use - */ - public CmsAuthenticatedDataGenerator( - SecureRandom rand) - : base(rand) - { - } - - /** - * generate an enveloped object that contains an CMS Enveloped Data - * object using the given provider and the passed in key generator. - */ - private CmsAuthenticatedData Generate( - CmsProcessable content, - string macOid, - CipherKeyGenerator keyGen) - { - AlgorithmIdentifier macAlgId; - KeyParameter encKey; - Asn1OctetString encContent; - Asn1OctetString macResult; - - try - { - // FIXME Will this work for macs? - byte[] encKeyBytes = keyGen.GenerateKey(); - encKey = ParameterUtilities.CreateKeyParameter(macOid, encKeyBytes); - - Asn1Encodable asn1Params = GenerateAsn1Parameters(macOid, encKeyBytes); - - ICipherParameters cipherParameters; - macAlgId = GetAlgorithmIdentifier( - macOid, encKey, asn1Params, out cipherParameters); - - IMac mac = MacUtilities.GetMac(macOid); - // TODO Confirm no ParametersWithRandom needed - // FIXME Only passing key at the moment -// mac.Init(cipherParameters); - mac.Init(encKey); - - MemoryStream bOut = new MemoryStream(); - Stream mOut = new TeeOutputStream(bOut, new MacOutputStream(mac)); - - content.Write(mOut); - - Platform.Dispose(mOut); - - encContent = new BerOctetString(bOut.ToArray()); - - byte[] macOctets = MacUtilities.DoFinal(mac); - macResult = new DerOctetString(macOctets); - } - catch (SecurityUtilityException e) - { - throw new CmsException("couldn't create cipher.", e); - } - catch (InvalidKeyException e) - { - throw new CmsException("key invalid in message.", e); - } - catch (IOException e) - { - throw new CmsException("exception decoding algorithm parameters.", e); - } - - Asn1EncodableVector recipientInfos = new Asn1EncodableVector(); - - foreach (RecipientInfoGenerator rig in recipientInfoGenerators) - { - try - { - recipientInfos.Add(rig.Generate(encKey, rand)); - } - catch (InvalidKeyException e) - { - throw new CmsException("key inappropriate for algorithm.", e); - } - catch (GeneralSecurityException e) - { - throw new CmsException("error making encrypted content.", e); - } - } - - ContentInfo eci = new ContentInfo(CmsObjectIdentifiers.Data, encContent); - - ContentInfo contentInfo = new ContentInfo( - CmsObjectIdentifiers.AuthenticatedData, - new AuthenticatedData(null, new DerSet(recipientInfos), macAlgId, null, eci, null, macResult, null)); - - return new CmsAuthenticatedData(contentInfo); - } - - /** - * generate an authenticated object that contains an CMS Authenticated Data object - */ - public CmsAuthenticatedData Generate( - CmsProcessable content, - string encryptionOid) - { - try - { - // FIXME Will this work for macs? - CipherKeyGenerator keyGen = GeneratorUtilities.GetKeyGenerator(encryptionOid); - - keyGen.Init(new KeyGenerationParameters(rand, keyGen.DefaultStrength)); - - return Generate(content, encryptionOid, keyGen); - } - catch (SecurityUtilityException e) - { - throw new CmsException("can't find key generation algorithm.", e); - } - } - } -} diff --git a/bc-sharp-crypto/src/cms/CMSAuthenticatedDataParser.cs b/bc-sharp-crypto/src/cms/CMSAuthenticatedDataParser.cs deleted file mode 100644 index 7defafc..0000000 --- a/bc-sharp-crypto/src/cms/CMSAuthenticatedDataParser.cs +++ /dev/null @@ -1,214 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Cms -{ - /** - * Parsing class for an CMS Authenticated Data object from an input stream. - *

- * Note: that because we are in a streaming mode only one recipient can be tried and it is important - * that the methods on the parser are called in the appropriate order. - *

- *

- * Example of use - assuming the first recipient matches the private key we have. - * 

-	*      CMSAuthenticatedDataParser     ad = new CMSAuthenticatedDataParser(inputStream);
-	*
-	*      RecipientInformationStore  recipients = ad.getRecipientInfos();
-	*
-	*      Collection  c = recipients.getRecipients();
-	*      Iterator    it = c.iterator();
-	*
-	*      if (it.hasNext())
-	*      {
-	*          RecipientInformation   recipient = (RecipientInformation)it.next();
-	*
-	*          CMSTypedStream recData = recipient.getContentStream(privateKey, "BC");
-	*
-	*          processDataStream(recData.getContentStream());
-	*
-	*          if (!Arrays.equals(ad.getMac(), recipient.getMac())
-	*          {
-	*              System.err.println("Data corrupted!!!!");
-	*          }
-	*      }
-	*
- * Note: this class does not introduce buffering - if you are processing large files you should create - * the parser with: - * 
-	*          CMSAuthenticatedDataParser     ep = new CMSAuthenticatedDataParser(new BufferedInputStream(inputStream, bufSize));
-	*
- * where bufSize is a suitably large buffer size. - *

- */ - public class CmsAuthenticatedDataParser - : CmsContentInfoParser - { - internal RecipientInformationStore _recipientInfoStore; - internal AuthenticatedDataParser authData; - - private AlgorithmIdentifier macAlg; - private byte[] mac; - private Asn1.Cms.AttributeTable authAttrs; - private Asn1.Cms.AttributeTable unauthAttrs; - - private bool authAttrNotRead; - private bool unauthAttrNotRead; - - public CmsAuthenticatedDataParser( - byte[] envelopedData) - : this(new MemoryStream(envelopedData, false)) - { - } - - public CmsAuthenticatedDataParser( - Stream envelopedData) - : base(envelopedData) - { - this.authAttrNotRead = true; - this.authData = new AuthenticatedDataParser( - (Asn1SequenceParser)contentInfo.GetContent(Asn1Tags.Sequence)); - - // TODO Validate version? - //DerInteger version = this.authData.getVersion(); - - // - // read the recipients - // - Asn1Set recipientInfos = Asn1Set.GetInstance(authData.GetRecipientInfos().ToAsn1Object()); - - this.macAlg = authData.GetMacAlgorithm(); - - // - // read the authenticated content info - // - ContentInfoParser data = authData.GetEnapsulatedContentInfo(); - CmsReadable readable = new CmsProcessableInputStream( - ((Asn1OctetStringParser)data.GetContent(Asn1Tags.OctetString)).GetOctetStream()); - CmsSecureReadable secureReadable = new CmsEnvelopedHelper.CmsAuthenticatedSecureReadable( - this.macAlg, readable); - - // - // build the RecipientInformationStore - // - this._recipientInfoStore = CmsEnvelopedHelper.BuildRecipientInformationStore( - recipientInfos, secureReadable); - } - - public AlgorithmIdentifier MacAlgorithmID - { - get { return macAlg; } - } - - /** - * return the object identifier for the mac algorithm. - */ - public string MacAlgOid - { - get { return macAlg.Algorithm.Id; } - } - - - /** - * return the ASN.1 encoded encryption algorithm parameters, or null if - * there aren't any. - */ - public Asn1Object MacAlgParams - { - get - { - Asn1Encodable ae = macAlg.Parameters; - - return ae == null ? null : ae.ToAsn1Object(); - } - } - - /** - * return a store of the intended recipients for this message - */ - public RecipientInformationStore GetRecipientInfos() - { - return _recipientInfoStore; - } - - public byte[] GetMac() - { - if (mac == null) - { - GetAuthAttrs(); - mac = authData.GetMac().GetOctets(); - } - return Arrays.Clone(mac); - } - - /** - * return a table of the unauthenticated attributes indexed by - * the OID of the attribute. - * @exception java.io.IOException - */ - public Asn1.Cms.AttributeTable GetAuthAttrs() - { - if (authAttrs == null && authAttrNotRead) - { - Asn1SetParser s = authData.GetAuthAttrs(); - - authAttrNotRead = false; - - if (s != null) - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - IAsn1Convertible o; - while ((o = s.ReadObject()) != null) - { - Asn1SequenceParser seq = (Asn1SequenceParser)o; - - v.Add(seq.ToAsn1Object()); - } - - authAttrs = new Asn1.Cms.AttributeTable(new DerSet(v)); - } - } - - return authAttrs; - } - - /** - * return a table of the unauthenticated attributes indexed by - * the OID of the attribute. - * @exception java.io.IOException - */ - public Asn1.Cms.AttributeTable GetUnauthAttrs() - { - if (unauthAttrs == null && unauthAttrNotRead) - { - Asn1SetParser s = authData.GetUnauthAttrs(); - - unauthAttrNotRead = false; - - if (s != null) - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - IAsn1Convertible o; - while ((o = s.ReadObject()) != null) - { - Asn1SequenceParser seq = (Asn1SequenceParser)o; - - v.Add(seq.ToAsn1Object()); - } - - unauthAttrs = new Asn1.Cms.AttributeTable(new DerSet(v)); - } - } - - return unauthAttrs; - } - } -} diff --git a/bc-sharp-crypto/src/cms/CMSAuthenticatedDataStreamGenerator.cs b/bc-sharp-crypto/src/cms/CMSAuthenticatedDataStreamGenerator.cs deleted file mode 100644 index 4d18d10..0000000 --- a/bc-sharp-crypto/src/cms/CMSAuthenticatedDataStreamGenerator.cs +++ /dev/null @@ -1,297 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Generators; -using Org.BouncyCastle.Crypto.IO; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Cms -{ - /** - * General class for generating a CMS authenticated-data message stream. - *

- * A simple example of usage. - * 

-	*      CMSAuthenticatedDataStreamGenerator edGen = new CMSAuthenticatedDataStreamGenerator();
-	*
-	*      edGen.addKeyTransRecipient(cert);
-	*
-	*      ByteArrayOutputStream  bOut = new ByteArrayOutputStream();
-	*
-	*      OutputStream out = edGen.open(
-	*                              bOut, CMSAuthenticatedDataGenerator.AES128_CBC, "BC");*
-	*      out.write(data);
-	*
-	*      out.close();
-	*
- *

- */ - public class CmsAuthenticatedDataStreamGenerator - : CmsAuthenticatedGenerator - { - // TODO Add support -// private object _originatorInfo = null; -// private object _unprotectedAttributes = null; - private int _bufferSize; - private bool _berEncodeRecipientSet; - - /** - * base constructor - */ - public CmsAuthenticatedDataStreamGenerator() - { - } - - /** - * constructor allowing specific source of randomness - * @param rand instance of SecureRandom to use - */ - public CmsAuthenticatedDataStreamGenerator( - SecureRandom rand) - : base(rand) - { - } - - /** - * Set the underlying string size for encapsulated data - * - * @param bufferSize length of octet strings to buffer the data. - */ - public void SetBufferSize( - int bufferSize) - { - _bufferSize = bufferSize; - } - - /** - * Use a BER Set to store the recipient information - */ - public void SetBerEncodeRecipients( - bool berEncodeRecipientSet) - { - _berEncodeRecipientSet = berEncodeRecipientSet; - } - - /** - * generate an enveloped object that contains an CMS Enveloped Data - * object using the given provider and the passed in key generator. - * @throws java.io.IOException - */ - private Stream Open( - Stream outStr, - string macOid, - CipherKeyGenerator keyGen) - { - // FIXME Will this work for macs? - byte[] encKeyBytes = keyGen.GenerateKey(); - KeyParameter encKey = ParameterUtilities.CreateKeyParameter(macOid, encKeyBytes); - - Asn1Encodable asn1Params = GenerateAsn1Parameters(macOid, encKeyBytes); - - ICipherParameters cipherParameters; - AlgorithmIdentifier macAlgId = GetAlgorithmIdentifier( - macOid, encKey, asn1Params, out cipherParameters); - - Asn1EncodableVector recipientInfos = new Asn1EncodableVector(); - - foreach (RecipientInfoGenerator rig in recipientInfoGenerators) - { - try - { - recipientInfos.Add(rig.Generate(encKey, rand)); - } - catch (InvalidKeyException e) - { - throw new CmsException("key inappropriate for algorithm.", e); - } - catch (GeneralSecurityException e) - { - throw new CmsException("error making encrypted content.", e); - } - } - - // FIXME Only passing key at the moment -// return Open(outStr, macAlgId, cipherParameters, recipientInfos); - return Open(outStr, macAlgId, encKey, recipientInfos); - } - - protected Stream Open( - Stream outStr, - AlgorithmIdentifier macAlgId, - ICipherParameters cipherParameters, - Asn1EncodableVector recipientInfos) - { - try - { - // - // ContentInfo - // - BerSequenceGenerator cGen = new BerSequenceGenerator(outStr); - - cGen.AddObject(CmsObjectIdentifiers.AuthenticatedData); - - // - // Authenticated Data - // - BerSequenceGenerator authGen = new BerSequenceGenerator( - cGen.GetRawOutputStream(), 0, true); - - authGen.AddObject(new DerInteger(AuthenticatedData.CalculateVersion(null))); - - Stream authRaw = authGen.GetRawOutputStream(); - Asn1Generator recipGen = _berEncodeRecipientSet - ? (Asn1Generator) new BerSetGenerator(authRaw) - : new DerSetGenerator(authRaw); - - foreach (Asn1Encodable ae in recipientInfos) - { - recipGen.AddObject(ae); - } - - recipGen.Close(); - - authGen.AddObject(macAlgId); - - BerSequenceGenerator eiGen = new BerSequenceGenerator(authRaw); - eiGen.AddObject(CmsObjectIdentifiers.Data); - - Stream octetOutputStream = CmsUtilities.CreateBerOctetOutputStream( - eiGen.GetRawOutputStream(), 0, false, _bufferSize); - - IMac mac = MacUtilities.GetMac(macAlgId.Algorithm); - // TODO Confirm no ParametersWithRandom needed - mac.Init(cipherParameters); - Stream mOut = new TeeOutputStream(octetOutputStream, new MacOutputStream(mac)); - - return new CmsAuthenticatedDataOutputStream(mOut, mac, cGen, authGen, eiGen); - } - catch (SecurityUtilityException e) - { - throw new CmsException("couldn't create cipher.", e); - } - catch (InvalidKeyException e) - { - throw new CmsException("key invalid in message.", e); - } - catch (IOException e) - { - throw new CmsException("exception decoding algorithm parameters.", e); - } - } - - /** - * generate an enveloped object that contains an CMS Enveloped Data object - */ - public Stream Open( - Stream outStr, - string encryptionOid) - { - CipherKeyGenerator keyGen = GeneratorUtilities.GetKeyGenerator(encryptionOid); - - keyGen.Init(new KeyGenerationParameters(rand, keyGen.DefaultStrength)); - - return Open(outStr, encryptionOid, keyGen); - } - - /** - * generate an enveloped object that contains an CMS Enveloped Data object - */ - public Stream Open( - Stream outStr, - string encryptionOid, - int keySize) - { - CipherKeyGenerator keyGen = GeneratorUtilities.GetKeyGenerator(encryptionOid); - - keyGen.Init(new KeyGenerationParameters(rand, keySize)); - - return Open(outStr, encryptionOid, keyGen); - } - - private class CmsAuthenticatedDataOutputStream - : BaseOutputStream - { - private readonly Stream macStream; - private readonly IMac mac; - private readonly BerSequenceGenerator cGen; - private readonly BerSequenceGenerator authGen; - private readonly BerSequenceGenerator eiGen; - - public CmsAuthenticatedDataOutputStream( - Stream macStream, - IMac mac, - BerSequenceGenerator cGen, - BerSequenceGenerator authGen, - BerSequenceGenerator eiGen) - { - this.macStream = macStream; - this.mac = mac; - this.cGen = cGen; - this.authGen = authGen; - this.eiGen = eiGen; - } - - public override void WriteByte( - byte b) - { - macStream.WriteByte(b); - } - - public override void Write( - byte[] bytes, - int off, - int len) - { - macStream.Write(bytes, off, len); - } - -#if PORTABLE - protected override void Dispose(bool disposing) - { - if (disposing) - { - Platform.Dispose(macStream); - - // TODO Parent context(s) should really be be closed explicitly - - eiGen.Close(); - - // [TODO] auth attributes go here - byte[] macOctets = MacUtilities.DoFinal(mac); - authGen.AddObject(new DerOctetString(macOctets)); - // [TODO] unauth attributes go here - - authGen.Close(); - cGen.Close(); - } - base.Dispose(disposing); - } -#else - public override void Close() - { - Platform.Dispose(macStream); - - // TODO Parent context(s) should really be be closed explicitly - - eiGen.Close(); - - // [TODO] auth attributes go here - byte[] macOctets = MacUtilities.DoFinal(mac); - authGen.AddObject(new DerOctetString(macOctets)); - // [TODO] unauth attributes go here - - authGen.Close(); - cGen.Close(); - base.Close(); - } -#endif - } - } -} diff --git a/bc-sharp-crypto/src/cms/CMSAuthenticatedGenerator.cs b/bc-sharp-crypto/src/cms/CMSAuthenticatedGenerator.cs deleted file mode 100644 index 8824d19..0000000 --- a/bc-sharp-crypto/src/cms/CMSAuthenticatedGenerator.cs +++ /dev/null @@ -1,35 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities.Date; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Cms -{ - public class CmsAuthenticatedGenerator - : CmsEnvelopedGenerator - { - /** - * base constructor - */ - public CmsAuthenticatedGenerator() - { - } - - /** - * constructor allowing specific source of randomness - * - * @param rand instance of SecureRandom to use - */ - public CmsAuthenticatedGenerator( - SecureRandom rand) - : base(rand) - { - } - } -} diff --git a/bc-sharp-crypto/src/cms/CMSCompressedData.cs b/bc-sharp-crypto/src/cms/CMSCompressedData.cs deleted file mode 100644 index 21651f0..0000000 --- a/bc-sharp-crypto/src/cms/CMSCompressedData.cs +++ /dev/null @@ -1,108 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Zlib; - -namespace Org.BouncyCastle.Cms -{ - /** - * containing class for an CMS Compressed Data object - */ - public class CmsCompressedData - { - internal ContentInfo contentInfo; - - public CmsCompressedData( - byte[] compressedData) - : this(CmsUtilities.ReadContentInfo(compressedData)) - { - } - - public CmsCompressedData( - Stream compressedDataStream) - : this(CmsUtilities.ReadContentInfo(compressedDataStream)) - { - } - - public CmsCompressedData( - ContentInfo contentInfo) - { - this.contentInfo = contentInfo; - } - - /** - * Return the uncompressed content. - * - * @return the uncompressed content - * @throws CmsException if there is an exception uncompressing the data. - */ - public byte[] GetContent() - { - CompressedData comData = CompressedData.GetInstance(contentInfo.Content); - ContentInfo content = comData.EncapContentInfo; - - Asn1OctetString bytes = (Asn1OctetString) content.Content; - ZInputStream zIn = new ZInputStream(bytes.GetOctetStream()); - - try - { - return CmsUtilities.StreamToByteArray(zIn); - } - catch (IOException e) - { - throw new CmsException("exception reading compressed stream.", e); - } - finally - { - Platform.Dispose(zIn); - } - } - - /** - * Return the uncompressed content, throwing an exception if the data size - * is greater than the passed in limit. If the content is exceeded getCause() - * on the CMSException will contain a StreamOverflowException - * - * @param limit maximum number of bytes to read - * @return the content read - * @throws CMSException if there is an exception uncompressing the data. - */ - public byte[] GetContent(int limit) - { - CompressedData comData = CompressedData.GetInstance(contentInfo.Content); - ContentInfo content = comData.EncapContentInfo; - - Asn1OctetString bytes = (Asn1OctetString)content.Content; - - ZInputStream zIn = new ZInputStream(new MemoryStream(bytes.GetOctets(), false)); - - try - { - return CmsUtilities.StreamToByteArray(zIn, limit); - } - catch (IOException e) - { - throw new CmsException("exception reading compressed stream.", e); - } - } - - /** - * return the ContentInfo - */ - public ContentInfo ContentInfo - { - get { return contentInfo; } - } - - /** - * return the ASN.1 encoded representation of this object. - */ - public byte[] GetEncoded() - { - return contentInfo.GetEncoded(); - } - } -} diff --git a/bc-sharp-crypto/src/cms/CMSCompressedDataGenerator.cs b/bc-sharp-crypto/src/cms/CMSCompressedDataGenerator.cs deleted file mode 100644 index d51de10..0000000 --- a/bc-sharp-crypto/src/cms/CMSCompressedDataGenerator.cs +++ /dev/null @@ -1,67 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Zlib; - -namespace Org.BouncyCastle.Cms -{ - /** - * General class for generating a compressed CMS message. - *

- * A simple example of usage.

- *

- * 

-    *      CMSCompressedDataGenerator fact = new CMSCompressedDataGenerator();
-    *      CMSCompressedData data = fact.Generate(content, algorithm);
-    *
- *

- */ - public class CmsCompressedDataGenerator - { - public const string ZLib = "1.2.840.113549.1.9.16.3.8"; - - public CmsCompressedDataGenerator() - { - } - - /** - * Generate an object that contains an CMS Compressed Data - */ - public CmsCompressedData Generate( - CmsProcessable content, - string compressionOid) - { - AlgorithmIdentifier comAlgId; - Asn1OctetString comOcts; - - try - { - MemoryStream bOut = new MemoryStream(); - ZOutputStream zOut = new ZOutputStream(bOut, JZlib.Z_DEFAULT_COMPRESSION); - - content.Write(zOut); - - Platform.Dispose(zOut); - - comAlgId = new AlgorithmIdentifier(new DerObjectIdentifier(compressionOid)); - comOcts = new BerOctetString(bOut.ToArray()); - } - catch (IOException e) - { - throw new CmsException("exception encoding data.", e); - } - - ContentInfo comContent = new ContentInfo(CmsObjectIdentifiers.Data, comOcts); - ContentInfo contentInfo = new ContentInfo( - CmsObjectIdentifiers.CompressedData, - new CompressedData(comAlgId, comContent)); - - return new CmsCompressedData(contentInfo); - } - } -} diff --git a/bc-sharp-crypto/src/cms/CMSCompressedDataParser.cs b/bc-sharp-crypto/src/cms/CMSCompressedDataParser.cs deleted file mode 100644 index 93dfa12..0000000 --- a/bc-sharp-crypto/src/cms/CMSCompressedDataParser.cs +++ /dev/null @@ -1,57 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Utilities.Zlib; - -namespace Org.BouncyCastle.Cms -{ - /** - * Class for reading a CMS Compressed Data stream. - * 
-    *     CMSCompressedDataParser cp = new CMSCompressedDataParser(inputStream);
-    *
-    *     process(cp.GetContent().GetContentStream());
-    *
- * Note: this class does not introduce buffering - if you are processing large files you should create - * the parser with: - * 
-    *      CMSCompressedDataParser     ep = new CMSCompressedDataParser(new BufferedInputStream(inputStream, bufSize));
-    *
- * where bufSize is a suitably large buffer size. - */ - public class CmsCompressedDataParser - : CmsContentInfoParser - { - public CmsCompressedDataParser( - byte[] compressedData) - : this(new MemoryStream(compressedData, false)) - { - } - - public CmsCompressedDataParser( - Stream compressedData) - : base(compressedData) - { - } - - public CmsTypedStream GetContent() - { - try - { - CompressedDataParser comData = new CompressedDataParser((Asn1SequenceParser)this.contentInfo.GetContent(Asn1Tags.Sequence)); - ContentInfoParser content = comData.GetEncapContentInfo(); - - Asn1OctetStringParser bytes = (Asn1OctetStringParser)content.GetContent(Asn1Tags.OctetString); - - return new CmsTypedStream(content.ContentType.ToString(), new ZInputStream(bytes.GetOctetStream())); - } - catch (IOException e) - { - throw new CmsException("IOException reading compressed content.", e); - } - } - } -} diff --git a/bc-sharp-crypto/src/cms/CMSCompressedDataStreamGenerator.cs b/bc-sharp-crypto/src/cms/CMSCompressedDataStreamGenerator.cs deleted file mode 100644 index 0cb1bb6..0000000 --- a/bc-sharp-crypto/src/cms/CMSCompressedDataStreamGenerator.cs +++ /dev/null @@ -1,158 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.IO; -using Org.BouncyCastle.Utilities.Zlib; - -namespace Org.BouncyCastle.Cms -{ - /** - * General class for generating a compressed CMS message stream. - *

- * A simple example of usage. - *

- * 
-	*      CMSCompressedDataStreamGenerator gen = new CMSCompressedDataStreamGenerator();
-	*
-	*      Stream cOut = gen.Open(outputStream, CMSCompressedDataStreamGenerator.ZLIB);
-	*
-	*      cOut.Write(data);
-	*
-	*      cOut.Close();
-	*
- */ - public class CmsCompressedDataStreamGenerator - { - public const string ZLib = "1.2.840.113549.1.9.16.3.8"; - - private int _bufferSize; - - /** - * base constructor - */ - public CmsCompressedDataStreamGenerator() - { - } - - /** - * Set the underlying string size for encapsulated data - * - * @param bufferSize length of octet strings to buffer the data. - */ - public void SetBufferSize( - int bufferSize) - { - _bufferSize = bufferSize; - } - - public Stream Open( - Stream outStream, - string compressionOID) - { - return Open(outStream, CmsObjectIdentifiers.Data.Id, compressionOID); - } - - public Stream Open( - Stream outStream, - string contentOID, - string compressionOID) - { - BerSequenceGenerator sGen = new BerSequenceGenerator(outStream); - - sGen.AddObject(CmsObjectIdentifiers.CompressedData); - - // - // Compressed Data - // - BerSequenceGenerator cGen = new BerSequenceGenerator( - sGen.GetRawOutputStream(), 0, true); - - // CMSVersion - cGen.AddObject(new DerInteger(0)); - - // CompressionAlgorithmIdentifier - cGen.AddObject(new AlgorithmIdentifier(new DerObjectIdentifier(ZLib))); - - // - // Encapsulated ContentInfo - // - BerSequenceGenerator eiGen = new BerSequenceGenerator(cGen.GetRawOutputStream()); - - eiGen.AddObject(new DerObjectIdentifier(contentOID)); - - Stream octetStream = CmsUtilities.CreateBerOctetOutputStream( - eiGen.GetRawOutputStream(), 0, true, _bufferSize); - - return new CmsCompressedOutputStream( - new ZOutputStream(octetStream, JZlib.Z_DEFAULT_COMPRESSION), sGen, cGen, eiGen); - } - - private class CmsCompressedOutputStream - : BaseOutputStream - { - private ZOutputStream _out; - private BerSequenceGenerator _sGen; - private BerSequenceGenerator _cGen; - private BerSequenceGenerator _eiGen; - - internal CmsCompressedOutputStream( - ZOutputStream outStream, - BerSequenceGenerator sGen, - BerSequenceGenerator cGen, - BerSequenceGenerator eiGen) - { - _out = outStream; - _sGen = sGen; - _cGen = cGen; - _eiGen = eiGen; - } - - public override void WriteByte( - byte b) - { - _out.WriteByte(b); - } - - public override void Write( - byte[] bytes, - int off, - int len) - { - _out.Write(bytes, off, len); - } - -#if PORTABLE - protected override void Dispose(bool disposing) - { - if (disposing) - { - Platform.Dispose(_out); - - // TODO Parent context(s) should really be be closed explicitly - - _eiGen.Close(); - _cGen.Close(); - _sGen.Close(); - } - base.Dispose(disposing); - } -#else - public override void Close() - { - Platform.Dispose(_out); - - // TODO Parent context(s) should really be be closed explicitly - - _eiGen.Close(); - _cGen.Close(); - _sGen.Close(); - base.Close(); - } -#endif - } - } -} diff --git a/bc-sharp-crypto/src/cms/CMSContentInfoParser.cs b/bc-sharp-crypto/src/cms/CMSContentInfoParser.cs deleted file mode 100644 index a7b43f2..0000000 --- a/bc-sharp-crypto/src/cms/CMSContentInfoParser.cs +++ /dev/null @@ -1,48 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Cms -{ - public class CmsContentInfoParser - { - protected ContentInfoParser contentInfo; - protected Stream data; - - protected CmsContentInfoParser( - Stream data) - { - if (data == null) - throw new ArgumentNullException("data"); - - this.data = data; - - try - { - Asn1StreamParser inStream = new Asn1StreamParser(data); - - this.contentInfo = new ContentInfoParser((Asn1SequenceParser)inStream.ReadObject()); - } - catch (IOException e) - { - throw new CmsException("IOException reading content.", e); - } - catch (InvalidCastException e) - { - throw new CmsException("Unexpected object reading content.", e); - } - } - - /** - * Close the underlying data stream. - * @throws IOException if the close fails. - */ - public void Close() - { - Platform.Dispose(this.data); - } - } -} diff --git a/bc-sharp-crypto/src/cms/CMSEnvelopedData.cs b/bc-sharp-crypto/src/cms/CMSEnvelopedData.cs deleted file mode 100644 index 223d0ca..0000000 --- a/bc-sharp-crypto/src/cms/CMSEnvelopedData.cs +++ /dev/null @@ -1,115 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Cms -{ - /** - * containing class for an CMS Enveloped Data object - */ - public class CmsEnvelopedData - { - internal RecipientInformationStore recipientInfoStore; - internal ContentInfo contentInfo; - - private AlgorithmIdentifier encAlg; - private Asn1Set unprotectedAttributes; - - public CmsEnvelopedData( - byte[] envelopedData) - : this(CmsUtilities.ReadContentInfo(envelopedData)) - { - } - - public CmsEnvelopedData( - Stream envelopedData) - : this(CmsUtilities.ReadContentInfo(envelopedData)) - { - } - - public CmsEnvelopedData( - ContentInfo contentInfo) - { - this.contentInfo = contentInfo; - - EnvelopedData envData = EnvelopedData.GetInstance(contentInfo.Content); - - // - // read the recipients - // - Asn1Set recipientInfos = envData.RecipientInfos; - - // - // read the encrypted content info - // - EncryptedContentInfo encInfo = envData.EncryptedContentInfo; - this.encAlg = encInfo.ContentEncryptionAlgorithm; - CmsReadable readable = new CmsProcessableByteArray(encInfo.EncryptedContent.GetOctets()); - CmsSecureReadable secureReadable = new CmsEnvelopedHelper.CmsEnvelopedSecureReadable( - this.encAlg, readable); - - // - // build the RecipientInformationStore - // - this.recipientInfoStore = CmsEnvelopedHelper.BuildRecipientInformationStore( - recipientInfos, secureReadable); - - this.unprotectedAttributes = envData.UnprotectedAttrs; - } - - public AlgorithmIdentifier EncryptionAlgorithmID - { - get { return encAlg; } - } - - /** - * return the object identifier for the content encryption algorithm. - */ - public string EncryptionAlgOid - { - get { return encAlg.Algorithm.Id; } - } - - /** - * return a store of the intended recipients for this message - */ - public RecipientInformationStore GetRecipientInfos() - { - return recipientInfoStore; - } - - /** - * return the ContentInfo - */ - public ContentInfo ContentInfo - { - get { return contentInfo; } - } - - /** - * return a table of the unprotected attributes indexed by - * the OID of the attribute. - */ - public Asn1.Cms.AttributeTable GetUnprotectedAttributes() - { - if (unprotectedAttributes == null) - return null; - - return new Asn1.Cms.AttributeTable(unprotectedAttributes); - } - - /** - * return the ASN.1 encoded representation of this object. - */ - public byte[] GetEncoded() - { - return contentInfo.GetEncoded(); - } - } -} diff --git a/bc-sharp-crypto/src/cms/CMSEnvelopedDataGenerator.cs b/bc-sharp-crypto/src/cms/CMSEnvelopedDataGenerator.cs deleted file mode 100644 index d260e99..0000000 --- a/bc-sharp-crypto/src/cms/CMSEnvelopedDataGenerator.cs +++ /dev/null @@ -1,178 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Oiw; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Generators; -using Org.BouncyCastle.Crypto.IO; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Date; -using Org.BouncyCastle.X509; - -namespace Org.BouncyCastle.Cms -{ - /// - /// General class for generating a CMS enveloped-data message. - /// - /// A simple example of usage. - /// - /// 
-    ///      CmsEnvelopedDataGenerator  fact = new CmsEnvelopedDataGenerator();
-    ///
-    ///      fact.AddKeyTransRecipient(cert);
-    ///
-    ///      CmsEnvelopedData         data = fact.Generate(content, algorithm);
-    ///
- /// - public class CmsEnvelopedDataGenerator - : CmsEnvelopedGenerator - { - public CmsEnvelopedDataGenerator() - { - } - - /// Constructor allowing specific source of randomness - /// Instance of SecureRandom to use. - public CmsEnvelopedDataGenerator( - SecureRandom rand) - : base(rand) - { - } - - /// - /// Generate an enveloped object that contains a CMS Enveloped Data - /// object using the passed in key generator. - /// - private CmsEnvelopedData Generate( - CmsProcessable content, - string encryptionOid, - CipherKeyGenerator keyGen) - { - AlgorithmIdentifier encAlgId = null; - KeyParameter encKey; - Asn1OctetString encContent; - - try - { - byte[] encKeyBytes = keyGen.GenerateKey(); - encKey = ParameterUtilities.CreateKeyParameter(encryptionOid, encKeyBytes); - - Asn1Encodable asn1Params = GenerateAsn1Parameters(encryptionOid, encKeyBytes); - - ICipherParameters cipherParameters; - encAlgId = GetAlgorithmIdentifier( - encryptionOid, encKey, asn1Params, out cipherParameters); - - IBufferedCipher cipher = CipherUtilities.GetCipher(encryptionOid); - cipher.Init(true, new ParametersWithRandom(cipherParameters, rand)); - - MemoryStream bOut = new MemoryStream(); - CipherStream cOut = new CipherStream(bOut, null, cipher); - - content.Write(cOut); - - Platform.Dispose(cOut); - - encContent = new BerOctetString(bOut.ToArray()); - } - catch (SecurityUtilityException e) - { - throw new CmsException("couldn't create cipher.", e); - } - catch (InvalidKeyException e) - { - throw new CmsException("key invalid in message.", e); - } - catch (IOException e) - { - throw new CmsException("exception decoding algorithm parameters.", e); - } - - - Asn1EncodableVector recipientInfos = new Asn1EncodableVector(); - - foreach (RecipientInfoGenerator rig in recipientInfoGenerators) - { - try - { - recipientInfos.Add(rig.Generate(encKey, rand)); - } - catch (InvalidKeyException e) - { - throw new CmsException("key inappropriate for algorithm.", e); - } - catch (GeneralSecurityException e) - { - throw new CmsException("error making encrypted content.", e); - } - } - - EncryptedContentInfo eci = new EncryptedContentInfo( - CmsObjectIdentifiers.Data, - encAlgId, - encContent); - - Asn1Set unprotectedAttrSet = null; - if (unprotectedAttributeGenerator != null) - { - Asn1.Cms.AttributeTable attrTable = unprotectedAttributeGenerator.GetAttributes(Platform.CreateHashtable()); - - unprotectedAttrSet = new BerSet(attrTable.ToAsn1EncodableVector()); - } - - ContentInfo contentInfo = new ContentInfo( - CmsObjectIdentifiers.EnvelopedData, - new EnvelopedData(null, new DerSet(recipientInfos), eci, unprotectedAttrSet)); - - return new CmsEnvelopedData(contentInfo); - } - - /// Generate an enveloped object that contains an CMS Enveloped Data object. - public CmsEnvelopedData Generate( - CmsProcessable content, - string encryptionOid) - { - try - { - CipherKeyGenerator keyGen = GeneratorUtilities.GetKeyGenerator(encryptionOid); - - keyGen.Init(new KeyGenerationParameters(rand, keyGen.DefaultStrength)); - - return Generate(content, encryptionOid, keyGen); - } - catch (SecurityUtilityException e) - { - throw new CmsException("can't find key generation algorithm.", e); - } - } - - /// Generate an enveloped object that contains an CMS Enveloped Data object. - public CmsEnvelopedData Generate( - CmsProcessable content, - string encryptionOid, - int keySize) - { - try - { - CipherKeyGenerator keyGen = GeneratorUtilities.GetKeyGenerator(encryptionOid); - - keyGen.Init(new KeyGenerationParameters(rand, keySize)); - - return Generate(content, encryptionOid, keyGen); - } - catch (SecurityUtilityException e) - { - throw new CmsException("can't find key generation algorithm.", e); - } - } - } -} diff --git a/bc-sharp-crypto/src/cms/CMSEnvelopedDataParser.cs b/bc-sharp-crypto/src/cms/CMSEnvelopedDataParser.cs deleted file mode 100644 index d5dfaf5..0000000 --- a/bc-sharp-crypto/src/cms/CMSEnvelopedDataParser.cs +++ /dev/null @@ -1,161 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; - -namespace Org.BouncyCastle.Cms -{ - /** - * Parsing class for an CMS Enveloped Data object from an input stream. - *

- * Note: that because we are in a streaming mode only one recipient can be tried and it is important - * that the methods on the parser are called in the appropriate order. - *

- *

- * Example of use - assuming the first recipient matches the private key we have. - * 

-	*      CmsEnvelopedDataParser     ep = new CmsEnvelopedDataParser(inputStream);
-	*
-	*      RecipientInformationStore  recipients = ep.GetRecipientInfos();
-	*
-	*      Collection  c = recipients.getRecipients();
-	*      Iterator    it = c.iterator();
-	*
-	*      if (it.hasNext())
-	*      {
-	*          RecipientInformation   recipient = (RecipientInformation)it.next();
-	*
-	*          CMSTypedStream recData = recipient.getContentStream(privateKey);
-	*
-	*          processDataStream(recData.getContentStream());
-	*      }
-	*
- * Note: this class does not introduce buffering - if you are processing large files you should create - * the parser with: - * 
-	*          CmsEnvelopedDataParser     ep = new CmsEnvelopedDataParser(new BufferedInputStream(inputStream, bufSize));
-	*
- * where bufSize is a suitably large buffer size. - *

- */ - public class CmsEnvelopedDataParser - : CmsContentInfoParser - { - internal RecipientInformationStore recipientInfoStore; - internal EnvelopedDataParser envelopedData; - - private AlgorithmIdentifier _encAlg; - private Asn1.Cms.AttributeTable _unprotectedAttributes; - private bool _attrNotRead; - - public CmsEnvelopedDataParser( - byte[] envelopedData) - : this(new MemoryStream(envelopedData, false)) - { - } - - public CmsEnvelopedDataParser( - Stream envelopedData) - : base(envelopedData) - { - this._attrNotRead = true; - this.envelopedData = new EnvelopedDataParser( - (Asn1SequenceParser)this.contentInfo.GetContent(Asn1Tags.Sequence)); - - // TODO Validate version? - //DerInteger version = this.envelopedData.Version; - - // - // read the recipients - // - Asn1Set recipientInfos = Asn1Set.GetInstance(this.envelopedData.GetRecipientInfos().ToAsn1Object()); - - // - // read the encrypted content info - // - EncryptedContentInfoParser encInfo = this.envelopedData.GetEncryptedContentInfo(); - this._encAlg = encInfo.ContentEncryptionAlgorithm; - CmsReadable readable = new CmsProcessableInputStream( - ((Asn1OctetStringParser)encInfo.GetEncryptedContent(Asn1Tags.OctetString)).GetOctetStream()); - CmsSecureReadable secureReadable = new CmsEnvelopedHelper.CmsEnvelopedSecureReadable( - this._encAlg, readable); - - // - // build the RecipientInformationStore - // - this.recipientInfoStore = CmsEnvelopedHelper.BuildRecipientInformationStore( - recipientInfos, secureReadable); - } - - public AlgorithmIdentifier EncryptionAlgorithmID - { - get { return _encAlg; } - } - - /** - * return the object identifier for the content encryption algorithm. - */ - public string EncryptionAlgOid - { - get { return _encAlg.Algorithm.Id; } - } - - /** - * return the ASN.1 encoded encryption algorithm parameters, or null if - * there aren't any. - */ - public Asn1Object EncryptionAlgParams - { - get - { - Asn1Encodable ae = _encAlg.Parameters; - - return ae == null ? null : ae.ToAsn1Object(); - } - } - - /** - * return a store of the intended recipients for this message - */ - public RecipientInformationStore GetRecipientInfos() - { - return this.recipientInfoStore; - } - - /** - * return a table of the unprotected attributes indexed by - * the OID of the attribute. - * @throws IOException - */ - public Asn1.Cms.AttributeTable GetUnprotectedAttributes() - { - if (_unprotectedAttributes == null && _attrNotRead) - { - Asn1SetParser asn1Set = this.envelopedData.GetUnprotectedAttrs(); - - _attrNotRead = false; - - if (asn1Set != null) - { - Asn1EncodableVector v = new Asn1EncodableVector(); - IAsn1Convertible o; - - while ((o = asn1Set.ReadObject()) != null) - { - Asn1SequenceParser seq = (Asn1SequenceParser)o; - - v.Add(seq.ToAsn1Object()); - } - - _unprotectedAttributes = new Asn1.Cms.AttributeTable(new DerSet(v)); - } - } - - return _unprotectedAttributes; - } - } -} diff --git a/bc-sharp-crypto/src/cms/CMSEnvelopedDataStreamGenerator.cs b/bc-sharp-crypto/src/cms/CMSEnvelopedDataStreamGenerator.cs deleted file mode 100644 index 8e6d272..0000000 --- a/bc-sharp-crypto/src/cms/CMSEnvelopedDataStreamGenerator.cs +++ /dev/null @@ -1,308 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Engines; -using Org.BouncyCastle.Crypto.Generators; -using Org.BouncyCastle.Crypto.IO; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.IO; -using Org.BouncyCastle.X509; - -namespace Org.BouncyCastle.Cms -{ - /** - * General class for generating a CMS enveloped-data message stream. - *

- * A simple example of usage. - * 

-	*      CmsEnvelopedDataStreamGenerator edGen = new CmsEnvelopedDataStreamGenerator();
-	*
-	*      edGen.AddKeyTransRecipient(cert);
-	*
-	*      MemoryStream  bOut = new MemoryStream();
-	*
-	*      Stream out = edGen.Open(
-	*                              bOut, CMSEnvelopedDataGenerator.AES128_CBC);*
-	*      out.Write(data);
-	*
-	*      out.Close();
-	*
- *

- */ - public class CmsEnvelopedDataStreamGenerator - : CmsEnvelopedGenerator - { - private object _originatorInfo = null; - private object _unprotectedAttributes = null; - private int _bufferSize; - private bool _berEncodeRecipientSet; - - public CmsEnvelopedDataStreamGenerator() - { - } - - /// Constructor allowing specific source of randomness - /// Instance of SecureRandom to use. - public CmsEnvelopedDataStreamGenerator( - SecureRandom rand) - : base(rand) - { - } - - /// Set the underlying string size for encapsulated data. - /// Length of octet strings to buffer the data. - public void SetBufferSize( - int bufferSize) - { - _bufferSize = bufferSize; - } - - /// Use a BER Set to store the recipient information. - public void SetBerEncodeRecipients( - bool berEncodeRecipientSet) - { - _berEncodeRecipientSet = berEncodeRecipientSet; - } - - private DerInteger Version - { - get - { - int version = (_originatorInfo != null || _unprotectedAttributes != null) - ? 2 - : 0; - - return new DerInteger(version); - } - } - - /// - /// Generate an enveloped object that contains an CMS Enveloped Data - /// object using the passed in key generator. - /// - private Stream Open( - Stream outStream, - string encryptionOid, - CipherKeyGenerator keyGen) - { - byte[] encKeyBytes = keyGen.GenerateKey(); - KeyParameter encKey = ParameterUtilities.CreateKeyParameter(encryptionOid, encKeyBytes); - - Asn1Encodable asn1Params = GenerateAsn1Parameters(encryptionOid, encKeyBytes); - - ICipherParameters cipherParameters; - AlgorithmIdentifier encAlgID = GetAlgorithmIdentifier( - encryptionOid, encKey, asn1Params, out cipherParameters); - - Asn1EncodableVector recipientInfos = new Asn1EncodableVector(); - - foreach (RecipientInfoGenerator rig in recipientInfoGenerators) - { - try - { - recipientInfos.Add(rig.Generate(encKey, rand)); - } - catch (InvalidKeyException e) - { - throw new CmsException("key inappropriate for algorithm.", e); - } - catch (GeneralSecurityException e) - { - throw new CmsException("error making encrypted content.", e); - } - } - - return Open(outStream, encAlgID, cipherParameters, recipientInfos); - } - - private Stream Open( - Stream outStream, - AlgorithmIdentifier encAlgID, - ICipherParameters cipherParameters, - Asn1EncodableVector recipientInfos) - { - try - { - // - // ContentInfo - // - BerSequenceGenerator cGen = new BerSequenceGenerator(outStream); - - cGen.AddObject(CmsObjectIdentifiers.EnvelopedData); - - // - // Encrypted Data - // - BerSequenceGenerator envGen = new BerSequenceGenerator( - cGen.GetRawOutputStream(), 0, true); - - envGen.AddObject(this.Version); - - Stream envRaw = envGen.GetRawOutputStream(); - Asn1Generator recipGen = _berEncodeRecipientSet - ? (Asn1Generator) new BerSetGenerator(envRaw) - : new DerSetGenerator(envRaw); - - foreach (Asn1Encodable ae in recipientInfos) - { - recipGen.AddObject(ae); - } - - recipGen.Close(); - - BerSequenceGenerator eiGen = new BerSequenceGenerator(envRaw); - eiGen.AddObject(CmsObjectIdentifiers.Data); - eiGen.AddObject(encAlgID); - - Stream octetOutputStream = CmsUtilities.CreateBerOctetOutputStream( - eiGen.GetRawOutputStream(), 0, false, _bufferSize); - - IBufferedCipher cipher = CipherUtilities.GetCipher(encAlgID.Algorithm); - cipher.Init(true, new ParametersWithRandom(cipherParameters, rand)); - CipherStream cOut = new CipherStream(octetOutputStream, null, cipher); - - return new CmsEnvelopedDataOutputStream(this, cOut, cGen, envGen, eiGen); - } - catch (SecurityUtilityException e) - { - throw new CmsException("couldn't create cipher.", e); - } - catch (InvalidKeyException e) - { - throw new CmsException("key invalid in message.", e); - } - catch (IOException e) - { - throw new CmsException("exception decoding algorithm parameters.", e); - } - } - - /** - * generate an enveloped object that contains an CMS Enveloped Data object - * @throws IOException - */ - public Stream Open( - Stream outStream, - string encryptionOid) - { - CipherKeyGenerator keyGen = GeneratorUtilities.GetKeyGenerator(encryptionOid); - - keyGen.Init(new KeyGenerationParameters(rand, keyGen.DefaultStrength)); - - return Open(outStream, encryptionOid, keyGen); - } - - /** - * generate an enveloped object that contains an CMS Enveloped Data object - * @throws IOException - */ - public Stream Open( - Stream outStream, - string encryptionOid, - int keySize) - { - CipherKeyGenerator keyGen = GeneratorUtilities.GetKeyGenerator(encryptionOid); - - keyGen.Init(new KeyGenerationParameters(rand, keySize)); - - return Open(outStream, encryptionOid, keyGen); - } - - private class CmsEnvelopedDataOutputStream - : BaseOutputStream - { - private readonly CmsEnvelopedGenerator _outer; - - private readonly CipherStream _out; - private readonly BerSequenceGenerator _cGen; - private readonly BerSequenceGenerator _envGen; - private readonly BerSequenceGenerator _eiGen; - - public CmsEnvelopedDataOutputStream( - CmsEnvelopedGenerator outer, - CipherStream outStream, - BerSequenceGenerator cGen, - BerSequenceGenerator envGen, - BerSequenceGenerator eiGen) - { - _outer = outer; - _out = outStream; - _cGen = cGen; - _envGen = envGen; - _eiGen = eiGen; - } - - public override void WriteByte( - byte b) - { - _out.WriteByte(b); - } - - public override void Write( - byte[] bytes, - int off, - int len) - { - _out.Write(bytes, off, len); - } - -#if PORTABLE - protected override void Dispose(bool disposing) - { - if (disposing) - { - Platform.Dispose(_out); - - // TODO Parent context(s) should really be closed explicitly - - _eiGen.Close(); - - if (_outer.unprotectedAttributeGenerator != null) - { - Asn1.Cms.AttributeTable attrTable = _outer.unprotectedAttributeGenerator.GetAttributes(Platform.CreateHashtable()); - - Asn1Set unprotectedAttrs = new BerSet(attrTable.ToAsn1EncodableVector()); - - _envGen.AddObject(new DerTaggedObject(false, 1, unprotectedAttrs)); - } - - _envGen.Close(); - _cGen.Close(); - } - base.Dispose(disposing); - } -#else - public override void Close() - { - Platform.Dispose(_out); - - // TODO Parent context(s) should really be closed explicitly - - _eiGen.Close(); - - if (_outer.unprotectedAttributeGenerator != null) - { - Asn1.Cms.AttributeTable attrTable = _outer.unprotectedAttributeGenerator.GetAttributes(Platform.CreateHashtable()); - - Asn1Set unprotectedAttrs = new BerSet(attrTable.ToAsn1EncodableVector()); - - _envGen.AddObject(new DerTaggedObject(false, 1, unprotectedAttrs)); - } - - _envGen.Close(); - _cGen.Close(); - base.Close(); - } -#endif - } - } -} diff --git a/bc-sharp-crypto/src/cms/CMSEnvelopedGenerator.cs b/bc-sharp-crypto/src/cms/CMSEnvelopedGenerator.cs deleted file mode 100644 index f92ae38..0000000 --- a/bc-sharp-crypto/src/cms/CMSEnvelopedGenerator.cs +++ /dev/null @@ -1,331 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.Kisa; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Ntt; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.X509; - -namespace Org.BouncyCastle.Cms -{ - /** - * General class for generating a CMS enveloped-data message. - * - * A simple example of usage. - * - * 
-	*      CMSEnvelopedDataGenerator  fact = new CMSEnvelopedDataGenerator();
-	*
-	*      fact.addKeyTransRecipient(cert);
-	*
-	*      CMSEnvelopedData         data = fact.generate(content, algorithm, "BC");
-	*
- */ - public class CmsEnvelopedGenerator - { - // Note: These tables are complementary: If rc2Table[i]==j, then rc2Ekb[j]==i - internal static readonly short[] rc2Table = - { - 0xbd, 0x56, 0xea, 0xf2, 0xa2, 0xf1, 0xac, 0x2a, 0xb0, 0x93, 0xd1, 0x9c, 0x1b, 0x33, 0xfd, 0xd0, - 0x30, 0x04, 0xb6, 0xdc, 0x7d, 0xdf, 0x32, 0x4b, 0xf7, 0xcb, 0x45, 0x9b, 0x31, 0xbb, 0x21, 0x5a, - 0x41, 0x9f, 0xe1, 0xd9, 0x4a, 0x4d, 0x9e, 0xda, 0xa0, 0x68, 0x2c, 0xc3, 0x27, 0x5f, 0x80, 0x36, - 0x3e, 0xee, 0xfb, 0x95, 0x1a, 0xfe, 0xce, 0xa8, 0x34, 0xa9, 0x13, 0xf0, 0xa6, 0x3f, 0xd8, 0x0c, - 0x78, 0x24, 0xaf, 0x23, 0x52, 0xc1, 0x67, 0x17, 0xf5, 0x66, 0x90, 0xe7, 0xe8, 0x07, 0xb8, 0x60, - 0x48, 0xe6, 0x1e, 0x53, 0xf3, 0x92, 0xa4, 0x72, 0x8c, 0x08, 0x15, 0x6e, 0x86, 0x00, 0x84, 0xfa, - 0xf4, 0x7f, 0x8a, 0x42, 0x19, 0xf6, 0xdb, 0xcd, 0x14, 0x8d, 0x50, 0x12, 0xba, 0x3c, 0x06, 0x4e, - 0xec, 0xb3, 0x35, 0x11, 0xa1, 0x88, 0x8e, 0x2b, 0x94, 0x99, 0xb7, 0x71, 0x74, 0xd3, 0xe4, 0xbf, - 0x3a, 0xde, 0x96, 0x0e, 0xbc, 0x0a, 0xed, 0x77, 0xfc, 0x37, 0x6b, 0x03, 0x79, 0x89, 0x62, 0xc6, - 0xd7, 0xc0, 0xd2, 0x7c, 0x6a, 0x8b, 0x22, 0xa3, 0x5b, 0x05, 0x5d, 0x02, 0x75, 0xd5, 0x61, 0xe3, - 0x18, 0x8f, 0x55, 0x51, 0xad, 0x1f, 0x0b, 0x5e, 0x85, 0xe5, 0xc2, 0x57, 0x63, 0xca, 0x3d, 0x6c, - 0xb4, 0xc5, 0xcc, 0x70, 0xb2, 0x91, 0x59, 0x0d, 0x47, 0x20, 0xc8, 0x4f, 0x58, 0xe0, 0x01, 0xe2, - 0x16, 0x38, 0xc4, 0x6f, 0x3b, 0x0f, 0x65, 0x46, 0xbe, 0x7e, 0x2d, 0x7b, 0x82, 0xf9, 0x40, 0xb5, - 0x1d, 0x73, 0xf8, 0xeb, 0x26, 0xc7, 0x87, 0x97, 0x25, 0x54, 0xb1, 0x28, 0xaa, 0x98, 0x9d, 0xa5, - 0x64, 0x6d, 0x7a, 0xd4, 0x10, 0x81, 0x44, 0xef, 0x49, 0xd6, 0xae, 0x2e, 0xdd, 0x76, 0x5c, 0x2f, - 0xa7, 0x1c, 0xc9, 0x09, 0x69, 0x9a, 0x83, 0xcf, 0x29, 0x39, 0xb9, 0xe9, 0x4c, 0xff, 0x43, 0xab - }; - -// internal static readonly short[] rc2Ekb = -// { -// 0x5d, 0xbe, 0x9b, 0x8b, 0x11, 0x99, 0x6e, 0x4d, 0x59, 0xf3, 0x85, 0xa6, 0x3f, 0xb7, 0x83, 0xc5, -// 0xe4, 0x73, 0x6b, 0x3a, 0x68, 0x5a, 0xc0, 0x47, 0xa0, 0x64, 0x34, 0x0c, 0xf1, 0xd0, 0x52, 0xa5, -// 0xb9, 0x1e, 0x96, 0x43, 0x41, 0xd8, 0xd4, 0x2c, 0xdb, 0xf8, 0x07, 0x77, 0x2a, 0xca, 0xeb, 0xef, -// 0x10, 0x1c, 0x16, 0x0d, 0x38, 0x72, 0x2f, 0x89, 0xc1, 0xf9, 0x80, 0xc4, 0x6d, 0xae, 0x30, 0x3d, -// 0xce, 0x20, 0x63, 0xfe, 0xe6, 0x1a, 0xc7, 0xb8, 0x50, 0xe8, 0x24, 0x17, 0xfc, 0x25, 0x6f, 0xbb, -// 0x6a, 0xa3, 0x44, 0x53, 0xd9, 0xa2, 0x01, 0xab, 0xbc, 0xb6, 0x1f, 0x98, 0xee, 0x9a, 0xa7, 0x2d, -// 0x4f, 0x9e, 0x8e, 0xac, 0xe0, 0xc6, 0x49, 0x46, 0x29, 0xf4, 0x94, 0x8a, 0xaf, 0xe1, 0x5b, 0xc3, -// 0xb3, 0x7b, 0x57, 0xd1, 0x7c, 0x9c, 0xed, 0x87, 0x40, 0x8c, 0xe2, 0xcb, 0x93, 0x14, 0xc9, 0x61, -// 0x2e, 0xe5, 0xcc, 0xf6, 0x5e, 0xa8, 0x5c, 0xd6, 0x75, 0x8d, 0x62, 0x95, 0x58, 0x69, 0x76, 0xa1, -// 0x4a, 0xb5, 0x55, 0x09, 0x78, 0x33, 0x82, 0xd7, 0xdd, 0x79, 0xf5, 0x1b, 0x0b, 0xde, 0x26, 0x21, -// 0x28, 0x74, 0x04, 0x97, 0x56, 0xdf, 0x3c, 0xf0, 0x37, 0x39, 0xdc, 0xff, 0x06, 0xa4, 0xea, 0x42, -// 0x08, 0xda, 0xb4, 0x71, 0xb0, 0xcf, 0x12, 0x7a, 0x4e, 0xfa, 0x6c, 0x1d, 0x84, 0x00, 0xc8, 0x7f, -// 0x91, 0x45, 0xaa, 0x2b, 0xc2, 0xb1, 0x8f, 0xd5, 0xba, 0xf2, 0xad, 0x19, 0xb2, 0x67, 0x36, 0xf7, -// 0x0f, 0x0a, 0x92, 0x7d, 0xe3, 0x9d, 0xe9, 0x90, 0x3e, 0x23, 0x27, 0x66, 0x13, 0xec, 0x81, 0x15, -// 0xbd, 0x22, 0xbf, 0x9f, 0x7e, 0xa9, 0x51, 0x4b, 0x4c, 0xfb, 0x02, 0xd3, 0x70, 0x86, 0x31, 0xe7, -// 0x3b, 0x05, 0x03, 0x54, 0x60, 0x48, 0x65, 0x18, 0xd2, 0xcd, 0x5f, 0x32, 0x88, 0x0e, 0x35, 0xfd -// }; - - - // TODO Create named constants for all of these - public static readonly string DesEde3Cbc = PkcsObjectIdentifiers.DesEde3Cbc.Id; - public static readonly string RC2Cbc = PkcsObjectIdentifiers.RC2Cbc.Id; - public const string IdeaCbc = "1.3.6.1.4.1.188.7.1.1.2"; - public const string Cast5Cbc = "1.2.840.113533.7.66.10"; - public static readonly string Aes128Cbc = NistObjectIdentifiers.IdAes128Cbc.Id; - public static readonly string Aes192Cbc = NistObjectIdentifiers.IdAes192Cbc.Id; - public static readonly string Aes256Cbc = NistObjectIdentifiers.IdAes256Cbc.Id; - public static readonly string Camellia128Cbc = NttObjectIdentifiers.IdCamellia128Cbc.Id; - public static readonly string Camellia192Cbc = NttObjectIdentifiers.IdCamellia192Cbc.Id; - public static readonly string Camellia256Cbc = NttObjectIdentifiers.IdCamellia256Cbc.Id; - public static readonly string SeedCbc = KisaObjectIdentifiers.IdSeedCbc.Id; - - public static readonly string DesEde3Wrap = PkcsObjectIdentifiers.IdAlgCms3DesWrap.Id; - public static readonly string Aes128Wrap = NistObjectIdentifiers.IdAes128Wrap.Id; - public static readonly string Aes192Wrap = NistObjectIdentifiers.IdAes192Wrap.Id; - public static readonly string Aes256Wrap = NistObjectIdentifiers.IdAes256Wrap.Id; - public static readonly string Camellia128Wrap = NttObjectIdentifiers.IdCamellia128Wrap.Id; - public static readonly string Camellia192Wrap = NttObjectIdentifiers.IdCamellia192Wrap.Id; - public static readonly string Camellia256Wrap = NttObjectIdentifiers.IdCamellia256Wrap.Id; - public static readonly string SeedWrap = KisaObjectIdentifiers.IdNpkiAppCmsSeedWrap.Id; - - public static readonly string ECDHSha1Kdf = X9ObjectIdentifiers.DHSinglePassStdDHSha1KdfScheme.Id; - public static readonly string ECMqvSha1Kdf = X9ObjectIdentifiers.MqvSinglePassSha1KdfScheme.Id; - - internal readonly IList recipientInfoGenerators = Platform.CreateArrayList(); - internal readonly SecureRandom rand; - - internal CmsAttributeTableGenerator unprotectedAttributeGenerator = null; - - public CmsEnvelopedGenerator() - : this(new SecureRandom()) - { - } - - /// Constructor allowing specific source of randomness - /// Instance of SecureRandom to use. - public CmsEnvelopedGenerator( - SecureRandom rand) - { - this.rand = rand; - } - - public CmsAttributeTableGenerator UnprotectedAttributeGenerator - { - get { return this.unprotectedAttributeGenerator; } - set { this.unprotectedAttributeGenerator = value; } - } - - /** - * add a recipient. - * - * @param cert recipient's public key certificate - * @exception ArgumentException if there is a problem with the certificate - */ - public void AddKeyTransRecipient( - X509Certificate cert) - { - KeyTransRecipientInfoGenerator ktrig = new KeyTransRecipientInfoGenerator(); - ktrig.RecipientCert = cert; - - recipientInfoGenerators.Add(ktrig); - } - - /** - * add a recipient - * - * @param key the public key used by the recipient - * @param subKeyId the identifier for the recipient's public key - * @exception ArgumentException if there is a problem with the key - */ - public void AddKeyTransRecipient( - AsymmetricKeyParameter pubKey, - byte[] subKeyId) - { - KeyTransRecipientInfoGenerator ktrig = new KeyTransRecipientInfoGenerator(); - ktrig.RecipientPublicKey = pubKey; - ktrig.SubjectKeyIdentifier = new DerOctetString(subKeyId); - - recipientInfoGenerators.Add(ktrig); - } - - /** - * add a KEK recipient. - * @param key the secret key to use for wrapping - * @param keyIdentifier the byte string that identifies the key - */ - public void AddKekRecipient( - string keyAlgorithm, // TODO Remove need for this parameter - KeyParameter key, - byte[] keyIdentifier) - { - AddKekRecipient(keyAlgorithm, key, new KekIdentifier(keyIdentifier, null, null)); - } - - /** - * add a KEK recipient. - * @param key the secret key to use for wrapping - * @param keyIdentifier the byte string that identifies the key - */ - public void AddKekRecipient( - string keyAlgorithm, // TODO Remove need for this parameter - KeyParameter key, - KekIdentifier kekIdentifier) - { - KekRecipientInfoGenerator kekrig = new KekRecipientInfoGenerator(); - kekrig.KekIdentifier = kekIdentifier; - kekrig.KeyEncryptionKeyOID = keyAlgorithm; - kekrig.KeyEncryptionKey = key; - - recipientInfoGenerators.Add(kekrig); - } - - public void AddPasswordRecipient( - CmsPbeKey pbeKey, - string kekAlgorithmOid) - { - Pbkdf2Params p = new Pbkdf2Params(pbeKey.Salt, pbeKey.IterationCount); - - PasswordRecipientInfoGenerator prig = new PasswordRecipientInfoGenerator(); - prig.KeyDerivationAlgorithm = new AlgorithmIdentifier(PkcsObjectIdentifiers.IdPbkdf2, p); - prig.KeyEncryptionKeyOID = kekAlgorithmOid; - prig.KeyEncryptionKey = pbeKey.GetEncoded(kekAlgorithmOid); - - recipientInfoGenerators.Add(prig); - } - - /** - * Add a key agreement based recipient. - * - * @param agreementAlgorithm key agreement algorithm to use. - * @param senderPrivateKey private key to initialise sender side of agreement with. - * @param senderPublicKey sender public key to include with message. - * @param recipientCert recipient's public key certificate. - * @param cekWrapAlgorithm OID for key wrapping algorithm to use. - * @exception SecurityUtilityException if the algorithm requested cannot be found - * @exception InvalidKeyException if the keys are inappropriate for the algorithm specified - */ - public void AddKeyAgreementRecipient( - string agreementAlgorithm, - AsymmetricKeyParameter senderPrivateKey, - AsymmetricKeyParameter senderPublicKey, - X509Certificate recipientCert, - string cekWrapAlgorithm) - { - IList recipientCerts = Platform.CreateArrayList(1); - recipientCerts.Add(recipientCert); - - AddKeyAgreementRecipients(agreementAlgorithm, senderPrivateKey, senderPublicKey, - recipientCerts, cekWrapAlgorithm); - } - - /** - * Add multiple key agreement based recipients (sharing a single KeyAgreeRecipientInfo structure). - * - * @param agreementAlgorithm key agreement algorithm to use. - * @param senderPrivateKey private key to initialise sender side of agreement with. - * @param senderPublicKey sender public key to include with message. - * @param recipientCerts recipients' public key certificates. - * @param cekWrapAlgorithm OID for key wrapping algorithm to use. - * @exception SecurityUtilityException if the algorithm requested cannot be found - * @exception InvalidKeyException if the keys are inappropriate for the algorithm specified - */ - public void AddKeyAgreementRecipients( - string agreementAlgorithm, - AsymmetricKeyParameter senderPrivateKey, - AsymmetricKeyParameter senderPublicKey, - ICollection recipientCerts, - string cekWrapAlgorithm) - { - if (!senderPrivateKey.IsPrivate) - throw new ArgumentException("Expected private key", "senderPrivateKey"); - if (senderPublicKey.IsPrivate) - throw new ArgumentException("Expected public key", "senderPublicKey"); - - /* TODO - * "a recipient X.509 version 3 certificate that contains a key usage extension MUST - * assert the keyAgreement bit." - */ - - KeyAgreeRecipientInfoGenerator karig = new KeyAgreeRecipientInfoGenerator(); - karig.KeyAgreementOID = new DerObjectIdentifier(agreementAlgorithm); - karig.KeyEncryptionOID = new DerObjectIdentifier(cekWrapAlgorithm); - karig.RecipientCerts = recipientCerts; - karig.SenderKeyPair = new AsymmetricCipherKeyPair(senderPublicKey, senderPrivateKey); - - recipientInfoGenerators.Add(karig); - } - - protected internal virtual AlgorithmIdentifier GetAlgorithmIdentifier( - string encryptionOid, - KeyParameter encKey, - Asn1Encodable asn1Params, - out ICipherParameters cipherParameters) - { - Asn1Object asn1Object; - if (asn1Params != null) - { - asn1Object = asn1Params.ToAsn1Object(); - cipherParameters = ParameterUtilities.GetCipherParameters( - encryptionOid, encKey, asn1Object); - } - else - { - asn1Object = DerNull.Instance; - cipherParameters = encKey; - } - - return new AlgorithmIdentifier( - new DerObjectIdentifier(encryptionOid), - asn1Object); - } - - protected internal virtual Asn1Encodable GenerateAsn1Parameters( - string encryptionOid, - byte[] encKeyBytes) - { - Asn1Encodable asn1Params = null; - - try - { - if (encryptionOid.Equals(RC2Cbc)) - { - byte[] iv = new byte[8]; - rand.NextBytes(iv); - - // TODO Is this detailed repeat of Java version really necessary? - int effKeyBits = encKeyBytes.Length * 8; - int parameterVersion; - - if (effKeyBits < 256) - { - parameterVersion = rc2Table[effKeyBits]; - } - else - { - parameterVersion = effKeyBits; - } - - asn1Params = new RC2CbcParameter(parameterVersion, iv); - } - else - { - asn1Params = ParameterUtilities.GenerateParameters(encryptionOid, rand); - } - } - catch (SecurityUtilityException) - { - // No problem... no parameters generated - } - - return asn1Params; - } - } -} diff --git a/bc-sharp-crypto/src/cms/CMSEnvelopedHelper.cs b/bc-sharp-crypto/src/cms/CMSEnvelopedHelper.cs deleted file mode 100644 index 77d2da4..0000000 --- a/bc-sharp-crypto/src/cms/CMSEnvelopedHelper.cs +++ /dev/null @@ -1,311 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.IO; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Cms -{ - class CmsEnvelopedHelper - { - internal static readonly CmsEnvelopedHelper Instance = new CmsEnvelopedHelper(); - - private static readonly IDictionary KeySizes = Platform.CreateHashtable(); - private static readonly IDictionary BaseCipherNames = Platform.CreateHashtable(); - - static CmsEnvelopedHelper() - { - KeySizes.Add(CmsEnvelopedGenerator.DesEde3Cbc, 192); - KeySizes.Add(CmsEnvelopedGenerator.Aes128Cbc, 128); - KeySizes.Add(CmsEnvelopedGenerator.Aes192Cbc, 192); - KeySizes.Add(CmsEnvelopedGenerator.Aes256Cbc, 256); - - BaseCipherNames.Add(CmsEnvelopedGenerator.DesEde3Cbc, "DESEDE"); - BaseCipherNames.Add(CmsEnvelopedGenerator.Aes128Cbc, "AES"); - BaseCipherNames.Add(CmsEnvelopedGenerator.Aes192Cbc, "AES"); - BaseCipherNames.Add(CmsEnvelopedGenerator.Aes256Cbc, "AES"); - } - - private string GetAsymmetricEncryptionAlgName( - string encryptionAlgOid) - { - if (Asn1.Pkcs.PkcsObjectIdentifiers.RsaEncryption.Id.Equals(encryptionAlgOid)) - { - return "RSA/ECB/PKCS1Padding"; - } - - return encryptionAlgOid; - } - - internal IBufferedCipher CreateAsymmetricCipher( - string encryptionOid) - { - string asymName = GetAsymmetricEncryptionAlgName(encryptionOid); - if (!asymName.Equals(encryptionOid)) - { - try - { - return CipherUtilities.GetCipher(asymName); - } - catch (SecurityUtilityException) - { - // Ignore - } - } - return CipherUtilities.GetCipher(encryptionOid); - } - - internal IWrapper CreateWrapper( - string encryptionOid) - { - try - { - return WrapperUtilities.GetWrapper(encryptionOid); - } - catch (SecurityUtilityException) - { - return WrapperUtilities.GetWrapper(GetAsymmetricEncryptionAlgName(encryptionOid)); - } - } - - internal string GetRfc3211WrapperName( - string oid) - { - if (oid == null) - throw new ArgumentNullException("oid"); - - string alg = (string) BaseCipherNames[oid]; - - if (alg == null) - throw new ArgumentException("no name for " + oid, "oid"); - - return alg + "RFC3211Wrap"; - } - - internal int GetKeySize( - string oid) - { - if (!KeySizes.Contains(oid)) - { - throw new ArgumentException("no keysize for " + oid, "oid"); - } - - return (int) KeySizes[oid]; - } - - internal static RecipientInformationStore BuildRecipientInformationStore( - Asn1Set recipientInfos, CmsSecureReadable secureReadable) - { - IList infos = Platform.CreateArrayList(); - for (int i = 0; i != recipientInfos.Count; i++) - { - RecipientInfo info = RecipientInfo.GetInstance(recipientInfos[i]); - - ReadRecipientInfo(infos, info, secureReadable); - } - return new RecipientInformationStore(infos); - } - - private static void ReadRecipientInfo( - IList infos, RecipientInfo info, CmsSecureReadable secureReadable) - { - Asn1Encodable recipInfo = info.Info; - if (recipInfo is KeyTransRecipientInfo) - { - infos.Add(new KeyTransRecipientInformation((KeyTransRecipientInfo)recipInfo, secureReadable)); - } - else if (recipInfo is KekRecipientInfo) - { - infos.Add(new KekRecipientInformation((KekRecipientInfo)recipInfo, secureReadable)); - } - else if (recipInfo is KeyAgreeRecipientInfo) - { - KeyAgreeRecipientInformation.ReadRecipientInfo(infos, (KeyAgreeRecipientInfo)recipInfo, secureReadable); - } - else if (recipInfo is PasswordRecipientInfo) - { - infos.Add(new PasswordRecipientInformation((PasswordRecipientInfo)recipInfo, secureReadable)); - } - } - - internal class CmsAuthenticatedSecureReadable : CmsSecureReadable - { - private AlgorithmIdentifier algorithm; - private IMac mac; - private CmsReadable readable; - - internal CmsAuthenticatedSecureReadable(AlgorithmIdentifier algorithm, CmsReadable readable) - { - this.algorithm = algorithm; - this.readable = readable; - } - - public AlgorithmIdentifier Algorithm - { - get { return this.algorithm; } - } - - public object CryptoObject - { - get { return this.mac; } - } - - public CmsReadable GetReadable(KeyParameter sKey) - { - string macAlg = this.algorithm.Algorithm.Id; -// Asn1Object sParams = this.algorithm.Parameters.ToAsn1Object(); - - try - { - this.mac = MacUtilities.GetMac(macAlg); - - // FIXME Support for MAC algorithm parameters similar to cipher parameters -// ASN1Object sParams = (ASN1Object)macAlg.getParameters(); -// -// if (sParams != null && !(sParams instanceof ASN1Null)) -// { -// AlgorithmParameters params = CMSEnvelopedHelper.INSTANCE.createAlgorithmParameters(macAlg.getObjectId().getId(), provider); -// -// params.init(sParams.getEncoded(), "ASN.1"); -// -// mac.init(sKey, params.getParameterSpec(IvParameterSpec.class)); -// } -// else - { - mac.Init(sKey); - } - -// Asn1Object asn1Params = asn1Enc == null ? null : asn1Enc.ToAsn1Object(); -// -// ICipherParameters cipherParameters = sKey; -// -// if (asn1Params != null && !(asn1Params is Asn1Null)) -// { -// cipherParameters = ParameterUtilities.GetCipherParameters( -// macAlg.Algorithm, cipherParameters, asn1Params); -// } -// else -// { -// string alg = macAlg.Algorithm.Id; -// if (alg.Equals(CmsEnvelopedDataGenerator.DesEde3Cbc) -// || alg.Equals(CmsEnvelopedDataGenerator.IdeaCbc) -// || alg.Equals(CmsEnvelopedDataGenerator.Cast5Cbc)) -// { -// cipherParameters = new ParametersWithIV(cipherParameters, new byte[8]); -// } -// } -// -// mac.Init(cipherParameters); - } - catch (SecurityUtilityException e) - { - throw new CmsException("couldn't create cipher.", e); - } - catch (InvalidKeyException e) - { - throw new CmsException("key invalid in message.", e); - } - catch (IOException e) - { - throw new CmsException("error decoding algorithm parameters.", e); - } - - try - { - return new CmsProcessableInputStream( - new TeeInputStream( - readable.GetInputStream(), - new MacOutputStream(this.mac))); - } - catch (IOException e) - { - throw new CmsException("error reading content.", e); - } - } - } - - internal class CmsEnvelopedSecureReadable : CmsSecureReadable - { - private AlgorithmIdentifier algorithm; - private IBufferedCipher cipher; - private CmsReadable readable; - - internal CmsEnvelopedSecureReadable(AlgorithmIdentifier algorithm, CmsReadable readable) - { - this.algorithm = algorithm; - this.readable = readable; - } - - public AlgorithmIdentifier Algorithm - { - get { return this.algorithm; } - } - - public object CryptoObject - { - get { return this.cipher; } - } - - public CmsReadable GetReadable(KeyParameter sKey) - { - try - { - this.cipher = CipherUtilities.GetCipher(this.algorithm.Algorithm); - - Asn1Encodable asn1Enc = this.algorithm.Parameters; - Asn1Object asn1Params = asn1Enc == null ? null : asn1Enc.ToAsn1Object(); - - ICipherParameters cipherParameters = sKey; - - if (asn1Params != null && !(asn1Params is Asn1Null)) - { - cipherParameters = ParameterUtilities.GetCipherParameters( - this.algorithm.Algorithm, cipherParameters, asn1Params); - } - else - { - string alg = this.algorithm.Algorithm.Id; - if (alg.Equals(CmsEnvelopedDataGenerator.DesEde3Cbc) - || alg.Equals(CmsEnvelopedDataGenerator.IdeaCbc) - || alg.Equals(CmsEnvelopedDataGenerator.Cast5Cbc)) - { - cipherParameters = new ParametersWithIV(cipherParameters, new byte[8]); - } - } - - cipher.Init(false, cipherParameters); - } - catch (SecurityUtilityException e) - { - throw new CmsException("couldn't create cipher.", e); - } - catch (InvalidKeyException e) - { - throw new CmsException("key invalid in message.", e); - } - catch (IOException e) - { - throw new CmsException("error decoding algorithm parameters.", e); - } - - try - { - return new CmsProcessableInputStream( - new CipherStream(readable.GetInputStream(), cipher, null)); - } - catch (IOException e) - { - throw new CmsException("error reading content.", e); - } - } - } - } -} \ No newline at end of file diff --git a/bc-sharp-crypto/src/cms/CMSException.cs b/bc-sharp-crypto/src/cms/CMSException.cs deleted file mode 100644 index 29fe0a6..0000000 --- a/bc-sharp-crypto/src/cms/CMSException.cs +++ /dev/null @@ -1,28 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Cms -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class CmsException - : Exception - { - public CmsException() - { - } - - public CmsException( - string msg) - : base(msg) - { - } - - public CmsException( - string msg, - Exception e) - : base(msg, e) - { - } - } -} diff --git a/bc-sharp-crypto/src/cms/CMSPBEKey.cs b/bc-sharp-crypto/src/cms/CMSPBEKey.cs deleted file mode 100644 index e03307e..0000000 --- a/bc-sharp-crypto/src/cms/CMSPBEKey.cs +++ /dev/null @@ -1,109 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -//import javax.crypto.interfaces.PBEKey; - -namespace Org.BouncyCastle.Cms -{ - public abstract class CmsPbeKey - // TODO Create an equivalent interface somewhere? - // : PBEKey - : ICipherParameters - { - internal readonly char[] password; - internal readonly byte[] salt; - internal readonly int iterationCount; - - [Obsolete("Use version taking 'char[]' instead")] - public CmsPbeKey( - string password, - byte[] salt, - int iterationCount) - : this(password.ToCharArray(), salt, iterationCount) - { - } - - [Obsolete("Use version taking 'char[]' instead")] - public CmsPbeKey( - string password, - AlgorithmIdentifier keyDerivationAlgorithm) - : this(password.ToCharArray(), keyDerivationAlgorithm) - { - } - - public CmsPbeKey( - char[] password, - byte[] salt, - int iterationCount) - { - this.password = (char[])password.Clone(); - this.salt = Arrays.Clone(salt); - this.iterationCount = iterationCount; - } - - public CmsPbeKey( - char[] password, - AlgorithmIdentifier keyDerivationAlgorithm) - { - if (!keyDerivationAlgorithm.Algorithm.Equals(PkcsObjectIdentifiers.IdPbkdf2)) - throw new ArgumentException("Unsupported key derivation algorithm: " - + keyDerivationAlgorithm.Algorithm); - - Pbkdf2Params kdfParams = Pbkdf2Params.GetInstance( - keyDerivationAlgorithm.Parameters.ToAsn1Object()); - - this.password = (char[])password.Clone(); - this.salt = kdfParams.GetSalt(); - this.iterationCount = kdfParams.IterationCount.IntValue; - } - - ~CmsPbeKey() - { - Array.Clear(this.password, 0, this.password.Length); - } - - [Obsolete("Will be removed")] - public string Password - { - get { return new string(password); } - } - - public byte[] Salt - { - get { return Arrays.Clone(salt); } - } - - [Obsolete("Use 'Salt' property instead")] - public byte[] GetSalt() - { - return Salt; - } - - public int IterationCount - { - get { return iterationCount; } - } - - public string Algorithm - { - get { return "PKCS5S2"; } - } - - public string Format - { - get { return "RAW"; } - } - - public byte[] GetEncoded() - { - return null; - } - - internal abstract KeyParameter GetEncoded(string algorithmOid); - } -} diff --git a/bc-sharp-crypto/src/cms/CMSProcessable.cs b/bc-sharp-crypto/src/cms/CMSProcessable.cs deleted file mode 100644 index 41018d1..0000000 --- a/bc-sharp-crypto/src/cms/CMSProcessable.cs +++ /dev/null @@ -1,19 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Cms -{ - public interface CmsProcessable - { - /// - /// Generic routine to copy out the data we want processed. - /// - /// - /// This routine may be called multiple times. - /// - void Write(Stream outStream); - - [Obsolete] - object GetContent(); - } -} diff --git a/bc-sharp-crypto/src/cms/CMSProcessableByteArray.cs b/bc-sharp-crypto/src/cms/CMSProcessableByteArray.cs deleted file mode 100644 index a6ab9b6..0000000 --- a/bc-sharp-crypto/src/cms/CMSProcessableByteArray.cs +++ /dev/null @@ -1,36 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Cms -{ - /** - * a holding class for a byte array of data to be processed. - */ - public class CmsProcessableByteArray - : CmsProcessable, CmsReadable - { - private readonly byte[] bytes; - - public CmsProcessableByteArray(byte[] bytes) - { - this.bytes = bytes; - } - - public virtual Stream GetInputStream() - { - return new MemoryStream(bytes, false); - } - - public virtual void Write(Stream zOut) - { - zOut.Write(bytes, 0, bytes.Length); - } - - /// A clone of the byte array - [Obsolete] - public virtual object GetContent() - { - return bytes.Clone(); - } - } -} diff --git a/bc-sharp-crypto/src/cms/CMSProcessableFile.cs b/bc-sharp-crypto/src/cms/CMSProcessableFile.cs deleted file mode 100644 index c74d2a8..0000000 --- a/bc-sharp-crypto/src/cms/CMSProcessableFile.cs +++ /dev/null @@ -1,52 +0,0 @@ -#if !PORTABLE || DOTNET -using System; -using System.IO; - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Cms -{ - /** - * a holding class for a file of data to be processed. - */ - public class CmsProcessableFile - : CmsProcessable, CmsReadable - { - private const int DefaultBufSize = 32 * 1024; - - private readonly FileInfo _file; - private readonly int _bufSize; - - public CmsProcessableFile(FileInfo file) - : this(file, DefaultBufSize) - { - } - - public CmsProcessableFile(FileInfo file, int bufSize) - { - _file = file; - _bufSize = bufSize; - } - - public virtual Stream GetInputStream() - { - return new FileStream(_file.FullName, FileMode.Open, FileAccess.Read, FileShare.Read, _bufSize); - } - - public virtual void Write(Stream zOut) - { - Stream inStr = GetInputStream(); - Streams.PipeAll(inStr, zOut); - Platform.Dispose(inStr); - } - - /// The file handle - [Obsolete] - public virtual object GetContent() - { - return _file; - } - } -} -#endif diff --git a/bc-sharp-crypto/src/cms/CMSProcessableInputStream.cs b/bc-sharp-crypto/src/cms/CMSProcessableInputStream.cs deleted file mode 100644 index b2abd6f..0000000 --- a/bc-sharp-crypto/src/cms/CMSProcessableInputStream.cs +++ /dev/null @@ -1,53 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Cms -{ - public class CmsProcessableInputStream - : CmsProcessable, CmsReadable - { - private readonly Stream input; - - private bool used = false; - - public CmsProcessableInputStream(Stream input) - { - this.input = input; - } - - public virtual Stream GetInputStream() - { - CheckSingleUsage(); - - return input; - } - - public virtual void Write(Stream output) - { - CheckSingleUsage(); - - Streams.PipeAll(input, output); - Platform.Dispose(input); - } - - [Obsolete] - public virtual object GetContent() - { - return GetInputStream(); - } - - protected virtual void CheckSingleUsage() - { - lock (this) - { - if (used) - throw new InvalidOperationException("CmsProcessableInputStream can only be used once"); - - used = true; - } - } - } -} diff --git a/bc-sharp-crypto/src/cms/CMSReadable.cs b/bc-sharp-crypto/src/cms/CMSReadable.cs deleted file mode 100644 index ad83ba0..0000000 --- a/bc-sharp-crypto/src/cms/CMSReadable.cs +++ /dev/null @@ -1,10 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Cms -{ - public interface CmsReadable - { - Stream GetInputStream(); - } -} diff --git a/bc-sharp-crypto/src/cms/CMSSecureReadable.cs b/bc-sharp-crypto/src/cms/CMSSecureReadable.cs deleted file mode 100644 index 5ceac24..0000000 --- a/bc-sharp-crypto/src/cms/CMSSecureReadable.cs +++ /dev/null @@ -1,14 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Cms -{ - internal interface CmsSecureReadable - { - AlgorithmIdentifier Algorithm { get; } - object CryptoObject { get; } - CmsReadable GetReadable(KeyParameter key); - } -} diff --git a/bc-sharp-crypto/src/cms/CMSSignedData.cs b/bc-sharp-crypto/src/cms/CMSSignedData.cs deleted file mode 100644 index 237c152..0000000 --- a/bc-sharp-crypto/src/cms/CMSSignedData.cs +++ /dev/null @@ -1,425 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.X509; -using Org.BouncyCastle.X509.Store; - -namespace Org.BouncyCastle.Cms -{ - /** - * general class for handling a pkcs7-signature message. - * - * A simple example of usage - note, in the example below the validity of - * the certificate isn't verified, just the fact that one of the certs - * matches the given signer... - * - * 
-	*  IX509Store              certs = s.GetCertificates();
-	*  SignerInformationStore  signers = s.GetSignerInfos();
-	*
-	*  foreach (SignerInformation signer in signers.GetSigners())
-	*  {
-	*      ArrayList       certList = new ArrayList(certs.GetMatches(signer.SignerID));
-	*      X509Certificate cert = (X509Certificate) certList[0];
-	*
-	*      if (signer.Verify(cert.GetPublicKey()))
-	*      {
-	*          verified++;
-	*      }
-	*  }
-	*
- */ - public class CmsSignedData - { - private static readonly CmsSignedHelper Helper = CmsSignedHelper.Instance; - - private readonly CmsProcessable signedContent; - private SignedData signedData; - private ContentInfo contentInfo; - private SignerInformationStore signerInfoStore; - private IX509Store attrCertStore; - private IX509Store certificateStore; - private IX509Store crlStore; - private IDictionary hashes; - - private CmsSignedData( - CmsSignedData c) - { - this.signedData = c.signedData; - this.contentInfo = c.contentInfo; - this.signedContent = c.signedContent; - this.signerInfoStore = c.signerInfoStore; - } - - public CmsSignedData( - byte[] sigBlock) - : this(CmsUtilities.ReadContentInfo(new MemoryStream(sigBlock, false))) - { - } - - public CmsSignedData( - CmsProcessable signedContent, - byte[] sigBlock) - : this(signedContent, CmsUtilities.ReadContentInfo(new MemoryStream(sigBlock, false))) - { - } - - /** - * Content with detached signature, digests precomputed - * - * @param hashes a map of precomputed digests for content indexed by name of hash. - * @param sigBlock the signature object. - */ - public CmsSignedData( - IDictionary hashes, - byte[] sigBlock) - : this(hashes, CmsUtilities.ReadContentInfo(sigBlock)) - { - } - - /** - * base constructor - content with detached signature. - * - * @param signedContent the content that was signed. - * @param sigData the signature object. - */ - public CmsSignedData( - CmsProcessable signedContent, - Stream sigData) - : this(signedContent, CmsUtilities.ReadContentInfo(sigData)) - { - } - - /** - * base constructor - with encapsulated content - */ - public CmsSignedData( - Stream sigData) - : this(CmsUtilities.ReadContentInfo(sigData)) - { - } - - public CmsSignedData( - CmsProcessable signedContent, - ContentInfo sigData) - { - this.signedContent = signedContent; - this.contentInfo = sigData; - this.signedData = SignedData.GetInstance(contentInfo.Content); - } - - public CmsSignedData( - IDictionary hashes, - ContentInfo sigData) - { - this.hashes = hashes; - this.contentInfo = sigData; - this.signedData = SignedData.GetInstance(contentInfo.Content); - } - - public CmsSignedData( - ContentInfo sigData) - { - this.contentInfo = sigData; - this.signedData = SignedData.GetInstance(contentInfo.Content); - - // - // this can happen if the signed message is sent simply to send a - // certificate chain. - // - if (signedData.EncapContentInfo.Content != null) - { - this.signedContent = new CmsProcessableByteArray( - ((Asn1OctetString)(signedData.EncapContentInfo.Content)).GetOctets()); - } -// else -// { -// this.signedContent = null; -// } - } - - /// Return the version number for this object. - public int Version - { - get { return signedData.Version.Value.IntValue; } - } - - /** - * return the collection of signers that are associated with the - * signatures for the message. - */ - public SignerInformationStore GetSignerInfos() - { - if (signerInfoStore == null) - { - IList signerInfos = Platform.CreateArrayList(); - Asn1Set s = signedData.SignerInfos; - - foreach (object obj in s) - { - SignerInfo info = SignerInfo.GetInstance(obj); - DerObjectIdentifier contentType = signedData.EncapContentInfo.ContentType; - - if (hashes == null) - { - signerInfos.Add(new SignerInformation(info, contentType, signedContent, null)); - } - else - { - byte[] hash = (byte[])hashes[info.DigestAlgorithm.Algorithm.Id]; - - signerInfos.Add(new SignerInformation(info, contentType, null, new BaseDigestCalculator(hash))); - } - } - - signerInfoStore = new SignerInformationStore(signerInfos); - } - - return signerInfoStore; - } - - /** - * return a X509Store containing the attribute certificates, if any, contained - * in this message. - * - * @param type type of store to create - * @return a store of attribute certificates - * @exception NoSuchStoreException if the store type isn't available. - * @exception CmsException if a general exception prevents creation of the X509Store - */ - public IX509Store GetAttributeCertificates( - string type) - { - if (attrCertStore == null) - { - attrCertStore = Helper.CreateAttributeStore(type, signedData.Certificates); - } - - return attrCertStore; - } - - /** - * return a X509Store containing the public key certificates, if any, contained - * in this message. - * - * @param type type of store to create - * @return a store of public key certificates - * @exception NoSuchStoreException if the store type isn't available. - * @exception CmsException if a general exception prevents creation of the X509Store - */ - public IX509Store GetCertificates( - string type) - { - if (certificateStore == null) - { - certificateStore = Helper.CreateCertificateStore(type, signedData.Certificates); - } - - return certificateStore; - } - - /** - * return a X509Store containing CRLs, if any, contained - * in this message. - * - * @param type type of store to create - * @return a store of CRLs - * @exception NoSuchStoreException if the store type isn't available. - * @exception CmsException if a general exception prevents creation of the X509Store - */ - public IX509Store GetCrls( - string type) - { - if (crlStore == null) - { - crlStore = Helper.CreateCrlStore(type, signedData.CRLs); - } - - return crlStore; - } - - [Obsolete("Use 'SignedContentType' property instead.")] - public string SignedContentTypeOid - { - get { return signedData.EncapContentInfo.ContentType.Id; } - } - - /// - /// Return the DerObjectIdentifier associated with the encapsulated - /// content info structure carried in the signed data. - /// - public DerObjectIdentifier SignedContentType - { - get { return signedData.EncapContentInfo.ContentType; } - } - - public CmsProcessable SignedContent - { - get { return signedContent; } - } - - /** - * return the ContentInfo - */ - public ContentInfo ContentInfo - { - get { return contentInfo; } - } - - /** - * return the ASN.1 encoded representation of this object. - */ - public byte[] GetEncoded() - { - return contentInfo.GetEncoded(); - } - - /** - * Replace the signerinformation store associated with this - * CmsSignedData object with the new one passed in. You would - * probably only want to do this if you wanted to change the unsigned - * attributes associated with a signer, or perhaps delete one. - * - * @param signedData the signed data object to be used as a base. - * @param signerInformationStore the new signer information store to use. - * @return a new signed data object. - */ - public static CmsSignedData ReplaceSigners( - CmsSignedData signedData, - SignerInformationStore signerInformationStore) - { - // - // copy - // - CmsSignedData cms = new CmsSignedData(signedData); - - // - // replace the store - // - cms.signerInfoStore = signerInformationStore; - - // - // replace the signers in the SignedData object - // - Asn1EncodableVector digestAlgs = new Asn1EncodableVector(); - Asn1EncodableVector vec = new Asn1EncodableVector(); - - foreach (SignerInformation signer in signerInformationStore.GetSigners()) - { - digestAlgs.Add(Helper.FixAlgID(signer.DigestAlgorithmID)); - vec.Add(signer.ToSignerInfo()); - } - - Asn1Set digests = new DerSet(digestAlgs); - Asn1Set signers = new DerSet(vec); - Asn1Sequence sD = (Asn1Sequence)signedData.signedData.ToAsn1Object(); - - // - // signers are the last item in the sequence. - // - vec = new Asn1EncodableVector( - sD[0], // version - digests); - - for (int i = 2; i != sD.Count - 1; i++) - { - vec.Add(sD[i]); - } - - vec.Add(signers); - - cms.signedData = SignedData.GetInstance(new BerSequence(vec)); - - // - // replace the contentInfo with the new one - // - cms.contentInfo = new ContentInfo(cms.contentInfo.ContentType, cms.signedData); - - return cms; - } - - /** - * Replace the certificate and CRL information associated with this - * CmsSignedData object with the new one passed in. - * - * @param signedData the signed data object to be used as a base. - * @param x509Certs the new certificates to be used. - * @param x509Crls the new CRLs to be used. - * @return a new signed data object. - * @exception CmsException if there is an error processing the stores - */ - public static CmsSignedData ReplaceCertificatesAndCrls( - CmsSignedData signedData, - IX509Store x509Certs, - IX509Store x509Crls, - IX509Store x509AttrCerts) - { - if (x509AttrCerts != null) - throw Platform.CreateNotImplementedException("Currently can't replace attribute certificates"); - - // - // copy - // - CmsSignedData cms = new CmsSignedData(signedData); - - // - // replace the certs and crls in the SignedData object - // - Asn1Set certs = null; - try - { - Asn1Set asn1Set = CmsUtilities.CreateBerSetFromList( - CmsUtilities.GetCertificatesFromStore(x509Certs)); - - if (asn1Set.Count != 0) - { - certs = asn1Set; - } - } - catch (X509StoreException e) - { - throw new CmsException("error getting certificates from store", e); - } - - Asn1Set crls = null; - try - { - Asn1Set asn1Set = CmsUtilities.CreateBerSetFromList( - CmsUtilities.GetCrlsFromStore(x509Crls)); - - if (asn1Set.Count != 0) - { - crls = asn1Set; - } - } - catch (X509StoreException e) - { - throw new CmsException("error getting CRLs from store", e); - } - - // - // replace the CMS structure. - // - SignedData old = signedData.signedData; - cms.signedData = new SignedData( - old.DigestAlgorithms, - old.EncapContentInfo, - certs, - crls, - old.SignerInfos); - - // - // replace the contentInfo with the new one - // - cms.contentInfo = new ContentInfo(cms.contentInfo.ContentType, cms.signedData); - - return cms; - } - } -} diff --git a/bc-sharp-crypto/src/cms/CMSSignedDataGenerator.cs b/bc-sharp-crypto/src/cms/CMSSignedDataGenerator.cs deleted file mode 100644 index f63ed87..0000000 --- a/bc-sharp-crypto/src/cms/CMSSignedDataGenerator.cs +++ /dev/null @@ -1,585 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.X509; -using Org.BouncyCastle.Crypto.Operators; - -namespace Org.BouncyCastle.Cms -{ - /** - * general class for generating a pkcs7-signature message. - *

- * A simple example of usage. - * - * 

-     *      IX509Store certs...
-     *      IX509Store crls...
-     *      CmsSignedDataGenerator gen = new CmsSignedDataGenerator();
-     *
-     *      gen.AddSigner(privKey, cert, CmsSignedGenerator.DigestSha1);
-     *      gen.AddCertificates(certs);
-     *      gen.AddCrls(crls);
-     *
-     *      CmsSignedData data = gen.Generate(content);
-     *
- *

- */ - public class CmsSignedDataGenerator - : CmsSignedGenerator - { - private static readonly CmsSignedHelper Helper = CmsSignedHelper.Instance; - - private readonly IList signerInfs = Platform.CreateArrayList(); - - private class SignerInf - { - private readonly CmsSignedGenerator outer; - - private readonly ISignatureFactory sigCalc; - private readonly SignerIdentifier signerIdentifier; - private readonly string digestOID; - private readonly string encOID; - private readonly CmsAttributeTableGenerator sAttr; - private readonly CmsAttributeTableGenerator unsAttr; - private readonly Asn1.Cms.AttributeTable baseSignedTable; - - internal SignerInf( - CmsSignedGenerator outer, - AsymmetricKeyParameter key, - SignerIdentifier signerIdentifier, - string digestOID, - string encOID, - CmsAttributeTableGenerator sAttr, - CmsAttributeTableGenerator unsAttr, - Asn1.Cms.AttributeTable baseSignedTable) - { - string digestName = Helper.GetDigestAlgName(digestOID); - - string signatureName = digestName + "with" + Helper.GetEncryptionAlgName(encOID); - - this.outer = outer; - this.sigCalc = new Asn1SignatureFactory(signatureName, key); - this.signerIdentifier = signerIdentifier; - this.digestOID = digestOID; - this.encOID = encOID; - this.sAttr = sAttr; - this.unsAttr = unsAttr; - this.baseSignedTable = baseSignedTable; - } - - internal SignerInf( - CmsSignedGenerator outer, - ISignatureFactory sigCalc, - SignerIdentifier signerIdentifier, - CmsAttributeTableGenerator sAttr, - CmsAttributeTableGenerator unsAttr, - Asn1.Cms.AttributeTable baseSignedTable) - { - this.outer = outer; - this.sigCalc = sigCalc; - this.signerIdentifier = signerIdentifier; - this.digestOID = new DefaultDigestAlgorithmIdentifierFinder().find((AlgorithmIdentifier)sigCalc.AlgorithmDetails).Algorithm.Id; - this.encOID = ((AlgorithmIdentifier)sigCalc.AlgorithmDetails).Algorithm.Id; - this.sAttr = sAttr; - this.unsAttr = unsAttr; - this.baseSignedTable = baseSignedTable; - } - - internal AlgorithmIdentifier DigestAlgorithmID - { - get { return new AlgorithmIdentifier(new DerObjectIdentifier(digestOID), DerNull.Instance); } - } - - internal CmsAttributeTableGenerator SignedAttributes - { - get { return sAttr; } - } - - internal CmsAttributeTableGenerator UnsignedAttributes - { - get { return unsAttr; } - } - - internal SignerInfo ToSignerInfo( - DerObjectIdentifier contentType, - CmsProcessable content, - SecureRandom random) - { - AlgorithmIdentifier digAlgId = DigestAlgorithmID; - string digestName = Helper.GetDigestAlgName(digestOID); - - string signatureName = digestName + "with" + Helper.GetEncryptionAlgName(encOID); - - byte[] hash; - if (outer._digests.Contains(digestOID)) - { - hash = (byte[])outer._digests[digestOID]; - } - else - { - IDigest dig = Helper.GetDigestInstance(digestName); - if (content != null) - { - content.Write(new DigOutputStream(dig)); - } - hash = DigestUtilities.DoFinal(dig); - outer._digests.Add(digestOID, hash.Clone()); - } - - IStreamCalculator calculator = sigCalc.CreateCalculator(); - -#if NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE - Stream sigStr = calculator.Stream; -#else - Stream sigStr = new BufferedStream(calculator.Stream); -#endif - - Asn1Set signedAttr = null; - if (sAttr != null) - { - IDictionary parameters = outer.GetBaseParameters(contentType, digAlgId, hash); - -// Asn1.Cms.AttributeTable signed = sAttr.GetAttributes(Collections.unmodifiableMap(parameters)); - Asn1.Cms.AttributeTable signed = sAttr.GetAttributes(parameters); - - if (contentType == null) //counter signature - { - if (signed != null && signed[CmsAttributes.ContentType] != null) - { - IDictionary tmpSigned = signed.ToDictionary(); - tmpSigned.Remove(CmsAttributes.ContentType); - signed = new Asn1.Cms.AttributeTable(tmpSigned); - } - } - - // TODO Validate proposed signed attributes - - signedAttr = outer.GetAttributeSet(signed); - - // sig must be composed from the DER encoding. - new DerOutputStream(sigStr).WriteObject(signedAttr); - } - else if (content != null) - { - // TODO Use raw signature of the hash value instead - content.Write(sigStr); - } - - Platform.Dispose(sigStr); - byte[] sigBytes = ((IBlockResult)calculator.GetResult()).Collect(); - - Asn1Set unsignedAttr = null; - if (unsAttr != null) - { - IDictionary baseParameters = outer.GetBaseParameters(contentType, digAlgId, hash); - baseParameters[CmsAttributeTableParameter.Signature] = sigBytes.Clone(); - -// Asn1.Cms.AttributeTable unsigned = unsAttr.GetAttributes(Collections.unmodifiableMap(baseParameters)); - Asn1.Cms.AttributeTable unsigned = unsAttr.GetAttributes(baseParameters); - - // TODO Validate proposed unsigned attributes - - unsignedAttr = outer.GetAttributeSet(unsigned); - } - - // TODO[RSAPSS] Need the ability to specify non-default parameters - Asn1Encodable sigX509Parameters = SignerUtilities.GetDefaultX509Parameters(signatureName); - AlgorithmIdentifier encAlgId = Helper.GetEncAlgorithmIdentifier( - new DerObjectIdentifier(encOID), sigX509Parameters); - - return new SignerInfo(signerIdentifier, digAlgId, - signedAttr, encAlgId, new DerOctetString(sigBytes), unsignedAttr); - } - } - - public CmsSignedDataGenerator() - { - } - - /// Constructor allowing specific source of randomness - /// Instance of SecureRandom to use. - public CmsSignedDataGenerator( - SecureRandom rand) - : base(rand) - { - } - - /** - * add a signer - no attributes other than the default ones will be - * provided here. - * - * @param key signing key to use - * @param cert certificate containing corresponding public key - * @param digestOID digest algorithm OID - */ - public void AddSigner( - AsymmetricKeyParameter privateKey, - X509Certificate cert, - string digestOID) - { - AddSigner(privateKey, cert, Helper.GetEncOid(privateKey, digestOID), digestOID); - } - - /** - * add a signer, specifying the digest encryption algorithm to use - no attributes other than the default ones will be - * provided here. - * - * @param key signing key to use - * @param cert certificate containing corresponding public key - * @param encryptionOID digest encryption algorithm OID - * @param digestOID digest algorithm OID - */ - public void AddSigner( - AsymmetricKeyParameter privateKey, - X509Certificate cert, - string encryptionOID, - string digestOID) - { - doAddSigner(privateKey, GetSignerIdentifier(cert), encryptionOID, digestOID, - new DefaultSignedAttributeTableGenerator(), null, null); - } - - /** - * add a signer - no attributes other than the default ones will be - * provided here. - */ - public void AddSigner( - AsymmetricKeyParameter privateKey, - byte[] subjectKeyID, - string digestOID) - { - AddSigner(privateKey, subjectKeyID, Helper.GetEncOid(privateKey, digestOID), digestOID); - } - - /** - * add a signer, specifying the digest encryption algorithm to use - no attributes other than the default ones will be - * provided here. - */ - public void AddSigner( - AsymmetricKeyParameter privateKey, - byte[] subjectKeyID, - string encryptionOID, - string digestOID) - { - doAddSigner(privateKey, GetSignerIdentifier(subjectKeyID), encryptionOID, digestOID, - new DefaultSignedAttributeTableGenerator(), null, null); - } - - /** - * add a signer with extra signed/unsigned attributes. - * - * @param key signing key to use - * @param cert certificate containing corresponding public key - * @param digestOID digest algorithm OID - * @param signedAttr table of attributes to be included in signature - * @param unsignedAttr table of attributes to be included as unsigned - */ - public void AddSigner( - AsymmetricKeyParameter privateKey, - X509Certificate cert, - string digestOID, - Asn1.Cms.AttributeTable signedAttr, - Asn1.Cms.AttributeTable unsignedAttr) - { - AddSigner(privateKey, cert, Helper.GetEncOid(privateKey, digestOID), digestOID, - signedAttr, unsignedAttr); - } - - /** - * add a signer, specifying the digest encryption algorithm, with extra signed/unsigned attributes. - * - * @param key signing key to use - * @param cert certificate containing corresponding public key - * @param encryptionOID digest encryption algorithm OID - * @param digestOID digest algorithm OID - * @param signedAttr table of attributes to be included in signature - * @param unsignedAttr table of attributes to be included as unsigned - */ - public void AddSigner( - AsymmetricKeyParameter privateKey, - X509Certificate cert, - string encryptionOID, - string digestOID, - Asn1.Cms.AttributeTable signedAttr, - Asn1.Cms.AttributeTable unsignedAttr) - { - doAddSigner(privateKey, GetSignerIdentifier(cert), encryptionOID, digestOID, - new DefaultSignedAttributeTableGenerator(signedAttr), - new SimpleAttributeTableGenerator(unsignedAttr), - signedAttr); - } - - /** - * add a signer with extra signed/unsigned attributes. - * - * @param key signing key to use - * @param subjectKeyID subjectKeyID of corresponding public key - * @param digestOID digest algorithm OID - * @param signedAttr table of attributes to be included in signature - * @param unsignedAttr table of attributes to be included as unsigned - */ - public void AddSigner( - AsymmetricKeyParameter privateKey, - byte[] subjectKeyID, - string digestOID, - Asn1.Cms.AttributeTable signedAttr, - Asn1.Cms.AttributeTable unsignedAttr) - { - AddSigner(privateKey, subjectKeyID, Helper.GetEncOid(privateKey, digestOID), digestOID, - signedAttr, unsignedAttr); - } - - /** - * add a signer, specifying the digest encryption algorithm, with extra signed/unsigned attributes. - * - * @param key signing key to use - * @param subjectKeyID subjectKeyID of corresponding public key - * @param encryptionOID digest encryption algorithm OID - * @param digestOID digest algorithm OID - * @param signedAttr table of attributes to be included in signature - * @param unsignedAttr table of attributes to be included as unsigned - */ - public void AddSigner( - AsymmetricKeyParameter privateKey, - byte[] subjectKeyID, - string encryptionOID, - string digestOID, - Asn1.Cms.AttributeTable signedAttr, - Asn1.Cms.AttributeTable unsignedAttr) - { - doAddSigner(privateKey, GetSignerIdentifier(subjectKeyID), encryptionOID, digestOID, - new DefaultSignedAttributeTableGenerator(signedAttr), - new SimpleAttributeTableGenerator(unsignedAttr), - signedAttr); - } - - /** - * add a signer with extra signed/unsigned attributes based on generators. - */ - public void AddSigner( - AsymmetricKeyParameter privateKey, - X509Certificate cert, - string digestOID, - CmsAttributeTableGenerator signedAttrGen, - CmsAttributeTableGenerator unsignedAttrGen) - { - AddSigner(privateKey, cert, Helper.GetEncOid(privateKey, digestOID), digestOID, - signedAttrGen, unsignedAttrGen); - } - - /** - * add a signer, specifying the digest encryption algorithm, with extra signed/unsigned attributes based on generators. - */ - public void AddSigner( - AsymmetricKeyParameter privateKey, - X509Certificate cert, - string encryptionOID, - string digestOID, - CmsAttributeTableGenerator signedAttrGen, - CmsAttributeTableGenerator unsignedAttrGen) - { - doAddSigner(privateKey, GetSignerIdentifier(cert), encryptionOID, digestOID, signedAttrGen, - unsignedAttrGen, null); - } - - /** - * add a signer with extra signed/unsigned attributes based on generators. - */ - public void AddSigner( - AsymmetricKeyParameter privateKey, - byte[] subjectKeyID, - string digestOID, - CmsAttributeTableGenerator signedAttrGen, - CmsAttributeTableGenerator unsignedAttrGen) - { - AddSigner(privateKey, subjectKeyID, Helper.GetEncOid(privateKey, digestOID), digestOID, - signedAttrGen, unsignedAttrGen); - } - - /** - * add a signer, including digest encryption algorithm, with extra signed/unsigned attributes based on generators. - */ - public void AddSigner( - AsymmetricKeyParameter privateKey, - byte[] subjectKeyID, - string encryptionOID, - string digestOID, - CmsAttributeTableGenerator signedAttrGen, - CmsAttributeTableGenerator unsignedAttrGen) - { - doAddSigner(privateKey, GetSignerIdentifier(subjectKeyID), encryptionOID, digestOID, - signedAttrGen, unsignedAttrGen, null); - } - - public void AddSignerInfoGenerator(SignerInfoGenerator signerInfoGenerator) - { - signerInfs.Add(new SignerInf(this, signerInfoGenerator.contentSigner, signerInfoGenerator.sigId, - signerInfoGenerator.signedGen, signerInfoGenerator.unsignedGen, null)); - } - - private void doAddSigner( - AsymmetricKeyParameter privateKey, - SignerIdentifier signerIdentifier, - string encryptionOID, - string digestOID, - CmsAttributeTableGenerator signedAttrGen, - CmsAttributeTableGenerator unsignedAttrGen, - Asn1.Cms.AttributeTable baseSignedTable) - { - signerInfs.Add(new SignerInf(this, privateKey, signerIdentifier, digestOID, encryptionOID, - signedAttrGen, unsignedAttrGen, baseSignedTable)); - } - - /** - * generate a signed object that for a CMS Signed Data object - */ - public CmsSignedData Generate( - CmsProcessable content) - { - return Generate(content, false); - } - - /** - * generate a signed object that for a CMS Signed Data - * object - if encapsulate is true a copy - * of the message will be included in the signature. The content type - * is set according to the OID represented by the string signedContentType. - */ - public CmsSignedData Generate( - string signedContentType, - // FIXME Avoid accessing more than once to support CmsProcessableInputStream - CmsProcessable content, - bool encapsulate) - { - Asn1EncodableVector digestAlgs = new Asn1EncodableVector(); - Asn1EncodableVector signerInfos = new Asn1EncodableVector(); - - _digests.Clear(); // clear the current preserved digest state - - // - // add the precalculated SignerInfo objects. - // - foreach (SignerInformation signer in _signers) - { - digestAlgs.Add(Helper.FixAlgID(signer.DigestAlgorithmID)); - - // TODO Verify the content type and calculated digest match the precalculated SignerInfo - signerInfos.Add(signer.ToSignerInfo()); - } - - // - // add the SignerInfo objects - // - bool isCounterSignature = (signedContentType == null); - - DerObjectIdentifier contentTypeOid = isCounterSignature - ? null - : new DerObjectIdentifier(signedContentType); - - foreach (SignerInf signer in signerInfs) - { - try - { - digestAlgs.Add(signer.DigestAlgorithmID); - signerInfos.Add(signer.ToSignerInfo(contentTypeOid, content, rand)); - } - catch (IOException e) - { - throw new CmsException("encoding error.", e); - } - catch (InvalidKeyException e) - { - throw new CmsException("key inappropriate for signature.", e); - } - catch (SignatureException e) - { - throw new CmsException("error creating signature.", e); - } - catch (CertificateEncodingException e) - { - throw new CmsException("error creating sid.", e); - } - } - - Asn1Set certificates = null; - - if (_certs.Count != 0) - { - certificates = CmsUtilities.CreateBerSetFromList(_certs); - } - - Asn1Set certrevlist = null; - - if (_crls.Count != 0) - { - certrevlist = CmsUtilities.CreateBerSetFromList(_crls); - } - - Asn1OctetString octs = null; - if (encapsulate) - { - MemoryStream bOut = new MemoryStream(); - if (content != null) - { - try - { - content.Write(bOut); - } - catch (IOException e) - { - throw new CmsException("encapsulation error.", e); - } - } - octs = new BerOctetString(bOut.ToArray()); - } - - ContentInfo encInfo = new ContentInfo(contentTypeOid, octs); - - SignedData sd = new SignedData( - new DerSet(digestAlgs), - encInfo, - certificates, - certrevlist, - new DerSet(signerInfos)); - - ContentInfo contentInfo = new ContentInfo(CmsObjectIdentifiers.SignedData, sd); - - return new CmsSignedData(content, contentInfo); - } - - /** - * generate a signed object that for a CMS Signed Data - * object - if encapsulate is true a copy - * of the message will be included in the signature with the - * default content type "data". - */ - public CmsSignedData Generate( - CmsProcessable content, - bool encapsulate) - { - return this.Generate(Data, content, encapsulate); - } - - /** - * generate a set of one or more SignerInformation objects representing counter signatures on - * the passed in SignerInformation object. - * - * @param signer the signer to be countersigned - * @param sigProvider the provider to be used for counter signing. - * @return a store containing the signers. - */ - public SignerInformationStore GenerateCounterSigners( - SignerInformation signer) - { - return this.Generate(null, new CmsProcessableByteArray(signer.GetSignature()), false).GetSignerInfos(); - } - } -} diff --git a/bc-sharp-crypto/src/cms/CMSSignedDataParser.cs b/bc-sharp-crypto/src/cms/CMSSignedDataParser.cs deleted file mode 100644 index fb51ab1..0000000 --- a/bc-sharp-crypto/src/cms/CMSSignedDataParser.cs +++ /dev/null @@ -1,450 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.IO; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; -using Org.BouncyCastle.Utilities.IO; -using Org.BouncyCastle.X509; -using Org.BouncyCastle.X509.Store; - -namespace Org.BouncyCastle.Cms -{ - /** - * Parsing class for an CMS Signed Data object from an input stream. - *

- * Note: that because we are in a streaming mode only one signer can be tried and it is important - * that the methods on the parser are called in the appropriate order. - *

- *

- * A simple example of usage for an encapsulated signature. - *

- *

- * Two notes: first, in the example below the validity of - * the certificate isn't verified, just the fact that one of the certs - * matches the given signer, and, second, because we are in a streaming - * mode the order of the operations is important. - *

- * 
-	*      CmsSignedDataParser     sp = new CmsSignedDataParser(encapSigData);
-	*
-	*      sp.GetSignedContent().Drain();
-	*
-	*      IX509Store              certs = sp.GetCertificates();
-	*      SignerInformationStore  signers = sp.GetSignerInfos();
-	*
-	*      foreach (SignerInformation signer in signers.GetSigners())
-	*      {
-	*          ArrayList       certList = new ArrayList(certs.GetMatches(signer.SignerID));
-	*          X509Certificate cert = (X509Certificate) certList[0];
-	*
-	*          Console.WriteLine("verify returns: " + signer.Verify(cert));
-	*      }
-	*
- * Note also: this class does not introduce buffering - if you are processing large files you should create - * the parser with: - * 
-	*          CmsSignedDataParser     ep = new CmsSignedDataParser(new BufferedInputStream(encapSigData, bufSize));
-	*
- * where bufSize is a suitably large buffer size. - */ - public class CmsSignedDataParser - : CmsContentInfoParser - { - private static readonly CmsSignedHelper Helper = CmsSignedHelper.Instance; - - private SignedDataParser _signedData; - private DerObjectIdentifier _signedContentType; - private CmsTypedStream _signedContent; - private IDictionary _digests; - private ISet _digestOids; - - private SignerInformationStore _signerInfoStore; - private Asn1Set _certSet, _crlSet; - private bool _isCertCrlParsed; - private IX509Store _attributeStore; - private IX509Store _certificateStore; - private IX509Store _crlStore; - - public CmsSignedDataParser( - byte[] sigBlock) - : this(new MemoryStream(sigBlock, false)) - { - } - - public CmsSignedDataParser( - CmsTypedStream signedContent, - byte[] sigBlock) - : this(signedContent, new MemoryStream(sigBlock, false)) - { - } - - /** - * base constructor - with encapsulated content - */ - public CmsSignedDataParser( - Stream sigData) - : this(null, sigData) - { - } - - /** - * base constructor - * - * @param signedContent the content that was signed. - * @param sigData the signature object. - */ - public CmsSignedDataParser( - CmsTypedStream signedContent, - Stream sigData) - : base(sigData) - { - try - { - this._signedContent = signedContent; - this._signedData = SignedDataParser.GetInstance(this.contentInfo.GetContent(Asn1Tags.Sequence)); - this._digests = Platform.CreateHashtable(); - this._digestOids = new HashSet(); - - Asn1SetParser digAlgs = _signedData.GetDigestAlgorithms(); - IAsn1Convertible o; - - while ((o = digAlgs.ReadObject()) != null) - { - AlgorithmIdentifier id = AlgorithmIdentifier.GetInstance(o.ToAsn1Object()); - - try - { - string digestOid = id.Algorithm.Id; - string digestName = Helper.GetDigestAlgName(digestOid); - - if (!this._digests.Contains(digestName)) - { - this._digests[digestName] = Helper.GetDigestInstance(digestName); - this._digestOids.Add(digestOid); - } - } - catch (SecurityUtilityException) - { - // TODO Should do something other than ignore it - } - } - - // - // If the message is simply a certificate chain message GetContent() may return null. - // - ContentInfoParser cont = _signedData.GetEncapContentInfo(); - Asn1OctetStringParser octs = (Asn1OctetStringParser) - cont.GetContent(Asn1Tags.OctetString); - - if (octs != null) - { - CmsTypedStream ctStr = new CmsTypedStream( - cont.ContentType.Id, octs.GetOctetStream()); - - if (_signedContent == null) - { - this._signedContent = ctStr; - } - else - { - // - // content passed in, need to read past empty encapsulated content info object if present - // - ctStr.Drain(); - } - } - - _signedContentType = _signedContent == null - ? cont.ContentType - : new DerObjectIdentifier(_signedContent.ContentType); - } - catch (IOException e) - { - throw new CmsException("io exception: " + e.Message, e); - } - } - - /** - * Return the version number for the SignedData object - * - * @return the version number - */ - public int Version - { - get { return _signedData.Version.Value.IntValue; } - } - - public ISet DigestOids - { - get { return new HashSet(_digestOids); } - } - - /** - * return the collection of signers that are associated with the - * signatures for the message. - * @throws CmsException - */ - public SignerInformationStore GetSignerInfos() - { - if (_signerInfoStore == null) - { - PopulateCertCrlSets(); - - IList signerInfos = Platform.CreateArrayList(); - IDictionary hashes = Platform.CreateHashtable(); - - foreach (object digestKey in _digests.Keys) - { - hashes[digestKey] = DigestUtilities.DoFinal( - (IDigest)_digests[digestKey]); - } - - try - { - Asn1SetParser s = _signedData.GetSignerInfos(); - IAsn1Convertible o; - - while ((o = s.ReadObject()) != null) - { - SignerInfo info = SignerInfo.GetInstance(o.ToAsn1Object()); - string digestName = Helper.GetDigestAlgName( - info.DigestAlgorithm.Algorithm.Id); - - byte[] hash = (byte[]) hashes[digestName]; - - signerInfos.Add(new SignerInformation(info, _signedContentType, null, new BaseDigestCalculator(hash))); - } - } - catch (IOException e) - { - throw new CmsException("io exception: " + e.Message, e); - } - - _signerInfoStore = new SignerInformationStore(signerInfos); - } - - return _signerInfoStore; - } - - /** - * return a X509Store containing the attribute certificates, if any, contained - * in this message. - * - * @param type type of store to create - * @return a store of attribute certificates - * @exception org.bouncycastle.x509.NoSuchStoreException if the store type isn't available. - * @exception CmsException if a general exception prevents creation of the X509Store - */ - public IX509Store GetAttributeCertificates( - string type) - { - if (_attributeStore == null) - { - PopulateCertCrlSets(); - - _attributeStore = Helper.CreateAttributeStore(type, _certSet); - } - - return _attributeStore; - } - - /** - * return a X509Store containing the public key certificates, if any, contained - * in this message. - * - * @param type type of store to create - * @return a store of public key certificates - * @exception NoSuchStoreException if the store type isn't available. - * @exception CmsException if a general exception prevents creation of the X509Store - */ - public IX509Store GetCertificates( - string type) - { - if (_certificateStore == null) - { - PopulateCertCrlSets(); - - _certificateStore = Helper.CreateCertificateStore(type, _certSet); - } - - return _certificateStore; - } - - /** - * return a X509Store containing CRLs, if any, contained - * in this message. - * - * @param type type of store to create - * @return a store of CRLs - * @exception NoSuchStoreException if the store type isn't available. - * @exception CmsException if a general exception prevents creation of the X509Store - */ - public IX509Store GetCrls( - string type) - { - if (_crlStore == null) - { - PopulateCertCrlSets(); - - _crlStore = Helper.CreateCrlStore(type, _crlSet); - } - - return _crlStore; - } - - private void PopulateCertCrlSets() - { - if (_isCertCrlParsed) - return; - - _isCertCrlParsed = true; - - try - { - // care! Streaming - Must process the GetCertificates() result before calling GetCrls() - _certSet = GetAsn1Set(_signedData.GetCertificates()); - _crlSet = GetAsn1Set(_signedData.GetCrls()); - } - catch (IOException e) - { - throw new CmsException("problem parsing cert/crl sets", e); - } - } - - /// - /// Return the DerObjectIdentifier associated with the encapsulated - /// content info structure carried in the signed data. - /// - public DerObjectIdentifier SignedContentType - { - get { return _signedContentType; } - } - - public CmsTypedStream GetSignedContent() - { - if (_signedContent == null) - { - return null; - } - - Stream digStream = _signedContent.ContentStream; - - foreach (IDigest digest in _digests.Values) - { - digStream = new DigestStream(digStream, digest, null); - } - - return new CmsTypedStream(_signedContent.ContentType, digStream); - } - - /** - * Replace the signerinformation store associated with the passed - * in message contained in the stream original with the new one passed in. - * You would probably only want to do this if you wanted to change the unsigned - * attributes associated with a signer, or perhaps delete one. - *

- * The output stream is returned unclosed. - *

- * @param original the signed data stream to be used as a base. - * @param signerInformationStore the new signer information store to use. - * @param out the stream to Write the new signed data object to. - * @return out. - */ - public static Stream ReplaceSigners( - Stream original, - SignerInformationStore signerInformationStore, - Stream outStr) - { - // NB: SecureRandom would be ignored since using existing signatures only - CmsSignedDataStreamGenerator gen = new CmsSignedDataStreamGenerator(); - CmsSignedDataParser parser = new CmsSignedDataParser(original); - -// gen.AddDigests(parser.DigestOids); - gen.AddSigners(signerInformationStore); - - CmsTypedStream signedContent = parser.GetSignedContent(); - bool encapsulate = (signedContent != null); - Stream contentOut = gen.Open(outStr, parser.SignedContentType.Id, encapsulate); - if (encapsulate) - { - Streams.PipeAll(signedContent.ContentStream, contentOut); - } - - gen.AddAttributeCertificates(parser.GetAttributeCertificates("Collection")); - gen.AddCertificates(parser.GetCertificates("Collection")); - gen.AddCrls(parser.GetCrls("Collection")); - -// gen.AddSigners(parser.GetSignerInfos()); - - Platform.Dispose(contentOut); - - return outStr; - } - - /** - * Replace the certificate and CRL information associated with this - * CMSSignedData object with the new one passed in. - *

- * The output stream is returned unclosed. - *

- * @param original the signed data stream to be used as a base. - * @param certsAndCrls the new certificates and CRLs to be used. - * @param out the stream to Write the new signed data object to. - * @return out. - * @exception CmsException if there is an error processing the CertStore - */ - public static Stream ReplaceCertificatesAndCrls( - Stream original, - IX509Store x509Certs, - IX509Store x509Crls, - IX509Store x509AttrCerts, - Stream outStr) - { - // NB: SecureRandom would be ignored since using existing signatures only - CmsSignedDataStreamGenerator gen = new CmsSignedDataStreamGenerator(); - CmsSignedDataParser parser = new CmsSignedDataParser(original); - - gen.AddDigests(parser.DigestOids); - - CmsTypedStream signedContent = parser.GetSignedContent(); - bool encapsulate = (signedContent != null); - Stream contentOut = gen.Open(outStr, parser.SignedContentType.Id, encapsulate); - if (encapsulate) - { - Streams.PipeAll(signedContent.ContentStream, contentOut); - } - -// gen.AddAttributeCertificates(parser.GetAttributeCertificates("Collection")); -// gen.AddCertificates(parser.GetCertificates("Collection")); -// gen.AddCrls(parser.GetCrls("Collection")); - if (x509AttrCerts != null) - gen.AddAttributeCertificates(x509AttrCerts); - if (x509Certs != null) - gen.AddCertificates(x509Certs); - if (x509Crls != null) - gen.AddCrls(x509Crls); - - gen.AddSigners(parser.GetSignerInfos()); - - Platform.Dispose(contentOut); - - return outStr; - } - - private static Asn1Set GetAsn1Set( - Asn1SetParser asn1SetParser) - { - return asn1SetParser == null - ? null - : Asn1Set.GetInstance(asn1SetParser.ToAsn1Object()); - } - } -} diff --git a/bc-sharp-crypto/src/cms/CMSSignedDataStreamGenerator.cs b/bc-sharp-crypto/src/cms/CMSSignedDataStreamGenerator.cs deleted file mode 100644 index d0ab742..0000000 --- a/bc-sharp-crypto/src/cms/CMSSignedDataStreamGenerator.cs +++ /dev/null @@ -1,929 +0,0 @@ -using System; -using System.Collections; -using System.Diagnostics; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.IO; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; -using Org.BouncyCastle.Utilities.IO; -using Org.BouncyCastle.X509; - -namespace Org.BouncyCastle.Cms -{ - /** - * General class for generating a pkcs7-signature message stream. - *

- * A simple example of usage. - *

- * 
-    *      IX509Store                   certs...
-    *      CmsSignedDataStreamGenerator gen = new CmsSignedDataStreamGenerator();
-    *
-    *      gen.AddSigner(privateKey, cert, CmsSignedDataStreamGenerator.DIGEST_SHA1);
-    *
-    *      gen.AddCertificates(certs);
-    *
-    *      Stream sigOut = gen.Open(bOut);
-    *
-    *      sigOut.Write(Encoding.UTF8.GetBytes("Hello World!"));
-    *
-    *      sigOut.Close();
-    *
- */ - public class CmsSignedDataStreamGenerator - : CmsSignedGenerator - { - private static readonly CmsSignedHelper Helper = CmsSignedHelper.Instance; - - private readonly IList _signerInfs = Platform.CreateArrayList(); - private readonly ISet _messageDigestOids = new HashSet(); - private readonly IDictionary _messageDigests = Platform.CreateHashtable(); - private readonly IDictionary _messageHashes = Platform.CreateHashtable(); - private bool _messageDigestsLocked; - private int _bufferSize; - - private class DigestAndSignerInfoGeneratorHolder - { - internal readonly ISignerInfoGenerator signerInf; - internal readonly string digestOID; - - internal DigestAndSignerInfoGeneratorHolder(ISignerInfoGenerator signerInf, String digestOID) - { - this.signerInf = signerInf; - this.digestOID = digestOID; - } - - internal AlgorithmIdentifier DigestAlgorithm - { - get { return new AlgorithmIdentifier(new DerObjectIdentifier(this.digestOID), DerNull.Instance); } - } - } - - private class SignerInfoGeneratorImpl : ISignerInfoGenerator - { - private readonly CmsSignedDataStreamGenerator outer; - - private readonly SignerIdentifier _signerIdentifier; - private readonly string _digestOID; - private readonly string _encOID; - private readonly CmsAttributeTableGenerator _sAttr; - private readonly CmsAttributeTableGenerator _unsAttr; - private readonly string _encName; - private readonly ISigner _sig; - - internal SignerInfoGeneratorImpl( - CmsSignedDataStreamGenerator outer, - AsymmetricKeyParameter key, - SignerIdentifier signerIdentifier, - string digestOID, - string encOID, - CmsAttributeTableGenerator sAttr, - CmsAttributeTableGenerator unsAttr) - { - this.outer = outer; - - _signerIdentifier = signerIdentifier; - _digestOID = digestOID; - _encOID = encOID; - _sAttr = sAttr; - _unsAttr = unsAttr; - _encName = Helper.GetEncryptionAlgName(_encOID); - - string digestName = Helper.GetDigestAlgName(_digestOID); - string signatureName = digestName + "with" + _encName; - - if (_sAttr != null) - { - _sig = Helper.GetSignatureInstance(signatureName); - } - else - { - // Note: Need to use raw signatures here since we have already calculated the digest - if (_encName.Equals("RSA")) - { - _sig = Helper.GetSignatureInstance("RSA"); - } - else if (_encName.Equals("DSA")) - { - _sig = Helper.GetSignatureInstance("NONEwithDSA"); - } - // TODO Add support for raw PSS -// else if (_encName.equals("RSAandMGF1")) -// { -// _sig = CMSSignedHelper.INSTANCE.getSignatureInstance("NONEWITHRSAPSS", _sigProvider); -// try -// { -// // Init the params this way to avoid having a 'raw' version of each PSS algorithm -// Signature sig2 = CMSSignedHelper.INSTANCE.getSignatureInstance(signatureName, _sigProvider); -// PSSParameterSpec spec = (PSSParameterSpec)sig2.getParameters().getParameterSpec(PSSParameterSpec.class); -// _sig.setParameter(spec); -// } -// catch (Exception e) -// { -// throw new SignatureException("algorithm: " + _encName + " could not be configured."); -// } -// } - else - { - throw new SignatureException("algorithm: " + _encName + " not supported in base signatures."); - } - } - - _sig.Init(true, new ParametersWithRandom(key, outer.rand)); - } - - public SignerInfo Generate(DerObjectIdentifier contentType, AlgorithmIdentifier digestAlgorithm, - byte[] calculatedDigest) - { - try - { - string digestName = Helper.GetDigestAlgName(_digestOID); - string signatureName = digestName + "with" + _encName; - -// AlgorithmIdentifier digAlgId = DigestAlgorithmID; -// -// byte[] hash = (byte[])outer._messageHashes[Helper.GetDigestAlgName(this._digestOID)]; -// outer._digests[_digestOID] = hash.Clone(); - - byte[] bytesToSign = calculatedDigest; - - /* RFC 3852 5.4 - * The result of the message digest calculation process depends on - * whether the signedAttrs field is present. When the field is absent, - * the result is just the message digest of the content as described - * - * above. When the field is present, however, the result is the message - * digest of the complete DER encoding of the SignedAttrs value - * contained in the signedAttrs field. - */ - Asn1Set signedAttr = null; - if (_sAttr != null) - { - IDictionary parameters = outer.GetBaseParameters(contentType, digestAlgorithm, calculatedDigest); - -// Asn1.Cms.AttributeTable signed = _sAttr.GetAttributes(Collections.unmodifiableMap(parameters)); - Asn1.Cms.AttributeTable signed = _sAttr.GetAttributes(parameters); - - if (contentType == null) //counter signature - { - if (signed != null && signed[CmsAttributes.ContentType] != null) - { - IDictionary tmpSigned = signed.ToDictionary(); - tmpSigned.Remove(CmsAttributes.ContentType); - signed = new Asn1.Cms.AttributeTable(tmpSigned); - } - } - - signedAttr = outer.GetAttributeSet(signed); - - // sig must be composed from the DER encoding. - bytesToSign = signedAttr.GetEncoded(Asn1Encodable.Der); - } - else - { - // Note: Need to use raw signatures here since we have already calculated the digest - if (_encName.Equals("RSA")) - { - DigestInfo dInfo = new DigestInfo(digestAlgorithm, calculatedDigest); - bytesToSign = dInfo.GetEncoded(Asn1Encodable.Der); - } - } - - _sig.BlockUpdate(bytesToSign, 0, bytesToSign.Length); - byte[] sigBytes = _sig.GenerateSignature(); - - Asn1Set unsignedAttr = null; - if (_unsAttr != null) - { - IDictionary parameters = outer.GetBaseParameters( - contentType, digestAlgorithm, calculatedDigest); - parameters[CmsAttributeTableParameter.Signature] = sigBytes.Clone(); - -// Asn1.Cms.AttributeTable unsigned = _unsAttr.getAttributes(Collections.unmodifiableMap(parameters)); - Asn1.Cms.AttributeTable unsigned = _unsAttr.GetAttributes(parameters); - - unsignedAttr = outer.GetAttributeSet(unsigned); - } - - // TODO[RSAPSS] Need the ability to specify non-default parameters - Asn1Encodable sigX509Parameters = SignerUtilities.GetDefaultX509Parameters(signatureName); - AlgorithmIdentifier digestEncryptionAlgorithm = Helper.GetEncAlgorithmIdentifier( - new DerObjectIdentifier(_encOID), sigX509Parameters); - - return new SignerInfo(_signerIdentifier, digestAlgorithm, - signedAttr, digestEncryptionAlgorithm, new DerOctetString(sigBytes), unsignedAttr); - } - catch (IOException e) - { - throw new CmsStreamException("encoding error.", e); - } - catch (SignatureException e) - { - throw new CmsStreamException("error creating signature.", e); - } - } - } - - public CmsSignedDataStreamGenerator() - { - } - - /// Constructor allowing specific source of randomness - /// Instance of SecureRandom to use. - public CmsSignedDataStreamGenerator( - SecureRandom rand) - : base(rand) - { - } - - /** - * Set the underlying string size for encapsulated data - * - * @param bufferSize length of octet strings to buffer the data. - */ - public void SetBufferSize( - int bufferSize) - { - _bufferSize = bufferSize; - } - - public void AddDigests( - params string[] digestOids) - { - AddDigests((IEnumerable) digestOids); - } - - public void AddDigests( - IEnumerable digestOids) - { - foreach (string digestOid in digestOids) - { - ConfigureDigest(digestOid); - } - } - - /** - * add a signer - no attributes other than the default ones will be - * provided here. - * @throws NoSuchAlgorithmException - * @throws InvalidKeyException - */ - public void AddSigner( - AsymmetricKeyParameter privateKey, - X509Certificate cert, - string digestOid) - { - AddSigner(privateKey, cert, digestOid, - new DefaultSignedAttributeTableGenerator(), null); - } - - /** - * add a signer, specifying the digest encryption algorithm - no attributes other than the default ones will be - * provided here. - * @throws NoSuchProviderException - * @throws NoSuchAlgorithmException - * @throws InvalidKeyException - */ - public void AddSigner( - AsymmetricKeyParameter privateKey, - X509Certificate cert, - string encryptionOid, - string digestOid) - { - AddSigner(privateKey, cert, encryptionOid, digestOid, - new DefaultSignedAttributeTableGenerator(), - (CmsAttributeTableGenerator)null); - } - - /** - * add a signer with extra signed/unsigned attributes. - * @throws NoSuchAlgorithmException - * @throws InvalidKeyException - */ - public void AddSigner( - AsymmetricKeyParameter privateKey, - X509Certificate cert, - string digestOid, - Asn1.Cms.AttributeTable signedAttr, - Asn1.Cms.AttributeTable unsignedAttr) - { - AddSigner(privateKey, cert, digestOid, - new DefaultSignedAttributeTableGenerator(signedAttr), - new SimpleAttributeTableGenerator(unsignedAttr)); - } - - /** - * add a signer with extra signed/unsigned attributes - specifying digest - * encryption algorithm. - * @throws NoSuchProviderException - * @throws NoSuchAlgorithmException - * @throws InvalidKeyException - */ - public void AddSigner( - AsymmetricKeyParameter privateKey, - X509Certificate cert, - string encryptionOid, - string digestOid, - Asn1.Cms.AttributeTable signedAttr, - Asn1.Cms.AttributeTable unsignedAttr) - { - AddSigner(privateKey, cert, encryptionOid, digestOid, - new DefaultSignedAttributeTableGenerator(signedAttr), - new SimpleAttributeTableGenerator(unsignedAttr)); - } - - public void AddSigner( - AsymmetricKeyParameter privateKey, - X509Certificate cert, - string digestOid, - CmsAttributeTableGenerator signedAttrGenerator, - CmsAttributeTableGenerator unsignedAttrGenerator) - { - AddSigner(privateKey, cert, Helper.GetEncOid(privateKey, digestOid), digestOid, - signedAttrGenerator, unsignedAttrGenerator); - } - - public void AddSigner( - AsymmetricKeyParameter privateKey, - X509Certificate cert, - string encryptionOid, - string digestOid, - CmsAttributeTableGenerator signedAttrGenerator, - CmsAttributeTableGenerator unsignedAttrGenerator) - { - DoAddSigner(privateKey, GetSignerIdentifier(cert), encryptionOid, digestOid, - signedAttrGenerator, unsignedAttrGenerator); - } - - /** - * add a signer - no attributes other than the default ones will be - * provided here. - * @throws NoSuchAlgorithmException - * @throws InvalidKeyException - */ - public void AddSigner( - AsymmetricKeyParameter privateKey, - byte[] subjectKeyID, - string digestOid) - { - AddSigner(privateKey, subjectKeyID, digestOid, new DefaultSignedAttributeTableGenerator(), - (CmsAttributeTableGenerator)null); - } - - /** - * add a signer - no attributes other than the default ones will be - * provided here. - * @throws NoSuchProviderException - * @throws NoSuchAlgorithmException - * @throws InvalidKeyException - */ - public void AddSigner( - AsymmetricKeyParameter privateKey, - byte[] subjectKeyID, - string encryptionOid, - string digestOid) - { - AddSigner(privateKey, subjectKeyID, encryptionOid, digestOid, - new DefaultSignedAttributeTableGenerator(), - (CmsAttributeTableGenerator)null); - } - - /** - * add a signer with extra signed/unsigned attributes. - * @throws NoSuchAlgorithmException - * @throws InvalidKeyException - */ - public void AddSigner( - AsymmetricKeyParameter privateKey, - byte[] subjectKeyID, - string digestOid, - Asn1.Cms.AttributeTable signedAttr, - Asn1.Cms.AttributeTable unsignedAttr) - { - AddSigner(privateKey, subjectKeyID, digestOid, - new DefaultSignedAttributeTableGenerator(signedAttr), - new SimpleAttributeTableGenerator(unsignedAttr)); - } - - public void AddSigner( - AsymmetricKeyParameter privateKey, - byte[] subjectKeyID, - string digestOid, - CmsAttributeTableGenerator signedAttrGenerator, - CmsAttributeTableGenerator unsignedAttrGenerator) - { - AddSigner(privateKey, subjectKeyID, Helper.GetEncOid(privateKey, digestOid), - digestOid, signedAttrGenerator, unsignedAttrGenerator); - } - - public void AddSigner( - AsymmetricKeyParameter privateKey, - byte[] subjectKeyID, - string encryptionOid, - string digestOid, - CmsAttributeTableGenerator signedAttrGenerator, - CmsAttributeTableGenerator unsignedAttrGenerator) - { - DoAddSigner(privateKey, GetSignerIdentifier(subjectKeyID), encryptionOid, digestOid, - signedAttrGenerator, unsignedAttrGenerator); - } - - private void DoAddSigner( - AsymmetricKeyParameter privateKey, - SignerIdentifier signerIdentifier, - string encryptionOid, - string digestOid, - CmsAttributeTableGenerator signedAttrGenerator, - CmsAttributeTableGenerator unsignedAttrGenerator) - { - ConfigureDigest(digestOid); - - SignerInfoGeneratorImpl signerInf = new SignerInfoGeneratorImpl(this, privateKey, - signerIdentifier, digestOid, encryptionOid, signedAttrGenerator, unsignedAttrGenerator); - - _signerInfs.Add(new DigestAndSignerInfoGeneratorHolder(signerInf, digestOid)); - } - - internal override void AddSignerCallback( - SignerInformation si) - { - // FIXME If there were parameters in si.DigestAlgorithmID.Parameters, they are lost - // NB: Would need to call FixAlgID on the DigestAlgorithmID - - // For precalculated signers, just need to register the algorithm, not configure a digest - RegisterDigestOid(si.DigestAlgorithmID.Algorithm.Id); - } - - /** - * generate a signed object that for a CMS Signed Data object - */ - public Stream Open( - Stream outStream) - { - return Open(outStream, false); - } - - /** - * generate a signed object that for a CMS Signed Data - * object - if encapsulate is true a copy - * of the message will be included in the signature with the - * default content type "data". - */ - public Stream Open( - Stream outStream, - bool encapsulate) - { - return Open(outStream, Data, encapsulate); - } - - /** - * generate a signed object that for a CMS Signed Data - * object using the given provider - if encapsulate is true a copy - * of the message will be included in the signature with the - * default content type "data". If dataOutputStream is non null the data - * being signed will be written to the stream as it is processed. - * @param out stream the CMS object is to be written to. - * @param encapsulate true if data should be encapsulated. - * @param dataOutputStream output stream to copy the data being signed to. - */ - public Stream Open( - Stream outStream, - bool encapsulate, - Stream dataOutputStream) - { - return Open(outStream, Data, encapsulate, dataOutputStream); - } - - /** - * generate a signed object that for a CMS Signed Data - * object - if encapsulate is true a copy - * of the message will be included in the signature. The content type - * is set according to the OID represented by the string signedContentType. - */ - public Stream Open( - Stream outStream, - string signedContentType, - bool encapsulate) - { - return Open(outStream, signedContentType, encapsulate, null); - } - - /** - * generate a signed object that for a CMS Signed Data - * object using the given provider - if encapsulate is true a copy - * of the message will be included in the signature. The content type - * is set according to the OID represented by the string signedContentType. - * @param out stream the CMS object is to be written to. - * @param signedContentType OID for data to be signed. - * @param encapsulate true if data should be encapsulated. - * @param dataOutputStream output stream to copy the data being signed to. - */ - public Stream Open( - Stream outStream, - string signedContentType, - bool encapsulate, - Stream dataOutputStream) - { - if (outStream == null) - throw new ArgumentNullException("outStream"); - if (!outStream.CanWrite) - throw new ArgumentException("Expected writeable stream", "outStream"); - if (dataOutputStream != null && !dataOutputStream.CanWrite) - throw new ArgumentException("Expected writeable stream", "dataOutputStream"); - - _messageDigestsLocked = true; - - // - // ContentInfo - // - BerSequenceGenerator sGen = new BerSequenceGenerator(outStream); - - sGen.AddObject(CmsObjectIdentifiers.SignedData); - - // - // Signed Data - // - BerSequenceGenerator sigGen = new BerSequenceGenerator( - sGen.GetRawOutputStream(), 0, true); - - bool isCounterSignature = (signedContentType == null); - - DerObjectIdentifier contentTypeOid = isCounterSignature - ? null - : new DerObjectIdentifier(signedContentType); - - sigGen.AddObject(CalculateVersion(contentTypeOid)); - - Asn1EncodableVector digestAlgs = new Asn1EncodableVector(); - - foreach (string digestOid in _messageDigestOids) - { - digestAlgs.Add( - new AlgorithmIdentifier(new DerObjectIdentifier(digestOid), DerNull.Instance)); - } - - { - byte[] tmp = new DerSet(digestAlgs).GetEncoded(); - sigGen.GetRawOutputStream().Write(tmp, 0, tmp.Length); - } - - BerSequenceGenerator eiGen = new BerSequenceGenerator(sigGen.GetRawOutputStream()); - eiGen.AddObject(contentTypeOid); - - // If encapsulating, add the data as an octet string in the sequence - Stream encapStream = encapsulate - ? CmsUtilities.CreateBerOctetOutputStream(eiGen.GetRawOutputStream(), 0, true, _bufferSize) - : null; - - // Also send the data to 'dataOutputStream' if necessary - Stream teeStream = GetSafeTeeOutputStream(dataOutputStream, encapStream); - - // Let all the digests see the data as it is written - Stream digStream = AttachDigestsToOutputStream(_messageDigests.Values, teeStream); - - return new CmsSignedDataOutputStream(this, digStream, signedContentType, sGen, sigGen, eiGen); - } - - private void RegisterDigestOid( - string digestOid) - { - if (_messageDigestsLocked) - { - if (!_messageDigestOids.Contains(digestOid)) - throw new InvalidOperationException("Cannot register new digest OIDs after the data stream is opened"); - } - else - { - _messageDigestOids.Add(digestOid); - } - } - - private void ConfigureDigest( - string digestOid) - { - RegisterDigestOid(digestOid); - - string digestName = Helper.GetDigestAlgName(digestOid); - IDigest dig = (IDigest)_messageDigests[digestName]; - if (dig == null) - { - if (_messageDigestsLocked) - throw new InvalidOperationException("Cannot configure new digests after the data stream is opened"); - - dig = Helper.GetDigestInstance(digestName); - _messageDigests[digestName] = dig; - } - } - - // TODO Make public? - internal void Generate( - Stream outStream, - string eContentType, - bool encapsulate, - Stream dataOutputStream, - CmsProcessable content) - { - Stream signedOut = Open(outStream, eContentType, encapsulate, dataOutputStream); - if (content != null) - { - content.Write(signedOut); - } - Platform.Dispose(signedOut); - } - - // RFC3852, section 5.1: - // IF ((certificates is present) AND - // (any certificates with a type of other are present)) OR - // ((crls is present) AND - // (any crls with a type of other are present)) - // THEN version MUST be 5 - // ELSE - // IF (certificates is present) AND - // (any version 2 attribute certificates are present) - // THEN version MUST be 4 - // ELSE - // IF ((certificates is present) AND - // (any version 1 attribute certificates are present)) OR - // (any SignerInfo structures are version 3) OR - // (encapContentInfo eContentType is other than id-data) - // THEN version MUST be 3 - // ELSE version MUST be 1 - // - private DerInteger CalculateVersion( - DerObjectIdentifier contentOid) - { - bool otherCert = false; - bool otherCrl = false; - bool attrCertV1Found = false; - bool attrCertV2Found = false; - - if (_certs != null) - { - foreach (object obj in _certs) - { - if (obj is Asn1TaggedObject) - { - Asn1TaggedObject tagged = (Asn1TaggedObject) obj; - - if (tagged.TagNo == 1) - { - attrCertV1Found = true; - } - else if (tagged.TagNo == 2) - { - attrCertV2Found = true; - } - else if (tagged.TagNo == 3) - { - otherCert = true; - break; - } - } - } - } - - if (otherCert) - { - return new DerInteger(5); - } - - if (_crls != null) - { - foreach (object obj in _crls) - { - if (obj is Asn1TaggedObject) - { - otherCrl = true; - break; - } - } - } - - if (otherCrl) - { - return new DerInteger(5); - } - - if (attrCertV2Found) - { - return new DerInteger(4); - } - - if (attrCertV1Found || !CmsObjectIdentifiers.Data.Equals(contentOid) || CheckForVersion3(_signers)) - { - return new DerInteger(3); - } - - return new DerInteger(1); - } - - private bool CheckForVersion3( - IList signerInfos) - { - foreach (SignerInformation si in signerInfos) - { - SignerInfo s = SignerInfo.GetInstance(si.ToSignerInfo()); - - if (s.Version.Value.IntValue == 3) - { - return true; - } - } - - return false; - } - - private static Stream AttachDigestsToOutputStream(ICollection digests, Stream s) - { - Stream result = s; - foreach (IDigest digest in digests) - { - result = GetSafeTeeOutputStream(result, new DigOutputStream(digest)); - } - return result; - } - - private static Stream GetSafeOutputStream(Stream s) - { - if (s == null) - return new NullOutputStream(); - return s; - } - - private static Stream GetSafeTeeOutputStream(Stream s1, Stream s2) - { - if (s1 == null) - return GetSafeOutputStream(s2); - if (s2 == null) - return GetSafeOutputStream(s1); - return new TeeOutputStream(s1, s2); - } - - private class CmsSignedDataOutputStream - : BaseOutputStream - { - private readonly CmsSignedDataStreamGenerator outer; - - private Stream _out; - private DerObjectIdentifier _contentOID; - private BerSequenceGenerator _sGen; - private BerSequenceGenerator _sigGen; - private BerSequenceGenerator _eiGen; - - public CmsSignedDataOutputStream( - CmsSignedDataStreamGenerator outer, - Stream outStream, - string contentOID, - BerSequenceGenerator sGen, - BerSequenceGenerator sigGen, - BerSequenceGenerator eiGen) - { - this.outer = outer; - - _out = outStream; - _contentOID = new DerObjectIdentifier(contentOID); - _sGen = sGen; - _sigGen = sigGen; - _eiGen = eiGen; - } - - public override void WriteByte( - byte b) - { - _out.WriteByte(b); - } - - public override void Write( - byte[] bytes, - int off, - int len) - { - _out.Write(bytes, off, len); - } - -#if PORTABLE - protected override void Dispose(bool disposing) - { - if (disposing) - { - DoClose(); - } - base.Dispose(disposing); - } -#else - public override void Close() - { - DoClose(); - base.Close(); - } -#endif - - private void DoClose() - { - Platform.Dispose(_out); - - // TODO Parent context(s) should really be be closed explicitly - - _eiGen.Close(); - - outer._digests.Clear(); // clear the current preserved digest state - - if (outer._certs.Count > 0) - { - Asn1Set certs = CmsUtilities.CreateBerSetFromList(outer._certs); - - WriteToGenerator(_sigGen, new BerTaggedObject(false, 0, certs)); - } - - if (outer._crls.Count > 0) - { - Asn1Set crls = CmsUtilities.CreateBerSetFromList(outer._crls); - - WriteToGenerator(_sigGen, new BerTaggedObject(false, 1, crls)); - } - - // - // Calculate the digest hashes - // - foreach (DictionaryEntry de in outer._messageDigests) - { - outer._messageHashes.Add(de.Key, DigestUtilities.DoFinal((IDigest)de.Value)); - } - - // TODO If the digest OIDs for precalculated signers weren't mixed in with - // the others, we could fill in outer._digests here, instead of SignerInfoGenerator.Generate - - // - // collect all the SignerInfo objects - // - Asn1EncodableVector signerInfos = new Asn1EncodableVector(); - - // - // add the generated SignerInfo objects - // - { - foreach (DigestAndSignerInfoGeneratorHolder holder in outer._signerInfs) - { - AlgorithmIdentifier digestAlgorithm = holder.DigestAlgorithm; - - byte[] calculatedDigest = (byte[])outer._messageHashes[ - Helper.GetDigestAlgName(holder.digestOID)]; - outer._digests[holder.digestOID] = calculatedDigest.Clone(); - - signerInfos.Add(holder.signerInf.Generate(_contentOID, digestAlgorithm, calculatedDigest)); - } - } - - // - // add the precalculated SignerInfo objects. - // - { - foreach (SignerInformation signer in outer._signers) - { - // TODO Verify the content type and calculated digest match the precalculated SignerInfo -// if (!signer.ContentType.Equals(_contentOID)) -// { -// // TODO The precalculated content type did not match - error? -// } -// -// byte[] calculatedDigest = (byte[])outer._digests[signer.DigestAlgOid]; -// if (calculatedDigest == null) -// { -// // TODO We can't confirm this digest because we didn't calculate it - error? -// } -// else -// { -// if (!Arrays.AreEqual(signer.GetContentDigest(), calculatedDigest)) -// { -// // TODO The precalculated digest did not match - error? -// } -// } - - signerInfos.Add(signer.ToSignerInfo()); - } - } - - WriteToGenerator(_sigGen, new DerSet(signerInfos)); - - _sigGen.Close(); - _sGen.Close(); - } - - private static void WriteToGenerator( - Asn1Generator ag, - Asn1Encodable ae) - { - byte[] encoded = ae.GetEncoded(); - ag.GetRawOutputStream().Write(encoded, 0, encoded.Length); - } - } - } -} diff --git a/bc-sharp-crypto/src/cms/CMSSignedGenerator.cs b/bc-sharp-crypto/src/cms/CMSSignedGenerator.cs deleted file mode 100644 index 0fb1f31..0000000 --- a/bc-sharp-crypto/src/cms/CMSSignedGenerator.cs +++ /dev/null @@ -1,267 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.CryptoPro; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Oiw; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.TeleTrust; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; -using Org.BouncyCastle.X509; -using Org.BouncyCastle.X509.Store; - -namespace Org.BouncyCastle.Cms -{ - public class DefaultDigestAlgorithmIdentifierFinder - { - private static readonly IDictionary digestOids = Platform.CreateHashtable(); - private static readonly IDictionary digestNameToOids = Platform.CreateHashtable(); - - static DefaultDigestAlgorithmIdentifierFinder() - { - // - // digests - // - digestOids.Add(OiwObjectIdentifiers.MD4WithRsaEncryption, PkcsObjectIdentifiers.MD4); - digestOids.Add(OiwObjectIdentifiers.MD4WithRsa, PkcsObjectIdentifiers.MD4); - digestOids.Add(OiwObjectIdentifiers.Sha1WithRsa, OiwObjectIdentifiers.IdSha1); - - digestOids.Add(PkcsObjectIdentifiers.Sha224WithRsaEncryption, NistObjectIdentifiers.IdSha224); - digestOids.Add(PkcsObjectIdentifiers.Sha256WithRsaEncryption, NistObjectIdentifiers.IdSha256); - digestOids.Add(PkcsObjectIdentifiers.Sha384WithRsaEncryption, NistObjectIdentifiers.IdSha384); - digestOids.Add(PkcsObjectIdentifiers.Sha512WithRsaEncryption, NistObjectIdentifiers.IdSha512); - digestOids.Add(PkcsObjectIdentifiers.MD2WithRsaEncryption, PkcsObjectIdentifiers.MD2); - digestOids.Add(PkcsObjectIdentifiers.MD4WithRsaEncryption, PkcsObjectIdentifiers.MD4); - digestOids.Add(PkcsObjectIdentifiers.MD5WithRsaEncryption, PkcsObjectIdentifiers.MD5); - digestOids.Add(PkcsObjectIdentifiers.Sha1WithRsaEncryption, OiwObjectIdentifiers.IdSha1); - - digestOids.Add(X9ObjectIdentifiers.ECDsaWithSha1, OiwObjectIdentifiers.IdSha1); - digestOids.Add(X9ObjectIdentifiers.ECDsaWithSha224, NistObjectIdentifiers.IdSha224); - digestOids.Add(X9ObjectIdentifiers.ECDsaWithSha256, NistObjectIdentifiers.IdSha256); - digestOids.Add(X9ObjectIdentifiers.ECDsaWithSha384, NistObjectIdentifiers.IdSha384); - digestOids.Add(X9ObjectIdentifiers.ECDsaWithSha512, NistObjectIdentifiers.IdSha512); - digestOids.Add(X9ObjectIdentifiers.IdDsaWithSha1, OiwObjectIdentifiers.IdSha1); - - digestOids.Add(NistObjectIdentifiers.DsaWithSha224, NistObjectIdentifiers.IdSha224); - digestOids.Add(NistObjectIdentifiers.DsaWithSha256, NistObjectIdentifiers.IdSha256); - digestOids.Add(NistObjectIdentifiers.DsaWithSha384, NistObjectIdentifiers.IdSha384); - digestOids.Add(NistObjectIdentifiers.DsaWithSha512, NistObjectIdentifiers.IdSha512); - - digestOids.Add(TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD128, TeleTrusTObjectIdentifiers.RipeMD128); - digestOids.Add(TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD160, TeleTrusTObjectIdentifiers.RipeMD160); - digestOids.Add(TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD256, TeleTrusTObjectIdentifiers.RipeMD256); - - digestOids.Add(CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x94, CryptoProObjectIdentifiers.GostR3411); - digestOids.Add(CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x2001, CryptoProObjectIdentifiers.GostR3411); - - digestNameToOids.Add("SHA-1", OiwObjectIdentifiers.IdSha1); - digestNameToOids.Add("SHA-224", NistObjectIdentifiers.IdSha224); - digestNameToOids.Add("SHA-256", NistObjectIdentifiers.IdSha256); - digestNameToOids.Add("SHA-384", NistObjectIdentifiers.IdSha384); - digestNameToOids.Add("SHA-512", NistObjectIdentifiers.IdSha512); - - digestNameToOids.Add("SHA1", OiwObjectIdentifiers.IdSha1); - digestNameToOids.Add("SHA224", NistObjectIdentifiers.IdSha224); - digestNameToOids.Add("SHA256", NistObjectIdentifiers.IdSha256); - digestNameToOids.Add("SHA384", NistObjectIdentifiers.IdSha384); - digestNameToOids.Add("SHA512", NistObjectIdentifiers.IdSha512); - - digestNameToOids.Add("SHA3-224", NistObjectIdentifiers.IdSha3_224); - digestNameToOids.Add("SHA3-256", NistObjectIdentifiers.IdSha3_256); - digestNameToOids.Add("SHA3-384", NistObjectIdentifiers.IdSha3_384); - digestNameToOids.Add("SHA3-512", NistObjectIdentifiers.IdSha3_512); - - digestNameToOids.Add("SHAKE-128", NistObjectIdentifiers.IdShake128); - digestNameToOids.Add("SHAKE-256", NistObjectIdentifiers.IdShake256); - - digestNameToOids.Add("GOST3411", CryptoProObjectIdentifiers.GostR3411); - - digestNameToOids.Add("MD2", PkcsObjectIdentifiers.MD2); - digestNameToOids.Add("MD4", PkcsObjectIdentifiers.MD4); - digestNameToOids.Add("MD5", PkcsObjectIdentifiers.MD5); - - digestNameToOids.Add("RIPEMD128", TeleTrusTObjectIdentifiers.RipeMD128); - digestNameToOids.Add("RIPEMD160", TeleTrusTObjectIdentifiers.RipeMD160); - digestNameToOids.Add("RIPEMD256", TeleTrusTObjectIdentifiers.RipeMD256); - } - - public AlgorithmIdentifier find(AlgorithmIdentifier sigAlgId) - { - AlgorithmIdentifier digAlgId; - - if (sigAlgId.Algorithm.Equals(PkcsObjectIdentifiers.IdRsassaPss)) - { - digAlgId = RsassaPssParameters.GetInstance(sigAlgId.Parameters).HashAlgorithm; - } - else - { - digAlgId = new AlgorithmIdentifier((DerObjectIdentifier)digestOids[sigAlgId.Algorithm], DerNull.Instance); - } - - return digAlgId; - } - - public AlgorithmIdentifier find(String digAlgName) - { - return new AlgorithmIdentifier((DerObjectIdentifier)digestNameToOids[digAlgName], DerNull.Instance); - } - } - - public class CmsSignedGenerator - { - /** - * Default type for the signed data. - */ - public static readonly string Data = CmsObjectIdentifiers.Data.Id; - - public static readonly string DigestSha1 = OiwObjectIdentifiers.IdSha1.Id; - public static readonly string DigestSha224 = NistObjectIdentifiers.IdSha224.Id; - public static readonly string DigestSha256 = NistObjectIdentifiers.IdSha256.Id; - public static readonly string DigestSha384 = NistObjectIdentifiers.IdSha384.Id; - public static readonly string DigestSha512 = NistObjectIdentifiers.IdSha512.Id; - public static readonly string DigestMD5 = PkcsObjectIdentifiers.MD5.Id; - public static readonly string DigestGost3411 = CryptoProObjectIdentifiers.GostR3411.Id; - public static readonly string DigestRipeMD128 = TeleTrusTObjectIdentifiers.RipeMD128.Id; - public static readonly string DigestRipeMD160 = TeleTrusTObjectIdentifiers.RipeMD160.Id; - public static readonly string DigestRipeMD256 = TeleTrusTObjectIdentifiers.RipeMD256.Id; - - public static readonly string EncryptionRsa = PkcsObjectIdentifiers.RsaEncryption.Id; - public static readonly string EncryptionDsa = X9ObjectIdentifiers.IdDsaWithSha1.Id; - public static readonly string EncryptionECDsa = X9ObjectIdentifiers.ECDsaWithSha1.Id; - public static readonly string EncryptionRsaPss = PkcsObjectIdentifiers.IdRsassaPss.Id; - public static readonly string EncryptionGost3410 = CryptoProObjectIdentifiers.GostR3410x94.Id; - public static readonly string EncryptionECGost3410 = CryptoProObjectIdentifiers.GostR3410x2001.Id; - - internal IList _certs = Platform.CreateArrayList(); - internal IList _crls = Platform.CreateArrayList(); - internal IList _signers = Platform.CreateArrayList(); - internal IDictionary _digests = Platform.CreateHashtable(); - - protected readonly SecureRandom rand; - - protected CmsSignedGenerator() - : this(new SecureRandom()) - { - } - - /// Constructor allowing specific source of randomness - /// Instance of SecureRandom to use. - protected CmsSignedGenerator( - SecureRandom rand) - { - this.rand = rand; - } - - internal protected virtual IDictionary GetBaseParameters( - DerObjectIdentifier contentType, - AlgorithmIdentifier digAlgId, - byte[] hash) - { - IDictionary param = Platform.CreateHashtable(); - - if (contentType != null) - { - param[CmsAttributeTableParameter.ContentType] = contentType; - } - - param[CmsAttributeTableParameter.DigestAlgorithmIdentifier] = digAlgId; - param[CmsAttributeTableParameter.Digest] = hash.Clone(); - - return param; - } - - internal protected virtual Asn1Set GetAttributeSet( - Asn1.Cms.AttributeTable attr) - { - return attr == null - ? null - : new DerSet(attr.ToAsn1EncodableVector()); - } - - public void AddCertificates( - IX509Store certStore) - { - CollectionUtilities.AddRange(_certs, CmsUtilities.GetCertificatesFromStore(certStore)); - } - - public void AddCrls( - IX509Store crlStore) - { - CollectionUtilities.AddRange(_crls, CmsUtilities.GetCrlsFromStore(crlStore)); - } - - /** - * Add the attribute certificates contained in the passed in store to the - * generator. - * - * @param store a store of Version 2 attribute certificates - * @throws CmsException if an error occurse processing the store. - */ - public void AddAttributeCertificates( - IX509Store store) - { - try - { - foreach (IX509AttributeCertificate attrCert in store.GetMatches(null)) - { - _certs.Add(new DerTaggedObject(false, 2, - AttributeCertificate.GetInstance(Asn1Object.FromByteArray(attrCert.GetEncoded())))); - } - } - catch (Exception e) - { - throw new CmsException("error processing attribute certs", e); - } - } - - /** - * Add a store of precalculated signers to the generator. - * - * @param signerStore store of signers - */ - public void AddSigners( - SignerInformationStore signerStore) - { - foreach (SignerInformation o in signerStore.GetSigners()) - { - _signers.Add(o); - AddSignerCallback(o); - } - } - - /** - * Return a map of oids and byte arrays representing the digests calculated on the content during - * the last generate. - * - * @return a map of oids (as String objects) and byte[] representing digests. - */ - public IDictionary GetGeneratedDigests() - { - return Platform.CreateHashtable(_digests); - } - - internal virtual void AddSignerCallback( - SignerInformation si) - { - } - - internal static SignerIdentifier GetSignerIdentifier(X509Certificate cert) - { - return new SignerIdentifier(CmsUtilities.GetIssuerAndSerialNumber(cert)); - } - - internal static SignerIdentifier GetSignerIdentifier(byte[] subjectKeyIdentifier) - { - return new SignerIdentifier(new DerOctetString(subjectKeyIdentifier)); - } - } -} diff --git a/bc-sharp-crypto/src/cms/CMSSignedHelper.cs b/bc-sharp-crypto/src/cms/CMSSignedHelper.cs deleted file mode 100644 index 5b6c93b..0000000 --- a/bc-sharp-crypto/src/cms/CMSSignedHelper.cs +++ /dev/null @@ -1,426 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.CryptoPro; -using Org.BouncyCastle.Asn1.Eac; -using Org.BouncyCastle.Asn1.Iana; -using Org.BouncyCastle.Asn1.Misc; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Oiw; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.TeleTrust; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.X509; -using Org.BouncyCastle.X509.Store; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Cms -{ - internal class CmsSignedHelper - { - internal static readonly CmsSignedHelper Instance = new CmsSignedHelper(); - - private static readonly string EncryptionECDsaWithSha1 = X9ObjectIdentifiers.ECDsaWithSha1.Id; - private static readonly string EncryptionECDsaWithSha224 = X9ObjectIdentifiers.ECDsaWithSha224.Id; - private static readonly string EncryptionECDsaWithSha256 = X9ObjectIdentifiers.ECDsaWithSha256.Id; - private static readonly string EncryptionECDsaWithSha384 = X9ObjectIdentifiers.ECDsaWithSha384.Id; - private static readonly string EncryptionECDsaWithSha512 = X9ObjectIdentifiers.ECDsaWithSha512.Id; - - private static readonly IDictionary encryptionAlgs = Platform.CreateHashtable(); - private static readonly IDictionary digestAlgs = Platform.CreateHashtable(); - private static readonly IDictionary digestAliases = Platform.CreateHashtable(); - - private static readonly ISet noParams = new HashSet(); - private static readonly IDictionary ecAlgorithms = Platform.CreateHashtable(); - - private static void AddEntries(DerObjectIdentifier oid, string digest, string encryption) - { - string alias = oid.Id; - digestAlgs.Add(alias, digest); - encryptionAlgs.Add(alias, encryption); - } - - static CmsSignedHelper() - { - AddEntries(NistObjectIdentifiers.DsaWithSha224, "SHA224", "DSA"); - AddEntries(NistObjectIdentifiers.DsaWithSha256, "SHA256", "DSA"); - AddEntries(NistObjectIdentifiers.DsaWithSha384, "SHA384", "DSA"); - AddEntries(NistObjectIdentifiers.DsaWithSha512, "SHA512", "DSA"); - AddEntries(OiwObjectIdentifiers.DsaWithSha1, "SHA1", "DSA"); - AddEntries(OiwObjectIdentifiers.MD4WithRsa, "MD4", "RSA"); - AddEntries(OiwObjectIdentifiers.MD4WithRsaEncryption, "MD4", "RSA"); - AddEntries(OiwObjectIdentifiers.MD5WithRsa, "MD5", "RSA"); - AddEntries(OiwObjectIdentifiers.Sha1WithRsa, "SHA1", "RSA"); - AddEntries(PkcsObjectIdentifiers.MD2WithRsaEncryption, "MD2", "RSA"); - AddEntries(PkcsObjectIdentifiers.MD4WithRsaEncryption, "MD4", "RSA"); - AddEntries(PkcsObjectIdentifiers.MD5WithRsaEncryption, "MD5", "RSA"); - AddEntries(PkcsObjectIdentifiers.Sha1WithRsaEncryption, "SHA1", "RSA"); - AddEntries(PkcsObjectIdentifiers.Sha224WithRsaEncryption, "SHA224", "RSA"); - AddEntries(PkcsObjectIdentifiers.Sha256WithRsaEncryption, "SHA256", "RSA"); - AddEntries(PkcsObjectIdentifiers.Sha384WithRsaEncryption, "SHA384", "RSA"); - AddEntries(PkcsObjectIdentifiers.Sha512WithRsaEncryption, "SHA512", "RSA"); - AddEntries(X9ObjectIdentifiers.ECDsaWithSha1, "SHA1", "ECDSA"); - AddEntries(X9ObjectIdentifiers.ECDsaWithSha224, "SHA224", "ECDSA"); - AddEntries(X9ObjectIdentifiers.ECDsaWithSha256, "SHA256", "ECDSA"); - AddEntries(X9ObjectIdentifiers.ECDsaWithSha384, "SHA384", "ECDSA"); - AddEntries(X9ObjectIdentifiers.ECDsaWithSha512, "SHA512", "ECDSA"); - AddEntries(X9ObjectIdentifiers.IdDsaWithSha1, "SHA1", "DSA"); - AddEntries(EacObjectIdentifiers.id_TA_ECDSA_SHA_1, "SHA1", "ECDSA"); - AddEntries(EacObjectIdentifiers.id_TA_ECDSA_SHA_224, "SHA224", "ECDSA"); - AddEntries(EacObjectIdentifiers.id_TA_ECDSA_SHA_256, "SHA256", "ECDSA"); - AddEntries(EacObjectIdentifiers.id_TA_ECDSA_SHA_384, "SHA384", "ECDSA"); - AddEntries(EacObjectIdentifiers.id_TA_ECDSA_SHA_512, "SHA512", "ECDSA"); - AddEntries(EacObjectIdentifiers.id_TA_RSA_v1_5_SHA_1, "SHA1", "RSA"); - AddEntries(EacObjectIdentifiers.id_TA_RSA_v1_5_SHA_256, "SHA256", "RSA"); - AddEntries(EacObjectIdentifiers.id_TA_RSA_PSS_SHA_1, "SHA1", "RSAandMGF1"); - AddEntries(EacObjectIdentifiers.id_TA_RSA_PSS_SHA_256, "SHA256", "RSAandMGF1"); - - encryptionAlgs.Add(X9ObjectIdentifiers.IdDsa.Id, "DSA"); - encryptionAlgs.Add(PkcsObjectIdentifiers.RsaEncryption.Id, "RSA"); - encryptionAlgs.Add(TeleTrusTObjectIdentifiers.TeleTrusTRsaSignatureAlgorithm, "RSA"); - encryptionAlgs.Add(X509ObjectIdentifiers.IdEARsa.Id, "RSA"); - encryptionAlgs.Add(CmsSignedGenerator.EncryptionRsaPss, "RSAandMGF1"); - encryptionAlgs.Add(CryptoProObjectIdentifiers.GostR3410x94.Id, "GOST3410"); - encryptionAlgs.Add(CryptoProObjectIdentifiers.GostR3410x2001.Id, "ECGOST3410"); - encryptionAlgs.Add("1.3.6.1.4.1.5849.1.6.2", "ECGOST3410"); - encryptionAlgs.Add("1.3.6.1.4.1.5849.1.1.5", "GOST3410"); - - digestAlgs.Add(PkcsObjectIdentifiers.MD2.Id, "MD2"); - digestAlgs.Add(PkcsObjectIdentifiers.MD4.Id, "MD4"); - digestAlgs.Add(PkcsObjectIdentifiers.MD5.Id, "MD5"); - digestAlgs.Add(OiwObjectIdentifiers.IdSha1.Id, "SHA1"); - digestAlgs.Add(NistObjectIdentifiers.IdSha224.Id, "SHA224"); - digestAlgs.Add(NistObjectIdentifiers.IdSha256.Id, "SHA256"); - digestAlgs.Add(NistObjectIdentifiers.IdSha384.Id, "SHA384"); - digestAlgs.Add(NistObjectIdentifiers.IdSha512.Id, "SHA512"); - digestAlgs.Add(TeleTrusTObjectIdentifiers.RipeMD128.Id, "RIPEMD128"); - digestAlgs.Add(TeleTrusTObjectIdentifiers.RipeMD160.Id, "RIPEMD160"); - digestAlgs.Add(TeleTrusTObjectIdentifiers.RipeMD256.Id, "RIPEMD256"); - digestAlgs.Add(CryptoProObjectIdentifiers.GostR3411.Id, "GOST3411"); - digestAlgs.Add("1.3.6.1.4.1.5849.1.2.1", "GOST3411"); - - digestAliases.Add("SHA1", new string[] { "SHA-1" }); - digestAliases.Add("SHA224", new string[] { "SHA-224" }); - digestAliases.Add("SHA256", new string[] { "SHA-256" }); - digestAliases.Add("SHA384", new string[] { "SHA-384" }); - digestAliases.Add("SHA512", new string[] { "SHA-512" }); - - noParams.Add(CmsSignedGenerator.EncryptionDsa); - // noParams.Add(EncryptionECDsa); - noParams.Add(EncryptionECDsaWithSha1); - noParams.Add(EncryptionECDsaWithSha224); - noParams.Add(EncryptionECDsaWithSha256); - noParams.Add(EncryptionECDsaWithSha384); - noParams.Add(EncryptionECDsaWithSha512); - - ecAlgorithms.Add(CmsSignedGenerator.DigestSha1, EncryptionECDsaWithSha1); - ecAlgorithms.Add(CmsSignedGenerator.DigestSha224, EncryptionECDsaWithSha224); - ecAlgorithms.Add(CmsSignedGenerator.DigestSha256, EncryptionECDsaWithSha256); - ecAlgorithms.Add(CmsSignedGenerator.DigestSha384, EncryptionECDsaWithSha384); - ecAlgorithms.Add(CmsSignedGenerator.DigestSha512, EncryptionECDsaWithSha512); - } - - /** - * Return the digest algorithm using one of the standard JCA string - * representations rather than the algorithm identifier (if possible). - */ - internal string GetDigestAlgName( - string digestAlgOid) - { - string algName = (string)digestAlgs[digestAlgOid]; - - if (algName != null) - { - return algName; - } - - return digestAlgOid; - } - - internal AlgorithmIdentifier GetEncAlgorithmIdentifier( - DerObjectIdentifier encOid, - Asn1Encodable sigX509Parameters) - { - if (noParams.Contains(encOid.Id)) - { - return new AlgorithmIdentifier(encOid); - } - - return new AlgorithmIdentifier(encOid, sigX509Parameters); - } - - internal string[] GetDigestAliases( - string algName) - { - string[] aliases = (string[]) digestAliases[algName]; - - return aliases == null ? new String[0] : (string[]) aliases.Clone(); - } - - /** - * Return the digest encryption algorithm using one of the standard - * JCA string representations rather than the algorithm identifier (if - * possible). - */ - internal string GetEncryptionAlgName( - string encryptionAlgOid) - { - string algName = (string) encryptionAlgs[encryptionAlgOid]; - - if (algName != null) - { - return algName; - } - - return encryptionAlgOid; - } - - internal IDigest GetDigestInstance( - string algorithm) - { - try - { - return DigestUtilities.GetDigest(algorithm); - } - catch (SecurityUtilityException e) - { - // This is probably superfluous on C#, since no provider infrastructure, - // assuming DigestUtilities already knows all the aliases - foreach (string alias in GetDigestAliases(algorithm)) - { - try { return DigestUtilities.GetDigest(alias); } - catch (SecurityUtilityException) {} - } - throw e; - } - } - - internal ISigner GetSignatureInstance( - string algorithm) - { - return SignerUtilities.GetSigner(algorithm); - } - - internal IX509Store CreateAttributeStore( - string type, - Asn1Set certSet) - { - IList certs = Platform.CreateArrayList(); - - if (certSet != null) - { - foreach (Asn1Encodable ae in certSet) - { - try - { - Asn1Object obj = ae.ToAsn1Object(); - - if (obj is Asn1TaggedObject) - { - Asn1TaggedObject tagged = (Asn1TaggedObject)obj; - - if (tagged.TagNo == 2) - { - certs.Add( - new X509V2AttributeCertificate( - Asn1Sequence.GetInstance(tagged, false).GetEncoded())); - } - } - } - catch (Exception ex) - { - throw new CmsException("can't re-encode attribute certificate!", ex); - } - } - } - - try - { - return X509StoreFactory.Create( - "AttributeCertificate/" + type, - new X509CollectionStoreParameters(certs)); - } - catch (ArgumentException e) - { - throw new CmsException("can't setup the X509Store", e); - } - } - - internal IX509Store CreateCertificateStore( - string type, - Asn1Set certSet) - { - IList certs = Platform.CreateArrayList(); - - if (certSet != null) - { - AddCertsFromSet(certs, certSet); - } - - try - { - return X509StoreFactory.Create( - "Certificate/" + type, - new X509CollectionStoreParameters(certs)); - } - catch (ArgumentException e) - { - throw new CmsException("can't setup the X509Store", e); - } - } - - internal IX509Store CreateCrlStore( - string type, - Asn1Set crlSet) - { - IList crls = Platform.CreateArrayList(); - - if (crlSet != null) - { - AddCrlsFromSet(crls, crlSet); - } - - try - { - return X509StoreFactory.Create( - "CRL/" + type, - new X509CollectionStoreParameters(crls)); - } - catch (ArgumentException e) - { - throw new CmsException("can't setup the X509Store", e); - } - } - - private void AddCertsFromSet( - IList certs, - Asn1Set certSet) - { - X509CertificateParser cf = new X509CertificateParser(); - - foreach (Asn1Encodable ae in certSet) - { - try - { - Asn1Object obj = ae.ToAsn1Object(); - - if (obj is Asn1Sequence) - { - // TODO Build certificate directly from sequence? - certs.Add(cf.ReadCertificate(obj.GetEncoded())); - } - } - catch (Exception ex) - { - throw new CmsException("can't re-encode certificate!", ex); - } - } - } - - private void AddCrlsFromSet( - IList crls, - Asn1Set crlSet) - { - X509CrlParser cf = new X509CrlParser(); - - foreach (Asn1Encodable ae in crlSet) - { - try - { - // TODO Build CRL directly from ae.ToAsn1Object()? - crls.Add(cf.ReadCrl(ae.GetEncoded())); - } - catch (Exception ex) - { - throw new CmsException("can't re-encode CRL!", ex); - } - } - } - - internal AlgorithmIdentifier FixAlgID( - AlgorithmIdentifier algId) - { - if (algId.Parameters == null) - return new AlgorithmIdentifier(algId.Algorithm, DerNull.Instance); - - return algId; - } - - internal string GetEncOid( - AsymmetricKeyParameter key, - string digestOID) - { - string encOID = null; - - if (key is RsaKeyParameters) - { - if (!((RsaKeyParameters)key).IsPrivate) - throw new ArgumentException("Expected RSA private key"); - - encOID = CmsSignedGenerator.EncryptionRsa; - } - else if (key is DsaPrivateKeyParameters) - { - if (digestOID.Equals(CmsSignedGenerator.DigestSha1)) - { - encOID = CmsSignedGenerator.EncryptionDsa; - } - else if (digestOID.Equals(CmsSignedGenerator.DigestSha224)) - { - encOID = NistObjectIdentifiers.DsaWithSha224.Id; - } - else if (digestOID.Equals(CmsSignedGenerator.DigestSha256)) - { - encOID = NistObjectIdentifiers.DsaWithSha256.Id; - } - else if (digestOID.Equals(CmsSignedGenerator.DigestSha384)) - { - encOID = NistObjectIdentifiers.DsaWithSha384.Id; - } - else if (digestOID.Equals(CmsSignedGenerator.DigestSha512)) - { - encOID = NistObjectIdentifiers.DsaWithSha512.Id; - } - else - { - throw new ArgumentException("can't mix DSA with anything but SHA1/SHA2"); - } - } - else if (key is ECPrivateKeyParameters) - { - ECPrivateKeyParameters ecPrivKey = (ECPrivateKeyParameters)key; - string algName = ecPrivKey.AlgorithmName; - - if (algName == "ECGOST3410") - { - encOID = CmsSignedGenerator.EncryptionECGost3410; - } - else - { - // TODO Should we insist on algName being one of "EC" or "ECDSA", as Java does? - encOID = (string)ecAlgorithms[digestOID]; - - if (encOID == null) - throw new ArgumentException("can't mix ECDSA with anything but SHA family digests"); - } - } - else if (key is Gost3410PrivateKeyParameters) - { - encOID = CmsSignedGenerator.EncryptionGost3410; - } - else - { - throw new ArgumentException("Unknown algorithm in CmsSignedGenerator.GetEncOid"); - } - - return encOID; - } - } -} diff --git a/bc-sharp-crypto/src/cms/CMSStreamException.cs b/bc-sharp-crypto/src/cms/CMSStreamException.cs deleted file mode 100644 index 68a8be0..0000000 --- a/bc-sharp-crypto/src/cms/CMSStreamException.cs +++ /dev/null @@ -1,29 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Cms -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class CmsStreamException - : IOException - { - public CmsStreamException() - { - } - - public CmsStreamException( - string name) - : base(name) - { - } - - public CmsStreamException( - string name, - Exception e) - : base(name, e) - { - } - } -} diff --git a/bc-sharp-crypto/src/cms/CMSTypedStream.cs b/bc-sharp-crypto/src/cms/CMSTypedStream.cs deleted file mode 100644 index 6815837..0000000 --- a/bc-sharp-crypto/src/cms/CMSTypedStream.cs +++ /dev/null @@ -1,72 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Cms -{ - public class CmsTypedStream - { - private const int BufferSize = 32 * 1024; - - private readonly string _oid; - private readonly Stream _in; - - public CmsTypedStream( - Stream inStream) - : this(PkcsObjectIdentifiers.Data.Id, inStream, BufferSize) - { - } - - public CmsTypedStream( - string oid, - Stream inStream) - : this(oid, inStream, BufferSize) - { - } - - public CmsTypedStream( - string oid, - Stream inStream, - int bufSize) - { - _oid = oid; -#if NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE - _in = new FullReaderStream(inStream); -#else - _in = new FullReaderStream(new BufferedStream(inStream, bufSize)); -#endif - } - - public string ContentType - { - get { return _oid; } - } - - public Stream ContentStream - { - get { return _in; } - } - - public void Drain() - { - Streams.Drain(_in); - Platform.Dispose(_in); - } - - private class FullReaderStream : FilterStream - { - internal FullReaderStream(Stream input) - : base(input) - { - } - - public override int Read(byte[] buf, int off, int len) - { - return Streams.ReadFully(base.s, buf, off, len); - } - } - } -} diff --git a/bc-sharp-crypto/src/cms/CMSUtils.cs b/bc-sharp-crypto/src/cms/CMSUtils.cs deleted file mode 100644 index 95d7106..0000000 --- a/bc-sharp-crypto/src/cms/CMSUtils.cs +++ /dev/null @@ -1,186 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.IO; -using Org.BouncyCastle.X509; -using Org.BouncyCastle.X509.Store; - -namespace Org.BouncyCastle.Cms -{ - internal class CmsUtilities - { - // TODO Is there a .NET equivalent to this? -// private static readonly Runtime RUNTIME = Runtime.getRuntime(); - - internal static int MaximumMemory - { - get - { - // TODO Is there a .NET equivalent to this? - long maxMem = int.MaxValue;//RUNTIME.maxMemory(); - - if (maxMem > int.MaxValue) - { - return int.MaxValue; - } - - return (int)maxMem; - } - } - - internal static ContentInfo ReadContentInfo( - byte[] input) - { - // enforce limit checking as from a byte array - return ReadContentInfo(new Asn1InputStream(input)); - } - - internal static ContentInfo ReadContentInfo( - Stream input) - { - // enforce some limit checking - return ReadContentInfo(new Asn1InputStream(input, MaximumMemory)); - } - - private static ContentInfo ReadContentInfo( - Asn1InputStream aIn) - { - try - { - return ContentInfo.GetInstance(aIn.ReadObject()); - } - catch (IOException e) - { - throw new CmsException("IOException reading content.", e); - } - catch (InvalidCastException e) - { - throw new CmsException("Malformed content.", e); - } - catch (ArgumentException e) - { - throw new CmsException("Malformed content.", e); - } - } - - public static byte[] StreamToByteArray( - Stream inStream) - { - return Streams.ReadAll(inStream); - } - - public static byte[] StreamToByteArray( - Stream inStream, - int limit) - { - return Streams.ReadAllLimited(inStream, limit); - } - - public static IList GetCertificatesFromStore( - IX509Store certStore) - { - try - { - IList certs = Platform.CreateArrayList(); - - if (certStore != null) - { - foreach (X509Certificate c in certStore.GetMatches(null)) - { - certs.Add( - X509CertificateStructure.GetInstance( - Asn1Object.FromByteArray(c.GetEncoded()))); - } - } - - return certs; - } - catch (CertificateEncodingException e) - { - throw new CmsException("error encoding certs", e); - } - catch (Exception e) - { - throw new CmsException("error processing certs", e); - } - } - - public static IList GetCrlsFromStore( - IX509Store crlStore) - { - try - { - IList crls = Platform.CreateArrayList(); - - if (crlStore != null) - { - foreach (X509Crl c in crlStore.GetMatches(null)) - { - crls.Add( - CertificateList.GetInstance( - Asn1Object.FromByteArray(c.GetEncoded()))); - } - } - - return crls; - } - catch (CrlException e) - { - throw new CmsException("error encoding crls", e); - } - catch (Exception e) - { - throw new CmsException("error processing crls", e); - } - } - - public static Asn1Set CreateBerSetFromList( - IList berObjects) - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - foreach (Asn1Encodable ae in berObjects) - { - v.Add(ae); - } - - return new BerSet(v); - } - - public static Asn1Set CreateDerSetFromList( - IList derObjects) - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - foreach (Asn1Encodable ae in derObjects) - { - v.Add(ae); - } - - return new DerSet(v); - } - - internal static Stream CreateBerOctetOutputStream(Stream s, int tagNo, bool isExplicit, int bufferSize) - { - BerOctetStringGenerator octGen = new BerOctetStringGenerator(s, tagNo, isExplicit); - return octGen.GetOctetOutputStream(bufferSize); - } - - internal static TbsCertificateStructure GetTbsCertificateStructure(X509Certificate cert) - { - return TbsCertificateStructure.GetInstance(Asn1Object.FromByteArray(cert.GetTbsCertificate())); - } - - internal static IssuerAndSerialNumber GetIssuerAndSerialNumber(X509Certificate cert) - { - TbsCertificateStructure tbsCert = GetTbsCertificateStructure(cert); - return new IssuerAndSerialNumber(tbsCert.Issuer, tbsCert.SerialNumber.Value); - } - } -} diff --git a/bc-sharp-crypto/src/cms/CounterSignatureDigestCalculator.cs b/bc-sharp-crypto/src/cms/CounterSignatureDigestCalculator.cs deleted file mode 100644 index 6f8bf65..0000000 --- a/bc-sharp-crypto/src/cms/CounterSignatureDigestCalculator.cs +++ /dev/null @@ -1,28 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Cms -{ - internal class CounterSignatureDigestCalculator - : IDigestCalculator - { - private readonly string alg; - private readonly byte[] data; - - internal CounterSignatureDigestCalculator( - string alg, - byte[] data) - { - this.alg = alg; - this.data = data; - } - - public byte[] GetDigest() - { - IDigest digest = CmsSignedHelper.Instance.GetDigestInstance(alg); - return DigestUtilities.DoFinal(digest, data); - } - } -} diff --git a/bc-sharp-crypto/src/cms/DefaultAuthenticatedAttributeTableGenerator.cs b/bc-sharp-crypto/src/cms/DefaultAuthenticatedAttributeTableGenerator.cs deleted file mode 100644 index d49b1d9..0000000 --- a/bc-sharp-crypto/src/cms/DefaultAuthenticatedAttributeTableGenerator.cs +++ /dev/null @@ -1,90 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Cms -{ - /** - * Default authenticated attributes generator. - */ - public class DefaultAuthenticatedAttributeTableGenerator - : CmsAttributeTableGenerator - { - private readonly IDictionary table; - - /** - * Initialise to use all defaults - */ - public DefaultAuthenticatedAttributeTableGenerator() - { - table = Platform.CreateHashtable(); - } - - /** - * Initialise with some extra attributes or overrides. - * - * @param attributeTable initial attribute table to use. - */ - public DefaultAuthenticatedAttributeTableGenerator( - AttributeTable attributeTable) - { - if (attributeTable != null) - { - table = attributeTable.ToDictionary(); - } - else - { - table = Platform.CreateHashtable(); - } - } - - /** - * Create a standard attribute table from the passed in parameters - this will - * normally include contentType and messageDigest. If the constructor - * using an AttributeTable was used, entries in it for contentType and - * messageDigest will override the generated ones. - * - * @param parameters source parameters for table generation. - * - * @return a filled in IDictionary of attributes. - */ - protected virtual IDictionary CreateStandardAttributeTable( - IDictionary parameters) - { - IDictionary std = Platform.CreateHashtable(table); - - if (!std.Contains(CmsAttributes.ContentType)) - { - DerObjectIdentifier contentType = (DerObjectIdentifier) - parameters[CmsAttributeTableParameter.ContentType]; - Asn1.Cms.Attribute attr = new Asn1.Cms.Attribute(CmsAttributes.ContentType, - new DerSet(contentType)); - std[attr.AttrType] = attr; - } - - if (!std.Contains(CmsAttributes.MessageDigest)) - { - byte[] messageDigest = (byte[])parameters[CmsAttributeTableParameter.Digest]; - Asn1.Cms.Attribute attr = new Asn1.Cms.Attribute(CmsAttributes.MessageDigest, - new DerSet(new DerOctetString(messageDigest))); - std[attr.AttrType] = attr; - } - - return std; - } - - /** - * @param parameters source parameters - * @return the populated attribute table - */ - public virtual AttributeTable GetAttributes( - IDictionary parameters) - { - IDictionary table = CreateStandardAttributeTable(parameters); - return new AttributeTable(table); - } - } -} diff --git a/bc-sharp-crypto/src/cms/DefaultSignedAttributeTableGenerator.cs b/bc-sharp-crypto/src/cms/DefaultSignedAttributeTableGenerator.cs deleted file mode 100644 index 925a98a..0000000 --- a/bc-sharp-crypto/src/cms/DefaultSignedAttributeTableGenerator.cs +++ /dev/null @@ -1,124 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Cms -{ - /** - * Default signed attributes generator. - */ - public class DefaultSignedAttributeTableGenerator - : CmsAttributeTableGenerator - { - private readonly IDictionary table; - - /** - * Initialise to use all defaults - */ - public DefaultSignedAttributeTableGenerator() - { - table = Platform.CreateHashtable(); - } - - /** - * Initialise with some extra attributes or overrides. - * - * @param attributeTable initial attribute table to use. - */ - public DefaultSignedAttributeTableGenerator( - AttributeTable attributeTable) - { - if (attributeTable != null) - { - table = attributeTable.ToDictionary(); - } - else - { - table = Platform.CreateHashtable(); - } - } - -#if SILVERLIGHT || PORTABLE - /** - * Create a standard attribute table from the passed in parameters - this will - * normally include contentType, signingTime, and messageDigest. If the constructor - * using an AttributeTable was used, entries in it for contentType, signingTime, and - * messageDigest will override the generated ones. - * - * @param parameters source parameters for table generation. - * - * @return a filled in Hashtable of attributes. - */ - protected virtual IDictionary createStandardAttributeTable( - IDictionary parameters) - { - IDictionary std = Platform.CreateHashtable(table); - DoCreateStandardAttributeTable(parameters, std); - return std; - } -#else - /** - * Create a standard attribute table from the passed in parameters - this will - * normally include contentType, signingTime, and messageDigest. If the constructor - * using an AttributeTable was used, entries in it for contentType, signingTime, and - * messageDigest will override the generated ones. - * - * @param parameters source parameters for table generation. - * - * @return a filled in Hashtable of attributes. - */ - protected virtual Hashtable createStandardAttributeTable( - IDictionary parameters) - { - Hashtable std = new Hashtable(table); - DoCreateStandardAttributeTable(parameters, std); - return std; - } -#endif - - private void DoCreateStandardAttributeTable(IDictionary parameters, IDictionary std) - { - // contentType will be absent if we're trying to generate a counter signature. - if (parameters.Contains(CmsAttributeTableParameter.ContentType)) - { - if (!std.Contains(CmsAttributes.ContentType)) - { - DerObjectIdentifier contentType = (DerObjectIdentifier) - parameters[CmsAttributeTableParameter.ContentType]; - Asn1.Cms.Attribute attr = new Asn1.Cms.Attribute(CmsAttributes.ContentType, - new DerSet(contentType)); - std[attr.AttrType] = attr; - } - } - - if (!std.Contains(CmsAttributes.SigningTime)) - { - Asn1.Cms.Attribute attr = new Asn1.Cms.Attribute(CmsAttributes.SigningTime, - new DerSet(new Time(DateTime.UtcNow))); - std[attr.AttrType] = attr; - } - - if (!std.Contains(CmsAttributes.MessageDigest)) - { - byte[] messageDigest = (byte[])parameters[CmsAttributeTableParameter.Digest]; - Asn1.Cms.Attribute attr = new Asn1.Cms.Attribute(CmsAttributes.MessageDigest, - new DerSet(new DerOctetString(messageDigest))); - std[attr.AttrType] = attr; - } - } - - /** - * @param parameters source parameters - * @return the populated attribute table - */ - public virtual AttributeTable GetAttributes( - IDictionary parameters) - { - IDictionary table = createStandardAttributeTable(parameters); - return new AttributeTable(table); - } - } -} diff --git a/bc-sharp-crypto/src/cms/DigOutputStream.cs b/bc-sharp-crypto/src/cms/DigOutputStream.cs deleted file mode 100644 index 103b45c..0000000 --- a/bc-sharp-crypto/src/cms/DigOutputStream.cs +++ /dev/null @@ -1,28 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Cms -{ - internal class DigOutputStream - : BaseOutputStream - { - private readonly IDigest dig; - - internal DigOutputStream(IDigest dig) - { - this.dig = dig; - } - - public override void WriteByte(byte b) - { - dig.Update(b); - } - - public override void Write(byte[] b, int off, int len) - { - dig.BlockUpdate(b, off, len); - } - } -} diff --git a/bc-sharp-crypto/src/cms/IDigestCalculator.cs b/bc-sharp-crypto/src/cms/IDigestCalculator.cs deleted file mode 100644 index 3661e40..0000000 --- a/bc-sharp-crypto/src/cms/IDigestCalculator.cs +++ /dev/null @@ -1,9 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Cms -{ - internal interface IDigestCalculator - { - byte[] GetDigest(); - } -} diff --git a/bc-sharp-crypto/src/cms/KEKRecipientInfoGenerator.cs b/bc-sharp-crypto/src/cms/KEKRecipientInfoGenerator.cs deleted file mode 100644 index 6f34fec..0000000 --- a/bc-sharp-crypto/src/cms/KEKRecipientInfoGenerator.cs +++ /dev/null @@ -1,138 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.Kisa; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Ntt; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Cms -{ - internal class KekRecipientInfoGenerator : RecipientInfoGenerator - { - private static readonly CmsEnvelopedHelper Helper = CmsEnvelopedHelper.Instance; - - private KeyParameter keyEncryptionKey; - // TODO Can get this from keyEncryptionKey? - private string keyEncryptionKeyOID; - private KekIdentifier kekIdentifier; - - // Derived - private AlgorithmIdentifier keyEncryptionAlgorithm; - - internal KekRecipientInfoGenerator() - { - } - - internal KekIdentifier KekIdentifier - { - set { this.kekIdentifier = value; } - } - - internal KeyParameter KeyEncryptionKey - { - set - { - this.keyEncryptionKey = value; - this.keyEncryptionAlgorithm = DetermineKeyEncAlg(keyEncryptionKeyOID, keyEncryptionKey); - } - } - - internal string KeyEncryptionKeyOID - { - set { this.keyEncryptionKeyOID = value; } - } - - public RecipientInfo Generate(KeyParameter contentEncryptionKey, SecureRandom random) - { - byte[] keyBytes = contentEncryptionKey.GetKey(); - - IWrapper keyWrapper = Helper.CreateWrapper(keyEncryptionAlgorithm.Algorithm.Id); - keyWrapper.Init(true, new ParametersWithRandom(keyEncryptionKey, random)); - Asn1OctetString encryptedKey = new DerOctetString( - keyWrapper.Wrap(keyBytes, 0, keyBytes.Length)); - - return new RecipientInfo(new KekRecipientInfo(kekIdentifier, keyEncryptionAlgorithm, encryptedKey)); - } - - private static AlgorithmIdentifier DetermineKeyEncAlg( - string algorithm, KeyParameter key) - { - if (Platform.StartsWith(algorithm, "DES")) - { - return new AlgorithmIdentifier( - PkcsObjectIdentifiers.IdAlgCms3DesWrap, - DerNull.Instance); - } - else if (Platform.StartsWith(algorithm, "RC2")) - { - return new AlgorithmIdentifier( - PkcsObjectIdentifiers.IdAlgCmsRC2Wrap, - new DerInteger(58)); - } - else if (Platform.StartsWith(algorithm, "AES")) - { - int length = key.GetKey().Length * 8; - DerObjectIdentifier wrapOid; - - if (length == 128) - { - wrapOid = NistObjectIdentifiers.IdAes128Wrap; - } - else if (length == 192) - { - wrapOid = NistObjectIdentifiers.IdAes192Wrap; - } - else if (length == 256) - { - wrapOid = NistObjectIdentifiers.IdAes256Wrap; - } - else - { - throw new ArgumentException("illegal keysize in AES"); - } - - return new AlgorithmIdentifier(wrapOid); // parameters absent - } - else if (Platform.StartsWith(algorithm, "SEED")) - { - // parameters absent - return new AlgorithmIdentifier(KisaObjectIdentifiers.IdNpkiAppCmsSeedWrap); - } - else if (Platform.StartsWith(algorithm, "CAMELLIA")) - { - int length = key.GetKey().Length * 8; - DerObjectIdentifier wrapOid; - - if (length == 128) - { - wrapOid = NttObjectIdentifiers.IdCamellia128Wrap; - } - else if (length == 192) - { - wrapOid = NttObjectIdentifiers.IdCamellia192Wrap; - } - else if (length == 256) - { - wrapOid = NttObjectIdentifiers.IdCamellia256Wrap; - } - else - { - throw new ArgumentException("illegal keysize in Camellia"); - } - - return new AlgorithmIdentifier(wrapOid); // parameters must be absent - } - else - { - throw new ArgumentException("unknown algorithm"); - } - } - } -} diff --git a/bc-sharp-crypto/src/cms/KEKRecipientInformation.cs b/bc-sharp-crypto/src/cms/KEKRecipientInformation.cs deleted file mode 100644 index 871dc76..0000000 --- a/bc-sharp-crypto/src/cms/KEKRecipientInformation.cs +++ /dev/null @@ -1,62 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Cms -{ - /** - * the RecipientInfo class for a recipient who has been sent a message - * encrypted using a secret key known to the other side. - */ - public class KekRecipientInformation - : RecipientInformation - { - private KekRecipientInfo info; - - internal KekRecipientInformation( - KekRecipientInfo info, - CmsSecureReadable secureReadable) - : base(info.KeyEncryptionAlgorithm, secureReadable) - { - this.info = info; - this.rid = new RecipientID(); - - KekIdentifier kekId = info.KekID; - - rid.KeyIdentifier = kekId.KeyIdentifier.GetOctets(); - } - - /** - * decrypt the content and return an input stream. - */ - public override CmsTypedStream GetContentStream( - ICipherParameters key) - { - try - { - byte[] encryptedKey = info.EncryptedKey.GetOctets(); - IWrapper keyWrapper = WrapperUtilities.GetWrapper(keyEncAlg.Algorithm.Id); - - keyWrapper.Init(false, key); - - KeyParameter sKey = ParameterUtilities.CreateKeyParameter( - GetContentAlgorithmName(), keyWrapper.Unwrap(encryptedKey, 0, encryptedKey.Length)); - - return GetContentFromSessionKey(sKey); - } - catch (SecurityUtilityException e) - { - throw new CmsException("couldn't create cipher.", e); - } - catch (InvalidKeyException e) - { - throw new CmsException("key invalid in message.", e); - } - } - } -} diff --git a/bc-sharp-crypto/src/cms/KeyAgreeRecipientInfoGenerator.cs b/bc-sharp-crypto/src/cms/KeyAgreeRecipientInfoGenerator.cs deleted file mode 100644 index 6bd2cea..0000000 --- a/bc-sharp-crypto/src/cms/KeyAgreeRecipientInfoGenerator.cs +++ /dev/null @@ -1,171 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.Cms.Ecc; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.X509; - -namespace Org.BouncyCastle.Cms -{ - internal class KeyAgreeRecipientInfoGenerator : RecipientInfoGenerator - { - private static readonly CmsEnvelopedHelper Helper = CmsEnvelopedHelper.Instance; - - private DerObjectIdentifier keyAgreementOID; - private DerObjectIdentifier keyEncryptionOID; - private IList recipientCerts; - private AsymmetricCipherKeyPair senderKeyPair; - - internal KeyAgreeRecipientInfoGenerator() - { - } - - internal DerObjectIdentifier KeyAgreementOID - { - set { this.keyAgreementOID = value; } - } - - internal DerObjectIdentifier KeyEncryptionOID - { - set { this.keyEncryptionOID = value; } - } - - internal ICollection RecipientCerts - { - set { this.recipientCerts = Platform.CreateArrayList(value); } - } - - internal AsymmetricCipherKeyPair SenderKeyPair - { - set { this.senderKeyPair = value; } - } - - public RecipientInfo Generate(KeyParameter contentEncryptionKey, SecureRandom random) - { - byte[] keyBytes = contentEncryptionKey.GetKey(); - - AsymmetricKeyParameter senderPublicKey = senderKeyPair.Public; - ICipherParameters senderPrivateParams = senderKeyPair.Private; - - - OriginatorIdentifierOrKey originator; - try - { - originator = new OriginatorIdentifierOrKey( - CreateOriginatorPublicKey(senderPublicKey)); - } - catch (IOException e) - { - throw new InvalidKeyException("cannot extract originator public key: " + e); - } - - - Asn1OctetString ukm = null; - if (keyAgreementOID.Id.Equals(CmsEnvelopedGenerator.ECMqvSha1Kdf)) - { - try - { - IAsymmetricCipherKeyPairGenerator ephemKPG = - GeneratorUtilities.GetKeyPairGenerator(keyAgreementOID); - ephemKPG.Init( - ((ECPublicKeyParameters)senderPublicKey).CreateKeyGenerationParameters(random)); - - AsymmetricCipherKeyPair ephemKP = ephemKPG.GenerateKeyPair(); - - ukm = new DerOctetString( - new MQVuserKeyingMaterial( - CreateOriginatorPublicKey(ephemKP.Public), null)); - - senderPrivateParams = new MqvPrivateParameters( - (ECPrivateKeyParameters)senderPrivateParams, - (ECPrivateKeyParameters)ephemKP.Private, - (ECPublicKeyParameters)ephemKP.Public); - } - catch (IOException e) - { - throw new InvalidKeyException("cannot extract MQV ephemeral public key: " + e); - } - catch (SecurityUtilityException e) - { - throw new InvalidKeyException("cannot determine MQV ephemeral key pair parameters from public key: " + e); - } - } - - - DerSequence paramSeq = new DerSequence( - keyEncryptionOID, - DerNull.Instance); - AlgorithmIdentifier keyEncAlg = new AlgorithmIdentifier(keyAgreementOID, paramSeq); - - - Asn1EncodableVector recipientEncryptedKeys = new Asn1EncodableVector(); - foreach (X509Certificate recipientCert in recipientCerts) - { - TbsCertificateStructure tbsCert; - try - { - tbsCert = TbsCertificateStructure.GetInstance( - Asn1Object.FromByteArray(recipientCert.GetTbsCertificate())); - } - catch (Exception) - { - throw new ArgumentException("can't extract TBS structure from certificate"); - } - - // TODO Should there be a SubjectKeyIdentifier-based alternative? - IssuerAndSerialNumber issuerSerial = new IssuerAndSerialNumber( - tbsCert.Issuer, tbsCert.SerialNumber.Value); - KeyAgreeRecipientIdentifier karid = new KeyAgreeRecipientIdentifier(issuerSerial); - - ICipherParameters recipientPublicParams = recipientCert.GetPublicKey(); - if (keyAgreementOID.Id.Equals(CmsEnvelopedGenerator.ECMqvSha1Kdf)) - { - recipientPublicParams = new MqvPublicParameters( - (ECPublicKeyParameters)recipientPublicParams, - (ECPublicKeyParameters)recipientPublicParams); - } - - // Use key agreement to choose a wrap key for this recipient - IBasicAgreement keyAgreement = AgreementUtilities.GetBasicAgreementWithKdf( - keyAgreementOID, keyEncryptionOID.Id); - keyAgreement.Init(new ParametersWithRandom(senderPrivateParams, random)); - BigInteger agreedValue = keyAgreement.CalculateAgreement(recipientPublicParams); - - int keyEncryptionKeySize = GeneratorUtilities.GetDefaultKeySize(keyEncryptionOID) / 8; - byte[] keyEncryptionKeyBytes = X9IntegerConverter.IntegerToBytes(agreedValue, keyEncryptionKeySize); - KeyParameter keyEncryptionKey = ParameterUtilities.CreateKeyParameter( - keyEncryptionOID, keyEncryptionKeyBytes); - - // Wrap the content encryption key with the agreement key - IWrapper keyWrapper = Helper.CreateWrapper(keyEncryptionOID.Id); - keyWrapper.Init(true, new ParametersWithRandom(keyEncryptionKey, random)); - byte[] encryptedKeyBytes = keyWrapper.Wrap(keyBytes, 0, keyBytes.Length); - - Asn1OctetString encryptedKey = new DerOctetString(encryptedKeyBytes); - - recipientEncryptedKeys.Add(new RecipientEncryptedKey(karid, encryptedKey)); - } - - return new RecipientInfo(new KeyAgreeRecipientInfo(originator, ukm, keyEncAlg, - new DerSequence(recipientEncryptedKeys))); - } - - private static OriginatorPublicKey CreateOriginatorPublicKey( - AsymmetricKeyParameter publicKey) - { - SubjectPublicKeyInfo spki = SubjectPublicKeyInfoFactory.CreateSubjectPublicKeyInfo(publicKey); - return new OriginatorPublicKey( - new AlgorithmIdentifier(spki.AlgorithmID.Algorithm, DerNull.Instance), - spki.PublicKeyData.GetBytes()); - } - } -} diff --git a/bc-sharp-crypto/src/cms/KeyAgreeRecipientInformation.cs b/bc-sharp-crypto/src/cms/KeyAgreeRecipientInformation.cs deleted file mode 100644 index 73e57a7..0000000 --- a/bc-sharp-crypto/src/cms/KeyAgreeRecipientInformation.cs +++ /dev/null @@ -1,226 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.Cms.Ecc; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.Utilities; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Pkcs; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.X509; - -namespace Org.BouncyCastle.Cms -{ - /** - * the RecipientInfo class for a recipient who has been sent a message - * encrypted using key agreement. - */ - public class KeyAgreeRecipientInformation - : RecipientInformation - { - private KeyAgreeRecipientInfo info; - private Asn1OctetString encryptedKey; - - internal static void ReadRecipientInfo(IList infos, KeyAgreeRecipientInfo info, - CmsSecureReadable secureReadable) - { - try - { - foreach (Asn1Encodable rek in info.RecipientEncryptedKeys) - { - RecipientEncryptedKey id = RecipientEncryptedKey.GetInstance(rek.ToAsn1Object()); - - RecipientID rid = new RecipientID(); - - Asn1.Cms.KeyAgreeRecipientIdentifier karid = id.Identifier; - - Asn1.Cms.IssuerAndSerialNumber iAndSN = karid.IssuerAndSerialNumber; - if (iAndSN != null) - { - rid.Issuer = iAndSN.Name; - rid.SerialNumber = iAndSN.SerialNumber.Value; - } - else - { - Asn1.Cms.RecipientKeyIdentifier rKeyID = karid.RKeyID; - - // Note: 'date' and 'other' fields of RecipientKeyIdentifier appear to be only informational - - rid.SubjectKeyIdentifier = rKeyID.SubjectKeyIdentifier.GetOctets(); - } - - infos.Add(new KeyAgreeRecipientInformation(info, rid, id.EncryptedKey, - secureReadable)); - } - } - catch (IOException e) - { - throw new ArgumentException("invalid rid in KeyAgreeRecipientInformation", e); - } - } - - internal KeyAgreeRecipientInformation( - KeyAgreeRecipientInfo info, - RecipientID rid, - Asn1OctetString encryptedKey, - CmsSecureReadable secureReadable) - : base(info.KeyEncryptionAlgorithm, secureReadable) - { - this.info = info; - this.rid = rid; - this.encryptedKey = encryptedKey; - } - - private AsymmetricKeyParameter GetSenderPublicKey( - AsymmetricKeyParameter receiverPrivateKey, - OriginatorIdentifierOrKey originator) - { - OriginatorPublicKey opk = originator.OriginatorPublicKey; - if (opk != null) - { - return GetPublicKeyFromOriginatorPublicKey(receiverPrivateKey, opk); - } - - OriginatorID origID = new OriginatorID(); - - Asn1.Cms.IssuerAndSerialNumber iAndSN = originator.IssuerAndSerialNumber; - if (iAndSN != null) - { - origID.Issuer = iAndSN.Name; - origID.SerialNumber = iAndSN.SerialNumber.Value; - } - else - { - SubjectKeyIdentifier ski = originator.SubjectKeyIdentifier; - - origID.SubjectKeyIdentifier = ski.GetKeyIdentifier(); - } - - return GetPublicKeyFromOriginatorID(origID); - } - - private AsymmetricKeyParameter GetPublicKeyFromOriginatorPublicKey( - AsymmetricKeyParameter receiverPrivateKey, - OriginatorPublicKey originatorPublicKey) - { - PrivateKeyInfo privInfo = PrivateKeyInfoFactory.CreatePrivateKeyInfo(receiverPrivateKey); - SubjectPublicKeyInfo pubInfo = new SubjectPublicKeyInfo( - privInfo.PrivateKeyAlgorithm, - originatorPublicKey.PublicKey.GetBytes()); - return PublicKeyFactory.CreateKey(pubInfo); - } - - private AsymmetricKeyParameter GetPublicKeyFromOriginatorID( - OriginatorID origID) - { - // TODO Support all alternatives for OriginatorIdentifierOrKey - // see RFC 3852 6.2.2 - throw new CmsException("No support for 'originator' as IssuerAndSerialNumber or SubjectKeyIdentifier"); - } - - private KeyParameter CalculateAgreedWrapKey( - string wrapAlg, - AsymmetricKeyParameter senderPublicKey, - AsymmetricKeyParameter receiverPrivateKey) - { - DerObjectIdentifier agreeAlgID = keyEncAlg.Algorithm; - - ICipherParameters senderPublicParams = senderPublicKey; - ICipherParameters receiverPrivateParams = receiverPrivateKey; - - if (agreeAlgID.Id.Equals(CmsEnvelopedGenerator.ECMqvSha1Kdf)) - { - byte[] ukmEncoding = info.UserKeyingMaterial.GetOctets(); - MQVuserKeyingMaterial ukm = MQVuserKeyingMaterial.GetInstance( - Asn1Object.FromByteArray(ukmEncoding)); - - AsymmetricKeyParameter ephemeralKey = GetPublicKeyFromOriginatorPublicKey( - receiverPrivateKey, ukm.EphemeralPublicKey); - - senderPublicParams = new MqvPublicParameters( - (ECPublicKeyParameters)senderPublicParams, - (ECPublicKeyParameters)ephemeralKey); - receiverPrivateParams = new MqvPrivateParameters( - (ECPrivateKeyParameters)receiverPrivateParams, - (ECPrivateKeyParameters)receiverPrivateParams); - } - - IBasicAgreement agreement = AgreementUtilities.GetBasicAgreementWithKdf( - agreeAlgID, wrapAlg); - agreement.Init(receiverPrivateParams); - BigInteger agreedValue = agreement.CalculateAgreement(senderPublicParams); - - int wrapKeySize = GeneratorUtilities.GetDefaultKeySize(wrapAlg) / 8; - byte[] wrapKeyBytes = X9IntegerConverter.IntegerToBytes(agreedValue, wrapKeySize); - return ParameterUtilities.CreateKeyParameter(wrapAlg, wrapKeyBytes); - } - - private KeyParameter UnwrapSessionKey( - string wrapAlg, - KeyParameter agreedKey) - { - byte[] encKeyOctets = encryptedKey.GetOctets(); - - IWrapper keyCipher = WrapperUtilities.GetWrapper(wrapAlg); - keyCipher.Init(false, agreedKey); - byte[] sKeyBytes = keyCipher.Unwrap(encKeyOctets, 0, encKeyOctets.Length); - return ParameterUtilities.CreateKeyParameter(GetContentAlgorithmName(), sKeyBytes); - } - - internal KeyParameter GetSessionKey( - AsymmetricKeyParameter receiverPrivateKey) - { - try - { - string wrapAlg = DerObjectIdentifier.GetInstance( - Asn1Sequence.GetInstance(keyEncAlg.Parameters)[0]).Id; - - AsymmetricKeyParameter senderPublicKey = GetSenderPublicKey( - receiverPrivateKey, info.Originator); - - KeyParameter agreedWrapKey = CalculateAgreedWrapKey(wrapAlg, - senderPublicKey, receiverPrivateKey); - - return UnwrapSessionKey(wrapAlg, agreedWrapKey); - } - catch (SecurityUtilityException e) - { - throw new CmsException("couldn't create cipher.", e); - } - catch (InvalidKeyException e) - { - throw new CmsException("key invalid in message.", e); - } - catch (Exception e) - { - throw new CmsException("originator key invalid.", e); - } - } - - /** - * decrypt the content and return an input stream. - */ - public override CmsTypedStream GetContentStream( - ICipherParameters key) - { - if (!(key is AsymmetricKeyParameter)) - throw new ArgumentException("KeyAgreement requires asymmetric key", "key"); - - AsymmetricKeyParameter receiverPrivateKey = (AsymmetricKeyParameter) key; - - if (!receiverPrivateKey.IsPrivate) - throw new ArgumentException("Expected private key", "key"); - - KeyParameter sKey = GetSessionKey(receiverPrivateKey); - - return GetContentFromSessionKey(sKey); - } - } -} diff --git a/bc-sharp-crypto/src/cms/KeyTransRecipientInfoGenerator.cs b/bc-sharp-crypto/src/cms/KeyTransRecipientInfoGenerator.cs deleted file mode 100644 index a1d8fbf..0000000 --- a/bc-sharp-crypto/src/cms/KeyTransRecipientInfoGenerator.cs +++ /dev/null @@ -1,87 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.X509; - -namespace Org.BouncyCastle.Cms -{ - internal class KeyTransRecipientInfoGenerator : RecipientInfoGenerator - { - private static readonly CmsEnvelopedHelper Helper = CmsEnvelopedHelper.Instance; - - private TbsCertificateStructure recipientTbsCert; - private AsymmetricKeyParameter recipientPublicKey; - private Asn1OctetString subjectKeyIdentifier; - - // Derived fields - private SubjectPublicKeyInfo info; - - internal KeyTransRecipientInfoGenerator() - { - } - - internal X509Certificate RecipientCert - { - set - { - this.recipientTbsCert = CmsUtilities.GetTbsCertificateStructure(value); - this.recipientPublicKey = value.GetPublicKey(); - this.info = recipientTbsCert.SubjectPublicKeyInfo; - } - } - - internal AsymmetricKeyParameter RecipientPublicKey - { - set - { - this.recipientPublicKey = value; - - try - { - info = SubjectPublicKeyInfoFactory.CreateSubjectPublicKeyInfo( - recipientPublicKey); - } - catch (IOException) - { - throw new ArgumentException("can't extract key algorithm from this key"); - } - } - } - - internal Asn1OctetString SubjectKeyIdentifier - { - set { this.subjectKeyIdentifier = value; } - } - - public RecipientInfo Generate(KeyParameter contentEncryptionKey, SecureRandom random) - { - byte[] keyBytes = contentEncryptionKey.GetKey(); - AlgorithmIdentifier keyEncryptionAlgorithm = info.AlgorithmID; - - IWrapper keyWrapper = Helper.CreateWrapper(keyEncryptionAlgorithm.Algorithm.Id); - keyWrapper.Init(true, new ParametersWithRandom(recipientPublicKey, random)); - byte[] encryptedKeyBytes = keyWrapper.Wrap(keyBytes, 0, keyBytes.Length); - - RecipientIdentifier recipId; - if (recipientTbsCert != null) - { - IssuerAndSerialNumber issuerAndSerial = new IssuerAndSerialNumber( - recipientTbsCert.Issuer, recipientTbsCert.SerialNumber.Value); - recipId = new RecipientIdentifier(issuerAndSerial); - } - else - { - recipId = new RecipientIdentifier(subjectKeyIdentifier); - } - - return new RecipientInfo(new KeyTransRecipientInfo(recipId, keyEncryptionAlgorithm, - new DerOctetString(encryptedKeyBytes))); - } - } -} diff --git a/bc-sharp-crypto/src/cms/KeyTransRecipientInformation.cs b/bc-sharp-crypto/src/cms/KeyTransRecipientInformation.cs deleted file mode 100644 index 3b1ea7b..0000000 --- a/bc-sharp-crypto/src/cms/KeyTransRecipientInformation.cs +++ /dev/null @@ -1,113 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Asn1Pkcs = Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.X509; - -namespace Org.BouncyCastle.Cms -{ - /** - * the KeyTransRecipientInformation class for a recipient who has been sent a secret - * key encrypted using their public key that needs to be used to - * extract the message. - */ - public class KeyTransRecipientInformation - : RecipientInformation - { - private KeyTransRecipientInfo info; - - internal KeyTransRecipientInformation( - KeyTransRecipientInfo info, - CmsSecureReadable secureReadable) - : base(info.KeyEncryptionAlgorithm, secureReadable) - { - this.info = info; - this.rid = new RecipientID(); - - RecipientIdentifier r = info.RecipientIdentifier; - - try - { - if (r.IsTagged) - { - Asn1OctetString octs = Asn1OctetString.GetInstance(r.ID); - - rid.SubjectKeyIdentifier = octs.GetOctets(); - } - else - { - IssuerAndSerialNumber iAnds = IssuerAndSerialNumber.GetInstance(r.ID); - - rid.Issuer = iAnds.Name; - rid.SerialNumber = iAnds.SerialNumber.Value; - } - } - catch (IOException) - { - throw new ArgumentException("invalid rid in KeyTransRecipientInformation"); - } - } - - private string GetExchangeEncryptionAlgorithmName( - DerObjectIdentifier oid) - { - if (Asn1Pkcs.PkcsObjectIdentifiers.RsaEncryption.Equals(oid)) - { - return "RSA//PKCS1Padding"; - } - - return oid.Id; - } - - internal KeyParameter UnwrapKey(ICipherParameters key) - { - byte[] encryptedKey = info.EncryptedKey.GetOctets(); - string keyExchangeAlgorithm = GetExchangeEncryptionAlgorithmName(keyEncAlg.Algorithm); - - try - { - IWrapper keyWrapper = WrapperUtilities.GetWrapper(keyExchangeAlgorithm); - keyWrapper.Init(false, key); - - // FIXME Support for MAC algorithm parameters similar to cipher parameters - return ParameterUtilities.CreateKeyParameter( - GetContentAlgorithmName(), keyWrapper.Unwrap(encryptedKey, 0, encryptedKey.Length)); - } - catch (SecurityUtilityException e) - { - throw new CmsException("couldn't create cipher.", e); - } - catch (InvalidKeyException e) - { - throw new CmsException("key invalid in message.", e); - } -// catch (IllegalBlockSizeException e) - catch (DataLengthException e) - { - throw new CmsException("illegal blocksize in message.", e); - } -// catch (BadPaddingException e) - catch (InvalidCipherTextException e) - { - throw new CmsException("bad padding in message.", e); - } - } - - /** - * decrypt the content and return it as a byte array. - */ - public override CmsTypedStream GetContentStream( - ICipherParameters key) - { - KeyParameter sKey = UnwrapKey(key); - - return GetContentFromSessionKey(sKey); - } - } -} diff --git a/bc-sharp-crypto/src/cms/MacOutputStream.cs b/bc-sharp-crypto/src/cms/MacOutputStream.cs deleted file mode 100644 index 8891dbc..0000000 --- a/bc-sharp-crypto/src/cms/MacOutputStream.cs +++ /dev/null @@ -1,28 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Cms -{ - internal class MacOutputStream - : BaseOutputStream - { - private readonly IMac mac; - - internal MacOutputStream(IMac mac) - { - this.mac = mac; - } - - public override void Write(byte[] b, int off, int len) - { - mac.BlockUpdate(b, off, len); - } - - public override void WriteByte(byte b) - { - mac.Update(b); - } - } -} diff --git a/bc-sharp-crypto/src/cms/OriginatorId.cs b/bc-sharp-crypto/src/cms/OriginatorId.cs deleted file mode 100644 index 5a3b737..0000000 --- a/bc-sharp-crypto/src/cms/OriginatorId.cs +++ /dev/null @@ -1,51 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.X509.Store; - -namespace Org.BouncyCastle.Cms -{ - /** - * a basic index for an originator. - */ - public class OriginatorID - : X509CertStoreSelector - { - public override int GetHashCode() - { - int code = Arrays.GetHashCode(this.SubjectKeyIdentifier); - - BigInteger serialNumber = this.SerialNumber; - if (serialNumber != null) - { - code ^= serialNumber.GetHashCode(); - } - - X509Name issuer = this.Issuer; - if (issuer != null) - { - code ^= issuer.GetHashCode(); - } - - return code; - } - - public override bool Equals( - object obj) - { - if (obj == this) - return false; - - OriginatorID id = obj as OriginatorID; - - if (id == null) - return false; - - return Arrays.AreEqual(SubjectKeyIdentifier, id.SubjectKeyIdentifier) - && Platform.Equals(SerialNumber, id.SerialNumber) - && IssuersMatch(Issuer, id.Issuer); - } - } -} diff --git a/bc-sharp-crypto/src/cms/OriginatorInfoGenerator.cs b/bc-sharp-crypto/src/cms/OriginatorInfoGenerator.cs deleted file mode 100644 index 6bf1087..0000000 --- a/bc-sharp-crypto/src/cms/OriginatorInfoGenerator.cs +++ /dev/null @@ -1,42 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.X509; -using Org.BouncyCastle.X509.Store; - -namespace Org.BouncyCastle.Cms -{ - public class OriginatorInfoGenerator - { - private readonly IList origCerts; - private readonly IList origCrls; - - public OriginatorInfoGenerator(X509Certificate origCert) - { - this.origCerts = Platform.CreateArrayList(1); - this.origCrls = null; - origCerts.Add(origCert.CertificateStructure); - } - - public OriginatorInfoGenerator(IX509Store origCerts) - : this(origCerts, null) - { - } - - public OriginatorInfoGenerator(IX509Store origCerts, IX509Store origCrls) - { - this.origCerts = CmsUtilities.GetCertificatesFromStore(origCerts); - this.origCrls = origCrls == null ? null : CmsUtilities.GetCrlsFromStore(origCrls); - } - - public virtual OriginatorInfo Generate() - { - Asn1Set certSet = CmsUtilities.CreateDerSetFromList(origCerts); - Asn1Set crlSet = origCrls == null ? null : CmsUtilities.CreateDerSetFromList(origCrls); - return new OriginatorInfo(certSet, crlSet); - } - } -} diff --git a/bc-sharp-crypto/src/cms/OriginatorInformation.cs b/bc-sharp-crypto/src/cms/OriginatorInformation.cs deleted file mode 100644 index 618add6..0000000 --- a/bc-sharp-crypto/src/cms/OriginatorInformation.cs +++ /dev/null @@ -1,96 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.X509; -using Org.BouncyCastle.X509.Store; - -namespace Org.BouncyCastle.Cms -{ - public class OriginatorInformation - { - private readonly OriginatorInfo originatorInfo; - - internal OriginatorInformation(OriginatorInfo originatorInfo) - { - this.originatorInfo = originatorInfo; - } - - /** - * Return the certificates stored in the underlying OriginatorInfo object. - * - * @return a Store of X509CertificateHolder objects. - */ - public virtual IX509Store GetCertificates() - { - Asn1Set certSet = originatorInfo.Certificates; - - if (certSet != null) - { - IList certList = Platform.CreateArrayList(certSet.Count); - - foreach (Asn1Encodable enc in certSet) - { - Asn1Object obj = enc.ToAsn1Object(); - if (obj is Asn1Sequence) - { - certList.Add(new X509Certificate(X509CertificateStructure.GetInstance(obj))); - } - } - - return X509StoreFactory.Create( - "Certificate/Collection", - new X509CollectionStoreParameters(certList)); - } - - return X509StoreFactory.Create( - "Certificate/Collection", - new X509CollectionStoreParameters(Platform.CreateArrayList())); - } - - /** - * Return the CRLs stored in the underlying OriginatorInfo object. - * - * @return a Store of X509CRLHolder objects. - */ - public virtual IX509Store GetCrls() - { - Asn1Set crlSet = originatorInfo.Certificates; - - if (crlSet != null) - { - IList crlList = Platform.CreateArrayList(crlSet.Count); - - foreach (Asn1Encodable enc in crlSet) - { - Asn1Object obj = enc.ToAsn1Object(); - if (obj is Asn1Sequence) - { - crlList.Add(new X509Crl(CertificateList.GetInstance(obj))); - } - } - - return X509StoreFactory.Create( - "CRL/Collection", - new X509CollectionStoreParameters(crlList)); - } - - return X509StoreFactory.Create( - "CRL/Collection", - new X509CollectionStoreParameters(Platform.CreateArrayList())); - } - - /** - * Return the underlying ASN.1 object defining this SignerInformation object. - * - * @return a OriginatorInfo. - */ - public virtual OriginatorInfo ToAsn1Structure() - { - return originatorInfo; - } - } -} diff --git a/bc-sharp-crypto/src/cms/PKCS5Scheme2PBEKey.cs b/bc-sharp-crypto/src/cms/PKCS5Scheme2PBEKey.cs deleted file mode 100644 index 08b8518..0000000 --- a/bc-sharp-crypto/src/cms/PKCS5Scheme2PBEKey.cs +++ /dev/null @@ -1,64 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Generators; -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Cms -{ - /// - /// PKCS5 scheme-2 - password converted to bytes assuming ASCII. - /// - public class Pkcs5Scheme2PbeKey - : CmsPbeKey - { - [Obsolete("Use version taking 'char[]' instead")] - public Pkcs5Scheme2PbeKey( - string password, - byte[] salt, - int iterationCount) - : this(password.ToCharArray(), salt, iterationCount) - { - } - - [Obsolete("Use version taking 'char[]' instead")] - public Pkcs5Scheme2PbeKey( - string password, - AlgorithmIdentifier keyDerivationAlgorithm) - : this(password.ToCharArray(), keyDerivationAlgorithm) - { - } - - public Pkcs5Scheme2PbeKey( - char[] password, - byte[] salt, - int iterationCount) - : base(password, salt, iterationCount) - { - } - - public Pkcs5Scheme2PbeKey( - char[] password, - AlgorithmIdentifier keyDerivationAlgorithm) - : base(password, keyDerivationAlgorithm) - { - } - - internal override KeyParameter GetEncoded( - string algorithmOid) - { - Pkcs5S2ParametersGenerator gen = new Pkcs5S2ParametersGenerator(); - - gen.Init( - PbeParametersGenerator.Pkcs5PasswordToBytes(password), - salt, - iterationCount); - - return (KeyParameter) gen.GenerateDerivedParameters( - algorithmOid, - CmsEnvelopedHelper.Instance.GetKeySize(algorithmOid)); - } - } -} diff --git a/bc-sharp-crypto/src/cms/PKCS5Scheme2UTF8PBEKey.cs b/bc-sharp-crypto/src/cms/PKCS5Scheme2UTF8PBEKey.cs deleted file mode 100644 index 7aecc29..0000000 --- a/bc-sharp-crypto/src/cms/PKCS5Scheme2UTF8PBEKey.cs +++ /dev/null @@ -1,64 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Generators; -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Cms -{ - /** - * PKCS5 scheme-2 - password converted to bytes using UTF-8. - */ - public class Pkcs5Scheme2Utf8PbeKey - : CmsPbeKey - { - [Obsolete("Use version taking 'char[]' instead")] - public Pkcs5Scheme2Utf8PbeKey( - string password, - byte[] salt, - int iterationCount) - : this(password.ToCharArray(), salt, iterationCount) - { - } - - [Obsolete("Use version taking 'char[]' instead")] - public Pkcs5Scheme2Utf8PbeKey( - string password, - AlgorithmIdentifier keyDerivationAlgorithm) - : this(password.ToCharArray(), keyDerivationAlgorithm) - { - } - - public Pkcs5Scheme2Utf8PbeKey( - char[] password, - byte[] salt, - int iterationCount) - : base(password, salt, iterationCount) - { - } - - public Pkcs5Scheme2Utf8PbeKey( - char[] password, - AlgorithmIdentifier keyDerivationAlgorithm) - : base(password, keyDerivationAlgorithm) - { - } - - internal override KeyParameter GetEncoded( - string algorithmOid) - { - Pkcs5S2ParametersGenerator gen = new Pkcs5S2ParametersGenerator(); - - gen.Init( - PbeParametersGenerator.Pkcs5PasswordToUtf8Bytes(password), - salt, - iterationCount); - - return (KeyParameter) gen.GenerateDerivedParameters( - algorithmOid, - CmsEnvelopedHelper.Instance.GetKeySize(algorithmOid)); - } - } -} diff --git a/bc-sharp-crypto/src/cms/PasswordRecipientInfoGenerator.cs b/bc-sharp-crypto/src/cms/PasswordRecipientInfoGenerator.cs deleted file mode 100644 index 9916edf..0000000 --- a/bc-sharp-crypto/src/cms/PasswordRecipientInfoGenerator.cs +++ /dev/null @@ -1,70 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Cms -{ - internal class PasswordRecipientInfoGenerator : RecipientInfoGenerator - { - private static readonly CmsEnvelopedHelper Helper = CmsEnvelopedHelper.Instance; - - private AlgorithmIdentifier keyDerivationAlgorithm; - private KeyParameter keyEncryptionKey; - // TODO Can get this from keyEncryptionKey? - private string keyEncryptionKeyOID; - - internal PasswordRecipientInfoGenerator() - { - } - - internal AlgorithmIdentifier KeyDerivationAlgorithm - { - set { this.keyDerivationAlgorithm = value; } - } - - internal KeyParameter KeyEncryptionKey - { - set { this.keyEncryptionKey = value; } - } - - internal string KeyEncryptionKeyOID - { - set { this.keyEncryptionKeyOID = value; } - } - - public RecipientInfo Generate(KeyParameter contentEncryptionKey, SecureRandom random) - { - byte[] keyBytes = contentEncryptionKey.GetKey(); - - string rfc3211WrapperName = Helper.GetRfc3211WrapperName(keyEncryptionKeyOID); - IWrapper keyWrapper = Helper.CreateWrapper(rfc3211WrapperName); - - // Note: In Java build, the IV is automatically generated in JCE layer - int ivLength = Platform.StartsWith(rfc3211WrapperName, "DESEDE") ? 8 : 16; - byte[] iv = new byte[ivLength]; - random.NextBytes(iv); - - ICipherParameters parameters = new ParametersWithIV(keyEncryptionKey, iv); - keyWrapper.Init(true, new ParametersWithRandom(parameters, random)); - Asn1OctetString encryptedKey = new DerOctetString( - keyWrapper.Wrap(keyBytes, 0, keyBytes.Length)); - - DerSequence seq = new DerSequence( - new DerObjectIdentifier(keyEncryptionKeyOID), - new DerOctetString(iv)); - - AlgorithmIdentifier keyEncryptionAlgorithm = new AlgorithmIdentifier( - PkcsObjectIdentifiers.IdAlgPwriKek, seq); - - return new RecipientInfo(new PasswordRecipientInfo( - keyDerivationAlgorithm, keyEncryptionAlgorithm, encryptedKey)); - } - } -} diff --git a/bc-sharp-crypto/src/cms/PasswordRecipientInformation.cs b/bc-sharp-crypto/src/cms/PasswordRecipientInformation.cs deleted file mode 100644 index f629cab..0000000 --- a/bc-sharp-crypto/src/cms/PasswordRecipientInformation.cs +++ /dev/null @@ -1,79 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Cms -{ - /** - * the RecipientInfo class for a recipient who has been sent a message - * encrypted using a password. - */ - public class PasswordRecipientInformation - : RecipientInformation - { - private readonly PasswordRecipientInfo info; - - internal PasswordRecipientInformation( - PasswordRecipientInfo info, - CmsSecureReadable secureReadable) - : base(info.KeyEncryptionAlgorithm, secureReadable) - { - this.info = info; - this.rid = new RecipientID(); - } - - /** - * return the object identifier for the key derivation algorithm, or null - * if there is none present. - * - * @return OID for key derivation algorithm, if present. - */ - public virtual AlgorithmIdentifier KeyDerivationAlgorithm - { - get { return info.KeyDerivationAlgorithm; } - } - - /** - * decrypt the content and return an input stream. - */ - public override CmsTypedStream GetContentStream( - ICipherParameters key) - { - try - { - AlgorithmIdentifier kekAlg = AlgorithmIdentifier.GetInstance(info.KeyEncryptionAlgorithm); - Asn1Sequence kekAlgParams = (Asn1Sequence)kekAlg.Parameters; - byte[] encryptedKey = info.EncryptedKey.GetOctets(); - string kekAlgName = DerObjectIdentifier.GetInstance(kekAlgParams[0]).Id; - string cName = CmsEnvelopedHelper.Instance.GetRfc3211WrapperName(kekAlgName); - IWrapper keyWrapper = WrapperUtilities.GetWrapper(cName); - - byte[] iv = Asn1OctetString.GetInstance(kekAlgParams[1]).GetOctets(); - - ICipherParameters parameters = ((CmsPbeKey)key).GetEncoded(kekAlgName); - parameters = new ParametersWithIV(parameters, iv); - - keyWrapper.Init(false, parameters); - - KeyParameter sKey = ParameterUtilities.CreateKeyParameter( - GetContentAlgorithmName(), keyWrapper.Unwrap(encryptedKey, 0, encryptedKey.Length)); - - return GetContentFromSessionKey(sKey); - } - catch (SecurityUtilityException e) - { - throw new CmsException("couldn't create cipher.", e); - } - catch (InvalidKeyException e) - { - throw new CmsException("key invalid in message.", e); - } - } - } -} diff --git a/bc-sharp-crypto/src/cms/RecipientId.cs b/bc-sharp-crypto/src/cms/RecipientId.cs deleted file mode 100644 index 9b6eb09..0000000 --- a/bc-sharp-crypto/src/cms/RecipientId.cs +++ /dev/null @@ -1,58 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.X509.Store; - -namespace Org.BouncyCastle.Cms -{ - public class RecipientID - : X509CertStoreSelector - { - private byte[] keyIdentifier; - - public byte[] KeyIdentifier - { - get { return Arrays.Clone(keyIdentifier); } - set { keyIdentifier = Arrays.Clone(value); } - } - - public override int GetHashCode() - { - int code = Arrays.GetHashCode(keyIdentifier) - ^ Arrays.GetHashCode(this.SubjectKeyIdentifier); - - BigInteger serialNumber = this.SerialNumber; - if (serialNumber != null) - { - code ^= serialNumber.GetHashCode(); - } - - X509Name issuer = this.Issuer; - if (issuer != null) - { - code ^= issuer.GetHashCode(); - } - - return code; - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - RecipientID id = obj as RecipientID; - - if (id == null) - return false; - - return Arrays.AreEqual(keyIdentifier, id.keyIdentifier) - && Arrays.AreEqual(SubjectKeyIdentifier, id.SubjectKeyIdentifier) - && Platform.Equals(SerialNumber, id.SerialNumber) - && IssuersMatch(Issuer, id.Issuer); - } - } -} diff --git a/bc-sharp-crypto/src/cms/RecipientInfoGenerator.cs b/bc-sharp-crypto/src/cms/RecipientInfoGenerator.cs deleted file mode 100644 index c41db61..0000000 --- a/bc-sharp-crypto/src/cms/RecipientInfoGenerator.cs +++ /dev/null @@ -1,26 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Cms -{ - interface RecipientInfoGenerator - { - /// - /// Generate a RecipientInfo object for the given key. - /// - /// - /// A - /// - /// - /// A - /// - /// - /// A - /// - /// - RecipientInfo Generate(KeyParameter contentEncryptionKey, SecureRandom random); - } -} diff --git a/bc-sharp-crypto/src/cms/RecipientInformation.cs b/bc-sharp-crypto/src/cms/RecipientInformation.cs deleted file mode 100644 index 272b841..0000000 --- a/bc-sharp-crypto/src/cms/RecipientInformation.cs +++ /dev/null @@ -1,126 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.IO; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Cms -{ - public abstract class RecipientInformation - { - internal RecipientID rid = new RecipientID(); - internal AlgorithmIdentifier keyEncAlg; - internal CmsSecureReadable secureReadable; - - private byte[] resultMac; - - internal RecipientInformation( - AlgorithmIdentifier keyEncAlg, - CmsSecureReadable secureReadable) - { - this.keyEncAlg = keyEncAlg; - this.secureReadable = secureReadable; - } - - internal string GetContentAlgorithmName() - { - AlgorithmIdentifier algorithm = secureReadable.Algorithm; -// return CmsEnvelopedHelper.Instance.GetSymmetricCipherName(algorithm.Algorithm.Id); - return algorithm.Algorithm.Id; - } - - public RecipientID RecipientID - { - get { return rid; } - } - - public AlgorithmIdentifier KeyEncryptionAlgorithmID - { - get { return keyEncAlg; } - } - - /** - * return the object identifier for the key encryption algorithm. - * - * @return OID for key encryption algorithm. - */ - public string KeyEncryptionAlgOid - { - get { return keyEncAlg.Algorithm.Id; } - } - - /** - * return the ASN.1 encoded key encryption algorithm parameters, or null if - * there aren't any. - * - * @return ASN.1 encoding of key encryption algorithm parameters. - */ - public Asn1Object KeyEncryptionAlgParams - { - get - { - Asn1Encodable ae = keyEncAlg.Parameters; - - return ae == null ? null : ae.ToAsn1Object(); - } - } - - internal CmsTypedStream GetContentFromSessionKey( - KeyParameter sKey) - { - CmsReadable readable = secureReadable.GetReadable(sKey); - - try - { - return new CmsTypedStream(readable.GetInputStream()); - } - catch (IOException e) - { - throw new CmsException("error getting .", e); - } - } - - public byte[] GetContent( - ICipherParameters key) - { - try - { - return CmsUtilities.StreamToByteArray(GetContentStream(key).ContentStream); - } - catch (IOException e) - { - throw new Exception("unable to parse internal stream: " + e); - } - } - - /** - * Return the MAC calculated for the content stream. Note: this call is only meaningful once all - * the content has been read. - * - * @return byte array containing the mac. - */ - public byte[] GetMac() - { - if (resultMac == null) - { - object cryptoObject = secureReadable.CryptoObject; - if (cryptoObject is IMac) - { - resultMac = MacUtilities.DoFinal((IMac)cryptoObject); - } - } - - return Arrays.Clone(resultMac); - } - - public abstract CmsTypedStream GetContentStream(ICipherParameters key); - } -} diff --git a/bc-sharp-crypto/src/cms/RecipientInformationStore.cs b/bc-sharp-crypto/src/cms/RecipientInformationStore.cs deleted file mode 100644 index 33b472f..0000000 --- a/bc-sharp-crypto/src/cms/RecipientInformationStore.cs +++ /dev/null @@ -1,86 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Cms -{ - public class RecipientInformationStore - { - private readonly IList all; //ArrayList[RecipientInformation] - private readonly IDictionary table = Platform.CreateHashtable(); // Hashtable[RecipientID, ArrayList[RecipientInformation]] - - public RecipientInformationStore( - ICollection recipientInfos) - { - foreach (RecipientInformation recipientInformation in recipientInfos) - { - RecipientID rid = recipientInformation.RecipientID; - IList list = (IList)table[rid]; - - if (list == null) - { - table[rid] = list = Platform.CreateArrayList(1); - } - - list.Add(recipientInformation); - } - - this.all = Platform.CreateArrayList(recipientInfos); - } - - public RecipientInformation this[RecipientID selector] - { - get { return GetFirstRecipient(selector); } - } - - /** - * Return the first RecipientInformation object that matches the - * passed in selector. Null if there are no matches. - * - * @param selector to identify a recipient - * @return a single RecipientInformation object. Null if none matches. - */ - public RecipientInformation GetFirstRecipient( - RecipientID selector) - { - IList list = (IList) table[selector]; - - return list == null ? null : (RecipientInformation) list[0]; - } - - /** - * Return the number of recipients in the collection. - * - * @return number of recipients identified. - */ - public int Count - { - get { return all.Count; } - } - - /** - * Return all recipients in the collection - * - * @return a collection of recipients. - */ - public ICollection GetRecipients() - { - return Platform.CreateArrayList(all); - } - - /** - * Return possible empty collection with recipients matching the passed in RecipientID - * - * @param selector a recipient id to select against. - * @return a collection of RecipientInformation objects. - */ - public ICollection GetRecipients( - RecipientID selector) - { - IList list = (IList)table[selector]; - - return list == null ? Platform.CreateArrayList() : Platform.CreateArrayList(list); - } - } -} diff --git a/bc-sharp-crypto/src/cms/SigOutputStream.cs b/bc-sharp-crypto/src/cms/SigOutputStream.cs deleted file mode 100644 index a807fa7..0000000 --- a/bc-sharp-crypto/src/cms/SigOutputStream.cs +++ /dev/null @@ -1,43 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Utilities.IO; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Cms -{ - internal class SigOutputStream - : BaseOutputStream - { - private readonly ISigner sig; - - internal SigOutputStream(ISigner sig) - { - this.sig = sig; - } - - public override void WriteByte(byte b) - { - try - { - sig.Update(b); - } - catch (SignatureException e) - { - throw new CmsStreamException("signature problem: " + e); - } - } - - public override void Write(byte[] b, int off, int len) - { - try - { - sig.BlockUpdate(b, off, len); - } - catch (SignatureException e) - { - throw new CmsStreamException("signature problem: " + e); - } - } - } -} \ No newline at end of file diff --git a/bc-sharp-crypto/src/cms/SignerId.cs b/bc-sharp-crypto/src/cms/SignerId.cs deleted file mode 100644 index baac936..0000000 --- a/bc-sharp-crypto/src/cms/SignerId.cs +++ /dev/null @@ -1,51 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.X509.Store; - -namespace Org.BouncyCastle.Cms -{ - /** - * a basic index for a signer. - */ - public class SignerID - : X509CertStoreSelector - { - public override int GetHashCode() - { - int code = Arrays.GetHashCode(this.SubjectKeyIdentifier); - - BigInteger serialNumber = this.SerialNumber; - if (serialNumber != null) - { - code ^= serialNumber.GetHashCode(); - } - - X509Name issuer = this.Issuer; - if (issuer != null) - { - code ^= issuer.GetHashCode(); - } - - return code; - } - - public override bool Equals( - object obj) - { - if (obj == this) - return false; - - SignerID id = obj as SignerID; - - if (id == null) - return false; - - return Arrays.AreEqual(SubjectKeyIdentifier, id.SubjectKeyIdentifier) - && Platform.Equals(SerialNumber, id.SerialNumber) - && IssuersMatch(Issuer, id.Issuer); - } - } -} diff --git a/bc-sharp-crypto/src/cms/SignerInfoGenerator.cs b/bc-sharp-crypto/src/cms/SignerInfoGenerator.cs deleted file mode 100644 index 7b9318c..0000000 --- a/bc-sharp-crypto/src/cms/SignerInfoGenerator.cs +++ /dev/null @@ -1,166 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.X509; - -namespace Org.BouncyCastle.Cms -{ - internal interface ISignerInfoGenerator - { - SignerInfo Generate(DerObjectIdentifier contentType, AlgorithmIdentifier digestAlgorithm, - byte[] calculatedDigest); - } - - public class SignerInfoGenerator - { - internal X509Certificate certificate; - internal ISignatureFactory contentSigner; - internal SignerIdentifier sigId; - internal CmsAttributeTableGenerator signedGen; - internal CmsAttributeTableGenerator unsignedGen; - private bool isDirectSignature; - - internal SignerInfoGenerator(SignerIdentifier sigId, ISignatureFactory signerFactory): this(sigId, signerFactory, false) - { - - } - - internal SignerInfoGenerator(SignerIdentifier sigId, ISignatureFactory signerFactory, bool isDirectSignature) - { - this.sigId = sigId; - this.contentSigner = signerFactory; - this.isDirectSignature = isDirectSignature; - if (this.isDirectSignature) - { - this.signedGen = null; - this.unsignedGen = null; - } - else - { - this.signedGen = new DefaultSignedAttributeTableGenerator(); - this.unsignedGen = null; - } - } - - internal SignerInfoGenerator(SignerIdentifier sigId, ISignatureFactory contentSigner, CmsAttributeTableGenerator signedGen, CmsAttributeTableGenerator unsignedGen) - { - this.sigId = sigId; - this.contentSigner = contentSigner; - this.signedGen = signedGen; - this.unsignedGen = unsignedGen; - this.isDirectSignature = false; - } - - internal void setAssociatedCertificate(X509Certificate certificate) - { - this.certificate = certificate; - } - } - - public class SignerInfoGeneratorBuilder - { - private bool directSignature; - private CmsAttributeTableGenerator signedGen; - private CmsAttributeTableGenerator unsignedGen; - - public SignerInfoGeneratorBuilder() - { - } - - /** - * If the passed in flag is true, the signer signature will be based on the data, not - * a collection of signed attributes, and no signed attributes will be included. - * - * @return the builder object - */ - public SignerInfoGeneratorBuilder SetDirectSignature(bool hasNoSignedAttributes) - { - this.directSignature = hasNoSignedAttributes; - - return this; - } - - /** - * Provide a custom signed attribute generator. - * - * @param signedGen a generator of signed attributes. - * @return the builder object - */ - public SignerInfoGeneratorBuilder WithSignedAttributeGenerator(CmsAttributeTableGenerator signedGen) - { - this.signedGen = signedGen; - - return this; - } - - /** - * Provide a generator of unsigned attributes. - * - * @param unsignedGen a generator for signed attributes. - * @return the builder object - */ - public SignerInfoGeneratorBuilder WithUnsignedAttributeGenerator(CmsAttributeTableGenerator unsignedGen) - { - this.unsignedGen = unsignedGen; - - return this; - } - - /** - * Build a generator with the passed in certHolder issuer and serial number as the signerIdentifier. - * - * @param contentSigner operator for generating the final signature in the SignerInfo with. - * @param certHolder carrier for the X.509 certificate related to the contentSigner. - * @return a SignerInfoGenerator - * @throws OperatorCreationException if the generator cannot be built. - */ - public SignerInfoGenerator Build(ISignatureFactory contentSigner, X509Certificate certificate) - { - SignerIdentifier sigId = new SignerIdentifier(new IssuerAndSerialNumber(certificate.IssuerDN, new DerInteger(certificate.SerialNumber))); - - SignerInfoGenerator sigInfoGen = CreateGenerator(contentSigner, sigId); - - sigInfoGen.setAssociatedCertificate(certificate); - - return sigInfoGen; - } - - /** - * Build a generator with the passed in subjectKeyIdentifier as the signerIdentifier. If used you should - * try to follow the calculation described in RFC 5280 section 4.2.1.2. - * - * @param signerFactory operator factory for generating the final signature in the SignerInfo with. - * @param subjectKeyIdentifier key identifier to identify the public key for verifying the signature. - * @return a SignerInfoGenerator - */ - public SignerInfoGenerator Build(ISignatureFactory signerFactory, byte[] subjectKeyIdentifier) - { - SignerIdentifier sigId = new SignerIdentifier(new DerOctetString(subjectKeyIdentifier)); - - return CreateGenerator(signerFactory, sigId); - } - - private SignerInfoGenerator CreateGenerator(ISignatureFactory contentSigner, SignerIdentifier sigId) - { - if (directSignature) - { - return new SignerInfoGenerator(sigId, contentSigner, true); - } - - if (signedGen != null || unsignedGen != null) - { - if (signedGen == null) - { - signedGen = new DefaultSignedAttributeTableGenerator(); - } - - return new SignerInfoGenerator(sigId, contentSigner, signedGen, unsignedGen); - } - - return new SignerInfoGenerator(sigId, contentSigner); - } - } -} diff --git a/bc-sharp-crypto/src/cms/SignerInformation.cs b/bc-sharp-crypto/src/cms/SignerInformation.cs deleted file mode 100644 index dad1282..0000000 --- a/bc-sharp-crypto/src/cms/SignerInformation.cs +++ /dev/null @@ -1,761 +0,0 @@ -using System; -using System.Collections; -using System.Diagnostics; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Engines; -using Org.BouncyCastle.Crypto.Signers; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.X509; - -namespace Org.BouncyCastle.Cms -{ - /** - * an expanded SignerInfo block from a CMS Signed message - */ - public class SignerInformation - { - private static readonly CmsSignedHelper Helper = CmsSignedHelper.Instance; - - private SignerID sid; - private SignerInfo info; - private AlgorithmIdentifier digestAlgorithm; - private AlgorithmIdentifier encryptionAlgorithm; - private readonly Asn1Set signedAttributeSet; - private readonly Asn1Set unsignedAttributeSet; - private CmsProcessable content; - private byte[] signature; - private DerObjectIdentifier contentType; - private IDigestCalculator digestCalculator; - private byte[] resultDigest; - - // Derived - private Asn1.Cms.AttributeTable signedAttributeTable; - private Asn1.Cms.AttributeTable unsignedAttributeTable; - private readonly bool isCounterSignature; - - internal SignerInformation( - SignerInfo info, - DerObjectIdentifier contentType, - CmsProcessable content, - IDigestCalculator digestCalculator) - { - this.info = info; - this.sid = new SignerID(); - this.contentType = contentType; - this.isCounterSignature = contentType == null; - - try - { - SignerIdentifier s = info.SignerID; - - if (s.IsTagged) - { - Asn1OctetString octs = Asn1OctetString.GetInstance(s.ID); - - sid.SubjectKeyIdentifier = octs.GetEncoded(); - } - else - { - Asn1.Cms.IssuerAndSerialNumber iAnds = - Asn1.Cms.IssuerAndSerialNumber.GetInstance(s.ID); - - sid.Issuer = iAnds.Name; - sid.SerialNumber = iAnds.SerialNumber.Value; - } - } - catch (IOException) - { - throw new ArgumentException("invalid sid in SignerInfo"); - } - - this.digestAlgorithm = info.DigestAlgorithm; - this.signedAttributeSet = info.AuthenticatedAttributes; - this.unsignedAttributeSet = info.UnauthenticatedAttributes; - this.encryptionAlgorithm = info.DigestEncryptionAlgorithm; - this.signature = info.EncryptedDigest.GetOctets(); - - this.content = content; - this.digestCalculator = digestCalculator; - } - - public bool IsCounterSignature - { - get { return isCounterSignature; } - } - - public DerObjectIdentifier ContentType - { - get { return contentType; } - } - - public SignerID SignerID - { - get { return sid; } - } - - /** - * return the version number for this objects underlying SignerInfo structure. - */ - public int Version - { - get { return info.Version.Value.IntValue; } - } - - public AlgorithmIdentifier DigestAlgorithmID - { - get { return digestAlgorithm; } - } - - /** - * return the object identifier for the signature. - */ - public string DigestAlgOid - { - get { return digestAlgorithm.Algorithm.Id; } - } - - /** - * return the signature parameters, or null if there aren't any. - */ - public Asn1Object DigestAlgParams - { - get - { - Asn1Encodable ae = digestAlgorithm.Parameters; - - return ae == null ? null : ae.ToAsn1Object(); - } - } - - /** - * return the content digest that was calculated during verification. - */ - public byte[] GetContentDigest() - { - if (resultDigest == null) - { - throw new InvalidOperationException("method can only be called after verify."); - } - - return (byte[])resultDigest.Clone(); - } - - public AlgorithmIdentifier EncryptionAlgorithmID - { - get { return encryptionAlgorithm; } - } - - /** - * return the object identifier for the signature. - */ - public string EncryptionAlgOid - { - get { return encryptionAlgorithm.Algorithm.Id; } - } - - /** - * return the signature/encryption algorithm parameters, or null if - * there aren't any. - */ - public Asn1Object EncryptionAlgParams - { - get - { - Asn1Encodable ae = encryptionAlgorithm.Parameters; - - return ae == null ? null : ae.ToAsn1Object(); - } - } - - /** - * return a table of the signed attributes - indexed by - * the OID of the attribute. - */ - public Asn1.Cms.AttributeTable SignedAttributes - { - get - { - if (signedAttributeSet != null && signedAttributeTable == null) - { - signedAttributeTable = new Asn1.Cms.AttributeTable(signedAttributeSet); - } - return signedAttributeTable; - } - } - - /** - * return a table of the unsigned attributes indexed by - * the OID of the attribute. - */ - public Asn1.Cms.AttributeTable UnsignedAttributes - { - get - { - if (unsignedAttributeSet != null && unsignedAttributeTable == null) - { - unsignedAttributeTable = new Asn1.Cms.AttributeTable(unsignedAttributeSet); - } - return unsignedAttributeTable; - } - } - - /** - * return the encoded signature - */ - public byte[] GetSignature() - { - return (byte[]) signature.Clone(); - } - - /** - * Return a SignerInformationStore containing the counter signatures attached to this - * signer. If no counter signatures are present an empty store is returned. - */ - public SignerInformationStore GetCounterSignatures() - { - // TODO There are several checks implied by the RFC3852 comments that are missing - - /* - The countersignature attribute MUST be an unsigned attribute; it MUST - NOT be a signed attribute, an authenticated attribute, an - unauthenticated attribute, or an unprotected attribute. - */ - Asn1.Cms.AttributeTable unsignedAttributeTable = UnsignedAttributes; - if (unsignedAttributeTable == null) - { - return new SignerInformationStore(Platform.CreateArrayList(0)); - } - - IList counterSignatures = Platform.CreateArrayList(); - - /* - The UnsignedAttributes syntax is defined as a SET OF Attributes. The - UnsignedAttributes in a signerInfo may include multiple instances of - the countersignature attribute. - */ - Asn1EncodableVector allCSAttrs = unsignedAttributeTable.GetAll(CmsAttributes.CounterSignature); - - foreach (Asn1.Cms.Attribute counterSignatureAttribute in allCSAttrs) - { - /* - A countersignature attribute can have multiple attribute values. The - syntax is defined as a SET OF AttributeValue, and there MUST be one - or more instances of AttributeValue present. - */ - Asn1Set values = counterSignatureAttribute.AttrValues; - if (values.Count < 1) - { - // TODO Throw an appropriate exception? - } - - foreach (Asn1Encodable asn1Obj in values) - { - /* - Countersignature values have the same meaning as SignerInfo values - for ordinary signatures, except that: - - 1. The signedAttributes field MUST NOT contain a content-type - attribute; there is no content type for countersignatures. - - 2. The signedAttributes field MUST contain a message-digest - attribute if it contains any other attributes. - - 3. The input to the message-digesting process is the contents - octets of the DER encoding of the signatureValue field of the - SignerInfo value with which the attribute is associated. - */ - SignerInfo si = SignerInfo.GetInstance(asn1Obj.ToAsn1Object()); - - string digestName = CmsSignedHelper.Instance.GetDigestAlgName(si.DigestAlgorithm.Algorithm.Id); - - counterSignatures.Add(new SignerInformation(si, null, null, new CounterSignatureDigestCalculator(digestName, GetSignature()))); - } - } - - return new SignerInformationStore(counterSignatures); - } - - /** - * return the DER encoding of the signed attributes. - * @throws IOException if an encoding error occurs. - */ - public byte[] GetEncodedSignedAttributes() - { - return signedAttributeSet == null - ? null - : signedAttributeSet.GetEncoded(Asn1Encodable.Der); - } - - private bool DoVerify( - AsymmetricKeyParameter key) - { - string digestName = Helper.GetDigestAlgName(this.DigestAlgOid); - IDigest digest = Helper.GetDigestInstance(digestName); - - DerObjectIdentifier sigAlgOid = this.encryptionAlgorithm.Algorithm; - Asn1Encodable sigParams = this.encryptionAlgorithm.Parameters; - ISigner sig; - - if (sigAlgOid.Equals(Asn1.Pkcs.PkcsObjectIdentifiers.IdRsassaPss)) - { - // RFC 4056 2.2 - // When the id-RSASSA-PSS algorithm identifier is used for a signature, - // the AlgorithmIdentifier parameters field MUST contain RSASSA-PSS-params. - if (sigParams == null) - throw new CmsException("RSASSA-PSS signature must specify algorithm parameters"); - - try - { - // TODO Provide abstract configuration mechanism - // (via alternate SignerUtilities.GetSigner method taking ASN.1 params) - - Asn1.Pkcs.RsassaPssParameters pss = Asn1.Pkcs.RsassaPssParameters.GetInstance( - sigParams.ToAsn1Object()); - - if (!pss.HashAlgorithm.Algorithm.Equals(this.digestAlgorithm.Algorithm)) - throw new CmsException("RSASSA-PSS signature parameters specified incorrect hash algorithm"); - if (!pss.MaskGenAlgorithm.Algorithm.Equals(Asn1.Pkcs.PkcsObjectIdentifiers.IdMgf1)) - throw new CmsException("RSASSA-PSS signature parameters specified unknown MGF"); - - IDigest pssDigest = DigestUtilities.GetDigest(pss.HashAlgorithm.Algorithm); - int saltLength = pss.SaltLength.Value.IntValue; - byte trailerField = (byte) pss.TrailerField.Value.IntValue; - - // RFC 4055 3.1 - // The value MUST be 1, which represents the trailer field with hexadecimal value 0xBC - if (trailerField != 1) - throw new CmsException("RSASSA-PSS signature parameters must have trailerField of 1"); - - sig = new PssSigner(new RsaBlindedEngine(), pssDigest, saltLength); - } - catch (Exception e) - { - throw new CmsException("failed to set RSASSA-PSS signature parameters", e); - } - } - else - { - // TODO Probably too strong a check at the moment -// if (sigParams != null) -// throw new CmsException("unrecognised signature parameters provided"); - - string signatureName = digestName + "with" + Helper.GetEncryptionAlgName(this.EncryptionAlgOid); - - sig = Helper.GetSignatureInstance(signatureName); - - //sig = Helper.GetSignatureInstance(this.EncryptionAlgOid); - //sig = SignerUtilities.GetSigner(sigAlgOid); - } - - try - { - if (digestCalculator != null) - { - resultDigest = digestCalculator.GetDigest(); - } - else - { - if (content != null) - { - content.Write(new DigOutputStream(digest)); - } - else if (signedAttributeSet == null) - { - // TODO Get rid of this exception and just treat content==null as empty not missing? - throw new CmsException("data not encapsulated in signature - use detached constructor."); - } - - resultDigest = DigestUtilities.DoFinal(digest); - } - } - catch (IOException e) - { - throw new CmsException("can't process mime object to create signature.", e); - } - - // RFC 3852 11.1 Check the content-type attribute is correct - { - Asn1Object validContentType = GetSingleValuedSignedAttribute( - CmsAttributes.ContentType, "content-type"); - if (validContentType == null) - { - if (!isCounterSignature && signedAttributeSet != null) - throw new CmsException("The content-type attribute type MUST be present whenever signed attributes are present in signed-data"); - } - else - { - if (isCounterSignature) - throw new CmsException("[For counter signatures,] the signedAttributes field MUST NOT contain a content-type attribute"); - - if (!(validContentType is DerObjectIdentifier)) - throw new CmsException("content-type attribute value not of ASN.1 type 'OBJECT IDENTIFIER'"); - - DerObjectIdentifier signedContentType = (DerObjectIdentifier)validContentType; - - if (!signedContentType.Equals(contentType)) - throw new CmsException("content-type attribute value does not match eContentType"); - } - } - - // RFC 3852 11.2 Check the message-digest attribute is correct - { - Asn1Object validMessageDigest = GetSingleValuedSignedAttribute( - CmsAttributes.MessageDigest, "message-digest"); - if (validMessageDigest == null) - { - if (signedAttributeSet != null) - throw new CmsException("the message-digest signed attribute type MUST be present when there are any signed attributes present"); - } - else - { - if (!(validMessageDigest is Asn1OctetString)) - { - throw new CmsException("message-digest attribute value not of ASN.1 type 'OCTET STRING'"); - } - - Asn1OctetString signedMessageDigest = (Asn1OctetString)validMessageDigest; - - if (!Arrays.AreEqual(resultDigest, signedMessageDigest.GetOctets())) - throw new CmsException("message-digest attribute value does not match calculated value"); - } - } - - // RFC 3852 11.4 Validate countersignature attribute(s) - { - Asn1.Cms.AttributeTable signedAttrTable = this.SignedAttributes; - if (signedAttrTable != null - && signedAttrTable.GetAll(CmsAttributes.CounterSignature).Count > 0) - { - throw new CmsException("A countersignature attribute MUST NOT be a signed attribute"); - } - - Asn1.Cms.AttributeTable unsignedAttrTable = this.UnsignedAttributes; - if (unsignedAttrTable != null) - { - foreach (Asn1.Cms.Attribute csAttr in unsignedAttrTable.GetAll(CmsAttributes.CounterSignature)) - { - if (csAttr.AttrValues.Count < 1) - throw new CmsException("A countersignature attribute MUST contain at least one AttributeValue"); - - // Note: We don't recursively validate the countersignature value - } - } - } - - try - { - sig.Init(false, key); - - if (signedAttributeSet == null) - { - if (digestCalculator != null) - { - // need to decrypt signature and check message bytes - return VerifyDigest(resultDigest, key, this.GetSignature()); - } - else if (content != null) - { - // TODO Use raw signature of the hash value instead - content.Write(new SigOutputStream(sig)); - } - } - else - { - byte[] tmp = this.GetEncodedSignedAttributes(); - sig.BlockUpdate(tmp, 0, tmp.Length); - } - - return sig.VerifySignature(this.GetSignature()); - } - catch (InvalidKeyException e) - { - throw new CmsException("key not appropriate to signature in message.", e); - } - catch (IOException e) - { - throw new CmsException("can't process mime object to create signature.", e); - } - catch (SignatureException e) - { - throw new CmsException("invalid signature format in message: " + e.Message, e); - } - } - - private bool IsNull( - Asn1Encodable o) - { - return (o is Asn1Null) || (o == null); - } - - private DigestInfo DerDecode( - byte[] encoding) - { - if (encoding[0] != (int)(Asn1Tags.Constructed | Asn1Tags.Sequence)) - { - throw new IOException("not a digest info object"); - } - - DigestInfo digInfo = DigestInfo.GetInstance(Asn1Object.FromByteArray(encoding)); - - // length check to avoid Bleichenbacher vulnerability - - if (digInfo.GetEncoded().Length != encoding.Length) - { - throw new CmsException("malformed RSA signature"); - } - - return digInfo; - } - - private bool VerifyDigest( - byte[] digest, - AsymmetricKeyParameter key, - byte[] signature) - { - string algorithm = Helper.GetEncryptionAlgName(this.EncryptionAlgOid); - - try - { - if (algorithm.Equals("RSA")) - { - IBufferedCipher c = CmsEnvelopedHelper.Instance.CreateAsymmetricCipher("RSA/ECB/PKCS1Padding"); - - c.Init(false, key); - - byte[] decrypt = c.DoFinal(signature); - - DigestInfo digInfo = DerDecode(decrypt); - - if (!digInfo.AlgorithmID.Algorithm.Equals(digestAlgorithm.Algorithm)) - { - return false; - } - - if (!IsNull(digInfo.AlgorithmID.Parameters)) - { - return false; - } - - byte[] sigHash = digInfo.GetDigest(); - - return Arrays.ConstantTimeAreEqual(digest, sigHash); - } - else if (algorithm.Equals("DSA")) - { - ISigner sig = SignerUtilities.GetSigner("NONEwithDSA"); - - sig.Init(false, key); - - sig.BlockUpdate(digest, 0, digest.Length); - - return sig.VerifySignature(signature); - } - else - { - throw new CmsException("algorithm: " + algorithm + " not supported in base signatures."); - } - } - catch (SecurityUtilityException e) - { - throw e; - } - catch (GeneralSecurityException e) - { - throw new CmsException("Exception processing signature: " + e, e); - } - catch (IOException e) - { - throw new CmsException("Exception decoding signature: " + e, e); - } - } - - /** - * verify that the given public key successfully handles and confirms the - * signature associated with this signer. - */ - public bool Verify( - AsymmetricKeyParameter pubKey) - { - if (pubKey.IsPrivate) - throw new ArgumentException("Expected public key", "pubKey"); - - // Optional, but still need to validate if present - GetSigningTime(); - - return DoVerify(pubKey); - } - - /** - * verify that the given certificate successfully handles and confirms - * the signature associated with this signer and, if a signingTime - * attribute is available, that the certificate was valid at the time the - * signature was generated. - */ - public bool Verify( - X509Certificate cert) - { - Asn1.Cms.Time signingTime = GetSigningTime(); - if (signingTime != null) - { - cert.CheckValidity(signingTime.Date); - } - - return DoVerify(cert.GetPublicKey()); - } - - /** - * Return the base ASN.1 CMS structure that this object contains. - * - * @return an object containing a CMS SignerInfo structure. - */ - public SignerInfo ToSignerInfo() - { - return info; - } - - private Asn1Object GetSingleValuedSignedAttribute( - DerObjectIdentifier attrOID, string printableName) - { - - Asn1.Cms.AttributeTable unsignedAttrTable = this.UnsignedAttributes; - if (unsignedAttrTable != null - && unsignedAttrTable.GetAll(attrOID).Count > 0) - { - throw new CmsException("The " + printableName - + " attribute MUST NOT be an unsigned attribute"); - } - - Asn1.Cms.AttributeTable signedAttrTable = this.SignedAttributes; - if (signedAttrTable == null) - { - return null; - } - - Asn1EncodableVector v = signedAttrTable.GetAll(attrOID); - switch (v.Count) - { - case 0: - return null; - case 1: - Asn1.Cms.Attribute t = (Asn1.Cms.Attribute) v[0]; - Asn1Set attrValues = t.AttrValues; - - if (attrValues.Count != 1) - throw new CmsException("A " + printableName - + " attribute MUST have a single attribute value"); - - return attrValues[0].ToAsn1Object(); - default: - throw new CmsException("The SignedAttributes in a signerInfo MUST NOT include multiple instances of the " - + printableName + " attribute"); - } - } - - private Asn1.Cms.Time GetSigningTime() - { - Asn1Object validSigningTime = GetSingleValuedSignedAttribute( - CmsAttributes.SigningTime, "signing-time"); - - if (validSigningTime == null) - return null; - - try - { - return Asn1.Cms.Time.GetInstance(validSigningTime); - } - catch (ArgumentException) - { - throw new CmsException("signing-time attribute value not a valid 'Time' structure"); - } - } - - /** - * Return a signer information object with the passed in unsigned - * attributes replacing the ones that are current associated with - * the object passed in. - * - * @param signerInformation the signerInfo to be used as the basis. - * @param unsignedAttributes the unsigned attributes to add. - * @return a copy of the original SignerInformationObject with the changed attributes. - */ - public static SignerInformation ReplaceUnsignedAttributes( - SignerInformation signerInformation, - Asn1.Cms.AttributeTable unsignedAttributes) - { - SignerInfo sInfo = signerInformation.info; - Asn1Set unsignedAttr = null; - - if (unsignedAttributes != null) - { - unsignedAttr = new DerSet(unsignedAttributes.ToAsn1EncodableVector()); - } - - return new SignerInformation( - new SignerInfo( - sInfo.SignerID, - sInfo.DigestAlgorithm, - sInfo.AuthenticatedAttributes, - sInfo.DigestEncryptionAlgorithm, - sInfo.EncryptedDigest, - unsignedAttr), - signerInformation.contentType, - signerInformation.content, - null); - } - - /** - * Return a signer information object with passed in SignerInformationStore representing counter - * signatures attached as an unsigned attribute. - * - * @param signerInformation the signerInfo to be used as the basis. - * @param counterSigners signer info objects carrying counter signature. - * @return a copy of the original SignerInformationObject with the changed attributes. - */ - public static SignerInformation AddCounterSigners( - SignerInformation signerInformation, - SignerInformationStore counterSigners) - { - // TODO Perform checks from RFC 3852 11.4 - - SignerInfo sInfo = signerInformation.info; - Asn1.Cms.AttributeTable unsignedAttr = signerInformation.UnsignedAttributes; - Asn1EncodableVector v; - - if (unsignedAttr != null) - { - v = unsignedAttr.ToAsn1EncodableVector(); - } - else - { - v = new Asn1EncodableVector(); - } - - Asn1EncodableVector sigs = new Asn1EncodableVector(); - - foreach (SignerInformation sigInf in counterSigners.GetSigners()) - { - sigs.Add(sigInf.ToSignerInfo()); - } - - v.Add(new Asn1.Cms.Attribute(CmsAttributes.CounterSignature, new DerSet(sigs))); - - return new SignerInformation( - new SignerInfo( - sInfo.SignerID, - sInfo.DigestAlgorithm, - sInfo.AuthenticatedAttributes, - sInfo.DigestEncryptionAlgorithm, - sInfo.EncryptedDigest, - new DerSet(v)), - signerInformation.contentType, - signerInformation.content, - null); - } - } -} diff --git a/bc-sharp-crypto/src/cms/SignerInformationStore.cs b/bc-sharp-crypto/src/cms/SignerInformationStore.cs deleted file mode 100644 index 2794086..0000000 --- a/bc-sharp-crypto/src/cms/SignerInformationStore.cs +++ /dev/null @@ -1,95 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Cms -{ - public class SignerInformationStore - { - private readonly IList all; //ArrayList[SignerInformation] - private readonly IDictionary table = Platform.CreateHashtable(); // Hashtable[SignerID, ArrayList[SignerInformation]] - - /** - * Create a store containing a single SignerInformation object. - * - * @param signerInfo the signer information to contain. - */ - public SignerInformationStore( - SignerInformation signerInfo) - { - this.all = Platform.CreateArrayList(1); - this.all.Add(signerInfo); - - SignerID sid = signerInfo.SignerID; - - table[sid] = all; - } - - /** - * Create a store containing a collection of SignerInformation objects. - * - * @param signerInfos a collection signer information objects to contain. - */ - public SignerInformationStore( - ICollection signerInfos) - { - foreach (SignerInformation signer in signerInfos) - { - SignerID sid = signer.SignerID; - IList list = (IList)table[sid]; - - if (list == null) - { - table[sid] = list = Platform.CreateArrayList(1); - } - - list.Add(signer); - } - - this.all = Platform.CreateArrayList(signerInfos); - } - - /** - * Return the first SignerInformation object that matches the - * passed in selector. Null if there are no matches. - * - * @param selector to identify a signer - * @return a single SignerInformation object. Null if none matches. - */ - public SignerInformation GetFirstSigner( - SignerID selector) - { - IList list = (IList) table[selector]; - - return list == null ? null : (SignerInformation) list[0]; - } - - /// The number of signers in the collection. - public int Count - { - get { return all.Count; } - } - - /// An ICollection of all signers in the collection - public ICollection GetSigners() - { - return Platform.CreateArrayList(all); - } - - /** - * Return possible empty collection with signers matching the passed in SignerID - * - * @param selector a signer id to select against. - * @return a collection of SignerInformation objects. - */ - public ICollection GetSigners( - SignerID selector) - { - IList list = (IList) table[selector]; - - return list == null ? Platform.CreateArrayList() : Platform.CreateArrayList(list); - } - } -} diff --git a/bc-sharp-crypto/src/cms/SimpleAttributeTableGenerator.cs b/bc-sharp-crypto/src/cms/SimpleAttributeTableGenerator.cs deleted file mode 100644 index b3df21c..0000000 --- a/bc-sharp-crypto/src/cms/SimpleAttributeTableGenerator.cs +++ /dev/null @@ -1,28 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1.Cms; - -namespace Org.BouncyCastle.Cms -{ - /** - * Basic generator that just returns a preconstructed attribute table - */ - public class SimpleAttributeTableGenerator - : CmsAttributeTableGenerator - { - private readonly AttributeTable attributes; - - public SimpleAttributeTableGenerator( - AttributeTable attributes) - { - this.attributes = attributes; - } - - public virtual AttributeTable GetAttributes( - IDictionary parameters) - { - return attributes; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/AsymmetricCipherKeyPair.cs b/bc-sharp-crypto/src/crypto/AsymmetricCipherKeyPair.cs deleted file mode 100644 index b00a3dc..0000000 --- a/bc-sharp-crypto/src/crypto/AsymmetricCipherKeyPair.cs +++ /dev/null @@ -1,52 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto -{ - /** - * a holding class for public/private parameter pairs. - */ - public class AsymmetricCipherKeyPair - { - private readonly AsymmetricKeyParameter publicParameter; - private readonly AsymmetricKeyParameter privateParameter; - - /** - * basic constructor. - * - * @param publicParam a public key parameters object. - * @param privateParam the corresponding private key parameters. - */ - public AsymmetricCipherKeyPair( - AsymmetricKeyParameter publicParameter, - AsymmetricKeyParameter privateParameter) - { - if (publicParameter.IsPrivate) - throw new ArgumentException("Expected a public key", "publicParameter"); - if (!privateParameter.IsPrivate) - throw new ArgumentException("Expected a private key", "privateParameter"); - - this.publicParameter = publicParameter; - this.privateParameter = privateParameter; - } - - /** - * return the public key parameters. - * - * @return the public key parameters. - */ - public AsymmetricKeyParameter Public - { - get { return publicParameter; } - } - - /** - * return the private key parameters. - * - * @return the private key parameters. - */ - public AsymmetricKeyParameter Private - { - get { return privateParameter; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/AsymmetricKeyParameter.cs b/bc-sharp-crypto/src/crypto/AsymmetricKeyParameter.cs deleted file mode 100644 index 7502ee3..0000000 --- a/bc-sharp-crypto/src/crypto/AsymmetricKeyParameter.cs +++ /dev/null @@ -1,47 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; - -namespace Org.BouncyCastle.Crypto -{ - public abstract class AsymmetricKeyParameter - : ICipherParameters - { - private readonly bool privateKey; - - protected AsymmetricKeyParameter( - bool privateKey) - { - this.privateKey = privateKey; - } - - public bool IsPrivate - { - get { return privateKey; } - } - - public override bool Equals( - object obj) - { - AsymmetricKeyParameter other = obj as AsymmetricKeyParameter; - - if (other == null) - { - return false; - } - - return Equals(other); - } - - protected bool Equals( - AsymmetricKeyParameter other) - { - return privateKey == other.privateKey; - } - - public override int GetHashCode() - { - return privateKey.GetHashCode(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/BufferedAeadBlockCipher.cs b/bc-sharp-crypto/src/crypto/BufferedAeadBlockCipher.cs deleted file mode 100644 index 7ba4109..0000000 --- a/bc-sharp-crypto/src/crypto/BufferedAeadBlockCipher.cs +++ /dev/null @@ -1,247 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Modes; -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto -{ - /** - * The AEAD block ciphers already handle buffering internally, so this class - * just takes care of implementing IBufferedCipher methods. - */ - public class BufferedAeadBlockCipher - : BufferedCipherBase - { - private readonly IAeadBlockCipher cipher; - - public BufferedAeadBlockCipher( - IAeadBlockCipher cipher) - { - if (cipher == null) - throw new ArgumentNullException("cipher"); - - this.cipher = cipher; - } - - public override string AlgorithmName - { - get { return cipher.AlgorithmName; } - } - - /** - * initialise the cipher. - * - * @param forEncryption if true the cipher is initialised for - * encryption, if false for decryption. - * @param param the key and other data required by the cipher. - * @exception ArgumentException if the parameters argument is - * inappropriate. - */ - public override void Init( - bool forEncryption, - ICipherParameters parameters) - { - if (parameters is ParametersWithRandom) - { - parameters = ((ParametersWithRandom) parameters).Parameters; - } - - cipher.Init(forEncryption, parameters); - } - - /** - * return the blocksize for the underlying cipher. - * - * @return the blocksize for the underlying cipher. - */ - public override int GetBlockSize() - { - return cipher.GetBlockSize(); - } - - /** - * return the size of the output buffer required for an update - * an input of len bytes. - * - * @param len the length of the input. - * @return the space required to accommodate a call to update - * with len bytes of input. - */ - public override int GetUpdateOutputSize( - int length) - { - return cipher.GetUpdateOutputSize(length); - } - - /** - * return the size of the output buffer required for an update plus a - * doFinal with an input of len bytes. - * - * @param len the length of the input. - * @return the space required to accommodate a call to update and doFinal - * with len bytes of input. - */ - public override int GetOutputSize( - int length) - { - return cipher.GetOutputSize(length); - } - - /** - * process a single byte, producing an output block if necessary. - * - * @param in the input byte. - * @param out the space for any output that might be produced. - * @param outOff the offset from which the output will be copied. - * @return the number of output bytes copied to out. - * @exception DataLengthException if there isn't enough space in out. - * @exception InvalidOperationException if the cipher isn't initialised. - */ - public override int ProcessByte( - byte input, - byte[] output, - int outOff) - { - return cipher.ProcessByte(input, output, outOff); - } - - public override byte[] ProcessByte( - byte input) - { - int outLength = GetUpdateOutputSize(1); - - byte[] outBytes = outLength > 0 ? new byte[outLength] : null; - - int pos = ProcessByte(input, outBytes, 0); - - if (outLength > 0 && pos < outLength) - { - byte[] tmp = new byte[pos]; - Array.Copy(outBytes, 0, tmp, 0, pos); - outBytes = tmp; - } - - return outBytes; - } - - public override byte[] ProcessBytes( - byte[] input, - int inOff, - int length) - { - if (input == null) - throw new ArgumentNullException("input"); - if (length < 1) - return null; - - int outLength = GetUpdateOutputSize(length); - - byte[] outBytes = outLength > 0 ? new byte[outLength] : null; - - int pos = ProcessBytes(input, inOff, length, outBytes, 0); - - if (outLength > 0 && pos < outLength) - { - byte[] tmp = new byte[pos]; - Array.Copy(outBytes, 0, tmp, 0, pos); - outBytes = tmp; - } - - return outBytes; - } - - /** - * process an array of bytes, producing output if necessary. - * - * @param in the input byte array. - * @param inOff the offset at which the input data starts. - * @param len the number of bytes to be copied out of the input array. - * @param out the space for any output that might be produced. - * @param outOff the offset from which the output will be copied. - * @return the number of output bytes copied to out. - * @exception DataLengthException if there isn't enough space in out. - * @exception InvalidOperationException if the cipher isn't initialised. - */ - public override int ProcessBytes( - byte[] input, - int inOff, - int length, - byte[] output, - int outOff) - { - return cipher.ProcessBytes(input, inOff, length, output, outOff); - } - - public override byte[] DoFinal() - { - byte[] outBytes = new byte[GetOutputSize(0)]; - - int pos = DoFinal(outBytes, 0); - - if (pos < outBytes.Length) - { - byte[] tmp = new byte[pos]; - Array.Copy(outBytes, 0, tmp, 0, pos); - outBytes = tmp; - } - - return outBytes; - } - - public override byte[] DoFinal( - byte[] input, - int inOff, - int inLen) - { - if (input == null) - throw new ArgumentNullException("input"); - - byte[] outBytes = new byte[GetOutputSize(inLen)]; - - int pos = (inLen > 0) - ? ProcessBytes(input, inOff, inLen, outBytes, 0) - : 0; - - pos += DoFinal(outBytes, pos); - - if (pos < outBytes.Length) - { - byte[] tmp = new byte[pos]; - Array.Copy(outBytes, 0, tmp, 0, pos); - outBytes = tmp; - } - - return outBytes; - } - - /** - * Process the last block in the buffer. - * - * @param out the array the block currently being held is copied into. - * @param outOff the offset at which the copying starts. - * @return the number of output bytes copied to out. - * @exception DataLengthException if there is insufficient space in out for - * the output, or the input is not block size aligned and should be. - * @exception InvalidOperationException if the underlying cipher is not - * initialised. - * @exception InvalidCipherTextException if padding is expected and not found. - * @exception DataLengthException if the input is not block size - * aligned. - */ - public override int DoFinal( - byte[] output, - int outOff) - { - return cipher.DoFinal(output, outOff); - } - - /** - * Reset the buffer and cipher. After resetting the object is in the same - * state as it was after the last init (if there was one). - */ - public override void Reset() - { - cipher.Reset(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/BufferedAsymmetricBlockCipher.cs b/bc-sharp-crypto/src/crypto/BufferedAsymmetricBlockCipher.cs deleted file mode 100644 index 09ec59f..0000000 --- a/bc-sharp-crypto/src/crypto/BufferedAsymmetricBlockCipher.cs +++ /dev/null @@ -1,152 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Crypto.Engines; - -namespace Org.BouncyCastle.Crypto -{ - /** - * a buffer wrapper for an asymmetric block cipher, allowing input - * to be accumulated in a piecemeal fashion until final processing. - */ - public class BufferedAsymmetricBlockCipher - : BufferedCipherBase - { - private readonly IAsymmetricBlockCipher cipher; - - private byte[] buffer; - private int bufOff; - - /** - * base constructor. - * - * @param cipher the cipher this buffering object wraps. - */ - public BufferedAsymmetricBlockCipher( - IAsymmetricBlockCipher cipher) - { - this.cipher = cipher; - } - - /** - * return the amount of data sitting in the buffer. - * - * @return the amount of data sitting in the buffer. - */ - internal int GetBufferPosition() - { - return bufOff; - } - - public override string AlgorithmName - { - get { return cipher.AlgorithmName; } - } - - public override int GetBlockSize() - { - return cipher.GetInputBlockSize(); - } - - public override int GetOutputSize( - int length) - { - return cipher.GetOutputBlockSize(); - } - - public override int GetUpdateOutputSize( - int length) - { - return 0; - } - - /** - * initialise the buffer and the underlying cipher. - * - * @param forEncryption if true the cipher is initialised for - * encryption, if false for decryption. - * @param param the key and other data required by the cipher. - */ - public override void Init( - bool forEncryption, - ICipherParameters parameters) - { - Reset(); - - cipher.Init(forEncryption, parameters); - - // - // we allow for an extra byte where people are using their own padding - // mechanisms on a raw cipher. - // - this.buffer = new byte[cipher.GetInputBlockSize() + (forEncryption ? 1 : 0)]; - this.bufOff = 0; - } - - public override byte[] ProcessByte( - byte input) - { - if (bufOff >= buffer.Length) - throw new DataLengthException("attempt to process message to long for cipher"); - - buffer[bufOff++] = input; - return null; - } - - public override byte[] ProcessBytes( - byte[] input, - int inOff, - int length) - { - if (length < 1) - return null; - - if (input == null) - throw new ArgumentNullException("input"); - if (bufOff + length > buffer.Length) - throw new DataLengthException("attempt to process message to long for cipher"); - - Array.Copy(input, inOff, buffer, bufOff, length); - bufOff += length; - return null; - } - - /** - * process the contents of the buffer using the underlying - * cipher. - * - * @return the result of the encryption/decryption process on the - * buffer. - * @exception InvalidCipherTextException if we are given a garbage block. - */ - public override byte[] DoFinal() - { - byte[] outBytes = bufOff > 0 - ? cipher.ProcessBlock(buffer, 0, bufOff) - : EmptyBuffer; - - Reset(); - - return outBytes; - } - - public override byte[] DoFinal( - byte[] input, - int inOff, - int length) - { - ProcessBytes(input, inOff, length); - return DoFinal(); - } - - /// Reset the buffer - public override void Reset() - { - if (buffer != null) - { - Array.Clear(buffer, 0, buffer.Length); - bufOff = 0; - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/BufferedBlockCipher.cs b/bc-sharp-crypto/src/crypto/BufferedBlockCipher.cs deleted file mode 100644 index c87d2da..0000000 --- a/bc-sharp-crypto/src/crypto/BufferedBlockCipher.cs +++ /dev/null @@ -1,367 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto -{ - /** - * A wrapper class that allows block ciphers to be used to process data in - * a piecemeal fashion. The BufferedBlockCipher outputs a block only when the - * buffer is full and more data is being added, or on a doFinal. - *

- * Note: in the case where the underlying cipher is either a CFB cipher or an - * OFB one the last block may not be a multiple of the block size. - *

- */ - public class BufferedBlockCipher - : BufferedCipherBase - { - internal byte[] buf; - internal int bufOff; - internal bool forEncryption; - internal IBlockCipher cipher; - - /** - * constructor for subclasses - */ - protected BufferedBlockCipher() - { - } - - /** - * Create a buffered block cipher without padding. - * - * @param cipher the underlying block cipher this buffering object wraps. - * false otherwise. - */ - public BufferedBlockCipher( - IBlockCipher cipher) - { - if (cipher == null) - throw new ArgumentNullException("cipher"); - - this.cipher = cipher; - buf = new byte[cipher.GetBlockSize()]; - bufOff = 0; - } - - public override string AlgorithmName - { - get { return cipher.AlgorithmName; } - } - - /** - * initialise the cipher. - * - * @param forEncryption if true the cipher is initialised for - * encryption, if false for decryption. - * @param param the key and other data required by the cipher. - * @exception ArgumentException if the parameters argument is - * inappropriate. - */ - // Note: This doubles as the Init in the event that this cipher is being used as an IWrapper - public override void Init( - bool forEncryption, - ICipherParameters parameters) - { - this.forEncryption = forEncryption; - - ParametersWithRandom pwr = parameters as ParametersWithRandom; - if (pwr != null) - parameters = pwr.Parameters; - - Reset(); - - cipher.Init(forEncryption, parameters); - } - - /** - * return the blocksize for the underlying cipher. - * - * @return the blocksize for the underlying cipher. - */ - public override int GetBlockSize() - { - return cipher.GetBlockSize(); - } - - /** - * return the size of the output buffer required for an update - * an input of len bytes. - * - * @param len the length of the input. - * @return the space required to accommodate a call to update - * with len bytes of input. - */ - public override int GetUpdateOutputSize( - int length) - { - int total = length + bufOff; - int leftOver = total % buf.Length; - return total - leftOver; - } - - /** - * return the size of the output buffer required for an update plus a - * doFinal with an input of len bytes. - * - * @param len the length of the input. - * @return the space required to accommodate a call to update and doFinal - * with len bytes of input. - */ - public override int GetOutputSize( - int length) - { - // Note: Can assume IsPartialBlockOkay is true for purposes of this calculation - return length + bufOff; - } - - /** - * process a single byte, producing an output block if necessary. - * - * @param in the input byte. - * @param out the space for any output that might be produced. - * @param outOff the offset from which the output will be copied. - * @return the number of output bytes copied to out. - * @exception DataLengthException if there isn't enough space in out. - * @exception InvalidOperationException if the cipher isn't initialised. - */ - public override int ProcessByte( - byte input, - byte[] output, - int outOff) - { - buf[bufOff++] = input; - - if (bufOff == buf.Length) - { - if ((outOff + buf.Length) > output.Length) - throw new DataLengthException("output buffer too short"); - - bufOff = 0; - return cipher.ProcessBlock(buf, 0, output, outOff); - } - - return 0; - } - - public override byte[] ProcessByte( - byte input) - { - int outLength = GetUpdateOutputSize(1); - - byte[] outBytes = outLength > 0 ? new byte[outLength] : null; - - int pos = ProcessByte(input, outBytes, 0); - - if (outLength > 0 && pos < outLength) - { - byte[] tmp = new byte[pos]; - Array.Copy(outBytes, 0, tmp, 0, pos); - outBytes = tmp; - } - - return outBytes; - } - - public override byte[] ProcessBytes( - byte[] input, - int inOff, - int length) - { - if (input == null) - throw new ArgumentNullException("input"); - if (length < 1) - return null; - - int outLength = GetUpdateOutputSize(length); - - byte[] outBytes = outLength > 0 ? new byte[outLength] : null; - - int pos = ProcessBytes(input, inOff, length, outBytes, 0); - - if (outLength > 0 && pos < outLength) - { - byte[] tmp = new byte[pos]; - Array.Copy(outBytes, 0, tmp, 0, pos); - outBytes = tmp; - } - - return outBytes; - } - - /** - * process an array of bytes, producing output if necessary. - * - * @param in the input byte array. - * @param inOff the offset at which the input data starts. - * @param len the number of bytes to be copied out of the input array. - * @param out the space for any output that might be produced. - * @param outOff the offset from which the output will be copied. - * @return the number of output bytes copied to out. - * @exception DataLengthException if there isn't enough space in out. - * @exception InvalidOperationException if the cipher isn't initialised. - */ - public override int ProcessBytes( - byte[] input, - int inOff, - int length, - byte[] output, - int outOff) - { - if (length < 1) - { - if (length < 0) - throw new ArgumentException("Can't have a negative input length!"); - - return 0; - } - - int blockSize = GetBlockSize(); - int outLength = GetUpdateOutputSize(length); - - if (outLength > 0) - { - Check.OutputLength(output, outOff, outLength, "output buffer too short"); - } - - int resultLen = 0; - int gapLen = buf.Length - bufOff; - if (length > gapLen) - { - Array.Copy(input, inOff, buf, bufOff, gapLen); - resultLen += cipher.ProcessBlock(buf, 0, output, outOff); - bufOff = 0; - length -= gapLen; - inOff += gapLen; - while (length > buf.Length) - { - resultLen += cipher.ProcessBlock(input, inOff, output, outOff + resultLen); - length -= blockSize; - inOff += blockSize; - } - } - Array.Copy(input, inOff, buf, bufOff, length); - bufOff += length; - if (bufOff == buf.Length) - { - resultLen += cipher.ProcessBlock(buf, 0, output, outOff + resultLen); - bufOff = 0; - } - return resultLen; - } - - public override byte[] DoFinal() - { - byte[] outBytes = EmptyBuffer; - - int length = GetOutputSize(0); - if (length > 0) - { - outBytes = new byte[length]; - - int pos = DoFinal(outBytes, 0); - if (pos < outBytes.Length) - { - byte[] tmp = new byte[pos]; - Array.Copy(outBytes, 0, tmp, 0, pos); - outBytes = tmp; - } - } - else - { - Reset(); - } - - return outBytes; - } - - public override byte[] DoFinal( - byte[] input, - int inOff, - int inLen) - { - if (input == null) - throw new ArgumentNullException("input"); - - int length = GetOutputSize(inLen); - - byte[] outBytes = EmptyBuffer; - - if (length > 0) - { - outBytes = new byte[length]; - - int pos = (inLen > 0) - ? ProcessBytes(input, inOff, inLen, outBytes, 0) - : 0; - - pos += DoFinal(outBytes, pos); - - if (pos < outBytes.Length) - { - byte[] tmp = new byte[pos]; - Array.Copy(outBytes, 0, tmp, 0, pos); - outBytes = tmp; - } - } - else - { - Reset(); - } - - return outBytes; - } - - /** - * Process the last block in the buffer. - * - * @param out the array the block currently being held is copied into. - * @param outOff the offset at which the copying starts. - * @return the number of output bytes copied to out. - * @exception DataLengthException if there is insufficient space in out for - * the output, or the input is not block size aligned and should be. - * @exception InvalidOperationException if the underlying cipher is not - * initialised. - * @exception InvalidCipherTextException if padding is expected and not found. - * @exception DataLengthException if the input is not block size - * aligned. - */ - public override int DoFinal( - byte[] output, - int outOff) - { - try - { - if (bufOff != 0) - { - Check.DataLength(!cipher.IsPartialBlockOkay, "data not block size aligned"); - Check.OutputLength(output, outOff, bufOff, "output buffer too short for DoFinal()"); - - // NB: Can't copy directly, or we may write too much output - cipher.ProcessBlock(buf, 0, buf, 0); - Array.Copy(buf, 0, output, outOff, bufOff); - } - - return bufOff; - } - finally - { - Reset(); - } - } - - /** - * Reset the buffer and cipher. After resetting the object is in the same - * state as it was after the last init (if there was one). - */ - public override void Reset() - { - Array.Clear(buf, 0, buf.Length); - bufOff = 0; - - cipher.Reset(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/BufferedCipherBase.cs b/bc-sharp-crypto/src/crypto/BufferedCipherBase.cs deleted file mode 100644 index 9d86102..0000000 --- a/bc-sharp-crypto/src/crypto/BufferedCipherBase.cs +++ /dev/null @@ -1,113 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto -{ - public abstract class BufferedCipherBase - : IBufferedCipher - { - protected static readonly byte[] EmptyBuffer = new byte[0]; - - public abstract string AlgorithmName { get; } - - public abstract void Init(bool forEncryption, ICipherParameters parameters); - - public abstract int GetBlockSize(); - - public abstract int GetOutputSize(int inputLen); - public abstract int GetUpdateOutputSize(int inputLen); - - public abstract byte[] ProcessByte(byte input); - - public virtual int ProcessByte( - byte input, - byte[] output, - int outOff) - { - byte[] outBytes = ProcessByte(input); - if (outBytes == null) - return 0; - if (outOff + outBytes.Length > output.Length) - throw new DataLengthException("output buffer too short"); - outBytes.CopyTo(output, outOff); - return outBytes.Length; - } - - public virtual byte[] ProcessBytes( - byte[] input) - { - return ProcessBytes(input, 0, input.Length); - } - - public abstract byte[] ProcessBytes(byte[] input, int inOff, int length); - - public virtual int ProcessBytes( - byte[] input, - byte[] output, - int outOff) - { - return ProcessBytes(input, 0, input.Length, output, outOff); - } - - public virtual int ProcessBytes( - byte[] input, - int inOff, - int length, - byte[] output, - int outOff) - { - byte[] outBytes = ProcessBytes(input, inOff, length); - if (outBytes == null) - return 0; - if (outOff + outBytes.Length > output.Length) - throw new DataLengthException("output buffer too short"); - outBytes.CopyTo(output, outOff); - return outBytes.Length; - } - - public abstract byte[] DoFinal(); - - public virtual byte[] DoFinal( - byte[] input) - { - return DoFinal(input, 0, input.Length); - } - - public abstract byte[] DoFinal( - byte[] input, - int inOff, - int length); - - public virtual int DoFinal( - byte[] output, - int outOff) - { - byte[] outBytes = DoFinal(); - if (outOff + outBytes.Length > output.Length) - throw new DataLengthException("output buffer too short"); - outBytes.CopyTo(output, outOff); - return outBytes.Length; - } - - public virtual int DoFinal( - byte[] input, - byte[] output, - int outOff) - { - return DoFinal(input, 0, input.Length, output, outOff); - } - - public virtual int DoFinal( - byte[] input, - int inOff, - int length, - byte[] output, - int outOff) - { - int len = ProcessBytes(input, inOff, length, output, outOff); - len += DoFinal(output, outOff + len); - return len; - } - - public abstract void Reset(); - } -} diff --git a/bc-sharp-crypto/src/crypto/BufferedIesCipher.cs b/bc-sharp-crypto/src/crypto/BufferedIesCipher.cs deleted file mode 100644 index 6dab4ae..0000000 --- a/bc-sharp-crypto/src/crypto/BufferedIesCipher.cs +++ /dev/null @@ -1,113 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Crypto.Engines; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto -{ - public class BufferedIesCipher - : BufferedCipherBase - { - private readonly IesEngine engine; - private bool forEncryption; - private MemoryStream buffer = new MemoryStream(); - - public BufferedIesCipher( - IesEngine engine) - { - if (engine == null) - throw new ArgumentNullException("engine"); - - this.engine = engine; - } - - public override string AlgorithmName - { - // TODO Create IESEngine.AlgorithmName - get { return "IES"; } - } - - public override void Init( - bool forEncryption, - ICipherParameters parameters) - { - this.forEncryption = forEncryption; - - // TODO - throw Platform.CreateNotImplementedException("IES"); - } - - public override int GetBlockSize() - { - return 0; - } - - public override int GetOutputSize( - int inputLen) - { - if (engine == null) - throw new InvalidOperationException("cipher not initialised"); - - int baseLen = inputLen + (int) buffer.Length; - return forEncryption - ? baseLen + 20 - : baseLen - 20; - } - - public override int GetUpdateOutputSize( - int inputLen) - { - return 0; - } - - public override byte[] ProcessByte( - byte input) - { - buffer.WriteByte(input); - return null; - } - - public override byte[] ProcessBytes( - byte[] input, - int inOff, - int length) - { - if (input == null) - throw new ArgumentNullException("input"); - if (inOff < 0) - throw new ArgumentException("inOff"); - if (length < 0) - throw new ArgumentException("length"); - if (inOff + length > input.Length) - throw new ArgumentException("invalid offset/length specified for input array"); - - buffer.Write(input, inOff, length); - return null; - } - - public override byte[] DoFinal() - { - byte[] buf = buffer.ToArray(); - - Reset(); - - return engine.ProcessBlock(buf, 0, buf.Length); - } - - public override byte[] DoFinal( - byte[] input, - int inOff, - int length) - { - ProcessBytes(input, inOff, length); - return DoFinal(); - } - - public override void Reset() - { - buffer.SetLength(0); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/BufferedStreamCipher.cs b/bc-sharp-crypto/src/crypto/BufferedStreamCipher.cs deleted file mode 100644 index 2d4987b..0000000 --- a/bc-sharp-crypto/src/crypto/BufferedStreamCipher.cs +++ /dev/null @@ -1,131 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto -{ - public class BufferedStreamCipher - : BufferedCipherBase - { - private readonly IStreamCipher cipher; - - public BufferedStreamCipher( - IStreamCipher cipher) - { - if (cipher == null) - throw new ArgumentNullException("cipher"); - - this.cipher = cipher; - } - - public override string AlgorithmName - { - get { return cipher.AlgorithmName; } - } - - public override void Init( - bool forEncryption, - ICipherParameters parameters) - { - if (parameters is ParametersWithRandom) - { - parameters = ((ParametersWithRandom) parameters).Parameters; - } - - cipher.Init(forEncryption, parameters); - } - - public override int GetBlockSize() - { - return 0; - } - - public override int GetOutputSize( - int inputLen) - { - return inputLen; - } - - public override int GetUpdateOutputSize( - int inputLen) - { - return inputLen; - } - - public override byte[] ProcessByte( - byte input) - { - return new byte[]{ cipher.ReturnByte(input) }; - } - - public override int ProcessByte( - byte input, - byte[] output, - int outOff) - { - if (outOff >= output.Length) - throw new DataLengthException("output buffer too short"); - - output[outOff] = cipher.ReturnByte(input); - return 1; - } - - public override byte[] ProcessBytes( - byte[] input, - int inOff, - int length) - { - if (length < 1) - return null; - - byte[] output = new byte[length]; - cipher.ProcessBytes(input, inOff, length, output, 0); - return output; - } - - public override int ProcessBytes( - byte[] input, - int inOff, - int length, - byte[] output, - int outOff) - { - if (length < 1) - return 0; - - if (length > 0) - { - cipher.ProcessBytes(input, inOff, length, output, outOff); - } - - return length; - } - - public override byte[] DoFinal() - { - Reset(); - - return EmptyBuffer; - } - - public override byte[] DoFinal( - byte[] input, - int inOff, - int length) - { - if (length < 1) - return EmptyBuffer; - - byte[] output = ProcessBytes(input, inOff, length); - - Reset(); - - return output; - } - - public override void Reset() - { - cipher.Reset(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/Check.cs b/bc-sharp-crypto/src/crypto/Check.cs deleted file mode 100644 index 96a05c6..0000000 --- a/bc-sharp-crypto/src/crypto/Check.cs +++ /dev/null @@ -1,25 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto -{ - internal class Check - { - internal static void DataLength(bool condition, string msg) - { - if (condition) - throw new DataLengthException(msg); - } - - internal static void DataLength(byte[] buf, int off, int len, string msg) - { - if (off + len > buf.Length) - throw new DataLengthException(msg); - } - - internal static void OutputLength(byte[] buf, int off, int len, string msg) - { - if (off + len > buf.Length) - throw new OutputLengthException(msg); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/CipherKeyGenerator.cs b/bc-sharp-crypto/src/crypto/CipherKeyGenerator.cs deleted file mode 100644 index d8d9b29..0000000 --- a/bc-sharp-crypto/src/crypto/CipherKeyGenerator.cs +++ /dev/null @@ -1,83 +0,0 @@ -using System; - -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto -{ - /** - * The base class for symmetric, or secret, cipher key generators. - */ - public class CipherKeyGenerator - { - protected internal SecureRandom random; - protected internal int strength; - private bool uninitialised = true; - private int defaultStrength; - - public CipherKeyGenerator() - { - } - - internal CipherKeyGenerator( - int defaultStrength) - { - if (defaultStrength < 1) - throw new ArgumentException("strength must be a positive value", "defaultStrength"); - - this.defaultStrength = defaultStrength; - } - - public int DefaultStrength - { - get { return defaultStrength; } - } - - /** - * initialise the key generator. - * - * @param param the parameters to be used for key generation - */ - public void Init( - KeyGenerationParameters parameters) - { - if (parameters == null) - throw new ArgumentNullException("parameters"); - - this.uninitialised = false; - - engineInit(parameters); - } - - protected virtual void engineInit( - KeyGenerationParameters parameters) - { - this.random = parameters.Random; - this.strength = (parameters.Strength + 7) / 8; - } - - /** - * Generate a secret key. - * - * @return a byte array containing the key value. - */ - public byte[] GenerateKey() - { - if (uninitialised) - { - if (defaultStrength < 1) - throw new InvalidOperationException("Generator has not been initialised"); - - uninitialised = false; - - engineInit(new KeyGenerationParameters(new SecureRandom(), defaultStrength)); - } - - return engineGenerateKey(); - } - - protected virtual byte[] engineGenerateKey() - { - return SecureRandom.GetNextBytes(random, strength); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/CryptoException.cs b/bc-sharp-crypto/src/crypto/CryptoException.cs deleted file mode 100644 index 73d450b..0000000 --- a/bc-sharp-crypto/src/crypto/CryptoException.cs +++ /dev/null @@ -1,28 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class CryptoException - : Exception - { - public CryptoException() - { - } - - public CryptoException( - string message) - : base(message) - { - } - - public CryptoException( - string message, - Exception exception) - : base(message, exception) - { - } - } -} diff --git a/bc-sharp-crypto/src/crypto/DataLengthException.cs b/bc-sharp-crypto/src/crypto/DataLengthException.cs deleted file mode 100644 index 447ff2a..0000000 --- a/bc-sharp-crypto/src/crypto/DataLengthException.cs +++ /dev/null @@ -1,42 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto -{ - /** - * this exception is thrown if a buffer that is meant to have output - * copied into it turns out to be too short, or if we've been given - * insufficient input. In general this exception will Get thrown rather - * than an ArrayOutOfBounds exception. - */ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class DataLengthException - : CryptoException - { - /** - * base constructor. - */ - public DataLengthException() - { - } - - /** - * create a DataLengthException with the given message. - * - * @param message the message to be carried with the exception. - */ - public DataLengthException( - string message) - : base(message) - { - } - - public DataLengthException( - string message, - Exception exception) - : base(message, exception) - { - } - } -} diff --git a/bc-sharp-crypto/src/crypto/IAsymmetricBlockCipher.cs b/bc-sharp-crypto/src/crypto/IAsymmetricBlockCipher.cs deleted file mode 100644 index 455cfaa..0000000 --- a/bc-sharp-crypto/src/crypto/IAsymmetricBlockCipher.cs +++ /dev/null @@ -1,30 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto -{ - /// Base interface for a public/private key block cipher. - public interface IAsymmetricBlockCipher - { - /// The name of the algorithm this cipher implements. - string AlgorithmName { get; } - - /// Initialise the cipher. - /// Initialise for encryption if true, for decryption if false. - /// The key or other data required by the cipher. - void Init(bool forEncryption, ICipherParameters parameters); - - /// The maximum size, in bytes, an input block may be. - int GetInputBlockSize(); - - /// The maximum size, in bytes, an output block will be. - int GetOutputBlockSize(); - - /// Process a block. - /// The input buffer. - /// The offset into inBuf that the input block begins. - /// The length of the input block. - /// Input decrypts improperly. - /// Input is too large for the cipher. - byte[] ProcessBlock(byte[] inBuf, int inOff, int inLen); - } -} diff --git a/bc-sharp-crypto/src/crypto/IAsymmetricCipherKeyPairGenerator.cs b/bc-sharp-crypto/src/crypto/IAsymmetricCipherKeyPairGenerator.cs deleted file mode 100644 index 9ec5dfa..0000000 --- a/bc-sharp-crypto/src/crypto/IAsymmetricCipherKeyPairGenerator.cs +++ /dev/null @@ -1,24 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto -{ - /** - * interface that a public/private key pair generator should conform to. - */ - public interface IAsymmetricCipherKeyPairGenerator - { - /** - * intialise the key pair generator. - * - * @param the parameters the key pair is to be initialised with. - */ - void Init(KeyGenerationParameters parameters); - - /** - * return an AsymmetricCipherKeyPair containing the Generated keys. - * - * @return an AsymmetricCipherKeyPair containing the Generated keys. - */ - AsymmetricCipherKeyPair GenerateKeyPair(); - } -} diff --git a/bc-sharp-crypto/src/crypto/IBasicAgreement.cs b/bc-sharp-crypto/src/crypto/IBasicAgreement.cs deleted file mode 100644 index 7dfc618..0000000 --- a/bc-sharp-crypto/src/crypto/IBasicAgreement.cs +++ /dev/null @@ -1,29 +0,0 @@ -using System; -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto -{ - /** - * The basic interface that basic Diffie-Hellman implementations - * conforms to. - */ - public interface IBasicAgreement - { - /** - * initialise the agreement engine. - */ - void Init(ICipherParameters parameters); - - /** - * return the field size for the agreement algorithm in bytes. - */ - int GetFieldSize(); - - /** - * given a public key from a given party calculate the next - * message in the agreement sequence. - */ - BigInteger CalculateAgreement(ICipherParameters pubKey); - } - -} diff --git a/bc-sharp-crypto/src/crypto/IBlockCipher.cs b/bc-sharp-crypto/src/crypto/IBlockCipher.cs deleted file mode 100644 index a3ad6d6..0000000 --- a/bc-sharp-crypto/src/crypto/IBlockCipher.cs +++ /dev/null @@ -1,36 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto -{ - /// Base interface for a symmetric key block cipher. - public interface IBlockCipher - { - /// The name of the algorithm this cipher implements. - string AlgorithmName { get; } - - /// Initialise the cipher. - /// Initialise for encryption if true, for decryption if false. - /// The key or other data required by the cipher. - void Init(bool forEncryption, ICipherParameters parameters); - - /// The block size for this cipher, in bytes. - int GetBlockSize(); - - /// Indicates whether this cipher can handle partial blocks. - bool IsPartialBlockOkay { get; } - - /// Process a block. - /// The input buffer. - /// The offset into inBuf that the input block begins. - /// The output buffer. - /// The offset into outBuf to write the output block. - /// If input block is wrong size, or outBuf too small. - /// The number of bytes processed and produced. - int ProcessBlock(byte[] inBuf, int inOff, byte[] outBuf, int outOff); - - /// - /// Reset the cipher to the same state as it was after the last init (if there was one). - /// - void Reset(); - } -} diff --git a/bc-sharp-crypto/src/crypto/IBlockResult.cs b/bc-sharp-crypto/src/crypto/IBlockResult.cs deleted file mode 100644 index 0f054fe..0000000 --- a/bc-sharp-crypto/src/crypto/IBlockResult.cs +++ /dev/null @@ -1,24 +0,0 @@ - -namespace Org.BouncyCastle.Crypto -{ - /// - /// Operators that reduce their input to a single block return an object - /// of this type. - /// - public interface IBlockResult - { - /// - /// Return the final result of the operation. - /// - /// A block of bytes, representing the result of an operation. - byte[] Collect(); - - /// - /// Store the final result of the operation by copying it into the destination array. - /// - /// The number of bytes copied into destination. - /// The byte array to copy the result into. - /// The offset into destination to start copying the result at. - int Collect(byte[] destination, int offset); - } -} diff --git a/bc-sharp-crypto/src/crypto/IBufferedCipher.cs b/bc-sharp-crypto/src/crypto/IBufferedCipher.cs deleted file mode 100644 index 69dec95..0000000 --- a/bc-sharp-crypto/src/crypto/IBufferedCipher.cs +++ /dev/null @@ -1,44 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto -{ - /// Block cipher engines are expected to conform to this interface. - public interface IBufferedCipher - { - /// The name of the algorithm this cipher implements. - string AlgorithmName { get; } - - /// Initialise the cipher. - /// If true the cipher is initialised for encryption, - /// if false for decryption. - /// The key and other data required by the cipher. - void Init(bool forEncryption, ICipherParameters parameters); - - int GetBlockSize(); - - int GetOutputSize(int inputLen); - - int GetUpdateOutputSize(int inputLen); - - byte[] ProcessByte(byte input); - int ProcessByte(byte input, byte[] output, int outOff); - - byte[] ProcessBytes(byte[] input); - byte[] ProcessBytes(byte[] input, int inOff, int length); - int ProcessBytes(byte[] input, byte[] output, int outOff); - int ProcessBytes(byte[] input, int inOff, int length, byte[] output, int outOff); - - byte[] DoFinal(); - byte[] DoFinal(byte[] input); - byte[] DoFinal(byte[] input, int inOff, int length); - int DoFinal(byte[] output, int outOff); - int DoFinal(byte[] input, byte[] output, int outOff); - int DoFinal(byte[] input, int inOff, int length, byte[] output, int outOff); - - /// - /// Reset the cipher. After resetting the cipher is in the same state - /// as it was after the last init (if there was one). - /// - void Reset(); - } -} diff --git a/bc-sharp-crypto/src/crypto/ICipherParameters.cs b/bc-sharp-crypto/src/crypto/ICipherParameters.cs deleted file mode 100644 index fff0941..0000000 --- a/bc-sharp-crypto/src/crypto/ICipherParameters.cs +++ /dev/null @@ -1,11 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto -{ - /** - * all parameter classes implement this. - */ - public interface ICipherParameters - { - } -} diff --git a/bc-sharp-crypto/src/crypto/IDSA.cs b/bc-sharp-crypto/src/crypto/IDSA.cs deleted file mode 100644 index 46056d8..0000000 --- a/bc-sharp-crypto/src/crypto/IDSA.cs +++ /dev/null @@ -1,40 +0,0 @@ -using System; -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto -{ - /** - * interface for classes implementing the Digital Signature Algorithm - */ - public interface IDsa - { - string AlgorithmName { get; } - - /** - * initialise the signer for signature generation or signature - * verification. - * - * @param forSigning true if we are generating a signature, false - * otherwise. - * @param param key parameters for signature generation. - */ - void Init(bool forSigning, ICipherParameters parameters); - - /** - * sign the passed in message (usually the output of a hash function). - * - * @param message the message to be signed. - * @return two big integers representing the r and s values respectively. - */ - BigInteger[] GenerateSignature(byte[] message); - - /** - * verify the message message against the signature values r and s. - * - * @param message the message that was supposed to have been signed. - * @param r the r signature value. - * @param s the s signature value. - */ - bool VerifySignature(byte[] message, BigInteger r, BigInteger s); - } -} diff --git a/bc-sharp-crypto/src/crypto/IDerivationFunction.cs b/bc-sharp-crypto/src/crypto/IDerivationFunction.cs deleted file mode 100644 index 7f289f7..0000000 --- a/bc-sharp-crypto/src/crypto/IDerivationFunction.cs +++ /dev/null @@ -1,24 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto -{ - /** - * base interface for general purpose byte derivation functions. - */ - public interface IDerivationFunction - { - void Init(IDerivationParameters parameters); - - /** - * return the message digest used as the basis for the function - */ - IDigest Digest - { - get; - } - - int GenerateBytes(byte[] output, int outOff, int length); - //throws DataLengthException, ArgumentException; - } - -} diff --git a/bc-sharp-crypto/src/crypto/IDerivationParameters.cs b/bc-sharp-crypto/src/crypto/IDerivationParameters.cs deleted file mode 100644 index f1c8485..0000000 --- a/bc-sharp-crypto/src/crypto/IDerivationParameters.cs +++ /dev/null @@ -1,11 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto -{ - /** - * Parameters for key/byte stream derivation classes - */ - public interface IDerivationParameters - { - } -} diff --git a/bc-sharp-crypto/src/crypto/IDigest.cs b/bc-sharp-crypto/src/crypto/IDigest.cs deleted file mode 100644 index 6769dcc..0000000 --- a/bc-sharp-crypto/src/crypto/IDigest.cs +++ /dev/null @@ -1,61 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto -{ - /** - * interface that a message digest conforms to. - */ - public interface IDigest - { - /** - * return the algorithm name - * - * @return the algorithm name - */ - string AlgorithmName { get; } - - /** - * return the size, in bytes, of the digest produced by this message digest. - * - * @return the size, in bytes, of the digest produced by this message digest. - */ - int GetDigestSize(); - - /** - * return the size, in bytes, of the internal buffer used by this digest. - * - * @return the size, in bytes, of the internal buffer used by this digest. - */ - int GetByteLength(); - - /** - * update the message digest with a single byte. - * - * @param inByte the input byte to be entered. - */ - void Update(byte input); - - /** - * update the message digest with a block of bytes. - * - * @param input the byte array containing the data. - * @param inOff the offset into the byte array where the data starts. - * @param len the length of the data. - */ - void BlockUpdate(byte[] input, int inOff, int length); - - /** - * Close the digest, producing the final digest value. The doFinal - * call leaves the digest reset. - * - * @param output the array the digest is to be copied into. - * @param outOff the offset into the out array the digest is to start at. - */ - int DoFinal(byte[] output, int outOff); - - /** - * reset the digest back to it's initial state. - */ - void Reset(); - } -} diff --git a/bc-sharp-crypto/src/crypto/IEntropySource.cs b/bc-sharp-crypto/src/crypto/IEntropySource.cs deleted file mode 100644 index 62e3bc7..0000000 --- a/bc-sharp-crypto/src/crypto/IEntropySource.cs +++ /dev/null @@ -1,29 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto -{ - /// - /// Base interface describing an entropy source for a DRBG. - /// - public interface IEntropySource - { - /// - /// Return whether or not this entropy source is regarded as prediction resistant. - /// - /// true if this instance is prediction resistant; otherwise, false. - bool IsPredictionResistant { get; } - - /// - /// Return a byte array of entropy. - /// - /// The entropy bytes. - byte[] GetEntropy(); - - /// - /// Return the number of bits of entropy this source can produce. - /// - /// The size, in bits, of the return value of getEntropy. - int EntropySize { get; } - } -} - diff --git a/bc-sharp-crypto/src/crypto/IEntropySourceProvider.cs b/bc-sharp-crypto/src/crypto/IEntropySourceProvider.cs deleted file mode 100644 index 7564141..0000000 --- a/bc-sharp-crypto/src/crypto/IEntropySourceProvider.cs +++ /dev/null @@ -1,17 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto -{ - /// - /// Base interface describing a provider of entropy sources. - /// - public interface IEntropySourceProvider - { - /// - /// Return an entropy source providing a block of entropy. - /// - /// The size of the block of entropy required. - /// An entropy source providing bitsRequired blocks of entropy. - IEntropySource Get(int bitsRequired); - } -} diff --git a/bc-sharp-crypto/src/crypto/IMac.cs b/bc-sharp-crypto/src/crypto/IMac.cs deleted file mode 100644 index 03a86e8..0000000 --- a/bc-sharp-crypto/src/crypto/IMac.cs +++ /dev/null @@ -1,69 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto -{ - /** - * The base interface for implementations of message authentication codes (MACs). - */ - public interface IMac - { - /** - * Initialise the MAC. - * - * @param param the key and other data required by the MAC. - * @exception ArgumentException if the parameters argument is - * inappropriate. - */ - void Init(ICipherParameters parameters); - - /** - * Return the name of the algorithm the MAC implements. - * - * @return the name of the algorithm the MAC implements. - */ - string AlgorithmName { get; } - - /** - * Return the block size for this MAC (in bytes). - * - * @return the block size for this MAC in bytes. - */ - int GetMacSize(); - - /** - * add a single byte to the mac for processing. - * - * @param in the byte to be processed. - * @exception InvalidOperationException if the MAC is not initialised. - */ - void Update(byte input); - - /** - * @param in the array containing the input. - * @param inOff the index in the array the data begins at. - * @param len the length of the input starting at inOff. - * @exception InvalidOperationException if the MAC is not initialised. - * @exception DataLengthException if there isn't enough data in in. - */ - void BlockUpdate(byte[] input, int inOff, int len); - - /** - * Compute the final stage of the MAC writing the output to the out - * parameter. - *

- * doFinal leaves the MAC in the same state it was after the last init. - *

- * @param out the array the MAC is to be output to. - * @param outOff the offset into the out buffer the output is to start at. - * @exception DataLengthException if there isn't enough space in out. - * @exception InvalidOperationException if the MAC is not initialised. - */ - int DoFinal(byte[] output, int outOff); - - /** - * Reset the MAC. At the end of resetting the MAC should be in the - * in the same state it was after the last init (if there was one). - */ - void Reset(); - } -} diff --git a/bc-sharp-crypto/src/crypto/ISignatureFactory.cs b/bc-sharp-crypto/src/crypto/ISignatureFactory.cs deleted file mode 100644 index cbca7d1..0000000 --- a/bc-sharp-crypto/src/crypto/ISignatureFactory.cs +++ /dev/null @@ -1,23 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto -{ - /// - /// Base interface for operators that serve as stream-based signature calculators. - /// - public interface ISignatureFactory - { - /// The algorithm details object for this calculator. - Object AlgorithmDetails { get ; } - - /// - /// Create a stream calculator for this signature calculator. The stream - /// calculator is used for the actual operation of entering the data to be signed - /// and producing the signature block. - /// - /// A calculator producing an IBlockResult with a signature in it. - IStreamCalculator CreateCalculator(); - } -} - - diff --git a/bc-sharp-crypto/src/crypto/ISigner.cs b/bc-sharp-crypto/src/crypto/ISigner.cs deleted file mode 100644 index e03bbf4..0000000 --- a/bc-sharp-crypto/src/crypto/ISigner.cs +++ /dev/null @@ -1,50 +0,0 @@ - -using System; -using System.Text; - -namespace Org.BouncyCastle.Crypto -{ - public interface ISigner - { - /** - * Return the name of the algorithm the signer implements. - * - * @return the name of the algorithm the signer implements. - */ - string AlgorithmName { get; } - - /** - * Initialise the signer for signing or verification. - * - * @param forSigning true if for signing, false otherwise - * @param param necessary parameters. - */ - void Init(bool forSigning, ICipherParameters parameters); - - /** - * update the internal digest with the byte b - */ - void Update(byte input); - - /** - * update the internal digest with the byte array in - */ - void BlockUpdate(byte[] input, int inOff, int length); - - /** - * Generate a signature for the message we've been loaded with using - * the key we were initialised with. - */ - byte[] GenerateSignature(); - /** - * return true if the internal state represents the signature described - * in the passed in array. - */ - bool VerifySignature(byte[] signature); - - /** - * reset the internal state - */ - void Reset(); - } -} diff --git a/bc-sharp-crypto/src/crypto/ISignerWithRecovery.cs b/bc-sharp-crypto/src/crypto/ISignerWithRecovery.cs deleted file mode 100644 index 024f5ce..0000000 --- a/bc-sharp-crypto/src/crypto/ISignerWithRecovery.cs +++ /dev/null @@ -1,37 +0,0 @@ -using System; -using System.Text; - -namespace Org.BouncyCastle.Crypto -{ - /** - * Signer with message recovery. - */ - public interface ISignerWithRecovery - : ISigner - { - /** - * Returns true if the signer has recovered the full message as - * part of signature verification. - * - * @return true if full message recovered. - */ - bool HasFullMessage(); - - /** - * Returns a reference to what message was recovered (if any). - * - * @return full/partial message, null if nothing. - */ - byte[] GetRecoveredMessage(); - - /** - * Perform an update with the recovered message before adding any other data. This must - * be the first update method called, and calling it will result in the signer assuming - * that further calls to update will include message content past what is recoverable. - * - * @param signature the signature that we are in the process of verifying. - * @throws IllegalStateException - */ - void UpdateWithRecoveredMessage(byte[] signature); - } -} diff --git a/bc-sharp-crypto/src/crypto/IStreamCalculator.cs b/bc-sharp-crypto/src/crypto/IStreamCalculator.cs deleted file mode 100644 index 19a5428..0000000 --- a/bc-sharp-crypto/src/crypto/IStreamCalculator.cs +++ /dev/null @@ -1,23 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto -{ - /// - /// Base interface for cryptographic operations such as Hashes, MACs, and Signatures which reduce a stream of data - /// to a single value. - /// - public interface IStreamCalculator - { - /// Return a "sink" stream which only exists to update the implementing object. - /// A stream to write to in order to update the implementing object. - Stream Stream { get; } - - /// - /// Return the result of processing the stream. This value is only available once the stream - /// has been closed. - /// - /// The result of processing the stream. - Object GetResult(); - } -} diff --git a/bc-sharp-crypto/src/crypto/IStreamCipher.cs b/bc-sharp-crypto/src/crypto/IStreamCipher.cs deleted file mode 100644 index 8e575a7..0000000 --- a/bc-sharp-crypto/src/crypto/IStreamCipher.cs +++ /dev/null @@ -1,45 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto -{ - /// The interface stream ciphers conform to. - public interface IStreamCipher - { - /// The name of the algorithm this cipher implements. - string AlgorithmName { get; } - - /// Initialise the cipher. - /// If true the cipher is initialised for encryption, - /// if false for decryption. - /// The key and other data required by the cipher. - /// - /// If the parameters argument is inappropriate. - /// - void Init(bool forEncryption, ICipherParameters parameters); - - /// encrypt/decrypt a single byte returning the result. - /// the byte to be processed. - /// the result of processing the input byte. - byte ReturnByte(byte input); - - /// - /// Process a block of bytes from input putting the result into output. - /// - /// The input byte array. - /// - /// The offset into input where the data to be processed starts. - /// - /// The number of bytes to be processed. - /// The output buffer the processed bytes go into. - /// - /// The offset into output the processed data starts at. - /// - /// If the output buffer is too small. - void ProcessBytes(byte[] input, int inOff, int length, byte[] output, int outOff); - - /// - /// Reset the cipher to the same state as it was after the last init (if there was one). - /// - void Reset(); - } -} diff --git a/bc-sharp-crypto/src/crypto/IVerifier.cs b/bc-sharp-crypto/src/crypto/IVerifier.cs deleted file mode 100644 index 560cabf..0000000 --- a/bc-sharp-crypto/src/crypto/IVerifier.cs +++ /dev/null @@ -1,25 +0,0 @@ -namespace Org.BouncyCastle.Crypto -{ - /// - /// Operators that reduce their input to the validation of a signature produce this type. - /// - public interface IVerifier - { - /// - /// Return true if the passed in data matches what is expected by the verification result. - /// - /// The bytes representing the signature. - /// true if the signature verifies, false otherwise. - bool IsVerified(byte[] data); - - /// - /// Return true if the length bytes from off in the source array match the signature - /// expected by the verification result. - /// - /// Byte array containing the signature. - /// The offset into the source array where the signature starts. - /// The number of bytes in source making up the signature. - /// true if the signature verifies, false otherwise. - bool IsVerified(byte[] source, int off, int length); - } -} diff --git a/bc-sharp-crypto/src/crypto/IVerifierFactory.cs b/bc-sharp-crypto/src/crypto/IVerifierFactory.cs deleted file mode 100644 index 9502b14..0000000 --- a/bc-sharp-crypto/src/crypto/IVerifierFactory.cs +++ /dev/null @@ -1,21 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto -{ - /// - /// Base interface for operators that serve as stream-based signature verifiers. - /// - public interface IVerifierFactory - { - /// The algorithm details object for this verifier. - Object AlgorithmDetails { get ; } - - /// - /// Create a stream calculator for this verifier. The stream - /// calculator is used for the actual operation of entering the data to be verified - /// and producing a result which can be used to verify the original signature. - /// - /// A calculator producing an IVerifier which can verify the signature. - IStreamCalculator CreateCalculator(); - } -} diff --git a/bc-sharp-crypto/src/crypto/IVerifierFactoryProvider.cs b/bc-sharp-crypto/src/crypto/IVerifierFactoryProvider.cs deleted file mode 100644 index 9cfcbb2..0000000 --- a/bc-sharp-crypto/src/crypto/IVerifierFactoryProvider.cs +++ /dev/null @@ -1,18 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto -{ - /// - /// Base interface for a provider to support the dynamic creation of signature verifiers. - /// - public interface IVerifierFactoryProvider - { - /// - /// Return a signature verfier for signature algorithm described in the passed in algorithm details object. - /// - /// The details of the signature algorithm verification is required for. - /// A new signature verifier. - IVerifierFactory CreateVerifierFactory (Object algorithmDetails); - } -} - diff --git a/bc-sharp-crypto/src/crypto/IWrapper.cs b/bc-sharp-crypto/src/crypto/IWrapper.cs deleted file mode 100644 index 58202b3..0000000 --- a/bc-sharp-crypto/src/crypto/IWrapper.cs +++ /dev/null @@ -1,18 +0,0 @@ -using System; - -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto -{ - public interface IWrapper - { - /// The name of the algorithm this cipher implements. - string AlgorithmName { get; } - - void Init(bool forWrapping, ICipherParameters parameters); - - byte[] Wrap(byte[] input, int inOff, int length); - - byte[] Unwrap(byte[] input, int inOff, int length); - } -} diff --git a/bc-sharp-crypto/src/crypto/IXof.cs b/bc-sharp-crypto/src/crypto/IXof.cs deleted file mode 100644 index f76304d..0000000 --- a/bc-sharp-crypto/src/crypto/IXof.cs +++ /dev/null @@ -1,31 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto -{ - /// - /// With FIPS PUB 202 a new kind of message digest was announced which supported extendable output, or variable digest sizes. - /// This interface provides the extra method required to support variable output on a digest implementation. - /// - public interface IXof - : IDigest - { - /// - /// Output the results of the final calculation for this digest to outLen number of bytes. - /// - /// output array to write the output bytes to. - /// offset to start writing the bytes at. - /// the number of output bytes requested. - /// the number of bytes written - int DoFinal(byte[] output, int outOff, int outLen); - - /// - /// Start outputting the results of the final calculation for this digest. Unlike DoFinal, this method - /// will continue producing output until the Xof is explicitly reset, or signals otherwise. - /// - /// output array to write the output bytes to. - /// offset to start writing the bytes at. - /// the number of output bytes requested. - /// the number of bytes written - int DoOutput(byte[] output, int outOff, int outLen); - } -} diff --git a/bc-sharp-crypto/src/crypto/InvalidCipherTextException.cs b/bc-sharp-crypto/src/crypto/InvalidCipherTextException.cs deleted file mode 100644 index 0fe540d..0000000 --- a/bc-sharp-crypto/src/crypto/InvalidCipherTextException.cs +++ /dev/null @@ -1,40 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto -{ - /** - * this exception is thrown whenever we find something we don't expect in a - * message. - */ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class InvalidCipherTextException - : CryptoException - { - /** - * base constructor. - */ - public InvalidCipherTextException() - { - } - - /** - * create a InvalidCipherTextException with the given message. - * - * @param message the message to be carried with the exception. - */ - public InvalidCipherTextException( - string message) - : base(message) - { - } - - public InvalidCipherTextException( - string message, - Exception exception) - : base(message, exception) - { - } - } -} diff --git a/bc-sharp-crypto/src/crypto/KeyGenerationParameters.cs b/bc-sharp-crypto/src/crypto/KeyGenerationParameters.cs deleted file mode 100644 index 0cb6b07..0000000 --- a/bc-sharp-crypto/src/crypto/KeyGenerationParameters.cs +++ /dev/null @@ -1,55 +0,0 @@ -using System; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto -{ - /** - * The base class for parameters to key generators. - */ - public class KeyGenerationParameters - { - private SecureRandom random; - private int strength; - - /** - * initialise the generator with a source of randomness - * and a strength (in bits). - * - * @param random the random byte source. - * @param strength the size, in bits, of the keys we want to produce. - */ - public KeyGenerationParameters( - SecureRandom random, - int strength) - { - if (random == null) - throw new ArgumentNullException("random"); - if (strength < 1) - throw new ArgumentException("strength must be a positive value", "strength"); - - this.random = random; - this.strength = strength; - } - - /** - * return the random source associated with this - * generator. - * - * @return the generators random source. - */ - public SecureRandom Random - { - get { return random; } - } - - /** - * return the bit strength for keys produced by this generator, - * - * @return the strength of the keys this generator produces (in bits). - */ - public int Strength - { - get { return strength; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/MaxBytesExceededException.cs b/bc-sharp-crypto/src/crypto/MaxBytesExceededException.cs deleted file mode 100644 index 8992c45..0000000 --- a/bc-sharp-crypto/src/crypto/MaxBytesExceededException.cs +++ /dev/null @@ -1,32 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto -{ - /// - /// This exception is thrown whenever a cipher requires a change of key, iv - /// or similar after x amount of bytes enciphered - /// -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class MaxBytesExceededException - : CryptoException - { - public MaxBytesExceededException() - { - } - - public MaxBytesExceededException( - string message) - : base(message) - { - } - - public MaxBytesExceededException( - string message, - Exception e) - : base(message, e) - { - } - } -} diff --git a/bc-sharp-crypto/src/crypto/OutputLengthException.cs b/bc-sharp-crypto/src/crypto/OutputLengthException.cs deleted file mode 100644 index 437589f..0000000 --- a/bc-sharp-crypto/src/crypto/OutputLengthException.cs +++ /dev/null @@ -1,28 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class OutputLengthException - : DataLengthException - { - public OutputLengthException() - { - } - - public OutputLengthException( - string message) - : base(message) - { - } - - public OutputLengthException( - string message, - Exception exception) - : base(message, exception) - { - } - } -} diff --git a/bc-sharp-crypto/src/crypto/PbeParametersGenerator.cs b/bc-sharp-crypto/src/crypto/PbeParametersGenerator.cs deleted file mode 100644 index 97d23df..0000000 --- a/bc-sharp-crypto/src/crypto/PbeParametersGenerator.cs +++ /dev/null @@ -1,202 +0,0 @@ -using System; -using System.Text; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto -{ - /** - * super class for all Password Based Encyrption (Pbe) parameter generator classes. - */ - public abstract class PbeParametersGenerator - { - protected byte[] mPassword; - protected byte[] mSalt; - protected int mIterationCount; - - /** - * base constructor. - */ - protected PbeParametersGenerator() - { - } - - /** - * initialise the Pbe generator. - * - * @param password the password converted into bytes (see below). - * @param salt the salt to be mixed with the password. - * @param iterationCount the number of iterations the "mixing" function - * is to be applied for. - */ - public virtual void Init( - byte[] password, - byte[] salt, - int iterationCount) - { - if (password == null) - throw new ArgumentNullException("password"); - if (salt == null) - throw new ArgumentNullException("salt"); - - this.mPassword = Arrays.Clone(password); - this.mSalt = Arrays.Clone(salt); - this.mIterationCount = iterationCount; - } - - public virtual byte[] Password - { - get { return Arrays.Clone(mPassword); } - } - - /** - * return the password byte array. - * - * @return the password byte array. - */ - [Obsolete("Use 'Password' property")] - public byte[] GetPassword() - { - return Password; - } - - public virtual byte[] Salt - { - get { return Arrays.Clone(mSalt); } - } - - /** - * return the salt byte array. - * - * @return the salt byte array. - */ - [Obsolete("Use 'Salt' property")] - public byte[] GetSalt() - { - return Salt; - } - - /** - * return the iteration count. - * - * @return the iteration count. - */ - public virtual int IterationCount - { - get { return mIterationCount; } - } - - /** - * Generate derived parameters for a key of length keySize. - * - * @param keySize the length, in bits, of the key required. - * @return a parameters object representing a key. - */ - [Obsolete("Use version with 'algorithm' parameter")] - public abstract ICipherParameters GenerateDerivedParameters(int keySize); - public abstract ICipherParameters GenerateDerivedParameters(string algorithm, int keySize); - - /** - * Generate derived parameters for a key of length keySize, and - * an initialisation vector (IV) of length ivSize. - * - * @param keySize the length, in bits, of the key required. - * @param ivSize the length, in bits, of the iv required. - * @return a parameters object representing a key and an IV. - */ - [Obsolete("Use version with 'algorithm' parameter")] - public abstract ICipherParameters GenerateDerivedParameters(int keySize, int ivSize); - public abstract ICipherParameters GenerateDerivedParameters(string algorithm, int keySize, int ivSize); - - /** - * Generate derived parameters for a key of length keySize, specifically - * for use with a MAC. - * - * @param keySize the length, in bits, of the key required. - * @return a parameters object representing a key. - */ - public abstract ICipherParameters GenerateDerivedMacParameters(int keySize); - - /** - * converts a password to a byte array according to the scheme in - * Pkcs5 (ascii, no padding) - * - * @param password a character array representing the password. - * @return a byte array representing the password. - */ - public static byte[] Pkcs5PasswordToBytes( - char[] password) - { - if (password == null) - return new byte[0]; - - return Strings.ToByteArray(password); - } - - [Obsolete("Use version taking 'char[]' instead")] - public static byte[] Pkcs5PasswordToBytes( - string password) - { - if (password == null) - return new byte[0]; - - return Strings.ToByteArray(password); - } - - /** - * converts a password to a byte array according to the scheme in - * PKCS5 (UTF-8, no padding) - * - * @param password a character array representing the password. - * @return a byte array representing the password. - */ - public static byte[] Pkcs5PasswordToUtf8Bytes( - char[] password) - { - if (password == null) - return new byte[0]; - - return Encoding.UTF8.GetBytes(password); - } - - [Obsolete("Use version taking 'char[]' instead")] - public static byte[] Pkcs5PasswordToUtf8Bytes( - string password) - { - if (password == null) - return new byte[0]; - - return Encoding.UTF8.GetBytes(password); - } - - /** - * converts a password to a byte array according to the scheme in - * Pkcs12 (unicode, big endian, 2 zero pad bytes at the end). - * - * @param password a character array representing the password. - * @return a byte array representing the password. - */ - public static byte[] Pkcs12PasswordToBytes( - char[] password) - { - return Pkcs12PasswordToBytes(password, false); - } - - public static byte[] Pkcs12PasswordToBytes( - char[] password, - bool wrongPkcs12Zero) - { - if (password == null || password.Length < 1) - { - return new byte[wrongPkcs12Zero ? 2 : 0]; - } - - // +1 for extra 2 pad bytes. - byte[] bytes = new byte[(password.Length + 1) * 2]; - - Encoding.BigEndianUnicode.GetBytes(password, 0, password.Length, bytes, 0); - - return bytes; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/StreamBlockCipher.cs b/bc-sharp-crypto/src/crypto/StreamBlockCipher.cs deleted file mode 100644 index ef2a8b6..0000000 --- a/bc-sharp-crypto/src/crypto/StreamBlockCipher.cs +++ /dev/null @@ -1,109 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto -{ - /** - * a wrapper for block ciphers with a single byte block size, so that they - * can be treated like stream ciphers. - */ - public class StreamBlockCipher - : IStreamCipher - { - private readonly IBlockCipher cipher; - private readonly byte[] oneByte = new byte[1]; - - /** - * basic constructor. - * - * @param cipher the block cipher to be wrapped. - * @exception ArgumentException if the cipher has a block size other than - * one. - */ - public StreamBlockCipher( - IBlockCipher cipher) - { - if (cipher == null) - throw new ArgumentNullException("cipher"); - if (cipher.GetBlockSize() != 1) - throw new ArgumentException("block cipher block size != 1.", "cipher"); - - this.cipher = cipher; - } - - /** - * initialise the underlying cipher. - * - * @param forEncryption true if we are setting up for encryption, false otherwise. - * @param param the necessary parameters for the underlying cipher to be initialised. - */ - public void Init( - bool forEncryption, - ICipherParameters parameters) - { - cipher.Init(forEncryption, parameters); - } - - /** - * return the name of the algorithm we are wrapping. - * - * @return the name of the algorithm we are wrapping. - */ - public string AlgorithmName - { - get { return cipher.AlgorithmName; } - } - - /** - * encrypt/decrypt a single byte returning the result. - * - * @param in the byte to be processed. - * @return the result of processing the input byte. - */ - public byte ReturnByte( - byte input) - { - oneByte[0] = input; - - cipher.ProcessBlock(oneByte, 0, oneByte, 0); - - return oneByte[0]; - } - - /** - * process a block of bytes from in putting the result into out. - * - * @param in the input byte array. - * @param inOff the offset into the in array where the data to be processed starts. - * @param len the number of bytes to be processed. - * @param out the output buffer the processed bytes go into. - * @param outOff the offset into the output byte array the processed data stars at. - * @exception DataLengthException if the output buffer is too small. - */ - public void ProcessBytes( - byte[] input, - int inOff, - int length, - byte[] output, - int outOff) - { - if (outOff + length > output.Length) - throw new DataLengthException("output buffer too small in ProcessBytes()"); - - for (int i = 0; i != length; i++) - { - cipher.ProcessBlock(input, inOff + i, output, outOff + i); - } - } - - /** - * reset the underlying cipher. This leaves it in the same state - * it was at after the last init (if there was one). - */ - public void Reset() - { - cipher.Reset(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/agreement/DHAgreement.cs b/bc-sharp-crypto/src/crypto/agreement/DHAgreement.cs deleted file mode 100644 index e988c0d..0000000 --- a/bc-sharp-crypto/src/crypto/agreement/DHAgreement.cs +++ /dev/null @@ -1,99 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Crypto.Generators; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Agreement -{ - /** - * a Diffie-Hellman key exchange engine. - *

- * note: This uses MTI/A0 key agreement in order to make the key agreement - * secure against passive attacks. If you're doing Diffie-Hellman and both - * parties have long term public keys you should look at using this. For - * further information have a look at RFC 2631.

- *

- * It's possible to extend this to more than two parties as well, for the moment - * that is left as an exercise for the reader.

- */ - public class DHAgreement - { - private DHPrivateKeyParameters key; - private DHParameters dhParams; - private BigInteger privateValue; - private SecureRandom random; - - public void Init( - ICipherParameters parameters) - { - AsymmetricKeyParameter kParam; - if (parameters is ParametersWithRandom) - { - ParametersWithRandom rParam = (ParametersWithRandom)parameters; - - this.random = rParam.Random; - kParam = (AsymmetricKeyParameter)rParam.Parameters; - } - else - { - this.random = new SecureRandom(); - kParam = (AsymmetricKeyParameter)parameters; - } - - if (!(kParam is DHPrivateKeyParameters)) - { - throw new ArgumentException("DHEngine expects DHPrivateKeyParameters"); - } - - this.key = (DHPrivateKeyParameters)kParam; - this.dhParams = key.Parameters; - } - - /** - * calculate our initial message. - */ - public BigInteger CalculateMessage() - { - DHKeyPairGenerator dhGen = new DHKeyPairGenerator(); - dhGen.Init(new DHKeyGenerationParameters(random, dhParams)); - AsymmetricCipherKeyPair dhPair = dhGen.GenerateKeyPair(); - - this.privateValue = ((DHPrivateKeyParameters)dhPair.Private).X; - - return ((DHPublicKeyParameters)dhPair.Public).Y; - } - - /** - * given a message from a given party and the corresponding public key - * calculate the next message in the agreement sequence. In this case - * this will represent the shared secret. - */ - public BigInteger CalculateAgreement( - DHPublicKeyParameters pub, - BigInteger message) - { - if (pub == null) - throw new ArgumentNullException("pub"); - if (message == null) - throw new ArgumentNullException("message"); - - if (!pub.Parameters.Equals(dhParams)) - throw new ArgumentException("Diffie-Hellman public key has wrong parameters."); - - BigInteger p = dhParams.P; - - BigInteger peerY = pub.Y; - if (peerY == null || peerY.CompareTo(BigInteger.One) <= 0 || peerY.CompareTo(p.Subtract(BigInteger.One)) >= 0) - throw new ArgumentException("Diffie-Hellman public key is weak"); - - BigInteger result = peerY.ModPow(privateValue, p); - if (result.Equals(BigInteger.One)) - throw new InvalidOperationException("Shared key can't be 1"); - - return message.ModPow(key.X, p).Multiply(result).Mod(p); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/agreement/DHBasicAgreement.cs b/bc-sharp-crypto/src/crypto/agreement/DHBasicAgreement.cs deleted file mode 100644 index 6c3fe65..0000000 --- a/bc-sharp-crypto/src/crypto/agreement/DHBasicAgreement.cs +++ /dev/null @@ -1,72 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Agreement -{ - /** - * a Diffie-Hellman key agreement class. - *

- * note: This is only the basic algorithm, it doesn't take advantage of - * long term public keys if they are available. See the DHAgreement class - * for a "better" implementation.

- */ - public class DHBasicAgreement - : IBasicAgreement - { - private DHPrivateKeyParameters key; - private DHParameters dhParams; - - public virtual void Init( - ICipherParameters parameters) - { - if (parameters is ParametersWithRandom) - { - parameters = ((ParametersWithRandom) parameters).Parameters; - } - - if (!(parameters is DHPrivateKeyParameters)) - { - throw new ArgumentException("DHEngine expects DHPrivateKeyParameters"); - } - - this.key = (DHPrivateKeyParameters) parameters; - this.dhParams = key.Parameters; - } - - public virtual int GetFieldSize() - { - return (key.Parameters.P.BitLength + 7) / 8; - } - - /** - * given a short term public key from a given party calculate the next - * message in the agreement sequence. - */ - public virtual BigInteger CalculateAgreement( - ICipherParameters pubKey) - { - if (this.key == null) - throw new InvalidOperationException("Agreement algorithm not initialised"); - - DHPublicKeyParameters pub = (DHPublicKeyParameters)pubKey; - - if (!pub.Parameters.Equals(dhParams)) - throw new ArgumentException("Diffie-Hellman public key has wrong parameters."); - - BigInteger p = dhParams.P; - - BigInteger peerY = pub.Y; - if (peerY == null || peerY.CompareTo(BigInteger.One) <= 0 || peerY.CompareTo(p.Subtract(BigInteger.One)) >= 0) - throw new ArgumentException("Diffie-Hellman public key is weak"); - - BigInteger result = peerY.ModPow(key.X, p); - if (result.Equals(BigInteger.One)) - throw new InvalidOperationException("Shared key can't be 1"); - - return result; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/agreement/DHStandardGroups.cs b/bc-sharp-crypto/src/crypto/agreement/DHStandardGroups.cs deleted file mode 100644 index 0143c63..0000000 --- a/bc-sharp-crypto/src/crypto/agreement/DHStandardGroups.cs +++ /dev/null @@ -1,307 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Crypto.Agreement -{ - /// Standard Diffie-Hellman groups from various IETF specifications. - public class DHStandardGroups - { - private static BigInteger FromHex(string hex) - { - return new BigInteger(1, Hex.Decode(hex)); - } - - private static DHParameters FromPG(string hexP, string hexG) - { - return new DHParameters(FromHex(hexP), FromHex(hexG)); - } - - private static DHParameters FromPGQ(string hexP, string hexG, string hexQ) - { - return new DHParameters(FromHex(hexP), FromHex(hexG), FromHex(hexQ)); - } - - private static DHParameters Rfc7919Parameters(string hexP, int l) - { - // NOTE: All the groups in RFC 7919 use safe primes, i.e. q = (p-1)/2, and generator g = 2 - BigInteger p = FromHex(hexP); - return new DHParameters(p, BigInteger.Two, p.ShiftRight(1), l); - } - - /* - * RFC 2409 - */ - private static readonly string rfc2409_768_p = "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1" - + "29024E088A67CC74020BBEA63B139B22514A08798E3404DD" + "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245" - + "E485B576625E7EC6F44C42E9A63A3620FFFFFFFFFFFFFFFF"; - private static readonly string rfc2409_768_g = "02"; - public static readonly DHParameters rfc2409_768 = FromPG(rfc2409_768_p, rfc2409_768_g); - - private static readonly string rfc2409_1024_p = "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1" - + "29024E088A67CC74020BBEA63B139B22514A08798E3404DD" + "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245" - + "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED" + "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE65381" - + "FFFFFFFFFFFFFFFF"; - private static readonly string rfc2409_1024_g = "02"; - public static readonly DHParameters rfc2409_1024 = FromPG(rfc2409_1024_p, rfc2409_1024_g); - - /* - * RFC 3526 - */ - private static readonly string rfc3526_1536_p = "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1" - + "29024E088A67CC74020BBEA63B139B22514A08798E3404DD" + "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245" - + "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED" + "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D" - + "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F" + "83655D23DCA3AD961C62F356208552BB9ED529077096966D" - + "670C354E4ABC9804F1746C08CA237327FFFFFFFFFFFFFFFF"; - private static readonly string rfc3526_1536_g = "02"; - public static readonly DHParameters rfc3526_1536 = FromPG(rfc3526_1536_p, rfc3526_1536_g); - - private static readonly string rfc3526_2048_p = "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1" - + "29024E088A67CC74020BBEA63B139B22514A08798E3404DD" + "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245" - + "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED" + "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D" - + "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F" + "83655D23DCA3AD961C62F356208552BB9ED529077096966D" - + "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B" + "E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9" - + "DE2BCBF6955817183995497CEA956AE515D2261898FA0510" + "15728E5A8AACAA68FFFFFFFFFFFFFFFF"; - private static readonly string rfc3526_2048_g = "02"; - public static readonly DHParameters rfc3526_2048 = FromPG(rfc3526_2048_p, rfc3526_2048_g); - - private static readonly string rfc3526_3072_p = "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1" - + "29024E088A67CC74020BBEA63B139B22514A08798E3404DD" + "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245" - + "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED" + "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D" - + "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F" + "83655D23DCA3AD961C62F356208552BB9ED529077096966D" - + "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B" + "E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9" - + "DE2BCBF6955817183995497CEA956AE515D2261898FA0510" + "15728E5A8AAAC42DAD33170D04507A33A85521ABDF1CBA64" - + "ECFB850458DBEF0A8AEA71575D060C7DB3970F85A6E1E4C7" + "ABF5AE8CDB0933D71E8C94E04A25619DCEE3D2261AD2EE6B" - + "F12FFA06D98A0864D87602733EC86A64521F2B18177B200C" + "BBE117577A615D6C770988C0BAD946E208E24FA074E5AB31" - + "43DB5BFCE0FD108E4B82D120A93AD2CAFFFFFFFFFFFFFFFF"; - private static readonly string rfc3526_3072_g = "02"; - public static readonly DHParameters rfc3526_3072 = FromPG(rfc3526_3072_p, rfc3526_3072_g); - - private static readonly string rfc3526_4096_p = "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1" - + "29024E088A67CC74020BBEA63B139B22514A08798E3404DD" + "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245" - + "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED" + "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D" - + "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F" + "83655D23DCA3AD961C62F356208552BB9ED529077096966D" - + "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B" + "E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9" - + "DE2BCBF6955817183995497CEA956AE515D2261898FA0510" + "15728E5A8AAAC42DAD33170D04507A33A85521ABDF1CBA64" - + "ECFB850458DBEF0A8AEA71575D060C7DB3970F85A6E1E4C7" + "ABF5AE8CDB0933D71E8C94E04A25619DCEE3D2261AD2EE6B" - + "F12FFA06D98A0864D87602733EC86A64521F2B18177B200C" + "BBE117577A615D6C770988C0BAD946E208E24FA074E5AB31" - + "43DB5BFCE0FD108E4B82D120A92108011A723C12A787E6D7" + "88719A10BDBA5B2699C327186AF4E23C1A946834B6150BDA" - + "2583E9CA2AD44CE8DBBBC2DB04DE8EF92E8EFC141FBECAA6" + "287C59474E6BC05D99B2964FA090C3A2233BA186515BE7ED" - + "1F612970CEE2D7AFB81BDD762170481CD0069127D5B05AA9" + "93B4EA988D8FDDC186FFB7DC90A6C08F4DF435C934063199" - + "FFFFFFFFFFFFFFFF"; - private static readonly string rfc3526_4096_g = "02"; - public static readonly DHParameters rfc3526_4096 = FromPG(rfc3526_4096_p, rfc3526_4096_g); - - private static readonly string rfc3526_6144_p = "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD129024E08" - + "8A67CC74020BBEA63B139B22514A08798E3404DDEF9519B3CD3A431B" - + "302B0A6DF25F14374FE1356D6D51C245E485B576625E7EC6F44C42E9" - + "A637ED6B0BFF5CB6F406B7EDEE386BFB5A899FA5AE9F24117C4B1FE6" - + "49286651ECE45B3DC2007CB8A163BF0598DA48361C55D39A69163FA8" - + "FD24CF5F83655D23DCA3AD961C62F356208552BB9ED529077096966D" - + "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3BE39E772C" - + "180E86039B2783A2EC07A28FB5C55DF06F4C52C9DE2BCBF695581718" - + "3995497CEA956AE515D2261898FA051015728E5A8AAAC42DAD33170D" - + "04507A33A85521ABDF1CBA64ECFB850458DBEF0A8AEA71575D060C7D" - + "B3970F85A6E1E4C7ABF5AE8CDB0933D71E8C94E04A25619DCEE3D226" - + "1AD2EE6BF12FFA06D98A0864D87602733EC86A64521F2B18177B200C" - + "BBE117577A615D6C770988C0BAD946E208E24FA074E5AB3143DB5BFC" - + "E0FD108E4B82D120A92108011A723C12A787E6D788719A10BDBA5B26" - + "99C327186AF4E23C1A946834B6150BDA2583E9CA2AD44CE8DBBBC2DB" - + "04DE8EF92E8EFC141FBECAA6287C59474E6BC05D99B2964FA090C3A2" - + "233BA186515BE7ED1F612970CEE2D7AFB81BDD762170481CD0069127" - + "D5B05AA993B4EA988D8FDDC186FFB7DC90A6C08F4DF435C934028492" - + "36C3FAB4D27C7026C1D4DCB2602646DEC9751E763DBA37BDF8FF9406" - + "AD9E530EE5DB382F413001AEB06A53ED9027D831179727B0865A8918" - + "DA3EDBEBCF9B14ED44CE6CBACED4BB1BDB7F1447E6CC254B33205151" - + "2BD7AF426FB8F401378CD2BF5983CA01C64B92ECF032EA15D1721D03" - + "F482D7CE6E74FEF6D55E702F46980C82B5A84031900B1C9E59E7C97F" - + "BEC7E8F323A97A7E36CC88BE0F1D45B7FF585AC54BD407B22B4154AA" - + "CC8F6D7EBF48E1D814CC5ED20F8037E0A79715EEF29BE32806A1D58B" - + "B7C5DA76F550AA3D8A1FBFF0EB19CCB1A313D55CDA56C9EC2EF29632" - + "387FE8D76E3C0468043E8F663F4860EE12BF2D5B0B7474D6E694F91E" - + "6DCC4024FFFFFFFFFFFFFFFF"; - private static readonly string rfc3526_6144_g = "02"; - public static readonly DHParameters rfc3526_6144 = FromPG(rfc3526_6144_p, rfc3526_6144_g); - - private static readonly string rfc3526_8192_p = "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1" - + "29024E088A67CC74020BBEA63B139B22514A08798E3404DD" + "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245" - + "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED" + "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D" - + "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F" + "83655D23DCA3AD961C62F356208552BB9ED529077096966D" - + "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B" + "E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9" - + "DE2BCBF6955817183995497CEA956AE515D2261898FA0510" + "15728E5A8AAAC42DAD33170D04507A33A85521ABDF1CBA64" - + "ECFB850458DBEF0A8AEA71575D060C7DB3970F85A6E1E4C7" + "ABF5AE8CDB0933D71E8C94E04A25619DCEE3D2261AD2EE6B" - + "F12FFA06D98A0864D87602733EC86A64521F2B18177B200C" + "BBE117577A615D6C770988C0BAD946E208E24FA074E5AB31" - + "43DB5BFCE0FD108E4B82D120A92108011A723C12A787E6D7" + "88719A10BDBA5B2699C327186AF4E23C1A946834B6150BDA" - + "2583E9CA2AD44CE8DBBBC2DB04DE8EF92E8EFC141FBECAA6" + "287C59474E6BC05D99B2964FA090C3A2233BA186515BE7ED" - + "1F612970CEE2D7AFB81BDD762170481CD0069127D5B05AA9" + "93B4EA988D8FDDC186FFB7DC90A6C08F4DF435C934028492" - + "36C3FAB4D27C7026C1D4DCB2602646DEC9751E763DBA37BD" + "F8FF9406AD9E530EE5DB382F413001AEB06A53ED9027D831" - + "179727B0865A8918DA3EDBEBCF9B14ED44CE6CBACED4BB1B" + "DB7F1447E6CC254B332051512BD7AF426FB8F401378CD2BF" - + "5983CA01C64B92ECF032EA15D1721D03F482D7CE6E74FEF6" + "D55E702F46980C82B5A84031900B1C9E59E7C97FBEC7E8F3" - + "23A97A7E36CC88BE0F1D45B7FF585AC54BD407B22B4154AA" + "CC8F6D7EBF48E1D814CC5ED20F8037E0A79715EEF29BE328" - + "06A1D58BB7C5DA76F550AA3D8A1FBFF0EB19CCB1A313D55C" + "DA56C9EC2EF29632387FE8D76E3C0468043E8F663F4860EE" - + "12BF2D5B0B7474D6E694F91E6DBE115974A3926F12FEE5E4" + "38777CB6A932DF8CD8BEC4D073B931BA3BC832B68D9DD300" - + "741FA7BF8AFC47ED2576F6936BA424663AAB639C5AE4F568" + "3423B4742BF1C978238F16CBE39D652DE3FDB8BEFC848AD9" - + "22222E04A4037C0713EB57A81A23F0C73473FC646CEA306B" + "4BCBC8862F8385DDFA9D4B7FA2C087E879683303ED5BDD3A" - + "062B3CF5B3A278A66D2A13F83F44F82DDF310EE074AB6A36" + "4597E899A0255DC164F31CC50846851DF9AB48195DED7EA1" - + "B1D510BD7EE74D73FAF36BC31ECFA268359046F4EB879F92" + "4009438B481C6CD7889A002ED5EE382BC9190DA6FC026E47" - + "9558E4475677E9AA9E3050E2765694DFC81F56E880B96E71" + "60C980DD98EDD3DFFFFFFFFFFFFFFFFF"; - private static readonly string rfc3526_8192_g = "02"; - public static readonly DHParameters rfc3526_8192 = FromPG(rfc3526_8192_p, rfc3526_8192_g); - - /* - * RFC 4306 - */ - public static readonly DHParameters rfc4306_768 = rfc2409_768; - public static readonly DHParameters rfc4306_1024 = rfc2409_1024; - - /* - * RFC 5114 - */ - private static readonly string rfc5114_1024_160_p = "B10B8F96A080E01DDE92DE5EAE5D54EC52C99FBCFB06A3C6" - + "9A6A9DCA52D23B616073E28675A23D189838EF1E2EE652C0" + "13ECB4AEA906112324975C3CD49B83BFACCBDD7D90C4BD70" - + "98488E9C219A73724EFFD6FAE5644738FAA31A4FF55BCCC0" + "A151AF5F0DC8B4BD45BF37DF365C1A65E68CFDA76D4DA708" - + "DF1FB2BC2E4A4371"; - private static readonly string rfc5114_1024_160_g = "A4D1CBD5C3FD34126765A442EFB99905F8104DD258AC507F" - + "D6406CFF14266D31266FEA1E5C41564B777E690F5504F213" + "160217B4B01B886A5E91547F9E2749F4D7FBD7D3B9A92EE1" - + "909D0D2263F80A76A6A24C087A091F531DBF0A0169B6A28A" + "D662A4D18E73AFA32D779D5918D08BC8858F4DCEF97C2A24" - + "855E6EEB22B3B2E5"; - private static readonly string rfc5114_1024_160_q = "F518AA8781A8DF278ABA4E7D64B7CB9D49462353"; - - /// - /// Existence of a "hidden SNFS" backdoor cannot be ruled out. see https://eprint.iacr.org/2016/961.pdf . - /// - [Obsolete("Existence of a 'hidden SNFS' backdoor cannot be ruled out.")] - public static readonly DHParameters rfc5114_1024_160 = FromPGQ(rfc5114_1024_160_p, rfc5114_1024_160_g, - rfc5114_1024_160_q); - - private static readonly string rfc5114_2048_224_p = "AD107E1E9123A9D0D660FAA79559C51FA20D64E5683B9FD1" - + "B54B1597B61D0A75E6FA141DF95A56DBAF9A3C407BA1DF15" + "EB3D688A309C180E1DE6B85A1274A0A66D3F8152AD6AC212" - + "9037C9EDEFDA4DF8D91E8FEF55B7394B7AD5B7D0B6C12207" + "C9F98D11ED34DBF6C6BA0B2C8BBC27BE6A00E0A0B9C49708" - + "B3BF8A317091883681286130BC8985DB1602E714415D9330" + "278273C7DE31EFDC7310F7121FD5A07415987D9ADC0A486D" - + "CDF93ACC44328387315D75E198C641A480CD86A1B9E587E8" + "BE60E69CC928B2B9C52172E413042E9B23F10B0E16E79763" - + "C9B53DCF4BA80A29E3FB73C16B8E75B97EF363E2FFA31F71" + "CF9DE5384E71B81C0AC4DFFE0C10E64F"; - private static readonly string rfc5114_2048_224_g = "AC4032EF4F2D9AE39DF30B5C8FFDAC506CDEBE7B89998CAF" - + "74866A08CFE4FFE3A6824A4E10B9A6F0DD921F01A70C4AFA" + "AB739D7700C29F52C57DB17C620A8652BE5E9001A8D66AD7" - + "C17669101999024AF4D027275AC1348BB8A762D0521BC98A" + "E247150422EA1ED409939D54DA7460CDB5F6C6B250717CBE" - + "F180EB34118E98D119529A45D6F834566E3025E316A330EF" + "BB77A86F0C1AB15B051AE3D428C8F8ACB70A8137150B8EEB" - + "10E183EDD19963DDD9E263E4770589EF6AA21E7F5F2FF381" + "B539CCE3409D13CD566AFBB48D6C019181E1BCFE94B30269" - + "EDFE72FE9B6AA4BD7B5A0F1C71CFFF4C19C418E1F6EC0179" + "81BC087F2A7065B384B890D3191F2BFA"; - private static readonly string rfc5114_2048_224_q = "801C0D34C58D93FE997177101F80535A4738CEBCBF389A99B36371EB"; - - /// - /// Existence of a "hidden SNFS" backdoor cannot be ruled out. see https://eprint.iacr.org/2016/961.pdf . - /// - [Obsolete("Existence of a 'hidden SNFS' backdoor cannot be ruled out.")] - public static readonly DHParameters rfc5114_2048_224 = FromPGQ(rfc5114_2048_224_p, rfc5114_2048_224_g, - rfc5114_2048_224_q); - - private static readonly string rfc5114_2048_256_p = "87A8E61DB4B6663CFFBBD19C651959998CEEF608660DD0F2" - + "5D2CEED4435E3B00E00DF8F1D61957D4FAF7DF4561B2AA30" + "16C3D91134096FAA3BF4296D830E9A7C209E0C6497517ABD" - + "5A8A9D306BCF67ED91F9E6725B4758C022E0B1EF4275BF7B" + "6C5BFC11D45F9088B941F54EB1E59BB8BC39A0BF12307F5C" - + "4FDB70C581B23F76B63ACAE1CAA6B7902D52526735488A0E" + "F13C6D9A51BFA4AB3AD8347796524D8EF6A167B5A41825D9" - + "67E144E5140564251CCACB83E6B486F6B3CA3F7971506026" + "C0B857F689962856DED4010ABD0BE621C3A3960A54E710C3" - + "75F26375D7014103A4B54330C198AF126116D2276E11715F" + "693877FAD7EF09CADB094AE91E1A1597"; - private static readonly string rfc5114_2048_256_g = "3FB32C9B73134D0B2E77506660EDBD484CA7B18F21EF2054" - + "07F4793A1A0BA12510DBC15077BE463FFF4FED4AAC0BB555" + "BE3A6C1B0C6B47B1BC3773BF7E8C6F62901228F8C28CBB18" - + "A55AE31341000A650196F931C77A57F2DDF463E5E9EC144B" + "777DE62AAAB8A8628AC376D282D6ED3864E67982428EBC83" - + "1D14348F6F2F9193B5045AF2767164E1DFC967C1FB3F2E55" + "A4BD1BFFE83B9C80D052B985D182EA0ADB2A3B7313D3FE14" - + "C8484B1E052588B9B7D2BBD2DF016199ECD06E1557CD0915" + "B3353BBB64E0EC377FD028370DF92B52C7891428CDC67EB6" - + "184B523D1DB246C32F63078490F00EF8D647D148D4795451" + "5E2327CFEF98C582664B4C0F6CC41659"; - private static readonly string rfc5114_2048_256_q = "8CF83642A709A097B447997640129DA299B1A47D1EB3750B" - + "A308B0FE64F5FBD3"; - - /// - /// Existence of a "hidden SNFS" backdoor cannot be ruled out. see https://eprint.iacr.org/2016/961.pdf . - /// - [Obsolete("Existence of a 'hidden SNFS' backdoor cannot be ruled out.")] - public static readonly DHParameters rfc5114_2048_256 = FromPGQ(rfc5114_2048_256_p, rfc5114_2048_256_g, - rfc5114_2048_256_q); - - /* - * RFC 5996 - */ - public static readonly DHParameters rfc5996_768 = rfc4306_768; - public static readonly DHParameters rfc5996_1024 = rfc4306_1024; - - /* - * RFC 7919 - */ - private static readonly string rfc7919_ffdhe2048_p = "FFFFFFFFFFFFFFFFADF85458A2BB4A9AAFDC5620273D3CF1" - + "D8B9C583CE2D3695A9E13641146433FBCC939DCE249B3EF9" + "7D2FE363630C75D8F681B202AEC4617AD3DF1ED5D5FD6561" - + "2433F51F5F066ED0856365553DED1AF3B557135E7F57C935" + "984F0C70E0E68B77E2A689DAF3EFE8721DF158A136ADE735" - + "30ACCA4F483A797ABC0AB182B324FB61D108A94BB2C8E3FB" + "B96ADAB760D7F4681D4F42A3DE394DF4AE56EDE76372BB19" - + "0B07A7C8EE0A6D709E02FCE1CDF7E2ECC03404CD28342F61" + "9172FE9CE98583FF8E4F1232EEF28183C3FE3B1B4C6FAD73" - + "3BB5FCBC2EC22005C58EF1837D1683B2C6F34A26C1B2EFFA" + "886B423861285C97FFFFFFFFFFFFFFFF"; - public static readonly DHParameters rfc7919_ffdhe2048 = Rfc7919Parameters(rfc7919_ffdhe2048_p, 225); - - private static readonly string rfc7919_ffdhe3072_p = "FFFFFFFFFFFFFFFFADF85458A2BB4A9AAFDC5620273D3CF1" - + "D8B9C583CE2D3695A9E13641146433FBCC939DCE249B3EF9" + "7D2FE363630C75D8F681B202AEC4617AD3DF1ED5D5FD6561" - + "2433F51F5F066ED0856365553DED1AF3B557135E7F57C935" + "984F0C70E0E68B77E2A689DAF3EFE8721DF158A136ADE735" - + "30ACCA4F483A797ABC0AB182B324FB61D108A94BB2C8E3FB" + "B96ADAB760D7F4681D4F42A3DE394DF4AE56EDE76372BB19" - + "0B07A7C8EE0A6D709E02FCE1CDF7E2ECC03404CD28342F61" + "9172FE9CE98583FF8E4F1232EEF28183C3FE3B1B4C6FAD73" - + "3BB5FCBC2EC22005C58EF1837D1683B2C6F34A26C1B2EFFA" + "886B4238611FCFDCDE355B3B6519035BBC34F4DEF99C0238" - + "61B46FC9D6E6C9077AD91D2691F7F7EE598CB0FAC186D91C" + "AEFE130985139270B4130C93BC437944F4FD4452E2D74DD3" - + "64F2E21E71F54BFF5CAE82AB9C9DF69EE86D2BC522363A0D" + "ABC521979B0DEADA1DBF9A42D5C4484E0ABCD06BFA53DDEF" - + "3C1B20EE3FD59D7C25E41D2B66C62E37FFFFFFFFFFFFFFFF"; - public static readonly DHParameters rfc7919_ffdhe3072 = Rfc7919Parameters(rfc7919_ffdhe3072_p, 275); - - private static readonly string rfc7919_ffdhe4096_p = "FFFFFFFFFFFFFFFFADF85458A2BB4A9AAFDC5620273D3CF1" - + "D8B9C583CE2D3695A9E13641146433FBCC939DCE249B3EF9" + "7D2FE363630C75D8F681B202AEC4617AD3DF1ED5D5FD6561" - + "2433F51F5F066ED0856365553DED1AF3B557135E7F57C935" + "984F0C70E0E68B77E2A689DAF3EFE8721DF158A136ADE735" - + "30ACCA4F483A797ABC0AB182B324FB61D108A94BB2C8E3FB" + "B96ADAB760D7F4681D4F42A3DE394DF4AE56EDE76372BB19" - + "0B07A7C8EE0A6D709E02FCE1CDF7E2ECC03404CD28342F61" + "9172FE9CE98583FF8E4F1232EEF28183C3FE3B1B4C6FAD73" - + "3BB5FCBC2EC22005C58EF1837D1683B2C6F34A26C1B2EFFA" + "886B4238611FCFDCDE355B3B6519035BBC34F4DEF99C0238" - + "61B46FC9D6E6C9077AD91D2691F7F7EE598CB0FAC186D91C" + "AEFE130985139270B4130C93BC437944F4FD4452E2D74DD3" - + "64F2E21E71F54BFF5CAE82AB9C9DF69EE86D2BC522363A0D" + "ABC521979B0DEADA1DBF9A42D5C4484E0ABCD06BFA53DDEF" - + "3C1B20EE3FD59D7C25E41D2B669E1EF16E6F52C3164DF4FB" + "7930E9E4E58857B6AC7D5F42D69F6D187763CF1D55034004" - + "87F55BA57E31CC7A7135C886EFB4318AED6A1E012D9E6832" + "A907600A918130C46DC778F971AD0038092999A333CB8B7A" - + "1A1DB93D7140003C2A4ECEA9F98D0ACC0A8291CDCEC97DCF" + "8EC9B55A7F88A46B4DB5A851F44182E1C68A007E5E655F6A" - + "FFFFFFFFFFFFFFFF"; - public static readonly DHParameters rfc7919_ffdhe4096 = Rfc7919Parameters(rfc7919_ffdhe4096_p, 325); - - private static readonly string rfc7919_ffdhe6144_p = "FFFFFFFFFFFFFFFFADF85458A2BB4A9AAFDC5620273D3CF1" - + "D8B9C583CE2D3695A9E13641146433FBCC939DCE249B3EF9" + "7D2FE363630C75D8F681B202AEC4617AD3DF1ED5D5FD6561" - + "2433F51F5F066ED0856365553DED1AF3B557135E7F57C935" + "984F0C70E0E68B77E2A689DAF3EFE8721DF158A136ADE735" - + "30ACCA4F483A797ABC0AB182B324FB61D108A94BB2C8E3FB" + "B96ADAB760D7F4681D4F42A3DE394DF4AE56EDE76372BB19" - + "0B07A7C8EE0A6D709E02FCE1CDF7E2ECC03404CD28342F61" + "9172FE9CE98583FF8E4F1232EEF28183C3FE3B1B4C6FAD73" - + "3BB5FCBC2EC22005C58EF1837D1683B2C6F34A26C1B2EFFA" + "886B4238611FCFDCDE355B3B6519035BBC34F4DEF99C0238" - + "61B46FC9D6E6C9077AD91D2691F7F7EE598CB0FAC186D91C" + "AEFE130985139270B4130C93BC437944F4FD4452E2D74DD3" - + "64F2E21E71F54BFF5CAE82AB9C9DF69EE86D2BC522363A0D" + "ABC521979B0DEADA1DBF9A42D5C4484E0ABCD06BFA53DDEF" - + "3C1B20EE3FD59D7C25E41D2B669E1EF16E6F52C3164DF4FB" + "7930E9E4E58857B6AC7D5F42D69F6D187763CF1D55034004" - + "87F55BA57E31CC7A7135C886EFB4318AED6A1E012D9E6832" + "A907600A918130C46DC778F971AD0038092999A333CB8B7A" - + "1A1DB93D7140003C2A4ECEA9F98D0ACC0A8291CDCEC97DCF" + "8EC9B55A7F88A46B4DB5A851F44182E1C68A007E5E0DD902" - + "0BFD64B645036C7A4E677D2C38532A3A23BA4442CAF53EA6" + "3BB454329B7624C8917BDD64B1C0FD4CB38E8C334C701C3A" - + "CDAD0657FCCFEC719B1F5C3E4E46041F388147FB4CFDB477" + "A52471F7A9A96910B855322EDB6340D8A00EF092350511E3" - + "0ABEC1FFF9E3A26E7FB29F8C183023C3587E38DA0077D9B4" + "763E4E4B94B2BBC194C6651E77CAF992EEAAC0232A281BF6" - + "B3A739C1226116820AE8DB5847A67CBEF9C9091B462D538C" + "D72B03746AE77F5E62292C311562A846505DC82DB854338A" - + "E49F5235C95B91178CCF2DD5CACEF403EC9D1810C6272B04" + "5B3B71F9DC6B80D63FDD4A8E9ADB1E6962A69526D43161C1" - + "A41D570D7938DAD4A40E329CD0E40E65FFFFFFFFFFFFFFFF"; - public static readonly DHParameters rfc7919_ffdhe6144 = Rfc7919Parameters(rfc7919_ffdhe6144_p, 375); - - private static readonly string rfc7919_ffdhe8192_p = "FFFFFFFFFFFFFFFFADF85458A2BB4A9AAFDC5620273D3CF1" - + "D8B9C583CE2D3695A9E13641146433FBCC939DCE249B3EF9" + "7D2FE363630C75D8F681B202AEC4617AD3DF1ED5D5FD6561" - + "2433F51F5F066ED0856365553DED1AF3B557135E7F57C935" + "984F0C70E0E68B77E2A689DAF3EFE8721DF158A136ADE735" - + "30ACCA4F483A797ABC0AB182B324FB61D108A94BB2C8E3FB" + "B96ADAB760D7F4681D4F42A3DE394DF4AE56EDE76372BB19" - + "0B07A7C8EE0A6D709E02FCE1CDF7E2ECC03404CD28342F61" + "9172FE9CE98583FF8E4F1232EEF28183C3FE3B1B4C6FAD73" - + "3BB5FCBC2EC22005C58EF1837D1683B2C6F34A26C1B2EFFA" + "886B4238611FCFDCDE355B3B6519035BBC34F4DEF99C0238" - + "61B46FC9D6E6C9077AD91D2691F7F7EE598CB0FAC186D91C" + "AEFE130985139270B4130C93BC437944F4FD4452E2D74DD3" - + "64F2E21E71F54BFF5CAE82AB9C9DF69EE86D2BC522363A0D" + "ABC521979B0DEADA1DBF9A42D5C4484E0ABCD06BFA53DDEF" - + "3C1B20EE3FD59D7C25E41D2B669E1EF16E6F52C3164DF4FB" + "7930E9E4E58857B6AC7D5F42D69F6D187763CF1D55034004" - + "87F55BA57E31CC7A7135C886EFB4318AED6A1E012D9E6832" + "A907600A918130C46DC778F971AD0038092999A333CB8B7A" - + "1A1DB93D7140003C2A4ECEA9F98D0ACC0A8291CDCEC97DCF" + "8EC9B55A7F88A46B4DB5A851F44182E1C68A007E5E0DD902" - + "0BFD64B645036C7A4E677D2C38532A3A23BA4442CAF53EA6" + "3BB454329B7624C8917BDD64B1C0FD4CB38E8C334C701C3A" - + "CDAD0657FCCFEC719B1F5C3E4E46041F388147FB4CFDB477" + "A52471F7A9A96910B855322EDB6340D8A00EF092350511E3" - + "0ABEC1FFF9E3A26E7FB29F8C183023C3587E38DA0077D9B4" + "763E4E4B94B2BBC194C6651E77CAF992EEAAC0232A281BF6" - + "B3A739C1226116820AE8DB5847A67CBEF9C9091B462D538C" + "D72B03746AE77F5E62292C311562A846505DC82DB854338A" - + "E49F5235C95B91178CCF2DD5CACEF403EC9D1810C6272B04" + "5B3B71F9DC6B80D63FDD4A8E9ADB1E6962A69526D43161C1" - + "A41D570D7938DAD4A40E329CCFF46AAA36AD004CF600C838" + "1E425A31D951AE64FDB23FCEC9509D43687FEB69EDD1CC5E" - + "0B8CC3BDF64B10EF86B63142A3AB8829555B2F747C932665" + "CB2C0F1CC01BD70229388839D2AF05E454504AC78B758282" - + "2846C0BA35C35F5C59160CC046FD8251541FC68C9C86B022" + "BB7099876A460E7451A8A93109703FEE1C217E6C3826E52C" - + "51AA691E0E423CFC99E9E31650C1217B624816CDAD9A95F9" + "D5B8019488D9C0A0A1FE3075A577E23183F81D4A3F2FA457" - + "1EFC8CE0BA8A4FE8B6855DFE72B0A66EDED2FBABFBE58A30" + "FAFABE1C5D71A87E2F741EF8C1FE86FEA6BBFDE530677F0D" - + "97D11D49F7A8443D0822E506A9F4614E011E2A94838FF88C" + "D68C8BB7C5C6424CFFFFFFFFFFFFFFFF"; - public static readonly DHParameters rfc7919_ffdhe8192 = Rfc7919Parameters(rfc7919_ffdhe8192_p, 400); - } -} diff --git a/bc-sharp-crypto/src/crypto/agreement/ECDHBasicAgreement.cs b/bc-sharp-crypto/src/crypto/agreement/ECDHBasicAgreement.cs deleted file mode 100644 index ca7b3fa..0000000 --- a/bc-sharp-crypto/src/crypto/agreement/ECDHBasicAgreement.cs +++ /dev/null @@ -1,60 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Agreement -{ - /** - * P1363 7.2.1 ECSVDP-DH - * - * ECSVDP-DH is Elliptic Curve Secret Value Derivation Primitive, - * Diffie-Hellman version. It is based on the work of [DH76], [Mil86], - * and [Kob87]. This primitive derives a shared secret value from one - * party's private key and another party's public key, where both have - * the same set of EC domain parameters. If two parties correctly - * execute this primitive, they will produce the same output. This - * primitive can be invoked by a scheme to derive a shared secret key; - * specifically, it may be used with the schemes ECKAS-DH1 and - * DL/ECKAS-DH2. It assumes that the input keys are valid (see also - * Section 7.2.2). - */ - public class ECDHBasicAgreement - : IBasicAgreement - { - protected internal ECPrivateKeyParameters privKey; - - public virtual void Init( - ICipherParameters parameters) - { - if (parameters is ParametersWithRandom) - { - parameters = ((ParametersWithRandom)parameters).Parameters; - } - - this.privKey = (ECPrivateKeyParameters)parameters; - } - - public virtual int GetFieldSize() - { - return (privKey.Parameters.Curve.FieldSize + 7) / 8; - } - - public virtual BigInteger CalculateAgreement( - ICipherParameters pubKey) - { - ECPublicKeyParameters pub = (ECPublicKeyParameters) pubKey; - if (!pub.Parameters.Equals(privKey.Parameters)) - throw new InvalidOperationException("ECDH public key has wrong domain parameters"); - - ECPoint P = pub.Q.Multiply(privKey.D).Normalize(); - - if (P.IsInfinity) - throw new InvalidOperationException("Infinity is not a valid agreement value for ECDH"); - - return P.AffineXCoord.ToBigInteger(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/agreement/ECDHCBasicAgreement.cs b/bc-sharp-crypto/src/crypto/agreement/ECDHCBasicAgreement.cs deleted file mode 100644 index 1c9ae45..0000000 --- a/bc-sharp-crypto/src/crypto/agreement/ECDHCBasicAgreement.cs +++ /dev/null @@ -1,68 +0,0 @@ -using System; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Agreement -{ - /** - * P1363 7.2.2 ECSVDP-DHC - * - * ECSVDP-DHC is Elliptic Curve Secret Value Derivation Primitive, - * Diffie-Hellman version with cofactor multiplication. It is based on - * the work of [DH76], [Mil86], [Kob87], [LMQ98] and [Kal98a]. This - * primitive derives a shared secret value from one party's private key - * and another party's public key, where both have the same set of EC - * domain parameters. If two parties correctly execute this primitive, - * they will produce the same output. This primitive can be invoked by a - * scheme to derive a shared secret key; specifically, it may be used - * with the schemes ECKAS-DH1 and DL/ECKAS-DH2. It does not assume the - * validity of the input public key (see also Section 7.2.1). - *

- * Note: As stated P1363 compatibility mode with ECDH can be preset, and - * in this case the implementation doesn't have a ECDH compatibility mode - * (if you want that just use ECDHBasicAgreement and note they both implement - * BasicAgreement!).

- */ - public class ECDHCBasicAgreement - : IBasicAgreement - { - private ECPrivateKeyParameters privKey; - - public virtual void Init( - ICipherParameters parameters) - { - if (parameters is ParametersWithRandom) - { - parameters = ((ParametersWithRandom) parameters).Parameters; - } - - this.privKey = (ECPrivateKeyParameters)parameters; - } - - public virtual int GetFieldSize() - { - return (privKey.Parameters.Curve.FieldSize + 7) / 8; - } - - public virtual BigInteger CalculateAgreement( - ICipherParameters pubKey) - { - ECPublicKeyParameters pub = (ECPublicKeyParameters) pubKey; - ECDomainParameters parameters = pub.Parameters; - if (!parameters.Equals(privKey.Parameters)) - throw new InvalidOperationException("ECDHC public key has wrong domain parameters"); - - BigInteger hd = parameters.H.Multiply(privKey.D).Mod(parameters.N); - - ECPoint P = pub.Q.Multiply(hd).Normalize(); - - if (P.IsInfinity) - throw new InvalidOperationException("Infinity is not a valid agreement value for ECDHC"); - - return P.AffineXCoord.ToBigInteger(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/agreement/ECDHWithKdfBasicAgreement.cs b/bc-sharp-crypto/src/crypto/agreement/ECDHWithKdfBasicAgreement.cs deleted file mode 100644 index 1de80d1..0000000 --- a/bc-sharp-crypto/src/crypto/agreement/ECDHWithKdfBasicAgreement.cs +++ /dev/null @@ -1,63 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto.Agreement.Kdf; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Agreement -{ - public class ECDHWithKdfBasicAgreement - : ECDHBasicAgreement - { - private readonly string algorithm; - private readonly IDerivationFunction kdf; - - public ECDHWithKdfBasicAgreement( - string algorithm, - IDerivationFunction kdf) - { - if (algorithm == null) - throw new ArgumentNullException("algorithm"); - if (kdf == null) - throw new ArgumentNullException("kdf"); - - this.algorithm = algorithm; - this.kdf = kdf; - } - - public override BigInteger CalculateAgreement( - ICipherParameters pubKey) - { - // Note that the ec.KeyAgreement class in JCE only uses kdf in one - // of the engineGenerateSecret methods. - - BigInteger result = base.CalculateAgreement(pubKey); - - int keySize = GeneratorUtilities.GetDefaultKeySize(algorithm); - - DHKdfParameters dhKdfParams = new DHKdfParameters( - new DerObjectIdentifier(algorithm), - keySize, - BigIntToBytes(result)); - - kdf.Init(dhKdfParams); - - byte[] keyBytes = new byte[keySize / 8]; - kdf.GenerateBytes(keyBytes, 0, keyBytes.Length); - - return new BigInteger(1, keyBytes); - } - - private byte[] BigIntToBytes(BigInteger r) - { - int byteLength = X9IntegerConverter.GetByteLength(privKey.Parameters.Curve); - return X9IntegerConverter.IntegerToBytes(r, byteLength); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/agreement/ECMqvBasicAgreement.cs b/bc-sharp-crypto/src/crypto/agreement/ECMqvBasicAgreement.cs deleted file mode 100644 index 8d5cebb..0000000 --- a/bc-sharp-crypto/src/crypto/agreement/ECMqvBasicAgreement.cs +++ /dev/null @@ -1,93 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC; - -namespace Org.BouncyCastle.Crypto.Agreement -{ - public class ECMqvBasicAgreement - : IBasicAgreement - { - protected internal MqvPrivateParameters privParams; - - public virtual void Init( - ICipherParameters parameters) - { - if (parameters is ParametersWithRandom) - { - parameters = ((ParametersWithRandom)parameters).Parameters; - } - - this.privParams = (MqvPrivateParameters)parameters; - } - - public virtual int GetFieldSize() - { - return (privParams.StaticPrivateKey.Parameters.Curve.FieldSize + 7) / 8; - } - - public virtual BigInteger CalculateAgreement( - ICipherParameters pubKey) - { - MqvPublicParameters pubParams = (MqvPublicParameters)pubKey; - - ECPrivateKeyParameters staticPrivateKey = privParams.StaticPrivateKey; - ECDomainParameters parameters = staticPrivateKey.Parameters; - - if (!parameters.Equals(pubParams.StaticPublicKey.Parameters)) - throw new InvalidOperationException("ECMQV public key components have wrong domain parameters"); - - ECPoint agreement = CalculateMqvAgreement(parameters, staticPrivateKey, - privParams.EphemeralPrivateKey, privParams.EphemeralPublicKey, - pubParams.StaticPublicKey, pubParams.EphemeralPublicKey).Normalize(); - - if (agreement.IsInfinity) - throw new InvalidOperationException("Infinity is not a valid agreement value for MQV"); - - return agreement.AffineXCoord.ToBigInteger(); - } - - // The ECMQV Primitive as described in SEC-1, 3.4 - private static ECPoint CalculateMqvAgreement( - ECDomainParameters parameters, - ECPrivateKeyParameters d1U, - ECPrivateKeyParameters d2U, - ECPublicKeyParameters Q2U, - ECPublicKeyParameters Q1V, - ECPublicKeyParameters Q2V) - { - BigInteger n = parameters.N; - int e = (n.BitLength + 1) / 2; - BigInteger powE = BigInteger.One.ShiftLeft(e); - - ECCurve curve = parameters.Curve; - - ECPoint[] points = new ECPoint[]{ - // The Q2U public key is optional - but will be calculated for us if it wasn't present - ECAlgorithms.ImportPoint(curve, Q2U.Q), - ECAlgorithms.ImportPoint(curve, Q1V.Q), - ECAlgorithms.ImportPoint(curve, Q2V.Q) - }; - - curve.NormalizeAll(points); - - ECPoint q2u = points[0], q1v = points[1], q2v = points[2]; - - BigInteger x = q2u.AffineXCoord.ToBigInteger(); - BigInteger xBar = x.Mod(powE); - BigInteger Q2UBar = xBar.SetBit(e); - BigInteger s = d1U.D.Multiply(Q2UBar).Add(d2U.D).Mod(n); - - BigInteger xPrime = q2v.AffineXCoord.ToBigInteger(); - BigInteger xPrimeBar = xPrime.Mod(powE); - BigInteger Q2VBar = xPrimeBar.SetBit(e); - - BigInteger hs = parameters.H.Multiply(s).Mod(n); - - return ECAlgorithms.SumOfTwoMultiplies( - q1v, Q2VBar.Multiply(hs).Mod(n), q2v, hs); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/agreement/ECMqvWithKdfBasicAgreement.cs b/bc-sharp-crypto/src/crypto/agreement/ECMqvWithKdfBasicAgreement.cs deleted file mode 100644 index 7d79fc4..0000000 --- a/bc-sharp-crypto/src/crypto/agreement/ECMqvWithKdfBasicAgreement.cs +++ /dev/null @@ -1,63 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto.Agreement.Kdf; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Agreement -{ - public class ECMqvWithKdfBasicAgreement - : ECMqvBasicAgreement - { - private readonly string algorithm; - private readonly IDerivationFunction kdf; - - public ECMqvWithKdfBasicAgreement( - string algorithm, - IDerivationFunction kdf) - { - if (algorithm == null) - throw new ArgumentNullException("algorithm"); - if (kdf == null) - throw new ArgumentNullException("kdf"); - - this.algorithm = algorithm; - this.kdf = kdf; - } - - public override BigInteger CalculateAgreement( - ICipherParameters pubKey) - { - // Note that the ec.KeyAgreement class in JCE only uses kdf in one - // of the engineGenerateSecret methods. - - BigInteger result = base.CalculateAgreement(pubKey); - - int keySize = GeneratorUtilities.GetDefaultKeySize(algorithm); - - DHKdfParameters dhKdfParams = new DHKdfParameters( - new DerObjectIdentifier(algorithm), - keySize, - BigIntToBytes(result)); - - kdf.Init(dhKdfParams); - - byte[] keyBytes = new byte[keySize / 8]; - kdf.GenerateBytes(keyBytes, 0, keyBytes.Length); - - return new BigInteger(1, keyBytes); - } - - private byte[] BigIntToBytes(BigInteger r) - { - int byteLength = X9IntegerConverter.GetByteLength(privParams.StaticPrivateKey.Parameters.Curve); - return X9IntegerConverter.IntegerToBytes(r, byteLength); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/agreement/jpake/JPakeParticipant.cs b/bc-sharp-crypto/src/crypto/agreement/jpake/JPakeParticipant.cs deleted file mode 100644 index 7942848..0000000 --- a/bc-sharp-crypto/src/crypto/agreement/jpake/JPakeParticipant.cs +++ /dev/null @@ -1,456 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Agreement.JPake -{ - /// - /// A participant in a Password Authenticated Key Exchange by Juggling (J-PAKE) exchange. - /// - /// The J-PAKE exchange is defined by Feng Hao and Peter Ryan in the paper - /// - /// "Password Authenticated Key Exchange by Juggling, 2008." - /// - /// The J-PAKE protocol is symmetric. - /// There is no notion of a client or server, but rather just two participants. - /// An instance of JPakeParticipant represents one participant, and - /// is the primary interface for executing the exchange. - /// - /// To execute an exchange, construct a JPakeParticipant on each end, - /// and call the following 7 methods - /// (once and only once, in the given order, for each participant, sending messages between them as described): - /// - /// CreateRound1PayloadToSend() - and send the payload to the other participant - /// ValidateRound1PayloadReceived(JPakeRound1Payload) - use the payload received from the other participant - /// CreateRound2PayloadToSend() - and send the payload to the other participant - /// ValidateRound2PayloadReceived(JPakeRound2Payload) - use the payload received from the other participant - /// CalculateKeyingMaterial() - /// CreateRound3PayloadToSend(BigInteger) - and send the payload to the other participant - /// ValidateRound3PayloadReceived(JPakeRound3Payload, BigInteger) - use the payload received from the other participant - /// - /// Each side should derive a session key from the keying material returned by CalculateKeyingMaterial(). - /// The caller is responsible for deriving the session key using a secure key derivation function (KDF). - /// - /// Round 3 is an optional key confirmation process. - /// If you do not execute round 3, then there is no assurance that both participants are using the same key. - /// (i.e. if the participants used different passwords, then their session keys will differ.) - /// - /// If the round 3 validation succeeds, then the keys are guaranteed to be the same on both sides. - /// - /// The symmetric design can easily support the asymmetric cases when one party initiates the communication. - /// e.g. Sometimes the round1 payload and round2 payload may be sent in one pass. - /// Also, in some cases, the key confirmation payload can be sent together with the round2 payload. - /// These are the trivial techniques to optimize the communication. - /// - /// The key confirmation process is implemented as specified in - /// NIST SP 800-56A Revision 1, - /// Section 8.2 Unilateral Key Confirmation for Key Agreement Schemes. - /// - /// This class is stateful and NOT threadsafe. - /// Each instance should only be used for ONE complete J-PAKE exchange - /// (i.e. a new JPakeParticipant should be constructed for each new J-PAKE exchange). - /// - public class JPakeParticipant - { - // Possible internal states. Used for state checking. - public static readonly int STATE_INITIALIZED = 0; - public static readonly int STATE_ROUND_1_CREATED = 10; - public static readonly int STATE_ROUND_1_VALIDATED = 20; - public static readonly int STATE_ROUND_2_CREATED = 30; - public static readonly int STATE_ROUND_2_VALIDATED = 40; - public static readonly int STATE_KEY_CALCULATED = 50; - public static readonly int STATE_ROUND_3_CREATED = 60; - public static readonly int STATE_ROUND_3_VALIDATED = 70; - - // Unique identifier of this participant. - // The two participants in the exchange must NOT share the same id. - private string participantId; - - // Shared secret. This only contains the secret between construction - // and the call to CalculateKeyingMaterial(). - // - // i.e. When CalculateKeyingMaterial() is called, this buffer overwritten with 0's, - // and the field is set to null. - private char[] password; - - // Digest to use during calculations. - private IDigest digest; - - // Source of secure random data. - private readonly SecureRandom random; - - private readonly BigInteger p; - private readonly BigInteger q; - private readonly BigInteger g; - - // The participantId of the other participant in this exchange. - private string partnerParticipantId; - - // Alice's x1 or Bob's x3. - private BigInteger x1; - // Alice's x2 or Bob's x4. - private BigInteger x2; - // Alice's g^x1 or Bob's g^x3. - private BigInteger gx1; - // Alice's g^x2 or Bob's g^x4. - private BigInteger gx2; - // Alice's g^x3 or Bob's g^x1. - private BigInteger gx3; - // Alice's g^x4 or Bob's g^x2. - private BigInteger gx4; - // Alice's B or Bob's A. - private BigInteger b; - - // The current state. - // See the STATE_* constants for possible values. - private int state; - - /// - /// Convenience constructor for a new JPakeParticipant that uses - /// the JPakePrimeOrderGroups#NIST_3072 prime order group, - /// a SHA-256 digest, and a default SecureRandom implementation. - /// - /// After construction, the State state will be STATE_INITIALIZED. - /// - /// Throws NullReferenceException if any argument is null. Throws - /// ArgumentException if password is empty. - /// - /// Unique identifier of this participant. - /// The two participants in the exchange must NOT share the same id. - /// Shared secret. - /// A defensive copy of this array is made (and cleared once CalculateKeyingMaterial() is called). - /// Caller should clear the input password as soon as possible. - public JPakeParticipant(string participantId, char[] password) - : this(participantId, password, JPakePrimeOrderGroups.NIST_3072) { } - - /// - /// Convenience constructor for a new JPakeParticipant that uses - /// a SHA-256 digest, and a default SecureRandom implementation. - /// - /// After construction, the State state will be STATE_INITIALIZED. - /// - /// Throws NullReferenceException if any argument is null. Throws - /// ArgumentException if password is empty. - /// - /// Unique identifier of this participant. - /// The two participants in the exchange must NOT share the same id. - /// Shared secret. - /// A defensive copy of this array is made (and cleared once CalculateKeyingMaterial() is called). - /// Caller should clear the input password as soon as possible. - /// Prime order group. See JPakePrimeOrderGroups for standard groups. - public JPakeParticipant(string participantId, char[] password, JPakePrimeOrderGroup group) - : this(participantId, password, group, new Sha256Digest(), new SecureRandom()) { } - - - /// - /// Constructor for a new JPakeParticipant. - /// - /// After construction, the State state will be STATE_INITIALIZED. - /// - /// Throws NullReferenceException if any argument is null. Throws - /// ArgumentException if password is empty. - /// - /// Unique identifier of this participant. - /// The two participants in the exchange must NOT share the same id. - /// Shared secret. - /// A defensive copy of this array is made (and cleared once CalculateKeyingMaterial() is called). - /// Caller should clear the input password as soon as possible. - /// Prime order group. See JPakePrimeOrderGroups for standard groups. - /// Digest to use during zero knowledge proofs and key confirmation - /// (SHA-256 or stronger preferred). - /// Source of secure random data for x1 and x2, and for the zero knowledge proofs. - public JPakeParticipant(string participantId, char[] password, JPakePrimeOrderGroup group, IDigest digest, SecureRandom random) - { - JPakeUtilities.ValidateNotNull(participantId, "participantId"); - JPakeUtilities.ValidateNotNull(password, "password"); - JPakeUtilities.ValidateNotNull(group, "p"); - JPakeUtilities.ValidateNotNull(digest, "digest"); - JPakeUtilities.ValidateNotNull(random, "random"); - - if (password.Length == 0) - { - throw new ArgumentException("Password must not be empty."); - } - - this.participantId = participantId; - - // Create a defensive copy so as to fully encapsulate the password. - // - // This array will contain the password for the lifetime of this - // participant BEFORE CalculateKeyingMaterial() is called. - // - // i.e. When CalculateKeyingMaterial() is called, the array will be cleared - // in order to remove the password from memory. - // - // The caller is responsible for clearing the original password array - // given as input to this constructor. - this.password = new char[password.Length]; - Array.Copy(password, this.password, password.Length); - - this.p = group.P; - this.q = group.Q; - this.g = group.G; - - this.digest = digest; - this.random = random; - - this.state = STATE_INITIALIZED; - } - - /// - /// Gets the current state of this participant. - /// See the STATE_* constants for possible values. - /// - public virtual int State - { - get { return state; } - } - - - /// - /// Creates and returns the payload to send to the other participant during round 1. - /// - /// After execution, the State state} will be STATE_ROUND_1_CREATED}. - /// - public virtual JPakeRound1Payload CreateRound1PayloadToSend() - { - if (this.state >= STATE_ROUND_1_CREATED) - throw new InvalidOperationException("Round 1 payload already created for " + this.participantId); - - this.x1 = JPakeUtilities.GenerateX1(q, random); - this.x2 = JPakeUtilities.GenerateX2(q, random); - - this.gx1 = JPakeUtilities.CalculateGx(p, g, x1); - this.gx2 = JPakeUtilities.CalculateGx(p, g, x2); - BigInteger[] knowledgeProofForX1 = JPakeUtilities.CalculateZeroKnowledgeProof(p, q, g, gx1, x1, participantId, digest, random); - BigInteger[] knowledgeProofForX2 = JPakeUtilities.CalculateZeroKnowledgeProof(p, q, g, gx2, x2, participantId, digest, random); - - this.state = STATE_ROUND_1_CREATED; - - return new JPakeRound1Payload(participantId, gx1, gx2, knowledgeProofForX1, knowledgeProofForX2); - } - - /// - /// Validates the payload received from the other participant during round 1. - /// - /// Must be called prior to CreateRound2PayloadToSend(). - /// - /// After execution, the State state will be STATE_ROUND_1_VALIDATED. - /// - /// Throws CryptoException if validation fails. Throws InvalidOperationException - /// if called multiple times. - /// - public virtual void ValidateRound1PayloadReceived(JPakeRound1Payload round1PayloadReceived) - { - if (this.state >= STATE_ROUND_1_VALIDATED) - throw new InvalidOperationException("Validation already attempted for round 1 payload for " + this.participantId); - - this.partnerParticipantId = round1PayloadReceived.ParticipantId; - this.gx3 = round1PayloadReceived.Gx1; - this.gx4 = round1PayloadReceived.Gx2; - - BigInteger[] knowledgeProofForX3 = round1PayloadReceived.KnowledgeProofForX1; - BigInteger[] knowledgeProofForX4 = round1PayloadReceived.KnowledgeProofForX2; - - JPakeUtilities.ValidateParticipantIdsDiffer(participantId, round1PayloadReceived.ParticipantId); - JPakeUtilities.ValidateGx4(gx4); - JPakeUtilities.ValidateZeroKnowledgeProof(p, q, g, gx3, knowledgeProofForX3, round1PayloadReceived.ParticipantId, digest); - JPakeUtilities.ValidateZeroKnowledgeProof(p, q, g, gx4, knowledgeProofForX4, round1PayloadReceived.ParticipantId, digest); - this.state = STATE_ROUND_1_VALIDATED; - } - - /// - /// Creates and returns the payload to send to the other participant during round 2. - /// - /// ValidateRound1PayloadReceived(JPakeRound1Payload) must be called prior to this method. - /// - /// After execution, the State state will be STATE_ROUND_2_CREATED. - /// - /// Throws InvalidOperationException if called prior to ValidateRound1PayloadReceived(JPakeRound1Payload), or multiple times - /// - public virtual JPakeRound2Payload CreateRound2PayloadToSend() - { - if (this.state >= STATE_ROUND_2_CREATED) - throw new InvalidOperationException("Round 2 payload already created for " + this.participantId); - if (this.state < STATE_ROUND_1_VALIDATED) - throw new InvalidOperationException("Round 1 payload must be validated prior to creating round 2 payload for " + this.participantId); - - BigInteger gA = JPakeUtilities.CalculateGA(p, gx1, gx3, gx4); - BigInteger s = JPakeUtilities.CalculateS(password); - BigInteger x2s = JPakeUtilities.CalculateX2s(q, x2, s); - BigInteger A = JPakeUtilities.CalculateA(p, q, gA, x2s); - BigInteger[] knowledgeProofForX2s = JPakeUtilities.CalculateZeroKnowledgeProof(p, q, gA, A, x2s, participantId, digest, random); - - this.state = STATE_ROUND_2_CREATED; - - return new JPakeRound2Payload(participantId, A, knowledgeProofForX2s); - } - - /// - /// Validates the payload received from the other participant during round 2. - /// Note that this DOES NOT detect a non-common password. - /// The only indication of a non-common password is through derivation - /// of different keys (which can be detected explicitly by executing round 3 and round 4) - /// - /// Must be called prior to CalculateKeyingMaterial(). - /// - /// After execution, the State state will be STATE_ROUND_2_VALIDATED. - /// - /// Throws CryptoException if validation fails. Throws - /// InvalidOperationException if called prior to ValidateRound1PayloadReceived(JPakeRound1Payload), or multiple times - /// - public virtual void ValidateRound2PayloadReceived(JPakeRound2Payload round2PayloadReceived) - { - if (this.state >= STATE_ROUND_2_VALIDATED) - throw new InvalidOperationException("Validation already attempted for round 2 payload for " + this.participantId); - if (this.state < STATE_ROUND_1_VALIDATED) - throw new InvalidOperationException("Round 1 payload must be validated prior to validation round 2 payload for " + this.participantId); - - BigInteger gB = JPakeUtilities.CalculateGA(p, gx3, gx1, gx2); - this.b = round2PayloadReceived.A; - BigInteger[] knowledgeProofForX4s = round2PayloadReceived.KnowledgeProofForX2s; - - JPakeUtilities.ValidateParticipantIdsDiffer(participantId, round2PayloadReceived.ParticipantId); - JPakeUtilities.ValidateParticipantIdsEqual(this.partnerParticipantId, round2PayloadReceived.ParticipantId); - JPakeUtilities.ValidateGa(gB); - JPakeUtilities.ValidateZeroKnowledgeProof(p, q, gB, b, knowledgeProofForX4s, round2PayloadReceived.ParticipantId, digest); - - this.state = STATE_ROUND_2_VALIDATED; - } - - /// - /// Calculates and returns the key material. - /// A session key must be derived from this key material using a secure key derivation function (KDF). - /// The KDF used to derive the key is handled externally (i.e. not by JPakeParticipant). - /// - /// The keying material will be identical for each participant if and only if - /// each participant's password is the same. i.e. If the participants do not - /// share the same password, then each participant will derive a different key. - /// Therefore, if you immediately start using a key derived from - /// the keying material, then you must handle detection of incorrect keys. - /// If you want to handle this detection explicitly, you can optionally perform - /// rounds 3 and 4. See JPakeParticipant for details on how to execute - /// rounds 3 and 4. - /// - /// The keying material will be in the range [0, p-1]. - /// - /// ValidateRound2PayloadReceived(JPakeRound2Payload) must be called prior to this method. - /// - /// As a side effect, the internal password array is cleared, since it is no longer needed. - /// - /// After execution, the State state will be STATE_KEY_CALCULATED. - /// - /// Throws InvalidOperationException if called prior to ValidateRound2PayloadReceived(JPakeRound2Payload), - /// or if called multiple times. - /// - public virtual BigInteger CalculateKeyingMaterial() - { - if (this.state >= STATE_KEY_CALCULATED) - throw new InvalidOperationException("Key already calculated for " + participantId); - if (this.state < STATE_ROUND_2_VALIDATED) - throw new InvalidOperationException("Round 2 payload must be validated prior to creating key for " + participantId); - - BigInteger s = JPakeUtilities.CalculateS(password); - - // Clear the password array from memory, since we don't need it anymore. - // Also set the field to null as a flag to indicate that the key has already been calculated. - Array.Clear(password, 0, password.Length); - this.password = null; - - BigInteger keyingMaterial = JPakeUtilities.CalculateKeyingMaterial(p, q, gx4, x2, s, b); - - // Clear the ephemeral private key fields as well. - // Note that we're relying on the garbage collector to do its job to clean these up. - // The old objects will hang around in memory until the garbage collector destroys them. - // - // If the ephemeral private keys x1 and x2 are leaked, - // the attacker might be able to brute-force the password. - this.x1 = null; - this.x2 = null; - this.b = null; - - // Do not clear gx* yet, since those are needed by round 3. - - this.state = STATE_KEY_CALCULATED; - - return keyingMaterial; - } - - /// - /// Creates and returns the payload to send to the other participant during round 3. - /// - /// See JPakeParticipant for more details on round 3. - /// - /// After execution, the State state} will be STATE_ROUND_3_CREATED. - /// Throws InvalidOperationException if called prior to CalculateKeyingMaterial, or multiple - /// times. - /// - /// The keying material as returned from CalculateKeyingMaterial(). - public virtual JPakeRound3Payload CreateRound3PayloadToSend(BigInteger keyingMaterial) - { - if (this.state >= STATE_ROUND_3_CREATED) - throw new InvalidOperationException("Round 3 payload already created for " + this.participantId); - if (this.state < STATE_KEY_CALCULATED) - throw new InvalidOperationException("Keying material must be calculated prior to creating round 3 payload for " + this.participantId); - - BigInteger macTag = JPakeUtilities.CalculateMacTag( - this.participantId, - this.partnerParticipantId, - this.gx1, - this.gx2, - this.gx3, - this.gx4, - keyingMaterial, - this.digest); - - this.state = STATE_ROUND_3_CREATED; - - return new JPakeRound3Payload(participantId, macTag); - } - - /// - /// Validates the payload received from the other participant during round 3. - /// - /// See JPakeParticipant for more details on round 3. - /// - /// After execution, the State state will be STATE_ROUND_3_VALIDATED. - /// - /// Throws CryptoException if validation fails. Throws InvalidOperationException if called prior to - /// CalculateKeyingMaterial or multiple times - /// - /// The round 3 payload received from the other participant. - /// The keying material as returned from CalculateKeyingMaterial(). - public virtual void ValidateRound3PayloadReceived(JPakeRound3Payload round3PayloadReceived, BigInteger keyingMaterial) - { - if (this.state >= STATE_ROUND_3_VALIDATED) - throw new InvalidOperationException("Validation already attempted for round 3 payload for " + this.participantId); - if (this.state < STATE_KEY_CALCULATED) - throw new InvalidOperationException("Keying material must be calculated prior to validating round 3 payload for " + this.participantId); - - JPakeUtilities.ValidateParticipantIdsDiffer(participantId, round3PayloadReceived.ParticipantId); - JPakeUtilities.ValidateParticipantIdsEqual(this.partnerParticipantId, round3PayloadReceived.ParticipantId); - - JPakeUtilities.ValidateMacTag( - this.participantId, - this.partnerParticipantId, - this.gx1, - this.gx2, - this.gx3, - this.gx4, - keyingMaterial, - this.digest, - round3PayloadReceived.MacTag); - - // Clear the rest of the fields. - this.gx1 = null; - this.gx2 = null; - this.gx3 = null; - this.gx4 = null; - - this.state = STATE_ROUND_3_VALIDATED; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/agreement/jpake/JPakePrimeOrderGroup.cs b/bc-sharp-crypto/src/crypto/agreement/jpake/JPakePrimeOrderGroup.cs deleted file mode 100644 index 08ffe1a..0000000 --- a/bc-sharp-crypto/src/crypto/agreement/jpake/JPakePrimeOrderGroup.cs +++ /dev/null @@ -1,103 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Agreement.JPake -{ - /// - /// A pre-computed prime order group for use during a J-PAKE exchange. - /// - /// Typically a Schnorr group is used. In general, J-PAKE can use any prime order group - /// that is suitable for public key cryptography, including elliptic curve cryptography. - /// - /// See JPakePrimeOrderGroups for convenient standard groups. - /// - /// NIST publishes - /// many groups that can be used for the desired level of security. - /// - public class JPakePrimeOrderGroup - { - private readonly BigInteger p; - private readonly BigInteger q; - private readonly BigInteger g; - - /// - /// Constructs a new JPakePrimeOrderGroup. - /// - /// In general, you should use one of the pre-approved groups from - /// JPakePrimeOrderGroups, rather than manually constructing one. - /// - /// The following basic checks are performed: - /// - /// p-1 must be evenly divisible by q - /// g must be in [2, p-1] - /// g^q mod p must equal 1 - /// p must be prime (within reasonably certainty) - /// q must be prime (within reasonably certainty) - /// - /// The prime checks are performed using BigInteger#isProbablePrime(int), - /// and are therefore subject to the same probability guarantees. - /// - /// These checks prevent trivial mistakes. - /// However, due to the small uncertainties if p and q are not prime, - /// advanced attacks are not prevented. - /// Use it at your own risk. - /// - /// Throws NullReferenceException if any argument is null. Throws - /// InvalidOperationException is any of the above validations fail. - /// - public JPakePrimeOrderGroup(BigInteger p, BigInteger q, BigInteger g) - : this(p, q, g, false) - { - // Don't skip the checks on user-specified groups. - } - - /// - /// Constructor used by the pre-approved groups in JPakePrimeOrderGroups. - /// These pre-approved groups can avoid the expensive checks. - /// User-specified groups should not use this constructor. - /// - public JPakePrimeOrderGroup(BigInteger p, BigInteger q, BigInteger g, bool skipChecks) - { - JPakeUtilities.ValidateNotNull(p, "p"); - JPakeUtilities.ValidateNotNull(q, "q"); - JPakeUtilities.ValidateNotNull(g, "g"); - - if (!skipChecks) - { - if (!p.Subtract(JPakeUtilities.One).Mod(q).Equals(JPakeUtilities.Zero)) - throw new ArgumentException("p-1 must be evenly divisible by q"); - if (g.CompareTo(BigInteger.Two) == -1 || g.CompareTo(p.Subtract(JPakeUtilities.One)) == 1) - throw new ArgumentException("g must be in [2, p-1]"); - if (!g.ModPow(q, p).Equals(JPakeUtilities.One)) - throw new ArgumentException("g^q mod p must equal 1"); - - // Note these checks do not guarantee that p and q are prime. - // We just have reasonable certainty that they are prime. - if (!p.IsProbablePrime(20)) - throw new ArgumentException("p must be prime"); - if (!q.IsProbablePrime(20)) - throw new ArgumentException("q must be prime"); - } - - this.p = p; - this.q = q; - this.g = g; - } - - public virtual BigInteger P - { - get { return p; } - } - - public virtual BigInteger Q - { - get { return q; } - } - - public virtual BigInteger G - { - get { return g; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/agreement/jpake/JPakePrimeOrderGroups.cs b/bc-sharp-crypto/src/crypto/agreement/jpake/JPakePrimeOrderGroups.cs deleted file mode 100644 index 192cd2b..0000000 --- a/bc-sharp-crypto/src/crypto/agreement/jpake/JPakePrimeOrderGroups.cs +++ /dev/null @@ -1,108 +0,0 @@ -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Agreement.JPake -{ - /// - /// Standard pre-computed prime order groups for use by J-PAKE. - /// (J-PAKE can use pre-computed prime order groups, same as DSA and Diffie-Hellman.) - ///

- /// This class contains some convenient constants for use as input for - /// constructing {@link JPAKEParticipant}s. - ///

- /// The prime order groups below are taken from Sun's JDK JavaDoc (docs/guide/security/CryptoSpec.html#AppB), - /// and from the prime order groups - /// published by NIST. - ///

- public class JPakePrimeOrderGroups - { - /// - /// From Sun's JDK JavaDoc (docs/guide/security/CryptoSpec.html#AppB) - /// 1024-bit p, 160-bit q and 1024-bit g for 80-bit security. - /// - public static readonly JPakePrimeOrderGroup SUN_JCE_1024 = new JPakePrimeOrderGroup( - // p - new BigInteger( - "fd7f53811d75122952df4a9c2eece4e7f611b7523cef4400c31e3f80b6512669" + - "455d402251fb593d8d58fabfc5f5ba30f6cb9b556cd7813b801d346ff26660b7" + - "6b9950a5a49f9fe8047b1022c24fbba9d7feb7c61bf83b57e7c6a8a6150f04fb" + - "83f6d3c51ec3023554135a169132f675f3ae2b61d72aeff22203199dd14801c7", 16), - // q - new BigInteger("9760508f15230bccb292b982a2eb840bf0581cf5", 16), - // g - new BigInteger( - "f7e1a085d69b3ddecbbcab5c36b857b97994afbbfa3aea82f9574c0b3d078267" + - "5159578ebad4594fe67107108180b449167123e84c281613b7cf09328cc8a6e1" + - "3c167a8b547c8d28e0a3ae1e2bb3a675916ea37f0bfa213562f1fb627a01243b" + - "cca4f1bea8519089a883dfe15ae59f06928b665e807b552564014c3bfecf492a", 16), - true - ); - - /// - /// From NIST. - /// 2048-bit p, 224-bit q and 2048-bit g for 112-bit security. - /// - public static readonly JPakePrimeOrderGroup NIST_2048 = new JPakePrimeOrderGroup( - // p - new BigInteger( - "C196BA05AC29E1F9C3C72D56DFFC6154A033F1477AC88EC37F09BE6C5BB95F51" + - "C296DD20D1A28A067CCC4D4316A4BD1DCA55ED1066D438C35AEBAABF57E7DAE4" + - "28782A95ECA1C143DB701FD48533A3C18F0FE23557EA7AE619ECACC7E0B51652" + - "A8776D02A425567DED36EABD90CA33A1E8D988F0BBB92D02D1D20290113BB562" + - "CE1FC856EEB7CDD92D33EEA6F410859B179E7E789A8F75F645FAE2E136D252BF" + - "FAFF89528945C1ABE705A38DBC2D364AADE99BE0D0AAD82E5320121496DC65B3" + - "930E38047294FF877831A16D5228418DE8AB275D7D75651CEFED65F78AFC3EA7" + - "FE4D79B35F62A0402A1117599ADAC7B269A59F353CF450E6982D3B1702D9CA83", 16), - // q - new BigInteger("90EAF4D1AF0708B1B612FF35E0A2997EB9E9D263C9CE659528945C0D", 16), - // g - new BigInteger( - "A59A749A11242C58C894E9E5A91804E8FA0AC64B56288F8D47D51B1EDC4D6544" + - "4FECA0111D78F35FC9FDD4CB1F1B79A3BA9CBEE83A3F811012503C8117F98E50" + - "48B089E387AF6949BF8784EBD9EF45876F2E6A5A495BE64B6E770409494B7FEE" + - "1DBB1E4B2BC2A53D4F893D418B7159592E4FFFDF6969E91D770DAEBD0B5CB14C" + - "00AD68EC7DC1E5745EA55C706C4A1C5C88964E34D09DEB753AD418C1AD0F4FDF" + - "D049A955E5D78491C0B7A2F1575A008CCD727AB376DB6E695515B05BD412F5B8" + - "C2F4C77EE10DA48ABD53F5DD498927EE7B692BBBCDA2FB23A516C5B4533D7398" + - "0B2A3B60E384ED200AE21B40D273651AD6060C13D97FD69AA13C5611A51B9085", 16), - true - ); - - /// - /// From NIST. - /// 3072-bit p, 256-bit q and 3072-bit g for 128-bit security. - /// - public static readonly JPakePrimeOrderGroup NIST_3072 = new JPakePrimeOrderGroup( - // p - new BigInteger( - "90066455B5CFC38F9CAA4A48B4281F292C260FEEF01FD61037E56258A7795A1C" + - "7AD46076982CE6BB956936C6AB4DCFE05E6784586940CA544B9B2140E1EB523F" + - "009D20A7E7880E4E5BFA690F1B9004A27811CD9904AF70420EEFD6EA11EF7DA1" + - "29F58835FF56B89FAA637BC9AC2EFAAB903402229F491D8D3485261CD068699B" + - "6BA58A1DDBBEF6DB51E8FE34E8A78E542D7BA351C21EA8D8F1D29F5D5D159394" + - "87E27F4416B0CA632C59EFD1B1EB66511A5A0FBF615B766C5862D0BD8A3FE7A0" + - "E0DA0FB2FE1FCB19E8F9996A8EA0FCCDE538175238FC8B0EE6F29AF7F642773E" + - "BE8CD5402415A01451A840476B2FCEB0E388D30D4B376C37FE401C2A2C2F941D" + - "AD179C540C1C8CE030D460C4D983BE9AB0B20F69144C1AE13F9383EA1C08504F" + - "B0BF321503EFE43488310DD8DC77EC5B8349B8BFE97C2C560EA878DE87C11E3D" + - "597F1FEA742D73EEC7F37BE43949EF1A0D15C3F3E3FC0A8335617055AC91328E" + - "C22B50FC15B941D3D1624CD88BC25F3E941FDDC6200689581BFEC416B4B2CB73", 16), - // q - new BigInteger("CFA0478A54717B08CE64805B76E5B14249A77A4838469DF7F7DC987EFCCFB11D", 16), - // g - new BigInteger( - "5E5CBA992E0A680D885EB903AEA78E4A45A469103D448EDE3B7ACCC54D521E37" + - "F84A4BDD5B06B0970CC2D2BBB715F7B82846F9A0C393914C792E6A923E2117AB" + - "805276A975AADB5261D91673EA9AAFFEECBFA6183DFCB5D3B7332AA19275AFA1" + - "F8EC0B60FB6F66CC23AE4870791D5982AAD1AA9485FD8F4A60126FEB2CF05DB8" + - "A7F0F09B3397F3937F2E90B9E5B9C9B6EFEF642BC48351C46FB171B9BFA9EF17" + - "A961CE96C7E7A7CC3D3D03DFAD1078BA21DA425198F07D2481622BCE45969D9C" + - "4D6063D72AB7A0F08B2F49A7CC6AF335E08C4720E31476B67299E231F8BD90B3" + - "9AC3AE3BE0C6B6CACEF8289A2E2873D58E51E029CAFBD55E6841489AB66B5B4B" + - "9BA6E2F784660896AFF387D92844CCB8B69475496DE19DA2E58259B090489AC8" + - "E62363CDF82CFD8EF2A427ABCD65750B506F56DDE3B988567A88126B914D7828" + - "E2B63A6D7ED0747EC59E0E0A23CE7D8A74C1D2C2A7AFB6A29799620F00E11C33" + - "787F7DED3B30E1A22D09F1FBDA1ABBBFBF25CAE05A13F812E34563F99410E73B", 16), - true - ); - } -} diff --git a/bc-sharp-crypto/src/crypto/agreement/jpake/JPakeRound1Payload.cs b/bc-sharp-crypto/src/crypto/agreement/jpake/JPakeRound1Payload.cs deleted file mode 100644 index 9e4ab7a..0000000 --- a/bc-sharp-crypto/src/crypto/agreement/jpake/JPakeRound1Payload.cs +++ /dev/null @@ -1,101 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Agreement.JPake -{ - /// - /// The payload sent/received during the first round of a J-PAKE exchange. - /// - /// Each JPAKEParticipant creates and sends an instance of this payload to - /// the other. The payload to send should be created via - /// JPAKEParticipant.CreateRound1PayloadToSend(). - /// - /// Each participant must also validate the payload received from the other. - /// The received payload should be validated via - /// JPAKEParticipant.ValidateRound1PayloadReceived(JPakeRound1Payload). - /// - public class JPakeRound1Payload - { - /// - /// The id of the JPAKEParticipant who created/sent this payload. - /// - private readonly string participantId; - - /// - /// The value of g^x1 - /// - private readonly BigInteger gx1; - - /// - /// The value of g^x2 - /// - private readonly BigInteger gx2; - - /// - /// The zero knowledge proof for x1. - /// - /// This is a two element array, containing {g^v, r} for x1. - /// - private readonly BigInteger[] knowledgeProofForX1; - - /// - /// The zero knowledge proof for x2. - /// - /// This is a two element array, containing {g^v, r} for x2. - /// - private readonly BigInteger[] knowledgeProofForX2; - - public JPakeRound1Payload(string participantId, BigInteger gx1, BigInteger gx2, BigInteger[] knowledgeProofForX1, BigInteger[] knowledgeProofForX2) - { - JPakeUtilities.ValidateNotNull(participantId, "participantId"); - JPakeUtilities.ValidateNotNull(gx1, "gx1"); - JPakeUtilities.ValidateNotNull(gx2, "gx2"); - JPakeUtilities.ValidateNotNull(knowledgeProofForX1, "knowledgeProofForX1"); - JPakeUtilities.ValidateNotNull(knowledgeProofForX2, "knowledgeProofForX2"); - - this.participantId = participantId; - this.gx1 = gx1; - this.gx2 = gx2; - this.knowledgeProofForX1 = new BigInteger[knowledgeProofForX1.Length]; - Array.Copy(knowledgeProofForX1, this.knowledgeProofForX1, knowledgeProofForX1.Length); - this.knowledgeProofForX2 = new BigInteger[knowledgeProofForX2.Length]; - Array.Copy(knowledgeProofForX2, this.knowledgeProofForX2, knowledgeProofForX2.Length); - } - - public virtual string ParticipantId - { - get { return participantId; } - } - - public virtual BigInteger Gx1 - { - get { return gx1; } - } - - public virtual BigInteger Gx2 - { - get { return gx2; } - } - - public virtual BigInteger[] KnowledgeProofForX1 - { - get - { - BigInteger[] kp = new BigInteger[knowledgeProofForX1.Length]; - Array.Copy(knowledgeProofForX1, kp, knowledgeProofForX1.Length); - return kp; - } - } - - public virtual BigInteger[] KnowledgeProofForX2 - { - get - { - BigInteger[] kp = new BigInteger[knowledgeProofForX2.Length]; - Array.Copy(knowledgeProofForX2, kp, knowledgeProofForX2.Length); - return kp; - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/agreement/jpake/JPakeRound2Payload.cs b/bc-sharp-crypto/src/crypto/agreement/jpake/JPakeRound2Payload.cs deleted file mode 100644 index 47962cb..0000000 --- a/bc-sharp-crypto/src/crypto/agreement/jpake/JPakeRound2Payload.cs +++ /dev/null @@ -1,72 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Agreement.JPake -{ - /// - /// The payload sent/received during the second round of a J-PAKE exchange. - /// - /// Each JPAKEParticipant creates and sends an instance - /// of this payload to the other JPAKEParticipant. - /// The payload to send should be created via - /// JPAKEParticipant#createRound2PayloadToSend() - /// - /// Each JPAKEParticipant must also validate the payload - /// received from the other JPAKEParticipant. - /// The received payload should be validated via - /// JPAKEParticipant#validateRound2PayloadReceived(JPakeRound2Payload) - /// - public class JPakeRound2Payload - { - /// - /// The id of the JPAKEParticipant who created/sent this payload. - /// - private readonly string participantId; - - /// - /// The value of A, as computed during round 2. - /// - private readonly BigInteger a; - - /// - /// The zero knowledge proof for x2 * s. - /// - /// This is a two element array, containing {g^v, r} for x2 * s. - /// - private readonly BigInteger[] knowledgeProofForX2s; - - public JPakeRound2Payload(string participantId, BigInteger a, BigInteger[] knowledgeProofForX2s) - { - JPakeUtilities.ValidateNotNull(participantId, "participantId"); - JPakeUtilities.ValidateNotNull(a, "a"); - JPakeUtilities.ValidateNotNull(knowledgeProofForX2s, "knowledgeProofForX2s"); - - this.participantId = participantId; - this.a = a; - this.knowledgeProofForX2s = new BigInteger[knowledgeProofForX2s.Length]; - knowledgeProofForX2s.CopyTo(this.knowledgeProofForX2s, 0); - } - - public virtual string ParticipantId - { - get { return participantId; } - } - - public virtual BigInteger A - { - get { return a; } - } - - public virtual BigInteger[] KnowledgeProofForX2s - { - get - { - BigInteger[] kp = new BigInteger[knowledgeProofForX2s.Length]; - Array.Copy(knowledgeProofForX2s, kp, knowledgeProofForX2s.Length); - return kp; - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/agreement/jpake/JPakeRound3Payload.cs b/bc-sharp-crypto/src/crypto/agreement/jpake/JPakeRound3Payload.cs deleted file mode 100644 index 767702f..0000000 --- a/bc-sharp-crypto/src/crypto/agreement/jpake/JPakeRound3Payload.cs +++ /dev/null @@ -1,51 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Agreement.JPake -{ - /// - /// The payload sent/received during the optional third round of a J-PAKE exchange, - /// which is for explicit key confirmation. - /// - /// Each JPAKEParticipant creates and sends an instance - /// of this payload to the other JPAKEParticipant. - /// The payload to send should be created via - /// JPAKEParticipant#createRound3PayloadToSend(BigInteger) - /// - /// Eeach JPAKEParticipant must also validate the payload - /// received from the other JPAKEParticipant. - /// The received payload should be validated via - /// JPAKEParticipant#validateRound3PayloadReceived(JPakeRound3Payload, BigInteger) - /// - public class JPakeRound3Payload - { - /// - /// The id of the {@link JPAKEParticipant} who created/sent this payload. - /// - private readonly string participantId; - - /// - /// The value of MacTag, as computed by round 3. - /// - /// See JPAKEUtil#calculateMacTag(string, string, BigInteger, BigInteger, BigInteger, BigInteger, BigInteger, org.bouncycastle.crypto.Digest) - /// - private readonly BigInteger macTag; - - public JPakeRound3Payload(string participantId, BigInteger magTag) - { - this.participantId = participantId; - this.macTag = magTag; - } - - public virtual string ParticipantId - { - get { return participantId; } - } - - public virtual BigInteger MacTag - { - get { return macTag; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/agreement/jpake/JPakeUtilities.cs b/bc-sharp-crypto/src/crypto/agreement/jpake/JPakeUtilities.cs deleted file mode 100644 index b23518a..0000000 --- a/bc-sharp-crypto/src/crypto/agreement/jpake/JPakeUtilities.cs +++ /dev/null @@ -1,390 +0,0 @@ -using System; -using System.Text; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Macs; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Agreement.JPake -{ - /// - /// Primitives needed for a J-PAKE exchange. - /// - /// The recommended way to perform a J-PAKE exchange is by using - /// two JPAKEParticipants. Internally, those participants - /// call these primitive operations in JPakeUtilities. - /// - /// The primitives, however, can be used without a JPAKEParticipant if needed. - /// - public abstract class JPakeUtilities - { - public static readonly BigInteger Zero = BigInteger.Zero; - public static readonly BigInteger One = BigInteger.One; - - /// - /// Return a value that can be used as x1 or x3 during round 1. - /// The returned value is a random value in the range [0, q-1]. - /// - public static BigInteger GenerateX1(BigInteger q, SecureRandom random) - { - BigInteger min = Zero; - BigInteger max = q.Subtract(One); - return BigIntegers.CreateRandomInRange(min, max, random); - } - - /// - /// Return a value that can be used as x2 or x4 during round 1. - /// The returned value is a random value in the range [1, q-1]. - /// - public static BigInteger GenerateX2(BigInteger q, SecureRandom random) - { - BigInteger min = One; - BigInteger max = q.Subtract(One); - return BigIntegers.CreateRandomInRange(min, max, random); - } - - /// - /// Converts the given password to a BigInteger - /// for use in arithmetic calculations. - /// - public static BigInteger CalculateS(char[] password) - { - return new BigInteger(Encoding.UTF8.GetBytes(password)); - } - - /// - /// Calculate g^x mod p as done in round 1. - /// - public static BigInteger CalculateGx(BigInteger p, BigInteger g, BigInteger x) - { - return g.ModPow(x, p); - } - - /// - /// Calculate ga as done in round 2. - /// - public static BigInteger CalculateGA(BigInteger p, BigInteger gx1, BigInteger gx3, BigInteger gx4) - { - // ga = g^(x1+x3+x4) = g^x1 * g^x3 * g^x4 - return gx1.Multiply(gx3).Multiply(gx4).Mod(p); - } - - /// - /// Calculate x2 * s as done in round 2. - /// - public static BigInteger CalculateX2s(BigInteger q, BigInteger x2, BigInteger s) - { - return x2.Multiply(s).Mod(q); - } - - /// - /// Calculate A as done in round 2. - /// - public static BigInteger CalculateA(BigInteger p, BigInteger q, BigInteger gA, BigInteger x2s) - { - // A = ga^(x*s) - return gA.ModPow(x2s, p); - } - - /// - /// Calculate a zero knowledge proof of x using Schnorr's signature. - /// The returned array has two elements {g^v, r = v-x*h} for x. - /// - public static BigInteger[] CalculateZeroKnowledgeProof(BigInteger p, BigInteger q, BigInteger g, - BigInteger gx, BigInteger x, string participantId, IDigest digest, SecureRandom random) - { - /* Generate a random v, and compute g^v */ - BigInteger vMin = Zero; - BigInteger vMax = q.Subtract(One); - BigInteger v = BigIntegers.CreateRandomInRange(vMin, vMax, random); - - BigInteger gv = g.ModPow(v, p); - BigInteger h = CalculateHashForZeroKnowledgeProof(g, gv, gx, participantId, digest); // h - - return new BigInteger[] - { - gv, - v.Subtract(x.Multiply(h)).Mod(q) // r = v-x*h - }; - } - - private static BigInteger CalculateHashForZeroKnowledgeProof(BigInteger g, BigInteger gr, BigInteger gx, - string participantId, IDigest digest) - { - digest.Reset(); - - UpdateDigestIncludingSize(digest, g); - - UpdateDigestIncludingSize(digest, gr); - - UpdateDigestIncludingSize(digest, gx); - - UpdateDigestIncludingSize(digest, participantId); - - byte[] output = DigestUtilities.DoFinal(digest); - - return new BigInteger(output); - } - - /// - /// Validates that g^x4 is not 1. - /// throws CryptoException if g^x4 is 1 - /// - public static void ValidateGx4(BigInteger gx4) - { - if (gx4.Equals(One)) - throw new CryptoException("g^x validation failed. g^x should not be 1."); - } - - /// - /// Validates that ga is not 1. - /// - /// As described by Feng Hao... - /// Alice could simply check ga != 1 to ensure it is a generator. - /// In fact, as we will explain in Section 3, (x1 + x3 + x4 ) is random over Zq even in the face of active attacks. - /// Hence, the probability for ga = 1 is extremely small - on the order of 2^160 for 160-bit q. - /// - /// throws CryptoException if ga is 1 - /// - public static void ValidateGa(BigInteger ga) - { - if (ga.Equals(One)) - throw new CryptoException("ga is equal to 1. It should not be. The chances of this happening are on the order of 2^160 for a 160-bit q. Try again."); - } - - /// - /// Validates the zero knowledge proof (generated by - /// calculateZeroKnowledgeProof(BigInteger, BigInteger, BigInteger, BigInteger, BigInteger, string, Digest, SecureRandom) - /// is correct. - /// - /// throws CryptoException if the zero knowledge proof is not correct - /// - public static void ValidateZeroKnowledgeProof(BigInteger p, BigInteger q, BigInteger g, - BigInteger gx, BigInteger[] zeroKnowledgeProof, string participantId, IDigest digest) - { - /* sig={g^v,r} */ - BigInteger gv = zeroKnowledgeProof[0]; - BigInteger r = zeroKnowledgeProof[1]; - - BigInteger h = CalculateHashForZeroKnowledgeProof(g, gv, gx, participantId, digest); - if (!(gx.CompareTo(Zero) == 1 && // g^x > 0 - gx.CompareTo(p) == -1 && // g^x < p - gx.ModPow(q, p).CompareTo(One) == 0 && // g^x^q mod q = 1 - /* - * Below, I took a straightforward way to compute g^r * g^x^h, - * which needs 2 exp. Using a simultaneous computation technique - * would only need 1 exp. - */ - g.ModPow(r, p).Multiply(gx.ModPow(h, p)).Mod(p).CompareTo(gv) == 0)) // g^v=g^r * g^x^h - { - throw new CryptoException("Zero-knowledge proof validation failed"); - } - } - - /// - /// Calculates the keying material, which can be done after round 2 has completed. - /// A session key must be derived from this key material using a secure key derivation function (KDF). - /// The KDF used to derive the key is handled externally (i.e. not by JPAKEParticipant). - /// - /// KeyingMaterial = (B/g^{x2*x4*s})^x2 - /// - public static BigInteger CalculateKeyingMaterial(BigInteger p, BigInteger q, - BigInteger gx4, BigInteger x2, BigInteger s, BigInteger B) - { - return gx4.ModPow(x2.Multiply(s).Negate().Mod(q), p).Multiply(B).ModPow(x2, p); - } - - /// - /// Validates that the given participant ids are not equal. - /// (For the J-PAKE exchange, each participant must use a unique id.) - /// - /// Throws CryptoException if the participantId strings are equal. - /// - public static void ValidateParticipantIdsDiffer(string participantId1, string participantId2) - { - if (participantId1.Equals(participantId2)) - { - throw new CryptoException( - "Both participants are using the same participantId (" - + participantId1 - + "). This is not allowed. " - + "Each participant must use a unique participantId."); - } - } - - /// - /// Validates that the given participant ids are equal. - /// This is used to ensure that the payloads received from - /// each round all come from the same participant. - /// - public static void ValidateParticipantIdsEqual(string expectedParticipantId, string actualParticipantId) - { - if (!expectedParticipantId.Equals(actualParticipantId)) - { - throw new CryptoException( - "Received payload from incorrect partner (" - + actualParticipantId - + "). Expected to receive payload from " - + expectedParticipantId - + "."); - } - } - - /// - /// Validates that the given object is not null. - /// throws NullReferenceException if the object is null. - /// - /// object in question - /// name of the object (to be used in exception message) - public static void ValidateNotNull(object obj, string description) - { - if (obj == null) - throw new ArgumentNullException(description); - } - - /// - /// Calculates the MacTag (to be used for key confirmation), as defined by - /// NIST SP 800-56A Revision 1, - /// Section 8.2 Unilateral Key Confirmation for Key Agreement Schemes. - /// - /// MacTag = HMAC(MacKey, MacLen, MacData) - /// MacKey = H(K || "JPAKE_KC") - /// MacData = "KC_1_U" || participantId || partnerParticipantId || gx1 || gx2 || gx3 || gx4 - /// - /// Note that both participants use "KC_1_U" because the sender of the round 3 message - /// is always the initiator for key confirmation. - /// - /// HMAC = {@link HMac} used with the given {@link Digest} - /// H = The given {@link Digest} - /// MacLen = length of MacTag - /// - public static BigInteger CalculateMacTag(string participantId, string partnerParticipantId, - BigInteger gx1, BigInteger gx2, BigInteger gx3, BigInteger gx4, BigInteger keyingMaterial, IDigest digest) - { - byte[] macKey = CalculateMacKey(keyingMaterial, digest); - - HMac mac = new HMac(digest); - mac.Init(new KeyParameter(macKey)); - Arrays.Fill(macKey, (byte)0); - - /* - * MacData = "KC_1_U" || participantId_Alice || participantId_Bob || gx1 || gx2 || gx3 || gx4. - */ - UpdateMac(mac, "KC_1_U"); - UpdateMac(mac, participantId); - UpdateMac(mac, partnerParticipantId); - UpdateMac(mac, gx1); - UpdateMac(mac, gx2); - UpdateMac(mac, gx3); - UpdateMac(mac, gx4); - - byte[] macOutput = MacUtilities.DoFinal(mac); - - return new BigInteger(macOutput); - } - - /// - /// Calculates the MacKey (i.e. the key to use when calculating the MagTag for key confirmation). - /// - /// MacKey = H(K || "JPAKE_KC") - /// - private static byte[] CalculateMacKey(BigInteger keyingMaterial, IDigest digest) - { - digest.Reset(); - - UpdateDigest(digest, keyingMaterial); - /* - * This constant is used to ensure that the macKey is NOT the same as the derived key. - */ - UpdateDigest(digest, "JPAKE_KC"); - - return DigestUtilities.DoFinal(digest); - } - - /// - /// Validates the MacTag received from the partner participant. - /// - /// throws CryptoException if the participantId strings are equal. - /// - public static void ValidateMacTag(string participantId, string partnerParticipantId, - BigInteger gx1, BigInteger gx2, BigInteger gx3, BigInteger gx4, - BigInteger keyingMaterial, IDigest digest, BigInteger partnerMacTag) - { - /* - * Calculate the expected MacTag using the parameters as the partner - * would have used when the partner called calculateMacTag. - * - * i.e. basically all the parameters are reversed. - * participantId <-> partnerParticipantId - * x1 <-> x3 - * x2 <-> x4 - */ - BigInteger expectedMacTag = CalculateMacTag(partnerParticipantId, participantId, gx3, gx4, gx1, gx2, keyingMaterial, digest); - - if (!expectedMacTag.Equals(partnerMacTag)) - { - throw new CryptoException( - "Partner MacTag validation failed. " - + "Therefore, the password, MAC, or digest algorithm of each participant does not match."); - } - } - - private static void UpdateDigest(IDigest digest, BigInteger bigInteger) - { - UpdateDigest(digest, BigIntegers.AsUnsignedByteArray(bigInteger)); - } - - private static void UpdateDigest(IDigest digest, string str) - { - UpdateDigest(digest, Encoding.UTF8.GetBytes(str)); - } - - private static void UpdateDigest(IDigest digest, byte[] bytes) - { - digest.BlockUpdate(bytes, 0, bytes.Length); - Arrays.Fill(bytes, (byte)0); - } - - private static void UpdateDigestIncludingSize(IDigest digest, BigInteger bigInteger) - { - UpdateDigestIncludingSize(digest, BigIntegers.AsUnsignedByteArray(bigInteger)); - } - - private static void UpdateDigestIncludingSize(IDigest digest, string str) - { - UpdateDigestIncludingSize(digest, Encoding.UTF8.GetBytes(str)); - } - - private static void UpdateDigestIncludingSize(IDigest digest, byte[] bytes) - { - digest.BlockUpdate(IntToByteArray(bytes.Length), 0, 4); - digest.BlockUpdate(bytes, 0, bytes.Length); - Arrays.Fill(bytes, (byte)0); - } - - private static void UpdateMac(IMac mac, BigInteger bigInteger) - { - UpdateMac(mac, BigIntegers.AsUnsignedByteArray(bigInteger)); - } - - private static void UpdateMac(IMac mac, string str) - { - UpdateMac(mac, Encoding.UTF8.GetBytes(str)); - } - - private static void UpdateMac(IMac mac, byte[] bytes) - { - mac.BlockUpdate(bytes, 0, bytes.Length); - Arrays.Fill(bytes, (byte)0); - } - - private static byte[] IntToByteArray(int value) - { - return Pack.UInt32_To_BE((uint)value); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/agreement/kdf/DHKdfParameters.cs b/bc-sharp-crypto/src/crypto/agreement/kdf/DHKdfParameters.cs deleted file mode 100644 index f6c9e60..0000000 --- a/bc-sharp-crypto/src/crypto/agreement/kdf/DHKdfParameters.cs +++ /dev/null @@ -1,57 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; - -namespace Org.BouncyCastle.Crypto.Agreement.Kdf -{ - public class DHKdfParameters - : IDerivationParameters - { - private readonly DerObjectIdentifier algorithm; - private readonly int keySize; - private readonly byte[] z; - private readonly byte[] extraInfo; - - public DHKdfParameters( - DerObjectIdentifier algorithm, - int keySize, - byte[] z) - : this(algorithm, keySize, z, null) - { - } - - public DHKdfParameters( - DerObjectIdentifier algorithm, - int keySize, - byte[] z, - byte[] extraInfo) - { - this.algorithm = algorithm; - this.keySize = keySize; - this.z = z; // TODO Clone? - this.extraInfo = extraInfo; - } - - public DerObjectIdentifier Algorithm - { - get { return algorithm; } - } - - public int KeySize - { - get { return keySize; } - } - - public byte[] GetZ() - { - // TODO Clone? - return z; - } - - public byte[] GetExtraInfo() - { - // TODO Clone? - return extraInfo; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/agreement/kdf/DHKekGenerator.cs b/bc-sharp-crypto/src/crypto/agreement/kdf/DHKekGenerator.cs deleted file mode 100644 index 259e21e..0000000 --- a/bc-sharp-crypto/src/crypto/agreement/kdf/DHKekGenerator.cs +++ /dev/null @@ -1,112 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Crypto.Utilities; - -namespace Org.BouncyCastle.Crypto.Agreement.Kdf -{ - /** - * RFC 2631 Diffie-hellman KEK derivation function. - */ - public class DHKekGenerator - : IDerivationFunction - { - private readonly IDigest digest; - - private DerObjectIdentifier algorithm; - private int keySize; - private byte[] z; - private byte[] partyAInfo; - - public DHKekGenerator(IDigest digest) - { - this.digest = digest; - } - - public virtual void Init(IDerivationParameters param) - { - DHKdfParameters parameters = (DHKdfParameters)param; - - this.algorithm = parameters.Algorithm; - this.keySize = parameters.KeySize; - this.z = parameters.GetZ(); // TODO Clone? - this.partyAInfo = parameters.GetExtraInfo(); // TODO Clone? - } - - public virtual IDigest Digest - { - get { return digest; } - } - - public virtual int GenerateBytes(byte[] outBytes, int outOff, int len) - { - if ((outBytes.Length - len) < outOff) - { - throw new DataLengthException("output buffer too small"); - } - - long oBytes = len; - int outLen = digest.GetDigestSize(); - - // - // this is at odds with the standard implementation, the - // maximum value should be hBits * (2^32 - 1) where hBits - // is the digest output size in bits. We can't have an - // array with a long index at the moment... - // - if (oBytes > ((2L << 32) - 1)) - { - throw new ArgumentException("Output length too large"); - } - - int cThreshold = (int)((oBytes + outLen - 1) / outLen); - - byte[] dig = new byte[digest.GetDigestSize()]; - - uint counter = 1; - - for (int i = 0; i < cThreshold; i++) - { - digest.BlockUpdate(z, 0, z.Length); - - // KeySpecificInfo - DerSequence keyInfo = new DerSequence( - algorithm, - new DerOctetString(Pack.UInt32_To_BE(counter))); - - // OtherInfo - Asn1EncodableVector v1 = new Asn1EncodableVector(keyInfo); - - if (partyAInfo != null) - { - v1.Add(new DerTaggedObject(true, 0, new DerOctetString(partyAInfo))); - } - - v1.Add(new DerTaggedObject(true, 2, new DerOctetString(Pack.UInt32_To_BE((uint)keySize)))); - - byte[] other = new DerSequence(v1).GetDerEncoded(); - - digest.BlockUpdate(other, 0, other.Length); - - digest.DoFinal(dig, 0); - - if (len > outLen) - { - Array.Copy(dig, 0, outBytes, outOff, outLen); - outOff += outLen; - len -= outLen; - } - else - { - Array.Copy(dig, 0, outBytes, outOff, len); - } - - counter++; - } - - digest.Reset(); - - return (int)oBytes; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/agreement/kdf/ECDHKekGenerator.cs b/bc-sharp-crypto/src/crypto/agreement/kdf/ECDHKekGenerator.cs deleted file mode 100644 index 7446457..0000000 --- a/bc-sharp-crypto/src/crypto/agreement/kdf/ECDHKekGenerator.cs +++ /dev/null @@ -1,55 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto.Generators; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; - -namespace Org.BouncyCastle.Crypto.Agreement.Kdf -{ - /** - * X9.63 based key derivation function for ECDH CMS. - */ - public class ECDHKekGenerator - : IDerivationFunction - { - private readonly IDerivationFunction kdf; - - private DerObjectIdentifier algorithm; - private int keySize; - private byte[] z; - - public ECDHKekGenerator(IDigest digest) - { - this.kdf = new Kdf2BytesGenerator(digest); - } - - public virtual void Init(IDerivationParameters param) - { - DHKdfParameters parameters = (DHKdfParameters)param; - - this.algorithm = parameters.Algorithm; - this.keySize = parameters.KeySize; - this.z = parameters.GetZ(); // TODO Clone? - } - - public virtual IDigest Digest - { - get { return kdf.Digest; } - } - - public virtual int GenerateBytes(byte[] outBytes, int outOff, int len) - { - // TODO Create an ASN.1 class for this (RFC3278) - // ECC-CMS-SharedInfo - DerSequence s = new DerSequence( - new AlgorithmIdentifier(algorithm, DerNull.Instance), - new DerTaggedObject(true, 2, new DerOctetString(Pack.UInt32_To_BE((uint)keySize)))); - - kdf.Init(new KdfParameters(z, s.GetDerEncoded())); - - return kdf.GenerateBytes(outBytes, outOff, len); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/agreement/srp/SRP6Client.cs b/bc-sharp-crypto/src/crypto/agreement/srp/SRP6Client.cs deleted file mode 100644 index f075d7a..0000000 --- a/bc-sharp-crypto/src/crypto/agreement/srp/SRP6Client.cs +++ /dev/null @@ -1,164 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Agreement.Srp -{ - /** - * Implements the client side SRP-6a protocol. Note that this class is stateful, and therefore NOT threadsafe. - * This implementation of SRP is based on the optimized message sequence put forth by Thomas Wu in the paper - * "SRP-6: Improvements and Refinements to the Secure Remote Password Protocol, 2002" - */ - public class Srp6Client - { - protected BigInteger N; - protected BigInteger g; - - protected BigInteger privA; - protected BigInteger pubA; - - protected BigInteger B; - - protected BigInteger x; - protected BigInteger u; - protected BigInteger S; - - protected BigInteger M1; - protected BigInteger M2; - protected BigInteger Key; - - protected IDigest digest; - protected SecureRandom random; - - public Srp6Client() - { - } - - /** - * Initialises the client to begin new authentication attempt - * @param N The safe prime associated with the client's verifier - * @param g The group parameter associated with the client's verifier - * @param digest The digest algorithm associated with the client's verifier - * @param random For key generation - */ - public virtual void Init(BigInteger N, BigInteger g, IDigest digest, SecureRandom random) - { - this.N = N; - this.g = g; - this.digest = digest; - this.random = random; - } - - public virtual void Init(Srp6GroupParameters group, IDigest digest, SecureRandom random) - { - Init(group.N, group.G, digest, random); - } - - /** - * Generates client's credentials given the client's salt, identity and password - * @param salt The salt used in the client's verifier. - * @param identity The user's identity (eg. username) - * @param password The user's password - * @return Client's public value to send to server - */ - public virtual BigInteger GenerateClientCredentials(byte[] salt, byte[] identity, byte[] password) - { - this.x = Srp6Utilities.CalculateX(digest, N, salt, identity, password); - this.privA = SelectPrivateValue(); - this.pubA = g.ModPow(privA, N); - - return pubA; - } - - /** - * Generates client's verification message given the server's credentials - * @param serverB The server's credentials - * @return Client's verification message for the server - * @throws CryptoException If server's credentials are invalid - */ - public virtual BigInteger CalculateSecret(BigInteger serverB) - { - this.B = Srp6Utilities.ValidatePublicValue(N, serverB); - this.u = Srp6Utilities.CalculateU(digest, N, pubA, B); - this.S = CalculateS(); - - return S; - } - - protected virtual BigInteger SelectPrivateValue() - { - return Srp6Utilities.GeneratePrivateValue(digest, N, g, random); - } - - private BigInteger CalculateS() - { - BigInteger k = Srp6Utilities.CalculateK(digest, N, g); - BigInteger exp = u.Multiply(x).Add(privA); - BigInteger tmp = g.ModPow(x, N).Multiply(k).Mod(N); - return B.Subtract(tmp).Mod(N).ModPow(exp, N); - } - - /** - * Computes the client evidence message M1 using the previously received values. - * To be called after calculating the secret S. - * @return M1: the client side generated evidence message - * @throws CryptoException - */ - public virtual BigInteger CalculateClientEvidenceMessage() - { - // Verify pre-requirements - if (this.pubA == null || this.B == null || this.S == null) - { - throw new CryptoException("Impossible to compute M1: " + - "some data are missing from the previous operations (A,B,S)"); - } - // compute the client evidence message 'M1' - this.M1 = Srp6Utilities.CalculateM1(digest, N, pubA, B, S); - return M1; - } - - /** Authenticates the server evidence message M2 received and saves it only if correct. - * @param M2: the server side generated evidence message - * @return A boolean indicating if the server message M2 was the expected one. - * @throws CryptoException - */ - public virtual bool VerifyServerEvidenceMessage(BigInteger serverM2) - { - // Verify pre-requirements - if (this.pubA == null || this.M1 == null || this.S == null) - { - throw new CryptoException("Impossible to compute and verify M2: " + - "some data are missing from the previous operations (A,M1,S)"); - } - - // Compute the own server evidence message 'M2' - BigInteger computedM2 = Srp6Utilities.CalculateM2(digest, N, pubA, M1, S); - if (computedM2.Equals(serverM2)) - { - this.M2 = serverM2; - return true; - } - return false; - } - - /** - * Computes the final session key as a result of the SRP successful mutual authentication - * To be called after verifying the server evidence message M2. - * @return Key: the mutually authenticated symmetric session key - * @throws CryptoException - */ - public virtual BigInteger CalculateSessionKey() - { - // Verify pre-requirements (here we enforce a previous calculation of M1 and M2) - if (this.S == null || this.M1 == null || this.M2 == null) - { - throw new CryptoException("Impossible to compute Key: " + - "some data are missing from the previous operations (S,M1,M2)"); - } - this.Key = Srp6Utilities.CalculateKey(digest, N, S); - return Key; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/agreement/srp/SRP6Server.cs b/bc-sharp-crypto/src/crypto/agreement/srp/SRP6Server.cs deleted file mode 100644 index fd0c9f1..0000000 --- a/bc-sharp-crypto/src/crypto/agreement/srp/SRP6Server.cs +++ /dev/null @@ -1,163 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Agreement.Srp -{ - /** - * Implements the server side SRP-6a protocol. Note that this class is stateful, and therefore NOT threadsafe. - * This implementation of SRP is based on the optimized message sequence put forth by Thomas Wu in the paper - * "SRP-6: Improvements and Refinements to the Secure Remote Password Protocol, 2002" - */ - public class Srp6Server - { - protected BigInteger N; - protected BigInteger g; - protected BigInteger v; - - protected SecureRandom random; - protected IDigest digest; - - protected BigInteger A; - - protected BigInteger privB; - protected BigInteger pubB; - - protected BigInteger u; - protected BigInteger S; - protected BigInteger M1; - protected BigInteger M2; - protected BigInteger Key; - - public Srp6Server() - { - } - - /** - * Initialises the server to accept a new client authentication attempt - * @param N The safe prime associated with the client's verifier - * @param g The group parameter associated with the client's verifier - * @param v The client's verifier - * @param digest The digest algorithm associated with the client's verifier - * @param random For key generation - */ - public virtual void Init(BigInteger N, BigInteger g, BigInteger v, IDigest digest, SecureRandom random) - { - this.N = N; - this.g = g; - this.v = v; - - this.random = random; - this.digest = digest; - } - - public virtual void Init(Srp6GroupParameters group, BigInteger v, IDigest digest, SecureRandom random) - { - Init(group.N, group.G, v, digest, random); - } - - /** - * Generates the server's credentials that are to be sent to the client. - * @return The server's public value to the client - */ - public virtual BigInteger GenerateServerCredentials() - { - BigInteger k = Srp6Utilities.CalculateK(digest, N, g); - this.privB = SelectPrivateValue(); - this.pubB = k.Multiply(v).Mod(N).Add(g.ModPow(privB, N)).Mod(N); - - return pubB; - } - - /** - * Processes the client's credentials. If valid the shared secret is generated and returned. - * @param clientA The client's credentials - * @return A shared secret BigInteger - * @throws CryptoException If client's credentials are invalid - */ - public virtual BigInteger CalculateSecret(BigInteger clientA) - { - this.A = Srp6Utilities.ValidatePublicValue(N, clientA); - this.u = Srp6Utilities.CalculateU(digest, N, A, pubB); - this.S = CalculateS(); - - return S; - } - - protected virtual BigInteger SelectPrivateValue() - { - return Srp6Utilities.GeneratePrivateValue(digest, N, g, random); - } - - private BigInteger CalculateS() - { - return v.ModPow(u, N).Multiply(A).Mod(N).ModPow(privB, N); - } - - /** - * Authenticates the received client evidence message M1 and saves it only if correct. - * To be called after calculating the secret S. - * @param M1: the client side generated evidence message - * @return A boolean indicating if the client message M1 was the expected one. - * @throws CryptoException - */ - public virtual bool VerifyClientEvidenceMessage(BigInteger clientM1) - { - // Verify pre-requirements - if (this.A == null || this.pubB == null || this.S == null) - { - throw new CryptoException("Impossible to compute and verify M1: " + - "some data are missing from the previous operations (A,B,S)"); - } - - // Compute the own client evidence message 'M1' - BigInteger computedM1 = Srp6Utilities.CalculateM1(digest, N, A, pubB, S); - if (computedM1.Equals(clientM1)) - { - this.M1 = clientM1; - return true; - } - return false; - } - - /** - * Computes the server evidence message M2 using the previously verified values. - * To be called after successfully verifying the client evidence message M1. - * @return M2: the server side generated evidence message - * @throws CryptoException - */ - public virtual BigInteger CalculateServerEvidenceMessage() - { - // Verify pre-requirements - if (this.A == null || this.M1 == null || this.S == null) - { - throw new CryptoException("Impossible to compute M2: " + - "some data are missing from the previous operations (A,M1,S)"); - } - - // Compute the server evidence message 'M2' - this.M2 = Srp6Utilities.CalculateM2(digest, N, A, M1, S); - return M2; - } - - /** - * Computes the final session key as a result of the SRP successful mutual authentication - * To be called after calculating the server evidence message M2. - * @return Key: the mutual authenticated symmetric session key - * @throws CryptoException - */ - public virtual BigInteger CalculateSessionKey() - { - // Verify pre-requirements - if (this.S == null || this.M1 == null || this.M2 == null) - { - throw new CryptoException("Impossible to compute Key: " + - "some data are missing from the previous operations (S,M1,M2)"); - } - this.Key = Srp6Utilities.CalculateKey(digest, N, S); - return Key; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/agreement/srp/SRP6StandardGroups.cs b/bc-sharp-crypto/src/crypto/agreement/srp/SRP6StandardGroups.cs deleted file mode 100644 index 36f4aba..0000000 --- a/bc-sharp-crypto/src/crypto/agreement/srp/SRP6StandardGroups.cs +++ /dev/null @@ -1,159 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Crypto.Agreement.Srp -{ - public class Srp6StandardGroups - { - private static BigInteger FromHex(string hex) - { - return new BigInteger(1, Hex.Decode(hex)); - } - - private static Srp6GroupParameters FromNG(string hexN, string hexG) - { - return new Srp6GroupParameters(FromHex(hexN), FromHex(hexG)); - } - - /* - * RFC 5054 - */ - private const string rfc5054_1024_N = "EEAF0AB9ADB38DD69C33F80AFA8FC5E86072618775FF3C0B9EA2314C" - + "9C256576D674DF7496EA81D3383B4813D692C6E0E0D5D8E250B98BE4" - + "8E495C1D6089DAD15DC7D7B46154D6B6CE8EF4AD69B15D4982559B29" - + "7BCF1885C529F566660E57EC68EDBC3C05726CC02FD4CBF4976EAA9A" + "FD5138FE8376435B9FC61D2FC0EB06E3"; - private const string rfc5054_1024_g = "02"; - public static readonly Srp6GroupParameters rfc5054_1024 = FromNG(rfc5054_1024_N, rfc5054_1024_g); - - private const string rfc5054_1536_N = "9DEF3CAFB939277AB1F12A8617A47BBBDBA51DF499AC4C80BEEEA961" - + "4B19CC4D5F4F5F556E27CBDE51C6A94BE4607A291558903BA0D0F843" - + "80B655BB9A22E8DCDF028A7CEC67F0D08134B1C8B97989149B609E0B" - + "E3BAB63D47548381DBC5B1FC764E3F4B53DD9DA1158BFD3E2B9C8CF5" - + "6EDF019539349627DB2FD53D24B7C48665772E437D6C7F8CE442734A" - + "F7CCB7AE837C264AE3A9BEB87F8A2FE9B8B5292E5A021FFF5E91479E" - + "8CE7A28C2442C6F315180F93499A234DCF76E3FED135F9BB"; - private const string rfc5054_1536_g = "02"; - public static readonly Srp6GroupParameters rfc5054_1536 = FromNG(rfc5054_1536_N, rfc5054_1536_g); - - private const string rfc5054_2048_N = "AC6BDB41324A9A9BF166DE5E1389582FAF72B6651987EE07FC319294" - + "3DB56050A37329CBB4A099ED8193E0757767A13DD52312AB4B03310D" - + "CD7F48A9DA04FD50E8083969EDB767B0CF6095179A163AB3661A05FB" - + "D5FAAAE82918A9962F0B93B855F97993EC975EEAA80D740ADBF4FF74" - + "7359D041D5C33EA71D281E446B14773BCA97B43A23FB801676BD207A" - + "436C6481F1D2B9078717461A5B9D32E688F87748544523B524B0D57D" - + "5EA77A2775D2ECFA032CFBDBF52FB3786160279004E57AE6AF874E73" - + "03CE53299CCC041C7BC308D82A5698F3A8D0C38271AE35F8E9DBFBB6" - + "94B5C803D89F7AE435DE236D525F54759B65E372FCD68EF20FA7111F" + "9E4AFF73"; - private const string rfc5054_2048_g = "02"; - public static readonly Srp6GroupParameters rfc5054_2048 = FromNG(rfc5054_2048_N, rfc5054_2048_g); - - private const string rfc5054_3072_N = "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD129024E08" - + "8A67CC74020BBEA63B139B22514A08798E3404DDEF9519B3CD3A431B" - + "302B0A6DF25F14374FE1356D6D51C245E485B576625E7EC6F44C42E9" - + "A637ED6B0BFF5CB6F406B7EDEE386BFB5A899FA5AE9F24117C4B1FE6" - + "49286651ECE45B3DC2007CB8A163BF0598DA48361C55D39A69163FA8" - + "FD24CF5F83655D23DCA3AD961C62F356208552BB9ED529077096966D" - + "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3BE39E772C" - + "180E86039B2783A2EC07A28FB5C55DF06F4C52C9DE2BCBF695581718" - + "3995497CEA956AE515D2261898FA051015728E5A8AAAC42DAD33170D" - + "04507A33A85521ABDF1CBA64ECFB850458DBEF0A8AEA71575D060C7D" - + "B3970F85A6E1E4C7ABF5AE8CDB0933D71E8C94E04A25619DCEE3D226" - + "1AD2EE6BF12FFA06D98A0864D87602733EC86A64521F2B18177B200C" - + "BBE117577A615D6C770988C0BAD946E208E24FA074E5AB3143DB5BFC" + "E0FD108E4B82D120A93AD2CAFFFFFFFFFFFFFFFF"; - private const string rfc5054_3072_g = "05"; - public static readonly Srp6GroupParameters rfc5054_3072 = FromNG(rfc5054_3072_N, rfc5054_3072_g); - - private const string rfc5054_4096_N = "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD129024E08" - + "8A67CC74020BBEA63B139B22514A08798E3404DDEF9519B3CD3A431B" - + "302B0A6DF25F14374FE1356D6D51C245E485B576625E7EC6F44C42E9" - + "A637ED6B0BFF5CB6F406B7EDEE386BFB5A899FA5AE9F24117C4B1FE6" - + "49286651ECE45B3DC2007CB8A163BF0598DA48361C55D39A69163FA8" - + "FD24CF5F83655D23DCA3AD961C62F356208552BB9ED529077096966D" - + "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3BE39E772C" - + "180E86039B2783A2EC07A28FB5C55DF06F4C52C9DE2BCBF695581718" - + "3995497CEA956AE515D2261898FA051015728E5A8AAAC42DAD33170D" - + "04507A33A85521ABDF1CBA64ECFB850458DBEF0A8AEA71575D060C7D" - + "B3970F85A6E1E4C7ABF5AE8CDB0933D71E8C94E04A25619DCEE3D226" - + "1AD2EE6BF12FFA06D98A0864D87602733EC86A64521F2B18177B200C" - + "BBE117577A615D6C770988C0BAD946E208E24FA074E5AB3143DB5BFC" - + "E0FD108E4B82D120A92108011A723C12A787E6D788719A10BDBA5B26" - + "99C327186AF4E23C1A946834B6150BDA2583E9CA2AD44CE8DBBBC2DB" - + "04DE8EF92E8EFC141FBECAA6287C59474E6BC05D99B2964FA090C3A2" - + "233BA186515BE7ED1F612970CEE2D7AFB81BDD762170481CD0069127" - + "D5B05AA993B4EA988D8FDDC186FFB7DC90A6C08F4DF435C934063199" + "FFFFFFFFFFFFFFFF"; - private const string rfc5054_4096_g = "05"; - public static readonly Srp6GroupParameters rfc5054_4096 = FromNG(rfc5054_4096_N, rfc5054_4096_g); - - private const string rfc5054_6144_N = "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD129024E08" - + "8A67CC74020BBEA63B139B22514A08798E3404DDEF9519B3CD3A431B" - + "302B0A6DF25F14374FE1356D6D51C245E485B576625E7EC6F44C42E9" - + "A637ED6B0BFF5CB6F406B7EDEE386BFB5A899FA5AE9F24117C4B1FE6" - + "49286651ECE45B3DC2007CB8A163BF0598DA48361C55D39A69163FA8" - + "FD24CF5F83655D23DCA3AD961C62F356208552BB9ED529077096966D" - + "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3BE39E772C" - + "180E86039B2783A2EC07A28FB5C55DF06F4C52C9DE2BCBF695581718" - + "3995497CEA956AE515D2261898FA051015728E5A8AAAC42DAD33170D" - + "04507A33A85521ABDF1CBA64ECFB850458DBEF0A8AEA71575D060C7D" - + "B3970F85A6E1E4C7ABF5AE8CDB0933D71E8C94E04A25619DCEE3D226" - + "1AD2EE6BF12FFA06D98A0864D87602733EC86A64521F2B18177B200C" - + "BBE117577A615D6C770988C0BAD946E208E24FA074E5AB3143DB5BFC" - + "E0FD108E4B82D120A92108011A723C12A787E6D788719A10BDBA5B26" - + "99C327186AF4E23C1A946834B6150BDA2583E9CA2AD44CE8DBBBC2DB" - + "04DE8EF92E8EFC141FBECAA6287C59474E6BC05D99B2964FA090C3A2" - + "233BA186515BE7ED1F612970CEE2D7AFB81BDD762170481CD0069127" - + "D5B05AA993B4EA988D8FDDC186FFB7DC90A6C08F4DF435C934028492" - + "36C3FAB4D27C7026C1D4DCB2602646DEC9751E763DBA37BDF8FF9406" - + "AD9E530EE5DB382F413001AEB06A53ED9027D831179727B0865A8918" - + "DA3EDBEBCF9B14ED44CE6CBACED4BB1BDB7F1447E6CC254B33205151" - + "2BD7AF426FB8F401378CD2BF5983CA01C64B92ECF032EA15D1721D03" - + "F482D7CE6E74FEF6D55E702F46980C82B5A84031900B1C9E59E7C97F" - + "BEC7E8F323A97A7E36CC88BE0F1D45B7FF585AC54BD407B22B4154AA" - + "CC8F6D7EBF48E1D814CC5ED20F8037E0A79715EEF29BE32806A1D58B" - + "B7C5DA76F550AA3D8A1FBFF0EB19CCB1A313D55CDA56C9EC2EF29632" - + "387FE8D76E3C0468043E8F663F4860EE12BF2D5B0B7474D6E694F91E" + "6DCC4024FFFFFFFFFFFFFFFF"; - private const string rfc5054_6144_g = "05"; - public static readonly Srp6GroupParameters rfc5054_6144 = FromNG(rfc5054_6144_N, rfc5054_6144_g); - - private const string rfc5054_8192_N = "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD129024E08" - + "8A67CC74020BBEA63B139B22514A08798E3404DDEF9519B3CD3A431B" - + "302B0A6DF25F14374FE1356D6D51C245E485B576625E7EC6F44C42E9" - + "A637ED6B0BFF5CB6F406B7EDEE386BFB5A899FA5AE9F24117C4B1FE6" - + "49286651ECE45B3DC2007CB8A163BF0598DA48361C55D39A69163FA8" - + "FD24CF5F83655D23DCA3AD961C62F356208552BB9ED529077096966D" - + "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3BE39E772C" - + "180E86039B2783A2EC07A28FB5C55DF06F4C52C9DE2BCBF695581718" - + "3995497CEA956AE515D2261898FA051015728E5A8AAAC42DAD33170D" - + "04507A33A85521ABDF1CBA64ECFB850458DBEF0A8AEA71575D060C7D" - + "B3970F85A6E1E4C7ABF5AE8CDB0933D71E8C94E04A25619DCEE3D226" - + "1AD2EE6BF12FFA06D98A0864D87602733EC86A64521F2B18177B200C" - + "BBE117577A615D6C770988C0BAD946E208E24FA074E5AB3143DB5BFC" - + "E0FD108E4B82D120A92108011A723C12A787E6D788719A10BDBA5B26" - + "99C327186AF4E23C1A946834B6150BDA2583E9CA2AD44CE8DBBBC2DB" - + "04DE8EF92E8EFC141FBECAA6287C59474E6BC05D99B2964FA090C3A2" - + "233BA186515BE7ED1F612970CEE2D7AFB81BDD762170481CD0069127" - + "D5B05AA993B4EA988D8FDDC186FFB7DC90A6C08F4DF435C934028492" - + "36C3FAB4D27C7026C1D4DCB2602646DEC9751E763DBA37BDF8FF9406" - + "AD9E530EE5DB382F413001AEB06A53ED9027D831179727B0865A8918" - + "DA3EDBEBCF9B14ED44CE6CBACED4BB1BDB7F1447E6CC254B33205151" - + "2BD7AF426FB8F401378CD2BF5983CA01C64B92ECF032EA15D1721D03" - + "F482D7CE6E74FEF6D55E702F46980C82B5A84031900B1C9E59E7C97F" - + "BEC7E8F323A97A7E36CC88BE0F1D45B7FF585AC54BD407B22B4154AA" - + "CC8F6D7EBF48E1D814CC5ED20F8037E0A79715EEF29BE32806A1D58B" - + "B7C5DA76F550AA3D8A1FBFF0EB19CCB1A313D55CDA56C9EC2EF29632" - + "387FE8D76E3C0468043E8F663F4860EE12BF2D5B0B7474D6E694F91E" - + "6DBE115974A3926F12FEE5E438777CB6A932DF8CD8BEC4D073B931BA" - + "3BC832B68D9DD300741FA7BF8AFC47ED2576F6936BA424663AAB639C" - + "5AE4F5683423B4742BF1C978238F16CBE39D652DE3FDB8BEFC848AD9" - + "22222E04A4037C0713EB57A81A23F0C73473FC646CEA306B4BCBC886" - + "2F8385DDFA9D4B7FA2C087E879683303ED5BDD3A062B3CF5B3A278A6" - + "6D2A13F83F44F82DDF310EE074AB6A364597E899A0255DC164F31CC5" - + "0846851DF9AB48195DED7EA1B1D510BD7EE74D73FAF36BC31ECFA268" - + "359046F4EB879F924009438B481C6CD7889A002ED5EE382BC9190DA6" - + "FC026E479558E4475677E9AA9E3050E2765694DFC81F56E880B96E71" + "60C980DD98EDD3DFFFFFFFFFFFFFFFFF"; - private const string rfc5054_8192_g = "13"; - public static readonly Srp6GroupParameters rfc5054_8192 = FromNG(rfc5054_8192_N, rfc5054_8192_g); - } -} diff --git a/bc-sharp-crypto/src/crypto/agreement/srp/SRP6Utilities.cs b/bc-sharp-crypto/src/crypto/agreement/srp/SRP6Utilities.cs deleted file mode 100644 index ef6d8f2..0000000 --- a/bc-sharp-crypto/src/crypto/agreement/srp/SRP6Utilities.cs +++ /dev/null @@ -1,153 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Agreement.Srp -{ - public class Srp6Utilities - { - public static BigInteger CalculateK(IDigest digest, BigInteger N, BigInteger g) - { - return HashPaddedPair(digest, N, N, g); - } - - public static BigInteger CalculateU(IDigest digest, BigInteger N, BigInteger A, BigInteger B) - { - return HashPaddedPair(digest, N, A, B); - } - - public static BigInteger CalculateX(IDigest digest, BigInteger N, byte[] salt, byte[] identity, byte[] password) - { - byte[] output = new byte[digest.GetDigestSize()]; - - digest.BlockUpdate(identity, 0, identity.Length); - digest.Update((byte)':'); - digest.BlockUpdate(password, 0, password.Length); - digest.DoFinal(output, 0); - - digest.BlockUpdate(salt, 0, salt.Length); - digest.BlockUpdate(output, 0, output.Length); - digest.DoFinal(output, 0); - - return new BigInteger(1, output); - } - - public static BigInteger GeneratePrivateValue(IDigest digest, BigInteger N, BigInteger g, SecureRandom random) - { - int minBits = System.Math.Min(256, N.BitLength / 2); - BigInteger min = BigInteger.One.ShiftLeft(minBits - 1); - BigInteger max = N.Subtract(BigInteger.One); - - return BigIntegers.CreateRandomInRange(min, max, random); - } - - public static BigInteger ValidatePublicValue(BigInteger N, BigInteger val) - { - val = val.Mod(N); - - // Check that val % N != 0 - if (val.Equals(BigInteger.Zero)) - throw new CryptoException("Invalid public value: 0"); - - return val; - } - - /** - * Computes the client evidence message (M1) according to the standard routine: - * M1 = H( A | B | S ) - * @param digest The Digest used as the hashing function H - * @param N Modulus used to get the pad length - * @param A The public client value - * @param B The public server value - * @param S The secret calculated by both sides - * @return M1 The calculated client evidence message - */ - public static BigInteger CalculateM1(IDigest digest, BigInteger N, BigInteger A, BigInteger B, BigInteger S) - { - BigInteger M1 = HashPaddedTriplet(digest, N, A, B, S); - return M1; - } - - /** - * Computes the server evidence message (M2) according to the standard routine: - * M2 = H( A | M1 | S ) - * @param digest The Digest used as the hashing function H - * @param N Modulus used to get the pad length - * @param A The public client value - * @param M1 The client evidence message - * @param S The secret calculated by both sides - * @return M2 The calculated server evidence message - */ - public static BigInteger CalculateM2(IDigest digest, BigInteger N, BigInteger A, BigInteger M1, BigInteger S) - { - BigInteger M2 = HashPaddedTriplet(digest, N, A, M1, S); - return M2; - } - - /** - * Computes the final Key according to the standard routine: Key = H(S) - * @param digest The Digest used as the hashing function H - * @param N Modulus used to get the pad length - * @param S The secret calculated by both sides - * @return - */ - public static BigInteger CalculateKey(IDigest digest, BigInteger N, BigInteger S) - { - int padLength = (N.BitLength + 7) / 8; - byte[] _S = GetPadded(S, padLength); - digest.BlockUpdate(_S, 0, _S.Length); - - byte[] output = new byte[digest.GetDigestSize()]; - digest.DoFinal(output, 0); - return new BigInteger(1, output); - } - - private static BigInteger HashPaddedTriplet(IDigest digest, BigInteger N, BigInteger n1, BigInteger n2, BigInteger n3) - { - int padLength = (N.BitLength + 7) / 8; - - byte[] n1_bytes = GetPadded(n1, padLength); - byte[] n2_bytes = GetPadded(n2, padLength); - byte[] n3_bytes = GetPadded(n3, padLength); - - digest.BlockUpdate(n1_bytes, 0, n1_bytes.Length); - digest.BlockUpdate(n2_bytes, 0, n2_bytes.Length); - digest.BlockUpdate(n3_bytes, 0, n3_bytes.Length); - - byte[] output = new byte[digest.GetDigestSize()]; - digest.DoFinal(output, 0); - - return new BigInteger(1, output); - } - - private static BigInteger HashPaddedPair(IDigest digest, BigInteger N, BigInteger n1, BigInteger n2) - { - int padLength = (N.BitLength + 7) / 8; - - byte[] n1_bytes = GetPadded(n1, padLength); - byte[] n2_bytes = GetPadded(n2, padLength); - - digest.BlockUpdate(n1_bytes, 0, n1_bytes.Length); - digest.BlockUpdate(n2_bytes, 0, n2_bytes.Length); - - byte[] output = new byte[digest.GetDigestSize()]; - digest.DoFinal(output, 0); - - return new BigInteger(1, output); - } - - private static byte[] GetPadded(BigInteger n, int length) - { - byte[] bs = BigIntegers.AsUnsignedByteArray(n); - if (bs.Length < length) - { - byte[] tmp = new byte[length]; - Array.Copy(bs, 0, tmp, length - bs.Length, bs.Length); - bs = tmp; - } - return bs; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/agreement/srp/SRP6VerifierGenerator.cs b/bc-sharp-crypto/src/crypto/agreement/srp/SRP6VerifierGenerator.cs deleted file mode 100644 index 9569735..0000000 --- a/bc-sharp-crypto/src/crypto/agreement/srp/SRP6VerifierGenerator.cs +++ /dev/null @@ -1,55 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Agreement.Srp -{ - /** - * Generates new SRP verifier for user - */ - public class Srp6VerifierGenerator - { - protected BigInteger N; - protected BigInteger g; - protected IDigest digest; - - public Srp6VerifierGenerator() - { - } - - /** - * Initialises generator to create new verifiers - * @param N The safe prime to use (see DHParametersGenerator) - * @param g The group parameter to use (see DHParametersGenerator) - * @param digest The digest to use. The same digest type will need to be used later for the actual authentication - * attempt. Also note that the final session key size is dependent on the chosen digest. - */ - public virtual void Init(BigInteger N, BigInteger g, IDigest digest) - { - this.N = N; - this.g = g; - this.digest = digest; - } - - public virtual void Init(Srp6GroupParameters group, IDigest digest) - { - Init(group.N, group.G, digest); - } - - /** - * Creates a new SRP verifier - * @param salt The salt to use, generally should be large and random - * @param identity The user's identifying information (eg. username) - * @param password The user's password - * @return A new verifier for use in future SRP authentication - */ - public virtual BigInteger GenerateVerifier(byte[] salt, byte[] identity, byte[] password) - { - BigInteger x = Srp6Utilities.CalculateX(digest, N, salt, identity, password); - - return g.ModPow(x, N); - } - } -} - diff --git a/bc-sharp-crypto/src/crypto/digests/DSTU7564Digest.cs b/bc-sharp-crypto/src/crypto/digests/DSTU7564Digest.cs deleted file mode 100644 index 9de41dd..0000000 --- a/bc-sharp-crypto/src/crypto/digests/DSTU7564Digest.cs +++ /dev/null @@ -1,562 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Engines; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; -//using Org.BouncyCastle.Utilities; - - -using Org.BouncyCastle.Utilities.Encoders; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Digests -{ - /** - * implementation of Ukrainian DSTU 7564 hash function - */ - public class Dstu7564Digest : IDigest, IMemoable - { - private const int ROWS = 8; - private const int REDUCTION_POLYNOMIAL = 0x011d; - private const int BITS_IN_BYTE = 8; - - - private const int NB_512 = 8; //Number of 8-byte words in state for <=256-bit hash code. - private const int NB_1024 = 16; //Number of 8-byte words in state for <=512-bit hash code. - - private const int NR_512 = 10; //Number of rounds for 512-bit state. - private const int NR_1024 = 14; //Number of rounds for 1024-bit state. - - private const int STATE_BYTE_SIZE_512 = ROWS * NB_512; - private const int STATE_BYTE_SIZE_1024 = ROWS * NB_1024; - - private int hashSize; - private int blockSize; - - - - private int columns; - private int rounds; - - - private byte[] padded_; - - private byte[][] state_; - - private ulong inputLength; - private int bufOff; - private byte[] buf; - - public Dstu7564Digest(Dstu7564Digest digest) - { - copyIn(digest); - } - - private void copyIn(Dstu7564Digest digest) - { - this.hashSize = digest.hashSize; - this.blockSize = digest.blockSize; - - this.columns = digest.columns; - this.rounds = digest.rounds; - - this.padded_ = Arrays.Clone(digest.padded_); - this.state_ = new byte[digest.state_.Length][]; - for (int i = 0; i != this.state_.Length; i++) - { - this.state_[i] = Arrays.Clone(digest.state_[i]); - } - - this.inputLength = digest.inputLength; - this.bufOff = digest.bufOff; - this.buf = Arrays.Clone(digest.buf); - } - - public Dstu7564Digest(int hashSizeBits) - { - if (hashSizeBits == 256 || hashSizeBits == 384 || hashSizeBits == 512) - { - this.hashSize = hashSizeBits / 8; - } - else - { - throw new ArgumentException("Hash size is not recommended. Use 256 or 384 or 512 size"); - } - - if (hashSizeBits > 256) - { - this.blockSize = 1024 / 8; - this.columns = NB_1024; - this.rounds = NR_1024; - this.state_ = new byte[STATE_BYTE_SIZE_1024][]; - - } - else - { - this.blockSize = 512 / 8; - this.columns = NB_512; - this.rounds = NR_512; - this.state_ = new byte[STATE_BYTE_SIZE_512][]; - - } - - //Console.WriteLine("length: " + state_.Length); - - for (int i = 0; i < state_.Length; i++) - { - this.state_[i] = new byte[columns]; - } - - this.state_[0][0] = (byte)state_.Length; - - this.hashSize = hashSizeBits / 8; - - this.padded_ = null; - this.buf = new byte[blockSize]; - } - - public string AlgorithmName - { - get { return "DSTU7564"; } - } - - - public virtual void BlockUpdate(byte[] input, int inOff, int length) - { - while (bufOff != 0 && length > 0) - { - Update(input[inOff++]); - length--; - } - - if (length > 0) - { - while (length > blockSize) - { - ProcessBlock(input, inOff); - inOff += blockSize; - inputLength += (ulong)blockSize; - length -= blockSize; - } - - while (length > 0) - { - Update(input[inOff++]); - length--; - } - } - } - - protected byte[] Pad(byte[] input, int inOff, int length) - { - //Console.WriteLine(length); - - byte[] padded; - if (blockSize - length < 13) // terminator byte + 96 bits of length - { - padded = new byte[2 * blockSize]; - } - else - { - padded = new byte[blockSize]; - } - - - Array.Copy(input, inOff, padded, 0, length); - padded[length] = 0x80; - Pack.UInt64_To_LE(inputLength * 8, padded, padded.Length - 12); - - return padded; - } - - protected void ProcessBlock(byte[] input, int inOff) - { - byte[][] temp1 = new byte[STATE_BYTE_SIZE_1024][]; - byte[][] temp2 = new byte[STATE_BYTE_SIZE_1024][]; - - for (int i = 0; i < state_.Length; i++) - { - temp1[i] = new byte[ROWS]; - temp2[i] = new byte[ROWS]; - } - - for (int i = 0; i < ROWS; ++i) - { - for (int j = 0; j < columns; ++j) - { - //Console.WriteLine("row = {0}, column = {1}", i, j); - - temp1[j][i] = (byte)(state_[j][i] ^ input[j * ROWS + i + inOff]); - temp2[j][i] = input[j * ROWS + i + inOff]; - - } - - } - - P(temp1); - - Q(temp2); - - for (int i = 0; i < ROWS; ++i) - { - for (int j = 0; j < columns; ++j) - { - state_[j][i] ^= (byte)(temp1[j][i] ^ temp2[j][i]); - - } - - } - } - - public int DoFinal(byte[] output, int outOff) - { - padded_ = Pad(buf, 0, bufOff); - - int paddedLen = padded_.Length; - int paddedOff = 0; - - while (paddedLen != 0) - { - ProcessBlock(padded_, paddedOff); - paddedOff += blockSize; - paddedLen -= blockSize; - } - - - //Console.WriteLine(stateLine.Length); - - byte[][] temp = new byte[STATE_BYTE_SIZE_1024][]; - for (int i = 0; i < state_.Length; i++) - { - temp[i] = new byte[ROWS]; - Array.Copy(state_[i], temp[i], ROWS); - } - - P(temp); - - for (int i = 0; i < ROWS; ++i) - { - for (int j = 0; j < columns; ++j) - { - state_[j][i] ^= temp[j][i]; - //Console.Write("{0:x} ", state_[j][i]); - } - //Console.WriteLine(); - } - - byte[] stateLine = new byte[ROWS * columns]; - int stateLineIndex = 0; - for (int j = 0; j < columns; ++j) - { - for (int i = 0; i < ROWS; ++i) - { - - stateLine[stateLineIndex] = state_[j][i]; - stateLineIndex++; - - //Console.WriteLine("index = {0}, row = {1}, column = {2}", stateLineIndex, i, j); - - } - } - - //Console.WriteLine("final: " + Hex.ToHexString(stateLine)); - //Console.WriteLine(stateLine.Length); - - Array.Copy(stateLine, stateLine.Length - hashSize, output, outOff, hashSize); - - Reset(); - - return hashSize; - } - - public void Reset() - { - for (int bufferIndex = 0; bufferIndex < state_.Length; bufferIndex++) - { - state_[bufferIndex] = new byte[columns]; - } - - state_[0][0] = (byte)state_.Length; - - inputLength = 0; - bufOff = 0; - - Arrays.Fill(buf, (byte)0); - - if (padded_ != null) - { - Arrays.Fill(padded_, (byte)0); - } - } - - public int GetDigestSize() - { - return hashSize; - } - - public int GetByteLength() - { - return blockSize; - } - - public void Update(byte input) - { - buf[bufOff++] = input; - if (bufOff == blockSize) - { - ProcessBlock(buf, 0); - bufOff = 0; - } - inputLength++; - } - - void SubBytes(byte[][] state) - { - int i, j; - for (i = 0; i < ROWS; ++i) - { - for (j = 0; j < columns; ++j) - { - state[j][i] = sBoxes[i % 4][state[j][i]]; - } - } - } - - void ShiftBytes(byte[][] state) - { - int i, j; - byte[] temp = new byte[NB_1024]; - int shift = -1; - for (i = 0; i < ROWS; ++i) - { - if ((i == ROWS - 1) && (columns == NB_1024)) - { - shift = 11; - } - else - { - ++shift; - } - for (j = 0; j < columns; ++j) - { - temp[(j + shift) % columns] = state[j][i]; - } - for (j = 0; j < columns; ++j) - { - state[j][i] = temp[j]; - } - } - } - - byte MultiplyGF(byte x, byte y) - { - int i; - byte r = 0; - byte hbit = 0; - for (i = 0; i < BITS_IN_BYTE; ++i) - { - if ((y & 0x1) == 1) - { - r ^= x; - } - - hbit = (byte)(x & 0x80); - - x <<= 1; - - if (hbit == 0x80) - { - x = (byte)((int)x ^ REDUCTION_POLYNOMIAL); - } - - y >>= 1; - } - return r; - } - - private void MixColumns(byte[][] state) - { - int i, row, col, b; - byte product; - byte[] result = new byte[ROWS]; - - for (col = 0; col < columns; ++col) - { - Array.Clear(result, 0, ROWS); - for (row = ROWS - 1; row >= 0; --row) - { - product = 0; - for (b = ROWS - 1; b >= 0; --b) - { - product ^= MultiplyGF(state[col][b], mds_matrix[row][b]); - } - result[row] = product; - } - for (i = 0; i < ROWS; ++i) - { - state[col][i] = result[i]; - } - } - } - - void AddRoundConstantP(byte[][] state, int round) - { - int i; - for (i = 0; i < columns; ++i) - { - state[i][0] ^= (byte)((i * 0x10) ^ round); - } - } - - void AddRoundConstantQ(byte[][] state, int round) - { - int j; - UInt64[] s = new UInt64[columns]; - - for (j = 0; j < columns; j++) - { - s[j] = Pack.LE_To_UInt64(state[j]); - - s[j] = s[j] + (0x00F0F0F0F0F0F0F3UL ^ ((((UInt64)(columns - j - 1) * 0x10UL) ^ (UInt64)round) << (7 * 8))); - - state[j] = Pack.UInt64_To_LE(s[j]); - } - } - - void P(byte[][] state) - { - int i; - for (i = 0; i < rounds; ++i) - { - AddRoundConstantP(state, i); - SubBytes(state); - ShiftBytes(state); - MixColumns(state); - } - } - - void Q(byte[][] state) - { - int i; - for (i = 0; i < rounds; ++i) - { - AddRoundConstantQ(state, i); - SubBytes(state); - ShiftBytes(state); - MixColumns(state); - } - } - - public IMemoable Copy() - { - return new Dstu7564Digest(this); - } - - public void Reset(IMemoable other) - { - Dstu7564Digest d = (Dstu7564Digest)other; - - copyIn(d); - } - - private readonly byte[][] mds_matrix = new byte[][] - { - new byte[] {0x01, 0x01, 0x05, 0x01, 0x08, 0x06, 0x07, 0x04}, - new byte[] {0x04, 0x01, 0x01, 0x05, 0x01, 0x08, 0x06, 0x07}, - new byte[] {0x07, 0x04, 0x01, 0x01, 0x05, 0x01, 0x08, 0x06}, - new byte[] {0x06, 0x07, 0x04, 0x01, 0x01, 0x05, 0x01, 0x08}, - new byte[] {0x08, 0x06, 0x07, 0x04, 0x01, 0x01, 0x05, 0x01}, - new byte[] {0x01, 0x08, 0x06, 0x07, 0x04, 0x01, 0x01, 0x05}, - new byte[] {0x05, 0x01, 0x08, 0x06, 0x07, 0x04, 0x01, 0x01}, - new byte[] {0x01, 0x05, 0x01, 0x08, 0x06, 0x07, 0x04, 0x01} - }; - - - - - private readonly byte[][] sBoxes = new byte[][] - { - new byte[] - { - 0xa8, 0x43, 0x5f, 0x06, 0x6b, 0x75, 0x6c, 0x59, 0x71, 0xdf, 0x87, 0x95, 0x17, 0xf0, 0xd8, 0x09, - 0x6d, 0xf3, 0x1d, 0xcb, 0xc9, 0x4d, 0x2c, 0xaf, 0x79, 0xe0, 0x97, 0xfd, 0x6f, 0x4b, 0x45, 0x39, - 0x3e, 0xdd, 0xa3, 0x4f, 0xb4, 0xb6, 0x9a, 0x0e, 0x1f, 0xbf, 0x15, 0xe1, 0x49, 0xd2, 0x93, 0xc6, - 0x92, 0x72, 0x9e, 0x61, 0xd1, 0x63, 0xfa, 0xee, 0xf4, 0x19, 0xd5, 0xad, 0x58, 0xa4, 0xbb, 0xa1, - 0xdc, 0xf2, 0x83, 0x37, 0x42, 0xe4, 0x7a, 0x32, 0x9c, 0xcc, 0xab, 0x4a, 0x8f, 0x6e, 0x04, 0x27, - 0x2e, 0xe7, 0xe2, 0x5a, 0x96, 0x16, 0x23, 0x2b, 0xc2, 0x65, 0x66, 0x0f, 0xbc, 0xa9, 0x47, 0x41, - 0x34, 0x48, 0xfc, 0xb7, 0x6a, 0x88, 0xa5, 0x53, 0x86, 0xf9, 0x5b, 0xdb, 0x38, 0x7b, 0xc3, 0x1e, - 0x22, 0x33, 0x24, 0x28, 0x36, 0xc7, 0xb2, 0x3b, 0x8e, 0x77, 0xba, 0xf5, 0x14, 0x9f, 0x08, 0x55, - 0x9b, 0x4c, 0xfe, 0x60, 0x5c, 0xda, 0x18, 0x46, 0xcd, 0x7d, 0x21, 0xb0, 0x3f, 0x1b, 0x89, 0xff, - 0xeb, 0x84, 0x69, 0x3a, 0x9d, 0xd7, 0xd3, 0x70, 0x67, 0x40, 0xb5, 0xde, 0x5d, 0x30, 0x91, 0xb1, - 0x78, 0x11, 0x01, 0xe5, 0x00, 0x68, 0x98, 0xa0, 0xc5, 0x02, 0xa6, 0x74, 0x2d, 0x0b, 0xa2, 0x76, - 0xb3, 0xbe, 0xce, 0xbd, 0xae, 0xe9, 0x8a, 0x31, 0x1c, 0xec, 0xf1, 0x99, 0x94, 0xaa, 0xf6, 0x26, - 0x2f, 0xef, 0xe8, 0x8c, 0x35, 0x03, 0xd4, 0x7f, 0xfb, 0x05, 0xc1, 0x5e, 0x90, 0x20, 0x3d, 0x82, - 0xf7, 0xea, 0x0a, 0x0d, 0x7e, 0xf8, 0x50, 0x1a, 0xc4, 0x07, 0x57, 0xb8, 0x3c, 0x62, 0xe3, 0xc8, - 0xac, 0x52, 0x64, 0x10, 0xd0, 0xd9, 0x13, 0x0c, 0x12, 0x29, 0x51, 0xb9, 0xcf, 0xd6, 0x73, 0x8d, - 0x81, 0x54, 0xc0, 0xed, 0x4e, 0x44, 0xa7, 0x2a, 0x85, 0x25, 0xe6, 0xca, 0x7c, 0x8b, 0x56, 0x80 - }, - - new byte[] - { - 0xce, 0xbb, 0xeb, 0x92, 0xea, 0xcb, 0x13, 0xc1, 0xe9, 0x3a, 0xd6, 0xb2, 0xd2, 0x90, 0x17, 0xf8, - 0x42, 0x15, 0x56, 0xb4, 0x65, 0x1c, 0x88, 0x43, 0xc5, 0x5c, 0x36, 0xba, 0xf5, 0x57, 0x67, 0x8d, - 0x31, 0xf6, 0x64, 0x58, 0x9e, 0xf4, 0x22, 0xaa, 0x75, 0x0f, 0x02, 0xb1, 0xdf, 0x6d, 0x73, 0x4d, - 0x7c, 0x26, 0x2e, 0xf7, 0x08, 0x5d, 0x44, 0x3e, 0x9f, 0x14, 0xc8, 0xae, 0x54, 0x10, 0xd8, 0xbc, - 0x1a, 0x6b, 0x69, 0xf3, 0xbd, 0x33, 0xab, 0xfa, 0xd1, 0x9b, 0x68, 0x4e, 0x16, 0x95, 0x91, 0xee, - 0x4c, 0x63, 0x8e, 0x5b, 0xcc, 0x3c, 0x19, 0xa1, 0x81, 0x49, 0x7b, 0xd9, 0x6f, 0x37, 0x60, 0xca, - 0xe7, 0x2b, 0x48, 0xfd, 0x96, 0x45, 0xfc, 0x41, 0x12, 0x0d, 0x79, 0xe5, 0x89, 0x8c, 0xe3, 0x20, - 0x30, 0xdc, 0xb7, 0x6c, 0x4a, 0xb5, 0x3f, 0x97, 0xd4, 0x62, 0x2d, 0x06, 0xa4, 0xa5, 0x83, 0x5f, - 0x2a, 0xda, 0xc9, 0x00, 0x7e, 0xa2, 0x55, 0xbf, 0x11, 0xd5, 0x9c, 0xcf, 0x0e, 0x0a, 0x3d, 0x51, - 0x7d, 0x93, 0x1b, 0xfe, 0xc4, 0x47, 0x09, 0x86, 0x0b, 0x8f, 0x9d, 0x6a, 0x07, 0xb9, 0xb0, 0x98, - 0x18, 0x32, 0x71, 0x4b, 0xef, 0x3b, 0x70, 0xa0, 0xe4, 0x40, 0xff, 0xc3, 0xa9, 0xe6, 0x78, 0xf9, - 0x8b, 0x46, 0x80, 0x1e, 0x38, 0xe1, 0xb8, 0xa8, 0xe0, 0x0c, 0x23, 0x76, 0x1d, 0x25, 0x24, 0x05, - 0xf1, 0x6e, 0x94, 0x28, 0x9a, 0x84, 0xe8, 0xa3, 0x4f, 0x77, 0xd3, 0x85, 0xe2, 0x52, 0xf2, 0x82, - 0x50, 0x7a, 0x2f, 0x74, 0x53, 0xb3, 0x61, 0xaf, 0x39, 0x35, 0xde, 0xcd, 0x1f, 0x99, 0xac, 0xad, - 0x72, 0x2c, 0xdd, 0xd0, 0x87, 0xbe, 0x5e, 0xa6, 0xec, 0x04, 0xc6, 0x03, 0x34, 0xfb, 0xdb, 0x59, - 0xb6, 0xc2, 0x01, 0xf0, 0x5a, 0xed, 0xa7, 0x66, 0x21, 0x7f, 0x8a, 0x27, 0xc7, 0xc0, 0x29, 0xd7 - }, - - new byte[] - { - 0x93, 0xd9, 0x9a, 0xb5, 0x98, 0x22, 0x45, 0xfc, 0xba, 0x6a, 0xdf, 0x02, 0x9f, 0xdc, 0x51, 0x59, - 0x4a, 0x17, 0x2b, 0xc2, 0x94, 0xf4, 0xbb, 0xa3, 0x62, 0xe4, 0x71, 0xd4, 0xcd, 0x70, 0x16, 0xe1, - 0x49, 0x3c, 0xc0, 0xd8, 0x5c, 0x9b, 0xad, 0x85, 0x53, 0xa1, 0x7a, 0xc8, 0x2d, 0xe0, 0xd1, 0x72, - 0xa6, 0x2c, 0xc4, 0xe3, 0x76, 0x78, 0xb7, 0xb4, 0x09, 0x3b, 0x0e, 0x41, 0x4c, 0xde, 0xb2, 0x90, - 0x25, 0xa5, 0xd7, 0x03, 0x11, 0x00, 0xc3, 0x2e, 0x92, 0xef, 0x4e, 0x12, 0x9d, 0x7d, 0xcb, 0x35, - 0x10, 0xd5, 0x4f, 0x9e, 0x4d, 0xa9, 0x55, 0xc6, 0xd0, 0x7b, 0x18, 0x97, 0xd3, 0x36, 0xe6, 0x48, - 0x56, 0x81, 0x8f, 0x77, 0xcc, 0x9c, 0xb9, 0xe2, 0xac, 0xb8, 0x2f, 0x15, 0xa4, 0x7c, 0xda, 0x38, - 0x1e, 0x0b, 0x05, 0xd6, 0x14, 0x6e, 0x6c, 0x7e, 0x66, 0xfd, 0xb1, 0xe5, 0x60, 0xaf, 0x5e, 0x33, - 0x87, 0xc9, 0xf0, 0x5d, 0x6d, 0x3f, 0x88, 0x8d, 0xc7, 0xf7, 0x1d, 0xe9, 0xec, 0xed, 0x80, 0x29, - 0x27, 0xcf, 0x99, 0xa8, 0x50, 0x0f, 0x37, 0x24, 0x28, 0x30, 0x95, 0xd2, 0x3e, 0x5b, 0x40, 0x83, - 0xb3, 0x69, 0x57, 0x1f, 0x07, 0x1c, 0x8a, 0xbc, 0x20, 0xeb, 0xce, 0x8e, 0xab, 0xee, 0x31, 0xa2, - 0x73, 0xf9, 0xca, 0x3a, 0x1a, 0xfb, 0x0d, 0xc1, 0xfe, 0xfa, 0xf2, 0x6f, 0xbd, 0x96, 0xdd, 0x43, - 0x52, 0xb6, 0x08, 0xf3, 0xae, 0xbe, 0x19, 0x89, 0x32, 0x26, 0xb0, 0xea, 0x4b, 0x64, 0x84, 0x82, - 0x6b, 0xf5, 0x79, 0xbf, 0x01, 0x5f, 0x75, 0x63, 0x1b, 0x23, 0x3d, 0x68, 0x2a, 0x65, 0xe8, 0x91, - 0xf6, 0xff, 0x13, 0x58, 0xf1, 0x47, 0x0a, 0x7f, 0xc5, 0xa7, 0xe7, 0x61, 0x5a, 0x06, 0x46, 0x44, - 0x42, 0x04, 0xa0, 0xdb, 0x39, 0x86, 0x54, 0xaa, 0x8c, 0x34, 0x21, 0x8b, 0xf8, 0x0c, 0x74, 0x67 - }, - - new byte[] - { - 0x68, 0x8d, 0xca, 0x4d, 0x73, 0x4b, 0x4e, 0x2a, 0xd4, 0x52, 0x26, 0xb3, 0x54, 0x1e, 0x19, 0x1f, - 0x22, 0x03, 0x46, 0x3d, 0x2d, 0x4a, 0x53, 0x83, 0x13, 0x8a, 0xb7, 0xd5, 0x25, 0x79, 0xf5, 0xbd, - 0x58, 0x2f, 0x0d, 0x02, 0xed, 0x51, 0x9e, 0x11, 0xf2, 0x3e, 0x55, 0x5e, 0xd1, 0x16, 0x3c, 0x66, - 0x70, 0x5d, 0xf3, 0x45, 0x40, 0xcc, 0xe8, 0x94, 0x56, 0x08, 0xce, 0x1a, 0x3a, 0xd2, 0xe1, 0xdf, - 0xb5, 0x38, 0x6e, 0x0e, 0xe5, 0xf4, 0xf9, 0x86, 0xe9, 0x4f, 0xd6, 0x85, 0x23, 0xcf, 0x32, 0x99, - 0x31, 0x14, 0xae, 0xee, 0xc8, 0x48, 0xd3, 0x30, 0xa1, 0x92, 0x41, 0xb1, 0x18, 0xc4, 0x2c, 0x71, - 0x72, 0x44, 0x15, 0xfd, 0x37, 0xbe, 0x5f, 0xaa, 0x9b, 0x88, 0xd8, 0xab, 0x89, 0x9c, 0xfa, 0x60, - 0xea, 0xbc, 0x62, 0x0c, 0x24, 0xa6, 0xa8, 0xec, 0x67, 0x20, 0xdb, 0x7c, 0x28, 0xdd, 0xac, 0x5b, - 0x34, 0x7e, 0x10, 0xf1, 0x7b, 0x8f, 0x63, 0xa0, 0x05, 0x9a, 0x43, 0x77, 0x21, 0xbf, 0x27, 0x09, - 0xc3, 0x9f, 0xb6, 0xd7, 0x29, 0xc2, 0xeb, 0xc0, 0xa4, 0x8b, 0x8c, 0x1d, 0xfb, 0xff, 0xc1, 0xb2, - 0x97, 0x2e, 0xf8, 0x65, 0xf6, 0x75, 0x07, 0x04, 0x49, 0x33, 0xe4, 0xd9, 0xb9, 0xd0, 0x42, 0xc7, - 0x6c, 0x90, 0x00, 0x8e, 0x6f, 0x50, 0x01, 0xc5, 0xda, 0x47, 0x3f, 0xcd, 0x69, 0xa2, 0xe2, 0x7a, - 0xa7, 0xc6, 0x93, 0x0f, 0x0a, 0x06, 0xe6, 0x2b, 0x96, 0xa3, 0x1c, 0xaf, 0x6a, 0x12, 0x84, 0x39, - 0xe7, 0xb0, 0x82, 0xf7, 0xfe, 0x9d, 0x87, 0x5c, 0x81, 0x35, 0xde, 0xb4, 0xa5, 0xfc, 0x80, 0xef, - 0xcb, 0xbb, 0x6b, 0x76, 0xba, 0x5a, 0x7d, 0x78, 0x0b, 0x95, 0xe3, 0xad, 0x74, 0x98, 0x3b, 0x36, - 0x64, 0x6d, 0xdc, 0xf0, 0x59, 0xa9, 0x4c, 0x17, 0x7f, 0x91, 0xb8, 0xc9, 0x57, 0x1b, 0xe0, 0x61 - } - }; - - - } -} diff --git a/bc-sharp-crypto/src/crypto/digests/GOST3411Digest.cs b/bc-sharp-crypto/src/crypto/digests/GOST3411Digest.cs deleted file mode 100644 index 218adf6..0000000 --- a/bc-sharp-crypto/src/crypto/digests/GOST3411Digest.cs +++ /dev/null @@ -1,356 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Engines; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Digests -{ - /** - * implementation of GOST R 34.11-94 - */ - public class Gost3411Digest - : IDigest, IMemoable - { - private const int DIGEST_LENGTH = 32; - - private byte[] H = new byte[32], L = new byte[32], - M = new byte[32], Sum = new byte[32]; - private byte[][] C = MakeC(); - - private byte[] xBuf = new byte[32]; - private int xBufOff; - private ulong byteCount; - - private readonly IBlockCipher cipher = new Gost28147Engine(); - private byte[] sBox; - - private static byte[][] MakeC() - { - byte[][] c = new byte[4][]; - for (int i = 0; i < 4; ++i) - { - c[i] = new byte[32]; - } - return c; - } - - /** - * Standard constructor - */ - public Gost3411Digest() - { - sBox = Gost28147Engine.GetSBox("D-A"); - cipher.Init(true, new ParametersWithSBox(null, sBox)); - - Reset(); - } - - /** - * Constructor to allow use of a particular sbox with GOST28147 - * @see GOST28147Engine#getSBox(String) - */ - public Gost3411Digest(byte[] sBoxParam) - { - sBox = Arrays.Clone(sBoxParam); - cipher.Init(true, new ParametersWithSBox(null, sBox)); - - Reset(); - } - - /** - * Copy constructor. This will copy the state of the provided - * message digest. - */ - public Gost3411Digest(Gost3411Digest t) - { - Reset(t); - } - - public string AlgorithmName - { - get { return "Gost3411"; } - } - - public int GetDigestSize() - { - return DIGEST_LENGTH; - } - - public void Update( - byte input) - { - xBuf[xBufOff++] = input; - if (xBufOff == xBuf.Length) - { - sumByteArray(xBuf); // calc sum M - processBlock(xBuf, 0); - xBufOff = 0; - } - byteCount++; - } - - public void BlockUpdate( - byte[] input, - int inOff, - int length) - { - while ((xBufOff != 0) && (length > 0)) - { - Update(input[inOff]); - inOff++; - length--; - } - - while (length > xBuf.Length) - { - Array.Copy(input, inOff, xBuf, 0, xBuf.Length); - - sumByteArray(xBuf); // calc sum M - processBlock(xBuf, 0); - inOff += xBuf.Length; - length -= xBuf.Length; - byteCount += (uint)xBuf.Length; - } - - // load in the remainder. - while (length > 0) - { - Update(input[inOff]); - inOff++; - length--; - } - } - - // (i + 1 + 4(k - 1)) = 8i + k i = 0-3, k = 1-8 - private byte[] K = new byte[32]; - - private byte[] P(byte[] input) - { - int fourK = 0; - for(int k = 0; k < 8; k++) - { - K[fourK++] = input[k]; - K[fourK++] = input[8 + k]; - K[fourK++] = input[16 + k]; - K[fourK++] = input[24 + k]; - } - - return K; - } - - //A (x) = (x0 ^ x1) || x3 || x2 || x1 - byte[] a = new byte[8]; - private byte[] A(byte[] input) - { - for(int j=0; j<8; j++) - { - a[j]=(byte)(input[j] ^ input[j+8]); - } - - Array.Copy(input, 8, input, 0, 24); - Array.Copy(a, 0, input, 24, 8); - - return input; - } - - //Encrypt function, ECB mode - private void E(byte[] key, byte[] s, int sOff, byte[] input, int inOff) - { - cipher.Init(true, new KeyParameter(key)); - - cipher.ProcessBlock(input, inOff, s, sOff); - } - - // (in:) n16||..||n1 ==> (out:) n1^n2^n3^n4^n13^n16||n16||..||n2 - internal short[] wS = new short[16], w_S = new short[16]; - - private void fw(byte[] input) - { - cpyBytesToShort(input, wS); - w_S[15] = (short)(wS[0] ^ wS[1] ^ wS[2] ^ wS[3] ^ wS[12] ^ wS[15]); - Array.Copy(wS, 1, w_S, 0, 15); - cpyShortToBytes(w_S, input); - } - - // block processing - internal byte[] S = new byte[32], U = new byte[32], V = new byte[32], W = new byte[32]; - - private void processBlock(byte[] input, int inOff) - { - Array.Copy(input, inOff, M, 0, 32); - - //key step 1 - - // H = h3 || h2 || h1 || h0 - // S = s3 || s2 || s1 || s0 - H.CopyTo(U, 0); - M.CopyTo(V, 0); - for (int j=0; j<32; j++) - { - W[j] = (byte)(U[j]^V[j]); - } - // Encrypt gost28147-ECB - E(P(W), S, 0, H, 0); // s0 = EK0 [h0] - - //keys step 2,3,4 - for (int i=1; i<4; i++) - { - byte[] tmpA = A(U); - for (int j=0; j<32; j++) - { - U[j] = (byte)(tmpA[j] ^ C[i][j]); - } - V = A(A(V)); - for (int j=0; j<32; j++) - { - W[j] = (byte)(U[j]^V[j]); - } - // Encrypt gost28147-ECB - E(P(W), S, i * 8, H, i * 8); // si = EKi [hi] - } - - // x(M, H) = y61(H^y(M^y12(S))) - for(int n = 0; n < 12; n++) - { - fw(S); - } - for(int n = 0; n < 32; n++) - { - S[n] = (byte)(S[n] ^ M[n]); - } - - fw(S); - - for(int n = 0; n < 32; n++) - { - S[n] = (byte)(H[n] ^ S[n]); - } - for(int n = 0; n < 61; n++) - { - fw(S); - } - Array.Copy(S, 0, H, 0, H.Length); - } - - private void finish() - { - ulong bitCount = byteCount * 8; - Pack.UInt64_To_LE(bitCount, L); - - while (xBufOff != 0) - { - Update((byte)0); - } - - processBlock(L, 0); - processBlock(Sum, 0); - } - - public int DoFinal( - byte[] output, - int outOff) - { - finish(); - - H.CopyTo(output, outOff); - - Reset(); - - return DIGEST_LENGTH; - } - - /** - * reset the chaining variables to the IV values. - */ - private static readonly byte[] C2 = { - 0x00,(byte)0xFF,0x00,(byte)0xFF,0x00,(byte)0xFF,0x00,(byte)0xFF, - (byte)0xFF,0x00,(byte)0xFF,0x00,(byte)0xFF,0x00,(byte)0xFF,0x00, - 0x00,(byte)0xFF,(byte)0xFF,0x00,(byte)0xFF,0x00,0x00,(byte)0xFF, - (byte)0xFF,0x00,0x00,0x00,(byte)0xFF,(byte)0xFF,0x00,(byte)0xFF - }; - - public void Reset() - { - byteCount = 0; - xBufOff = 0; - - Array.Clear(H, 0, H.Length); - Array.Clear(L, 0, L.Length); - Array.Clear(M, 0, M.Length); - Array.Clear(C[1], 0, C[1].Length); // real index C = +1 because index array with 0. - Array.Clear(C[3], 0, C[3].Length); - Array.Clear(Sum, 0, Sum.Length); - Array.Clear(xBuf, 0, xBuf.Length); - - C2.CopyTo(C[2], 0); - } - - // 256 bitsblock modul -> (Sum + a mod (2^256)) - private void sumByteArray( - byte[] input) - { - int carry = 0; - - for (int i = 0; i != Sum.Length; i++) - { - int sum = (Sum[i] & 0xff) + (input[i] & 0xff) + carry; - - Sum[i] = (byte)sum; - - carry = sum >> 8; - } - } - - private static void cpyBytesToShort(byte[] S, short[] wS) - { - for(int i = 0; i < S.Length / 2; i++) - { - wS[i] = (short)(((S[i*2+1]<<8)&0xFF00)|(S[i*2]&0xFF)); - } - } - - private static void cpyShortToBytes(short[] wS, byte[] S) - { - for(int i=0; i> 8); - S[i*2] = (byte)wS[i]; - } - } - - public int GetByteLength() - { - return 32; - } - - public IMemoable Copy() - { - return new Gost3411Digest(this); - } - - public void Reset(IMemoable other) - { - Gost3411Digest t = (Gost3411Digest)other; - - this.sBox = t.sBox; - cipher.Init(true, new ParametersWithSBox(null, sBox)); - - Reset(); - - Array.Copy(t.H, 0, this.H, 0, t.H.Length); - Array.Copy(t.L, 0, this.L, 0, t.L.Length); - Array.Copy(t.M, 0, this.M, 0, t.M.Length); - Array.Copy(t.Sum, 0, this.Sum, 0, t.Sum.Length); - Array.Copy(t.C[1], 0, this.C[1], 0, t.C[1].Length); - Array.Copy(t.C[2], 0, this.C[2], 0, t.C[2].Length); - Array.Copy(t.C[3], 0, this.C[3], 0, t.C[3].Length); - Array.Copy(t.xBuf, 0, this.xBuf, 0, t.xBuf.Length); - - this.xBufOff = t.xBufOff; - this.byteCount = t.byteCount; - } - } - -} diff --git a/bc-sharp-crypto/src/crypto/digests/GOST3411_2012Digest.cs b/bc-sharp-crypto/src/crypto/digests/GOST3411_2012Digest.cs deleted file mode 100644 index 4395129..0000000 --- a/bc-sharp-crypto/src/crypto/digests/GOST3411_2012Digest.cs +++ /dev/null @@ -1,1036 +0,0 @@ -using System; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Digests -{ - public abstract class GOST3411_2012Digest:IDigest,IMemoable - { - private readonly byte[] IV = new byte[64]; - private readonly byte[] N = new byte[64]; - private readonly byte[] Sigma = new byte[64]; - private readonly byte[] Ki = new byte[64]; - private readonly byte[] m = new byte[64]; - private readonly byte[] h = new byte[64]; - - // Temporary buffers - private readonly byte[] tmp = new byte[64]; - private readonly byte[] block = new byte[64]; - - private int bOff = 64; - - protected GOST3411_2012Digest(byte[] IV) - { - System.Array.Copy(IV,this.IV,64); - System.Array.Copy(IV, h, 64); - } - - public abstract string AlgorithmName { get; } - - public abstract IMemoable Copy(); - - public virtual int DoFinal(byte[] output, int outOff) - { - int lenM = 64 - bOff; - - // At this point it is certain that lenM is smaller than 64 - for (int i = 0; i != 64 - lenM; i++) - { - m[i] = 0; - } - - m[63 - lenM] = 1; - - if (bOff != 64) - { - System.Array.Copy(block, bOff, m, 64 - lenM, lenM); - } - - g_N(h, N, m); - addMod512(N, lenM * 8); - addMod512(Sigma, m); - g_N(h, Zero, N); - g_N(h, Zero, Sigma); - - reverse(h, tmp); - - Array.Copy(tmp, 0, output, outOff, 64); - - Reset(); - return 64; - } - - public int GetByteLength() - { - return 64; - } - - public abstract int GetDigestSize(); - - - public void Reset() - { - bOff = 64; - Arrays.Fill(N, (byte)0); - Arrays.Fill(Sigma, (byte)0); - System.Array.Copy(IV, 0, h, 0, 64); - Arrays.Fill(block, (byte)0); - } - - public void Reset(IMemoable other) - { - GOST3411_2012Digest o = (GOST3411_2012Digest)other; - - System.Array.Copy(o.IV, 0, this.IV, 0, 64); - System.Array.Copy(o.N, 0, this.N, 0, 64); - System.Array.Copy(o.Sigma, 0, this.Sigma, 0, 64); - System.Array.Copy(o.Ki, 0, this.Ki, 0, 64); - System.Array.Copy(o.m, 0, this.m, 0, 64); - System.Array.Copy(o.h, 0, this.h, 0, 64); - - System.Array.Copy(o.block, 0, this.block, 0, 64); - this.bOff = o.bOff; - } - - public void Update(byte input) - { - block[--bOff] = input; - if (bOff == 0) - { - g_N(h, N, block); - addMod512(N, 512); - addMod512(Sigma, block); - bOff = 64; - } - } - - - public void BlockUpdate(byte[] input, int inOff, int len) - { - while (bOff != 64 && len > 0) - { - Update(input[inOff++]); - len--; - } - while (len >= 64) - { - System.Array.Copy(input, inOff, tmp, 0, 64); - reverse(tmp, block); - g_N(h, N, block); - addMod512(N, 512); - addMod512(Sigma, block); - - len -= 64; - inOff += 64; - } - while (len > 0) - { - Update(input[inOff++]); - len--; - } - } - - - - - private void F(byte[] V) - { - ulong[] res = new ulong[8]; - ulong r; - - r = 0; - r ^= T[0][(V[56] & 0xFF)]; - r ^= T[1][(V[48] & 0xFF)]; - r ^= T[2][(V[40] & 0xFF)]; - r ^= T[3][(V[32] & 0xFF)]; - r ^= T[4][(V[24] & 0xFF)]; - r ^= T[5][(V[16] & 0xFF)]; - r ^= T[6][(V[8] & 0xFF)]; - r ^= T[7][(V[0] & 0xFF)]; - res[0] = r; - - r = 0; - r ^= T[0][(V[57] & 0xFF)]; - r ^= T[1][(V[49] & 0xFF)]; - r ^= T[2][(V[41] & 0xFF)]; - r ^= T[3][(V[33] & 0xFF)]; - r ^= T[4][(V[25] & 0xFF)]; - r ^= T[5][(V[17] & 0xFF)]; - r ^= T[6][(V[9] & 0xFF)]; - r ^= T[7][(V[1] & 0xFF)]; - res[1] = r; - - r = 0; - r ^= T[0][(V[58] & 0xFF)]; - r ^= T[1][(V[50] & 0xFF)]; - r ^= T[2][(V[42] & 0xFF)]; - r ^= T[3][(V[34] & 0xFF)]; - r ^= T[4][(V[26] & 0xFF)]; - r ^= T[5][(V[18] & 0xFF)]; - r ^= T[6][(V[10] & 0xFF)]; - r ^= T[7][(V[2] & 0xFF)]; - res[2] = r; - - r = 0; - r ^= T[0][(V[59] & 0xFF)]; - r ^= T[1][(V[51] & 0xFF)]; - r ^= T[2][(V[43] & 0xFF)]; - r ^= T[3][(V[35] & 0xFF)]; - r ^= T[4][(V[27] & 0xFF)]; - r ^= T[5][(V[19] & 0xFF)]; - r ^= T[6][(V[11] & 0xFF)]; - r ^= T[7][(V[3] & 0xFF)]; - res[3] = r; - - r = 0; - r ^= T[0][(V[60] & 0xFF)]; - r ^= T[1][(V[52] & 0xFF)]; - r ^= T[2][(V[44] & 0xFF)]; - r ^= T[3][(V[36] & 0xFF)]; - r ^= T[4][(V[28] & 0xFF)]; - r ^= T[5][(V[20] & 0xFF)]; - r ^= T[6][(V[12] & 0xFF)]; - r ^= T[7][(V[4] & 0xFF)]; - res[4] = r; - - r = 0; - r ^= T[0][(V[61] & 0xFF)]; - r ^= T[1][(V[53] & 0xFF)]; - r ^= T[2][(V[45] & 0xFF)]; - r ^= T[3][(V[37] & 0xFF)]; - r ^= T[4][(V[29] & 0xFF)]; - r ^= T[5][(V[21] & 0xFF)]; - r ^= T[6][(V[13] & 0xFF)]; - r ^= T[7][(V[5] & 0xFF)]; - res[5] = r; - - r = 0; - r ^= T[0][(V[62] & 0xFF)]; - r ^= T[1][(V[54] & 0xFF)]; - r ^= T[2][(V[46] & 0xFF)]; - r ^= T[3][(V[38] & 0xFF)]; - r ^= T[4][(V[30] & 0xFF)]; - r ^= T[5][(V[22] & 0xFF)]; - r ^= T[6][(V[14] & 0xFF)]; - r ^= T[7][(V[6] & 0xFF)]; - res[6] = r; - - r = 0; - r ^= T[0][(V[63] & 0xFF)]; - r ^= T[1][(V[55] & 0xFF)]; - r ^= T[2][(V[47] & 0xFF)]; - r ^= T[3][(V[39] & 0xFF)]; - r ^= T[4][(V[31] & 0xFF)]; - r ^= T[5][(V[23] & 0xFF)]; - r ^= T[6][(V[15] & 0xFF)]; - r ^= T[7][(V[7] & 0xFF)]; - res[7] = r; - - r = res[0]; - V[7] = (byte)(r >> 56); - V[6] = (byte)(r >> 48); - V[5] = (byte)(r >> 40); - V[4] = (byte)(r >> 32); - V[3] = (byte)(r >> 24); - V[2] = (byte)(r >> 16); - V[1] = (byte)(r >> 8); - V[0] = (byte)(r); - - r = res[1]; - V[15] = (byte)(r >> 56); - V[14] = (byte)(r >> 48); - V[13] = (byte)(r >> 40); - V[12] = (byte)(r >> 32); - V[11] = (byte)(r >> 24); - V[10] = (byte)(r >> 16); - V[9] = (byte)(r >> 8); - V[8] = (byte)(r); - - r = res[2]; - V[23] = (byte)(r >> 56); - V[22] = (byte)(r >> 48); - V[21] = (byte)(r >> 40); - V[20] = (byte)(r >> 32); - V[19] = (byte)(r >> 24); - V[18] = (byte)(r >> 16); - V[17] = (byte)(r >> 8); - V[16] = (byte)(r); - - r = res[3]; - V[31] = (byte)(r >> 56); - V[30] = (byte)(r >> 48); - V[29] = (byte)(r >> 40); - V[28] = (byte)(r >> 32); - V[27] = (byte)(r >> 24); - V[26] = (byte)(r >> 16); - V[25] = (byte)(r >> 8); - V[24] = (byte)(r); - - r = res[4]; - V[39] = (byte)(r >> 56); - V[38] = (byte)(r >> 48); - V[37] = (byte)(r >> 40); - V[36] = (byte)(r >> 32); - V[35] = (byte)(r >> 24); - V[34] = (byte)(r >> 16); - V[33] = (byte)(r >> 8); - V[32] = (byte)(r); - - r = res[5]; - V[47] = (byte)(r >> 56); - V[46] = (byte)(r >> 48); - V[45] = (byte)(r >> 40); - V[44] = (byte)(r >> 32); - V[43] = (byte)(r >> 24); - V[42] = (byte)(r >> 16); - V[41] = (byte)(r >> 8); - V[40] = (byte)(r); - - r = res[6]; - V[55] = (byte)(r >> 56); - V[54] = (byte)(r >> 48); - V[53] = (byte)(r >> 40); - V[52] = (byte)(r >> 32); - V[51] = (byte)(r >> 24); - V[50] = (byte)(r >> 16); - V[49] = (byte)(r >> 8); - V[48] = (byte)(r); - - r = res[7]; - V[63] = (byte)(r >> 56); - V[62] = (byte)(r >> 48); - V[61] = (byte)(r >> 40); - V[60] = (byte)(r >> 32); - V[59] = (byte)(r >> 24); - V[58] = (byte)(r >> 16); - V[57] = (byte)(r >> 8); - V[56] = (byte)(r); - } - - private void xor512(byte[] A, byte[] B) - { - for (int i = 0; i < 64; ++i) - { - A[i] ^= B[i]; - } - } - - private void E(byte[] K, byte[] m) - { - System.Array.Copy(K, 0, Ki, 0, 64); - xor512(K, m); - F(K); - for (int i = 0; i < 11; ++i) - { - xor512(Ki, C[i]); - F(Ki); - xor512(K, Ki); - F(K); - } - xor512(Ki, C[11]); - F(Ki); - xor512(K, Ki); - } - - private void g_N(byte[] h, byte[] N, byte[] m) - { - System.Array.Copy(h, 0, tmp, 0, 64); - - xor512(h, N); - F(h); - - E(h, m); - xor512(h, tmp); - xor512(h, m); - } - - private void addMod512(byte[] A, int num) - { - int c; - c = (A[63] & 0xFF) + (num & 0xFF); - A[63] = (byte)c; - - c = (A[62] & 0xFF) + ((num >> 8) & 0xFF) + (c >> 8); - A[62] = (byte)c; - - for (int i = 61; (i >= 0) && (c > 0); --i) - { - c = (A[i] & 0xFF) + (c >> 8); - A[i] = (byte)c; - } - } - - private void addMod512(byte[] A, byte[] B) - { - for (int c = 0, i = 63; i >= 0; --i) - { - c = (A[i] & 0xFF) + (B[i] & 0xFF) + (c >> 8); - A[i] = (byte)c; - } - } - - private void reverse(byte[] src, byte[] dst) - { - int len = src.Length; - for (int i = 0; i < len; i++) - { - dst[len - 1 - i] = src[i]; - } - } - - private static readonly byte[][] C = new byte[][]{ new byte[]{ - (byte)0xb1, (byte)0x08, (byte)0x5b, (byte)0xda, (byte)0x1e, (byte)0xca, (byte)0xda, (byte)0xe9, - (byte)0xeb, (byte)0xcb, (byte)0x2f, (byte)0x81, (byte)0xc0, (byte)0x65, (byte)0x7c, (byte)0x1f, - (byte)0x2f, (byte)0x6a, (byte)0x76, (byte)0x43, (byte)0x2e, (byte)0x45, (byte)0xd0, (byte)0x16, - (byte)0x71, (byte)0x4e, (byte)0xb8, (byte)0x8d, (byte)0x75, (byte)0x85, (byte)0xc4, (byte)0xfc, - (byte)0x4b, (byte)0x7c, (byte)0xe0, (byte)0x91, (byte)0x92, (byte)0x67, (byte)0x69, (byte)0x01, - (byte)0xa2, (byte)0x42, (byte)0x2a, (byte)0x08, (byte)0xa4, (byte)0x60, (byte)0xd3, (byte)0x15, - (byte)0x05, (byte)0x76, (byte)0x74, (byte)0x36, (byte)0xcc, (byte)0x74, (byte)0x4d, (byte)0x23, - (byte)0xdd, (byte)0x80, (byte)0x65, (byte)0x59, (byte)0xf2, (byte)0xa6, (byte)0x45, (byte)0x07}, - - new byte[]{ - (byte)0x6f, (byte)0xa3, (byte)0xb5, (byte)0x8a, (byte)0xa9, (byte)0x9d, (byte)0x2f, (byte)0x1a, - (byte)0x4f, (byte)0xe3, (byte)0x9d, (byte)0x46, (byte)0x0f, (byte)0x70, (byte)0xb5, (byte)0xd7, - (byte)0xf3, (byte)0xfe, (byte)0xea, (byte)0x72, (byte)0x0a, (byte)0x23, (byte)0x2b, (byte)0x98, - (byte)0x61, (byte)0xd5, (byte)0x5e, (byte)0x0f, (byte)0x16, (byte)0xb5, (byte)0x01, (byte)0x31, - (byte)0x9a, (byte)0xb5, (byte)0x17, (byte)0x6b, (byte)0x12, (byte)0xd6, (byte)0x99, (byte)0x58, - (byte)0x5c, (byte)0xb5, (byte)0x61, (byte)0xc2, (byte)0xdb, (byte)0x0a, (byte)0xa7, (byte)0xca, - (byte)0x55, (byte)0xdd, (byte)0xa2, (byte)0x1b, (byte)0xd7, (byte)0xcb, (byte)0xcd, (byte)0x56, - (byte)0xe6, (byte)0x79, (byte)0x04, (byte)0x70, (byte)0x21, (byte)0xb1, (byte)0x9b, (byte)0xb7}, - new byte[]{ - (byte)0xf5, (byte)0x74, (byte)0xdc, (byte)0xac, (byte)0x2b, (byte)0xce, (byte)0x2f, (byte)0xc7, - (byte)0x0a, (byte)0x39, (byte)0xfc, (byte)0x28, (byte)0x6a, (byte)0x3d, (byte)0x84, (byte)0x35, - (byte)0x06, (byte)0xf1, (byte)0x5e, (byte)0x5f, (byte)0x52, (byte)0x9c, (byte)0x1f, (byte)0x8b, - (byte)0xf2, (byte)0xea, (byte)0x75, (byte)0x14, (byte)0xb1, (byte)0x29, (byte)0x7b, (byte)0x7b, - (byte)0xd3, (byte)0xe2, (byte)0x0f, (byte)0xe4, (byte)0x90, (byte)0x35, (byte)0x9e, (byte)0xb1, - (byte)0xc1, (byte)0xc9, (byte)0x3a, (byte)0x37, (byte)0x60, (byte)0x62, (byte)0xdb, (byte)0x09, - (byte)0xc2, (byte)0xb6, (byte)0xf4, (byte)0x43, (byte)0x86, (byte)0x7a, (byte)0xdb, (byte)0x31, - (byte)0x99, (byte)0x1e, (byte)0x96, (byte)0xf5, (byte)0x0a, (byte)0xba, (byte)0x0a, (byte)0xb2}, - new byte[]{ - (byte)0xef, (byte)0x1f, (byte)0xdf, (byte)0xb3, (byte)0xe8, (byte)0x15, (byte)0x66, (byte)0xd2, - (byte)0xf9, (byte)0x48, (byte)0xe1, (byte)0xa0, (byte)0x5d, (byte)0x71, (byte)0xe4, (byte)0xdd, - (byte)0x48, (byte)0x8e, (byte)0x85, (byte)0x7e, (byte)0x33, (byte)0x5c, (byte)0x3c, (byte)0x7d, - (byte)0x9d, (byte)0x72, (byte)0x1c, (byte)0xad, (byte)0x68, (byte)0x5e, (byte)0x35, (byte)0x3f, - (byte)0xa9, (byte)0xd7, (byte)0x2c, (byte)0x82, (byte)0xed, (byte)0x03, (byte)0xd6, (byte)0x75, - (byte)0xd8, (byte)0xb7, (byte)0x13, (byte)0x33, (byte)0x93, (byte)0x52, (byte)0x03, (byte)0xbe, - (byte)0x34, (byte)0x53, (byte)0xea, (byte)0xa1, (byte)0x93, (byte)0xe8, (byte)0x37, (byte)0xf1, - (byte)0x22, (byte)0x0c, (byte)0xbe, (byte)0xbc, (byte)0x84, (byte)0xe3, (byte)0xd1, (byte)0x2e}, - new byte[] { - (byte)0x4b, (byte)0xea, (byte)0x6b, (byte)0xac, (byte)0xad, (byte)0x47, (byte)0x47, (byte)0x99, - (byte)0x9a, (byte)0x3f, (byte)0x41, (byte)0x0c, (byte)0x6c, (byte)0xa9, (byte)0x23, (byte)0x63, - (byte)0x7f, (byte)0x15, (byte)0x1c, (byte)0x1f, (byte)0x16, (byte)0x86, (byte)0x10, (byte)0x4a, - (byte)0x35, (byte)0x9e, (byte)0x35, (byte)0xd7, (byte)0x80, (byte)0x0f, (byte)0xff, (byte)0xbd, - (byte)0xbf, (byte)0xcd, (byte)0x17, (byte)0x47, (byte)0x25, (byte)0x3a, (byte)0xf5, (byte)0xa3, - (byte)0xdf, (byte)0xff, (byte)0x00, (byte)0xb7, (byte)0x23, (byte)0x27, (byte)0x1a, (byte)0x16, - (byte)0x7a, (byte)0x56, (byte)0xa2, (byte)0x7e, (byte)0xa9, (byte)0xea, (byte)0x63, (byte)0xf5, - (byte)0x60, (byte)0x17, (byte)0x58, (byte)0xfd, (byte)0x7c, (byte)0x6c, (byte)0xfe, (byte)0x57}, - new byte[]{ - (byte)0xae, (byte)0x4f, (byte)0xae, (byte)0xae, (byte)0x1d, (byte)0x3a, (byte)0xd3, (byte)0xd9, - (byte)0x6f, (byte)0xa4, (byte)0xc3, (byte)0x3b, (byte)0x7a, (byte)0x30, (byte)0x39, (byte)0xc0, - (byte)0x2d, (byte)0x66, (byte)0xc4, (byte)0xf9, (byte)0x51, (byte)0x42, (byte)0xa4, (byte)0x6c, - (byte)0x18, (byte)0x7f, (byte)0x9a, (byte)0xb4, (byte)0x9a, (byte)0xf0, (byte)0x8e, (byte)0xc6, - (byte)0xcf, (byte)0xfa, (byte)0xa6, (byte)0xb7, (byte)0x1c, (byte)0x9a, (byte)0xb7, (byte)0xb4, - (byte)0x0a, (byte)0xf2, (byte)0x1f, (byte)0x66, (byte)0xc2, (byte)0xbe, (byte)0xc6, (byte)0xb6, - (byte)0xbf, (byte)0x71, (byte)0xc5, (byte)0x72, (byte)0x36, (byte)0x90, (byte)0x4f, (byte)0x35, - (byte)0xfa, (byte)0x68, (byte)0x40, (byte)0x7a, (byte)0x46, (byte)0x64, (byte)0x7d, (byte)0x6e}, - new byte[] { - (byte)0xf4, (byte)0xc7, (byte)0x0e, (byte)0x16, (byte)0xee, (byte)0xaa, (byte)0xc5, (byte)0xec, - (byte)0x51, (byte)0xac, (byte)0x86, (byte)0xfe, (byte)0xbf, (byte)0x24, (byte)0x09, (byte)0x54, - (byte)0x39, (byte)0x9e, (byte)0xc6, (byte)0xc7, (byte)0xe6, (byte)0xbf, (byte)0x87, (byte)0xc9, - (byte)0xd3, (byte)0x47, (byte)0x3e, (byte)0x33, (byte)0x19, (byte)0x7a, (byte)0x93, (byte)0xc9, - (byte)0x09, (byte)0x92, (byte)0xab, (byte)0xc5, (byte)0x2d, (byte)0x82, (byte)0x2c, (byte)0x37, - (byte)0x06, (byte)0x47, (byte)0x69, (byte)0x83, (byte)0x28, (byte)0x4a, (byte)0x05, (byte)0x04, - (byte)0x35, (byte)0x17, (byte)0x45, (byte)0x4c, (byte)0xa2, (byte)0x3c, (byte)0x4a, (byte)0xf3, - (byte)0x88, (byte)0x86, (byte)0x56, (byte)0x4d, (byte)0x3a, (byte)0x14, (byte)0xd4, (byte)0x93}, - new byte[] { - (byte)0x9b, (byte)0x1f, (byte)0x5b, (byte)0x42, (byte)0x4d, (byte)0x93, (byte)0xc9, (byte)0xa7, - (byte)0x03, (byte)0xe7, (byte)0xaa, (byte)0x02, (byte)0x0c, (byte)0x6e, (byte)0x41, (byte)0x41, - (byte)0x4e, (byte)0xb7, (byte)0xf8, (byte)0x71, (byte)0x9c, (byte)0x36, (byte)0xde, (byte)0x1e, - (byte)0x89, (byte)0xb4, (byte)0x44, (byte)0x3b, (byte)0x4d, (byte)0xdb, (byte)0xc4, (byte)0x9a, - (byte)0xf4, (byte)0x89, (byte)0x2b, (byte)0xcb, (byte)0x92, (byte)0x9b, (byte)0x06, (byte)0x90, - (byte)0x69, (byte)0xd1, (byte)0x8d, (byte)0x2b, (byte)0xd1, (byte)0xa5, (byte)0xc4, (byte)0x2f, - (byte)0x36, (byte)0xac, (byte)0xc2, (byte)0x35, (byte)0x59, (byte)0x51, (byte)0xa8, (byte)0xd9, - (byte)0xa4, (byte)0x7f, (byte)0x0d, (byte)0xd4, (byte)0xbf, (byte)0x02, (byte)0xe7, (byte)0x1e}, - new byte[]{ - (byte)0x37, (byte)0x8f, (byte)0x5a, (byte)0x54, (byte)0x16, (byte)0x31, (byte)0x22, (byte)0x9b, - (byte)0x94, (byte)0x4c, (byte)0x9a, (byte)0xd8, (byte)0xec, (byte)0x16, (byte)0x5f, (byte)0xde, - (byte)0x3a, (byte)0x7d, (byte)0x3a, (byte)0x1b, (byte)0x25, (byte)0x89, (byte)0x42, (byte)0x24, - (byte)0x3c, (byte)0xd9, (byte)0x55, (byte)0xb7, (byte)0xe0, (byte)0x0d, (byte)0x09, (byte)0x84, - (byte)0x80, (byte)0x0a, (byte)0x44, (byte)0x0b, (byte)0xdb, (byte)0xb2, (byte)0xce, (byte)0xb1, - (byte)0x7b, (byte)0x2b, (byte)0x8a, (byte)0x9a, (byte)0xa6, (byte)0x07, (byte)0x9c, (byte)0x54, - (byte)0x0e, (byte)0x38, (byte)0xdc, (byte)0x92, (byte)0xcb, (byte)0x1f, (byte)0x2a, (byte)0x60, - (byte)0x72, (byte)0x61, (byte)0x44, (byte)0x51, (byte)0x83, (byte)0x23, (byte)0x5a, (byte)0xdb}, - new byte[] { - (byte)0xab, (byte)0xbe, (byte)0xde, (byte)0xa6, (byte)0x80, (byte)0x05, (byte)0x6f, (byte)0x52, - (byte)0x38, (byte)0x2a, (byte)0xe5, (byte)0x48, (byte)0xb2, (byte)0xe4, (byte)0xf3, (byte)0xf3, - (byte)0x89, (byte)0x41, (byte)0xe7, (byte)0x1c, (byte)0xff, (byte)0x8a, (byte)0x78, (byte)0xdb, - (byte)0x1f, (byte)0xff, (byte)0xe1, (byte)0x8a, (byte)0x1b, (byte)0x33, (byte)0x61, (byte)0x03, - (byte)0x9f, (byte)0xe7, (byte)0x67, (byte)0x02, (byte)0xaf, (byte)0x69, (byte)0x33, (byte)0x4b, - (byte)0x7a, (byte)0x1e, (byte)0x6c, (byte)0x30, (byte)0x3b, (byte)0x76, (byte)0x52, (byte)0xf4, - (byte)0x36, (byte)0x98, (byte)0xfa, (byte)0xd1, (byte)0x15, (byte)0x3b, (byte)0xb6, (byte)0xc3, - (byte)0x74, (byte)0xb4, (byte)0xc7, (byte)0xfb, (byte)0x98, (byte)0x45, (byte)0x9c, (byte)0xed}, - new byte[] { - (byte)0x7b, (byte)0xcd, (byte)0x9e, (byte)0xd0, (byte)0xef, (byte)0xc8, (byte)0x89, (byte)0xfb, - (byte)0x30, (byte)0x02, (byte)0xc6, (byte)0xcd, (byte)0x63, (byte)0x5a, (byte)0xfe, (byte)0x94, - (byte)0xd8, (byte)0xfa, (byte)0x6b, (byte)0xbb, (byte)0xeb, (byte)0xab, (byte)0x07, (byte)0x61, - (byte)0x20, (byte)0x01, (byte)0x80, (byte)0x21, (byte)0x14, (byte)0x84, (byte)0x66, (byte)0x79, - (byte)0x8a, (byte)0x1d, (byte)0x71, (byte)0xef, (byte)0xea, (byte)0x48, (byte)0xb9, (byte)0xca, - (byte)0xef, (byte)0xba, (byte)0xcd, (byte)0x1d, (byte)0x7d, (byte)0x47, (byte)0x6e, (byte)0x98, - (byte)0xde, (byte)0xa2, (byte)0x59, (byte)0x4a, (byte)0xc0, (byte)0x6f, (byte)0xd8, (byte)0x5d, - (byte)0x6b, (byte)0xca, (byte)0xa4, (byte)0xcd, (byte)0x81, (byte)0xf3, (byte)0x2d, (byte)0x1b}, - new byte[] { - (byte)0x37, (byte)0x8e, (byte)0xe7, (byte)0x67, (byte)0xf1, (byte)0x16, (byte)0x31, (byte)0xba, - (byte)0xd2, (byte)0x13, (byte)0x80, (byte)0xb0, (byte)0x04, (byte)0x49, (byte)0xb1, (byte)0x7a, - (byte)0xcd, (byte)0xa4, (byte)0x3c, (byte)0x32, (byte)0xbc, (byte)0xdf, (byte)0x1d, (byte)0x77, - (byte)0xf8, (byte)0x20, (byte)0x12, (byte)0xd4, (byte)0x30, (byte)0x21, (byte)0x9f, (byte)0x9b, - (byte)0x5d, (byte)0x80, (byte)0xef, (byte)0x9d, (byte)0x18, (byte)0x91, (byte)0xcc, (byte)0x86, - (byte)0xe7, (byte)0x1d, (byte)0xa4, (byte)0xaa, (byte)0x88, (byte)0xe1, (byte)0x28, (byte)0x52, - (byte)0xfa, (byte)0xf4, (byte)0x17, (byte)0xd5, (byte)0xd9, (byte)0xb2, (byte)0x1b, (byte)0x99, - (byte)0x48, (byte)0xbc, (byte)0x92, (byte)0x4a, (byte)0xf1, (byte)0x1b, (byte)0xd7, (byte)0x20} - }; - - private static readonly byte[] Zero = { - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 - }; - - private readonly static ulong[][] T = { - new ulong[] { - 0xE6F87E5C5B711FD0L, 0x258377800924FA16L, 0xC849E07E852EA4A8L, 0x5B4686A18F06C16AL, - 0x0B32E9A2D77B416EL, 0xABDA37A467815C66L, 0xF61796A81A686676L, 0xF5DC0B706391954BL, - 0x4862F38DB7E64BF1L, 0xFF5C629A68BD85C5L, 0xCB827DA6FCD75795L, 0x66D36DAF69B9F089L, - 0x356C9F74483D83B0L, 0x7CBCECB1238C99A1L, 0x36A702AC31C4708DL, 0x9EB6A8D02FBCDFD6L, - 0x8B19FA51E5B3AE37L, 0x9CCFB5408A127D0BL, 0xBC0C78B508208F5AL, 0xE533E3842288ECEDL, - 0xCEC2C7D377C15FD2L, 0xEC7817B6505D0F5EL, 0xB94CC2C08336871DL, 0x8C205DB4CB0B04ADL, - 0x763C855B28A0892FL, 0x588D1B79F6FF3257L, 0x3FECF69E4311933EL, 0x0FC0D39F803A18C9L, - 0xEE010A26F5F3AD83L, 0x10EFE8F4411979A6L, 0x5DCDA10C7DE93A10L, 0x4A1BEE1D1248E92CL, - 0x53BFF2DB21847339L, 0xB4F50CCFA6A23D09L, 0x5FB4BC9CD84798CDL, 0xE88A2D8B071C56F9L, - 0x7F7771695A756A9CL, 0xC5F02E71A0BA1EBCL, 0xA663F9AB4215E672L, 0x2EB19E22DE5FBB78L, - 0x0DB9CE0F2594BA14L, 0x82520E6397664D84L, 0x2F031E6A0208EA98L, 0x5C7F2144A1BE6BF0L, - 0x7A37CB1CD16362DBL, 0x83E08E2B4B311C64L, 0xCF70479BAB960E32L, 0x856BA986B9DEE71EL, - 0xB5478C877AF56CE9L, 0xB8FE42885F61D6FDL, 0x1BDD0156966238C8L, 0x622157923EF8A92EL, - 0xFC97FF42114476F8L, 0x9D7D350856452CEBL, 0x4C90C9B0E0A71256L, 0x2308502DFBCB016CL, - 0x2D7A03FAA7A64845L, 0xF46E8B38BFC6C4ABL, 0xBDBEF8FDD477DEBAL, 0x3AAC4CEBC8079B79L, - 0xF09CB105E8879D0CL, 0x27FA6A10AC8A58CBL, 0x8960E7C1401D0CEAL, 0x1A6F811E4A356928L, - 0x90C4FB0773D196FFL, 0x43501A2F609D0A9FL, 0xF7A516E0C63F3796L, 0x1CE4A6B3B8DA9252L, - 0x1324752C38E08A9BL, 0xA5A864733BEC154FL, 0x2BF124575549B33FL, 0xD766DB15440DC5C7L, - 0xA7D179E39E42B792L, 0xDADF151A61997FD3L, 0x86A0345EC0271423L, 0x38D5517B6DA939A4L, - 0x6518F077104003B4L, 0x02791D90A5AEA2DDL, 0x88D267899C4A5D0AL, 0x930F66DF0A2865C2L, - 0x4EE9D4204509B08BL, 0x325538916685292AL, 0x412907BFC533A842L, 0xB27E2B62544DC673L, - 0x6C5304456295E007L, 0x5AF406E95351908AL, 0x1F2F3B6BC123616FL, 0xC37B09DC5255E5C6L, - 0x3967D133B1FE6844L, 0x298839C7F0E711E2L, 0x409B87F71964F9A2L, 0xE938ADC3DB4B0719L, - 0x0C0B4E47F9C3EBF4L, 0x5534D576D36B8843L, 0x4610A05AEB8B02D8L, 0x20C3CDF58232F251L, - 0x6DE1840DBEC2B1E7L, 0xA0E8DE06B0FA1D08L, 0x7B854B540D34333BL, 0x42E29A67BCCA5B7FL, - 0xD8A6088AC437DD0EL, 0xC63BB3A9D943ED81L, 0x21714DBD5E65A3B1L, 0x6761EDE7B5EEA169L, - 0x2431F7C8D573ABF6L, 0xD51FC685E1A3671AL, 0x5E063CD40410C92DL, 0x283AB98F2CB04002L, - 0x8FEBC06CB2F2F790L, 0x17D64F116FA1D33CL, 0xE07359F1A99EE4AAL, 0x784ED68C74CDC006L, - 0x6E2A19D5C73B42DAL, 0x8712B4161C7045C3L, 0x371582E4ED93216DL, 0xACE390414939F6FCL, - 0x7EC5F12186223B7CL, 0xC0B094042BAC16FBL, 0xF9D745379A527EBFL, 0x737C3F2EA3B68168L, - 0x33E7B8D9BAD278CAL, 0xA9A32A34C22FFEBBL, 0xE48163CCFEDFBD0DL, 0x8E5940246EA5A670L, - 0x51C6EF4B842AD1E4L, 0x22BAD065279C508CL, 0xD91488C218608CEEL, 0x319EA5491F7CDA17L, - 0xD394E128134C9C60L, 0x094BF43272D5E3B3L, 0x9BF612A5A4AAD791L, 0xCCBBDA43D26FFD0FL, - 0x34DE1F3C946AD250L, 0x4F5B5468995EE16BL, 0xDF9FAF6FEA8F7794L, 0x2648EA5870DD092BL, - 0xBFC7E56D71D97C67L, 0xDDE6B2FF4F21D549L, 0x3C276B463AE86003L, 0x91767B4FAF86C71FL, - 0x68A13E7835D4B9A0L, 0xB68C115F030C9FD4L, 0x141DD2C916582001L, 0x983D8F7DDD5324ACL, - 0x64AA703FCC175254L, 0xC2C989948E02B426L, 0x3E5E76D69F46C2DEL, 0x50746F03587D8004L, - 0x45DB3D829272F1E5L, 0x60584A029B560BF3L, 0xFBAE58A73FFCDC62L, 0xA15A5E4E6CAD4CE8L, - 0x4BA96E55CE1FB8CCL, 0x08F9747AAE82B253L, 0xC102144CF7FB471BL, 0x9F042898F3EB8E36L, - 0x068B27ADF2EFFB7AL, 0xEDCA97FE8C0A5EBEL, 0x778E0513F4F7D8CFL, 0x302C2501C32B8BF7L, - 0x8D92DDFC175C554DL, 0xF865C57F46052F5FL, 0xEAF3301BA2B2F424L, 0xAA68B7ECBBD60D86L, - 0x998F0F350104754CL, 0x0000000000000000L, 0xF12E314D34D0CCECL, 0x710522BE061823B5L, - 0xAF280D9930C005C1L, 0x97FD5CE25D693C65L, 0x19A41CC633CC9A15L, 0x95844172F8C79EB8L, - 0xDC5432B7937684A9L, 0x9436C13A2490CF58L, 0x802B13F332C8EF59L, 0xC442AE397CED4F5CL, - 0xFA1CD8EFE3AB8D82L, 0xF2E5AC954D293FD1L, 0x6AD823E8907A1B7DL, 0x4D2249F83CF043B6L, - 0x03CB9DD879F9F33DL, 0xDE2D2F2736D82674L, 0x2A43A41F891EE2DFL, 0x6F98999D1B6C133AL, - 0xD4AD46CD3DF436FAL, 0xBB35DF50269825C0L, 0x964FDCAA813E6D85L, 0xEB41B0537EE5A5C4L, - 0x0540BA758B160847L, 0xA41AE43BE7BB44AFL, 0xE3B8C429D0671797L, 0x819993BBEE9FBEB9L, - 0xAE9A8DD1EC975421L, 0xF3572CDD917E6E31L, 0x6393D7DAE2AFF8CEL, 0x47A2201237DC5338L, - 0xA32343DEC903EE35L, 0x79FC56C4A89A91E6L, 0x01B28048DC5751E0L, 0x1296F564E4B7DB7BL, - 0x75F7188351597A12L, 0xDB6D9552BDCE2E33L, 0x1E9DBB231D74308FL, 0x520D7293FDD322D9L, - 0xE20A44610C304677L, 0xFEEEE2D2B4EAD425L, 0xCA30FDEE20800675L, 0x61EACA4A47015A13L, - 0xE74AFE1487264E30L, 0x2CC883B27BF119A5L, 0x1664CF59B3F682DCL, 0xA811AA7C1E78AF5BL, - 0x1D5626FB648DC3B2L, 0xB73E9117DF5BCE34L, 0xD05F7CF06AB56F5DL, 0xFD257F0ACD132718L, - 0x574DC8E676C52A9EL, 0x0739A7E52EB8AA9AL, 0x5486553E0F3CD9A3L, 0x56FF48AEAA927B7EL, - 0xBE756525AD8E2D87L, 0x7D0E6CF9FFDBC841L, 0x3B1ECCA31450CA99L, 0x6913BE30E983E840L, - 0xAD511009956EA71CL, 0xB1B5B6BA2DB4354EL, 0x4469BDCA4E25A005L, 0x15AF5281CA0F71E1L, - 0x744598CB8D0E2BF2L, 0x593F9B312AA863B7L, 0xEFB38A6E29A4FC63L, 0x6B6AA3A04C2D4A9DL, - 0x3D95EB0EE6BF31E3L, 0xA291C3961554BFD5L, 0x18169C8EEF9BCBF5L, 0x115D68BC9D4E2846L, - 0xBA875F18FACF7420L, 0xD1EDFCB8B6E23EBDL, 0xB00736F2F1E364AEL, 0x84D929CE6589B6FEL, - 0x70B7A2F6DA4F7255L, 0x0E7253D75C6D4929L, 0x04F23A3D574159A7L, 0x0A8069EA0B2C108EL, - 0x49D073C56BB11A11L, 0x8AAB7A1939E4FFD7L, 0xCD095A0B0E38ACEFL, 0xC9FB60365979F548L, - 0x92BDE697D67F3422L, 0xC78933E10514BC61L, 0xE1C1D9B975C9B54AL, 0xD2266160CF1BCD80L, - 0x9A4492ED78FD8671L, 0xB3CCAB2A881A9793L, 0x72CEBF667FE1D088L, 0xD6D45B5D985A9427L - }, - new ulong[]{ - 0xC811A8058C3F55DEL, 0x65F5B43196B50619L, 0xF74F96B1D6706E43L, 0x859D1E8BCB43D336L, - 0x5AAB8A85CCFA3D84L, 0xF9C7BF99C295FCFDL, 0xA21FD5A1DE4B630FL, 0xCDB3EF763B8B456DL, - 0x803F59F87CF7C385L, 0xB27C73BE5F31913CL, 0x98E3AC6633B04821L, 0xBF61674C26B8F818L, - 0x0FFBC995C4C130C8L, 0xAAA0862010761A98L, 0x6057F342210116AAL, 0xF63C760C0654CC35L, - 0x2DDB45CC667D9042L, 0xBCF45A964BD40382L, 0x68E8A0C3EF3C6F3DL, 0xA7BD92D269FF73BCL, - 0x290AE20201ED2287L, 0xB7DE34CDE885818FL, 0xD901EEA7DD61059BL, 0xD6FA273219A03553L, - 0xD56F1AE874CCCEC9L, 0xEA31245C2E83F554L, 0x7034555DA07BE499L, 0xCE26D2AC56E7BEF7L, - 0xFD161857A5054E38L, 0x6A0E7DA4527436D1L, 0x5BD86A381CDE9FF2L, 0xCAF7756231770C32L, - 0xB09AAED9E279C8D0L, 0x5DEF1091C60674DBL, 0x111046A2515E5045L, 0x23536CE4729802FCL, - 0xC50CBCF7F5B63CFAL, 0x73A16887CD171F03L, 0x7D2941AFD9F28DBDL, 0x3F5E3EB45A4F3B9DL, - 0x84EEFE361B677140L, 0x3DB8E3D3E7076271L, 0x1A3A28F9F20FD248L, 0x7EBC7C75B49E7627L, - 0x74E5F293C7EB565CL, 0x18DCF59E4F478BA4L, 0x0C6EF44FA9ADCB52L, 0xC699812D98DAC760L, - 0x788B06DC6E469D0EL, 0xFC65F8EA7521EC4EL, 0x30A5F7219E8E0B55L, 0x2BEC3F65BCA57B6BL, - 0xDDD04969BAF1B75EL, 0x99904CDBE394EA57L, 0x14B201D1E6EA40F6L, 0xBBB0C08241284ADDL, - 0x50F20463BF8F1DFFL, 0xE8D7F93B93CBACB8L, 0x4D8CB68E477C86E8L, 0xC1DD1B3992268E3FL, - 0x7C5AA11209D62FCBL, 0x2F3D98ABDB35C9AEL, 0x671369562BFD5FF5L, 0x15C1E16C36CEE280L, - 0x1D7EB2EDF8F39B17L, 0xDA94D37DB00DFE01L, 0x877BC3EC760B8ADAL, 0xCB8495DFE153AE44L, - 0x05A24773B7B410B3L, 0x12857B783C32ABDFL, 0x8EB770D06812513BL, 0x536739B9D2E3E665L, - 0x584D57E271B26468L, 0xD789C78FC9849725L, 0xA935BBFA7D1AE102L, 0x8B1537A3DFA64188L, - 0xD0CD5D9BC378DE7AL, 0x4AC82C9A4D80CFB7L, 0x42777F1B83BDB620L, 0x72D2883A1D33BD75L, - 0x5E7A2D4BAB6A8F41L, 0xF4DAAB6BBB1C95D9L, 0x905CFFE7FD8D31B6L, 0x83AA6422119B381FL, - 0xC0AEFB8442022C49L, 0xA0F908C663033AE3L, 0xA428AF0804938826L, 0xADE41C341A8A53C7L, - 0xAE7121EE77E6A85DL, 0xC47F5C4A25929E8CL, 0xB538E9AA55CDD863L, 0x06377AA9DAD8EB29L, - 0xA18AE87BB3279895L, 0x6EDFDA6A35E48414L, 0x6B7D9D19825094A7L, 0xD41CFA55A4E86CBFL, - 0xE5CAEDC9EA42C59CL, 0xA36C351C0E6FC179L, 0x5181E4DE6FABBF89L, 0xFFF0C530184D17D4L, - 0x9D41EB1584045892L, 0x1C0D525028D73961L, 0xF178EC180CA8856AL, 0x9A0571018EF811CDL, - 0x4091A27C3EF5EFCCL, 0x19AF15239F6329D2L, 0x347450EFF91EB990L, 0xE11B4A078DD27759L, - 0xB9561DE5FC601331L, 0x912F1F5A2DA993C0L, 0x1654DCB65BA2191AL, 0x3E2DDE098A6B99EBL, - 0x8A66D71E0F82E3FEL, 0x8C51ADB7D55A08D7L, 0x4533E50F8941FF7FL, 0x02E6DD67BD4859ECL, - 0xE068AABA5DF6D52FL, 0xC24826E3FF4A75A5L, 0x6C39070D88ACDDF8L, 0x6486548C4691A46FL, - 0xD1BEBD26135C7C0CL, 0xB30F93038F15334AL, 0x82D9849FC1BF9A69L, 0x9C320BA85420FAE4L, - 0xFA528243AFF90767L, 0x9ED4D6CFE968A308L, 0xB825FD582C44B147L, 0x9B7691BC5EDCB3BBL, - 0xC7EA619048FE6516L, 0x1063A61F817AF233L, 0x47D538683409A693L, 0x63C2CE984C6DED30L, - 0x2A9FDFD86C81D91DL, 0x7B1E3B06032A6694L, 0x666089EBFBD9FD83L, 0x0A598EE67375207BL, - 0x07449A140AFC495FL, 0x2CA8A571B6593234L, 0x1F986F8A45BBC2FBL, 0x381AA4A050B372C2L, - 0x5423A3ADD81FAF3AL, 0x17273C0B8B86BB6CL, 0xFE83258DC869B5A2L, 0x287902BFD1C980F1L, - 0xF5A94BD66B3837AFL, 0x88800A79B2CABA12L, 0x55504310083B0D4CL, 0xDF36940E07B9EEB2L, - 0x04D1A7CE6790B2C5L, 0x612413FFF125B4DCL, 0x26F12B97C52C124FL, 0x86082351A62F28ACL, - 0xEF93632F9937E5E7L, 0x3507B052293A1BE6L, 0xE72C30AE570A9C70L, 0xD3586041AE1425E0L, - 0xDE4574B3D79D4CC4L, 0x92BA228040C5685AL, 0xF00B0CA5DC8C271CL, 0xBE1287F1F69C5A6EL, - 0xF39E317FB1E0DC86L, 0x495D114020EC342DL, 0x699B407E3F18CD4BL, 0xDCA3A9D46AD51528L, - 0x0D1D14F279896924L, 0x0000000000000000L, 0x593EB75FA196C61EL, 0x2E4E78160B116BD8L, - 0x6D4AE7B058887F8EL, 0xE65FD013872E3E06L, 0x7A6DDBBBD30EC4E2L, 0xAC97FC89CAAEF1B1L, - 0x09CCB33C1E19DBE1L, 0x89F3EAC462EE1864L, 0x7770CF49AA87ADC6L, 0x56C57ECA6557F6D6L, - 0x03953DDA6D6CFB9AL, 0x36928D884456E07CL, 0x1EEB8F37959F608DL, 0x31D6179C4EAAA923L, - 0x6FAC3AD7E5C02662L, 0x43049FA653991456L, 0xABD3669DC052B8EEL, 0xAF02C153A7C20A2BL, - 0x3CCB036E3723C007L, 0x93C9C23D90E1CA2CL, 0xC33BC65E2F6ED7D3L, 0x4CFF56339758249EL, - 0xB1E94E64325D6AA6L, 0x37E16D359472420AL, 0x79F8E661BE623F78L, 0x5214D90402C74413L, - 0x482EF1FDF0C8965BL, 0x13F69BC5EC1609A9L, 0x0E88292814E592BEL, 0x4E198B542A107D72L, - 0xCCC00FCBEBAFE71BL, 0x1B49C844222B703EL, 0x2564164DA840E9D5L, 0x20C6513E1FF4F966L, - 0xBAC3203F910CE8ABL, 0xF2EDD1C261C47EF0L, 0x814CB945ACD361F3L, 0x95FEB8944A392105L, - 0x5C9CF02C1622D6ADL, 0x971865F3F77178E9L, 0xBD87BA2B9BF0A1F4L, 0x444005B259655D09L, - 0xED75BE48247FBC0BL, 0x7596122E17CFF42AL, 0xB44B091785E97A15L, 0x966B854E2755DA9FL, - 0xEEE0839249134791L, 0x32432A4623C652B9L, 0xA8465B47AD3E4374L, 0xF8B45F2412B15E8BL, - 0x2417F6F078644BA3L, 0xFB2162FE7FDDA511L, 0x4BBBCC279DA46DC1L, 0x0173E0BDD024A276L, - 0x22208C59A2BCA08AL, 0x8FC4906DB836F34DL, 0xE4B90D743A6667EAL, 0x7147B5E0705F46EFL, - 0x2782CB2A1508B039L, 0xEC065EF5F45B1E7DL, 0x21B5B183CFD05B10L, 0xDBE733C060295C77L, - 0x9FA73672394C017EL, 0xCF55321186C31C81L, 0xD8720E1A0D45A7EDL, 0x3B8F997A3DDF8958L, - 0x3AFC79C7EDFB2B2EL, 0xE9A4198643EF0ECEL, 0x5F09CDF67B4E2D37L, 0x4F6A6BE9FA34DF04L, - 0xB6ADD47038A123F9L, 0x8D224D0A057EAAA1L, 0xC96248B85C1BF7A8L, 0xE3FD9760309A2EB5L, - 0x0B2A6E5BA351820DL, 0xEB42C4E1FEA75722L, 0x948D58299A1D8373L, 0x7FCF9CC864BAD451L, - 0xA55B4FB5D4B72A50L, 0x08BF5381CE3D7997L, 0x46A6D8D5E42D04E5L, 0xD22B80FC7E308796L, - 0x57B69E77B57354A0L, 0x3969441D8097D0B4L, 0x3330CAFBF3E2F0CFL, 0xE28E77DDE0BE8CC3L, - 0x62B12E259C494F46L, 0xA6CE726FB9DBD1CAL, 0x41E242C1EED14DBAL, 0x76032FF47AA30FB0L - }, - new ulong[]{ - 0x45B268A93ACDE4CCL, 0xAF7F0BE884549D08L, 0x048354B3C1468263L, 0x925435C2C80EFED2L, - 0xEE4E37F27FDFFBA7L, 0x167A33920C60F14DL, 0xFB123B52EA03E584L, 0x4A0CAB53FDBB9007L, - 0x9DEAF6380F788A19L, 0xCB48EC558F0CB32AL, 0xB59DC4B2D6FEF7E0L, 0xDCDBCA22F4F3ECB6L, - 0x11DF5813549A9C40L, 0xE33FDEDF568ACED3L, 0xA0C1C8124322E9C3L, 0x07A56B8158FA6D0DL, - 0x77279579B1E1F3DDL, 0xD9B18B74422AC004L, 0xB8EC2D9FFFABC294L, 0xF4ACF8A82D75914FL, - 0x7BBF69B1EF2B6878L, 0xC4F62FAF487AC7E1L, 0x76CE809CC67E5D0CL, 0x6711D88F92E4C14CL, - 0x627B99D9243DEDFEL, 0x234AA5C3DFB68B51L, 0x909B1F15262DBF6DL, 0x4F66EA054B62BCB5L, - 0x1AE2CF5A52AA6AE8L, 0xBEA053FBD0CE0148L, 0xED6808C0E66314C9L, 0x43FE16CD15A82710L, - 0xCD049231A06970F6L, 0xE7BC8A6C97CC4CB0L, 0x337CE835FCB3B9C0L, 0x65DEF2587CC780F3L, - 0x52214EDE4132BB50L, 0x95F15E4390F493DFL, 0x870839625DD2E0F1L, 0x41313C1AFB8B66AFL, - 0x91720AF051B211BCL, 0x477D427ED4EEA573L, 0x2E3B4CEEF6E3BE25L, 0x82627834EB0BCC43L, - 0x9C03E3DD78E724C8L, 0x2877328AD9867DF9L, 0x14B51945E243B0F2L, 0x574B0F88F7EB97E2L, - 0x88B6FA989AA4943AL, 0x19C4F068CB168586L, 0x50EE6409AF11FAEFL, 0x7DF317D5C04EABA4L, - 0x7A567C5498B4C6A9L, 0xB6BBFB804F42188EL, 0x3CC22BCF3BC5CD0BL, 0xD04336EAAA397713L, - 0xF02FAC1BEC33132CL, 0x2506DBA7F0D3488DL, 0xD7E65D6BF2C31A1EL, 0x5EB9B2161FF820F5L, - 0x842E0650C46E0F9FL, 0x716BEB1D9E843001L, 0xA933758CAB315ED4L, 0x3FE414FDA2792265L, - 0x27C9F1701EF00932L, 0x73A4C1CA70A771BEL, 0x94184BA6E76B3D0EL, 0x40D829FF8C14C87EL, - 0x0FBEC3FAC77674CBL, 0x3616A9634A6A9572L, 0x8F139119C25EF937L, 0xF545ED4D5AEA3F9EL, - 0xE802499650BA387BL, 0x6437E7BD0B582E22L, 0xE6559F89E053E261L, 0x80AD52E305288DFCL, - 0x6DC55A23E34B9935L, 0xDE14E0F51AD0AD09L, 0xC6390578A659865EL, 0x96D7617109487CB1L, - 0xE2D6CB3A21156002L, 0x01E915E5779FAED1L, 0xADB0213F6A77DCB7L, 0x9880B76EB9A1A6ABL, - 0x5D9F8D248644CF9BL, 0xFD5E4536C5662658L, 0xF1C6B9FE9BACBDFDL, 0xEACD6341BE9979C4L, - 0xEFA7221708405576L, 0x510771ECD88E543EL, 0xC2BA51CB671F043DL, 0x0AD482AC71AF5879L, - 0xFE787A045CDAC936L, 0xB238AF338E049AEDL, 0xBD866CC94972EE26L, 0x615DA6EBBD810290L, - 0x3295FDD08B2C1711L, 0xF834046073BF0AEAL, 0xF3099329758FFC42L, 0x1CAEB13E7DCFA934L, - 0xBA2307481188832BL, 0x24EFCE42874CE65CL, 0x0E57D61FB0E9DA1AL, 0xB3D1BAD6F99B343CL, - 0xC0757B1C893C4582L, 0x2B510DB8403A9297L, 0x5C7698C1F1DB614AL, 0x3E0D0118D5E68CB4L, - 0xD60F488E855CB4CFL, 0xAE961E0DF3CB33D9L, 0x3A8E55AB14A00ED7L, 0x42170328623789C1L, - 0x838B6DD19C946292L, 0x895FEF7DED3B3AEBL, 0xCFCBB8E64E4A3149L, 0x064C7E642F65C3DCL, - 0x3D2B3E2A4C5A63DAL, 0x5BD3F340A9210C47L, 0xB474D157A1615931L, 0xAC5934DA1DE87266L, - 0x6EE365117AF7765BL, 0xC86ED36716B05C44L, 0x9BA6885C201D49C5L, 0xB905387A88346C45L, - 0x131072C4BAB9DDFFL, 0xBF49461EA751AF99L, 0xD52977BC1CE05BA1L, 0xB0F785E46027DB52L, - 0x546D30BA6E57788CL, 0x305AD707650F56AEL, 0xC987C682612FF295L, 0xA5AB8944F5FBC571L, - 0x7ED528E759F244CAL, 0x8DDCBBCE2C7DB888L, 0xAA154ABE328DB1BAL, 0x1E619BE993ECE88BL, - 0x09F2BD9EE813B717L, 0x7401AA4B285D1CB3L, 0x21858F143195CAEEL, 0x48C381841398D1B8L, - 0xFCB750D3B2F98889L, 0x39A86A998D1CE1B9L, 0x1F888E0CE473465AL, 0x7899568376978716L, - 0x02CF2AD7EE2341BFL, 0x85C713B5B3F1A14EL, 0xFF916FE12B4567E7L, 0x7C1A0230B7D10575L, - 0x0C98FCC85ECA9BA5L, 0xA3E7F720DA9E06ADL, 0x6A6031A2BBB1F438L, 0x973E74947ED7D260L, - 0x2CF4663918C0FF9AL, 0x5F50A7F368678E24L, 0x34D983B4A449D4CDL, 0x68AF1B755592B587L, - 0x7F3C3D022E6DEA1BL, 0xABFC5F5B45121F6BL, 0x0D71E92D29553574L, 0xDFFDF5106D4F03D8L, - 0x081BA87B9F8C19C6L, 0xDB7EA1A3AC0981BBL, 0xBBCA12AD66172DFAL, 0x79704366010829C7L, - 0x179326777BFF5F9CL, 0x0000000000000000L, 0xEB2476A4C906D715L, 0x724DD42F0738DF6FL, - 0xB752EE6538DDB65FL, 0x37FFBC863DF53BA3L, 0x8EFA84FCB5C157E6L, 0xE9EB5C73272596AAL, - 0x1B0BDABF2535C439L, 0x86E12C872A4D4E20L, 0x9969A28BCE3E087AL, 0xFAFB2EB79D9C4B55L, - 0x056A4156B6D92CB2L, 0x5A3AE6A5DEBEA296L, 0x22A3B026A8292580L, 0x53C85B3B36AD1581L, - 0xB11E900117B87583L, 0xC51F3A4A3FE56930L, 0xE019E1EDCF3621BDL, 0xEC811D2591FCBA18L, - 0x445B7D4C4D524A1DL, 0xA8DA6069DCAEF005L, 0x58F5CC72309DE329L, 0xD4C062596B7FF570L, - 0xCE22AD0339D59F98L, 0x591CD99747024DF8L, 0x8B90C5AA03187B54L, 0xF663D27FC356D0F0L, - 0xD8589E9135B56ED5L, 0x35309651D3D67A1CL, 0x12F96721CD26732EL, 0xD28C1C3D441A36ACL, - 0x492A946164077F69L, 0x2D1D73DC6F5F514BL, 0x6F0A70F40D68D88AL, 0x60B4B30ECA1EAC41L, - 0xD36509D83385987DL, 0x0B3D97490630F6A8L, 0x9ECCC90A96C46577L, 0xA20EE2C5AD01A87CL, - 0xE49AB55E0E70A3DEL, 0xA4429CA182646BA0L, 0xDA97B446DB962F6AL, 0xCCED87D4D7F6DE27L, - 0x2AB8185D37A53C46L, 0x9F25DCEFE15BCBA6L, 0xC19C6EF9FEA3EB53L, 0xA764A3931BD884CEL, - 0x2FD2590B817C10F4L, 0x56A21A6D80743933L, 0xE573A0BB79EF0D0FL, 0x155C0CA095DC1E23L, - 0x6C2C4FC694D437E4L, 0x10364DF623053291L, 0xDD32DFC7836C4267L, 0x03263F3299BCEF6EL, - 0x66F8CD6AE57B6F9DL, 0x8C35AE2B5BE21659L, 0x31B3C2E21290F87FL, 0x93BD2027BF915003L, - 0x69460E90220D1B56L, 0x299E276FAE19D328L, 0x63928C3C53A2432FL, 0x7082FEF8E91B9ED0L, - 0xBC6F792C3EED40F7L, 0x4C40D537D2DE53DBL, 0x75E8BFAE5FC2B262L, 0x4DA9C0D2A541FD0AL, - 0x4E8FFFE03CFD1264L, 0x2620E495696FA7E3L, 0xE1F0F408B8A98F6CL, 0xD1AA230FDDA6D9C2L, - 0xC7D0109DD1C6288FL, 0x8A79D04F7487D585L, 0x4694579BA3710BA2L, 0x38417F7CFA834F68L, - 0x1D47A4DB0A5007E5L, 0x206C9AF1460A643FL, 0xA128DDF734BD4712L, 0x8144470672B7232DL, - 0xF2E086CC02105293L, 0x182DE58DBC892B57L, 0xCAA1F9B0F8931DFBL, 0x6B892447CC2E5AE9L, - 0xF9DD11850420A43BL, 0x4BE5BEB68A243ED6L, 0x5584255F19C8D65DL, 0x3B67404E633FA006L, - 0xA68DB6766C472A1FL, 0xF78AC79AB4C97E21L, 0xC353442E1080AAECL, 0x9A4F9DB95782E714L - }, - new ulong[] { - 0x05BA7BC82C9B3220L, 0x31A54665F8B65E4FL, 0xB1B651F77547F4D4L, 0x8BFA0D857BA46682L, - 0x85A96C5AA16A98BBL, 0x990FAEF908EB79C9L, 0xA15E37A247F4A62DL, 0x76857DCD5D27741EL, - 0xF8C50B800A1820BCL, 0xBE65DCB201F7A2B4L, 0x666D1B986F9426E7L, 0x4CC921BF53C4E648L, - 0x95410A0F93D9CA42L, 0x20CDCCAA647BA4EFL, 0x429A4060890A1871L, 0x0C4EA4F69B32B38BL, - 0xCCDA362DDE354CD3L, 0x96DC23BC7C5B2FA9L, 0xC309BB68AA851AB3L, 0xD26131A73648E013L, - 0x021DC52941FC4DB2L, 0xCD5ADAB7704BE48AL, 0xA77965D984ED71E6L, 0x32386FD61734BBA4L, - 0xE82D6DD538AB7245L, 0x5C2147EA6177B4B1L, 0x5DA1AB70CF091CE8L, 0xAC907FCE72B8BDFFL, - 0x57C85DFD972278A8L, 0xA4E44C6A6B6F940DL, 0x3851995B4F1FDFE4L, 0x62578CCAED71BC9EL, - 0xD9882BB0C01D2C0AL, 0x917B9D5D113C503BL, 0xA2C31E11A87643C6L, 0xE463C923A399C1CEL, - 0xF71686C57EA876DCL, 0x87B4A973E096D509L, 0xAF0D567D9D3A5814L, 0xB40C2A3F59DCC6F4L, - 0x3602F88495D121DDL, 0xD3E1DD3D9836484AL, 0xF945E71AA46688E5L, 0x7518547EB2A591F5L, - 0x9366587450C01D89L, 0x9EA81018658C065BL, 0x4F54080CBC4603A3L, 0x2D0384C65137BF3DL, - 0xDC325078EC861E2AL, 0xEA30A8FC79573FF7L, 0x214D2030CA050CB6L, 0x65F0322B8016C30CL, - 0x69BE96DD1B247087L, 0xDB95EE9981E161B8L, 0xD1FC1814D9CA05F8L, 0x820ED2BBCC0DE729L, - 0x63D76050430F14C7L, 0x3BCCB0E8A09D3A0FL, 0x8E40764D573F54A2L, 0x39D175C1E16177BDL, - 0x12F5A37C734F1F4BL, 0xAB37C12F1FDFC26DL, 0x5648B167395CD0F1L, 0x6C04ED1537BF42A7L, - 0xED97161D14304065L, 0x7D6C67DAAB72B807L, 0xEC17FA87BA4EE83CL, 0xDFAF79CB0304FBC1L, - 0x733F060571BC463EL, 0x78D61C1287E98A27L, 0xD07CF48E77B4ADA1L, 0xB9C262536C90DD26L, - 0xE2449B5860801605L, 0x8FC09AD7F941FCFBL, 0xFAD8CEA94BE46D0EL, 0xA343F28B0608EB9FL, - 0x9B126BD04917347BL, 0x9A92874AE7699C22L, 0x1B017C42C4E69EE0L, 0x3A4C5C720EE39256L, - 0x4B6E9F5E3EA399DAL, 0x6BA353F45AD83D35L, 0xE7FEE0904C1B2425L, 0x22D009832587E95DL, - 0x842980C00F1430E2L, 0xC6B3C0A0861E2893L, 0x087433A419D729F2L, 0x341F3DADD42D6C6FL, - 0xEE0A3FAEFBB2A58EL, 0x4AEE73C490DD3183L, 0xAAB72DB5B1A16A34L, 0xA92A04065E238FDFL, - 0x7B4B35A1686B6FCCL, 0x6A23BF6EF4A6956CL, 0x191CB96B851AD352L, 0x55D598D4D6DE351AL, - 0xC9604DE5F2AE7EF3L, 0x1CA6C2A3A981E172L, 0xDE2F9551AD7A5398L, 0x3025AAFF56C8F616L, - 0x15521D9D1E2860D9L, 0x506FE31CFA45073AL, 0x189C55F12B647B0BL, 0x0180EC9AAE7EA859L, - 0x7CEC8B40050C105EL, 0x2350E5198BF94104L, 0xEF8AD33455CC0DD7L, 0x07A7BEE16D677F92L, - 0xE5E325B90DE76997L, 0x5A061591A26E637AL, 0xB611EF1618208B46L, 0x09F4DF3EB7A981ABL, - 0x1EBB078AE87DACC0L, 0xB791038CB65E231FL, 0x0FD38D4574B05660L, 0x67EDF702C1EA8EBEL, - 0xBA5F4BE0831238CDL, 0xE3C477C2CEFEBE5CL, 0x0DCE486C354C1BD2L, 0x8C5DB36416C31910L, - 0x26EA9ED1A7627324L, 0x039D29B3EF82E5EBL, 0x9F28FC82CBF2AE02L, 0xA8AAE89CF05D2786L, - 0x431AACFA2774B028L, 0xCF471F9E31B7A938L, 0x581BD0B8E3922EC8L, 0xBC78199B400BEF06L, - 0x90FB71C7BF42F862L, 0x1F3BEB1046030499L, 0x683E7A47B55AD8DEL, 0x988F4263A695D190L, - 0xD808C72A6E638453L, 0x0627527BC319D7CBL, 0xEBB04466D72997AEL, 0xE67E0C0AE2658C7CL, - 0x14D2F107B056C880L, 0x7122C32C30400B8CL, 0x8A7AE11FD5DACEDBL, 0xA0DEDB38E98A0E74L, - 0xAD109354DCC615A6L, 0x0BE91A17F655CC19L, 0x8DDD5FFEB8BDB149L, 0xBFE53028AF890AEDL, - 0xD65BA6F5B4AD7A6AL, 0x7956F0882997227EL, 0x10E8665532B352F9L, 0x0E5361DFDACEFE39L, - 0xCEC7F3049FC90161L, 0xFF62B561677F5F2EL, 0x975CCF26D22587F0L, 0x51EF0F86543BAF63L, - 0x2F1E41EF10CBF28FL, 0x52722635BBB94A88L, 0xAE8DBAE73344F04DL, 0x410769D36688FD9AL, - 0xB3AB94DE34BBB966L, 0x801317928DF1AA9BL, 0xA564A0F0C5113C54L, 0xF131D4BEBDB1A117L, - 0x7F71A2F3EA8EF5B5L, 0x40878549C8F655C3L, 0x7EF14E6944F05DECL, 0xD44663DCF55137D8L, - 0xF2ACFD0D523344FCL, 0x0000000000000000L, 0x5FBC6E598EF5515AL, 0x16CF342EF1AA8532L, - 0xB036BD6DDB395C8DL, 0x13754FE6DD31B712L, 0xBBDFA77A2D6C9094L, 0x89E7C8AC3A582B30L, - 0x3C6B0E09CDFA459DL, 0xC4AE0589C7E26521L, 0x49735A777F5FD468L, 0xCAFD64561D2C9B18L, - 0xDA1502032F9FC9E1L, 0x8867243694268369L, 0x3782141E3BAF8984L, 0x9CB5D53124704BE9L, - 0xD7DB4A6F1AD3D233L, 0xA6F989432A93D9BFL, 0x9D3539AB8A0EE3B0L, 0x53F2CAAF15C7E2D1L, - 0x6E19283C76430F15L, 0x3DEBE2936384EDC4L, 0x5E3C82C3208BF903L, 0x33B8834CB94A13FDL, - 0x6470DEB12E686B55L, 0x359FD1377A53C436L, 0x61CAA57902F35975L, 0x043A975282E59A79L, - 0xFD7F70482683129CL, 0xC52EE913699CCD78L, 0x28B9FF0E7DAC8D1DL, 0x5455744E78A09D43L, - 0xCB7D88CCB3523341L, 0x44BD121B4A13CFBAL, 0x4D49CD25FDBA4E11L, 0x3E76CB208C06082FL, - 0x3FF627BA2278A076L, 0xC28957F204FBB2EAL, 0x453DFE81E46D67E3L, 0x94C1E6953DA7621BL, - 0x2C83685CFF491764L, 0xF32C1197FC4DECA5L, 0x2B24D6BD922E68F6L, 0xB22B78449AC5113FL, - 0x48F3B6EDD1217C31L, 0x2E9EAD75BEB55AD6L, 0x174FD8B45FD42D6BL, 0x4ED4E4961238ABFAL, - 0x92E6B4EEFEBEB5D0L, 0x46A0D7320BEF8208L, 0x47203BA8A5912A51L, 0x24F75BF8E69E3E96L, - 0xF0B1382413CF094EL, 0xFEE259FBC901F777L, 0x276A724B091CDB7DL, 0xBDF8F501EE75475FL, - 0x599B3C224DEC8691L, 0x6D84018F99C1EAFEL, 0x7498B8E41CDB39ACL, 0xE0595E71217C5BB7L, - 0x2AA43A273C50C0AFL, 0xF50B43EC3F543B6EL, 0x838E3E2162734F70L, 0xC09492DB4507FF58L, - 0x72BFEA9FDFC2EE67L, 0x11688ACF9CCDFAA0L, 0x1A8190D86A9836B9L, 0x7ACBD93BC615C795L, - 0xC7332C3A286080CAL, 0x863445E94EE87D50L, 0xF6966A5FD0D6DE85L, 0xE9AD814F96D5DA1CL, - 0x70A22FB69E3EA3D5L, 0x0A69F68D582B6440L, 0xB8428EC9C2EE757FL, 0x604A49E3AC8DF12CL, - 0x5B86F90B0C10CB23L, 0xE1D9B2EB8F02F3EEL, 0x29391394D3D22544L, 0xC8E0A17F5CD0D6AAL, - 0xB58CC6A5F7A26EADL, 0x8193FB08238F02C2L, 0xD5C68F465B2F9F81L, 0xFCFF9CD288FDBAC5L, - 0x77059157F359DC47L, 0x1D262E3907FF492BL, 0xFB582233E59AC557L, 0xDDB2BCE242F8B673L, - 0x2577B76248E096CFL, 0x6F99C4A6D83DA74CL, 0xC1147E41EB795701L, 0xF48BAF76912A9337L - }, - new ulong[] { - 0x3EF29D249B2C0A19L, 0xE9E16322B6F8622FL, 0x5536994047757F7AL, 0x9F4D56D5A47B0B33L, - 0x822567466AA1174CL, 0xB8F5057DEB082FB2L, 0xCC48C10BF4475F53L, 0x373088D4275DEC3AL, - 0x968F4325180AED10L, 0x173D232CF7016151L, 0xAE4ED09F946FCC13L, 0xFD4B4741C4539873L, - 0x1B5B3F0DD9933765L, 0x2FFCB0967B644052L, 0xE02376D20A89840CL, 0xA3AE3A70329B18D7L, - 0x419CBD2335DE8526L, 0xFAFEBF115B7C3199L, 0x0397074F85AA9B0DL, 0xC58AD4FB4836B970L, - 0xBEC60BE3FC4104A8L, 0x1EFF36DC4B708772L, 0x131FDC33ED8453B6L, 0x0844E33E341764D3L, - 0x0FF11B6EAB38CD39L, 0x64351F0A7761B85AL, 0x3B5694F509CFBA0EL, 0x30857084B87245D0L, - 0x47AFB3BD2297AE3CL, 0xF2BA5C2F6F6B554AL, 0x74BDC4761F4F70E1L, 0xCFDFC64471EDC45EL, - 0xE610784C1DC0AF16L, 0x7ACA29D63C113F28L, 0x2DED411776A859AFL, 0xAC5F211E99A3D5EEL, - 0xD484F949A87EF33BL, 0x3CE36CA596E013E4L, 0xD120F0983A9D432CL, 0x6BC40464DC597563L, - 0x69D5F5E5D1956C9EL, 0x9AE95F043698BB24L, 0xC9ECC8DA66A4EF44L, 0xD69508C8A5B2EAC6L, - 0xC40C2235C0503B80L, 0x38C193BA8C652103L, 0x1CEEC75D46BC9E8FL, 0xD331011937515AD1L, - 0xD8E2E56886ECA50FL, 0xB137108D5779C991L, 0x709F3B6905CA4206L, 0x4FEB50831680CAEFL, - 0xEC456AF3241BD238L, 0x58D673AFE181ABBEL, 0x242F54E7CAD9BF8CL, 0x0211F1810DCC19FDL, - 0x90BC4DBB0F43C60AL, 0x9518446A9DA0761DL, 0xA1BFCBF13F57012AL, 0x2BDE4F8961E172B5L, - 0x27B853A84F732481L, 0xB0B1E643DF1F4B61L, 0x18CC38425C39AC68L, 0xD2B7F7D7BF37D821L, - 0x3103864A3014C720L, 0x14AA246372ABFA5CL, 0x6E600DB54EBAC574L, 0x394765740403A3F3L, - 0x09C215F0BC71E623L, 0x2A58B947E987F045L, 0x7B4CDF18B477BDD8L, 0x9709B5EB906C6FE0L, - 0x73083C268060D90BL, 0xFEDC400E41F9037EL, 0x284948C6E44BE9B8L, 0x728ECAE808065BFBL, - 0x06330E9E17492B1AL, 0x5950856169E7294EL, 0xBAE4F4FCE6C4364FL, 0xCA7BCF95E30E7449L, - 0x7D7FD186A33E96C2L, 0x52836110D85AD690L, 0x4DFAA1021B4CD312L, 0x913ABB75872544FAL, - 0xDD46ECB9140F1518L, 0x3D659A6B1E869114L, 0xC23F2CABD719109AL, 0xD713FE062DD46836L, - 0xD0A60656B2FBC1DCL, 0x221C5A79DD909496L, 0xEFD26DBCA1B14935L, 0x0E77EDA0235E4FC9L, - 0xCBFD395B6B68F6B9L, 0x0DE0EAEFA6F4D4C4L, 0x0422FF1F1A8532E7L, 0xF969B85EDED6AA94L, - 0x7F6E2007AEF28F3FL, 0x3AD0623B81A938FEL, 0x6624EE8B7AADA1A7L, 0xB682E8DDC856607BL, - 0xA78CC56F281E2A30L, 0xC79B257A45FAA08DL, 0x5B4174E0642B30B3L, 0x5F638BFF7EAE0254L, - 0x4BC9AF9C0C05F808L, 0xCE59308AF98B46AEL, 0x8FC58DA9CC55C388L, 0x803496C7676D0EB1L, - 0xF33CAAE1E70DD7BAL, 0xBB6202326EA2B4BFL, 0xD5020F87201871CBL, 0x9D5CA754A9B712CEL, - 0x841669D87DE83C56L, 0x8A6184785EB6739FL, 0x420BBA6CB0741E2BL, 0xF12D5B60EAC1CE47L, - 0x76AC35F71283691CL, 0x2C6BB7D9FECEDB5FL, 0xFCCDB18F4C351A83L, 0x1F79C012C3160582L, - 0xF0ABADAE62A74CB7L, 0xE1A5801C82EF06FCL, 0x67A21845F2CB2357L, 0x5114665F5DF04D9DL, - 0xBF40FD2D74278658L, 0xA0393D3FB73183DAL, 0x05A409D192E3B017L, 0xA9FB28CF0B4065F9L, - 0x25A9A22942BF3D7CL, 0xDB75E22703463E02L, 0xB326E10C5AB5D06CL, 0xE7968E8295A62DE6L, - 0xB973F3B3636EAD42L, 0xDF571D3819C30CE5L, 0xEE549B7229D7CBC5L, 0x12992AFD65E2D146L, - 0xF8EF4E9056B02864L, 0xB7041E134030E28BL, 0xC02EDD2ADAD50967L, 0x932B4AF48AE95D07L, - 0x6FE6FB7BC6DC4784L, 0x239AACB755F61666L, 0x401A4BEDBDB807D6L, 0x485EA8D389AF6305L, - 0xA41BC220ADB4B13DL, 0x753B32B89729F211L, 0x997E584BB3322029L, 0x1D683193CEDA1C7FL, - 0xFF5AB6C0C99F818EL, 0x16BBD5E27F67E3A1L, 0xA59D34EE25D233CDL, 0x98F8AE853B54A2D9L, - 0x6DF70AFACB105E79L, 0x795D2E99B9BBA425L, 0x8E437B6744334178L, 0x0186F6CE886682F0L, - 0xEBF092A3BB347BD2L, 0xBCD7FA62F18D1D55L, 0xADD9D7D011C5571EL, 0x0BD3E471B1BDFFDEL, - 0xAA6C2F808EEAFEF4L, 0x5EE57D31F6C880A4L, 0xF50FA47FF044FCA0L, 0x1ADDC9C351F5B595L, - 0xEA76646D3352F922L, 0x0000000000000000L, 0x85909F16F58EBEA6L, 0x46294573AAF12CCCL, - 0x0A5512BF39DB7D2EL, 0x78DBD85731DD26D5L, 0x29CFBE086C2D6B48L, 0x218B5D36583A0F9BL, - 0x152CD2ADFACD78ACL, 0x83A39188E2C795BCL, 0xC3B9DA655F7F926AL, 0x9ECBA01B2C1D89C3L, - 0x07B5F8509F2FA9EAL, 0x7EE8D6C926940DCFL, 0x36B67E1AAF3B6ECAL, 0x86079859702425ABL, - 0xFB7849DFD31AB369L, 0x4C7C57CC932A51E2L, 0xD96413A60E8A27FFL, 0x263EA566C715A671L, - 0x6C71FC344376DC89L, 0x4A4F595284637AF8L, 0xDAF314E98B20BCF2L, 0x572768C14AB96687L, - 0x1088DB7C682EC8BBL, 0x887075F9537A6A62L, 0x2E7A4658F302C2A2L, 0x619116DBE582084DL, - 0xA87DDE018326E709L, 0xDCC01A779C6997E8L, 0xEDC39C3DAC7D50C8L, 0xA60A33A1A078A8C0L, - 0xC1A82BE452B38B97L, 0x3F746BEA134A88E9L, 0xA228CCBEBAFD9A27L, 0xABEAD94E068C7C04L, - 0xF48952B178227E50L, 0x5CF48CB0FB049959L, 0x6017E0156DE48ABDL, 0x4438B4F2A73D3531L, - 0x8C528AE649FF5885L, 0xB515EF924DFCFB76L, 0x0C661C212E925634L, 0xB493195CC59A7986L, - 0x9CDA519A21D1903EL, 0x32948105B5BE5C2DL, 0x194ACE8CD45F2E98L, 0x438D4CA238129CDBL, - 0x9B6FA9CABEFE39D4L, 0x81B26009EF0B8C41L, 0xDED1EBF691A58E15L, 0x4E6DA64D9EE6481FL, - 0x54B06F8ECF13FD8AL, 0x49D85E1D01C9E1F5L, 0xAFC826511C094EE3L, 0xF698A33075EE67ADL, - 0x5AC7822EEC4DB243L, 0x8DD47C28C199DA75L, 0x89F68337DB1CE892L, 0xCDCE37C57C21DDA3L, - 0x530597DE503C5460L, 0x6A42F2AA543FF793L, 0x5D727A7E73621BA9L, 0xE232875307459DF1L, - 0x56A19E0FC2DFE477L, 0xC61DD3B4CD9C227DL, 0xE5877F03986A341BL, 0x949EB2A415C6F4EDL, - 0x6206119460289340L, 0x6380E75AE84E11B0L, 0x8BE772B6D6D0F16FL, 0x50929091D596CF6DL, - 0xE86795EC3E9EE0DFL, 0x7CF927482B581432L, 0xC86A3E14EEC26DB4L, 0x7119CDA78DACC0F6L, - 0xE40189CD100CB6EBL, 0x92ADBC3A028FDFF7L, 0xB2A017C2D2D3529CL, 0x200DABF8D05C8D6BL, - 0x34A78F9BA2F77737L, 0xE3B4719D8F231F01L, 0x45BE423C2F5BB7C1L, 0xF71E55FEFD88E55DL, - 0x6853032B59F3EE6EL, 0x65B3E9C4FF073AAAL, 0x772AC3399AE5EBECL, 0x87816E97F842A75BL, - 0x110E2DB2E0484A4BL, 0x331277CB3DD8DEDDL, 0xBD510CAC79EB9FA5L, 0x352179552A91F5C7L - }, - new ulong[] { - 0x8AB0A96846E06A6DL, 0x43C7E80B4BF0B33AL, 0x08C9B3546B161EE5L, 0x39F1C235EBA990BEL, - 0xC1BEF2376606C7B2L, 0x2C209233614569AAL, 0xEB01523B6FC3289AL, 0x946953AB935ACEDDL, - 0x272838F63E13340EL, 0x8B0455ECA12BA052L, 0x77A1B2C4978FF8A2L, 0xA55122CA13E54086L, - 0x2276135862D3F1CDL, 0xDB8DDFDE08B76CFEL, 0x5D1E12C89E4A178AL, 0x0E56816B03969867L, - 0xEE5F79953303ED59L, 0xAFED748BAB78D71DL, 0x6D929F2DF93E53EEL, 0xF5D8A8F8BA798C2AL, - 0xF619B1698E39CF6BL, 0x95DDAF2F749104E2L, 0xEC2A9C80E0886427L, 0xCE5C8FD8825B95EAL, - 0xC4E0D9993AC60271L, 0x4699C3A5173076F9L, 0x3D1B151F50A29F42L, 0x9ED505EA2BC75946L, - 0x34665ACFDC7F4B98L, 0x61B1FB53292342F7L, 0xC721C0080E864130L, 0x8693CD1696FD7B74L, - 0x872731927136B14BL, 0xD3446C8A63A1721BL, 0x669A35E8A6680E4AL, 0xCAB658F239509A16L, - 0xA4E5DE4EF42E8AB9L, 0x37A7435EE83F08D9L, 0x134E6239E26C7F96L, 0x82791A3C2DF67488L, - 0x3F6EF00A8329163CL, 0x8E5A7E42FDEB6591L, 0x5CAAEE4C7981DDB5L, 0x19F234785AF1E80DL, - 0x255DDDE3ED98BD70L, 0x50898A32A99CCCACL, 0x28CA4519DA4E6656L, 0xAE59880F4CB31D22L, - 0x0D9798FA37D6DB26L, 0x32F968F0B4FFCD1AL, 0xA00F09644F258545L, 0xFA3AD5175E24DE72L, - 0xF46C547C5DB24615L, 0x713E80FBFF0F7E20L, 0x7843CF2B73D2AAFAL, 0xBD17EA36AEDF62B4L, - 0xFD111BACD16F92CFL, 0x4ABAA7DBC72D67E0L, 0xB3416B5DAD49FAD3L, 0xBCA316B24914A88BL, - 0x15D150068AECF914L, 0xE27C1DEBE31EFC40L, 0x4FE48C759BEDA223L, 0x7EDCFD141B522C78L, - 0x4E5070F17C26681CL, 0xE696CAC15815F3BCL, 0x35D2A64B3BB481A7L, 0x800CFF29FE7DFDF6L, - 0x1ED9FAC3D5BAA4B0L, 0x6C2663A91EF599D1L, 0x03C1199134404341L, 0xF7AD4DED69F20554L, - 0xCD9D9649B61BD6ABL, 0xC8C3BDE7EADB1368L, 0xD131899FB02AFB65L, 0x1D18E352E1FAE7F1L, - 0xDA39235AEF7CA6C1L, 0xA1BBF5E0A8EE4F7AL, 0x91377805CF9A0B1EL, 0x3138716180BF8E5BL, - 0xD9F83ACBDB3CE580L, 0x0275E515D38B897EL, 0x472D3F21F0FBBCC6L, 0x2D946EB7868EA395L, - 0xBA3C248D21942E09L, 0xE7223645BFDE3983L, 0xFF64FEB902E41BB1L, 0xC97741630D10D957L, - 0xC3CB1722B58D4ECCL, 0xA27AEC719CAE0C3BL, 0x99FECB51A48C15FBL, 0x1465AC826D27332BL, - 0xE1BD047AD75EBF01L, 0x79F733AF941960C5L, 0x672EC96C41A3C475L, 0xC27FEBA6524684F3L, - 0x64EFD0FD75E38734L, 0xED9E60040743AE18L, 0xFB8E2993B9EF144DL, 0x38453EB10C625A81L, - 0x6978480742355C12L, 0x48CF42CE14A6EE9EL, 0x1CAC1FD606312DCEL, 0x7B82D6BA4792E9BBL, - 0x9D141C7B1F871A07L, 0x5616B80DC11C4A2EL, 0xB849C198F21FA777L, 0x7CA91801C8D9A506L, - 0xB1348E487EC273ADL, 0x41B20D1E987B3A44L, 0x7460AB55A3CFBBE3L, 0x84E628034576F20AL, - 0x1B87D16D897A6173L, 0x0FE27DEFE45D5258L, 0x83CDE6B8CA3DBEB7L, 0x0C23647ED01D1119L, - 0x7A362A3EA0592384L, 0xB61F40F3F1893F10L, 0x75D457D1440471DCL, 0x4558DA34237035B8L, - 0xDCA6116587FC2043L, 0x8D9B67D3C9AB26D0L, 0x2B0B5C88EE0E2517L, 0x6FE77A382AB5DA90L, - 0x269CC472D9D8FE31L, 0x63C41E46FAA8CB89L, 0xB7ABBC771642F52FL, 0x7D1DE4852F126F39L, - 0xA8C6BA3024339BA0L, 0x600507D7CEE888C8L, 0x8FEE82C61A20AFAEL, 0x57A2448926D78011L, - 0xFCA5E72836A458F0L, 0x072BCEBB8F4B4CBDL, 0x497BBE4AF36D24A1L, 0x3CAFE99BB769557DL, - 0x12FA9EBD05A7B5A9L, 0xE8C04BAA5B836BDBL, 0x4273148FAC3B7905L, 0x908384812851C121L, - 0xE557D3506C55B0FDL, 0x72FF996ACB4F3D61L, 0x3EDA0C8E64E2DC03L, 0xF0868356E6B949E9L, - 0x04EAD72ABB0B0FFCL, 0x17A4B5135967706AL, 0xE3C8E16F04D5367FL, 0xF84F30028DAF570CL, - 0x1846C8FCBD3A2232L, 0x5B8120F7F6CA9108L, 0xD46FA231ECEA3EA6L, 0x334D947453340725L, - 0x58403966C28AD249L, 0xBED6F3A79A9F21F5L, 0x68CCB483A5FE962DL, 0xD085751B57E1315AL, - 0xFED0023DE52FD18EL, 0x4B0E5B5F20E6ADDFL, 0x1A332DE96EB1AB4CL, 0xA3CE10F57B65C604L, - 0x108F7BA8D62C3CD7L, 0xAB07A3A11073D8E1L, 0x6B0DAD1291BED56CL, 0xF2F366433532C097L, - 0x2E557726B2CEE0D4L, 0x0000000000000000L, 0xCB02A476DE9B5029L, 0xE4E32FD48B9E7AC2L, - 0x734B65EE2C84F75EL, 0x6E5386BCCD7E10AFL, 0x01B4FC84E7CBCA3FL, 0xCFE8735C65905FD5L, - 0x3613BFDA0FF4C2E6L, 0x113B872C31E7F6E8L, 0x2FE18BA255052AEBL, 0xE974B72EBC48A1E4L, - 0x0ABC5641B89D979BL, 0xB46AA5E62202B66EL, 0x44EC26B0C4BBFF87L, 0xA6903B5B27A503C7L, - 0x7F680190FC99E647L, 0x97A84A3AA71A8D9CL, 0xDD12EDE16037EA7CL, 0xC554251DDD0DC84EL, - 0x88C54C7D956BE313L, 0x4D91696048662B5DL, 0xB08072CC9909B992L, 0xB5DE5962C5C97C51L, - 0x81B803AD19B637C9L, 0xB2F597D94A8230ECL, 0x0B08AAC55F565DA4L, 0xF1327FD2017283D6L, - 0xAD98919E78F35E63L, 0x6AB9519676751F53L, 0x24E921670A53774FL, 0xB9FD3D1C15D46D48L, - 0x92F66194FBDA485FL, 0x5A35DC7311015B37L, 0xDED3F4705477A93DL, 0xC00A0EB381CD0D8DL, - 0xBB88D809C65FE436L, 0x16104997BEACBA55L, 0x21B70AC95693B28CL, 0x59F4C5E225411876L, - 0xD5DB5EB50B21F499L, 0x55D7A19CF55C096FL, 0xA97246B4C3F8519FL, 0x8552D487A2BD3835L, - 0x54635D181297C350L, 0x23C2EFDC85183BF2L, 0x9F61F96ECC0C9379L, 0x534893A39DDC8FEDL, - 0x5EDF0B59AA0A54CBL, 0xAC2C6D1A9F38945CL, 0xD7AEBBA0D8AA7DE7L, 0x2ABFA00C09C5EF28L, - 0xD84CC64F3CF72FBFL, 0x2003F64DB15878B3L, 0xA724C7DFC06EC9F8L, 0x069F323F68808682L, - 0xCC296ACD51D01C94L, 0x055E2BAE5CC0C5C3L, 0x6270E2C21D6301B6L, 0x3B842720382219C0L, - 0xD2F0900E846AB824L, 0x52FC6F277A1745D2L, 0xC6953C8CE94D8B0FL, 0xE009F8FE3095753EL, - 0x655B2C7992284D0BL, 0x984A37D54347DFC4L, 0xEAB5AEBF8808E2A5L, 0x9A3FD2C090CC56BAL, - 0x9CA0E0FFF84CD038L, 0x4C2595E4AFADE162L, 0xDF6708F4B3BC6302L, 0xBF620F237D54EBCAL, - 0x93429D101C118260L, 0x097D4FD08CDDD4DAL, 0x8C2F9B572E60ECEFL, 0x708A7C7F18C4B41FL, - 0x3A30DBA4DFE9D3FFL, 0x4006F19A7FB0F07BL, 0x5F6BF7DD4DC19EF4L, 0x1F6D064732716E8FL, - 0xF9FBCC866A649D33L, 0x308C8DE567744464L, 0x8971B0F972A0292CL, 0xD61A47243F61B7D8L, - 0xEFEB8511D4C82766L, 0x961CB6BE40D147A3L, 0xAAB35F25F7B812DEL, 0x76154E407044329DL, - 0x513D76B64E570693L, 0xF3479AC7D2F90AA8L, 0x9B8B2E4477079C85L, 0x297EB99D3D85AC69L - }, - new ulong[] { - 0x7E37E62DFC7D40C3L, 0x776F25A4EE939E5BL, 0xE045C850DD8FB5ADL, 0x86ED5BA711FF1952L, - 0xE91D0BD9CF616B35L, 0x37E0AB256E408FFBL, 0x9607F6C031025A7AL, 0x0B02F5E116D23C9DL, - 0xF3D8486BFB50650CL, 0x621CFF27C40875F5L, 0x7D40CB71FA5FD34AL, 0x6DAA6616DAA29062L, - 0x9F5F354923EC84E2L, 0xEC847C3DC507C3B3L, 0x025A3668043CE205L, 0xA8BF9E6C4DAC0B19L, - 0xFA808BE2E9BEBB94L, 0xB5B99C5277C74FA3L, 0x78D9BC95F0397BCCL, 0xE332E50CDBAD2624L, - 0xC74FCE129332797EL, 0x1729ECEB2EA709ABL, 0xC2D6B9F69954D1F8L, 0x5D898CBFBAB8551AL, - 0x859A76FB17DD8ADBL, 0x1BE85886362F7FB5L, 0xF6413F8FF136CD8AL, 0xD3110FA5BBB7E35CL, - 0x0A2FEED514CC4D11L, 0xE83010EDCD7F1AB9L, 0xA1E75DE55F42D581L, 0xEEDE4A55C13B21B6L, - 0xF2F5535FF94E1480L, 0x0CC1B46D1888761EL, 0xBCE15FDB6529913BL, 0x2D25E8975A7181C2L, - 0x71817F1CE2D7A554L, 0x2E52C5CB5C53124BL, 0xF9F7A6BEEF9C281DL, 0x9E722E7D21F2F56EL, - 0xCE170D9B81DCA7E6L, 0x0E9B82051CB4941BL, 0x1E712F623C49D733L, 0x21E45CFA42F9F7DCL, - 0xCB8E7A7F8BBA0F60L, 0x8E98831A010FB646L, 0x474CCF0D8E895B23L, 0xA99285584FB27A95L, - 0x8CC2B57205335443L, 0x42D5B8E984EFF3A5L, 0x012D1B34021E718CL, 0x57A6626AAE74180BL, - 0xFF19FC06E3D81312L, 0x35BA9D4D6A7C6DFEL, 0xC9D44C178F86ED65L, 0x506523E6A02E5288L, - 0x03772D5C06229389L, 0x8B01F4FE0B691EC0L, 0xF8DABD8AED825991L, 0x4C4E3AEC985B67BEL, - 0xB10DF0827FBF96A9L, 0x6A69279AD4F8DAE1L, 0xE78689DCD3D5FF2EL, 0x812E1A2B1FA553D1L, - 0xFBAD90D6EBA0CA18L, 0x1AC543B234310E39L, 0x1604F7DF2CB97827L, 0xA6241C6951189F02L, - 0x753513CCEAAF7C5EL, 0x64F2A59FC84C4EFAL, 0x247D2B1E489F5F5AL, 0xDB64D718AB474C48L, - 0x79F4A7A1F2270A40L, 0x1573DA832A9BEBAEL, 0x3497867968621C72L, 0x514838D2A2302304L, - 0xF0AF6537FD72F685L, 0x1D06023E3A6B44BAL, 0x678588C3CE6EDD73L, 0x66A893F7CC70ACFFL, - 0xD4D24E29B5EDA9DFL, 0x3856321470EA6A6CL, 0x07C3418C0E5A4A83L, 0x2BCBB22F5635BACDL, - 0x04B46CD00878D90AL, 0x06EE5AB80C443B0FL, 0x3B211F4876C8F9E5L, 0x0958C38912EEDE98L, - 0xD14B39CDBF8B0159L, 0x397B292072F41BE0L, 0x87C0409313E168DEL, 0xAD26E98847CAA39FL, - 0x4E140C849C6785BBL, 0xD5FF551DB7F3D853L, 0xA0CA46D15D5CA40DL, 0xCD6020C787FE346FL, - 0x84B76DCF15C3FB57L, 0xDEFDA0FCA121E4CEL, 0x4B8D7B6096012D3DL, 0x9AC642AD298A2C64L, - 0x0875D8BD10F0AF14L, 0xB357C6EA7B8374ACL, 0x4D6321D89A451632L, 0xEDA96709C719B23FL, - 0xF76C24BBF328BC06L, 0xC662D526912C08F2L, 0x3CE25EC47892B366L, 0xB978283F6F4F39BDL, - 0xC08C8F9E9D6833FDL, 0x4F3917B09E79F437L, 0x593DE06FB2C08C10L, 0xD6887841B1D14BDAL, - 0x19B26EEE32139DB0L, 0xB494876675D93E2FL, 0x825937771987C058L, 0x90E9AC783D466175L, - 0xF1827E03FF6C8709L, 0x945DC0A8353EB87FL, 0x4516F9658AB5B926L, 0x3F9573987EB020EFL, - 0xB855330B6D514831L, 0x2AE6A91B542BCB41L, 0x6331E413C6160479L, 0x408F8E8180D311A0L, - 0xEFF35161C325503AL, 0xD06622F9BD9570D5L, 0x8876D9A20D4B8D49L, 0xA5533135573A0C8BL, - 0xE168D364DF91C421L, 0xF41B09E7F50A2F8FL, 0x12B09B0F24C1A12DL, 0xDA49CC2CA9593DC4L, - 0x1F5C34563E57A6BFL, 0x54D14F36A8568B82L, 0xAF7CDFE043F6419AL, 0xEA6A2685C943F8BCL, - 0xE5DCBFB4D7E91D2BL, 0xB27ADDDE799D0520L, 0x6B443CAED6E6AB6DL, 0x7BAE91C9F61BE845L, - 0x3EB868AC7CAE5163L, 0x11C7B65322E332A4L, 0xD23C1491B9A992D0L, 0x8FB5982E0311C7CAL, - 0x70AC6428E0C9D4D8L, 0x895BC2960F55FCC5L, 0x76423E90EC8DEFD7L, 0x6FF0507EDE9E7267L, - 0x3DCF45F07A8CC2EAL, 0x4AA06054941F5CB1L, 0x5810FB5BB0DEFD9CL, 0x5EFEA1E3BC9AC693L, - 0x6EDD4B4ADC8003EBL, 0x741808F8E8B10DD2L, 0x145EC1B728859A22L, 0x28BC9F7350172944L, - 0x270A06424EBDCCD3L, 0x972AEDF4331C2BF6L, 0x059977E40A66A886L, 0x2550302A4A812ED6L, - 0xDD8A8DA0A7037747L, 0xC515F87A970E9B7BL, 0x3023EAA9601AC578L, 0xB7E3AA3A73FBADA6L, - 0x0FB699311EAAE597L, 0x0000000000000000L, 0x310EF19D6204B4F4L, 0x229371A644DB6455L, - 0x0DECAF591A960792L, 0x5CA4978BB8A62496L, 0x1C2B190A38753536L, 0x41A295B582CD602CL, - 0x3279DCC16426277DL, 0xC1A194AA9F764271L, 0x139D803B26DFD0A1L, 0xAE51C4D441E83016L, - 0xD813FA44AD65DFC1L, 0xAC0BF2BC45D4D213L, 0x23BE6A9246C515D9L, 0x49D74D08923DCF38L, - 0x9D05032127D066E7L, 0x2F7FDEFF5E4D63C7L, 0xA47E2A0155247D07L, 0x99B16FF12FA8BFEDL, - 0x4661D4398C972AAFL, 0xDFD0BBC8A33F9542L, 0xDCA79694A51D06CBL, 0xB020EBB67DA1E725L, - 0xBA0F0563696DAA34L, 0xE4F1A480D5F76CA7L, 0xC438E34E9510EAF7L, 0x939E81243B64F2FCL, - 0x8DEFAE46072D25CFL, 0x2C08F3A3586FF04EL, 0xD7A56375B3CF3A56L, 0x20C947CE40E78650L, - 0x43F8A3DD86F18229L, 0x568B795EAC6A6987L, 0x8003011F1DBB225DL, 0xF53612D3F7145E03L, - 0x189F75DA300DEC3CL, 0x9570DB9C3720C9F3L, 0xBB221E576B73DBB8L, 0x72F65240E4F536DDL, - 0x443BE25188ABC8AAL, 0xE21FFE38D9B357A8L, 0xFD43CA6EE7E4F117L, 0xCAA3614B89A47EECL, - 0xFE34E732E1C6629EL, 0x83742C431B99B1D4L, 0xCF3A16AF83C2D66AL, 0xAAE5A8044990E91CL, - 0x26271D764CA3BD5FL, 0x91C4B74C3F5810F9L, 0x7C6DD045F841A2C6L, 0x7F1AFD19FE63314FL, - 0xC8F957238D989CE9L, 0xA709075D5306EE8EL, 0x55FC5402AA48FA0EL, 0x48FA563C9023BEB4L, - 0x65DFBEABCA523F76L, 0x6C877D22D8BCE1EEL, 0xCC4D3BF385E045E3L, 0xBEBB69B36115733EL, - 0x10EAAD6720FD4328L, 0xB6CEB10E71E5DC2AL, 0xBDCC44EF6737E0B7L, 0x523F158EA412B08DL, - 0x989C74C52DB6CE61L, 0x9BEB59992B945DE8L, 0x8A2CEFCA09776F4CL, 0xA3BD6B8D5B7E3784L, - 0xEB473DB1CB5D8930L, 0xC3FBA2C29B4AA074L, 0x9C28181525CE176BL, 0x683311F2D0C438E4L, - 0x5FD3BAD7BE84B71FL, 0xFC6ED15AE5FA809BL, 0x36CDB0116C5EFE77L, 0x29918447520958C8L, - 0xA29070B959604608L, 0x53120EBAA60CC101L, 0x3A0C047C74D68869L, 0x691E0AC6D2DA4968L, - 0x73DB4974E6EB4751L, 0x7A838AFDF40599C9L, 0x5A4ACD33B4E21F99L, 0x6046C94FC03497F0L, - 0xE6AB92E8D1CB8EA2L, 0x3354C7F5663856F1L, 0xD93EE170AF7BAE4DL, 0x616BD27BC22AE67CL, - 0x92B39A10397A8370L, 0xABC8B3304B8E9890L, 0xBF967287630B02B2L, 0x5B67D607B6FC6E15L - }, - new ulong[] { - 0xD031C397CE553FE6L, 0x16BA5B01B006B525L, 0xA89BADE6296E70C8L, 0x6A1F525D77D3435BL, - 0x6E103570573DFA0BL, 0x660EFB2A17FC95ABL, 0x76327A9E97634BF6L, 0x4BAD9D6462458BF5L, - 0xF1830CAEDBC3F748L, 0xC5C8F542669131FFL, 0x95044A1CDC48B0CBL, 0x892962DF3CF8B866L, - 0xB0B9E208E930C135L, 0xA14FB3F0611A767CL, 0x8D2605F21C160136L, 0xD6B71922FECC549EL, - 0x37089438A5907D8BL, 0x0B5DA38E5803D49CL, 0x5A5BCC9CEA6F3CBCL, 0xEDAE246D3B73FFE5L, - 0xD2B87E0FDE22EDCEL, 0x5E54ABB1CA8185ECL, 0x1DE7F88FE80561B9L, 0xAD5E1A870135A08CL, - 0x2F2ADBD665CECC76L, 0x5780B5A782F58358L, 0x3EDC8A2EEDE47B3FL, 0xC9D95C3506BEE70FL, - 0x83BE111D6C4E05EEL, 0xA603B90959367410L, 0x103C81B4809FDE5DL, 0x2C69B6027D0C774AL, - 0x399080D7D5C87953L, 0x09D41E16487406B4L, 0xCDD63B1826505E5FL, 0xF99DC2F49B0298E8L, - 0x9CD0540A943CB67FL, 0xBCA84B7F891F17C5L, 0x723D1DB3B78DF2A6L, 0x78AA6E71E73B4F2EL, - 0x1433E699A071670DL, 0x84F21BE454620782L, 0x98DF3327B4D20F2FL, 0xF049DCE2D3769E5CL, - 0xDB6C60199656EB7AL, 0x648746B2078B4783L, 0x32CD23598DCBADCFL, 0x1EA4955BF0C7DA85L, - 0xE9A143401B9D46B5L, 0xFD92A5D9BBEC21B8L, 0xC8138C790E0B8E1BL, 0x2EE00B9A6D7BA562L, - 0xF85712B893B7F1FCL, 0xEB28FED80BEA949DL, 0x564A65EB8A40EA4CL, 0x6C9988E8474A2823L, - 0x4535898B121D8F2DL, 0xABD8C03231ACCBF4L, 0xBA2E91CAB9867CBDL, 0x7960BE3DEF8E263AL, - 0x0C11A977602FD6F0L, 0xCB50E1AD16C93527L, 0xEAE22E94035FFD89L, 0x2866D12F5DE2CE1AL, - 0xFF1B1841AB9BF390L, 0x9F9339DE8CFE0D43L, 0x964727C8C48A0BF7L, 0x524502C6AAAE531CL, - 0x9B9C5EF3AC10B413L, 0x4FA2FA4942AB32A5L, 0x3F165A62E551122BL, 0xC74148DA76E6E3D7L, - 0x924840E5E464B2A7L, 0xD372AE43D69784DAL, 0x233B72A105E11A86L, 0xA48A04914941A638L, - 0xB4B68525C9DE7865L, 0xDDEABAACA6CF8002L, 0x0A9773C250B6BD88L, 0xC284FFBB5EBD3393L, - 0x8BA0DF472C8F6A4EL, 0x2AEF6CB74D951C32L, 0x427983722A318D41L, 0x73F7CDFFBF389BB2L, - 0x074C0AF9382C026CL, 0x8A6A0F0B243A035AL, 0x6FDAE53C5F88931FL, 0xC68B98967E538AC3L, - 0x44FF59C71AA8E639L, 0xE2FCE0CE439E9229L, 0xA20CDE2479D8CD40L, 0x19E89FA2C8EBD8E9L, - 0xF446BBCFF398270CL, 0x43B3533E2284E455L, 0xD82F0DCD8E945046L, 0x51066F12B26CE820L, - 0xE73957AF6BC5426DL, 0x081ECE5A40C16FA0L, 0x3B193D4FC5BFAB7BL, 0x7FE66488DF174D42L, - 0x0E9814EF705804D8L, 0x8137AC857C39D7C6L, 0xB1733244E185A821L, 0x695C3F896F11F867L, - 0xF6CF0657E3EFF524L, 0x1AABF276D02963D5L, 0x2DA3664E75B91E5EL, 0x0289BD981077D228L, - 0x90C1FD7DF413608FL, 0x3C5537B6FD93A917L, 0xAA12107E3919A2E0L, 0x0686DAB530996B78L, - 0xDAA6B0559EE3826EL, 0xC34E2FF756085A87L, 0x6D5358A44FFF4137L, 0xFC587595B35948ACL, - 0x7CA5095CC7D5F67EL, 0xFB147F6C8B754AC0L, 0xBFEB26AB91DDACF9L, 0x6896EFC567A49173L, - 0xCA9A31E11E7C5C33L, 0xBBE44186B13315A9L, 0x0DDB793B689ABFE4L, 0x70B4A02BA7FA208EL, - 0xE47A3A7B7307F951L, 0x8CECD5BE14A36822L, 0xEEED49B923B144D9L, 0x17708B4DB8B3DC31L, - 0x6088219F2765FED3L, 0xB3FA8FDCF1F27A09L, 0x910B2D31FCA6099BL, 0x0F52C4A378ED6DCCL, - 0x50CCBF5EBAD98134L, 0x6BD582117F662A4FL, 0x94CE9A50D4FDD9DFL, 0x2B25BCFB45207526L, - 0x67C42B661F49FCBFL, 0x492420FC723259DDL, 0x03436DD418C2BB3CL, 0x1F6E4517F872B391L, - 0xA08563BC69AF1F68L, 0xD43EA4BAEEBB86B6L, 0x01CAD04C08B56914L, 0xAC94CACB0980C998L, - 0x54C3D8739A373864L, 0x26FEC5C02DBACAC2L, 0xDEA9D778BE0D3B3EL, 0x040F672D20EEB950L, - 0xE5B0EA377BB29045L, 0xF30AB136CBB42560L, 0x62019C0737122CFBL, 0xE86B930C13282FA1L, - 0xCC1CEB542EE5374BL, 0x538FD28AA21B3A08L, 0x1B61223AD89C0AC1L, 0x36C24474AD25149FL, - 0x7A23D3E9F74C9D06L, 0xBE21F6E79968C5EDL, 0xCF5F868036278C77L, 0xF705D61BEB5A9C30L, - 0x4D2B47D152DCE08DL, 0x5F9E7BFDC234ECF8L, 0x247778583DCD18EAL, 0x867BA67C4415D5AAL, - 0x4CE1979D5A698999L, 0x0000000000000000L, 0xEC64F42133C696F1L, 0xB57C5569C16B1171L, - 0xC1C7926F467F88AFL, 0x654D96FE0F3E2E97L, 0x15F936D5A8C40E19L, 0xB8A72C52A9F1AE95L, - 0xA9517DAA21DB19DCL, 0x58D27104FA18EE94L, 0x5918A148F2AD8780L, 0x5CDD1629DAF657C4L, - 0x8274C15164FB6CFAL, 0xD1FB13DBC6E056F2L, 0x7D6FD910CF609F6AL, 0xB63F38BDD9A9AA4DL, - 0x3D9FE7FAF526C003L, 0x74BBC706871499DEL, 0xDF630734B6B8522AL, 0x3AD3ED03CD0AC26FL, - 0xFADEAF2083C023D4L, 0xC00D42234ECAE1BBL, 0x8538CBA85CD76E96L, 0xC402250E6E2458EBL, - 0x47BC3413026A5D05L, 0xAFD7A71F114272A4L, 0x978DF784CC3F62E3L, 0xB96DFC1EA144C781L, - 0x21B2CF391596C8AEL, 0x318E4E8D950916F3L, 0xCE9556CC3E92E563L, 0x385A509BDD7D1047L, - 0x358129A0B5E7AFA3L, 0xE6F387E363702B79L, 0xE0755D5653E94001L, 0x7BE903A5FFF9F412L, - 0x12B53C2C90E80C75L, 0x3307F315857EC4DBL, 0x8FAFB86A0C61D31EL, 0xD9E5DD8186213952L, - 0x77F8AAD29FD622E2L, 0x25BDA814357871FEL, 0x7571174A8FA1F0CAL, 0x137FEC60985D6561L, - 0x30449EC19DBC7FE7L, 0xA540D4DD41F4CF2CL, 0xDC206AE0AE7AE916L, 0x5B911CD0E2DA55A8L, - 0xB2305F90F947131DL, 0x344BF9ECBD52C6B7L, 0x5D17C665D2433ED0L, 0x18224FEEC05EB1FDL, - 0x9E59E992844B6457L, 0x9A568EBFA4A5DD07L, 0xA3C60E68716DA454L, 0x7E2CB4C4D7A22456L, - 0x87B176304CA0BCBEL, 0x413AEEA632F3367DL, 0x9915E36BBC67663BL, 0x40F03EEA3A465F69L, - 0x1C2D28C3E0B008ADL, 0x4E682A054A1E5BB1L, 0x05C5B761285BD044L, 0xE1BF8D1A5B5C2915L, - 0xF2C0617AC3014C74L, 0xB7F5E8F1D11CC359L, 0x63CB4C4B3FA745EFL, 0x9D1A84469C89DF6BL, - 0xE33630824B2BFB3DL, 0xD5F474F6E60EEFA2L, 0xF58C6B83FB2D4E18L, 0x4676E45F0ADF3411L, - 0x20781F751D23A1BAL, 0xBD629B3381AA7ED1L, 0xAE1D775319F71BB0L, 0xFED1C80DA32E9A84L, - 0x5509083F92825170L, 0x29AC01635557A70EL, 0xA7C9694551831D04L, 0x8E65682604D4BA0AL, - 0x11F651F8882AB749L, 0xD77DC96EF6793D8AL, 0xEF2799F52B042DCDL, 0x48EEF0B07A8730C9L, - 0x22F1A2ED0D547392L, 0x6142F1D32FD097C7L, 0x4A674D286AF0E2E1L, 0x80FD7CC9748CBED2L, - 0x717E7067AF4F499AL, 0x938290A9ECD1DBB3L, 0x88E3B293344DD172L, 0x2734158C250FA3D6L - } - }; - - - } -} diff --git a/bc-sharp-crypto/src/crypto/digests/GOST3411_2012_256Digest.cs b/bc-sharp-crypto/src/crypto/digests/GOST3411_2012_256Digest.cs deleted file mode 100644 index 8686851..0000000 --- a/bc-sharp-crypto/src/crypto/digests/GOST3411_2012_256Digest.cs +++ /dev/null @@ -1,54 +0,0 @@ -using System; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Digests -{ - public class GOST3411_2012_256Digest : GOST3411_2012Digest - { - private readonly static byte[] IV = { - 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, - 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, - 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, - 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, - 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, - 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, - 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, - 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01 - }; - - public override string AlgorithmName - { - get { return "GOST3411-2012-256"; } - } - - public GOST3411_2012_256Digest() : base(IV) - { - - } - - public GOST3411_2012_256Digest(GOST3411_2012_256Digest other) : base(IV) - { - Reset(other); - } - - public override int GetDigestSize() - { - return 32; - } - - public override int DoFinal(byte[] output, int outOff) - { - byte[] result = new byte[64]; - base.DoFinal(result, 0); - - Array.Copy(result, 32, output, outOff, 32); - - return 32; - } - - public override IMemoable Copy() - { - return new GOST3411_2012_256Digest(this); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/digests/GOST3411_2012_512Digest.cs b/bc-sharp-crypto/src/crypto/digests/GOST3411_2012_512Digest.cs deleted file mode 100644 index eb40aba..0000000 --- a/bc-sharp-crypto/src/crypto/digests/GOST3411_2012_512Digest.cs +++ /dev/null @@ -1,43 +0,0 @@ -using System; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Digests -{ - public class GOST3411_2012_512Digest:GOST3411_2012Digest - { - private readonly static byte[] IV = { - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 - }; - - public override string AlgorithmName - { - get { return "GOST3411-2012-512"; } - } - - public GOST3411_2012_512Digest():base(IV) - { - } - - public GOST3411_2012_512Digest(GOST3411_2012_512Digest other) : base(IV) - { - Reset(other); - } - - public override int GetDigestSize() - { - return 64; - } - - public override IMemoable Copy() - { - return new GOST3411_2012_512Digest(this); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/digests/GeneralDigest.cs b/bc-sharp-crypto/src/crypto/digests/GeneralDigest.cs deleted file mode 100644 index d40ad28..0000000 --- a/bc-sharp-crypto/src/crypto/digests/GeneralDigest.cs +++ /dev/null @@ -1,133 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Digests -{ - /** - * base implementation of MD4 family style digest as outlined in - * "Handbook of Applied Cryptography", pages 344 - 347. - */ - public abstract class GeneralDigest - : IDigest, IMemoable - { - private const int BYTE_LENGTH = 64; - - private byte[] xBuf; - private int xBufOff; - - private long byteCount; - - internal GeneralDigest() - { - xBuf = new byte[4]; - } - - internal GeneralDigest(GeneralDigest t) - { - xBuf = new byte[t.xBuf.Length]; - CopyIn(t); - } - - protected void CopyIn(GeneralDigest t) - { - Array.Copy(t.xBuf, 0, xBuf, 0, t.xBuf.Length); - - xBufOff = t.xBufOff; - byteCount = t.byteCount; - } - - public void Update(byte input) - { - xBuf[xBufOff++] = input; - - if (xBufOff == xBuf.Length) - { - ProcessWord(xBuf, 0); - xBufOff = 0; - } - - byteCount++; - } - - public void BlockUpdate( - byte[] input, - int inOff, - int length) - { - length = System.Math.Max(0, length); - - // - // fill the current word - // - int i = 0; - if (xBufOff != 0) - { - while (i < length) - { - xBuf[xBufOff++] = input[inOff + i++]; - if (xBufOff == 4) - { - ProcessWord(xBuf, 0); - xBufOff = 0; - break; - } - } - } - - // - // process whole words. - // - int limit = ((length - i) & ~3) + i; - for (; i < limit; i += 4) - { - ProcessWord(input, inOff + i); - } - - // - // load in the remainder. - // - while (i < length) - { - xBuf[xBufOff++] = input[inOff + i++]; - } - - byteCount += length; - } - - public void Finish() - { - long bitLength = (byteCount << 3); - - // - // add the pad bytes. - // - Update((byte)128); - - while (xBufOff != 0) Update((byte)0); - ProcessLength(bitLength); - ProcessBlock(); - } - - public virtual void Reset() - { - byteCount = 0; - xBufOff = 0; - Array.Clear(xBuf, 0, xBuf.Length); - } - - public int GetByteLength() - { - return BYTE_LENGTH; - } - - internal abstract void ProcessWord(byte[] input, int inOff); - internal abstract void ProcessLength(long bitLength); - internal abstract void ProcessBlock(); - public abstract string AlgorithmName { get; } - public abstract int GetDigestSize(); - public abstract int DoFinal(byte[] output, int outOff); - public abstract IMemoable Copy(); - public abstract void Reset(IMemoable t); - } -} diff --git a/bc-sharp-crypto/src/crypto/digests/KeccakDigest.cs b/bc-sharp-crypto/src/crypto/digests/KeccakDigest.cs deleted file mode 100644 index 8b16e5d..0000000 --- a/bc-sharp-crypto/src/crypto/digests/KeccakDigest.cs +++ /dev/null @@ -1,479 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Digests -{ - /// - /// Implementation of Keccak based on following KeccakNISTInterface.c from http://keccak.noekeon.org/ - /// - /// - /// Following the naming conventions used in the C source code to enable easy review of the implementation. - /// - public class KeccakDigest - : IDigest, IMemoable - { - private static readonly ulong[] KeccakRoundConstants = KeccakInitializeRoundConstants(); - - private static readonly int[] KeccakRhoOffsets = KeccakInitializeRhoOffsets(); - - private static ulong[] KeccakInitializeRoundConstants() - { - ulong[] keccakRoundConstants = new ulong[24]; - byte LFSRState = 0x01; - - for (int i = 0; i < 24; i++) - { - keccakRoundConstants[i] = 0; - for (int j = 0; j < 7; j++) - { - int bitPosition = (1 << j) - 1; - - // LFSR86540 - - bool loBit = (LFSRState & 0x01) != 0; - if (loBit) - { - keccakRoundConstants[i] ^= 1UL << bitPosition; - } - - bool hiBit = (LFSRState & 0x80) != 0; - LFSRState <<= 1; - if (hiBit) - { - LFSRState ^= 0x71; - } - - } - } - - return keccakRoundConstants; - } - - private static int[] KeccakInitializeRhoOffsets() - { - int[] keccakRhoOffsets = new int[25]; - int x, y, t, newX, newY; - - int rhoOffset = 0; - keccakRhoOffsets[0] = rhoOffset; - x = 1; - y = 0; - for (t = 1; t < 25; t++) - { - rhoOffset = (rhoOffset + t) & 63; - keccakRhoOffsets[(((x) % 5) + 5 * ((y) % 5))] = rhoOffset; - newX = (0 * x + 1 * y) % 5; - newY = (2 * x + 3 * y) % 5; - x = newX; - y = newY; - } - - return keccakRhoOffsets; - } - - private static readonly int STATE_LENGTH = (1600 / 8); - - private ulong[] state = new ulong[STATE_LENGTH / 8]; - protected byte[] dataQueue = new byte[1536 / 8]; - protected int rate; - protected int bitsInQueue; - protected int fixedOutputLength; - protected bool squeezing; - protected int bitsAvailableForSqueezing; - - public KeccakDigest() - : this(288) - { - } - - public KeccakDigest(int bitLength) - { - Init(bitLength); - } - - public KeccakDigest(KeccakDigest source) - { - CopyIn(source); - } - - private void CopyIn(KeccakDigest source) - { - Array.Copy(source.state, 0, this.state, 0, source.state.Length); - Array.Copy(source.dataQueue, 0, this.dataQueue, 0, source.dataQueue.Length); - this.rate = source.rate; - this.bitsInQueue = source.bitsInQueue; - this.fixedOutputLength = source.fixedOutputLength; - this.squeezing = source.squeezing; - this.bitsAvailableForSqueezing = source.bitsAvailableForSqueezing; - } - - public virtual string AlgorithmName - { - get { return "Keccak-" + fixedOutputLength; } - } - - public virtual int GetDigestSize() - { - return fixedOutputLength >> 3; - } - - public virtual void Update(byte input) - { - Absorb(new byte[]{ input }, 0, 1); - } - - public virtual void BlockUpdate(byte[] input, int inOff, int len) - { - Absorb(input, inOff, len); - } - - public virtual int DoFinal(byte[] output, int outOff) - { - Squeeze(output, outOff, fixedOutputLength >> 3); - - Reset(); - - return GetDigestSize(); - } - - /* - * TODO Possible API change to support partial-byte suffixes. - */ - protected virtual int DoFinal(byte[] output, int outOff, byte partialByte, int partialBits) - { - if (partialBits > 0) - { - AbsorbBits(partialByte, partialBits); - } - - Squeeze(output, outOff, fixedOutputLength >> 3); - - Reset(); - - return GetDigestSize(); - } - - public virtual void Reset() - { - Init(fixedOutputLength); - } - - /** - * Return the size of block that the compression function is applied to in bytes. - * - * @return internal byte length of a block. - */ - public virtual int GetByteLength() - { - return rate >> 3; - } - - private void Init(int bitLength) - { - switch (bitLength) - { - case 128: - case 224: - case 256: - case 288: - case 384: - case 512: - InitSponge(1600 - (bitLength << 1)); - break; - default: - throw new ArgumentException("must be one of 128, 224, 256, 288, 384, or 512.", "bitLength"); - } - } - - private void InitSponge(int rate) - { - if (rate <= 0 || rate >= 1600 || (rate & 63) != 0) - throw new InvalidOperationException("invalid rate value"); - - this.rate = rate; - Array.Clear(state, 0, state.Length); - Arrays.Fill(this.dataQueue, (byte)0); - this.bitsInQueue = 0; - this.squeezing = false; - this.bitsAvailableForSqueezing = 0; - this.fixedOutputLength = (1600 - rate) >> 1; - } - - protected void Absorb(byte[] data, int off, int len) - { - if ((bitsInQueue & 7) != 0) - throw new InvalidOperationException("attempt to absorb with odd length queue"); - if (squeezing) - throw new InvalidOperationException("attempt to absorb while squeezing"); - - int bytesInQueue = bitsInQueue >> 3; - int rateBytes = rate >> 3; - - int count = 0; - while (count < len) - { - if (bytesInQueue == 0 && count <= (len - rateBytes)) - { - do - { - KeccakAbsorb(data, off + count); - count += rateBytes; - } - while (count <= (len - rateBytes)); - } - else - { - int partialBlock = System.Math.Min(rateBytes - bytesInQueue, len - count); - Array.Copy(data, off + count, dataQueue, bytesInQueue, partialBlock); - - bytesInQueue += partialBlock; - count += partialBlock; - - if (bytesInQueue == rateBytes) - { - KeccakAbsorb(dataQueue, 0); - bytesInQueue = 0; - } - } - } - - bitsInQueue = bytesInQueue << 3; - } - - protected void AbsorbBits(int data, int bits) - { - if (bits < 1 || bits > 7) - throw new ArgumentException("must be in the range 1 to 7", "bits"); - if ((bitsInQueue & 7) != 0) - throw new InvalidOperationException("attempt to absorb with odd length queue"); - if (squeezing) - throw new InvalidOperationException("attempt to absorb while squeezing"); - - int mask = (1 << bits) - 1; - dataQueue[bitsInQueue >> 3] = (byte)(data & mask); - - // NOTE: After this, bitsInQueue is no longer a multiple of 8, so no more absorbs will work - bitsInQueue += bits; - } - - private void PadAndSwitchToSqueezingPhase() - { - Debug.Assert(bitsInQueue < rate); - - dataQueue[bitsInQueue >> 3] |= (byte)(1U << (bitsInQueue & 7)); - - if (++bitsInQueue == rate) - { - KeccakAbsorb(dataQueue, 0); - bitsInQueue = 0; - } - - { - int full = bitsInQueue >> 6, partial = bitsInQueue & 63; - int off = 0; - for (int i = 0; i < full; ++i) - { - state[i] ^= Pack.LE_To_UInt64(dataQueue, off); - off += 8; - } - if (partial > 0) - { - ulong mask = (1UL << partial) - 1UL; - state[full] ^= Pack.LE_To_UInt64(dataQueue, off) & mask; - } - state[(rate - 1) >> 6] ^= (1UL << 63); - } - - KeccakPermutation(); - KeccakExtract(); - bitsAvailableForSqueezing = rate; - - bitsInQueue = 0; - squeezing = true; - } - - protected void Squeeze(byte[] output, int off, int len) - { - if (!squeezing) - { - PadAndSwitchToSqueezingPhase(); - } - - long outputLength = (long)len << 3; - long i = 0; - while (i < outputLength) - { - if (bitsAvailableForSqueezing == 0) - { - KeccakPermutation(); - KeccakExtract(); - bitsAvailableForSqueezing = rate; - } - - int partialBlock = (int)System.Math.Min((long)bitsAvailableForSqueezing, outputLength - i); - Array.Copy(dataQueue, (rate - bitsAvailableForSqueezing) >> 3, output, off + (int)(i >> 3), partialBlock >> 3); - bitsAvailableForSqueezing -= partialBlock; - i += partialBlock; - } - } - - private void KeccakAbsorb(byte[] data, int off) - { - int count = rate >> 6; - for (int i = 0; i < count; ++i) - { - state[i] ^= Pack.LE_To_UInt64(data, off); - off += 8; - } - - KeccakPermutation(); - } - - private void KeccakExtract() - { - Pack.UInt64_To_LE(state, 0, rate >> 6, dataQueue, 0); - } - - private void KeccakPermutation() - { - for (int i = 0; i < 24; i++) - { - Theta(state); - Rho(state); - Pi(state); - Chi(state); - Iota(state, i); - } - } - - private static ulong leftRotate(ulong v, int r) - { - return (v << r) | (v >> -r); - } - - private static void Theta(ulong[] A) - { - ulong C0 = A[0 + 0] ^ A[0 + 5] ^ A[0 + 10] ^ A[0 + 15] ^ A[0 + 20]; - ulong C1 = A[1 + 0] ^ A[1 + 5] ^ A[1 + 10] ^ A[1 + 15] ^ A[1 + 20]; - ulong C2 = A[2 + 0] ^ A[2 + 5] ^ A[2 + 10] ^ A[2 + 15] ^ A[2 + 20]; - ulong C3 = A[3 + 0] ^ A[3 + 5] ^ A[3 + 10] ^ A[3 + 15] ^ A[3 + 20]; - ulong C4 = A[4 + 0] ^ A[4 + 5] ^ A[4 + 10] ^ A[4 + 15] ^ A[4 + 20]; - - ulong dX = leftRotate(C1, 1) ^ C4; - - A[0] ^= dX; - A[5] ^= dX; - A[10] ^= dX; - A[15] ^= dX; - A[20] ^= dX; - - dX = leftRotate(C2, 1) ^ C0; - - A[1] ^= dX; - A[6] ^= dX; - A[11] ^= dX; - A[16] ^= dX; - A[21] ^= dX; - - dX = leftRotate(C3, 1) ^ C1; - - A[2] ^= dX; - A[7] ^= dX; - A[12] ^= dX; - A[17] ^= dX; - A[22] ^= dX; - - dX = leftRotate(C4, 1) ^ C2; - - A[3] ^= dX; - A[8] ^= dX; - A[13] ^= dX; - A[18] ^= dX; - A[23] ^= dX; - - dX = leftRotate(C0, 1) ^ C3; - - A[4] ^= dX; - A[9] ^= dX; - A[14] ^= dX; - A[19] ^= dX; - A[24] ^= dX; - } - - private static void Rho(ulong[] A) - { - // KeccakRhoOffsets[0] == 0 - for (int x = 1; x < 25; x++) - { - A[x] = leftRotate(A[x], KeccakRhoOffsets[x]); - } - } - - private static void Pi(ulong[] A) - { - ulong a1 = A[1]; - A[1] = A[6]; - A[6] = A[9]; - A[9] = A[22]; - A[22] = A[14]; - A[14] = A[20]; - A[20] = A[2]; - A[2] = A[12]; - A[12] = A[13]; - A[13] = A[19]; - A[19] = A[23]; - A[23] = A[15]; - A[15] = A[4]; - A[4] = A[24]; - A[24] = A[21]; - A[21] = A[8]; - A[8] = A[16]; - A[16] = A[5]; - A[5] = A[3]; - A[3] = A[18]; - A[18] = A[17]; - A[17] = A[11]; - A[11] = A[7]; - A[7] = A[10]; - A[10] = a1; - } - - private static void Chi(ulong[] A) - { - ulong chiC0, chiC1, chiC2, chiC3, chiC4; - - for (int yBy5 = 0; yBy5 < 25; yBy5 += 5) - { - chiC0 = A[0 + yBy5] ^ ((~A[(((0 + 1) % 5) + yBy5)]) & A[(((0 + 2) % 5) + yBy5)]); - chiC1 = A[1 + yBy5] ^ ((~A[(((1 + 1) % 5) + yBy5)]) & A[(((1 + 2) % 5) + yBy5)]); - chiC2 = A[2 + yBy5] ^ ((~A[(((2 + 1) % 5) + yBy5)]) & A[(((2 + 2) % 5) + yBy5)]); - chiC3 = A[3 + yBy5] ^ ((~A[(((3 + 1) % 5) + yBy5)]) & A[(((3 + 2) % 5) + yBy5)]); - chiC4 = A[4 + yBy5] ^ ((~A[(((4 + 1) % 5) + yBy5)]) & A[(((4 + 2) % 5) + yBy5)]); - - A[0 + yBy5] = chiC0; - A[1 + yBy5] = chiC1; - A[2 + yBy5] = chiC2; - A[3 + yBy5] = chiC3; - A[4 + yBy5] = chiC4; - } - } - - private static void Iota(ulong[] A, int indexRound) - { - A[0] ^= KeccakRoundConstants[indexRound]; - } - - public virtual IMemoable Copy() - { - return new KeccakDigest(this); - } - - public virtual void Reset(IMemoable other) - { - CopyIn((KeccakDigest)other); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/digests/LongDigest.cs b/bc-sharp-crypto/src/crypto/digests/LongDigest.cs deleted file mode 100644 index 9ee9bcd..0000000 --- a/bc-sharp-crypto/src/crypto/digests/LongDigest.cs +++ /dev/null @@ -1,355 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Digests -{ - /** - * Base class for SHA-384 and SHA-512. - */ - public abstract class LongDigest - : IDigest, IMemoable - { - private int MyByteLength = 128; - - private byte[] xBuf; - private int xBufOff; - - private long byteCount1; - private long byteCount2; - - internal ulong H1, H2, H3, H4, H5, H6, H7, H8; - - private ulong[] W = new ulong[80]; - private int wOff; - - /** - * Constructor for variable length word - */ - internal LongDigest() - { - xBuf = new byte[8]; - - Reset(); - } - - /** - * Copy constructor. We are using copy constructors in place - * of the object.Clone() interface as this interface is not - * supported by J2ME. - */ - internal LongDigest( - LongDigest t) - { - xBuf = new byte[t.xBuf.Length]; - - CopyIn(t); - } - - protected void CopyIn(LongDigest t) - { - Array.Copy(t.xBuf, 0, xBuf, 0, t.xBuf.Length); - - xBufOff = t.xBufOff; - byteCount1 = t.byteCount1; - byteCount2 = t.byteCount2; - - H1 = t.H1; - H2 = t.H2; - H3 = t.H3; - H4 = t.H4; - H5 = t.H5; - H6 = t.H6; - H7 = t.H7; - H8 = t.H8; - - Array.Copy(t.W, 0, W, 0, t.W.Length); - wOff = t.wOff; - } - - public void Update( - byte input) - { - xBuf[xBufOff++] = input; - - if (xBufOff == xBuf.Length) - { - ProcessWord(xBuf, 0); - xBufOff = 0; - } - - byteCount1++; - } - - public void BlockUpdate( - byte[] input, - int inOff, - int length) - { - // - // fill the current word - // - while ((xBufOff != 0) && (length > 0)) - { - Update(input[inOff]); - - inOff++; - length--; - } - - // - // process whole words. - // - while (length > xBuf.Length) - { - ProcessWord(input, inOff); - - inOff += xBuf.Length; - length -= xBuf.Length; - byteCount1 += xBuf.Length; - } - - // - // load in the remainder. - // - while (length > 0) - { - Update(input[inOff]); - - inOff++; - length--; - } - } - - public void Finish() - { - AdjustByteCounts(); - - long lowBitLength = byteCount1 << 3; - long hiBitLength = byteCount2; - - // - // add the pad bytes. - // - Update((byte)128); - - while (xBufOff != 0) - { - Update((byte)0); - } - - ProcessLength(lowBitLength, hiBitLength); - - ProcessBlock(); - } - - public virtual void Reset() - { - byteCount1 = 0; - byteCount2 = 0; - - xBufOff = 0; - for ( int i = 0; i < xBuf.Length; i++ ) - { - xBuf[i] = 0; - } - - wOff = 0; - Array.Clear(W, 0, W.Length); - } - - internal void ProcessWord( - byte[] input, - int inOff) - { - W[wOff] = Pack.BE_To_UInt64(input, inOff); - - if (++wOff == 16) - { - ProcessBlock(); - } - } - - /** - * adjust the byte counts so that byteCount2 represents the - * upper long (less 3 bits) word of the byte count. - */ - private void AdjustByteCounts() - { - if (byteCount1 > 0x1fffffffffffffffL) - { - byteCount2 += (long) ((ulong) byteCount1 >> 61); - byteCount1 &= 0x1fffffffffffffffL; - } - } - - internal void ProcessLength( - long lowW, - long hiW) - { - if (wOff > 14) - { - ProcessBlock(); - } - - W[14] = (ulong)hiW; - W[15] = (ulong)lowW; - } - - internal void ProcessBlock() - { - AdjustByteCounts(); - - // - // expand 16 word block into 80 word blocks. - // - for (int ti = 16; ti <= 79; ++ti) - { - W[ti] = Sigma1(W[ti - 2]) + W[ti - 7] + Sigma0(W[ti - 15]) + W[ti - 16]; - } - - // - // set up working variables. - // - ulong a = H1; - ulong b = H2; - ulong c = H3; - ulong d = H4; - ulong e = H5; - ulong f = H6; - ulong g = H7; - ulong h = H8; - - int t = 0; - for(int i = 0; i < 10; i ++) - { - // t = 8 * i - h += Sum1(e) + Ch(e, f, g) + K[t] + W[t++]; - d += h; - h += Sum0(a) + Maj(a, b, c); - - // t = 8 * i + 1 - g += Sum1(d) + Ch(d, e, f) + K[t] + W[t++]; - c += g; - g += Sum0(h) + Maj(h, a, b); - - // t = 8 * i + 2 - f += Sum1(c) + Ch(c, d, e) + K[t] + W[t++]; - b += f; - f += Sum0(g) + Maj(g, h, a); - - // t = 8 * i + 3 - e += Sum1(b) + Ch(b, c, d) + K[t] + W[t++]; - a += e; - e += Sum0(f) + Maj(f, g, h); - - // t = 8 * i + 4 - d += Sum1(a) + Ch(a, b, c) + K[t] + W[t++]; - h += d; - d += Sum0(e) + Maj(e, f, g); - - // t = 8 * i + 5 - c += Sum1(h) + Ch(h, a, b) + K[t] + W[t++]; - g += c; - c += Sum0(d) + Maj(d, e, f); - - // t = 8 * i + 6 - b += Sum1(g) + Ch(g, h, a) + K[t] + W[t++]; - f += b; - b += Sum0(c) + Maj(c, d, e); - - // t = 8 * i + 7 - a += Sum1(f) + Ch(f, g, h) + K[t] + W[t++]; - e += a; - a += Sum0(b) + Maj(b, c, d); - } - - H1 += a; - H2 += b; - H3 += c; - H4 += d; - H5 += e; - H6 += f; - H7 += g; - H8 += h; - - // - // reset the offset and clean out the word buffer. - // - wOff = 0; - Array.Clear(W, 0, 16); - } - - /* SHA-384 and SHA-512 functions (as for SHA-256 but for longs) */ - private static ulong Ch(ulong x, ulong y, ulong z) - { - return (x & y) ^ (~x & z); - } - - private static ulong Maj(ulong x, ulong y, ulong z) - { - return (x & y) ^ (x & z) ^ (y & z); - } - - private static ulong Sum0(ulong x) - { - return ((x << 36) | (x >> 28)) ^ ((x << 30) | (x >> 34)) ^ ((x << 25) | (x >> 39)); - } - - private static ulong Sum1(ulong x) - { - return ((x << 50) | (x >> 14)) ^ ((x << 46) | (x >> 18)) ^ ((x << 23) | (x >> 41)); - } - - private static ulong Sigma0(ulong x) - { - return ((x << 63) | (x >> 1)) ^ ((x << 56) | (x >> 8)) ^ (x >> 7); - } - - private static ulong Sigma1(ulong x) - { - return ((x << 45) | (x >> 19)) ^ ((x << 3) | (x >> 61)) ^ (x >> 6); - } - - /* SHA-384 and SHA-512 Constants - * (represent the first 64 bits of the fractional parts of the - * cube roots of the first sixty-four prime numbers) - */ - internal static readonly ulong[] K = - { - 0x428a2f98d728ae22, 0x7137449123ef65cd, 0xb5c0fbcfec4d3b2f, 0xe9b5dba58189dbbc, - 0x3956c25bf348b538, 0x59f111f1b605d019, 0x923f82a4af194f9b, 0xab1c5ed5da6d8118, - 0xd807aa98a3030242, 0x12835b0145706fbe, 0x243185be4ee4b28c, 0x550c7dc3d5ffb4e2, - 0x72be5d74f27b896f, 0x80deb1fe3b1696b1, 0x9bdc06a725c71235, 0xc19bf174cf692694, - 0xe49b69c19ef14ad2, 0xefbe4786384f25e3, 0x0fc19dc68b8cd5b5, 0x240ca1cc77ac9c65, - 0x2de92c6f592b0275, 0x4a7484aa6ea6e483, 0x5cb0a9dcbd41fbd4, 0x76f988da831153b5, - 0x983e5152ee66dfab, 0xa831c66d2db43210, 0xb00327c898fb213f, 0xbf597fc7beef0ee4, - 0xc6e00bf33da88fc2, 0xd5a79147930aa725, 0x06ca6351e003826f, 0x142929670a0e6e70, - 0x27b70a8546d22ffc, 0x2e1b21385c26c926, 0x4d2c6dfc5ac42aed, 0x53380d139d95b3df, - 0x650a73548baf63de, 0x766a0abb3c77b2a8, 0x81c2c92e47edaee6, 0x92722c851482353b, - 0xa2bfe8a14cf10364, 0xa81a664bbc423001, 0xc24b8b70d0f89791, 0xc76c51a30654be30, - 0xd192e819d6ef5218, 0xd69906245565a910, 0xf40e35855771202a, 0x106aa07032bbd1b8, - 0x19a4c116b8d2d0c8, 0x1e376c085141ab53, 0x2748774cdf8eeb99, 0x34b0bcb5e19b48a8, - 0x391c0cb3c5c95a63, 0x4ed8aa4ae3418acb, 0x5b9cca4f7763e373, 0x682e6ff3d6b2b8a3, - 0x748f82ee5defb2fc, 0x78a5636f43172f60, 0x84c87814a1f0ab72, 0x8cc702081a6439ec, - 0x90befffa23631e28, 0xa4506cebde82bde9, 0xbef9a3f7b2c67915, 0xc67178f2e372532b, - 0xca273eceea26619c, 0xd186b8c721c0c207, 0xeada7dd6cde0eb1e, 0xf57d4f7fee6ed178, - 0x06f067aa72176fba, 0x0a637dc5a2c898a6, 0x113f9804bef90dae, 0x1b710b35131c471b, - 0x28db77f523047d84, 0x32caab7b40c72493, 0x3c9ebe0a15c9bebc, 0x431d67c49c100d4c, - 0x4cc5d4becb3e42b6, 0x597f299cfc657e2a, 0x5fcb6fab3ad6faec, 0x6c44198c4a475817 - }; - - public int GetByteLength() - { - return MyByteLength; - } - - public abstract string AlgorithmName { get; } - public abstract int GetDigestSize(); - public abstract int DoFinal(byte[] output, int outOff); - public abstract IMemoable Copy(); - public abstract void Reset(IMemoable t); - } -} diff --git a/bc-sharp-crypto/src/crypto/digests/MD2Digest.cs b/bc-sharp-crypto/src/crypto/digests/MD2Digest.cs deleted file mode 100644 index 6d90f3f..0000000 --- a/bc-sharp-crypto/src/crypto/digests/MD2Digest.cs +++ /dev/null @@ -1,269 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Digests -{ - - /** - * implementation of MD2 - * as outlined in RFC1319 by B.Kaliski from RSA Laboratories April 1992 - */ - public class MD2Digest - : IDigest, IMemoable - { - private const int DigestLength = 16; - private const int BYTE_LENGTH = 16; - - /* X buffer */ - private byte[] X = new byte[48]; - private int xOff; - - /* M buffer */ - - private byte[] M = new byte[16]; - private int mOff; - - /* check sum */ - - private byte[] C = new byte[16]; - private int COff; - - public MD2Digest() - { - Reset(); - } - - public MD2Digest(MD2Digest t) - { - CopyIn(t); - } - - private void CopyIn(MD2Digest t) - { - Array.Copy(t.X, 0, X, 0, t.X.Length); - xOff = t.xOff; - Array.Copy(t.M, 0, M, 0, t.M.Length); - mOff = t.mOff; - Array.Copy(t.C, 0, C, 0, t.C.Length); - COff = t.COff; - } - - /** - * return the algorithm name - * - * @return the algorithm name - */ - public string AlgorithmName - { - get { return "MD2"; } - } - - public int GetDigestSize() - { - return DigestLength; - } - - public int GetByteLength() - { - return BYTE_LENGTH; - } - - /** - * Close the digest, producing the final digest value. The doFinal - * call leaves the digest reset. - * - * @param out the array the digest is to be copied into. - * @param outOff the offset into the out array the digest is to start at. - */ - public int DoFinal(byte[] output, int outOff) - { - // add padding - byte paddingByte = (byte)(M.Length - mOff); - for (int i=mOff;i 0)) - { - Update(input[inOff]); - inOff++; - length--; - } - - // - // process whole words. - // - while (length > 16) - { - Array.Copy(input,inOff,M,0,16); - ProcessChecksum(M); - ProcessBlock(M); - length -= 16; - inOff += 16; - } - - // - // load in the remainder. - // - while (length > 0) - { - Update(input[inOff]); - inOff++; - length--; - } - } - - internal void ProcessChecksum(byte[] m) - { - int L = C[15]; - for (int i=0;i<16;i++) - { - C[i] ^= S[(m[i] ^ L) & 0xff]; - L = C[i]; - } - } - internal void ProcessBlock(byte[] m) - { - for (int i=0;i<16;i++) - { - X[i+16] = m[i]; - X[i+32] = (byte)(m[i] ^ X[i]); - } - // encrypt block - int t = 0; - - for (int j=0;j<18;j++) - { - for (int k=0;k<48;k++) - { - t = X[k] ^= S[t]; - t = t & 0xff; - } - t = (t + j)%256; - } - } - - - - // 256-byte random permutation constructed from the digits of PI - private static readonly byte[] S = { - (byte)41,(byte)46,(byte)67,(byte)201,(byte)162,(byte)216,(byte)124, - (byte)1,(byte)61,(byte)54,(byte)84,(byte)161,(byte)236,(byte)240, - (byte)6,(byte)19,(byte)98,(byte)167,(byte)5,(byte)243,(byte)192, - (byte)199,(byte)115,(byte)140,(byte)152,(byte)147,(byte)43,(byte)217, - (byte)188,(byte)76,(byte)130,(byte)202,(byte)30,(byte)155,(byte)87, - (byte)60,(byte)253,(byte)212,(byte)224,(byte)22,(byte)103,(byte)66, - (byte)111,(byte)24,(byte)138,(byte)23,(byte)229,(byte)18,(byte)190, - (byte)78,(byte)196,(byte)214,(byte)218,(byte)158,(byte)222,(byte)73, - (byte)160,(byte)251,(byte)245,(byte)142,(byte)187,(byte)47,(byte)238, - (byte)122,(byte)169,(byte)104,(byte)121,(byte)145,(byte)21,(byte)178, - (byte)7,(byte)63,(byte)148,(byte)194,(byte)16,(byte)137,(byte)11, - (byte)34,(byte)95,(byte)33,(byte)128,(byte)127,(byte)93,(byte)154, - (byte)90,(byte)144,(byte)50,(byte)39,(byte)53,(byte)62,(byte)204, - (byte)231,(byte)191,(byte)247,(byte)151,(byte)3,(byte)255,(byte)25, - (byte)48,(byte)179,(byte)72,(byte)165,(byte)181,(byte)209,(byte)215, - (byte)94,(byte)146,(byte)42,(byte)172,(byte)86,(byte)170,(byte)198, - (byte)79,(byte)184,(byte)56,(byte)210,(byte)150,(byte)164,(byte)125, - (byte)182,(byte)118,(byte)252,(byte)107,(byte)226,(byte)156,(byte)116, - (byte)4,(byte)241,(byte)69,(byte)157,(byte)112,(byte)89,(byte)100, - (byte)113,(byte)135,(byte)32,(byte)134,(byte)91,(byte)207,(byte)101, - (byte)230,(byte)45,(byte)168,(byte)2,(byte)27,(byte)96,(byte)37, - (byte)173,(byte)174,(byte)176,(byte)185,(byte)246,(byte)28,(byte)70, - (byte)97,(byte)105,(byte)52,(byte)64,(byte)126,(byte)15,(byte)85, - (byte)71,(byte)163,(byte)35,(byte)221,(byte)81,(byte)175,(byte)58, - (byte)195,(byte)92,(byte)249,(byte)206,(byte)186,(byte)197,(byte)234, - (byte)38,(byte)44,(byte)83,(byte)13,(byte)110,(byte)133,(byte)40, - (byte)132, 9,(byte)211,(byte)223,(byte)205,(byte)244,(byte)65, - (byte)129,(byte)77,(byte)82,(byte)106,(byte)220,(byte)55,(byte)200, - (byte)108,(byte)193,(byte)171,(byte)250,(byte)36,(byte)225,(byte)123, - (byte)8,(byte)12,(byte)189,(byte)177,(byte)74,(byte)120,(byte)136, - (byte)149,(byte)139,(byte)227,(byte)99,(byte)232,(byte)109,(byte)233, - (byte)203,(byte)213,(byte)254,(byte)59,(byte)0,(byte)29,(byte)57, - (byte)242,(byte)239,(byte)183,(byte)14,(byte)102,(byte)88,(byte)208, - (byte)228,(byte)166,(byte)119,(byte)114,(byte)248,(byte)235,(byte)117, - (byte)75,(byte)10,(byte)49,(byte)68,(byte)80,(byte)180,(byte)143, - (byte)237,(byte)31,(byte)26,(byte)219,(byte)153,(byte)141,(byte)51, - (byte)159,(byte)17,(byte)131,(byte)20 - }; - - public IMemoable Copy() - { - return new MD2Digest(this); - } - - public void Reset(IMemoable other) - { - MD2Digest d = (MD2Digest)other; - - CopyIn(d); - } - - } - -} diff --git a/bc-sharp-crypto/src/crypto/digests/MD4Digest.cs b/bc-sharp-crypto/src/crypto/digests/MD4Digest.cs deleted file mode 100644 index 8743f7d..0000000 --- a/bc-sharp-crypto/src/crypto/digests/MD4Digest.cs +++ /dev/null @@ -1,292 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Digests -{ - /** - * implementation of MD4 as RFC 1320 by R. Rivest, MIT Laboratory for - * Computer Science and RSA Data Security, Inc. - *

- * NOTE: This algorithm is only included for backwards compatibility - * with legacy applications, it's not secure, don't use it for anything new!

- */ - public class MD4Digest - : GeneralDigest - { - private const int DigestLength = 16; - - private int H1, H2, H3, H4; // IV's - - private int[] X = new int[16]; - private int xOff; - - /** - * Standard constructor - */ - public MD4Digest() - { - Reset(); - } - - /** - * Copy constructor. This will copy the state of the provided - * message digest. - */ - public MD4Digest(MD4Digest t) : base(t) - { - CopyIn(t); - } - - private void CopyIn(MD4Digest t) - { - base.CopyIn(t); - H1 = t.H1; - H2 = t.H2; - H3 = t.H3; - H4 = t.H4; - - Array.Copy(t.X, 0, X, 0, t.X.Length); - xOff = t.xOff; - } - - public override string AlgorithmName - { - get { return "MD4"; } - } - - public override int GetDigestSize() - { - return DigestLength; - } - - internal override void ProcessWord( - byte[] input, - int inOff) - { - X[xOff++] = (input[inOff] & 0xff) | ((input[inOff + 1] & 0xff) << 8) - | ((input[inOff + 2] & 0xff) << 16) | ((input[inOff + 3] & 0xff) << 24); - - if (xOff == 16) - { - ProcessBlock(); - } - } - - internal override void ProcessLength( - long bitLength) - { - if (xOff > 14) - { - ProcessBlock(); - } - - X[14] = (int)(bitLength & 0xffffffff); - X[15] = (int)((ulong) bitLength >> 32); - } - - private void UnpackWord( - int word, - byte[] outBytes, - int outOff) - { - outBytes[outOff] = (byte)word; - outBytes[outOff + 1] = (byte)((uint) word >> 8); - outBytes[outOff + 2] = (byte)((uint) word >> 16); - outBytes[outOff + 3] = (byte)((uint) word >> 24); - } - - public override int DoFinal( - byte[] output, - int outOff) - { - Finish(); - - UnpackWord(H1, output, outOff); - UnpackWord(H2, output, outOff + 4); - UnpackWord(H3, output, outOff + 8); - UnpackWord(H4, output, outOff + 12); - - Reset(); - - return DigestLength; - } - - /** - * reset the chaining variables to the IV values. - */ - public override void Reset() - { - base.Reset(); - - H1 = unchecked((int) 0x67452301); - H2 = unchecked((int) 0xefcdab89); - H3 = unchecked((int) 0x98badcfe); - H4 = unchecked((int) 0x10325476); - - xOff = 0; - - for (int i = 0; i != X.Length; i++) - { - X[i] = 0; - } - } - - // - // round 1 left rotates - // - private const int S11 = 3; - private const int S12 = 7; - private const int S13 = 11; - private const int S14 = 19; - - // - // round 2 left rotates - // - private const int S21 = 3; - private const int S22 = 5; - private const int S23 = 9; - private const int S24 = 13; - - // - // round 3 left rotates - // - private const int S31 = 3; - private const int S32 = 9; - private const int S33 = 11; - private const int S34 = 15; - - /* - * rotate int x left n bits. - */ - private int RotateLeft( - int x, - int n) - { - return (x << n) | (int) ((uint) x >> (32 - n)); - } - - /* - * F, G, H and I are the basic MD4 functions. - */ - private int F( - int u, - int v, - int w) - { - return (u & v) | (~u & w); - } - - private int G( - int u, - int v, - int w) - { - return (u & v) | (u & w) | (v & w); - } - - private int H( - int u, - int v, - int w) - { - return u ^ v ^ w; - } - - internal override void ProcessBlock() - { - int a = H1; - int b = H2; - int c = H3; - int d = H4; - - // - // Round 1 - F cycle, 16 times. - // - a = RotateLeft((a + F(b, c, d) + X[ 0]), S11); - d = RotateLeft((d + F(a, b, c) + X[ 1]), S12); - c = RotateLeft((c + F(d, a, b) + X[ 2]), S13); - b = RotateLeft((b + F(c, d, a) + X[ 3]), S14); - a = RotateLeft((a + F(b, c, d) + X[ 4]), S11); - d = RotateLeft((d + F(a, b, c) + X[ 5]), S12); - c = RotateLeft((c + F(d, a, b) + X[ 6]), S13); - b = RotateLeft((b + F(c, d, a) + X[ 7]), S14); - a = RotateLeft((a + F(b, c, d) + X[ 8]), S11); - d = RotateLeft((d + F(a, b, c) + X[ 9]), S12); - c = RotateLeft((c + F(d, a, b) + X[10]), S13); - b = RotateLeft((b + F(c, d, a) + X[11]), S14); - a = RotateLeft((a + F(b, c, d) + X[12]), S11); - d = RotateLeft((d + F(a, b, c) + X[13]), S12); - c = RotateLeft((c + F(d, a, b) + X[14]), S13); - b = RotateLeft((b + F(c, d, a) + X[15]), S14); - - // - // Round 2 - G cycle, 16 times. - // - a = RotateLeft((a + G(b, c, d) + X[ 0] + 0x5a827999), S21); - d = RotateLeft((d + G(a, b, c) + X[ 4] + 0x5a827999), S22); - c = RotateLeft((c + G(d, a, b) + X[ 8] + 0x5a827999), S23); - b = RotateLeft((b + G(c, d, a) + X[12] + 0x5a827999), S24); - a = RotateLeft((a + G(b, c, d) + X[ 1] + 0x5a827999), S21); - d = RotateLeft((d + G(a, b, c) + X[ 5] + 0x5a827999), S22); - c = RotateLeft((c + G(d, a, b) + X[ 9] + 0x5a827999), S23); - b = RotateLeft((b + G(c, d, a) + X[13] + 0x5a827999), S24); - a = RotateLeft((a + G(b, c, d) + X[ 2] + 0x5a827999), S21); - d = RotateLeft((d + G(a, b, c) + X[ 6] + 0x5a827999), S22); - c = RotateLeft((c + G(d, a, b) + X[10] + 0x5a827999), S23); - b = RotateLeft((b + G(c, d, a) + X[14] + 0x5a827999), S24); - a = RotateLeft((a + G(b, c, d) + X[ 3] + 0x5a827999), S21); - d = RotateLeft((d + G(a, b, c) + X[ 7] + 0x5a827999), S22); - c = RotateLeft((c + G(d, a, b) + X[11] + 0x5a827999), S23); - b = RotateLeft((b + G(c, d, a) + X[15] + 0x5a827999), S24); - - // - // Round 3 - H cycle, 16 times. - // - a = RotateLeft((a + H(b, c, d) + X[ 0] + 0x6ed9eba1), S31); - d = RotateLeft((d + H(a, b, c) + X[ 8] + 0x6ed9eba1), S32); - c = RotateLeft((c + H(d, a, b) + X[ 4] + 0x6ed9eba1), S33); - b = RotateLeft((b + H(c, d, a) + X[12] + 0x6ed9eba1), S34); - a = RotateLeft((a + H(b, c, d) + X[ 2] + 0x6ed9eba1), S31); - d = RotateLeft((d + H(a, b, c) + X[10] + 0x6ed9eba1), S32); - c = RotateLeft((c + H(d, a, b) + X[ 6] + 0x6ed9eba1), S33); - b = RotateLeft((b + H(c, d, a) + X[14] + 0x6ed9eba1), S34); - a = RotateLeft((a + H(b, c, d) + X[ 1] + 0x6ed9eba1), S31); - d = RotateLeft((d + H(a, b, c) + X[ 9] + 0x6ed9eba1), S32); - c = RotateLeft((c + H(d, a, b) + X[ 5] + 0x6ed9eba1), S33); - b = RotateLeft((b + H(c, d, a) + X[13] + 0x6ed9eba1), S34); - a = RotateLeft((a + H(b, c, d) + X[ 3] + 0x6ed9eba1), S31); - d = RotateLeft((d + H(a, b, c) + X[11] + 0x6ed9eba1), S32); - c = RotateLeft((c + H(d, a, b) + X[ 7] + 0x6ed9eba1), S33); - b = RotateLeft((b + H(c, d, a) + X[15] + 0x6ed9eba1), S34); - - H1 += a; - H2 += b; - H3 += c; - H4 += d; - - // - // reset the offset and clean out the word buffer. - // - xOff = 0; - for (int i = 0; i != X.Length; i++) - { - X[i] = 0; - } - } - - public override IMemoable Copy() - { - return new MD4Digest(this); - } - - public override void Reset(IMemoable other) - { - MD4Digest d = (MD4Digest)other; - - CopyIn(d); - } - - } - -} diff --git a/bc-sharp-crypto/src/crypto/digests/MD5Digest.cs b/bc-sharp-crypto/src/crypto/digests/MD5Digest.cs deleted file mode 100644 index c60ac92..0000000 --- a/bc-sharp-crypto/src/crypto/digests/MD5Digest.cs +++ /dev/null @@ -1,313 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Digests -{ - /** - * implementation of MD5 as outlined in "Handbook of Applied Cryptography", pages 346 - 347. - */ - public class MD5Digest - : GeneralDigest - { - private const int DigestLength = 16; - - private uint H1, H2, H3, H4; // IV's - - private uint[] X = new uint[16]; - private int xOff; - - public MD5Digest() - { - Reset(); - } - - /** - * Copy constructor. This will copy the state of the provided - * message digest. - */ - public MD5Digest(MD5Digest t) - : base(t) - { - CopyIn(t); - } - - private void CopyIn(MD5Digest t) - { - base.CopyIn(t); - H1 = t.H1; - H2 = t.H2; - H3 = t.H3; - H4 = t.H4; - - Array.Copy(t.X, 0, X, 0, t.X.Length); - xOff = t.xOff; - } - - public override string AlgorithmName - { - get { return "MD5"; } - } - - public override int GetDigestSize() - { - return DigestLength; - } - - internal override void ProcessWord( - byte[] input, - int inOff) - { - X[xOff] = Pack.LE_To_UInt32(input, inOff); - - if (++xOff == 16) - { - ProcessBlock(); - } - } - - internal override void ProcessLength( - long bitLength) - { - if (xOff > 14) - { - if (xOff == 15) - X[15] = 0; - - ProcessBlock(); - } - - for (int i = xOff; i < 14; ++i) - { - X[i] = 0; - } - - X[14] = (uint)((ulong)bitLength); - X[15] = (uint)((ulong)bitLength >> 32); - } - - public override int DoFinal( - byte[] output, - int outOff) - { - Finish(); - - Pack.UInt32_To_LE(H1, output, outOff); - Pack.UInt32_To_LE(H2, output, outOff + 4); - Pack.UInt32_To_LE(H3, output, outOff + 8); - Pack.UInt32_To_LE(H4, output, outOff + 12); - - Reset(); - - return DigestLength; - } - - /** - * reset the chaining variables to the IV values. - */ - public override void Reset() - { - base.Reset(); - - H1 = 0x67452301; - H2 = 0xefcdab89; - H3 = 0x98badcfe; - H4 = 0x10325476; - - xOff = 0; - - for (int i = 0; i != X.Length; i++) - { - X[i] = 0; - } - } - - // - // round 1 left rotates - // - private static readonly int S11 = 7; - private static readonly int S12 = 12; - private static readonly int S13 = 17; - private static readonly int S14 = 22; - - // - // round 2 left rotates - // - private static readonly int S21 = 5; - private static readonly int S22 = 9; - private static readonly int S23 = 14; - private static readonly int S24 = 20; - - // - // round 3 left rotates - // - private static readonly int S31 = 4; - private static readonly int S32 = 11; - private static readonly int S33 = 16; - private static readonly int S34 = 23; - - // - // round 4 left rotates - // - private static readonly int S41 = 6; - private static readonly int S42 = 10; - private static readonly int S43 = 15; - private static readonly int S44 = 21; - - /* - * rotate int x left n bits. - */ - private static uint RotateLeft( - uint x, - int n) - { - return (x << n) | (x >> (32 - n)); - } - - /* - * F, G, H and I are the basic MD5 functions. - */ - private static uint F( - uint u, - uint v, - uint w) - { - return (u & v) | (~u & w); - } - - private static uint G( - uint u, - uint v, - uint w) - { - return (u & w) | (v & ~w); - } - - private static uint H( - uint u, - uint v, - uint w) - { - return u ^ v ^ w; - } - - private static uint K( - uint u, - uint v, - uint w) - { - return v ^ (u | ~w); - } - - internal override void ProcessBlock() - { - uint a = H1; - uint b = H2; - uint c = H3; - uint d = H4; - - // - // Round 1 - F cycle, 16 times. - // - a = RotateLeft((a + F(b, c, d) + X[0] + 0xd76aa478), S11) + b; - d = RotateLeft((d + F(a, b, c) + X[1] + 0xe8c7b756), S12) + a; - c = RotateLeft((c + F(d, a, b) + X[2] + 0x242070db), S13) + d; - b = RotateLeft((b + F(c, d, a) + X[3] + 0xc1bdceee), S14) + c; - a = RotateLeft((a + F(b, c, d) + X[4] + 0xf57c0faf), S11) + b; - d = RotateLeft((d + F(a, b, c) + X[5] + 0x4787c62a), S12) + a; - c = RotateLeft((c + F(d, a, b) + X[6] + 0xa8304613), S13) + d; - b = RotateLeft((b + F(c, d, a) + X[7] + 0xfd469501), S14) + c; - a = RotateLeft((a + F(b, c, d) + X[8] + 0x698098d8), S11) + b; - d = RotateLeft((d + F(a, b, c) + X[9] + 0x8b44f7af), S12) + a; - c = RotateLeft((c + F(d, a, b) + X[10] + 0xffff5bb1), S13) + d; - b = RotateLeft((b + F(c, d, a) + X[11] + 0x895cd7be), S14) + c; - a = RotateLeft((a + F(b, c, d) + X[12] + 0x6b901122), S11) + b; - d = RotateLeft((d + F(a, b, c) + X[13] + 0xfd987193), S12) + a; - c = RotateLeft((c + F(d, a, b) + X[14] + 0xa679438e), S13) + d; - b = RotateLeft((b + F(c, d, a) + X[15] + 0x49b40821), S14) + c; - - // - // Round 2 - G cycle, 16 times. - // - a = RotateLeft((a + G(b, c, d) + X[1] + 0xf61e2562), S21) + b; - d = RotateLeft((d + G(a, b, c) + X[6] + 0xc040b340), S22) + a; - c = RotateLeft((c + G(d, a, b) + X[11] + 0x265e5a51), S23) + d; - b = RotateLeft((b + G(c, d, a) + X[0] + 0xe9b6c7aa), S24) + c; - a = RotateLeft((a + G(b, c, d) + X[5] + 0xd62f105d), S21) + b; - d = RotateLeft((d + G(a, b, c) + X[10] + 0x02441453), S22) + a; - c = RotateLeft((c + G(d, a, b) + X[15] + 0xd8a1e681), S23) + d; - b = RotateLeft((b + G(c, d, a) + X[4] + 0xe7d3fbc8), S24) + c; - a = RotateLeft((a + G(b, c, d) + X[9] + 0x21e1cde6), S21) + b; - d = RotateLeft((d + G(a, b, c) + X[14] + 0xc33707d6), S22) + a; - c = RotateLeft((c + G(d, a, b) + X[3] + 0xf4d50d87), S23) + d; - b = RotateLeft((b + G(c, d, a) + X[8] + 0x455a14ed), S24) + c; - a = RotateLeft((a + G(b, c, d) + X[13] + 0xa9e3e905), S21) + b; - d = RotateLeft((d + G(a, b, c) + X[2] + 0xfcefa3f8), S22) + a; - c = RotateLeft((c + G(d, a, b) + X[7] + 0x676f02d9), S23) + d; - b = RotateLeft((b + G(c, d, a) + X[12] + 0x8d2a4c8a), S24) + c; - - // - // Round 3 - H cycle, 16 times. - // - a = RotateLeft((a + H(b, c, d) + X[5] + 0xfffa3942), S31) + b; - d = RotateLeft((d + H(a, b, c) + X[8] + 0x8771f681), S32) + a; - c = RotateLeft((c + H(d, a, b) + X[11] + 0x6d9d6122), S33) + d; - b = RotateLeft((b + H(c, d, a) + X[14] + 0xfde5380c), S34) + c; - a = RotateLeft((a + H(b, c, d) + X[1] + 0xa4beea44), S31) + b; - d = RotateLeft((d + H(a, b, c) + X[4] + 0x4bdecfa9), S32) + a; - c = RotateLeft((c + H(d, a, b) + X[7] + 0xf6bb4b60), S33) + d; - b = RotateLeft((b + H(c, d, a) + X[10] + 0xbebfbc70), S34) + c; - a = RotateLeft((a + H(b, c, d) + X[13] + 0x289b7ec6), S31) + b; - d = RotateLeft((d + H(a, b, c) + X[0] + 0xeaa127fa), S32) + a; - c = RotateLeft((c + H(d, a, b) + X[3] + 0xd4ef3085), S33) + d; - b = RotateLeft((b + H(c, d, a) + X[6] + 0x04881d05), S34) + c; - a = RotateLeft((a + H(b, c, d) + X[9] + 0xd9d4d039), S31) + b; - d = RotateLeft((d + H(a, b, c) + X[12] + 0xe6db99e5), S32) + a; - c = RotateLeft((c + H(d, a, b) + X[15] + 0x1fa27cf8), S33) + d; - b = RotateLeft((b + H(c, d, a) + X[2] + 0xc4ac5665), S34) + c; - - // - // Round 4 - K cycle, 16 times. - // - a = RotateLeft((a + K(b, c, d) + X[0] + 0xf4292244), S41) + b; - d = RotateLeft((d + K(a, b, c) + X[7] + 0x432aff97), S42) + a; - c = RotateLeft((c + K(d, a, b) + X[14] + 0xab9423a7), S43) + d; - b = RotateLeft((b + K(c, d, a) + X[5] + 0xfc93a039), S44) + c; - a = RotateLeft((a + K(b, c, d) + X[12] + 0x655b59c3), S41) + b; - d = RotateLeft((d + K(a, b, c) + X[3] + 0x8f0ccc92), S42) + a; - c = RotateLeft((c + K(d, a, b) + X[10] + 0xffeff47d), S43) + d; - b = RotateLeft((b + K(c, d, a) + X[1] + 0x85845dd1), S44) + c; - a = RotateLeft((a + K(b, c, d) + X[8] + 0x6fa87e4f), S41) + b; - d = RotateLeft((d + K(a, b, c) + X[15] + 0xfe2ce6e0), S42) + a; - c = RotateLeft((c + K(d, a, b) + X[6] + 0xa3014314), S43) + d; - b = RotateLeft((b + K(c, d, a) + X[13] + 0x4e0811a1), S44) + c; - a = RotateLeft((a + K(b, c, d) + X[4] + 0xf7537e82), S41) + b; - d = RotateLeft((d + K(a, b, c) + X[11] + 0xbd3af235), S42) + a; - c = RotateLeft((c + K(d, a, b) + X[2] + 0x2ad7d2bb), S43) + d; - b = RotateLeft((b + K(c, d, a) + X[9] + 0xeb86d391), S44) + c; - - H1 += a; - H2 += b; - H3 += c; - H4 += d; - - xOff = 0; - } - - public override IMemoable Copy() - { - return new MD5Digest(this); - } - - public override void Reset(IMemoable other) - { - MD5Digest d = (MD5Digest)other; - - CopyIn(d); - } - - } - -} - diff --git a/bc-sharp-crypto/src/crypto/digests/NonMemoableDigest.cs b/bc-sharp-crypto/src/crypto/digests/NonMemoableDigest.cs deleted file mode 100644 index 02c49b8..0000000 --- a/bc-sharp-crypto/src/crypto/digests/NonMemoableDigest.cs +++ /dev/null @@ -1,62 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Digests -{ - /** - * Wrapper removes exposure to the IMemoable interface on an IDigest implementation. - */ - public class NonMemoableDigest - : IDigest - { - protected readonly IDigest mBaseDigest; - - /** - * Base constructor. - * - * @param baseDigest underlying digest to use. - * @exception IllegalArgumentException if baseDigest is null - */ - public NonMemoableDigest(IDigest baseDigest) - { - if (baseDigest == null) - throw new ArgumentNullException("baseDigest"); - - this.mBaseDigest = baseDigest; - } - - public virtual string AlgorithmName - { - get { return mBaseDigest.AlgorithmName; } - } - - public virtual int GetDigestSize() - { - return mBaseDigest.GetDigestSize(); - } - - public virtual void Update(byte input) - { - mBaseDigest.Update(input); - } - - public virtual void BlockUpdate(byte[] input, int inOff, int len) - { - mBaseDigest.BlockUpdate(input, inOff, len); - } - - public virtual int DoFinal(byte[] output, int outOff) - { - return mBaseDigest.DoFinal(output, outOff); - } - - public virtual void Reset() - { - mBaseDigest.Reset(); - } - - public virtual int GetByteLength() - { - return mBaseDigest.GetByteLength(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/digests/NullDigest.cs b/bc-sharp-crypto/src/crypto/digests/NullDigest.cs deleted file mode 100644 index e598cb1..0000000 --- a/bc-sharp-crypto/src/crypto/digests/NullDigest.cs +++ /dev/null @@ -1,49 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Digests -{ - public class NullDigest : IDigest - { - private readonly MemoryStream bOut = new MemoryStream(); - - public string AlgorithmName - { - get { return "NULL"; } - } - - public int GetByteLength() - { - // TODO Is this okay? - return 0; - } - - public int GetDigestSize() - { - return (int) bOut.Length; - } - - public void Update(byte b) - { - bOut.WriteByte(b); - } - - public void BlockUpdate(byte[] inBytes, int inOff, int len) - { - bOut.Write(inBytes, inOff, len); - } - - public int DoFinal(byte[] outBytes, int outOff) - { - byte[] res = bOut.ToArray(); - res.CopyTo(outBytes, outOff); - Reset(); - return res.Length; - } - - public void Reset() - { - bOut.SetLength(0); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/digests/RipeMD128Digest.cs b/bc-sharp-crypto/src/crypto/digests/RipeMD128Digest.cs deleted file mode 100644 index e8a0331..0000000 --- a/bc-sharp-crypto/src/crypto/digests/RipeMD128Digest.cs +++ /dev/null @@ -1,484 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Digests -{ - /** - * implementation of RipeMD128 - */ - public class RipeMD128Digest - : GeneralDigest - { - private const int DigestLength = 16; - - private int H0, H1, H2, H3; // IV's - - private int[] X = new int[16]; - private int xOff; - - /** - * Standard constructor - */ - public RipeMD128Digest() - { - Reset(); - } - - /** - * Copy constructor. This will copy the state of the provided - * message digest. - */ - public RipeMD128Digest(RipeMD128Digest t) : base(t) - { - CopyIn(t); - } - - private void CopyIn(RipeMD128Digest t) - { - base.CopyIn(t); - - H0 = t.H0; - H1 = t.H1; - H2 = t.H2; - H3 = t.H3; - - Array.Copy(t.X, 0, X, 0, t.X.Length); - xOff = t.xOff; - } - - public override string AlgorithmName - { - get { return "RIPEMD128"; } - } - - public override int GetDigestSize() - { - return DigestLength; - } - - internal override void ProcessWord( - byte[] input, - int inOff) - { - X[xOff++] = (input[inOff] & 0xff) | ((input[inOff + 1] & 0xff) << 8) - | ((input[inOff + 2] & 0xff) << 16) | ((input[inOff + 3] & 0xff) << 24); - - if (xOff == 16) - { - ProcessBlock(); - } - } - - internal override void ProcessLength( - long bitLength) - { - if (xOff > 14) - { - ProcessBlock(); - } - - X[14] = (int)(bitLength & 0xffffffff); - X[15] = (int)((ulong) bitLength >> 32); - } - - private void UnpackWord( - int word, - byte[] outBytes, - int outOff) - { - outBytes[outOff] = (byte)word; - outBytes[outOff + 1] = (byte)((uint) word >> 8); - outBytes[outOff + 2] = (byte)((uint) word >> 16); - outBytes[outOff + 3] = (byte)((uint) word >> 24); - } - - public override int DoFinal( - byte[] output, - int outOff) - { - Finish(); - - UnpackWord(H0, output, outOff); - UnpackWord(H1, output, outOff + 4); - UnpackWord(H2, output, outOff + 8); - UnpackWord(H3, output, outOff + 12); - - Reset(); - - return DigestLength; - } - - /** - * reset the chaining variables to the IV values. - */ - public override void Reset() - { - base.Reset(); - - H0 = unchecked((int) 0x67452301); - H1 = unchecked((int) 0xefcdab89); - H2 = unchecked((int) 0x98badcfe); - H3 = unchecked((int) 0x10325476); - - xOff = 0; - - for (int i = 0; i != X.Length; i++) - { - X[i] = 0; - } - } - - /* - * rotate int x left n bits. - */ - private int RL( - int x, - int n) - { - return (x << n) | (int) ((uint) x >> (32 - n)); - } - - /* - * f1,f2,f3,f4 are the basic RipeMD128 functions. - */ - - /* - * F - */ - private int F1( - int x, - int y, - int z) - { - return x ^ y ^ z; - } - - /* - * G - */ - private int F2( - int x, - int y, - int z) - { - return (x & y) | (~x & z); - } - - /* - * H - */ - private int F3( - int x, - int y, - int z) - { - return (x | ~y) ^ z; - } - - /* - * I - */ - private int F4( - int x, - int y, - int z) - { - return (x & z) | (y & ~z); - } - - private int F1( - int a, - int b, - int c, - int d, - int x, - int s) - { - return RL(a + F1(b, c, d) + x, s); - } - - private int F2( - int a, - int b, - int c, - int d, - int x, - int s) - { - return RL(a + F2(b, c, d) + x + unchecked((int) 0x5a827999), s); - } - - private int F3( - int a, - int b, - int c, - int d, - int x, - int s) - { - return RL(a + F3(b, c, d) + x + unchecked((int) 0x6ed9eba1), s); - } - - private int F4( - int a, - int b, - int c, - int d, - int x, - int s) - { - return RL(a + F4(b, c, d) + x + unchecked((int) 0x8f1bbcdc), s); - } - - private int FF1( - int a, - int b, - int c, - int d, - int x, - int s) - { - return RL(a + F1(b, c, d) + x, s); - } - - private int FF2( - int a, - int b, - int c, - int d, - int x, - int s) - { - return RL(a + F2(b, c, d) + x + unchecked((int) 0x6d703ef3), s); - } - - private int FF3( - int a, - int b, - int c, - int d, - int x, - int s) - { - return RL(a + F3(b, c, d) + x + unchecked((int) 0x5c4dd124), s); - } - - private int FF4( - int a, - int b, - int c, - int d, - int x, - int s) - { - return RL(a + F4(b, c, d) + x + unchecked((int) 0x50a28be6), s); - } - - internal override void ProcessBlock() - { - int a, aa; - int b, bb; - int c, cc; - int d, dd; - - a = aa = H0; - b = bb = H1; - c = cc = H2; - d = dd = H3; - - // - // Round 1 - // - a = F1(a, b, c, d, X[ 0], 11); - d = F1(d, a, b, c, X[ 1], 14); - c = F1(c, d, a, b, X[ 2], 15); - b = F1(b, c, d, a, X[ 3], 12); - a = F1(a, b, c, d, X[ 4], 5); - d = F1(d, a, b, c, X[ 5], 8); - c = F1(c, d, a, b, X[ 6], 7); - b = F1(b, c, d, a, X[ 7], 9); - a = F1(a, b, c, d, X[ 8], 11); - d = F1(d, a, b, c, X[ 9], 13); - c = F1(c, d, a, b, X[10], 14); - b = F1(b, c, d, a, X[11], 15); - a = F1(a, b, c, d, X[12], 6); - d = F1(d, a, b, c, X[13], 7); - c = F1(c, d, a, b, X[14], 9); - b = F1(b, c, d, a, X[15], 8); - - // - // Round 2 - // - a = F2(a, b, c, d, X[ 7], 7); - d = F2(d, a, b, c, X[ 4], 6); - c = F2(c, d, a, b, X[13], 8); - b = F2(b, c, d, a, X[ 1], 13); - a = F2(a, b, c, d, X[10], 11); - d = F2(d, a, b, c, X[ 6], 9); - c = F2(c, d, a, b, X[15], 7); - b = F2(b, c, d, a, X[ 3], 15); - a = F2(a, b, c, d, X[12], 7); - d = F2(d, a, b, c, X[ 0], 12); - c = F2(c, d, a, b, X[ 9], 15); - b = F2(b, c, d, a, X[ 5], 9); - a = F2(a, b, c, d, X[ 2], 11); - d = F2(d, a, b, c, X[14], 7); - c = F2(c, d, a, b, X[11], 13); - b = F2(b, c, d, a, X[ 8], 12); - - // - // Round 3 - // - a = F3(a, b, c, d, X[ 3], 11); - d = F3(d, a, b, c, X[10], 13); - c = F3(c, d, a, b, X[14], 6); - b = F3(b, c, d, a, X[ 4], 7); - a = F3(a, b, c, d, X[ 9], 14); - d = F3(d, a, b, c, X[15], 9); - c = F3(c, d, a, b, X[ 8], 13); - b = F3(b, c, d, a, X[ 1], 15); - a = F3(a, b, c, d, X[ 2], 14); - d = F3(d, a, b, c, X[ 7], 8); - c = F3(c, d, a, b, X[ 0], 13); - b = F3(b, c, d, a, X[ 6], 6); - a = F3(a, b, c, d, X[13], 5); - d = F3(d, a, b, c, X[11], 12); - c = F3(c, d, a, b, X[ 5], 7); - b = F3(b, c, d, a, X[12], 5); - - // - // Round 4 - // - a = F4(a, b, c, d, X[ 1], 11); - d = F4(d, a, b, c, X[ 9], 12); - c = F4(c, d, a, b, X[11], 14); - b = F4(b, c, d, a, X[10], 15); - a = F4(a, b, c, d, X[ 0], 14); - d = F4(d, a, b, c, X[ 8], 15); - c = F4(c, d, a, b, X[12], 9); - b = F4(b, c, d, a, X[ 4], 8); - a = F4(a, b, c, d, X[13], 9); - d = F4(d, a, b, c, X[ 3], 14); - c = F4(c, d, a, b, X[ 7], 5); - b = F4(b, c, d, a, X[15], 6); - a = F4(a, b, c, d, X[14], 8); - d = F4(d, a, b, c, X[ 5], 6); - c = F4(c, d, a, b, X[ 6], 5); - b = F4(b, c, d, a, X[ 2], 12); - - // - // Parallel round 1 - // - aa = FF4(aa, bb, cc, dd, X[ 5], 8); - dd = FF4(dd, aa, bb, cc, X[14], 9); - cc = FF4(cc, dd, aa, bb, X[ 7], 9); - bb = FF4(bb, cc, dd, aa, X[ 0], 11); - aa = FF4(aa, bb, cc, dd, X[ 9], 13); - dd = FF4(dd, aa, bb, cc, X[ 2], 15); - cc = FF4(cc, dd, aa, bb, X[11], 15); - bb = FF4(bb, cc, dd, aa, X[ 4], 5); - aa = FF4(aa, bb, cc, dd, X[13], 7); - dd = FF4(dd, aa, bb, cc, X[ 6], 7); - cc = FF4(cc, dd, aa, bb, X[15], 8); - bb = FF4(bb, cc, dd, aa, X[ 8], 11); - aa = FF4(aa, bb, cc, dd, X[ 1], 14); - dd = FF4(dd, aa, bb, cc, X[10], 14); - cc = FF4(cc, dd, aa, bb, X[ 3], 12); - bb = FF4(bb, cc, dd, aa, X[12], 6); - - // - // Parallel round 2 - // - aa = FF3(aa, bb, cc, dd, X[ 6], 9); - dd = FF3(dd, aa, bb, cc, X[11], 13); - cc = FF3(cc, dd, aa, bb, X[ 3], 15); - bb = FF3(bb, cc, dd, aa, X[ 7], 7); - aa = FF3(aa, bb, cc, dd, X[ 0], 12); - dd = FF3(dd, aa, bb, cc, X[13], 8); - cc = FF3(cc, dd, aa, bb, X[ 5], 9); - bb = FF3(bb, cc, dd, aa, X[10], 11); - aa = FF3(aa, bb, cc, dd, X[14], 7); - dd = FF3(dd, aa, bb, cc, X[15], 7); - cc = FF3(cc, dd, aa, bb, X[ 8], 12); - bb = FF3(bb, cc, dd, aa, X[12], 7); - aa = FF3(aa, bb, cc, dd, X[ 4], 6); - dd = FF3(dd, aa, bb, cc, X[ 9], 15); - cc = FF3(cc, dd, aa, bb, X[ 1], 13); - bb = FF3(bb, cc, dd, aa, X[ 2], 11); - - // - // Parallel round 3 - // - aa = FF2(aa, bb, cc, dd, X[15], 9); - dd = FF2(dd, aa, bb, cc, X[ 5], 7); - cc = FF2(cc, dd, aa, bb, X[ 1], 15); - bb = FF2(bb, cc, dd, aa, X[ 3], 11); - aa = FF2(aa, bb, cc, dd, X[ 7], 8); - dd = FF2(dd, aa, bb, cc, X[14], 6); - cc = FF2(cc, dd, aa, bb, X[ 6], 6); - bb = FF2(bb, cc, dd, aa, X[ 9], 14); - aa = FF2(aa, bb, cc, dd, X[11], 12); - dd = FF2(dd, aa, bb, cc, X[ 8], 13); - cc = FF2(cc, dd, aa, bb, X[12], 5); - bb = FF2(bb, cc, dd, aa, X[ 2], 14); - aa = FF2(aa, bb, cc, dd, X[10], 13); - dd = FF2(dd, aa, bb, cc, X[ 0], 13); - cc = FF2(cc, dd, aa, bb, X[ 4], 7); - bb = FF2(bb, cc, dd, aa, X[13], 5); - - // - // Parallel round 4 - // - aa = FF1(aa, bb, cc, dd, X[ 8], 15); - dd = FF1(dd, aa, bb, cc, X[ 6], 5); - cc = FF1(cc, dd, aa, bb, X[ 4], 8); - bb = FF1(bb, cc, dd, aa, X[ 1], 11); - aa = FF1(aa, bb, cc, dd, X[ 3], 14); - dd = FF1(dd, aa, bb, cc, X[11], 14); - cc = FF1(cc, dd, aa, bb, X[15], 6); - bb = FF1(bb, cc, dd, aa, X[ 0], 14); - aa = FF1(aa, bb, cc, dd, X[ 5], 6); - dd = FF1(dd, aa, bb, cc, X[12], 9); - cc = FF1(cc, dd, aa, bb, X[ 2], 12); - bb = FF1(bb, cc, dd, aa, X[13], 9); - aa = FF1(aa, bb, cc, dd, X[ 9], 12); - dd = FF1(dd, aa, bb, cc, X[ 7], 5); - cc = FF1(cc, dd, aa, bb, X[10], 15); - bb = FF1(bb, cc, dd, aa, X[14], 8); - - dd += c + H1; // final result for H0 - - // - // combine the results - // - H1 = H2 + d + aa; - H2 = H3 + a + bb; - H3 = H0 + b + cc; - H0 = dd; - - // - // reset the offset and clean out the word buffer. - // - xOff = 0; - for (int i = 0; i != X.Length; i++) - { - X[i] = 0; - } - } - - public override IMemoable Copy() - { - return new RipeMD128Digest(this); - } - - public override void Reset(IMemoable other) - { - RipeMD128Digest d = (RipeMD128Digest)other; - - CopyIn(d); - } - - } - -} diff --git a/bc-sharp-crypto/src/crypto/digests/RipeMD160Digest.cs b/bc-sharp-crypto/src/crypto/digests/RipeMD160Digest.cs deleted file mode 100644 index af4aa44..0000000 --- a/bc-sharp-crypto/src/crypto/digests/RipeMD160Digest.cs +++ /dev/null @@ -1,445 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Digests -{ - /** - * implementation of RipeMD see, - * http://www.esat.kuleuven.ac.be/~bosselae/ripemd160.html - */ - public class RipeMD160Digest - : GeneralDigest - { - private const int DigestLength = 20; - - private int H0, H1, H2, H3, H4; // IV's - - private int[] X = new int[16]; - private int xOff; - - /** - * Standard constructor - */ - public RipeMD160Digest() - { - Reset(); - } - - /** - * Copy constructor. This will copy the state of the provided - * message digest. - */ - public RipeMD160Digest(RipeMD160Digest t) : base(t) - { - CopyIn(t); - } - - private void CopyIn(RipeMD160Digest t) - { - base.CopyIn(t); - - H0 = t.H0; - H1 = t.H1; - H2 = t.H2; - H3 = t.H3; - H4 = t.H4; - - Array.Copy(t.X, 0, X, 0, t.X.Length); - xOff = t.xOff; - } - - public override string AlgorithmName - { - get { return "RIPEMD160"; } - } - - public override int GetDigestSize() - { - return DigestLength; - } - - internal override void ProcessWord( - byte[] input, - int inOff) - { - X[xOff++] = (input[inOff] & 0xff) | ((input[inOff + 1] & 0xff) << 8) - | ((input[inOff + 2] & 0xff) << 16) | ((input[inOff + 3] & 0xff) << 24); - - if (xOff == 16) - { - ProcessBlock(); - } - } - - internal override void ProcessLength( - long bitLength) - { - if (xOff > 14) - { - ProcessBlock(); - } - - X[14] = (int)(bitLength & 0xffffffff); - X[15] = (int)((ulong) bitLength >> 32); - } - - private void UnpackWord( - int word, - byte[] outBytes, - int outOff) - { - outBytes[outOff] = (byte)word; - outBytes[outOff + 1] = (byte)((uint) word >> 8); - outBytes[outOff + 2] = (byte)((uint) word >> 16); - outBytes[outOff + 3] = (byte)((uint) word >> 24); - } - - public override int DoFinal( - byte[] output, - int outOff) - { - Finish(); - - UnpackWord(H0, output, outOff); - UnpackWord(H1, output, outOff + 4); - UnpackWord(H2, output, outOff + 8); - UnpackWord(H3, output, outOff + 12); - UnpackWord(H4, output, outOff + 16); - - Reset(); - - return DigestLength; - } - - /** - * reset the chaining variables to the IV values. - */ - public override void Reset() - { - base.Reset(); - - H0 = unchecked((int) 0x67452301); - H1 = unchecked((int) 0xefcdab89); - H2 = unchecked((int) 0x98badcfe); - H3 = unchecked((int) 0x10325476); - H4 = unchecked((int) 0xc3d2e1f0); - - xOff = 0; - - for (int i = 0; i != X.Length; i++) - { - X[i] = 0; - } - } - - /* - * rotate int x left n bits. - */ - private int RL( - int x, - int n) - { - return (x << n) | (int) ((uint) x >> (32 - n)); - } - - /* - * f1,f2,f3,f4,f5 are the basic RipeMD160 functions. - */ - - /* - * rounds 0-15 - */ - private int F1( - int x, - int y, - int z) - { - return x ^ y ^ z; - } - - /* - * rounds 16-31 - */ - private int F2( - int x, - int y, - int z) - { - return (x & y) | (~x & z); - } - - /* - * rounds 32-47 - */ - private int F3( - int x, - int y, - int z) - { - return (x | ~y) ^ z; - } - - /* - * rounds 48-63 - */ - private int F4( - int x, - int y, - int z) - { - return (x & z) | (y & ~z); - } - - /* - * rounds 64-79 - */ - private int F5( - int x, - int y, - int z) - { - return x ^ (y | ~z); - } - - internal override void ProcessBlock() - { - int a, aa; - int b, bb; - int c, cc; - int d, dd; - int e, ee; - - a = aa = H0; - b = bb = H1; - c = cc = H2; - d = dd = H3; - e = ee = H4; - - // - // Rounds 1 - 16 - // - // left - a = RL(a + F1(b,c,d) + X[ 0], 11) + e; c = RL(c, 10); - e = RL(e + F1(a,b,c) + X[ 1], 14) + d; b = RL(b, 10); - d = RL(d + F1(e,a,b) + X[ 2], 15) + c; a = RL(a, 10); - c = RL(c + F1(d,e,a) + X[ 3], 12) + b; e = RL(e, 10); - b = RL(b + F1(c,d,e) + X[ 4], 5) + a; d = RL(d, 10); - a = RL(a + F1(b,c,d) + X[ 5], 8) + e; c = RL(c, 10); - e = RL(e + F1(a,b,c) + X[ 6], 7) + d; b = RL(b, 10); - d = RL(d + F1(e,a,b) + X[ 7], 9) + c; a = RL(a, 10); - c = RL(c + F1(d,e,a) + X[ 8], 11) + b; e = RL(e, 10); - b = RL(b + F1(c,d,e) + X[ 9], 13) + a; d = RL(d, 10); - a = RL(a + F1(b,c,d) + X[10], 14) + e; c = RL(c, 10); - e = RL(e + F1(a,b,c) + X[11], 15) + d; b = RL(b, 10); - d = RL(d + F1(e,a,b) + X[12], 6) + c; a = RL(a, 10); - c = RL(c + F1(d,e,a) + X[13], 7) + b; e = RL(e, 10); - b = RL(b + F1(c,d,e) + X[14], 9) + a; d = RL(d, 10); - a = RL(a + F1(b,c,d) + X[15], 8) + e; c = RL(c, 10); - - // right - aa = RL(aa + F5(bb,cc,dd) + X[ 5] + unchecked((int) 0x50a28be6), 8) + ee; cc = RL(cc, 10); - ee = RL(ee + F5(aa,bb,cc) + X[14] + unchecked((int) 0x50a28be6), 9) + dd; bb = RL(bb, 10); - dd = RL(dd + F5(ee,aa,bb) + X[ 7] + unchecked((int) 0x50a28be6), 9) + cc; aa = RL(aa, 10); - cc = RL(cc + F5(dd,ee,aa) + X[ 0] + unchecked((int) 0x50a28be6), 11) + bb; ee = RL(ee, 10); - bb = RL(bb + F5(cc,dd,ee) + X[ 9] + unchecked((int) 0x50a28be6), 13) + aa; dd = RL(dd, 10); - aa = RL(aa + F5(bb,cc,dd) + X[ 2] + unchecked((int) 0x50a28be6), 15) + ee; cc = RL(cc, 10); - ee = RL(ee + F5(aa,bb,cc) + X[11] + unchecked((int) 0x50a28be6), 15) + dd; bb = RL(bb, 10); - dd = RL(dd + F5(ee,aa,bb) + X[ 4] + unchecked((int) 0x50a28be6), 5) + cc; aa = RL(aa, 10); - cc = RL(cc + F5(dd,ee,aa) + X[13] + unchecked((int) 0x50a28be6), 7) + bb; ee = RL(ee, 10); - bb = RL(bb + F5(cc,dd,ee) + X[ 6] + unchecked((int) 0x50a28be6), 7) + aa; dd = RL(dd, 10); - aa = RL(aa + F5(bb,cc,dd) + X[15] + unchecked((int) 0x50a28be6), 8) + ee; cc = RL(cc, 10); - ee = RL(ee + F5(aa,bb,cc) + X[ 8] + unchecked((int) 0x50a28be6), 11) + dd; bb = RL(bb, 10); - dd = RL(dd + F5(ee,aa,bb) + X[ 1] + unchecked((int) 0x50a28be6), 14) + cc; aa = RL(aa, 10); - cc = RL(cc + F5(dd,ee,aa) + X[10] + unchecked((int) 0x50a28be6), 14) + bb; ee = RL(ee, 10); - bb = RL(bb + F5(cc,dd,ee) + X[ 3] + unchecked((int) 0x50a28be6), 12) + aa; dd = RL(dd, 10); - aa = RL(aa + F5(bb,cc,dd) + X[12] + unchecked((int) 0x50a28be6), 6) + ee; cc = RL(cc, 10); - - // - // Rounds 16-31 - // - // left - e = RL(e + F2(a,b,c) + X[ 7] + unchecked((int) 0x5a827999), 7) + d; b = RL(b, 10); - d = RL(d + F2(e,a,b) + X[ 4] + unchecked((int) 0x5a827999), 6) + c; a = RL(a, 10); - c = RL(c + F2(d,e,a) + X[13] + unchecked((int) 0x5a827999), 8) + b; e = RL(e, 10); - b = RL(b + F2(c,d,e) + X[ 1] + unchecked((int) 0x5a827999), 13) + a; d = RL(d, 10); - a = RL(a + F2(b,c,d) + X[10] + unchecked((int) 0x5a827999), 11) + e; c = RL(c, 10); - e = RL(e + F2(a,b,c) + X[ 6] + unchecked((int) 0x5a827999), 9) + d; b = RL(b, 10); - d = RL(d + F2(e,a,b) + X[15] + unchecked((int) 0x5a827999), 7) + c; a = RL(a, 10); - c = RL(c + F2(d,e,a) + X[ 3] + unchecked((int) 0x5a827999), 15) + b; e = RL(e, 10); - b = RL(b + F2(c,d,e) + X[12] + unchecked((int) 0x5a827999), 7) + a; d = RL(d, 10); - a = RL(a + F2(b,c,d) + X[ 0] + unchecked((int) 0x5a827999), 12) + e; c = RL(c, 10); - e = RL(e + F2(a,b,c) + X[ 9] + unchecked((int) 0x5a827999), 15) + d; b = RL(b, 10); - d = RL(d + F2(e,a,b) + X[ 5] + unchecked((int) 0x5a827999), 9) + c; a = RL(a, 10); - c = RL(c + F2(d,e,a) + X[ 2] + unchecked((int) 0x5a827999), 11) + b; e = RL(e, 10); - b = RL(b + F2(c,d,e) + X[14] + unchecked((int) 0x5a827999), 7) + a; d = RL(d, 10); - a = RL(a + F2(b,c,d) + X[11] + unchecked((int) 0x5a827999), 13) + e; c = RL(c, 10); - e = RL(e + F2(a,b,c) + X[ 8] + unchecked((int) 0x5a827999), 12) + d; b = RL(b, 10); - - // right - ee = RL(ee + F4(aa,bb,cc) + X[ 6] + unchecked((int) 0x5c4dd124), 9) + dd; bb = RL(bb, 10); - dd = RL(dd + F4(ee,aa,bb) + X[11] + unchecked((int) 0x5c4dd124), 13) + cc; aa = RL(aa, 10); - cc = RL(cc + F4(dd,ee,aa) + X[ 3] + unchecked((int) 0x5c4dd124), 15) + bb; ee = RL(ee, 10); - bb = RL(bb + F4(cc,dd,ee) + X[ 7] + unchecked((int) 0x5c4dd124), 7) + aa; dd = RL(dd, 10); - aa = RL(aa + F4(bb,cc,dd) + X[ 0] + unchecked((int) 0x5c4dd124), 12) + ee; cc = RL(cc, 10); - ee = RL(ee + F4(aa,bb,cc) + X[13] + unchecked((int) 0x5c4dd124), 8) + dd; bb = RL(bb, 10); - dd = RL(dd + F4(ee,aa,bb) + X[ 5] + unchecked((int) 0x5c4dd124), 9) + cc; aa = RL(aa, 10); - cc = RL(cc + F4(dd,ee,aa) + X[10] + unchecked((int) 0x5c4dd124), 11) + bb; ee = RL(ee, 10); - bb = RL(bb + F4(cc,dd,ee) + X[14] + unchecked((int) 0x5c4dd124), 7) + aa; dd = RL(dd, 10); - aa = RL(aa + F4(bb,cc,dd) + X[15] + unchecked((int) 0x5c4dd124), 7) + ee; cc = RL(cc, 10); - ee = RL(ee + F4(aa,bb,cc) + X[ 8] + unchecked((int) 0x5c4dd124), 12) + dd; bb = RL(bb, 10); - dd = RL(dd + F4(ee,aa,bb) + X[12] + unchecked((int) 0x5c4dd124), 7) + cc; aa = RL(aa, 10); - cc = RL(cc + F4(dd,ee,aa) + X[ 4] + unchecked((int) 0x5c4dd124), 6) + bb; ee = RL(ee, 10); - bb = RL(bb + F4(cc,dd,ee) + X[ 9] + unchecked((int) 0x5c4dd124), 15) + aa; dd = RL(dd, 10); - aa = RL(aa + F4(bb,cc,dd) + X[ 1] + unchecked((int) 0x5c4dd124), 13) + ee; cc = RL(cc, 10); - ee = RL(ee + F4(aa,bb,cc) + X[ 2] + unchecked((int) 0x5c4dd124), 11) + dd; bb = RL(bb, 10); - - // - // Rounds 32-47 - // - // left - d = RL(d + F3(e,a,b) + X[ 3] + unchecked((int) 0x6ed9eba1), 11) + c; a = RL(a, 10); - c = RL(c + F3(d,e,a) + X[10] + unchecked((int) 0x6ed9eba1), 13) + b; e = RL(e, 10); - b = RL(b + F3(c,d,e) + X[14] + unchecked((int) 0x6ed9eba1), 6) + a; d = RL(d, 10); - a = RL(a + F3(b,c,d) + X[ 4] + unchecked((int) 0x6ed9eba1), 7) + e; c = RL(c, 10); - e = RL(e + F3(a,b,c) + X[ 9] + unchecked((int) 0x6ed9eba1), 14) + d; b = RL(b, 10); - d = RL(d + F3(e,a,b) + X[15] + unchecked((int) 0x6ed9eba1), 9) + c; a = RL(a, 10); - c = RL(c + F3(d,e,a) + X[ 8] + unchecked((int) 0x6ed9eba1), 13) + b; e = RL(e, 10); - b = RL(b + F3(c,d,e) + X[ 1] + unchecked((int) 0x6ed9eba1), 15) + a; d = RL(d, 10); - a = RL(a + F3(b,c,d) + X[ 2] + unchecked((int) 0x6ed9eba1), 14) + e; c = RL(c, 10); - e = RL(e + F3(a,b,c) + X[ 7] + unchecked((int) 0x6ed9eba1), 8) + d; b = RL(b, 10); - d = RL(d + F3(e,a,b) + X[ 0] + unchecked((int) 0x6ed9eba1), 13) + c; a = RL(a, 10); - c = RL(c + F3(d,e,a) + X[ 6] + unchecked((int) 0x6ed9eba1), 6) + b; e = RL(e, 10); - b = RL(b + F3(c,d,e) + X[13] + unchecked((int) 0x6ed9eba1), 5) + a; d = RL(d, 10); - a = RL(a + F3(b,c,d) + X[11] + unchecked((int) 0x6ed9eba1), 12) + e; c = RL(c, 10); - e = RL(e + F3(a,b,c) + X[ 5] + unchecked((int) 0x6ed9eba1), 7) + d; b = RL(b, 10); - d = RL(d + F3(e,a,b) + X[12] + unchecked((int) 0x6ed9eba1), 5) + c; a = RL(a, 10); - - // right - dd = RL(dd + F3(ee,aa,bb) + X[15] + unchecked((int) 0x6d703ef3), 9) + cc; aa = RL(aa, 10); - cc = RL(cc + F3(dd,ee,aa) + X[ 5] + unchecked((int) 0x6d703ef3), 7) + bb; ee = RL(ee, 10); - bb = RL(bb + F3(cc,dd,ee) + X[ 1] + unchecked((int) 0x6d703ef3), 15) + aa; dd = RL(dd, 10); - aa = RL(aa + F3(bb,cc,dd) + X[ 3] + unchecked((int) 0x6d703ef3), 11) + ee; cc = RL(cc, 10); - ee = RL(ee + F3(aa,bb,cc) + X[ 7] + unchecked((int) 0x6d703ef3), 8) + dd; bb = RL(bb, 10); - dd = RL(dd + F3(ee,aa,bb) + X[14] + unchecked((int) 0x6d703ef3), 6) + cc; aa = RL(aa, 10); - cc = RL(cc + F3(dd,ee,aa) + X[ 6] + unchecked((int) 0x6d703ef3), 6) + bb; ee = RL(ee, 10); - bb = RL(bb + F3(cc,dd,ee) + X[ 9] + unchecked((int) 0x6d703ef3), 14) + aa; dd = RL(dd, 10); - aa = RL(aa + F3(bb,cc,dd) + X[11] + unchecked((int) 0x6d703ef3), 12) + ee; cc = RL(cc, 10); - ee = RL(ee + F3(aa,bb,cc) + X[ 8] + unchecked((int) 0x6d703ef3), 13) + dd; bb = RL(bb, 10); - dd = RL(dd + F3(ee,aa,bb) + X[12] + unchecked((int) 0x6d703ef3), 5) + cc; aa = RL(aa, 10); - cc = RL(cc + F3(dd,ee,aa) + X[ 2] + unchecked((int) 0x6d703ef3), 14) + bb; ee = RL(ee, 10); - bb = RL(bb + F3(cc,dd,ee) + X[10] + unchecked((int) 0x6d703ef3), 13) + aa; dd = RL(dd, 10); - aa = RL(aa + F3(bb,cc,dd) + X[ 0] + unchecked((int) 0x6d703ef3), 13) + ee; cc = RL(cc, 10); - ee = RL(ee + F3(aa,bb,cc) + X[ 4] + unchecked((int) 0x6d703ef3), 7) + dd; bb = RL(bb, 10); - dd = RL(dd + F3(ee,aa,bb) + X[13] + unchecked((int) 0x6d703ef3), 5) + cc; aa = RL(aa, 10); - - // - // Rounds 48-63 - // - // left - c = RL(c + F4(d,e,a) + X[ 1] + unchecked((int) 0x8f1bbcdc), 11) + b; e = RL(e, 10); - b = RL(b + F4(c,d,e) + X[ 9] + unchecked((int) 0x8f1bbcdc), 12) + a; d = RL(d, 10); - a = RL(a + F4(b,c,d) + X[11] + unchecked((int) 0x8f1bbcdc), 14) + e; c = RL(c, 10); - e = RL(e + F4(a,b,c) + X[10] + unchecked((int) 0x8f1bbcdc), 15) + d; b = RL(b, 10); - d = RL(d + F4(e,a,b) + X[ 0] + unchecked((int) 0x8f1bbcdc), 14) + c; a = RL(a, 10); - c = RL(c + F4(d,e,a) + X[ 8] + unchecked((int) 0x8f1bbcdc), 15) + b; e = RL(e, 10); - b = RL(b + F4(c,d,e) + X[12] + unchecked((int) 0x8f1bbcdc), 9) + a; d = RL(d, 10); - a = RL(a + F4(b,c,d) + X[ 4] + unchecked((int) 0x8f1bbcdc), 8) + e; c = RL(c, 10); - e = RL(e + F4(a,b,c) + X[13] + unchecked((int) 0x8f1bbcdc), 9) + d; b = RL(b, 10); - d = RL(d + F4(e,a,b) + X[ 3] + unchecked((int) 0x8f1bbcdc), 14) + c; a = RL(a, 10); - c = RL(c + F4(d,e,a) + X[ 7] + unchecked((int) 0x8f1bbcdc), 5) + b; e = RL(e, 10); - b = RL(b + F4(c,d,e) + X[15] + unchecked((int) 0x8f1bbcdc), 6) + a; d = RL(d, 10); - a = RL(a + F4(b,c,d) + X[14] + unchecked((int) 0x8f1bbcdc), 8) + e; c = RL(c, 10); - e = RL(e + F4(a,b,c) + X[ 5] + unchecked((int) 0x8f1bbcdc), 6) + d; b = RL(b, 10); - d = RL(d + F4(e,a,b) + X[ 6] + unchecked((int) 0x8f1bbcdc), 5) + c; a = RL(a, 10); - c = RL(c + F4(d,e,a) + X[ 2] + unchecked((int) 0x8f1bbcdc), 12) + b; e = RL(e, 10); - - // right - cc = RL(cc + F2(dd,ee,aa) + X[ 8] + unchecked((int) 0x7a6d76e9), 15) + bb; ee = RL(ee, 10); - bb = RL(bb + F2(cc,dd,ee) + X[ 6] + unchecked((int) 0x7a6d76e9), 5) + aa; dd = RL(dd, 10); - aa = RL(aa + F2(bb,cc,dd) + X[ 4] + unchecked((int) 0x7a6d76e9), 8) + ee; cc = RL(cc, 10); - ee = RL(ee + F2(aa,bb,cc) + X[ 1] + unchecked((int) 0x7a6d76e9), 11) + dd; bb = RL(bb, 10); - dd = RL(dd + F2(ee,aa,bb) + X[ 3] + unchecked((int) 0x7a6d76e9), 14) + cc; aa = RL(aa, 10); - cc = RL(cc + F2(dd,ee,aa) + X[11] + unchecked((int) 0x7a6d76e9), 14) + bb; ee = RL(ee, 10); - bb = RL(bb + F2(cc,dd,ee) + X[15] + unchecked((int) 0x7a6d76e9), 6) + aa; dd = RL(dd, 10); - aa = RL(aa + F2(bb,cc,dd) + X[ 0] + unchecked((int) 0x7a6d76e9), 14) + ee; cc = RL(cc, 10); - ee = RL(ee + F2(aa,bb,cc) + X[ 5] + unchecked((int) 0x7a6d76e9), 6) + dd; bb = RL(bb, 10); - dd = RL(dd + F2(ee,aa,bb) + X[12] + unchecked((int) 0x7a6d76e9), 9) + cc; aa = RL(aa, 10); - cc = RL(cc + F2(dd,ee,aa) + X[ 2] + unchecked((int) 0x7a6d76e9), 12) + bb; ee = RL(ee, 10); - bb = RL(bb + F2(cc,dd,ee) + X[13] + unchecked((int) 0x7a6d76e9), 9) + aa; dd = RL(dd, 10); - aa = RL(aa + F2(bb,cc,dd) + X[ 9] + unchecked((int) 0x7a6d76e9), 12) + ee; cc = RL(cc, 10); - ee = RL(ee + F2(aa,bb,cc) + X[ 7] + unchecked((int) 0x7a6d76e9), 5) + dd; bb = RL(bb, 10); - dd = RL(dd + F2(ee,aa,bb) + X[10] + unchecked((int) 0x7a6d76e9), 15) + cc; aa = RL(aa, 10); - cc = RL(cc + F2(dd,ee,aa) + X[14] + unchecked((int) 0x7a6d76e9), 8) + bb; ee = RL(ee, 10); - - // - // Rounds 64-79 - // - // left - b = RL(b + F5(c,d,e) + X[ 4] + unchecked((int) 0xa953fd4e), 9) + a; d = RL(d, 10); - a = RL(a + F5(b,c,d) + X[ 0] + unchecked((int) 0xa953fd4e), 15) + e; c = RL(c, 10); - e = RL(e + F5(a,b,c) + X[ 5] + unchecked((int) 0xa953fd4e), 5) + d; b = RL(b, 10); - d = RL(d + F5(e,a,b) + X[ 9] + unchecked((int) 0xa953fd4e), 11) + c; a = RL(a, 10); - c = RL(c + F5(d,e,a) + X[ 7] + unchecked((int) 0xa953fd4e), 6) + b; e = RL(e, 10); - b = RL(b + F5(c,d,e) + X[12] + unchecked((int) 0xa953fd4e), 8) + a; d = RL(d, 10); - a = RL(a + F5(b,c,d) + X[ 2] + unchecked((int) 0xa953fd4e), 13) + e; c = RL(c, 10); - e = RL(e + F5(a,b,c) + X[10] + unchecked((int) 0xa953fd4e), 12) + d; b = RL(b, 10); - d = RL(d + F5(e,a,b) + X[14] + unchecked((int) 0xa953fd4e), 5) + c; a = RL(a, 10); - c = RL(c + F5(d,e,a) + X[ 1] + unchecked((int) 0xa953fd4e), 12) + b; e = RL(e, 10); - b = RL(b + F5(c,d,e) + X[ 3] + unchecked((int) 0xa953fd4e), 13) + a; d = RL(d, 10); - a = RL(a + F5(b,c,d) + X[ 8] + unchecked((int) 0xa953fd4e), 14) + e; c = RL(c, 10); - e = RL(e + F5(a,b,c) + X[11] + unchecked((int) 0xa953fd4e), 11) + d; b = RL(b, 10); - d = RL(d + F5(e,a,b) + X[ 6] + unchecked((int) 0xa953fd4e), 8) + c; a = RL(a, 10); - c = RL(c + F5(d,e,a) + X[15] + unchecked((int) 0xa953fd4e), 5) + b; e = RL(e, 10); - b = RL(b + F5(c,d,e) + X[13] + unchecked((int) 0xa953fd4e), 6) + a; d = RL(d, 10); - - // right - bb = RL(bb + F1(cc,dd,ee) + X[12], 8) + aa; dd = RL(dd, 10); - aa = RL(aa + F1(bb,cc,dd) + X[15], 5) + ee; cc = RL(cc, 10); - ee = RL(ee + F1(aa,bb,cc) + X[10], 12) + dd; bb = RL(bb, 10); - dd = RL(dd + F1(ee,aa,bb) + X[ 4], 9) + cc; aa = RL(aa, 10); - cc = RL(cc + F1(dd,ee,aa) + X[ 1], 12) + bb; ee = RL(ee, 10); - bb = RL(bb + F1(cc,dd,ee) + X[ 5], 5) + aa; dd = RL(dd, 10); - aa = RL(aa + F1(bb,cc,dd) + X[ 8], 14) + ee; cc = RL(cc, 10); - ee = RL(ee + F1(aa,bb,cc) + X[ 7], 6) + dd; bb = RL(bb, 10); - dd = RL(dd + F1(ee,aa,bb) + X[ 6], 8) + cc; aa = RL(aa, 10); - cc = RL(cc + F1(dd,ee,aa) + X[ 2], 13) + bb; ee = RL(ee, 10); - bb = RL(bb + F1(cc,dd,ee) + X[13], 6) + aa; dd = RL(dd, 10); - aa = RL(aa + F1(bb,cc,dd) + X[14], 5) + ee; cc = RL(cc, 10); - ee = RL(ee + F1(aa,bb,cc) + X[ 0], 15) + dd; bb = RL(bb, 10); - dd = RL(dd + F1(ee,aa,bb) + X[ 3], 13) + cc; aa = RL(aa, 10); - cc = RL(cc + F1(dd,ee,aa) + X[ 9], 11) + bb; ee = RL(ee, 10); - bb = RL(bb + F1(cc,dd,ee) + X[11], 11) + aa; dd = RL(dd, 10); - - dd += c + H1; - H1 = H2 + d + ee; - H2 = H3 + e + aa; - H3 = H4 + a + bb; - H4 = H0 + b + cc; - H0 = dd; - - // - // reset the offset and clean out the word buffer. - // - xOff = 0; - for (int i = 0; i != X.Length; i++) - { - X[i] = 0; - } - } - - public override IMemoable Copy() - { - return new RipeMD160Digest(this); - } - - public override void Reset(IMemoable other) - { - RipeMD160Digest d = (RipeMD160Digest)other; - - CopyIn(d); - } - - } - -} diff --git a/bc-sharp-crypto/src/crypto/digests/RipeMD256Digest.cs b/bc-sharp-crypto/src/crypto/digests/RipeMD256Digest.cs deleted file mode 100644 index 3062757..0000000 --- a/bc-sharp-crypto/src/crypto/digests/RipeMD256Digest.cs +++ /dev/null @@ -1,430 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Digests -{ - /// - ///

Implementation of RipeMD256.

- ///

Note: this algorithm offers the same level of security as RipeMD128.

- /// - public class RipeMD256Digest - : GeneralDigest - { - public override string AlgorithmName - { - get { return "RIPEMD256"; } - } - - public override int GetDigestSize() - { - return DigestLength; - } - - private const int DigestLength = 32; - - private int H0, H1, H2, H3, H4, H5, H6, H7; // IV's - - private int[] X = new int[16]; - private int xOff; - - /// Standard constructor - public RipeMD256Digest() - { - Reset(); - } - - /// Copy constructor. This will copy the state of the provided - /// message digest. - /// - public RipeMD256Digest(RipeMD256Digest t):base(t) - { - CopyIn(t); - } - - private void CopyIn(RipeMD256Digest t) - { - base.CopyIn(t); - - H0 = t.H0; - H1 = t.H1; - H2 = t.H2; - H3 = t.H3; - H4 = t.H4; - H5 = t.H5; - H6 = t.H6; - H7 = t.H7; - - Array.Copy(t.X, 0, X, 0, t.X.Length); - xOff = t.xOff; - } - - internal override void ProcessWord( - byte[] input, - int inOff) - { - X[xOff++] = (input[inOff] & 0xff) | ((input[inOff + 1] & 0xff) << 8) - | ((input[inOff + 2] & 0xff) << 16) | ((input[inOff + 3] & 0xff) << 24); - - if (xOff == 16) - { - ProcessBlock(); - } - } - - internal override void ProcessLength( - long bitLength) - { - if (xOff > 14) - { - ProcessBlock(); - } - - X[14] = (int)(bitLength & 0xffffffff); - X[15] = (int)((ulong)bitLength >> 32); - } - - private void UnpackWord( - int word, - byte[] outBytes, - int outOff) - { - outBytes[outOff] = (byte)(uint)word; - outBytes[outOff + 1] = (byte)((uint)word >> 8); - outBytes[outOff + 2] = (byte)((uint)word >> 16); - outBytes[outOff + 3] = (byte)((uint)word >> 24); - } - - public override int DoFinal(byte[] output, int outOff) - { - Finish(); - - UnpackWord(H0, output, outOff); - UnpackWord(H1, output, outOff + 4); - UnpackWord(H2, output, outOff + 8); - UnpackWord(H3, output, outOff + 12); - UnpackWord(H4, output, outOff + 16); - UnpackWord(H5, output, outOff + 20); - UnpackWord(H6, output, outOff + 24); - UnpackWord(H7, output, outOff + 28); - - Reset(); - - return DigestLength; - } - - /// reset the chaining variables to the IV values. - public override void Reset() - { - base.Reset(); - - H0 = unchecked((int)0x67452301); - H1 = unchecked((int)0xefcdab89); - H2 = unchecked((int)0x98badcfe); - H3 = unchecked((int)0x10325476); - H4 = unchecked((int)0x76543210); - H5 = unchecked((int)0xFEDCBA98); - H6 = unchecked((int)0x89ABCDEF); - H7 = unchecked((int)0x01234567); - - xOff = 0; - - for (int i = 0; i != X.Length; i++) - { - X[i] = 0; - } - } - - /* - * rotate int x left n bits. - */ - private int RL( - int x, - int n) - { - return (x << n) | (int)((uint)x >> (32 - n)); - } - - /* - * f1,f2,f3,f4 are the basic RipeMD128 functions. - */ - - /* - * F - */ - private int F1(int x, int y, int z) - { - return x ^ y ^ z; - } - - /* - * G - */ - private int F2(int x, int y, int z) - { - return (x & y) | (~ x & z); - } - - /* - * H - */ - private int F3(int x, int y, int z) - { - return (x | ~ y) ^ z; - } - - /* - * I - */ - private int F4(int x, int y, int z) - { - return (x & z) | (y & ~ z); - } - - private int F1(int a, int b, int c, int d, int x, int s) - { - return RL(a + F1(b, c, d) + x, s); - } - - private int F2(int a, int b, int c, int d, int x, int s) - { - return RL(a + F2(b, c, d) + x + unchecked((int)0x5a827999), s); - } - - private int F3(int a, int b, int c, int d, int x, int s) - { - return RL(a + F3(b, c, d) + x + unchecked((int)0x6ed9eba1), s); - } - - private int F4(int a, int b, int c, int d, int x, int s) - { - return RL(a + F4(b, c, d) + x + unchecked((int)0x8f1bbcdc), s); - } - - private int FF1(int a, int b, int c, int d, int x, int s) - { - return RL(a + F1(b, c, d) + x, s); - } - - private int FF2(int a, int b, int c, int d, int x, int s) - { - return RL(a + F2(b, c, d) + x + unchecked((int)0x6d703ef3), s); - } - - private int FF3(int a, int b, int c, int d, int x, int s) - { - return RL(a + F3(b, c, d) + x + unchecked((int)0x5c4dd124), s); - } - - private int FF4(int a, int b, int c, int d, int x, int s) - { - return RL(a + F4(b, c, d) + x + unchecked((int)0x50a28be6), s); - } - - internal override void ProcessBlock() - { - int a, aa; - int b, bb; - int c, cc; - int d, dd; - int t; - - a = H0; - b = H1; - c = H2; - d = H3; - aa = H4; - bb = H5; - cc = H6; - dd = H7; - - // - // Round 1 - // - - a = F1(a, b, c, d, X[0], 11); - d = F1(d, a, b, c, X[1], 14); - c = F1(c, d, a, b, X[2], 15); - b = F1(b, c, d, a, X[3], 12); - a = F1(a, b, c, d, X[4], 5); - d = F1(d, a, b, c, X[5], 8); - c = F1(c, d, a, b, X[6], 7); - b = F1(b, c, d, a, X[7], 9); - a = F1(a, b, c, d, X[8], 11); - d = F1(d, a, b, c, X[9], 13); - c = F1(c, d, a, b, X[10], 14); - b = F1(b, c, d, a, X[11], 15); - a = F1(a, b, c, d, X[12], 6); - d = F1(d, a, b, c, X[13], 7); - c = F1(c, d, a, b, X[14], 9); - b = F1(b, c, d, a, X[15], 8); - - aa = FF4(aa, bb, cc, dd, X[5], 8); - dd = FF4(dd, aa, bb, cc, X[14], 9); - cc = FF4(cc, dd, aa, bb, X[7], 9); - bb = FF4(bb, cc, dd, aa, X[0], 11); - aa = FF4(aa, bb, cc, dd, X[9], 13); - dd = FF4(dd, aa, bb, cc, X[2], 15); - cc = FF4(cc, dd, aa, bb, X[11], 15); - bb = FF4(bb, cc, dd, aa, X[4], 5); - aa = FF4(aa, bb, cc, dd, X[13], 7); - dd = FF4(dd, aa, bb, cc, X[6], 7); - cc = FF4(cc, dd, aa, bb, X[15], 8); - bb = FF4(bb, cc, dd, aa, X[8], 11); - aa = FF4(aa, bb, cc, dd, X[1], 14); - dd = FF4(dd, aa, bb, cc, X[10], 14); - cc = FF4(cc, dd, aa, bb, X[3], 12); - bb = FF4(bb, cc, dd, aa, X[12], 6); - - t = a; a = aa; aa = t; - - // - // Round 2 - // - a = F2(a, b, c, d, X[7], 7); - d = F2(d, a, b, c, X[4], 6); - c = F2(c, d, a, b, X[13], 8); - b = F2(b, c, d, a, X[1], 13); - a = F2(a, b, c, d, X[10], 11); - d = F2(d, a, b, c, X[6], 9); - c = F2(c, d, a, b, X[15], 7); - b = F2(b, c, d, a, X[3], 15); - a = F2(a, b, c, d, X[12], 7); - d = F2(d, a, b, c, X[0], 12); - c = F2(c, d, a, b, X[9], 15); - b = F2(b, c, d, a, X[5], 9); - a = F2(a, b, c, d, X[2], 11); - d = F2(d, a, b, c, X[14], 7); - c = F2(c, d, a, b, X[11], 13); - b = F2(b, c, d, a, X[8], 12); - - aa = FF3(aa, bb, cc, dd, X[6], 9); - dd = FF3(dd, aa, bb, cc, X[11], 13); - cc = FF3(cc, dd, aa, bb, X[3], 15); - bb = FF3(bb, cc, dd, aa, X[7], 7); - aa = FF3(aa, bb, cc, dd, X[0], 12); - dd = FF3(dd, aa, bb, cc, X[13], 8); - cc = FF3(cc, dd, aa, bb, X[5], 9); - bb = FF3(bb, cc, dd, aa, X[10], 11); - aa = FF3(aa, bb, cc, dd, X[14], 7); - dd = FF3(dd, aa, bb, cc, X[15], 7); - cc = FF3(cc, dd, aa, bb, X[8], 12); - bb = FF3(bb, cc, dd, aa, X[12], 7); - aa = FF3(aa, bb, cc, dd, X[4], 6); - dd = FF3(dd, aa, bb, cc, X[9], 15); - cc = FF3(cc, dd, aa, bb, X[1], 13); - bb = FF3(bb, cc, dd, aa, X[2], 11); - - t = b; b = bb; bb = t; - - // - // Round 3 - // - a = F3(a, b, c, d, X[3], 11); - d = F3(d, a, b, c, X[10], 13); - c = F3(c, d, a, b, X[14], 6); - b = F3(b, c, d, a, X[4], 7); - a = F3(a, b, c, d, X[9], 14); - d = F3(d, a, b, c, X[15], 9); - c = F3(c, d, a, b, X[8], 13); - b = F3(b, c, d, a, X[1], 15); - a = F3(a, b, c, d, X[2], 14); - d = F3(d, a, b, c, X[7], 8); - c = F3(c, d, a, b, X[0], 13); - b = F3(b, c, d, a, X[6], 6); - a = F3(a, b, c, d, X[13], 5); - d = F3(d, a, b, c, X[11], 12); - c = F3(c, d, a, b, X[5], 7); - b = F3(b, c, d, a, X[12], 5); - - aa = FF2(aa, bb, cc, dd, X[15], 9); - dd = FF2(dd, aa, bb, cc, X[5], 7); - cc = FF2(cc, dd, aa, bb, X[1], 15); - bb = FF2(bb, cc, dd, aa, X[3], 11); - aa = FF2(aa, bb, cc, dd, X[7], 8); - dd = FF2(dd, aa, bb, cc, X[14], 6); - cc = FF2(cc, dd, aa, bb, X[6], 6); - bb = FF2(bb, cc, dd, aa, X[9], 14); - aa = FF2(aa, bb, cc, dd, X[11], 12); - dd = FF2(dd, aa, bb, cc, X[8], 13); - cc = FF2(cc, dd, aa, bb, X[12], 5); - bb = FF2(bb, cc, dd, aa, X[2], 14); - aa = FF2(aa, bb, cc, dd, X[10], 13); - dd = FF2(dd, aa, bb, cc, X[0], 13); - cc = FF2(cc, dd, aa, bb, X[4], 7); - bb = FF2(bb, cc, dd, aa, X[13], 5); - - t = c; c = cc; cc = t; - - // - // Round 4 - // - a = F4(a, b, c, d, X[1], 11); - d = F4(d, a, b, c, X[9], 12); - c = F4(c, d, a, b, X[11], 14); - b = F4(b, c, d, a, X[10], 15); - a = F4(a, b, c, d, X[0], 14); - d = F4(d, a, b, c, X[8], 15); - c = F4(c, d, a, b, X[12], 9); - b = F4(b, c, d, a, X[4], 8); - a = F4(a, b, c, d, X[13], 9); - d = F4(d, a, b, c, X[3], 14); - c = F4(c, d, a, b, X[7], 5); - b = F4(b, c, d, a, X[15], 6); - a = F4(a, b, c, d, X[14], 8); - d = F4(d, a, b, c, X[5], 6); - c = F4(c, d, a, b, X[6], 5); - b = F4(b, c, d, a, X[2], 12); - - aa = FF1(aa, bb, cc, dd, X[8], 15); - dd = FF1(dd, aa, bb, cc, X[6], 5); - cc = FF1(cc, dd, aa, bb, X[4], 8); - bb = FF1(bb, cc, dd, aa, X[1], 11); - aa = FF1(aa, bb, cc, dd, X[3], 14); - dd = FF1(dd, aa, bb, cc, X[11], 14); - cc = FF1(cc, dd, aa, bb, X[15], 6); - bb = FF1(bb, cc, dd, aa, X[0], 14); - aa = FF1(aa, bb, cc, dd, X[5], 6); - dd = FF1(dd, aa, bb, cc, X[12], 9); - cc = FF1(cc, dd, aa, bb, X[2], 12); - bb = FF1(bb, cc, dd, aa, X[13], 9); - aa = FF1(aa, bb, cc, dd, X[9], 12); - dd = FF1(dd, aa, bb, cc, X[7], 5); - cc = FF1(cc, dd, aa, bb, X[10], 15); - bb = FF1(bb, cc, dd, aa, X[14], 8); - - t = d; d = dd; dd = t; - - H0 += a; - H1 += b; - H2 += c; - H3 += d; - H4 += aa; - H5 += bb; - H6 += cc; - H7 += dd; - - // - // reset the offset and clean out the word buffer. - // - xOff = 0; - for (int i = 0; i != X.Length; i++) - { - X[i] = 0; - } - } - - public override IMemoable Copy() - { - return new RipeMD256Digest(this); - } - - public override void Reset(IMemoable other) - { - RipeMD256Digest d = (RipeMD256Digest)other; - - CopyIn(d); - } - - } -} diff --git a/bc-sharp-crypto/src/crypto/digests/RipeMD320Digest.cs b/bc-sharp-crypto/src/crypto/digests/RipeMD320Digest.cs deleted file mode 100644 index 767d74d..0000000 --- a/bc-sharp-crypto/src/crypto/digests/RipeMD320Digest.cs +++ /dev/null @@ -1,459 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Digests -{ - /// - ///

Implementation of RipeMD 320.

- ///

Note: this algorithm offers the same level of security as RipeMD160.

- /// - public class RipeMD320Digest - : GeneralDigest - { - public override string AlgorithmName - { - get { return "RIPEMD320"; } - } - - public override int GetDigestSize() - { - return DigestLength; - } - - private const int DigestLength = 40; - - private int H0, H1, H2, H3, H4, H5, H6, H7, H8, H9; // IV's - - private int[] X = new int[16]; - private int xOff; - - /// Standard constructor - public RipeMD320Digest() - { - Reset(); - } - - /// Copy constructor. This will copy the state of the provided - /// message digest. - /// - public RipeMD320Digest(RipeMD320Digest t) - : base(t) - { - CopyIn(t); - } - - private void CopyIn(RipeMD320Digest t) - { - base.CopyIn(t); - - H0 = t.H0; - H1 = t.H1; - H2 = t.H2; - H3 = t.H3; - H4 = t.H4; - H5 = t.H5; - H6 = t.H6; - H7 = t.H7; - H8 = t.H8; - H9 = t.H9; - - Array.Copy(t.X, 0, X, 0, t.X.Length); - xOff = t.xOff; - } - - internal override void ProcessWord( - byte[] input, - int inOff) - { - X[xOff++] = (input[inOff] & 0xff) | ((input[inOff + 1] & 0xff) << 8) - | ((input[inOff + 2] & 0xff) << 16) | ((input[inOff + 3] & 0xff) << 24); - - if (xOff == 16) - { - ProcessBlock(); - } - } - - internal override void ProcessLength( - long bitLength) - { - if (xOff > 14) - { - ProcessBlock(); - } - - X[14] = (int)(bitLength & 0xffffffff); - X[15] = (int)((ulong)bitLength >> 32); - } - - private void UnpackWord( - int word, - byte[] outBytes, - int outOff) - { - outBytes[outOff] = (byte)word; - outBytes[outOff + 1] = (byte)((uint)word >> 8); - outBytes[outOff + 2] = (byte)((uint)word >> 16); - outBytes[outOff + 3] = (byte)((uint)word >> 24); - } - - public override int DoFinal(byte[] output, int outOff) - { - Finish(); - - UnpackWord(H0, output, outOff); - UnpackWord(H1, output, outOff + 4); - UnpackWord(H2, output, outOff + 8); - UnpackWord(H3, output, outOff + 12); - UnpackWord(H4, output, outOff + 16); - UnpackWord(H5, output, outOff + 20); - UnpackWord(H6, output, outOff + 24); - UnpackWord(H7, output, outOff + 28); - UnpackWord(H8, output, outOff + 32); - UnpackWord(H9, output, outOff + 36); - - Reset(); - - return DigestLength; - } - - /// reset the chaining variables to the IV values. - public override void Reset() - { - base.Reset(); - - H0 = unchecked((int) 0x67452301); - H1 = unchecked((int) 0xefcdab89); - H2 = unchecked((int) 0x98badcfe); - H3 = unchecked((int) 0x10325476); - H4 = unchecked((int) 0xc3d2e1f0); - H5 = unchecked((int) 0x76543210); - H6 = unchecked((int) 0xFEDCBA98); - H7 = unchecked((int) 0x89ABCDEF); - H8 = unchecked((int) 0x01234567); - H9 = unchecked((int) 0x3C2D1E0F); - - xOff = 0; - - for (int i = 0; i != X.Length; i++) - { - X[i] = 0; - } - } - - /* - * rotate int x left n bits. - */ - private int RL( - int x, - int n) - { - return (x << n) | (int)(((uint)x) >> (32 - n)); - } - - /* - * f1,f2,f3,f4,f5 are the basic RipeMD160 functions. - */ - - /* - * rounds 0-15 - */ - private int F1(int x, int y, int z) - { - return x ^ y ^ z; - } - - /* - * rounds 16-31 - */ - private int F2(int x, int y, int z) - { - return (x & y) | (~ x & z); - } - - /* - * rounds 32-47 - */ - private int F3(int x, int y, int z) - { - return (x | ~ y) ^ z; - } - - /* - * rounds 48-63 - */ - private int F4(int x, int y, int z) - { - return (x & z) | (y & ~ z); - } - - /* - * rounds 64-79 - */ - private int F5(int x, int y, int z) - { - return x ^ (y | ~z); - } - - internal override void ProcessBlock() - { - int a, aa; - int b, bb; - int c, cc; - int d, dd; - int e, ee; - int t; - - a = H0; - b = H1; - c = H2; - d = H3; - e = H4; - aa = H5; - bb = H6; - cc = H7; - dd = H8; - ee = H9; - - // - // Rounds 1 - 16 - // - // left - a = RL(a + F1(b, c, d) + X[0], 11) + e; c = RL(c, 10); - e = RL(e + F1(a, b, c) + X[1], 14) + d; b = RL(b, 10); - d = RL(d + F1(e, a, b) + X[2], 15) + c; a = RL(a, 10); - c = RL(c + F1(d, e, a) + X[3], 12) + b; e = RL(e, 10); - b = RL(b + F1(c, d, e) + X[4], 5) + a; d = RL(d, 10); - a = RL(a + F1(b, c, d) + X[5], 8) + e; c = RL(c, 10); - e = RL(e + F1(a, b, c) + X[6], 7) + d; b = RL(b, 10); - d = RL(d + F1(e, a, b) + X[7], 9) + c; a = RL(a, 10); - c = RL(c + F1(d, e, a) + X[8], 11) + b; e = RL(e, 10); - b = RL(b + F1(c, d, e) + X[9], 13) + a; d = RL(d, 10); - a = RL(a + F1(b, c, d) + X[10], 14) + e; c = RL(c, 10); - e = RL(e + F1(a, b, c) + X[11], 15) + d; b = RL(b, 10); - d = RL(d + F1(e, a, b) + X[12], 6) + c; a = RL(a, 10); - c = RL(c + F1(d, e, a) + X[13], 7) + b; e = RL(e, 10); - b = RL(b + F1(c, d, e) + X[14], 9) + a; d = RL(d, 10); - a = RL(a + F1(b, c, d) + X[15], 8) + e; c = RL(c, 10); - - // right - aa = RL(aa + F5(bb, cc, dd) + X[5] + unchecked((int)0x50a28be6), 8) + ee; cc = RL(cc, 10); - ee = RL(ee + F5(aa, bb, cc) + X[14] + unchecked((int)0x50a28be6), 9) + dd; bb = RL(bb, 10); - dd = RL(dd + F5(ee, aa, bb) + X[7] + unchecked((int)0x50a28be6), 9) + cc; aa = RL(aa, 10); - cc = RL(cc + F5(dd, ee, aa) + X[0] + unchecked((int)0x50a28be6), 11) + bb; ee = RL(ee, 10); - bb = RL(bb + F5(cc, dd, ee) + X[9] + unchecked((int)0x50a28be6), 13) + aa; dd = RL(dd, 10); - aa = RL(aa + F5(bb, cc, dd) + X[2] + unchecked((int)0x50a28be6), 15) + ee; cc = RL(cc, 10); - ee = RL(ee + F5(aa, bb, cc) + X[11] + unchecked((int)0x50a28be6), 15) + dd; bb = RL(bb, 10); - dd = RL(dd + F5(ee, aa, bb) + X[4] + unchecked((int)0x50a28be6), 5) + cc; aa = RL(aa, 10); - cc = RL(cc + F5(dd, ee, aa) + X[13] + unchecked((int)0x50a28be6), 7) + bb; ee = RL(ee, 10); - bb = RL(bb + F5(cc, dd, ee) + X[6] + unchecked((int)0x50a28be6), 7) + aa; dd = RL(dd, 10); - aa = RL(aa + F5(bb, cc, dd) + X[15] + unchecked((int)0x50a28be6), 8) + ee; cc = RL(cc, 10); - ee = RL(ee + F5(aa, bb, cc) + X[8] + unchecked((int)0x50a28be6), 11) + dd; bb = RL(bb, 10); - dd = RL(dd + F5(ee, aa, bb) + X[1] + unchecked((int)0x50a28be6), 14) + cc; aa = RL(aa, 10); - cc = RL(cc + F5(dd, ee, aa) + X[10] + unchecked((int)0x50a28be6), 14) + bb; ee = RL(ee, 10); - bb = RL(bb + F5(cc, dd, ee) + X[3] + unchecked((int)0x50a28be6), 12) + aa; dd = RL(dd, 10); - aa = RL(aa + F5(bb, cc, dd) + X[12] + unchecked((int)0x50a28be6), 6) + ee; cc = RL(cc, 10); - - t = a; a = aa; aa = t; - // - // Rounds 16-31 - // - // left - e = RL(e + F2(a, b, c) + X[7] + unchecked((int)0x5a827999), 7) + d; b = RL(b, 10); - d = RL(d + F2(e, a, b) + X[4] + unchecked((int)0x5a827999), 6) + c; a = RL(a, 10); - c = RL(c + F2(d, e, a) + X[13] + unchecked((int)0x5a827999), 8) + b; e = RL(e, 10); - b = RL(b + F2(c, d, e) + X[1] + unchecked((int)0x5a827999), 13) + a; d = RL(d, 10); - a = RL(a + F2(b, c, d) + X[10] + unchecked((int)0x5a827999), 11) + e; c = RL(c, 10); - e = RL(e + F2(a, b, c) + X[6] + unchecked((int)0x5a827999), 9) + d; b = RL(b, 10); - d = RL(d + F2(e, a, b) + X[15] + unchecked((int)0x5a827999), 7) + c; a = RL(a, 10); - c = RL(c + F2(d, e, a) + X[3] + unchecked((int)0x5a827999), 15) + b; e = RL(e, 10); - b = RL(b + F2(c, d, e) + X[12] + unchecked((int)0x5a827999), 7) + a; d = RL(d, 10); - a = RL(a + F2(b, c, d) + X[0] + unchecked((int)0x5a827999), 12) + e; c = RL(c, 10); - e = RL(e + F2(a, b, c) + X[9] + unchecked((int)0x5a827999), 15) + d; b = RL(b, 10); - d = RL(d + F2(e, a, b) + X[5] + unchecked((int)0x5a827999), 9) + c; a = RL(a, 10); - c = RL(c + F2(d, e, a) + X[2] + unchecked((int)0x5a827999), 11) + b; e = RL(e, 10); - b = RL(b + F2(c, d, e) + X[14] + unchecked((int)0x5a827999), 7) + a; d = RL(d, 10); - a = RL(a + F2(b, c, d) + X[11] + unchecked((int)0x5a827999), 13) + e; c = RL(c, 10); - e = RL(e + F2(a, b, c) + X[8] + unchecked((int)0x5a827999), 12) + d; b = RL(b, 10); - - // right - ee = RL(ee + F4(aa, bb, cc) + X[6] + unchecked((int)0x5c4dd124), 9) + dd; bb = RL(bb, 10); - dd = RL(dd + F4(ee, aa, bb) + X[11] + unchecked((int)0x5c4dd124), 13) + cc; aa = RL(aa, 10); - cc = RL(cc + F4(dd, ee, aa) + X[3] + unchecked((int)0x5c4dd124), 15) + bb; ee = RL(ee, 10); - bb = RL(bb + F4(cc, dd, ee) + X[7] + unchecked((int)0x5c4dd124), 7) + aa; dd = RL(dd, 10); - aa = RL(aa + F4(bb, cc, dd) + X[0] + unchecked((int)0x5c4dd124), 12) + ee; cc = RL(cc, 10); - ee = RL(ee + F4(aa, bb, cc) + X[13] + unchecked((int)0x5c4dd124), 8) + dd; bb = RL(bb, 10); - dd = RL(dd + F4(ee, aa, bb) + X[5] + unchecked((int)0x5c4dd124), 9) + cc; aa = RL(aa, 10); - cc = RL(cc + F4(dd, ee, aa) + X[10] + unchecked((int)0x5c4dd124), 11) + bb; ee = RL(ee, 10); - bb = RL(bb + F4(cc, dd, ee) + X[14] + unchecked((int)0x5c4dd124), 7) + aa; dd = RL(dd, 10); - aa = RL(aa + F4(bb, cc, dd) + X[15] + unchecked((int)0x5c4dd124), 7) + ee; cc = RL(cc, 10); - ee = RL(ee + F4(aa, bb, cc) + X[8] + unchecked((int)0x5c4dd124), 12) + dd; bb = RL(bb, 10); - dd = RL(dd + F4(ee, aa, bb) + X[12] + unchecked((int)0x5c4dd124), 7) + cc; aa = RL(aa, 10); - cc = RL(cc + F4(dd, ee, aa) + X[4] + unchecked((int)0x5c4dd124), 6) + bb; ee = RL(ee, 10); - bb = RL(bb + F4(cc, dd, ee) + X[9] + unchecked((int)0x5c4dd124), 15) + aa; dd = RL(dd, 10); - aa = RL(aa + F4(bb, cc, dd) + X[1] + unchecked((int)0x5c4dd124), 13) + ee; cc = RL(cc, 10); - ee = RL(ee + F4(aa, bb, cc) + X[2] + unchecked((int)0x5c4dd124), 11) + dd; bb = RL(bb, 10); - - t = b; b = bb; bb = t; - - // - // Rounds 32-47 - // - // left - d = RL(d + F3(e, a, b) + X[3] + unchecked((int)0x6ed9eba1), 11) + c; a = RL(a, 10); - c = RL(c + F3(d, e, a) + X[10] + unchecked((int)0x6ed9eba1), 13) + b; e = RL(e, 10); - b = RL(b + F3(c, d, e) + X[14] + unchecked((int)0x6ed9eba1), 6) + a; d = RL(d, 10); - a = RL(a + F3(b, c, d) + X[4] + unchecked((int)0x6ed9eba1), 7) + e; c = RL(c, 10); - e = RL(e + F3(a, b, c) + X[9] + unchecked((int)0x6ed9eba1), 14) + d; b = RL(b, 10); - d = RL(d + F3(e, a, b) + X[15] + unchecked((int)0x6ed9eba1), 9) + c; a = RL(a, 10); - c = RL(c + F3(d, e, a) + X[8] + unchecked((int)0x6ed9eba1), 13) + b; e = RL(e, 10); - b = RL(b + F3(c, d, e) + X[1] + unchecked((int)0x6ed9eba1), 15) + a; d = RL(d, 10); - a = RL(a + F3(b, c, d) + X[2] + unchecked((int)0x6ed9eba1), 14) + e; c = RL(c, 10); - e = RL(e + F3(a, b, c) + X[7] + unchecked((int)0x6ed9eba1), 8) + d; b = RL(b, 10); - d = RL(d + F3(e, a, b) + X[0] + unchecked((int)0x6ed9eba1), 13) + c; a = RL(a, 10); - c = RL(c + F3(d, e, a) + X[6] + unchecked((int)0x6ed9eba1), 6) + b; e = RL(e, 10); - b = RL(b + F3(c, d, e) + X[13] + unchecked((int)0x6ed9eba1), 5) + a; d = RL(d, 10); - a = RL(a + F3(b, c, d) + X[11] + unchecked((int)0x6ed9eba1), 12) + e; c = RL(c, 10); - e = RL(e + F3(a, b, c) + X[5] + unchecked((int)0x6ed9eba1), 7) + d; b = RL(b, 10); - d = RL(d + F3(e, a, b) + X[12] + unchecked((int)0x6ed9eba1), 5) + c; a = RL(a, 10); - - // right - dd = RL(dd + F3(ee, aa, bb) + X[15] + unchecked((int)0x6d703ef3), 9) + cc; aa = RL(aa, 10); - cc = RL(cc + F3(dd, ee, aa) + X[5] + unchecked((int)0x6d703ef3), 7) + bb; ee = RL(ee, 10); - bb = RL(bb + F3(cc, dd, ee) + X[1] + unchecked((int)0x6d703ef3), 15) + aa; dd = RL(dd, 10); - aa = RL(aa + F3(bb, cc, dd) + X[3] + unchecked((int)0x6d703ef3), 11) + ee; cc = RL(cc, 10); - ee = RL(ee + F3(aa, bb, cc) + X[7] + unchecked((int)0x6d703ef3), 8) + dd; bb = RL(bb, 10); - dd = RL(dd + F3(ee, aa, bb) + X[14] + unchecked((int)0x6d703ef3), 6) + cc; aa = RL(aa, 10); - cc = RL(cc + F3(dd, ee, aa) + X[6] + unchecked((int)0x6d703ef3), 6) + bb; ee = RL(ee, 10); - bb = RL(bb + F3(cc, dd, ee) + X[9] + unchecked((int)0x6d703ef3), 14) + aa; dd = RL(dd, 10); - aa = RL(aa + F3(bb, cc, dd) + X[11] + unchecked((int)0x6d703ef3), 12) + ee; cc = RL(cc, 10); - ee = RL(ee + F3(aa, bb, cc) + X[8] + unchecked((int)0x6d703ef3), 13) + dd; bb = RL(bb, 10); - dd = RL(dd + F3(ee, aa, bb) + X[12] + unchecked((int)0x6d703ef3), 5) + cc; aa = RL(aa, 10); - cc = RL(cc + F3(dd, ee, aa) + X[2] + unchecked((int)0x6d703ef3), 14) + bb; ee = RL(ee, 10); - bb = RL(bb + F3(cc, dd, ee) + X[10] + unchecked((int)0x6d703ef3), 13) + aa; dd = RL(dd, 10); - aa = RL(aa + F3(bb, cc, dd) + X[0] + unchecked((int)0x6d703ef3), 13) + ee; cc = RL(cc, 10); - ee = RL(ee + F3(aa, bb, cc) + X[4] + unchecked((int)0x6d703ef3), 7) + dd; bb = RL(bb, 10); - dd = RL(dd + F3(ee, aa, bb) + X[13] + unchecked((int)0x6d703ef3), 5) + cc; aa = RL(aa, 10); - - t = c; c = cc; cc = t; - - // - // Rounds 48-63 - // - // left - c = RL(c + F4(d, e, a) + X[1] + unchecked((int)0x8f1bbcdc), 11) + b; e = RL(e, 10); - b = RL(b + F4(c, d, e) + X[9] + unchecked((int)0x8f1bbcdc), 12) + a; d = RL(d, 10); - a = RL(a + F4(b, c, d) + X[11] + unchecked((int)0x8f1bbcdc), 14) + e; c = RL(c, 10); - e = RL(e + F4(a, b, c) + X[10] + unchecked((int)0x8f1bbcdc), 15) + d; b = RL(b, 10); - d = RL(d + F4(e, a, b) + X[0] + unchecked((int)0x8f1bbcdc), 14) + c; a = RL(a, 10); - c = RL(c + F4(d, e, a) + X[8] + unchecked((int)0x8f1bbcdc), 15) + b; e = RL(e, 10); - b = RL(b + F4(c, d, e) + X[12] + unchecked((int)0x8f1bbcdc), 9) + a; d = RL(d, 10); - a = RL(a + F4(b, c, d) + X[4] + unchecked((int)0x8f1bbcdc), 8) + e; c = RL(c, 10); - e = RL(e + F4(a, b, c) + X[13] + unchecked((int)0x8f1bbcdc), 9) + d; b = RL(b, 10); - d = RL(d + F4(e, a, b) + X[3] + unchecked((int)0x8f1bbcdc), 14) + c; a = RL(a, 10); - c = RL(c + F4(d, e, a) + X[7] + unchecked((int)0x8f1bbcdc), 5) + b; e = RL(e, 10); - b = RL(b + F4(c, d, e) + X[15] + unchecked((int)0x8f1bbcdc), 6) + a; d = RL(d, 10); - a = RL(a + F4(b, c, d) + X[14] + unchecked((int)0x8f1bbcdc), 8) + e; c = RL(c, 10); - e = RL(e + F4(a, b, c) + X[5] + unchecked((int)0x8f1bbcdc), 6) + d; b = RL(b, 10); - d = RL(d + F4(e, a, b) + X[6] + unchecked((int)0x8f1bbcdc), 5) + c; a = RL(a, 10); - c = RL(c + F4(d, e, a) + X[2] + unchecked((int)0x8f1bbcdc), 12) + b; e = RL(e, 10); - - // right - cc = RL(cc + F2(dd, ee, aa) + X[8] + unchecked((int)0x7a6d76e9), 15) + bb; ee = RL(ee, 10); - bb = RL(bb + F2(cc, dd, ee) + X[6] + unchecked((int)0x7a6d76e9), 5) + aa; dd = RL(dd, 10); - aa = RL(aa + F2(bb, cc, dd) + X[4] + unchecked((int)0x7a6d76e9), 8) + ee; cc = RL(cc, 10); - ee = RL(ee + F2(aa, bb, cc) + X[1] + unchecked((int)0x7a6d76e9), 11) + dd; bb = RL(bb, 10); - dd = RL(dd + F2(ee, aa, bb) + X[3] + unchecked((int)0x7a6d76e9), 14) + cc; aa = RL(aa, 10); - cc = RL(cc + F2(dd, ee, aa) + X[11] + unchecked((int)0x7a6d76e9), 14) + bb; ee = RL(ee, 10); - bb = RL(bb + F2(cc, dd, ee) + X[15] + unchecked((int)0x7a6d76e9), 6) + aa; dd = RL(dd, 10); - aa = RL(aa + F2(bb, cc, dd) + X[0] + unchecked((int)0x7a6d76e9), 14) + ee; cc = RL(cc, 10); - ee = RL(ee + F2(aa, bb, cc) + X[5] + unchecked((int)0x7a6d76e9), 6) + dd; bb = RL(bb, 10); - dd = RL(dd + F2(ee, aa, bb) + X[12] + unchecked((int)0x7a6d76e9), 9) + cc; aa = RL(aa, 10); - cc = RL(cc + F2(dd, ee, aa) + X[2] + unchecked((int)0x7a6d76e9), 12) + bb; ee = RL(ee, 10); - bb = RL(bb + F2(cc, dd, ee) + X[13] + unchecked((int)0x7a6d76e9), 9) + aa; dd = RL(dd, 10); - aa = RL(aa + F2(bb, cc, dd) + X[9] + unchecked((int)0x7a6d76e9), 12) + ee; cc = RL(cc, 10); - ee = RL(ee + F2(aa, bb, cc) + X[7] + unchecked((int)0x7a6d76e9), 5) + dd; bb = RL(bb, 10); - dd = RL(dd + F2(ee, aa, bb) + X[10] + unchecked((int)0x7a6d76e9), 15) + cc; aa = RL(aa, 10); - cc = RL(cc + F2(dd, ee, aa) + X[14] + unchecked((int)0x7a6d76e9), 8) + bb; ee = RL(ee, 10); - - t = d; d = dd; dd = t; - - // - // Rounds 64-79 - // - // left - b = RL(b + F5(c, d, e) + X[4] + unchecked((int)0xa953fd4e), 9) + a; d = RL(d, 10); - a = RL(a + F5(b, c, d) + X[0] + unchecked((int)0xa953fd4e), 15) + e; c = RL(c, 10); - e = RL(e + F5(a, b, c) + X[5] + unchecked((int)0xa953fd4e), 5) + d; b = RL(b, 10); - d = RL(d + F5(e, a, b) + X[9] + unchecked((int)0xa953fd4e), 11) + c; a = RL(a, 10); - c = RL(c + F5(d, e, a) + X[7] + unchecked((int)0xa953fd4e), 6) + b; e = RL(e, 10); - b = RL(b + F5(c, d, e) + X[12] + unchecked((int)0xa953fd4e), 8) + a; d = RL(d, 10); - a = RL(a + F5(b, c, d) + X[2] + unchecked((int)0xa953fd4e), 13) + e; c = RL(c, 10); - e = RL(e + F5(a, b, c) + X[10] + unchecked((int)0xa953fd4e), 12) + d; b = RL(b, 10); - d = RL(d + F5(e, a, b) + X[14] + unchecked((int)0xa953fd4e), 5) + c; a = RL(a, 10); - c = RL(c + F5(d, e, a) + X[1] + unchecked((int)0xa953fd4e), 12) + b; e = RL(e, 10); - b = RL(b + F5(c, d, e) + X[3] + unchecked((int)0xa953fd4e), 13) + a; d = RL(d, 10); - a = RL(a + F5(b, c, d) + X[8] + unchecked((int)0xa953fd4e), 14) + e; c = RL(c, 10); - e = RL(e + F5(a, b, c) + X[11] + unchecked((int)0xa953fd4e), 11) + d; b = RL(b, 10); - d = RL(d + F5(e, a, b) + X[6] + unchecked((int)0xa953fd4e), 8) + c; a = RL(a, 10); - c = RL(c + F5(d, e, a) + X[15] + unchecked((int)0xa953fd4e), 5) + b; e = RL(e, 10); - b = RL(b + F5(c, d, e) + X[13] + unchecked((int)0xa953fd4e), 6) + a; d = RL(d, 10); - - // right - bb = RL(bb + F1(cc, dd, ee) + X[12], 8) + aa; dd = RL(dd, 10); - aa = RL(aa + F1(bb, cc, dd) + X[15], 5) + ee; cc = RL(cc, 10); - ee = RL(ee + F1(aa, bb, cc) + X[10], 12) + dd; bb = RL(bb, 10); - dd = RL(dd + F1(ee, aa, bb) + X[4], 9) + cc; aa = RL(aa, 10); - cc = RL(cc + F1(dd, ee, aa) + X[1], 12) + bb; ee = RL(ee, 10); - bb = RL(bb + F1(cc, dd, ee) + X[5], 5) + aa; dd = RL(dd, 10); - aa = RL(aa + F1(bb, cc, dd) + X[8], 14) + ee; cc = RL(cc, 10); - ee = RL(ee + F1(aa, bb, cc) + X[7], 6) + dd; bb = RL(bb, 10); - dd = RL(dd + F1(ee, aa, bb) + X[6], 8) + cc; aa = RL(aa, 10); - cc = RL(cc + F1(dd, ee, aa) + X[2], 13) + bb; ee = RL(ee, 10); - bb = RL(bb + F1(cc, dd, ee) + X[13], 6) + aa; dd = RL(dd, 10); - aa = RL(aa + F1(bb, cc, dd) + X[14], 5) + ee; cc = RL(cc, 10); - ee = RL(ee + F1(aa, bb, cc) + X[0], 15) + dd; bb = RL(bb, 10); - dd = RL(dd + F1(ee, aa, bb) + X[3], 13) + cc; aa = RL(aa, 10); - cc = RL(cc + F1(dd, ee, aa) + X[9], 11) + bb; ee = RL(ee, 10); - bb = RL(bb + F1(cc, dd, ee) + X[11], 11) + aa; dd = RL(dd, 10); - - // - // do (e, ee) swap as part of assignment. - // - - H0 += a; - H1 += b; - H2 += c; - H3 += d; - H4 += ee; - H5 += aa; - H6 += bb; - H7 += cc; - H8 += dd; - H9 += e; - - // - // reset the offset and clean out the word buffer. - // - xOff = 0; - for (int i = 0; i != X.Length; i++) - { - X[i] = 0; - } - } - - public override IMemoable Copy() - { - return new RipeMD320Digest(this); - } - - public override void Reset(IMemoable other) - { - RipeMD320Digest d = (RipeMD320Digest)other; - - CopyIn(d); - } - - } -} diff --git a/bc-sharp-crypto/src/crypto/digests/SHA3Digest.cs b/bc-sharp-crypto/src/crypto/digests/SHA3Digest.cs deleted file mode 100644 index 4683af5..0000000 --- a/bc-sharp-crypto/src/crypto/digests/SHA3Digest.cs +++ /dev/null @@ -1,85 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Digests -{ - /// - /// Implementation of SHA-3 based on following KeccakNISTInterface.c from http://keccak.noekeon.org/ - /// - /// - /// Following the naming conventions used in the C source code to enable easy review of the implementation. - /// - public class Sha3Digest - : KeccakDigest - { - private static int CheckBitLength(int bitLength) - { - switch (bitLength) - { - case 224: - case 256: - case 384: - case 512: - return bitLength; - default: - throw new ArgumentException(bitLength + " not supported for SHA-3", "bitLength"); - } - } - - public Sha3Digest() - : this(256) - { - } - - public Sha3Digest(int bitLength) - : base(CheckBitLength(bitLength)) - { - } - - public Sha3Digest(Sha3Digest source) - : base(source) - { - } - - public override string AlgorithmName - { - get { return "SHA3-" + fixedOutputLength; } - } - - public override int DoFinal(byte[] output, int outOff) - { - AbsorbBits(0x02, 2); - - return base.DoFinal(output, outOff); - } - - /* - * TODO Possible API change to support partial-byte suffixes. - */ - protected override int DoFinal(byte[] output, int outOff, byte partialByte, int partialBits) - { - if (partialBits < 0 || partialBits > 7) - throw new ArgumentException("must be in the range [0,7]", "partialBits"); - - int finalInput = (partialByte & ((1 << partialBits) - 1)) | (0x02 << partialBits); - Debug.Assert(finalInput >= 0); - int finalBits = partialBits + 2; - - if (finalBits >= 8) - { - Absorb(new byte[]{ (byte)finalInput }, 0, 1); - finalBits -= 8; - finalInput >>= 8; - } - - return base.DoFinal(output, outOff, (byte)finalInput, finalBits); - } - - public override IMemoable Copy() - { - return new Sha3Digest(this); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/digests/SM3Digest.cs b/bc-sharp-crypto/src/crypto/digests/SM3Digest.cs deleted file mode 100644 index d81b2dd..0000000 --- a/bc-sharp-crypto/src/crypto/digests/SM3Digest.cs +++ /dev/null @@ -1,328 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Digests -{ - - /// - /// Implementation of Chinese SM3 digest as described at - /// http://tools.ietf.org/html/draft-shen-sm3-hash-00 - /// and at .... ( Chinese PDF ) - /// - /// - /// The specification says "process a bit stream", - /// but this is written to process bytes in blocks of 4, - /// meaning this will process 32-bit word groups. - /// But so do also most other digest specifications, - /// including the SHA-256 which was a origin for - /// this specification. - /// - public class SM3Digest - : GeneralDigest - { - private const int DIGEST_LENGTH = 32; // bytes - private const int BLOCK_SIZE = 64 / 4; // of 32 bit ints (16 ints) - - private uint[] V = new uint[DIGEST_LENGTH / 4]; // in 32 bit ints (8 ints) - private uint[] inwords = new uint[BLOCK_SIZE]; - private int xOff; - - // Work-bufs used within processBlock() - private uint[] W = new uint[68]; - private uint[] W1 = new uint[64]; - - // Round constant T for processBlock() which is 32 bit integer rolled left up to (63 MOD 32) bit positions. - private static readonly uint[] T = new uint[64]; - - static SM3Digest() - { - for (int i = 0; i < 16; ++i) - { - uint t = 0x79CC4519; - T[i] = (t << i) | (t >> (32 - i)); - } - for (int i = 16; i < 64; ++i) - { - int n = i % 32; - uint t = 0x7A879D8A; - T[i] = (t << n) | (t >> (32 - n)); - } - } - - - /// - /// Standard constructor - /// - public SM3Digest() - { - Reset(); - } - - /// - /// Copy constructor. This will copy the state of the provided - /// message digest. - /// - public SM3Digest(SM3Digest t) - : base(t) - { - CopyIn(t); - } - - private void CopyIn(SM3Digest t) - { - Array.Copy(t.V, 0, this.V, 0, this.V.Length); - Array.Copy(t.inwords, 0, this.inwords, 0, this.inwords.Length); - xOff = t.xOff; - } - - public override string AlgorithmName - { - get { return "SM3"; } - } - - public override int GetDigestSize() - { - return DIGEST_LENGTH; - } - - public override IMemoable Copy() - { - return new SM3Digest(this); - } - - public override void Reset(IMemoable other) - { - SM3Digest d = (SM3Digest)other; - - base.CopyIn(d); - CopyIn(d); - } - - /// - /// reset the chaining variables - /// - public override void Reset() - { - base.Reset(); - - this.V[0] = 0x7380166F; - this.V[1] = 0x4914B2B9; - this.V[2] = 0x172442D7; - this.V[3] = 0xDA8A0600; - this.V[4] = 0xA96F30BC; - this.V[5] = 0x163138AA; - this.V[6] = 0xE38DEE4D; - this.V[7] = 0xB0FB0E4E; - - this.xOff = 0; - } - - - public override int DoFinal(byte[] output, int outOff) - { - Finish(); - - Pack.UInt32_To_BE(this.V[0], output, outOff + 0); - Pack.UInt32_To_BE(this.V[1], output, outOff + 4); - Pack.UInt32_To_BE(this.V[2], output, outOff + 8); - Pack.UInt32_To_BE(this.V[3], output, outOff + 12); - Pack.UInt32_To_BE(this.V[4], output, outOff + 16); - Pack.UInt32_To_BE(this.V[5], output, outOff + 20); - Pack.UInt32_To_BE(this.V[6], output, outOff + 24); - Pack.UInt32_To_BE(this.V[7], output, outOff + 28); - - Reset(); - - return DIGEST_LENGTH; - } - - - internal override void ProcessWord(byte[] input, - int inOff) - { - uint n = Pack.BE_To_UInt32(input, inOff); - this.inwords[this.xOff] = n; - ++this.xOff; - - if (this.xOff >= 16) - { - ProcessBlock(); - } - } - - internal override void ProcessLength(long bitLength) - { - if (this.xOff > (BLOCK_SIZE - 2)) - { - // xOff == 15 --> can't fit the 64 bit length field at tail.. - this.inwords[this.xOff] = 0; // fill with zero - ++this.xOff; - - ProcessBlock(); - } - // Fill with zero words, until reach 2nd to last slot - while (this.xOff < (BLOCK_SIZE - 2)) - { - this.inwords[this.xOff] = 0; - ++this.xOff; - } - - // Store input data length in BITS - this.inwords[this.xOff++] = (uint)(bitLength >> 32); - this.inwords[this.xOff++] = (uint)(bitLength); - } - - /* - - 3.4.2. Constants - - - Tj = 79cc4519 when 0 < = j < = 15 - Tj = 7a879d8a when 16 < = j < = 63 - - 3.4.3. Boolean function - - - FFj(X;Y;Z) = X XOR Y XOR Z when 0 < = j < = 15 - = (X AND Y) OR (X AND Z) OR (Y AND Z) when 16 < = j < = 63 - - GGj(X;Y;Z) = X XOR Y XOR Z when 0 < = j < = 15 - = (X AND Y) OR (NOT X AND Z) when 16 < = j < = 63 - - The X, Y, Z in the fomular are words!GBP - - 3.4.4. Permutation function - - - P0(X) = X XOR (X <<< 9) XOR (X <<< 17) ## ROLL, not SHIFT - P1(X) = X XOR (X <<< 15) XOR (X <<< 23) ## ROLL, not SHIFT - - The X in the fomular are a word. - - ---------- - - Each ROLL converted to Java expression: - - ROLL 9 : ((x << 9) | (x >> (32-9)))) - ROLL 17 : ((x << 17) | (x >> (32-17))) - ROLL 15 : ((x << 15) | (x >> (32-15))) - ROLL 23 : ((x << 23) | (x >> (32-23))) - - */ - - private uint P0(uint x) - { - uint r9 = ((x << 9) | (x >> (32 - 9))); - uint r17 = ((x << 17) | (x >> (32 - 17))); - return (x ^ r9 ^ r17); - } - - private uint P1(uint x) - { - uint r15 = ((x << 15) | (x >> (32 - 15))); - uint r23 = ((x << 23) | (x >> (32 - 23))); - return (x ^ r15 ^ r23); - } - - private uint FF0(uint x, uint y, uint z) - { - return (x ^ y ^ z); - } - - private uint FF1(uint x, uint y, uint z) - { - return ((x & y) | (x & z) | (y & z)); - } - - private uint GG0(uint x, uint y, uint z) - { - return (x ^ y ^ z); - } - - private uint GG1(uint x, uint y, uint z) - { - return ((x & y) | ((~x) & z)); - } - - - internal override void ProcessBlock() - { - for (int j = 0; j < 16; ++j) - { - this.W[j] = this.inwords[j]; - } - for (int j = 16; j < 68; ++j) - { - uint wj3 = this.W[j - 3]; - uint r15 = ((wj3 << 15) | (wj3 >> (32 - 15))); - uint wj13 = this.W[j - 13]; - uint r7 = ((wj13 << 7) | (wj13 >> (32 - 7))); - this.W[j] = P1(this.W[j - 16] ^ this.W[j - 9] ^ r15) ^ r7 ^ this.W[j - 6]; - } - for (int j = 0; j < 64; ++j) - { - this.W1[j] = this.W[j] ^ this.W[j + 4]; - } - - uint A = this.V[0]; - uint B = this.V[1]; - uint C = this.V[2]; - uint D = this.V[3]; - uint E = this.V[4]; - uint F = this.V[5]; - uint G = this.V[6]; - uint H = this.V[7]; - - - for (int j = 0; j < 16; ++j) - { - uint a12 = ((A << 12) | (A >> (32 - 12))); - uint s1_ = a12 + E + T[j]; - uint SS1 = ((s1_ << 7) | (s1_ >> (32 - 7))); - uint SS2 = SS1 ^ a12; - uint TT1 = FF0(A, B, C) + D + SS2 + this.W1[j]; - uint TT2 = GG0(E, F, G) + H + SS1 + this.W[j]; - D = C; - C = ((B << 9) | (B >> (32 - 9))); - B = A; - A = TT1; - H = G; - G = ((F << 19) | (F >> (32 - 19))); - F = E; - E = P0(TT2); - } - - // Different FF,GG functions on rounds 16..63 - for (int j = 16; j < 64; ++j) - { - uint a12 = ((A << 12) | (A >> (32 - 12))); - uint s1_ = a12 + E + T[j]; - uint SS1 = ((s1_ << 7) | (s1_ >> (32 - 7))); - uint SS2 = SS1 ^ a12; - uint TT1 = FF1(A, B, C) + D + SS2 + this.W1[j]; - uint TT2 = GG1(E, F, G) + H + SS1 + this.W[j]; - D = C; - C = ((B << 9) | (B >> (32 - 9))); - B = A; - A = TT1; - H = G; - G = ((F << 19) | (F >> (32 - 19))); - F = E; - E = P0(TT2); - } - - this.V[0] ^= A; - this.V[1] ^= B; - this.V[2] ^= C; - this.V[3] ^= D; - this.V[4] ^= E; - this.V[5] ^= F; - this.V[6] ^= G; - this.V[7] ^= H; - - this.xOff = 0; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/digests/Sha1Digest.cs b/bc-sharp-crypto/src/crypto/digests/Sha1Digest.cs deleted file mode 100644 index 60ec651..0000000 --- a/bc-sharp-crypto/src/crypto/digests/Sha1Digest.cs +++ /dev/null @@ -1,284 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Digests -{ - - /** - * implementation of SHA-1 as outlined in "Handbook of Applied Cryptography", pages 346 - 349. - * - * It is interesting to ponder why the, apart from the extra IV, the other difference here from MD5 - * is the "endianness" of the word processing! - */ - public class Sha1Digest - : GeneralDigest - { - private const int DigestLength = 20; - - private uint H1, H2, H3, H4, H5; - - private uint[] X = new uint[80]; - private int xOff; - - public Sha1Digest() - { - Reset(); - } - - /** - * Copy constructor. This will copy the state of the provided - * message digest. - */ - public Sha1Digest(Sha1Digest t) - : base(t) - { - CopyIn(t); - } - - private void CopyIn(Sha1Digest t) - { - base.CopyIn(t); - - H1 = t.H1; - H2 = t.H2; - H3 = t.H3; - H4 = t.H4; - H5 = t.H5; - - Array.Copy(t.X, 0, X, 0, t.X.Length); - xOff = t.xOff; - } - - public override string AlgorithmName - { - get { return "SHA-1"; } - } - - public override int GetDigestSize() - { - return DigestLength; - } - - internal override void ProcessWord( - byte[] input, - int inOff) - { - X[xOff] = Pack.BE_To_UInt32(input, inOff); - - if (++xOff == 16) - { - ProcessBlock(); - } - } - - internal override void ProcessLength(long bitLength) - { - if (xOff > 14) - { - ProcessBlock(); - } - - X[14] = (uint)((ulong)bitLength >> 32); - X[15] = (uint)((ulong)bitLength); - } - - public override int DoFinal( - byte[] output, - int outOff) - { - Finish(); - - Pack.UInt32_To_BE(H1, output, outOff); - Pack.UInt32_To_BE(H2, output, outOff + 4); - Pack.UInt32_To_BE(H3, output, outOff + 8); - Pack.UInt32_To_BE(H4, output, outOff + 12); - Pack.UInt32_To_BE(H5, output, outOff + 16); - - Reset(); - - return DigestLength; - } - - /** - * reset the chaining variables - */ - public override void Reset() - { - base.Reset(); - - H1 = 0x67452301; - H2 = 0xefcdab89; - H3 = 0x98badcfe; - H4 = 0x10325476; - H5 = 0xc3d2e1f0; - - xOff = 0; - Array.Clear(X, 0, X.Length); - } - - // - // Additive constants - // - private const uint Y1 = 0x5a827999; - private const uint Y2 = 0x6ed9eba1; - private const uint Y3 = 0x8f1bbcdc; - private const uint Y4 = 0xca62c1d6; - - private static uint F(uint u, uint v, uint w) - { - return (u & v) | (~u & w); - } - - private static uint H(uint u, uint v, uint w) - { - return u ^ v ^ w; - } - - private static uint G(uint u, uint v, uint w) - { - return (u & v) | (u & w) | (v & w); - } - - internal override void ProcessBlock() - { - // - // expand 16 word block into 80 word block. - // - for (int i = 16; i < 80; i++) - { - uint t = X[i - 3] ^ X[i - 8] ^ X[i - 14] ^ X[i - 16]; - X[i] = t << 1 | t >> 31; - } - - // - // set up working variables. - // - uint A = H1; - uint B = H2; - uint C = H3; - uint D = H4; - uint E = H5; - - // - // round 1 - // - int idx = 0; - - for (int j = 0; j < 4; j++) - { - // E = rotateLeft(A, 5) + F(B, C, D) + E + X[idx++] + Y1 - // B = rotateLeft(B, 30) - E += (A << 5 | (A >> 27)) + F(B, C, D) + X[idx++] + Y1; - B = B << 30 | (B >> 2); - - D += (E << 5 | (E >> 27)) + F(A, B, C) + X[idx++] + Y1; - A = A << 30 | (A >> 2); - - C += (D << 5 | (D >> 27)) + F(E, A, B) + X[idx++] + Y1; - E = E << 30 | (E >> 2); - - B += (C << 5 | (C >> 27)) + F(D, E, A) + X[idx++] + Y1; - D = D << 30 | (D >> 2); - - A += (B << 5 | (B >> 27)) + F(C, D, E) + X[idx++] + Y1; - C = C << 30 | (C >> 2); - } - - // - // round 2 - // - for (int j = 0; j < 4; j++) - { - // E = rotateLeft(A, 5) + H(B, C, D) + E + X[idx++] + Y2 - // B = rotateLeft(B, 30) - E += (A << 5 | (A >> 27)) + H(B, C, D) + X[idx++] + Y2; - B = B << 30 | (B >> 2); - - D += (E << 5 | (E >> 27)) + H(A, B, C) + X[idx++] + Y2; - A = A << 30 | (A >> 2); - - C += (D << 5 | (D >> 27)) + H(E, A, B) + X[idx++] + Y2; - E = E << 30 | (E >> 2); - - B += (C << 5 | (C >> 27)) + H(D, E, A) + X[idx++] + Y2; - D = D << 30 | (D >> 2); - - A += (B << 5 | (B >> 27)) + H(C, D, E) + X[idx++] + Y2; - C = C << 30 | (C >> 2); - } - - // - // round 3 - // - for (int j = 0; j < 4; j++) - { - // E = rotateLeft(A, 5) + G(B, C, D) + E + X[idx++] + Y3 - // B = rotateLeft(B, 30) - E += (A << 5 | (A >> 27)) + G(B, C, D) + X[idx++] + Y3; - B = B << 30 | (B >> 2); - - D += (E << 5 | (E >> 27)) + G(A, B, C) + X[idx++] + Y3; - A = A << 30 | (A >> 2); - - C += (D << 5 | (D >> 27)) + G(E, A, B) + X[idx++] + Y3; - E = E << 30 | (E >> 2); - - B += (C << 5 | (C >> 27)) + G(D, E, A) + X[idx++] + Y3; - D = D << 30 | (D >> 2); - - A += (B << 5 | (B >> 27)) + G(C, D, E) + X[idx++] + Y3; - C = C << 30 | (C >> 2); - } - - // - // round 4 - // - for (int j = 0; j < 4; j++) - { - // E = rotateLeft(A, 5) + H(B, C, D) + E + X[idx++] + Y4 - // B = rotateLeft(B, 30) - E += (A << 5 | (A >> 27)) + H(B, C, D) + X[idx++] + Y4; - B = B << 30 | (B >> 2); - - D += (E << 5 | (E >> 27)) + H(A, B, C) + X[idx++] + Y4; - A = A << 30 | (A >> 2); - - C += (D << 5 | (D >> 27)) + H(E, A, B) + X[idx++] + Y4; - E = E << 30 | (E >> 2); - - B += (C << 5 | (C >> 27)) + H(D, E, A) + X[idx++] + Y4; - D = D << 30 | (D >> 2); - - A += (B << 5 | (B >> 27)) + H(C, D, E) + X[idx++] + Y4; - C = C << 30 | (C >> 2); - } - - H1 += A; - H2 += B; - H3 += C; - H4 += D; - H5 += E; - - // - // reset start of the buffer. - // - xOff = 0; - Array.Clear(X, 0, 16); - } - - public override IMemoable Copy() - { - return new Sha1Digest(this); - } - - public override void Reset(IMemoable other) - { - Sha1Digest d = (Sha1Digest)other; - - CopyIn(d); - } - - } -} diff --git a/bc-sharp-crypto/src/crypto/digests/Sha224Digest.cs b/bc-sharp-crypto/src/crypto/digests/Sha224Digest.cs deleted file mode 100644 index b4e8537..0000000 --- a/bc-sharp-crypto/src/crypto/digests/Sha224Digest.cs +++ /dev/null @@ -1,289 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Digests -{ - /** - * SHA-224 as described in RFC 3874 - * 
-     *         block  word  digest
-     * SHA-1   512    32    160
-     * SHA-224 512    32    224
-     * SHA-256 512    32    256
-     * SHA-384 1024   64    384
-     * SHA-512 1024   64    512
-     *
- */ - public class Sha224Digest - : GeneralDigest - { - private const int DigestLength = 28; - - private uint H1, H2, H3, H4, H5, H6, H7, H8; - - private uint[] X = new uint[64]; - private int xOff; - - /** - * Standard constructor - */ - public Sha224Digest() - { - Reset(); - } - - /** - * Copy constructor. This will copy the state of the provided - * message digest. - */ - public Sha224Digest( - Sha224Digest t) - : base(t) - { - CopyIn(t); - } - - private void CopyIn(Sha224Digest t) - { - base.CopyIn(t); - - H1 = t.H1; - H2 = t.H2; - H3 = t.H3; - H4 = t.H4; - H5 = t.H5; - H6 = t.H6; - H7 = t.H7; - H8 = t.H8; - - Array.Copy(t.X, 0, X, 0, t.X.Length); - xOff = t.xOff; - } - - public override string AlgorithmName - { - get { return "SHA-224"; } - } - - public override int GetDigestSize() - { - return DigestLength; - } - - internal override void ProcessWord( - byte[] input, - int inOff) - { - X[xOff] = Pack.BE_To_UInt32(input, inOff); - - if (++xOff == 16) - { - ProcessBlock(); - } - } - - internal override void ProcessLength( - long bitLength) - { - if (xOff > 14) - { - ProcessBlock(); - } - - X[14] = (uint)((ulong)bitLength >> 32); - X[15] = (uint)((ulong)bitLength); - } - - public override int DoFinal( - byte[] output, - int outOff) - { - Finish(); - - Pack.UInt32_To_BE(H1, output, outOff); - Pack.UInt32_To_BE(H2, output, outOff + 4); - Pack.UInt32_To_BE(H3, output, outOff + 8); - Pack.UInt32_To_BE(H4, output, outOff + 12); - Pack.UInt32_To_BE(H5, output, outOff + 16); - Pack.UInt32_To_BE(H6, output, outOff + 20); - Pack.UInt32_To_BE(H7, output, outOff + 24); - - Reset(); - - return DigestLength; - } - - /** - * reset the chaining variables - */ - public override void Reset() - { - base.Reset(); - - /* SHA-224 initial hash value - */ - H1 = 0xc1059ed8; - H2 = 0x367cd507; - H3 = 0x3070dd17; - H4 = 0xf70e5939; - H5 = 0xffc00b31; - H6 = 0x68581511; - H7 = 0x64f98fa7; - H8 = 0xbefa4fa4; - - xOff = 0; - Array.Clear(X, 0, X.Length); - } - - internal override void ProcessBlock() - { - // - // expand 16 word block into 64 word blocks. - // - for (int ti = 16; ti <= 63; ti++) - { - X[ti] = Theta1(X[ti - 2]) + X[ti - 7] + Theta0(X[ti - 15]) + X[ti - 16]; - } - - // - // set up working variables. - // - uint a = H1; - uint b = H2; - uint c = H3; - uint d = H4; - uint e = H5; - uint f = H6; - uint g = H7; - uint h = H8; - - int t = 0; - for(int i = 0; i < 8; i ++) - { - // t = 8 * i - h += Sum1(e) + Ch(e, f, g) + K[t] + X[t]; - d += h; - h += Sum0(a) + Maj(a, b, c); - ++t; - - // t = 8 * i + 1 - g += Sum1(d) + Ch(d, e, f) + K[t] + X[t]; - c += g; - g += Sum0(h) + Maj(h, a, b); - ++t; - - // t = 8 * i + 2 - f += Sum1(c) + Ch(c, d, e) + K[t] + X[t]; - b += f; - f += Sum0(g) + Maj(g, h, a); - ++t; - - // t = 8 * i + 3 - e += Sum1(b) + Ch(b, c, d) + K[t] + X[t]; - a += e; - e += Sum0(f) + Maj(f, g, h); - ++t; - - // t = 8 * i + 4 - d += Sum1(a) + Ch(a, b, c) + K[t] + X[t]; - h += d; - d += Sum0(e) + Maj(e, f, g); - ++t; - - // t = 8 * i + 5 - c += Sum1(h) + Ch(h, a, b) + K[t] + X[t]; - g += c; - c += Sum0(d) + Maj(d, e, f); - ++t; - - // t = 8 * i + 6 - b += Sum1(g) + Ch(g, h, a) + K[t] + X[t]; - f += b; - b += Sum0(c) + Maj(c, d, e); - ++t; - - // t = 8 * i + 7 - a += Sum1(f) + Ch(f, g, h) + K[t] + X[t]; - e += a; - a += Sum0(b) + Maj(b, c, d); - ++t; - } - - H1 += a; - H2 += b; - H3 += c; - H4 += d; - H5 += e; - H6 += f; - H7 += g; - H8 += h; - - // - // reset the offset and clean out the word buffer. - // - xOff = 0; - Array.Clear(X, 0, 16); - } - - /* SHA-224 functions */ - private static uint Ch(uint x, uint y, uint z) - { - return (x & y) ^ (~x & z); - } - - private static uint Maj(uint x, uint y, uint z) - { - return (x & y) ^ (x & z) ^ (y & z); - } - - private static uint Sum0(uint x) - { - return ((x >> 2) | (x << 30)) ^ ((x >> 13) | (x << 19)) ^ ((x >> 22) | (x << 10)); - } - - private static uint Sum1(uint x) - { - return ((x >> 6) | (x << 26)) ^ ((x >> 11) | (x << 21)) ^ ((x >> 25) | (x << 7)); - } - - private static uint Theta0(uint x) - { - return ((x >> 7) | (x << 25)) ^ ((x >> 18) | (x << 14)) ^ (x >> 3); - } - - private static uint Theta1(uint x) - { - return ((x >> 17) | (x << 15)) ^ ((x >> 19) | (x << 13)) ^ (x >> 10); - } - - /* SHA-224 Constants - * (represent the first 32 bits of the fractional parts of the - * cube roots of the first sixty-four prime numbers) - */ - internal static readonly uint[] K = { - 0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5, - 0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174, - 0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da, - 0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967, - 0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85, - 0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070, - 0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3, - 0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2 - }; - - public override IMemoable Copy() - { - return new Sha224Digest(this); - } - - public override void Reset(IMemoable other) - { - Sha224Digest d = (Sha224Digest)other; - - CopyIn(d); - } - - } -} diff --git a/bc-sharp-crypto/src/crypto/digests/Sha256Digest.cs b/bc-sharp-crypto/src/crypto/digests/Sha256Digest.cs deleted file mode 100644 index 98e10a3..0000000 --- a/bc-sharp-crypto/src/crypto/digests/Sha256Digest.cs +++ /dev/null @@ -1,330 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Digests -{ - /** - * Draft FIPS 180-2 implementation of SHA-256. Note: As this is - * based on a draft this implementation is subject to change. - * - * 
-    *         block  word  digest
-    * SHA-1   512    32    160
-    * SHA-256 512    32    256
-    * SHA-384 1024   64    384
-    * SHA-512 1024   64    512
-    *
- */ - public class Sha256Digest - : GeneralDigest - { - private const int DigestLength = 32; - - private uint H1, H2, H3, H4, H5, H6, H7, H8; - private uint[] X = new uint[64]; - private int xOff; - - public Sha256Digest() - { - initHs(); - } - - /** - * Copy constructor. This will copy the state of the provided - * message digest. - */ - public Sha256Digest(Sha256Digest t) : base(t) - { - CopyIn(t); - } - - private void CopyIn(Sha256Digest t) - { - base.CopyIn(t); - - H1 = t.H1; - H2 = t.H2; - H3 = t.H3; - H4 = t.H4; - H5 = t.H5; - H6 = t.H6; - H7 = t.H7; - H8 = t.H8; - - Array.Copy(t.X, 0, X, 0, t.X.Length); - xOff = t.xOff; - } - - public override string AlgorithmName - { - get { return "SHA-256"; } - } - - public override int GetDigestSize() - { - return DigestLength; - } - - internal override void ProcessWord( - byte[] input, - int inOff) - { - X[xOff] = Pack.BE_To_UInt32(input, inOff); - - if (++xOff == 16) - { - ProcessBlock(); - } - } - - internal override void ProcessLength( - long bitLength) - { - if (xOff > 14) - { - ProcessBlock(); - } - - X[14] = (uint)((ulong)bitLength >> 32); - X[15] = (uint)((ulong)bitLength); - } - - public override int DoFinal( - byte[] output, - int outOff) - { - Finish(); - - Pack.UInt32_To_BE((uint)H1, output, outOff); - Pack.UInt32_To_BE((uint)H2, output, outOff + 4); - Pack.UInt32_To_BE((uint)H3, output, outOff + 8); - Pack.UInt32_To_BE((uint)H4, output, outOff + 12); - Pack.UInt32_To_BE((uint)H5, output, outOff + 16); - Pack.UInt32_To_BE((uint)H6, output, outOff + 20); - Pack.UInt32_To_BE((uint)H7, output, outOff + 24); - Pack.UInt32_To_BE((uint)H8, output, outOff + 28); - - Reset(); - - return DigestLength; - } - - /** - * reset the chaining variables - */ - public override void Reset() - { - base.Reset(); - - initHs(); - - xOff = 0; - Array.Clear(X, 0, X.Length); - } - - private void initHs() - { - /* SHA-256 initial hash value - * The first 32 bits of the fractional parts of the square roots - * of the first eight prime numbers - */ - H1 = 0x6a09e667; - H2 = 0xbb67ae85; - H3 = 0x3c6ef372; - H4 = 0xa54ff53a; - H5 = 0x510e527f; - H6 = 0x9b05688c; - H7 = 0x1f83d9ab; - H8 = 0x5be0cd19; - } - - internal override void ProcessBlock() - { - // - // expand 16 word block into 64 word blocks. - // - for (int ti = 16; ti <= 63; ti++) - { - X[ti] = Theta1(X[ti - 2]) + X[ti - 7] + Theta0(X[ti - 15]) + X[ti - 16]; - } - - // - // set up working variables. - // - uint a = H1; - uint b = H2; - uint c = H3; - uint d = H4; - uint e = H5; - uint f = H6; - uint g = H7; - uint h = H8; - - int t = 0; - for(int i = 0; i < 8; ++i) - { - // t = 8 * i - h += Sum1Ch(e, f, g) + K[t] + X[t]; - d += h; - h += Sum0Maj(a, b, c); - ++t; - - // t = 8 * i + 1 - g += Sum1Ch(d, e, f) + K[t] + X[t]; - c += g; - g += Sum0Maj(h, a, b); - ++t; - - // t = 8 * i + 2 - f += Sum1Ch(c, d, e) + K[t] + X[t]; - b += f; - f += Sum0Maj(g, h, a); - ++t; - - // t = 8 * i + 3 - e += Sum1Ch(b, c, d) + K[t] + X[t]; - a += e; - e += Sum0Maj(f, g, h); - ++t; - - // t = 8 * i + 4 - d += Sum1Ch(a, b, c) + K[t] + X[t]; - h += d; - d += Sum0Maj(e, f, g); - ++t; - - // t = 8 * i + 5 - c += Sum1Ch(h, a, b) + K[t] + X[t]; - g += c; - c += Sum0Maj(d, e, f); - ++t; - - // t = 8 * i + 6 - b += Sum1Ch(g, h, a) + K[t] + X[t]; - f += b; - b += Sum0Maj(c, d, e); - ++t; - - // t = 8 * i + 7 - a += Sum1Ch(f, g, h) + K[t] + X[t]; - e += a; - a += Sum0Maj(b, c, d); - ++t; - } - - H1 += a; - H2 += b; - H3 += c; - H4 += d; - H5 += e; - H6 += f; - H7 += g; - H8 += h; - - // - // reset the offset and clean out the word buffer. - // - xOff = 0; - Array.Clear(X, 0, 16); - } - - private static uint Sum1Ch( - uint x, - uint y, - uint z) - { -// return Sum1(x) + Ch(x, y, z); - return (((x >> 6) | (x << 26)) ^ ((x >> 11) | (x << 21)) ^ ((x >> 25) | (x << 7))) - + ((x & y) ^ ((~x) & z)); - } - - private static uint Sum0Maj( - uint x, - uint y, - uint z) - { -// return Sum0(x) + Maj(x, y, z); - return (((x >> 2) | (x << 30)) ^ ((x >> 13) | (x << 19)) ^ ((x >> 22) | (x << 10))) - + ((x & y) ^ (x & z) ^ (y & z)); - } - -// /* SHA-256 functions */ -// private static uint Ch( -// uint x, -// uint y, -// uint z) -// { -// return ((x & y) ^ ((~x) & z)); -// } -// -// private static uint Maj( -// uint x, -// uint y, -// uint z) -// { -// return ((x & y) ^ (x & z) ^ (y & z)); -// } -// -// private static uint Sum0( -// uint x) -// { -// return ((x >> 2) | (x << 30)) ^ ((x >> 13) | (x << 19)) ^ ((x >> 22) | (x << 10)); -// } -// -// private static uint Sum1( -// uint x) -// { -// return ((x >> 6) | (x << 26)) ^ ((x >> 11) | (x << 21)) ^ ((x >> 25) | (x << 7)); -// } - - private static uint Theta0( - uint x) - { - return ((x >> 7) | (x << 25)) ^ ((x >> 18) | (x << 14)) ^ (x >> 3); - } - - private static uint Theta1( - uint x) - { - return ((x >> 17) | (x << 15)) ^ ((x >> 19) | (x << 13)) ^ (x >> 10); - } - - /* SHA-256 Constants - * (represent the first 32 bits of the fractional parts of the - * cube roots of the first sixty-four prime numbers) - */ - private static readonly uint[] K = { - 0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, - 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5, - 0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, - 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174, - 0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc, - 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da, - 0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, - 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967, - 0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, - 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85, - 0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, - 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070, - 0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, - 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3, - 0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, - 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2 - }; - - public override IMemoable Copy() - { - return new Sha256Digest(this); - } - - public override void Reset(IMemoable other) - { - Sha256Digest d = (Sha256Digest)other; - - CopyIn(d); - } - - } -} diff --git a/bc-sharp-crypto/src/crypto/digests/Sha384Digest.cs b/bc-sharp-crypto/src/crypto/digests/Sha384Digest.cs deleted file mode 100644 index e6c9a9a..0000000 --- a/bc-sharp-crypto/src/crypto/digests/Sha384Digest.cs +++ /dev/null @@ -1,101 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Digests -{ - /** - * Draft FIPS 180-2 implementation of SHA-384. Note: As this is - * based on a draft this implementation is subject to change. - * - * 
-     *         block  word  digest
-     * SHA-1   512    32    160
-     * SHA-256 512    32    256
-     * SHA-384 1024   64    384
-     * SHA-512 1024   64    512
-     *
- */ - public class Sha384Digest - : LongDigest - { - private const int DigestLength = 48; - - public Sha384Digest() - { - } - - /** - * Copy constructor. This will copy the state of the provided - * message digest. - */ - public Sha384Digest( - Sha384Digest t) - : base(t) - { - } - - public override string AlgorithmName - { - get { return "SHA-384"; } - } - - public override int GetDigestSize() - { - return DigestLength; - } - - public override int DoFinal( - byte[] output, - int outOff) - { - Finish(); - - Pack.UInt64_To_BE(H1, output, outOff); - Pack.UInt64_To_BE(H2, output, outOff + 8); - Pack.UInt64_To_BE(H3, output, outOff + 16); - Pack.UInt64_To_BE(H4, output, outOff + 24); - Pack.UInt64_To_BE(H5, output, outOff + 32); - Pack.UInt64_To_BE(H6, output, outOff + 40); - - Reset(); - - return DigestLength; - } - - /** - * reset the chaining variables - */ - public override void Reset() - { - base.Reset(); - - /* SHA-384 initial hash value - * The first 64 bits of the fractional parts of the square roots - * of the 9th through 16th prime numbers - */ - H1 = 0xcbbb9d5dc1059ed8; - H2 = 0x629a292a367cd507; - H3 = 0x9159015a3070dd17; - H4 = 0x152fecd8f70e5939; - H5 = 0x67332667ffc00b31; - H6 = 0x8eb44a8768581511; - H7 = 0xdb0c2e0d64f98fa7; - H8 = 0x47b5481dbefa4fa4; - } - - public override IMemoable Copy() - { - return new Sha384Digest(this); - } - - public override void Reset(IMemoable other) - { - Sha384Digest d = (Sha384Digest)other; - - CopyIn(d); - } - - } -} diff --git a/bc-sharp-crypto/src/crypto/digests/Sha512Digest.cs b/bc-sharp-crypto/src/crypto/digests/Sha512Digest.cs deleted file mode 100644 index 2a0964f..0000000 --- a/bc-sharp-crypto/src/crypto/digests/Sha512Digest.cs +++ /dev/null @@ -1,104 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Digests -{ - /** - * Draft FIPS 180-2 implementation of SHA-512. Note: As this is - * based on a draft this implementation is subject to change. - * - * 
-     *         block  word  digest
-     * SHA-1   512    32    160
-     * SHA-256 512    32    256
-     * SHA-384 1024   64    384
-     * SHA-512 1024   64    512
-     *
- */ - public class Sha512Digest - : LongDigest - { - private const int DigestLength = 64; - - public Sha512Digest() - { - } - - /** - * Copy constructor. This will copy the state of the provided - * message digest. - */ - public Sha512Digest( - Sha512Digest t) - : base(t) - { - } - - public override string AlgorithmName - { - get { return "SHA-512"; } - } - - public override int GetDigestSize() - { - return DigestLength; - } - - public override int DoFinal( - byte[] output, - int outOff) - { - Finish(); - - Pack.UInt64_To_BE(H1, output, outOff); - Pack.UInt64_To_BE(H2, output, outOff + 8); - Pack.UInt64_To_BE(H3, output, outOff + 16); - Pack.UInt64_To_BE(H4, output, outOff + 24); - Pack.UInt64_To_BE(H5, output, outOff + 32); - Pack.UInt64_To_BE(H6, output, outOff + 40); - Pack.UInt64_To_BE(H7, output, outOff + 48); - Pack.UInt64_To_BE(H8, output, outOff + 56); - - Reset(); - - return DigestLength; - - } - - /** - * reset the chaining variables - */ - public override void Reset() - { - base.Reset(); - - /* SHA-512 initial hash value - * The first 64 bits of the fractional parts of the square roots - * of the first eight prime numbers - */ - H1 = 0x6a09e667f3bcc908; - H2 = 0xbb67ae8584caa73b; - H3 = 0x3c6ef372fe94f82b; - H4 = 0xa54ff53a5f1d36f1; - H5 = 0x510e527fade682d1; - H6 = 0x9b05688c2b3e6c1f; - H7 = 0x1f83d9abfb41bd6b; - H8 = 0x5be0cd19137e2179; - } - - public override IMemoable Copy() - { - return new Sha512Digest(this); - } - - public override void Reset(IMemoable other) - { - Sha512Digest d = (Sha512Digest)other; - - CopyIn(d); - } - - } -} diff --git a/bc-sharp-crypto/src/crypto/digests/Sha512tDigest.cs b/bc-sharp-crypto/src/crypto/digests/Sha512tDigest.cs deleted file mode 100644 index 2caefa7..0000000 --- a/bc-sharp-crypto/src/crypto/digests/Sha512tDigest.cs +++ /dev/null @@ -1,200 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Digests -{ - /** - * FIPS 180-4 implementation of SHA-512/t - */ - public class Sha512tDigest - : LongDigest - { - private const ulong A5 = 0xa5a5a5a5a5a5a5a5UL; - - private readonly int digestLength; - - private ulong H1t, H2t, H3t, H4t, H5t, H6t, H7t, H8t; - - /** - * Standard constructor - */ - public Sha512tDigest(int bitLength) - { - if (bitLength >= 512) - throw new ArgumentException("cannot be >= 512", "bitLength"); - if (bitLength % 8 != 0) - throw new ArgumentException("needs to be a multiple of 8", "bitLength"); - if (bitLength == 384) - throw new ArgumentException("cannot be 384 use SHA384 instead", "bitLength"); - - this.digestLength = bitLength / 8; - - tIvGenerate(digestLength * 8); - - Reset(); - } - - /** - * Copy constructor. This will copy the state of the provided - * message digest. - */ - public Sha512tDigest(Sha512tDigest t) - : base(t) - { - this.digestLength = t.digestLength; - - Reset(t); - } - - public override string AlgorithmName - { - get { return "SHA-512/" + (digestLength * 8); } - } - - public override int GetDigestSize() - { - return digestLength; - } - - public override int DoFinal(byte[] output, int outOff) - { - Finish(); - - UInt64_To_BE(H1, output, outOff, digestLength); - UInt64_To_BE(H2, output, outOff + 8, digestLength - 8); - UInt64_To_BE(H3, output, outOff + 16, digestLength - 16); - UInt64_To_BE(H4, output, outOff + 24, digestLength - 24); - UInt64_To_BE(H5, output, outOff + 32, digestLength - 32); - UInt64_To_BE(H6, output, outOff + 40, digestLength - 40); - UInt64_To_BE(H7, output, outOff + 48, digestLength - 48); - UInt64_To_BE(H8, output, outOff + 56, digestLength - 56); - - Reset(); - - return digestLength; - } - - /** - * reset the chaining variables - */ - public override void Reset() - { - base.Reset(); - - /* - * initial hash values use the iv generation algorithm for t. - */ - H1 = H1t; - H2 = H2t; - H3 = H3t; - H4 = H4t; - H5 = H5t; - H6 = H6t; - H7 = H7t; - H8 = H8t; - } - - private void tIvGenerate(int bitLength) - { - H1 = 0x6a09e667f3bcc908UL ^ A5; - H2 = 0xbb67ae8584caa73bUL ^ A5; - H3 = 0x3c6ef372fe94f82bUL ^ A5; - H4 = 0xa54ff53a5f1d36f1UL ^ A5; - H5 = 0x510e527fade682d1UL ^ A5; - H6 = 0x9b05688c2b3e6c1fUL ^ A5; - H7 = 0x1f83d9abfb41bd6bUL ^ A5; - H8 = 0x5be0cd19137e2179UL ^ A5; - - Update(0x53); - Update(0x48); - Update(0x41); - Update(0x2D); - Update(0x35); - Update(0x31); - Update(0x32); - Update(0x2F); - - if (bitLength > 100) - { - Update((byte)(bitLength / 100 + 0x30)); - bitLength = bitLength % 100; - Update((byte)(bitLength / 10 + 0x30)); - bitLength = bitLength % 10; - Update((byte)(bitLength + 0x30)); - } - else if (bitLength > 10) - { - Update((byte)(bitLength / 10 + 0x30)); - bitLength = bitLength % 10; - Update((byte)(bitLength + 0x30)); - } - else - { - Update((byte)(bitLength + 0x30)); - } - - Finish(); - - H1t = H1; - H2t = H2; - H3t = H3; - H4t = H4; - H5t = H5; - H6t = H6; - H7t = H7; - H8t = H8; - } - - private static void UInt64_To_BE(ulong n, byte[] bs, int off, int max) - { - if (max > 0) - { - UInt32_To_BE((uint)(n >> 32), bs, off, max); - - if (max > 4) - { - UInt32_To_BE((uint)n, bs, off + 4, max - 4); - } - } - } - - private static void UInt32_To_BE(uint n, byte[] bs, int off, int max) - { - int num = System.Math.Min(4, max); - while (--num >= 0) - { - int shift = 8 * (3 - num); - bs[off + num] = (byte)(n >> shift); - } - } - - public override IMemoable Copy() - { - return new Sha512tDigest(this); - } - - public override void Reset(IMemoable other) - { - Sha512tDigest t = (Sha512tDigest)other; - - if (this.digestLength != t.digestLength) - { - throw new MemoableResetException("digestLength inappropriate in other"); - } - - base.CopyIn(t); - - this.H1t = t.H1t; - this.H2t = t.H2t; - this.H3t = t.H3t; - this.H4t = t.H4t; - this.H5t = t.H5t; - this.H6t = t.H6t; - this.H7t = t.H7t; - this.H8t = t.H8t; - } - - } -} diff --git a/bc-sharp-crypto/src/crypto/digests/ShakeDigest.cs b/bc-sharp-crypto/src/crypto/digests/ShakeDigest.cs deleted file mode 100644 index 13e8838..0000000 --- a/bc-sharp-crypto/src/crypto/digests/ShakeDigest.cs +++ /dev/null @@ -1,119 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Digests -{ - /// - /// Implementation of SHAKE based on following KeccakNISTInterface.c from http://keccak.noekeon.org/ - /// - /// - /// Following the naming conventions used in the C source code to enable easy review of the implementation. - /// - public class ShakeDigest - : KeccakDigest, IXof - { - private static int CheckBitLength(int bitLength) - { - switch (bitLength) - { - case 128: - case 256: - return bitLength; - default: - throw new ArgumentException(bitLength + " not supported for SHAKE", "bitLength"); - } - } - - public ShakeDigest() - : this(128) - { - } - - public ShakeDigest(int bitLength) - : base(CheckBitLength(bitLength)) - { - } - - public ShakeDigest(ShakeDigest source) - : base(source) - { - } - - public override string AlgorithmName - { - get { return "SHAKE" + fixedOutputLength; } - } - - public override int DoFinal(byte[] output, int outOff) - { - return DoFinal(output, outOff, GetDigestSize()); - } - - public virtual int DoFinal(byte[] output, int outOff, int outLen) - { - DoOutput(output, outOff, outLen); - - Reset(); - - return outLen; - } - - public virtual int DoOutput(byte[] output, int outOff, int outLen) - { - if (!squeezing) - { - AbsorbBits(0x0F, 4); - } - - Squeeze(output, outOff, outLen); - - return outLen; - } - - /* - * TODO Possible API change to support partial-byte suffixes. - */ - protected override int DoFinal(byte[] output, int outOff, byte partialByte, int partialBits) - { - return DoFinal(output, outOff, GetDigestSize(), partialByte, partialBits); - } - - /* - * TODO Possible API change to support partial-byte suffixes. - */ - protected virtual int DoFinal(byte[] output, int outOff, int outLen, byte partialByte, int partialBits) - { - if (partialBits < 0 || partialBits > 7) - throw new ArgumentException("must be in the range [0,7]", "partialBits"); - - int finalInput = (partialByte & ((1 << partialBits) - 1)) | (0x0F << partialBits); - Debug.Assert(finalInput >= 0); - int finalBits = partialBits + 4; - - if (finalBits >= 8) - { - Absorb(new byte[]{ (byte)finalInput }, 0, 1); - finalBits -= 8; - finalInput >>= 8; - } - - if (finalBits > 0) - { - AbsorbBits(finalInput, finalBits); - } - - Squeeze(output, outOff, outLen); - - Reset(); - - return outLen; - } - - public override IMemoable Copy() - { - return new ShakeDigest(this); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/digests/ShortenedDigest.cs b/bc-sharp-crypto/src/crypto/digests/ShortenedDigest.cs deleted file mode 100644 index 9e4d99e..0000000 --- a/bc-sharp-crypto/src/crypto/digests/ShortenedDigest.cs +++ /dev/null @@ -1,82 +0,0 @@ -using System; -using Org.BouncyCastle.Crypto; - -namespace Org.BouncyCastle.Crypto.Digests -{ - /** - * Wrapper class that reduces the output length of a particular digest to - * only the first n bytes of the digest function. - */ - public class ShortenedDigest - : IDigest - { - private IDigest baseDigest; - private int length; - - /** - * Base constructor. - * - * @param baseDigest underlying digest to use. - * @param length length in bytes of the output of doFinal. - * @exception ArgumentException if baseDigest is null, or length is greater than baseDigest.GetDigestSize(). - */ - public ShortenedDigest( - IDigest baseDigest, - int length) - { - if (baseDigest == null) - { - throw new ArgumentNullException("baseDigest"); - } - - if (length > baseDigest.GetDigestSize()) - { - throw new ArgumentException("baseDigest output not large enough to support length"); - } - - this.baseDigest = baseDigest; - this.length = length; - } - - public string AlgorithmName - { - get { return baseDigest.AlgorithmName + "(" + length * 8 + ")"; } - } - - public int GetDigestSize() - { - return length; - } - - public void Update(byte input) - { - baseDigest.Update(input); - } - - public void BlockUpdate(byte[] input, int inOff, int length) - { - baseDigest.BlockUpdate(input, inOff, length); - } - - public int DoFinal(byte[] output, int outOff) - { - byte[] tmp = new byte[baseDigest.GetDigestSize()]; - - baseDigest.DoFinal(tmp, 0); - - Array.Copy(tmp, 0, output, outOff, length); - - return length; - } - - public void Reset() - { - baseDigest.Reset(); - } - - public int GetByteLength() - { - return baseDigest.GetByteLength(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/digests/SkeinDigest.cs b/bc-sharp-crypto/src/crypto/digests/SkeinDigest.cs deleted file mode 100644 index f826ce5..0000000 --- a/bc-sharp-crypto/src/crypto/digests/SkeinDigest.cs +++ /dev/null @@ -1,117 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Crypto.Engines; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Digests -{ - - /// - /// Implementation of the Skein parameterised hash function in 256, 512 and 1024 bit block sizes, - /// based on the Threefish tweakable block cipher. - /// - /// - /// This is the 1.3 version of Skein defined in the Skein hash function submission to the NIST SHA-3 - /// competition in October 2010. - ///

- /// Skein was designed by Niels Ferguson - Stefan Lucks - Bruce Schneier - Doug Whiting - Mihir - /// Bellare - Tadayoshi Kohno - Jon Callas - Jesse Walker. - /// - /// - /// - public class SkeinDigest - : IDigest, IMemoable - { - ///

- /// 256 bit block size - Skein-256 - /// - public const int SKEIN_256 = SkeinEngine.SKEIN_256; - /// - /// 512 bit block size - Skein-512 - /// - public const int SKEIN_512 = SkeinEngine.SKEIN_512; - /// - /// 1024 bit block size - Skein-1024 - /// - public const int SKEIN_1024 = SkeinEngine.SKEIN_1024; - - private readonly SkeinEngine engine; - - /// - /// Constructs a Skein digest with an internal state size and output size. - /// - /// the internal state size in bits - one of or - /// . - /// the output/digest size to produce in bits, which must be an integral number of - /// bytes. - public SkeinDigest(int stateSizeBits, int digestSizeBits) - { - this.engine = new SkeinEngine(stateSizeBits, digestSizeBits); - Init(null); - } - - public SkeinDigest(SkeinDigest digest) - { - this.engine = new SkeinEngine(digest.engine); - } - - public void Reset(IMemoable other) - { - SkeinDigest d = (SkeinDigest)other; - engine.Reset(d.engine); - } - - public IMemoable Copy() - { - return new SkeinDigest(this); - } - - public String AlgorithmName - { - get { return "Skein-" + (engine.BlockSize * 8) + "-" + (engine.OutputSize * 8); } - } - - public int GetDigestSize() - { - return engine.OutputSize; - } - - public int GetByteLength() - { - return engine.BlockSize; - } - - /// - /// Optionally initialises the Skein digest with the provided parameters. - /// - /// See for details on the parameterisation of the Skein hash function. - /// the parameters to apply to this engine, or null to use no parameters. - public void Init(SkeinParameters parameters) - { - engine.Init(parameters); - } - - public void Reset() - { - engine.Reset(); - } - - public void Update(byte inByte) - { - engine.Update(inByte); - } - - public void BlockUpdate(byte[] inBytes, int inOff, int len) - { - engine.Update(inBytes, inOff, len); - } - - public int DoFinal(byte[] outBytes, int outOff) - { - return engine.DoFinal(outBytes, outOff); - } - - } -} \ No newline at end of file diff --git a/bc-sharp-crypto/src/crypto/digests/SkeinEngine.cs b/bc-sharp-crypto/src/crypto/digests/SkeinEngine.cs deleted file mode 100644 index cfedfad..0000000 --- a/bc-sharp-crypto/src/crypto/digests/SkeinEngine.cs +++ /dev/null @@ -1,804 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Crypto.Engines; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Digests -{ - - /// - /// Implementation of the Skein family of parameterised hash functions in 256, 512 and 1024 bit block - /// sizes, based on the Threefish tweakable block cipher. - /// - /// - /// This is the 1.3 version of Skein defined in the Skein hash function submission to the NIST SHA-3 - /// competition in October 2010. - ///

- /// Skein was designed by Niels Ferguson - Stefan Lucks - Bruce Schneier - Doug Whiting - Mihir - /// Bellare - Tadayoshi Kohno - Jon Callas - Jesse Walker. - ///

- /// This implementation is the basis for and , implementing the - /// parameter based configuration system that allows Skein to be adapted to multiple applications.
- /// Initialising the engine with allows standard and arbitrary parameters to - /// be applied during the Skein hash function. - ///

- /// Implemented: - ///

    - ///
  • 256, 512 and 1024 bit internal states.
    • - ///
  • Full 96 bit input length.
    • - ///
  • Parameters defined in the Skein specification, and arbitrary other pre and post message - /// parameters.
    • - ///
  • Arbitrary output size in 1 byte intervals.
    • - ///
- ///

- /// Not implemented: - ///

    - ///
  • Sub-byte length input (bit padding).
    • - ///
  • Tree hashing.
    • - ///
- /// - /// - public class SkeinEngine - : IMemoable - { - /// - /// 256 bit block size - Skein-256 - /// - public const int SKEIN_256 = ThreefishEngine.BLOCKSIZE_256; - /// - /// 512 bit block size - Skein-512 - /// - public const int SKEIN_512 = ThreefishEngine.BLOCKSIZE_512; - /// - /// 1024 bit block size - Skein-1024 - /// - public const int SKEIN_1024 = ThreefishEngine.BLOCKSIZE_1024; - - // Minimal at present, but more complex when tree hashing is implemented - private class Configuration - { - private byte[] bytes = new byte[32]; - - public Configuration(long outputSizeBits) - { - // 0..3 = ASCII SHA3 - bytes[0] = (byte)'S'; - bytes[1] = (byte)'H'; - bytes[2] = (byte)'A'; - bytes[3] = (byte)'3'; - - // 4..5 = version number in LSB order - bytes[4] = 1; - bytes[5] = 0; - - // 8..15 = output length - ThreefishEngine.WordToBytes((ulong)outputSizeBits, bytes, 8); - } - - public byte[] Bytes - { - get { return bytes; } - } - - } - - public class Parameter - { - private int type; - private byte[] value; - - public Parameter(int type, byte[] value) - { - this.type = type; - this.value = value; - } - - public int Type - { - get { return type; } - } - - public byte[] Value - { - get { return value; } - } - - } - - /** - * The parameter type for the Skein key. - */ - private const int PARAM_TYPE_KEY = 0; - - /** - * The parameter type for the Skein configuration block. - */ - private const int PARAM_TYPE_CONFIG = 4; - - /** - * The parameter type for the message. - */ - private const int PARAM_TYPE_MESSAGE = 48; - - /** - * The parameter type for the output transformation. - */ - private const int PARAM_TYPE_OUTPUT = 63; - - /** - * Precalculated UBI(CFG) states for common state/output combinations without key or other - * pre-message params. - */ - private static readonly IDictionary INITIAL_STATES = Platform.CreateHashtable(); - - static SkeinEngine() - { - // From Appendix C of the Skein 1.3 NIST submission - InitialState(SKEIN_256, 128, new ulong[]{ - 0xe1111906964d7260UL, - 0x883daaa77c8d811cUL, - 0x10080df491960f7aUL, - 0xccf7dde5b45bc1c2UL}); - - InitialState(SKEIN_256, 160, new ulong[]{ - 0x1420231472825e98UL, - 0x2ac4e9a25a77e590UL, - 0xd47a58568838d63eUL, - 0x2dd2e4968586ab7dUL}); - - InitialState(SKEIN_256, 224, new ulong[]{ - 0xc6098a8c9ae5ea0bUL, - 0x876d568608c5191cUL, - 0x99cb88d7d7f53884UL, - 0x384bddb1aeddb5deUL}); - - InitialState(SKEIN_256, 256, new ulong[]{ - 0xfc9da860d048b449UL, - 0x2fca66479fa7d833UL, - 0xb33bc3896656840fUL, - 0x6a54e920fde8da69UL}); - - InitialState(SKEIN_512, 128, new ulong[]{ - 0xa8bc7bf36fbf9f52UL, - 0x1e9872cebd1af0aaUL, - 0x309b1790b32190d3UL, - 0xbcfbb8543f94805cUL, - 0x0da61bcd6e31b11bUL, - 0x1a18ebead46a32e3UL, - 0xa2cc5b18ce84aa82UL, - 0x6982ab289d46982dUL}); - - InitialState(SKEIN_512, 160, new ulong[]{ - 0x28b81a2ae013bd91UL, - 0xc2f11668b5bdf78fUL, - 0x1760d8f3f6a56f12UL, - 0x4fb747588239904fUL, - 0x21ede07f7eaf5056UL, - 0xd908922e63ed70b8UL, - 0xb8ec76ffeccb52faUL, - 0x01a47bb8a3f27a6eUL}); - - InitialState(SKEIN_512, 224, new ulong[]{ - 0xccd0616248677224UL, - 0xcba65cf3a92339efUL, - 0x8ccd69d652ff4b64UL, - 0x398aed7b3ab890b4UL, - 0x0f59d1b1457d2bd0UL, - 0x6776fe6575d4eb3dUL, - 0x99fbc70e997413e9UL, - 0x9e2cfccfe1c41ef7UL}); - - InitialState(SKEIN_512, 384, new ulong[]{ - 0xa3f6c6bf3a75ef5fUL, - 0xb0fef9ccfd84faa4UL, - 0x9d77dd663d770cfeUL, - 0xd798cbf3b468fddaUL, - 0x1bc4a6668a0e4465UL, - 0x7ed7d434e5807407UL, - 0x548fc1acd4ec44d6UL, - 0x266e17546aa18ff8UL}); - - InitialState(SKEIN_512, 512, new ulong[]{ - 0x4903adff749c51ceUL, - 0x0d95de399746df03UL, - 0x8fd1934127c79bceUL, - 0x9a255629ff352cb1UL, - 0x5db62599df6ca7b0UL, - 0xeabe394ca9d5c3f4UL, - 0x991112c71a75b523UL, - 0xae18a40b660fcc33UL}); - } - - private static void InitialState(int blockSize, int outputSize, ulong[] state) - { - INITIAL_STATES.Add(VariantIdentifier(blockSize / 8, outputSize / 8), state); - } - - private static int VariantIdentifier(int blockSizeBytes, int outputSizeBytes) - { - return (outputSizeBytes << 16) | blockSizeBytes; - } - - private class UbiTweak - { - /** - * Point at which position might overflow long, so switch to add with carry logic - */ - private const ulong LOW_RANGE = UInt64.MaxValue - UInt32.MaxValue; - - /** - * Bit 127 = final - */ - private const ulong T1_FINAL = 1UL << 63; - - /** - * Bit 126 = first - */ - private const ulong T1_FIRST = 1UL << 62; - - /** - * UBI uses a 128 bit tweak - */ - private ulong[] tweak = new ulong[2]; - - /** - * Whether 64 bit position exceeded - */ - private bool extendedPosition; - - public UbiTweak() - { - Reset(); - } - - public void Reset(UbiTweak tweak) - { - this.tweak = Arrays.Clone(tweak.tweak, this.tweak); - this.extendedPosition = tweak.extendedPosition; - } - - public void Reset() - { - tweak[0] = 0; - tweak[1] = 0; - extendedPosition = false; - First = true; - } - - public uint Type - { - get - { - return (uint)((tweak[1] >> 56) & 0x3FUL); - } - - set - { - // Bits 120..125 = type - tweak[1] = (tweak[1] & 0xFFFFFFC000000000UL) | ((value & 0x3FUL) << 56); - } - } - - public bool First - { - get - { - return ((tweak[1] & T1_FIRST) != 0); - } - set - { - if (value) - { - tweak[1] |= T1_FIRST; - } - else - { - tweak[1] &= ~T1_FIRST; - } - } - } - - public bool Final - { - get - { - return ((tweak[1] & T1_FINAL) != 0); - } - set - { - if (value) - { - tweak[1] |= T1_FINAL; - } - else - { - tweak[1] &= ~T1_FINAL; - } - } - } - - /** - * Advances the position in the tweak by the specified value. - */ - public void AdvancePosition(int advance) - { - // Bits 0..95 = position - if (extendedPosition) - { - ulong[] parts = new ulong[3]; - parts[0] = tweak[0] & 0xFFFFFFFFUL; - parts[1] = (tweak[0] >> 32) & 0xFFFFFFFFUL; - parts[2] = tweak[1] & 0xFFFFFFFFUL; - - ulong carry = (ulong)advance; - for (int i = 0; i < parts.Length; i++) - { - carry += parts[i]; - parts[i] = carry; - carry >>= 32; - } - tweak[0] = ((parts[1] & 0xFFFFFFFFUL) << 32) | (parts[0] & 0xFFFFFFFFUL); - tweak[1] = (tweak[1] & 0xFFFFFFFF00000000UL) | (parts[2] & 0xFFFFFFFFUL); - } - else - { - ulong position = tweak[0]; - position += (uint)advance; - tweak[0] = position; - if (position > LOW_RANGE) - { - extendedPosition = true; - } - } - } - - public ulong[] GetWords() - { - return tweak; - } - - public override string ToString() - { - return Type + " first: " + First + ", final: " + Final; - } - - } - - /** - * The Unique Block Iteration chaining mode. - */ - // TODO: This might be better as methods... - private class UBI - { - private readonly UbiTweak tweak = new UbiTweak(); - - private readonly SkeinEngine engine; - - /** - * Buffer for the current block of message data - */ - private byte[] currentBlock; - - /** - * Offset into the current message block - */ - private int currentOffset; - - /** - * Buffer for message words for feedback into encrypted block - */ - private ulong[] message; - - public UBI(SkeinEngine engine, int blockSize) - { - this.engine = engine; - currentBlock = new byte[blockSize]; - message = new ulong[currentBlock.Length / 8]; - } - - public void Reset(UBI ubi) - { - currentBlock = Arrays.Clone(ubi.currentBlock, currentBlock); - currentOffset = ubi.currentOffset; - message = Arrays.Clone(ubi.message, this.message); - tweak.Reset(ubi.tweak); - } - - public void Reset(int type) - { - tweak.Reset(); - tweak.Type = (uint)type; - currentOffset = 0; - } - - public void Update(byte[] value, int offset, int len, ulong[] output) - { - /* - * Buffer complete blocks for the underlying Threefish cipher, only flushing when there - * are subsequent bytes (last block must be processed in doFinal() with final=true set). - */ - int copied = 0; - while (len > copied) - { - if (currentOffset == currentBlock.Length) - { - ProcessBlock(output); - tweak.First = false; - currentOffset = 0; - } - - int toCopy = System.Math.Min((len - copied), currentBlock.Length - currentOffset); - Array.Copy(value, offset + copied, currentBlock, currentOffset, toCopy); - copied += toCopy; - currentOffset += toCopy; - tweak.AdvancePosition(toCopy); - } - } - - private void ProcessBlock(ulong[] output) - { - engine.threefish.Init(true, engine.chain, tweak.GetWords()); - for (int i = 0; i < message.Length; i++) - { - message[i] = ThreefishEngine.BytesToWord(currentBlock, i * 8); - } - - engine.threefish.ProcessBlock(message, output); - - for (int i = 0; i < output.Length; i++) - { - output[i] ^= message[i]; - } - } - - public void DoFinal(ulong[] output) - { - // Pad remainder of current block with zeroes - for (int i = currentOffset; i < currentBlock.Length; i++) - { - currentBlock[i] = 0; - } - - tweak.Final = true; - ProcessBlock(output); - } - - } - - /** - * Underlying Threefish tweakable block cipher - */ - private readonly ThreefishEngine threefish; - - /** - * Size of the digest output, in bytes - */ - private readonly int outputSizeBytes; - - /** - * The current chaining/state value - */ - private ulong[] chain; - - /** - * The initial state value - */ - private ulong[] initialState; - - /** - * The (optional) key parameter - */ - private byte[] key; - - /** - * Parameters to apply prior to the message - */ - private Parameter[] preMessageParameters; - - /** - * Parameters to apply after the message, but prior to output - */ - private Parameter[] postMessageParameters; - - /** - * The current UBI operation - */ - private readonly UBI ubi; - - /** - * Buffer for single byte update method - */ - private readonly byte[] singleByte = new byte[1]; - - /// - /// Constructs a Skein digest with an internal state size and output size. - /// - /// the internal state size in bits - one of or - /// . - /// the output/digest size to produce in bits, which must be an integral number of - /// bytes. - public SkeinEngine(int blockSizeBits, int outputSizeBits) - { - if (outputSizeBits % 8 != 0) - { - throw new ArgumentException("Output size must be a multiple of 8 bits. :" + outputSizeBits); - } - // TODO: Prevent digest sizes > block size? - this.outputSizeBytes = outputSizeBits / 8; - - this.threefish = new ThreefishEngine(blockSizeBits); - this.ubi = new UBI(this,threefish.GetBlockSize()); - } - - /// - /// Creates a SkeinEngine as an exact copy of an existing instance. - /// - public SkeinEngine(SkeinEngine engine) - : this(engine.BlockSize * 8, engine.OutputSize * 8) - { - CopyIn(engine); - } - - private void CopyIn(SkeinEngine engine) - { - this.ubi.Reset(engine.ubi); - this.chain = Arrays.Clone(engine.chain, this.chain); - this.initialState = Arrays.Clone(engine.initialState, this.initialState); - this.key = Arrays.Clone(engine.key, this.key); - this.preMessageParameters = Clone(engine.preMessageParameters, this.preMessageParameters); - this.postMessageParameters = Clone(engine.postMessageParameters, this.postMessageParameters); - } - - private static Parameter[] Clone(Parameter[] data, Parameter[] existing) - { - if (data == null) - { - return null; - } - if ((existing == null) || (existing.Length != data.Length)) - { - existing = new Parameter[data.Length]; - } - Array.Copy(data, 0, existing, 0, existing.Length); - return existing; - } - - public IMemoable Copy() - { - return new SkeinEngine(this); - } - - public void Reset(IMemoable other) - { - SkeinEngine s = (SkeinEngine)other; - if ((BlockSize != s.BlockSize) || (outputSizeBytes != s.outputSizeBytes)) - { - throw new MemoableResetException("Incompatible parameters in provided SkeinEngine."); - } - CopyIn(s); - } - - public int OutputSize - { - get { return outputSizeBytes; } - } - - public int BlockSize - { - get { return threefish.GetBlockSize (); } - } - - /// - /// Initialises the Skein engine with the provided parameters. See for - /// details on the parameterisation of the Skein hash function. - /// - /// the parameters to apply to this engine, or null to use no parameters. - public void Init(SkeinParameters parameters) - { - this.chain = null; - this.key = null; - this.preMessageParameters = null; - this.postMessageParameters = null; - - if (parameters != null) - { - byte[] key = parameters.GetKey(); - if (key.Length < 16) - { - throw new ArgumentException("Skein key must be at least 128 bits."); - } - InitParams(parameters.GetParameters()); - } - CreateInitialState(); - - // Initialise message block - UbiInit(PARAM_TYPE_MESSAGE); - } - - private void InitParams(IDictionary parameters) - { - IEnumerator keys = parameters.Keys.GetEnumerator(); - IList pre = Platform.CreateArrayList(); - IList post = Platform.CreateArrayList(); - - while (keys.MoveNext()) - { - int type = (int)keys.Current; - byte[] value = (byte[])parameters[type]; - - if (type == PARAM_TYPE_KEY) - { - this.key = value; - } - else if (type < PARAM_TYPE_MESSAGE) - { - pre.Add(new Parameter(type, value)); - } - else - { - post.Add(new Parameter(type, value)); - } - } - preMessageParameters = new Parameter[pre.Count]; - pre.CopyTo(preMessageParameters, 0); - Array.Sort(preMessageParameters); - - postMessageParameters = new Parameter[post.Count]; - post.CopyTo(postMessageParameters, 0); - Array.Sort(postMessageParameters); - } - - /** - * Calculate the initial (pre message block) chaining state. - */ - private void CreateInitialState() - { - ulong[] precalc = (ulong[])INITIAL_STATES[VariantIdentifier(BlockSize, OutputSize)]; - if ((key == null) && (precalc != null)) - { - // Precalculated UBI(CFG) - chain = Arrays.Clone(precalc); - } - else - { - // Blank initial state - chain = new ulong[BlockSize / 8]; - - // Process key block - if (key != null) - { - UbiComplete(SkeinParameters.PARAM_TYPE_KEY, key); - } - - // Process configuration block - UbiComplete(PARAM_TYPE_CONFIG, new Configuration(outputSizeBytes * 8).Bytes); - } - - // Process additional pre-message parameters - if (preMessageParameters != null) - { - for (int i = 0; i < preMessageParameters.Length; i++) - { - Parameter param = preMessageParameters[i]; - UbiComplete(param.Type, param.Value); - } - } - initialState = Arrays.Clone(chain); - } - - /// - /// Reset the engine to the initial state (with the key and any pre-message parameters , ready to - /// accept message input. - /// - public void Reset() - { - Array.Copy(initialState, 0, chain, 0, chain.Length); - - UbiInit(PARAM_TYPE_MESSAGE); - } - - private void UbiComplete(int type, byte[] value) - { - UbiInit(type); - this.ubi.Update(value, 0, value.Length, chain); - UbiFinal(); - } - - private void UbiInit(int type) - { - this.ubi.Reset(type); - } - - private void UbiFinal() - { - ubi.DoFinal(chain); - } - - private void CheckInitialised() - { - if (this.ubi == null) - { - throw new ArgumentException("Skein engine is not initialised."); - } - } - - public void Update(byte inByte) - { - singleByte[0] = inByte; - Update(singleByte, 0, 1); - } - - public void Update(byte[] inBytes, int inOff, int len) - { - CheckInitialised(); - ubi.Update(inBytes, inOff, len, chain); - } - - public int DoFinal(byte[] outBytes, int outOff) - { - CheckInitialised(); - if (outBytes.Length < (outOff + outputSizeBytes)) - { - throw new DataLengthException("Output buffer is too short to hold output"); - } - - // Finalise message block - UbiFinal(); - - // Process additional post-message parameters - if (postMessageParameters != null) - { - for (int i = 0; i < postMessageParameters.Length; i++) - { - Parameter param = postMessageParameters[i]; - UbiComplete(param.Type, param.Value); - } - } - - // Perform the output transform - int blockSize = BlockSize; - int blocksRequired = ((outputSizeBytes + blockSize - 1) / blockSize); - for (int i = 0; i < blocksRequired; i++) - { - int toWrite = System.Math.Min(blockSize, outputSizeBytes - (i * blockSize)); - Output((ulong)i, outBytes, outOff + (i * blockSize), toWrite); - } - - Reset(); - - return outputSizeBytes; - } - - private void Output(ulong outputSequence, byte[] outBytes, int outOff, int outputBytes) - { - byte[] currentBytes = new byte[8]; - ThreefishEngine.WordToBytes(outputSequence, currentBytes, 0); - - // Output is a sequence of UBI invocations all of which use and preserve the pre-output - // state - ulong[] outputWords = new ulong[chain.Length]; - UbiInit(PARAM_TYPE_OUTPUT); - this.ubi.Update(currentBytes, 0, currentBytes.Length, outputWords); - ubi.DoFinal(outputWords); - - int wordsRequired = ((outputBytes + 8 - 1) / 8); - for (int i = 0; i < wordsRequired; i++) - { - int toWrite = System.Math.Min(8, outputBytes - (i * 8)); - if (toWrite == 8) - { - ThreefishEngine.WordToBytes(outputWords[i], outBytes, outOff + (i * 8)); - } - else - { - ThreefishEngine.WordToBytes(outputWords[i], currentBytes, 0); - Array.Copy(currentBytes, 0, outBytes, outOff + (i * 8), toWrite); - } - } - } - - } -} - diff --git a/bc-sharp-crypto/src/crypto/digests/TigerDigest.cs b/bc-sharp-crypto/src/crypto/digests/TigerDigest.cs deleted file mode 100644 index 059232d..0000000 --- a/bc-sharp-crypto/src/crypto/digests/TigerDigest.cs +++ /dev/null @@ -1,883 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Digests -{ - /** - * implementation of Tiger based on: - * - * http://www.cs.technion.ac.il/~biham/Reports/Tiger - */ - public class TigerDigest - : IDigest, IMemoable - { - private const int MyByteLength = 64; - - /* - * S-Boxes. - */ - private static readonly long[] t1 = { - unchecked((long) 0x02AAB17CF7E90C5EL) /* 0 */, unchecked((long) 0xAC424B03E243A8ECL) /* 1 */, - unchecked((long) 0x72CD5BE30DD5FCD3L) /* 2 */, unchecked((long) 0x6D019B93F6F97F3AL) /* 3 */, - unchecked((long) 0xCD9978FFD21F9193L) /* 4 */, unchecked((long) 0x7573A1C9708029E2L) /* 5 */, - unchecked((long) 0xB164326B922A83C3L) /* 6 */, unchecked((long) 0x46883EEE04915870L) /* 7 */, - unchecked((long) 0xEAACE3057103ECE6L) /* 8 */, unchecked((long) 0xC54169B808A3535CL) /* 9 */, - unchecked((long) 0x4CE754918DDEC47CL) /* 10 */, unchecked((long) 0x0AA2F4DFDC0DF40CL) /* 11 */, - unchecked((long) 0x10B76F18A74DBEFAL) /* 12 */, unchecked((long) 0xC6CCB6235AD1AB6AL) /* 13 */, - unchecked((long) 0x13726121572FE2FFL) /* 14 */, unchecked((long) 0x1A488C6F199D921EL) /* 15 */, - unchecked((long) 0x4BC9F9F4DA0007CAL) /* 16 */, unchecked((long) 0x26F5E6F6E85241C7L) /* 17 */, - unchecked((long) 0x859079DBEA5947B6L) /* 18 */, unchecked((long) 0x4F1885C5C99E8C92L) /* 19 */, - unchecked((long) 0xD78E761EA96F864BL) /* 20 */, unchecked((long) 0x8E36428C52B5C17DL) /* 21 */, - unchecked((long) 0x69CF6827373063C1L) /* 22 */, unchecked((long) 0xB607C93D9BB4C56EL) /* 23 */, - unchecked((long) 0x7D820E760E76B5EAL) /* 24 */, unchecked((long) 0x645C9CC6F07FDC42L) /* 25 */, - unchecked((long) 0xBF38A078243342E0L) /* 26 */, unchecked((long) 0x5F6B343C9D2E7D04L) /* 27 */, - unchecked((long) 0xF2C28AEB600B0EC6L) /* 28 */, unchecked((long) 0x6C0ED85F7254BCACL) /* 29 */, - unchecked((long) 0x71592281A4DB4FE5L) /* 30 */, unchecked((long) 0x1967FA69CE0FED9FL) /* 31 */, - unchecked((long) 0xFD5293F8B96545DBL) /* 32 */, unchecked((long) 0xC879E9D7F2A7600BL) /* 33 */, - unchecked((long) 0x860248920193194EL) /* 34 */, unchecked((long) 0xA4F9533B2D9CC0B3L) /* 35 */, - unchecked((long) 0x9053836C15957613L) /* 36 */, unchecked((long) 0xDB6DCF8AFC357BF1L) /* 37 */, - unchecked((long) 0x18BEEA7A7A370F57L) /* 38 */, unchecked((long) 0x037117CA50B99066L) /* 39 */, - unchecked((long) 0x6AB30A9774424A35L) /* 40 */, unchecked((long) 0xF4E92F02E325249BL) /* 41 */, - unchecked((long) 0x7739DB07061CCAE1L) /* 42 */, unchecked((long) 0xD8F3B49CECA42A05L) /* 43 */, - unchecked((long) 0xBD56BE3F51382F73L) /* 44 */, unchecked((long) 0x45FAED5843B0BB28L) /* 45 */, - unchecked((long) 0x1C813D5C11BF1F83L) /* 46 */, unchecked((long) 0x8AF0E4B6D75FA169L) /* 47 */, - unchecked((long) 0x33EE18A487AD9999L) /* 48 */, unchecked((long) 0x3C26E8EAB1C94410L) /* 49 */, - unchecked((long) 0xB510102BC0A822F9L) /* 50 */, unchecked((long) 0x141EEF310CE6123BL) /* 51 */, - unchecked((long) 0xFC65B90059DDB154L) /* 52 */, unchecked((long) 0xE0158640C5E0E607L) /* 53 */, - unchecked((long) 0x884E079826C3A3CFL) /* 54 */, unchecked((long) 0x930D0D9523C535FDL) /* 55 */, - unchecked((long) 0x35638D754E9A2B00L) /* 56 */, unchecked((long) 0x4085FCCF40469DD5L) /* 57 */, - unchecked((long) 0xC4B17AD28BE23A4CL) /* 58 */, unchecked((long) 0xCAB2F0FC6A3E6A2EL) /* 59 */, - unchecked((long) 0x2860971A6B943FCDL) /* 60 */, unchecked((long) 0x3DDE6EE212E30446L) /* 61 */, - unchecked((long) 0x6222F32AE01765AEL) /* 62 */, unchecked((long) 0x5D550BB5478308FEL) /* 63 */, - unchecked((long) 0xA9EFA98DA0EDA22AL) /* 64 */, unchecked((long) 0xC351A71686C40DA7L) /* 65 */, - unchecked((long) 0x1105586D9C867C84L) /* 66 */, unchecked((long) 0xDCFFEE85FDA22853L) /* 67 */, - unchecked((long) 0xCCFBD0262C5EEF76L) /* 68 */, unchecked((long) 0xBAF294CB8990D201L) /* 69 */, - unchecked((long) 0xE69464F52AFAD975L) /* 70 */, unchecked((long) 0x94B013AFDF133E14L) /* 71 */, - unchecked((long) 0x06A7D1A32823C958L) /* 72 */, unchecked((long) 0x6F95FE5130F61119L) /* 73 */, - unchecked((long) 0xD92AB34E462C06C0L) /* 74 */, unchecked((long) 0xED7BDE33887C71D2L) /* 75 */, - unchecked((long) 0x79746D6E6518393EL) /* 76 */, unchecked((long) 0x5BA419385D713329L) /* 77 */, - unchecked((long) 0x7C1BA6B948A97564L) /* 78 */, unchecked((long) 0x31987C197BFDAC67L) /* 79 */, - unchecked((long) 0xDE6C23C44B053D02L) /* 80 */, unchecked((long) 0x581C49FED002D64DL) /* 81 */, - unchecked((long) 0xDD474D6338261571L) /* 82 */, unchecked((long) 0xAA4546C3E473D062L) /* 83 */, - unchecked((long) 0x928FCE349455F860L) /* 84 */, unchecked((long) 0x48161BBACAAB94D9L) /* 85 */, - unchecked((long) 0x63912430770E6F68L) /* 86 */, unchecked((long) 0x6EC8A5E602C6641CL) /* 87 */, - unchecked((long) 0x87282515337DDD2BL) /* 88 */, unchecked((long) 0x2CDA6B42034B701BL) /* 89 */, - unchecked((long) 0xB03D37C181CB096DL) /* 90 */, unchecked((long) 0xE108438266C71C6FL) /* 91 */, - unchecked((long) 0x2B3180C7EB51B255L) /* 92 */, unchecked((long) 0xDF92B82F96C08BBCL) /* 93 */, - unchecked((long) 0x5C68C8C0A632F3BAL) /* 94 */, unchecked((long) 0x5504CC861C3D0556L) /* 95 */, - unchecked((long) 0xABBFA4E55FB26B8FL) /* 96 */, unchecked((long) 0x41848B0AB3BACEB4L) /* 97 */, - unchecked((long) 0xB334A273AA445D32L) /* 98 */, unchecked((long) 0xBCA696F0A85AD881L) /* 99 */, - unchecked((long) 0x24F6EC65B528D56CL) /* 100 */, unchecked((long) 0x0CE1512E90F4524AL) /* 101 */, - unchecked((long) 0x4E9DD79D5506D35AL) /* 102 */, unchecked((long) 0x258905FAC6CE9779L) /* 103 */, - unchecked((long) 0x2019295B3E109B33L) /* 104 */, unchecked((long) 0xF8A9478B73A054CCL) /* 105 */, - unchecked((long) 0x2924F2F934417EB0L) /* 106 */, unchecked((long) 0x3993357D536D1BC4L) /* 107 */, - unchecked((long) 0x38A81AC21DB6FF8BL) /* 108 */, unchecked((long) 0x47C4FBF17D6016BFL) /* 109 */, - unchecked((long) 0x1E0FAADD7667E3F5L) /* 110 */, unchecked((long) 0x7ABCFF62938BEB96L) /* 111 */, - unchecked((long) 0xA78DAD948FC179C9L) /* 112 */, unchecked((long) 0x8F1F98B72911E50DL) /* 113 */, - unchecked((long) 0x61E48EAE27121A91L) /* 114 */, unchecked((long) 0x4D62F7AD31859808L) /* 115 */, - unchecked((long) 0xECEBA345EF5CEAEBL) /* 116 */, unchecked((long) 0xF5CEB25EBC9684CEL) /* 117 */, - unchecked((long) 0xF633E20CB7F76221L) /* 118 */, unchecked((long) 0xA32CDF06AB8293E4L) /* 119 */, - unchecked((long) 0x985A202CA5EE2CA4L) /* 120 */, unchecked((long) 0xCF0B8447CC8A8FB1L) /* 121 */, - unchecked((long) 0x9F765244979859A3L) /* 122 */, unchecked((long) 0xA8D516B1A1240017L) /* 123 */, - unchecked((long) 0x0BD7BA3EBB5DC726L) /* 124 */, unchecked((long) 0xE54BCA55B86ADB39L) /* 125 */, - unchecked((long) 0x1D7A3AFD6C478063L) /* 126 */, unchecked((long) 0x519EC608E7669EDDL) /* 127 */, - unchecked((long) 0x0E5715A2D149AA23L) /* 128 */, unchecked((long) 0x177D4571848FF194L) /* 129 */, - unchecked((long) 0xEEB55F3241014C22L) /* 130 */, unchecked((long) 0x0F5E5CA13A6E2EC2L) /* 131 */, - unchecked((long) 0x8029927B75F5C361L) /* 132 */, unchecked((long) 0xAD139FABC3D6E436L) /* 133 */, - unchecked((long) 0x0D5DF1A94CCF402FL) /* 134 */, unchecked((long) 0x3E8BD948BEA5DFC8L) /* 135 */, - unchecked((long) 0xA5A0D357BD3FF77EL) /* 136 */, unchecked((long) 0xA2D12E251F74F645L) /* 137 */, - unchecked((long) 0x66FD9E525E81A082L) /* 138 */, unchecked((long) 0x2E0C90CE7F687A49L) /* 139 */, - unchecked((long) 0xC2E8BCBEBA973BC5L) /* 140 */, unchecked((long) 0x000001BCE509745FL) /* 141 */, - unchecked((long) 0x423777BBE6DAB3D6L) /* 142 */, unchecked((long) 0xD1661C7EAEF06EB5L) /* 143 */, - unchecked((long) 0xA1781F354DAACFD8L) /* 144 */, unchecked((long) 0x2D11284A2B16AFFCL) /* 145 */, - unchecked((long) 0xF1FC4F67FA891D1FL) /* 146 */, unchecked((long) 0x73ECC25DCB920ADAL) /* 147 */, - unchecked((long) 0xAE610C22C2A12651L) /* 148 */, unchecked((long) 0x96E0A810D356B78AL) /* 149 */, - unchecked((long) 0x5A9A381F2FE7870FL) /* 150 */, unchecked((long) 0xD5AD62EDE94E5530L) /* 151 */, - unchecked((long) 0xD225E5E8368D1427L) /* 152 */, unchecked((long) 0x65977B70C7AF4631L) /* 153 */, - unchecked((long) 0x99F889B2DE39D74FL) /* 154 */, unchecked((long) 0x233F30BF54E1D143L) /* 155 */, - unchecked((long) 0x9A9675D3D9A63C97L) /* 156 */, unchecked((long) 0x5470554FF334F9A8L) /* 157 */, - unchecked((long) 0x166ACB744A4F5688L) /* 158 */, unchecked((long) 0x70C74CAAB2E4AEADL) /* 159 */, - unchecked((long) 0xF0D091646F294D12L) /* 160 */, unchecked((long) 0x57B82A89684031D1L) /* 161 */, - unchecked((long) 0xEFD95A5A61BE0B6BL) /* 162 */, unchecked((long) 0x2FBD12E969F2F29AL) /* 163 */, - unchecked((long) 0x9BD37013FEFF9FE8L) /* 164 */, unchecked((long) 0x3F9B0404D6085A06L) /* 165 */, - unchecked((long) 0x4940C1F3166CFE15L) /* 166 */, unchecked((long) 0x09542C4DCDF3DEFBL) /* 167 */, - unchecked((long) 0xB4C5218385CD5CE3L) /* 168 */, unchecked((long) 0xC935B7DC4462A641L) /* 169 */, - unchecked((long) 0x3417F8A68ED3B63FL) /* 170 */, unchecked((long) 0xB80959295B215B40L) /* 171 */, - unchecked((long) 0xF99CDAEF3B8C8572L) /* 172 */, unchecked((long) 0x018C0614F8FCB95DL) /* 173 */, - unchecked((long) 0x1B14ACCD1A3ACDF3L) /* 174 */, unchecked((long) 0x84D471F200BB732DL) /* 175 */, - unchecked((long) 0xC1A3110E95E8DA16L) /* 176 */, unchecked((long) 0x430A7220BF1A82B8L) /* 177 */, - unchecked((long) 0xB77E090D39DF210EL) /* 178 */, unchecked((long) 0x5EF4BD9F3CD05E9DL) /* 179 */, - unchecked((long) 0x9D4FF6DA7E57A444L) /* 180 */, unchecked((long) 0xDA1D60E183D4A5F8L) /* 181 */, - unchecked((long) 0xB287C38417998E47L) /* 182 */, unchecked((long) 0xFE3EDC121BB31886L) /* 183 */, - unchecked((long) 0xC7FE3CCC980CCBEFL) /* 184 */, unchecked((long) 0xE46FB590189BFD03L) /* 185 */, - unchecked((long) 0x3732FD469A4C57DCL) /* 186 */, unchecked((long) 0x7EF700A07CF1AD65L) /* 187 */, - unchecked((long) 0x59C64468A31D8859L) /* 188 */, unchecked((long) 0x762FB0B4D45B61F6L) /* 189 */, - unchecked((long) 0x155BAED099047718L) /* 190 */, unchecked((long) 0x68755E4C3D50BAA6L) /* 191 */, - unchecked((long) 0xE9214E7F22D8B4DFL) /* 192 */, unchecked((long) 0x2ADDBF532EAC95F4L) /* 193 */, - unchecked((long) 0x32AE3909B4BD0109L) /* 194 */, unchecked((long) 0x834DF537B08E3450L) /* 195 */, - unchecked((long) 0xFA209DA84220728DL) /* 196 */, unchecked((long) 0x9E691D9B9EFE23F7L) /* 197 */, - unchecked((long) 0x0446D288C4AE8D7FL) /* 198 */, unchecked((long) 0x7B4CC524E169785BL) /* 199 */, - unchecked((long) 0x21D87F0135CA1385L) /* 200 */, unchecked((long) 0xCEBB400F137B8AA5L) /* 201 */, - unchecked((long) 0x272E2B66580796BEL) /* 202 */, unchecked((long) 0x3612264125C2B0DEL) /* 203 */, - unchecked((long) 0x057702BDAD1EFBB2L) /* 204 */, unchecked((long) 0xD4BABB8EACF84BE9L) /* 205 */, - unchecked((long) 0x91583139641BC67BL) /* 206 */, unchecked((long) 0x8BDC2DE08036E024L) /* 207 */, - unchecked((long) 0x603C8156F49F68EDL) /* 208 */, unchecked((long) 0xF7D236F7DBEF5111L) /* 209 */, - unchecked((long) 0x9727C4598AD21E80L) /* 210 */, unchecked((long) 0xA08A0896670A5FD7L) /* 211 */, - unchecked((long) 0xCB4A8F4309EBA9CBL) /* 212 */, unchecked((long) 0x81AF564B0F7036A1L) /* 213 */, - unchecked((long) 0xC0B99AA778199ABDL) /* 214 */, unchecked((long) 0x959F1EC83FC8E952L) /* 215 */, - unchecked((long) 0x8C505077794A81B9L) /* 216 */, unchecked((long) 0x3ACAAF8F056338F0L) /* 217 */, - unchecked((long) 0x07B43F50627A6778L) /* 218 */, unchecked((long) 0x4A44AB49F5ECCC77L) /* 219 */, - unchecked((long) 0x3BC3D6E4B679EE98L) /* 220 */, unchecked((long) 0x9CC0D4D1CF14108CL) /* 221 */, - unchecked((long) 0x4406C00B206BC8A0L) /* 222 */, unchecked((long) 0x82A18854C8D72D89L) /* 223 */, - unchecked((long) 0x67E366B35C3C432CL) /* 224 */, unchecked((long) 0xB923DD61102B37F2L) /* 225 */, - unchecked((long) 0x56AB2779D884271DL) /* 226 */, unchecked((long) 0xBE83E1B0FF1525AFL) /* 227 */, - unchecked((long) 0xFB7C65D4217E49A9L) /* 228 */, unchecked((long) 0x6BDBE0E76D48E7D4L) /* 229 */, - unchecked((long) 0x08DF828745D9179EL) /* 230 */, unchecked((long) 0x22EA6A9ADD53BD34L) /* 231 */, - unchecked((long) 0xE36E141C5622200AL) /* 232 */, unchecked((long) 0x7F805D1B8CB750EEL) /* 233 */, - unchecked((long) 0xAFE5C7A59F58E837L) /* 234 */, unchecked((long) 0xE27F996A4FB1C23CL) /* 235 */, - unchecked((long) 0xD3867DFB0775F0D0L) /* 236 */, unchecked((long) 0xD0E673DE6E88891AL) /* 237 */, - unchecked((long) 0x123AEB9EAFB86C25L) /* 238 */, unchecked((long) 0x30F1D5D5C145B895L) /* 239 */, - unchecked((long) 0xBB434A2DEE7269E7L) /* 240 */, unchecked((long) 0x78CB67ECF931FA38L) /* 241 */, - unchecked((long) 0xF33B0372323BBF9CL) /* 242 */, unchecked((long) 0x52D66336FB279C74L) /* 243 */, - unchecked((long) 0x505F33AC0AFB4EAAL) /* 244 */, unchecked((long) 0xE8A5CD99A2CCE187L) /* 245 */, - unchecked((long) 0x534974801E2D30BBL) /* 246 */, unchecked((long) 0x8D2D5711D5876D90L) /* 247 */, - unchecked((long) 0x1F1A412891BC038EL) /* 248 */, unchecked((long) 0xD6E2E71D82E56648L) /* 249 */, - unchecked((long) 0x74036C3A497732B7L) /* 250 */, unchecked((long) 0x89B67ED96361F5ABL) /* 251 */, - unchecked((long) 0xFFED95D8F1EA02A2L) /* 252 */, unchecked((long) 0xE72B3BD61464D43DL) /* 253 */, - unchecked((long) 0xA6300F170BDC4820L) /* 254 */, unchecked((long) 0xEBC18760ED78A77AL) /* 255 */, - }; - - private static readonly long[] t2 = { - unchecked((long) 0xE6A6BE5A05A12138L) /* 256 */, unchecked((long) 0xB5A122A5B4F87C98L) /* 257 */, - unchecked((long) 0x563C6089140B6990L) /* 258 */, unchecked((long) 0x4C46CB2E391F5DD5L) /* 259 */, - unchecked((long) 0xD932ADDBC9B79434L) /* 260 */, unchecked((long) 0x08EA70E42015AFF5L) /* 261 */, - unchecked((long) 0xD765A6673E478CF1L) /* 262 */, unchecked((long) 0xC4FB757EAB278D99L) /* 263 */, - unchecked((long) 0xDF11C6862D6E0692L) /* 264 */, unchecked((long) 0xDDEB84F10D7F3B16L) /* 265 */, - unchecked((long) 0x6F2EF604A665EA04L) /* 266 */, unchecked((long) 0x4A8E0F0FF0E0DFB3L) /* 267 */, - unchecked((long) 0xA5EDEEF83DBCBA51L) /* 268 */, unchecked((long) 0xFC4F0A2A0EA4371EL) /* 269 */, - unchecked((long) 0xE83E1DA85CB38429L) /* 270 */, unchecked((long) 0xDC8FF882BA1B1CE2L) /* 271 */, - unchecked((long) 0xCD45505E8353E80DL) /* 272 */, unchecked((long) 0x18D19A00D4DB0717L) /* 273 */, - unchecked((long) 0x34A0CFEDA5F38101L) /* 274 */, unchecked((long) 0x0BE77E518887CAF2L) /* 275 */, - unchecked((long) 0x1E341438B3C45136L) /* 276 */, unchecked((long) 0xE05797F49089CCF9L) /* 277 */, - unchecked((long) 0xFFD23F9DF2591D14L) /* 278 */, unchecked((long) 0x543DDA228595C5CDL) /* 279 */, - unchecked((long) 0x661F81FD99052A33L) /* 280 */, unchecked((long) 0x8736E641DB0F7B76L) /* 281 */, - unchecked((long) 0x15227725418E5307L) /* 282 */, unchecked((long) 0xE25F7F46162EB2FAL) /* 283 */, - unchecked((long) 0x48A8B2126C13D9FEL) /* 284 */, unchecked((long) 0xAFDC541792E76EEAL) /* 285 */, - unchecked((long) 0x03D912BFC6D1898FL) /* 286 */, unchecked((long) 0x31B1AAFA1B83F51BL) /* 287 */, - unchecked((long) 0xF1AC2796E42AB7D9L) /* 288 */, unchecked((long) 0x40A3A7D7FCD2EBACL) /* 289 */, - unchecked((long) 0x1056136D0AFBBCC5L) /* 290 */, unchecked((long) 0x7889E1DD9A6D0C85L) /* 291 */, - unchecked((long) 0xD33525782A7974AAL) /* 292 */, unchecked((long) 0xA7E25D09078AC09BL) /* 293 */, - unchecked((long) 0xBD4138B3EAC6EDD0L) /* 294 */, unchecked((long) 0x920ABFBE71EB9E70L) /* 295 */, - unchecked((long) 0xA2A5D0F54FC2625CL) /* 296 */, unchecked((long) 0xC054E36B0B1290A3L) /* 297 */, - unchecked((long) 0xF6DD59FF62FE932BL) /* 298 */, unchecked((long) 0x3537354511A8AC7DL) /* 299 */, - unchecked((long) 0xCA845E9172FADCD4L) /* 300 */, unchecked((long) 0x84F82B60329D20DCL) /* 301 */, - unchecked((long) 0x79C62CE1CD672F18L) /* 302 */, unchecked((long) 0x8B09A2ADD124642CL) /* 303 */, - unchecked((long) 0xD0C1E96A19D9E726L) /* 304 */, unchecked((long) 0x5A786A9B4BA9500CL) /* 305 */, - unchecked((long) 0x0E020336634C43F3L) /* 306 */, unchecked((long) 0xC17B474AEB66D822L) /* 307 */, - unchecked((long) 0x6A731AE3EC9BAAC2L) /* 308 */, unchecked((long) 0x8226667AE0840258L) /* 309 */, - unchecked((long) 0x67D4567691CAECA5L) /* 310 */, unchecked((long) 0x1D94155C4875ADB5L) /* 311 */, - unchecked((long) 0x6D00FD985B813FDFL) /* 312 */, unchecked((long) 0x51286EFCB774CD06L) /* 313 */, - unchecked((long) 0x5E8834471FA744AFL) /* 314 */, unchecked((long) 0xF72CA0AEE761AE2EL) /* 315 */, - unchecked((long) 0xBE40E4CDAEE8E09AL) /* 316 */, unchecked((long) 0xE9970BBB5118F665L) /* 317 */, - unchecked((long) 0x726E4BEB33DF1964L) /* 318 */, unchecked((long) 0x703B000729199762L) /* 319 */, - unchecked((long) 0x4631D816F5EF30A7L) /* 320 */, unchecked((long) 0xB880B5B51504A6BEL) /* 321 */, - unchecked((long) 0x641793C37ED84B6CL) /* 322 */, unchecked((long) 0x7B21ED77F6E97D96L) /* 323 */, - unchecked((long) 0x776306312EF96B73L) /* 324 */, unchecked((long) 0xAE528948E86FF3F4L) /* 325 */, - unchecked((long) 0x53DBD7F286A3F8F8L) /* 326 */, unchecked((long) 0x16CADCE74CFC1063L) /* 327 */, - unchecked((long) 0x005C19BDFA52C6DDL) /* 328 */, unchecked((long) 0x68868F5D64D46AD3L) /* 329 */, - unchecked((long) 0x3A9D512CCF1E186AL) /* 330 */, unchecked((long) 0x367E62C2385660AEL) /* 331 */, - unchecked((long) 0xE359E7EA77DCB1D7L) /* 332 */, unchecked((long) 0x526C0773749ABE6EL) /* 333 */, - unchecked((long) 0x735AE5F9D09F734BL) /* 334 */, unchecked((long) 0x493FC7CC8A558BA8L) /* 335 */, - unchecked((long) 0xB0B9C1533041AB45L) /* 336 */, unchecked((long) 0x321958BA470A59BDL) /* 337 */, - unchecked((long) 0x852DB00B5F46C393L) /* 338 */, unchecked((long) 0x91209B2BD336B0E5L) /* 339 */, - unchecked((long) 0x6E604F7D659EF19FL) /* 340 */, unchecked((long) 0xB99A8AE2782CCB24L) /* 341 */, - unchecked((long) 0xCCF52AB6C814C4C7L) /* 342 */, unchecked((long) 0x4727D9AFBE11727BL) /* 343 */, - unchecked((long) 0x7E950D0C0121B34DL) /* 344 */, unchecked((long) 0x756F435670AD471FL) /* 345 */, - unchecked((long) 0xF5ADD442615A6849L) /* 346 */, unchecked((long) 0x4E87E09980B9957AL) /* 347 */, - unchecked((long) 0x2ACFA1DF50AEE355L) /* 348 */, unchecked((long) 0xD898263AFD2FD556L) /* 349 */, - unchecked((long) 0xC8F4924DD80C8FD6L) /* 350 */, unchecked((long) 0xCF99CA3D754A173AL) /* 351 */, - unchecked((long) 0xFE477BACAF91BF3CL) /* 352 */, unchecked((long) 0xED5371F6D690C12DL) /* 353 */, - unchecked((long) 0x831A5C285E687094L) /* 354 */, unchecked((long) 0xC5D3C90A3708A0A4L) /* 355 */, - unchecked((long) 0x0F7F903717D06580L) /* 356 */, unchecked((long) 0x19F9BB13B8FDF27FL) /* 357 */, - unchecked((long) 0xB1BD6F1B4D502843L) /* 358 */, unchecked((long) 0x1C761BA38FFF4012L) /* 359 */, - unchecked((long) 0x0D1530C4E2E21F3BL) /* 360 */, unchecked((long) 0x8943CE69A7372C8AL) /* 361 */, - unchecked((long) 0xE5184E11FEB5CE66L) /* 362 */, unchecked((long) 0x618BDB80BD736621L) /* 363 */, - unchecked((long) 0x7D29BAD68B574D0BL) /* 364 */, unchecked((long) 0x81BB613E25E6FE5BL) /* 365 */, - unchecked((long) 0x071C9C10BC07913FL) /* 366 */, unchecked((long) 0xC7BEEB7909AC2D97L) /* 367 */, - unchecked((long) 0xC3E58D353BC5D757L) /* 368 */, unchecked((long) 0xEB017892F38F61E8L) /* 369 */, - unchecked((long) 0xD4EFFB9C9B1CC21AL) /* 370 */, unchecked((long) 0x99727D26F494F7ABL) /* 371 */, - unchecked((long) 0xA3E063A2956B3E03L) /* 372 */, unchecked((long) 0x9D4A8B9A4AA09C30L) /* 373 */, - unchecked((long) 0x3F6AB7D500090FB4L) /* 374 */, unchecked((long) 0x9CC0F2A057268AC0L) /* 375 */, - unchecked((long) 0x3DEE9D2DEDBF42D1L) /* 376 */, unchecked((long) 0x330F49C87960A972L) /* 377 */, - unchecked((long) 0xC6B2720287421B41L) /* 378 */, unchecked((long) 0x0AC59EC07C00369CL) /* 379 */, - unchecked((long) 0xEF4EAC49CB353425L) /* 380 */, unchecked((long) 0xF450244EEF0129D8L) /* 381 */, - unchecked((long) 0x8ACC46E5CAF4DEB6L) /* 382 */, unchecked((long) 0x2FFEAB63989263F7L) /* 383 */, - unchecked((long) 0x8F7CB9FE5D7A4578L) /* 384 */, unchecked((long) 0x5BD8F7644E634635L) /* 385 */, - unchecked((long) 0x427A7315BF2DC900L) /* 386 */, unchecked((long) 0x17D0C4AA2125261CL) /* 387 */, - unchecked((long) 0x3992486C93518E50L) /* 388 */, unchecked((long) 0xB4CBFEE0A2D7D4C3L) /* 389 */, - unchecked((long) 0x7C75D6202C5DDD8DL) /* 390 */, unchecked((long) 0xDBC295D8E35B6C61L) /* 391 */, - unchecked((long) 0x60B369D302032B19L) /* 392 */, unchecked((long) 0xCE42685FDCE44132L) /* 393 */, - unchecked((long) 0x06F3DDB9DDF65610L) /* 394 */, unchecked((long) 0x8EA4D21DB5E148F0L) /* 395 */, - unchecked((long) 0x20B0FCE62FCD496FL) /* 396 */, unchecked((long) 0x2C1B912358B0EE31L) /* 397 */, - unchecked((long) 0xB28317B818F5A308L) /* 398 */, unchecked((long) 0xA89C1E189CA6D2CFL) /* 399 */, - unchecked((long) 0x0C6B18576AAADBC8L) /* 400 */, unchecked((long) 0xB65DEAA91299FAE3L) /* 401 */, - unchecked((long) 0xFB2B794B7F1027E7L) /* 402 */, unchecked((long) 0x04E4317F443B5BEBL) /* 403 */, - unchecked((long) 0x4B852D325939D0A6L) /* 404 */, unchecked((long) 0xD5AE6BEEFB207FFCL) /* 405 */, - unchecked((long) 0x309682B281C7D374L) /* 406 */, unchecked((long) 0xBAE309A194C3B475L) /* 407 */, - unchecked((long) 0x8CC3F97B13B49F05L) /* 408 */, unchecked((long) 0x98A9422FF8293967L) /* 409 */, - unchecked((long) 0x244B16B01076FF7CL) /* 410 */, unchecked((long) 0xF8BF571C663D67EEL) /* 411 */, - unchecked((long) 0x1F0D6758EEE30DA1L) /* 412 */, unchecked((long) 0xC9B611D97ADEB9B7L) /* 413 */, - unchecked((long) 0xB7AFD5887B6C57A2L) /* 414 */, unchecked((long) 0x6290AE846B984FE1L) /* 415 */, - unchecked((long) 0x94DF4CDEACC1A5FDL) /* 416 */, unchecked((long) 0x058A5BD1C5483AFFL) /* 417 */, - unchecked((long) 0x63166CC142BA3C37L) /* 418 */, unchecked((long) 0x8DB8526EB2F76F40L) /* 419 */, - unchecked((long) 0xE10880036F0D6D4EL) /* 420 */, unchecked((long) 0x9E0523C9971D311DL) /* 421 */, - unchecked((long) 0x45EC2824CC7CD691L) /* 422 */, unchecked((long) 0x575B8359E62382C9L) /* 423 */, - unchecked((long) 0xFA9E400DC4889995L) /* 424 */, unchecked((long) 0xD1823ECB45721568L) /* 425 */, - unchecked((long) 0xDAFD983B8206082FL) /* 426 */, unchecked((long) 0xAA7D29082386A8CBL) /* 427 */, - unchecked((long) 0x269FCD4403B87588L) /* 428 */, unchecked((long) 0x1B91F5F728BDD1E0L) /* 429 */, - unchecked((long) 0xE4669F39040201F6L) /* 430 */, unchecked((long) 0x7A1D7C218CF04ADEL) /* 431 */, - unchecked((long) 0x65623C29D79CE5CEL) /* 432 */, unchecked((long) 0x2368449096C00BB1L) /* 433 */, - unchecked((long) 0xAB9BF1879DA503BAL) /* 434 */, unchecked((long) 0xBC23ECB1A458058EL) /* 435 */, - unchecked((long) 0x9A58DF01BB401ECCL) /* 436 */, unchecked((long) 0xA070E868A85F143DL) /* 437 */, - unchecked((long) 0x4FF188307DF2239EL) /* 438 */, unchecked((long) 0x14D565B41A641183L) /* 439 */, - unchecked((long) 0xEE13337452701602L) /* 440 */, unchecked((long) 0x950E3DCF3F285E09L) /* 441 */, - unchecked((long) 0x59930254B9C80953L) /* 442 */, unchecked((long) 0x3BF299408930DA6DL) /* 443 */, - unchecked((long) 0xA955943F53691387L) /* 444 */, unchecked((long) 0xA15EDECAA9CB8784L) /* 445 */, - unchecked((long) 0x29142127352BE9A0L) /* 446 */, unchecked((long) 0x76F0371FFF4E7AFBL) /* 447 */, - unchecked((long) 0x0239F450274F2228L) /* 448 */, unchecked((long) 0xBB073AF01D5E868BL) /* 449 */, - unchecked((long) 0xBFC80571C10E96C1L) /* 450 */, unchecked((long) 0xD267088568222E23L) /* 451 */, - unchecked((long) 0x9671A3D48E80B5B0L) /* 452 */, unchecked((long) 0x55B5D38AE193BB81L) /* 453 */, - unchecked((long) 0x693AE2D0A18B04B8L) /* 454 */, unchecked((long) 0x5C48B4ECADD5335FL) /* 455 */, - unchecked((long) 0xFD743B194916A1CAL) /* 456 */, unchecked((long) 0x2577018134BE98C4L) /* 457 */, - unchecked((long) 0xE77987E83C54A4ADL) /* 458 */, unchecked((long) 0x28E11014DA33E1B9L) /* 459 */, - unchecked((long) 0x270CC59E226AA213L) /* 460 */, unchecked((long) 0x71495F756D1A5F60L) /* 461 */, - unchecked((long) 0x9BE853FB60AFEF77L) /* 462 */, unchecked((long) 0xADC786A7F7443DBFL) /* 463 */, - unchecked((long) 0x0904456173B29A82L) /* 464 */, unchecked((long) 0x58BC7A66C232BD5EL) /* 465 */, - unchecked((long) 0xF306558C673AC8B2L) /* 466 */, unchecked((long) 0x41F639C6B6C9772AL) /* 467 */, - unchecked((long) 0x216DEFE99FDA35DAL) /* 468 */, unchecked((long) 0x11640CC71C7BE615L) /* 469 */, - unchecked((long) 0x93C43694565C5527L) /* 470 */, unchecked((long) 0xEA038E6246777839L) /* 471 */, - unchecked((long) 0xF9ABF3CE5A3E2469L) /* 472 */, unchecked((long) 0x741E768D0FD312D2L) /* 473 */, - unchecked((long) 0x0144B883CED652C6L) /* 474 */, unchecked((long) 0xC20B5A5BA33F8552L) /* 475 */, - unchecked((long) 0x1AE69633C3435A9DL) /* 476 */, unchecked((long) 0x97A28CA4088CFDECL) /* 477 */, - unchecked((long) 0x8824A43C1E96F420L) /* 478 */, unchecked((long) 0x37612FA66EEEA746L) /* 479 */, - unchecked((long) 0x6B4CB165F9CF0E5AL) /* 480 */, unchecked((long) 0x43AA1C06A0ABFB4AL) /* 481 */, - unchecked((long) 0x7F4DC26FF162796BL) /* 482 */, unchecked((long) 0x6CBACC8E54ED9B0FL) /* 483 */, - unchecked((long) 0xA6B7FFEFD2BB253EL) /* 484 */, unchecked((long) 0x2E25BC95B0A29D4FL) /* 485 */, - unchecked((long) 0x86D6A58BDEF1388CL) /* 486 */, unchecked((long) 0xDED74AC576B6F054L) /* 487 */, - unchecked((long) 0x8030BDBC2B45805DL) /* 488 */, unchecked((long) 0x3C81AF70E94D9289L) /* 489 */, - unchecked((long) 0x3EFF6DDA9E3100DBL) /* 490 */, unchecked((long) 0xB38DC39FDFCC8847L) /* 491 */, - unchecked((long) 0x123885528D17B87EL) /* 492 */, unchecked((long) 0xF2DA0ED240B1B642L) /* 493 */, - unchecked((long) 0x44CEFADCD54BF9A9L) /* 494 */, unchecked((long) 0x1312200E433C7EE6L) /* 495 */, - unchecked((long) 0x9FFCC84F3A78C748L) /* 496 */, unchecked((long) 0xF0CD1F72248576BBL) /* 497 */, - unchecked((long) 0xEC6974053638CFE4L) /* 498 */, unchecked((long) 0x2BA7B67C0CEC4E4CL) /* 499 */, - unchecked((long) 0xAC2F4DF3E5CE32EDL) /* 500 */, unchecked((long) 0xCB33D14326EA4C11L) /* 501 */, - unchecked((long) 0xA4E9044CC77E58BCL) /* 502 */, unchecked((long) 0x5F513293D934FCEFL) /* 503 */, - unchecked((long) 0x5DC9645506E55444L) /* 504 */, unchecked((long) 0x50DE418F317DE40AL) /* 505 */, - unchecked((long) 0x388CB31A69DDE259L) /* 506 */, unchecked((long) 0x2DB4A83455820A86L) /* 507 */, - unchecked((long) 0x9010A91E84711AE9L) /* 508 */, unchecked((long) 0x4DF7F0B7B1498371L) /* 509 */, - unchecked((long) 0xD62A2EABC0977179L) /* 510 */, unchecked((long) 0x22FAC097AA8D5C0EL) /* 511 */, - }; - - private static readonly long[] t3 = { - unchecked((long) 0xF49FCC2FF1DAF39BL) /* 512 */, unchecked((long) 0x487FD5C66FF29281L) /* 513 */, - unchecked((long) 0xE8A30667FCDCA83FL) /* 514 */, unchecked((long) 0x2C9B4BE3D2FCCE63L) /* 515 */, - unchecked((long) 0xDA3FF74B93FBBBC2L) /* 516 */, unchecked((long) 0x2FA165D2FE70BA66L) /* 517 */, - unchecked((long) 0xA103E279970E93D4L) /* 518 */, unchecked((long) 0xBECDEC77B0E45E71L) /* 519 */, - unchecked((long) 0xCFB41E723985E497L) /* 520 */, unchecked((long) 0xB70AAA025EF75017L) /* 521 */, - unchecked((long) 0xD42309F03840B8E0L) /* 522 */, unchecked((long) 0x8EFC1AD035898579L) /* 523 */, - unchecked((long) 0x96C6920BE2B2ABC5L) /* 524 */, unchecked((long) 0x66AF4163375A9172L) /* 525 */, - unchecked((long) 0x2174ABDCCA7127FBL) /* 526 */, unchecked((long) 0xB33CCEA64A72FF41L) /* 527 */, - unchecked((long) 0xF04A4933083066A5L) /* 528 */, unchecked((long) 0x8D970ACDD7289AF5L) /* 529 */, - unchecked((long) 0x8F96E8E031C8C25EL) /* 530 */, unchecked((long) 0xF3FEC02276875D47L) /* 531 */, - unchecked((long) 0xEC7BF310056190DDL) /* 532 */, unchecked((long) 0xF5ADB0AEBB0F1491L) /* 533 */, - unchecked((long) 0x9B50F8850FD58892L) /* 534 */, unchecked((long) 0x4975488358B74DE8L) /* 535 */, - unchecked((long) 0xA3354FF691531C61L) /* 536 */, unchecked((long) 0x0702BBE481D2C6EEL) /* 537 */, - unchecked((long) 0x89FB24057DEDED98L) /* 538 */, unchecked((long) 0xAC3075138596E902L) /* 539 */, - unchecked((long) 0x1D2D3580172772EDL) /* 540 */, unchecked((long) 0xEB738FC28E6BC30DL) /* 541 */, - unchecked((long) 0x5854EF8F63044326L) /* 542 */, unchecked((long) 0x9E5C52325ADD3BBEL) /* 543 */, - unchecked((long) 0x90AA53CF325C4623L) /* 544 */, unchecked((long) 0xC1D24D51349DD067L) /* 545 */, - unchecked((long) 0x2051CFEEA69EA624L) /* 546 */, unchecked((long) 0x13220F0A862E7E4FL) /* 547 */, - unchecked((long) 0xCE39399404E04864L) /* 548 */, unchecked((long) 0xD9C42CA47086FCB7L) /* 549 */, - unchecked((long) 0x685AD2238A03E7CCL) /* 550 */, unchecked((long) 0x066484B2AB2FF1DBL) /* 551 */, - unchecked((long) 0xFE9D5D70EFBF79ECL) /* 552 */, unchecked((long) 0x5B13B9DD9C481854L) /* 553 */, - unchecked((long) 0x15F0D475ED1509ADL) /* 554 */, unchecked((long) 0x0BEBCD060EC79851L) /* 555 */, - unchecked((long) 0xD58C6791183AB7F8L) /* 556 */, unchecked((long) 0xD1187C5052F3EEE4L) /* 557 */, - unchecked((long) 0xC95D1192E54E82FFL) /* 558 */, unchecked((long) 0x86EEA14CB9AC6CA2L) /* 559 */, - unchecked((long) 0x3485BEB153677D5DL) /* 560 */, unchecked((long) 0xDD191D781F8C492AL) /* 561 */, - unchecked((long) 0xF60866BAA784EBF9L) /* 562 */, unchecked((long) 0x518F643BA2D08C74L) /* 563 */, - unchecked((long) 0x8852E956E1087C22L) /* 564 */, unchecked((long) 0xA768CB8DC410AE8DL) /* 565 */, - unchecked((long) 0x38047726BFEC8E1AL) /* 566 */, unchecked((long) 0xA67738B4CD3B45AAL) /* 567 */, - unchecked((long) 0xAD16691CEC0DDE19L) /* 568 */, unchecked((long) 0xC6D4319380462E07L) /* 569 */, - unchecked((long) 0xC5A5876D0BA61938L) /* 570 */, unchecked((long) 0x16B9FA1FA58FD840L) /* 571 */, - unchecked((long) 0x188AB1173CA74F18L) /* 572 */, unchecked((long) 0xABDA2F98C99C021FL) /* 573 */, - unchecked((long) 0x3E0580AB134AE816L) /* 574 */, unchecked((long) 0x5F3B05B773645ABBL) /* 575 */, - unchecked((long) 0x2501A2BE5575F2F6L) /* 576 */, unchecked((long) 0x1B2F74004E7E8BA9L) /* 577 */, - unchecked((long) 0x1CD7580371E8D953L) /* 578 */, unchecked((long) 0x7F6ED89562764E30L) /* 579 */, - unchecked((long) 0xB15926FF596F003DL) /* 580 */, unchecked((long) 0x9F65293DA8C5D6B9L) /* 581 */, - unchecked((long) 0x6ECEF04DD690F84CL) /* 582 */, unchecked((long) 0x4782275FFF33AF88L) /* 583 */, - unchecked((long) 0xE41433083F820801L) /* 584 */, unchecked((long) 0xFD0DFE409A1AF9B5L) /* 585 */, - unchecked((long) 0x4325A3342CDB396BL) /* 586 */, unchecked((long) 0x8AE77E62B301B252L) /* 587 */, - unchecked((long) 0xC36F9E9F6655615AL) /* 588 */, unchecked((long) 0x85455A2D92D32C09L) /* 589 */, - unchecked((long) 0xF2C7DEA949477485L) /* 590 */, unchecked((long) 0x63CFB4C133A39EBAL) /* 591 */, - unchecked((long) 0x83B040CC6EBC5462L) /* 592 */, unchecked((long) 0x3B9454C8FDB326B0L) /* 593 */, - unchecked((long) 0x56F56A9E87FFD78CL) /* 594 */, unchecked((long) 0x2DC2940D99F42BC6L) /* 595 */, - unchecked((long) 0x98F7DF096B096E2DL) /* 596 */, unchecked((long) 0x19A6E01E3AD852BFL) /* 597 */, - unchecked((long) 0x42A99CCBDBD4B40BL) /* 598 */, unchecked((long) 0xA59998AF45E9C559L) /* 599 */, - unchecked((long) 0x366295E807D93186L) /* 600 */, unchecked((long) 0x6B48181BFAA1F773L) /* 601 */, - unchecked((long) 0x1FEC57E2157A0A1DL) /* 602 */, unchecked((long) 0x4667446AF6201AD5L) /* 603 */, - unchecked((long) 0xE615EBCACFB0F075L) /* 604 */, unchecked((long) 0xB8F31F4F68290778L) /* 605 */, - unchecked((long) 0x22713ED6CE22D11EL) /* 606 */, unchecked((long) 0x3057C1A72EC3C93BL) /* 607 */, - unchecked((long) 0xCB46ACC37C3F1F2FL) /* 608 */, unchecked((long) 0xDBB893FD02AAF50EL) /* 609 */, - unchecked((long) 0x331FD92E600B9FCFL) /* 610 */, unchecked((long) 0xA498F96148EA3AD6L) /* 611 */, - unchecked((long) 0xA8D8426E8B6A83EAL) /* 612 */, unchecked((long) 0xA089B274B7735CDCL) /* 613 */, - unchecked((long) 0x87F6B3731E524A11L) /* 614 */, unchecked((long) 0x118808E5CBC96749L) /* 615 */, - unchecked((long) 0x9906E4C7B19BD394L) /* 616 */, unchecked((long) 0xAFED7F7E9B24A20CL) /* 617 */, - unchecked((long) 0x6509EADEEB3644A7L) /* 618 */, unchecked((long) 0x6C1EF1D3E8EF0EDEL) /* 619 */, - unchecked((long) 0xB9C97D43E9798FB4L) /* 620 */, unchecked((long) 0xA2F2D784740C28A3L) /* 621 */, - unchecked((long) 0x7B8496476197566FL) /* 622 */, unchecked((long) 0x7A5BE3E6B65F069DL) /* 623 */, - unchecked((long) 0xF96330ED78BE6F10L) /* 624 */, unchecked((long) 0xEEE60DE77A076A15L) /* 625 */, - unchecked((long) 0x2B4BEE4AA08B9BD0L) /* 626 */, unchecked((long) 0x6A56A63EC7B8894EL) /* 627 */, - unchecked((long) 0x02121359BA34FEF4L) /* 628 */, unchecked((long) 0x4CBF99F8283703FCL) /* 629 */, - unchecked((long) 0x398071350CAF30C8L) /* 630 */, unchecked((long) 0xD0A77A89F017687AL) /* 631 */, - unchecked((long) 0xF1C1A9EB9E423569L) /* 632 */, unchecked((long) 0x8C7976282DEE8199L) /* 633 */, - unchecked((long) 0x5D1737A5DD1F7ABDL) /* 634 */, unchecked((long) 0x4F53433C09A9FA80L) /* 635 */, - unchecked((long) 0xFA8B0C53DF7CA1D9L) /* 636 */, unchecked((long) 0x3FD9DCBC886CCB77L) /* 637 */, - unchecked((long) 0xC040917CA91B4720L) /* 638 */, unchecked((long) 0x7DD00142F9D1DCDFL) /* 639 */, - unchecked((long) 0x8476FC1D4F387B58L) /* 640 */, unchecked((long) 0x23F8E7C5F3316503L) /* 641 */, - unchecked((long) 0x032A2244E7E37339L) /* 642 */, unchecked((long) 0x5C87A5D750F5A74BL) /* 643 */, - unchecked((long) 0x082B4CC43698992EL) /* 644 */, unchecked((long) 0xDF917BECB858F63CL) /* 645 */, - unchecked((long) 0x3270B8FC5BF86DDAL) /* 646 */, unchecked((long) 0x10AE72BB29B5DD76L) /* 647 */, - unchecked((long) 0x576AC94E7700362BL) /* 648 */, unchecked((long) 0x1AD112DAC61EFB8FL) /* 649 */, - unchecked((long) 0x691BC30EC5FAA427L) /* 650 */, unchecked((long) 0xFF246311CC327143L) /* 651 */, - unchecked((long) 0x3142368E30E53206L) /* 652 */, unchecked((long) 0x71380E31E02CA396L) /* 653 */, - unchecked((long) 0x958D5C960AAD76F1L) /* 654 */, unchecked((long) 0xF8D6F430C16DA536L) /* 655 */, - unchecked((long) 0xC8FFD13F1BE7E1D2L) /* 656 */, unchecked((long) 0x7578AE66004DDBE1L) /* 657 */, - unchecked((long) 0x05833F01067BE646L) /* 658 */, unchecked((long) 0xBB34B5AD3BFE586DL) /* 659 */, - unchecked((long) 0x095F34C9A12B97F0L) /* 660 */, unchecked((long) 0x247AB64525D60CA8L) /* 661 */, - unchecked((long) 0xDCDBC6F3017477D1L) /* 662 */, unchecked((long) 0x4A2E14D4DECAD24DL) /* 663 */, - unchecked((long) 0xBDB5E6D9BE0A1EEBL) /* 664 */, unchecked((long) 0x2A7E70F7794301ABL) /* 665 */, - unchecked((long) 0xDEF42D8A270540FDL) /* 666 */, unchecked((long) 0x01078EC0A34C22C1L) /* 667 */, - unchecked((long) 0xE5DE511AF4C16387L) /* 668 */, unchecked((long) 0x7EBB3A52BD9A330AL) /* 669 */, - unchecked((long) 0x77697857AA7D6435L) /* 670 */, unchecked((long) 0x004E831603AE4C32L) /* 671 */, - unchecked((long) 0xE7A21020AD78E312L) /* 672 */, unchecked((long) 0x9D41A70C6AB420F2L) /* 673 */, - unchecked((long) 0x28E06C18EA1141E6L) /* 674 */, unchecked((long) 0xD2B28CBD984F6B28L) /* 675 */, - unchecked((long) 0x26B75F6C446E9D83L) /* 676 */, unchecked((long) 0xBA47568C4D418D7FL) /* 677 */, - unchecked((long) 0xD80BADBFE6183D8EL) /* 678 */, unchecked((long) 0x0E206D7F5F166044L) /* 679 */, - unchecked((long) 0xE258A43911CBCA3EL) /* 680 */, unchecked((long) 0x723A1746B21DC0BCL) /* 681 */, - unchecked((long) 0xC7CAA854F5D7CDD3L) /* 682 */, unchecked((long) 0x7CAC32883D261D9CL) /* 683 */, - unchecked((long) 0x7690C26423BA942CL) /* 684 */, unchecked((long) 0x17E55524478042B8L) /* 685 */, - unchecked((long) 0xE0BE477656A2389FL) /* 686 */, unchecked((long) 0x4D289B5E67AB2DA0L) /* 687 */, - unchecked((long) 0x44862B9C8FBBFD31L) /* 688 */, unchecked((long) 0xB47CC8049D141365L) /* 689 */, - unchecked((long) 0x822C1B362B91C793L) /* 690 */, unchecked((long) 0x4EB14655FB13DFD8L) /* 691 */, - unchecked((long) 0x1ECBBA0714E2A97BL) /* 692 */, unchecked((long) 0x6143459D5CDE5F14L) /* 693 */, - unchecked((long) 0x53A8FBF1D5F0AC89L) /* 694 */, unchecked((long) 0x97EA04D81C5E5B00L) /* 695 */, - unchecked((long) 0x622181A8D4FDB3F3L) /* 696 */, unchecked((long) 0xE9BCD341572A1208L) /* 697 */, - unchecked((long) 0x1411258643CCE58AL) /* 698 */, unchecked((long) 0x9144C5FEA4C6E0A4L) /* 699 */, - unchecked((long) 0x0D33D06565CF620FL) /* 700 */, unchecked((long) 0x54A48D489F219CA1L) /* 701 */, - unchecked((long) 0xC43E5EAC6D63C821L) /* 702 */, unchecked((long) 0xA9728B3A72770DAFL) /* 703 */, - unchecked((long) 0xD7934E7B20DF87EFL) /* 704 */, unchecked((long) 0xE35503B61A3E86E5L) /* 705 */, - unchecked((long) 0xCAE321FBC819D504L) /* 706 */, unchecked((long) 0x129A50B3AC60BFA6L) /* 707 */, - unchecked((long) 0xCD5E68EA7E9FB6C3L) /* 708 */, unchecked((long) 0xB01C90199483B1C7L) /* 709 */, - unchecked((long) 0x3DE93CD5C295376CL) /* 710 */, unchecked((long) 0xAED52EDF2AB9AD13L) /* 711 */, - unchecked((long) 0x2E60F512C0A07884L) /* 712 */, unchecked((long) 0xBC3D86A3E36210C9L) /* 713 */, - unchecked((long) 0x35269D9B163951CEL) /* 714 */, unchecked((long) 0x0C7D6E2AD0CDB5FAL) /* 715 */, - unchecked((long) 0x59E86297D87F5733L) /* 716 */, unchecked((long) 0x298EF221898DB0E7L) /* 717 */, - unchecked((long) 0x55000029D1A5AA7EL) /* 718 */, unchecked((long) 0x8BC08AE1B5061B45L) /* 719 */, - unchecked((long) 0xC2C31C2B6C92703AL) /* 720 */, unchecked((long) 0x94CC596BAF25EF42L) /* 721 */, - unchecked((long) 0x0A1D73DB22540456L) /* 722 */, unchecked((long) 0x04B6A0F9D9C4179AL) /* 723 */, - unchecked((long) 0xEFFDAFA2AE3D3C60L) /* 724 */, unchecked((long) 0xF7C8075BB49496C4L) /* 725 */, - unchecked((long) 0x9CC5C7141D1CD4E3L) /* 726 */, unchecked((long) 0x78BD1638218E5534L) /* 727 */, - unchecked((long) 0xB2F11568F850246AL) /* 728 */, unchecked((long) 0xEDFABCFA9502BC29L) /* 729 */, - unchecked((long) 0x796CE5F2DA23051BL) /* 730 */, unchecked((long) 0xAAE128B0DC93537CL) /* 731 */, - unchecked((long) 0x3A493DA0EE4B29AEL) /* 732 */, unchecked((long) 0xB5DF6B2C416895D7L) /* 733 */, - unchecked((long) 0xFCABBD25122D7F37L) /* 734 */, unchecked((long) 0x70810B58105DC4B1L) /* 735 */, - unchecked((long) 0xE10FDD37F7882A90L) /* 736 */, unchecked((long) 0x524DCAB5518A3F5CL) /* 737 */, - unchecked((long) 0x3C9E85878451255BL) /* 738 */, unchecked((long) 0x4029828119BD34E2L) /* 739 */, - unchecked((long) 0x74A05B6F5D3CECCBL) /* 740 */, unchecked((long) 0xB610021542E13ECAL) /* 741 */, - unchecked((long) 0x0FF979D12F59E2ACL) /* 742 */, unchecked((long) 0x6037DA27E4F9CC50L) /* 743 */, - unchecked((long) 0x5E92975A0DF1847DL) /* 744 */, unchecked((long) 0xD66DE190D3E623FEL) /* 745 */, - unchecked((long) 0x5032D6B87B568048L) /* 746 */, unchecked((long) 0x9A36B7CE8235216EL) /* 747 */, - unchecked((long) 0x80272A7A24F64B4AL) /* 748 */, unchecked((long) 0x93EFED8B8C6916F7L) /* 749 */, - unchecked((long) 0x37DDBFF44CCE1555L) /* 750 */, unchecked((long) 0x4B95DB5D4B99BD25L) /* 751 */, - unchecked((long) 0x92D3FDA169812FC0L) /* 752 */, unchecked((long) 0xFB1A4A9A90660BB6L) /* 753 */, - unchecked((long) 0x730C196946A4B9B2L) /* 754 */, unchecked((long) 0x81E289AA7F49DA68L) /* 755 */, - unchecked((long) 0x64669A0F83B1A05FL) /* 756 */, unchecked((long) 0x27B3FF7D9644F48BL) /* 757 */, - unchecked((long) 0xCC6B615C8DB675B3L) /* 758 */, unchecked((long) 0x674F20B9BCEBBE95L) /* 759 */, - unchecked((long) 0x6F31238275655982L) /* 760 */, unchecked((long) 0x5AE488713E45CF05L) /* 761 */, - unchecked((long) 0xBF619F9954C21157L) /* 762 */, unchecked((long) 0xEABAC46040A8EAE9L) /* 763 */, - unchecked((long) 0x454C6FE9F2C0C1CDL) /* 764 */, unchecked((long) 0x419CF6496412691CL) /* 765 */, - unchecked((long) 0xD3DC3BEF265B0F70L) /* 766 */, unchecked((long) 0x6D0E60F5C3578A9EL) /* 767 */, - }; - - private static readonly long[] t4 = { - unchecked((long) 0x5B0E608526323C55L) /* 768 */, unchecked((long) 0x1A46C1A9FA1B59F5L) /* 769 */, - unchecked((long) 0xA9E245A17C4C8FFAL) /* 770 */, unchecked((long) 0x65CA5159DB2955D7L) /* 771 */, - unchecked((long) 0x05DB0A76CE35AFC2L) /* 772 */, unchecked((long) 0x81EAC77EA9113D45L) /* 773 */, - unchecked((long) 0x528EF88AB6AC0A0DL) /* 774 */, unchecked((long) 0xA09EA253597BE3FFL) /* 775 */, - unchecked((long) 0x430DDFB3AC48CD56L) /* 776 */, unchecked((long) 0xC4B3A67AF45CE46FL) /* 777 */, - unchecked((long) 0x4ECECFD8FBE2D05EL) /* 778 */, unchecked((long) 0x3EF56F10B39935F0L) /* 779 */, - unchecked((long) 0x0B22D6829CD619C6L) /* 780 */, unchecked((long) 0x17FD460A74DF2069L) /* 781 */, - unchecked((long) 0x6CF8CC8E8510ED40L) /* 782 */, unchecked((long) 0xD6C824BF3A6ECAA7L) /* 783 */, - unchecked((long) 0x61243D581A817049L) /* 784 */, unchecked((long) 0x048BACB6BBC163A2L) /* 785 */, - unchecked((long) 0xD9A38AC27D44CC32L) /* 786 */, unchecked((long) 0x7FDDFF5BAAF410ABL) /* 787 */, - unchecked((long) 0xAD6D495AA804824BL) /* 788 */, unchecked((long) 0xE1A6A74F2D8C9F94L) /* 789 */, - unchecked((long) 0xD4F7851235DEE8E3L) /* 790 */, unchecked((long) 0xFD4B7F886540D893L) /* 791 */, - unchecked((long) 0x247C20042AA4BFDAL) /* 792 */, unchecked((long) 0x096EA1C517D1327CL) /* 793 */, - unchecked((long) 0xD56966B4361A6685L) /* 794 */, unchecked((long) 0x277DA5C31221057DL) /* 795 */, - unchecked((long) 0x94D59893A43ACFF7L) /* 796 */, unchecked((long) 0x64F0C51CCDC02281L) /* 797 */, - unchecked((long) 0x3D33BCC4FF6189DBL) /* 798 */, unchecked((long) 0xE005CB184CE66AF1L) /* 799 */, - unchecked((long) 0xFF5CCD1D1DB99BEAL) /* 800 */, unchecked((long) 0xB0B854A7FE42980FL) /* 801 */, - unchecked((long) 0x7BD46A6A718D4B9FL) /* 802 */, unchecked((long) 0xD10FA8CC22A5FD8CL) /* 803 */, - unchecked((long) 0xD31484952BE4BD31L) /* 804 */, unchecked((long) 0xC7FA975FCB243847L) /* 805 */, - unchecked((long) 0x4886ED1E5846C407L) /* 806 */, unchecked((long) 0x28CDDB791EB70B04L) /* 807 */, - unchecked((long) 0xC2B00BE2F573417FL) /* 808 */, unchecked((long) 0x5C9590452180F877L) /* 809 */, - unchecked((long) 0x7A6BDDFFF370EB00L) /* 810 */, unchecked((long) 0xCE509E38D6D9D6A4L) /* 811 */, - unchecked((long) 0xEBEB0F00647FA702L) /* 812 */, unchecked((long) 0x1DCC06CF76606F06L) /* 813 */, - unchecked((long) 0xE4D9F28BA286FF0AL) /* 814 */, unchecked((long) 0xD85A305DC918C262L) /* 815 */, - unchecked((long) 0x475B1D8732225F54L) /* 816 */, unchecked((long) 0x2D4FB51668CCB5FEL) /* 817 */, - unchecked((long) 0xA679B9D9D72BBA20L) /* 818 */, unchecked((long) 0x53841C0D912D43A5L) /* 819 */, - unchecked((long) 0x3B7EAA48BF12A4E8L) /* 820 */, unchecked((long) 0x781E0E47F22F1DDFL) /* 821 */, - unchecked((long) 0xEFF20CE60AB50973L) /* 822 */, unchecked((long) 0x20D261D19DFFB742L) /* 823 */, - unchecked((long) 0x16A12B03062A2E39L) /* 824 */, unchecked((long) 0x1960EB2239650495L) /* 825 */, - unchecked((long) 0x251C16FED50EB8B8L) /* 826 */, unchecked((long) 0x9AC0C330F826016EL) /* 827 */, - unchecked((long) 0xED152665953E7671L) /* 828 */, unchecked((long) 0x02D63194A6369570L) /* 829 */, - unchecked((long) 0x5074F08394B1C987L) /* 830 */, unchecked((long) 0x70BA598C90B25CE1L) /* 831 */, - unchecked((long) 0x794A15810B9742F6L) /* 832 */, unchecked((long) 0x0D5925E9FCAF8C6CL) /* 833 */, - unchecked((long) 0x3067716CD868744EL) /* 834 */, unchecked((long) 0x910AB077E8D7731BL) /* 835 */, - unchecked((long) 0x6A61BBDB5AC42F61L) /* 836 */, unchecked((long) 0x93513EFBF0851567L) /* 837 */, - unchecked((long) 0xF494724B9E83E9D5L) /* 838 */, unchecked((long) 0xE887E1985C09648DL) /* 839 */, - unchecked((long) 0x34B1D3C675370CFDL) /* 840 */, unchecked((long) 0xDC35E433BC0D255DL) /* 841 */, - unchecked((long) 0xD0AAB84234131BE0L) /* 842 */, unchecked((long) 0x08042A50B48B7EAFL) /* 843 */, - unchecked((long) 0x9997C4EE44A3AB35L) /* 844 */, unchecked((long) 0x829A7B49201799D0L) /* 845 */, - unchecked((long) 0x263B8307B7C54441L) /* 846 */, unchecked((long) 0x752F95F4FD6A6CA6L) /* 847 */, - unchecked((long) 0x927217402C08C6E5L) /* 848 */, unchecked((long) 0x2A8AB754A795D9EEL) /* 849 */, - unchecked((long) 0xA442F7552F72943DL) /* 850 */, unchecked((long) 0x2C31334E19781208L) /* 851 */, - unchecked((long) 0x4FA98D7CEAEE6291L) /* 852 */, unchecked((long) 0x55C3862F665DB309L) /* 853 */, - unchecked((long) 0xBD0610175D53B1F3L) /* 854 */, unchecked((long) 0x46FE6CB840413F27L) /* 855 */, - unchecked((long) 0x3FE03792DF0CFA59L) /* 856 */, unchecked((long) 0xCFE700372EB85E8FL) /* 857 */, - unchecked((long) 0xA7BE29E7ADBCE118L) /* 858 */, unchecked((long) 0xE544EE5CDE8431DDL) /* 859 */, - unchecked((long) 0x8A781B1B41F1873EL) /* 860 */, unchecked((long) 0xA5C94C78A0D2F0E7L) /* 861 */, - unchecked((long) 0x39412E2877B60728L) /* 862 */, unchecked((long) 0xA1265EF3AFC9A62CL) /* 863 */, - unchecked((long) 0xBCC2770C6A2506C5L) /* 864 */, unchecked((long) 0x3AB66DD5DCE1CE12L) /* 865 */, - unchecked((long) 0xE65499D04A675B37L) /* 866 */, unchecked((long) 0x7D8F523481BFD216L) /* 867 */, - unchecked((long) 0x0F6F64FCEC15F389L) /* 868 */, unchecked((long) 0x74EFBE618B5B13C8L) /* 869 */, - unchecked((long) 0xACDC82B714273E1DL) /* 870 */, unchecked((long) 0xDD40BFE003199D17L) /* 871 */, - unchecked((long) 0x37E99257E7E061F8L) /* 872 */, unchecked((long) 0xFA52626904775AAAL) /* 873 */, - unchecked((long) 0x8BBBF63A463D56F9L) /* 874 */, unchecked((long) 0xF0013F1543A26E64L) /* 875 */, - unchecked((long) 0xA8307E9F879EC898L) /* 876 */, unchecked((long) 0xCC4C27A4150177CCL) /* 877 */, - unchecked((long) 0x1B432F2CCA1D3348L) /* 878 */, unchecked((long) 0xDE1D1F8F9F6FA013L) /* 879 */, - unchecked((long) 0x606602A047A7DDD6L) /* 880 */, unchecked((long) 0xD237AB64CC1CB2C7L) /* 881 */, - unchecked((long) 0x9B938E7225FCD1D3L) /* 882 */, unchecked((long) 0xEC4E03708E0FF476L) /* 883 */, - unchecked((long) 0xFEB2FBDA3D03C12DL) /* 884 */, unchecked((long) 0xAE0BCED2EE43889AL) /* 885 */, - unchecked((long) 0x22CB8923EBFB4F43L) /* 886 */, unchecked((long) 0x69360D013CF7396DL) /* 887 */, - unchecked((long) 0x855E3602D2D4E022L) /* 888 */, unchecked((long) 0x073805BAD01F784CL) /* 889 */, - unchecked((long) 0x33E17A133852F546L) /* 890 */, unchecked((long) 0xDF4874058AC7B638L) /* 891 */, - unchecked((long) 0xBA92B29C678AA14AL) /* 892 */, unchecked((long) 0x0CE89FC76CFAADCDL) /* 893 */, - unchecked((long) 0x5F9D4E0908339E34L) /* 894 */, unchecked((long) 0xF1AFE9291F5923B9L) /* 895 */, - unchecked((long) 0x6E3480F60F4A265FL) /* 896 */, unchecked((long) 0xEEBF3A2AB29B841CL) /* 897 */, - unchecked((long) 0xE21938A88F91B4ADL) /* 898 */, unchecked((long) 0x57DFEFF845C6D3C3L) /* 899 */, - unchecked((long) 0x2F006B0BF62CAAF2L) /* 900 */, unchecked((long) 0x62F479EF6F75EE78L) /* 901 */, - unchecked((long) 0x11A55AD41C8916A9L) /* 902 */, unchecked((long) 0xF229D29084FED453L) /* 903 */, - unchecked((long) 0x42F1C27B16B000E6L) /* 904 */, unchecked((long) 0x2B1F76749823C074L) /* 905 */, - unchecked((long) 0x4B76ECA3C2745360L) /* 906 */, unchecked((long) 0x8C98F463B91691BDL) /* 907 */, - unchecked((long) 0x14BCC93CF1ADE66AL) /* 908 */, unchecked((long) 0x8885213E6D458397L) /* 909 */, - unchecked((long) 0x8E177DF0274D4711L) /* 910 */, unchecked((long) 0xB49B73B5503F2951L) /* 911 */, - unchecked((long) 0x10168168C3F96B6BL) /* 912 */, unchecked((long) 0x0E3D963B63CAB0AEL) /* 913 */, - unchecked((long) 0x8DFC4B5655A1DB14L) /* 914 */, unchecked((long) 0xF789F1356E14DE5CL) /* 915 */, - unchecked((long) 0x683E68AF4E51DAC1L) /* 916 */, unchecked((long) 0xC9A84F9D8D4B0FD9L) /* 917 */, - unchecked((long) 0x3691E03F52A0F9D1L) /* 918 */, unchecked((long) 0x5ED86E46E1878E80L) /* 919 */, - unchecked((long) 0x3C711A0E99D07150L) /* 920 */, unchecked((long) 0x5A0865B20C4E9310L) /* 921 */, - unchecked((long) 0x56FBFC1FE4F0682EL) /* 922 */, unchecked((long) 0xEA8D5DE3105EDF9BL) /* 923 */, - unchecked((long) 0x71ABFDB12379187AL) /* 924 */, unchecked((long) 0x2EB99DE1BEE77B9CL) /* 925 */, - unchecked((long) 0x21ECC0EA33CF4523L) /* 926 */, unchecked((long) 0x59A4D7521805C7A1L) /* 927 */, - unchecked((long) 0x3896F5EB56AE7C72L) /* 928 */, unchecked((long) 0xAA638F3DB18F75DCL) /* 929 */, - unchecked((long) 0x9F39358DABE9808EL) /* 930 */, unchecked((long) 0xB7DEFA91C00B72ACL) /* 931 */, - unchecked((long) 0x6B5541FD62492D92L) /* 932 */, unchecked((long) 0x6DC6DEE8F92E4D5BL) /* 933 */, - unchecked((long) 0x353F57ABC4BEEA7EL) /* 934 */, unchecked((long) 0x735769D6DA5690CEL) /* 935 */, - unchecked((long) 0x0A234AA642391484L) /* 936 */, unchecked((long) 0xF6F9508028F80D9DL) /* 937 */, - unchecked((long) 0xB8E319A27AB3F215L) /* 938 */, unchecked((long) 0x31AD9C1151341A4DL) /* 939 */, - unchecked((long) 0x773C22A57BEF5805L) /* 940 */, unchecked((long) 0x45C7561A07968633L) /* 941 */, - unchecked((long) 0xF913DA9E249DBE36L) /* 942 */, unchecked((long) 0xDA652D9B78A64C68L) /* 943 */, - unchecked((long) 0x4C27A97F3BC334EFL) /* 944 */, unchecked((long) 0x76621220E66B17F4L) /* 945 */, - unchecked((long) 0x967743899ACD7D0BL) /* 946 */, unchecked((long) 0xF3EE5BCAE0ED6782L) /* 947 */, - unchecked((long) 0x409F753600C879FCL) /* 948 */, unchecked((long) 0x06D09A39B5926DB6L) /* 949 */, - unchecked((long) 0x6F83AEB0317AC588L) /* 950 */, unchecked((long) 0x01E6CA4A86381F21L) /* 951 */, - unchecked((long) 0x66FF3462D19F3025L) /* 952 */, unchecked((long) 0x72207C24DDFD3BFBL) /* 953 */, - unchecked((long) 0x4AF6B6D3E2ECE2EBL) /* 954 */, unchecked((long) 0x9C994DBEC7EA08DEL) /* 955 */, - unchecked((long) 0x49ACE597B09A8BC4L) /* 956 */, unchecked((long) 0xB38C4766CF0797BAL) /* 957 */, - unchecked((long) 0x131B9373C57C2A75L) /* 958 */, unchecked((long) 0xB1822CCE61931E58L) /* 959 */, - unchecked((long) 0x9D7555B909BA1C0CL) /* 960 */, unchecked((long) 0x127FAFDD937D11D2L) /* 961 */, - unchecked((long) 0x29DA3BADC66D92E4L) /* 962 */, unchecked((long) 0xA2C1D57154C2ECBCL) /* 963 */, - unchecked((long) 0x58C5134D82F6FE24L) /* 964 */, unchecked((long) 0x1C3AE3515B62274FL) /* 965 */, - unchecked((long) 0xE907C82E01CB8126L) /* 966 */, unchecked((long) 0xF8ED091913E37FCBL) /* 967 */, - unchecked((long) 0x3249D8F9C80046C9L) /* 968 */, unchecked((long) 0x80CF9BEDE388FB63L) /* 969 */, - unchecked((long) 0x1881539A116CF19EL) /* 970 */, unchecked((long) 0x5103F3F76BD52457L) /* 971 */, - unchecked((long) 0x15B7E6F5AE47F7A8L) /* 972 */, unchecked((long) 0xDBD7C6DED47E9CCFL) /* 973 */, - unchecked((long) 0x44E55C410228BB1AL) /* 974 */, unchecked((long) 0xB647D4255EDB4E99L) /* 975 */, - unchecked((long) 0x5D11882BB8AAFC30L) /* 976 */, unchecked((long) 0xF5098BBB29D3212AL) /* 977 */, - unchecked((long) 0x8FB5EA14E90296B3L) /* 978 */, unchecked((long) 0x677B942157DD025AL) /* 979 */, - unchecked((long) 0xFB58E7C0A390ACB5L) /* 980 */, unchecked((long) 0x89D3674C83BD4A01L) /* 981 */, - unchecked((long) 0x9E2DA4DF4BF3B93BL) /* 982 */, unchecked((long) 0xFCC41E328CAB4829L) /* 983 */, - unchecked((long) 0x03F38C96BA582C52L) /* 984 */, unchecked((long) 0xCAD1BDBD7FD85DB2L) /* 985 */, - unchecked((long) 0xBBB442C16082AE83L) /* 986 */, unchecked((long) 0xB95FE86BA5DA9AB0L) /* 987 */, - unchecked((long) 0xB22E04673771A93FL) /* 988 */, unchecked((long) 0x845358C9493152D8L) /* 989 */, - unchecked((long) 0xBE2A488697B4541EL) /* 990 */, unchecked((long) 0x95A2DC2DD38E6966L) /* 991 */, - unchecked((long) 0xC02C11AC923C852BL) /* 992 */, unchecked((long) 0x2388B1990DF2A87BL) /* 993 */, - unchecked((long) 0x7C8008FA1B4F37BEL) /* 994 */, unchecked((long) 0x1F70D0C84D54E503L) /* 995 */, - unchecked((long) 0x5490ADEC7ECE57D4L) /* 996 */, unchecked((long) 0x002B3C27D9063A3AL) /* 997 */, - unchecked((long) 0x7EAEA3848030A2BFL) /* 998 */, unchecked((long) 0xC602326DED2003C0L) /* 999 */, - unchecked((long) 0x83A7287D69A94086L) /* 1000 */, unchecked((long) 0xC57A5FCB30F57A8AL) /* 1001 */, - unchecked((long) 0xB56844E479EBE779L) /* 1002 */, unchecked((long) 0xA373B40F05DCBCE9L) /* 1003 */, - unchecked((long) 0xD71A786E88570EE2L) /* 1004 */, unchecked((long) 0x879CBACDBDE8F6A0L) /* 1005 */, - unchecked((long) 0x976AD1BCC164A32FL) /* 1006 */, unchecked((long) 0xAB21E25E9666D78BL) /* 1007 */, - unchecked((long) 0x901063AAE5E5C33CL) /* 1008 */, unchecked((long) 0x9818B34448698D90L) /* 1009 */, - unchecked((long) 0xE36487AE3E1E8ABBL) /* 1010 */, unchecked((long) 0xAFBDF931893BDCB4L) /* 1011 */, - unchecked((long) 0x6345A0DC5FBBD519L) /* 1012 */, unchecked((long) 0x8628FE269B9465CAL) /* 1013 */, - unchecked((long) 0x1E5D01603F9C51ECL) /* 1014 */, unchecked((long) 0x4DE44006A15049B7L) /* 1015 */, - unchecked((long) 0xBF6C70E5F776CBB1L) /* 1016 */, unchecked((long) 0x411218F2EF552BEDL) /* 1017 */, - unchecked((long) 0xCB0C0708705A36A3L) /* 1018 */, unchecked((long) 0xE74D14754F986044L) /* 1019 */, - unchecked((long) 0xCD56D9430EA8280EL) /* 1020 */, unchecked((long) 0xC12591D7535F5065L) /* 1021 */, - unchecked((long) 0xC83223F1720AEF96L) /* 1022 */, unchecked((long) 0xC3A0396F7363A51FL) /* 1023 */ - }; - - private const int DigestLength = 24; - - // - // registers - // - private long a, b, c; - private long byteCount; - - // - // buffers - // - private byte[] Buffer = new byte[8]; - private int bOff; - - private long[] x = new long[8]; - private int xOff; - - /** - * Standard constructor - */ - public TigerDigest() - { - Reset(); - } - - /** - * Copy constructor. This will copy the state of the provided - * message digest. - */ - public TigerDigest(TigerDigest t) - { - Reset(t); - } - - public string AlgorithmName - { - get { return "Tiger"; } - } - - public int GetDigestSize() - { - return DigestLength; - } - - public int GetByteLength() - { - return MyByteLength; - } - - private void ProcessWord( - byte[] b, - int off) - { - x[xOff++] = ((long)(b[off + 7] & 0xff) << 56) - | ((long)(b[off + 6] & 0xff) << 48) - | ((long)(b[off + 5] & 0xff) << 40) - | ((long)(b[off + 4] & 0xff) << 32) - | ((long)(b[off + 3] & 0xff) << 24) - | ((long)(b[off + 2] & 0xff) << 16) - | ((long)(b[off + 1] & 0xff) << 8) - | ((uint)(b[off + 0] & 0xff)); - - if (xOff == x.Length) - { - ProcessBlock(); - } - - bOff = 0; - } - - public void Update( - byte input) - { - Buffer[bOff++] = input; - - if (bOff == Buffer.Length) - { - ProcessWord(Buffer, 0); - } - - byteCount++; - } - - public void BlockUpdate( - byte[] input, - int inOff, - int length) - { - // - // fill the current word - // - while ((bOff != 0) && (length > 0)) - { - Update(input[inOff]); - - inOff++; - length--; - } - - // - // process whole words. - // - while (length > 8) - { - ProcessWord(input, inOff); - - inOff += 8; - length -= 8; - byteCount += 8; - } - - // - // load in the remainder. - // - while (length > 0) - { - Update(input[inOff]); - - inOff++; - length--; - } - } - - private void RoundABC( - long x, - long mul) - { - c ^= x ; - a -= t1[(int)c & 0xff] ^ t2[(int)(c >> 16) & 0xff] - ^ t3[(int)(c >> 32) & 0xff] ^ t4[(int)(c >> 48) & 0xff]; - b += t4[(int)(c >> 8) & 0xff] ^ t3[(int)(c >> 24) & 0xff] - ^ t2[(int)(c >> 40) & 0xff] ^ t1[(int)(c >> 56) & 0xff]; - b *= mul; - } - - private void RoundBCA( - long x, - long mul) - { - a ^= x ; - b -= t1[(int)a & 0xff] ^ t2[(int)(a >> 16) & 0xff] - ^ t3[(int)(a >> 32) & 0xff] ^ t4[(int)(a >> 48) & 0xff]; - c += t4[(int)(a >> 8) & 0xff] ^ t3[(int)(a >> 24) & 0xff] - ^ t2[(int)(a >> 40) & 0xff] ^ t1[(int)(a >> 56) & 0xff]; - c *= mul; - } - - private void RoundCAB( - long x, - long mul) - { - b ^= x ; - c -= t1[(int)b & 0xff] ^ t2[(int)(b >> 16) & 0xff] - ^ t3[(int)(b >> 32) & 0xff] ^ t4[(int)(b >> 48) & 0xff]; - a += t4[(int)(b >> 8) & 0xff] ^ t3[(int)(b >> 24) & 0xff] - ^ t2[(int)(b >> 40) & 0xff] ^ t1[(int)(b >> 56) & 0xff]; - a *= mul; - } - - private void KeySchedule() - { - x[0] -= x[7] ^ unchecked ((long) 0xA5A5A5A5A5A5A5A5L); - x[1] ^= x[0]; - x[2] += x[1]; - x[3] -= x[2] ^ ((~x[1]) << 19); - x[4] ^= x[3]; - x[5] += x[4]; - x[6] -= x[5] ^ (long) ((ulong) (~x[4]) >> 23); - x[7] ^= x[6]; - x[0] += x[7]; - x[1] -= x[0] ^ ((~x[7]) << 19); - x[2] ^= x[1]; - x[3] += x[2]; - x[4] -= x[3] ^ (long) ((ulong) (~x[2]) >> 23); - x[5] ^= x[4]; - x[6] += x[5]; - x[7] -= x[6] ^ 0x0123456789ABCDEFL; - } - - private void ProcessBlock() - { - // - // save abc - // - long aa = a; - long bb = b; - long cc = c; - - // - // rounds and schedule - // - RoundABC(x[0], 5); - RoundBCA(x[1], 5); - RoundCAB(x[2], 5); - RoundABC(x[3], 5); - RoundBCA(x[4], 5); - RoundCAB(x[5], 5); - RoundABC(x[6], 5); - RoundBCA(x[7], 5); - - KeySchedule(); - - RoundCAB(x[0], 7); - RoundABC(x[1], 7); - RoundBCA(x[2], 7); - RoundCAB(x[3], 7); - RoundABC(x[4], 7); - RoundBCA(x[5], 7); - RoundCAB(x[6], 7); - RoundABC(x[7], 7); - - KeySchedule(); - - RoundBCA(x[0], 9); - RoundCAB(x[1], 9); - RoundABC(x[2], 9); - RoundBCA(x[3], 9); - RoundCAB(x[4], 9); - RoundABC(x[5], 9); - RoundBCA(x[6], 9); - RoundCAB(x[7], 9); - - // - // feed forward - // - a ^= aa; - b -= bb; - c += cc; - - // - // clear the x buffer - // - xOff = 0; - for (int i = 0; i != x.Length; i++) - { - x[i] = 0; - } - } - - private void UnpackWord( - long r, - byte[] output, - int outOff) - { - output[outOff + 7] = (byte)(r >> 56); - output[outOff + 6] = (byte)(r >> 48); - output[outOff + 5] = (byte)(r >> 40); - output[outOff + 4] = (byte)(r >> 32); - output[outOff + 3] = (byte)(r >> 24); - output[outOff + 2] = (byte)(r >> 16); - output[outOff + 1] = (byte)(r >> 8); - output[outOff] = (byte)r; - } - - private void ProcessLength( - long bitLength) - { - x[7] = bitLength; - } - - private void Finish() - { - long bitLength = (byteCount << 3); - - Update((byte)0x01); - - while (bOff != 0) - { - Update((byte)0); - } - - ProcessLength(bitLength); - - ProcessBlock(); - } - - public int DoFinal( - byte[] output, - int outOff) - { - Finish(); - - UnpackWord(a, output, outOff); - UnpackWord(b, output, outOff + 8); - UnpackWord(c, output, outOff + 16); - - Reset(); - - return DigestLength; - } - - /** - * reset the chaining variables - */ - public void Reset() - { - a = unchecked((long) 0x0123456789ABCDEFL); - b = unchecked((long) 0xFEDCBA9876543210L); - c = unchecked((long) 0xF096A5B4C3B2E187L); - - xOff = 0; - for (int i = 0; i != x.Length; i++) - { - x[i] = 0; - } - - bOff = 0; - for (int i = 0; i != Buffer.Length; i++) - { - Buffer[i] = 0; - } - - byteCount = 0; - } - - public IMemoable Copy() - { - return new TigerDigest(this); - } - - public void Reset(IMemoable other) - { - TigerDigest t = (TigerDigest)other; - - a = t.a; - b = t.b; - c = t.c; - - Array.Copy(t.x, 0, x, 0, t.x.Length); - xOff = t.xOff; - - Array.Copy(t.Buffer, 0, Buffer, 0, t.Buffer.Length); - bOff = t.bOff; - - byteCount = t.byteCount; - } - - } -} diff --git a/bc-sharp-crypto/src/crypto/digests/WhirlpoolDigest.cs b/bc-sharp-crypto/src/crypto/digests/WhirlpoolDigest.cs deleted file mode 100644 index 55b7120..0000000 --- a/bc-sharp-crypto/src/crypto/digests/WhirlpoolDigest.cs +++ /dev/null @@ -1,413 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Digests -{ - /** - * Implementation of WhirlpoolDigest, based on Java source published by Barreto - * and Rijmen. - * - */ - public sealed class WhirlpoolDigest - : IDigest, IMemoable - { - private const int BYTE_LENGTH = 64; - - private const int DIGEST_LENGTH_BYTES = 512 / 8; - private const int ROUNDS = 10; - private const int REDUCTION_POLYNOMIAL = 0x011d; // 2^8 + 2^4 + 2^3 + 2 + 1; - - private static readonly int[] SBOX = - { - 0x18, 0x23, 0xc6, 0xe8, 0x87, 0xb8, 0x01, 0x4f, 0x36, 0xa6, 0xd2, 0xf5, 0x79, 0x6f, 0x91, 0x52, - 0x60, 0xbc, 0x9b, 0x8e, 0xa3, 0x0c, 0x7b, 0x35, 0x1d, 0xe0, 0xd7, 0xc2, 0x2e, 0x4b, 0xfe, 0x57, - 0x15, 0x77, 0x37, 0xe5, 0x9f, 0xf0, 0x4a, 0xda, 0x58, 0xc9, 0x29, 0x0a, 0xb1, 0xa0, 0x6b, 0x85, - 0xbd, 0x5d, 0x10, 0xf4, 0xcb, 0x3e, 0x05, 0x67, 0xe4, 0x27, 0x41, 0x8b, 0xa7, 0x7d, 0x95, 0xd8, - 0xfb, 0xee, 0x7c, 0x66, 0xdd, 0x17, 0x47, 0x9e, 0xca, 0x2d, 0xbf, 0x07, 0xad, 0x5a, 0x83, 0x33, - 0x63, 0x02, 0xaa, 0x71, 0xc8, 0x19, 0x49, 0xd9, 0xf2, 0xe3, 0x5b, 0x88, 0x9a, 0x26, 0x32, 0xb0, - 0xe9, 0x0f, 0xd5, 0x80, 0xbe, 0xcd, 0x34, 0x48, 0xff, 0x7a, 0x90, 0x5f, 0x20, 0x68, 0x1a, 0xae, - 0xb4, 0x54, 0x93, 0x22, 0x64, 0xf1, 0x73, 0x12, 0x40, 0x08, 0xc3, 0xec, 0xdb, 0xa1, 0x8d, 0x3d, - 0x97, 0x00, 0xcf, 0x2b, 0x76, 0x82, 0xd6, 0x1b, 0xb5, 0xaf, 0x6a, 0x50, 0x45, 0xf3, 0x30, 0xef, - 0x3f, 0x55, 0xa2, 0xea, 0x65, 0xba, 0x2f, 0xc0, 0xde, 0x1c, 0xfd, 0x4d, 0x92, 0x75, 0x06, 0x8a, - 0xb2, 0xe6, 0x0e, 0x1f, 0x62, 0xd4, 0xa8, 0x96, 0xf9, 0xc5, 0x25, 0x59, 0x84, 0x72, 0x39, 0x4c, - 0x5e, 0x78, 0x38, 0x8c, 0xd1, 0xa5, 0xe2, 0x61, 0xb3, 0x21, 0x9c, 0x1e, 0x43, 0xc7, 0xfc, 0x04, - 0x51, 0x99, 0x6d, 0x0d, 0xfa, 0xdf, 0x7e, 0x24, 0x3b, 0xab, 0xce, 0x11, 0x8f, 0x4e, 0xb7, 0xeb, - 0x3c, 0x81, 0x94, 0xf7, 0xb9, 0x13, 0x2c, 0xd3, 0xe7, 0x6e, 0xc4, 0x03, 0x56, 0x44, 0x7f, 0xa9, - 0x2a, 0xbb, 0xc1, 0x53, 0xdc, 0x0b, 0x9d, 0x6c, 0x31, 0x74, 0xf6, 0x46, 0xac, 0x89, 0x14, 0xe1, - 0x16, 0x3a, 0x69, 0x09, 0x70, 0xb6, 0xd0, 0xed, 0xcc, 0x42, 0x98, 0xa4, 0x28, 0x5c, 0xf8, 0x86 - }; - - private static readonly long[] C0 = new long[256]; - private static readonly long[] C1 = new long[256]; - private static readonly long[] C2 = new long[256]; - private static readonly long[] C3 = new long[256]; - private static readonly long[] C4 = new long[256]; - private static readonly long[] C5 = new long[256]; - private static readonly long[] C6 = new long[256]; - private static readonly long[] C7 = new long[256]; - - private readonly long[] _rc = new long[ROUNDS + 1]; - - /* - * increment() can be implemented in this way using 2 arrays or - * by having some temporary variables that are used to set the - * value provided by EIGHT[i] and carry within the loop. - * - * not having done any timing, this seems likely to be faster - * at the slight expense of 32*(sizeof short) bytes - */ - private static readonly short[] EIGHT = new short[BITCOUNT_ARRAY_SIZE]; - - static WhirlpoolDigest() - { - EIGHT[BITCOUNT_ARRAY_SIZE - 1] = 8; - - for (int i = 0; i < 256; i++) - { - int v1 = SBOX[i]; - int v2 = maskWithReductionPolynomial(v1 << 1); - int v4 = maskWithReductionPolynomial(v2 << 1); - int v5 = v4 ^ v1; - int v8 = maskWithReductionPolynomial(v4 << 1); - int v9 = v8 ^ v1; - - C0[i] = packIntoLong(v1, v1, v4, v1, v8, v5, v2, v9); - C1[i] = packIntoLong(v9, v1, v1, v4, v1, v8, v5, v2); - C2[i] = packIntoLong(v2, v9, v1, v1, v4, v1, v8, v5); - C3[i] = packIntoLong(v5, v2, v9, v1, v1, v4, v1, v8); - C4[i] = packIntoLong(v8, v5, v2, v9, v1, v1, v4, v1); - C5[i] = packIntoLong(v1, v8, v5, v2, v9, v1, v1, v4); - C6[i] = packIntoLong(v4, v1, v8, v5, v2, v9, v1, v1); - C7[i] = packIntoLong(v1, v4, v1, v8, v5, v2, v9, v1); - } - } - - public WhirlpoolDigest() - { - _rc[0] = 0L; - for (int r = 1; r <= ROUNDS; r++) - { - int i = 8 * (r - 1); - _rc[r] = (long)((ulong)C0[i] & 0xff00000000000000L) ^ - (C1[i + 1] & (long) 0x00ff000000000000L) ^ - (C2[i + 2] & (long) 0x0000ff0000000000L) ^ - (C3[i + 3] & (long) 0x000000ff00000000L) ^ - (C4[i + 4] & (long) 0x00000000ff000000L) ^ - (C5[i + 5] & (long) 0x0000000000ff0000L) ^ - (C6[i + 6] & (long) 0x000000000000ff00L) ^ - (C7[i + 7] & (long) 0x00000000000000ffL); - } - } - - private static long packIntoLong(int b7, int b6, int b5, int b4, int b3, int b2, int b1, int b0) - { - return - ((long)b7 << 56) ^ - ((long)b6 << 48) ^ - ((long)b5 << 40) ^ - ((long)b4 << 32) ^ - ((long)b3 << 24) ^ - ((long)b2 << 16) ^ - ((long)b1 << 8) ^ - b0; - } - - /* - * int's are used to prevent sign extension. The values that are really being used are - * actually just 0..255 - */ - private static int maskWithReductionPolynomial(int input) - { - int rv = input; - if (rv >= 0x100L) // high bit set - { - rv ^= REDUCTION_POLYNOMIAL; // reduced by the polynomial - } - return rv; - } - - // --------------------------------------------------------------------------------------// - - // -- buffer information -- - private const int BITCOUNT_ARRAY_SIZE = 32; - private byte[] _buffer = new byte[64]; - private int _bufferPos; - private short[] _bitCount = new short[BITCOUNT_ARRAY_SIZE]; - - // -- internal hash state -- - private long[] _hash = new long[8]; - private long[] _K = new long[8]; // the round key - private long[] _L = new long[8]; - private long[] _block = new long[8]; // mu (buffer) - private long[] _state = new long[8]; // the current "cipher" state - - - - /** - * Copy constructor. This will copy the state of the provided message - * digest. - */ - public WhirlpoolDigest(WhirlpoolDigest originalDigest) - { - Reset(originalDigest); - } - - public string AlgorithmName - { - get { return "Whirlpool"; } - } - - public int GetDigestSize() - { - return DIGEST_LENGTH_BYTES; - } - - public int DoFinal(byte[] output, int outOff) - { - // sets output[outOff] .. output[outOff+DIGEST_LENGTH_BYTES] - finish(); - - for (int i = 0; i < 8; i++) - { - convertLongToByteArray(_hash[i], output, outOff + (i * 8)); - } - - Reset(); - - return GetDigestSize(); - } - - /** - * Reset the chaining variables - */ - public void Reset() - { - // set variables to null, blank, whatever - _bufferPos = 0; - Array.Clear(_bitCount, 0, _bitCount.Length); - Array.Clear(_buffer, 0, _buffer.Length); - Array.Clear(_hash, 0, _hash.Length); - Array.Clear(_K, 0, _K.Length); - Array.Clear(_L, 0, _L.Length); - Array.Clear(_block, 0, _block.Length); - Array.Clear(_state, 0, _state.Length); - } - - // this takes a buffer of information and fills the block - private void processFilledBuffer() - { - // copies into the block... - for (int i = 0; i < _state.Length; i++) - { - _block[i] = bytesToLongFromBuffer(_buffer, i * 8); - } - processBlock(); - _bufferPos = 0; - Array.Clear(_buffer, 0, _buffer.Length); - } - - private static long bytesToLongFromBuffer(byte[] buffer, int startPos) - { - long rv = (((buffer[startPos + 0] & 0xffL) << 56) | - ((buffer[startPos + 1] & 0xffL) << 48) | - ((buffer[startPos + 2] & 0xffL) << 40) | - ((buffer[startPos + 3] & 0xffL) << 32) | - ((buffer[startPos + 4] & 0xffL) << 24) | - ((buffer[startPos + 5] & 0xffL) << 16) | - ((buffer[startPos + 6] & 0xffL) << 8) | - ((buffer[startPos + 7]) & 0xffL)); - - return rv; - } - - private static void convertLongToByteArray(long inputLong, byte[] outputArray, int offSet) - { - for (int i = 0; i < 8; i++) - { - outputArray[offSet + i] = (byte)((inputLong >> (56 - (i * 8))) & 0xff); - } - } - - private void processBlock() - { - // buffer contents have been transferred to the _block[] array via - // processFilledBuffer - - // compute and apply K^0 - for (int i = 0; i < 8; i++) - { - _state[i] = _block[i] ^ (_K[i] = _hash[i]); - } - - // iterate over the rounds - for (int round = 1; round <= ROUNDS; round++) - { - for (int i = 0; i < 8; i++) - { - _L[i] = 0; - _L[i] ^= C0[(int)(_K[(i - 0) & 7] >> 56) & 0xff]; - _L[i] ^= C1[(int)(_K[(i - 1) & 7] >> 48) & 0xff]; - _L[i] ^= C2[(int)(_K[(i - 2) & 7] >> 40) & 0xff]; - _L[i] ^= C3[(int)(_K[(i - 3) & 7] >> 32) & 0xff]; - _L[i] ^= C4[(int)(_K[(i - 4) & 7] >> 24) & 0xff]; - _L[i] ^= C5[(int)(_K[(i - 5) & 7] >> 16) & 0xff]; - _L[i] ^= C6[(int)(_K[(i - 6) & 7] >> 8) & 0xff]; - _L[i] ^= C7[(int)(_K[(i - 7) & 7]) & 0xff]; - } - - Array.Copy(_L, 0, _K, 0, _K.Length); - - _K[0] ^= _rc[round]; - - // apply the round transformation - for (int i = 0; i < 8; i++) - { - _L[i] = _K[i]; - - _L[i] ^= C0[(int)(_state[(i - 0) & 7] >> 56) & 0xff]; - _L[i] ^= C1[(int)(_state[(i - 1) & 7] >> 48) & 0xff]; - _L[i] ^= C2[(int)(_state[(i - 2) & 7] >> 40) & 0xff]; - _L[i] ^= C3[(int)(_state[(i - 3) & 7] >> 32) & 0xff]; - _L[i] ^= C4[(int)(_state[(i - 4) & 7] >> 24) & 0xff]; - _L[i] ^= C5[(int)(_state[(i - 5) & 7] >> 16) & 0xff]; - _L[i] ^= C6[(int)(_state[(i - 6) & 7] >> 8) & 0xff]; - _L[i] ^= C7[(int)(_state[(i - 7) & 7]) & 0xff]; - } - - // save the current state - Array.Copy(_L, 0, _state, 0, _state.Length); - } - - // apply Miuaguchi-Preneel compression - for (int i = 0; i < 8; i++) - { - _hash[i] ^= _state[i] ^ _block[i]; - } - - } - - public void Update(byte input) - { - _buffer[_bufferPos] = input; - - //Console.WriteLine("adding to buffer = "+_buffer[_bufferPos]); - - ++_bufferPos; - - if (_bufferPos == _buffer.Length) - { - processFilledBuffer(); - } - - increment(); - } - - private void increment() - { - int carry = 0; - for (int i = _bitCount.Length - 1; i >= 0; i--) - { - int sum = (_bitCount[i] & 0xff) + EIGHT[i] + carry; - - carry = sum >> 8; - _bitCount[i] = (short)(sum & 0xff); - } - } - - public void BlockUpdate(byte[] input, int inOff, int length) - { - while (length > 0) - { - Update(input[inOff]); - ++inOff; - --length; - } - - } - - private void finish() - { - /* - * this makes a copy of the current bit length. at the expense of an - * object creation of 32 bytes rather than providing a _stopCounting - * boolean which was the alternative I could think of. - */ - byte[] bitLength = copyBitLength(); - - _buffer[_bufferPos++] |= 0x80; - - if (_bufferPos == _buffer.Length) - { - processFilledBuffer(); - } - - /* - * Final block contains - * [ ... data .... ][0][0][0][ length ] - * - * if [ length ] cannot fit. Need to create a new block. - */ - if (_bufferPos > 32) - { - while (_bufferPos != 0) - { - Update((byte)0); - } - } - - while (_bufferPos <= 32) - { - Update((byte)0); - } - - // copy the length information to the final 32 bytes of the - // 64 byte block.... - Array.Copy(bitLength, 0, _buffer, 32, bitLength.Length); - - processFilledBuffer(); - } - - private byte[] copyBitLength() - { - byte[] rv = new byte[BITCOUNT_ARRAY_SIZE]; - for (int i = 0; i < rv.Length; i++) - { - rv[i] = (byte)(_bitCount[i] & 0xff); - } - return rv; - } - - public int GetByteLength() - { - return BYTE_LENGTH; - } - - public IMemoable Copy() - { - return new WhirlpoolDigest(this); - } - - public void Reset(IMemoable other) - { - WhirlpoolDigest originalDigest = (WhirlpoolDigest)other; - - Array.Copy(originalDigest._rc, 0, _rc, 0, _rc.Length); - - Array.Copy(originalDigest._buffer, 0, _buffer, 0, _buffer.Length); - - this._bufferPos = originalDigest._bufferPos; - Array.Copy(originalDigest._bitCount, 0, _bitCount, 0, _bitCount.Length); - - // -- internal hash state -- - Array.Copy(originalDigest._hash, 0, _hash, 0, _hash.Length); - Array.Copy(originalDigest._K, 0, _K, 0, _K.Length); - Array.Copy(originalDigest._L, 0, _L, 0, _L.Length); - Array.Copy(originalDigest._block, 0, _block, 0, _block.Length); - Array.Copy(originalDigest._state, 0, _state, 0, _state.Length); - } - - - } -} diff --git a/bc-sharp-crypto/src/crypto/ec/CustomNamedCurves.cs b/bc-sharp-crypto/src/crypto/ec/CustomNamedCurves.cs deleted file mode 100644 index 4b7600e..0000000 --- a/bc-sharp-crypto/src/crypto/ec/CustomNamedCurves.cs +++ /dev/null @@ -1,913 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.GM; -using Org.BouncyCastle.Asn1.Sec; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC; -using Org.BouncyCastle.Math.EC.Custom.Djb; -using Org.BouncyCastle.Math.EC.Custom.GM; -using Org.BouncyCastle.Math.EC.Custom.Sec; -using Org.BouncyCastle.Math.EC.Endo; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Crypto.EC -{ - public sealed class CustomNamedCurves - { - private CustomNamedCurves() - { - } - - private static BigInteger FromHex(string hex) - { - return new BigInteger(1, Hex.Decode(hex)); - } - - private static ECCurve ConfigureCurve(ECCurve curve) - { - return curve; - } - - private static ECCurve ConfigureCurveGlv(ECCurve c, GlvTypeBParameters p) - { - return c.Configure().SetEndomorphism(new GlvTypeBEndomorphism(c, p)).Create(); - } - - /* - * curve25519 - */ - internal class Curve25519Holder - : X9ECParametersHolder - { - private Curve25519Holder() { } - - internal static readonly X9ECParametersHolder Instance = new Curve25519Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = null; - ECCurve curve = ConfigureCurve(new Curve25519()); - - /* - * NOTE: Curve25519 was specified in Montgomery form. Rewriting in Weierstrass form - * involves substitution of variables, so the base-point x coordinate is 9 + (486662 / 3). - * - * The Curve25519 paper doesn't say which of the two possible y values the base - * point has. The choice here is guided by language in the Ed25519 paper. - * - * (The other possible y value is 5F51E65E475F794B1FE122D388B72EB36DC2B28192839E4DD6163A5D81312C14) - */ - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD245A" - + "20AE19A1B8A086B4E01EDD2C7748D14C923D4D7E6D7C61B229E9C5A27ECED3D9")); - - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - } - - /* - * secp128r1 - */ - internal class SecP128R1Holder - : X9ECParametersHolder - { - private SecP128R1Holder() { } - - internal static readonly X9ECParametersHolder Instance = new SecP128R1Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = Hex.Decode("000E0D4D696E6768756151750CC03A4473D03679"); - ECCurve curve = ConfigureCurve(new SecP128R1Curve()); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "161FF7528B899B2D0C28607CA52C5B86" - + "CF5AC8395BAFEB13C02DA292DDED7A83")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - }; - - /* - * secp160k1 - */ - internal class SecP160K1Holder - : X9ECParametersHolder - { - private SecP160K1Holder() { } - - internal static readonly X9ECParametersHolder Instance = new SecP160K1Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = null; - GlvTypeBParameters glv = new GlvTypeBParameters( - new BigInteger("9ba48cba5ebcb9b6bd33b92830b2a2e0e192f10a", 16), - new BigInteger("c39c6c3b3a36d7701b9c71a1f5804ae5d0003f4", 16), - new BigInteger[]{ - new BigInteger("9162fbe73984472a0a9e", 16), - new BigInteger("-96341f1138933bc2f505", 16) }, - new BigInteger[]{ - new BigInteger("127971af8721782ecffa3", 16), - new BigInteger("9162fbe73984472a0a9e", 16) }, - new BigInteger("9162fbe73984472a0a9d0590", 16), - new BigInteger("96341f1138933bc2f503fd44", 16), - 176); - ECCurve curve = ConfigureCurveGlv(new SecP160K1Curve(), glv); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "3B4C382CE37AA192A4019E763036F4F5DD4D7EBB" - + "938CF935318FDCED6BC28286531733C3F03C4FEE")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - }; - - /* - * secp160r1 - */ - internal class SecP160R1Holder - : X9ECParametersHolder - { - private SecP160R1Holder() { } - - internal static readonly X9ECParametersHolder Instance = new SecP160R1Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = Hex.Decode("1053CDE42C14D696E67687561517533BF3F83345"); - ECCurve curve = ConfigureCurve(new SecP160R1Curve()); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "4A96B5688EF573284664698968C38BB913CBFC82" - + "23A628553168947D59DCC912042351377AC5FB32")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - }; - - /* - * secp160r2 - */ - internal class SecP160R2Holder - : X9ECParametersHolder - { - private SecP160R2Holder() { } - - internal static readonly X9ECParametersHolder Instance = new SecP160R2Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = Hex.Decode("B99B99B099B323E02709A4D696E6768756151751"); - ECCurve curve = ConfigureCurve(new SecP160R2Curve()); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "52DCB034293A117E1F4FF11B30F7199D3144CE6D" - + "FEAFFEF2E331F296E071FA0DF9982CFEA7D43F2E")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - }; - - /* - * secp192k1 - */ - internal class SecP192K1Holder - : X9ECParametersHolder - { - private SecP192K1Holder() { } - - internal static readonly X9ECParametersHolder Instance = new SecP192K1Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = null; - GlvTypeBParameters glv = new GlvTypeBParameters( - new BigInteger("bb85691939b869c1d087f601554b96b80cb4f55b35f433c2", 16), - new BigInteger("3d84f26c12238d7b4f3d516613c1759033b1a5800175d0b1", 16), - new BigInteger[]{ - new BigInteger("71169be7330b3038edb025f1", 16), - new BigInteger("-b3fb3400dec5c4adceb8655c", 16) }, - new BigInteger[]{ - new BigInteger("12511cfe811d0f4e6bc688b4d", 16), - new BigInteger("71169be7330b3038edb025f1", 16) }, - new BigInteger("71169be7330b3038edb025f1d0f9", 16), - new BigInteger("b3fb3400dec5c4adceb8655d4c94", 16), - 208); - ECCurve curve = ConfigureCurveGlv(new SecP192K1Curve(), glv); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "DB4FF10EC057E9AE26B07D0280B7F4341DA5D1B1EAE06C7D" - + "9B2F2F6D9C5628A7844163D015BE86344082AA88D95E2F9D")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - } - - /* - * secp192r1 - */ - internal class SecP192R1Holder - : X9ECParametersHolder - { - private SecP192R1Holder() { } - - internal static readonly X9ECParametersHolder Instance = new SecP192R1Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = Hex.Decode("3045AE6FC8422F64ED579528D38120EAE12196D5"); - ECCurve curve = ConfigureCurve(new SecP192R1Curve()); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "188DA80EB03090F67CBF20EB43A18800F4FF0AFD82FF1012" - + "07192B95FFC8DA78631011ED6B24CDD573F977A11E794811")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - } - - /* - * secp224k1 - */ - internal class SecP224K1Holder - : X9ECParametersHolder - { - private SecP224K1Holder() { } - - internal static readonly X9ECParametersHolder Instance = new SecP224K1Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = null; - GlvTypeBParameters glv = new GlvTypeBParameters( - new BigInteger("fe0e87005b4e83761908c5131d552a850b3f58b749c37cf5b84d6768", 16), - new BigInteger("60dcd2104c4cbc0be6eeefc2bdd610739ec34e317f9b33046c9e4788", 16), - new BigInteger[]{ - new BigInteger("6b8cf07d4ca75c88957d9d670591", 16), - new BigInteger("-b8adf1378a6eb73409fa6c9c637d", 16) }, - new BigInteger[]{ - new BigInteger("1243ae1b4d71613bc9f780a03690e", 16), - new BigInteger("6b8cf07d4ca75c88957d9d670591", 16) }, - new BigInteger("6b8cf07d4ca75c88957d9d67059037a4", 16), - new BigInteger("b8adf1378a6eb73409fa6c9c637ba7f5", 16), - 240); - ECCurve curve = ConfigureCurveGlv(new SecP224K1Curve(), glv); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "A1455B334DF099DF30FC28A169A467E9E47075A90F7E650EB6B7A45C" - + "7E089FED7FBA344282CAFBD6F7E319F7C0B0BD59E2CA4BDB556D61A5")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - } - - /* - * secp224r1 - */ - internal class SecP224R1Holder - : X9ECParametersHolder - { - private SecP224R1Holder() { } - - internal static readonly X9ECParametersHolder Instance = new SecP224R1Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = Hex.Decode("BD71344799D5C7FCDC45B59FA3B9AB8F6A948BC5"); - ECCurve curve = ConfigureCurve(new SecP224R1Curve()); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "B70E0CBD6BB4BF7F321390B94A03C1D356C21122343280D6115C1D21" - + "BD376388B5F723FB4C22DFE6CD4375A05A07476444D5819985007E34")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - } - - /* - * secp256k1 - */ - internal class SecP256K1Holder - : X9ECParametersHolder - { - private SecP256K1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new SecP256K1Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = null; - GlvTypeBParameters glv = new GlvTypeBParameters( - new BigInteger("7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee", 16), - new BigInteger("5363ad4cc05c30e0a5261c028812645a122e22ea20816678df02967c1b23bd72", 16), - new BigInteger[]{ - new BigInteger("3086d221a7d46bcde86c90e49284eb15", 16), - new BigInteger("-e4437ed6010e88286f547fa90abfe4c3", 16) }, - new BigInteger[]{ - new BigInteger("114ca50f7a8e2f3f657c1108d9d44cfd8", 16), - new BigInteger("3086d221a7d46bcde86c90e49284eb15", 16) }, - new BigInteger("3086d221a7d46bcde86c90e49284eb153dab", 16), - new BigInteger("e4437ed6010e88286f547fa90abfe4c42212", 16), - 272); - ECCurve curve = ConfigureCurveGlv(new SecP256K1Curve(), glv); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "79BE667EF9DCBBAC55A06295CE870B07029BFCDB2DCE28D959F2815B16F81798" - + "483ADA7726A3C4655DA4FBFC0E1108A8FD17B448A68554199C47D08FFB10D4B8")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - } - - /* - * secp256r1 - */ - internal class SecP256R1Holder - : X9ECParametersHolder - { - private SecP256R1Holder() {} - - internal static readonly X9ECParametersHolder Instance = new SecP256R1Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = Hex.Decode("C49D360886E704936A6678E1139D26B7819F7E90"); - ECCurve curve = ConfigureCurve(new SecP256R1Curve()); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "6B17D1F2E12C4247F8BCE6E563A440F277037D812DEB33A0F4A13945D898C296" - + "4FE342E2FE1A7F9B8EE7EB4A7C0F9E162BCE33576B315ECECBB6406837BF51F5")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - } - - /* - * secp384r1 - */ - internal class SecP384R1Holder - : X9ECParametersHolder - { - private SecP384R1Holder() { } - - internal static readonly X9ECParametersHolder Instance = new SecP384R1Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = Hex.Decode("A335926AA319A27A1D00896A6773A4827ACDAC73"); - ECCurve curve = ConfigureCurve(new SecP384R1Curve()); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "AA87CA22BE8B05378EB1C71EF320AD746E1D3B628BA79B9859F741E082542A385502F25DBF55296C3A545E3872760AB7" - + "3617DE4A96262C6F5D9E98BF9292DC29F8F41DBD289A147CE9DA3113B5F0B8C00A60B1CE1D7E819D7A431D7C90EA0E5F")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - } - - /* - * secp521r1 - */ - internal class SecP521R1Holder - : X9ECParametersHolder - { - private SecP521R1Holder() { } - - internal static readonly X9ECParametersHolder Instance = new SecP521R1Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = Hex.Decode("D09E8800291CB85396CC6717393284AAA0DA64BA"); - ECCurve curve = ConfigureCurve(new SecP521R1Curve()); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "00C6858E06B70404E9CD9E3ECB662395B4429C648139053FB521F828AF606B4D3DBAA14B5E77EFE75928FE1DC127A2FFA8DE3348B3C1856A429BF97E7E31C2E5BD66" - + "011839296A789A3BC0045C8A5FB42C7D1BD998F54449579B446817AFBD17273E662C97EE72995EF42640C550B9013FAD0761353C7086A272C24088BE94769FD16650")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - } - - /* - * sect113r1 - */ - internal class SecT113R1Holder - : X9ECParametersHolder - { - private SecT113R1Holder() { } - - internal static readonly X9ECParametersHolder Instance = new SecT113R1Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = Hex.Decode("10E723AB14D696E6768756151756FEBF8FCB49A9"); - ECCurve curve = ConfigureCurve(new SecT113R1Curve()); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "009D73616F35F4AB1407D73562C10F" - + "00A52830277958EE84D1315ED31886")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - }; - - /* - * sect113r2 - */ - internal class SecT113R2Holder - : X9ECParametersHolder - { - private SecT113R2Holder() { } - - internal static readonly X9ECParametersHolder Instance = new SecT113R2Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = Hex.Decode("10C0FB15760860DEF1EEF4D696E676875615175D"); - ECCurve curve = ConfigureCurve(new SecT113R2Curve()); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "01A57A6A7B26CA5EF52FCDB8164797" - + "00B3ADC94ED1FE674C06E695BABA1D")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - }; - - /* - * sect131r1 - */ - internal class SecT131R1Holder - : X9ECParametersHolder - { - private SecT131R1Holder() { } - - internal static readonly X9ECParametersHolder Instance = new SecT131R1Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = Hex.Decode("4D696E676875615175985BD3ADBADA21B43A97E2"); - ECCurve curve = ConfigureCurve(new SecT131R1Curve()); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "0081BAF91FDF9833C40F9C181343638399" - + "078C6E7EA38C001F73C8134B1B4EF9E150")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - }; - - /* - * sect131r2 - */ - internal class SecT131R2Holder - : X9ECParametersHolder - { - private SecT131R2Holder() { } - - internal static readonly X9ECParametersHolder Instance = new SecT131R2Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = Hex.Decode("985BD3ADBAD4D696E676875615175A21B43A97E3"); - ECCurve curve = ConfigureCurve(new SecT131R2Curve()); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "0356DCD8F2F95031AD652D23951BB366A8" - + "0648F06D867940A5366D9E265DE9EB240F")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - }; - - /* - * sect163k1 - */ - internal class SecT163K1Holder - : X9ECParametersHolder - { - private SecT163K1Holder() { } - - internal static readonly X9ECParametersHolder Instance = new SecT163K1Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = null; - ECCurve curve = ConfigureCurve(new SecT163K1Curve()); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "02FE13C0537BBC11ACAA07D793DE4E6D5E5C94EEE8" - + "0289070FB05D38FF58321F2E800536D538CCDAA3D9")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - }; - - /* - * sect163r1 - */ - internal class SecT163R1Holder - : X9ECParametersHolder - { - private SecT163R1Holder() { } - - internal static readonly X9ECParametersHolder Instance = new SecT163R1Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = Hex.Decode("24B7B137C8A14D696E6768756151756FD0DA2E5C"); - ECCurve curve = ConfigureCurve(new SecT163R1Curve()); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "0369979697AB43897789566789567F787A7876A654" - + "00435EDB42EFAFB2989D51FEFCE3C80988F41FF883")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - }; - - /* - * sect163r2 - */ - internal class SecT163R2Holder - : X9ECParametersHolder - { - private SecT163R2Holder() { } - - internal static readonly X9ECParametersHolder Instance = new SecT163R2Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = Hex.Decode("85E25BFE5C86226CDB12016F7553F9D0E693A268"); - ECCurve curve = ConfigureCurve(new SecT163R2Curve()); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "03F0EBA16286A2D57EA0991168D4994637E8343E36" - + "00D51FBC6C71A0094FA2CDD545B11C5C0C797324F1")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - }; - - /* - * sect193r1 - */ - internal class SecT193R1Holder - : X9ECParametersHolder - { - private SecT193R1Holder() { } - - internal static readonly X9ECParametersHolder Instance = new SecT193R1Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = Hex.Decode("103FAEC74D696E676875615175777FC5B191EF30"); - ECCurve curve = ConfigureCurve(new SecT193R1Curve()); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "01F481BC5F0FF84A74AD6CDF6FDEF4BF6179625372D8C0C5E1" - + "0025E399F2903712CCF3EA9E3A1AD17FB0B3201B6AF7CE1B05")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - }; - - /* - * sect193r2 - */ - internal class SecT193R2Holder - : X9ECParametersHolder - { - private SecT193R2Holder() { } - - internal static readonly X9ECParametersHolder Instance = new SecT193R2Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = Hex.Decode("10B7B4D696E676875615175137C8A16FD0DA2211"); - ECCurve curve = ConfigureCurve(new SecT193R2Curve()); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "00D9B67D192E0367C803F39E1A7E82CA14A651350AAE617E8F" - + "01CE94335607C304AC29E7DEFBD9CA01F596F927224CDECF6C")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - }; - - /* - * sect233k1 - */ - internal class SecT233K1Holder - : X9ECParametersHolder - { - private SecT233K1Holder() { } - - internal static readonly X9ECParametersHolder Instance = new SecT233K1Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = null; - ECCurve curve = ConfigureCurve(new SecT233K1Curve()); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "017232BA853A7E731AF129F22FF4149563A419C26BF50A4C9D6EEFAD6126" - + "01DB537DECE819B7F70F555A67C427A8CD9BF18AEB9B56E0C11056FAE6A3")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - }; - - /* - * sect233r1 - */ - internal class SecT233R1Holder - : X9ECParametersHolder - { - private SecT233R1Holder() { } - - internal static readonly X9ECParametersHolder Instance = new SecT233R1Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = Hex.Decode("74D59FF07F6B413D0EA14B344B20A2DB049B50C3"); - ECCurve curve = ConfigureCurve(new SecT233R1Curve()); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "00FAC9DFCBAC8313BB2139F1BB755FEF65BC391F8B36F8F8EB7371FD558B" - + "01006A08A41903350678E58528BEBF8A0BEFF867A7CA36716F7E01F81052")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - }; - - /* - * sect239k1 - */ - internal class SecT239K1Holder - : X9ECParametersHolder - { - private SecT239K1Holder() { } - - internal static readonly X9ECParametersHolder Instance = new SecT239K1Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = null; - ECCurve curve = ConfigureCurve(new SecT239K1Curve()); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "29A0B6A887A983E9730988A68727A8B2D126C44CC2CC7B2A6555193035DC" - + "76310804F12E549BDB011C103089E73510ACB275FC312A5DC6B76553F0CA")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - }; - - /* - * sect283k1 - */ - internal class SecT283K1Holder - : X9ECParametersHolder - { - private SecT283K1Holder() { } - - internal static readonly X9ECParametersHolder Instance = new SecT283K1Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = null; - ECCurve curve = ConfigureCurve(new SecT283K1Curve()); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "0503213F78CA44883F1A3B8162F188E553CD265F23C1567A16876913B0C2AC2458492836" - + "01CCDA380F1C9E318D90F95D07E5426FE87E45C0E8184698E45962364E34116177DD2259")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - }; - - /* - * sect283r1 - */ - internal class SecT283R1Holder - : X9ECParametersHolder - { - private SecT283R1Holder() { } - - internal static readonly X9ECParametersHolder Instance = new SecT283R1Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = Hex.Decode("77E2B07370EB0F832A6DD5B62DFC88CD06BB84BE"); - ECCurve curve = ConfigureCurve(new SecT283R1Curve()); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "05F939258DB7DD90E1934F8C70B0DFEC2EED25B8557EAC9C80E2E198F8CDBECD86B12053" - + "03676854FE24141CB98FE6D4B20D02B4516FF702350EDDB0826779C813F0DF45BE8112F4")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - }; - - /* - * sect409k1 - */ - internal class SecT409K1Holder - : X9ECParametersHolder - { - private SecT409K1Holder() { } - - internal static readonly X9ECParametersHolder Instance = new SecT409K1Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = null; - ECCurve curve = ConfigureCurve(new SecT409K1Curve()); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "0060F05F658F49C1AD3AB1890F7184210EFD0987E307C84C27ACCFB8F9F67CC2C460189EB5AAAA62EE222EB1B35540CFE9023746" - + "01E369050B7C4E42ACBA1DACBF04299C3460782F918EA427E6325165E9EA10E3DA5F6C42E9C55215AA9CA27A5863EC48D8E0286B")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - }; - - /* - * sect409r1 - */ - internal class SecT409R1Holder - : X9ECParametersHolder - { - private SecT409R1Holder() { } - - internal static readonly X9ECParametersHolder Instance = new SecT409R1Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = Hex.Decode("4099B5A457F9D69F79213D094C4BCD4D4262210B"); - ECCurve curve = ConfigureCurve(new SecT409R1Curve()); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "015D4860D088DDB3496B0C6064756260441CDE4AF1771D4DB01FFE5B34E59703DC255A868A1180515603AEAB60794E54BB7996A7" - + "0061B1CFAB6BE5F32BBFA78324ED106A7636B9C5A7BD198D0158AA4F5488D08F38514F1FDF4B4F40D2181B3681C364BA0273C706")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - }; - - /* - * sect571k1 - */ - internal class SecT571K1Holder - : X9ECParametersHolder - { - private SecT571K1Holder() { } - - internal static readonly X9ECParametersHolder Instance = new SecT571K1Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = null; - ECCurve curve = ConfigureCurve(new SecT571K1Curve()); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "026EB7A859923FBC82189631F8103FE4AC9CA2970012D5D46024804801841CA44370958493B205E647DA304DB4CEB08CBBD1BA39494776FB988B47174DCA88C7E2945283A01C8972" - + "0349DC807F4FBF374F4AEADE3BCA95314DD58CEC9F307A54FFC61EFC006D8A2C9D4979C0AC44AEA74FBEBBB9F772AEDCB620B01A7BA7AF1B320430C8591984F601CD4C143EF1C7A3")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - }; - - /* - * sect571r1 - */ - internal class SecT571R1Holder - : X9ECParametersHolder - { - private SecT571R1Holder() { } - - internal static readonly X9ECParametersHolder Instance = new SecT571R1Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = Hex.Decode("2AA058F73A0E33AB486B0F610410C53A7F132310"); - ECCurve curve = ConfigureCurve(new SecT571R1Curve()); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "0303001D34B856296C16C0D40D3CD7750A93D1D2955FA80AA5F40FC8DB7B2ABDBDE53950F4C0D293CDD711A35B67FB1499AE60038614F1394ABFA3B4C850D927E1E7769C8EEC2D19" - + "037BF27342DA639B6DCCFFFEB73D69D78C6C27A6009CBBCA1980F8533921E8A684423E43BAB08A576291AF8F461BB2A8B3531D2F0485C19B16E2F1516E23DD3C1A4827AF1B8AC15B")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - }; - - /* - * sm2p256v1 - */ - internal class SM2P256V1Holder - : X9ECParametersHolder - { - private SM2P256V1Holder() { } - - internal static readonly X9ECParametersHolder Instance = new SM2P256V1Holder(); - - protected override X9ECParameters CreateParameters() - { - byte[] S = null; - ECCurve curve = ConfigureCurve(new SM2P256V1Curve()); - X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04" - + "32C4AE2C1F1981195F9904466A39C9948FE30BBFF2660BE1715A4589334C74C7" - + "BC3736A2F4F6779C59BDCEE36B692153D0A9877CC62A474002DF32E52139F0A0")); - return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S); - } - } - - - private static readonly IDictionary nameToCurve = Platform.CreateHashtable(); - private static readonly IDictionary nameToOid = Platform.CreateHashtable(); - private static readonly IDictionary oidToCurve = Platform.CreateHashtable(); - private static readonly IDictionary oidToName = Platform.CreateHashtable(); - private static readonly IList names = Platform.CreateArrayList(); - - private static void DefineCurve(string name, X9ECParametersHolder holder) - { - names.Add(name); - name = Platform.ToUpperInvariant(name); - nameToCurve.Add(name, holder); - } - - private static void DefineCurveWithOid(string name, DerObjectIdentifier oid, X9ECParametersHolder holder) - { - names.Add(name); - oidToName.Add(oid, name); - oidToCurve.Add(oid, holder); - name = Platform.ToUpperInvariant(name); - nameToOid.Add(name, oid); - nameToCurve.Add(name, holder); - } - - private static void DefineCurveAlias(string name, DerObjectIdentifier oid) - { - object curve = oidToCurve[oid]; - if (curve == null) - throw new InvalidOperationException(); - - name = Platform.ToUpperInvariant(name); - nameToOid.Add(name, oid); - nameToCurve.Add(name, curve); - } - - static CustomNamedCurves() - { - DefineCurve("curve25519", Curve25519Holder.Instance); - - //DefineCurveWithOid("secp112r1", SecObjectIdentifiers.SecP112r1, SecP112R1Holder.Instance); - //DefineCurveWithOid("secp112r2", SecObjectIdentifiers.SecP112r2, SecP112R2Holder.Instance); - DefineCurveWithOid("secp128r1", SecObjectIdentifiers.SecP128r1, SecP128R1Holder.Instance); - //DefineCurveWithOid("secp128r2", SecObjectIdentifiers.SecP128r2, SecP128R2Holder.Instance); - DefineCurveWithOid("secp160k1", SecObjectIdentifiers.SecP160k1, SecP160K1Holder.Instance); - DefineCurveWithOid("secp160r1", SecObjectIdentifiers.SecP160r1, SecP160R1Holder.Instance); - DefineCurveWithOid("secp160r2", SecObjectIdentifiers.SecP160r2, SecP160R2Holder.Instance); - DefineCurveWithOid("secp192k1", SecObjectIdentifiers.SecP192k1, SecP192K1Holder.Instance); - DefineCurveWithOid("secp192r1", SecObjectIdentifiers.SecP192r1, SecP192R1Holder.Instance); - DefineCurveWithOid("secp224k1", SecObjectIdentifiers.SecP224k1, SecP224K1Holder.Instance); - DefineCurveWithOid("secp224r1", SecObjectIdentifiers.SecP224r1, SecP224R1Holder.Instance); - DefineCurveWithOid("secp256k1", SecObjectIdentifiers.SecP256k1, SecP256K1Holder.Instance); - DefineCurveWithOid("secp256r1", SecObjectIdentifiers.SecP256r1, SecP256R1Holder.Instance); - DefineCurveWithOid("secp384r1", SecObjectIdentifiers.SecP384r1, SecP384R1Holder.Instance); - DefineCurveWithOid("secp521r1", SecObjectIdentifiers.SecP521r1, SecP521R1Holder.Instance); - - DefineCurveWithOid("sect113r1", SecObjectIdentifiers.SecT113r1, SecT113R1Holder.Instance); - DefineCurveWithOid("sect113r2", SecObjectIdentifiers.SecT113r2, SecT113R2Holder.Instance); - DefineCurveWithOid("sect131r1", SecObjectIdentifiers.SecT131r1, SecT131R1Holder.Instance); - DefineCurveWithOid("sect131r2", SecObjectIdentifiers.SecT131r2, SecT131R2Holder.Instance); - DefineCurveWithOid("sect163k1", SecObjectIdentifiers.SecT163k1, SecT163K1Holder.Instance); - DefineCurveWithOid("sect163r1", SecObjectIdentifiers.SecT163r1, SecT163R1Holder.Instance); - DefineCurveWithOid("sect163r2", SecObjectIdentifiers.SecT163r2, SecT163R2Holder.Instance); - DefineCurveWithOid("sect193r1", SecObjectIdentifiers.SecT193r1, SecT193R1Holder.Instance); - DefineCurveWithOid("sect193r2", SecObjectIdentifiers.SecT193r2, SecT193R2Holder.Instance); - DefineCurveWithOid("sect233k1", SecObjectIdentifiers.SecT233k1, SecT233K1Holder.Instance); - DefineCurveWithOid("sect233r1", SecObjectIdentifiers.SecT233r1, SecT233R1Holder.Instance); - DefineCurveWithOid("sect239k1", SecObjectIdentifiers.SecT239k1, SecT239K1Holder.Instance); - DefineCurveWithOid("sect283k1", SecObjectIdentifiers.SecT283k1, SecT283K1Holder.Instance); - DefineCurveWithOid("sect283r1", SecObjectIdentifiers.SecT283r1, SecT283R1Holder.Instance); - DefineCurveWithOid("sect409k1", SecObjectIdentifiers.SecT409k1, SecT409K1Holder.Instance); - DefineCurveWithOid("sect409r1", SecObjectIdentifiers.SecT409r1, SecT409R1Holder.Instance); - DefineCurveWithOid("sect571k1", SecObjectIdentifiers.SecT571k1, SecT571K1Holder.Instance); - DefineCurveWithOid("sect571r1", SecObjectIdentifiers.SecT571r1, SecT571R1Holder.Instance); - - DefineCurveWithOid("sm2p256v1", GMObjectIdentifiers.sm2p256v1, SM2P256V1Holder.Instance); - - DefineCurveAlias("B-163", SecObjectIdentifiers.SecT163r2); - DefineCurveAlias("B-233", SecObjectIdentifiers.SecT233r1); - DefineCurveAlias("B-283", SecObjectIdentifiers.SecT283r1); - DefineCurveAlias("B-409", SecObjectIdentifiers.SecT409r1); - DefineCurveAlias("B-571", SecObjectIdentifiers.SecT571r1); - - DefineCurveAlias("K-163", SecObjectIdentifiers.SecT163k1); - DefineCurveAlias("K-233", SecObjectIdentifiers.SecT233k1); - DefineCurveAlias("K-283", SecObjectIdentifiers.SecT283k1); - DefineCurveAlias("K-409", SecObjectIdentifiers.SecT409k1); - DefineCurveAlias("K-571", SecObjectIdentifiers.SecT571k1); - - DefineCurveAlias("P-192", SecObjectIdentifiers.SecP192r1); - DefineCurveAlias("P-224", SecObjectIdentifiers.SecP224r1); - DefineCurveAlias("P-256", SecObjectIdentifiers.SecP256r1); - DefineCurveAlias("P-384", SecObjectIdentifiers.SecP384r1); - DefineCurveAlias("P-521", SecObjectIdentifiers.SecP521r1); - } - - public static X9ECParameters GetByName(string name) - { - X9ECParametersHolder holder = (X9ECParametersHolder)nameToCurve[Platform.ToUpperInvariant(name)]; - return holder == null ? null : holder.Parameters; - } - - /** - * return the X9ECParameters object for the named curve represented by - * the passed in object identifier. Null if the curve isn't present. - * - * @param oid an object identifier representing a named curve, if present. - */ - public static X9ECParameters GetByOid(DerObjectIdentifier oid) - { - X9ECParametersHolder holder = (X9ECParametersHolder)oidToCurve[oid]; - return holder == null ? null : holder.Parameters; - } - - /** - * return the object identifier signified by the passed in name. Null - * if there is no object identifier associated with name. - * - * @return the object identifier associated with name, if present. - */ - public static DerObjectIdentifier GetOid(string name) - { - return (DerObjectIdentifier)nameToOid[Platform.ToUpperInvariant(name)]; - } - - /** - * return the named curve name represented by the given object identifier. - */ - public static string GetName(DerObjectIdentifier oid) - { - return (string)oidToName[oid]; - } - - /** - * returns an enumeration containing the name strings for curves - * contained in this structure. - */ - public static IEnumerable Names - { - get { return new EnumerableProxy(names); } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/encodings/ISO9796d1Encoding.cs b/bc-sharp-crypto/src/crypto/encodings/ISO9796d1Encoding.cs deleted file mode 100644 index 30e9883..0000000 --- a/bc-sharp-crypto/src/crypto/encodings/ISO9796d1Encoding.cs +++ /dev/null @@ -1,273 +0,0 @@ -using System; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Encodings -{ - /** - * ISO 9796-1 padding. Note in the light of recent results you should - * only use this with RSA (rather than the "simpler" Rabin keys) and you - * should never use it with anything other than a hash (ie. even if the - * message is small don't sign the message, sign it's hash) or some "random" - * value. See your favorite search engine for details. - */ - public class ISO9796d1Encoding - : IAsymmetricBlockCipher - { - private static readonly BigInteger Sixteen = BigInteger.ValueOf(16); - private static readonly BigInteger Six = BigInteger.ValueOf(6); - - private static readonly byte[] shadows = { 0xe, 0x3, 0x5, 0x8, 0x9, 0x4, 0x2, 0xf, - 0x0, 0xd, 0xb, 0x6, 0x7, 0xa, 0xc, 0x1 }; - private static readonly byte[] inverse = { 0x8, 0xf, 0x6, 0x1, 0x5, 0x2, 0xb, 0xc, - 0x3, 0x4, 0xd, 0xa, 0xe, 0x9, 0x0, 0x7 }; - - private readonly IAsymmetricBlockCipher engine; - private bool forEncryption; - private int bitSize; - private int padBits = 0; - private BigInteger modulus; - - public ISO9796d1Encoding( - IAsymmetricBlockCipher cipher) - { - this.engine = cipher; - } - - public string AlgorithmName - { - get { return engine.AlgorithmName + "/ISO9796-1Padding"; } - } - - public IAsymmetricBlockCipher GetUnderlyingCipher() - { - return engine; - } - - public void Init( - bool forEncryption, - ICipherParameters parameters) - { - RsaKeyParameters kParam; - if (parameters is ParametersWithRandom) - { - ParametersWithRandom rParam = (ParametersWithRandom)parameters; - kParam = (RsaKeyParameters)rParam.Parameters; - } - else - { - kParam = (RsaKeyParameters)parameters; - } - - engine.Init(forEncryption, parameters); - - modulus = kParam.Modulus; - bitSize = modulus.BitLength; - - this.forEncryption = forEncryption; - } - - /** - * return the input block size. The largest message we can process - * is (key_size_in_bits + 3)/16, which in our world comes to - * key_size_in_bytes / 2. - */ - public int GetInputBlockSize() - { - int baseBlockSize = engine.GetInputBlockSize(); - - if (forEncryption) - { - return (baseBlockSize + 1) / 2; - } - else - { - return baseBlockSize; - } - } - - /** - * return the maximum possible size for the output. - */ - public int GetOutputBlockSize() - { - int baseBlockSize = engine.GetOutputBlockSize(); - - if (forEncryption) - { - return baseBlockSize; - } - else - { - return (baseBlockSize + 1) / 2; - } - } - - /** - * set the number of bits in the next message to be treated as - * pad bits. - */ - public void SetPadBits( - int padBits) - { - if (padBits > 7) - { - throw new ArgumentException("padBits > 7"); - } - - this.padBits = padBits; - } - - /** - * retrieve the number of pad bits in the last decoded message. - */ - public int GetPadBits() - { - return padBits; - } - - public byte[] ProcessBlock( - byte[] input, - int inOff, - int length) - { - if (forEncryption) - { - return EncodeBlock(input, inOff, length); - } - else - { - return DecodeBlock(input, inOff, length); - } - } - - private byte[] EncodeBlock( - byte[] input, - int inOff, - int inLen) - { - byte[] block = new byte[(bitSize + 7) / 8]; - int r = padBits + 1; - int z = inLen; - int t = (bitSize + 13) / 16; - - for (int i = 0; i < t; i += z) - { - if (i > t - z) - { - Array.Copy(input, inOff + inLen - (t - i), - block, block.Length - t, t - i); - } - else - { - Array.Copy(input, inOff, block, block.Length - (i + z), z); - } - } - - for (int i = block.Length - 2 * t; i != block.Length; i += 2) - { - byte val = block[block.Length - t + i / 2]; - - block[i] = (byte)((shadows[(uint) (val & 0xff) >> 4] << 4) - | shadows[val & 0x0f]); - block[i + 1] = val; - } - - block[block.Length - 2 * z] ^= (byte) r; - block[block.Length - 1] = (byte)((block[block.Length - 1] << 4) | 0x06); - - int maxBit = (8 - (bitSize - 1) % 8); - int offSet = 0; - - if (maxBit != 8) - { - block[0] &= (byte) ((ushort) 0xff >> maxBit); - block[0] |= (byte) ((ushort) 0x80 >> maxBit); - } - else - { - block[0] = 0x00; - block[1] |= 0x80; - offSet = 1; - } - - return engine.ProcessBlock(block, offSet, block.Length - offSet); - } - - /** - * @exception InvalidCipherTextException if the decrypted block is not a valid ISO 9796 bit string - */ - private byte[] DecodeBlock( - byte[] input, - int inOff, - int inLen) - { - byte[] block = engine.ProcessBlock(input, inOff, inLen); - int r = 1; - int t = (bitSize + 13) / 16; - - BigInteger iS = new BigInteger(1, block); - BigInteger iR; - if (iS.Mod(Sixteen).Equals(Six)) - { - iR = iS; - } - else - { - iR = modulus.Subtract(iS); - - if (!iR.Mod(Sixteen).Equals(Six)) - throw new InvalidCipherTextException("resulting integer iS or (modulus - iS) is not congruent to 6 mod 16"); - } - - block = iR.ToByteArrayUnsigned(); - - if ((block[block.Length - 1] & 0x0f) != 0x6) - throw new InvalidCipherTextException("invalid forcing byte in block"); - - block[block.Length - 1] = - (byte)(((ushort)(block[block.Length - 1] & 0xff) >> 4) - | ((inverse[(block[block.Length - 2] & 0xff) >> 4]) << 4)); - - block[0] = (byte)((shadows[(uint) (block[1] & 0xff) >> 4] << 4) - | shadows[block[1] & 0x0f]); - - bool boundaryFound = false; - int boundary = 0; - - for (int i = block.Length - 1; i >= block.Length - 2 * t; i -= 2) - { - int val = ((shadows[(uint) (block[i] & 0xff) >> 4] << 4) - | shadows[block[i] & 0x0f]); - - if (((block[i - 1] ^ val) & 0xff) != 0) - { - if (!boundaryFound) - { - boundaryFound = true; - r = (block[i - 1] ^ val) & 0xff; - boundary = i - 1; - } - else - { - throw new InvalidCipherTextException("invalid tsums in block"); - } - } - } - - block[boundary] = 0; - - byte[] nblock = new byte[(block.Length - boundary) / 2]; - - for (int i = 0; i < nblock.Length; i++) - { - nblock[i] = block[2 * i + boundary + 1]; - } - - padBits = r - 1; - - return nblock; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/encodings/OaepEncoding.cs b/bc-sharp-crypto/src/crypto/encodings/OaepEncoding.cs deleted file mode 100644 index 287876f..0000000 --- a/bc-sharp-crypto/src/crypto/encodings/OaepEncoding.cs +++ /dev/null @@ -1,345 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Encodings -{ - /** - * Optimal Asymmetric Encryption Padding (OAEP) - see PKCS 1 V 2. - */ - public class OaepEncoding - : IAsymmetricBlockCipher - { - private byte[] defHash; - private IDigest mgf1Hash; - - private IAsymmetricBlockCipher engine; - private SecureRandom random; - private bool forEncryption; - - public OaepEncoding( - IAsymmetricBlockCipher cipher) - : this(cipher, new Sha1Digest(), null) - { - } - - public OaepEncoding( - IAsymmetricBlockCipher cipher, - IDigest hash) - : this(cipher, hash, null) - { - } - - public OaepEncoding( - IAsymmetricBlockCipher cipher, - IDigest hash, - byte[] encodingParams) - : this(cipher, hash, hash, encodingParams) - { - } - - public OaepEncoding( - IAsymmetricBlockCipher cipher, - IDigest hash, - IDigest mgf1Hash, - byte[] encodingParams) - { - this.engine = cipher; - this.mgf1Hash = mgf1Hash; - this.defHash = new byte[hash.GetDigestSize()]; - - hash.Reset(); - - if (encodingParams != null) - { - hash.BlockUpdate(encodingParams, 0, encodingParams.Length); - } - - hash.DoFinal(defHash, 0); - } - - public IAsymmetricBlockCipher GetUnderlyingCipher() - { - return engine; - } - - public string AlgorithmName - { - get { return engine.AlgorithmName + "/OAEPPadding"; } - } - - public void Init( - bool forEncryption, - ICipherParameters param) - { - if (param is ParametersWithRandom) - { - ParametersWithRandom rParam = (ParametersWithRandom)param; - this.random = rParam.Random; - } - else - { - this.random = new SecureRandom(); - } - - engine.Init(forEncryption, param); - - this.forEncryption = forEncryption; - } - - public int GetInputBlockSize() - { - int baseBlockSize = engine.GetInputBlockSize(); - - if (forEncryption) - { - return baseBlockSize - 1 - 2 * defHash.Length; - } - else - { - return baseBlockSize; - } - } - - public int GetOutputBlockSize() - { - int baseBlockSize = engine.GetOutputBlockSize(); - - if (forEncryption) - { - return baseBlockSize; - } - else - { - return baseBlockSize - 1 - 2 * defHash.Length; - } - } - - public byte[] ProcessBlock( - byte[] inBytes, - int inOff, - int inLen) - { - if (forEncryption) - { - return EncodeBlock(inBytes, inOff, inLen); - } - else - { - return DecodeBlock(inBytes, inOff, inLen); - } - } - - private byte[] EncodeBlock( - byte[] inBytes, - int inOff, - int inLen) - { - Check.DataLength(inLen > GetInputBlockSize(), "input data too long"); - - byte[] block = new byte[GetInputBlockSize() + 1 + 2 * defHash.Length]; - - // - // copy in the message - // - Array.Copy(inBytes, inOff, block, block.Length - inLen, inLen); - - // - // add sentinel - // - block[block.Length - inLen - 1] = 0x01; - - // - // as the block is already zeroed - there's no need to add PS (the >= 0 pad of 0) - // - - // - // add the hash of the encoding params. - // - Array.Copy(defHash, 0, block, defHash.Length, defHash.Length); - - // - // generate the seed. - // - byte[] seed = SecureRandom.GetNextBytes(random, defHash.Length); - - // - // mask the message block. - // - byte[] mask = maskGeneratorFunction1(seed, 0, seed.Length, block.Length - defHash.Length); - - for (int i = defHash.Length; i != block.Length; i++) - { - block[i] ^= mask[i - defHash.Length]; - } - - // - // add in the seed - // - Array.Copy(seed, 0, block, 0, defHash.Length); - - // - // mask the seed. - // - mask = maskGeneratorFunction1( - block, defHash.Length, block.Length - defHash.Length, defHash.Length); - - for (int i = 0; i != defHash.Length; i++) - { - block[i] ^= mask[i]; - } - - return engine.ProcessBlock(block, 0, block.Length); - } - - /** - * @exception InvalidCipherTextException if the decrypted block turns out to - * be badly formatted. - */ - private byte[] DecodeBlock( - byte[] inBytes, - int inOff, - int inLen) - { - byte[] data = engine.ProcessBlock(inBytes, inOff, inLen); - byte[] block = new byte[engine.GetOutputBlockSize()]; - - // - // as we may have zeros in our leading bytes for the block we produced - // on encryption, we need to make sure our decrypted block comes back - // the same size. - // - - Array.Copy(data, 0, block, block.Length - data.Length, data.Length); - - bool shortData = (block.Length < (2 * defHash.Length) + 1); - - // - // unmask the seed. - // - byte[] mask = maskGeneratorFunction1( - block, defHash.Length, block.Length - defHash.Length, defHash.Length); - - for (int i = 0; i != defHash.Length; i++) - { - block[i] ^= mask[i]; - } - - // - // unmask the message block. - // - mask = maskGeneratorFunction1(block, 0, defHash.Length, block.Length - defHash.Length); - - for (int i = defHash.Length; i != block.Length; i++) - { - block[i] ^= mask[i - defHash.Length]; - } - - // - // check the hash of the encoding params. - // long check to try to avoid this been a source of a timing attack. - // - bool defHashWrong = false; - - for (int i = 0; i != defHash.Length; i++) - { - if (defHash[i] != block[defHash.Length + i]) - { - defHashWrong = true; - } - } - - // - // find the data block - // - int start = block.Length; - - for (int index = 2 * defHash.Length; index != block.Length; index++) - { - if (block[index] != 0 & start == block.Length) - { - start = index; - } - } - - bool dataStartWrong = (start > (block.Length - 1) | block[start] != 1); - - start++; - - if (defHashWrong | shortData | dataStartWrong) - { - Arrays.Fill(block, 0); - throw new InvalidCipherTextException("data wrong"); - } - - // - // extract the data block - // - byte[] output = new byte[block.Length - start]; - - Array.Copy(block, start, output, 0, output.Length); - - return output; - } - - /** - * int to octet string. - */ - private void ItoOSP( - int i, - byte[] sp) - { - sp[0] = (byte)((uint)i >> 24); - sp[1] = (byte)((uint)i >> 16); - sp[2] = (byte)((uint)i >> 8); - sp[3] = (byte)((uint)i >> 0); - } - - /** - * mask generator function, as described in PKCS1v2. - */ - private byte[] maskGeneratorFunction1( - byte[] Z, - int zOff, - int zLen, - int length) - { - byte[] mask = new byte[length]; - byte[] hashBuf = new byte[mgf1Hash.GetDigestSize()]; - byte[] C = new byte[4]; - int counter = 0; - - mgf1Hash.Reset(); - - while (counter < (length / hashBuf.Length)) - { - ItoOSP(counter, C); - - mgf1Hash.BlockUpdate(Z, zOff, zLen); - mgf1Hash.BlockUpdate(C, 0, C.Length); - mgf1Hash.DoFinal(hashBuf, 0); - - Array.Copy(hashBuf, 0, mask, counter * hashBuf.Length, hashBuf.Length); - - counter++; - } - - if ((counter * hashBuf.Length) < length) - { - ItoOSP(counter, C); - - mgf1Hash.BlockUpdate(Z, zOff, zLen); - mgf1Hash.BlockUpdate(C, 0, C.Length); - mgf1Hash.DoFinal(hashBuf, 0); - - Array.Copy(hashBuf, 0, mask, counter * hashBuf.Length, mask.Length - (counter * hashBuf.Length)); - } - - return mask; - } - } -} - diff --git a/bc-sharp-crypto/src/crypto/encodings/Pkcs1Encoding.cs b/bc-sharp-crypto/src/crypto/encodings/Pkcs1Encoding.cs deleted file mode 100644 index b2d60fe..0000000 --- a/bc-sharp-crypto/src/crypto/encodings/Pkcs1Encoding.cs +++ /dev/null @@ -1,384 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Encodings -{ - /** - * this does your basic Pkcs 1 v1.5 padding - whether or not you should be using this - * depends on your application - see Pkcs1 Version 2 for details. - */ - public class Pkcs1Encoding - : IAsymmetricBlockCipher - { - /** - * some providers fail to include the leading zero in PKCS1 encoded blocks. If you need to - * work with one of these set the system property Org.BouncyCastle.Pkcs1.Strict to false. - */ - public const string StrictLengthEnabledProperty = "Org.BouncyCastle.Pkcs1.Strict"; - - private const int HeaderLength = 10; - - /** - * The same effect can be achieved by setting the static property directly - *

- * The static property is checked during construction of the encoding object, it is set to - * true by default. - *

- */ - public static bool StrictLengthEnabled - { - get { return strictLengthEnabled[0]; } - set { strictLengthEnabled[0] = value; } - } - - private static readonly bool[] strictLengthEnabled; - - static Pkcs1Encoding() - { - string strictProperty = Platform.GetEnvironmentVariable(StrictLengthEnabledProperty); - - strictLengthEnabled = new bool[]{ strictProperty == null || strictProperty.Equals("true")}; - } - - - private SecureRandom random; - private IAsymmetricBlockCipher engine; - private bool forEncryption; - private bool forPrivateKey; - private bool useStrictLength; - private int pLen = -1; - private byte[] fallback = null; - private byte[] blockBuffer = null; - - /** - * Basic constructor. - * - * @param cipher - */ - public Pkcs1Encoding( - IAsymmetricBlockCipher cipher) - { - this.engine = cipher; - this.useStrictLength = StrictLengthEnabled; - } - - /** - * Constructor for decryption with a fixed plaintext length. - * - * @param cipher The cipher to use for cryptographic operation. - * @param pLen Length of the expected plaintext. - */ - public Pkcs1Encoding(IAsymmetricBlockCipher cipher, int pLen) - { - this.engine = cipher; - this.useStrictLength = StrictLengthEnabled; - this.pLen = pLen; - } - - /** - * Constructor for decryption with a fixed plaintext length and a fallback - * value that is returned, if the padding is incorrect. - * - * @param cipher - * The cipher to use for cryptographic operation. - * @param fallback - * The fallback value, we don't to a arraycopy here. - */ - public Pkcs1Encoding(IAsymmetricBlockCipher cipher, byte[] fallback) - { - this.engine = cipher; - this.useStrictLength = StrictLengthEnabled; - this.fallback = fallback; - this.pLen = fallback.Length; - } - - public IAsymmetricBlockCipher GetUnderlyingCipher() - { - return engine; - } - - public string AlgorithmName - { - get { return engine.AlgorithmName + "/PKCS1Padding"; } - } - - public void Init(bool forEncryption, ICipherParameters parameters) - { - AsymmetricKeyParameter kParam; - if (parameters is ParametersWithRandom) - { - ParametersWithRandom rParam = (ParametersWithRandom)parameters; - - this.random = rParam.Random; - kParam = (AsymmetricKeyParameter)rParam.Parameters; - } - else - { - this.random = new SecureRandom(); - kParam = (AsymmetricKeyParameter)parameters; - } - - engine.Init(forEncryption, parameters); - - this.forPrivateKey = kParam.IsPrivate; - this.forEncryption = forEncryption; - this.blockBuffer = new byte[engine.GetOutputBlockSize()]; - - if (pLen > 0 && fallback == null && random == null) - throw new ArgumentException("encoder requires random"); - } - - public int GetInputBlockSize() - { - int baseBlockSize = engine.GetInputBlockSize(); - - return forEncryption - ? baseBlockSize - HeaderLength - : baseBlockSize; - } - - public int GetOutputBlockSize() - { - int baseBlockSize = engine.GetOutputBlockSize(); - - return forEncryption - ? baseBlockSize - : baseBlockSize - HeaderLength; - } - - public byte[] ProcessBlock( - byte[] input, - int inOff, - int length) - { - return forEncryption - ? EncodeBlock(input, inOff, length) - : DecodeBlock(input, inOff, length); - } - - private byte[] EncodeBlock( - byte[] input, - int inOff, - int inLen) - { - if (inLen > GetInputBlockSize()) - throw new ArgumentException("input data too large", "inLen"); - - byte[] block = new byte[engine.GetInputBlockSize()]; - - if (forPrivateKey) - { - block[0] = 0x01; // type code 1 - - for (int i = 1; i != block.Length - inLen - 1; i++) - { - block[i] = (byte)0xFF; - } - } - else - { - random.NextBytes(block); // random fill - - block[0] = 0x02; // type code 2 - - // - // a zero byte marks the end of the padding, so all - // the pad bytes must be non-zero. - // - for (int i = 1; i != block.Length - inLen - 1; i++) - { - while (block[i] == 0) - { - block[i] = (byte)random.NextInt(); - } - } - } - - block[block.Length - inLen - 1] = 0x00; // mark the end of the padding - Array.Copy(input, inOff, block, block.Length - inLen, inLen); - - return engine.ProcessBlock(block, 0, block.Length); - } - - /** - * Checks if the argument is a correctly PKCS#1.5 encoded Plaintext - * for encryption. - * - * @param encoded The Plaintext. - * @param pLen Expected length of the plaintext. - * @return Either 0, if the encoding is correct, or -1, if it is incorrect. - */ - private static int CheckPkcs1Encoding(byte[] encoded, int pLen) - { - int correct = 0; - /* - * Check if the first two bytes are 0 2 - */ - correct |= (encoded[0] ^ 2); - - /* - * Now the padding check, check for no 0 byte in the padding - */ - int plen = encoded.Length - ( - pLen /* Lenght of the PMS */ - + 1 /* Final 0-byte before PMS */ - ); - - for (int i = 1; i < plen; i++) - { - int tmp = encoded[i]; - tmp |= tmp >> 1; - tmp |= tmp >> 2; - tmp |= tmp >> 4; - correct |= (tmp & 1) - 1; - } - - /* - * Make sure the padding ends with a 0 byte. - */ - correct |= encoded[encoded.Length - (pLen + 1)]; - - /* - * Return 0 or 1, depending on the result. - */ - correct |= correct >> 1; - correct |= correct >> 2; - correct |= correct >> 4; - return ~((correct & 1) - 1); - } - - /** - * Decode PKCS#1.5 encoding, and return a random value if the padding is not correct. - * - * @param in The encrypted block. - * @param inOff Offset in the encrypted block. - * @param inLen Length of the encrypted block. - * @param pLen Length of the desired output. - * @return The plaintext without padding, or a random value if the padding was incorrect. - * @throws InvalidCipherTextException - */ - private byte[] DecodeBlockOrRandom(byte[] input, int inOff, int inLen) - { - if (!forPrivateKey) - throw new InvalidCipherTextException("sorry, this method is only for decryption, not for signing"); - - byte[] block = engine.ProcessBlock(input, inOff, inLen); - byte[] random; - if (this.fallback == null) - { - random = new byte[this.pLen]; - this.random.NextBytes(random); - } - else - { - random = fallback; - } - - byte[] data = (useStrictLength & (block.Length != engine.GetOutputBlockSize())) ? blockBuffer : block; - - /* - * Check the padding. - */ - int correct = CheckPkcs1Encoding(data, this.pLen); - - /* - * Now, to a constant time constant memory copy of the decrypted value - * or the random value, depending on the validity of the padding. - */ - byte[] result = new byte[this.pLen]; - for (int i = 0; i < this.pLen; i++) - { - result[i] = (byte)((data[i + (data.Length - pLen)] & (~correct)) | (random[i] & correct)); - } - - Arrays.Fill(data, 0); - - return result; - } - - /** - * @exception InvalidCipherTextException if the decrypted block is not in Pkcs1 format. - */ - private byte[] DecodeBlock( - byte[] input, - int inOff, - int inLen) - { - /* - * If the length of the expected plaintext is known, we use a constant-time decryption. - * If the decryption fails, we return a random value. - */ - if (this.pLen != -1) - { - return this.DecodeBlockOrRandom(input, inOff, inLen); - } - - byte[] block = engine.ProcessBlock(input, inOff, inLen); - bool incorrectLength = (useStrictLength & (block.Length != engine.GetOutputBlockSize())); - - byte[] data; - if (block.Length < GetOutputBlockSize()) - { - data = blockBuffer; - } - else - { - data = block; - } - - byte expectedType = (byte)(forPrivateKey ? 2 : 1); - byte type = data[0]; - - bool badType = (type != expectedType); - - // - // find and extract the message block. - // - int start = FindStart(type, data); - - start++; // data should start at the next byte - - if (badType | (start < HeaderLength)) - { - Arrays.Fill(data, 0); - throw new InvalidCipherTextException("block incorrect"); - } - - // if we get this far, it's likely to be a genuine encoding error - if (incorrectLength) - { - Arrays.Fill(data, 0); - throw new InvalidCipherTextException("block incorrect size"); - } - - byte[] result = new byte[data.Length - start]; - - Array.Copy(data, start, result, 0, result.Length); - - return result; - } - - private int FindStart(byte type, byte[] block) - { - int start = -1; - bool padErr = false; - - for (int i = 1; i != block.Length; i++) - { - byte pad = block[i]; - - if (pad == 0 & start < 0) - { - start = i; - } - padErr |= ((type == 1) & (start < 0) & (pad != (byte)0xff)); - } - - return padErr ? -1 : start; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/AesEngine.cs b/bc-sharp-crypto/src/crypto/engines/AesEngine.cs deleted file mode 100644 index 91bdf69..0000000 --- a/bc-sharp-crypto/src/crypto/engines/AesEngine.cs +++ /dev/null @@ -1,610 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * an implementation of the AES (Rijndael), from FIPS-197. - *

- * For further details see: http://csrc.nist.gov/encryption/aes/. - * - * This implementation is based on optimizations from Dr. Brian Gladman's paper and C code at - * http://fp.gladman.plus.com/cryptography_technology/rijndael/ - * - * There are three levels of tradeoff of speed vs memory - * Because java has no preprocessor, they are written as three separate classes from which to choose - * - * The fastest uses 8Kbytes of static tables to precompute round calculations, 4 256 word tables for encryption - * and 4 for decryption. - * - * The middle performance version uses only one 256 word table for each, for a total of 2Kbytes, - * adding 12 rotate operations per round to compute the values contained in the other tables from - * the contents of the first. - * - * The slowest version uses no static tables at all and computes the values in each round. - *

- *

- * This file contains the middle performance version with 2Kbytes of static tables for round precomputation. - *

- */ - public class AesEngine - : IBlockCipher - { - // The S box - private static readonly byte[] S = - { - 99, 124, 119, 123, 242, 107, 111, 197, - 48, 1, 103, 43, 254, 215, 171, 118, - 202, 130, 201, 125, 250, 89, 71, 240, - 173, 212, 162, 175, 156, 164, 114, 192, - 183, 253, 147, 38, 54, 63, 247, 204, - 52, 165, 229, 241, 113, 216, 49, 21, - 4, 199, 35, 195, 24, 150, 5, 154, - 7, 18, 128, 226, 235, 39, 178, 117, - 9, 131, 44, 26, 27, 110, 90, 160, - 82, 59, 214, 179, 41, 227, 47, 132, - 83, 209, 0, 237, 32, 252, 177, 91, - 106, 203, 190, 57, 74, 76, 88, 207, - 208, 239, 170, 251, 67, 77, 51, 133, - 69, 249, 2, 127, 80, 60, 159, 168, - 81, 163, 64, 143, 146, 157, 56, 245, - 188, 182, 218, 33, 16, 255, 243, 210, - 205, 12, 19, 236, 95, 151, 68, 23, - 196, 167, 126, 61, 100, 93, 25, 115, - 96, 129, 79, 220, 34, 42, 144, 136, - 70, 238, 184, 20, 222, 94, 11, 219, - 224, 50, 58, 10, 73, 6, 36, 92, - 194, 211, 172, 98, 145, 149, 228, 121, - 231, 200, 55, 109, 141, 213, 78, 169, - 108, 86, 244, 234, 101, 122, 174, 8, - 186, 120, 37, 46, 28, 166, 180, 198, - 232, 221, 116, 31, 75, 189, 139, 138, - 112, 62, 181, 102, 72, 3, 246, 14, - 97, 53, 87, 185, 134, 193, 29, 158, - 225, 248, 152, 17, 105, 217, 142, 148, - 155, 30, 135, 233, 206, 85, 40, 223, - 140, 161, 137, 13, 191, 230, 66, 104, - 65, 153, 45, 15, 176, 84, 187, 22, - }; - - // The inverse S-box - private static readonly byte[] Si = - { - 82, 9, 106, 213, 48, 54, 165, 56, - 191, 64, 163, 158, 129, 243, 215, 251, - 124, 227, 57, 130, 155, 47, 255, 135, - 52, 142, 67, 68, 196, 222, 233, 203, - 84, 123, 148, 50, 166, 194, 35, 61, - 238, 76, 149, 11, 66, 250, 195, 78, - 8, 46, 161, 102, 40, 217, 36, 178, - 118, 91, 162, 73, 109, 139, 209, 37, - 114, 248, 246, 100, 134, 104, 152, 22, - 212, 164, 92, 204, 93, 101, 182, 146, - 108, 112, 72, 80, 253, 237, 185, 218, - 94, 21, 70, 87, 167, 141, 157, 132, - 144, 216, 171, 0, 140, 188, 211, 10, - 247, 228, 88, 5, 184, 179, 69, 6, - 208, 44, 30, 143, 202, 63, 15, 2, - 193, 175, 189, 3, 1, 19, 138, 107, - 58, 145, 17, 65, 79, 103, 220, 234, - 151, 242, 207, 206, 240, 180, 230, 115, - 150, 172, 116, 34, 231, 173, 53, 133, - 226, 249, 55, 232, 28, 117, 223, 110, - 71, 241, 26, 113, 29, 41, 197, 137, - 111, 183, 98, 14, 170, 24, 190, 27, - 252, 86, 62, 75, 198, 210, 121, 32, - 154, 219, 192, 254, 120, 205, 90, 244, - 31, 221, 168, 51, 136, 7, 199, 49, - 177, 18, 16, 89, 39, 128, 236, 95, - 96, 81, 127, 169, 25, 181, 74, 13, - 45, 229, 122, 159, 147, 201, 156, 239, - 160, 224, 59, 77, 174, 42, 245, 176, - 200, 235, 187, 60, 131, 83, 153, 97, - 23, 43, 4, 126, 186, 119, 214, 38, - 225, 105, 20, 99, 85, 33, 12, 125, - }; - - // vector used in calculating key schedule (powers of x in GF(256)) - private static readonly byte[] rcon = - { - 0x01, 0x02, 0x04, 0x08, 0x10, 0x20, 0x40, 0x80, 0x1b, 0x36, 0x6c, 0xd8, 0xab, 0x4d, 0x9a, - 0x2f, 0x5e, 0xbc, 0x63, 0xc6, 0x97, 0x35, 0x6a, 0xd4, 0xb3, 0x7d, 0xfa, 0xef, 0xc5, 0x91 - }; - - // precomputation tables of calculations for rounds - private static readonly uint[] T0 = - { - 0xa56363c6, 0x847c7cf8, 0x997777ee, 0x8d7b7bf6, 0x0df2f2ff, - 0xbd6b6bd6, 0xb16f6fde, 0x54c5c591, 0x50303060, 0x03010102, - 0xa96767ce, 0x7d2b2b56, 0x19fefee7, 0x62d7d7b5, 0xe6abab4d, - 0x9a7676ec, 0x45caca8f, 0x9d82821f, 0x40c9c989, 0x877d7dfa, - 0x15fafaef, 0xeb5959b2, 0xc947478e, 0x0bf0f0fb, 0xecadad41, - 0x67d4d4b3, 0xfda2a25f, 0xeaafaf45, 0xbf9c9c23, 0xf7a4a453, - 0x967272e4, 0x5bc0c09b, 0xc2b7b775, 0x1cfdfde1, 0xae93933d, - 0x6a26264c, 0x5a36366c, 0x413f3f7e, 0x02f7f7f5, 0x4fcccc83, - 0x5c343468, 0xf4a5a551, 0x34e5e5d1, 0x08f1f1f9, 0x937171e2, - 0x73d8d8ab, 0x53313162, 0x3f15152a, 0x0c040408, 0x52c7c795, - 0x65232346, 0x5ec3c39d, 0x28181830, 0xa1969637, 0x0f05050a, - 0xb59a9a2f, 0x0907070e, 0x36121224, 0x9b80801b, 0x3de2e2df, - 0x26ebebcd, 0x6927274e, 0xcdb2b27f, 0x9f7575ea, 0x1b090912, - 0x9e83831d, 0x742c2c58, 0x2e1a1a34, 0x2d1b1b36, 0xb26e6edc, - 0xee5a5ab4, 0xfba0a05b, 0xf65252a4, 0x4d3b3b76, 0x61d6d6b7, - 0xceb3b37d, 0x7b292952, 0x3ee3e3dd, 0x712f2f5e, 0x97848413, - 0xf55353a6, 0x68d1d1b9, 0x00000000, 0x2cededc1, 0x60202040, - 0x1ffcfce3, 0xc8b1b179, 0xed5b5bb6, 0xbe6a6ad4, 0x46cbcb8d, - 0xd9bebe67, 0x4b393972, 0xde4a4a94, 0xd44c4c98, 0xe85858b0, - 0x4acfcf85, 0x6bd0d0bb, 0x2aefefc5, 0xe5aaaa4f, 0x16fbfbed, - 0xc5434386, 0xd74d4d9a, 0x55333366, 0x94858511, 0xcf45458a, - 0x10f9f9e9, 0x06020204, 0x817f7ffe, 0xf05050a0, 0x443c3c78, - 0xba9f9f25, 0xe3a8a84b, 0xf35151a2, 0xfea3a35d, 0xc0404080, - 0x8a8f8f05, 0xad92923f, 0xbc9d9d21, 0x48383870, 0x04f5f5f1, - 0xdfbcbc63, 0xc1b6b677, 0x75dadaaf, 0x63212142, 0x30101020, - 0x1affffe5, 0x0ef3f3fd, 0x6dd2d2bf, 0x4ccdcd81, 0x140c0c18, - 0x35131326, 0x2fececc3, 0xe15f5fbe, 0xa2979735, 0xcc444488, - 0x3917172e, 0x57c4c493, 0xf2a7a755, 0x827e7efc, 0x473d3d7a, - 0xac6464c8, 0xe75d5dba, 0x2b191932, 0x957373e6, 0xa06060c0, - 0x98818119, 0xd14f4f9e, 0x7fdcdca3, 0x66222244, 0x7e2a2a54, - 0xab90903b, 0x8388880b, 0xca46468c, 0x29eeeec7, 0xd3b8b86b, - 0x3c141428, 0x79dedea7, 0xe25e5ebc, 0x1d0b0b16, 0x76dbdbad, - 0x3be0e0db, 0x56323264, 0x4e3a3a74, 0x1e0a0a14, 0xdb494992, - 0x0a06060c, 0x6c242448, 0xe45c5cb8, 0x5dc2c29f, 0x6ed3d3bd, - 0xefacac43, 0xa66262c4, 0xa8919139, 0xa4959531, 0x37e4e4d3, - 0x8b7979f2, 0x32e7e7d5, 0x43c8c88b, 0x5937376e, 0xb76d6dda, - 0x8c8d8d01, 0x64d5d5b1, 0xd24e4e9c, 0xe0a9a949, 0xb46c6cd8, - 0xfa5656ac, 0x07f4f4f3, 0x25eaeacf, 0xaf6565ca, 0x8e7a7af4, - 0xe9aeae47, 0x18080810, 0xd5baba6f, 0x887878f0, 0x6f25254a, - 0x722e2e5c, 0x241c1c38, 0xf1a6a657, 0xc7b4b473, 0x51c6c697, - 0x23e8e8cb, 0x7cdddda1, 0x9c7474e8, 0x211f1f3e, 0xdd4b4b96, - 0xdcbdbd61, 0x868b8b0d, 0x858a8a0f, 0x907070e0, 0x423e3e7c, - 0xc4b5b571, 0xaa6666cc, 0xd8484890, 0x05030306, 0x01f6f6f7, - 0x120e0e1c, 0xa36161c2, 0x5f35356a, 0xf95757ae, 0xd0b9b969, - 0x91868617, 0x58c1c199, 0x271d1d3a, 0xb99e9e27, 0x38e1e1d9, - 0x13f8f8eb, 0xb398982b, 0x33111122, 0xbb6969d2, 0x70d9d9a9, - 0x898e8e07, 0xa7949433, 0xb69b9b2d, 0x221e1e3c, 0x92878715, - 0x20e9e9c9, 0x49cece87, 0xff5555aa, 0x78282850, 0x7adfdfa5, - 0x8f8c8c03, 0xf8a1a159, 0x80898909, 0x170d0d1a, 0xdabfbf65, - 0x31e6e6d7, 0xc6424284, 0xb86868d0, 0xc3414182, 0xb0999929, - 0x772d2d5a, 0x110f0f1e, 0xcbb0b07b, 0xfc5454a8, 0xd6bbbb6d, - 0x3a16162c - }; - - private static readonly uint[] Tinv0 = - { - 0x50a7f451, 0x5365417e, 0xc3a4171a, 0x965e273a, 0xcb6bab3b, - 0xf1459d1f, 0xab58faac, 0x9303e34b, 0x55fa3020, 0xf66d76ad, - 0x9176cc88, 0x254c02f5, 0xfcd7e54f, 0xd7cb2ac5, 0x80443526, - 0x8fa362b5, 0x495ab1de, 0x671bba25, 0x980eea45, 0xe1c0fe5d, - 0x02752fc3, 0x12f04c81, 0xa397468d, 0xc6f9d36b, 0xe75f8f03, - 0x959c9215, 0xeb7a6dbf, 0xda595295, 0x2d83bed4, 0xd3217458, - 0x2969e049, 0x44c8c98e, 0x6a89c275, 0x78798ef4, 0x6b3e5899, - 0xdd71b927, 0xb64fe1be, 0x17ad88f0, 0x66ac20c9, 0xb43ace7d, - 0x184adf63, 0x82311ae5, 0x60335197, 0x457f5362, 0xe07764b1, - 0x84ae6bbb, 0x1ca081fe, 0x942b08f9, 0x58684870, 0x19fd458f, - 0x876cde94, 0xb7f87b52, 0x23d373ab, 0xe2024b72, 0x578f1fe3, - 0x2aab5566, 0x0728ebb2, 0x03c2b52f, 0x9a7bc586, 0xa50837d3, - 0xf2872830, 0xb2a5bf23, 0xba6a0302, 0x5c8216ed, 0x2b1ccf8a, - 0x92b479a7, 0xf0f207f3, 0xa1e2694e, 0xcdf4da65, 0xd5be0506, - 0x1f6234d1, 0x8afea6c4, 0x9d532e34, 0xa055f3a2, 0x32e18a05, - 0x75ebf6a4, 0x39ec830b, 0xaaef6040, 0x069f715e, 0x51106ebd, - 0xf98a213e, 0x3d06dd96, 0xae053edd, 0x46bde64d, 0xb58d5491, - 0x055dc471, 0x6fd40604, 0xff155060, 0x24fb9819, 0x97e9bdd6, - 0xcc434089, 0x779ed967, 0xbd42e8b0, 0x888b8907, 0x385b19e7, - 0xdbeec879, 0x470a7ca1, 0xe90f427c, 0xc91e84f8, 0x00000000, - 0x83868009, 0x48ed2b32, 0xac70111e, 0x4e725a6c, 0xfbff0efd, - 0x5638850f, 0x1ed5ae3d, 0x27392d36, 0x64d90f0a, 0x21a65c68, - 0xd1545b9b, 0x3a2e3624, 0xb1670a0c, 0x0fe75793, 0xd296eeb4, - 0x9e919b1b, 0x4fc5c080, 0xa220dc61, 0x694b775a, 0x161a121c, - 0x0aba93e2, 0xe52aa0c0, 0x43e0223c, 0x1d171b12, 0x0b0d090e, - 0xadc78bf2, 0xb9a8b62d, 0xc8a91e14, 0x8519f157, 0x4c0775af, - 0xbbdd99ee, 0xfd607fa3, 0x9f2601f7, 0xbcf5725c, 0xc53b6644, - 0x347efb5b, 0x7629438b, 0xdcc623cb, 0x68fcedb6, 0x63f1e4b8, - 0xcadc31d7, 0x10856342, 0x40229713, 0x2011c684, 0x7d244a85, - 0xf83dbbd2, 0x1132f9ae, 0x6da129c7, 0x4b2f9e1d, 0xf330b2dc, - 0xec52860d, 0xd0e3c177, 0x6c16b32b, 0x99b970a9, 0xfa489411, - 0x2264e947, 0xc48cfca8, 0x1a3ff0a0, 0xd82c7d56, 0xef903322, - 0xc74e4987, 0xc1d138d9, 0xfea2ca8c, 0x360bd498, 0xcf81f5a6, - 0x28de7aa5, 0x268eb7da, 0xa4bfad3f, 0xe49d3a2c, 0x0d927850, - 0x9bcc5f6a, 0x62467e54, 0xc2138df6, 0xe8b8d890, 0x5ef7392e, - 0xf5afc382, 0xbe805d9f, 0x7c93d069, 0xa92dd56f, 0xb31225cf, - 0x3b99acc8, 0xa77d1810, 0x6e639ce8, 0x7bbb3bdb, 0x097826cd, - 0xf418596e, 0x01b79aec, 0xa89a4f83, 0x656e95e6, 0x7ee6ffaa, - 0x08cfbc21, 0xe6e815ef, 0xd99be7ba, 0xce366f4a, 0xd4099fea, - 0xd67cb029, 0xafb2a431, 0x31233f2a, 0x3094a5c6, 0xc066a235, - 0x37bc4e74, 0xa6ca82fc, 0xb0d090e0, 0x15d8a733, 0x4a9804f1, - 0xf7daec41, 0x0e50cd7f, 0x2ff69117, 0x8dd64d76, 0x4db0ef43, - 0x544daacc, 0xdf0496e4, 0xe3b5d19e, 0x1b886a4c, 0xb81f2cc1, - 0x7f516546, 0x04ea5e9d, 0x5d358c01, 0x737487fa, 0x2e410bfb, - 0x5a1d67b3, 0x52d2db92, 0x335610e9, 0x1347d66d, 0x8c61d79a, - 0x7a0ca137, 0x8e14f859, 0x893c13eb, 0xee27a9ce, 0x35c961b7, - 0xede51ce1, 0x3cb1477a, 0x59dfd29c, 0x3f73f255, 0x79ce1418, - 0xbf37c773, 0xeacdf753, 0x5baafd5f, 0x146f3ddf, 0x86db4478, - 0x81f3afca, 0x3ec468b9, 0x2c342438, 0x5f40a3c2, 0x72c31d16, - 0x0c25e2bc, 0x8b493c28, 0x41950dff, 0x7101a839, 0xdeb30c08, - 0x9ce4b4d8, 0x90c15664, 0x6184cb7b, 0x70b632d5, 0x745c6c48, - 0x4257b8d0 - }; - - private static uint Shift(uint r, int shift) - { - return (r >> shift) | (r << (32 - shift)); - } - - /* multiply four bytes in GF(2^8) by 'x' {02} in parallel */ - - private const uint m1 = 0x80808080; - private const uint m2 = 0x7f7f7f7f; - private const uint m3 = 0x0000001b; - private const uint m4 = 0xC0C0C0C0; - private const uint m5 = 0x3f3f3f3f; - - private static uint FFmulX(uint x) - { - return ((x & m2) << 1) ^ (((x & m1) >> 7) * m3); - } - - private static uint FFmulX2(uint x) - { - uint t0 = (x & m5) << 2; - uint t1 = (x & m4); - t1 ^= (t1 >> 1); - return t0 ^ (t1 >> 2) ^ (t1 >> 5); - } - - /* - The following defines provide alternative definitions of FFmulX that might - give improved performance if a fast 32-bit multiply is not available. - - private int FFmulX(int x) { int u = x & m1; u |= (u >> 1); return ((x & m2) << 1) ^ ((u >>> 3) | (u >>> 6)); } - private static final int m4 = 0x1b1b1b1b; - private int FFmulX(int x) { int u = x & m1; return ((x & m2) << 1) ^ ((u - (u >>> 7)) & m4); } - - */ - - private static uint Inv_Mcol(uint x) - { - uint t0, t1; - t0 = x; - t1 = t0 ^ Shift(t0, 8); - t0 ^= FFmulX(t1); - t1 ^= FFmulX2(t0); - t0 ^= t1 ^ Shift(t1, 16); - return t0; - } - - private static uint SubWord(uint x) - { - return (uint)S[x&255] - | (((uint)S[(x>>8)&255]) << 8) - | (((uint)S[(x>>16)&255]) << 16) - | (((uint)S[(x>>24)&255]) << 24); - } - - /** - * Calculate the necessary round keys - * The number of calculations depends on key size and block size - * AES specified a fixed block size of 128 bits and key sizes 128/192/256 bits - * This code is written assuming those are the only possible values - */ - private uint[][] GenerateWorkingKey(byte[] key, bool forEncryption) - { - int keyLen = key.Length; - if (keyLen < 16 || keyLen > 32 || (keyLen & 7) != 0) - throw new ArgumentException("Key length not 128/192/256 bits."); - - int KC = keyLen >> 2; - this.ROUNDS = KC + 6; // This is not always true for the generalized Rijndael that allows larger block sizes - - uint[][] W = new uint[ROUNDS + 1][]; // 4 words in a block - for (int i = 0; i <= ROUNDS; ++i) - { - W[i] = new uint[4]; - } - - switch (KC) - { - case 4: - { - uint t0 = Pack.LE_To_UInt32(key, 0); W[0][0] = t0; - uint t1 = Pack.LE_To_UInt32(key, 4); W[0][1] = t1; - uint t2 = Pack.LE_To_UInt32(key, 8); W[0][2] = t2; - uint t3 = Pack.LE_To_UInt32(key, 12); W[0][3] = t3; - - for (int i = 1; i <= 10; ++i) - { - uint u = SubWord(Shift(t3, 8)) ^ rcon[i - 1]; - t0 ^= u; W[i][0] = t0; - t1 ^= t0; W[i][1] = t1; - t2 ^= t1; W[i][2] = t2; - t3 ^= t2; W[i][3] = t3; - } - - break; - } - case 6: - { - uint t0 = Pack.LE_To_UInt32(key, 0); W[0][0] = t0; - uint t1 = Pack.LE_To_UInt32(key, 4); W[0][1] = t1; - uint t2 = Pack.LE_To_UInt32(key, 8); W[0][2] = t2; - uint t3 = Pack.LE_To_UInt32(key, 12); W[0][3] = t3; - uint t4 = Pack.LE_To_UInt32(key, 16); W[1][0] = t4; - uint t5 = Pack.LE_To_UInt32(key, 20); W[1][1] = t5; - - uint rcon = 1; - uint u = SubWord(Shift(t5, 8)) ^ rcon; rcon <<= 1; - t0 ^= u; W[1][2] = t0; - t1 ^= t0; W[1][3] = t1; - t2 ^= t1; W[2][0] = t2; - t3 ^= t2; W[2][1] = t3; - t4 ^= t3; W[2][2] = t4; - t5 ^= t4; W[2][3] = t5; - - for (int i = 3; i < 12; i += 3) - { - u = SubWord(Shift(t5, 8)) ^ rcon; rcon <<= 1; - t0 ^= u; W[i ][0] = t0; - t1 ^= t0; W[i ][1] = t1; - t2 ^= t1; W[i ][2] = t2; - t3 ^= t2; W[i ][3] = t3; - t4 ^= t3; W[i + 1][0] = t4; - t5 ^= t4; W[i + 1][1] = t5; - u = SubWord(Shift(t5, 8)) ^ rcon; rcon <<= 1; - t0 ^= u; W[i + 1][2] = t0; - t1 ^= t0; W[i + 1][3] = t1; - t2 ^= t1; W[i + 2][0] = t2; - t3 ^= t2; W[i + 2][1] = t3; - t4 ^= t3; W[i + 2][2] = t4; - t5 ^= t4; W[i + 2][3] = t5; - } - - u = SubWord(Shift(t5, 8)) ^ rcon; - t0 ^= u; W[12][0] = t0; - t1 ^= t0; W[12][1] = t1; - t2 ^= t1; W[12][2] = t2; - t3 ^= t2; W[12][3] = t3; - - break; - } - case 8: - { - uint t0 = Pack.LE_To_UInt32(key, 0); W[0][0] = t0; - uint t1 = Pack.LE_To_UInt32(key, 4); W[0][1] = t1; - uint t2 = Pack.LE_To_UInt32(key, 8); W[0][2] = t2; - uint t3 = Pack.LE_To_UInt32(key, 12); W[0][3] = t3; - uint t4 = Pack.LE_To_UInt32(key, 16); W[1][0] = t4; - uint t5 = Pack.LE_To_UInt32(key, 20); W[1][1] = t5; - uint t6 = Pack.LE_To_UInt32(key, 24); W[1][2] = t6; - uint t7 = Pack.LE_To_UInt32(key, 28); W[1][3] = t7; - - uint u, rcon = 1; - - for (int i = 2; i < 14; i += 2) - { - u = SubWord(Shift(t7, 8)) ^ rcon; rcon <<= 1; - t0 ^= u; W[i ][0] = t0; - t1 ^= t0; W[i ][1] = t1; - t2 ^= t1; W[i ][2] = t2; - t3 ^= t2; W[i ][3] = t3; - u = SubWord(t3); - t4 ^= u; W[i + 1][0] = t4; - t5 ^= t4; W[i + 1][1] = t5; - t6 ^= t5; W[i + 1][2] = t6; - t7 ^= t6; W[i + 1][3] = t7; - } - - u = SubWord(Shift(t7, 8)) ^ rcon; - t0 ^= u; W[14][0] = t0; - t1 ^= t0; W[14][1] = t1; - t2 ^= t1; W[14][2] = t2; - t3 ^= t2; W[14][3] = t3; - - break; - } - default: - { - throw new InvalidOperationException("Should never get here"); - } - } - - if (!forEncryption) - { - for (int j = 1; j < ROUNDS; j++) - { - uint[] w = W[j]; - for (int i = 0; i < 4; i++) - { - w[i] = Inv_Mcol(w[i]); - } - } - } - - return W; - } - - private int ROUNDS; - private uint[][] WorkingKey; - private uint C0, C1, C2, C3; - private bool forEncryption; - - private byte[] s; - - private const int BLOCK_SIZE = 16; - - /** - * default constructor - 128 bit block size. - */ - public AesEngine() - { - } - - /** - * initialise an AES cipher. - * - * @param forEncryption whether or not we are for encryption. - * @param parameters the parameters required to set up the cipher. - * @exception ArgumentException if the parameters argument is - * inappropriate. - */ - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - KeyParameter keyParameter = parameters as KeyParameter; - - if (keyParameter == null) - throw new ArgumentException("invalid parameter passed to AES init - " - + Platform.GetTypeName(parameters)); - - WorkingKey = GenerateWorkingKey(keyParameter.GetKey(), forEncryption); - - this.forEncryption = forEncryption; - this.s = Arrays.Clone(forEncryption ? S : Si); - } - - public virtual string AlgorithmName - { - get { return "AES"; } - } - - public virtual bool IsPartialBlockOkay - { - get { return false; } - } - - public virtual int GetBlockSize() - { - return BLOCK_SIZE; - } - - public virtual int ProcessBlock( - byte[] input, - int inOff, - byte[] output, - int outOff) - { - if (WorkingKey == null) - throw new InvalidOperationException("AES engine not initialised"); - - Check.DataLength(input, inOff, 16, "input buffer too short"); - Check.OutputLength(output, outOff, 16, "output buffer too short"); - - UnPackBlock(input, inOff); - - if (forEncryption) - { - EncryptBlock(WorkingKey); - } - else - { - DecryptBlock(WorkingKey); - } - - PackBlock(output, outOff); - - return BLOCK_SIZE; - } - - public virtual void Reset() - { - } - - private void UnPackBlock( - byte[] bytes, - int off) - { - C0 = Pack.LE_To_UInt32(bytes, off); - C1 = Pack.LE_To_UInt32(bytes, off + 4); - C2 = Pack.LE_To_UInt32(bytes, off + 8); - C3 = Pack.LE_To_UInt32(bytes, off + 12); - } - - private void PackBlock( - byte[] bytes, - int off) - { - Pack.UInt32_To_LE(C0, bytes, off); - Pack.UInt32_To_LE(C1, bytes, off + 4); - Pack.UInt32_To_LE(C2, bytes, off + 8); - Pack.UInt32_To_LE(C3, bytes, off + 12); - } - - private void EncryptBlock(uint[][] KW) - { - uint[] kw = KW[0]; - uint t0 = this.C0 ^ kw[0]; - uint t1 = this.C1 ^ kw[1]; - uint t2 = this.C2 ^ kw[2]; - - uint r0, r1, r2, r3 = this.C3 ^ kw[3]; - int r = 1; - while (r < ROUNDS - 1) - { - kw = KW[r++]; - r0 = T0[t0 & 255] ^ Shift(T0[(t1 >> 8) & 255], 24) ^ Shift(T0[(t2 >> 16) & 255], 16) ^ Shift(T0[(r3 >> 24) & 255], 8) ^ kw[0]; - r1 = T0[t1 & 255] ^ Shift(T0[(t2 >> 8) & 255], 24) ^ Shift(T0[(r3 >> 16) & 255], 16) ^ Shift(T0[(t0 >> 24) & 255], 8) ^ kw[1]; - r2 = T0[t2 & 255] ^ Shift(T0[(r3 >> 8) & 255], 24) ^ Shift(T0[(t0 >> 16) & 255], 16) ^ Shift(T0[(t1 >> 24) & 255], 8) ^ kw[2]; - r3 = T0[r3 & 255] ^ Shift(T0[(t0 >> 8) & 255], 24) ^ Shift(T0[(t1 >> 16) & 255], 16) ^ Shift(T0[(t2 >> 24) & 255], 8) ^ kw[3]; - kw = KW[r++]; - t0 = T0[r0 & 255] ^ Shift(T0[(r1 >> 8) & 255], 24) ^ Shift(T0[(r2 >> 16) & 255], 16) ^ Shift(T0[(r3 >> 24) & 255], 8) ^ kw[0]; - t1 = T0[r1 & 255] ^ Shift(T0[(r2 >> 8) & 255], 24) ^ Shift(T0[(r3 >> 16) & 255], 16) ^ Shift(T0[(r0 >> 24) & 255], 8) ^ kw[1]; - t2 = T0[r2 & 255] ^ Shift(T0[(r3 >> 8) & 255], 24) ^ Shift(T0[(r0 >> 16) & 255], 16) ^ Shift(T0[(r1 >> 24) & 255], 8) ^ kw[2]; - r3 = T0[r3 & 255] ^ Shift(T0[(r0 >> 8) & 255], 24) ^ Shift(T0[(r1 >> 16) & 255], 16) ^ Shift(T0[(r2 >> 24) & 255], 8) ^ kw[3]; - } - - kw = KW[r++]; - r0 = T0[t0 & 255] ^ Shift(T0[(t1 >> 8) & 255], 24) ^ Shift(T0[(t2 >> 16) & 255], 16) ^ Shift(T0[(r3 >> 24) & 255], 8) ^ kw[0]; - r1 = T0[t1 & 255] ^ Shift(T0[(t2 >> 8) & 255], 24) ^ Shift(T0[(r3 >> 16) & 255], 16) ^ Shift(T0[(t0 >> 24) & 255], 8) ^ kw[1]; - r2 = T0[t2 & 255] ^ Shift(T0[(r3 >> 8) & 255], 24) ^ Shift(T0[(t0 >> 16) & 255], 16) ^ Shift(T0[(t1 >> 24) & 255], 8) ^ kw[2]; - r3 = T0[r3 & 255] ^ Shift(T0[(t0 >> 8) & 255], 24) ^ Shift(T0[(t1 >> 16) & 255], 16) ^ Shift(T0[(t2 >> 24) & 255], 8) ^ kw[3]; - - // the final round's table is a simple function of S so we don't use a whole other four tables for it - - kw = KW[r]; - this.C0 = (uint)S[r0 & 255] ^ (((uint)S[(r1 >> 8) & 255]) << 8) ^ (((uint)s[(r2 >> 16) & 255]) << 16) ^ (((uint)s[(r3 >> 24) & 255]) << 24) ^ kw[0]; - this.C1 = (uint)s[r1 & 255] ^ (((uint)S[(r2 >> 8) & 255]) << 8) ^ (((uint)S[(r3 >> 16) & 255]) << 16) ^ (((uint)s[(r0 >> 24) & 255]) << 24) ^ kw[1]; - this.C2 = (uint)s[r2 & 255] ^ (((uint)S[(r3 >> 8) & 255]) << 8) ^ (((uint)S[(r0 >> 16) & 255]) << 16) ^ (((uint)S[(r1 >> 24) & 255]) << 24) ^ kw[2]; - this.C3 = (uint)s[r3 & 255] ^ (((uint)s[(r0 >> 8) & 255]) << 8) ^ (((uint)s[(r1 >> 16) & 255]) << 16) ^ (((uint)S[(r2 >> 24) & 255]) << 24) ^ kw[3]; - } - - private void DecryptBlock(uint[][] KW) - { - uint[] kw = KW[ROUNDS]; - uint t0 = this.C0 ^ kw[0]; - uint t1 = this.C1 ^ kw[1]; - uint t2 = this.C2 ^ kw[2]; - - uint r0, r1, r2, r3 = this.C3 ^ kw[3]; - int r = ROUNDS - 1; - while (r > 1) - { - kw = KW[r--]; - r0 = Tinv0[t0 & 255] ^ Shift(Tinv0[(r3 >> 8) & 255], 24) ^ Shift(Tinv0[(t2 >> 16) & 255], 16) ^ Shift(Tinv0[(t1 >> 24) & 255], 8) ^ kw[0]; - r1 = Tinv0[t1 & 255] ^ Shift(Tinv0[(t0 >> 8) & 255], 24) ^ Shift(Tinv0[(r3 >> 16) & 255], 16) ^ Shift(Tinv0[(t2 >> 24) & 255], 8) ^ kw[1]; - r2 = Tinv0[t2 & 255] ^ Shift(Tinv0[(t1 >> 8) & 255], 24) ^ Shift(Tinv0[(t0 >> 16) & 255], 16) ^ Shift(Tinv0[(r3 >> 24) & 255], 8) ^ kw[2]; - r3 = Tinv0[r3 & 255] ^ Shift(Tinv0[(t2 >> 8) & 255], 24) ^ Shift(Tinv0[(t1 >> 16) & 255], 16) ^ Shift(Tinv0[(t0 >> 24) & 255], 8) ^ kw[3]; - kw = KW[r--]; - t0 = Tinv0[r0 & 255] ^ Shift(Tinv0[(r3 >> 8) & 255], 24) ^ Shift(Tinv0[(r2 >> 16) & 255], 16) ^ Shift(Tinv0[(r1 >> 24) & 255], 8) ^ kw[0]; - t1 = Tinv0[r1 & 255] ^ Shift(Tinv0[(r0 >> 8) & 255], 24) ^ Shift(Tinv0[(r3 >> 16) & 255], 16) ^ Shift(Tinv0[(r2 >> 24) & 255], 8) ^ kw[1]; - t2 = Tinv0[r2 & 255] ^ Shift(Tinv0[(r1 >> 8) & 255], 24) ^ Shift(Tinv0[(r0 >> 16) & 255], 16) ^ Shift(Tinv0[(r3 >> 24) & 255], 8) ^ kw[2]; - r3 = Tinv0[r3 & 255] ^ Shift(Tinv0[(r2 >> 8) & 255], 24) ^ Shift(Tinv0[(r1 >> 16) & 255], 16) ^ Shift(Tinv0[(r0 >> 24) & 255], 8) ^ kw[3]; - } - - kw = KW[1]; - r0 = Tinv0[t0 & 255] ^ Shift(Tinv0[(r3 >> 8) & 255], 24) ^ Shift(Tinv0[(t2 >> 16) & 255], 16) ^ Shift(Tinv0[(t1 >> 24) & 255], 8) ^ kw[0]; - r1 = Tinv0[t1 & 255] ^ Shift(Tinv0[(t0 >> 8) & 255], 24) ^ Shift(Tinv0[(r3 >> 16) & 255], 16) ^ Shift(Tinv0[(t2 >> 24) & 255], 8) ^ kw[1]; - r2 = Tinv0[t2 & 255] ^ Shift(Tinv0[(t1 >> 8) & 255], 24) ^ Shift(Tinv0[(t0 >> 16) & 255], 16) ^ Shift(Tinv0[(r3 >> 24) & 255], 8) ^ kw[2]; - r3 = Tinv0[r3 & 255] ^ Shift(Tinv0[(t2 >> 8) & 255], 24) ^ Shift(Tinv0[(t1 >> 16) & 255], 16) ^ Shift(Tinv0[(t0 >> 24) & 255], 8) ^ kw[3]; - - // the final round's table is a simple function of Si so we don't use a whole other four tables for it - - kw = KW[0]; - this.C0 = (uint)Si[r0 & 255] ^ (((uint)s[(r3 >> 8) & 255]) << 8) ^ (((uint)s[(r2 >> 16) & 255]) << 16) ^ (((uint)Si[(r1 >> 24) & 255]) << 24) ^ kw[0]; - this.C1 = (uint)s[r1 & 255] ^ (((uint)s[(r0 >> 8) & 255]) << 8) ^ (((uint)Si[(r3 >> 16) & 255]) << 16) ^ (((uint)s[(r2 >> 24) & 255]) << 24) ^ kw[1]; - this.C2 = (uint)s[r2 & 255] ^ (((uint)Si[(r1 >> 8) & 255]) << 8) ^ (((uint)Si[(r0 >> 16) & 255]) << 16) ^ (((uint)s[(r3 >> 24) & 255]) << 24) ^ kw[2]; - this.C3 = (uint)Si[r3 & 255] ^ (((uint)s[(r2 >> 8) & 255]) << 8) ^ (((uint)s[(r1 >> 16) & 255]) << 16) ^ (((uint)s[(r0 >> 24) & 255]) << 24) ^ kw[3]; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/AesFastEngine.cs b/bc-sharp-crypto/src/crypto/engines/AesFastEngine.cs deleted file mode 100644 index 9d3a86f..0000000 --- a/bc-sharp-crypto/src/crypto/engines/AesFastEngine.cs +++ /dev/null @@ -1,948 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * an implementation of the AES (Rijndael)), from FIPS-197. - *

- * For further details see: http://csrc.nist.gov/encryption/aes/. - * - * This implementation is based on optimizations from Dr. Brian Gladman's paper and C code at - * http://fp.gladman.plus.com/cryptography_technology/rijndael/ - * - * There are three levels of tradeoff of speed vs memory - * Because java has no preprocessor), they are written as three separate classes from which to choose - * - * The fastest uses 8Kbytes of static tables to precompute round calculations), 4 256 word tables for encryption - * and 4 for decryption. - * - * The middle performance version uses only one 256 word table for each), for a total of 2Kbytes), - * adding 12 rotate operations per round to compute the values contained in the other tables from - * the contents of the first - * - * The slowest version uses no static tables at all and computes the values in each round - *

- *

- * This file contains the fast version with 8Kbytes of static tables for round precomputation - *

- */ - /// - /// Unfortunately this class has a few side channel issues. - /// In an environment where encryption/decryption may be closely observed it should not be used. - /// - [Obsolete("Use AesEngine instead")] - public class AesFastEngine - : IBlockCipher - { - // The S box - private static readonly byte[] S = - { - 99, 124, 119, 123, 242, 107, 111, 197, - 48, 1, 103, 43, 254, 215, 171, 118, - 202, 130, 201, 125, 250, 89, 71, 240, - 173, 212, 162, 175, 156, 164, 114, 192, - 183, 253, 147, 38, 54, 63, 247, 204, - 52, 165, 229, 241, 113, 216, 49, 21, - 4, 199, 35, 195, 24, 150, 5, 154, - 7, 18, 128, 226, 235, 39, 178, 117, - 9, 131, 44, 26, 27, 110, 90, 160, - 82, 59, 214, 179, 41, 227, 47, 132, - 83, 209, 0, 237, 32, 252, 177, 91, - 106, 203, 190, 57, 74, 76, 88, 207, - 208, 239, 170, 251, 67, 77, 51, 133, - 69, 249, 2, 127, 80, 60, 159, 168, - 81, 163, 64, 143, 146, 157, 56, 245, - 188, 182, 218, 33, 16, 255, 243, 210, - 205, 12, 19, 236, 95, 151, 68, 23, - 196, 167, 126, 61, 100, 93, 25, 115, - 96, 129, 79, 220, 34, 42, 144, 136, - 70, 238, 184, 20, 222, 94, 11, 219, - 224, 50, 58, 10, 73, 6, 36, 92, - 194, 211, 172, 98, 145, 149, 228, 121, - 231, 200, 55, 109, 141, 213, 78, 169, - 108, 86, 244, 234, 101, 122, 174, 8, - 186, 120, 37, 46, 28, 166, 180, 198, - 232, 221, 116, 31, 75, 189, 139, 138, - 112, 62, 181, 102, 72, 3, 246, 14, - 97, 53, 87, 185, 134, 193, 29, 158, - 225, 248, 152, 17, 105, 217, 142, 148, - 155, 30, 135, 233, 206, 85, 40, 223, - 140, 161, 137, 13, 191, 230, 66, 104, - 65, 153, 45, 15, 176, 84, 187, 22, - }; - - // The inverse S-box - private static readonly byte[] Si = - { - 82, 9, 106, 213, 48, 54, 165, 56, - 191, 64, 163, 158, 129, 243, 215, 251, - 124, 227, 57, 130, 155, 47, 255, 135, - 52, 142, 67, 68, 196, 222, 233, 203, - 84, 123, 148, 50, 166, 194, 35, 61, - 238, 76, 149, 11, 66, 250, 195, 78, - 8, 46, 161, 102, 40, 217, 36, 178, - 118, 91, 162, 73, 109, 139, 209, 37, - 114, 248, 246, 100, 134, 104, 152, 22, - 212, 164, 92, 204, 93, 101, 182, 146, - 108, 112, 72, 80, 253, 237, 185, 218, - 94, 21, 70, 87, 167, 141, 157, 132, - 144, 216, 171, 0, 140, 188, 211, 10, - 247, 228, 88, 5, 184, 179, 69, 6, - 208, 44, 30, 143, 202, 63, 15, 2, - 193, 175, 189, 3, 1, 19, 138, 107, - 58, 145, 17, 65, 79, 103, 220, 234, - 151, 242, 207, 206, 240, 180, 230, 115, - 150, 172, 116, 34, 231, 173, 53, 133, - 226, 249, 55, 232, 28, 117, 223, 110, - 71, 241, 26, 113, 29, 41, 197, 137, - 111, 183, 98, 14, 170, 24, 190, 27, - 252, 86, 62, 75, 198, 210, 121, 32, - 154, 219, 192, 254, 120, 205, 90, 244, - 31, 221, 168, 51, 136, 7, 199, 49, - 177, 18, 16, 89, 39, 128, 236, 95, - 96, 81, 127, 169, 25, 181, 74, 13, - 45, 229, 122, 159, 147, 201, 156, 239, - 160, 224, 59, 77, 174, 42, 245, 176, - 200, 235, 187, 60, 131, 83, 153, 97, - 23, 43, 4, 126, 186, 119, 214, 38, - 225, 105, 20, 99, 85, 33, 12, 125, - }; - - // vector used in calculating key schedule (powers of x in GF(256)) - private static readonly byte[] rcon = - { - 0x01, 0x02, 0x04, 0x08, 0x10, 0x20, 0x40, 0x80, 0x1b, 0x36, 0x6c, 0xd8, 0xab, 0x4d, 0x9a, - 0x2f, 0x5e, 0xbc, 0x63, 0xc6, 0x97, 0x35, 0x6a, 0xd4, 0xb3, 0x7d, 0xfa, 0xef, 0xc5, 0x91 - }; - - // precomputation tables of calculations for rounds - private static readonly uint[] T0 = - { - 0xa56363c6, 0x847c7cf8, 0x997777ee, 0x8d7b7bf6, 0x0df2f2ff, - 0xbd6b6bd6, 0xb16f6fde, 0x54c5c591, 0x50303060, 0x03010102, - 0xa96767ce, 0x7d2b2b56, 0x19fefee7, 0x62d7d7b5, 0xe6abab4d, - 0x9a7676ec, 0x45caca8f, 0x9d82821f, 0x40c9c989, 0x877d7dfa, - 0x15fafaef, 0xeb5959b2, 0xc947478e, 0x0bf0f0fb, 0xecadad41, - 0x67d4d4b3, 0xfda2a25f, 0xeaafaf45, 0xbf9c9c23, 0xf7a4a453, - 0x967272e4, 0x5bc0c09b, 0xc2b7b775, 0x1cfdfde1, 0xae93933d, - 0x6a26264c, 0x5a36366c, 0x413f3f7e, 0x02f7f7f5, 0x4fcccc83, - 0x5c343468, 0xf4a5a551, 0x34e5e5d1, 0x08f1f1f9, 0x937171e2, - 0x73d8d8ab, 0x53313162, 0x3f15152a, 0x0c040408, 0x52c7c795, - 0x65232346, 0x5ec3c39d, 0x28181830, 0xa1969637, 0x0f05050a, - 0xb59a9a2f, 0x0907070e, 0x36121224, 0x9b80801b, 0x3de2e2df, - 0x26ebebcd, 0x6927274e, 0xcdb2b27f, 0x9f7575ea, 0x1b090912, - 0x9e83831d, 0x742c2c58, 0x2e1a1a34, 0x2d1b1b36, 0xb26e6edc, - 0xee5a5ab4, 0xfba0a05b, 0xf65252a4, 0x4d3b3b76, 0x61d6d6b7, - 0xceb3b37d, 0x7b292952, 0x3ee3e3dd, 0x712f2f5e, 0x97848413, - 0xf55353a6, 0x68d1d1b9, 0x00000000, 0x2cededc1, 0x60202040, - 0x1ffcfce3, 0xc8b1b179, 0xed5b5bb6, 0xbe6a6ad4, 0x46cbcb8d, - 0xd9bebe67, 0x4b393972, 0xde4a4a94, 0xd44c4c98, 0xe85858b0, - 0x4acfcf85, 0x6bd0d0bb, 0x2aefefc5, 0xe5aaaa4f, 0x16fbfbed, - 0xc5434386, 0xd74d4d9a, 0x55333366, 0x94858511, 0xcf45458a, - 0x10f9f9e9, 0x06020204, 0x817f7ffe, 0xf05050a0, 0x443c3c78, - 0xba9f9f25, 0xe3a8a84b, 0xf35151a2, 0xfea3a35d, 0xc0404080, - 0x8a8f8f05, 0xad92923f, 0xbc9d9d21, 0x48383870, 0x04f5f5f1, - 0xdfbcbc63, 0xc1b6b677, 0x75dadaaf, 0x63212142, 0x30101020, - 0x1affffe5, 0x0ef3f3fd, 0x6dd2d2bf, 0x4ccdcd81, 0x140c0c18, - 0x35131326, 0x2fececc3, 0xe15f5fbe, 0xa2979735, 0xcc444488, - 0x3917172e, 0x57c4c493, 0xf2a7a755, 0x827e7efc, 0x473d3d7a, - 0xac6464c8, 0xe75d5dba, 0x2b191932, 0x957373e6, 0xa06060c0, - 0x98818119, 0xd14f4f9e, 0x7fdcdca3, 0x66222244, 0x7e2a2a54, - 0xab90903b, 0x8388880b, 0xca46468c, 0x29eeeec7, 0xd3b8b86b, - 0x3c141428, 0x79dedea7, 0xe25e5ebc, 0x1d0b0b16, 0x76dbdbad, - 0x3be0e0db, 0x56323264, 0x4e3a3a74, 0x1e0a0a14, 0xdb494992, - 0x0a06060c, 0x6c242448, 0xe45c5cb8, 0x5dc2c29f, 0x6ed3d3bd, - 0xefacac43, 0xa66262c4, 0xa8919139, 0xa4959531, 0x37e4e4d3, - 0x8b7979f2, 0x32e7e7d5, 0x43c8c88b, 0x5937376e, 0xb76d6dda, - 0x8c8d8d01, 0x64d5d5b1, 0xd24e4e9c, 0xe0a9a949, 0xb46c6cd8, - 0xfa5656ac, 0x07f4f4f3, 0x25eaeacf, 0xaf6565ca, 0x8e7a7af4, - 0xe9aeae47, 0x18080810, 0xd5baba6f, 0x887878f0, 0x6f25254a, - 0x722e2e5c, 0x241c1c38, 0xf1a6a657, 0xc7b4b473, 0x51c6c697, - 0x23e8e8cb, 0x7cdddda1, 0x9c7474e8, 0x211f1f3e, 0xdd4b4b96, - 0xdcbdbd61, 0x868b8b0d, 0x858a8a0f, 0x907070e0, 0x423e3e7c, - 0xc4b5b571, 0xaa6666cc, 0xd8484890, 0x05030306, 0x01f6f6f7, - 0x120e0e1c, 0xa36161c2, 0x5f35356a, 0xf95757ae, 0xd0b9b969, - 0x91868617, 0x58c1c199, 0x271d1d3a, 0xb99e9e27, 0x38e1e1d9, - 0x13f8f8eb, 0xb398982b, 0x33111122, 0xbb6969d2, 0x70d9d9a9, - 0x898e8e07, 0xa7949433, 0xb69b9b2d, 0x221e1e3c, 0x92878715, - 0x20e9e9c9, 0x49cece87, 0xff5555aa, 0x78282850, 0x7adfdfa5, - 0x8f8c8c03, 0xf8a1a159, 0x80898909, 0x170d0d1a, 0xdabfbf65, - 0x31e6e6d7, 0xc6424284, 0xb86868d0, 0xc3414182, 0xb0999929, - 0x772d2d5a, 0x110f0f1e, 0xcbb0b07b, 0xfc5454a8, 0xd6bbbb6d, - 0x3a16162c - }; - - private static readonly uint[] T1 = - { - 0x6363c6a5, 0x7c7cf884, 0x7777ee99, 0x7b7bf68d, 0xf2f2ff0d, - 0x6b6bd6bd, 0x6f6fdeb1, 0xc5c59154, 0x30306050, 0x01010203, - 0x6767cea9, 0x2b2b567d, 0xfefee719, 0xd7d7b562, 0xabab4de6, - 0x7676ec9a, 0xcaca8f45, 0x82821f9d, 0xc9c98940, 0x7d7dfa87, - 0xfafaef15, 0x5959b2eb, 0x47478ec9, 0xf0f0fb0b, 0xadad41ec, - 0xd4d4b367, 0xa2a25ffd, 0xafaf45ea, 0x9c9c23bf, 0xa4a453f7, - 0x7272e496, 0xc0c09b5b, 0xb7b775c2, 0xfdfde11c, 0x93933dae, - 0x26264c6a, 0x36366c5a, 0x3f3f7e41, 0xf7f7f502, 0xcccc834f, - 0x3434685c, 0xa5a551f4, 0xe5e5d134, 0xf1f1f908, 0x7171e293, - 0xd8d8ab73, 0x31316253, 0x15152a3f, 0x0404080c, 0xc7c79552, - 0x23234665, 0xc3c39d5e, 0x18183028, 0x969637a1, 0x05050a0f, - 0x9a9a2fb5, 0x07070e09, 0x12122436, 0x80801b9b, 0xe2e2df3d, - 0xebebcd26, 0x27274e69, 0xb2b27fcd, 0x7575ea9f, 0x0909121b, - 0x83831d9e, 0x2c2c5874, 0x1a1a342e, 0x1b1b362d, 0x6e6edcb2, - 0x5a5ab4ee, 0xa0a05bfb, 0x5252a4f6, 0x3b3b764d, 0xd6d6b761, - 0xb3b37dce, 0x2929527b, 0xe3e3dd3e, 0x2f2f5e71, 0x84841397, - 0x5353a6f5, 0xd1d1b968, 0x00000000, 0xededc12c, 0x20204060, - 0xfcfce31f, 0xb1b179c8, 0x5b5bb6ed, 0x6a6ad4be, 0xcbcb8d46, - 0xbebe67d9, 0x3939724b, 0x4a4a94de, 0x4c4c98d4, 0x5858b0e8, - 0xcfcf854a, 0xd0d0bb6b, 0xefefc52a, 0xaaaa4fe5, 0xfbfbed16, - 0x434386c5, 0x4d4d9ad7, 0x33336655, 0x85851194, 0x45458acf, - 0xf9f9e910, 0x02020406, 0x7f7ffe81, 0x5050a0f0, 0x3c3c7844, - 0x9f9f25ba, 0xa8a84be3, 0x5151a2f3, 0xa3a35dfe, 0x404080c0, - 0x8f8f058a, 0x92923fad, 0x9d9d21bc, 0x38387048, 0xf5f5f104, - 0xbcbc63df, 0xb6b677c1, 0xdadaaf75, 0x21214263, 0x10102030, - 0xffffe51a, 0xf3f3fd0e, 0xd2d2bf6d, 0xcdcd814c, 0x0c0c1814, - 0x13132635, 0xececc32f, 0x5f5fbee1, 0x979735a2, 0x444488cc, - 0x17172e39, 0xc4c49357, 0xa7a755f2, 0x7e7efc82, 0x3d3d7a47, - 0x6464c8ac, 0x5d5dbae7, 0x1919322b, 0x7373e695, 0x6060c0a0, - 0x81811998, 0x4f4f9ed1, 0xdcdca37f, 0x22224466, 0x2a2a547e, - 0x90903bab, 0x88880b83, 0x46468cca, 0xeeeec729, 0xb8b86bd3, - 0x1414283c, 0xdedea779, 0x5e5ebce2, 0x0b0b161d, 0xdbdbad76, - 0xe0e0db3b, 0x32326456, 0x3a3a744e, 0x0a0a141e, 0x494992db, - 0x06060c0a, 0x2424486c, 0x5c5cb8e4, 0xc2c29f5d, 0xd3d3bd6e, - 0xacac43ef, 0x6262c4a6, 0x919139a8, 0x959531a4, 0xe4e4d337, - 0x7979f28b, 0xe7e7d532, 0xc8c88b43, 0x37376e59, 0x6d6ddab7, - 0x8d8d018c, 0xd5d5b164, 0x4e4e9cd2, 0xa9a949e0, 0x6c6cd8b4, - 0x5656acfa, 0xf4f4f307, 0xeaeacf25, 0x6565caaf, 0x7a7af48e, - 0xaeae47e9, 0x08081018, 0xbaba6fd5, 0x7878f088, 0x25254a6f, - 0x2e2e5c72, 0x1c1c3824, 0xa6a657f1, 0xb4b473c7, 0xc6c69751, - 0xe8e8cb23, 0xdddda17c, 0x7474e89c, 0x1f1f3e21, 0x4b4b96dd, - 0xbdbd61dc, 0x8b8b0d86, 0x8a8a0f85, 0x7070e090, 0x3e3e7c42, - 0xb5b571c4, 0x6666ccaa, 0x484890d8, 0x03030605, 0xf6f6f701, - 0x0e0e1c12, 0x6161c2a3, 0x35356a5f, 0x5757aef9, 0xb9b969d0, - 0x86861791, 0xc1c19958, 0x1d1d3a27, 0x9e9e27b9, 0xe1e1d938, - 0xf8f8eb13, 0x98982bb3, 0x11112233, 0x6969d2bb, 0xd9d9a970, - 0x8e8e0789, 0x949433a7, 0x9b9b2db6, 0x1e1e3c22, 0x87871592, - 0xe9e9c920, 0xcece8749, 0x5555aaff, 0x28285078, 0xdfdfa57a, - 0x8c8c038f, 0xa1a159f8, 0x89890980, 0x0d0d1a17, 0xbfbf65da, - 0xe6e6d731, 0x424284c6, 0x6868d0b8, 0x414182c3, 0x999929b0, - 0x2d2d5a77, 0x0f0f1e11, 0xb0b07bcb, 0x5454a8fc, 0xbbbb6dd6, - 0x16162c3a - }; - - private static readonly uint[] T2 = - { - 0x63c6a563, 0x7cf8847c, 0x77ee9977, 0x7bf68d7b, 0xf2ff0df2, - 0x6bd6bd6b, 0x6fdeb16f, 0xc59154c5, 0x30605030, 0x01020301, - 0x67cea967, 0x2b567d2b, 0xfee719fe, 0xd7b562d7, 0xab4de6ab, - 0x76ec9a76, 0xca8f45ca, 0x821f9d82, 0xc98940c9, 0x7dfa877d, - 0xfaef15fa, 0x59b2eb59, 0x478ec947, 0xf0fb0bf0, 0xad41ecad, - 0xd4b367d4, 0xa25ffda2, 0xaf45eaaf, 0x9c23bf9c, 0xa453f7a4, - 0x72e49672, 0xc09b5bc0, 0xb775c2b7, 0xfde11cfd, 0x933dae93, - 0x264c6a26, 0x366c5a36, 0x3f7e413f, 0xf7f502f7, 0xcc834fcc, - 0x34685c34, 0xa551f4a5, 0xe5d134e5, 0xf1f908f1, 0x71e29371, - 0xd8ab73d8, 0x31625331, 0x152a3f15, 0x04080c04, 0xc79552c7, - 0x23466523, 0xc39d5ec3, 0x18302818, 0x9637a196, 0x050a0f05, - 0x9a2fb59a, 0x070e0907, 0x12243612, 0x801b9b80, 0xe2df3de2, - 0xebcd26eb, 0x274e6927, 0xb27fcdb2, 0x75ea9f75, 0x09121b09, - 0x831d9e83, 0x2c58742c, 0x1a342e1a, 0x1b362d1b, 0x6edcb26e, - 0x5ab4ee5a, 0xa05bfba0, 0x52a4f652, 0x3b764d3b, 0xd6b761d6, - 0xb37dceb3, 0x29527b29, 0xe3dd3ee3, 0x2f5e712f, 0x84139784, - 0x53a6f553, 0xd1b968d1, 0x00000000, 0xedc12ced, 0x20406020, - 0xfce31ffc, 0xb179c8b1, 0x5bb6ed5b, 0x6ad4be6a, 0xcb8d46cb, - 0xbe67d9be, 0x39724b39, 0x4a94de4a, 0x4c98d44c, 0x58b0e858, - 0xcf854acf, 0xd0bb6bd0, 0xefc52aef, 0xaa4fe5aa, 0xfbed16fb, - 0x4386c543, 0x4d9ad74d, 0x33665533, 0x85119485, 0x458acf45, - 0xf9e910f9, 0x02040602, 0x7ffe817f, 0x50a0f050, 0x3c78443c, - 0x9f25ba9f, 0xa84be3a8, 0x51a2f351, 0xa35dfea3, 0x4080c040, - 0x8f058a8f, 0x923fad92, 0x9d21bc9d, 0x38704838, 0xf5f104f5, - 0xbc63dfbc, 0xb677c1b6, 0xdaaf75da, 0x21426321, 0x10203010, - 0xffe51aff, 0xf3fd0ef3, 0xd2bf6dd2, 0xcd814ccd, 0x0c18140c, - 0x13263513, 0xecc32fec, 0x5fbee15f, 0x9735a297, 0x4488cc44, - 0x172e3917, 0xc49357c4, 0xa755f2a7, 0x7efc827e, 0x3d7a473d, - 0x64c8ac64, 0x5dbae75d, 0x19322b19, 0x73e69573, 0x60c0a060, - 0x81199881, 0x4f9ed14f, 0xdca37fdc, 0x22446622, 0x2a547e2a, - 0x903bab90, 0x880b8388, 0x468cca46, 0xeec729ee, 0xb86bd3b8, - 0x14283c14, 0xdea779de, 0x5ebce25e, 0x0b161d0b, 0xdbad76db, - 0xe0db3be0, 0x32645632, 0x3a744e3a, 0x0a141e0a, 0x4992db49, - 0x060c0a06, 0x24486c24, 0x5cb8e45c, 0xc29f5dc2, 0xd3bd6ed3, - 0xac43efac, 0x62c4a662, 0x9139a891, 0x9531a495, 0xe4d337e4, - 0x79f28b79, 0xe7d532e7, 0xc88b43c8, 0x376e5937, 0x6ddab76d, - 0x8d018c8d, 0xd5b164d5, 0x4e9cd24e, 0xa949e0a9, 0x6cd8b46c, - 0x56acfa56, 0xf4f307f4, 0xeacf25ea, 0x65caaf65, 0x7af48e7a, - 0xae47e9ae, 0x08101808, 0xba6fd5ba, 0x78f08878, 0x254a6f25, - 0x2e5c722e, 0x1c38241c, 0xa657f1a6, 0xb473c7b4, 0xc69751c6, - 0xe8cb23e8, 0xdda17cdd, 0x74e89c74, 0x1f3e211f, 0x4b96dd4b, - 0xbd61dcbd, 0x8b0d868b, 0x8a0f858a, 0x70e09070, 0x3e7c423e, - 0xb571c4b5, 0x66ccaa66, 0x4890d848, 0x03060503, 0xf6f701f6, - 0x0e1c120e, 0x61c2a361, 0x356a5f35, 0x57aef957, 0xb969d0b9, - 0x86179186, 0xc19958c1, 0x1d3a271d, 0x9e27b99e, 0xe1d938e1, - 0xf8eb13f8, 0x982bb398, 0x11223311, 0x69d2bb69, 0xd9a970d9, - 0x8e07898e, 0x9433a794, 0x9b2db69b, 0x1e3c221e, 0x87159287, - 0xe9c920e9, 0xce8749ce, 0x55aaff55, 0x28507828, 0xdfa57adf, - 0x8c038f8c, 0xa159f8a1, 0x89098089, 0x0d1a170d, 0xbf65dabf, - 0xe6d731e6, 0x4284c642, 0x68d0b868, 0x4182c341, 0x9929b099, - 0x2d5a772d, 0x0f1e110f, 0xb07bcbb0, 0x54a8fc54, 0xbb6dd6bb, - 0x162c3a16 - }; - - private static readonly uint[] T3 = - { - 0xc6a56363, 0xf8847c7c, 0xee997777, 0xf68d7b7b, 0xff0df2f2, - 0xd6bd6b6b, 0xdeb16f6f, 0x9154c5c5, 0x60503030, 0x02030101, - 0xcea96767, 0x567d2b2b, 0xe719fefe, 0xb562d7d7, 0x4de6abab, - 0xec9a7676, 0x8f45caca, 0x1f9d8282, 0x8940c9c9, 0xfa877d7d, - 0xef15fafa, 0xb2eb5959, 0x8ec94747, 0xfb0bf0f0, 0x41ecadad, - 0xb367d4d4, 0x5ffda2a2, 0x45eaafaf, 0x23bf9c9c, 0x53f7a4a4, - 0xe4967272, 0x9b5bc0c0, 0x75c2b7b7, 0xe11cfdfd, 0x3dae9393, - 0x4c6a2626, 0x6c5a3636, 0x7e413f3f, 0xf502f7f7, 0x834fcccc, - 0x685c3434, 0x51f4a5a5, 0xd134e5e5, 0xf908f1f1, 0xe2937171, - 0xab73d8d8, 0x62533131, 0x2a3f1515, 0x080c0404, 0x9552c7c7, - 0x46652323, 0x9d5ec3c3, 0x30281818, 0x37a19696, 0x0a0f0505, - 0x2fb59a9a, 0x0e090707, 0x24361212, 0x1b9b8080, 0xdf3de2e2, - 0xcd26ebeb, 0x4e692727, 0x7fcdb2b2, 0xea9f7575, 0x121b0909, - 0x1d9e8383, 0x58742c2c, 0x342e1a1a, 0x362d1b1b, 0xdcb26e6e, - 0xb4ee5a5a, 0x5bfba0a0, 0xa4f65252, 0x764d3b3b, 0xb761d6d6, - 0x7dceb3b3, 0x527b2929, 0xdd3ee3e3, 0x5e712f2f, 0x13978484, - 0xa6f55353, 0xb968d1d1, 0x00000000, 0xc12ceded, 0x40602020, - 0xe31ffcfc, 0x79c8b1b1, 0xb6ed5b5b, 0xd4be6a6a, 0x8d46cbcb, - 0x67d9bebe, 0x724b3939, 0x94de4a4a, 0x98d44c4c, 0xb0e85858, - 0x854acfcf, 0xbb6bd0d0, 0xc52aefef, 0x4fe5aaaa, 0xed16fbfb, - 0x86c54343, 0x9ad74d4d, 0x66553333, 0x11948585, 0x8acf4545, - 0xe910f9f9, 0x04060202, 0xfe817f7f, 0xa0f05050, 0x78443c3c, - 0x25ba9f9f, 0x4be3a8a8, 0xa2f35151, 0x5dfea3a3, 0x80c04040, - 0x058a8f8f, 0x3fad9292, 0x21bc9d9d, 0x70483838, 0xf104f5f5, - 0x63dfbcbc, 0x77c1b6b6, 0xaf75dada, 0x42632121, 0x20301010, - 0xe51affff, 0xfd0ef3f3, 0xbf6dd2d2, 0x814ccdcd, 0x18140c0c, - 0x26351313, 0xc32fecec, 0xbee15f5f, 0x35a29797, 0x88cc4444, - 0x2e391717, 0x9357c4c4, 0x55f2a7a7, 0xfc827e7e, 0x7a473d3d, - 0xc8ac6464, 0xbae75d5d, 0x322b1919, 0xe6957373, 0xc0a06060, - 0x19988181, 0x9ed14f4f, 0xa37fdcdc, 0x44662222, 0x547e2a2a, - 0x3bab9090, 0x0b838888, 0x8cca4646, 0xc729eeee, 0x6bd3b8b8, - 0x283c1414, 0xa779dede, 0xbce25e5e, 0x161d0b0b, 0xad76dbdb, - 0xdb3be0e0, 0x64563232, 0x744e3a3a, 0x141e0a0a, 0x92db4949, - 0x0c0a0606, 0x486c2424, 0xb8e45c5c, 0x9f5dc2c2, 0xbd6ed3d3, - 0x43efacac, 0xc4a66262, 0x39a89191, 0x31a49595, 0xd337e4e4, - 0xf28b7979, 0xd532e7e7, 0x8b43c8c8, 0x6e593737, 0xdab76d6d, - 0x018c8d8d, 0xb164d5d5, 0x9cd24e4e, 0x49e0a9a9, 0xd8b46c6c, - 0xacfa5656, 0xf307f4f4, 0xcf25eaea, 0xcaaf6565, 0xf48e7a7a, - 0x47e9aeae, 0x10180808, 0x6fd5baba, 0xf0887878, 0x4a6f2525, - 0x5c722e2e, 0x38241c1c, 0x57f1a6a6, 0x73c7b4b4, 0x9751c6c6, - 0xcb23e8e8, 0xa17cdddd, 0xe89c7474, 0x3e211f1f, 0x96dd4b4b, - 0x61dcbdbd, 0x0d868b8b, 0x0f858a8a, 0xe0907070, 0x7c423e3e, - 0x71c4b5b5, 0xccaa6666, 0x90d84848, 0x06050303, 0xf701f6f6, - 0x1c120e0e, 0xc2a36161, 0x6a5f3535, 0xaef95757, 0x69d0b9b9, - 0x17918686, 0x9958c1c1, 0x3a271d1d, 0x27b99e9e, 0xd938e1e1, - 0xeb13f8f8, 0x2bb39898, 0x22331111, 0xd2bb6969, 0xa970d9d9, - 0x07898e8e, 0x33a79494, 0x2db69b9b, 0x3c221e1e, 0x15928787, - 0xc920e9e9, 0x8749cece, 0xaaff5555, 0x50782828, 0xa57adfdf, - 0x038f8c8c, 0x59f8a1a1, 0x09808989, 0x1a170d0d, 0x65dabfbf, - 0xd731e6e6, 0x84c64242, 0xd0b86868, 0x82c34141, 0x29b09999, - 0x5a772d2d, 0x1e110f0f, 0x7bcbb0b0, 0xa8fc5454, 0x6dd6bbbb, - 0x2c3a1616 - }; - - private static readonly uint[] Tinv0 = - { - 0x50a7f451, 0x5365417e, 0xc3a4171a, 0x965e273a, 0xcb6bab3b, - 0xf1459d1f, 0xab58faac, 0x9303e34b, 0x55fa3020, 0xf66d76ad, - 0x9176cc88, 0x254c02f5, 0xfcd7e54f, 0xd7cb2ac5, 0x80443526, - 0x8fa362b5, 0x495ab1de, 0x671bba25, 0x980eea45, 0xe1c0fe5d, - 0x02752fc3, 0x12f04c81, 0xa397468d, 0xc6f9d36b, 0xe75f8f03, - 0x959c9215, 0xeb7a6dbf, 0xda595295, 0x2d83bed4, 0xd3217458, - 0x2969e049, 0x44c8c98e, 0x6a89c275, 0x78798ef4, 0x6b3e5899, - 0xdd71b927, 0xb64fe1be, 0x17ad88f0, 0x66ac20c9, 0xb43ace7d, - 0x184adf63, 0x82311ae5, 0x60335197, 0x457f5362, 0xe07764b1, - 0x84ae6bbb, 0x1ca081fe, 0x942b08f9, 0x58684870, 0x19fd458f, - 0x876cde94, 0xb7f87b52, 0x23d373ab, 0xe2024b72, 0x578f1fe3, - 0x2aab5566, 0x0728ebb2, 0x03c2b52f, 0x9a7bc586, 0xa50837d3, - 0xf2872830, 0xb2a5bf23, 0xba6a0302, 0x5c8216ed, 0x2b1ccf8a, - 0x92b479a7, 0xf0f207f3, 0xa1e2694e, 0xcdf4da65, 0xd5be0506, - 0x1f6234d1, 0x8afea6c4, 0x9d532e34, 0xa055f3a2, 0x32e18a05, - 0x75ebf6a4, 0x39ec830b, 0xaaef6040, 0x069f715e, 0x51106ebd, - 0xf98a213e, 0x3d06dd96, 0xae053edd, 0x46bde64d, 0xb58d5491, - 0x055dc471, 0x6fd40604, 0xff155060, 0x24fb9819, 0x97e9bdd6, - 0xcc434089, 0x779ed967, 0xbd42e8b0, 0x888b8907, 0x385b19e7, - 0xdbeec879, 0x470a7ca1, 0xe90f427c, 0xc91e84f8, 0x00000000, - 0x83868009, 0x48ed2b32, 0xac70111e, 0x4e725a6c, 0xfbff0efd, - 0x5638850f, 0x1ed5ae3d, 0x27392d36, 0x64d90f0a, 0x21a65c68, - 0xd1545b9b, 0x3a2e3624, 0xb1670a0c, 0x0fe75793, 0xd296eeb4, - 0x9e919b1b, 0x4fc5c080, 0xa220dc61, 0x694b775a, 0x161a121c, - 0x0aba93e2, 0xe52aa0c0, 0x43e0223c, 0x1d171b12, 0x0b0d090e, - 0xadc78bf2, 0xb9a8b62d, 0xc8a91e14, 0x8519f157, 0x4c0775af, - 0xbbdd99ee, 0xfd607fa3, 0x9f2601f7, 0xbcf5725c, 0xc53b6644, - 0x347efb5b, 0x7629438b, 0xdcc623cb, 0x68fcedb6, 0x63f1e4b8, - 0xcadc31d7, 0x10856342, 0x40229713, 0x2011c684, 0x7d244a85, - 0xf83dbbd2, 0x1132f9ae, 0x6da129c7, 0x4b2f9e1d, 0xf330b2dc, - 0xec52860d, 0xd0e3c177, 0x6c16b32b, 0x99b970a9, 0xfa489411, - 0x2264e947, 0xc48cfca8, 0x1a3ff0a0, 0xd82c7d56, 0xef903322, - 0xc74e4987, 0xc1d138d9, 0xfea2ca8c, 0x360bd498, 0xcf81f5a6, - 0x28de7aa5, 0x268eb7da, 0xa4bfad3f, 0xe49d3a2c, 0x0d927850, - 0x9bcc5f6a, 0x62467e54, 0xc2138df6, 0xe8b8d890, 0x5ef7392e, - 0xf5afc382, 0xbe805d9f, 0x7c93d069, 0xa92dd56f, 0xb31225cf, - 0x3b99acc8, 0xa77d1810, 0x6e639ce8, 0x7bbb3bdb, 0x097826cd, - 0xf418596e, 0x01b79aec, 0xa89a4f83, 0x656e95e6, 0x7ee6ffaa, - 0x08cfbc21, 0xe6e815ef, 0xd99be7ba, 0xce366f4a, 0xd4099fea, - 0xd67cb029, 0xafb2a431, 0x31233f2a, 0x3094a5c6, 0xc066a235, - 0x37bc4e74, 0xa6ca82fc, 0xb0d090e0, 0x15d8a733, 0x4a9804f1, - 0xf7daec41, 0x0e50cd7f, 0x2ff69117, 0x8dd64d76, 0x4db0ef43, - 0x544daacc, 0xdf0496e4, 0xe3b5d19e, 0x1b886a4c, 0xb81f2cc1, - 0x7f516546, 0x04ea5e9d, 0x5d358c01, 0x737487fa, 0x2e410bfb, - 0x5a1d67b3, 0x52d2db92, 0x335610e9, 0x1347d66d, 0x8c61d79a, - 0x7a0ca137, 0x8e14f859, 0x893c13eb, 0xee27a9ce, 0x35c961b7, - 0xede51ce1, 0x3cb1477a, 0x59dfd29c, 0x3f73f255, 0x79ce1418, - 0xbf37c773, 0xeacdf753, 0x5baafd5f, 0x146f3ddf, 0x86db4478, - 0x81f3afca, 0x3ec468b9, 0x2c342438, 0x5f40a3c2, 0x72c31d16, - 0x0c25e2bc, 0x8b493c28, 0x41950dff, 0x7101a839, 0xdeb30c08, - 0x9ce4b4d8, 0x90c15664, 0x6184cb7b, 0x70b632d5, 0x745c6c48, - 0x4257b8d0 - }; - - private static readonly uint[] Tinv1 = - { - 0xa7f45150, 0x65417e53, 0xa4171ac3, 0x5e273a96, 0x6bab3bcb, - 0x459d1ff1, 0x58faacab, 0x03e34b93, 0xfa302055, 0x6d76adf6, - 0x76cc8891, 0x4c02f525, 0xd7e54ffc, 0xcb2ac5d7, 0x44352680, - 0xa362b58f, 0x5ab1de49, 0x1bba2567, 0x0eea4598, 0xc0fe5de1, - 0x752fc302, 0xf04c8112, 0x97468da3, 0xf9d36bc6, 0x5f8f03e7, - 0x9c921595, 0x7a6dbfeb, 0x595295da, 0x83bed42d, 0x217458d3, - 0x69e04929, 0xc8c98e44, 0x89c2756a, 0x798ef478, 0x3e58996b, - 0x71b927dd, 0x4fe1beb6, 0xad88f017, 0xac20c966, 0x3ace7db4, - 0x4adf6318, 0x311ae582, 0x33519760, 0x7f536245, 0x7764b1e0, - 0xae6bbb84, 0xa081fe1c, 0x2b08f994, 0x68487058, 0xfd458f19, - 0x6cde9487, 0xf87b52b7, 0xd373ab23, 0x024b72e2, 0x8f1fe357, - 0xab55662a, 0x28ebb207, 0xc2b52f03, 0x7bc5869a, 0x0837d3a5, - 0x872830f2, 0xa5bf23b2, 0x6a0302ba, 0x8216ed5c, 0x1ccf8a2b, - 0xb479a792, 0xf207f3f0, 0xe2694ea1, 0xf4da65cd, 0xbe0506d5, - 0x6234d11f, 0xfea6c48a, 0x532e349d, 0x55f3a2a0, 0xe18a0532, - 0xebf6a475, 0xec830b39, 0xef6040aa, 0x9f715e06, 0x106ebd51, - 0x8a213ef9, 0x06dd963d, 0x053eddae, 0xbde64d46, 0x8d5491b5, - 0x5dc47105, 0xd406046f, 0x155060ff, 0xfb981924, 0xe9bdd697, - 0x434089cc, 0x9ed96777, 0x42e8b0bd, 0x8b890788, 0x5b19e738, - 0xeec879db, 0x0a7ca147, 0x0f427ce9, 0x1e84f8c9, 0x00000000, - 0x86800983, 0xed2b3248, 0x70111eac, 0x725a6c4e, 0xff0efdfb, - 0x38850f56, 0xd5ae3d1e, 0x392d3627, 0xd90f0a64, 0xa65c6821, - 0x545b9bd1, 0x2e36243a, 0x670a0cb1, 0xe757930f, 0x96eeb4d2, - 0x919b1b9e, 0xc5c0804f, 0x20dc61a2, 0x4b775a69, 0x1a121c16, - 0xba93e20a, 0x2aa0c0e5, 0xe0223c43, 0x171b121d, 0x0d090e0b, - 0xc78bf2ad, 0xa8b62db9, 0xa91e14c8, 0x19f15785, 0x0775af4c, - 0xdd99eebb, 0x607fa3fd, 0x2601f79f, 0xf5725cbc, 0x3b6644c5, - 0x7efb5b34, 0x29438b76, 0xc623cbdc, 0xfcedb668, 0xf1e4b863, - 0xdc31d7ca, 0x85634210, 0x22971340, 0x11c68420, 0x244a857d, - 0x3dbbd2f8, 0x32f9ae11, 0xa129c76d, 0x2f9e1d4b, 0x30b2dcf3, - 0x52860dec, 0xe3c177d0, 0x16b32b6c, 0xb970a999, 0x489411fa, - 0x64e94722, 0x8cfca8c4, 0x3ff0a01a, 0x2c7d56d8, 0x903322ef, - 0x4e4987c7, 0xd138d9c1, 0xa2ca8cfe, 0x0bd49836, 0x81f5a6cf, - 0xde7aa528, 0x8eb7da26, 0xbfad3fa4, 0x9d3a2ce4, 0x9278500d, - 0xcc5f6a9b, 0x467e5462, 0x138df6c2, 0xb8d890e8, 0xf7392e5e, - 0xafc382f5, 0x805d9fbe, 0x93d0697c, 0x2dd56fa9, 0x1225cfb3, - 0x99acc83b, 0x7d1810a7, 0x639ce86e, 0xbb3bdb7b, 0x7826cd09, - 0x18596ef4, 0xb79aec01, 0x9a4f83a8, 0x6e95e665, 0xe6ffaa7e, - 0xcfbc2108, 0xe815efe6, 0x9be7bad9, 0x366f4ace, 0x099fead4, - 0x7cb029d6, 0xb2a431af, 0x233f2a31, 0x94a5c630, 0x66a235c0, - 0xbc4e7437, 0xca82fca6, 0xd090e0b0, 0xd8a73315, 0x9804f14a, - 0xdaec41f7, 0x50cd7f0e, 0xf691172f, 0xd64d768d, 0xb0ef434d, - 0x4daacc54, 0x0496e4df, 0xb5d19ee3, 0x886a4c1b, 0x1f2cc1b8, - 0x5165467f, 0xea5e9d04, 0x358c015d, 0x7487fa73, 0x410bfb2e, - 0x1d67b35a, 0xd2db9252, 0x5610e933, 0x47d66d13, 0x61d79a8c, - 0x0ca1377a, 0x14f8598e, 0x3c13eb89, 0x27a9ceee, 0xc961b735, - 0xe51ce1ed, 0xb1477a3c, 0xdfd29c59, 0x73f2553f, 0xce141879, - 0x37c773bf, 0xcdf753ea, 0xaafd5f5b, 0x6f3ddf14, 0xdb447886, - 0xf3afca81, 0xc468b93e, 0x3424382c, 0x40a3c25f, 0xc31d1672, - 0x25e2bc0c, 0x493c288b, 0x950dff41, 0x01a83971, 0xb30c08de, - 0xe4b4d89c, 0xc1566490, 0x84cb7b61, 0xb632d570, 0x5c6c4874, - 0x57b8d042 - }; - - private static readonly uint[] Tinv2 = - { - 0xf45150a7, 0x417e5365, 0x171ac3a4, 0x273a965e, 0xab3bcb6b, - 0x9d1ff145, 0xfaacab58, 0xe34b9303, 0x302055fa, 0x76adf66d, - 0xcc889176, 0x02f5254c, 0xe54ffcd7, 0x2ac5d7cb, 0x35268044, - 0x62b58fa3, 0xb1de495a, 0xba25671b, 0xea45980e, 0xfe5de1c0, - 0x2fc30275, 0x4c8112f0, 0x468da397, 0xd36bc6f9, 0x8f03e75f, - 0x9215959c, 0x6dbfeb7a, 0x5295da59, 0xbed42d83, 0x7458d321, - 0xe0492969, 0xc98e44c8, 0xc2756a89, 0x8ef47879, 0x58996b3e, - 0xb927dd71, 0xe1beb64f, 0x88f017ad, 0x20c966ac, 0xce7db43a, - 0xdf63184a, 0x1ae58231, 0x51976033, 0x5362457f, 0x64b1e077, - 0x6bbb84ae, 0x81fe1ca0, 0x08f9942b, 0x48705868, 0x458f19fd, - 0xde94876c, 0x7b52b7f8, 0x73ab23d3, 0x4b72e202, 0x1fe3578f, - 0x55662aab, 0xebb20728, 0xb52f03c2, 0xc5869a7b, 0x37d3a508, - 0x2830f287, 0xbf23b2a5, 0x0302ba6a, 0x16ed5c82, 0xcf8a2b1c, - 0x79a792b4, 0x07f3f0f2, 0x694ea1e2, 0xda65cdf4, 0x0506d5be, - 0x34d11f62, 0xa6c48afe, 0x2e349d53, 0xf3a2a055, 0x8a0532e1, - 0xf6a475eb, 0x830b39ec, 0x6040aaef, 0x715e069f, 0x6ebd5110, - 0x213ef98a, 0xdd963d06, 0x3eddae05, 0xe64d46bd, 0x5491b58d, - 0xc471055d, 0x06046fd4, 0x5060ff15, 0x981924fb, 0xbdd697e9, - 0x4089cc43, 0xd967779e, 0xe8b0bd42, 0x8907888b, 0x19e7385b, - 0xc879dbee, 0x7ca1470a, 0x427ce90f, 0x84f8c91e, 0x00000000, - 0x80098386, 0x2b3248ed, 0x111eac70, 0x5a6c4e72, 0x0efdfbff, - 0x850f5638, 0xae3d1ed5, 0x2d362739, 0x0f0a64d9, 0x5c6821a6, - 0x5b9bd154, 0x36243a2e, 0x0a0cb167, 0x57930fe7, 0xeeb4d296, - 0x9b1b9e91, 0xc0804fc5, 0xdc61a220, 0x775a694b, 0x121c161a, - 0x93e20aba, 0xa0c0e52a, 0x223c43e0, 0x1b121d17, 0x090e0b0d, - 0x8bf2adc7, 0xb62db9a8, 0x1e14c8a9, 0xf1578519, 0x75af4c07, - 0x99eebbdd, 0x7fa3fd60, 0x01f79f26, 0x725cbcf5, 0x6644c53b, - 0xfb5b347e, 0x438b7629, 0x23cbdcc6, 0xedb668fc, 0xe4b863f1, - 0x31d7cadc, 0x63421085, 0x97134022, 0xc6842011, 0x4a857d24, - 0xbbd2f83d, 0xf9ae1132, 0x29c76da1, 0x9e1d4b2f, 0xb2dcf330, - 0x860dec52, 0xc177d0e3, 0xb32b6c16, 0x70a999b9, 0x9411fa48, - 0xe9472264, 0xfca8c48c, 0xf0a01a3f, 0x7d56d82c, 0x3322ef90, - 0x4987c74e, 0x38d9c1d1, 0xca8cfea2, 0xd498360b, 0xf5a6cf81, - 0x7aa528de, 0xb7da268e, 0xad3fa4bf, 0x3a2ce49d, 0x78500d92, - 0x5f6a9bcc, 0x7e546246, 0x8df6c213, 0xd890e8b8, 0x392e5ef7, - 0xc382f5af, 0x5d9fbe80, 0xd0697c93, 0xd56fa92d, 0x25cfb312, - 0xacc83b99, 0x1810a77d, 0x9ce86e63, 0x3bdb7bbb, 0x26cd0978, - 0x596ef418, 0x9aec01b7, 0x4f83a89a, 0x95e6656e, 0xffaa7ee6, - 0xbc2108cf, 0x15efe6e8, 0xe7bad99b, 0x6f4ace36, 0x9fead409, - 0xb029d67c, 0xa431afb2, 0x3f2a3123, 0xa5c63094, 0xa235c066, - 0x4e7437bc, 0x82fca6ca, 0x90e0b0d0, 0xa73315d8, 0x04f14a98, - 0xec41f7da, 0xcd7f0e50, 0x91172ff6, 0x4d768dd6, 0xef434db0, - 0xaacc544d, 0x96e4df04, 0xd19ee3b5, 0x6a4c1b88, 0x2cc1b81f, - 0x65467f51, 0x5e9d04ea, 0x8c015d35, 0x87fa7374, 0x0bfb2e41, - 0x67b35a1d, 0xdb9252d2, 0x10e93356, 0xd66d1347, 0xd79a8c61, - 0xa1377a0c, 0xf8598e14, 0x13eb893c, 0xa9ceee27, 0x61b735c9, - 0x1ce1ede5, 0x477a3cb1, 0xd29c59df, 0xf2553f73, 0x141879ce, - 0xc773bf37, 0xf753eacd, 0xfd5f5baa, 0x3ddf146f, 0x447886db, - 0xafca81f3, 0x68b93ec4, 0x24382c34, 0xa3c25f40, 0x1d1672c3, - 0xe2bc0c25, 0x3c288b49, 0x0dff4195, 0xa8397101, 0x0c08deb3, - 0xb4d89ce4, 0x566490c1, 0xcb7b6184, 0x32d570b6, 0x6c48745c, - 0xb8d04257 - }; - - private static readonly uint[] Tinv3 = - { - 0x5150a7f4, 0x7e536541, 0x1ac3a417, 0x3a965e27, 0x3bcb6bab, - 0x1ff1459d, 0xacab58fa, 0x4b9303e3, 0x2055fa30, 0xadf66d76, - 0x889176cc, 0xf5254c02, 0x4ffcd7e5, 0xc5d7cb2a, 0x26804435, - 0xb58fa362, 0xde495ab1, 0x25671bba, 0x45980eea, 0x5de1c0fe, - 0xc302752f, 0x8112f04c, 0x8da39746, 0x6bc6f9d3, 0x03e75f8f, - 0x15959c92, 0xbfeb7a6d, 0x95da5952, 0xd42d83be, 0x58d32174, - 0x492969e0, 0x8e44c8c9, 0x756a89c2, 0xf478798e, 0x996b3e58, - 0x27dd71b9, 0xbeb64fe1, 0xf017ad88, 0xc966ac20, 0x7db43ace, - 0x63184adf, 0xe582311a, 0x97603351, 0x62457f53, 0xb1e07764, - 0xbb84ae6b, 0xfe1ca081, 0xf9942b08, 0x70586848, 0x8f19fd45, - 0x94876cde, 0x52b7f87b, 0xab23d373, 0x72e2024b, 0xe3578f1f, - 0x662aab55, 0xb20728eb, 0x2f03c2b5, 0x869a7bc5, 0xd3a50837, - 0x30f28728, 0x23b2a5bf, 0x02ba6a03, 0xed5c8216, 0x8a2b1ccf, - 0xa792b479, 0xf3f0f207, 0x4ea1e269, 0x65cdf4da, 0x06d5be05, - 0xd11f6234, 0xc48afea6, 0x349d532e, 0xa2a055f3, 0x0532e18a, - 0xa475ebf6, 0x0b39ec83, 0x40aaef60, 0x5e069f71, 0xbd51106e, - 0x3ef98a21, 0x963d06dd, 0xddae053e, 0x4d46bde6, 0x91b58d54, - 0x71055dc4, 0x046fd406, 0x60ff1550, 0x1924fb98, 0xd697e9bd, - 0x89cc4340, 0x67779ed9, 0xb0bd42e8, 0x07888b89, 0xe7385b19, - 0x79dbeec8, 0xa1470a7c, 0x7ce90f42, 0xf8c91e84, 0x00000000, - 0x09838680, 0x3248ed2b, 0x1eac7011, 0x6c4e725a, 0xfdfbff0e, - 0x0f563885, 0x3d1ed5ae, 0x3627392d, 0x0a64d90f, 0x6821a65c, - 0x9bd1545b, 0x243a2e36, 0x0cb1670a, 0x930fe757, 0xb4d296ee, - 0x1b9e919b, 0x804fc5c0, 0x61a220dc, 0x5a694b77, 0x1c161a12, - 0xe20aba93, 0xc0e52aa0, 0x3c43e022, 0x121d171b, 0x0e0b0d09, - 0xf2adc78b, 0x2db9a8b6, 0x14c8a91e, 0x578519f1, 0xaf4c0775, - 0xeebbdd99, 0xa3fd607f, 0xf79f2601, 0x5cbcf572, 0x44c53b66, - 0x5b347efb, 0x8b762943, 0xcbdcc623, 0xb668fced, 0xb863f1e4, - 0xd7cadc31, 0x42108563, 0x13402297, 0x842011c6, 0x857d244a, - 0xd2f83dbb, 0xae1132f9, 0xc76da129, 0x1d4b2f9e, 0xdcf330b2, - 0x0dec5286, 0x77d0e3c1, 0x2b6c16b3, 0xa999b970, 0x11fa4894, - 0x472264e9, 0xa8c48cfc, 0xa01a3ff0, 0x56d82c7d, 0x22ef9033, - 0x87c74e49, 0xd9c1d138, 0x8cfea2ca, 0x98360bd4, 0xa6cf81f5, - 0xa528de7a, 0xda268eb7, 0x3fa4bfad, 0x2ce49d3a, 0x500d9278, - 0x6a9bcc5f, 0x5462467e, 0xf6c2138d, 0x90e8b8d8, 0x2e5ef739, - 0x82f5afc3, 0x9fbe805d, 0x697c93d0, 0x6fa92dd5, 0xcfb31225, - 0xc83b99ac, 0x10a77d18, 0xe86e639c, 0xdb7bbb3b, 0xcd097826, - 0x6ef41859, 0xec01b79a, 0x83a89a4f, 0xe6656e95, 0xaa7ee6ff, - 0x2108cfbc, 0xefe6e815, 0xbad99be7, 0x4ace366f, 0xead4099f, - 0x29d67cb0, 0x31afb2a4, 0x2a31233f, 0xc63094a5, 0x35c066a2, - 0x7437bc4e, 0xfca6ca82, 0xe0b0d090, 0x3315d8a7, 0xf14a9804, - 0x41f7daec, 0x7f0e50cd, 0x172ff691, 0x768dd64d, 0x434db0ef, - 0xcc544daa, 0xe4df0496, 0x9ee3b5d1, 0x4c1b886a, 0xc1b81f2c, - 0x467f5165, 0x9d04ea5e, 0x015d358c, 0xfa737487, 0xfb2e410b, - 0xb35a1d67, 0x9252d2db, 0xe9335610, 0x6d1347d6, 0x9a8c61d7, - 0x377a0ca1, 0x598e14f8, 0xeb893c13, 0xceee27a9, 0xb735c961, - 0xe1ede51c, 0x7a3cb147, 0x9c59dfd2, 0x553f73f2, 0x1879ce14, - 0x73bf37c7, 0x53eacdf7, 0x5f5baafd, 0xdf146f3d, 0x7886db44, - 0xca81f3af, 0xb93ec468, 0x382c3424, 0xc25f40a3, 0x1672c31d, - 0xbc0c25e2, 0x288b493c, 0xff41950d, 0x397101a8, 0x08deb30c, - 0xd89ce4b4, 0x6490c156, 0x7b6184cb, 0xd570b632, 0x48745c6c, - 0xd04257b8 - }; - - private static uint Shift(uint r, int shift) - { - return (r >> shift) | (r << (32 - shift)); - } - - /* multiply four bytes in GF(2^8) by 'x' {02} in parallel */ - - private const uint m1 = 0x80808080; - private const uint m2 = 0x7f7f7f7f; - private const uint m3 = 0x0000001b; - private const uint m4 = 0xC0C0C0C0; - private const uint m5 = 0x3f3f3f3f; - - private static uint FFmulX(uint x) - { - return ((x & m2) << 1) ^ (((x & m1) >> 7) * m3); - } - - private static uint FFmulX2(uint x) - { - uint t0 = (x & m5) << 2; - uint t1 = (x & m4); - t1 ^= (t1 >> 1); - return t0 ^ (t1 >> 2) ^ (t1 >> 5); - } - - /* - The following defines provide alternative definitions of FFmulX that might - give improved performance if a fast 32-bit multiply is not available. - - private int FFmulX(int x) { int u = x & m1; u |= (u >> 1); return ((x & m2) << 1) ^ ((u >>> 3) | (u >>> 6)); } - private static final int m4 = 0x1b1b1b1b; - private int FFmulX(int x) { int u = x & m1; return ((x & m2) << 1) ^ ((u - (u >>> 7)) & m4); } - - */ - - private static uint Inv_Mcol(uint x) - { - uint t0, t1; - t0 = x; - t1 = t0 ^ Shift(t0, 8); - t0 ^= FFmulX(t1); - t1 ^= FFmulX2(t0); - t0 ^= t1 ^ Shift(t1, 16); - return t0; - } - - private static uint SubWord(uint x) - { - return (uint)S[x&255] - | (((uint)S[(x>>8)&255]) << 8) - | (((uint)S[(x>>16)&255]) << 16) - | (((uint)S[(x>>24)&255]) << 24); - } - - /** - * Calculate the necessary round keys - * The number of calculations depends on key size and block size - * AES specified a fixed block size of 128 bits and key sizes 128/192/256 bits - * This code is written assuming those are the only possible values - */ - private uint[][] GenerateWorkingKey(byte[] key, bool forEncryption) - { - int keyLen = key.Length; - if (keyLen < 16 || keyLen > 32 || (keyLen & 7) != 0) - throw new ArgumentException("Key length not 128/192/256 bits."); - - int KC = keyLen >> 2; - this.ROUNDS = KC + 6; // This is not always true for the generalized Rijndael that allows larger block sizes - - uint[][] W = new uint[ROUNDS + 1][]; // 4 words in a block - for (int i = 0; i <= ROUNDS; ++i) - { - W[i] = new uint[4]; - } - - switch (KC) - { - case 4: - { - uint t0 = Pack.LE_To_UInt32(key, 0); W[0][0] = t0; - uint t1 = Pack.LE_To_UInt32(key, 4); W[0][1] = t1; - uint t2 = Pack.LE_To_UInt32(key, 8); W[0][2] = t2; - uint t3 = Pack.LE_To_UInt32(key, 12); W[0][3] = t3; - - for (int i = 1; i <= 10; ++i) - { - uint u = SubWord(Shift(t3, 8)) ^ rcon[i - 1]; - t0 ^= u; W[i][0] = t0; - t1 ^= t0; W[i][1] = t1; - t2 ^= t1; W[i][2] = t2; - t3 ^= t2; W[i][3] = t3; - } - - break; - } - case 6: - { - uint t0 = Pack.LE_To_UInt32(key, 0); W[0][0] = t0; - uint t1 = Pack.LE_To_UInt32(key, 4); W[0][1] = t1; - uint t2 = Pack.LE_To_UInt32(key, 8); W[0][2] = t2; - uint t3 = Pack.LE_To_UInt32(key, 12); W[0][3] = t3; - uint t4 = Pack.LE_To_UInt32(key, 16); W[1][0] = t4; - uint t5 = Pack.LE_To_UInt32(key, 20); W[1][1] = t5; - - uint rcon = 1; - uint u = SubWord(Shift(t5, 8)) ^ rcon; rcon <<= 1; - t0 ^= u; W[1][2] = t0; - t1 ^= t0; W[1][3] = t1; - t2 ^= t1; W[2][0] = t2; - t3 ^= t2; W[2][1] = t3; - t4 ^= t3; W[2][2] = t4; - t5 ^= t4; W[2][3] = t5; - - for (int i = 3; i < 12; i += 3) - { - u = SubWord(Shift(t5, 8)) ^ rcon; rcon <<= 1; - t0 ^= u; W[i ][0] = t0; - t1 ^= t0; W[i ][1] = t1; - t2 ^= t1; W[i ][2] = t2; - t3 ^= t2; W[i ][3] = t3; - t4 ^= t3; W[i + 1][0] = t4; - t5 ^= t4; W[i + 1][1] = t5; - u = SubWord(Shift(t5, 8)) ^ rcon; rcon <<= 1; - t0 ^= u; W[i + 1][2] = t0; - t1 ^= t0; W[i + 1][3] = t1; - t2 ^= t1; W[i + 2][0] = t2; - t3 ^= t2; W[i + 2][1] = t3; - t4 ^= t3; W[i + 2][2] = t4; - t5 ^= t4; W[i + 2][3] = t5; - } - - u = SubWord(Shift(t5, 8)) ^ rcon; - t0 ^= u; W[12][0] = t0; - t1 ^= t0; W[12][1] = t1; - t2 ^= t1; W[12][2] = t2; - t3 ^= t2; W[12][3] = t3; - - break; - } - case 8: - { - uint t0 = Pack.LE_To_UInt32(key, 0); W[0][0] = t0; - uint t1 = Pack.LE_To_UInt32(key, 4); W[0][1] = t1; - uint t2 = Pack.LE_To_UInt32(key, 8); W[0][2] = t2; - uint t3 = Pack.LE_To_UInt32(key, 12); W[0][3] = t3; - uint t4 = Pack.LE_To_UInt32(key, 16); W[1][0] = t4; - uint t5 = Pack.LE_To_UInt32(key, 20); W[1][1] = t5; - uint t6 = Pack.LE_To_UInt32(key, 24); W[1][2] = t6; - uint t7 = Pack.LE_To_UInt32(key, 28); W[1][3] = t7; - - uint u, rcon = 1; - - for (int i = 2; i < 14; i += 2) - { - u = SubWord(Shift(t7, 8)) ^ rcon; rcon <<= 1; - t0 ^= u; W[i ][0] = t0; - t1 ^= t0; W[i ][1] = t1; - t2 ^= t1; W[i ][2] = t2; - t3 ^= t2; W[i ][3] = t3; - u = SubWord(t3); - t4 ^= u; W[i + 1][0] = t4; - t5 ^= t4; W[i + 1][1] = t5; - t6 ^= t5; W[i + 1][2] = t6; - t7 ^= t6; W[i + 1][3] = t7; - } - - u = SubWord(Shift(t7, 8)) ^ rcon; - t0 ^= u; W[14][0] = t0; - t1 ^= t0; W[14][1] = t1; - t2 ^= t1; W[14][2] = t2; - t3 ^= t2; W[14][3] = t3; - - break; - } - default: - { - throw new InvalidOperationException("Should never get here"); - } - } - - if (!forEncryption) - { - for (int j = 1; j < ROUNDS; j++) - { - uint[] w = W[j]; - for (int i = 0; i < 4; i++) - { - w[i] = Inv_Mcol(w[i]); - } - } - } - - return W; - } - - private int ROUNDS; - private uint[][] WorkingKey; - private uint C0, C1, C2, C3; - private bool forEncryption; - - private const int BLOCK_SIZE = 16; - - /** - * default constructor - 128 bit block size. - */ - public AesFastEngine() - { - } - - /** - * initialise an AES cipher. - * - * @param forEncryption whether or not we are for encryption. - * @param parameters the parameters required to set up the cipher. - * @exception ArgumentException if the parameters argument is - * inappropriate. - */ - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - KeyParameter keyParameter = parameters as KeyParameter; - - if (keyParameter == null) - throw new ArgumentException("invalid parameter passed to AES init - " - + Platform.GetTypeName(parameters)); - - WorkingKey = GenerateWorkingKey(keyParameter.GetKey(), forEncryption); - - this.forEncryption = forEncryption; - } - - public virtual string AlgorithmName - { - get { return "AES"; } - } - - public virtual bool IsPartialBlockOkay - { - get { return false; } - } - - public virtual int GetBlockSize() - { - return BLOCK_SIZE; - } - - public virtual int ProcessBlock( - byte[] input, - int inOff, - byte[] output, - int outOff) - { - if (WorkingKey == null) - throw new InvalidOperationException("AES engine not initialised"); - - Check.DataLength(input, inOff, 16, "input buffer too short"); - Check.OutputLength(output, outOff, 16, "output buffer too short"); - - UnPackBlock(input, inOff); - - if (forEncryption) - { - EncryptBlock(WorkingKey); - } - else - { - DecryptBlock(WorkingKey); - } - - PackBlock(output, outOff); - - return BLOCK_SIZE; - } - - public virtual void Reset() - { - } - - private void UnPackBlock( - byte[] bytes, - int off) - { - C0 = Pack.LE_To_UInt32(bytes, off); - C1 = Pack.LE_To_UInt32(bytes, off + 4); - C2 = Pack.LE_To_UInt32(bytes, off + 8); - C3 = Pack.LE_To_UInt32(bytes, off + 12); - } - - private void PackBlock( - byte[] bytes, - int off) - { - Pack.UInt32_To_LE(C0, bytes, off); - Pack.UInt32_To_LE(C1, bytes, off + 4); - Pack.UInt32_To_LE(C2, bytes, off + 8); - Pack.UInt32_To_LE(C3, bytes, off + 12); - } - - private void EncryptBlock(uint[][] KW) - { - uint[] kw = KW[0]; - uint t0 = this.C0 ^ kw[0]; - uint t1 = this.C1 ^ kw[1]; - uint t2 = this.C2 ^ kw[2]; - - uint r0, r1, r2, r3 = this.C3 ^ kw[3]; - int r = 1; - while (r < ROUNDS - 1) - { - kw = KW[r++]; - r0 = T0[t0 & 255] ^ T1[(t1 >> 8) & 255] ^ T2[(t2 >> 16) & 255] ^ T3[r3 >> 24] ^ kw[0]; - r1 = T0[t1 & 255] ^ T1[(t2 >> 8) & 255] ^ T2[(r3 >> 16) & 255] ^ T3[t0 >> 24] ^ kw[1]; - r2 = T0[t2 & 255] ^ T1[(r3 >> 8) & 255] ^ T2[(t0 >> 16) & 255] ^ T3[t1 >> 24] ^ kw[2]; - r3 = T0[r3 & 255] ^ T1[(t0 >> 8) & 255] ^ T2[(t1 >> 16) & 255] ^ T3[t2 >> 24] ^ kw[3]; - kw = KW[r++]; - t0 = T0[r0 & 255] ^ T1[(r1 >> 8) & 255] ^ T2[(r2 >> 16) & 255] ^ T3[r3 >> 24] ^ kw[0]; - t1 = T0[r1 & 255] ^ T1[(r2 >> 8) & 255] ^ T2[(r3 >> 16) & 255] ^ T3[r0 >> 24] ^ kw[1]; - t2 = T0[r2 & 255] ^ T1[(r3 >> 8) & 255] ^ T2[(r0 >> 16) & 255] ^ T3[r1 >> 24] ^ kw[2]; - r3 = T0[r3 & 255] ^ T1[(r0 >> 8) & 255] ^ T2[(r1 >> 16) & 255] ^ T3[r2 >> 24] ^ kw[3]; - } - - kw = KW[r++]; - r0 = T0[t0 & 255] ^ T1[(t1 >> 8) & 255] ^ T2[(t2 >> 16) & 255] ^ T3[r3 >> 24] ^ kw[0]; - r1 = T0[t1 & 255] ^ T1[(t2 >> 8) & 255] ^ T2[(r3 >> 16) & 255] ^ T3[t0 >> 24] ^ kw[1]; - r2 = T0[t2 & 255] ^ T1[(r3 >> 8) & 255] ^ T2[(t0 >> 16) & 255] ^ T3[t1 >> 24] ^ kw[2]; - r3 = T0[r3 & 255] ^ T1[(t0 >> 8) & 255] ^ T2[(t1 >> 16) & 255] ^ T3[t2 >> 24] ^ kw[3]; - - // the final round's table is a simple function of S so we don't use a whole other four tables for it - - kw = KW[r]; - this.C0 = (uint)S[r0 & 255] ^ (((uint)S[(r1 >> 8) & 255]) << 8) ^ (((uint)S[(r2 >> 16) & 255]) << 16) ^ (((uint)S[r3 >> 24]) << 24) ^ kw[0]; - this.C1 = (uint)S[r1 & 255] ^ (((uint)S[(r2 >> 8) & 255]) << 8) ^ (((uint)S[(r3 >> 16) & 255]) << 16) ^ (((uint)S[r0 >> 24]) << 24) ^ kw[1]; - this.C2 = (uint)S[r2 & 255] ^ (((uint)S[(r3 >> 8) & 255]) << 8) ^ (((uint)S[(r0 >> 16) & 255]) << 16) ^ (((uint)S[r1 >> 24]) << 24) ^ kw[2]; - this.C3 = (uint)S[r3 & 255] ^ (((uint)S[(r0 >> 8) & 255]) << 8) ^ (((uint)S[(r1 >> 16) & 255]) << 16) ^ (((uint)S[r2 >> 24]) << 24) ^ kw[3]; - } - - private void DecryptBlock(uint[][] KW) - { - uint[] kw = KW[ROUNDS]; - uint t0 = this.C0 ^ kw[0]; - uint t1 = this.C1 ^ kw[1]; - uint t2 = this.C2 ^ kw[2]; - - uint r0, r1, r2, r3 = this.C3 ^ kw[3]; - int r = ROUNDS - 1; - while (r > 1) - { - kw = KW[r--]; - r0 = Tinv0[t0 & 255] ^ Tinv1[(r3 >> 8) & 255] ^ Tinv2[(t2 >> 16) & 255] ^ Tinv3[t1 >> 24] ^ kw[0]; - r1 = Tinv0[t1 & 255] ^ Tinv1[(t0 >> 8) & 255] ^ Tinv2[(r3 >> 16) & 255] ^ Tinv3[t2 >> 24] ^ kw[1]; - r2 = Tinv0[t2 & 255] ^ Tinv1[(t1 >> 8) & 255] ^ Tinv2[(t0 >> 16) & 255] ^ Tinv3[r3 >> 24] ^ kw[2]; - r3 = Tinv0[r3 & 255] ^ Tinv1[(t2 >> 8) & 255] ^ Tinv2[(t1 >> 16) & 255] ^ Tinv3[t0 >> 24] ^ kw[3]; - kw = KW[r--]; - t0 = Tinv0[r0 & 255] ^ Tinv1[(r3 >> 8) & 255] ^ Tinv2[(r2 >> 16) & 255] ^ Tinv3[r1 >> 24] ^ kw[0]; - t1 = Tinv0[r1 & 255] ^ Tinv1[(r0 >> 8) & 255] ^ Tinv2[(r3 >> 16) & 255] ^ Tinv3[r2 >> 24] ^ kw[1]; - t2 = Tinv0[r2 & 255] ^ Tinv1[(r1 >> 8) & 255] ^ Tinv2[(r0 >> 16) & 255] ^ Tinv3[r3 >> 24] ^ kw[2]; - r3 = Tinv0[r3 & 255] ^ Tinv1[(r2 >> 8) & 255] ^ Tinv2[(r1 >> 16) & 255] ^ Tinv3[r0 >> 24] ^ kw[3]; - } - - kw = KW[1]; - r0 = Tinv0[t0 & 255] ^ Tinv1[(r3 >> 8) & 255] ^ Tinv2[(t2 >> 16) & 255] ^ Tinv3[t1 >> 24] ^ kw[0]; - r1 = Tinv0[t1 & 255] ^ Tinv1[(t0 >> 8) & 255] ^ Tinv2[(r3 >> 16) & 255] ^ Tinv3[t2 >> 24] ^ kw[1]; - r2 = Tinv0[t2 & 255] ^ Tinv1[(t1 >> 8) & 255] ^ Tinv2[(t0 >> 16) & 255] ^ Tinv3[r3 >> 24] ^ kw[2]; - r3 = Tinv0[r3 & 255] ^ Tinv1[(t2 >> 8) & 255] ^ Tinv2[(t1 >> 16) & 255] ^ Tinv3[t0 >> 24] ^ kw[3]; - - // the final round's table is a simple function of Si so we don't use a whole other four tables for it - - kw = KW[0]; - this.C0 = (uint)Si[r0 & 255] ^ (((uint)Si[(r3 >> 8) & 255]) << 8) ^ (((uint)Si[(r2 >> 16) & 255]) << 16) ^ (((uint)Si[r1 >> 24]) << 24) ^ kw[0]; - this.C1 = (uint)Si[r1 & 255] ^ (((uint)Si[(r0 >> 8) & 255]) << 8) ^ (((uint)Si[(r3 >> 16) & 255]) << 16) ^ (((uint)Si[r2 >> 24]) << 24) ^ kw[1]; - this.C2 = (uint)Si[r2 & 255] ^ (((uint)Si[(r1 >> 8) & 255]) << 8) ^ (((uint)Si[(r0 >> 16) & 255]) << 16) ^ (((uint)Si[r3 >> 24]) << 24) ^ kw[2]; - this.C3 = (uint)Si[r3 & 255] ^ (((uint)Si[(r2 >> 8) & 255]) << 8) ^ (((uint)Si[(r1 >> 16) & 255]) << 16) ^ (((uint)Si[r0 >> 24]) << 24) ^ kw[3]; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/AesLightEngine.cs b/bc-sharp-crypto/src/crypto/engines/AesLightEngine.cs deleted file mode 100644 index 9cc9c34..0000000 --- a/bc-sharp-crypto/src/crypto/engines/AesLightEngine.cs +++ /dev/null @@ -1,504 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * an implementation of the AES (Rijndael), from FIPS-197. - *

- * For further details see: http://csrc.nist.gov/encryption/aes/. - * - * This implementation is based on optimizations from Dr. Brian Gladman's paper and C code at - * http://fp.gladman.plus.com/cryptography_technology/rijndael/ - * - * There are three levels of tradeoff of speed vs memory - * Because java has no preprocessor, they are written as three separate classes from which to choose - * - * The fastest uses 8Kbytes of static tables to precompute round calculations, 4 256 word tables for encryption - * and 4 for decryption. - * - * The middle performance version uses only one 256 word table for each, for a total of 2Kbytes, - * adding 12 rotate operations per round to compute the values contained in the other tables from - * the contents of the first - * - * The slowest version uses no static tables at all and computes the values - * in each round. - *

- *

- * This file contains the slowest performance version with no static tables - * for round precomputation, but it has the smallest foot print. - *

- */ - public class AesLightEngine - : IBlockCipher - { - // The S box - private static readonly byte[] S = - { - 99, 124, 119, 123, 242, 107, 111, 197, - 48, 1, 103, 43, 254, 215, 171, 118, - 202, 130, 201, 125, 250, 89, 71, 240, - 173, 212, 162, 175, 156, 164, 114, 192, - 183, 253, 147, 38, 54, 63, 247, 204, - 52, 165, 229, 241, 113, 216, 49, 21, - 4, 199, 35, 195, 24, 150, 5, 154, - 7, 18, 128, 226, 235, 39, 178, 117, - 9, 131, 44, 26, 27, 110, 90, 160, - 82, 59, 214, 179, 41, 227, 47, 132, - 83, 209, 0, 237, 32, 252, 177, 91, - 106, 203, 190, 57, 74, 76, 88, 207, - 208, 239, 170, 251, 67, 77, 51, 133, - 69, 249, 2, 127, 80, 60, 159, 168, - 81, 163, 64, 143, 146, 157, 56, 245, - 188, 182, 218, 33, 16, 255, 243, 210, - 205, 12, 19, 236, 95, 151, 68, 23, - 196, 167, 126, 61, 100, 93, 25, 115, - 96, 129, 79, 220, 34, 42, 144, 136, - 70, 238, 184, 20, 222, 94, 11, 219, - 224, 50, 58, 10, 73, 6, 36, 92, - 194, 211, 172, 98, 145, 149, 228, 121, - 231, 200, 55, 109, 141, 213, 78, 169, - 108, 86, 244, 234, 101, 122, 174, 8, - 186, 120, 37, 46, 28, 166, 180, 198, - 232, 221, 116, 31, 75, 189, 139, 138, - 112, 62, 181, 102, 72, 3, 246, 14, - 97, 53, 87, 185, 134, 193, 29, 158, - 225, 248, 152, 17, 105, 217, 142, 148, - 155, 30, 135, 233, 206, 85, 40, 223, - 140, 161, 137, 13, 191, 230, 66, 104, - 65, 153, 45, 15, 176, 84, 187, 22, - }; - - // The inverse S-box - private static readonly byte[] Si = - { - 82, 9, 106, 213, 48, 54, 165, 56, - 191, 64, 163, 158, 129, 243, 215, 251, - 124, 227, 57, 130, 155, 47, 255, 135, - 52, 142, 67, 68, 196, 222, 233, 203, - 84, 123, 148, 50, 166, 194, 35, 61, - 238, 76, 149, 11, 66, 250, 195, 78, - 8, 46, 161, 102, 40, 217, 36, 178, - 118, 91, 162, 73, 109, 139, 209, 37, - 114, 248, 246, 100, 134, 104, 152, 22, - 212, 164, 92, 204, 93, 101, 182, 146, - 108, 112, 72, 80, 253, 237, 185, 218, - 94, 21, 70, 87, 167, 141, 157, 132, - 144, 216, 171, 0, 140, 188, 211, 10, - 247, 228, 88, 5, 184, 179, 69, 6, - 208, 44, 30, 143, 202, 63, 15, 2, - 193, 175, 189, 3, 1, 19, 138, 107, - 58, 145, 17, 65, 79, 103, 220, 234, - 151, 242, 207, 206, 240, 180, 230, 115, - 150, 172, 116, 34, 231, 173, 53, 133, - 226, 249, 55, 232, 28, 117, 223, 110, - 71, 241, 26, 113, 29, 41, 197, 137, - 111, 183, 98, 14, 170, 24, 190, 27, - 252, 86, 62, 75, 198, 210, 121, 32, - 154, 219, 192, 254, 120, 205, 90, 244, - 31, 221, 168, 51, 136, 7, 199, 49, - 177, 18, 16, 89, 39, 128, 236, 95, - 96, 81, 127, 169, 25, 181, 74, 13, - 45, 229, 122, 159, 147, 201, 156, 239, - 160, 224, 59, 77, 174, 42, 245, 176, - 200, 235, 187, 60, 131, 83, 153, 97, - 23, 43, 4, 126, 186, 119, 214, 38, - 225, 105, 20, 99, 85, 33, 12, 125, - }; - - // vector used in calculating key schedule (powers of x in GF(256)) - private static readonly byte[] rcon = - { - 0x01, 0x02, 0x04, 0x08, 0x10, 0x20, 0x40, 0x80, 0x1b, 0x36, 0x6c, 0xd8, 0xab, 0x4d, 0x9a, - 0x2f, 0x5e, 0xbc, 0x63, 0xc6, 0x97, 0x35, 0x6a, 0xd4, 0xb3, 0x7d, 0xfa, 0xef, 0xc5, 0x91 - }; - - private static uint Shift(uint r, int shift) - { - return (r >> shift) | (r << (32 - shift)); - } - - /* multiply four bytes in GF(2^8) by 'x' {02} in parallel */ - - private const uint m1 = 0x80808080; - private const uint m2 = 0x7f7f7f7f; - private const uint m3 = 0x0000001b; - private const uint m4 = 0xC0C0C0C0; - private const uint m5 = 0x3f3f3f3f; - - private static uint FFmulX(uint x) - { - return ((x & m2) << 1) ^ (((x & m1) >> 7) * m3); - } - - private static uint FFmulX2(uint x) - { - uint t0 = (x & m5) << 2; - uint t1 = (x & m4); - t1 ^= (t1 >> 1); - return t0 ^ (t1 >> 2) ^ (t1 >> 5); - } - - /* - The following defines provide alternative definitions of FFmulX that might - give improved performance if a fast 32-bit multiply is not available. - - private int FFmulX(int x) { int u = x & m1; u |= (u >> 1); return ((x & m2) << 1) ^ ((u >>> 3) | (u >>> 6)); } - private static final int m4 = 0x1b1b1b1b; - private int FFmulX(int x) { int u = x & m1; return ((x & m2) << 1) ^ ((u - (u >>> 7)) & m4); } - - */ - - private static uint Mcol(uint x) - { - uint t0, t1; - t0 = Shift(x, 8); - t1 = x ^ t0; - return Shift(t1, 16) ^ t0 ^ FFmulX(t1); - } - - private static uint Inv_Mcol(uint x) - { - uint t0, t1; - t0 = x; - t1 = t0 ^ Shift(t0, 8); - t0 ^= FFmulX(t1); - t1 ^= FFmulX2(t0); - t0 ^= t1 ^ Shift(t1, 16); - return t0; - } - - private static uint SubWord(uint x) - { - return (uint)S[x&255] - | (((uint)S[(x>>8)&255]) << 8) - | (((uint)S[(x>>16)&255]) << 16) - | (((uint)S[(x>>24)&255]) << 24); - } - - /** - * Calculate the necessary round keys - * The number of calculations depends on key size and block size - * AES specified a fixed block size of 128 bits and key sizes 128/192/256 bits - * This code is written assuming those are the only possible values - */ - private uint[][] GenerateWorkingKey(byte[] key, bool forEncryption) - { - int keyLen = key.Length; - if (keyLen < 16 || keyLen > 32 || (keyLen & 7) != 0) - throw new ArgumentException("Key length not 128/192/256 bits."); - - int KC = keyLen >> 2; - this.ROUNDS = KC + 6; // This is not always true for the generalized Rijndael that allows larger block sizes - - uint[][] W = new uint[ROUNDS + 1][]; // 4 words in a block - for (int i = 0; i <= ROUNDS; ++i) - { - W[i] = new uint[4]; - } - - switch (KC) - { - case 4: - { - uint t0 = Pack.LE_To_UInt32(key, 0); W[0][0] = t0; - uint t1 = Pack.LE_To_UInt32(key, 4); W[0][1] = t1; - uint t2 = Pack.LE_To_UInt32(key, 8); W[0][2] = t2; - uint t3 = Pack.LE_To_UInt32(key, 12); W[0][3] = t3; - - for (int i = 1; i <= 10; ++i) - { - uint u = SubWord(Shift(t3, 8)) ^ rcon[i - 1]; - t0 ^= u; W[i][0] = t0; - t1 ^= t0; W[i][1] = t1; - t2 ^= t1; W[i][2] = t2; - t3 ^= t2; W[i][3] = t3; - } - - break; - } - case 6: - { - uint t0 = Pack.LE_To_UInt32(key, 0); W[0][0] = t0; - uint t1 = Pack.LE_To_UInt32(key, 4); W[0][1] = t1; - uint t2 = Pack.LE_To_UInt32(key, 8); W[0][2] = t2; - uint t3 = Pack.LE_To_UInt32(key, 12); W[0][3] = t3; - uint t4 = Pack.LE_To_UInt32(key, 16); W[1][0] = t4; - uint t5 = Pack.LE_To_UInt32(key, 20); W[1][1] = t5; - - uint rcon = 1; - uint u = SubWord(Shift(t5, 8)) ^ rcon; rcon <<= 1; - t0 ^= u; W[1][2] = t0; - t1 ^= t0; W[1][3] = t1; - t2 ^= t1; W[2][0] = t2; - t3 ^= t2; W[2][1] = t3; - t4 ^= t3; W[2][2] = t4; - t5 ^= t4; W[2][3] = t5; - - for (int i = 3; i < 12; i += 3) - { - u = SubWord(Shift(t5, 8)) ^ rcon; rcon <<= 1; - t0 ^= u; W[i ][0] = t0; - t1 ^= t0; W[i ][1] = t1; - t2 ^= t1; W[i ][2] = t2; - t3 ^= t2; W[i ][3] = t3; - t4 ^= t3; W[i + 1][0] = t4; - t5 ^= t4; W[i + 1][1] = t5; - u = SubWord(Shift(t5, 8)) ^ rcon; rcon <<= 1; - t0 ^= u; W[i + 1][2] = t0; - t1 ^= t0; W[i + 1][3] = t1; - t2 ^= t1; W[i + 2][0] = t2; - t3 ^= t2; W[i + 2][1] = t3; - t4 ^= t3; W[i + 2][2] = t4; - t5 ^= t4; W[i + 2][3] = t5; - } - - u = SubWord(Shift(t5, 8)) ^ rcon; - t0 ^= u; W[12][0] = t0; - t1 ^= t0; W[12][1] = t1; - t2 ^= t1; W[12][2] = t2; - t3 ^= t2; W[12][3] = t3; - - break; - } - case 8: - { - uint t0 = Pack.LE_To_UInt32(key, 0); W[0][0] = t0; - uint t1 = Pack.LE_To_UInt32(key, 4); W[0][1] = t1; - uint t2 = Pack.LE_To_UInt32(key, 8); W[0][2] = t2; - uint t3 = Pack.LE_To_UInt32(key, 12); W[0][3] = t3; - uint t4 = Pack.LE_To_UInt32(key, 16); W[1][0] = t4; - uint t5 = Pack.LE_To_UInt32(key, 20); W[1][1] = t5; - uint t6 = Pack.LE_To_UInt32(key, 24); W[1][2] = t6; - uint t7 = Pack.LE_To_UInt32(key, 28); W[1][3] = t7; - - uint u, rcon = 1; - - for (int i = 2; i < 14; i += 2) - { - u = SubWord(Shift(t7, 8)) ^ rcon; rcon <<= 1; - t0 ^= u; W[i ][0] = t0; - t1 ^= t0; W[i ][1] = t1; - t2 ^= t1; W[i ][2] = t2; - t3 ^= t2; W[i ][3] = t3; - u = SubWord(t3); - t4 ^= u; W[i + 1][0] = t4; - t5 ^= t4; W[i + 1][1] = t5; - t6 ^= t5; W[i + 1][2] = t6; - t7 ^= t6; W[i + 1][3] = t7; - } - - u = SubWord(Shift(t7, 8)) ^ rcon; - t0 ^= u; W[14][0] = t0; - t1 ^= t0; W[14][1] = t1; - t2 ^= t1; W[14][2] = t2; - t3 ^= t2; W[14][3] = t3; - - break; - } - default: - { - throw new InvalidOperationException("Should never get here"); - } - } - - if (!forEncryption) - { - for (int j = 1; j < ROUNDS; j++) - { - uint[] w = W[j]; - for (int i = 0; i < 4; i++) - { - w[i] = Inv_Mcol(w[i]); - } - } - } - - return W; - } - - private int ROUNDS; - private uint[][] WorkingKey; - private uint C0, C1, C2, C3; - private bool forEncryption; - - private const int BLOCK_SIZE = 16; - - /** - * default constructor - 128 bit block size. - */ - public AesLightEngine() - { - } - - /** - * initialise an AES cipher. - * - * @param forEncryption whether or not we are for encryption. - * @param parameters the parameters required to set up the cipher. - * @exception ArgumentException if the parameters argument is - * inappropriate. - */ - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - KeyParameter keyParameter = parameters as KeyParameter; - - if (keyParameter == null) - throw new ArgumentException("invalid parameter passed to AES init - " - + Platform.GetTypeName(parameters)); - - WorkingKey = GenerateWorkingKey(keyParameter.GetKey(), forEncryption); - - this.forEncryption = forEncryption; - } - - public virtual string AlgorithmName - { - get { return "AES"; } - } - - public virtual bool IsPartialBlockOkay - { - get { return false; } - } - - public virtual int GetBlockSize() - { - return BLOCK_SIZE; - } - - public virtual int ProcessBlock( - byte[] input, - int inOff, - byte[] output, - int outOff) - { - if (WorkingKey == null) - throw new InvalidOperationException("AES engine not initialised"); - - Check.DataLength(input, inOff, 16, "input buffer too short"); - Check.OutputLength(output, outOff, 16, "output buffer too short"); - - UnPackBlock(input, inOff); - - if (forEncryption) - { - EncryptBlock(WorkingKey); - } - else - { - DecryptBlock(WorkingKey); - } - - PackBlock(output, outOff); - - return BLOCK_SIZE; - } - - public virtual void Reset() - { - } - - private void UnPackBlock( - byte[] bytes, - int off) - { - C0 = Pack.LE_To_UInt32(bytes, off); - C1 = Pack.LE_To_UInt32(bytes, off + 4); - C2 = Pack.LE_To_UInt32(bytes, off + 8); - C3 = Pack.LE_To_UInt32(bytes, off + 12); - } - - private void PackBlock( - byte[] bytes, - int off) - { - Pack.UInt32_To_LE(C0, bytes, off); - Pack.UInt32_To_LE(C1, bytes, off + 4); - Pack.UInt32_To_LE(C2, bytes, off + 8); - Pack.UInt32_To_LE(C3, bytes, off + 12); - } - - private void EncryptBlock(uint[][] KW) - { - uint[] kw = KW[0]; - uint t0 = this.C0 ^ kw[0]; - uint t1 = this.C1 ^ kw[1]; - uint t2 = this.C2 ^ kw[2]; - - uint r0, r1, r2, r3 = this.C3 ^ kw[3]; - int r = 1; - while (r < ROUNDS - 1) - { - kw = KW[r++]; - r0 = Mcol((uint)S[t0 & 255] ^ (((uint)S[(t1 >> 8) & 255]) << 8) ^ (((uint)S[(t2 >> 16) & 255]) << 16) ^ (((uint)S[(r3 >> 24) & 255]) << 24)) ^ kw[0]; - r1 = Mcol((uint)S[t1 & 255] ^ (((uint)S[(t2 >> 8) & 255]) << 8) ^ (((uint)S[(r3 >> 16) & 255]) << 16) ^ (((uint)S[(t0 >> 24) & 255]) << 24)) ^ kw[1]; - r2 = Mcol((uint)S[t2 & 255] ^ (((uint)S[(r3 >> 8) & 255]) << 8) ^ (((uint)S[(t0 >> 16) & 255]) << 16) ^ (((uint)S[(t1 >> 24) & 255]) << 24)) ^ kw[2]; - r3 = Mcol((uint)S[r3 & 255] ^ (((uint)S[(t0 >> 8) & 255]) << 8) ^ (((uint)S[(t1 >> 16) & 255]) << 16) ^ (((uint)S[(t2 >> 24) & 255]) << 24)) ^ kw[3]; - kw = KW[r++]; - t0 = Mcol((uint)S[r0 & 255] ^ (((uint)S[(r1 >> 8) & 255]) << 8) ^ (((uint)S[(r2 >> 16) & 255]) << 16) ^ (((uint)S[(r3 >> 24) & 255]) << 24)) ^ kw[0]; - t1 = Mcol((uint)S[r1 & 255] ^ (((uint)S[(r2 >> 8) & 255]) << 8) ^ (((uint)S[(r3 >> 16) & 255]) << 16) ^ (((uint)S[(r0 >> 24) & 255]) << 24)) ^ kw[1]; - t2 = Mcol((uint)S[r2 & 255] ^ (((uint)S[(r3 >> 8) & 255]) << 8) ^ (((uint)S[(r0 >> 16) & 255]) << 16) ^ (((uint)S[(r1 >> 24) & 255]) << 24)) ^ kw[2]; - r3 = Mcol((uint)S[r3 & 255] ^ (((uint)S[(r0 >> 8) & 255]) << 8) ^ (((uint)S[(r1 >> 16) & 255]) << 16) ^ (((uint)S[(r2 >> 24) & 255]) << 24)) ^ kw[3]; - } - - kw = KW[r++]; - r0 = Mcol((uint)S[t0 & 255] ^ (((uint)S[(t1 >> 8) & 255]) << 8) ^ (((uint)S[(t2 >> 16) & 255]) << 16) ^ (((uint)S[(r3 >> 24) & 255]) << 24)) ^ kw[0]; - r1 = Mcol((uint)S[t1 & 255] ^ (((uint)S[(t2 >> 8) & 255]) << 8) ^ (((uint)S[(r3 >> 16) & 255]) << 16) ^ (((uint)S[(t0 >> 24) & 255]) << 24)) ^ kw[1]; - r2 = Mcol((uint)S[t2 & 255] ^ (((uint)S[(r3 >> 8) & 255]) << 8) ^ (((uint)S[(t0 >> 16) & 255]) << 16) ^ (((uint)S[(t1 >> 24) & 255]) << 24)) ^ kw[2]; - r3 = Mcol((uint)S[r3 & 255] ^ (((uint)S[(t0 >> 8) & 255]) << 8) ^ (((uint)S[(t1 >> 16) & 255]) << 16) ^ (((uint)S[(t2 >> 24) & 255]) << 24)) ^ kw[3]; - - // the final round is a simple function of S - - kw = KW[r]; - this.C0 = (uint)S[r0 & 255] ^ (((uint)S[(r1 >> 8) & 255]) << 8) ^ (((uint)S[(r2 >> 16) & 255]) << 16) ^ (((uint)S[(r3 >> 24) & 255]) << 24) ^ kw[0]; - this.C1 = (uint)S[r1 & 255] ^ (((uint)S[(r2 >> 8) & 255]) << 8) ^ (((uint)S[(r3 >> 16) & 255]) << 16) ^ (((uint)S[(r0 >> 24) & 255]) << 24) ^ kw[1]; - this.C2 = (uint)S[r2 & 255] ^ (((uint)S[(r3 >> 8) & 255]) << 8) ^ (((uint)S[(r0 >> 16) & 255]) << 16) ^ (((uint)S[(r1 >> 24) & 255]) << 24) ^ kw[2]; - this.C3 = (uint)S[r3 & 255] ^ (((uint)S[(r0 >> 8) & 255]) << 8) ^ (((uint)S[(r1 >> 16) & 255]) << 16) ^ (((uint)S[(r2 >> 24) & 255]) << 24) ^ kw[3]; - } - - private void DecryptBlock(uint[][] KW) - { - uint[] kw = KW[ROUNDS]; - uint t0 = this.C0 ^ kw[0]; - uint t1 = this.C1 ^ kw[1]; - uint t2 = this.C2 ^ kw[2]; - - uint r0, r1, r2, r3 = this.C3 ^ kw[3]; - int r = ROUNDS - 1; - while (r > 1) - { - kw = KW[r--]; - r0 = Inv_Mcol((uint)Si[t0 & 255] ^ (((uint)Si[(r3 >> 8) & 255]) << 8) ^ (((uint)Si[(t2 >> 16) & 255]) << 16) ^ ((uint)Si[(t1 >> 24) & 255] << 24)) ^ kw[0]; - r1 = Inv_Mcol((uint)Si[t1 & 255] ^ (((uint)Si[(t0 >> 8) & 255]) << 8) ^ (((uint)Si[(r3 >> 16) & 255]) << 16) ^ ((uint)Si[(t2 >> 24) & 255] << 24)) ^ kw[1]; - r2 = Inv_Mcol((uint)Si[t2 & 255] ^ (((uint)Si[(t1 >> 8) & 255]) << 8) ^ (((uint)Si[(t0 >> 16) & 255]) << 16) ^ ((uint)Si[(r3 >> 24) & 255] << 24)) ^ kw[2]; - r3 = Inv_Mcol((uint)Si[r3 & 255] ^ (((uint)Si[(t2 >> 8) & 255]) << 8) ^ (((uint)Si[(t1 >> 16) & 255]) << 16) ^ ((uint)Si[(t0 >> 24) & 255] << 24)) ^ kw[3]; - kw = KW[r--]; - t0 = Inv_Mcol((uint)Si[r0 & 255] ^ (((uint)Si[(r3 >> 8) & 255]) << 8) ^ (((uint)Si[(r2 >> 16) & 255]) << 16) ^ ((uint)Si[(r1 >> 24) & 255] << 24)) ^ kw[0]; - t1 = Inv_Mcol((uint)Si[r1 & 255] ^ (((uint)Si[(r0 >> 8) & 255]) << 8) ^ (((uint)Si[(r3 >> 16) & 255]) << 16) ^ ((uint)Si[(r2 >> 24) & 255] << 24)) ^ kw[1]; - t2 = Inv_Mcol((uint)Si[r2 & 255] ^ (((uint)Si[(r1 >> 8) & 255]) << 8) ^ (((uint)Si[(r0 >> 16) & 255]) << 16) ^ ((uint)Si[(r3 >> 24) & 255] << 24)) ^ kw[2]; - r3 = Inv_Mcol((uint)Si[r3 & 255] ^ (((uint)Si[(r2 >> 8) & 255]) << 8) ^ (((uint)Si[(r1 >> 16) & 255]) << 16) ^ ((uint)Si[(r0 >> 24) & 255] << 24)) ^ kw[3]; - } - - kw = KW[1]; - r0 = Inv_Mcol((uint)Si[t0 & 255] ^ (((uint)Si[(r3 >> 8) & 255]) << 8) ^ (((uint)Si[(t2 >> 16) & 255]) << 16) ^ ((uint)Si[(t1 >> 24) & 255] << 24)) ^ kw[0]; - r1 = Inv_Mcol((uint)Si[t1 & 255] ^ (((uint)Si[(t0 >> 8) & 255]) << 8) ^ (((uint)Si[(r3 >> 16) & 255]) << 16) ^ ((uint)Si[(t2 >> 24) & 255] << 24)) ^ kw[1]; - r2 = Inv_Mcol((uint)Si[t2 & 255] ^ (((uint)Si[(t1 >> 8) & 255]) << 8) ^ (((uint)Si[(t0 >> 16) & 255]) << 16) ^ ((uint)Si[(r3 >> 24) & 255] << 24)) ^ kw[2]; - r3 = Inv_Mcol((uint)Si[r3 & 255] ^ (((uint)Si[(t2 >> 8) & 255]) << 8) ^ (((uint)Si[(t1 >> 16) & 255]) << 16) ^ ((uint)Si[(t0 >> 24) & 255] << 24)) ^ kw[3]; - - // the final round's table is a simple function of Si - - kw = KW[0]; - this.C0 = (uint)Si[r0 & 255] ^ (((uint)Si[(r3 >> 8) & 255]) << 8) ^ (((uint)Si[(r2 >> 16) & 255]) << 16) ^ (((uint)Si[(r1 >> 24) & 255]) << 24) ^ kw[0]; - this.C1 = (uint)Si[r1 & 255] ^ (((uint)Si[(r0 >> 8) & 255]) << 8) ^ (((uint)Si[(r3 >> 16) & 255]) << 16) ^ (((uint)Si[(r2 >> 24) & 255]) << 24) ^ kw[1]; - this.C2 = (uint)Si[r2 & 255] ^ (((uint)Si[(r1 >> 8) & 255]) << 8) ^ (((uint)Si[(r0 >> 16) & 255]) << 16) ^ (((uint)Si[(r3 >> 24) & 255]) << 24) ^ kw[2]; - this.C3 = (uint)Si[r3 & 255] ^ (((uint)Si[(r2 >> 8) & 255]) << 8) ^ (((uint)Si[(r1 >> 16) & 255]) << 16) ^ (((uint)Si[(r0 >> 24) & 255]) << 24) ^ kw[3]; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/AesWrapEngine.cs b/bc-sharp-crypto/src/crypto/engines/AesWrapEngine.cs deleted file mode 100644 index 1ce0154..0000000 --- a/bc-sharp-crypto/src/crypto/engines/AesWrapEngine.cs +++ /dev/null @@ -1,16 +0,0 @@ -namespace Org.BouncyCastle.Crypto.Engines -{ - /// - /// An implementation of the AES Key Wrapper from the NIST Key Wrap Specification. - ///

- /// For further details see: http://csrc.nist.gov/encryption/kms/key-wrap.pdf. - /// - public class AesWrapEngine - : Rfc3394WrapEngine - { - public AesWrapEngine() - : base(new AesEngine()) - { - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/BlowfishEngine.cs b/bc-sharp-crypto/src/crypto/engines/BlowfishEngine.cs deleted file mode 100644 index e38f4e8..0000000 --- a/bc-sharp-crypto/src/crypto/engines/BlowfishEngine.cs +++ /dev/null @@ -1,553 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * A class that provides Blowfish key encryption operations, - * such as encoding data and generating keys. - * All the algorithms herein are from Applied Cryptography - * and implement a simplified cryptography interface. - */ - public sealed class BlowfishEngine - : IBlockCipher - { - private readonly static uint[] KP = - { - 0x243F6A88, 0x85A308D3, 0x13198A2E, 0x03707344, - 0xA4093822, 0x299F31D0, 0x082EFA98, 0xEC4E6C89, - 0x452821E6, 0x38D01377, 0xBE5466CF, 0x34E90C6C, - 0xC0AC29B7, 0xC97C50DD, 0x3F84D5B5, 0xB5470917, - 0x9216D5D9, 0x8979FB1B - }, - KS0 = - { - 0xD1310BA6, 0x98DFB5AC, 0x2FFD72DB, 0xD01ADFB7, - 0xB8E1AFED, 0x6A267E96, 0xBA7C9045, 0xF12C7F99, - 0x24A19947, 0xB3916CF7, 0x0801F2E2, 0x858EFC16, - 0x636920D8, 0x71574E69, 0xA458FEA3, 0xF4933D7E, - 0x0D95748F, 0x728EB658, 0x718BCD58, 0x82154AEE, - 0x7B54A41D, 0xC25A59B5, 0x9C30D539, 0x2AF26013, - 0xC5D1B023, 0x286085F0, 0xCA417918, 0xB8DB38EF, - 0x8E79DCB0, 0x603A180E, 0x6C9E0E8B, 0xB01E8A3E, - 0xD71577C1, 0xBD314B27, 0x78AF2FDA, 0x55605C60, - 0xE65525F3, 0xAA55AB94, 0x57489862, 0x63E81440, - 0x55CA396A, 0x2AAB10B6, 0xB4CC5C34, 0x1141E8CE, - 0xA15486AF, 0x7C72E993, 0xB3EE1411, 0x636FBC2A, - 0x2BA9C55D, 0x741831F6, 0xCE5C3E16, 0x9B87931E, - 0xAFD6BA33, 0x6C24CF5C, 0x7A325381, 0x28958677, - 0x3B8F4898, 0x6B4BB9AF, 0xC4BFE81B, 0x66282193, - 0x61D809CC, 0xFB21A991, 0x487CAC60, 0x5DEC8032, - 0xEF845D5D, 0xE98575B1, 0xDC262302, 0xEB651B88, - 0x23893E81, 0xD396ACC5, 0x0F6D6FF3, 0x83F44239, - 0x2E0B4482, 0xA4842004, 0x69C8F04A, 0x9E1F9B5E, - 0x21C66842, 0xF6E96C9A, 0x670C9C61, 0xABD388F0, - 0x6A51A0D2, 0xD8542F68, 0x960FA728, 0xAB5133A3, - 0x6EEF0B6C, 0x137A3BE4, 0xBA3BF050, 0x7EFB2A98, - 0xA1F1651D, 0x39AF0176, 0x66CA593E, 0x82430E88, - 0x8CEE8619, 0x456F9FB4, 0x7D84A5C3, 0x3B8B5EBE, - 0xE06F75D8, 0x85C12073, 0x401A449F, 0x56C16AA6, - 0x4ED3AA62, 0x363F7706, 0x1BFEDF72, 0x429B023D, - 0x37D0D724, 0xD00A1248, 0xDB0FEAD3, 0x49F1C09B, - 0x075372C9, 0x80991B7B, 0x25D479D8, 0xF6E8DEF7, - 0xE3FE501A, 0xB6794C3B, 0x976CE0BD, 0x04C006BA, - 0xC1A94FB6, 0x409F60C4, 0x5E5C9EC2, 0x196A2463, - 0x68FB6FAF, 0x3E6C53B5, 0x1339B2EB, 0x3B52EC6F, - 0x6DFC511F, 0x9B30952C, 0xCC814544, 0xAF5EBD09, - 0xBEE3D004, 0xDE334AFD, 0x660F2807, 0x192E4BB3, - 0xC0CBA857, 0x45C8740F, 0xD20B5F39, 0xB9D3FBDB, - 0x5579C0BD, 0x1A60320A, 0xD6A100C6, 0x402C7279, - 0x679F25FE, 0xFB1FA3CC, 0x8EA5E9F8, 0xDB3222F8, - 0x3C7516DF, 0xFD616B15, 0x2F501EC8, 0xAD0552AB, - 0x323DB5FA, 0xFD238760, 0x53317B48, 0x3E00DF82, - 0x9E5C57BB, 0xCA6F8CA0, 0x1A87562E, 0xDF1769DB, - 0xD542A8F6, 0x287EFFC3, 0xAC6732C6, 0x8C4F5573, - 0x695B27B0, 0xBBCA58C8, 0xE1FFA35D, 0xB8F011A0, - 0x10FA3D98, 0xFD2183B8, 0x4AFCB56C, 0x2DD1D35B, - 0x9A53E479, 0xB6F84565, 0xD28E49BC, 0x4BFB9790, - 0xE1DDF2DA, 0xA4CB7E33, 0x62FB1341, 0xCEE4C6E8, - 0xEF20CADA, 0x36774C01, 0xD07E9EFE, 0x2BF11FB4, - 0x95DBDA4D, 0xAE909198, 0xEAAD8E71, 0x6B93D5A0, - 0xD08ED1D0, 0xAFC725E0, 0x8E3C5B2F, 0x8E7594B7, - 0x8FF6E2FB, 0xF2122B64, 0x8888B812, 0x900DF01C, - 0x4FAD5EA0, 0x688FC31C, 0xD1CFF191, 0xB3A8C1AD, - 0x2F2F2218, 0xBE0E1777, 0xEA752DFE, 0x8B021FA1, - 0xE5A0CC0F, 0xB56F74E8, 0x18ACF3D6, 0xCE89E299, - 0xB4A84FE0, 0xFD13E0B7, 0x7CC43B81, 0xD2ADA8D9, - 0x165FA266, 0x80957705, 0x93CC7314, 0x211A1477, - 0xE6AD2065, 0x77B5FA86, 0xC75442F5, 0xFB9D35CF, - 0xEBCDAF0C, 0x7B3E89A0, 0xD6411BD3, 0xAE1E7E49, - 0x00250E2D, 0x2071B35E, 0x226800BB, 0x57B8E0AF, - 0x2464369B, 0xF009B91E, 0x5563911D, 0x59DFA6AA, - 0x78C14389, 0xD95A537F, 0x207D5BA2, 0x02E5B9C5, - 0x83260376, 0x6295CFA9, 0x11C81968, 0x4E734A41, - 0xB3472DCA, 0x7B14A94A, 0x1B510052, 0x9A532915, - 0xD60F573F, 0xBC9BC6E4, 0x2B60A476, 0x81E67400, - 0x08BA6FB5, 0x571BE91F, 0xF296EC6B, 0x2A0DD915, - 0xB6636521, 0xE7B9F9B6, 0xFF34052E, 0xC5855664, - 0x53B02D5D, 0xA99F8FA1, 0x08BA4799, 0x6E85076A - }, - KS1 = - { - 0x4B7A70E9, 0xB5B32944, 0xDB75092E, 0xC4192623, - 0xAD6EA6B0, 0x49A7DF7D, 0x9CEE60B8, 0x8FEDB266, - 0xECAA8C71, 0x699A17FF, 0x5664526C, 0xC2B19EE1, - 0x193602A5, 0x75094C29, 0xA0591340, 0xE4183A3E, - 0x3F54989A, 0x5B429D65, 0x6B8FE4D6, 0x99F73FD6, - 0xA1D29C07, 0xEFE830F5, 0x4D2D38E6, 0xF0255DC1, - 0x4CDD2086, 0x8470EB26, 0x6382E9C6, 0x021ECC5E, - 0x09686B3F, 0x3EBAEFC9, 0x3C971814, 0x6B6A70A1, - 0x687F3584, 0x52A0E286, 0xB79C5305, 0xAA500737, - 0x3E07841C, 0x7FDEAE5C, 0x8E7D44EC, 0x5716F2B8, - 0xB03ADA37, 0xF0500C0D, 0xF01C1F04, 0x0200B3FF, - 0xAE0CF51A, 0x3CB574B2, 0x25837A58, 0xDC0921BD, - 0xD19113F9, 0x7CA92FF6, 0x94324773, 0x22F54701, - 0x3AE5E581, 0x37C2DADC, 0xC8B57634, 0x9AF3DDA7, - 0xA9446146, 0x0FD0030E, 0xECC8C73E, 0xA4751E41, - 0xE238CD99, 0x3BEA0E2F, 0x3280BBA1, 0x183EB331, - 0x4E548B38, 0x4F6DB908, 0x6F420D03, 0xF60A04BF, - 0x2CB81290, 0x24977C79, 0x5679B072, 0xBCAF89AF, - 0xDE9A771F, 0xD9930810, 0xB38BAE12, 0xDCCF3F2E, - 0x5512721F, 0x2E6B7124, 0x501ADDE6, 0x9F84CD87, - 0x7A584718, 0x7408DA17, 0xBC9F9ABC, 0xE94B7D8C, - 0xEC7AEC3A, 0xDB851DFA, 0x63094366, 0xC464C3D2, - 0xEF1C1847, 0x3215D908, 0xDD433B37, 0x24C2BA16, - 0x12A14D43, 0x2A65C451, 0x50940002, 0x133AE4DD, - 0x71DFF89E, 0x10314E55, 0x81AC77D6, 0x5F11199B, - 0x043556F1, 0xD7A3C76B, 0x3C11183B, 0x5924A509, - 0xF28FE6ED, 0x97F1FBFA, 0x9EBABF2C, 0x1E153C6E, - 0x86E34570, 0xEAE96FB1, 0x860E5E0A, 0x5A3E2AB3, - 0x771FE71C, 0x4E3D06FA, 0x2965DCB9, 0x99E71D0F, - 0x803E89D6, 0x5266C825, 0x2E4CC978, 0x9C10B36A, - 0xC6150EBA, 0x94E2EA78, 0xA5FC3C53, 0x1E0A2DF4, - 0xF2F74EA7, 0x361D2B3D, 0x1939260F, 0x19C27960, - 0x5223A708, 0xF71312B6, 0xEBADFE6E, 0xEAC31F66, - 0xE3BC4595, 0xA67BC883, 0xB17F37D1, 0x018CFF28, - 0xC332DDEF, 0xBE6C5AA5, 0x65582185, 0x68AB9802, - 0xEECEA50F, 0xDB2F953B, 0x2AEF7DAD, 0x5B6E2F84, - 0x1521B628, 0x29076170, 0xECDD4775, 0x619F1510, - 0x13CCA830, 0xEB61BD96, 0x0334FE1E, 0xAA0363CF, - 0xB5735C90, 0x4C70A239, 0xD59E9E0B, 0xCBAADE14, - 0xEECC86BC, 0x60622CA7, 0x9CAB5CAB, 0xB2F3846E, - 0x648B1EAF, 0x19BDF0CA, 0xA02369B9, 0x655ABB50, - 0x40685A32, 0x3C2AB4B3, 0x319EE9D5, 0xC021B8F7, - 0x9B540B19, 0x875FA099, 0x95F7997E, 0x623D7DA8, - 0xF837889A, 0x97E32D77, 0x11ED935F, 0x16681281, - 0x0E358829, 0xC7E61FD6, 0x96DEDFA1, 0x7858BA99, - 0x57F584A5, 0x1B227263, 0x9B83C3FF, 0x1AC24696, - 0xCDB30AEB, 0x532E3054, 0x8FD948E4, 0x6DBC3128, - 0x58EBF2EF, 0x34C6FFEA, 0xFE28ED61, 0xEE7C3C73, - 0x5D4A14D9, 0xE864B7E3, 0x42105D14, 0x203E13E0, - 0x45EEE2B6, 0xA3AAABEA, 0xDB6C4F15, 0xFACB4FD0, - 0xC742F442, 0xEF6ABBB5, 0x654F3B1D, 0x41CD2105, - 0xD81E799E, 0x86854DC7, 0xE44B476A, 0x3D816250, - 0xCF62A1F2, 0x5B8D2646, 0xFC8883A0, 0xC1C7B6A3, - 0x7F1524C3, 0x69CB7492, 0x47848A0B, 0x5692B285, - 0x095BBF00, 0xAD19489D, 0x1462B174, 0x23820E00, - 0x58428D2A, 0x0C55F5EA, 0x1DADF43E, 0x233F7061, - 0x3372F092, 0x8D937E41, 0xD65FECF1, 0x6C223BDB, - 0x7CDE3759, 0xCBEE7460, 0x4085F2A7, 0xCE77326E, - 0xA6078084, 0x19F8509E, 0xE8EFD855, 0x61D99735, - 0xA969A7AA, 0xC50C06C2, 0x5A04ABFC, 0x800BCADC, - 0x9E447A2E, 0xC3453484, 0xFDD56705, 0x0E1E9EC9, - 0xDB73DBD3, 0x105588CD, 0x675FDA79, 0xE3674340, - 0xC5C43465, 0x713E38D8, 0x3D28F89E, 0xF16DFF20, - 0x153E21E7, 0x8FB03D4A, 0xE6E39F2B, 0xDB83ADF7 - }, - KS2 = - { - 0xE93D5A68, 0x948140F7, 0xF64C261C, 0x94692934, - 0x411520F7, 0x7602D4F7, 0xBCF46B2E, 0xD4A20068, - 0xD4082471, 0x3320F46A, 0x43B7D4B7, 0x500061AF, - 0x1E39F62E, 0x97244546, 0x14214F74, 0xBF8B8840, - 0x4D95FC1D, 0x96B591AF, 0x70F4DDD3, 0x66A02F45, - 0xBFBC09EC, 0x03BD9785, 0x7FAC6DD0, 0x31CB8504, - 0x96EB27B3, 0x55FD3941, 0xDA2547E6, 0xABCA0A9A, - 0x28507825, 0x530429F4, 0x0A2C86DA, 0xE9B66DFB, - 0x68DC1462, 0xD7486900, 0x680EC0A4, 0x27A18DEE, - 0x4F3FFEA2, 0xE887AD8C, 0xB58CE006, 0x7AF4D6B6, - 0xAACE1E7C, 0xD3375FEC, 0xCE78A399, 0x406B2A42, - 0x20FE9E35, 0xD9F385B9, 0xEE39D7AB, 0x3B124E8B, - 0x1DC9FAF7, 0x4B6D1856, 0x26A36631, 0xEAE397B2, - 0x3A6EFA74, 0xDD5B4332, 0x6841E7F7, 0xCA7820FB, - 0xFB0AF54E, 0xD8FEB397, 0x454056AC, 0xBA489527, - 0x55533A3A, 0x20838D87, 0xFE6BA9B7, 0xD096954B, - 0x55A867BC, 0xA1159A58, 0xCCA92963, 0x99E1DB33, - 0xA62A4A56, 0x3F3125F9, 0x5EF47E1C, 0x9029317C, - 0xFDF8E802, 0x04272F70, 0x80BB155C, 0x05282CE3, - 0x95C11548, 0xE4C66D22, 0x48C1133F, 0xC70F86DC, - 0x07F9C9EE, 0x41041F0F, 0x404779A4, 0x5D886E17, - 0x325F51EB, 0xD59BC0D1, 0xF2BCC18F, 0x41113564, - 0x257B7834, 0x602A9C60, 0xDFF8E8A3, 0x1F636C1B, - 0x0E12B4C2, 0x02E1329E, 0xAF664FD1, 0xCAD18115, - 0x6B2395E0, 0x333E92E1, 0x3B240B62, 0xEEBEB922, - 0x85B2A20E, 0xE6BA0D99, 0xDE720C8C, 0x2DA2F728, - 0xD0127845, 0x95B794FD, 0x647D0862, 0xE7CCF5F0, - 0x5449A36F, 0x877D48FA, 0xC39DFD27, 0xF33E8D1E, - 0x0A476341, 0x992EFF74, 0x3A6F6EAB, 0xF4F8FD37, - 0xA812DC60, 0xA1EBDDF8, 0x991BE14C, 0xDB6E6B0D, - 0xC67B5510, 0x6D672C37, 0x2765D43B, 0xDCD0E804, - 0xF1290DC7, 0xCC00FFA3, 0xB5390F92, 0x690FED0B, - 0x667B9FFB, 0xCEDB7D9C, 0xA091CF0B, 0xD9155EA3, - 0xBB132F88, 0x515BAD24, 0x7B9479BF, 0x763BD6EB, - 0x37392EB3, 0xCC115979, 0x8026E297, 0xF42E312D, - 0x6842ADA7, 0xC66A2B3B, 0x12754CCC, 0x782EF11C, - 0x6A124237, 0xB79251E7, 0x06A1BBE6, 0x4BFB6350, - 0x1A6B1018, 0x11CAEDFA, 0x3D25BDD8, 0xE2E1C3C9, - 0x44421659, 0x0A121386, 0xD90CEC6E, 0xD5ABEA2A, - 0x64AF674E, 0xDA86A85F, 0xBEBFE988, 0x64E4C3FE, - 0x9DBC8057, 0xF0F7C086, 0x60787BF8, 0x6003604D, - 0xD1FD8346, 0xF6381FB0, 0x7745AE04, 0xD736FCCC, - 0x83426B33, 0xF01EAB71, 0xB0804187, 0x3C005E5F, - 0x77A057BE, 0xBDE8AE24, 0x55464299, 0xBF582E61, - 0x4E58F48F, 0xF2DDFDA2, 0xF474EF38, 0x8789BDC2, - 0x5366F9C3, 0xC8B38E74, 0xB475F255, 0x46FCD9B9, - 0x7AEB2661, 0x8B1DDF84, 0x846A0E79, 0x915F95E2, - 0x466E598E, 0x20B45770, 0x8CD55591, 0xC902DE4C, - 0xB90BACE1, 0xBB8205D0, 0x11A86248, 0x7574A99E, - 0xB77F19B6, 0xE0A9DC09, 0x662D09A1, 0xC4324633, - 0xE85A1F02, 0x09F0BE8C, 0x4A99A025, 0x1D6EFE10, - 0x1AB93D1D, 0x0BA5A4DF, 0xA186F20F, 0x2868F169, - 0xDCB7DA83, 0x573906FE, 0xA1E2CE9B, 0x4FCD7F52, - 0x50115E01, 0xA70683FA, 0xA002B5C4, 0x0DE6D027, - 0x9AF88C27, 0x773F8641, 0xC3604C06, 0x61A806B5, - 0xF0177A28, 0xC0F586E0, 0x006058AA, 0x30DC7D62, - 0x11E69ED7, 0x2338EA63, 0x53C2DD94, 0xC2C21634, - 0xBBCBEE56, 0x90BCB6DE, 0xEBFC7DA1, 0xCE591D76, - 0x6F05E409, 0x4B7C0188, 0x39720A3D, 0x7C927C24, - 0x86E3725F, 0x724D9DB9, 0x1AC15BB4, 0xD39EB8FC, - 0xED545578, 0x08FCA5B5, 0xD83D7CD3, 0x4DAD0FC4, - 0x1E50EF5E, 0xB161E6F8, 0xA28514D9, 0x6C51133C, - 0x6FD5C7E7, 0x56E14EC4, 0x362ABFCE, 0xDDC6C837, - 0xD79A3234, 0x92638212, 0x670EFA8E, 0x406000E0 - }, - KS3 = - { - 0x3A39CE37, 0xD3FAF5CF, 0xABC27737, 0x5AC52D1B, - 0x5CB0679E, 0x4FA33742, 0xD3822740, 0x99BC9BBE, - 0xD5118E9D, 0xBF0F7315, 0xD62D1C7E, 0xC700C47B, - 0xB78C1B6B, 0x21A19045, 0xB26EB1BE, 0x6A366EB4, - 0x5748AB2F, 0xBC946E79, 0xC6A376D2, 0x6549C2C8, - 0x530FF8EE, 0x468DDE7D, 0xD5730A1D, 0x4CD04DC6, - 0x2939BBDB, 0xA9BA4650, 0xAC9526E8, 0xBE5EE304, - 0xA1FAD5F0, 0x6A2D519A, 0x63EF8CE2, 0x9A86EE22, - 0xC089C2B8, 0x43242EF6, 0xA51E03AA, 0x9CF2D0A4, - 0x83C061BA, 0x9BE96A4D, 0x8FE51550, 0xBA645BD6, - 0x2826A2F9, 0xA73A3AE1, 0x4BA99586, 0xEF5562E9, - 0xC72FEFD3, 0xF752F7DA, 0x3F046F69, 0x77FA0A59, - 0x80E4A915, 0x87B08601, 0x9B09E6AD, 0x3B3EE593, - 0xE990FD5A, 0x9E34D797, 0x2CF0B7D9, 0x022B8B51, - 0x96D5AC3A, 0x017DA67D, 0xD1CF3ED6, 0x7C7D2D28, - 0x1F9F25CF, 0xADF2B89B, 0x5AD6B472, 0x5A88F54C, - 0xE029AC71, 0xE019A5E6, 0x47B0ACFD, 0xED93FA9B, - 0xE8D3C48D, 0x283B57CC, 0xF8D56629, 0x79132E28, - 0x785F0191, 0xED756055, 0xF7960E44, 0xE3D35E8C, - 0x15056DD4, 0x88F46DBA, 0x03A16125, 0x0564F0BD, - 0xC3EB9E15, 0x3C9057A2, 0x97271AEC, 0xA93A072A, - 0x1B3F6D9B, 0x1E6321F5, 0xF59C66FB, 0x26DCF319, - 0x7533D928, 0xB155FDF5, 0x03563482, 0x8ABA3CBB, - 0x28517711, 0xC20AD9F8, 0xABCC5167, 0xCCAD925F, - 0x4DE81751, 0x3830DC8E, 0x379D5862, 0x9320F991, - 0xEA7A90C2, 0xFB3E7BCE, 0x5121CE64, 0x774FBE32, - 0xA8B6E37E, 0xC3293D46, 0x48DE5369, 0x6413E680, - 0xA2AE0810, 0xDD6DB224, 0x69852DFD, 0x09072166, - 0xB39A460A, 0x6445C0DD, 0x586CDECF, 0x1C20C8AE, - 0x5BBEF7DD, 0x1B588D40, 0xCCD2017F, 0x6BB4E3BB, - 0xDDA26A7E, 0x3A59FF45, 0x3E350A44, 0xBCB4CDD5, - 0x72EACEA8, 0xFA6484BB, 0x8D6612AE, 0xBF3C6F47, - 0xD29BE463, 0x542F5D9E, 0xAEC2771B, 0xF64E6370, - 0x740E0D8D, 0xE75B1357, 0xF8721671, 0xAF537D5D, - 0x4040CB08, 0x4EB4E2CC, 0x34D2466A, 0x0115AF84, - 0xE1B00428, 0x95983A1D, 0x06B89FB4, 0xCE6EA048, - 0x6F3F3B82, 0x3520AB82, 0x011A1D4B, 0x277227F8, - 0x611560B1, 0xE7933FDC, 0xBB3A792B, 0x344525BD, - 0xA08839E1, 0x51CE794B, 0x2F32C9B7, 0xA01FBAC9, - 0xE01CC87E, 0xBCC7D1F6, 0xCF0111C3, 0xA1E8AAC7, - 0x1A908749, 0xD44FBD9A, 0xD0DADECB, 0xD50ADA38, - 0x0339C32A, 0xC6913667, 0x8DF9317C, 0xE0B12B4F, - 0xF79E59B7, 0x43F5BB3A, 0xF2D519FF, 0x27D9459C, - 0xBF97222C, 0x15E6FC2A, 0x0F91FC71, 0x9B941525, - 0xFAE59361, 0xCEB69CEB, 0xC2A86459, 0x12BAA8D1, - 0xB6C1075E, 0xE3056A0C, 0x10D25065, 0xCB03A442, - 0xE0EC6E0E, 0x1698DB3B, 0x4C98A0BE, 0x3278E964, - 0x9F1F9532, 0xE0D392DF, 0xD3A0342B, 0x8971F21E, - 0x1B0A7441, 0x4BA3348C, 0xC5BE7120, 0xC37632D8, - 0xDF359F8D, 0x9B992F2E, 0xE60B6F47, 0x0FE3F11D, - 0xE54CDA54, 0x1EDAD891, 0xCE6279CF, 0xCD3E7E6F, - 0x1618B166, 0xFD2C1D05, 0x848FD2C5, 0xF6FB2299, - 0xF523F357, 0xA6327623, 0x93A83531, 0x56CCCD02, - 0xACF08162, 0x5A75EBB5, 0x6E163697, 0x88D273CC, - 0xDE966292, 0x81B949D0, 0x4C50901B, 0x71C65614, - 0xE6C6C7BD, 0x327A140A, 0x45E1D006, 0xC3F27B9A, - 0xC9AA53FD, 0x62A80F00, 0xBB25BFE2, 0x35BDD2F6, - 0x71126905, 0xB2040222, 0xB6CBCF7C, 0xCD769C2B, - 0x53113EC0, 0x1640E3D3, 0x38ABBD60, 0x2547ADF0, - 0xBA38209C, 0xF746CE76, 0x77AFA1C5, 0x20756060, - 0x85CBFE4E, 0x8AE88DD8, 0x7AAAF9B0, 0x4CF9AA7E, - 0x1948C25C, 0x02FB8A8C, 0x01C36AE4, 0xD6EBE1F9, - 0x90D4F869, 0xA65CDEA0, 0x3F09252D, 0xC208E69F, - 0xB74E6132, 0xCE77E25B, 0x578FDFE3, 0x3AC372E6 - }; - - //==================================== - // Useful constants - //==================================== - - private static readonly int ROUNDS = 16; - private const int BLOCK_SIZE = 8; // bytes = 64 bits - private static readonly int SBOX_SK = 256; - private static readonly int P_SZ = ROUNDS+2; - - private readonly uint[] S0, S1, S2, S3; // the s-boxes - private readonly uint[] P; // the p-array - - private bool encrypting; - - private byte[] workingKey; - - public BlowfishEngine() - { - S0 = new uint[SBOX_SK]; - S1 = new uint[SBOX_SK]; - S2 = new uint[SBOX_SK]; - S3 = new uint[SBOX_SK]; - P = new uint[P_SZ]; - } - - /** - * initialise a Blowfish cipher. - * - * @param forEncryption whether or not we are for encryption. - * @param parameters the parameters required to set up the cipher. - * @exception ArgumentException if the parameters argument is - * inappropriate. - */ - public void Init( - bool forEncryption, - ICipherParameters parameters) - { - if (!(parameters is KeyParameter)) - throw new ArgumentException("invalid parameter passed to Blowfish init - " + Platform.GetTypeName(parameters)); - - this.encrypting = forEncryption; - this.workingKey = ((KeyParameter)parameters).GetKey(); - SetKey(this.workingKey); - } - - public string AlgorithmName - { - get { return "Blowfish"; } - } - - public bool IsPartialBlockOkay - { - get { return false; } - } - - public int ProcessBlock( - byte[] input, - int inOff, - byte[] output, - int outOff) - { - if (workingKey == null) - throw new InvalidOperationException("Blowfish not initialised"); - - Check.DataLength(input, inOff, BLOCK_SIZE, "input buffer too short"); - Check.OutputLength(output, outOff, BLOCK_SIZE, "output buffer too short"); - - if (encrypting) - { - EncryptBlock(input, inOff, output, outOff); - } - else - { - DecryptBlock(input, inOff, output, outOff); - } - - return BLOCK_SIZE; - } - - public void Reset() - { - } - - public int GetBlockSize() - { - return BLOCK_SIZE; - } - - //================================== - // Private Implementation - //================================== - - private uint F(uint x) - { - return (((S0[x >> 24] + S1[(x >> 16) & 0xff]) ^ S2[(x >> 8) & 0xff]) + S3[x & 0xff]); - } - - /** - * apply the encryption cycle to each value pair in the table. - */ - private void ProcessTable( - uint xl, - uint xr, - uint[] table) - { - int size = table.Length; - - for (int s = 0; s < size; s += 2) - { - xl ^= P[0]; - - for (int i = 1; i < ROUNDS; i += 2) - { - xr ^= F(xl) ^ P[i]; - xl ^= F(xr) ^ P[i + 1]; - } - - xr ^= P[ROUNDS + 1]; - - table[s] = xr; - table[s + 1] = xl; - - xr = xl; // end of cycle swap - xl = table[s]; - } - } - - private void SetKey(byte[] key) - { - /* - * - comments are from _Applied Crypto_, Schneier, p338 - * please be careful comparing the two, AC numbers the - * arrays from 1, the enclosed code from 0. - * - * (1) - * Initialise the S-boxes and the P-array, with a fixed string - * This string contains the hexadecimal digits of pi (3.141...) - */ - Array.Copy(KS0, 0, S0, 0, SBOX_SK); - Array.Copy(KS1, 0, S1, 0, SBOX_SK); - Array.Copy(KS2, 0, S2, 0, SBOX_SK); - Array.Copy(KS3, 0, S3, 0, SBOX_SK); - - Array.Copy(KP, 0, P, 0, P_SZ); - - /* - * (2) - * Now, XOR P[0] with the first 32 bits of the key, XOR P[1] with the - * second 32-bits of the key, and so on for all bits of the key - * (up to P[17]). Repeatedly cycle through the key bits until the - * entire P-array has been XOR-ed with the key bits - */ - int keyLength = key.Length; - int keyIndex = 0; - - for (int i=0; i < P_SZ; i++) - { - // Get the 32 bits of the key, in 4 * 8 bit chunks - uint data = 0x0000000; - for (int j=0; j < 4; j++) - { - // create a 32 bit block - data = (data << 8) | (uint)key[keyIndex++]; - - // wrap when we get to the end of the key - if (keyIndex >= keyLength) - { - keyIndex = 0; - } - } - // XOR the newly created 32 bit chunk onto the P-array - P[i] ^= data; - } - - /* - * (3) - * Encrypt the all-zero string with the Blowfish algorithm, using - * the subkeys described in (1) and (2) - * - * (4) - * Replace P1 and P2 with the output of step (3) - * - * (5) - * Encrypt the output of step(3) using the Blowfish algorithm, - * with the modified subkeys. - * - * (6) - * Replace P3 and P4 with the output of step (5) - * - * (7) - * Continue the process, replacing all elements of the P-array - * and then all four S-boxes in order, with the output of the - * continuously changing Blowfish algorithm - */ - - ProcessTable(0, 0, P); - ProcessTable(P[P_SZ - 2], P[P_SZ - 1], S0); - ProcessTable(S0[SBOX_SK - 2], S0[SBOX_SK - 1], S1); - ProcessTable(S1[SBOX_SK - 2], S1[SBOX_SK - 1], S2); - ProcessTable(S2[SBOX_SK - 2], S2[SBOX_SK - 1], S3); - } - - /** - * Encrypt the given input starting at the given offset and place - * the result in the provided buffer starting at the given offset. - * The input will be an exact multiple of our blocksize. - */ - private void EncryptBlock( - byte[] src, - int srcIndex, - byte[] dst, - int dstIndex) - { - uint xl = Pack.BE_To_UInt32(src, srcIndex); - uint xr = Pack.BE_To_UInt32(src, srcIndex+4); - - xl ^= P[0]; - - for (int i = 1; i < ROUNDS; i += 2) - { - xr ^= F(xl) ^ P[i]; - xl ^= F(xr) ^ P[i + 1]; - } - - xr ^= P[ROUNDS + 1]; - - Pack.UInt32_To_BE(xr, dst, dstIndex); - Pack.UInt32_To_BE(xl, dst, dstIndex + 4); - } - - /** - * Decrypt the given input starting at the given offset and place - * the result in the provided buffer starting at the given offset. - * The input will be an exact multiple of our blocksize. - */ - private void DecryptBlock( - byte[] src, - int srcIndex, - byte[] dst, - int dstIndex) - { - uint xl = Pack.BE_To_UInt32(src, srcIndex); - uint xr = Pack.BE_To_UInt32(src, srcIndex + 4); - - xl ^= P[ROUNDS + 1]; - - for (int i = ROUNDS; i > 0 ; i -= 2) - { - xr ^= F(xl) ^ P[i]; - xl ^= F(xr) ^ P[i - 1]; - } - - xr ^= P[0]; - - Pack.UInt32_To_BE(xr, dst, dstIndex); - Pack.UInt32_To_BE(xl, dst, dstIndex + 4); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/CamelliaEngine.cs b/bc-sharp-crypto/src/crypto/engines/CamelliaEngine.cs deleted file mode 100644 index 71bd1b0..0000000 --- a/bc-sharp-crypto/src/crypto/engines/CamelliaEngine.cs +++ /dev/null @@ -1,668 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * Camellia - based on RFC 3713. - */ - public class CamelliaEngine - : IBlockCipher - { - private bool initialised = false; - private bool _keyIs128; - - private const int BLOCK_SIZE = 16; - - private uint[] subkey = new uint[24 * 4]; - private uint[] kw = new uint[4 * 2]; // for whitening - private uint[] ke = new uint[6 * 2]; // for FL and FL^(-1) - private uint[] state = new uint[4]; // for encryption and decryption - - private static readonly uint[] SIGMA = new uint[]{ - 0xa09e667f, 0x3bcc908b, - 0xb67ae858, 0x4caa73b2, - 0xc6ef372f, 0xe94f82be, - 0x54ff53a5, 0xf1d36f1c, - 0x10e527fa, 0xde682d1d, - 0xb05688c2, 0xb3e6c1fd - }; - - /* - * - * S-box data - * - */ - private static readonly uint[] SBOX1_1110 = new uint[]{ - 0x70707000, 0x82828200, 0x2c2c2c00, 0xececec00, 0xb3b3b300, 0x27272700, - 0xc0c0c000, 0xe5e5e500, 0xe4e4e400, 0x85858500, 0x57575700, 0x35353500, - 0xeaeaea00, 0x0c0c0c00, 0xaeaeae00, 0x41414100, 0x23232300, 0xefefef00, - 0x6b6b6b00, 0x93939300, 0x45454500, 0x19191900, 0xa5a5a500, 0x21212100, - 0xededed00, 0x0e0e0e00, 0x4f4f4f00, 0x4e4e4e00, 0x1d1d1d00, 0x65656500, - 0x92929200, 0xbdbdbd00, 0x86868600, 0xb8b8b800, 0xafafaf00, 0x8f8f8f00, - 0x7c7c7c00, 0xebebeb00, 0x1f1f1f00, 0xcecece00, 0x3e3e3e00, 0x30303000, - 0xdcdcdc00, 0x5f5f5f00, 0x5e5e5e00, 0xc5c5c500, 0x0b0b0b00, 0x1a1a1a00, - 0xa6a6a600, 0xe1e1e100, 0x39393900, 0xcacaca00, 0xd5d5d500, 0x47474700, - 0x5d5d5d00, 0x3d3d3d00, 0xd9d9d900, 0x01010100, 0x5a5a5a00, 0xd6d6d600, - 0x51515100, 0x56565600, 0x6c6c6c00, 0x4d4d4d00, 0x8b8b8b00, 0x0d0d0d00, - 0x9a9a9a00, 0x66666600, 0xfbfbfb00, 0xcccccc00, 0xb0b0b000, 0x2d2d2d00, - 0x74747400, 0x12121200, 0x2b2b2b00, 0x20202000, 0xf0f0f000, 0xb1b1b100, - 0x84848400, 0x99999900, 0xdfdfdf00, 0x4c4c4c00, 0xcbcbcb00, 0xc2c2c200, - 0x34343400, 0x7e7e7e00, 0x76767600, 0x05050500, 0x6d6d6d00, 0xb7b7b700, - 0xa9a9a900, 0x31313100, 0xd1d1d100, 0x17171700, 0x04040400, 0xd7d7d700, - 0x14141400, 0x58585800, 0x3a3a3a00, 0x61616100, 0xdedede00, 0x1b1b1b00, - 0x11111100, 0x1c1c1c00, 0x32323200, 0x0f0f0f00, 0x9c9c9c00, 0x16161600, - 0x53535300, 0x18181800, 0xf2f2f200, 0x22222200, 0xfefefe00, 0x44444400, - 0xcfcfcf00, 0xb2b2b200, 0xc3c3c300, 0xb5b5b500, 0x7a7a7a00, 0x91919100, - 0x24242400, 0x08080800, 0xe8e8e800, 0xa8a8a800, 0x60606000, 0xfcfcfc00, - 0x69696900, 0x50505000, 0xaaaaaa00, 0xd0d0d000, 0xa0a0a000, 0x7d7d7d00, - 0xa1a1a100, 0x89898900, 0x62626200, 0x97979700, 0x54545400, 0x5b5b5b00, - 0x1e1e1e00, 0x95959500, 0xe0e0e000, 0xffffff00, 0x64646400, 0xd2d2d200, - 0x10101000, 0xc4c4c400, 0x00000000, 0x48484800, 0xa3a3a300, 0xf7f7f700, - 0x75757500, 0xdbdbdb00, 0x8a8a8a00, 0x03030300, 0xe6e6e600, 0xdadada00, - 0x09090900, 0x3f3f3f00, 0xdddddd00, 0x94949400, 0x87878700, 0x5c5c5c00, - 0x83838300, 0x02020200, 0xcdcdcd00, 0x4a4a4a00, 0x90909000, 0x33333300, - 0x73737300, 0x67676700, 0xf6f6f600, 0xf3f3f300, 0x9d9d9d00, 0x7f7f7f00, - 0xbfbfbf00, 0xe2e2e200, 0x52525200, 0x9b9b9b00, 0xd8d8d800, 0x26262600, - 0xc8c8c800, 0x37373700, 0xc6c6c600, 0x3b3b3b00, 0x81818100, 0x96969600, - 0x6f6f6f00, 0x4b4b4b00, 0x13131300, 0xbebebe00, 0x63636300, 0x2e2e2e00, - 0xe9e9e900, 0x79797900, 0xa7a7a700, 0x8c8c8c00, 0x9f9f9f00, 0x6e6e6e00, - 0xbcbcbc00, 0x8e8e8e00, 0x29292900, 0xf5f5f500, 0xf9f9f900, 0xb6b6b600, - 0x2f2f2f00, 0xfdfdfd00, 0xb4b4b400, 0x59595900, 0x78787800, 0x98989800, - 0x06060600, 0x6a6a6a00, 0xe7e7e700, 0x46464600, 0x71717100, 0xbababa00, - 0xd4d4d400, 0x25252500, 0xababab00, 0x42424200, 0x88888800, 0xa2a2a200, - 0x8d8d8d00, 0xfafafa00, 0x72727200, 0x07070700, 0xb9b9b900, 0x55555500, - 0xf8f8f800, 0xeeeeee00, 0xacacac00, 0x0a0a0a00, 0x36363600, 0x49494900, - 0x2a2a2a00, 0x68686800, 0x3c3c3c00, 0x38383800, 0xf1f1f100, 0xa4a4a400, - 0x40404000, 0x28282800, 0xd3d3d300, 0x7b7b7b00, 0xbbbbbb00, 0xc9c9c900, - 0x43434300, 0xc1c1c100, 0x15151500, 0xe3e3e300, 0xadadad00, 0xf4f4f400, - 0x77777700, 0xc7c7c700, 0x80808000, 0x9e9e9e00 - }; - - private static readonly uint[] SBOX4_4404 = new uint[]{ - 0x70700070, 0x2c2c002c, 0xb3b300b3, 0xc0c000c0, 0xe4e400e4, 0x57570057, - 0xeaea00ea, 0xaeae00ae, 0x23230023, 0x6b6b006b, 0x45450045, 0xa5a500a5, - 0xeded00ed, 0x4f4f004f, 0x1d1d001d, 0x92920092, 0x86860086, 0xafaf00af, - 0x7c7c007c, 0x1f1f001f, 0x3e3e003e, 0xdcdc00dc, 0x5e5e005e, 0x0b0b000b, - 0xa6a600a6, 0x39390039, 0xd5d500d5, 0x5d5d005d, 0xd9d900d9, 0x5a5a005a, - 0x51510051, 0x6c6c006c, 0x8b8b008b, 0x9a9a009a, 0xfbfb00fb, 0xb0b000b0, - 0x74740074, 0x2b2b002b, 0xf0f000f0, 0x84840084, 0xdfdf00df, 0xcbcb00cb, - 0x34340034, 0x76760076, 0x6d6d006d, 0xa9a900a9, 0xd1d100d1, 0x04040004, - 0x14140014, 0x3a3a003a, 0xdede00de, 0x11110011, 0x32320032, 0x9c9c009c, - 0x53530053, 0xf2f200f2, 0xfefe00fe, 0xcfcf00cf, 0xc3c300c3, 0x7a7a007a, - 0x24240024, 0xe8e800e8, 0x60600060, 0x69690069, 0xaaaa00aa, 0xa0a000a0, - 0xa1a100a1, 0x62620062, 0x54540054, 0x1e1e001e, 0xe0e000e0, 0x64640064, - 0x10100010, 0x00000000, 0xa3a300a3, 0x75750075, 0x8a8a008a, 0xe6e600e6, - 0x09090009, 0xdddd00dd, 0x87870087, 0x83830083, 0xcdcd00cd, 0x90900090, - 0x73730073, 0xf6f600f6, 0x9d9d009d, 0xbfbf00bf, 0x52520052, 0xd8d800d8, - 0xc8c800c8, 0xc6c600c6, 0x81810081, 0x6f6f006f, 0x13130013, 0x63630063, - 0xe9e900e9, 0xa7a700a7, 0x9f9f009f, 0xbcbc00bc, 0x29290029, 0xf9f900f9, - 0x2f2f002f, 0xb4b400b4, 0x78780078, 0x06060006, 0xe7e700e7, 0x71710071, - 0xd4d400d4, 0xabab00ab, 0x88880088, 0x8d8d008d, 0x72720072, 0xb9b900b9, - 0xf8f800f8, 0xacac00ac, 0x36360036, 0x2a2a002a, 0x3c3c003c, 0xf1f100f1, - 0x40400040, 0xd3d300d3, 0xbbbb00bb, 0x43430043, 0x15150015, 0xadad00ad, - 0x77770077, 0x80800080, 0x82820082, 0xecec00ec, 0x27270027, 0xe5e500e5, - 0x85850085, 0x35350035, 0x0c0c000c, 0x41410041, 0xefef00ef, 0x93930093, - 0x19190019, 0x21210021, 0x0e0e000e, 0x4e4e004e, 0x65650065, 0xbdbd00bd, - 0xb8b800b8, 0x8f8f008f, 0xebeb00eb, 0xcece00ce, 0x30300030, 0x5f5f005f, - 0xc5c500c5, 0x1a1a001a, 0xe1e100e1, 0xcaca00ca, 0x47470047, 0x3d3d003d, - 0x01010001, 0xd6d600d6, 0x56560056, 0x4d4d004d, 0x0d0d000d, 0x66660066, - 0xcccc00cc, 0x2d2d002d, 0x12120012, 0x20200020, 0xb1b100b1, 0x99990099, - 0x4c4c004c, 0xc2c200c2, 0x7e7e007e, 0x05050005, 0xb7b700b7, 0x31310031, - 0x17170017, 0xd7d700d7, 0x58580058, 0x61610061, 0x1b1b001b, 0x1c1c001c, - 0x0f0f000f, 0x16160016, 0x18180018, 0x22220022, 0x44440044, 0xb2b200b2, - 0xb5b500b5, 0x91910091, 0x08080008, 0xa8a800a8, 0xfcfc00fc, 0x50500050, - 0xd0d000d0, 0x7d7d007d, 0x89890089, 0x97970097, 0x5b5b005b, 0x95950095, - 0xffff00ff, 0xd2d200d2, 0xc4c400c4, 0x48480048, 0xf7f700f7, 0xdbdb00db, - 0x03030003, 0xdada00da, 0x3f3f003f, 0x94940094, 0x5c5c005c, 0x02020002, - 0x4a4a004a, 0x33330033, 0x67670067, 0xf3f300f3, 0x7f7f007f, 0xe2e200e2, - 0x9b9b009b, 0x26260026, 0x37370037, 0x3b3b003b, 0x96960096, 0x4b4b004b, - 0xbebe00be, 0x2e2e002e, 0x79790079, 0x8c8c008c, 0x6e6e006e, 0x8e8e008e, - 0xf5f500f5, 0xb6b600b6, 0xfdfd00fd, 0x59590059, 0x98980098, 0x6a6a006a, - 0x46460046, 0xbaba00ba, 0x25250025, 0x42420042, 0xa2a200a2, 0xfafa00fa, - 0x07070007, 0x55550055, 0xeeee00ee, 0x0a0a000a, 0x49490049, 0x68680068, - 0x38380038, 0xa4a400a4, 0x28280028, 0x7b7b007b, 0xc9c900c9, 0xc1c100c1, - 0xe3e300e3, 0xf4f400f4, 0xc7c700c7, 0x9e9e009e - }; - - private static readonly uint[] SBOX2_0222 = new uint[]{ - 0x00e0e0e0, 0x00050505, 0x00585858, 0x00d9d9d9, 0x00676767, 0x004e4e4e, - 0x00818181, 0x00cbcbcb, 0x00c9c9c9, 0x000b0b0b, 0x00aeaeae, 0x006a6a6a, - 0x00d5d5d5, 0x00181818, 0x005d5d5d, 0x00828282, 0x00464646, 0x00dfdfdf, - 0x00d6d6d6, 0x00272727, 0x008a8a8a, 0x00323232, 0x004b4b4b, 0x00424242, - 0x00dbdbdb, 0x001c1c1c, 0x009e9e9e, 0x009c9c9c, 0x003a3a3a, 0x00cacaca, - 0x00252525, 0x007b7b7b, 0x000d0d0d, 0x00717171, 0x005f5f5f, 0x001f1f1f, - 0x00f8f8f8, 0x00d7d7d7, 0x003e3e3e, 0x009d9d9d, 0x007c7c7c, 0x00606060, - 0x00b9b9b9, 0x00bebebe, 0x00bcbcbc, 0x008b8b8b, 0x00161616, 0x00343434, - 0x004d4d4d, 0x00c3c3c3, 0x00727272, 0x00959595, 0x00ababab, 0x008e8e8e, - 0x00bababa, 0x007a7a7a, 0x00b3b3b3, 0x00020202, 0x00b4b4b4, 0x00adadad, - 0x00a2a2a2, 0x00acacac, 0x00d8d8d8, 0x009a9a9a, 0x00171717, 0x001a1a1a, - 0x00353535, 0x00cccccc, 0x00f7f7f7, 0x00999999, 0x00616161, 0x005a5a5a, - 0x00e8e8e8, 0x00242424, 0x00565656, 0x00404040, 0x00e1e1e1, 0x00636363, - 0x00090909, 0x00333333, 0x00bfbfbf, 0x00989898, 0x00979797, 0x00858585, - 0x00686868, 0x00fcfcfc, 0x00ececec, 0x000a0a0a, 0x00dadada, 0x006f6f6f, - 0x00535353, 0x00626262, 0x00a3a3a3, 0x002e2e2e, 0x00080808, 0x00afafaf, - 0x00282828, 0x00b0b0b0, 0x00747474, 0x00c2c2c2, 0x00bdbdbd, 0x00363636, - 0x00222222, 0x00383838, 0x00646464, 0x001e1e1e, 0x00393939, 0x002c2c2c, - 0x00a6a6a6, 0x00303030, 0x00e5e5e5, 0x00444444, 0x00fdfdfd, 0x00888888, - 0x009f9f9f, 0x00656565, 0x00878787, 0x006b6b6b, 0x00f4f4f4, 0x00232323, - 0x00484848, 0x00101010, 0x00d1d1d1, 0x00515151, 0x00c0c0c0, 0x00f9f9f9, - 0x00d2d2d2, 0x00a0a0a0, 0x00555555, 0x00a1a1a1, 0x00414141, 0x00fafafa, - 0x00434343, 0x00131313, 0x00c4c4c4, 0x002f2f2f, 0x00a8a8a8, 0x00b6b6b6, - 0x003c3c3c, 0x002b2b2b, 0x00c1c1c1, 0x00ffffff, 0x00c8c8c8, 0x00a5a5a5, - 0x00202020, 0x00898989, 0x00000000, 0x00909090, 0x00474747, 0x00efefef, - 0x00eaeaea, 0x00b7b7b7, 0x00151515, 0x00060606, 0x00cdcdcd, 0x00b5b5b5, - 0x00121212, 0x007e7e7e, 0x00bbbbbb, 0x00292929, 0x000f0f0f, 0x00b8b8b8, - 0x00070707, 0x00040404, 0x009b9b9b, 0x00949494, 0x00212121, 0x00666666, - 0x00e6e6e6, 0x00cecece, 0x00ededed, 0x00e7e7e7, 0x003b3b3b, 0x00fefefe, - 0x007f7f7f, 0x00c5c5c5, 0x00a4a4a4, 0x00373737, 0x00b1b1b1, 0x004c4c4c, - 0x00919191, 0x006e6e6e, 0x008d8d8d, 0x00767676, 0x00030303, 0x002d2d2d, - 0x00dedede, 0x00969696, 0x00262626, 0x007d7d7d, 0x00c6c6c6, 0x005c5c5c, - 0x00d3d3d3, 0x00f2f2f2, 0x004f4f4f, 0x00191919, 0x003f3f3f, 0x00dcdcdc, - 0x00797979, 0x001d1d1d, 0x00525252, 0x00ebebeb, 0x00f3f3f3, 0x006d6d6d, - 0x005e5e5e, 0x00fbfbfb, 0x00696969, 0x00b2b2b2, 0x00f0f0f0, 0x00313131, - 0x000c0c0c, 0x00d4d4d4, 0x00cfcfcf, 0x008c8c8c, 0x00e2e2e2, 0x00757575, - 0x00a9a9a9, 0x004a4a4a, 0x00575757, 0x00848484, 0x00111111, 0x00454545, - 0x001b1b1b, 0x00f5f5f5, 0x00e4e4e4, 0x000e0e0e, 0x00737373, 0x00aaaaaa, - 0x00f1f1f1, 0x00dddddd, 0x00595959, 0x00141414, 0x006c6c6c, 0x00929292, - 0x00545454, 0x00d0d0d0, 0x00787878, 0x00707070, 0x00e3e3e3, 0x00494949, - 0x00808080, 0x00505050, 0x00a7a7a7, 0x00f6f6f6, 0x00777777, 0x00939393, - 0x00868686, 0x00838383, 0x002a2a2a, 0x00c7c7c7, 0x005b5b5b, 0x00e9e9e9, - 0x00eeeeee, 0x008f8f8f, 0x00010101, 0x003d3d3d - }; - - private static readonly uint[] SBOX3_3033 = new uint[]{ - 0x38003838, 0x41004141, 0x16001616, 0x76007676, 0xd900d9d9, 0x93009393, - 0x60006060, 0xf200f2f2, 0x72007272, 0xc200c2c2, 0xab00abab, 0x9a009a9a, - 0x75007575, 0x06000606, 0x57005757, 0xa000a0a0, 0x91009191, 0xf700f7f7, - 0xb500b5b5, 0xc900c9c9, 0xa200a2a2, 0x8c008c8c, 0xd200d2d2, 0x90009090, - 0xf600f6f6, 0x07000707, 0xa700a7a7, 0x27002727, 0x8e008e8e, 0xb200b2b2, - 0x49004949, 0xde00dede, 0x43004343, 0x5c005c5c, 0xd700d7d7, 0xc700c7c7, - 0x3e003e3e, 0xf500f5f5, 0x8f008f8f, 0x67006767, 0x1f001f1f, 0x18001818, - 0x6e006e6e, 0xaf00afaf, 0x2f002f2f, 0xe200e2e2, 0x85008585, 0x0d000d0d, - 0x53005353, 0xf000f0f0, 0x9c009c9c, 0x65006565, 0xea00eaea, 0xa300a3a3, - 0xae00aeae, 0x9e009e9e, 0xec00ecec, 0x80008080, 0x2d002d2d, 0x6b006b6b, - 0xa800a8a8, 0x2b002b2b, 0x36003636, 0xa600a6a6, 0xc500c5c5, 0x86008686, - 0x4d004d4d, 0x33003333, 0xfd00fdfd, 0x66006666, 0x58005858, 0x96009696, - 0x3a003a3a, 0x09000909, 0x95009595, 0x10001010, 0x78007878, 0xd800d8d8, - 0x42004242, 0xcc00cccc, 0xef00efef, 0x26002626, 0xe500e5e5, 0x61006161, - 0x1a001a1a, 0x3f003f3f, 0x3b003b3b, 0x82008282, 0xb600b6b6, 0xdb00dbdb, - 0xd400d4d4, 0x98009898, 0xe800e8e8, 0x8b008b8b, 0x02000202, 0xeb00ebeb, - 0x0a000a0a, 0x2c002c2c, 0x1d001d1d, 0xb000b0b0, 0x6f006f6f, 0x8d008d8d, - 0x88008888, 0x0e000e0e, 0x19001919, 0x87008787, 0x4e004e4e, 0x0b000b0b, - 0xa900a9a9, 0x0c000c0c, 0x79007979, 0x11001111, 0x7f007f7f, 0x22002222, - 0xe700e7e7, 0x59005959, 0xe100e1e1, 0xda00dada, 0x3d003d3d, 0xc800c8c8, - 0x12001212, 0x04000404, 0x74007474, 0x54005454, 0x30003030, 0x7e007e7e, - 0xb400b4b4, 0x28002828, 0x55005555, 0x68006868, 0x50005050, 0xbe00bebe, - 0xd000d0d0, 0xc400c4c4, 0x31003131, 0xcb00cbcb, 0x2a002a2a, 0xad00adad, - 0x0f000f0f, 0xca00caca, 0x70007070, 0xff00ffff, 0x32003232, 0x69006969, - 0x08000808, 0x62006262, 0x00000000, 0x24002424, 0xd100d1d1, 0xfb00fbfb, - 0xba00baba, 0xed00eded, 0x45004545, 0x81008181, 0x73007373, 0x6d006d6d, - 0x84008484, 0x9f009f9f, 0xee00eeee, 0x4a004a4a, 0xc300c3c3, 0x2e002e2e, - 0xc100c1c1, 0x01000101, 0xe600e6e6, 0x25002525, 0x48004848, 0x99009999, - 0xb900b9b9, 0xb300b3b3, 0x7b007b7b, 0xf900f9f9, 0xce00cece, 0xbf00bfbf, - 0xdf00dfdf, 0x71007171, 0x29002929, 0xcd00cdcd, 0x6c006c6c, 0x13001313, - 0x64006464, 0x9b009b9b, 0x63006363, 0x9d009d9d, 0xc000c0c0, 0x4b004b4b, - 0xb700b7b7, 0xa500a5a5, 0x89008989, 0x5f005f5f, 0xb100b1b1, 0x17001717, - 0xf400f4f4, 0xbc00bcbc, 0xd300d3d3, 0x46004646, 0xcf00cfcf, 0x37003737, - 0x5e005e5e, 0x47004747, 0x94009494, 0xfa00fafa, 0xfc00fcfc, 0x5b005b5b, - 0x97009797, 0xfe00fefe, 0x5a005a5a, 0xac00acac, 0x3c003c3c, 0x4c004c4c, - 0x03000303, 0x35003535, 0xf300f3f3, 0x23002323, 0xb800b8b8, 0x5d005d5d, - 0x6a006a6a, 0x92009292, 0xd500d5d5, 0x21002121, 0x44004444, 0x51005151, - 0xc600c6c6, 0x7d007d7d, 0x39003939, 0x83008383, 0xdc00dcdc, 0xaa00aaaa, - 0x7c007c7c, 0x77007777, 0x56005656, 0x05000505, 0x1b001b1b, 0xa400a4a4, - 0x15001515, 0x34003434, 0x1e001e1e, 0x1c001c1c, 0xf800f8f8, 0x52005252, - 0x20002020, 0x14001414, 0xe900e9e9, 0xbd00bdbd, 0xdd00dddd, 0xe400e4e4, - 0xa100a1a1, 0xe000e0e0, 0x8a008a8a, 0xf100f1f1, 0xd600d6d6, 0x7a007a7a, - 0xbb00bbbb, 0xe300e3e3, 0x40004040, 0x4f004f4f - }; - - private static uint rightRotate(uint x, int s) - { - return ((x >> s) + (x << (32 - s))); - } - - private static uint leftRotate(uint x, int s) - { - return (x << s) + (x >> (32 - s)); - } - - private static void roldq(int rot, uint[] ki, int ioff, uint[] ko, int ooff) - { - ko[0 + ooff] = (ki[0 + ioff] << rot) | (ki[1 + ioff] >> (32 - rot)); - ko[1 + ooff] = (ki[1 + ioff] << rot) | (ki[2 + ioff] >> (32 - rot)); - ko[2 + ooff] = (ki[2 + ioff] << rot) | (ki[3 + ioff] >> (32 - rot)); - ko[3 + ooff] = (ki[3 + ioff] << rot) | (ki[0 + ioff] >> (32 - rot)); - ki[0 + ioff] = ko[0 + ooff]; - ki[1 + ioff] = ko[1 + ooff]; - ki[2 + ioff] = ko[2 + ooff]; - ki[3 + ioff] = ko[3 + ooff]; - } - - private static void decroldq(int rot, uint[] ki, int ioff, uint[] ko, int ooff) - { - ko[2 + ooff] = (ki[0 + ioff] << rot) | (ki[1 + ioff] >> (32 - rot)); - ko[3 + ooff] = (ki[1 + ioff] << rot) | (ki[2 + ioff] >> (32 - rot)); - ko[0 + ooff] = (ki[2 + ioff] << rot) | (ki[3 + ioff] >> (32 - rot)); - ko[1 + ooff] = (ki[3 + ioff] << rot) | (ki[0 + ioff] >> (32 - rot)); - ki[0 + ioff] = ko[2 + ooff]; - ki[1 + ioff] = ko[3 + ooff]; - ki[2 + ioff] = ko[0 + ooff]; - ki[3 + ioff] = ko[1 + ooff]; - } - - private static void roldqo32(int rot, uint[] ki, int ioff, uint[] ko, int ooff) - { - ko[0 + ooff] = (ki[1 + ioff] << (rot - 32)) | (ki[2 + ioff] >> (64 - rot)); - ko[1 + ooff] = (ki[2 + ioff] << (rot - 32)) | (ki[3 + ioff] >> (64 - rot)); - ko[2 + ooff] = (ki[3 + ioff] << (rot - 32)) | (ki[0 + ioff] >> (64 - rot)); - ko[3 + ooff] = (ki[0 + ioff] << (rot - 32)) | (ki[1 + ioff] >> (64 - rot)); - ki[0 + ioff] = ko[0 + ooff]; - ki[1 + ioff] = ko[1 + ooff]; - ki[2 + ioff] = ko[2 + ooff]; - ki[3 + ioff] = ko[3 + ooff]; - } - - private static void decroldqo32(int rot, uint[] ki, int ioff, uint[] ko, int ooff) - { - ko[2 + ooff] = (ki[1 + ioff] << (rot - 32)) | (ki[2 + ioff] >> (64 - rot)); - ko[3 + ooff] = (ki[2 + ioff] << (rot - 32)) | (ki[3 + ioff] >> (64 - rot)); - ko[0 + ooff] = (ki[3 + ioff] << (rot - 32)) | (ki[0 + ioff] >> (64 - rot)); - ko[1 + ooff] = (ki[0 + ioff] << (rot - 32)) | (ki[1 + ioff] >> (64 - rot)); - ki[0 + ioff] = ko[2 + ooff]; - ki[1 + ioff] = ko[3 + ooff]; - ki[2 + ioff] = ko[0 + ooff]; - ki[3 + ioff] = ko[1 + ooff]; - } - - private static uint bytes2uint(byte[] src, int offset) - { - uint word = 0; - for (int i = 0; i < 4; i++) - { - word = (word << 8) + (uint)src[i + offset]; - } - return word; - } - - private static void uint2bytes(uint word, byte[] dst, int offset) - { - for (int i = 0; i < 4; i++) - { - dst[(3 - i) + offset] = (byte)word; - word >>= 8; - } - } - - private static void camelliaF2(uint[] s, uint[] skey, int keyoff) - { - uint t1, t2, u, v; - - t1 = s[0] ^ skey[0 + keyoff]; - u = SBOX4_4404[(byte)t1]; - u ^= SBOX3_3033[(byte)(t1 >> 8)]; - u ^= SBOX2_0222[(byte)(t1 >> 16)]; - u ^= SBOX1_1110[(byte)(t1 >> 24)]; - t2 = s[1] ^ skey[1 + keyoff]; - v = SBOX1_1110[(byte)t2]; - v ^= SBOX4_4404[(byte)(t2 >> 8)]; - v ^= SBOX3_3033[(byte)(t2 >> 16)]; - v ^= SBOX2_0222[(byte)(t2 >> 24)]; - - s[2] ^= u ^ v; - s[3] ^= u ^ v ^ rightRotate(u, 8); - - t1 = s[2] ^ skey[2 + keyoff]; - u = SBOX4_4404[(byte)t1]; - u ^= SBOX3_3033[(byte)(t1 >> 8)]; - u ^= SBOX2_0222[(byte)(t1 >> 16)]; - u ^= SBOX1_1110[(byte)(t1 >> 24)]; - t2 = s[3] ^ skey[3 + keyoff]; - v = SBOX1_1110[(byte)t2]; - v ^= SBOX4_4404[(byte)(t2 >> 8)]; - v ^= SBOX3_3033[(byte)(t2 >> 16)]; - v ^= SBOX2_0222[(byte)(t2 >> 24)]; - - s[0] ^= u ^ v; - s[1] ^= u ^ v ^ rightRotate(u, 8); - } - - private static void camelliaFLs(uint[] s, uint[] fkey, int keyoff) - { - - s[1] ^= leftRotate(s[0] & fkey[0 + keyoff], 1); - s[0] ^= fkey[1 + keyoff] | s[1]; - - s[2] ^= fkey[3 + keyoff] | s[3]; - s[3] ^= leftRotate(fkey[2 + keyoff] & s[2], 1); - } - - private void setKey(bool forEncryption, byte[] key) - { - uint[] k = new uint[8]; - uint[] ka = new uint[4]; - uint[] kb = new uint[4]; - uint[] t = new uint[4]; - - switch (key.Length) - { - case 16: - _keyIs128 = true; - k[0] = bytes2uint(key, 0); - k[1] = bytes2uint(key, 4); - k[2] = bytes2uint(key, 8); - k[3] = bytes2uint(key, 12); - k[4] = k[5] = k[6] = k[7] = 0; - break; - case 24: - k[0] = bytes2uint(key, 0); - k[1] = bytes2uint(key, 4); - k[2] = bytes2uint(key, 8); - k[3] = bytes2uint(key, 12); - k[4] = bytes2uint(key, 16); - k[5] = bytes2uint(key, 20); - k[6] = ~k[4]; - k[7] = ~k[5]; - _keyIs128 = false; - break; - case 32: - k[0] = bytes2uint(key, 0); - k[1] = bytes2uint(key, 4); - k[2] = bytes2uint(key, 8); - k[3] = bytes2uint(key, 12); - k[4] = bytes2uint(key, 16); - k[5] = bytes2uint(key, 20); - k[6] = bytes2uint(key, 24); - k[7] = bytes2uint(key, 28); - _keyIs128 = false; - break; - default: - throw new ArgumentException("key sizes are only 16/24/32 bytes."); - } - - for (int i = 0; i < 4; i++) - { - ka[i] = k[i] ^ k[i + 4]; - } - /* compute KA */ - camelliaF2(ka, SIGMA, 0); - for (int i = 0; i < 4; i++) - { - ka[i] ^= k[i]; - } - camelliaF2(ka, SIGMA, 4); - - if (_keyIs128) - { - if (forEncryption) - { - /* KL dependant keys */ - kw[0] = k[0]; - kw[1] = k[1]; - kw[2] = k[2]; - kw[3] = k[3]; - roldq(15, k, 0, subkey, 4); - roldq(30, k, 0, subkey, 12); - roldq(15, k, 0, t, 0); - subkey[18] = t[2]; - subkey[19] = t[3]; - roldq(17, k, 0, ke, 4); - roldq(17, k, 0, subkey, 24); - roldq(17, k, 0, subkey, 32); - /* KA dependant keys */ - subkey[0] = ka[0]; - subkey[1] = ka[1]; - subkey[2] = ka[2]; - subkey[3] = ka[3]; - roldq(15, ka, 0, subkey, 8); - roldq(15, ka, 0, ke, 0); - roldq(15, ka, 0, t, 0); - subkey[16] = t[0]; - subkey[17] = t[1]; - roldq(15, ka, 0, subkey, 20); - roldqo32(34, ka, 0, subkey, 28); - roldq(17, ka, 0, kw, 4); - - } - else - { // decryption - /* KL dependant keys */ - kw[4] = k[0]; - kw[5] = k[1]; - kw[6] = k[2]; - kw[7] = k[3]; - decroldq(15, k, 0, subkey, 28); - decroldq(30, k, 0, subkey, 20); - decroldq(15, k, 0, t, 0); - subkey[16] = t[0]; - subkey[17] = t[1]; - decroldq(17, k, 0, ke, 0); - decroldq(17, k, 0, subkey, 8); - decroldq(17, k, 0, subkey, 0); - /* KA dependant keys */ - subkey[34] = ka[0]; - subkey[35] = ka[1]; - subkey[32] = ka[2]; - subkey[33] = ka[3]; - decroldq(15, ka, 0, subkey, 24); - decroldq(15, ka, 0, ke, 4); - decroldq(15, ka, 0, t, 0); - subkey[18] = t[2]; - subkey[19] = t[3]; - decroldq(15, ka, 0, subkey, 12); - decroldqo32(34, ka, 0, subkey, 4); - roldq(17, ka, 0, kw, 0); - } - } - else - { // 192bit or 256bit - /* compute KB */ - for (int i = 0; i < 4; i++) - { - kb[i] = ka[i] ^ k[i + 4]; - } - camelliaF2(kb, SIGMA, 8); - - if (forEncryption) - { - /* KL dependant keys */ - kw[0] = k[0]; - kw[1] = k[1]; - kw[2] = k[2]; - kw[3] = k[3]; - roldqo32(45, k, 0, subkey, 16); - roldq(15, k, 0, ke, 4); - roldq(17, k, 0, subkey, 32); - roldqo32(34, k, 0, subkey, 44); - /* KR dependant keys */ - roldq(15, k, 4, subkey, 4); - roldq(15, k, 4, ke, 0); - roldq(30, k, 4, subkey, 24); - roldqo32(34, k, 4, subkey, 36); - /* KA dependant keys */ - roldq(15, ka, 0, subkey, 8); - roldq(30, ka, 0, subkey, 20); - /* 32bit rotation */ - ke[8] = ka[1]; - ke[9] = ka[2]; - ke[10] = ka[3]; - ke[11] = ka[0]; - roldqo32(49, ka, 0, subkey, 40); - - /* KB dependant keys */ - subkey[0] = kb[0]; - subkey[1] = kb[1]; - subkey[2] = kb[2]; - subkey[3] = kb[3]; - roldq(30, kb, 0, subkey, 12); - roldq(30, kb, 0, subkey, 28); - roldqo32(51, kb, 0, kw, 4); - - } - else - { // decryption - /* KL dependant keys */ - kw[4] = k[0]; - kw[5] = k[1]; - kw[6] = k[2]; - kw[7] = k[3]; - decroldqo32(45, k, 0, subkey, 28); - decroldq(15, k, 0, ke, 4); - decroldq(17, k, 0, subkey, 12); - decroldqo32(34, k, 0, subkey, 0); - /* KR dependant keys */ - decroldq(15, k, 4, subkey, 40); - decroldq(15, k, 4, ke, 8); - decroldq(30, k, 4, subkey, 20); - decroldqo32(34, k, 4, subkey, 8); - /* KA dependant keys */ - decroldq(15, ka, 0, subkey, 36); - decroldq(30, ka, 0, subkey, 24); - /* 32bit rotation */ - ke[2] = ka[1]; - ke[3] = ka[2]; - ke[0] = ka[3]; - ke[1] = ka[0]; - decroldqo32(49, ka, 0, subkey, 4); - - /* KB dependant keys */ - subkey[46] = kb[0]; - subkey[47] = kb[1]; - subkey[44] = kb[2]; - subkey[45] = kb[3]; - decroldq(30, kb, 0, subkey, 32); - decroldq(30, kb, 0, subkey, 16); - roldqo32(51, kb, 0, kw, 0); - } - } - } - - private int processBlock128(byte[] input, int inOff, byte[] output, int outOff) - { - for (int i = 0; i < 4; i++) - { - state[i] = bytes2uint(input, inOff + (i * 4)); - state[i] ^= kw[i]; - } - - camelliaF2(state, subkey, 0); - camelliaF2(state, subkey, 4); - camelliaF2(state, subkey, 8); - camelliaFLs(state, ke, 0); - camelliaF2(state, subkey, 12); - camelliaF2(state, subkey, 16); - camelliaF2(state, subkey, 20); - camelliaFLs(state, ke, 4); - camelliaF2(state, subkey, 24); - camelliaF2(state, subkey, 28); - camelliaF2(state, subkey, 32); - - state[2] ^= kw[4]; - state[3] ^= kw[5]; - state[0] ^= kw[6]; - state[1] ^= kw[7]; - - uint2bytes(state[2], output, outOff); - uint2bytes(state[3], output, outOff + 4); - uint2bytes(state[0], output, outOff + 8); - uint2bytes(state[1], output, outOff + 12); - - return BLOCK_SIZE; - } - - private int processBlock192or256(byte[] input, int inOff, byte[] output, int outOff) - { - for (int i = 0; i < 4; i++) - { - state[i] = bytes2uint(input, inOff + (i * 4)); - state[i] ^= kw[i]; - } - - camelliaF2(state, subkey, 0); - camelliaF2(state, subkey, 4); - camelliaF2(state, subkey, 8); - camelliaFLs(state, ke, 0); - camelliaF2(state, subkey, 12); - camelliaF2(state, subkey, 16); - camelliaF2(state, subkey, 20); - camelliaFLs(state, ke, 4); - camelliaF2(state, subkey, 24); - camelliaF2(state, subkey, 28); - camelliaF2(state, subkey, 32); - camelliaFLs(state, ke, 8); - camelliaF2(state, subkey, 36); - camelliaF2(state, subkey, 40); - camelliaF2(state, subkey, 44); - - state[2] ^= kw[4]; - state[3] ^= kw[5]; - state[0] ^= kw[6]; - state[1] ^= kw[7]; - - uint2bytes(state[2], output, outOff); - uint2bytes(state[3], output, outOff + 4); - uint2bytes(state[0], output, outOff + 8); - uint2bytes(state[1], output, outOff + 12); - return BLOCK_SIZE; - } - - public CamelliaEngine() - { - } - - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - if (!(parameters is KeyParameter)) - throw new ArgumentException("only simple KeyParameter expected."); - - setKey(forEncryption, ((KeyParameter)parameters).GetKey()); - - initialised = true; - } - - public virtual string AlgorithmName - { - get { return "Camellia"; } - } - - public virtual bool IsPartialBlockOkay - { - get { return false; } - } - - public virtual int GetBlockSize() - { - return BLOCK_SIZE; - } - - public virtual int ProcessBlock( - byte[] input, - int inOff, - byte[] output, - int outOff) - { - if (!initialised) - throw new InvalidOperationException("Camellia engine not initialised"); - - Check.DataLength(input, inOff, BLOCK_SIZE, "input buffer too short"); - Check.OutputLength(output, outOff, BLOCK_SIZE, "output buffer too short"); - - if (_keyIs128) - { - return processBlock128(input, inOff, output, outOff); - } - else - { - return processBlock192or256(input, inOff, output, outOff); - } - } - - public virtual void Reset() - { - // nothing - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/CamelliaLightEngine.cs b/bc-sharp-crypto/src/crypto/engines/CamelliaLightEngine.cs deleted file mode 100644 index a132227..0000000 --- a/bc-sharp-crypto/src/crypto/engines/CamelliaLightEngine.cs +++ /dev/null @@ -1,580 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * Camellia - based on RFC 3713, smaller implementation, about half the size of CamelliaEngine. - */ - public class CamelliaLightEngine - : IBlockCipher - { - private const int BLOCK_SIZE = 16; -// private const int MASK8 = 0xff; - private bool initialised; - private bool _keyis128; - - private uint[] subkey = new uint[24 * 4]; - private uint[] kw = new uint[4 * 2]; // for whitening - private uint[] ke = new uint[6 * 2]; // for FL and FL^(-1) - private uint[] state = new uint[4]; // for encryption and decryption - - private static readonly uint[] SIGMA = { - 0xa09e667f, 0x3bcc908b, - 0xb67ae858, 0x4caa73b2, - 0xc6ef372f, 0xe94f82be, - 0x54ff53a5, 0xf1d36f1c, - 0x10e527fa, 0xde682d1d, - 0xb05688c2, 0xb3e6c1fd - }; - - /* - * - * S-box data - * - */ - private static readonly byte[] SBOX1 = { - (byte)112, (byte)130, (byte)44, (byte)236, - (byte)179, (byte)39, (byte)192, (byte)229, - (byte)228, (byte)133, (byte)87, (byte)53, - (byte)234, (byte)12, (byte)174, (byte)65, - (byte)35, (byte)239, (byte)107, (byte)147, - (byte)69, (byte)25, (byte)165, (byte)33, - (byte)237, (byte)14, (byte)79, (byte)78, - (byte)29, (byte)101, (byte)146, (byte)189, - (byte)134, (byte)184, (byte)175, (byte)143, - (byte)124, (byte)235, (byte)31, (byte)206, - (byte)62, (byte)48, (byte)220, (byte)95, - (byte)94, (byte)197, (byte)11, (byte)26, - (byte)166, (byte)225, (byte)57, (byte)202, - (byte)213, (byte)71, (byte)93, (byte)61, - (byte)217, (byte)1, (byte)90, (byte)214, - (byte)81, (byte)86, (byte)108, (byte)77, - (byte)139, (byte)13, (byte)154, (byte)102, - (byte)251, (byte)204, (byte)176, (byte)45, - (byte)116, (byte)18, (byte)43, (byte)32, - (byte)240, (byte)177, (byte)132, (byte)153, - (byte)223, (byte)76, (byte)203, (byte)194, - (byte)52, (byte)126, (byte)118, (byte)5, - (byte)109, (byte)183, (byte)169, (byte)49, - (byte)209, (byte)23, (byte)4, (byte)215, - (byte)20, (byte)88, (byte)58, (byte)97, - (byte)222, (byte)27, (byte)17, (byte)28, - (byte)50, (byte)15, (byte)156, (byte)22, - (byte)83, (byte)24, (byte)242, (byte)34, - (byte)254, (byte)68, (byte)207, (byte)178, - (byte)195, (byte)181, (byte)122, (byte)145, - (byte)36, (byte)8, (byte)232, (byte)168, - (byte)96, (byte)252, (byte)105, (byte)80, - (byte)170, (byte)208, (byte)160, (byte)125, - (byte)161, (byte)137, (byte)98, (byte)151, - (byte)84, (byte)91, (byte)30, (byte)149, - (byte)224, (byte)255, (byte)100, (byte)210, - (byte)16, (byte)196, (byte)0, (byte)72, - (byte)163, (byte)247, (byte)117, (byte)219, - (byte)138, (byte)3, (byte)230, (byte)218, - (byte)9, (byte)63, (byte)221, (byte)148, - (byte)135, (byte)92, (byte)131, (byte)2, - (byte)205, (byte)74, (byte)144, (byte)51, - (byte)115, (byte)103, (byte)246, (byte)243, - (byte)157, (byte)127, (byte)191, (byte)226, - (byte)82, (byte)155, (byte)216, (byte)38, - (byte)200, (byte)55, (byte)198, (byte)59, - (byte)129, (byte)150, (byte)111, (byte)75, - (byte)19, (byte)190, (byte)99, (byte)46, - (byte)233, (byte)121, (byte)167, (byte)140, - (byte)159, (byte)110, (byte)188, (byte)142, - (byte)41, (byte)245, (byte)249, (byte)182, - (byte)47, (byte)253, (byte)180, (byte)89, - (byte)120, (byte)152, (byte)6, (byte)106, - (byte)231, (byte)70, (byte)113, (byte)186, - (byte)212, (byte)37, (byte)171, (byte)66, - (byte)136, (byte)162, (byte)141, (byte)250, - (byte)114, (byte)7, (byte)185, (byte)85, - (byte)248, (byte)238, (byte)172, (byte)10, - (byte)54, (byte)73, (byte)42, (byte)104, - (byte)60, (byte)56, (byte)241, (byte)164, - (byte)64, (byte)40, (byte)211, (byte)123, - (byte)187, (byte)201, (byte)67, (byte)193, - (byte)21, (byte)227, (byte)173, (byte)244, - (byte)119, (byte)199, (byte)128, (byte)158 - }; - - private static uint rightRotate(uint x, int s) - { - return ((x >> s) + (x << (32 - s))); - } - - private static uint leftRotate(uint x, int s) - { - return (x << s) + (x >> (32 - s)); - } - - private static void roldq(int rot, uint[] ki, int ioff, uint[] ko, int ooff) - { - ko[0 + ooff] = (ki[0 + ioff] << rot) | (ki[1 + ioff] >> (32 - rot)); - ko[1 + ooff] = (ki[1 + ioff] << rot) | (ki[2 + ioff] >> (32 - rot)); - ko[2 + ooff] = (ki[2 + ioff] << rot) | (ki[3 + ioff] >> (32 - rot)); - ko[3 + ooff] = (ki[3 + ioff] << rot) | (ki[0 + ioff] >> (32 - rot)); - ki[0 + ioff] = ko[0 + ooff]; - ki[1 + ioff] = ko[1 + ooff]; - ki[2 + ioff] = ko[2 + ooff]; - ki[3 + ioff] = ko[3 + ooff]; - } - - private static void decroldq(int rot, uint[] ki, int ioff, uint[] ko, int ooff) - { - ko[2 + ooff] = (ki[0 + ioff] << rot) | (ki[1 + ioff] >> (32 - rot)); - ko[3 + ooff] = (ki[1 + ioff] << rot) | (ki[2 + ioff] >> (32 - rot)); - ko[0 + ooff] = (ki[2 + ioff] << rot) | (ki[3 + ioff] >> (32 - rot)); - ko[1 + ooff] = (ki[3 + ioff] << rot) | (ki[0 + ioff] >> (32 - rot)); - ki[0 + ioff] = ko[2 + ooff]; - ki[1 + ioff] = ko[3 + ooff]; - ki[2 + ioff] = ko[0 + ooff]; - ki[3 + ioff] = ko[1 + ooff]; - } - - private static void roldqo32(int rot, uint[] ki, int ioff, uint[] ko, int ooff) - { - ko[0 + ooff] = (ki[1 + ioff] << (rot - 32)) | (ki[2 + ioff] >> (64 - rot)); - ko[1 + ooff] = (ki[2 + ioff] << (rot - 32)) | (ki[3 + ioff] >> (64 - rot)); - ko[2 + ooff] = (ki[3 + ioff] << (rot - 32)) | (ki[0 + ioff] >> (64 - rot)); - ko[3 + ooff] = (ki[0 + ioff] << (rot - 32)) | (ki[1 + ioff] >> (64 - rot)); - ki[0 + ioff] = ko[0 + ooff]; - ki[1 + ioff] = ko[1 + ooff]; - ki[2 + ioff] = ko[2 + ooff]; - ki[3 + ioff] = ko[3 + ooff]; - } - - private static void decroldqo32(int rot, uint[] ki, int ioff, uint[] ko, int ooff) - { - ko[2 + ooff] = (ki[1 + ioff] << (rot - 32)) | (ki[2 + ioff] >> (64 - rot)); - ko[3 + ooff] = (ki[2 + ioff] << (rot - 32)) | (ki[3 + ioff] >> (64 - rot)); - ko[0 + ooff] = (ki[3 + ioff] << (rot - 32)) | (ki[0 + ioff] >> (64 - rot)); - ko[1 + ooff] = (ki[0 + ioff] << (rot - 32)) | (ki[1 + ioff] >> (64 - rot)); - ki[0 + ioff] = ko[2 + ooff]; - ki[1 + ioff] = ko[3 + ooff]; - ki[2 + ioff] = ko[0 + ooff]; - ki[3 + ioff] = ko[1 + ooff]; - } - - private static uint bytes2uint(byte[] src, int offset) - { - uint word = 0; - for (int i = 0; i < 4; i++) - { - word = (word << 8) + (uint)src[i + offset]; - } - return word; - } - - private static void uint2bytes(uint word, byte[] dst, int offset) - { - for (int i = 0; i < 4; i++) - { - dst[(3 - i) + offset] = (byte)word; - word >>= 8; - } - } - - private byte lRot8(byte v, int rot) - { - return (byte)(((uint)v << rot) | ((uint)v >> (8 - rot))); - } - - private uint sbox2(int x) - { - return (uint)lRot8(SBOX1[x], 1); - } - - private uint sbox3(int x) - { - return (uint)lRot8(SBOX1[x], 7); - } - - private uint sbox4(int x) - { - return (uint)SBOX1[lRot8((byte)x, 1)]; - } - - private void camelliaF2(uint[] s, uint[] skey, int keyoff) - { - uint t1, t2, u, v; - - t1 = s[0] ^ skey[0 + keyoff]; - u = sbox4((byte)t1); - u |= (sbox3((byte)(t1 >> 8)) << 8); - u |= (sbox2((byte)(t1 >> 16)) << 16); - u |= ((uint)(SBOX1[(byte)(t1 >> 24)]) << 24); - - t2 = s[1] ^ skey[1 + keyoff]; - v = (uint)SBOX1[(byte)t2]; - v |= (sbox4((byte)(t2 >> 8)) << 8); - v |= (sbox3((byte)(t2 >> 16)) << 16); - v |= (sbox2((byte)(t2 >> 24)) << 24); - - v = leftRotate(v, 8); - u ^= v; - v = leftRotate(v, 8) ^ u; - u = rightRotate(u, 8) ^ v; - s[2] ^= leftRotate(v, 16) ^ u; - s[3] ^= leftRotate(u, 8); - - t1 = s[2] ^ skey[2 + keyoff]; - u = sbox4((byte)t1); - u |= sbox3((byte)(t1 >> 8)) << 8; - u |= sbox2((byte)(t1 >> 16)) << 16; - u |= ((uint)SBOX1[(byte)(t1 >> 24)]) << 24; - - t2 = s[3] ^ skey[3 + keyoff]; - v = (uint)SBOX1[(byte)t2]; - v |= sbox4((byte)(t2 >> 8)) << 8; - v |= sbox3((byte)(t2 >> 16)) << 16; - v |= sbox2((byte)(t2 >> 24)) << 24; - - v = leftRotate(v, 8); - u ^= v; - v = leftRotate(v, 8) ^ u; - u = rightRotate(u, 8) ^ v; - s[0] ^= leftRotate(v, 16) ^ u; - s[1] ^= leftRotate(u, 8); - } - - private void camelliaFLs(uint[] s, uint[] fkey, int keyoff) - { - s[1] ^= leftRotate(s[0] & fkey[0 + keyoff], 1); - s[0] ^= fkey[1 + keyoff] | s[1]; - - s[2] ^= fkey[3 + keyoff] | s[3]; - s[3] ^= leftRotate(fkey[2 + keyoff] & s[2], 1); - } - - private void setKey(bool forEncryption, byte[] key) - { - uint[] k = new uint[8]; - uint[] ka = new uint[4]; - uint[] kb = new uint[4]; - uint[] t = new uint[4]; - - switch (key.Length) - { - case 16: - _keyis128 = true; - k[0] = bytes2uint(key, 0); - k[1] = bytes2uint(key, 4); - k[2] = bytes2uint(key, 8); - k[3] = bytes2uint(key, 12); - k[4] = k[5] = k[6] = k[7] = 0; - break; - case 24: - k[0] = bytes2uint(key, 0); - k[1] = bytes2uint(key, 4); - k[2] = bytes2uint(key, 8); - k[3] = bytes2uint(key, 12); - k[4] = bytes2uint(key, 16); - k[5] = bytes2uint(key, 20); - k[6] = ~k[4]; - k[7] = ~k[5]; - _keyis128 = false; - break; - case 32: - k[0] = bytes2uint(key, 0); - k[1] = bytes2uint(key, 4); - k[2] = bytes2uint(key, 8); - k[3] = bytes2uint(key, 12); - k[4] = bytes2uint(key, 16); - k[5] = bytes2uint(key, 20); - k[6] = bytes2uint(key, 24); - k[7] = bytes2uint(key, 28); - _keyis128 = false; - break; - default: - throw new ArgumentException("key sizes are only 16/24/32 bytes."); - } - - for (int i = 0; i < 4; i++) - { - ka[i] = k[i] ^ k[i + 4]; - } - /* compute KA */ - camelliaF2(ka, SIGMA, 0); - for (int i = 0; i < 4; i++) - { - ka[i] ^= k[i]; - } - camelliaF2(ka, SIGMA, 4); - - if (_keyis128) - { - if (forEncryption) - { - /* KL dependant keys */ - kw[0] = k[0]; - kw[1] = k[1]; - kw[2] = k[2]; - kw[3] = k[3]; - roldq(15, k, 0, subkey, 4); - roldq(30, k, 0, subkey, 12); - roldq(15, k, 0, t, 0); - subkey[18] = t[2]; - subkey[19] = t[3]; - roldq(17, k, 0, ke, 4); - roldq(17, k, 0, subkey, 24); - roldq(17, k, 0, subkey, 32); - /* KA dependant keys */ - subkey[0] = ka[0]; - subkey[1] = ka[1]; - subkey[2] = ka[2]; - subkey[3] = ka[3]; - roldq(15, ka, 0, subkey, 8); - roldq(15, ka, 0, ke, 0); - roldq(15, ka, 0, t, 0); - subkey[16] = t[0]; - subkey[17] = t[1]; - roldq(15, ka, 0, subkey, 20); - roldqo32(34, ka, 0, subkey, 28); - roldq(17, ka, 0, kw, 4); - - } - else - { // decryption - /* KL dependant keys */ - kw[4] = k[0]; - kw[5] = k[1]; - kw[6] = k[2]; - kw[7] = k[3]; - decroldq(15, k, 0, subkey, 28); - decroldq(30, k, 0, subkey, 20); - decroldq(15, k, 0, t, 0); - subkey[16] = t[0]; - subkey[17] = t[1]; - decroldq(17, k, 0, ke, 0); - decroldq(17, k, 0, subkey, 8); - decroldq(17, k, 0, subkey, 0); - /* KA dependant keys */ - subkey[34] = ka[0]; - subkey[35] = ka[1]; - subkey[32] = ka[2]; - subkey[33] = ka[3]; - decroldq(15, ka, 0, subkey, 24); - decroldq(15, ka, 0, ke, 4); - decroldq(15, ka, 0, t, 0); - subkey[18] = t[2]; - subkey[19] = t[3]; - decroldq(15, ka, 0, subkey, 12); - decroldqo32(34, ka, 0, subkey, 4); - roldq(17, ka, 0, kw, 0); - } - } - else - { // 192bit or 256bit - /* compute KB */ - for (int i = 0; i < 4; i++) - { - kb[i] = ka[i] ^ k[i + 4]; - } - camelliaF2(kb, SIGMA, 8); - - if (forEncryption) - { - /* KL dependant keys */ - kw[0] = k[0]; - kw[1] = k[1]; - kw[2] = k[2]; - kw[3] = k[3]; - roldqo32(45, k, 0, subkey, 16); - roldq(15, k, 0, ke, 4); - roldq(17, k, 0, subkey, 32); - roldqo32(34, k, 0, subkey, 44); - /* KR dependant keys */ - roldq(15, k, 4, subkey, 4); - roldq(15, k, 4, ke, 0); - roldq(30, k, 4, subkey, 24); - roldqo32(34, k, 4, subkey, 36); - /* KA dependant keys */ - roldq(15, ka, 0, subkey, 8); - roldq(30, ka, 0, subkey, 20); - /* 32bit rotation */ - ke[8] = ka[1]; - ke[9] = ka[2]; - ke[10] = ka[3]; - ke[11] = ka[0]; - roldqo32(49, ka, 0, subkey, 40); - - /* KB dependant keys */ - subkey[0] = kb[0]; - subkey[1] = kb[1]; - subkey[2] = kb[2]; - subkey[3] = kb[3]; - roldq(30, kb, 0, subkey, 12); - roldq(30, kb, 0, subkey, 28); - roldqo32(51, kb, 0, kw, 4); - - } - else - { // decryption - /* KL dependant keys */ - kw[4] = k[0]; - kw[5] = k[1]; - kw[6] = k[2]; - kw[7] = k[3]; - decroldqo32(45, k, 0, subkey, 28); - decroldq(15, k, 0, ke, 4); - decroldq(17, k, 0, subkey, 12); - decroldqo32(34, k, 0, subkey, 0); - /* KR dependant keys */ - decroldq(15, k, 4, subkey, 40); - decroldq(15, k, 4, ke, 8); - decroldq(30, k, 4, subkey, 20); - decroldqo32(34, k, 4, subkey, 8); - /* KA dependant keys */ - decroldq(15, ka, 0, subkey, 36); - decroldq(30, ka, 0, subkey, 24); - /* 32bit rotation */ - ke[2] = ka[1]; - ke[3] = ka[2]; - ke[0] = ka[3]; - ke[1] = ka[0]; - decroldqo32(49, ka, 0, subkey, 4); - - /* KB dependant keys */ - subkey[46] = kb[0]; - subkey[47] = kb[1]; - subkey[44] = kb[2]; - subkey[45] = kb[3]; - decroldq(30, kb, 0, subkey, 32); - decroldq(30, kb, 0, subkey, 16); - roldqo32(51, kb, 0, kw, 0); - } - } - } - - private int processBlock128(byte[] input, int inOff, byte[] output, int outOff) - { - for (int i = 0; i < 4; i++) - { - state[i] = bytes2uint(input, inOff + (i * 4)); - state[i] ^= kw[i]; - } - - camelliaF2(state, subkey, 0); - camelliaF2(state, subkey, 4); - camelliaF2(state, subkey, 8); - camelliaFLs(state, ke, 0); - camelliaF2(state, subkey, 12); - camelliaF2(state, subkey, 16); - camelliaF2(state, subkey, 20); - camelliaFLs(state, ke, 4); - camelliaF2(state, subkey, 24); - camelliaF2(state, subkey, 28); - camelliaF2(state, subkey, 32); - - state[2] ^= kw[4]; - state[3] ^= kw[5]; - state[0] ^= kw[6]; - state[1] ^= kw[7]; - - uint2bytes(state[2], output, outOff); - uint2bytes(state[3], output, outOff + 4); - uint2bytes(state[0], output, outOff + 8); - uint2bytes(state[1], output, outOff + 12); - - return BLOCK_SIZE; - } - - private int processBlock192or256(byte[] input, int inOff, byte[] output, int outOff) - { - for (int i = 0; i < 4; i++) - { - state[i] = bytes2uint(input, inOff + (i * 4)); - state[i] ^= kw[i]; - } - - camelliaF2(state, subkey, 0); - camelliaF2(state, subkey, 4); - camelliaF2(state, subkey, 8); - camelliaFLs(state, ke, 0); - camelliaF2(state, subkey, 12); - camelliaF2(state, subkey, 16); - camelliaF2(state, subkey, 20); - camelliaFLs(state, ke, 4); - camelliaF2(state, subkey, 24); - camelliaF2(state, subkey, 28); - camelliaF2(state, subkey, 32); - camelliaFLs(state, ke, 8); - camelliaF2(state, subkey, 36); - camelliaF2(state, subkey, 40); - camelliaF2(state, subkey, 44); - - state[2] ^= kw[4]; - state[3] ^= kw[5]; - state[0] ^= kw[6]; - state[1] ^= kw[7]; - - uint2bytes(state[2], output, outOff); - uint2bytes(state[3], output, outOff + 4); - uint2bytes(state[0], output, outOff + 8); - uint2bytes(state[1], output, outOff + 12); - return BLOCK_SIZE; - } - - public CamelliaLightEngine() - { - initialised = false; - } - - public virtual string AlgorithmName - { - get { return "Camellia"; } - } - - public virtual bool IsPartialBlockOkay - { - get { return false; } - } - - public virtual int GetBlockSize() - { - return BLOCK_SIZE; - } - - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - if (!(parameters is KeyParameter)) - throw new ArgumentException("only simple KeyParameter expected."); - - setKey(forEncryption, ((KeyParameter)parameters).GetKey()); - - initialised = true; - } - - public virtual int ProcessBlock( - byte[] input, - int inOff, - byte[] output, - int outOff) - { - if (!initialised) - throw new InvalidOperationException("Camellia engine not initialised"); - - Check.DataLength(input, inOff, BLOCK_SIZE, "input buffer too short"); - Check.OutputLength(output, outOff, BLOCK_SIZE, "output buffer too short"); - - if (_keyis128) - { - return processBlock128(input, inOff, output, outOff); - } - else - { - return processBlock192or256(input, inOff, output, outOff); - } - } - - public virtual void Reset() - { - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/CamelliaWrapEngine.cs b/bc-sharp-crypto/src/crypto/engines/CamelliaWrapEngine.cs deleted file mode 100644 index 49dc833..0000000 --- a/bc-sharp-crypto/src/crypto/engines/CamelliaWrapEngine.cs +++ /dev/null @@ -1,16 +0,0 @@ -namespace Org.BouncyCastle.Crypto.Engines -{ - /// - /// An implementation of the Camellia key wrapper based on RFC 3657/RFC 3394. - ///

- /// For further details see: http://www.ietf.org/rfc/rfc3657.txt. - /// - public class CamelliaWrapEngine - : Rfc3394WrapEngine - { - public CamelliaWrapEngine() - : base(new CamelliaEngine()) - { - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/Cast5Engine.cs b/bc-sharp-crypto/src/crypto/engines/Cast5Engine.cs deleted file mode 100644 index 53836db..0000000 --- a/bc-sharp-crypto/src/crypto/engines/Cast5Engine.cs +++ /dev/null @@ -1,802 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * A class that provides CAST key encryption operations, - * such as encoding data and generating keys. - * - * All the algorithms herein are from the Internet RFC's - * - * RFC2144 - Cast5 (64bit block, 40-128bit key) - * RFC2612 - CAST6 (128bit block, 128-256bit key) - * - * and implement a simplified cryptography interface. - */ - public class Cast5Engine - : IBlockCipher - { - internal static readonly uint[] S1 = - { - 0x30fb40d4, 0x9fa0ff0b, 0x6beccd2f, 0x3f258c7a, 0x1e213f2f, 0x9c004dd3, 0x6003e540, 0xcf9fc949, - 0xbfd4af27, 0x88bbbdb5, 0xe2034090, 0x98d09675, 0x6e63a0e0, 0x15c361d2, 0xc2e7661d, 0x22d4ff8e, - 0x28683b6f, 0xc07fd059, 0xff2379c8, 0x775f50e2, 0x43c340d3, 0xdf2f8656, 0x887ca41a, 0xa2d2bd2d, - 0xa1c9e0d6, 0x346c4819, 0x61b76d87, 0x22540f2f, 0x2abe32e1, 0xaa54166b, 0x22568e3a, 0xa2d341d0, - 0x66db40c8, 0xa784392f, 0x004dff2f, 0x2db9d2de, 0x97943fac, 0x4a97c1d8, 0x527644b7, 0xb5f437a7, - 0xb82cbaef, 0xd751d159, 0x6ff7f0ed, 0x5a097a1f, 0x827b68d0, 0x90ecf52e, 0x22b0c054, 0xbc8e5935, - 0x4b6d2f7f, 0x50bb64a2, 0xd2664910, 0xbee5812d, 0xb7332290, 0xe93b159f, 0xb48ee411, 0x4bff345d, - 0xfd45c240, 0xad31973f, 0xc4f6d02e, 0x55fc8165, 0xd5b1caad, 0xa1ac2dae, 0xa2d4b76d, 0xc19b0c50, - 0x882240f2, 0x0c6e4f38, 0xa4e4bfd7, 0x4f5ba272, 0x564c1d2f, 0xc59c5319, 0xb949e354, 0xb04669fe, - 0xb1b6ab8a, 0xc71358dd, 0x6385c545, 0x110f935d, 0x57538ad5, 0x6a390493, 0xe63d37e0, 0x2a54f6b3, - 0x3a787d5f, 0x6276a0b5, 0x19a6fcdf, 0x7a42206a, 0x29f9d4d5, 0xf61b1891, 0xbb72275e, 0xaa508167, - 0x38901091, 0xc6b505eb, 0x84c7cb8c, 0x2ad75a0f, 0x874a1427, 0xa2d1936b, 0x2ad286af, 0xaa56d291, - 0xd7894360, 0x425c750d, 0x93b39e26, 0x187184c9, 0x6c00b32d, 0x73e2bb14, 0xa0bebc3c, 0x54623779, - 0x64459eab, 0x3f328b82, 0x7718cf82, 0x59a2cea6, 0x04ee002e, 0x89fe78e6, 0x3fab0950, 0x325ff6c2, - 0x81383f05, 0x6963c5c8, 0x76cb5ad6, 0xd49974c9, 0xca180dcf, 0x380782d5, 0xc7fa5cf6, 0x8ac31511, - 0x35e79e13, 0x47da91d0, 0xf40f9086, 0xa7e2419e, 0x31366241, 0x051ef495, 0xaa573b04, 0x4a805d8d, - 0x548300d0, 0x00322a3c, 0xbf64cddf, 0xba57a68e, 0x75c6372b, 0x50afd341, 0xa7c13275, 0x915a0bf5, - 0x6b54bfab, 0x2b0b1426, 0xab4cc9d7, 0x449ccd82, 0xf7fbf265, 0xab85c5f3, 0x1b55db94, 0xaad4e324, - 0xcfa4bd3f, 0x2deaa3e2, 0x9e204d02, 0xc8bd25ac, 0xeadf55b3, 0xd5bd9e98, 0xe31231b2, 0x2ad5ad6c, - 0x954329de, 0xadbe4528, 0xd8710f69, 0xaa51c90f, 0xaa786bf6, 0x22513f1e, 0xaa51a79b, 0x2ad344cc, - 0x7b5a41f0, 0xd37cfbad, 0x1b069505, 0x41ece491, 0xb4c332e6, 0x032268d4, 0xc9600acc, 0xce387e6d, - 0xbf6bb16c, 0x6a70fb78, 0x0d03d9c9, 0xd4df39de, 0xe01063da, 0x4736f464, 0x5ad328d8, 0xb347cc96, - 0x75bb0fc3, 0x98511bfb, 0x4ffbcc35, 0xb58bcf6a, 0xe11f0abc, 0xbfc5fe4a, 0xa70aec10, 0xac39570a, - 0x3f04442f, 0x6188b153, 0xe0397a2e, 0x5727cb79, 0x9ceb418f, 0x1cacd68d, 0x2ad37c96, 0x0175cb9d, - 0xc69dff09, 0xc75b65f0, 0xd9db40d8, 0xec0e7779, 0x4744ead4, 0xb11c3274, 0xdd24cb9e, 0x7e1c54bd, - 0xf01144f9, 0xd2240eb1, 0x9675b3fd, 0xa3ac3755, 0xd47c27af, 0x51c85f4d, 0x56907596, 0xa5bb15e6, - 0x580304f0, 0xca042cf1, 0x011a37ea, 0x8dbfaadb, 0x35ba3e4a, 0x3526ffa0, 0xc37b4d09, 0xbc306ed9, - 0x98a52666, 0x5648f725, 0xff5e569d, 0x0ced63d0, 0x7c63b2cf, 0x700b45e1, 0xd5ea50f1, 0x85a92872, - 0xaf1fbda7, 0xd4234870, 0xa7870bf3, 0x2d3b4d79, 0x42e04198, 0x0cd0ede7, 0x26470db8, 0xf881814c, - 0x474d6ad7, 0x7c0c5e5c, 0xd1231959, 0x381b7298, 0xf5d2f4db, 0xab838653, 0x6e2f1e23, 0x83719c9e, - 0xbd91e046, 0x9a56456e, 0xdc39200c, 0x20c8c571, 0x962bda1c, 0xe1e696ff, 0xb141ab08, 0x7cca89b9, - 0x1a69e783, 0x02cc4843, 0xa2f7c579, 0x429ef47d, 0x427b169c, 0x5ac9f049, 0xdd8f0f00, 0x5c8165bf - }, - S2 = - { - 0x1f201094, 0xef0ba75b, 0x69e3cf7e, 0x393f4380, 0xfe61cf7a, 0xeec5207a, 0x55889c94, 0x72fc0651, - 0xada7ef79, 0x4e1d7235, 0xd55a63ce, 0xde0436ba, 0x99c430ef, 0x5f0c0794, 0x18dcdb7d, 0xa1d6eff3, - 0xa0b52f7b, 0x59e83605, 0xee15b094, 0xe9ffd909, 0xdc440086, 0xef944459, 0xba83ccb3, 0xe0c3cdfb, - 0xd1da4181, 0x3b092ab1, 0xf997f1c1, 0xa5e6cf7b, 0x01420ddb, 0xe4e7ef5b, 0x25a1ff41, 0xe180f806, - 0x1fc41080, 0x179bee7a, 0xd37ac6a9, 0xfe5830a4, 0x98de8b7f, 0x77e83f4e, 0x79929269, 0x24fa9f7b, - 0xe113c85b, 0xacc40083, 0xd7503525, 0xf7ea615f, 0x62143154, 0x0d554b63, 0x5d681121, 0xc866c359, - 0x3d63cf73, 0xcee234c0, 0xd4d87e87, 0x5c672b21, 0x071f6181, 0x39f7627f, 0x361e3084, 0xe4eb573b, - 0x602f64a4, 0xd63acd9c, 0x1bbc4635, 0x9e81032d, 0x2701f50c, 0x99847ab4, 0xa0e3df79, 0xba6cf38c, - 0x10843094, 0x2537a95e, 0xf46f6ffe, 0xa1ff3b1f, 0x208cfb6a, 0x8f458c74, 0xd9e0a227, 0x4ec73a34, - 0xfc884f69, 0x3e4de8df, 0xef0e0088, 0x3559648d, 0x8a45388c, 0x1d804366, 0x721d9bfd, 0xa58684bb, - 0xe8256333, 0x844e8212, 0x128d8098, 0xfed33fb4, 0xce280ae1, 0x27e19ba5, 0xd5a6c252, 0xe49754bd, - 0xc5d655dd, 0xeb667064, 0x77840b4d, 0xa1b6a801, 0x84db26a9, 0xe0b56714, 0x21f043b7, 0xe5d05860, - 0x54f03084, 0x066ff472, 0xa31aa153, 0xdadc4755, 0xb5625dbf, 0x68561be6, 0x83ca6b94, 0x2d6ed23b, - 0xeccf01db, 0xa6d3d0ba, 0xb6803d5c, 0xaf77a709, 0x33b4a34c, 0x397bc8d6, 0x5ee22b95, 0x5f0e5304, - 0x81ed6f61, 0x20e74364, 0xb45e1378, 0xde18639b, 0x881ca122, 0xb96726d1, 0x8049a7e8, 0x22b7da7b, - 0x5e552d25, 0x5272d237, 0x79d2951c, 0xc60d894c, 0x488cb402, 0x1ba4fe5b, 0xa4b09f6b, 0x1ca815cf, - 0xa20c3005, 0x8871df63, 0xb9de2fcb, 0x0cc6c9e9, 0x0beeff53, 0xe3214517, 0xb4542835, 0x9f63293c, - 0xee41e729, 0x6e1d2d7c, 0x50045286, 0x1e6685f3, 0xf33401c6, 0x30a22c95, 0x31a70850, 0x60930f13, - 0x73f98417, 0xa1269859, 0xec645c44, 0x52c877a9, 0xcdff33a6, 0xa02b1741, 0x7cbad9a2, 0x2180036f, - 0x50d99c08, 0xcb3f4861, 0xc26bd765, 0x64a3f6ab, 0x80342676, 0x25a75e7b, 0xe4e6d1fc, 0x20c710e6, - 0xcdf0b680, 0x17844d3b, 0x31eef84d, 0x7e0824e4, 0x2ccb49eb, 0x846a3bae, 0x8ff77888, 0xee5d60f6, - 0x7af75673, 0x2fdd5cdb, 0xa11631c1, 0x30f66f43, 0xb3faec54, 0x157fd7fa, 0xef8579cc, 0xd152de58, - 0xdb2ffd5e, 0x8f32ce19, 0x306af97a, 0x02f03ef8, 0x99319ad5, 0xc242fa0f, 0xa7e3ebb0, 0xc68e4906, - 0xb8da230c, 0x80823028, 0xdcdef3c8, 0xd35fb171, 0x088a1bc8, 0xbec0c560, 0x61a3c9e8, 0xbca8f54d, - 0xc72feffa, 0x22822e99, 0x82c570b4, 0xd8d94e89, 0x8b1c34bc, 0x301e16e6, 0x273be979, 0xb0ffeaa6, - 0x61d9b8c6, 0x00b24869, 0xb7ffce3f, 0x08dc283b, 0x43daf65a, 0xf7e19798, 0x7619b72f, 0x8f1c9ba4, - 0xdc8637a0, 0x16a7d3b1, 0x9fc393b7, 0xa7136eeb, 0xc6bcc63e, 0x1a513742, 0xef6828bc, 0x520365d6, - 0x2d6a77ab, 0x3527ed4b, 0x821fd216, 0x095c6e2e, 0xdb92f2fb, 0x5eea29cb, 0x145892f5, 0x91584f7f, - 0x5483697b, 0x2667a8cc, 0x85196048, 0x8c4bacea, 0x833860d4, 0x0d23e0f9, 0x6c387e8a, 0x0ae6d249, - 0xb284600c, 0xd835731d, 0xdcb1c647, 0xac4c56ea, 0x3ebd81b3, 0x230eabb0, 0x6438bc87, 0xf0b5b1fa, - 0x8f5ea2b3, 0xfc184642, 0x0a036b7a, 0x4fb089bd, 0x649da589, 0xa345415e, 0x5c038323, 0x3e5d3bb9, - 0x43d79572, 0x7e6dd07c, 0x06dfdf1e, 0x6c6cc4ef, 0x7160a539, 0x73bfbe70, 0x83877605, 0x4523ecf1 - }, - S3 = - { - 0x8defc240, 0x25fa5d9f, 0xeb903dbf, 0xe810c907, 0x47607fff, 0x369fe44b, 0x8c1fc644, 0xaececa90, - 0xbeb1f9bf, 0xeefbcaea, 0xe8cf1950, 0x51df07ae, 0x920e8806, 0xf0ad0548, 0xe13c8d83, 0x927010d5, - 0x11107d9f, 0x07647db9, 0xb2e3e4d4, 0x3d4f285e, 0xb9afa820, 0xfade82e0, 0xa067268b, 0x8272792e, - 0x553fb2c0, 0x489ae22b, 0xd4ef9794, 0x125e3fbc, 0x21fffcee, 0x825b1bfd, 0x9255c5ed, 0x1257a240, - 0x4e1a8302, 0xbae07fff, 0x528246e7, 0x8e57140e, 0x3373f7bf, 0x8c9f8188, 0xa6fc4ee8, 0xc982b5a5, - 0xa8c01db7, 0x579fc264, 0x67094f31, 0xf2bd3f5f, 0x40fff7c1, 0x1fb78dfc, 0x8e6bd2c1, 0x437be59b, - 0x99b03dbf, 0xb5dbc64b, 0x638dc0e6, 0x55819d99, 0xa197c81c, 0x4a012d6e, 0xc5884a28, 0xccc36f71, - 0xb843c213, 0x6c0743f1, 0x8309893c, 0x0feddd5f, 0x2f7fe850, 0xd7c07f7e, 0x02507fbf, 0x5afb9a04, - 0xa747d2d0, 0x1651192e, 0xaf70bf3e, 0x58c31380, 0x5f98302e, 0x727cc3c4, 0x0a0fb402, 0x0f7fef82, - 0x8c96fdad, 0x5d2c2aae, 0x8ee99a49, 0x50da88b8, 0x8427f4a0, 0x1eac5790, 0x796fb449, 0x8252dc15, - 0xefbd7d9b, 0xa672597d, 0xada840d8, 0x45f54504, 0xfa5d7403, 0xe83ec305, 0x4f91751a, 0x925669c2, - 0x23efe941, 0xa903f12e, 0x60270df2, 0x0276e4b6, 0x94fd6574, 0x927985b2, 0x8276dbcb, 0x02778176, - 0xf8af918d, 0x4e48f79e, 0x8f616ddf, 0xe29d840e, 0x842f7d83, 0x340ce5c8, 0x96bbb682, 0x93b4b148, - 0xef303cab, 0x984faf28, 0x779faf9b, 0x92dc560d, 0x224d1e20, 0x8437aa88, 0x7d29dc96, 0x2756d3dc, - 0x8b907cee, 0xb51fd240, 0xe7c07ce3, 0xe566b4a1, 0xc3e9615e, 0x3cf8209d, 0x6094d1e3, 0xcd9ca341, - 0x5c76460e, 0x00ea983b, 0xd4d67881, 0xfd47572c, 0xf76cedd9, 0xbda8229c, 0x127dadaa, 0x438a074e, - 0x1f97c090, 0x081bdb8a, 0x93a07ebe, 0xb938ca15, 0x97b03cff, 0x3dc2c0f8, 0x8d1ab2ec, 0x64380e51, - 0x68cc7bfb, 0xd90f2788, 0x12490181, 0x5de5ffd4, 0xdd7ef86a, 0x76a2e214, 0xb9a40368, 0x925d958f, - 0x4b39fffa, 0xba39aee9, 0xa4ffd30b, 0xfaf7933b, 0x6d498623, 0x193cbcfa, 0x27627545, 0x825cf47a, - 0x61bd8ba0, 0xd11e42d1, 0xcead04f4, 0x127ea392, 0x10428db7, 0x8272a972, 0x9270c4a8, 0x127de50b, - 0x285ba1c8, 0x3c62f44f, 0x35c0eaa5, 0xe805d231, 0x428929fb, 0xb4fcdf82, 0x4fb66a53, 0x0e7dc15b, - 0x1f081fab, 0x108618ae, 0xfcfd086d, 0xf9ff2889, 0x694bcc11, 0x236a5cae, 0x12deca4d, 0x2c3f8cc5, - 0xd2d02dfe, 0xf8ef5896, 0xe4cf52da, 0x95155b67, 0x494a488c, 0xb9b6a80c, 0x5c8f82bc, 0x89d36b45, - 0x3a609437, 0xec00c9a9, 0x44715253, 0x0a874b49, 0xd773bc40, 0x7c34671c, 0x02717ef6, 0x4feb5536, - 0xa2d02fff, 0xd2bf60c4, 0xd43f03c0, 0x50b4ef6d, 0x07478cd1, 0x006e1888, 0xa2e53f55, 0xb9e6d4bc, - 0xa2048016, 0x97573833, 0xd7207d67, 0xde0f8f3d, 0x72f87b33, 0xabcc4f33, 0x7688c55d, 0x7b00a6b0, - 0x947b0001, 0x570075d2, 0xf9bb88f8, 0x8942019e, 0x4264a5ff, 0x856302e0, 0x72dbd92b, 0xee971b69, - 0x6ea22fde, 0x5f08ae2b, 0xaf7a616d, 0xe5c98767, 0xcf1febd2, 0x61efc8c2, 0xf1ac2571, 0xcc8239c2, - 0x67214cb8, 0xb1e583d1, 0xb7dc3e62, 0x7f10bdce, 0xf90a5c38, 0x0ff0443d, 0x606e6dc6, 0x60543a49, - 0x5727c148, 0x2be98a1d, 0x8ab41738, 0x20e1be24, 0xaf96da0f, 0x68458425, 0x99833be5, 0x600d457d, - 0x282f9350, 0x8334b362, 0xd91d1120, 0x2b6d8da0, 0x642b1e31, 0x9c305a00, 0x52bce688, 0x1b03588a, - 0xf7baefd5, 0x4142ed9c, 0xa4315c11, 0x83323ec5, 0xdfef4636, 0xa133c501, 0xe9d3531c, 0xee353783 - }, - S4 = - { - 0x9db30420, 0x1fb6e9de, 0xa7be7bef, 0xd273a298, 0x4a4f7bdb, 0x64ad8c57, 0x85510443, 0xfa020ed1, - 0x7e287aff, 0xe60fb663, 0x095f35a1, 0x79ebf120, 0xfd059d43, 0x6497b7b1, 0xf3641f63, 0x241e4adf, - 0x28147f5f, 0x4fa2b8cd, 0xc9430040, 0x0cc32220, 0xfdd30b30, 0xc0a5374f, 0x1d2d00d9, 0x24147b15, - 0xee4d111a, 0x0fca5167, 0x71ff904c, 0x2d195ffe, 0x1a05645f, 0x0c13fefe, 0x081b08ca, 0x05170121, - 0x80530100, 0xe83e5efe, 0xac9af4f8, 0x7fe72701, 0xd2b8ee5f, 0x06df4261, 0xbb9e9b8a, 0x7293ea25, - 0xce84ffdf, 0xf5718801, 0x3dd64b04, 0xa26f263b, 0x7ed48400, 0x547eebe6, 0x446d4ca0, 0x6cf3d6f5, - 0x2649abdf, 0xaea0c7f5, 0x36338cc1, 0x503f7e93, 0xd3772061, 0x11b638e1, 0x72500e03, 0xf80eb2bb, - 0xabe0502e, 0xec8d77de, 0x57971e81, 0xe14f6746, 0xc9335400, 0x6920318f, 0x081dbb99, 0xffc304a5, - 0x4d351805, 0x7f3d5ce3, 0xa6c866c6, 0x5d5bcca9, 0xdaec6fea, 0x9f926f91, 0x9f46222f, 0x3991467d, - 0xa5bf6d8e, 0x1143c44f, 0x43958302, 0xd0214eeb, 0x022083b8, 0x3fb6180c, 0x18f8931e, 0x281658e6, - 0x26486e3e, 0x8bd78a70, 0x7477e4c1, 0xb506e07c, 0xf32d0a25, 0x79098b02, 0xe4eabb81, 0x28123b23, - 0x69dead38, 0x1574ca16, 0xdf871b62, 0x211c40b7, 0xa51a9ef9, 0x0014377b, 0x041e8ac8, 0x09114003, - 0xbd59e4d2, 0xe3d156d5, 0x4fe876d5, 0x2f91a340, 0x557be8de, 0x00eae4a7, 0x0ce5c2ec, 0x4db4bba6, - 0xe756bdff, 0xdd3369ac, 0xec17b035, 0x06572327, 0x99afc8b0, 0x56c8c391, 0x6b65811c, 0x5e146119, - 0x6e85cb75, 0xbe07c002, 0xc2325577, 0x893ff4ec, 0x5bbfc92d, 0xd0ec3b25, 0xb7801ab7, 0x8d6d3b24, - 0x20c763ef, 0xc366a5fc, 0x9c382880, 0x0ace3205, 0xaac9548a, 0xeca1d7c7, 0x041afa32, 0x1d16625a, - 0x6701902c, 0x9b757a54, 0x31d477f7, 0x9126b031, 0x36cc6fdb, 0xc70b8b46, 0xd9e66a48, 0x56e55a79, - 0x026a4ceb, 0x52437eff, 0x2f8f76b4, 0x0df980a5, 0x8674cde3, 0xedda04eb, 0x17a9be04, 0x2c18f4df, - 0xb7747f9d, 0xab2af7b4, 0xefc34d20, 0x2e096b7c, 0x1741a254, 0xe5b6a035, 0x213d42f6, 0x2c1c7c26, - 0x61c2f50f, 0x6552daf9, 0xd2c231f8, 0x25130f69, 0xd8167fa2, 0x0418f2c8, 0x001a96a6, 0x0d1526ab, - 0x63315c21, 0x5e0a72ec, 0x49bafefd, 0x187908d9, 0x8d0dbd86, 0x311170a7, 0x3e9b640c, 0xcc3e10d7, - 0xd5cad3b6, 0x0caec388, 0xf73001e1, 0x6c728aff, 0x71eae2a1, 0x1f9af36e, 0xcfcbd12f, 0xc1de8417, - 0xac07be6b, 0xcb44a1d8, 0x8b9b0f56, 0x013988c3, 0xb1c52fca, 0xb4be31cd, 0xd8782806, 0x12a3a4e2, - 0x6f7de532, 0x58fd7eb6, 0xd01ee900, 0x24adffc2, 0xf4990fc5, 0x9711aac5, 0x001d7b95, 0x82e5e7d2, - 0x109873f6, 0x00613096, 0xc32d9521, 0xada121ff, 0x29908415, 0x7fbb977f, 0xaf9eb3db, 0x29c9ed2a, - 0x5ce2a465, 0xa730f32c, 0xd0aa3fe8, 0x8a5cc091, 0xd49e2ce7, 0x0ce454a9, 0xd60acd86, 0x015f1919, - 0x77079103, 0xdea03af6, 0x78a8565e, 0xdee356df, 0x21f05cbe, 0x8b75e387, 0xb3c50651, 0xb8a5c3ef, - 0xd8eeb6d2, 0xe523be77, 0xc2154529, 0x2f69efdf, 0xafe67afb, 0xf470c4b2, 0xf3e0eb5b, 0xd6cc9876, - 0x39e4460c, 0x1fda8538, 0x1987832f, 0xca007367, 0xa99144f8, 0x296b299e, 0x492fc295, 0x9266beab, - 0xb5676e69, 0x9bd3ddda, 0xdf7e052f, 0xdb25701c, 0x1b5e51ee, 0xf65324e6, 0x6afce36c, 0x0316cc04, - 0x8644213e, 0xb7dc59d0, 0x7965291f, 0xccd6fd43, 0x41823979, 0x932bcdf6, 0xb657c34d, 0x4edfd282, - 0x7ae5290c, 0x3cb9536b, 0x851e20fe, 0x9833557e, 0x13ecf0b0, 0xd3ffb372, 0x3f85c5c1, 0x0aef7ed2 - }, - S5 = - { - 0x7ec90c04, 0x2c6e74b9, 0x9b0e66df, 0xa6337911, 0xb86a7fff, 0x1dd358f5, 0x44dd9d44, 0x1731167f, - 0x08fbf1fa, 0xe7f511cc, 0xd2051b00, 0x735aba00, 0x2ab722d8, 0x386381cb, 0xacf6243a, 0x69befd7a, - 0xe6a2e77f, 0xf0c720cd, 0xc4494816, 0xccf5c180, 0x38851640, 0x15b0a848, 0xe68b18cb, 0x4caadeff, - 0x5f480a01, 0x0412b2aa, 0x259814fc, 0x41d0efe2, 0x4e40b48d, 0x248eb6fb, 0x8dba1cfe, 0x41a99b02, - 0x1a550a04, 0xba8f65cb, 0x7251f4e7, 0x95a51725, 0xc106ecd7, 0x97a5980a, 0xc539b9aa, 0x4d79fe6a, - 0xf2f3f763, 0x68af8040, 0xed0c9e56, 0x11b4958b, 0xe1eb5a88, 0x8709e6b0, 0xd7e07156, 0x4e29fea7, - 0x6366e52d, 0x02d1c000, 0xc4ac8e05, 0x9377f571, 0x0c05372a, 0x578535f2, 0x2261be02, 0xd642a0c9, - 0xdf13a280, 0x74b55bd2, 0x682199c0, 0xd421e5ec, 0x53fb3ce8, 0xc8adedb3, 0x28a87fc9, 0x3d959981, - 0x5c1ff900, 0xfe38d399, 0x0c4eff0b, 0x062407ea, 0xaa2f4fb1, 0x4fb96976, 0x90c79505, 0xb0a8a774, - 0xef55a1ff, 0xe59ca2c2, 0xa6b62d27, 0xe66a4263, 0xdf65001f, 0x0ec50966, 0xdfdd55bc, 0x29de0655, - 0x911e739a, 0x17af8975, 0x32c7911c, 0x89f89468, 0x0d01e980, 0x524755f4, 0x03b63cc9, 0x0cc844b2, - 0xbcf3f0aa, 0x87ac36e9, 0xe53a7426, 0x01b3d82b, 0x1a9e7449, 0x64ee2d7e, 0xcddbb1da, 0x01c94910, - 0xb868bf80, 0x0d26f3fd, 0x9342ede7, 0x04a5c284, 0x636737b6, 0x50f5b616, 0xf24766e3, 0x8eca36c1, - 0x136e05db, 0xfef18391, 0xfb887a37, 0xd6e7f7d4, 0xc7fb7dc9, 0x3063fcdf, 0xb6f589de, 0xec2941da, - 0x26e46695, 0xb7566419, 0xf654efc5, 0xd08d58b7, 0x48925401, 0xc1bacb7f, 0xe5ff550f, 0xb6083049, - 0x5bb5d0e8, 0x87d72e5a, 0xab6a6ee1, 0x223a66ce, 0xc62bf3cd, 0x9e0885f9, 0x68cb3e47, 0x086c010f, - 0xa21de820, 0xd18b69de, 0xf3f65777, 0xfa02c3f6, 0x407edac3, 0xcbb3d550, 0x1793084d, 0xb0d70eba, - 0x0ab378d5, 0xd951fb0c, 0xded7da56, 0x4124bbe4, 0x94ca0b56, 0x0f5755d1, 0xe0e1e56e, 0x6184b5be, - 0x580a249f, 0x94f74bc0, 0xe327888e, 0x9f7b5561, 0xc3dc0280, 0x05687715, 0x646c6bd7, 0x44904db3, - 0x66b4f0a3, 0xc0f1648a, 0x697ed5af, 0x49e92ff6, 0x309e374f, 0x2cb6356a, 0x85808573, 0x4991f840, - 0x76f0ae02, 0x083be84d, 0x28421c9a, 0x44489406, 0x736e4cb8, 0xc1092910, 0x8bc95fc6, 0x7d869cf4, - 0x134f616f, 0x2e77118d, 0xb31b2be1, 0xaa90b472, 0x3ca5d717, 0x7d161bba, 0x9cad9010, 0xaf462ba2, - 0x9fe459d2, 0x45d34559, 0xd9f2da13, 0xdbc65487, 0xf3e4f94e, 0x176d486f, 0x097c13ea, 0x631da5c7, - 0x445f7382, 0x175683f4, 0xcdc66a97, 0x70be0288, 0xb3cdcf72, 0x6e5dd2f3, 0x20936079, 0x459b80a5, - 0xbe60e2db, 0xa9c23101, 0xeba5315c, 0x224e42f2, 0x1c5c1572, 0xf6721b2c, 0x1ad2fff3, 0x8c25404e, - 0x324ed72f, 0x4067b7fd, 0x0523138e, 0x5ca3bc78, 0xdc0fd66e, 0x75922283, 0x784d6b17, 0x58ebb16e, - 0x44094f85, 0x3f481d87, 0xfcfeae7b, 0x77b5ff76, 0x8c2302bf, 0xaaf47556, 0x5f46b02a, 0x2b092801, - 0x3d38f5f7, 0x0ca81f36, 0x52af4a8a, 0x66d5e7c0, 0xdf3b0874, 0x95055110, 0x1b5ad7a8, 0xf61ed5ad, - 0x6cf6e479, 0x20758184, 0xd0cefa65, 0x88f7be58, 0x4a046826, 0x0ff6f8f3, 0xa09c7f70, 0x5346aba0, - 0x5ce96c28, 0xe176eda3, 0x6bac307f, 0x376829d2, 0x85360fa9, 0x17e3fe2a, 0x24b79767, 0xf5a96b20, - 0xd6cd2595, 0x68ff1ebf, 0x7555442c, 0xf19f06be, 0xf9e0659a, 0xeeb9491d, 0x34010718, 0xbb30cab8, - 0xe822fe15, 0x88570983, 0x750e6249, 0xda627e55, 0x5e76ffa8, 0xb1534546, 0x6d47de08, 0xefe9e7d4 - }, - S6 = - { - 0xf6fa8f9d, 0x2cac6ce1, 0x4ca34867, 0xe2337f7c, 0x95db08e7, 0x016843b4, 0xeced5cbc, 0x325553ac, - 0xbf9f0960, 0xdfa1e2ed, 0x83f0579d, 0x63ed86b9, 0x1ab6a6b8, 0xde5ebe39, 0xf38ff732, 0x8989b138, - 0x33f14961, 0xc01937bd, 0xf506c6da, 0xe4625e7e, 0xa308ea99, 0x4e23e33c, 0x79cbd7cc, 0x48a14367, - 0xa3149619, 0xfec94bd5, 0xa114174a, 0xeaa01866, 0xa084db2d, 0x09a8486f, 0xa888614a, 0x2900af98, - 0x01665991, 0xe1992863, 0xc8f30c60, 0x2e78ef3c, 0xd0d51932, 0xcf0fec14, 0xf7ca07d2, 0xd0a82072, - 0xfd41197e, 0x9305a6b0, 0xe86be3da, 0x74bed3cd, 0x372da53c, 0x4c7f4448, 0xdab5d440, 0x6dba0ec3, - 0x083919a7, 0x9fbaeed9, 0x49dbcfb0, 0x4e670c53, 0x5c3d9c01, 0x64bdb941, 0x2c0e636a, 0xba7dd9cd, - 0xea6f7388, 0xe70bc762, 0x35f29adb, 0x5c4cdd8d, 0xf0d48d8c, 0xb88153e2, 0x08a19866, 0x1ae2eac8, - 0x284caf89, 0xaa928223, 0x9334be53, 0x3b3a21bf, 0x16434be3, 0x9aea3906, 0xefe8c36e, 0xf890cdd9, - 0x80226dae, 0xc340a4a3, 0xdf7e9c09, 0xa694a807, 0x5b7c5ecc, 0x221db3a6, 0x9a69a02f, 0x68818a54, - 0xceb2296f, 0x53c0843a, 0xfe893655, 0x25bfe68a, 0xb4628abc, 0xcf222ebf, 0x25ac6f48, 0xa9a99387, - 0x53bddb65, 0xe76ffbe7, 0xe967fd78, 0x0ba93563, 0x8e342bc1, 0xe8a11be9, 0x4980740d, 0xc8087dfc, - 0x8de4bf99, 0xa11101a0, 0x7fd37975, 0xda5a26c0, 0xe81f994f, 0x9528cd89, 0xfd339fed, 0xb87834bf, - 0x5f04456d, 0x22258698, 0xc9c4c83b, 0x2dc156be, 0x4f628daa, 0x57f55ec5, 0xe2220abe, 0xd2916ebf, - 0x4ec75b95, 0x24f2c3c0, 0x42d15d99, 0xcd0d7fa0, 0x7b6e27ff, 0xa8dc8af0, 0x7345c106, 0xf41e232f, - 0x35162386, 0xe6ea8926, 0x3333b094, 0x157ec6f2, 0x372b74af, 0x692573e4, 0xe9a9d848, 0xf3160289, - 0x3a62ef1d, 0xa787e238, 0xf3a5f676, 0x74364853, 0x20951063, 0x4576698d, 0xb6fad407, 0x592af950, - 0x36f73523, 0x4cfb6e87, 0x7da4cec0, 0x6c152daa, 0xcb0396a8, 0xc50dfe5d, 0xfcd707ab, 0x0921c42f, - 0x89dff0bb, 0x5fe2be78, 0x448f4f33, 0x754613c9, 0x2b05d08d, 0x48b9d585, 0xdc049441, 0xc8098f9b, - 0x7dede786, 0xc39a3373, 0x42410005, 0x6a091751, 0x0ef3c8a6, 0x890072d6, 0x28207682, 0xa9a9f7be, - 0xbf32679d, 0xd45b5b75, 0xb353fd00, 0xcbb0e358, 0x830f220a, 0x1f8fb214, 0xd372cf08, 0xcc3c4a13, - 0x8cf63166, 0x061c87be, 0x88c98f88, 0x6062e397, 0x47cf8e7a, 0xb6c85283, 0x3cc2acfb, 0x3fc06976, - 0x4e8f0252, 0x64d8314d, 0xda3870e3, 0x1e665459, 0xc10908f0, 0x513021a5, 0x6c5b68b7, 0x822f8aa0, - 0x3007cd3e, 0x74719eef, 0xdc872681, 0x073340d4, 0x7e432fd9, 0x0c5ec241, 0x8809286c, 0xf592d891, - 0x08a930f6, 0x957ef305, 0xb7fbffbd, 0xc266e96f, 0x6fe4ac98, 0xb173ecc0, 0xbc60b42a, 0x953498da, - 0xfba1ae12, 0x2d4bd736, 0x0f25faab, 0xa4f3fceb, 0xe2969123, 0x257f0c3d, 0x9348af49, 0x361400bc, - 0xe8816f4a, 0x3814f200, 0xa3f94043, 0x9c7a54c2, 0xbc704f57, 0xda41e7f9, 0xc25ad33a, 0x54f4a084, - 0xb17f5505, 0x59357cbe, 0xedbd15c8, 0x7f97c5ab, 0xba5ac7b5, 0xb6f6deaf, 0x3a479c3a, 0x5302da25, - 0x653d7e6a, 0x54268d49, 0x51a477ea, 0x5017d55b, 0xd7d25d88, 0x44136c76, 0x0404a8c8, 0xb8e5a121, - 0xb81a928a, 0x60ed5869, 0x97c55b96, 0xeaec991b, 0x29935913, 0x01fdb7f1, 0x088e8dfa, 0x9ab6f6f5, - 0x3b4cbf9f, 0x4a5de3ab, 0xe6051d35, 0xa0e1d855, 0xd36b4cf1, 0xf544edeb, 0xb0e93524, 0xbebb8fbd, - 0xa2d762cf, 0x49c92f54, 0x38b5f331, 0x7128a454, 0x48392905, 0xa65b1db8, 0x851c97bd, 0xd675cf2f - }, - S7 = - { - 0x85e04019, 0x332bf567, 0x662dbfff, 0xcfc65693, 0x2a8d7f6f, 0xab9bc912, 0xde6008a1, 0x2028da1f, - 0x0227bce7, 0x4d642916, 0x18fac300, 0x50f18b82, 0x2cb2cb11, 0xb232e75c, 0x4b3695f2, 0xb28707de, - 0xa05fbcf6, 0xcd4181e9, 0xe150210c, 0xe24ef1bd, 0xb168c381, 0xfde4e789, 0x5c79b0d8, 0x1e8bfd43, - 0x4d495001, 0x38be4341, 0x913cee1d, 0x92a79c3f, 0x089766be, 0xbaeeadf4, 0x1286becf, 0xb6eacb19, - 0x2660c200, 0x7565bde4, 0x64241f7a, 0x8248dca9, 0xc3b3ad66, 0x28136086, 0x0bd8dfa8, 0x356d1cf2, - 0x107789be, 0xb3b2e9ce, 0x0502aa8f, 0x0bc0351e, 0x166bf52a, 0xeb12ff82, 0xe3486911, 0xd34d7516, - 0x4e7b3aff, 0x5f43671b, 0x9cf6e037, 0x4981ac83, 0x334266ce, 0x8c9341b7, 0xd0d854c0, 0xcb3a6c88, - 0x47bc2829, 0x4725ba37, 0xa66ad22b, 0x7ad61f1e, 0x0c5cbafa, 0x4437f107, 0xb6e79962, 0x42d2d816, - 0x0a961288, 0xe1a5c06e, 0x13749e67, 0x72fc081a, 0xb1d139f7, 0xf9583745, 0xcf19df58, 0xbec3f756, - 0xc06eba30, 0x07211b24, 0x45c28829, 0xc95e317f, 0xbc8ec511, 0x38bc46e9, 0xc6e6fa14, 0xbae8584a, - 0xad4ebc46, 0x468f508b, 0x7829435f, 0xf124183b, 0x821dba9f, 0xaff60ff4, 0xea2c4e6d, 0x16e39264, - 0x92544a8b, 0x009b4fc3, 0xaba68ced, 0x9ac96f78, 0x06a5b79a, 0xb2856e6e, 0x1aec3ca9, 0xbe838688, - 0x0e0804e9, 0x55f1be56, 0xe7e5363b, 0xb3a1f25d, 0xf7debb85, 0x61fe033c, 0x16746233, 0x3c034c28, - 0xda6d0c74, 0x79aac56c, 0x3ce4e1ad, 0x51f0c802, 0x98f8f35a, 0x1626a49f, 0xeed82b29, 0x1d382fe3, - 0x0c4fb99a, 0xbb325778, 0x3ec6d97b, 0x6e77a6a9, 0xcb658b5c, 0xd45230c7, 0x2bd1408b, 0x60c03eb7, - 0xb9068d78, 0xa33754f4, 0xf430c87d, 0xc8a71302, 0xb96d8c32, 0xebd4e7be, 0xbe8b9d2d, 0x7979fb06, - 0xe7225308, 0x8b75cf77, 0x11ef8da4, 0xe083c858, 0x8d6b786f, 0x5a6317a6, 0xfa5cf7a0, 0x5dda0033, - 0xf28ebfb0, 0xf5b9c310, 0xa0eac280, 0x08b9767a, 0xa3d9d2b0, 0x79d34217, 0x021a718d, 0x9ac6336a, - 0x2711fd60, 0x438050e3, 0x069908a8, 0x3d7fedc4, 0x826d2bef, 0x4eeb8476, 0x488dcf25, 0x36c9d566, - 0x28e74e41, 0xc2610aca, 0x3d49a9cf, 0xbae3b9df, 0xb65f8de6, 0x92aeaf64, 0x3ac7d5e6, 0x9ea80509, - 0xf22b017d, 0xa4173f70, 0xdd1e16c3, 0x15e0d7f9, 0x50b1b887, 0x2b9f4fd5, 0x625aba82, 0x6a017962, - 0x2ec01b9c, 0x15488aa9, 0xd716e740, 0x40055a2c, 0x93d29a22, 0xe32dbf9a, 0x058745b9, 0x3453dc1e, - 0xd699296e, 0x496cff6f, 0x1c9f4986, 0xdfe2ed07, 0xb87242d1, 0x19de7eae, 0x053e561a, 0x15ad6f8c, - 0x66626c1c, 0x7154c24c, 0xea082b2a, 0x93eb2939, 0x17dcb0f0, 0x58d4f2ae, 0x9ea294fb, 0x52cf564c, - 0x9883fe66, 0x2ec40581, 0x763953c3, 0x01d6692e, 0xd3a0c108, 0xa1e7160e, 0xe4f2dfa6, 0x693ed285, - 0x74904698, 0x4c2b0edd, 0x4f757656, 0x5d393378, 0xa132234f, 0x3d321c5d, 0xc3f5e194, 0x4b269301, - 0xc79f022f, 0x3c997e7e, 0x5e4f9504, 0x3ffafbbd, 0x76f7ad0e, 0x296693f4, 0x3d1fce6f, 0xc61e45be, - 0xd3b5ab34, 0xf72bf9b7, 0x1b0434c0, 0x4e72b567, 0x5592a33d, 0xb5229301, 0xcfd2a87f, 0x60aeb767, - 0x1814386b, 0x30bcc33d, 0x38a0c07d, 0xfd1606f2, 0xc363519b, 0x589dd390, 0x5479f8e6, 0x1cb8d647, - 0x97fd61a9, 0xea7759f4, 0x2d57539d, 0x569a58cf, 0xe84e63ad, 0x462e1b78, 0x6580f87e, 0xf3817914, - 0x91da55f4, 0x40a230f3, 0xd1988f35, 0xb6e318d2, 0x3ffa50bc, 0x3d40f021, 0xc3c0bdae, 0x4958c24c, - 0x518f36b2, 0x84b1d370, 0x0fedce83, 0x878ddada, 0xf2a279c7, 0x94e01be8, 0x90716f4b, 0x954b8aa3 - }, - S8 = - { - 0xe216300d, 0xbbddfffc, 0xa7ebdabd, 0x35648095, 0x7789f8b7, 0xe6c1121b, 0x0e241600, 0x052ce8b5, - 0x11a9cfb0, 0xe5952f11, 0xece7990a, 0x9386d174, 0x2a42931c, 0x76e38111, 0xb12def3a, 0x37ddddfc, - 0xde9adeb1, 0x0a0cc32c, 0xbe197029, 0x84a00940, 0xbb243a0f, 0xb4d137cf, 0xb44e79f0, 0x049eedfd, - 0x0b15a15d, 0x480d3168, 0x8bbbde5a, 0x669ded42, 0xc7ece831, 0x3f8f95e7, 0x72df191b, 0x7580330d, - 0x94074251, 0x5c7dcdfa, 0xabbe6d63, 0xaa402164, 0xb301d40a, 0x02e7d1ca, 0x53571dae, 0x7a3182a2, - 0x12a8ddec, 0xfdaa335d, 0x176f43e8, 0x71fb46d4, 0x38129022, 0xce949ad4, 0xb84769ad, 0x965bd862, - 0x82f3d055, 0x66fb9767, 0x15b80b4e, 0x1d5b47a0, 0x4cfde06f, 0xc28ec4b8, 0x57e8726e, 0x647a78fc, - 0x99865d44, 0x608bd593, 0x6c200e03, 0x39dc5ff6, 0x5d0b00a3, 0xae63aff2, 0x7e8bd632, 0x70108c0c, - 0xbbd35049, 0x2998df04, 0x980cf42a, 0x9b6df491, 0x9e7edd53, 0x06918548, 0x58cb7e07, 0x3b74ef2e, - 0x522fffb1, 0xd24708cc, 0x1c7e27cd, 0xa4eb215b, 0x3cf1d2e2, 0x19b47a38, 0x424f7618, 0x35856039, - 0x9d17dee7, 0x27eb35e6, 0xc9aff67b, 0x36baf5b8, 0x09c467cd, 0xc18910b1, 0xe11dbf7b, 0x06cd1af8, - 0x7170c608, 0x2d5e3354, 0xd4de495a, 0x64c6d006, 0xbcc0c62c, 0x3dd00db3, 0x708f8f34, 0x77d51b42, - 0x264f620f, 0x24b8d2bf, 0x15c1b79e, 0x46a52564, 0xf8d7e54e, 0x3e378160, 0x7895cda5, 0x859c15a5, - 0xe6459788, 0xc37bc75f, 0xdb07ba0c, 0x0676a3ab, 0x7f229b1e, 0x31842e7b, 0x24259fd7, 0xf8bef472, - 0x835ffcb8, 0x6df4c1f2, 0x96f5b195, 0xfd0af0fc, 0xb0fe134c, 0xe2506d3d, 0x4f9b12ea, 0xf215f225, - 0xa223736f, 0x9fb4c428, 0x25d04979, 0x34c713f8, 0xc4618187, 0xea7a6e98, 0x7cd16efc, 0x1436876c, - 0xf1544107, 0xbedeee14, 0x56e9af27, 0xa04aa441, 0x3cf7c899, 0x92ecbae6, 0xdd67016d, 0x151682eb, - 0xa842eedf, 0xfdba60b4, 0xf1907b75, 0x20e3030f, 0x24d8c29e, 0xe139673b, 0xefa63fb8, 0x71873054, - 0xb6f2cf3b, 0x9f326442, 0xcb15a4cc, 0xb01a4504, 0xf1e47d8d, 0x844a1be5, 0xbae7dfdc, 0x42cbda70, - 0xcd7dae0a, 0x57e85b7a, 0xd53f5af6, 0x20cf4d8c, 0xcea4d428, 0x79d130a4, 0x3486ebfb, 0x33d3cddc, - 0x77853b53, 0x37effcb5, 0xc5068778, 0xe580b3e6, 0x4e68b8f4, 0xc5c8b37e, 0x0d809ea2, 0x398feb7c, - 0x132a4f94, 0x43b7950e, 0x2fee7d1c, 0x223613bd, 0xdd06caa2, 0x37df932b, 0xc4248289, 0xacf3ebc3, - 0x5715f6b7, 0xef3478dd, 0xf267616f, 0xc148cbe4, 0x9052815e, 0x5e410fab, 0xb48a2465, 0x2eda7fa4, - 0xe87b40e4, 0xe98ea084, 0x5889e9e1, 0xefd390fc, 0xdd07d35b, 0xdb485694, 0x38d7e5b2, 0x57720101, - 0x730edebc, 0x5b643113, 0x94917e4f, 0x503c2fba, 0x646f1282, 0x7523d24a, 0xe0779695, 0xf9c17a8f, - 0x7a5b2121, 0xd187b896, 0x29263a4d, 0xba510cdf, 0x81f47c9f, 0xad1163ed, 0xea7b5965, 0x1a00726e, - 0x11403092, 0x00da6d77, 0x4a0cdd61, 0xad1f4603, 0x605bdfb0, 0x9eedc364, 0x22ebe6a8, 0xcee7d28a, - 0xa0e736a0, 0x5564a6b9, 0x10853209, 0xc7eb8f37, 0x2de705ca, 0x8951570f, 0xdf09822b, 0xbd691a6c, - 0xaa12e4f2, 0x87451c0f, 0xe0f6a27a, 0x3ada4819, 0x4cf1764f, 0x0d771c2b, 0x67cdb156, 0x350d8384, - 0x5938fa0f, 0x42399ef3, 0x36997b07, 0x0e84093d, 0x4aa93e61, 0x8360d87b, 0x1fa98b0c, 0x1149382c, - 0xe97625a5, 0x0614d1b7, 0x0e25244b, 0x0c768347, 0x589e8d82, 0x0d2059d1, 0xa466bb1e, 0xf8da0a82, - 0x04f19130, 0xba6e4ec0, 0x99265164, 0x1ee7230d, 0x50b2ad80, 0xeaee6801, 0x8db2a283, 0xea8bf59e - }; - - //==================================== - // Useful constants - //==================================== - - internal static readonly int MAX_ROUNDS = 16; - internal static readonly int RED_ROUNDS = 12; - - private const int BLOCK_SIZE = 8; // bytes = 64 bits - - private int[] _Kr = new int[17]; // the rotating round key - private uint[] _Km = new uint[17]; // the masking round key - - private bool _encrypting; - - private byte[] _workingKey; - private int _rounds = MAX_ROUNDS; - - public Cast5Engine() - { - } - - /** - * initialise a CAST cipher. - * - * @param forEncryption whether or not we are for encryption. - * @param parameters the parameters required to set up the cipher. - * @exception ArgumentException if the parameters argument is - * inappropriate. - */ - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - if (!(parameters is KeyParameter)) - throw new ArgumentException("Invalid parameter passed to "+ AlgorithmName +" init - " + Platform.GetTypeName(parameters)); - - _encrypting = forEncryption; - _workingKey = ((KeyParameter)parameters).GetKey(); - SetKey(_workingKey); - } - - public virtual string AlgorithmName - { - get { return "CAST5"; } - } - - public virtual bool IsPartialBlockOkay - { - get { return false; } - } - - public virtual int ProcessBlock( - byte[] input, - int inOff, - byte[] output, - int outOff) - { - int blockSize = GetBlockSize(); - if (_workingKey == null) - throw new InvalidOperationException(AlgorithmName + " not initialised"); - - Check.DataLength(input, inOff, blockSize, "input buffer too short"); - Check.OutputLength(output, outOff, blockSize, "output buffer too short"); - - if (_encrypting) - { - return EncryptBlock(input, inOff, output, outOff); - } - else - { - return DecryptBlock(input, inOff, output, outOff); - } - } - - public virtual void Reset() - { - } - - public virtual int GetBlockSize() - { - return BLOCK_SIZE; - } - - //================================== - // Private Implementation - //================================== - - /* - * Creates the subkeys using the same nomenclature - * as described in RFC2144. - * - * See section 2.4 - */ - internal virtual void SetKey(byte[] key) - { - /* - * Determine the key size here, if required - * - * if keysize <= 80bits, use 12 rounds instead of 16 - * if keysize < 128bits, pad with 0 - * - * Typical key sizes => 40, 64, 80, 128 - */ - - if (key.Length < 11) - { - _rounds = RED_ROUNDS; - } - - int [] z = new int[16]; - int [] x = new int[16]; - - uint z03, z47, z8B, zCF; - uint x03, x47, x8B, xCF; - - /* copy the key into x */ - for (int i=0; i< key.Length; i++) - { - x[i] = (int)(key[i] & 0xff); - } - - /* - * This will look different because the selection of - * bytes from the input key I've already chosen the - * correct int. - */ - x03 = IntsTo32bits(x, 0x0); - x47 = IntsTo32bits(x, 0x4); - x8B = IntsTo32bits(x, 0x8); - xCF = IntsTo32bits(x, 0xC); - - z03 = x03 ^S5[x[0xD]] ^S6[x[0xF]] ^S7[x[0xC]] ^S8[x[0xE]] ^S7[x[0x8]]; - - Bits32ToInts(z03, z, 0x0); - z47 = x8B ^S5[z[0x0]] ^S6[z[0x2]] ^S7[z[0x1]] ^S8[z[0x3]] ^S8[x[0xA]]; - Bits32ToInts(z47, z, 0x4); - z8B = xCF ^S5[z[0x7]] ^S6[z[0x6]] ^S7[z[0x5]] ^S8[z[0x4]] ^S5[x[0x9]]; - Bits32ToInts(z8B, z, 0x8); - zCF = x47 ^S5[z[0xA]] ^S6[z[0x9]] ^S7[z[0xB]] ^S8[z[0x8]] ^S6[x[0xB]]; - Bits32ToInts(zCF, z, 0xC); - _Km[ 1]= S5[z[0x8]] ^ S6[z[0x9]] ^ S7[z[0x7]] ^ S8[z[0x6]] ^ S5[z[0x2]]; - _Km[ 2]= S5[z[0xA]] ^ S6[z[0xB]] ^ S7[z[0x5]] ^ S8[z[0x4]] ^ S6[z[0x6]]; - _Km[ 3]= S5[z[0xC]] ^ S6[z[0xD]] ^ S7[z[0x3]] ^ S8[z[0x2]] ^ S7[z[0x9]]; - _Km[ 4]= S5[z[0xE]] ^ S6[z[0xF]] ^ S7[z[0x1]] ^ S8[z[0x0]] ^ S8[z[0xC]]; - - z03 = IntsTo32bits(z, 0x0); - z47 = IntsTo32bits(z, 0x4); - z8B = IntsTo32bits(z, 0x8); - zCF = IntsTo32bits(z, 0xC); - x03 = z8B ^S5[z[0x5]] ^S6[z[0x7]] ^S7[z[0x4]] ^S8[z[0x6]] ^S7[z[0x0]]; - Bits32ToInts(x03, x, 0x0); - x47 = z03 ^S5[x[0x0]] ^S6[x[0x2]] ^S7[x[0x1]] ^S8[x[0x3]] ^S8[z[0x2]]; - Bits32ToInts(x47, x, 0x4); - x8B = z47 ^S5[x[0x7]] ^S6[x[0x6]] ^S7[x[0x5]] ^S8[x[0x4]] ^S5[z[0x1]]; - Bits32ToInts(x8B, x, 0x8); - xCF = zCF ^S5[x[0xA]] ^S6[x[0x9]] ^S7[x[0xB]] ^S8[x[0x8]] ^S6[z[0x3]]; - Bits32ToInts(xCF, x, 0xC); - _Km[ 5]= S5[x[0x3]] ^ S6[x[0x2]] ^ S7[x[0xC]] ^ S8[x[0xD]] ^ S5[x[0x8]]; - _Km[ 6]= S5[x[0x1]] ^ S6[x[0x0]] ^ S7[x[0xE]] ^ S8[x[0xF]] ^ S6[x[0xD]]; - _Km[ 7]= S5[x[0x7]] ^ S6[x[0x6]] ^ S7[x[0x8]] ^ S8[x[0x9]] ^ S7[x[0x3]]; - _Km[ 8]= S5[x[0x5]] ^ S6[x[0x4]] ^ S7[x[0xA]] ^ S8[x[0xB]] ^ S8[x[0x7]]; - - x03 = IntsTo32bits(x, 0x0); - x47 = IntsTo32bits(x, 0x4); - x8B = IntsTo32bits(x, 0x8); - xCF = IntsTo32bits(x, 0xC); - z03 = x03 ^S5[x[0xD]] ^S6[x[0xF]] ^S7[x[0xC]] ^S8[x[0xE]] ^S7[x[0x8]]; - Bits32ToInts(z03, z, 0x0); - z47 = x8B ^S5[z[0x0]] ^S6[z[0x2]] ^S7[z[0x1]] ^S8[z[0x3]] ^S8[x[0xA]]; - Bits32ToInts(z47, z, 0x4); - z8B = xCF ^S5[z[0x7]] ^S6[z[0x6]] ^S7[z[0x5]] ^S8[z[0x4]] ^S5[x[0x9]]; - Bits32ToInts(z8B, z, 0x8); - zCF = x47 ^S5[z[0xA]] ^S6[z[0x9]] ^S7[z[0xB]] ^S8[z[0x8]] ^S6[x[0xB]]; - Bits32ToInts(zCF, z, 0xC); - _Km[ 9]= S5[z[0x3]] ^ S6[z[0x2]] ^ S7[z[0xC]] ^ S8[z[0xD]] ^ S5[z[0x9]]; - _Km[10]= S5[z[0x1]] ^ S6[z[0x0]] ^ S7[z[0xE]] ^ S8[z[0xF]] ^ S6[z[0xc]]; - _Km[11]= S5[z[0x7]] ^ S6[z[0x6]] ^ S7[z[0x8]] ^ S8[z[0x9]] ^ S7[z[0x2]]; - _Km[12]= S5[z[0x5]] ^ S6[z[0x4]] ^ S7[z[0xA]] ^ S8[z[0xB]] ^ S8[z[0x6]]; - - z03 = IntsTo32bits(z, 0x0); - z47 = IntsTo32bits(z, 0x4); - z8B = IntsTo32bits(z, 0x8); - zCF = IntsTo32bits(z, 0xC); - x03 = z8B ^S5[z[0x5]] ^S6[z[0x7]] ^S7[z[0x4]] ^S8[z[0x6]] ^S7[z[0x0]]; - Bits32ToInts(x03, x, 0x0); - x47 = z03 ^S5[x[0x0]] ^S6[x[0x2]] ^S7[x[0x1]] ^S8[x[0x3]] ^S8[z[0x2]]; - Bits32ToInts(x47, x, 0x4); - x8B = z47 ^S5[x[0x7]] ^S6[x[0x6]] ^S7[x[0x5]] ^S8[x[0x4]] ^S5[z[0x1]]; - Bits32ToInts(x8B, x, 0x8); - xCF = zCF ^S5[x[0xA]] ^S6[x[0x9]] ^S7[x[0xB]] ^S8[x[0x8]] ^S6[z[0x3]]; - Bits32ToInts(xCF, x, 0xC); - _Km[13]= S5[x[0x8]] ^ S6[x[0x9]] ^ S7[x[0x7]] ^ S8[x[0x6]] ^ S5[x[0x3]]; - _Km[14]= S5[x[0xA]] ^ S6[x[0xB]] ^ S7[x[0x5]] ^ S8[x[0x4]] ^ S6[x[0x7]]; - _Km[15]= S5[x[0xC]] ^ S6[x[0xD]] ^ S7[x[0x3]] ^ S8[x[0x2]] ^ S7[x[0x8]]; - _Km[16]= S5[x[0xE]] ^ S6[x[0xF]] ^ S7[x[0x1]] ^ S8[x[0x0]] ^ S8[x[0xD]]; - - x03 = IntsTo32bits(x, 0x0); - x47 = IntsTo32bits(x, 0x4); - x8B = IntsTo32bits(x, 0x8); - xCF = IntsTo32bits(x, 0xC); - z03 = x03 ^S5[x[0xD]] ^S6[x[0xF]] ^S7[x[0xC]] ^S8[x[0xE]] ^S7[x[0x8]]; - Bits32ToInts(z03, z, 0x0); - z47 = x8B ^S5[z[0x0]] ^S6[z[0x2]] ^S7[z[0x1]] ^S8[z[0x3]] ^S8[x[0xA]]; - Bits32ToInts(z47, z, 0x4); - z8B = xCF ^S5[z[0x7]] ^S6[z[0x6]] ^S7[z[0x5]] ^S8[z[0x4]] ^S5[x[0x9]]; - Bits32ToInts(z8B, z, 0x8); - zCF = x47 ^S5[z[0xA]] ^S6[z[0x9]] ^S7[z[0xB]] ^S8[z[0x8]] ^S6[x[0xB]]; - Bits32ToInts(zCF, z, 0xC); - _Kr[ 1]=(int)((S5[z[0x8]]^S6[z[0x9]]^S7[z[0x7]]^S8[z[0x6]] ^ S5[z[0x2]])&0x1f); - _Kr[ 2]=(int)((S5[z[0xA]]^S6[z[0xB]]^S7[z[0x5]]^S8[z[0x4]] ^ S6[z[0x6]])&0x1f); - _Kr[ 3]=(int)((S5[z[0xC]]^S6[z[0xD]]^S7[z[0x3]]^S8[z[0x2]] ^ S7[z[0x9]])&0x1f); - _Kr[ 4]=(int)((S5[z[0xE]]^S6[z[0xF]]^S7[z[0x1]]^S8[z[0x0]] ^ S8[z[0xC]])&0x1f); - - z03 = IntsTo32bits(z, 0x0); - z47 = IntsTo32bits(z, 0x4); - z8B = IntsTo32bits(z, 0x8); - zCF = IntsTo32bits(z, 0xC); - x03 = z8B ^S5[z[0x5]] ^S6[z[0x7]] ^S7[z[0x4]] ^S8[z[0x6]] ^S7[z[0x0]]; - Bits32ToInts(x03, x, 0x0); - x47 = z03 ^S5[x[0x0]] ^S6[x[0x2]] ^S7[x[0x1]] ^S8[x[0x3]] ^S8[z[0x2]]; - Bits32ToInts(x47, x, 0x4); - x8B = z47 ^S5[x[0x7]] ^S6[x[0x6]] ^S7[x[0x5]] ^S8[x[0x4]] ^S5[z[0x1]]; - Bits32ToInts(x8B, x, 0x8); - xCF = zCF ^S5[x[0xA]] ^S6[x[0x9]] ^S7[x[0xB]] ^S8[x[0x8]] ^S6[z[0x3]]; - Bits32ToInts(xCF, x, 0xC); - _Kr[ 5]=(int)((S5[x[0x3]]^S6[x[0x2]]^S7[x[0xC]]^S8[x[0xD]]^S5[x[0x8]])&0x1f); - _Kr[ 6]=(int)((S5[x[0x1]]^S6[x[0x0]]^S7[x[0xE]]^S8[x[0xF]]^S6[x[0xD]])&0x1f); - _Kr[ 7]=(int)((S5[x[0x7]]^S6[x[0x6]]^S7[x[0x8]]^S8[x[0x9]]^S7[x[0x3]])&0x1f); - _Kr[ 8]=(int)((S5[x[0x5]]^S6[x[0x4]]^S7[x[0xA]]^S8[x[0xB]]^S8[x[0x7]])&0x1f); - - x03 = IntsTo32bits(x, 0x0); - x47 = IntsTo32bits(x, 0x4); - x8B = IntsTo32bits(x, 0x8); - xCF = IntsTo32bits(x, 0xC); - z03 = x03 ^S5[x[0xD]] ^S6[x[0xF]] ^S7[x[0xC]] ^S8[x[0xE]] ^S7[x[0x8]]; - Bits32ToInts(z03, z, 0x0); - z47 = x8B ^S5[z[0x0]] ^S6[z[0x2]] ^S7[z[0x1]] ^S8[z[0x3]] ^S8[x[0xA]]; - Bits32ToInts(z47, z, 0x4); - z8B = xCF ^S5[z[0x7]] ^S6[z[0x6]] ^S7[z[0x5]] ^S8[z[0x4]] ^S5[x[0x9]]; - Bits32ToInts(z8B, z, 0x8); - zCF = x47 ^S5[z[0xA]] ^S6[z[0x9]] ^S7[z[0xB]] ^S8[z[0x8]] ^S6[x[0xB]]; - Bits32ToInts(zCF, z, 0xC); - _Kr[ 9]=(int)((S5[z[0x3]]^S6[z[0x2]]^S7[z[0xC]]^S8[z[0xD]]^S5[z[0x9]])&0x1f); - _Kr[10]=(int)((S5[z[0x1]]^S6[z[0x0]]^S7[z[0xE]]^S8[z[0xF]]^S6[z[0xc]])&0x1f); - _Kr[11]=(int)((S5[z[0x7]]^S6[z[0x6]]^S7[z[0x8]]^S8[z[0x9]]^S7[z[0x2]])&0x1f); - _Kr[12]=(int)((S5[z[0x5]]^S6[z[0x4]]^S7[z[0xA]]^S8[z[0xB]]^S8[z[0x6]])&0x1f); - - z03 = IntsTo32bits(z, 0x0); - z47 = IntsTo32bits(z, 0x4); - z8B = IntsTo32bits(z, 0x8); - zCF = IntsTo32bits(z, 0xC); - x03 = z8B ^S5[z[0x5]] ^S6[z[0x7]] ^S7[z[0x4]] ^S8[z[0x6]] ^S7[z[0x0]]; - Bits32ToInts(x03, x, 0x0); - x47 = z03 ^S5[x[0x0]] ^S6[x[0x2]] ^S7[x[0x1]] ^S8[x[0x3]] ^S8[z[0x2]]; - Bits32ToInts(x47, x, 0x4); - x8B = z47 ^S5[x[0x7]] ^S6[x[0x6]] ^S7[x[0x5]] ^S8[x[0x4]] ^S5[z[0x1]]; - Bits32ToInts(x8B, x, 0x8); - xCF = zCF ^S5[x[0xA]] ^S6[x[0x9]] ^S7[x[0xB]] ^S8[x[0x8]] ^S6[z[0x3]]; - Bits32ToInts(xCF, x, 0xC); - _Kr[13]=(int)((S5[x[0x8]]^S6[x[0x9]]^S7[x[0x7]]^S8[x[0x6]]^S5[x[0x3]])&0x1f); - _Kr[14]=(int)((S5[x[0xA]]^S6[x[0xB]]^S7[x[0x5]]^S8[x[0x4]]^S6[x[0x7]])&0x1f); - _Kr[15]=(int)((S5[x[0xC]]^S6[x[0xD]]^S7[x[0x3]]^S8[x[0x2]]^S7[x[0x8]])&0x1f); - _Kr[16]=(int)((S5[x[0xE]]^S6[x[0xF]]^S7[x[0x1]]^S8[x[0x0]]^S8[x[0xD]])&0x1f); - } - - /** - * Encrypt the given input starting at the given offset and place - * the result in the provided buffer starting at the given offset. - * - * @param src The plaintext buffer - * @param srcIndex An offset into src - * @param dst The ciphertext buffer - * @param dstIndex An offset into dst - */ - internal virtual int EncryptBlock( - byte[] src, - int srcIndex, - byte[] dst, - int dstIndex) - { - // process the input block - // batch the units up into a 32 bit chunk and go for it - // the array is in bytes, the increment is 8x8 bits = 64 - - uint L0 = Pack.BE_To_UInt32(src, srcIndex); - uint R0 = Pack.BE_To_UInt32(src, srcIndex + 4); - - uint[] result = new uint[2]; - CAST_Encipher(L0, R0, result); - - // now stuff them into the destination block - Pack.UInt32_To_BE(result[0], dst, dstIndex); - Pack.UInt32_To_BE(result[1], dst, dstIndex + 4); - - return BLOCK_SIZE; - } - - /** - * Decrypt the given input starting at the given offset and place - * the result in the provided buffer starting at the given offset. - * - * @param src The plaintext buffer - * @param srcIndex An offset into src - * @param dst The ciphertext buffer - * @param dstIndex An offset into dst - */ - internal virtual int DecryptBlock( - byte[] src, - int srcIndex, - byte[] dst, - int dstIndex) - { - // process the input block - // batch the units up into a 32 bit chunk and go for it - // the array is in bytes, the increment is 8x8 bits = 64 - uint L16 = Pack.BE_To_UInt32(src, srcIndex); - uint R16 = Pack.BE_To_UInt32(src, srcIndex + 4); - - uint[] result = new uint[2]; - CAST_Decipher(L16, R16, result); - - // now stuff them into the destination block - Pack.UInt32_To_BE(result[0], dst, dstIndex); - Pack.UInt32_To_BE(result[1], dst, dstIndex + 4); - - return BLOCK_SIZE; - } - - /** - * The first of the three processing functions for the - * encryption and decryption. - * - * @param D the input to be processed - * @param Kmi the mask to be used from Km[n] - * @param Kri the rotation value to be used - * - */ - internal static uint F1(uint D, uint Kmi, int Kri) - { - uint I = Kmi + D; - I = I << Kri | (I >> (32-Kri)); - return ((S1[(I>>24)&0xff]^S2[(I>>16)&0xff])-S3[(I>>8)&0xff])+S4[I&0xff]; - } - - /** - * The second of the three processing functions for the - * encryption and decryption. - * - * @param D the input to be processed - * @param Kmi the mask to be used from Km[n] - * @param Kri the rotation value to be used - * - */ - internal static uint F2(uint D, uint Kmi, int Kri) - { - uint I = Kmi ^ D; - I = I << Kri | (I >> (32-Kri)); - return ((S1[(I>>24)&0xff]-S2[(I>>16)&0xff])+S3[(I>>8)&0xff])^S4[I&0xff]; - } - - /** - * The third of the three processing functions for the - * encryption and decryption. - * - * @param D the input to be processed - * @param Kmi the mask to be used from Km[n] - * @param Kri the rotation value to be used - * - */ - internal static uint F3(uint D, uint Kmi, int Kri) - { - uint I = Kmi - D; - I = I << Kri | (I >> (32-Kri)); - return ((S1[(I>>24)&0xff]+S2[(I>>16)&0xff])^S3[(I>>8)&0xff])-S4[I&0xff]; - } - - /** - * Does the 16 rounds to encrypt the block. - * - * @param L0 the LH-32bits of the plaintext block - * @param R0 the RH-32bits of the plaintext block - */ - internal void CAST_Encipher(uint L0, uint R0, uint[] result) - { - uint Lp = L0; // the previous value, equiv to L[i-1] - uint Rp = R0; // equivalent to R[i-1] - - /* - * numbering consistent with paper to make - * checking and validating easier - */ - uint Li = L0, Ri = R0; - - for (int i = 1; i<=_rounds ; i++) - { - Lp = Li; - Rp = Ri; - - Li = Rp; - switch (i) - { - case 1: - case 4: - case 7: - case 10: - case 13: - case 16: - Ri = Lp ^ F1(Rp, _Km[i], _Kr[i]); - break; - case 2: - case 5: - case 8: - case 11: - case 14: - Ri = Lp ^ F2(Rp, _Km[i], _Kr[i]); - break; - case 3: - case 6: - case 9: - case 12: - case 15: - Ri = Lp ^ F3(Rp, _Km[i], _Kr[i]); - break; - } - } - - result[0] = Ri; - result[1] = Li; - - return; - } - - internal void CAST_Decipher(uint L16, uint R16, uint[] result) - { - uint Lp = L16; // the previous value, equiv to L[i-1] - uint Rp = R16; // equivalent to R[i-1] - - /* - * numbering consistent with paper to make - * checking and validating easier - */ - uint Li = L16, Ri = R16; - - for (int i = _rounds; i > 0; i--) - { - Lp = Li; - Rp = Ri; - - Li = Rp; - switch (i) - { - case 1: - case 4: - case 7: - case 10: - case 13: - case 16: - Ri = Lp ^ F1(Rp, _Km[i], _Kr[i]); - break; - case 2: - case 5: - case 8: - case 11: - case 14: - Ri = Lp ^ F2(Rp, _Km[i], _Kr[i]); - break; - case 3: - case 6: - case 9: - case 12: - case 15: - Ri = Lp ^ F3(Rp, _Km[i], _Kr[i]); - break; - } - } - - result[0] = Ri; - result[1] = Li; - - return; - } - - internal static void Bits32ToInts(uint inData, int[] b, int offset) - { - b[offset + 3] = (int) (inData & 0xff); - b[offset + 2] = (int) ((inData >> 8) & 0xff); - b[offset + 1] = (int) ((inData >> 16) & 0xff); - b[offset] = (int) ((inData >> 24) & 0xff); - } - - internal static uint IntsTo32bits(int[] b, int i) - { - return (uint)(((b[i] & 0xff) << 24) | - ((b[i+1] & 0xff) << 16) | - ((b[i+2] & 0xff) << 8) | - ((b[i+3] & 0xff))); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/Cast6Engine.cs b/bc-sharp-crypto/src/crypto/engines/Cast6Engine.cs deleted file mode 100644 index c5c419b..0000000 --- a/bc-sharp-crypto/src/crypto/engines/Cast6Engine.cs +++ /dev/null @@ -1,279 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * A class that provides CAST6 key encryption operations, - * such as encoding data and generating keys. - * - * All the algorithms herein are from the Internet RFC - * - * RFC2612 - CAST6 (128bit block, 128-256bit key) - * - * and implement a simplified cryptography interface. - */ - public sealed class Cast6Engine - : Cast5Engine - { - //==================================== - // Useful constants - //==================================== - private const int ROUNDS = 12; - private const int BLOCK_SIZE = 16; // bytes = 128 bits - - /* - * Put the round and mask keys into an array. - * Kr0[i] => _Kr[i*4 + 0] - */ - private int []_Kr = new int[ROUNDS*4]; // the rotating round key(s) - private uint []_Km = new uint[ROUNDS*4]; // the masking round key(s) - - /* - * Key setup - */ - private int []_Tr = new int[24 * 8]; - private uint []_Tm = new uint[24 * 8]; - private uint[] _workingKey = new uint[8]; - - public Cast6Engine() - { - } - - public override string AlgorithmName - { - get { return "CAST6"; } - } - - public override void Reset() - { - } - - public override int GetBlockSize() - { - return BLOCK_SIZE; - } - - //================================== - // Private Implementation - //================================== - /* - * Creates the subkeys using the same nomenclature - * as described in RFC2612. - * - * See section 2.4 - */ - internal override void SetKey( - byte[] key) - { - uint Cm = 0x5a827999; - uint Mm = 0x6ed9eba1; - int Cr = 19; - int Mr = 17; - /* - * Determine the key size here, if required - * - * if keysize < 256 bytes, pad with 0 - * - * Typical key sizes => 128, 160, 192, 224, 256 - */ - for (int i=0; i< 24; i++) - { - for (int j=0; j< 8; j++) - { - _Tm[i*8 + j] = Cm; - Cm += Mm; //mod 2^32; - _Tr[i*8 + j] = Cr; - Cr = (Cr + Mr) & 0x1f; // mod 32 - } - } - - byte[] tmpKey = new byte[64]; - key.CopyTo(tmpKey, 0); - - // now create ABCDEFGH - for (int i = 0; i < 8; i++) - { - _workingKey[i] = Pack.BE_To_UInt32(tmpKey, i*4); - } - - // Generate the key schedule - for (int i = 0; i < 12; i++) - { - // KAPPA <- W2i(KAPPA) - int i2 = i*2 *8; - _workingKey[6] ^= F1(_workingKey[7], _Tm[i2], _Tr[i2]); - _workingKey[5] ^= F2(_workingKey[6], _Tm[i2+1], _Tr[i2+1]); - _workingKey[4] ^= F3(_workingKey[5], _Tm[i2+2], _Tr[i2+2]); - _workingKey[3] ^= F1(_workingKey[4], _Tm[i2+3], _Tr[i2+3]); - _workingKey[2] ^= F2(_workingKey[3], _Tm[i2+4], _Tr[i2+4]); - _workingKey[1] ^= F3(_workingKey[2], _Tm[i2+5], _Tr[i2+5]); - _workingKey[0] ^= F1(_workingKey[1], _Tm[i2+6], _Tr[i2+6]); - _workingKey[7] ^= F2(_workingKey[0], _Tm[i2+7], _Tr[i2+7]); - // KAPPA <- W2i+1(KAPPA) - i2 = (i*2 + 1)*8; - _workingKey[6] ^= F1(_workingKey[7], _Tm[i2], _Tr[i2]); - _workingKey[5] ^= F2(_workingKey[6], _Tm[i2+1], _Tr[i2+1]); - _workingKey[4] ^= F3(_workingKey[5], _Tm[i2+2], _Tr[i2+2]); - _workingKey[3] ^= F1(_workingKey[4], _Tm[i2+3], _Tr[i2+3]); - _workingKey[2] ^= F2(_workingKey[3], _Tm[i2+4], _Tr[i2+4]); - _workingKey[1] ^= F3(_workingKey[2], _Tm[i2+5], _Tr[i2+5]); - _workingKey[0] ^= F1(_workingKey[1], _Tm[i2+6], _Tr[i2+6]); - _workingKey[7] ^= F2(_workingKey[0], _Tm[i2+7], _Tr[i2+7]); - // Kr_(i) <- KAPPA - _Kr[i*4] = (int)(_workingKey[0] & 0x1f); - _Kr[i*4 + 1] = (int)(_workingKey[2] & 0x1f); - _Kr[i*4 + 2] = (int)(_workingKey[4] & 0x1f); - _Kr[i*4 + 3] = (int)(_workingKey[6] & 0x1f); - // Km_(i) <- KAPPA - _Km[i*4] = _workingKey[7]; - _Km[i*4 + 1] = _workingKey[5]; - _Km[i*4 + 2] = _workingKey[3]; - _Km[i*4 + 3] = _workingKey[1]; - } - } - - /** - * Encrypt the given input starting at the given offset and place - * the result in the provided buffer starting at the given offset. - * - * @param src The plaintext buffer - * @param srcIndex An offset into src - * @param dst The ciphertext buffer - * @param dstIndex An offset into dst - */ - internal override int EncryptBlock( - byte[] src, - int srcIndex, - byte[] dst, - int dstIndex) - { - // process the input block - // batch the units up into 4x32 bit chunks and go for it - uint A = Pack.BE_To_UInt32(src, srcIndex); - uint B = Pack.BE_To_UInt32(src, srcIndex + 4); - uint C = Pack.BE_To_UInt32(src, srcIndex + 8); - uint D = Pack.BE_To_UInt32(src, srcIndex + 12); - uint[] result = new uint[4]; - CAST_Encipher(A, B, C, D, result); - // now stuff them into the destination block - Pack.UInt32_To_BE(result[0], dst, dstIndex); - Pack.UInt32_To_BE(result[1], dst, dstIndex + 4); - Pack.UInt32_To_BE(result[2], dst, dstIndex + 8); - Pack.UInt32_To_BE(result[3], dst, dstIndex + 12); - return BLOCK_SIZE; - } - - /** - * Decrypt the given input starting at the given offset and place - * the result in the provided buffer starting at the given offset. - * - * @param src The plaintext buffer - * @param srcIndex An offset into src - * @param dst The ciphertext buffer - * @param dstIndex An offset into dst - */ - internal override int DecryptBlock( - byte[] src, - int srcIndex, - byte[] dst, - int dstIndex) - { - // process the input block - // batch the units up into 4x32 bit chunks and go for it - uint A = Pack.BE_To_UInt32(src, srcIndex); - uint B = Pack.BE_To_UInt32(src, srcIndex + 4); - uint C = Pack.BE_To_UInt32(src, srcIndex + 8); - uint D = Pack.BE_To_UInt32(src, srcIndex + 12); - uint[] result = new uint[4]; - CAST_Decipher(A, B, C, D, result); - // now stuff them into the destination block - Pack.UInt32_To_BE(result[0], dst, dstIndex); - Pack.UInt32_To_BE(result[1], dst, dstIndex + 4); - Pack.UInt32_To_BE(result[2], dst, dstIndex + 8); - Pack.UInt32_To_BE(result[3], dst, dstIndex + 12); - return BLOCK_SIZE; - } - - /** - * Does the 12 quad rounds rounds to encrypt the block. - * - * @param A the 00-31 bits of the plaintext block - * @param B the 32-63 bits of the plaintext block - * @param C the 64-95 bits of the plaintext block - * @param D the 96-127 bits of the plaintext block - * @param result the resulting ciphertext - */ - private void CAST_Encipher( - uint A, - uint B, - uint C, - uint D, - uint[] result) - { - for (int i = 0; i < 6; i++) - { - int x = i*4; - // BETA <- Qi(BETA) - C ^= F1(D, _Km[x], _Kr[x]); - B ^= F2(C, _Km[x + 1], _Kr[x + 1]); - A ^= F3(B, _Km[x + 2], _Kr[x + 2]); - D ^= F1(A, _Km[x + 3], _Kr[x + 3]); - } - for (int i = 6; i < 12; i++) - { - int x = i*4; - // BETA <- QBARi(BETA) - D ^= F1(A, _Km[x + 3], _Kr[x + 3]); - A ^= F3(B, _Km[x + 2], _Kr[x + 2]); - B ^= F2(C, _Km[x + 1], _Kr[x + 1]); - C ^= F1(D, _Km[x], _Kr[x]); - } - result[0] = A; - result[1] = B; - result[2] = C; - result[3] = D; - } - - /** - * Does the 12 quad rounds rounds to decrypt the block. - * - * @param A the 00-31 bits of the ciphertext block - * @param B the 32-63 bits of the ciphertext block - * @param C the 64-95 bits of the ciphertext block - * @param D the 96-127 bits of the ciphertext block - * @param result the resulting plaintext - */ - private void CAST_Decipher( - uint A, - uint B, - uint C, - uint D, - uint[] result) - { - for (int i = 0; i < 6; i++) - { - int x = (11-i)*4; - // BETA <- Qi(BETA) - C ^= F1(D, _Km[x], _Kr[x]); - B ^= F2(C, _Km[x + 1], _Kr[x + 1]); - A ^= F3(B, _Km[x + 2], _Kr[x + 2]); - D ^= F1(A, _Km[x + 3], _Kr[x + 3]); - } - for (int i=6; i<12; i++) - { - int x = (11-i)*4; - // BETA <- QBARi(BETA) - D ^= F1(A, _Km[x + 3], _Kr[x + 3]); - A ^= F3(B, _Km[x + 2], _Kr[x + 2]); - B ^= F2(C, _Km[x + 1], _Kr[x + 1]); - C ^= F1(D, _Km[x], _Kr[x]); - } - result[0] = A; - result[1] = B; - result[2] = C; - result[3] = D; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/ChaCha7539Engine.cs b/bc-sharp-crypto/src/crypto/engines/ChaCha7539Engine.cs deleted file mode 100644 index af4163a..0000000 --- a/bc-sharp-crypto/src/crypto/engines/ChaCha7539Engine.cs +++ /dev/null @@ -1,65 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - ///

- /// Implementation of Daniel J. Bernstein's ChaCha stream cipher. - /// - public class ChaCha7539Engine - : Salsa20Engine - { - /// - /// Creates a 20 rounds ChaCha engine. - /// - public ChaCha7539Engine() - { - } - - public override string AlgorithmName - { - get { return "ChaCha7539" + rounds; } - } - - protected override int NonceSize - { - get { return 12; } - } - - protected override void AdvanceCounter() - { - if (++engineState[12] == 0) - throw new InvalidOperationException("attempt to increase counter past 2^32."); - } - - protected override void ResetCounter() - { - engineState[12] = 0; - } - - protected override void SetKey(byte[] keyBytes, byte[] ivBytes) - { - if (keyBytes != null) - { - if (keyBytes.Length != 32) - throw new ArgumentException(AlgorithmName + " requires 256 bit key"); - - PackTauOrSigma(keyBytes.Length, engineState, 0); - - // Key - Pack.LE_To_UInt32(keyBytes, 0, engineState, 4, 8); - } - - // IV - Pack.LE_To_UInt32(ivBytes, 0, engineState, 13, 3); - } - - protected override void GenerateKeyStream(byte[] output) - { - ChaChaEngine.ChachaCore(rounds, engineState, x); - Pack.UInt32_To_LE(x, output, 0); - } - } -} - diff --git a/bc-sharp-crypto/src/crypto/engines/ChaChaEngine.cs b/bc-sharp-crypto/src/crypto/engines/ChaChaEngine.cs deleted file mode 100644 index 8720504..0000000 --- a/bc-sharp-crypto/src/crypto/engines/ChaChaEngine.cs +++ /dev/null @@ -1,157 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /// - /// Implementation of Daniel J. Bernstein's ChaCha stream cipher. - /// - public class ChaChaEngine - : Salsa20Engine - { - /// - /// Creates a 20 rounds ChaCha engine. - /// - public ChaChaEngine() - { - } - - /// - /// Creates a ChaCha engine with a specific number of rounds. - /// - /// the number of rounds (must be an even number). - public ChaChaEngine(int rounds) - : base(rounds) - { - } - - public override string AlgorithmName - { - get { return "ChaCha" + rounds; } - } - - protected override void AdvanceCounter() - { - if (++engineState[12] == 0) - { - ++engineState[13]; - } - } - - protected override void ResetCounter() - { - engineState[12] = engineState[13] = 0; - } - - protected override void SetKey(byte[] keyBytes, byte[] ivBytes) - { - if (keyBytes != null) - { - if ((keyBytes.Length != 16) && (keyBytes.Length != 32)) - throw new ArgumentException(AlgorithmName + " requires 128 bit or 256 bit key"); - - PackTauOrSigma(keyBytes.Length, engineState, 0); - - // Key - Pack.LE_To_UInt32(keyBytes, 0, engineState, 4, 4); - Pack.LE_To_UInt32(keyBytes, keyBytes.Length - 16, engineState, 8, 4); - } - - // IV - Pack.LE_To_UInt32(ivBytes, 0, engineState, 14, 2); - } - - protected override void GenerateKeyStream(byte[] output) - { - ChachaCore(rounds, engineState, x); - Pack.UInt32_To_LE(x, output, 0); - } - - /// - /// ChaCha function. - /// - /// The number of ChaCha rounds to execute - /// The input words. - /// The ChaCha state to modify. - internal static void ChachaCore(int rounds, uint[] input, uint[] x) - { - if (input.Length != 16) - throw new ArgumentException(); - if (x.Length != 16) - throw new ArgumentException(); - if (rounds % 2 != 0) - throw new ArgumentException("Number of rounds must be even"); - - uint x00 = input[ 0]; - uint x01 = input[ 1]; - uint x02 = input[ 2]; - uint x03 = input[ 3]; - uint x04 = input[ 4]; - uint x05 = input[ 5]; - uint x06 = input[ 6]; - uint x07 = input[ 7]; - uint x08 = input[ 8]; - uint x09 = input[ 9]; - uint x10 = input[10]; - uint x11 = input[11]; - uint x12 = input[12]; - uint x13 = input[13]; - uint x14 = input[14]; - uint x15 = input[15]; - - for (int i = rounds; i > 0; i -= 2) - { - x00 += x04; x12 = R(x12 ^ x00, 16); - x08 += x12; x04 = R(x04 ^ x08, 12); - x00 += x04; x12 = R(x12 ^ x00, 8); - x08 += x12; x04 = R(x04 ^ x08, 7); - x01 += x05; x13 = R(x13 ^ x01, 16); - x09 += x13; x05 = R(x05 ^ x09, 12); - x01 += x05; x13 = R(x13 ^ x01, 8); - x09 += x13; x05 = R(x05 ^ x09, 7); - x02 += x06; x14 = R(x14 ^ x02, 16); - x10 += x14; x06 = R(x06 ^ x10, 12); - x02 += x06; x14 = R(x14 ^ x02, 8); - x10 += x14; x06 = R(x06 ^ x10, 7); - x03 += x07; x15 = R(x15 ^ x03, 16); - x11 += x15; x07 = R(x07 ^ x11, 12); - x03 += x07; x15 = R(x15 ^ x03, 8); - x11 += x15; x07 = R(x07 ^ x11, 7); - x00 += x05; x15 = R(x15 ^ x00, 16); - x10 += x15; x05 = R(x05 ^ x10, 12); - x00 += x05; x15 = R(x15 ^ x00, 8); - x10 += x15; x05 = R(x05 ^ x10, 7); - x01 += x06; x12 = R(x12 ^ x01, 16); - x11 += x12; x06 = R(x06 ^ x11, 12); - x01 += x06; x12 = R(x12 ^ x01, 8); - x11 += x12; x06 = R(x06 ^ x11, 7); - x02 += x07; x13 = R(x13 ^ x02, 16); - x08 += x13; x07 = R(x07 ^ x08, 12); - x02 += x07; x13 = R(x13 ^ x02, 8); - x08 += x13; x07 = R(x07 ^ x08, 7); - x03 += x04; x14 = R(x14 ^ x03, 16); - x09 += x14; x04 = R(x04 ^ x09, 12); - x03 += x04; x14 = R(x14 ^ x03, 8); - x09 += x14; x04 = R(x04 ^ x09, 7); - } - - x[ 0] = x00 + input[ 0]; - x[ 1] = x01 + input[ 1]; - x[ 2] = x02 + input[ 2]; - x[ 3] = x03 + input[ 3]; - x[ 4] = x04 + input[ 4]; - x[ 5] = x05 + input[ 5]; - x[ 6] = x06 + input[ 6]; - x[ 7] = x07 + input[ 7]; - x[ 8] = x08 + input[ 8]; - x[ 9] = x09 + input[ 9]; - x[10] = x10 + input[10]; - x[11] = x11 + input[11]; - x[12] = x12 + input[12]; - x[13] = x13 + input[13]; - x[14] = x14 + input[14]; - x[15] = x15 + input[15]; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/DesEdeEngine.cs b/bc-sharp-crypto/src/crypto/engines/DesEdeEngine.cs deleted file mode 100644 index 2fac24a..0000000 --- a/bc-sharp-crypto/src/crypto/engines/DesEdeEngine.cs +++ /dev/null @@ -1,100 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /// A class that provides a basic DESede (or Triple DES) engine. - public class DesEdeEngine - : DesEngine - { - private int[] workingKey1, workingKey2, workingKey3; - private bool forEncryption; - - /** - * initialise a DESede cipher. - * - * @param forEncryption whether or not we are for encryption. - * @param parameters the parameters required to set up the cipher. - * @exception ArgumentException if the parameters argument is - * inappropriate. - */ - public override void Init( - bool forEncryption, - ICipherParameters parameters) - { - if (!(parameters is KeyParameter)) - throw new ArgumentException("invalid parameter passed to DESede init - " + Platform.GetTypeName(parameters)); - - byte[] keyMaster = ((KeyParameter)parameters).GetKey(); - if (keyMaster.Length != 24 && keyMaster.Length != 16) - throw new ArgumentException("key size must be 16 or 24 bytes."); - - this.forEncryption = forEncryption; - - byte[] key1 = new byte[8]; - Array.Copy(keyMaster, 0, key1, 0, key1.Length); - workingKey1 = GenerateWorkingKey(forEncryption, key1); - - byte[] key2 = new byte[8]; - Array.Copy(keyMaster, 8, key2, 0, key2.Length); - workingKey2 = GenerateWorkingKey(!forEncryption, key2); - - if (keyMaster.Length == 24) - { - byte[] key3 = new byte[8]; - Array.Copy(keyMaster, 16, key3, 0, key3.Length); - workingKey3 = GenerateWorkingKey(forEncryption, key3); - } - else // 16 byte key - { - workingKey3 = workingKey1; - } - } - - public override string AlgorithmName - { - get { return "DESede"; } - } - - public override int GetBlockSize() - { - return BLOCK_SIZE; - } - - public override int ProcessBlock( - byte[] input, - int inOff, - byte[] output, - int outOff) - { - if (workingKey1 == null) - throw new InvalidOperationException("DESede engine not initialised"); - - Check.DataLength(input, inOff, BLOCK_SIZE, "input buffer too short"); - Check.OutputLength(output, outOff, BLOCK_SIZE, "output buffer too short"); - - byte[] temp = new byte[BLOCK_SIZE]; - - if (forEncryption) - { - DesFunc(workingKey1, input, inOff, temp, 0); - DesFunc(workingKey2, temp, 0, temp, 0); - DesFunc(workingKey3, temp, 0, output, outOff); - } - else - { - DesFunc(workingKey3, input, inOff, temp, 0); - DesFunc(workingKey2, temp, 0, temp, 0); - DesFunc(workingKey1, temp, 0, output, outOff); - } - - return BLOCK_SIZE; - } - - public override void Reset() - { - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/DesEdeWrapEngine.cs b/bc-sharp-crypto/src/crypto/engines/DesEdeWrapEngine.cs deleted file mode 100644 index 43100a9..0000000 --- a/bc-sharp-crypto/src/crypto/engines/DesEdeWrapEngine.cs +++ /dev/null @@ -1,322 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Crypto.Modes; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * Wrap keys according to - * - * draft-ietf-smime-key-wrap-01.txt. - *

- * Note: - *

    - *
  • this is based on a draft, and as such is subject to change - don't use this class for anything requiring long term storage.
    • - *
  • if you are using this to wrap triple-des keys you need to set the - * parity bits on the key and, if it's a two-key triple-des key, pad it - * yourself.
    • - *
- *

- */ - public class DesEdeWrapEngine - : IWrapper - { - /** Field engine */ - private CbcBlockCipher engine; - /** Field param */ - private KeyParameter param; - /** Field paramPlusIV */ - private ParametersWithIV paramPlusIV; - /** Field iv */ - private byte[] iv; - /** Field forWrapping */ - private bool forWrapping; - /** Field IV2 */ - private static readonly byte[] IV2 = { (byte) 0x4a, (byte) 0xdd, (byte) 0xa2, - (byte) 0x2c, (byte) 0x79, (byte) 0xe8, - (byte) 0x21, (byte) 0x05 }; - - // - // checksum digest - // - private readonly IDigest sha1 = new Sha1Digest(); - private readonly byte[] digest = new byte[20]; - - /** - * Method init - * - * @param forWrapping - * @param param - */ - public virtual void Init( - bool forWrapping, - ICipherParameters parameters) - { - this.forWrapping = forWrapping; - this.engine = new CbcBlockCipher(new DesEdeEngine()); - - SecureRandom sr; - if (parameters is ParametersWithRandom) - { - ParametersWithRandom pr = (ParametersWithRandom) parameters; - parameters = pr.Parameters; - sr = pr.Random; - } - else - { - sr = new SecureRandom(); - } - - if (parameters is KeyParameter) - { - this.param = (KeyParameter) parameters; - if (this.forWrapping) - { - // Hm, we have no IV but we want to wrap ?!? - // well, then we have to create our own IV. - this.iv = new byte[8]; - sr.NextBytes(iv); - - this.paramPlusIV = new ParametersWithIV(this.param, this.iv); - } - } - else if (parameters is ParametersWithIV) - { - if (!forWrapping) - throw new ArgumentException("You should not supply an IV for unwrapping"); - - this.paramPlusIV = (ParametersWithIV) parameters; - this.iv = this.paramPlusIV.GetIV(); - this.param = (KeyParameter) this.paramPlusIV.Parameters; - - if (this.iv.Length != 8) - throw new ArgumentException("IV is not 8 octets", "parameters"); - } - } - - /** - * Method GetAlgorithmName - * - * @return - */ - public virtual string AlgorithmName - { - get { return "DESede"; } - } - - /** - * Method wrap - * - * @param in - * @param inOff - * @param inLen - * @return - */ - public virtual byte[] Wrap( - byte[] input, - int inOff, - int length) - { - if (!forWrapping) - { - throw new InvalidOperationException("Not initialized for wrapping"); - } - - byte[] keyToBeWrapped = new byte[length]; - Array.Copy(input, inOff, keyToBeWrapped, 0, length); - - // Compute the CMS Key Checksum, (section 5.6.1), call this CKS. - byte[] CKS = CalculateCmsKeyChecksum(keyToBeWrapped); - - // Let WKCKS = WK || CKS where || is concatenation. - byte[] WKCKS = new byte[keyToBeWrapped.Length + CKS.Length]; - Array.Copy(keyToBeWrapped, 0, WKCKS, 0, keyToBeWrapped.Length); - Array.Copy(CKS, 0, WKCKS, keyToBeWrapped.Length, CKS.Length); - - // Encrypt WKCKS in CBC mode using KEK as the key and IV as the - // initialization vector. Call the results TEMP1. - - int blockSize = engine.GetBlockSize(); - - if (WKCKS.Length % blockSize != 0) - throw new InvalidOperationException("Not multiple of block length"); - - engine.Init(true, paramPlusIV); - - byte [] TEMP1 = new byte[WKCKS.Length]; - - for (int currentBytePos = 0; currentBytePos != WKCKS.Length; currentBytePos += blockSize) - { - engine.ProcessBlock(WKCKS, currentBytePos, TEMP1, currentBytePos); - } - - // Let TEMP2 = IV || TEMP1. - byte[] TEMP2 = new byte[this.iv.Length + TEMP1.Length]; - Array.Copy(this.iv, 0, TEMP2, 0, this.iv.Length); - Array.Copy(TEMP1, 0, TEMP2, this.iv.Length, TEMP1.Length); - - // Reverse the order of the octets in TEMP2 and call the result TEMP3. - byte[] TEMP3 = reverse(TEMP2); - - // Encrypt TEMP3 in CBC mode using the KEK and an initialization vector - // of 0x 4a dd a2 2c 79 e8 21 05. The resulting cipher text is the desired - // result. It is 40 octets long if a 168 bit key is being wrapped. - ParametersWithIV param2 = new ParametersWithIV(this.param, IV2); - this.engine.Init(true, param2); - - for (int currentBytePos = 0; currentBytePos != TEMP3.Length; currentBytePos += blockSize) - { - engine.ProcessBlock(TEMP3, currentBytePos, TEMP3, currentBytePos); - } - - return TEMP3; - } - - /** - * Method unwrap - * - * @param in - * @param inOff - * @param inLen - * @return - * @throws InvalidCipherTextException - */ - public virtual byte[] Unwrap( - byte[] input, - int inOff, - int length) - { - if (forWrapping) - { - throw new InvalidOperationException("Not set for unwrapping"); - } - if (input == null) - { - throw new InvalidCipherTextException("Null pointer as ciphertext"); - } - - int blockSize = engine.GetBlockSize(); - - if (length % blockSize != 0) - { - throw new InvalidCipherTextException("Ciphertext not multiple of " + blockSize); - } - - /* - // Check if the length of the cipher text is reasonable given the key - // type. It must be 40 bytes for a 168 bit key and either 32, 40, or - // 48 bytes for a 128, 192, or 256 bit key. If the length is not supported - // or inconsistent with the algorithm for which the key is intended, - // return error. - // - // we do not accept 168 bit keys. it has to be 192 bit. - int lengthA = (estimatedKeyLengthInBit / 8) + 16; - int lengthB = estimatedKeyLengthInBit % 8; - if ((lengthA != keyToBeUnwrapped.Length) || (lengthB != 0)) { - throw new XMLSecurityException("empty"); - } - */ - - // Decrypt the cipher text with TRIPLedeS in CBC mode using the KEK - // and an initialization vector (IV) of 0x4adda22c79e82105. Call the output TEMP3. - ParametersWithIV param2 = new ParametersWithIV(this.param, IV2); - this.engine.Init(false, param2); - - byte [] TEMP3 = new byte[length]; - - for (int currentBytePos = 0; currentBytePos != TEMP3.Length; currentBytePos += blockSize) - { - engine.ProcessBlock(input, inOff + currentBytePos, TEMP3, currentBytePos); - } - - // Reverse the order of the octets in TEMP3 and call the result TEMP2. - byte[] TEMP2 = reverse(TEMP3); - - // Decompose TEMP2 into IV, the first 8 octets, and TEMP1, the remaining octets. - this.iv = new byte[8]; - byte[] TEMP1 = new byte[TEMP2.Length - 8]; - Array.Copy(TEMP2, 0, this.iv, 0, 8); - Array.Copy(TEMP2, 8, TEMP1, 0, TEMP2.Length - 8); - - // Decrypt TEMP1 using TRIPLedeS in CBC mode using the KEK and the IV - // found in the previous step. Call the result WKCKS. - this.paramPlusIV = new ParametersWithIV(this.param, this.iv); - this.engine.Init(false, this.paramPlusIV); - - byte[] WKCKS = new byte[TEMP1.Length]; - - for (int currentBytePos = 0; currentBytePos != WKCKS.Length; currentBytePos += blockSize) - { - engine.ProcessBlock(TEMP1, currentBytePos, WKCKS, currentBytePos); - } - - // Decompose WKCKS. CKS is the last 8 octets and WK, the wrapped key, are - // those octets before the CKS. - byte[] result = new byte[WKCKS.Length - 8]; - byte[] CKStoBeVerified = new byte[8]; - Array.Copy(WKCKS, 0, result, 0, WKCKS.Length - 8); - Array.Copy(WKCKS, WKCKS.Length - 8, CKStoBeVerified, 0, 8); - - // Calculate a CMS Key Checksum, (section 5.6.1), over the WK and compare - // with the CKS extracted in the above step. If they are not equal, return error. - if (!CheckCmsKeyChecksum(result, CKStoBeVerified)) { - throw new InvalidCipherTextException( - "Checksum inside ciphertext is corrupted"); - } - - // WK is the wrapped key, now extracted for use in data decryption. - return result; - } - - /** - * Some key wrap algorithms make use of the Key Checksum defined - * in CMS [CMS-Algorithms]. This is used to provide an integrity - * check value for the key being wrapped. The algorithm is - * - * - Compute the 20 octet SHA-1 hash on the key being wrapped. - * - Use the first 8 octets of this hash as the checksum value. - * - * @param key - * @return - * @throws Exception - * @see http://www.w3.org/TR/xmlenc-core/#sec-CMSKeyChecksum - */ - private byte[] CalculateCmsKeyChecksum( - byte[] key) - { - sha1.BlockUpdate(key, 0, key.Length); - sha1.DoFinal(digest, 0); - - byte[] result = new byte[8]; - Array.Copy(digest, 0, result, 0, 8); - return result; - } - - /** - * @param key - * @param checksum - * @return - * @see http://www.w3.org/TR/xmlenc-core/#sec-CMSKeyChecksum - */ - private bool CheckCmsKeyChecksum( - byte[] key, - byte[] checksum) - { - return Arrays.ConstantTimeAreEqual(CalculateCmsKeyChecksum(key), checksum); - } - - private static byte[] reverse(byte[] bs) - { - byte[] result = new byte[bs.Length]; - for (int i = 0; i < bs.Length; i++) - { - result[i] = bs[bs.Length - (i + 1)]; - } - return result; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/DesEngine.cs b/bc-sharp-crypto/src/crypto/engines/DesEngine.cs deleted file mode 100644 index cfd5068..0000000 --- a/bc-sharp-crypto/src/crypto/engines/DesEngine.cs +++ /dev/null @@ -1,475 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /// A class that provides a basic DES engine. - public class DesEngine - : IBlockCipher - { - internal const int BLOCK_SIZE = 8; - - private int[] workingKey; - - public virtual int[] GetWorkingKey() - { - return workingKey; - } - - /** - * initialise a DES cipher. - * - * @param forEncryption whether or not we are for encryption. - * @param parameters the parameters required to set up the cipher. - * @exception ArgumentException if the parameters argument is - * inappropriate. - */ - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - if (!(parameters is KeyParameter)) - throw new ArgumentException("invalid parameter passed to DES init - " + Platform.GetTypeName(parameters)); - - workingKey = GenerateWorkingKey(forEncryption, ((KeyParameter)parameters).GetKey()); - } - - public virtual string AlgorithmName - { - get { return "DES"; } - } - - public virtual bool IsPartialBlockOkay - { - get { return false; } - } - - public virtual int GetBlockSize() - { - return BLOCK_SIZE; - } - - public virtual int ProcessBlock( - byte[] input, - int inOff, - byte[] output, - int outOff) - { - if (workingKey == null) - throw new InvalidOperationException("DES engine not initialised"); - - Check.DataLength(input, inOff, BLOCK_SIZE, "input buffer too short"); - Check.OutputLength(output, outOff, BLOCK_SIZE, "output buffer too short"); - - DesFunc(workingKey, input, inOff, output, outOff); - - return BLOCK_SIZE; - } - - public virtual void Reset() - { - } - - /** - * what follows is mainly taken from "Applied Cryptography", by - * Bruce Schneier, however it also bears great resemblance to Richard - * Outerbridge's D3DES... - */ - -// private static readonly short[] Df_Key = -// { -// 0x01,0x23,0x45,0x67,0x89,0xab,0xcd,0xef, -// 0xfe,0xdc,0xba,0x98,0x76,0x54,0x32,0x10, -// 0x89,0xab,0xcd,0xef,0x01,0x23,0x45,0x67 -// }; - - private static readonly short[] bytebit = - { - 128, 64, 32, 16, 8, 4, 2, 1 - }; - - private static readonly int[] bigbyte = - { - 0x800000, 0x400000, 0x200000, 0x100000, - 0x80000, 0x40000, 0x20000, 0x10000, - 0x8000, 0x4000, 0x2000, 0x1000, - 0x800, 0x400, 0x200, 0x100, - 0x80, 0x40, 0x20, 0x10, - 0x8, 0x4, 0x2, 0x1 - }; - - /* - * Use the key schedule specified in the Standard (ANSI X3.92-1981). - */ - private static readonly byte[] pc1 = - { - 56, 48, 40, 32, 24, 16, 8, 0, 57, 49, 41, 33, 25, 17, - 9, 1, 58, 50, 42, 34, 26, 18, 10, 2, 59, 51, 43, 35, - 62, 54, 46, 38, 30, 22, 14, 6, 61, 53, 45, 37, 29, 21, - 13, 5, 60, 52, 44, 36, 28, 20, 12, 4, 27, 19, 11, 3 - }; - - private static readonly byte[] totrot = - { - 1, 2, 4, 6, 8, 10, 12, 14, - 15, 17, 19, 21, 23, 25, 27, 28 - }; - - private static readonly byte[] pc2 = - { - 13, 16, 10, 23, 0, 4, 2, 27, 14, 5, 20, 9, - 22, 18, 11, 3, 25, 7, 15, 6, 26, 19, 12, 1, - 40, 51, 30, 36, 46, 54, 29, 39, 50, 44, 32, 47, - 43, 48, 38, 55, 33, 52, 45, 41, 49, 35, 28, 31 - }; - - private static readonly uint[] SP1 = - { - 0x01010400, 0x00000000, 0x00010000, 0x01010404, - 0x01010004, 0x00010404, 0x00000004, 0x00010000, - 0x00000400, 0x01010400, 0x01010404, 0x00000400, - 0x01000404, 0x01010004, 0x01000000, 0x00000004, - 0x00000404, 0x01000400, 0x01000400, 0x00010400, - 0x00010400, 0x01010000, 0x01010000, 0x01000404, - 0x00010004, 0x01000004, 0x01000004, 0x00010004, - 0x00000000, 0x00000404, 0x00010404, 0x01000000, - 0x00010000, 0x01010404, 0x00000004, 0x01010000, - 0x01010400, 0x01000000, 0x01000000, 0x00000400, - 0x01010004, 0x00010000, 0x00010400, 0x01000004, - 0x00000400, 0x00000004, 0x01000404, 0x00010404, - 0x01010404, 0x00010004, 0x01010000, 0x01000404, - 0x01000004, 0x00000404, 0x00010404, 0x01010400, - 0x00000404, 0x01000400, 0x01000400, 0x00000000, - 0x00010004, 0x00010400, 0x00000000, 0x01010004 - }; - - private static readonly uint[] SP2 = - { - 0x80108020, 0x80008000, 0x00008000, 0x00108020, - 0x00100000, 0x00000020, 0x80100020, 0x80008020, - 0x80000020, 0x80108020, 0x80108000, 0x80000000, - 0x80008000, 0x00100000, 0x00000020, 0x80100020, - 0x00108000, 0x00100020, 0x80008020, 0x00000000, - 0x80000000, 0x00008000, 0x00108020, 0x80100000, - 0x00100020, 0x80000020, 0x00000000, 0x00108000, - 0x00008020, 0x80108000, 0x80100000, 0x00008020, - 0x00000000, 0x00108020, 0x80100020, 0x00100000, - 0x80008020, 0x80100000, 0x80108000, 0x00008000, - 0x80100000, 0x80008000, 0x00000020, 0x80108020, - 0x00108020, 0x00000020, 0x00008000, 0x80000000, - 0x00008020, 0x80108000, 0x00100000, 0x80000020, - 0x00100020, 0x80008020, 0x80000020, 0x00100020, - 0x00108000, 0x00000000, 0x80008000, 0x00008020, - 0x80000000, 0x80100020, 0x80108020, 0x00108000 - }; - - private static readonly uint[] SP3 = - { - 0x00000208, 0x08020200, 0x00000000, 0x08020008, - 0x08000200, 0x00000000, 0x00020208, 0x08000200, - 0x00020008, 0x08000008, 0x08000008, 0x00020000, - 0x08020208, 0x00020008, 0x08020000, 0x00000208, - 0x08000000, 0x00000008, 0x08020200, 0x00000200, - 0x00020200, 0x08020000, 0x08020008, 0x00020208, - 0x08000208, 0x00020200, 0x00020000, 0x08000208, - 0x00000008, 0x08020208, 0x00000200, 0x08000000, - 0x08020200, 0x08000000, 0x00020008, 0x00000208, - 0x00020000, 0x08020200, 0x08000200, 0x00000000, - 0x00000200, 0x00020008, 0x08020208, 0x08000200, - 0x08000008, 0x00000200, 0x00000000, 0x08020008, - 0x08000208, 0x00020000, 0x08000000, 0x08020208, - 0x00000008, 0x00020208, 0x00020200, 0x08000008, - 0x08020000, 0x08000208, 0x00000208, 0x08020000, - 0x00020208, 0x00000008, 0x08020008, 0x00020200 - }; - - private static readonly uint[] SP4 = - { - 0x00802001, 0x00002081, 0x00002081, 0x00000080, - 0x00802080, 0x00800081, 0x00800001, 0x00002001, - 0x00000000, 0x00802000, 0x00802000, 0x00802081, - 0x00000081, 0x00000000, 0x00800080, 0x00800001, - 0x00000001, 0x00002000, 0x00800000, 0x00802001, - 0x00000080, 0x00800000, 0x00002001, 0x00002080, - 0x00800081, 0x00000001, 0x00002080, 0x00800080, - 0x00002000, 0x00802080, 0x00802081, 0x00000081, - 0x00800080, 0x00800001, 0x00802000, 0x00802081, - 0x00000081, 0x00000000, 0x00000000, 0x00802000, - 0x00002080, 0x00800080, 0x00800081, 0x00000001, - 0x00802001, 0x00002081, 0x00002081, 0x00000080, - 0x00802081, 0x00000081, 0x00000001, 0x00002000, - 0x00800001, 0x00002001, 0x00802080, 0x00800081, - 0x00002001, 0x00002080, 0x00800000, 0x00802001, - 0x00000080, 0x00800000, 0x00002000, 0x00802080 - }; - - private static readonly uint[] SP5 = - { - 0x00000100, 0x02080100, 0x02080000, 0x42000100, - 0x00080000, 0x00000100, 0x40000000, 0x02080000, - 0x40080100, 0x00080000, 0x02000100, 0x40080100, - 0x42000100, 0x42080000, 0x00080100, 0x40000000, - 0x02000000, 0x40080000, 0x40080000, 0x00000000, - 0x40000100, 0x42080100, 0x42080100, 0x02000100, - 0x42080000, 0x40000100, 0x00000000, 0x42000000, - 0x02080100, 0x02000000, 0x42000000, 0x00080100, - 0x00080000, 0x42000100, 0x00000100, 0x02000000, - 0x40000000, 0x02080000, 0x42000100, 0x40080100, - 0x02000100, 0x40000000, 0x42080000, 0x02080100, - 0x40080100, 0x00000100, 0x02000000, 0x42080000, - 0x42080100, 0x00080100, 0x42000000, 0x42080100, - 0x02080000, 0x00000000, 0x40080000, 0x42000000, - 0x00080100, 0x02000100, 0x40000100, 0x00080000, - 0x00000000, 0x40080000, 0x02080100, 0x40000100 - }; - - private static readonly uint[] SP6 = - { - 0x20000010, 0x20400000, 0x00004000, 0x20404010, - 0x20400000, 0x00000010, 0x20404010, 0x00400000, - 0x20004000, 0x00404010, 0x00400000, 0x20000010, - 0x00400010, 0x20004000, 0x20000000, 0x00004010, - 0x00000000, 0x00400010, 0x20004010, 0x00004000, - 0x00404000, 0x20004010, 0x00000010, 0x20400010, - 0x20400010, 0x00000000, 0x00404010, 0x20404000, - 0x00004010, 0x00404000, 0x20404000, 0x20000000, - 0x20004000, 0x00000010, 0x20400010, 0x00404000, - 0x20404010, 0x00400000, 0x00004010, 0x20000010, - 0x00400000, 0x20004000, 0x20000000, 0x00004010, - 0x20000010, 0x20404010, 0x00404000, 0x20400000, - 0x00404010, 0x20404000, 0x00000000, 0x20400010, - 0x00000010, 0x00004000, 0x20400000, 0x00404010, - 0x00004000, 0x00400010, 0x20004010, 0x00000000, - 0x20404000, 0x20000000, 0x00400010, 0x20004010 - }; - - private static readonly uint[] SP7 = - { - 0x00200000, 0x04200002, 0x04000802, 0x00000000, - 0x00000800, 0x04000802, 0x00200802, 0x04200800, - 0x04200802, 0x00200000, 0x00000000, 0x04000002, - 0x00000002, 0x04000000, 0x04200002, 0x00000802, - 0x04000800, 0x00200802, 0x00200002, 0x04000800, - 0x04000002, 0x04200000, 0x04200800, 0x00200002, - 0x04200000, 0x00000800, 0x00000802, 0x04200802, - 0x00200800, 0x00000002, 0x04000000, 0x00200800, - 0x04000000, 0x00200800, 0x00200000, 0x04000802, - 0x04000802, 0x04200002, 0x04200002, 0x00000002, - 0x00200002, 0x04000000, 0x04000800, 0x00200000, - 0x04200800, 0x00000802, 0x00200802, 0x04200800, - 0x00000802, 0x04000002, 0x04200802, 0x04200000, - 0x00200800, 0x00000000, 0x00000002, 0x04200802, - 0x00000000, 0x00200802, 0x04200000, 0x00000800, - 0x04000002, 0x04000800, 0x00000800, 0x00200002 - }; - - private static readonly uint[] SP8 = - { - 0x10001040, 0x00001000, 0x00040000, 0x10041040, - 0x10000000, 0x10001040, 0x00000040, 0x10000000, - 0x00040040, 0x10040000, 0x10041040, 0x00041000, - 0x10041000, 0x00041040, 0x00001000, 0x00000040, - 0x10040000, 0x10000040, 0x10001000, 0x00001040, - 0x00041000, 0x00040040, 0x10040040, 0x10041000, - 0x00001040, 0x00000000, 0x00000000, 0x10040040, - 0x10000040, 0x10001000, 0x00041040, 0x00040000, - 0x00041040, 0x00040000, 0x10041000, 0x00001000, - 0x00000040, 0x10040040, 0x00001000, 0x00041040, - 0x10001000, 0x00000040, 0x10000040, 0x10040000, - 0x10040040, 0x10000000, 0x00040000, 0x10001040, - 0x00000000, 0x10041040, 0x00040040, 0x10000040, - 0x10040000, 0x10001000, 0x10001040, 0x00000000, - 0x10041040, 0x00041000, 0x00041000, 0x00001040, - 0x00001040, 0x00040040, 0x10000000, 0x10041000 - }; - - /** - * Generate an integer based working key based on our secret key - * and what we processing we are planning to do. - * - * Acknowledgements for this routine go to James Gillogly and Phil Karn. - * (whoever, and wherever they are!). - */ - protected static int[] GenerateWorkingKey( - bool encrypting, - byte[] key) - { - int[] newKey = new int[32]; - bool[] pc1m = new bool[56]; - bool[] pcr = new bool[56]; - - for (int j = 0; j < 56; j++ ) - { - int l = pc1[j]; - - pc1m[j] = ((key[(uint) l >> 3] & bytebit[l & 07]) != 0); - } - - for (int i = 0; i < 16; i++) - { - int l, m, n; - - if (encrypting) - { - m = i << 1; - } - else - { - m = (15 - i) << 1; - } - - n = m + 1; - newKey[m] = newKey[n] = 0; - - for (int j = 0; j < 28; j++) - { - l = j + totrot[i]; - if ( l < 28 ) - { - pcr[j] = pc1m[l]; - } - else - { - pcr[j] = pc1m[l - 28]; - } - } - - for (int j = 28; j < 56; j++) - { - l = j + totrot[i]; - if (l < 56 ) - { - pcr[j] = pc1m[l]; - } - else - { - pcr[j] = pc1m[l - 28]; - } - } - - for (int j = 0; j < 24; j++) - { - if (pcr[pc2[j]]) - { - newKey[m] |= bigbyte[j]; - } - - if (pcr[pc2[j + 24]]) - { - newKey[n] |= bigbyte[j]; - } - } - } - - // - // store the processed key - // - for (int i = 0; i != 32; i += 2) - { - int i1, i2; - - i1 = newKey[i]; - i2 = newKey[i + 1]; - - newKey[i] = (int) ( (uint) ((i1 & 0x00fc0000) << 6) | - (uint) ((i1 & 0x00000fc0) << 10) | - ((uint) (i2 & 0x00fc0000) >> 10) | - ((uint) (i2 & 0x00000fc0) >> 6)); - - newKey[i + 1] = (int) ( (uint) ((i1 & 0x0003f000) << 12) | - (uint) ((i1 & 0x0000003f) << 16) | - ((uint) (i2 & 0x0003f000) >> 4) | - (uint) (i2 & 0x0000003f)); - } - - return newKey; - } - - /** - * the DES engine. - */ - internal static void DesFunc( - int[] wKey, - byte[] input, - int inOff, - byte[] outBytes, - int outOff) - { - uint left = Pack.BE_To_UInt32(input, inOff); - uint right = Pack.BE_To_UInt32(input, inOff + 4); - uint work; - - work = ((left >> 4) ^ right) & 0x0f0f0f0f; - right ^= work; - left ^= (work << 4); - work = ((left >> 16) ^ right) & 0x0000ffff; - right ^= work; - left ^= (work << 16); - work = ((right >> 2) ^ left) & 0x33333333; - left ^= work; - right ^= (work << 2); - work = ((right >> 8) ^ left) & 0x00ff00ff; - left ^= work; - right ^= (work << 8); - right = (right << 1) | (right >> 31); - work = (left ^ right) & 0xaaaaaaaa; - left ^= work; - right ^= work; - left = (left << 1) | (left >> 31); - - for (int round = 0; round < 8; round++) - { - uint fval; - - work = (right << 28) | (right >> 4); - work ^= (uint)wKey[round * 4 + 0]; - fval = SP7[work & 0x3f]; - fval |= SP5[(work >> 8) & 0x3f]; - fval |= SP3[(work >> 16) & 0x3f]; - fval |= SP1[(work >> 24) & 0x3f]; - work = right ^ (uint)wKey[round * 4 + 1]; - fval |= SP8[ work & 0x3f]; - fval |= SP6[(work >> 8) & 0x3f]; - fval |= SP4[(work >> 16) & 0x3f]; - fval |= SP2[(work >> 24) & 0x3f]; - left ^= fval; - work = (left << 28) | (left >> 4); - work ^= (uint)wKey[round * 4 + 2]; - fval = SP7[ work & 0x3f]; - fval |= SP5[(work >> 8) & 0x3f]; - fval |= SP3[(work >> 16) & 0x3f]; - fval |= SP1[(work >> 24) & 0x3f]; - work = left ^ (uint)wKey[round * 4 + 3]; - fval |= SP8[ work & 0x3f]; - fval |= SP6[(work >> 8) & 0x3f]; - fval |= SP4[(work >> 16) & 0x3f]; - fval |= SP2[(work >> 24) & 0x3f]; - right ^= fval; - } - - right = (right << 31) | (right >> 1); - work = (left ^ right) & 0xaaaaaaaa; - left ^= work; - right ^= work; - left = (left << 31) | (left >> 1); - work = ((left >> 8) ^ right) & 0x00ff00ff; - right ^= work; - left ^= (work << 8); - work = ((left >> 2) ^ right) & 0x33333333; - right ^= work; - left ^= (work << 2); - work = ((right >> 16) ^ left) & 0x0000ffff; - left ^= work; - right ^= (work << 16); - work = ((right >> 4) ^ left) & 0x0f0f0f0f; - left ^= work; - right ^= (work << 4); - - Pack.UInt32_To_BE(right, outBytes, outOff); - Pack.UInt32_To_BE(left, outBytes, outOff + 4); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/Dstu7624Engine.cs b/bc-sharp-crypto/src/crypto/engines/Dstu7624Engine.cs deleted file mode 100644 index cdb0f50..0000000 --- a/bc-sharp-crypto/src/crypto/engines/Dstu7624Engine.cs +++ /dev/null @@ -1,766 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * implementation of DSTU 7624 (Kalyna) - */ - public class Dstu7624Engine - : IBlockCipher - { - private static readonly int BITS_IN_WORD = 64; - private static readonly int BITS_IN_BYTE = 8; - - private static readonly int REDUCTION_POLYNOMIAL = 0x011d; /* x^8 + x^4 + x^3 + x^2 + 1 */ - - private ulong[] internalState; - private ulong[] workingKey; - private ulong[][] roundKeys; - - /* Number of 64-bit words in block */ - private int wordsInBlock; - - /* Number of 64-bit words in key */ - private int wordsInKey; - - /* Number of encryption rounds depending on key length */ - private static int ROUNDS_128 = 10; - private static int ROUNDS_256 = 14; - private static int ROUNDS_512 = 18; - - private int blockSizeBits; - private int roundsAmount; - - private bool forEncryption; - - private byte[] internalStateBytes; - private byte[] tempInternalStateBytes; - - public Dstu7624Engine(int blockSizeBits) - { - /* DSTU7624 supports 128 | 256 | 512 key/block sizes */ - if (blockSizeBits != 128 && blockSizeBits != 256 && blockSizeBits != 512) - { - throw new ArgumentException("Unsupported block length: only 128/256/512 are allowed"); - } - this.blockSizeBits = blockSizeBits; - - wordsInBlock = blockSizeBits / BITS_IN_WORD; - internalState = new ulong[wordsInBlock]; - - internalStateBytes = new byte[internalState.Length * 64 / BITS_IN_BYTE]; - tempInternalStateBytes = new byte[internalState.Length * 64 / BITS_IN_BYTE]; - } - - #region INITIALIZATION - public virtual void Init(bool forEncryption, ICipherParameters parameters) - { - if (parameters is KeyParameter) - { - this.forEncryption = forEncryption; - - byte[] keyBytes = ((KeyParameter)parameters).GetKey(); - int keyBitLength = keyBytes.Length * BITS_IN_BYTE; - int blockBitLength = wordsInBlock * BITS_IN_WORD; - - if (keyBitLength != 128 && keyBitLength != 256 && keyBitLength != 512) - { - throw new ArgumentException("unsupported key length: only 128/256/512 are allowed"); - } - - /* Limitations on key lengths depending on block lengths. See table 6.1 in standard */ - if (blockBitLength == 128) - { - if (keyBitLength == 512) - { - throw new ArgumentException("Unsupported key length"); - } - } - - if (blockBitLength == 256) - { - if (keyBitLength == 128) - { - throw new ArgumentException("Unsupported key length"); - } - } - - if (blockBitLength == 512) - { - if (keyBitLength != 512) - { - throw new ArgumentException("Unsupported key length"); - } - } - - switch (keyBitLength) - { - case 128: - roundsAmount = ROUNDS_128; - break; - case 256: - roundsAmount = ROUNDS_256; - break; - case 512: - roundsAmount = ROUNDS_512; - break; - } - - wordsInKey = keyBitLength / BITS_IN_WORD; - - /* +1 round key as defined in standard */ - roundKeys = new ulong[roundsAmount + 1][]; - for (int roundKeyIndex = 0; roundKeyIndex < roundKeys.Length; roundKeyIndex++) - { - roundKeys[roundKeyIndex] = new ulong[wordsInBlock]; - } - - workingKey = new ulong[wordsInKey]; - - if (keyBytes.Length != wordsInKey * BITS_IN_WORD / BITS_IN_BYTE) - { - throw new ArgumentException("Invalid key parameter passed to DSTU7624Engine init"); - } - - /* Unpack encryption key bytes to words */ - Pack.LE_To_UInt64(keyBytes, 0, workingKey); - - ulong[] kt = new ulong[wordsInBlock]; - - KeyExpandKT(workingKey, kt); - - KeyExpandEven(workingKey, kt); - - KeyExpandOdd(); - - } - else if (parameters != null) - { - throw new ArgumentException("invalid parameter passed to Dstu7624 init - " - + Platform.GetTypeName(parameters)); - } - - this.forEncryption = forEncryption; - } - - private void KeyExpandKT(ulong[] key, ulong[] kt) - { - ulong[] k0 = new ulong[wordsInBlock]; - ulong[] k1 = new ulong[wordsInBlock]; - - internalState = new ulong[wordsInBlock]; - internalState[0] += (ulong)(wordsInBlock + wordsInKey + 1); - - if (wordsInBlock == wordsInKey) - { - Array.Copy(key, k0, k0.Length); - Array.Copy(key, k1, k1.Length); - } - else - { - Array.Copy(key, 0, k0, 0, wordsInBlock); - Array.Copy(key, wordsInBlock, k1, 0, wordsInBlock); - } - - AddRoundKeyExpand(k0); - - EncryptionRound(); - - XorRoundKeyExpand(k1); - - EncryptionRound(); - - AddRoundKeyExpand(k0); - - EncryptionRound(); - - Array.Copy(internalState, kt, wordsInBlock); - } - - private void KeyExpandEven(ulong[] key, ulong[] kt) - { - ulong[] initial_data = new ulong[wordsInKey]; - - ulong[] kt_round = new ulong[wordsInBlock]; - - ulong[] tmv = new ulong[wordsInBlock]; - - int round = 0; - - Array.Copy(key, initial_data, wordsInKey); - - for (int i = 0; i < wordsInBlock; i++) - { - tmv[i] = 0x0001000100010001; - } - - while (true) - { - Array.Copy(kt, internalState, wordsInBlock); - - AddRoundKeyExpand(tmv); - - Array.Copy(internalState, kt_round, wordsInBlock); - Array.Copy(initial_data, internalState, wordsInBlock); - - AddRoundKeyExpand(kt_round); - - EncryptionRound(); - - XorRoundKeyExpand(kt_round); - - EncryptionRound(); - - AddRoundKeyExpand(kt_round); - - Array.Copy(internalState, roundKeys[round], wordsInBlock); - - if (roundsAmount == round) - { - break; - } - if (wordsInKey != wordsInBlock) - { - round += 2; - - ShiftLeft(tmv); - - Array.Copy(kt, internalState, wordsInBlock); - - AddRoundKeyExpand(tmv); - - Array.Copy(internalState, kt_round, wordsInBlock); - Array.Copy(initial_data, wordsInBlock, internalState, 0, wordsInBlock); - - AddRoundKeyExpand(kt_round); - - EncryptionRound(); - - XorRoundKeyExpand(kt_round); - - EncryptionRound(); - - AddRoundKeyExpand(kt_round); - - Array.Copy(internalState, roundKeys[round], wordsInBlock); - - if (roundsAmount == round) - { - break; - } - } - - round += 2; - ShiftLeft(tmv); - - //Rotate initial data array on 1 element left - ulong temp = initial_data[0]; - Array.Copy(initial_data, 1, initial_data, 0, initial_data.Length - 1); - initial_data[initial_data.Length - 1] = temp; - } - } - private void KeyExpandOdd() - { - for (int i = 1; i < roundsAmount; i += 2) - { - Array.Copy(roundKeys[i - 1], roundKeys[i], wordsInBlock); - RotateLeft(roundKeys[i]); - } - } - #endregion - - - public virtual int ProcessBlock(byte[] input, int inOff, byte[] output, int outOff) - { - if (workingKey == null) - throw new InvalidOperationException("Dstu7624 engine not initialised"); - - Check.DataLength(input, inOff, GetBlockSize(), "input buffer too short"); - Check.OutputLength(output, outOff, GetBlockSize(), "output buffer too short"); - - if (forEncryption) - { - Encrypt(input, inOff, output, outOff); - } - else - { - Decrypt(input, inOff, output, outOff); - } - - return GetBlockSize(); - } - - private void Encrypt(byte[] plain, int inOff, byte[] cipherText, int outOff) - { - Pack.LE_To_UInt64(plain, inOff, internalState); - - int round = 0; - AddRoundKey(round); - - while (++round < roundsAmount) - { - EncryptionRound(); - XorRoundKey(round); - } - - EncryptionRound(); - AddRoundKey(round); - - Pack.UInt64_To_LE(internalState, cipherText, outOff); - } - - private void Decrypt(byte[] cipherText, int inOff, byte[] decryptedText, int outOff) - { - Pack.LE_To_UInt64(cipherText, inOff, internalState); - - int round = roundsAmount; - SubRoundKey(round); - - while (--round > 0) - { - DecryptionRound(); - XorRoundKey(round); - } - - DecryptionRound(); - SubRoundKey(round); - - Pack.UInt64_To_LE(internalState, decryptedText, outOff); - } - - private void AddRoundKeyExpand(ulong[] value) - { - for (int i = 0; i < wordsInBlock; i++) - { - internalState[i] += value[i]; - } - } - - private void EncryptionRound() - { - SubBytes(); - ShiftRows(); - MixColumns(); - } - - private void DecryptionRound() - { - InvMixColumns(); - InvShiftRows(); - InvSubBytes(); - } - - private void RotateLeft(ulong[] state_value) - { - int rotateBytesLength = 2 * state_value.Length + 3; - int bytesLength = state_value.Length * (BITS_IN_WORD / BITS_IN_BYTE); - - byte[] bytes = Pack.UInt64_To_LE(state_value); - byte[] buffer = new byte[rotateBytesLength]; - - Array.Copy(bytes, buffer, rotateBytesLength); - - Buffer.BlockCopy(bytes, rotateBytesLength, bytes, 0, bytesLength - rotateBytesLength); - - Array.Copy(buffer, 0, bytes, bytesLength - rotateBytesLength, rotateBytesLength); - - Pack.LE_To_UInt64(bytes, 0, state_value); - } - - private void ShiftLeft(ulong[] state_value) - { - for (int i = 0; i < state_value.Length; i++) - { - state_value[i] <<= 1; - } - Array.Reverse(state_value); - } - - private void XorRoundKeyExpand(ulong[] value) - { - for (int i = 0; i < wordsInBlock; i++) - { - internalState[i] ^= value[i]; - } - } - - private void XorRoundKey(int round) - { - ulong[] roundKey = roundKeys[round]; - for (int i = 0; i < wordsInBlock; i++) - { - internalState[i] ^= roundKey[i]; - } - } - - private void ShiftRows() - { - int row, col; - int shift = -1; - - byte[] stateBytes = Pack.UInt64_To_LE(internalState); - byte[] nstate = new byte[wordsInBlock * 8]; - - for (row = 0; row < 8; row++) - { - if (row % (8 / wordsInBlock) == 0) - { - shift += 1; - } - - for (col = 0; col < wordsInBlock; col++) - { - nstate[row + ((col + shift) % wordsInBlock) * 8] = stateBytes[row + col * 8]; - } - } - - Pack.LE_To_UInt64(nstate, 0, internalState); - } - - private void InvShiftRows() - { - int row, col; - int shift = -1; - - byte[] stateBytes = Pack.UInt64_To_LE(internalState); - byte[] nstate = new byte[wordsInBlock * 8]; - - for (row = 0; row < 8; row++) - { - if (row % (8 / wordsInBlock) == 0) - { - shift += 1; - } - - for (col = 0; col < wordsInBlock; col++) - { - nstate[row + col * 8] = stateBytes[row + ((col + shift) % wordsInBlock) * 8]; - } - } - - Pack.LE_To_UInt64(nstate, 0, internalState); - } - - private void AddRoundKey(int round) - { - for (int i = 0; i < wordsInBlock; ++i) - { - internalState[i] += roundKeys[round][i]; - } - } - - private void SubRoundKey(int round) - { - for (int i = 0; i < wordsInBlock; ++i) - { - internalState[i] -= roundKeys[round][i]; - } - } - - private void MixColumns() - { - MatrixMultiply(mdsMatrix); - } - - private void InvMixColumns() - { - MatrixMultiply(mdsInvMatrix); - } - - private void MatrixMultiply(byte[][] matrix) - { - int col, row, b; - byte product; - ulong result; - byte[] stateBytes = Pack.UInt64_To_LE(internalState); - - for (col = 0; col < wordsInBlock; ++col) - { - result = 0; - for (row = 8 - 1; row >= 0; --row) - { - product = 0; - for (b = 8 - 1; b >= 0; --b) - { - product ^= MultiplyGF(stateBytes[b + col * 8], matrix[row][b]); - } - result |= (ulong)product << (row * 8); - } - internalState[col] = result; - } - } - - private byte MultiplyGF(byte x, byte y) - { - byte r = 0; - byte hbit = 0; - - for (int i = 0; i < BITS_IN_BYTE; i++) - { - if ((y & 0x01) == 1) - { - r ^= x; - } - - hbit = (byte)(x & 0x80); - - x <<= 1; - - if (hbit == 0x80) - { - x = (byte)((int)x ^ REDUCTION_POLYNOMIAL); - } - y >>= 1; - } - return r; - } - - private void SubBytes() - { - for (int i = 0; i < wordsInBlock; i++) - { - internalState[i] = sboxesForEncryption[0][internalState[i] & 0x00000000000000FF] | - ((ulong)sboxesForEncryption[1][(internalState[i] & 0x000000000000FF00) >> 8] << 8) | - ((ulong)sboxesForEncryption[2][(internalState[i] & 0x0000000000FF0000) >> 16] << 16) | - ((ulong)sboxesForEncryption[3][(internalState[i] & 0x00000000FF000000) >> 24] << 24) | - ((ulong)sboxesForEncryption[0][(internalState[i] & 0x000000FF00000000) >> 32] << 32) | - ((ulong)sboxesForEncryption[1][(internalState[i] & 0x0000FF0000000000) >> 40] << 40) | - ((ulong)sboxesForEncryption[2][(internalState[i] & 0x00FF000000000000) >> 48] << 48) | - ((ulong)sboxesForEncryption[3][(internalState[i] & 0xFF00000000000000) >> 56] << 56); - } - } - - private void InvSubBytes() - { - for (int i = 0; i < wordsInBlock; i++) - { - internalState[i] = sboxesForDecryption[0][internalState[i] & 0x00000000000000FF] | - ((ulong)sboxesForDecryption[1][(internalState[i] & 0x000000000000FF00) >> 8] << 8) | - ((ulong)sboxesForDecryption[2][(internalState[i] & 0x0000000000FF0000) >> 16] << 16) | - ((ulong)sboxesForDecryption[3][(internalState[i] & 0x00000000FF000000) >> 24] << 24) | - ((ulong)sboxesForDecryption[0][(internalState[i] & 0x000000FF00000000) >> 32] << 32) | - ((ulong)sboxesForDecryption[1][(internalState[i] & 0x0000FF0000000000) >> 40] << 40) | - ((ulong)sboxesForDecryption[2][(internalState[i] & 0x00FF000000000000) >> 48] << 48) | - ((ulong)sboxesForDecryption[3][(internalState[i] & 0xFF00000000000000) >> 56] << 56); - } - } - - #region TABLES AND S-BOXES - - private byte[][] mdsMatrix = - { - new byte[] { 0x01, 0x01, 0x05, 0x01, 0x08, 0x06, 0x07, 0x04 }, - new byte[] { 0x04, 0x01, 0x01, 0x05, 0x01, 0x08, 0x06, 0x07 }, - new byte[] { 0x07, 0x04, 0x01, 0x01, 0x05, 0x01, 0x08, 0x06 }, - new byte[] { 0x06, 0x07, 0x04, 0x01, 0x01, 0x05, 0x01, 0x08 }, - new byte[] { 0x08, 0x06, 0x07, 0x04, 0x01, 0x01, 0x05, 0x01 }, - new byte[] { 0x01, 0x08, 0x06, 0x07, 0x04, 0x01, 0x01, 0x05 }, - new byte[] { 0x05, 0x01, 0x08, 0x06, 0x07, 0x04, 0x01, 0x01 }, - new byte[] { 0x01, 0x05, 0x01, 0x08, 0x06, 0x07, 0x04, 0x01 }, - }; - - private byte[][] mdsInvMatrix = - { - new byte[] { 0xAD, 0x95, 0x76, 0xA8, 0x2F, 0x49, 0xD7, 0xCA }, - new byte[] { 0xCA, 0xAD, 0x95, 0x76, 0xA8, 0x2F, 0x49, 0xD7 }, - new byte[] { 0xD7, 0xCA, 0xAD, 0x95, 0x76, 0xA8, 0x2F, 0x49 }, - new byte[] { 0x49, 0xD7, 0xCA, 0xAD, 0x95, 0x76, 0xA8, 0x2F }, - new byte[] { 0x2F, 0x49, 0xD7, 0xCA, 0xAD, 0x95, 0x76, 0xA8 }, - new byte[] { 0xA8, 0x2F, 0x49, 0xD7, 0xCA, 0xAD, 0x95, 0x76 }, - new byte[] { 0x76, 0xA8, 0x2F, 0x49, 0xD7, 0xCA, 0xAD, 0x95 }, - new byte[] { 0x95, 0x76, 0xA8, 0x2F, 0x49, 0xD7, 0xCA, 0xAD }, - }; - - private byte[][] sboxesForEncryption = - { - new byte[] - { - 0xa8, 0x43, 0x5f, 0x06, 0x6b, 0x75, 0x6c, 0x59, 0x71, 0xdf, 0x87, 0x95, 0x17, 0xf0, 0xd8, 0x09, - 0x6d, 0xf3, 0x1d, 0xcb, 0xc9, 0x4d, 0x2c, 0xaf, 0x79, 0xe0, 0x97, 0xfd, 0x6f, 0x4b, 0x45, 0x39, - 0x3e, 0xdd, 0xa3, 0x4f, 0xb4, 0xb6, 0x9a, 0x0e, 0x1f, 0xbf, 0x15, 0xe1, 0x49, 0xd2, 0x93, 0xc6, - 0x92, 0x72, 0x9e, 0x61, 0xd1, 0x63, 0xfa, 0xee, 0xf4, 0x19, 0xd5, 0xad, 0x58, 0xa4, 0xbb, 0xa1, - 0xdc, 0xf2, 0x83, 0x37, 0x42, 0xe4, 0x7a, 0x32, 0x9c, 0xcc, 0xab, 0x4a, 0x8f, 0x6e, 0x04, 0x27, - 0x2e, 0xe7, 0xe2, 0x5a, 0x96, 0x16, 0x23, 0x2b, 0xc2, 0x65, 0x66, 0x0f, 0xbc, 0xa9, 0x47, 0x41, - 0x34, 0x48, 0xfc, 0xb7, 0x6a, 0x88, 0xa5, 0x53, 0x86, 0xf9, 0x5b, 0xdb, 0x38, 0x7b, 0xc3, 0x1e, - 0x22, 0x33, 0x24, 0x28, 0x36, 0xc7, 0xb2, 0x3b, 0x8e, 0x77, 0xba, 0xf5, 0x14, 0x9f, 0x08, 0x55, - 0x9b, 0x4c, 0xfe, 0x60, 0x5c, 0xda, 0x18, 0x46, 0xcd, 0x7d, 0x21, 0xb0, 0x3f, 0x1b, 0x89, 0xff, - 0xeb, 0x84, 0x69, 0x3a, 0x9d, 0xd7, 0xd3, 0x70, 0x67, 0x40, 0xb5, 0xde, 0x5d, 0x30, 0x91, 0xb1, - 0x78, 0x11, 0x01, 0xe5, 0x00, 0x68, 0x98, 0xa0, 0xc5, 0x02, 0xa6, 0x74, 0x2d, 0x0b, 0xa2, 0x76, - 0xb3, 0xbe, 0xce, 0xbd, 0xae, 0xe9, 0x8a, 0x31, 0x1c, 0xec, 0xf1, 0x99, 0x94, 0xaa, 0xf6, 0x26, - 0x2f, 0xef, 0xe8, 0x8c, 0x35, 0x03, 0xd4, 0x7f, 0xfb, 0x05, 0xc1, 0x5e, 0x90, 0x20, 0x3d, 0x82, - 0xf7, 0xea, 0x0a, 0x0d, 0x7e, 0xf8, 0x50, 0x1a, 0xc4, 0x07, 0x57, 0xb8, 0x3c, 0x62, 0xe3, 0xc8, - 0xac, 0x52, 0x64, 0x10, 0xd0, 0xd9, 0x13, 0x0c, 0x12, 0x29, 0x51, 0xb9, 0xcf, 0xd6, 0x73, 0x8d, - 0x81, 0x54, 0xc0, 0xed, 0x4e, 0x44, 0xa7, 0x2a, 0x85, 0x25, 0xe6, 0xca, 0x7c, 0x8b, 0x56, 0x80 - }, - - new byte[] - { - 0xce, 0xbb, 0xeb, 0x92, 0xea, 0xcb, 0x13, 0xc1, 0xe9, 0x3a, 0xd6, 0xb2, 0xd2, 0x90, 0x17, 0xf8, - 0x42, 0x15, 0x56, 0xb4, 0x65, 0x1c, 0x88, 0x43, 0xc5, 0x5c, 0x36, 0xba, 0xf5, 0x57, 0x67, 0x8d, - 0x31, 0xf6, 0x64, 0x58, 0x9e, 0xf4, 0x22, 0xaa, 0x75, 0x0f, 0x02, 0xb1, 0xdf, 0x6d, 0x73, 0x4d, - 0x7c, 0x26, 0x2e, 0xf7, 0x08, 0x5d, 0x44, 0x3e, 0x9f, 0x14, 0xc8, 0xae, 0x54, 0x10, 0xd8, 0xbc, - 0x1a, 0x6b, 0x69, 0xf3, 0xbd, 0x33, 0xab, 0xfa, 0xd1, 0x9b, 0x68, 0x4e, 0x16, 0x95, 0x91, 0xee, - 0x4c, 0x63, 0x8e, 0x5b, 0xcc, 0x3c, 0x19, 0xa1, 0x81, 0x49, 0x7b, 0xd9, 0x6f, 0x37, 0x60, 0xca, - 0xe7, 0x2b, 0x48, 0xfd, 0x96, 0x45, 0xfc, 0x41, 0x12, 0x0d, 0x79, 0xe5, 0x89, 0x8c, 0xe3, 0x20, - 0x30, 0xdc, 0xb7, 0x6c, 0x4a, 0xb5, 0x3f, 0x97, 0xd4, 0x62, 0x2d, 0x06, 0xa4, 0xa5, 0x83, 0x5f, - 0x2a, 0xda, 0xc9, 0x00, 0x7e, 0xa2, 0x55, 0xbf, 0x11, 0xd5, 0x9c, 0xcf, 0x0e, 0x0a, 0x3d, 0x51, - 0x7d, 0x93, 0x1b, 0xfe, 0xc4, 0x47, 0x09, 0x86, 0x0b, 0x8f, 0x9d, 0x6a, 0x07, 0xb9, 0xb0, 0x98, - 0x18, 0x32, 0x71, 0x4b, 0xef, 0x3b, 0x70, 0xa0, 0xe4, 0x40, 0xff, 0xc3, 0xa9, 0xe6, 0x78, 0xf9, - 0x8b, 0x46, 0x80, 0x1e, 0x38, 0xe1, 0xb8, 0xa8, 0xe0, 0x0c, 0x23, 0x76, 0x1d, 0x25, 0x24, 0x05, - 0xf1, 0x6e, 0x94, 0x28, 0x9a, 0x84, 0xe8, 0xa3, 0x4f, 0x77, 0xd3, 0x85, 0xe2, 0x52, 0xf2, 0x82, - 0x50, 0x7a, 0x2f, 0x74, 0x53, 0xb3, 0x61, 0xaf, 0x39, 0x35, 0xde, 0xcd, 0x1f, 0x99, 0xac, 0xad, - 0x72, 0x2c, 0xdd, 0xd0, 0x87, 0xbe, 0x5e, 0xa6, 0xec, 0x04, 0xc6, 0x03, 0x34, 0xfb, 0xdb, 0x59, - 0xb6, 0xc2, 0x01, 0xf0, 0x5a, 0xed, 0xa7, 0x66, 0x21, 0x7f, 0x8a, 0x27, 0xc7, 0xc0, 0x29, 0xd7 - }, - - new byte[] - { - 0x93, 0xd9, 0x9a, 0xb5, 0x98, 0x22, 0x45, 0xfc, 0xba, 0x6a, 0xdf, 0x02, 0x9f, 0xdc, 0x51, 0x59, - 0x4a, 0x17, 0x2b, 0xc2, 0x94, 0xf4, 0xbb, 0xa3, 0x62, 0xe4, 0x71, 0xd4, 0xcd, 0x70, 0x16, 0xe1, - 0x49, 0x3c, 0xc0, 0xd8, 0x5c, 0x9b, 0xad, 0x85, 0x53, 0xa1, 0x7a, 0xc8, 0x2d, 0xe0, 0xd1, 0x72, - 0xa6, 0x2c, 0xc4, 0xe3, 0x76, 0x78, 0xb7, 0xb4, 0x09, 0x3b, 0x0e, 0x41, 0x4c, 0xde, 0xb2, 0x90, - 0x25, 0xa5, 0xd7, 0x03, 0x11, 0x00, 0xc3, 0x2e, 0x92, 0xef, 0x4e, 0x12, 0x9d, 0x7d, 0xcb, 0x35, - 0x10, 0xd5, 0x4f, 0x9e, 0x4d, 0xa9, 0x55, 0xc6, 0xd0, 0x7b, 0x18, 0x97, 0xd3, 0x36, 0xe6, 0x48, - 0x56, 0x81, 0x8f, 0x77, 0xcc, 0x9c, 0xb9, 0xe2, 0xac, 0xb8, 0x2f, 0x15, 0xa4, 0x7c, 0xda, 0x38, - 0x1e, 0x0b, 0x05, 0xd6, 0x14, 0x6e, 0x6c, 0x7e, 0x66, 0xfd, 0xb1, 0xe5, 0x60, 0xaf, 0x5e, 0x33, - 0x87, 0xc9, 0xf0, 0x5d, 0x6d, 0x3f, 0x88, 0x8d, 0xc7, 0xf7, 0x1d, 0xe9, 0xec, 0xed, 0x80, 0x29, - 0x27, 0xcf, 0x99, 0xa8, 0x50, 0x0f, 0x37, 0x24, 0x28, 0x30, 0x95, 0xd2, 0x3e, 0x5b, 0x40, 0x83, - 0xb3, 0x69, 0x57, 0x1f, 0x07, 0x1c, 0x8a, 0xbc, 0x20, 0xeb, 0xce, 0x8e, 0xab, 0xee, 0x31, 0xa2, - 0x73, 0xf9, 0xca, 0x3a, 0x1a, 0xfb, 0x0d, 0xc1, 0xfe, 0xfa, 0xf2, 0x6f, 0xbd, 0x96, 0xdd, 0x43, - 0x52, 0xb6, 0x08, 0xf3, 0xae, 0xbe, 0x19, 0x89, 0x32, 0x26, 0xb0, 0xea, 0x4b, 0x64, 0x84, 0x82, - 0x6b, 0xf5, 0x79, 0xbf, 0x01, 0x5f, 0x75, 0x63, 0x1b, 0x23, 0x3d, 0x68, 0x2a, 0x65, 0xe8, 0x91, - 0xf6, 0xff, 0x13, 0x58, 0xf1, 0x47, 0x0a, 0x7f, 0xc5, 0xa7, 0xe7, 0x61, 0x5a, 0x06, 0x46, 0x44, - 0x42, 0x04, 0xa0, 0xdb, 0x39, 0x86, 0x54, 0xaa, 0x8c, 0x34, 0x21, 0x8b, 0xf8, 0x0c, 0x74, 0x67 - }, - - new byte[] - { - 0x68, 0x8d, 0xca, 0x4d, 0x73, 0x4b, 0x4e, 0x2a, 0xd4, 0x52, 0x26, 0xb3, 0x54, 0x1e, 0x19, 0x1f, - 0x22, 0x03, 0x46, 0x3d, 0x2d, 0x4a, 0x53, 0x83, 0x13, 0x8a, 0xb7, 0xd5, 0x25, 0x79, 0xf5, 0xbd, - 0x58, 0x2f, 0x0d, 0x02, 0xed, 0x51, 0x9e, 0x11, 0xf2, 0x3e, 0x55, 0x5e, 0xd1, 0x16, 0x3c, 0x66, - 0x70, 0x5d, 0xf3, 0x45, 0x40, 0xcc, 0xe8, 0x94, 0x56, 0x08, 0xce, 0x1a, 0x3a, 0xd2, 0xe1, 0xdf, - 0xb5, 0x38, 0x6e, 0x0e, 0xe5, 0xf4, 0xf9, 0x86, 0xe9, 0x4f, 0xd6, 0x85, 0x23, 0xcf, 0x32, 0x99, - 0x31, 0x14, 0xae, 0xee, 0xc8, 0x48, 0xd3, 0x30, 0xa1, 0x92, 0x41, 0xb1, 0x18, 0xc4, 0x2c, 0x71, - 0x72, 0x44, 0x15, 0xfd, 0x37, 0xbe, 0x5f, 0xaa, 0x9b, 0x88, 0xd8, 0xab, 0x89, 0x9c, 0xfa, 0x60, - 0xea, 0xbc, 0x62, 0x0c, 0x24, 0xa6, 0xa8, 0xec, 0x67, 0x20, 0xdb, 0x7c, 0x28, 0xdd, 0xac, 0x5b, - 0x34, 0x7e, 0x10, 0xf1, 0x7b, 0x8f, 0x63, 0xa0, 0x05, 0x9a, 0x43, 0x77, 0x21, 0xbf, 0x27, 0x09, - 0xc3, 0x9f, 0xb6, 0xd7, 0x29, 0xc2, 0xeb, 0xc0, 0xa4, 0x8b, 0x8c, 0x1d, 0xfb, 0xff, 0xc1, 0xb2, - 0x97, 0x2e, 0xf8, 0x65, 0xf6, 0x75, 0x07, 0x04, 0x49, 0x33, 0xe4, 0xd9, 0xb9, 0xd0, 0x42, 0xc7, - 0x6c, 0x90, 0x00, 0x8e, 0x6f, 0x50, 0x01, 0xc5, 0xda, 0x47, 0x3f, 0xcd, 0x69, 0xa2, 0xe2, 0x7a, - 0xa7, 0xc6, 0x93, 0x0f, 0x0a, 0x06, 0xe6, 0x2b, 0x96, 0xa3, 0x1c, 0xaf, 0x6a, 0x12, 0x84, 0x39, - 0xe7, 0xb0, 0x82, 0xf7, 0xfe, 0x9d, 0x87, 0x5c, 0x81, 0x35, 0xde, 0xb4, 0xa5, 0xfc, 0x80, 0xef, - 0xcb, 0xbb, 0x6b, 0x76, 0xba, 0x5a, 0x7d, 0x78, 0x0b, 0x95, 0xe3, 0xad, 0x74, 0x98, 0x3b, 0x36, - 0x64, 0x6d, 0xdc, 0xf0, 0x59, 0xa9, 0x4c, 0x17, 0x7f, 0x91, 0xb8, 0xc9, 0x57, 0x1b, 0xe0, 0x61 - } - }; - - private byte[][] sboxesForDecryption = - { - new byte[] - { - 0xa4, 0xa2, 0xa9, 0xc5, 0x4e, 0xc9, 0x03, 0xd9, 0x7e, 0x0f, 0xd2, 0xad, 0xe7, 0xd3, 0x27, 0x5b, - 0xe3, 0xa1, 0xe8, 0xe6, 0x7c, 0x2a, 0x55, 0x0c, 0x86, 0x39, 0xd7, 0x8d, 0xb8, 0x12, 0x6f, 0x28, - 0xcd, 0x8a, 0x70, 0x56, 0x72, 0xf9, 0xbf, 0x4f, 0x73, 0xe9, 0xf7, 0x57, 0x16, 0xac, 0x50, 0xc0, - 0x9d, 0xb7, 0x47, 0x71, 0x60, 0xc4, 0x74, 0x43, 0x6c, 0x1f, 0x93, 0x77, 0xdc, 0xce, 0x20, 0x8c, - 0x99, 0x5f, 0x44, 0x01, 0xf5, 0x1e, 0x87, 0x5e, 0x61, 0x2c, 0x4b, 0x1d, 0x81, 0x15, 0xf4, 0x23, - 0xd6, 0xea, 0xe1, 0x67, 0xf1, 0x7f, 0xfe, 0xda, 0x3c, 0x07, 0x53, 0x6a, 0x84, 0x9c, 0xcb, 0x02, - 0x83, 0x33, 0xdd, 0x35, 0xe2, 0x59, 0x5a, 0x98, 0xa5, 0x92, 0x64, 0x04, 0x06, 0x10, 0x4d, 0x1c, - 0x97, 0x08, 0x31, 0xee, 0xab, 0x05, 0xaf, 0x79, 0xa0, 0x18, 0x46, 0x6d, 0xfc, 0x89, 0xd4, 0xc7, - 0xff, 0xf0, 0xcf, 0x42, 0x91, 0xf8, 0x68, 0x0a, 0x65, 0x8e, 0xb6, 0xfd, 0xc3, 0xef, 0x78, 0x4c, - 0xcc, 0x9e, 0x30, 0x2e, 0xbc, 0x0b, 0x54, 0x1a, 0xa6, 0xbb, 0x26, 0x80, 0x48, 0x94, 0x32, 0x7d, - 0xa7, 0x3f, 0xae, 0x22, 0x3d, 0x66, 0xaa, 0xf6, 0x00, 0x5d, 0xbd, 0x4a, 0xe0, 0x3b, 0xb4, 0x17, - 0x8b, 0x9f, 0x76, 0xb0, 0x24, 0x9a, 0x25, 0x63, 0xdb, 0xeb, 0x7a, 0x3e, 0x5c, 0xb3, 0xb1, 0x29, - 0xf2, 0xca, 0x58, 0x6e, 0xd8, 0xa8, 0x2f, 0x75, 0xdf, 0x14, 0xfb, 0x13, 0x49, 0x88, 0xb2, 0xec, - 0xe4, 0x34, 0x2d, 0x96, 0xc6, 0x3a, 0xed, 0x95, 0x0e, 0xe5, 0x85, 0x6b, 0x40, 0x21, 0x9b, 0x09, - 0x19, 0x2b, 0x52, 0xde, 0x45, 0xa3, 0xfa, 0x51, 0xc2, 0xb5, 0xd1, 0x90, 0xb9, 0xf3, 0x37, 0xc1, - 0x0d, 0xba, 0x41, 0x11, 0x38, 0x7b, 0xbe, 0xd0, 0xd5, 0x69, 0x36, 0xc8, 0x62, 0x1b, 0x82, 0x8f - }, - - new byte[] - { - 0x83, 0xf2, 0x2a, 0xeb, 0xe9, 0xbf, 0x7b, 0x9c, 0x34, 0x96, 0x8d, 0x98, 0xb9, 0x69, 0x8c, 0x29, - 0x3d, 0x88, 0x68, 0x06, 0x39, 0x11, 0x4c, 0x0e, 0xa0, 0x56, 0x40, 0x92, 0x15, 0xbc, 0xb3, 0xdc, - 0x6f, 0xf8, 0x26, 0xba, 0xbe, 0xbd, 0x31, 0xfb, 0xc3, 0xfe, 0x80, 0x61, 0xe1, 0x7a, 0x32, 0xd2, - 0x70, 0x20, 0xa1, 0x45, 0xec, 0xd9, 0x1a, 0x5d, 0xb4, 0xd8, 0x09, 0xa5, 0x55, 0x8e, 0x37, 0x76, - 0xa9, 0x67, 0x10, 0x17, 0x36, 0x65, 0xb1, 0x95, 0x62, 0x59, 0x74, 0xa3, 0x50, 0x2f, 0x4b, 0xc8, - 0xd0, 0x8f, 0xcd, 0xd4, 0x3c, 0x86, 0x12, 0x1d, 0x23, 0xef, 0xf4, 0x53, 0x19, 0x35, 0xe6, 0x7f, - 0x5e, 0xd6, 0x79, 0x51, 0x22, 0x14, 0xf7, 0x1e, 0x4a, 0x42, 0x9b, 0x41, 0x73, 0x2d, 0xc1, 0x5c, - 0xa6, 0xa2, 0xe0, 0x2e, 0xd3, 0x28, 0xbb, 0xc9, 0xae, 0x6a, 0xd1, 0x5a, 0x30, 0x90, 0x84, 0xf9, - 0xb2, 0x58, 0xcf, 0x7e, 0xc5, 0xcb, 0x97, 0xe4, 0x16, 0x6c, 0xfa, 0xb0, 0x6d, 0x1f, 0x52, 0x99, - 0x0d, 0x4e, 0x03, 0x91, 0xc2, 0x4d, 0x64, 0x77, 0x9f, 0xdd, 0xc4, 0x49, 0x8a, 0x9a, 0x24, 0x38, - 0xa7, 0x57, 0x85, 0xc7, 0x7c, 0x7d, 0xe7, 0xf6, 0xb7, 0xac, 0x27, 0x46, 0xde, 0xdf, 0x3b, 0xd7, - 0x9e, 0x2b, 0x0b, 0xd5, 0x13, 0x75, 0xf0, 0x72, 0xb6, 0x9d, 0x1b, 0x01, 0x3f, 0x44, 0xe5, 0x87, - 0xfd, 0x07, 0xf1, 0xab, 0x94, 0x18, 0xea, 0xfc, 0x3a, 0x82, 0x5f, 0x05, 0x54, 0xdb, 0x00, 0x8b, - 0xe3, 0x48, 0x0c, 0xca, 0x78, 0x89, 0x0a, 0xff, 0x3e, 0x5b, 0x81, 0xee, 0x71, 0xe2, 0xda, 0x2c, - 0xb8, 0xb5, 0xcc, 0x6e, 0xa8, 0x6b, 0xad, 0x60, 0xc6, 0x08, 0x04, 0x02, 0xe8, 0xf5, 0x4f, 0xa4, - 0xf3, 0xc0, 0xce, 0x43, 0x25, 0x1c, 0x21, 0x33, 0x0f, 0xaf, 0x47, 0xed, 0x66, 0x63, 0x93, 0xaa - }, - - new byte[] - { - 0x45, 0xd4, 0x0b, 0x43, 0xf1, 0x72, 0xed, 0xa4, 0xc2, 0x38, 0xe6, 0x71, 0xfd, 0xb6, 0x3a, 0x95, - 0x50, 0x44, 0x4b, 0xe2, 0x74, 0x6b, 0x1e, 0x11, 0x5a, 0xc6, 0xb4, 0xd8, 0xa5, 0x8a, 0x70, 0xa3, - 0xa8, 0xfa, 0x05, 0xd9, 0x97, 0x40, 0xc9, 0x90, 0x98, 0x8f, 0xdc, 0x12, 0x31, 0x2c, 0x47, 0x6a, - 0x99, 0xae, 0xc8, 0x7f, 0xf9, 0x4f, 0x5d, 0x96, 0x6f, 0xf4, 0xb3, 0x39, 0x21, 0xda, 0x9c, 0x85, - 0x9e, 0x3b, 0xf0, 0xbf, 0xef, 0x06, 0xee, 0xe5, 0x5f, 0x20, 0x10, 0xcc, 0x3c, 0x54, 0x4a, 0x52, - 0x94, 0x0e, 0xc0, 0x28, 0xf6, 0x56, 0x60, 0xa2, 0xe3, 0x0f, 0xec, 0x9d, 0x24, 0x83, 0x7e, 0xd5, - 0x7c, 0xeb, 0x18, 0xd7, 0xcd, 0xdd, 0x78, 0xff, 0xdb, 0xa1, 0x09, 0xd0, 0x76, 0x84, 0x75, 0xbb, - 0x1d, 0x1a, 0x2f, 0xb0, 0xfe, 0xd6, 0x34, 0x63, 0x35, 0xd2, 0x2a, 0x59, 0x6d, 0x4d, 0x77, 0xe7, - 0x8e, 0x61, 0xcf, 0x9f, 0xce, 0x27, 0xf5, 0x80, 0x86, 0xc7, 0xa6, 0xfb, 0xf8, 0x87, 0xab, 0x62, - 0x3f, 0xdf, 0x48, 0x00, 0x14, 0x9a, 0xbd, 0x5b, 0x04, 0x92, 0x02, 0x25, 0x65, 0x4c, 0x53, 0x0c, - 0xf2, 0x29, 0xaf, 0x17, 0x6c, 0x41, 0x30, 0xe9, 0x93, 0x55, 0xf7, 0xac, 0x68, 0x26, 0xc4, 0x7d, - 0xca, 0x7a, 0x3e, 0xa0, 0x37, 0x03, 0xc1, 0x36, 0x69, 0x66, 0x08, 0x16, 0xa7, 0xbc, 0xc5, 0xd3, - 0x22, 0xb7, 0x13, 0x46, 0x32, 0xe8, 0x57, 0x88, 0x2b, 0x81, 0xb2, 0x4e, 0x64, 0x1c, 0xaa, 0x91, - 0x58, 0x2e, 0x9b, 0x5c, 0x1b, 0x51, 0x73, 0x42, 0x23, 0x01, 0x6e, 0xf3, 0x0d, 0xbe, 0x3d, 0x0a, - 0x2d, 0x1f, 0x67, 0x33, 0x19, 0x7b, 0x5e, 0xea, 0xde, 0x8b, 0xcb, 0xa9, 0x8c, 0x8d, 0xad, 0x49, - 0x82, 0xe4, 0xba, 0xc3, 0x15, 0xd1, 0xe0, 0x89, 0xfc, 0xb1, 0xb9, 0xb5, 0x07, 0x79, 0xb8, 0xe1 - }, - - new byte[] - { - 0xb2, 0xb6, 0x23, 0x11, 0xa7, 0x88, 0xc5, 0xa6, 0x39, 0x8f, 0xc4, 0xe8, 0x73, 0x22, 0x43, 0xc3, - 0x82, 0x27, 0xcd, 0x18, 0x51, 0x62, 0x2d, 0xf7, 0x5c, 0x0e, 0x3b, 0xfd, 0xca, 0x9b, 0x0d, 0x0f, - 0x79, 0x8c, 0x10, 0x4c, 0x74, 0x1c, 0x0a, 0x8e, 0x7c, 0x94, 0x07, 0xc7, 0x5e, 0x14, 0xa1, 0x21, - 0x57, 0x50, 0x4e, 0xa9, 0x80, 0xd9, 0xef, 0x64, 0x41, 0xcf, 0x3c, 0xee, 0x2e, 0x13, 0x29, 0xba, - 0x34, 0x5a, 0xae, 0x8a, 0x61, 0x33, 0x12, 0xb9, 0x55, 0xa8, 0x15, 0x05, 0xf6, 0x03, 0x06, 0x49, - 0xb5, 0x25, 0x09, 0x16, 0x0c, 0x2a, 0x38, 0xfc, 0x20, 0xf4, 0xe5, 0x7f, 0xd7, 0x31, 0x2b, 0x66, - 0x6f, 0xff, 0x72, 0x86, 0xf0, 0xa3, 0x2f, 0x78, 0x00, 0xbc, 0xcc, 0xe2, 0xb0, 0xf1, 0x42, 0xb4, - 0x30, 0x5f, 0x60, 0x04, 0xec, 0xa5, 0xe3, 0x8b, 0xe7, 0x1d, 0xbf, 0x84, 0x7b, 0xe6, 0x81, 0xf8, - 0xde, 0xd8, 0xd2, 0x17, 0xce, 0x4b, 0x47, 0xd6, 0x69, 0x6c, 0x19, 0x99, 0x9a, 0x01, 0xb3, 0x85, - 0xb1, 0xf9, 0x59, 0xc2, 0x37, 0xe9, 0xc8, 0xa0, 0xed, 0x4f, 0x89, 0x68, 0x6d, 0xd5, 0x26, 0x91, - 0x87, 0x58, 0xbd, 0xc9, 0x98, 0xdc, 0x75, 0xc0, 0x76, 0xf5, 0x67, 0x6b, 0x7e, 0xeb, 0x52, 0xcb, - 0xd1, 0x5b, 0x9f, 0x0b, 0xdb, 0x40, 0x92, 0x1a, 0xfa, 0xac, 0xe4, 0xe1, 0x71, 0x1f, 0x65, 0x8d, - 0x97, 0x9e, 0x95, 0x90, 0x5d, 0xb7, 0xc1, 0xaf, 0x54, 0xfb, 0x02, 0xe0, 0x35, 0xbb, 0x3a, 0x4d, - 0xad, 0x2c, 0x3d, 0x56, 0x08, 0x1b, 0x4a, 0x93, 0x6a, 0xab, 0xb8, 0x7a, 0xf2, 0x7d, 0xda, 0x3f, - 0xfe, 0x3e, 0xbe, 0xea, 0xaa, 0x44, 0xc6, 0xd0, 0x36, 0x48, 0x70, 0x96, 0x77, 0x24, 0x53, 0xdf, - 0xf3, 0x83, 0x28, 0x32, 0x45, 0x1e, 0xa4, 0xd3, 0xa2, 0x46, 0x6e, 0x9c, 0xdd, 0x63, 0xd4, 0x9d - } - }; - - #endregion - - public virtual string AlgorithmName - { - get { return "Dstu7624"; } - } - - public virtual int GetBlockSize() - { - return blockSizeBits / BITS_IN_BYTE; - } - - public virtual bool IsPartialBlockOkay - { - get { return false; } - } - - public virtual void Reset() - { - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/Dstu7624WrapEngine.cs b/bc-sharp-crypto/src/crypto/engines/Dstu7624WrapEngine.cs deleted file mode 100644 index 9cb9824..0000000 --- a/bc-sharp-crypto/src/crypto/engines/Dstu7624WrapEngine.cs +++ /dev/null @@ -1,216 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - public class Dstu7624WrapEngine - : IWrapper - { - private KeyParameter param; - private Dstu7624Engine engine; - private bool forWrapping; - private int blockSize; - - public Dstu7624WrapEngine(int blockSizeBits) - { - engine = new Dstu7624Engine(blockSizeBits); - param = null; - - blockSize = blockSizeBits / 8; - } - - public string AlgorithmName - { - get { return "Dstu7624WrapEngine"; } - } - - public void Init(bool forWrapping, ICipherParameters parameters) - { - this.forWrapping = forWrapping; - - if (parameters is KeyParameter) - { - this.param = (KeyParameter)parameters; - - engine.Init(forWrapping, param); - } - else - { - throw new ArgumentException("Bad parameters passed to Dstu7624WrapEngine"); - } - } - - public byte[] Wrap(byte[] input, int inOff, int length) - { - if (!forWrapping) - throw new InvalidOperationException("Not set for wrapping"); - - if (length % blockSize != 0) - throw new ArgumentException("Padding not supported"); - - int n = 2 * (1 + length / blockSize); - int V = (n - 1) * 6; - - byte[] buffer = new byte[length + blockSize]; - Array.Copy(input, inOff, buffer, 0, length); - //Console.WriteLine(Org.BouncyCastle.Utilities.Encoders.Hex.ToHexString(buffer)); - - byte[] B = new byte[blockSize / 2]; - Array.Copy(buffer, 0, B, 0, blockSize / 2); - //Console.WriteLine("B0: "+ Org.BouncyCastle.Utilities.Encoders.Hex.ToHexString(B)); - - IList bTemp = Platform.CreateArrayList(); - int bHalfBlocksLen = buffer.Length - blockSize / 2; - int bufOff = blockSize / 2; - while (bHalfBlocksLen != 0) - { - byte[] temp = new byte[blockSize / 2]; - Array.Copy(buffer, bufOff, temp, 0, blockSize / 2); - //Console.WriteLine(Org.BouncyCastle.Utilities.Encoders.Hex.ToHexString(buffer)); - //Console.WriteLine(buffer.Length); - //Console.WriteLine("b: " + Org.BouncyCastle.Utilities.Encoders.Hex.ToHexString(temp)); - - bTemp.Add(temp); - - bHalfBlocksLen -= blockSize / 2; - bufOff += blockSize / 2; - } - - for (int j = 0; j < V; j++) - { - Array.Copy(B, 0, buffer, 0, blockSize / 2); - Array.Copy((byte[])bTemp[0], 0, buffer, blockSize / 2, blockSize / 2); - - engine.ProcessBlock(buffer, 0, buffer, 0); - - byte[] intArray = Pack.UInt32_To_LE((uint)(j + 1)); - for (int byteNum = 0; byteNum < intArray.Length; byteNum++) - { - buffer[byteNum + blockSize / 2] ^= intArray[byteNum]; - } - - Array.Copy(buffer, blockSize / 2, B, 0, blockSize / 2); - - for (int i = 2; i < n; i++) - { - Array.Copy((byte[])bTemp[i - 1], 0, (byte[])bTemp[i - 2], 0, blockSize / 2); - } - - Array.Copy(buffer, 0, (byte[])bTemp[n - 2], 0, blockSize / 2); - - //Console.WriteLine("B" + j.ToString() + ": " + Org.BouncyCastle.Utilities.Encoders.Hex.ToHexString(B)); - //Console.WriteLine("b: " + Org.BouncyCastle.Utilities.Encoders.Hex.ToHexString(bTemp[0])); - //Console.WriteLine("b: " + Org.BouncyCastle.Utilities.Encoders.Hex.ToHexString(bTemp[1])); - //Console.WriteLine("b: " + Org.BouncyCastle.Utilities.Encoders.Hex.ToHexString(bTemp[2])); - - //Console.WriteLine(Org.BouncyCastle.Utilities.Encoders.Hex.ToHexString(buffer)); - } - - Array.Copy(B, 0, buffer, 0, blockSize / 2); - bufOff = blockSize / 2; - - for (int i = 0; i < n - 1; i++) - { - Array.Copy((byte[])bTemp[i], 0, buffer, bufOff, blockSize / 2); - bufOff += blockSize / 2; - } - - return buffer; - } - - public byte[] Unwrap(byte[] input, int inOff, int length) - { - if (forWrapping) - throw new InvalidOperationException("not set for unwrapping"); - - if (length % blockSize != 0) - throw new ArgumentException("Padding not supported"); - - int n = 2 * length / blockSize; - int V = (n - 1) * 6; - - byte[] buffer = new byte[length]; - Array.Copy(input, inOff, buffer, 0, length); - - byte[] B = new byte[blockSize / 2]; - Array.Copy(buffer, 0, B, 0, blockSize / 2); - //Console.WriteLine("B18: " + Org.BouncyCastle.Utilities.Encoders.Hex.ToHexString(B)); - - IList bTemp = Platform.CreateArrayList(); - - int bHalfBlocksLen = buffer.Length - blockSize / 2; - int bufOff = blockSize / 2; - while (bHalfBlocksLen != 0) - { - byte[] temp = new byte[blockSize / 2]; - Array.Copy(buffer, bufOff, temp, 0, blockSize / 2); - //Console.WriteLine(Org.BouncyCastle.Utilities.Encoders.Hex.ToHexString(buffer)); - //Console.WriteLine(buffer.Length); - //Console.WriteLine("b: " + Org.BouncyCastle.Utilities.Encoders.Hex.ToHexString(temp)); - - bTemp.Add(temp); - - bHalfBlocksLen -= blockSize / 2; - bufOff += blockSize / 2; - } - - for (int j = 0; j < V; j++) - { - Array.Copy((byte[])bTemp[n - 2], 0, buffer, 0, blockSize / 2); - Array.Copy(B, 0, buffer, blockSize / 2, blockSize / 2); - - byte[] intArray = Pack.UInt32_To_LE((uint)(V - j)); - for (int byteNum = 0; byteNum < intArray.Length; byteNum++) - { - buffer[byteNum + blockSize / 2] ^= intArray[byteNum]; - } - - //Console.WriteLine(Org.BouncyCastle.Utilities.Encoders.Hex.ToHexString(buffer)); - - engine.ProcessBlock(buffer, 0, buffer, 0); - - //Console.WriteLine(Org.BouncyCastle.Utilities.Encoders.Hex.ToHexString(buffer)); - - Array.Copy(buffer, 0, B, 0, blockSize / 2); - - for (int i = 2; i < n; i++) - { - Array.Copy((byte[])bTemp[n - i - 1], 0, (byte[])bTemp[n - i], 0, blockSize / 2); - } - - Array.Copy(buffer, blockSize / 2, (byte[])bTemp[0], 0, blockSize / 2); - - //Console.WriteLine("B" + (V - j - 1).ToString() + ": " + Org.BouncyCastle.Utilities.Encoders.Hex.ToHexString(B)); - //Console.WriteLine("b: " + Org.BouncyCastle.Utilities.Encoders.Hex.ToHexString(bTemp[0])); - //Console.WriteLine("b: " + Org.BouncyCastle.Utilities.Encoders.Hex.ToHexString(bTemp[1])); - //Console.WriteLine("b: " + Org.BouncyCastle.Utilities.Encoders.Hex.ToHexString(bTemp[2])); - - //Console.WriteLine(Org.BouncyCastle.Utilities.Encoders.Hex.ToHexString(buffer)); - } - - Array.Copy(B, 0, buffer, 0, blockSize / 2); - bufOff = blockSize / 2; - - for (int i = 0; i < n - 1; i++) - { - Array.Copy((byte[])bTemp[i], 0, buffer, bufOff, blockSize / 2); - bufOff += blockSize / 2; - } - - byte diff = 0; - for (int i = buffer.Length - blockSize; i < buffer.Length; ++i) - { - diff |= buffer[i]; - } - - if (diff != 0) - throw new InvalidCipherTextException("checksum failed"); - - return Arrays.CopyOfRange(buffer, 0, buffer.Length - blockSize); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/ElGamalEngine.cs b/bc-sharp-crypto/src/crypto/engines/ElGamalEngine.cs deleted file mode 100644 index 197d7bc..0000000 --- a/bc-sharp-crypto/src/crypto/engines/ElGamalEngine.cs +++ /dev/null @@ -1,178 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * this does your basic ElGamal algorithm. - */ - public class ElGamalEngine - : IAsymmetricBlockCipher - { - private ElGamalKeyParameters key; - private SecureRandom random; - private bool forEncryption; - private int bitSize; - - public virtual string AlgorithmName - { - get { return "ElGamal"; } - } - - /** - * initialise the ElGamal engine. - * - * @param forEncryption true if we are encrypting, false otherwise. - * @param param the necessary ElGamal key parameters. - */ - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - if (parameters is ParametersWithRandom) - { - ParametersWithRandom p = (ParametersWithRandom) parameters; - - this.key = (ElGamalKeyParameters) p.Parameters; - this.random = p.Random; - } - else - { - this.key = (ElGamalKeyParameters) parameters; - this.random = new SecureRandom(); - } - - this.forEncryption = forEncryption; - this.bitSize = key.Parameters.P.BitLength; - - if (forEncryption) - { - if (!(key is ElGamalPublicKeyParameters)) - { - throw new ArgumentException("ElGamalPublicKeyParameters are required for encryption."); - } - } - else - { - if (!(key is ElGamalPrivateKeyParameters)) - { - throw new ArgumentException("ElGamalPrivateKeyParameters are required for decryption."); - } - } - } - - /** - * Return the maximum size for an input block to this engine. - * For ElGamal this is always one byte less than the size of P on - * encryption, and twice the length as the size of P on decryption. - * - * @return maximum size for an input block. - */ - public virtual int GetInputBlockSize() - { - if (forEncryption) - { - return (bitSize - 1) / 8; - } - - return 2 * ((bitSize + 7) / 8); - } - - /** - * Return the maximum size for an output block to this engine. - * For ElGamal this is always one byte less than the size of P on - * decryption, and twice the length as the size of P on encryption. - * - * @return maximum size for an output block. - */ - public virtual int GetOutputBlockSize() - { - if (forEncryption) - { - return 2 * ((bitSize + 7) / 8); - } - - return (bitSize - 1) / 8; - } - - /** - * Process a single block using the basic ElGamal algorithm. - * - * @param in the input array. - * @param inOff the offset into the input buffer where the data starts. - * @param length the length of the data to be processed. - * @return the result of the ElGamal process. - * @exception DataLengthException the input block is too large. - */ - public virtual byte[] ProcessBlock( - byte[] input, - int inOff, - int length) - { - if (key == null) - throw new InvalidOperationException("ElGamal engine not initialised"); - - int maxLength = forEncryption - ? (bitSize - 1 + 7) / 8 - : GetInputBlockSize(); - - if (length > maxLength) - throw new DataLengthException("input too large for ElGamal cipher.\n"); - - BigInteger p = key.Parameters.P; - - byte[] output; - if (key is ElGamalPrivateKeyParameters) // decryption - { - int halfLength = length / 2; - BigInteger gamma = new BigInteger(1, input, inOff, halfLength); - BigInteger phi = new BigInteger(1, input, inOff + halfLength, halfLength); - - ElGamalPrivateKeyParameters priv = (ElGamalPrivateKeyParameters) key; - - // a shortcut, which generally relies on p being prime amongst other things. - // if a problem with this shows up, check the p and g values! - BigInteger m = gamma.ModPow(p.Subtract(BigInteger.One).Subtract(priv.X), p).Multiply(phi).Mod(p); - - output = m.ToByteArrayUnsigned(); - } - else // encryption - { - BigInteger tmp = new BigInteger(1, input, inOff, length); - - if (tmp.BitLength >= p.BitLength) - throw new DataLengthException("input too large for ElGamal cipher.\n"); - - - ElGamalPublicKeyParameters pub = (ElGamalPublicKeyParameters) key; - - BigInteger pSub2 = p.Subtract(BigInteger.Two); - - // TODO In theory, a series of 'k', 'g.ModPow(k, p)' and 'y.ModPow(k, p)' can be pre-calculated - BigInteger k; - do - { - k = new BigInteger(p.BitLength, random); - } - while (k.SignValue == 0 || k.CompareTo(pSub2) > 0); - - BigInteger g = key.Parameters.G; - BigInteger gamma = g.ModPow(k, p); - BigInteger phi = tmp.Multiply(pub.Y.ModPow(k, p)).Mod(p); - - output = new byte[this.GetOutputBlockSize()]; - - // TODO Add methods to allow writing BigInteger to existing byte array? - byte[] out1 = gamma.ToByteArrayUnsigned(); - byte[] out2 = phi.ToByteArrayUnsigned(); - out1.CopyTo(output, output.Length / 2 - out1.Length); - out2.CopyTo(output, output.Length - out2.Length); - } - - return output; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/GOST28147Engine.cs b/bc-sharp-crypto/src/crypto/engines/GOST28147Engine.cs deleted file mode 100644 index 71e6d9e..0000000 --- a/bc-sharp-crypto/src/crypto/engines/GOST28147Engine.cs +++ /dev/null @@ -1,368 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * implementation of GOST 28147-89 - */ - public class Gost28147Engine - : IBlockCipher - { - private const int BlockSize = 8; - private int[] workingKey = null; - private bool forEncryption; - - private byte[] S = Sbox_Default; - - // these are the S-boxes given in Applied Cryptography 2nd Ed., p. 333 - // This is default S-box! - private static readonly byte[] Sbox_Default = { - 0x4,0xA,0x9,0x2,0xD,0x8,0x0,0xE,0x6,0xB,0x1,0xC,0x7,0xF,0x5,0x3, - 0xE,0xB,0x4,0xC,0x6,0xD,0xF,0xA,0x2,0x3,0x8,0x1,0x0,0x7,0x5,0x9, - 0x5,0x8,0x1,0xD,0xA,0x3,0x4,0x2,0xE,0xF,0xC,0x7,0x6,0x0,0x9,0xB, - 0x7,0xD,0xA,0x1,0x0,0x8,0x9,0xF,0xE,0x4,0x6,0xC,0xB,0x2,0x5,0x3, - 0x6,0xC,0x7,0x1,0x5,0xF,0xD,0x8,0x4,0xA,0x9,0xE,0x0,0x3,0xB,0x2, - 0x4,0xB,0xA,0x0,0x7,0x2,0x1,0xD,0x3,0x6,0x8,0x5,0x9,0xC,0xF,0xE, - 0xD,0xB,0x4,0x1,0x3,0xF,0x5,0x9,0x0,0xA,0xE,0x7,0x6,0x8,0x2,0xC, - 0x1,0xF,0xD,0x0,0x5,0x7,0xA,0x4,0x9,0x2,0x3,0xE,0x6,0xB,0x8,0xC - }; - - /* - * class content S-box parameters for encrypting - * getting from, see: http://tools.ietf.org/id/draft-popov-cryptopro-cpalgs-01.txt - * http://tools.ietf.org/id/draft-popov-cryptopro-cpalgs-02.txt - */ - private static readonly byte[] ESbox_Test = { - 0x4,0x2,0xF,0x5,0x9,0x1,0x0,0x8,0xE,0x3,0xB,0xC,0xD,0x7,0xA,0x6, - 0xC,0x9,0xF,0xE,0x8,0x1,0x3,0xA,0x2,0x7,0x4,0xD,0x6,0x0,0xB,0x5, - 0xD,0x8,0xE,0xC,0x7,0x3,0x9,0xA,0x1,0x5,0x2,0x4,0x6,0xF,0x0,0xB, - 0xE,0x9,0xB,0x2,0x5,0xF,0x7,0x1,0x0,0xD,0xC,0x6,0xA,0x4,0x3,0x8, - 0x3,0xE,0x5,0x9,0x6,0x8,0x0,0xD,0xA,0xB,0x7,0xC,0x2,0x1,0xF,0x4, - 0x8,0xF,0x6,0xB,0x1,0x9,0xC,0x5,0xD,0x3,0x7,0xA,0x0,0xE,0x2,0x4, - 0x9,0xB,0xC,0x0,0x3,0x6,0x7,0x5,0x4,0x8,0xE,0xF,0x1,0xA,0x2,0xD, - 0xC,0x6,0x5,0x2,0xB,0x0,0x9,0xD,0x3,0xE,0x7,0xA,0xF,0x4,0x1,0x8 - }; - - private static readonly byte[] ESbox_A = { - 0x9,0x6,0x3,0x2,0x8,0xB,0x1,0x7,0xA,0x4,0xE,0xF,0xC,0x0,0xD,0x5, - 0x3,0x7,0xE,0x9,0x8,0xA,0xF,0x0,0x5,0x2,0x6,0xC,0xB,0x4,0xD,0x1, - 0xE,0x4,0x6,0x2,0xB,0x3,0xD,0x8,0xC,0xF,0x5,0xA,0x0,0x7,0x1,0x9, - 0xE,0x7,0xA,0xC,0xD,0x1,0x3,0x9,0x0,0x2,0xB,0x4,0xF,0x8,0x5,0x6, - 0xB,0x5,0x1,0x9,0x8,0xD,0xF,0x0,0xE,0x4,0x2,0x3,0xC,0x7,0xA,0x6, - 0x3,0xA,0xD,0xC,0x1,0x2,0x0,0xB,0x7,0x5,0x9,0x4,0x8,0xF,0xE,0x6, - 0x1,0xD,0x2,0x9,0x7,0xA,0x6,0x0,0x8,0xC,0x4,0x5,0xF,0x3,0xB,0xE, - 0xB,0xA,0xF,0x5,0x0,0xC,0xE,0x8,0x6,0x2,0x3,0x9,0x1,0x7,0xD,0x4 - }; - - private static readonly byte[] ESbox_B = { - 0x8,0x4,0xB,0x1,0x3,0x5,0x0,0x9,0x2,0xE,0xA,0xC,0xD,0x6,0x7,0xF, - 0x0,0x1,0x2,0xA,0x4,0xD,0x5,0xC,0x9,0x7,0x3,0xF,0xB,0x8,0x6,0xE, - 0xE,0xC,0x0,0xA,0x9,0x2,0xD,0xB,0x7,0x5,0x8,0xF,0x3,0x6,0x1,0x4, - 0x7,0x5,0x0,0xD,0xB,0x6,0x1,0x2,0x3,0xA,0xC,0xF,0x4,0xE,0x9,0x8, - 0x2,0x7,0xC,0xF,0x9,0x5,0xA,0xB,0x1,0x4,0x0,0xD,0x6,0x8,0xE,0x3, - 0x8,0x3,0x2,0x6,0x4,0xD,0xE,0xB,0xC,0x1,0x7,0xF,0xA,0x0,0x9,0x5, - 0x5,0x2,0xA,0xB,0x9,0x1,0xC,0x3,0x7,0x4,0xD,0x0,0x6,0xF,0x8,0xE, - 0x0,0x4,0xB,0xE,0x8,0x3,0x7,0x1,0xA,0x2,0x9,0x6,0xF,0xD,0x5,0xC - }; - - private static readonly byte[] ESbox_C = { - 0x1,0xB,0xC,0x2,0x9,0xD,0x0,0xF,0x4,0x5,0x8,0xE,0xA,0x7,0x6,0x3, - 0x0,0x1,0x7,0xD,0xB,0x4,0x5,0x2,0x8,0xE,0xF,0xC,0x9,0xA,0x6,0x3, - 0x8,0x2,0x5,0x0,0x4,0x9,0xF,0xA,0x3,0x7,0xC,0xD,0x6,0xE,0x1,0xB, - 0x3,0x6,0x0,0x1,0x5,0xD,0xA,0x8,0xB,0x2,0x9,0x7,0xE,0xF,0xC,0x4, - 0x8,0xD,0xB,0x0,0x4,0x5,0x1,0x2,0x9,0x3,0xC,0xE,0x6,0xF,0xA,0x7, - 0xC,0x9,0xB,0x1,0x8,0xE,0x2,0x4,0x7,0x3,0x6,0x5,0xA,0x0,0xF,0xD, - 0xA,0x9,0x6,0x8,0xD,0xE,0x2,0x0,0xF,0x3,0x5,0xB,0x4,0x1,0xC,0x7, - 0x7,0x4,0x0,0x5,0xA,0x2,0xF,0xE,0xC,0x6,0x1,0xB,0xD,0x9,0x3,0x8 - }; - - private static readonly byte[] ESbox_D = { - 0xF,0xC,0x2,0xA,0x6,0x4,0x5,0x0,0x7,0x9,0xE,0xD,0x1,0xB,0x8,0x3, - 0xB,0x6,0x3,0x4,0xC,0xF,0xE,0x2,0x7,0xD,0x8,0x0,0x5,0xA,0x9,0x1, - 0x1,0xC,0xB,0x0,0xF,0xE,0x6,0x5,0xA,0xD,0x4,0x8,0x9,0x3,0x7,0x2, - 0x1,0x5,0xE,0xC,0xA,0x7,0x0,0xD,0x6,0x2,0xB,0x4,0x9,0x3,0xF,0x8, - 0x0,0xC,0x8,0x9,0xD,0x2,0xA,0xB,0x7,0x3,0x6,0x5,0x4,0xE,0xF,0x1, - 0x8,0x0,0xF,0x3,0x2,0x5,0xE,0xB,0x1,0xA,0x4,0x7,0xC,0x9,0xD,0x6, - 0x3,0x0,0x6,0xF,0x1,0xE,0x9,0x2,0xD,0x8,0xC,0x4,0xB,0xA,0x5,0x7, - 0x1,0xA,0x6,0x8,0xF,0xB,0x0,0x4,0xC,0x3,0x5,0x9,0x7,0xD,0x2,0xE - }; - - //S-box for digest - private static readonly byte[] DSbox_Test = { - 0x4,0xA,0x9,0x2,0xD,0x8,0x0,0xE,0x6,0xB,0x1,0xC,0x7,0xF,0x5,0x3, - 0xE,0xB,0x4,0xC,0x6,0xD,0xF,0xA,0x2,0x3,0x8,0x1,0x0,0x7,0x5,0x9, - 0x5,0x8,0x1,0xD,0xA,0x3,0x4,0x2,0xE,0xF,0xC,0x7,0x6,0x0,0x9,0xB, - 0x7,0xD,0xA,0x1,0x0,0x8,0x9,0xF,0xE,0x4,0x6,0xC,0xB,0x2,0x5,0x3, - 0x6,0xC,0x7,0x1,0x5,0xF,0xD,0x8,0x4,0xA,0x9,0xE,0x0,0x3,0xB,0x2, - 0x4,0xB,0xA,0x0,0x7,0x2,0x1,0xD,0x3,0x6,0x8,0x5,0x9,0xC,0xF,0xE, - 0xD,0xB,0x4,0x1,0x3,0xF,0x5,0x9,0x0,0xA,0xE,0x7,0x6,0x8,0x2,0xC, - 0x1,0xF,0xD,0x0,0x5,0x7,0xA,0x4,0x9,0x2,0x3,0xE,0x6,0xB,0x8,0xC - }; - - private static readonly byte[] DSbox_A = { - 0xA,0x4,0x5,0x6,0x8,0x1,0x3,0x7,0xD,0xC,0xE,0x0,0x9,0x2,0xB,0xF, - 0x5,0xF,0x4,0x0,0x2,0xD,0xB,0x9,0x1,0x7,0x6,0x3,0xC,0xE,0xA,0x8, - 0x7,0xF,0xC,0xE,0x9,0x4,0x1,0x0,0x3,0xB,0x5,0x2,0x6,0xA,0x8,0xD, - 0x4,0xA,0x7,0xC,0x0,0xF,0x2,0x8,0xE,0x1,0x6,0x5,0xD,0xB,0x9,0x3, - 0x7,0x6,0x4,0xB,0x9,0xC,0x2,0xA,0x1,0x8,0x0,0xE,0xF,0xD,0x3,0x5, - 0x7,0x6,0x2,0x4,0xD,0x9,0xF,0x0,0xA,0x1,0x5,0xB,0x8,0xE,0xC,0x3, - 0xD,0xE,0x4,0x1,0x7,0x0,0x5,0xA,0x3,0xC,0x8,0xF,0x6,0x2,0x9,0xB, - 0x1,0x3,0xA,0x9,0x5,0xB,0x4,0xF,0x8,0x6,0x7,0xE,0xD,0x0,0x2,0xC - }; - - // - // pre-defined sbox table - // - private static readonly IDictionary sBoxes = Platform.CreateHashtable(); - - static Gost28147Engine() - { - AddSBox("Default", Sbox_Default); - AddSBox("E-TEST", ESbox_Test); - AddSBox("E-A", ESbox_A); - AddSBox("E-B", ESbox_B); - AddSBox("E-C", ESbox_C); - AddSBox("E-D", ESbox_D); - AddSBox("D-TEST", DSbox_Test); - AddSBox("D-A", DSbox_A); - } - - private static void AddSBox(string sBoxName, byte[] sBox) - { - sBoxes.Add(Platform.ToUpperInvariant(sBoxName), sBox); - } - - /** - * standard constructor. - */ - public Gost28147Engine() - { - } - - /** - * initialise an Gost28147 cipher. - * - * @param forEncryption whether or not we are for encryption. - * @param parameters the parameters required to set up the cipher. - * @exception ArgumentException if the parameters argument is inappropriate. - */ - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - if (parameters is ParametersWithSBox) - { - ParametersWithSBox param = (ParametersWithSBox)parameters; - - // - // Set the S-Box - // - byte[] sBox = param.GetSBox(); - if (sBox.Length != Sbox_Default.Length) - throw new ArgumentException("invalid S-box passed to GOST28147 init"); - - this.S = Arrays.Clone(sBox); - - // - // set key if there is one - // - if (param.Parameters != null) - { - workingKey = generateWorkingKey(forEncryption, - ((KeyParameter)param.Parameters).GetKey()); - } - } - else if (parameters is KeyParameter) - { - workingKey = generateWorkingKey(forEncryption, - ((KeyParameter)parameters).GetKey()); - } - else if (parameters != null) - { - throw new ArgumentException("invalid parameter passed to Gost28147 init - " - + Platform.GetTypeName(parameters)); - } - } - - public virtual string AlgorithmName - { - get { return "Gost28147"; } - } - - public virtual bool IsPartialBlockOkay - { - get { return false; } - } - - public virtual int GetBlockSize() - { - return BlockSize; - } - - public virtual int ProcessBlock( - byte[] input, - int inOff, - byte[] output, - int outOff) - { - if (workingKey == null) - throw new InvalidOperationException("Gost28147 engine not initialised"); - - Check.DataLength(input, inOff, BlockSize, "input buffer too short"); - Check.OutputLength(output, outOff, BlockSize, "output buffer too short"); - - Gost28147Func(workingKey, input, inOff, output, outOff); - - return BlockSize; - } - - public virtual void Reset() - { - } - - private int[] generateWorkingKey( - bool forEncryption, - byte[] userKey) - { - this.forEncryption = forEncryption; - - if (userKey.Length != 32) - { - throw new ArgumentException("Key length invalid. Key needs to be 32 byte - 256 bit!!!"); - } - - int[] key = new int[8]; - for(int i=0; i!=8; i++) - { - key[i] = bytesToint(userKey,i*4); - } - - return key; - } - - private int Gost28147_mainStep(int n1, int key) - { - int cm = (key + n1); // CM1 - - // S-box replacing - - int om = S[ 0 + ((cm >> (0 * 4)) & 0xF)] << (0 * 4); - om += S[ 16 + ((cm >> (1 * 4)) & 0xF)] << (1 * 4); - om += S[ 32 + ((cm >> (2 * 4)) & 0xF)] << (2 * 4); - om += S[ 48 + ((cm >> (3 * 4)) & 0xF)] << (3 * 4); - om += S[ 64 + ((cm >> (4 * 4)) & 0xF)] << (4 * 4); - om += S[ 80 + ((cm >> (5 * 4)) & 0xF)] << (5 * 4); - om += S[ 96 + ((cm >> (6 * 4)) & 0xF)] << (6 * 4); - om += S[112 + ((cm >> (7 * 4)) & 0xF)] << (7 * 4); - -// return om << 11 | om >>> (32-11); // 11-leftshift - int omLeft = om << 11; - int omRight = (int)(((uint) om) >> (32 - 11)); // Note: Casts required to get unsigned bit rotation - - return omLeft | omRight; - } - - private void Gost28147Func( - int[] workingKey, - byte[] inBytes, - int inOff, - byte[] outBytes, - int outOff) - { - int N1, N2, tmp; //tmp -> for saving N1 - N1 = bytesToint(inBytes, inOff); - N2 = bytesToint(inBytes, inOff + 4); - - if (this.forEncryption) - { - for(int k = 0; k < 3; k++) // 1-24 steps - { - for(int j = 0; j < 8; j++) - { - tmp = N1; - int step = Gost28147_mainStep(N1, workingKey[j]); - N1 = N2 ^ step; // CM2 - N2 = tmp; - } - } - for(int j = 7; j > 0; j--) // 25-31 steps - { - tmp = N1; - N1 = N2 ^ Gost28147_mainStep(N1, workingKey[j]); // CM2 - N2 = tmp; - } - } - else //decrypt - { - for(int j = 0; j < 8; j++) // 1-8 steps - { - tmp = N1; - N1 = N2 ^ Gost28147_mainStep(N1, workingKey[j]); // CM2 - N2 = tmp; - } - for(int k = 0; k < 3; k++) //9-31 steps - { - for(int j = 7; j >= 0; j--) - { - if ((k == 2) && (j==0)) - { - break; // break 32 step - } - tmp = N1; - N1 = N2 ^ Gost28147_mainStep(N1, workingKey[j]); // CM2 - N2 = tmp; - } - } - } - - N2 = N2 ^ Gost28147_mainStep(N1, workingKey[0]); // 32 step (N1=N1) - - intTobytes(N1, outBytes, outOff); - intTobytes(N2, outBytes, outOff + 4); - } - - //array of bytes to type int - private static int bytesToint( - byte[] inBytes, - int inOff) - { - return (int)((inBytes[inOff + 3] << 24) & 0xff000000) + ((inBytes[inOff + 2] << 16) & 0xff0000) + - ((inBytes[inOff + 1] << 8) & 0xff00) + (inBytes[inOff] & 0xff); - } - - //int to array of bytes - private static void intTobytes( - int num, - byte[] outBytes, - int outOff) - { - outBytes[outOff + 3] = (byte)(num >> 24); - outBytes[outOff + 2] = (byte)(num >> 16); - outBytes[outOff + 1] = (byte)(num >> 8); - outBytes[outOff] = (byte)num; - } - - /** - * Return the S-Box associated with SBoxName - * @param sBoxName name of the S-Box - * @return byte array representing the S-Box - */ - public static byte[] GetSBox( - string sBoxName) - { - byte[] sBox = (byte[])sBoxes[Platform.ToUpperInvariant(sBoxName)]; - - if (sBox == null) - { - throw new ArgumentException("Unknown S-Box - possible types: " - + "\"Default\", \"E-Test\", \"E-A\", \"E-B\", \"E-C\", \"E-D\", \"D-Test\", \"D-A\"."); - } - - return Arrays.Clone(sBox); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/HC128Engine.cs b/bc-sharp-crypto/src/crypto/engines/HC128Engine.cs deleted file mode 100644 index b83eb70..0000000 --- a/bc-sharp-crypto/src/crypto/engines/HC128Engine.cs +++ /dev/null @@ -1,235 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * HC-128 is a software-efficient stream cipher created by Hongjun Wu. It - * generates keystream from a 128-bit secret key and a 128-bit initialization - * vector. - *

- * http://www.ecrypt.eu.org/stream/p3ciphers/hc/hc128_p3.pdf - *

- * It is a third phase candidate in the eStream contest, and is patent-free. - * No attacks are known as of today (April 2007). See - * - * http://www.ecrypt.eu.org/stream/hcp3.html - *

- */ - public class HC128Engine - : IStreamCipher - { - private uint[] p = new uint[512]; - private uint[] q = new uint[512]; - private uint cnt = 0; - - private static uint F1(uint x) - { - return RotateRight(x, 7) ^ RotateRight(x, 18) ^ (x >> 3); - } - - private static uint F2(uint x) - { - return RotateRight(x, 17) ^ RotateRight(x, 19) ^ (x >> 10); - } - - private uint G1(uint x, uint y, uint z) - { - return (RotateRight(x, 10) ^ RotateRight(z, 23)) + RotateRight(y, 8); - } - - private uint G2(uint x, uint y, uint z) - { - return (RotateLeft(x, 10) ^ RotateLeft(z, 23)) + RotateLeft(y, 8); - } - - private static uint RotateLeft(uint x, int bits) - { - return (x << bits) | (x >> -bits); - } - - private static uint RotateRight(uint x, int bits) - { - return (x >> bits) | (x << -bits); - } - - private uint H1(uint x) - { - return q[x & 0xFF] + q[((x >> 16) & 0xFF) + 256]; - } - - private uint H2(uint x) - { - return p[x & 0xFF] + p[((x >> 16) & 0xFF) + 256]; - } - - private static uint Mod1024(uint x) - { - return x & 0x3FF; - } - - private static uint Mod512(uint x) - { - return x & 0x1FF; - } - - private static uint Dim(uint x, uint y) - { - return Mod512(x - y); - } - - private uint Step() - { - uint j = Mod512(cnt); - uint ret; - if (cnt < 512) - { - p[j] += G1(p[Dim(j, 3)], p[Dim(j, 10)], p[Dim(j, 511)]); - ret = H1(p[Dim(j, 12)]) ^ p[j]; - } - else - { - q[j] += G2(q[Dim(j, 3)], q[Dim(j, 10)], q[Dim(j, 511)]); - ret = H2(q[Dim(j, 12)]) ^ q[j]; - } - cnt = Mod1024(cnt + 1); - return ret; - } - - private byte[] key, iv; - private bool initialised; - - private void Init() - { - if (key.Length != 16) - throw new ArgumentException("The key must be 128 bits long"); - - idx = 0; - cnt = 0; - - uint[] w = new uint[1280]; - - for (int i = 0; i < 16; i++) - { - w[i >> 2] |= ((uint)key[i] << (8 * (i & 0x3))); - } - Array.Copy(w, 0, w, 4, 4); - - for (int i = 0; i < iv.Length && i < 16; i++) - { - w[(i >> 2) + 8] |= ((uint)iv[i] << (8 * (i & 0x3))); - } - Array.Copy(w, 8, w, 12, 4); - - for (uint i = 16; i < 1280; i++) - { - w[i] = F2(w[i - 2]) + w[i - 7] + F1(w[i - 15]) + w[i - 16] + i; - } - - Array.Copy(w, 256, p, 0, 512); - Array.Copy(w, 768, q, 0, 512); - - for (int i = 0; i < 512; i++) - { - p[i] = Step(); - } - for (int i = 0; i < 512; i++) - { - q[i] = Step(); - } - - cnt = 0; - } - - public virtual string AlgorithmName - { - get { return "HC-128"; } - } - - /** - * Initialise a HC-128 cipher. - * - * @param forEncryption whether or not we are for encryption. Irrelevant, as - * encryption and decryption are the same. - * @param params the parameters required to set up the cipher. - * @throws ArgumentException if the params argument is - * inappropriate (ie. the key is not 128 bit long). - */ - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - ICipherParameters keyParam = parameters; - - if (parameters is ParametersWithIV) - { - iv = ((ParametersWithIV)parameters).GetIV(); - keyParam = ((ParametersWithIV)parameters).Parameters; - } - else - { - iv = new byte[0]; - } - - if (keyParam is KeyParameter) - { - key = ((KeyParameter)keyParam).GetKey(); - Init(); - } - else - { - throw new ArgumentException( - "Invalid parameter passed to HC128 init - " + Platform.GetTypeName(parameters), - "parameters"); - } - - initialised = true; - } - - private byte[] buf = new byte[4]; - private int idx = 0; - - private byte GetByte() - { - if (idx == 0) - { - Pack.UInt32_To_LE(Step(), buf); - } - byte ret = buf[idx]; - idx = idx + 1 & 0x3; - return ret; - } - - public virtual void ProcessBytes( - byte[] input, - int inOff, - int len, - byte[] output, - int outOff) - { - if (!initialised) - throw new InvalidOperationException(AlgorithmName + " not initialised"); - - Check.DataLength(input, inOff, len, "input buffer too short"); - Check.OutputLength(output, outOff, len, "output buffer too short"); - - for (int i = 0; i < len; i++) - { - output[outOff + i] = (byte)(input[inOff + i] ^ GetByte()); - } - } - - public virtual void Reset() - { - Init(); - } - - public virtual byte ReturnByte(byte input) - { - return (byte)(input ^ GetByte()); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/HC256Engine.cs b/bc-sharp-crypto/src/crypto/engines/HC256Engine.cs deleted file mode 100644 index d8d83a6..0000000 --- a/bc-sharp-crypto/src/crypto/engines/HC256Engine.cs +++ /dev/null @@ -1,224 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * HC-256 is a software-efficient stream cipher created by Hongjun Wu. It - * generates keystream from a 256-bit secret key and a 256-bit initialization - * vector. - *

- * http://www.ecrypt.eu.org/stream/p3ciphers/hc/hc256_p3.pdf - *

- * Its brother, HC-128, is a third phase candidate in the eStream contest. - * The algorithm is patent-free. No attacks are known as of today (April 2007). - * See - * - * http://www.ecrypt.eu.org/stream/hcp3.html - *

- */ - public class HC256Engine - : IStreamCipher - { - private uint[] p = new uint[1024]; - private uint[] q = new uint[1024]; - private uint cnt = 0; - - private uint Step() - { - uint j = cnt & 0x3FF; - uint ret; - if (cnt < 1024) - { - uint x = p[(j - 3 & 0x3FF)]; - uint y = p[(j - 1023 & 0x3FF)]; - p[j] += p[(j - 10 & 0x3FF)] - + (RotateRight(x, 10) ^ RotateRight(y, 23)) - + q[((x ^ y) & 0x3FF)]; - - x = p[(j - 12 & 0x3FF)]; - ret = (q[x & 0xFF] + q[((x >> 8) & 0xFF) + 256] - + q[((x >> 16) & 0xFF) + 512] + q[((x >> 24) & 0xFF) + 768]) - ^ p[j]; - } - else - { - uint x = q[(j - 3 & 0x3FF)]; - uint y = q[(j - 1023 & 0x3FF)]; - q[j] += q[(j - 10 & 0x3FF)] - + (RotateRight(x, 10) ^ RotateRight(y, 23)) - + p[((x ^ y) & 0x3FF)]; - - x = q[(j - 12 & 0x3FF)]; - ret = (p[x & 0xFF] + p[((x >> 8) & 0xFF) + 256] - + p[((x >> 16) & 0xFF) + 512] + p[((x >> 24) & 0xFF) + 768]) - ^ q[j]; - } - cnt = cnt + 1 & 0x7FF; - return ret; - } - - private byte[] key, iv; - private bool initialised; - - private void Init() - { - if (key.Length != 32 && key.Length != 16) - throw new ArgumentException("The key must be 128/256 bits long"); - - if (iv.Length < 16) - throw new ArgumentException("The IV must be at least 128 bits long"); - - if (key.Length != 32) - { - byte[] k = new byte[32]; - - Array.Copy(key, 0, k, 0, key.Length); - Array.Copy(key, 0, k, 16, key.Length); - - key = k; - } - - if (iv.Length < 32) - { - byte[] newIV = new byte[32]; - - Array.Copy(iv, 0, newIV, 0, iv.Length); - Array.Copy(iv, 0, newIV, iv.Length, newIV.Length - iv.Length); - - iv = newIV; - } - - idx = 0; - cnt = 0; - - uint[] w = new uint[2560]; - - for (int i = 0; i < 32; i++) - { - w[i >> 2] |= ((uint)key[i] << (8 * (i & 0x3))); - } - - for (int i = 0; i < 32; i++) - { - w[(i >> 2) + 8] |= ((uint)iv[i] << (8 * (i & 0x3))); - } - - for (uint i = 16; i < 2560; i++) - { - uint x = w[i - 2]; - uint y = w[i - 15]; - w[i] = (RotateRight(x, 17) ^ RotateRight(x, 19) ^ (x >> 10)) - + w[i - 7] - + (RotateRight(y, 7) ^ RotateRight(y, 18) ^ (y >> 3)) - + w[i - 16] + i; - } - - Array.Copy(w, 512, p, 0, 1024); - Array.Copy(w, 1536, q, 0, 1024); - - for (int i = 0; i < 4096; i++) - { - Step(); - } - - cnt = 0; - } - - public virtual string AlgorithmName - { - get { return "HC-256"; } - } - - /** - * Initialise a HC-256 cipher. - * - * @param forEncryption whether or not we are for encryption. Irrelevant, as - * encryption and decryption are the same. - * @param params the parameters required to set up the cipher. - * @throws ArgumentException if the params argument is - * inappropriate (ie. the key is not 256 bit long). - */ - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - ICipherParameters keyParam = parameters; - - if (parameters is ParametersWithIV) - { - iv = ((ParametersWithIV)parameters).GetIV(); - keyParam = ((ParametersWithIV)parameters).Parameters; - } - else - { - iv = new byte[0]; - } - - if (keyParam is KeyParameter) - { - key = ((KeyParameter)keyParam).GetKey(); - Init(); - } - else - { - throw new ArgumentException( - "Invalid parameter passed to HC256 init - " + Platform.GetTypeName(parameters), - "parameters"); - } - - initialised = true; - } - - private byte[] buf = new byte[4]; - private int idx = 0; - - private byte GetByte() - { - if (idx == 0) - { - Pack.UInt32_To_LE(Step(), buf); - } - byte ret = buf[idx]; - idx = idx + 1 & 0x3; - return ret; - } - - public virtual void ProcessBytes( - byte[] input, - int inOff, - int len, - byte[] output, - int outOff) - { - if (!initialised) - throw new InvalidOperationException(AlgorithmName + " not initialised"); - - Check.DataLength(input, inOff, len, "input buffer too short"); - Check.OutputLength(output, outOff, len, "output buffer too short"); - - for (int i = 0; i < len; i++) - { - output[outOff + i] = (byte)(input[inOff + i] ^ GetByte()); - } - } - - public virtual void Reset() - { - Init(); - } - - public virtual byte ReturnByte(byte input) - { - return (byte)(input ^ GetByte()); - } - - private static uint RotateRight(uint x, int bits) - { - return (x >> bits) | (x << -bits); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/ISAACEngine.cs b/bc-sharp-crypto/src/crypto/engines/ISAACEngine.cs deleted file mode 100644 index b94ee6e..0000000 --- a/bc-sharp-crypto/src/crypto/engines/ISAACEngine.cs +++ /dev/null @@ -1,212 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * Implementation of Bob Jenkin's ISAAC (Indirection Shift Accumulate Add and Count). - * see: http://www.burtleburtle.net/bob/rand/isaacafa.html - */ - public class IsaacEngine - : IStreamCipher - { - // Constants - private static readonly int sizeL = 8, - stateArraySize = sizeL<<5; // 256 - - // Cipher's internal state - private uint[] engineState = null, // mm - results = null; // randrsl - private uint a = 0, b = 0, c = 0; - - // Engine state - private int index = 0; - private byte[] keyStream = new byte[stateArraySize<<2], // results expanded into bytes - workingKey = null; - private bool initialised = false; - - /** - * initialise an ISAAC cipher. - * - * @param forEncryption whether or not we are for encryption. - * @param params the parameters required to set up the cipher. - * @exception ArgumentException if the params argument is - * inappropriate. - */ - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - if (!(parameters is KeyParameter)) - throw new ArgumentException( - "invalid parameter passed to ISAAC Init - " + Platform.GetTypeName(parameters), - "parameters"); - - /* - * ISAAC encryption and decryption is completely - * symmetrical, so the 'forEncryption' is - * irrelevant. - */ - KeyParameter p = (KeyParameter) parameters; - setKey(p.GetKey()); - } - - public virtual byte ReturnByte( - byte input) - { - if (index == 0) - { - isaac(); - keyStream = Pack.UInt32_To_BE(results); - } - - byte output = (byte)(keyStream[index]^input); - index = (index + 1) & 1023; - - return output; - } - - public virtual void ProcessBytes( - byte[] input, - int inOff, - int len, - byte[] output, - int outOff) - { - if (!initialised) - throw new InvalidOperationException(AlgorithmName + " not initialised"); - - Check.DataLength(input, inOff, len, "input buffer too short"); - Check.OutputLength(output, outOff, len, "output buffer too short"); - - for (int i = 0; i < len; i++) - { - if (index == 0) - { - isaac(); - keyStream = Pack.UInt32_To_BE(results); - } - output[i+outOff] = (byte)(keyStream[index]^input[i+inOff]); - index = (index + 1) & 1023; - } - } - - public virtual string AlgorithmName - { - get { return "ISAAC"; } - } - - public virtual void Reset() - { - setKey(workingKey); - } - - // Private implementation - private void setKey( - byte[] keyBytes) - { - workingKey = keyBytes; - - if (engineState == null) - { - engineState = new uint[stateArraySize]; - } - - if (results == null) - { - results = new uint[stateArraySize]; - } - - int i, j, k; - - // Reset state - for (i = 0; i < stateArraySize; i++) - { - engineState[i] = results[i] = 0; - } - a = b = c = 0; - - // Reset index counter for output - index = 0; - - // Convert the key bytes to ints and put them into results[] for initialization - byte[] t = new byte[keyBytes.Length + (keyBytes.Length & 3)]; - Array.Copy(keyBytes, 0, t, 0, keyBytes.Length); - for (i = 0; i < t.Length; i+=4) - { - results[i >> 2] = Pack.LE_To_UInt32(t, i); - } - - // It has begun? - uint[] abcdefgh = new uint[sizeL]; - - for (i = 0; i < sizeL; i++) - { - abcdefgh[i] = 0x9e3779b9; // Phi (golden ratio) - } - - for (i = 0; i < 4; i++) - { - mix(abcdefgh); - } - - for (i = 0; i < 2; i++) - { - for (j = 0; j < stateArraySize; j+=sizeL) - { - for (k = 0; k < sizeL; k++) - { - abcdefgh[k] += (i<1) ? results[j+k] : engineState[j+k]; - } - - mix(abcdefgh); - - for (k = 0; k < sizeL; k++) - { - engineState[j+k] = abcdefgh[k]; - } - } - } - - isaac(); - - initialised = true; - } - - private void isaac() - { - uint x, y; - - b += ++c; - for (int i = 0; i < stateArraySize; i++) - { - x = engineState[i]; - switch (i & 3) - { - case 0: a ^= (a << 13); break; - case 1: a ^= (a >> 6); break; - case 2: a ^= (a << 2); break; - case 3: a ^= (a >> 16); break; - } - a += engineState[(i+128) & 0xFF]; - engineState[i] = y = engineState[(int)((uint)x >> 2) & 0xFF] + a + b; - results[i] = b = engineState[(int)((uint)y >> 10) & 0xFF] + x; - } - } - - private void mix(uint[] x) - { - x[0]^=x[1]<< 11; x[3]+=x[0]; x[1]+=x[2]; - x[1]^=x[2]>> 2; x[4]+=x[1]; x[2]+=x[3]; - x[2]^=x[3]<< 8; x[5]+=x[2]; x[3]+=x[4]; - x[3]^=x[4]>> 16; x[6]+=x[3]; x[4]+=x[5]; - x[4]^=x[5]<< 10; x[7]+=x[4]; x[5]+=x[6]; - x[5]^=x[6]>> 4; x[0]+=x[5]; x[6]+=x[7]; - x[6]^=x[7]<< 8; x[1]+=x[6]; x[7]+=x[0]; - x[7]^=x[0]>> 9; x[2]+=x[7]; x[0]+=x[1]; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/IdeaEngine.cs b/bc-sharp-crypto/src/crypto/engines/IdeaEngine.cs deleted file mode 100644 index 18a151c..0000000 --- a/bc-sharp-crypto/src/crypto/engines/IdeaEngine.cs +++ /dev/null @@ -1,332 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * A class that provides a basic International Data Encryption Algorithm (IDEA) engine. - *

- * This implementation is based on the "HOWTO: INTERNATIONAL DATA ENCRYPTION ALGORITHM" - * implementation summary by Fauzan Mirza (F.U.Mirza@sheffield.ac.uk). (baring 1 typo at the - * end of the mulinv function!). - *

- *

- * It can be found at ftp://ftp.funet.fi/pub/crypt/cryptography/symmetric/idea/ - *

- *

- * Note 1: This algorithm is patented in the USA, Japan, and Europe including - * at least Austria, France, Germany, Italy, Netherlands, Spain, Sweden, Switzerland - * and the United Kingdom. Non-commercial use is free, however any commercial - * products are liable for royalties. Please see - * www.mediacrypt.com for - * further details. This announcement has been included at the request of - * the patent holders. - *

- *

- * Note 2: Due to the requests concerning the above, this algorithm is now only - * included in the extended assembly. It is not included in the default distributions. - *

- */ - public class IdeaEngine - : IBlockCipher - { - private const int BLOCK_SIZE = 8; - private int[] workingKey; - /** - * standard constructor. - */ - public IdeaEngine() - { - } - /** - * initialise an IDEA cipher. - * - * @param forEncryption whether or not we are for encryption. - * @param parameters the parameters required to set up the cipher. - * @exception ArgumentException if the parameters argument is - * inappropriate. - */ - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - if (!(parameters is KeyParameter)) - throw new ArgumentException("invalid parameter passed to IDEA init - " + Platform.GetTypeName(parameters)); - - workingKey = GenerateWorkingKey(forEncryption, - ((KeyParameter)parameters).GetKey()); - } - - public virtual string AlgorithmName - { - get { return "IDEA"; } - } - - public virtual bool IsPartialBlockOkay - { - get { return false; } - } - - public virtual int GetBlockSize() - { - return BLOCK_SIZE; - } - - public virtual int ProcessBlock( - byte[] input, - int inOff, - byte[] output, - int outOff) - { - if (workingKey == null) - throw new InvalidOperationException("IDEA engine not initialised"); - - Check.DataLength(input, inOff, BLOCK_SIZE, "input buffer too short"); - Check.OutputLength(output, outOff, BLOCK_SIZE, "output buffer too short"); - - IdeaFunc(workingKey, input, inOff, output, outOff); - return BLOCK_SIZE; - } - public virtual void Reset() - { - } - private static readonly int MASK = 0xffff; - private static readonly int BASE = 0x10001; - private int BytesToWord( - byte[] input, - int inOff) - { - return ((input[inOff] << 8) & 0xff00) + (input[inOff + 1] & 0xff); - } - private void WordToBytes( - int word, - byte[] outBytes, - int outOff) - { - outBytes[outOff] = (byte)((uint) word >> 8); - outBytes[outOff + 1] = (byte)word; - } - /** - * return x = x * y where the multiplication is done modulo - * 65537 (0x10001) (as defined in the IDEA specification) and - * a zero input is taken to be 65536 (0x10000). - * - * @param x the x value - * @param y the y value - * @return x = x * y - */ - private int Mul( - int x, - int y) - { - if (x == 0) - { - x = (BASE - y); - } - else if (y == 0) - { - x = (BASE - x); - } - else - { - int p = x * y; - y = p & MASK; - x = (int) ((uint) p >> 16); - x = y - x + ((y < x) ? 1 : 0); - } - return x & MASK; - } - private void IdeaFunc( - int[] workingKey, - byte[] input, - int inOff, - byte[] outBytes, - int outOff) - { - int x0, x1, x2, x3, t0, t1; - int keyOff = 0; - x0 = BytesToWord(input, inOff); - x1 = BytesToWord(input, inOff + 2); - x2 = BytesToWord(input, inOff + 4); - x3 = BytesToWord(input, inOff + 6); - for (int round = 0; round < 8; round++) - { - x0 = Mul(x0, workingKey[keyOff++]); - x1 += workingKey[keyOff++]; - x1 &= MASK; - x2 += workingKey[keyOff++]; - x2 &= MASK; - x3 = Mul(x3, workingKey[keyOff++]); - t0 = x1; - t1 = x2; - x2 ^= x0; - x1 ^= x3; - x2 = Mul(x2, workingKey[keyOff++]); - x1 += x2; - x1 &= MASK; - x1 = Mul(x1, workingKey[keyOff++]); - x2 += x1; - x2 &= MASK; - x0 ^= x1; - x3 ^= x2; - x1 ^= t1; - x2 ^= t0; - } - WordToBytes(Mul(x0, workingKey[keyOff++]), outBytes, outOff); - WordToBytes(x2 + workingKey[keyOff++], outBytes, outOff + 2); /* NB: Order */ - WordToBytes(x1 + workingKey[keyOff++], outBytes, outOff + 4); - WordToBytes(Mul(x3, workingKey[keyOff]), outBytes, outOff + 6); - } - /** - * The following function is used to expand the user key to the encryption - * subkey. The first 16 bytes are the user key, and the rest of the subkey - * is calculated by rotating the previous 16 bytes by 25 bits to the left, - * and so on until the subkey is completed. - */ - private int[] ExpandKey( - byte[] uKey) - { - int[] key = new int[52]; - if (uKey.Length < 16) - { - byte[] tmp = new byte[16]; - Array.Copy(uKey, 0, tmp, tmp.Length - uKey.Length, uKey.Length); - uKey = tmp; - } - for (int i = 0; i < 8; i++) - { - key[i] = BytesToWord(uKey, i * 2); - } - for (int i = 8; i < 52; i++) - { - if ((i & 7) < 6) - { - key[i] = ((key[i - 7] & 127) << 9 | key[i - 6] >> 7) & MASK; - } - else if ((i & 7) == 6) - { - key[i] = ((key[i - 7] & 127) << 9 | key[i - 14] >> 7) & MASK; - } - else - { - key[i] = ((key[i - 15] & 127) << 9 | key[i - 14] >> 7) & MASK; - } - } - return key; - } - /** - * This function computes multiplicative inverse using Euclid's Greatest - * Common Divisor algorithm. Zero and one are self inverse. - *

- * i.e. x * MulInv(x) == 1 (modulo BASE) - *

- */ - private int MulInv( - int x) - { - int t0, t1, q, y; - - if (x < 2) - { - return x; - } - t0 = 1; - t1 = BASE / x; - y = BASE % x; - while (y != 1) - { - q = x / y; - x = x % y; - t0 = (t0 + (t1 * q)) & MASK; - if (x == 1) - { - return t0; - } - q = y / x; - y = y % x; - t1 = (t1 + (t0 * q)) & MASK; - } - return (1 - t1) & MASK; - } - /** - * Return the additive inverse of x. - *

- * i.e. x + AddInv(x) == 0 - *

- */ - int AddInv( - int x) - { - return (0 - x) & MASK; - } - - /** - * The function to invert the encryption subkey to the decryption subkey. - * It also involves the multiplicative inverse and the additive inverse functions. - */ - private int[] InvertKey( - int[] inKey) - { - int t1, t2, t3, t4; - int p = 52; /* We work backwards */ - int[] key = new int[52]; - int inOff = 0; - - t1 = MulInv(inKey[inOff++]); - t2 = AddInv(inKey[inOff++]); - t3 = AddInv(inKey[inOff++]); - t4 = MulInv(inKey[inOff++]); - key[--p] = t4; - key[--p] = t3; - key[--p] = t2; - key[--p] = t1; - - for (int round = 1; round < 8; round++) - { - t1 = inKey[inOff++]; - t2 = inKey[inOff++]; - key[--p] = t2; - key[--p] = t1; - - t1 = MulInv(inKey[inOff++]); - t2 = AddInv(inKey[inOff++]); - t3 = AddInv(inKey[inOff++]); - t4 = MulInv(inKey[inOff++]); - key[--p] = t4; - key[--p] = t2; /* NB: Order */ - key[--p] = t3; - key[--p] = t1; - } - t1 = inKey[inOff++]; - t2 = inKey[inOff++]; - key[--p] = t2; - key[--p] = t1; - - t1 = MulInv(inKey[inOff++]); - t2 = AddInv(inKey[inOff++]); - t3 = AddInv(inKey[inOff++]); - t4 = MulInv(inKey[inOff]); - key[--p] = t4; - key[--p] = t3; - key[--p] = t2; - key[--p] = t1; - return key; - } - - private int[] GenerateWorkingKey( - bool forEncryption, - byte[] userKey) - { - if (forEncryption) - { - return ExpandKey(userKey); - } - else - { - return InvertKey(ExpandKey(userKey)); - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/IesEngine.cs b/bc-sharp-crypto/src/crypto/engines/IesEngine.cs deleted file mode 100644 index 307cc7a..0000000 --- a/bc-sharp-crypto/src/crypto/engines/IesEngine.cs +++ /dev/null @@ -1,243 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * support class for constructing intergrated encryption ciphers - * for doing basic message exchanges on top of key agreement ciphers - */ - public class IesEngine - { - private readonly IBasicAgreement agree; - private readonly IDerivationFunction kdf; - private readonly IMac mac; - private readonly BufferedBlockCipher cipher; - private readonly byte[] macBuf; - - private bool forEncryption; - private ICipherParameters privParam, pubParam; - private IesParameters param; - - /** - * set up for use with stream mode, where the key derivation function - * is used to provide a stream of bytes to xor with the message. - * - * @param agree the key agreement used as the basis for the encryption - * @param kdf the key derivation function used for byte generation - * @param mac the message authentication code generator for the message - */ - public IesEngine( - IBasicAgreement agree, - IDerivationFunction kdf, - IMac mac) - { - this.agree = agree; - this.kdf = kdf; - this.mac = mac; - this.macBuf = new byte[mac.GetMacSize()]; -// this.cipher = null; - } - - /** - * set up for use in conjunction with a block cipher to handle the - * message. - * - * @param agree the key agreement used as the basis for the encryption - * @param kdf the key derivation function used for byte generation - * @param mac the message authentication code generator for the message - * @param cipher the cipher to used for encrypting the message - */ - public IesEngine( - IBasicAgreement agree, - IDerivationFunction kdf, - IMac mac, - BufferedBlockCipher cipher) - { - this.agree = agree; - this.kdf = kdf; - this.mac = mac; - this.macBuf = new byte[mac.GetMacSize()]; - this.cipher = cipher; - } - - /** - * Initialise the encryptor. - * - * @param forEncryption whether or not this is encryption/decryption. - * @param privParam our private key parameters - * @param pubParam the recipient's/sender's public key parameters - * @param param encoding and derivation parameters. - */ - public virtual void Init( - bool forEncryption, - ICipherParameters privParameters, - ICipherParameters pubParameters, - ICipherParameters iesParameters) - { - this.forEncryption = forEncryption; - this.privParam = privParameters; - this.pubParam = pubParameters; - this.param = (IesParameters)iesParameters; - } - - private byte[] DecryptBlock( - byte[] in_enc, - int inOff, - int inLen, - byte[] z) - { - byte[] M = null; - KeyParameter macKey = null; - KdfParameters kParam = new KdfParameters(z, param.GetDerivationV()); - int macKeySize = param.MacKeySize; - - kdf.Init(kParam); - - // Ensure that the length of the input is greater than the MAC in bytes - if (inLen < mac.GetMacSize()) - throw new InvalidCipherTextException("Length of input must be greater than the MAC"); - - inLen -= mac.GetMacSize(); - - if (cipher == null) // stream mode - { - byte[] Buffer = GenerateKdfBytes(kParam, inLen + (macKeySize / 8)); - - M = new byte[inLen]; - - for (int i = 0; i != inLen; i++) - { - M[i] = (byte)(in_enc[inOff + i] ^ Buffer[i]); - } - - macKey = new KeyParameter(Buffer, inLen, (macKeySize / 8)); - } - else - { - int cipherKeySize = ((IesWithCipherParameters)param).CipherKeySize; - byte[] Buffer = GenerateKdfBytes(kParam, (cipherKeySize / 8) + (macKeySize / 8)); - - cipher.Init(false, new KeyParameter(Buffer, 0, (cipherKeySize / 8))); - - M = cipher.DoFinal(in_enc, inOff, inLen); - - macKey = new KeyParameter(Buffer, (cipherKeySize / 8), (macKeySize / 8)); - } - - byte[] macIV = param.GetEncodingV(); - - mac.Init(macKey); - mac.BlockUpdate(in_enc, inOff, inLen); - mac.BlockUpdate(macIV, 0, macIV.Length); - mac.DoFinal(macBuf, 0); - - inOff += inLen; - - byte[] T1 = Arrays.CopyOfRange(in_enc, inOff, inOff + macBuf.Length); - - if (!Arrays.ConstantTimeAreEqual(T1, macBuf)) - throw (new InvalidCipherTextException("Invalid MAC.")); - - return M; - } - - private byte[] EncryptBlock( - byte[] input, - int inOff, - int inLen, - byte[] z) - { - byte[] C = null; - KeyParameter macKey = null; - KdfParameters kParam = new KdfParameters(z, param.GetDerivationV()); - int c_text_length = 0; - int macKeySize = param.MacKeySize; - - if (cipher == null) // stream mode - { - byte[] Buffer = GenerateKdfBytes(kParam, inLen + (macKeySize / 8)); - - C = new byte[inLen + mac.GetMacSize()]; - c_text_length = inLen; - - for (int i = 0; i != inLen; i++) - { - C[i] = (byte)(input[inOff + i] ^ Buffer[i]); - } - - macKey = new KeyParameter(Buffer, inLen, (macKeySize / 8)); - } - else - { - int cipherKeySize = ((IesWithCipherParameters)param).CipherKeySize; - byte[] Buffer = GenerateKdfBytes(kParam, (cipherKeySize / 8) + (macKeySize / 8)); - - cipher.Init(true, new KeyParameter(Buffer, 0, (cipherKeySize / 8))); - - c_text_length = cipher.GetOutputSize(inLen); - byte[] tmp = new byte[c_text_length]; - - int len = cipher.ProcessBytes(input, inOff, inLen, tmp, 0); - len += cipher.DoFinal(tmp, len); - - C = new byte[len + mac.GetMacSize()]; - c_text_length = len; - - Array.Copy(tmp, 0, C, 0, len); - - macKey = new KeyParameter(Buffer, (cipherKeySize / 8), (macKeySize / 8)); - } - - byte[] macIV = param.GetEncodingV(); - - mac.Init(macKey); - mac.BlockUpdate(C, 0, c_text_length); - mac.BlockUpdate(macIV, 0, macIV.Length); - // - // return the message and it's MAC - // - mac.DoFinal(C, c_text_length); - return C; - } - - private byte[] GenerateKdfBytes( - KdfParameters kParam, - int length) - { - byte[] buf = new byte[length]; - - kdf.Init(kParam); - - kdf.GenerateBytes(buf, 0, buf.Length); - - return buf; - } - - public virtual byte[] ProcessBlock( - byte[] input, - int inOff, - int inLen) - { - agree.Init(privParam); - - BigInteger z = agree.CalculateAgreement(pubParam); - - byte[] zBytes = BigIntegers.AsUnsignedByteArray(agree.GetFieldSize(), z); - - try - { - return forEncryption - ? EncryptBlock(input, inOff, inLen, zBytes) - : DecryptBlock(input, inOff, inLen, zBytes); - } - finally - { - Array.Clear(zBytes, 0, zBytes.Length); - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/NaccacheSternEngine.cs b/bc-sharp-crypto/src/crypto/engines/NaccacheSternEngine.cs deleted file mode 100644 index 64665c1..0000000 --- a/bc-sharp-crypto/src/crypto/engines/NaccacheSternEngine.cs +++ /dev/null @@ -1,358 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * NaccacheStern Engine. For details on this cipher, please see - * http://www.gemplus.com/smart/rd/publications/pdf/NS98pkcs.pdf - */ - public class NaccacheSternEngine - : IAsymmetricBlockCipher - { - private bool forEncryption; - - private NaccacheSternKeyParameters key; - - private IList[] lookup = null; - - public string AlgorithmName - { - get { return "NaccacheStern"; } - } - - /** - * Initializes this algorithm. Must be called before all other Functions. - * - * @see org.bouncycastle.crypto.AsymmetricBlockCipher#init(bool, - * org.bouncycastle.crypto.CipherParameters) - */ - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - this.forEncryption = forEncryption; - - if (parameters is ParametersWithRandom) - { - parameters = ((ParametersWithRandom) parameters).Parameters; - } - - key = (NaccacheSternKeyParameters)parameters; - - // construct lookup table for faster decryption if necessary - if (!this.forEncryption) - { - NaccacheSternPrivateKeyParameters priv = (NaccacheSternPrivateKeyParameters)key; - IList primes = priv.SmallPrimesList; - lookup = new IList[primes.Count]; - for (int i = 0; i < primes.Count; i++) - { - BigInteger actualPrime = (BigInteger) primes[i]; - int actualPrimeValue = actualPrime.IntValue; - - lookup[i] = Platform.CreateArrayList(actualPrimeValue); - lookup[i].Add(BigInteger.One); - - BigInteger accJ = BigInteger.Zero; - - for (int j = 1; j < actualPrimeValue; j++) - { -// BigInteger bigJ = BigInteger.ValueOf(j); -// accJ = priv.PhiN.Multiply(bigJ); - accJ = accJ.Add(priv.PhiN); - BigInteger comp = accJ.Divide(actualPrime); - lookup[i].Add(priv.G.ModPow(comp, priv.Modulus)); - } - } - } - } - - [Obsolete("Remove: no longer used")] - public virtual bool Debug - { - set {} - } - - /** - * Returns the input block size of this algorithm. - * - * @see org.bouncycastle.crypto.AsymmetricBlockCipher#GetInputBlockSize() - */ - public virtual int GetInputBlockSize() - { - if (forEncryption) - { - // We can only encrypt values up to lowerSigmaBound - return (key.LowerSigmaBound + 7) / 8 - 1; - } - else - { - // We pad to modulus-size bytes for easier decryption. -// return key.Modulus.ToByteArray().Length; - return key.Modulus.BitLength / 8 + 1; - } - } - - /** - * Returns the output block size of this algorithm. - * - * @see org.bouncycastle.crypto.AsymmetricBlockCipher#GetOutputBlockSize() - */ - public virtual int GetOutputBlockSize() - { - if (forEncryption) - { - // encrypted Data is always padded up to modulus size -// return key.Modulus.ToByteArray().Length; - return key.Modulus.BitLength / 8 + 1; - } - else - { - // decrypted Data has upper limit lowerSigmaBound - return (key.LowerSigmaBound + 7) / 8 - 1; - } - } - - /** - * Process a single Block using the Naccache-Stern algorithm. - * - * @see org.bouncycastle.crypto.AsymmetricBlockCipher#ProcessBlock(byte[], - * int, int) - */ - public virtual byte[] ProcessBlock( - byte[] inBytes, - int inOff, - int length) - { - if (key == null) - throw new InvalidOperationException("NaccacheStern engine not initialised"); - if (length > (GetInputBlockSize() + 1)) - throw new DataLengthException("input too large for Naccache-Stern cipher.\n"); - - if (!forEncryption) - { - // At decryption make sure that we receive padded data blocks - if (length < GetInputBlockSize()) - { - throw new InvalidCipherTextException("BlockLength does not match modulus for Naccache-Stern cipher.\n"); - } - } - - // transform input into BigInteger - BigInteger input = new BigInteger(1, inBytes, inOff, length); - - byte[] output; - if (forEncryption) - { - output = Encrypt(input); - } - else - { - IList plain = Platform.CreateArrayList(); - NaccacheSternPrivateKeyParameters priv = (NaccacheSternPrivateKeyParameters)key; - IList primes = priv.SmallPrimesList; - // Get Chinese Remainders of CipherText - for (int i = 0; i < primes.Count; i++) - { - BigInteger exp = input.ModPow(priv.PhiN.Divide((BigInteger)primes[i]), priv.Modulus); - IList al = lookup[i]; - if (lookup[i].Count != ((BigInteger)primes[i]).IntValue) - { - throw new InvalidCipherTextException("Error in lookup Array for " - + ((BigInteger)primes[i]).IntValue - + ": Size mismatch. Expected ArrayList with length " - + ((BigInteger)primes[i]).IntValue + " but found ArrayList of length " - + lookup[i].Count); - } - int lookedup = al.IndexOf(exp); - - if (lookedup == -1) - { - throw new InvalidCipherTextException("Lookup failed"); - } - plain.Add(BigInteger.ValueOf(lookedup)); - } - BigInteger test = chineseRemainder(plain, primes); - - // Should not be used as an oracle, so reencrypt output to see - // if it corresponds to input - - // this breaks probabilisic encryption, so disable it. Anyway, we do - // use the first n primes for key generation, so it is pretty easy - // to guess them. But as stated in the paper, this is not a security - // breach. So we can just work with the correct sigma. - - // if ((key.G.ModPow(test, key.Modulus)).Equals(input)) { - // output = test.ToByteArray(); - // } else { - // output = null; - // } - - output = test.ToByteArray(); - } - - return output; - } - - /** - * Encrypts a BigInteger aka Plaintext with the public key. - * - * @param plain - * The BigInteger to encrypt - * @return The byte[] representation of the encrypted BigInteger (i.e. - * crypted.toByteArray()) - */ - public virtual byte[] Encrypt( - BigInteger plain) - { - // Always return modulus size values 0-padded at the beginning - // 0-padding at the beginning is correctly parsed by BigInteger :) -// byte[] output = key.Modulus.ToByteArray(); -// Array.Clear(output, 0, output.Length); - byte[] output = new byte[key.Modulus.BitLength / 8 + 1]; - - byte[] tmp = key.G.ModPow(plain, key.Modulus).ToByteArray(); - Array.Copy(tmp, 0, output, output.Length - tmp.Length, tmp.Length); - return output; - } - - /** - * Adds the contents of two encrypted blocks mod sigma - * - * @param block1 - * the first encrypted block - * @param block2 - * the second encrypted block - * @return encrypt((block1 + block2) mod sigma) - * @throws InvalidCipherTextException - */ - public virtual byte[] AddCryptedBlocks( - byte[] block1, - byte[] block2) - { - // check for correct blocksize - if (forEncryption) - { - if ((block1.Length > GetOutputBlockSize()) - || (block2.Length > GetOutputBlockSize())) - { - throw new InvalidCipherTextException( - "BlockLength too large for simple addition.\n"); - } - } - else - { - if ((block1.Length > GetInputBlockSize()) - || (block2.Length > GetInputBlockSize())) - { - throw new InvalidCipherTextException( - "BlockLength too large for simple addition.\n"); - } - } - - // calculate resulting block - BigInteger m1Crypt = new BigInteger(1, block1); - BigInteger m2Crypt = new BigInteger(1, block2); - BigInteger m1m2Crypt = m1Crypt.Multiply(m2Crypt); - m1m2Crypt = m1m2Crypt.Mod(key.Modulus); - - //byte[] output = key.Modulus.ToByteArray(); - //Array.Clear(output, 0, output.Length); - byte[] output = new byte[key.Modulus.BitLength / 8 + 1]; - - byte[] m1m2CryptBytes = m1m2Crypt.ToByteArray(); - Array.Copy(m1m2CryptBytes, 0, output, - output.Length - m1m2CryptBytes.Length, m1m2CryptBytes.Length); - - return output; - } - - /** - * Convenience Method for data exchange with the cipher. - * - * Determines blocksize and splits data to blocksize. - * - * @param data the data to be processed - * @return the data after it went through the NaccacheSternEngine. - * @throws InvalidCipherTextException - */ - public virtual byte[] ProcessData( - byte[] data) - { - if (data.Length > GetInputBlockSize()) - { - int inBlocksize = GetInputBlockSize(); - int outBlocksize = GetOutputBlockSize(); - int datapos = 0; - int retpos = 0; - byte[] retval = new byte[(data.Length / inBlocksize + 1) * outBlocksize]; - while (datapos < data.Length) - { - byte[] tmp; - if (datapos + inBlocksize < data.Length) - { - tmp = ProcessBlock(data, datapos, inBlocksize); - datapos += inBlocksize; - } - else - { - tmp = ProcessBlock(data, datapos, data.Length - datapos); - datapos += data.Length - datapos; - } - if (tmp != null) - { - tmp.CopyTo(retval, retpos); - retpos += tmp.Length; - } - else - { - throw new InvalidCipherTextException("cipher returned null"); - } - } - byte[] ret = new byte[retpos]; - Array.Copy(retval, 0, ret, 0, retpos); - return ret; - } - else - { - return ProcessBlock(data, 0, data.Length); - } - } - - /** - * Computes the integer x that is expressed through the given primes and the - * congruences with the chinese remainder theorem (CRT). - * - * @param congruences - * the congruences c_i - * @param primes - * the primes p_i - * @return an integer x for that x % p_i == c_i - */ - private static BigInteger chineseRemainder(IList congruences, IList primes) - { - BigInteger retval = BigInteger.Zero; - BigInteger all = BigInteger.One; - for (int i = 0; i < primes.Count; i++) - { - all = all.Multiply((BigInteger)primes[i]); - } - for (int i = 0; i < primes.Count; i++) - { - BigInteger a = (BigInteger)primes[i]; - BigInteger b = all.Divide(a); - BigInteger b2 = b.ModInverse(a); - BigInteger tmp = b.Multiply(b2); - tmp = tmp.Multiply((BigInteger)congruences[i]); - retval = retval.Add(tmp); - } - - return retval.Mod(all); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/NoekeonEngine.cs b/bc-sharp-crypto/src/crypto/engines/NoekeonEngine.cs deleted file mode 100644 index f64be50..0000000 --- a/bc-sharp-crypto/src/crypto/engines/NoekeonEngine.cs +++ /dev/null @@ -1,241 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * A Noekeon engine, using direct-key mode. - */ - public class NoekeonEngine - : IBlockCipher - { - private const int GenericSize = 16; // Block and key size, as well as the amount of rounds. - - private static readonly uint[] nullVector = - { - 0x00, 0x00, 0x00, 0x00 // Used in decryption - }; - - private static readonly uint[] roundConstants = - { - 0x80, 0x1b, 0x36, 0x6c, - 0xd8, 0xab, 0x4d, 0x9a, - 0x2f, 0x5e, 0xbc, 0x63, - 0xc6, 0x97, 0x35, 0x6a, - 0xd4 - }; - - private uint[] state = new uint[4], // a - subKeys = new uint[4], // k - decryptKeys = new uint[4]; - - private bool _initialised, _forEncryption; - - /** - * Create an instance of the Noekeon encryption algorithm - * and set some defaults - */ - public NoekeonEngine() - { - _initialised = false; - } - - public virtual string AlgorithmName - { - get { return "Noekeon"; } - } - - public virtual bool IsPartialBlockOkay - { - get { return false; } - } - - public virtual int GetBlockSize() - { - return GenericSize; - } - - /** - * initialise - * - * @param forEncryption whether or not we are for encryption. - * @param params the parameters required to set up the cipher. - * @exception ArgumentException if the params argument is - * inappropriate. - */ - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - if (!(parameters is KeyParameter)) - throw new ArgumentException("Invalid parameters passed to Noekeon init - " - + Platform.GetTypeName(parameters), "parameters"); - - _forEncryption = forEncryption; - _initialised = true; - - KeyParameter p = (KeyParameter) parameters; - - setKey(p.GetKey()); - } - - public virtual int ProcessBlock( - byte[] input, - int inOff, - byte[] output, - int outOff) - { - if (!_initialised) - throw new InvalidOperationException(AlgorithmName + " not initialised"); - - Check.DataLength(input, inOff, GenericSize, "input buffer too short"); - Check.OutputLength(output, outOff, GenericSize, "output buffer too short"); - - return _forEncryption - ? encryptBlock(input, inOff, output, outOff) - : decryptBlock(input, inOff, output, outOff); - } - - public virtual void Reset() - { - // TODO This should do something in case the encryption is aborted - } - - /** - * Re-key the cipher. - * - * @param key the key to be used - */ - private void setKey(byte[] key) - { - subKeys[0] = Pack.BE_To_UInt32(key, 0); - subKeys[1] = Pack.BE_To_UInt32(key, 4); - subKeys[2] = Pack.BE_To_UInt32(key, 8); - subKeys[3] = Pack.BE_To_UInt32(key, 12); - } - - private int encryptBlock( - byte[] input, - int inOff, - byte[] output, - int outOff) - { - state[0] = Pack.BE_To_UInt32(input, inOff); - state[1] = Pack.BE_To_UInt32(input, inOff+4); - state[2] = Pack.BE_To_UInt32(input, inOff+8); - state[3] = Pack.BE_To_UInt32(input, inOff+12); - - int i; - for (i = 0; i < GenericSize; i++) - { - state[0] ^= roundConstants[i]; - theta(state, subKeys); - pi1(state); - gamma(state); - pi2(state); - } - - state[0] ^= roundConstants[i]; - theta(state, subKeys); - - Pack.UInt32_To_BE(state[0], output, outOff); - Pack.UInt32_To_BE(state[1], output, outOff+4); - Pack.UInt32_To_BE(state[2], output, outOff+8); - Pack.UInt32_To_BE(state[3], output, outOff+12); - - return GenericSize; - } - - private int decryptBlock( - byte[] input, - int inOff, - byte[] output, - int outOff) - { - state[0] = Pack.BE_To_UInt32(input, inOff); - state[1] = Pack.BE_To_UInt32(input, inOff+4); - state[2] = Pack.BE_To_UInt32(input, inOff+8); - state[3] = Pack.BE_To_UInt32(input, inOff+12); - - Array.Copy(subKeys, 0, decryptKeys, 0, subKeys.Length); - theta(decryptKeys, nullVector); - - int i; - for (i = GenericSize; i > 0; i--) - { - theta(state, decryptKeys); - state[0] ^= roundConstants[i]; - pi1(state); - gamma(state); - pi2(state); - } - - theta(state, decryptKeys); - state[0] ^= roundConstants[i]; - - Pack.UInt32_To_BE(state[0], output, outOff); - Pack.UInt32_To_BE(state[1], output, outOff+4); - Pack.UInt32_To_BE(state[2], output, outOff+8); - Pack.UInt32_To_BE(state[3], output, outOff+12); - - return GenericSize; - } - - private void gamma(uint[] a) - { - a[1] ^= ~a[3] & ~a[2]; - a[0] ^= a[2] & a[1]; - - uint tmp = a[3]; - a[3] = a[0]; - a[0] = tmp; - a[2] ^= a[0]^a[1]^a[3]; - - a[1] ^= ~a[3] & ~a[2]; - a[0] ^= a[2] & a[1]; - } - - private void theta(uint[] a, uint[] k) - { - uint tmp; - tmp = a[0]^a[2]; - tmp ^= rotl(tmp,8)^rotl(tmp,24); - a[1] ^= tmp; - a[3] ^= tmp; - - for (int i = 0; i < 4; i++) - { - a[i] ^= k[i]; - } - - tmp = a[1]^a[3]; - tmp ^= rotl(tmp,8)^rotl(tmp,24); - a[0] ^= tmp; - a[2] ^= tmp; - } - - private void pi1(uint[] a) - { - a[1] = rotl(a[1], 1); - a[2] = rotl(a[2], 5); - a[3] = rotl(a[3], 2); - } - - private void pi2(uint[] a) - { - a[1] = rotl(a[1], 31); - a[2] = rotl(a[2], 27); - a[3] = rotl(a[3], 30); - } - - // Helpers - - private uint rotl(uint x, int y) - { - return (x << y) | (x >> (32-y)); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/NullEngine.cs b/bc-sharp-crypto/src/crypto/engines/NullEngine.cs deleted file mode 100644 index f883b7c..0000000 --- a/bc-sharp-crypto/src/crypto/engines/NullEngine.cs +++ /dev/null @@ -1,69 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * The no-op engine that just copies bytes through, irrespective of whether encrypting and decrypting. - * Provided for the sake of completeness. - */ - public class NullEngine - : IBlockCipher - { - private bool initialised; - private const int BlockSize = 1; - - public NullEngine() - { - } - - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - // we don't mind any parameters that may come in - initialised = true; - } - - public virtual string AlgorithmName - { - get { return "Null"; } - } - - public virtual bool IsPartialBlockOkay - { - get { return true; } - } - - public virtual int GetBlockSize() - { - return BlockSize; - } - - public virtual int ProcessBlock( - byte[] input, - int inOff, - byte[] output, - int outOff) - { - if (!initialised) - throw new InvalidOperationException("Null engine not initialised"); - - Check.DataLength(input, inOff, BlockSize, "input buffer too short"); - Check.OutputLength(output, outOff, BlockSize, "output buffer too short"); - - for (int i = 0; i < BlockSize; ++i) - { - output[outOff + i] = input[inOff + i]; - } - - return BlockSize; - } - - public virtual void Reset() - { - // nothing needs to be done - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/RC2Engine.cs b/bc-sharp-crypto/src/crypto/engines/RC2Engine.cs deleted file mode 100644 index 4aca189..0000000 --- a/bc-sharp-crypto/src/crypto/engines/RC2Engine.cs +++ /dev/null @@ -1,311 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * an implementation of RC2 as described in RFC 2268 - * "A Description of the RC2(r) Encryption Algorithm" R. Rivest. - */ - public class RC2Engine - : IBlockCipher - { - // - // the values we use for key expansion (based on the digits of PI) - // - private static readonly byte[] piTable = - { - (byte)0xd9, (byte)0x78, (byte)0xf9, (byte)0xc4, (byte)0x19, (byte)0xdd, (byte)0xb5, (byte)0xed, - (byte)0x28, (byte)0xe9, (byte)0xfd, (byte)0x79, (byte)0x4a, (byte)0xa0, (byte)0xd8, (byte)0x9d, - (byte)0xc6, (byte)0x7e, (byte)0x37, (byte)0x83, (byte)0x2b, (byte)0x76, (byte)0x53, (byte)0x8e, - (byte)0x62, (byte)0x4c, (byte)0x64, (byte)0x88, (byte)0x44, (byte)0x8b, (byte)0xfb, (byte)0xa2, - (byte)0x17, (byte)0x9a, (byte)0x59, (byte)0xf5, (byte)0x87, (byte)0xb3, (byte)0x4f, (byte)0x13, - (byte)0x61, (byte)0x45, (byte)0x6d, (byte)0x8d, (byte)0x9, (byte)0x81, (byte)0x7d, (byte)0x32, - (byte)0xbd, (byte)0x8f, (byte)0x40, (byte)0xeb, (byte)0x86, (byte)0xb7, (byte)0x7b, (byte)0xb, - (byte)0xf0, (byte)0x95, (byte)0x21, (byte)0x22, (byte)0x5c, (byte)0x6b, (byte)0x4e, (byte)0x82, - (byte)0x54, (byte)0xd6, (byte)0x65, (byte)0x93, (byte)0xce, (byte)0x60, (byte)0xb2, (byte)0x1c, - (byte)0x73, (byte)0x56, (byte)0xc0, (byte)0x14, (byte)0xa7, (byte)0x8c, (byte)0xf1, (byte)0xdc, - (byte)0x12, (byte)0x75, (byte)0xca, (byte)0x1f, (byte)0x3b, (byte)0xbe, (byte)0xe4, (byte)0xd1, - (byte)0x42, (byte)0x3d, (byte)0xd4, (byte)0x30, (byte)0xa3, (byte)0x3c, (byte)0xb6, (byte)0x26, - (byte)0x6f, (byte)0xbf, (byte)0xe, (byte)0xda, (byte)0x46, (byte)0x69, (byte)0x7, (byte)0x57, - (byte)0x27, (byte)0xf2, (byte)0x1d, (byte)0x9b, (byte)0xbc, (byte)0x94, (byte)0x43, (byte)0x3, - (byte)0xf8, (byte)0x11, (byte)0xc7, (byte)0xf6, (byte)0x90, (byte)0xef, (byte)0x3e, (byte)0xe7, - (byte)0x6, (byte)0xc3, (byte)0xd5, (byte)0x2f, (byte)0xc8, (byte)0x66, (byte)0x1e, (byte)0xd7, - (byte)0x8, (byte)0xe8, (byte)0xea, (byte)0xde, (byte)0x80, (byte)0x52, (byte)0xee, (byte)0xf7, - (byte)0x84, (byte)0xaa, (byte)0x72, (byte)0xac, (byte)0x35, (byte)0x4d, (byte)0x6a, (byte)0x2a, - (byte)0x96, (byte)0x1a, (byte)0xd2, (byte)0x71, (byte)0x5a, (byte)0x15, (byte)0x49, (byte)0x74, - (byte)0x4b, (byte)0x9f, (byte)0xd0, (byte)0x5e, (byte)0x4, (byte)0x18, (byte)0xa4, (byte)0xec, - (byte)0xc2, (byte)0xe0, (byte)0x41, (byte)0x6e, (byte)0xf, (byte)0x51, (byte)0xcb, (byte)0xcc, - (byte)0x24, (byte)0x91, (byte)0xaf, (byte)0x50, (byte)0xa1, (byte)0xf4, (byte)0x70, (byte)0x39, - (byte)0x99, (byte)0x7c, (byte)0x3a, (byte)0x85, (byte)0x23, (byte)0xb8, (byte)0xb4, (byte)0x7a, - (byte)0xfc, (byte)0x2, (byte)0x36, (byte)0x5b, (byte)0x25, (byte)0x55, (byte)0x97, (byte)0x31, - (byte)0x2d, (byte)0x5d, (byte)0xfa, (byte)0x98, (byte)0xe3, (byte)0x8a, (byte)0x92, (byte)0xae, - (byte)0x5, (byte)0xdf, (byte)0x29, (byte)0x10, (byte)0x67, (byte)0x6c, (byte)0xba, (byte)0xc9, - (byte)0xd3, (byte)0x0, (byte)0xe6, (byte)0xcf, (byte)0xe1, (byte)0x9e, (byte)0xa8, (byte)0x2c, - (byte)0x63, (byte)0x16, (byte)0x1, (byte)0x3f, (byte)0x58, (byte)0xe2, (byte)0x89, (byte)0xa9, - (byte)0xd, (byte)0x38, (byte)0x34, (byte)0x1b, (byte)0xab, (byte)0x33, (byte)0xff, (byte)0xb0, - (byte)0xbb, (byte)0x48, (byte)0xc, (byte)0x5f, (byte)0xb9, (byte)0xb1, (byte)0xcd, (byte)0x2e, - (byte)0xc5, (byte)0xf3, (byte)0xdb, (byte)0x47, (byte)0xe5, (byte)0xa5, (byte)0x9c, (byte)0x77, - (byte)0xa, (byte)0xa6, (byte)0x20, (byte)0x68, (byte)0xfe, (byte)0x7f, (byte)0xc1, (byte)0xad - }; - - private const int BLOCK_SIZE = 8; - - private int[] workingKey; - private bool encrypting; - - private int[] GenerateWorkingKey( - byte[] key, - int bits) - { - int x; - int[] xKey = new int[128]; - - for (int i = 0; i != key.Length; i++) - { - xKey[i] = key[i] & 0xff; - } - - // Phase 1: Expand input key to 128 bytes - int len = key.Length; - - if (len < 128) - { - int index = 0; - - x = xKey[len - 1]; - - do - { - x = piTable[(x + xKey[index++]) & 255] & 0xff; - xKey[len++] = x; - } - while (len < 128); - } - - // Phase 2 - reduce effective key size to "bits" - len = (bits + 7) >> 3; - x = piTable[xKey[128 - len] & (255 >> (7 & -bits))] & 0xff; - xKey[128 - len] = x; - - for (int i = 128 - len - 1; i >= 0; i--) - { - x = piTable[x ^ xKey[i + len]] & 0xff; - xKey[i] = x; - } - - // Phase 3 - copy to newKey in little-endian order - int[] newKey = new int[64]; - - for (int i = 0; i != newKey.Length; i++) - { - newKey[i] = (xKey[2 * i] + (xKey[2 * i + 1] << 8)); - } - - return newKey; - } - - /** - * initialise a RC2 cipher. - * - * @param forEncryption whether or not we are for encryption. - * @param parameters the parameters required to set up the cipher. - * @exception ArgumentException if the parameters argument is - * inappropriate. - */ - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - this.encrypting = forEncryption; - - if (parameters is RC2Parameters) - { - RC2Parameters param = (RC2Parameters) parameters; - - workingKey = GenerateWorkingKey(param.GetKey(), param.EffectiveKeyBits); - } - else if (parameters is KeyParameter) - { - KeyParameter param = (KeyParameter) parameters; - byte[] key = param.GetKey(); - - workingKey = GenerateWorkingKey(key, key.Length * 8); - } - else - { - throw new ArgumentException("invalid parameter passed to RC2 init - " + Platform.GetTypeName(parameters)); - } - } - - public virtual void Reset() - { - } - - public virtual string AlgorithmName - { - get { return "RC2"; } - } - - public virtual bool IsPartialBlockOkay - { - get { return false; } - } - - public virtual int GetBlockSize() - { - return BLOCK_SIZE; - } - - public virtual int ProcessBlock( - byte[] input, - int inOff, - byte[] output, - int outOff) - { - if (workingKey == null) - throw new InvalidOperationException("RC2 engine not initialised"); - - Check.DataLength(input, inOff, BLOCK_SIZE, "input buffer too short"); - Check.OutputLength(output, outOff, BLOCK_SIZE, "output buffer too short"); - - if (encrypting) - { - EncryptBlock(input, inOff, output, outOff); - } - else - { - DecryptBlock(input, inOff, output, outOff); - } - - return BLOCK_SIZE; - } - - /** - * return the result rotating the 16 bit number in x left by y - */ - private int RotateWordLeft( - int x, - int y) - { - x &= 0xffff; - return (x << y) | (x >> (16 - y)); - } - - private void EncryptBlock( - byte[] input, - int inOff, - byte[] outBytes, - int outOff) - { - int x76, x54, x32, x10; - - x76 = ((input[inOff + 7] & 0xff) << 8) + (input[inOff + 6] & 0xff); - x54 = ((input[inOff + 5] & 0xff) << 8) + (input[inOff + 4] & 0xff); - x32 = ((input[inOff + 3] & 0xff) << 8) + (input[inOff + 2] & 0xff); - x10 = ((input[inOff + 1] & 0xff) << 8) + (input[inOff + 0] & 0xff); - - for (int i = 0; i <= 16; i += 4) - { - x10 = RotateWordLeft(x10 + (x32 & ~x76) + (x54 & x76) + workingKey[i ], 1); - x32 = RotateWordLeft(x32 + (x54 & ~x10) + (x76 & x10) + workingKey[i+1], 2); - x54 = RotateWordLeft(x54 + (x76 & ~x32) + (x10 & x32) + workingKey[i+2], 3); - x76 = RotateWordLeft(x76 + (x10 & ~x54) + (x32 & x54) + workingKey[i+3], 5); - } - - x10 += workingKey[x76 & 63]; - x32 += workingKey[x10 & 63]; - x54 += workingKey[x32 & 63]; - x76 += workingKey[x54 & 63]; - - for (int i = 20; i <= 40; i += 4) - { - x10 = RotateWordLeft(x10 + (x32 & ~x76) + (x54 & x76) + workingKey[i ], 1); - x32 = RotateWordLeft(x32 + (x54 & ~x10) + (x76 & x10) + workingKey[i+1], 2); - x54 = RotateWordLeft(x54 + (x76 & ~x32) + (x10 & x32) + workingKey[i+2], 3); - x76 = RotateWordLeft(x76 + (x10 & ~x54) + (x32 & x54) + workingKey[i+3], 5); - } - - x10 += workingKey[x76 & 63]; - x32 += workingKey[x10 & 63]; - x54 += workingKey[x32 & 63]; - x76 += workingKey[x54 & 63]; - - for (int i = 44; i < 64; i += 4) - { - x10 = RotateWordLeft(x10 + (x32 & ~x76) + (x54 & x76) + workingKey[i ], 1); - x32 = RotateWordLeft(x32 + (x54 & ~x10) + (x76 & x10) + workingKey[i+1], 2); - x54 = RotateWordLeft(x54 + (x76 & ~x32) + (x10 & x32) + workingKey[i+2], 3); - x76 = RotateWordLeft(x76 + (x10 & ~x54) + (x32 & x54) + workingKey[i+3], 5); - } - - outBytes[outOff + 0] = (byte)x10; - outBytes[outOff + 1] = (byte)(x10 >> 8); - outBytes[outOff + 2] = (byte)x32; - outBytes[outOff + 3] = (byte)(x32 >> 8); - outBytes[outOff + 4] = (byte)x54; - outBytes[outOff + 5] = (byte)(x54 >> 8); - outBytes[outOff + 6] = (byte)x76; - outBytes[outOff + 7] = (byte)(x76 >> 8); - } - - private void DecryptBlock( - byte[] input, - int inOff, - byte[] outBytes, - int outOff) - { - int x76, x54, x32, x10; - - x76 = ((input[inOff + 7] & 0xff) << 8) + (input[inOff + 6] & 0xff); - x54 = ((input[inOff + 5] & 0xff) << 8) + (input[inOff + 4] & 0xff); - x32 = ((input[inOff + 3] & 0xff) << 8) + (input[inOff + 2] & 0xff); - x10 = ((input[inOff + 1] & 0xff) << 8) + (input[inOff + 0] & 0xff); - - for (int i = 60; i >= 44; i -= 4) - { - x76 = RotateWordLeft(x76, 11) - ((x10 & ~x54) + (x32 & x54) + workingKey[i+3]); - x54 = RotateWordLeft(x54, 13) - ((x76 & ~x32) + (x10 & x32) + workingKey[i+2]); - x32 = RotateWordLeft(x32, 14) - ((x54 & ~x10) + (x76 & x10) + workingKey[i+1]); - x10 = RotateWordLeft(x10, 15) - ((x32 & ~x76) + (x54 & x76) + workingKey[i ]); - } - - x76 -= workingKey[x54 & 63]; - x54 -= workingKey[x32 & 63]; - x32 -= workingKey[x10 & 63]; - x10 -= workingKey[x76 & 63]; - - for (int i = 40; i >= 20; i -= 4) - { - x76 = RotateWordLeft(x76, 11) - ((x10 & ~x54) + (x32 & x54) + workingKey[i+3]); - x54 = RotateWordLeft(x54, 13) - ((x76 & ~x32) + (x10 & x32) + workingKey[i+2]); - x32 = RotateWordLeft(x32, 14) - ((x54 & ~x10) + (x76 & x10) + workingKey[i+1]); - x10 = RotateWordLeft(x10, 15) - ((x32 & ~x76) + (x54 & x76) + workingKey[i ]); - } - - x76 -= workingKey[x54 & 63]; - x54 -= workingKey[x32 & 63]; - x32 -= workingKey[x10 & 63]; - x10 -= workingKey[x76 & 63]; - - for (int i = 16; i >= 0; i -= 4) - { - x76 = RotateWordLeft(x76, 11) - ((x10 & ~x54) + (x32 & x54) + workingKey[i+3]); - x54 = RotateWordLeft(x54, 13) - ((x76 & ~x32) + (x10 & x32) + workingKey[i+2]); - x32 = RotateWordLeft(x32, 14) - ((x54 & ~x10) + (x76 & x10) + workingKey[i+1]); - x10 = RotateWordLeft(x10, 15) - ((x32 & ~x76) + (x54 & x76) + workingKey[i ]); - } - - outBytes[outOff + 0] = (byte)x10; - outBytes[outOff + 1] = (byte)(x10 >> 8); - outBytes[outOff + 2] = (byte)x32; - outBytes[outOff + 3] = (byte)(x32 >> 8); - outBytes[outOff + 4] = (byte)x54; - outBytes[outOff + 5] = (byte)(x54 >> 8); - outBytes[outOff + 6] = (byte)x76; - outBytes[outOff + 7] = (byte)(x76 >> 8); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/RC2WrapEngine.cs b/bc-sharp-crypto/src/crypto/engines/RC2WrapEngine.cs deleted file mode 100644 index 5742aa8..0000000 --- a/bc-sharp-crypto/src/crypto/engines/RC2WrapEngine.cs +++ /dev/null @@ -1,370 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Crypto.Modes; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * Wrap keys according to RFC 3217 - RC2 mechanism - */ - public class RC2WrapEngine - : IWrapper - { - /** Field engine */ - private CbcBlockCipher engine; - - /** Field param */ - private ICipherParameters parameters; - - /** Field paramPlusIV */ - private ParametersWithIV paramPlusIV; - - /** Field iv */ - private byte[] iv; - - /** Field forWrapping */ - private bool forWrapping; - - private SecureRandom sr; - - /** Field IV2 */ - private static readonly byte[] IV2 = - { - (byte) 0x4a, (byte) 0xdd, (byte) 0xa2, - (byte) 0x2c, (byte) 0x79, (byte) 0xe8, - (byte) 0x21, (byte) 0x05 - }; - - // - // checksum digest - // - IDigest sha1 = new Sha1Digest(); - byte[] digest = new byte[20]; - - /** - * Method init - * - * @param forWrapping - * @param param - */ - public virtual void Init( - bool forWrapping, - ICipherParameters parameters) - { - this.forWrapping = forWrapping; - this.engine = new CbcBlockCipher(new RC2Engine()); - - if (parameters is ParametersWithRandom) - { - ParametersWithRandom pWithR = (ParametersWithRandom)parameters; - sr = pWithR.Random; - parameters = pWithR.Parameters; - } - else - { - sr = new SecureRandom(); - } - - if (parameters is ParametersWithIV) - { - if (!forWrapping) - throw new ArgumentException("You should not supply an IV for unwrapping"); - - this.paramPlusIV = (ParametersWithIV)parameters; - this.iv = this.paramPlusIV.GetIV(); - this.parameters = this.paramPlusIV.Parameters; - - if (this.iv.Length != 8) - throw new ArgumentException("IV is not 8 octets"); - } - else - { - this.parameters = parameters; - - if (this.forWrapping) - { - // Hm, we have no IV but we want to wrap ?!? - // well, then we have to create our own IV. - this.iv = new byte[8]; - sr.NextBytes(iv); - this.paramPlusIV = new ParametersWithIV(this.parameters, this.iv); - } - } - } - - /** - * Method GetAlgorithmName - * - * @return - */ - public virtual string AlgorithmName - { - get { return "RC2"; } - } - - /** - * Method wrap - * - * @param in - * @param inOff - * @param inLen - * @return - */ - public virtual byte[] Wrap( - byte[] input, - int inOff, - int length) - { - if (!forWrapping) - { - throw new InvalidOperationException("Not initialized for wrapping"); - } - - int len = length + 1; - if ((len % 8) != 0) - { - len += 8 - (len % 8); - } - - byte [] keyToBeWrapped = new byte[len]; - - keyToBeWrapped[0] = (byte)length; - Array.Copy(input, inOff, keyToBeWrapped, 1, length); - - byte[] pad = new byte[keyToBeWrapped.Length - length - 1]; - - if (pad.Length > 0) - { - sr.NextBytes(pad); - Array.Copy(pad, 0, keyToBeWrapped, length + 1, pad.Length); - } - - // Compute the CMS Key Checksum, (section 5.6.1), call this CKS. - byte[] CKS = CalculateCmsKeyChecksum(keyToBeWrapped); - - // Let WKCKS = WK || CKS where || is concatenation. - byte[] WKCKS = new byte[keyToBeWrapped.Length + CKS.Length]; - - Array.Copy(keyToBeWrapped, 0, WKCKS, 0, keyToBeWrapped.Length); - Array.Copy(CKS, 0, WKCKS, keyToBeWrapped.Length, CKS.Length); - - // Encrypt WKCKS in CBC mode using KEK as the key and IV as the - // initialization vector. Call the results TEMP1. - byte [] TEMP1 = new byte[WKCKS.Length]; - - Array.Copy(WKCKS, 0, TEMP1, 0, WKCKS.Length); - - int noOfBlocks = WKCKS.Length / engine.GetBlockSize(); - int extraBytes = WKCKS.Length % engine.GetBlockSize(); - - if (extraBytes != 0) - { - throw new InvalidOperationException("Not multiple of block length"); - } - - engine.Init(true, paramPlusIV); - - for (int i = 0; i < noOfBlocks; i++) - { - int currentBytePos = i * engine.GetBlockSize(); - - engine.ProcessBlock(TEMP1, currentBytePos, TEMP1, currentBytePos); - } - - // Left TEMP2 = IV || TEMP1. - byte[] TEMP2 = new byte[this.iv.Length + TEMP1.Length]; - - Array.Copy(this.iv, 0, TEMP2, 0, this.iv.Length); - Array.Copy(TEMP1, 0, TEMP2, this.iv.Length, TEMP1.Length); - - // Reverse the order of the octets in TEMP2 and call the result TEMP3. - byte[] TEMP3 = new byte[TEMP2.Length]; - - for (int i = 0; i < TEMP2.Length; i++) - { - TEMP3[i] = TEMP2[TEMP2.Length - (i + 1)]; - } - - // Encrypt TEMP3 in CBC mode using the KEK and an initialization vector - // of 0x 4a dd a2 2c 79 e8 21 05. The resulting cipher text is the desired - // result. It is 40 octets long if a 168 bit key is being wrapped. - ParametersWithIV param2 = new ParametersWithIV(this.parameters, IV2); - - this.engine.Init(true, param2); - - for (int i = 0; i < noOfBlocks + 1; i++) - { - int currentBytePos = i * engine.GetBlockSize(); - - engine.ProcessBlock(TEMP3, currentBytePos, TEMP3, currentBytePos); - } - - return TEMP3; - } - - /** - * Method unwrap - * - * @param in - * @param inOff - * @param inLen - * @return - * @throws InvalidCipherTextException - */ - public virtual byte[] Unwrap( - byte[] input, - int inOff, - int length) - { - if (forWrapping) - { - throw new InvalidOperationException("Not set for unwrapping"); - } - - if (input == null) - { - throw new InvalidCipherTextException("Null pointer as ciphertext"); - } - - if (length % engine.GetBlockSize() != 0) - { - throw new InvalidCipherTextException("Ciphertext not multiple of " - + engine.GetBlockSize()); - } - - /* - // Check if the length of the cipher text is reasonable given the key - // type. It must be 40 bytes for a 168 bit key and either 32, 40, or - // 48 bytes for a 128, 192, or 256 bit key. If the length is not supported - // or inconsistent with the algorithm for which the key is intended, - // return error. - // - // we do not accept 168 bit keys. it has to be 192 bit. - int lengthA = (estimatedKeyLengthInBit / 8) + 16; - int lengthB = estimatedKeyLengthInBit % 8; - - if ((lengthA != keyToBeUnwrapped.Length) || (lengthB != 0)) { - throw new XMLSecurityException("empty"); - } - */ - - // Decrypt the cipher text with TRIPLedeS in CBC mode using the KEK - // and an initialization vector (IV) of 0x4adda22c79e82105. Call the output TEMP3. - ParametersWithIV param2 = new ParametersWithIV(this.parameters, IV2); - - this.engine.Init(false, param2); - - byte [] TEMP3 = new byte[length]; - - Array.Copy(input, inOff, TEMP3, 0, length); - - for (int i = 0; i < (TEMP3.Length / engine.GetBlockSize()); i++) - { - int currentBytePos = i * engine.GetBlockSize(); - - engine.ProcessBlock(TEMP3, currentBytePos, TEMP3, currentBytePos); - } - - // Reverse the order of the octets in TEMP3 and call the result TEMP2. - byte[] TEMP2 = new byte[TEMP3.Length]; - - for (int i = 0; i < TEMP3.Length; i++) - { - TEMP2[i] = TEMP3[TEMP3.Length - (i + 1)]; - } - - // Decompose TEMP2 into IV, the first 8 octets, and TEMP1, the remaining octets. - this.iv = new byte[8]; - - byte[] TEMP1 = new byte[TEMP2.Length - 8]; - - Array.Copy(TEMP2, 0, this.iv, 0, 8); - Array.Copy(TEMP2, 8, TEMP1, 0, TEMP2.Length - 8); - - // Decrypt TEMP1 using TRIPLedeS in CBC mode using the KEK and the IV - // found in the previous step. Call the result WKCKS. - this.paramPlusIV = new ParametersWithIV(this.parameters, this.iv); - - this.engine.Init(false, this.paramPlusIV); - - byte[] LCEKPADICV = new byte[TEMP1.Length]; - - Array.Copy(TEMP1, 0, LCEKPADICV, 0, TEMP1.Length); - - for (int i = 0; i < (LCEKPADICV.Length / engine.GetBlockSize()); i++) - { - int currentBytePos = i * engine.GetBlockSize(); - - engine.ProcessBlock(LCEKPADICV, currentBytePos, LCEKPADICV, currentBytePos); - } - - // Decompose LCEKPADICV. CKS is the last 8 octets and WK, the wrapped key, are - // those octets before the CKS. - byte[] result = new byte[LCEKPADICV.Length - 8]; - byte[] CKStoBeVerified = new byte[8]; - - Array.Copy(LCEKPADICV, 0, result, 0, LCEKPADICV.Length - 8); - Array.Copy(LCEKPADICV, LCEKPADICV.Length - 8, CKStoBeVerified, 0, 8); - - // Calculate a CMS Key Checksum, (section 5.6.1), over the WK and compare - // with the CKS extracted in the above step. If they are not equal, return error. - if (!CheckCmsKeyChecksum(result, CKStoBeVerified)) - { - throw new InvalidCipherTextException( - "Checksum inside ciphertext is corrupted"); - } - - if ((result.Length - ((result[0] & 0xff) + 1)) > 7) - { - throw new InvalidCipherTextException( - "too many pad bytes (" + (result.Length - ((result[0] & 0xff) + 1)) + ")"); - } - - // CEK is the wrapped key, now extracted for use in data decryption. - byte[] CEK = new byte[result[0]]; - Array.Copy(result, 1, CEK, 0, CEK.Length); - return CEK; - } - - /** - * Some key wrap algorithms make use of the Key Checksum defined - * in CMS [CMS-Algorithms]. This is used to provide an integrity - * check value for the key being wrapped. The algorithm is - * - * - Compute the 20 octet SHA-1 hash on the key being wrapped. - * - Use the first 8 octets of this hash as the checksum value. - * - * @param key - * @return - * @throws Exception - * @see http://www.w3.org/TR/xmlenc-core/#sec-CMSKeyChecksum - */ - private byte[] CalculateCmsKeyChecksum( - byte[] key) - { - sha1.BlockUpdate(key, 0, key.Length); - sha1.DoFinal(digest, 0); - - byte[] result = new byte[8]; - Array.Copy(digest, 0, result, 0, 8); - return result; - } - - /** - * @param key - * @param checksum - * @return - * @see http://www.w3.org/TR/xmlenc-core/#sec-CMSKeyChecksum - */ - private bool CheckCmsKeyChecksum( - byte[] key, - byte[] checksum) - { - return Arrays.ConstantTimeAreEqual(CalculateCmsKeyChecksum(key), checksum); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/RC4Engine.cs b/bc-sharp-crypto/src/crypto/engines/RC4Engine.cs deleted file mode 100644 index a515bb0..0000000 --- a/bc-sharp-crypto/src/crypto/engines/RC4Engine.cs +++ /dev/null @@ -1,139 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - public class RC4Engine - : IStreamCipher - { - private readonly static int STATE_LENGTH = 256; - - /* - * variables to hold the state of the RC4 engine - * during encryption and decryption - */ - - private byte[] engineState; - private int x; - private int y; - private byte[] workingKey; - - /** - * initialise a RC4 cipher. - * - * @param forEncryption whether or not we are for encryption. - * @param parameters the parameters required to set up the cipher. - * @exception ArgumentException if the parameters argument is - * inappropriate. - */ - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - if (parameters is KeyParameter) - { - /* - * RC4 encryption and decryption is completely - * symmetrical, so the 'forEncryption' is - * irrelevant. - */ - workingKey = ((KeyParameter)parameters).GetKey(); - SetKey(workingKey); - - return; - } - - throw new ArgumentException("invalid parameter passed to RC4 init - " + Platform.GetTypeName(parameters)); - } - - public virtual string AlgorithmName - { - get { return "RC4"; } - } - - public virtual byte ReturnByte( - byte input) - { - x = (x + 1) & 0xff; - y = (engineState[x] + y) & 0xff; - - // swap - byte tmp = engineState[x]; - engineState[x] = engineState[y]; - engineState[y] = tmp; - - // xor - return (byte)(input ^ engineState[(engineState[x] + engineState[y]) & 0xff]); - } - - public virtual void ProcessBytes( - byte[] input, - int inOff, - int length, - byte[] output, - int outOff) - { - Check.DataLength(input, inOff, length, "input buffer too short"); - Check.OutputLength(output, outOff, length, "output buffer too short"); - - for (int i = 0; i < length ; i++) - { - x = (x + 1) & 0xff; - y = (engineState[x] + y) & 0xff; - - // swap - byte tmp = engineState[x]; - engineState[x] = engineState[y]; - engineState[y] = tmp; - - // xor - output[i+outOff] = (byte)(input[i + inOff] - ^ engineState[(engineState[x] + engineState[y]) & 0xff]); - } - } - - public virtual void Reset() - { - SetKey(workingKey); - } - - // Private implementation - - private void SetKey( - byte[] keyBytes) - { - workingKey = keyBytes; - - // System.out.println("the key length is ; "+ workingKey.Length); - - x = 0; - y = 0; - - if (engineState == null) - { - engineState = new byte[STATE_LENGTH]; - } - - // reset the state of the engine - for (int i=0; i < STATE_LENGTH; i++) - { - engineState[i] = (byte)i; - } - - int i1 = 0; - int i2 = 0; - - for (int i=0; i < STATE_LENGTH; i++) - { - i2 = ((keyBytes[i1] & 0xff) + engineState[i] + i2) & 0xff; - // do the byte-swap inline - byte tmp = engineState[i]; - engineState[i] = engineState[i2]; - engineState[i2] = tmp; - i1 = (i1+1) % keyBytes.Length; - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/RC532Engine.cs b/bc-sharp-crypto/src/crypto/engines/RC532Engine.cs deleted file mode 100644 index d1c29e6..0000000 --- a/bc-sharp-crypto/src/crypto/engines/RC532Engine.cs +++ /dev/null @@ -1,294 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * The specification for RC5 came from the RC5 Encryption Algorithm - * publication in RSA CryptoBytes, Spring of 1995. - * http://www.rsasecurity.com/rsalabs/cryptobytes. - *

- * This implementation has a word size of 32 bits.

- */ - public class RC532Engine - : IBlockCipher - { - /* - * the number of rounds to perform - */ - private int _noRounds; - - /* - * the expanded key array of size 2*(rounds + 1) - */ - private int [] _S; - - /* - * our "magic constants" for 32 32 - * - * Pw = Odd((e-2) * 2^wordsize) - * Qw = Odd((o-2) * 2^wordsize) - * - * where e is the base of natural logarithms (2.718281828...) - * and o is the golden ratio (1.61803398...) - */ - private static readonly int P32 = unchecked((int) 0xb7e15163); - private static readonly int Q32 = unchecked((int) 0x9e3779b9); - - private bool forEncryption; - - /** - * Create an instance of the RC5 encryption algorithm - * and set some defaults - */ - public RC532Engine() - { - _noRounds = 12; // the default -// _S = null; - } - - public virtual string AlgorithmName - { - get { return "RC5-32"; } - } - - public virtual bool IsPartialBlockOkay - { - get { return false; } - } - - public virtual int GetBlockSize() - { - return 2 * 4; - } - - /** - * initialise a RC5-32 cipher. - * - * @param forEncryption whether or not we are for encryption. - * @param parameters the parameters required to set up the cipher. - * @exception ArgumentException if the parameters argument is - * inappropriate. - */ - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - if (typeof(RC5Parameters).IsInstanceOfType(parameters)) - { - RC5Parameters p = (RC5Parameters)parameters; - - _noRounds = p.Rounds; - - SetKey(p.GetKey()); - } - else if (typeof(KeyParameter).IsInstanceOfType(parameters)) - { - KeyParameter p = (KeyParameter)parameters; - - SetKey(p.GetKey()); - } - else - { - throw new ArgumentException("invalid parameter passed to RC532 init - " + Platform.GetTypeName(parameters)); - } - - this.forEncryption = forEncryption; - } - - public virtual int ProcessBlock( - byte[] input, - int inOff, - byte[] output, - int outOff) - { - return (forEncryption) - ? EncryptBlock(input, inOff, output, outOff) - : DecryptBlock(input, inOff, output, outOff); - } - - public virtual void Reset() - { - } - - /** - * Re-key the cipher. - * - * @param key the key to be used - */ - private void SetKey( - byte[] key) - { - // - // KEY EXPANSION: - // - // There are 3 phases to the key expansion. - // - // Phase 1: - // Copy the secret key K[0...b-1] into an array L[0..c-1] of - // c = ceil(b/u), where u = 32/8 in little-endian order. - // In other words, we fill up L using u consecutive key bytes - // of K. Any unfilled byte positions in L are zeroed. In the - // case that b = c = 0, set c = 1 and L[0] = 0. - // - int[] L = new int[(key.Length + (4 - 1)) / 4]; - - for (int i = 0; i != key.Length; i++) - { - L[i / 4] += (key[i] & 0xff) << (8 * (i % 4)); - } - - // - // Phase 2: - // Initialize S to a particular fixed pseudo-random bit pattern - // using an arithmetic progression modulo 2^wordsize determined - // by the magic numbers, Pw & Qw. - // - _S = new int[2*(_noRounds + 1)]; - - _S[0] = P32; - for (int i=1; i < _S.Length; i++) - { - _S[i] = (_S[i-1] + Q32); - } - - // - // Phase 3: - // Mix in the user's secret key in 3 passes over the arrays S & L. - // The max of the arrays sizes is used as the loop control - // - int iter; - - if (L.Length > _S.Length) - { - iter = 3 * L.Length; - } - else - { - iter = 3 * _S.Length; - } - - int A = 0, B = 0; - int ii = 0, jj = 0; - - for (int k = 0; k < iter; k++) - { - A = _S[ii] = RotateLeft(_S[ii] + A + B, 3); - B = L[jj] = RotateLeft( L[jj] + A + B, A+B); - ii = (ii+1) % _S.Length; - jj = (jj+1) % L.Length; - } - } - - /** - * Encrypt the given block starting at the given offset and place - * the result in the provided buffer starting at the given offset. - * - * @param in in byte buffer containing data to encrypt - * @param inOff offset into src buffer - * @param out out buffer where encrypted data is written - * @param outOff offset into out buffer - */ - private int EncryptBlock( - byte[] input, - int inOff, - byte[] outBytes, - int outOff) - { - int A = BytesToWord(input, inOff) + _S[0]; - int B = BytesToWord(input, inOff + 4) + _S[1]; - - for (int i = 1; i <= _noRounds; i++) - { - A = RotateLeft(A ^ B, B) + _S[2*i]; - B = RotateLeft(B ^ A, A) + _S[2*i+1]; - } - - WordToBytes(A, outBytes, outOff); - WordToBytes(B, outBytes, outOff + 4); - - return 2 * 4; - } - - private int DecryptBlock( - byte[] input, - int inOff, - byte[] outBytes, - int outOff) - { - int A = BytesToWord(input, inOff); - int B = BytesToWord(input, inOff + 4); - - for (int i = _noRounds; i >= 1; i--) - { - B = RotateRight(B - _S[2*i+1], A) ^ A; - A = RotateRight(A - _S[2*i], B) ^ B; - } - - WordToBytes(A - _S[0], outBytes, outOff); - WordToBytes(B - _S[1], outBytes, outOff + 4); - - return 2 * 4; - } - - - ////////////////////////////////////////////////////////////// - // - // PRIVATE Helper Methods - // - ////////////////////////////////////////////////////////////// - - /** - * Perform a left "spin" of the word. The rotation of the given - * word x is rotated left by y bits. - * Only the lg(32) low-order bits of y - * are used to determine the rotation amount. Here it is - * assumed that the wordsize used is a power of 2. - * - * @param x word to rotate - * @param y number of bits to rotate % 32 - */ - private int RotateLeft(int x, int y) { - return ((int) ( (uint) (x << (y & (32-1))) | - ((uint) x >> (32 - (y & (32-1)))) ) - ); - } - - /** - * Perform a right "spin" of the word. The rotation of the given - * word x is rotated left by y bits. - * Only the lg(32) low-order bits of y - * are used to determine the rotation amount. Here it is - * assumed that the wordsize used is a power of 2. - * - * @param x word to rotate - * @param y number of bits to rotate % 32 - */ - private int RotateRight(int x, int y) { - return ((int) ( ((uint) x >> (y & (32-1))) | - (uint) (x << (32 - (y & (32-1)))) ) - ); - } - - private int BytesToWord( - byte[] src, - int srcOff) - { - return (src[srcOff] & 0xff) | ((src[srcOff + 1] & 0xff) << 8) - | ((src[srcOff + 2] & 0xff) << 16) | ((src[srcOff + 3] & 0xff) << 24); - } - - private void WordToBytes( - int word, - byte[] dst, - int dstOff) - { - dst[dstOff] = (byte)word; - dst[dstOff + 1] = (byte)(word >> 8); - dst[dstOff + 2] = (byte)(word >> 16); - dst[dstOff + 3] = (byte)(word >> 24); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/RC564Engine.cs b/bc-sharp-crypto/src/crypto/engines/RC564Engine.cs deleted file mode 100644 index 097fd60..0000000 --- a/bc-sharp-crypto/src/crypto/engines/RC564Engine.cs +++ /dev/null @@ -1,295 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * The specification for RC5 came from the RC5 Encryption Algorithm - * publication in RSA CryptoBytes, Spring of 1995. - * http://www.rsasecurity.com/rsalabs/cryptobytes. - *

- * This implementation is set to work with a 64 bit word size.

- */ - public class RC564Engine - : IBlockCipher - { - private static readonly int wordSize = 64; - private static readonly int bytesPerWord = wordSize / 8; - - /* - * the number of rounds to perform - */ - private int _noRounds; - - /* - * the expanded key array of size 2*(rounds + 1) - */ - private long [] _S; - - /* - * our "magic constants" for wordSize 62 - * - * Pw = Odd((e-2) * 2^wordsize) - * Qw = Odd((o-2) * 2^wordsize) - * - * where e is the base of natural logarithms (2.718281828...) - * and o is the golden ratio (1.61803398...) - */ - private static readonly long P64 = unchecked( (long) 0xb7e151628aed2a6bL); - private static readonly long Q64 = unchecked( (long) 0x9e3779b97f4a7c15L); - - private bool forEncryption; - - /** - * Create an instance of the RC5 encryption algorithm - * and set some defaults - */ - public RC564Engine() - { - _noRounds = 12; -// _S = null; - } - - public virtual string AlgorithmName - { - get { return "RC5-64"; } - } - - public virtual bool IsPartialBlockOkay - { - get { return false; } - } - - public virtual int GetBlockSize() - { - return 2 * bytesPerWord; - } - - /** - * initialise a RC5-64 cipher. - * - * @param forEncryption whether or not we are for encryption. - * @param parameters the parameters required to set up the cipher. - * @exception ArgumentException if the parameters argument is - * inappropriate. - */ - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - if (!(typeof(RC5Parameters).IsInstanceOfType(parameters))) - { - throw new ArgumentException("invalid parameter passed to RC564 init - " + Platform.GetTypeName(parameters)); - } - - RC5Parameters p = (RC5Parameters)parameters; - - this.forEncryption = forEncryption; - - _noRounds = p.Rounds; - - SetKey(p.GetKey()); - } - - public virtual int ProcessBlock( - byte[] input, - int inOff, - byte[] output, - int outOff) - { - return (forEncryption) ? EncryptBlock(input, inOff, output, outOff) - : DecryptBlock(input, inOff, output, outOff); - } - - public virtual void Reset() - { - } - - /** - * Re-key the cipher. - * - * @param key the key to be used - */ - private void SetKey( - byte[] key) - { - // - // KEY EXPANSION: - // - // There are 3 phases to the key expansion. - // - // Phase 1: - // Copy the secret key K[0...b-1] into an array L[0..c-1] of - // c = ceil(b/u), where u = wordSize/8 in little-endian order. - // In other words, we fill up L using u consecutive key bytes - // of K. Any unfilled byte positions in L are zeroed. In the - // case that b = c = 0, set c = 1 and L[0] = 0. - // - long[] L = new long[(key.Length + (bytesPerWord - 1)) / bytesPerWord]; - - for (int i = 0; i != key.Length; i++) - { - L[i / bytesPerWord] += (long)(key[i] & 0xff) << (8 * (i % bytesPerWord)); - } - - // - // Phase 2: - // Initialize S to a particular fixed pseudo-random bit pattern - // using an arithmetic progression modulo 2^wordsize determined - // by the magic numbers, Pw & Qw. - // - _S = new long[2*(_noRounds + 1)]; - - _S[0] = P64; - for (int i=1; i < _S.Length; i++) - { - _S[i] = (_S[i-1] + Q64); - } - - // - // Phase 3: - // Mix in the user's secret key in 3 passes over the arrays S & L. - // The max of the arrays sizes is used as the loop control - // - int iter; - - if (L.Length > _S.Length) - { - iter = 3 * L.Length; - } - else - { - iter = 3 * _S.Length; - } - - long A = 0, B = 0; - int ii = 0, jj = 0; - - for (int k = 0; k < iter; k++) - { - A = _S[ii] = RotateLeft(_S[ii] + A + B, 3); - B = L[jj] = RotateLeft( L[jj] + A + B, A+B); - ii = (ii+1) % _S.Length; - jj = (jj+1) % L.Length; - } - } - - /** - * Encrypt the given block starting at the given offset and place - * the result in the provided buffer starting at the given offset. - * - * @param in in byte buffer containing data to encrypt - * @param inOff offset into src buffer - * @param out out buffer where encrypted data is written - * @param outOff offset into out buffer - */ - private int EncryptBlock( - byte[] input, - int inOff, - byte[] outBytes, - int outOff) - { - long A = BytesToWord(input, inOff) + _S[0]; - long B = BytesToWord(input, inOff + bytesPerWord) + _S[1]; - - for (int i = 1; i <= _noRounds; i++) - { - A = RotateLeft(A ^ B, B) + _S[2*i]; - B = RotateLeft(B ^ A, A) + _S[2*i+1]; - } - - WordToBytes(A, outBytes, outOff); - WordToBytes(B, outBytes, outOff + bytesPerWord); - - return 2 * bytesPerWord; - } - - private int DecryptBlock( - byte[] input, - int inOff, - byte[] outBytes, - int outOff) - { - long A = BytesToWord(input, inOff); - long B = BytesToWord(input, inOff + bytesPerWord); - - for (int i = _noRounds; i >= 1; i--) - { - B = RotateRight(B - _S[2*i+1], A) ^ A; - A = RotateRight(A - _S[2*i], B) ^ B; - } - - WordToBytes(A - _S[0], outBytes, outOff); - WordToBytes(B - _S[1], outBytes, outOff + bytesPerWord); - - return 2 * bytesPerWord; - } - - - ////////////////////////////////////////////////////////////// - // - // PRIVATE Helper Methods - // - ////////////////////////////////////////////////////////////// - - /** - * Perform a left "spin" of the word. The rotation of the given - * word x is rotated left by y bits. - * Only the lg(wordSize) low-order bits of y - * are used to determine the rotation amount. Here it is - * assumed that the wordsize used is a power of 2. - * - * @param x word to rotate - * @param y number of bits to rotate % wordSize - */ - private long RotateLeft(long x, long y) { - return ((long) ( (ulong) (x << (int) (y & (wordSize-1))) | - ((ulong) x >> (int) (wordSize - (y & (wordSize-1))))) - ); - } - - /** - * Perform a right "spin" of the word. The rotation of the given - * word x is rotated left by y bits. - * Only the lg(wordSize) low-order bits of y - * are used to determine the rotation amount. Here it is - * assumed that the wordsize used is a power of 2. - * - * @param x word to rotate - * @param y number of bits to rotate % wordSize - */ - private long RotateRight(long x, long y) { - return ((long) ( ((ulong) x >> (int) (y & (wordSize-1))) | - (ulong) (x << (int) (wordSize - (y & (wordSize-1))))) - ); - } - - private long BytesToWord( - byte[] src, - int srcOff) - { - long word = 0; - - for (int i = bytesPerWord - 1; i >= 0; i--) - { - word = (word << 8) + (src[i + srcOff] & 0xff); - } - - return word; - } - - private void WordToBytes( - long word, - byte[] dst, - int dstOff) - { - for (int i = 0; i < bytesPerWord; i++) - { - dst[i + dstOff] = (byte)word; - word = (long) ((ulong) word >> 8); - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/RC6Engine.cs b/bc-sharp-crypto/src/crypto/engines/RC6Engine.cs deleted file mode 100644 index 9aeb1e7..0000000 --- a/bc-sharp-crypto/src/crypto/engines/RC6Engine.cs +++ /dev/null @@ -1,361 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * An RC6 engine. - */ - public class RC6Engine - : IBlockCipher - { - private static readonly int wordSize = 32; - private static readonly int bytesPerWord = wordSize / 8; - - /* - * the number of rounds to perform - */ - private static readonly int _noRounds = 20; - - /* - * the expanded key array of size 2*(rounds + 1) - */ - private int [] _S; - - /* - * our "magic constants" for wordSize 32 - * - * Pw = Odd((e-2) * 2^wordsize) - * Qw = Odd((o-2) * 2^wordsize) - * - * where e is the base of natural logarithms (2.718281828...) - * and o is the golden ratio (1.61803398...) - */ - private static readonly int P32 = unchecked((int) 0xb7e15163); - private static readonly int Q32 = unchecked((int) 0x9e3779b9); - - private static readonly int LGW = 5; // log2(32) - - private bool forEncryption; - - /** - * Create an instance of the RC6 encryption algorithm - * and set some defaults - */ - public RC6Engine() - { -// _S = null; - } - - public virtual string AlgorithmName - { - get { return "RC6"; } - } - - public virtual bool IsPartialBlockOkay - { - get { return false; } - } - - public virtual int GetBlockSize() - { - return 4 * bytesPerWord; - } - - /** - * initialise a RC5-32 cipher. - * - * @param forEncryption whether or not we are for encryption. - * @param parameters the parameters required to set up the cipher. - * @exception ArgumentException if the parameters argument is - * inappropriate. - */ - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - if (!(parameters is KeyParameter)) - throw new ArgumentException("invalid parameter passed to RC6 init - " + Platform.GetTypeName(parameters)); - - this.forEncryption = forEncryption; - - KeyParameter p = (KeyParameter)parameters; - SetKey(p.GetKey()); - } - - public virtual int ProcessBlock( - byte[] input, - int inOff, - byte[] output, - int outOff) - { - int blockSize = GetBlockSize(); - if (_S == null) - throw new InvalidOperationException("RC6 engine not initialised"); - - Check.DataLength(input, inOff, blockSize, "input buffer too short"); - Check.OutputLength(output, outOff, blockSize, "output buffer too short"); - - return (forEncryption) - ? EncryptBlock(input, inOff, output, outOff) - : DecryptBlock(input, inOff, output, outOff); - } - - public virtual void Reset() - { - } - - /** - * Re-key the cipher. - * - * @param inKey the key to be used - */ - private void SetKey( - byte[] key) - { - // - // KEY EXPANSION: - // - // There are 3 phases to the key expansion. - // - // Phase 1: - // Copy the secret key K[0...b-1] into an array L[0..c-1] of - // c = ceil(b/u), where u = wordSize/8 in little-endian order. - // In other words, we fill up L using u consecutive key bytes - // of K. Any unfilled byte positions in L are zeroed. In the - // case that b = c = 0, set c = 1 and L[0] = 0. - // - // compute number of dwords - int c = (key.Length + (bytesPerWord - 1)) / bytesPerWord; - if (c == 0) - { - c = 1; - } - int[] L = new int[(key.Length + bytesPerWord - 1) / bytesPerWord]; - - // load all key bytes into array of key dwords - for (int i = key.Length - 1; i >= 0; i--) - { - L[i / bytesPerWord] = (L[i / bytesPerWord] << 8) + (key[i] & 0xff); - } - - // - // Phase 2: - // Key schedule is placed in a array of 2+2*ROUNDS+2 = 44 dwords. - // Initialize S to a particular fixed pseudo-random bit pattern - // using an arithmetic progression modulo 2^wordsize determined - // by the magic numbers, Pw & Qw. - // - _S = new int[2+2*_noRounds+2]; - - _S[0] = P32; - for (int i=1; i < _S.Length; i++) - { - _S[i] = (_S[i-1] + Q32); - } - - // - // Phase 3: - // Mix in the user's secret key in 3 passes over the arrays S & L. - // The max of the arrays sizes is used as the loop control - // - int iter; - - if (L.Length > _S.Length) - { - iter = 3 * L.Length; - } - else - { - iter = 3 * _S.Length; - } - - int A = 0; - int B = 0; - int ii = 0, jj = 0; - - for (int k = 0; k < iter; k++) - { - A = _S[ii] = RotateLeft(_S[ii] + A + B, 3); - B = L[jj] = RotateLeft( L[jj] + A + B, A+B); - ii = (ii+1) % _S.Length; - jj = (jj+1) % L.Length; - } - } - - private int EncryptBlock( - byte[] input, - int inOff, - byte[] outBytes, - int outOff) - { - // load A,B,C and D registers from in. - int A = BytesToWord(input, inOff); - int B = BytesToWord(input, inOff + bytesPerWord); - int C = BytesToWord(input, inOff + bytesPerWord*2); - int D = BytesToWord(input, inOff + bytesPerWord*3); - - // Do pseudo-round #0: pre-whitening of B and D - B += _S[0]; - D += _S[1]; - - // perform round #1,#2 ... #ROUNDS of encryption - for (int i = 1; i <= _noRounds; i++) - { - int t = 0,u = 0; - - t = B*(2*B+1); - t = RotateLeft(t,5); - - u = D*(2*D+1); - u = RotateLeft(u,5); - - A ^= t; - A = RotateLeft(A,u); - A += _S[2*i]; - - C ^= u; - C = RotateLeft(C,t); - C += _S[2*i+1]; - - int temp = A; - A = B; - B = C; - C = D; - D = temp; - } - // do pseudo-round #(ROUNDS+1) : post-whitening of A and C - A += _S[2*_noRounds+2]; - C += _S[2*_noRounds+3]; - - // store A, B, C and D registers to out - WordToBytes(A, outBytes, outOff); - WordToBytes(B, outBytes, outOff + bytesPerWord); - WordToBytes(C, outBytes, outOff + bytesPerWord*2); - WordToBytes(D, outBytes, outOff + bytesPerWord*3); - - return 4 * bytesPerWord; - } - - private int DecryptBlock( - byte[] input, - int inOff, - byte[] outBytes, - int outOff) - { - // load A,B,C and D registers from out. - int A = BytesToWord(input, inOff); - int B = BytesToWord(input, inOff + bytesPerWord); - int C = BytesToWord(input, inOff + bytesPerWord*2); - int D = BytesToWord(input, inOff + bytesPerWord*3); - - // Undo pseudo-round #(ROUNDS+1) : post whitening of A and C - C -= _S[2*_noRounds+3]; - A -= _S[2*_noRounds+2]; - - // Undo round #ROUNDS, .., #2,#1 of encryption - for (int i = _noRounds; i >= 1; i--) - { - int t=0,u = 0; - - int temp = D; - D = C; - C = B; - B = A; - A = temp; - - t = B*(2*B+1); - t = RotateLeft(t, LGW); - - u = D*(2*D+1); - u = RotateLeft(u, LGW); - - C -= _S[2*i+1]; - C = RotateRight(C,t); - C ^= u; - - A -= _S[2*i]; - A = RotateRight(A,u); - A ^= t; - - } - // Undo pseudo-round #0: pre-whitening of B and D - D -= _S[1]; - B -= _S[0]; - - WordToBytes(A, outBytes, outOff); - WordToBytes(B, outBytes, outOff + bytesPerWord); - WordToBytes(C, outBytes, outOff + bytesPerWord*2); - WordToBytes(D, outBytes, outOff + bytesPerWord*3); - - return 4 * bytesPerWord; - } - - - ////////////////////////////////////////////////////////////// - // - // PRIVATE Helper Methods - // - ////////////////////////////////////////////////////////////// - - /** - * Perform a left "spin" of the word. The rotation of the given - * word x is rotated left by y bits. - * Only the lg(wordSize) low-order bits of y - * are used to determine the rotation amount. Here it is - * assumed that the wordsize used is a power of 2. - * - * @param x word to rotate - * @param y number of bits to rotate % wordSize - */ - private int RotateLeft(int x, int y) - { - return ((int)((uint)(x << (y & (wordSize-1))) - | ((uint) x >> (wordSize - (y & (wordSize-1)))))); - } - - /** - * Perform a right "spin" of the word. The rotation of the given - * word x is rotated left by y bits. - * Only the lg(wordSize) low-order bits of y - * are used to determine the rotation amount. Here it is - * assumed that the wordsize used is a power of 2. - * - * @param x word to rotate - * @param y number of bits to rotate % wordSize - */ - private int RotateRight(int x, int y) - { - return ((int)(((uint) x >> (y & (wordSize-1))) - | (uint)(x << (wordSize - (y & (wordSize-1)))))); - } - - private int BytesToWord( - byte[] src, - int srcOff) - { - int word = 0; - - for (int i = bytesPerWord - 1; i >= 0; i--) - { - word = (word << 8) + (src[i + srcOff] & 0xff); - } - - return word; - } - - private void WordToBytes( - int word, - byte[] dst, - int dstOff) - { - for (int i = 0; i < bytesPerWord; i++) - { - dst[i + dstOff] = (byte)word; - word = (int) ((uint) word >> 8); - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/RFC3211WrapEngine.cs b/bc-sharp-crypto/src/crypto/engines/RFC3211WrapEngine.cs deleted file mode 100644 index 4e3af52..0000000 --- a/bc-sharp-crypto/src/crypto/engines/RFC3211WrapEngine.cs +++ /dev/null @@ -1,168 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Modes; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * an implementation of the RFC 3211 Key Wrap - * Specification. - */ - public class Rfc3211WrapEngine - : IWrapper - { - private CbcBlockCipher engine; - private ParametersWithIV param; - private bool forWrapping; - private SecureRandom rand; - - public Rfc3211WrapEngine( - IBlockCipher engine) - { - this.engine = new CbcBlockCipher(engine); - } - - public virtual void Init( - bool forWrapping, - ICipherParameters param) - { - this.forWrapping = forWrapping; - - if (param is ParametersWithRandom) - { - ParametersWithRandom p = (ParametersWithRandom) param; - - this.rand = p.Random; - this.param = (ParametersWithIV) p.Parameters; - } - else - { - if (forWrapping) - { - rand = new SecureRandom(); - } - - this.param = (ParametersWithIV) param; - } - } - - public virtual string AlgorithmName - { - get { return engine.GetUnderlyingCipher().AlgorithmName + "/RFC3211Wrap"; } - } - - public virtual byte[] Wrap( - byte[] inBytes, - int inOff, - int inLen) - { - if (!forWrapping) - { - throw new InvalidOperationException("not set for wrapping"); - } - - engine.Init(true, param); - - int blockSize = engine.GetBlockSize(); - byte[] cekBlock; - - if (inLen + 4 < blockSize * 2) - { - cekBlock = new byte[blockSize * 2]; - } - else - { - cekBlock = new byte[(inLen + 4) % blockSize == 0 ? inLen + 4 : ((inLen + 4) / blockSize + 1) * blockSize]; - } - - cekBlock[0] = (byte)inLen; - cekBlock[1] = (byte)~inBytes[inOff]; - cekBlock[2] = (byte)~inBytes[inOff + 1]; - cekBlock[3] = (byte)~inBytes[inOff + 2]; - - Array.Copy(inBytes, inOff, cekBlock, 4, inLen); - - rand.NextBytes(cekBlock, inLen + 4, cekBlock.Length - inLen - 4); - - for (int i = 0; i < cekBlock.Length; i += blockSize) - { - engine.ProcessBlock(cekBlock, i, cekBlock, i); - } - - for (int i = 0; i < cekBlock.Length; i += blockSize) - { - engine.ProcessBlock(cekBlock, i, cekBlock, i); - } - - return cekBlock; - } - - public virtual byte[] Unwrap( - byte[] inBytes, - int inOff, - int inLen) - { - if (forWrapping) - { - throw new InvalidOperationException("not set for unwrapping"); - } - - int blockSize = engine.GetBlockSize(); - - if (inLen < 2 * blockSize) - { - throw new InvalidCipherTextException("input too short"); - } - - byte[] cekBlock = new byte[inLen]; - byte[] iv = new byte[blockSize]; - - Array.Copy(inBytes, inOff, cekBlock, 0, inLen); - Array.Copy(inBytes, inOff, iv, 0, iv.Length); - - engine.Init(false, new ParametersWithIV(param.Parameters, iv)); - - for (int i = blockSize; i < cekBlock.Length; i += blockSize) - { - engine.ProcessBlock(cekBlock, i, cekBlock, i); - } - - Array.Copy(cekBlock, cekBlock.Length - iv.Length, iv, 0, iv.Length); - - engine.Init(false, new ParametersWithIV(param.Parameters, iv)); - - engine.ProcessBlock(cekBlock, 0, cekBlock, 0); - - engine.Init(false, param); - - for (int i = 0; i < cekBlock.Length; i += blockSize) - { - engine.ProcessBlock(cekBlock, i, cekBlock, i); - } - - if ((cekBlock[0] & 0xff) > cekBlock.Length - 4) - { - throw new InvalidCipherTextException("wrapped key corrupted"); - } - - byte[] key = new byte[cekBlock[0] & 0xff]; - - Array.Copy(cekBlock, 4, key, 0, cekBlock[0]); - - // Note: Using constant time comparison - int nonEqual = 0; - for (int i = 0; i != 3; i++) - { - byte check = (byte)~cekBlock[1 + i]; - nonEqual |= (check ^ key[i]); - } - - if (nonEqual != 0) - throw new InvalidCipherTextException("wrapped key fails checksum"); - - return key; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/RFC3394WrapEngine.cs b/bc-sharp-crypto/src/crypto/engines/RFC3394WrapEngine.cs deleted file mode 100644 index 4bb0e21..0000000 --- a/bc-sharp-crypto/src/crypto/engines/RFC3394WrapEngine.cs +++ /dev/null @@ -1,178 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /// - /// An implementation of the AES Key Wrapper from the NIST Key Wrap - /// Specification as described in RFC 3394. - ///

- /// For further details see: http://www.ietf.org/rfc/rfc3394.txt - /// and http://csrc.nist.gov/encryption/kms/key-wrap.pdf. - /// - public class Rfc3394WrapEngine - : IWrapper - { - private readonly IBlockCipher engine; - - private KeyParameter param; - private bool forWrapping; - - private byte[] iv = - { - 0xa6, 0xa6, 0xa6, 0xa6, - 0xa6, 0xa6, 0xa6, 0xa6 - }; - - public Rfc3394WrapEngine( - IBlockCipher engine) - { - this.engine = engine; - } - - public virtual void Init( - bool forWrapping, - ICipherParameters parameters) - { - this.forWrapping = forWrapping; - - if (parameters is ParametersWithRandom) - { - parameters = ((ParametersWithRandom) parameters).Parameters; - } - - if (parameters is KeyParameter) - { - this.param = (KeyParameter) parameters; - } - else if (parameters is ParametersWithIV) - { - ParametersWithIV pIV = (ParametersWithIV) parameters; - byte[] iv = pIV.GetIV(); - - if (iv.Length != 8) - throw new ArgumentException("IV length not equal to 8", "parameters"); - - this.iv = iv; - this.param = (KeyParameter) pIV.Parameters; - } - else - { - // TODO Throw an exception for bad parameters? - } - } - - public virtual string AlgorithmName - { - get { return engine.AlgorithmName; } - } - - public virtual byte[] Wrap( - byte[] input, - int inOff, - int inLen) - { - if (!forWrapping) - { - throw new InvalidOperationException("not set for wrapping"); - } - - int n = inLen / 8; - - if ((n * 8) != inLen) - { - throw new DataLengthException("wrap data must be a multiple of 8 bytes"); - } - - byte[] block = new byte[inLen + iv.Length]; - byte[] buf = new byte[8 + iv.Length]; - - Array.Copy(iv, 0, block, 0, iv.Length); - Array.Copy(input, inOff, block, iv.Length, inLen); - - engine.Init(true, param); - - for (int j = 0; j != 6; j++) - { - for (int i = 1; i <= n; i++) - { - Array.Copy(block, 0, buf, 0, iv.Length); - Array.Copy(block, 8 * i, buf, iv.Length, 8); - engine.ProcessBlock(buf, 0, buf, 0); - - int t = n * j + i; - for (int k = 1; t != 0; k++) - { - byte v = (byte)t; - - buf[iv.Length - k] ^= v; - t = (int) ((uint)t >> 8); - } - - Array.Copy(buf, 0, block, 0, 8); - Array.Copy(buf, 8, block, 8 * i, 8); - } - } - - return block; - } - - public virtual byte[] Unwrap( - byte[] input, - int inOff, - int inLen) - { - if (forWrapping) - { - throw new InvalidOperationException("not set for unwrapping"); - } - - int n = inLen / 8; - - if ((n * 8) != inLen) - { - throw new InvalidCipherTextException("unwrap data must be a multiple of 8 bytes"); - } - - byte[] block = new byte[inLen - iv.Length]; - byte[] a = new byte[iv.Length]; - byte[] buf = new byte[8 + iv.Length]; - - Array.Copy(input, inOff, a, 0, iv.Length); - Array.Copy(input, inOff + iv.Length, block, 0, inLen - iv.Length); - - engine.Init(false, param); - - n = n - 1; - - for (int j = 5; j >= 0; j--) - { - for (int i = n; i >= 1; i--) - { - Array.Copy(a, 0, buf, 0, iv.Length); - Array.Copy(block, 8 * (i - 1), buf, iv.Length, 8); - - int t = n * j + i; - for (int k = 1; t != 0; k++) - { - byte v = (byte)t; - - buf[iv.Length - k] ^= v; - t = (int) ((uint)t >> 8); - } - - engine.ProcessBlock(buf, 0, buf, 0); - Array.Copy(buf, 0, a, 0, 8); - Array.Copy(buf, 8, block, 8 * (i - 1), 8); - } - } - - if (!Arrays.ConstantTimeAreEqual(a, iv)) - throw new InvalidCipherTextException("checksum failed"); - - return block; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/RSABlindedEngine.cs b/bc-sharp-crypto/src/crypto/engines/RSABlindedEngine.cs deleted file mode 100644 index f95f145..0000000 --- a/bc-sharp-crypto/src/crypto/engines/RSABlindedEngine.cs +++ /dev/null @@ -1,128 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * this does your basic RSA algorithm with blinding - */ - public class RsaBlindedEngine - : IAsymmetricBlockCipher - { - private readonly RsaCoreEngine core = new RsaCoreEngine(); - private RsaKeyParameters key; - private SecureRandom random; - - public virtual string AlgorithmName - { - get { return "RSA"; } - } - - /** - * initialise the RSA engine. - * - * @param forEncryption true if we are encrypting, false otherwise. - * @param param the necessary RSA key parameters. - */ - public virtual void Init( - bool forEncryption, - ICipherParameters param) - { - core.Init(forEncryption, param); - - if (param is ParametersWithRandom) - { - ParametersWithRandom rParam = (ParametersWithRandom)param; - - key = (RsaKeyParameters)rParam.Parameters; - random = rParam.Random; - } - else - { - key = (RsaKeyParameters)param; - random = new SecureRandom(); - } - } - - /** - * Return the maximum size for an input block to this engine. - * For RSA this is always one byte less than the key size on - * encryption, and the same length as the key size on decryption. - * - * @return maximum size for an input block. - */ - public virtual int GetInputBlockSize() - { - return core.GetInputBlockSize(); - } - - /** - * Return the maximum size for an output block to this engine. - * For RSA this is always one byte less than the key size on - * decryption, and the same length as the key size on encryption. - * - * @return maximum size for an output block. - */ - public virtual int GetOutputBlockSize() - { - return core.GetOutputBlockSize(); - } - - /** - * Process a single block using the basic RSA algorithm. - * - * @param inBuf the input array. - * @param inOff the offset into the input buffer where the data starts. - * @param inLen the length of the data to be processed. - * @return the result of the RSA process. - * @exception DataLengthException the input block is too large. - */ - public virtual byte[] ProcessBlock( - byte[] inBuf, - int inOff, - int inLen) - { - if (key == null) - throw new InvalidOperationException("RSA engine not initialised"); - - BigInteger input = core.ConvertInput(inBuf, inOff, inLen); - - BigInteger result; - if (key is RsaPrivateCrtKeyParameters) - { - RsaPrivateCrtKeyParameters k = (RsaPrivateCrtKeyParameters)key; - BigInteger e = k.PublicExponent; - if (e != null) // can't do blinding without a public exponent - { - BigInteger m = k.Modulus; - BigInteger r = BigIntegers.CreateRandomInRange( - BigInteger.One, m.Subtract(BigInteger.One), random); - - BigInteger blindedInput = r.ModPow(e, m).Multiply(input).Mod(m); - BigInteger blindedResult = core.ProcessBlock(blindedInput); - - BigInteger rInv = r.ModInverse(m); - result = blindedResult.Multiply(rInv).Mod(m); - - // defence against Arjen Lenstras CRT attack - if (!input.Equals(result.ModPow(e, m))) - throw new InvalidOperationException("RSA engine faulty decryption/signing detected"); - } - else - { - result = core.ProcessBlock(input); - } - } - else - { - result = core.ProcessBlock(input); - } - - return core.ConvertOutput(result); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/RSABlindingEngine.cs b/bc-sharp-crypto/src/crypto/engines/RSABlindingEngine.cs deleted file mode 100644 index c636627..0000000 --- a/bc-sharp-crypto/src/crypto/engines/RSABlindingEngine.cs +++ /dev/null @@ -1,139 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * This does your basic RSA Chaum's blinding and unblinding as outlined in - * "Handbook of Applied Cryptography", page 475. You need to use this if you are - * trying to get another party to generate signatures without them being aware - * of the message they are signing. - */ - public class RsaBlindingEngine - : IAsymmetricBlockCipher - { - private readonly RsaCoreEngine core = new RsaCoreEngine(); - - private RsaKeyParameters key; - private BigInteger blindingFactor; - - private bool forEncryption; - - public virtual string AlgorithmName - { - get { return "RSA"; } - } - - /** - * Initialise the blinding engine. - * - * @param forEncryption true if we are encrypting (blinding), false otherwise. - * @param param the necessary RSA key parameters. - */ - public virtual void Init( - bool forEncryption, - ICipherParameters param) - { - RsaBlindingParameters p; - - if (param is ParametersWithRandom) - { - ParametersWithRandom rParam = (ParametersWithRandom)param; - - p = (RsaBlindingParameters)rParam.Parameters; - } - else - { - p = (RsaBlindingParameters)param; - } - - core.Init(forEncryption, p.PublicKey); - - this.forEncryption = forEncryption; - this.key = p.PublicKey; - this.blindingFactor = p.BlindingFactor; - } - - /** - * Return the maximum size for an input block to this engine. - * For RSA this is always one byte less than the key size on - * encryption, and the same length as the key size on decryption. - * - * @return maximum size for an input block. - */ - public virtual int GetInputBlockSize() - { - return core.GetInputBlockSize(); - } - - /** - * Return the maximum size for an output block to this engine. - * For RSA this is always one byte less than the key size on - * decryption, and the same length as the key size on encryption. - * - * @return maximum size for an output block. - */ - public virtual int GetOutputBlockSize() - { - return core.GetOutputBlockSize(); - } - - /** - * Process a single block using the RSA blinding algorithm. - * - * @param in the input array. - * @param inOff the offset into the input buffer where the data starts. - * @param inLen the length of the data to be processed. - * @return the result of the RSA process. - * @throws DataLengthException the input block is too large. - */ - public virtual byte[] ProcessBlock( - byte[] inBuf, - int inOff, - int inLen) - { - BigInteger msg = core.ConvertInput(inBuf, inOff, inLen); - - if (forEncryption) - { - msg = BlindMessage(msg); - } - else - { - msg = UnblindMessage(msg); - } - - return core.ConvertOutput(msg); - } - - /* - * Blind message with the blind factor. - */ - private BigInteger BlindMessage( - BigInteger msg) - { - BigInteger blindMsg = blindingFactor; - blindMsg = msg.Multiply(blindMsg.ModPow(key.Exponent, key.Modulus)); - blindMsg = blindMsg.Mod(key.Modulus); - - return blindMsg; - } - - /* - * Unblind the message blinded with the blind factor. - */ - private BigInteger UnblindMessage( - BigInteger blindedMsg) - { - BigInteger m = key.Modulus; - BigInteger msg = blindedMsg; - BigInteger blindFactorInverse = blindingFactor.ModInverse(m); - msg = msg.Multiply(blindFactorInverse); - msg = msg.Mod(m); - - return msg; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/RSACoreEngine.cs b/bc-sharp-crypto/src/crypto/engines/RSACoreEngine.cs deleted file mode 100644 index fd44e3c..0000000 --- a/bc-sharp-crypto/src/crypto/engines/RSACoreEngine.cs +++ /dev/null @@ -1,156 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * this does your basic RSA algorithm. - */ - class RsaCoreEngine - { - private RsaKeyParameters key; - private bool forEncryption; - private int bitSize; - - /** - * initialise the RSA engine. - * - * @param forEncryption true if we are encrypting, false otherwise. - * @param param the necessary RSA key parameters. - */ - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - if (parameters is ParametersWithRandom) - { - parameters = ((ParametersWithRandom) parameters).Parameters; - } - - if (!(parameters is RsaKeyParameters)) - throw new InvalidKeyException("Not an RSA key"); - - this.key = (RsaKeyParameters) parameters; - this.forEncryption = forEncryption; - this.bitSize = key.Modulus.BitLength; - } - - /** - * Return the maximum size for an input block to this engine. - * For RSA this is always one byte less than the key size on - * encryption, and the same length as the key size on decryption. - * - * @return maximum size for an input block. - */ - public virtual int GetInputBlockSize() - { - if (forEncryption) - { - return (bitSize - 1) / 8; - } - - return (bitSize + 7) / 8; - } - - /** - * Return the maximum size for an output block to this engine. - * For RSA this is always one byte less than the key size on - * decryption, and the same length as the key size on encryption. - * - * @return maximum size for an output block. - */ - public virtual int GetOutputBlockSize() - { - if (forEncryption) - { - return (bitSize + 7) / 8; - } - - return (bitSize - 1) / 8; - } - - public virtual BigInteger ConvertInput( - byte[] inBuf, - int inOff, - int inLen) - { - int maxLength = (bitSize + 7) / 8; - - if (inLen > maxLength) - throw new DataLengthException("input too large for RSA cipher."); - - BigInteger input = new BigInteger(1, inBuf, inOff, inLen); - - if (input.CompareTo(key.Modulus) >= 0) - throw new DataLengthException("input too large for RSA cipher."); - - return input; - } - - public virtual byte[] ConvertOutput( - BigInteger result) - { - byte[] output = result.ToByteArrayUnsigned(); - - if (forEncryption) - { - int outSize = GetOutputBlockSize(); - - // TODO To avoid this, create version of BigInteger.ToByteArray that - // writes to an existing array - if (output.Length < outSize) // have ended up with less bytes than normal, lengthen - { - byte[] tmp = new byte[outSize]; - output.CopyTo(tmp, tmp.Length - output.Length); - output = tmp; - } - } - - return output; - } - - public virtual BigInteger ProcessBlock( - BigInteger input) - { - if (key is RsaPrivateCrtKeyParameters) - { - // - // we have the extra factors, use the Chinese Remainder Theorem - the author - // wishes to express his thanks to Dirk Bonekaemper at rtsffm.com for - // advice regarding the expression of this. - // - RsaPrivateCrtKeyParameters crtKey = (RsaPrivateCrtKeyParameters)key; - - BigInteger p = crtKey.P; - BigInteger q = crtKey.Q; - BigInteger dP = crtKey.DP; - BigInteger dQ = crtKey.DQ; - BigInteger qInv = crtKey.QInv; - - BigInteger mP, mQ, h, m; - - // mP = ((input Mod p) ^ dP)) Mod p - mP = (input.Remainder(p)).ModPow(dP, p); - - // mQ = ((input Mod q) ^ dQ)) Mod q - mQ = (input.Remainder(q)).ModPow(dQ, q); - - // h = qInv * (mP - mQ) Mod p - h = mP.Subtract(mQ); - h = h.Multiply(qInv); - h = h.Mod(p); // Mod (in Java) returns the positive residual - - // m = h * q + mQ - m = h.Multiply(q); - m = m.Add(mQ); - - return m; - } - - return input.ModPow(key.Exponent, key.Modulus); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/RijndaelEngine.cs b/bc-sharp-crypto/src/crypto/engines/RijndaelEngine.cs deleted file mode 100644 index 7025cb5..0000000 --- a/bc-sharp-crypto/src/crypto/engines/RijndaelEngine.cs +++ /dev/null @@ -1,738 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * an implementation of Rijndael, based on the documentation and reference implementation - * by Paulo Barreto, Vincent Rijmen, for v2.0 August '99. - *

- * Note: this implementation is based on information prior to readonly NIST publication. - *

- */ - public class RijndaelEngine - : IBlockCipher - { - private static readonly int MAXROUNDS = 14; - - private static readonly int MAXKC = (256/4); - - private static readonly byte[] Logtable = - { - 0, 0, 25, 1, 50, 2, 26, 198, - 75, 199, 27, 104, 51, 238, 223, 3, - 100, 4, 224, 14, 52, 141, 129, 239, - 76, 113, 8, 200, 248, 105, 28, 193, - 125, 194, 29, 181, 249, 185, 39, 106, - 77, 228, 166, 114, 154, 201, 9, 120, - 101, 47, 138, 5, 33, 15, 225, 36, - 18, 240, 130, 69, 53, 147, 218, 142, - 150, 143, 219, 189, 54, 208, 206, 148, - 19, 92, 210, 241, 64, 70, 131, 56, - 102, 221, 253, 48, 191, 6, 139, 98, - 179, 37, 226, 152, 34, 136, 145, 16, - 126, 110, 72, 195, 163, 182, 30, 66, - 58, 107, 40, 84, 250, 133, 61, 186, - 43, 121, 10, 21, 155, 159, 94, 202, - 78, 212, 172, 229, 243, 115, 167, 87, - 175, 88, 168, 80, 244, 234, 214, 116, - 79, 174, 233, 213, 231, 230, 173, 232, - 44, 215, 117, 122, 235, 22, 11, 245, - 89, 203, 95, 176, 156, 169, 81, 160, - 127, 12, 246, 111, 23, 196, 73, 236, - 216, 67, 31, 45, 164, 118, 123, 183, - 204, 187, 62, 90, 251, 96, 177, 134, - 59, 82, 161, 108, 170, 85, 41, 157, - 151, 178, 135, 144, 97, 190, 220, 252, - 188, 149, 207, 205, 55, 63, 91, 209, - 83, 57, 132, 60, 65, 162, 109, 71, - 20, 42, 158, 93, 86, 242, 211, 171, - 68, 17, 146, 217, 35, 32, 46, 137, - 180, 124, 184, 38, 119, 153, 227, 165, - 103, 74, 237, 222, 197, 49, 254, 24, - 13, 99, 140, 128, 192, 247, 112, 7 - }; - - private static readonly byte[] Alogtable = - { - 0, 3, 5, 15, 17, 51, 85, 255, 26, 46, 114, 150, 161, 248, 19, 53, - 95, 225, 56, 72, 216, 115, 149, 164, 247, 2, 6, 10, 30, 34, 102, 170, - 229, 52, 92, 228, 55, 89, 235, 38, 106, 190, 217, 112, 144, 171, 230, 49, - 83, 245, 4, 12, 20, 60, 68, 204, 79, 209, 104, 184, 211, 110, 178, 205, - 76, 212, 103, 169, 224, 59, 77, 215, 98, 166, 241, 8, 24, 40, 120, 136, - 131, 158, 185, 208, 107, 189, 220, 127, 129, 152, 179, 206, 73, 219, 118, 154, - 181, 196, 87, 249, 16, 48, 80, 240, 11, 29, 39, 105, 187, 214, 97, 163, - 254, 25, 43, 125, 135, 146, 173, 236, 47, 113, 147, 174, 233, 32, 96, 160, - 251, 22, 58, 78, 210, 109, 183, 194, 93, 231, 50, 86, 250, 21, 63, 65, - 195, 94, 226, 61, 71, 201, 64, 192, 91, 237, 44, 116, 156, 191, 218, 117, - 159, 186, 213, 100, 172, 239, 42, 126, 130, 157, 188, 223, 122, 142, 137, 128, - 155, 182, 193, 88, 232, 35, 101, 175, 234, 37, 111, 177, 200, 67, 197, 84, - 252, 31, 33, 99, 165, 244, 7, 9, 27, 45, 119, 153, 176, 203, 70, 202, - 69, 207, 74, 222, 121, 139, 134, 145, 168, 227, 62, 66, 198, 81, 243, 14, - 18, 54, 90, 238, 41, 123, 141, 140, 143, 138, 133, 148, 167, 242, 13, 23, - 57, 75, 221, 124, 132, 151, 162, 253, 28, 36, 108, 180, 199, 82, 246, 1, - 3, 5, 15, 17, 51, 85, 255, 26, 46, 114, 150, 161, 248, 19, 53, - 95, 225, 56, 72, 216, 115, 149, 164, 247, 2, 6, 10, 30, 34, 102, 170, - 229, 52, 92, 228, 55, 89, 235, 38, 106, 190, 217, 112, 144, 171, 230, 49, - 83, 245, 4, 12, 20, 60, 68, 204, 79, 209, 104, 184, 211, 110, 178, 205, - 76, 212, 103, 169, 224, 59, 77, 215, 98, 166, 241, 8, 24, 40, 120, 136, - 131, 158, 185, 208, 107, 189, 220, 127, 129, 152, 179, 206, 73, 219, 118, 154, - 181, 196, 87, 249, 16, 48, 80, 240, 11, 29, 39, 105, 187, 214, 97, 163, - 254, 25, 43, 125, 135, 146, 173, 236, 47, 113, 147, 174, 233, 32, 96, 160, - 251, 22, 58, 78, 210, 109, 183, 194, 93, 231, 50, 86, 250, 21, 63, 65, - 195, 94, 226, 61, 71, 201, 64, 192, 91, 237, 44, 116, 156, 191, 218, 117, - 159, 186, 213, 100, 172, 239, 42, 126, 130, 157, 188, 223, 122, 142, 137, 128, - 155, 182, 193, 88, 232, 35, 101, 175, 234, 37, 111, 177, 200, 67, 197, 84, - 252, 31, 33, 99, 165, 244, 7, 9, 27, 45, 119, 153, 176, 203, 70, 202, - 69, 207, 74, 222, 121, 139, 134, 145, 168, 227, 62, 66, 198, 81, 243, 14, - 18, 54, 90, 238, 41, 123, 141, 140, 143, 138, 133, 148, 167, 242, 13, 23, - 57, 75, 221, 124, 132, 151, 162, 253, 28, 36, 108, 180, 199, 82, 246, 1, - }; - - private static readonly byte[] S = - { - 99, 124, 119, 123, 242, 107, 111, 197, 48, 1, 103, 43, 254, 215, 171, 118, - 202, 130, 201, 125, 250, 89, 71, 240, 173, 212, 162, 175, 156, 164, 114, 192, - 183, 253, 147, 38, 54, 63, 247, 204, 52, 165, 229, 241, 113, 216, 49, 21, - 4, 199, 35, 195, 24, 150, 5, 154, 7, 18, 128, 226, 235, 39, 178, 117, - 9, 131, 44, 26, 27, 110, 90, 160, 82, 59, 214, 179, 41, 227, 47, 132, - 83, 209, 0, 237, 32, 252, 177, 91, 106, 203, 190, 57, 74, 76, 88, 207, - 208, 239, 170, 251, 67, 77, 51, 133, 69, 249, 2, 127, 80, 60, 159, 168, - 81, 163, 64, 143, 146, 157, 56, 245, 188, 182, 218, 33, 16, 255, 243, 210, - 205, 12, 19, 236, 95, 151, 68, 23, 196, 167, 126, 61, 100, 93, 25, 115, - 96, 129, 79, 220, 34, 42, 144, 136, 70, 238, 184, 20, 222, 94, 11, 219, - 224, 50, 58, 10, 73, 6, 36, 92, 194, 211, 172, 98, 145, 149, 228, 121, - 231, 200, 55, 109, 141, 213, 78, 169, 108, 86, 244, 234, 101, 122, 174, 8, - 186, 120, 37, 46, 28, 166, 180, 198, 232, 221, 116, 31, 75, 189, 139, 138, - 112, 62, 181, 102, 72, 3, 246, 14, 97, 53, 87, 185, 134, 193, 29, 158, - 225, 248, 152, 17, 105, 217, 142, 148, 155, 30, 135, 233, 206, 85, 40, 223, - 140, 161, 137, 13, 191, 230, 66, 104, 65, 153, 45, 15, 176, 84, 187, 22, - }; - - private static readonly byte[] Si = - { - 82, 9, 106, 213, 48, 54, 165, 56, 191, 64, 163, 158, 129, 243, 215, 251, - 124, 227, 57, 130, 155, 47, 255, 135, 52, 142, 67, 68, 196, 222, 233, 203, - 84, 123, 148, 50, 166, 194, 35, 61, 238, 76, 149, 11, 66, 250, 195, 78, - 8, 46, 161, 102, 40, 217, 36, 178, 118, 91, 162, 73, 109, 139, 209, 37, - 114, 248, 246, 100, 134, 104, 152, 22, 212, 164, 92, 204, 93, 101, 182, 146, - 108, 112, 72, 80, 253, 237, 185, 218, 94, 21, 70, 87, 167, 141, 157, 132, - 144, 216, 171, 0, 140, 188, 211, 10, 247, 228, 88, 5, 184, 179, 69, 6, - 208, 44, 30, 143, 202, 63, 15, 2, 193, 175, 189, 3, 1, 19, 138, 107, - 58, 145, 17, 65, 79, 103, 220, 234, 151, 242, 207, 206, 240, 180, 230, 115, - 150, 172, 116, 34, 231, 173, 53, 133, 226, 249, 55, 232, 28, 117, 223, 110, - 71, 241, 26, 113, 29, 41, 197, 137, 111, 183, 98, 14, 170, 24, 190, 27, - 252, 86, 62, 75, 198, 210, 121, 32, 154, 219, 192, 254, 120, 205, 90, 244, - 31, 221, 168, 51, 136, 7, 199, 49, 177, 18, 16, 89, 39, 128, 236, 95, - 96, 81, 127, 169, 25, 181, 74, 13, 45, 229, 122, 159, 147, 201, 156, 239, - 160, 224, 59, 77, 174, 42, 245, 176, 200, 235, 187, 60, 131, 83, 153, 97, - 23, 43, 4, 126, 186, 119, 214, 38, 225, 105, 20, 99, 85, 33, 12, 125, - }; - - private static readonly byte[] rcon = - { - 0x01, 0x02, 0x04, 0x08, 0x10, 0x20, 0x40, 0x80, 0x1b, 0x36, 0x6c, 0xd8, 0xab, 0x4d, 0x9a, - 0x2f, 0x5e, 0xbc, 0x63, 0xc6, 0x97, 0x35, 0x6a, 0xd4, 0xb3, 0x7d, 0xfa, 0xef, 0xc5, 0x91 - }; - - static readonly byte[][] shifts0 = new byte [][] - { - new byte[]{ 0, 8, 16, 24 }, - new byte[]{ 0, 8, 16, 24 }, - new byte[]{ 0, 8, 16, 24 }, - new byte[]{ 0, 8, 16, 32 }, - new byte[]{ 0, 8, 24, 32 } - }; - - static readonly byte[][] shifts1 = - { - new byte[]{ 0, 24, 16, 8 }, - new byte[]{ 0, 32, 24, 16 }, - new byte[]{ 0, 40, 32, 24 }, - new byte[]{ 0, 48, 40, 24 }, - new byte[]{ 0, 56, 40, 32 } - }; - - /** - * multiply two elements of GF(2^m) - * needed for MixColumn and InvMixColumn - */ - private byte Mul0x2( - int b) - { - if (b != 0) - { - return Alogtable[25 + (Logtable[b] & 0xff)]; - } - else - { - return 0; - } - } - - private byte Mul0x3( - int b) - { - if (b != 0) - { - return Alogtable[1 + (Logtable[b] & 0xff)]; - } - else - { - return 0; - } - } - - private byte Mul0x9( - int b) - { - if (b >= 0) - { - return Alogtable[199 + b]; - } - else - { - return 0; - } - } - - private byte Mul0xb( - int b) - { - if (b >= 0) - { - return Alogtable[104 + b]; - } - else - { - return 0; - } - } - - private byte Mul0xd( - int b) - { - if (b >= 0) - { - return Alogtable[238 + b]; - } - else - { - return 0; - } - } - - private byte Mul0xe( - int b) - { - if (b >= 0) - { - return Alogtable[223 + b]; - } - else - { - return 0; - } - } - - /** - * xor corresponding text input and round key input bytes - */ - private void KeyAddition( - long[] rk) - { - A0 ^= rk[0]; - A1 ^= rk[1]; - A2 ^= rk[2]; - A3 ^= rk[3]; - } - - private long Shift( - long r, - int shift) - { - //return (((long)((ulong) r >> shift) | (r << (BC - shift)))) & BC_MASK; - - ulong temp = (ulong) r >> shift; - - // NB: This corrects for Mono Bug #79087 (fixed in 1.1.17) - if (shift > 31) - { - temp &= 0xFFFFFFFFUL; - } - - return ((long) temp | (r << (BC - shift))) & BC_MASK; - } - - /** - * Row 0 remains unchanged - * The other three rows are shifted a variable amount - */ - private void ShiftRow( - byte[] shiftsSC) - { - A1 = Shift(A1, shiftsSC[1]); - A2 = Shift(A2, shiftsSC[2]); - A3 = Shift(A3, shiftsSC[3]); - } - - private long ApplyS( - long r, - byte[] box) - { - long res = 0; - - for (int j = 0; j < BC; j += 8) - { - res |= (long)(box[(int)((r >> j) & 0xff)] & 0xff) << j; - } - - return res; - } - - /** - * Replace every byte of the input by the byte at that place - * in the nonlinear S-box - */ - private void Substitution( - byte[] box) - { - A0 = ApplyS(A0, box); - A1 = ApplyS(A1, box); - A2 = ApplyS(A2, box); - A3 = ApplyS(A3, box); - } - - /** - * Mix the bytes of every column in a linear way - */ - private void MixColumn() - { - long r0, r1, r2, r3; - - r0 = r1 = r2 = r3 = 0; - - for (int j = 0; j < BC; j += 8) - { - int a0 = (int)((A0 >> j) & 0xff); - int a1 = (int)((A1 >> j) & 0xff); - int a2 = (int)((A2 >> j) & 0xff); - int a3 = (int)((A3 >> j) & 0xff); - - r0 |= (long)((Mul0x2(a0) ^ Mul0x3(a1) ^ a2 ^ a3) & 0xff) << j; - - r1 |= (long)((Mul0x2(a1) ^ Mul0x3(a2) ^ a3 ^ a0) & 0xff) << j; - - r2 |= (long)((Mul0x2(a2) ^ Mul0x3(a3) ^ a0 ^ a1) & 0xff) << j; - - r3 |= (long)((Mul0x2(a3) ^ Mul0x3(a0) ^ a1 ^ a2) & 0xff) << j; - } - - A0 = r0; - A1 = r1; - A2 = r2; - A3 = r3; - } - - /** - * Mix the bytes of every column in a linear way - * This is the opposite operation of Mixcolumn - */ - private void InvMixColumn() - { - long r0, r1, r2, r3; - - r0 = r1 = r2 = r3 = 0; - for (int j = 0; j < BC; j += 8) - { - int a0 = (int)((A0 >> j) & 0xff); - int a1 = (int)((A1 >> j) & 0xff); - int a2 = (int)((A2 >> j) & 0xff); - int a3 = (int)((A3 >> j) & 0xff); - - // - // pre-lookup the log table - // - a0 = (a0 != 0) ? (Logtable[a0 & 0xff] & 0xff) : -1; - a1 = (a1 != 0) ? (Logtable[a1 & 0xff] & 0xff) : -1; - a2 = (a2 != 0) ? (Logtable[a2 & 0xff] & 0xff) : -1; - a3 = (a3 != 0) ? (Logtable[a3 & 0xff] & 0xff) : -1; - - r0 |= (long)((Mul0xe(a0) ^ Mul0xb(a1) ^ Mul0xd(a2) ^ Mul0x9(a3)) & 0xff) << j; - - r1 |= (long)((Mul0xe(a1) ^ Mul0xb(a2) ^ Mul0xd(a3) ^ Mul0x9(a0)) & 0xff) << j; - - r2 |= (long)((Mul0xe(a2) ^ Mul0xb(a3) ^ Mul0xd(a0) ^ Mul0x9(a1)) & 0xff) << j; - - r3 |= (long)((Mul0xe(a3) ^ Mul0xb(a0) ^ Mul0xd(a1) ^ Mul0x9(a2)) & 0xff) << j; - } - - A0 = r0; - A1 = r1; - A2 = r2; - A3 = r3; - } - - /** - * Calculate the necessary round keys - * The number of calculations depends on keyBits and blockBits - */ - private long[][] GenerateWorkingKey( - byte[] key) - { - int KC; - int t, rconpointer = 0; - int keyBits = key.Length * 8; - byte[,] tk = new byte[4,MAXKC]; - //long[,] W = new long[MAXROUNDS+1,4]; - long[][] W = new long[MAXROUNDS+1][]; - - for (int i = 0; i < MAXROUNDS+1; i++) W[i] = new long[4]; - - switch (keyBits) - { - case 128: - KC = 4; - break; - case 160: - KC = 5; - break; - case 192: - KC = 6; - break; - case 224: - KC = 7; - break; - case 256: - KC = 8; - break; - default : - throw new ArgumentException("Key length not 128/160/192/224/256 bits."); - } - - if (keyBits >= blockBits) - { - ROUNDS = KC + 6; - } - else - { - ROUNDS = (BC / 8) + 6; - } - - // - // copy the key into the processing area - // - int index = 0; - - for (int i = 0; i < key.Length; i++) - { - tk[i % 4,i / 4] = key[index++]; - } - - t = 0; - - // - // copy values into round key array - // - for (int j = 0; (j < KC) && (t < (ROUNDS+1)*(BC / 8)); j++, t++) - { - for (int i = 0; i < 4; i++) - { - W[t / (BC / 8)][i] |= (long)(tk[i,j] & 0xff) << ((t * 8) % BC); - } - } - - // - // while not enough round key material calculated - // calculate new values - // - while (t < (ROUNDS+1)*(BC/8)) - { - for (int i = 0; i < 4; i++) - { - tk[i,0] ^= S[tk[(i+1)%4,KC-1] & 0xff]; - } - tk[0,0] ^= (byte) rcon[rconpointer++]; - - if (KC <= 6) - { - for (int j = 1; j < KC; j++) - { - for (int i = 0; i < 4; i++) - { - tk[i,j] ^= tk[i,j-1]; - } - } - } - else - { - for (int j = 1; j < 4; j++) - { - for (int i = 0; i < 4; i++) - { - tk[i,j] ^= tk[i,j-1]; - } - } - for (int i = 0; i < 4; i++) - { - tk[i,4] ^= S[tk[i,3] & 0xff]; - } - for (int j = 5; j < KC; j++) - { - for (int i = 0; i < 4; i++) - { - tk[i,j] ^= tk[i,j-1]; - } - } - } - - // - // copy values into round key array - // - for (int j = 0; (j < KC) && (t < (ROUNDS+1)*(BC/8)); j++, t++) - { - for (int i = 0; i < 4; i++) - { - W[t / (BC/8)][i] |= (long)(tk[i,j] & 0xff) << ((t * 8) % (BC)); - } - } - } - return W; - } - - private int BC; - private long BC_MASK; - private int ROUNDS; - private int blockBits; - private long[][] workingKey; - private long A0, A1, A2, A3; - private bool forEncryption; - private byte[] shifts0SC; - private byte[] shifts1SC; - - /** - * default constructor - 128 bit block size. - */ - public RijndaelEngine() : this(128) {} - - /** - * basic constructor - set the cipher up for a given blocksize - * - * @param blocksize the blocksize in bits, must be 128, 192, or 256. - */ - public RijndaelEngine( - int blockBits) - { - switch (blockBits) - { - case 128: - BC = 32; - BC_MASK = 0xffffffffL; - shifts0SC = shifts0[0]; - shifts1SC = shifts1[0]; - break; - case 160: - BC = 40; - BC_MASK = 0xffffffffffL; - shifts0SC = shifts0[1]; - shifts1SC = shifts1[1]; - break; - case 192: - BC = 48; - BC_MASK = 0xffffffffffffL; - shifts0SC = shifts0[2]; - shifts1SC = shifts1[2]; - break; - case 224: - BC = 56; - BC_MASK = 0xffffffffffffffL; - shifts0SC = shifts0[3]; - shifts1SC = shifts1[3]; - break; - case 256: - BC = 64; - BC_MASK = unchecked( (long)0xffffffffffffffffL); - shifts0SC = shifts0[4]; - shifts1SC = shifts1[4]; - break; - default: - throw new ArgumentException("unknown blocksize to Rijndael"); - } - - this.blockBits = blockBits; - } - - /** - * initialise a Rijndael cipher. - * - * @param forEncryption whether or not we are for encryption. - * @param parameters the parameters required to set up the cipher. - * @exception ArgumentException if the parameters argument is - * inappropriate. - */ - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - if (typeof(KeyParameter).IsInstanceOfType(parameters)) - { - workingKey = GenerateWorkingKey(((KeyParameter)parameters).GetKey()); - this.forEncryption = forEncryption; - return; - } - - throw new ArgumentException("invalid parameter passed to Rijndael init - " + Platform.GetTypeName(parameters)); - } - - public virtual string AlgorithmName - { - get { return "Rijndael"; } - } - - public virtual bool IsPartialBlockOkay - { - get { return false; } - } - - public virtual int GetBlockSize() - { - return BC / 2; - } - - public virtual int ProcessBlock( - byte[] input, - int inOff, - byte[] output, - int outOff) - { - if (workingKey == null) - throw new InvalidOperationException("Rijndael engine not initialised"); - - Check.DataLength(input, inOff, (BC / 2), "input buffer too short"); - Check.OutputLength(output, outOff, (BC / 2), "output buffer too short"); - - UnPackBlock(input, inOff); - - if (forEncryption) - { - EncryptBlock(workingKey); - } - else - { - DecryptBlock(workingKey); - } - - PackBlock(output, outOff); - - return BC / 2; - } - - public virtual void Reset() - { - } - - private void UnPackBlock( - byte[] bytes, - int off) - { - int index = off; - - A0 = (long)(bytes[index++] & 0xff); - A1 = (long)(bytes[index++] & 0xff); - A2 = (long)(bytes[index++] & 0xff); - A3 = (long)(bytes[index++] & 0xff); - - for (int j = 8; j != BC; j += 8) - { - A0 |= (long)(bytes[index++] & 0xff) << j; - A1 |= (long)(bytes[index++] & 0xff) << j; - A2 |= (long)(bytes[index++] & 0xff) << j; - A3 |= (long)(bytes[index++] & 0xff) << j; - } - } - - private void PackBlock( - byte[] bytes, - int off) - { - int index = off; - - for (int j = 0; j != BC; j += 8) - { - bytes[index++] = (byte)(A0 >> j); - bytes[index++] = (byte)(A1 >> j); - bytes[index++] = (byte)(A2 >> j); - bytes[index++] = (byte)(A3 >> j); - } - } - - private void EncryptBlock( - long[][] rk) - { - int r; - - // - // begin with a key addition - // - KeyAddition(rk[0]); - - // - // ROUNDS-1 ordinary rounds - // - for (r = 1; r < ROUNDS; r++) - { - Substitution(S); - ShiftRow(shifts0SC); - MixColumn(); - KeyAddition(rk[r]); - } - - // - // Last round is special: there is no MixColumn - // - Substitution(S); - ShiftRow(shifts0SC); - KeyAddition(rk[ROUNDS]); - } - - private void DecryptBlock( - long[][] rk) - { - int r; - - // To decrypt: apply the inverse operations of the encrypt routine, - // in opposite order - // - // (KeyAddition is an involution: it 's equal to its inverse) - // (the inverse of Substitution with table S is Substitution with the inverse table of S) - // (the inverse of Shiftrow is Shiftrow over a suitable distance) - // - - // First the special round: - // without InvMixColumn - // with extra KeyAddition - // - KeyAddition(rk[ROUNDS]); - Substitution(Si); - ShiftRow(shifts1SC); - - // - // ROUNDS-1 ordinary rounds - // - for (r = ROUNDS-1; r > 0; r--) - { - KeyAddition(rk[r]); - InvMixColumn(); - Substitution(Si); - ShiftRow(shifts1SC); - } - - // - // End with the extra key addition - // - KeyAddition(rk[0]); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/RsaEngine.cs b/bc-sharp-crypto/src/crypto/engines/RsaEngine.cs deleted file mode 100644 index 4399b44..0000000 --- a/bc-sharp-crypto/src/crypto/engines/RsaEngine.cs +++ /dev/null @@ -1,78 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * this does your basic RSA algorithm. - */ - public class RsaEngine - : IAsymmetricBlockCipher - { - private RsaCoreEngine core; - - public virtual string AlgorithmName - { - get { return "RSA"; } - } - - /** - * initialise the RSA engine. - * - * @param forEncryption true if we are encrypting, false otherwise. - * @param param the necessary RSA key parameters. - */ - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - if (core == null) - core = new RsaCoreEngine(); - - core.Init(forEncryption, parameters); - } - - /** - * Return the maximum size for an input block to this engine. - * For RSA this is always one byte less than the key size on - * encryption, and the same length as the key size on decryption. - * - * @return maximum size for an input block. - */ - public virtual int GetInputBlockSize() - { - return core.GetInputBlockSize(); - } - - /** - * Return the maximum size for an output block to this engine. - * For RSA this is always one byte less than the key size on - * decryption, and the same length as the key size on encryption. - * - * @return maximum size for an output block. - */ - public virtual int GetOutputBlockSize() - { - return core.GetOutputBlockSize(); - } - - /** - * Process a single block using the basic RSA algorithm. - * - * @param inBuf the input array. - * @param inOff the offset into the input buffer where the data starts. - * @param inLen the length of the data to be processed. - * @return the result of the RSA process. - * @exception DataLengthException the input block is too large. - */ - public virtual byte[] ProcessBlock( - byte[] inBuf, - int inOff, - int inLen) - { - if (core == null) - throw new InvalidOperationException("RSA engine not initialised"); - - return core.ConvertOutput(core.ProcessBlock(core.ConvertInput(inBuf, inOff, inLen))); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/SEEDEngine.cs b/bc-sharp-crypto/src/crypto/engines/SEEDEngine.cs deleted file mode 100644 index f615b84..0000000 --- a/bc-sharp-crypto/src/crypto/engines/SEEDEngine.cs +++ /dev/null @@ -1,360 +0,0 @@ -using System; -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * Implementation of the SEED algorithm as described in RFC 4009 - */ - public class SeedEngine - : IBlockCipher - { - private const int BlockSize = 16; - - private static readonly uint[] SS0 = - { - 0x2989a1a8, 0x05858184, 0x16c6d2d4, 0x13c3d3d0, 0x14445054, 0x1d0d111c, 0x2c8ca0ac, 0x25052124, - 0x1d4d515c, 0x03434340, 0x18081018, 0x1e0e121c, 0x11415150, 0x3cccf0fc, 0x0acac2c8, 0x23436360, - 0x28082028, 0x04444044, 0x20002020, 0x1d8d919c, 0x20c0e0e0, 0x22c2e2e0, 0x08c8c0c8, 0x17071314, - 0x2585a1a4, 0x0f8f838c, 0x03030300, 0x3b4b7378, 0x3b8bb3b8, 0x13031310, 0x12c2d2d0, 0x2ecee2ec, - 0x30407070, 0x0c8c808c, 0x3f0f333c, 0x2888a0a8, 0x32023230, 0x1dcdd1dc, 0x36c6f2f4, 0x34447074, - 0x2ccce0ec, 0x15859194, 0x0b0b0308, 0x17475354, 0x1c4c505c, 0x1b4b5358, 0x3d8db1bc, 0x01010100, - 0x24042024, 0x1c0c101c, 0x33437370, 0x18889098, 0x10001010, 0x0cccc0cc, 0x32c2f2f0, 0x19c9d1d8, - 0x2c0c202c, 0x27c7e3e4, 0x32427270, 0x03838380, 0x1b8b9398, 0x11c1d1d0, 0x06868284, 0x09c9c1c8, - 0x20406060, 0x10405050, 0x2383a3a0, 0x2bcbe3e8, 0x0d0d010c, 0x3686b2b4, 0x1e8e929c, 0x0f4f434c, - 0x3787b3b4, 0x1a4a5258, 0x06c6c2c4, 0x38487078, 0x2686a2a4, 0x12021210, 0x2f8fa3ac, 0x15c5d1d4, - 0x21416160, 0x03c3c3c0, 0x3484b0b4, 0x01414140, 0x12425250, 0x3d4d717c, 0x0d8d818c, 0x08080008, - 0x1f0f131c, 0x19899198, 0x00000000, 0x19091118, 0x04040004, 0x13435350, 0x37c7f3f4, 0x21c1e1e0, - 0x3dcdf1fc, 0x36467274, 0x2f0f232c, 0x27072324, 0x3080b0b0, 0x0b8b8388, 0x0e0e020c, 0x2b8ba3a8, - 0x2282a2a0, 0x2e4e626c, 0x13839390, 0x0d4d414c, 0x29496168, 0x3c4c707c, 0x09090108, 0x0a0a0208, - 0x3f8fb3bc, 0x2fcfe3ec, 0x33c3f3f0, 0x05c5c1c4, 0x07878384, 0x14041014, 0x3ecef2fc, 0x24446064, - 0x1eced2dc, 0x2e0e222c, 0x0b4b4348, 0x1a0a1218, 0x06060204, 0x21012120, 0x2b4b6368, 0x26466264, - 0x02020200, 0x35c5f1f4, 0x12829290, 0x0a8a8288, 0x0c0c000c, 0x3383b3b0, 0x3e4e727c, 0x10c0d0d0, - 0x3a4a7278, 0x07474344, 0x16869294, 0x25c5e1e4, 0x26062224, 0x00808080, 0x2d8da1ac, 0x1fcfd3dc, - 0x2181a1a0, 0x30003030, 0x37073334, 0x2e8ea2ac, 0x36063234, 0x15051114, 0x22022220, 0x38083038, - 0x34c4f0f4, 0x2787a3a4, 0x05454144, 0x0c4c404c, 0x01818180, 0x29c9e1e8, 0x04848084, 0x17879394, - 0x35053134, 0x0bcbc3c8, 0x0ecec2cc, 0x3c0c303c, 0x31417170, 0x11011110, 0x07c7c3c4, 0x09898188, - 0x35457174, 0x3bcbf3f8, 0x1acad2d8, 0x38c8f0f8, 0x14849094, 0x19495158, 0x02828280, 0x04c4c0c4, - 0x3fcff3fc, 0x09494148, 0x39093138, 0x27476364, 0x00c0c0c0, 0x0fcfc3cc, 0x17c7d3d4, 0x3888b0b8, - 0x0f0f030c, 0x0e8e828c, 0x02424240, 0x23032320, 0x11819190, 0x2c4c606c, 0x1bcbd3d8, 0x2484a0a4, - 0x34043034, 0x31c1f1f0, 0x08484048, 0x02c2c2c0, 0x2f4f636c, 0x3d0d313c, 0x2d0d212c, 0x00404040, - 0x3e8eb2bc, 0x3e0e323c, 0x3c8cb0bc, 0x01c1c1c0, 0x2a8aa2a8, 0x3a8ab2b8, 0x0e4e424c, 0x15455154, - 0x3b0b3338, 0x1cccd0dc, 0x28486068, 0x3f4f737c, 0x1c8c909c, 0x18c8d0d8, 0x0a4a4248, 0x16465254, - 0x37477374, 0x2080a0a0, 0x2dcde1ec, 0x06464244, 0x3585b1b4, 0x2b0b2328, 0x25456164, 0x3acaf2f8, - 0x23c3e3e0, 0x3989b1b8, 0x3181b1b0, 0x1f8f939c, 0x1e4e525c, 0x39c9f1f8, 0x26c6e2e4, 0x3282b2b0, - 0x31013130, 0x2acae2e8, 0x2d4d616c, 0x1f4f535c, 0x24c4e0e4, 0x30c0f0f0, 0x0dcdc1cc, 0x08888088, - 0x16061214, 0x3a0a3238, 0x18485058, 0x14c4d0d4, 0x22426260, 0x29092128, 0x07070304, 0x33033330, - 0x28c8e0e8, 0x1b0b1318, 0x05050104, 0x39497178, 0x10809090, 0x2a4a6268, 0x2a0a2228, 0x1a8a9298 - }; - - private static readonly uint[] SS1 = - { - 0x38380830, 0xe828c8e0, 0x2c2d0d21, 0xa42686a2, 0xcc0fcfc3, 0xdc1eced2, 0xb03383b3, 0xb83888b0, - 0xac2f8fa3, 0x60204060, 0x54154551, 0xc407c7c3, 0x44044440, 0x6c2f4f63, 0x682b4b63, 0x581b4b53, - 0xc003c3c3, 0x60224262, 0x30330333, 0xb43585b1, 0x28290921, 0xa02080a0, 0xe022c2e2, 0xa42787a3, - 0xd013c3d3, 0x90118191, 0x10110111, 0x04060602, 0x1c1c0c10, 0xbc3c8cb0, 0x34360632, 0x480b4b43, - 0xec2fcfe3, 0x88088880, 0x6c2c4c60, 0xa82888a0, 0x14170713, 0xc404c4c0, 0x14160612, 0xf434c4f0, - 0xc002c2c2, 0x44054541, 0xe021c1e1, 0xd416c6d2, 0x3c3f0f33, 0x3c3d0d31, 0x8c0e8e82, 0x98188890, - 0x28280820, 0x4c0e4e42, 0xf436c6f2, 0x3c3e0e32, 0xa42585a1, 0xf839c9f1, 0x0c0d0d01, 0xdc1fcfd3, - 0xd818c8d0, 0x282b0b23, 0x64264662, 0x783a4a72, 0x24270723, 0x2c2f0f23, 0xf031c1f1, 0x70324272, - 0x40024242, 0xd414c4d0, 0x40014141, 0xc000c0c0, 0x70334373, 0x64274763, 0xac2c8ca0, 0x880b8b83, - 0xf437c7f3, 0xac2d8da1, 0x80008080, 0x1c1f0f13, 0xc80acac2, 0x2c2c0c20, 0xa82a8aa2, 0x34340430, - 0xd012c2d2, 0x080b0b03, 0xec2ecee2, 0xe829c9e1, 0x5c1d4d51, 0x94148490, 0x18180810, 0xf838c8f0, - 0x54174753, 0xac2e8ea2, 0x08080800, 0xc405c5c1, 0x10130313, 0xcc0dcdc1, 0x84068682, 0xb83989b1, - 0xfc3fcff3, 0x7c3d4d71, 0xc001c1c1, 0x30310131, 0xf435c5f1, 0x880a8a82, 0x682a4a62, 0xb03181b1, - 0xd011c1d1, 0x20200020, 0xd417c7d3, 0x00020202, 0x20220222, 0x04040400, 0x68284860, 0x70314171, - 0x04070703, 0xd81bcbd3, 0x9c1d8d91, 0x98198991, 0x60214161, 0xbc3e8eb2, 0xe426c6e2, 0x58194951, - 0xdc1dcdd1, 0x50114151, 0x90108090, 0xdc1cccd0, 0x981a8a92, 0xa02383a3, 0xa82b8ba3, 0xd010c0d0, - 0x80018181, 0x0c0f0f03, 0x44074743, 0x181a0a12, 0xe023c3e3, 0xec2ccce0, 0x8c0d8d81, 0xbc3f8fb3, - 0x94168692, 0x783b4b73, 0x5c1c4c50, 0xa02282a2, 0xa02181a1, 0x60234363, 0x20230323, 0x4c0d4d41, - 0xc808c8c0, 0x9c1e8e92, 0x9c1c8c90, 0x383a0a32, 0x0c0c0c00, 0x2c2e0e22, 0xb83a8ab2, 0x6c2e4e62, - 0x9c1f8f93, 0x581a4a52, 0xf032c2f2, 0x90128292, 0xf033c3f3, 0x48094941, 0x78384870, 0xcc0cccc0, - 0x14150511, 0xf83bcbf3, 0x70304070, 0x74354571, 0x7c3f4f73, 0x34350531, 0x10100010, 0x00030303, - 0x64244460, 0x6c2d4d61, 0xc406c6c2, 0x74344470, 0xd415c5d1, 0xb43484b0, 0xe82acae2, 0x08090901, - 0x74364672, 0x18190911, 0xfc3ecef2, 0x40004040, 0x10120212, 0xe020c0e0, 0xbc3d8db1, 0x04050501, - 0xf83acaf2, 0x00010101, 0xf030c0f0, 0x282a0a22, 0x5c1e4e52, 0xa82989a1, 0x54164652, 0x40034343, - 0x84058581, 0x14140410, 0x88098981, 0x981b8b93, 0xb03080b0, 0xe425c5e1, 0x48084840, 0x78394971, - 0x94178793, 0xfc3cccf0, 0x1c1e0e12, 0x80028282, 0x20210121, 0x8c0c8c80, 0x181b0b13, 0x5c1f4f53, - 0x74374773, 0x54144450, 0xb03282b2, 0x1c1d0d11, 0x24250521, 0x4c0f4f43, 0x00000000, 0x44064642, - 0xec2dcde1, 0x58184850, 0x50124252, 0xe82bcbe3, 0x7c3e4e72, 0xd81acad2, 0xc809c9c1, 0xfc3dcdf1, - 0x30300030, 0x94158591, 0x64254561, 0x3c3c0c30, 0xb43686b2, 0xe424c4e0, 0xb83b8bb3, 0x7c3c4c70, - 0x0c0e0e02, 0x50104050, 0x38390931, 0x24260622, 0x30320232, 0x84048480, 0x68294961, 0x90138393, - 0x34370733, 0xe427c7e3, 0x24240420, 0xa42484a0, 0xc80bcbc3, 0x50134353, 0x080a0a02, 0x84078783, - 0xd819c9d1, 0x4c0c4c40, 0x80038383, 0x8c0f8f83, 0xcc0ecec2, 0x383b0b33, 0x480a4a42, 0xb43787b3 - }; - - private static readonly uint[] SS2 = - { - - 0xa1a82989, 0x81840585, 0xd2d416c6, 0xd3d013c3, 0x50541444, 0x111c1d0d, 0xa0ac2c8c, 0x21242505, - 0x515c1d4d, 0x43400343, 0x10181808, 0x121c1e0e, 0x51501141, 0xf0fc3ccc, 0xc2c80aca, 0x63602343, - 0x20282808, 0x40440444, 0x20202000, 0x919c1d8d, 0xe0e020c0, 0xe2e022c2, 0xc0c808c8, 0x13141707, - 0xa1a42585, 0x838c0f8f, 0x03000303, 0x73783b4b, 0xb3b83b8b, 0x13101303, 0xd2d012c2, 0xe2ec2ece, - 0x70703040, 0x808c0c8c, 0x333c3f0f, 0xa0a82888, 0x32303202, 0xd1dc1dcd, 0xf2f436c6, 0x70743444, - 0xe0ec2ccc, 0x91941585, 0x03080b0b, 0x53541747, 0x505c1c4c, 0x53581b4b, 0xb1bc3d8d, 0x01000101, - 0x20242404, 0x101c1c0c, 0x73703343, 0x90981888, 0x10101000, 0xc0cc0ccc, 0xf2f032c2, 0xd1d819c9, - 0x202c2c0c, 0xe3e427c7, 0x72703242, 0x83800383, 0x93981b8b, 0xd1d011c1, 0x82840686, 0xc1c809c9, - 0x60602040, 0x50501040, 0xa3a02383, 0xe3e82bcb, 0x010c0d0d, 0xb2b43686, 0x929c1e8e, 0x434c0f4f, - 0xb3b43787, 0x52581a4a, 0xc2c406c6, 0x70783848, 0xa2a42686, 0x12101202, 0xa3ac2f8f, 0xd1d415c5, - 0x61602141, 0xc3c003c3, 0xb0b43484, 0x41400141, 0x52501242, 0x717c3d4d, 0x818c0d8d, 0x00080808, - 0x131c1f0f, 0x91981989, 0x00000000, 0x11181909, 0x00040404, 0x53501343, 0xf3f437c7, 0xe1e021c1, - 0xf1fc3dcd, 0x72743646, 0x232c2f0f, 0x23242707, 0xb0b03080, 0x83880b8b, 0x020c0e0e, 0xa3a82b8b, - 0xa2a02282, 0x626c2e4e, 0x93901383, 0x414c0d4d, 0x61682949, 0x707c3c4c, 0x01080909, 0x02080a0a, - 0xb3bc3f8f, 0xe3ec2fcf, 0xf3f033c3, 0xc1c405c5, 0x83840787, 0x10141404, 0xf2fc3ece, 0x60642444, - 0xd2dc1ece, 0x222c2e0e, 0x43480b4b, 0x12181a0a, 0x02040606, 0x21202101, 0x63682b4b, 0x62642646, - 0x02000202, 0xf1f435c5, 0x92901282, 0x82880a8a, 0x000c0c0c, 0xb3b03383, 0x727c3e4e, 0xd0d010c0, - 0x72783a4a, 0x43440747, 0x92941686, 0xe1e425c5, 0x22242606, 0x80800080, 0xa1ac2d8d, 0xd3dc1fcf, - 0xa1a02181, 0x30303000, 0x33343707, 0xa2ac2e8e, 0x32343606, 0x11141505, 0x22202202, 0x30383808, - 0xf0f434c4, 0xa3a42787, 0x41440545, 0x404c0c4c, 0x81800181, 0xe1e829c9, 0x80840484, 0x93941787, - 0x31343505, 0xc3c80bcb, 0xc2cc0ece, 0x303c3c0c, 0x71703141, 0x11101101, 0xc3c407c7, 0x81880989, - 0x71743545, 0xf3f83bcb, 0xd2d81aca, 0xf0f838c8, 0x90941484, 0x51581949, 0x82800282, 0xc0c404c4, - 0xf3fc3fcf, 0x41480949, 0x31383909, 0x63642747, 0xc0c000c0, 0xc3cc0fcf, 0xd3d417c7, 0xb0b83888, - 0x030c0f0f, 0x828c0e8e, 0x42400242, 0x23202303, 0x91901181, 0x606c2c4c, 0xd3d81bcb, 0xa0a42484, - 0x30343404, 0xf1f031c1, 0x40480848, 0xc2c002c2, 0x636c2f4f, 0x313c3d0d, 0x212c2d0d, 0x40400040, - 0xb2bc3e8e, 0x323c3e0e, 0xb0bc3c8c, 0xc1c001c1, 0xa2a82a8a, 0xb2b83a8a, 0x424c0e4e, 0x51541545, - 0x33383b0b, 0xd0dc1ccc, 0x60682848, 0x737c3f4f, 0x909c1c8c, 0xd0d818c8, 0x42480a4a, 0x52541646, - 0x73743747, 0xa0a02080, 0xe1ec2dcd, 0x42440646, 0xb1b43585, 0x23282b0b, 0x61642545, 0xf2f83aca, - 0xe3e023c3, 0xb1b83989, 0xb1b03181, 0x939c1f8f, 0x525c1e4e, 0xf1f839c9, 0xe2e426c6, 0xb2b03282, - 0x31303101, 0xe2e82aca, 0x616c2d4d, 0x535c1f4f, 0xe0e424c4, 0xf0f030c0, 0xc1cc0dcd, 0x80880888, - 0x12141606, 0x32383a0a, 0x50581848, 0xd0d414c4, 0x62602242, 0x21282909, 0x03040707, 0x33303303, - 0xe0e828c8, 0x13181b0b, 0x01040505, 0x71783949, 0x90901080, 0x62682a4a, 0x22282a0a, 0x92981a8a - }; - - private static readonly uint[] SS3 = - { - - 0x08303838, 0xc8e0e828, 0x0d212c2d, 0x86a2a426, 0xcfc3cc0f, 0xced2dc1e, 0x83b3b033, 0x88b0b838, - 0x8fa3ac2f, 0x40606020, 0x45515415, 0xc7c3c407, 0x44404404, 0x4f636c2f, 0x4b63682b, 0x4b53581b, - 0xc3c3c003, 0x42626022, 0x03333033, 0x85b1b435, 0x09212829, 0x80a0a020, 0xc2e2e022, 0x87a3a427, - 0xc3d3d013, 0x81919011, 0x01111011, 0x06020406, 0x0c101c1c, 0x8cb0bc3c, 0x06323436, 0x4b43480b, - 0xcfe3ec2f, 0x88808808, 0x4c606c2c, 0x88a0a828, 0x07131417, 0xc4c0c404, 0x06121416, 0xc4f0f434, - 0xc2c2c002, 0x45414405, 0xc1e1e021, 0xc6d2d416, 0x0f333c3f, 0x0d313c3d, 0x8e828c0e, 0x88909818, - 0x08202828, 0x4e424c0e, 0xc6f2f436, 0x0e323c3e, 0x85a1a425, 0xc9f1f839, 0x0d010c0d, 0xcfd3dc1f, - 0xc8d0d818, 0x0b23282b, 0x46626426, 0x4a72783a, 0x07232427, 0x0f232c2f, 0xc1f1f031, 0x42727032, - 0x42424002, 0xc4d0d414, 0x41414001, 0xc0c0c000, 0x43737033, 0x47636427, 0x8ca0ac2c, 0x8b83880b, - 0xc7f3f437, 0x8da1ac2d, 0x80808000, 0x0f131c1f, 0xcac2c80a, 0x0c202c2c, 0x8aa2a82a, 0x04303434, - 0xc2d2d012, 0x0b03080b, 0xcee2ec2e, 0xc9e1e829, 0x4d515c1d, 0x84909414, 0x08101818, 0xc8f0f838, - 0x47535417, 0x8ea2ac2e, 0x08000808, 0xc5c1c405, 0x03131013, 0xcdc1cc0d, 0x86828406, 0x89b1b839, - 0xcff3fc3f, 0x4d717c3d, 0xc1c1c001, 0x01313031, 0xc5f1f435, 0x8a82880a, 0x4a62682a, 0x81b1b031, - 0xc1d1d011, 0x00202020, 0xc7d3d417, 0x02020002, 0x02222022, 0x04000404, 0x48606828, 0x41717031, - 0x07030407, 0xcbd3d81b, 0x8d919c1d, 0x89919819, 0x41616021, 0x8eb2bc3e, 0xc6e2e426, 0x49515819, - 0xcdd1dc1d, 0x41515011, 0x80909010, 0xccd0dc1c, 0x8a92981a, 0x83a3a023, 0x8ba3a82b, 0xc0d0d010, - 0x81818001, 0x0f030c0f, 0x47434407, 0x0a12181a, 0xc3e3e023, 0xcce0ec2c, 0x8d818c0d, 0x8fb3bc3f, - 0x86929416, 0x4b73783b, 0x4c505c1c, 0x82a2a022, 0x81a1a021, 0x43636023, 0x03232023, 0x4d414c0d, - 0xc8c0c808, 0x8e929c1e, 0x8c909c1c, 0x0a32383a, 0x0c000c0c, 0x0e222c2e, 0x8ab2b83a, 0x4e626c2e, - 0x8f939c1f, 0x4a52581a, 0xc2f2f032, 0x82929012, 0xc3f3f033, 0x49414809, 0x48707838, 0xccc0cc0c, - 0x05111415, 0xcbf3f83b, 0x40707030, 0x45717435, 0x4f737c3f, 0x05313435, 0x00101010, 0x03030003, - 0x44606424, 0x4d616c2d, 0xc6c2c406, 0x44707434, 0xc5d1d415, 0x84b0b434, 0xcae2e82a, 0x09010809, - 0x46727436, 0x09111819, 0xcef2fc3e, 0x40404000, 0x02121012, 0xc0e0e020, 0x8db1bc3d, 0x05010405, - 0xcaf2f83a, 0x01010001, 0xc0f0f030, 0x0a22282a, 0x4e525c1e, 0x89a1a829, 0x46525416, 0x43434003, - 0x85818405, 0x04101414, 0x89818809, 0x8b93981b, 0x80b0b030, 0xc5e1e425, 0x48404808, 0x49717839, - 0x87939417, 0xccf0fc3c, 0x0e121c1e, 0x82828002, 0x01212021, 0x8c808c0c, 0x0b13181b, 0x4f535c1f, - 0x47737437, 0x44505414, 0x82b2b032, 0x0d111c1d, 0x05212425, 0x4f434c0f, 0x00000000, 0x46424406, - 0xcde1ec2d, 0x48505818, 0x42525012, 0xcbe3e82b, 0x4e727c3e, 0xcad2d81a, 0xc9c1c809, 0xcdf1fc3d, - 0x00303030, 0x85919415, 0x45616425, 0x0c303c3c, 0x86b2b436, 0xc4e0e424, 0x8bb3b83b, 0x4c707c3c, - 0x0e020c0e, 0x40505010, 0x09313839, 0x06222426, 0x02323032, 0x84808404, 0x49616829, 0x83939013, - 0x07333437, 0xc7e3e427, 0x04202424, 0x84a0a424, 0xcbc3c80b, 0x43535013, 0x0a02080a, 0x87838407, - 0xc9d1d819, 0x4c404c0c, 0x83838003, 0x8f838c0f, 0xcec2cc0e, 0x0b33383b, 0x4a42480a, 0x87b3b437 - }; - - private static readonly uint[] KC = - { - 0x9e3779b9, 0x3c6ef373, 0x78dde6e6, 0xf1bbcdcc, - 0xe3779b99, 0xc6ef3733, 0x8dde6e67, 0x1bbcdccf, - 0x3779b99e, 0x6ef3733c, 0xdde6e678, 0xbbcdccf1, - 0x779b99e3, 0xef3733c6, 0xde6e678d, 0xbcdccf1b - }; - - private int[] wKey; - private bool forEncryption; - - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - this.forEncryption = forEncryption; - wKey = createWorkingKey(((KeyParameter)parameters).GetKey()); - } - - public virtual string AlgorithmName - { - get { return "SEED"; } - } - - public virtual bool IsPartialBlockOkay - { - get { return false; } - } - - public virtual int GetBlockSize() - { - return BlockSize; - } - - public virtual int ProcessBlock( - byte[] inBuf, - int inOff, - byte[] outBuf, - int outOff) - { - if (wKey == null) - throw new InvalidOperationException("SEED engine not initialised"); - - Check.DataLength(inBuf, inOff, BlockSize, "input buffer too short"); - Check.OutputLength(outBuf, outOff, BlockSize, "output buffer too short"); - - long l = bytesToLong(inBuf, inOff + 0); - long r = bytesToLong(inBuf, inOff + 8); - - if (forEncryption) - { - for (int i = 0; i < 16; i++) - { - long nl = r; - - r = l ^ F(wKey[2 * i], wKey[(2 * i) + 1], r); - l = nl; - } - } - else - { - for (int i = 15; i >= 0; i--) - { - long nl = r; - - r = l ^ F(wKey[2 * i], wKey[(2 * i) + 1], r); - l = nl; - } - } - - longToBytes(outBuf, outOff + 0, r); - longToBytes(outBuf, outOff + 8, l); - - return BlockSize; - } - - public virtual void Reset() - { - } - - private int[] createWorkingKey( - byte[] inKey) - { - int[] key = new int[32]; - long lower = bytesToLong(inKey, 0); - long upper = bytesToLong(inKey, 8); - - int key0 = extractW0(lower); - int key1 = extractW1(lower); - int key2 = extractW0(upper); - int key3 = extractW1(upper); - - for (int i = 0; i < 16; i++) - { - key[2 * i] = G(key0 + key2 - (int)KC[i]); - key[2 * i + 1] = G(key1 - key3 + (int)KC[i]); - - if (i % 2 == 0) - { - lower = rotateRight8(lower); - key0 = extractW0(lower); - key1 = extractW1(lower); - } - else - { - upper = rotateLeft8(upper); - key2 = extractW0(upper); - key3 = extractW1(upper); - } - } - - return key; - } - - private int extractW1( - long lVal) - { - return (int)lVal; - } - - private int extractW0( - long lVal) - { - return (int)(lVal >> 32); - } - - private long rotateLeft8( - long x) - { - return (x << 8) | ((long)((ulong) x >> 56)); - } - - private long rotateRight8( - long x) - { - return ((long)((ulong) x >> 8)) | (x << 56); - } - - private long bytesToLong( - byte[] src, - int srcOff) - { - long word = 0; - - for (int i = 0; i <= 7; i++) - { - word = (word << 8) + (src[i + srcOff] & 0xff); - } - - return word; - } - - private void longToBytes( - byte[] dest, - int destOff, - long value) - { - for (int i = 0; i < 8; i++) - { - dest[i + destOff] = (byte)(value >> ((7 - i) * 8)); - } - } - - private int G( - int x) - { - return (int)(SS0[x & 0xff] ^ SS1[(x >> 8) & 0xff] ^ SS2[(x >> 16) & 0xff] ^ SS3[(x >> 24) & 0xff]); - } - - private long F( - int ki0, - int ki1, - long r) - { - int r0 = (int)(r >> 32); - int r1 = (int)r; - int rd1 = phaseCalc2(r0, ki0, r1, ki1); - int rd0 = rd1 + phaseCalc1(r0, ki0, r1, ki1); - - return ((long)rd0 << 32) | (rd1 & 0xffffffffL); - } - - private int phaseCalc1( - int r0, - int ki0, - int r1, - int ki1) - { - return G(G((r0 ^ ki0) ^ (r1 ^ ki1)) + (r0 ^ ki0)); - } - - private int phaseCalc2( - int r0, - int ki0, - int r1, - int ki1) - { - return G(phaseCalc1(r0, ki0, r1, ki1) + G((r0 ^ ki0) ^ (r1 ^ ki1))); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/SEEDWrapEngine.cs b/bc-sharp-crypto/src/crypto/engines/SEEDWrapEngine.cs deleted file mode 100644 index 6b71f94..0000000 --- a/bc-sharp-crypto/src/crypto/engines/SEEDWrapEngine.cs +++ /dev/null @@ -1,16 +0,0 @@ -namespace Org.BouncyCastle.Crypto.Engines -{ - /// - /// An implementation of the SEED key wrapper based on RFC 4010/RFC 3394. - ///

- /// For further details see: http://www.ietf.org/rfc/rfc4010.txt. - /// - public class SeedWrapEngine - : Rfc3394WrapEngine - { - public SeedWrapEngine() - : base(new SeedEngine()) - { - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/Salsa20Engine.cs b/bc-sharp-crypto/src/crypto/engines/Salsa20Engine.cs deleted file mode 100644 index 182eacd..0000000 --- a/bc-sharp-crypto/src/crypto/engines/Salsa20Engine.cs +++ /dev/null @@ -1,362 +0,0 @@ -using System; -using System.Text; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - ///

- /// Implementation of Daniel J. Bernstein's Salsa20 stream cipher, Snuffle 2005 - /// - public class Salsa20Engine - : IStreamCipher - { - public static readonly int DEFAULT_ROUNDS = 20; - - /** Constants */ - private const int StateSize = 16; // 16, 32 bit ints = 64 bytes - - private readonly static uint[] TAU_SIGMA = Pack.LE_To_UInt32(Strings.ToAsciiByteArray("expand 16-byte k" + "expand 32-byte k"), 0, 8); - - internal void PackTauOrSigma(int keyLength, uint[] state, int stateOffset) - { - int tsOff = (keyLength - 16) / 4; - state[stateOffset] = TAU_SIGMA[tsOff]; - state[stateOffset + 1] = TAU_SIGMA[tsOff + 1]; - state[stateOffset + 2] = TAU_SIGMA[tsOff + 2]; - state[stateOffset + 3] = TAU_SIGMA[tsOff + 3]; - } - - [Obsolete] - protected readonly static byte[] - sigma = Strings.ToAsciiByteArray("expand 32-byte k"), - tau = Strings.ToAsciiByteArray("expand 16-byte k"); - - protected int rounds; - - /* - * variables to hold the state of the engine - * during encryption and decryption - */ - private int index = 0; - internal uint[] engineState = new uint[StateSize]; // state - internal uint[] x = new uint[StateSize]; // internal buffer - private byte[] keyStream = new byte[StateSize * 4]; // expanded state, 64 bytes - private bool initialised = false; - - /* - * internal counter - */ - private uint cW0, cW1, cW2; - - /// - /// Creates a 20 round Salsa20 engine. - /// - public Salsa20Engine() - : this(DEFAULT_ROUNDS) - { - } - - /// - /// Creates a Salsa20 engine with a specific number of rounds. - /// - /// the number of rounds (must be an even number). - public Salsa20Engine(int rounds) - { - if (rounds <= 0 || (rounds & 1) != 0) - { - throw new ArgumentException("'rounds' must be a positive, even number"); - } - - this.rounds = rounds; - } - - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - /* - * Salsa20 encryption and decryption is completely - * symmetrical, so the 'forEncryption' is - * irrelevant. (Like 90% of stream ciphers) - */ - - ParametersWithIV ivParams = parameters as ParametersWithIV; - if (ivParams == null) - throw new ArgumentException(AlgorithmName + " Init requires an IV", "parameters"); - - byte[] iv = ivParams.GetIV(); - if (iv == null || iv.Length != NonceSize) - throw new ArgumentException(AlgorithmName + " requires exactly " + NonceSize + " bytes of IV"); - - ICipherParameters keyParam = ivParams.Parameters; - if (keyParam == null) - { - if (!initialised) - throw new InvalidOperationException(AlgorithmName + " KeyParameter can not be null for first initialisation"); - - SetKey(null, iv); - } - else if (keyParam is KeyParameter) - { - SetKey(((KeyParameter)keyParam).GetKey(), iv); - } - else - { - throw new ArgumentException(AlgorithmName + " Init parameters must contain a KeyParameter (or null for re-init)"); - } - - Reset(); - initialised = true; - } - - protected virtual int NonceSize - { - get { return 8; } - } - - public virtual string AlgorithmName - { - get - { - string name = "Salsa20"; - if (rounds != DEFAULT_ROUNDS) - { - name += "/" + rounds; - } - return name; - } - } - - public virtual byte ReturnByte( - byte input) - { - if (LimitExceeded()) - { - throw new MaxBytesExceededException("2^70 byte limit per IV; Change IV"); - } - - if (index == 0) - { - GenerateKeyStream(keyStream); - AdvanceCounter(); - } - - byte output = (byte)(keyStream[index] ^ input); - index = (index + 1) & 63; - - return output; - } - - protected virtual void AdvanceCounter() - { - if (++engineState[8] == 0) - { - ++engineState[9]; - } - } - - public virtual void ProcessBytes( - byte[] inBytes, - int inOff, - int len, - byte[] outBytes, - int outOff) - { - if (!initialised) - throw new InvalidOperationException(AlgorithmName + " not initialised"); - - Check.DataLength(inBytes, inOff, len, "input buffer too short"); - Check.OutputLength(outBytes, outOff, len, "output buffer too short"); - - if (LimitExceeded((uint)len)) - throw new MaxBytesExceededException("2^70 byte limit per IV would be exceeded; Change IV"); - - for (int i = 0; i < len; i++) - { - if (index == 0) - { - GenerateKeyStream(keyStream); - AdvanceCounter(); - } - outBytes[i+outOff] = (byte)(keyStream[index]^inBytes[i+inOff]); - index = (index + 1) & 63; - } - } - - public virtual void Reset() - { - index = 0; - ResetLimitCounter(); - ResetCounter(); - } - - protected virtual void ResetCounter() - { - engineState[8] = engineState[9] = 0; - } - - protected virtual void SetKey(byte[] keyBytes, byte[] ivBytes) - { - if (keyBytes != null) - { - if ((keyBytes.Length != 16) && (keyBytes.Length != 32)) - throw new ArgumentException(AlgorithmName + " requires 128 bit or 256 bit key"); - - int tsOff = (keyBytes.Length - 16) / 4; - engineState[0] = TAU_SIGMA[tsOff]; - engineState[5] = TAU_SIGMA[tsOff + 1]; - engineState[10] = TAU_SIGMA[tsOff + 2]; - engineState[15] = TAU_SIGMA[tsOff + 3]; - - // Key - Pack.LE_To_UInt32(keyBytes, 0, engineState, 1, 4); - Pack.LE_To_UInt32(keyBytes, keyBytes.Length - 16, engineState, 11, 4); - } - - // IV - Pack.LE_To_UInt32(ivBytes, 0, engineState, 6, 2); - } - - protected virtual void GenerateKeyStream(byte[] output) - { - SalsaCore(rounds, engineState, x); - Pack.UInt32_To_LE(x, output, 0); - } - - internal static void SalsaCore(int rounds, uint[] input, uint[] x) - { - if (input.Length != 16) - throw new ArgumentException(); - if (x.Length != 16) - throw new ArgumentException(); - if (rounds % 2 != 0) - throw new ArgumentException("Number of rounds must be even"); - - uint x00 = input[ 0]; - uint x01 = input[ 1]; - uint x02 = input[ 2]; - uint x03 = input[ 3]; - uint x04 = input[ 4]; - uint x05 = input[ 5]; - uint x06 = input[ 6]; - uint x07 = input[ 7]; - uint x08 = input[ 8]; - uint x09 = input[ 9]; - uint x10 = input[10]; - uint x11 = input[11]; - uint x12 = input[12]; - uint x13 = input[13]; - uint x14 = input[14]; - uint x15 = input[15]; - - for (int i = rounds; i > 0; i -= 2) - { - x04 ^= R((x00+x12), 7); - x08 ^= R((x04+x00), 9); - x12 ^= R((x08+x04),13); - x00 ^= R((x12+x08),18); - x09 ^= R((x05+x01), 7); - x13 ^= R((x09+x05), 9); - x01 ^= R((x13+x09),13); - x05 ^= R((x01+x13),18); - x14 ^= R((x10+x06), 7); - x02 ^= R((x14+x10), 9); - x06 ^= R((x02+x14),13); - x10 ^= R((x06+x02),18); - x03 ^= R((x15+x11), 7); - x07 ^= R((x03+x15), 9); - x11 ^= R((x07+x03),13); - x15 ^= R((x11+x07),18); - - x01 ^= R((x00+x03), 7); - x02 ^= R((x01+x00), 9); - x03 ^= R((x02+x01),13); - x00 ^= R((x03+x02),18); - x06 ^= R((x05+x04), 7); - x07 ^= R((x06+x05), 9); - x04 ^= R((x07+x06),13); - x05 ^= R((x04+x07),18); - x11 ^= R((x10+x09), 7); - x08 ^= R((x11+x10), 9); - x09 ^= R((x08+x11),13); - x10 ^= R((x09+x08),18); - x12 ^= R((x15+x14), 7); - x13 ^= R((x12+x15), 9); - x14 ^= R((x13+x12),13); - x15 ^= R((x14+x13),18); - } - - x[ 0] = x00 + input[ 0]; - x[ 1] = x01 + input[ 1]; - x[ 2] = x02 + input[ 2]; - x[ 3] = x03 + input[ 3]; - x[ 4] = x04 + input[ 4]; - x[ 5] = x05 + input[ 5]; - x[ 6] = x06 + input[ 6]; - x[ 7] = x07 + input[ 7]; - x[ 8] = x08 + input[ 8]; - x[ 9] = x09 + input[ 9]; - x[10] = x10 + input[10]; - x[11] = x11 + input[11]; - x[12] = x12 + input[12]; - x[13] = x13 + input[13]; - x[14] = x14 + input[14]; - x[15] = x15 + input[15]; - } - - /** - * Rotate left - * - * @param x value to rotate - * @param y amount to rotate x - * - * @return rotated x - */ - internal static uint R(uint x, int y) - { - return (x << y) | (x >> (32 - y)); - } - - private void ResetLimitCounter() - { - cW0 = 0; - cW1 = 0; - cW2 = 0; - } - - private bool LimitExceeded() - { - if (++cW0 == 0) - { - if (++cW1 == 0) - { - return (++cW2 & 0x20) != 0; // 2^(32 + 32 + 6) - } - } - - return false; - } - - /* - * this relies on the fact len will always be positive. - */ - private bool LimitExceeded( - uint len) - { - uint old = cW0; - cW0 += len; - if (cW0 < old) - { - if (++cW1 == 0) - { - return (++cW2 & 0x20) != 0; // 2^(32 + 32 + 6) - } - } - - return false; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/SerpentEngine.cs b/bc-sharp-crypto/src/crypto/engines/SerpentEngine.cs deleted file mode 100644 index 76799f0..0000000 --- a/bc-sharp-crypto/src/crypto/engines/SerpentEngine.cs +++ /dev/null @@ -1,292 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * Serpent is a 128-bit 32-round block cipher with variable key lengths, - * including 128, 192 and 256 bit keys conjectured to be at least as - * secure as three-key triple-DES. - *

- * Serpent was designed by Ross Anderson, Eli Biham and Lars Knudsen as a - * candidate algorithm for the NIST AES Quest. - *

- *

- * For full details see The Serpent home page - *

- */ - public sealed class SerpentEngine - : SerpentEngineBase - { - /** - * Expand a user-supplied key material into a session key. - * - * @param key The user-key bytes (multiples of 4) to use. - * @exception ArgumentException - */ - protected override int[] MakeWorkingKey(byte[] key) - { - // - // pad key to 256 bits - // - int[] kPad = new int[16]; - int off = 0; - int length = 0; - - for (off = 0; (off + 4) < key.Length; off += 4) - { - kPad[length++] = (int)Pack.LE_To_UInt32(key, off); - } - - if (off % 4 == 0) - { - kPad[length++] = (int)Pack.LE_To_UInt32(key, off); - if (length < 8) - { - kPad[length] = 1; - } - } - else - { - throw new ArgumentException("key must be a multiple of 4 bytes"); - } - - // - // expand the padded key up to 33 x 128 bits of key material - // - int amount = (ROUNDS + 1) * 4; - int[] w = new int[amount]; - - // - // compute w0 to w7 from w-8 to w-1 - // - for (int i = 8; i < 16; i++) - { - kPad[i] = RotateLeft(kPad[i - 8] ^ kPad[i - 5] ^ kPad[i - 3] ^ kPad[i - 1] ^ PHI ^ (i - 8), 11); - } - - Array.Copy(kPad, 8, w, 0, 8); - - // - // compute w8 to w136 - // - for (int i = 8; i < amount; i++) - { - w[i] = RotateLeft(w[i - 8] ^ w[i - 5] ^ w[i - 3] ^ w[i - 1] ^ PHI ^ i, 11); - } - - // - // create the working keys by processing w with the Sbox and IP - // - Sb3(w[0], w[1], w[2], w[3]); - w[0] = X0; w[1] = X1; w[2] = X2; w[3] = X3; - Sb2(w[4], w[5], w[6], w[7]); - w[4] = X0; w[5] = X1; w[6] = X2; w[7] = X3; - Sb1(w[8], w[9], w[10], w[11]); - w[8] = X0; w[9] = X1; w[10] = X2; w[11] = X3; - Sb0(w[12], w[13], w[14], w[15]); - w[12] = X0; w[13] = X1; w[14] = X2; w[15] = X3; - Sb7(w[16], w[17], w[18], w[19]); - w[16] = X0; w[17] = X1; w[18] = X2; w[19] = X3; - Sb6(w[20], w[21], w[22], w[23]); - w[20] = X0; w[21] = X1; w[22] = X2; w[23] = X3; - Sb5(w[24], w[25], w[26], w[27]); - w[24] = X0; w[25] = X1; w[26] = X2; w[27] = X3; - Sb4(w[28], w[29], w[30], w[31]); - w[28] = X0; w[29] = X1; w[30] = X2; w[31] = X3; - Sb3(w[32], w[33], w[34], w[35]); - w[32] = X0; w[33] = X1; w[34] = X2; w[35] = X3; - Sb2(w[36], w[37], w[38], w[39]); - w[36] = X0; w[37] = X1; w[38] = X2; w[39] = X3; - Sb1(w[40], w[41], w[42], w[43]); - w[40] = X0; w[41] = X1; w[42] = X2; w[43] = X3; - Sb0(w[44], w[45], w[46], w[47]); - w[44] = X0; w[45] = X1; w[46] = X2; w[47] = X3; - Sb7(w[48], w[49], w[50], w[51]); - w[48] = X0; w[49] = X1; w[50] = X2; w[51] = X3; - Sb6(w[52], w[53], w[54], w[55]); - w[52] = X0; w[53] = X1; w[54] = X2; w[55] = X3; - Sb5(w[56], w[57], w[58], w[59]); - w[56] = X0; w[57] = X1; w[58] = X2; w[59] = X3; - Sb4(w[60], w[61], w[62], w[63]); - w[60] = X0; w[61] = X1; w[62] = X2; w[63] = X3; - Sb3(w[64], w[65], w[66], w[67]); - w[64] = X0; w[65] = X1; w[66] = X2; w[67] = X3; - Sb2(w[68], w[69], w[70], w[71]); - w[68] = X0; w[69] = X1; w[70] = X2; w[71] = X3; - Sb1(w[72], w[73], w[74], w[75]); - w[72] = X0; w[73] = X1; w[74] = X2; w[75] = X3; - Sb0(w[76], w[77], w[78], w[79]); - w[76] = X0; w[77] = X1; w[78] = X2; w[79] = X3; - Sb7(w[80], w[81], w[82], w[83]); - w[80] = X0; w[81] = X1; w[82] = X2; w[83] = X3; - Sb6(w[84], w[85], w[86], w[87]); - w[84] = X0; w[85] = X1; w[86] = X2; w[87] = X3; - Sb5(w[88], w[89], w[90], w[91]); - w[88] = X0; w[89] = X1; w[90] = X2; w[91] = X3; - Sb4(w[92], w[93], w[94], w[95]); - w[92] = X0; w[93] = X1; w[94] = X2; w[95] = X3; - Sb3(w[96], w[97], w[98], w[99]); - w[96] = X0; w[97] = X1; w[98] = X2; w[99] = X3; - Sb2(w[100], w[101], w[102], w[103]); - w[100] = X0; w[101] = X1; w[102] = X2; w[103] = X3; - Sb1(w[104], w[105], w[106], w[107]); - w[104] = X0; w[105] = X1; w[106] = X2; w[107] = X3; - Sb0(w[108], w[109], w[110], w[111]); - w[108] = X0; w[109] = X1; w[110] = X2; w[111] = X3; - Sb7(w[112], w[113], w[114], w[115]); - w[112] = X0; w[113] = X1; w[114] = X2; w[115] = X3; - Sb6(w[116], w[117], w[118], w[119]); - w[116] = X0; w[117] = X1; w[118] = X2; w[119] = X3; - Sb5(w[120], w[121], w[122], w[123]); - w[120] = X0; w[121] = X1; w[122] = X2; w[123] = X3; - Sb4(w[124], w[125], w[126], w[127]); - w[124] = X0; w[125] = X1; w[126] = X2; w[127] = X3; - Sb3(w[128], w[129], w[130], w[131]); - w[128] = X0; w[129] = X1; w[130] = X2; w[131] = X3; - - return w; - } - - /** - * Encrypt one block of plaintext. - * - * @param input the array containing the input data. - * @param inOff offset into the in array the data starts at. - * @param output the array the output data will be copied into. - * @param outOff the offset into the out array the output will start at. - */ - protected override void EncryptBlock(byte[] input, int inOff, byte[] output, int outOff) - { - X0 = (int)Pack.LE_To_UInt32(input, inOff); - X1 = (int)Pack.LE_To_UInt32(input, inOff + 4); - X2 = (int)Pack.LE_To_UInt32(input, inOff + 8); - X3 = (int)Pack.LE_To_UInt32(input, inOff + 12); - - Sb0(wKey[0] ^ X0, wKey[1] ^ X1, wKey[2] ^ X2, wKey[3] ^ X3); LT(); - Sb1(wKey[4] ^ X0, wKey[5] ^ X1, wKey[6] ^ X2, wKey[7] ^ X3); LT(); - Sb2(wKey[8] ^ X0, wKey[9] ^ X1, wKey[10] ^ X2, wKey[11] ^ X3); LT(); - Sb3(wKey[12] ^ X0, wKey[13] ^ X1, wKey[14] ^ X2, wKey[15] ^ X3); LT(); - Sb4(wKey[16] ^ X0, wKey[17] ^ X1, wKey[18] ^ X2, wKey[19] ^ X3); LT(); - Sb5(wKey[20] ^ X0, wKey[21] ^ X1, wKey[22] ^ X2, wKey[23] ^ X3); LT(); - Sb6(wKey[24] ^ X0, wKey[25] ^ X1, wKey[26] ^ X2, wKey[27] ^ X3); LT(); - Sb7(wKey[28] ^ X0, wKey[29] ^ X1, wKey[30] ^ X2, wKey[31] ^ X3); LT(); - Sb0(wKey[32] ^ X0, wKey[33] ^ X1, wKey[34] ^ X2, wKey[35] ^ X3); LT(); - Sb1(wKey[36] ^ X0, wKey[37] ^ X1, wKey[38] ^ X2, wKey[39] ^ X3); LT(); - Sb2(wKey[40] ^ X0, wKey[41] ^ X1, wKey[42] ^ X2, wKey[43] ^ X3); LT(); - Sb3(wKey[44] ^ X0, wKey[45] ^ X1, wKey[46] ^ X2, wKey[47] ^ X3); LT(); - Sb4(wKey[48] ^ X0, wKey[49] ^ X1, wKey[50] ^ X2, wKey[51] ^ X3); LT(); - Sb5(wKey[52] ^ X0, wKey[53] ^ X1, wKey[54] ^ X2, wKey[55] ^ X3); LT(); - Sb6(wKey[56] ^ X0, wKey[57] ^ X1, wKey[58] ^ X2, wKey[59] ^ X3); LT(); - Sb7(wKey[60] ^ X0, wKey[61] ^ X1, wKey[62] ^ X2, wKey[63] ^ X3); LT(); - Sb0(wKey[64] ^ X0, wKey[65] ^ X1, wKey[66] ^ X2, wKey[67] ^ X3); LT(); - Sb1(wKey[68] ^ X0, wKey[69] ^ X1, wKey[70] ^ X2, wKey[71] ^ X3); LT(); - Sb2(wKey[72] ^ X0, wKey[73] ^ X1, wKey[74] ^ X2, wKey[75] ^ X3); LT(); - Sb3(wKey[76] ^ X0, wKey[77] ^ X1, wKey[78] ^ X2, wKey[79] ^ X3); LT(); - Sb4(wKey[80] ^ X0, wKey[81] ^ X1, wKey[82] ^ X2, wKey[83] ^ X3); LT(); - Sb5(wKey[84] ^ X0, wKey[85] ^ X1, wKey[86] ^ X2, wKey[87] ^ X3); LT(); - Sb6(wKey[88] ^ X0, wKey[89] ^ X1, wKey[90] ^ X2, wKey[91] ^ X3); LT(); - Sb7(wKey[92] ^ X0, wKey[93] ^ X1, wKey[94] ^ X2, wKey[95] ^ X3); LT(); - Sb0(wKey[96] ^ X0, wKey[97] ^ X1, wKey[98] ^ X2, wKey[99] ^ X3); LT(); - Sb1(wKey[100] ^ X0, wKey[101] ^ X1, wKey[102] ^ X2, wKey[103] ^ X3); LT(); - Sb2(wKey[104] ^ X0, wKey[105] ^ X1, wKey[106] ^ X2, wKey[107] ^ X3); LT(); - Sb3(wKey[108] ^ X0, wKey[109] ^ X1, wKey[110] ^ X2, wKey[111] ^ X3); LT(); - Sb4(wKey[112] ^ X0, wKey[113] ^ X1, wKey[114] ^ X2, wKey[115] ^ X3); LT(); - Sb5(wKey[116] ^ X0, wKey[117] ^ X1, wKey[118] ^ X2, wKey[119] ^ X3); LT(); - Sb6(wKey[120] ^ X0, wKey[121] ^ X1, wKey[122] ^ X2, wKey[123] ^ X3); LT(); - Sb7(wKey[124] ^ X0, wKey[125] ^ X1, wKey[126] ^ X2, wKey[127] ^ X3); - - Pack.UInt32_To_LE((uint)(wKey[128] ^ X0), output, outOff); - Pack.UInt32_To_LE((uint)(wKey[129] ^ X1), output, outOff + 4); - Pack.UInt32_To_LE((uint)(wKey[130] ^ X2), output, outOff + 8); - Pack.UInt32_To_LE((uint)(wKey[131] ^ X3), output, outOff + 12); - } - - /** - * Decrypt one block of ciphertext. - * - * @param input the array containing the input data. - * @param inOff offset into the in array the data starts at. - * @param output the array the output data will be copied into. - * @param outOff the offset into the out array the output will start at. - */ - protected override void DecryptBlock(byte[] input, int inOff, byte[] output, int outOff) - { - X0 = wKey[128] ^ (int)Pack.LE_To_UInt32(input, inOff); - X1 = wKey[129] ^ (int)Pack.LE_To_UInt32(input, inOff + 4); - X2 = wKey[130] ^ (int)Pack.LE_To_UInt32(input, inOff + 8); - X3 = wKey[131] ^ (int)Pack.LE_To_UInt32(input, inOff + 12); - - Ib7(X0, X1, X2, X3); - X0 ^= wKey[124]; X1 ^= wKey[125]; X2 ^= wKey[126]; X3 ^= wKey[127]; - InverseLT(); Ib6(X0, X1, X2, X3); - X0 ^= wKey[120]; X1 ^= wKey[121]; X2 ^= wKey[122]; X3 ^= wKey[123]; - InverseLT(); Ib5(X0, X1, X2, X3); - X0 ^= wKey[116]; X1 ^= wKey[117]; X2 ^= wKey[118]; X3 ^= wKey[119]; - InverseLT(); Ib4(X0, X1, X2, X3); - X0 ^= wKey[112]; X1 ^= wKey[113]; X2 ^= wKey[114]; X3 ^= wKey[115]; - InverseLT(); Ib3(X0, X1, X2, X3); - X0 ^= wKey[108]; X1 ^= wKey[109]; X2 ^= wKey[110]; X3 ^= wKey[111]; - InverseLT(); Ib2(X0, X1, X2, X3); - X0 ^= wKey[104]; X1 ^= wKey[105]; X2 ^= wKey[106]; X3 ^= wKey[107]; - InverseLT(); Ib1(X0, X1, X2, X3); - X0 ^= wKey[100]; X1 ^= wKey[101]; X2 ^= wKey[102]; X3 ^= wKey[103]; - InverseLT(); Ib0(X0, X1, X2, X3); - X0 ^= wKey[96]; X1 ^= wKey[97]; X2 ^= wKey[98]; X3 ^= wKey[99]; - InverseLT(); Ib7(X0, X1, X2, X3); - X0 ^= wKey[92]; X1 ^= wKey[93]; X2 ^= wKey[94]; X3 ^= wKey[95]; - InverseLT(); Ib6(X0, X1, X2, X3); - X0 ^= wKey[88]; X1 ^= wKey[89]; X2 ^= wKey[90]; X3 ^= wKey[91]; - InverseLT(); Ib5(X0, X1, X2, X3); - X0 ^= wKey[84]; X1 ^= wKey[85]; X2 ^= wKey[86]; X3 ^= wKey[87]; - InverseLT(); Ib4(X0, X1, X2, X3); - X0 ^= wKey[80]; X1 ^= wKey[81]; X2 ^= wKey[82]; X3 ^= wKey[83]; - InverseLT(); Ib3(X0, X1, X2, X3); - X0 ^= wKey[76]; X1 ^= wKey[77]; X2 ^= wKey[78]; X3 ^= wKey[79]; - InverseLT(); Ib2(X0, X1, X2, X3); - X0 ^= wKey[72]; X1 ^= wKey[73]; X2 ^= wKey[74]; X3 ^= wKey[75]; - InverseLT(); Ib1(X0, X1, X2, X3); - X0 ^= wKey[68]; X1 ^= wKey[69]; X2 ^= wKey[70]; X3 ^= wKey[71]; - InverseLT(); Ib0(X0, X1, X2, X3); - X0 ^= wKey[64]; X1 ^= wKey[65]; X2 ^= wKey[66]; X3 ^= wKey[67]; - InverseLT(); Ib7(X0, X1, X2, X3); - X0 ^= wKey[60]; X1 ^= wKey[61]; X2 ^= wKey[62]; X3 ^= wKey[63]; - InverseLT(); Ib6(X0, X1, X2, X3); - X0 ^= wKey[56]; X1 ^= wKey[57]; X2 ^= wKey[58]; X3 ^= wKey[59]; - InverseLT(); Ib5(X0, X1, X2, X3); - X0 ^= wKey[52]; X1 ^= wKey[53]; X2 ^= wKey[54]; X3 ^= wKey[55]; - InverseLT(); Ib4(X0, X1, X2, X3); - X0 ^= wKey[48]; X1 ^= wKey[49]; X2 ^= wKey[50]; X3 ^= wKey[51]; - InverseLT(); Ib3(X0, X1, X2, X3); - X0 ^= wKey[44]; X1 ^= wKey[45]; X2 ^= wKey[46]; X3 ^= wKey[47]; - InverseLT(); Ib2(X0, X1, X2, X3); - X0 ^= wKey[40]; X1 ^= wKey[41]; X2 ^= wKey[42]; X3 ^= wKey[43]; - InverseLT(); Ib1(X0, X1, X2, X3); - X0 ^= wKey[36]; X1 ^= wKey[37]; X2 ^= wKey[38]; X3 ^= wKey[39]; - InverseLT(); Ib0(X0, X1, X2, X3); - X0 ^= wKey[32]; X1 ^= wKey[33]; X2 ^= wKey[34]; X3 ^= wKey[35]; - InverseLT(); Ib7(X0, X1, X2, X3); - X0 ^= wKey[28]; X1 ^= wKey[29]; X2 ^= wKey[30]; X3 ^= wKey[31]; - InverseLT(); Ib6(X0, X1, X2, X3); - X0 ^= wKey[24]; X1 ^= wKey[25]; X2 ^= wKey[26]; X3 ^= wKey[27]; - InverseLT(); Ib5(X0, X1, X2, X3); - X0 ^= wKey[20]; X1 ^= wKey[21]; X2 ^= wKey[22]; X3 ^= wKey[23]; - InverseLT(); Ib4(X0, X1, X2, X3); - X0 ^= wKey[16]; X1 ^= wKey[17]; X2 ^= wKey[18]; X3 ^= wKey[19]; - InverseLT(); Ib3(X0, X1, X2, X3); - X0 ^= wKey[12]; X1 ^= wKey[13]; X2 ^= wKey[14]; X3 ^= wKey[15]; - InverseLT(); Ib2(X0, X1, X2, X3); - X0 ^= wKey[8]; X1 ^= wKey[9]; X2 ^= wKey[10]; X3 ^= wKey[11]; - InverseLT(); Ib1(X0, X1, X2, X3); - X0 ^= wKey[4]; X1 ^= wKey[5]; X2 ^= wKey[6]; X3 ^= wKey[7]; - InverseLT(); Ib0(X0, X1, X2, X3); - - Pack.UInt32_To_LE((uint)(X0 ^ wKey[0]), output, outOff); - Pack.UInt32_To_LE((uint)(X1 ^ wKey[1]), output, outOff + 4); - Pack.UInt32_To_LE((uint)(X2 ^ wKey[2]), output, outOff + 8); - Pack.UInt32_To_LE((uint)(X3 ^ wKey[3]), output, outOff + 12); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/SerpentEngineBase.cs b/bc-sharp-crypto/src/crypto/engines/SerpentEngineBase.cs deleted file mode 100644 index 9de5522..0000000 --- a/bc-sharp-crypto/src/crypto/engines/SerpentEngineBase.cs +++ /dev/null @@ -1,469 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - public abstract class SerpentEngineBase - : IBlockCipher - { - protected static readonly int BlockSize = 16; - - internal const int ROUNDS = 32; - internal const int PHI = unchecked((int)0x9E3779B9); // (sqrt(5) - 1) * 2**31 - - protected bool encrypting; - protected int[] wKey; - - protected int X0, X1, X2, X3; // registers - - protected SerpentEngineBase() - { - } - - /** - * initialise a Serpent cipher. - * - * @param encrypting whether or not we are for encryption. - * @param params the parameters required to set up the cipher. - * @throws IllegalArgumentException if the params argument is - * inappropriate. - */ - public virtual void Init(bool encrypting, ICipherParameters parameters) - { - if (!(parameters is KeyParameter)) - throw new ArgumentException("invalid parameter passed to " + AlgorithmName + " init - " + Platform.GetTypeName(parameters)); - - this.encrypting = encrypting; - this.wKey = MakeWorkingKey(((KeyParameter)parameters).GetKey()); - } - - public virtual string AlgorithmName - { - get { return "Serpent"; } - } - - public virtual bool IsPartialBlockOkay - { - get { return false; } - } - - public virtual int GetBlockSize() - { - return BlockSize; - } - - /** - * Process one block of input from the array in and write it to - * the out array. - * - * @param in the array containing the input data. - * @param inOff offset into the in array the data starts at. - * @param out the array the output data will be copied into. - * @param outOff the offset into the out array the output will start at. - * @return the number of bytes processed and produced. - * @throws DataLengthException if there isn't enough data in in, or - * space in out. - * @throws IllegalStateException if the cipher isn't initialised. - */ - public int ProcessBlock(byte[] input, int inOff, byte[] output, int outOff) - { - if (wKey == null) - throw new InvalidOperationException(AlgorithmName + " not initialised"); - - Check.DataLength(input, inOff, BlockSize, "input buffer too short"); - Check.OutputLength(output, outOff, BlockSize, "output buffer too short"); - - if (encrypting) - { - EncryptBlock(input, inOff, output, outOff); - } - else - { - DecryptBlock(input, inOff, output, outOff); - } - - return BlockSize; - } - - public virtual void Reset() - { - } - - protected static int RotateLeft(int x, int bits) - { - return ((x << bits) | (int) ((uint)x >> (32 - bits))); - } - - private static int RotateRight(int x, int bits) - { - return ( (int)((uint)x >> bits) | (x << (32 - bits))); - } - - /* - * The sboxes below are based on the work of Brian Gladman and - * Sam Simpson, whose original notice appears below. - *

- * For further details see: - * http://fp.gladman.plus.com/cryptography_technology/serpent/ - *

- */ - - /* Partially optimised Serpent S Box boolean functions derived */ - /* using a recursive descent analyser but without a full search */ - /* of all subtrees. This set of S boxes is the result of work */ - /* by Sam Simpson and Brian Gladman using the spare time on a */ - /* cluster of high capacity servers to search for S boxes with */ - /* this customised search engine. There are now an average of */ - /* 15.375 terms per S box. */ - /* */ - /* Copyright: Dr B. R Gladman (gladman@seven77.demon.co.uk) */ - /* and Sam Simpson (s.simpson@mia.co.uk) */ - /* 17th December 1998 */ - /* */ - /* We hereby give permission for information in this file to be */ - /* used freely subject only to acknowledgement of its origin. */ - - /* - * S0 - { 3, 8,15, 1,10, 6, 5,11,14,13, 4, 2, 7, 0, 9,12 } - 15 terms. - */ - protected void Sb0(int a, int b, int c, int d) - { - int t1 = a ^ d; - int t3 = c ^ t1; - int t4 = b ^ t3; - X3 = (a & d) ^ t4; - int t7 = a ^ (b & t1); - X2 = t4 ^ (c | t7); - int t12 = X3 & (t3 ^ t7); - X1 = (~t3) ^ t12; - X0 = t12 ^ (~t7); - } - - /** - * InvSO - {13, 3,11, 0,10, 6, 5,12, 1,14, 4, 7,15, 9, 8, 2 } - 15 terms. - */ - protected void Ib0(int a, int b, int c, int d) - { - int t1 = ~a; - int t2 = a ^ b; - int t4 = d ^ (t1 | t2); - int t5 = c ^ t4; - X2 = t2 ^ t5; - int t8 = t1 ^ (d & t2); - X1 = t4 ^ (X2 & t8); - X3 = (a & t4) ^ (t5 | X1); - X0 = X3 ^ (t5 ^ t8); - } - - /** - * S1 - {15,12, 2, 7, 9, 0, 5,10, 1,11,14, 8, 6,13, 3, 4 } - 14 terms. - */ - protected void Sb1(int a, int b, int c, int d) - { - int t2 = b ^ (~a); - int t5 = c ^ (a | t2); - X2 = d ^ t5; - int t7 = b ^ (d | t2); - int t8 = t2 ^ X2; - X3 = t8 ^ (t5 & t7); - int t11 = t5 ^ t7; - X1 = X3 ^ t11; - X0 = t5 ^ (t8 & t11); - } - - /** - * InvS1 - { 5, 8, 2,14,15, 6,12, 3,11, 4, 7, 9, 1,13,10, 0 } - 14 steps. - */ - protected void Ib1(int a, int b, int c, int d) - { - int t1 = b ^ d; - int t3 = a ^ (b & t1); - int t4 = t1 ^ t3; - X3 = c ^ t4; - int t7 = b ^ (t1 & t3); - int t8 = X3 | t7; - X1 = t3 ^ t8; - int t10 = ~X1; - int t11 = X3 ^ t7; - X0 = t10 ^ t11; - X2 = t4 ^ (t10 | t11); - } - - /** - * S2 - { 8, 6, 7, 9, 3,12,10,15,13, 1,14, 4, 0,11, 5, 2 } - 16 terms. - */ - protected void Sb2(int a, int b, int c, int d) - { - int t1 = ~a; - int t2 = b ^ d; - int t3 = c & t1; - X0 = t2 ^ t3; - int t5 = c ^ t1; - int t6 = c ^ X0; - int t7 = b & t6; - X3 = t5 ^ t7; - X2 = a ^ ((d | t7) & (X0 | t5)); - X1 = (t2 ^ X3) ^ (X2 ^ (d | t1)); - } - - /** - * InvS2 - {12, 9,15, 4,11,14, 1, 2, 0, 3, 6,13, 5, 8,10, 7 } - 16 steps. - */ - protected void Ib2(int a, int b, int c, int d) - { - int t1 = b ^ d; - int t2 = ~t1; - int t3 = a ^ c; - int t4 = c ^ t1; - int t5 = b & t4; - X0 = t3 ^ t5; - int t7 = a | t2; - int t8 = d ^ t7; - int t9 = t3 | t8; - X3 = t1 ^ t9; - int t11 = ~t4; - int t12 = X0 | X3; - X1 = t11 ^ t12; - X2 = (d & t11) ^ (t3 ^ t12); - } - - /** - * S3 - { 0,15,11, 8,12, 9, 6, 3,13, 1, 2, 4,10, 7, 5,14 } - 16 terms. - */ - protected void Sb3(int a, int b, int c, int d) - { - int t1 = a ^ b; - int t2 = a & c; - int t3 = a | d; - int t4 = c ^ d; - int t5 = t1 & t3; - int t6 = t2 | t5; - X2 = t4 ^ t6; - int t8 = b ^ t3; - int t9 = t6 ^ t8; - int t10 = t4 & t9; - X0 = t1 ^ t10; - int t12 = X2 & X0; - X1 = t9 ^ t12; - X3 = (b | d) ^ (t4 ^ t12); - } - - /** - * InvS3 - { 0, 9,10, 7,11,14, 6,13, 3, 5,12, 2, 4, 8,15, 1 } - 15 terms - */ - protected void Ib3(int a, int b, int c, int d) - { - int t1 = a | b; - int t2 = b ^ c; - int t3 = b & t2; - int t4 = a ^ t3; - int t5 = c ^ t4; - int t6 = d | t4; - X0 = t2 ^ t6; - int t8 = t2 | t6; - int t9 = d ^ t8; - X2 = t5 ^ t9; - int t11 = t1 ^ t9; - int t12 = X0 & t11; - X3 = t4 ^ t12; - X1 = X3 ^ (X0 ^ t11); - } - - /** - * S4 - { 1,15, 8, 3,12, 0,11, 6, 2, 5, 4,10, 9,14, 7,13 } - 15 terms. - */ - protected void Sb4(int a, int b, int c, int d) - { - int t1 = a ^ d; - int t2 = d & t1; - int t3 = c ^ t2; - int t4 = b | t3; - X3 = t1 ^ t4; - int t6 = ~b; - int t7 = t1 | t6; - X0 = t3 ^ t7; - int t9 = a & X0; - int t10 = t1 ^ t6; - int t11 = t4 & t10; - X2 = t9 ^ t11; - X1 = (a ^ t3) ^ (t10 & X2); - } - - /** - * InvS4 - { 5, 0, 8, 3,10, 9, 7,14, 2,12,11, 6, 4,15,13, 1 } - 15 terms. - */ - protected void Ib4(int a, int b, int c, int d) - { - int t1 = c | d; - int t2 = a & t1; - int t3 = b ^ t2; - int t4 = a & t3; - int t5 = c ^ t4; - X1 = d ^ t5; - int t7 = ~a; - int t8 = t5 & X1; - X3 = t3 ^ t8; - int t10 = X1 | t7; - int t11 = d ^ t10; - X0 = X3 ^ t11; - X2 = (t3 & t11) ^ (X1 ^ t7); - } - - /** - * S5 - {15, 5, 2,11, 4,10, 9,12, 0, 3,14, 8,13, 6, 7, 1 } - 16 terms. - */ - protected void Sb5(int a, int b, int c, int d) - { - int t1 = ~a; - int t2 = a ^ b; - int t3 = a ^ d; - int t4 = c ^ t1; - int t5 = t2 | t3; - X0 = t4 ^ t5; - int t7 = d & X0; - int t8 = t2 ^ X0; - X1 = t7 ^ t8; - int t10 = t1 | X0; - int t11 = t2 | t7; - int t12 = t3 ^ t10; - X2 = t11 ^ t12; - X3 = (b ^ t7) ^ (X1 & t12); - } - - /** - * InvS5 - { 8,15, 2, 9, 4, 1,13,14,11, 6, 5, 3, 7,12,10, 0 } - 16 terms. - */ - protected void Ib5(int a, int b, int c, int d) - { - int t1 = ~c; - int t2 = b & t1; - int t3 = d ^ t2; - int t4 = a & t3; - int t5 = b ^ t1; - X3 = t4 ^ t5; - int t7 = b | X3; - int t8 = a & t7; - X1 = t3 ^ t8; - int t10 = a | d; - int t11 = t1 ^ t7; - X0 = t10 ^ t11; - X2 = (b & t10) ^ (t4 | (a ^ c)); - } - - /** - * S6 - { 7, 2,12, 5, 8, 4, 6,11,14, 9, 1,15,13, 3,10, 0 } - 15 terms. - */ - protected void Sb6(int a, int b, int c, int d) - { - int t1 = ~a; - int t2 = a ^ d; - int t3 = b ^ t2; - int t4 = t1 | t2; - int t5 = c ^ t4; - X1 = b ^ t5; - int t7 = t2 | X1; - int t8 = d ^ t7; - int t9 = t5 & t8; - X2 = t3 ^ t9; - int t11 = t5 ^ t8; - X0 = X2 ^ t11; - X3 = (~t5) ^ (t3 & t11); - } - - /** - * InvS6 - {15,10, 1,13, 5, 3, 6, 0, 4, 9,14, 7, 2,12, 8,11 } - 15 terms. - */ - protected void Ib6(int a, int b, int c, int d) - { - int t1 = ~a; - int t2 = a ^ b; - int t3 = c ^ t2; - int t4 = c | t1; - int t5 = d ^ t4; - X1 = t3 ^ t5; - int t7 = t3 & t5; - int t8 = t2 ^ t7; - int t9 = b | t8; - X3 = t5 ^ t9; - int t11 = b | X3; - X0 = t8 ^ t11; - X2 = (d & t1) ^ (t3 ^ t11); - } - - /** - * S7 - { 1,13,15, 0,14, 8, 2,11, 7, 4,12,10, 9, 3, 5, 6 } - 16 terms. - */ - protected void Sb7(int a, int b, int c, int d) - { - int t1 = b ^ c; - int t2 = c & t1; - int t3 = d ^ t2; - int t4 = a ^ t3; - int t5 = d | t1; - int t6 = t4 & t5; - X1 = b ^ t6; - int t8 = t3 | X1; - int t9 = a & t4; - X3 = t1 ^ t9; - int t11 = t4 ^ t8; - int t12 = X3 & t11; - X2 = t3 ^ t12; - X0 = (~t11) ^ (X3 & X2); - } - - /** - * InvS7 - { 3, 0, 6,13, 9,14,15, 8, 5,12,11, 7,10, 1, 4, 2 } - 17 terms. - */ - protected void Ib7(int a, int b, int c, int d) - { - int t3 = c | (a & b); - int t4 = d & (a | b); - X3 = t3 ^ t4; - int t6 = ~d; - int t7 = b ^ t4; - int t9 = t7 | (X3 ^ t6); - X1 = a ^ t9; - X0 = (c ^ t7) ^ (d | X1); - X2 = (t3 ^ X1) ^ (X0 ^ (a & X3)); - } - - /** - * Apply the linear transformation to the register set. - */ - protected void LT() - { - int x0 = RotateLeft(X0, 13); - int x2 = RotateLeft(X2, 3); - int x1 = X1 ^ x0 ^ x2; - int x3 = X3 ^ x2 ^ x0 << 3; - - X1 = RotateLeft(x1, 1); - X3 = RotateLeft(x3, 7); - X0 = RotateLeft(x0 ^ X1 ^ X3, 5); - X2 = RotateLeft(x2 ^ X3 ^ (X1 << 7), 22); - } - - /** - * Apply the inverse of the linear transformation to the register set. - */ - protected void InverseLT() - { - int x2 = RotateRight(X2, 22) ^ X3 ^ (X1 << 7); - int x0 = RotateRight(X0, 5) ^ X1 ^ X3; - int x3 = RotateRight(X3, 7); - int x1 = RotateRight(X1, 1); - X3 = x3 ^ x2 ^ x0 << 3; - X1 = x1 ^ x0 ^ x2; - X2 = RotateRight(x2, 3); - X0 = RotateRight(x0, 13); - } - - protected abstract int[] MakeWorkingKey(byte[] key); - - protected abstract void EncryptBlock(byte[] input, int inOff, byte[] output, int outOff); - - protected abstract void DecryptBlock(byte[] input, int inOff, byte[] output, int outOff); - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/SkipjackEngine.cs b/bc-sharp-crypto/src/crypto/engines/SkipjackEngine.cs deleted file mode 100644 index c90646c..0000000 --- a/bc-sharp-crypto/src/crypto/engines/SkipjackEngine.cs +++ /dev/null @@ -1,254 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * a class that provides a basic SKIPJACK engine. - */ - public class SkipjackEngine - : IBlockCipher - { - const int BLOCK_SIZE = 8; - - static readonly short [] ftable = - { - 0xa3, 0xd7, 0x09, 0x83, 0xf8, 0x48, 0xf6, 0xf4, 0xb3, 0x21, 0x15, 0x78, 0x99, 0xb1, 0xaf, 0xf9, - 0xe7, 0x2d, 0x4d, 0x8a, 0xce, 0x4c, 0xca, 0x2e, 0x52, 0x95, 0xd9, 0x1e, 0x4e, 0x38, 0x44, 0x28, - 0x0a, 0xdf, 0x02, 0xa0, 0x17, 0xf1, 0x60, 0x68, 0x12, 0xb7, 0x7a, 0xc3, 0xe9, 0xfa, 0x3d, 0x53, - 0x96, 0x84, 0x6b, 0xba, 0xf2, 0x63, 0x9a, 0x19, 0x7c, 0xae, 0xe5, 0xf5, 0xf7, 0x16, 0x6a, 0xa2, - 0x39, 0xb6, 0x7b, 0x0f, 0xc1, 0x93, 0x81, 0x1b, 0xee, 0xb4, 0x1a, 0xea, 0xd0, 0x91, 0x2f, 0xb8, - 0x55, 0xb9, 0xda, 0x85, 0x3f, 0x41, 0xbf, 0xe0, 0x5a, 0x58, 0x80, 0x5f, 0x66, 0x0b, 0xd8, 0x90, - 0x35, 0xd5, 0xc0, 0xa7, 0x33, 0x06, 0x65, 0x69, 0x45, 0x00, 0x94, 0x56, 0x6d, 0x98, 0x9b, 0x76, - 0x97, 0xfc, 0xb2, 0xc2, 0xb0, 0xfe, 0xdb, 0x20, 0xe1, 0xeb, 0xd6, 0xe4, 0xdd, 0x47, 0x4a, 0x1d, - 0x42, 0xed, 0x9e, 0x6e, 0x49, 0x3c, 0xcd, 0x43, 0x27, 0xd2, 0x07, 0xd4, 0xde, 0xc7, 0x67, 0x18, - 0x89, 0xcb, 0x30, 0x1f, 0x8d, 0xc6, 0x8f, 0xaa, 0xc8, 0x74, 0xdc, 0xc9, 0x5d, 0x5c, 0x31, 0xa4, - 0x70, 0x88, 0x61, 0x2c, 0x9f, 0x0d, 0x2b, 0x87, 0x50, 0x82, 0x54, 0x64, 0x26, 0x7d, 0x03, 0x40, - 0x34, 0x4b, 0x1c, 0x73, 0xd1, 0xc4, 0xfd, 0x3b, 0xcc, 0xfb, 0x7f, 0xab, 0xe6, 0x3e, 0x5b, 0xa5, - 0xad, 0x04, 0x23, 0x9c, 0x14, 0x51, 0x22, 0xf0, 0x29, 0x79, 0x71, 0x7e, 0xff, 0x8c, 0x0e, 0xe2, - 0x0c, 0xef, 0xbc, 0x72, 0x75, 0x6f, 0x37, 0xa1, 0xec, 0xd3, 0x8e, 0x62, 0x8b, 0x86, 0x10, 0xe8, - 0x08, 0x77, 0x11, 0xbe, 0x92, 0x4f, 0x24, 0xc5, 0x32, 0x36, 0x9d, 0xcf, 0xf3, 0xa6, 0xbb, 0xac, - 0x5e, 0x6c, 0xa9, 0x13, 0x57, 0x25, 0xb5, 0xe3, 0xbd, 0xa8, 0x3a, 0x01, 0x05, 0x59, 0x2a, 0x46 - }; - - private int[] key0, key1, key2, key3; - private bool encrypting; - - /** - * initialise a SKIPJACK cipher. - * - * @param forEncryption whether or not we are for encryption. - * @param parameters the parameters required to set up the cipher. - * @exception ArgumentException if the parameters argument is - * inappropriate. - */ - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - if (!(parameters is KeyParameter)) - throw new ArgumentException("invalid parameter passed to SKIPJACK init - " + Platform.GetTypeName(parameters)); - - byte[] keyBytes = ((KeyParameter)parameters).GetKey(); - - this.encrypting = forEncryption; - this.key0 = new int[32]; - this.key1 = new int[32]; - this.key2 = new int[32]; - this.key3 = new int[32]; - - // - // expand the key to 128 bytes in 4 parts (saving us a modulo, multiply - // and an addition). - // - for (int i = 0; i < 32; i ++) - { - key0[i] = keyBytes[(i * 4) % 10] & 0xff; - key1[i] = keyBytes[(i * 4 + 1) % 10] & 0xff; - key2[i] = keyBytes[(i * 4 + 2) % 10] & 0xff; - key3[i] = keyBytes[(i * 4 + 3) % 10] & 0xff; - } - } - - public virtual string AlgorithmName - { - get { return "SKIPJACK"; } - } - - public virtual bool IsPartialBlockOkay - { - get { return false; } - } - - public virtual int GetBlockSize() - { - return BLOCK_SIZE; - } - - public virtual int ProcessBlock( - byte[] input, - int inOff, - byte[] output, - int outOff) - { - if (key1 == null) - throw new InvalidOperationException("SKIPJACK engine not initialised"); - - Check.DataLength(input, inOff, BLOCK_SIZE, "input buffer too short"); - Check.OutputLength(output, outOff, BLOCK_SIZE, "output buffer too short"); - - if (encrypting) - { - EncryptBlock(input, inOff, output, outOff); - } - else - { - DecryptBlock(input, inOff, output, outOff); - } - - return BLOCK_SIZE; - } - - public virtual void Reset() - { - } - - /** - * The G permutation - */ - private int G( - int k, - int w) - { - int g1, g2, g3, g4, g5, g6; - - g1 = (w >> 8) & 0xff; - g2 = w & 0xff; - - g3 = ftable[g2 ^ key0[k]] ^ g1; - g4 = ftable[g3 ^ key1[k]] ^ g2; - g5 = ftable[g4 ^ key2[k]] ^ g3; - g6 = ftable[g5 ^ key3[k]] ^ g4; - - return ((g5 << 8) + g6); - } - - public virtual int EncryptBlock( - byte[] input, - int inOff, - byte[] outBytes, - int outOff) - { - int w1 = (input[inOff + 0] << 8) + (input[inOff + 1] & 0xff); - int w2 = (input[inOff + 2] << 8) + (input[inOff + 3] & 0xff); - int w3 = (input[inOff + 4] << 8) + (input[inOff + 5] & 0xff); - int w4 = (input[inOff + 6] << 8) + (input[inOff + 7] & 0xff); - - int k = 0; - - for (int t = 0; t < 2; t++) - { - for(int i = 0; i < 8; i++) - { - int tmp = w4; - w4 = w3; - w3 = w2; - w2 = G(k, w1); - w1 = w2 ^ tmp ^ (k + 1); - k++; - } - - for(int i = 0; i < 8; i++) - { - int tmp = w4; - w4 = w3; - w3 = w1 ^ w2 ^ (k + 1); - w2 = G(k, w1); - w1 = tmp; - k++; - } - } - - outBytes[outOff + 0] = (byte)((w1 >> 8)); - outBytes[outOff + 1] = (byte)(w1); - outBytes[outOff + 2] = (byte)((w2 >> 8)); - outBytes[outOff + 3] = (byte)(w2); - outBytes[outOff + 4] = (byte)((w3 >> 8)); - outBytes[outOff + 5] = (byte)(w3); - outBytes[outOff + 6] = (byte)((w4 >> 8)); - outBytes[outOff + 7] = (byte)(w4); - - return BLOCK_SIZE; - } - - /** - * the inverse of the G permutation. - */ - private int H( - int k, - int w) - { - int h1, h2, h3, h4, h5, h6; - - h1 = w & 0xff; - h2 = (w >> 8) & 0xff; - - h3 = ftable[h2 ^ key3[k]] ^ h1; - h4 = ftable[h3 ^ key2[k]] ^ h2; - h5 = ftable[h4 ^ key1[k]] ^ h3; - h6 = ftable[h5 ^ key0[k]] ^ h4; - - return ((h6 << 8) + h5); - } - - public virtual int DecryptBlock( - byte[] input, - int inOff, - byte[] outBytes, - int outOff) - { - int w2 = (input[inOff + 0] << 8) + (input[inOff + 1] & 0xff); - int w1 = (input[inOff + 2] << 8) + (input[inOff + 3] & 0xff); - int w4 = (input[inOff + 4] << 8) + (input[inOff + 5] & 0xff); - int w3 = (input[inOff + 6] << 8) + (input[inOff + 7] & 0xff); - - int k = 31; - - for (int t = 0; t < 2; t++) - { - for(int i = 0; i < 8; i++) - { - int tmp = w4; - w4 = w3; - w3 = w2; - w2 = H(k, w1); - w1 = w2 ^ tmp ^ (k + 1); - k--; - } - - for(int i = 0; i < 8; i++) - { - int tmp = w4; - w4 = w3; - w3 = w1 ^ w2 ^ (k + 1); - w2 = H(k, w1); - w1 = tmp; - k--; - } - } - - outBytes[outOff + 0] = (byte)((w2 >> 8)); - outBytes[outOff + 1] = (byte)(w2); - outBytes[outOff + 2] = (byte)((w1 >> 8)); - outBytes[outOff + 3] = (byte)(w1); - outBytes[outOff + 4] = (byte)((w4 >> 8)); - outBytes[outOff + 5] = (byte)(w4); - outBytes[outOff + 6] = (byte)((w3 >> 8)); - outBytes[outOff + 7] = (byte)(w3); - - return BLOCK_SIZE; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/TEAEngine.cs b/bc-sharp-crypto/src/crypto/engines/TEAEngine.cs deleted file mode 100644 index 7b70014..0000000 --- a/bc-sharp-crypto/src/crypto/engines/TEAEngine.cs +++ /dev/null @@ -1,166 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * An TEA engine. - */ - public class TeaEngine - : IBlockCipher - { - private const int - rounds = 32, - block_size = 8; -// key_size = 16, - - private const uint - delta = 0x9E3779B9, - d_sum = 0xC6EF3720; // sum on decrypt - - /* - * the expanded key array of 4 subkeys - */ - private uint _a, _b, _c, _d; - private bool _initialised; - private bool _forEncryption; - - /** - * Create an instance of the TEA encryption algorithm - * and set some defaults - */ - public TeaEngine() - { - _initialised = false; - } - - public virtual string AlgorithmName - { - get { return "TEA"; } - } - - public virtual bool IsPartialBlockOkay - { - get { return false; } - } - - public virtual int GetBlockSize() - { - return block_size; - } - - /** - * initialise - * - * @param forEncryption whether or not we are for encryption. - * @param params the parameters required to set up the cipher. - * @exception ArgumentException if the params argument is - * inappropriate. - */ - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - if (!(parameters is KeyParameter)) - { - throw new ArgumentException("invalid parameter passed to TEA init - " - + Platform.GetTypeName(parameters)); - } - - _forEncryption = forEncryption; - _initialised = true; - - KeyParameter p = (KeyParameter) parameters; - - setKey(p.GetKey()); - } - - public virtual int ProcessBlock( - byte[] inBytes, - int inOff, - byte[] outBytes, - int outOff) - { - if (!_initialised) - throw new InvalidOperationException(AlgorithmName + " not initialised"); - - Check.DataLength(inBytes, inOff, block_size, "input buffer too short"); - Check.OutputLength(outBytes, outOff, block_size, "output buffer too short"); - - return _forEncryption - ? encryptBlock(inBytes, inOff, outBytes, outOff) - : decryptBlock(inBytes, inOff, outBytes, outOff); - } - - public virtual void Reset() - { - } - - /** - * Re-key the cipher. - * - * @param key the key to be used - */ - private void setKey( - byte[] key) - { - _a = Pack.BE_To_UInt32(key, 0); - _b = Pack.BE_To_UInt32(key, 4); - _c = Pack.BE_To_UInt32(key, 8); - _d = Pack.BE_To_UInt32(key, 12); - } - - private int encryptBlock( - byte[] inBytes, - int inOff, - byte[] outBytes, - int outOff) - { - // Pack bytes into integers - uint v0 = Pack.BE_To_UInt32(inBytes, inOff); - uint v1 = Pack.BE_To_UInt32(inBytes, inOff + 4); - - uint sum = 0; - - for (int i = 0; i != rounds; i++) - { - sum += delta; - v0 += ((v1 << 4) + _a) ^ (v1 + sum) ^ ((v1 >> 5) + _b); - v1 += ((v0 << 4) + _c) ^ (v0 + sum) ^ ((v0 >> 5) + _d); - } - - Pack.UInt32_To_BE(v0, outBytes, outOff); - Pack.UInt32_To_BE(v1, outBytes, outOff + 4); - - return block_size; - } - - private int decryptBlock( - byte[] inBytes, - int inOff, - byte[] outBytes, - int outOff) - { - // Pack bytes into integers - uint v0 = Pack.BE_To_UInt32(inBytes, inOff); - uint v1 = Pack.BE_To_UInt32(inBytes, inOff + 4); - - uint sum = d_sum; - - for (int i = 0; i != rounds; i++) - { - v1 -= ((v0 << 4) + _c) ^ (v0 + sum) ^ ((v0 >> 5) + _d); - v0 -= ((v1 << 4) + _a) ^ (v1 + sum) ^ ((v1 >> 5) + _b); - sum -= delta; - } - - Pack.UInt32_To_BE(v0, outBytes, outOff); - Pack.UInt32_To_BE(v1, outBytes, outOff + 4); - - return block_size; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/ThreefishEngine.cs b/bc-sharp-crypto/src/crypto/engines/ThreefishEngine.cs deleted file mode 100644 index eade3cc..0000000 --- a/bc-sharp-crypto/src/crypto/engines/ThreefishEngine.cs +++ /dev/null @@ -1,1491 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /// - /// Implementation of the Threefish tweakable large block cipher in 256, 512 and 1024 bit block - /// sizes. - /// - /// - /// This is the 1.3 version of Threefish defined in the Skein hash function submission to the NIST - /// SHA-3 competition in October 2010. - ///

- /// Threefish was designed by Niels Ferguson - Stefan Lucks - Bruce Schneier - Doug Whiting - Mihir - /// Bellare - Tadayoshi Kohno - Jon Callas - Jesse Walker. - ///

- /// This implementation inlines all round functions, unrolls 8 rounds, and uses 1.2k of static tables - /// to speed up key schedule injection.
- /// 2 x block size state is retained by each cipher instance. - /// - public class ThreefishEngine - : IBlockCipher - { - ///

- /// 256 bit block size - Threefish-256 - /// - public const int BLOCKSIZE_256 = 256; - /// - /// 512 bit block size - Threefish-512 - /// - public const int BLOCKSIZE_512 = 512; - /// - /// 1024 bit block size - Threefish-1024 - /// - public const int BLOCKSIZE_1024 = 1024; - - /** - * Size of the tweak in bytes (always 128 bit/16 bytes) - */ - private const int TWEAK_SIZE_BYTES = 16; - private const int TWEAK_SIZE_WORDS = TWEAK_SIZE_BYTES / 8; - - /** - * Rounds in Threefish-256 - */ - private const int ROUNDS_256 = 72; - /** - * Rounds in Threefish-512 - */ - private const int ROUNDS_512 = 72; - /** - * Rounds in Threefish-1024 - */ - private const int ROUNDS_1024 = 80; - - /** - * Max rounds of any of the variants - */ - private const int MAX_ROUNDS = ROUNDS_1024; - - /** - * Key schedule parity constant - */ - private const ulong C_240 = 0x1BD11BDAA9FC1A22L; - - /* Pre-calculated modulo arithmetic tables for key schedule lookups */ - private static readonly int[] MOD9 = new int[MAX_ROUNDS]; - private static readonly int[] MOD17 = new int[MOD9.Length]; - private static readonly int[] MOD5 = new int[MOD9.Length]; - private static readonly int[] MOD3 = new int[MOD9.Length]; - - static ThreefishEngine() - { - for (int i = 0; i < MOD9.Length; i++) - { - MOD17[i] = i % 17; - MOD9[i] = i % 9; - MOD5[i] = i % 5; - MOD3[i] = i % 3; - } - } - - /** - * Block size in bytes - */ - private readonly int blocksizeBytes; - - /** - * Block size in 64 bit words - */ - private readonly int blocksizeWords; - - /** - * Buffer for byte oriented processBytes to call internal word API - */ - private readonly ulong[] currentBlock; - - /** - * Tweak bytes (2 byte t1,t2, calculated t3 and repeat of t1,t2 for modulo free lookup - */ - private readonly ulong[] t = new ulong[5]; - - /** - * Key schedule words - */ - private readonly ulong[] kw; - - /** - * The internal cipher implementation (varies by blocksize) - */ - private readonly ThreefishCipher cipher; - - private bool forEncryption; - - /// - /// Constructs a new Threefish cipher, with a specified block size. - /// - /// the block size in bits, one of , , - /// . - public ThreefishEngine(int blocksizeBits) - { - this.blocksizeBytes = (blocksizeBits / 8); - this.blocksizeWords = (this.blocksizeBytes / 8); - this.currentBlock = new ulong[blocksizeWords]; - - /* - * Provide room for original key words, extended key word and repeat of key words for modulo - * free lookup of key schedule words. - */ - this.kw = new ulong[2 * blocksizeWords + 1]; - - switch (blocksizeBits) - { - case BLOCKSIZE_256: - cipher = new Threefish256Cipher(kw, t); - break; - case BLOCKSIZE_512: - cipher = new Threefish512Cipher(kw, t); - break; - case BLOCKSIZE_1024: - cipher = new Threefish1024Cipher(kw, t); - break; - default: - throw new ArgumentException( - "Invalid blocksize - Threefish is defined with block size of 256, 512, or 1024 bits"); - } - } - - /// - /// Initialise the engine. - /// - /// Initialise for encryption if true, for decryption if false. - /// an instance of or (to - /// use a 0 tweak) - public virtual void Init(bool forEncryption, ICipherParameters parameters) - { - byte[] keyBytes; - byte[] tweakBytes; - - if (parameters is TweakableBlockCipherParameters) - { - TweakableBlockCipherParameters tParams = (TweakableBlockCipherParameters)parameters; - keyBytes = tParams.Key.GetKey(); - tweakBytes = tParams.Tweak; - } - else if (parameters is KeyParameter) - { - keyBytes = ((KeyParameter)parameters).GetKey(); - tweakBytes = null; - } - else - { - throw new ArgumentException("Invalid parameter passed to Threefish init - " - + Platform.GetTypeName(parameters)); - } - - ulong[] keyWords = null; - ulong[] tweakWords = null; - - if (keyBytes != null) - { - if (keyBytes.Length != this.blocksizeBytes) - { - throw new ArgumentException("Threefish key must be same size as block (" + blocksizeBytes - + " bytes)"); - } - keyWords = new ulong[blocksizeWords]; - for (int i = 0; i < keyWords.Length; i++) - { - keyWords[i] = BytesToWord(keyBytes, i * 8); - } - } - if (tweakBytes != null) - { - if (tweakBytes.Length != TWEAK_SIZE_BYTES) - { - throw new ArgumentException("Threefish tweak must be " + TWEAK_SIZE_BYTES + " bytes"); - } - tweakWords = new ulong[]{BytesToWord(tweakBytes, 0), BytesToWord(tweakBytes, 8)}; - } - Init(forEncryption, keyWords, tweakWords); - } - - /// - /// Initialise the engine, specifying the key and tweak directly. - /// - /// the cipher mode. - /// the words of the key, or null to use the current key. - /// the 2 word (128 bit) tweak, or null to use the current tweak. - internal void Init(bool forEncryption, ulong[] key, ulong[] tweak) - { - this.forEncryption = forEncryption; - if (key != null) - { - SetKey(key); - } - if (tweak != null) - { - SetTweak(tweak); - } - } - - private void SetKey(ulong[] key) - { - if (key.Length != this.blocksizeWords) - { - throw new ArgumentException("Threefish key must be same size as block (" + blocksizeWords - + " words)"); - } - - /* - * Full subkey schedule is deferred to execution to avoid per cipher overhead (10k for 512, - * 20k for 1024). - * - * Key and tweak word sequences are repeated, and static MOD17/MOD9/MOD5/MOD3 calculations - * used, to avoid expensive mod computations during cipher operation. - */ - - ulong knw = C_240; - for (int i = 0; i < blocksizeWords; i++) - { - kw[i] = key[i]; - knw = knw ^ kw[i]; - } - kw[blocksizeWords] = knw; - Array.Copy(kw, 0, kw, blocksizeWords + 1, blocksizeWords); - } - - private void SetTweak(ulong[] tweak) - { - if (tweak.Length != TWEAK_SIZE_WORDS) - { - throw new ArgumentException("Tweak must be " + TWEAK_SIZE_WORDS + " words."); - } - - /* - * Tweak schedule partially repeated to avoid mod computations during cipher operation - */ - t[0] = tweak[0]; - t[1] = tweak[1]; - t[2] = t[0] ^ t[1]; - t[3] = t[0]; - t[4] = t[1]; - } - - public virtual string AlgorithmName - { - get { return "Threefish-" + (blocksizeBytes * 8); } - } - - public virtual bool IsPartialBlockOkay - { - get { return false; } - } - - public virtual int GetBlockSize() - { - return blocksizeBytes; - } - - public virtual void Reset() - { - } - - public virtual int ProcessBlock(byte[] inBytes, int inOff, byte[] outBytes, int outOff) - { - if ((outOff + blocksizeBytes) > outBytes.Length) - { - throw new DataLengthException("Output buffer too short"); - } - - if ((inOff + blocksizeBytes) > inBytes.Length) - { - throw new DataLengthException("Input buffer too short"); - } - - for (int i = 0; i < blocksizeBytes; i += 8) - { - currentBlock[i >> 3] = BytesToWord(inBytes, inOff + i); - } - ProcessBlock(this.currentBlock, this.currentBlock); - for (int i = 0; i < blocksizeBytes; i += 8) - { - WordToBytes(this.currentBlock[i >> 3], outBytes, outOff + i); - } - - return blocksizeBytes; - } - - /// - /// Process a block of data represented as 64 bit words. - /// - /// the number of 8 byte words processed (which will be the same as the block size). - /// a block sized buffer of words to process. - /// a block sized buffer of words to receive the output of the operation. - /// if either the input or output is not block sized - /// if this engine is not initialised - internal int ProcessBlock(ulong[] inWords, ulong[] outWords) - { - if (kw[blocksizeWords] == 0) - { - throw new InvalidOperationException("Threefish engine not initialised"); - } - - if (inWords.Length != blocksizeWords) - { - throw new DataLengthException("Input buffer too short"); - } - if (outWords.Length != blocksizeWords) - { - throw new DataLengthException("Output buffer too short"); - } - - if (forEncryption) - { - cipher.EncryptBlock(inWords, outWords); - } - else - { - cipher.DecryptBlock(inWords, outWords); - } - - return blocksizeWords; - } - - /// - /// Read a single 64 bit word from input in LSB first order. - /// - internal static ulong BytesToWord(byte[] bytes, int off) - { - if ((off + 8) > bytes.Length) - { - // Help the JIT avoid index checks - throw new ArgumentException(); - } - - ulong word = 0; - int index = off; - - word = (bytes[index++] & 0xffUL); - word |= (bytes[index++] & 0xffUL) << 8; - word |= (bytes[index++] & 0xffUL) << 16; - word |= (bytes[index++] & 0xffUL) << 24; - word |= (bytes[index++] & 0xffUL) << 32; - word |= (bytes[index++] & 0xffUL) << 40; - word |= (bytes[index++] & 0xffUL) << 48; - word |= (bytes[index++] & 0xffUL) << 56; - - return word; - } - - /// - /// Write a 64 bit word to output in LSB first order. - /// - internal static void WordToBytes(ulong word, byte[] bytes, int off) - { - if ((off + 8) > bytes.Length) - { - // Help the JIT avoid index checks - throw new ArgumentException(); - } - int index = off; - - bytes[index++] = (byte)word; - bytes[index++] = (byte)(word >> 8); - bytes[index++] = (byte)(word >> 16); - bytes[index++] = (byte)(word >> 24); - bytes[index++] = (byte)(word >> 32); - bytes[index++] = (byte)(word >> 40); - bytes[index++] = (byte)(word >> 48); - bytes[index++] = (byte)(word >> 56); - } - - /** - * Rotate left + xor part of the mix operation. - */ - private static ulong RotlXor(ulong x, int n, ulong xor) - { - return ((x << n) | (x >> (64 - n))) ^ xor; - } - - /** - * Rotate xor + rotate right part of the unmix operation. - */ - private static ulong XorRotr(ulong x, int n, ulong xor) - { - ulong xored = x ^ xor; - return (xored >> n) | (xored << (64 - n)); - } - - private abstract class ThreefishCipher - { - /** - * The extended + repeated tweak words - */ - protected readonly ulong[] t; - /** - * The extended + repeated key words - */ - protected readonly ulong[] kw; - - protected ThreefishCipher(ulong[] kw, ulong[] t) - { - this.kw = kw; - this.t = t; - } - - internal abstract void EncryptBlock(ulong[] block, ulong[] outWords); - - internal abstract void DecryptBlock(ulong[] block, ulong[] outWords); - - } - - private sealed class Threefish256Cipher - : ThreefishCipher - { - /** - * Mix rotation constants defined in Skein 1.3 specification - */ - private const int ROTATION_0_0 = 14, ROTATION_0_1 = 16; - private const int ROTATION_1_0 = 52, ROTATION_1_1 = 57; - private const int ROTATION_2_0 = 23, ROTATION_2_1 = 40; - private const int ROTATION_3_0 = 5, ROTATION_3_1 = 37; - - private const int ROTATION_4_0 = 25, ROTATION_4_1 = 33; - private const int ROTATION_5_0 = 46, ROTATION_5_1 = 12; - private const int ROTATION_6_0 = 58, ROTATION_6_1 = 22; - private const int ROTATION_7_0 = 32, ROTATION_7_1 = 32; - - public Threefish256Cipher(ulong[] kw, ulong[] t) - : base(kw, t) - { - } - - internal override void EncryptBlock(ulong[] block, ulong[] outWords) - { - ulong[] kw = this.kw; - ulong[] t = this.t; - int[] mod5 = MOD5; - int[] mod3 = MOD3; - - /* Help the JIT avoid index bounds checks */ - if (kw.Length != 9) - { - throw new ArgumentException(); - } - if (t.Length != 5) - { - throw new ArgumentException(); - } - - /* - * Read 4 words of plaintext data, not using arrays for cipher state - */ - ulong b0 = block[0]; - ulong b1 = block[1]; - ulong b2 = block[2]; - ulong b3 = block[3]; - - /* - * First subkey injection. - */ - b0 += kw[0]; - b1 += kw[1] + t[0]; - b2 += kw[2] + t[1]; - b3 += kw[3]; - - /* - * Rounds loop, unrolled to 8 rounds per iteration. - * - * Unrolling to multiples of 4 avoids the mod 4 check for key injection, and allows - * inlining of the permutations, which cycle every of 2 rounds (avoiding array - * index/lookup). - * - * Unrolling to multiples of 8 avoids the mod 8 rotation constant lookup, and allows - * inlining constant rotation values (avoiding array index/lookup). - */ - - for (int d = 1; d < (ROUNDS_256 / 4); d += 2) - { - int dm5 = mod5[d]; - int dm3 = mod3[d]; - - /* - * 4 rounds of mix and permute. - * - * Permute schedule has a 2 round cycle, so permutes are inlined in the mix - * operations in each 4 round block. - */ - b1 = RotlXor(b1, ROTATION_0_0, b0 += b1); - b3 = RotlXor(b3, ROTATION_0_1, b2 += b3); - - b3 = RotlXor(b3, ROTATION_1_0, b0 += b3); - b1 = RotlXor(b1, ROTATION_1_1, b2 += b1); - - b1 = RotlXor(b1, ROTATION_2_0, b0 += b1); - b3 = RotlXor(b3, ROTATION_2_1, b2 += b3); - - b3 = RotlXor(b3, ROTATION_3_0, b0 += b3); - b1 = RotlXor(b1, ROTATION_3_1, b2 += b1); - - /* - * Subkey injection for first 4 rounds. - */ - b0 += kw[dm5]; - b1 += kw[dm5 + 1] + t[dm3]; - b2 += kw[dm5 + 2] + t[dm3 + 1]; - b3 += kw[dm5 + 3] + (uint)d; - - /* - * 4 more rounds of mix/permute - */ - b1 = RotlXor(b1, ROTATION_4_0, b0 += b1); - b3 = RotlXor(b3, ROTATION_4_1, b2 += b3); - - b3 = RotlXor(b3, ROTATION_5_0, b0 += b3); - b1 = RotlXor(b1, ROTATION_5_1, b2 += b1); - - b1 = RotlXor(b1, ROTATION_6_0, b0 += b1); - b3 = RotlXor(b3, ROTATION_6_1, b2 += b3); - - b3 = RotlXor(b3, ROTATION_7_0, b0 += b3); - b1 = RotlXor(b1, ROTATION_7_1, b2 += b1); - - /* - * Subkey injection for next 4 rounds. - */ - b0 += kw[dm5 + 1]; - b1 += kw[dm5 + 2] + t[dm3 + 1]; - b2 += kw[dm5 + 3] + t[dm3 + 2]; - b3 += kw[dm5 + 4] + (uint)d + 1; - } - - /* - * Output cipher state. - */ - outWords[0] = b0; - outWords[1] = b1; - outWords[2] = b2; - outWords[3] = b3; - } - - internal override void DecryptBlock(ulong[] block, ulong[] state) - { - ulong[] kw = this.kw; - ulong[] t = this.t; - int[] mod5 = MOD5; - int[] mod3 = MOD3; - - /* Help the JIT avoid index bounds checks */ - if (kw.Length != 9) - { - throw new ArgumentException(); - } - if (t.Length != 5) - { - throw new ArgumentException(); - } - - ulong b0 = block[0]; - ulong b1 = block[1]; - ulong b2 = block[2]; - ulong b3 = block[3]; - - for (int d = (ROUNDS_256 / 4) - 1; d >= 1; d -= 2) - { - int dm5 = mod5[d]; - int dm3 = mod3[d]; - - /* Reverse key injection for second 4 rounds */ - b0 -= kw[dm5 + 1]; - b1 -= kw[dm5 + 2] + t[dm3 + 1]; - b2 -= kw[dm5 + 3] + t[dm3 + 2]; - b3 -= kw[dm5 + 4] + (uint)d + 1; - - /* Reverse second 4 mix/permute rounds */ - - b3 = XorRotr(b3, ROTATION_7_0, b0); - b0 -= b3; - b1 = XorRotr(b1, ROTATION_7_1, b2); - b2 -= b1; - - b1 = XorRotr(b1, ROTATION_6_0, b0); - b0 -= b1; - b3 = XorRotr(b3, ROTATION_6_1, b2); - b2 -= b3; - - b3 = XorRotr(b3, ROTATION_5_0, b0); - b0 -= b3; - b1 = XorRotr(b1, ROTATION_5_1, b2); - b2 -= b1; - - b1 = XorRotr(b1, ROTATION_4_0, b0); - b0 -= b1; - b3 = XorRotr(b3, ROTATION_4_1, b2); - b2 -= b3; - - /* Reverse key injection for first 4 rounds */ - b0 -= kw[dm5]; - b1 -= kw[dm5 + 1] + t[dm3]; - b2 -= kw[dm5 + 2] + t[dm3 + 1]; - b3 -= kw[dm5 + 3] + (uint)d; - - /* Reverse first 4 mix/permute rounds */ - b3 = XorRotr(b3, ROTATION_3_0, b0); - b0 -= b3; - b1 = XorRotr(b1, ROTATION_3_1, b2); - b2 -= b1; - - b1 = XorRotr(b1, ROTATION_2_0, b0); - b0 -= b1; - b3 = XorRotr(b3, ROTATION_2_1, b2); - b2 -= b3; - - b3 = XorRotr(b3, ROTATION_1_0, b0); - b0 -= b3; - b1 = XorRotr(b1, ROTATION_1_1, b2); - b2 -= b1; - - b1 = XorRotr(b1, ROTATION_0_0, b0); - b0 -= b1; - b3 = XorRotr(b3, ROTATION_0_1, b2); - b2 -= b3; - } - - /* - * First subkey uninjection. - */ - b0 -= kw[0]; - b1 -= kw[1] + t[0]; - b2 -= kw[2] + t[1]; - b3 -= kw[3]; - - /* - * Output cipher state. - */ - state[0] = b0; - state[1] = b1; - state[2] = b2; - state[3] = b3; - } - - } - - private sealed class Threefish512Cipher - : ThreefishCipher - { - /** - * Mix rotation constants defined in Skein 1.3 specification - */ - private const int ROTATION_0_0 = 46, ROTATION_0_1 = 36, ROTATION_0_2 = 19, ROTATION_0_3 = 37; - private const int ROTATION_1_0 = 33, ROTATION_1_1 = 27, ROTATION_1_2 = 14, ROTATION_1_3 = 42; - private const int ROTATION_2_0 = 17, ROTATION_2_1 = 49, ROTATION_2_2 = 36, ROTATION_2_3 = 39; - private const int ROTATION_3_0 = 44, ROTATION_3_1 = 9, ROTATION_3_2 = 54, ROTATION_3_3 = 56; - - private const int ROTATION_4_0 = 39, ROTATION_4_1 = 30, ROTATION_4_2 = 34, ROTATION_4_3 = 24; - private const int ROTATION_5_0 = 13, ROTATION_5_1 = 50, ROTATION_5_2 = 10, ROTATION_5_3 = 17; - private const int ROTATION_6_0 = 25, ROTATION_6_1 = 29, ROTATION_6_2 = 39, ROTATION_6_3 = 43; - private const int ROTATION_7_0 = 8, ROTATION_7_1 = 35, ROTATION_7_2 = 56, ROTATION_7_3 = 22; - - internal Threefish512Cipher(ulong[] kw, ulong[] t) - : base(kw, t) - { - } - - internal override void EncryptBlock(ulong[] block, ulong[] outWords) - { - ulong[] kw = this.kw; - ulong[] t = this.t; - int[] mod9 = MOD9; - int[] mod3 = MOD3; - - /* Help the JIT avoid index bounds checks */ - if (kw.Length != 17) - { - throw new ArgumentException(); - } - if (t.Length != 5) - { - throw new ArgumentException(); - } - - /* - * Read 8 words of plaintext data, not using arrays for cipher state - */ - ulong b0 = block[0]; - ulong b1 = block[1]; - ulong b2 = block[2]; - ulong b3 = block[3]; - ulong b4 = block[4]; - ulong b5 = block[5]; - ulong b6 = block[6]; - ulong b7 = block[7]; - - /* - * First subkey injection. - */ - b0 += kw[0]; - b1 += kw[1]; - b2 += kw[2]; - b3 += kw[3]; - b4 += kw[4]; - b5 += kw[5] + t[0]; - b6 += kw[6] + t[1]; - b7 += kw[7]; - - /* - * Rounds loop, unrolled to 8 rounds per iteration. - * - * Unrolling to multiples of 4 avoids the mod 4 check for key injection, and allows - * inlining of the permutations, which cycle every of 4 rounds (avoiding array - * index/lookup). - * - * Unrolling to multiples of 8 avoids the mod 8 rotation constant lookup, and allows - * inlining constant rotation values (avoiding array index/lookup). - */ - - for (int d = 1; d < (ROUNDS_512 / 4); d += 2) - { - int dm9 = mod9[d]; - int dm3 = mod3[d]; - - /* - * 4 rounds of mix and permute. - * - * Permute schedule has a 4 round cycle, so permutes are inlined in the mix - * operations in each 4 round block. - */ - b1 = RotlXor(b1, ROTATION_0_0, b0 += b1); - b3 = RotlXor(b3, ROTATION_0_1, b2 += b3); - b5 = RotlXor(b5, ROTATION_0_2, b4 += b5); - b7 = RotlXor(b7, ROTATION_0_3, b6 += b7); - - b1 = RotlXor(b1, ROTATION_1_0, b2 += b1); - b7 = RotlXor(b7, ROTATION_1_1, b4 += b7); - b5 = RotlXor(b5, ROTATION_1_2, b6 += b5); - b3 = RotlXor(b3, ROTATION_1_3, b0 += b3); - - b1 = RotlXor(b1, ROTATION_2_0, b4 += b1); - b3 = RotlXor(b3, ROTATION_2_1, b6 += b3); - b5 = RotlXor(b5, ROTATION_2_2, b0 += b5); - b7 = RotlXor(b7, ROTATION_2_3, b2 += b7); - - b1 = RotlXor(b1, ROTATION_3_0, b6 += b1); - b7 = RotlXor(b7, ROTATION_3_1, b0 += b7); - b5 = RotlXor(b5, ROTATION_3_2, b2 += b5); - b3 = RotlXor(b3, ROTATION_3_3, b4 += b3); - - /* - * Subkey injection for first 4 rounds. - */ - b0 += kw[dm9]; - b1 += kw[dm9 + 1]; - b2 += kw[dm9 + 2]; - b3 += kw[dm9 + 3]; - b4 += kw[dm9 + 4]; - b5 += kw[dm9 + 5] + t[dm3]; - b6 += kw[dm9 + 6] + t[dm3 + 1]; - b7 += kw[dm9 + 7] + (uint)d; - - /* - * 4 more rounds of mix/permute - */ - b1 = RotlXor(b1, ROTATION_4_0, b0 += b1); - b3 = RotlXor(b3, ROTATION_4_1, b2 += b3); - b5 = RotlXor(b5, ROTATION_4_2, b4 += b5); - b7 = RotlXor(b7, ROTATION_4_3, b6 += b7); - - b1 = RotlXor(b1, ROTATION_5_0, b2 += b1); - b7 = RotlXor(b7, ROTATION_5_1, b4 += b7); - b5 = RotlXor(b5, ROTATION_5_2, b6 += b5); - b3 = RotlXor(b3, ROTATION_5_3, b0 += b3); - - b1 = RotlXor(b1, ROTATION_6_0, b4 += b1); - b3 = RotlXor(b3, ROTATION_6_1, b6 += b3); - b5 = RotlXor(b5, ROTATION_6_2, b0 += b5); - b7 = RotlXor(b7, ROTATION_6_3, b2 += b7); - - b1 = RotlXor(b1, ROTATION_7_0, b6 += b1); - b7 = RotlXor(b7, ROTATION_7_1, b0 += b7); - b5 = RotlXor(b5, ROTATION_7_2, b2 += b5); - b3 = RotlXor(b3, ROTATION_7_3, b4 += b3); - - /* - * Subkey injection for next 4 rounds. - */ - b0 += kw[dm9 + 1]; - b1 += kw[dm9 + 2]; - b2 += kw[dm9 + 3]; - b3 += kw[dm9 + 4]; - b4 += kw[dm9 + 5]; - b5 += kw[dm9 + 6] + t[dm3 + 1]; - b6 += kw[dm9 + 7] + t[dm3 + 2]; - b7 += kw[dm9 + 8] + (uint)d + 1; - } - - /* - * Output cipher state. - */ - outWords[0] = b0; - outWords[1] = b1; - outWords[2] = b2; - outWords[3] = b3; - outWords[4] = b4; - outWords[5] = b5; - outWords[6] = b6; - outWords[7] = b7; - } - - internal override void DecryptBlock(ulong[] block, ulong[] state) - { - ulong[] kw = this.kw; - ulong[] t = this.t; - int[] mod9 = MOD9; - int[] mod3 = MOD3; - - /* Help the JIT avoid index bounds checks */ - if (kw.Length != 17) - { - throw new ArgumentException(); - } - if (t.Length != 5) - { - throw new ArgumentException(); - } - - ulong b0 = block[0]; - ulong b1 = block[1]; - ulong b2 = block[2]; - ulong b3 = block[3]; - ulong b4 = block[4]; - ulong b5 = block[5]; - ulong b6 = block[6]; - ulong b7 = block[7]; - - for (int d = (ROUNDS_512 / 4) - 1; d >= 1; d -= 2) - { - int dm9 = mod9[d]; - int dm3 = mod3[d]; - - /* Reverse key injection for second 4 rounds */ - b0 -= kw[dm9 + 1]; - b1 -= kw[dm9 + 2]; - b2 -= kw[dm9 + 3]; - b3 -= kw[dm9 + 4]; - b4 -= kw[dm9 + 5]; - b5 -= kw[dm9 + 6] + t[dm3 + 1]; - b6 -= kw[dm9 + 7] + t[dm3 + 2]; - b7 -= kw[dm9 + 8] + (uint)d + 1; - - /* Reverse second 4 mix/permute rounds */ - - b1 = XorRotr(b1, ROTATION_7_0, b6); - b6 -= b1; - b7 = XorRotr(b7, ROTATION_7_1, b0); - b0 -= b7; - b5 = XorRotr(b5, ROTATION_7_2, b2); - b2 -= b5; - b3 = XorRotr(b3, ROTATION_7_3, b4); - b4 -= b3; - - b1 = XorRotr(b1, ROTATION_6_0, b4); - b4 -= b1; - b3 = XorRotr(b3, ROTATION_6_1, b6); - b6 -= b3; - b5 = XorRotr(b5, ROTATION_6_2, b0); - b0 -= b5; - b7 = XorRotr(b7, ROTATION_6_3, b2); - b2 -= b7; - - b1 = XorRotr(b1, ROTATION_5_0, b2); - b2 -= b1; - b7 = XorRotr(b7, ROTATION_5_1, b4); - b4 -= b7; - b5 = XorRotr(b5, ROTATION_5_2, b6); - b6 -= b5; - b3 = XorRotr(b3, ROTATION_5_3, b0); - b0 -= b3; - - b1 = XorRotr(b1, ROTATION_4_0, b0); - b0 -= b1; - b3 = XorRotr(b3, ROTATION_4_1, b2); - b2 -= b3; - b5 = XorRotr(b5, ROTATION_4_2, b4); - b4 -= b5; - b7 = XorRotr(b7, ROTATION_4_3, b6); - b6 -= b7; - - /* Reverse key injection for first 4 rounds */ - b0 -= kw[dm9]; - b1 -= kw[dm9 + 1]; - b2 -= kw[dm9 + 2]; - b3 -= kw[dm9 + 3]; - b4 -= kw[dm9 + 4]; - b5 -= kw[dm9 + 5] + t[dm3]; - b6 -= kw[dm9 + 6] + t[dm3 + 1]; - b7 -= kw[dm9 + 7] + (uint)d; - - /* Reverse first 4 mix/permute rounds */ - b1 = XorRotr(b1, ROTATION_3_0, b6); - b6 -= b1; - b7 = XorRotr(b7, ROTATION_3_1, b0); - b0 -= b7; - b5 = XorRotr(b5, ROTATION_3_2, b2); - b2 -= b5; - b3 = XorRotr(b3, ROTATION_3_3, b4); - b4 -= b3; - - b1 = XorRotr(b1, ROTATION_2_0, b4); - b4 -= b1; - b3 = XorRotr(b3, ROTATION_2_1, b6); - b6 -= b3; - b5 = XorRotr(b5, ROTATION_2_2, b0); - b0 -= b5; - b7 = XorRotr(b7, ROTATION_2_3, b2); - b2 -= b7; - - b1 = XorRotr(b1, ROTATION_1_0, b2); - b2 -= b1; - b7 = XorRotr(b7, ROTATION_1_1, b4); - b4 -= b7; - b5 = XorRotr(b5, ROTATION_1_2, b6); - b6 -= b5; - b3 = XorRotr(b3, ROTATION_1_3, b0); - b0 -= b3; - - b1 = XorRotr(b1, ROTATION_0_0, b0); - b0 -= b1; - b3 = XorRotr(b3, ROTATION_0_1, b2); - b2 -= b3; - b5 = XorRotr(b5, ROTATION_0_2, b4); - b4 -= b5; - b7 = XorRotr(b7, ROTATION_0_3, b6); - b6 -= b7; - } - - /* - * First subkey uninjection. - */ - b0 -= kw[0]; - b1 -= kw[1]; - b2 -= kw[2]; - b3 -= kw[3]; - b4 -= kw[4]; - b5 -= kw[5] + t[0]; - b6 -= kw[6] + t[1]; - b7 -= kw[7]; - - /* - * Output cipher state. - */ - state[0] = b0; - state[1] = b1; - state[2] = b2; - state[3] = b3; - state[4] = b4; - state[5] = b5; - state[6] = b6; - state[7] = b7; - } - } - - private sealed class Threefish1024Cipher - : ThreefishCipher - { - /** - * Mix rotation constants defined in Skein 1.3 specification - */ - private const int ROTATION_0_0 = 24, ROTATION_0_1 = 13, ROTATION_0_2 = 8, ROTATION_0_3 = 47; - private const int ROTATION_0_4 = 8, ROTATION_0_5 = 17, ROTATION_0_6 = 22, ROTATION_0_7 = 37; - private const int ROTATION_1_0 = 38, ROTATION_1_1 = 19, ROTATION_1_2 = 10, ROTATION_1_3 = 55; - private const int ROTATION_1_4 = 49, ROTATION_1_5 = 18, ROTATION_1_6 = 23, ROTATION_1_7 = 52; - private const int ROTATION_2_0 = 33, ROTATION_2_1 = 4, ROTATION_2_2 = 51, ROTATION_2_3 = 13; - private const int ROTATION_2_4 = 34, ROTATION_2_5 = 41, ROTATION_2_6 = 59, ROTATION_2_7 = 17; - private const int ROTATION_3_0 = 5, ROTATION_3_1 = 20, ROTATION_3_2 = 48, ROTATION_3_3 = 41; - private const int ROTATION_3_4 = 47, ROTATION_3_5 = 28, ROTATION_3_6 = 16, ROTATION_3_7 = 25; - - private const int ROTATION_4_0 = 41, ROTATION_4_1 = 9, ROTATION_4_2 = 37, ROTATION_4_3 = 31; - private const int ROTATION_4_4 = 12, ROTATION_4_5 = 47, ROTATION_4_6 = 44, ROTATION_4_7 = 30; - private const int ROTATION_5_0 = 16, ROTATION_5_1 = 34, ROTATION_5_2 = 56, ROTATION_5_3 = 51; - private const int ROTATION_5_4 = 4, ROTATION_5_5 = 53, ROTATION_5_6 = 42, ROTATION_5_7 = 41; - private const int ROTATION_6_0 = 31, ROTATION_6_1 = 44, ROTATION_6_2 = 47, ROTATION_6_3 = 46; - private const int ROTATION_6_4 = 19, ROTATION_6_5 = 42, ROTATION_6_6 = 44, ROTATION_6_7 = 25; - private const int ROTATION_7_0 = 9, ROTATION_7_1 = 48, ROTATION_7_2 = 35, ROTATION_7_3 = 52; - private const int ROTATION_7_4 = 23, ROTATION_7_5 = 31, ROTATION_7_6 = 37, ROTATION_7_7 = 20; - - public Threefish1024Cipher(ulong[] kw, ulong[] t) - : base(kw, t) - { - } - - internal override void EncryptBlock(ulong[] block, ulong[] outWords) - { - ulong[] kw = this.kw; - ulong[] t = this.t; - int[] mod17 = MOD17; - int[] mod3 = MOD3; - - /* Help the JIT avoid index bounds checks */ - if (kw.Length != 33) - { - throw new ArgumentException(); - } - if (t.Length != 5) - { - throw new ArgumentException(); - } - - /* - * Read 16 words of plaintext data, not using arrays for cipher state - */ - ulong b0 = block[0]; - ulong b1 = block[1]; - ulong b2 = block[2]; - ulong b3 = block[3]; - ulong b4 = block[4]; - ulong b5 = block[5]; - ulong b6 = block[6]; - ulong b7 = block[7]; - ulong b8 = block[8]; - ulong b9 = block[9]; - ulong b10 = block[10]; - ulong b11 = block[11]; - ulong b12 = block[12]; - ulong b13 = block[13]; - ulong b14 = block[14]; - ulong b15 = block[15]; - - /* - * First subkey injection. - */ - b0 += kw[0]; - b1 += kw[1]; - b2 += kw[2]; - b3 += kw[3]; - b4 += kw[4]; - b5 += kw[5]; - b6 += kw[6]; - b7 += kw[7]; - b8 += kw[8]; - b9 += kw[9]; - b10 += kw[10]; - b11 += kw[11]; - b12 += kw[12]; - b13 += kw[13] + t[0]; - b14 += kw[14] + t[1]; - b15 += kw[15]; - - /* - * Rounds loop, unrolled to 8 rounds per iteration. - * - * Unrolling to multiples of 4 avoids the mod 4 check for key injection, and allows - * inlining of the permutations, which cycle every of 4 rounds (avoiding array - * index/lookup). - * - * Unrolling to multiples of 8 avoids the mod 8 rotation constant lookup, and allows - * inlining constant rotation values (avoiding array index/lookup). - */ - - for (int d = 1; d < (ROUNDS_1024 / 4); d += 2) - { - int dm17 = mod17[d]; - int dm3 = mod3[d]; - - /* - * 4 rounds of mix and permute. - * - * Permute schedule has a 4 round cycle, so permutes are inlined in the mix - * operations in each 4 round block. - */ - b1 = RotlXor(b1, ROTATION_0_0, b0 += b1); - b3 = RotlXor(b3, ROTATION_0_1, b2 += b3); - b5 = RotlXor(b5, ROTATION_0_2, b4 += b5); - b7 = RotlXor(b7, ROTATION_0_3, b6 += b7); - b9 = RotlXor(b9, ROTATION_0_4, b8 += b9); - b11 = RotlXor(b11, ROTATION_0_5, b10 += b11); - b13 = RotlXor(b13, ROTATION_0_6, b12 += b13); - b15 = RotlXor(b15, ROTATION_0_7, b14 += b15); - - b9 = RotlXor(b9, ROTATION_1_0, b0 += b9); - b13 = RotlXor(b13, ROTATION_1_1, b2 += b13); - b11 = RotlXor(b11, ROTATION_1_2, b6 += b11); - b15 = RotlXor(b15, ROTATION_1_3, b4 += b15); - b7 = RotlXor(b7, ROTATION_1_4, b10 += b7); - b3 = RotlXor(b3, ROTATION_1_5, b12 += b3); - b5 = RotlXor(b5, ROTATION_1_6, b14 += b5); - b1 = RotlXor(b1, ROTATION_1_7, b8 += b1); - - b7 = RotlXor(b7, ROTATION_2_0, b0 += b7); - b5 = RotlXor(b5, ROTATION_2_1, b2 += b5); - b3 = RotlXor(b3, ROTATION_2_2, b4 += b3); - b1 = RotlXor(b1, ROTATION_2_3, b6 += b1); - b15 = RotlXor(b15, ROTATION_2_4, b12 += b15); - b13 = RotlXor(b13, ROTATION_2_5, b14 += b13); - b11 = RotlXor(b11, ROTATION_2_6, b8 += b11); - b9 = RotlXor(b9, ROTATION_2_7, b10 += b9); - - b15 = RotlXor(b15, ROTATION_3_0, b0 += b15); - b11 = RotlXor(b11, ROTATION_3_1, b2 += b11); - b13 = RotlXor(b13, ROTATION_3_2, b6 += b13); - b9 = RotlXor(b9, ROTATION_3_3, b4 += b9); - b1 = RotlXor(b1, ROTATION_3_4, b14 += b1); - b5 = RotlXor(b5, ROTATION_3_5, b8 += b5); - b3 = RotlXor(b3, ROTATION_3_6, b10 += b3); - b7 = RotlXor(b7, ROTATION_3_7, b12 += b7); - - /* - * Subkey injection for first 4 rounds. - */ - b0 += kw[dm17]; - b1 += kw[dm17 + 1]; - b2 += kw[dm17 + 2]; - b3 += kw[dm17 + 3]; - b4 += kw[dm17 + 4]; - b5 += kw[dm17 + 5]; - b6 += kw[dm17 + 6]; - b7 += kw[dm17 + 7]; - b8 += kw[dm17 + 8]; - b9 += kw[dm17 + 9]; - b10 += kw[dm17 + 10]; - b11 += kw[dm17 + 11]; - b12 += kw[dm17 + 12]; - b13 += kw[dm17 + 13] + t[dm3]; - b14 += kw[dm17 + 14] + t[dm3 + 1]; - b15 += kw[dm17 + 15] + (uint)d; - - /* - * 4 more rounds of mix/permute - */ - b1 = RotlXor(b1, ROTATION_4_0, b0 += b1); - b3 = RotlXor(b3, ROTATION_4_1, b2 += b3); - b5 = RotlXor(b5, ROTATION_4_2, b4 += b5); - b7 = RotlXor(b7, ROTATION_4_3, b6 += b7); - b9 = RotlXor(b9, ROTATION_4_4, b8 += b9); - b11 = RotlXor(b11, ROTATION_4_5, b10 += b11); - b13 = RotlXor(b13, ROTATION_4_6, b12 += b13); - b15 = RotlXor(b15, ROTATION_4_7, b14 += b15); - - b9 = RotlXor(b9, ROTATION_5_0, b0 += b9); - b13 = RotlXor(b13, ROTATION_5_1, b2 += b13); - b11 = RotlXor(b11, ROTATION_5_2, b6 += b11); - b15 = RotlXor(b15, ROTATION_5_3, b4 += b15); - b7 = RotlXor(b7, ROTATION_5_4, b10 += b7); - b3 = RotlXor(b3, ROTATION_5_5, b12 += b3); - b5 = RotlXor(b5, ROTATION_5_6, b14 += b5); - b1 = RotlXor(b1, ROTATION_5_7, b8 += b1); - - b7 = RotlXor(b7, ROTATION_6_0, b0 += b7); - b5 = RotlXor(b5, ROTATION_6_1, b2 += b5); - b3 = RotlXor(b3, ROTATION_6_2, b4 += b3); - b1 = RotlXor(b1, ROTATION_6_3, b6 += b1); - b15 = RotlXor(b15, ROTATION_6_4, b12 += b15); - b13 = RotlXor(b13, ROTATION_6_5, b14 += b13); - b11 = RotlXor(b11, ROTATION_6_6, b8 += b11); - b9 = RotlXor(b9, ROTATION_6_7, b10 += b9); - - b15 = RotlXor(b15, ROTATION_7_0, b0 += b15); - b11 = RotlXor(b11, ROTATION_7_1, b2 += b11); - b13 = RotlXor(b13, ROTATION_7_2, b6 += b13); - b9 = RotlXor(b9, ROTATION_7_3, b4 += b9); - b1 = RotlXor(b1, ROTATION_7_4, b14 += b1); - b5 = RotlXor(b5, ROTATION_7_5, b8 += b5); - b3 = RotlXor(b3, ROTATION_7_6, b10 += b3); - b7 = RotlXor(b7, ROTATION_7_7, b12 += b7); - - /* - * Subkey injection for next 4 rounds. - */ - b0 += kw[dm17 + 1]; - b1 += kw[dm17 + 2]; - b2 += kw[dm17 + 3]; - b3 += kw[dm17 + 4]; - b4 += kw[dm17 + 5]; - b5 += kw[dm17 + 6]; - b6 += kw[dm17 + 7]; - b7 += kw[dm17 + 8]; - b8 += kw[dm17 + 9]; - b9 += kw[dm17 + 10]; - b10 += kw[dm17 + 11]; - b11 += kw[dm17 + 12]; - b12 += kw[dm17 + 13]; - b13 += kw[dm17 + 14] + t[dm3 + 1]; - b14 += kw[dm17 + 15] + t[dm3 + 2]; - b15 += kw[dm17 + 16] + (uint)d + 1; - - } - - /* - * Output cipher state. - */ - outWords[0] = b0; - outWords[1] = b1; - outWords[2] = b2; - outWords[3] = b3; - outWords[4] = b4; - outWords[5] = b5; - outWords[6] = b6; - outWords[7] = b7; - outWords[8] = b8; - outWords[9] = b9; - outWords[10] = b10; - outWords[11] = b11; - outWords[12] = b12; - outWords[13] = b13; - outWords[14] = b14; - outWords[15] = b15; - } - - internal override void DecryptBlock(ulong[] block, ulong[] state) - { - ulong[] kw = this.kw; - ulong[] t = this.t; - int[] mod17 = MOD17; - int[] mod3 = MOD3; - - /* Help the JIT avoid index bounds checks */ - if (kw.Length != 33) - { - throw new ArgumentException(); - } - if (t.Length != 5) - { - throw new ArgumentException(); - } - - ulong b0 = block[0]; - ulong b1 = block[1]; - ulong b2 = block[2]; - ulong b3 = block[3]; - ulong b4 = block[4]; - ulong b5 = block[5]; - ulong b6 = block[6]; - ulong b7 = block[7]; - ulong b8 = block[8]; - ulong b9 = block[9]; - ulong b10 = block[10]; - ulong b11 = block[11]; - ulong b12 = block[12]; - ulong b13 = block[13]; - ulong b14 = block[14]; - ulong b15 = block[15]; - - for (int d = (ROUNDS_1024 / 4) - 1; d >= 1; d -= 2) - { - int dm17 = mod17[d]; - int dm3 = mod3[d]; - - /* Reverse key injection for second 4 rounds */ - b0 -= kw[dm17 + 1]; - b1 -= kw[dm17 + 2]; - b2 -= kw[dm17 + 3]; - b3 -= kw[dm17 + 4]; - b4 -= kw[dm17 + 5]; - b5 -= kw[dm17 + 6]; - b6 -= kw[dm17 + 7]; - b7 -= kw[dm17 + 8]; - b8 -= kw[dm17 + 9]; - b9 -= kw[dm17 + 10]; - b10 -= kw[dm17 + 11]; - b11 -= kw[dm17 + 12]; - b12 -= kw[dm17 + 13]; - b13 -= kw[dm17 + 14] + t[dm3 + 1]; - b14 -= kw[dm17 + 15] + t[dm3 + 2]; - b15 -= kw[dm17 + 16] + (uint)d + 1; - - /* Reverse second 4 mix/permute rounds */ - b15 = XorRotr(b15, ROTATION_7_0, b0); - b0 -= b15; - b11 = XorRotr(b11, ROTATION_7_1, b2); - b2 -= b11; - b13 = XorRotr(b13, ROTATION_7_2, b6); - b6 -= b13; - b9 = XorRotr(b9, ROTATION_7_3, b4); - b4 -= b9; - b1 = XorRotr(b1, ROTATION_7_4, b14); - b14 -= b1; - b5 = XorRotr(b5, ROTATION_7_5, b8); - b8 -= b5; - b3 = XorRotr(b3, ROTATION_7_6, b10); - b10 -= b3; - b7 = XorRotr(b7, ROTATION_7_7, b12); - b12 -= b7; - - b7 = XorRotr(b7, ROTATION_6_0, b0); - b0 -= b7; - b5 = XorRotr(b5, ROTATION_6_1, b2); - b2 -= b5; - b3 = XorRotr(b3, ROTATION_6_2, b4); - b4 -= b3; - b1 = XorRotr(b1, ROTATION_6_3, b6); - b6 -= b1; - b15 = XorRotr(b15, ROTATION_6_4, b12); - b12 -= b15; - b13 = XorRotr(b13, ROTATION_6_5, b14); - b14 -= b13; - b11 = XorRotr(b11, ROTATION_6_6, b8); - b8 -= b11; - b9 = XorRotr(b9, ROTATION_6_7, b10); - b10 -= b9; - - b9 = XorRotr(b9, ROTATION_5_0, b0); - b0 -= b9; - b13 = XorRotr(b13, ROTATION_5_1, b2); - b2 -= b13; - b11 = XorRotr(b11, ROTATION_5_2, b6); - b6 -= b11; - b15 = XorRotr(b15, ROTATION_5_3, b4); - b4 -= b15; - b7 = XorRotr(b7, ROTATION_5_4, b10); - b10 -= b7; - b3 = XorRotr(b3, ROTATION_5_5, b12); - b12 -= b3; - b5 = XorRotr(b5, ROTATION_5_6, b14); - b14 -= b5; - b1 = XorRotr(b1, ROTATION_5_7, b8); - b8 -= b1; - - b1 = XorRotr(b1, ROTATION_4_0, b0); - b0 -= b1; - b3 = XorRotr(b3, ROTATION_4_1, b2); - b2 -= b3; - b5 = XorRotr(b5, ROTATION_4_2, b4); - b4 -= b5; - b7 = XorRotr(b7, ROTATION_4_3, b6); - b6 -= b7; - b9 = XorRotr(b9, ROTATION_4_4, b8); - b8 -= b9; - b11 = XorRotr(b11, ROTATION_4_5, b10); - b10 -= b11; - b13 = XorRotr(b13, ROTATION_4_6, b12); - b12 -= b13; - b15 = XorRotr(b15, ROTATION_4_7, b14); - b14 -= b15; - - /* Reverse key injection for first 4 rounds */ - b0 -= kw[dm17]; - b1 -= kw[dm17 + 1]; - b2 -= kw[dm17 + 2]; - b3 -= kw[dm17 + 3]; - b4 -= kw[dm17 + 4]; - b5 -= kw[dm17 + 5]; - b6 -= kw[dm17 + 6]; - b7 -= kw[dm17 + 7]; - b8 -= kw[dm17 + 8]; - b9 -= kw[dm17 + 9]; - b10 -= kw[dm17 + 10]; - b11 -= kw[dm17 + 11]; - b12 -= kw[dm17 + 12]; - b13 -= kw[dm17 + 13] + t[dm3]; - b14 -= kw[dm17 + 14] + t[dm3 + 1]; - b15 -= kw[dm17 + 15] + (uint)d; - - /* Reverse first 4 mix/permute rounds */ - b15 = XorRotr(b15, ROTATION_3_0, b0); - b0 -= b15; - b11 = XorRotr(b11, ROTATION_3_1, b2); - b2 -= b11; - b13 = XorRotr(b13, ROTATION_3_2, b6); - b6 -= b13; - b9 = XorRotr(b9, ROTATION_3_3, b4); - b4 -= b9; - b1 = XorRotr(b1, ROTATION_3_4, b14); - b14 -= b1; - b5 = XorRotr(b5, ROTATION_3_5, b8); - b8 -= b5; - b3 = XorRotr(b3, ROTATION_3_6, b10); - b10 -= b3; - b7 = XorRotr(b7, ROTATION_3_7, b12); - b12 -= b7; - - b7 = XorRotr(b7, ROTATION_2_0, b0); - b0 -= b7; - b5 = XorRotr(b5, ROTATION_2_1, b2); - b2 -= b5; - b3 = XorRotr(b3, ROTATION_2_2, b4); - b4 -= b3; - b1 = XorRotr(b1, ROTATION_2_3, b6); - b6 -= b1; - b15 = XorRotr(b15, ROTATION_2_4, b12); - b12 -= b15; - b13 = XorRotr(b13, ROTATION_2_5, b14); - b14 -= b13; - b11 = XorRotr(b11, ROTATION_2_6, b8); - b8 -= b11; - b9 = XorRotr(b9, ROTATION_2_7, b10); - b10 -= b9; - - b9 = XorRotr(b9, ROTATION_1_0, b0); - b0 -= b9; - b13 = XorRotr(b13, ROTATION_1_1, b2); - b2 -= b13; - b11 = XorRotr(b11, ROTATION_1_2, b6); - b6 -= b11; - b15 = XorRotr(b15, ROTATION_1_3, b4); - b4 -= b15; - b7 = XorRotr(b7, ROTATION_1_4, b10); - b10 -= b7; - b3 = XorRotr(b3, ROTATION_1_5, b12); - b12 -= b3; - b5 = XorRotr(b5, ROTATION_1_6, b14); - b14 -= b5; - b1 = XorRotr(b1, ROTATION_1_7, b8); - b8 -= b1; - - b1 = XorRotr(b1, ROTATION_0_0, b0); - b0 -= b1; - b3 = XorRotr(b3, ROTATION_0_1, b2); - b2 -= b3; - b5 = XorRotr(b5, ROTATION_0_2, b4); - b4 -= b5; - b7 = XorRotr(b7, ROTATION_0_3, b6); - b6 -= b7; - b9 = XorRotr(b9, ROTATION_0_4, b8); - b8 -= b9; - b11 = XorRotr(b11, ROTATION_0_5, b10); - b10 -= b11; - b13 = XorRotr(b13, ROTATION_0_6, b12); - b12 -= b13; - b15 = XorRotr(b15, ROTATION_0_7, b14); - b14 -= b15; - } - - /* - * First subkey uninjection. - */ - b0 -= kw[0]; - b1 -= kw[1]; - b2 -= kw[2]; - b3 -= kw[3]; - b4 -= kw[4]; - b5 -= kw[5]; - b6 -= kw[6]; - b7 -= kw[7]; - b8 -= kw[8]; - b9 -= kw[9]; - b10 -= kw[10]; - b11 -= kw[11]; - b12 -= kw[12]; - b13 -= kw[13] + t[0]; - b14 -= kw[14] + t[1]; - b15 -= kw[15]; - - /* - * Output cipher state. - */ - state[0] = b0; - state[1] = b1; - state[2] = b2; - state[3] = b3; - state[4] = b4; - state[5] = b5; - state[6] = b6; - state[7] = b7; - state[8] = b8; - state[9] = b9; - state[10] = b10; - state[11] = b11; - state[12] = b12; - state[13] = b13; - state[14] = b14; - state[15] = b15; - } - - } - - } -} \ No newline at end of file diff --git a/bc-sharp-crypto/src/crypto/engines/TnepresEngine.cs b/bc-sharp-crypto/src/crypto/engines/TnepresEngine.cs deleted file mode 100644 index ce687d1..0000000 --- a/bc-sharp-crypto/src/crypto/engines/TnepresEngine.cs +++ /dev/null @@ -1,299 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * Tnepres is a 128-bit 32-round block cipher with variable key lengths, - * including 128, 192 and 256 bit keys conjectured to be at least as - * secure as three-key triple-DES. - *

- * Tnepres is based on Serpent which was designed by Ross Anderson, Eli Biham and Lars Knudsen as a - * candidate algorithm for the NIST AES Quest. Unfortunately there was an endianness issue - * with test vectors in the AES submission and the resulting confusion lead to the Tnepres cipher - * as well, which is a byte swapped version of Serpent. - *

- *

- * For full details see The Serpent home page - *

- */ - public sealed class TnepresEngine - : SerpentEngineBase - { - public override string AlgorithmName - { - get { return "Tnepres"; } - } - - /** - * Expand a user-supplied key material into a session key. - * - * @param key The user-key bytes (multiples of 4) to use. - * @exception ArgumentException - */ - protected override int[] MakeWorkingKey(byte[] key) - { - // - // pad key to 256 bits - // - int[] kPad = new int[16]; - int off = 0; - int length = 0; - - for (off = key.Length - 4; off > 0; off -= 4) - { - kPad[length++] = (int)Pack.BE_To_UInt32(key, off); - } - - if (off == 0) - { - kPad[length++] = (int)Pack.BE_To_UInt32(key, 0); - if (length < 8) - { - kPad[length] = 1; - } - } - else - { - throw new ArgumentException("key must be a multiple of 4 bytes"); - } - - // - // expand the padded key up to 33 x 128 bits of key material - // - int amount = (ROUNDS + 1) * 4; - int[] w = new int[amount]; - - // - // compute w0 to w7 from w-8 to w-1 - // - for (int i = 8; i < 16; i++) - { - kPad[i] = RotateLeft(kPad[i - 8] ^ kPad[i - 5] ^ kPad[i - 3] ^ kPad[i - 1] ^ PHI ^ (i - 8), 11); - } - - Array.Copy(kPad, 8, w, 0, 8); - - // - // compute w8 to w136 - // - for (int i = 8; i < amount; i++) - { - w[i] = RotateLeft(w[i - 8] ^ w[i - 5] ^ w[i - 3] ^ w[i - 1] ^ PHI ^ i, 11); - } - - // - // create the working keys by processing w with the Sbox and IP - // - Sb3(w[0], w[1], w[2], w[3]); - w[0] = X0; w[1] = X1; w[2] = X2; w[3] = X3; - Sb2(w[4], w[5], w[6], w[7]); - w[4] = X0; w[5] = X1; w[6] = X2; w[7] = X3; - Sb1(w[8], w[9], w[10], w[11]); - w[8] = X0; w[9] = X1; w[10] = X2; w[11] = X3; - Sb0(w[12], w[13], w[14], w[15]); - w[12] = X0; w[13] = X1; w[14] = X2; w[15] = X3; - Sb7(w[16], w[17], w[18], w[19]); - w[16] = X0; w[17] = X1; w[18] = X2; w[19] = X3; - Sb6(w[20], w[21], w[22], w[23]); - w[20] = X0; w[21] = X1; w[22] = X2; w[23] = X3; - Sb5(w[24], w[25], w[26], w[27]); - w[24] = X0; w[25] = X1; w[26] = X2; w[27] = X3; - Sb4(w[28], w[29], w[30], w[31]); - w[28] = X0; w[29] = X1; w[30] = X2; w[31] = X3; - Sb3(w[32], w[33], w[34], w[35]); - w[32] = X0; w[33] = X1; w[34] = X2; w[35] = X3; - Sb2(w[36], w[37], w[38], w[39]); - w[36] = X0; w[37] = X1; w[38] = X2; w[39] = X3; - Sb1(w[40], w[41], w[42], w[43]); - w[40] = X0; w[41] = X1; w[42] = X2; w[43] = X3; - Sb0(w[44], w[45], w[46], w[47]); - w[44] = X0; w[45] = X1; w[46] = X2; w[47] = X3; - Sb7(w[48], w[49], w[50], w[51]); - w[48] = X0; w[49] = X1; w[50] = X2; w[51] = X3; - Sb6(w[52], w[53], w[54], w[55]); - w[52] = X0; w[53] = X1; w[54] = X2; w[55] = X3; - Sb5(w[56], w[57], w[58], w[59]); - w[56] = X0; w[57] = X1; w[58] = X2; w[59] = X3; - Sb4(w[60], w[61], w[62], w[63]); - w[60] = X0; w[61] = X1; w[62] = X2; w[63] = X3; - Sb3(w[64], w[65], w[66], w[67]); - w[64] = X0; w[65] = X1; w[66] = X2; w[67] = X3; - Sb2(w[68], w[69], w[70], w[71]); - w[68] = X0; w[69] = X1; w[70] = X2; w[71] = X3; - Sb1(w[72], w[73], w[74], w[75]); - w[72] = X0; w[73] = X1; w[74] = X2; w[75] = X3; - Sb0(w[76], w[77], w[78], w[79]); - w[76] = X0; w[77] = X1; w[78] = X2; w[79] = X3; - Sb7(w[80], w[81], w[82], w[83]); - w[80] = X0; w[81] = X1; w[82] = X2; w[83] = X3; - Sb6(w[84], w[85], w[86], w[87]); - w[84] = X0; w[85] = X1; w[86] = X2; w[87] = X3; - Sb5(w[88], w[89], w[90], w[91]); - w[88] = X0; w[89] = X1; w[90] = X2; w[91] = X3; - Sb4(w[92], w[93], w[94], w[95]); - w[92] = X0; w[93] = X1; w[94] = X2; w[95] = X3; - Sb3(w[96], w[97], w[98], w[99]); - w[96] = X0; w[97] = X1; w[98] = X2; w[99] = X3; - Sb2(w[100], w[101], w[102], w[103]); - w[100] = X0; w[101] = X1; w[102] = X2; w[103] = X3; - Sb1(w[104], w[105], w[106], w[107]); - w[104] = X0; w[105] = X1; w[106] = X2; w[107] = X3; - Sb0(w[108], w[109], w[110], w[111]); - w[108] = X0; w[109] = X1; w[110] = X2; w[111] = X3; - Sb7(w[112], w[113], w[114], w[115]); - w[112] = X0; w[113] = X1; w[114] = X2; w[115] = X3; - Sb6(w[116], w[117], w[118], w[119]); - w[116] = X0; w[117] = X1; w[118] = X2; w[119] = X3; - Sb5(w[120], w[121], w[122], w[123]); - w[120] = X0; w[121] = X1; w[122] = X2; w[123] = X3; - Sb4(w[124], w[125], w[126], w[127]); - w[124] = X0; w[125] = X1; w[126] = X2; w[127] = X3; - Sb3(w[128], w[129], w[130], w[131]); - w[128] = X0; w[129] = X1; w[130] = X2; w[131] = X3; - - return w; - } - - /** - * Encrypt one block of plaintext. - * - * @param input the array containing the input data. - * @param inOff offset into the in array the data starts at. - * @param output the array the output data will be copied into. - * @param outOff the offset into the out array the output will start at. - */ - protected override void EncryptBlock(byte[] input, int inOff, byte[] output, int outOff) - { - X3 = (int)Pack.BE_To_UInt32(input, inOff); - X2 = (int)Pack.BE_To_UInt32(input, inOff + 4); - X1 = (int)Pack.BE_To_UInt32(input, inOff + 8); - X0 = (int)Pack.BE_To_UInt32(input, inOff + 12); - - Sb0(wKey[0] ^ X0, wKey[1] ^ X1, wKey[2] ^ X2, wKey[3] ^ X3); LT(); - Sb1(wKey[4] ^ X0, wKey[5] ^ X1, wKey[6] ^ X2, wKey[7] ^ X3); LT(); - Sb2(wKey[8] ^ X0, wKey[9] ^ X1, wKey[10] ^ X2, wKey[11] ^ X3); LT(); - Sb3(wKey[12] ^ X0, wKey[13] ^ X1, wKey[14] ^ X2, wKey[15] ^ X3); LT(); - Sb4(wKey[16] ^ X0, wKey[17] ^ X1, wKey[18] ^ X2, wKey[19] ^ X3); LT(); - Sb5(wKey[20] ^ X0, wKey[21] ^ X1, wKey[22] ^ X2, wKey[23] ^ X3); LT(); - Sb6(wKey[24] ^ X0, wKey[25] ^ X1, wKey[26] ^ X2, wKey[27] ^ X3); LT(); - Sb7(wKey[28] ^ X0, wKey[29] ^ X1, wKey[30] ^ X2, wKey[31] ^ X3); LT(); - Sb0(wKey[32] ^ X0, wKey[33] ^ X1, wKey[34] ^ X2, wKey[35] ^ X3); LT(); - Sb1(wKey[36] ^ X0, wKey[37] ^ X1, wKey[38] ^ X2, wKey[39] ^ X3); LT(); - Sb2(wKey[40] ^ X0, wKey[41] ^ X1, wKey[42] ^ X2, wKey[43] ^ X3); LT(); - Sb3(wKey[44] ^ X0, wKey[45] ^ X1, wKey[46] ^ X2, wKey[47] ^ X3); LT(); - Sb4(wKey[48] ^ X0, wKey[49] ^ X1, wKey[50] ^ X2, wKey[51] ^ X3); LT(); - Sb5(wKey[52] ^ X0, wKey[53] ^ X1, wKey[54] ^ X2, wKey[55] ^ X3); LT(); - Sb6(wKey[56] ^ X0, wKey[57] ^ X1, wKey[58] ^ X2, wKey[59] ^ X3); LT(); - Sb7(wKey[60] ^ X0, wKey[61] ^ X1, wKey[62] ^ X2, wKey[63] ^ X3); LT(); - Sb0(wKey[64] ^ X0, wKey[65] ^ X1, wKey[66] ^ X2, wKey[67] ^ X3); LT(); - Sb1(wKey[68] ^ X0, wKey[69] ^ X1, wKey[70] ^ X2, wKey[71] ^ X3); LT(); - Sb2(wKey[72] ^ X0, wKey[73] ^ X1, wKey[74] ^ X2, wKey[75] ^ X3); LT(); - Sb3(wKey[76] ^ X0, wKey[77] ^ X1, wKey[78] ^ X2, wKey[79] ^ X3); LT(); - Sb4(wKey[80] ^ X0, wKey[81] ^ X1, wKey[82] ^ X2, wKey[83] ^ X3); LT(); - Sb5(wKey[84] ^ X0, wKey[85] ^ X1, wKey[86] ^ X2, wKey[87] ^ X3); LT(); - Sb6(wKey[88] ^ X0, wKey[89] ^ X1, wKey[90] ^ X2, wKey[91] ^ X3); LT(); - Sb7(wKey[92] ^ X0, wKey[93] ^ X1, wKey[94] ^ X2, wKey[95] ^ X3); LT(); - Sb0(wKey[96] ^ X0, wKey[97] ^ X1, wKey[98] ^ X2, wKey[99] ^ X3); LT(); - Sb1(wKey[100] ^ X0, wKey[101] ^ X1, wKey[102] ^ X2, wKey[103] ^ X3); LT(); - Sb2(wKey[104] ^ X0, wKey[105] ^ X1, wKey[106] ^ X2, wKey[107] ^ X3); LT(); - Sb3(wKey[108] ^ X0, wKey[109] ^ X1, wKey[110] ^ X2, wKey[111] ^ X3); LT(); - Sb4(wKey[112] ^ X0, wKey[113] ^ X1, wKey[114] ^ X2, wKey[115] ^ X3); LT(); - Sb5(wKey[116] ^ X0, wKey[117] ^ X1, wKey[118] ^ X2, wKey[119] ^ X3); LT(); - Sb6(wKey[120] ^ X0, wKey[121] ^ X1, wKey[122] ^ X2, wKey[123] ^ X3); LT(); - Sb7(wKey[124] ^ X0, wKey[125] ^ X1, wKey[126] ^ X2, wKey[127] ^ X3); - - Pack.UInt32_To_BE((uint)(wKey[131] ^ X3), output, outOff); - Pack.UInt32_To_BE((uint)(wKey[130] ^ X2), output, outOff + 4); - Pack.UInt32_To_BE((uint)(wKey[129] ^ X1), output, outOff + 8); - Pack.UInt32_To_BE((uint)(wKey[128] ^ X0), output, outOff + 12); - } - - /** - * Decrypt one block of ciphertext. - * - * @param input the array containing the input data. - * @param inOff offset into the in array the data starts at. - * @param output the array the output data will be copied into. - * @param outOff the offset into the out array the output will start at. - */ - protected override void DecryptBlock(byte[] input, int inOff, byte[] output, int outOff) - { - X3 = wKey[131] ^ (int)Pack.BE_To_UInt32(input, inOff); - X2 = wKey[130] ^ (int)Pack.BE_To_UInt32(input, inOff + 4); - X1 = wKey[129] ^ (int)Pack.BE_To_UInt32(input, inOff + 8); - X0 = wKey[128] ^ (int)Pack.BE_To_UInt32(input, inOff + 12); - - Ib7(X0, X1, X2, X3); - X0 ^= wKey[124]; X1 ^= wKey[125]; X2 ^= wKey[126]; X3 ^= wKey[127]; - InverseLT(); Ib6(X0, X1, X2, X3); - X0 ^= wKey[120]; X1 ^= wKey[121]; X2 ^= wKey[122]; X3 ^= wKey[123]; - InverseLT(); Ib5(X0, X1, X2, X3); - X0 ^= wKey[116]; X1 ^= wKey[117]; X2 ^= wKey[118]; X3 ^= wKey[119]; - InverseLT(); Ib4(X0, X1, X2, X3); - X0 ^= wKey[112]; X1 ^= wKey[113]; X2 ^= wKey[114]; X3 ^= wKey[115]; - InverseLT(); Ib3(X0, X1, X2, X3); - X0 ^= wKey[108]; X1 ^= wKey[109]; X2 ^= wKey[110]; X3 ^= wKey[111]; - InverseLT(); Ib2(X0, X1, X2, X3); - X0 ^= wKey[104]; X1 ^= wKey[105]; X2 ^= wKey[106]; X3 ^= wKey[107]; - InverseLT(); Ib1(X0, X1, X2, X3); - X0 ^= wKey[100]; X1 ^= wKey[101]; X2 ^= wKey[102]; X3 ^= wKey[103]; - InverseLT(); Ib0(X0, X1, X2, X3); - X0 ^= wKey[96]; X1 ^= wKey[97]; X2 ^= wKey[98]; X3 ^= wKey[99]; - InverseLT(); Ib7(X0, X1, X2, X3); - X0 ^= wKey[92]; X1 ^= wKey[93]; X2 ^= wKey[94]; X3 ^= wKey[95]; - InverseLT(); Ib6(X0, X1, X2, X3); - X0 ^= wKey[88]; X1 ^= wKey[89]; X2 ^= wKey[90]; X3 ^= wKey[91]; - InverseLT(); Ib5(X0, X1, X2, X3); - X0 ^= wKey[84]; X1 ^= wKey[85]; X2 ^= wKey[86]; X3 ^= wKey[87]; - InverseLT(); Ib4(X0, X1, X2, X3); - X0 ^= wKey[80]; X1 ^= wKey[81]; X2 ^= wKey[82]; X3 ^= wKey[83]; - InverseLT(); Ib3(X0, X1, X2, X3); - X0 ^= wKey[76]; X1 ^= wKey[77]; X2 ^= wKey[78]; X3 ^= wKey[79]; - InverseLT(); Ib2(X0, X1, X2, X3); - X0 ^= wKey[72]; X1 ^= wKey[73]; X2 ^= wKey[74]; X3 ^= wKey[75]; - InverseLT(); Ib1(X0, X1, X2, X3); - X0 ^= wKey[68]; X1 ^= wKey[69]; X2 ^= wKey[70]; X3 ^= wKey[71]; - InverseLT(); Ib0(X0, X1, X2, X3); - X0 ^= wKey[64]; X1 ^= wKey[65]; X2 ^= wKey[66]; X3 ^= wKey[67]; - InverseLT(); Ib7(X0, X1, X2, X3); - X0 ^= wKey[60]; X1 ^= wKey[61]; X2 ^= wKey[62]; X3 ^= wKey[63]; - InverseLT(); Ib6(X0, X1, X2, X3); - X0 ^= wKey[56]; X1 ^= wKey[57]; X2 ^= wKey[58]; X3 ^= wKey[59]; - InverseLT(); Ib5(X0, X1, X2, X3); - X0 ^= wKey[52]; X1 ^= wKey[53]; X2 ^= wKey[54]; X3 ^= wKey[55]; - InverseLT(); Ib4(X0, X1, X2, X3); - X0 ^= wKey[48]; X1 ^= wKey[49]; X2 ^= wKey[50]; X3 ^= wKey[51]; - InverseLT(); Ib3(X0, X1, X2, X3); - X0 ^= wKey[44]; X1 ^= wKey[45]; X2 ^= wKey[46]; X3 ^= wKey[47]; - InverseLT(); Ib2(X0, X1, X2, X3); - X0 ^= wKey[40]; X1 ^= wKey[41]; X2 ^= wKey[42]; X3 ^= wKey[43]; - InverseLT(); Ib1(X0, X1, X2, X3); - X0 ^= wKey[36]; X1 ^= wKey[37]; X2 ^= wKey[38]; X3 ^= wKey[39]; - InverseLT(); Ib0(X0, X1, X2, X3); - X0 ^= wKey[32]; X1 ^= wKey[33]; X2 ^= wKey[34]; X3 ^= wKey[35]; - InverseLT(); Ib7(X0, X1, X2, X3); - X0 ^= wKey[28]; X1 ^= wKey[29]; X2 ^= wKey[30]; X3 ^= wKey[31]; - InverseLT(); Ib6(X0, X1, X2, X3); - X0 ^= wKey[24]; X1 ^= wKey[25]; X2 ^= wKey[26]; X3 ^= wKey[27]; - InverseLT(); Ib5(X0, X1, X2, X3); - X0 ^= wKey[20]; X1 ^= wKey[21]; X2 ^= wKey[22]; X3 ^= wKey[23]; - InverseLT(); Ib4(X0, X1, X2, X3); - X0 ^= wKey[16]; X1 ^= wKey[17]; X2 ^= wKey[18]; X3 ^= wKey[19]; - InverseLT(); Ib3(X0, X1, X2, X3); - X0 ^= wKey[12]; X1 ^= wKey[13]; X2 ^= wKey[14]; X3 ^= wKey[15]; - InverseLT(); Ib2(X0, X1, X2, X3); - X0 ^= wKey[8]; X1 ^= wKey[9]; X2 ^= wKey[10]; X3 ^= wKey[11]; - InverseLT(); Ib1(X0, X1, X2, X3); - X0 ^= wKey[4]; X1 ^= wKey[5]; X2 ^= wKey[6]; X3 ^= wKey[7]; - InverseLT(); Ib0(X0, X1, X2, X3); - - Pack.UInt32_To_BE((uint)(X3 ^ wKey[3]), output, outOff); - Pack.UInt32_To_BE((uint)(X2 ^ wKey[2]), output, outOff + 4); - Pack.UInt32_To_BE((uint)(X1 ^ wKey[1]), output, outOff + 8); - Pack.UInt32_To_BE((uint)(X0 ^ wKey[0]), output, outOff + 12); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/TwofishEngine.cs b/bc-sharp-crypto/src/crypto/engines/TwofishEngine.cs deleted file mode 100644 index 71c2465..0000000 --- a/bc-sharp-crypto/src/crypto/engines/TwofishEngine.cs +++ /dev/null @@ -1,675 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * A class that provides Twofish encryption operations. - * - * This Java implementation is based on the Java reference - * implementation provided by Bruce Schneier and developed - * by Raif S. Naffah. - */ - public sealed class TwofishEngine - : IBlockCipher - { - private static readonly byte[,] P = { - { // p0 - (byte) 0xA9, (byte) 0x67, (byte) 0xB3, (byte) 0xE8, - (byte) 0x04, (byte) 0xFD, (byte) 0xA3, (byte) 0x76, - (byte) 0x9A, (byte) 0x92, (byte) 0x80, (byte) 0x78, - (byte) 0xE4, (byte) 0xDD, (byte) 0xD1, (byte) 0x38, - (byte) 0x0D, (byte) 0xC6, (byte) 0x35, (byte) 0x98, - (byte) 0x18, (byte) 0xF7, (byte) 0xEC, (byte) 0x6C, - (byte) 0x43, (byte) 0x75, (byte) 0x37, (byte) 0x26, - (byte) 0xFA, (byte) 0x13, (byte) 0x94, (byte) 0x48, - (byte) 0xF2, (byte) 0xD0, (byte) 0x8B, (byte) 0x30, - (byte) 0x84, (byte) 0x54, (byte) 0xDF, (byte) 0x23, - (byte) 0x19, (byte) 0x5B, (byte) 0x3D, (byte) 0x59, - (byte) 0xF3, (byte) 0xAE, (byte) 0xA2, (byte) 0x82, - (byte) 0x63, (byte) 0x01, (byte) 0x83, (byte) 0x2E, - (byte) 0xD9, (byte) 0x51, (byte) 0x9B, (byte) 0x7C, - (byte) 0xA6, (byte) 0xEB, (byte) 0xA5, (byte) 0xBE, - (byte) 0x16, (byte) 0x0C, (byte) 0xE3, (byte) 0x61, - (byte) 0xC0, (byte) 0x8C, (byte) 0x3A, (byte) 0xF5, - (byte) 0x73, (byte) 0x2C, (byte) 0x25, (byte) 0x0B, - (byte) 0xBB, (byte) 0x4E, (byte) 0x89, (byte) 0x6B, - (byte) 0x53, (byte) 0x6A, (byte) 0xB4, (byte) 0xF1, - (byte) 0xE1, (byte) 0xE6, (byte) 0xBD, (byte) 0x45, - (byte) 0xE2, (byte) 0xF4, (byte) 0xB6, (byte) 0x66, - (byte) 0xCC, (byte) 0x95, (byte) 0x03, (byte) 0x56, - (byte) 0xD4, (byte) 0x1C, (byte) 0x1E, (byte) 0xD7, - (byte) 0xFB, (byte) 0xC3, (byte) 0x8E, (byte) 0xB5, - (byte) 0xE9, (byte) 0xCF, (byte) 0xBF, (byte) 0xBA, - (byte) 0xEA, (byte) 0x77, (byte) 0x39, (byte) 0xAF, - (byte) 0x33, (byte) 0xC9, (byte) 0x62, (byte) 0x71, - (byte) 0x81, (byte) 0x79, (byte) 0x09, (byte) 0xAD, - (byte) 0x24, (byte) 0xCD, (byte) 0xF9, (byte) 0xD8, - (byte) 0xE5, (byte) 0xC5, (byte) 0xB9, (byte) 0x4D, - (byte) 0x44, (byte) 0x08, (byte) 0x86, (byte) 0xE7, - (byte) 0xA1, (byte) 0x1D, (byte) 0xAA, (byte) 0xED, - (byte) 0x06, (byte) 0x70, (byte) 0xB2, (byte) 0xD2, - (byte) 0x41, (byte) 0x7B, (byte) 0xA0, (byte) 0x11, - (byte) 0x31, (byte) 0xC2, (byte) 0x27, (byte) 0x90, - (byte) 0x20, (byte) 0xF6, (byte) 0x60, (byte) 0xFF, - (byte) 0x96, (byte) 0x5C, (byte) 0xB1, (byte) 0xAB, - (byte) 0x9E, (byte) 0x9C, (byte) 0x52, (byte) 0x1B, - (byte) 0x5F, (byte) 0x93, (byte) 0x0A, (byte) 0xEF, - (byte) 0x91, (byte) 0x85, (byte) 0x49, (byte) 0xEE, - (byte) 0x2D, (byte) 0x4F, (byte) 0x8F, (byte) 0x3B, - (byte) 0x47, (byte) 0x87, (byte) 0x6D, (byte) 0x46, - (byte) 0xD6, (byte) 0x3E, (byte) 0x69, (byte) 0x64, - (byte) 0x2A, (byte) 0xCE, (byte) 0xCB, (byte) 0x2F, - (byte) 0xFC, (byte) 0x97, (byte) 0x05, (byte) 0x7A, - (byte) 0xAC, (byte) 0x7F, (byte) 0xD5, (byte) 0x1A, - (byte) 0x4B, (byte) 0x0E, (byte) 0xA7, (byte) 0x5A, - (byte) 0x28, (byte) 0x14, (byte) 0x3F, (byte) 0x29, - (byte) 0x88, (byte) 0x3C, (byte) 0x4C, (byte) 0x02, - (byte) 0xB8, (byte) 0xDA, (byte) 0xB0, (byte) 0x17, - (byte) 0x55, (byte) 0x1F, (byte) 0x8A, (byte) 0x7D, - (byte) 0x57, (byte) 0xC7, (byte) 0x8D, (byte) 0x74, - (byte) 0xB7, (byte) 0xC4, (byte) 0x9F, (byte) 0x72, - (byte) 0x7E, (byte) 0x15, (byte) 0x22, (byte) 0x12, - (byte) 0x58, (byte) 0x07, (byte) 0x99, (byte) 0x34, - (byte) 0x6E, (byte) 0x50, (byte) 0xDE, (byte) 0x68, - (byte) 0x65, (byte) 0xBC, (byte) 0xDB, (byte) 0xF8, - (byte) 0xC8, (byte) 0xA8, (byte) 0x2B, (byte) 0x40, - (byte) 0xDC, (byte) 0xFE, (byte) 0x32, (byte) 0xA4, - (byte) 0xCA, (byte) 0x10, (byte) 0x21, (byte) 0xF0, - (byte) 0xD3, (byte) 0x5D, (byte) 0x0F, (byte) 0x00, - (byte) 0x6F, (byte) 0x9D, (byte) 0x36, (byte) 0x42, - (byte) 0x4A, (byte) 0x5E, (byte) 0xC1, (byte) 0xE0 }, - { // p1 - (byte) 0x75, (byte) 0xF3, (byte) 0xC6, (byte) 0xF4, - (byte) 0xDB, (byte) 0x7B, (byte) 0xFB, (byte) 0xC8, - (byte) 0x4A, (byte) 0xD3, (byte) 0xE6, (byte) 0x6B, - (byte) 0x45, (byte) 0x7D, (byte) 0xE8, (byte) 0x4B, - (byte) 0xD6, (byte) 0x32, (byte) 0xD8, (byte) 0xFD, - (byte) 0x37, (byte) 0x71, (byte) 0xF1, (byte) 0xE1, - (byte) 0x30, (byte) 0x0F, (byte) 0xF8, (byte) 0x1B, - (byte) 0x87, (byte) 0xFA, (byte) 0x06, (byte) 0x3F, - (byte) 0x5E, (byte) 0xBA, (byte) 0xAE, (byte) 0x5B, - (byte) 0x8A, (byte) 0x00, (byte) 0xBC, (byte) 0x9D, - (byte) 0x6D, (byte) 0xC1, (byte) 0xB1, (byte) 0x0E, - (byte) 0x80, (byte) 0x5D, (byte) 0xD2, (byte) 0xD5, - (byte) 0xA0, (byte) 0x84, (byte) 0x07, (byte) 0x14, - (byte) 0xB5, (byte) 0x90, (byte) 0x2C, (byte) 0xA3, - (byte) 0xB2, (byte) 0x73, (byte) 0x4C, (byte) 0x54, - (byte) 0x92, (byte) 0x74, (byte) 0x36, (byte) 0x51, - (byte) 0x38, (byte) 0xB0, (byte) 0xBD, (byte) 0x5A, - (byte) 0xFC, (byte) 0x60, (byte) 0x62, (byte) 0x96, - (byte) 0x6C, (byte) 0x42, (byte) 0xF7, (byte) 0x10, - (byte) 0x7C, (byte) 0x28, (byte) 0x27, (byte) 0x8C, - (byte) 0x13, (byte) 0x95, (byte) 0x9C, (byte) 0xC7, - (byte) 0x24, (byte) 0x46, (byte) 0x3B, (byte) 0x70, - (byte) 0xCA, (byte) 0xE3, (byte) 0x85, (byte) 0xCB, - (byte) 0x11, (byte) 0xD0, (byte) 0x93, (byte) 0xB8, - (byte) 0xA6, (byte) 0x83, (byte) 0x20, (byte) 0xFF, - (byte) 0x9F, (byte) 0x77, (byte) 0xC3, (byte) 0xCC, - (byte) 0x03, (byte) 0x6F, (byte) 0x08, (byte) 0xBF, - (byte) 0x40, (byte) 0xE7, (byte) 0x2B, (byte) 0xE2, - (byte) 0x79, (byte) 0x0C, (byte) 0xAA, (byte) 0x82, - (byte) 0x41, (byte) 0x3A, (byte) 0xEA, (byte) 0xB9, - (byte) 0xE4, (byte) 0x9A, (byte) 0xA4, (byte) 0x97, - (byte) 0x7E, (byte) 0xDA, (byte) 0x7A, (byte) 0x17, - (byte) 0x66, (byte) 0x94, (byte) 0xA1, (byte) 0x1D, - (byte) 0x3D, (byte) 0xF0, (byte) 0xDE, (byte) 0xB3, - (byte) 0x0B, (byte) 0x72, (byte) 0xA7, (byte) 0x1C, - (byte) 0xEF, (byte) 0xD1, (byte) 0x53, (byte) 0x3E, - (byte) 0x8F, (byte) 0x33, (byte) 0x26, (byte) 0x5F, - (byte) 0xEC, (byte) 0x76, (byte) 0x2A, (byte) 0x49, - (byte) 0x81, (byte) 0x88, (byte) 0xEE, (byte) 0x21, - (byte) 0xC4, (byte) 0x1A, (byte) 0xEB, (byte) 0xD9, - (byte) 0xC5, (byte) 0x39, (byte) 0x99, (byte) 0xCD, - (byte) 0xAD, (byte) 0x31, (byte) 0x8B, (byte) 0x01, - (byte) 0x18, (byte) 0x23, (byte) 0xDD, (byte) 0x1F, - (byte) 0x4E, (byte) 0x2D, (byte) 0xF9, (byte) 0x48, - (byte) 0x4F, (byte) 0xF2, (byte) 0x65, (byte) 0x8E, - (byte) 0x78, (byte) 0x5C, (byte) 0x58, (byte) 0x19, - (byte) 0x8D, (byte) 0xE5, (byte) 0x98, (byte) 0x57, - (byte) 0x67, (byte) 0x7F, (byte) 0x05, (byte) 0x64, - (byte) 0xAF, (byte) 0x63, (byte) 0xB6, (byte) 0xFE, - (byte) 0xF5, (byte) 0xB7, (byte) 0x3C, (byte) 0xA5, - (byte) 0xCE, (byte) 0xE9, (byte) 0x68, (byte) 0x44, - (byte) 0xE0, (byte) 0x4D, (byte) 0x43, (byte) 0x69, - (byte) 0x29, (byte) 0x2E, (byte) 0xAC, (byte) 0x15, - (byte) 0x59, (byte) 0xA8, (byte) 0x0A, (byte) 0x9E, - (byte) 0x6E, (byte) 0x47, (byte) 0xDF, (byte) 0x34, - (byte) 0x35, (byte) 0x6A, (byte) 0xCF, (byte) 0xDC, - (byte) 0x22, (byte) 0xC9, (byte) 0xC0, (byte) 0x9B, - (byte) 0x89, (byte) 0xD4, (byte) 0xED, (byte) 0xAB, - (byte) 0x12, (byte) 0xA2, (byte) 0x0D, (byte) 0x52, - (byte) 0xBB, (byte) 0x02, (byte) 0x2F, (byte) 0xA9, - (byte) 0xD7, (byte) 0x61, (byte) 0x1E, (byte) 0xB4, - (byte) 0x50, (byte) 0x04, (byte) 0xF6, (byte) 0xC2, - (byte) 0x16, (byte) 0x25, (byte) 0x86, (byte) 0x56, - (byte) 0x55, (byte) 0x09, (byte) 0xBE, (byte) 0x91 } - }; - - /** - * Define the fixed p0/p1 permutations used in keyed S-box lookup. - * By changing the following constant definitions, the S-boxes will - * automatically Get changed in the Twofish engine. - */ - private const int P_00 = 1; - private const int P_01 = 0; - private const int P_02 = 0; - private const int P_03 = P_01 ^ 1; - private const int P_04 = 1; - - private const int P_10 = 0; - private const int P_11 = 0; - private const int P_12 = 1; - private const int P_13 = P_11 ^ 1; - private const int P_14 = 0; - - private const int P_20 = 1; - private const int P_21 = 1; - private const int P_22 = 0; - private const int P_23 = P_21 ^ 1; - private const int P_24 = 0; - - private const int P_30 = 0; - private const int P_31 = 1; - private const int P_32 = 1; - private const int P_33 = P_31 ^ 1; - private const int P_34 = 1; - - /* Primitive polynomial for GF(256) */ - private const int GF256_FDBK = 0x169; - private const int GF256_FDBK_2 = GF256_FDBK / 2; - private const int GF256_FDBK_4 = GF256_FDBK / 4; - - private const int RS_GF_FDBK = 0x14D; // field generator - - //==================================== - // Useful constants - //==================================== - - private const int ROUNDS = 16; - private const int MAX_ROUNDS = 16; // bytes = 128 bits - private const int BLOCK_SIZE = 16; // bytes = 128 bits - private const int MAX_KEY_BITS = 256; - - private const int INPUT_WHITEN=0; - private const int OUTPUT_WHITEN=INPUT_WHITEN+BLOCK_SIZE/4; // 4 - private const int ROUND_SUBKEYS=OUTPUT_WHITEN+BLOCK_SIZE/4;// 8 - - private const int TOTAL_SUBKEYS=ROUND_SUBKEYS+2*MAX_ROUNDS;// 40 - - private const int SK_STEP = 0x02020202; - private const int SK_BUMP = 0x01010101; - private const int SK_ROTL = 9; - - private bool encrypting; - - private int[] gMDS0 = new int[MAX_KEY_BITS]; - private int[] gMDS1 = new int[MAX_KEY_BITS]; - private int[] gMDS2 = new int[MAX_KEY_BITS]; - private int[] gMDS3 = new int[MAX_KEY_BITS]; - - /** - * gSubKeys[] and gSBox[] are eventually used in the - * encryption and decryption methods. - */ - private int[] gSubKeys; - private int[] gSBox; - - private int k64Cnt; - - private byte[] workingKey; - - public TwofishEngine() - { - // calculate the MDS matrix - int[] m1 = new int[2]; - int[] mX = new int[2]; - int[] mY = new int[2]; - int j; - - for (int i=0; i< MAX_KEY_BITS ; i++) - { - j = P[0,i] & 0xff; - m1[0] = j; - mX[0] = Mx_X(j) & 0xff; - mY[0] = Mx_Y(j) & 0xff; - - j = P[1,i] & 0xff; - m1[1] = j; - mX[1] = Mx_X(j) & 0xff; - mY[1] = Mx_Y(j) & 0xff; - - gMDS0[i] = m1[P_00] | mX[P_00] << 8 | - mY[P_00] << 16 | mY[P_00] << 24; - - gMDS1[i] = mY[P_10] | mY[P_10] << 8 | - mX[P_10] << 16 | m1[P_10] << 24; - - gMDS2[i] = mX[P_20] | mY[P_20] << 8 | - m1[P_20] << 16 | mY[P_20] << 24; - - gMDS3[i] = mX[P_30] | m1[P_30] << 8 | - mY[P_30] << 16 | mX[P_30] << 24; - } - } - - /** - * initialise a Twofish cipher. - * - * @param forEncryption whether or not we are for encryption. - * @param parameters the parameters required to set up the cipher. - * @exception ArgumentException if the parameters argument is - * inappropriate. - */ - public void Init( - bool forEncryption, - ICipherParameters parameters) - { - if (!(parameters is KeyParameter)) - throw new ArgumentException("invalid parameter passed to Twofish init - " + Platform.GetTypeName(parameters)); - - this.encrypting = forEncryption; - this.workingKey = ((KeyParameter)parameters).GetKey(); - this.k64Cnt = (this.workingKey.Length / 8); // pre-padded ? - SetKey(this.workingKey); - } - - public string AlgorithmName - { - get { return "Twofish"; } - } - - public bool IsPartialBlockOkay - { - get { return false; } - } - - public int ProcessBlock( - byte[] input, - int inOff, - byte[] output, - int outOff) - { - if (workingKey == null) - throw new InvalidOperationException("Twofish not initialised"); - - Check.DataLength(input, inOff, BLOCK_SIZE, "input buffer too short"); - Check.OutputLength(output, outOff, BLOCK_SIZE, "output buffer too short"); - - if (encrypting) - { - EncryptBlock(input, inOff, output, outOff); - } - else - { - DecryptBlock(input, inOff, output, outOff); - } - - return BLOCK_SIZE; - } - - public void Reset() - { - if (this.workingKey != null) - { - SetKey(this.workingKey); - } - } - - public int GetBlockSize() - { - return BLOCK_SIZE; - } - - //================================== - // Private Implementation - //================================== - - private void SetKey(byte[] key) - { - int[] k32e = new int[MAX_KEY_BITS/64]; // 4 - int[] k32o = new int[MAX_KEY_BITS/64]; // 4 - - int[] sBoxKeys = new int[MAX_KEY_BITS/64]; // 4 - gSubKeys = new int[TOTAL_SUBKEYS]; - - if (k64Cnt < 1) - { - throw new ArgumentException("Key size less than 64 bits"); - } - - if (k64Cnt > 4) - { - throw new ArgumentException("Key size larger than 256 bits"); - } - - /* - * k64Cnt is the number of 8 byte blocks (64 chunks) - * that are in the input key. The input key is a - * maximum of 32 bytes ( 256 bits ), so the range - * for k64Cnt is 1..4 - */ - for (int i=0,p=0; i> 24); - A += B; - gSubKeys[i*2] = A; - A += B; - gSubKeys[i*2 + 1] = A << SK_ROTL | (int)((uint)A >> (32-SK_ROTL)); - } - - /* - * fully expand the table for speed - */ - int k0 = sBoxKeys[0]; - int k1 = sBoxKeys[1]; - int k2 = sBoxKeys[2]; - int k3 = sBoxKeys[3]; - int b0, b1, b2, b3; - gSBox = new int[4*MAX_KEY_BITS]; - for (int i=0; i>1) | x2 << 31; - x3 = (x3 << 1 | (int) ((uint)x3 >> 31)) ^ (t0 + 2*t1 + gSubKeys[k++]); - - t0 = Fe32_0(x2); - t1 = Fe32_3(x3); - x0 ^= t0 + t1 + gSubKeys[k++]; - x0 = (int) ((uint)x0 >>1) | x0 << 31; - x1 = (x1 << 1 | (int)((uint)x1 >> 31)) ^ (t0 + 2*t1 + gSubKeys[k++]); - } - - Bits32ToBytes(x2 ^ gSubKeys[OUTPUT_WHITEN], dst, dstIndex); - Bits32ToBytes(x3 ^ gSubKeys[OUTPUT_WHITEN + 1], dst, dstIndex + 4); - Bits32ToBytes(x0 ^ gSubKeys[OUTPUT_WHITEN + 2], dst, dstIndex + 8); - Bits32ToBytes(x1 ^ gSubKeys[OUTPUT_WHITEN + 3], dst, dstIndex + 12); - } - - /** - * Decrypt the given input starting at the given offset and place - * the result in the provided buffer starting at the given offset. - * The input will be an exact multiple of our blocksize. - */ - private void DecryptBlock( - byte[] src, - int srcIndex, - byte[] dst, - int dstIndex) - { - int x2 = BytesTo32Bits(src, srcIndex) ^ gSubKeys[OUTPUT_WHITEN]; - int x3 = BytesTo32Bits(src, srcIndex+4) ^ gSubKeys[OUTPUT_WHITEN + 1]; - int x0 = BytesTo32Bits(src, srcIndex+8) ^ gSubKeys[OUTPUT_WHITEN + 2]; - int x1 = BytesTo32Bits(src, srcIndex+12) ^ gSubKeys[OUTPUT_WHITEN + 3]; - - int k = ROUND_SUBKEYS + 2 * ROUNDS -1 ; - int t0, t1; - for (int r = 0; r< ROUNDS ; r +=2) - { - t0 = Fe32_0(x2); - t1 = Fe32_3(x3); - x1 ^= t0 + 2*t1 + gSubKeys[k--]; - x0 = (x0 << 1 | (int)((uint) x0 >> 31)) ^ (t0 + t1 + gSubKeys[k--]); - x1 = (int) ((uint)x1 >>1) | x1 << 31; - - t0 = Fe32_0(x0); - t1 = Fe32_3(x1); - x3 ^= t0 + 2*t1 + gSubKeys[k--]; - x2 = (x2 << 1 | (int)((uint)x2 >> 31)) ^ (t0 + t1 + gSubKeys[k--]); - x3 = (int)((uint)x3 >>1) | x3 << 31; - } - - Bits32ToBytes(x0 ^ gSubKeys[INPUT_WHITEN], dst, dstIndex); - Bits32ToBytes(x1 ^ gSubKeys[INPUT_WHITEN + 1], dst, dstIndex + 4); - Bits32ToBytes(x2 ^ gSubKeys[INPUT_WHITEN + 2], dst, dstIndex + 8); - Bits32ToBytes(x3 ^ gSubKeys[INPUT_WHITEN + 3], dst, dstIndex + 12); - } - - /* - * TODO: This can be optimised and made cleaner by combining - * the functionality in this function and applying it appropriately - * to the creation of the subkeys during key setup. - */ - private int F32(int x, int[] k32) - { - int b0 = M_b0(x); - int b1 = M_b1(x); - int b2 = M_b2(x); - int b3 = M_b3(x); - int k0 = k32[0]; - int k1 = k32[1]; - int k2 = k32[2]; - int k3 = k32[3]; - - int result = 0; - switch (k64Cnt & 3) - { - case 1: - result = gMDS0[(P[P_01,b0] & 0xff) ^ M_b0(k0)] ^ - gMDS1[(P[P_11,b1] & 0xff) ^ M_b1(k0)] ^ - gMDS2[(P[P_21,b2] & 0xff) ^ M_b2(k0)] ^ - gMDS3[(P[P_31,b3] & 0xff) ^ M_b3(k0)]; - break; - case 0: /* 256 bits of key */ - b0 = (P[P_04,b0] & 0xff) ^ M_b0(k3); - b1 = (P[P_14,b1] & 0xff) ^ M_b1(k3); - b2 = (P[P_24,b2] & 0xff) ^ M_b2(k3); - b3 = (P[P_34,b3] & 0xff) ^ M_b3(k3); - goto case 3; - case 3: - b0 = (P[P_03,b0] & 0xff) ^ M_b0(k2); - b1 = (P[P_13,b1] & 0xff) ^ M_b1(k2); - b2 = (P[P_23,b2] & 0xff) ^ M_b2(k2); - b3 = (P[P_33,b3] & 0xff) ^ M_b3(k2); - goto case 2; - case 2: - result = - gMDS0[(P[P_01,(P[P_02,b0]&0xff)^M_b0(k1)]&0xff)^M_b0(k0)] ^ - gMDS1[(P[P_11,(P[P_12,b1]&0xff)^M_b1(k1)]&0xff)^M_b1(k0)] ^ - gMDS2[(P[P_21,(P[P_22,b2]&0xff)^M_b2(k1)]&0xff)^M_b2(k0)] ^ - gMDS3[(P[P_31,(P[P_32,b3]&0xff)^M_b3(k1)]&0xff)^M_b3(k0)]; - break; - } - return result; - } - - /** - * Use (12, 8) Reed-Solomon code over GF(256) to produce - * a key S-box 32-bit entity from 2 key material 32-bit - * entities. - * - * @param k0 first 32-bit entity - * @param k1 second 32-bit entity - * @return Remainder polynomial Generated using RS code - */ - private int RS_MDS_Encode(int k0, int k1) - { - int r = k1; - for (int i = 0 ; i < 4 ; i++) // shift 1 byte at a time - { - r = RS_rem(r); - } - r ^= k0; - for (int i=0 ; i < 4 ; i++) - { - r = RS_rem(r); - } - - return r; - } - - /** - * Reed-Solomon code parameters: (12,8) reversible code: - *

- * 

-        * G(x) = x^4 + (a+1/a)x^3 + ax^2 + (a+1/a)x + 1
-        *
- * where a = primitive root of field generator 0x14D - *

- */ - private int RS_rem(int x) - { - int b = (int) (((uint)x >> 24) & 0xff); - int g2 = ((b << 1) ^ - ((b & 0x80) != 0 ? RS_GF_FDBK : 0)) & 0xff; - int g3 = ( (int)((uint)b >> 1) ^ - ((b & 0x01) != 0 ? (int)((uint)RS_GF_FDBK >> 1) : 0)) ^ g2 ; - return ((x << 8) ^ (g3 << 24) ^ (g2 << 16) ^ (g3 << 8) ^ b); - } - - private int LFSR1(int x) - { - return (x >> 1) ^ - (((x & 0x01) != 0) ? GF256_FDBK_2 : 0); - } - - private int LFSR2(int x) - { - return (x >> 2) ^ - (((x & 0x02) != 0) ? GF256_FDBK_2 : 0) ^ - (((x & 0x01) != 0) ? GF256_FDBK_4 : 0); - } - - private int Mx_X(int x) - { - return x ^ LFSR2(x); - } // 5B - - private int Mx_Y(int x) - { - return x ^ LFSR1(x) ^ LFSR2(x); - } // EF - - private int M_b0(int x) - { - return x & 0xff; - } - - private int M_b1(int x) - { - return (int)((uint)x >> 8) & 0xff; - } - - private int M_b2(int x) - { - return (int)((uint)x >> 16) & 0xff; - } - - private int M_b3(int x) - { - return (int)((uint)x >> 24) & 0xff; - } - - private int Fe32_0(int x) - { - return gSBox[ 0x000 + 2*(x & 0xff) ] ^ - gSBox[ 0x001 + 2*((int)((uint)x >> 8) & 0xff) ] ^ - gSBox[ 0x200 + 2*((int)((uint)x >> 16) & 0xff) ] ^ - gSBox[ 0x201 + 2*((int)((uint)x >> 24) & 0xff) ]; - } - - private int Fe32_3(int x) - { - return gSBox[ 0x000 + 2*((int)((uint)x >> 24) & 0xff) ] ^ - gSBox[ 0x001 + 2*(x & 0xff) ] ^ - gSBox[ 0x200 + 2*((int)((uint)x >> 8) & 0xff) ] ^ - gSBox[ 0x201 + 2*((int)((uint)x >> 16) & 0xff) ]; - } - - private int BytesTo32Bits(byte[] b, int p) - { - return ((b[p] & 0xff) ) | - ((b[p+1] & 0xff) << 8) | - ((b[p+2] & 0xff) << 16) | - ((b[p+3] & 0xff) << 24); - } - - private void Bits32ToBytes(int inData, byte[] b, int offset) - { - b[offset] = (byte)inData; - b[offset + 1] = (byte)(inData >> 8); - b[offset + 2] = (byte)(inData >> 16); - b[offset + 3] = (byte)(inData >> 24); - } - } - -} diff --git a/bc-sharp-crypto/src/crypto/engines/VMPCEngine.cs b/bc-sharp-crypto/src/crypto/engines/VMPCEngine.cs deleted file mode 100644 index 852901e..0000000 --- a/bc-sharp-crypto/src/crypto/engines/VMPCEngine.cs +++ /dev/null @@ -1,133 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Engines -{ - public class VmpcEngine - : IStreamCipher - { - /* - * variables to hold the state of the VMPC engine during encryption and - * decryption - */ - protected byte n = 0; - protected byte[] P = null; - protected byte s = 0; - - protected byte[] workingIV; - protected byte[] workingKey; - - public virtual string AlgorithmName - { - get { return "VMPC"; } - } - - /** - * initialise a VMPC cipher. - * - * @param forEncryption - * whether or not we are for encryption. - * @param params - * the parameters required to set up the cipher. - * @exception ArgumentException - * if the params argument is inappropriate. - */ - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - if (!(parameters is ParametersWithIV)) - throw new ArgumentException("VMPC Init parameters must include an IV"); - - ParametersWithIV ivParams = (ParametersWithIV) parameters; - - if (!(ivParams.Parameters is KeyParameter)) - throw new ArgumentException("VMPC Init parameters must include a key"); - - KeyParameter key = (KeyParameter)ivParams.Parameters; - - this.workingIV = ivParams.GetIV(); - - if (workingIV == null || workingIV.Length < 1 || workingIV.Length > 768) - throw new ArgumentException("VMPC requires 1 to 768 bytes of IV"); - - this.workingKey = key.GetKey(); - - InitKey(this.workingKey, this.workingIV); - } - - protected virtual void InitKey( - byte[] keyBytes, - byte[] ivBytes) - { - s = 0; - P = new byte[256]; - for (int i = 0; i < 256; i++) - { - P[i] = (byte) i; - } - - for (int m = 0; m < 768; m++) - { - s = P[(s + P[m & 0xff] + keyBytes[m % keyBytes.Length]) & 0xff]; - byte temp = P[m & 0xff]; - P[m & 0xff] = P[s & 0xff]; - P[s & 0xff] = temp; - } - for (int m = 0; m < 768; m++) - { - s = P[(s + P[m & 0xff] + ivBytes[m % ivBytes.Length]) & 0xff]; - byte temp = P[m & 0xff]; - P[m & 0xff] = P[s & 0xff]; - P[s & 0xff] = temp; - } - n = 0; - } - - public virtual void ProcessBytes( - byte[] input, - int inOff, - int len, - byte[] output, - int outOff) - { - Check.DataLength(input, inOff, len, "input buffer too short"); - Check.OutputLength(output, outOff, len, "output buffer too short"); - - for (int i = 0; i < len; i++) - { - s = P[(s + P[n & 0xff]) & 0xff]; - byte z = P[(P[(P[s & 0xff]) & 0xff] + 1) & 0xff]; - // encryption - byte temp = P[n & 0xff]; - P[n & 0xff] = P[s & 0xff]; - P[s & 0xff] = temp; - n = (byte) ((n + 1) & 0xff); - - // xor - output[i + outOff] = (byte) (input[i + inOff] ^ z); - } - } - - public virtual void Reset() - { - InitKey(this.workingKey, this.workingIV); - } - - public virtual byte ReturnByte( - byte input) - { - s = P[(s + P[n & 0xff]) & 0xff]; - byte z = P[(P[(P[s & 0xff]) & 0xff] + 1) & 0xff]; - // encryption - byte temp = P[n & 0xff]; - P[n & 0xff] = P[s & 0xff]; - P[s & 0xff] = temp; - n = (byte) ((n + 1) & 0xff); - - // xor - return (byte) (input ^ z); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/VMPCKSA3Engine.cs b/bc-sharp-crypto/src/crypto/engines/VMPCKSA3Engine.cs deleted file mode 100644 index 95b6813..0000000 --- a/bc-sharp-crypto/src/crypto/engines/VMPCKSA3Engine.cs +++ /dev/null @@ -1,51 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Engines -{ - public class VmpcKsa3Engine - : VmpcEngine - { - public override string AlgorithmName - { - get { return "VMPC-KSA3"; } - } - - protected override void InitKey( - byte[] keyBytes, - byte[] ivBytes) - { - s = 0; - P = new byte[256]; - for (int i = 0; i < 256; i++) - { - P[i] = (byte) i; - } - - for (int m = 0; m < 768; m++) - { - s = P[(s + P[m & 0xff] + keyBytes[m % keyBytes.Length]) & 0xff]; - byte temp = P[m & 0xff]; - P[m & 0xff] = P[s & 0xff]; - P[s & 0xff] = temp; - } - - for (int m = 0; m < 768; m++) - { - s = P[(s + P[m & 0xff] + ivBytes[m % ivBytes.Length]) & 0xff]; - byte temp = P[m & 0xff]; - P[m & 0xff] = P[s & 0xff]; - P[s & 0xff] = temp; - } - - for (int m = 0; m < 768; m++) - { - s = P[(s + P[m & 0xff] + keyBytes[m % keyBytes.Length]) & 0xff]; - byte temp = P[m & 0xff]; - P[m & 0xff] = P[s & 0xff]; - P[s & 0xff] = temp; - } - - n = 0; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/XSalsa20Engine.cs b/bc-sharp-crypto/src/crypto/engines/XSalsa20Engine.cs deleted file mode 100644 index 50c51a8..0000000 --- a/bc-sharp-crypto/src/crypto/engines/XSalsa20Engine.cs +++ /dev/null @@ -1,64 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /// - /// Implementation of Daniel J. Bernstein's XSalsa20 stream cipher - Salsa20 with an extended nonce. - /// - /// - /// XSalsa20 requires a 256 bit key, and a 192 bit nonce. - /// - public class XSalsa20Engine - : Salsa20Engine - { - public override string AlgorithmName - { - get { return "XSalsa20"; } - } - - protected override int NonceSize - { - get { return 24; } - } - - /// - /// XSalsa20 key generation: process 256 bit input key and 128 bits of the input nonce - /// using a core Salsa20 function without input addition to produce 256 bit working key - /// and use that with the remaining 64 bits of nonce to initialize a standard Salsa20 engine state. - /// - protected override void SetKey(byte[] keyBytes, byte[] ivBytes) - { - if (keyBytes == null) - throw new ArgumentException(AlgorithmName + " doesn't support re-init with null key"); - - if (keyBytes.Length != 32) - throw new ArgumentException(AlgorithmName + " requires a 256 bit key"); - - // Set key for HSalsa20 - base.SetKey(keyBytes, ivBytes); - - // Pack next 64 bits of IV into engine state instead of counter - Pack.LE_To_UInt32(ivBytes, 8, engineState, 8, 2); - - // Process engine state to generate Salsa20 key - uint[] hsalsa20Out = new uint[engineState.Length]; - SalsaCore(20, engineState, hsalsa20Out); - - // Set new key, removing addition in last round of salsaCore - engineState[1] = hsalsa20Out[0] - engineState[0]; - engineState[2] = hsalsa20Out[5] - engineState[5]; - engineState[3] = hsalsa20Out[10] - engineState[10]; - engineState[4] = hsalsa20Out[15] - engineState[15]; - - engineState[11] = hsalsa20Out[6] - engineState[6]; - engineState[12] = hsalsa20Out[7] - engineState[7]; - engineState[13] = hsalsa20Out[8] - engineState[8]; - engineState[14] = hsalsa20Out[9] - engineState[9]; - - // Last 64 bits of input IV - Pack.LE_To_UInt32(ivBytes, 16, engineState, 6, 2); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/engines/XTEAEngine.cs b/bc-sharp-crypto/src/crypto/engines/XTEAEngine.cs deleted file mode 100644 index 5fcfa4a..0000000 --- a/bc-sharp-crypto/src/crypto/engines/XTEAEngine.cs +++ /dev/null @@ -1,166 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Engines -{ - /** - * An XTEA engine. - */ - public class XteaEngine - : IBlockCipher - { - private const int - rounds = 32, - block_size = 8, -// key_size = 16, - delta = unchecked((int) 0x9E3779B9); - - /* - * the expanded key array of 4 subkeys - */ - private uint[] _S = new uint[4], - _sum0 = new uint[32], - _sum1 = new uint[32]; - private bool _initialised, _forEncryption; - - /** - * Create an instance of the TEA encryption algorithm - * and set some defaults - */ - public XteaEngine() - { - _initialised = false; - } - - public virtual string AlgorithmName - { - get { return "XTEA"; } - } - - public virtual bool IsPartialBlockOkay - { - get { return false; } - } - - public virtual int GetBlockSize() - { - return block_size; - } - - /** - * initialise - * - * @param forEncryption whether or not we are for encryption. - * @param params the parameters required to set up the cipher. - * @exception ArgumentException if the params argument is - * inappropriate. - */ - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - if (!(parameters is KeyParameter)) - { - throw new ArgumentException("invalid parameter passed to TEA init - " - + Platform.GetTypeName(parameters)); - } - - _forEncryption = forEncryption; - _initialised = true; - - KeyParameter p = (KeyParameter) parameters; - - setKey(p.GetKey()); - } - - public virtual int ProcessBlock( - byte[] inBytes, - int inOff, - byte[] outBytes, - int outOff) - { - if (!_initialised) - throw new InvalidOperationException(AlgorithmName + " not initialised"); - - Check.DataLength(inBytes, inOff, block_size, "input buffer too short"); - Check.OutputLength(outBytes, outOff, block_size, "output buffer too short"); - - return _forEncryption - ? encryptBlock(inBytes, inOff, outBytes, outOff) - : decryptBlock(inBytes, inOff, outBytes, outOff); - } - - public virtual void Reset() - { - } - - /** - * Re-key the cipher. - * - * @param key the key to be used - */ - private void setKey( - byte[] key) - { - int i, j; - for (i = j = 0; i < 4; i++,j+=4) - { - _S[i] = Pack.BE_To_UInt32(key, j); - } - - for (i = j = 0; i < rounds; i++) - { - _sum0[i] = ((uint)j + _S[j & 3]); - j += delta; - _sum1[i] = ((uint)j + _S[j >> 11 & 3]); - } - } - - private int encryptBlock( - byte[] inBytes, - int inOff, - byte[] outBytes, - int outOff) - { - // Pack bytes into integers - uint v0 = Pack.BE_To_UInt32(inBytes, inOff); - uint v1 = Pack.BE_To_UInt32(inBytes, inOff + 4); - - for (int i = 0; i < rounds; i++) - { - v0 += ((v1 << 4 ^ v1 >> 5) + v1) ^ _sum0[i]; - v1 += ((v0 << 4 ^ v0 >> 5) + v0) ^ _sum1[i]; - } - - Pack.UInt32_To_BE(v0, outBytes, outOff); - Pack.UInt32_To_BE(v1, outBytes, outOff + 4); - - return block_size; - } - - private int decryptBlock( - byte[] inBytes, - int inOff, - byte[] outBytes, - int outOff) - { - // Pack bytes into integers - uint v0 = Pack.BE_To_UInt32(inBytes, inOff); - uint v1 = Pack.BE_To_UInt32(inBytes, inOff + 4); - - for (int i = rounds-1; i >= 0; i--) - { - v1 -= ((v0 << 4 ^ v0 >> 5) + v0) ^ _sum1[i]; - v0 -= ((v1 << 4 ^ v1 >> 5) + v1) ^ _sum0[i]; - } - - Pack.UInt32_To_BE(v0, outBytes, outOff); - Pack.UInt32_To_BE(v1, outBytes, outOff + 4); - - return block_size; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/generators/BCrypt.cs b/bc-sharp-crypto/src/crypto/generators/BCrypt.cs deleted file mode 100644 index af8029a..0000000 --- a/bc-sharp-crypto/src/crypto/generators/BCrypt.cs +++ /dev/null @@ -1,617 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Generators -{ - /** - * Core of password hashing scheme Bcrypt, - * designed by Niels Provos and David Mazières, - * corresponds to the C reference implementation. - *

- * This implementation does not correspondent to the 1999 published paper - * "A Future-Adaptable Password Scheme" of Niels Provos and David Mazières, - * see: https://www.usenix.org/legacy/events/usenix99/provos/provos_html/node1.html. - * In contrast to the paper, the order of key setup and salt setup is reversed: - * state <- ExpandKey(state, 0, key) - * state %lt;- ExpandKey(state, 0, salt) - * This corresponds to the OpenBSD reference implementation of Bcrypt. - *

- * Note: - * There is no successful cryptanalysis (status 2015), but - * the amount of memory and the band width of Bcrypt - * may be insufficient to effectively prevent attacks - * with custom hardware like FPGAs, ASICs - *

- * This implementation uses some parts of Bouncy Castle's BlowfishEngine. - *

- */ - public sealed class BCrypt - { - // magic String "OrpheanBeholderScryDoubt" is used as clear text for encryption - private static readonly uint[] MAGIC_STRING = - { - 0x4F727068, 0x65616E42, 0x65686F6C, - 0x64657253, 0x63727944, 0x6F756274 - }; - - internal const int MAGIC_STRING_LENGTH = 6; - - private static readonly uint[] - KP = { - 0x243F6A88, 0x85A308D3, 0x13198A2E, 0x03707344, - 0xA4093822, 0x299F31D0, 0x082EFA98, 0xEC4E6C89, - 0x452821E6, 0x38D01377, 0xBE5466CF, 0x34E90C6C, - 0xC0AC29B7, 0xC97C50DD, 0x3F84D5B5, 0xB5470917, - 0x9216D5D9, 0x8979FB1B - }, - - KS0 = { - 0xD1310BA6, 0x98DFB5AC, 0x2FFD72DB, 0xD01ADFB7, - 0xB8E1AFED, 0x6A267E96, 0xBA7C9045, 0xF12C7F99, - 0x24A19947, 0xB3916CF7, 0x0801F2E2, 0x858EFC16, - 0x636920D8, 0x71574E69, 0xA458FEA3, 0xF4933D7E, - 0x0D95748F, 0x728EB658, 0x718BCD58, 0x82154AEE, - 0x7B54A41D, 0xC25A59B5, 0x9C30D539, 0x2AF26013, - 0xC5D1B023, 0x286085F0, 0xCA417918, 0xB8DB38EF, - 0x8E79DCB0, 0x603A180E, 0x6C9E0E8B, 0xB01E8A3E, - 0xD71577C1, 0xBD314B27, 0x78AF2FDA, 0x55605C60, - 0xE65525F3, 0xAA55AB94, 0x57489862, 0x63E81440, - 0x55CA396A, 0x2AAB10B6, 0xB4CC5C34, 0x1141E8CE, - 0xA15486AF, 0x7C72E993, 0xB3EE1411, 0x636FBC2A, - 0x2BA9C55D, 0x741831F6, 0xCE5C3E16, 0x9B87931E, - 0xAFD6BA33, 0x6C24CF5C, 0x7A325381, 0x28958677, - 0x3B8F4898, 0x6B4BB9AF, 0xC4BFE81B, 0x66282193, - 0x61D809CC, 0xFB21A991, 0x487CAC60, 0x5DEC8032, - 0xEF845D5D, 0xE98575B1, 0xDC262302, 0xEB651B88, - 0x23893E81, 0xD396ACC5, 0x0F6D6FF3, 0x83F44239, - 0x2E0B4482, 0xA4842004, 0x69C8F04A, 0x9E1F9B5E, - 0x21C66842, 0xF6E96C9A, 0x670C9C61, 0xABD388F0, - 0x6A51A0D2, 0xD8542F68, 0x960FA728, 0xAB5133A3, - 0x6EEF0B6C, 0x137A3BE4, 0xBA3BF050, 0x7EFB2A98, - 0xA1F1651D, 0x39AF0176, 0x66CA593E, 0x82430E88, - 0x8CEE8619, 0x456F9FB4, 0x7D84A5C3, 0x3B8B5EBE, - 0xE06F75D8, 0x85C12073, 0x401A449F, 0x56C16AA6, - 0x4ED3AA62, 0x363F7706, 0x1BFEDF72, 0x429B023D, - 0x37D0D724, 0xD00A1248, 0xDB0FEAD3, 0x49F1C09B, - 0x075372C9, 0x80991B7B, 0x25D479D8, 0xF6E8DEF7, - 0xE3FE501A, 0xB6794C3B, 0x976CE0BD, 0x04C006BA, - 0xC1A94FB6, 0x409F60C4, 0x5E5C9EC2, 0x196A2463, - 0x68FB6FAF, 0x3E6C53B5, 0x1339B2EB, 0x3B52EC6F, - 0x6DFC511F, 0x9B30952C, 0xCC814544, 0xAF5EBD09, - 0xBEE3D004, 0xDE334AFD, 0x660F2807, 0x192E4BB3, - 0xC0CBA857, 0x45C8740F, 0xD20B5F39, 0xB9D3FBDB, - 0x5579C0BD, 0x1A60320A, 0xD6A100C6, 0x402C7279, - 0x679F25FE, 0xFB1FA3CC, 0x8EA5E9F8, 0xDB3222F8, - 0x3C7516DF, 0xFD616B15, 0x2F501EC8, 0xAD0552AB, - 0x323DB5FA, 0xFD238760, 0x53317B48, 0x3E00DF82, - 0x9E5C57BB, 0xCA6F8CA0, 0x1A87562E, 0xDF1769DB, - 0xD542A8F6, 0x287EFFC3, 0xAC6732C6, 0x8C4F5573, - 0x695B27B0, 0xBBCA58C8, 0xE1FFA35D, 0xB8F011A0, - 0x10FA3D98, 0xFD2183B8, 0x4AFCB56C, 0x2DD1D35B, - 0x9A53E479, 0xB6F84565, 0xD28E49BC, 0x4BFB9790, - 0xE1DDF2DA, 0xA4CB7E33, 0x62FB1341, 0xCEE4C6E8, - 0xEF20CADA, 0x36774C01, 0xD07E9EFE, 0x2BF11FB4, - 0x95DBDA4D, 0xAE909198, 0xEAAD8E71, 0x6B93D5A0, - 0xD08ED1D0, 0xAFC725E0, 0x8E3C5B2F, 0x8E7594B7, - 0x8FF6E2FB, 0xF2122B64, 0x8888B812, 0x900DF01C, - 0x4FAD5EA0, 0x688FC31C, 0xD1CFF191, 0xB3A8C1AD, - 0x2F2F2218, 0xBE0E1777, 0xEA752DFE, 0x8B021FA1, - 0xE5A0CC0F, 0xB56F74E8, 0x18ACF3D6, 0xCE89E299, - 0xB4A84FE0, 0xFD13E0B7, 0x7CC43B81, 0xD2ADA8D9, - 0x165FA266, 0x80957705, 0x93CC7314, 0x211A1477, - 0xE6AD2065, 0x77B5FA86, 0xC75442F5, 0xFB9D35CF, - 0xEBCDAF0C, 0x7B3E89A0, 0xD6411BD3, 0xAE1E7E49, - 0x00250E2D, 0x2071B35E, 0x226800BB, 0x57B8E0AF, - 0x2464369B, 0xF009B91E, 0x5563911D, 0x59DFA6AA, - 0x78C14389, 0xD95A537F, 0x207D5BA2, 0x02E5B9C5, - 0x83260376, 0x6295CFA9, 0x11C81968, 0x4E734A41, - 0xB3472DCA, 0x7B14A94A, 0x1B510052, 0x9A532915, - 0xD60F573F, 0xBC9BC6E4, 0x2B60A476, 0x81E67400, - 0x08BA6FB5, 0x571BE91F, 0xF296EC6B, 0x2A0DD915, - 0xB6636521, 0xE7B9F9B6, 0xFF34052E, 0xC5855664, - 0x53B02D5D, 0xA99F8FA1, 0x08BA4799, 0x6E85076A - }, - - KS1 = { - 0x4B7A70E9, 0xB5B32944, 0xDB75092E, 0xC4192623, - 0xAD6EA6B0, 0x49A7DF7D, 0x9CEE60B8, 0x8FEDB266, - 0xECAA8C71, 0x699A17FF, 0x5664526C, 0xC2B19EE1, - 0x193602A5, 0x75094C29, 0xA0591340, 0xE4183A3E, - 0x3F54989A, 0x5B429D65, 0x6B8FE4D6, 0x99F73FD6, - 0xA1D29C07, 0xEFE830F5, 0x4D2D38E6, 0xF0255DC1, - 0x4CDD2086, 0x8470EB26, 0x6382E9C6, 0x021ECC5E, - 0x09686B3F, 0x3EBAEFC9, 0x3C971814, 0x6B6A70A1, - 0x687F3584, 0x52A0E286, 0xB79C5305, 0xAA500737, - 0x3E07841C, 0x7FDEAE5C, 0x8E7D44EC, 0x5716F2B8, - 0xB03ADA37, 0xF0500C0D, 0xF01C1F04, 0x0200B3FF, - 0xAE0CF51A, 0x3CB574B2, 0x25837A58, 0xDC0921BD, - 0xD19113F9, 0x7CA92FF6, 0x94324773, 0x22F54701, - 0x3AE5E581, 0x37C2DADC, 0xC8B57634, 0x9AF3DDA7, - 0xA9446146, 0x0FD0030E, 0xECC8C73E, 0xA4751E41, - 0xE238CD99, 0x3BEA0E2F, 0x3280BBA1, 0x183EB331, - 0x4E548B38, 0x4F6DB908, 0x6F420D03, 0xF60A04BF, - 0x2CB81290, 0x24977C79, 0x5679B072, 0xBCAF89AF, - 0xDE9A771F, 0xD9930810, 0xB38BAE12, 0xDCCF3F2E, - 0x5512721F, 0x2E6B7124, 0x501ADDE6, 0x9F84CD87, - 0x7A584718, 0x7408DA17, 0xBC9F9ABC, 0xE94B7D8C, - 0xEC7AEC3A, 0xDB851DFA, 0x63094366, 0xC464C3D2, - 0xEF1C1847, 0x3215D908, 0xDD433B37, 0x24C2BA16, - 0x12A14D43, 0x2A65C451, 0x50940002, 0x133AE4DD, - 0x71DFF89E, 0x10314E55, 0x81AC77D6, 0x5F11199B, - 0x043556F1, 0xD7A3C76B, 0x3C11183B, 0x5924A509, - 0xF28FE6ED, 0x97F1FBFA, 0x9EBABF2C, 0x1E153C6E, - 0x86E34570, 0xEAE96FB1, 0x860E5E0A, 0x5A3E2AB3, - 0x771FE71C, 0x4E3D06FA, 0x2965DCB9, 0x99E71D0F, - 0x803E89D6, 0x5266C825, 0x2E4CC978, 0x9C10B36A, - 0xC6150EBA, 0x94E2EA78, 0xA5FC3C53, 0x1E0A2DF4, - 0xF2F74EA7, 0x361D2B3D, 0x1939260F, 0x19C27960, - 0x5223A708, 0xF71312B6, 0xEBADFE6E, 0xEAC31F66, - 0xE3BC4595, 0xA67BC883, 0xB17F37D1, 0x018CFF28, - 0xC332DDEF, 0xBE6C5AA5, 0x65582185, 0x68AB9802, - 0xEECEA50F, 0xDB2F953B, 0x2AEF7DAD, 0x5B6E2F84, - 0x1521B628, 0x29076170, 0xECDD4775, 0x619F1510, - 0x13CCA830, 0xEB61BD96, 0x0334FE1E, 0xAA0363CF, - 0xB5735C90, 0x4C70A239, 0xD59E9E0B, 0xCBAADE14, - 0xEECC86BC, 0x60622CA7, 0x9CAB5CAB, 0xB2F3846E, - 0x648B1EAF, 0x19BDF0CA, 0xA02369B9, 0x655ABB50, - 0x40685A32, 0x3C2AB4B3, 0x319EE9D5, 0xC021B8F7, - 0x9B540B19, 0x875FA099, 0x95F7997E, 0x623D7DA8, - 0xF837889A, 0x97E32D77, 0x11ED935F, 0x16681281, - 0x0E358829, 0xC7E61FD6, 0x96DEDFA1, 0x7858BA99, - 0x57F584A5, 0x1B227263, 0x9B83C3FF, 0x1AC24696, - 0xCDB30AEB, 0x532E3054, 0x8FD948E4, 0x6DBC3128, - 0x58EBF2EF, 0x34C6FFEA, 0xFE28ED61, 0xEE7C3C73, - 0x5D4A14D9, 0xE864B7E3, 0x42105D14, 0x203E13E0, - 0x45EEE2B6, 0xA3AAABEA, 0xDB6C4F15, 0xFACB4FD0, - 0xC742F442, 0xEF6ABBB5, 0x654F3B1D, 0x41CD2105, - 0xD81E799E, 0x86854DC7, 0xE44B476A, 0x3D816250, - 0xCF62A1F2, 0x5B8D2646, 0xFC8883A0, 0xC1C7B6A3, - 0x7F1524C3, 0x69CB7492, 0x47848A0B, 0x5692B285, - 0x095BBF00, 0xAD19489D, 0x1462B174, 0x23820E00, - 0x58428D2A, 0x0C55F5EA, 0x1DADF43E, 0x233F7061, - 0x3372F092, 0x8D937E41, 0xD65FECF1, 0x6C223BDB, - 0x7CDE3759, 0xCBEE7460, 0x4085F2A7, 0xCE77326E, - 0xA6078084, 0x19F8509E, 0xE8EFD855, 0x61D99735, - 0xA969A7AA, 0xC50C06C2, 0x5A04ABFC, 0x800BCADC, - 0x9E447A2E, 0xC3453484, 0xFDD56705, 0x0E1E9EC9, - 0xDB73DBD3, 0x105588CD, 0x675FDA79, 0xE3674340, - 0xC5C43465, 0x713E38D8, 0x3D28F89E, 0xF16DFF20, - 0x153E21E7, 0x8FB03D4A, 0xE6E39F2B, 0xDB83ADF7 - }, - - KS2 = { - 0xE93D5A68, 0x948140F7, 0xF64C261C, 0x94692934, - 0x411520F7, 0x7602D4F7, 0xBCF46B2E, 0xD4A20068, - 0xD4082471, 0x3320F46A, 0x43B7D4B7, 0x500061AF, - 0x1E39F62E, 0x97244546, 0x14214F74, 0xBF8B8840, - 0x4D95FC1D, 0x96B591AF, 0x70F4DDD3, 0x66A02F45, - 0xBFBC09EC, 0x03BD9785, 0x7FAC6DD0, 0x31CB8504, - 0x96EB27B3, 0x55FD3941, 0xDA2547E6, 0xABCA0A9A, - 0x28507825, 0x530429F4, 0x0A2C86DA, 0xE9B66DFB, - 0x68DC1462, 0xD7486900, 0x680EC0A4, 0x27A18DEE, - 0x4F3FFEA2, 0xE887AD8C, 0xB58CE006, 0x7AF4D6B6, - 0xAACE1E7C, 0xD3375FEC, 0xCE78A399, 0x406B2A42, - 0x20FE9E35, 0xD9F385B9, 0xEE39D7AB, 0x3B124E8B, - 0x1DC9FAF7, 0x4B6D1856, 0x26A36631, 0xEAE397B2, - 0x3A6EFA74, 0xDD5B4332, 0x6841E7F7, 0xCA7820FB, - 0xFB0AF54E, 0xD8FEB397, 0x454056AC, 0xBA489527, - 0x55533A3A, 0x20838D87, 0xFE6BA9B7, 0xD096954B, - 0x55A867BC, 0xA1159A58, 0xCCA92963, 0x99E1DB33, - 0xA62A4A56, 0x3F3125F9, 0x5EF47E1C, 0x9029317C, - 0xFDF8E802, 0x04272F70, 0x80BB155C, 0x05282CE3, - 0x95C11548, 0xE4C66D22, 0x48C1133F, 0xC70F86DC, - 0x07F9C9EE, 0x41041F0F, 0x404779A4, 0x5D886E17, - 0x325F51EB, 0xD59BC0D1, 0xF2BCC18F, 0x41113564, - 0x257B7834, 0x602A9C60, 0xDFF8E8A3, 0x1F636C1B, - 0x0E12B4C2, 0x02E1329E, 0xAF664FD1, 0xCAD18115, - 0x6B2395E0, 0x333E92E1, 0x3B240B62, 0xEEBEB922, - 0x85B2A20E, 0xE6BA0D99, 0xDE720C8C, 0x2DA2F728, - 0xD0127845, 0x95B794FD, 0x647D0862, 0xE7CCF5F0, - 0x5449A36F, 0x877D48FA, 0xC39DFD27, 0xF33E8D1E, - 0x0A476341, 0x992EFF74, 0x3A6F6EAB, 0xF4F8FD37, - 0xA812DC60, 0xA1EBDDF8, 0x991BE14C, 0xDB6E6B0D, - 0xC67B5510, 0x6D672C37, 0x2765D43B, 0xDCD0E804, - 0xF1290DC7, 0xCC00FFA3, 0xB5390F92, 0x690FED0B, - 0x667B9FFB, 0xCEDB7D9C, 0xA091CF0B, 0xD9155EA3, - 0xBB132F88, 0x515BAD24, 0x7B9479BF, 0x763BD6EB, - 0x37392EB3, 0xCC115979, 0x8026E297, 0xF42E312D, - 0x6842ADA7, 0xC66A2B3B, 0x12754CCC, 0x782EF11C, - 0x6A124237, 0xB79251E7, 0x06A1BBE6, 0x4BFB6350, - 0x1A6B1018, 0x11CAEDFA, 0x3D25BDD8, 0xE2E1C3C9, - 0x44421659, 0x0A121386, 0xD90CEC6E, 0xD5ABEA2A, - 0x64AF674E, 0xDA86A85F, 0xBEBFE988, 0x64E4C3FE, - 0x9DBC8057, 0xF0F7C086, 0x60787BF8, 0x6003604D, - 0xD1FD8346, 0xF6381FB0, 0x7745AE04, 0xD736FCCC, - 0x83426B33, 0xF01EAB71, 0xB0804187, 0x3C005E5F, - 0x77A057BE, 0xBDE8AE24, 0x55464299, 0xBF582E61, - 0x4E58F48F, 0xF2DDFDA2, 0xF474EF38, 0x8789BDC2, - 0x5366F9C3, 0xC8B38E74, 0xB475F255, 0x46FCD9B9, - 0x7AEB2661, 0x8B1DDF84, 0x846A0E79, 0x915F95E2, - 0x466E598E, 0x20B45770, 0x8CD55591, 0xC902DE4C, - 0xB90BACE1, 0xBB8205D0, 0x11A86248, 0x7574A99E, - 0xB77F19B6, 0xE0A9DC09, 0x662D09A1, 0xC4324633, - 0xE85A1F02, 0x09F0BE8C, 0x4A99A025, 0x1D6EFE10, - 0x1AB93D1D, 0x0BA5A4DF, 0xA186F20F, 0x2868F169, - 0xDCB7DA83, 0x573906FE, 0xA1E2CE9B, 0x4FCD7F52, - 0x50115E01, 0xA70683FA, 0xA002B5C4, 0x0DE6D027, - 0x9AF88C27, 0x773F8641, 0xC3604C06, 0x61A806B5, - 0xF0177A28, 0xC0F586E0, 0x006058AA, 0x30DC7D62, - 0x11E69ED7, 0x2338EA63, 0x53C2DD94, 0xC2C21634, - 0xBBCBEE56, 0x90BCB6DE, 0xEBFC7DA1, 0xCE591D76, - 0x6F05E409, 0x4B7C0188, 0x39720A3D, 0x7C927C24, - 0x86E3725F, 0x724D9DB9, 0x1AC15BB4, 0xD39EB8FC, - 0xED545578, 0x08FCA5B5, 0xD83D7CD3, 0x4DAD0FC4, - 0x1E50EF5E, 0xB161E6F8, 0xA28514D9, 0x6C51133C, - 0x6FD5C7E7, 0x56E14EC4, 0x362ABFCE, 0xDDC6C837, - 0xD79A3234, 0x92638212, 0x670EFA8E, 0x406000E0 - }, - - KS3 = { - 0x3A39CE37, 0xD3FAF5CF, 0xABC27737, 0x5AC52D1B, - 0x5CB0679E, 0x4FA33742, 0xD3822740, 0x99BC9BBE, - 0xD5118E9D, 0xBF0F7315, 0xD62D1C7E, 0xC700C47B, - 0xB78C1B6B, 0x21A19045, 0xB26EB1BE, 0x6A366EB4, - 0x5748AB2F, 0xBC946E79, 0xC6A376D2, 0x6549C2C8, - 0x530FF8EE, 0x468DDE7D, 0xD5730A1D, 0x4CD04DC6, - 0x2939BBDB, 0xA9BA4650, 0xAC9526E8, 0xBE5EE304, - 0xA1FAD5F0, 0x6A2D519A, 0x63EF8CE2, 0x9A86EE22, - 0xC089C2B8, 0x43242EF6, 0xA51E03AA, 0x9CF2D0A4, - 0x83C061BA, 0x9BE96A4D, 0x8FE51550, 0xBA645BD6, - 0x2826A2F9, 0xA73A3AE1, 0x4BA99586, 0xEF5562E9, - 0xC72FEFD3, 0xF752F7DA, 0x3F046F69, 0x77FA0A59, - 0x80E4A915, 0x87B08601, 0x9B09E6AD, 0x3B3EE593, - 0xE990FD5A, 0x9E34D797, 0x2CF0B7D9, 0x022B8B51, - 0x96D5AC3A, 0x017DA67D, 0xD1CF3ED6, 0x7C7D2D28, - 0x1F9F25CF, 0xADF2B89B, 0x5AD6B472, 0x5A88F54C, - 0xE029AC71, 0xE019A5E6, 0x47B0ACFD, 0xED93FA9B, - 0xE8D3C48D, 0x283B57CC, 0xF8D56629, 0x79132E28, - 0x785F0191, 0xED756055, 0xF7960E44, 0xE3D35E8C, - 0x15056DD4, 0x88F46DBA, 0x03A16125, 0x0564F0BD, - 0xC3EB9E15, 0x3C9057A2, 0x97271AEC, 0xA93A072A, - 0x1B3F6D9B, 0x1E6321F5, 0xF59C66FB, 0x26DCF319, - 0x7533D928, 0xB155FDF5, 0x03563482, 0x8ABA3CBB, - 0x28517711, 0xC20AD9F8, 0xABCC5167, 0xCCAD925F, - 0x4DE81751, 0x3830DC8E, 0x379D5862, 0x9320F991, - 0xEA7A90C2, 0xFB3E7BCE, 0x5121CE64, 0x774FBE32, - 0xA8B6E37E, 0xC3293D46, 0x48DE5369, 0x6413E680, - 0xA2AE0810, 0xDD6DB224, 0x69852DFD, 0x09072166, - 0xB39A460A, 0x6445C0DD, 0x586CDECF, 0x1C20C8AE, - 0x5BBEF7DD, 0x1B588D40, 0xCCD2017F, 0x6BB4E3BB, - 0xDDA26A7E, 0x3A59FF45, 0x3E350A44, 0xBCB4CDD5, - 0x72EACEA8, 0xFA6484BB, 0x8D6612AE, 0xBF3C6F47, - 0xD29BE463, 0x542F5D9E, 0xAEC2771B, 0xF64E6370, - 0x740E0D8D, 0xE75B1357, 0xF8721671, 0xAF537D5D, - 0x4040CB08, 0x4EB4E2CC, 0x34D2466A, 0x0115AF84, - 0xE1B00428, 0x95983A1D, 0x06B89FB4, 0xCE6EA048, - 0x6F3F3B82, 0x3520AB82, 0x011A1D4B, 0x277227F8, - 0x611560B1, 0xE7933FDC, 0xBB3A792B, 0x344525BD, - 0xA08839E1, 0x51CE794B, 0x2F32C9B7, 0xA01FBAC9, - 0xE01CC87E, 0xBCC7D1F6, 0xCF0111C3, 0xA1E8AAC7, - 0x1A908749, 0xD44FBD9A, 0xD0DADECB, 0xD50ADA38, - 0x0339C32A, 0xC6913667, 0x8DF9317C, 0xE0B12B4F, - 0xF79E59B7, 0x43F5BB3A, 0xF2D519FF, 0x27D9459C, - 0xBF97222C, 0x15E6FC2A, 0x0F91FC71, 0x9B941525, - 0xFAE59361, 0xCEB69CEB, 0xC2A86459, 0x12BAA8D1, - 0xB6C1075E, 0xE3056A0C, 0x10D25065, 0xCB03A442, - 0xE0EC6E0E, 0x1698DB3B, 0x4C98A0BE, 0x3278E964, - 0x9F1F9532, 0xE0D392DF, 0xD3A0342B, 0x8971F21E, - 0x1B0A7441, 0x4BA3348C, 0xC5BE7120, 0xC37632D8, - 0xDF359F8D, 0x9B992F2E, 0xE60B6F47, 0x0FE3F11D, - 0xE54CDA54, 0x1EDAD891, 0xCE6279CF, 0xCD3E7E6F, - 0x1618B166, 0xFD2C1D05, 0x848FD2C5, 0xF6FB2299, - 0xF523F357, 0xA6327623, 0x93A83531, 0x56CCCD02, - 0xACF08162, 0x5A75EBB5, 0x6E163697, 0x88D273CC, - 0xDE966292, 0x81B949D0, 0x4C50901B, 0x71C65614, - 0xE6C6C7BD, 0x327A140A, 0x45E1D006, 0xC3F27B9A, - 0xC9AA53FD, 0x62A80F00, 0xBB25BFE2, 0x35BDD2F6, - 0x71126905, 0xB2040222, 0xB6CBCF7C, 0xCD769C2B, - 0x53113EC0, 0x1640E3D3, 0x38ABBD60, 0x2547ADF0, - 0xBA38209C, 0xF746CE76, 0x77AFA1C5, 0x20756060, - 0x85CBFE4E, 0x8AE88DD8, 0x7AAAF9B0, 0x4CF9AA7E, - 0x1948C25C, 0x02FB8A8C, 0x01C36AE4, 0xD6EBE1F9, - 0x90D4F869, 0xA65CDEA0, 0x3F09252D, 0xC208E69F, - 0xB74E6132, 0xCE77E25B, 0x578FDFE3, 0x3AC372E6 - }; - - //==================================== - // Useful constants - //==================================== - - private const int ROUNDS = 16; - private const int SBOX_SK = 256; - private const int SBOX_SK2 = SBOX_SK * 2; - private const int SBOX_SK3 = SBOX_SK * 3; - private const int P_SZ = ROUNDS + 2; - - private readonly uint[] S; // the s-boxes - private readonly uint[] P; // the p-array - - private BCrypt() - { - S = new uint[SBOX_SK * 4]; - P = new uint[P_SZ]; - } - - //================================== - // Private Implementation - //================================== - - private uint F(uint x) - { - return (((S[(x >> 24)] + S[SBOX_SK + ((x >> 16) & 0xff)]) - ^ S[SBOX_SK2 + ((x >> 8) & 0xff)]) + S[SBOX_SK3 + (x & 0xff)]); - } - - /* - * apply the encryption cycle to each value pair in the table. - */ - private void ProcessTable(uint xl, uint xr, uint[] table) - { - int size = table.Length; - - for (int s = 0; s < size; s += 2) - { - xl ^= P[0]; - - for (int i = 1; i < ROUNDS; i += 2) - { - xr ^= F(xl) ^ P[i]; - xl ^= F(xr) ^ P[i + 1]; - } - - xr ^= P[ROUNDS + 1]; - - table[s] = xr; - table[s + 1] = xl; - - xr = xl; // end of cycle swap - xl = table[s]; - } - } - - /* - * Initialize the S-boxes and the P-array, with a fixed string - * This string contains the hexadecimal digits of pi (3.141...) - */ - private void InitState() - { - Array.Copy(KS0, 0, S, 0, SBOX_SK); - Array.Copy(KS1, 0, S, SBOX_SK, SBOX_SK); - Array.Copy(KS2, 0, S, SBOX_SK2, SBOX_SK); - Array.Copy(KS3, 0, S, SBOX_SK3, SBOX_SK); - - Array.Copy(KP, 0, P, 0, P_SZ); - } - - /* - * XOR P with key cyclic. - * This is the first part of ExpandKey function - */ - private void CyclicXorKey(byte[] key) - { - int keyLength = key.Length; - int keyIndex = 0; - - for (int i = 0; i < P_SZ; i++) - { - // get the 32 bits of the key, in 4 * 8 bit chunks - uint data = 0x0000000; - for (int j = 0; j < 4; j++) - { - // create a 32 bit block - data = (data << 8) | key[keyIndex]; - - // wrap when we get to the end of the key - if (++keyIndex >= keyLength) - { - keyIndex = 0; - } - } - // XOR the newly created 32 bit chunk onto the P-array - P[i] ^= data; - } - } - - - /* - * encrypt magic String 64 times in ECB - */ - private byte[] EncryptMagicString() - { - uint[] text = { - MAGIC_STRING[0], MAGIC_STRING[1], - MAGIC_STRING[2], MAGIC_STRING[3], - MAGIC_STRING[4], MAGIC_STRING[5] - }; - for (int i = 0; i < 64; i++) - { - for (int j = 0; j < MAGIC_STRING_LENGTH; j += 2) - { - uint left = text[j]; - uint right = text[j + 1]; - - left ^= P[0]; - for (int k = 1; k < ROUNDS; k += 2) - { - right ^= F(left) ^ P[k]; - left ^= F(right) ^ P[k + 1]; - } - right ^= P[ROUNDS + 1]; - // swap values: - text[j] = right; - text[j + 1] = left; - } - } - byte[] result = new byte[24]; // holds 192 bit key - Pack.UInt32_To_BE(text, result, 0); - Array.Clear(text, 0, text.Length); - Array.Clear(P, 0, P.Length); - Array.Clear(S, 0, S.Length); - - return result; - } - - /* - * This is a part of Eksblowfish function - * - * @param table: sub-keys or working key - * @param salt32Bit: a 16 byte salt as two 32 bit words - * @param iv1: value from last proceeded table - * @param iv2: value from last proceeded table - */ - private void ProcessTableWithSalt(uint[] table, uint[] salt32Bit, uint iv1, uint iv2) - { - uint xl = iv1 ^ salt32Bit[0]; - uint xr = iv2 ^ salt32Bit[1]; - - uint yl; - uint yr; - int size = table.Length; - - for (int s = 0; s < size; s += 4) - { - xl ^= P[0]; - for (int i = 1; i < ROUNDS; i += 2) - { - xr ^= F(xl) ^ P[i]; - xl ^= F(xr) ^ P[i + 1]; - } - xr ^= P[ROUNDS + 1]; - - table[s] = xr; - table[s + 1] = xl; - - yl = salt32Bit[2] ^ xr; - yr = salt32Bit[3] ^ xl; - - if (s + 2 >= size) // P holds 18 values - { - break; - } - - yl ^= P[0]; - for (int i = 1; i < ROUNDS; i += 2) - { - yr ^= F(yl) ^ P[i]; - yl ^= F(yr) ^ P[i + 1]; - } - yr ^= P[ROUNDS + 1]; - - table[s + 2] = yr; - table[s + 3] = yl; - - xl = salt32Bit[0] ^ yr; - xr = salt32Bit[1] ^ yl; - } - } - - /** - * Derives a raw 192 bit Bcrypt key - * - * @param cost the cost factor, treated as an exponent of 2 - * @param salt a 16 byte salt - * @param psw the password - * @return a 192 bit key - */ - private byte[] DeriveRawKey(int cost, byte[] salt, byte[] psw) - { - if (salt.Length != 16) - throw new DataLengthException("Invalid salt size: 16 bytes expected."); - if (cost < 4 || cost > 31) - throw new ArgumentException("Illegal cost factor: 4 - 31 expected.", "cost"); - - if (psw.Length == 0) - { - psw = new byte[4]; - } - - // state <- InitState() - InitState(); - - uint[] salt32Bit = new uint[4]; // holds 16 byte salt - Pack.BE_To_UInt32(salt, 0, salt32Bit); - - uint[] salt32Bit2 = new uint[salt.Length]; // swapped values - salt32Bit2[0] = salt32Bit[2]; - salt32Bit2[1] = salt32Bit[3]; - salt32Bit2[2] = salt32Bit[0]; - salt32Bit2[3] = salt32Bit[1]; - - // ExpandKey( state, salt, key): - CyclicXorKey(psw); - ProcessTableWithSalt(P, salt32Bit, 0, 0); - Array.Clear(salt32Bit, 0, salt32Bit.Length); - ProcessTableWithSalt(S, salt32Bit2, P[P.Length - 2], P[P.Length - 1]); - Array.Clear(salt32Bit2, 0, salt32Bit2.Length); - - int rounds = 1 << cost; - for (int i = 0; i != rounds; i++) // rounds may be negative if cost is 31 - { - // state <- ExpandKey(state, 0, key); - CyclicXorKey(psw); - ProcessTable(0, 0, P); - ProcessTable(P[P_SZ - 2], P[P_SZ - 1], S); - - // state <- ExpandKey(state, 0, salt); - CyclicXorKey(salt); - ProcessTable(0, 0, P); - ProcessTable(P[P_SZ - 2], P[P_SZ - 1], S); - } - - // encrypt magicString 64 times - return EncryptMagicString(); - } - - /** - * Size of the salt parameter in bytes - */ - internal const int SALT_SIZE_BYTES = 16; - - /** - * Minimum value of cost parameter, equal to log2(bytes of salt) - */ - internal const int MIN_COST = 4; - - /** - * Maximum value of cost parameter (31 == 2,147,483,648) - */ - internal const int MAX_COST = 31; - - /** - * Maximum size of password == max (unrestricted) size of Blowfish key - */ - // Blowfish spec limits keys to 448bit/56 bytes to ensure all bits of key affect all ciphertext - // bits, but technically algorithm handles 72 byte keys and most implementations support this. - internal const int MAX_PASSWORD_BYTES = 72; - - /** - * Calculates the bcrypt hash of a password. - *

- * This implements the raw bcrypt function as defined in the bcrypt specification, not - * the crypt encoded version implemented in OpenBSD. - *

- * @param password the password bytes (up to 72 bytes) to use for this invocation. - * @param salt the 128 bit salt to use for this invocation. - * @param cost the bcrypt cost parameter. The cost of the bcrypt function grows as - * 2^cost. Legal values are 4..31 inclusive. - * @return the output of the raw bcrypt operation: a 192 bit (24 byte) hash. - */ - public static byte[] Generate(byte[] password, byte[] salt, int cost) - { - if (password == null) - throw new ArgumentNullException("password"); - if (password.Length > MAX_PASSWORD_BYTES) - throw new ArgumentException("BCrypt password must be <= 72 bytes", "password"); - if (salt == null) - throw new ArgumentNullException("salt"); - if (salt.Length != SALT_SIZE_BYTES) - throw new ArgumentException("BCrypt salt must be 128 bits", "salt"); - if (cost < MIN_COST || cost > MAX_COST) - throw new ArgumentException("BCrypt cost must be from 4..31", "cost"); - - return new BCrypt().DeriveRawKey(cost, salt, password); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/generators/BaseKdfBytesGenerator.cs b/bc-sharp-crypto/src/crypto/generators/BaseKdfBytesGenerator.cs deleted file mode 100644 index bca4207..0000000 --- a/bc-sharp-crypto/src/crypto/generators/BaseKdfBytesGenerator.cs +++ /dev/null @@ -1,132 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; - -namespace Org.BouncyCastle.Crypto.Generators -{ - /** - * Basic KDF generator for derived keys and ivs as defined by IEEE P1363a/ISO 18033 - *
- * This implementation is based on ISO 18033/P1363a. - */ - public class BaseKdfBytesGenerator - : IDerivationFunction - { - private int counterStart; - private IDigest digest; - private byte[] shared; - private byte[] iv; - - /** - * Construct a KDF Parameters generator. - * - * @param counterStart value of counter. - * @param digest the digest to be used as the source of derived keys. - */ - public BaseKdfBytesGenerator(int counterStart, IDigest digest) - { - this.counterStart = counterStart; - this.digest = digest; - } - - public virtual void Init(IDerivationParameters parameters) - { - if (parameters is KdfParameters) - { - KdfParameters p = (KdfParameters)parameters; - - shared = p.GetSharedSecret(); - iv = p.GetIV(); - } - else if (parameters is Iso18033KdfParameters) - { - Iso18033KdfParameters p = (Iso18033KdfParameters)parameters; - - shared = p.GetSeed(); - iv = null; - } - else - { - throw new ArgumentException("KDF parameters required for KDF Generator"); - } - } - - /** - * return the underlying digest. - */ - public virtual IDigest Digest - { - get { return digest; } - } - - /** - * fill len bytes of the output buffer with bytes generated from - * the derivation function. - * - * @throws ArgumentException if the size of the request will cause an overflow. - * @throws DataLengthException if the out buffer is too small. - */ - public virtual int GenerateBytes(byte[] output, int outOff, int length) - { - if ((output.Length - length) < outOff) - throw new DataLengthException("output buffer too small"); - - long oBytes = length; - int outLen = digest.GetDigestSize(); - - // - // this is at odds with the standard implementation, the - // maximum value should be hBits * (2^32 - 1) where hBits - // is the digest output size in bits. We can't have an - // array with a long index at the moment... - // - if (oBytes > ((2L << 32) - 1)) - throw new ArgumentException("Output length too large"); - - int cThreshold = (int)((oBytes + outLen - 1) / outLen); - - byte[] dig = new byte[digest.GetDigestSize()]; - - byte[] C = new byte[4]; - Pack.UInt32_To_BE((uint)counterStart, C, 0); - - uint counterBase = (uint)(counterStart & ~0xFF); - - for (int i = 0; i < cThreshold; i++) - { - digest.BlockUpdate(shared, 0, shared.Length); - digest.BlockUpdate(C, 0, 4); - - if (iv != null) - { - digest.BlockUpdate(iv, 0, iv.Length); - } - - digest.DoFinal(dig, 0); - - if (length > outLen) - { - Array.Copy(dig, 0, output, outOff, outLen); - outOff += outLen; - length -= outLen; - } - else - { - Array.Copy(dig, 0, output, outOff, length); - } - - if (++C[3] == 0) - { - counterBase += 0x100; - Pack.UInt32_To_BE(counterBase, C, 0); - } - } - - digest.Reset(); - - return (int)oBytes; - } - } -} \ No newline at end of file diff --git a/bc-sharp-crypto/src/crypto/generators/DHBasicKeyPairGenerator.cs b/bc-sharp-crypto/src/crypto/generators/DHBasicKeyPairGenerator.cs deleted file mode 100644 index 51b3af6..0000000 --- a/bc-sharp-crypto/src/crypto/generators/DHBasicKeyPairGenerator.cs +++ /dev/null @@ -1,38 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Generators -{ - /** - * a basic Diffie-Hellman key pair generator. - * - * This generates keys consistent for use with the basic algorithm for - * Diffie-Hellman. - */ - public class DHBasicKeyPairGenerator - : IAsymmetricCipherKeyPairGenerator - { - private DHKeyGenerationParameters param; - - public virtual void Init( - KeyGenerationParameters parameters) - { - this.param = (DHKeyGenerationParameters)parameters; - } - - public virtual AsymmetricCipherKeyPair GenerateKeyPair() - { - DHKeyGeneratorHelper helper = DHKeyGeneratorHelper.Instance; - DHParameters dhp = param.Parameters; - - BigInteger x = helper.CalculatePrivate(dhp, param.Random); - BigInteger y = helper.CalculatePublic(dhp, x); - - return new AsymmetricCipherKeyPair( - new DHPublicKeyParameters(y, dhp), - new DHPrivateKeyParameters(x, dhp)); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/generators/DHKeyGeneratorHelper.cs b/bc-sharp-crypto/src/crypto/generators/DHKeyGeneratorHelper.cs deleted file mode 100644 index 68aba64..0000000 --- a/bc-sharp-crypto/src/crypto/generators/DHKeyGeneratorHelper.cs +++ /dev/null @@ -1,72 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC.Multiplier; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Generators -{ - class DHKeyGeneratorHelper - { - internal static readonly DHKeyGeneratorHelper Instance = new DHKeyGeneratorHelper(); - - private DHKeyGeneratorHelper() - { - } - - internal BigInteger CalculatePrivate( - DHParameters dhParams, - SecureRandom random) - { - int limit = dhParams.L; - - if (limit != 0) - { - int minWeight = limit >> 2; - for (;;) - { - BigInteger x = new BigInteger(limit, random).SetBit(limit - 1); - if (WNafUtilities.GetNafWeight(x) >= minWeight) - { - return x; - } - } - } - - BigInteger min = BigInteger.Two; - int m = dhParams.M; - if (m != 0) - { - min = BigInteger.One.ShiftLeft(m - 1); - } - - BigInteger q = dhParams.Q; - if (q == null) - { - q = dhParams.P; - } - BigInteger max = q.Subtract(BigInteger.Two); - - { - int minWeight = max.BitLength >> 2; - for (;;) - { - BigInteger x = BigIntegers.CreateRandomInRange(min, max, random); - if (WNafUtilities.GetNafWeight(x) >= minWeight) - { - return x; - } - } - } - } - - internal BigInteger CalculatePublic( - DHParameters dhParams, - BigInteger x) - { - return dhParams.G.ModPow(x, dhParams.P); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/generators/DHKeyPairGenerator.cs b/bc-sharp-crypto/src/crypto/generators/DHKeyPairGenerator.cs deleted file mode 100644 index 3bf58ba..0000000 --- a/bc-sharp-crypto/src/crypto/generators/DHKeyPairGenerator.cs +++ /dev/null @@ -1,38 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Generators -{ - /** - * a Diffie-Hellman key pair generator. - * - * This generates keys consistent for use in the MTI/A0 key agreement protocol - * as described in "Handbook of Applied Cryptography", Pages 516-519. - */ - public class DHKeyPairGenerator - : IAsymmetricCipherKeyPairGenerator - { - private DHKeyGenerationParameters param; - - public virtual void Init( - KeyGenerationParameters parameters) - { - this.param = (DHKeyGenerationParameters)parameters; - } - - public virtual AsymmetricCipherKeyPair GenerateKeyPair() - { - DHKeyGeneratorHelper helper = DHKeyGeneratorHelper.Instance; - DHParameters dhp = param.Parameters; - - BigInteger x = helper.CalculatePrivate(dhp, param.Random); - BigInteger y = helper.CalculatePublic(dhp, x); - - return new AsymmetricCipherKeyPair( - new DHPublicKeyParameters(y, dhp), - new DHPrivateKeyParameters(x, dhp)); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/generators/DHParametersGenerator.cs b/bc-sharp-crypto/src/crypto/generators/DHParametersGenerator.cs deleted file mode 100644 index e752c84..0000000 --- a/bc-sharp-crypto/src/crypto/generators/DHParametersGenerator.cs +++ /dev/null @@ -1,45 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Generators -{ - public class DHParametersGenerator - { - private int size; - private int certainty; - private SecureRandom random; - - public virtual void Init( - int size, - int certainty, - SecureRandom random) - { - this.size = size; - this.certainty = certainty; - this.random = random; - } - - /** - * which Generates the p and g values from the given parameters, - * returning the DHParameters object. - *

- * Note: can take a while...

- */ - public virtual DHParameters GenerateParameters() - { - // - // find a safe prime p where p = 2*q + 1, where p and q are prime. - // - BigInteger[] safePrimes = DHParametersHelper.GenerateSafePrimes(size, certainty, random); - - BigInteger p = safePrimes[0]; - BigInteger q = safePrimes[1]; - BigInteger g = DHParametersHelper.SelectGenerator(p, q, random); - - return new DHParameters(p, g, q, BigInteger.Two, null); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/generators/DHParametersHelper.cs b/bc-sharp-crypto/src/crypto/generators/DHParametersHelper.cs deleted file mode 100644 index 3856904..0000000 --- a/bc-sharp-crypto/src/crypto/generators/DHParametersHelper.cs +++ /dev/null @@ -1,156 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC.Multiplier; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Generators -{ - internal class DHParametersHelper - { - private static readonly BigInteger Six = BigInteger.ValueOf(6); - - private static readonly int[][] primeLists = BigInteger.primeLists; - private static readonly int[] primeProducts = BigInteger.primeProducts; - private static readonly BigInteger[] BigPrimeProducts = ConstructBigPrimeProducts(primeProducts); - - private static BigInteger[] ConstructBigPrimeProducts(int[] primeProducts) - { - BigInteger[] bpp = new BigInteger[primeProducts.Length]; - for (int i = 0; i < bpp.Length; ++i) - { - bpp[i] = BigInteger.ValueOf(primeProducts[i]); - } - return bpp; - } - - /* - * Finds a pair of prime BigInteger's {p, q: p = 2q + 1} - * - * (see: Handbook of Applied Cryptography 4.86) - */ - internal static BigInteger[] GenerateSafePrimes(int size, int certainty, SecureRandom random) - { - BigInteger p, q; - int qLength = size - 1; - int minWeight = size >> 2; - - if (size <= 32) - { - for (;;) - { - q = new BigInteger(qLength, 2, random); - - p = q.ShiftLeft(1).Add(BigInteger.One); - - if (!p.IsProbablePrime(certainty, true)) - continue; - - if (certainty > 2 && !q.IsProbablePrime(certainty, true)) - continue; - - break; - } - } - else - { - // Note: Modified from Java version for speed - for (;;) - { - q = new BigInteger(qLength, 0, random); - - retry: - for (int i = 0; i < primeLists.Length; ++i) - { - int test = q.Remainder(BigPrimeProducts[i]).IntValue; - - if (i == 0) - { - int rem3 = test % 3; - if (rem3 != 2) - { - int diff = 2 * rem3 + 2; - q = q.Add(BigInteger.ValueOf(diff)); - test = (test + diff) % primeProducts[i]; - } - } - - int[] primeList = primeLists[i]; - for (int j = 0; j < primeList.Length; ++j) - { - int prime = primeList[j]; - int qRem = test % prime; - if (qRem == 0 || qRem == (prime >> 1)) - { - q = q.Add(Six); - goto retry; - } - } - } - - if (q.BitLength != qLength) - continue; - - if (!q.RabinMillerTest(2, random, true)) - continue; - - p = q.ShiftLeft(1).Add(BigInteger.One); - - if (!p.RabinMillerTest(certainty, random, true)) - continue; - - if (certainty > 2 && !q.RabinMillerTest(certainty - 2, random, true)) - continue; - - /* - * Require a minimum weight of the NAF representation, since low-weight primes may be - * weak against a version of the number-field-sieve for the discrete-logarithm-problem. - * - * See "The number field sieve for integers of low weight", Oliver Schirokauer. - */ - if (WNafUtilities.GetNafWeight(p) < minWeight) - continue; - - break; - } - } - - return new BigInteger[] { p, q }; - } - - /* - * Select a high order element of the multiplicative group Zp* - * - * p and q must be s.t. p = 2*q + 1, where p and q are prime (see generateSafePrimes) - */ - internal static BigInteger SelectGenerator(BigInteger p, BigInteger q, SecureRandom random) - { - BigInteger pMinusTwo = p.Subtract(BigInteger.Two); - BigInteger g; - - /* - * (see: Handbook of Applied Cryptography 4.80) - */ -// do -// { -// g = BigIntegers.CreateRandomInRange(BigInteger.Two, pMinusTwo, random); -// } -// while (g.ModPow(BigInteger.Two, p).Equals(BigInteger.One) -// || g.ModPow(q, p).Equals(BigInteger.One)); - - /* - * RFC 2631 2.2.1.2 (and see: Handbook of Applied Cryptography 4.81) - */ - do - { - BigInteger h = BigIntegers.CreateRandomInRange(BigInteger.Two, pMinusTwo, random); - - g = h.ModPow(BigInteger.Two, p); - } - while (g.Equals(BigInteger.One)); - - return g; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/generators/DesEdeKeyGenerator.cs b/bc-sharp-crypto/src/crypto/generators/DesEdeKeyGenerator.cs deleted file mode 100644 index 904cc71..0000000 --- a/bc-sharp-crypto/src/crypto/generators/DesEdeKeyGenerator.cs +++ /dev/null @@ -1,67 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Generators -{ - public class DesEdeKeyGenerator - : DesKeyGenerator - { - public DesEdeKeyGenerator() - { - } - - internal DesEdeKeyGenerator( - int defaultStrength) - : base(defaultStrength) - { - } - - /** - * initialise the key generator - if strength is set to zero - * the key Generated will be 192 bits in size, otherwise - * strength can be 128 or 192 (or 112 or 168 if you don't count - * parity bits), depending on whether you wish to do 2-key or 3-key - * triple DES. - * - * @param param the parameters to be used for key generation - */ - protected override void engineInit( - KeyGenerationParameters parameters) - { - this.random = parameters.Random; - this.strength = (parameters.Strength + 7) / 8; - - if (strength == 0 || strength == (168 / 8)) - { - strength = DesEdeParameters.DesEdeKeyLength; - } - else if (strength == (112 / 8)) - { - strength = 2 * DesEdeParameters.DesKeyLength; - } - else if (strength != DesEdeParameters.DesEdeKeyLength - && strength != (2 * DesEdeParameters.DesKeyLength)) - { - throw new ArgumentException("DESede key must be " - + (DesEdeParameters.DesEdeKeyLength * 8) + " or " - + (2 * 8 * DesEdeParameters.DesKeyLength) - + " bits long."); - } - } - - protected override byte[] engineGenerateKey() - { - byte[] newKey = new byte[strength]; - - do - { - random.NextBytes(newKey); - DesEdeParameters.SetOddParity(newKey); - } - while (DesEdeParameters.IsWeakKey(newKey, 0, newKey.Length) || !DesEdeParameters.IsRealEdeKey(newKey, 0)); - - return newKey; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/generators/DesKeyGenerator.cs b/bc-sharp-crypto/src/crypto/generators/DesKeyGenerator.cs deleted file mode 100644 index 4c2051d..0000000 --- a/bc-sharp-crypto/src/crypto/generators/DesKeyGenerator.cs +++ /dev/null @@ -1,57 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Generators -{ - public class DesKeyGenerator - : CipherKeyGenerator - { - public DesKeyGenerator() - { - } - - internal DesKeyGenerator( - int defaultStrength) - : base(defaultStrength) - { - } - - /** - * initialise the key generator - if strength is set to zero - * the key generated will be 64 bits in size, otherwise - * strength can be 64 or 56 bits (if you don't count the parity bits). - * - * @param param the parameters to be used for key generation - */ - protected override void engineInit( - KeyGenerationParameters parameters) - { - base.engineInit(parameters); - - if (strength == 0 || strength == (56 / 8)) - { - strength = DesParameters.DesKeyLength; - } - else if (strength != DesParameters.DesKeyLength) - { - throw new ArgumentException( - "DES key must be " + (DesParameters.DesKeyLength * 8) + " bits long."); - } - } - - protected override byte[] engineGenerateKey() - { - byte[] newKey = new byte[DesParameters.DesKeyLength]; - - do - { - random.NextBytes(newKey); - DesParameters.SetOddParity(newKey); - } - while (DesParameters.IsWeakKey(newKey, 0)); - - return newKey; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/generators/DsaKeyPairGenerator.cs b/bc-sharp-crypto/src/crypto/generators/DsaKeyPairGenerator.cs deleted file mode 100644 index 1c9ce5a..0000000 --- a/bc-sharp-crypto/src/crypto/generators/DsaKeyPairGenerator.cs +++ /dev/null @@ -1,72 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC.Multiplier; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Generators -{ - /** - * a DSA key pair generator. - * - * This Generates DSA keys in line with the method described - * in FIPS 186-3 B.1 FFC Key Pair Generation. - */ - public class DsaKeyPairGenerator - : IAsymmetricCipherKeyPairGenerator - { - private static readonly BigInteger One = BigInteger.One; - - private DsaKeyGenerationParameters param; - - public void Init( - KeyGenerationParameters parameters) - { - if (parameters == null) - throw new ArgumentNullException("parameters"); - - // Note: If we start accepting instances of KeyGenerationParameters, - // must apply constraint checking on strength (see DsaParametersGenerator.Init) - - this.param = (DsaKeyGenerationParameters) parameters; - } - - public AsymmetricCipherKeyPair GenerateKeyPair() - { - DsaParameters dsaParams = param.Parameters; - - BigInteger x = GeneratePrivateKey(dsaParams.Q, param.Random); - BigInteger y = CalculatePublicKey(dsaParams.P, dsaParams.G, x); - - return new AsymmetricCipherKeyPair( - new DsaPublicKeyParameters(y, dsaParams), - new DsaPrivateKeyParameters(x, dsaParams)); - } - - private static BigInteger GeneratePrivateKey(BigInteger q, SecureRandom random) - { - // B.1.2 Key Pair Generation by Testing Candidates - int minWeight = q.BitLength >> 2; - for (;;) - { - // TODO Prefer this method? (change test cases that used fixed random) - // B.1.1 Key Pair Generation Using Extra Random Bits - //BigInteger x = new BigInteger(q.BitLength + 64, random).Mod(q.Subtract(One)).Add(One); - - BigInteger x = BigIntegers.CreateRandomInRange(One, q.Subtract(One), random); - if (WNafUtilities.GetNafWeight(x) >= minWeight) - { - return x; - } - } - } - - private static BigInteger CalculatePublicKey(BigInteger p, BigInteger g, BigInteger x) - { - return g.ModPow(x, p); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/generators/DsaParametersGenerator.cs b/bc-sharp-crypto/src/crypto/generators/DsaParametersGenerator.cs deleted file mode 100644 index d7ae3ec..0000000 --- a/bc-sharp-crypto/src/crypto/generators/DsaParametersGenerator.cs +++ /dev/null @@ -1,355 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Crypto.Generators -{ - /** - * Generate suitable parameters for DSA, in line with FIPS 186-2, or FIPS 186-3. - */ - public class DsaParametersGenerator - { - private IDigest digest; - private int L, N; - private int certainty; - private SecureRandom random; - private bool use186_3; - private int usageIndex; - - public DsaParametersGenerator() - : this(new Sha1Digest()) - { - } - - public DsaParametersGenerator(IDigest digest) - { - this.digest = digest; - } - - /// Initialise the generator - /// This form can only be used for older DSA (pre-DSA2) parameters - /// the size of keys in bits (from 512 up to 1024, and a multiple of 64) - /// measure of robustness of primes (at least 80 for FIPS 186-2 compliance) - /// the source of randomness to use - public virtual void Init( - int size, - int certainty, - SecureRandom random) - { - if (!IsValidDsaStrength(size)) - throw new ArgumentException("size must be from 512 - 1024 and a multiple of 64", "size"); - - this.use186_3 = false; - this.L = size; - this.N = GetDefaultN(size); - this.certainty = certainty; - this.random = random; - } - - /// Initialise the generator for DSA 2 - /// You must use this Init method if you need to generate parameters for DSA 2 keys - /// An instance of DsaParameterGenerationParameters used to configure this generator - public virtual void Init(DsaParameterGenerationParameters parameters) - { - // TODO Should we enforce the minimum 'certainty' values as per C.3 Table C.1? - this.use186_3 = true; - this.L = parameters.L; - this.N = parameters.N; - this.certainty = parameters.Certainty; - this.random = parameters.Random; - this.usageIndex = parameters.UsageIndex; - - if ((L < 1024 || L > 3072) || L % 1024 != 0) - throw new ArgumentException("Values must be between 1024 and 3072 and a multiple of 1024", "L"); - if (L == 1024 && N != 160) - throw new ArgumentException("N must be 160 for L = 1024"); - if (L == 2048 && (N != 224 && N != 256)) - throw new ArgumentException("N must be 224 or 256 for L = 2048"); - if (L == 3072 && N != 256) - throw new ArgumentException("N must be 256 for L = 3072"); - - if (digest.GetDigestSize() * 8 < N) - throw new InvalidOperationException("Digest output size too small for value of N"); - } - - /// Generates a set of DsaParameters - /// Can take a while... - public virtual DsaParameters GenerateParameters() - { - return use186_3 - ? GenerateParameters_FIPS186_3() - : GenerateParameters_FIPS186_2(); - } - - protected virtual DsaParameters GenerateParameters_FIPS186_2() - { - byte[] seed = new byte[20]; - byte[] part1 = new byte[20]; - byte[] part2 = new byte[20]; - byte[] u = new byte[20]; - int n = (L - 1) / 160; - byte[] w = new byte[L / 8]; - - if (!(digest is Sha1Digest)) - throw new InvalidOperationException("can only use SHA-1 for generating FIPS 186-2 parameters"); - - for (;;) - { - random.NextBytes(seed); - - Hash(digest, seed, part1); - Array.Copy(seed, 0, part2, 0, seed.Length); - Inc(part2); - Hash(digest, part2, part2); - - for (int i = 0; i != u.Length; i++) - { - u[i] = (byte)(part1[i] ^ part2[i]); - } - - u[0] |= (byte)0x80; - u[19] |= (byte)0x01; - - BigInteger q = new BigInteger(1, u); - - if (!q.IsProbablePrime(certainty)) - continue; - - byte[] offset = Arrays.Clone(seed); - Inc(offset); - - for (int counter = 0; counter < 4096; ++counter) - { - for (int k = 0; k < n; k++) - { - Inc(offset); - Hash(digest, offset, part1); - Array.Copy(part1, 0, w, w.Length - (k + 1) * part1.Length, part1.Length); - } - - Inc(offset); - Hash(digest, offset, part1); - Array.Copy(part1, part1.Length - ((w.Length - (n) * part1.Length)), w, 0, w.Length - n * part1.Length); - - w[0] |= (byte)0x80; - - BigInteger x = new BigInteger(1, w); - - BigInteger c = x.Mod(q.ShiftLeft(1)); - - BigInteger p = x.Subtract(c.Subtract(BigInteger.One)); - - if (p.BitLength != L) - continue; - - if (p.IsProbablePrime(certainty)) - { - BigInteger g = CalculateGenerator_FIPS186_2(p, q, random); - - return new DsaParameters(p, q, g, new DsaValidationParameters(seed, counter)); - } - } - } - } - - protected virtual BigInteger CalculateGenerator_FIPS186_2(BigInteger p, BigInteger q, SecureRandom r) - { - BigInteger e = p.Subtract(BigInteger.One).Divide(q); - BigInteger pSub2 = p.Subtract(BigInteger.Two); - - for (;;) - { - BigInteger h = BigIntegers.CreateRandomInRange(BigInteger.Two, pSub2, r); - BigInteger g = h.ModPow(e, p); - - if (g.BitLength > 1) - return g; - } - } - - /** - * generate suitable parameters for DSA, in line with - * FIPS 186-3 A.1 Generation of the FFC Primes p and q. - */ - protected virtual DsaParameters GenerateParameters_FIPS186_3() - { -// A.1.1.2 Generation of the Probable Primes p and q Using an Approved Hash Function - IDigest d = digest; - int outlen = d.GetDigestSize() * 8; - -// 1. Check that the (L, N) pair is in the list of acceptable (L, N pairs) (see Section 4.2). If -// the pair is not in the list, then return INVALID. - // Note: checked at initialisation - -// 2. If (seedlen < N), then return INVALID. - // FIXME This should be configurable (must be >= N) - int seedlen = N; - byte[] seed = new byte[seedlen / 8]; - -// 3. n = ceiling(L ⁄ outlen) – 1. - int n = (L - 1) / outlen; - -// 4. b = L – 1 – (n ∗ outlen). - int b = (L - 1) % outlen; - - byte[] output = new byte[d.GetDigestSize()]; - for (;;) - { -// 5. Get an arbitrary sequence of seedlen bits as the domain_parameter_seed. - random.NextBytes(seed); - -// 6. U = Hash (domain_parameter_seed) mod 2^(N–1). - Hash(d, seed, output); - BigInteger U = new BigInteger(1, output).Mod(BigInteger.One.ShiftLeft(N - 1)); - -// 7. q = 2^(N–1) + U + 1 – ( U mod 2). - BigInteger q = U.SetBit(0).SetBit(N - 1); - -// 8. Test whether or not q is prime as specified in Appendix C.3. - // TODO Review C.3 for primality checking - if (!q.IsProbablePrime(certainty)) - { -// 9. If q is not a prime, then go to step 5. - continue; - } - -// 10. offset = 1. - // Note: 'offset' value managed incrementally - byte[] offset = Arrays.Clone(seed); - -// 11. For counter = 0 to (4L – 1) do - int counterLimit = 4 * L; - for (int counter = 0; counter < counterLimit; ++counter) - { -// 11.1 For j = 0 to n do -// Vj = Hash ((domain_parameter_seed + offset + j) mod 2^seedlen). -// 11.2 W = V0 + (V1 ∗ 2^outlen) + ... + (V^(n–1) ∗ 2^((n–1) ∗ outlen)) + ((Vn mod 2^b) ∗ 2^(n ∗ outlen)). - // TODO Assemble w as a byte array - BigInteger W = BigInteger.Zero; - for (int j = 0, exp = 0; j <= n; ++j, exp += outlen) - { - Inc(offset); - Hash(d, offset, output); - - BigInteger Vj = new BigInteger(1, output); - if (j == n) - { - Vj = Vj.Mod(BigInteger.One.ShiftLeft(b)); - } - - W = W.Add(Vj.ShiftLeft(exp)); - } - -// 11.3 X = W + 2^(L–1). Comment: 0 ≤ W < 2L–1; hence, 2L–1 ≤ X < 2L. - BigInteger X = W.Add(BigInteger.One.ShiftLeft(L - 1)); - -// 11.4 c = X mod 2q. - BigInteger c = X.Mod(q.ShiftLeft(1)); - -// 11.5 p = X - (c - 1). Comment: p ≡ 1 (mod 2q). - BigInteger p = X.Subtract(c.Subtract(BigInteger.One)); - - // 11.6 If (p < 2^(L - 1)), then go to step 11.9 - if (p.BitLength != L) - continue; - -// 11.7 Test whether or not p is prime as specified in Appendix C.3. - // TODO Review C.3 for primality checking - if (p.IsProbablePrime(certainty)) - { -// 11.8 If p is determined to be prime, then return VALID and the values of p, q and -// (optionally) the values of domain_parameter_seed and counter. - // TODO Make configurable (8-bit unsigned)? - - if (usageIndex >= 0) - { - BigInteger g = CalculateGenerator_FIPS186_3_Verifiable(d, p, q, seed, usageIndex); - if (g != null) - return new DsaParameters(p, q, g, new DsaValidationParameters(seed, counter, usageIndex)); - } - - { - BigInteger g = CalculateGenerator_FIPS186_3_Unverifiable(p, q, random); - - return new DsaParameters(p, q, g, new DsaValidationParameters(seed, counter)); - } - } - -// 11.9 offset = offset + n + 1. Comment: Increment offset; then, as part of -// the loop in step 11, increment counter; if -// counter < 4L, repeat steps 11.1 through 11.8. - // Note: 'offset' value already incremented in inner loop - } -// 12. Go to step 5. - } - } - - protected virtual BigInteger CalculateGenerator_FIPS186_3_Unverifiable(BigInteger p, BigInteger q, - SecureRandom r) - { - return CalculateGenerator_FIPS186_2(p, q, r); - } - - protected virtual BigInteger CalculateGenerator_FIPS186_3_Verifiable(IDigest d, BigInteger p, BigInteger q, - byte[] seed, int index) - { - // A.2.3 Verifiable Canonical Generation of the Generator g - BigInteger e = p.Subtract(BigInteger.One).Divide(q); - byte[] ggen = Hex.Decode("6767656E"); - - // 7. U = domain_parameter_seed || "ggen" || index || count. - byte[] U = new byte[seed.Length + ggen.Length + 1 + 2]; - Array.Copy(seed, 0, U, 0, seed.Length); - Array.Copy(ggen, 0, U, seed.Length, ggen.Length); - U[U.Length - 3] = (byte)index; - - byte[] w = new byte[d.GetDigestSize()]; - for (int count = 1; count < (1 << 16); ++count) - { - Inc(U); - Hash(d, U, w); - BigInteger W = new BigInteger(1, w); - BigInteger g = W.ModPow(e, p); - - if (g.CompareTo(BigInteger.Two) >= 0) - return g; - } - - return null; - } - - private static bool IsValidDsaStrength( - int strength) - { - return strength >= 512 && strength <= 1024 && strength % 64 == 0; - } - - protected static void Hash(IDigest d, byte[] input, byte[] output) - { - d.BlockUpdate(input, 0, input.Length); - d.DoFinal(output, 0); - } - - private static int GetDefaultN(int L) - { - return L > 1024 ? 256 : 160; - } - - protected static void Inc(byte[] buf) - { - for (int i = buf.Length - 1; i >= 0; --i) - { - byte b = (byte)(buf[i] + 1); - buf[i] = b; - - if (b != 0) - break; - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/generators/ECKeyPairGenerator.cs b/bc-sharp-crypto/src/crypto/generators/ECKeyPairGenerator.cs deleted file mode 100644 index 26bc06e..0000000 --- a/bc-sharp-crypto/src/crypto/generators/ECKeyPairGenerator.cs +++ /dev/null @@ -1,162 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Sec; -using Org.BouncyCastle.Asn1.TeleTrust; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.EC; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC; -using Org.BouncyCastle.Math.EC.Multiplier; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Generators -{ - public class ECKeyPairGenerator - : IAsymmetricCipherKeyPairGenerator - { - private readonly string algorithm; - - private ECDomainParameters parameters; - private DerObjectIdentifier publicKeyParamSet; - private SecureRandom random; - - public ECKeyPairGenerator() - : this("EC") - { - } - - public ECKeyPairGenerator( - string algorithm) - { - if (algorithm == null) - throw new ArgumentNullException("algorithm"); - - this.algorithm = ECKeyParameters.VerifyAlgorithmName(algorithm); - } - - public void Init( - KeyGenerationParameters parameters) - { - if (parameters is ECKeyGenerationParameters) - { - ECKeyGenerationParameters ecP = (ECKeyGenerationParameters) parameters; - - this.publicKeyParamSet = ecP.PublicKeyParamSet; - this.parameters = ecP.DomainParameters; - } - else - { - DerObjectIdentifier oid; - switch (parameters.Strength) - { - case 192: - oid = X9ObjectIdentifiers.Prime192v1; - break; - case 224: - oid = SecObjectIdentifiers.SecP224r1; - break; - case 239: - oid = X9ObjectIdentifiers.Prime239v1; - break; - case 256: - oid = X9ObjectIdentifiers.Prime256v1; - break; - case 384: - oid = SecObjectIdentifiers.SecP384r1; - break; - case 521: - oid = SecObjectIdentifiers.SecP521r1; - break; - default: - throw new InvalidParameterException("unknown key size."); - } - - X9ECParameters ecps = FindECCurveByOid(oid); - - this.publicKeyParamSet = oid; - this.parameters = new ECDomainParameters( - ecps.Curve, ecps.G, ecps.N, ecps.H, ecps.GetSeed()); - } - - this.random = parameters.Random; - - if (this.random == null) - { - this.random = new SecureRandom(); - } - } - - /** - * Given the domain parameters this routine generates an EC key - * pair in accordance with X9.62 section 5.2.1 pages 26, 27. - */ - public AsymmetricCipherKeyPair GenerateKeyPair() - { - BigInteger n = parameters.N; - BigInteger d; - int minWeight = n.BitLength >> 2; - - for (;;) - { - d = new BigInteger(n.BitLength, random); - - if (d.CompareTo(BigInteger.Two) < 0 || d.CompareTo(n) >= 0) - continue; - - if (WNafUtilities.GetNafWeight(d) < minWeight) - continue; - - break; - } - - ECPoint q = CreateBasePointMultiplier().Multiply(parameters.G, d); - - if (publicKeyParamSet != null) - { - return new AsymmetricCipherKeyPair( - new ECPublicKeyParameters(algorithm, q, publicKeyParamSet), - new ECPrivateKeyParameters(algorithm, d, publicKeyParamSet)); - } - - return new AsymmetricCipherKeyPair( - new ECPublicKeyParameters(algorithm, q, parameters), - new ECPrivateKeyParameters(algorithm, d, parameters)); - } - - protected virtual ECMultiplier CreateBasePointMultiplier() - { - return new FixedPointCombMultiplier(); - } - - internal static X9ECParameters FindECCurveByOid(DerObjectIdentifier oid) - { - // TODO ECGost3410NamedCurves support (returns ECDomainParameters though) - - X9ECParameters ecP = CustomNamedCurves.GetByOid(oid); - if (ecP == null) - { - ecP = ECNamedCurveTable.GetByOid(oid); - } - return ecP; - } - - internal static ECPublicKeyParameters GetCorrespondingPublicKey( - ECPrivateKeyParameters privKey) - { - ECDomainParameters ec = privKey.Parameters; - ECPoint q = new FixedPointCombMultiplier().Multiply(ec.G, privKey.D); - - if (privKey.PublicKeyParamSet != null) - { - return new ECPublicKeyParameters(privKey.AlgorithmName, q, privKey.PublicKeyParamSet); - } - - return new ECPublicKeyParameters(privKey.AlgorithmName, q, ec); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/generators/ElGamalKeyPairGenerator.cs b/bc-sharp-crypto/src/crypto/generators/ElGamalKeyPairGenerator.cs deleted file mode 100644 index 227e7fe..0000000 --- a/bc-sharp-crypto/src/crypto/generators/ElGamalKeyPairGenerator.cs +++ /dev/null @@ -1,40 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Generators -{ - /** - * a ElGamal key pair generator. - *

- * This Generates keys consistent for use with ElGamal as described in - * page 164 of "Handbook of Applied Cryptography".

- */ - public class ElGamalKeyPairGenerator - : IAsymmetricCipherKeyPairGenerator - { - private ElGamalKeyGenerationParameters param; - - public void Init( - KeyGenerationParameters parameters) - { - this.param = (ElGamalKeyGenerationParameters) parameters; - } - - public AsymmetricCipherKeyPair GenerateKeyPair() - { - DHKeyGeneratorHelper helper = DHKeyGeneratorHelper.Instance; - ElGamalParameters egp = param.Parameters; - DHParameters dhp = new DHParameters(egp.P, egp.G, null, 0, egp.L); - - BigInteger x = helper.CalculatePrivate(dhp, param.Random); - BigInteger y = helper.CalculatePublic(dhp, x); - - return new AsymmetricCipherKeyPair( - new ElGamalPublicKeyParameters(y, egp), - new ElGamalPrivateKeyParameters(x, egp)); - } - } - -} diff --git a/bc-sharp-crypto/src/crypto/generators/ElGamalParametersGenerator.cs b/bc-sharp-crypto/src/crypto/generators/ElGamalParametersGenerator.cs deleted file mode 100644 index 8443bb0..0000000 --- a/bc-sharp-crypto/src/crypto/generators/ElGamalParametersGenerator.cs +++ /dev/null @@ -1,46 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Generators -{ - public class ElGamalParametersGenerator - { - private int size; - private int certainty; - private SecureRandom random; - - public void Init( - int size, - int certainty, - SecureRandom random) - { - this.size = size; - this.certainty = certainty; - this.random = random; - } - - /** - * which Generates the p and g values from the given parameters, - * returning the ElGamalParameters object. - *

- * Note: can take a while... - *

- */ - public ElGamalParameters GenerateParameters() - { - // - // find a safe prime p where p = 2*q + 1, where p and q are prime. - // - BigInteger[] safePrimes = DHParametersHelper.GenerateSafePrimes(size, certainty, random); - - BigInteger p = safePrimes[0]; - BigInteger q = safePrimes[1]; - BigInteger g = DHParametersHelper.SelectGenerator(p, q, random); - - return new ElGamalParameters(p, g); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/generators/GOST3410KeyPairGenerator.cs b/bc-sharp-crypto/src/crypto/generators/GOST3410KeyPairGenerator.cs deleted file mode 100644 index 520820b..0000000 --- a/bc-sharp-crypto/src/crypto/generators/GOST3410KeyPairGenerator.cs +++ /dev/null @@ -1,82 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.CryptoPro; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC.Multiplier; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Generators -{ - /** - * a GOST3410 key pair generator. - * This generates GOST3410 keys in line with the method described - * in GOST R 34.10-94. - */ - public class Gost3410KeyPairGenerator - : IAsymmetricCipherKeyPairGenerator - { - private Gost3410KeyGenerationParameters param; - - public void Init( - KeyGenerationParameters parameters) - { - if (parameters is Gost3410KeyGenerationParameters) - { - this.param = (Gost3410KeyGenerationParameters) parameters; - } - else - { - Gost3410KeyGenerationParameters kgp = new Gost3410KeyGenerationParameters( - parameters.Random, - CryptoProObjectIdentifiers.GostR3410x94CryptoProA); - - if (parameters.Strength != kgp.Parameters.P.BitLength - 1) - { - // TODO Should we complain? - } - - this.param = kgp; - } - } - - public AsymmetricCipherKeyPair GenerateKeyPair() - { - SecureRandom random = param.Random; - Gost3410Parameters gost3410Params = param.Parameters; - - BigInteger q = gost3410Params.Q, x; - - int minWeight = 64; - for (;;) - { - x = new BigInteger(256, random); - - if (x.SignValue < 1 || x.CompareTo(q) >= 0) - continue; - - if (WNafUtilities.GetNafWeight(x) < minWeight) - continue; - - break; - } - - BigInteger p = gost3410Params.P; - BigInteger a = gost3410Params.A; - - // calculate the public key. - BigInteger y = a.ModPow(x, p); - - if (param.PublicKeyParamSet != null) - { - return new AsymmetricCipherKeyPair( - new Gost3410PublicKeyParameters(y, param.PublicKeyParamSet), - new Gost3410PrivateKeyParameters(x, param.PublicKeyParamSet)); - } - - return new AsymmetricCipherKeyPair( - new Gost3410PublicKeyParameters(y, gost3410Params), - new Gost3410PrivateKeyParameters(x, gost3410Params)); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/generators/GOST3410ParametersGenerator.cs b/bc-sharp-crypto/src/crypto/generators/GOST3410ParametersGenerator.cs deleted file mode 100644 index 52a9f5a..0000000 --- a/bc-sharp-crypto/src/crypto/generators/GOST3410ParametersGenerator.cs +++ /dev/null @@ -1,530 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Generators -{ - /** - * generate suitable parameters for GOST3410. - */ - public class Gost3410ParametersGenerator - { - private int size; - private int typeproc; - private SecureRandom init_random; - - /** - * initialise the key generator. - * - * @param size size of the key - * @param typeProcedure type procedure A,B = 1; A',B' - else - * @param random random byte source. - */ - public void Init( - int size, - int typeProcedure, - SecureRandom random) - { - this.size = size; - this.typeproc = typeProcedure; - this.init_random = random; - } - - //Procedure A - private int procedure_A(int x0, int c, BigInteger[] pq, int size) - { - //Verify and perform condition: 065536) - { - x0 = init_random.NextInt()/32768; - } - - while((c<0 || c>65536) || (c/2==0)) - { - c = init_random.NextInt()/32768 + 1; - } - - BigInteger C = BigInteger.ValueOf(c); - BigInteger constA16 = BigInteger.ValueOf(19381); - - //step1 - BigInteger[] y = new BigInteger[1]; // begin length = 1 - y[0] = BigInteger.ValueOf(x0); - - //step 2 - int[] t = new int[1]; // t - orders; begin length = 1 - t[0] = size; - int s = 0; - for (int i=0; t[i]>=17; i++) - { - // extension array t - int[] tmp_t = new int[t.Length + 1]; /////////////// - Array.Copy(t,0,tmp_t,0,t.Length); // extension - t = new int[tmp_t.Length]; // array t - Array.Copy(tmp_t, 0, t, 0, tmp_t.Length); /////////////// - - t[i+1] = t[i]/2; - s = i+1; - } - - //step3 - BigInteger[] p = new BigInteger[s+1]; - p[s] = new BigInteger("8003",16); //set min prime number length 16 bit - - int m = s-1; //step4 - - for (int i=0; i t[m]) - { - goto step6; //step 12 - } - - p[m] = NByLastP.Add(BigInteger.One); - - //step13 - if (BigInteger.Two.ModPow(NByLastP, p[m]).CompareTo(BigInteger.One) == 0 - && BigInteger.Two.ModPow(N, p[m]).CompareTo(BigInteger.One) != 0) - { - break; - } - - N = N.Add(BigInteger.Two); - } - - if (--m < 0) - { - pq[0] = p[0]; - pq[1] = p[1]; - return y[0].IntValue; //return for procedure B step 2 - } - - break; //step 14 - } - } - return y[0].IntValue; - } - - //Procedure A' - private long procedure_Aa(long x0, long c, BigInteger[] pq, int size) - { - //Verify and perform condition: 04294967296L) - { - x0 = init_random.NextInt()*2; - } - - while((c<0 || c>4294967296L) || (c/2==0)) - { - c = init_random.NextInt()*2+1; - } - - BigInteger C = BigInteger.ValueOf(c); - BigInteger constA32 = BigInteger.ValueOf(97781173); - - //step1 - BigInteger[] y = new BigInteger[1]; // begin length = 1 - y[0] = BigInteger.ValueOf(x0); - - //step 2 - int[] t = new int[1]; // t - orders; begin length = 1 - t[0] = size; - int s = 0; - for (int i=0; t[i]>=33; i++) - { - // extension array t - int[] tmp_t = new int[t.Length + 1]; /////////////// - Array.Copy(t,0,tmp_t,0,t.Length); // extension - t = new int[tmp_t.Length]; // array t - Array.Copy(tmp_t, 0, t, 0, tmp_t.Length); /////////////// - - t[i+1] = t[i]/2; - s = i+1; - } - - //step3 - BigInteger[] p = new BigInteger[s+1]; - p[s] = new BigInteger("8000000B",16); //set min prime number length 32 bit - - int m = s-1; //step4 - - for (int i=0; i t[m]) - { - goto step6; //step 12 - } - - p[m] = NByLastP.Add(BigInteger.One); - - //step13 - if (BigInteger.Two.ModPow(NByLastP, p[m]).CompareTo(BigInteger.One) == 0 - && BigInteger.Two.ModPow(N, p[m]).CompareTo(BigInteger.One) != 0) - { - break; - } - - N = N.Add(BigInteger.Two); - } - - if (--m < 0) - { - pq[0] = p[0]; - pq[1] = p[1]; - return y[0].LongValue; //return for procedure B' step 2 - } - - break; //step 14 - } - } - return y[0].LongValue; - } - - //Procedure B - private void procedure_B(int x0, int c, BigInteger[] pq) - { - //Verify and perform condition: 065536) - { - x0 = init_random.NextInt()/32768; - } - - while((c<0 || c>65536) || (c/2==0)) - { - c = init_random.NextInt()/32768 + 1; - } - - BigInteger [] qp = new BigInteger[2]; - BigInteger q = null, Q = null, p = null; - BigInteger C = BigInteger.ValueOf(c); - BigInteger constA16 = BigInteger.ValueOf(19381); - - //step1 - x0 = procedure_A(x0, c, qp, 256); - q = qp[0]; - - //step2 - x0 = procedure_A(x0, c, qp, 512); - Q = qp[0]; - - BigInteger[] y = new BigInteger[65]; - y[0] = BigInteger.ValueOf(x0); - - const int tp = 1024; - - BigInteger qQ = q.Multiply(Q); - -step3: - for(;;) - { - //step 3 - for (int j=0; j<64; j++) - { - y[j+1] = (y[j].Multiply(constA16).Add(C)).Mod(BigInteger.Two.Pow(16)); - } - - //step 4 - BigInteger Y = BigInteger.Zero; - - for (int j=0; j<64; j++) - { - Y = Y.Add(y[j].ShiftLeft(16*j)); - } - - y[0] = y[64]; //step 5 - - //step 6 - BigInteger N = BigInteger.One.ShiftLeft(tp-1).Divide(qQ).Add( - Y.ShiftLeft(tp-1).Divide(qQ.ShiftLeft(1024))); - - if (N.TestBit(0)) - { - N = N.Add(BigInteger.One); - } - - //step 7 - - for(;;) - { - //step 11 - BigInteger qQN = qQ.Multiply(N); - - if (qQN.BitLength > tp) - { - goto step3; //step 9 - } - - p = qQN.Add(BigInteger.One); - - //step10 - if (BigInteger.Two.ModPow(qQN, p).CompareTo(BigInteger.One) == 0 - && BigInteger.Two.ModPow(q.Multiply(N), p).CompareTo(BigInteger.One) != 0) - { - pq[0] = p; - pq[1] = q; - return; - } - - N = N.Add(BigInteger.Two); - } - } - } - - //Procedure B' - private void procedure_Bb(long x0, long c, BigInteger[] pq) - { - //Verify and perform condition: 04294967296L) - { - x0 = init_random.NextInt()*2; - } - - while((c<0 || c>4294967296L) || (c/2==0)) - { - c = init_random.NextInt()*2+1; - } - - BigInteger [] qp = new BigInteger[2]; - BigInteger q = null, Q = null, p = null; - BigInteger C = BigInteger.ValueOf(c); - BigInteger constA32 = BigInteger.ValueOf(97781173); - - //step1 - x0 = procedure_Aa(x0, c, qp, 256); - q = qp[0]; - - //step2 - x0 = procedure_Aa(x0, c, qp, 512); - Q = qp[0]; - - BigInteger[] y = new BigInteger[33]; - y[0] = BigInteger.ValueOf(x0); - - const int tp = 1024; - - BigInteger qQ = q.Multiply(Q); - -step3: - for(;;) - { - //step 3 - for (int j=0; j<32; j++) - { - y[j+1] = (y[j].Multiply(constA32).Add(C)).Mod(BigInteger.Two.Pow(32)); - } - - //step 4 - BigInteger Y = BigInteger.Zero; - for (int j=0; j<32; j++) - { - Y = Y.Add(y[j].ShiftLeft(32*j)); - } - - y[0] = y[32]; //step 5 - - //step 6 - BigInteger N = BigInteger.One.ShiftLeft(tp-1).Divide(qQ).Add( - Y.ShiftLeft(tp-1).Divide(qQ.ShiftLeft(1024))); - - if (N.TestBit(0)) - { - N = N.Add(BigInteger.One); - } - - //step 7 - - for(;;) - { - //step 11 - BigInteger qQN = qQ.Multiply(N); - - if (qQN.BitLength > tp) - { - goto step3; //step 9 - } - - p = qQN.Add(BigInteger.One); - - //step10 - if (BigInteger.Two.ModPow(qQN, p).CompareTo(BigInteger.One) == 0 - && BigInteger.Two.ModPow(q.Multiply(N), p).CompareTo(BigInteger.One) != 0) - { - pq[0] = p; - pq[1] = q; - return; - } - - N = N.Add(BigInteger.Two); - } - } - } - - - /** - * Procedure C - * procedure generates the a value from the given p,q, - * returning the a value. - */ - private BigInteger procedure_C(BigInteger p, BigInteger q) - { - BigInteger pSub1 = p.Subtract(BigInteger.One); - BigInteger pSub1Divq = pSub1.Divide(q); - - for(;;) - { - BigInteger d = new BigInteger(p.BitLength, init_random); - - // 1 < d < p-1 - if (d.CompareTo(BigInteger.One) > 0 && d.CompareTo(pSub1) < 0) - { - BigInteger a = d.ModPow(pSub1Divq, p); - - if (a.CompareTo(BigInteger.One) != 0) - { - return a; - } - } - } - } - - /** - * which generates the p , q and a values from the given parameters, - * returning the Gost3410Parameters object. - */ - public Gost3410Parameters GenerateParameters() - { - BigInteger [] pq = new BigInteger[2]; - BigInteger q = null, p = null, a = null; - - int x0, c; - long x0L, cL; - - if (typeproc==1) - { - x0 = init_random.NextInt(); - c = init_random.NextInt(); - - switch(size) - { - case 512: - procedure_A(x0, c, pq, 512); - break; - case 1024: - procedure_B(x0, c, pq); - break; - default: - throw new ArgumentException("Ooops! key size 512 or 1024 bit."); - } - p = pq[0]; q = pq[1]; - a = procedure_C(p, q); - //System.out.println("p:"+p.toString(16)+"\n"+"q:"+q.toString(16)+"\n"+"a:"+a.toString(16)); - //System.out.println("p:"+p+"\n"+"q:"+q+"\n"+"a:"+a); - return new Gost3410Parameters(p, q, a, new Gost3410ValidationParameters(x0, c)); - } - else - { - x0L = init_random.NextLong(); - cL = init_random.NextLong(); - - switch(size) - { - case 512: - procedure_Aa(x0L, cL, pq, 512); - break; - case 1024: - procedure_Bb(x0L, cL, pq); - break; - default: - throw new InvalidOperationException("Ooops! key size 512 or 1024 bit."); - } - p = pq[0]; q = pq[1]; - a = procedure_C(p, q); - //System.out.println("p:"+p.toString(16)+"\n"+"q:"+q.toString(16)+"\n"+"a:"+a.toString(16)); - //System.out.println("p:"+p+"\n"+"q:"+q+"\n"+"a:"+a); - return new Gost3410Parameters(p, q, a, new Gost3410ValidationParameters(x0L, cL)); - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/generators/HKDFBytesGenerator.cs b/bc-sharp-crypto/src/crypto/generators/HKDFBytesGenerator.cs deleted file mode 100644 index c2e667c..0000000 --- a/bc-sharp-crypto/src/crypto/generators/HKDFBytesGenerator.cs +++ /dev/null @@ -1,153 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Macs; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Generators -{ - /** - * HMAC-based Extract-and-Expand Key Derivation Function (HKDF) implemented - * according to IETF RFC 5869, May 2010 as specified by H. Krawczyk, IBM - * Research & P. Eronen, Nokia. It uses a HMac internally to compute de OKM - * (output keying material) and is likely to have better security properties - * than KDF's based on just a hash function. - */ - public class HkdfBytesGenerator - : IDerivationFunction - { - private HMac hMacHash; - private int hashLen; - - private byte[] info; - private byte[] currentT; - - private int generatedBytes; - - /** - * Creates a HKDFBytesGenerator based on the given hash function. - * - * @param hash the digest to be used as the source of generatedBytes bytes - */ - public HkdfBytesGenerator(IDigest hash) - { - this.hMacHash = new HMac(hash); - this.hashLen = hash.GetDigestSize(); - } - - public virtual void Init(IDerivationParameters parameters) - { - if (!(parameters is HkdfParameters)) - throw new ArgumentException("HKDF parameters required for HkdfBytesGenerator", "parameters"); - - HkdfParameters hkdfParameters = (HkdfParameters)parameters; - if (hkdfParameters.SkipExtract) - { - // use IKM directly as PRK - hMacHash.Init(new KeyParameter(hkdfParameters.GetIkm())); - } - else - { - hMacHash.Init(Extract(hkdfParameters.GetSalt(), hkdfParameters.GetIkm())); - } - - info = hkdfParameters.GetInfo(); - - generatedBytes = 0; - currentT = new byte[hashLen]; - } - - /** - * Performs the extract part of the key derivation function. - * - * @param salt the salt to use - * @param ikm the input keying material - * @return the PRK as KeyParameter - */ - private KeyParameter Extract(byte[] salt, byte[] ikm) - { - hMacHash.Init(new KeyParameter(ikm)); - if (salt == null) - { - // TODO check if hashLen is indeed same as HMAC size - hMacHash.Init(new KeyParameter(new byte[hashLen])); - } - else - { - hMacHash.Init(new KeyParameter(salt)); - } - - hMacHash.BlockUpdate(ikm, 0, ikm.Length); - - byte[] prk = new byte[hashLen]; - hMacHash.DoFinal(prk, 0); - return new KeyParameter(prk); - } - - /** - * Performs the expand part of the key derivation function, using currentT - * as input and output buffer. - * - * @throws DataLengthException if the total number of bytes generated is larger than the one - * specified by RFC 5869 (255 * HashLen) - */ - private void ExpandNext() - { - int n = generatedBytes / hashLen + 1; - if (n >= 256) - { - throw new DataLengthException( - "HKDF cannot generate more than 255 blocks of HashLen size"); - } - // special case for T(0): T(0) is empty, so no update - if (generatedBytes != 0) - { - hMacHash.BlockUpdate(currentT, 0, hashLen); - } - hMacHash.BlockUpdate(info, 0, info.Length); - hMacHash.Update((byte)n); - hMacHash.DoFinal(currentT, 0); - } - - public virtual IDigest Digest - { - get { return hMacHash.GetUnderlyingDigest(); } - } - - public virtual int GenerateBytes(byte[] output, int outOff, int len) - { - if (generatedBytes + len > 255 * hashLen) - { - throw new DataLengthException( - "HKDF may only be used for 255 * HashLen bytes of output"); - } - - if (generatedBytes % hashLen == 0) - { - ExpandNext(); - } - - // copy what is left in the currentT (1..hash - int toGenerate = len; - int posInT = generatedBytes % hashLen; - int leftInT = hashLen - generatedBytes % hashLen; - int toCopy = System.Math.Min(leftInT, toGenerate); - Array.Copy(currentT, posInT, output, outOff, toCopy); - generatedBytes += toCopy; - toGenerate -= toCopy; - outOff += toCopy; - - while (toGenerate > 0) - { - ExpandNext(); - toCopy = System.Math.Min(hashLen, toGenerate); - Array.Copy(currentT, 0, output, outOff, toCopy); - generatedBytes += toCopy; - toGenerate -= toCopy; - outOff += toCopy; - } - - return len; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/generators/Kdf1BytesGenerator.cs b/bc-sharp-crypto/src/crypto/generators/Kdf1BytesGenerator.cs deleted file mode 100644 index 0ddf6c1..0000000 --- a/bc-sharp-crypto/src/crypto/generators/Kdf1BytesGenerator.cs +++ /dev/null @@ -1,26 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Generators -{ - /** - * KFD2 generator for derived keys and ivs as defined by IEEE P1363a/ISO 18033 - *
- * This implementation is based on IEEE P1363/ISO 18033. - */ - public class Kdf1BytesGenerator - : BaseKdfBytesGenerator - { - /** - * Construct a KDF1 byte generator. - * - * @param digest the digest to be used as the source of derived keys. - */ - public Kdf1BytesGenerator(IDigest digest) - : base(0, digest) - { - } - } -} diff --git a/bc-sharp-crypto/src/crypto/generators/Kdf2BytesGenerator.cs b/bc-sharp-crypto/src/crypto/generators/Kdf2BytesGenerator.cs deleted file mode 100644 index 8a68219..0000000 --- a/bc-sharp-crypto/src/crypto/generators/Kdf2BytesGenerator.cs +++ /dev/null @@ -1,27 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Generators -{ - /** - * KDF2 generator for derived keys and ivs as defined by IEEE P1363a/ISO 18033 - *
- * This implementation is based on IEEE P1363/ISO 18033. - */ - public class Kdf2BytesGenerator - : BaseKdfBytesGenerator - { - /** - * Construct a KDF2 bytes generator. Generates key material - * according to IEEE P1363 or ISO 18033 depending on the initialisation. - * - * @param digest the digest to be used as the source of derived keys. - */ - public Kdf2BytesGenerator(IDigest digest) - : base(1, digest) - { - } - } -} diff --git a/bc-sharp-crypto/src/crypto/generators/Mgf1BytesGenerator.cs b/bc-sharp-crypto/src/crypto/generators/Mgf1BytesGenerator.cs deleted file mode 100644 index 23a3aca..0000000 --- a/bc-sharp-crypto/src/crypto/generators/Mgf1BytesGenerator.cs +++ /dev/null @@ -1,117 +0,0 @@ -using System; -//using Org.BouncyCastle.Math; -//using Org.BouncyCastle.Security; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Generators -{ - /** - * Generator for MGF1 as defined in Pkcs 1v2 - */ - public class Mgf1BytesGenerator : IDerivationFunction - { - private IDigest digest; - private byte[] seed; - private int hLen; - - /** - * @param digest the digest to be used as the source of Generated bytes - */ - public Mgf1BytesGenerator( - IDigest digest) - { - this.digest = digest; - this.hLen = digest.GetDigestSize(); - } - - public void Init( - IDerivationParameters parameters) - { - if (!(typeof(MgfParameters).IsInstanceOfType(parameters))) - { - throw new ArgumentException("MGF parameters required for MGF1Generator"); - } - - MgfParameters p = (MgfParameters)parameters; - - seed = p.GetSeed(); - } - - /** - * return the underlying digest. - */ - public IDigest Digest - { - get - { - return digest; - } - } - - /** - * int to octet string. - */ - private void ItoOSP( - int i, - byte[] sp) - { - sp[0] = (byte)((uint) i >> 24); - sp[1] = (byte)((uint) i >> 16); - sp[2] = (byte)((uint) i >> 8); - sp[3] = (byte)((uint) i >> 0); - } - - /** - * fill len bytes of the output buffer with bytes Generated from - * the derivation function. - * - * @throws DataLengthException if the out buffer is too small. - */ - public int GenerateBytes( - byte[] output, - int outOff, - int length) - { - if ((output.Length - length) < outOff) - { - throw new DataLengthException("output buffer too small"); - } - - byte[] hashBuf = new byte[hLen]; - byte[] C = new byte[4]; - int counter = 0; - - digest.Reset(); - - if (length > hLen) - { - do - { - ItoOSP(counter, C); - - digest.BlockUpdate(seed, 0, seed.Length); - digest.BlockUpdate(C, 0, C.Length); - digest.DoFinal(hashBuf, 0); - - Array.Copy(hashBuf, 0, output, outOff + counter * hLen, hLen); - } - while (++counter < (length / hLen)); - } - - if ((counter * hLen) < length) - { - ItoOSP(counter, C); - - digest.BlockUpdate(seed, 0, seed.Length); - digest.BlockUpdate(C, 0, C.Length); - digest.DoFinal(hashBuf, 0); - - Array.Copy(hashBuf, 0, output, outOff + counter * hLen, length - (counter * hLen)); - } - - return length; - } - } - -} diff --git a/bc-sharp-crypto/src/crypto/generators/NaccacheSternKeyPairGenerator.cs b/bc-sharp-crypto/src/crypto/generators/NaccacheSternKeyPairGenerator.cs deleted file mode 100644 index 618ca9a..0000000 --- a/bc-sharp-crypto/src/crypto/generators/NaccacheSternKeyPairGenerator.cs +++ /dev/null @@ -1,268 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Crypto.Generators -{ - /** - * Key generation parameters for NaccacheStern cipher. For details on this cipher, please see - * - * http://www.gemplus.com/smart/rd/publications/pdf/NS98pkcs.pdf - */ - public class NaccacheSternKeyPairGenerator - : IAsymmetricCipherKeyPairGenerator - { - private static readonly int[] smallPrimes = - { - 3, 5, 7, 11, 13, 17, 19, 23, 29, 31, 37, 41, 43, 47, 53, 59, 61, 67, - 71, 73, 79, 83, 89, 97, 101, 103, 107, 109, 113, 127, 131, 137, 139, 149, - 151, 157, 163, 167, 173, 179, 181, 191, 193, 197, 199, 211, 223, 227, 229, 233, - 239, 241, 251, 257, 263, 269, 271, 277, 281, 283, 293, 307, 311, 313, 317, 331, - 337, 347, 349, 353, 359, 367, 373, 379, 383, 389, 397, 401, 409, 419, 421, 431, - 433, 439, 443, 449, 457, 461, 463, 467, 479, 487, 491, 499, 503, 509, 521, 523, - 541, 547, 557 - }; - - private NaccacheSternKeyGenerationParameters param; - - /* - * (non-Javadoc) - * - * @see org.bouncycastle.crypto.AsymmetricCipherKeyPairGenerator#init(org.bouncycastle.crypto.KeyGenerationParameters) - */ - public void Init(KeyGenerationParameters parameters) - { - this.param = (NaccacheSternKeyGenerationParameters)parameters; - } - - /* - * (non-Javadoc) - * - * @see org.bouncycastle.crypto.AsymmetricCipherKeyPairGenerator#generateKeyPair() - */ - public AsymmetricCipherKeyPair GenerateKeyPair() - { - int strength = param.Strength; - SecureRandom rand = param.Random; - int certainty = param.Certainty; - - IList smallPrimes = findFirstPrimes(param.CountSmallPrimes); - - smallPrimes = permuteList(smallPrimes, rand); - - BigInteger u = BigInteger.One; - BigInteger v = BigInteger.One; - - for (int i = 0; i < smallPrimes.Count / 2; i++) - { - u = u.Multiply((BigInteger)smallPrimes[i]); - } - for (int i = smallPrimes.Count / 2; i < smallPrimes.Count; i++) - { - v = v.Multiply((BigInteger)smallPrimes[i]); - } - - BigInteger sigma = u.Multiply(v); - - // n = (2 a u _p + 1 ) ( 2 b v _q + 1) - // -> |n| = strength - // |2| = 1 in bits - // -> |a| * |b| = |n| - |u| - |v| - |_p| - |_q| - |2| -|2| - // remainingStrength = strength - sigma.bitLength() - _p.bitLength() - - // _q.bitLength() - 1 -1 - int remainingStrength = strength - sigma.BitLength - 48; - BigInteger a = generatePrime(remainingStrength / 2 + 1, certainty, rand); - BigInteger b = generatePrime(remainingStrength / 2 + 1, certainty, rand); - - BigInteger _p; - BigInteger _q; - BigInteger p; - BigInteger q; - - long tries = 0; - - BigInteger _2au = a.Multiply(u).ShiftLeft(1); - BigInteger _2bv = b.Multiply(v).ShiftLeft(1); - - for (;;) - { - tries++; - - _p = generatePrime(24, certainty, rand); - - p = _p.Multiply(_2au).Add(BigInteger.One); - - if (!p.IsProbablePrime(certainty, true)) - continue; - - for (;;) - { - _q = generatePrime(24, certainty, rand); - - if (_p.Equals(_q)) - continue; - - q = _q.Multiply(_2bv).Add(BigInteger.One); - - if (q.IsProbablePrime(certainty, true)) - break; - } - - if (!sigma.Gcd(_p.Multiply(_q)).Equals(BigInteger.One)) - { - //Console.WriteLine("sigma.gcd(_p.mult(_q)) != 1!\n _p: " + _p +"\n _q: "+ _q ); - continue; - } - - if (p.Multiply(q).BitLength < strength) - { - continue; - } - break; - } - - BigInteger n = p.Multiply(q); - BigInteger phi_n = p.Subtract(BigInteger.One).Multiply(q.Subtract(BigInteger.One)); - BigInteger g; - tries = 0; - - for (;;) - { - // TODO After the first loop, just regenerate one randomly-selected gPart each time? - IList gParts = Platform.CreateArrayList(); - for (int ind = 0; ind != smallPrimes.Count; ind++) - { - BigInteger i = (BigInteger)smallPrimes[ind]; - BigInteger e = phi_n.Divide(i); - - for (;;) - { - tries++; - - g = generatePrime(strength, certainty, rand); - - if (!g.ModPow(e, n).Equals(BigInteger.One)) - { - gParts.Add(g); - break; - } - } - } - g = BigInteger.One; - for (int i = 0; i < smallPrimes.Count; i++) - { - BigInteger gPart = (BigInteger) gParts[i]; - BigInteger smallPrime = (BigInteger) smallPrimes[i]; - g = g.Multiply(gPart.ModPow(sigma.Divide(smallPrime), n)).Mod(n); - } - - // make sure that g is not divisible by p_i or q_i - bool divisible = false; - for (int i = 0; i < smallPrimes.Count; i++) - { - if (g.ModPow(phi_n.Divide((BigInteger)smallPrimes[i]), n).Equals(BigInteger.One)) - { - divisible = true; - break; - } - } - - if (divisible) - { - continue; - } - - // make sure that g has order > phi_n/4 - - //if (g.ModPow(phi_n.Divide(BigInteger.ValueOf(4)), n).Equals(BigInteger.One)) - if (g.ModPow(phi_n.ShiftRight(2), n).Equals(BigInteger.One)) - { - continue; - } - - if (g.ModPow(phi_n.Divide(_p), n).Equals(BigInteger.One)) - { - continue; - } - if (g.ModPow(phi_n.Divide(_q), n).Equals(BigInteger.One)) - { - continue; - } - if (g.ModPow(phi_n.Divide(a), n).Equals(BigInteger.One)) - { - continue; - } - if (g.ModPow(phi_n.Divide(b), n).Equals(BigInteger.One)) - { - continue; - } - break; - } - - return new AsymmetricCipherKeyPair(new NaccacheSternKeyParameters(false, g, n, sigma.BitLength), - new NaccacheSternPrivateKeyParameters(g, n, sigma.BitLength, smallPrimes, phi_n)); - } - - private static BigInteger generatePrime( - int bitLength, - int certainty, - SecureRandom rand) - { - return new BigInteger(bitLength, certainty, rand); - } - - /** - * Generates a permuted ArrayList from the original one. The original List - * is not modified - * - * @param arr - * the ArrayList to be permuted - * @param rand - * the source of Randomness for permutation - * @return a new IList with the permuted elements. - */ - private static IList permuteList( - IList arr, - SecureRandom rand) - { - // TODO Create a utility method for generating permutation of first 'n' integers - - IList retval = Platform.CreateArrayList(arr.Count); - - foreach (object element in arr) - { - int index = rand.Next(retval.Count + 1); - retval.Insert(index, element); - } - - return retval; - } - - /** - * Finds the first 'count' primes starting with 3 - * - * @param count - * the number of primes to find - * @return a vector containing the found primes as Integer - */ - private static IList findFirstPrimes( - int count) - { - IList primes = Platform.CreateArrayList(count); - - for (int i = 0; i != count; i++) - { - primes.Add(BigInteger.ValueOf(smallPrimes[i])); - } - - return primes; - } - - } -} diff --git a/bc-sharp-crypto/src/crypto/generators/OpenBsdBCrypt.cs b/bc-sharp-crypto/src/crypto/generators/OpenBsdBCrypt.cs deleted file mode 100644 index 85c34d7..0000000 --- a/bc-sharp-crypto/src/crypto/generators/OpenBsdBCrypt.cs +++ /dev/null @@ -1,270 +0,0 @@ -using System; -using System.IO; -using System.Text; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Generators -{ - /** - * Password hashing scheme BCrypt, - * designed by Niels Provos and David Mazières, using the - * String format and the Base64 encoding - * of the reference implementation on OpenBSD - */ - public class OpenBsdBCrypt - { - private static readonly byte[] EncodingTable = // the Bcrypts encoding table for OpenBSD - { - (byte)'.', (byte)'/', (byte)'A', (byte)'B', (byte)'C', (byte)'D', - (byte)'E', (byte)'F', (byte)'G', (byte)'H', (byte)'I', (byte)'J', - (byte)'K', (byte)'L', (byte)'M', (byte)'N', (byte)'O', (byte)'P', - (byte)'Q', (byte)'R', (byte)'S', (byte)'T', (byte)'U', (byte)'V', - (byte)'W', (byte)'X', (byte)'Y', (byte)'Z', (byte)'a', (byte)'b', - (byte)'c', (byte)'d', (byte)'e', (byte)'f', (byte)'g', (byte)'h', - (byte)'i', (byte)'j', (byte)'k', (byte)'l', (byte)'m', (byte)'n', - (byte)'o', (byte)'p', (byte)'q', (byte)'r', (byte)'s', (byte)'t', - (byte)'u', (byte)'v', (byte)'w', (byte)'x', (byte)'y', (byte)'z', - (byte)'0', (byte)'1', (byte)'2', (byte)'3', (byte)'4', (byte)'5', - (byte)'6', (byte)'7', (byte)'8', (byte)'9' - }; - - /* - * set up the decoding table. - */ - private static readonly byte[] DecodingTable = new byte[128]; - private static readonly string Version = "2a"; // previous version was not UTF-8 - - static OpenBsdBCrypt() - { - for (int i = 0; i < DecodingTable.Length; i++) - { - DecodingTable[i] = (byte)0xff; - } - - for (int i = 0; i < EncodingTable.Length; i++) - { - DecodingTable[EncodingTable[i]] = (byte)i; - } - } - - public OpenBsdBCrypt() - { - } - - /** - * Creates a 60 character Bcrypt String, including - * version, cost factor, salt and hash, separated by '$' - * - * @param cost the cost factor, treated as an exponent of 2 - * @param salt a 16 byte salt - * @param password the password - * @return a 60 character Bcrypt String - */ - private static string CreateBcryptString(byte[] password, byte[] salt, int cost) - { - StringBuilder sb = new StringBuilder(60); - sb.Append('$'); - sb.Append(Version); - sb.Append('$'); - sb.Append(cost < 10 ? ("0" + cost) : cost.ToString()); - sb.Append('$'); - sb.Append(EncodeData(salt)); - - byte[] key = BCrypt.Generate(password, salt, cost); - - sb.Append(EncodeData(key)); - - return sb.ToString(); - } - - /** - * Creates a 60 character Bcrypt String, including - * version, cost factor, salt and hash, separated by '$' - * - * @param cost the cost factor, treated as an exponent of 2 - * @param salt a 16 byte salt - * @param password the password - * @return a 60 character Bcrypt String - */ - public static string Generate(char[] password, byte[] salt, int cost) - { - if (password == null) - throw new ArgumentNullException("password"); - if (salt == null) - throw new ArgumentNullException("salt"); - if (salt.Length != 16) - throw new DataLengthException("16 byte salt required: " + salt.Length); - - if (cost < 4 || cost > 31) // Minimum rounds: 16, maximum 2^31 - throw new ArgumentException("Invalid cost factor.", "cost"); - - byte[] psw = Strings.ToUtf8ByteArray(password); - - // 0 termination: - - byte[] tmp = new byte[psw.Length >= 72 ? 72 : psw.Length + 1]; - int copyLen = System.Math.Min(psw.Length, tmp.Length); - Array.Copy(psw, 0, tmp, 0, copyLen); - - Array.Clear(psw, 0, psw.Length); - - string rv = CreateBcryptString(tmp, salt, cost); - - Array.Clear(tmp, 0, tmp.Length); - - return rv; - } - - /** - * Checks if a password corresponds to a 60 character Bcrypt String - * - * @param bcryptString a 60 character Bcrypt String, including - * version, cost factor, salt and hash, - * separated by '$' - * @param password the password as an array of chars - * @return true if the password corresponds to the - * Bcrypt String, otherwise false - */ - public static bool CheckPassword(string bcryptString, char[] password) - { - // validate bcryptString: - if (bcryptString.Length != 60) - throw new DataLengthException("Bcrypt String length: " + bcryptString.Length + ", 60 required."); - if (bcryptString[0] != '$' || bcryptString[3] != '$' || bcryptString[6] != '$') - throw new ArgumentException("Invalid Bcrypt String format.", "bcryptString"); - if (!bcryptString.Substring(1, 2).Equals(Version)) - throw new ArgumentException("Wrong Bcrypt version, 2a expected.", "bcryptString"); - - int cost = 0; - try - { - cost = Int32.Parse(bcryptString.Substring(4, 2)); - } - catch (Exception nfe) - { - throw new ArgumentException("Invalid cost factor: " + bcryptString.Substring(4, 2), "bcryptString"); - } - if (cost < 4 || cost > 31) - throw new ArgumentException("Invalid cost factor: " + cost + ", 4 < cost < 31 expected."); - - // check password: - if (password == null) - throw new ArgumentNullException("Missing password."); - - int start = bcryptString.LastIndexOf('$') + 1, end = bcryptString.Length - 31; - byte[] salt = DecodeSaltString(bcryptString.Substring(start, end - start)); - - string newBcryptString = Generate(password, salt, cost); - - return bcryptString.Equals(newBcryptString); - } - - /* - * encode the input data producing a Bcrypt base 64 string. - * - * @param a byte representation of the salt or the password - * @return the Bcrypt base64 string - */ - private static string EncodeData(byte[] data) - { - if (data.Length != 24 && data.Length != 16) // 192 bit key or 128 bit salt expected - throw new DataLengthException("Invalid length: " + data.Length + ", 24 for key or 16 for salt expected"); - - bool salt = false; - if (data.Length == 16)//salt - { - salt = true; - byte[] tmp = new byte[18];// zero padding - Array.Copy(data, 0, tmp, 0, data.Length); - data = tmp; - } - else // key - { - data[data.Length - 1] = (byte)0; - } - - MemoryStream mOut = new MemoryStream(); - int len = data.Length; - - uint a1, a2, a3; - int i; - for (i = 0; i < len; i += 3) - { - a1 = data[i]; - a2 = data[i + 1]; - a3 = data[i + 2]; - - mOut.WriteByte(EncodingTable[(a1 >> 2) & 0x3f]); - mOut.WriteByte(EncodingTable[((a1 << 4) | (a2 >> 4)) & 0x3f]); - mOut.WriteByte(EncodingTable[((a2 << 2) | (a3 >> 6)) & 0x3f]); - mOut.WriteByte(EncodingTable[a3 & 0x3f]); - } - - string result = Strings.FromByteArray(mOut.ToArray()); - int resultLen = salt - ? 22 // truncate padding - : result.Length - 1; - - return result.Substring(0, resultLen); - } - - - /* - * decodes the bcrypt base 64 encoded SaltString - * - * @param a 22 character Bcrypt base 64 encoded String - * @return the 16 byte salt - * @exception DataLengthException if the length - * of parameter is not 22 - * @exception InvalidArgumentException if the parameter - * contains a value other than from Bcrypts base 64 encoding table - */ - private static byte[] DecodeSaltString(string saltString) - { - char[] saltChars = saltString.ToCharArray(); - - MemoryStream mOut = new MemoryStream(16); - byte b1, b2, b3, b4; - - if (saltChars.Length != 22)// bcrypt salt must be 22 (16 bytes) - throw new DataLengthException("Invalid base64 salt length: " + saltChars.Length + " , 22 required."); - - // check string for invalid characters: - for (int i = 0; i < saltChars.Length; i++) - { - int value = saltChars[i]; - if (value > 122 || value < 46 || (value > 57 && value < 65)) - throw new ArgumentException("Salt string contains invalid character: " + value, "saltString"); - } - - // Padding: add two '\u0000' - char[] tmp = new char[22 + 2]; - Array.Copy(saltChars, 0, tmp, 0, saltChars.Length); - saltChars = tmp; - - int len = saltChars.Length; - - for (int i = 0; i < len; i += 4) - { - b1 = DecodingTable[saltChars[i]]; - b2 = DecodingTable[saltChars[i + 1]]; - b3 = DecodingTable[saltChars[i + 2]]; - b4 = DecodingTable[saltChars[i + 3]]; - - mOut.WriteByte((byte)((b1 << 2) | (b2 >> 4))); - mOut.WriteByte((byte)((b2 << 4) | (b3 >> 2))); - mOut.WriteByte((byte)((b3 << 6) | b4)); - } - - byte[] saltBytes = mOut.ToArray(); - - // truncate: - byte[] tmpSalt = new byte[16]; - Array.Copy(saltBytes, 0, tmpSalt, 0, tmpSalt.Length); - saltBytes = tmpSalt; - - return saltBytes; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/generators/OpenSSLPBEParametersGenerator.cs b/bc-sharp-crypto/src/crypto/generators/OpenSSLPBEParametersGenerator.cs deleted file mode 100644 index 8da5d3a..0000000 --- a/bc-sharp-crypto/src/crypto/generators/OpenSSLPBEParametersGenerator.cs +++ /dev/null @@ -1,167 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Generators -{ - /** - * Generator for PBE derived keys and ivs as usd by OpenSSL. - *

- * The scheme is a simple extension of PKCS 5 V2.0 Scheme 1 using MD5 with an - * iteration count of 1. - *

- */ - public class OpenSslPbeParametersGenerator - : PbeParametersGenerator - { - private readonly IDigest digest = new MD5Digest(); - - /** - * Construct a OpenSSL Parameters generator. - */ - public OpenSslPbeParametersGenerator() - { - } - - public override void Init( - byte[] password, - byte[] salt, - int iterationCount) - { - // Ignore the provided iterationCount - base.Init(password, salt, 1); - } - - /** - * Initialise - note the iteration count for this algorithm is fixed at 1. - * - * @param password password to use. - * @param salt salt to use. - */ - public virtual void Init( - byte[] password, - byte[] salt) - { - base.Init(password, salt, 1); - } - - /** - * the derived key function, the ith hash of the password and the salt. - */ - private byte[] GenerateDerivedKey( - int bytesNeeded) - { - byte[] buf = new byte[digest.GetDigestSize()]; - byte[] key = new byte[bytesNeeded]; - int offset = 0; - - for (;;) - { - digest.BlockUpdate(mPassword, 0, mPassword.Length); - digest.BlockUpdate(mSalt, 0, mSalt.Length); - - digest.DoFinal(buf, 0); - - int len = (bytesNeeded > buf.Length) ? buf.Length : bytesNeeded; - Array.Copy(buf, 0, key, offset, len); - offset += len; - - // check if we need any more - bytesNeeded -= len; - if (bytesNeeded == 0) - { - break; - } - - // do another round - digest.Reset(); - digest.BlockUpdate(buf, 0, buf.Length); - } - - return key; - } - - /** - * Generate a key parameter derived from the password, salt, and iteration - * count we are currently initialised with. - * - * @param keySize the size of the key we want (in bits) - * @return a KeyParameter object. - * @exception ArgumentException if the key length larger than the base hash size. - */ - [Obsolete("Use version with 'algorithm' parameter")] - public override ICipherParameters GenerateDerivedParameters( - int keySize) - { - return GenerateDerivedMacParameters(keySize); - } - - public override ICipherParameters GenerateDerivedParameters( - string algorithm, - int keySize) - { - keySize /= 8; - - byte[] dKey = GenerateDerivedKey(keySize); - - return ParameterUtilities.CreateKeyParameter(algorithm, dKey, 0, keySize); - } - - /** - * Generate a key with initialisation vector parameter derived from - * the password, salt, and iteration count we are currently initialised - * with. - * - * @param keySize the size of the key we want (in bits) - * @param ivSize the size of the iv we want (in bits) - * @return a ParametersWithIV object. - * @exception ArgumentException if keySize + ivSize is larger than the base hash size. - */ - [Obsolete("Use version with 'algorithm' parameter")] - public override ICipherParameters GenerateDerivedParameters( - int keySize, - int ivSize) - { - keySize = keySize / 8; - ivSize = ivSize / 8; - - byte[] dKey = GenerateDerivedKey(keySize + ivSize); - - return new ParametersWithIV(new KeyParameter(dKey, 0, keySize), dKey, keySize, ivSize); - } - - public override ICipherParameters GenerateDerivedParameters( - string algorithm, - int keySize, - int ivSize) - { - keySize /= 8; - ivSize /= 8; - - byte[] dKey = GenerateDerivedKey(keySize + ivSize); - KeyParameter key = ParameterUtilities.CreateKeyParameter(algorithm, dKey, 0, keySize); - - return new ParametersWithIV(key, dKey, keySize, ivSize); - } - - /** - * Generate a key parameter for use with a MAC derived from the password, - * salt, and iteration count we are currently initialised with. - * - * @param keySize the size of the key we want (in bits) - * @return a KeyParameter object. - * @exception ArgumentException if the key length larger than the base hash size. - */ - public override ICipherParameters GenerateDerivedMacParameters( - int keySize) - { - keySize = keySize / 8; - - byte[] dKey = GenerateDerivedKey(keySize); - - return new KeyParameter(dKey, 0, keySize); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/generators/Pkcs12ParametersGenerator.cs b/bc-sharp-crypto/src/crypto/generators/Pkcs12ParametersGenerator.cs deleted file mode 100644 index 85543a0..0000000 --- a/bc-sharp-crypto/src/crypto/generators/Pkcs12ParametersGenerator.cs +++ /dev/null @@ -1,243 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Generators -{ - /** - * Generator for Pbe derived keys and ivs as defined by Pkcs 12 V1.0. - *

- * The document this implementation is based on can be found at - * - * RSA's Pkcs12 Page - *

- */ - public class Pkcs12ParametersGenerator - : PbeParametersGenerator - { - public const int KeyMaterial = 1; - public const int IVMaterial = 2; - public const int MacMaterial = 3; - - private readonly IDigest digest; - - private readonly int u; - private readonly int v; - - /** - * Construct a Pkcs 12 Parameters generator. - * - * @param digest the digest to be used as the source of derived keys. - * @exception ArgumentException if an unknown digest is passed in. - */ - public Pkcs12ParametersGenerator( - IDigest digest) - { - this.digest = digest; - - u = digest.GetDigestSize(); - v = digest.GetByteLength(); - } - - /** - * add a + b + 1, returning the result in a. The a value is treated - * as a BigInteger of length (b.Length * 8) bits. The result is - * modulo 2^b.Length in case of overflow. - */ - private void Adjust( - byte[] a, - int aOff, - byte[] b) - { - int x = (b[b.Length - 1] & 0xff) + (a[aOff + b.Length - 1] & 0xff) + 1; - - a[aOff + b.Length - 1] = (byte)x; - x = (int) ((uint) x >> 8); - - for (int i = b.Length - 2; i >= 0; i--) - { - x += (b[i] & 0xff) + (a[aOff + i] & 0xff); - a[aOff + i] = (byte)x; - x = (int) ((uint) x >> 8); - } - } - - /** - * generation of a derived key ala Pkcs12 V1.0. - */ - private byte[] GenerateDerivedKey( - int idByte, - int n) - { - byte[] D = new byte[v]; - byte[] dKey = new byte[n]; - - for (int i = 0; i != D.Length; i++) - { - D[i] = (byte)idByte; - } - - byte[] S; - - if ((mSalt != null) && (mSalt.Length != 0)) - { - S = new byte[v * ((mSalt.Length + v - 1) / v)]; - - for (int i = 0; i != S.Length; i++) - { - S[i] = mSalt[i % mSalt.Length]; - } - } - else - { - S = new byte[0]; - } - - byte[] P; - - if ((mPassword != null) && (mPassword.Length != 0)) - { - P = new byte[v * ((mPassword.Length + v - 1) / v)]; - - for (int i = 0; i != P.Length; i++) - { - P[i] = mPassword[i % mPassword.Length]; - } - } - else - { - P = new byte[0]; - } - - byte[] I = new byte[S.Length + P.Length]; - - Array.Copy(S, 0, I, 0, S.Length); - Array.Copy(P, 0, I, S.Length, P.Length); - - byte[] B = new byte[v]; - int c = (n + u - 1) / u; - byte[] A = new byte[u]; - - for (int i = 1; i <= c; i++) - { - digest.BlockUpdate(D, 0, D.Length); - digest.BlockUpdate(I, 0, I.Length); - digest.DoFinal(A, 0); - - for (int j = 1; j != mIterationCount; j++) - { - digest.BlockUpdate(A, 0, A.Length); - digest.DoFinal(A, 0); - } - - for (int j = 0; j != B.Length; j++) - { - B[j] = A[j % A.Length]; - } - - for (int j = 0; j != I.Length / v; j++) - { - Adjust(I, j * v, B); - } - - if (i == c) - { - Array.Copy(A, 0, dKey, (i - 1) * u, dKey.Length - ((i - 1) * u)); - } - else - { - Array.Copy(A, 0, dKey, (i - 1) * u, A.Length); - } - } - - return dKey; - } - - /** - * Generate a key parameter derived from the password, salt, and iteration - * count we are currently initialised with. - * - * @param keySize the size of the key we want (in bits) - * @return a KeyParameter object. - */ - public override ICipherParameters GenerateDerivedParameters( - int keySize) - { - keySize /= 8; - - byte[] dKey = GenerateDerivedKey(KeyMaterial, keySize); - - return new KeyParameter(dKey, 0, keySize); - } - - public override ICipherParameters GenerateDerivedParameters( - string algorithm, - int keySize) - { - keySize /= 8; - - byte[] dKey = GenerateDerivedKey(KeyMaterial, keySize); - - return ParameterUtilities.CreateKeyParameter(algorithm, dKey, 0, keySize); - } - - /** - * Generate a key with initialisation vector parameter derived from - * the password, salt, and iteration count we are currently initialised - * with. - * - * @param keySize the size of the key we want (in bits) - * @param ivSize the size of the iv we want (in bits) - * @return a ParametersWithIV object. - */ - public override ICipherParameters GenerateDerivedParameters( - int keySize, - int ivSize) - { - keySize /= 8; - ivSize /= 8; - - byte[] dKey = GenerateDerivedKey(KeyMaterial, keySize); - - byte[] iv = GenerateDerivedKey(IVMaterial, ivSize); - - return new ParametersWithIV(new KeyParameter(dKey, 0, keySize), iv, 0, ivSize); - } - - public override ICipherParameters GenerateDerivedParameters( - string algorithm, - int keySize, - int ivSize) - { - keySize /= 8; - ivSize /= 8; - - byte[] dKey = GenerateDerivedKey(KeyMaterial, keySize); - KeyParameter key = ParameterUtilities.CreateKeyParameter(algorithm, dKey, 0, keySize); - - byte[] iv = GenerateDerivedKey(IVMaterial, ivSize); - - return new ParametersWithIV(key, iv, 0, ivSize); - } - - /** - * Generate a key parameter for use with a MAC derived from the password, - * salt, and iteration count we are currently initialised with. - * - * @param keySize the size of the key we want (in bits) - * @return a KeyParameter object. - */ - public override ICipherParameters GenerateDerivedMacParameters( - int keySize) - { - keySize /= 8; - - byte[] dKey = GenerateDerivedKey(MacMaterial, keySize); - - return new KeyParameter(dKey, 0, keySize); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/generators/Pkcs5S1ParametersGenerator.cs b/bc-sharp-crypto/src/crypto/generators/Pkcs5S1ParametersGenerator.cs deleted file mode 100644 index 9b39a5f..0000000 --- a/bc-sharp-crypto/src/crypto/generators/Pkcs5S1ParametersGenerator.cs +++ /dev/null @@ -1,160 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Generators -{ - /** - * Generator for Pbe derived keys and ivs as defined by Pkcs 5 V2.0 Scheme 1. - * Note this generator is limited to the size of the hash produced by the - * digest used to drive it. - *

- * The document this implementation is based on can be found at - * - * RSA's Pkcs5 Page - *

- */ - public class Pkcs5S1ParametersGenerator - : PbeParametersGenerator - { - private readonly IDigest digest; - - /** - * Construct a Pkcs 5 Scheme 1 Parameters generator. - * - * @param digest the digest to be used as the source of derived keys. - */ - public Pkcs5S1ParametersGenerator( - IDigest digest) - { - this.digest = digest; - } - - /** - * the derived key function, the ith hash of the mPassword and the mSalt. - */ - private byte[] GenerateDerivedKey() - { - byte[] digestBytes = new byte[digest.GetDigestSize()]; - - digest.BlockUpdate(mPassword, 0, mPassword.Length); - digest.BlockUpdate(mSalt, 0, mSalt.Length); - - digest.DoFinal(digestBytes, 0); - for (int i = 1; i < mIterationCount; i++) - { - digest.BlockUpdate(digestBytes, 0, digestBytes.Length); - digest.DoFinal(digestBytes, 0); - } - - return digestBytes; - } - - /** - * Generate a key parameter derived from the mPassword, mSalt, and iteration - * count we are currently initialised with. - * - * @param keySize the size of the key we want (in bits) - * @return a KeyParameter object. - * @exception ArgumentException if the key length larger than the base hash size. - */ - public override ICipherParameters GenerateDerivedParameters( - int keySize) - { - return GenerateDerivedMacParameters(keySize); - } - - public override ICipherParameters GenerateDerivedParameters( - string algorithm, - int keySize) - { - keySize /= 8; - - if (keySize > digest.GetDigestSize()) - { - throw new ArgumentException( - "Can't Generate a derived key " + keySize + " bytes long."); - } - - byte[] dKey = GenerateDerivedKey(); - - return ParameterUtilities.CreateKeyParameter(algorithm, dKey, 0, keySize); - } - - /** - * Generate a key with initialisation vector parameter derived from - * the mPassword, mSalt, and iteration count we are currently initialised - * with. - * - * @param keySize the size of the key we want (in bits) - * @param ivSize the size of the iv we want (in bits) - * @return a ParametersWithIV object. - * @exception ArgumentException if keySize + ivSize is larger than the base hash size. - */ - public override ICipherParameters GenerateDerivedParameters( - int keySize, - int ivSize) - { - keySize /= 8; - ivSize /= 8; - - if ((keySize + ivSize) > digest.GetDigestSize()) - { - throw new ArgumentException( - "Can't Generate a derived key " + (keySize + ivSize) + " bytes long."); - } - - byte[] dKey = GenerateDerivedKey(); - - return new ParametersWithIV(new KeyParameter(dKey, 0, keySize), dKey, keySize, ivSize); - } - - public override ICipherParameters GenerateDerivedParameters( - string algorithm, - int keySize, - int ivSize) - { - keySize /= 8; - ivSize /= 8; - - if ((keySize + ivSize) > digest.GetDigestSize()) - { - throw new ArgumentException( - "Can't Generate a derived key " + (keySize + ivSize) + " bytes long."); - } - - byte[] dKey = GenerateDerivedKey(); - KeyParameter key = ParameterUtilities.CreateKeyParameter(algorithm, dKey, 0, keySize); - - return new ParametersWithIV(key, dKey, keySize, ivSize); - } - - /** - * Generate a key parameter for use with a MAC derived from the mPassword, - * mSalt, and iteration count we are currently initialised with. - * - * @param keySize the size of the key we want (in bits) - * @return a KeyParameter object. - * @exception ArgumentException if the key length larger than the base hash size. - */ - public override ICipherParameters GenerateDerivedMacParameters( - int keySize) - { - keySize /= 8; - - if (keySize > digest.GetDigestSize()) - { - throw new ArgumentException( - "Can't Generate a derived key " + keySize + " bytes long."); - } - - byte[] dKey = GenerateDerivedKey(); - - return new KeyParameter(dKey, 0, keySize); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/generators/Pkcs5S2ParametersGenerator.cs b/bc-sharp-crypto/src/crypto/generators/Pkcs5S2ParametersGenerator.cs deleted file mode 100644 index 0b0caa0..0000000 --- a/bc-sharp-crypto/src/crypto/generators/Pkcs5S2ParametersGenerator.cs +++ /dev/null @@ -1,178 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Crypto.Macs; -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Generators -{ - /** - * Generator for Pbe derived keys and ivs as defined by Pkcs 5 V2.0 Scheme 2. - * This generator uses a SHA-1 HMac as the calculation function. - *

- * The document this implementation is based on can be found at - * - * RSA's Pkcs5 Page

- */ - public class Pkcs5S2ParametersGenerator - : PbeParametersGenerator - { - private readonly IMac hMac; - private readonly byte[] state; - - /** - * construct a Pkcs5 Scheme 2 Parameters generator. - */ - public Pkcs5S2ParametersGenerator() - : this(new Sha1Digest()) - { - } - - public Pkcs5S2ParametersGenerator(IDigest digest) - { - this.hMac = new HMac(digest); - this.state = new byte[hMac.GetMacSize()]; - } - - private void F( - byte[] S, - int c, - byte[] iBuf, - byte[] outBytes, - int outOff) - { - if (c == 0) - throw new ArgumentException("iteration count must be at least 1."); - - if (S != null) - { - hMac.BlockUpdate(S, 0, S.Length); - } - - hMac.BlockUpdate(iBuf, 0, iBuf.Length); - hMac.DoFinal(state, 0); - - Array.Copy(state, 0, outBytes, outOff, state.Length); - - for (int count = 1; count < c; ++count) - { - hMac.BlockUpdate(state, 0, state.Length); - hMac.DoFinal(state, 0); - - for (int j = 0; j < state.Length; ++j) - { - outBytes[outOff + j] ^= state[j]; - } - } - } - - private byte[] GenerateDerivedKey( - int dkLen) - { - int hLen = hMac.GetMacSize(); - int l = (dkLen + hLen - 1) / hLen; - byte[] iBuf = new byte[4]; - byte[] outBytes = new byte[l * hLen]; - int outPos = 0; - - ICipherParameters param = new KeyParameter(mPassword); - - hMac.Init(param); - - for (int i = 1; i <= l; i++) - { - // Increment the value in 'iBuf' - int pos = 3; - while (++iBuf[pos] == 0) - { - --pos; - } - - F(mSalt, mIterationCount, iBuf, outBytes, outPos); - outPos += hLen; - } - - return outBytes; - } - - /** - * Generate a key parameter derived from the password, salt, and iteration - * count we are currently initialised with. - * - * @param keySize the size of the key we want (in bits) - * @return a KeyParameter object. - */ - public override ICipherParameters GenerateDerivedParameters( - int keySize) - { - return GenerateDerivedMacParameters(keySize); - } - - public override ICipherParameters GenerateDerivedParameters( - string algorithm, - int keySize) - { - keySize /= 8; - - byte[] dKey = GenerateDerivedKey(keySize); - - return ParameterUtilities.CreateKeyParameter(algorithm, dKey, 0, keySize); - } - - /** - * Generate a key with initialisation vector parameter derived from - * the password, salt, and iteration count we are currently initialised - * with. - * - * @param keySize the size of the key we want (in bits) - * @param ivSize the size of the iv we want (in bits) - * @return a ParametersWithIV object. - */ - public override ICipherParameters GenerateDerivedParameters( - int keySize, - int ivSize) - { - keySize /= 8; - ivSize /= 8; - - byte[] dKey = GenerateDerivedKey(keySize + ivSize); - - return new ParametersWithIV(new KeyParameter(dKey, 0, keySize), dKey, keySize, ivSize); - } - - public override ICipherParameters GenerateDerivedParameters( - string algorithm, - int keySize, - int ivSize) - { - keySize /= 8; - ivSize /= 8; - - byte[] dKey = GenerateDerivedKey(keySize + ivSize); - KeyParameter key = ParameterUtilities.CreateKeyParameter(algorithm, dKey, 0, keySize); - - return new ParametersWithIV(key, dKey, keySize, ivSize); - } - - /** - * Generate a key parameter for use with a MAC derived from the password, - * salt, and iteration count we are currently initialised with. - * - * @param keySize the size of the key we want (in bits) - * @return a KeyParameter object. - */ - public override ICipherParameters GenerateDerivedMacParameters( - int keySize) - { - keySize /= 8; - - byte[] dKey = GenerateDerivedKey(keySize); - - return new KeyParameter(dKey, 0, keySize); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/generators/Poly1305KeyGenerator.cs b/bc-sharp-crypto/src/crypto/generators/Poly1305KeyGenerator.cs deleted file mode 100644 index cdb24bf..0000000 --- a/bc-sharp-crypto/src/crypto/generators/Poly1305KeyGenerator.cs +++ /dev/null @@ -1,116 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Macs; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Generators -{ - /// - /// Generates keys for the Poly1305 MAC. - /// - /// - /// Poly1305 keys are 256 bit keys consisting of a 128 bit secret key used for the underlying block - /// cipher followed by a 128 bit {@code r} value used for the polynomial portion of the Mac.
- /// The {@code r} value has a specific format with some bits required to be cleared, resulting in an - /// effective 106 bit key.
- /// A separately generated 256 bit key can be modified to fit the Poly1305 key format by using the - /// {@link #clamp(byte[])} method to clear the required bits. - /// - /// - public class Poly1305KeyGenerator - : CipherKeyGenerator - { - private const byte R_MASK_LOW_2 = (byte)0xFC; - private const byte R_MASK_HIGH_4 = (byte)0x0F; - - /// - /// Initialises the key generator. - /// - /// - /// Poly1305 keys are always 256 bits, so the key length in the provided parameters is ignored. - /// - protected override void engineInit(KeyGenerationParameters param) - { - // Poly1305 keys are always 256 bits - this.random = param.Random; - this.strength = 32; - } - - /// - /// Generates a 256 bit key in the format required for Poly1305 - e.g. - /// k[0] ... k[15], r[0] ... r[15] with the required bits in r cleared - /// as per . - /// - protected override byte[] engineGenerateKey() - { - byte[] key = base.engineGenerateKey(); - Clamp(key); - return key; - } - - /// - /// Modifies an existing 32 byte key value to comply with the requirements of the Poly1305 key by - /// clearing required bits in the r (second 16 bytes) portion of the key.
- /// Specifically: - ///
    - ///
  • r[3], r[7], r[11], r[15] have top four bits clear (i.e., are {0, 1, . . . , 15})
    • - ///
  • r[4], r[8], r[12] have bottom two bits clear (i.e., are in {0, 4, 8, . . . , 252})
    • - ///
- /// - /// a 32 byte key value k[0] ... k[15], r[0] ... r[15] - public static void Clamp(byte[] key) - { - /* - * Key is k[0] ... k[15], r[0] ... r[15] as per poly1305_aes_clamp in ref impl. - */ - if (key.Length != 32) - throw new ArgumentException("Poly1305 key must be 256 bits."); - - /* - * r[3], r[7], r[11], r[15] have top four bits clear (i.e., are {0, 1, . . . , 15}) - */ - key[3] &= R_MASK_HIGH_4; - key[7] &= R_MASK_HIGH_4; - key[11] &= R_MASK_HIGH_4; - key[15] &= R_MASK_HIGH_4; - - /* - * r[4], r[8], r[12] have bottom two bits clear (i.e., are in {0, 4, 8, . . . , 252}). - */ - key[4] &= R_MASK_LOW_2; - key[8] &= R_MASK_LOW_2; - key[12] &= R_MASK_LOW_2; - } - - /// - /// Checks a 32 byte key for compliance with the Poly1305 key requirements, e.g. - /// k[0] ... k[15], r[0] ... r[15] with the required bits in r cleared - /// as per . - /// - /// Key. - /// if the key is of the wrong length, or has invalid bits set - /// in the r portion of the key. - public static void CheckKey(byte[] key) - { - if (key.Length != 32) - throw new ArgumentException("Poly1305 key must be 256 bits."); - - CheckMask(key[3], R_MASK_HIGH_4); - CheckMask(key[7], R_MASK_HIGH_4); - CheckMask(key[11], R_MASK_HIGH_4); - CheckMask(key[15], R_MASK_HIGH_4); - - CheckMask(key[4], R_MASK_LOW_2); - CheckMask(key[8], R_MASK_LOW_2); - CheckMask(key[12], R_MASK_LOW_2); - } - - private static void CheckMask(byte b, byte mask) - { - if ((b & (~mask)) != 0) - throw new ArgumentException("Invalid format for r portion of Poly1305 key."); - } - } -} \ No newline at end of file diff --git a/bc-sharp-crypto/src/crypto/generators/RSABlindingFactorGenerator.cs b/bc-sharp-crypto/src/crypto/generators/RSABlindingFactorGenerator.cs deleted file mode 100644 index e2f63fa..0000000 --- a/bc-sharp-crypto/src/crypto/generators/RSABlindingFactorGenerator.cs +++ /dev/null @@ -1,69 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Generators -{ - /** - * Generate a random factor suitable for use with RSA blind signatures - * as outlined in Chaum's blinding and unblinding as outlined in - * "Handbook of Applied Cryptography", page 475. - */ - public class RsaBlindingFactorGenerator - { - private RsaKeyParameters key; - private SecureRandom random; - - /** - * Initialise the factor generator - * - * @param param the necessary RSA key parameters. - */ - public void Init( - ICipherParameters param) - { - if (param is ParametersWithRandom) - { - ParametersWithRandom rParam = (ParametersWithRandom)param; - - key = (RsaKeyParameters)rParam.Parameters; - random = rParam.Random; - } - else - { - key = (RsaKeyParameters)param; - random = new SecureRandom(); - } - - if (key.IsPrivate) - throw new ArgumentException("generator requires RSA public key"); - } - - /** - * Generate a suitable blind factor for the public key the generator was initialised with. - * - * @return a random blind factor - */ - public BigInteger GenerateBlindingFactor() - { - if (key == null) - throw new InvalidOperationException("generator not initialised"); - - BigInteger m = key.Modulus; - int length = m.BitLength - 1; // must be less than m.BitLength - BigInteger factor; - BigInteger gcd; - - do - { - factor = new BigInteger(length, random); - gcd = factor.Gcd(m); - } - while (factor.SignValue == 0 || factor.Equals(BigInteger.One) || !gcd.Equals(BigInteger.One)); - - return factor; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/generators/RsaKeyPairGenerator.cs b/bc-sharp-crypto/src/crypto/generators/RsaKeyPairGenerator.cs deleted file mode 100644 index 4499765..0000000 --- a/bc-sharp-crypto/src/crypto/generators/RsaKeyPairGenerator.cs +++ /dev/null @@ -1,163 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC.Multiplier; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Generators -{ - /** - * an RSA key pair generator. - */ - public class RsaKeyPairGenerator - : IAsymmetricCipherKeyPairGenerator - { - private static readonly int[] SPECIAL_E_VALUES = new int[]{ 3, 5, 17, 257, 65537 }; - private static readonly int SPECIAL_E_HIGHEST = SPECIAL_E_VALUES[SPECIAL_E_VALUES.Length - 1]; - private static readonly int SPECIAL_E_BITS = BigInteger.ValueOf(SPECIAL_E_HIGHEST).BitLength; - - protected static readonly BigInteger One = BigInteger.One; - protected static readonly BigInteger DefaultPublicExponent = BigInteger.ValueOf(0x10001); - protected const int DefaultTests = 100; - - protected RsaKeyGenerationParameters parameters; - - public virtual void Init( - KeyGenerationParameters parameters) - { - if (parameters is RsaKeyGenerationParameters) - { - this.parameters = (RsaKeyGenerationParameters)parameters; - } - else - { - this.parameters = new RsaKeyGenerationParameters( - DefaultPublicExponent, parameters.Random, parameters.Strength, DefaultTests); - } - } - - public virtual AsymmetricCipherKeyPair GenerateKeyPair() - { - for (;;) - { - // - // p and q values should have a length of half the strength in bits - // - int strength = parameters.Strength; - int pBitlength = (strength + 1) / 2; - int qBitlength = strength - pBitlength; - int mindiffbits = strength / 3; - int minWeight = strength >> 2; - - BigInteger e = parameters.PublicExponent; - - // TODO Consider generating safe primes for p, q (see DHParametersHelper.generateSafePrimes) - // (then p-1 and q-1 will not consist of only small factors - see "Pollard's algorithm") - - BigInteger p = ChooseRandomPrime(pBitlength, e); - BigInteger q, n; - - // - // generate a modulus of the required length - // - for (;;) - { - q = ChooseRandomPrime(qBitlength, e); - - // p and q should not be too close together (or equal!) - BigInteger diff = q.Subtract(p).Abs(); - if (diff.BitLength < mindiffbits) - continue; - - // - // calculate the modulus - // - n = p.Multiply(q); - - if (n.BitLength != strength) - { - // - // if we get here our primes aren't big enough, make the largest - // of the two p and try again - // - p = p.Max(q); - continue; - } - - /* - * Require a minimum weight of the NAF representation, since low-weight composites may - * be weak against a version of the number-field-sieve for factoring. - * - * See "The number field sieve for integers of low weight", Oliver Schirokauer. - */ - if (WNafUtilities.GetNafWeight(n) < minWeight) - { - p = ChooseRandomPrime(pBitlength, e); - continue; - } - - break; - } - - if (p.CompareTo(q) < 0) - { - BigInteger tmp = p; - p = q; - q = tmp; - } - - BigInteger pSub1 = p.Subtract(One); - BigInteger qSub1 = q.Subtract(One); - //BigInteger phi = pSub1.Multiply(qSub1); - BigInteger gcd = pSub1.Gcd(qSub1); - BigInteger lcm = pSub1.Divide(gcd).Multiply(qSub1); - - // - // calculate the private exponent - // - BigInteger d = e.ModInverse(lcm); - - if (d.BitLength <= qBitlength) - continue; - - // - // calculate the CRT factors - // - BigInteger dP = d.Remainder(pSub1); - BigInteger dQ = d.Remainder(qSub1); - BigInteger qInv = q.ModInverse(p); - - return new AsymmetricCipherKeyPair( - new RsaKeyParameters(false, n, e), - new RsaPrivateCrtKeyParameters(n, e, d, p, q, dP, dQ, qInv)); - } - } - - /// Choose a random prime value for use with RSA - /// the bit-length of the returned prime - /// the RSA public exponent - /// a prime p, with (p-1) relatively prime to e - protected virtual BigInteger ChooseRandomPrime(int bitlength, BigInteger e) - { - bool eIsKnownOddPrime = (e.BitLength <= SPECIAL_E_BITS) && Arrays.Contains(SPECIAL_E_VALUES, e.IntValue); - - for (;;) - { - BigInteger p = new BigInteger(bitlength, 1, parameters.Random); - - if (p.Mod(e).Equals(One)) - continue; - - if (!p.IsProbablePrime(parameters.Certainty, true)) - continue; - - if (!eIsKnownOddPrime && !e.Gcd(p.Subtract(One)).Equals(One)) - continue; - - return p; - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/generators/SCrypt.cs b/bc-sharp-crypto/src/crypto/generators/SCrypt.cs deleted file mode 100644 index efa74d7..0000000 --- a/bc-sharp-crypto/src/crypto/generators/SCrypt.cs +++ /dev/null @@ -1,140 +0,0 @@ -using System; -using System.Threading; - -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Crypto.Engines; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; - -namespace Org.BouncyCastle.Crypto.Generators -{ - public class SCrypt - { - // TODO Validate arguments - public static byte[] Generate(byte[] P, byte[] S, int N, int r, int p, int dkLen) - { - return MFcrypt(P, S, N, r, p, dkLen); - } - - private static byte[] MFcrypt(byte[] P, byte[] S, int N, int r, int p, int dkLen) - { - int MFLenBytes = r * 128; - byte[] bytes = SingleIterationPBKDF2(P, S, p * MFLenBytes); - - uint[] B = null; - - try - { - int BLen = bytes.Length >> 2; - B = new uint[BLen]; - - Pack.LE_To_UInt32(bytes, 0, B); - - int MFLenWords = MFLenBytes >> 2; - for (int BOff = 0; BOff < BLen; BOff += MFLenWords) - { - // TODO These can be done in parallel threads - SMix(B, BOff, N, r); - } - - Pack.UInt32_To_LE(B, bytes, 0); - - return SingleIterationPBKDF2(P, bytes, dkLen); - } - finally - { - ClearAll(bytes, B); - } - } - - private static byte[] SingleIterationPBKDF2(byte[] P, byte[] S, int dkLen) - { - PbeParametersGenerator pGen = new Pkcs5S2ParametersGenerator(new Sha256Digest()); - pGen.Init(P, S, 1); - KeyParameter key = (KeyParameter)pGen.GenerateDerivedMacParameters(dkLen * 8); - return key.GetKey(); - } - - private static void SMix(uint[] B, int BOff, int N, int r) - { - int BCount = r * 32; - - uint[] blockX1 = new uint[16]; - uint[] blockX2 = new uint[16]; - uint[] blockY = new uint[BCount]; - - uint[] X = new uint[BCount]; - uint[][] V = new uint[N][]; - - try - { - Array.Copy(B, BOff, X, 0, BCount); - - for (int i = 0; i < N; ++i) - { - V[i] = (uint[])X.Clone(); - BlockMix(X, blockX1, blockX2, blockY, r); - } - - uint mask = (uint)N - 1; - for (int i = 0; i < N; ++i) - { - uint j = X[BCount - 16] & mask; - Xor(X, V[j], 0, X); - BlockMix(X, blockX1, blockX2, blockY, r); - } - - Array.Copy(X, 0, B, BOff, BCount); - } - finally - { - ClearAll(V); - ClearAll(X, blockX1, blockX2, blockY); - } - } - - private static void BlockMix(uint[] B, uint[] X1, uint[] X2, uint[] Y, int r) - { - Array.Copy(B, B.Length - 16, X1, 0, 16); - - int BOff = 0, YOff = 0, halfLen = B.Length >> 1; - - for (int i = 2 * r; i > 0; --i) - { - Xor(X1, B, BOff, X2); - - Salsa20Engine.SalsaCore(8, X2, X1); - Array.Copy(X1, 0, Y, YOff, 16); - - YOff = halfLen + BOff - YOff; - BOff += 16; - } - - Array.Copy(Y, 0, B, 0, Y.Length); - } - - private static void Xor(uint[] a, uint[] b, int bOff, uint[] output) - { - for (int i = output.Length - 1; i >= 0; --i) - { - output[i] = a[i] ^ b[bOff + i]; - } - } - - private static void Clear(Array array) - { - if (array != null) - { - Array.Clear(array, 0, array.Length); - } - } - - private static void ClearAll(params Array[] arrays) - { - foreach (Array array in arrays) - { - Clear(array); - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/io/CipherStream.cs b/bc-sharp-crypto/src/crypto/io/CipherStream.cs deleted file mode 100644 index b5e6830..0000000 --- a/bc-sharp-crypto/src/crypto/io/CipherStream.cs +++ /dev/null @@ -1,252 +0,0 @@ -using System; -using System.Diagnostics; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.IO -{ - public class CipherStream - : Stream - { - internal Stream stream; - internal IBufferedCipher inCipher, outCipher; - private byte[] mInBuf; - private int mInPos; - private bool inStreamEnded; - - public CipherStream( - Stream stream, - IBufferedCipher readCipher, - IBufferedCipher writeCipher) - { - this.stream = stream; - - if (readCipher != null) - { - this.inCipher = readCipher; - mInBuf = null; - } - - if (writeCipher != null) - { - this.outCipher = writeCipher; - } - } - - public IBufferedCipher ReadCipher - { - get { return inCipher; } - } - - public IBufferedCipher WriteCipher - { - get { return outCipher; } - } - - public override int ReadByte() - { - if (inCipher == null) - return stream.ReadByte(); - - if (mInBuf == null || mInPos >= mInBuf.Length) - { - if (!FillInBuf()) - return -1; - } - - return mInBuf[mInPos++]; - } - - public override int Read( - byte[] buffer, - int offset, - int count) - { - if (inCipher == null) - return stream.Read(buffer, offset, count); - - int num = 0; - while (num < count) - { - if (mInBuf == null || mInPos >= mInBuf.Length) - { - if (!FillInBuf()) - break; - } - - int numToCopy = System.Math.Min(count - num, mInBuf.Length - mInPos); - Array.Copy(mInBuf, mInPos, buffer, offset + num, numToCopy); - mInPos += numToCopy; - num += numToCopy; - } - - return num; - } - - private bool FillInBuf() - { - if (inStreamEnded) - return false; - - mInPos = 0; - - do - { - mInBuf = ReadAndProcessBlock(); - } - while (!inStreamEnded && mInBuf == null); - - return mInBuf != null; - } - - private byte[] ReadAndProcessBlock() - { - int blockSize = inCipher.GetBlockSize(); - int readSize = (blockSize == 0) ? 256 : blockSize; - - byte[] block = new byte[readSize]; - int numRead = 0; - do - { - int count = stream.Read(block, numRead, block.Length - numRead); - if (count < 1) - { - inStreamEnded = true; - break; - } - numRead += count; - } - while (numRead < block.Length); - - Debug.Assert(inStreamEnded || numRead == block.Length); - - byte[] bytes = inStreamEnded - ? inCipher.DoFinal(block, 0, numRead) - : inCipher.ProcessBytes(block); - - if (bytes != null && bytes.Length == 0) - { - bytes = null; - } - - return bytes; - } - - public override void Write( - byte[] buffer, - int offset, - int count) - { - Debug.Assert(buffer != null); - Debug.Assert(0 <= offset && offset <= buffer.Length); - Debug.Assert(count >= 0); - - int end = offset + count; - - Debug.Assert(0 <= end && end <= buffer.Length); - - if (outCipher == null) - { - stream.Write(buffer, offset, count); - return; - } - - byte[] data = outCipher.ProcessBytes(buffer, offset, count); - if (data != null) - { - stream.Write(data, 0, data.Length); - } - } - - public override void WriteByte( - byte b) - { - if (outCipher == null) - { - stream.WriteByte(b); - return; - } - - byte[] data = outCipher.ProcessByte(b); - if (data != null) - { - stream.Write(data, 0, data.Length); - } - } - - public override bool CanRead - { - get { return stream.CanRead && (inCipher != null); } - } - - public override bool CanWrite - { - get { return stream.CanWrite && (outCipher != null); } - } - - public override bool CanSeek - { - get { return false; } - } - - public sealed override long Length - { - get { throw new NotSupportedException(); } - } - - public sealed override long Position - { - get { throw new NotSupportedException(); } - set { throw new NotSupportedException(); } - } - -#if PORTABLE - protected override void Dispose(bool disposing) - { - if (disposing) - { - if (outCipher != null) - { - byte[] data = outCipher.DoFinal(); - stream.Write(data, 0, data.Length); - stream.Flush(); - } - Platform.Dispose(stream); - } - base.Dispose(disposing); - } -#else - public override void Close() - { - if (outCipher != null) - { - byte[] data = outCipher.DoFinal(); - stream.Write(data, 0, data.Length); - stream.Flush(); - } - Platform.Dispose(stream); - base.Close(); - } -#endif - - public override void Flush() - { - // Note: outCipher.DoFinal is only called during Close() - stream.Flush(); - } - - public sealed override long Seek( - long offset, - SeekOrigin origin) - { - throw new NotSupportedException(); - } - - public sealed override void SetLength( - long length) - { - throw new NotSupportedException(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/io/DigestStream.cs b/bc-sharp-crypto/src/crypto/io/DigestStream.cs deleted file mode 100644 index dce8757..0000000 --- a/bc-sharp-crypto/src/crypto/io/DigestStream.cs +++ /dev/null @@ -1,151 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.IO -{ - public class DigestStream - : Stream - { - protected readonly Stream stream; - protected readonly IDigest inDigest; - protected readonly IDigest outDigest; - - public DigestStream( - Stream stream, - IDigest readDigest, - IDigest writeDigest) - { - this.stream = stream; - this.inDigest = readDigest; - this.outDigest = writeDigest; - } - - public virtual IDigest ReadDigest() - { - return inDigest; - } - - public virtual IDigest WriteDigest() - { - return outDigest; - } - - public override int Read( - byte[] buffer, - int offset, - int count) - { - int n = stream.Read(buffer, offset, count); - if (inDigest != null) - { - if (n > 0) - { - inDigest.BlockUpdate(buffer, offset, n); - } - } - return n; - } - - public override int ReadByte() - { - int b = stream.ReadByte(); - if (inDigest != null) - { - if (b >= 0) - { - inDigest.Update((byte)b); - } - } - return b; - } - - public override void Write( - byte[] buffer, - int offset, - int count) - { - if (outDigest != null) - { - if (count > 0) - { - outDigest.BlockUpdate(buffer, offset, count); - } - } - stream.Write(buffer, offset, count); - } - - public override void WriteByte( - byte b) - { - if (outDigest != null) - { - outDigest.Update(b); - } - stream.WriteByte(b); - } - - public override bool CanRead - { - get { return stream.CanRead; } - } - - public override bool CanWrite - { - get { return stream.CanWrite; } - } - - public override bool CanSeek - { - get { return stream.CanSeek; } - } - - public override long Length - { - get { return stream.Length; } - } - - public override long Position - { - get { return stream.Position; } - set { stream.Position = value; } - } - -#if PORTABLE - protected override void Dispose(bool disposing) - { - if (disposing) - { - Platform.Dispose(stream); - } - base.Dispose(disposing); - } -#else - public override void Close() - { - Platform.Dispose(stream); - base.Close(); - } -#endif - - public override void Flush() - { - stream.Flush(); - } - - public override long Seek( - long offset, - SeekOrigin origin) - { - return stream.Seek(offset, origin); - } - - public override void SetLength( - long length) - { - stream.SetLength(length); - } - } -} - diff --git a/bc-sharp-crypto/src/crypto/io/MacStream.cs b/bc-sharp-crypto/src/crypto/io/MacStream.cs deleted file mode 100644 index d9b8323..0000000 --- a/bc-sharp-crypto/src/crypto/io/MacStream.cs +++ /dev/null @@ -1,150 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.IO -{ - public class MacStream - : Stream - { - protected readonly Stream stream; - protected readonly IMac inMac; - protected readonly IMac outMac; - - public MacStream( - Stream stream, - IMac readMac, - IMac writeMac) - { - this.stream = stream; - this.inMac = readMac; - this.outMac = writeMac; - } - - public virtual IMac ReadMac() - { - return inMac; - } - - public virtual IMac WriteMac() - { - return outMac; - } - - public override int Read( - byte[] buffer, - int offset, - int count) - { - int n = stream.Read(buffer, offset, count); - if (inMac != null) - { - if (n > 0) - { - inMac.BlockUpdate(buffer, offset, n); - } - } - return n; - } - - public override int ReadByte() - { - int b = stream.ReadByte(); - if (inMac != null) - { - if (b >= 0) - { - inMac.Update((byte)b); - } - } - return b; - } - - public override void Write( - byte[] buffer, - int offset, - int count) - { - if (outMac != null) - { - if (count > 0) - { - outMac.BlockUpdate(buffer, offset, count); - } - } - stream.Write(buffer, offset, count); - } - - public override void WriteByte(byte b) - { - if (outMac != null) - { - outMac.Update(b); - } - stream.WriteByte(b); - } - - public override bool CanRead - { - get { return stream.CanRead; } - } - - public override bool CanWrite - { - get { return stream.CanWrite; } - } - - public override bool CanSeek - { - get { return stream.CanSeek; } - } - - public override long Length - { - get { return stream.Length; } - } - - public override long Position - { - get { return stream.Position; } - set { stream.Position = value; } - } - -#if PORTABLE - protected override void Dispose(bool disposing) - { - if (disposing) - { - Platform.Dispose(stream); - } - base.Dispose(disposing); - } -#else - public override void Close() - { - Platform.Dispose(stream); - base.Close(); - } -#endif - - public override void Flush() - { - stream.Flush(); - } - - public override long Seek( - long offset, - SeekOrigin origin) - { - return stream.Seek(offset,origin); - } - - public override void SetLength( - long length) - { - stream.SetLength(length); - } - } -} - diff --git a/bc-sharp-crypto/src/crypto/io/SignerStream.cs b/bc-sharp-crypto/src/crypto/io/SignerStream.cs deleted file mode 100644 index 1e37c8d..0000000 --- a/bc-sharp-crypto/src/crypto/io/SignerStream.cs +++ /dev/null @@ -1,151 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.IO -{ - public class SignerStream - : Stream - { - protected readonly Stream stream; - protected readonly ISigner inSigner; - protected readonly ISigner outSigner; - - public SignerStream( - Stream stream, - ISigner readSigner, - ISigner writeSigner) - { - this.stream = stream; - this.inSigner = readSigner; - this.outSigner = writeSigner; - } - - public virtual ISigner ReadSigner() - { - return inSigner; - } - - public virtual ISigner WriteSigner() - { - return outSigner; - } - - public override int Read( - byte[] buffer, - int offset, - int count) - { - int n = stream.Read(buffer, offset, count); - if (inSigner != null) - { - if (n > 0) - { - inSigner.BlockUpdate(buffer, offset, n); - } - } - return n; - } - - public override int ReadByte() - { - int b = stream.ReadByte(); - if (inSigner != null) - { - if (b >= 0) - { - inSigner.Update((byte)b); - } - } - return b; - } - - public override void Write( - byte[] buffer, - int offset, - int count) - { - if (outSigner != null) - { - if (count > 0) - { - outSigner.BlockUpdate(buffer, offset, count); - } - } - stream.Write(buffer, offset, count); - } - - public override void WriteByte( - byte b) - { - if (outSigner != null) - { - outSigner.Update(b); - } - stream.WriteByte(b); - } - - public override bool CanRead - { - get { return stream.CanRead; } - } - - public override bool CanWrite - { - get { return stream.CanWrite; } - } - - public override bool CanSeek - { - get { return stream.CanSeek; } - } - - public override long Length - { - get { return stream.Length; } - } - - public override long Position - { - get { return stream.Position; } - set { stream.Position = value; } - } - -#if PORTABLE - protected override void Dispose(bool disposing) - { - if (disposing) - { - Platform.Dispose(stream); - } - base.Dispose(disposing); - } -#else - public override void Close() - { - Platform.Dispose(stream); - base.Close(); - } -#endif - - public override void Flush() - { - stream.Flush(); - } - - public override long Seek( - long offset, - SeekOrigin origin) - { - return stream.Seek(offset, origin); - } - - public override void SetLength( - long length) - { - stream.SetLength(length); - } - } -} - diff --git a/bc-sharp-crypto/src/crypto/macs/CMac.cs b/bc-sharp-crypto/src/crypto/macs/CMac.cs deleted file mode 100644 index 682c12b..0000000 --- a/bc-sharp-crypto/src/crypto/macs/CMac.cs +++ /dev/null @@ -1,257 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Modes; -using Org.BouncyCastle.Crypto.Paddings; -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Macs -{ - /** - * CMAC - as specified at www.nuee.nagoya-u.ac.jp/labs/tiwata/omac/omac.html - *

- * CMAC is analogous to OMAC1 - see also en.wikipedia.org/wiki/CMAC - *

- * CMAC is a NIST recomendation - see - * csrc.nist.gov/CryptoToolkit/modes/800-38_Series_Publications/SP800-38B.pdf - *

- * CMAC/OMAC1 is a blockcipher-based message authentication code designed and - * analyzed by Tetsu Iwata and Kaoru Kurosawa. - *

- * CMAC/OMAC1 is a simple variant of the CBC MAC (Cipher Block Chaining Message - * Authentication Code). OMAC stands for One-Key CBC MAC. - *

- * It supports 128- or 64-bits block ciphers, with any key size, and returns - * a MAC with dimension less or equal to the block size of the underlying - * cipher. - *

- */ - public class CMac - : IMac - { - private const byte CONSTANT_128 = (byte)0x87; - private const byte CONSTANT_64 = (byte)0x1b; - - private byte[] ZEROES; - - private byte[] mac; - - private byte[] buf; - private int bufOff; - private IBlockCipher cipher; - - private int macSize; - - private byte[] L, Lu, Lu2; - - /** - * create a standard MAC based on a CBC block cipher (64 or 128 bit block). - * This will produce an authentication code the length of the block size - * of the cipher. - * - * @param cipher the cipher to be used as the basis of the MAC generation. - */ - public CMac( - IBlockCipher cipher) - : this(cipher, cipher.GetBlockSize() * 8) - { - } - - /** - * create a standard MAC based on a block cipher with the size of the - * MAC been given in bits. - *

- * Note: the size of the MAC must be at least 24 bits (FIPS Publication 81), - * or 16 bits if being used as a data authenticator (FIPS Publication 113), - * and in general should be less than the size of the block cipher as it reduces - * the chance of an exhaustive attack (see Handbook of Applied Cryptography). - * - * @param cipher the cipher to be used as the basis of the MAC generation. - * @param macSizeInBits the size of the MAC in bits, must be a multiple of 8 and @lt;= 128. - */ - public CMac( - IBlockCipher cipher, - int macSizeInBits) - { - if ((macSizeInBits % 8) != 0) - throw new ArgumentException("MAC size must be multiple of 8"); - - if (macSizeInBits > (cipher.GetBlockSize() * 8)) - { - throw new ArgumentException( - "MAC size must be less or equal to " - + (cipher.GetBlockSize() * 8)); - } - - if (cipher.GetBlockSize() != 8 && cipher.GetBlockSize() != 16) - { - throw new ArgumentException( - "Block size must be either 64 or 128 bits"); - } - - this.cipher = new CbcBlockCipher(cipher); - this.macSize = macSizeInBits / 8; - - mac = new byte[cipher.GetBlockSize()]; - - buf = new byte[cipher.GetBlockSize()]; - - ZEROES = new byte[cipher.GetBlockSize()]; - - bufOff = 0; - } - - public string AlgorithmName - { - get { return cipher.AlgorithmName; } - } - - private static int ShiftLeft(byte[] block, byte[] output) - { - int i = block.Length; - uint bit = 0; - while (--i >= 0) - { - uint b = block[i]; - output[i] = (byte)((b << 1) | bit); - bit = (b >> 7) & 1; - } - return (int)bit; - } - - private static byte[] DoubleLu(byte[] input) - { - byte[] ret = new byte[input.Length]; - int carry = ShiftLeft(input, ret); - int xor = input.Length == 16 ? CONSTANT_128 : CONSTANT_64; - - /* - * NOTE: This construction is an attempt at a constant-time implementation. - */ - ret[input.Length - 1] ^= (byte)(xor >> ((1 - carry) << 3)); - - return ret; - } - - public void Init( - ICipherParameters parameters) - { - if (parameters is KeyParameter) - { - cipher.Init(true, parameters); - - //initializes the L, Lu, Lu2 numbers - L = new byte[ZEROES.Length]; - cipher.ProcessBlock(ZEROES, 0, L, 0); - Lu = DoubleLu(L); - Lu2 = DoubleLu(Lu); - } - else if (parameters != null) - { - // CMAC mode does not permit IV to underlying CBC mode - throw new ArgumentException("CMac mode only permits key to be set.", "parameters"); - } - - Reset(); - } - - public int GetMacSize() - { - return macSize; - } - - public void Update( - byte input) - { - if (bufOff == buf.Length) - { - cipher.ProcessBlock(buf, 0, mac, 0); - bufOff = 0; - } - - buf[bufOff++] = input; - } - - public void BlockUpdate( - byte[] inBytes, - int inOff, - int len) - { - if (len < 0) - throw new ArgumentException("Can't have a negative input length!"); - - int blockSize = cipher.GetBlockSize(); - int gapLen = blockSize - bufOff; - - if (len > gapLen) - { - Array.Copy(inBytes, inOff, buf, bufOff, gapLen); - - cipher.ProcessBlock(buf, 0, mac, 0); - - bufOff = 0; - len -= gapLen; - inOff += gapLen; - - while (len > blockSize) - { - cipher.ProcessBlock(inBytes, inOff, mac, 0); - - len -= blockSize; - inOff += blockSize; - } - } - - Array.Copy(inBytes, inOff, buf, bufOff, len); - - bufOff += len; - } - - public int DoFinal( - byte[] outBytes, - int outOff) - { - int blockSize = cipher.GetBlockSize(); - - byte[] lu; - if (bufOff == blockSize) - { - lu = Lu; - } - else - { - new ISO7816d4Padding().AddPadding(buf, bufOff); - lu = Lu2; - } - - for (int i = 0; i < mac.Length; i++) - { - buf[i] ^= lu[i]; - } - - cipher.ProcessBlock(buf, 0, mac, 0); - - Array.Copy(mac, 0, outBytes, outOff, macSize); - - Reset(); - - return macSize; - } - - /** - * Reset the mac generator. - */ - public void Reset() - { - /* - * clean the buffer. - */ - Array.Clear(buf, 0, buf.Length); - bufOff = 0; - - /* - * Reset the underlying cipher. - */ - cipher.Reset(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/macs/CbcBlockCipherMac.cs b/bc-sharp-crypto/src/crypto/macs/CbcBlockCipherMac.cs deleted file mode 100644 index 146e16a..0000000 --- a/bc-sharp-crypto/src/crypto/macs/CbcBlockCipherMac.cs +++ /dev/null @@ -1,209 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Modes; -using Org.BouncyCastle.Crypto.Paddings; - -namespace Org.BouncyCastle.Crypto.Macs -{ - /** - * standard CBC Block Cipher MAC - if no padding is specified the default of - * pad of zeroes is used. - */ - public class CbcBlockCipherMac - : IMac - { - private byte[] buf; - private int bufOff; - private IBlockCipher cipher; - private IBlockCipherPadding padding; - private int macSize; - - /** - * create a standard MAC based on a CBC block cipher. This will produce an - * authentication code half the length of the block size of the cipher. - * - * @param cipher the cipher to be used as the basis of the MAC generation. - */ - public CbcBlockCipherMac( - IBlockCipher cipher) - : this(cipher, (cipher.GetBlockSize() * 8) / 2, null) - { - } - - /** - * create a standard MAC based on a CBC block cipher. This will produce an - * authentication code half the length of the block size of the cipher. - * - * @param cipher the cipher to be used as the basis of the MAC generation. - * @param padding the padding to be used to complete the last block. - */ - public CbcBlockCipherMac( - IBlockCipher cipher, - IBlockCipherPadding padding) - : this(cipher, (cipher.GetBlockSize() * 8) / 2, padding) - { - } - - /** - * create a standard MAC based on a block cipher with the size of the - * MAC been given in bits. This class uses CBC mode as the basis for the - * MAC generation. - *

- * Note: the size of the MAC must be at least 24 bits (FIPS Publication 81), - * or 16 bits if being used as a data authenticator (FIPS Publication 113), - * and in general should be less than the size of the block cipher as it reduces - * the chance of an exhaustive attack (see Handbook of Applied Cryptography). - *

- * @param cipher the cipher to be used as the basis of the MAC generation. - * @param macSizeInBits the size of the MAC in bits, must be a multiple of 8. - */ - public CbcBlockCipherMac( - IBlockCipher cipher, - int macSizeInBits) - : this(cipher, macSizeInBits, null) - { - } - - /** - * create a standard MAC based on a block cipher with the size of the - * MAC been given in bits. This class uses CBC mode as the basis for the - * MAC generation. - *

- * Note: the size of the MAC must be at least 24 bits (FIPS Publication 81), - * or 16 bits if being used as a data authenticator (FIPS Publication 113), - * and in general should be less than the size of the block cipher as it reduces - * the chance of an exhaustive attack (see Handbook of Applied Cryptography). - *

- * @param cipher the cipher to be used as the basis of the MAC generation. - * @param macSizeInBits the size of the MAC in bits, must be a multiple of 8. - * @param padding the padding to be used to complete the last block. - */ - public CbcBlockCipherMac( - IBlockCipher cipher, - int macSizeInBits, - IBlockCipherPadding padding) - { - if ((macSizeInBits % 8) != 0) - throw new ArgumentException("MAC size must be multiple of 8"); - - this.cipher = new CbcBlockCipher(cipher); - this.padding = padding; - this.macSize = macSizeInBits / 8; - - buf = new byte[cipher.GetBlockSize()]; - bufOff = 0; - } - - public string AlgorithmName - { - get { return cipher.AlgorithmName; } - } - - public void Init( - ICipherParameters parameters) - { - Reset(); - - cipher.Init(true, parameters); - } - - public int GetMacSize() - { - return macSize; - } - - public void Update( - byte input) - { - if (bufOff == buf.Length) - { - cipher.ProcessBlock(buf, 0, buf, 0); - bufOff = 0; - } - - buf[bufOff++] = input; - } - - public void BlockUpdate( - byte[] input, - int inOff, - int len) - { - if (len < 0) - throw new ArgumentException("Can't have a negative input length!"); - - int blockSize = cipher.GetBlockSize(); - int gapLen = blockSize - bufOff; - - if (len > gapLen) - { - Array.Copy(input, inOff, buf, bufOff, gapLen); - - cipher.ProcessBlock(buf, 0, buf, 0); - - bufOff = 0; - len -= gapLen; - inOff += gapLen; - - while (len > blockSize) - { - cipher.ProcessBlock(input, inOff, buf, 0); - - len -= blockSize; - inOff += blockSize; - } - } - - Array.Copy(input, inOff, buf, bufOff, len); - - bufOff += len; - } - - public int DoFinal( - byte[] output, - int outOff) - { - int blockSize = cipher.GetBlockSize(); - - if (padding == null) - { - // pad with zeroes - while (bufOff < blockSize) - { - buf[bufOff++] = 0; - } - } - else - { - if (bufOff == blockSize) - { - cipher.ProcessBlock(buf, 0, buf, 0); - bufOff = 0; - } - - padding.AddPadding(buf, bufOff); - } - - cipher.ProcessBlock(buf, 0, buf, 0); - - Array.Copy(buf, 0, output, outOff, macSize); - - Reset(); - - return macSize; - } - - /** - * Reset the mac generator. - */ - public void Reset() - { - // Clear the buffer. - Array.Clear(buf, 0, buf.Length); - bufOff = 0; - - // Reset the underlying cipher. - cipher.Reset(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/macs/CfbBlockCipherMac.cs b/bc-sharp-crypto/src/crypto/macs/CfbBlockCipherMac.cs deleted file mode 100644 index 364cf84..0000000 --- a/bc-sharp-crypto/src/crypto/macs/CfbBlockCipherMac.cs +++ /dev/null @@ -1,368 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Modes; -using Org.BouncyCastle.Crypto.Paddings; -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Macs -{ - /** - * implements a Cipher-FeedBack (CFB) mode on top of a simple cipher. - */ - class MacCFBBlockCipher - : IBlockCipher - { - private byte[] IV; - private byte[] cfbV; - private byte[] cfbOutV; - - private readonly int blockSize; - private readonly IBlockCipher cipher; - - /** - * Basic constructor. - * - * @param cipher the block cipher to be used as the basis of the - * feedback mode. - * @param blockSize the block size in bits (note: a multiple of 8) - */ - public MacCFBBlockCipher( - IBlockCipher cipher, - int bitBlockSize) - { - this.cipher = cipher; - this.blockSize = bitBlockSize / 8; - - this.IV = new byte[cipher.GetBlockSize()]; - this.cfbV = new byte[cipher.GetBlockSize()]; - this.cfbOutV = new byte[cipher.GetBlockSize()]; - } - - /** - * Initialise the cipher and, possibly, the initialisation vector (IV). - * If an IV isn't passed as part of the parameter, the IV will be all zeros. - * An IV which is too short is handled in FIPS compliant fashion. - * - * @param param the key and other data required by the cipher. - * @exception ArgumentException if the parameters argument is - * inappropriate. - */ - public void Init( - bool forEncryption, - ICipherParameters parameters) - { - if (parameters is ParametersWithIV) - { - ParametersWithIV ivParam = (ParametersWithIV)parameters; - byte[] iv = ivParam.GetIV(); - - if (iv.Length < IV.Length) - { - Array.Copy(iv, 0, IV, IV.Length - iv.Length, iv.Length); - } - else - { - Array.Copy(iv, 0, IV, 0, IV.Length); - } - - parameters = ivParam.Parameters; - } - - Reset(); - - cipher.Init(true, parameters); - } - - /** - * return the algorithm name and mode. - * - * @return the name of the underlying algorithm followed by "/CFB" - * and the block size in bits. - */ - public string AlgorithmName - { - get { return cipher.AlgorithmName + "/CFB" + (blockSize * 8); } - } - - public bool IsPartialBlockOkay - { - get { return true; } - } - - /** - * return the block size we are operating at. - * - * @return the block size we are operating at (in bytes). - */ - public int GetBlockSize() - { - return blockSize; - } - - /** - * Process one block of input from the array in and write it to - * the out array. - * - * @param in the array containing the input data. - * @param inOff offset into the in array the data starts at. - * @param out the array the output data will be copied into. - * @param outOff the offset into the out array the output will start at. - * @exception DataLengthException if there isn't enough data in in, or - * space in out. - * @exception InvalidOperationException if the cipher isn't initialised. - * @return the number of bytes processed and produced. - */ - public int ProcessBlock( - byte[] input, - int inOff, - byte[] outBytes, - int outOff) - { - if ((inOff + blockSize) > input.Length) - throw new DataLengthException("input buffer too short"); - - if ((outOff + blockSize) > outBytes.Length) - throw new DataLengthException("output buffer too short"); - - cipher.ProcessBlock(cfbV, 0, cfbOutV, 0); - - // - // XOR the cfbV with the plaintext producing the cipher text - // - for (int i = 0; i < blockSize; i++) - { - outBytes[outOff + i] = (byte)(cfbOutV[i] ^ input[inOff + i]); - } - - // - // change over the input block. - // - Array.Copy(cfbV, blockSize, cfbV, 0, cfbV.Length - blockSize); - Array.Copy(outBytes, outOff, cfbV, cfbV.Length - blockSize, blockSize); - - return blockSize; - } - - /** - * reset the chaining vector back to the IV and reset the underlying - * cipher. - */ - public void Reset() - { - IV.CopyTo(cfbV, 0); - - cipher.Reset(); - } - - public void GetMacBlock( - byte[] mac) - { - cipher.ProcessBlock(cfbV, 0, mac, 0); - } - } - - public class CfbBlockCipherMac - : IMac - { - private byte[] mac; - private byte[] Buffer; - private int bufOff; - private MacCFBBlockCipher cipher; - private IBlockCipherPadding padding; - private int macSize; - - /** - * create a standard MAC based on a CFB block cipher. This will produce an - * authentication code half the length of the block size of the cipher, with - * the CFB mode set to 8 bits. - * - * @param cipher the cipher to be used as the basis of the MAC generation. - */ - public CfbBlockCipherMac( - IBlockCipher cipher) - : this(cipher, 8, (cipher.GetBlockSize() * 8) / 2, null) - { - } - - /** - * create a standard MAC based on a CFB block cipher. This will produce an - * authentication code half the length of the block size of the cipher, with - * the CFB mode set to 8 bits. - * - * @param cipher the cipher to be used as the basis of the MAC generation. - * @param padding the padding to be used. - */ - public CfbBlockCipherMac( - IBlockCipher cipher, - IBlockCipherPadding padding) - : this(cipher, 8, (cipher.GetBlockSize() * 8) / 2, padding) - { - } - - /** - * create a standard MAC based on a block cipher with the size of the - * MAC been given in bits. This class uses CFB mode as the basis for the - * MAC generation. - *

- * Note: the size of the MAC must be at least 24 bits (FIPS Publication 81), - * or 16 bits if being used as a data authenticator (FIPS Publication 113), - * and in general should be less than the size of the block cipher as it reduces - * the chance of an exhaustive attack (see Handbook of Applied Cryptography). - *

- * @param cipher the cipher to be used as the basis of the MAC generation. - * @param cfbBitSize the size of an output block produced by the CFB mode. - * @param macSizeInBits the size of the MAC in bits, must be a multiple of 8. - */ - public CfbBlockCipherMac( - IBlockCipher cipher, - int cfbBitSize, - int macSizeInBits) - : this(cipher, cfbBitSize, macSizeInBits, null) - { - } - - /** - * create a standard MAC based on a block cipher with the size of the - * MAC been given in bits. This class uses CFB mode as the basis for the - * MAC generation. - *

- * Note: the size of the MAC must be at least 24 bits (FIPS Publication 81), - * or 16 bits if being used as a data authenticator (FIPS Publication 113), - * and in general should be less than the size of the block cipher as it reduces - * the chance of an exhaustive attack (see Handbook of Applied Cryptography). - *

- * @param cipher the cipher to be used as the basis of the MAC generation. - * @param cfbBitSize the size of an output block produced by the CFB mode. - * @param macSizeInBits the size of the MAC in bits, must be a multiple of 8. - * @param padding a padding to be used. - */ - public CfbBlockCipherMac( - IBlockCipher cipher, - int cfbBitSize, - int macSizeInBits, - IBlockCipherPadding padding) - { - if ((macSizeInBits % 8) != 0) - throw new ArgumentException("MAC size must be multiple of 8"); - - mac = new byte[cipher.GetBlockSize()]; - - this.cipher = new MacCFBBlockCipher(cipher, cfbBitSize); - this.padding = padding; - this.macSize = macSizeInBits / 8; - - Buffer = new byte[this.cipher.GetBlockSize()]; - bufOff = 0; - } - - public string AlgorithmName - { - get { return cipher.AlgorithmName; } - } - - public void Init( - ICipherParameters parameters) - { - Reset(); - - cipher.Init(true, parameters); - } - - public int GetMacSize() - { - return macSize; - } - - public void Update( - byte input) - { - if (bufOff == Buffer.Length) - { - cipher.ProcessBlock(Buffer, 0, mac, 0); - bufOff = 0; - } - - Buffer[bufOff++] = input; - } - - public void BlockUpdate( - byte[] input, - int inOff, - int len) - { - if (len < 0) - throw new ArgumentException("Can't have a negative input length!"); - - int blockSize = cipher.GetBlockSize(); - int resultLen = 0; - int gapLen = blockSize - bufOff; - - if (len > gapLen) - { - Array.Copy(input, inOff, Buffer, bufOff, gapLen); - - resultLen += cipher.ProcessBlock(Buffer, 0, mac, 0); - - bufOff = 0; - len -= gapLen; - inOff += gapLen; - - while (len > blockSize) - { - resultLen += cipher.ProcessBlock(input, inOff, mac, 0); - - len -= blockSize; - inOff += blockSize; - } - } - - Array.Copy(input, inOff, Buffer, bufOff, len); - - bufOff += len; - } - - public int DoFinal( - byte[] output, - int outOff) - { - int blockSize = cipher.GetBlockSize(); - - // pad with zeroes - if (this.padding == null) - { - while (bufOff < blockSize) - { - Buffer[bufOff++] = 0; - } - } - else - { - padding.AddPadding(Buffer, bufOff); - } - - cipher.ProcessBlock(Buffer, 0, mac, 0); - - cipher.GetMacBlock(mac); - - Array.Copy(mac, 0, output, outOff, macSize); - - Reset(); - - return macSize; - } - - /** - * Reset the mac generator. - */ - public void Reset() - { - // Clear the buffer. - Array.Clear(Buffer, 0, Buffer.Length); - bufOff = 0; - - // Reset the underlying cipher. - cipher.Reset(); - } - } - -} diff --git a/bc-sharp-crypto/src/crypto/macs/DSTU7564Mac.cs b/bc-sharp-crypto/src/crypto/macs/DSTU7564Mac.cs deleted file mode 100644 index 36e8641..0000000 --- a/bc-sharp-crypto/src/crypto/macs/DSTU7564Mac.cs +++ /dev/null @@ -1,143 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; - -namespace Org.BouncyCastle.Crypto.Macs -{ - /// - /// Implementation of DSTU7564 mac mode - /// - public class Dstu7564Mac - : IMac - { - private Dstu7564Digest engine; - private int macSize; - - private ulong inputLength; - - byte[] paddedKey; - byte[] invertedKey; - - public string AlgorithmName - { - get { return "DSTU7564Mac"; } - } - - public Dstu7564Mac(int macSizeBits) - { - engine = new Dstu7564Digest(macSizeBits); - macSize = macSizeBits / 8; - } - - public void Init(ICipherParameters parameters) - { - if (parameters is KeyParameter) - { - byte[] key = ((KeyParameter)parameters).GetKey(); - - invertedKey = new byte[key.Length]; - - paddedKey = PadKey(key); - - for (int byteIndex = 0; byteIndex < invertedKey.Length; byteIndex++) - { - invertedKey[byteIndex] = (byte)(key[byteIndex] ^ (byte)0xFF); - } - } - else - { - throw new ArgumentException("Bad parameter passed"); - } - - engine.BlockUpdate(paddedKey, 0, paddedKey.Length); - } - - public int GetMacSize() - { - return macSize; - } - - public void BlockUpdate(byte[] input, int inOff, int len) - { - Check.DataLength(input, inOff, len, "Input buffer too short"); - - if (paddedKey == null) - throw new InvalidOperationException(AlgorithmName + " not initialised"); - - engine.BlockUpdate(input, inOff, len); - inputLength += (ulong)len; - } - - public void Update(byte input) - { - engine.Update(input); - inputLength++; - } - - public int DoFinal(byte[] output, int outOff) - { - Check.OutputLength(output, outOff, macSize, "Output buffer too short"); - - if (paddedKey == null) - throw new InvalidOperationException(AlgorithmName + " not initialised"); - - Pad(); - - engine.BlockUpdate(invertedKey, 0, invertedKey.Length); - - inputLength = 0; - - return engine.DoFinal(output, outOff); - } - - public void Reset() - { - inputLength = 0; - engine.Reset(); - if (paddedKey != null) - { - engine.BlockUpdate(paddedKey, 0, paddedKey.Length); - } - } - - private void Pad() - { - int extra = engine.GetByteLength() - (int)(inputLength % (ulong)engine.GetByteLength()); - if (extra < 13) // terminator byte + 96 bits of length - { - extra += engine.GetByteLength(); - } - - byte[] padded = new byte[extra]; - - padded[0] = (byte)0x80; // Defined in standard; - - // Defined in standard; - Pack.UInt64_To_LE(inputLength * 8, padded, padded.Length - 12); - - engine.BlockUpdate(padded, 0, padded.Length); - } - - private byte[] PadKey(byte[] input) - { - int paddedLen = ((input.Length + engine.GetByteLength() - 1) / engine.GetByteLength()) * engine.GetByteLength(); - - int extra = engine.GetByteLength() - (int)(input.Length % engine.GetByteLength()); - if (extra < 13) // terminator byte + 96 bits of length - { - paddedLen += engine.GetByteLength(); - } - - byte[] padded = new byte[paddedLen]; - - Array.Copy(input, 0, padded, 0, input.Length); - - padded[input.Length] = (byte)0x80; // Defined in standard; - Pack.UInt32_To_LE((uint)(input.Length * 8), padded, padded.Length - 12); // Defined in standard; - - return padded; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/macs/DSTU7624Mac.cs b/bc-sharp-crypto/src/crypto/macs/DSTU7624Mac.cs deleted file mode 100644 index 953d816..0000000 --- a/bc-sharp-crypto/src/crypto/macs/DSTU7624Mac.cs +++ /dev/null @@ -1,160 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Engines; -using Org.BouncyCastle.Crypto.Parameters; - - -namespace Org.BouncyCastle.Crypto.Macs -{ - /** - * implementation of DSTU 7624 MAC - */ - public class Dstu7624Mac : IMac - { - private int macSize; - - private Dstu7624Engine engine; - private int blockSize; - - private byte[] c, cTemp, kDelta; - private byte[] buf; - private int bufOff; - - public Dstu7624Mac(int blockSizeBits, int q) - { - engine = new Dstu7624Engine(blockSizeBits); - - blockSize = blockSizeBits / 8; - - macSize = q / 8; - - c = new byte[blockSize]; - - cTemp = new byte[blockSize]; - - kDelta = new byte[blockSize]; - buf = new byte[blockSize]; - } - - public void Init(ICipherParameters parameters) - { - if (parameters is KeyParameter) - { - engine.Init(true, (KeyParameter)parameters); - - engine.ProcessBlock(kDelta, 0, kDelta, 0); - } - else - { - throw new ArgumentException("invalid parameter passed to Dstu7624Mac init - " - + Platform.GetTypeName(parameters)); - } - } - - public string AlgorithmName - { - get { return "Dstu7624Mac"; } - } - - public int GetMacSize() - { - return macSize; - } - - public void Update(byte input) - { - if (bufOff == buf.Length) - { - processBlock(buf, 0); - bufOff = 0; - } - - buf[bufOff++] = input; - } - - public void BlockUpdate(byte[] input, int inOff, int len) - { - if (len < 0) - { - throw new ArgumentException( - "Can't have a negative input length!"); - } - - int blockSize = engine.GetBlockSize(); - int gapLen = blockSize - bufOff; - - if (len > gapLen) - { - Array.Copy(input, inOff, buf, bufOff, gapLen); - - processBlock(buf, 0); - - bufOff = 0; - len -= gapLen; - inOff += gapLen; - - while (len > blockSize) - { - processBlock(input, inOff); - - len -= blockSize; - inOff += blockSize; - } - } - - Array.Copy(input, inOff, buf, bufOff, len); - - bufOff += len; - } - - private void processBlock(byte[] input, int inOff) - { - Xor(c, 0, input, inOff, cTemp); - - engine.ProcessBlock(cTemp, 0, c, 0); - } - - private void Xor(byte[] c, int cOff, byte[] input, int inOff, byte[] xorResult) - { - for (int byteIndex = 0; byteIndex < blockSize; byteIndex++) - { - xorResult[byteIndex] = (byte)(c[byteIndex + cOff] ^ input[byteIndex + inOff]); - } - } - - public int DoFinal(byte[] output, int outOff) - { - if (bufOff % buf.Length != 0) - { - throw new DataLengthException("Input must be a multiple of blocksize"); - } - - //Last block - Xor(c, 0, buf, 0, cTemp); - Xor(cTemp, 0, kDelta, 0, c); - engine.ProcessBlock(c, 0, c, 0); - - if (macSize + outOff > output.Length) - { - throw new DataLengthException("Output buffer too short"); - } - - Array.Copy(c, 0, output, outOff, macSize); - - return macSize; - } - - public void Reset() - { - Arrays.Fill(c, (byte)0x00); - Arrays.Fill(cTemp, (byte)0x00); - Arrays.Fill(kDelta, (byte)0x00); - Arrays.Fill(buf, (byte)0x00); - engine.Reset(); - engine.ProcessBlock(kDelta, 0, kDelta, 0); - bufOff = 0; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/macs/GMac.cs b/bc-sharp-crypto/src/crypto/macs/GMac.cs deleted file mode 100644 index f2c3990..0000000 --- a/bc-sharp-crypto/src/crypto/macs/GMac.cs +++ /dev/null @@ -1,112 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Modes; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Macs -{ - /// - /// The GMAC specialisation of Galois/Counter mode (GCM) detailed in NIST Special Publication - /// 800-38D. - /// - /// - /// GMac is an invocation of the GCM mode where no data is encrypted (i.e. all input data to the Mac - /// is processed as additional authenticated data with the underlying GCM block cipher). - /// - public class GMac - : IMac - { - private readonly GcmBlockCipher cipher; - private readonly int macSizeBits; - - /// - /// Creates a GMAC based on the operation of a block cipher in GCM mode. - /// - /// - /// This will produce an authentication code the length of the block size of the cipher. - /// - /// the cipher to be used in GCM mode to generate the MAC. - public GMac(GcmBlockCipher cipher) - : this(cipher, 128) - { - } - - /// - /// Creates a GMAC based on the operation of a 128 bit block cipher in GCM mode. - /// - /// - /// This will produce an authentication code the length of the block size of the cipher. - /// - /// the cipher to be used in GCM mode to generate the MAC. - /// the mac size to generate, in bits. Must be a multiple of 8, between 32 and 128 (inclusive). - /// Sizes less than 96 are not recommended, but are supported for specialized applications. - public GMac(GcmBlockCipher cipher, int macSizeBits) - { - this.cipher = cipher; - this.macSizeBits = macSizeBits; - } - - /// - /// Initialises the GMAC - requires a - /// providing a and a nonce. - /// - public void Init(ICipherParameters parameters) - { - if (parameters is ParametersWithIV) - { - ParametersWithIV param = (ParametersWithIV)parameters; - - byte[] iv = param.GetIV(); - KeyParameter keyParam = (KeyParameter)param.Parameters; - - // GCM is always operated in encrypt mode to calculate MAC - cipher.Init(true, new AeadParameters(keyParam, macSizeBits, iv)); - } - else - { - throw new ArgumentException("GMAC requires ParametersWithIV"); - } - } - - public string AlgorithmName - { - get { return cipher.GetUnderlyingCipher().AlgorithmName + "-GMAC"; } - } - - public int GetMacSize() - { - return macSizeBits / 8; - } - - public void Update(byte input) - { - cipher.ProcessAadByte(input); - } - - public void BlockUpdate(byte[] input, int inOff, int len) - { - cipher.ProcessAadBytes(input, inOff, len); - } - - public int DoFinal(byte[] output, int outOff) - { - try - { - return cipher.DoFinal(output, outOff); - } - catch (InvalidCipherTextException e) - { - // Impossible in encrypt mode - throw new InvalidOperationException(e.ToString()); - } - } - - public void Reset() - { - cipher.Reset(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/macs/GOST28147Mac.cs b/bc-sharp-crypto/src/crypto/macs/GOST28147Mac.cs deleted file mode 100644 index cc6b723..0000000 --- a/bc-sharp-crypto/src/crypto/macs/GOST28147Mac.cs +++ /dev/null @@ -1,297 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Macs -{ - /** - * implementation of GOST 28147-89 MAC - */ - public class Gost28147Mac : IMac - { - private const int blockSize = 8; - private const int macSize = 4; - private int bufOff; - private byte[] buf; - private byte[] mac; - private bool firstStep = true; - private int[] workingKey; - - // - // This is default S-box - E_A. - private byte[] S = - { - 0x9,0x6,0x3,0x2,0x8,0xB,0x1,0x7,0xA,0x4,0xE,0xF,0xC,0x0,0xD,0x5, - 0x3,0x7,0xE,0x9,0x8,0xA,0xF,0x0,0x5,0x2,0x6,0xC,0xB,0x4,0xD,0x1, - 0xE,0x4,0x6,0x2,0xB,0x3,0xD,0x8,0xC,0xF,0x5,0xA,0x0,0x7,0x1,0x9, - 0xE,0x7,0xA,0xC,0xD,0x1,0x3,0x9,0x0,0x2,0xB,0x4,0xF,0x8,0x5,0x6, - 0xB,0x5,0x1,0x9,0x8,0xD,0xF,0x0,0xE,0x4,0x2,0x3,0xC,0x7,0xA,0x6, - 0x3,0xA,0xD,0xC,0x1,0x2,0x0,0xB,0x7,0x5,0x9,0x4,0x8,0xF,0xE,0x6, - 0x1,0xD,0x2,0x9,0x7,0xA,0x6,0x0,0x8,0xC,0x4,0x5,0xF,0x3,0xB,0xE, - 0xB,0xA,0xF,0x5,0x0,0xC,0xE,0x8,0x6,0x2,0x3,0x9,0x1,0x7,0xD,0x4 - }; - - public Gost28147Mac() - { - mac = new byte[blockSize]; - buf = new byte[blockSize]; - bufOff = 0; - } - - private static int[] generateWorkingKey( - byte[] userKey) - { - if (userKey.Length != 32) - throw new ArgumentException("Key length invalid. Key needs to be 32 byte - 256 bit!!!"); - - int[] key = new int[8]; - for(int i=0; i!=8; i++) - { - key[i] = bytesToint(userKey,i*4); - } - - return key; - } - - public void Init( - ICipherParameters parameters) - { - Reset(); - buf = new byte[blockSize]; - if (parameters is ParametersWithSBox) - { - ParametersWithSBox param = (ParametersWithSBox)parameters; - - // - // Set the S-Box - // - param.GetSBox().CopyTo(this.S, 0); - - // - // set key if there is one - // - if (param.Parameters != null) - { - workingKey = generateWorkingKey(((KeyParameter)param.Parameters).GetKey()); - } - } - else if (parameters is KeyParameter) - { - workingKey = generateWorkingKey(((KeyParameter)parameters).GetKey()); - } - else - { - throw new ArgumentException("invalid parameter passed to Gost28147 init - " - + Platform.GetTypeName(parameters)); - } - } - - public string AlgorithmName - { - get { return "Gost28147Mac"; } - } - - public int GetMacSize() - { - return macSize; - } - - private int gost28147_mainStep(int n1, int key) - { - int cm = (key + n1); // CM1 - - // S-box replacing - - int om = S[ 0 + ((cm >> (0 * 4)) & 0xF)] << (0 * 4); - om += S[ 16 + ((cm >> (1 * 4)) & 0xF)] << (1 * 4); - om += S[ 32 + ((cm >> (2 * 4)) & 0xF)] << (2 * 4); - om += S[ 48 + ((cm >> (3 * 4)) & 0xF)] << (3 * 4); - om += S[ 64 + ((cm >> (4 * 4)) & 0xF)] << (4 * 4); - om += S[ 80 + ((cm >> (5 * 4)) & 0xF)] << (5 * 4); - om += S[ 96 + ((cm >> (6 * 4)) & 0xF)] << (6 * 4); - om += S[112 + ((cm >> (7 * 4)) & 0xF)] << (7 * 4); - -// return om << 11 | om >>> (32-11); // 11-leftshift - int omLeft = om << 11; - int omRight = (int)(((uint) om) >> (32 - 11)); // Note: Casts required to get unsigned bit rotation - - return omLeft | omRight; - } - - private void gost28147MacFunc( - int[] workingKey, - byte[] input, - int inOff, - byte[] output, - int outOff) - { - int N1, N2, tmp; //tmp -> for saving N1 - N1 = bytesToint(input, inOff); - N2 = bytesToint(input, inOff + 4); - - for (int k = 0; k < 2; k++) // 1-16 steps - { - for (int j = 0; j < 8; j++) - { - tmp = N1; - N1 = N2 ^ gost28147_mainStep(N1, workingKey[j]); // CM2 - N2 = tmp; - } - } - - intTobytes(N1, output, outOff); - intTobytes(N2, output, outOff + 4); - } - - //array of bytes to type int - private static int bytesToint( - byte[] input, - int inOff) - { - return (int)((input[inOff + 3] << 24) & 0xff000000) + ((input[inOff + 2] << 16) & 0xff0000) - + ((input[inOff + 1] << 8) & 0xff00) + (input[inOff] & 0xff); - } - - //int to array of bytes - private static void intTobytes( - int num, - byte[] output, - int outOff) - { - output[outOff + 3] = (byte)(num >> 24); - output[outOff + 2] = (byte)(num >> 16); - output[outOff + 1] = (byte)(num >> 8); - output[outOff] = (byte)num; - } - - private static byte[] CM5func( - byte[] buf, - int bufOff, - byte[] mac) - { - byte[] sum = new byte[buf.Length - bufOff]; - - Array.Copy(buf, bufOff, sum, 0, mac.Length); - - for (int i = 0; i != mac.Length; i++) - { - sum[i] = (byte)(sum[i] ^ mac[i]); - } - - return sum; - } - - public void Update( - byte input) - { - if (bufOff == buf.Length) - { - byte[] sumbuf = new byte[buf.Length]; - Array.Copy(buf, 0, sumbuf, 0, mac.Length); - - if (firstStep) - { - firstStep = false; - } - else - { - sumbuf = CM5func(buf, 0, mac); - } - - gost28147MacFunc(workingKey, sumbuf, 0, mac, 0); - bufOff = 0; - } - - buf[bufOff++] = input; - } - - public void BlockUpdate( - byte[] input, - int inOff, - int len) - { - if (len < 0) - throw new ArgumentException("Can't have a negative input length!"); - - int gapLen = blockSize - bufOff; - - if (len > gapLen) - { - Array.Copy(input, inOff, buf, bufOff, gapLen); - - byte[] sumbuf = new byte[buf.Length]; - Array.Copy(buf, 0, sumbuf, 0, mac.Length); - - if (firstStep) - { - firstStep = false; - } - else - { - sumbuf = CM5func(buf, 0, mac); - } - - gost28147MacFunc(workingKey, sumbuf, 0, mac, 0); - - bufOff = 0; - len -= gapLen; - inOff += gapLen; - - while (len > blockSize) - { - sumbuf = CM5func(input, inOff, mac); - gost28147MacFunc(workingKey, sumbuf, 0, mac, 0); - - len -= blockSize; - inOff += blockSize; - } - } - - Array.Copy(input, inOff, buf, bufOff, len); - - bufOff += len; - } - - public int DoFinal( - byte[] output, - int outOff) - { - //padding with zero - while (bufOff < blockSize) - { - buf[bufOff++] = 0; - } - - byte[] sumbuf = new byte[buf.Length]; - Array.Copy(buf, 0, sumbuf, 0, mac.Length); - - if (firstStep) - { - firstStep = false; - } - else - { - sumbuf = CM5func(buf, 0, mac); - } - - gost28147MacFunc(workingKey, sumbuf, 0, mac, 0); - - Array.Copy(mac, (mac.Length/2)-macSize, output, outOff, macSize); - - Reset(); - - return macSize; - } - - public void Reset() - { - // Clear the buffer. - Array.Clear(buf, 0, buf.Length); - bufOff = 0; - - firstStep = true; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/macs/HMac.cs b/bc-sharp-crypto/src/crypto/macs/HMac.cs deleted file mode 100644 index 460f3c5..0000000 --- a/bc-sharp-crypto/src/crypto/macs/HMac.cs +++ /dev/null @@ -1,154 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Macs -{ - /** - * HMAC implementation based on RFC2104 - * - * H(K XOR opad, H(K XOR ipad, text)) - */ - public class HMac - : IMac - { - private const byte IPAD = (byte)0x36; - private const byte OPAD = (byte)0x5C; - - private readonly IDigest digest; - private readonly int digestSize; - private readonly int blockLength; - private IMemoable ipadState; - private IMemoable opadState; - - private readonly byte[] inputPad; - private readonly byte[] outputBuf; - - public HMac(IDigest digest) - { - this.digest = digest; - this.digestSize = digest.GetDigestSize(); - this.blockLength = digest.GetByteLength(); - this.inputPad = new byte[blockLength]; - this.outputBuf = new byte[blockLength + digestSize]; - } - - public virtual string AlgorithmName - { - get { return digest.AlgorithmName + "/HMAC"; } - } - - public virtual IDigest GetUnderlyingDigest() - { - return digest; - } - - public virtual void Init(ICipherParameters parameters) - { - digest.Reset(); - - byte[] key = ((KeyParameter)parameters).GetKey(); - int keyLength = key.Length; - - if (keyLength > blockLength) - { - digest.BlockUpdate(key, 0, keyLength); - digest.DoFinal(inputPad, 0); - - keyLength = digestSize; - } - else - { - Array.Copy(key, 0, inputPad, 0, keyLength); - } - - Array.Clear(inputPad, keyLength, blockLength - keyLength); - Array.Copy(inputPad, 0, outputBuf, 0, blockLength); - - XorPad(inputPad, blockLength, IPAD); - XorPad(outputBuf, blockLength, OPAD); - - if (digest is IMemoable) - { - opadState = ((IMemoable)digest).Copy(); - - ((IDigest)opadState).BlockUpdate(outputBuf, 0, blockLength); - } - - digest.BlockUpdate(inputPad, 0, inputPad.Length); - - if (digest is IMemoable) - { - ipadState = ((IMemoable)digest).Copy(); - } - } - - public virtual int GetMacSize() - { - return digestSize; - } - - public virtual void Update(byte input) - { - digest.Update(input); - } - - public virtual void BlockUpdate(byte[] input, int inOff, int len) - { - digest.BlockUpdate(input, inOff, len); - } - - public virtual int DoFinal(byte[] output, int outOff) - { - digest.DoFinal(outputBuf, blockLength); - - if (opadState != null) - { - ((IMemoable)digest).Reset(opadState); - digest.BlockUpdate(outputBuf, blockLength, digest.GetDigestSize()); - } - else - { - digest.BlockUpdate(outputBuf, 0, outputBuf.Length); - } - - int len = digest.DoFinal(output, outOff); - - Array.Clear(outputBuf, blockLength, digestSize); - - if (ipadState != null) - { - ((IMemoable)digest).Reset(ipadState); - } - else - { - digest.BlockUpdate(inputPad, 0, inputPad.Length); - } - - return len; - } - - /** - * Reset the mac generator. - */ - public virtual void Reset() - { - // Reset underlying digest - digest.Reset(); - - // Initialise the digest - digest.BlockUpdate(inputPad, 0, inputPad.Length); - } - - private static void XorPad(byte[] pad, int len, byte n) - { - for (int i = 0; i < len; ++i) - { - pad[i] ^= n; - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/macs/ISO9797Alg3Mac.cs b/bc-sharp-crypto/src/crypto/macs/ISO9797Alg3Mac.cs deleted file mode 100644 index 6fee619..0000000 --- a/bc-sharp-crypto/src/crypto/macs/ISO9797Alg3Mac.cs +++ /dev/null @@ -1,275 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Engines; -using Org.BouncyCastle.Crypto.Modes; -using Org.BouncyCastle.Crypto.Paddings; -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Macs -{ - /** - * DES based CBC Block Cipher MAC according to ISO9797, algorithm 3 (ANSI X9.19 Retail MAC) - * - * This could as well be derived from CBCBlockCipherMac, but then the property mac in the base - * class must be changed to protected - */ - public class ISO9797Alg3Mac : IMac - { - private byte[] mac; - private byte[] buf; - private int bufOff; - private IBlockCipher cipher; - private IBlockCipherPadding padding; - private int macSize; - private KeyParameter lastKey2; - private KeyParameter lastKey3; - - /** - * create a Retail-MAC based on a CBC block cipher. This will produce an - * authentication code of the length of the block size of the cipher. - * - * @param cipher the cipher to be used as the basis of the MAC generation. This must - * be DESEngine. - */ - public ISO9797Alg3Mac( - IBlockCipher cipher) - : this(cipher, cipher.GetBlockSize() * 8, null) - { - } - - /** - * create a Retail-MAC based on a CBC block cipher. This will produce an - * authentication code of the length of the block size of the cipher. - * - * @param cipher the cipher to be used as the basis of the MAC generation. - * @param padding the padding to be used to complete the last block. - */ - public ISO9797Alg3Mac( - IBlockCipher cipher, - IBlockCipherPadding padding) - : this(cipher, cipher.GetBlockSize() * 8, padding) - { - } - - /** - * create a Retail-MAC based on a block cipher with the size of the - * MAC been given in bits. This class uses single DES CBC mode as the basis for the - * MAC generation. - *

- * Note: the size of the MAC must be at least 24 bits (FIPS Publication 81), - * or 16 bits if being used as a data authenticator (FIPS Publication 113), - * and in general should be less than the size of the block cipher as it reduces - * the chance of an exhaustive attack (see Handbook of Applied Cryptography). - *

- * @param cipher the cipher to be used as the basis of the MAC generation. - * @param macSizeInBits the size of the MAC in bits, must be a multiple of 8. - */ - public ISO9797Alg3Mac( - IBlockCipher cipher, - int macSizeInBits) - : this(cipher, macSizeInBits, null) - { - } - - /** - * create a standard MAC based on a block cipher with the size of the - * MAC been given in bits. This class uses single DES CBC mode as the basis for the - * MAC generation. The final block is decrypted and then encrypted using the - * middle and right part of the key. - *

- * Note: the size of the MAC must be at least 24 bits (FIPS Publication 81), - * or 16 bits if being used as a data authenticator (FIPS Publication 113), - * and in general should be less than the size of the block cipher as it reduces - * the chance of an exhaustive attack (see Handbook of Applied Cryptography). - *

- * @param cipher the cipher to be used as the basis of the MAC generation. - * @param macSizeInBits the size of the MAC in bits, must be a multiple of 8. - * @param padding the padding to be used to complete the last block. - */ - public ISO9797Alg3Mac( - IBlockCipher cipher, - int macSizeInBits, - IBlockCipherPadding padding) - { - if ((macSizeInBits % 8) != 0) - throw new ArgumentException("MAC size must be multiple of 8"); - - if (!(cipher is DesEngine)) - throw new ArgumentException("cipher must be instance of DesEngine"); - - this.cipher = new CbcBlockCipher(cipher); - this.padding = padding; - this.macSize = macSizeInBits / 8; - - mac = new byte[cipher.GetBlockSize()]; - buf = new byte[cipher.GetBlockSize()]; - bufOff = 0; - } - - public string AlgorithmName - { - get { return "ISO9797Alg3"; } - } - - public void Init( - ICipherParameters parameters) - { - Reset(); - - if (!(parameters is KeyParameter || parameters is ParametersWithIV)) - throw new ArgumentException("parameters must be an instance of KeyParameter or ParametersWithIV"); - - // KeyParameter must contain a double or triple length DES key, - // however the underlying cipher is a single DES. The middle and - // right key are used only in the final step. - - KeyParameter kp; - if (parameters is KeyParameter) - { - kp = (KeyParameter)parameters; - } - else - { - kp = (KeyParameter)((ParametersWithIV)parameters).Parameters; - } - - KeyParameter key1; - byte[] keyvalue = kp.GetKey(); - - if (keyvalue.Length == 16) - { // Double length DES key - key1 = new KeyParameter(keyvalue, 0, 8); - this.lastKey2 = new KeyParameter(keyvalue, 8, 8); - this.lastKey3 = key1; - } - else if (keyvalue.Length == 24) - { // Triple length DES key - key1 = new KeyParameter(keyvalue, 0, 8); - this.lastKey2 = new KeyParameter(keyvalue, 8, 8); - this.lastKey3 = new KeyParameter(keyvalue, 16, 8); - } - else - { - throw new ArgumentException("Key must be either 112 or 168 bit long"); - } - - if (parameters is ParametersWithIV) - { - cipher.Init(true, new ParametersWithIV(key1, ((ParametersWithIV)parameters).GetIV())); - } - else - { - cipher.Init(true, key1); - } - } - - public int GetMacSize() - { - return macSize; - } - - public void Update( - byte input) - { - if (bufOff == buf.Length) - { - cipher.ProcessBlock(buf, 0, mac, 0); - bufOff = 0; - } - - buf[bufOff++] = input; - } - - public void BlockUpdate( - byte[] input, - int inOff, - int len) - { - if (len < 0) - throw new ArgumentException("Can't have a negative input length!"); - - int blockSize = cipher.GetBlockSize(); - int resultLen = 0; - int gapLen = blockSize - bufOff; - - if (len > gapLen) - { - Array.Copy(input, inOff, buf, bufOff, gapLen); - - resultLen += cipher.ProcessBlock(buf, 0, mac, 0); - - bufOff = 0; - len -= gapLen; - inOff += gapLen; - - while (len > blockSize) - { - resultLen += cipher.ProcessBlock(input, inOff, mac, 0); - - len -= blockSize; - inOff += blockSize; - } - } - - Array.Copy(input, inOff, buf, bufOff, len); - - bufOff += len; - } - - public int DoFinal( - byte[] output, - int outOff) - { - int blockSize = cipher.GetBlockSize(); - - if (padding == null) - { - // pad with zeroes - while (bufOff < blockSize) - { - buf[bufOff++] = 0; - } - } - else - { - if (bufOff == blockSize) - { - cipher.ProcessBlock(buf, 0, mac, 0); - bufOff = 0; - } - - padding.AddPadding(buf, bufOff); - } - - cipher.ProcessBlock(buf, 0, mac, 0); - - // Added to code from base class - DesEngine deseng = new DesEngine(); - - deseng.Init(false, this.lastKey2); - deseng.ProcessBlock(mac, 0, mac, 0); - - deseng.Init(true, this.lastKey3); - deseng.ProcessBlock(mac, 0, mac, 0); - // **** - - Array.Copy(mac, 0, output, outOff, macSize); - - Reset(); - - return macSize; - } - - /** - * Reset the mac generator. - */ - public void Reset() - { - Array.Clear(buf, 0, buf.Length); - bufOff = 0; - - // reset the underlying cipher. - cipher.Reset(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/macs/Poly1305.cs b/bc-sharp-crypto/src/crypto/macs/Poly1305.cs deleted file mode 100644 index c0a660f..0000000 --- a/bc-sharp-crypto/src/crypto/macs/Poly1305.cs +++ /dev/null @@ -1,293 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Generators; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; - -namespace Org.BouncyCastle.Crypto.Macs -{ - - /// - /// Poly1305 message authentication code, designed by D. J. Bernstein. - /// - /// - /// Poly1305 computes a 128-bit (16 bytes) authenticator, using a 128 bit nonce and a 256 bit key - /// consisting of a 128 bit key applied to an underlying cipher, and a 128 bit key (with 106 - /// effective key bits) used in the authenticator. - /// - /// The polynomial calculation in this implementation is adapted from the public domain poly1305-donna-unrolled C implementation - /// by Andrew M (@floodyberry). - /// - /// - public class Poly1305 - : IMac - { - private const int BlockSize = 16; - - private readonly IBlockCipher cipher; - - private readonly byte[] singleByte = new byte[1]; - - // Initialised state - - /** Polynomial key */ - private uint r0, r1, r2, r3, r4; - - /** Precomputed 5 * r[1..4] */ - private uint s1, s2, s3, s4; - - /** Encrypted nonce */ - private uint k0, k1, k2, k3; - - // Accumulating state - - /** Current block of buffered input */ - private byte[] currentBlock = new byte[BlockSize]; - - /** Current offset in input buffer */ - private int currentBlockOffset = 0; - - /** Polynomial accumulator */ - private uint h0, h1, h2, h3, h4; - - /** - * Constructs a Poly1305 MAC, where the key passed to init() will be used directly. - */ - public Poly1305() - { - this.cipher = null; - } - - /** - * Constructs a Poly1305 MAC, using a 128 bit block cipher. - */ - public Poly1305(IBlockCipher cipher) - { - if (cipher.GetBlockSize() != BlockSize) - { - throw new ArgumentException("Poly1305 requires a 128 bit block cipher."); - } - this.cipher = cipher; - } - - /// - /// Initialises the Poly1305 MAC. - /// - /// a {@link ParametersWithIV} containing a 128 bit nonce and a {@link KeyParameter} with - /// a 256 bit key complying to the {@link Poly1305KeyGenerator Poly1305 key format}. - public void Init(ICipherParameters parameters) - { - byte[] nonce = null; - - if (cipher != null) - { - if (!(parameters is ParametersWithIV)) - throw new ArgumentException("Poly1305 requires an IV when used with a block cipher.", "parameters"); - - ParametersWithIV ivParams = (ParametersWithIV)parameters; - nonce = ivParams.GetIV(); - parameters = ivParams.Parameters; - } - - if (!(parameters is KeyParameter)) - throw new ArgumentException("Poly1305 requires a key."); - - KeyParameter keyParams = (KeyParameter)parameters; - - SetKey(keyParams.GetKey(), nonce); - - Reset(); - } - - private void SetKey(byte[] key, byte[] nonce) - { - if (key.Length != 32) - throw new ArgumentException("Poly1305 key must be 256 bits."); - - if (cipher != null && (nonce == null || nonce.Length != BlockSize)) - throw new ArgumentException("Poly1305 requires a 128 bit IV."); - - // Extract r portion of key (and "clamp" the values) - uint t0 = Pack.LE_To_UInt32(key, 0); - uint t1 = Pack.LE_To_UInt32(key, 4); - uint t2 = Pack.LE_To_UInt32(key, 8); - uint t3 = Pack.LE_To_UInt32(key, 12); - - // NOTE: The masks perform the key "clamping" implicitly - r0 = t0 & 0x03FFFFFFU; - r1 = ((t0 >> 26) | (t1 << 6)) & 0x03FFFF03U; - r2 = ((t1 >> 20) | (t2 << 12)) & 0x03FFC0FFU; - r3 = ((t2 >> 14) | (t3 << 18)) & 0x03F03FFFU; - r4 = (t3 >> 8) & 0x000FFFFFU; - - // Precompute multipliers - s1 = r1 * 5; - s2 = r2 * 5; - s3 = r3 * 5; - s4 = r4 * 5; - - byte[] kBytes; - int kOff; - - if (cipher == null) - { - kBytes = key; - kOff = BlockSize; - } - else - { - // Compute encrypted nonce - kBytes = new byte[BlockSize]; - kOff = 0; - - cipher.Init(true, new KeyParameter(key, BlockSize, BlockSize)); - cipher.ProcessBlock(nonce, 0, kBytes, 0); - } - - k0 = Pack.LE_To_UInt32(kBytes, kOff + 0); - k1 = Pack.LE_To_UInt32(kBytes, kOff + 4); - k2 = Pack.LE_To_UInt32(kBytes, kOff + 8); - k3 = Pack.LE_To_UInt32(kBytes, kOff + 12); - } - - public string AlgorithmName - { - get { return cipher == null ? "Poly1305" : "Poly1305-" + cipher.AlgorithmName; } - } - - public int GetMacSize() - { - return BlockSize; - } - - public void Update(byte input) - { - singleByte[0] = input; - BlockUpdate(singleByte, 0, 1); - } - - public void BlockUpdate(byte[] input, int inOff, int len) - { - int copied = 0; - while (len > copied) - { - if (currentBlockOffset == BlockSize) - { - ProcessBlock(); - currentBlockOffset = 0; - } - - int toCopy = System.Math.Min((len - copied), BlockSize - currentBlockOffset); - Array.Copy(input, copied + inOff, currentBlock, currentBlockOffset, toCopy); - copied += toCopy; - currentBlockOffset += toCopy; - } - - } - - private void ProcessBlock() - { - if (currentBlockOffset < BlockSize) - { - currentBlock[currentBlockOffset] = 1; - for (int i = currentBlockOffset + 1; i < BlockSize; i++) - { - currentBlock[i] = 0; - } - } - - ulong t0 = Pack.LE_To_UInt32(currentBlock, 0); - ulong t1 = Pack.LE_To_UInt32(currentBlock, 4); - ulong t2 = Pack.LE_To_UInt32(currentBlock, 8); - ulong t3 = Pack.LE_To_UInt32(currentBlock, 12); - - h0 += (uint)(t0 & 0x3ffffffU); - h1 += (uint)((((t1 << 32) | t0) >> 26) & 0x3ffffff); - h2 += (uint)((((t2 << 32) | t1) >> 20) & 0x3ffffff); - h3 += (uint)((((t3 << 32) | t2) >> 14) & 0x3ffffff); - h4 += (uint)(t3 >> 8); - - if (currentBlockOffset == BlockSize) - { - h4 += (1 << 24); - } - - ulong tp0 = mul32x32_64(h0,r0) + mul32x32_64(h1,s4) + mul32x32_64(h2,s3) + mul32x32_64(h3,s2) + mul32x32_64(h4,s1); - ulong tp1 = mul32x32_64(h0,r1) + mul32x32_64(h1,r0) + mul32x32_64(h2,s4) + mul32x32_64(h3,s3) + mul32x32_64(h4,s2); - ulong tp2 = mul32x32_64(h0,r2) + mul32x32_64(h1,r1) + mul32x32_64(h2,r0) + mul32x32_64(h3,s4) + mul32x32_64(h4,s3); - ulong tp3 = mul32x32_64(h0,r3) + mul32x32_64(h1,r2) + mul32x32_64(h2,r1) + mul32x32_64(h3,r0) + mul32x32_64(h4,s4); - ulong tp4 = mul32x32_64(h0,r4) + mul32x32_64(h1,r3) + mul32x32_64(h2,r2) + mul32x32_64(h3,r1) + mul32x32_64(h4,r0); - - h0 = (uint)tp0 & 0x3ffffff; tp1 += (tp0 >> 26); - h1 = (uint)tp1 & 0x3ffffff; tp2 += (tp1 >> 26); - h2 = (uint)tp2 & 0x3ffffff; tp3 += (tp2 >> 26); - h3 = (uint)tp3 & 0x3ffffff; tp4 += (tp3 >> 26); - h4 = (uint)tp4 & 0x3ffffff; - h0 += (uint)(tp4 >> 26) * 5; - h1 += (h0 >> 26); h0 &= 0x3ffffff; - } - - public int DoFinal(byte[] output, int outOff) - { - Check.DataLength(output, outOff, BlockSize, "Output buffer is too short."); - - if (currentBlockOffset > 0) - { - // Process padded block - ProcessBlock(); - } - - h1 += (h0 >> 26); h0 &= 0x3ffffff; - h2 += (h1 >> 26); h1 &= 0x3ffffff; - h3 += (h2 >> 26); h2 &= 0x3ffffff; - h4 += (h3 >> 26); h3 &= 0x3ffffff; - h0 += (h4 >> 26) * 5; h4 &= 0x3ffffff; - h1 += (h0 >> 26); h0 &= 0x3ffffff; - - uint g0, g1, g2, g3, g4, b; - g0 = h0 + 5; b = g0 >> 26; g0 &= 0x3ffffff; - g1 = h1 + b; b = g1 >> 26; g1 &= 0x3ffffff; - g2 = h2 + b; b = g2 >> 26; g2 &= 0x3ffffff; - g3 = h3 + b; b = g3 >> 26; g3 &= 0x3ffffff; - g4 = h4 + b - (1 << 26); - - b = (g4 >> 31) - 1; - uint nb = ~b; - h0 = (h0 & nb) | (g0 & b); - h1 = (h1 & nb) | (g1 & b); - h2 = (h2 & nb) | (g2 & b); - h3 = (h3 & nb) | (g3 & b); - h4 = (h4 & nb) | (g4 & b); - - ulong f0, f1, f2, f3; - f0 = ((h0 ) | (h1 << 26)) + (ulong)k0; - f1 = ((h1 >> 6 ) | (h2 << 20)) + (ulong)k1; - f2 = ((h2 >> 12) | (h3 << 14)) + (ulong)k2; - f3 = ((h3 >> 18) | (h4 << 8 )) + (ulong)k3; - - Pack.UInt32_To_LE((uint)f0, output, outOff); - f1 += (f0 >> 32); - Pack.UInt32_To_LE((uint)f1, output, outOff + 4); - f2 += (f1 >> 32); - Pack.UInt32_To_LE((uint)f2, output, outOff + 8); - f3 += (f2 >> 32); - Pack.UInt32_To_LE((uint)f3, output, outOff + 12); - - Reset(); - return BlockSize; - } - - public void Reset() - { - currentBlockOffset = 0; - - h0 = h1 = h2 = h3 = h4 = 0; - } - - private static ulong mul32x32_64(uint i1, uint i2) - { - return ((ulong)i1) * i2; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/macs/SipHash.cs b/bc-sharp-crypto/src/crypto/macs/SipHash.cs deleted file mode 100644 index e1a19fa..0000000 --- a/bc-sharp-crypto/src/crypto/macs/SipHash.cs +++ /dev/null @@ -1,199 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; - -namespace Org.BouncyCastle.Crypto.Macs -{ - /// - /// Implementation of SipHash as specified in "SipHash: a fast short-input PRF", by Jean-Philippe - /// Aumasson and Daniel J. Bernstein (https://131002.net/siphash/siphash.pdf). - /// - /// - /// "SipHash is a family of PRFs SipHash-c-d where the integer parameters c and d are the number of - /// compression rounds and the number of finalization rounds. A compression round is identical to a - /// finalization round and this round function is called SipRound. Given a 128-bit key k and a - /// (possibly empty) byte string m, SipHash-c-d returns a 64-bit value..." - /// - public class SipHash - : IMac - { - protected readonly int c, d; - - protected long k0, k1; - protected long v0, v1, v2, v3; - - protected long m = 0; - protected int wordPos = 0; - protected int wordCount = 0; - - /// SipHash-2-4 - public SipHash() - : this(2, 4) - { - } - - /// SipHash-c-d - /// the number of compression rounds - /// the number of finalization rounds - public SipHash(int c, int d) - { - this.c = c; - this.d = d; - } - - public virtual string AlgorithmName - { - get { return "SipHash-" + c + "-" + d; } - } - - public virtual int GetMacSize() - { - return 8; - } - - public virtual void Init(ICipherParameters parameters) - { - KeyParameter keyParameter = parameters as KeyParameter; - if (keyParameter == null) - throw new ArgumentException("must be an instance of KeyParameter", "parameters"); - byte[] key = keyParameter.GetKey(); - if (key.Length != 16) - throw new ArgumentException("must be a 128-bit key", "parameters"); - - this.k0 = (long)Pack.LE_To_UInt64(key, 0); - this.k1 = (long)Pack.LE_To_UInt64(key, 8); - - Reset(); - } - - public virtual void Update(byte input) - { - m = (long)(((ulong)m >> 8) | ((ulong)input << 56)); - - if (++wordPos == 8) - { - ProcessMessageWord(); - wordPos = 0; - } - } - - public virtual void BlockUpdate(byte[] input, int offset, int length) - { - int i = 0, fullWords = length & ~7; - if (wordPos == 0) - { - for (; i < fullWords; i += 8) - { - m = (long)Pack.LE_To_UInt64(input, offset + i); - ProcessMessageWord(); - } - for (; i < length; ++i) - { - m = (long)(((ulong)m >> 8) | ((ulong)input[offset + i] << 56)); - } - wordPos = length - fullWords; - } - else - { - int bits = wordPos << 3; - for (; i < fullWords; i += 8) - { - ulong n = Pack.LE_To_UInt64(input, offset + i); - m = (long)((n << bits) | ((ulong)m >> -bits)); - ProcessMessageWord(); - m = (long)n; - } - for (; i < length; ++i) - { - m = (long)(((ulong)m >> 8) | ((ulong)input[offset + i] << 56)); - - if (++wordPos == 8) - { - ProcessMessageWord(); - wordPos = 0; - } - } - } - } - - public virtual long DoFinal() - { - // NOTE: 2 distinct shifts to avoid "64-bit shift" when wordPos == 0 - m = (long)((ulong)m >> ((7 - wordPos) << 3)); - m = (long)((ulong)m >> 8); - m = (long)((ulong)m | ((ulong)((wordCount << 3) + wordPos) << 56)); - - ProcessMessageWord(); - - v2 ^= 0xffL; - - ApplySipRounds(d); - - long result = v0 ^ v1 ^ v2 ^ v3; - - Reset(); - - return result; - } - - public virtual int DoFinal(byte[] output, int outOff) - { - long result = DoFinal(); - Pack.UInt64_To_LE((ulong)result, output, outOff); - return 8; - } - - public virtual void Reset() - { - v0 = k0 ^ 0x736f6d6570736575L; - v1 = k1 ^ 0x646f72616e646f6dL; - v2 = k0 ^ 0x6c7967656e657261L; - v3 = k1 ^ 0x7465646279746573L; - - m = 0; - wordPos = 0; - wordCount = 0; - } - - protected virtual void ProcessMessageWord() - { - ++wordCount; - v3 ^= m; - ApplySipRounds(c); - v0 ^= m; - } - - protected virtual void ApplySipRounds(int n) - { - long r0 = v0, r1 = v1, r2 = v2, r3 = v3; - - for (int r = 0; r < n; ++r) - { - r0 += r1; - r2 += r3; - r1 = RotateLeft(r1, 13); - r3 = RotateLeft(r3, 16); - r1 ^= r0; - r3 ^= r2; - r0 = RotateLeft(r0, 32); - r2 += r1; - r0 += r3; - r1 = RotateLeft(r1, 17); - r3 = RotateLeft(r3, 21); - r1 ^= r2; - r3 ^= r0; - r2 = RotateLeft(r2, 32); - } - - v0 = r0; v1 = r1; v2 = r2; v3 = r3; - } - - protected static long RotateLeft(long x, int n) - { - ulong ux = (ulong)x; - ux = (ux << n) | (ux >> -n); - return (long)ux; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/macs/SkeinMac.cs b/bc-sharp-crypto/src/crypto/macs/SkeinMac.cs deleted file mode 100644 index 07eff24..0000000 --- a/bc-sharp-crypto/src/crypto/macs/SkeinMac.cs +++ /dev/null @@ -1,118 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Macs -{ - - /// - /// Implementation of the Skein parameterised MAC function in 256, 512 and 1024 bit block sizes, - /// based on the Threefish tweakable block cipher. - /// - /// - /// This is the 1.3 version of Skein defined in the Skein hash function submission to the NIST SHA-3 - /// competition in October 2010. - ///

- /// Skein was designed by Niels Ferguson - Stefan Lucks - Bruce Schneier - Doug Whiting - Mihir - /// Bellare - Tadayoshi Kohno - Jon Callas - Jesse Walker. - /// - /// - /// - public class SkeinMac - : IMac - { - ///

- /// 256 bit block size - Skein-256 - /// - public const int SKEIN_256 = SkeinEngine.SKEIN_256; - /// - /// 512 bit block size - Skein-512 - /// - public const int SKEIN_512 = SkeinEngine.SKEIN_512; - /// - /// 1024 bit block size - Skein-1024 - /// - public const int SKEIN_1024 = SkeinEngine.SKEIN_1024; - - private readonly SkeinEngine engine; - - /// - /// Constructs a Skein MAC with an internal state size and output size. - /// - /// the internal state size in bits - one of or - /// . - /// the output/MAC size to produce in bits, which must be an integral number of - /// bytes. - public SkeinMac(int stateSizeBits, int digestSizeBits) - { - this.engine = new SkeinEngine(stateSizeBits, digestSizeBits); - } - - public SkeinMac(SkeinMac mac) - { - this.engine = new SkeinEngine(mac.engine); - } - - public string AlgorithmName - { - get { return "Skein-MAC-" + (engine.BlockSize * 8) + "-" + (engine.OutputSize * 8); } - } - - /// - /// Optionally initialises the Skein digest with the provided parameters. - /// - /// See for details on the parameterisation of the Skein hash function. - /// the parameters to apply to this engine, or null to use no parameters. - public void Init(ICipherParameters parameters) - { - SkeinParameters skeinParameters; - if (parameters is SkeinParameters) - { - skeinParameters = (SkeinParameters)parameters; - } - else if (parameters is KeyParameter) - { - skeinParameters = new SkeinParameters.Builder().SetKey(((KeyParameter)parameters).GetKey()).Build(); - } - else - { - throw new ArgumentException("Invalid parameter passed to Skein MAC init - " - + Platform.GetTypeName(parameters)); - } - if (skeinParameters.GetKey() == null) - { - throw new ArgumentException("Skein MAC requires a key parameter."); - } - engine.Init(skeinParameters); - } - - public int GetMacSize() - { - return engine.OutputSize; - } - - public void Reset() - { - engine.Reset(); - } - - public void Update(byte inByte) - { - engine.Update(inByte); - } - - public void BlockUpdate(byte[] input, int inOff, int len) - { - engine.Update(input, inOff, len); - } - - public int DoFinal(byte[] output, int outOff) - { - return engine.DoFinal(output, outOff); - } - - } -} diff --git a/bc-sharp-crypto/src/crypto/macs/VMPCMac.cs b/bc-sharp-crypto/src/crypto/macs/VMPCMac.cs deleted file mode 100644 index 6f2da07..0000000 --- a/bc-sharp-crypto/src/crypto/macs/VMPCMac.cs +++ /dev/null @@ -1,173 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Macs -{ - public class VmpcMac - : IMac - { - private byte g; - - private byte n = 0; - private byte[] P = null; - private byte s = 0; - - private byte[] T; - private byte[] workingIV; - - private byte[] workingKey; - - private byte x1, x2, x3, x4; - - public virtual int DoFinal(byte[] output, int outOff) - { - // Execute the Post-Processing Phase - for (int r = 1; r < 25; r++) - { - s = P[(s + P[n & 0xff]) & 0xff]; - - x4 = P[(x4 + x3 + r) & 0xff]; - x3 = P[(x3 + x2 + r) & 0xff]; - x2 = P[(x2 + x1 + r) & 0xff]; - x1 = P[(x1 + s + r) & 0xff]; - T[g & 0x1f] = (byte) (T[g & 0x1f] ^ x1); - T[(g + 1) & 0x1f] = (byte) (T[(g + 1) & 0x1f] ^ x2); - T[(g + 2) & 0x1f] = (byte) (T[(g + 2) & 0x1f] ^ x3); - T[(g + 3) & 0x1f] = (byte) (T[(g + 3) & 0x1f] ^ x4); - g = (byte) ((g + 4) & 0x1f); - - byte temp = P[n & 0xff]; - P[n & 0xff] = P[s & 0xff]; - P[s & 0xff] = temp; - n = (byte) ((n + 1) & 0xff); - } - - // Input T to the IV-phase of the VMPC KSA - for (int m = 0; m < 768; m++) - { - s = P[(s + P[m & 0xff] + T[m & 0x1f]) & 0xff]; - byte temp = P[m & 0xff]; - P[m & 0xff] = P[s & 0xff]; - P[s & 0xff] = temp; - } - - // Store 20 new outputs of the VMPC Stream Cipher input table M - byte[] M = new byte[20]; - for (int i = 0; i < 20; i++) - { - s = P[(s + P[i & 0xff]) & 0xff]; - M[i] = P[(P[(P[s & 0xff]) & 0xff] + 1) & 0xff]; - - byte temp = P[i & 0xff]; - P[i & 0xff] = P[s & 0xff]; - P[s & 0xff] = temp; - } - - Array.Copy(M, 0, output, outOff, M.Length); - Reset(); - - return M.Length; - } - - public virtual string AlgorithmName - { - get { return "VMPC-MAC"; } - } - - public virtual int GetMacSize() - { - return 20; - } - - public virtual void Init(ICipherParameters parameters) - { - if (!(parameters is ParametersWithIV)) - throw new ArgumentException("VMPC-MAC Init parameters must include an IV", "parameters"); - - ParametersWithIV ivParams = (ParametersWithIV) parameters; - KeyParameter key = (KeyParameter) ivParams.Parameters; - - if (!(ivParams.Parameters is KeyParameter)) - throw new ArgumentException("VMPC-MAC Init parameters must include a key", "parameters"); - - this.workingIV = ivParams.GetIV(); - - if (workingIV == null || workingIV.Length < 1 || workingIV.Length > 768) - throw new ArgumentException("VMPC-MAC requires 1 to 768 bytes of IV", "parameters"); - - this.workingKey = key.GetKey(); - - Reset(); - - } - - private void initKey(byte[] keyBytes, byte[] ivBytes) - { - s = 0; - P = new byte[256]; - for (int i = 0; i < 256; i++) - { - P[i] = (byte) i; - } - for (int m = 0; m < 768; m++) - { - s = P[(s + P[m & 0xff] + keyBytes[m % keyBytes.Length]) & 0xff]; - byte temp = P[m & 0xff]; - P[m & 0xff] = P[s & 0xff]; - P[s & 0xff] = temp; - } - for (int m = 0; m < 768; m++) - { - s = P[(s + P[m & 0xff] + ivBytes[m % ivBytes.Length]) & 0xff]; - byte temp = P[m & 0xff]; - P[m & 0xff] = P[s & 0xff]; - P[s & 0xff] = temp; - } - n = 0; - } - - public virtual void Reset() - { - initKey(this.workingKey, this.workingIV); - g = x1 = x2 = x3 = x4 = n = 0; - T = new byte[32]; - for (int i = 0; i < 32; i++) - { - T[i] = 0; - } - } - - public virtual void Update(byte input) - { - s = P[(s + P[n & 0xff]) & 0xff]; - byte c = (byte) (input ^ P[(P[(P[s & 0xff]) & 0xff] + 1) & 0xff]); - - x4 = P[(x4 + x3) & 0xff]; - x3 = P[(x3 + x2) & 0xff]; - x2 = P[(x2 + x1) & 0xff]; - x1 = P[(x1 + s + c) & 0xff]; - T[g & 0x1f] = (byte) (T[g & 0x1f] ^ x1); - T[(g + 1) & 0x1f] = (byte) (T[(g + 1) & 0x1f] ^ x2); - T[(g + 2) & 0x1f] = (byte) (T[(g + 2) & 0x1f] ^ x3); - T[(g + 3) & 0x1f] = (byte) (T[(g + 3) & 0x1f] ^ x4); - g = (byte) ((g + 4) & 0x1f); - - byte temp = P[n & 0xff]; - P[n & 0xff] = P[s & 0xff]; - P[s & 0xff] = temp; - n = (byte) ((n + 1) & 0xff); - } - - public virtual void BlockUpdate(byte[] input, int inOff, int len) - { - if ((inOff + len) > input.Length) - throw new DataLengthException("input buffer too short"); - - for (int i = 0; i < len; i++) - { - Update(input[inOff + i]); - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/modes/CbcBlockCipher.cs b/bc-sharp-crypto/src/crypto/modes/CbcBlockCipher.cs deleted file mode 100644 index 9345fd8..0000000 --- a/bc-sharp-crypto/src/crypto/modes/CbcBlockCipher.cs +++ /dev/null @@ -1,241 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Modes -{ - /** - * implements Cipher-Block-Chaining (CBC) mode on top of a simple cipher. - */ - public class CbcBlockCipher - : IBlockCipher - { - private byte[] IV, cbcV, cbcNextV; - private int blockSize; - private IBlockCipher cipher; - private bool encrypting; - - /** - * Basic constructor. - * - * @param cipher the block cipher to be used as the basis of chaining. - */ - public CbcBlockCipher( - IBlockCipher cipher) - { - this.cipher = cipher; - this.blockSize = cipher.GetBlockSize(); - - this.IV = new byte[blockSize]; - this.cbcV = new byte[blockSize]; - this.cbcNextV = new byte[blockSize]; - } - - /** - * return the underlying block cipher that we are wrapping. - * - * @return the underlying block cipher that we are wrapping. - */ - public IBlockCipher GetUnderlyingCipher() - { - return cipher; - } - - /** - * Initialise the cipher and, possibly, the initialisation vector (IV). - * If an IV isn't passed as part of the parameter, the IV will be all zeros. - * - * @param forEncryption if true the cipher is initialised for - * encryption, if false for decryption. - * @param param the key and other data required by the cipher. - * @exception ArgumentException if the parameters argument is - * inappropriate. - */ - public void Init( - bool forEncryption, - ICipherParameters parameters) - { - bool oldEncrypting = this.encrypting; - - this.encrypting = forEncryption; - - if (parameters is ParametersWithIV) - { - ParametersWithIV ivParam = (ParametersWithIV)parameters; - byte[] iv = ivParam.GetIV(); - - if (iv.Length != blockSize) - { - throw new ArgumentException("initialisation vector must be the same length as block size"); - } - - Array.Copy(iv, 0, IV, 0, iv.Length); - - parameters = ivParam.Parameters; - } - - Reset(); - - // if null it's an IV changed only. - if (parameters != null) - { - cipher.Init(encrypting, parameters); - } - else if (oldEncrypting != encrypting) - { - throw new ArgumentException("cannot change encrypting state without providing key."); - } - } - - /** - * return the algorithm name and mode. - * - * @return the name of the underlying algorithm followed by "/CBC". - */ - public string AlgorithmName - { - get { return cipher.AlgorithmName + "/CBC"; } - } - - public bool IsPartialBlockOkay - { - get { return false; } - } - - /** - * return the block size of the underlying cipher. - * - * @return the block size of the underlying cipher. - */ - public int GetBlockSize() - { - return cipher.GetBlockSize(); - } - - /** - * Process one block of input from the array in and write it to - * the out array. - * - * @param in the array containing the input data. - * @param inOff offset into the in array the data starts at. - * @param out the array the output data will be copied into. - * @param outOff the offset into the out array the output will start at. - * @exception DataLengthException if there isn't enough data in in, or - * space in out. - * @exception InvalidOperationException if the cipher isn't initialised. - * @return the number of bytes processed and produced. - */ - public int ProcessBlock( - byte[] input, - int inOff, - byte[] output, - int outOff) - { - return (encrypting) - ? EncryptBlock(input, inOff, output, outOff) - : DecryptBlock(input, inOff, output, outOff); - } - - /** - * reset the chaining vector back to the IV and reset the underlying - * cipher. - */ - public void Reset() - { - Array.Copy(IV, 0, cbcV, 0, IV.Length); - Array.Clear(cbcNextV, 0, cbcNextV.Length); - - cipher.Reset(); - } - - /** - * Do the appropriate chaining step for CBC mode encryption. - * - * @param in the array containing the data to be encrypted. - * @param inOff offset into the in array the data starts at. - * @param out the array the encrypted data will be copied into. - * @param outOff the offset into the out array the output will start at. - * @exception DataLengthException if there isn't enough data in in, or - * space in out. - * @exception InvalidOperationException if the cipher isn't initialised. - * @return the number of bytes processed and produced. - */ - private int EncryptBlock( - byte[] input, - int inOff, - byte[] outBytes, - int outOff) - { - if ((inOff + blockSize) > input.Length) - { - throw new DataLengthException("input buffer too short"); - } - - /* - * XOR the cbcV and the input, - * then encrypt the cbcV - */ - for (int i = 0; i < blockSize; i++) - { - cbcV[i] ^= input[inOff + i]; - } - - int length = cipher.ProcessBlock(cbcV, 0, outBytes, outOff); - - /* - * copy ciphertext to cbcV - */ - Array.Copy(outBytes, outOff, cbcV, 0, cbcV.Length); - - return length; - } - - /** - * Do the appropriate chaining step for CBC mode decryption. - * - * @param in the array containing the data to be decrypted. - * @param inOff offset into the in array the data starts at. - * @param out the array the decrypted data will be copied into. - * @param outOff the offset into the out array the output will start at. - * @exception DataLengthException if there isn't enough data in in, or - * space in out. - * @exception InvalidOperationException if the cipher isn't initialised. - * @return the number of bytes processed and produced. - */ - private int DecryptBlock( - byte[] input, - int inOff, - byte[] outBytes, - int outOff) - { - if ((inOff + blockSize) > input.Length) - { - throw new DataLengthException("input buffer too short"); - } - - Array.Copy(input, inOff, cbcNextV, 0, blockSize); - - int length = cipher.ProcessBlock(input, inOff, outBytes, outOff); - - /* - * XOR the cbcV and the output - */ - for (int i = 0; i < blockSize; i++) - { - outBytes[outOff + i] ^= cbcV[i]; - } - - /* - * swap the back up buffer into next position - */ - byte[] tmp; - - tmp = cbcV; - cbcV = cbcNextV; - cbcNextV = tmp; - - return length; - } - } - -} diff --git a/bc-sharp-crypto/src/crypto/modes/CcmBlockCipher.cs b/bc-sharp-crypto/src/crypto/modes/CcmBlockCipher.cs deleted file mode 100644 index 4de40d5..0000000 --- a/bc-sharp-crypto/src/crypto/modes/CcmBlockCipher.cs +++ /dev/null @@ -1,449 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Macs; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Modes -{ - /** - * Implements the Counter with Cipher Block Chaining mode (CCM) detailed in - * NIST Special Publication 800-38C. - *

- * Note: this mode is a packet mode - it needs all the data up front. - *

- */ - public class CcmBlockCipher - : IAeadBlockCipher - { - private static readonly int BlockSize = 16; - - private readonly IBlockCipher cipher; - private readonly byte[] macBlock; - private bool forEncryption; - private byte[] nonce; - private byte[] initialAssociatedText; - private int macSize; - private ICipherParameters keyParam; - private readonly MemoryStream associatedText = new MemoryStream(); - private readonly MemoryStream data = new MemoryStream(); - - /** - * Basic constructor. - * - * @param cipher the block cipher to be used. - */ - public CcmBlockCipher( - IBlockCipher cipher) - { - this.cipher = cipher; - this.macBlock = new byte[BlockSize]; - - if (cipher.GetBlockSize() != BlockSize) - throw new ArgumentException("cipher required with a block size of " + BlockSize + "."); - } - - /** - * return the underlying block cipher that we are wrapping. - * - * @return the underlying block cipher that we are wrapping. - */ - public virtual IBlockCipher GetUnderlyingCipher() - { - return cipher; - } - - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - this.forEncryption = forEncryption; - - ICipherParameters cipherParameters; - if (parameters is AeadParameters) - { - AeadParameters param = (AeadParameters) parameters; - - nonce = param.GetNonce(); - initialAssociatedText = param.GetAssociatedText(); - macSize = param.MacSize / 8; - cipherParameters = param.Key; - } - else if (parameters is ParametersWithIV) - { - ParametersWithIV param = (ParametersWithIV) parameters; - - nonce = param.GetIV(); - initialAssociatedText = null; - macSize = macBlock.Length / 2; - cipherParameters = param.Parameters; - } - else - { - throw new ArgumentException("invalid parameters passed to CCM"); - } - - // NOTE: Very basic support for key re-use, but no performance gain from it - if (cipherParameters != null) - { - keyParam = cipherParameters; - } - - if (nonce == null || nonce.Length < 7 || nonce.Length > 13) - { - throw new ArgumentException("nonce must have length from 7 to 13 octets"); - } - - Reset(); - } - - public virtual string AlgorithmName - { - get { return cipher.AlgorithmName + "/CCM"; } - } - - public virtual int GetBlockSize() - { - return cipher.GetBlockSize(); - } - - public virtual void ProcessAadByte(byte input) - { - associatedText.WriteByte(input); - } - - public virtual void ProcessAadBytes(byte[] inBytes, int inOff, int len) - { - // TODO: Process AAD online - associatedText.Write(inBytes, inOff, len); - } - - public virtual int ProcessByte( - byte input, - byte[] outBytes, - int outOff) - { - data.WriteByte(input); - - return 0; - } - - public virtual int ProcessBytes( - byte[] inBytes, - int inOff, - int inLen, - byte[] outBytes, - int outOff) - { - Check.DataLength(inBytes, inOff, inLen, "Input buffer too short"); - - data.Write(inBytes, inOff, inLen); - - return 0; - } - - public virtual int DoFinal( - byte[] outBytes, - int outOff) - { -#if PORTABLE - byte[] input = data.ToArray(); - int inLen = input.Length; -#else - byte[] input = data.GetBuffer(); - int inLen = (int)data.Position; -#endif - - int len = ProcessPacket(input, 0, inLen, outBytes, outOff); - - Reset(); - - return len; - } - - public virtual void Reset() - { - cipher.Reset(); - associatedText.SetLength(0); - data.SetLength(0); - } - - /** - * Returns a byte array containing the mac calculated as part of the - * last encrypt or decrypt operation. - * - * @return the last mac calculated. - */ - public virtual byte[] GetMac() - { - return Arrays.CopyOfRange(macBlock, 0, macSize); - } - - public virtual int GetUpdateOutputSize( - int len) - { - return 0; - } - - public virtual int GetOutputSize( - int len) - { - int totalData = (int)data.Length + len; - - if (forEncryption) - { - return totalData + macSize; - } - - return totalData < macSize ? 0 : totalData - macSize; - } - - /** - * Process a packet of data for either CCM decryption or encryption. - * - * @param in data for processing. - * @param inOff offset at which data starts in the input array. - * @param inLen length of the data in the input array. - * @return a byte array containing the processed input.. - * @throws IllegalStateException if the cipher is not appropriately set up. - * @throws InvalidCipherTextException if the input data is truncated or the mac check fails. - */ - public virtual byte[] ProcessPacket(byte[] input, int inOff, int inLen) - { - byte[] output; - - if (forEncryption) - { - output = new byte[inLen + macSize]; - } - else - { - if (inLen < macSize) - throw new InvalidCipherTextException("data too short"); - - output = new byte[inLen - macSize]; - } - - ProcessPacket(input, inOff, inLen, output, 0); - - return output; - } - - /** - * Process a packet of data for either CCM decryption or encryption. - * - * @param in data for processing. - * @param inOff offset at which data starts in the input array. - * @param inLen length of the data in the input array. - * @param output output array. - * @param outOff offset into output array to start putting processed bytes. - * @return the number of bytes added to output. - * @throws IllegalStateException if the cipher is not appropriately set up. - * @throws InvalidCipherTextException if the input data is truncated or the mac check fails. - * @throws DataLengthException if output buffer too short. - */ - public virtual int ProcessPacket(byte[] input, int inOff, int inLen, byte[] output, int outOff) - { - // TODO: handle null keyParam (e.g. via RepeatedKeySpec) - // Need to keep the CTR and CBC Mac parts around and reset - if (keyParam == null) - throw new InvalidOperationException("CCM cipher unitialized."); - - int n = nonce.Length; - int q = 15 - n; - if (q < 4) - { - int limitLen = 1 << (8 * q); - if (inLen >= limitLen) - throw new InvalidOperationException("CCM packet too large for choice of q."); - } - - byte[] iv = new byte[BlockSize]; - iv[0] = (byte)((q - 1) & 0x7); - nonce.CopyTo(iv, 1); - - IBlockCipher ctrCipher = new SicBlockCipher(cipher); - ctrCipher.Init(forEncryption, new ParametersWithIV(keyParam, iv)); - - int outputLen; - int inIndex = inOff; - int outIndex = outOff; - - if (forEncryption) - { - outputLen = inLen + macSize; - Check.OutputLength(output, outOff, outputLen, "Output buffer too short."); - - CalculateMac(input, inOff, inLen, macBlock); - - byte[] encMac = new byte[BlockSize]; - ctrCipher.ProcessBlock(macBlock, 0, encMac, 0); // S0 - - while (inIndex < (inOff + inLen - BlockSize)) // S1... - { - ctrCipher.ProcessBlock(input, inIndex, output, outIndex); - outIndex += BlockSize; - inIndex += BlockSize; - } - - byte[] block = new byte[BlockSize]; - - Array.Copy(input, inIndex, block, 0, inLen + inOff - inIndex); - - ctrCipher.ProcessBlock(block, 0, block, 0); - - Array.Copy(block, 0, output, outIndex, inLen + inOff - inIndex); - - Array.Copy(encMac, 0, output, outOff + inLen, macSize); - } - else - { - if (inLen < macSize) - throw new InvalidCipherTextException("data too short"); - - outputLen = inLen - macSize; - Check.OutputLength(output, outOff, outputLen, "Output buffer too short."); - - Array.Copy(input, inOff + outputLen, macBlock, 0, macSize); - - ctrCipher.ProcessBlock(macBlock, 0, macBlock, 0); - - for (int i = macSize; i != macBlock.Length; i++) - { - macBlock[i] = 0; - } - - while (inIndex < (inOff + outputLen - BlockSize)) - { - ctrCipher.ProcessBlock(input, inIndex, output, outIndex); - outIndex += BlockSize; - inIndex += BlockSize; - } - - byte[] block = new byte[BlockSize]; - - Array.Copy(input, inIndex, block, 0, outputLen - (inIndex - inOff)); - - ctrCipher.ProcessBlock(block, 0, block, 0); - - Array.Copy(block, 0, output, outIndex, outputLen - (inIndex - inOff)); - - byte[] calculatedMacBlock = new byte[BlockSize]; - - CalculateMac(output, outOff, outputLen, calculatedMacBlock); - - if (!Arrays.ConstantTimeAreEqual(macBlock, calculatedMacBlock)) - throw new InvalidCipherTextException("mac check in CCM failed"); - } - - return outputLen; - } - - private int CalculateMac(byte[] data, int dataOff, int dataLen, byte[] macBlock) - { - IMac cMac = new CbcBlockCipherMac(cipher, macSize * 8); - - cMac.Init(keyParam); - - // - // build b0 - // - byte[] b0 = new byte[16]; - - if (HasAssociatedText()) - { - b0[0] |= 0x40; - } - - b0[0] |= (byte)((((cMac.GetMacSize() - 2) / 2) & 0x7) << 3); - - b0[0] |= (byte)(((15 - nonce.Length) - 1) & 0x7); - - Array.Copy(nonce, 0, b0, 1, nonce.Length); - - int q = dataLen; - int count = 1; - while (q > 0) - { - b0[b0.Length - count] = (byte)(q & 0xff); - q >>= 8; - count++; - } - - cMac.BlockUpdate(b0, 0, b0.Length); - - // - // process associated text - // - if (HasAssociatedText()) - { - int extra; - - int textLength = GetAssociatedTextLength(); - if (textLength < ((1 << 16) - (1 << 8))) - { - cMac.Update((byte)(textLength >> 8)); - cMac.Update((byte)textLength); - - extra = 2; - } - else // can't go any higher than 2^32 - { - cMac.Update((byte)0xff); - cMac.Update((byte)0xfe); - cMac.Update((byte)(textLength >> 24)); - cMac.Update((byte)(textLength >> 16)); - cMac.Update((byte)(textLength >> 8)); - cMac.Update((byte)textLength); - - extra = 6; - } - - if (initialAssociatedText != null) - { - cMac.BlockUpdate(initialAssociatedText, 0, initialAssociatedText.Length); - } - if (associatedText.Position > 0) - { -#if PORTABLE - byte[] input = associatedText.ToArray(); - int len = input.Length; -#else - byte[] input = associatedText.GetBuffer(); - int len = (int)associatedText.Position; -#endif - - cMac.BlockUpdate(input, 0, len); - } - - extra = (extra + textLength) % 16; - if (extra != 0) - { - for (int i = extra; i < 16; ++i) - { - cMac.Update((byte)0x00); - } - } - } - - // - // add the text - // - cMac.BlockUpdate(data, dataOff, dataLen); - - return cMac.DoFinal(macBlock, 0); - } - - private int GetAssociatedTextLength() - { - return (int)associatedText.Length + ((initialAssociatedText == null) ? 0 : initialAssociatedText.Length); - } - - private bool HasAssociatedText() - { - return GetAssociatedTextLength() > 0; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/modes/CfbBlockCipher.cs b/bc-sharp-crypto/src/crypto/modes/CfbBlockCipher.cs deleted file mode 100644 index 4337165..0000000 --- a/bc-sharp-crypto/src/crypto/modes/CfbBlockCipher.cs +++ /dev/null @@ -1,224 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Modes -{ - /** - * implements a Cipher-FeedBack (CFB) mode on top of a simple cipher. - */ - public class CfbBlockCipher - : IBlockCipher - { - private byte[] IV; - private byte[] cfbV; - private byte[] cfbOutV; - private bool encrypting; - - private readonly int blockSize; - private readonly IBlockCipher cipher; - - /** - * Basic constructor. - * - * @param cipher the block cipher to be used as the basis of the - * feedback mode. - * @param blockSize the block size in bits (note: a multiple of 8) - */ - public CfbBlockCipher( - IBlockCipher cipher, - int bitBlockSize) - { - this.cipher = cipher; - this.blockSize = bitBlockSize / 8; - this.IV = new byte[cipher.GetBlockSize()]; - this.cfbV = new byte[cipher.GetBlockSize()]; - this.cfbOutV = new byte[cipher.GetBlockSize()]; - } - /** - * return the underlying block cipher that we are wrapping. - * - * @return the underlying block cipher that we are wrapping. - */ - public IBlockCipher GetUnderlyingCipher() - { - return cipher; - } - /** - * Initialise the cipher and, possibly, the initialisation vector (IV). - * If an IV isn't passed as part of the parameter, the IV will be all zeros. - * An IV which is too short is handled in FIPS compliant fashion. - * - * @param forEncryption if true the cipher is initialised for - * encryption, if false for decryption. - * @param param the key and other data required by the cipher. - * @exception ArgumentException if the parameters argument is - * inappropriate. - */ - public void Init( - bool forEncryption, - ICipherParameters parameters) - { - this.encrypting = forEncryption; - if (parameters is ParametersWithIV) - { - ParametersWithIV ivParam = (ParametersWithIV) parameters; - byte[] iv = ivParam.GetIV(); - int diff = IV.Length - iv.Length; - Array.Copy(iv, 0, IV, diff, iv.Length); - Array.Clear(IV, 0, diff); - - parameters = ivParam.Parameters; - } - Reset(); - - // if it's null, key is to be reused. - if (parameters != null) - { - cipher.Init(true, parameters); - } - } - - /** - * return the algorithm name and mode. - * - * @return the name of the underlying algorithm followed by "/CFB" - * and the block size in bits. - */ - public string AlgorithmName - { - get { return cipher.AlgorithmName + "/CFB" + (blockSize * 8); } - } - - public bool IsPartialBlockOkay - { - get { return true; } - } - - /** - * return the block size we are operating at. - * - * @return the block size we are operating at (in bytes). - */ - public int GetBlockSize() - { - return blockSize; - } - - /** - * Process one block of input from the array in and write it to - * the out array. - * - * @param in the array containing the input data. - * @param inOff offset into the in array the data starts at. - * @param out the array the output data will be copied into. - * @param outOff the offset into the out array the output will start at. - * @exception DataLengthException if there isn't enough data in in, or - * space in out. - * @exception InvalidOperationException if the cipher isn't initialised. - * @return the number of bytes processed and produced. - */ - public int ProcessBlock( - byte[] input, - int inOff, - byte[] output, - int outOff) - { - return (encrypting) - ? EncryptBlock(input, inOff, output, outOff) - : DecryptBlock(input, inOff, output, outOff); - } - - /** - * Do the appropriate processing for CFB mode encryption. - * - * @param in the array containing the data to be encrypted. - * @param inOff offset into the in array the data starts at. - * @param out the array the encrypted data will be copied into. - * @param outOff the offset into the out array the output will start at. - * @exception DataLengthException if there isn't enough data in in, or - * space in out. - * @exception InvalidOperationException if the cipher isn't initialised. - * @return the number of bytes processed and produced. - */ - public int EncryptBlock( - byte[] input, - int inOff, - byte[] outBytes, - int outOff) - { - if ((inOff + blockSize) > input.Length) - { - throw new DataLengthException("input buffer too short"); - } - if ((outOff + blockSize) > outBytes.Length) - { - throw new DataLengthException("output buffer too short"); - } - cipher.ProcessBlock(cfbV, 0, cfbOutV, 0); - // - // XOR the cfbV with the plaintext producing the ciphertext - // - for (int i = 0; i < blockSize; i++) - { - outBytes[outOff + i] = (byte)(cfbOutV[i] ^ input[inOff + i]); - } - // - // change over the input block. - // - Array.Copy(cfbV, blockSize, cfbV, 0, cfbV.Length - blockSize); - Array.Copy(outBytes, outOff, cfbV, cfbV.Length - blockSize, blockSize); - return blockSize; - } - /** - * Do the appropriate processing for CFB mode decryption. - * - * @param in the array containing the data to be decrypted. - * @param inOff offset into the in array the data starts at. - * @param out the array the encrypted data will be copied into. - * @param outOff the offset into the out array the output will start at. - * @exception DataLengthException if there isn't enough data in in, or - * space in out. - * @exception InvalidOperationException if the cipher isn't initialised. - * @return the number of bytes processed and produced. - */ - public int DecryptBlock( - byte[] input, - int inOff, - byte[] outBytes, - int outOff) - { - if ((inOff + blockSize) > input.Length) - { - throw new DataLengthException("input buffer too short"); - } - if ((outOff + blockSize) > outBytes.Length) - { - throw new DataLengthException("output buffer too short"); - } - cipher.ProcessBlock(cfbV, 0, cfbOutV, 0); - // - // change over the input block. - // - Array.Copy(cfbV, blockSize, cfbV, 0, cfbV.Length - blockSize); - Array.Copy(input, inOff, cfbV, cfbV.Length - blockSize, blockSize); - // - // XOR the cfbV with the ciphertext producing the plaintext - // - for (int i = 0; i < blockSize; i++) - { - outBytes[outOff + i] = (byte)(cfbOutV[i] ^ input[inOff + i]); - } - return blockSize; - } - /** - * reset the chaining vector back to the IV and reset the underlying - * cipher. - */ - public void Reset() - { - Array.Copy(IV, 0, cfbV, 0, IV.Length); - cipher.Reset(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/modes/CtsBlockCipher.cs b/bc-sharp-crypto/src/crypto/modes/CtsBlockCipher.cs deleted file mode 100644 index ff37844..0000000 --- a/bc-sharp-crypto/src/crypto/modes/CtsBlockCipher.cs +++ /dev/null @@ -1,253 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Modes -{ - /** - * A Cipher Text Stealing (CTS) mode cipher. CTS allows block ciphers to - * be used to produce cipher text which is the same outLength as the plain text. - */ - public class CtsBlockCipher - : BufferedBlockCipher - { - private readonly int blockSize; - - /** - * Create a buffered block cipher that uses Cipher Text Stealing - * - * @param cipher the underlying block cipher this buffering object wraps. - */ - public CtsBlockCipher( - IBlockCipher cipher) - { - // TODO Should this test for acceptable ones instead? - if (cipher is OfbBlockCipher || cipher is CfbBlockCipher) - throw new ArgumentException("CtsBlockCipher can only accept ECB, or CBC ciphers"); - - this.cipher = cipher; - - blockSize = cipher.GetBlockSize(); - - buf = new byte[blockSize * 2]; - bufOff = 0; - } - - /** - * return the size of the output buffer required for an update of 'length' bytes. - * - * @param length the outLength of the input. - * @return the space required to accommodate a call to update - * with length bytes of input. - */ - public override int GetUpdateOutputSize( - int length) - { - int total = length + bufOff; - int leftOver = total % buf.Length; - - if (leftOver == 0) - { - return total - buf.Length; - } - - return total - leftOver; - } - - /** - * return the size of the output buffer required for an update plus a - * doFinal with an input of length bytes. - * - * @param length the outLength of the input. - * @return the space required to accommodate a call to update and doFinal - * with length bytes of input. - */ - public override int GetOutputSize( - int length) - { - return length + bufOff; - } - - /** - * process a single byte, producing an output block if necessary. - * - * @param in the input byte. - * @param out the space for any output that might be produced. - * @param outOff the offset from which the output will be copied. - * @return the number of output bytes copied to out. - * @exception DataLengthException if there isn't enough space in out. - * @exception InvalidOperationException if the cipher isn't initialised. - */ - public override int ProcessByte( - byte input, - byte[] output, - int outOff) - { - int resultLen = 0; - - if (bufOff == buf.Length) - { - resultLen = cipher.ProcessBlock(buf, 0, output, outOff); - Debug.Assert(resultLen == blockSize); - - Array.Copy(buf, blockSize, buf, 0, blockSize); - bufOff = blockSize; - } - - buf[bufOff++] = input; - - return resultLen; - } - - /** - * process an array of bytes, producing output if necessary. - * - * @param in the input byte array. - * @param inOff the offset at which the input data starts. - * @param length the number of bytes to be copied out of the input array. - * @param out the space for any output that might be produced. - * @param outOff the offset from which the output will be copied. - * @return the number of output bytes copied to out. - * @exception DataLengthException if there isn't enough space in out. - * @exception InvalidOperationException if the cipher isn't initialised. - */ - public override int ProcessBytes( - byte[] input, - int inOff, - int length, - byte[] output, - int outOff) - { - if (length < 0) - { - throw new ArgumentException("Can't have a negative input outLength!"); - } - - int blockSize = GetBlockSize(); - int outLength = GetUpdateOutputSize(length); - - if (outLength > 0) - { - if ((outOff + outLength) > output.Length) - { - throw new DataLengthException("output buffer too short"); - } - } - - int resultLen = 0; - int gapLen = buf.Length - bufOff; - - if (length > gapLen) - { - Array.Copy(input, inOff, buf, bufOff, gapLen); - - resultLen += cipher.ProcessBlock(buf, 0, output, outOff); - Array.Copy(buf, blockSize, buf, 0, blockSize); - - bufOff = blockSize; - - length -= gapLen; - inOff += gapLen; - - while (length > blockSize) - { - Array.Copy(input, inOff, buf, bufOff, blockSize); - resultLen += cipher.ProcessBlock(buf, 0, output, outOff + resultLen); - Array.Copy(buf, blockSize, buf, 0, blockSize); - - length -= blockSize; - inOff += blockSize; - } - } - - Array.Copy(input, inOff, buf, bufOff, length); - - bufOff += length; - - return resultLen; - } - - /** - * Process the last block in the buffer. - * - * @param out the array the block currently being held is copied into. - * @param outOff the offset at which the copying starts. - * @return the number of output bytes copied to out. - * @exception DataLengthException if there is insufficient space in out for - * the output. - * @exception InvalidOperationException if the underlying cipher is not - * initialised. - * @exception InvalidCipherTextException if cipher text decrypts wrongly (in - * case the exception will never Get thrown). - */ - public override int DoFinal( - byte[] output, - int outOff) - { - if (bufOff + outOff > output.Length) - { - throw new DataLengthException("output buffer too small in doFinal"); - } - - int blockSize = cipher.GetBlockSize(); - int length = bufOff - blockSize; - byte[] block = new byte[blockSize]; - - if (forEncryption) - { - cipher.ProcessBlock(buf, 0, block, 0); - - if (bufOff < blockSize) - { - throw new DataLengthException("need at least one block of input for CTS"); - } - - for (int i = bufOff; i != buf.Length; i++) - { - buf[i] = block[i - blockSize]; - } - - for (int i = blockSize; i != bufOff; i++) - { - buf[i] ^= block[i - blockSize]; - } - - IBlockCipher c = (cipher is CbcBlockCipher) - ? ((CbcBlockCipher)cipher).GetUnderlyingCipher() - : cipher; - - c.ProcessBlock(buf, blockSize, output, outOff); - - Array.Copy(block, 0, output, outOff + blockSize, length); - } - else - { - byte[] lastBlock = new byte[blockSize]; - - IBlockCipher c = (cipher is CbcBlockCipher) - ? ((CbcBlockCipher)cipher).GetUnderlyingCipher() - : cipher; - - c.ProcessBlock(buf, 0, block, 0); - - for (int i = blockSize; i != bufOff; i++) - { - lastBlock[i - blockSize] = (byte)(block[i - blockSize] ^ buf[i]); - } - - Array.Copy(buf, blockSize, block, 0, length); - - cipher.ProcessBlock(block, 0, output, outOff); - Array.Copy(lastBlock, 0, output, outOff + blockSize, length); - } - - int offset = bufOff; - - Reset(); - - return offset; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/modes/EAXBlockCipher.cs b/bc-sharp-crypto/src/crypto/modes/EAXBlockCipher.cs deleted file mode 100644 index 624f385..0000000 --- a/bc-sharp-crypto/src/crypto/modes/EAXBlockCipher.cs +++ /dev/null @@ -1,379 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Macs; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Modes -{ - /** - * A Two-Pass Authenticated-Encryption Scheme Optimized for Simplicity and - * Efficiency - by M. Bellare, P. Rogaway, D. Wagner. - * - * http://www.cs.ucdavis.edu/~rogaway/papers/eax.pdf - * - * EAX is an AEAD scheme based on CTR and OMAC1/CMAC, that uses a single block - * cipher to encrypt and authenticate data. It's on-line (the length of a - * message isn't needed to begin processing it), has good performances, it's - * simple and provably secure (provided the underlying block cipher is secure). - * - * Of course, this implementations is NOT thread-safe. - */ - public class EaxBlockCipher - : IAeadBlockCipher - { - private enum Tag : byte { N, H, C }; - - private SicBlockCipher cipher; - - private bool forEncryption; - - private int blockSize; - - private IMac mac; - - private byte[] nonceMac; - private byte[] associatedTextMac; - private byte[] macBlock; - - private int macSize; - private byte[] bufBlock; - private int bufOff; - - private bool cipherInitialized; - private byte[] initialAssociatedText; - - /** - * Constructor that accepts an instance of a block cipher engine. - * - * @param cipher the engine to use - */ - public EaxBlockCipher( - IBlockCipher cipher) - { - blockSize = cipher.GetBlockSize(); - mac = new CMac(cipher); - macBlock = new byte[blockSize]; - associatedTextMac = new byte[mac.GetMacSize()]; - nonceMac = new byte[mac.GetMacSize()]; - this.cipher = new SicBlockCipher(cipher); - } - - public virtual string AlgorithmName - { - get { return cipher.GetUnderlyingCipher().AlgorithmName + "/EAX"; } - } - - public virtual IBlockCipher GetUnderlyingCipher() - { - return cipher; - } - - public virtual int GetBlockSize() - { - return cipher.GetBlockSize(); - } - - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - this.forEncryption = forEncryption; - - byte[] nonce; - ICipherParameters keyParam; - - if (parameters is AeadParameters) - { - AeadParameters param = (AeadParameters) parameters; - - nonce = param.GetNonce(); - initialAssociatedText = param.GetAssociatedText(); - macSize = param.MacSize / 8; - keyParam = param.Key; - } - else if (parameters is ParametersWithIV) - { - ParametersWithIV param = (ParametersWithIV) parameters; - - nonce = param.GetIV(); - initialAssociatedText = null; - macSize = mac.GetMacSize() / 2; - keyParam = param.Parameters; - } - else - { - throw new ArgumentException("invalid parameters passed to EAX"); - } - - bufBlock = new byte[forEncryption ? blockSize : (blockSize + macSize)]; - - byte[] tag = new byte[blockSize]; - - // Key reuse implemented in CBC mode of underlying CMac - mac.Init(keyParam); - - tag[blockSize - 1] = (byte)Tag.N; - mac.BlockUpdate(tag, 0, blockSize); - mac.BlockUpdate(nonce, 0, nonce.Length); - mac.DoFinal(nonceMac, 0); - - // Same BlockCipher underlies this and the mac, so reuse last key on cipher - cipher.Init(true, new ParametersWithIV(null, nonceMac)); - - Reset(); - } - - private void InitCipher() - { - if (cipherInitialized) - { - return; - } - - cipherInitialized = true; - - mac.DoFinal(associatedTextMac, 0); - - byte[] tag = new byte[blockSize]; - tag[blockSize - 1] = (byte)Tag.C; - mac.BlockUpdate(tag, 0, blockSize); - } - - private void CalculateMac() - { - byte[] outC = new byte[blockSize]; - mac.DoFinal(outC, 0); - - for (int i = 0; i < macBlock.Length; i++) - { - macBlock[i] = (byte)(nonceMac[i] ^ associatedTextMac[i] ^ outC[i]); - } - } - - public virtual void Reset() - { - Reset(true); - } - - private void Reset( - bool clearMac) - { - cipher.Reset(); // TODO Redundant since the mac will reset it? - mac.Reset(); - - bufOff = 0; - Array.Clear(bufBlock, 0, bufBlock.Length); - - if (clearMac) - { - Array.Clear(macBlock, 0, macBlock.Length); - } - - byte[] tag = new byte[blockSize]; - tag[blockSize - 1] = (byte)Tag.H; - mac.BlockUpdate(tag, 0, blockSize); - - cipherInitialized = false; - - if (initialAssociatedText != null) - { - ProcessAadBytes(initialAssociatedText, 0, initialAssociatedText.Length); - } - } - - public virtual void ProcessAadByte(byte input) - { - if (cipherInitialized) - { - throw new InvalidOperationException("AAD data cannot be added after encryption/decryption processing has begun."); - } - mac.Update(input); - } - - public virtual void ProcessAadBytes(byte[] inBytes, int inOff, int len) - { - if (cipherInitialized) - { - throw new InvalidOperationException("AAD data cannot be added after encryption/decryption processing has begun."); - } - mac.BlockUpdate(inBytes, inOff, len); - } - - public virtual int ProcessByte( - byte input, - byte[] outBytes, - int outOff) - { - InitCipher(); - - return Process(input, outBytes, outOff); - } - - public virtual int ProcessBytes( - byte[] inBytes, - int inOff, - int len, - byte[] outBytes, - int outOff) - { - InitCipher(); - - int resultLen = 0; - - for (int i = 0; i != len; i++) - { - resultLen += Process(inBytes[inOff + i], outBytes, outOff + resultLen); - } - - return resultLen; - } - - public virtual int DoFinal( - byte[] outBytes, - int outOff) - { - InitCipher(); - - int extra = bufOff; - byte[] tmp = new byte[bufBlock.Length]; - - bufOff = 0; - - if (forEncryption) - { - Check.OutputLength(outBytes, outOff, extra + macSize, "Output buffer too short"); - - cipher.ProcessBlock(bufBlock, 0, tmp, 0); - - Array.Copy(tmp, 0, outBytes, outOff, extra); - - mac.BlockUpdate(tmp, 0, extra); - - CalculateMac(); - - Array.Copy(macBlock, 0, outBytes, outOff + extra, macSize); - - Reset(false); - - return extra + macSize; - } - else - { - if (extra < macSize) - throw new InvalidCipherTextException("data too short"); - - Check.OutputLength(outBytes, outOff, extra - macSize, "Output buffer too short"); - - if (extra > macSize) - { - mac.BlockUpdate(bufBlock, 0, extra - macSize); - - cipher.ProcessBlock(bufBlock, 0, tmp, 0); - - Array.Copy(tmp, 0, outBytes, outOff, extra - macSize); - } - - CalculateMac(); - - if (!VerifyMac(bufBlock, extra - macSize)) - throw new InvalidCipherTextException("mac check in EAX failed"); - - Reset(false); - - return extra - macSize; - } - } - - public virtual byte[] GetMac() - { - byte[] mac = new byte[macSize]; - - Array.Copy(macBlock, 0, mac, 0, macSize); - - return mac; - } - - public virtual int GetUpdateOutputSize( - int len) - { - int totalData = len + bufOff; - if (!forEncryption) - { - if (totalData < macSize) - { - return 0; - } - totalData -= macSize; - } - return totalData - totalData % blockSize; - } - - public virtual int GetOutputSize( - int len) - { - int totalData = len + bufOff; - - if (forEncryption) - { - return totalData + macSize; - } - - return totalData < macSize ? 0 : totalData - macSize; - } - - private int Process( - byte b, - byte[] outBytes, - int outOff) - { - bufBlock[bufOff++] = b; - - if (bufOff == bufBlock.Length) - { - Check.OutputLength(outBytes, outOff, blockSize, "Output buffer is too short"); - - // TODO Could move the ProcessByte(s) calls to here -// InitCipher(); - - int size; - - if (forEncryption) - { - size = cipher.ProcessBlock(bufBlock, 0, outBytes, outOff); - - mac.BlockUpdate(outBytes, outOff, blockSize); - } - else - { - mac.BlockUpdate(bufBlock, 0, blockSize); - - size = cipher.ProcessBlock(bufBlock, 0, outBytes, outOff); - } - - bufOff = 0; - if (!forEncryption) - { - Array.Copy(bufBlock, blockSize, bufBlock, 0, macSize); - bufOff = macSize; - } - - return size; - } - - return 0; - } - - private bool VerifyMac(byte[] mac, int off) - { - int nonEqual = 0; - - for (int i = 0; i < macSize; i++) - { - nonEqual |= (macBlock[i] ^ mac[off + i]); - } - - return nonEqual == 0; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/modes/GCMBlockCipher.cs b/bc-sharp-crypto/src/crypto/modes/GCMBlockCipher.cs deleted file mode 100644 index a6cd004..0000000 --- a/bc-sharp-crypto/src/crypto/modes/GCMBlockCipher.cs +++ /dev/null @@ -1,594 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Macs; -using Org.BouncyCastle.Crypto.Modes.Gcm; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Modes -{ - /// - /// Implements the Galois/Counter mode (GCM) detailed in - /// NIST Special Publication 800-38D. - /// - public class GcmBlockCipher - : IAeadBlockCipher - { - private const int BlockSize = 16; - - private readonly IBlockCipher cipher; - private readonly IGcmMultiplier multiplier; - private IGcmExponentiator exp; - - // These fields are set by Init and not modified by processing - private bool forEncryption; - private bool initialised; - private int macSize; - private byte[] lastKey; - private byte[] nonce; - private byte[] initialAssociatedText; - private byte[] H; - private byte[] J0; - - // These fields are modified during processing - private byte[] bufBlock; - private byte[] macBlock; - private byte[] S, S_at, S_atPre; - private byte[] counter; - private uint blocksRemaining; - private int bufOff; - private ulong totalLength; - private byte[] atBlock; - private int atBlockPos; - private ulong atLength; - private ulong atLengthPre; - - public GcmBlockCipher( - IBlockCipher c) - : this(c, null) - { - } - - public GcmBlockCipher( - IBlockCipher c, - IGcmMultiplier m) - { - if (c.GetBlockSize() != BlockSize) - throw new ArgumentException("cipher required with a block size of " + BlockSize + "."); - - if (m == null) - { - // TODO Consider a static property specifying default multiplier - m = new Tables8kGcmMultiplier(); - } - - this.cipher = c; - this.multiplier = m; - } - - public virtual string AlgorithmName - { - get { return cipher.AlgorithmName + "/GCM"; } - } - - public IBlockCipher GetUnderlyingCipher() - { - return cipher; - } - - public virtual int GetBlockSize() - { - return BlockSize; - } - - /// - /// MAC sizes from 32 bits to 128 bits (must be a multiple of 8) are supported. The default is 128 bits. - /// Sizes less than 96 are not recommended, but are supported for specialized applications. - /// - public virtual void Init( - bool forEncryption, - ICipherParameters parameters) - { - this.forEncryption = forEncryption; - this.macBlock = null; - this.initialised = true; - - KeyParameter keyParam; - byte[] newNonce = null; - - if (parameters is AeadParameters) - { - AeadParameters param = (AeadParameters)parameters; - - newNonce = param.GetNonce(); - initialAssociatedText = param.GetAssociatedText(); - - int macSizeBits = param.MacSize; - if (macSizeBits < 32 || macSizeBits > 128 || macSizeBits % 8 != 0) - { - throw new ArgumentException("Invalid value for MAC size: " + macSizeBits); - } - - macSize = macSizeBits / 8; - keyParam = param.Key; - } - else if (parameters is ParametersWithIV) - { - ParametersWithIV param = (ParametersWithIV)parameters; - - newNonce = param.GetIV(); - initialAssociatedText = null; - macSize = 16; - keyParam = (KeyParameter)param.Parameters; - } - else - { - throw new ArgumentException("invalid parameters passed to GCM"); - } - - int bufLength = forEncryption ? BlockSize : (BlockSize + macSize); - this.bufBlock = new byte[bufLength]; - - if (newNonce == null || newNonce.Length < 1) - { - throw new ArgumentException("IV must be at least 1 byte"); - } - - if (forEncryption) - { - if (nonce != null && Arrays.AreEqual(nonce, newNonce)) - { - if (keyParam == null) - { - throw new ArgumentException("cannot reuse nonce for GCM encryption"); - } - if (lastKey != null && Arrays.AreEqual(lastKey, keyParam.GetKey())) - { - throw new ArgumentException("cannot reuse nonce for GCM encryption"); - } - } - } - - nonce = newNonce; - if (keyParam != null) - { - lastKey = keyParam.GetKey(); - } - - // TODO Restrict macSize to 16 if nonce length not 12? - - // Cipher always used in forward mode - // if keyParam is null we're reusing the last key. - if (keyParam != null) - { - cipher.Init(true, keyParam); - - this.H = new byte[BlockSize]; - cipher.ProcessBlock(H, 0, H, 0); - - // if keyParam is null we're reusing the last key and the multiplier doesn't need re-init - multiplier.Init(H); - exp = null; - } - else if (this.H == null) - { - throw new ArgumentException("Key must be specified in initial init"); - } - - this.J0 = new byte[BlockSize]; - - if (nonce.Length == 12) - { - Array.Copy(nonce, 0, J0, 0, nonce.Length); - this.J0[BlockSize - 1] = 0x01; - } - else - { - gHASH(J0, nonce, nonce.Length); - byte[] X = new byte[BlockSize]; - Pack.UInt64_To_BE((ulong)nonce.Length * 8UL, X, 8); - gHASHBlock(J0, X); - } - - this.S = new byte[BlockSize]; - this.S_at = new byte[BlockSize]; - this.S_atPre = new byte[BlockSize]; - this.atBlock = new byte[BlockSize]; - this.atBlockPos = 0; - this.atLength = 0; - this.atLengthPre = 0; - this.counter = Arrays.Clone(J0); - this.blocksRemaining = uint.MaxValue - 1; // page 8, len(P) <= 2^39 - 256, 1 block used by tag - this.bufOff = 0; - this.totalLength = 0; - - if (initialAssociatedText != null) - { - ProcessAadBytes(initialAssociatedText, 0, initialAssociatedText.Length); - } - } - - public virtual byte[] GetMac() - { - return macBlock == null - ? new byte[macSize] - : Arrays.Clone(macBlock); - } - - public virtual int GetOutputSize( - int len) - { - int totalData = len + bufOff; - - if (forEncryption) - { - return totalData + macSize; - } - - return totalData < macSize ? 0 : totalData - macSize; - } - - public virtual int GetUpdateOutputSize( - int len) - { - int totalData = len + bufOff; - if (!forEncryption) - { - if (totalData < macSize) - { - return 0; - } - totalData -= macSize; - } - return totalData - totalData % BlockSize; - } - - public virtual void ProcessAadByte(byte input) - { - CheckStatus(); - - atBlock[atBlockPos] = input; - if (++atBlockPos == BlockSize) - { - // Hash each block as it fills - gHASHBlock(S_at, atBlock); - atBlockPos = 0; - atLength += BlockSize; - } - } - - public virtual void ProcessAadBytes(byte[] inBytes, int inOff, int len) - { - CheckStatus(); - - for (int i = 0; i < len; ++i) - { - atBlock[atBlockPos] = inBytes[inOff + i]; - if (++atBlockPos == BlockSize) - { - // Hash each block as it fills - gHASHBlock(S_at, atBlock); - atBlockPos = 0; - atLength += BlockSize; - } - } - } - - private void InitCipher() - { - if (atLength > 0) - { - Array.Copy(S_at, 0, S_atPre, 0, BlockSize); - atLengthPre = atLength; - } - - // Finish hash for partial AAD block - if (atBlockPos > 0) - { - gHASHPartial(S_atPre, atBlock, 0, atBlockPos); - atLengthPre += (uint)atBlockPos; - } - - if (atLengthPre > 0) - { - Array.Copy(S_atPre, 0, S, 0, BlockSize); - } - } - - public virtual int ProcessByte( - byte input, - byte[] output, - int outOff) - { - CheckStatus(); - - bufBlock[bufOff] = input; - if (++bufOff == bufBlock.Length) - { - OutputBlock(output, outOff); - return BlockSize; - } - return 0; - } - - public virtual int ProcessBytes( - byte[] input, - int inOff, - int len, - byte[] output, - int outOff) - { - CheckStatus(); - - if (input.Length < (inOff + len)) - throw new DataLengthException("Input buffer too short"); - - int resultLen = 0; - - for (int i = 0; i < len; ++i) - { - bufBlock[bufOff] = input[inOff + i]; - if (++bufOff == bufBlock.Length) - { - OutputBlock(output, outOff + resultLen); - resultLen += BlockSize; - } - } - - return resultLen; - } - - private void OutputBlock(byte[] output, int offset) - { - Check.OutputLength(output, offset, BlockSize, "Output buffer too short"); - if (totalLength == 0) - { - InitCipher(); - } - gCTRBlock(bufBlock, output, offset); - if (forEncryption) - { - bufOff = 0; - } - else - { - Array.Copy(bufBlock, BlockSize, bufBlock, 0, macSize); - bufOff = macSize; - } - } - - public int DoFinal(byte[] output, int outOff) - { - CheckStatus(); - - if (totalLength == 0) - { - InitCipher(); - } - - int extra = bufOff; - - if (forEncryption) - { - Check.OutputLength(output, outOff, extra + macSize, "Output buffer too short"); - } - else - { - if (extra < macSize) - throw new InvalidCipherTextException("data too short"); - - extra -= macSize; - - Check.OutputLength(output, outOff, extra, "Output buffer too short"); - } - - if (extra > 0) - { - gCTRPartial(bufBlock, 0, extra, output, outOff); - } - - atLength += (uint)atBlockPos; - - if (atLength > atLengthPre) - { - /* - * Some AAD was sent after the cipher started. We determine the difference b/w the hash value - * we actually used when the cipher started (S_atPre) and the final hash value calculated (S_at). - * Then we carry this difference forward by multiplying by H^c, where c is the number of (full or - * partial) cipher-text blocks produced, and adjust the current hash. - */ - - // Finish hash for partial AAD block - if (atBlockPos > 0) - { - gHASHPartial(S_at, atBlock, 0, atBlockPos); - } - - // Find the difference between the AAD hashes - if (atLengthPre > 0) - { - GcmUtilities.Xor(S_at, S_atPre); - } - - // Number of cipher-text blocks produced - long c = (long)(((totalLength * 8) + 127) >> 7); - - // Calculate the adjustment factor - byte[] H_c = new byte[16]; - if (exp == null) - { - exp = new Tables1kGcmExponentiator(); - exp.Init(H); - } - exp.ExponentiateX(c, H_c); - - // Carry the difference forward - GcmUtilities.Multiply(S_at, H_c); - - // Adjust the current hash - GcmUtilities.Xor(S, S_at); - } - - // Final gHASH - byte[] X = new byte[BlockSize]; - Pack.UInt64_To_BE(atLength * 8UL, X, 0); - Pack.UInt64_To_BE(totalLength * 8UL, X, 8); - - gHASHBlock(S, X); - - // T = MSBt(GCTRk(J0,S)) - byte[] tag = new byte[BlockSize]; - cipher.ProcessBlock(J0, 0, tag, 0); - GcmUtilities.Xor(tag, S); - - int resultLen = extra; - - // We place into macBlock our calculated value for T - this.macBlock = new byte[macSize]; - Array.Copy(tag, 0, macBlock, 0, macSize); - - if (forEncryption) - { - // Append T to the message - Array.Copy(macBlock, 0, output, outOff + bufOff, macSize); - resultLen += macSize; - } - else - { - // Retrieve the T value from the message and compare to calculated one - byte[] msgMac = new byte[macSize]; - Array.Copy(bufBlock, extra, msgMac, 0, macSize); - if (!Arrays.ConstantTimeAreEqual(this.macBlock, msgMac)) - throw new InvalidCipherTextException("mac check in GCM failed"); - } - - Reset(false); - - return resultLen; - } - - public virtual void Reset() - { - Reset(true); - } - - private void Reset( - bool clearMac) - { - cipher.Reset(); - - // note: we do not reset the nonce. - - S = new byte[BlockSize]; - S_at = new byte[BlockSize]; - S_atPre = new byte[BlockSize]; - atBlock = new byte[BlockSize]; - atBlockPos = 0; - atLength = 0; - atLengthPre = 0; - counter = Arrays.Clone(J0); - blocksRemaining = uint.MaxValue - 1; - bufOff = 0; - totalLength = 0; - - if (bufBlock != null) - { - Arrays.Fill(bufBlock, 0); - } - - if (clearMac) - { - macBlock = null; - } - - if (forEncryption) - { - initialised = false; - } - else - { - if (initialAssociatedText != null) - { - ProcessAadBytes(initialAssociatedText, 0, initialAssociatedText.Length); - } - } - } - - private void gCTRBlock(byte[] block, byte[] output, int outOff) - { - byte[] tmp = GetNextCounterBlock(); - - GcmUtilities.Xor(tmp, block); - Array.Copy(tmp, 0, output, outOff, BlockSize); - - gHASHBlock(S, forEncryption ? tmp : block); - - totalLength += BlockSize; - } - - private void gCTRPartial(byte[] buf, int off, int len, byte[] output, int outOff) - { - byte[] tmp = GetNextCounterBlock(); - - GcmUtilities.Xor(tmp, buf, off, len); - Array.Copy(tmp, 0, output, outOff, len); - - gHASHPartial(S, forEncryption ? tmp : buf, 0, len); - - totalLength += (uint)len; - } - - private void gHASH(byte[] Y, byte[] b, int len) - { - for (int pos = 0; pos < len; pos += BlockSize) - { - int num = System.Math.Min(len - pos, BlockSize); - gHASHPartial(Y, b, pos, num); - } - } - - private void gHASHBlock(byte[] Y, byte[] b) - { - GcmUtilities.Xor(Y, b); - multiplier.MultiplyH(Y); - } - - private void gHASHPartial(byte[] Y, byte[] b, int off, int len) - { - GcmUtilities.Xor(Y, b, off, len); - multiplier.MultiplyH(Y); - } - - private byte[] GetNextCounterBlock() - { - if (blocksRemaining == 0) - throw new InvalidOperationException("Attempt to process too many blocks"); - - blocksRemaining--; - - uint c = 1; - c += counter[15]; counter[15] = (byte)c; c >>= 8; - c += counter[14]; counter[14] = (byte)c; c >>= 8; - c += counter[13]; counter[13] = (byte)c; c >>= 8; - c += counter[12]; counter[12] = (byte)c; - - byte[] tmp = new byte[BlockSize]; - // TODO Sure would be nice if ciphers could operate on int[] - cipher.ProcessBlock(counter, 0, tmp, 0); - return tmp; - } - - private void CheckStatus() - { - if (!initialised) - { - if (forEncryption) - { - throw new InvalidOperationException("GCM cipher cannot be reused for encryption"); - } - throw new InvalidOperationException("GCM cipher needs to be initialised"); - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/modes/GOFBBlockCipher.cs b/bc-sharp-crypto/src/crypto/modes/GOFBBlockCipher.cs deleted file mode 100644 index 436b58a..0000000 --- a/bc-sharp-crypto/src/crypto/modes/GOFBBlockCipher.cs +++ /dev/null @@ -1,234 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Modes -{ - /** - * implements the GOST 28147 OFB counter mode (GCTR). - */ - public class GOfbBlockCipher - : IBlockCipher - { - private byte[] IV; - private byte[] ofbV; - private byte[] ofbOutV; - - private readonly int blockSize; - private readonly IBlockCipher cipher; - - bool firstStep = true; - int N3; - int N4; - const int C1 = 16843012; //00000001000000010000000100000100 - const int C2 = 16843009; //00000001000000010000000100000001 - - /** - * Basic constructor. - * - * @param cipher the block cipher to be used as the basis of the - * counter mode (must have a 64 bit block size). - */ - public GOfbBlockCipher( - IBlockCipher cipher) - { - this.cipher = cipher; - this.blockSize = cipher.GetBlockSize(); - - if (blockSize != 8) - { - throw new ArgumentException("GCTR only for 64 bit block ciphers"); - } - - this.IV = new byte[cipher.GetBlockSize()]; - this.ofbV = new byte[cipher.GetBlockSize()]; - this.ofbOutV = new byte[cipher.GetBlockSize()]; - } - - /** - * return the underlying block cipher that we are wrapping. - * - * @return the underlying block cipher that we are wrapping. - */ - public IBlockCipher GetUnderlyingCipher() - { - return cipher; - } - - /** - * Initialise the cipher and, possibly, the initialisation vector (IV). - * If an IV isn't passed as part of the parameter, the IV will be all zeros. - * An IV which is too short is handled in FIPS compliant fashion. - * - * @param encrypting if true the cipher is initialised for - * encryption, if false for decryption. - * @param parameters the key and other data required by the cipher. - * @exception ArgumentException if the parameters argument is inappropriate. - */ - public void Init( - bool forEncryption, //ignored by this CTR mode - ICipherParameters parameters) - { - firstStep = true; - N3 = 0; - N4 = 0; - - if (parameters is ParametersWithIV) - { - ParametersWithIV ivParam = (ParametersWithIV)parameters; - byte[] iv = ivParam.GetIV(); - - if (iv.Length < IV.Length) - { - // prepend the supplied IV with zeros (per FIPS PUB 81) - Array.Copy(iv, 0, IV, IV.Length - iv.Length, iv.Length); - for (int i = 0; i < IV.Length - iv.Length; i++) - { - IV[i] = 0; - } - } - else - { - Array.Copy(iv, 0, IV, 0, IV.Length); - } - - parameters = ivParam.Parameters; - } - - Reset(); - - // if it's null, key is to be reused. - if (parameters != null) - { - cipher.Init(true, parameters); - } - } - - /** - * return the algorithm name and mode. - * - * @return the name of the underlying algorithm followed by "/GCTR" - * and the block size in bits - */ - public string AlgorithmName - { - get { return cipher.AlgorithmName + "/GCTR"; } - } - - public bool IsPartialBlockOkay - { - get { return true; } - } - - /** - * return the block size we are operating at (in bytes). - * - * @return the block size we are operating at (in bytes). - */ - public int GetBlockSize() - { - return blockSize; - } - - /** - * Process one block of input from the array in and write it to - * the out array. - * - * @param in the array containing the input data. - * @param inOff offset into the in array the data starts at. - * @param out the array the output data will be copied into. - * @param outOff the offset into the out array the output will start at. - * @exception DataLengthException if there isn't enough data in in, or - * space in out. - * @exception InvalidOperationException if the cipher isn't initialised. - * @return the number of bytes processed and produced. - */ - public int ProcessBlock( - byte[] input, - int inOff, - byte[] output, - int outOff) - { - if ((inOff + blockSize) > input.Length) - { - throw new DataLengthException("input buffer too short"); - } - - if ((outOff + blockSize) > output.Length) - { - throw new DataLengthException("output buffer too short"); - } - - if (firstStep) - { - firstStep = false; - cipher.ProcessBlock(ofbV, 0, ofbOutV, 0); - N3 = bytesToint(ofbOutV, 0); - N4 = bytesToint(ofbOutV, 4); - } - N3 += C2; - N4 += C1; - if (N4 < C1) // addition is mod (2**32 - 1) - { - if (N4 > 0) - { - N4++; - } - } - intTobytes(N3, ofbV, 0); - intTobytes(N4, ofbV, 4); - - cipher.ProcessBlock(ofbV, 0, ofbOutV, 0); - - // - // XOR the ofbV with the plaintext producing the cipher text (and - // the next input block). - // - for (int i = 0; i < blockSize; i++) - { - output[outOff + i] = (byte)(ofbOutV[i] ^ input[inOff + i]); - } - - // - // change over the input block. - // - Array.Copy(ofbV, blockSize, ofbV, 0, ofbV.Length - blockSize); - Array.Copy(ofbOutV, 0, ofbV, ofbV.Length - blockSize, blockSize); - - return blockSize; - } - - /** - * reset the feedback vector back to the IV and reset the underlying - * cipher. - */ - public void Reset() - { - Array.Copy(IV, 0, ofbV, 0, IV.Length); - - cipher.Reset(); - } - - //array of bytes to type int - private int bytesToint( - byte[] inBytes, - int inOff) - { - return (int)((inBytes[inOff + 3] << 24) & 0xff000000) + ((inBytes[inOff + 2] << 16) & 0xff0000) + - ((inBytes[inOff + 1] << 8) & 0xff00) + (inBytes[inOff] & 0xff); - } - - //int to array of bytes - private void intTobytes( - int num, - byte[] outBytes, - int outOff) - { - outBytes[outOff + 3] = (byte)(num >> 24); - outBytes[outOff + 2] = (byte)(num >> 16); - outBytes[outOff + 1] = (byte)(num >> 8); - outBytes[outOff] = (byte)num; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/modes/IAeadBlockCipher.cs b/bc-sharp-crypto/src/crypto/modes/IAeadBlockCipher.cs deleted file mode 100644 index 52c4ff4..0000000 --- a/bc-sharp-crypto/src/crypto/modes/IAeadBlockCipher.cs +++ /dev/null @@ -1,105 +0,0 @@ -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Modes -{ - /// - /// A block cipher mode that includes authenticated encryption with a streaming mode - /// and optional associated data. - /// - public interface IAeadBlockCipher - { - /// The name of the algorithm this cipher implements. - string AlgorithmName { get; } - - /// The block cipher underlying this algorithm. - IBlockCipher GetUnderlyingCipher(); - - /// Initialise the cipher. - /// Parameter can either be an AeadParameters or a ParametersWithIV object. - /// Initialise for encryption if true, for decryption if false. - /// The key or other data required by the cipher. - void Init(bool forEncryption, ICipherParameters parameters); - - /// The block size for this cipher, in bytes. - int GetBlockSize(); - - /// Add a single byte to the associated data check. - /// If the implementation supports it, this will be an online operation and will not retain the associated data. - /// The byte to be processed. - void ProcessAadByte(byte input); - - /// Add a sequence of bytes to the associated data check. - /// If the implementation supports it, this will be an online operation and will not retain the associated data. - /// The input byte array. - /// The offset into the input array where the data to be processed starts. - /// The number of bytes to be processed. - void ProcessAadBytes(byte[] inBytes, int inOff, int len); - - /** - * Encrypt/decrypt a single byte. - * - * @param input the byte to be processed. - * @param outBytes the output buffer the processed byte goes into. - * @param outOff the offset into the output byte array the processed data starts at. - * @return the number of bytes written to out. - * @exception DataLengthException if the output buffer is too small. - */ - int ProcessByte(byte input, byte[] outBytes, int outOff); - - /** - * Process a block of bytes from in putting the result into out. - * - * @param inBytes the input byte array. - * @param inOff the offset into the in array where the data to be processed starts. - * @param len the number of bytes to be processed. - * @param outBytes the output buffer the processed bytes go into. - * @param outOff the offset into the output byte array the processed data starts at. - * @return the number of bytes written to out. - * @exception DataLengthException if the output buffer is too small. - */ - int ProcessBytes(byte[] inBytes, int inOff, int len, byte[] outBytes, int outOff); - - /** - * Finish the operation either appending or verifying the MAC at the end of the data. - * - * @param outBytes space for any resulting output data. - * @param outOff offset into out to start copying the data at. - * @return number of bytes written into out. - * @throws InvalidOperationException if the cipher is in an inappropriate state. - * @throws InvalidCipherTextException if the MAC fails to match. - */ - int DoFinal(byte[] outBytes, int outOff); - - /** - * Return the value of the MAC associated with the last stream processed. - * - * @return MAC for plaintext data. - */ - byte[] GetMac(); - - /** - * Return the size of the output buffer required for a ProcessBytes - * an input of len bytes. - * - * @param len the length of the input. - * @return the space required to accommodate a call to ProcessBytes - * with len bytes of input. - */ - int GetUpdateOutputSize(int len); - - /** - * Return the size of the output buffer required for a ProcessBytes plus a - * DoFinal with an input of len bytes. - * - * @param len the length of the input. - * @return the space required to accommodate a call to ProcessBytes and DoFinal - * with len bytes of input. - */ - int GetOutputSize(int len); - - /// - /// Reset the cipher to the same state as it was after the last init (if there was one). - /// - void Reset(); - } -} diff --git a/bc-sharp-crypto/src/crypto/modes/KCcmBlockCipher.cs b/bc-sharp-crypto/src/crypto/modes/KCcmBlockCipher.cs deleted file mode 100644 index 4f78214..0000000 --- a/bc-sharp-crypto/src/crypto/modes/KCcmBlockCipher.cs +++ /dev/null @@ -1,490 +0,0 @@ -using System; -using System.IO; -using System.Text; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Modes -{ - public class KCcmBlockCipher: IAeadBlockCipher - { - private static readonly int BYTES_IN_INT = 4; - private static readonly int BITS_IN_BYTE = 8; - - private static readonly int MAX_MAC_BIT_LENGTH = 512; - private static readonly int MIN_MAC_BIT_LENGTH = 64; - - private IBlockCipher engine; - - private int macSize; - private bool forEncryption; - - private byte[] initialAssociatedText; - private byte[] mac; - private byte[] macBlock; - - private byte[] nonce; - - private byte[] G1; - private byte[] buffer; - - private byte[] s; - private byte[] counter; - - private readonly MemoryStream associatedText = new MemoryStream(); - private readonly MemoryStream data = new MemoryStream(); - - /* - * - * - */ - private int Nb_ = 4; - - private void setNb(int Nb) - { - if (Nb == 4 || Nb == 6 || Nb == 8) - { - Nb_ = Nb; - } - else - { - throw new ArgumentException("Nb = 4 is recommended by DSTU7624 but can be changed to only 6 or 8 in this implementation"); - } - } - - /// - /// Base constructor. Nb value is set to 4. - /// - /// base cipher to use under CCM. - public KCcmBlockCipher(IBlockCipher engine): this(engine, 4) - { - } - - /// - /// Constructor allowing Nb configuration. - /// - /// Nb is a parameter specified in CCM mode of DSTU7624 standard. - /// This parameter specifies maximum possible length of input.It should - /// be calculated as follows: Nb = 1 / 8 * (-3 + log[2]Nmax) + 1, - /// where Nmax - length of input message in bits.For practical reasons - /// Nmax usually less than 4Gb, e.g. for Nmax = 2^32 - 1, Nb = 4. - /// - /// base cipher to use under CCM. - /// Nb value to use. - public KCcmBlockCipher(IBlockCipher engine, int Nb) - { - this.engine = engine; - this.macSize = engine.GetBlockSize(); - this.nonce = new byte[engine.GetBlockSize()]; - this.initialAssociatedText = new byte[engine.GetBlockSize()]; - this.mac = new byte[engine.GetBlockSize()]; - this.macBlock = new byte[engine.GetBlockSize()]; - this.G1 = new byte[engine.GetBlockSize()]; - this.buffer = new byte[engine.GetBlockSize()]; - this.s = new byte[engine.GetBlockSize()]; - this.counter = new byte[engine.GetBlockSize()]; - setNb(Nb); - } - - public virtual void Init(bool forEncryption, ICipherParameters parameters) - { - - ICipherParameters cipherParameters; - if (parameters is AeadParameters) - { - - AeadParameters param = (AeadParameters)parameters; - - if (param.MacSize > MAX_MAC_BIT_LENGTH || param.MacSize < MIN_MAC_BIT_LENGTH || param.MacSize % 8 != 0) - { - throw new ArgumentException("Invalid mac size specified"); - } - - nonce = param.GetNonce(); - macSize = param.MacSize / BITS_IN_BYTE; - initialAssociatedText = param.GetAssociatedText(); - cipherParameters = param.Key; - } - else if (parameters is ParametersWithIV) - { - nonce = ((ParametersWithIV)parameters).GetIV(); - macSize = engine.GetBlockSize(); // use default blockSize for MAC if it is not specified - initialAssociatedText = null; - cipherParameters = ((ParametersWithIV)parameters).Parameters; - } - else - { - throw new ArgumentException("Invalid parameters specified"); - } - - this.mac = new byte[macSize]; - this.forEncryption = forEncryption; - engine.Init(true, cipherParameters); - - counter[0] = 0x01; // defined in standard - - if (initialAssociatedText != null) - { - ProcessAadBytes(initialAssociatedText, 0, initialAssociatedText.Length); - } - } - - public virtual String AlgorithmName - { - get - { - return engine.AlgorithmName + "/KCCM"; - } - } - - public virtual int GetBlockSize() - { - return engine.GetBlockSize(); - } - - public virtual IBlockCipher GetUnderlyingCipher() - { - return engine; - } - - public virtual void ProcessAadByte(byte input) - { - associatedText.WriteByte(input); - } - - public virtual void ProcessAadBytes(byte[] input, int inOff, int len) - { - associatedText.Write(input, inOff, len); - } - - private void ProcessAAD(byte[] assocText, int assocOff, int assocLen, int dataLen) - { - if (assocLen - assocOff < engine.GetBlockSize()) - { - throw new ArgumentException("authText buffer too short"); - } - if (assocLen % engine.GetBlockSize() != 0) - { - throw new ArgumentException("padding not supported"); - } - - Array.Copy(nonce, 0, G1, 0, nonce.Length - Nb_ - 1); - - intToBytes(dataLen, buffer, 0); // for G1 - - Array.Copy(buffer, 0, G1, nonce.Length - Nb_ - 1, BYTES_IN_INT); - - G1[G1.Length - 1] = getFlag(true, macSize); - - engine.ProcessBlock(G1, 0, macBlock, 0); - - intToBytes(assocLen, buffer, 0); // for G2 - - if (assocLen <= engine.GetBlockSize() - Nb_) - { - for (int byteIndex = 0; byteIndex < assocLen; byteIndex++) - { - buffer[byteIndex + Nb_] ^= assocText[assocOff + byteIndex]; - } - - for (int byteIndex = 0; byteIndex < engine.GetBlockSize(); byteIndex++) - { - macBlock[byteIndex] ^= buffer[byteIndex]; - } - - engine.ProcessBlock(macBlock, 0, macBlock, 0); - - return; - } - - for (int byteIndex = 0; byteIndex < engine.GetBlockSize(); byteIndex++) - { - macBlock[byteIndex] ^= buffer[byteIndex]; - } - - engine.ProcessBlock(macBlock, 0, macBlock, 0); - - int authLen = assocLen; - while (authLen != 0) - { - for (int byteIndex = 0; byteIndex < engine.GetBlockSize(); byteIndex++) - { - macBlock[byteIndex] ^= assocText[byteIndex + assocOff]; - } - - engine.ProcessBlock(macBlock, 0, macBlock, 0); - - assocOff += engine.GetBlockSize(); - authLen -= engine.GetBlockSize(); - } - } - - public virtual int ProcessByte(byte input, byte[] output, int outOff) - { - data.WriteByte(input); - - return 0; - } - - public virtual int ProcessBytes(byte[] input, int inOff, int inLen, byte[] output, int outOff) - { - Check.DataLength(input, inOff, inLen, "input buffer too short"); - - data.Write(input, inOff, inLen); - - return 0; - } - - public int ProcessPacket(byte[] input, int inOff, int len, byte[] output, int outOff) - { - Check.DataLength(input, inOff, len, "input buffer too short"); - Check.OutputLength(output, outOff, len, "output buffer too short"); - - if (associatedText.Length > 0) - { -#if PORTABLE - byte[] aad = associatedText.ToArray(); - int aadLen = aad.Length; -#else - byte[] aad = associatedText.GetBuffer(); - int aadLen = (int)associatedText.Length; -#endif - - int dataLen = forEncryption ? (int)data.Length : ((int)data.Length - macSize); - - ProcessAAD(aad, 0, aadLen, dataLen); - } - - if (forEncryption) - { - Check.DataLength(len % engine.GetBlockSize() != 0, "partial blocks not supported"); - - CalculateMac(input, inOff, len); - engine.ProcessBlock(nonce, 0, s, 0); - - int totalLength = len; - while (totalLength > 0) - { - ProcessBlock(input, inOff, len, output, outOff); - totalLength -= engine.GetBlockSize(); - inOff += engine.GetBlockSize(); - outOff += engine.GetBlockSize(); - } - - for (int byteIndex = 0; byteIndex inOff) - { - for (int byteIndex = 0; byteIndex 0) - { - for (int byteIndex = 0; byteIndex < engine.GetBlockSize(); byteIndex++) - { - macBlock[byteIndex] ^= authText[authOff + byteIndex]; - } - - engine.ProcessBlock(macBlock, 0, macBlock, 0); - - totalLen -= engine.GetBlockSize(); - authOff += engine.GetBlockSize(); - } - } - - public virtual int DoFinal(byte[] output, int outOff) - { -#if PORTABLE - byte[] buf = data.ToArray(); - int bufLen = buf.Length; -#else - byte[] buf = data.GetBuffer(); - int bufLen = (int)data.Length; -#endif - - int len = ProcessPacket(buf, 0, bufLen, output, outOff); - - Reset(); - - return len; - } - - public virtual byte[] GetMac() - { - return Arrays.Clone(mac); - } - - public virtual int GetUpdateOutputSize(int len) - { - return len; - } - - public virtual int GetOutputSize(int len) - { - return len + macSize; - } - - public virtual void Reset() - { - Arrays.Fill(G1, (byte)0); - Arrays.Fill(buffer, (byte)0); - Arrays.Fill(counter, (byte)0); - Arrays.Fill(macBlock, (byte)0); - - counter[0] = 0x01; - data.SetLength(0); - associatedText.SetLength(0); - - if (initialAssociatedText != null) - { - ProcessAadBytes(initialAssociatedText, 0, initialAssociatedText.Length); - } - } - - private void intToBytes( - int num, - byte[] outBytes, - int outOff) - { - outBytes[outOff + 3] = (byte)(num >> 24); - outBytes[outOff + 2] = (byte)(num >> 16); - outBytes[outOff + 1] = (byte)(num >> 8); - outBytes[outOff] = (byte)num; - } - - private byte getFlag(bool authTextPresents, int macSize) - { - StringBuilder flagByte = new StringBuilder(); - - if (authTextPresents) - { - flagByte.Append("1"); - } - else - { - flagByte.Append("0"); - } - - - switch (macSize) - { - case 8: - flagByte.Append("010"); // binary 2 - break; - case 16: - flagByte.Append("011"); // binary 3 - break; - case 32: - flagByte.Append("100"); // binary 4 - break; - case 48: - flagByte.Append("101"); // binary 5 - break; - case 64: - flagByte.Append("110"); // binary 6 - break; - } - - String binaryNb = Convert.ToString(Nb_ - 1, 2); - while (binaryNb.Length < 4) - { - binaryNb = new StringBuilder(binaryNb).Insert(0, "0").ToString(); - } - - flagByte.Append(binaryNb); - - return (byte)Convert.ToInt32(flagByte.ToString(), 2); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/modes/KCtrBlockCipher.cs b/bc-sharp-crypto/src/crypto/modes/KCtrBlockCipher.cs deleted file mode 100644 index ff0249a..0000000 --- a/bc-sharp-crypto/src/crypto/modes/KCtrBlockCipher.cs +++ /dev/null @@ -1,235 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Modes -{ - /** - * Implements a Gamming or Counter (CTR) mode on top of a DSTU 7624 block cipher. - */ - public class KCtrBlockCipher : IStreamCipher, IBlockCipher - { - private byte[] IV; - private byte[] ofbV; - private byte[] ofbOutV; - private bool initialised; - - private int byteCount; - - private readonly int blockSize; - private readonly IBlockCipher cipher; - - /** - * Basic constructor. - * - * @param cipher the block cipher to be used as the basis of the - * feedback mode. - */ - public KCtrBlockCipher(IBlockCipher cipher) - { - this.cipher = cipher; - this.IV = new byte[cipher.GetBlockSize()]; - this.blockSize = cipher.GetBlockSize(); - - this.ofbV = new byte[cipher.GetBlockSize()]; - this.ofbOutV = new byte[cipher.GetBlockSize()]; - } - - /** - * return the underlying block cipher that we are wrapping. - * - * @return the underlying block cipher that we are wrapping. - */ - public IBlockCipher GetUnderlyingCipher() - { - return cipher; - } - /** - * Initialise the cipher and, possibly, the initialisation vector (IV). - * If an IV isn't passed as part of the parameter, the IV will be all zeros. - * An IV which is too short is handled in FIPS compliant fashion. - * - * @param forEncryption if true the cipher is initialised for - * encryption, if false for decryption. - * @param param the key and other data required by the cipher. - * @exception ArgumentException if the parameters argument is - * inappropriate. - */ - public void Init( - bool forEncryption, - ICipherParameters parameters) - { - this.initialised = true; - if (parameters is ParametersWithIV) - { - ParametersWithIV ivParam = (ParametersWithIV)parameters; - byte[] iv = ivParam.GetIV(); - int diff = IV.Length - iv.Length; - - Array.Clear(IV, 0, IV.Length); - Array.Copy(iv, 0, IV, diff, iv.Length); - - parameters = ivParam.Parameters; - } - else - { - throw new ArgumentException("Invalid parameter passed"); - } - - // if it's null, key is to be reused. - if (parameters != null) - { - cipher.Init(true, parameters); - } - - Reset(); - } - - /** - * return the algorithm name and mode. - * - * @return the name of the underlying algorithm followed by "/KCTR" - * and the block size in bits. - */ - public string AlgorithmName - { - get { return cipher.AlgorithmName + "/KCTR"; } - } - - public bool IsPartialBlockOkay - { - get { return true; } - } - - /** - * return the block size we are operating at. - * - * @return the block size we are operating at (in bytes). - */ - public int GetBlockSize() - { - return cipher.GetBlockSize(); - } - - public byte ReturnByte(byte input) - { - return CalculateByte(input); - } - - public void ProcessBytes(byte[] input, int inOff, int len, byte[] output, int outOff) - { - if (outOff + len > output.Length) - { - throw new DataLengthException("Output buffer too short"); - } - - if (inOff + len > input.Length) - { - throw new DataLengthException("Input buffer too small"); - } - - int inStart = inOff; - int inEnd = inOff + len; - int outStart = outOff; - - while (inStartRFC 7253 on The OCB - * Authenticated-Encryption Algorithm, licensed per: - * - *

License for - * Open-Source Software Implementations of OCB (Jan 9, 2013) - 'License 1'
- * Under this license, you are authorized to make, use, and distribute open-source software - * implementations of OCB. This license terminates for you if you sue someone over their open-source - * software implementation of OCB claiming that you have a patent covering their implementation. - *

- * This is a non-binding summary of a legal document (the link above). The parameters of the license - * are specified in the license document and that document is controlling.

- */ - public class OcbBlockCipher - : IAeadBlockCipher - { - private const int BLOCK_SIZE = 16; - - private readonly IBlockCipher hashCipher; - private readonly IBlockCipher mainCipher; - - /* - * CONFIGURATION - */ - private bool forEncryption; - private int macSize; - private byte[] initialAssociatedText; - - /* - * KEY-DEPENDENT - */ - // NOTE: elements are lazily calculated - private IList L; - private byte[] L_Asterisk, L_Dollar; - - /* - * NONCE-DEPENDENT - */ - private byte[] KtopInput = null; - private byte[] Stretch = new byte[24]; - private byte[] OffsetMAIN_0 = new byte[16]; - - /* - * PER-ENCRYPTION/DECRYPTION - */ - private byte[] hashBlock, mainBlock; - private int hashBlockPos, mainBlockPos; - private long hashBlockCount, mainBlockCount; - private byte[] OffsetHASH; - private byte[] Sum; - private byte[] OffsetMAIN = new byte[16]; - private byte[] Checksum; - - // NOTE: The MAC value is preserved after doFinal - private byte[] macBlock; - - public OcbBlockCipher(IBlockCipher hashCipher, IBlockCipher mainCipher) - { - if (hashCipher == null) - throw new ArgumentNullException("hashCipher"); - if (hashCipher.GetBlockSize() != BLOCK_SIZE) - throw new ArgumentException("must have a block size of " + BLOCK_SIZE, "hashCipher"); - if (mainCipher == null) - throw new ArgumentNullException("mainCipher"); - if (mainCipher.GetBlockSize() != BLOCK_SIZE) - throw new ArgumentException("must have a block size of " + BLOCK_SIZE, "mainCipher"); - - if (!hashCipher.AlgorithmName.Equals(mainCipher.AlgorithmName)) - throw new ArgumentException("'hashCipher' and 'mainCipher' must be the same algorithm"); - - this.hashCipher = hashCipher; - this.mainCipher = mainCipher; - } - - public virtual IBlockCipher GetUnderlyingCipher() - { - return mainCipher; - } - - public virtual string AlgorithmName - { - get { return mainCipher.AlgorithmName + "/OCB"; } - } - - public virtual void Init(bool forEncryption, ICipherParameters parameters) - { - bool oldForEncryption = this.forEncryption; - this.forEncryption = forEncryption; - this.macBlock = null; - - KeyParameter keyParameter; - - byte[] N; - if (parameters is AeadParameters) - { - AeadParameters aeadParameters = (AeadParameters) parameters; - - N = aeadParameters.GetNonce(); - initialAssociatedText = aeadParameters.GetAssociatedText(); - - int macSizeBits = aeadParameters.MacSize; - if (macSizeBits < 64 || macSizeBits > 128 || macSizeBits % 8 != 0) - throw new ArgumentException("Invalid value for MAC size: " + macSizeBits); - - macSize = macSizeBits / 8; - keyParameter = aeadParameters.Key; - } - else if (parameters is ParametersWithIV) - { - ParametersWithIV parametersWithIV = (ParametersWithIV) parameters; - - N = parametersWithIV.GetIV(); - initialAssociatedText = null; - macSize = 16; - keyParameter = (KeyParameter) parametersWithIV.Parameters; - } - else - { - throw new ArgumentException("invalid parameters passed to OCB"); - } - - this.hashBlock = new byte[16]; - this.mainBlock = new byte[forEncryption ? BLOCK_SIZE : (BLOCK_SIZE + macSize)]; - - if (N == null) - { - N = new byte[0]; - } - - if (N.Length > 15) - { - throw new ArgumentException("IV must be no more than 15 bytes"); - } - - /* - * KEY-DEPENDENT INITIALISATION - */ - - if (keyParameter != null) - { - // hashCipher always used in forward mode - hashCipher.Init(true, keyParameter); - mainCipher.Init(forEncryption, keyParameter); - KtopInput = null; - } - else if (oldForEncryption != forEncryption) - { - throw new ArgumentException("cannot change encrypting state without providing key."); - } - - this.L_Asterisk = new byte[16]; - hashCipher.ProcessBlock(L_Asterisk, 0, L_Asterisk, 0); - - this.L_Dollar = OCB_double(L_Asterisk); - - this.L = Platform.CreateArrayList(); - this.L.Add(OCB_double(L_Dollar)); - - /* - * NONCE-DEPENDENT AND PER-ENCRYPTION/DECRYPTION INITIALISATION - */ - - int bottom = ProcessNonce(N); - - int bits = bottom % 8, bytes = bottom / 8; - if (bits == 0) - { - Array.Copy(Stretch, bytes, OffsetMAIN_0, 0, 16); - } - else - { - for (int i = 0; i < 16; ++i) - { - uint b1 = Stretch[bytes]; - uint b2 = Stretch[++bytes]; - this.OffsetMAIN_0[i] = (byte) ((b1 << bits) | (b2 >> (8 - bits))); - } - } - - this.hashBlockPos = 0; - this.mainBlockPos = 0; - - this.hashBlockCount = 0; - this.mainBlockCount = 0; - - this.OffsetHASH = new byte[16]; - this.Sum = new byte[16]; - Array.Copy(OffsetMAIN_0, 0, OffsetMAIN, 0, 16); - this.Checksum = new byte[16]; - - if (initialAssociatedText != null) - { - ProcessAadBytes(initialAssociatedText, 0, initialAssociatedText.Length); - } - } - - protected virtual int ProcessNonce(byte[] N) - { - byte[] nonce = new byte[16]; - Array.Copy(N, 0, nonce, nonce.Length - N.Length, N.Length); - nonce[0] = (byte)(macSize << 4); - nonce[15 - N.Length] |= 1; - - int bottom = nonce[15] & 0x3F; - nonce[15] &= 0xC0; - - /* - * When used with incrementing nonces, the cipher is only applied once every 64 inits. - */ - if (KtopInput == null || !Arrays.AreEqual(nonce, KtopInput)) - { - byte[] Ktop = new byte[16]; - KtopInput = nonce; - hashCipher.ProcessBlock(KtopInput, 0, Ktop, 0); - Array.Copy(Ktop, 0, Stretch, 0, 16); - for (int i = 0; i < 8; ++i) - { - Stretch[16 + i] = (byte)(Ktop[i] ^ Ktop[i + 1]); - } - } - - return bottom; - } - - public virtual int GetBlockSize() - { - return BLOCK_SIZE; - } - - public virtual byte[] GetMac() - { - return macBlock == null - ? new byte[macSize] - : Arrays.Clone(macBlock); - } - - public virtual int GetOutputSize(int len) - { - int totalData = len + mainBlockPos; - if (forEncryption) - { - return totalData + macSize; - } - return totalData < macSize ? 0 : totalData - macSize; - } - - public virtual int GetUpdateOutputSize(int len) - { - int totalData = len + mainBlockPos; - if (!forEncryption) - { - if (totalData < macSize) - { - return 0; - } - totalData -= macSize; - } - return totalData - totalData % BLOCK_SIZE; - } - - public virtual void ProcessAadByte(byte input) - { - hashBlock[hashBlockPos] = input; - if (++hashBlockPos == hashBlock.Length) - { - ProcessHashBlock(); - } - } - - public virtual void ProcessAadBytes(byte[] input, int off, int len) - { - for (int i = 0; i < len; ++i) - { - hashBlock[hashBlockPos] = input[off + i]; - if (++hashBlockPos == hashBlock.Length) - { - ProcessHashBlock(); - } - } - } - - public virtual int ProcessByte(byte input, byte[] output, int outOff) - { - mainBlock[mainBlockPos] = input; - if (++mainBlockPos == mainBlock.Length) - { - ProcessMainBlock(output, outOff); - return BLOCK_SIZE; - } - return 0; - } - - public virtual int ProcessBytes(byte[] input, int inOff, int len, byte[] output, int outOff) - { - int resultLen = 0; - - for (int i = 0; i < len; ++i) - { - mainBlock[mainBlockPos] = input[inOff + i]; - if (++mainBlockPos == mainBlock.Length) - { - ProcessMainBlock(output, outOff + resultLen); - resultLen += BLOCK_SIZE; - } - } - - return resultLen; - } - - public virtual int DoFinal(byte[] output, int outOff) - { - /* - * For decryption, get the tag from the end of the message - */ - byte[] tag = null; - if (!forEncryption) { - if (mainBlockPos < macSize) - throw new InvalidCipherTextException("data too short"); - - mainBlockPos -= macSize; - tag = new byte[macSize]; - Array.Copy(mainBlock, mainBlockPos, tag, 0, macSize); - } - - /* - * HASH: Process any final partial block; compute final hash value - */ - if (hashBlockPos > 0) - { - OCB_extend(hashBlock, hashBlockPos); - UpdateHASH(L_Asterisk); - } - - /* - * OCB-ENCRYPT/OCB-DECRYPT: Process any final partial block - */ - if (mainBlockPos > 0) - { - if (forEncryption) - { - OCB_extend(mainBlock, mainBlockPos); - Xor(Checksum, mainBlock); - } - - Xor(OffsetMAIN, L_Asterisk); - - byte[] Pad = new byte[16]; - hashCipher.ProcessBlock(OffsetMAIN, 0, Pad, 0); - - Xor(mainBlock, Pad); - - Check.OutputLength(output, outOff, mainBlockPos, "Output buffer too short"); - Array.Copy(mainBlock, 0, output, outOff, mainBlockPos); - - if (!forEncryption) - { - OCB_extend(mainBlock, mainBlockPos); - Xor(Checksum, mainBlock); - } - } - - /* - * OCB-ENCRYPT/OCB-DECRYPT: Compute raw tag - */ - Xor(Checksum, OffsetMAIN); - Xor(Checksum, L_Dollar); - hashCipher.ProcessBlock(Checksum, 0, Checksum, 0); - Xor(Checksum, Sum); - - this.macBlock = new byte[macSize]; - Array.Copy(Checksum, 0, macBlock, 0, macSize); - - /* - * Validate or append tag and reset this cipher for the next run - */ - int resultLen = mainBlockPos; - - if (forEncryption) - { - Check.OutputLength(output, outOff, resultLen + macSize, "Output buffer too short"); - - // Append tag to the message - Array.Copy(macBlock, 0, output, outOff + resultLen, macSize); - resultLen += macSize; - } - else - { - // Compare the tag from the message with the calculated one - if (!Arrays.ConstantTimeAreEqual(macBlock, tag)) - throw new InvalidCipherTextException("mac check in OCB failed"); - } - - Reset(false); - - return resultLen; - } - - public virtual void Reset() - { - Reset(true); - } - - protected virtual void Clear(byte[] bs) - { - if (bs != null) - { - Array.Clear(bs, 0, bs.Length); - } - } - - protected virtual byte[] GetLSub(int n) - { - while (n >= L.Count) - { - L.Add(OCB_double((byte[]) L[L.Count - 1])); - } - return (byte[])L[n]; - } - - protected virtual void ProcessHashBlock() - { - /* - * HASH: Process any whole blocks - */ - UpdateHASH(GetLSub(OCB_ntz(++hashBlockCount))); - hashBlockPos = 0; - } - - protected virtual void ProcessMainBlock(byte[] output, int outOff) - { - Check.DataLength(output, outOff, BLOCK_SIZE, "Output buffer too short"); - - /* - * OCB-ENCRYPT/OCB-DECRYPT: Process any whole blocks - */ - - if (forEncryption) - { - Xor(Checksum, mainBlock); - mainBlockPos = 0; - } - - Xor(OffsetMAIN, GetLSub(OCB_ntz(++mainBlockCount))); - - Xor(mainBlock, OffsetMAIN); - mainCipher.ProcessBlock(mainBlock, 0, mainBlock, 0); - Xor(mainBlock, OffsetMAIN); - - Array.Copy(mainBlock, 0, output, outOff, 16); - - if (!forEncryption) - { - Xor(Checksum, mainBlock); - Array.Copy(mainBlock, BLOCK_SIZE, mainBlock, 0, macSize); - mainBlockPos = macSize; - } - } - - protected virtual void Reset(bool clearMac) - { - hashCipher.Reset(); - mainCipher.Reset(); - - Clear(hashBlock); - Clear(mainBlock); - - hashBlockPos = 0; - mainBlockPos = 0; - - hashBlockCount = 0; - mainBlockCount = 0; - - Clear(OffsetHASH); - Clear(Sum); - Array.Copy(OffsetMAIN_0, 0, OffsetMAIN, 0, 16); - Clear(Checksum); - - if (clearMac) - { - macBlock = null; - } - - if (initialAssociatedText != null) - { - ProcessAadBytes(initialAssociatedText, 0, initialAssociatedText.Length); - } - } - - protected virtual void UpdateHASH(byte[] LSub) - { - Xor(OffsetHASH, LSub); - Xor(hashBlock, OffsetHASH); - hashCipher.ProcessBlock(hashBlock, 0, hashBlock, 0); - Xor(Sum, hashBlock); - } - - protected static byte[] OCB_double(byte[] block) - { - byte[] result = new byte[16]; - int carry = ShiftLeft(block, result); - - /* - * NOTE: This construction is an attempt at a constant-time implementation. - */ - result[15] ^= (byte)(0x87 >> ((1 - carry) << 3)); - - return result; - } - - protected static void OCB_extend(byte[] block, int pos) - { - block[pos] = (byte) 0x80; - while (++pos < 16) - { - block[pos] = 0; - } - } - - protected static int OCB_ntz(long x) - { - if (x == 0) - { - return 64; - } - - int n = 0; - ulong ux = (ulong)x; - while ((ux & 1UL) == 0UL) - { - ++n; - ux >>= 1; - } - return n; - } - - protected static int ShiftLeft(byte[] block, byte[] output) - { - int i = 16; - uint bit = 0; - while (--i >= 0) - { - uint b = block[i]; - output[i] = (byte) ((b << 1) | bit); - bit = (b >> 7) & 1; - } - return (int)bit; - } - - protected static void Xor(byte[] block, byte[] val) - { - for (int i = 15; i >= 0; --i) - { - block[i] ^= val[i]; - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/modes/OfbBlockCipher.cs b/bc-sharp-crypto/src/crypto/modes/OfbBlockCipher.cs deleted file mode 100644 index a99f8c5..0000000 --- a/bc-sharp-crypto/src/crypto/modes/OfbBlockCipher.cs +++ /dev/null @@ -1,182 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Modes -{ - /** - * implements a Output-FeedBack (OFB) mode on top of a simple cipher. - */ - public class OfbBlockCipher - : IBlockCipher - { - private byte[] IV; - private byte[] ofbV; - private byte[] ofbOutV; - - private readonly int blockSize; - private readonly IBlockCipher cipher; - - /** - * Basic constructor. - * - * @param cipher the block cipher to be used as the basis of the - * feedback mode. - * @param blockSize the block size in bits (note: a multiple of 8) - */ - public OfbBlockCipher( - IBlockCipher cipher, - int blockSize) - { - this.cipher = cipher; - this.blockSize = blockSize / 8; - - this.IV = new byte[cipher.GetBlockSize()]; - this.ofbV = new byte[cipher.GetBlockSize()]; - this.ofbOutV = new byte[cipher.GetBlockSize()]; - } - - /** - * return the underlying block cipher that we are wrapping. - * - * @return the underlying block cipher that we are wrapping. - */ - public IBlockCipher GetUnderlyingCipher() - { - return cipher; - } - - /** - * Initialise the cipher and, possibly, the initialisation vector (IV). - * If an IV isn't passed as part of the parameter, the IV will be all zeros. - * An IV which is too short is handled in FIPS compliant fashion. - * - * @param forEncryption if true the cipher is initialised for - * encryption, if false for decryption. - * @param param the key and other data required by the cipher. - * @exception ArgumentException if the parameters argument is - * inappropriate. - */ - public void Init( - bool forEncryption, //ignored by this OFB mode - ICipherParameters parameters) - { - if (parameters is ParametersWithIV) - { - ParametersWithIV ivParam = (ParametersWithIV)parameters; - byte[] iv = ivParam.GetIV(); - - if (iv.Length < IV.Length) - { - // prepend the supplied IV with zeros (per FIPS PUB 81) - Array.Copy(iv, 0, IV, IV.Length - iv.Length, iv.Length); - for (int i = 0; i < IV.Length - iv.Length; i++) - { - IV[i] = 0; - } - } - else - { - Array.Copy(iv, 0, IV, 0, IV.Length); - } - - parameters = ivParam.Parameters; - } - - Reset(); - - // if it's null, key is to be reused. - if (parameters != null) - { - cipher.Init(true, parameters); - } - } - - /** - * return the algorithm name and mode. - * - * @return the name of the underlying algorithm followed by "/OFB" - * and the block size in bits - */ - public string AlgorithmName - { - get { return cipher.AlgorithmName + "/OFB" + (blockSize * 8); } - } - - public bool IsPartialBlockOkay - { - get { return true; } - } - - /** - * return the block size we are operating at (in bytes). - * - * @return the block size we are operating at (in bytes). - */ - public int GetBlockSize() - { - return blockSize; - } - - /** - * Process one block of input from the array in and write it to - * the out array. - * - * @param in the array containing the input data. - * @param inOff offset into the in array the data starts at. - * @param out the array the output data will be copied into. - * @param outOff the offset into the out array the output will start at. - * @exception DataLengthException if there isn't enough data in in, or - * space in out. - * @exception InvalidOperationException if the cipher isn't initialised. - * @return the number of bytes processed and produced. - */ - public int ProcessBlock( - byte[] input, - int inOff, - byte[] output, - int outOff) - { - if ((inOff + blockSize) > input.Length) - { - throw new DataLengthException("input buffer too short"); - } - - if ((outOff + blockSize) > output.Length) - { - throw new DataLengthException("output buffer too short"); - } - - cipher.ProcessBlock(ofbV, 0, ofbOutV, 0); - - // - // XOR the ofbV with the plaintext producing the cipher text (and - // the next input block). - // - for (int i = 0; i < blockSize; i++) - { - output[outOff + i] = (byte)(ofbOutV[i] ^ input[inOff + i]); - } - - // - // change over the input block. - // - Array.Copy(ofbV, blockSize, ofbV, 0, ofbV.Length - blockSize); - Array.Copy(ofbOutV, 0, ofbV, ofbV.Length - blockSize, blockSize); - - return blockSize; - } - - /** - * reset the feedback vector back to the IV and reset the underlying - * cipher. - */ - public void Reset() - { - Array.Copy(IV, 0, ofbV, 0, IV.Length); - - cipher.Reset(); - } - } - -} diff --git a/bc-sharp-crypto/src/crypto/modes/OpenPgpCfbBlockCipher.cs b/bc-sharp-crypto/src/crypto/modes/OpenPgpCfbBlockCipher.cs deleted file mode 100644 index 038ca78..0000000 --- a/bc-sharp-crypto/src/crypto/modes/OpenPgpCfbBlockCipher.cs +++ /dev/null @@ -1,337 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Modes -{ - /** - * Implements OpenPGP's rather strange version of Cipher-FeedBack (CFB) mode - * on top of a simple cipher. This class assumes the IV has been prepended - * to the data stream already, and just accomodates the reset after - * (blockSize + 2) bytes have been read. - *

- * For further info see RFC 2440. - *

- */ - public class OpenPgpCfbBlockCipher - : IBlockCipher - { - private byte[] IV; - private byte[] FR; - private byte[] FRE; - - private readonly IBlockCipher cipher; - private readonly int blockSize; - - private int count; - private bool forEncryption; - - /** - * Basic constructor. - * - * @param cipher the block cipher to be used as the basis of the - * feedback mode. - */ - public OpenPgpCfbBlockCipher( - IBlockCipher cipher) - { - this.cipher = cipher; - - this.blockSize = cipher.GetBlockSize(); - this.IV = new byte[blockSize]; - this.FR = new byte[blockSize]; - this.FRE = new byte[blockSize]; - } - - /** - * return the underlying block cipher that we are wrapping. - * - * @return the underlying block cipher that we are wrapping. - */ - public IBlockCipher GetUnderlyingCipher() - { - return cipher; - } - - /** - * return the algorithm name and mode. - * - * @return the name of the underlying algorithm followed by "/PGPCFB" - * and the block size in bits. - */ - public string AlgorithmName - { - get { return cipher.AlgorithmName + "/OpenPGPCFB"; } - } - - public bool IsPartialBlockOkay - { - get { return true; } - } - - /** - * return the block size we are operating at. - * - * @return the block size we are operating at (in bytes). - */ - public int GetBlockSize() - { - return cipher.GetBlockSize(); - } - - /** - * Process one block of input from the array in and write it to - * the out array. - * - * @param in the array containing the input data. - * @param inOff offset into the in array the data starts at. - * @param out the array the output data will be copied into. - * @param outOff the offset into the out array the output will start at. - * @exception DataLengthException if there isn't enough data in in, or - * space in out. - * @exception InvalidOperationException if the cipher isn't initialised. - * @return the number of bytes processed and produced. - */ - public int ProcessBlock( - byte[] input, - int inOff, - byte[] output, - int outOff) - { - return (forEncryption) ? EncryptBlock(input, inOff, output, outOff) : DecryptBlock(input, inOff, output, outOff); - } - - /** - * reset the chaining vector back to the IV and reset the underlying - * cipher. - */ - public void Reset() - { - count = 0; - - Array.Copy(IV, 0, FR, 0, FR.Length); - - cipher.Reset(); - } - - /** - * Initialise the cipher and, possibly, the initialisation vector (IV). - * If an IV isn't passed as part of the parameter, the IV will be all zeros. - * An IV which is too short is handled in FIPS compliant fashion. - * - * @param forEncryption if true the cipher is initialised for - * encryption, if false for decryption. - * @param parameters the key and other data required by the cipher. - * @exception ArgumentException if the parameters argument is - * inappropriate. - */ - public void Init( - bool forEncryption, - ICipherParameters parameters) - { - this.forEncryption = forEncryption; - - if (parameters is ParametersWithIV) - { - ParametersWithIV ivParam = (ParametersWithIV)parameters; - byte[] iv = ivParam.GetIV(); - - if (iv.Length < IV.Length) - { - // prepend the supplied IV with zeros (per FIPS PUB 81) - Array.Copy(iv, 0, IV, IV.Length - iv.Length, iv.Length); - for (int i = 0; i < IV.Length - iv.Length; i++) - { - IV[i] = 0; - } - } - else - { - Array.Copy(iv, 0, IV, 0, IV.Length); - } - - parameters = ivParam.Parameters; - } - - Reset(); - - cipher.Init(true, parameters); - } - - /** - * Encrypt one byte of data according to CFB mode. - * @param data the byte to encrypt - * @param blockOff offset in the current block - * @returns the encrypted byte - */ - private byte EncryptByte(byte data, int blockOff) - { - return (byte)(FRE[blockOff] ^ data); - } - - /** - * Do the appropriate processing for CFB IV mode encryption. - * - * @param in the array containing the data to be encrypted. - * @param inOff offset into the in array the data starts at. - * @param out the array the encrypted data will be copied into. - * @param outOff the offset into the out array the output will start at. - * @exception DataLengthException if there isn't enough data in in, or - * space in out. - * @exception InvalidOperationException if the cipher isn't initialised. - * @return the number of bytes processed and produced. - */ - private int EncryptBlock( - byte[] input, - int inOff, - byte[] outBytes, - int outOff) - { - if ((inOff + blockSize) > input.Length) - { - throw new DataLengthException("input buffer too short"); - } - - if ((outOff + blockSize) > outBytes.Length) - { - throw new DataLengthException("output buffer too short"); - } - - if (count > blockSize) - { - FR[blockSize - 2] = outBytes[outOff] = EncryptByte(input[inOff], blockSize - 2); - FR[blockSize - 1] = outBytes[outOff + 1] = EncryptByte(input[inOff + 1], blockSize - 1); - - cipher.ProcessBlock(FR, 0, FRE, 0); - - for (int n = 2; n < blockSize; n++) - { - FR[n - 2] = outBytes[outOff + n] = EncryptByte(input[inOff + n], n - 2); - } - } - else if (count == 0) - { - cipher.ProcessBlock(FR, 0, FRE, 0); - - for (int n = 0; n < blockSize; n++) - { - FR[n] = outBytes[outOff + n] = EncryptByte(input[inOff + n], n); - } - - count += blockSize; - } - else if (count == blockSize) - { - cipher.ProcessBlock(FR, 0, FRE, 0); - - outBytes[outOff] = EncryptByte(input[inOff], 0); - outBytes[outOff + 1] = EncryptByte(input[inOff + 1], 1); - - // - // do reset - // - Array.Copy(FR, 2, FR, 0, blockSize - 2); - Array.Copy(outBytes, outOff, FR, blockSize - 2, 2); - - cipher.ProcessBlock(FR, 0, FRE, 0); - - for (int n = 2; n < blockSize; n++) - { - FR[n - 2] = outBytes[outOff + n] = EncryptByte(input[inOff + n], n - 2); - } - - count += blockSize; - } - - return blockSize; - } - - /** - * Do the appropriate processing for CFB IV mode decryption. - * - * @param in the array containing the data to be decrypted. - * @param inOff offset into the in array the data starts at. - * @param out the array the encrypted data will be copied into. - * @param outOff the offset into the out array the output will start at. - * @exception DataLengthException if there isn't enough data in in, or - * space in out. - * @exception InvalidOperationException if the cipher isn't initialised. - * @return the number of bytes processed and produced. - */ - private int DecryptBlock( - byte[] input, - int inOff, - byte[] outBytes, - int outOff) - { - if ((inOff + blockSize) > input.Length) - { - throw new DataLengthException("input buffer too short"); - } - - if ((outOff + blockSize) > outBytes.Length) - { - throw new DataLengthException("output buffer too short"); - } - - if (count > blockSize) - { - byte inVal = input[inOff]; - FR[blockSize - 2] = inVal; - outBytes[outOff] = EncryptByte(inVal, blockSize - 2); - - inVal = input[inOff + 1]; - FR[blockSize - 1] = inVal; - outBytes[outOff + 1] = EncryptByte(inVal, blockSize - 1); - - cipher.ProcessBlock(FR, 0, FRE, 0); - - for (int n = 2; n < blockSize; n++) - { - inVal = input[inOff + n]; - FR[n - 2] = inVal; - outBytes[outOff + n] = EncryptByte(inVal, n - 2); - } - } - else if (count == 0) - { - cipher.ProcessBlock(FR, 0, FRE, 0); - - for (int n = 0; n < blockSize; n++) - { - FR[n] = input[inOff + n]; - outBytes[n] = EncryptByte(input[inOff + n], n); - } - - count += blockSize; - } - else if (count == blockSize) - { - cipher.ProcessBlock(FR, 0, FRE, 0); - - byte inVal1 = input[inOff]; - byte inVal2 = input[inOff + 1]; - outBytes[outOff ] = EncryptByte(inVal1, 0); - outBytes[outOff + 1] = EncryptByte(inVal2, 1); - - Array.Copy(FR, 2, FR, 0, blockSize - 2); - - FR[blockSize - 2] = inVal1; - FR[blockSize - 1] = inVal2; - - cipher.ProcessBlock(FR, 0, FRE, 0); - - for (int n = 2; n < blockSize; n++) - { - byte inVal = input[inOff + n]; - FR[n - 2] = inVal; - outBytes[outOff + n] = EncryptByte(inVal, n - 2); - } - - count += blockSize; - } - - return blockSize; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/modes/SicBlockCipher.cs b/bc-sharp-crypto/src/crypto/modes/SicBlockCipher.cs deleted file mode 100644 index 0bea4a4..0000000 --- a/bc-sharp-crypto/src/crypto/modes/SicBlockCipher.cs +++ /dev/null @@ -1,120 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Modes -{ - /** - * Implements the Segmented Integer Counter (SIC) mode on top of a simple - * block cipher. - */ - public class SicBlockCipher - : IBlockCipher - { - private readonly IBlockCipher cipher; - private readonly int blockSize; - private readonly byte[] counter; - private readonly byte[] counterOut; - private byte[] IV; - - /** - * Basic constructor. - * - * @param c the block cipher to be used. - */ - public SicBlockCipher(IBlockCipher cipher) - { - this.cipher = cipher; - this.blockSize = cipher.GetBlockSize(); - this.counter = new byte[blockSize]; - this.counterOut = new byte[blockSize]; - this.IV = new byte[blockSize]; - } - - /** - * return the underlying block cipher that we are wrapping. - * - * @return the underlying block cipher that we are wrapping. - */ - public virtual IBlockCipher GetUnderlyingCipher() - { - return cipher; - } - - public virtual void Init( - bool forEncryption, //ignored by this CTR mode - ICipherParameters parameters) - { - ParametersWithIV ivParam = parameters as ParametersWithIV; - if (ivParam == null) - throw new ArgumentException("CTR/SIC mode requires ParametersWithIV", "parameters"); - - this.IV = Arrays.Clone(ivParam.GetIV()); - - if (blockSize < IV.Length) - throw new ArgumentException("CTR/SIC mode requires IV no greater than: " + blockSize + " bytes."); - - int maxCounterSize = System.Math.Min(8, blockSize / 2); - if (blockSize - IV.Length > maxCounterSize) - throw new ArgumentException("CTR/SIC mode requires IV of at least: " + (blockSize - maxCounterSize) + " bytes."); - - // if null it's an IV changed only. - if (ivParam.Parameters != null) - { - cipher.Init(true, ivParam.Parameters); - } - - Reset(); - } - - public virtual string AlgorithmName - { - get { return cipher.AlgorithmName + "/SIC"; } - } - - public virtual bool IsPartialBlockOkay - { - get { return true; } - } - - public virtual int GetBlockSize() - { - return cipher.GetBlockSize(); - } - - public virtual int ProcessBlock( - byte[] input, - int inOff, - byte[] output, - int outOff) - { - cipher.ProcessBlock(counter, 0, counterOut, 0); - - // - // XOR the counterOut with the plaintext producing the cipher text - // - for (int i = 0; i < counterOut.Length; i++) - { - output[outOff + i] = (byte)(counterOut[i] ^ input[inOff + i]); - } - - // Increment the counter - int j = counter.Length; - while (--j >= 0 && ++counter[j] == 0) - { - } - - return counter.Length; - } - - public virtual void Reset() - { - Arrays.Fill(counter, (byte)0); - Array.Copy(IV, 0, counter, 0, IV.Length); - cipher.Reset(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/modes/gcm/BasicGcmExponentiator.cs b/bc-sharp-crypto/src/crypto/modes/gcm/BasicGcmExponentiator.cs deleted file mode 100644 index 5660a1f..0000000 --- a/bc-sharp-crypto/src/crypto/modes/gcm/BasicGcmExponentiator.cs +++ /dev/null @@ -1,40 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Modes.Gcm -{ - public class BasicGcmExponentiator - : IGcmExponentiator - { - private uint[] x; - - public void Init(byte[] x) - { - this.x = GcmUtilities.AsUints(x); - } - - public void ExponentiateX(long pow, byte[] output) - { - // Initial value is little-endian 1 - uint[] y = GcmUtilities.OneAsUints(); - - if (pow > 0) - { - uint[] powX = Arrays.Clone(x); - do - { - if ((pow & 1L) != 0) - { - GcmUtilities.Multiply(y, powX); - } - GcmUtilities.Multiply(powX, powX); - pow >>= 1; - } - while (pow > 0); - } - - GcmUtilities.AsBytes(y, output); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/modes/gcm/BasicGcmMultiplier.cs b/bc-sharp-crypto/src/crypto/modes/gcm/BasicGcmMultiplier.cs deleted file mode 100644 index eb89383..0000000 --- a/bc-sharp-crypto/src/crypto/modes/gcm/BasicGcmMultiplier.cs +++ /dev/null @@ -1,22 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Modes.Gcm -{ - public class BasicGcmMultiplier - : IGcmMultiplier - { - private uint[] H; - - public void Init(byte[] H) - { - this.H = GcmUtilities.AsUints(H); - } - - public void MultiplyH(byte[] x) - { - uint[] t = GcmUtilities.AsUints(x); - GcmUtilities.Multiply(t, H); - GcmUtilities.AsBytes(t, x); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/modes/gcm/GcmUtilities.cs b/bc-sharp-crypto/src/crypto/modes/gcm/GcmUtilities.cs deleted file mode 100644 index d8ab2ca..0000000 --- a/bc-sharp-crypto/src/crypto/modes/gcm/GcmUtilities.cs +++ /dev/null @@ -1,319 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Modes.Gcm -{ - internal abstract class GcmUtilities - { - private const uint E1 = 0xe1000000; - private const ulong E1L = (ulong)E1 << 32; - - private static uint[] GenerateLookup() - { - uint[] lookup = new uint[256]; - - for (int c = 0; c < 256; ++c) - { - uint v = 0; - for (int i = 7; i >= 0; --i) - { - if ((c & (1 << i)) != 0) - { - v ^= (E1 >> (7 - i)); - } - } - lookup[c] = v; - } - - return lookup; - } - - private static readonly uint[] LOOKUP = GenerateLookup(); - - internal static byte[] OneAsBytes() - { - byte[] tmp = new byte[16]; - tmp[0] = 0x80; - return tmp; - } - - internal static uint[] OneAsUints() - { - uint[] tmp = new uint[4]; - tmp[0] = 0x80000000; - return tmp; - } - - internal static ulong[] OneAsUlongs() - { - ulong[] tmp = new ulong[2]; - tmp[0] = 1UL << 63; - return tmp; - } - - internal static byte[] AsBytes(uint[] x) - { - return Pack.UInt32_To_BE(x); - } - - internal static void AsBytes(uint[] x, byte[] z) - { - Pack.UInt32_To_BE(x, z, 0); - } - - internal static byte[] AsBytes(ulong[] x) - { - byte[] z = new byte[16]; - Pack.UInt64_To_BE(x, z, 0); - return z; - } - - internal static void AsBytes(ulong[] x, byte[] z) - { - Pack.UInt64_To_BE(x, z, 0); - } - - internal static uint[] AsUints(byte[] bs) - { - uint[] output = new uint[4]; - Pack.BE_To_UInt32(bs, 0, output); - return output; - } - - internal static void AsUints(byte[] bs, uint[] output) - { - Pack.BE_To_UInt32(bs, 0, output); - } - - internal static ulong[] AsUlongs(byte[] x) - { - ulong[] z = new ulong[2]; - Pack.BE_To_UInt64(x, 0, z); - return z; - } - - public static void AsUlongs(byte[] x, ulong[] z) - { - Pack.BE_To_UInt64(x, 0, z); - } - - internal static void Multiply(byte[] x, byte[] y) - { - uint[] t1 = GcmUtilities.AsUints(x); - uint[] t2 = GcmUtilities.AsUints(y); - GcmUtilities.Multiply(t1, t2); - GcmUtilities.AsBytes(t1, x); - } - - internal static void Multiply(uint[] x, uint[] y) - { - uint r00 = x[0], r01 = x[1], r02 = x[2], r03 = x[3]; - uint r10 = 0, r11 = 0, r12 = 0, r13 = 0; - - for (int i = 0; i < 4; ++i) - { - int bits = (int)y[i]; - for (int j = 0; j < 32; ++j) - { - uint m1 = (uint)(bits >> 31); bits <<= 1; - r10 ^= (r00 & m1); - r11 ^= (r01 & m1); - r12 ^= (r02 & m1); - r13 ^= (r03 & m1); - - uint m2 = (uint)((int)(r03 << 31) >> 8); - r03 = (r03 >> 1) | (r02 << 31); - r02 = (r02 >> 1) | (r01 << 31); - r01 = (r01 >> 1) | (r00 << 31); - r00 = (r00 >> 1) ^ (m2 & E1); - } - } - - x[0] = r10; - x[1] = r11; - x[2] = r12; - x[3] = r13; - } - - internal static void Multiply(ulong[] x, ulong[] y) - { - ulong r00 = x[0], r01 = x[1], r10 = 0, r11 = 0; - - for (int i = 0; i < 2; ++i) - { - long bits = (long)y[i]; - for (int j = 0; j < 64; ++j) - { - ulong m1 = (ulong)(bits >> 63); bits <<= 1; - r10 ^= (r00 & m1); - r11 ^= (r01 & m1); - - ulong m2 = (ulong)((long)(r01 << 63) >> 8); - r01 = (r01 >> 1) | (r00 << 63); - r00 = (r00 >> 1) ^ (m2 & E1L); - } - } - - x[0] = r10; - x[1] = r11; - } - - // P is the value with only bit i=1 set - internal static void MultiplyP(uint[] x) - { - uint m = (uint)((int)ShiftRight(x) >> 8); - x[0] ^= (m & E1); - } - - internal static void MultiplyP(uint[] x, uint[] z) - { - uint m = (uint)((int)ShiftRight(x, z) >> 8); - z[0] ^= (m & E1); - } - - internal static void MultiplyP8(uint[] x) - { -// for (int i = 8; i != 0; --i) -// { -// MultiplyP(x); -// } - - uint c = ShiftRightN(x, 8); - x[0] ^= LOOKUP[c >> 24]; - } - - internal static void MultiplyP8(uint[] x, uint[] y) - { - uint c = ShiftRightN(x, 8, y); - y[0] ^= LOOKUP[c >> 24]; - } - - internal static uint ShiftRight(uint[] x) - { - uint b = x[0]; - x[0] = b >> 1; - uint c = b << 31; - b = x[1]; - x[1] = (b >> 1) | c; - c = b << 31; - b = x[2]; - x[2] = (b >> 1) | c; - c = b << 31; - b = x[3]; - x[3] = (b >> 1) | c; - return b << 31; - } - - internal static uint ShiftRight(uint[] x, uint[] z) - { - uint b = x[0]; - z[0] = b >> 1; - uint c = b << 31; - b = x[1]; - z[1] = (b >> 1) | c; - c = b << 31; - b = x[2]; - z[2] = (b >> 1) | c; - c = b << 31; - b = x[3]; - z[3] = (b >> 1) | c; - return b << 31; - } - - internal static uint ShiftRightN(uint[] x, int n) - { - uint b = x[0]; int nInv = 32 - n; - x[0] = b >> n; - uint c = b << nInv; - b = x[1]; - x[1] = (b >> n) | c; - c = b << nInv; - b = x[2]; - x[2] = (b >> n) | c; - c = b << nInv; - b = x[3]; - x[3] = (b >> n) | c; - return b << nInv; - } - - internal static uint ShiftRightN(uint[] x, int n, uint[] z) - { - uint b = x[0]; int nInv = 32 - n; - z[0] = b >> n; - uint c = b << nInv; - b = x[1]; - z[1] = (b >> n) | c; - c = b << nInv; - b = x[2]; - z[2] = (b >> n) | c; - c = b << nInv; - b = x[3]; - z[3] = (b >> n) | c; - return b << nInv; - } - - internal static void Xor(byte[] x, byte[] y) - { - int i = 0; - do - { - x[i] ^= y[i]; ++i; - x[i] ^= y[i]; ++i; - x[i] ^= y[i]; ++i; - x[i] ^= y[i]; ++i; - } - while (i < 16); - } - - internal static void Xor(byte[] x, byte[] y, int yOff, int yLen) - { - while (--yLen >= 0) - { - x[yLen] ^= y[yOff + yLen]; - } - } - - internal static void Xor(byte[] x, byte[] y, byte[] z) - { - int i = 0; - do - { - z[i] = (byte)(x[i] ^ y[i]); ++i; - z[i] = (byte)(x[i] ^ y[i]); ++i; - z[i] = (byte)(x[i] ^ y[i]); ++i; - z[i] = (byte)(x[i] ^ y[i]); ++i; - } - while (i < 16); - } - - internal static void Xor(uint[] x, uint[] y) - { - x[0] ^= y[0]; - x[1] ^= y[1]; - x[2] ^= y[2]; - x[3] ^= y[3]; - } - - internal static void Xor(uint[] x, uint[] y, uint[] z) - { - z[0] = x[0] ^ y[0]; - z[1] = x[1] ^ y[1]; - z[2] = x[2] ^ y[2]; - z[3] = x[3] ^ y[3]; - } - - internal static void Xor(ulong[] x, ulong[] y) - { - x[0] ^= y[0]; - x[1] ^= y[1]; - } - - internal static void Xor(ulong[] x, ulong[] y, ulong[] z) - { - z[0] = x[0] ^ y[0]; - z[1] = x[1] ^ y[1]; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/modes/gcm/IGcmExponentiator.cs b/bc-sharp-crypto/src/crypto/modes/gcm/IGcmExponentiator.cs deleted file mode 100644 index 5b4ce9d..0000000 --- a/bc-sharp-crypto/src/crypto/modes/gcm/IGcmExponentiator.cs +++ /dev/null @@ -1,10 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Modes.Gcm -{ - public interface IGcmExponentiator - { - void Init(byte[] x); - void ExponentiateX(long pow, byte[] output); - } -} diff --git a/bc-sharp-crypto/src/crypto/modes/gcm/IGcmMultiplier.cs b/bc-sharp-crypto/src/crypto/modes/gcm/IGcmMultiplier.cs deleted file mode 100644 index ec7b906..0000000 --- a/bc-sharp-crypto/src/crypto/modes/gcm/IGcmMultiplier.cs +++ /dev/null @@ -1,10 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Modes.Gcm -{ - public interface IGcmMultiplier - { - void Init(byte[] H); - void MultiplyH(byte[] x); - } -} diff --git a/bc-sharp-crypto/src/crypto/modes/gcm/Tables1kGcmExponentiator.cs b/bc-sharp-crypto/src/crypto/modes/gcm/Tables1kGcmExponentiator.cs deleted file mode 100644 index e649d67..0000000 --- a/bc-sharp-crypto/src/crypto/modes/gcm/Tables1kGcmExponentiator.cs +++ /dev/null @@ -1,59 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Modes.Gcm -{ - public class Tables1kGcmExponentiator - : IGcmExponentiator - { - // A lookup table of the power-of-two powers of 'x' - // - lookupPowX2[i] = x^(2^i) - private IList lookupPowX2; - - public void Init(byte[] x) - { - uint[] y = GcmUtilities.AsUints(x); - if (lookupPowX2 != null && Arrays.AreEqual(y, (uint[])lookupPowX2[0])) - return; - - lookupPowX2 = Platform.CreateArrayList(8); - lookupPowX2.Add(y); - } - - public void ExponentiateX(long pow, byte[] output) - { - uint[] y = GcmUtilities.OneAsUints(); - int bit = 0; - while (pow > 0) - { - if ((pow & 1L) != 0) - { - EnsureAvailable(bit); - GcmUtilities.Multiply(y, (uint[])lookupPowX2[bit]); - } - ++bit; - pow >>= 1; - } - - GcmUtilities.AsBytes(y, output); - } - - private void EnsureAvailable(int bit) - { - int count = lookupPowX2.Count; - if (count <= bit) - { - uint[] tmp = (uint[])lookupPowX2[count - 1]; - do - { - tmp = Arrays.Clone(tmp); - GcmUtilities.Multiply(tmp, tmp); - lookupPowX2.Add(tmp); - } - while (++count <= bit); - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/modes/gcm/Tables64kGcmMultiplier.cs b/bc-sharp-crypto/src/crypto/modes/gcm/Tables64kGcmMultiplier.cs deleted file mode 100644 index 707b0be..0000000 --- a/bc-sharp-crypto/src/crypto/modes/gcm/Tables64kGcmMultiplier.cs +++ /dev/null @@ -1,77 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Modes.Gcm -{ - public class Tables64kGcmMultiplier - : IGcmMultiplier - { - private byte[] H; - private uint[][][] M; - - public void Init(byte[] H) - { - if (M == null) - { - M = new uint[16][][]; - } - else if (Arrays.AreEqual(this.H, H)) - { - return; - } - - this.H = Arrays.Clone(H); - - M[0] = new uint[256][]; - M[0][0] = new uint[4]; - M[0][128] = GcmUtilities.AsUints(H); - for (int j = 64; j >= 1; j >>= 1) - { - uint[] tmp = (uint[])M[0][j + j].Clone(); - GcmUtilities.MultiplyP(tmp); - M[0][j] = tmp; - } - for (int i = 0; ; ) - { - for (int j = 2; j < 256; j += j) - { - for (int k = 1; k < j; ++k) - { - uint[] tmp = (uint[])M[i][j].Clone(); - GcmUtilities.Xor(tmp, M[i][k]); - M[i][j + k] = tmp; - } - } - - if (++i == 16) return; - - M[i] = new uint[256][]; - M[i][0] = new uint[4]; - for (int j = 128; j > 0; j >>= 1) - { - uint[] tmp = (uint[])M[i - 1][j].Clone(); - GcmUtilities.MultiplyP8(tmp); - M[i][j] = tmp; - } - } - } - - public void MultiplyH(byte[] x) - { - uint[] z = new uint[4]; - for (int i = 0; i != 16; ++i) - { - //GcmUtilities.Xor(z, M[i][x[i]]); - uint[] m = M[i][x[i]]; - z[0] ^= m[0]; - z[1] ^= m[1]; - z[2] ^= m[2]; - z[3] ^= m[3]; - } - - Pack.UInt32_To_BE(z, x, 0); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/modes/gcm/Tables8kGcmMultiplier.cs b/bc-sharp-crypto/src/crypto/modes/gcm/Tables8kGcmMultiplier.cs deleted file mode 100644 index 5f3d6c8..0000000 --- a/bc-sharp-crypto/src/crypto/modes/gcm/Tables8kGcmMultiplier.cs +++ /dev/null @@ -1,103 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Modes.Gcm -{ - public class Tables8kGcmMultiplier - : IGcmMultiplier - { - private byte[] H; - private uint[][][] M; - - public void Init(byte[] H) - { - if (M == null) - { - M = new uint[32][][]; - } - else if (Arrays.AreEqual(this.H, H)) - { - return; - } - - this.H = Arrays.Clone(H); - - M[0] = new uint[16][]; - M[1] = new uint[16][]; - M[0][0] = new uint[4]; - M[1][0] = new uint[4]; - M[1][8] = GcmUtilities.AsUints(H); - - for (int j = 4; j >= 1; j >>= 1) - { - uint[] tmp = (uint[])M[1][j + j].Clone(); - GcmUtilities.MultiplyP(tmp); - M[1][j] = tmp; - } - - { - uint[] tmp = (uint[])M[1][1].Clone(); - GcmUtilities.MultiplyP(tmp); - M[0][8] = tmp; - } - - for (int j = 4; j >= 1; j >>= 1) - { - uint[] tmp = (uint[])M[0][j + j].Clone(); - GcmUtilities.MultiplyP(tmp); - M[0][j] = tmp; - } - - for (int i = 0; ; ) - { - for (int j = 2; j < 16; j += j) - { - for (int k = 1; k < j; ++k) - { - uint[] tmp = (uint[])M[i][j].Clone(); - GcmUtilities.Xor(tmp, M[i][k]); - M[i][j + k] = tmp; - } - } - - if (++i == 32) return; - - if (i > 1) - { - M[i] = new uint[16][]; - M[i][0] = new uint[4]; - for (int j = 8; j > 0; j >>= 1) - { - uint[] tmp = (uint[])M[i - 2][j].Clone(); - GcmUtilities.MultiplyP8(tmp); - M[i][j] = tmp; - } - } - } - } - - public void MultiplyH(byte[] x) - { - uint[] z = new uint[4]; - for (int i = 15; i >= 0; --i) - { - //GcmUtilities.Xor(z, M[i + i][x[i] & 0x0f]); - uint[] m = M[i + i][x[i] & 0x0f]; - z[0] ^= m[0]; - z[1] ^= m[1]; - z[2] ^= m[2]; - z[3] ^= m[3]; - //GcmUtilities.Xor(z, M[i + i + 1][(x[i] & 0xf0) >> 4]); - m = M[i + i + 1][(x[i] & 0xf0) >> 4]; - z[0] ^= m[0]; - z[1] ^= m[1]; - z[2] ^= m[2]; - z[3] ^= m[3]; - } - - Pack.UInt32_To_BE(z, x, 0); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/operators/Asn1Signature.cs b/bc-sharp-crypto/src/crypto/operators/Asn1Signature.cs deleted file mode 100644 index e023c1d..0000000 --- a/bc-sharp-crypto/src/crypto/operators/Asn1Signature.cs +++ /dev/null @@ -1,555 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.CryptoPro; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Oiw; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.TeleTrust; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto.IO; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Crypto.Operators -{ - internal class X509Utilities - { - private static readonly Asn1Null derNull = DerNull.Instance; - - private static readonly IDictionary algorithms = Platform.CreateHashtable(); - private static readonly IDictionary exParams = Platform.CreateHashtable(); - private static readonly ISet noParams = new HashSet(); - - static X509Utilities() - { - algorithms.Add("MD2WITHRSAENCRYPTION", PkcsObjectIdentifiers.MD2WithRsaEncryption); - algorithms.Add("MD2WITHRSA", PkcsObjectIdentifiers.MD2WithRsaEncryption); - algorithms.Add("MD5WITHRSAENCRYPTION", PkcsObjectIdentifiers.MD5WithRsaEncryption); - algorithms.Add("MD5WITHRSA", PkcsObjectIdentifiers.MD5WithRsaEncryption); - algorithms.Add("SHA1WITHRSAENCRYPTION", PkcsObjectIdentifiers.Sha1WithRsaEncryption); - algorithms.Add("SHA1WITHRSA", PkcsObjectIdentifiers.Sha1WithRsaEncryption); - algorithms.Add("SHA224WITHRSAENCRYPTION", PkcsObjectIdentifiers.Sha224WithRsaEncryption); - algorithms.Add("SHA224WITHRSA", PkcsObjectIdentifiers.Sha224WithRsaEncryption); - algorithms.Add("SHA256WITHRSAENCRYPTION", PkcsObjectIdentifiers.Sha256WithRsaEncryption); - algorithms.Add("SHA256WITHRSA", PkcsObjectIdentifiers.Sha256WithRsaEncryption); - algorithms.Add("SHA384WITHRSAENCRYPTION", PkcsObjectIdentifiers.Sha384WithRsaEncryption); - algorithms.Add("SHA384WITHRSA", PkcsObjectIdentifiers.Sha384WithRsaEncryption); - algorithms.Add("SHA512WITHRSAENCRYPTION", PkcsObjectIdentifiers.Sha512WithRsaEncryption); - algorithms.Add("SHA512WITHRSA", PkcsObjectIdentifiers.Sha512WithRsaEncryption); - algorithms.Add("SHA1WITHRSAANDMGF1", PkcsObjectIdentifiers.IdRsassaPss); - algorithms.Add("SHA224WITHRSAANDMGF1", PkcsObjectIdentifiers.IdRsassaPss); - algorithms.Add("SHA256WITHRSAANDMGF1", PkcsObjectIdentifiers.IdRsassaPss); - algorithms.Add("SHA384WITHRSAANDMGF1", PkcsObjectIdentifiers.IdRsassaPss); - algorithms.Add("SHA512WITHRSAANDMGF1", PkcsObjectIdentifiers.IdRsassaPss); - algorithms.Add("RIPEMD160WITHRSAENCRYPTION", TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD160); - algorithms.Add("RIPEMD160WITHRSA", TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD160); - algorithms.Add("RIPEMD128WITHRSAENCRYPTION", TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD128); - algorithms.Add("RIPEMD128WITHRSA", TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD128); - algorithms.Add("RIPEMD256WITHRSAENCRYPTION", TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD256); - algorithms.Add("RIPEMD256WITHRSA", TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD256); - algorithms.Add("SHA1WITHDSA", X9ObjectIdentifiers.IdDsaWithSha1); - algorithms.Add("DSAWITHSHA1", X9ObjectIdentifiers.IdDsaWithSha1); - algorithms.Add("SHA224WITHDSA", NistObjectIdentifiers.DsaWithSha224); - algorithms.Add("SHA256WITHDSA", NistObjectIdentifiers.DsaWithSha256); - algorithms.Add("SHA384WITHDSA", NistObjectIdentifiers.DsaWithSha384); - algorithms.Add("SHA512WITHDSA", NistObjectIdentifiers.DsaWithSha512); - algorithms.Add("SHA1WITHECDSA", X9ObjectIdentifiers.ECDsaWithSha1); - algorithms.Add("ECDSAWITHSHA1", X9ObjectIdentifiers.ECDsaWithSha1); - algorithms.Add("SHA224WITHECDSA", X9ObjectIdentifiers.ECDsaWithSha224); - algorithms.Add("SHA256WITHECDSA", X9ObjectIdentifiers.ECDsaWithSha256); - algorithms.Add("SHA384WITHECDSA", X9ObjectIdentifiers.ECDsaWithSha384); - algorithms.Add("SHA512WITHECDSA", X9ObjectIdentifiers.ECDsaWithSha512); - algorithms.Add("GOST3411WITHGOST3410", CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x94); - algorithms.Add("GOST3411WITHGOST3410-94", CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x94); - algorithms.Add("GOST3411WITHECGOST3410", CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x2001); - algorithms.Add("GOST3411WITHECGOST3410-2001", CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x2001); - algorithms.Add("GOST3411WITHGOST3410-2001", CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x2001); - - // - // According to RFC 3279, the ASN.1 encoding SHALL (id-dsa-with-sha1) or MUST (ecdsa-with-SHA*) omit the parameters field. - // The parameters field SHALL be NULL for RSA based signature algorithms. - // - noParams.Add(X9ObjectIdentifiers.ECDsaWithSha1); - noParams.Add(X9ObjectIdentifiers.ECDsaWithSha224); - noParams.Add(X9ObjectIdentifiers.ECDsaWithSha256); - noParams.Add(X9ObjectIdentifiers.ECDsaWithSha384); - noParams.Add(X9ObjectIdentifiers.ECDsaWithSha512); - noParams.Add(X9ObjectIdentifiers.IdDsaWithSha1); - noParams.Add(NistObjectIdentifiers.DsaWithSha224); - noParams.Add(NistObjectIdentifiers.DsaWithSha256); - noParams.Add(NistObjectIdentifiers.DsaWithSha384); - noParams.Add(NistObjectIdentifiers.DsaWithSha512); - - // - // RFC 4491 - // - noParams.Add(CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x94); - noParams.Add(CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x2001); - - // - // explicit params - // - AlgorithmIdentifier sha1AlgId = new AlgorithmIdentifier(OiwObjectIdentifiers.IdSha1, DerNull.Instance); - exParams.Add("SHA1WITHRSAANDMGF1", CreatePssParams(sha1AlgId, 20)); - - AlgorithmIdentifier sha224AlgId = new AlgorithmIdentifier(NistObjectIdentifiers.IdSha224, DerNull.Instance); - exParams.Add("SHA224WITHRSAANDMGF1", CreatePssParams(sha224AlgId, 28)); - - AlgorithmIdentifier sha256AlgId = new AlgorithmIdentifier(NistObjectIdentifiers.IdSha256, DerNull.Instance); - exParams.Add("SHA256WITHRSAANDMGF1", CreatePssParams(sha256AlgId, 32)); - - AlgorithmIdentifier sha384AlgId = new AlgorithmIdentifier(NistObjectIdentifiers.IdSha384, DerNull.Instance); - exParams.Add("SHA384WITHRSAANDMGF1", CreatePssParams(sha384AlgId, 48)); - - AlgorithmIdentifier sha512AlgId = new AlgorithmIdentifier(NistObjectIdentifiers.IdSha512, DerNull.Instance); - exParams.Add("SHA512WITHRSAANDMGF1", CreatePssParams(sha512AlgId, 64)); - } - - /** - * Return the digest algorithm using one of the standard JCA string - * representations rather than the algorithm identifier (if possible). - */ - private static string GetDigestAlgName( - DerObjectIdentifier digestAlgOID) - { - if (PkcsObjectIdentifiers.MD5.Equals(digestAlgOID)) - { - return "MD5"; - } - else if (OiwObjectIdentifiers.IdSha1.Equals(digestAlgOID)) - { - return "SHA1"; - } - else if (NistObjectIdentifiers.IdSha224.Equals(digestAlgOID)) - { - return "SHA224"; - } - else if (NistObjectIdentifiers.IdSha256.Equals(digestAlgOID)) - { - return "SHA256"; - } - else if (NistObjectIdentifiers.IdSha384.Equals(digestAlgOID)) - { - return "SHA384"; - } - else if (NistObjectIdentifiers.IdSha512.Equals(digestAlgOID)) - { - return "SHA512"; - } - else if (TeleTrusTObjectIdentifiers.RipeMD128.Equals(digestAlgOID)) - { - return "RIPEMD128"; - } - else if (TeleTrusTObjectIdentifiers.RipeMD160.Equals(digestAlgOID)) - { - return "RIPEMD160"; - } - else if (TeleTrusTObjectIdentifiers.RipeMD256.Equals(digestAlgOID)) - { - return "RIPEMD256"; - } - else if (CryptoProObjectIdentifiers.GostR3411.Equals(digestAlgOID)) - { - return "GOST3411"; - } - else - { - return digestAlgOID.Id; - } - } - - internal static string GetSignatureName(AlgorithmIdentifier sigAlgId) - { - Asn1Encodable parameters = sigAlgId.Parameters; - - if (parameters != null && !derNull.Equals(parameters)) - { - if (sigAlgId.Algorithm.Equals(PkcsObjectIdentifiers.IdRsassaPss)) - { - RsassaPssParameters rsaParams = RsassaPssParameters.GetInstance(parameters); - - return GetDigestAlgName(rsaParams.HashAlgorithm.Algorithm) + "withRSAandMGF1"; - } - if (sigAlgId.Algorithm.Equals(X9ObjectIdentifiers.ECDsaWithSha2)) - { - Asn1Sequence ecDsaParams = Asn1Sequence.GetInstance(parameters); - - return GetDigestAlgName((DerObjectIdentifier)ecDsaParams[0]) + "withECDSA"; - } - } - - return sigAlgId.Algorithm.Id; - } - - private static RsassaPssParameters CreatePssParams( - AlgorithmIdentifier hashAlgId, - int saltSize) - { - return new RsassaPssParameters( - hashAlgId, - new AlgorithmIdentifier(PkcsObjectIdentifiers.IdMgf1, hashAlgId), - new DerInteger(saltSize), - new DerInteger(1)); - } - - internal static DerObjectIdentifier GetAlgorithmOid( - string algorithmName) - { - algorithmName = Platform.ToUpperInvariant(algorithmName); - - if (algorithms.Contains(algorithmName)) - { - return (DerObjectIdentifier) algorithms[algorithmName]; - } - - return new DerObjectIdentifier(algorithmName); - } - - internal static AlgorithmIdentifier GetSigAlgID( - DerObjectIdentifier sigOid, - string algorithmName) - { - if (noParams.Contains(sigOid)) - { - return new AlgorithmIdentifier(sigOid); - } - - algorithmName = Platform.ToUpperInvariant(algorithmName); - - if (exParams.Contains(algorithmName)) - { - return new AlgorithmIdentifier(sigOid, (Asn1Encodable) exParams[algorithmName]); - } - - return new AlgorithmIdentifier(sigOid, DerNull.Instance); - } - - internal static IEnumerable GetAlgNames() - { - return new EnumerableProxy(algorithms.Keys); - } - } - - internal class SignerBucket - : Stream - { - protected readonly ISigner signer; - - public SignerBucket( - ISigner signer) - { - this.signer = signer; - } - - public override int Read( - byte[] buffer, - int offset, - int count) - { - throw new NotImplementedException (); - } - - public override int ReadByte() - { - throw new NotImplementedException (); - } - - public override void Write( - byte[] buffer, - int offset, - int count) - { - if (count > 0) - { - signer.BlockUpdate(buffer, offset, count); - } - } - - public override void WriteByte( - byte b) - { - signer.Update(b); - } - - public override bool CanRead - { - get { return false; } - } - - public override bool CanWrite - { - get { return true; } - } - - public override bool CanSeek - { - get { return false; } - } - - public override long Length - { - get { return 0; } - } - - public override long Position - { - get { throw new NotImplementedException (); } - set { throw new NotImplementedException (); } - } - - public override void Flush() - { - } - - public override long Seek( - long offset, - SeekOrigin origin) - { - throw new NotImplementedException (); - } - - public override void SetLength( - long length) - { - throw new NotImplementedException (); - } - } - - /// - /// Calculator factory class for signature generation in ASN.1 based profiles that use an AlgorithmIdentifier to preserve - /// signature algorithm details. - /// - public class Asn1SignatureFactory: ISignatureFactory - { - private readonly AlgorithmIdentifier algID; - private readonly string algorithm; - private readonly AsymmetricKeyParameter privateKey; - private readonly SecureRandom random; - - /// - /// Base constructor. - /// - /// The name of the signature algorithm to use. - /// The private key to be used in the signing operation. - public Asn1SignatureFactory (string algorithm, AsymmetricKeyParameter privateKey): this(algorithm, privateKey, null) - { - } - - /// - /// Constructor which also specifies a source of randomness to be used if one is required. - /// - /// The name of the signature algorithm to use. - /// The private key to be used in the signing operation. - /// The source of randomness to be used in signature calculation. - public Asn1SignatureFactory (string algorithm, AsymmetricKeyParameter privateKey, SecureRandom random) - { - DerObjectIdentifier sigOid = X509Utilities.GetAlgorithmOid (algorithm); - - this.algorithm = algorithm; - this.privateKey = privateKey; - this.random = random; - this.algID = X509Utilities.GetSigAlgID (sigOid, algorithm); - } - - public Object AlgorithmDetails - { - get { return this.algID; } - } - - public IStreamCalculator CreateCalculator() - { - ISigner sig = SignerUtilities.GetSigner(algorithm); - - if (random != null) - { - sig.Init(true, new ParametersWithRandom(privateKey, random)); - } - else - { - sig.Init(true, privateKey); - } - - return new SigCalculator(sig); - } - - /// - /// Allows enumeration of the signature names supported by the verifier provider. - /// - public static IEnumerable SignatureAlgNames - { - get { return X509Utilities.GetAlgNames(); } - } - } - - internal class SigCalculator : IStreamCalculator - { - private readonly ISigner sig; - private readonly Stream stream; - - internal SigCalculator(ISigner sig) - { - this.sig = sig; - this.stream = new SignerBucket(sig); - } - - public Stream Stream - { - get { return stream; } - } - - public object GetResult() - { - return new SigResult(sig); - } - } - - internal class SigResult : IBlockResult - { - private readonly ISigner sig; - - internal SigResult(ISigner sig) - { - this.sig = sig; - } - - public byte[] Collect() - { - return sig.GenerateSignature(); - } - - public int Collect(byte[] destination, int offset) - { - byte[] signature = Collect(); - - Array.Copy(signature, 0, destination, offset, signature.Length); - - return signature.Length; - } - } - - /// - /// Verifier class for signature verification in ASN.1 based profiles that use an AlgorithmIdentifier to preserve - /// signature algorithm details. - /// - public class Asn1VerifierFactory: IVerifierFactory - { - private readonly AlgorithmIdentifier algID; - private readonly AsymmetricKeyParameter publicKey; - - /// - /// Base constructor. - /// - /// The name of the signature algorithm to use. - /// The public key to be used in the verification operation. - public Asn1VerifierFactory (String algorithm, AsymmetricKeyParameter publicKey) - { - DerObjectIdentifier sigOid = X509Utilities.GetAlgorithmOid (algorithm); - - this.publicKey = publicKey; - this.algID = X509Utilities.GetSigAlgID (sigOid, algorithm); - } - - public Asn1VerifierFactory (AlgorithmIdentifier algorithm, AsymmetricKeyParameter publicKey) - { - this.publicKey = publicKey; - this.algID = algorithm; - } - - public Object AlgorithmDetails - { - get { return this.algID; } - } - - public IStreamCalculator CreateCalculator() - { - ISigner sig = SignerUtilities.GetSigner(X509Utilities.GetSignatureName(algID)); - - sig.Init(false, publicKey); - - return new VerifierCalculator(sig); - } - } - - internal class VerifierCalculator : IStreamCalculator - { - private readonly ISigner sig; - private readonly Stream stream; - - internal VerifierCalculator(ISigner sig) - { - this.sig = sig; - this.stream = new SignerBucket(sig); - } - - public Stream Stream - { - get { return stream; } - } - - public object GetResult() - { - return new VerifierResult(sig); - } - } - - internal class VerifierResult : IVerifier - { - private readonly ISigner sig; - - internal VerifierResult(ISigner sig) - { - this.sig = sig; - } - - public bool IsVerified(byte[] signature) - { - return sig.VerifySignature(signature); - } - - public bool IsVerified(byte[] signature, int off, int length) - { - byte[] sigBytes = new byte[length]; - - Array.Copy(signature, 0, sigBytes, off, sigBytes.Length); - - return sig.VerifySignature(signature); - } - } - - /// - /// Provider class which supports dynamic creation of signature verifiers. - /// - public class Asn1VerifierFactoryProvider: IVerifierFactoryProvider - { - private readonly AsymmetricKeyParameter publicKey; - - /// - /// Base constructor - specify the public key to be used in verification. - /// - /// The public key to be used in creating verifiers provided by this object. - public Asn1VerifierFactoryProvider(AsymmetricKeyParameter publicKey) - { - this.publicKey = publicKey; - } - - public IVerifierFactory CreateVerifierFactory(Object algorithmDetails) - { - return new Asn1VerifierFactory ((AlgorithmIdentifier)algorithmDetails, publicKey); - } - - /// - /// Allows enumeration of the signature names supported by the verifier provider. - /// - public IEnumerable SignatureAlgNames - { - get { return X509Utilities.GetAlgNames(); } - } - } -} - diff --git a/bc-sharp-crypto/src/crypto/paddings/BlockCipherPadding.cs b/bc-sharp-crypto/src/crypto/paddings/BlockCipherPadding.cs deleted file mode 100644 index 33a5f9f..0000000 --- a/bc-sharp-crypto/src/crypto/paddings/BlockCipherPadding.cs +++ /dev/null @@ -1,43 +0,0 @@ -using System; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Security; - - -namespace Org.BouncyCastle.Crypto.Paddings -{ - /** - * Block cipher padders are expected to conform to this interface - */ - public interface IBlockCipherPadding - { - /** - * Initialise the padder. - * - * @param param parameters, if any required. - */ - void Init(SecureRandom random); - //throws ArgumentException; - - /** - * Return the name of the algorithm the cipher implements. - * - * @return the name of the algorithm the cipher implements. - */ - string PaddingName { get; } - - /** - * add the pad bytes to the passed in block, returning the - * number of bytes added. - */ - int AddPadding(byte[] input, int inOff); - - /** - * return the number of pad bytes present in the block. - * @exception InvalidCipherTextException if the padding is badly formed - * or invalid. - */ - int PadCount(byte[] input); - //throws InvalidCipherTextException; - } - -} diff --git a/bc-sharp-crypto/src/crypto/paddings/ISO10126d2Padding.cs b/bc-sharp-crypto/src/crypto/paddings/ISO10126d2Padding.cs deleted file mode 100644 index e132a62..0000000 --- a/bc-sharp-crypto/src/crypto/paddings/ISO10126d2Padding.cs +++ /dev/null @@ -1,76 +0,0 @@ -using System; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Security; - - -namespace Org.BouncyCastle.Crypto.Paddings -{ - - /** - * A padder that adds ISO10126-2 padding to a block. - */ - public class ISO10126d2Padding: IBlockCipherPadding - { - private SecureRandom random; - - /** - * Initialise the padder. - * - * @param random a SecureRandom if available. - */ - public void Init( - SecureRandom random) - //throws ArgumentException - { - this.random = (random != null) ? random : new SecureRandom(); - } - - /** - * Return the name of the algorithm the cipher implements. - * - * @return the name of the algorithm the cipher implements. - */ - public string PaddingName - { - get { return "ISO10126-2"; } - } - - /** - * add the pad bytes to the passed in block, returning the - * number of bytes added. - */ - public int AddPadding( - byte[] input, - int inOff) - { - byte code = (byte)(input.Length - inOff); - - while (inOff < (input.Length - 1)) - { - input[inOff] = (byte)random.NextInt(); - inOff++; - } - - input[inOff] = code; - - return code; - } - - /** - * return the number of pad bytes present in the block. - */ - public int PadCount(byte[] input) - //throws InvalidCipherTextException - { - int count = input[input.Length - 1] & 0xff; - - if (count > input.Length) - { - throw new InvalidCipherTextException("pad block corrupted"); - } - - return count; - } - } - -} diff --git a/bc-sharp-crypto/src/crypto/paddings/ISO7816d4Padding.cs b/bc-sharp-crypto/src/crypto/paddings/ISO7816d4Padding.cs deleted file mode 100644 index 016b25a..0000000 --- a/bc-sharp-crypto/src/crypto/paddings/ISO7816d4Padding.cs +++ /dev/null @@ -1,79 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Paddings -{ - /** - * A padder that adds the padding according to the scheme referenced in - * ISO 7814-4 - scheme 2 from ISO 9797-1. The first byte is 0x80, rest is 0x00 - */ - public class ISO7816d4Padding - : IBlockCipherPadding - { - /** - * Initialise the padder. - * - * @param random - a SecureRandom if available. - */ - public void Init( - SecureRandom random) - { - // nothing to do. - } - - /** - * Return the name of the algorithm the padder implements. - * - * @return the name of the algorithm the padder implements. - */ - public string PaddingName - { - get { return "ISO7816-4"; } - } - - /** - * add the pad bytes to the passed in block, returning the - * number of bytes added. - */ - public int AddPadding( - byte[] input, - int inOff) - { - int added = (input.Length - inOff); - - input[inOff]= (byte) 0x80; - inOff ++; - - while (inOff < input.Length) - { - input[inOff] = (byte) 0; - inOff++; - } - - return added; - } - - /** - * return the number of pad bytes present in the block. - */ - public int PadCount( - byte[] input) - { - int count = input.Length - 1; - - while (count > 0 && input[count] == 0) - { - count--; - } - - if (input[count] != (byte)0x80) - { - throw new InvalidCipherTextException("pad block corrupted"); - } - - return input.Length - count; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/paddings/PaddedBufferedBlockCipher.cs b/bc-sharp-crypto/src/crypto/paddings/PaddedBufferedBlockCipher.cs deleted file mode 100644 index 5d2f8cf..0000000 --- a/bc-sharp-crypto/src/crypto/paddings/PaddedBufferedBlockCipher.cs +++ /dev/null @@ -1,285 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Paddings -{ - /** - * A wrapper class that allows block ciphers to be used to process data in - * a piecemeal fashion with padding. The PaddedBufferedBlockCipher - * outputs a block only when the buffer is full and more data is being added, - * or on a doFinal (unless the current block in the buffer is a pad block). - * The default padding mechanism used is the one outlined in Pkcs5/Pkcs7. - */ - public class PaddedBufferedBlockCipher - : BufferedBlockCipher - { - private readonly IBlockCipherPadding padding; - - /** - * Create a buffered block cipher with the desired padding. - * - * @param cipher the underlying block cipher this buffering object wraps. - * @param padding the padding type. - */ - public PaddedBufferedBlockCipher( - IBlockCipher cipher, - IBlockCipherPadding padding) - { - this.cipher = cipher; - this.padding = padding; - - buf = new byte[cipher.GetBlockSize()]; - bufOff = 0; - } - - /** - * Create a buffered block cipher Pkcs7 padding - * - * @param cipher the underlying block cipher this buffering object wraps. - */ - public PaddedBufferedBlockCipher( - IBlockCipher cipher) - : this(cipher, new Pkcs7Padding()) { } - - /** - * initialise the cipher. - * - * @param forEncryption if true the cipher is initialised for - * encryption, if false for decryption. - * @param param the key and other data required by the cipher. - * @exception ArgumentException if the parameters argument is - * inappropriate. - */ - public override void Init( - bool forEncryption, - ICipherParameters parameters) - { - this.forEncryption = forEncryption; - - SecureRandom initRandom = null; - if (parameters is ParametersWithRandom) - { - ParametersWithRandom p = (ParametersWithRandom)parameters; - initRandom = p.Random; - parameters = p.Parameters; - } - - Reset(); - padding.Init(initRandom); - cipher.Init(forEncryption, parameters); - } - - /** - * return the minimum size of the output buffer required for an update - * plus a doFinal with an input of len bytes. - * - * @param len the length of the input. - * @return the space required to accommodate a call to update and doFinal - * with len bytes of input. - */ - public override int GetOutputSize( - int length) - { - int total = length + bufOff; - int leftOver = total % buf.Length; - - if (leftOver == 0) - { - if (forEncryption) - { - return total + buf.Length; - } - - return total; - } - - return total - leftOver + buf.Length; - } - - /** - * return the size of the output buffer required for an update - * an input of len bytes. - * - * @param len the length of the input. - * @return the space required to accommodate a call to update - * with len bytes of input. - */ - public override int GetUpdateOutputSize( - int length) - { - int total = length + bufOff; - int leftOver = total % buf.Length; - - if (leftOver == 0) - { - return total - buf.Length; - } - - return total - leftOver; - } - - /** - * process a single byte, producing an output block if necessary. - * - * @param in the input byte. - * @param out the space for any output that might be produced. - * @param outOff the offset from which the output will be copied. - * @return the number of output bytes copied to out. - * @exception DataLengthException if there isn't enough space in out. - * @exception InvalidOperationException if the cipher isn't initialised. - */ - public override int ProcessByte( - byte input, - byte[] output, - int outOff) - { - int resultLen = 0; - - if (bufOff == buf.Length) - { - resultLen = cipher.ProcessBlock(buf, 0, output, outOff); - bufOff = 0; - } - - buf[bufOff++] = input; - - return resultLen; - } - - /** - * process an array of bytes, producing output if necessary. - * - * @param in the input byte array. - * @param inOff the offset at which the input data starts. - * @param len the number of bytes to be copied out of the input array. - * @param out the space for any output that might be produced. - * @param outOff the offset from which the output will be copied. - * @return the number of output bytes copied to out. - * @exception DataLengthException if there isn't enough space in out. - * @exception InvalidOperationException if the cipher isn't initialised. - */ - public override int ProcessBytes( - byte[] input, - int inOff, - int length, - byte[] output, - int outOff) - { - if (length < 0) - { - throw new ArgumentException("Can't have a negative input length!"); - } - - int blockSize = GetBlockSize(); - int outLength = GetUpdateOutputSize(length); - - if (outLength > 0) - { - Check.OutputLength(output, outOff, outLength, "output buffer too short"); - } - - int resultLen = 0; - int gapLen = buf.Length - bufOff; - - if (length > gapLen) - { - Array.Copy(input, inOff, buf, bufOff, gapLen); - - resultLen += cipher.ProcessBlock(buf, 0, output, outOff); - - bufOff = 0; - length -= gapLen; - inOff += gapLen; - - while (length > buf.Length) - { - resultLen += cipher.ProcessBlock(input, inOff, output, outOff + resultLen); - - length -= blockSize; - inOff += blockSize; - } - } - - Array.Copy(input, inOff, buf, bufOff, length); - - bufOff += length; - - return resultLen; - } - - /** - * Process the last block in the buffer. If the buffer is currently - * full and padding needs to be added a call to doFinal will produce - * 2 * GetBlockSize() bytes. - * - * @param out the array the block currently being held is copied into. - * @param outOff the offset at which the copying starts. - * @return the number of output bytes copied to out. - * @exception DataLengthException if there is insufficient space in out for - * the output or we are decrypting and the input is not block size aligned. - * @exception InvalidOperationException if the underlying cipher is not - * initialised. - * @exception InvalidCipherTextException if padding is expected and not found. - */ - public override int DoFinal( - byte[] output, - int outOff) - { - int blockSize = cipher.GetBlockSize(); - int resultLen = 0; - - if (forEncryption) - { - if (bufOff == blockSize) - { - if ((outOff + 2 * blockSize) > output.Length) - { - Reset(); - - throw new OutputLengthException("output buffer too short"); - } - - resultLen = cipher.ProcessBlock(buf, 0, output, outOff); - bufOff = 0; - } - - padding.AddPadding(buf, bufOff); - - resultLen += cipher.ProcessBlock(buf, 0, output, outOff + resultLen); - - Reset(); - } - else - { - if (bufOff == blockSize) - { - resultLen = cipher.ProcessBlock(buf, 0, buf, 0); - bufOff = 0; - } - else - { - Reset(); - - throw new DataLengthException("last block incomplete in decryption"); - } - - try - { - resultLen -= padding.PadCount(buf); - - Array.Copy(buf, 0, output, outOff, resultLen); - } - finally - { - Reset(); - } - } - - return resultLen; - } - } - -} diff --git a/bc-sharp-crypto/src/crypto/paddings/Pkcs7Padding.cs b/bc-sharp-crypto/src/crypto/paddings/Pkcs7Padding.cs deleted file mode 100644 index 1158564..0000000 --- a/bc-sharp-crypto/src/crypto/paddings/Pkcs7Padding.cs +++ /dev/null @@ -1,76 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Paddings -{ - /** - * A padder that adds Pkcs7/Pkcs5 padding to a block. - */ - public class Pkcs7Padding - : IBlockCipherPadding - { - /** - * Initialise the padder. - * - * @param random - a SecureRandom if available. - */ - public void Init( - SecureRandom random) - { - // nothing to do. - } - - /** - * Return the name of the algorithm the cipher implements. - * - * @return the name of the algorithm the cipher implements. - */ - public string PaddingName - { - get { return "PKCS7"; } - } - - /** - * add the pad bytes to the passed in block, returning the - * number of bytes added. - */ - public int AddPadding( - byte[] input, - int inOff) - { - byte code = (byte)(input.Length - inOff); - - while (inOff < input.Length) - { - input[inOff] = code; - inOff++; - } - - return code; - } - - /** - * return the number of pad bytes present in the block. - */ - public int PadCount( - byte[] input) - { - byte countAsByte = input[input.Length - 1]; - int count = countAsByte; - - if (count < 1 || count > input.Length) - throw new InvalidCipherTextException("pad block corrupted"); - - for (int i = 2; i <= count; i++) - { - if (input[input.Length - i] != countAsByte) - throw new InvalidCipherTextException("pad block corrupted"); - } - - return count; - } - } - -} diff --git a/bc-sharp-crypto/src/crypto/paddings/TbcPadding.cs b/bc-sharp-crypto/src/crypto/paddings/TbcPadding.cs deleted file mode 100644 index 74b64e8..0000000 --- a/bc-sharp-crypto/src/crypto/paddings/TbcPadding.cs +++ /dev/null @@ -1,79 +0,0 @@ -using System; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Paddings -{ - - /// A padder that adds Trailing-Bit-Compliment padding to a block. - ///

- /// This padding pads the block out compliment of the last bit - /// of the plain text. - ///

- /// - public class TbcPadding - : IBlockCipherPadding - { - /// Return the name of the algorithm the cipher implements. - /// the name of the algorithm the cipher implements. - /// - public string PaddingName - { - get { return "TBC"; } - } - - /// Initialise the padder. - /// - a SecureRandom if available. - /// - public virtual void Init(SecureRandom random) - { - // nothing to do. - } - - /// add the pad bytes to the passed in block, returning the - /// number of bytes added. - ///

- /// Note: this assumes that the last block of plain text is always - /// passed to it inside in. i.e. if inOff is zero, indicating the - /// entire block is to be overwritten with padding the value of in - /// should be the same as the last block of plain text. - ///

- /// - public virtual int AddPadding(byte[] input, int inOff) - { - int count = input.Length - inOff; - byte code; - - if (inOff > 0) - { - code = (byte)((input[inOff - 1] & 0x01) == 0?0xff:0x00); - } - else - { - code = (byte)((input[input.Length - 1] & 0x01) == 0?0xff:0x00); - } - - while (inOff < input.Length) - { - input[inOff] = code; - inOff++; - } - - return count; - } - - /// return the number of pad bytes present in the block. - public virtual int PadCount(byte[] input) - { - byte code = input[input.Length - 1]; - - int index = input.Length - 1; - while (index > 0 && input[index - 1] == code) - { - index--; - } - - return input.Length - index; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/paddings/X923Padding.cs b/bc-sharp-crypto/src/crypto/paddings/X923Padding.cs deleted file mode 100644 index cc1b52b..0000000 --- a/bc-sharp-crypto/src/crypto/paddings/X923Padding.cs +++ /dev/null @@ -1,82 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Paddings -{ - /** - * A padder that adds X9.23 padding to a block - if a SecureRandom is - * passed in random padding is assumed, otherwise padding with zeros is used. - */ - public class X923Padding - : IBlockCipherPadding - { - private SecureRandom random; - - /** - * Initialise the padder. - * - * @param random a SecureRandom if one is available. - */ - public void Init( - SecureRandom random) - { - this.random = random; - } - - /** - * Return the name of the algorithm the cipher implements. - * - * @return the name of the algorithm the cipher implements. - */ - public string PaddingName - { - get { return "X9.23"; } - } - - /** - * add the pad bytes to the passed in block, returning the - * number of bytes added. - */ - public int AddPadding( - byte[] input, - int inOff) - { - byte code = (byte)(input.Length - inOff); - - while (inOff < input.Length - 1) - { - if (random == null) - { - input[inOff] = 0; - } - else - { - input[inOff] = (byte)random.NextInt(); - } - inOff++; - } - - input[inOff] = code; - - return code; - } - - /** - * return the number of pad bytes present in the block. - */ - public int PadCount( - byte[] input) - { - int count = input[input.Length - 1] & 0xff; - - if (count > input.Length) - { - throw new InvalidCipherTextException("pad block corrupted"); - } - - return count; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/paddings/ZeroBytePadding.cs b/bc-sharp-crypto/src/crypto/paddings/ZeroBytePadding.cs deleted file mode 100644 index 0d55ca4..0000000 --- a/bc-sharp-crypto/src/crypto/paddings/ZeroBytePadding.cs +++ /dev/null @@ -1,68 +0,0 @@ -using System; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Paddings -{ - - /// A padder that adds Null byte padding to a block. - public class ZeroBytePadding : IBlockCipherPadding - { - /// Return the name of the algorithm the cipher implements. - /// - /// - /// the name of the algorithm the cipher implements. - /// - public string PaddingName - { - get { return "ZeroBytePadding"; } - } - - /// Initialise the padder. - /// - /// - /// - a SecureRandom if available. - /// - public void Init(SecureRandom random) - { - // nothing to do. - } - - /// add the pad bytes to the passed in block, returning the - /// number of bytes added. - /// - public int AddPadding( - byte[] input, - int inOff) - { - int added = (input.Length - inOff); - - while (inOff < input.Length) - { - input[inOff] = (byte) 0; - inOff++; - } - - return added; - } - - /// return the number of pad bytes present in the block. - public int PadCount( - byte[] input) - { - int count = input.Length; - - while (count > 0) - { - if (input[count - 1] != 0) - { - break; - } - - count--; - } - - return input.Length - count; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/AEADParameters.cs b/bc-sharp-crypto/src/crypto/parameters/AEADParameters.cs deleted file mode 100644 index 825d6b7..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/AEADParameters.cs +++ /dev/null @@ -1,65 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class AeadParameters - : ICipherParameters - { - private readonly byte[] associatedText; - private readonly byte[] nonce; - private readonly KeyParameter key; - private readonly int macSize; - - /** - * Base constructor. - * - * @param key key to be used by underlying cipher - * @param macSize macSize in bits - * @param nonce nonce to be used - */ - public AeadParameters(KeyParameter key, int macSize, byte[] nonce) - : this(key, macSize, nonce, null) - { - } - - /** - * Base constructor. - * - * @param key key to be used by underlying cipher - * @param macSize macSize in bits - * @param nonce nonce to be used - * @param associatedText associated text, if any - */ - public AeadParameters( - KeyParameter key, - int macSize, - byte[] nonce, - byte[] associatedText) - { - this.key = key; - this.nonce = nonce; - this.macSize = macSize; - this.associatedText = associatedText; - } - - public virtual KeyParameter Key - { - get { return key; } - } - - public virtual int MacSize - { - get { return macSize; } - } - - public virtual byte[] GetAssociatedText() - { - return associatedText; - } - - public virtual byte[] GetNonce() - { - return nonce; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/CcmParameters.cs b/bc-sharp-crypto/src/crypto/parameters/CcmParameters.cs deleted file mode 100644 index d445908..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/CcmParameters.cs +++ /dev/null @@ -1,26 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - [Obsolete("Use AeadParameters")] - public class CcmParameters - : AeadParameters - { - /** - * Base constructor. - * - * @param key key to be used by underlying cipher - * @param macSize macSize in bits - * @param nonce nonce to be used - * @param associatedText associated text, if any - */ - public CcmParameters( - KeyParameter key, - int macSize, - byte[] nonce, - byte[] associatedText) - : base(key, macSize, nonce, associatedText) - { - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/DHKeyGenerationParameters.cs b/bc-sharp-crypto/src/crypto/parameters/DHKeyGenerationParameters.cs deleted file mode 100644 index ab3e18f..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/DHKeyGenerationParameters.cs +++ /dev/null @@ -1,31 +0,0 @@ -using System; - -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class DHKeyGenerationParameters - : KeyGenerationParameters - { - private readonly DHParameters parameters; - - public DHKeyGenerationParameters( - SecureRandom random, - DHParameters parameters) - : base(random, GetStrength(parameters)) - { - this.parameters = parameters; - } - - public DHParameters Parameters - { - get { return parameters; } - } - - internal static int GetStrength( - DHParameters parameters) - { - return parameters.L != 0 ? parameters.L : parameters.P.BitLength; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/DHKeyParameters.cs b/bc-sharp-crypto/src/crypto/parameters/DHKeyParameters.cs deleted file mode 100644 index 1a5c138..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/DHKeyParameters.cs +++ /dev/null @@ -1,76 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class DHKeyParameters - : AsymmetricKeyParameter - { - private readonly DHParameters parameters; - private readonly DerObjectIdentifier algorithmOid; - - protected DHKeyParameters( - bool isPrivate, - DHParameters parameters) - : this(isPrivate, parameters, PkcsObjectIdentifiers.DhKeyAgreement) - { - } - - protected DHKeyParameters( - bool isPrivate, - DHParameters parameters, - DerObjectIdentifier algorithmOid) - : base(isPrivate) - { - // TODO Should we allow parameters to be null? - this.parameters = parameters; - this.algorithmOid = algorithmOid; - } - - public DHParameters Parameters - { - get { return parameters; } - } - - public DerObjectIdentifier AlgorithmOid - { - get { return algorithmOid; } - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - DHKeyParameters other = obj as DHKeyParameters; - - if (other == null) - return false; - - return Equals(other); - } - - protected bool Equals( - DHKeyParameters other) - { - return Platform.Equals(parameters, other.parameters) - && base.Equals(other); - } - - public override int GetHashCode() - { - int hc = base.GetHashCode(); - - if (parameters != null) - { - hc ^= parameters.GetHashCode(); - } - - return hc; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/DHParameters.cs b/bc-sharp-crypto/src/crypto/parameters/DHParameters.cs deleted file mode 100644 index bdea124..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/DHParameters.cs +++ /dev/null @@ -1,185 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class DHParameters - : ICipherParameters - { - private const int DefaultMinimumLength = 160; - - private readonly BigInteger p, g, q, j; - private readonly int m, l; - private readonly DHValidationParameters validation; - - private static int GetDefaultMParam( - int lParam) - { - if (lParam == 0) - return DefaultMinimumLength; - - return System.Math.Min(lParam, DefaultMinimumLength); - } - - public DHParameters( - BigInteger p, - BigInteger g) - : this(p, g, null, 0) - { - } - - public DHParameters( - BigInteger p, - BigInteger g, - BigInteger q) - : this(p, g, q, 0) - { - } - - public DHParameters( - BigInteger p, - BigInteger g, - BigInteger q, - int l) - : this(p, g, q, GetDefaultMParam(l), l, null, null) - { - } - - public DHParameters( - BigInteger p, - BigInteger g, - BigInteger q, - int m, - int l) - : this(p, g, q, m, l, null, null) - { - } - - public DHParameters( - BigInteger p, - BigInteger g, - BigInteger q, - BigInteger j, - DHValidationParameters validation) - : this(p, g, q, DefaultMinimumLength, 0, j, validation) - { - } - - public DHParameters( - BigInteger p, - BigInteger g, - BigInteger q, - int m, - int l, - BigInteger j, - DHValidationParameters validation) - { - if (p == null) - throw new ArgumentNullException("p"); - if (g == null) - throw new ArgumentNullException("g"); - if (!p.TestBit(0)) - throw new ArgumentException("field must be an odd prime", "p"); - if (g.CompareTo(BigInteger.Two) < 0 - || g.CompareTo(p.Subtract(BigInteger.Two)) > 0) - throw new ArgumentException("generator must in the range [2, p - 2]", "g"); - if (q != null && q.BitLength >= p.BitLength) - throw new ArgumentException("q too big to be a factor of (p-1)", "q"); - if (m >= p.BitLength) - throw new ArgumentException("m value must be < bitlength of p", "m"); - if (l != 0) - { - // TODO Check this against the Java version, which has 'l > p.BitLength' here - if (l >= p.BitLength) - throw new ArgumentException("when l value specified, it must be less than bitlength(p)", "l"); - if (l < m) - throw new ArgumentException("when l value specified, it may not be less than m value", "l"); - } - if (j != null && j.CompareTo(BigInteger.Two) < 0) - throw new ArgumentException("subgroup factor must be >= 2", "j"); - - // TODO If q, j both provided, validate p = jq + 1 ? - - this.p = p; - this.g = g; - this.q = q; - this.m = m; - this.l = l; - this.j = j; - this.validation = validation; - } - - public BigInteger P - { - get { return p; } - } - - public BigInteger G - { - get { return g; } - } - - public BigInteger Q - { - get { return q; } - } - - public BigInteger J - { - get { return j; } - } - - /// The minimum bitlength of the private value. - public int M - { - get { return m; } - } - - /// The bitlength of the private value. - public int L - { - get { return l; } - } - - public DHValidationParameters ValidationParameters - { - get { return validation; } - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - DHParameters other = obj as DHParameters; - - if (other == null) - return false; - - return Equals(other); - } - - protected virtual bool Equals( - DHParameters other) - { - return p.Equals(other.p) - && g.Equals(other.g) - && Platform.Equals(q, other.q); - } - - public override int GetHashCode() - { - int hc = p.GetHashCode() ^ g.GetHashCode(); - - if (q != null) - { - hc ^= q.GetHashCode(); - } - - return hc; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/DHPrivateKeyParameters.cs b/bc-sharp-crypto/src/crypto/parameters/DHPrivateKeyParameters.cs deleted file mode 100644 index fc724df..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/DHPrivateKeyParameters.cs +++ /dev/null @@ -1,60 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class DHPrivateKeyParameters - : DHKeyParameters - { - private readonly BigInteger x; - - public DHPrivateKeyParameters( - BigInteger x, - DHParameters parameters) - : base(true, parameters) - { - this.x = x; - } - - public DHPrivateKeyParameters( - BigInteger x, - DHParameters parameters, - DerObjectIdentifier algorithmOid) - : base(true, parameters, algorithmOid) - { - this.x = x; - } - - public BigInteger X - { - get { return x; } - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - DHPrivateKeyParameters other = obj as DHPrivateKeyParameters; - - if (other == null) - return false; - - return Equals(other); - } - - protected bool Equals( - DHPrivateKeyParameters other) - { - return x.Equals(other.x) && base.Equals(other); - } - - public override int GetHashCode() - { - return x.GetHashCode() ^ base.GetHashCode(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/DHPublicKeyParameters.cs b/bc-sharp-crypto/src/crypto/parameters/DHPublicKeyParameters.cs deleted file mode 100644 index e7aeeff..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/DHPublicKeyParameters.cs +++ /dev/null @@ -1,79 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class DHPublicKeyParameters - : DHKeyParameters - { - private static BigInteger Validate(BigInteger y, DHParameters dhParams) - { - if (y == null) - throw new ArgumentNullException("y"); - - // TLS check - if (y.CompareTo(BigInteger.Two) < 0 || y.CompareTo(dhParams.P.Subtract(BigInteger.Two)) > 0) - throw new ArgumentException("invalid DH public key", "y"); - - // we can't validate without Q. - if (dhParams.Q != null - && !y.ModPow(dhParams.Q, dhParams.P).Equals(BigInteger.One)) - { - throw new ArgumentException("y value does not appear to be in correct group", "y"); - } - - return y; - } - - private readonly BigInteger y; - - public DHPublicKeyParameters( - BigInteger y, - DHParameters parameters) - : base(false, parameters) - { - this.y = Validate(y, parameters); - } - - public DHPublicKeyParameters( - BigInteger y, - DHParameters parameters, - DerObjectIdentifier algorithmOid) - : base(false, parameters, algorithmOid) - { - this.y = Validate(y, parameters); - } - - public virtual BigInteger Y - { - get { return y; } - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - DHPublicKeyParameters other = obj as DHPublicKeyParameters; - - if (other == null) - return false; - - return Equals(other); - } - - protected bool Equals( - DHPublicKeyParameters other) - { - return y.Equals(other.y) && base.Equals(other); - } - - public override int GetHashCode() - { - return y.GetHashCode() ^ base.GetHashCode(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/DHValidationParameters.cs b/bc-sharp-crypto/src/crypto/parameters/DHValidationParameters.cs deleted file mode 100644 index 50c0739..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/DHValidationParameters.cs +++ /dev/null @@ -1,59 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class DHValidationParameters - { - private readonly byte[] seed; - private readonly int counter; - - public DHValidationParameters( - byte[] seed, - int counter) - { - if (seed == null) - throw new ArgumentNullException("seed"); - - this.seed = (byte[]) seed.Clone(); - this.counter = counter; - } - - public byte[] GetSeed() - { - return (byte[]) seed.Clone(); - } - - public int Counter - { - get { return counter; } - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - DHValidationParameters other = obj as DHValidationParameters; - - if (other == null) - return false; - - return Equals(other); - } - - protected bool Equals( - DHValidationParameters other) - { - return counter == other.counter - && Arrays.AreEqual(this.seed, other.seed); - } - - public override int GetHashCode() - { - return counter.GetHashCode() ^ Arrays.GetHashCode(seed); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/DSAParameterGenerationParameters.cs b/bc-sharp-crypto/src/crypto/parameters/DSAParameterGenerationParameters.cs deleted file mode 100644 index 7427574..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/DSAParameterGenerationParameters.cs +++ /dev/null @@ -1,74 +0,0 @@ -using System; - -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class DsaParameterGenerationParameters - { - public const int DigitalSignatureUsage = 1; - public const int KeyEstablishmentUsage = 2; - - private readonly int l; - private readonly int n; - private readonly int certainty; - private readonly SecureRandom random; - private readonly int usageIndex; - - /** - * Construct without a usage index, this will do a random construction of G. - * - * @param L desired length of prime P in bits (the effective key size). - * @param N desired length of prime Q in bits. - * @param certainty certainty level for prime number generation. - * @param random the source of randomness to use. - */ - public DsaParameterGenerationParameters(int L, int N, int certainty, SecureRandom random) - : this(L, N, certainty, random, -1) - { - } - - /** - * Construct for a specific usage index - this has the effect of using verifiable canonical generation of G. - * - * @param L desired length of prime P in bits (the effective key size). - * @param N desired length of prime Q in bits. - * @param certainty certainty level for prime number generation. - * @param random the source of randomness to use. - * @param usageIndex a valid usage index. - */ - public DsaParameterGenerationParameters(int L, int N, int certainty, SecureRandom random, int usageIndex) - { - this.l = L; - this.n = N; - this.certainty = certainty; - this.random = random; - this.usageIndex = usageIndex; - } - - public virtual int L - { - get { return l; } - } - - public virtual int N - { - get { return n; } - } - - public virtual int UsageIndex - { - get { return usageIndex; } - } - - public virtual int Certainty - { - get { return certainty; } - } - - public virtual SecureRandom Random - { - get { return random; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/DesEdeParameters.cs b/bc-sharp-crypto/src/crypto/parameters/DesEdeParameters.cs deleted file mode 100644 index 6be56fb..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/DesEdeParameters.cs +++ /dev/null @@ -1,140 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class DesEdeParameters - : DesParameters - { - /* - * DES-EDE Key length in bytes. - */ - public const int DesEdeKeyLength = 24; - - private static byte[] FixKey( - byte[] key, - int keyOff, - int keyLen) - { - byte[] tmp = new byte[24]; - - switch (keyLen) - { - case 16: - Array.Copy(key, keyOff, tmp, 0, 16); - Array.Copy(key, keyOff, tmp, 16, 8); - break; - case 24: - Array.Copy(key, keyOff, tmp, 0, 24); - break; - default: - throw new ArgumentException("Bad length for DESede key: " + keyLen, "keyLen"); - } - - if (IsWeakKey(tmp)) - throw new ArgumentException("attempt to create weak DESede key"); - - return tmp; - } - - public DesEdeParameters( - byte[] key) - : base(FixKey(key, 0, key.Length)) - { - } - - public DesEdeParameters( - byte[] key, - int keyOff, - int keyLen) - : base(FixKey(key, keyOff, keyLen)) - { - } - - /** - * return true if the passed in key is a DES-EDE weak key. - * - * @param key bytes making up the key - * @param offset offset into the byte array the key starts at - * @param length number of bytes making up the key - */ - public static bool IsWeakKey( - byte[] key, - int offset, - int length) - { - for (int i = offset; i < length; i += DesKeyLength) - { - if (DesParameters.IsWeakKey(key, i)) - { - return true; - } - } - - return false; - } - - /** - * return true if the passed in key is a DES-EDE weak key. - * - * @param key bytes making up the key - * @param offset offset into the byte array the key starts at - */ - public static new bool IsWeakKey( - byte[] key, - int offset) - { - return IsWeakKey(key, offset, key.Length - offset); - } - - public static new bool IsWeakKey( - byte[] key) - { - return IsWeakKey(key, 0, key.Length); - } - - /** - * return true if the passed in key is a real 2/3 part DES-EDE key. - * - * @param key bytes making up the key - * @param offset offset into the byte array the key starts at - */ - public static bool IsRealEdeKey(byte[] key, int offset) - { - return key.Length == 16 ? IsReal2Key(key, offset) : IsReal3Key(key, offset); - } - - /** - * return true if the passed in key is a real 2 part DES-EDE key. - * - * @param key bytes making up the key - * @param offset offset into the byte array the key starts at - */ - public static bool IsReal2Key(byte[] key, int offset) - { - bool isValid = false; - for (int i = offset; i != offset + 8; i++) - { - isValid |= (key[i] != key[i + 8]); - } - return isValid; - } - - /** - * return true if the passed in key is a real 3 part DES-EDE key. - * - * @param key bytes making up the key - * @param offset offset into the byte array the key starts at - */ - public static bool IsReal3Key(byte[] key, int offset) - { - bool diff12 = false, diff13 = false, diff23 = false; - for (int i = offset; i != offset + 8; i++) - { - diff12 |= (key[i] != key[i + 8]); - diff13 |= (key[i] != key[i + 16]); - diff23 |= (key[i + 8] != key[i + 16]); - } - return diff12 && diff13 && diff23; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/DesParameters.cs b/bc-sharp-crypto/src/crypto/parameters/DesParameters.cs deleted file mode 100644 index a1f67e2..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/DesParameters.cs +++ /dev/null @@ -1,139 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class DesParameters - : KeyParameter - { - public DesParameters( - byte[] key) - : base(key) - { - if (IsWeakKey(key)) - throw new ArgumentException("attempt to create weak DES key"); - } - - public DesParameters( - byte[] key, - int keyOff, - int keyLen) - : base(key, keyOff, keyLen) - { - if (IsWeakKey(key, keyOff)) - throw new ArgumentException("attempt to create weak DES key"); - } - - /* - * DES Key Length in bytes. - */ - public const int DesKeyLength = 8; - - /* - * Table of weak and semi-weak keys taken from Schneier pp281 - */ - private const int N_DES_WEAK_KEYS = 16; - - private static readonly byte[] DES_weak_keys = - { - /* weak keys */ - (byte)0x01,(byte)0x01,(byte)0x01,(byte)0x01, (byte)0x01,(byte)0x01,(byte)0x01,(byte)0x01, - (byte)0x1f,(byte)0x1f,(byte)0x1f,(byte)0x1f, (byte)0x0e,(byte)0x0e,(byte)0x0e,(byte)0x0e, - (byte)0xe0,(byte)0xe0,(byte)0xe0,(byte)0xe0, (byte)0xf1,(byte)0xf1,(byte)0xf1,(byte)0xf1, - (byte)0xfe,(byte)0xfe,(byte)0xfe,(byte)0xfe, (byte)0xfe,(byte)0xfe,(byte)0xfe,(byte)0xfe, - - /* semi-weak keys */ - (byte)0x01,(byte)0xfe,(byte)0x01,(byte)0xfe, (byte)0x01,(byte)0xfe,(byte)0x01,(byte)0xfe, - (byte)0x1f,(byte)0xe0,(byte)0x1f,(byte)0xe0, (byte)0x0e,(byte)0xf1,(byte)0x0e,(byte)0xf1, - (byte)0x01,(byte)0xe0,(byte)0x01,(byte)0xe0, (byte)0x01,(byte)0xf1,(byte)0x01,(byte)0xf1, - (byte)0x1f,(byte)0xfe,(byte)0x1f,(byte)0xfe, (byte)0x0e,(byte)0xfe,(byte)0x0e,(byte)0xfe, - (byte)0x01,(byte)0x1f,(byte)0x01,(byte)0x1f, (byte)0x01,(byte)0x0e,(byte)0x01,(byte)0x0e, - (byte)0xe0,(byte)0xfe,(byte)0xe0,(byte)0xfe, (byte)0xf1,(byte)0xfe,(byte)0xf1,(byte)0xfe, - (byte)0xfe,(byte)0x01,(byte)0xfe,(byte)0x01, (byte)0xfe,(byte)0x01,(byte)0xfe,(byte)0x01, - (byte)0xe0,(byte)0x1f,(byte)0xe0,(byte)0x1f, (byte)0xf1,(byte)0x0e,(byte)0xf1,(byte)0x0e, - (byte)0xe0,(byte)0x01,(byte)0xe0,(byte)0x01, (byte)0xf1,(byte)0x01,(byte)0xf1,(byte)0x01, - (byte)0xfe,(byte)0x1f,(byte)0xfe,(byte)0x1f, (byte)0xfe,(byte)0x0e,(byte)0xfe,(byte)0x0e, - (byte)0x1f,(byte)0x01,(byte)0x1f,(byte)0x01, (byte)0x0e,(byte)0x01,(byte)0x0e,(byte)0x01, - (byte)0xfe,(byte)0xe0,(byte)0xfe,(byte)0xe0, (byte)0xfe,(byte)0xf1,(byte)0xfe,(byte)0xf1 - }; - - /** - * DES has 16 weak keys. This method will check - * if the given DES key material is weak or semi-weak. - * Key material that is too short is regarded as weak. - *

- * See "Applied - * Cryptography" by Bruce Schneier for more information. - *

- * @return true if the given DES key material is weak or semi-weak, - * false otherwise. - */ - public static bool IsWeakKey( - byte[] key, - int offset) - { - if (key.Length - offset < DesKeyLength) - throw new ArgumentException("key material too short."); - - //nextkey: - for (int i = 0; i < N_DES_WEAK_KEYS; i++) - { - bool unmatch = false; - for (int j = 0; j < DesKeyLength; j++) - { - if (key[j + offset] != DES_weak_keys[i * DesKeyLength + j]) - { - //continue nextkey; - unmatch = true; - break; - } - } - - if (!unmatch) - { - return true; - } - } - - return false; - } - - public static bool IsWeakKey( - byte[] key) - { - return IsWeakKey(key, 0); - } - - public static byte SetOddParity(byte b) - { - uint parity = b ^ 1U; - parity ^= (parity >> 4); - parity ^= (parity >> 2); - parity ^= (parity >> 1); - parity &= 1U; - - return (byte)(b ^ parity); - } - - /** - * DES Keys use the LSB as the odd parity bit. This can - * be used to check for corrupt keys. - * - * @param bytes the byte array to set the parity on. - */ - public static void SetOddParity(byte[] bytes) - { - for (int i = 0; i < bytes.Length; i++) - { - bytes[i] = SetOddParity(bytes[i]); - } - } - - public static void SetOddParity(byte[] bytes, int off, int len) - { - for (int i = 0; i < len; i++) - { - bytes[off + i] = SetOddParity(bytes[off + i]); - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/DsaKeyGenerationParameters.cs b/bc-sharp-crypto/src/crypto/parameters/DsaKeyGenerationParameters.cs deleted file mode 100644 index 86d6f5b..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/DsaKeyGenerationParameters.cs +++ /dev/null @@ -1,26 +0,0 @@ -using System; - -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class DsaKeyGenerationParameters - : KeyGenerationParameters - { - private readonly DsaParameters parameters; - - public DsaKeyGenerationParameters( - SecureRandom random, - DsaParameters parameters) - : base(random, parameters.P.BitLength - 1) - { - this.parameters = parameters; - } - - public DsaParameters Parameters - { - get { return parameters; } - } - } - -} diff --git a/bc-sharp-crypto/src/crypto/parameters/DsaKeyParameters.cs b/bc-sharp-crypto/src/crypto/parameters/DsaKeyParameters.cs deleted file mode 100644 index 5fe6d7a..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/DsaKeyParameters.cs +++ /dev/null @@ -1,59 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public abstract class DsaKeyParameters - : AsymmetricKeyParameter - { - private readonly DsaParameters parameters; - - protected DsaKeyParameters( - bool isPrivate, - DsaParameters parameters) - : base(isPrivate) - { - // Note: parameters may be null - this.parameters = parameters; - } - - public DsaParameters Parameters - { - get { return parameters; } - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - DsaKeyParameters other = obj as DsaKeyParameters; - - if (other == null) - return false; - - return Equals(other); - } - - protected bool Equals( - DsaKeyParameters other) - { - return Platform.Equals(parameters, other.parameters) - && base.Equals(other); - } - - public override int GetHashCode() - { - int hc = base.GetHashCode(); - - if (parameters != null) - { - hc ^= parameters.GetHashCode(); - } - - return hc; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/DsaParameters.cs b/bc-sharp-crypto/src/crypto/parameters/DsaParameters.cs deleted file mode 100644 index 50d080e..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/DsaParameters.cs +++ /dev/null @@ -1,85 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class DsaParameters - : ICipherParameters - { - private readonly BigInteger p, q , g; - private readonly DsaValidationParameters validation; - - public DsaParameters( - BigInteger p, - BigInteger q, - BigInteger g) - : this(p, q, g, null) - { - } - - public DsaParameters( - BigInteger p, - BigInteger q, - BigInteger g, - DsaValidationParameters parameters) - { - if (p == null) - throw new ArgumentNullException("p"); - if (q == null) - throw new ArgumentNullException("q"); - if (g == null) - throw new ArgumentNullException("g"); - - this.p = p; - this.q = q; - this.g = g; - this.validation = parameters; - } - - public BigInteger P - { - get { return p; } - } - - public BigInteger Q - { - get { return q; } - } - - public BigInteger G - { - get { return g; } - } - - public DsaValidationParameters ValidationParameters - { - get { return validation; } - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - DsaParameters other = obj as DsaParameters; - - if (other == null) - return false; - - return Equals(other); - } - - protected bool Equals( - DsaParameters other) - { - return p.Equals(other.p) && q.Equals(other.q) && g.Equals(other.g); - } - - public override int GetHashCode() - { - return p.GetHashCode() ^ q.GetHashCode() ^ g.GetHashCode(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/DsaPrivateKeyParameters.cs b/bc-sharp-crypto/src/crypto/parameters/DsaPrivateKeyParameters.cs deleted file mode 100644 index 2abdd0e..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/DsaPrivateKeyParameters.cs +++ /dev/null @@ -1,53 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class DsaPrivateKeyParameters - : DsaKeyParameters - { - private readonly BigInteger x; - - public DsaPrivateKeyParameters( - BigInteger x, - DsaParameters parameters) - : base(true, parameters) - { - if (x == null) - throw new ArgumentNullException("x"); - - this.x = x; - } - - public BigInteger X - { - get { return x; } - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - DsaPrivateKeyParameters other = obj as DsaPrivateKeyParameters; - - if (other == null) - return false; - - return Equals(other); - } - - protected bool Equals( - DsaPrivateKeyParameters other) - { - return x.Equals(other.x) && base.Equals(other); - } - - public override int GetHashCode() - { - return x.GetHashCode() ^ base.GetHashCode(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/DsaPublicKeyParameters.cs b/bc-sharp-crypto/src/crypto/parameters/DsaPublicKeyParameters.cs deleted file mode 100644 index 3a81bfd..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/DsaPublicKeyParameters.cs +++ /dev/null @@ -1,68 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class DsaPublicKeyParameters - : DsaKeyParameters - { - private static BigInteger Validate(BigInteger y, DsaParameters parameters) - { - // we can't validate without params, fortunately we can't use the key either... - if (parameters != null) - { - if (y.CompareTo(BigInteger.Two) < 0 - || y.CompareTo(parameters.P.Subtract(BigInteger.Two)) > 0 - || !y.ModPow(parameters.Q, parameters.P).Equals(BigInteger.One)) - { - throw new ArgumentException("y value does not appear to be in correct group"); - } - } - - return y; - } - - private readonly BigInteger y; - - public DsaPublicKeyParameters( - BigInteger y, - DsaParameters parameters) - : base(false, parameters) - { - if (y == null) - throw new ArgumentNullException("y"); - - this.y = Validate(y, parameters); - } - - public BigInteger Y - { - get { return y; } - } - - public override bool Equals(object obj) - { - if (obj == this) - return true; - - DsaPublicKeyParameters other = obj as DsaPublicKeyParameters; - - if (other == null) - return false; - - return Equals(other); - } - - protected bool Equals( - DsaPublicKeyParameters other) - { - return y.Equals(other.y) && base.Equals(other); - } - - public override int GetHashCode() - { - return y.GetHashCode() ^ base.GetHashCode(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/DsaValidationParameters.cs b/bc-sharp-crypto/src/crypto/parameters/DsaValidationParameters.cs deleted file mode 100644 index c2f84c7..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/DsaValidationParameters.cs +++ /dev/null @@ -1,72 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class DsaValidationParameters - { - private readonly byte[] seed; - private readonly int counter; - private readonly int usageIndex; - - public DsaValidationParameters(byte[] seed, int counter) - : this(seed, counter, -1) - { - } - - public DsaValidationParameters( - byte[] seed, - int counter, - int usageIndex) - { - if (seed == null) - throw new ArgumentNullException("seed"); - - this.seed = (byte[]) seed.Clone(); - this.counter = counter; - this.usageIndex = usageIndex; - } - - public virtual byte[] GetSeed() - { - return (byte[]) seed.Clone(); - } - - public virtual int Counter - { - get { return counter; } - } - - public virtual int UsageIndex - { - get { return usageIndex; } - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - DsaValidationParameters other = obj as DsaValidationParameters; - - if (other == null) - return false; - - return Equals(other); - } - - protected virtual bool Equals( - DsaValidationParameters other) - { - return counter == other.counter - && Arrays.AreEqual(seed, other.seed); - } - - public override int GetHashCode() - { - return counter.GetHashCode() ^ Arrays.GetHashCode(seed); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/ECDomainParameters.cs b/bc-sharp-crypto/src/crypto/parameters/ECDomainParameters.cs deleted file mode 100644 index 732fbdf..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/ECDomainParameters.cs +++ /dev/null @@ -1,117 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class ECDomainParameters - { - internal ECCurve curve; - internal byte[] seed; - internal ECPoint g; - internal BigInteger n; - internal BigInteger h; - - public ECDomainParameters( - ECCurve curve, - ECPoint g, - BigInteger n) - : this(curve, g, n, BigInteger.One) - { - } - - public ECDomainParameters( - ECCurve curve, - ECPoint g, - BigInteger n, - BigInteger h) - : this(curve, g, n, h, null) - { - } - - public ECDomainParameters( - ECCurve curve, - ECPoint g, - BigInteger n, - BigInteger h, - byte[] seed) - { - if (curve == null) - throw new ArgumentNullException("curve"); - if (g == null) - throw new ArgumentNullException("g"); - if (n == null) - throw new ArgumentNullException("n"); - if (h == null) - throw new ArgumentNullException("h"); - - this.curve = curve; - this.g = g.Normalize(); - this.n = n; - this.h = h; - this.seed = Arrays.Clone(seed); - } - - public ECCurve Curve - { - get { return curve; } - } - - public ECPoint G - { - get { return g; } - } - - public BigInteger N - { - get { return n; } - } - - public BigInteger H - { - get { return h; } - } - - public byte[] GetSeed() - { - return Arrays.Clone(seed); - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - ECDomainParameters other = obj as ECDomainParameters; - - if (other == null) - return false; - - return Equals(other); - } - - protected virtual bool Equals( - ECDomainParameters other) - { - return curve.Equals(other.curve) - && g.Equals(other.g) - && n.Equals(other.n) - && h.Equals(other.h); - } - - public override int GetHashCode() - { - int hc = curve.GetHashCode(); - hc *= 37; - hc ^= g.GetHashCode(); - hc *= 37; - hc ^= n.GetHashCode(); - hc *= 37; - hc ^= h.GetHashCode(); - return hc; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/ECKeyGenerationParameters.cs b/bc-sharp-crypto/src/crypto/parameters/ECKeyGenerationParameters.cs deleted file mode 100644 index 9b2b988..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/ECKeyGenerationParameters.cs +++ /dev/null @@ -1,41 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.CryptoPro; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class ECKeyGenerationParameters - : KeyGenerationParameters - { - private readonly ECDomainParameters domainParams; - private readonly DerObjectIdentifier publicKeyParamSet; - - public ECKeyGenerationParameters( - ECDomainParameters domainParameters, - SecureRandom random) - : base(random, domainParameters.N.BitLength) - { - this.domainParams = domainParameters; - } - - public ECKeyGenerationParameters( - DerObjectIdentifier publicKeyParamSet, - SecureRandom random) - : this(ECKeyParameters.LookupParameters(publicKeyParamSet), random) - { - this.publicKeyParamSet = publicKeyParamSet; - } - - public ECDomainParameters DomainParameters - { - get { return domainParams; } - } - - public DerObjectIdentifier PublicKeyParamSet - { - get { return publicKeyParamSet; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/ECKeyParameters.cs b/bc-sharp-crypto/src/crypto/parameters/ECKeyParameters.cs deleted file mode 100644 index 70b3543..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/ECKeyParameters.cs +++ /dev/null @@ -1,136 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.CryptoPro; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto.Generators; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public abstract class ECKeyParameters - : AsymmetricKeyParameter - { - private static readonly string[] algorithms = { "EC", "ECDSA", "ECDH", "ECDHC", "ECGOST3410", "ECMQV" }; - - private readonly string algorithm; - private readonly ECDomainParameters parameters; - private readonly DerObjectIdentifier publicKeyParamSet; - - protected ECKeyParameters( - string algorithm, - bool isPrivate, - ECDomainParameters parameters) - : base(isPrivate) - { - if (algorithm == null) - throw new ArgumentNullException("algorithm"); - if (parameters == null) - throw new ArgumentNullException("parameters"); - - this.algorithm = VerifyAlgorithmName(algorithm); - this.parameters = parameters; - } - - protected ECKeyParameters( - string algorithm, - bool isPrivate, - DerObjectIdentifier publicKeyParamSet) - : base(isPrivate) - { - if (algorithm == null) - throw new ArgumentNullException("algorithm"); - if (publicKeyParamSet == null) - throw new ArgumentNullException("publicKeyParamSet"); - - this.algorithm = VerifyAlgorithmName(algorithm); - this.parameters = LookupParameters(publicKeyParamSet); - this.publicKeyParamSet = publicKeyParamSet; - } - - public string AlgorithmName - { - get { return algorithm; } - } - - public ECDomainParameters Parameters - { - get { return parameters; } - } - - public DerObjectIdentifier PublicKeyParamSet - { - get { return publicKeyParamSet; } - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - ECDomainParameters other = obj as ECDomainParameters; - - if (other == null) - return false; - - return Equals(other); - } - - protected bool Equals( - ECKeyParameters other) - { - return parameters.Equals(other.parameters) && base.Equals(other); - } - - public override int GetHashCode() - { - return parameters.GetHashCode() ^ base.GetHashCode(); - } - - internal ECKeyGenerationParameters CreateKeyGenerationParameters( - SecureRandom random) - { - if (publicKeyParamSet != null) - { - return new ECKeyGenerationParameters(publicKeyParamSet, random); - } - - return new ECKeyGenerationParameters(parameters, random); - } - - internal static string VerifyAlgorithmName(string algorithm) - { - string upper = Platform.ToUpperInvariant(algorithm); - if (Array.IndexOf(algorithms, algorithm, 0, algorithms.Length) < 0) - throw new ArgumentException("unrecognised algorithm: " + algorithm, "algorithm"); - return upper; - } - - internal static ECDomainParameters LookupParameters( - DerObjectIdentifier publicKeyParamSet) - { - if (publicKeyParamSet == null) - throw new ArgumentNullException("publicKeyParamSet"); - - ECDomainParameters p = ECGost3410NamedCurves.GetByOid(publicKeyParamSet); - - if (p == null) - { - X9ECParameters x9 = ECKeyPairGenerator.FindECCurveByOid(publicKeyParamSet); - - if (x9 == null) - { - throw new ArgumentException("OID is not a valid public key parameter set", "publicKeyParamSet"); - } - - p = new ECDomainParameters(x9.Curve, x9.G, x9.N, x9.H, x9.GetSeed()); - } - - return p; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/ECPrivateKeyParameters.cs b/bc-sharp-crypto/src/crypto/parameters/ECPrivateKeyParameters.cs deleted file mode 100644 index 4d0fa1f..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/ECPrivateKeyParameters.cs +++ /dev/null @@ -1,87 +0,0 @@ -using System; -using System.Globalization; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class ECPrivateKeyParameters - : ECKeyParameters - { - private readonly BigInteger d; - - public ECPrivateKeyParameters( - BigInteger d, - ECDomainParameters parameters) - : this("EC", d, parameters) - { - } - - [Obsolete("Use version with explicit 'algorithm' parameter")] - public ECPrivateKeyParameters( - BigInteger d, - DerObjectIdentifier publicKeyParamSet) - : base("ECGOST3410", true, publicKeyParamSet) - { - if (d == null) - throw new ArgumentNullException("d"); - - this.d = d; - } - - public ECPrivateKeyParameters( - string algorithm, - BigInteger d, - ECDomainParameters parameters) - : base(algorithm, true, parameters) - { - if (d == null) - throw new ArgumentNullException("d"); - - this.d = d; - } - - public ECPrivateKeyParameters( - string algorithm, - BigInteger d, - DerObjectIdentifier publicKeyParamSet) - : base(algorithm, true, publicKeyParamSet) - { - if (d == null) - throw new ArgumentNullException("d"); - - this.d = d; - } - - public BigInteger D - { - get { return d; } - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - ECPrivateKeyParameters other = obj as ECPrivateKeyParameters; - - if (other == null) - return false; - - return Equals(other); - } - - protected bool Equals( - ECPrivateKeyParameters other) - { - return d.Equals(other.d) && base.Equals(other); - } - - public override int GetHashCode() - { - return d.GetHashCode() ^ base.GetHashCode(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/ECPublicKeyParameters.cs b/bc-sharp-crypto/src/crypto/parameters/ECPublicKeyParameters.cs deleted file mode 100644 index 474e5d8..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/ECPublicKeyParameters.cs +++ /dev/null @@ -1,101 +0,0 @@ -using System; -using System.Globalization; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Math.EC; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class ECPublicKeyParameters - : ECKeyParameters - { - private static ECPoint Validate(ECPoint q) - { - if (q == null) - throw new ArgumentNullException("q"); - if (q.IsInfinity) - throw new ArgumentException("point at infinity", "q"); - - q = q.Normalize(); - - if (!q.IsValid()) - throw new ArgumentException("point not on curve", "q"); - - return q; - } - - private readonly ECPoint q; - - public ECPublicKeyParameters( - ECPoint q, - ECDomainParameters parameters) - : this("EC", q, parameters) - { - } - - [Obsolete("Use version with explicit 'algorithm' parameter")] - public ECPublicKeyParameters( - ECPoint q, - DerObjectIdentifier publicKeyParamSet) - : base("ECGOST3410", false, publicKeyParamSet) - { - if (q == null) - throw new ArgumentNullException("q"); - - this.q = Validate(q); - } - - public ECPublicKeyParameters( - string algorithm, - ECPoint q, - ECDomainParameters parameters) - : base(algorithm, false, parameters) - { - if (q == null) - throw new ArgumentNullException("q"); - - this.q = Validate(q); - } - - public ECPublicKeyParameters( - string algorithm, - ECPoint q, - DerObjectIdentifier publicKeyParamSet) - : base(algorithm, false, publicKeyParamSet) - { - if (q == null) - throw new ArgumentNullException("q"); - - this.q = Validate(q); - } - - public ECPoint Q - { - get { return q; } - } - - public override bool Equals(object obj) - { - if (obj == this) - return true; - - ECPublicKeyParameters other = obj as ECPublicKeyParameters; - - if (other == null) - return false; - - return Equals(other); - } - - protected bool Equals( - ECPublicKeyParameters other) - { - return q.Equals(other.q) && base.Equals(other); - } - - public override int GetHashCode() - { - return q.GetHashCode() ^ base.GetHashCode(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/ElGamalKeyGenerationParameters.cs b/bc-sharp-crypto/src/crypto/parameters/ElGamalKeyGenerationParameters.cs deleted file mode 100644 index 40ca70d..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/ElGamalKeyGenerationParameters.cs +++ /dev/null @@ -1,31 +0,0 @@ -using System; - -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class ElGamalKeyGenerationParameters - : KeyGenerationParameters - { - private readonly ElGamalParameters parameters; - - public ElGamalKeyGenerationParameters( - SecureRandom random, - ElGamalParameters parameters) - : base(random, GetStrength(parameters)) - { - this.parameters = parameters; - } - - public ElGamalParameters Parameters - { - get { return parameters; } - } - - internal static int GetStrength( - ElGamalParameters parameters) - { - return parameters.L != 0 ? parameters.L : parameters.P.BitLength; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/ElGamalKeyParameters.cs b/bc-sharp-crypto/src/crypto/parameters/ElGamalKeyParameters.cs deleted file mode 100644 index 8b6e279..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/ElGamalKeyParameters.cs +++ /dev/null @@ -1,59 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class ElGamalKeyParameters - : AsymmetricKeyParameter - { - private readonly ElGamalParameters parameters; - - protected ElGamalKeyParameters( - bool isPrivate, - ElGamalParameters parameters) - : base(isPrivate) - { - // TODO Should we allow 'parameters' to be null? - this.parameters = parameters; - } - - public ElGamalParameters Parameters - { - get { return parameters; } - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - ElGamalKeyParameters other = obj as ElGamalKeyParameters; - - if (other == null) - return false; - - return Equals(other); - } - - protected bool Equals( - ElGamalKeyParameters other) - { - return Platform.Equals(parameters, other.parameters) - && base.Equals(other); - } - - public override int GetHashCode() - { - int hc = base.GetHashCode(); - - if (parameters != null) - { - hc ^= parameters.GetHashCode(); - } - - return hc; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/ElGamalParameters.cs b/bc-sharp-crypto/src/crypto/parameters/ElGamalParameters.cs deleted file mode 100644 index ab6d3e7..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/ElGamalParameters.cs +++ /dev/null @@ -1,81 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class ElGamalParameters - : ICipherParameters - { - private readonly BigInteger p, g; - private readonly int l; - - public ElGamalParameters( - BigInteger p, - BigInteger g) - : this(p, g, 0) - { - } - - public ElGamalParameters( - BigInteger p, - BigInteger g, - int l) - { - if (p == null) - throw new ArgumentNullException("p"); - if (g == null) - throw new ArgumentNullException("g"); - - this.p = p; - this.g = g; - this.l = l; - } - - public BigInteger P - { - get { return p; } - } - - /** - * return the generator - g - */ - public BigInteger G - { - get { return g; } - } - - /** - * return private value limit - l - */ - public int L - { - get { return l; } - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - ElGamalParameters other = obj as ElGamalParameters; - - if (other == null) - return false; - - return Equals(other); - } - - protected bool Equals( - ElGamalParameters other) - { - return p.Equals(other.p) && g.Equals(other.g) && l == other.l; - } - - public override int GetHashCode() - { - return p.GetHashCode() ^ g.GetHashCode() ^ l; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/ElGamalPrivateKeyParameters.cs b/bc-sharp-crypto/src/crypto/parameters/ElGamalPrivateKeyParameters.cs deleted file mode 100644 index 6363f2b..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/ElGamalPrivateKeyParameters.cs +++ /dev/null @@ -1,53 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class ElGamalPrivateKeyParameters - : ElGamalKeyParameters - { - private readonly BigInteger x; - - public ElGamalPrivateKeyParameters( - BigInteger x, - ElGamalParameters parameters) - : base(true, parameters) - { - if (x == null) - throw new ArgumentNullException("x"); - - this.x = x; - } - - public BigInteger X - { - get { return x; } - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - ElGamalPrivateKeyParameters other = obj as ElGamalPrivateKeyParameters; - - if (other == null) - return false; - - return Equals(other); - } - - protected bool Equals( - ElGamalPrivateKeyParameters other) - { - return other.x.Equals(x) && base.Equals(other); - } - - public override int GetHashCode() - { - return x.GetHashCode() ^ base.GetHashCode(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/ElGamalPublicKeyParameters.cs b/bc-sharp-crypto/src/crypto/parameters/ElGamalPublicKeyParameters.cs deleted file mode 100644 index 25ac625..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/ElGamalPublicKeyParameters.cs +++ /dev/null @@ -1,53 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class ElGamalPublicKeyParameters - : ElGamalKeyParameters - { - private readonly BigInteger y; - - public ElGamalPublicKeyParameters( - BigInteger y, - ElGamalParameters parameters) - : base(false, parameters) - { - if (y == null) - throw new ArgumentNullException("y"); - - this.y = y; - } - - public BigInteger Y - { - get { return y; } - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - ElGamalPublicKeyParameters other = obj as ElGamalPublicKeyParameters; - - if (other == null) - return false; - - return Equals(other); - } - - protected bool Equals( - ElGamalPublicKeyParameters other) - { - return y.Equals(other.y) && base.Equals(other); - } - - public override int GetHashCode() - { - return y.GetHashCode() ^ base.GetHashCode(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/GOST3410KeyGenerationParameters.cs b/bc-sharp-crypto/src/crypto/parameters/GOST3410KeyGenerationParameters.cs deleted file mode 100644 index b06a5d8..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/GOST3410KeyGenerationParameters.cs +++ /dev/null @@ -1,55 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.CryptoPro; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class Gost3410KeyGenerationParameters - : KeyGenerationParameters - { - private readonly Gost3410Parameters parameters; - private readonly DerObjectIdentifier publicKeyParamSet; - - public Gost3410KeyGenerationParameters( - SecureRandom random, - Gost3410Parameters parameters) - : base(random, parameters.P.BitLength - 1) - { - this.parameters = parameters; - } - - public Gost3410KeyGenerationParameters( - SecureRandom random, - DerObjectIdentifier publicKeyParamSet) - : this(random, LookupParameters(publicKeyParamSet)) - { - this.publicKeyParamSet = publicKeyParamSet; - } - - public Gost3410Parameters Parameters - { - get { return parameters; } - } - - public DerObjectIdentifier PublicKeyParamSet - { - get { return publicKeyParamSet; } - } - - private static Gost3410Parameters LookupParameters( - DerObjectIdentifier publicKeyParamSet) - { - if (publicKeyParamSet == null) - throw new ArgumentNullException("publicKeyParamSet"); - - Gost3410ParamSetParameters p = Gost3410NamedParameters.GetByOid(publicKeyParamSet); - - if (p == null) - throw new ArgumentException("OID is not a valid CryptoPro public key parameter set", "publicKeyParamSet"); - - return new Gost3410Parameters(p.P, p.Q, p.A); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/GOST3410KeyParameters.cs b/bc-sharp-crypto/src/crypto/parameters/GOST3410KeyParameters.cs deleted file mode 100644 index f771c4d..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/GOST3410KeyParameters.cs +++ /dev/null @@ -1,58 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.CryptoPro; -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public abstract class Gost3410KeyParameters - : AsymmetricKeyParameter - { - private readonly Gost3410Parameters parameters; - private readonly DerObjectIdentifier publicKeyParamSet; - - protected Gost3410KeyParameters( - bool isPrivate, - Gost3410Parameters parameters) - : base(isPrivate) - { - this.parameters = parameters; - } - - protected Gost3410KeyParameters( - bool isPrivate, - DerObjectIdentifier publicKeyParamSet) - : base(isPrivate) - { - this.parameters = LookupParameters(publicKeyParamSet); - this.publicKeyParamSet = publicKeyParamSet; - } - - public Gost3410Parameters Parameters - { - get { return parameters; } - } - - public DerObjectIdentifier PublicKeyParamSet - { - get { return publicKeyParamSet; } - } - - // TODO Implement Equals/GetHashCode - - private static Gost3410Parameters LookupParameters( - DerObjectIdentifier publicKeyParamSet) - { - if (publicKeyParamSet == null) - throw new ArgumentNullException("publicKeyParamSet"); - - Gost3410ParamSetParameters p = Gost3410NamedParameters.GetByOid(publicKeyParamSet); - - if (p == null) - throw new ArgumentException("OID is not a valid CryptoPro public key parameter set", "publicKeyParamSet"); - - return new Gost3410Parameters(p.P, p.Q, p.A); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/GOST3410Parameters.cs b/bc-sharp-crypto/src/crypto/parameters/GOST3410Parameters.cs deleted file mode 100644 index 2ec167e..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/GOST3410Parameters.cs +++ /dev/null @@ -1,86 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class Gost3410Parameters - : ICipherParameters - { - private readonly BigInteger p, q, a; - private readonly Gost3410ValidationParameters validation; - - public Gost3410Parameters( - BigInteger p, - BigInteger q, - BigInteger a) - : this(p, q, a, null) - { - } - - public Gost3410Parameters( - BigInteger p, - BigInteger q, - BigInteger a, - Gost3410ValidationParameters validation) - { - if (p == null) - throw new ArgumentNullException("p"); - if (q == null) - throw new ArgumentNullException("q"); - if (a == null) - throw new ArgumentNullException("a"); - - this.p = p; - this.q = q; - this.a = a; - this.validation = validation; - } - - public BigInteger P - { - get { return p; } - } - - public BigInteger Q - { - get { return q; } - } - - public BigInteger A - { - get { return a; } - } - - public Gost3410ValidationParameters ValidationParameters - { - get { return validation; } - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - Gost3410Parameters other = obj as Gost3410Parameters; - - if (other == null) - return false; - - return Equals(other); - } - - protected bool Equals( - Gost3410Parameters other) - { - return p.Equals(other.p) && q.Equals(other.q) && a.Equals(other.a); - } - - public override int GetHashCode() - { - return p.GetHashCode() ^ q.GetHashCode() ^ a.GetHashCode(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/GOST3410PrivateKeyParameters.cs b/bc-sharp-crypto/src/crypto/parameters/GOST3410PrivateKeyParameters.cs deleted file mode 100644 index e3a613d..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/GOST3410PrivateKeyParameters.cs +++ /dev/null @@ -1,41 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.CryptoPro; -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class Gost3410PrivateKeyParameters - : Gost3410KeyParameters - { - private readonly BigInteger x; - - public Gost3410PrivateKeyParameters( - BigInteger x, - Gost3410Parameters parameters) - : base(true, parameters) - { - if (x.SignValue < 1 || x.BitLength > 256 || x.CompareTo(Parameters.Q) >= 0) - throw new ArgumentException("Invalid x for GOST3410 private key", "x"); - - this.x = x; - } - - public Gost3410PrivateKeyParameters( - BigInteger x, - DerObjectIdentifier publicKeyParamSet) - : base(true, publicKeyParamSet) - { - if (x.SignValue < 1 || x.BitLength > 256 || x.CompareTo(Parameters.Q) >= 0) - throw new ArgumentException("Invalid x for GOST3410 private key", "x"); - - this.x = x; - } - - public BigInteger X - { - get { return x; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/GOST3410PublicKeyParameters.cs b/bc-sharp-crypto/src/crypto/parameters/GOST3410PublicKeyParameters.cs deleted file mode 100644 index 96b7e91..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/GOST3410PublicKeyParameters.cs +++ /dev/null @@ -1,40 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class Gost3410PublicKeyParameters - : Gost3410KeyParameters - { - private readonly BigInteger y; - - public Gost3410PublicKeyParameters( - BigInteger y, - Gost3410Parameters parameters) - : base(false, parameters) - { - if (y.SignValue < 1 || y.CompareTo(Parameters.P) >= 0) - throw new ArgumentException("Invalid y for GOST3410 public key", "y"); - - this.y = y; - } - - public Gost3410PublicKeyParameters( - BigInteger y, - DerObjectIdentifier publicKeyParamSet) - : base(false, publicKeyParamSet) - { - if (y.SignValue < 1 || y.CompareTo(Parameters.P) >= 0) - throw new ArgumentException("Invalid y for GOST3410 public key", "y"); - - this.y = y; - } - - public BigInteger Y - { - get { return y; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/GOST3410ValidationParameters.cs b/bc-sharp-crypto/src/crypto/parameters/GOST3410ValidationParameters.cs deleted file mode 100644 index 21e5af8..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/GOST3410ValidationParameters.cs +++ /dev/null @@ -1,51 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class Gost3410ValidationParameters - { - private int x0; - private int c; - private long x0L; - private long cL; - - public Gost3410ValidationParameters( - int x0, - int c) - { - this.x0 = x0; - this.c = c; - } - - public Gost3410ValidationParameters( - long x0L, - long cL) - { - this.x0L = x0L; - this.cL = cL; - } - - public int C { get { return c; } } - public int X0 { get { return x0; } } - public long CL { get { return cL; } } - public long X0L { get { return x0L; } } - - public override bool Equals( - object obj) - { - Gost3410ValidationParameters other = obj as Gost3410ValidationParameters; - - return other != null - && other.c == this.c - && other.x0 == this.x0 - && other.cL == this.cL - && other.x0L == this.x0L; - } - - public override int GetHashCode() - { - return c.GetHashCode() ^ x0.GetHashCode() ^ cL.GetHashCode() ^ x0L.GetHashCode(); - } - - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/HKDFParameters.cs b/bc-sharp-crypto/src/crypto/parameters/HKDFParameters.cs deleted file mode 100644 index 6d1465e..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/HKDFParameters.cs +++ /dev/null @@ -1,119 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Macs; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - /** - * Parameter class for the HkdfBytesGenerator class. - */ - public class HkdfParameters - : IDerivationParameters - { - private readonly byte[] ikm; - private readonly bool skipExpand; - private readonly byte[] salt; - private readonly byte[] info; - - private HkdfParameters(byte[] ikm, bool skip, byte[] salt, byte[] info) - { - if (ikm == null) - throw new ArgumentNullException("ikm"); - - this.ikm = Arrays.Clone(ikm); - this.skipExpand = skip; - - if (salt == null || salt.Length == 0) - { - this.salt = null; - } - else - { - this.salt = Arrays.Clone(salt); - } - - if (info == null) - { - this.info = new byte[0]; - } - else - { - this.info = Arrays.Clone(info); - } - } - - /** - * Generates parameters for HKDF, specifying both the optional salt and - * optional info. Step 1: Extract won't be skipped. - * - * @param ikm the input keying material or seed - * @param salt the salt to use, may be null for a salt for hashLen zeros - * @param info the info to use, may be null for an info field of zero bytes - */ - public HkdfParameters(byte[] ikm, byte[] salt, byte[] info) - : this(ikm, false, salt, info) - { - } - - /** - * Factory method that makes the HKDF skip the extract part of the key - * derivation function. - * - * @param ikm the input keying material or seed, directly used for step 2: - * Expand - * @param info the info to use, may be null for an info field of zero bytes - * @return HKDFParameters that makes the implementation skip step 1 - */ - public static HkdfParameters SkipExtractParameters(byte[] ikm, byte[] info) - { - return new HkdfParameters(ikm, true, null, info); - } - - public static HkdfParameters DefaultParameters(byte[] ikm) - { - return new HkdfParameters(ikm, false, null, null); - } - - /** - * Returns the input keying material or seed. - * - * @return the keying material - */ - public virtual byte[] GetIkm() - { - return Arrays.Clone(ikm); - } - - /** - * Returns if step 1: extract has to be skipped or not - * - * @return true for skipping, false for no skipping of step 1 - */ - public virtual bool SkipExtract - { - get { return skipExpand; } - } - - /** - * Returns the salt, or null if the salt should be generated as a byte array - * of HashLen zeros. - * - * @return the salt, or null - */ - public virtual byte[] GetSalt() - { - return Arrays.Clone(salt); - } - - /** - * Returns the info field, which may be empty (null is converted to empty). - * - * @return the info field, never null - */ - public virtual byte[] GetInfo() - { - return Arrays.Clone(info); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/ISO18033KDFParameters.cs b/bc-sharp-crypto/src/crypto/parameters/ISO18033KDFParameters.cs deleted file mode 100644 index 2d8fff8..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/ISO18033KDFParameters.cs +++ /dev/null @@ -1,25 +0,0 @@ -using System; -using Org.BouncyCastle.Crypto; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - /** - * parameters for Key derivation functions for ISO-18033 - */ - public class Iso18033KdfParameters - : IDerivationParameters - { - byte[] seed; - - public Iso18033KdfParameters( - byte[] seed) - { - this.seed = seed; - } - - public byte[] GetSeed() - { - return seed; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/IesParameters.cs b/bc-sharp-crypto/src/crypto/parameters/IesParameters.cs deleted file mode 100644 index d306b2c..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/IesParameters.cs +++ /dev/null @@ -1,49 +0,0 @@ -using System; -using Org.BouncyCastle.Crypto; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - /** - * parameters for using an integrated cipher in stream mode. - */ - public class IesParameters : ICipherParameters - { - private byte[] derivation; - private byte[] encoding; - private int macKeySize; - - /** - * @param derivation the derivation parameter for the KDF function. - * @param encoding the encoding parameter for the KDF function. - * @param macKeySize the size of the MAC key (in bits). - */ - public IesParameters( - byte[] derivation, - byte[] encoding, - int macKeySize) - { - this.derivation = derivation; - this.encoding = encoding; - this.macKeySize = macKeySize; - } - - public byte[] GetDerivationV() - { - return derivation; - } - - public byte[] GetEncodingV() - { - return encoding; - } - - public int MacKeySize - { - get - { - return macKeySize; - } - } - } - -} diff --git a/bc-sharp-crypto/src/crypto/parameters/IesWithCipherParameters.cs b/bc-sharp-crypto/src/crypto/parameters/IesWithCipherParameters.cs deleted file mode 100644 index 70ef55d..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/IesWithCipherParameters.cs +++ /dev/null @@ -1,33 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class IesWithCipherParameters : IesParameters - { - private int cipherKeySize; - - /** - * @param derivation the derivation parameter for the KDF function. - * @param encoding the encoding parameter for the KDF function. - * @param macKeySize the size of the MAC key (in bits). - * @param cipherKeySize the size of the associated Cipher key (in bits). - */ - public IesWithCipherParameters( - byte[] derivation, - byte[] encoding, - int macKeySize, - int cipherKeySize) : base(derivation, encoding, macKeySize) - { - this.cipherKeySize = cipherKeySize; - } - - public int CipherKeySize - { - get - { - return cipherKeySize; - } - } - } - -} diff --git a/bc-sharp-crypto/src/crypto/parameters/KdfParameters.cs b/bc-sharp-crypto/src/crypto/parameters/KdfParameters.cs deleted file mode 100644 index bc5c905..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/KdfParameters.cs +++ /dev/null @@ -1,33 +0,0 @@ -using System; -using Org.BouncyCastle.Crypto; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - /** - * parameters for Key derivation functions for IEEE P1363a - */ - public class KdfParameters : IDerivationParameters - { - byte[] iv; - byte[] shared; - - public KdfParameters( - byte[] shared, - byte[] iv) - { - this.shared = shared; - this.iv = iv; - } - - public byte[] GetSharedSecret() - { - return shared; - } - - public byte[] GetIV() - { - return iv; - } - } - -} diff --git a/bc-sharp-crypto/src/crypto/parameters/KeyParameter.cs b/bc-sharp-crypto/src/crypto/parameters/KeyParameter.cs deleted file mode 100644 index 33dff96..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/KeyParameter.cs +++ /dev/null @@ -1,43 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class KeyParameter - : ICipherParameters - { - private readonly byte[] key; - - public KeyParameter( - byte[] key) - { - if (key == null) - throw new ArgumentNullException("key"); - - this.key = (byte[]) key.Clone(); - } - - public KeyParameter( - byte[] key, - int keyOff, - int keyLen) - { - if (key == null) - throw new ArgumentNullException("key"); - if (keyOff < 0 || keyOff > key.Length) - throw new ArgumentOutOfRangeException("keyOff"); - if (keyLen < 0 || (keyOff + keyLen) > key.Length) - throw new ArgumentOutOfRangeException("keyLen"); - - this.key = new byte[keyLen]; - Array.Copy(key, keyOff, this.key, 0, keyLen); - } - - public byte[] GetKey() - { - return (byte[]) key.Clone(); - } - } - -} diff --git a/bc-sharp-crypto/src/crypto/parameters/MgfParameters.cs b/bc-sharp-crypto/src/crypto/parameters/MgfParameters.cs deleted file mode 100644 index 11983b8..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/MgfParameters.cs +++ /dev/null @@ -1,31 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - /// Parameters for mask derivation functions. - public class MgfParameters - : IDerivationParameters - { - private readonly byte[] seed; - - public MgfParameters( - byte[] seed) - : this(seed, 0, seed.Length) - { - } - - public MgfParameters( - byte[] seed, - int off, - int len) - { - this.seed = new byte[len]; - Array.Copy(seed, off, this.seed, 0, len); - } - - public byte[] GetSeed() - { - return (byte[]) seed.Clone(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/MqvPrivateParameters.cs b/bc-sharp-crypto/src/crypto/parameters/MqvPrivateParameters.cs deleted file mode 100644 index 9159cac..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/MqvPrivateParameters.cs +++ /dev/null @@ -1,64 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class MqvPrivateParameters - : ICipherParameters - { - private readonly ECPrivateKeyParameters staticPrivateKey; - private readonly ECPrivateKeyParameters ephemeralPrivateKey; - private readonly ECPublicKeyParameters ephemeralPublicKey; - - public MqvPrivateParameters( - ECPrivateKeyParameters staticPrivateKey, - ECPrivateKeyParameters ephemeralPrivateKey) - : this(staticPrivateKey, ephemeralPrivateKey, null) - { - } - - public MqvPrivateParameters( - ECPrivateKeyParameters staticPrivateKey, - ECPrivateKeyParameters ephemeralPrivateKey, - ECPublicKeyParameters ephemeralPublicKey) - { - if (staticPrivateKey == null) - throw new ArgumentNullException("staticPrivateKey"); - if (ephemeralPrivateKey == null) - throw new ArgumentNullException("ephemeralPrivateKey"); - - ECDomainParameters parameters = staticPrivateKey.Parameters; - if (!parameters.Equals(ephemeralPrivateKey.Parameters)) - throw new ArgumentException("Static and ephemeral private keys have different domain parameters"); - - if (ephemeralPublicKey == null) - { - ephemeralPublicKey = new ECPublicKeyParameters( - parameters.G.Multiply(ephemeralPrivateKey.D), - parameters); - } - else if (!parameters.Equals(ephemeralPublicKey.Parameters)) - { - throw new ArgumentException("Ephemeral public key has different domain parameters"); - } - - this.staticPrivateKey = staticPrivateKey; - this.ephemeralPrivateKey = ephemeralPrivateKey; - this.ephemeralPublicKey = ephemeralPublicKey; - } - - public virtual ECPrivateKeyParameters StaticPrivateKey - { - get { return staticPrivateKey; } - } - - public virtual ECPrivateKeyParameters EphemeralPrivateKey - { - get { return ephemeralPrivateKey; } - } - - public virtual ECPublicKeyParameters EphemeralPublicKey - { - get { return ephemeralPublicKey; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/MqvPublicParameters.cs b/bc-sharp-crypto/src/crypto/parameters/MqvPublicParameters.cs deleted file mode 100644 index 239afa3..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/MqvPublicParameters.cs +++ /dev/null @@ -1,36 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class MqvPublicParameters - : ICipherParameters - { - private readonly ECPublicKeyParameters staticPublicKey; - private readonly ECPublicKeyParameters ephemeralPublicKey; - - public MqvPublicParameters( - ECPublicKeyParameters staticPublicKey, - ECPublicKeyParameters ephemeralPublicKey) - { - if (staticPublicKey == null) - throw new ArgumentNullException("staticPublicKey"); - if (ephemeralPublicKey == null) - throw new ArgumentNullException("ephemeralPublicKey"); - if (!staticPublicKey.Parameters.Equals(ephemeralPublicKey.Parameters)) - throw new ArgumentException("Static and ephemeral public keys have different domain parameters"); - - this.staticPublicKey = staticPublicKey; - this.ephemeralPublicKey = ephemeralPublicKey; - } - - public virtual ECPublicKeyParameters StaticPublicKey - { - get { return staticPublicKey; } - } - - public virtual ECPublicKeyParameters EphemeralPublicKey - { - get { return ephemeralPublicKey; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/NaccacheSternKeyGenerationParameters.cs b/bc-sharp-crypto/src/crypto/parameters/NaccacheSternKeyGenerationParameters.cs deleted file mode 100644 index 44fc906..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/NaccacheSternKeyGenerationParameters.cs +++ /dev/null @@ -1,98 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - /** - * Parameters for NaccacheStern public private key generation. For details on - * this cipher, please see - * - * http://www.gemplus.com/smart/rd/publications/pdf/NS98pkcs.pdf - */ - public class NaccacheSternKeyGenerationParameters : KeyGenerationParameters - { - // private BigInteger publicExponent; - private readonly int certainty; - private readonly int countSmallPrimes; - - /** - * Parameters for generating a NaccacheStern KeyPair. - * - * @param random - * The source of randomness - * @param strength - * The desired strength of the Key in Bits - * @param certainty - * the probability that the generated primes are not really prime - * as integer: 2^(-certainty) is then the probability - * @param countSmallPrimes - * How many small key factors are desired - */ - public NaccacheSternKeyGenerationParameters( - SecureRandom random, - int strength, - int certainty, - int countSmallPrimes) - : base(random, strength) - { - if (countSmallPrimes % 2 == 1) - throw new ArgumentException("countSmallPrimes must be a multiple of 2"); - if (countSmallPrimes < 30) - throw new ArgumentException("countSmallPrimes must be >= 30 for security reasons"); - - this.certainty = certainty; - this.countSmallPrimes = countSmallPrimes; - } - - /** - * Parameters for a NaccacheStern KeyPair. - * - * @param random - * The source of randomness - * @param strength - * The desired strength of the Key in Bits - * @param certainty - * the probability that the generated primes are not really prime - * as integer: 2^(-certainty) is then the probability - * @param cntSmallPrimes - * How many small key factors are desired - * @param debug - * Ignored - */ - [Obsolete("Use version without 'debug' parameter")] - public NaccacheSternKeyGenerationParameters( - SecureRandom random, - int strength, - int certainty, - int countSmallPrimes, - bool debug) - : this(random, strength, certainty, countSmallPrimes) - { - } - - /** - * @return Returns the certainty. - */ - public int Certainty - { - get { return certainty; } - } - - /** - * @return Returns the countSmallPrimes. - */ - public int CountSmallPrimes - { - get { return countSmallPrimes; } - } - - [Obsolete("Remove: always false")] - public bool IsDebug - { - get { return false; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/NaccacheSternKeyParameters.cs b/bc-sharp-crypto/src/crypto/parameters/NaccacheSternKeyParameters.cs deleted file mode 100644 index 8be7ad8..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/NaccacheSternKeyParameters.cs +++ /dev/null @@ -1,44 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - /** - * Public key parameters for NaccacheStern cipher. For details on this cipher, - * please see - * - * http://www.gemplus.com/smart/rd/publications/pdf/NS98pkcs.pdf - */ - public class NaccacheSternKeyParameters : AsymmetricKeyParameter - { - private readonly BigInteger g, n; - private readonly int lowerSigmaBound; - - /** - * @param privateKey - */ - public NaccacheSternKeyParameters(bool privateKey, BigInteger g, BigInteger n, int lowerSigmaBound) - : base(privateKey) - { - this.g = g; - this.n = n; - this.lowerSigmaBound = lowerSigmaBound; - } - - /** - * @return Returns the g. - */ - public BigInteger G { get { return g; } } - - /** - * @return Returns the lowerSigmaBound. - */ - public int LowerSigmaBound { get { return lowerSigmaBound; } } - - /** - * @return Returns the n. - */ - public BigInteger Modulus { get { return n; } } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/NaccacheSternPrivateKeyParameters.cs b/bc-sharp-crypto/src/crypto/parameters/NaccacheSternPrivateKeyParameters.cs deleted file mode 100644 index 42a0454..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/NaccacheSternPrivateKeyParameters.cs +++ /dev/null @@ -1,79 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - /** - * Private key parameters for NaccacheStern cipher. For details on this cipher, - * please see - * - * http://www.gemplus.com/smart/rd/publications/pdf/NS98pkcs.pdf - */ - public class NaccacheSternPrivateKeyParameters : NaccacheSternKeyParameters - { - private readonly BigInteger phiN; - private readonly IList smallPrimes; - -#if !(SILVERLIGHT || PORTABLE) - [Obsolete] - public NaccacheSternPrivateKeyParameters( - BigInteger g, - BigInteger n, - int lowerSigmaBound, - ArrayList smallPrimes, - BigInteger phiN) - : base(true, g, n, lowerSigmaBound) - { - this.smallPrimes = smallPrimes; - this.phiN = phiN; - } -#endif - - /** - * Constructs a NaccacheSternPrivateKey - * - * @param g - * the public enryption parameter g - * @param n - * the public modulus n = p*q - * @param lowerSigmaBound - * the public lower sigma bound up to which data can be encrypted - * @param smallPrimes - * the small primes, of which sigma is constructed in the right - * order - * @param phi_n - * the private modulus phi(n) = (p-1)(q-1) - */ - public NaccacheSternPrivateKeyParameters( - BigInteger g, - BigInteger n, - int lowerSigmaBound, - IList smallPrimes, - BigInteger phiN) - : base(true, g, n, lowerSigmaBound) - { - this.smallPrimes = smallPrimes; - this.phiN = phiN; - } - - public BigInteger PhiN - { - get { return phiN; } - } - -#if !(SILVERLIGHT || PORTABLE) - [Obsolete("Use 'SmallPrimesList' instead")] - public ArrayList SmallPrimes - { - get { return new ArrayList(smallPrimes); } - } -#endif - - public IList SmallPrimesList - { - get { return smallPrimes; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/ParametersWithIV.cs b/bc-sharp-crypto/src/crypto/parameters/ParametersWithIV.cs deleted file mode 100644 index 11a8b77..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/ParametersWithIV.cs +++ /dev/null @@ -1,43 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class ParametersWithIV - : ICipherParameters - { - private readonly ICipherParameters parameters; - private readonly byte[] iv; - - public ParametersWithIV( - ICipherParameters parameters, - byte[] iv) - : this(parameters, iv, 0, iv.Length) - { - } - - public ParametersWithIV( - ICipherParameters parameters, - byte[] iv, - int ivOff, - int ivLen) - { - // NOTE: 'parameters' may be null to imply key re-use - if (iv == null) - throw new ArgumentNullException("iv"); - - this.parameters = parameters; - this.iv = new byte[ivLen]; - Array.Copy(iv, ivOff, this.iv, 0, ivLen); - } - - public byte[] GetIV() - { - return (byte[]) iv.Clone(); - } - - public ICipherParameters Parameters - { - get { return parameters; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/ParametersWithRandom.cs b/bc-sharp-crypto/src/crypto/parameters/ParametersWithRandom.cs deleted file mode 100644 index 276dc26..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/ParametersWithRandom.cs +++ /dev/null @@ -1,48 +0,0 @@ -using System; - -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class ParametersWithRandom - : ICipherParameters - { - private readonly ICipherParameters parameters; - private readonly SecureRandom random; - - public ParametersWithRandom( - ICipherParameters parameters, - SecureRandom random) - { - if (parameters == null) - throw new ArgumentNullException("parameters"); - if (random == null) - throw new ArgumentNullException("random"); - - this.parameters = parameters; - this.random = random; - } - - public ParametersWithRandom( - ICipherParameters parameters) - : this(parameters, new SecureRandom()) - { - } - - [Obsolete("Use Random property instead")] - public SecureRandom GetRandom() - { - return Random; - } - - public SecureRandom Random - { - get { return random; } - } - - public ICipherParameters Parameters - { - get { return parameters; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/ParametersWithSBox.cs b/bc-sharp-crypto/src/crypto/parameters/ParametersWithSBox.cs deleted file mode 100644 index 6473796..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/ParametersWithSBox.cs +++ /dev/null @@ -1,24 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class ParametersWithSBox : ICipherParameters - { - private ICipherParameters parameters; - private byte[] sBox; - - public ParametersWithSBox( - ICipherParameters parameters, - byte[] sBox) - { - this.parameters = parameters; - this.sBox = sBox; - } - - public byte[] GetSBox() { return sBox; } - - public ICipherParameters Parameters { get { return parameters; } } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/ParametersWithSalt.cs b/bc-sharp-crypto/src/crypto/parameters/ParametersWithSalt.cs deleted file mode 100644 index 7f4cd6c..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/ParametersWithSalt.cs +++ /dev/null @@ -1,39 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - - /// Cipher parameters with a fixed salt value associated with them. - public class ParametersWithSalt : ICipherParameters - { - private byte[] salt; - private ICipherParameters parameters; - - public ParametersWithSalt(ICipherParameters parameters, byte[] salt):this(parameters, salt, 0, salt.Length) - { - } - - public ParametersWithSalt(ICipherParameters parameters, byte[] salt, int saltOff, int saltLen) - { - this.salt = new byte[saltLen]; - this.parameters = parameters; - - Array.Copy(salt, saltOff, this.salt, 0, saltLen); - } - - public byte[] GetSalt() - { - return salt; - } - - public ICipherParameters Parameters - { - get - { - return parameters; - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/RC2Parameters.cs b/bc-sharp-crypto/src/crypto/parameters/RC2Parameters.cs deleted file mode 100644 index 7a6d5bb..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/RC2Parameters.cs +++ /dev/null @@ -1,47 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class RC2Parameters - : KeyParameter - { - private readonly int bits; - - public RC2Parameters( - byte[] key) - : this(key, (key.Length > 128) ? 1024 : (key.Length * 8)) - { - } - - public RC2Parameters( - byte[] key, - int keyOff, - int keyLen) - : this(key, keyOff, keyLen, (keyLen > 128) ? 1024 : (keyLen * 8)) - { - } - - public RC2Parameters( - byte[] key, - int bits) - : base(key) - { - this.bits = bits; - } - - public RC2Parameters( - byte[] key, - int keyOff, - int keyLen, - int bits) - : base(key, keyOff, keyLen) - { - this.bits = bits; - } - - public int EffectiveKeyBits - { - get { return bits; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/RC5Parameters.cs b/bc-sharp-crypto/src/crypto/parameters/RC5Parameters.cs deleted file mode 100644 index 88a59e1..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/RC5Parameters.cs +++ /dev/null @@ -1,27 +0,0 @@ -using System; -using Org.BouncyCastle.Crypto; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class RC5Parameters - : KeyParameter - { - private readonly int rounds; - - public RC5Parameters( - byte[] key, - int rounds) - : base(key) - { - if (key.Length > 255) - throw new ArgumentException("RC5 key length can be no greater than 255"); - - this.rounds = rounds; - } - - public int Rounds - { - get { return rounds; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/RSABlindingParameters.cs b/bc-sharp-crypto/src/crypto/parameters/RSABlindingParameters.cs deleted file mode 100644 index 49c7bcc..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/RSABlindingParameters.cs +++ /dev/null @@ -1,34 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class RsaBlindingParameters - : ICipherParameters - { - private readonly RsaKeyParameters publicKey; - private readonly BigInteger blindingFactor; - - public RsaBlindingParameters( - RsaKeyParameters publicKey, - BigInteger blindingFactor) - { - if (publicKey.IsPrivate) - throw new ArgumentException("RSA parameters should be for a public key"); - - this.publicKey = publicKey; - this.blindingFactor = blindingFactor; - } - - public RsaKeyParameters PublicKey - { - get { return publicKey; } - } - - public BigInteger BlindingFactor - { - get { return blindingFactor; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/RsaKeyGenerationParameters.cs b/bc-sharp-crypto/src/crypto/parameters/RsaKeyGenerationParameters.cs deleted file mode 100644 index 619ab65..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/RsaKeyGenerationParameters.cs +++ /dev/null @@ -1,55 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class RsaKeyGenerationParameters - : KeyGenerationParameters - { - private readonly BigInteger publicExponent; - private readonly int certainty; - - public RsaKeyGenerationParameters( - BigInteger publicExponent, - SecureRandom random, - int strength, - int certainty) - : base(random, strength) - { - this.publicExponent = publicExponent; - this.certainty = certainty; - } - - public BigInteger PublicExponent - { - get { return publicExponent; } - } - - public int Certainty - { - get { return certainty; } - } - - public override bool Equals( - object obj) - { - RsaKeyGenerationParameters other = obj as RsaKeyGenerationParameters; - - if (other == null) - { - return false; - } - - return certainty == other.certainty - && publicExponent.Equals(other.publicExponent); - } - - public override int GetHashCode() - { - return certainty.GetHashCode() ^ publicExponent.GetHashCode(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/RsaKeyParameters.cs b/bc-sharp-crypto/src/crypto/parameters/RsaKeyParameters.cs deleted file mode 100644 index 5480f05..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/RsaKeyParameters.cs +++ /dev/null @@ -1,85 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class RsaKeyParameters - : AsymmetricKeyParameter - { - // the value is the product of the 132 smallest primes from 3 to 751 - private static BigInteger SmallPrimesProduct = new BigInteger( - "8138E8A0FCF3A4E84A771D40FD305D7F4AA59306D7251DE54D98AF8FE95729A1" + - "F73D893FA424CD2EDC8636A6C3285E022B0E3866A565AE8108EED8591CD4FE8D" + - "2CE86165A978D719EBF647F362D33FCA29CD179FB42401CBAF3DF0C614056F9C" + - "8F3CFD51E474AFB6BC6974F78DB8ABA8E9E517FDED658591AB7502BD41849462F", - 16); - - private static BigInteger Validate(BigInteger modulus) - { - if ((modulus.IntValue & 1) == 0) - throw new ArgumentException("RSA modulus is even", "modulus"); - if (!modulus.Gcd(SmallPrimesProduct).Equals(BigInteger.One)) - throw new ArgumentException("RSA modulus has a small prime factor"); - - // TODO: add additional primePower/Composite test - expensive!! - - return modulus; - } - - private readonly BigInteger modulus; - private readonly BigInteger exponent; - - public RsaKeyParameters( - bool isPrivate, - BigInteger modulus, - BigInteger exponent) - : base(isPrivate) - { - if (modulus == null) - throw new ArgumentNullException("modulus"); - if (exponent == null) - throw new ArgumentNullException("exponent"); - if (modulus.SignValue <= 0) - throw new ArgumentException("Not a valid RSA modulus", "modulus"); - if (exponent.SignValue <= 0) - throw new ArgumentException("Not a valid RSA exponent", "exponent"); - if (!isPrivate && (exponent.IntValue & 1) == 0) - throw new ArgumentException("RSA publicExponent is even", "exponent"); - - this.modulus = Validate(modulus); - this.exponent = exponent; - } - - public BigInteger Modulus - { - get { return modulus; } - } - - public BigInteger Exponent - { - get { return exponent; } - } - - public override bool Equals( - object obj) - { - RsaKeyParameters kp = obj as RsaKeyParameters; - - if (kp == null) - { - return false; - } - - return kp.IsPrivate == this.IsPrivate - && kp.Modulus.Equals(this.modulus) - && kp.Exponent.Equals(this.exponent); - } - - public override int GetHashCode() - { - return modulus.GetHashCode() ^ exponent.GetHashCode() ^ IsPrivate.GetHashCode(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/RsaPrivateCrtKeyParameters.cs b/bc-sharp-crypto/src/crypto/parameters/RsaPrivateCrtKeyParameters.cs deleted file mode 100644 index 7bd8abd..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/RsaPrivateCrtKeyParameters.cs +++ /dev/null @@ -1,104 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public class RsaPrivateCrtKeyParameters - : RsaKeyParameters - { - private readonly BigInteger e, p, q, dP, dQ, qInv; - - public RsaPrivateCrtKeyParameters( - BigInteger modulus, - BigInteger publicExponent, - BigInteger privateExponent, - BigInteger p, - BigInteger q, - BigInteger dP, - BigInteger dQ, - BigInteger qInv) - : base(true, modulus, privateExponent) - { - ValidateValue(publicExponent, "publicExponent", "exponent"); - ValidateValue(p, "p", "P value"); - ValidateValue(q, "q", "Q value"); - ValidateValue(dP, "dP", "DP value"); - ValidateValue(dQ, "dQ", "DQ value"); - ValidateValue(qInv, "qInv", "InverseQ value"); - - this.e = publicExponent; - this.p = p; - this.q = q; - this.dP = dP; - this.dQ = dQ; - this.qInv = qInv; - } - - public BigInteger PublicExponent - { - get { return e; } - } - - public BigInteger P - { - get { return p; } - } - - public BigInteger Q - { - get { return q; } - } - - public BigInteger DP - { - get { return dP; } - } - - public BigInteger DQ - { - get { return dQ; } - } - - public BigInteger QInv - { - get { return qInv; } - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - RsaPrivateCrtKeyParameters kp = obj as RsaPrivateCrtKeyParameters; - - if (kp == null) - return false; - - return kp.DP.Equals(dP) - && kp.DQ.Equals(dQ) - && kp.Exponent.Equals(this.Exponent) - && kp.Modulus.Equals(this.Modulus) - && kp.P.Equals(p) - && kp.Q.Equals(q) - && kp.PublicExponent.Equals(e) - && kp.QInv.Equals(qInv); - } - - public override int GetHashCode() - { - return DP.GetHashCode() ^ DQ.GetHashCode() ^ Exponent.GetHashCode() ^ Modulus.GetHashCode() - ^ P.GetHashCode() ^ Q.GetHashCode() ^ PublicExponent.GetHashCode() ^ QInv.GetHashCode(); - } - - private static void ValidateValue(BigInteger x, string name, string desc) - { - if (x == null) - throw new ArgumentNullException(name); - if (x.SignValue <= 0) - throw new ArgumentException("Not a valid RSA " + desc, name); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/SkeinParameters.cs b/bc-sharp-crypto/src/crypto/parameters/SkeinParameters.cs deleted file mode 100644 index cc57ef5..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/SkeinParameters.cs +++ /dev/null @@ -1,286 +0,0 @@ -using System; -using System.Collections; -using System.Globalization; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - - /// - /// Parameters for the Skein hash function - a series of byte[] strings identified by integer tags. - /// - /// - /// Parameterised Skein can be used for: - ///
    - ///
  • MAC generation, by providing a key.
    • - ///
  • Randomised hashing, by providing a nonce.
    • - ///
  • A hash function for digital signatures, associating a - /// public key with the message digest.
    • - ///
  • A key derivation function, by providing a - /// key identifier.
    • - ///
  • Personalised hashing, by providing a - /// recommended format or - /// arbitrary personalisation string.
    • - ///
- /// - /// - /// - /// - public class SkeinParameters - : ICipherParameters - { - /// - /// The parameter type for a secret key, supporting MAC or KDF functions: 0 - /// - public const int PARAM_TYPE_KEY = 0; - - /// - /// The parameter type for the Skein configuration block: 4 - /// - public const int PARAM_TYPE_CONFIG = 4; - - /// - /// The parameter type for a personalisation string: 8 - /// - public const int PARAM_TYPE_PERSONALISATION = 8; - - /// - /// The parameter type for a public key: 12 - /// - public const int PARAM_TYPE_PUBLIC_KEY = 12; - - /// - /// The parameter type for a key identifier string: 16 - /// - public const int PARAM_TYPE_KEY_IDENTIFIER = 16; - - /// - /// The parameter type for a nonce: 20 - /// - public const int PARAM_TYPE_NONCE = 20; - - /// - /// The parameter type for the message: 48 - /// - public const int PARAM_TYPE_MESSAGE = 48; - - /// - /// The parameter type for the output transformation: 63 - /// - public const int PARAM_TYPE_OUTPUT = 63; - - private IDictionary parameters; - - public SkeinParameters() - : this(Platform.CreateHashtable()) - - { - } - - private SkeinParameters(IDictionary parameters) - { - this.parameters = parameters; - } - - /// - /// Obtains a map of type (int) to value (byte[]) for the parameters tracked in this object. - /// - public IDictionary GetParameters() - { - return parameters; - } - - /// - /// Obtains the value of the key parameter, or null if not - /// set. - /// - /// The key. - public byte[] GetKey() - { - return (byte[])parameters[PARAM_TYPE_KEY]; - } - - /// - /// Obtains the value of the personalisation parameter, or - /// null if not set. - /// - public byte[] GetPersonalisation() - { - return (byte[])parameters[PARAM_TYPE_PERSONALISATION]; - } - - /// - /// Obtains the value of the public key parameter, or - /// null if not set. - /// - public byte[] GetPublicKey() - { - return (byte[])parameters[PARAM_TYPE_PUBLIC_KEY]; - } - - /// - /// Obtains the value of the key identifier parameter, or - /// null if not set. - /// - public byte[] GetKeyIdentifier() - { - return (byte[])parameters[PARAM_TYPE_KEY_IDENTIFIER]; - } - - /// - /// Obtains the value of the nonce parameter, or null if - /// not set. - /// - public byte[] GetNonce() - { - return (byte[])parameters[PARAM_TYPE_NONCE]; - } - - /// - /// A builder for . - /// - public class Builder - { - private IDictionary parameters = Platform.CreateHashtable(); - - public Builder() - { - } - - public Builder(IDictionary paramsMap) - { - IEnumerator keys = paramsMap.Keys.GetEnumerator(); - while (keys.MoveNext()) - { - int key = (int)keys.Current; - parameters.Add(key, paramsMap[key]); - } - } - - public Builder(SkeinParameters parameters) - { - IEnumerator keys = parameters.parameters.Keys.GetEnumerator(); - while (keys.MoveNext()) - { - int key = (int)keys.Current; - this.parameters.Add(key, parameters.parameters[key]); - } - } - - /// - /// Sets a parameters to apply to the Skein hash function. - /// - /// - /// Parameter types must be in the range 0,5..62, and cannot use the value 48 - /// (reserved for message body). - ///

- /// Parameters with type < 48 are processed before - /// the message content, parameters with type > 48 - /// are processed after the message and prior to output. - /// - /// the type of the parameter, in the range 5..62. - /// the byte sequence of the parameter. - public Builder Set(int type, byte[] value) - { - if (value == null) - { - throw new ArgumentException("Parameter value must not be null."); - } - if ((type != PARAM_TYPE_KEY) - && (type <= PARAM_TYPE_CONFIG || type >= PARAM_TYPE_OUTPUT || type == PARAM_TYPE_MESSAGE)) - { - throw new ArgumentException("Parameter types must be in the range 0,5..47,49..62."); - } - if (type == PARAM_TYPE_CONFIG) - { - throw new ArgumentException("Parameter type " + PARAM_TYPE_CONFIG - + " is reserved for internal use."); - } - this.parameters.Add(type, value); - return this; - } - - ///

- /// Sets the parameter. - /// - public Builder SetKey(byte[] key) - { - return Set(PARAM_TYPE_KEY, key); - } - - /// - /// Sets the parameter. - /// - public Builder SetPersonalisation(byte[] personalisation) - { - return Set(PARAM_TYPE_PERSONALISATION, personalisation); - } - - /// - /// Implements the recommended personalisation format for Skein defined in Section 4.11 of - /// the Skein 1.3 specification. - /// - /// - /// The format is YYYYMMDD email@address distinguisher, encoded to a byte - /// sequence using UTF-8 encoding. - /// - /// the date the personalised application of the Skein was defined. - /// the email address of the creation of the personalised application. - /// an arbitrary personalisation string distinguishing the application. - public Builder SetPersonalisation(DateTime date, string emailAddress, string distinguisher) - { - try - { - MemoryStream bout = new MemoryStream(); - StreamWriter outBytes = new StreamWriter(bout, System.Text.Encoding.UTF8); - outBytes.Write(date.ToString("YYYYMMDD", CultureInfo.InvariantCulture)); - outBytes.Write(" "); - outBytes.Write(emailAddress); - outBytes.Write(" "); - outBytes.Write(distinguisher); - Platform.Dispose(outBytes); - return Set(PARAM_TYPE_PERSONALISATION, bout.ToArray()); - } - catch (IOException e) - { - throw new InvalidOperationException("Byte I/O failed.", e); - } - } - - /// - /// Sets the parameter. - /// - public Builder SetPublicKey(byte[] publicKey) - { - return Set(PARAM_TYPE_PUBLIC_KEY, publicKey); - } - - /// - /// Sets the parameter. - /// - public Builder SetKeyIdentifier(byte[] keyIdentifier) - { - return Set(PARAM_TYPE_KEY_IDENTIFIER, keyIdentifier); - } - - /// - /// Sets the parameter. - /// - public Builder SetNonce(byte[] nonce) - { - return Set(PARAM_TYPE_NONCE, nonce); - } - - /// - /// Constructs a new instance with the parameters provided to this - /// builder. - /// - public SkeinParameters Build() - { - return new SkeinParameters(parameters); - } - } - } -} \ No newline at end of file diff --git a/bc-sharp-crypto/src/crypto/parameters/Srp6GroupParameters.cs b/bc-sharp-crypto/src/crypto/parameters/Srp6GroupParameters.cs deleted file mode 100644 index 6762dd3..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/Srp6GroupParameters.cs +++ /dev/null @@ -1,27 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - public sealed class Srp6GroupParameters - { - private readonly BigInteger n, g; - - public Srp6GroupParameters(BigInteger N, BigInteger g) - { - this.n = N; - this.g = g; - } - - public BigInteger G - { - get { return g; } - } - - public BigInteger N - { - get { return n; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/parameters/TweakableBlockCipherParameters.cs b/bc-sharp-crypto/src/crypto/parameters/TweakableBlockCipherParameters.cs deleted file mode 100644 index f757266..0000000 --- a/bc-sharp-crypto/src/crypto/parameters/TweakableBlockCipherParameters.cs +++ /dev/null @@ -1,40 +0,0 @@ -using System; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Parameters -{ - - /// - /// Parameters for tweakable block ciphers. - /// - public class TweakableBlockCipherParameters - : ICipherParameters - { - private readonly byte[] tweak; - private readonly KeyParameter key; - - public TweakableBlockCipherParameters(KeyParameter key, byte[] tweak) - { - this.key = key; - this.tweak = Arrays.Clone(tweak); - } - - /// - /// Gets the key. - /// - /// the key to use, or null to use the current key. - public KeyParameter Key - { - get { return key; } - } - - /// - /// Gets the tweak value. - /// - /// The tweak to use, or null to use the current tweak. - public byte[] Tweak - { - get { return tweak; } - } - } -} \ No newline at end of file diff --git a/bc-sharp-crypto/src/crypto/prng/BasicEntropySourceProvider.cs b/bc-sharp-crypto/src/crypto/prng/BasicEntropySourceProvider.cs deleted file mode 100644 index 31a8461..0000000 --- a/bc-sharp-crypto/src/crypto/prng/BasicEntropySourceProvider.cs +++ /dev/null @@ -1,71 +0,0 @@ -using System; - -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Prng -{ - /** - * An EntropySourceProvider where entropy generation is based on a SecureRandom output using SecureRandom.generateSeed(). - */ - public class BasicEntropySourceProvider - : IEntropySourceProvider - { - private readonly SecureRandom mSecureRandom; - private readonly bool mPredictionResistant; - - /** - * Create a entropy source provider based on the passed in SecureRandom. - * - * @param secureRandom the SecureRandom to base EntropySource construction on. - * @param isPredictionResistant boolean indicating if the SecureRandom is based on prediction resistant entropy or not (true if it is). - */ - public BasicEntropySourceProvider(SecureRandom secureRandom, bool isPredictionResistant) - { - mSecureRandom = secureRandom; - mPredictionResistant = isPredictionResistant; - } - - /** - * Return an entropy source that will create bitsRequired bits of entropy on - * each invocation of getEntropy(). - * - * @param bitsRequired size (in bits) of entropy to be created by the provided source. - * @return an EntropySource that generates bitsRequired bits of entropy on each call to its getEntropy() method. - */ - public IEntropySource Get(int bitsRequired) - { - return new BasicEntropySource(mSecureRandom, mPredictionResistant, bitsRequired); - } - - private class BasicEntropySource - : IEntropySource - { - private readonly SecureRandom mSecureRandom; - private readonly bool mPredictionResistant; - private readonly int mEntropySize; - - internal BasicEntropySource(SecureRandom secureRandom, bool predictionResistant, int entropySize) - { - this.mSecureRandom = secureRandom; - this.mPredictionResistant = predictionResistant; - this.mEntropySize = entropySize; - } - - bool IEntropySource.IsPredictionResistant - { - get { return mPredictionResistant; } - } - - byte[] IEntropySource.GetEntropy() - { - // TODO[FIPS] Not all SecureRandom implementations are considered valid entropy sources - return SecureRandom.GetNextBytes(mSecureRandom, (mEntropySize + 7) / 8); - } - - int IEntropySource.EntropySize - { - get { return mEntropySize; } - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/prng/CryptoApiEntropySourceProvider.cs b/bc-sharp-crypto/src/crypto/prng/CryptoApiEntropySourceProvider.cs deleted file mode 100644 index 68579aa..0000000 --- a/bc-sharp-crypto/src/crypto/prng/CryptoApiEntropySourceProvider.cs +++ /dev/null @@ -1,70 +0,0 @@ -#if !(NETCF_1_0 || PORTABLE) -using System; -using System.Security.Cryptography; - -namespace Org.BouncyCastle.Crypto.Prng -{ - public class CryptoApiEntropySourceProvider - : IEntropySourceProvider - { - private readonly RandomNumberGenerator mRng; - private readonly bool mPredictionResistant; - - public CryptoApiEntropySourceProvider() - : this(new RNGCryptoServiceProvider(), true) - { - } - - public CryptoApiEntropySourceProvider(RandomNumberGenerator rng, bool isPredictionResistant) - { - if (rng == null) - throw new ArgumentNullException("rng"); - - mRng = rng; - mPredictionResistant = isPredictionResistant; - } - - public IEntropySource Get(int bitsRequired) - { - return new CryptoApiEntropySource(mRng, mPredictionResistant, bitsRequired); - } - - private class CryptoApiEntropySource - : IEntropySource - { - private readonly RandomNumberGenerator mRng; - private readonly bool mPredictionResistant; - private readonly int mEntropySize; - - internal CryptoApiEntropySource(RandomNumberGenerator rng, bool predictionResistant, int entropySize) - { - this.mRng = rng; - this.mPredictionResistant = predictionResistant; - this.mEntropySize = entropySize; - } - - #region IEntropySource Members - - bool IEntropySource.IsPredictionResistant - { - get { return mPredictionResistant; } - } - - byte[] IEntropySource.GetEntropy() - { - byte[] result = new byte[(mEntropySize + 7) / 8]; - mRng.GetBytes(result); - return result; - } - - int IEntropySource.EntropySize - { - get { return mEntropySize; } - } - - #endregion - } - } -} - -#endif diff --git a/bc-sharp-crypto/src/crypto/prng/CryptoApiRandomGenerator.cs b/bc-sharp-crypto/src/crypto/prng/CryptoApiRandomGenerator.cs deleted file mode 100644 index fa5f523..0000000 --- a/bc-sharp-crypto/src/crypto/prng/CryptoApiRandomGenerator.cs +++ /dev/null @@ -1,66 +0,0 @@ -#if !(NETCF_1_0 || PORTABLE) - -using System; -using System.Security.Cryptography; - -namespace Org.BouncyCastle.Crypto.Prng -{ - /// - /// Uses Microsoft's RNGCryptoServiceProvider - /// - public class CryptoApiRandomGenerator - : IRandomGenerator - { - private readonly RandomNumberGenerator rndProv; - - public CryptoApiRandomGenerator() - : this(new RNGCryptoServiceProvider()) - { - } - - public CryptoApiRandomGenerator(RandomNumberGenerator rng) - { - this.rndProv = rng; - } - - #region IRandomGenerator Members - - public virtual void AddSeedMaterial(byte[] seed) - { - // We don't care about the seed - } - - public virtual void AddSeedMaterial(long seed) - { - // We don't care about the seed - } - - public virtual void NextBytes(byte[] bytes) - { - rndProv.GetBytes(bytes); - } - - public virtual void NextBytes(byte[] bytes, int start, int len) - { - if (start < 0) - throw new ArgumentException("Start offset cannot be negative", "start"); - if (bytes.Length < (start + len)) - throw new ArgumentException("Byte array too small for requested offset and length"); - - if (bytes.Length == len && start == 0) - { - NextBytes(bytes); - } - else - { - byte[] tmpBuf = new byte[len]; - NextBytes(tmpBuf); - Array.Copy(tmpBuf, 0, bytes, start, len); - } - } - - #endregion - } -} - -#endif diff --git a/bc-sharp-crypto/src/crypto/prng/DigestRandomGenerator.cs b/bc-sharp-crypto/src/crypto/prng/DigestRandomGenerator.cs deleted file mode 100644 index f5a2995..0000000 --- a/bc-sharp-crypto/src/crypto/prng/DigestRandomGenerator.cs +++ /dev/null @@ -1,127 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Crypto.Utilities; - -namespace Org.BouncyCastle.Crypto.Prng -{ - /** - * Random generation based on the digest with counter. Calling AddSeedMaterial will - * always increase the entropy of the hash. - *

- * Internal access to the digest is synchronized so a single one of these can be shared. - *

- */ - public class DigestRandomGenerator - : IRandomGenerator - { - private const long CYCLE_COUNT = 10; - - private long stateCounter; - private long seedCounter; - private IDigest digest; - private byte[] state; - private byte[] seed; - - public DigestRandomGenerator( - IDigest digest) - { - this.digest = digest; - - this.seed = new byte[digest.GetDigestSize()]; - this.seedCounter = 1; - - this.state = new byte[digest.GetDigestSize()]; - this.stateCounter = 1; - } - - public void AddSeedMaterial( - byte[] inSeed) - { - lock (this) - { - DigestUpdate(inSeed); - DigestUpdate(seed); - DigestDoFinal(seed); - } - } - - public void AddSeedMaterial( - long rSeed) - { - lock (this) - { - DigestAddCounter(rSeed); - DigestUpdate(seed); - DigestDoFinal(seed); - } - } - - public void NextBytes( - byte[] bytes) - { - NextBytes(bytes, 0, bytes.Length); - } - - public void NextBytes( - byte[] bytes, - int start, - int len) - { - lock (this) - { - int stateOff = 0; - - GenerateState(); - - int end = start + len; - for (int i = start; i < end; ++i) - { - if (stateOff == state.Length) - { - GenerateState(); - stateOff = 0; - } - bytes[i] = state[stateOff++]; - } - } - } - - private void CycleSeed() - { - DigestUpdate(seed); - DigestAddCounter(seedCounter++); - DigestDoFinal(seed); - } - - private void GenerateState() - { - DigestAddCounter(stateCounter++); - DigestUpdate(state); - DigestUpdate(seed); - DigestDoFinal(state); - - if ((stateCounter % CYCLE_COUNT) == 0) - { - CycleSeed(); - } - } - - private void DigestAddCounter(long seedVal) - { - byte[] bytes = new byte[8]; - Pack.UInt64_To_LE((ulong)seedVal, bytes); - digest.BlockUpdate(bytes, 0, bytes.Length); - } - - private void DigestUpdate(byte[] inSeed) - { - digest.BlockUpdate(inSeed, 0, inSeed.Length); - } - - private void DigestDoFinal(byte[] result) - { - digest.DoFinal(result, 0); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/prng/EntropyUtilities.cs b/bc-sharp-crypto/src/crypto/prng/EntropyUtilities.cs deleted file mode 100644 index 58c8703..0000000 --- a/bc-sharp-crypto/src/crypto/prng/EntropyUtilities.cs +++ /dev/null @@ -1,30 +0,0 @@ -using System; - -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Prng -{ - public abstract class EntropyUtilities - { - /** - * Generate numBytes worth of entropy from the passed in entropy source. - * - * @param entropySource the entropy source to request the data from. - * @param numBytes the number of bytes of entropy requested. - * @return a byte array populated with the random data. - */ - public static byte[] GenerateSeed(IEntropySource entropySource, int numBytes) - { - byte[] bytes = new byte[numBytes]; - int count = 0; - while (count < numBytes) - { - byte[] entropy = entropySource.GetEntropy(); - int toCopy = System.Math.Min(bytes.Length, numBytes - count); - Array.Copy(entropy, 0, bytes, count, toCopy); - count += toCopy; - } - return bytes; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/prng/IDrbgProvider.cs b/bc-sharp-crypto/src/crypto/prng/IDrbgProvider.cs deleted file mode 100644 index 5ebf5fd..0000000 --- a/bc-sharp-crypto/src/crypto/prng/IDrbgProvider.cs +++ /dev/null @@ -1,11 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Prng.Drbg; - -namespace Org.BouncyCastle.Crypto.Prng -{ - internal interface IDrbgProvider - { - ISP80090Drbg Get(IEntropySource entropySource); - } -} diff --git a/bc-sharp-crypto/src/crypto/prng/IRandomGenerator.cs b/bc-sharp-crypto/src/crypto/prng/IRandomGenerator.cs deleted file mode 100644 index 8dbe406..0000000 --- a/bc-sharp-crypto/src/crypto/prng/IRandomGenerator.cs +++ /dev/null @@ -1,26 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Prng -{ - /// Generic interface for objects generating random bytes. - public interface IRandomGenerator - { - /// Add more seed material to the generator. - /// A byte array to be mixed into the generator's state. - void AddSeedMaterial(byte[] seed); - - /// Add more seed material to the generator. - /// A long value to be mixed into the generator's state. - void AddSeedMaterial(long seed); - - /// Fill byte array with random values. - /// Array to be filled. - void NextBytes(byte[] bytes); - - /// Fill byte array with random values. - /// Array to receive bytes. - /// Index to start filling at. - /// Length of segment to fill. - void NextBytes(byte[] bytes, int start, int len); - } -} diff --git a/bc-sharp-crypto/src/crypto/prng/ReversedWindowGenerator.cs b/bc-sharp-crypto/src/crypto/prng/ReversedWindowGenerator.cs deleted file mode 100644 index dd28c52..0000000 --- a/bc-sharp-crypto/src/crypto/prng/ReversedWindowGenerator.cs +++ /dev/null @@ -1,98 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Prng -{ - /// - /// Takes bytes generated by an underling RandomGenerator and reverses the order in - /// each small window (of configurable size). - ///

- /// Access to internals is synchronized so a single one of these can be shared. - ///

- /// - public class ReversedWindowGenerator - : IRandomGenerator - { - private readonly IRandomGenerator generator; - - private byte[] window; - private int windowCount; - - public ReversedWindowGenerator( - IRandomGenerator generator, - int windowSize) - { - if (generator == null) - throw new ArgumentNullException("generator"); - if (windowSize < 2) - throw new ArgumentException("Window size must be at least 2", "windowSize"); - - this.generator = generator; - this.window = new byte[windowSize]; - } - - /// Add more seed material to the generator. - /// A byte array to be mixed into the generator's state. - public virtual void AddSeedMaterial( - byte[] seed) - { - lock (this) - { - windowCount = 0; - generator.AddSeedMaterial(seed); - } - } - - /// Add more seed material to the generator. - /// A long value to be mixed into the generator's state. - public virtual void AddSeedMaterial( - long seed) - { - lock (this) - { - windowCount = 0; - generator.AddSeedMaterial(seed); - } - } - - /// Fill byte array with random values. - /// Array to be filled. - public virtual void NextBytes( - byte[] bytes) - { - doNextBytes(bytes, 0, bytes.Length); - } - - /// Fill byte array with random values. - /// Array to receive bytes. - /// Index to start filling at. - /// Length of segment to fill. - public virtual void NextBytes( - byte[] bytes, - int start, - int len) - { - doNextBytes(bytes, start, len); - } - - private void doNextBytes( - byte[] bytes, - int start, - int len) - { - lock (this) - { - int done = 0; - while (done < len) - { - if (windowCount < 1) - { - generator.NextBytes(window, 0, window.Length); - windowCount = window.Length; - } - - bytes[start + done++] = window[--windowCount]; - } - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/prng/SP800SecureRandom.cs b/bc-sharp-crypto/src/crypto/prng/SP800SecureRandom.cs deleted file mode 100644 index 30c838c..0000000 --- a/bc-sharp-crypto/src/crypto/prng/SP800SecureRandom.cs +++ /dev/null @@ -1,95 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Prng.Drbg; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Prng -{ - public class SP800SecureRandom - : SecureRandom - { - private readonly IDrbgProvider mDrbgProvider; - private readonly bool mPredictionResistant; - private readonly SecureRandom mRandomSource; - private readonly IEntropySource mEntropySource; - - private ISP80090Drbg mDrbg; - - internal SP800SecureRandom(SecureRandom randomSource, IEntropySource entropySource, IDrbgProvider drbgProvider, bool predictionResistant) - : base((IRandomGenerator)null) - { - this.mRandomSource = randomSource; - this.mEntropySource = entropySource; - this.mDrbgProvider = drbgProvider; - this.mPredictionResistant = predictionResistant; - } - - public override void SetSeed(byte[] seed) - { - lock (this) - { - if (mRandomSource != null) - { - this.mRandomSource.SetSeed(seed); - } - } - } - - public override void SetSeed(long seed) - { - lock (this) - { - // this will happen when SecureRandom() is created - if (mRandomSource != null) - { - this.mRandomSource.SetSeed(seed); - } - } - } - - public override void NextBytes(byte[] bytes) - { - lock (this) - { - if (mDrbg == null) - { - mDrbg = mDrbgProvider.Get(mEntropySource); - } - - // check if a reseed is required... - if (mDrbg.Generate(bytes, null, mPredictionResistant) < 0) - { - mDrbg.Reseed(null); - mDrbg.Generate(bytes, null, mPredictionResistant); - } - } - } - - public override void NextBytes(byte[] buf, int off, int len) - { - byte[] bytes = new byte[len]; - NextBytes(bytes); - Array.Copy(bytes, 0, buf, off, len); - } - - public override byte[] GenerateSeed(int numBytes) - { - return EntropyUtilities.GenerateSeed(mEntropySource, numBytes); - } - - /// Force a reseed of the DRBG. - /// optional additional input - public virtual void Reseed(byte[] additionalInput) - { - lock (this) - { - if (mDrbg == null) - { - mDrbg = mDrbgProvider.Get(mEntropySource); - } - - mDrbg.Reseed(additionalInput); - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/prng/SP800SecureRandomBuilder.cs b/bc-sharp-crypto/src/crypto/prng/SP800SecureRandomBuilder.cs deleted file mode 100644 index 7199f1a..0000000 --- a/bc-sharp-crypto/src/crypto/prng/SP800SecureRandomBuilder.cs +++ /dev/null @@ -1,208 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Prng.Drbg; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Prng -{ - /** - * Builder class for making SecureRandom objects based on SP 800-90A Deterministic Random Bit Generators (DRBG). - */ - public class SP800SecureRandomBuilder - { - private readonly SecureRandom mRandom; - private readonly IEntropySourceProvider mEntropySourceProvider; - - private byte[] mPersonalizationString = null; - private int mSecurityStrength = 256; - private int mEntropyBitsRequired = 256; - - /** - * Basic constructor, creates a builder using an EntropySourceProvider based on the default SecureRandom with - * predictionResistant set to false. - *

- * Any SecureRandom created from a builder constructed like this will make use of input passed to SecureRandom.setSeed() if - * the default SecureRandom does for its generateSeed() call. - *

- */ - public SP800SecureRandomBuilder() - : this(new SecureRandom(), false) - { - } - - /** - * Construct a builder with an EntropySourceProvider based on the passed in SecureRandom and the passed in value - * for prediction resistance. - *

- * Any SecureRandom created from a builder constructed like this will make use of input passed to SecureRandom.setSeed() if - * the passed in SecureRandom does for its generateSeed() call. - *

- * @param entropySource - * @param predictionResistant - */ - public SP800SecureRandomBuilder(SecureRandom entropySource, bool predictionResistant) - { - this.mRandom = entropySource; - this.mEntropySourceProvider = new BasicEntropySourceProvider(entropySource, predictionResistant); - } - - /** - * Create a builder which makes creates the SecureRandom objects from a specified entropy source provider. - *

- * Note: If this constructor is used any calls to setSeed() in the resulting SecureRandom will be ignored. - *

- * @param entropySourceProvider a provider of EntropySource objects. - */ - public SP800SecureRandomBuilder(IEntropySourceProvider entropySourceProvider) - { - this.mRandom = null; - this.mEntropySourceProvider = entropySourceProvider; - } - - /** - * Set the personalization string for DRBG SecureRandoms created by this builder - * @param personalizationString the personalisation string for the underlying DRBG. - * @return the current builder. - */ - public SP800SecureRandomBuilder SetPersonalizationString(byte[] personalizationString) - { - this.mPersonalizationString = personalizationString; - return this; - } - - /** - * Set the security strength required for DRBGs used in building SecureRandom objects. - * - * @param securityStrength the security strength (in bits) - * @return the current builder. - */ - public SP800SecureRandomBuilder SetSecurityStrength(int securityStrength) - { - this.mSecurityStrength = securityStrength; - return this; - } - - /** - * Set the amount of entropy bits required for seeding and reseeding DRBGs used in building SecureRandom objects. - * - * @param entropyBitsRequired the number of bits of entropy to be requested from the entropy source on each seed/reseed. - * @return the current builder. - */ - public SP800SecureRandomBuilder SetEntropyBitsRequired(int entropyBitsRequired) - { - this.mEntropyBitsRequired = entropyBitsRequired; - return this; - } - - /** - * Build a SecureRandom based on a SP 800-90A Hash DRBG. - * - * @param digest digest algorithm to use in the DRBG underneath the SecureRandom. - * @param nonce nonce value to use in DRBG construction. - * @param predictionResistant specify whether the underlying DRBG in the resulting SecureRandom should reseed on each request for bytes. - * @return a SecureRandom supported by a Hash DRBG. - */ - public SP800SecureRandom BuildHash(IDigest digest, byte[] nonce, bool predictionResistant) - { - return new SP800SecureRandom(mRandom, mEntropySourceProvider.Get(mEntropyBitsRequired), - new HashDrbgProvider(digest, nonce, mPersonalizationString, mSecurityStrength), predictionResistant); - } - - /** - * Build a SecureRandom based on a SP 800-90A CTR DRBG. - * - * @param cipher the block cipher to base the DRBG on. - * @param keySizeInBits key size in bits to be used with the block cipher. - * @param nonce nonce value to use in DRBG construction. - * @param predictionResistant specify whether the underlying DRBG in the resulting SecureRandom should reseed on each request for bytes. - * @return a SecureRandom supported by a CTR DRBG. - */ - public SP800SecureRandom BuildCtr(IBlockCipher cipher, int keySizeInBits, byte[] nonce, bool predictionResistant) - { - return new SP800SecureRandom(mRandom, mEntropySourceProvider.Get(mEntropyBitsRequired), - new CtrDrbgProvider(cipher, keySizeInBits, nonce, mPersonalizationString, mSecurityStrength), predictionResistant); - } - - /** - * Build a SecureRandom based on a SP 800-90A HMAC DRBG. - * - * @param hMac HMAC algorithm to use in the DRBG underneath the SecureRandom. - * @param nonce nonce value to use in DRBG construction. - * @param predictionResistant specify whether the underlying DRBG in the resulting SecureRandom should reseed on each request for bytes. - * @return a SecureRandom supported by a HMAC DRBG. - */ - public SP800SecureRandom BuildHMac(IMac hMac, byte[] nonce, bool predictionResistant) - { - return new SP800SecureRandom(mRandom, mEntropySourceProvider.Get(mEntropyBitsRequired), - new HMacDrbgProvider(hMac, nonce, mPersonalizationString, mSecurityStrength), predictionResistant); - } - - private class HashDrbgProvider - : IDrbgProvider - { - private readonly IDigest mDigest; - private readonly byte[] mNonce; - private readonly byte[] mPersonalizationString; - private readonly int mSecurityStrength; - - public HashDrbgProvider(IDigest digest, byte[] nonce, byte[] personalizationString, int securityStrength) - { - this.mDigest = digest; - this.mNonce = nonce; - this.mPersonalizationString = personalizationString; - this.mSecurityStrength = securityStrength; - } - - public ISP80090Drbg Get(IEntropySource entropySource) - { - return new HashSP800Drbg(mDigest, mSecurityStrength, entropySource, mPersonalizationString, mNonce); - } - } - - private class HMacDrbgProvider - : IDrbgProvider - { - private readonly IMac mHMac; - private readonly byte[] mNonce; - private readonly byte[] mPersonalizationString; - private readonly int mSecurityStrength; - - public HMacDrbgProvider(IMac hMac, byte[] nonce, byte[] personalizationString, int securityStrength) - { - this.mHMac = hMac; - this.mNonce = nonce; - this.mPersonalizationString = personalizationString; - this.mSecurityStrength = securityStrength; - } - - public ISP80090Drbg Get(IEntropySource entropySource) - { - return new HMacSP800Drbg(mHMac, mSecurityStrength, entropySource, mPersonalizationString, mNonce); - } - } - - private class CtrDrbgProvider - : IDrbgProvider - { - private readonly IBlockCipher mBlockCipher; - private readonly int mKeySizeInBits; - private readonly byte[] mNonce; - private readonly byte[] mPersonalizationString; - private readonly int mSecurityStrength; - - public CtrDrbgProvider(IBlockCipher blockCipher, int keySizeInBits, byte[] nonce, byte[] personalizationString, int securityStrength) - { - this.mBlockCipher = blockCipher; - this.mKeySizeInBits = keySizeInBits; - this.mNonce = nonce; - this.mPersonalizationString = personalizationString; - this.mSecurityStrength = securityStrength; - } - - public ISP80090Drbg Get(IEntropySource entropySource) - { - return new CtrSP800Drbg(mBlockCipher, mKeySizeInBits, mSecurityStrength, entropySource, mPersonalizationString, mNonce); - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/prng/ThreadedSeedGenerator.cs b/bc-sharp-crypto/src/crypto/prng/ThreadedSeedGenerator.cs deleted file mode 100644 index 0a38e5f..0000000 --- a/bc-sharp-crypto/src/crypto/prng/ThreadedSeedGenerator.cs +++ /dev/null @@ -1,129 +0,0 @@ -using System; -using System.Threading; - -#if NO_THREADS -using System.Threading.Tasks; -#endif - -namespace Org.BouncyCastle.Crypto.Prng -{ - /** - * A thread based seed generator - one source of randomness. - *

- * Based on an idea from Marcus Lippert. - *

- */ - public class ThreadedSeedGenerator - { - private class SeedGenerator - { -#if NETCF_1_0 - // No volatile keyword, but all fields implicitly volatile anyway - private int counter = 0; - private bool stop = false; -#else - private volatile int counter = 0; - private volatile bool stop = false; -#endif - - private void Run(object ignored) - { - while (!this.stop) - { - this.counter++; - } - } - - public byte[] GenerateSeed( - int numBytes, - bool fast) - { -#if SILVERLIGHT || PORTABLE - return DoGenerateSeed(numBytes, fast); -#else - ThreadPriority originalPriority = Thread.CurrentThread.Priority; - try - { - Thread.CurrentThread.Priority = ThreadPriority.Normal; - return DoGenerateSeed(numBytes, fast); - } - finally - { - Thread.CurrentThread.Priority = originalPriority; - } -#endif - } - - private byte[] DoGenerateSeed( - int numBytes, - bool fast) - { - this.counter = 0; - this.stop = false; - - byte[] result = new byte[numBytes]; - int last = 0; - int end = fast ? numBytes : numBytes * 8; - -#if NO_THREADS - Task.Factory.StartNew(() => Run(null), TaskCreationOptions.None); -#else - ThreadPool.QueueUserWorkItem(new WaitCallback(Run)); -#endif - - for (int i = 0; i < end; i++) - { - while (this.counter == last) - { - try - { -#if PORTABLE - new AutoResetEvent(false).WaitOne(1); -#else - Thread.Sleep(1); -#endif - } - catch (Exception) - { - // ignore - } - } - - last = this.counter; - - if (fast) - { - result[i] = (byte)last; - } - else - { - int bytepos = i / 8; - result[bytepos] = (byte)((result[bytepos] << 1) | (last & 1)); - } - } - - this.stop = true; - - return result; - } - } - - /** - * Generate seed bytes. Set fast to false for best quality. - *

- * If fast is set to true, the code should be round about 8 times faster when - * generating a long sequence of random bytes. 20 bytes of random values using - * the fast mode take less than half a second on a Nokia e70. If fast is set to false, - * it takes round about 2500 ms. - *

- * @param numBytes the number of bytes to generate - * @param fast true if fast mode should be used - */ - public byte[] GenerateSeed( - int numBytes, - bool fast) - { - return new SeedGenerator().GenerateSeed(numBytes, fast); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/prng/VMPCRandomGenerator.cs b/bc-sharp-crypto/src/crypto/prng/VMPCRandomGenerator.cs deleted file mode 100644 index 64f287d..0000000 --- a/bc-sharp-crypto/src/crypto/prng/VMPCRandomGenerator.cs +++ /dev/null @@ -1,114 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Utilities; - -namespace Org.BouncyCastle.Crypto.Prng -{ - public class VmpcRandomGenerator - : IRandomGenerator - { - private byte n = 0; - - /// - /// Permutation generated by code: - /// - /// // First 1850 fractional digit of Pi number. - /// byte[] key = new BigInteger("14159265358979323846...5068006422512520511").ToByteArray(); - /// s = 0; - /// P = new byte[256]; - /// for (int i = 0; i < 256; i++) - /// { - /// P[i] = (byte) i; - /// } - /// for (int m = 0; m < 768; m++) - /// { - /// s = P[(s + P[m & 0xff] + key[m % key.length]) & 0xff]; - /// byte temp = P[m & 0xff]; - /// P[m & 0xff] = P[s & 0xff]; - /// P[s & 0xff] = temp; - /// } - /// - private byte[] P = - { - (byte) 0xbb, (byte) 0x2c, (byte) 0x62, (byte) 0x7f, (byte) 0xb5, (byte) 0xaa, (byte) 0xd4, - (byte) 0x0d, (byte) 0x81, (byte) 0xfe, (byte) 0xb2, (byte) 0x82, (byte) 0xcb, (byte) 0xa0, (byte) 0xa1, - (byte) 0x08, (byte) 0x18, (byte) 0x71, (byte) 0x56, (byte) 0xe8, (byte) 0x49, (byte) 0x02, (byte) 0x10, - (byte) 0xc4, (byte) 0xde, (byte) 0x35, (byte) 0xa5, (byte) 0xec, (byte) 0x80, (byte) 0x12, (byte) 0xb8, - (byte) 0x69, (byte) 0xda, (byte) 0x2f, (byte) 0x75, (byte) 0xcc, (byte) 0xa2, (byte) 0x09, (byte) 0x36, - (byte) 0x03, (byte) 0x61, (byte) 0x2d, (byte) 0xfd, (byte) 0xe0, (byte) 0xdd, (byte) 0x05, (byte) 0x43, - (byte) 0x90, (byte) 0xad, (byte) 0xc8, (byte) 0xe1, (byte) 0xaf, (byte) 0x57, (byte) 0x9b, (byte) 0x4c, - (byte) 0xd8, (byte) 0x51, (byte) 0xae, (byte) 0x50, (byte) 0x85, (byte) 0x3c, (byte) 0x0a, (byte) 0xe4, - (byte) 0xf3, (byte) 0x9c, (byte) 0x26, (byte) 0x23, (byte) 0x53, (byte) 0xc9, (byte) 0x83, (byte) 0x97, - (byte) 0x46, (byte) 0xb1, (byte) 0x99, (byte) 0x64, (byte) 0x31, (byte) 0x77, (byte) 0xd5, (byte) 0x1d, - (byte) 0xd6, (byte) 0x78, (byte) 0xbd, (byte) 0x5e, (byte) 0xb0, (byte) 0x8a, (byte) 0x22, (byte) 0x38, - (byte) 0xf8, (byte) 0x68, (byte) 0x2b, (byte) 0x2a, (byte) 0xc5, (byte) 0xd3, (byte) 0xf7, (byte) 0xbc, - (byte) 0x6f, (byte) 0xdf, (byte) 0x04, (byte) 0xe5, (byte) 0x95, (byte) 0x3e, (byte) 0x25, (byte) 0x86, - (byte) 0xa6, (byte) 0x0b, (byte) 0x8f, (byte) 0xf1, (byte) 0x24, (byte) 0x0e, (byte) 0xd7, (byte) 0x40, - (byte) 0xb3, (byte) 0xcf, (byte) 0x7e, (byte) 0x06, (byte) 0x15, (byte) 0x9a, (byte) 0x4d, (byte) 0x1c, - (byte) 0xa3, (byte) 0xdb, (byte) 0x32, (byte) 0x92, (byte) 0x58, (byte) 0x11, (byte) 0x27, (byte) 0xf4, - (byte) 0x59, (byte) 0xd0, (byte) 0x4e, (byte) 0x6a, (byte) 0x17, (byte) 0x5b, (byte) 0xac, (byte) 0xff, - (byte) 0x07, (byte) 0xc0, (byte) 0x65, (byte) 0x79, (byte) 0xfc, (byte) 0xc7, (byte) 0xcd, (byte) 0x76, - (byte) 0x42, (byte) 0x5d, (byte) 0xe7, (byte) 0x3a, (byte) 0x34, (byte) 0x7a, (byte) 0x30, (byte) 0x28, - (byte) 0x0f, (byte) 0x73, (byte) 0x01, (byte) 0xf9, (byte) 0xd1, (byte) 0xd2, (byte) 0x19, (byte) 0xe9, - (byte) 0x91, (byte) 0xb9, (byte) 0x5a, (byte) 0xed, (byte) 0x41, (byte) 0x6d, (byte) 0xb4, (byte) 0xc3, - (byte) 0x9e, (byte) 0xbf, (byte) 0x63, (byte) 0xfa, (byte) 0x1f, (byte) 0x33, (byte) 0x60, (byte) 0x47, - (byte) 0x89, (byte) 0xf0, (byte) 0x96, (byte) 0x1a, (byte) 0x5f, (byte) 0x93, (byte) 0x3d, (byte) 0x37, - (byte) 0x4b, (byte) 0xd9, (byte) 0xa8, (byte) 0xc1, (byte) 0x1b, (byte) 0xf6, (byte) 0x39, (byte) 0x8b, - (byte) 0xb7, (byte) 0x0c, (byte) 0x20, (byte) 0xce, (byte) 0x88, (byte) 0x6e, (byte) 0xb6, (byte) 0x74, - (byte) 0x8e, (byte) 0x8d, (byte) 0x16, (byte) 0x29, (byte) 0xf2, (byte) 0x87, (byte) 0xf5, (byte) 0xeb, - (byte) 0x70, (byte) 0xe3, (byte) 0xfb, (byte) 0x55, (byte) 0x9f, (byte) 0xc6, (byte) 0x44, (byte) 0x4a, - (byte) 0x45, (byte) 0x7d, (byte) 0xe2, (byte) 0x6b, (byte) 0x5c, (byte) 0x6c, (byte) 0x66, (byte) 0xa9, - (byte) 0x8c, (byte) 0xee, (byte) 0x84, (byte) 0x13, (byte) 0xa7, (byte) 0x1e, (byte) 0x9d, (byte) 0xdc, - (byte) 0x67, (byte) 0x48, (byte) 0xba, (byte) 0x2e, (byte) 0xe6, (byte) 0xa4, (byte) 0xab, (byte) 0x7c, - (byte) 0x94, (byte) 0x00, (byte) 0x21, (byte) 0xef, (byte) 0xea, (byte) 0xbe, (byte) 0xca, (byte) 0x72, - (byte) 0x4f, (byte) 0x52, (byte) 0x98, (byte) 0x3f, (byte) 0xc2, (byte) 0x14, (byte) 0x7b, (byte) 0x3b, - (byte) 0x54 - }; - - /// Value generated in the same way as P. - private byte s = (byte) 0xbe; - - public VmpcRandomGenerator() - { - } - - public virtual void AddSeedMaterial(byte[] seed) - { - for (int m = 0; m < seed.Length; m++) - { - s = P[(s + P[n & 0xff] + seed[m]) & 0xff]; - byte temp = P[n & 0xff]; - P[n & 0xff] = P[s & 0xff]; - P[s & 0xff] = temp; - n = (byte) ((n + 1) & 0xff); - } - } - - public virtual void AddSeedMaterial(long seed) - { - AddSeedMaterial(Pack.UInt64_To_BE((ulong)seed)); - } - - public virtual void NextBytes(byte[] bytes) - { - NextBytes(bytes, 0, bytes.Length); - } - - public virtual void NextBytes(byte[] bytes, int start, int len) - { - lock (P) - { - int end = start + len; - for (int i = start; i != end; i++) - { - s = P[(s + P[n & 0xff]) & 0xff]; - bytes[i] = P[(P[(P[s & 0xff]) & 0xff] + 1) & 0xff]; - byte temp = P[n & 0xff]; - P[n & 0xff] = P[s & 0xff]; - P[s & 0xff] = temp; - n = (byte) ((n + 1) & 0xff); - } - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/prng/X931Rng.cs b/bc-sharp-crypto/src/crypto/prng/X931Rng.cs deleted file mode 100644 index 2bd8e0c..0000000 --- a/bc-sharp-crypto/src/crypto/prng/X931Rng.cs +++ /dev/null @@ -1,146 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Prng -{ - internal class X931Rng - { - private const long BLOCK64_RESEED_MAX = 1L << (16 - 1); - private const long BLOCK128_RESEED_MAX = 1L << (24 - 1); - private const int BLOCK64_MAX_BITS_REQUEST = 1 << (13 - 1); - private const int BLOCK128_MAX_BITS_REQUEST = 1 << (19 - 1); - - private readonly IBlockCipher mEngine; - private readonly IEntropySource mEntropySource; - - private readonly byte[] mDT; - private readonly byte[] mI; - private readonly byte[] mR; - - private byte[] mV; - - private long mReseedCounter = 1; - - /** - * - * @param engine - * @param entropySource - */ - internal X931Rng(IBlockCipher engine, byte[] dateTimeVector, IEntropySource entropySource) - { - this.mEngine = engine; - this.mEntropySource = entropySource; - - this.mDT = new byte[engine.GetBlockSize()]; - - Array.Copy(dateTimeVector, 0, mDT, 0, mDT.Length); - - this.mI = new byte[engine.GetBlockSize()]; - this.mR = new byte[engine.GetBlockSize()]; - } - - /** - * Populate a passed in array with random data. - * - * @param output output array for generated bits. - * @param predictionResistant true if a reseed should be forced, false otherwise. - * - * @return number of bits generated, -1 if a reseed required. - */ - internal int Generate(byte[] output, bool predictionResistant) - { - if (mR.Length == 8) // 64 bit block size - { - if (mReseedCounter > BLOCK64_RESEED_MAX) - return -1; - - if (IsTooLarge(output, BLOCK64_MAX_BITS_REQUEST / 8)) - throw new ArgumentException("Number of bits per request limited to " + BLOCK64_MAX_BITS_REQUEST, "output"); - } - else - { - if (mReseedCounter > BLOCK128_RESEED_MAX) - return -1; - - if (IsTooLarge(output, BLOCK128_MAX_BITS_REQUEST / 8)) - throw new ArgumentException("Number of bits per request limited to " + BLOCK128_MAX_BITS_REQUEST, "output"); - } - - if (predictionResistant || mV == null) - { - mV = mEntropySource.GetEntropy(); - if (mV.Length != mEngine.GetBlockSize()) - throw new InvalidOperationException("Insufficient entropy returned"); - } - - int m = output.Length / mR.Length; - - for (int i = 0; i < m; i++) - { - mEngine.ProcessBlock(mDT, 0, mI, 0); - Process(mR, mI, mV); - Process(mV, mR, mI); - - Array.Copy(mR, 0, output, i * mR.Length, mR.Length); - - Increment(mDT); - } - - int bytesToCopy = (output.Length - m * mR.Length); - - if (bytesToCopy > 0) - { - mEngine.ProcessBlock(mDT, 0, mI, 0); - Process(mR, mI, mV); - Process(mV, mR, mI); - - Array.Copy(mR, 0, output, m * mR.Length, bytesToCopy); - - Increment(mDT); - } - - mReseedCounter++; - - return output.Length; - } - - /** - * Reseed the RNG. - */ - internal void Reseed() - { - mV = mEntropySource.GetEntropy(); - if (mV.Length != mEngine.GetBlockSize()) - throw new InvalidOperationException("Insufficient entropy returned"); - mReseedCounter = 1; - } - - internal IEntropySource EntropySource - { - get { return mEntropySource; } - } - - private void Process(byte[] res, byte[] a, byte[] b) - { - for (int i = 0; i != res.Length; i++) - { - res[i] = (byte)(a[i] ^ b[i]); - } - - mEngine.ProcessBlock(res, 0, res, 0); - } - - private void Increment(byte[] val) - { - for (int i = val.Length - 1; i >= 0; i--) - { - if (++val[i] != 0) - break; - } - } - - private static bool IsTooLarge(byte[] bytes, int maxBytes) - { - return bytes != null && bytes.Length > maxBytes; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/prng/X931SecureRandom.cs b/bc-sharp-crypto/src/crypto/prng/X931SecureRandom.cs deleted file mode 100644 index d2e4849..0000000 --- a/bc-sharp-crypto/src/crypto/prng/X931SecureRandom.cs +++ /dev/null @@ -1,70 +0,0 @@ -using System; - -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Prng -{ - public class X931SecureRandom - : SecureRandom - { - private readonly bool mPredictionResistant; - private readonly SecureRandom mRandomSource; - private readonly X931Rng mDrbg; - - internal X931SecureRandom(SecureRandom randomSource, X931Rng drbg, bool predictionResistant) - : base((IRandomGenerator)null) - { - this.mRandomSource = randomSource; - this.mDrbg = drbg; - this.mPredictionResistant = predictionResistant; - } - - public override void SetSeed(byte[] seed) - { - lock (this) - { - if (mRandomSource != null) - { - this.mRandomSource.SetSeed(seed); - } - } - } - - public override void SetSeed(long seed) - { - lock (this) - { - // this will happen when SecureRandom() is created - if (mRandomSource != null) - { - this.mRandomSource.SetSeed(seed); - } - } - } - - public override void NextBytes(byte[] bytes) - { - lock (this) - { - // check if a reseed is required... - if (mDrbg.Generate(bytes, mPredictionResistant) < 0) - { - mDrbg.Reseed(); - mDrbg.Generate(bytes, mPredictionResistant); - } - } - } - - public override void NextBytes(byte[] buf, int off, int len) - { - byte[] bytes = new byte[len]; - NextBytes(bytes); - Array.Copy(bytes, 0, buf, off, len); - } - - public override byte[] GenerateSeed(int numBytes) - { - return EntropyUtilities.GenerateSeed(mDrbg.EntropySource, numBytes); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/prng/X931SecureRandomBuilder.cs b/bc-sharp-crypto/src/crypto/prng/X931SecureRandomBuilder.cs deleted file mode 100644 index 31e9431..0000000 --- a/bc-sharp-crypto/src/crypto/prng/X931SecureRandomBuilder.cs +++ /dev/null @@ -1,87 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities.Date; - -namespace Org.BouncyCastle.Crypto.Prng -{ - public class X931SecureRandomBuilder - { - private readonly SecureRandom mRandom; // JDK 1.1 complains on final. - - private IEntropySourceProvider mEntropySourceProvider; - private byte[] mDateTimeVector; - - /** - * Basic constructor, creates a builder using an EntropySourceProvider based on the default SecureRandom with - * predictionResistant set to false. - *

- * Any SecureRandom created from a builder constructed like this will make use of input passed to SecureRandom.setSeed() if - * the default SecureRandom does for its generateSeed() call. - *

- */ - public X931SecureRandomBuilder() - : this(new SecureRandom(), false) - { - } - - /** - * Construct a builder with an EntropySourceProvider based on the passed in SecureRandom and the passed in value - * for prediction resistance. - *

- * Any SecureRandom created from a builder constructed like this will make use of input passed to SecureRandom.setSeed() if - * the passed in SecureRandom does for its generateSeed() call. - *

- * @param entropySource - * @param predictionResistant - */ - public X931SecureRandomBuilder(SecureRandom entropySource, bool predictionResistant) - { - this.mRandom = entropySource; - this.mEntropySourceProvider = new BasicEntropySourceProvider(mRandom, predictionResistant); - } - - /** - * Create a builder which makes creates the SecureRandom objects from a specified entropy source provider. - *

- * Note: If this constructor is used any calls to setSeed() in the resulting SecureRandom will be ignored. - *

- * @param entropySourceProvider a provider of EntropySource objects. - */ - public X931SecureRandomBuilder(IEntropySourceProvider entropySourceProvider) - { - this.mRandom = null; - this.mEntropySourceProvider = entropySourceProvider; - } - - public X931SecureRandomBuilder SetDateTimeVector(byte[] dateTimeVector) - { - this.mDateTimeVector = dateTimeVector; - return this; - } - - /** - * Construct a X9.31 secure random generator using the passed in engine and key. If predictionResistant is true the - * generator will be reseeded on each request. - * - * @param engine a block cipher to use as the operator. - * @param key the block cipher key to initialise engine with. - * @param predictionResistant true if engine to be reseeded on each use, false otherwise. - * @return a SecureRandom. - */ - public X931SecureRandom Build(IBlockCipher engine, KeyParameter key, bool predictionResistant) - { - if (mDateTimeVector == null) - { - mDateTimeVector = new byte[engine.GetBlockSize()]; - Pack.UInt64_To_BE((ulong)DateTimeUtilities.CurrentUnixMs(), mDateTimeVector, 0); - } - - engine.Init(true, key); - - return new X931SecureRandom(mRandom, new X931Rng(engine, mDateTimeVector, mEntropySourceProvider.Get(engine.GetBlockSize() * 8)), predictionResistant); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/prng/drbg/CtrSP800Drbg.cs b/bc-sharp-crypto/src/crypto/prng/drbg/CtrSP800Drbg.cs deleted file mode 100644 index eca1821..0000000 --- a/bc-sharp-crypto/src/crypto/prng/drbg/CtrSP800Drbg.cs +++ /dev/null @@ -1,466 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Crypto.Prng.Drbg -{ - /** - * A SP800-90A CTR DRBG. - */ - public class CtrSP800Drbg - : ISP80090Drbg - { - private static readonly long TDEA_RESEED_MAX = 1L << (32 - 1); - private static readonly long AES_RESEED_MAX = 1L << (48 - 1); - private static readonly int TDEA_MAX_BITS_REQUEST = 1 << (13 - 1); - private static readonly int AES_MAX_BITS_REQUEST = 1 << (19 - 1); - - private readonly IEntropySource mEntropySource; - private readonly IBlockCipher mEngine; - private readonly int mKeySizeInBits; - private readonly int mSeedLength; - private readonly int mSecurityStrength; - - // internal state - private byte[] mKey; - private byte[] mV; - private long mReseedCounter = 0; - private bool mIsTdea = false; - - /** - * Construct a SP800-90A CTR DRBG. - *

- * Minimum entropy requirement is the security strength requested. - *

- * @param engine underlying block cipher to use to support DRBG - * @param keySizeInBits size of the key to use with the block cipher. - * @param securityStrength security strength required (in bits) - * @param entropySource source of entropy to use for seeding/reseeding. - * @param personalizationString personalization string to distinguish this DRBG (may be null). - * @param nonce nonce to further distinguish this DRBG (may be null). - */ - public CtrSP800Drbg(IBlockCipher engine, int keySizeInBits, int securityStrength, IEntropySource entropySource, - byte[] personalizationString, byte[] nonce) - { - if (securityStrength > 256) - throw new ArgumentException("Requested security strength is not supported by the derivation function"); - if (GetMaxSecurityStrength(engine, keySizeInBits) < securityStrength) - throw new ArgumentException("Requested security strength is not supported by block cipher and key size"); - if (entropySource.EntropySize < securityStrength) - throw new ArgumentException("Not enough entropy for security strength required"); - - mEntropySource = entropySource; - mEngine = engine; - - mKeySizeInBits = keySizeInBits; - mSecurityStrength = securityStrength; - mSeedLength = keySizeInBits + engine.GetBlockSize() * 8; - mIsTdea = IsTdea(engine); - - byte[] entropy = GetEntropy(); // Get_entropy_input - - CTR_DRBG_Instantiate_algorithm(entropy, nonce, personalizationString); - } - - private void CTR_DRBG_Instantiate_algorithm(byte[] entropy, byte[] nonce, byte[] personalisationString) - { - byte[] seedMaterial = Arrays.ConcatenateAll(entropy, nonce, personalisationString); - byte[] seed = Block_Cipher_df(seedMaterial, mSeedLength); - - int outlen = mEngine.GetBlockSize(); - - mKey = new byte[(mKeySizeInBits + 7) / 8]; - mV = new byte[outlen]; - - // mKey & mV are modified by this call - CTR_DRBG_Update(seed, mKey, mV); - - mReseedCounter = 1; - } - - private void CTR_DRBG_Update(byte[] seed, byte[] key, byte[] v) - { - byte[] temp = new byte[seed.Length]; - byte[] outputBlock = new byte[mEngine.GetBlockSize()]; - - int i = 0; - int outLen = mEngine.GetBlockSize(); - - mEngine.Init(true, new KeyParameter(ExpandKey(key))); - while (i*outLen < seed.Length) - { - AddOneTo(v); - mEngine.ProcessBlock(v, 0, outputBlock, 0); - - int bytesToCopy = ((temp.Length - i * outLen) > outLen) - ? outLen : (temp.Length - i * outLen); - - Array.Copy(outputBlock, 0, temp, i * outLen, bytesToCopy); - ++i; - } - - XOR(temp, seed, temp, 0); - - Array.Copy(temp, 0, key, 0, key.Length); - Array.Copy(temp, key.Length, v, 0, v.Length); - } - - private void CTR_DRBG_Reseed_algorithm(byte[] additionalInput) - { - byte[] seedMaterial = Arrays.Concatenate(GetEntropy(), additionalInput); - - seedMaterial = Block_Cipher_df(seedMaterial, mSeedLength); - - CTR_DRBG_Update(seedMaterial, mKey, mV); - - mReseedCounter = 1; - } - - private void XOR(byte[] output, byte[] a, byte[] b, int bOff) - { - for (int i = 0; i < output.Length; i++) - { - output[i] = (byte)(a[i] ^ b[bOff + i]); - } - } - - private void AddOneTo(byte[] longer) - { - uint carry = 1; - int i = longer.Length; - while (--i >= 0) - { - carry += longer[i]; - longer[i] = (byte)carry; - carry >>= 8; - } - } - - private byte[] GetEntropy() - { - byte[] entropy = mEntropySource.GetEntropy(); - if (entropy.Length < (mSecurityStrength + 7) / 8) - throw new InvalidOperationException("Insufficient entropy provided by entropy source"); - return entropy; - } - - // -- Internal state migration --- - - private static readonly byte[] K_BITS = Hex.Decode("000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F"); - - // 1. If (number_of_bits_to_return > max_number_of_bits), then return an - // ERROR_FLAG. - // 2. L = len (input_string)/8. - // 3. N = number_of_bits_to_return/8. - // Comment: L is the bitstring represention of - // the integer resulting from len (input_string)/8. - // L shall be represented as a 32-bit integer. - // - // Comment : N is the bitstring represention of - // the integer resulting from - // number_of_bits_to_return/8. N shall be - // represented as a 32-bit integer. - // - // 4. S = L || N || input_string || 0x80. - // 5. While (len (S) mod outlen) - // Comment : Pad S with zeros, if necessary. - // 0, S = S || 0x00. - // - // Comment : Compute the starting value. - // 6. temp = the Null string. - // 7. i = 0. - // 8. K = Leftmost keylen bits of 0x00010203...1D1E1F. - // 9. While len (temp) < keylen + outlen, do - // - // IV = i || 0outlen - len (i). - // - // 9.1 - // - // temp = temp || BCC (K, (IV || S)). - // - // 9.2 - // - // i = i + 1. - // - // 9.3 - // - // Comment : i shall be represented as a 32-bit - // integer, i.e., len (i) = 32. - // - // Comment: The 32-bit integer represenation of - // i is padded with zeros to outlen bits. - // - // Comment: Compute the requested number of - // bits. - // - // 10. K = Leftmost keylen bits of temp. - // - // 11. X = Next outlen bits of temp. - // - // 12. temp = the Null string. - // - // 13. While len (temp) < number_of_bits_to_return, do - // - // 13.1 X = Block_Encrypt (K, X). - // - // 13.2 temp = temp || X. - // - // 14. requested_bits = Leftmost number_of_bits_to_return of temp. - // - // 15. Return SUCCESS and requested_bits. - private byte[] Block_Cipher_df(byte[] inputString, int bitLength) - { - int outLen = mEngine.GetBlockSize(); - int L = inputString.Length; // already in bytes - int N = bitLength / 8; - // 4 S = L || N || inputstring || 0x80 - int sLen = 4 + 4 + L + 1; - int blockLen = ((sLen + outLen - 1) / outLen) * outLen; - byte[] S = new byte[blockLen]; - copyIntToByteArray(S, L, 0); - copyIntToByteArray(S, N, 4); - Array.Copy(inputString, 0, S, 8, L); - S[8 + L] = (byte)0x80; - // S already padded with zeros - - byte[] temp = new byte[mKeySizeInBits / 8 + outLen]; - byte[] bccOut = new byte[outLen]; - - byte[] IV = new byte[outLen]; - - int i = 0; - byte[] K = new byte[mKeySizeInBits / 8]; - Array.Copy(K_BITS, 0, K, 0, K.Length); - - while (i*outLen*8 < mKeySizeInBits + outLen *8) - { - copyIntToByteArray(IV, i, 0); - BCC(bccOut, K, IV, S); - - int bytesToCopy = ((temp.Length - i * outLen) > outLen) - ? outLen - : (temp.Length - i * outLen); - - Array.Copy(bccOut, 0, temp, i * outLen, bytesToCopy); - ++i; - } - - byte[] X = new byte[outLen]; - Array.Copy(temp, 0, K, 0, K.Length); - Array.Copy(temp, K.Length, X, 0, X.Length); - - temp = new byte[bitLength / 2]; - - i = 0; - mEngine.Init(true, new KeyParameter(ExpandKey(K))); - - while (i * outLen < temp.Length) - { - mEngine.ProcessBlock(X, 0, X, 0); - - int bytesToCopy = ((temp.Length - i * outLen) > outLen) - ? outLen - : (temp.Length - i * outLen); - - Array.Copy(X, 0, temp, i * outLen, bytesToCopy); - i++; - } - - return temp; - } - - /* - * 1. chaining_value = 0^outlen - * . Comment: Set the first chaining value to outlen zeros. - * 2. n = len (data)/outlen. - * 3. Starting with the leftmost bits of data, split the data into n blocks of outlen bits - * each, forming block(1) to block(n). - * 4. For i = 1 to n do - * 4.1 input_block = chaining_value ^ block(i) . - * 4.2 chaining_value = Block_Encrypt (Key, input_block). - * 5. output_block = chaining_value. - * 6. Return output_block. - */ - private void BCC(byte[] bccOut, byte[] k, byte[] iV, byte[] data) - { - int outlen = mEngine.GetBlockSize(); - byte[] chainingValue = new byte[outlen]; // initial values = 0 - int n = data.Length / outlen; - - byte[] inputBlock = new byte[outlen]; - - mEngine.Init(true, new KeyParameter(ExpandKey(k))); - - mEngine.ProcessBlock(iV, 0, chainingValue, 0); - - for (int i = 0; i < n; i++) - { - XOR(inputBlock, chainingValue, data, i*outlen); - mEngine.ProcessBlock(inputBlock, 0, chainingValue, 0); - } - - Array.Copy(chainingValue, 0, bccOut, 0, bccOut.Length); - } - - private void copyIntToByteArray(byte[] buf, int value, int offSet) - { - buf[offSet + 0] = ((byte)(value >> 24)); - buf[offSet + 1] = ((byte)(value >> 16)); - buf[offSet + 2] = ((byte)(value >> 8)); - buf[offSet + 3] = ((byte)(value)); - } - - /** - * Return the block size (in bits) of the DRBG. - * - * @return the number of bits produced on each internal round of the DRBG. - */ - public int BlockSize - { - get { return mV.Length * 8; } - } - - /** - * Populate a passed in array with random data. - * - * @param output output array for generated bits. - * @param additionalInput additional input to be added to the DRBG in this step. - * @param predictionResistant true if a reseed should be forced, false otherwise. - * - * @return number of bits generated, -1 if a reseed required. - */ - public int Generate(byte[] output, byte[] additionalInput, bool predictionResistant) - { - if (mIsTdea) - { - if (mReseedCounter > TDEA_RESEED_MAX) - return -1; - - if (DrbgUtilities.IsTooLarge(output, TDEA_MAX_BITS_REQUEST / 8)) - throw new ArgumentException("Number of bits per request limited to " + TDEA_MAX_BITS_REQUEST, "output"); - } - else - { - if (mReseedCounter > AES_RESEED_MAX) - return -1; - - if (DrbgUtilities.IsTooLarge(output, AES_MAX_BITS_REQUEST / 8)) - throw new ArgumentException("Number of bits per request limited to " + AES_MAX_BITS_REQUEST, "output"); - } - - if (predictionResistant) - { - CTR_DRBG_Reseed_algorithm(additionalInput); - additionalInput = null; - } - - if (additionalInput != null) - { - additionalInput = Block_Cipher_df(additionalInput, mSeedLength); - CTR_DRBG_Update(additionalInput, mKey, mV); - } - else - { - additionalInput = new byte[mSeedLength]; - } - - byte[] tmp = new byte[mV.Length]; - - mEngine.Init(true, new KeyParameter(ExpandKey(mKey))); - - for (int i = 0; i <= output.Length / tmp.Length; i++) - { - int bytesToCopy = ((output.Length - i * tmp.Length) > tmp.Length) - ? tmp.Length - : (output.Length - i * mV.Length); - - if (bytesToCopy != 0) - { - AddOneTo(mV); - - mEngine.ProcessBlock(mV, 0, tmp, 0); - - Array.Copy(tmp, 0, output, i * tmp.Length, bytesToCopy); - } - } - - CTR_DRBG_Update(additionalInput, mKey, mV); - - mReseedCounter++; - - return output.Length * 8; - } - - /** - * Reseed the DRBG. - * - * @param additionalInput additional input to be added to the DRBG in this step. - */ - public void Reseed(byte[] additionalInput) - { - CTR_DRBG_Reseed_algorithm(additionalInput); - } - - private bool IsTdea(IBlockCipher cipher) - { - return cipher.AlgorithmName.Equals("DESede") || cipher.AlgorithmName.Equals("TDEA"); - } - - private int GetMaxSecurityStrength(IBlockCipher cipher, int keySizeInBits) - { - if (IsTdea(cipher) && keySizeInBits == 168) - { - return 112; - } - if (cipher.AlgorithmName.Equals("AES")) - { - return keySizeInBits; - } - - return -1; - } - - private byte[] ExpandKey(byte[] key) - { - if (mIsTdea) - { - // expand key to 192 bits. - byte[] tmp = new byte[24]; - - PadKey(key, 0, tmp, 0); - PadKey(key, 7, tmp, 8); - PadKey(key, 14, tmp, 16); - - return tmp; - } - else - { - return key; - } - } - - /** - * Pad out a key for TDEA, setting odd parity for each byte. - * - * @param keyMaster - * @param keyOff - * @param tmp - * @param tmpOff - */ - private void PadKey(byte[] keyMaster, int keyOff, byte[] tmp, int tmpOff) - { - tmp[tmpOff + 0] = (byte)(keyMaster[keyOff + 0] & 0xfe); - tmp[tmpOff + 1] = (byte)((keyMaster[keyOff + 0] << 7) | ((keyMaster[keyOff + 1] & 0xfc) >> 1)); - tmp[tmpOff + 2] = (byte)((keyMaster[keyOff + 1] << 6) | ((keyMaster[keyOff + 2] & 0xf8) >> 2)); - tmp[tmpOff + 3] = (byte)((keyMaster[keyOff + 2] << 5) | ((keyMaster[keyOff + 3] & 0xf0) >> 3)); - tmp[tmpOff + 4] = (byte)((keyMaster[keyOff + 3] << 4) | ((keyMaster[keyOff + 4] & 0xe0) >> 4)); - tmp[tmpOff + 5] = (byte)((keyMaster[keyOff + 4] << 3) | ((keyMaster[keyOff + 5] & 0xc0) >> 5)); - tmp[tmpOff + 6] = (byte)((keyMaster[keyOff + 5] << 2) | ((keyMaster[keyOff + 6] & 0x80) >> 6)); - tmp[tmpOff + 7] = (byte)(keyMaster[keyOff + 6] << 1); - - DesParameters.SetOddParity(tmp, tmpOff, 8); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/prng/drbg/DrbgUtilities.cs b/bc-sharp-crypto/src/crypto/prng/drbg/DrbgUtilities.cs deleted file mode 100644 index d9a1c43..0000000 --- a/bc-sharp-crypto/src/crypto/prng/drbg/DrbgUtilities.cs +++ /dev/null @@ -1,103 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Prng.Drbg -{ - internal class DrbgUtilities - { - private static readonly IDictionary maxSecurityStrengths = Platform.CreateHashtable(); - - static DrbgUtilities() - { - maxSecurityStrengths.Add("SHA-1", 128); - - maxSecurityStrengths.Add("SHA-224", 192); - maxSecurityStrengths.Add("SHA-256", 256); - maxSecurityStrengths.Add("SHA-384", 256); - maxSecurityStrengths.Add("SHA-512", 256); - - maxSecurityStrengths.Add("SHA-512/224", 192); - maxSecurityStrengths.Add("SHA-512/256", 256); - } - - internal static int GetMaxSecurityStrength(IDigest d) - { - return (int)maxSecurityStrengths[d.AlgorithmName]; - } - - internal static int GetMaxSecurityStrength(IMac m) - { - string name = m.AlgorithmName; - - return (int)maxSecurityStrengths[name.Substring(0, name.IndexOf("/"))]; - } - - /** - * Used by both Dual EC and Hash. - */ - internal static byte[] HashDF(IDigest digest, byte[] seedMaterial, int seedLength) - { - // 1. temp = the Null string. - // 2. . - // 3. counter = an 8-bit binary value representing the integer "1". - // 4. For i = 1 to len do - // Comment : In step 4.1, no_of_bits_to_return - // is used as a 32-bit string. - // 4.1 temp = temp || Hash (counter || no_of_bits_to_return || - // input_string). - // 4.2 counter = counter + 1. - // 5. requested_bits = Leftmost (no_of_bits_to_return) of temp. - // 6. Return SUCCESS and requested_bits. - byte[] temp = new byte[(seedLength + 7) / 8]; - - int len = temp.Length / digest.GetDigestSize(); - int counter = 1; - - byte[] dig = new byte[digest.GetDigestSize()]; - - for (int i = 0; i <= len; i++) - { - digest.Update((byte)counter); - - digest.Update((byte)(seedLength >> 24)); - digest.Update((byte)(seedLength >> 16)); - digest.Update((byte)(seedLength >> 8)); - digest.Update((byte)seedLength); - - digest.BlockUpdate(seedMaterial, 0, seedMaterial.Length); - - digest.DoFinal(dig, 0); - - int bytesToCopy = ((temp.Length - i * dig.Length) > dig.Length) - ? dig.Length - : (temp.Length - i * dig.Length); - Array.Copy(dig, 0, temp, i * dig.Length, bytesToCopy); - - counter++; - } - - // do a left shift to get rid of excess bits. - if (seedLength % 8 != 0) - { - int shift = 8 - (seedLength % 8); - uint carry = 0; - - for (int i = 0; i != temp.Length; i++) - { - uint b = temp[i]; - temp[i] = (byte)((b >> shift) | (carry << (8 - shift))); - carry = b; - } - } - - return temp; - } - - internal static bool IsTooLarge(byte[] bytes, int maxBytes) - { - return bytes != null && bytes.Length > maxBytes; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/prng/drbg/HMacSP800Drbg.cs b/bc-sharp-crypto/src/crypto/prng/drbg/HMacSP800Drbg.cs deleted file mode 100644 index 7833170..0000000 --- a/bc-sharp-crypto/src/crypto/prng/drbg/HMacSP800Drbg.cs +++ /dev/null @@ -1,186 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Prng.Drbg -{ - /** - * A SP800-90A HMAC DRBG. - */ - public class HMacSP800Drbg - : ISP80090Drbg - { - private readonly static long RESEED_MAX = 1L << (48 - 1); - private readonly static int MAX_BITS_REQUEST = 1 << (19 - 1); - - private readonly byte[] mK; - private readonly byte[] mV; - private readonly IEntropySource mEntropySource; - private readonly IMac mHMac; - private readonly int mSecurityStrength; - - private long mReseedCounter; - - /** - * Construct a SP800-90A Hash DRBG. - *

- * Minimum entropy requirement is the security strength requested. - *

- * @param hMac Hash MAC to base the DRBG on. - * @param securityStrength security strength required (in bits) - * @param entropySource source of entropy to use for seeding/reseeding. - * @param personalizationString personalization string to distinguish this DRBG (may be null). - * @param nonce nonce to further distinguish this DRBG (may be null). - */ - public HMacSP800Drbg(IMac hMac, int securityStrength, IEntropySource entropySource, byte[] personalizationString, byte[] nonce) - { - if (securityStrength > DrbgUtilities.GetMaxSecurityStrength(hMac)) - throw new ArgumentException("Requested security strength is not supported by the derivation function"); - if (entropySource.EntropySize < securityStrength) - throw new ArgumentException("Not enough entropy for security strength required"); - - mHMac = hMac; - mSecurityStrength = securityStrength; - mEntropySource = entropySource; - - byte[] entropy = GetEntropy(); - byte[] seedMaterial = Arrays.ConcatenateAll(entropy, nonce, personalizationString); - - mK = new byte[hMac.GetMacSize()]; - mV = new byte[mK.Length]; - Arrays.Fill(mV, (byte)1); - - hmac_DRBG_Update(seedMaterial); - - mReseedCounter = 1; - } - - private void hmac_DRBG_Update(byte[] seedMaterial) - { - hmac_DRBG_Update_Func(seedMaterial, (byte)0x00); - if (seedMaterial != null) - { - hmac_DRBG_Update_Func(seedMaterial, (byte)0x01); - } - } - - private void hmac_DRBG_Update_Func(byte[] seedMaterial, byte vValue) - { - mHMac.Init(new KeyParameter(mK)); - - mHMac.BlockUpdate(mV, 0, mV.Length); - mHMac.Update(vValue); - - if (seedMaterial != null) - { - mHMac.BlockUpdate(seedMaterial, 0, seedMaterial.Length); - } - - mHMac.DoFinal(mK, 0); - - mHMac.Init(new KeyParameter(mK)); - mHMac.BlockUpdate(mV, 0, mV.Length); - - mHMac.DoFinal(mV, 0); - } - - /** - * Return the block size (in bits) of the DRBG. - * - * @return the number of bits produced on each round of the DRBG. - */ - public int BlockSize - { - get { return mV.Length * 8; } - } - - /** - * Populate a passed in array with random data. - * - * @param output output array for generated bits. - * @param additionalInput additional input to be added to the DRBG in this step. - * @param predictionResistant true if a reseed should be forced, false otherwise. - * - * @return number of bits generated, -1 if a reseed required. - */ - public int Generate(byte[] output, byte[] additionalInput, bool predictionResistant) - { - int numberOfBits = output.Length * 8; - - if (numberOfBits > MAX_BITS_REQUEST) - throw new ArgumentException("Number of bits per request limited to " + MAX_BITS_REQUEST, "output"); - - if (mReseedCounter > RESEED_MAX) - { - return -1; - } - - if (predictionResistant) - { - Reseed(additionalInput); - additionalInput = null; - } - - // 2. - if (additionalInput != null) - { - hmac_DRBG_Update(additionalInput); - } - - // 3. - byte[] rv = new byte[output.Length]; - - int m = output.Length / mV.Length; - - mHMac.Init(new KeyParameter(mK)); - - for (int i = 0; i < m; i++) - { - mHMac.BlockUpdate(mV, 0, mV.Length); - mHMac.DoFinal(mV, 0); - - Array.Copy(mV, 0, rv, i * mV.Length, mV.Length); - } - - if (m * mV.Length < rv.Length) - { - mHMac.BlockUpdate(mV, 0, mV.Length); - mHMac.DoFinal(mV, 0); - - Array.Copy(mV, 0, rv, m * mV.Length, rv.Length - (m * mV.Length)); - } - - hmac_DRBG_Update(additionalInput); - - mReseedCounter++; - - Array.Copy(rv, 0, output, 0, output.Length); - - return numberOfBits; - } - - /** - * Reseed the DRBG. - * - * @param additionalInput additional input to be added to the DRBG in this step. - */ - public void Reseed(byte[] additionalInput) - { - byte[] entropy = GetEntropy(); - byte[] seedMaterial = Arrays.Concatenate(entropy, additionalInput); - - hmac_DRBG_Update(seedMaterial); - - mReseedCounter = 1; - } - - private byte[] GetEntropy() - { - byte[] entropy = mEntropySource.GetEntropy(); - if (entropy.Length < (mSecurityStrength + 7) / 8) - throw new InvalidOperationException("Insufficient entropy provided by entropy source"); - return entropy; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/prng/drbg/HashSP800Drbg.cs b/bc-sharp-crypto/src/crypto/prng/drbg/HashSP800Drbg.cs deleted file mode 100644 index 493da5a..0000000 --- a/bc-sharp-crypto/src/crypto/prng/drbg/HashSP800Drbg.cs +++ /dev/null @@ -1,287 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Prng.Drbg -{ - /** - * A SP800-90A Hash DRBG. - */ - public class HashSP800Drbg - : ISP80090Drbg - { - private readonly static byte[] ONE = { 0x01 }; - - private readonly static long RESEED_MAX = 1L << (48 - 1); - private readonly static int MAX_BITS_REQUEST = 1 << (19 - 1); - - private static readonly IDictionary seedlens = Platform.CreateHashtable(); - - static HashSP800Drbg() - { - seedlens.Add("SHA-1", 440); - seedlens.Add("SHA-224", 440); - seedlens.Add("SHA-256", 440); - seedlens.Add("SHA-512/256", 440); - seedlens.Add("SHA-512/224", 440); - seedlens.Add("SHA-384", 888); - seedlens.Add("SHA-512", 888); - } - - private readonly IDigest mDigest; - private readonly IEntropySource mEntropySource; - private readonly int mSecurityStrength; - private readonly int mSeedLength; - - private byte[] mV; - private byte[] mC; - private long mReseedCounter; - - /** - * Construct a SP800-90A Hash DRBG. - *

- * Minimum entropy requirement is the security strength requested. - *

- * @param digest source digest to use for DRB stream. - * @param securityStrength security strength required (in bits) - * @param entropySource source of entropy to use for seeding/reseeding. - * @param personalizationString personalization string to distinguish this DRBG (may be null). - * @param nonce nonce to further distinguish this DRBG (may be null). - */ - public HashSP800Drbg(IDigest digest, int securityStrength, IEntropySource entropySource, byte[] personalizationString, byte[] nonce) - { - if (securityStrength > DrbgUtilities.GetMaxSecurityStrength(digest)) - throw new ArgumentException("Requested security strength is not supported by the derivation function"); - if (entropySource.EntropySize < securityStrength) - throw new ArgumentException("Not enough entropy for security strength required"); - - mDigest = digest; - mEntropySource = entropySource; - mSecurityStrength = securityStrength; - mSeedLength = (int)seedlens[digest.AlgorithmName]; - - // 1. seed_material = entropy_input || nonce || personalization_string. - // 2. seed = Hash_df (seed_material, seedlen). - // 3. V = seed. - // 4. C = Hash_df ((0x00 || V), seedlen). Comment: Preceed V with a byte - // of zeros. - // 5. reseed_counter = 1. - // 6. Return V, C, and reseed_counter as the initial_working_state - - byte[] entropy = GetEntropy(); - byte[] seedMaterial = Arrays.ConcatenateAll(entropy, nonce, personalizationString); - byte[] seed = DrbgUtilities.HashDF(mDigest, seedMaterial, mSeedLength); - - mV = seed; - byte[] subV = new byte[mV.Length + 1]; - Array.Copy(mV, 0, subV, 1, mV.Length); - mC = DrbgUtilities.HashDF(mDigest, subV, mSeedLength); - - mReseedCounter = 1; - } - - /** - * Return the block size (in bits) of the DRBG. - * - * @return the number of bits produced on each internal round of the DRBG. - */ - public int BlockSize - { - get { return mDigest.GetDigestSize () * 8; } - } - - /** - * Populate a passed in array with random data. - * - * @param output output array for generated bits. - * @param additionalInput additional input to be added to the DRBG in this step. - * @param predictionResistant true if a reseed should be forced, false otherwise. - * - * @return number of bits generated, -1 if a reseed required. - */ - public int Generate(byte[] output, byte[] additionalInput, bool predictionResistant) - { - // 1. If reseed_counter > reseed_interval, then return an indication that a - // reseed is required. - // 2. If (additional_input != Null), then do - // 2.1 w = Hash (0x02 || V || additional_input). - // 2.2 V = (V + w) mod 2^seedlen - // . - // 3. (returned_bits) = Hashgen (requested_number_of_bits, V). - // 4. H = Hash (0x03 || V). - // 5. V = (V + H + C + reseed_counter) mod 2^seedlen - // . - // 6. reseed_counter = reseed_counter + 1. - // 7. Return SUCCESS, returned_bits, and the new values of V, C, and - // reseed_counter for the new_working_state. - int numberOfBits = output.Length * 8; - - if (numberOfBits > MAX_BITS_REQUEST) - throw new ArgumentException("Number of bits per request limited to " + MAX_BITS_REQUEST, "output"); - - if (mReseedCounter > RESEED_MAX) - return -1; - - if (predictionResistant) - { - Reseed(additionalInput); - additionalInput = null; - } - - // 2. - if (additionalInput != null) - { - byte[] newInput = new byte[1 + mV.Length + additionalInput.Length]; - newInput[0] = 0x02; - Array.Copy(mV, 0, newInput, 1, mV.Length); - // TODO: inOff / inLength - Array.Copy(additionalInput, 0, newInput, 1 + mV.Length, additionalInput.Length); - byte[] w = Hash(newInput); - - AddTo(mV, w); - } - - // 3. - byte[] rv = hashgen(mV, numberOfBits); - - // 4. - byte[] subH = new byte[mV.Length + 1]; - Array.Copy(mV, 0, subH, 1, mV.Length); - subH[0] = 0x03; - - byte[] H = Hash(subH); - - // 5. - AddTo(mV, H); - AddTo(mV, mC); - byte[] c = new byte[4]; - c[0] = (byte)(mReseedCounter >> 24); - c[1] = (byte)(mReseedCounter >> 16); - c[2] = (byte)(mReseedCounter >> 8); - c[3] = (byte)mReseedCounter; - - AddTo(mV, c); - - mReseedCounter++; - - Array.Copy(rv, 0, output, 0, output.Length); - - return numberOfBits; - } - - private byte[] GetEntropy() - { - byte[] entropy = mEntropySource.GetEntropy(); - if (entropy.Length < (mSecurityStrength + 7) / 8) - throw new InvalidOperationException("Insufficient entropy provided by entropy source"); - return entropy; - } - - // this will always add the shorter length byte array mathematically to the - // longer length byte array. - // be careful.... - private void AddTo(byte[] longer, byte[] shorter) - { - int off = longer.Length - shorter.Length; - - uint carry = 0; - int i = shorter.Length; - while (--i >= 0) - { - carry += (uint)longer[off + i] + (uint)shorter[i]; - longer[off + i] = (byte)carry; - carry >>= 8; - } - - i = off; - while (--i >= 0) - { - carry += longer[i]; - longer[i] = (byte)carry; - carry >>= 8; - } - } - - /** - * Reseed the DRBG. - * - * @param additionalInput additional input to be added to the DRBG in this step. - */ - public void Reseed(byte[] additionalInput) - { - // 1. seed_material = 0x01 || V || entropy_input || additional_input. - // - // 2. seed = Hash_df (seed_material, seedlen). - // - // 3. V = seed. - // - // 4. C = Hash_df ((0x00 || V), seedlen). - // - // 5. reseed_counter = 1. - // - // 6. Return V, C, and reseed_counter for the new_working_state. - // - // Comment: Precede with a byte of all zeros. - byte[] entropy = GetEntropy(); - byte[] seedMaterial = Arrays.ConcatenateAll(ONE, mV, entropy, additionalInput); - byte[] seed = DrbgUtilities.HashDF(mDigest, seedMaterial, mSeedLength); - - mV = seed; - byte[] subV = new byte[mV.Length + 1]; - subV[0] = 0x00; - Array.Copy(mV, 0, subV, 1, mV.Length); - mC = DrbgUtilities.HashDF(mDigest, subV, mSeedLength); - - mReseedCounter = 1; - } - - private byte[] Hash(byte[] input) - { - byte[] hash = new byte[mDigest.GetDigestSize()]; - DoHash(input, hash); - return hash; - } - - private void DoHash(byte[] input, byte[] output) - { - mDigest.BlockUpdate(input, 0, input.Length); - mDigest.DoFinal(output, 0); - } - - // 1. m = [requested_number_of_bits / outlen] - // 2. data = V. - // 3. W = the Null string. - // 4. For i = 1 to m - // 4.1 wi = Hash (data). - // 4.2 W = W || wi. - // 4.3 data = (data + 1) mod 2^seedlen - // . - // 5. returned_bits = Leftmost (requested_no_of_bits) bits of W. - private byte[] hashgen(byte[] input, int lengthInBits) - { - int digestSize = mDigest.GetDigestSize(); - int m = (lengthInBits / 8) / digestSize; - - byte[] data = new byte[input.Length]; - Array.Copy(input, 0, data, 0, input.Length); - - byte[] W = new byte[lengthInBits / 8]; - - byte[] dig = new byte[mDigest.GetDigestSize()]; - for (int i = 0; i <= m; i++) - { - DoHash(data, dig); - - int bytesToCopy = ((W.Length - i * dig.Length) > dig.Length) - ? dig.Length - : (W.Length - i * dig.Length); - Array.Copy(dig, 0, W, i * dig.Length, bytesToCopy); - - AddTo(data, ONE); - } - - return W; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/prng/drbg/ISP80090Drbg.cs b/bc-sharp-crypto/src/crypto/prng/drbg/ISP80090Drbg.cs deleted file mode 100644 index 0e39820..0000000 --- a/bc-sharp-crypto/src/crypto/prng/drbg/ISP80090Drbg.cs +++ /dev/null @@ -1,35 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Prng.Drbg -{ - /** - * Interface to SP800-90A deterministic random bit generators. - */ - public interface ISP80090Drbg - { - /** - * Return the block size of the DRBG. - * - * @return the block size (in bits) produced by each round of the DRBG. - */ - int BlockSize { get; } - - /** - * Populate a passed in array with random data. - * - * @param output output array for generated bits. - * @param additionalInput additional input to be added to the DRBG in this step. - * @param predictionResistant true if a reseed should be forced, false otherwise. - * - * @return number of bits generated, -1 if a reseed required. - */ - int Generate(byte[] output, byte[] additionalInput, bool predictionResistant); - - /** - * Reseed the DRBG. - * - * @param additionalInput additional input to be added to the DRBG in this step. - */ - void Reseed(byte[] additionalInput); - } -} diff --git a/bc-sharp-crypto/src/crypto/signers/DsaDigestSigner.cs b/bc-sharp-crypto/src/crypto/signers/DsaDigestSigner.cs deleted file mode 100644 index 0866014..0000000 --- a/bc-sharp-crypto/src/crypto/signers/DsaDigestSigner.cs +++ /dev/null @@ -1,145 +0,0 @@ -using System; -using System.Collections; -using System.IO; -using System.Text; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Crypto.Signers; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Signers -{ - public class DsaDigestSigner - : ISigner - { - private readonly IDigest digest; - private readonly IDsa dsaSigner; - private bool forSigning; - - public DsaDigestSigner( - IDsa signer, - IDigest digest) - { - this.digest = digest; - this.dsaSigner = signer; - } - - public virtual string AlgorithmName - { - get { return digest.AlgorithmName + "with" + dsaSigner.AlgorithmName; } - } - - public virtual void Init( - bool forSigning, - ICipherParameters parameters) - { - this.forSigning = forSigning; - - AsymmetricKeyParameter k; - - if (parameters is ParametersWithRandom) - { - k = (AsymmetricKeyParameter)((ParametersWithRandom)parameters).Parameters; - } - else - { - k = (AsymmetricKeyParameter)parameters; - } - - if (forSigning && !k.IsPrivate) - throw new InvalidKeyException("Signing Requires Private Key."); - - if (!forSigning && k.IsPrivate) - throw new InvalidKeyException("Verification Requires Public Key."); - - Reset(); - - dsaSigner.Init(forSigning, parameters); - } - - /** - * update the internal digest with the byte b - */ - public virtual void Update( - byte input) - { - digest.Update(input); - } - - /** - * update the internal digest with the byte array in - */ - public virtual void BlockUpdate( - byte[] input, - int inOff, - int length) - { - digest.BlockUpdate(input, inOff, length); - } - - /** - * Generate a signature for the message we've been loaded with using - * the key we were initialised with. - */ - public virtual byte[] GenerateSignature() - { - if (!forSigning) - throw new InvalidOperationException("DSADigestSigner not initialised for signature generation."); - - byte[] hash = new byte[digest.GetDigestSize()]; - digest.DoFinal(hash, 0); - - BigInteger[] sig = dsaSigner.GenerateSignature(hash); - - return DerEncode(sig[0], sig[1]); - } - - /// true if the internal state represents the signature described in the passed in array. - public virtual bool VerifySignature( - byte[] signature) - { - if (forSigning) - throw new InvalidOperationException("DSADigestSigner not initialised for verification"); - - byte[] hash = new byte[digest.GetDigestSize()]; - digest.DoFinal(hash, 0); - - try - { - BigInteger[] sig = DerDecode(signature); - return dsaSigner.VerifySignature(hash, sig[0], sig[1]); - } - catch (IOException) - { - return false; - } - } - - /// Reset the internal state - public virtual void Reset() - { - digest.Reset(); - } - - private byte[] DerEncode( - BigInteger r, - BigInteger s) - { - return new DerSequence(new DerInteger(r), new DerInteger(s)).GetDerEncoded(); - } - - private BigInteger[] DerDecode( - byte[] encoding) - { - Asn1Sequence s = (Asn1Sequence) Asn1Object.FromByteArray(encoding); - - return new BigInteger[] - { - ((DerInteger) s[0]).Value, - ((DerInteger) s[1]).Value - }; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/signers/DsaSigner.cs b/bc-sharp-crypto/src/crypto/signers/DsaSigner.cs deleted file mode 100644 index bb28add..0000000 --- a/bc-sharp-crypto/src/crypto/signers/DsaSigner.cs +++ /dev/null @@ -1,156 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Signers -{ - /** - * The Digital Signature Algorithm - as described in "Handbook of Applied - * Cryptography", pages 452 - 453. - */ - public class DsaSigner - : IDsa - { - protected readonly IDsaKCalculator kCalculator; - - protected DsaKeyParameters key = null; - protected SecureRandom random = null; - - /** - * Default configuration, random K values. - */ - public DsaSigner() - { - this.kCalculator = new RandomDsaKCalculator(); - } - - /** - * Configuration with an alternate, possibly deterministic calculator of K. - * - * @param kCalculator a K value calculator. - */ - public DsaSigner(IDsaKCalculator kCalculator) - { - this.kCalculator = kCalculator; - } - - public virtual string AlgorithmName - { - get { return "DSA"; } - } - - public virtual void Init(bool forSigning, ICipherParameters parameters) - { - SecureRandom providedRandom = null; - - if (forSigning) - { - if (parameters is ParametersWithRandom) - { - ParametersWithRandom rParam = (ParametersWithRandom)parameters; - - providedRandom = rParam.Random; - parameters = rParam.Parameters; - } - - if (!(parameters is DsaPrivateKeyParameters)) - throw new InvalidKeyException("DSA private key required for signing"); - - this.key = (DsaPrivateKeyParameters)parameters; - } - else - { - if (!(parameters is DsaPublicKeyParameters)) - throw new InvalidKeyException("DSA public key required for verification"); - - this.key = (DsaPublicKeyParameters)parameters; - } - - this.random = InitSecureRandom(forSigning && !kCalculator.IsDeterministic, providedRandom); - } - - /** - * Generate a signature for the given message using the key we were - * initialised with. For conventional DSA the message should be a SHA-1 - * hash of the message of interest. - * - * @param message the message that will be verified later. - */ - public virtual BigInteger[] GenerateSignature(byte[] message) - { - DsaParameters parameters = key.Parameters; - BigInteger q = parameters.Q; - BigInteger m = CalculateE(q, message); - BigInteger x = ((DsaPrivateKeyParameters)key).X; - - if (kCalculator.IsDeterministic) - { - kCalculator.Init(q, x, message); - } - else - { - kCalculator.Init(q, random); - } - - BigInteger k = kCalculator.NextK(); - - BigInteger r = parameters.G.ModPow(k, parameters.P).Mod(q); - - k = k.ModInverse(q).Multiply(m.Add(x.Multiply(r))); - - BigInteger s = k.Mod(q); - - return new BigInteger[]{ r, s }; - } - - /** - * return true if the value r and s represent a DSA signature for - * the passed in message for standard DSA the message should be a - * SHA-1 hash of the real message to be verified. - */ - public virtual bool VerifySignature(byte[] message, BigInteger r, BigInteger s) - { - DsaParameters parameters = key.Parameters; - BigInteger q = parameters.Q; - BigInteger m = CalculateE(q, message); - - if (r.SignValue <= 0 || q.CompareTo(r) <= 0) - { - return false; - } - - if (s.SignValue <= 0 || q.CompareTo(s) <= 0) - { - return false; - } - - BigInteger w = s.ModInverse(q); - - BigInteger u1 = m.Multiply(w).Mod(q); - BigInteger u2 = r.Multiply(w).Mod(q); - - BigInteger p = parameters.P; - u1 = parameters.G.ModPow(u1, p); - u2 = ((DsaPublicKeyParameters)key).Y.ModPow(u2, p); - - BigInteger v = u1.Multiply(u2).Mod(p).Mod(q); - - return v.Equals(r); - } - - protected virtual BigInteger CalculateE(BigInteger n, byte[] message) - { - int length = System.Math.Min(message.Length, n.BitLength / 8); - - return new BigInteger(1, message, 0, length); - } - - protected virtual SecureRandom InitSecureRandom(bool needed, SecureRandom provided) - { - return !needed ? null : (provided != null) ? provided : new SecureRandom(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/signers/ECDsaSigner.cs b/bc-sharp-crypto/src/crypto/signers/ECDsaSigner.cs deleted file mode 100644 index 520507b..0000000 --- a/bc-sharp-crypto/src/crypto/signers/ECDsaSigner.cs +++ /dev/null @@ -1,240 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC; -using Org.BouncyCastle.Math.EC.Multiplier; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Signers -{ - /** - * EC-DSA as described in X9.62 - */ - public class ECDsaSigner - : IDsa - { - private static readonly BigInteger Eight = BigInteger.ValueOf(8); - - protected readonly IDsaKCalculator kCalculator; - - protected ECKeyParameters key = null; - protected SecureRandom random = null; - - /** - * Default configuration, random K values. - */ - public ECDsaSigner() - { - this.kCalculator = new RandomDsaKCalculator(); - } - - /** - * Configuration with an alternate, possibly deterministic calculator of K. - * - * @param kCalculator a K value calculator. - */ - public ECDsaSigner(IDsaKCalculator kCalculator) - { - this.kCalculator = kCalculator; - } - - public virtual string AlgorithmName - { - get { return "ECDSA"; } - } - - public virtual void Init(bool forSigning, ICipherParameters parameters) - { - SecureRandom providedRandom = null; - - if (forSigning) - { - if (parameters is ParametersWithRandom) - { - ParametersWithRandom rParam = (ParametersWithRandom)parameters; - - providedRandom = rParam.Random; - parameters = rParam.Parameters; - } - - if (!(parameters is ECPrivateKeyParameters)) - throw new InvalidKeyException("EC private key required for signing"); - - this.key = (ECPrivateKeyParameters)parameters; - } - else - { - if (!(parameters is ECPublicKeyParameters)) - throw new InvalidKeyException("EC public key required for verification"); - - this.key = (ECPublicKeyParameters)parameters; - } - - this.random = InitSecureRandom(forSigning && !kCalculator.IsDeterministic, providedRandom); - } - - // 5.3 pg 28 - /** - * Generate a signature for the given message using the key we were - * initialised with. For conventional DSA the message should be a SHA-1 - * hash of the message of interest. - * - * @param message the message that will be verified later. - */ - public virtual BigInteger[] GenerateSignature(byte[] message) - { - ECDomainParameters ec = key.Parameters; - BigInteger n = ec.N; - BigInteger e = CalculateE(n, message); - BigInteger d = ((ECPrivateKeyParameters)key).D; - - if (kCalculator.IsDeterministic) - { - kCalculator.Init(n, d, message); - } - else - { - kCalculator.Init(n, random); - } - - BigInteger r, s; - - ECMultiplier basePointMultiplier = CreateBasePointMultiplier(); - - // 5.3.2 - do // Generate s - { - BigInteger k; - do // Generate r - { - k = kCalculator.NextK(); - - ECPoint p = basePointMultiplier.Multiply(ec.G, k).Normalize(); - - // 5.3.3 - r = p.AffineXCoord.ToBigInteger().Mod(n); - } - while (r.SignValue == 0); - - s = k.ModInverse(n).Multiply(e.Add(d.Multiply(r))).Mod(n); - } - while (s.SignValue == 0); - - return new BigInteger[]{ r, s }; - } - - // 5.4 pg 29 - /** - * return true if the value r and s represent a DSA signature for - * the passed in message (for standard DSA the message should be - * a SHA-1 hash of the real message to be verified). - */ - public virtual bool VerifySignature(byte[] message, BigInteger r, BigInteger s) - { - BigInteger n = key.Parameters.N; - - // r and s should both in the range [1,n-1] - if (r.SignValue < 1 || s.SignValue < 1 - || r.CompareTo(n) >= 0 || s.CompareTo(n) >= 0) - { - return false; - } - - BigInteger e = CalculateE(n, message); - BigInteger c = s.ModInverse(n); - - BigInteger u1 = e.Multiply(c).Mod(n); - BigInteger u2 = r.Multiply(c).Mod(n); - - ECPoint G = key.Parameters.G; - ECPoint Q = ((ECPublicKeyParameters) key).Q; - - ECPoint point = ECAlgorithms.SumOfTwoMultiplies(G, u1, Q, u2); - - if (point.IsInfinity) - return false; - - /* - * If possible, avoid normalizing the point (to save a modular inversion in the curve field). - * - * There are ~cofactor elements of the curve field that reduce (modulo the group order) to 'r'. - * If the cofactor is known and small, we generate those possible field values and project each - * of them to the same "denominator" (depending on the particular projective coordinates in use) - * as the calculated point.X. If any of the projected values matches point.X, then we have: - * (point.X / Denominator mod p) mod n == r - * as required, and verification succeeds. - * - * Based on an original idea by Gregory Maxwell (https://github.com/gmaxwell), as implemented in - * the libsecp256k1 project (https://github.com/bitcoin/secp256k1). - */ - ECCurve curve = point.Curve; - if (curve != null) - { - BigInteger cofactor = curve.Cofactor; - if (cofactor != null && cofactor.CompareTo(Eight) <= 0) - { - ECFieldElement D = GetDenominator(curve.CoordinateSystem, point); - if (D != null && !D.IsZero) - { - ECFieldElement X = point.XCoord; - while (curve.IsValidFieldElement(r)) - { - ECFieldElement R = curve.FromBigInteger(r).Multiply(D); - if (R.Equals(X)) - { - return true; - } - r = r.Add(n); - } - return false; - } - } - } - - BigInteger v = point.Normalize().AffineXCoord.ToBigInteger().Mod(n); - return v.Equals(r); - } - - protected virtual BigInteger CalculateE(BigInteger n, byte[] message) - { - int messageBitLength = message.Length * 8; - BigInteger trunc = new BigInteger(1, message); - - if (n.BitLength < messageBitLength) - { - trunc = trunc.ShiftRight(messageBitLength - n.BitLength); - } - - return trunc; - } - - protected virtual ECMultiplier CreateBasePointMultiplier() - { - return new FixedPointCombMultiplier(); - } - - protected virtual ECFieldElement GetDenominator(int coordinateSystem, ECPoint p) - { - switch (coordinateSystem) - { - case ECCurve.COORD_HOMOGENEOUS: - case ECCurve.COORD_LAMBDA_PROJECTIVE: - case ECCurve.COORD_SKEWED: - return p.GetZCoord(0); - case ECCurve.COORD_JACOBIAN: - case ECCurve.COORD_JACOBIAN_CHUDNOVSKY: - case ECCurve.COORD_JACOBIAN_MODIFIED: - return p.GetZCoord(0).Square(); - default: - return null; - } - } - - protected virtual SecureRandom InitSecureRandom(bool needed, SecureRandom provided) - { - return !needed ? null : (provided != null) ? provided : new SecureRandom(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/signers/ECGOST3410Signer.cs b/bc-sharp-crypto/src/crypto/signers/ECGOST3410Signer.cs deleted file mode 100644 index 28ab79c..0000000 --- a/bc-sharp-crypto/src/crypto/signers/ECGOST3410Signer.cs +++ /dev/null @@ -1,162 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC; -using Org.BouncyCastle.Math.EC.Multiplier; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Signers -{ - /** - * GOST R 34.10-2001 Signature Algorithm - */ - public class ECGost3410Signer - : IDsa - { - private ECKeyParameters key; - private SecureRandom random; - - public virtual string AlgorithmName - { - get { return "ECGOST3410"; } - } - - public virtual void Init( - bool forSigning, - ICipherParameters parameters) - { - if (forSigning) - { - if (parameters is ParametersWithRandom) - { - ParametersWithRandom rParam = (ParametersWithRandom)parameters; - - this.random = rParam.Random; - parameters = rParam.Parameters; - } - else - { - this.random = new SecureRandom(); - } - - if (!(parameters is ECPrivateKeyParameters)) - throw new InvalidKeyException("EC private key required for signing"); - - this.key = (ECPrivateKeyParameters) parameters; - } - else - { - if (!(parameters is ECPublicKeyParameters)) - throw new InvalidKeyException("EC public key required for verification"); - - this.key = (ECPublicKeyParameters)parameters; - } - } - - /** - * generate a signature for the given message using the key we were - * initialised with. For conventional GOST3410 the message should be a GOST3411 - * hash of the message of interest. - * - * @param message the message that will be verified later. - */ - public virtual BigInteger[] GenerateSignature( - byte[] message) - { - byte[] mRev = new byte[message.Length]; // conversion is little-endian - for (int i = 0; i != mRev.Length; i++) - { - mRev[i] = message[mRev.Length - 1 - i]; - } - - BigInteger e = new BigInteger(1, mRev); - - ECDomainParameters ec = key.Parameters; - BigInteger n = ec.N; - BigInteger d = ((ECPrivateKeyParameters)key).D; - - BigInteger r, s = null; - - ECMultiplier basePointMultiplier = CreateBasePointMultiplier(); - - do // generate s - { - BigInteger k; - do // generate r - { - do - { - k = new BigInteger(n.BitLength, random); - } - while (k.SignValue == 0); - - ECPoint p = basePointMultiplier.Multiply(ec.G, k).Normalize(); - - r = p.AffineXCoord.ToBigInteger().Mod(n); - } - while (r.SignValue == 0); - - s = (k.Multiply(e)).Add(d.Multiply(r)).Mod(n); - } - while (s.SignValue == 0); - - return new BigInteger[]{ r, s }; - } - - /** - * return true if the value r and s represent a GOST3410 signature for - * the passed in message (for standard GOST3410 the message should be - * a GOST3411 hash of the real message to be verified). - */ - public virtual bool VerifySignature( - byte[] message, - BigInteger r, - BigInteger s) - { - byte[] mRev = new byte[message.Length]; // conversion is little-endian - for (int i = 0; i != mRev.Length; i++) - { - mRev[i] = message[mRev.Length - 1 - i]; - } - - BigInteger e = new BigInteger(1, mRev); - BigInteger n = key.Parameters.N; - - // r in the range [1,n-1] - if (r.CompareTo(BigInteger.One) < 0 || r.CompareTo(n) >= 0) - { - return false; - } - - // s in the range [1,n-1] - if (s.CompareTo(BigInteger.One) < 0 || s.CompareTo(n) >= 0) - { - return false; - } - - BigInteger v = e.ModInverse(n); - - BigInteger z1 = s.Multiply(v).Mod(n); - BigInteger z2 = (n.Subtract(r)).Multiply(v).Mod(n); - - ECPoint G = key.Parameters.G; // P - ECPoint Q = ((ECPublicKeyParameters)key).Q; - - ECPoint point = ECAlgorithms.SumOfTwoMultiplies(G, z1, Q, z2).Normalize(); - - if (point.IsInfinity) - return false; - - BigInteger R = point.AffineXCoord.ToBigInteger().Mod(n); - - return R.Equals(r); - } - - protected virtual ECMultiplier CreateBasePointMultiplier() - { - return new FixedPointCombMultiplier(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/signers/ECNRSigner.cs b/bc-sharp-crypto/src/crypto/signers/ECNRSigner.cs deleted file mode 100644 index bb21a49..0000000 --- a/bc-sharp-crypto/src/crypto/signers/ECNRSigner.cs +++ /dev/null @@ -1,188 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Generators; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Signers -{ - /** - * EC-NR as described in IEEE 1363-2000 - */ - public class ECNRSigner - : IDsa - { - private bool forSigning; - private ECKeyParameters key; - private SecureRandom random; - - public virtual string AlgorithmName - { - get { return "ECNR"; } - } - - public virtual void Init( - bool forSigning, - ICipherParameters parameters) - { - this.forSigning = forSigning; - - if (forSigning) - { - if (parameters is ParametersWithRandom) - { - ParametersWithRandom rParam = (ParametersWithRandom) parameters; - - this.random = rParam.Random; - parameters = rParam.Parameters; - } - else - { - this.random = new SecureRandom(); - } - - if (!(parameters is ECPrivateKeyParameters)) - throw new InvalidKeyException("EC private key required for signing"); - - this.key = (ECPrivateKeyParameters) parameters; - } - else - { - if (!(parameters is ECPublicKeyParameters)) - throw new InvalidKeyException("EC public key required for verification"); - - this.key = (ECPublicKeyParameters) parameters; - } - } - - // Section 7.2.5 ECSP-NR, pg 34 - /** - * generate a signature for the given message using the key we were - * initialised with. Generally, the order of the curve should be at - * least as long as the hash of the message of interest, and with - * ECNR it *must* be at least as long. - * - * @param digest the digest to be signed. - * @exception DataLengthException if the digest is longer than the key allows - */ - public virtual BigInteger[] GenerateSignature( - byte[] message) - { - if (!this.forSigning) - { - // not properly initilaized... deal with it - throw new InvalidOperationException("not initialised for signing"); - } - - BigInteger n = ((ECPrivateKeyParameters) this.key).Parameters.N; - int nBitLength = n.BitLength; - - BigInteger e = new BigInteger(1, message); - int eBitLength = e.BitLength; - - ECPrivateKeyParameters privKey = (ECPrivateKeyParameters)key; - - if (eBitLength > nBitLength) - { - throw new DataLengthException("input too large for ECNR key."); - } - - BigInteger r = null; - BigInteger s = null; - - AsymmetricCipherKeyPair tempPair; - do // generate r - { - // generate another, but very temporary, key pair using - // the same EC parameters - ECKeyPairGenerator keyGen = new ECKeyPairGenerator(); - - keyGen.Init(new ECKeyGenerationParameters(privKey.Parameters, this.random)); - - tempPair = keyGen.GenerateKeyPair(); - - // BigInteger Vx = tempPair.getPublic().getW().getAffineX(); - ECPublicKeyParameters V = (ECPublicKeyParameters) tempPair.Public; // get temp's public key - BigInteger Vx = V.Q.AffineXCoord.ToBigInteger(); // get the point's x coordinate - - r = Vx.Add(e).Mod(n); - } - while (r.SignValue == 0); - - // generate s - BigInteger x = privKey.D; // private key value - BigInteger u = ((ECPrivateKeyParameters) tempPair.Private).D; // temp's private key value - s = u.Subtract(r.Multiply(x)).Mod(n); - - return new BigInteger[]{ r, s }; - } - - // Section 7.2.6 ECVP-NR, pg 35 - /** - * return true if the value r and s represent a signature for the - * message passed in. Generally, the order of the curve should be at - * least as long as the hash of the message of interest, and with - * ECNR, it *must* be at least as long. But just in case the signer - * applied mod(n) to the longer digest, this implementation will - * apply mod(n) during verification. - * - * @param digest the digest to be verified. - * @param r the r value of the signature. - * @param s the s value of the signature. - * @exception DataLengthException if the digest is longer than the key allows - */ - public virtual bool VerifySignature( - byte[] message, - BigInteger r, - BigInteger s) - { - if (this.forSigning) - { - // not properly initilaized... deal with it - throw new InvalidOperationException("not initialised for verifying"); - } - - ECPublicKeyParameters pubKey = (ECPublicKeyParameters)key; - BigInteger n = pubKey.Parameters.N; - int nBitLength = n.BitLength; - - BigInteger e = new BigInteger(1, message); - int eBitLength = e.BitLength; - - if (eBitLength > nBitLength) - { - throw new DataLengthException("input too large for ECNR key."); - } - - // r in the range [1,n-1] - if (r.CompareTo(BigInteger.One) < 0 || r.CompareTo(n) >= 0) - { - return false; - } - - // s in the range [0,n-1] NB: ECNR spec says 0 - if (s.CompareTo(BigInteger.Zero) < 0 || s.CompareTo(n) >= 0) - { - return false; - } - - // compute P = sG + rW - - ECPoint G = pubKey.Parameters.G; - ECPoint W = pubKey.Q; - // calculate P using Bouncy math - ECPoint P = ECAlgorithms.SumOfTwoMultiplies(G, s, W, r).Normalize(); - - if (P.IsInfinity) - return false; - - BigInteger x = P.AffineXCoord.ToBigInteger(); - BigInteger t = r.Subtract(x).Mod(n); - - return t.Equals(e); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/signers/GOST3410DigestSigner.cs b/bc-sharp-crypto/src/crypto/signers/GOST3410DigestSigner.cs deleted file mode 100644 index bc32808..0000000 --- a/bc-sharp-crypto/src/crypto/signers/GOST3410DigestSigner.cs +++ /dev/null @@ -1,145 +0,0 @@ -using System; -using System.Collections; -using System.IO; -using System.Text; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Crypto.Signers; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Signers -{ - public class Gost3410DigestSigner - : ISigner - { - private readonly IDigest digest; - private readonly IDsa dsaSigner; - private bool forSigning; - - public Gost3410DigestSigner( - IDsa signer, - IDigest digest) - { - this.dsaSigner = signer; - this.digest = digest; - } - - public virtual string AlgorithmName - { - get { return digest.AlgorithmName + "with" + dsaSigner.AlgorithmName; } - } - - public virtual void Init( - bool forSigning, - ICipherParameters parameters) - { - this.forSigning = forSigning; - - AsymmetricKeyParameter k; - if (parameters is ParametersWithRandom) - { - k = (AsymmetricKeyParameter)((ParametersWithRandom)parameters).Parameters; - } - else - { - k = (AsymmetricKeyParameter)parameters; - } - - if (forSigning && !k.IsPrivate) - { - throw new InvalidKeyException("Signing Requires Private Key."); - } - - if (!forSigning && k.IsPrivate) - { - throw new InvalidKeyException("Verification Requires Public Key."); - } - - Reset(); - - dsaSigner.Init(forSigning, parameters); - } - - /** - * update the internal digest with the byte b - */ - public virtual void Update( - byte input) - { - digest.Update(input); - } - - /** - * update the internal digest with the byte array in - */ - public virtual void BlockUpdate( - byte[] input, - int inOff, - int length) - { - digest.BlockUpdate(input, inOff, length); - } - - /** - * Generate a signature for the message we've been loaded with using - * the key we were initialised with. - */ - public virtual byte[] GenerateSignature() - { - if (!forSigning) - throw new InvalidOperationException("GOST3410DigestSigner not initialised for signature generation."); - - byte[] hash = new byte[digest.GetDigestSize()]; - digest.DoFinal(hash, 0); - - try - { - BigInteger[] sig = dsaSigner.GenerateSignature(hash); - byte[] sigBytes = new byte[64]; - - // TODO Add methods to allow writing BigInteger to existing byte array? - byte[] r = sig[0].ToByteArrayUnsigned(); - byte[] s = sig[1].ToByteArrayUnsigned(); - s.CopyTo(sigBytes, 32 - s.Length); - r.CopyTo(sigBytes, 64 - r.Length); - return sigBytes; - } - catch (Exception e) - { - throw new SignatureException(e.Message, e); - } - } - - /// true if the internal state represents the signature described in the passed in array. - public virtual bool VerifySignature( - byte[] signature) - { - if (forSigning) - throw new InvalidOperationException("DSADigestSigner not initialised for verification"); - - byte[] hash = new byte[digest.GetDigestSize()]; - digest.DoFinal(hash, 0); - - BigInteger R, S; - try - { - R = new BigInteger(1, signature, 32, 32); - S = new BigInteger(1, signature, 0, 32); - } - catch (Exception e) - { - throw new SignatureException("error decoding signature bytes.", e); - } - - return dsaSigner.VerifySignature(hash, R, S); - } - - /// Reset the internal state - public virtual void Reset() - { - digest.Reset(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/signers/GOST3410Signer.cs b/bc-sharp-crypto/src/crypto/signers/GOST3410Signer.cs deleted file mode 100644 index f1832ae..0000000 --- a/bc-sharp-crypto/src/crypto/signers/GOST3410Signer.cs +++ /dev/null @@ -1,132 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Signers -{ - /** - * Gost R 34.10-94 Signature Algorithm - */ - public class Gost3410Signer - : IDsa - { - private Gost3410KeyParameters key; - private SecureRandom random; - - public virtual string AlgorithmName - { - get { return "GOST3410"; } - } - - public virtual void Init( - bool forSigning, - ICipherParameters parameters) - { - if (forSigning) - { - if (parameters is ParametersWithRandom) - { - ParametersWithRandom rParam = (ParametersWithRandom)parameters; - - this.random = rParam.Random; - parameters = rParam.Parameters; - } - else - { - this.random = new SecureRandom(); - } - - if (!(parameters is Gost3410PrivateKeyParameters)) - throw new InvalidKeyException("GOST3410 private key required for signing"); - - this.key = (Gost3410PrivateKeyParameters) parameters; - } - else - { - if (!(parameters is Gost3410PublicKeyParameters)) - throw new InvalidKeyException("GOST3410 public key required for signing"); - - this.key = (Gost3410PublicKeyParameters) parameters; - } - } - - /** - * generate a signature for the given message using the key we were - * initialised with. For conventional Gost3410 the message should be a Gost3411 - * hash of the message of interest. - * - * @param message the message that will be verified later. - */ - public virtual BigInteger[] GenerateSignature( - byte[] message) - { - byte[] mRev = new byte[message.Length]; // conversion is little-endian - for (int i = 0; i != mRev.Length; i++) - { - mRev[i] = message[mRev.Length - 1 - i]; - } - - BigInteger m = new BigInteger(1, mRev); - Gost3410Parameters parameters = key.Parameters; - BigInteger k; - - do - { - k = new BigInteger(parameters.Q.BitLength, random); - } - while (k.CompareTo(parameters.Q) >= 0); - - BigInteger r = parameters.A.ModPow(k, parameters.P).Mod(parameters.Q); - - BigInteger s = k.Multiply(m). - Add(((Gost3410PrivateKeyParameters)key).X.Multiply(r)). - Mod(parameters.Q); - - return new BigInteger[]{ r, s }; - } - - /** - * return true if the value r and s represent a Gost3410 signature for - * the passed in message for standard Gost3410 the message should be a - * Gost3411 hash of the real message to be verified. - */ - public virtual bool VerifySignature( - byte[] message, - BigInteger r, - BigInteger s) - { - byte[] mRev = new byte[message.Length]; // conversion is little-endian - for (int i = 0; i != mRev.Length; i++) - { - mRev[i] = message[mRev.Length - 1 - i]; - } - - BigInteger m = new BigInteger(1, mRev); - Gost3410Parameters parameters = key.Parameters; - - if (r.SignValue < 0 || parameters.Q.CompareTo(r) <= 0) - { - return false; - } - - if (s.SignValue < 0 || parameters.Q.CompareTo(s) <= 0) - { - return false; - } - - BigInteger v = m.ModPow(parameters.Q.Subtract(BigInteger.Two), parameters.Q); - - BigInteger z1 = s.Multiply(v).Mod(parameters.Q); - BigInteger z2 = (parameters.Q.Subtract(r)).Multiply(v).Mod(parameters.Q); - - z1 = parameters.A.ModPow(z1, parameters.P); - z2 = ((Gost3410PublicKeyParameters)key).Y.ModPow(z2, parameters.P); - - BigInteger u = z1.Multiply(z2).Mod(parameters.P).Mod(parameters.Q); - - return u.Equals(r); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/signers/GenericSigner.cs b/bc-sharp-crypto/src/crypto/signers/GenericSigner.cs deleted file mode 100644 index a551217..0000000 --- a/bc-sharp-crypto/src/crypto/signers/GenericSigner.cs +++ /dev/null @@ -1,130 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Signers -{ - public class GenericSigner - : ISigner - { - private readonly IAsymmetricBlockCipher engine; - private readonly IDigest digest; - private bool forSigning; - - public GenericSigner( - IAsymmetricBlockCipher engine, - IDigest digest) - { - this.engine = engine; - this.digest = digest; - } - - public virtual string AlgorithmName - { - get { return "Generic(" + engine.AlgorithmName + "/" + digest.AlgorithmName + ")"; } - } - - /** - * initialise the signer for signing or verification. - * - * @param forSigning - * true if for signing, false otherwise - * @param parameters - * necessary parameters. - */ - public virtual void Init(bool forSigning, ICipherParameters parameters) - { - this.forSigning = forSigning; - - AsymmetricKeyParameter k; - if (parameters is ParametersWithRandom) - { - k = (AsymmetricKeyParameter)((ParametersWithRandom)parameters).Parameters; - } - else - { - k = (AsymmetricKeyParameter)parameters; - } - - if (forSigning && !k.IsPrivate) - throw new InvalidKeyException("Signing requires private key."); - - if (!forSigning && k.IsPrivate) - throw new InvalidKeyException("Verification requires public key."); - - Reset(); - - engine.Init(forSigning, parameters); - } - - /** - * update the internal digest with the byte b - */ - public virtual void Update(byte input) - { - digest.Update(input); - } - - /** - * update the internal digest with the byte array in - */ - public virtual void BlockUpdate(byte[] input, int inOff, int length) - { - digest.BlockUpdate(input, inOff, length); - } - - /** - * Generate a signature for the message we've been loaded with using the key - * we were initialised with. - */ - public virtual byte[] GenerateSignature() - { - if (!forSigning) - throw new InvalidOperationException("GenericSigner not initialised for signature generation."); - - byte[] hash = new byte[digest.GetDigestSize()]; - digest.DoFinal(hash, 0); - - return engine.ProcessBlock(hash, 0, hash.Length); - } - - /** - * return true if the internal state represents the signature described in - * the passed in array. - */ - public virtual bool VerifySignature(byte[] signature) - { - if (forSigning) - throw new InvalidOperationException("GenericSigner not initialised for verification"); - - byte[] hash = new byte[digest.GetDigestSize()]; - digest.DoFinal(hash, 0); - - try - { - byte[] sig = engine.ProcessBlock(signature, 0, signature.Length); - - // Extend with leading zeroes to match the digest size, if necessary. - if (sig.Length < hash.Length) - { - byte[] tmp = new byte[hash.Length]; - Array.Copy(sig, 0, tmp, tmp.Length - sig.Length, sig.Length); - sig = tmp; - } - - return Arrays.ConstantTimeAreEqual(sig, hash); - } - catch (Exception) - { - return false; - } - } - - public virtual void Reset() - { - digest.Reset(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/signers/HMacDsaKCalculator.cs b/bc-sharp-crypto/src/crypto/signers/HMacDsaKCalculator.cs deleted file mode 100644 index 8231197..0000000 --- a/bc-sharp-crypto/src/crypto/signers/HMacDsaKCalculator.cs +++ /dev/null @@ -1,150 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Macs; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Signers -{ - /** - * A deterministic K calculator based on the algorithm in section 3.2 of RFC 6979. - */ - public class HMacDsaKCalculator - : IDsaKCalculator - { - private readonly HMac hMac; - private readonly byte[] K; - private readonly byte[] V; - - private BigInteger n; - - /** - * Base constructor. - * - * @param digest digest to build the HMAC on. - */ - public HMacDsaKCalculator(IDigest digest) - { - this.hMac = new HMac(digest); - this.V = new byte[hMac.GetMacSize()]; - this.K = new byte[hMac.GetMacSize()]; - } - - public virtual bool IsDeterministic - { - get { return true; } - } - - public virtual void Init(BigInteger n, SecureRandom random) - { - throw new InvalidOperationException("Operation not supported"); - } - - public void Init(BigInteger n, BigInteger d, byte[] message) - { - this.n = n; - - Arrays.Fill(V, (byte)0x01); - Arrays.Fill(K, (byte)0); - - byte[] x = new byte[(n.BitLength + 7) / 8]; - byte[] dVal = BigIntegers.AsUnsignedByteArray(d); - - Array.Copy(dVal, 0, x, x.Length - dVal.Length, dVal.Length); - - byte[] m = new byte[(n.BitLength + 7) / 8]; - - BigInteger mInt = BitsToInt(message); - - if (mInt.CompareTo(n) >= 0) - { - mInt = mInt.Subtract(n); - } - - byte[] mVal = BigIntegers.AsUnsignedByteArray(mInt); - - Array.Copy(mVal, 0, m, m.Length - mVal.Length, mVal.Length); - - hMac.Init(new KeyParameter(K)); - - hMac.BlockUpdate(V, 0, V.Length); - hMac.Update((byte)0x00); - hMac.BlockUpdate(x, 0, x.Length); - hMac.BlockUpdate(m, 0, m.Length); - - hMac.DoFinal(K, 0); - - hMac.Init(new KeyParameter(K)); - - hMac.BlockUpdate(V, 0, V.Length); - - hMac.DoFinal(V, 0); - - hMac.BlockUpdate(V, 0, V.Length); - hMac.Update((byte)0x01); - hMac.BlockUpdate(x, 0, x.Length); - hMac.BlockUpdate(m, 0, m.Length); - - hMac.DoFinal(K, 0); - - hMac.Init(new KeyParameter(K)); - - hMac.BlockUpdate(V, 0, V.Length); - - hMac.DoFinal(V, 0); - } - - public virtual BigInteger NextK() - { - byte[] t = new byte[((n.BitLength + 7) / 8)]; - - for (;;) - { - int tOff = 0; - - while (tOff < t.Length) - { - hMac.BlockUpdate(V, 0, V.Length); - - hMac.DoFinal(V, 0); - - int len = System.Math.Min(t.Length - tOff, V.Length); - Array.Copy(V, 0, t, tOff, len); - tOff += len; - } - - BigInteger k = BitsToInt(t); - - if (k.SignValue > 0 && k.CompareTo(n) < 0) - { - return k; - } - - hMac.BlockUpdate(V, 0, V.Length); - hMac.Update((byte)0x00); - - hMac.DoFinal(K, 0); - - hMac.Init(new KeyParameter(K)); - - hMac.BlockUpdate(V, 0, V.Length); - - hMac.DoFinal(V, 0); - } - } - - private BigInteger BitsToInt(byte[] t) - { - BigInteger v = new BigInteger(1, t); - - if (t.Length * 8 > n.BitLength) - { - v = v.ShiftRight(t.Length * 8 - n.BitLength); - } - - return v; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/signers/IDsaKCalculator.cs b/bc-sharp-crypto/src/crypto/signers/IDsaKCalculator.cs deleted file mode 100644 index 645186d..0000000 --- a/bc-sharp-crypto/src/crypto/signers/IDsaKCalculator.cs +++ /dev/null @@ -1,44 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Signers -{ - /** - * Interface define calculators of K values for DSA/ECDSA. - */ - public interface IDsaKCalculator - { - /** - * Return true if this calculator is deterministic, false otherwise. - * - * @return true if deterministic, otherwise false. - */ - bool IsDeterministic { get; } - - /** - * Non-deterministic initialiser. - * - * @param n the order of the DSA group. - * @param random a source of randomness. - */ - void Init(BigInteger n, SecureRandom random); - - /** - * Deterministic initialiser. - * - * @param n the order of the DSA group. - * @param d the DSA private value. - * @param message the message being signed. - */ - void Init(BigInteger n, BigInteger d, byte[] message); - - /** - * Return the next valid value of K. - * - * @return a K value. - */ - BigInteger NextK(); - } -} diff --git a/bc-sharp-crypto/src/crypto/signers/Iso9796d2PssSigner.cs b/bc-sharp-crypto/src/crypto/signers/Iso9796d2PssSigner.cs deleted file mode 100644 index 6b80370..0000000 --- a/bc-sharp-crypto/src/crypto/signers/Iso9796d2PssSigner.cs +++ /dev/null @@ -1,619 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Signers -{ - /// ISO9796-2 - mechanism using a hash function with recovery (scheme 2 and 3). - ///

- /// Note: the usual length for the salt is the length of the hash - /// function used in bytes.

- /// - public class Iso9796d2PssSigner - : ISignerWithRecovery - { - /// - /// Return a reference to the recoveredMessage message. - /// - /// The full/partial recoveredMessage message. - /// - public byte[] GetRecoveredMessage() - { - return recoveredMessage; - } - - [Obsolete("Use 'IsoTrailers' instead")] - public const int TrailerImplicit = 0xBC; - [Obsolete("Use 'IsoTrailers' instead")] - public const int TrailerRipeMD160 = 0x31CC; - [Obsolete("Use 'IsoTrailers' instead")] - public const int TrailerRipeMD128 = 0x32CC; - [Obsolete("Use 'IsoTrailers' instead")] - public const int TrailerSha1 = 0x33CC; - [Obsolete("Use 'IsoTrailers' instead")] - public const int TrailerSha256 = 0x34CC; - [Obsolete("Use 'IsoTrailers' instead")] - public const int TrailerSha512 = 0x35CC; - [Obsolete("Use 'IsoTrailers' instead")] - public const int TrailerSha384 = 0x36CC; - [Obsolete("Use 'IsoTrailers' instead")] - public const int TrailerWhirlpool = 0x37CC; - - private IDigest digest; - private IAsymmetricBlockCipher cipher; - - private SecureRandom random; - private byte[] standardSalt; - - private int hLen; - private int trailer; - private int keyBits; - private byte[] block; - private byte[] mBuf; - private int messageLength; - private readonly int saltLength; - private bool fullMessage; - private byte[] recoveredMessage; - - private byte[] preSig; - private byte[] preBlock; - private int preMStart; - private int preTLength; - - /// - /// Generate a signer with either implicit or explicit trailers for ISO9796-2, scheme 2 or 3. - /// - /// base cipher to use for signature creation/verification - /// digest to use. - /// length of salt in bytes. - /// whether or not the trailer is implicit or gives the hash. - public Iso9796d2PssSigner( - IAsymmetricBlockCipher cipher, - IDigest digest, - int saltLength, - bool isImplicit) - { - this.cipher = cipher; - this.digest = digest; - this.hLen = digest.GetDigestSize(); - this.saltLength = saltLength; - - if (isImplicit) - { - trailer = IsoTrailers.TRAILER_IMPLICIT; - } - else if (IsoTrailers.NoTrailerAvailable(digest)) - { - throw new ArgumentException("no valid trailer", "digest"); - } - else - { - trailer = IsoTrailers.GetTrailer(digest); - } - } - - /// Constructor for a signer with an explicit digest trailer. - /// - /// - /// cipher to use. - /// - /// digest to sign with. - /// - /// length of salt in bytes. - /// - public Iso9796d2PssSigner( - IAsymmetricBlockCipher cipher, - IDigest digest, - int saltLength) - : this(cipher, digest, saltLength, false) - { - } - - public virtual string AlgorithmName - { - get { return digest.AlgorithmName + "with" + "ISO9796-2S2"; } - } - - /// Initialise the signer. - /// true if for signing, false if for verification. - /// parameters for signature generation/verification. If the - /// parameters are for generation they should be a ParametersWithRandom, - /// a ParametersWithSalt, or just an RsaKeyParameters object. If RsaKeyParameters - /// are passed in a SecureRandom will be created. - /// - /// if wrong parameter type or a fixed - /// salt is passed in which is the wrong length. - /// - public virtual void Init( - bool forSigning, - ICipherParameters parameters) - { - RsaKeyParameters kParam; - if (parameters is ParametersWithRandom) - { - ParametersWithRandom p = (ParametersWithRandom) parameters; - - kParam = (RsaKeyParameters) p.Parameters; - - if (forSigning) - { - random = p.Random; - } - } - else if (parameters is ParametersWithSalt) - { - if (!forSigning) - throw new ArgumentException("ParametersWithSalt only valid for signing", "parameters"); - - ParametersWithSalt p = (ParametersWithSalt) parameters; - - kParam = (RsaKeyParameters) p.Parameters; - standardSalt = p.GetSalt(); - - if (standardSalt.Length != saltLength) - throw new ArgumentException("Fixed salt is of wrong length"); - } - else - { - kParam = (RsaKeyParameters) parameters; - - if (forSigning) - { - random = new SecureRandom(); - } - } - - cipher.Init(forSigning, kParam); - - keyBits = kParam.Modulus.BitLength; - - block = new byte[(keyBits + 7) / 8]; - - if (trailer == IsoTrailers.TRAILER_IMPLICIT) - { - mBuf = new byte[block.Length - digest.GetDigestSize() - saltLength - 1 - 1]; - } - else - { - mBuf = new byte[block.Length - digest.GetDigestSize() - saltLength - 1 - 2]; - } - - Reset(); - } - - /// compare two byte arrays - constant time. - private bool IsSameAs(byte[] a, byte[] b) - { - if (messageLength != b.Length) - { - return false; - } - - bool isOkay = true; - - for (int i = 0; i != b.Length; i++) - { - if (a[i] != b[i]) - { - isOkay = false; - } - } - - return isOkay; - } - - /// clear possible sensitive data - private void ClearBlock( - byte[] block) - { - Array.Clear(block, 0, block.Length); - } - - public virtual void UpdateWithRecoveredMessage( - byte[] signature) - { - byte[] block = cipher.ProcessBlock(signature, 0, signature.Length); - - // - // adjust block size for leading zeroes if necessary - // - if (block.Length < (keyBits + 7) / 8) - { - byte[] tmp = new byte[(keyBits + 7) / 8]; - - Array.Copy(block, 0, tmp, tmp.Length - block.Length, block.Length); - ClearBlock(block); - block = tmp; - } - - int tLength; - - if (((block[block.Length - 1] & 0xFF) ^ 0xBC) == 0) - { - tLength = 1; - } - else - { - int sigTrail = ((block[block.Length - 2] & 0xFF) << 8) | (block[block.Length - 1] & 0xFF); - - if (IsoTrailers.NoTrailerAvailable(digest)) - throw new ArgumentException("unrecognised hash in signature"); - - if (sigTrail != IsoTrailers.GetTrailer(digest)) - throw new InvalidOperationException("signer initialised with wrong digest for trailer " + sigTrail); - - tLength = 2; - } - - // - // calculate H(m2) - // - byte[] m2Hash = new byte[hLen]; - digest.DoFinal(m2Hash, 0); - - // - // remove the mask - // - byte[] dbMask = MaskGeneratorFunction1(block, block.Length - hLen - tLength, hLen, block.Length - hLen - tLength); - for (int i = 0; i != dbMask.Length; i++) - { - block[i] ^= dbMask[i]; - } - - block[0] &= 0x7f; - - // - // find out how much padding we've got - // - int mStart = 0; - - while (mStart < block.Length) - { - if (block[mStart++] == 0x01) - break; - } - - if (mStart >= block.Length) - { - ClearBlock(block); - } - - fullMessage = (mStart > 1); - - recoveredMessage = new byte[dbMask.Length - mStart - saltLength]; - - Array.Copy(block, mStart, recoveredMessage, 0, recoveredMessage.Length); - recoveredMessage.CopyTo(mBuf, 0); - - preSig = signature; - preBlock = block; - preMStart = mStart; - preTLength = tLength; - } - - /// update the internal digest with the byte b - public virtual void Update( - byte input) - { - if (preSig == null && messageLength < mBuf.Length) - { - mBuf[messageLength++] = input; - } - else - { - digest.Update(input); - } - } - - /// update the internal digest with the byte array in - public virtual void BlockUpdate( - byte[] input, - int inOff, - int length) - { - if (preSig == null) - { - while (length > 0 && messageLength < mBuf.Length) - { - this.Update(input[inOff]); - inOff++; - length--; - } - } - - if (length > 0) - { - digest.BlockUpdate(input, inOff, length); - } - } - - /// reset the internal state - public virtual void Reset() - { - digest.Reset(); - messageLength = 0; - if (mBuf != null) - { - ClearBlock(mBuf); - } - if (recoveredMessage != null) - { - ClearBlock(recoveredMessage); - recoveredMessage = null; - } - fullMessage = false; - if (preSig != null) - { - preSig = null; - ClearBlock(preBlock); - preBlock = null; - } - } - - /// Generate a signature for the loaded message using the key we were - /// initialised with. - /// - public virtual byte[] GenerateSignature() - { - int digSize = digest.GetDigestSize(); - byte[] m2Hash = new byte[digSize]; - digest.DoFinal(m2Hash, 0); - - byte[] C = new byte[8]; - LtoOSP(messageLength * 8, C); - - digest.BlockUpdate(C, 0, C.Length); - digest.BlockUpdate(mBuf, 0, messageLength); - digest.BlockUpdate(m2Hash, 0, m2Hash.Length); - - byte[] salt; - if (standardSalt != null) - { - salt = standardSalt; - } - else - { - salt = new byte[saltLength]; - random.NextBytes(salt); - } - - digest.BlockUpdate(salt, 0, salt.Length); - - byte[] hash = new byte[digest.GetDigestSize()]; - digest.DoFinal(hash, 0); - - int tLength = 2; - if (trailer == IsoTrailers.TRAILER_IMPLICIT) - { - tLength = 1; - } - - int off = block.Length - messageLength - salt.Length - hLen - tLength - 1; - - block[off] = (byte) (0x01); - - Array.Copy(mBuf, 0, block, off + 1, messageLength); - Array.Copy(salt, 0, block, off + 1 + messageLength, salt.Length); - - byte[] dbMask = MaskGeneratorFunction1(hash, 0, hash.Length, block.Length - hLen - tLength); - for (int i = 0; i != dbMask.Length; i++) - { - block[i] ^= dbMask[i]; - } - - Array.Copy(hash, 0, block, block.Length - hLen - tLength, hLen); - - if (trailer == IsoTrailers.TRAILER_IMPLICIT) - { - block[block.Length - 1] = (byte)IsoTrailers.TRAILER_IMPLICIT; - } - else - { - block[block.Length - 2] = (byte) ((uint)trailer >> 8); - block[block.Length - 1] = (byte) trailer; - } - - block[0] &= (byte) (0x7f); - - byte[] b = cipher.ProcessBlock(block, 0, block.Length); - - ClearBlock(mBuf); - ClearBlock(block); - messageLength = 0; - - return b; - } - - /// return true if the signature represents a ISO9796-2 signature - /// for the passed in message. - /// - public virtual bool VerifySignature( - byte[] signature) - { - // - // calculate H(m2) - // - byte[] m2Hash = new byte[hLen]; - digest.DoFinal(m2Hash, 0); - - byte[] block; - int tLength; - int mStart = 0; - - if (preSig == null) - { - try - { - UpdateWithRecoveredMessage(signature); - } - catch (Exception) - { - return false; - } - } - else - { - if (!Arrays.AreEqual(preSig, signature)) - { - throw new InvalidOperationException("UpdateWithRecoveredMessage called on different signature"); - } - } - - block = preBlock; - mStart = preMStart; - tLength = preTLength; - - preSig = null; - preBlock = null; - - // - // check the hashes - // - byte[] C = new byte[8]; - LtoOSP(recoveredMessage.Length * 8, C); - - digest.BlockUpdate(C, 0, C.Length); - - if (recoveredMessage.Length != 0) - { - digest.BlockUpdate(recoveredMessage, 0, recoveredMessage.Length); - } - - digest.BlockUpdate(m2Hash, 0, m2Hash.Length); - - // Update for the salt - if (standardSalt != null) - { - digest.BlockUpdate(standardSalt, 0, standardSalt.Length); - } - else - { - digest.BlockUpdate(block, mStart + recoveredMessage.Length, saltLength); - } - - byte[] hash = new byte[digest.GetDigestSize()]; - digest.DoFinal(hash, 0); - - int off = block.Length - tLength - hash.Length; - - bool isOkay = true; - - for (int i = 0; i != hash.Length; i++) - { - if (hash[i] != block[off + i]) - { - isOkay = false; - } - } - - ClearBlock(block); - ClearBlock(hash); - - if (!isOkay) - { - fullMessage = false; - messageLength = 0; - ClearBlock(recoveredMessage); - return false; - } - - // - // if they've input a message check what we've recovered against - // what was input. - // - if (messageLength != 0) - { - if (!IsSameAs(mBuf, recoveredMessage)) - { - messageLength = 0; - ClearBlock(mBuf); - return false; - } - } - - messageLength = 0; - - ClearBlock(mBuf); - return true; - } - - /// - /// Return true if the full message was recoveredMessage. - /// - /// true on full message recovery, false otherwise, or if not sure. - /// - public virtual bool HasFullMessage() - { - return fullMessage; - } - - /// int to octet string. - /// int to octet string. - private void ItoOSP( - int i, - byte[] sp) - { - sp[0] = (byte)((uint)i >> 24); - sp[1] = (byte)((uint)i >> 16); - sp[2] = (byte)((uint)i >> 8); - sp[3] = (byte)((uint)i >> 0); - } - - /// long to octet string. - private void LtoOSP(long l, byte[] sp) - { - sp[0] = (byte)((ulong)l >> 56); - sp[1] = (byte)((ulong)l >> 48); - sp[2] = (byte)((ulong)l >> 40); - sp[3] = (byte)((ulong)l >> 32); - sp[4] = (byte)((ulong)l >> 24); - sp[5] = (byte)((ulong)l >> 16); - sp[6] = (byte)((ulong)l >> 8); - sp[7] = (byte)((ulong)l >> 0); - } - - /// mask generator function, as described in Pkcs1v2. - private byte[] MaskGeneratorFunction1( - byte[] Z, - int zOff, - int zLen, - int length) - { - byte[] mask = new byte[length]; - byte[] hashBuf = new byte[hLen]; - byte[] C = new byte[4]; - int counter = 0; - - digest.Reset(); - - do - { - ItoOSP(counter, C); - - digest.BlockUpdate(Z, zOff, zLen); - digest.BlockUpdate(C, 0, C.Length); - digest.DoFinal(hashBuf, 0); - - Array.Copy(hashBuf, 0, mask, counter * hLen, hLen); - } - while (++counter < (length / hLen)); - - if ((counter * hLen) < length) - { - ItoOSP(counter, C); - - digest.BlockUpdate(Z, zOff, zLen); - digest.BlockUpdate(C, 0, C.Length); - digest.DoFinal(hashBuf, 0); - - Array.Copy(hashBuf, 0, mask, counter * hLen, mask.Length - (counter * hLen)); - } - - return mask; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/signers/Iso9796d2Signer.cs b/bc-sharp-crypto/src/crypto/signers/Iso9796d2Signer.cs deleted file mode 100644 index 3039130..0000000 --- a/bc-sharp-crypto/src/crypto/signers/Iso9796d2Signer.cs +++ /dev/null @@ -1,556 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Signers -{ - /// ISO9796-2 - mechanism using a hash function with recovery (scheme 1) - public class Iso9796d2Signer : ISignerWithRecovery - { - /// - /// Return a reference to the recoveredMessage message. - /// - /// The full/partial recoveredMessage message. - /// - public byte[] GetRecoveredMessage() - { - return recoveredMessage; - } - - [Obsolete("Use 'IsoTrailers' instead")] - public const int TrailerImplicit = 0xBC; - [Obsolete("Use 'IsoTrailers' instead")] - public const int TrailerRipeMD160 = 0x31CC; - [Obsolete("Use 'IsoTrailers' instead")] - public const int TrailerRipeMD128 = 0x32CC; - [Obsolete("Use 'IsoTrailers' instead")] - public const int TrailerSha1 = 0x33CC; - [Obsolete("Use 'IsoTrailers' instead")] - public const int TrailerSha256 = 0x34CC; - [Obsolete("Use 'IsoTrailers' instead")] - public const int TrailerSha512 = 0x35CC; - [Obsolete("Use 'IsoTrailers' instead")] - public const int TrailerSha384 = 0x36CC; - [Obsolete("Use 'IsoTrailers' instead")] - public const int TrailerWhirlpool = 0x37CC; - - private IDigest digest; - private IAsymmetricBlockCipher cipher; - - private int trailer; - private int keyBits; - private byte[] block; - private byte[] mBuf; - private int messageLength; - private bool fullMessage; - private byte[] recoveredMessage; - - private byte[] preSig; - private byte[] preBlock; - - /// - /// Generate a signer with either implicit or explicit trailers for ISO9796-2. - /// - /// base cipher to use for signature creation/verification - /// digest to use. - /// whether or not the trailer is implicit or gives the hash. - public Iso9796d2Signer( - IAsymmetricBlockCipher cipher, - IDigest digest, - bool isImplicit) - { - this.cipher = cipher; - this.digest = digest; - - if (isImplicit) - { - trailer = IsoTrailers.TRAILER_IMPLICIT; - } - else if (IsoTrailers.NoTrailerAvailable(digest)) - { - throw new ArgumentException("no valid trailer", "digest"); - } - else - { - trailer = IsoTrailers.GetTrailer(digest); - } - } - - /// Constructor for a signer with an explicit digest trailer. - /// - /// - /// cipher to use. - /// - /// digest to sign with. - /// - public Iso9796d2Signer(IAsymmetricBlockCipher cipher, IDigest digest) - : this(cipher, digest, false) - { - } - - public virtual string AlgorithmName - { - get { return digest.AlgorithmName + "with" + "ISO9796-2S1"; } - } - - public virtual void Init(bool forSigning, ICipherParameters parameters) - { - RsaKeyParameters kParam = (RsaKeyParameters) parameters; - - cipher.Init(forSigning, kParam); - - keyBits = kParam.Modulus.BitLength; - - block = new byte[(keyBits + 7) / 8]; - if (trailer == IsoTrailers.TRAILER_IMPLICIT) - { - mBuf = new byte[block.Length - digest.GetDigestSize() - 2]; - } - else - { - mBuf = new byte[block.Length - digest.GetDigestSize() - 3]; - } - - Reset(); - } - - /// compare two byte arrays - constant time. - private bool IsSameAs(byte[] a, byte[] b) - { - int checkLen; - if (messageLength > mBuf.Length) - { - if (mBuf.Length > b.Length) - { - return false; - } - - checkLen = mBuf.Length; - } - else - { - if (messageLength != b.Length) - { - return false; - } - - checkLen = b.Length; - } - - bool isOkay = true; - - for (int i = 0; i != checkLen; i++) - { - if (a[i] != b[i]) - { - isOkay = false; - } - } - - return isOkay; - } - - /// clear possible sensitive data - private void ClearBlock( - byte[] block) - { - Array.Clear(block, 0, block.Length); - } - - public virtual void UpdateWithRecoveredMessage( - byte[] signature) - { - byte[] block = cipher.ProcessBlock(signature, 0, signature.Length); - - if (((block[0] & 0xC0) ^ 0x40) != 0) - throw new InvalidCipherTextException("malformed signature"); - - if (((block[block.Length - 1] & 0xF) ^ 0xC) != 0) - throw new InvalidCipherTextException("malformed signature"); - - int delta = 0; - - if (((block[block.Length - 1] & 0xFF) ^ 0xBC) == 0) - { - delta = 1; - } - else - { - int sigTrail = ((block[block.Length - 2] & 0xFF) << 8) | (block[block.Length - 1] & 0xFF); - - if (IsoTrailers.NoTrailerAvailable(digest)) - throw new ArgumentException("unrecognised hash in signature"); - - if (sigTrail != IsoTrailers.GetTrailer(digest)) - throw new InvalidOperationException("signer initialised with wrong digest for trailer " + sigTrail); - - delta = 2; - } - - // - // find out how much padding we've got - // - int mStart = 0; - - for (mStart = 0; mStart != block.Length; mStart++) - { - if (((block[mStart] & 0x0f) ^ 0x0a) == 0) - break; - } - - mStart++; - - int off = block.Length - delta - digest.GetDigestSize(); - - // - // there must be at least one byte of message string - // - if ((off - mStart) <= 0) - throw new InvalidCipherTextException("malformed block"); - - // - // if we contain the whole message as well, check the hash of that. - // - if ((block[0] & 0x20) == 0) - { - fullMessage = true; - - recoveredMessage = new byte[off - mStart]; - Array.Copy(block, mStart, recoveredMessage, 0, recoveredMessage.Length); - } - else - { - fullMessage = false; - - recoveredMessage = new byte[off - mStart]; - Array.Copy(block, mStart, recoveredMessage, 0, recoveredMessage.Length); - } - - preSig = signature; - preBlock = block; - - digest.BlockUpdate(recoveredMessage, 0, recoveredMessage.Length); - messageLength = recoveredMessage.Length; - recoveredMessage.CopyTo(mBuf, 0); - } - - /// update the internal digest with the byte b - public virtual void Update( - byte input) - { - digest.Update(input); - - if (messageLength < mBuf.Length) - { - mBuf[messageLength] = input; - } - - messageLength++; - } - - /// update the internal digest with the byte array in - public virtual void BlockUpdate( - byte[] input, - int inOff, - int length) - { - while (length > 0 && messageLength < mBuf.Length) - { - //for (int i = 0; i < length && (i + messageLength) < mBuf.Length; i++) - //{ - // mBuf[messageLength + i] = input[inOff + i]; - //} - this.Update(input[inOff]); - inOff++; - length--; - } - - digest.BlockUpdate(input, inOff, length); - messageLength += length; - } - - /// reset the internal state - public virtual void Reset() - { - digest.Reset(); - messageLength = 0; - ClearBlock(mBuf); - - if (recoveredMessage != null) - { - ClearBlock(recoveredMessage); - } - - recoveredMessage = null; - fullMessage = false; - - if (preSig != null) - { - preSig = null; - ClearBlock(preBlock); - preBlock = null; - } - } - - /// Generate a signature for the loaded message using the key we were - /// initialised with. - /// - public virtual byte[] GenerateSignature() - { - int digSize = digest.GetDigestSize(); - - int t = 0; - int delta = 0; - - if (trailer == IsoTrailers.TRAILER_IMPLICIT) - { - t = 8; - delta = block.Length - digSize - 1; - digest.DoFinal(block, delta); - block[block.Length - 1] = (byte)IsoTrailers.TRAILER_IMPLICIT; - } - else - { - t = 16; - delta = block.Length - digSize - 2; - digest.DoFinal(block, delta); - block[block.Length - 2] = (byte) ((uint)trailer >> 8); - block[block.Length - 1] = (byte) trailer; - } - - byte header = 0; - int x = (digSize + messageLength) * 8 + t + 4 - keyBits; - - if (x > 0) - { - int mR = messageLength - ((x + 7) / 8); - header = (byte) (0x60); - - delta -= mR; - - Array.Copy(mBuf, 0, block, delta, mR); - } - else - { - header = (byte) (0x40); - delta -= messageLength; - - Array.Copy(mBuf, 0, block, delta, messageLength); - } - - if ((delta - 1) > 0) - { - for (int i = delta - 1; i != 0; i--) - { - block[i] = (byte) 0xbb; - } - block[delta - 1] ^= (byte) 0x01; - block[0] = (byte) 0x0b; - block[0] |= header; - } - else - { - block[0] = (byte) 0x0a; - block[0] |= header; - } - - byte[] b = cipher.ProcessBlock(block, 0, block.Length); - - messageLength = 0; - - ClearBlock(mBuf); - ClearBlock(block); - - return b; - } - - /// return true if the signature represents a ISO9796-2 signature - /// for the passed in message. - /// - public virtual bool VerifySignature(byte[] signature) - { - byte[] block; - - if (preSig == null) - { - try - { - block = cipher.ProcessBlock(signature, 0, signature.Length); - } - catch (Exception) - { - return false; - } - } - else - { - if (!Arrays.AreEqual(preSig, signature)) - throw new InvalidOperationException("updateWithRecoveredMessage called on different signature"); - - block = preBlock; - - preSig = null; - preBlock = null; - } - - if (((block[0] & 0xC0) ^ 0x40) != 0) - return ReturnFalse(block); - - if (((block[block.Length - 1] & 0xF) ^ 0xC) != 0) - return ReturnFalse(block); - - int delta = 0; - - if (((block[block.Length - 1] & 0xFF) ^ 0xBC) == 0) - { - delta = 1; - } - else - { - int sigTrail = ((block[block.Length - 2] & 0xFF) << 8) | (block[block.Length - 1] & 0xFF); - - if (IsoTrailers.NoTrailerAvailable(digest)) - throw new ArgumentException("unrecognised hash in signature"); - - if (sigTrail != IsoTrailers.GetTrailer(digest)) - throw new InvalidOperationException("signer initialised with wrong digest for trailer " + sigTrail); - - delta = 2; - } - - // - // find out how much padding we've got - // - int mStart = 0; - for (; mStart != block.Length; mStart++) - { - if (((block[mStart] & 0x0f) ^ 0x0a) == 0) - { - break; - } - } - - mStart++; - - // - // check the hashes - // - byte[] hash = new byte[digest.GetDigestSize()]; - - int off = block.Length - delta - hash.Length; - - // - // there must be at least one byte of message string - // - if ((off - mStart) <= 0) - { - return ReturnFalse(block); - } - - // - // if we contain the whole message as well, check the hash of that. - // - if ((block[0] & 0x20) == 0) - { - fullMessage = true; - - // check right number of bytes passed in. - if (messageLength > off - mStart) - { - return ReturnFalse(block); - } - - digest.Reset(); - digest.BlockUpdate(block, mStart, off - mStart); - digest.DoFinal(hash, 0); - - bool isOkay = true; - - for (int i = 0; i != hash.Length; i++) - { - block[off + i] ^= hash[i]; - if (block[off + i] != 0) - { - isOkay = false; - } - } - - if (!isOkay) - { - return ReturnFalse(block); - } - - recoveredMessage = new byte[off - mStart]; - Array.Copy(block, mStart, recoveredMessage, 0, recoveredMessage.Length); - } - else - { - fullMessage = false; - - digest.DoFinal(hash, 0); - - bool isOkay = true; - - for (int i = 0; i != hash.Length; i++) - { - block[off + i] ^= hash[i]; - if (block[off + i] != 0) - { - isOkay = false; - } - } - - if (!isOkay) - { - return ReturnFalse(block); - } - - recoveredMessage = new byte[off - mStart]; - Array.Copy(block, mStart, recoveredMessage, 0, recoveredMessage.Length); - } - - // - // if they've input a message check what we've recovered against - // what was input. - // - if (messageLength != 0) - { - if (!IsSameAs(mBuf, recoveredMessage)) - { - return ReturnFalse(block); - } - } - - ClearBlock(mBuf); - ClearBlock(block); - - messageLength = 0; - - return true; - } - - private bool ReturnFalse(byte[] block) - { - messageLength = 0; - - ClearBlock(mBuf); - ClearBlock(block); - - return false; - } - - /// - /// Return true if the full message was recoveredMessage. - /// - /// true on full message recovery, false otherwise. - /// - public virtual bool HasFullMessage() - { - return fullMessage; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/signers/IsoTrailers.cs b/bc-sharp-crypto/src/crypto/signers/IsoTrailers.cs deleted file mode 100644 index 497ffaf..0000000 --- a/bc-sharp-crypto/src/crypto/signers/IsoTrailers.cs +++ /dev/null @@ -1,57 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Crypto.Signers -{ - public class IsoTrailers - { - public const int TRAILER_IMPLICIT = 0xBC; - public const int TRAILER_RIPEMD160 = 0x31CC; - public const int TRAILER_RIPEMD128 = 0x32CC; - public const int TRAILER_SHA1 = 0x33CC; - public const int TRAILER_SHA256 = 0x34CC; - public const int TRAILER_SHA512 = 0x35CC; - public const int TRAILER_SHA384 = 0x36CC; - public const int TRAILER_WHIRLPOOL = 0x37CC; - public const int TRAILER_SHA224 = 0x38CC; - public const int TRAILER_SHA512_224 = 0x39CC; - public const int TRAILER_SHA512_256 = 0x40CC; - - private static IDictionary CreateTrailerMap() - { - IDictionary trailers = Platform.CreateHashtable(); - - trailers.Add("RIPEMD128", TRAILER_RIPEMD128); - trailers.Add("RIPEMD160", TRAILER_RIPEMD160); - - trailers.Add("SHA-1", TRAILER_SHA1); - trailers.Add("SHA-224", TRAILER_SHA224); - trailers.Add("SHA-256", TRAILER_SHA256); - trailers.Add("SHA-384", TRAILER_SHA384); - trailers.Add("SHA-512", TRAILER_SHA512); - trailers.Add("SHA-512/224", TRAILER_SHA512_224); - trailers.Add("SHA-512/256", TRAILER_SHA512_256); - - trailers.Add("Whirlpool", TRAILER_WHIRLPOOL); - - return CollectionUtilities.ReadOnly(trailers); - } - - // IDictionary is (string -> Int32) - private static readonly IDictionary trailerMap = CreateTrailerMap(); - - public static int GetTrailer(IDigest digest) - { - return (int)trailerMap[digest.AlgorithmName]; - } - - public static bool NoTrailerAvailable(IDigest digest) - { - return !trailerMap.Contains(digest.AlgorithmName); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/signers/PssSigner.cs b/bc-sharp-crypto/src/crypto/signers/PssSigner.cs deleted file mode 100644 index 23b7c0f..0000000 --- a/bc-sharp-crypto/src/crypto/signers/PssSigner.cs +++ /dev/null @@ -1,386 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Signers -{ - /// RSA-PSS as described in Pkcs# 1 v 2.1. - ///

- /// Note: the usual value for the salt length is the number of - /// bytes in the hash function.

- /// - public class PssSigner - : ISigner - { - public const byte TrailerImplicit = (byte)0xBC; - - private readonly IDigest contentDigest1, contentDigest2; - private readonly IDigest mgfDigest; - private readonly IAsymmetricBlockCipher cipher; - - private SecureRandom random; - - private int hLen; - private int mgfhLen; - private int sLen; - private bool sSet; - private int emBits; - private byte[] salt; - private byte[] mDash; - private byte[] block; - private byte trailer; - - public static PssSigner CreateRawSigner( - IAsymmetricBlockCipher cipher, - IDigest digest) - { - return new PssSigner(cipher, new NullDigest(), digest, digest, digest.GetDigestSize(), null, TrailerImplicit); - } - - public static PssSigner CreateRawSigner( - IAsymmetricBlockCipher cipher, - IDigest contentDigest, - IDigest mgfDigest, - int saltLen, - byte trailer) - { - return new PssSigner(cipher, new NullDigest(), contentDigest, mgfDigest, saltLen, null, trailer); - } - - public PssSigner( - IAsymmetricBlockCipher cipher, - IDigest digest) - : this(cipher, digest, digest.GetDigestSize()) - { - } - - /// Basic constructor - /// the asymmetric cipher to use. - /// the digest to use. - /// the length of the salt to use (in bytes). - public PssSigner( - IAsymmetricBlockCipher cipher, - IDigest digest, - int saltLen) - : this(cipher, digest, saltLen, TrailerImplicit) - { - } - - /// Basic constructor - /// the asymmetric cipher to use. - /// the digest to use. - /// the fixed salt to be used. - public PssSigner( - IAsymmetricBlockCipher cipher, - IDigest digest, - byte[] salt) - : this(cipher, digest, digest, digest, salt.Length, salt, TrailerImplicit) - { - } - - public PssSigner( - IAsymmetricBlockCipher cipher, - IDigest contentDigest, - IDigest mgfDigest, - int saltLen) - : this(cipher, contentDigest, mgfDigest, saltLen, TrailerImplicit) - { - } - - public PssSigner( - IAsymmetricBlockCipher cipher, - IDigest contentDigest, - IDigest mgfDigest, - byte[] salt) - : this(cipher, contentDigest, contentDigest, mgfDigest, salt.Length, salt, TrailerImplicit) - { - } - - public PssSigner( - IAsymmetricBlockCipher cipher, - IDigest digest, - int saltLen, - byte trailer) - : this(cipher, digest, digest, saltLen, TrailerImplicit) - { - } - - public PssSigner( - IAsymmetricBlockCipher cipher, - IDigest contentDigest, - IDigest mgfDigest, - int saltLen, - byte trailer) - : this(cipher, contentDigest, contentDigest, mgfDigest, saltLen, null, trailer) - { - } - - private PssSigner( - IAsymmetricBlockCipher cipher, - IDigest contentDigest1, - IDigest contentDigest2, - IDigest mgfDigest, - int saltLen, - byte[] salt, - byte trailer) - { - this.cipher = cipher; - this.contentDigest1 = contentDigest1; - this.contentDigest2 = contentDigest2; - this.mgfDigest = mgfDigest; - this.hLen = contentDigest2.GetDigestSize(); - this.mgfhLen = mgfDigest.GetDigestSize(); - this.sLen = saltLen; - this.sSet = salt != null; - if (sSet) - { - this.salt = salt; - } - else - { - this.salt = new byte[saltLen]; - } - this.mDash = new byte[8 + saltLen + hLen]; - this.trailer = trailer; - } - - public virtual string AlgorithmName - { - get { return mgfDigest.AlgorithmName + "withRSAandMGF1"; } - } - - public virtual void Init( - bool forSigning, - ICipherParameters parameters) - { - if (parameters is ParametersWithRandom) - { - ParametersWithRandom p = (ParametersWithRandom) parameters; - - parameters = p.Parameters; - random = p.Random; - } - else - { - if (forSigning) - { - random = new SecureRandom(); - } - } - - cipher.Init(forSigning, parameters); - - RsaKeyParameters kParam; - if (parameters is RsaBlindingParameters) - { - kParam = ((RsaBlindingParameters) parameters).PublicKey; - } - else - { - kParam = (RsaKeyParameters) parameters; - } - - emBits = kParam.Modulus.BitLength - 1; - - if (emBits < (8 * hLen + 8 * sLen + 9)) - throw new ArgumentException("key too small for specified hash and salt lengths"); - - block = new byte[(emBits + 7) / 8]; - } - - /// clear possible sensitive data - private void ClearBlock( - byte[] block) - { - Array.Clear(block, 0, block.Length); - } - - /// update the internal digest with the byte b - public virtual void Update( - byte input) - { - contentDigest1.Update(input); - } - - /// update the internal digest with the byte array in - public virtual void BlockUpdate( - byte[] input, - int inOff, - int length) - { - contentDigest1.BlockUpdate(input, inOff, length); - } - - /// reset the internal state - public virtual void Reset() - { - contentDigest1.Reset(); - } - - /// Generate a signature for the message we've been loaded with using - /// the key we were initialised with. - /// - public virtual byte[] GenerateSignature() - { - contentDigest1.DoFinal(mDash, mDash.Length - hLen - sLen); - - if (sLen != 0) - { - if (!sSet) - { - random.NextBytes(salt); - } - salt.CopyTo(mDash, mDash.Length - sLen); - } - - byte[] h = new byte[hLen]; - - contentDigest2.BlockUpdate(mDash, 0, mDash.Length); - - contentDigest2.DoFinal(h, 0); - - block[block.Length - sLen - 1 - hLen - 1] = (byte) (0x01); - salt.CopyTo(block, block.Length - sLen - hLen - 1); - - byte[] dbMask = MaskGeneratorFunction1(h, 0, h.Length, block.Length - hLen - 1); - for (int i = 0; i != dbMask.Length; i++) - { - block[i] ^= dbMask[i]; - } - - block[0] &= (byte) ((0xff >> ((block.Length * 8) - emBits))); - - h.CopyTo(block, block.Length - hLen - 1); - - block[block.Length - 1] = trailer; - - byte[] b = cipher.ProcessBlock(block, 0, block.Length); - - ClearBlock(block); - - return b; - } - - /// return true if the internal state represents the signature described - /// in the passed in array. - /// - public virtual bool VerifySignature( - byte[] signature) - { - contentDigest1.DoFinal(mDash, mDash.Length - hLen - sLen); - - byte[] b = cipher.ProcessBlock(signature, 0, signature.Length); - b.CopyTo(block, block.Length - b.Length); - - if (block[block.Length - 1] != trailer) - { - ClearBlock(block); - return false; - } - - byte[] dbMask = MaskGeneratorFunction1(block, block.Length - hLen - 1, hLen, block.Length - hLen - 1); - - for (int i = 0; i != dbMask.Length; i++) - { - block[i] ^= dbMask[i]; - } - - block[0] &= (byte) ((0xff >> ((block.Length * 8) - emBits))); - - for (int i = 0; i != block.Length - hLen - sLen - 2; i++) - { - if (block[i] != 0) - { - ClearBlock(block); - return false; - } - } - - if (block[block.Length - hLen - sLen - 2] != 0x01) - { - ClearBlock(block); - return false; - } - - if (sSet) - { - Array.Copy(salt, 0, mDash, mDash.Length - sLen, sLen); - } - else - { - Array.Copy(block, block.Length - sLen - hLen - 1, mDash, mDash.Length - sLen, sLen); - } - - contentDigest2.BlockUpdate(mDash, 0, mDash.Length); - contentDigest2.DoFinal(mDash, mDash.Length - hLen); - - for (int i = block.Length - hLen - 1, j = mDash.Length - hLen; j != mDash.Length; i++, j++) - { - if ((block[i] ^ mDash[j]) != 0) - { - ClearBlock(mDash); - ClearBlock(block); - return false; - } - } - - ClearBlock(mDash); - ClearBlock(block); - - return true; - } - - /// int to octet string. - private void ItoOSP( - int i, - byte[] sp) - { - sp[0] = (byte)((uint) i >> 24); - sp[1] = (byte)((uint) i >> 16); - sp[2] = (byte)((uint) i >> 8); - sp[3] = (byte)((uint) i >> 0); - } - - /// mask generator function, as described in Pkcs1v2. - private byte[] MaskGeneratorFunction1( - byte[] Z, - int zOff, - int zLen, - int length) - { - byte[] mask = new byte[length]; - byte[] hashBuf = new byte[mgfhLen]; - byte[] C = new byte[4]; - int counter = 0; - - mgfDigest.Reset(); - - while (counter < (length / mgfhLen)) - { - ItoOSP(counter, C); - - mgfDigest.BlockUpdate(Z, zOff, zLen); - mgfDigest.BlockUpdate(C, 0, C.Length); - mgfDigest.DoFinal(hashBuf, 0); - - hashBuf.CopyTo(mask, counter * mgfhLen); - ++counter; - } - - if ((counter * mgfhLen) < length) - { - ItoOSP(counter, C); - - mgfDigest.BlockUpdate(Z, zOff, zLen); - mgfDigest.BlockUpdate(C, 0, C.Length); - mgfDigest.DoFinal(hashBuf, 0); - - Array.Copy(hashBuf, 0, mask, counter * mgfhLen, mask.Length - (counter * mgfhLen)); - } - - return mask; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/signers/RandomDsaKCalculator.cs b/bc-sharp-crypto/src/crypto/signers/RandomDsaKCalculator.cs deleted file mode 100644 index 022cc26..0000000 --- a/bc-sharp-crypto/src/crypto/signers/RandomDsaKCalculator.cs +++ /dev/null @@ -1,44 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Signers -{ - public class RandomDsaKCalculator - : IDsaKCalculator - { - private BigInteger q; - private SecureRandom random; - - public virtual bool IsDeterministic - { - get { return false; } - } - - public virtual void Init(BigInteger n, SecureRandom random) - { - this.q = n; - this.random = random; - } - - public virtual void Init(BigInteger n, BigInteger d, byte[] message) - { - throw new InvalidOperationException("Operation not supported"); - } - - public virtual BigInteger NextK() - { - int qBitLength = q.BitLength; - - BigInteger k; - do - { - k = new BigInteger(qBitLength, random); - } - while (k.SignValue < 1 || k.CompareTo(q) >= 0); - - return k; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/signers/RsaDigestSigner.cs b/bc-sharp-crypto/src/crypto/signers/RsaDigestSigner.cs deleted file mode 100644 index d9b19cf..0000000 --- a/bc-sharp-crypto/src/crypto/signers/RsaDigestSigner.cs +++ /dev/null @@ -1,217 +0,0 @@ -using System; -using System.Collections; -using System.IO; -using System.Text; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.TeleTrust; -using Org.BouncyCastle.Asn1.Utilities; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Encodings; -using Org.BouncyCastle.Crypto.Engines; -using Org.BouncyCastle.Crypto.Signers; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Signers -{ - public class RsaDigestSigner - : ISigner - { - private readonly IAsymmetricBlockCipher rsaEngine = new Pkcs1Encoding(new RsaBlindedEngine()); - private readonly AlgorithmIdentifier algId; - private readonly IDigest digest; - private bool forSigning; - - private static readonly IDictionary oidMap = Platform.CreateHashtable(); - - /// - /// Load oid table. - /// - static RsaDigestSigner() - { - oidMap["RIPEMD128"] = TeleTrusTObjectIdentifiers.RipeMD128; - oidMap["RIPEMD160"] = TeleTrusTObjectIdentifiers.RipeMD160; - oidMap["RIPEMD256"] = TeleTrusTObjectIdentifiers.RipeMD256; - - oidMap["SHA-1"] = X509ObjectIdentifiers.IdSha1; - oidMap["SHA-224"] = NistObjectIdentifiers.IdSha224; - oidMap["SHA-256"] = NistObjectIdentifiers.IdSha256; - oidMap["SHA-384"] = NistObjectIdentifiers.IdSha384; - oidMap["SHA-512"] = NistObjectIdentifiers.IdSha512; - - oidMap["MD2"] = PkcsObjectIdentifiers.MD2; - oidMap["MD4"] = PkcsObjectIdentifiers.MD4; - oidMap["MD5"] = PkcsObjectIdentifiers.MD5; - } - - public RsaDigestSigner(IDigest digest) - : this(digest, (DerObjectIdentifier)oidMap[digest.AlgorithmName]) - { - } - - public RsaDigestSigner(IDigest digest, DerObjectIdentifier digestOid) - : this(digest, new AlgorithmIdentifier(digestOid, DerNull.Instance)) - { - } - - public RsaDigestSigner(IDigest digest, AlgorithmIdentifier algId) - { - this.digest = digest; - this.algId = algId; - } - - public virtual string AlgorithmName - { - get { return digest.AlgorithmName + "withRSA"; } - } - - /** - * Initialise the signer for signing or verification. - * - * @param forSigning true if for signing, false otherwise - * @param param necessary parameters. - */ - public virtual void Init( - bool forSigning, - ICipherParameters parameters) - { - this.forSigning = forSigning; - AsymmetricKeyParameter k; - - if (parameters is ParametersWithRandom) - { - k = (AsymmetricKeyParameter)((ParametersWithRandom)parameters).Parameters; - } - else - { - k = (AsymmetricKeyParameter)parameters; - } - - if (forSigning && !k.IsPrivate) - throw new InvalidKeyException("Signing requires private key."); - - if (!forSigning && k.IsPrivate) - throw new InvalidKeyException("Verification requires public key."); - - Reset(); - - rsaEngine.Init(forSigning, parameters); - } - - /** - * update the internal digest with the byte b - */ - public virtual void Update( - byte input) - { - digest.Update(input); - } - - /** - * update the internal digest with the byte array in - */ - public virtual void BlockUpdate( - byte[] input, - int inOff, - int length) - { - digest.BlockUpdate(input, inOff, length); - } - - /** - * Generate a signature for the message we've been loaded with using - * the key we were initialised with. - */ - public virtual byte[] GenerateSignature() - { - if (!forSigning) - throw new InvalidOperationException("RsaDigestSigner not initialised for signature generation."); - - byte[] hash = new byte[digest.GetDigestSize()]; - digest.DoFinal(hash, 0); - - byte[] data = DerEncode(hash); - return rsaEngine.ProcessBlock(data, 0, data.Length); - } - - /** - * return true if the internal state represents the signature described - * in the passed in array. - */ - public virtual bool VerifySignature( - byte[] signature) - { - if (forSigning) - throw new InvalidOperationException("RsaDigestSigner not initialised for verification"); - - byte[] hash = new byte[digest.GetDigestSize()]; - digest.DoFinal(hash, 0); - - byte[] sig; - byte[] expected; - - try - { - sig = rsaEngine.ProcessBlock(signature, 0, signature.Length); - expected = DerEncode(hash); - } - catch (Exception) - { - return false; - } - - if (sig.Length == expected.Length) - { - return Arrays.ConstantTimeAreEqual(sig, expected); - } - else if (sig.Length == expected.Length - 2) // NULL left out - { - int sigOffset = sig.Length - hash.Length - 2; - int expectedOffset = expected.Length - hash.Length - 2; - - expected[1] -= 2; // adjust lengths - expected[3] -= 2; - - int nonEqual = 0; - - for (int i = 0; i < hash.Length; i++) - { - nonEqual |= (sig[sigOffset + i] ^ expected[expectedOffset + i]); - } - - for (int i = 0; i < sigOffset; i++) - { - nonEqual |= (sig[i] ^ expected[i]); // check header less NULL - } - - return nonEqual == 0; - } - else - { - return false; - } - } - - public virtual void Reset() - { - digest.Reset(); - } - - private byte[] DerEncode(byte[] hash) - { - if (algId == null) - { - // For raw RSA, the DigestInfo must be prepared externally - return hash; - } - - DigestInfo dInfo = new DigestInfo(algId, hash); - - return dInfo.GetDerEncoded(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/signers/X931Signer.cs b/bc-sharp-crypto/src/crypto/signers/X931Signer.cs deleted file mode 100644 index c6e44ba..0000000 --- a/bc-sharp-crypto/src/crypto/signers/X931Signer.cs +++ /dev/null @@ -1,225 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Signers -{ - /** - * X9.31-1998 - signing using a hash. - *

- * The message digest hash, H, is encapsulated to form a byte string as follows - *

- * 
-     * EB = 06 || PS || 0xBA || H || TRAILER
-     *
- * where PS is a string of bytes all of value 0xBB of length such that |EB|=|n|, and TRAILER is the ISO/IEC 10118 part number† for the digest. The byte string, EB, is converted to an integer value, the message representative, f. - */ - public class X931Signer - : ISigner - { - [Obsolete("Use 'IsoTrailers' instead")] - public const int TRAILER_IMPLICIT = 0xBC; - [Obsolete("Use 'IsoTrailers' instead")] - public const int TRAILER_RIPEMD160 = 0x31CC; - [Obsolete("Use 'IsoTrailers' instead")] - public const int TRAILER_RIPEMD128 = 0x32CC; - [Obsolete("Use 'IsoTrailers' instead")] - public const int TRAILER_SHA1 = 0x33CC; - [Obsolete("Use 'IsoTrailers' instead")] - public const int TRAILER_SHA256 = 0x34CC; - [Obsolete("Use 'IsoTrailers' instead")] - public const int TRAILER_SHA512 = 0x35CC; - [Obsolete("Use 'IsoTrailers' instead")] - public const int TRAILER_SHA384 = 0x36CC; - [Obsolete("Use 'IsoTrailers' instead")] - public const int TRAILER_WHIRLPOOL = 0x37CC; - [Obsolete("Use 'IsoTrailers' instead")] - public const int TRAILER_SHA224 = 0x38CC; - - private IDigest digest; - private IAsymmetricBlockCipher cipher; - private RsaKeyParameters kParam; - - private int trailer; - private int keyBits; - private byte[] block; - - /** - * Generate a signer with either implicit or explicit trailers for X9.31. - * - * @param cipher base cipher to use for signature creation/verification - * @param digest digest to use. - * @param implicit whether or not the trailer is implicit or gives the hash. - */ - public X931Signer(IAsymmetricBlockCipher cipher, IDigest digest, bool isImplicit) - { - this.cipher = cipher; - this.digest = digest; - - if (isImplicit) - { - trailer = IsoTrailers.TRAILER_IMPLICIT; - } - else if (IsoTrailers.NoTrailerAvailable(digest)) - { - throw new ArgumentException("no valid trailer", "digest"); - } - else - { - trailer = IsoTrailers.GetTrailer(digest); - } - } - - public virtual string AlgorithmName - { - get { return digest.AlgorithmName + "with" + cipher.AlgorithmName + "/X9.31"; } - } - - /** - * Constructor for a signer with an explicit digest trailer. - * - * @param cipher cipher to use. - * @param digest digest to sign with. - */ - public X931Signer(IAsymmetricBlockCipher cipher, IDigest digest) - : this(cipher, digest, false) - { - } - - public virtual void Init(bool forSigning, ICipherParameters parameters) - { - kParam = (RsaKeyParameters)parameters; - - cipher.Init(forSigning, kParam); - - keyBits = kParam.Modulus.BitLength; - - block = new byte[(keyBits + 7) / 8]; - - Reset(); - } - - /// clear possible sensitive data - private void ClearBlock(byte[] block) - { - Array.Clear(block, 0, block.Length); - } - - /** - * update the internal digest with the byte b - */ - public virtual void Update(byte b) - { - digest.Update(b); - } - - /** - * update the internal digest with the byte array in - */ - public virtual void BlockUpdate(byte[] input, int off, int len) - { - digest.BlockUpdate(input, off, len); - } - - /** - * reset the internal state - */ - public virtual void Reset() - { - digest.Reset(); - } - - /** - * generate a signature for the loaded message using the key we were - * initialised with. - */ - public virtual byte[] GenerateSignature() - { - CreateSignatureBlock(); - - BigInteger t = new BigInteger(1, cipher.ProcessBlock(block, 0, block.Length)); - ClearBlock(block); - - t = t.Min(kParam.Modulus.Subtract(t)); - - return BigIntegers.AsUnsignedByteArray((kParam.Modulus.BitLength + 7) / 8, t); - } - - private void CreateSignatureBlock() - { - int digSize = digest.GetDigestSize(); - - int delta; - if (trailer == IsoTrailers.TRAILER_IMPLICIT) - { - delta = block.Length - digSize - 1; - digest.DoFinal(block, delta); - block[block.Length - 1] = (byte)IsoTrailers.TRAILER_IMPLICIT; - } - else - { - delta = block.Length - digSize - 2; - digest.DoFinal(block, delta); - block[block.Length - 2] = (byte)(trailer >> 8); - block[block.Length - 1] = (byte)trailer; - } - - block[0] = 0x6b; - for (int i = delta - 2; i != 0; i--) - { - block[i] = (byte)0xbb; - } - block[delta - 1] = (byte)0xba; - } - - /** - * return true if the signature represents a ISO9796-2 signature - * for the passed in message. - */ - public virtual bool VerifySignature(byte[] signature) - { - try - { - block = cipher.ProcessBlock(signature, 0, signature.Length); - } - catch (Exception) - { - return false; - } - - BigInteger t = new BigInteger(1, block); - BigInteger f; - - if ((t.IntValue & 15) == 12) - { - f = t; - } - else - { - t = kParam.Modulus.Subtract(t); - if ((t.IntValue & 15) == 12) - { - f = t; - } - else - { - return false; - } - } - - CreateSignatureBlock(); - - byte[] fBlock = BigIntegers.AsUnsignedByteArray(block.Length, f); - - bool rv = Arrays.ConstantTimeAreEqual(block, fBlock); - - ClearBlock(block); - ClearBlock(fBlock); - - return rv; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/AbstractTlsAgreementCredentials.cs b/bc-sharp-crypto/src/crypto/tls/AbstractTlsAgreementCredentials.cs deleted file mode 100644 index 2d7af80..0000000 --- a/bc-sharp-crypto/src/crypto/tls/AbstractTlsAgreementCredentials.cs +++ /dev/null @@ -1,12 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public abstract class AbstractTlsAgreementCredentials - : AbstractTlsCredentials, TlsAgreementCredentials - { - /// - public abstract byte[] GenerateAgreement(AsymmetricKeyParameter peerPublicKey); - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/AbstractTlsCipherFactory.cs b/bc-sharp-crypto/src/crypto/tls/AbstractTlsCipherFactory.cs deleted file mode 100644 index 141ee65..0000000 --- a/bc-sharp-crypto/src/crypto/tls/AbstractTlsCipherFactory.cs +++ /dev/null @@ -1,15 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class AbstractTlsCipherFactory - : TlsCipherFactory - { - /// - public virtual TlsCipher CreateCipher(TlsContext context, int encryptionAlgorithm, int macAlgorithm) - { - throw new TlsFatalAlert(AlertDescription.internal_error); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/AbstractTlsClient.cs b/bc-sharp-crypto/src/crypto/tls/AbstractTlsClient.cs deleted file mode 100644 index be4702e..0000000 --- a/bc-sharp-crypto/src/crypto/tls/AbstractTlsClient.cs +++ /dev/null @@ -1,256 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public abstract class AbstractTlsClient - : AbstractTlsPeer, TlsClient - { - protected TlsCipherFactory mCipherFactory; - - protected TlsClientContext mContext; - - protected IList mSupportedSignatureAlgorithms; - protected int[] mNamedCurves; - protected byte[] mClientECPointFormats, mServerECPointFormats; - - protected int mSelectedCipherSuite; - protected short mSelectedCompressionMethod; - - public AbstractTlsClient() - : this(new DefaultTlsCipherFactory()) - { - } - - public AbstractTlsClient(TlsCipherFactory cipherFactory) - { - this.mCipherFactory = cipherFactory; - } - - protected virtual bool AllowUnexpectedServerExtension(int extensionType, byte[] extensionData) - { - switch (extensionType) - { - case ExtensionType.elliptic_curves: - /* - * Exception added based on field reports that some servers do send this, although the - * Supported Elliptic Curves Extension is clearly intended to be client-only. If - * present, we still require that it is a valid EllipticCurveList. - */ - TlsEccUtilities.ReadSupportedEllipticCurvesExtension(extensionData); - return true; - default: - return false; - } - } - - protected virtual void CheckForUnexpectedServerExtension(IDictionary serverExtensions, int extensionType) - { - byte[] extensionData = TlsUtilities.GetExtensionData(serverExtensions, extensionType); - if (extensionData != null && !AllowUnexpectedServerExtension(extensionType, extensionData)) - { - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - } - - public virtual void Init(TlsClientContext context) - { - this.mContext = context; - } - - public virtual TlsSession GetSessionToResume() - { - return null; - } - - public virtual ProtocolVersion ClientHelloRecordLayerVersion - { - get - { - // "{03,00}" - //return ProtocolVersion.SSLv3; - - // "the lowest version number supported by the client" - //return MinimumVersion; - - // "the value of ClientHello.client_version" - return ClientVersion; - } - } - - public virtual ProtocolVersion ClientVersion - { - get { return ProtocolVersion.TLSv12; } - } - - public virtual bool IsFallback - { - /* - * RFC 7507 4. The TLS_FALLBACK_SCSV cipher suite value is meant for use by clients that - * repeat a connection attempt with a downgraded protocol (perform a "fallback retry") in - * order to work around interoperability problems with legacy servers. - */ - get { return false; } - } - - public virtual IDictionary GetClientExtensions() - { - IDictionary clientExtensions = null; - - ProtocolVersion clientVersion = mContext.ClientVersion; - - /* - * RFC 5246 7.4.1.4.1. Note: this extension is not meaningful for TLS versions prior to 1.2. - * Clients MUST NOT offer it if they are offering prior versions. - */ - if (TlsUtilities.IsSignatureAlgorithmsExtensionAllowed(clientVersion)) - { - // TODO Provide a way for the user to specify the acceptable hash/signature algorithms. - - this.mSupportedSignatureAlgorithms = TlsUtilities.GetDefaultSupportedSignatureAlgorithms(); - - clientExtensions = TlsExtensionsUtilities.EnsureExtensionsInitialised(clientExtensions); - - TlsUtilities.AddSignatureAlgorithmsExtension(clientExtensions, mSupportedSignatureAlgorithms); - } - - if (TlsEccUtilities.ContainsEccCipherSuites(GetCipherSuites())) - { - /* - * RFC 4492 5.1. A client that proposes ECC cipher suites in its ClientHello message - * appends these extensions (along with any others), enumerating the curves it supports - * and the point formats it can parse. Clients SHOULD send both the Supported Elliptic - * Curves Extension and the Supported Point Formats Extension. - */ - /* - * TODO Could just add all the curves since we support them all, but users may not want - * to use unnecessarily large fields. Need configuration options. - */ - this.mNamedCurves = new int[]{ NamedCurve.secp256r1, NamedCurve.secp384r1 }; - this.mClientECPointFormats = new byte[]{ ECPointFormat.uncompressed, - ECPointFormat.ansiX962_compressed_prime, ECPointFormat.ansiX962_compressed_char2, }; - - clientExtensions = TlsExtensionsUtilities.EnsureExtensionsInitialised(clientExtensions); - - TlsEccUtilities.AddSupportedEllipticCurvesExtension(clientExtensions, mNamedCurves); - TlsEccUtilities.AddSupportedPointFormatsExtension(clientExtensions, mClientECPointFormats); - } - - return clientExtensions; - } - - public virtual ProtocolVersion MinimumVersion - { - get { return ProtocolVersion.TLSv10; } - } - - public virtual void NotifyServerVersion(ProtocolVersion serverVersion) - { - if (!MinimumVersion.IsEqualOrEarlierVersionOf(serverVersion)) - throw new TlsFatalAlert(AlertDescription.protocol_version); - } - - public abstract int[] GetCipherSuites(); - - public virtual byte[] GetCompressionMethods() - { - return new byte[]{ CompressionMethod.cls_null }; - } - - public virtual void NotifySessionID(byte[] sessionID) - { - // Currently ignored - } - - public virtual void NotifySelectedCipherSuite(int selectedCipherSuite) - { - this.mSelectedCipherSuite = selectedCipherSuite; - } - - public virtual void NotifySelectedCompressionMethod(byte selectedCompressionMethod) - { - this.mSelectedCompressionMethod = selectedCompressionMethod; - } - - public virtual void ProcessServerExtensions(IDictionary serverExtensions) - { - /* - * TlsProtocol implementation validates that any server extensions received correspond to - * client extensions sent. By default, we don't send any, and this method is not called. - */ - if (serverExtensions != null) - { - /* - * RFC 5246 7.4.1.4.1. Servers MUST NOT send this extension. - */ - CheckForUnexpectedServerExtension(serverExtensions, ExtensionType.signature_algorithms); - - CheckForUnexpectedServerExtension(serverExtensions, ExtensionType.elliptic_curves); - - if (TlsEccUtilities.IsEccCipherSuite(this.mSelectedCipherSuite)) - { - this.mServerECPointFormats = TlsEccUtilities.GetSupportedPointFormatsExtension(serverExtensions); - } - else - { - CheckForUnexpectedServerExtension(serverExtensions, ExtensionType.ec_point_formats); - } - - /* - * RFC 7685 3. The server MUST NOT echo the extension. - */ - CheckForUnexpectedServerExtension(serverExtensions, ExtensionType.padding); - } - } - - public virtual void ProcessServerSupplementalData(IList serverSupplementalData) - { - if (serverSupplementalData != null) - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - - public abstract TlsKeyExchange GetKeyExchange(); - - public abstract TlsAuthentication GetAuthentication(); - - public virtual IList GetClientSupplementalData() - { - return null; - } - - public override TlsCompression GetCompression() - { - switch (mSelectedCompressionMethod) - { - case CompressionMethod.cls_null: - return new TlsNullCompression(); - - case CompressionMethod.DEFLATE: - return new TlsDeflateCompression(); - - default: - /* - * Note: internal error here; the TlsProtocol implementation verifies that the - * server-selected compression method was in the list of client-offered compression - * methods, so if we now can't produce an implementation, we shouldn't have offered it! - */ - throw new TlsFatalAlert(AlertDescription.internal_error); - } - } - - public override TlsCipher GetCipher() - { - int encryptionAlgorithm = TlsUtilities.GetEncryptionAlgorithm(mSelectedCipherSuite); - int macAlgorithm = TlsUtilities.GetMacAlgorithm(mSelectedCipherSuite); - - return mCipherFactory.CreateCipher(mContext, encryptionAlgorithm, macAlgorithm); - } - - public virtual void NotifyNewSessionTicket(NewSessionTicket newSessionTicket) - { - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/AbstractTlsContext.cs b/bc-sharp-crypto/src/crypto/tls/AbstractTlsContext.cs deleted file mode 100644 index ae7efc6..0000000 --- a/bc-sharp-crypto/src/crypto/tls/AbstractTlsContext.cs +++ /dev/null @@ -1,152 +0,0 @@ -using System; -using System.Threading; - -using Org.BouncyCastle.Crypto.Prng; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - internal abstract class AbstractTlsContext - : TlsContext - { - private static long counter = Times.NanoTime(); - -#if NETCF_1_0 - private static object counterLock = new object(); - private static long NextCounterValue() - { - lock (counterLock) - { - return ++counter; - } - } -#else - private static long NextCounterValue() - { - return Interlocked.Increment(ref counter); - } -#endif - - private readonly IRandomGenerator mNonceRandom; - private readonly SecureRandom mSecureRandom; - private readonly SecurityParameters mSecurityParameters; - - private ProtocolVersion mClientVersion = null; - private ProtocolVersion mServerVersion = null; - private TlsSession mSession = null; - private object mUserObject = null; - - internal AbstractTlsContext(SecureRandom secureRandom, SecurityParameters securityParameters) - { - IDigest d = TlsUtilities.CreateHash(HashAlgorithm.sha256); - byte[] seed = new byte[d.GetDigestSize()]; - secureRandom.NextBytes(seed); - - this.mNonceRandom = new DigestRandomGenerator(d); - mNonceRandom.AddSeedMaterial(NextCounterValue()); - mNonceRandom.AddSeedMaterial(Times.NanoTime()); - mNonceRandom.AddSeedMaterial(seed); - - this.mSecureRandom = secureRandom; - this.mSecurityParameters = securityParameters; - } - - public virtual IRandomGenerator NonceRandomGenerator - { - get { return mNonceRandom; } - } - - public virtual SecureRandom SecureRandom - { - get { return mSecureRandom; } - } - - public virtual SecurityParameters SecurityParameters - { - get { return mSecurityParameters; } - } - - public abstract bool IsServer { get; } - - public virtual ProtocolVersion ClientVersion - { - get { return mClientVersion; } - } - - internal virtual void SetClientVersion(ProtocolVersion clientVersion) - { - this.mClientVersion = clientVersion; - } - - public virtual ProtocolVersion ServerVersion - { - get { return mServerVersion; } - } - - internal virtual void SetServerVersion(ProtocolVersion serverVersion) - { - this.mServerVersion = serverVersion; - } - - public virtual TlsSession ResumableSession - { - get { return mSession; } - } - - internal virtual void SetResumableSession(TlsSession session) - { - this.mSession = session; - } - - public virtual object UserObject - { - get { return mUserObject; } - set { this.mUserObject = value; } - } - - public virtual byte[] ExportKeyingMaterial(string asciiLabel, byte[] context_value, int length) - { - /* - * TODO[session-hash] - * - * draft-ietf-tls-session-hash-04 5.4. If a client or server chooses to continue with a full - * handshake without the extended master secret extension, [..] the client or server MUST - * NOT export any key material based on the new master secret for any subsequent - * application-level authentication. In particular, it MUST disable [RFC5705] [..]. - */ - - if (context_value != null && !TlsUtilities.IsValidUint16(context_value.Length)) - throw new ArgumentException("must have length less than 2^16 (or be null)", "context_value"); - - SecurityParameters sp = SecurityParameters; - byte[] cr = sp.ClientRandom, sr = sp.ServerRandom; - - int seedLength = cr.Length + sr.Length; - if (context_value != null) - { - seedLength += (2 + context_value.Length); - } - - byte[] seed = new byte[seedLength]; - int seedPos = 0; - - Array.Copy(cr, 0, seed, seedPos, cr.Length); - seedPos += cr.Length; - Array.Copy(sr, 0, seed, seedPos, sr.Length); - seedPos += sr.Length; - if (context_value != null) - { - TlsUtilities.WriteUint16(context_value.Length, seed, seedPos); - seedPos += 2; - Array.Copy(context_value, 0, seed, seedPos, context_value.Length); - seedPos += context_value.Length; - } - - if (seedPos != seedLength) - throw new InvalidOperationException("error in calculation of seed for export"); - - return TlsUtilities.PRF(this, sp.MasterSecret, asciiLabel, seed, length); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/AbstractTlsCredentials.cs b/bc-sharp-crypto/src/crypto/tls/AbstractTlsCredentials.cs deleted file mode 100644 index 6411b81..0000000 --- a/bc-sharp-crypto/src/crypto/tls/AbstractTlsCredentials.cs +++ /dev/null @@ -1,10 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public abstract class AbstractTlsCredentials - : TlsCredentials - { - public abstract Certificate Certificate { get; } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/AbstractTlsEncryptionCredentials.cs b/bc-sharp-crypto/src/crypto/tls/AbstractTlsEncryptionCredentials.cs deleted file mode 100644 index 05b129c..0000000 --- a/bc-sharp-crypto/src/crypto/tls/AbstractTlsEncryptionCredentials.cs +++ /dev/null @@ -1,12 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public abstract class AbstractTlsEncryptionCredentials - : AbstractTlsCredentials, TlsEncryptionCredentials - { - /// - public abstract byte[] DecryptPreMasterSecret(byte[] encryptedPreMasterSecret); - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/AbstractTlsKeyExchange.cs b/bc-sharp-crypto/src/crypto/tls/AbstractTlsKeyExchange.cs deleted file mode 100644 index 294b249..0000000 --- a/bc-sharp-crypto/src/crypto/tls/AbstractTlsKeyExchange.cs +++ /dev/null @@ -1,177 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public abstract class AbstractTlsKeyExchange - : TlsKeyExchange - { - protected readonly int mKeyExchange; - protected IList mSupportedSignatureAlgorithms; - - protected TlsContext mContext; - - protected AbstractTlsKeyExchange(int keyExchange, IList supportedSignatureAlgorithms) - { - this.mKeyExchange = keyExchange; - this.mSupportedSignatureAlgorithms = supportedSignatureAlgorithms; - } - - protected virtual DigitallySigned ParseSignature(Stream input) - { - DigitallySigned signature = DigitallySigned.Parse(mContext, input); - SignatureAndHashAlgorithm signatureAlgorithm = signature.Algorithm; - if (signatureAlgorithm != null) - { - TlsUtilities.VerifySupportedSignatureAlgorithm(mSupportedSignatureAlgorithms, signatureAlgorithm); - } - return signature; - } - - public virtual void Init(TlsContext context) - { - this.mContext = context; - - ProtocolVersion clientVersion = context.ClientVersion; - - if (TlsUtilities.IsSignatureAlgorithmsExtensionAllowed(clientVersion)) - { - /* - * RFC 5246 7.4.1.4.1. If the client does not send the signature_algorithms extension, - * the server MUST do the following: - * - * - If the negotiated key exchange algorithm is one of (RSA, DHE_RSA, DH_RSA, RSA_PSK, - * ECDH_RSA, ECDHE_RSA), behave as if client had sent the value {sha1,rsa}. - * - * - If the negotiated key exchange algorithm is one of (DHE_DSS, DH_DSS), behave as if - * the client had sent the value {sha1,dsa}. - * - * - If the negotiated key exchange algorithm is one of (ECDH_ECDSA, ECDHE_ECDSA), - * behave as if the client had sent value {sha1,ecdsa}. - */ - if (this.mSupportedSignatureAlgorithms == null) - { - switch (mKeyExchange) - { - case KeyExchangeAlgorithm.DH_DSS: - case KeyExchangeAlgorithm.DHE_DSS: - case KeyExchangeAlgorithm.SRP_DSS: - { - this.mSupportedSignatureAlgorithms = TlsUtilities.GetDefaultDssSignatureAlgorithms(); - break; - } - - case KeyExchangeAlgorithm.ECDH_ECDSA: - case KeyExchangeAlgorithm.ECDHE_ECDSA: - { - this.mSupportedSignatureAlgorithms = TlsUtilities.GetDefaultECDsaSignatureAlgorithms(); - break; - } - - case KeyExchangeAlgorithm.DH_RSA: - case KeyExchangeAlgorithm.DHE_RSA: - case KeyExchangeAlgorithm.ECDH_RSA: - case KeyExchangeAlgorithm.ECDHE_RSA: - case KeyExchangeAlgorithm.RSA: - case KeyExchangeAlgorithm.RSA_PSK: - case KeyExchangeAlgorithm.SRP_RSA: - { - this.mSupportedSignatureAlgorithms = TlsUtilities.GetDefaultRsaSignatureAlgorithms(); - break; - } - - case KeyExchangeAlgorithm.DHE_PSK: - case KeyExchangeAlgorithm.ECDHE_PSK: - case KeyExchangeAlgorithm.PSK: - case KeyExchangeAlgorithm.SRP: - break; - - default: - throw new InvalidOperationException("unsupported key exchange algorithm"); - } - } - - } - else if (this.mSupportedSignatureAlgorithms != null) - { - throw new InvalidOperationException("supported_signature_algorithms not allowed for " + clientVersion); - } - } - - public abstract void SkipServerCredentials(); - - public virtual void ProcessServerCertificate(Certificate serverCertificate) - { - if (mSupportedSignatureAlgorithms == null) - { - /* - * TODO RFC 2246 7.4.2. Unless otherwise specified, the signing algorithm for the - * certificate must be the same as the algorithm for the certificate key. - */ - } - else - { - /* - * TODO RFC 5246 7.4.2. If the client provided a "signature_algorithms" extension, then - * all certificates provided by the server MUST be signed by a hash/signature algorithm - * pair that appears in that extension. - */ - } - } - - public virtual void ProcessServerCredentials(TlsCredentials serverCredentials) - { - ProcessServerCertificate(serverCredentials.Certificate); - } - - public virtual bool RequiresServerKeyExchange - { - get { return false; } - } - - public virtual byte[] GenerateServerKeyExchange() - { - if (RequiresServerKeyExchange) - throw new TlsFatalAlert(AlertDescription.internal_error); - - return null; - } - - public virtual void SkipServerKeyExchange() - { - if (RequiresServerKeyExchange) - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - - public virtual void ProcessServerKeyExchange(Stream input) - { - if (!RequiresServerKeyExchange) - { - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - } - - public abstract void ValidateCertificateRequest(CertificateRequest certificateRequest); - - public virtual void SkipClientCredentials() - { - } - - public abstract void ProcessClientCredentials(TlsCredentials clientCredentials); - - public virtual void ProcessClientCertificate(Certificate clientCertificate) - { - } - - public abstract void GenerateClientKeyExchange(Stream output); - - public virtual void ProcessClientKeyExchange(Stream input) - { - // Key exchange implementation MUST support client key exchange - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - public abstract byte[] GeneratePremasterSecret(); - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/AbstractTlsPeer.cs b/bc-sharp-crypto/src/crypto/tls/AbstractTlsPeer.cs deleted file mode 100644 index 81a5338..0000000 --- a/bc-sharp-crypto/src/crypto/tls/AbstractTlsPeer.cs +++ /dev/null @@ -1,48 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public abstract class AbstractTlsPeer - : TlsPeer - { - public virtual bool ShouldUseGmtUnixTime() - { - /* - * draft-mathewson-no-gmtunixtime-00 2. For the reasons we discuss above, we recommend that - * TLS implementors MUST by default set the entire value the ClientHello.Random and - * ServerHello.Random fields, including gmt_unix_time, to a cryptographically random - * sequence. - */ - return false; - } - - public virtual void NotifySecureRenegotiation(bool secureRenegotiation) - { - if (!secureRenegotiation) - { - /* - * RFC 5746 3.4/3.6. In this case, some clients/servers may want to terminate the handshake instead - * of continuing; see Section 4.1/4.3 for discussion. - */ - throw new TlsFatalAlert(AlertDescription.handshake_failure); - } - } - - public abstract TlsCompression GetCompression(); - - public abstract TlsCipher GetCipher(); - - public virtual void NotifyAlertRaised(byte alertLevel, byte alertDescription, string message, Exception cause) - { - } - - public virtual void NotifyAlertReceived(byte alertLevel, byte alertDescription) - { - } - - public virtual void NotifyHandshakeComplete() - { - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/AbstractTlsServer.cs b/bc-sharp-crypto/src/crypto/tls/AbstractTlsServer.cs deleted file mode 100644 index 52a79c9..0000000 --- a/bc-sharp-crypto/src/crypto/tls/AbstractTlsServer.cs +++ /dev/null @@ -1,351 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public abstract class AbstractTlsServer - : AbstractTlsPeer, TlsServer - { - protected TlsCipherFactory mCipherFactory; - - protected TlsServerContext mContext; - - protected ProtocolVersion mClientVersion; - protected int[] mOfferedCipherSuites; - protected byte[] mOfferedCompressionMethods; - protected IDictionary mClientExtensions; - - protected bool mEncryptThenMacOffered; - protected short mMaxFragmentLengthOffered; - protected bool mTruncatedHMacOffered; - protected IList mSupportedSignatureAlgorithms; - protected bool mEccCipherSuitesOffered; - protected int[] mNamedCurves; - protected byte[] mClientECPointFormats, mServerECPointFormats; - - protected ProtocolVersion mServerVersion; - protected int mSelectedCipherSuite; - protected byte mSelectedCompressionMethod; - protected IDictionary mServerExtensions; - - public AbstractTlsServer() - : this(new DefaultTlsCipherFactory()) - { - } - - public AbstractTlsServer(TlsCipherFactory cipherFactory) - { - this.mCipherFactory = cipherFactory; - } - - protected virtual bool AllowEncryptThenMac - { - get { return true; } - } - - protected virtual bool AllowTruncatedHMac - { - get { return false; } - } - - protected virtual IDictionary CheckServerExtensions() - { - return this.mServerExtensions = TlsExtensionsUtilities.EnsureExtensionsInitialised(this.mServerExtensions); - } - - protected abstract int[] GetCipherSuites(); - - protected byte[] GetCompressionMethods() - { - return new byte[] { CompressionMethod.cls_null }; - } - - protected virtual ProtocolVersion MaximumVersion - { - get { return ProtocolVersion.TLSv11; } - } - - protected virtual ProtocolVersion MinimumVersion - { - get { return ProtocolVersion.TLSv10; } - } - - protected virtual bool SupportsClientEccCapabilities(int[] namedCurves, byte[] ecPointFormats) - { - // NOTE: BC supports all the current set of point formats so we don't check them here - - if (namedCurves == null) - { - /* - * RFC 4492 4. A client that proposes ECC cipher suites may choose not to include these - * extensions. In this case, the server is free to choose any one of the elliptic curves - * or point formats [...]. - */ - return TlsEccUtilities.HasAnySupportedNamedCurves(); - } - - for (int i = 0; i < namedCurves.Length; ++i) - { - int namedCurve = namedCurves[i]; - if (NamedCurve.IsValid(namedCurve) - && (!NamedCurve.RefersToASpecificNamedCurve(namedCurve) || TlsEccUtilities.IsSupportedNamedCurve(namedCurve))) - { - return true; - } - } - - return false; - } - - public virtual void Init(TlsServerContext context) - { - this.mContext = context; - } - - public virtual void NotifyClientVersion(ProtocolVersion clientVersion) - { - this.mClientVersion = clientVersion; - } - - public virtual void NotifyFallback(bool isFallback) - { - /* - * RFC 7507 3. If TLS_FALLBACK_SCSV appears in ClientHello.cipher_suites and the highest - * protocol version supported by the server is higher than the version indicated in - * ClientHello.client_version, the server MUST respond with a fatal inappropriate_fallback - * alert [..]. - */ - if (isFallback && MaximumVersion.IsLaterVersionOf(mClientVersion)) - throw new TlsFatalAlert(AlertDescription.inappropriate_fallback); - } - - public virtual void NotifyOfferedCipherSuites(int[] offeredCipherSuites) - { - this.mOfferedCipherSuites = offeredCipherSuites; - this.mEccCipherSuitesOffered = TlsEccUtilities.ContainsEccCipherSuites(this.mOfferedCipherSuites); - } - - public virtual void NotifyOfferedCompressionMethods(byte[] offeredCompressionMethods) - { - this.mOfferedCompressionMethods = offeredCompressionMethods; - } - - public virtual void ProcessClientExtensions(IDictionary clientExtensions) - { - this.mClientExtensions = clientExtensions; - - if (clientExtensions != null) - { - this.mEncryptThenMacOffered = TlsExtensionsUtilities.HasEncryptThenMacExtension(clientExtensions); - - this.mMaxFragmentLengthOffered = TlsExtensionsUtilities.GetMaxFragmentLengthExtension(clientExtensions); - if (mMaxFragmentLengthOffered >= 0 && !MaxFragmentLength.IsValid((byte)mMaxFragmentLengthOffered)) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - - this.mTruncatedHMacOffered = TlsExtensionsUtilities.HasTruncatedHMacExtension(clientExtensions); - - this.mSupportedSignatureAlgorithms = TlsUtilities.GetSignatureAlgorithmsExtension(clientExtensions); - if (this.mSupportedSignatureAlgorithms != null) - { - /* - * RFC 5246 7.4.1.4.1. Note: this extension is not meaningful for TLS versions prior - * to 1.2. Clients MUST NOT offer it if they are offering prior versions. - */ - if (!TlsUtilities.IsSignatureAlgorithmsExtensionAllowed(mClientVersion)) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - - this.mNamedCurves = TlsEccUtilities.GetSupportedEllipticCurvesExtension(clientExtensions); - this.mClientECPointFormats = TlsEccUtilities.GetSupportedPointFormatsExtension(clientExtensions); - } - - /* - * RFC 4429 4. The client MUST NOT include these extensions in the ClientHello message if it - * does not propose any ECC cipher suites. - * - * NOTE: This was overly strict as there may be ECC cipher suites that we don't recognize. - * Also, draft-ietf-tls-negotiated-ff-dhe will be overloading the 'elliptic_curves' - * extension to explicitly allow FFDHE (i.e. non-ECC) groups. - */ - //if (!this.mEccCipherSuitesOffered && (this.mNamedCurves != null || this.mClientECPointFormats != null)) - // throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - - public virtual ProtocolVersion GetServerVersion() - { - if (MinimumVersion.IsEqualOrEarlierVersionOf(mClientVersion)) - { - ProtocolVersion maximumVersion = MaximumVersion; - if (mClientVersion.IsEqualOrEarlierVersionOf(maximumVersion)) - { - return mServerVersion = mClientVersion; - } - if (mClientVersion.IsLaterVersionOf(maximumVersion)) - { - return mServerVersion = maximumVersion; - } - } - throw new TlsFatalAlert(AlertDescription.protocol_version); - } - - public virtual int GetSelectedCipherSuite() - { - /* - * RFC 5246 7.4.3. In order to negotiate correctly, the server MUST check any candidate - * cipher suites against the "signature_algorithms" extension before selecting them. This is - * somewhat inelegant but is a compromise designed to minimize changes to the original - * cipher suite design. - */ - IList sigAlgs = TlsUtilities.GetUsableSignatureAlgorithms(this.mSupportedSignatureAlgorithms); - - /* - * RFC 4429 5.1. A server that receives a ClientHello containing one or both of these - * extensions MUST use the client's enumerated capabilities to guide its selection of an - * appropriate cipher suite. One of the proposed ECC cipher suites must be negotiated only - * if the server can successfully complete the handshake while using the curves and point - * formats supported by the client [...]. - */ - bool eccCipherSuitesEnabled = SupportsClientEccCapabilities(this.mNamedCurves, this.mClientECPointFormats); - - int[] cipherSuites = GetCipherSuites(); - for (int i = 0; i < cipherSuites.Length; ++i) - { - int cipherSuite = cipherSuites[i]; - - if (Arrays.Contains(this.mOfferedCipherSuites, cipherSuite) - && (eccCipherSuitesEnabled || !TlsEccUtilities.IsEccCipherSuite(cipherSuite)) - && TlsUtilities.IsValidCipherSuiteForVersion(cipherSuite, mServerVersion) - && TlsUtilities.IsValidCipherSuiteForSignatureAlgorithms(cipherSuite, sigAlgs)) - { - return this.mSelectedCipherSuite = cipherSuite; - } - } - throw new TlsFatalAlert(AlertDescription.handshake_failure); - } - - public virtual byte GetSelectedCompressionMethod() - { - byte[] compressionMethods = GetCompressionMethods(); - for (int i = 0; i < compressionMethods.Length; ++i) - { - if (Arrays.Contains(mOfferedCompressionMethods, compressionMethods[i])) - { - return this.mSelectedCompressionMethod = compressionMethods[i]; - } - } - throw new TlsFatalAlert(AlertDescription.handshake_failure); - } - - // IDictionary is (Int32 -> byte[]) - public virtual IDictionary GetServerExtensions() - { - if (this.mEncryptThenMacOffered && AllowEncryptThenMac) - { - /* - * RFC 7366 3. If a server receives an encrypt-then-MAC request extension from a client - * and then selects a stream or Authenticated Encryption with Associated Data (AEAD) - * ciphersuite, it MUST NOT send an encrypt-then-MAC response extension back to the - * client. - */ - if (TlsUtilities.IsBlockCipherSuite(this.mSelectedCipherSuite)) - { - TlsExtensionsUtilities.AddEncryptThenMacExtension(CheckServerExtensions()); - } - } - - if (this.mMaxFragmentLengthOffered >= 0 - && TlsUtilities.IsValidUint8(mMaxFragmentLengthOffered) - && MaxFragmentLength.IsValid((byte)mMaxFragmentLengthOffered)) - { - TlsExtensionsUtilities.AddMaxFragmentLengthExtension(CheckServerExtensions(), (byte)mMaxFragmentLengthOffered); - } - - if (this.mTruncatedHMacOffered && AllowTruncatedHMac) - { - TlsExtensionsUtilities.AddTruncatedHMacExtension(CheckServerExtensions()); - } - - if (this.mClientECPointFormats != null && TlsEccUtilities.IsEccCipherSuite(this.mSelectedCipherSuite)) - { - /* - * RFC 4492 5.2. A server that selects an ECC cipher suite in response to a ClientHello - * message including a Supported Point Formats Extension appends this extension (along - * with others) to its ServerHello message, enumerating the point formats it can parse. - */ - this.mServerECPointFormats = new byte[]{ ECPointFormat.uncompressed, - ECPointFormat.ansiX962_compressed_prime, ECPointFormat.ansiX962_compressed_char2, }; - - TlsEccUtilities.AddSupportedPointFormatsExtension(CheckServerExtensions(), mServerECPointFormats); - } - - return mServerExtensions; - } - - public virtual IList GetServerSupplementalData() - { - return null; - } - - public abstract TlsCredentials GetCredentials(); - - public virtual CertificateStatus GetCertificateStatus() - { - return null; - } - - public abstract TlsKeyExchange GetKeyExchange(); - - public virtual CertificateRequest GetCertificateRequest() - { - return null; - } - - public virtual void ProcessClientSupplementalData(IList clientSupplementalData) - { - if (clientSupplementalData != null) - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - - public virtual void NotifyClientCertificate(Certificate clientCertificate) - { - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - public override TlsCompression GetCompression() - { - switch (mSelectedCompressionMethod) - { - case CompressionMethod.cls_null: - return new TlsNullCompression(); - - default: - /* - * Note: internal error here; we selected the compression method, so if we now can't - * produce an implementation, we shouldn't have chosen it! - */ - throw new TlsFatalAlert(AlertDescription.internal_error); - } - } - - public override TlsCipher GetCipher() - { - int encryptionAlgorithm = TlsUtilities.GetEncryptionAlgorithm(mSelectedCipherSuite); - int macAlgorithm = TlsUtilities.GetMacAlgorithm(mSelectedCipherSuite); - - return mCipherFactory.CreateCipher(mContext, encryptionAlgorithm, macAlgorithm); - } - - public virtual NewSessionTicket GetNewSessionTicket() - { - /* - * RFC 5077 3.3. If the server determines that it does not want to include a ticket after it - * has included the SessionTicket extension in the ServerHello, then it sends a zero-length - * ticket in the NewSessionTicket handshake message. - */ - return new NewSessionTicket(0L, TlsUtilities.EmptyBytes); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/AbstractTlsSigner.cs b/bc-sharp-crypto/src/crypto/tls/AbstractTlsSigner.cs deleted file mode 100644 index 1f4aabf..0000000 --- a/bc-sharp-crypto/src/crypto/tls/AbstractTlsSigner.cs +++ /dev/null @@ -1,50 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public abstract class AbstractTlsSigner - : TlsSigner - { - protected TlsContext mContext; - - public virtual void Init(TlsContext context) - { - this.mContext = context; - } - - public virtual byte[] GenerateRawSignature(AsymmetricKeyParameter privateKey, byte[] md5AndSha1) - { - return GenerateRawSignature(null, privateKey, md5AndSha1); - } - - public abstract byte[] GenerateRawSignature(SignatureAndHashAlgorithm algorithm, - AsymmetricKeyParameter privateKey, byte[] hash); - - public virtual bool VerifyRawSignature(byte[] sigBytes, AsymmetricKeyParameter publicKey, byte[] md5AndSha1) - { - return VerifyRawSignature(null, sigBytes, publicKey, md5AndSha1); - } - - public abstract bool VerifyRawSignature(SignatureAndHashAlgorithm algorithm, byte[] sigBytes, - AsymmetricKeyParameter publicKey, byte[] hash); - - public virtual ISigner CreateSigner(AsymmetricKeyParameter privateKey) - { - return CreateSigner(null, privateKey); - } - - public abstract ISigner CreateSigner(SignatureAndHashAlgorithm algorithm, AsymmetricKeyParameter privateKey); - - public virtual ISigner CreateVerifyer(AsymmetricKeyParameter publicKey) - { - return CreateVerifyer(null, publicKey); - } - - public abstract ISigner CreateVerifyer(SignatureAndHashAlgorithm algorithm, AsymmetricKeyParameter publicKey); - - public abstract bool IsValidPublicKey(AsymmetricKeyParameter publicKey); - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/AbstractTlsSignerCredentials.cs b/bc-sharp-crypto/src/crypto/tls/AbstractTlsSignerCredentials.cs deleted file mode 100644 index 886c46c..0000000 --- a/bc-sharp-crypto/src/crypto/tls/AbstractTlsSignerCredentials.cs +++ /dev/null @@ -1,20 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public abstract class AbstractTlsSignerCredentials - : AbstractTlsCredentials, TlsSignerCredentials - { - /// - public abstract byte[] GenerateCertificateSignature(byte[] hash); - - public virtual SignatureAndHashAlgorithm SignatureAndHashAlgorithm - { - get - { - throw new InvalidOperationException("TlsSignerCredentials implementation does not support (D)TLS 1.2+"); - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/AlertDescription.cs b/bc-sharp-crypto/src/crypto/tls/AlertDescription.cs deleted file mode 100644 index 4e2464b..0000000 --- a/bc-sharp-crypto/src/crypto/tls/AlertDescription.cs +++ /dev/null @@ -1,304 +0,0 @@ -namespace Org.BouncyCastle.Crypto.Tls -{ - /// - /// RFC 5246 7.2 - /// - public abstract class AlertDescription - { - /** - * This message notifies the recipient that the sender will not send any more messages on this - * connection. Note that as of TLS 1.1, failure to properly close a connection no longer - * requires that a session not be resumed. This is a change from TLS 1.0 ("The session becomes - * unresumable if any connection is terminated without proper close_notify messages with level - * equal to warning.") to conform with widespread implementation practice. - */ - public const byte close_notify = 0; - - /** - * An inappropriate message was received. This alert is always fatal and should never be - * observed in communication between proper implementations. - */ - public const byte unexpected_message = 10; - - /** - * This alert is returned if a record is received with an incorrect MAC. This alert also MUST be - * returned if an alert is sent because a TLSCiphertext decrypted in an invalid way: either it - * wasn't an even multiple of the block length, or its padding values, when checked, weren't - * correct. This message is always fatal and should never be observed in communication between - * proper implementations (except when messages were corrupted in the network). - */ - public const byte bad_record_mac = 20; - - /** - * This alert was used in some earlier versions of TLS, and may have permitted certain attacks - * against the CBC mode [CBCATT]. It MUST NOT be sent by compliant implementations. - */ - public const byte decryption_failed = 21; - - /** - * A TLSCiphertext record was received that had a length more than 2^14+2048 bytes, or a record - * decrypted to a TLSCompressed record with more than 2^14+1024 bytes. This message is always - * fatal and should never be observed in communication between proper implementations (except - * when messages were corrupted in the network). - */ - public const byte record_overflow = 22; - - /** - * The decompression function received improper input (e.g., data that would expand to excessive - * length). This message is always fatal and should never be observed in communication between - * proper implementations. - */ - public const byte decompression_failure = 30; - - /** - * Reception of a handshake_failure alert message indicates that the sender was unable to - * negotiate an acceptable set of security parameters given the options available. This is a - * fatal error. - */ - public const byte handshake_failure = 40; - - /** - * This alert was used in SSLv3 but not any version of TLS. It MUST NOT be sent by compliant - * implementations. - */ - public const byte no_certificate = 41; - - /** - * A certificate was corrupt, contained signatures that did not verify correctly, etc. - */ - public const byte bad_certificate = 42; - - /** - * A certificate was of an unsupported type. - */ - public const byte unsupported_certificate = 43; - - /** - * A certificate was revoked by its signer. - */ - public const byte certificate_revoked = 44; - - /** - * A certificate has expired or is not currently valid. - */ - public const byte certificate_expired = 45; - - /** - * Some other (unspecified) issue arose in processing the certificate, rendering it - * unacceptable. - */ - public const byte certificate_unknown = 46; - - /** - * A field in the handshake was out of range or inconsistent with other fields. This message is - * always fatal. - */ - public const byte illegal_parameter = 47; - - /** - * A valid certificate chain or partial chain was received, but the certificate was not accepted - * because the CA certificate could not be located or couldn't be matched with a known, trusted - * CA. This message is always fatal. - */ - public const byte unknown_ca = 48; - - /** - * A valid certificate was received, but when access control was applied, the sender decided not - * to proceed with negotiation. This message is always fatal. - */ - public const byte access_denied = 49; - - /** - * A message could not be decoded because some field was out of the specified range or the - * length of the message was incorrect. This message is always fatal and should never be - * observed in communication between proper implementations (except when messages were corrupted - * in the network). - */ - public const byte decode_error = 50; - - /** - * A handshake cryptographic operation failed, including being unable to correctly verify a - * signature or validate a Finished message. This message is always fatal. - */ - public const byte decrypt_error = 51; - - /** - * This alert was used in some earlier versions of TLS. It MUST NOT be sent by compliant - * implementations. - */ - public const byte export_restriction = 60; - - /** - * The protocol version the client has attempted to negotiate is recognized but not supported. - * (For example, old protocol versions might be avoided for security reasons.) This message is - * always fatal. - */ - public const byte protocol_version = 70; - - /** - * Returned instead of handshake_failure when a negotiation has failed specifically because the - * server requires ciphers more secure than those supported by the client. This message is - * always fatal. - */ - public const byte insufficient_security = 71; - - /** - * An internal error unrelated to the peer or the correctness of the protocol (such as a memory - * allocation failure) makes it impossible to continue. This message is always fatal. - */ - public const byte internal_error = 80; - - /** - * This handshake is being canceled for some reason unrelated to a protocol failure. If the user - * cancels an operation after the handshake is complete, just closing the connection by sending - * a close_notify is more appropriate. This alert should be followed by a close_notify. This - * message is generally a warning. - */ - public const byte user_canceled = 90; - - /** - * Sent by the client in response to a hello request or by the server in response to a client - * hello after initial handshaking. Either of these would normally lead to renegotiation; when - * that is not appropriate, the recipient should respond with this alert. At that point, the - * original requester can decide whether to proceed with the connection. One case where this - * would be appropriate is where a server has spawned a process to satisfy a request; the - * process might receive security parameters (key length, authentication, etc.) at startup, and - * it might be difficult to communicate changes to these parameters after that point. This - * message is always a warning. - */ - public const byte no_renegotiation = 100; - - /** - * Sent by clients that receive an extended server hello containing an extension that they did - * not put in the corresponding client hello. This message is always fatal. - */ - public const byte unsupported_extension = 110; - - /* - * RFC 3546 - */ - - /** - * This alert is sent by servers who are unable to retrieve a certificate chain from the URL - * supplied by the client (see Section 3.3). This message MAY be fatal - for example if client - * authentication is required by the server for the handshake to continue and the server is - * unable to retrieve the certificate chain, it may send a fatal alert. - */ - public const byte certificate_unobtainable = 111; - - /** - * This alert is sent by servers that receive a server_name extension request, but do not - * recognize the server name. This message MAY be fatal. - */ - public const byte unrecognized_name = 112; - - /** - * This alert is sent by clients that receive an invalid certificate status response (see - * Section 3.6). This message is always fatal. - */ - public const byte bad_certificate_status_response = 113; - - /** - * This alert is sent by servers when a certificate hash does not match a client provided - * certificate_hash. This message is always fatal. - */ - public const byte bad_certificate_hash_value = 114; - - /* - * RFC 4279 - */ - - /** - * If the server does not recognize the PSK identity, it MAY respond with an - * "unknown_psk_identity" alert message. - */ - public const byte unknown_psk_identity = 115; - - /* - * RFC 7507 - */ - - /** - * If TLS_FALLBACK_SCSV appears in ClientHello.cipher_suites and the highest protocol version - * supported by the server is higher than the version indicated in ClientHello.client_version, - * the server MUST respond with a fatal inappropriate_fallback alert [..]. - */ - public const byte inappropriate_fallback = 86; - - public static string GetName(byte alertDescription) - { - switch (alertDescription) - { - case close_notify: - return "close_notify"; - case unexpected_message: - return "unexpected_message"; - case bad_record_mac: - return "bad_record_mac"; - case decryption_failed: - return "decryption_failed"; - case record_overflow: - return "record_overflow"; - case decompression_failure: - return "decompression_failure"; - case handshake_failure: - return "handshake_failure"; - case no_certificate: - return "no_certificate"; - case bad_certificate: - return "bad_certificate"; - case unsupported_certificate: - return "unsupported_certificate"; - case certificate_revoked: - return "certificate_revoked"; - case certificate_expired: - return "certificate_expired"; - case certificate_unknown: - return "certificate_unknown"; - case illegal_parameter: - return "illegal_parameter"; - case unknown_ca: - return "unknown_ca"; - case access_denied: - return "access_denied"; - case decode_error: - return "decode_error"; - case decrypt_error: - return "decrypt_error"; - case export_restriction: - return "export_restriction"; - case protocol_version: - return "protocol_version"; - case insufficient_security: - return "insufficient_security"; - case internal_error: - return "internal_error"; - case user_canceled: - return "user_canceled"; - case no_renegotiation: - return "no_renegotiation"; - case unsupported_extension: - return "unsupported_extension"; - case certificate_unobtainable: - return "certificate_unobtainable"; - case unrecognized_name: - return "unrecognized_name"; - case bad_certificate_status_response: - return "bad_certificate_status_response"; - case bad_certificate_hash_value: - return "bad_certificate_hash_value"; - case unknown_psk_identity: - return "unknown_psk_identity"; - case inappropriate_fallback: - return "inappropriate_fallback"; - default: - return "UNKNOWN"; - } - } - - public static string GetText(byte alertDescription) - { - return GetName(alertDescription) + "(" + alertDescription + ")"; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/AlertLevel.cs b/bc-sharp-crypto/src/crypto/tls/AlertLevel.cs deleted file mode 100644 index 9461a0b..0000000 --- a/bc-sharp-crypto/src/crypto/tls/AlertLevel.cs +++ /dev/null @@ -1,29 +0,0 @@ -namespace Org.BouncyCastle.Crypto.Tls -{ - /// - /// RFC 5246 7.2 - /// - public abstract class AlertLevel - { - public const byte warning = 1; - public const byte fatal = 2; - - public static string GetName(byte alertDescription) - { - switch (alertDescription) - { - case warning: - return "warning"; - case fatal: - return "fatal"; - default: - return "UNKNOWN"; - } - } - - public static string GetText(byte alertDescription) - { - return GetName(alertDescription) + "(" + alertDescription + ")"; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/BasicTlsPskIdentity.cs b/bc-sharp-crypto/src/crypto/tls/BasicTlsPskIdentity.cs deleted file mode 100644 index db59544..0000000 --- a/bc-sharp-crypto/src/crypto/tls/BasicTlsPskIdentity.cs +++ /dev/null @@ -1,43 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class BasicTlsPskIdentity - : TlsPskIdentity - { - protected byte[] mIdentity; - protected byte[] mPsk; - - public BasicTlsPskIdentity(byte[] identity, byte[] psk) - { - this.mIdentity = Arrays.Clone(identity); - this.mPsk = Arrays.Clone(psk); - } - - public BasicTlsPskIdentity(string identity, byte[] psk) - { - this.mIdentity = Strings.ToUtf8ByteArray(identity); - this.mPsk = Arrays.Clone(psk); - } - - public virtual void SkipIdentityHint() - { - } - - public virtual void NotifyIdentityHint(byte[] psk_identity_hint) - { - } - - public virtual byte[] GetPskIdentity() - { - return mIdentity; - } - - public virtual byte[] GetPsk() - { - return mPsk; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/BulkCipherAlgorithm.cs b/bc-sharp-crypto/src/crypto/tls/BulkCipherAlgorithm.cs deleted file mode 100644 index 07ff8dc..0000000 --- a/bc-sharp-crypto/src/crypto/tls/BulkCipherAlgorithm.cs +++ /dev/null @@ -1,25 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /// RFC 2246 - /// - /// Note that the values here are implementation-specific and arbitrary. It is recommended not to - /// depend on the particular values (e.g. serialization). - /// - public abstract class BulkCipherAlgorithm - { - public const int cls_null = 0; - public const int rc4 = 1; - public const int rc2 = 2; - public const int des = 3; - public const int cls_3des = 4; - public const int des40 = 5; - - /* - * RFC 4346 - */ - public const int aes = 6; - public const int idea = 7; - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/ByteQueue.cs b/bc-sharp-crypto/src/crypto/tls/ByteQueue.cs deleted file mode 100644 index b4df685..0000000 --- a/bc-sharp-crypto/src/crypto/tls/ByteQueue.cs +++ /dev/null @@ -1,211 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /// - /// A queue for bytes. - ///

- /// This file could be more optimized. - ///

- /// - public class ByteQueue - { - /// The smallest number which can be written as 2^x which is bigger than i. - public static int NextTwoPow( - int i) - { - /* - * This code is based of a lot of code I found on the Internet - * which mostly referenced a book called "Hacking delight". - * - */ - i |= (i >> 1); - i |= (i >> 2); - i |= (i >> 4); - i |= (i >> 8); - i |= (i >> 16); - return i + 1; - } - - /** - * The initial size for our buffer. - */ - private const int DefaultCapacity = 1024; - - /** - * The buffer where we store our data. - */ - private byte[] databuf; - - /** - * How many bytes at the beginning of the buffer are skipped. - */ - private int skipped = 0; - - /** - * How many bytes in the buffer are valid data. - */ - private int available = 0; - - private bool readOnlyBuf = false; - - public ByteQueue() - : this(DefaultCapacity) - { - } - - public ByteQueue(int capacity) - { - this.databuf = capacity == 0 ? TlsUtilities.EmptyBytes : new byte[capacity]; - } - - public ByteQueue(byte[] buf, int off, int len) - { - this.databuf = buf; - this.skipped = off; - this.available = len; - this.readOnlyBuf = true; - } - - /// Add some data to our buffer. - /// A byte-array to read data from. - /// How many bytes to skip at the beginning of the array. - /// How many bytes to read from the array. - public void AddData( - byte[] data, - int offset, - int len) - { - if (readOnlyBuf) - throw new InvalidOperationException("Cannot add data to read-only buffer"); - - if ((skipped + available + len) > databuf.Length) - { - int desiredSize = ByteQueue.NextTwoPow(available + len); - if (desiredSize > databuf.Length) - { - byte[] tmp = new byte[desiredSize]; - Array.Copy(databuf, skipped, tmp, 0, available); - databuf = tmp; - } - else - { - Array.Copy(databuf, skipped, databuf, 0, available); - } - skipped = 0; - } - - Array.Copy(data, offset, databuf, skipped + available, len); - available += len; - } - - /// The number of bytes which are available in this buffer. - public int Available - { - get { return available; } - } - - /// Copy some bytes from the beginning of the data to the provided Stream. - /// The Stream to copy the bytes to. - /// How many bytes to copy. - /// If insufficient data is available. - /// If there is a problem copying the data. - public void CopyTo(Stream output, int length) - { - if (length > available) - throw new InvalidOperationException("Cannot copy " + length + " bytes, only got " + available); - - output.Write(databuf, skipped, length); - } - - /// Read data from the buffer. - /// The buffer where the read data will be copied to. - /// How many bytes to skip at the beginning of buf. - /// How many bytes to read at all. - /// How many bytes from our data to skip. - public void Read( - byte[] buf, - int offset, - int len, - int skip) - { - if ((buf.Length - offset) < len) - { - throw new ArgumentException("Buffer size of " + buf.Length + " is too small for a read of " + len + " bytes"); - } - if ((available - skip) < len) - { - throw new InvalidOperationException("Not enough data to read"); - } - Array.Copy(databuf, skipped + skip, buf, offset, len); - } - - /// Return a MemoryStream over some bytes at the beginning of the data. - /// How many bytes will be readable. - /// A MemoryStream over the data. - /// If insufficient data is available. - public MemoryStream ReadFrom(int length) - { - if (length > available) - throw new InvalidOperationException("Cannot read " + length + " bytes, only got " + available); - - int position = skipped; - - available -= length; - skipped += length; - - return new MemoryStream(databuf, position, length, false); - } - - /// Remove some bytes from our data from the beginning. - /// How many bytes to remove. - public void RemoveData( - int i) - { - if (i > available) - { - throw new InvalidOperationException("Cannot remove " + i + " bytes, only got " + available); - } - - /* - * Skip the data. - */ - available -= i; - skipped += i; - } - - public void RemoveData(byte[] buf, int off, int len, int skip) - { - Read(buf, off, len, skip); - RemoveData(skip + len); - } - - public byte[] RemoveData(int len, int skip) - { - byte[] buf = new byte[len]; - RemoveData(buf, 0, len, skip); - return buf; - } - - public void Shrink() - { - if (available == 0) - { - databuf = TlsUtilities.EmptyBytes; - skipped = 0; - } - else - { - int desiredSize = ByteQueue.NextTwoPow(available); - if (desiredSize < databuf.Length) - { - byte[] tmp = new byte[desiredSize]; - Array.Copy(databuf, skipped, tmp, 0, available); - databuf = tmp; - skipped = 0; - } - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/ByteQueueStream.cs b/bc-sharp-crypto/src/crypto/tls/ByteQueueStream.cs deleted file mode 100644 index 249e609..0000000 --- a/bc-sharp-crypto/src/crypto/tls/ByteQueueStream.cs +++ /dev/null @@ -1,110 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class ByteQueueStream - : Stream - { - private readonly ByteQueue buffer; - - public ByteQueueStream() - { - this.buffer = new ByteQueue(); - } - - public virtual int Available - { - get { return buffer.Available; } - } - - public override bool CanRead - { - get { return true; } - } - - public override bool CanSeek - { - get { return false; } - } - - public override bool CanWrite - { - get { return true; } - } - - public override void Flush() - { - } - - public override long Length - { - get { throw new NotSupportedException(); } - } - - public virtual int Peek(byte[] buf) - { - int bytesToRead = System.Math.Min(buffer.Available, buf.Length); - buffer.Read(buf, 0, bytesToRead, 0); - return bytesToRead; - } - - public override long Position - { - get { throw new NotSupportedException(); } - set { throw new NotSupportedException(); } - } - - public virtual int Read(byte[] buf) - { - return Read(buf, 0, buf.Length); - } - - public override int Read(byte[] buf, int off, int len) - { - int bytesToRead = System.Math.Min(buffer.Available, len); - buffer.RemoveData(buf, off, bytesToRead, 0); - return bytesToRead; - } - - public override int ReadByte() - { - if (buffer.Available == 0) - return -1; - - return buffer.RemoveData(1, 0)[0] & 0xFF; - } - - public override long Seek(long offset, SeekOrigin origin) - { - throw new NotSupportedException(); - } - - public override void SetLength(long value) - { - throw new NotSupportedException(); - } - - public virtual int Skip(int n) - { - int bytesToSkip = System.Math.Min(buffer.Available, n); - buffer.RemoveData(bytesToSkip); - return bytesToSkip; - } - - public virtual void Write(byte[] buf) - { - buffer.AddData(buf, 0, buf.Length); - } - - public override void Write(byte[] buf, int off, int len) - { - buffer.AddData(buf, off, len); - } - - public override void WriteByte(byte b) - { - buffer.AddData(new byte[]{ b }, 0, 1); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/CertChainType.cs b/bc-sharp-crypto/src/crypto/tls/CertChainType.cs deleted file mode 100644 index cbb1834..0000000 --- a/bc-sharp-crypto/src/crypto/tls/CertChainType.cs +++ /dev/null @@ -1,18 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /* - * RFC 3546 3.3. - */ - public abstract class CertChainType - { - public const byte individual_certs = 0; - public const byte pkipath = 1; - - public static bool IsValid(byte certChainType) - { - return certChainType >= individual_certs && certChainType <= pkipath; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/Certificate.cs b/bc-sharp-crypto/src/crypto/tls/Certificate.cs deleted file mode 100644 index e047999..0000000 --- a/bc-sharp-crypto/src/crypto/tls/Certificate.cs +++ /dev/null @@ -1,136 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /** - * Parsing and encoding of a Certificate struct from RFC 4346. - *

- * 

-     * opaque ASN.1Cert<2^24-1>;
-     *
-     * struct {
-     *     ASN.1Cert certificate_list<0..2^24-1>;
-     * } Certificate;
-     *
- * - * @see Org.BouncyCastle.Asn1.X509.X509CertificateStructure - */ - public class Certificate - { - public static readonly Certificate EmptyChain = new Certificate(new X509CertificateStructure[0]); - - /** - * The certificates. - */ - protected readonly X509CertificateStructure[] mCertificateList; - - public Certificate(X509CertificateStructure[] certificateList) - { - if (certificateList == null) - throw new ArgumentNullException("certificateList"); - - this.mCertificateList = certificateList; - } - - /** - * @return an array of {@link org.bouncycastle.asn1.x509.Certificate} representing a certificate - * chain. - */ - public virtual X509CertificateStructure[] GetCertificateList() - { - return CloneCertificateList(); - } - - public virtual X509CertificateStructure GetCertificateAt(int index) - { - return mCertificateList[index]; - } - - public virtual int Length - { - get { return mCertificateList.Length; } - } - - /** - * @return true if this certificate chain contains no certificates, or - * false otherwise. - */ - public virtual bool IsEmpty - { - get { return mCertificateList.Length == 0; } - } - - /** - * Encode this {@link Certificate} to a {@link Stream}. - * - * @param output the {@link Stream} to encode to. - * @throws IOException - */ - public virtual void Encode(Stream output) - { - IList derEncodings = Platform.CreateArrayList(mCertificateList.Length); - - int totalLength = 0; - foreach (Asn1Encodable asn1Cert in mCertificateList) - { - byte[] derEncoding = asn1Cert.GetEncoded(Asn1Encodable.Der); - derEncodings.Add(derEncoding); - totalLength += derEncoding.Length + 3; - } - - TlsUtilities.CheckUint24(totalLength); - TlsUtilities.WriteUint24(totalLength, output); - - foreach (byte[] derEncoding in derEncodings) - { - TlsUtilities.WriteOpaque24(derEncoding, output); - } - } - - /** - * Parse a {@link Certificate} from a {@link Stream}. - * - * @param input the {@link Stream} to parse from. - * @return a {@link Certificate} object. - * @throws IOException - */ - public static Certificate Parse(Stream input) - { - int totalLength = TlsUtilities.ReadUint24(input); - if (totalLength == 0) - { - return EmptyChain; - } - - byte[] certListData = TlsUtilities.ReadFully(totalLength, input); - - MemoryStream buf = new MemoryStream(certListData, false); - - IList certificate_list = Platform.CreateArrayList(); - while (buf.Position < buf.Length) - { - byte[] berEncoding = TlsUtilities.ReadOpaque24(buf); - Asn1Object asn1Cert = TlsUtilities.ReadAsn1Object(berEncoding); - certificate_list.Add(X509CertificateStructure.GetInstance(asn1Cert)); - } - - X509CertificateStructure[] certificateList = new X509CertificateStructure[certificate_list.Count]; - for (int i = 0; i < certificate_list.Count; ++i) - { - certificateList[i] = (X509CertificateStructure)certificate_list[i]; - } - return new Certificate(certificateList); - } - - protected virtual X509CertificateStructure[] CloneCertificateList() - { - return (X509CertificateStructure[])mCertificateList.Clone(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/CertificateRequest.cs b/bc-sharp-crypto/src/crypto/tls/CertificateRequest.cs deleted file mode 100644 index f3dcb3b..0000000 --- a/bc-sharp-crypto/src/crypto/tls/CertificateRequest.cs +++ /dev/null @@ -1,156 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /** - * Parsing and encoding of a CertificateRequest struct from RFC 4346. - *

- * 

-     * struct {
-     *     ClientCertificateType certificate_types<1..2^8-1>;
-     *     DistinguishedName certificate_authorities<3..2^16-1>
-     * } CertificateRequest;
-     *
- * - * @see ClientCertificateType - * @see X509Name - */ - public class CertificateRequest - { - protected readonly byte[] mCertificateTypes; - protected readonly IList mSupportedSignatureAlgorithms; - protected readonly IList mCertificateAuthorities; - - /** - * @param certificateTypes see {@link ClientCertificateType} for valid constants. - * @param certificateAuthorities an {@link IList} of {@link X509Name}. - */ - public CertificateRequest(byte[] certificateTypes, IList supportedSignatureAlgorithms, - IList certificateAuthorities) - { - this.mCertificateTypes = certificateTypes; - this.mSupportedSignatureAlgorithms = supportedSignatureAlgorithms; - this.mCertificateAuthorities = certificateAuthorities; - } - - /** - * @return an array of certificate types - * @see {@link ClientCertificateType} - */ - public virtual byte[] CertificateTypes - { - get { return mCertificateTypes; } - } - - /** - * @return an {@link IList} of {@link SignatureAndHashAlgorithm} (or null before TLS 1.2). - */ - public virtual IList SupportedSignatureAlgorithms - { - get { return mSupportedSignatureAlgorithms; } - } - - /** - * @return an {@link IList} of {@link X509Name} - */ - public virtual IList CertificateAuthorities - { - get { return mCertificateAuthorities; } - } - - /** - * Encode this {@link CertificateRequest} to a {@link Stream}. - * - * @param output the {@link Stream} to encode to. - * @throws IOException - */ - public virtual void Encode(Stream output) - { - if (mCertificateTypes == null || mCertificateTypes.Length == 0) - { - TlsUtilities.WriteUint8(0, output); - } - else - { - TlsUtilities.WriteUint8ArrayWithUint8Length(mCertificateTypes, output); - } - - if (mSupportedSignatureAlgorithms != null) - { - // TODO Check whether SignatureAlgorithm.anonymous is allowed here - TlsUtilities.EncodeSupportedSignatureAlgorithms(mSupportedSignatureAlgorithms, false, output); - } - - if (mCertificateAuthorities == null || mCertificateAuthorities.Count < 1) - { - TlsUtilities.WriteUint16(0, output); - } - else - { - IList derEncodings = Platform.CreateArrayList(mCertificateAuthorities.Count); - - int totalLength = 0; - foreach (Asn1Encodable certificateAuthority in mCertificateAuthorities) - { - byte[] derEncoding = certificateAuthority.GetEncoded(Asn1Encodable.Der); - derEncodings.Add(derEncoding); - totalLength += derEncoding.Length + 2; - } - - TlsUtilities.CheckUint16(totalLength); - TlsUtilities.WriteUint16(totalLength, output); - - foreach (byte[] derEncoding in derEncodings) - { - TlsUtilities.WriteOpaque16(derEncoding, output); - } - } - } - - /** - * Parse a {@link CertificateRequest} from a {@link Stream}. - * - * @param context - * the {@link TlsContext} of the current connection. - * @param input - * the {@link Stream} to parse from. - * @return a {@link CertificateRequest} object. - * @throws IOException - */ - public static CertificateRequest Parse(TlsContext context, Stream input) - { - int numTypes = TlsUtilities.ReadUint8(input); - byte[] certificateTypes = new byte[numTypes]; - for (int i = 0; i < numTypes; ++i) - { - certificateTypes[i] = TlsUtilities.ReadUint8(input); - } - - IList supportedSignatureAlgorithms = null; - if (TlsUtilities.IsTlsV12(context)) - { - // TODO Check whether SignatureAlgorithm.anonymous is allowed here - supportedSignatureAlgorithms = TlsUtilities.ParseSupportedSignatureAlgorithms(false, input); - } - - IList certificateAuthorities = Platform.CreateArrayList(); - byte[] certAuthData = TlsUtilities.ReadOpaque16(input); - MemoryStream bis = new MemoryStream(certAuthData, false); - while (bis.Position < bis.Length) - { - byte[] derEncoding = TlsUtilities.ReadOpaque16(bis); - Asn1Object asn1 = TlsUtilities.ReadDerObject(derEncoding); - // TODO Switch to X500Name when available - certificateAuthorities.Add(X509Name.GetInstance(asn1)); - } - - return new CertificateRequest(certificateTypes, supportedSignatureAlgorithms, certificateAuthorities); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/CertificateStatus.cs b/bc-sharp-crypto/src/crypto/tls/CertificateStatus.cs deleted file mode 100644 index 0f95475..0000000 --- a/bc-sharp-crypto/src/crypto/tls/CertificateStatus.cs +++ /dev/null @@ -1,102 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Ocsp; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class CertificateStatus - { - protected readonly byte mStatusType; - protected readonly object mResponse; - - public CertificateStatus(byte statusType, object response) - { - if (!IsCorrectType(statusType, response)) - throw new ArgumentException("not an instance of the correct type", "response"); - - this.mStatusType = statusType; - this.mResponse = response; - } - - public virtual byte StatusType - { - get { return mStatusType; } - } - - public virtual object Response - { - get { return mResponse; } - } - - public virtual OcspResponse GetOcspResponse() - { - if (!IsCorrectType(CertificateStatusType.ocsp, mResponse)) - throw new InvalidOperationException("'response' is not an OcspResponse"); - - return (OcspResponse)mResponse; - } - - /** - * Encode this {@link CertificateStatus} to a {@link Stream}. - * - * @param output - * the {@link Stream} to encode to. - * @throws IOException - */ - public virtual void Encode(Stream output) - { - TlsUtilities.WriteUint8(mStatusType, output); - - switch (mStatusType) - { - case CertificateStatusType.ocsp: - byte[] derEncoding = ((OcspResponse)mResponse).GetEncoded(Asn1Encodable.Der); - TlsUtilities.WriteOpaque24(derEncoding, output); - break; - default: - throw new TlsFatalAlert(AlertDescription.internal_error); - } - } - - /** - * Parse a {@link CertificateStatus} from a {@link Stream}. - * - * @param input - * the {@link Stream} to parse from. - * @return a {@link CertificateStatus} object. - * @throws IOException - */ - public static CertificateStatus Parse(Stream input) - { - byte status_type = TlsUtilities.ReadUint8(input); - object response; - - switch (status_type) - { - case CertificateStatusType.ocsp: - { - byte[] derEncoding = TlsUtilities.ReadOpaque24(input); - response = OcspResponse.GetInstance(TlsUtilities.ReadDerObject(derEncoding)); - break; - } - default: - throw new TlsFatalAlert(AlertDescription.decode_error); - } - - return new CertificateStatus(status_type, response); - } - - protected static bool IsCorrectType(byte statusType, object response) - { - switch (statusType) - { - case CertificateStatusType.ocsp: - return response is OcspResponse; - default: - throw new ArgumentException("unsupported value", "statusType"); - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/CertificateStatusRequest.cs b/bc-sharp-crypto/src/crypto/tls/CertificateStatusRequest.cs deleted file mode 100644 index 9587d7d..0000000 --- a/bc-sharp-crypto/src/crypto/tls/CertificateStatusRequest.cs +++ /dev/null @@ -1,95 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class CertificateStatusRequest - { - protected readonly byte mStatusType; - protected readonly object mRequest; - - public CertificateStatusRequest(byte statusType, Object request) - { - if (!IsCorrectType(statusType, request)) - throw new ArgumentException("not an instance of the correct type", "request"); - - this.mStatusType = statusType; - this.mRequest = request; - } - - public virtual byte StatusType - { - get { return mStatusType; } - } - - public virtual object Request - { - get { return mRequest; } - } - - public virtual OcspStatusRequest GetOcspStatusRequest() - { - if (!IsCorrectType(CertificateStatusType.ocsp, mRequest)) - throw new InvalidOperationException("'request' is not an OCSPStatusRequest"); - - return (OcspStatusRequest)mRequest; - } - - /** - * Encode this {@link CertificateStatusRequest} to a {@link Stream}. - * - * @param output - * the {@link Stream} to encode to. - * @throws IOException - */ - public virtual void Encode(Stream output) - { - TlsUtilities.WriteUint8(mStatusType, output); - - switch (mStatusType) - { - case CertificateStatusType.ocsp: - ((OcspStatusRequest)mRequest).Encode(output); - break; - default: - throw new TlsFatalAlert(AlertDescription.internal_error); - } - } - - /** - * Parse a {@link CertificateStatusRequest} from a {@link Stream}. - * - * @param input - * the {@link Stream} to parse from. - * @return a {@link CertificateStatusRequest} object. - * @throws IOException - */ - public static CertificateStatusRequest Parse(Stream input) - { - byte status_type = TlsUtilities.ReadUint8(input); - object result; - - switch (status_type) - { - case CertificateStatusType.ocsp: - result = OcspStatusRequest.Parse(input); - break; - default: - throw new TlsFatalAlert(AlertDescription.decode_error); - } - - return new CertificateStatusRequest(status_type, result); - } - - protected static bool IsCorrectType(byte statusType, object request) - { - switch (statusType) - { - case CertificateStatusType.ocsp: - return request is OcspStatusRequest; - default: - throw new ArgumentException("unsupported value", "statusType"); - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/CertificateStatusType.cs b/bc-sharp-crypto/src/crypto/tls/CertificateStatusType.cs deleted file mode 100644 index 54b741b..0000000 --- a/bc-sharp-crypto/src/crypto/tls/CertificateStatusType.cs +++ /dev/null @@ -1,12 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public abstract class CertificateStatusType - { - /* - * RFC 3546 3.6 - */ - public const byte ocsp = 1; - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/CertificateType.cs b/bc-sharp-crypto/src/crypto/tls/CertificateType.cs deleted file mode 100644 index 47ec05c..0000000 --- a/bc-sharp-crypto/src/crypto/tls/CertificateType.cs +++ /dev/null @@ -1,18 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /** - * RFC 6091 - */ - public class CertificateType - { - public const byte X509 = 0; - public const byte OpenPGP = 1; - - /* - * RFC 7250 - */ - public const byte RawPublicKey = 2; - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/CertificateUrl.cs b/bc-sharp-crypto/src/crypto/tls/CertificateUrl.cs deleted file mode 100644 index aff9995..0000000 --- a/bc-sharp-crypto/src/crypto/tls/CertificateUrl.cs +++ /dev/null @@ -1,125 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /* - * RFC 3546 3.3 - */ - public class CertificateUrl - { - protected readonly byte mType; - protected readonly IList mUrlAndHashList; - - /** - * @param type - * see {@link CertChainType} for valid constants. - * @param urlAndHashList - * a {@link IList} of {@link UrlAndHash}. - */ - public CertificateUrl(byte type, IList urlAndHashList) - { - if (!CertChainType.IsValid(type)) - throw new ArgumentException("not a valid CertChainType value", "type"); - if (urlAndHashList == null || urlAndHashList.Count < 1) - throw new ArgumentException("must have length > 0", "urlAndHashList"); - - this.mType = type; - this.mUrlAndHashList = urlAndHashList; - } - - /** - * @return {@link CertChainType} - */ - public virtual byte Type - { - get { return mType; } - } - - /** - * @return an {@link IList} of {@link UrlAndHash} - */ - public virtual IList UrlAndHashList - { - get { return mUrlAndHashList; } - } - - /** - * Encode this {@link CertificateUrl} to a {@link Stream}. - * - * @param output the {@link Stream} to encode to. - * @throws IOException - */ - public virtual void Encode(Stream output) - { - TlsUtilities.WriteUint8(this.mType, output); - - ListBuffer16 buf = new ListBuffer16(); - foreach (UrlAndHash urlAndHash in this.mUrlAndHashList) - { - urlAndHash.Encode(buf); - } - buf.EncodeTo(output); - } - - /** - * Parse a {@link CertificateUrl} from a {@link Stream}. - * - * @param context - * the {@link TlsContext} of the current connection. - * @param input - * the {@link Stream} to parse from. - * @return a {@link CertificateUrl} object. - * @throws IOException - */ - public static CertificateUrl parse(TlsContext context, Stream input) - { - byte type = TlsUtilities.ReadUint8(input); - if (!CertChainType.IsValid(type)) - throw new TlsFatalAlert(AlertDescription.decode_error); - - int totalLength = TlsUtilities.ReadUint16(input); - if (totalLength < 1) - throw new TlsFatalAlert(AlertDescription.decode_error); - - byte[] urlAndHashListData = TlsUtilities.ReadFully(totalLength, input); - - MemoryStream buf = new MemoryStream(urlAndHashListData, false); - - IList url_and_hash_list = Platform.CreateArrayList(); - while (buf.Position < buf.Length) - { - UrlAndHash url_and_hash = UrlAndHash.Parse(context, buf); - url_and_hash_list.Add(url_and_hash); - } - - return new CertificateUrl(type, url_and_hash_list); - } - - // TODO Could be more generally useful - internal class ListBuffer16 - : MemoryStream - { - internal ListBuffer16() - { - // Reserve space for length - TlsUtilities.WriteUint16(0, this); - } - - internal void EncodeTo(Stream output) - { - // Patch actual length back in - long length = Length - 2; - TlsUtilities.CheckUint16(length); - this.Position = 0; - TlsUtilities.WriteUint16((int)length, this); - Streams.WriteBufTo(this, output); - Platform.Dispose(this); - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/Chacha20Poly1305.cs b/bc-sharp-crypto/src/crypto/tls/Chacha20Poly1305.cs deleted file mode 100644 index 8687803..0000000 --- a/bc-sharp-crypto/src/crypto/tls/Chacha20Poly1305.cs +++ /dev/null @@ -1,199 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Crypto.Engines; -using Org.BouncyCastle.Crypto.Generators; -using Org.BouncyCastle.Crypto.Macs; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /** - * draft-ietf-tls-chacha20-poly1305-04 - */ - public class Chacha20Poly1305 - : TlsCipher - { - private static readonly byte[] Zeroes = new byte[15]; - - protected readonly TlsContext context; - - protected readonly ChaCha7539Engine encryptCipher, decryptCipher; - protected readonly byte[] encryptIV, decryptIV; - - /// - public Chacha20Poly1305(TlsContext context) - { - if (!TlsUtilities.IsTlsV12(context)) - throw new TlsFatalAlert(AlertDescription.internal_error); - - this.context = context; - - int cipherKeySize = 32; - // TODO SecurityParameters.fixed_iv_length - int fixed_iv_length = 12; - // TODO SecurityParameters.record_iv_length = 0 - - int key_block_size = (2 * cipherKeySize) + (2 * fixed_iv_length); - - byte[] key_block = TlsUtilities.CalculateKeyBlock(context, key_block_size); - - int offset = 0; - - KeyParameter client_write_key = new KeyParameter(key_block, offset, cipherKeySize); - offset += cipherKeySize; - KeyParameter server_write_key = new KeyParameter(key_block, offset, cipherKeySize); - offset += cipherKeySize; - byte[] client_write_IV = Arrays.CopyOfRange(key_block, offset, offset + fixed_iv_length); - offset += fixed_iv_length; - byte[] server_write_IV = Arrays.CopyOfRange(key_block, offset, offset + fixed_iv_length); - offset += fixed_iv_length; - - if (offset != key_block_size) - throw new TlsFatalAlert(AlertDescription.internal_error); - - this.encryptCipher = new ChaCha7539Engine(); - this.decryptCipher = new ChaCha7539Engine(); - - KeyParameter encryptKey, decryptKey; - if (context.IsServer) - { - encryptKey = server_write_key; - decryptKey = client_write_key; - this.encryptIV = server_write_IV; - this.decryptIV = client_write_IV; - } - else - { - encryptKey = client_write_key; - decryptKey = server_write_key; - this.encryptIV = client_write_IV; - this.decryptIV = server_write_IV; - } - - this.encryptCipher.Init(true, new ParametersWithIV(encryptKey, encryptIV)); - this.decryptCipher.Init(false, new ParametersWithIV(decryptKey, decryptIV)); - } - - public virtual int GetPlaintextLimit(int ciphertextLimit) - { - return ciphertextLimit - 16; - } - - /// - public virtual byte[] EncodePlaintext(long seqNo, byte type, byte[] plaintext, int offset, int len) - { - KeyParameter macKey = InitRecord(encryptCipher, true, seqNo, encryptIV); - - byte[] output = new byte[len + 16]; - encryptCipher.ProcessBytes(plaintext, offset, len, output, 0); - - byte[] additionalData = GetAdditionalData(seqNo, type, len); - byte[] mac = CalculateRecordMac(macKey, additionalData, output, 0, len); - Array.Copy(mac, 0, output, len, mac.Length); - - return output; - } - - /// - public virtual byte[] DecodeCiphertext(long seqNo, byte type, byte[] ciphertext, int offset, int len) - { - if (GetPlaintextLimit(len) < 0) - throw new TlsFatalAlert(AlertDescription.decode_error); - - KeyParameter macKey = InitRecord(decryptCipher, false, seqNo, decryptIV); - - int plaintextLength = len - 16; - - byte[] additionalData = GetAdditionalData(seqNo, type, plaintextLength); - byte[] calculatedMac = CalculateRecordMac(macKey, additionalData, ciphertext, offset, plaintextLength); - byte[] receivedMac = Arrays.CopyOfRange(ciphertext, offset + plaintextLength, offset + len); - - if (!Arrays.ConstantTimeAreEqual(calculatedMac, receivedMac)) - throw new TlsFatalAlert(AlertDescription.bad_record_mac); - - byte[] output = new byte[plaintextLength]; - decryptCipher.ProcessBytes(ciphertext, offset, plaintextLength, output, 0); - return output; - } - - protected virtual KeyParameter InitRecord(IStreamCipher cipher, bool forEncryption, long seqNo, byte[] iv) - { - byte[] nonce = CalculateNonce(seqNo, iv); - cipher.Init(forEncryption, new ParametersWithIV(null, nonce)); - return GenerateRecordMacKey(cipher); - } - - protected virtual byte[] CalculateNonce(long seqNo, byte[] iv) - { - byte[] nonce = new byte[12]; - TlsUtilities.WriteUint64(seqNo, nonce, 4); - - for (int i = 0; i < 12; ++i) - { - nonce[i] ^= iv[i]; - } - - return nonce; - } - - protected virtual KeyParameter GenerateRecordMacKey(IStreamCipher cipher) - { - byte[] firstBlock = new byte[64]; - cipher.ProcessBytes(firstBlock, 0, firstBlock.Length, firstBlock, 0); - - KeyParameter macKey = new KeyParameter(firstBlock, 0, 32); - Arrays.Fill(firstBlock, (byte)0); - return macKey; - } - - protected virtual byte[] CalculateRecordMac(KeyParameter macKey, byte[] additionalData, byte[] buf, int off, int len) - { - IMac mac = new Poly1305(); - mac.Init(macKey); - - UpdateRecordMacText(mac, additionalData, 0, additionalData.Length); - UpdateRecordMacText(mac, buf, off, len); - UpdateRecordMacLength(mac, additionalData.Length); - UpdateRecordMacLength(mac, len); - - return MacUtilities.DoFinal(mac); - } - - protected virtual void UpdateRecordMacLength(IMac mac, int len) - { - byte[] longLen = Pack.UInt64_To_LE((ulong)len); - mac.BlockUpdate(longLen, 0, longLen.Length); - } - - protected virtual void UpdateRecordMacText(IMac mac, byte[] buf, int off, int len) - { - mac.BlockUpdate(buf, off, len); - - int partial = len % 16; - if (partial != 0) - { - mac.BlockUpdate(Zeroes, 0, 16 - partial); - } - } - - /// - protected virtual byte[] GetAdditionalData(long seqNo, byte type, int len) - { - /* - * additional_data = seq_num + TLSCompressed.type + TLSCompressed.version + - * TLSCompressed.length - */ - byte[] additional_data = new byte[13]; - TlsUtilities.WriteUint64(seqNo, additional_data, 0); - TlsUtilities.WriteUint8(type, additional_data, 8); - TlsUtilities.WriteVersion(context.ServerVersion, additional_data, 9); - TlsUtilities.WriteUint16(len, additional_data, 11); - - return additional_data; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/ChangeCipherSpec.cs b/bc-sharp-crypto/src/crypto/tls/ChangeCipherSpec.cs deleted file mode 100644 index 323de91..0000000 --- a/bc-sharp-crypto/src/crypto/tls/ChangeCipherSpec.cs +++ /dev/null @@ -1,9 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public abstract class ChangeCipherSpec - { - public const byte change_cipher_spec = 1; - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/CipherSuite.cs b/bc-sharp-crypto/src/crypto/tls/CipherSuite.cs deleted file mode 100644 index 679a8be..0000000 --- a/bc-sharp-crypto/src/crypto/tls/CipherSuite.cs +++ /dev/null @@ -1,377 +0,0 @@ -namespace Org.BouncyCastle.Crypto.Tls -{ - /// - /// RFC 2246 A.5 - /// - public abstract class CipherSuite - { - public const int TLS_NULL_WITH_NULL_NULL = 0x0000; - public const int TLS_RSA_WITH_NULL_MD5 = 0x0001; - public const int TLS_RSA_WITH_NULL_SHA = 0x0002; - public const int TLS_RSA_EXPORT_WITH_RC4_40_MD5 = 0x0003; - public const int TLS_RSA_WITH_RC4_128_MD5 = 0x0004; - public const int TLS_RSA_WITH_RC4_128_SHA = 0x0005; - public const int TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5 = 0x0006; - public const int TLS_RSA_WITH_IDEA_CBC_SHA = 0x0007; - public const int TLS_RSA_EXPORT_WITH_DES40_CBC_SHA = 0x0008; - public const int TLS_RSA_WITH_DES_CBC_SHA = 0x0009; - public const int TLS_RSA_WITH_3DES_EDE_CBC_SHA = 0x000A; - public const int TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA = 0x000B; - public const int TLS_DH_DSS_WITH_DES_CBC_SHA = 0x000C; - public const int TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA = 0x000D; - public const int TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA = 0x000E; - public const int TLS_DH_RSA_WITH_DES_CBC_SHA = 0x000F; - public const int TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA = 0x0010; - public const int TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA = 0x0011; - public const int TLS_DHE_DSS_WITH_DES_CBC_SHA = 0x0012; - public const int TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA = 0x0013; - public const int TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA = 0x0014; - public const int TLS_DHE_RSA_WITH_DES_CBC_SHA = 0x0015; - public const int TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA = 0x0016; - public const int TLS_DH_anon_EXPORT_WITH_RC4_40_MD5 = 0x0017; - public const int TLS_DH_anon_WITH_RC4_128_MD5 = 0x0018; - public const int TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA = 0x0019; - public const int TLS_DH_anon_WITH_DES_CBC_SHA = 0x001A; - public const int TLS_DH_anon_WITH_3DES_EDE_CBC_SHA = 0x001B; - - /* - * Note: The cipher suite values { 0x00, 0x1C } and { 0x00, 0x1D } are reserved to avoid - * collision with Fortezza-based cipher suites in SSL 3. - */ - - /* - * RFC 3268 - */ - public const int TLS_RSA_WITH_AES_128_CBC_SHA = 0x002F; - public const int TLS_DH_DSS_WITH_AES_128_CBC_SHA = 0x0030; - public const int TLS_DH_RSA_WITH_AES_128_CBC_SHA = 0x0031; - public const int TLS_DHE_DSS_WITH_AES_128_CBC_SHA = 0x0032; - public const int TLS_DHE_RSA_WITH_AES_128_CBC_SHA = 0x0033; - public const int TLS_DH_anon_WITH_AES_128_CBC_SHA = 0x0034; - public const int TLS_RSA_WITH_AES_256_CBC_SHA = 0x0035; - public const int TLS_DH_DSS_WITH_AES_256_CBC_SHA = 0x0036; - public const int TLS_DH_RSA_WITH_AES_256_CBC_SHA = 0x0037; - public const int TLS_DHE_DSS_WITH_AES_256_CBC_SHA = 0x0038; - public const int TLS_DHE_RSA_WITH_AES_256_CBC_SHA = 0x0039; - public const int TLS_DH_anon_WITH_AES_256_CBC_SHA = 0x003A; - - /* - * RFC 5932 - */ - public const int TLS_RSA_WITH_CAMELLIA_128_CBC_SHA = 0x0041; - public const int TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA = 0x0042; - public const int TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA = 0x0043; - public const int TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA = 0x0044; - public const int TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA = 0x0045; - public const int TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA = 0x0046; - - public const int TLS_RSA_WITH_CAMELLIA_256_CBC_SHA = 0x0084; - public const int TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA = 0x0085; - public const int TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA = 0x0086; - public const int TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA = 0x0087; - public const int TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA = 0x0088; - public const int TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA = 0x0089; - - public const int TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256 = 0x00BA; - public const int TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256 = 0x00BB; - public const int TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256 = 0x00BC; - public const int TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256 = 0x00BD; - public const int TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 = 0x00BE; - public const int TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256 = 0x00BF; - - public const int TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256 = 0x00C0; - public const int TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256 = 0x00C1; - public const int TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256 = 0x00C2; - public const int TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256 = 0x00C3; - public const int TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256 = 0x00C4; - public const int TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256 = 0x00C5; - - /* - * RFC 4162 - */ - public const int TLS_RSA_WITH_SEED_CBC_SHA = 0x0096; - public const int TLS_DH_DSS_WITH_SEED_CBC_SHA = 0x0097; - public const int TLS_DH_RSA_WITH_SEED_CBC_SHA = 0x0098; - public const int TLS_DHE_DSS_WITH_SEED_CBC_SHA = 0x0099; - public const int TLS_DHE_RSA_WITH_SEED_CBC_SHA = 0x009A; - public const int TLS_DH_anon_WITH_SEED_CBC_SHA = 0x009B; - - /* - * RFC 4279 - */ - public const int TLS_PSK_WITH_RC4_128_SHA = 0x008A; - public const int TLS_PSK_WITH_3DES_EDE_CBC_SHA = 0x008B; - public const int TLS_PSK_WITH_AES_128_CBC_SHA = 0x008C; - public const int TLS_PSK_WITH_AES_256_CBC_SHA = 0x008D; - public const int TLS_DHE_PSK_WITH_RC4_128_SHA = 0x008E; - public const int TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA = 0x008F; - public const int TLS_DHE_PSK_WITH_AES_128_CBC_SHA = 0x0090; - public const int TLS_DHE_PSK_WITH_AES_256_CBC_SHA = 0x0091; - public const int TLS_RSA_PSK_WITH_RC4_128_SHA = 0x0092; - public const int TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA = 0x0093; - public const int TLS_RSA_PSK_WITH_AES_128_CBC_SHA = 0x0094; - public const int TLS_RSA_PSK_WITH_AES_256_CBC_SHA = 0x0095; - - /* - * RFC 4492 - */ - public const int TLS_ECDH_ECDSA_WITH_NULL_SHA = 0xC001; - public const int TLS_ECDH_ECDSA_WITH_RC4_128_SHA = 0xC002; - public const int TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA = 0xC003; - public const int TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA = 0xC004; - public const int TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA = 0xC005; - public const int TLS_ECDHE_ECDSA_WITH_NULL_SHA = 0xC006; - public const int TLS_ECDHE_ECDSA_WITH_RC4_128_SHA = 0xC007; - public const int TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA = 0xC008; - public const int TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA = 0xC009; - public const int TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA = 0xC00A; - public const int TLS_ECDH_RSA_WITH_NULL_SHA = 0xC00B; - public const int TLS_ECDH_RSA_WITH_RC4_128_SHA = 0xC00C; - public const int TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA = 0xC00D; - public const int TLS_ECDH_RSA_WITH_AES_128_CBC_SHA = 0xC00E; - public const int TLS_ECDH_RSA_WITH_AES_256_CBC_SHA = 0xC00F; - public const int TLS_ECDHE_RSA_WITH_NULL_SHA = 0xC010; - public const int TLS_ECDHE_RSA_WITH_RC4_128_SHA = 0xC011; - public const int TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA = 0xC012; - public const int TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA = 0xC013; - public const int TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA = 0xC014; - public const int TLS_ECDH_anon_WITH_NULL_SHA = 0xC015; - public const int TLS_ECDH_anon_WITH_RC4_128_SHA = 0xC016; - public const int TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA = 0xC017; - public const int TLS_ECDH_anon_WITH_AES_128_CBC_SHA = 0xC018; - public const int TLS_ECDH_anon_WITH_AES_256_CBC_SHA = 0xC019; - - /* - * RFC 4785 - */ - public const int TLS_PSK_WITH_NULL_SHA = 0x002C; - public const int TLS_DHE_PSK_WITH_NULL_SHA = 0x002D; - public const int TLS_RSA_PSK_WITH_NULL_SHA = 0x002E; - - /* - * RFC 5054 - */ - public const int TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA = 0xC01A; - public const int TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA = 0xC01B; - public const int TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA = 0xC01C; - public const int TLS_SRP_SHA_WITH_AES_128_CBC_SHA = 0xC01D; - public const int TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA = 0xC01E; - public const int TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA = 0xC01F; - public const int TLS_SRP_SHA_WITH_AES_256_CBC_SHA = 0xC020; - public const int TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA = 0xC021; - public const int TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA = 0xC022; - - /* - * RFC 5246 - */ - public const int TLS_RSA_WITH_NULL_SHA256 = 0x003B; - public const int TLS_RSA_WITH_AES_128_CBC_SHA256 = 0x003C; - public const int TLS_RSA_WITH_AES_256_CBC_SHA256 = 0x003D; - public const int TLS_DH_DSS_WITH_AES_128_CBC_SHA256 = 0x003E; - public const int TLS_DH_RSA_WITH_AES_128_CBC_SHA256 = 0x003F; - public const int TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 = 0x0040; - public const int TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 = 0x0067; - public const int TLS_DH_DSS_WITH_AES_256_CBC_SHA256 = 0x0068; - public const int TLS_DH_RSA_WITH_AES_256_CBC_SHA256 = 0x0069; - public const int TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 = 0x006A; - public const int TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 = 0x006B; - public const int TLS_DH_anon_WITH_AES_128_CBC_SHA256 = 0x006C; - public const int TLS_DH_anon_WITH_AES_256_CBC_SHA256 = 0x006D; - - /* - * RFC 5288 - */ - public const int TLS_RSA_WITH_AES_128_GCM_SHA256 = 0x009C; - public const int TLS_RSA_WITH_AES_256_GCM_SHA384 = 0x009D; - public const int TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 = 0x009E; - public const int TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 = 0x009F; - public const int TLS_DH_RSA_WITH_AES_128_GCM_SHA256 = 0x00A0; - public const int TLS_DH_RSA_WITH_AES_256_GCM_SHA384 = 0x00A1; - public const int TLS_DHE_DSS_WITH_AES_128_GCM_SHA256 = 0x00A2; - public const int TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 = 0x00A3; - public const int TLS_DH_DSS_WITH_AES_128_GCM_SHA256 = 0x00A4; - public const int TLS_DH_DSS_WITH_AES_256_GCM_SHA384 = 0x00A5; - public const int TLS_DH_anon_WITH_AES_128_GCM_SHA256 = 0x00A6; - public const int TLS_DH_anon_WITH_AES_256_GCM_SHA384 = 0x00A7; - - /* - * RFC 5289 - */ - public const int TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 = 0xC023; - public const int TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 = 0xC024; - public const int TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256 = 0xC025; - public const int TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 = 0xC026; - public const int TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 = 0xC027; - public const int TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 = 0xC028; - public const int TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256 = 0xC029; - public const int TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 = 0xC02A; - public const int TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 = 0xC02B; - public const int TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 = 0xC02C; - public const int TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256 = 0xC02D; - public const int TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384 = 0xC02E; - public const int TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 = 0xC02F; - public const int TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 = 0xC030; - public const int TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256 = 0xC031; - public const int TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384 = 0xC032; - - /* - * RFC 5487 - */ - public const int TLS_PSK_WITH_AES_128_GCM_SHA256 = 0x00A8; - public const int TLS_PSK_WITH_AES_256_GCM_SHA384 = 0x00A9; - public const int TLS_DHE_PSK_WITH_AES_128_GCM_SHA256 = 0x00AA; - public const int TLS_DHE_PSK_WITH_AES_256_GCM_SHA384 = 0x00AB; - public const int TLS_RSA_PSK_WITH_AES_128_GCM_SHA256 = 0x00AC; - public const int TLS_RSA_PSK_WITH_AES_256_GCM_SHA384 = 0x00AD; - public const int TLS_PSK_WITH_AES_128_CBC_SHA256 = 0x00AE; - public const int TLS_PSK_WITH_AES_256_CBC_SHA384 = 0x00AF; - public const int TLS_PSK_WITH_NULL_SHA256 = 0x00B0; - public const int TLS_PSK_WITH_NULL_SHA384 = 0x00B1; - public const int TLS_DHE_PSK_WITH_AES_128_CBC_SHA256 = 0x00B2; - public const int TLS_DHE_PSK_WITH_AES_256_CBC_SHA384 = 0x00B3; - public const int TLS_DHE_PSK_WITH_NULL_SHA256 = 0x00B4; - public const int TLS_DHE_PSK_WITH_NULL_SHA384 = 0x00B5; - public const int TLS_RSA_PSK_WITH_AES_128_CBC_SHA256 = 0x00B6; - public const int TLS_RSA_PSK_WITH_AES_256_CBC_SHA384 = 0x00B7; - public const int TLS_RSA_PSK_WITH_NULL_SHA256 = 0x00B8; - public const int TLS_RSA_PSK_WITH_NULL_SHA384 = 0x00B9; - - /* - * RFC 5489 - */ - public const int TLS_ECDHE_PSK_WITH_RC4_128_SHA = 0xC033; - public const int TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA = 0xC034; - public const int TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA = 0xC035; - public const int TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA = 0xC036; - public const int TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256 = 0xC037; - public const int TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384 = 0xC038; - public const int TLS_ECDHE_PSK_WITH_NULL_SHA = 0xC039; - public const int TLS_ECDHE_PSK_WITH_NULL_SHA256 = 0xC03A; - public const int TLS_ECDHE_PSK_WITH_NULL_SHA384 = 0xC03B; - - /* - * RFC 5746 - */ - public const int TLS_EMPTY_RENEGOTIATION_INFO_SCSV = 0x00FF; - - /* - * RFC 6367 - */ - public const int TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 = 0xC072; - public const int TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 = 0xC073; - public const int TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 = 0xC074; - public const int TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 = 0xC075; - public const int TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 = 0xC076; - public const int TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384 = 0xC077; - public const int TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256 = 0xC078; - public const int TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384 = 0xC079; - - public const int TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256 = 0xC07A; - public const int TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384 = 0xC07B; - public const int TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256 = 0xC07C; - public const int TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384 = 0xC07D; - public const int TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256 = 0xC07E; - public const int TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384 = 0xC07F; - public const int TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256 = 0xC080; - public const int TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384 = 0xC081; - public const int TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256 = 0xC082; - public const int TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384 = 0xC083; - public const int TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256 = 0xC084; - public const int TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384 = 0xC085; - public const int TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256 = 0xC086; - public const int TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384 = 0xC087; - public const int TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256 = 0xC088; - public const int TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384 = 0xC089; - public const int TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256 = 0xC08A; - public const int TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384 = 0xC08B; - public const int TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256 = 0xC08C; - public const int TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384 = 0xC08D; - - public const int TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256 = 0xC08E; - public const int TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384 = 0xC08F; - public const int TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256 = 0xC090; - public const int TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384 = 0xC091; - public const int TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256 = 0xC092; - public const int TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384 = 0xC093; - public const int TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256 = 0xC094; - public const int TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384 = 0xC095; - public const int TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256 = 0xC096; - public const int TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384 = 0xC097; - public const int TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256 = 0xC098; - public const int TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384 = 0xC099; - public const int TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256 = 0xC09A; - public const int TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384 = 0xC09B; - - /* - * RFC 6655 - */ - public const int TLS_RSA_WITH_AES_128_CCM = 0xC09C; - public const int TLS_RSA_WITH_AES_256_CCM = 0xC09D; - public const int TLS_DHE_RSA_WITH_AES_128_CCM = 0xC09E; - public const int TLS_DHE_RSA_WITH_AES_256_CCM = 0xC09F; - public const int TLS_RSA_WITH_AES_128_CCM_8 = 0xC0A0; - public const int TLS_RSA_WITH_AES_256_CCM_8 = 0xC0A1; - public const int TLS_DHE_RSA_WITH_AES_128_CCM_8 = 0xC0A2; - public const int TLS_DHE_RSA_WITH_AES_256_CCM_8 = 0xC0A3; - public const int TLS_PSK_WITH_AES_128_CCM = 0xC0A4; - public const int TLS_PSK_WITH_AES_256_CCM = 0xC0A5; - public const int TLS_DHE_PSK_WITH_AES_128_CCM = 0xC0A6; - public const int TLS_DHE_PSK_WITH_AES_256_CCM = 0xC0A7; - public const int TLS_PSK_WITH_AES_128_CCM_8 = 0xC0A8; - public const int TLS_PSK_WITH_AES_256_CCM_8 = 0xC0A9; - public const int TLS_PSK_DHE_WITH_AES_128_CCM_8 = 0xC0AA; - public const int TLS_PSK_DHE_WITH_AES_256_CCM_8 = 0xC0AB; - - /* - * RFC 7251 - */ - public const int TLS_ECDHE_ECDSA_WITH_AES_128_CCM = 0xC0AC; - public const int TLS_ECDHE_ECDSA_WITH_AES_256_CCM = 0xC0AD; - public const int TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8 = 0xC0AE; - public const int TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8 = 0xC0AF; - - /* - * RFC 7507 - */ - public const int TLS_FALLBACK_SCSV = 0x5600; - - /* - * draft-ietf-tls-chacha20-poly1305-04 - */ - public const int DRAFT_TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 = 0xCCA8; - public const int DRAFT_TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 = 0xCCA9; - public const int DRAFT_TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256 = 0xCCAA; - public const int DRAFT_TLS_PSK_WITH_CHACHA20_POLY1305_SHA256 = 0xCCAB; - public const int DRAFT_TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256 = 0xCCAC; - public const int DRAFT_TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256 = 0xCCAD; - public const int DRAFT_TLS_RSA_PSK_WITH_CHACHA20_POLY1305_SHA256 = 0xCCAE; - - /* - * draft-zauner-tls-aes-ocb-04 (code points TBD) - */ - public const int DRAFT_TLS_DHE_RSA_WITH_AES_128_OCB = 0xFF00; - public const int DRAFT_TLS_DHE_RSA_WITH_AES_256_OCB = 0xFF01; - public const int DRAFT_TLS_ECDHE_RSA_WITH_AES_128_OCB = 0xFF02; - public const int DRAFT_TLS_ECDHE_RSA_WITH_AES_256_OCB = 0xFF03; - public const int DRAFT_TLS_ECDHE_ECDSA_WITH_AES_128_OCB = 0xFF04; - public const int DRAFT_TLS_ECDHE_ECDSA_WITH_AES_256_OCB = 0xFF05; - public const int DRAFT_TLS_PSK_WITH_AES_128_OCB = 0xFF10; - public const int DRAFT_TLS_PSK_WITH_AES_256_OCB = 0xFF11; - public const int DRAFT_TLS_DHE_PSK_WITH_AES_128_OCB = 0xFF12; - public const int DRAFT_TLS_DHE_PSK_WITH_AES_256_OCB = 0xFF13; - public const int DRAFT_TLS_ECDHE_PSK_WITH_AES_128_OCB = 0xFF14; - public const int DRAFT_TLS_ECDHE_PSK_WITH_AES_256_OCB = 0xFF15; - - public static bool IsScsv(int cipherSuite) - { - switch (cipherSuite) - { - case TLS_EMPTY_RENEGOTIATION_INFO_SCSV: - case TLS_FALLBACK_SCSV: - return true; - default: - return false; - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/CipherType.cs b/bc-sharp-crypto/src/crypto/tls/CipherType.cs deleted file mode 100644 index b2ad7d8..0000000 --- a/bc-sharp-crypto/src/crypto/tls/CipherType.cs +++ /dev/null @@ -1,20 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /// RFC 2246 - /// - /// Note that the values here are implementation-specific and arbitrary. It is recommended not to - /// depend on the particular values (e.g. serialization). - /// - public abstract class CipherType - { - public const int stream = 0; - public const int block = 1; - - /* - * RFC 5246 - */ - public const int aead = 2; - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/ClientAuthenticationType.cs b/bc-sharp-crypto/src/crypto/tls/ClientAuthenticationType.cs deleted file mode 100644 index dd248f3..0000000 --- a/bc-sharp-crypto/src/crypto/tls/ClientAuthenticationType.cs +++ /dev/null @@ -1,14 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public abstract class ClientAuthenticationType - { - /* - * RFC 5077 4 - */ - public const byte anonymous = 0; - public const byte certificate_based = 1; - public const byte psk = 2; - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/ClientCertificateType.cs b/bc-sharp-crypto/src/crypto/tls/ClientCertificateType.cs deleted file mode 100644 index a291a46..0000000 --- a/bc-sharp-crypto/src/crypto/tls/ClientCertificateType.cs +++ /dev/null @@ -1,23 +0,0 @@ -namespace Org.BouncyCastle.Crypto.Tls -{ - public abstract class ClientCertificateType - { - /* - * RFC 4346 7.4.4 - */ - public const byte rsa_sign = 1; - public const byte dss_sign = 2; - public const byte rsa_fixed_dh = 3; - public const byte dss_fixed_dh = 4; - public const byte rsa_ephemeral_dh_RESERVED = 5; - public const byte dss_ephemeral_dh_RESERVED = 6; - public const byte fortezza_dms_RESERVED = 20; - - /* - * RFC 4492 5.5 - */ - public const byte ecdsa_sign = 64; - public const byte rsa_fixed_ecdh = 65; - public const byte ecdsa_fixed_ecdh = 66; - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/CombinedHash.cs b/bc-sharp-crypto/src/crypto/tls/CombinedHash.cs deleted file mode 100644 index 74a52d5..0000000 --- a/bc-sharp-crypto/src/crypto/tls/CombinedHash.cs +++ /dev/null @@ -1,133 +0,0 @@ -using System; - -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /** - * A combined hash, which implements md5(m) || sha1(m). - */ - internal class CombinedHash - : TlsHandshakeHash - { - protected TlsContext mContext; - protected IDigest mMd5; - protected IDigest mSha1; - - internal CombinedHash() - { - this.mMd5 = TlsUtilities.CreateHash(HashAlgorithm.md5); - this.mSha1 = TlsUtilities.CreateHash(HashAlgorithm.sha1); - } - - internal CombinedHash(CombinedHash t) - { - this.mContext = t.mContext; - this.mMd5 = TlsUtilities.CloneHash(HashAlgorithm.md5, t.mMd5); - this.mSha1 = TlsUtilities.CloneHash(HashAlgorithm.sha1, t.mSha1); - } - - public virtual void Init(TlsContext context) - { - this.mContext = context; - } - - public virtual TlsHandshakeHash NotifyPrfDetermined() - { - return this; - } - - public virtual void TrackHashAlgorithm(byte hashAlgorithm) - { - throw new InvalidOperationException("CombinedHash only supports calculating the legacy PRF for handshake hash"); - } - - public virtual void SealHashAlgorithms() - { - } - - public virtual TlsHandshakeHash StopTracking() - { - return new CombinedHash(this); - } - - public virtual IDigest ForkPrfHash() - { - return new CombinedHash(this); - } - - public virtual byte[] GetFinalHash(byte hashAlgorithm) - { - throw new InvalidOperationException("CombinedHash doesn't support multiple hashes"); - } - - public virtual string AlgorithmName - { - get { return mMd5.AlgorithmName + " and " + mSha1.AlgorithmName; } - } - - public virtual int GetByteLength() - { - return System.Math.Max(mMd5.GetByteLength(), mSha1.GetByteLength()); - } - - public virtual int GetDigestSize() - { - return mMd5.GetDigestSize() + mSha1.GetDigestSize(); - } - - public virtual void Update(byte input) - { - mMd5.Update(input); - mSha1.Update(input); - } - - /** - * @see org.bouncycastle.crypto.Digest#update(byte[], int, int) - */ - public virtual void BlockUpdate(byte[] input, int inOff, int len) - { - mMd5.BlockUpdate(input, inOff, len); - mSha1.BlockUpdate(input, inOff, len); - } - - /** - * @see org.bouncycastle.crypto.Digest#doFinal(byte[], int) - */ - public virtual int DoFinal(byte[] output, int outOff) - { - if (mContext != null && TlsUtilities.IsSsl(mContext)) - { - Ssl3Complete(mMd5, Ssl3Mac.IPAD, Ssl3Mac.OPAD, 48); - Ssl3Complete(mSha1, Ssl3Mac.IPAD, Ssl3Mac.OPAD, 40); - } - - int i1 = mMd5.DoFinal(output, outOff); - int i2 = mSha1.DoFinal(output, outOff + i1); - return i1 + i2; - } - - /** - * @see org.bouncycastle.crypto.Digest#reset() - */ - public virtual void Reset() - { - mMd5.Reset(); - mSha1.Reset(); - } - - protected virtual void Ssl3Complete(IDigest d, byte[] ipad, byte[] opad, int padLength) - { - byte[] master_secret = mContext.SecurityParameters.masterSecret; - - d.BlockUpdate(master_secret, 0, master_secret.Length); - d.BlockUpdate(ipad, 0, padLength); - - byte[] tmp = DigestUtilities.DoFinal(d); - - d.BlockUpdate(master_secret, 0, master_secret.Length); - d.BlockUpdate(opad, 0, padLength); - d.BlockUpdate(tmp, 0, tmp.Length); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/CompressionMethod.cs b/bc-sharp-crypto/src/crypto/tls/CompressionMethod.cs deleted file mode 100644 index 89c1f5f..0000000 --- a/bc-sharp-crypto/src/crypto/tls/CompressionMethod.cs +++ /dev/null @@ -1,22 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /// - /// RFC 2246 6.1 - /// - public abstract class CompressionMethod - { - public const byte cls_null = 0; - - /* - * RFC 3749 2 - */ - public const byte DEFLATE = 1; - - /* - * Values from 224 decimal (0xE0) through 255 decimal (0xFF) - * inclusive are reserved for private use. - */ - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/ConnectionEnd.cs b/bc-sharp-crypto/src/crypto/tls/ConnectionEnd.cs deleted file mode 100644 index afc9460..0000000 --- a/bc-sharp-crypto/src/crypto/tls/ConnectionEnd.cs +++ /dev/null @@ -1,15 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /// RFC 2246 - /// - /// Note that the values here are implementation-specific and arbitrary. It is recommended not to - /// depend on the particular values (e.g. serialization). - /// - public abstract class ConnectionEnd - { - public const int server = 0; - public const int client = 1; - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/ContentType.cs b/bc-sharp-crypto/src/crypto/tls/ContentType.cs deleted file mode 100644 index d6ab438..0000000 --- a/bc-sharp-crypto/src/crypto/tls/ContentType.cs +++ /dev/null @@ -1,14 +0,0 @@ -namespace Org.BouncyCastle.Crypto.Tls -{ - /** - * RFC 2246 6.2.1 - */ - public abstract class ContentType - { - public const byte change_cipher_spec = 20; - public const byte alert = 21; - public const byte handshake = 22; - public const byte application_data = 23; - public const byte heartbeat = 24; - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/DatagramTransport.cs b/bc-sharp-crypto/src/crypto/tls/DatagramTransport.cs deleted file mode 100644 index 524a8b1..0000000 --- a/bc-sharp-crypto/src/crypto/tls/DatagramTransport.cs +++ /dev/null @@ -1,23 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public interface DatagramTransport - { - /// - int GetReceiveLimit(); - - /// - int GetSendLimit(); - - /// - int Receive(byte[] buf, int off, int len, int waitMillis); - - /// - void Send(byte[] buf, int off, int len); - - /// - void Close(); - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/DefaultTlsAgreementCredentials.cs b/bc-sharp-crypto/src/crypto/tls/DefaultTlsAgreementCredentials.cs deleted file mode 100644 index fab9788..0000000 --- a/bc-sharp-crypto/src/crypto/tls/DefaultTlsAgreementCredentials.cs +++ /dev/null @@ -1,69 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Crypto.Agreement; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class DefaultTlsAgreementCredentials - : AbstractTlsAgreementCredentials - { - protected readonly Certificate mCertificate; - protected readonly AsymmetricKeyParameter mPrivateKey; - - protected readonly IBasicAgreement mBasicAgreement; - protected readonly bool mTruncateAgreement; - - public DefaultTlsAgreementCredentials(Certificate certificate, AsymmetricKeyParameter privateKey) - { - if (certificate == null) - throw new ArgumentNullException("certificate"); - if (certificate.IsEmpty) - throw new ArgumentException("cannot be empty", "certificate"); - if (privateKey == null) - throw new ArgumentNullException("privateKey"); - if (!privateKey.IsPrivate) - throw new ArgumentException("must be private", "privateKey"); - - if (privateKey is DHPrivateKeyParameters) - { - mBasicAgreement = new DHBasicAgreement(); - mTruncateAgreement = true; - } - else if (privateKey is ECPrivateKeyParameters) - { - mBasicAgreement = new ECDHBasicAgreement(); - mTruncateAgreement = false; - } - else - { - throw new ArgumentException("type not supported: " + Platform.GetTypeName(privateKey), "privateKey"); - } - - this.mCertificate = certificate; - this.mPrivateKey = privateKey; - } - - public override Certificate Certificate - { - get { return mCertificate; } - } - - /// - public override byte[] GenerateAgreement(AsymmetricKeyParameter peerPublicKey) - { - mBasicAgreement.Init(mPrivateKey); - BigInteger agreementValue = mBasicAgreement.CalculateAgreement(peerPublicKey); - - if (mTruncateAgreement) - { - return BigIntegers.AsUnsignedByteArray(agreementValue); - } - - return BigIntegers.AsUnsignedByteArray(mBasicAgreement.GetFieldSize(), agreementValue); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/DefaultTlsCipherFactory.cs b/bc-sharp-crypto/src/crypto/tls/DefaultTlsCipherFactory.cs deleted file mode 100644 index af0ec12..0000000 --- a/bc-sharp-crypto/src/crypto/tls/DefaultTlsCipherFactory.cs +++ /dev/null @@ -1,227 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Crypto.Engines; -using Org.BouncyCastle.Crypto.Modes; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class DefaultTlsCipherFactory - : AbstractTlsCipherFactory - { - /// - public override TlsCipher CreateCipher(TlsContext context, int encryptionAlgorithm, int macAlgorithm) - { - switch (encryptionAlgorithm) - { - case EncryptionAlgorithm.cls_3DES_EDE_CBC: - return CreateDesEdeCipher(context, macAlgorithm); - case EncryptionAlgorithm.AES_128_CBC: - return CreateAESCipher(context, 16, macAlgorithm); - case EncryptionAlgorithm.AES_128_CCM: - // NOTE: Ignores macAlgorithm - return CreateCipher_Aes_Ccm(context, 16, 16); - case EncryptionAlgorithm.AES_128_CCM_8: - // NOTE: Ignores macAlgorithm - return CreateCipher_Aes_Ccm(context, 16, 8); - case EncryptionAlgorithm.AES_128_GCM: - // NOTE: Ignores macAlgorithm - return CreateCipher_Aes_Gcm(context, 16, 16); - case EncryptionAlgorithm.AES_128_OCB_TAGLEN96: - // NOTE: Ignores macAlgorithm - return CreateCipher_Aes_Ocb(context, 16, 12); - case EncryptionAlgorithm.AES_256_CBC: - return CreateAESCipher(context, 32, macAlgorithm); - case EncryptionAlgorithm.AES_256_CCM: - // NOTE: Ignores macAlgorithm - return CreateCipher_Aes_Ccm(context, 32, 16); - case EncryptionAlgorithm.AES_256_CCM_8: - // NOTE: Ignores macAlgorithm - return CreateCipher_Aes_Ccm(context, 32, 8); - case EncryptionAlgorithm.AES_256_GCM: - // NOTE: Ignores macAlgorithm - return CreateCipher_Aes_Gcm(context, 32, 16); - case EncryptionAlgorithm.AES_256_OCB_TAGLEN96: - // NOTE: Ignores macAlgorithm - return CreateCipher_Aes_Ocb(context, 32, 12); - case EncryptionAlgorithm.CAMELLIA_128_CBC: - return CreateCamelliaCipher(context, 16, macAlgorithm); - case EncryptionAlgorithm.CAMELLIA_128_GCM: - // NOTE: Ignores macAlgorithm - return CreateCipher_Camellia_Gcm(context, 16, 16); - case EncryptionAlgorithm.CAMELLIA_256_CBC: - return CreateCamelliaCipher(context, 32, macAlgorithm); - case EncryptionAlgorithm.CAMELLIA_256_GCM: - // NOTE: Ignores macAlgorithm - return CreateCipher_Camellia_Gcm(context, 32, 16); - case EncryptionAlgorithm.CHACHA20_POLY1305: - // NOTE: Ignores macAlgorithm - return CreateChaCha20Poly1305(context); - case EncryptionAlgorithm.NULL: - return CreateNullCipher(context, macAlgorithm); - case EncryptionAlgorithm.RC4_128: - return CreateRC4Cipher(context, 16, macAlgorithm); - case EncryptionAlgorithm.SEED_CBC: - return CreateSeedCipher(context, macAlgorithm); - default: - throw new TlsFatalAlert(AlertDescription.internal_error); - } - } - - /// - protected virtual TlsBlockCipher CreateAESCipher(TlsContext context, int cipherKeySize, int macAlgorithm) - { - return new TlsBlockCipher(context, CreateAesBlockCipher(), CreateAesBlockCipher(), - CreateHMacDigest(macAlgorithm), CreateHMacDigest(macAlgorithm), cipherKeySize); - } - - /// - protected virtual TlsBlockCipher CreateCamelliaCipher(TlsContext context, int cipherKeySize, int macAlgorithm) - { - return new TlsBlockCipher(context, CreateCamelliaBlockCipher(), - CreateCamelliaBlockCipher(), CreateHMacDigest(macAlgorithm), - CreateHMacDigest(macAlgorithm), cipherKeySize); - } - - /// - protected virtual TlsCipher CreateChaCha20Poly1305(TlsContext context) - { - return new Chacha20Poly1305(context); - } - - /// - protected virtual TlsAeadCipher CreateCipher_Aes_Ccm(TlsContext context, int cipherKeySize, int macSize) - { - return new TlsAeadCipher(context, CreateAeadBlockCipher_Aes_Ccm(), - CreateAeadBlockCipher_Aes_Ccm(), cipherKeySize, macSize); - } - - /// - protected virtual TlsAeadCipher CreateCipher_Aes_Gcm(TlsContext context, int cipherKeySize, int macSize) - { - return new TlsAeadCipher(context, CreateAeadBlockCipher_Aes_Gcm(), - CreateAeadBlockCipher_Aes_Gcm(), cipherKeySize, macSize); - } - - /// - protected virtual TlsAeadCipher CreateCipher_Aes_Ocb(TlsContext context, int cipherKeySize, int macSize) - { - return new TlsAeadCipher(context, CreateAeadBlockCipher_Aes_Ocb(), - CreateAeadBlockCipher_Aes_Ocb(), cipherKeySize, macSize, TlsAeadCipher.NONCE_DRAFT_CHACHA20_POLY1305); - } - - /// - protected virtual TlsAeadCipher CreateCipher_Camellia_Gcm(TlsContext context, int cipherKeySize, int macSize) - { - return new TlsAeadCipher(context, CreateAeadBlockCipher_Camellia_Gcm(), - CreateAeadBlockCipher_Camellia_Gcm(), cipherKeySize, macSize); - } - - /// - protected virtual TlsBlockCipher CreateDesEdeCipher(TlsContext context, int macAlgorithm) - { - return new TlsBlockCipher(context, CreateDesEdeBlockCipher(), CreateDesEdeBlockCipher(), - CreateHMacDigest(macAlgorithm), CreateHMacDigest(macAlgorithm), 24); - } - - /// - protected virtual TlsNullCipher CreateNullCipher(TlsContext context, int macAlgorithm) - { - return new TlsNullCipher(context, CreateHMacDigest(macAlgorithm), - CreateHMacDigest(macAlgorithm)); - } - - /// - protected virtual TlsStreamCipher CreateRC4Cipher(TlsContext context, int cipherKeySize, int macAlgorithm) - { - return new TlsStreamCipher(context, CreateRC4StreamCipher(), CreateRC4StreamCipher(), - CreateHMacDigest(macAlgorithm), CreateHMacDigest(macAlgorithm), cipherKeySize, false); - } - - /// - protected virtual TlsBlockCipher CreateSeedCipher(TlsContext context, int macAlgorithm) - { - return new TlsBlockCipher(context, CreateSeedBlockCipher(), CreateSeedBlockCipher(), - CreateHMacDigest(macAlgorithm), CreateHMacDigest(macAlgorithm), 16); - } - - protected virtual IBlockCipher CreateAesEngine() - { - return new AesEngine(); - } - - protected virtual IBlockCipher CreateCamelliaEngine() - { - return new CamelliaEngine(); - } - - protected virtual IBlockCipher CreateAesBlockCipher() - { - return new CbcBlockCipher(CreateAesEngine()); - } - - protected virtual IAeadBlockCipher CreateAeadBlockCipher_Aes_Ccm() - { - return new CcmBlockCipher(CreateAesEngine()); - } - - protected virtual IAeadBlockCipher CreateAeadBlockCipher_Aes_Gcm() - { - // TODO Consider allowing custom configuration of multiplier - return new GcmBlockCipher(CreateAesEngine()); - } - - protected virtual IAeadBlockCipher CreateAeadBlockCipher_Aes_Ocb() - { - return new OcbBlockCipher(CreateAesEngine(), CreateAesEngine()); - } - - protected virtual IAeadBlockCipher CreateAeadBlockCipher_Camellia_Gcm() - { - // TODO Consider allowing custom configuration of multiplier - return new GcmBlockCipher(CreateCamelliaEngine()); - } - - protected virtual IBlockCipher CreateCamelliaBlockCipher() - { - return new CbcBlockCipher(CreateCamelliaEngine()); - } - - protected virtual IBlockCipher CreateDesEdeBlockCipher() - { - return new CbcBlockCipher(new DesEdeEngine()); - } - - protected virtual IStreamCipher CreateRC4StreamCipher() - { - return new RC4Engine(); - } - - protected virtual IBlockCipher CreateSeedBlockCipher() - { - return new CbcBlockCipher(new SeedEngine()); - } - - /// - protected virtual IDigest CreateHMacDigest(int macAlgorithm) - { - switch (macAlgorithm) - { - case MacAlgorithm.cls_null: - return null; - case MacAlgorithm.hmac_md5: - return TlsUtilities.CreateHash(HashAlgorithm.md5); - case MacAlgorithm.hmac_sha1: - return TlsUtilities.CreateHash(HashAlgorithm.sha1); - case MacAlgorithm.hmac_sha256: - return TlsUtilities.CreateHash(HashAlgorithm.sha256); - case MacAlgorithm.hmac_sha384: - return TlsUtilities.CreateHash(HashAlgorithm.sha384); - case MacAlgorithm.hmac_sha512: - return TlsUtilities.CreateHash(HashAlgorithm.sha512); - default: - throw new TlsFatalAlert(AlertDescription.internal_error); - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/DefaultTlsClient.cs b/bc-sharp-crypto/src/crypto/tls/DefaultTlsClient.cs deleted file mode 100644 index 32a86e5..0000000 --- a/bc-sharp-crypto/src/crypto/tls/DefaultTlsClient.cs +++ /dev/null @@ -1,113 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Crypto.Engines; -using Org.BouncyCastle.Crypto.Modes; -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public abstract class DefaultTlsClient - : AbstractTlsClient - { - public DefaultTlsClient() - : base() - { - } - - public DefaultTlsClient(TlsCipherFactory cipherFactory) - : base(cipherFactory) - { - } - - public override int[] GetCipherSuites() - { - return new int[] - { - CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, - CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, - CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, - CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, - CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, - CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, - CipherSuite.TLS_DHE_DSS_WITH_AES_128_GCM_SHA256, - CipherSuite.TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, - CipherSuite.TLS_DHE_DSS_WITH_AES_128_CBC_SHA, - CipherSuite.TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, - CipherSuite.TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, - CipherSuite.TLS_DHE_RSA_WITH_AES_128_CBC_SHA, - CipherSuite.TLS_RSA_WITH_AES_128_GCM_SHA256, - CipherSuite.TLS_RSA_WITH_AES_128_CBC_SHA256, - CipherSuite.TLS_RSA_WITH_AES_128_CBC_SHA, - }; - } - - public override TlsKeyExchange GetKeyExchange() - { - int keyExchangeAlgorithm = TlsUtilities.GetKeyExchangeAlgorithm(mSelectedCipherSuite); - - switch (keyExchangeAlgorithm) - { - case KeyExchangeAlgorithm.DH_anon: - case KeyExchangeAlgorithm.DH_DSS: - case KeyExchangeAlgorithm.DH_RSA: - return CreateDHKeyExchange(keyExchangeAlgorithm); - - case KeyExchangeAlgorithm.DHE_DSS: - case KeyExchangeAlgorithm.DHE_RSA: - return CreateDheKeyExchange(keyExchangeAlgorithm); - - case KeyExchangeAlgorithm.ECDH_anon: - case KeyExchangeAlgorithm.ECDH_ECDSA: - case KeyExchangeAlgorithm.ECDH_RSA: - return CreateECDHKeyExchange(keyExchangeAlgorithm); - - case KeyExchangeAlgorithm.ECDHE_ECDSA: - case KeyExchangeAlgorithm.ECDHE_RSA: - return CreateECDheKeyExchange(keyExchangeAlgorithm); - - case KeyExchangeAlgorithm.RSA: - return CreateRsaKeyExchange(); - - default: - /* - * Note: internal error here; the TlsProtocol implementation verifies that the - * server-selected cipher suite was in the list of client-offered cipher suites, so if - * we now can't produce an implementation, we shouldn't have offered it! - */ - throw new TlsFatalAlert(AlertDescription.internal_error); - } - } - - protected virtual TlsKeyExchange CreateDHKeyExchange(int keyExchange) - { - return new TlsDHKeyExchange(keyExchange, mSupportedSignatureAlgorithms, null); - } - - protected virtual TlsKeyExchange CreateDheKeyExchange(int keyExchange) - { - return new TlsDheKeyExchange(keyExchange, mSupportedSignatureAlgorithms, null); - } - - protected virtual TlsKeyExchange CreateECDHKeyExchange(int keyExchange) - { - return new TlsECDHKeyExchange(keyExchange, mSupportedSignatureAlgorithms, mNamedCurves, mClientECPointFormats, - mServerECPointFormats); - } - - protected virtual TlsKeyExchange CreateECDheKeyExchange(int keyExchange) - { - return new TlsECDheKeyExchange(keyExchange, mSupportedSignatureAlgorithms, mNamedCurves, mClientECPointFormats, - mServerECPointFormats); - } - - protected virtual TlsKeyExchange CreateRsaKeyExchange() - { - return new TlsRsaKeyExchange(mSupportedSignatureAlgorithms); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/DefaultTlsEncryptionCredentials.cs b/bc-sharp-crypto/src/crypto/tls/DefaultTlsEncryptionCredentials.cs deleted file mode 100644 index 5348ee8..0000000 --- a/bc-sharp-crypto/src/crypto/tls/DefaultTlsEncryptionCredentials.cs +++ /dev/null @@ -1,52 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class DefaultTlsEncryptionCredentials - : AbstractTlsEncryptionCredentials - { - protected readonly TlsContext mContext; - protected readonly Certificate mCertificate; - protected readonly AsymmetricKeyParameter mPrivateKey; - - public DefaultTlsEncryptionCredentials(TlsContext context, Certificate certificate, - AsymmetricKeyParameter privateKey) - { - if (certificate == null) - throw new ArgumentNullException("certificate"); - if (certificate.IsEmpty) - throw new ArgumentException("cannot be empty", "certificate"); - if (privateKey == null) - throw new ArgumentNullException("'privateKey' cannot be null"); - if (!privateKey.IsPrivate) - throw new ArgumentException("must be private", "privateKey"); - - if (privateKey is RsaKeyParameters) - { - } - else - { - throw new ArgumentException("type not supported: " + Platform.GetTypeName(privateKey), "privateKey"); - } - - this.mContext = context; - this.mCertificate = certificate; - this.mPrivateKey = privateKey; - } - - public override Certificate Certificate - { - get { return mCertificate; } - } - - /// - public override byte[] DecryptPreMasterSecret(byte[] encryptedPreMasterSecret) - { - return TlsRsaUtilities.SafeDecryptPreMasterSecret(mContext, (RsaKeyParameters)mPrivateKey, encryptedPreMasterSecret); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/DefaultTlsServer.cs b/bc-sharp-crypto/src/crypto/tls/DefaultTlsServer.cs deleted file mode 100644 index 97eaa07..0000000 --- a/bc-sharp-crypto/src/crypto/tls/DefaultTlsServer.cs +++ /dev/null @@ -1,166 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Crypto.Agreement; -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public abstract class DefaultTlsServer - : AbstractTlsServer - { - public DefaultTlsServer() - : base() - { - } - - public DefaultTlsServer(TlsCipherFactory cipherFactory) - : base(cipherFactory) - { - } - - protected virtual TlsSignerCredentials GetDsaSignerCredentials() - { - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - protected virtual TlsSignerCredentials GetECDsaSignerCredentials() - { - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - protected virtual TlsEncryptionCredentials GetRsaEncryptionCredentials() - { - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - protected virtual TlsSignerCredentials GetRsaSignerCredentials() - { - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - protected virtual DHParameters GetDHParameters() - { - return DHStandardGroups.rfc7919_ffdhe2048; - } - - protected override int[] GetCipherSuites() - { - return new int[] - { - CipherSuite.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, - CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, - CipherSuite.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, - CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, - CipherSuite.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, - CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, - CipherSuite.TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, - CipherSuite.TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, - CipherSuite.TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, - CipherSuite.TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, - CipherSuite.TLS_DHE_RSA_WITH_AES_256_CBC_SHA, - CipherSuite.TLS_DHE_RSA_WITH_AES_128_CBC_SHA, - CipherSuite.TLS_RSA_WITH_AES_256_GCM_SHA384, - CipherSuite.TLS_RSA_WITH_AES_128_GCM_SHA256, - CipherSuite.TLS_RSA_WITH_AES_256_CBC_SHA256, - CipherSuite.TLS_RSA_WITH_AES_128_CBC_SHA256, - CipherSuite.TLS_RSA_WITH_AES_256_CBC_SHA, - CipherSuite.TLS_RSA_WITH_AES_128_CBC_SHA, - }; - } - - public override TlsCredentials GetCredentials() - { - int keyExchangeAlgorithm = TlsUtilities.GetKeyExchangeAlgorithm(mSelectedCipherSuite); - - switch (keyExchangeAlgorithm) - { - case KeyExchangeAlgorithm.DHE_DSS: - return GetDsaSignerCredentials(); - - case KeyExchangeAlgorithm.DH_anon: - case KeyExchangeAlgorithm.ECDH_anon: - return null; - - case KeyExchangeAlgorithm.ECDHE_ECDSA: - return GetECDsaSignerCredentials(); - - case KeyExchangeAlgorithm.DHE_RSA: - case KeyExchangeAlgorithm.ECDHE_RSA: - return GetRsaSignerCredentials(); - - case KeyExchangeAlgorithm.RSA: - return GetRsaEncryptionCredentials(); - - default: - /* Note: internal error here; selected a key exchange we don't implement! */ - throw new TlsFatalAlert(AlertDescription.internal_error); - } - } - - public override TlsKeyExchange GetKeyExchange() - { - int keyExchangeAlgorithm = TlsUtilities.GetKeyExchangeAlgorithm(mSelectedCipherSuite); - - switch (keyExchangeAlgorithm) - { - case KeyExchangeAlgorithm.DH_anon: - case KeyExchangeAlgorithm.DH_DSS: - case KeyExchangeAlgorithm.DH_RSA: - return CreateDHKeyExchange(keyExchangeAlgorithm); - - case KeyExchangeAlgorithm.DHE_DSS: - case KeyExchangeAlgorithm.DHE_RSA: - return CreateDheKeyExchange(keyExchangeAlgorithm); - - case KeyExchangeAlgorithm.ECDH_anon: - case KeyExchangeAlgorithm.ECDH_ECDSA: - case KeyExchangeAlgorithm.ECDH_RSA: - return CreateECDHKeyExchange(keyExchangeAlgorithm); - - case KeyExchangeAlgorithm.ECDHE_ECDSA: - case KeyExchangeAlgorithm.ECDHE_RSA: - return CreateECDheKeyExchange(keyExchangeAlgorithm); - - case KeyExchangeAlgorithm.RSA: - return CreateRsaKeyExchange(); - - default: - /* - * Note: internal error here; the TlsProtocol implementation verifies that the - * server-selected cipher suite was in the list of client-offered cipher suites, so if - * we now can't produce an implementation, we shouldn't have offered it! - */ - throw new TlsFatalAlert(AlertDescription.internal_error); - } - } - - protected virtual TlsKeyExchange CreateDHKeyExchange(int keyExchange) - { - return new TlsDHKeyExchange(keyExchange, mSupportedSignatureAlgorithms, GetDHParameters()); - } - - protected virtual TlsKeyExchange CreateDheKeyExchange(int keyExchange) - { - return new TlsDheKeyExchange(keyExchange, mSupportedSignatureAlgorithms, GetDHParameters()); - } - - protected virtual TlsKeyExchange CreateECDHKeyExchange(int keyExchange) - { - return new TlsECDHKeyExchange(keyExchange, mSupportedSignatureAlgorithms, mNamedCurves, mClientECPointFormats, - mServerECPointFormats); - } - - protected virtual TlsKeyExchange CreateECDheKeyExchange(int keyExchange) - { - return new TlsECDheKeyExchange(keyExchange, mSupportedSignatureAlgorithms, mNamedCurves, mClientECPointFormats, - mServerECPointFormats); - } - - protected virtual TlsKeyExchange CreateRsaKeyExchange() - { - return new TlsRsaKeyExchange(mSupportedSignatureAlgorithms); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/DefaultTlsSignerCredentials.cs b/bc-sharp-crypto/src/crypto/tls/DefaultTlsSignerCredentials.cs deleted file mode 100644 index 0ff732a..0000000 --- a/bc-sharp-crypto/src/crypto/tls/DefaultTlsSignerCredentials.cs +++ /dev/null @@ -1,93 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class DefaultTlsSignerCredentials - : AbstractTlsSignerCredentials - { - protected readonly TlsContext mContext; - protected readonly Certificate mCertificate; - protected readonly AsymmetricKeyParameter mPrivateKey; - protected readonly SignatureAndHashAlgorithm mSignatureAndHashAlgorithm; - - protected readonly TlsSigner mSigner; - - public DefaultTlsSignerCredentials(TlsContext context, Certificate certificate, AsymmetricKeyParameter privateKey) - : this(context, certificate, privateKey, null) - { - } - - public DefaultTlsSignerCredentials(TlsContext context, Certificate certificate, AsymmetricKeyParameter privateKey, - SignatureAndHashAlgorithm signatureAndHashAlgorithm) - { - if (certificate == null) - throw new ArgumentNullException("certificate"); - if (certificate.IsEmpty) - throw new ArgumentException("cannot be empty", "clientCertificate"); - if (privateKey == null) - throw new ArgumentNullException("privateKey"); - if (!privateKey.IsPrivate) - throw new ArgumentException("must be private", "privateKey"); - if (TlsUtilities.IsTlsV12(context) && signatureAndHashAlgorithm == null) - throw new ArgumentException("cannot be null for (D)TLS 1.2+", "signatureAndHashAlgorithm"); - - if (privateKey is RsaKeyParameters) - { - mSigner = new TlsRsaSigner(); - } - else if (privateKey is DsaPrivateKeyParameters) - { - mSigner = new TlsDssSigner(); - } - else if (privateKey is ECPrivateKeyParameters) - { - mSigner = new TlsECDsaSigner(); - } - else - { - throw new ArgumentException("type not supported: " + Platform.GetTypeName(privateKey), "privateKey"); - } - - this.mSigner.Init(context); - - this.mContext = context; - this.mCertificate = certificate; - this.mPrivateKey = privateKey; - this.mSignatureAndHashAlgorithm = signatureAndHashAlgorithm; - } - - public override Certificate Certificate - { - get { return mCertificate; } - } - - /// - public override byte[] GenerateCertificateSignature(byte[] hash) - { - try - { - if (TlsUtilities.IsTlsV12(mContext)) - { - return mSigner.GenerateRawSignature(mSignatureAndHashAlgorithm, mPrivateKey, hash); - } - else - { - return mSigner.GenerateRawSignature(mPrivateKey, hash); - } - } - catch (CryptoException e) - { - throw new TlsFatalAlert(AlertDescription.internal_error, e); - } - } - - public override SignatureAndHashAlgorithm SignatureAndHashAlgorithm - { - get { return mSignatureAndHashAlgorithm; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/DefaultTlsSrpGroupVerifier.cs b/bc-sharp-crypto/src/crypto/tls/DefaultTlsSrpGroupVerifier.cs deleted file mode 100644 index cc933bf..0000000 --- a/bc-sharp-crypto/src/crypto/tls/DefaultTlsSrpGroupVerifier.cs +++ /dev/null @@ -1,70 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Crypto.Agreement.Srp; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class DefaultTlsSrpGroupVerifier - : TlsSrpGroupVerifier - { - protected static readonly IList DefaultGroups = Platform.CreateArrayList(); - - static DefaultTlsSrpGroupVerifier() - { - DefaultGroups.Add(Srp6StandardGroups.rfc5054_1024); - DefaultGroups.Add(Srp6StandardGroups.rfc5054_1536); - DefaultGroups.Add(Srp6StandardGroups.rfc5054_2048); - DefaultGroups.Add(Srp6StandardGroups.rfc5054_3072); - DefaultGroups.Add(Srp6StandardGroups.rfc5054_4096); - DefaultGroups.Add(Srp6StandardGroups.rfc5054_6144); - DefaultGroups.Add(Srp6StandardGroups.rfc5054_8192); - } - - // Vector is (SRP6GroupParameters) - protected readonly IList mGroups; - - /** - * Accept only the group parameters specified in RFC 5054 Appendix A. - */ - public DefaultTlsSrpGroupVerifier() - : this(DefaultGroups) - { - } - - /** - * Specify a custom set of acceptable group parameters. - * - * @param groups a {@link Vector} of acceptable {@link SRP6GroupParameters} - */ - public DefaultTlsSrpGroupVerifier(IList groups) - { - this.mGroups = groups; - } - - public virtual bool Accept(Srp6GroupParameters group) - { - foreach (Srp6GroupParameters entry in mGroups) - { - if (AreGroupsEqual(group, entry)) - { - return true; - } - } - return false; - } - - protected virtual bool AreGroupsEqual(Srp6GroupParameters a, Srp6GroupParameters b) - { - return a == b || (AreParametersEqual(a.N, b.N) && AreParametersEqual(a.G, b.G)); - } - - protected virtual bool AreParametersEqual(BigInteger a, BigInteger b) - { - return a == b || a.Equals(b); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/DeferredHash.cs b/bc-sharp-crypto/src/crypto/tls/DeferredHash.cs deleted file mode 100644 index f402f26..0000000 --- a/bc-sharp-crypto/src/crypto/tls/DeferredHash.cs +++ /dev/null @@ -1,201 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /** - * Buffers input until the hash algorithm is determined. - */ - internal class DeferredHash - : TlsHandshakeHash - { - protected const int BUFFERING_HASH_LIMIT = 4; - - protected TlsContext mContext; - - private DigestInputBuffer mBuf; - private IDictionary mHashes; - private int mPrfHashAlgorithm; - - internal DeferredHash() - { - this.mBuf = new DigestInputBuffer(); - this.mHashes = Platform.CreateHashtable(); - this.mPrfHashAlgorithm = -1; - } - - private DeferredHash(byte prfHashAlgorithm, IDigest prfHash) - { - this.mBuf = null; - this.mHashes = Platform.CreateHashtable(); - this.mPrfHashAlgorithm = prfHashAlgorithm; - mHashes[prfHashAlgorithm] = prfHash; - } - - public virtual void Init(TlsContext context) - { - this.mContext = context; - } - - public virtual TlsHandshakeHash NotifyPrfDetermined() - { - int prfAlgorithm = mContext.SecurityParameters.PrfAlgorithm; - if (prfAlgorithm == PrfAlgorithm.tls_prf_legacy) - { - CombinedHash legacyHash = new CombinedHash(); - legacyHash.Init(mContext); - mBuf.UpdateDigest(legacyHash); - return legacyHash.NotifyPrfDetermined(); - } - - this.mPrfHashAlgorithm = TlsUtilities.GetHashAlgorithmForPrfAlgorithm(prfAlgorithm); - - CheckTrackingHash((byte)mPrfHashAlgorithm); - - return this; - } - - public virtual void TrackHashAlgorithm(byte hashAlgorithm) - { - if (mBuf == null) - throw new InvalidOperationException("Too late to track more hash algorithms"); - - CheckTrackingHash(hashAlgorithm); - } - - public virtual void SealHashAlgorithms() - { - CheckStopBuffering(); - } - - public virtual TlsHandshakeHash StopTracking() - { - byte prfHashAlgorithm = (byte)mPrfHashAlgorithm; - IDigest prfHash = TlsUtilities.CloneHash(prfHashAlgorithm, (IDigest)mHashes[prfHashAlgorithm]); - if (mBuf != null) - { - mBuf.UpdateDigest(prfHash); - } - DeferredHash result = new DeferredHash(prfHashAlgorithm, prfHash); - result.Init(mContext); - return result; - } - - public virtual IDigest ForkPrfHash() - { - CheckStopBuffering(); - - byte prfHashAlgorithm = (byte)mPrfHashAlgorithm; - if (mBuf != null) - { - IDigest prfHash = TlsUtilities.CreateHash(prfHashAlgorithm); - mBuf.UpdateDigest(prfHash); - return prfHash; - } - - return TlsUtilities.CloneHash(prfHashAlgorithm, (IDigest)mHashes[prfHashAlgorithm]); - } - - public virtual byte[] GetFinalHash(byte hashAlgorithm) - { - IDigest d = (IDigest)mHashes[hashAlgorithm]; - if (d == null) - throw new InvalidOperationException("HashAlgorithm." + HashAlgorithm.GetText(hashAlgorithm) + " is not being tracked"); - - d = TlsUtilities.CloneHash(hashAlgorithm, d); - if (mBuf != null) - { - mBuf.UpdateDigest(d); - } - - return DigestUtilities.DoFinal(d); - } - - public virtual string AlgorithmName - { - get { throw new InvalidOperationException("Use Fork() to get a definite IDigest"); } - } - - public virtual int GetByteLength() - { - throw new InvalidOperationException("Use Fork() to get a definite IDigest"); - } - - public virtual int GetDigestSize() - { - throw new InvalidOperationException("Use Fork() to get a definite IDigest"); - } - - public virtual void Update(byte input) - { - if (mBuf != null) - { - mBuf.WriteByte(input); - return; - } - - foreach (IDigest hash in mHashes.Values) - { - hash.Update(input); - } - } - - public virtual void BlockUpdate(byte[] input, int inOff, int len) - { - if (mBuf != null) - { - mBuf.Write(input, inOff, len); - return; - } - - foreach (IDigest hash in mHashes.Values) - { - hash.BlockUpdate(input, inOff, len); - } - } - - public virtual int DoFinal(byte[] output, int outOff) - { - throw new InvalidOperationException("Use Fork() to get a definite IDigest"); - } - - public virtual void Reset() - { - if (mBuf != null) - { - mBuf.SetLength(0); - return; - } - - foreach (IDigest hash in mHashes.Values) - { - hash.Reset(); - } - } - - protected virtual void CheckStopBuffering() - { - if (mBuf != null && mHashes.Count <= BUFFERING_HASH_LIMIT) - { - foreach (IDigest hash in mHashes.Values) - { - mBuf.UpdateDigest(hash); - } - - this.mBuf = null; - } - } - - protected virtual void CheckTrackingHash(byte hashAlgorithm) - { - if (!mHashes.Contains(hashAlgorithm)) - { - IDigest hash = TlsUtilities.CreateHash(hashAlgorithm); - mHashes[hashAlgorithm] = hash; - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/DigestInputBuffer.cs b/bc-sharp-crypto/src/crypto/tls/DigestInputBuffer.cs deleted file mode 100644 index 4435b40..0000000 --- a/bc-sharp-crypto/src/crypto/tls/DigestInputBuffer.cs +++ /dev/null @@ -1,37 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - internal class DigestInputBuffer - : MemoryStream - { - internal void UpdateDigest(IDigest d) - { - Streams.WriteBufTo(this, new DigStream(d)); - } - - private class DigStream - : BaseOutputStream - { - private readonly IDigest d; - - internal DigStream(IDigest d) - { - this.d = d; - } - - public override void WriteByte(byte b) - { - d.Update(b); - } - - public override void Write(byte[] buf, int off, int len) - { - d.BlockUpdate(buf, off, len); - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/DigitallySigned.cs b/bc-sharp-crypto/src/crypto/tls/DigitallySigned.cs deleted file mode 100644 index 8b7344f..0000000 --- a/bc-sharp-crypto/src/crypto/tls/DigitallySigned.cs +++ /dev/null @@ -1,70 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class DigitallySigned - { - protected readonly SignatureAndHashAlgorithm mAlgorithm; - protected readonly byte[] mSignature; - - public DigitallySigned(SignatureAndHashAlgorithm algorithm, byte[] signature) - { - if (signature == null) - throw new ArgumentNullException("signature"); - - this.mAlgorithm = algorithm; - this.mSignature = signature; - } - - /** - * @return a {@link SignatureAndHashAlgorithm} (or null before TLS 1.2). - */ - public virtual SignatureAndHashAlgorithm Algorithm - { - get { return mAlgorithm; } - } - - public virtual byte[] Signature - { - get { return mSignature; } - } - - /** - * Encode this {@link DigitallySigned} to a {@link Stream}. - * - * @param output - * the {@link Stream} to encode to. - * @throws IOException - */ - public virtual void Encode(Stream output) - { - if (mAlgorithm != null) - { - mAlgorithm.Encode(output); - } - TlsUtilities.WriteOpaque16(mSignature, output); - } - - /** - * Parse a {@link DigitallySigned} from a {@link Stream}. - * - * @param context - * the {@link TlsContext} of the current connection. - * @param input - * the {@link Stream} to parse from. - * @return a {@link DigitallySigned} object. - * @throws IOException - */ - public static DigitallySigned Parse(TlsContext context, Stream input) - { - SignatureAndHashAlgorithm algorithm = null; - if (TlsUtilities.IsTlsV12(context)) - { - algorithm = SignatureAndHashAlgorithm.Parse(input); - } - byte[] signature = TlsUtilities.ReadOpaque16(input); - return new DigitallySigned(algorithm, signature); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/DtlsClientProtocol.cs b/bc-sharp-crypto/src/crypto/tls/DtlsClientProtocol.cs deleted file mode 100644 index ae6e6a5..0000000 --- a/bc-sharp-crypto/src/crypto/tls/DtlsClientProtocol.cs +++ /dev/null @@ -1,857 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class DtlsClientProtocol - : DtlsProtocol - { - public DtlsClientProtocol(SecureRandom secureRandom) - : base(secureRandom) - { - } - - public virtual DtlsTransport Connect(TlsClient client, DatagramTransport transport) - { - if (client == null) - throw new ArgumentNullException("client"); - if (transport == null) - throw new ArgumentNullException("transport"); - - SecurityParameters securityParameters = new SecurityParameters(); - securityParameters.entity = ConnectionEnd.client; - - ClientHandshakeState state = new ClientHandshakeState(); - state.client = client; - state.clientContext = new TlsClientContextImpl(mSecureRandom, securityParameters); - - securityParameters.clientRandom = TlsProtocol.CreateRandomBlock(client.ShouldUseGmtUnixTime(), - state.clientContext.NonceRandomGenerator); - - client.Init(state.clientContext); - - DtlsRecordLayer recordLayer = new DtlsRecordLayer(transport, state.clientContext, client, ContentType.handshake); - - TlsSession sessionToResume = state.client.GetSessionToResume(); - if (sessionToResume != null && sessionToResume.IsResumable) - { - SessionParameters sessionParameters = sessionToResume.ExportSessionParameters(); - if (sessionParameters != null) - { - state.tlsSession = sessionToResume; - state.sessionParameters = sessionParameters; - } - } - - try - { - return ClientHandshake(state, recordLayer); - } - catch (TlsFatalAlert fatalAlert) - { - AbortClientHandshake(state, recordLayer, fatalAlert.AlertDescription); - throw fatalAlert; - } - catch (IOException e) - { - AbortClientHandshake(state, recordLayer, AlertDescription.internal_error); - throw e; - } - catch (Exception e) - { - AbortClientHandshake(state, recordLayer, AlertDescription.internal_error); - throw new TlsFatalAlert(AlertDescription.internal_error, e); - } - finally - { - securityParameters.Clear(); - } - } - - internal virtual void AbortClientHandshake(ClientHandshakeState state, DtlsRecordLayer recordLayer, byte alertDescription) - { - recordLayer.Fail(alertDescription); - InvalidateSession(state); - } - - internal virtual DtlsTransport ClientHandshake(ClientHandshakeState state, DtlsRecordLayer recordLayer) - { - SecurityParameters securityParameters = state.clientContext.SecurityParameters; - DtlsReliableHandshake handshake = new DtlsReliableHandshake(state.clientContext, recordLayer); - - byte[] clientHelloBody = GenerateClientHello(state, state.client); - - recordLayer.SetWriteVersion(ProtocolVersion.DTLSv10); - - handshake.SendMessage(HandshakeType.client_hello, clientHelloBody); - - DtlsReliableHandshake.Message serverMessage = handshake.ReceiveMessage(); - - while (serverMessage.Type == HandshakeType.hello_verify_request) - { - ProtocolVersion recordLayerVersion = recordLayer.ReadVersion; - ProtocolVersion client_version = state.clientContext.ClientVersion; - - /* - * RFC 6347 4.2.1 DTLS 1.2 server implementations SHOULD use DTLS version 1.0 regardless of - * the version of TLS that is expected to be negotiated. DTLS 1.2 and 1.0 clients MUST use - * the version solely to indicate packet formatting (which is the same in both DTLS 1.2 and - * 1.0) and not as part of version negotiation. - */ - if (!recordLayerVersion.IsEqualOrEarlierVersionOf(client_version)) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - - recordLayer.ReadVersion = null; - - byte[] cookie = ProcessHelloVerifyRequest(state, serverMessage.Body); - byte[] patched = PatchClientHelloWithCookie(clientHelloBody, cookie); - - handshake.ResetHandshakeMessagesDigest(); - handshake.SendMessage(HandshakeType.client_hello, patched); - - serverMessage = handshake.ReceiveMessage(); - } - - if (serverMessage.Type == HandshakeType.server_hello) - { - ProtocolVersion recordLayerVersion = recordLayer.ReadVersion; - ReportServerVersion(state, recordLayerVersion); - recordLayer.SetWriteVersion(recordLayerVersion); - - ProcessServerHello(state, serverMessage.Body); - } - else - { - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - - handshake.NotifyHelloComplete(); - - ApplyMaxFragmentLengthExtension(recordLayer, securityParameters.maxFragmentLength); - - if (state.resumedSession) - { - securityParameters.masterSecret = Arrays.Clone(state.sessionParameters.MasterSecret); - recordLayer.InitPendingEpoch(state.client.GetCipher()); - - // NOTE: Calculated exclusive of the actual Finished message from the server - byte[] resExpectedServerVerifyData = TlsUtilities.CalculateVerifyData(state.clientContext, ExporterLabel.server_finished, - TlsProtocol.GetCurrentPrfHash(state.clientContext, handshake.HandshakeHash, null)); - ProcessFinished(handshake.ReceiveMessageBody(HandshakeType.finished), resExpectedServerVerifyData); - - // NOTE: Calculated exclusive of the Finished message itself - byte[] resClientVerifyData = TlsUtilities.CalculateVerifyData(state.clientContext, ExporterLabel.client_finished, - TlsProtocol.GetCurrentPrfHash(state.clientContext, handshake.HandshakeHash, null)); - handshake.SendMessage(HandshakeType.finished, resClientVerifyData); - - handshake.Finish(); - - state.clientContext.SetResumableSession(state.tlsSession); - - state.client.NotifyHandshakeComplete(); - - return new DtlsTransport(recordLayer); - } - - InvalidateSession(state); - - if (state.selectedSessionID.Length > 0) - { - state.tlsSession = new TlsSessionImpl(state.selectedSessionID, null); - } - - serverMessage = handshake.ReceiveMessage(); - - if (serverMessage.Type == HandshakeType.supplemental_data) - { - ProcessServerSupplementalData(state, serverMessage.Body); - serverMessage = handshake.ReceiveMessage(); - } - else - { - state.client.ProcessServerSupplementalData(null); - } - - state.keyExchange = state.client.GetKeyExchange(); - state.keyExchange.Init(state.clientContext); - - Certificate serverCertificate = null; - - if (serverMessage.Type == HandshakeType.certificate) - { - serverCertificate = ProcessServerCertificate(state, serverMessage.Body); - serverMessage = handshake.ReceiveMessage(); - } - else - { - // Okay, Certificate is optional - state.keyExchange.SkipServerCredentials(); - } - - // TODO[RFC 3546] Check whether empty certificates is possible, allowed, or excludes CertificateStatus - if (serverCertificate == null || serverCertificate.IsEmpty) - { - state.allowCertificateStatus = false; - } - - if (serverMessage.Type == HandshakeType.certificate_status) - { - ProcessCertificateStatus(state, serverMessage.Body); - serverMessage = handshake.ReceiveMessage(); - } - else - { - // Okay, CertificateStatus is optional - } - - if (serverMessage.Type == HandshakeType.server_key_exchange) - { - ProcessServerKeyExchange(state, serverMessage.Body); - serverMessage = handshake.ReceiveMessage(); - } - else - { - // Okay, ServerKeyExchange is optional - state.keyExchange.SkipServerKeyExchange(); - } - - if (serverMessage.Type == HandshakeType.certificate_request) - { - ProcessCertificateRequest(state, serverMessage.Body); - - /* - * TODO Give the client a chance to immediately select the CertificateVerify hash - * algorithm here to avoid tracking the other hash algorithms unnecessarily? - */ - TlsUtilities.TrackHashAlgorithms(handshake.HandshakeHash, - state.certificateRequest.SupportedSignatureAlgorithms); - - serverMessage = handshake.ReceiveMessage(); - } - else - { - // Okay, CertificateRequest is optional - } - - if (serverMessage.Type == HandshakeType.server_hello_done) - { - if (serverMessage.Body.Length != 0) - { - throw new TlsFatalAlert(AlertDescription.decode_error); - } - } - else - { - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - - handshake.HandshakeHash.SealHashAlgorithms(); - - IList clientSupplementalData = state.client.GetClientSupplementalData(); - if (clientSupplementalData != null) - { - byte[] supplementalDataBody = GenerateSupplementalData(clientSupplementalData); - handshake.SendMessage(HandshakeType.supplemental_data, supplementalDataBody); - } - - if (state.certificateRequest != null) - { - state.clientCredentials = state.authentication.GetClientCredentials(state.certificateRequest); - - /* - * RFC 5246 If no suitable certificate is available, the client MUST send a certificate - * message containing no certificates. - * - * NOTE: In previous RFCs, this was SHOULD instead of MUST. - */ - Certificate clientCertificate = null; - if (state.clientCredentials != null) - { - clientCertificate = state.clientCredentials.Certificate; - } - if (clientCertificate == null) - { - clientCertificate = Certificate.EmptyChain; - } - - byte[] certificateBody = GenerateCertificate(clientCertificate); - handshake.SendMessage(HandshakeType.certificate, certificateBody); - } - - if (state.clientCredentials != null) - { - state.keyExchange.ProcessClientCredentials(state.clientCredentials); - } - else - { - state.keyExchange.SkipClientCredentials(); - } - - byte[] clientKeyExchangeBody = GenerateClientKeyExchange(state); - handshake.SendMessage(HandshakeType.client_key_exchange, clientKeyExchangeBody); - - TlsHandshakeHash prepareFinishHash = handshake.PrepareToFinish(); - securityParameters.sessionHash = TlsProtocol.GetCurrentPrfHash(state.clientContext, prepareFinishHash, null); - - TlsProtocol.EstablishMasterSecret(state.clientContext, state.keyExchange); - recordLayer.InitPendingEpoch(state.client.GetCipher()); - - if (state.clientCredentials != null && state.clientCredentials is TlsSignerCredentials) - { - TlsSignerCredentials signerCredentials = (TlsSignerCredentials)state.clientCredentials; - - /* - * RFC 5246 4.7. digitally-signed element needs SignatureAndHashAlgorithm from TLS 1.2 - */ - SignatureAndHashAlgorithm signatureAndHashAlgorithm = TlsUtilities.GetSignatureAndHashAlgorithm( - state.clientContext, signerCredentials); - - byte[] hash; - if (signatureAndHashAlgorithm == null) - { - hash = securityParameters.SessionHash; - } - else - { - hash = prepareFinishHash.GetFinalHash(signatureAndHashAlgorithm.Hash); - } - - byte[] signature = signerCredentials.GenerateCertificateSignature(hash); - DigitallySigned certificateVerify = new DigitallySigned(signatureAndHashAlgorithm, signature); - byte[] certificateVerifyBody = GenerateCertificateVerify(state, certificateVerify); - handshake.SendMessage(HandshakeType.certificate_verify, certificateVerifyBody); - } - - // NOTE: Calculated exclusive of the Finished message itself - byte[] clientVerifyData = TlsUtilities.CalculateVerifyData(state.clientContext, ExporterLabel.client_finished, - TlsProtocol.GetCurrentPrfHash(state.clientContext, handshake.HandshakeHash, null)); - handshake.SendMessage(HandshakeType.finished, clientVerifyData); - - if (state.expectSessionTicket) - { - serverMessage = handshake.ReceiveMessage(); - if (serverMessage.Type == HandshakeType.session_ticket) - { - ProcessNewSessionTicket(state, serverMessage.Body); - } - else - { - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - } - - // NOTE: Calculated exclusive of the actual Finished message from the server - byte[] expectedServerVerifyData = TlsUtilities.CalculateVerifyData(state.clientContext, ExporterLabel.server_finished, - TlsProtocol.GetCurrentPrfHash(state.clientContext, handshake.HandshakeHash, null)); - ProcessFinished(handshake.ReceiveMessageBody(HandshakeType.finished), expectedServerVerifyData); - - handshake.Finish(); - - if (state.tlsSession != null) - { - state.sessionParameters = new SessionParameters.Builder() - .SetCipherSuite(securityParameters.CipherSuite) - .SetCompressionAlgorithm(securityParameters.CompressionAlgorithm) - .SetMasterSecret(securityParameters.MasterSecret) - .SetPeerCertificate(serverCertificate) - .SetPskIdentity(securityParameters.PskIdentity) - .SetSrpIdentity(securityParameters.SrpIdentity) - // TODO Consider filtering extensions that aren't relevant to resumed sessions - .SetServerExtensions(state.serverExtensions) - .Build(); - - state.tlsSession = TlsUtilities.ImportSession(state.tlsSession.SessionID, state.sessionParameters); - - state.clientContext.SetResumableSession(state.tlsSession); - } - - state.client.NotifyHandshakeComplete(); - - return new DtlsTransport(recordLayer); - } - - protected virtual byte[] GenerateCertificateVerify(ClientHandshakeState state, DigitallySigned certificateVerify) - { - MemoryStream buf = new MemoryStream(); - certificateVerify.Encode(buf); - return buf.ToArray(); - } - - protected virtual byte[] GenerateClientHello(ClientHandshakeState state, TlsClient client) - { - MemoryStream buf = new MemoryStream(); - - ProtocolVersion client_version = client.ClientVersion; - if (!client_version.IsDtls) - throw new TlsFatalAlert(AlertDescription.internal_error); - - TlsClientContextImpl context = state.clientContext; - - context.SetClientVersion(client_version); - TlsUtilities.WriteVersion(client_version, buf); - - SecurityParameters securityParameters = context.SecurityParameters; - buf.Write(securityParameters.ClientRandom, 0, securityParameters.ClientRandom.Length); - - // Session ID - byte[] session_id = TlsUtilities.EmptyBytes; - if (state.tlsSession != null) - { - session_id = state.tlsSession.SessionID; - if (session_id == null || session_id.Length > 32) - { - session_id = TlsUtilities.EmptyBytes; - } - } - TlsUtilities.WriteOpaque8(session_id, buf); - - // Cookie - TlsUtilities.WriteOpaque8(TlsUtilities.EmptyBytes, buf); - - bool fallback = client.IsFallback; - - /* - * Cipher suites - */ - state.offeredCipherSuites = client.GetCipherSuites(); - - // Integer -> byte[] - state.clientExtensions = client.GetClientExtensions(); - - // Cipher Suites (and SCSV) - { - /* - * RFC 5746 3.4. The client MUST include either an empty "renegotiation_info" extension, - * or the TLS_EMPTY_RENEGOTIATION_INFO_SCSV signaling cipher suite value in the - * ClientHello. Including both is NOT RECOMMENDED. - */ - byte[] renegExtData = TlsUtilities.GetExtensionData(state.clientExtensions, ExtensionType.renegotiation_info); - bool noRenegExt = (null == renegExtData); - - bool noRenegSCSV = !Arrays.Contains(state.offeredCipherSuites, CipherSuite.TLS_EMPTY_RENEGOTIATION_INFO_SCSV); - - if (noRenegExt && noRenegSCSV) - { - // TODO Consider whether to default to a client extension instead - state.offeredCipherSuites = Arrays.Append(state.offeredCipherSuites, CipherSuite.TLS_EMPTY_RENEGOTIATION_INFO_SCSV); - } - - /* - * RFC 7507 4. If a client sends a ClientHello.client_version containing a lower value - * than the latest (highest-valued) version supported by the client, it SHOULD include - * the TLS_FALLBACK_SCSV cipher suite value in ClientHello.cipher_suites [..]. (The - * client SHOULD put TLS_FALLBACK_SCSV after all cipher suites that it actually intends - * to negotiate.) - */ - if (fallback && !Arrays.Contains(state.offeredCipherSuites, CipherSuite.TLS_FALLBACK_SCSV)) - { - state.offeredCipherSuites = Arrays.Append(state.offeredCipherSuites, CipherSuite.TLS_FALLBACK_SCSV); - } - - TlsUtilities.WriteUint16ArrayWithUint16Length(state.offeredCipherSuites, buf); - } - - // TODO Add support for compression - // Compression methods - // state.offeredCompressionMethods = client.getCompressionMethods(); - state.offeredCompressionMethods = new byte[]{ CompressionMethod.cls_null }; - - TlsUtilities.WriteUint8ArrayWithUint8Length(state.offeredCompressionMethods, buf); - - // Extensions - if (state.clientExtensions != null) - { - TlsProtocol.WriteExtensions(buf, state.clientExtensions); - } - - return buf.ToArray(); - } - - protected virtual byte[] GenerateClientKeyExchange(ClientHandshakeState state) - { - MemoryStream buf = new MemoryStream(); - state.keyExchange.GenerateClientKeyExchange(buf); - return buf.ToArray(); - } - - protected virtual void InvalidateSession(ClientHandshakeState state) - { - if (state.sessionParameters != null) - { - state.sessionParameters.Clear(); - state.sessionParameters = null; - } - - if (state.tlsSession != null) - { - state.tlsSession.Invalidate(); - state.tlsSession = null; - } - } - - protected virtual void ProcessCertificateRequest(ClientHandshakeState state, byte[] body) - { - if (state.authentication == null) - { - /* - * RFC 2246 7.4.4. It is a fatal handshake_failure alert for an anonymous server to - * request client identification. - */ - throw new TlsFatalAlert(AlertDescription.handshake_failure); - } - - MemoryStream buf = new MemoryStream(body, false); - - state.certificateRequest = CertificateRequest.Parse(state.clientContext, buf); - - TlsProtocol.AssertEmpty(buf); - - state.keyExchange.ValidateCertificateRequest(state.certificateRequest); - } - - protected virtual void ProcessCertificateStatus(ClientHandshakeState state, byte[] body) - { - if (!state.allowCertificateStatus) - { - /* - * RFC 3546 3.6. If a server returns a "CertificateStatus" message, then the - * server MUST have included an extension of type "status_request" with empty - * "extension_data" in the extended server hello.. - */ - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - - MemoryStream buf = new MemoryStream(body, false); - - state.certificateStatus = CertificateStatus.Parse(buf); - - TlsProtocol.AssertEmpty(buf); - - // TODO[RFC 3546] Figure out how to provide this to the client/authentication. - } - - protected virtual byte[] ProcessHelloVerifyRequest(ClientHandshakeState state, byte[] body) - { - MemoryStream buf = new MemoryStream(body, false); - - ProtocolVersion server_version = TlsUtilities.ReadVersion(buf); - byte[] cookie = TlsUtilities.ReadOpaque8(buf); - - TlsProtocol.AssertEmpty(buf); - - // TODO Seems this behaviour is not yet in line with OpenSSL for DTLS 1.2 - // reportServerVersion(state, server_version); - if (!server_version.IsEqualOrEarlierVersionOf(state.clientContext.ClientVersion)) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - - /* - * RFC 6347 This specification increases the cookie size limit to 255 bytes for greater - * future flexibility. The limit remains 32 for previous versions of DTLS. - */ - if (!ProtocolVersion.DTLSv12.IsEqualOrEarlierVersionOf(server_version) && cookie.Length > 32) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - - return cookie; - } - - protected virtual void ProcessNewSessionTicket(ClientHandshakeState state, byte[] body) - { - MemoryStream buf = new MemoryStream(body, false); - - NewSessionTicket newSessionTicket = NewSessionTicket.Parse(buf); - - TlsProtocol.AssertEmpty(buf); - - state.client.NotifyNewSessionTicket(newSessionTicket); - } - - protected virtual Certificate ProcessServerCertificate(ClientHandshakeState state, byte[] body) - { - MemoryStream buf = new MemoryStream(body, false); - - Certificate serverCertificate = Certificate.Parse(buf); - - TlsProtocol.AssertEmpty(buf); - - state.keyExchange.ProcessServerCertificate(serverCertificate); - state.authentication = state.client.GetAuthentication(); - state.authentication.NotifyServerCertificate(serverCertificate); - - return serverCertificate; - } - - protected virtual void ProcessServerHello(ClientHandshakeState state, byte[] body) - { - SecurityParameters securityParameters = state.clientContext.SecurityParameters; - - MemoryStream buf = new MemoryStream(body, false); - - { - ProtocolVersion server_version = TlsUtilities.ReadVersion(buf); - ReportServerVersion(state, server_version); - } - - securityParameters.serverRandom = TlsUtilities.ReadFully(32, buf); - - state.selectedSessionID = TlsUtilities.ReadOpaque8(buf); - if (state.selectedSessionID.Length > 32) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - state.client.NotifySessionID(state.selectedSessionID); - state.resumedSession = state.selectedSessionID.Length > 0 && state.tlsSession != null - && Arrays.AreEqual(state.selectedSessionID, state.tlsSession.SessionID); - - int selectedCipherSuite = TlsUtilities.ReadUint16(buf); - if (!Arrays.Contains(state.offeredCipherSuites, selectedCipherSuite) - || selectedCipherSuite == CipherSuite.TLS_NULL_WITH_NULL_NULL - || CipherSuite.IsScsv(selectedCipherSuite) - || !TlsUtilities.IsValidCipherSuiteForVersion(selectedCipherSuite, state.clientContext.ServerVersion)) - { - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - ValidateSelectedCipherSuite(selectedCipherSuite, AlertDescription.illegal_parameter); - state.client.NotifySelectedCipherSuite(selectedCipherSuite); - - byte selectedCompressionMethod = TlsUtilities.ReadUint8(buf); - if (!Arrays.Contains(state.offeredCompressionMethods, selectedCompressionMethod)) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - state.client.NotifySelectedCompressionMethod(selectedCompressionMethod); - - /* - * RFC3546 2.2 The extended server hello message format MAY be sent in place of the server - * hello message when the client has requested extended functionality via the extended - * client hello message specified in Section 2.1. ... Note that the extended server hello - * message is only sent in response to an extended client hello message. This prevents the - * possibility that the extended server hello message could "break" existing TLS 1.0 - * clients. - */ - - /* - * TODO RFC 3546 2.3 If [...] the older session is resumed, then the server MUST ignore - * extensions appearing in the client hello, and send a server hello containing no - * extensions. - */ - - // Integer -> byte[] - state.serverExtensions = TlsProtocol.ReadExtensions(buf); - - /* - * RFC 3546 2.2 Note that the extended server hello message is only sent in response to an - * extended client hello message. However, see RFC 5746 exception below. We always include - * the SCSV, so an Extended Server Hello is always allowed. - */ - if (state.serverExtensions != null) - { - foreach (int extType in state.serverExtensions.Keys) - { - /* - * RFC 5746 3.6. Note that sending a "renegotiation_info" extension in response to a - * ClientHello containing only the SCSV is an explicit exception to the prohibition - * in RFC 5246, Section 7.4.1.4, on the server sending unsolicited extensions and is - * only allowed because the client is signaling its willingness to receive the - * extension via the TLS_EMPTY_RENEGOTIATION_INFO_SCSV SCSV. - */ - if (extType == ExtensionType.renegotiation_info) - continue; - - /* - * RFC 5246 7.4.1.4 An extension type MUST NOT appear in the ServerHello unless the - * same extension type appeared in the corresponding ClientHello. If a client - * receives an extension type in ServerHello that it did not request in the - * associated ClientHello, it MUST abort the handshake with an unsupported_extension - * fatal alert. - */ - if (null == TlsUtilities.GetExtensionData(state.clientExtensions, extType)) - throw new TlsFatalAlert(AlertDescription.unsupported_extension); - - /* - * RFC 3546 2.3. If [...] the older session is resumed, then the server MUST ignore - * extensions appearing in the client hello, and send a server hello containing no - * extensions[.] - */ - if (state.resumedSession) - { - // TODO[compat-gnutls] GnuTLS test server sends server extensions e.g. ec_point_formats - // TODO[compat-openssl] OpenSSL test server sends server extensions e.g. ec_point_formats - // TODO[compat-polarssl] PolarSSL test server sends server extensions e.g. ec_point_formats - //throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - } - } - - /* - * RFC 5746 3.4. Client Behavior: Initial Handshake - */ - { - /* - * When a ServerHello is received, the client MUST check if it includes the - * "renegotiation_info" extension: - */ - byte[] renegExtData = TlsUtilities.GetExtensionData(state.serverExtensions, ExtensionType.renegotiation_info); - if (renegExtData != null) - { - /* - * If the extension is present, set the secure_renegotiation flag to TRUE. The - * client MUST then verify that the length of the "renegotiated_connection" - * field is zero, and if it is not, MUST abort the handshake (by sending a fatal - * handshake_failure alert). - */ - state.secure_renegotiation = true; - - if (!Arrays.ConstantTimeAreEqual(renegExtData, TlsProtocol.CreateRenegotiationInfo(TlsUtilities.EmptyBytes))) - throw new TlsFatalAlert(AlertDescription.handshake_failure); - } - } - - // TODO[compat-gnutls] GnuTLS test server fails to send renegotiation_info extension when resuming - state.client.NotifySecureRenegotiation(state.secure_renegotiation); - - IDictionary sessionClientExtensions = state.clientExtensions, sessionServerExtensions = state.serverExtensions; - if (state.resumedSession) - { - if (selectedCipherSuite != state.sessionParameters.CipherSuite - || selectedCompressionMethod != state.sessionParameters.CompressionAlgorithm) - { - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - - sessionClientExtensions = null; - sessionServerExtensions = state.sessionParameters.ReadServerExtensions(); - } - - securityParameters.cipherSuite = selectedCipherSuite; - securityParameters.compressionAlgorithm = selectedCompressionMethod; - - if (sessionServerExtensions != null) - { - { - /* - * RFC 7366 3. If a server receives an encrypt-then-MAC request extension from a client - * and then selects a stream or Authenticated Encryption with Associated Data (AEAD) - * ciphersuite, it MUST NOT send an encrypt-then-MAC response extension back to the - * client. - */ - bool serverSentEncryptThenMAC = TlsExtensionsUtilities.HasEncryptThenMacExtension(sessionServerExtensions); - if (serverSentEncryptThenMAC && !TlsUtilities.IsBlockCipherSuite(securityParameters.CipherSuite)) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - securityParameters.encryptThenMac = serverSentEncryptThenMAC; - } - - securityParameters.extendedMasterSecret = TlsExtensionsUtilities.HasExtendedMasterSecretExtension(sessionServerExtensions); - - securityParameters.maxFragmentLength = EvaluateMaxFragmentLengthExtension(state.resumedSession, - sessionClientExtensions, sessionServerExtensions, AlertDescription.illegal_parameter); - - securityParameters.truncatedHMac = TlsExtensionsUtilities.HasTruncatedHMacExtension(sessionServerExtensions); - - /* - * TODO It's surprising that there's no provision to allow a 'fresh' CertificateStatus to be - * sent in a session resumption handshake. - */ - state.allowCertificateStatus = !state.resumedSession - && TlsUtilities.HasExpectedEmptyExtensionData(sessionServerExtensions, ExtensionType.status_request, - AlertDescription.illegal_parameter); - - state.expectSessionTicket = !state.resumedSession - && TlsUtilities.HasExpectedEmptyExtensionData(sessionServerExtensions, ExtensionType.session_ticket, - AlertDescription.illegal_parameter); - } - - /* - * TODO[session-hash] - * - * draft-ietf-tls-session-hash-04 4. Clients and servers SHOULD NOT accept handshakes - * that do not use the extended master secret [..]. (and see 5.2, 5.3) - */ - - if (sessionClientExtensions != null) - { - state.client.ProcessServerExtensions(sessionServerExtensions); - } - - securityParameters.prfAlgorithm = TlsProtocol.GetPrfAlgorithm(state.clientContext, - securityParameters.CipherSuite); - - /* - * RFC 5246 7.4.9. Any cipher suite which does not explicitly specify verify_data_length has - * a verify_data_length equal to 12. This includes all existing cipher suites. - */ - securityParameters.verifyDataLength = 12; - } - - protected virtual void ProcessServerKeyExchange(ClientHandshakeState state, byte[] body) - { - MemoryStream buf = new MemoryStream(body, false); - - state.keyExchange.ProcessServerKeyExchange(buf); - - TlsProtocol.AssertEmpty(buf); - } - - protected virtual void ProcessServerSupplementalData(ClientHandshakeState state, byte[] body) - { - MemoryStream buf = new MemoryStream(body, false); - IList serverSupplementalData = TlsProtocol.ReadSupplementalDataMessage(buf); - state.client.ProcessServerSupplementalData(serverSupplementalData); - } - - protected virtual void ReportServerVersion(ClientHandshakeState state, ProtocolVersion server_version) - { - TlsClientContextImpl clientContext = state.clientContext; - ProtocolVersion currentServerVersion = clientContext.ServerVersion; - if (null == currentServerVersion) - { - clientContext.SetServerVersion(server_version); - state.client.NotifyServerVersion(server_version); - } - else if (!currentServerVersion.Equals(server_version)) - { - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - } - - protected static byte[] PatchClientHelloWithCookie(byte[] clientHelloBody, byte[] cookie) - { - int sessionIDPos = 34; - int sessionIDLength = TlsUtilities.ReadUint8(clientHelloBody, sessionIDPos); - - int cookieLengthPos = sessionIDPos + 1 + sessionIDLength; - int cookiePos = cookieLengthPos + 1; - - byte[] patched = new byte[clientHelloBody.Length + cookie.Length]; - Array.Copy(clientHelloBody, 0, patched, 0, cookieLengthPos); - TlsUtilities.CheckUint8(cookie.Length); - TlsUtilities.WriteUint8((byte)cookie.Length, patched, cookieLengthPos); - Array.Copy(cookie, 0, patched, cookiePos, cookie.Length); - Array.Copy(clientHelloBody, cookiePos, patched, cookiePos + cookie.Length, clientHelloBody.Length - cookiePos); - - return patched; - } - - protected internal class ClientHandshakeState - { - internal TlsClient client = null; - internal TlsClientContextImpl clientContext = null; - internal TlsSession tlsSession = null; - internal SessionParameters sessionParameters = null; - internal SessionParameters.Builder sessionParametersBuilder = null; - internal int[] offeredCipherSuites = null; - internal byte[] offeredCompressionMethods = null; - internal IDictionary clientExtensions = null; - internal IDictionary serverExtensions = null; - internal byte[] selectedSessionID = null; - internal bool resumedSession = false; - internal bool secure_renegotiation = false; - internal bool allowCertificateStatus = false; - internal bool expectSessionTicket = false; - internal TlsKeyExchange keyExchange = null; - internal TlsAuthentication authentication = null; - internal CertificateStatus certificateStatus = null; - internal CertificateRequest certificateRequest = null; - internal TlsCredentials clientCredentials = null; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/DtlsEpoch.cs b/bc-sharp-crypto/src/crypto/tls/DtlsEpoch.cs deleted file mode 100644 index 91fffa5..0000000 --- a/bc-sharp-crypto/src/crypto/tls/DtlsEpoch.cs +++ /dev/null @@ -1,51 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - internal class DtlsEpoch - { - private readonly DtlsReplayWindow mReplayWindow = new DtlsReplayWindow(); - - private readonly int mEpoch; - private readonly TlsCipher mCipher; - - private long mSequenceNumber = 0; - - internal DtlsEpoch(int epoch, TlsCipher cipher) - { - if (epoch < 0) - throw new ArgumentException("must be >= 0", "epoch"); - if (cipher == null) - throw new ArgumentNullException("cipher"); - - this.mEpoch = epoch; - this.mCipher = cipher; - } - - internal long AllocateSequenceNumber() - { - // TODO Check for overflow - return mSequenceNumber++; - } - - internal TlsCipher Cipher - { - get { return mCipher; } - } - - internal int Epoch - { - get { return mEpoch; } - } - - internal DtlsReplayWindow ReplayWindow - { - get { return mReplayWindow; } - } - - internal long SequenceNumber - { - get { return mSequenceNumber; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/DtlsHandshakeRetransmit.cs b/bc-sharp-crypto/src/crypto/tls/DtlsHandshakeRetransmit.cs deleted file mode 100644 index 8bfae78..0000000 --- a/bc-sharp-crypto/src/crypto/tls/DtlsHandshakeRetransmit.cs +++ /dev/null @@ -1,11 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - interface DtlsHandshakeRetransmit - { - /// - void ReceivedHandshakeRecord(int epoch, byte[] buf, int off, int len); - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/DtlsProtocol.cs b/bc-sharp-crypto/src/crypto/tls/DtlsProtocol.cs deleted file mode 100644 index e4ebd43..0000000 --- a/bc-sharp-crypto/src/crypto/tls/DtlsProtocol.cs +++ /dev/null @@ -1,92 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public abstract class DtlsProtocol - { - protected readonly SecureRandom mSecureRandom; - - protected DtlsProtocol(SecureRandom secureRandom) - { - if (secureRandom == null) - throw new ArgumentNullException("secureRandom"); - - this.mSecureRandom = secureRandom; - } - - /// - protected virtual void ProcessFinished(byte[] body, byte[] expected_verify_data) - { - MemoryStream buf = new MemoryStream(body, false); - - byte[] verify_data = TlsUtilities.ReadFully(expected_verify_data.Length, buf); - - TlsProtocol.AssertEmpty(buf); - - if (!Arrays.ConstantTimeAreEqual(expected_verify_data, verify_data)) - throw new TlsFatalAlert(AlertDescription.handshake_failure); - } - - /// - internal static void ApplyMaxFragmentLengthExtension(DtlsRecordLayer recordLayer, short maxFragmentLength) - { - if (maxFragmentLength >= 0) - { - if (!MaxFragmentLength.IsValid((byte)maxFragmentLength)) - throw new TlsFatalAlert(AlertDescription.internal_error); - - int plainTextLimit = 1 << (8 + maxFragmentLength); - recordLayer.SetPlaintextLimit(plainTextLimit); - } - } - - /// - protected static short EvaluateMaxFragmentLengthExtension(bool resumedSession, IDictionary clientExtensions, - IDictionary serverExtensions, byte alertDescription) - { - short maxFragmentLength = TlsExtensionsUtilities.GetMaxFragmentLengthExtension(serverExtensions); - if (maxFragmentLength >= 0) - { - if (!MaxFragmentLength.IsValid((byte)maxFragmentLength) - || (!resumedSession && maxFragmentLength != TlsExtensionsUtilities - .GetMaxFragmentLengthExtension(clientExtensions))) - { - throw new TlsFatalAlert(alertDescription); - } - } - return maxFragmentLength; - } - - /// - protected static byte[] GenerateCertificate(Certificate certificate) - { - MemoryStream buf = new MemoryStream(); - certificate.Encode(buf); - return buf.ToArray(); - } - - /// - protected static byte[] GenerateSupplementalData(IList supplementalData) - { - MemoryStream buf = new MemoryStream(); - TlsProtocol.WriteSupplementalData(buf, supplementalData); - return buf.ToArray(); - } - - /// - protected static void ValidateSelectedCipherSuite(int selectedCipherSuite, byte alertDescription) - { - switch (TlsUtilities.GetEncryptionAlgorithm(selectedCipherSuite)) - { - case EncryptionAlgorithm.RC4_40: - case EncryptionAlgorithm.RC4_128: - throw new TlsFatalAlert(alertDescription); - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/DtlsReassembler.cs b/bc-sharp-crypto/src/crypto/tls/DtlsReassembler.cs deleted file mode 100644 index 11fe609..0000000 --- a/bc-sharp-crypto/src/crypto/tls/DtlsReassembler.cs +++ /dev/null @@ -1,125 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - class DtlsReassembler - { - private readonly byte mMsgType; - private readonly byte[] mBody; - - private readonly IList mMissing = Platform.CreateArrayList(); - - internal DtlsReassembler(byte msg_type, int length) - { - this.mMsgType = msg_type; - this.mBody = new byte[length]; - this.mMissing.Add(new Range(0, length)); - } - - internal byte MsgType - { - get { return mMsgType; } - } - - internal byte[] GetBodyIfComplete() - { - return mMissing.Count == 0 ? mBody : null; - } - - internal void ContributeFragment(byte msg_type, int length, byte[] buf, int off, int fragment_offset, - int fragment_length) - { - int fragment_end = fragment_offset + fragment_length; - - if (this.mMsgType != msg_type || this.mBody.Length != length || fragment_end > length) - { - return; - } - - if (fragment_length == 0) - { - // NOTE: Empty messages still require an empty fragment to complete it - if (fragment_offset == 0 && mMissing.Count > 0) - { - Range firstRange = (Range)mMissing[0]; - if (firstRange.End == 0) - { - mMissing.RemoveAt(0); - } - } - return; - } - - for (int i = 0; i < mMissing.Count; ++i) - { - Range range = (Range)mMissing[i]; - if (range.Start >= fragment_end) - { - break; - } - if (range.End > fragment_offset) - { - - int copyStart = System.Math.Max(range.Start, fragment_offset); - int copyEnd = System.Math.Min(range.End, fragment_end); - int copyLength = copyEnd - copyStart; - - Array.Copy(buf, off + copyStart - fragment_offset, mBody, copyStart, - copyLength); - - if (copyStart == range.Start) - { - if (copyEnd == range.End) - { - mMissing.RemoveAt(i--); - } - else - { - range.Start = copyEnd; - } - } - else - { - if (copyEnd != range.End) - { - mMissing.Insert(++i, new Range(copyEnd, range.End)); - } - range.End = copyStart; - } - } - } - } - - internal void Reset() - { - this.mMissing.Clear(); - this.mMissing.Add(new Range(0, mBody.Length)); - } - - private class Range - { - private int mStart, mEnd; - - internal Range(int start, int end) - { - this.mStart = start; - this.mEnd = end; - } - - public int Start - { - get { return mStart; } - set { this.mStart = value; } - } - - public int End - { - get { return mEnd; } - set { this.mEnd = value; } - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/DtlsRecordLayer.cs b/bc-sharp-crypto/src/crypto/tls/DtlsRecordLayer.cs deleted file mode 100644 index 39e0188..0000000 --- a/bc-sharp-crypto/src/crypto/tls/DtlsRecordLayer.cs +++ /dev/null @@ -1,530 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities.Date; - -namespace Org.BouncyCastle.Crypto.Tls -{ - internal class DtlsRecordLayer - : DatagramTransport - { - private const int RECORD_HEADER_LENGTH = 13; - private const int MAX_FRAGMENT_LENGTH = 1 << 14; - private const long TCP_MSL = 1000L * 60 * 2; - private const long RETRANSMIT_TIMEOUT = TCP_MSL * 2; - - private readonly DatagramTransport mTransport; - private readonly TlsContext mContext; - private readonly TlsPeer mPeer; - - private readonly ByteQueue mRecordQueue = new ByteQueue(); - - private volatile bool mClosed = false; - private volatile bool mFailed = false; - private volatile ProtocolVersion mReadVersion = null, mWriteVersion = null; - private volatile bool mInHandshake; - private volatile int mPlaintextLimit; - private DtlsEpoch mCurrentEpoch, mPendingEpoch; - private DtlsEpoch mReadEpoch, mWriteEpoch; - - private DtlsHandshakeRetransmit mRetransmit = null; - private DtlsEpoch mRetransmitEpoch = null; - private long mRetransmitExpiry = 0; - - internal DtlsRecordLayer(DatagramTransport transport, TlsContext context, TlsPeer peer, byte contentType) - { - this.mTransport = transport; - this.mContext = context; - this.mPeer = peer; - - this.mInHandshake = true; - - this.mCurrentEpoch = new DtlsEpoch(0, new TlsNullCipher(context)); - this.mPendingEpoch = null; - this.mReadEpoch = mCurrentEpoch; - this.mWriteEpoch = mCurrentEpoch; - - SetPlaintextLimit(MAX_FRAGMENT_LENGTH); - } - - internal virtual void SetPlaintextLimit(int plaintextLimit) - { - this.mPlaintextLimit = plaintextLimit; - } - - internal virtual int ReadEpoch - { - get { return mReadEpoch.Epoch; } - } - - internal virtual ProtocolVersion ReadVersion - { - get { return mReadVersion; } - set { this.mReadVersion = value; } - } - - internal virtual void SetWriteVersion(ProtocolVersion writeVersion) - { - this.mWriteVersion = writeVersion; - } - - internal virtual void InitPendingEpoch(TlsCipher pendingCipher) - { - if (mPendingEpoch != null) - throw new InvalidOperationException(); - - /* - * TODO "In order to ensure that any given sequence/epoch pair is unique, implementations - * MUST NOT allow the same epoch value to be reused within two times the TCP maximum segment - * lifetime." - */ - - // TODO Check for overflow - this.mPendingEpoch = new DtlsEpoch(mWriteEpoch.Epoch + 1, pendingCipher); - } - - internal virtual void HandshakeSuccessful(DtlsHandshakeRetransmit retransmit) - { - if (mReadEpoch == mCurrentEpoch || mWriteEpoch == mCurrentEpoch) - { - // TODO - throw new InvalidOperationException(); - } - - if (retransmit != null) - { - this.mRetransmit = retransmit; - this.mRetransmitEpoch = mCurrentEpoch; - this.mRetransmitExpiry = DateTimeUtilities.CurrentUnixMs() + RETRANSMIT_TIMEOUT; - } - - this.mInHandshake = false; - this.mCurrentEpoch = mPendingEpoch; - this.mPendingEpoch = null; - } - - internal virtual void ResetWriteEpoch() - { - if (mRetransmitEpoch != null) - { - this.mWriteEpoch = mRetransmitEpoch; - } - else - { - this.mWriteEpoch = mCurrentEpoch; - } - } - - public virtual int GetReceiveLimit() - { - return System.Math.Min(this.mPlaintextLimit, - mReadEpoch.Cipher.GetPlaintextLimit(mTransport.GetReceiveLimit() - RECORD_HEADER_LENGTH)); - } - - public virtual int GetSendLimit() - { - return System.Math.Min(this.mPlaintextLimit, - mWriteEpoch.Cipher.GetPlaintextLimit(mTransport.GetSendLimit() - RECORD_HEADER_LENGTH)); - } - - public virtual int Receive(byte[] buf, int off, int len, int waitMillis) - { - byte[] record = null; - - for (;;) - { - int receiveLimit = System.Math.Min(len, GetReceiveLimit()) + RECORD_HEADER_LENGTH; - if (record == null || record.Length < receiveLimit) - { - record = new byte[receiveLimit]; - } - - try - { - if (mRetransmit != null && DateTimeUtilities.CurrentUnixMs() > mRetransmitExpiry) - { - mRetransmit = null; - mRetransmitEpoch = null; - } - - int received = ReceiveRecord(record, 0, receiveLimit, waitMillis); - if (received < 0) - { - return received; - } - if (received < RECORD_HEADER_LENGTH) - { - continue; - } - int length = TlsUtilities.ReadUint16(record, 11); - if (received != (length + RECORD_HEADER_LENGTH)) - { - continue; - } - - byte type = TlsUtilities.ReadUint8(record, 0); - - // TODO Support user-specified custom protocols? - switch (type) - { - case ContentType.alert: - case ContentType.application_data: - case ContentType.change_cipher_spec: - case ContentType.handshake: - case ContentType.heartbeat: - break; - default: - // TODO Exception? - continue; - } - - int epoch = TlsUtilities.ReadUint16(record, 3); - - DtlsEpoch recordEpoch = null; - if (epoch == mReadEpoch.Epoch) - { - recordEpoch = mReadEpoch; - } - else if (type == ContentType.handshake && mRetransmitEpoch != null - && epoch == mRetransmitEpoch.Epoch) - { - recordEpoch = mRetransmitEpoch; - } - - if (recordEpoch == null) - { - continue; - } - - long seq = TlsUtilities.ReadUint48(record, 5); - if (recordEpoch.ReplayWindow.ShouldDiscard(seq)) - { - continue; - } - - ProtocolVersion version = TlsUtilities.ReadVersion(record, 1); - if (!version.IsDtls) - { - continue; - } - - if (mReadVersion != null && !mReadVersion.Equals(version)) - { - continue; - } - - byte[] plaintext = recordEpoch.Cipher.DecodeCiphertext( - GetMacSequenceNumber(recordEpoch.Epoch, seq), type, record, RECORD_HEADER_LENGTH, - received - RECORD_HEADER_LENGTH); - - recordEpoch.ReplayWindow.ReportAuthenticated(seq); - - if (plaintext.Length > this.mPlaintextLimit) - { - continue; - } - - if (mReadVersion == null) - { - mReadVersion = version; - } - - switch (type) - { - case ContentType.alert: - { - if (plaintext.Length == 2) - { - byte alertLevel = plaintext[0]; - byte alertDescription = plaintext[1]; - - mPeer.NotifyAlertReceived(alertLevel, alertDescription); - - if (alertLevel == AlertLevel.fatal) - { - Failed(); - throw new TlsFatalAlert(alertDescription); - } - - // TODO Can close_notify be a fatal alert? - if (alertDescription == AlertDescription.close_notify) - { - CloseTransport(); - } - } - - continue; - } - case ContentType.application_data: - { - if (mInHandshake) - { - // TODO Consider buffering application data for new epoch that arrives - // out-of-order with the Finished message - continue; - } - break; - } - case ContentType.change_cipher_spec: - { - // Implicitly receive change_cipher_spec and change to pending cipher state - - for (int i = 0; i < plaintext.Length; ++i) - { - byte message = TlsUtilities.ReadUint8(plaintext, i); - if (message != ChangeCipherSpec.change_cipher_spec) - { - continue; - } - - if (mPendingEpoch != null) - { - mReadEpoch = mPendingEpoch; - } - } - - continue; - } - case ContentType.handshake: - { - if (!mInHandshake) - { - if (mRetransmit != null) - { - mRetransmit.ReceivedHandshakeRecord(epoch, plaintext, 0, plaintext.Length); - } - - // TODO Consider support for HelloRequest - continue; - } - break; - } - case ContentType.heartbeat: - { - // TODO[RFC 6520] - continue; - } - } - - /* - * NOTE: If we receive any non-handshake data in the new epoch implies the peer has - * received our final flight. - */ - if (!mInHandshake && mRetransmit != null) - { - this.mRetransmit = null; - this.mRetransmitEpoch = null; - } - - Array.Copy(plaintext, 0, buf, off, plaintext.Length); - return plaintext.Length; - } - catch (IOException e) - { - // NOTE: Assume this is a timeout for the moment - throw e; - } - } - } - - /// - public virtual void Send(byte[] buf, int off, int len) - { - byte contentType = ContentType.application_data; - - if (this.mInHandshake || this.mWriteEpoch == this.mRetransmitEpoch) - { - contentType = ContentType.handshake; - - byte handshakeType = TlsUtilities.ReadUint8(buf, off); - if (handshakeType == HandshakeType.finished) - { - DtlsEpoch nextEpoch = null; - if (this.mInHandshake) - { - nextEpoch = mPendingEpoch; - } - else if (this.mWriteEpoch == this.mRetransmitEpoch) - { - nextEpoch = mCurrentEpoch; - } - - if (nextEpoch == null) - { - // TODO - throw new InvalidOperationException(); - } - - // Implicitly send change_cipher_spec and change to pending cipher state - - // TODO Send change_cipher_spec and finished records in single datagram? - byte[] data = new byte[]{ 1 }; - SendRecord(ContentType.change_cipher_spec, data, 0, data.Length); - - mWriteEpoch = nextEpoch; - } - } - - SendRecord(contentType, buf, off, len); - } - - public virtual void Close() - { - if (!mClosed) - { - if (mInHandshake) - { - Warn(AlertDescription.user_canceled, "User canceled handshake"); - } - CloseTransport(); - } - } - - internal virtual void Failed() - { - if (!mClosed) - { - mFailed = true; - - CloseTransport(); - } - } - - internal virtual void Fail(byte alertDescription) - { - if (!mClosed) - { - try - { - RaiseAlert(AlertLevel.fatal, alertDescription, null, null); - } - catch (Exception) - { - // Ignore - } - - mFailed = true; - - CloseTransport(); - } - } - - internal virtual void Warn(byte alertDescription, string message) - { - RaiseAlert(AlertLevel.warning, alertDescription, message, null); - } - - private void CloseTransport() - { - if (!mClosed) - { - /* - * RFC 5246 7.2.1. Unless some other fatal alert has been transmitted, each party is - * required to send a close_notify alert before closing the write side of the - * connection. The other party MUST respond with a close_notify alert of its own and - * close down the connection immediately, discarding any pending writes. - */ - - try - { - if (!mFailed) - { - Warn(AlertDescription.close_notify, null); - } - mTransport.Close(); - } - catch (Exception) - { - // Ignore - } - - mClosed = true; - } - } - - private void RaiseAlert(byte alertLevel, byte alertDescription, string message, Exception cause) - { - mPeer.NotifyAlertRaised(alertLevel, alertDescription, message, cause); - - byte[] error = new byte[2]; - error[0] = (byte)alertLevel; - error[1] = (byte)alertDescription; - - SendRecord(ContentType.alert, error, 0, 2); - } - - private int ReceiveRecord(byte[] buf, int off, int len, int waitMillis) - { - if (mRecordQueue.Available > 0) - { - int length = 0; - if (mRecordQueue.Available >= RECORD_HEADER_LENGTH) - { - byte[] lengthBytes = new byte[2]; - mRecordQueue.Read(lengthBytes, 0, 2, 11); - length = TlsUtilities.ReadUint16(lengthBytes, 0); - } - - int received = System.Math.Min(mRecordQueue.Available, RECORD_HEADER_LENGTH + length); - mRecordQueue.RemoveData(buf, off, received, 0); - return received; - } - - { - int received = mTransport.Receive(buf, off, len, waitMillis); - if (received >= RECORD_HEADER_LENGTH) - { - int fragmentLength = TlsUtilities.ReadUint16(buf, off + 11); - int recordLength = RECORD_HEADER_LENGTH + fragmentLength; - if (received > recordLength) - { - mRecordQueue.AddData(buf, off + recordLength, received - recordLength); - received = recordLength; - } - } - return received; - } - } - - private void SendRecord(byte contentType, byte[] buf, int off, int len) - { - // Never send anything until a valid ClientHello has been received - if (mWriteVersion == null) - return; - - if (len > this.mPlaintextLimit) - throw new TlsFatalAlert(AlertDescription.internal_error); - - /* - * RFC 5246 6.2.1 Implementations MUST NOT send zero-length fragments of Handshake, Alert, - * or ChangeCipherSpec content types. - */ - if (len < 1 && contentType != ContentType.application_data) - throw new TlsFatalAlert(AlertDescription.internal_error); - - int recordEpoch = mWriteEpoch.Epoch; - long recordSequenceNumber = mWriteEpoch.AllocateSequenceNumber(); - - byte[] ciphertext = mWriteEpoch.Cipher.EncodePlaintext( - GetMacSequenceNumber(recordEpoch, recordSequenceNumber), contentType, buf, off, len); - - // TODO Check the ciphertext length? - - byte[] record = new byte[ciphertext.Length + RECORD_HEADER_LENGTH]; - TlsUtilities.WriteUint8(contentType, record, 0); - ProtocolVersion version = mWriteVersion; - TlsUtilities.WriteVersion(version, record, 1); - TlsUtilities.WriteUint16(recordEpoch, record, 3); - TlsUtilities.WriteUint48(recordSequenceNumber, record, 5); - TlsUtilities.WriteUint16(ciphertext.Length, record, 11); - Array.Copy(ciphertext, 0, record, RECORD_HEADER_LENGTH, ciphertext.Length); - - mTransport.Send(record, 0, record.Length); - } - - private static long GetMacSequenceNumber(int epoch, long sequence_number) - { - return ((epoch & 0xFFFFFFFFL) << 48) | sequence_number; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/DtlsReliableHandshake.cs b/bc-sharp-crypto/src/crypto/tls/DtlsReliableHandshake.cs deleted file mode 100644 index 396ea74..0000000 --- a/bc-sharp-crypto/src/crypto/tls/DtlsReliableHandshake.cs +++ /dev/null @@ -1,434 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - internal class DtlsReliableHandshake - { - private const int MaxReceiveAhead = 16; - private const int MessageHeaderLength = 12; - - private readonly DtlsRecordLayer mRecordLayer; - - private TlsHandshakeHash mHandshakeHash; - - private IDictionary mCurrentInboundFlight = Platform.CreateHashtable(); - private IDictionary mPreviousInboundFlight = null; - private IList mOutboundFlight = Platform.CreateArrayList(); - private bool mSending = true; - - private int mMessageSeq = 0, mNextReceiveSeq = 0; - - internal DtlsReliableHandshake(TlsContext context, DtlsRecordLayer transport) - { - this.mRecordLayer = transport; - this.mHandshakeHash = new DeferredHash(); - this.mHandshakeHash.Init(context); - } - - internal void NotifyHelloComplete() - { - this.mHandshakeHash = mHandshakeHash.NotifyPrfDetermined(); - } - - internal TlsHandshakeHash HandshakeHash - { - get { return mHandshakeHash; } - } - - internal TlsHandshakeHash PrepareToFinish() - { - TlsHandshakeHash result = mHandshakeHash; - this.mHandshakeHash = mHandshakeHash.StopTracking(); - return result; - } - - internal void SendMessage(byte msg_type, byte[] body) - { - TlsUtilities.CheckUint24(body.Length); - - if (!mSending) - { - CheckInboundFlight(); - mSending = true; - mOutboundFlight.Clear(); - } - - Message message = new Message(mMessageSeq++, msg_type, body); - - mOutboundFlight.Add(message); - - WriteMessage(message); - UpdateHandshakeMessagesDigest(message); - } - - internal byte[] ReceiveMessageBody(byte msg_type) - { - Message message = ReceiveMessage(); - if (message.Type != msg_type) - throw new TlsFatalAlert(AlertDescription.unexpected_message); - - return message.Body; - } - - internal Message ReceiveMessage() - { - if (mSending) - { - mSending = false; - PrepareInboundFlight(Platform.CreateHashtable()); - } - - byte[] buf = null; - - // TODO Check the conditions under which we should reset this - int readTimeoutMillis = 1000; - - for (;;) - { - try - { - for (;;) - { - Message pending = GetPendingMessage(); - if (pending != null) - return pending; - - int receiveLimit = mRecordLayer.GetReceiveLimit(); - if (buf == null || buf.Length < receiveLimit) - { - buf = new byte[receiveLimit]; - } - - int received = mRecordLayer.Receive(buf, 0, receiveLimit, readTimeoutMillis); - if (received < 0) - break; - - bool resentOutbound = ProcessRecord(MaxReceiveAhead, mRecordLayer.ReadEpoch, buf, 0, received); - if (resentOutbound) - { - readTimeoutMillis = BackOff(readTimeoutMillis); - } - } - } - catch (IOException e) - { - // NOTE: Assume this is a timeout for the moment - } - - ResendOutboundFlight(); - readTimeoutMillis = BackOff(readTimeoutMillis); - } - } - - internal void Finish() - { - DtlsHandshakeRetransmit retransmit = null; - if (!mSending) - { - CheckInboundFlight(); - } - else - { - PrepareInboundFlight(null); - - if (mPreviousInboundFlight != null) - { - /* - * RFC 6347 4.2.4. In addition, for at least twice the default MSL defined for [TCP], - * when in the FINISHED state, the node that transmits the last flight (the server in an - * ordinary handshake or the client in a resumed handshake) MUST respond to a retransmit - * of the peer's last flight with a retransmit of the last flight. - */ - retransmit = new Retransmit(this); - } - } - - mRecordLayer.HandshakeSuccessful(retransmit); - } - - internal void ResetHandshakeMessagesDigest() - { - mHandshakeHash.Reset(); - } - - private int BackOff(int timeoutMillis) - { - /* - * TODO[DTLS] implementations SHOULD back off handshake packet size during the - * retransmit backoff. - */ - return System.Math.Min(timeoutMillis * 2, 60000); - } - - /** - * Check that there are no "extra" messages left in the current inbound flight - */ - private void CheckInboundFlight() - { - foreach (int key in mCurrentInboundFlight.Keys) - { - if (key >= mNextReceiveSeq) - { - // TODO Should this be considered an error? - } - } - } - - private Message GetPendingMessage() - { - DtlsReassembler next = (DtlsReassembler)mCurrentInboundFlight[mNextReceiveSeq]; - if (next != null) - { - byte[] body = next.GetBodyIfComplete(); - if (body != null) - { - mPreviousInboundFlight = null; - return UpdateHandshakeMessagesDigest(new Message(mNextReceiveSeq++, next.MsgType, body)); - } - } - return null; - } - - private void PrepareInboundFlight(IDictionary nextFlight) - { - ResetAll(mCurrentInboundFlight); - mPreviousInboundFlight = mCurrentInboundFlight; - mCurrentInboundFlight = nextFlight; - } - - private bool ProcessRecord(int windowSize, int epoch, byte[] buf, int off, int len) - { - bool checkPreviousFlight = false; - - while (len >= MessageHeaderLength) - { - int fragment_length = TlsUtilities.ReadUint24(buf, off + 9); - int message_length = fragment_length + MessageHeaderLength; - if (len < message_length) - { - // NOTE: Truncated message - ignore it - break; - } - - int length = TlsUtilities.ReadUint24(buf, off + 1); - int fragment_offset = TlsUtilities.ReadUint24(buf, off + 6); - if (fragment_offset + fragment_length > length) - { - // NOTE: Malformed fragment - ignore it and the rest of the record - break; - } - - /* - * NOTE: This very simple epoch check will only work until we want to support - * renegotiation (and we're not likely to do that anyway). - */ - byte msg_type = TlsUtilities.ReadUint8(buf, off + 0); - int expectedEpoch = msg_type == HandshakeType.finished ? 1 : 0; - if (epoch != expectedEpoch) - { - break; - } - - int message_seq = TlsUtilities.ReadUint16(buf, off + 4); - if (message_seq >= (mNextReceiveSeq + windowSize)) - { - // NOTE: Too far ahead - ignore - } - else if (message_seq >= mNextReceiveSeq) - { - DtlsReassembler reassembler = (DtlsReassembler)mCurrentInboundFlight[message_seq]; - if (reassembler == null) - { - reassembler = new DtlsReassembler(msg_type, length); - mCurrentInboundFlight[message_seq] = reassembler; - } - - reassembler.ContributeFragment(msg_type, length, buf, off + MessageHeaderLength, fragment_offset, - fragment_length); - } - else if (mPreviousInboundFlight != null) - { - /* - * NOTE: If we receive the previous flight of incoming messages in full again, - * retransmit our last flight - */ - - DtlsReassembler reassembler = (DtlsReassembler)mPreviousInboundFlight[message_seq]; - if (reassembler != null) - { - reassembler.ContributeFragment(msg_type, length, buf, off + MessageHeaderLength, fragment_offset, - fragment_length); - checkPreviousFlight = true; - } - } - - off += message_length; - len -= message_length; - } - - bool result = checkPreviousFlight && CheckAll(mPreviousInboundFlight); - if (result) - { - ResendOutboundFlight(); - ResetAll(mPreviousInboundFlight); - } - return result; - } - - private void ResendOutboundFlight() - { - mRecordLayer.ResetWriteEpoch(); - for (int i = 0; i < mOutboundFlight.Count; ++i) - { - WriteMessage((Message)mOutboundFlight[i]); - } - } - - private Message UpdateHandshakeMessagesDigest(Message message) - { - if (message.Type != HandshakeType.hello_request) - { - byte[] body = message.Body; - byte[] buf = new byte[MessageHeaderLength]; - TlsUtilities.WriteUint8(message.Type, buf, 0); - TlsUtilities.WriteUint24(body.Length, buf, 1); - TlsUtilities.WriteUint16(message.Seq, buf, 4); - TlsUtilities.WriteUint24(0, buf, 6); - TlsUtilities.WriteUint24(body.Length, buf, 9); - mHandshakeHash.BlockUpdate(buf, 0, buf.Length); - mHandshakeHash.BlockUpdate(body, 0, body.Length); - } - return message; - } - - private void WriteMessage(Message message) - { - int sendLimit = mRecordLayer.GetSendLimit(); - int fragmentLimit = sendLimit - MessageHeaderLength; - - // TODO Support a higher minimum fragment size? - if (fragmentLimit < 1) - { - // TODO Should we be throwing an exception here? - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - int length = message.Body.Length; - - // NOTE: Must still send a fragment if body is empty - int fragment_offset = 0; - do - { - int fragment_length = System.Math.Min(length - fragment_offset, fragmentLimit); - WriteHandshakeFragment(message, fragment_offset, fragment_length); - fragment_offset += fragment_length; - } - while (fragment_offset < length); - } - - private void WriteHandshakeFragment(Message message, int fragment_offset, int fragment_length) - { - RecordLayerBuffer fragment = new RecordLayerBuffer(MessageHeaderLength + fragment_length); - TlsUtilities.WriteUint8(message.Type, fragment); - TlsUtilities.WriteUint24(message.Body.Length, fragment); - TlsUtilities.WriteUint16(message.Seq, fragment); - TlsUtilities.WriteUint24(fragment_offset, fragment); - TlsUtilities.WriteUint24(fragment_length, fragment); - fragment.Write(message.Body, fragment_offset, fragment_length); - - fragment.SendToRecordLayer(mRecordLayer); - } - - private static bool CheckAll(IDictionary inboundFlight) - { - foreach (DtlsReassembler r in inboundFlight.Values) - { - if (r.GetBodyIfComplete() == null) - { - return false; - } - } - return true; - } - - private static void ResetAll(IDictionary inboundFlight) - { - foreach (DtlsReassembler r in inboundFlight.Values) - { - r.Reset(); - } - } - - internal class Message - { - private readonly int mMessageSeq; - private readonly byte mMsgType; - private readonly byte[] mBody; - - internal Message(int message_seq, byte msg_type, byte[] body) - { - this.mMessageSeq = message_seq; - this.mMsgType = msg_type; - this.mBody = body; - } - - public int Seq - { - get { return mMessageSeq; } - } - - public byte Type - { - get { return mMsgType; } - } - - public byte[] Body - { - get { return mBody; } - } - } - - internal class RecordLayerBuffer - : MemoryStream - { - internal RecordLayerBuffer(int size) - : base(size) - { - } - - internal void SendToRecordLayer(DtlsRecordLayer recordLayer) - { -#if PORTABLE - byte[] buf = ToArray(); - int bufLen = buf.Length; -#else - byte[] buf = GetBuffer(); - int bufLen = (int)Length; -#endif - - recordLayer.Send(buf, 0, bufLen); - Platform.Dispose(this); - } - } - - internal class Retransmit - : DtlsHandshakeRetransmit - { - private readonly DtlsReliableHandshake mOuter; - - internal Retransmit(DtlsReliableHandshake outer) - { - this.mOuter = outer; - } - - public void ReceivedHandshakeRecord(int epoch, byte[] buf, int off, int len) - { - mOuter.ProcessRecord(0, epoch, buf, off, len); - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/DtlsReplayWindow.cs b/bc-sharp-crypto/src/crypto/tls/DtlsReplayWindow.cs deleted file mode 100644 index ea18e80..0000000 --- a/bc-sharp-crypto/src/crypto/tls/DtlsReplayWindow.cs +++ /dev/null @@ -1,85 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /** - * RFC 4347 4.1.2.5 Anti-replay - *

- * Support fast rejection of duplicate records by maintaining a sliding receive window - */ - internal class DtlsReplayWindow - { - private const long VALID_SEQ_MASK = 0x0000FFFFFFFFFFFFL; - - private const long WINDOW_SIZE = 64L; - - private long mLatestConfirmedSeq = -1; - private long mBitmap = 0; - - /** - * Check whether a received record with the given sequence number should be rejected as a duplicate. - * - * @param seq the 48-bit DTLSPlainText.sequence_number field of a received record. - * @return true if the record should be discarded without further processing. - */ - internal bool ShouldDiscard(long seq) - { - if ((seq & VALID_SEQ_MASK) != seq) - return true; - - if (seq <= mLatestConfirmedSeq) - { - long diff = mLatestConfirmedSeq - seq; - if (diff >= WINDOW_SIZE) - return true; - if ((mBitmap & (1L << (int)diff)) != 0) - return true; - } - - return false; - } - - /** - * Report that a received record with the given sequence number passed authentication checks. - * - * @param seq the 48-bit DTLSPlainText.sequence_number field of an authenticated record. - */ - internal void ReportAuthenticated(long seq) - { - if ((seq & VALID_SEQ_MASK) != seq) - throw new ArgumentException("out of range", "seq"); - - if (seq <= mLatestConfirmedSeq) - { - long diff = mLatestConfirmedSeq - seq; - if (diff < WINDOW_SIZE) - { - mBitmap |= (1L << (int)diff); - } - } - else - { - long diff = seq - mLatestConfirmedSeq; - if (diff >= WINDOW_SIZE) - { - mBitmap = 1; - } - else - { - mBitmap <<= (int)diff; - mBitmap |= 1; - } - mLatestConfirmedSeq = seq; - } - } - - /** - * When a new epoch begins, sequence numbers begin again at 0 - */ - internal void Reset() - { - mLatestConfirmedSeq = -1; - mBitmap = 0; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/DtlsServerProtocol.cs b/bc-sharp-crypto/src/crypto/tls/DtlsServerProtocol.cs deleted file mode 100644 index 3032269..0000000 --- a/bc-sharp-crypto/src/crypto/tls/DtlsServerProtocol.cs +++ /dev/null @@ -1,696 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class DtlsServerProtocol - : DtlsProtocol - { - protected bool mVerifyRequests = true; - - public DtlsServerProtocol(SecureRandom secureRandom) - : base(secureRandom) - { - } - - public virtual bool VerifyRequests - { - get { return mVerifyRequests; } - set { this.mVerifyRequests = value; } - } - - public virtual DtlsTransport Accept(TlsServer server, DatagramTransport transport) - { - if (server == null) - throw new ArgumentNullException("server"); - if (transport == null) - throw new ArgumentNullException("transport"); - - SecurityParameters securityParameters = new SecurityParameters(); - securityParameters.entity = ConnectionEnd.server; - - ServerHandshakeState state = new ServerHandshakeState(); - state.server = server; - state.serverContext = new TlsServerContextImpl(mSecureRandom, securityParameters); - - securityParameters.serverRandom = TlsProtocol.CreateRandomBlock(server.ShouldUseGmtUnixTime(), - state.serverContext.NonceRandomGenerator); - - server.Init(state.serverContext); - - DtlsRecordLayer recordLayer = new DtlsRecordLayer(transport, state.serverContext, server, ContentType.handshake); - - // TODO Need to handle sending of HelloVerifyRequest without entering a full connection - - try - { - return ServerHandshake(state, recordLayer); - } - catch (TlsFatalAlert fatalAlert) - { - AbortServerHandshake(state, recordLayer, fatalAlert.AlertDescription); - throw fatalAlert; - } - catch (IOException e) - { - AbortServerHandshake(state, recordLayer, AlertDescription.internal_error); - throw e; - } - catch (Exception e) - { - AbortServerHandshake(state, recordLayer, AlertDescription.internal_error); - throw new TlsFatalAlert(AlertDescription.internal_error, e); - } - finally - { - securityParameters.Clear(); - } - } - - internal virtual void AbortServerHandshake(ServerHandshakeState state, DtlsRecordLayer recordLayer, byte alertDescription) - { - recordLayer.Fail(alertDescription); - InvalidateSession(state); - } - - internal virtual DtlsTransport ServerHandshake(ServerHandshakeState state, DtlsRecordLayer recordLayer) - { - SecurityParameters securityParameters = state.serverContext.SecurityParameters; - DtlsReliableHandshake handshake = new DtlsReliableHandshake(state.serverContext, recordLayer); - - DtlsReliableHandshake.Message clientMessage = handshake.ReceiveMessage(); - - // NOTE: DTLSRecordLayer requires any DTLS version, we don't otherwise constrain this - //ProtocolVersion recordLayerVersion = recordLayer.ReadVersion; - - if (clientMessage.Type == HandshakeType.client_hello) - { - ProcessClientHello(state, clientMessage.Body); - } - else - { - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - - { - byte[] serverHelloBody = GenerateServerHello(state); - - ApplyMaxFragmentLengthExtension(recordLayer, securityParameters.maxFragmentLength); - - ProtocolVersion recordLayerVersion = state.serverContext.ServerVersion; - recordLayer.ReadVersion = recordLayerVersion; - recordLayer.SetWriteVersion(recordLayerVersion); - - handshake.SendMessage(HandshakeType.server_hello, serverHelloBody); - } - - handshake.NotifyHelloComplete(); - - IList serverSupplementalData = state.server.GetServerSupplementalData(); - if (serverSupplementalData != null) - { - byte[] supplementalDataBody = GenerateSupplementalData(serverSupplementalData); - handshake.SendMessage(HandshakeType.supplemental_data, supplementalDataBody); - } - - state.keyExchange = state.server.GetKeyExchange(); - state.keyExchange.Init(state.serverContext); - - state.serverCredentials = state.server.GetCredentials(); - - Certificate serverCertificate = null; - - if (state.serverCredentials == null) - { - state.keyExchange.SkipServerCredentials(); - } - else - { - state.keyExchange.ProcessServerCredentials(state.serverCredentials); - - serverCertificate = state.serverCredentials.Certificate; - byte[] certificateBody = GenerateCertificate(serverCertificate); - handshake.SendMessage(HandshakeType.certificate, certificateBody); - } - - // TODO[RFC 3546] Check whether empty certificates is possible, allowed, or excludes CertificateStatus - if (serverCertificate == null || serverCertificate.IsEmpty) - { - state.allowCertificateStatus = false; - } - - if (state.allowCertificateStatus) - { - CertificateStatus certificateStatus = state.server.GetCertificateStatus(); - if (certificateStatus != null) - { - byte[] certificateStatusBody = GenerateCertificateStatus(state, certificateStatus); - handshake.SendMessage(HandshakeType.certificate_status, certificateStatusBody); - } - } - - byte[] serverKeyExchange = state.keyExchange.GenerateServerKeyExchange(); - if (serverKeyExchange != null) - { - handshake.SendMessage(HandshakeType.server_key_exchange, serverKeyExchange); - } - - if (state.serverCredentials != null) - { - state.certificateRequest = state.server.GetCertificateRequest(); - if (state.certificateRequest != null) - { - if (TlsUtilities.IsTlsV12(state.serverContext) != (state.certificateRequest.SupportedSignatureAlgorithms != null)) - throw new TlsFatalAlert(AlertDescription.internal_error); - - state.keyExchange.ValidateCertificateRequest(state.certificateRequest); - - byte[] certificateRequestBody = GenerateCertificateRequest(state, state.certificateRequest); - handshake.SendMessage(HandshakeType.certificate_request, certificateRequestBody); - - TlsUtilities.TrackHashAlgorithms(handshake.HandshakeHash, - state.certificateRequest.SupportedSignatureAlgorithms); - } - } - - handshake.SendMessage(HandshakeType.server_hello_done, TlsUtilities.EmptyBytes); - - handshake.HandshakeHash.SealHashAlgorithms(); - - clientMessage = handshake.ReceiveMessage(); - - if (clientMessage.Type == HandshakeType.supplemental_data) - { - ProcessClientSupplementalData(state, clientMessage.Body); - clientMessage = handshake.ReceiveMessage(); - } - else - { - state.server.ProcessClientSupplementalData(null); - } - - if (state.certificateRequest == null) - { - state.keyExchange.SkipClientCredentials(); - } - else - { - if (clientMessage.Type == HandshakeType.certificate) - { - ProcessClientCertificate(state, clientMessage.Body); - clientMessage = handshake.ReceiveMessage(); - } - else - { - if (TlsUtilities.IsTlsV12(state.serverContext)) - { - /* - * RFC 5246 If no suitable certificate is available, the client MUST send a - * certificate message containing no certificates. - * - * NOTE: In previous RFCs, this was SHOULD instead of MUST. - */ - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - - NotifyClientCertificate(state, Certificate.EmptyChain); - } - } - - if (clientMessage.Type == HandshakeType.client_key_exchange) - { - ProcessClientKeyExchange(state, clientMessage.Body); - } - else - { - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - - TlsHandshakeHash prepareFinishHash = handshake.PrepareToFinish(); - securityParameters.sessionHash = TlsProtocol.GetCurrentPrfHash(state.serverContext, prepareFinishHash, null); - - TlsProtocol.EstablishMasterSecret(state.serverContext, state.keyExchange); - recordLayer.InitPendingEpoch(state.server.GetCipher()); - - /* - * RFC 5246 7.4.8 This message is only sent following a client certificate that has signing - * capability (i.e., all certificates except those containing fixed Diffie-Hellman - * parameters). - */ - if (ExpectCertificateVerifyMessage(state)) - { - byte[] certificateVerifyBody = handshake.ReceiveMessageBody(HandshakeType.certificate_verify); - ProcessCertificateVerify(state, certificateVerifyBody, prepareFinishHash); - } - - // NOTE: Calculated exclusive of the actual Finished message from the client - byte[] expectedClientVerifyData = TlsUtilities.CalculateVerifyData(state.serverContext, ExporterLabel.client_finished, - TlsProtocol.GetCurrentPrfHash(state.serverContext, handshake.HandshakeHash, null)); - ProcessFinished(handshake.ReceiveMessageBody(HandshakeType.finished), expectedClientVerifyData); - - if (state.expectSessionTicket) - { - NewSessionTicket newSessionTicket = state.server.GetNewSessionTicket(); - byte[] newSessionTicketBody = GenerateNewSessionTicket(state, newSessionTicket); - handshake.SendMessage(HandshakeType.session_ticket, newSessionTicketBody); - } - - // NOTE: Calculated exclusive of the Finished message itself - byte[] serverVerifyData = TlsUtilities.CalculateVerifyData(state.serverContext, ExporterLabel.server_finished, - TlsProtocol.GetCurrentPrfHash(state.serverContext, handshake.HandshakeHash, null)); - handshake.SendMessage(HandshakeType.finished, serverVerifyData); - - handshake.Finish(); - - state.server.NotifyHandshakeComplete(); - - return new DtlsTransport(recordLayer); - } - - protected virtual void InvalidateSession(ServerHandshakeState state) - { - if (state.sessionParameters != null) - { - state.sessionParameters.Clear(); - state.sessionParameters = null; - } - - if (state.tlsSession != null) - { - state.tlsSession.Invalidate(); - state.tlsSession = null; - } - } - - protected virtual byte[] GenerateCertificateRequest(ServerHandshakeState state, CertificateRequest certificateRequest) - { - MemoryStream buf = new MemoryStream(); - certificateRequest.Encode(buf); - return buf.ToArray(); - } - - protected virtual byte[] GenerateCertificateStatus(ServerHandshakeState state, CertificateStatus certificateStatus) - { - MemoryStream buf = new MemoryStream(); - certificateStatus.Encode(buf); - return buf.ToArray(); - } - - protected virtual byte[] GenerateNewSessionTicket(ServerHandshakeState state, NewSessionTicket newSessionTicket) - { - MemoryStream buf = new MemoryStream(); - newSessionTicket.Encode(buf); - return buf.ToArray(); - } - - protected virtual byte[] GenerateServerHello(ServerHandshakeState state) - { - SecurityParameters securityParameters = state.serverContext.SecurityParameters; - - MemoryStream buf = new MemoryStream(); - - { - ProtocolVersion server_version = state.server.GetServerVersion(); - if (!server_version.IsEqualOrEarlierVersionOf(state.serverContext.ClientVersion)) - throw new TlsFatalAlert(AlertDescription.internal_error); - - // TODO Read RFCs for guidance on the expected record layer version number - // recordStream.setReadVersion(server_version); - // recordStream.setWriteVersion(server_version); - // recordStream.setRestrictReadVersion(true); - state.serverContext.SetServerVersion(server_version); - - TlsUtilities.WriteVersion(state.serverContext.ServerVersion, buf); - } - - buf.Write(securityParameters.ServerRandom, 0, securityParameters.ServerRandom.Length); - - /* - * The server may return an empty session_id to indicate that the session will not be cached - * and therefore cannot be resumed. - */ - TlsUtilities.WriteOpaque8(TlsUtilities.EmptyBytes, buf); - - int selectedCipherSuite = state.server.GetSelectedCipherSuite(); - if (!Arrays.Contains(state.offeredCipherSuites, selectedCipherSuite) - || selectedCipherSuite == CipherSuite.TLS_NULL_WITH_NULL_NULL - || CipherSuite.IsScsv(selectedCipherSuite) - || !TlsUtilities.IsValidCipherSuiteForVersion(selectedCipherSuite, state.serverContext.ServerVersion)) - { - throw new TlsFatalAlert(AlertDescription.internal_error); - } - ValidateSelectedCipherSuite(selectedCipherSuite, AlertDescription.internal_error); - securityParameters.cipherSuite = selectedCipherSuite; - - byte selectedCompressionMethod = state.server.GetSelectedCompressionMethod(); - if (!Arrays.Contains(state.offeredCompressionMethods, selectedCompressionMethod)) - throw new TlsFatalAlert(AlertDescription.internal_error); - securityParameters.compressionAlgorithm = selectedCompressionMethod; - - TlsUtilities.WriteUint16(selectedCipherSuite, buf); - TlsUtilities.WriteUint8(selectedCompressionMethod, buf); - - state.serverExtensions = state.server.GetServerExtensions(); - - /* - * RFC 5746 3.6. Server Behavior: Initial Handshake - */ - if (state.secure_renegotiation) - { - byte[] renegExtData = TlsUtilities.GetExtensionData(state.serverExtensions, ExtensionType.renegotiation_info); - bool noRenegExt = (null == renegExtData); - - if (noRenegExt) - { - /* - * Note that sending a "renegotiation_info" extension in response to a ClientHello - * containing only the SCSV is an explicit exception to the prohibition in RFC 5246, - * Section 7.4.1.4, on the server sending unsolicited extensions and is only allowed - * because the client is signaling its willingness to receive the extension via the - * TLS_EMPTY_RENEGOTIATION_INFO_SCSV SCSV. - */ - - /* - * If the secure_renegotiation flag is set to TRUE, the server MUST include an empty - * "renegotiation_info" extension in the ServerHello message. - */ - state.serverExtensions = TlsExtensionsUtilities.EnsureExtensionsInitialised(state.serverExtensions); - state.serverExtensions[ExtensionType.renegotiation_info] = TlsProtocol.CreateRenegotiationInfo(TlsUtilities.EmptyBytes); - } - } - - if (securityParameters.extendedMasterSecret) - { - state.serverExtensions = TlsExtensionsUtilities.EnsureExtensionsInitialised(state.serverExtensions); - TlsExtensionsUtilities.AddExtendedMasterSecretExtension(state.serverExtensions); - } - - /* - * TODO RFC 3546 2.3 If [...] the older session is resumed, then the server MUST ignore - * extensions appearing in the client hello, and send a server hello containing no - * extensions. - */ - - if (state.serverExtensions != null) - { - securityParameters.encryptThenMac = TlsExtensionsUtilities.HasEncryptThenMacExtension(state.serverExtensions); - - securityParameters.maxFragmentLength = EvaluateMaxFragmentLengthExtension(state.resumedSession, - state.clientExtensions, state.serverExtensions, AlertDescription.internal_error); - - securityParameters.truncatedHMac = TlsExtensionsUtilities.HasTruncatedHMacExtension(state.serverExtensions); - - /* - * TODO It's surprising that there's no provision to allow a 'fresh' CertificateStatus to be sent in - * a session resumption handshake. - */ - state.allowCertificateStatus = !state.resumedSession - && TlsUtilities.HasExpectedEmptyExtensionData(state.serverExtensions, ExtensionType.status_request, - AlertDescription.internal_error); - - state.expectSessionTicket = !state.resumedSession - && TlsUtilities.HasExpectedEmptyExtensionData(state.serverExtensions, ExtensionType.session_ticket, - AlertDescription.internal_error); - - TlsProtocol.WriteExtensions(buf, state.serverExtensions); - } - - securityParameters.prfAlgorithm = TlsProtocol.GetPrfAlgorithm(state.serverContext, - securityParameters.CipherSuite); - - /* - * RFC 5246 7.4.9. Any cipher suite which does not explicitly specify verify_data_length - * has a verify_data_length equal to 12. This includes all existing cipher suites. - */ - securityParameters.verifyDataLength = 12; - - return buf.ToArray(); - } - - protected virtual void NotifyClientCertificate(ServerHandshakeState state, Certificate clientCertificate) - { - if (state.certificateRequest == null) - throw new InvalidOperationException(); - - if (state.clientCertificate != null) - throw new TlsFatalAlert(AlertDescription.unexpected_message); - - state.clientCertificate = clientCertificate; - - if (clientCertificate.IsEmpty) - { - state.keyExchange.SkipClientCredentials(); - } - else - { - - /* - * TODO RFC 5246 7.4.6. If the certificate_authorities list in the certificate request - * message was non-empty, one of the certificates in the certificate chain SHOULD be - * issued by one of the listed CAs. - */ - - state.clientCertificateType = TlsUtilities.GetClientCertificateType(clientCertificate, - state.serverCredentials.Certificate); - - state.keyExchange.ProcessClientCertificate(clientCertificate); - } - - /* - * RFC 5246 7.4.6. If the client does not send any certificates, the server MAY at its - * discretion either continue the handshake without client authentication, or respond with a - * fatal handshake_failure alert. Also, if some aspect of the certificate chain was - * unacceptable (e.g., it was not signed by a known, trusted CA), the server MAY at its - * discretion either continue the handshake (considering the client unauthenticated) or send - * a fatal alert. - */ - state.server.NotifyClientCertificate(clientCertificate); - } - - protected virtual void ProcessClientCertificate(ServerHandshakeState state, byte[] body) - { - MemoryStream buf = new MemoryStream(body, false); - - Certificate clientCertificate = Certificate.Parse(buf); - - TlsProtocol.AssertEmpty(buf); - - NotifyClientCertificate(state, clientCertificate); - } - - protected virtual void ProcessCertificateVerify(ServerHandshakeState state, byte[] body, TlsHandshakeHash prepareFinishHash) - { - if (state.certificateRequest == null) - throw new InvalidOperationException(); - - MemoryStream buf = new MemoryStream(body, false); - - TlsServerContextImpl context = state.serverContext; - DigitallySigned clientCertificateVerify = DigitallySigned.Parse(context, buf); - - TlsProtocol.AssertEmpty(buf); - - // Verify the CertificateVerify message contains a correct signature. - try - { - SignatureAndHashAlgorithm signatureAlgorithm = clientCertificateVerify.Algorithm; - - byte[] hash; - if (TlsUtilities.IsTlsV12(context)) - { - TlsUtilities.VerifySupportedSignatureAlgorithm(state.certificateRequest.SupportedSignatureAlgorithms, signatureAlgorithm); - hash = prepareFinishHash.GetFinalHash(signatureAlgorithm.Hash); - } - else - { - hash = context.SecurityParameters.SessionHash; - } - - X509CertificateStructure x509Cert = state.clientCertificate.GetCertificateAt(0); - SubjectPublicKeyInfo keyInfo = x509Cert.SubjectPublicKeyInfo; - AsymmetricKeyParameter publicKey = PublicKeyFactory.CreateKey(keyInfo); - - TlsSigner tlsSigner = TlsUtilities.CreateTlsSigner((byte)state.clientCertificateType); - tlsSigner.Init(context); - if (!tlsSigner.VerifyRawSignature(signatureAlgorithm, clientCertificateVerify.Signature, publicKey, hash)) - throw new TlsFatalAlert(AlertDescription.decrypt_error); - } - catch (TlsFatalAlert e) - { - throw e; - } - catch (Exception e) - { - throw new TlsFatalAlert(AlertDescription.decrypt_error, e); - } - } - - protected virtual void ProcessClientHello(ServerHandshakeState state, byte[] body) - { - MemoryStream buf = new MemoryStream(body, false); - - // TODO Read RFCs for guidance on the expected record layer version number - ProtocolVersion client_version = TlsUtilities.ReadVersion(buf); - if (!client_version.IsDtls) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - - /* - * Read the client random - */ - byte[] client_random = TlsUtilities.ReadFully(32, buf); - - byte[] sessionID = TlsUtilities.ReadOpaque8(buf); - if (sessionID.Length > 32) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - - // TODO RFC 4347 has the cookie length restricted to 32, but not in RFC 6347 - byte[] cookie = TlsUtilities.ReadOpaque8(buf); - - int cipher_suites_length = TlsUtilities.ReadUint16(buf); - if (cipher_suites_length < 2 || (cipher_suites_length & 1) != 0) - { - throw new TlsFatalAlert(AlertDescription.decode_error); - } - - /* - * NOTE: "If the session_id field is not empty (implying a session resumption request) this - * vector must include at least the cipher_suite from that session." - */ - state.offeredCipherSuites = TlsUtilities.ReadUint16Array(cipher_suites_length / 2, buf); - - int compression_methods_length = TlsUtilities.ReadUint8(buf); - if (compression_methods_length < 1) - { - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - - state.offeredCompressionMethods = TlsUtilities.ReadUint8Array(compression_methods_length, buf); - - /* - * TODO RFC 3546 2.3 If [...] the older session is resumed, then the server MUST ignore - * extensions appearing in the client hello, and send a server hello containing no - * extensions. - */ - state.clientExtensions = TlsProtocol.ReadExtensions(buf); - - TlsServerContextImpl context = state.serverContext; - SecurityParameters securityParameters = context.SecurityParameters; - - /* - * TODO[session-hash] - * - * draft-ietf-tls-session-hash-04 4. Clients and servers SHOULD NOT accept handshakes - * that do not use the extended master secret [..]. (and see 5.2, 5.3) - */ - securityParameters.extendedMasterSecret = TlsExtensionsUtilities.HasExtendedMasterSecretExtension(state.clientExtensions); - - context.SetClientVersion(client_version); - - state.server.NotifyClientVersion(client_version); - state.server.NotifyFallback(Arrays.Contains(state.offeredCipherSuites, CipherSuite.TLS_FALLBACK_SCSV)); - - securityParameters.clientRandom = client_random; - - state.server.NotifyOfferedCipherSuites(state.offeredCipherSuites); - state.server.NotifyOfferedCompressionMethods(state.offeredCompressionMethods); - - /* - * RFC 5746 3.6. Server Behavior: Initial Handshake - */ - { - /* - * RFC 5746 3.4. The client MUST include either an empty "renegotiation_info" extension, - * or the TLS_EMPTY_RENEGOTIATION_INFO_SCSV signaling cipher suite value in the - * ClientHello. Including both is NOT RECOMMENDED. - */ - - /* - * When a ClientHello is received, the server MUST check if it includes the - * TLS_EMPTY_RENEGOTIATION_INFO_SCSV SCSV. If it does, set the secure_renegotiation flag - * to TRUE. - */ - if (Arrays.Contains(state.offeredCipherSuites, CipherSuite.TLS_EMPTY_RENEGOTIATION_INFO_SCSV)) - { - state.secure_renegotiation = true; - } - - /* - * The server MUST check if the "renegotiation_info" extension is included in the - * ClientHello. - */ - byte[] renegExtData = TlsUtilities.GetExtensionData(state.clientExtensions, ExtensionType.renegotiation_info); - if (renegExtData != null) - { - /* - * If the extension is present, set secure_renegotiation flag to TRUE. The - * server MUST then verify that the length of the "renegotiated_connection" - * field is zero, and if it is not, MUST abort the handshake. - */ - state.secure_renegotiation = true; - - if (!Arrays.ConstantTimeAreEqual(renegExtData, TlsProtocol.CreateRenegotiationInfo(TlsUtilities.EmptyBytes))) - throw new TlsFatalAlert(AlertDescription.handshake_failure); - } - } - - state.server.NotifySecureRenegotiation(state.secure_renegotiation); - - if (state.clientExtensions != null) - { - // NOTE: Validates the padding extension data, if present - TlsExtensionsUtilities.GetPaddingExtension(state.clientExtensions); - - state.server.ProcessClientExtensions(state.clientExtensions); - } - } - - protected virtual void ProcessClientKeyExchange(ServerHandshakeState state, byte[] body) - { - MemoryStream buf = new MemoryStream(body, false); - - state.keyExchange.ProcessClientKeyExchange(buf); - - TlsProtocol.AssertEmpty(buf); - } - - protected virtual void ProcessClientSupplementalData(ServerHandshakeState state, byte[] body) - { - MemoryStream buf = new MemoryStream(body, false); - IList clientSupplementalData = TlsProtocol.ReadSupplementalDataMessage(buf); - state.server.ProcessClientSupplementalData(clientSupplementalData); - } - - protected virtual bool ExpectCertificateVerifyMessage(ServerHandshakeState state) - { - return state.clientCertificateType >= 0 && TlsUtilities.HasSigningCapability((byte)state.clientCertificateType); - } - - protected internal class ServerHandshakeState - { - internal TlsServer server = null; - internal TlsServerContextImpl serverContext = null; - internal TlsSession tlsSession = null; - internal SessionParameters sessionParameters = null; - internal SessionParameters.Builder sessionParametersBuilder = null; - internal int[] offeredCipherSuites = null; - internal byte[] offeredCompressionMethods = null; - internal IDictionary clientExtensions = null; - internal IDictionary serverExtensions = null; - internal bool resumedSession = false; - internal bool secure_renegotiation = false; - internal bool allowCertificateStatus = false; - internal bool expectSessionTicket = false; - internal TlsKeyExchange keyExchange = null; - internal TlsCredentials serverCredentials = null; - internal CertificateRequest certificateRequest = null; - internal short clientCertificateType = -1; - internal Certificate clientCertificate = null; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/DtlsTransport.cs b/bc-sharp-crypto/src/crypto/tls/DtlsTransport.cs deleted file mode 100644 index 5c60733..0000000 --- a/bc-sharp-crypto/src/crypto/tls/DtlsTransport.cs +++ /dev/null @@ -1,77 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class DtlsTransport - : DatagramTransport - { - private readonly DtlsRecordLayer mRecordLayer; - - internal DtlsTransport(DtlsRecordLayer recordLayer) - { - this.mRecordLayer = recordLayer; - } - - public virtual int GetReceiveLimit() - { - return mRecordLayer.GetReceiveLimit(); - } - - public virtual int GetSendLimit() - { - return mRecordLayer.GetSendLimit(); - } - - public virtual int Receive(byte[] buf, int off, int len, int waitMillis) - { - try - { - return mRecordLayer.Receive(buf, off, len, waitMillis); - } - catch (TlsFatalAlert fatalAlert) - { - mRecordLayer.Fail(fatalAlert.AlertDescription); - throw fatalAlert; - } - catch (IOException e) - { - mRecordLayer.Fail(AlertDescription.internal_error); - throw e; - } - catch (Exception e) - { - mRecordLayer.Fail(AlertDescription.internal_error); - throw new TlsFatalAlert(AlertDescription.internal_error, e); - } - } - - public virtual void Send(byte[] buf, int off, int len) - { - try - { - mRecordLayer.Send(buf, off, len); - } - catch (TlsFatalAlert fatalAlert) - { - mRecordLayer.Fail(fatalAlert.AlertDescription); - throw fatalAlert; - } - catch (IOException e) - { - mRecordLayer.Fail(AlertDescription.internal_error); - throw e; - } - catch (Exception e) - { - mRecordLayer.Fail(AlertDescription.internal_error); - throw new TlsFatalAlert(AlertDescription.internal_error, e); - } - } - - public virtual void Close() - { - mRecordLayer.Close(); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/ECBasisType.cs b/bc-sharp-crypto/src/crypto/tls/ECBasisType.cs deleted file mode 100644 index 5416e17..0000000 --- a/bc-sharp-crypto/src/crypto/tls/ECBasisType.cs +++ /dev/null @@ -1,16 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - ///

RFC 4492 5.4. (Errata ID: 2389) - public abstract class ECBasisType - { - public const byte ec_basis_trinomial = 1; - public const byte ec_basis_pentanomial = 2; - - public static bool IsValid(byte ecBasisType) - { - return ecBasisType >= ec_basis_trinomial && ecBasisType <= ec_basis_pentanomial; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/ECCurveType.cs b/bc-sharp-crypto/src/crypto/tls/ECCurveType.cs deleted file mode 100644 index 1b352e9..0000000 --- a/bc-sharp-crypto/src/crypto/tls/ECCurveType.cs +++ /dev/null @@ -1,29 +0,0 @@ -namespace Org.BouncyCastle.Crypto.Tls -{ - /// - /// RFC 4492 5.4 - /// - public abstract class ECCurveType - { - /** - * Indicates the elliptic curve domain parameters are conveyed verbosely, and the - * underlying finite field is a prime field. - */ - public const byte explicit_prime = 1; - - /** - * Indicates the elliptic curve domain parameters are conveyed verbosely, and the - * underlying finite field is a characteristic-2 field. - */ - public const byte explicit_char2 = 2; - - /** - * Indicates that a named curve is used. This option SHOULD be used when applicable. - */ - public const byte named_curve = 3; - - /* - * Values 248 through 255 are reserved for private use. - */ - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/ECPointFormat.cs b/bc-sharp-crypto/src/crypto/tls/ECPointFormat.cs deleted file mode 100644 index 21b0fdd..0000000 --- a/bc-sharp-crypto/src/crypto/tls/ECPointFormat.cs +++ /dev/null @@ -1,16 +0,0 @@ -namespace Org.BouncyCastle.Crypto.Tls -{ - /// - /// RFC 4492 5.1.2 - /// - public abstract class ECPointFormat - { - public const byte uncompressed = 0; - public const byte ansiX962_compressed_prime = 1; - public const byte ansiX962_compressed_char2 = 2; - - /* - * reserved (248..255) - */ - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/EncryptionAlgorithm.cs b/bc-sharp-crypto/src/crypto/tls/EncryptionAlgorithm.cs deleted file mode 100644 index 45eef18..0000000 --- a/bc-sharp-crypto/src/crypto/tls/EncryptionAlgorithm.cs +++ /dev/null @@ -1,69 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /// RFC 2246 - /// - /// Note that the values here are implementation-specific and arbitrary. It is recommended not to - /// depend on the particular values (e.g. serialization). - /// - public abstract class EncryptionAlgorithm - { - public const int NULL = 0; - public const int RC4_40 = 1; - public const int RC4_128 = 2; - public const int RC2_CBC_40 = 3; - public const int IDEA_CBC = 4; - public const int DES40_CBC = 5; - public const int DES_CBC = 6; - public const int cls_3DES_EDE_CBC = 7; - - /* - * RFC 3268 - */ - public const int AES_128_CBC = 8; - public const int AES_256_CBC = 9; - - /* - * RFC 5289 - */ - public const int AES_128_GCM = 10; - public const int AES_256_GCM = 11; - - /* - * RFC 4132 - */ - public const int CAMELLIA_128_CBC = 12; - public const int CAMELLIA_256_CBC = 13; - - /* - * RFC 4162 - */ - public const int SEED_CBC = 14; - - /* - * RFC 6655 - */ - public const int AES_128_CCM = 15; - public const int AES_128_CCM_8 = 16; - public const int AES_256_CCM = 17; - public const int AES_256_CCM_8 = 18; - - /* - * RFC 6367 - */ - public const int CAMELLIA_128_GCM = 19; - public const int CAMELLIA_256_GCM = 20; - - /* - * RFC 7905 - */ - public const int CHACHA20_POLY1305 = 21; - - /* - * draft-zauner-tls-aes-ocb-04 - */ - public const int AES_128_OCB_TAGLEN96 = 103; - public const int AES_256_OCB_TAGLEN96 = 104; - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/ExporterLabel.cs b/bc-sharp-crypto/src/crypto/tls/ExporterLabel.cs deleted file mode 100644 index 5970769..0000000 --- a/bc-sharp-crypto/src/crypto/tls/ExporterLabel.cs +++ /dev/null @@ -1,37 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /// RFC 5705 - public abstract class ExporterLabel - { - /* - * RFC 5246 - */ - public const string client_finished = "client finished"; - public const string server_finished = "server finished"; - public const string master_secret = "master secret"; - public const string key_expansion = "key expansion"; - - /* - * RFC 5216 - */ - public const string client_EAP_encryption = "client EAP encryption"; - - /* - * RFC 5281 - */ - public const string ttls_keying_material = "ttls keying material"; - public const string ttls_challenge = "ttls challenge"; - - /* - * RFC 5764 - */ - public const string dtls_srtp = "EXTRACTOR-dtls_srtp"; - - /* - * draft-ietf-tls-session-hash-04 - */ - public static readonly string extended_master_secret = "extended master secret"; - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/ExtensionType.cs b/bc-sharp-crypto/src/crypto/tls/ExtensionType.cs deleted file mode 100644 index f17210b..0000000 --- a/bc-sharp-crypto/src/crypto/tls/ExtensionType.cs +++ /dev/null @@ -1,128 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public abstract class ExtensionType - { - /* - * RFC 2546 2.3. - */ - public const int server_name = 0; - public const int max_fragment_length = 1; - public const int client_certificate_url = 2; - public const int trusted_ca_keys = 3; - public const int truncated_hmac = 4; - public const int status_request = 5; - - /* - * RFC 4681 - */ - public const int user_mapping = 6; - - /* - * RFC 5878 - */ - public const int client_authz = 7; - public const int server_authz = 8; - - /* - * RFC RFC6091 - */ - public const int cert_type = 9; - - /* - * draft-ietf-tls-negotiated-ff-dhe-10 - */ - public const int supported_groups = 10; - - /* - * RFC 4492 5.1. - */ - [Obsolete("Use 'supported_groups' instead")] - public const int elliptic_curves = supported_groups; - public const int ec_point_formats = 11; - - /* - * RFC 5054 2.8.1. - */ - public const int srp = 12; - - /* - * RFC 5246 7.4.1.4. - */ - public const int signature_algorithms = 13; - - /* - * RFC 5764 9. - */ - public const int use_srtp = 14; - - /* - * RFC 6520 6. - */ - public const int heartbeat = 15; - - /* - * RFC 7301 - */ - public const int application_layer_protocol_negotiation = 16; - - /* - * RFC 6961 - */ - public const int status_request_v2 = 17; - - /* - * RFC 6962 - */ - public const int signed_certificate_timestamp = 18; - - /* - * RFC 7250 - */ - public const int client_certificate_type = 19; - public const int server_certificate_type = 20; - - /* - * RFC 7685 - */ - public const int padding = 21; - - /* - * RFC 7366 - */ - public const int encrypt_then_mac = 22; - - /* - * RFC 7627 - */ - public const int extended_master_secret = 23; - - /* - * draft-ietf-tokbind-negotiation-08 - */ - public static readonly int DRAFT_token_binding = 24; - - /* - * RFC 7924 - */ - public const int cached_info = 25; - - /* - * RFC 5077 7. - */ - public const int session_ticket = 35; - - /* - * draft-ietf-tls-negotiated-ff-dhe-01 - * - * WARNING: Placeholder value; the real value is TBA - */ - public static readonly int negotiated_ff_dhe_groups = 101; - - /* - * RFC 5746 3.2. - */ - public const int renegotiation_info = 0xff01; - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/FiniteFieldDheGroup.cs b/bc-sharp-crypto/src/crypto/tls/FiniteFieldDheGroup.cs deleted file mode 100644 index 4375049..0000000 --- a/bc-sharp-crypto/src/crypto/tls/FiniteFieldDheGroup.cs +++ /dev/null @@ -1,21 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /* - * draft-ietf-tls-negotiated-ff-dhe-01 - */ - public abstract class FiniteFieldDheGroup - { - public const byte ffdhe2432 = 0; - public const byte ffdhe3072 = 1; - public const byte ffdhe4096 = 2; - public const byte ffdhe6144 = 3; - public const byte ffdhe8192 = 4; - - public static bool IsValid(byte group) - { - return group >= ffdhe2432 && group <= ffdhe8192; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/HandshakeType.cs b/bc-sharp-crypto/src/crypto/tls/HandshakeType.cs deleted file mode 100644 index e63042a..0000000 --- a/bc-sharp-crypto/src/crypto/tls/HandshakeType.cs +++ /dev/null @@ -1,40 +0,0 @@ -namespace Org.BouncyCastle.Crypto.Tls -{ - public abstract class HandshakeType - { - /* - * RFC 2246 7.4 - */ - public const byte hello_request = 0; - public const byte client_hello = 1; - public const byte server_hello = 2; - public const byte certificate = 11; - public const byte server_key_exchange = 12; - public const byte certificate_request = 13; - public const byte server_hello_done = 14; - public const byte certificate_verify = 15; - public const byte client_key_exchange = 16; - public const byte finished = 20; - - /* - * RFC 3546 2.4 - */ - public const byte certificate_url = 21; - public const byte certificate_status = 22; - - /* - * (DTLS) RFC 4347 4.3.2 - */ - public const byte hello_verify_request = 3; - - /* - * RFC 4680 - */ - public const byte supplemental_data = 23; - - /* - * RFC 5077 - */ - public const byte session_ticket = 4; - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/HashAlgorithm.cs b/bc-sharp-crypto/src/crypto/tls/HashAlgorithm.cs deleted file mode 100644 index 0f38e2d..0000000 --- a/bc-sharp-crypto/src/crypto/tls/HashAlgorithm.cs +++ /dev/null @@ -1,49 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /// RFC 5246 7.4.1.4.1 - public abstract class HashAlgorithm - { - public const byte none = 0; - public const byte md5 = 1; - public const byte sha1 = 2; - public const byte sha224 = 3; - public const byte sha256 = 4; - public const byte sha384 = 5; - public const byte sha512 = 6; - - public static string GetName(byte hashAlgorithm) - { - switch (hashAlgorithm) - { - case none: - return "none"; - case md5: - return "md5"; - case sha1: - return "sha1"; - case sha224: - return "sha224"; - case sha256: - return "sha256"; - case sha384: - return "sha384"; - case sha512: - return "sha512"; - default: - return "UNKNOWN"; - } - } - - public static string GetText(byte hashAlgorithm) - { - return GetName(hashAlgorithm) + "(" + hashAlgorithm + ")"; - } - - public static bool IsPrivate(byte hashAlgorithm) - { - return 224 <= hashAlgorithm && hashAlgorithm <= 255; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/HeartbeatExtension.cs b/bc-sharp-crypto/src/crypto/tls/HeartbeatExtension.cs deleted file mode 100644 index 0498372..0000000 --- a/bc-sharp-crypto/src/crypto/tls/HeartbeatExtension.cs +++ /dev/null @@ -1,52 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class HeartbeatExtension - { - protected readonly byte mMode; - - public HeartbeatExtension(byte mode) - { - if (!HeartbeatMode.IsValid(mode)) - throw new ArgumentException("not a valid HeartbeatMode value", "mode"); - - this.mMode = mode; - } - - public virtual byte Mode - { - get { return mMode; } - } - - /** - * Encode this {@link HeartbeatExtension} to a {@link Stream}. - * - * @param output - * the {@link Stream} to encode to. - * @throws IOException - */ - public virtual void Encode(Stream output) - { - TlsUtilities.WriteUint8(mMode, output); - } - - /** - * Parse a {@link HeartbeatExtension} from a {@link Stream}. - * - * @param input - * the {@link Stream} to parse from. - * @return a {@link HeartbeatExtension} object. - * @throws IOException - */ - public static HeartbeatExtension Parse(Stream input) - { - byte mode = TlsUtilities.ReadUint8(input); - if (!HeartbeatMode.IsValid(mode)) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - - return new HeartbeatExtension(mode); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/HeartbeatMessage.cs b/bc-sharp-crypto/src/crypto/tls/HeartbeatMessage.cs deleted file mode 100644 index 3f22f7e..0000000 --- a/bc-sharp-crypto/src/crypto/tls/HeartbeatMessage.cs +++ /dev/null @@ -1,109 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class HeartbeatMessage - { - protected readonly byte mType; - protected readonly byte[] mPayload; - protected readonly int mPaddingLength; - - public HeartbeatMessage(byte type, byte[] payload, int paddingLength) - { - if (!HeartbeatMessageType.IsValid(type)) - throw new ArgumentException("not a valid HeartbeatMessageType value", "type"); - if (payload == null || payload.Length >= (1 << 16)) - throw new ArgumentException("must have length < 2^16", "payload"); - if (paddingLength < 16) - throw new ArgumentException("must be at least 16", "paddingLength"); - - this.mType = type; - this.mPayload = payload; - this.mPaddingLength = paddingLength; - } - - /** - * Encode this {@link HeartbeatMessage} to a {@link Stream}. - * - * @param output - * the {@link Stream} to encode to. - * @throws IOException - */ - public virtual void Encode(TlsContext context, Stream output) - { - TlsUtilities.WriteUint8(mType, output); - - TlsUtilities.CheckUint16(mPayload.Length); - TlsUtilities.WriteUint16(mPayload.Length, output); - output.Write(mPayload, 0, mPayload.Length); - - byte[] padding = new byte[mPaddingLength]; - context.NonceRandomGenerator.NextBytes(padding); - output.Write(padding, 0, padding.Length); - } - - /** - * Parse a {@link HeartbeatMessage} from a {@link Stream}. - * - * @param input - * the {@link Stream} to parse from. - * @return a {@link HeartbeatMessage} object. - * @throws IOException - */ - public static HeartbeatMessage Parse(Stream input) - { - byte type = TlsUtilities.ReadUint8(input); - if (!HeartbeatMessageType.IsValid(type)) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - - int payload_length = TlsUtilities.ReadUint16(input); - - PayloadBuffer buf = new PayloadBuffer(); - Streams.PipeAll(input, buf); - - byte[] payload = buf.ToTruncatedByteArray(payload_length); - if (payload == null) - { - /* - * RFC 6520 4. If the payload_length of a received HeartbeatMessage is too large, the - * received HeartbeatMessage MUST be discarded silently. - */ - return null; - } - - TlsUtilities.CheckUint16(buf.Length); - int padding_length = (int)buf.Length - payload.Length; - - /* - * RFC 6520 4. The padding of a received HeartbeatMessage message MUST be ignored - */ - return new HeartbeatMessage(type, payload, padding_length); - } - - internal class PayloadBuffer - : MemoryStream - { - internal byte[] ToTruncatedByteArray(int payloadLength) - { - /* - * RFC 6520 4. The padding_length MUST be at least 16. - */ - int minimumCount = payloadLength + 16; - if (Length < minimumCount) - return null; - -#if PORTABLE - byte[] buf = ToArray(); -#else - byte[] buf = GetBuffer(); -#endif - - return Arrays.CopyOf(buf, payloadLength); - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/HeartbeatMessageType.cs b/bc-sharp-crypto/src/crypto/tls/HeartbeatMessageType.cs deleted file mode 100644 index 57a4b86..0000000 --- a/bc-sharp-crypto/src/crypto/tls/HeartbeatMessageType.cs +++ /dev/null @@ -1,18 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /* - * RFC 6520 3. - */ - public abstract class HeartbeatMessageType - { - public const byte heartbeat_request = 1; - public const byte heartbeat_response = 2; - - public static bool IsValid(byte heartbeatMessageType) - { - return heartbeatMessageType >= heartbeat_request && heartbeatMessageType <= heartbeat_response; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/HeartbeatMode.cs b/bc-sharp-crypto/src/crypto/tls/HeartbeatMode.cs deleted file mode 100644 index f1570a8..0000000 --- a/bc-sharp-crypto/src/crypto/tls/HeartbeatMode.cs +++ /dev/null @@ -1,18 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /* - * RFC 6520 - */ - public abstract class HeartbeatMode - { - public const byte peer_allowed_to_send = 1; - public const byte peer_not_allowed_to_send = 2; - - public static bool IsValid(byte heartbeatMode) - { - return heartbeatMode >= peer_allowed_to_send && heartbeatMode <= peer_not_allowed_to_send; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/KeyExchangeAlgorithm.cs b/bc-sharp-crypto/src/crypto/tls/KeyExchangeAlgorithm.cs deleted file mode 100644 index 9b1b3ba..0000000 --- a/bc-sharp-crypto/src/crypto/tls/KeyExchangeAlgorithm.cs +++ /dev/null @@ -1,54 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /// RFC 2246 - /// - /// Note that the values here are implementation-specific and arbitrary. It is recommended not to - /// depend on the particular values (e.g. serialization). - /// - public abstract class KeyExchangeAlgorithm - { - public const int NULL = 0; - public const int RSA = 1; - public const int RSA_EXPORT = 2; - public const int DHE_DSS = 3; - public const int DHE_DSS_EXPORT = 4; - public const int DHE_RSA = 5; - public const int DHE_RSA_EXPORT = 6; - public const int DH_DSS = 7; - public const int DH_DSS_EXPORT = 8; - public const int DH_RSA = 9; - public const int DH_RSA_EXPORT = 10; - public const int DH_anon = 11; - public const int DH_anon_EXPORT = 12; - - /* - * RFC 4279 - */ - public const int PSK = 13; - public const int DHE_PSK = 14; - public const int RSA_PSK = 15; - - /* - * RFC 4429 - */ - public const int ECDH_ECDSA = 16; - public const int ECDHE_ECDSA = 17; - public const int ECDH_RSA = 18; - public const int ECDHE_RSA = 19; - public const int ECDH_anon = 20; - - /* - * RFC 5054 - */ - public const int SRP = 21; - public const int SRP_DSS = 22; - public const int SRP_RSA = 23; - - /* - * RFC 5489 - */ - public const int ECDHE_PSK = 24; - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/MacAlgorithm.cs b/bc-sharp-crypto/src/crypto/tls/MacAlgorithm.cs deleted file mode 100644 index e4aa88d..0000000 --- a/bc-sharp-crypto/src/crypto/tls/MacAlgorithm.cs +++ /dev/null @@ -1,25 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /// RFC 2246 - /// - /// Note that the values here are implementation-specific and arbitrary. It is recommended not to - /// depend on the particular values (e.g. serialization). - /// - public abstract class MacAlgorithm - { - public const int cls_null = 0; - public const int md5 = 1; - public const int sha = 2; - - /* - * RFC 5246 - */ - public const int hmac_md5 = md5; - public const int hmac_sha1 = sha; - public const int hmac_sha256 = 3; - public const int hmac_sha384 = 4; - public const int hmac_sha512 = 5; - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/MaxFragmentLength.cs b/bc-sharp-crypto/src/crypto/tls/MaxFragmentLength.cs deleted file mode 100644 index 5b10b35..0000000 --- a/bc-sharp-crypto/src/crypto/tls/MaxFragmentLength.cs +++ /dev/null @@ -1,20 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public abstract class MaxFragmentLength - { - /* - * RFC 3546 3.2. - */ - public const byte pow2_9 = 1; - public const byte pow2_10 = 2; - public const byte pow2_11 = 3; - public const byte pow2_12 = 4; - - public static bool IsValid(byte maxFragmentLength) - { - return maxFragmentLength >= pow2_9 && maxFragmentLength <= pow2_12; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/NameType.cs b/bc-sharp-crypto/src/crypto/tls/NameType.cs deleted file mode 100644 index 7821642..0000000 --- a/bc-sharp-crypto/src/crypto/tls/NameType.cs +++ /dev/null @@ -1,17 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public abstract class NameType - { - /* - * RFC 3546 3.1. - */ - public const byte host_name = 0; - - public static bool IsValid(byte nameType) - { - return nameType == host_name; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/NamedCurve.cs b/bc-sharp-crypto/src/crypto/tls/NamedCurve.cs deleted file mode 100644 index b8aa0ec..0000000 --- a/bc-sharp-crypto/src/crypto/tls/NamedCurve.cs +++ /dev/null @@ -1,77 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.Sec; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /// - /// RFC 4492 5.1.1 - /// The named curves defined here are those specified in SEC 2 [13]. Note that many of - /// these curves are also recommended in ANSI X9.62 [7] and FIPS 186-2 [11]. Values 0xFE00 - /// through 0xFEFF are reserved for private use. Values 0xFF01 and 0xFF02 indicate that the - /// client supports arbitrary prime and characteristic-2 curves, respectively (the curve - /// parameters must be encoded explicitly in ECParameters). - /// - public abstract class NamedCurve - { - public const int sect163k1 = 1; - public const int sect163r1 = 2; - public const int sect163r2 = 3; - public const int sect193r1 = 4; - public const int sect193r2 = 5; - public const int sect233k1 = 6; - public const int sect233r1 = 7; - public const int sect239k1 = 8; - public const int sect283k1 = 9; - public const int sect283r1 = 10; - public const int sect409k1 = 11; - public const int sect409r1 = 12; - public const int sect571k1 = 13; - public const int sect571r1 = 14; - public const int secp160k1 = 15; - public const int secp160r1 = 16; - public const int secp160r2 = 17; - public const int secp192k1 = 18; - public const int secp192r1 = 19; - public const int secp224k1 = 20; - public const int secp224r1 = 21; - public const int secp256k1 = 22; - public const int secp256r1 = 23; - public const int secp384r1 = 24; - public const int secp521r1 = 25; - - /* - * RFC 7027 - */ - public const int brainpoolP256r1 = 26; - public const int brainpoolP384r1 = 27; - public const int brainpoolP512r1 = 28; - - /* - * reserved (0xFE00..0xFEFF) - */ - - public const int arbitrary_explicit_prime_curves = 0xFF01; - public const int arbitrary_explicit_char2_curves = 0xFF02; - - public static bool IsValid(int namedCurve) - { - return (namedCurve >= sect163k1 && namedCurve <= brainpoolP512r1) - || (namedCurve >= arbitrary_explicit_prime_curves && namedCurve <= arbitrary_explicit_char2_curves); - } - - public static bool RefersToASpecificNamedCurve(int namedCurve) - { - switch (namedCurve) - { - case arbitrary_explicit_prime_curves: - case arbitrary_explicit_char2_curves: - return false; - default: - return true; - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/NewSessionTicket.cs b/bc-sharp-crypto/src/crypto/tls/NewSessionTicket.cs deleted file mode 100644 index a84026b..0000000 --- a/bc-sharp-crypto/src/crypto/tls/NewSessionTicket.cs +++ /dev/null @@ -1,53 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class NewSessionTicket - { - protected readonly long mTicketLifetimeHint; - protected readonly byte[] mTicket; - - public NewSessionTicket(long ticketLifetimeHint, byte[] ticket) - { - this.mTicketLifetimeHint = ticketLifetimeHint; - this.mTicket = ticket; - } - - public virtual long TicketLifetimeHint - { - get { return mTicketLifetimeHint; } - } - - public virtual byte[] Ticket - { - get { return mTicket; } - } - - /** - * Encode this {@link NewSessionTicket} to a {@link Stream}. - * - * @param output the {@link Stream} to encode to. - * @throws IOException - */ - public virtual void Encode(Stream output) - { - TlsUtilities.WriteUint32(mTicketLifetimeHint, output); - TlsUtilities.WriteOpaque16(mTicket, output); - } - - /** - * Parse a {@link NewSessionTicket} from a {@link Stream}. - * - * @param input the {@link Stream} to parse from. - * @return a {@link NewSessionTicket} object. - * @throws IOException - */ - public static NewSessionTicket Parse(Stream input) - { - long ticketLifetimeHint = TlsUtilities.ReadUint32(input); - byte[] ticket = TlsUtilities.ReadOpaque16(input); - return new NewSessionTicket(ticketLifetimeHint, ticket); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/OcspStatusRequest.cs b/bc-sharp-crypto/src/crypto/tls/OcspStatusRequest.cs deleted file mode 100644 index d9203a3..0000000 --- a/bc-sharp-crypto/src/crypto/tls/OcspStatusRequest.cs +++ /dev/null @@ -1,131 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Ocsp; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /** - * RFC 3546 3.6 - */ - public class OcspStatusRequest - { - protected readonly IList mResponderIDList; - protected readonly X509Extensions mRequestExtensions; - - /** - * @param responderIDList - * an {@link IList} of {@link ResponderID}, specifying the list of trusted OCSP - * responders. An empty list has the special meaning that the responders are - * implicitly known to the server - e.g., by prior arrangement. - * @param requestExtensions - * OCSP request extensions. A null value means that there are no extensions. - */ - public OcspStatusRequest(IList responderIDList, X509Extensions requestExtensions) - { - this.mResponderIDList = responderIDList; - this.mRequestExtensions = requestExtensions; - } - - /** - * @return an {@link IList} of {@link ResponderID} - */ - public virtual IList ResponderIDList - { - get { return mResponderIDList; } - } - - /** - * @return OCSP request extensions - */ - public virtual X509Extensions RequestExtensions - { - get { return mRequestExtensions; } - } - - /** - * Encode this {@link OcspStatusRequest} to a {@link Stream}. - * - * @param output - * the {@link Stream} to encode to. - * @throws IOException - */ - public virtual void Encode(Stream output) - { - if (mResponderIDList == null || mResponderIDList.Count < 1) - { - TlsUtilities.WriteUint16(0, output); - } - else - { - MemoryStream buf = new MemoryStream(); - for (int i = 0; i < mResponderIDList.Count; ++i) - { - ResponderID responderID = (ResponderID)mResponderIDList[i]; - byte[] derEncoding = responderID.GetEncoded(Asn1Encodable.Der); - TlsUtilities.WriteOpaque16(derEncoding, buf); - } - TlsUtilities.CheckUint16(buf.Length); - TlsUtilities.WriteUint16((int)buf.Length, output); - Streams.WriteBufTo(buf, output); - } - - if (mRequestExtensions == null) - { - TlsUtilities.WriteUint16(0, output); - } - else - { - byte[] derEncoding = mRequestExtensions.GetEncoded(Asn1Encodable.Der); - TlsUtilities.CheckUint16(derEncoding.Length); - TlsUtilities.WriteUint16(derEncoding.Length, output); - output.Write(derEncoding, 0, derEncoding.Length); - } - } - - /** - * Parse a {@link OcspStatusRequest} from a {@link Stream}. - * - * @param input - * the {@link Stream} to parse from. - * @return an {@link OcspStatusRequest} object. - * @throws IOException - */ - public static OcspStatusRequest Parse(Stream input) - { - IList responderIDList = Platform.CreateArrayList(); - { - int length = TlsUtilities.ReadUint16(input); - if (length > 0) - { - byte[] data = TlsUtilities.ReadFully(length, input); - MemoryStream buf = new MemoryStream(data, false); - do - { - byte[] derEncoding = TlsUtilities.ReadOpaque16(buf); - ResponderID responderID = ResponderID.GetInstance(TlsUtilities.ReadDerObject(derEncoding)); - responderIDList.Add(responderID); - } - while (buf.Position < buf.Length); - } - } - - X509Extensions requestExtensions = null; - { - int length = TlsUtilities.ReadUint16(input); - if (length > 0) - { - byte[] derEncoding = TlsUtilities.ReadFully(length, input); - requestExtensions = X509Extensions.GetInstance(TlsUtilities.ReadDerObject(derEncoding)); - } - } - - return new OcspStatusRequest(responderIDList, requestExtensions); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/PrfAlgorithm.cs b/bc-sharp-crypto/src/crypto/tls/PrfAlgorithm.cs deleted file mode 100644 index 871241b..0000000 --- a/bc-sharp-crypto/src/crypto/tls/PrfAlgorithm.cs +++ /dev/null @@ -1,24 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /// RFC 5246 - /// - /// Note that the values here are implementation-specific and arbitrary. It is recommended not to - /// depend on the particular values (e.g. serialization). - /// - public abstract class PrfAlgorithm - { - /* - * Placeholder to refer to the legacy TLS algorithm - */ - public const int tls_prf_legacy = 0; - - public const int tls_prf_sha256 = 1; - - /* - * Implied by RFC 5288 - */ - public const int tls_prf_sha384 = 2; - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/ProtocolVersion.cs b/bc-sharp-crypto/src/crypto/tls/ProtocolVersion.cs deleted file mode 100644 index b0d5518..0000000 --- a/bc-sharp-crypto/src/crypto/tls/ProtocolVersion.cs +++ /dev/null @@ -1,159 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public sealed class ProtocolVersion - { - public static readonly ProtocolVersion SSLv3 = new ProtocolVersion(0x0300, "SSL 3.0"); - public static readonly ProtocolVersion TLSv10 = new ProtocolVersion(0x0301, "TLS 1.0"); - public static readonly ProtocolVersion TLSv11 = new ProtocolVersion(0x0302, "TLS 1.1"); - public static readonly ProtocolVersion TLSv12 = new ProtocolVersion(0x0303, "TLS 1.2"); - public static readonly ProtocolVersion DTLSv10 = new ProtocolVersion(0xFEFF, "DTLS 1.0"); - public static readonly ProtocolVersion DTLSv12 = new ProtocolVersion(0xFEFD, "DTLS 1.2"); - - private readonly int version; - private readonly String name; - - private ProtocolVersion(int v, String name) - { - this.version = v & 0xffff; - this.name = name; - } - - public int FullVersion - { - get { return version; } - } - - public int MajorVersion - { - get { return version >> 8; } - } - - public int MinorVersion - { - get { return version & 0xff; } - } - - public bool IsDtls - { - get { return MajorVersion == 0xFE; } - } - - public bool IsSsl - { - get { return this == SSLv3; } - } - - public bool IsTls - { - get { return MajorVersion == 0x03; } - } - - public ProtocolVersion GetEquivalentTLSVersion() - { - if (!IsDtls) - { - return this; - } - if (this == DTLSv10) - { - return TLSv11; - } - return TLSv12; - } - - public bool IsEqualOrEarlierVersionOf(ProtocolVersion version) - { - if (MajorVersion != version.MajorVersion) - { - return false; - } - int diffMinorVersion = version.MinorVersion - MinorVersion; - return IsDtls ? diffMinorVersion <= 0 : diffMinorVersion >= 0; - } - - public bool IsLaterVersionOf(ProtocolVersion version) - { - if (MajorVersion != version.MajorVersion) - { - return false; - } - int diffMinorVersion = version.MinorVersion - MinorVersion; - return IsDtls ? diffMinorVersion > 0 : diffMinorVersion < 0; - } - - public override bool Equals(object other) - { - return this == other || (other is ProtocolVersion && Equals((ProtocolVersion)other)); - } - - public bool Equals(ProtocolVersion other) - { - return other != null && this.version == other.version; - } - - public override int GetHashCode() - { - return version; - } - - /// - public static ProtocolVersion Get(int major, int minor) - { - switch (major) - { - case 0x03: - { - switch (minor) - { - case 0x00: - return SSLv3; - case 0x01: - return TLSv10; - case 0x02: - return TLSv11; - case 0x03: - return TLSv12; - } - return GetUnknownVersion(major, minor, "TLS"); - } - case 0xFE: - { - switch (minor) - { - case 0xFF: - return DTLSv10; - case 0xFE: - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - case 0xFD: - return DTLSv12; - } - return GetUnknownVersion(major, minor, "DTLS"); - } - default: - { - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - } - } - - public override string ToString() - { - return name; - } - - private static ProtocolVersion GetUnknownVersion(int major, int minor, string prefix) - { - TlsUtilities.CheckUint8(major); - TlsUtilities.CheckUint8(minor); - - int v = (major << 8) | minor; - String hex = Platform.ToUpperInvariant(Convert.ToString(0x10000 | v, 16).Substring(1)); - return new ProtocolVersion(v, prefix + " 0x" + hex); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/PskTlsClient.cs b/bc-sharp-crypto/src/crypto/tls/PskTlsClient.cs deleted file mode 100644 index 2ef80dc..0000000 --- a/bc-sharp-crypto/src/crypto/tls/PskTlsClient.cs +++ /dev/null @@ -1,70 +0,0 @@ -using System; -using System.Collections; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class PskTlsClient - : AbstractTlsClient - { - protected TlsPskIdentity mPskIdentity; - - public PskTlsClient(TlsPskIdentity pskIdentity) - : this(new DefaultTlsCipherFactory(), pskIdentity) - { - } - - public PskTlsClient(TlsCipherFactory cipherFactory, TlsPskIdentity pskIdentity) - : base(cipherFactory) - { - this.mPskIdentity = pskIdentity; - } - - public override int[] GetCipherSuites() - { - return new int[] - { - CipherSuite.TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256, - CipherSuite.TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA, - CipherSuite.TLS_DHE_PSK_WITH_AES_128_CBC_SHA256, - CipherSuite.TLS_DHE_PSK_WITH_AES_128_CBC_SHA - }; - } - - public override TlsKeyExchange GetKeyExchange() - { - int keyExchangeAlgorithm = TlsUtilities.GetKeyExchangeAlgorithm(mSelectedCipherSuite); - - switch (keyExchangeAlgorithm) - { - case KeyExchangeAlgorithm.DHE_PSK: - case KeyExchangeAlgorithm.ECDHE_PSK: - case KeyExchangeAlgorithm.PSK: - case KeyExchangeAlgorithm.RSA_PSK: - return CreatePskKeyExchange(keyExchangeAlgorithm); - - default: - /* - * Note: internal error here; the TlsProtocol implementation verifies that the - * server-selected cipher suite was in the list of client-offered cipher suites, so if - * we now can't produce an implementation, we shouldn't have offered it! - */ - throw new TlsFatalAlert(AlertDescription.internal_error); - } - } - - public override TlsAuthentication GetAuthentication() - { - /* - * Note: This method is not called unless a server certificate is sent, which may be the - * case e.g. for RSA_PSK key exchange. - */ - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - protected virtual TlsKeyExchange CreatePskKeyExchange(int keyExchange) - { - return new TlsPskKeyExchange(keyExchange, mSupportedSignatureAlgorithms, mPskIdentity, null, null, mNamedCurves, - mClientECPointFormats, mServerECPointFormats); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/PskTlsServer.cs b/bc-sharp-crypto/src/crypto/tls/PskTlsServer.cs deleted file mode 100644 index b0fb67c..0000000 --- a/bc-sharp-crypto/src/crypto/tls/PskTlsServer.cs +++ /dev/null @@ -1,93 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Agreement; -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class PskTlsServer - : AbstractTlsServer - { - protected TlsPskIdentityManager mPskIdentityManager; - - public PskTlsServer(TlsPskIdentityManager pskIdentityManager) - : this(new DefaultTlsCipherFactory(), pskIdentityManager) - { - } - - public PskTlsServer(TlsCipherFactory cipherFactory, TlsPskIdentityManager pskIdentityManager) - : base(cipherFactory) - { - this.mPskIdentityManager = pskIdentityManager; - } - - protected virtual TlsEncryptionCredentials GetRsaEncryptionCredentials() - { - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - protected virtual DHParameters GetDHParameters() - { - return DHStandardGroups.rfc7919_ffdhe2048; - } - - protected override int[] GetCipherSuites() - { - return new int[] - { - CipherSuite.TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256, - CipherSuite.TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA, - CipherSuite.TLS_DHE_PSK_WITH_AES_128_CBC_SHA256, - CipherSuite.TLS_DHE_PSK_WITH_AES_128_CBC_SHA - }; - } - - public override TlsCredentials GetCredentials() - { - int keyExchangeAlgorithm = TlsUtilities.GetKeyExchangeAlgorithm(mSelectedCipherSuite); - - switch (keyExchangeAlgorithm) - { - case KeyExchangeAlgorithm.DHE_PSK: - case KeyExchangeAlgorithm.ECDHE_PSK: - case KeyExchangeAlgorithm.PSK: - return null; - - case KeyExchangeAlgorithm.RSA_PSK: - return GetRsaEncryptionCredentials(); - - default: - /* Note: internal error here; selected a key exchange we don't implement! */ - throw new TlsFatalAlert(AlertDescription.internal_error); - } - } - - public override TlsKeyExchange GetKeyExchange() - { - int keyExchangeAlgorithm = TlsUtilities.GetKeyExchangeAlgorithm(mSelectedCipherSuite); - - switch (keyExchangeAlgorithm) - { - case KeyExchangeAlgorithm.DHE_PSK: - case KeyExchangeAlgorithm.ECDHE_PSK: - case KeyExchangeAlgorithm.PSK: - case KeyExchangeAlgorithm.RSA_PSK: - return CreatePskKeyExchange(keyExchangeAlgorithm); - - default: - /* - * Note: internal error here; the TlsProtocol implementation verifies that the - * server-selected cipher suite was in the list of client-offered cipher suites, so if - * we now can't produce an implementation, we shouldn't have offered it! - */ - throw new TlsFatalAlert(AlertDescription.internal_error); - } - } - - protected virtual TlsKeyExchange CreatePskKeyExchange(int keyExchange) - { - return new TlsPskKeyExchange(keyExchange, mSupportedSignatureAlgorithms, null, mPskIdentityManager, - GetDHParameters(), mNamedCurves, mClientECPointFormats, mServerECPointFormats); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/RecordStream.cs b/bc-sharp-crypto/src/crypto/tls/RecordStream.cs deleted file mode 100644 index 5d556ad..0000000 --- a/bc-sharp-crypto/src/crypto/tls/RecordStream.cs +++ /dev/null @@ -1,412 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /// An implementation of the TLS 1.0/1.1/1.2 record layer, allowing downgrade to SSLv3. - internal class RecordStream - { - private const int DEFAULT_PLAINTEXT_LIMIT = (1 << 14); - - internal const int TLS_HEADER_SIZE = 5; - internal const int TLS_HEADER_TYPE_OFFSET = 0; - internal const int TLS_HEADER_VERSION_OFFSET = 1; - internal const int TLS_HEADER_LENGTH_OFFSET = 3; - - private TlsProtocol mHandler; - private Stream mInput; - private Stream mOutput; - private TlsCompression mPendingCompression = null, mReadCompression = null, mWriteCompression = null; - private TlsCipher mPendingCipher = null, mReadCipher = null, mWriteCipher = null; - private SequenceNumber mReadSeqNo = new SequenceNumber(), mWriteSeqNo = new SequenceNumber(); - private MemoryStream mBuffer = new MemoryStream(); - - private TlsHandshakeHash mHandshakeHash = null; - private readonly BaseOutputStream mHandshakeHashUpdater; - - private ProtocolVersion mReadVersion = null, mWriteVersion = null; - private bool mRestrictReadVersion = true; - - private int mPlaintextLimit, mCompressedLimit, mCiphertextLimit; - - internal RecordStream(TlsProtocol handler, Stream input, Stream output) - { - this.mHandler = handler; - this.mInput = input; - this.mOutput = output; - this.mReadCompression = new TlsNullCompression(); - this.mWriteCompression = this.mReadCompression; - this.mHandshakeHashUpdater = new HandshakeHashUpdateStream(this); - } - - internal virtual void Init(TlsContext context) - { - this.mReadCipher = new TlsNullCipher(context); - this.mWriteCipher = this.mReadCipher; - this.mHandshakeHash = new DeferredHash(); - this.mHandshakeHash.Init(context); - - SetPlaintextLimit(DEFAULT_PLAINTEXT_LIMIT); - } - - internal virtual int GetPlaintextLimit() - { - return mPlaintextLimit; - } - - internal virtual void SetPlaintextLimit(int plaintextLimit) - { - this.mPlaintextLimit = plaintextLimit; - this.mCompressedLimit = this.mPlaintextLimit + 1024; - this.mCiphertextLimit = this.mCompressedLimit + 1024; - } - - internal virtual ProtocolVersion ReadVersion - { - get { return mReadVersion; } - set { this.mReadVersion = value; } - } - - internal virtual void SetWriteVersion(ProtocolVersion writeVersion) - { - this.mWriteVersion = writeVersion; - } - - /** - * RFC 5246 E.1. "Earlier versions of the TLS specification were not fully clear on what the - * record layer version number (TLSPlaintext.version) should contain when sending ClientHello - * (i.e., before it is known which version of the protocol will be employed). Thus, TLS servers - * compliant with this specification MUST accept any value {03,XX} as the record layer version - * number for ClientHello." - */ - internal virtual void SetRestrictReadVersion(bool enabled) - { - this.mRestrictReadVersion = enabled; - } - - internal virtual void SetPendingConnectionState(TlsCompression tlsCompression, TlsCipher tlsCipher) - { - this.mPendingCompression = tlsCompression; - this.mPendingCipher = tlsCipher; - } - - internal virtual void SentWriteCipherSpec() - { - if (mPendingCompression == null || mPendingCipher == null) - throw new TlsFatalAlert(AlertDescription.handshake_failure); - - this.mWriteCompression = this.mPendingCompression; - this.mWriteCipher = this.mPendingCipher; - this.mWriteSeqNo = new SequenceNumber(); - } - - internal virtual void ReceivedReadCipherSpec() - { - if (mPendingCompression == null || mPendingCipher == null) - throw new TlsFatalAlert(AlertDescription.handshake_failure); - - this.mReadCompression = this.mPendingCompression; - this.mReadCipher = this.mPendingCipher; - this.mReadSeqNo = new SequenceNumber(); - } - - internal virtual void FinaliseHandshake() - { - if (mReadCompression != mPendingCompression || mWriteCompression != mPendingCompression - || mReadCipher != mPendingCipher || mWriteCipher != mPendingCipher) - { - throw new TlsFatalAlert(AlertDescription.handshake_failure); - } - this.mPendingCompression = null; - this.mPendingCipher = null; - } - - internal virtual void CheckRecordHeader(byte[] recordHeader) - { - byte type = TlsUtilities.ReadUint8(recordHeader, TLS_HEADER_TYPE_OFFSET); - - /* - * RFC 5246 6. If a TLS implementation receives an unexpected record type, it MUST send an - * unexpected_message alert. - */ - CheckType(type, AlertDescription.unexpected_message); - - if (!mRestrictReadVersion) - { - int version = TlsUtilities.ReadVersionRaw(recordHeader, TLS_HEADER_VERSION_OFFSET); - if ((version & 0xffffff00) != 0x0300) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - else - { - ProtocolVersion version = TlsUtilities.ReadVersion(recordHeader, TLS_HEADER_VERSION_OFFSET); - if (mReadVersion == null) - { - // Will be set later in 'readRecord' - } - else if (!version.Equals(mReadVersion)) - { - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - } - - int length = TlsUtilities.ReadUint16(recordHeader, TLS_HEADER_LENGTH_OFFSET); - - CheckLength(length, mCiphertextLimit, AlertDescription.record_overflow); - } - - internal virtual bool ReadRecord() - { - byte[] recordHeader = TlsUtilities.ReadAllOrNothing(TLS_HEADER_SIZE, mInput); - if (recordHeader == null) - return false; - - byte type = TlsUtilities.ReadUint8(recordHeader, TLS_HEADER_TYPE_OFFSET); - - /* - * RFC 5246 6. If a TLS implementation receives an unexpected record type, it MUST send an - * unexpected_message alert. - */ - CheckType(type, AlertDescription.unexpected_message); - - if (!mRestrictReadVersion) - { - int version = TlsUtilities.ReadVersionRaw(recordHeader, TLS_HEADER_VERSION_OFFSET); - if ((version & 0xffffff00) != 0x0300) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - else - { - ProtocolVersion version = TlsUtilities.ReadVersion(recordHeader, TLS_HEADER_VERSION_OFFSET); - if (mReadVersion == null) - { - mReadVersion = version; - } - else if (!version.Equals(mReadVersion)) - { - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - } - - int length = TlsUtilities.ReadUint16(recordHeader, TLS_HEADER_LENGTH_OFFSET); - - CheckLength(length, mCiphertextLimit, AlertDescription.record_overflow); - - byte[] plaintext = DecodeAndVerify(type, mInput, length); - mHandler.ProcessRecord(type, plaintext, 0, plaintext.Length); - return true; - } - - internal virtual byte[] DecodeAndVerify(byte type, Stream input, int len) - { - byte[] buf = TlsUtilities.ReadFully(len, input); - - long seqNo = mReadSeqNo.NextValue(AlertDescription.unexpected_message); - byte[] decoded = mReadCipher.DecodeCiphertext(seqNo, type, buf, 0, buf.Length); - - CheckLength(decoded.Length, mCompressedLimit, AlertDescription.record_overflow); - - /* - * TODO 5246 6.2.2. Implementation note: Decompression functions are responsible for - * ensuring that messages cannot cause internal buffer overflows. - */ - Stream cOut = mReadCompression.Decompress(mBuffer); - if (cOut != mBuffer) - { - cOut.Write(decoded, 0, decoded.Length); - cOut.Flush(); - decoded = GetBufferContents(); - } - - /* - * RFC 5246 6.2.2. If the decompression function encounters a TLSCompressed.fragment that - * would decompress to a length in excess of 2^14 bytes, it should report a fatal - * decompression failure error. - */ - CheckLength(decoded.Length, mPlaintextLimit, AlertDescription.decompression_failure); - - /* - * RFC 5246 6.2.1 Implementations MUST NOT send zero-length fragments of Handshake, Alert, - * or ChangeCipherSpec content types. - */ - if (decoded.Length < 1 && type != ContentType.application_data) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - - return decoded; - } - - internal virtual void WriteRecord(byte type, byte[] plaintext, int plaintextOffset, int plaintextLength) - { - // Never send anything until a valid ClientHello has been received - if (mWriteVersion == null) - return; - - /* - * RFC 5246 6. Implementations MUST NOT send record types not defined in this document - * unless negotiated by some extension. - */ - CheckType(type, AlertDescription.internal_error); - - /* - * RFC 5246 6.2.1 The length should not exceed 2^14. - */ - CheckLength(plaintextLength, mPlaintextLimit, AlertDescription.internal_error); - - /* - * RFC 5246 6.2.1 Implementations MUST NOT send zero-length fragments of Handshake, Alert, - * or ChangeCipherSpec content types. - */ - if (plaintextLength < 1 && type != ContentType.application_data) - throw new TlsFatalAlert(AlertDescription.internal_error); - - Stream cOut = mWriteCompression.Compress(mBuffer); - - long seqNo = mWriteSeqNo.NextValue(AlertDescription.internal_error); - - byte[] ciphertext; - if (cOut == mBuffer) - { - ciphertext = mWriteCipher.EncodePlaintext(seqNo, type, plaintext, plaintextOffset, plaintextLength); - } - else - { - cOut.Write(plaintext, plaintextOffset, plaintextLength); - cOut.Flush(); - byte[] compressed = GetBufferContents(); - - /* - * RFC 5246 6.2.2. Compression must be lossless and may not increase the content length - * by more than 1024 bytes. - */ - CheckLength(compressed.Length, plaintextLength + 1024, AlertDescription.internal_error); - - ciphertext = mWriteCipher.EncodePlaintext(seqNo, type, compressed, 0, compressed.Length); - } - - /* - * RFC 5246 6.2.3. The length may not exceed 2^14 + 2048. - */ - CheckLength(ciphertext.Length, mCiphertextLimit, AlertDescription.internal_error); - - byte[] record = new byte[ciphertext.Length + TLS_HEADER_SIZE]; - TlsUtilities.WriteUint8(type, record, TLS_HEADER_TYPE_OFFSET); - TlsUtilities.WriteVersion(mWriteVersion, record, TLS_HEADER_VERSION_OFFSET); - TlsUtilities.WriteUint16(ciphertext.Length, record, TLS_HEADER_LENGTH_OFFSET); - Array.Copy(ciphertext, 0, record, TLS_HEADER_SIZE, ciphertext.Length); - mOutput.Write(record, 0, record.Length); - mOutput.Flush(); - } - - internal virtual void NotifyHelloComplete() - { - this.mHandshakeHash = mHandshakeHash.NotifyPrfDetermined(); - } - - internal virtual TlsHandshakeHash HandshakeHash - { - get { return mHandshakeHash; } - } - - internal virtual Stream HandshakeHashUpdater - { - get { return mHandshakeHashUpdater; } - } - - internal virtual TlsHandshakeHash PrepareToFinish() - { - TlsHandshakeHash result = mHandshakeHash; - this.mHandshakeHash = mHandshakeHash.StopTracking(); - return result; - } - - internal virtual void SafeClose() - { - try - { - Platform.Dispose(mInput); - } - catch (IOException) - { - } - - try - { - Platform.Dispose(mOutput); - } - catch (IOException) - { - } - } - - internal virtual void Flush() - { - mOutput.Flush(); - } - - private byte[] GetBufferContents() - { - byte[] contents = mBuffer.ToArray(); - mBuffer.SetLength(0); - return contents; - } - - private static void CheckType(byte type, byte alertDescription) - { - switch (type) - { - case ContentType.application_data: - case ContentType.alert: - case ContentType.change_cipher_spec: - case ContentType.handshake: - //case ContentType.heartbeat: - break; - default: - throw new TlsFatalAlert(alertDescription); - } - } - - private static void CheckLength(int length, int limit, byte alertDescription) - { - if (length > limit) - throw new TlsFatalAlert(alertDescription); - } - - private class HandshakeHashUpdateStream - : BaseOutputStream - { - private readonly RecordStream mOuter; - public HandshakeHashUpdateStream(RecordStream mOuter) - { - this.mOuter = mOuter; - } - - public override void Write(byte[] buf, int off, int len) - { - mOuter.mHandshakeHash.BlockUpdate(buf, off, len); - } - } - - private class SequenceNumber - { - private long value = 0L; - private bool exhausted = false; - - internal long NextValue(byte alertDescription) - { - if (exhausted) - { - throw new TlsFatalAlert(alertDescription); - } - long result = value; - if (++value == 0) - { - exhausted = true; - } - return result; - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/SecurityParameters.cs b/bc-sharp-crypto/src/crypto/tls/SecurityParameters.cs deleted file mode 100644 index 3b85158..0000000 --- a/bc-sharp-crypto/src/crypto/tls/SecurityParameters.cs +++ /dev/null @@ -1,103 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class SecurityParameters - { - internal int entity = -1; - internal int cipherSuite = -1; - internal byte compressionAlgorithm = CompressionMethod.cls_null; - internal int prfAlgorithm = -1; - internal int verifyDataLength = -1; - internal byte[] masterSecret = null; - internal byte[] clientRandom = null; - internal byte[] serverRandom = null; - internal byte[] sessionHash = null; - internal byte[] pskIdentity = null; - internal byte[] srpIdentity = null; - - // TODO Keep these internal, since it's maybe not the ideal place for them - internal short maxFragmentLength = -1; - internal bool truncatedHMac = false; - internal bool encryptThenMac = false; - internal bool extendedMasterSecret = false; - - internal virtual void Clear() - { - if (this.masterSecret != null) - { - Arrays.Fill(this.masterSecret, (byte)0); - this.masterSecret = null; - } - } - - /** - * @return {@link ConnectionEnd} - */ - public virtual int Entity - { - get { return entity; } - } - - /** - * @return {@link CipherSuite} - */ - public virtual int CipherSuite - { - get { return cipherSuite; } - } - - /** - * @return {@link CompressionMethod} - */ - public byte CompressionAlgorithm - { - get { return compressionAlgorithm; } - } - - /** - * @return {@link PRFAlgorithm} - */ - public virtual int PrfAlgorithm - { - get { return prfAlgorithm; } - } - - public virtual int VerifyDataLength - { - get { return verifyDataLength; } - } - - public virtual byte[] MasterSecret - { - get { return masterSecret; } - } - - public virtual byte[] ClientRandom - { - get { return clientRandom; } - } - - public virtual byte[] ServerRandom - { - get { return serverRandom; } - } - - public virtual byte[] SessionHash - { - get { return sessionHash; } - } - - public virtual byte[] PskIdentity - { - get { return pskIdentity; } - } - - public virtual byte[] SrpIdentity - { - get { return srpIdentity; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/ServerDHParams.cs b/bc-sharp-crypto/src/crypto/tls/ServerDHParams.cs deleted file mode 100644 index b092627..0000000 --- a/bc-sharp-crypto/src/crypto/tls/ServerDHParams.cs +++ /dev/null @@ -1,61 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class ServerDHParams - { - protected readonly DHPublicKeyParameters mPublicKey; - - public ServerDHParams(DHPublicKeyParameters publicKey) - { - if (publicKey == null) - throw new ArgumentNullException("publicKey"); - - this.mPublicKey = publicKey; - } - - public virtual DHPublicKeyParameters PublicKey - { - get { return mPublicKey; } - } - - /** - * Encode this {@link ServerDHParams} to a {@link Stream}. - * - * @param output - * the {@link Stream} to encode to. - * @throws IOException - */ - public virtual void Encode(Stream output) - { - DHParameters dhParameters = mPublicKey.Parameters; - BigInteger Ys = mPublicKey.Y; - - TlsDHUtilities.WriteDHParameter(dhParameters.P, output); - TlsDHUtilities.WriteDHParameter(dhParameters.G, output); - TlsDHUtilities.WriteDHParameter(Ys, output); - } - - /** - * Parse a {@link ServerDHParams} from a {@link Stream}. - * - * @param input - * the {@link Stream} to parse from. - * @return a {@link ServerDHParams} object. - * @throws IOException - */ - public static ServerDHParams Parse(Stream input) - { - BigInteger p = TlsDHUtilities.ReadDHParameter(input); - BigInteger g = TlsDHUtilities.ReadDHParameter(input); - BigInteger Ys = TlsDHUtilities.ReadDHParameter(input); - - return new ServerDHParams( - TlsDHUtilities.ValidateDHPublicKey(new DHPublicKeyParameters(Ys, new DHParameters(p, g)))); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/ServerName.cs b/bc-sharp-crypto/src/crypto/tls/ServerName.cs deleted file mode 100644 index 508c2dd..0000000 --- a/bc-sharp-crypto/src/crypto/tls/ServerName.cs +++ /dev/null @@ -1,105 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class ServerName - { - protected readonly byte mNameType; - protected readonly object mName; - - public ServerName(byte nameType, object name) - { - if (!IsCorrectType(nameType, name)) - throw new ArgumentException("not an instance of the correct type", "name"); - - this.mNameType = nameType; - this.mName = name; - } - - public virtual byte NameType - { - get { return mNameType; } - } - - public virtual object Name - { - get { return mName; } - } - - public virtual string GetHostName() - { - if (!IsCorrectType(Tls.NameType.host_name, mName)) - throw new InvalidOperationException("'name' is not a HostName string"); - - return (string)mName; - } - - /** - * Encode this {@link ServerName} to a {@link Stream}. - * - * @param output - * the {@link Stream} to encode to. - * @throws IOException - */ - public virtual void Encode(Stream output) - { - TlsUtilities.WriteUint8(mNameType, output); - - switch (mNameType) - { - case Tls.NameType.host_name: - byte[] asciiEncoding = Strings.ToAsciiByteArray((string)mName); - if (asciiEncoding.Length < 1) - throw new TlsFatalAlert(AlertDescription.internal_error); - TlsUtilities.WriteOpaque16(asciiEncoding, output); - break; - default: - throw new TlsFatalAlert(AlertDescription.internal_error); - } - } - - /** - * Parse a {@link ServerName} from a {@link Stream}. - * - * @param input - * the {@link Stream} to parse from. - * @return a {@link ServerName} object. - * @throws IOException - */ - public static ServerName Parse(Stream input) - { - byte name_type = TlsUtilities.ReadUint8(input); - object name; - - switch (name_type) - { - case Tls.NameType.host_name: - { - byte[] asciiEncoding = TlsUtilities.ReadOpaque16(input); - if (asciiEncoding.Length < 1) - throw new TlsFatalAlert(AlertDescription.decode_error); - name = Strings.FromAsciiByteArray(asciiEncoding); - break; - } - default: - throw new TlsFatalAlert(AlertDescription.decode_error); - } - - return new ServerName(name_type, name); - } - - protected static bool IsCorrectType(byte nameType, object name) - { - switch (nameType) - { - case Tls.NameType.host_name: - return name is string; - default: - throw new ArgumentException("unsupported value", "name"); - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/ServerNameList.cs b/bc-sharp-crypto/src/crypto/tls/ServerNameList.cs deleted file mode 100644 index ed4e593..0000000 --- a/bc-sharp-crypto/src/crypto/tls/ServerNameList.cs +++ /dev/null @@ -1,105 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class ServerNameList - { - protected readonly IList mServerNameList; - - /** - * @param serverNameList an {@link IList} of {@link ServerName}. - */ - public ServerNameList(IList serverNameList) - { - if (serverNameList == null) - throw new ArgumentNullException("serverNameList"); - - this.mServerNameList = serverNameList; - } - - /** - * @return an {@link IList} of {@link ServerName}. - */ - public virtual IList ServerNames - { - get { return mServerNameList; } - } - - /** - * Encode this {@link ServerNameList} to a {@link Stream}. - * - * @param output - * the {@link Stream} to encode to. - * @throws IOException - */ - public virtual void Encode(Stream output) - { - MemoryStream buf = new MemoryStream(); - - byte[] nameTypesSeen = TlsUtilities.EmptyBytes; - foreach (ServerName entry in ServerNames) - { - nameTypesSeen = CheckNameType(nameTypesSeen, entry.NameType); - if (nameTypesSeen == null) - throw new TlsFatalAlert(AlertDescription.internal_error); - - entry.Encode(buf); - } - - TlsUtilities.CheckUint16(buf.Length); - TlsUtilities.WriteUint16((int)buf.Length, output); - Streams.WriteBufTo(buf, output); - } - - /** - * Parse a {@link ServerNameList} from a {@link Stream}. - * - * @param input - * the {@link Stream} to parse from. - * @return a {@link ServerNameList} object. - * @throws IOException - */ - public static ServerNameList Parse(Stream input) - { - int length = TlsUtilities.ReadUint16(input); - if (length < 1) - throw new TlsFatalAlert(AlertDescription.decode_error); - - byte[] data = TlsUtilities.ReadFully(length, input); - - MemoryStream buf = new MemoryStream(data, false); - - byte[] nameTypesSeen = TlsUtilities.EmptyBytes; - IList server_name_list = Platform.CreateArrayList(); - while (buf.Position < buf.Length) - { - ServerName entry = ServerName.Parse(buf); - - nameTypesSeen = CheckNameType(nameTypesSeen, entry.NameType); - if (nameTypesSeen == null) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - - server_name_list.Add(entry); - } - - return new ServerNameList(server_name_list); - } - - private static byte[] CheckNameType(byte[] nameTypesSeen, byte nameType) - { - /* - * RFC 6066 3. The ServerNameList MUST NOT contain more than one name of the same - * name_type. - */ - if (!NameType.IsValid(nameType) || Arrays.Contains(nameTypesSeen, nameType)) - return null; - - return Arrays.Append(nameTypesSeen, nameType); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/ServerOnlyTlsAuthentication.cs b/bc-sharp-crypto/src/crypto/tls/ServerOnlyTlsAuthentication.cs deleted file mode 100644 index 4858897..0000000 --- a/bc-sharp-crypto/src/crypto/tls/ServerOnlyTlsAuthentication.cs +++ /dev/null @@ -1,15 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public abstract class ServerOnlyTlsAuthentication - : TlsAuthentication - { - public abstract void NotifyServerCertificate(Certificate serverCertificate); - - public TlsCredentials GetClientCredentials(CertificateRequest certificateRequest) - { - return null; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/ServerSrpParams.cs b/bc-sharp-crypto/src/crypto/tls/ServerSrpParams.cs deleted file mode 100644 index 556ac53..0000000 --- a/bc-sharp-crypto/src/crypto/tls/ServerSrpParams.cs +++ /dev/null @@ -1,75 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class ServerSrpParams - { - protected BigInteger m_N, m_g, m_B; - protected byte[] m_s; - - public ServerSrpParams(BigInteger N, BigInteger g, byte[] s, BigInteger B) - { - this.m_N = N; - this.m_g = g; - this.m_s = Arrays.Clone(s); - this.m_B = B; - } - - public virtual BigInteger B - { - get { return m_B; } - } - - public virtual BigInteger G - { - get { return m_g; } - } - - public virtual BigInteger N - { - get { return m_N; } - } - - public virtual byte[] S - { - get { return m_s; } - } - - /** - * Encode this {@link ServerSRPParams} to an {@link OutputStream}. - * - * @param output - * the {@link OutputStream} to encode to. - * @throws IOException - */ - public virtual void Encode(Stream output) - { - TlsSrpUtilities.WriteSrpParameter(m_N, output); - TlsSrpUtilities.WriteSrpParameter(m_g, output); - TlsUtilities.WriteOpaque8(m_s, output); - TlsSrpUtilities.WriteSrpParameter(m_B, output); - } - - /** - * Parse a {@link ServerSRPParams} from an {@link InputStream}. - * - * @param input - * the {@link InputStream} to parse from. - * @return a {@link ServerSRPParams} object. - * @throws IOException - */ - public static ServerSrpParams Parse(Stream input) - { - BigInteger N = TlsSrpUtilities.ReadSrpParameter(input); - BigInteger g = TlsSrpUtilities.ReadSrpParameter(input); - byte[] s = TlsUtilities.ReadOpaque8(input); - BigInteger B = TlsSrpUtilities.ReadSrpParameter(input); - - return new ServerSrpParams(N, g, s, B); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/SessionParameters.cs b/bc-sharp-crypto/src/crypto/tls/SessionParameters.cs deleted file mode 100644 index a1eb5f2..0000000 --- a/bc-sharp-crypto/src/crypto/tls/SessionParameters.cs +++ /dev/null @@ -1,165 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public sealed class SessionParameters - { - public sealed class Builder - { - private int mCipherSuite = -1; - private short mCompressionAlgorithm = -1; - private byte[] mMasterSecret = null; - private Certificate mPeerCertificate = null; - private byte[] mPskIdentity = null; - private byte[] mSrpIdentity = null; - private byte[] mEncodedServerExtensions = null; - - public Builder() - { - } - - public SessionParameters Build() - { - Validate(this.mCipherSuite >= 0, "cipherSuite"); - Validate(this.mCompressionAlgorithm >= 0, "compressionAlgorithm"); - Validate(this.mMasterSecret != null, "masterSecret"); - return new SessionParameters(mCipherSuite, (byte)mCompressionAlgorithm, mMasterSecret, mPeerCertificate, - mPskIdentity, mSrpIdentity, mEncodedServerExtensions); - } - - public Builder SetCipherSuite(int cipherSuite) - { - this.mCipherSuite = cipherSuite; - return this; - } - - public Builder SetCompressionAlgorithm(byte compressionAlgorithm) - { - this.mCompressionAlgorithm = compressionAlgorithm; - return this; - } - - public Builder SetMasterSecret(byte[] masterSecret) - { - this.mMasterSecret = masterSecret; - return this; - } - - public Builder SetPeerCertificate(Certificate peerCertificate) - { - this.mPeerCertificate = peerCertificate; - return this; - } - - public Builder SetPskIdentity(byte[] pskIdentity) - { - this.mPskIdentity = pskIdentity; - return this; - } - - public Builder SetSrpIdentity(byte[] srpIdentity) - { - this.mSrpIdentity = srpIdentity; - return this; - } - - public Builder SetServerExtensions(IDictionary serverExtensions) - { - if (serverExtensions == null) - { - mEncodedServerExtensions = null; - } - else - { - MemoryStream buf = new MemoryStream(); - TlsProtocol.WriteExtensions(buf, serverExtensions); - mEncodedServerExtensions = buf.ToArray(); - } - return this; - } - - private void Validate(bool condition, string parameter) - { - if (!condition) - throw new InvalidOperationException("Required session parameter '" + parameter + "' not configured"); - } - } - - private int mCipherSuite; - private byte mCompressionAlgorithm; - private byte[] mMasterSecret; - private Certificate mPeerCertificate; - private byte[] mPskIdentity; - private byte[] mSrpIdentity; - private byte[] mEncodedServerExtensions; - - private SessionParameters(int cipherSuite, byte compressionAlgorithm, byte[] masterSecret, - Certificate peerCertificate, byte[] pskIdentity, byte[] srpIdentity, byte[] encodedServerExtensions) - { - this.mCipherSuite = cipherSuite; - this.mCompressionAlgorithm = compressionAlgorithm; - this.mMasterSecret = Arrays.Clone(masterSecret); - this.mPeerCertificate = peerCertificate; - this.mPskIdentity = Arrays.Clone(pskIdentity); - this.mSrpIdentity = Arrays.Clone(srpIdentity); - this.mEncodedServerExtensions = encodedServerExtensions; - } - - public void Clear() - { - if (this.mMasterSecret != null) - { - Arrays.Fill(this.mMasterSecret, (byte)0); - } - } - - public SessionParameters Copy() - { - return new SessionParameters(mCipherSuite, mCompressionAlgorithm, mMasterSecret, mPeerCertificate, - mPskIdentity, mSrpIdentity, mEncodedServerExtensions); - } - - public int CipherSuite - { - get { return mCipherSuite; } - } - - public byte CompressionAlgorithm - { - get { return mCompressionAlgorithm; } - } - - public byte[] MasterSecret - { - get { return mMasterSecret; } - } - - public Certificate PeerCertificate - { - get { return mPeerCertificate; } - } - - public byte[] PskIdentity - { - get { return mPskIdentity; } - } - - public byte[] SrpIdentity - { - get { return mSrpIdentity; } - } - - public IDictionary ReadServerExtensions() - { - if (mEncodedServerExtensions == null) - return null; - - MemoryStream buf = new MemoryStream(mEncodedServerExtensions, false); - return TlsProtocol.ReadExtensions(buf); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/SignatureAlgorithm.cs b/bc-sharp-crypto/src/crypto/tls/SignatureAlgorithm.cs deleted file mode 100644 index 35b9617..0000000 --- a/bc-sharp-crypto/src/crypto/tls/SignatureAlgorithm.cs +++ /dev/null @@ -1,15 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /** - * RFC 5246 7.4.1.4.1 (in RFC 2246, there were no specific values assigned) - */ - public abstract class SignatureAlgorithm - { - public const byte anonymous = 0; - public const byte rsa = 1; - public const byte dsa = 2; - public const byte ecdsa = 3; - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/SignatureAndHashAlgorithm.cs b/bc-sharp-crypto/src/crypto/tls/SignatureAndHashAlgorithm.cs deleted file mode 100644 index f74205b..0000000 --- a/bc-sharp-crypto/src/crypto/tls/SignatureAndHashAlgorithm.cs +++ /dev/null @@ -1,94 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /** - * RFC 5246 7.4.1.4.1 - */ - public class SignatureAndHashAlgorithm - { - protected readonly byte mHash; - protected readonly byte mSignature; - - /** - * @param hash {@link HashAlgorithm} - * @param signature {@link SignatureAlgorithm} - */ - public SignatureAndHashAlgorithm(byte hash, byte signature) - { - if (!TlsUtilities.IsValidUint8(hash)) - { - throw new ArgumentException("should be a uint8", "hash"); - } - if (!TlsUtilities.IsValidUint8(signature)) - { - throw new ArgumentException("should be a uint8", "signature"); - } - if (signature == SignatureAlgorithm.anonymous) - { - throw new ArgumentException("MUST NOT be \"anonymous\"", "signature"); - } - - this.mHash = hash; - this.mSignature = signature; - } - - /** - * @return {@link HashAlgorithm} - */ - public virtual byte Hash - { - get { return mHash; } - } - - /** - * @return {@link SignatureAlgorithm} - */ - public virtual byte Signature - { - get { return mSignature; } - } - - public override bool Equals(object obj) - { - if (!(obj is SignatureAndHashAlgorithm)) - { - return false; - } - SignatureAndHashAlgorithm other = (SignatureAndHashAlgorithm)obj; - return other.Hash == Hash && other.Signature == Signature; - } - - public override int GetHashCode() - { - return ((int)Hash << 16) | (int)Signature; - } - - /** - * Encode this {@link SignatureAndHashAlgorithm} to a {@link Stream}. - * - * @param output the {@link Stream} to encode to. - * @throws IOException - */ - public virtual void Encode(Stream output) - { - TlsUtilities.WriteUint8(Hash, output); - TlsUtilities.WriteUint8(Signature, output); - } - - /** - * Parse a {@link SignatureAndHashAlgorithm} from a {@link Stream}. - * - * @param input the {@link Stream} to parse from. - * @return a {@link SignatureAndHashAlgorithm} object. - * @throws IOException - */ - public static SignatureAndHashAlgorithm Parse(Stream input) - { - byte hash = TlsUtilities.ReadUint8(input); - byte signature = TlsUtilities.ReadUint8(input); - return new SignatureAndHashAlgorithm(hash, signature); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/SignerInputBuffer.cs b/bc-sharp-crypto/src/crypto/tls/SignerInputBuffer.cs deleted file mode 100644 index 7bc6962..0000000 --- a/bc-sharp-crypto/src/crypto/tls/SignerInputBuffer.cs +++ /dev/null @@ -1,37 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - internal class SignerInputBuffer - : MemoryStream - { - internal void UpdateSigner(ISigner s) - { - Streams.WriteBufTo(this, new SigStream(s)); - } - - private class SigStream - : BaseOutputStream - { - private readonly ISigner s; - - internal SigStream(ISigner s) - { - this.s = s; - } - - public override void WriteByte(byte b) - { - s.Update(b); - } - - public override void Write(byte[] buf, int off, int len) - { - s.BlockUpdate(buf, off, len); - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/SimulatedTlsSrpIdentityManager.cs b/bc-sharp-crypto/src/crypto/tls/SimulatedTlsSrpIdentityManager.cs deleted file mode 100644 index 3e9737c..0000000 --- a/bc-sharp-crypto/src/crypto/tls/SimulatedTlsSrpIdentityManager.cs +++ /dev/null @@ -1,69 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Agreement.Srp; -using Org.BouncyCastle.Crypto.Macs; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /** - * An implementation of {@link TlsSRPIdentityManager} that simulates the existence of "unknown" identities - * to obscure the fact that there is no verifier for them. - */ - public class SimulatedTlsSrpIdentityManager - : TlsSrpIdentityManager - { - private static readonly byte[] PREFIX_PASSWORD = Strings.ToByteArray("password"); - private static readonly byte[] PREFIX_SALT = Strings.ToByteArray("salt"); - - /** - * Create a {@link SimulatedTlsSRPIdentityManager} that implements the algorithm from RFC 5054 2.5.1.3 - * - * @param group the {@link SRP6GroupParameters} defining the group that SRP is operating in - * @param seedKey the secret "seed key" referred to in RFC 5054 2.5.1.3 - * @return an instance of {@link SimulatedTlsSRPIdentityManager} - */ - public static SimulatedTlsSrpIdentityManager GetRfc5054Default(Srp6GroupParameters group, byte[] seedKey) - { - Srp6VerifierGenerator verifierGenerator = new Srp6VerifierGenerator(); - verifierGenerator.Init(group, TlsUtilities.CreateHash(HashAlgorithm.sha1)); - - HMac mac = new HMac(TlsUtilities.CreateHash(HashAlgorithm.sha1)); - mac.Init(new KeyParameter(seedKey)); - - return new SimulatedTlsSrpIdentityManager(group, verifierGenerator, mac); - } - - protected readonly Srp6GroupParameters mGroup; - protected readonly Srp6VerifierGenerator mVerifierGenerator; - protected readonly IMac mMac; - - public SimulatedTlsSrpIdentityManager(Srp6GroupParameters group, Srp6VerifierGenerator verifierGenerator, IMac mac) - { - this.mGroup = group; - this.mVerifierGenerator = verifierGenerator; - this.mMac = mac; - } - - public virtual TlsSrpLoginParameters GetLoginParameters(byte[] identity) - { - mMac.BlockUpdate(PREFIX_SALT, 0, PREFIX_SALT.Length); - mMac.BlockUpdate(identity, 0, identity.Length); - - byte[] salt = new byte[mMac.GetMacSize()]; - mMac.DoFinal(salt, 0); - - mMac.BlockUpdate(PREFIX_PASSWORD, 0, PREFIX_PASSWORD.Length); - mMac.BlockUpdate(identity, 0, identity.Length); - - byte[] password = new byte[mMac.GetMacSize()]; - mMac.DoFinal(password, 0); - - BigInteger verifier = mVerifierGenerator.GenerateVerifier(salt, identity, password); - - return new TlsSrpLoginParameters(mGroup, verifier, salt); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/SrpTlsClient.cs b/bc-sharp-crypto/src/crypto/tls/SrpTlsClient.cs deleted file mode 100644 index df16077..0000000 --- a/bc-sharp-crypto/src/crypto/tls/SrpTlsClient.cs +++ /dev/null @@ -1,104 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class SrpTlsClient - : AbstractTlsClient - { - protected TlsSrpGroupVerifier mGroupVerifier; - - protected byte[] mIdentity; - protected byte[] mPassword; - - public SrpTlsClient(byte[] identity, byte[] password) - : this(new DefaultTlsCipherFactory(), new DefaultTlsSrpGroupVerifier(), identity, password) - { - } - - public SrpTlsClient(TlsCipherFactory cipherFactory, byte[] identity, byte[] password) - : this(cipherFactory, new DefaultTlsSrpGroupVerifier(), identity, password) - { - } - - public SrpTlsClient(TlsCipherFactory cipherFactory, TlsSrpGroupVerifier groupVerifier, - byte[] identity, byte[] password) - : base(cipherFactory) - { - this.mGroupVerifier = groupVerifier; - this.mIdentity = Arrays.Clone(identity); - this.mPassword = Arrays.Clone(password); - } - - protected virtual bool RequireSrpServerExtension - { - // No explicit guidance in RFC 5054; by default an (empty) extension from server is optional - get { return false; } - } - - public override int[] GetCipherSuites() - { - return new int[] - { - CipherSuite.TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA - }; - } - - public override IDictionary GetClientExtensions() - { - IDictionary clientExtensions = TlsExtensionsUtilities.EnsureExtensionsInitialised(base.GetClientExtensions()); - TlsSrpUtilities.AddSrpExtension(clientExtensions, this.mIdentity); - return clientExtensions; - } - - public override void ProcessServerExtensions(IDictionary serverExtensions) - { - if (!TlsUtilities.HasExpectedEmptyExtensionData(serverExtensions, ExtensionType.srp, - AlertDescription.illegal_parameter)) - { - if (RequireSrpServerExtension) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - - base.ProcessServerExtensions(serverExtensions); - } - - public override TlsKeyExchange GetKeyExchange() - { - int keyExchangeAlgorithm = TlsUtilities.GetKeyExchangeAlgorithm(mSelectedCipherSuite); - - switch (keyExchangeAlgorithm) - { - case KeyExchangeAlgorithm.SRP: - case KeyExchangeAlgorithm.SRP_DSS: - case KeyExchangeAlgorithm.SRP_RSA: - return CreateSrpKeyExchange(keyExchangeAlgorithm); - - default: - /* - * Note: internal error here; the TlsProtocol implementation verifies that the - * server-selected cipher suite was in the list of client-offered cipher suites, so if - * we now can't produce an implementation, we shouldn't have offered it! - */ - throw new TlsFatalAlert(AlertDescription.internal_error); - } - } - - public override TlsAuthentication GetAuthentication() - { - /* - * Note: This method is not called unless a server certificate is sent, which may be the - * case e.g. for SRP_DSS or SRP_RSA key exchange. - */ - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - protected virtual TlsKeyExchange CreateSrpKeyExchange(int keyExchange) - { - return new TlsSrpKeyExchange(keyExchange, mSupportedSignatureAlgorithms, mGroupVerifier, mIdentity, mPassword); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/SrpTlsServer.cs b/bc-sharp-crypto/src/crypto/tls/SrpTlsServer.cs deleted file mode 100644 index f978783..0000000 --- a/bc-sharp-crypto/src/crypto/tls/SrpTlsServer.cs +++ /dev/null @@ -1,121 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class SrpTlsServer - : AbstractTlsServer - { - protected TlsSrpIdentityManager mSrpIdentityManager; - - protected byte[] mSrpIdentity = null; - protected TlsSrpLoginParameters mLoginParameters = null; - - public SrpTlsServer(TlsSrpIdentityManager srpIdentityManager) - : this(new DefaultTlsCipherFactory(), srpIdentityManager) - { - } - - public SrpTlsServer(TlsCipherFactory cipherFactory, TlsSrpIdentityManager srpIdentityManager) - : base(cipherFactory) - { - this.mSrpIdentityManager = srpIdentityManager; - } - - protected virtual TlsSignerCredentials GetDsaSignerCredentials() - { - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - protected virtual TlsSignerCredentials GetRsaSignerCredentials() - { - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - protected override int[] GetCipherSuites() - { - return new int[] - { - CipherSuite.TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA, - CipherSuite.TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA, - CipherSuite.TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA, - CipherSuite.TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA, - CipherSuite.TLS_SRP_SHA_WITH_AES_256_CBC_SHA, - CipherSuite.TLS_SRP_SHA_WITH_AES_128_CBC_SHA - }; - } - - public override void ProcessClientExtensions(IDictionary clientExtensions) - { - base.ProcessClientExtensions(clientExtensions); - - this.mSrpIdentity = TlsSrpUtilities.GetSrpExtension(clientExtensions); - } - - public override int GetSelectedCipherSuite() - { - int cipherSuite = base.GetSelectedCipherSuite(); - - if (TlsSrpUtilities.IsSrpCipherSuite(cipherSuite)) - { - if (mSrpIdentity != null) - { - this.mLoginParameters = mSrpIdentityManager.GetLoginParameters(mSrpIdentity); - } - - if (mLoginParameters == null) - throw new TlsFatalAlert(AlertDescription.unknown_psk_identity); - } - - return cipherSuite; - } - - public override TlsCredentials GetCredentials() - { - int keyExchangeAlgorithm = TlsUtilities.GetKeyExchangeAlgorithm(mSelectedCipherSuite); - - switch (keyExchangeAlgorithm) - { - case KeyExchangeAlgorithm.SRP: - return null; - - case KeyExchangeAlgorithm.SRP_DSS: - return GetDsaSignerCredentials(); - - case KeyExchangeAlgorithm.SRP_RSA: - return GetRsaSignerCredentials(); - - default: - /* Note: internal error here; selected a key exchange we don't implement! */ - throw new TlsFatalAlert(AlertDescription.internal_error); - } - } - - public override TlsKeyExchange GetKeyExchange() - { - int keyExchangeAlgorithm = TlsUtilities.GetKeyExchangeAlgorithm(mSelectedCipherSuite); - - switch (keyExchangeAlgorithm) - { - case KeyExchangeAlgorithm.SRP: - case KeyExchangeAlgorithm.SRP_DSS: - case KeyExchangeAlgorithm.SRP_RSA: - return CreateSrpKeyExchange(keyExchangeAlgorithm); - - default: - /* - * Note: internal error here; the TlsProtocol implementation verifies that the - * server-selected cipher suite was in the list of client-offered cipher suites, so if - * we now can't produce an implementation, we shouldn't have offered it! - */ - throw new TlsFatalAlert(AlertDescription.internal_error); - } - } - - protected virtual TlsKeyExchange CreateSrpKeyExchange(int keyExchange) - { - return new TlsSrpKeyExchange(keyExchange, mSupportedSignatureAlgorithms, mSrpIdentity, mLoginParameters); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/SrtpProtectionProfile.cs b/bc-sharp-crypto/src/crypto/tls/SrtpProtectionProfile.cs deleted file mode 100644 index 6e9091b..0000000 --- a/bc-sharp-crypto/src/crypto/tls/SrtpProtectionProfile.cs +++ /dev/null @@ -1,21 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public abstract class SrtpProtectionProfile - { - /* - * RFC 5764 4.1.2. - */ - public const int SRTP_AES128_CM_HMAC_SHA1_80 = 0x0001; - public const int SRTP_AES128_CM_HMAC_SHA1_32 = 0x0002; - public const int SRTP_NULL_HMAC_SHA1_80 = 0x0005; - public const int SRTP_NULL_HMAC_SHA1_32 = 0x0006; - - /* - * RFC 7714 14.2. - */ - public const int SRTP_AEAD_AES_128_GCM = 0x0007; - public const int SRTP_AEAD_AES_256_GCM = 0x0008; - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/Ssl3Mac.cs b/bc-sharp-crypto/src/crypto/tls/Ssl3Mac.cs deleted file mode 100644 index 8bdb342..0000000 --- a/bc-sharp-crypto/src/crypto/tls/Ssl3Mac.cs +++ /dev/null @@ -1,110 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /** - * HMAC implementation based on original internet draft for HMAC (RFC 2104) - * - * The difference is that padding is concatentated versus XORed with the key - * - * H(K + opad, H(K + ipad, text)) - */ - public class Ssl3Mac - : IMac - { - private const byte IPAD_BYTE = 0x36; - private const byte OPAD_BYTE = 0x5C; - - internal static readonly byte[] IPAD = GenPad(IPAD_BYTE, 48); - internal static readonly byte[] OPAD = GenPad(OPAD_BYTE, 48); - - private readonly IDigest digest; - private readonly int padLength; - - private byte[] secret; - - /** - * Base constructor for one of the standard digest algorithms that the byteLength of - * the algorithm is know for. Behaviour is undefined for digests other than MD5 or SHA1. - * - * @param digest the digest. - */ - public Ssl3Mac(IDigest digest) - { - this.digest = digest; - - if (digest.GetDigestSize() == 20) - { - this.padLength = 40; - } - else - { - this.padLength = 48; - } - } - - public virtual string AlgorithmName - { - get { return digest.AlgorithmName + "/SSL3MAC"; } - } - - public virtual void Init(ICipherParameters parameters) - { - secret = Arrays.Clone(((KeyParameter)parameters).GetKey()); - - Reset(); - } - - public virtual int GetMacSize() - { - return digest.GetDigestSize(); - } - - public virtual void Update(byte input) - { - digest.Update(input); - } - - public virtual void BlockUpdate(byte[] input, int inOff, int len) - { - digest.BlockUpdate(input, inOff, len); - } - - public virtual int DoFinal(byte[] output, int outOff) - { - byte[] tmp = new byte[digest.GetDigestSize()]; - digest.DoFinal(tmp, 0); - - digest.BlockUpdate(secret, 0, secret.Length); - digest.BlockUpdate(OPAD, 0, padLength); - digest.BlockUpdate(tmp, 0, tmp.Length); - - int len = digest.DoFinal(output, outOff); - - Reset(); - - return len; - } - - /** - * Reset the mac generator. - */ - public virtual void Reset() - { - digest.Reset(); - digest.BlockUpdate(secret, 0, secret.Length); - digest.BlockUpdate(IPAD, 0, padLength); - } - - private static byte[] GenPad(byte b, int count) - { - byte[] padding = new byte[count]; - Arrays.Fill(padding, b); - return padding; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/SupplementalDataEntry.cs b/bc-sharp-crypto/src/crypto/tls/SupplementalDataEntry.cs deleted file mode 100644 index 5adc4fa..0000000 --- a/bc-sharp-crypto/src/crypto/tls/SupplementalDataEntry.cs +++ /dev/null @@ -1,26 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class SupplementalDataEntry - { - protected readonly int mDataType; - protected readonly byte[] mData; - - public SupplementalDataEntry(int dataType, byte[] data) - { - this.mDataType = dataType; - this.mData = data; - } - - public virtual int DataType - { - get { return mDataType; } - } - - public virtual byte[] Data - { - get { return mData; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/SupplementalDataType.cs b/bc-sharp-crypto/src/crypto/tls/SupplementalDataType.cs deleted file mode 100644 index 79511c5..0000000 --- a/bc-sharp-crypto/src/crypto/tls/SupplementalDataType.cs +++ /dev/null @@ -1,13 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /// RFC 4680 - public abstract class SupplementalDataType - { - /* - * RFC 4681 - */ - public const int user_mapping_data = 0; - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsAeadCipher.cs b/bc-sharp-crypto/src/crypto/tls/TlsAeadCipher.cs deleted file mode 100644 index cc0575c..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsAeadCipher.cs +++ /dev/null @@ -1,249 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Crypto.Modes; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class TlsAeadCipher - : TlsCipher - { - // TODO[draft-zauner-tls-aes-ocb-04] Apply data volume limit described in section 8.4 - - public const int NONCE_RFC5288 = 1; - - /* - * draft-zauner-tls-aes-ocb-04 specifies the nonce construction from draft-ietf-tls-chacha20-poly1305-04 - */ - internal const int NONCE_DRAFT_CHACHA20_POLY1305 = 2; - - protected readonly TlsContext context; - protected readonly int macSize; - // TODO SecurityParameters.record_iv_length - protected readonly int record_iv_length; - - protected readonly IAeadBlockCipher encryptCipher; - protected readonly IAeadBlockCipher decryptCipher; - - protected readonly byte[] encryptImplicitNonce, decryptImplicitNonce; - - protected readonly int nonceMode; - - /// - public TlsAeadCipher(TlsContext context, IAeadBlockCipher clientWriteCipher, IAeadBlockCipher serverWriteCipher, - int cipherKeySize, int macSize) - : this(context, clientWriteCipher, serverWriteCipher, cipherKeySize, macSize, NONCE_RFC5288) - { - } - - /// - internal TlsAeadCipher(TlsContext context, IAeadBlockCipher clientWriteCipher, IAeadBlockCipher serverWriteCipher, - int cipherKeySize, int macSize, int nonceMode) - { - if (!TlsUtilities.IsTlsV12(context)) - throw new TlsFatalAlert(AlertDescription.internal_error); - - this.nonceMode = nonceMode; - - // TODO SecurityParameters.fixed_iv_length - int fixed_iv_length; - - switch (nonceMode) - { - case NONCE_RFC5288: - fixed_iv_length = 4; - this.record_iv_length = 8; - break; - case NONCE_DRAFT_CHACHA20_POLY1305: - fixed_iv_length = 12; - this.record_iv_length = 0; - break; - default: - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - this.context = context; - this.macSize = macSize; - - int key_block_size = (2 * cipherKeySize) + (2 * fixed_iv_length); - - byte[] key_block = TlsUtilities.CalculateKeyBlock(context, key_block_size); - - int offset = 0; - - KeyParameter client_write_key = new KeyParameter(key_block, offset, cipherKeySize); - offset += cipherKeySize; - KeyParameter server_write_key = new KeyParameter(key_block, offset, cipherKeySize); - offset += cipherKeySize; - byte[] client_write_IV = Arrays.CopyOfRange(key_block, offset, offset + fixed_iv_length); - offset += fixed_iv_length; - byte[] server_write_IV = Arrays.CopyOfRange(key_block, offset, offset + fixed_iv_length); - offset += fixed_iv_length; - - if (offset != key_block_size) - throw new TlsFatalAlert(AlertDescription.internal_error); - - KeyParameter encryptKey, decryptKey; - if (context.IsServer) - { - this.encryptCipher = serverWriteCipher; - this.decryptCipher = clientWriteCipher; - this.encryptImplicitNonce = server_write_IV; - this.decryptImplicitNonce = client_write_IV; - encryptKey = server_write_key; - decryptKey = client_write_key; - } - else - { - this.encryptCipher = clientWriteCipher; - this.decryptCipher = serverWriteCipher; - this.encryptImplicitNonce = client_write_IV; - this.decryptImplicitNonce = server_write_IV; - encryptKey = client_write_key; - decryptKey = server_write_key; - } - - byte[] dummyNonce = new byte[fixed_iv_length + record_iv_length]; - - this.encryptCipher.Init(true, new AeadParameters(encryptKey, 8 * macSize, dummyNonce)); - this.decryptCipher.Init(false, new AeadParameters(decryptKey, 8 * macSize, dummyNonce)); - } - - public virtual int GetPlaintextLimit(int ciphertextLimit) - { - // TODO We ought to be able to ask the decryptCipher (independently of it's current state!) - return ciphertextLimit - macSize - record_iv_length; - } - - /// - public virtual byte[] EncodePlaintext(long seqNo, byte type, byte[] plaintext, int offset, int len) - { - byte[] nonce = new byte[encryptImplicitNonce.Length + record_iv_length]; - - switch (nonceMode) - { - case NONCE_RFC5288: - Array.Copy(encryptImplicitNonce, 0, nonce, 0, encryptImplicitNonce.Length); - // RFC 5288/6655: The nonce_explicit MAY be the 64-bit sequence number. - TlsUtilities.WriteUint64(seqNo, nonce, encryptImplicitNonce.Length); - break; - case NONCE_DRAFT_CHACHA20_POLY1305: - TlsUtilities.WriteUint64(seqNo, nonce, nonce.Length - 8); - for (int i = 0; i < encryptImplicitNonce.Length; ++i) - { - nonce[i] ^= encryptImplicitNonce[i]; - } - break; - default: - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - int plaintextOffset = offset; - int plaintextLength = len; - int ciphertextLength = encryptCipher.GetOutputSize(plaintextLength); - - byte[] output = new byte[record_iv_length + ciphertextLength]; - if (record_iv_length != 0) - { - Array.Copy(nonce, nonce.Length - record_iv_length, output, 0, record_iv_length); - } - int outputPos = record_iv_length; - - byte[] additionalData = GetAdditionalData(seqNo, type, plaintextLength); - AeadParameters parameters = new AeadParameters(null, 8 * macSize, nonce, additionalData); - - try - { - encryptCipher.Init(true, parameters); - outputPos += encryptCipher.ProcessBytes(plaintext, plaintextOffset, plaintextLength, output, outputPos); - outputPos += encryptCipher.DoFinal(output, outputPos); - } - catch (Exception e) - { - throw new TlsFatalAlert(AlertDescription.internal_error, e); - } - - if (outputPos != output.Length) - { - // NOTE: Existing AEAD cipher implementations all give exact output lengths - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - return output; - } - - /// - public virtual byte[] DecodeCiphertext(long seqNo, byte type, byte[] ciphertext, int offset, int len) - { - if (GetPlaintextLimit(len) < 0) - throw new TlsFatalAlert(AlertDescription.decode_error); - - byte[] nonce = new byte[decryptImplicitNonce.Length + record_iv_length]; - - switch (nonceMode) - { - case NONCE_RFC5288: - Array.Copy(decryptImplicitNonce, 0, nonce, 0, decryptImplicitNonce.Length); - Array.Copy(ciphertext, offset, nonce, nonce.Length - record_iv_length, record_iv_length); - break; - case NONCE_DRAFT_CHACHA20_POLY1305: - TlsUtilities.WriteUint64(seqNo, nonce, nonce.Length - 8); - for (int i = 0; i < decryptImplicitNonce.Length; ++i) - { - nonce[i] ^= decryptImplicitNonce[i]; - } - break; - default: - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - int ciphertextOffset = offset + record_iv_length; - int ciphertextLength = len - record_iv_length; - int plaintextLength = decryptCipher.GetOutputSize(ciphertextLength); - - byte[] output = new byte[plaintextLength]; - int outputPos = 0; - - byte[] additionalData = GetAdditionalData(seqNo, type, plaintextLength); - AeadParameters parameters = new AeadParameters(null, 8 * macSize, nonce, additionalData); - - try - { - decryptCipher.Init(false, parameters); - outputPos += decryptCipher.ProcessBytes(ciphertext, ciphertextOffset, ciphertextLength, output, outputPos); - outputPos += decryptCipher.DoFinal(output, outputPos); - } - catch (Exception e) - { - throw new TlsFatalAlert(AlertDescription.bad_record_mac, e); - } - - if (outputPos != output.Length) - { - // NOTE: Existing AEAD cipher implementations all give exact output lengths - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - return output; - } - - /// - protected virtual byte[] GetAdditionalData(long seqNo, byte type, int len) - { - /* - * additional_data = seq_num + TLSCompressed.type + TLSCompressed.version + - * TLSCompressed.length - */ - - byte[] additional_data = new byte[13]; - TlsUtilities.WriteUint64(seqNo, additional_data, 0); - TlsUtilities.WriteUint8(type, additional_data, 8); - TlsUtilities.WriteVersion(context.ServerVersion, additional_data, 9); - TlsUtilities.WriteUint16(len, additional_data, 11); - - return additional_data; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsAgreementCredentials.cs b/bc-sharp-crypto/src/crypto/tls/TlsAgreementCredentials.cs deleted file mode 100644 index 7c64072..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsAgreementCredentials.cs +++ /dev/null @@ -1,12 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public interface TlsAgreementCredentials - : TlsCredentials - { - /// - byte[] GenerateAgreement(AsymmetricKeyParameter peerPublicKey); - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsAuthentication.cs b/bc-sharp-crypto/src/crypto/tls/TlsAuthentication.cs deleted file mode 100644 index 9aea5e4..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsAuthentication.cs +++ /dev/null @@ -1,31 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public interface TlsAuthentication - { - /// - /// Called by the protocol handler to report the server certificate. - /// - /// - /// This method is responsible for certificate verification and validation - /// - /// The server received - /// - void NotifyServerCertificate(Certificate serverCertificate); - - /// - /// Return client credentials in response to server's certificate request - /// - /// - /// A containing server certificate request details - /// - /// - /// A to be used for client authentication - /// (or null for no client authentication) - /// - /// - TlsCredentials GetClientCredentials(CertificateRequest certificateRequest); - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsBlockCipher.cs b/bc-sharp-crypto/src/crypto/tls/TlsBlockCipher.cs deleted file mode 100644 index 76b476a..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsBlockCipher.cs +++ /dev/null @@ -1,395 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /// - /// A generic TLS 1.0-1.2 / SSLv3 block cipher. This can be used for AES or 3DES for example. - /// - public class TlsBlockCipher - : TlsCipher - { - protected readonly TlsContext context; - protected readonly byte[] randomData; - protected readonly bool useExplicitIV; - protected readonly bool encryptThenMac; - - protected readonly IBlockCipher encryptCipher; - protected readonly IBlockCipher decryptCipher; - - protected readonly TlsMac mWriteMac; - protected readonly TlsMac mReadMac; - - public virtual TlsMac WriteMac - { - get { return mWriteMac; } - } - - public virtual TlsMac ReadMac - { - get { return mReadMac; } - } - - /// - public TlsBlockCipher(TlsContext context, IBlockCipher clientWriteCipher, IBlockCipher serverWriteCipher, - IDigest clientWriteDigest, IDigest serverWriteDigest, int cipherKeySize) - { - this.context = context; - - this.randomData = new byte[256]; - context.NonceRandomGenerator.NextBytes(randomData); - - this.useExplicitIV = TlsUtilities.IsTlsV11(context); - this.encryptThenMac = context.SecurityParameters.encryptThenMac; - - int key_block_size = (2 * cipherKeySize) + clientWriteDigest.GetDigestSize() - + serverWriteDigest.GetDigestSize(); - - // From TLS 1.1 onwards, block ciphers don't need client_write_IV - if (!useExplicitIV) - { - key_block_size += clientWriteCipher.GetBlockSize() + serverWriteCipher.GetBlockSize(); - } - - byte[] key_block = TlsUtilities.CalculateKeyBlock(context, key_block_size); - - int offset = 0; - - TlsMac clientWriteMac = new TlsMac(context, clientWriteDigest, key_block, offset, - clientWriteDigest.GetDigestSize()); - offset += clientWriteDigest.GetDigestSize(); - TlsMac serverWriteMac = new TlsMac(context, serverWriteDigest, key_block, offset, - serverWriteDigest.GetDigestSize()); - offset += serverWriteDigest.GetDigestSize(); - - KeyParameter client_write_key = new KeyParameter(key_block, offset, cipherKeySize); - offset += cipherKeySize; - KeyParameter server_write_key = new KeyParameter(key_block, offset, cipherKeySize); - offset += cipherKeySize; - - byte[] client_write_IV, server_write_IV; - if (useExplicitIV) - { - client_write_IV = new byte[clientWriteCipher.GetBlockSize()]; - server_write_IV = new byte[serverWriteCipher.GetBlockSize()]; - } - else - { - client_write_IV = Arrays.CopyOfRange(key_block, offset, offset + clientWriteCipher.GetBlockSize()); - offset += clientWriteCipher.GetBlockSize(); - server_write_IV = Arrays.CopyOfRange(key_block, offset, offset + serverWriteCipher.GetBlockSize()); - offset += serverWriteCipher.GetBlockSize(); - } - - if (offset != key_block_size) - { - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - ICipherParameters encryptParams, decryptParams; - if (context.IsServer) - { - this.mWriteMac = serverWriteMac; - this.mReadMac = clientWriteMac; - this.encryptCipher = serverWriteCipher; - this.decryptCipher = clientWriteCipher; - encryptParams = new ParametersWithIV(server_write_key, server_write_IV); - decryptParams = new ParametersWithIV(client_write_key, client_write_IV); - } - else - { - this.mWriteMac = clientWriteMac; - this.mReadMac = serverWriteMac; - this.encryptCipher = clientWriteCipher; - this.decryptCipher = serverWriteCipher; - encryptParams = new ParametersWithIV(client_write_key, client_write_IV); - decryptParams = new ParametersWithIV(server_write_key, server_write_IV); - } - - this.encryptCipher.Init(true, encryptParams); - this.decryptCipher.Init(false, decryptParams); - } - - public virtual int GetPlaintextLimit(int ciphertextLimit) - { - int blockSize = encryptCipher.GetBlockSize(); - int macSize = mWriteMac.Size; - - int plaintextLimit = ciphertextLimit; - - // An explicit IV consumes 1 block - if (useExplicitIV) - { - plaintextLimit -= blockSize; - } - - // Leave room for the MAC, and require block-alignment - if (encryptThenMac) - { - plaintextLimit -= macSize; - plaintextLimit -= plaintextLimit % blockSize; - } - else - { - plaintextLimit -= plaintextLimit % blockSize; - plaintextLimit -= macSize; - } - - // Minimum 1 byte of padding - --plaintextLimit; - - return plaintextLimit; - } - - public virtual byte[] EncodePlaintext(long seqNo, byte type, byte[] plaintext, int offset, int len) - { - int blockSize = encryptCipher.GetBlockSize(); - int macSize = mWriteMac.Size; - - ProtocolVersion version = context.ServerVersion; - - int enc_input_length = len; - if (!encryptThenMac) - { - enc_input_length += macSize; - } - - int padding_length = blockSize - 1 - (enc_input_length % blockSize); - - /* - * Don't use variable-length padding with truncated MACs. - * - * See "Tag Size Does Matter: Attacks and Proofs for the TLS Record Protocol", Paterson, - * Ristenpart, Shrimpton. - */ - if (encryptThenMac || !context.SecurityParameters.truncatedHMac) - { - // TODO[DTLS] Consider supporting in DTLS (without exceeding send limit though) - if (!version.IsDtls && !version.IsSsl) - { - // Add a random number of extra blocks worth of padding - int maxExtraPadBlocks = (255 - padding_length) / blockSize; - int actualExtraPadBlocks = ChooseExtraPadBlocks(context.SecureRandom, maxExtraPadBlocks); - padding_length += actualExtraPadBlocks * blockSize; - } - } - - int totalSize = len + macSize + padding_length + 1; - if (useExplicitIV) - { - totalSize += blockSize; - } - - byte[] outBuf = new byte[totalSize]; - int outOff = 0; - - if (useExplicitIV) - { - byte[] explicitIV = new byte[blockSize]; - context.NonceRandomGenerator.NextBytes(explicitIV); - - encryptCipher.Init(true, new ParametersWithIV(null, explicitIV)); - - Array.Copy(explicitIV, 0, outBuf, outOff, blockSize); - outOff += blockSize; - } - - int blocks_start = outOff; - - Array.Copy(plaintext, offset, outBuf, outOff, len); - outOff += len; - - if (!encryptThenMac) - { - byte[] mac = mWriteMac.CalculateMac(seqNo, type, plaintext, offset, len); - Array.Copy(mac, 0, outBuf, outOff, mac.Length); - outOff += mac.Length; - } - - for (int i = 0; i <= padding_length; i++) - { - outBuf[outOff++] = (byte)padding_length; - } - - for (int i = blocks_start; i < outOff; i += blockSize) - { - encryptCipher.ProcessBlock(outBuf, i, outBuf, i); - } - - if (encryptThenMac) - { - byte[] mac = mWriteMac.CalculateMac(seqNo, type, outBuf, 0, outOff); - Array.Copy(mac, 0, outBuf, outOff, mac.Length); - outOff += mac.Length; - } - - // assert outBuf.length == outOff; - - return outBuf; - } - - /// - public virtual byte[] DecodeCiphertext(long seqNo, byte type, byte[] ciphertext, int offset, int len) - { - int blockSize = decryptCipher.GetBlockSize(); - int macSize = mReadMac.Size; - - int minLen = blockSize; - if (encryptThenMac) - { - minLen += macSize; - } - else - { - minLen = System.Math.Max(minLen, macSize + 1); - } - - if (useExplicitIV) - { - minLen += blockSize; - } - - if (len < minLen) - throw new TlsFatalAlert(AlertDescription.decode_error); - - int blocks_length = len; - if (encryptThenMac) - { - blocks_length -= macSize; - } - - if (blocks_length % blockSize != 0) - throw new TlsFatalAlert(AlertDescription.decryption_failed); - - if (encryptThenMac) - { - int end = offset + len; - byte[] receivedMac = Arrays.CopyOfRange(ciphertext, end - macSize, end); - byte[] calculatedMac = mReadMac.CalculateMac(seqNo, type, ciphertext, offset, len - macSize); - - bool badMacEtm = !Arrays.ConstantTimeAreEqual(calculatedMac, receivedMac); - if (badMacEtm) - { - /* - * RFC 7366 3. The MAC SHALL be evaluated before any further processing such as - * decryption is performed, and if the MAC verification fails, then processing SHALL - * terminate immediately. For TLS, a fatal bad_record_mac MUST be generated [2]. For - * DTLS, the record MUST be discarded, and a fatal bad_record_mac MAY be generated - * [4]. This immediate response to a bad MAC eliminates any timing channels that may - * be available through the use of manipulated packet data. - */ - throw new TlsFatalAlert(AlertDescription.bad_record_mac); - } - } - - if (useExplicitIV) - { - decryptCipher.Init(false, new ParametersWithIV(null, ciphertext, offset, blockSize)); - - offset += blockSize; - blocks_length -= blockSize; - } - - for (int i = 0; i < blocks_length; i += blockSize) - { - decryptCipher.ProcessBlock(ciphertext, offset + i, ciphertext, offset + i); - } - - // If there's anything wrong with the padding, this will return zero - int totalPad = CheckPaddingConstantTime(ciphertext, offset, blocks_length, blockSize, encryptThenMac ? 0 : macSize); - bool badMac = (totalPad == 0); - - int dec_output_length = blocks_length - totalPad; - - if (!encryptThenMac) - { - dec_output_length -= macSize; - int macInputLen = dec_output_length; - int macOff = offset + macInputLen; - byte[] receivedMac = Arrays.CopyOfRange(ciphertext, macOff, macOff + macSize); - byte[] calculatedMac = mReadMac.CalculateMacConstantTime(seqNo, type, ciphertext, offset, macInputLen, - blocks_length - macSize, randomData); - - badMac |= !Arrays.ConstantTimeAreEqual(calculatedMac, receivedMac); - } - - if (badMac) - throw new TlsFatalAlert(AlertDescription.bad_record_mac); - - return Arrays.CopyOfRange(ciphertext, offset, offset + dec_output_length); - } - - protected virtual int CheckPaddingConstantTime(byte[] buf, int off, int len, int blockSize, int macSize) - { - int end = off + len; - byte lastByte = buf[end - 1]; - int padlen = lastByte & 0xff; - int totalPad = padlen + 1; - - int dummyIndex = 0; - byte padDiff = 0; - - if ((TlsUtilities.IsSsl(context) && totalPad > blockSize) || (macSize + totalPad > len)) - { - totalPad = 0; - } - else - { - int padPos = end - totalPad; - do - { - padDiff |= (byte)(buf[padPos++] ^ lastByte); - } - while (padPos < end); - - dummyIndex = totalPad; - - if (padDiff != 0) - { - totalPad = 0; - } - } - - // Run some extra dummy checks so the number of checks is always constant - { - byte[] dummyPad = randomData; - while (dummyIndex < 256) - { - padDiff |= (byte)(dummyPad[dummyIndex++] ^ lastByte); - } - // Ensure the above loop is not eliminated - dummyPad[0] ^= padDiff; - } - - return totalPad; - } - - protected virtual int ChooseExtraPadBlocks(SecureRandom r, int max) - { - // return r.NextInt(max + 1); - - int x = r.NextInt(); - int n = LowestBitSet(x); - return System.Math.Min(n, max); - } - - protected virtual int LowestBitSet(int x) - { - if (x == 0) - return 32; - - uint ux = (uint)x; - int n = 0; - while ((ux & 1U) == 0) - { - ++n; - ux >>= 1; - } - return n; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsCipher.cs b/bc-sharp-crypto/src/crypto/tls/TlsCipher.cs deleted file mode 100644 index 7bd8573..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsCipher.cs +++ /dev/null @@ -1,16 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public interface TlsCipher - { - int GetPlaintextLimit(int ciphertextLimit); - - /// - byte[] EncodePlaintext(long seqNo, byte type, byte[] plaintext, int offset, int len); - - /// - byte[] DecodeCiphertext(long seqNo, byte type, byte[] ciphertext, int offset, int len); - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsCipherFactory.cs b/bc-sharp-crypto/src/crypto/tls/TlsCipherFactory.cs deleted file mode 100644 index 4e1fe0e..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsCipherFactory.cs +++ /dev/null @@ -1,11 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public interface TlsCipherFactory - { - /// - TlsCipher CreateCipher(TlsContext context, int encryptionAlgorithm, int macAlgorithm); - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsClient.cs b/bc-sharp-crypto/src/crypto/tls/TlsClient.cs deleted file mode 100644 index 73f1690..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsClient.cs +++ /dev/null @@ -1,148 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public interface TlsClient - : TlsPeer - { - /// - /// Called at the start of a new TLS session, before any other methods. - /// - /// - /// A - /// - void Init(TlsClientContext context); - - /// Return the session this client wants to resume, if any. - /// Note that the peer's certificate chain for the session (if any) may need to be periodically revalidated. - /// - /// A representing the resumable session to be used for this connection, - /// or null to use a new session. - /// - TlsSession GetSessionToResume(); - - /// - /// Return the to use for the TLSPlaintext.version field prior to - /// receiving the server version. NOTE: This method is not called for DTLS. - /// - /// - /// See RFC 5246 E.1.: "TLS clients that wish to negotiate with older servers MAY send any value - /// {03,XX} as the record layer version number. Typical values would be {03,00}, the lowest - /// version number supported by the client, and the value of ClientHello.client_version. No - /// single value will guarantee interoperability with all old servers, but this is a complex - /// topic beyond the scope of this document." - /// - /// The to use. - ProtocolVersion ClientHelloRecordLayerVersion { get; } - - ProtocolVersion ClientVersion { get; } - - bool IsFallback { get; } - - /// - /// Get the list of cipher suites that this client supports. - /// - /// - /// An array of values, each specifying a supported cipher suite. - /// - int[] GetCipherSuites(); - - /// - /// Get the list of compression methods that this client supports. - /// - /// - /// An array of values, each specifying a supported compression method. - /// - byte[] GetCompressionMethods(); - - /// - /// Get the (optional) table of client extensions to be included in (extended) client hello. - /// - /// - /// A (Int32 -> byte[]). May be null. - /// - /// - IDictionary GetClientExtensions(); - - /// - void NotifyServerVersion(ProtocolVersion selectedVersion); - - /// - /// Notifies the client of the session_id sent in the ServerHello. - /// - /// An array of - void NotifySessionID(byte[] sessionID); - - /// - /// Report the cipher suite that was selected by the server. - /// - /// - /// The protocol handler validates this value against the offered cipher suites - /// - /// - /// - /// A - /// - void NotifySelectedCipherSuite(int selectedCipherSuite); - - /// - /// Report the compression method that was selected by the server. - /// - /// - /// The protocol handler validates this value against the offered compression methods - /// - /// - /// - /// A - /// - void NotifySelectedCompressionMethod(byte selectedCompressionMethod); - - /// - /// Report the extensions from an extended server hello. - /// - /// - /// Will only be called if we returned a non-null result from . - /// - /// - /// A (Int32 -> byte[]) - /// - void ProcessServerExtensions(IDictionary serverExtensions); - - /// A list of - /// - void ProcessServerSupplementalData(IList serverSupplementalData); - - /// - /// Return an implementation of to negotiate the key exchange - /// part of the protocol. - /// - /// - /// A - /// - /// - TlsKeyExchange GetKeyExchange(); - - /// - /// Return an implementation of to handle authentication - /// part of the protocol. - /// - /// - TlsAuthentication GetAuthentication(); - - /// A list of - /// - IList GetClientSupplementalData(); - - /// RFC 5077 3.3. NewSessionTicket Handshake Message - /// - /// This method will be called (only) when a NewSessionTicket handshake message is received. The - /// ticket is opaque to the client and clients MUST NOT examine the ticket under the assumption - /// that it complies with e.g. RFC 5077 4. Recommended Ticket Construction. - /// - /// The ticket - /// - void NotifyNewSessionTicket(NewSessionTicket newSessionTicket); - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsClientContext.cs b/bc-sharp-crypto/src/crypto/tls/TlsClientContext.cs deleted file mode 100644 index b077d0a..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsClientContext.cs +++ /dev/null @@ -1,11 +0,0 @@ -using System; - -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public interface TlsClientContext - : TlsContext - { - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsClientContextImpl.cs b/bc-sharp-crypto/src/crypto/tls/TlsClientContextImpl.cs deleted file mode 100644 index 674d689..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsClientContextImpl.cs +++ /dev/null @@ -1,20 +0,0 @@ -using System; - -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Tls -{ - internal class TlsClientContextImpl - : AbstractTlsContext, TlsClientContext - { - internal TlsClientContextImpl(SecureRandom secureRandom, SecurityParameters securityParameters) - : base(secureRandom, securityParameters) - { - } - - public override bool IsServer - { - get { return false; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsClientProtocol.cs b/bc-sharp-crypto/src/crypto/tls/TlsClientProtocol.cs deleted file mode 100644 index 0ea84c0..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsClientProtocol.cs +++ /dev/null @@ -1,912 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class TlsClientProtocol - : TlsProtocol - { - protected TlsClient mTlsClient = null; - internal TlsClientContextImpl mTlsClientContext = null; - - protected byte[] mSelectedSessionID = null; - - protected TlsKeyExchange mKeyExchange = null; - protected TlsAuthentication mAuthentication = null; - - protected CertificateStatus mCertificateStatus = null; - protected CertificateRequest mCertificateRequest = null; - - /** - * Constructor for blocking mode. - * @param stream The bi-directional stream of data to/from the server - * @param secureRandom Random number generator for various cryptographic functions - */ - public TlsClientProtocol(Stream stream, SecureRandom secureRandom) - : base(stream, secureRandom) - { - } - - /** - * Constructor for blocking mode. - * @param input The stream of data from the server - * @param output The stream of data to the server - * @param secureRandom Random number generator for various cryptographic functions - */ - public TlsClientProtocol(Stream input, Stream output, SecureRandom secureRandom) - : base(input, output, secureRandom) - { - } - - /** - * Constructor for non-blocking mode.
- *
- * When data is received, use {@link #offerInput(java.nio.ByteBuffer)} to - * provide the received ciphertext, then use - * {@link #readInput(byte[], int, int)} to read the corresponding cleartext.
- *
- * Similarly, when data needs to be sent, use - * {@link #offerOutput(byte[], int, int)} to provide the cleartext, then use - * {@link #readOutput(byte[], int, int)} to get the corresponding - * ciphertext. - * - * @param secureRandom - * Random number generator for various cryptographic functions - */ - public TlsClientProtocol(SecureRandom secureRandom) - : base(secureRandom) - { - } - - /** - * Initiates a TLS handshake in the role of client.
- *
- * In blocking mode, this will not return until the handshake is complete. - * In non-blocking mode, use {@link TlsPeer#NotifyHandshakeComplete()} to - * receive a callback when the handshake is complete. - * - * @param tlsClient The {@link TlsClient} to use for the handshake. - * @throws IOException If in blocking mode and handshake was not successful. - */ - public virtual void Connect(TlsClient tlsClient) - { - if (tlsClient == null) - throw new ArgumentNullException("tlsClient"); - if (this.mTlsClient != null) - throw new InvalidOperationException("'Connect' can only be called once"); - - this.mTlsClient = tlsClient; - - this.mSecurityParameters = new SecurityParameters(); - this.mSecurityParameters.entity = ConnectionEnd.client; - - this.mTlsClientContext = new TlsClientContextImpl(mSecureRandom, mSecurityParameters); - - this.mSecurityParameters.clientRandom = CreateRandomBlock(tlsClient.ShouldUseGmtUnixTime(), - mTlsClientContext.NonceRandomGenerator); - - this.mTlsClient.Init(mTlsClientContext); - this.mRecordStream.Init(mTlsClientContext); - - TlsSession sessionToResume = tlsClient.GetSessionToResume(); - if (sessionToResume != null && sessionToResume.IsResumable) - { - SessionParameters sessionParameters = sessionToResume.ExportSessionParameters(); - if (sessionParameters != null) - { - this.mTlsSession = sessionToResume; - this.mSessionParameters = sessionParameters; - } - } - - SendClientHelloMessage(); - this.mConnectionState = CS_CLIENT_HELLO; - - BlockForHandshake(); - } - - protected override void CleanupHandshake() - { - base.CleanupHandshake(); - - this.mSelectedSessionID = null; - this.mKeyExchange = null; - this.mAuthentication = null; - this.mCertificateStatus = null; - this.mCertificateRequest = null; - } - - protected override TlsContext Context - { - get { return mTlsClientContext; } - } - - internal override AbstractTlsContext ContextAdmin - { - get { return mTlsClientContext; } - } - - protected override TlsPeer Peer - { - get { return mTlsClient; } - } - - protected override void HandleHandshakeMessage(byte type, MemoryStream buf) - { - if (this.mResumedSession) - { - if (type != HandshakeType.finished || this.mConnectionState != CS_SERVER_HELLO) - throw new TlsFatalAlert(AlertDescription.unexpected_message); - - ProcessFinishedMessage(buf); - this.mConnectionState = CS_SERVER_FINISHED; - - SendFinishedMessage(); - this.mConnectionState = CS_CLIENT_FINISHED; - - CompleteHandshake(); - return; - } - - switch (type) - { - case HandshakeType.certificate: - { - switch (this.mConnectionState) - { - case CS_SERVER_HELLO: - case CS_SERVER_SUPPLEMENTAL_DATA: - { - if (this.mConnectionState == CS_SERVER_HELLO) - { - HandleSupplementalData(null); - } - - // Parse the Certificate message and Send to cipher suite - - this.mPeerCertificate = Certificate.Parse(buf); - - AssertEmpty(buf); - - // TODO[RFC 3546] Check whether empty certificates is possible, allowed, or excludes CertificateStatus - if (this.mPeerCertificate == null || this.mPeerCertificate.IsEmpty) - { - this.mAllowCertificateStatus = false; - } - - this.mKeyExchange.ProcessServerCertificate(this.mPeerCertificate); - - this.mAuthentication = mTlsClient.GetAuthentication(); - this.mAuthentication.NotifyServerCertificate(this.mPeerCertificate); - - break; - } - default: - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - - this.mConnectionState = CS_SERVER_CERTIFICATE; - break; - } - case HandshakeType.certificate_status: - { - switch (this.mConnectionState) - { - case CS_SERVER_CERTIFICATE: - { - if (!this.mAllowCertificateStatus) - { - /* - * RFC 3546 3.6. If a server returns a "CertificateStatus" message, then the - * server MUST have included an extension of type "status_request" with empty - * "extension_data" in the extended server hello.. - */ - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - - this.mCertificateStatus = CertificateStatus.Parse(buf); - - AssertEmpty(buf); - - // TODO[RFC 3546] Figure out how to provide this to the client/authentication. - - this.mConnectionState = CS_CERTIFICATE_STATUS; - break; - } - default: - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - break; - } - case HandshakeType.finished: - { - switch (this.mConnectionState) - { - case CS_CLIENT_FINISHED: - case CS_SERVER_SESSION_TICKET: - { - if (this.mConnectionState == CS_CLIENT_FINISHED && this.mExpectSessionTicket) - { - /* - * RFC 5077 3.3. This message MUST be sent if the server included a - * SessionTicket extension in the ServerHello. - */ - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - - ProcessFinishedMessage(buf); - this.mConnectionState = CS_SERVER_FINISHED; - - CompleteHandshake(); - break; - } - default: - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - break; - } - case HandshakeType.server_hello: - { - switch (this.mConnectionState) - { - case CS_CLIENT_HELLO: - { - ReceiveServerHelloMessage(buf); - this.mConnectionState = CS_SERVER_HELLO; - - this.mRecordStream.NotifyHelloComplete(); - - ApplyMaxFragmentLengthExtension(); - - if (this.mResumedSession) - { - this.mSecurityParameters.masterSecret = Arrays.Clone(this.mSessionParameters.MasterSecret); - this.mRecordStream.SetPendingConnectionState(Peer.GetCompression(), Peer.GetCipher()); - - SendChangeCipherSpecMessage(); - } - else - { - InvalidateSession(); - - if (this.mSelectedSessionID.Length > 0) - { - this.mTlsSession = new TlsSessionImpl(this.mSelectedSessionID, null); - } - } - - break; - } - default: - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - break; - } - case HandshakeType.supplemental_data: - { - switch (this.mConnectionState) - { - case CS_SERVER_HELLO: - { - HandleSupplementalData(ReadSupplementalDataMessage(buf)); - break; - } - default: - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - break; - } - case HandshakeType.server_hello_done: - { - switch (this.mConnectionState) - { - case CS_SERVER_HELLO: - case CS_SERVER_SUPPLEMENTAL_DATA: - case CS_SERVER_CERTIFICATE: - case CS_CERTIFICATE_STATUS: - case CS_SERVER_KEY_EXCHANGE: - case CS_CERTIFICATE_REQUEST: - { - if (mConnectionState < CS_SERVER_SUPPLEMENTAL_DATA) - { - HandleSupplementalData(null); - } - - if (mConnectionState < CS_SERVER_CERTIFICATE) - { - // There was no server certificate message; check it's OK - this.mKeyExchange.SkipServerCredentials(); - this.mAuthentication = null; - } - - if (mConnectionState < CS_SERVER_KEY_EXCHANGE) - { - // There was no server key exchange message; check it's OK - this.mKeyExchange.SkipServerKeyExchange(); - } - - AssertEmpty(buf); - - this.mConnectionState = CS_SERVER_HELLO_DONE; - - this.mRecordStream.HandshakeHash.SealHashAlgorithms(); - - IList clientSupplementalData = mTlsClient.GetClientSupplementalData(); - if (clientSupplementalData != null) - { - SendSupplementalDataMessage(clientSupplementalData); - } - this.mConnectionState = CS_CLIENT_SUPPLEMENTAL_DATA; - - TlsCredentials clientCreds = null; - if (mCertificateRequest == null) - { - this.mKeyExchange.SkipClientCredentials(); - } - else - { - clientCreds = this.mAuthentication.GetClientCredentials(mCertificateRequest); - - if (clientCreds == null) - { - this.mKeyExchange.SkipClientCredentials(); - - /* - * RFC 5246 If no suitable certificate is available, the client MUST Send a - * certificate message containing no certificates. - * - * NOTE: In previous RFCs, this was SHOULD instead of MUST. - */ - SendCertificateMessage(Certificate.EmptyChain); - } - else - { - this.mKeyExchange.ProcessClientCredentials(clientCreds); - - SendCertificateMessage(clientCreds.Certificate); - } - } - - this.mConnectionState = CS_CLIENT_CERTIFICATE; - - /* - * Send the client key exchange message, depending on the key exchange we are using - * in our CipherSuite. - */ - SendClientKeyExchangeMessage(); - this.mConnectionState = CS_CLIENT_KEY_EXCHANGE; - - if (TlsUtilities.IsSsl(Context)) - { - EstablishMasterSecret(Context, mKeyExchange); - } - - TlsHandshakeHash prepareFinishHash = mRecordStream.PrepareToFinish(); - this.mSecurityParameters.sessionHash = GetCurrentPrfHash(Context, prepareFinishHash, null); - - if (!TlsUtilities.IsSsl(Context)) - { - EstablishMasterSecret(Context, mKeyExchange); - } - - mRecordStream.SetPendingConnectionState(Peer.GetCompression(), Peer.GetCipher()); - - if (clientCreds != null && clientCreds is TlsSignerCredentials) - { - TlsSignerCredentials signerCredentials = (TlsSignerCredentials)clientCreds; - - /* - * RFC 5246 4.7. digitally-signed element needs SignatureAndHashAlgorithm from TLS 1.2 - */ - SignatureAndHashAlgorithm signatureAndHashAlgorithm = TlsUtilities.GetSignatureAndHashAlgorithm( - Context, signerCredentials); - - byte[] hash; - if (signatureAndHashAlgorithm == null) - { - hash = mSecurityParameters.SessionHash; - } - else - { - hash = prepareFinishHash.GetFinalHash(signatureAndHashAlgorithm.Hash); - } - - byte[] signature = signerCredentials.GenerateCertificateSignature(hash); - DigitallySigned certificateVerify = new DigitallySigned(signatureAndHashAlgorithm, signature); - SendCertificateVerifyMessage(certificateVerify); - - this.mConnectionState = CS_CERTIFICATE_VERIFY; - } - - SendChangeCipherSpecMessage(); - SendFinishedMessage(); - break; - } - default: - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - - this.mConnectionState = CS_CLIENT_FINISHED; - break; - } - case HandshakeType.server_key_exchange: - { - switch (this.mConnectionState) - { - case CS_SERVER_HELLO: - case CS_SERVER_SUPPLEMENTAL_DATA: - case CS_SERVER_CERTIFICATE: - case CS_CERTIFICATE_STATUS: - { - if (mConnectionState < CS_SERVER_SUPPLEMENTAL_DATA) - { - HandleSupplementalData(null); - } - - if (mConnectionState < CS_SERVER_CERTIFICATE) - { - // There was no server certificate message; check it's OK - this.mKeyExchange.SkipServerCredentials(); - this.mAuthentication = null; - } - - this.mKeyExchange.ProcessServerKeyExchange(buf); - - AssertEmpty(buf); - break; - } - default: - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - - this.mConnectionState = CS_SERVER_KEY_EXCHANGE; - break; - } - case HandshakeType.certificate_request: - { - switch (this.mConnectionState) - { - case CS_SERVER_CERTIFICATE: - case CS_CERTIFICATE_STATUS: - case CS_SERVER_KEY_EXCHANGE: - { - if (this.mConnectionState != CS_SERVER_KEY_EXCHANGE) - { - // There was no server key exchange message; check it's OK - this.mKeyExchange.SkipServerKeyExchange(); - } - - if (this.mAuthentication == null) - { - /* - * RFC 2246 7.4.4. It is a fatal handshake_failure alert for an anonymous server - * to request client identification. - */ - throw new TlsFatalAlert(AlertDescription.handshake_failure); - } - - this.mCertificateRequest = CertificateRequest.Parse(Context, buf); - - AssertEmpty(buf); - - this.mKeyExchange.ValidateCertificateRequest(this.mCertificateRequest); - - /* - * TODO Give the client a chance to immediately select the CertificateVerify hash - * algorithm here to avoid tracking the other hash algorithms unnecessarily? - */ - TlsUtilities.TrackHashAlgorithms(this.mRecordStream.HandshakeHash, - this.mCertificateRequest.SupportedSignatureAlgorithms); - - break; - } - default: - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - - this.mConnectionState = CS_CERTIFICATE_REQUEST; - break; - } - case HandshakeType.session_ticket: - { - switch (this.mConnectionState) - { - case CS_CLIENT_FINISHED: - { - if (!this.mExpectSessionTicket) - { - /* - * RFC 5077 3.3. This message MUST NOT be sent if the server did not include a - * SessionTicket extension in the ServerHello. - */ - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - - /* - * RFC 5077 3.4. If the client receives a session ticket from the server, then it - * discards any Session ID that was sent in the ServerHello. - */ - InvalidateSession(); - - ReceiveNewSessionTicketMessage(buf); - break; - } - default: - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - - this.mConnectionState = CS_SERVER_SESSION_TICKET; - break; - } - case HandshakeType.hello_request: - { - AssertEmpty(buf); - - /* - * RFC 2246 7.4.1.1 Hello request This message will be ignored by the client if the - * client is currently negotiating a session. This message may be ignored by the client - * if it does not wish to renegotiate a session, or the client may, if it wishes, - * respond with a no_renegotiation alert. - */ - if (this.mConnectionState == CS_END) - { - RefuseRenegotiation(); - } - break; - } - case HandshakeType.client_hello: - case HandshakeType.client_key_exchange: - case HandshakeType.certificate_verify: - case HandshakeType.hello_verify_request: - default: - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - } - - protected virtual void HandleSupplementalData(IList serverSupplementalData) - { - this.mTlsClient.ProcessServerSupplementalData(serverSupplementalData); - this.mConnectionState = CS_SERVER_SUPPLEMENTAL_DATA; - - this.mKeyExchange = mTlsClient.GetKeyExchange(); - this.mKeyExchange.Init(Context); - } - - protected virtual void ReceiveNewSessionTicketMessage(MemoryStream buf) - { - NewSessionTicket newSessionTicket = NewSessionTicket.Parse(buf); - - AssertEmpty(buf); - - mTlsClient.NotifyNewSessionTicket(newSessionTicket); - } - - protected virtual void ReceiveServerHelloMessage(MemoryStream buf) - { - { - ProtocolVersion server_version = TlsUtilities.ReadVersion(buf); - if (server_version.IsDtls) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - - // Check that this matches what the server is Sending in the record layer - if (!server_version.Equals(this.mRecordStream.ReadVersion)) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - - ProtocolVersion client_version = Context.ClientVersion; - if (!server_version.IsEqualOrEarlierVersionOf(client_version)) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - - this.mRecordStream.SetWriteVersion(server_version); - ContextAdmin.SetServerVersion(server_version); - this.mTlsClient.NotifyServerVersion(server_version); - } - - /* - * Read the server random - */ - this.mSecurityParameters.serverRandom = TlsUtilities.ReadFully(32, buf); - - this.mSelectedSessionID = TlsUtilities.ReadOpaque8(buf); - if (this.mSelectedSessionID.Length > 32) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - this.mTlsClient.NotifySessionID(this.mSelectedSessionID); - this.mResumedSession = this.mSelectedSessionID.Length > 0 && this.mTlsSession != null - && Arrays.AreEqual(this.mSelectedSessionID, this.mTlsSession.SessionID); - - /* - * Find out which CipherSuite the server has chosen and check that it was one of the offered - * ones, and is a valid selection for the negotiated version. - */ - int selectedCipherSuite = TlsUtilities.ReadUint16(buf); - if (!Arrays.Contains(this.mOfferedCipherSuites, selectedCipherSuite) - || selectedCipherSuite == CipherSuite.TLS_NULL_WITH_NULL_NULL - || CipherSuite.IsScsv(selectedCipherSuite) - || !TlsUtilities.IsValidCipherSuiteForVersion(selectedCipherSuite, Context.ServerVersion)) - { - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - this.mTlsClient.NotifySelectedCipherSuite(selectedCipherSuite); - - /* - * Find out which CompressionMethod the server has chosen and check that it was one of the - * offered ones. - */ - byte selectedCompressionMethod = TlsUtilities.ReadUint8(buf); - if (!Arrays.Contains(this.mOfferedCompressionMethods, selectedCompressionMethod)) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - this.mTlsClient.NotifySelectedCompressionMethod(selectedCompressionMethod); - - /* - * RFC3546 2.2 The extended server hello message format MAY be sent in place of the server - * hello message when the client has requested extended functionality via the extended - * client hello message specified in Section 2.1. ... Note that the extended server hello - * message is only sent in response to an extended client hello message. This prevents the - * possibility that the extended server hello message could "break" existing TLS 1.0 - * clients. - */ - this.mServerExtensions = ReadExtensions(buf); - - /* - * RFC 3546 2.2 Note that the extended server hello message is only sent in response to an - * extended client hello message. - * - * However, see RFC 5746 exception below. We always include the SCSV, so an Extended Server - * Hello is always allowed. - */ - if (this.mServerExtensions != null) - { - foreach (int extType in this.mServerExtensions.Keys) - { - /* - * RFC 5746 3.6. Note that Sending a "renegotiation_info" extension in response to a - * ClientHello containing only the SCSV is an explicit exception to the prohibition - * in RFC 5246, Section 7.4.1.4, on the server Sending unsolicited extensions and is - * only allowed because the client is signaling its willingness to receive the - * extension via the TLS_EMPTY_RENEGOTIATION_INFO_SCSV SCSV. - */ - if (extType == ExtensionType.renegotiation_info) - continue; - - /* - * RFC 5246 7.4.1.4 An extension type MUST NOT appear in the ServerHello unless the - * same extension type appeared in the corresponding ClientHello. If a client - * receives an extension type in ServerHello that it did not request in the - * associated ClientHello, it MUST abort the handshake with an unsupported_extension - * fatal alert. - */ - if (null == TlsUtilities.GetExtensionData(this.mClientExtensions, extType)) - throw new TlsFatalAlert(AlertDescription.unsupported_extension); - - /* - * RFC 3546 2.3. If [...] the older session is resumed, then the server MUST ignore - * extensions appearing in the client hello, and Send a server hello containing no - * extensions[.] - */ - if (this.mResumedSession) - { - // TODO[compat-gnutls] GnuTLS test server Sends server extensions e.g. ec_point_formats - // TODO[compat-openssl] OpenSSL test server Sends server extensions e.g. ec_point_formats - // TODO[compat-polarssl] PolarSSL test server Sends server extensions e.g. ec_point_formats - // throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - } - } - - /* - * RFC 5746 3.4. Client Behavior: Initial Handshake - */ - { - /* - * When a ServerHello is received, the client MUST check if it includes the - * "renegotiation_info" extension: - */ - byte[] renegExtData = TlsUtilities.GetExtensionData(this.mServerExtensions, ExtensionType.renegotiation_info); - if (renegExtData != null) - { - /* - * If the extension is present, set the secure_renegotiation flag to TRUE. The - * client MUST then verify that the length of the "renegotiated_connection" - * field is zero, and if it is not, MUST abort the handshake (by Sending a fatal - * handshake_failure alert). - */ - this.mSecureRenegotiation = true; - - if (!Arrays.ConstantTimeAreEqual(renegExtData, CreateRenegotiationInfo(TlsUtilities.EmptyBytes))) - throw new TlsFatalAlert(AlertDescription.handshake_failure); - } - } - - // TODO[compat-gnutls] GnuTLS test server fails to Send renegotiation_info extension when resuming - this.mTlsClient.NotifySecureRenegotiation(this.mSecureRenegotiation); - - IDictionary sessionClientExtensions = mClientExtensions, sessionServerExtensions = mServerExtensions; - if (this.mResumedSession) - { - if (selectedCipherSuite != this.mSessionParameters.CipherSuite - || selectedCompressionMethod != this.mSessionParameters.CompressionAlgorithm) - { - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - - sessionClientExtensions = null; - sessionServerExtensions = this.mSessionParameters.ReadServerExtensions(); - } - - this.mSecurityParameters.cipherSuite = selectedCipherSuite; - this.mSecurityParameters.compressionAlgorithm = selectedCompressionMethod; - - if (sessionServerExtensions != null) - { - { - /* - * RFC 7366 3. If a server receives an encrypt-then-MAC request extension from a client - * and then selects a stream or Authenticated Encryption with Associated Data (AEAD) - * ciphersuite, it MUST NOT send an encrypt-then-MAC response extension back to the - * client. - */ - bool serverSentEncryptThenMAC = TlsExtensionsUtilities.HasEncryptThenMacExtension(sessionServerExtensions); - if (serverSentEncryptThenMAC && !TlsUtilities.IsBlockCipherSuite(selectedCipherSuite)) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - - this.mSecurityParameters.encryptThenMac = serverSentEncryptThenMAC; - } - - this.mSecurityParameters.extendedMasterSecret = TlsExtensionsUtilities.HasExtendedMasterSecretExtension(sessionServerExtensions); - - this.mSecurityParameters.maxFragmentLength = ProcessMaxFragmentLengthExtension(sessionClientExtensions, - sessionServerExtensions, AlertDescription.illegal_parameter); - - this.mSecurityParameters.truncatedHMac = TlsExtensionsUtilities.HasTruncatedHMacExtension(sessionServerExtensions); - - /* - * TODO It's surprising that there's no provision to allow a 'fresh' CertificateStatus to be sent in - * a session resumption handshake. - */ - this.mAllowCertificateStatus = !this.mResumedSession - && TlsUtilities.HasExpectedEmptyExtensionData(sessionServerExtensions, ExtensionType.status_request, - AlertDescription.illegal_parameter); - - this.mExpectSessionTicket = !this.mResumedSession - && TlsUtilities.HasExpectedEmptyExtensionData(sessionServerExtensions, ExtensionType.session_ticket, - AlertDescription.illegal_parameter); - } - - /* - * TODO[session-hash] - * - * draft-ietf-tls-session-hash-04 4. Clients and servers SHOULD NOT accept handshakes - * that do not use the extended master secret [..]. (and see 5.2, 5.3) - */ - - if (sessionClientExtensions != null) - { - this.mTlsClient.ProcessServerExtensions(sessionServerExtensions); - } - - this.mSecurityParameters.prfAlgorithm = GetPrfAlgorithm(Context, this.mSecurityParameters.CipherSuite); - - /* - * RFC 5246 7.4.9. Any cipher suite which does not explicitly specify - * verify_data_length has a verify_data_length equal to 12. This includes all - * existing cipher suites. - */ - this.mSecurityParameters.verifyDataLength = 12; - } - - protected virtual void SendCertificateVerifyMessage(DigitallySigned certificateVerify) - { - HandshakeMessage message = new HandshakeMessage(HandshakeType.certificate_verify); - - certificateVerify.Encode(message); - - message.WriteToRecordStream(this); - } - - protected virtual void SendClientHelloMessage() - { - this.mRecordStream.SetWriteVersion(this.mTlsClient.ClientHelloRecordLayerVersion); - - ProtocolVersion client_version = this.mTlsClient.ClientVersion; - if (client_version.IsDtls) - throw new TlsFatalAlert(AlertDescription.internal_error); - - ContextAdmin.SetClientVersion(client_version); - - /* - * TODO RFC 5077 3.4. When presenting a ticket, the client MAY generate and include a - * Session ID in the TLS ClientHello. - */ - byte[] session_id = TlsUtilities.EmptyBytes; - if (this.mTlsSession != null) - { - session_id = this.mTlsSession.SessionID; - if (session_id == null || session_id.Length > 32) - { - session_id = TlsUtilities.EmptyBytes; - } - } - - bool fallback = this.mTlsClient.IsFallback; - - this.mOfferedCipherSuites = this.mTlsClient.GetCipherSuites(); - - this.mOfferedCompressionMethods = this.mTlsClient.GetCompressionMethods(); - - if (session_id.Length > 0 && this.mSessionParameters != null) - { - if (!Arrays.Contains(this.mOfferedCipherSuites, mSessionParameters.CipherSuite) - || !Arrays.Contains(this.mOfferedCompressionMethods, mSessionParameters.CompressionAlgorithm)) - { - session_id = TlsUtilities.EmptyBytes; - } - } - - this.mClientExtensions = this.mTlsClient.GetClientExtensions(); - - HandshakeMessage message = new HandshakeMessage(HandshakeType.client_hello); - - TlsUtilities.WriteVersion(client_version, message); - - message.Write(this.mSecurityParameters.ClientRandom); - - TlsUtilities.WriteOpaque8(session_id, message); - - // Cipher Suites (and SCSV) - { - /* - * RFC 5746 3.4. The client MUST include either an empty "renegotiation_info" extension, - * or the TLS_EMPTY_RENEGOTIATION_INFO_SCSV signaling cipher suite value in the - * ClientHello. Including both is NOT RECOMMENDED. - */ - byte[] renegExtData = TlsUtilities.GetExtensionData(mClientExtensions, ExtensionType.renegotiation_info); - bool noRenegExt = (null == renegExtData); - - bool noRenegScsv = !Arrays.Contains(mOfferedCipherSuites, CipherSuite.TLS_EMPTY_RENEGOTIATION_INFO_SCSV); - - if (noRenegExt && noRenegScsv) - { - // TODO Consider whether to default to a client extension instead - // this.mClientExtensions = TlsExtensionsUtilities.EnsureExtensionsInitialised(this.mClientExtensions); - // this.mClientExtensions[ExtensionType.renegotiation_info] = CreateRenegotiationInfo(TlsUtilities.EmptyBytes); - this.mOfferedCipherSuites = Arrays.Append(mOfferedCipherSuites, CipherSuite.TLS_EMPTY_RENEGOTIATION_INFO_SCSV); - } - - /* - * RFC 7507 4. If a client sends a ClientHello.client_version containing a lower value - * than the latest (highest-valued) version supported by the client, it SHOULD include - * the TLS_FALLBACK_SCSV cipher suite value in ClientHello.cipher_suites [..]. (The - * client SHOULD put TLS_FALLBACK_SCSV after all cipher suites that it actually intends - * to negotiate.) - */ - if (fallback && !Arrays.Contains(mOfferedCipherSuites, CipherSuite.TLS_FALLBACK_SCSV)) - { - this.mOfferedCipherSuites = Arrays.Append(mOfferedCipherSuites, CipherSuite.TLS_FALLBACK_SCSV); - } - - TlsUtilities.WriteUint16ArrayWithUint16Length(mOfferedCipherSuites, message); - } - - TlsUtilities.WriteUint8ArrayWithUint8Length(mOfferedCompressionMethods, message); - - if (mClientExtensions != null) - { - WriteExtensions(message, mClientExtensions); - } - - message.WriteToRecordStream(this); - } - - protected virtual void SendClientKeyExchangeMessage() - { - HandshakeMessage message = new HandshakeMessage(HandshakeType.client_key_exchange); - - this.mKeyExchange.GenerateClientKeyExchange(message); - - message.WriteToRecordStream(this); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsCompression.cs b/bc-sharp-crypto/src/crypto/tls/TlsCompression.cs deleted file mode 100644 index 177d64b..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsCompression.cs +++ /dev/null @@ -1,12 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public interface TlsCompression - { - Stream Compress(Stream output); - - Stream Decompress(Stream output); - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsContext.cs b/bc-sharp-crypto/src/crypto/tls/TlsContext.cs deleted file mode 100644 index d066723..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsContext.cs +++ /dev/null @@ -1,45 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Prng; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public interface TlsContext - { - IRandomGenerator NonceRandomGenerator { get; } - - SecureRandom SecureRandom { get; } - - SecurityParameters SecurityParameters { get; } - - bool IsServer { get; } - - ProtocolVersion ClientVersion { get; } - - ProtocolVersion ServerVersion { get; } - - /** - * Used to get the resumable session, if any, used by this connection. Only available after the - * handshake has successfully completed. - * - * @return A {@link TlsSession} representing the resumable session used by this connection, or - * null if no resumable session available. - * @see TlsPeer#NotifyHandshakeComplete() - */ - TlsSession ResumableSession { get; } - - object UserObject { get; set; } - - /** - * Export keying material according to RFC 5705: "Keying Material Exporters for TLS". - * - * @param asciiLabel indicates which application will use the exported keys. - * @param context_value allows the application using the exporter to mix its own data with the TLS PRF for - * the exporter output. - * @param length the number of bytes to generate - * @return a pseudorandom bit string of 'length' bytes generated from the master_secret. - */ - byte[] ExportKeyingMaterial(string asciiLabel, byte[] context_value, int length); - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsCredentials.cs b/bc-sharp-crypto/src/crypto/tls/TlsCredentials.cs deleted file mode 100644 index 5c5f1c0..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsCredentials.cs +++ /dev/null @@ -1,9 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public interface TlsCredentials - { - Certificate Certificate { get; } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsDHKeyExchange.cs b/bc-sharp-crypto/src/crypto/tls/TlsDHKeyExchange.cs deleted file mode 100644 index d179068..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsDHKeyExchange.cs +++ /dev/null @@ -1,259 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /// (D)TLS DH key exchange. - public class TlsDHKeyExchange - : AbstractTlsKeyExchange - { - protected TlsSigner mTlsSigner; - protected DHParameters mDHParameters; - - protected AsymmetricKeyParameter mServerPublicKey; - protected TlsAgreementCredentials mAgreementCredentials; - - protected DHPrivateKeyParameters mDHAgreePrivateKey; - protected DHPublicKeyParameters mDHAgreePublicKey; - - public TlsDHKeyExchange(int keyExchange, IList supportedSignatureAlgorithms, DHParameters dhParameters) - : base(keyExchange, supportedSignatureAlgorithms) - { - switch (keyExchange) - { - case KeyExchangeAlgorithm.DH_anon: - case KeyExchangeAlgorithm.DH_RSA: - case KeyExchangeAlgorithm.DH_DSS: - this.mTlsSigner = null; - break; - case KeyExchangeAlgorithm.DHE_RSA: - this.mTlsSigner = new TlsRsaSigner(); - break; - case KeyExchangeAlgorithm.DHE_DSS: - this.mTlsSigner = new TlsDssSigner(); - break; - default: - throw new InvalidOperationException("unsupported key exchange algorithm"); - } - - this.mDHParameters = dhParameters; - } - - public override void Init(TlsContext context) - { - base.Init(context); - - if (this.mTlsSigner != null) - { - this.mTlsSigner.Init(context); - } - } - - public override void SkipServerCredentials() - { - if (mKeyExchange != KeyExchangeAlgorithm.DH_anon) - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - - public override void ProcessServerCertificate(Certificate serverCertificate) - { - if (mKeyExchange == KeyExchangeAlgorithm.DH_anon) - throw new TlsFatalAlert(AlertDescription.unexpected_message); - if (serverCertificate.IsEmpty) - throw new TlsFatalAlert(AlertDescription.bad_certificate); - - X509CertificateStructure x509Cert = serverCertificate.GetCertificateAt(0); - - SubjectPublicKeyInfo keyInfo = x509Cert.SubjectPublicKeyInfo; - try - { - this.mServerPublicKey = PublicKeyFactory.CreateKey(keyInfo); - } - catch (Exception e) - { - throw new TlsFatalAlert(AlertDescription.unsupported_certificate, e); - } - - if (mTlsSigner == null) - { - try - { - this.mDHAgreePublicKey = TlsDHUtilities.ValidateDHPublicKey((DHPublicKeyParameters)this.mServerPublicKey); - this.mDHParameters = ValidateDHParameters(mDHAgreePublicKey.Parameters); - } - catch (InvalidCastException e) - { - throw new TlsFatalAlert(AlertDescription.certificate_unknown, e); - } - - TlsUtilities.ValidateKeyUsage(x509Cert, KeyUsage.KeyAgreement); - } - else - { - if (!mTlsSigner.IsValidPublicKey(this.mServerPublicKey)) - { - throw new TlsFatalAlert(AlertDescription.certificate_unknown); - } - - TlsUtilities.ValidateKeyUsage(x509Cert, KeyUsage.DigitalSignature); - } - - base.ProcessServerCertificate(serverCertificate); - } - - public override bool RequiresServerKeyExchange - { - get - { - switch (mKeyExchange) - { - case KeyExchangeAlgorithm.DH_anon: - case KeyExchangeAlgorithm.DHE_DSS: - case KeyExchangeAlgorithm.DHE_RSA: - return true; - default: - return false; - } - } - } - - public override byte[] GenerateServerKeyExchange() - { - if (!RequiresServerKeyExchange) - return null; - - // DH_anon is handled here, DHE_* in a subclass - - MemoryStream buf = new MemoryStream(); - this.mDHAgreePrivateKey = TlsDHUtilities.GenerateEphemeralServerKeyExchange(mContext.SecureRandom, - this.mDHParameters, buf); - return buf.ToArray(); - } - - public override void ProcessServerKeyExchange(Stream input) - { - if (!RequiresServerKeyExchange) - throw new TlsFatalAlert(AlertDescription.unexpected_message); - - // DH_anon is handled here, DHE_* in a subclass - - ServerDHParams dhParams = ServerDHParams.Parse(input); - - this.mDHAgreePublicKey = TlsDHUtilities.ValidateDHPublicKey(dhParams.PublicKey); - this.mDHParameters = ValidateDHParameters(mDHAgreePublicKey.Parameters); - } - - public override void ValidateCertificateRequest(CertificateRequest certificateRequest) - { - if (mKeyExchange == KeyExchangeAlgorithm.DH_anon) - throw new TlsFatalAlert(AlertDescription.handshake_failure); - - byte[] types = certificateRequest.CertificateTypes; - for (int i = 0; i < types.Length; ++i) - { - switch (types[i]) - { - case ClientCertificateType.rsa_sign: - case ClientCertificateType.dss_sign: - case ClientCertificateType.rsa_fixed_dh: - case ClientCertificateType.dss_fixed_dh: - case ClientCertificateType.ecdsa_sign: - break; - default: - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - } - } - - public override void ProcessClientCredentials(TlsCredentials clientCredentials) - { - if (mKeyExchange == KeyExchangeAlgorithm.DH_anon) - throw new TlsFatalAlert(AlertDescription.internal_error); - - if (clientCredentials is TlsAgreementCredentials) - { - // TODO Validate client cert has matching parameters (see 'areCompatibleParameters')? - - this.mAgreementCredentials = (TlsAgreementCredentials)clientCredentials; - } - else if (clientCredentials is TlsSignerCredentials) - { - // OK - } - else - { - throw new TlsFatalAlert(AlertDescription.internal_error); - } - } - - public override void GenerateClientKeyExchange(Stream output) - { - /* - * RFC 2246 7.4.7.2 If the client certificate already contains a suitable Diffie-Hellman - * key, then Yc is implicit and does not need to be sent again. In this case, the Client Key - * Exchange message will be sent, but will be empty. - */ - if (mAgreementCredentials == null) - { - this.mDHAgreePrivateKey = TlsDHUtilities.GenerateEphemeralClientKeyExchange(mContext.SecureRandom, - mDHParameters, output); - } - } - - public override void ProcessClientCertificate(Certificate clientCertificate) - { - if (mKeyExchange == KeyExchangeAlgorithm.DH_anon) - throw new TlsFatalAlert(AlertDescription.unexpected_message); - - // TODO Extract the public key - // TODO If the certificate is 'fixed', take the public key as dhAgreePublicKey - } - - public override void ProcessClientKeyExchange(Stream input) - { - if (mDHAgreePublicKey != null) - { - // For dss_fixed_dh and rsa_fixed_dh, the key arrived in the client certificate - return; - } - - BigInteger Yc = TlsDHUtilities.ReadDHParameter(input); - - this.mDHAgreePublicKey = TlsDHUtilities.ValidateDHPublicKey(new DHPublicKeyParameters(Yc, mDHParameters)); - } - - public override byte[] GeneratePremasterSecret() - { - if (mAgreementCredentials != null) - { - return mAgreementCredentials.GenerateAgreement(mDHAgreePublicKey); - } - - if (mDHAgreePrivateKey != null) - { - return TlsDHUtilities.CalculateDHBasicAgreement(mDHAgreePublicKey, mDHAgreePrivateKey); - } - - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - protected virtual int MinimumPrimeBits - { - get { return 1024; } - } - - protected virtual DHParameters ValidateDHParameters(DHParameters parameters) - { - if (parameters.P.BitLength < MinimumPrimeBits) - throw new TlsFatalAlert(AlertDescription.insufficient_security); - - return TlsDHUtilities.ValidateDHParameters(parameters); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsDHUtilities.cs b/bc-sharp-crypto/src/crypto/tls/TlsDHUtilities.cs deleted file mode 100644 index 6df61cb..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsDHUtilities.cs +++ /dev/null @@ -1,462 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Crypto.Agreement; -using Org.BouncyCastle.Crypto.Generators; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public abstract class TlsDHUtilities - { - internal static readonly BigInteger Two = BigInteger.Two; - - /* - * TODO[draft-ietf-tls-negotiated-ff-dhe-01] Move these groups to DHStandardGroups once reaches RFC - */ - private static BigInteger FromHex(String hex) - { - return new BigInteger(1, Hex.Decode(hex)); - } - - private static DHParameters FromSafeP(String hexP) - { - BigInteger p = FromHex(hexP), q = p.ShiftRight(1); - return new DHParameters(p, Two, q); - } - - private static readonly string draft_ffdhe2432_p = - "FFFFFFFFFFFFFFFFADF85458A2BB4A9AAFDC5620273D3CF1" - + "D8B9C583CE2D3695A9E13641146433FBCC939DCE249B3EF9" - + "7D2FE363630C75D8F681B202AEC4617AD3DF1ED5D5FD6561" - + "2433F51F5F066ED0856365553DED1AF3B557135E7F57C935" - + "984F0C70E0E68B77E2A689DAF3EFE8721DF158A136ADE735" - + "30ACCA4F483A797ABC0AB182B324FB61D108A94BB2C8E3FB" - + "B96ADAB760D7F4681D4F42A3DE394DF4AE56EDE76372BB19" - + "0B07A7C8EE0A6D709E02FCE1CDF7E2ECC03404CD28342F61" - + "9172FE9CE98583FF8E4F1232EEF28183C3FE3B1B4C6FAD73" - + "3BB5FCBC2EC22005C58EF1837D1683B2C6F34A26C1B2EFFA" - + "886B4238611FCFDCDE355B3B6519035BBC34F4DEF99C0238" - + "61B46FC9D6E6C9077AD91D2691F7F7EE598CB0FAC186D91C" - + "AEFE13098533C8B3FFFFFFFFFFFFFFFF"; - internal static readonly DHParameters draft_ffdhe2432 = FromSafeP(draft_ffdhe2432_p); - - private static readonly string draft_ffdhe3072_p = - "FFFFFFFFFFFFFFFFADF85458A2BB4A9AAFDC5620273D3CF1" - + "D8B9C583CE2D3695A9E13641146433FBCC939DCE249B3EF9" - + "7D2FE363630C75D8F681B202AEC4617AD3DF1ED5D5FD6561" - + "2433F51F5F066ED0856365553DED1AF3B557135E7F57C935" - + "984F0C70E0E68B77E2A689DAF3EFE8721DF158A136ADE735" - + "30ACCA4F483A797ABC0AB182B324FB61D108A94BB2C8E3FB" - + "B96ADAB760D7F4681D4F42A3DE394DF4AE56EDE76372BB19" - + "0B07A7C8EE0A6D709E02FCE1CDF7E2ECC03404CD28342F61" - + "9172FE9CE98583FF8E4F1232EEF28183C3FE3B1B4C6FAD73" - + "3BB5FCBC2EC22005C58EF1837D1683B2C6F34A26C1B2EFFA" - + "886B4238611FCFDCDE355B3B6519035BBC34F4DEF99C0238" - + "61B46FC9D6E6C9077AD91D2691F7F7EE598CB0FAC186D91C" - + "AEFE130985139270B4130C93BC437944F4FD4452E2D74DD3" - + "64F2E21E71F54BFF5CAE82AB9C9DF69EE86D2BC522363A0D" - + "ABC521979B0DEADA1DBF9A42D5C4484E0ABCD06BFA53DDEF" - + "3C1B20EE3FD59D7C25E41D2B66C62E37FFFFFFFFFFFFFFFF"; - internal static readonly DHParameters draft_ffdhe3072 = FromSafeP(draft_ffdhe3072_p); - - private static readonly string draft_ffdhe4096_p = - "FFFFFFFFFFFFFFFFADF85458A2BB4A9AAFDC5620273D3CF1" - + "D8B9C583CE2D3695A9E13641146433FBCC939DCE249B3EF9" - + "7D2FE363630C75D8F681B202AEC4617AD3DF1ED5D5FD6561" - + "2433F51F5F066ED0856365553DED1AF3B557135E7F57C935" - + "984F0C70E0E68B77E2A689DAF3EFE8721DF158A136ADE735" - + "30ACCA4F483A797ABC0AB182B324FB61D108A94BB2C8E3FB" - + "B96ADAB760D7F4681D4F42A3DE394DF4AE56EDE76372BB19" - + "0B07A7C8EE0A6D709E02FCE1CDF7E2ECC03404CD28342F61" - + "9172FE9CE98583FF8E4F1232EEF28183C3FE3B1B4C6FAD73" - + "3BB5FCBC2EC22005C58EF1837D1683B2C6F34A26C1B2EFFA" - + "886B4238611FCFDCDE355B3B6519035BBC34F4DEF99C0238" - + "61B46FC9D6E6C9077AD91D2691F7F7EE598CB0FAC186D91C" - + "AEFE130985139270B4130C93BC437944F4FD4452E2D74DD3" - + "64F2E21E71F54BFF5CAE82AB9C9DF69EE86D2BC522363A0D" - + "ABC521979B0DEADA1DBF9A42D5C4484E0ABCD06BFA53DDEF" - + "3C1B20EE3FD59D7C25E41D2B669E1EF16E6F52C3164DF4FB" - + "7930E9E4E58857B6AC7D5F42D69F6D187763CF1D55034004" - + "87F55BA57E31CC7A7135C886EFB4318AED6A1E012D9E6832" - + "A907600A918130C46DC778F971AD0038092999A333CB8B7A" - + "1A1DB93D7140003C2A4ECEA9F98D0ACC0A8291CDCEC97DCF" - + "8EC9B55A7F88A46B4DB5A851F44182E1C68A007E5E655F6A" - + "FFFFFFFFFFFFFFFF"; - internal static readonly DHParameters draft_ffdhe4096 = FromSafeP(draft_ffdhe4096_p); - - private static readonly string draft_ffdhe6144_p = - "FFFFFFFFFFFFFFFFADF85458A2BB4A9AAFDC5620273D3CF1" - + "D8B9C583CE2D3695A9E13641146433FBCC939DCE249B3EF9" - + "7D2FE363630C75D8F681B202AEC4617AD3DF1ED5D5FD6561" - + "2433F51F5F066ED0856365553DED1AF3B557135E7F57C935" - + "984F0C70E0E68B77E2A689DAF3EFE8721DF158A136ADE735" - + "30ACCA4F483A797ABC0AB182B324FB61D108A94BB2C8E3FB" - + "B96ADAB760D7F4681D4F42A3DE394DF4AE56EDE76372BB19" - + "0B07A7C8EE0A6D709E02FCE1CDF7E2ECC03404CD28342F61" - + "9172FE9CE98583FF8E4F1232EEF28183C3FE3B1B4C6FAD73" - + "3BB5FCBC2EC22005C58EF1837D1683B2C6F34A26C1B2EFFA" - + "886B4238611FCFDCDE355B3B6519035BBC34F4DEF99C0238" - + "61B46FC9D6E6C9077AD91D2691F7F7EE598CB0FAC186D91C" - + "AEFE130985139270B4130C93BC437944F4FD4452E2D74DD3" - + "64F2E21E71F54BFF5CAE82AB9C9DF69EE86D2BC522363A0D" - + "ABC521979B0DEADA1DBF9A42D5C4484E0ABCD06BFA53DDEF" - + "3C1B20EE3FD59D7C25E41D2B669E1EF16E6F52C3164DF4FB" - + "7930E9E4E58857B6AC7D5F42D69F6D187763CF1D55034004" - + "87F55BA57E31CC7A7135C886EFB4318AED6A1E012D9E6832" - + "A907600A918130C46DC778F971AD0038092999A333CB8B7A" - + "1A1DB93D7140003C2A4ECEA9F98D0ACC0A8291CDCEC97DCF" - + "8EC9B55A7F88A46B4DB5A851F44182E1C68A007E5E0DD902" - + "0BFD64B645036C7A4E677D2C38532A3A23BA4442CAF53EA6" - + "3BB454329B7624C8917BDD64B1C0FD4CB38E8C334C701C3A" - + "CDAD0657FCCFEC719B1F5C3E4E46041F388147FB4CFDB477" - + "A52471F7A9A96910B855322EDB6340D8A00EF092350511E3" - + "0ABEC1FFF9E3A26E7FB29F8C183023C3587E38DA0077D9B4" - + "763E4E4B94B2BBC194C6651E77CAF992EEAAC0232A281BF6" - + "B3A739C1226116820AE8DB5847A67CBEF9C9091B462D538C" - + "D72B03746AE77F5E62292C311562A846505DC82DB854338A" - + "E49F5235C95B91178CCF2DD5CACEF403EC9D1810C6272B04" - + "5B3B71F9DC6B80D63FDD4A8E9ADB1E6962A69526D43161C1" - + "A41D570D7938DAD4A40E329CD0E40E65FFFFFFFFFFFFFFFF"; - internal static readonly DHParameters draft_ffdhe6144 = FromSafeP(draft_ffdhe6144_p); - - private static readonly string draft_ffdhe8192_p = - "FFFFFFFFFFFFFFFFADF85458A2BB4A9AAFDC5620273D3CF1" - + "D8B9C583CE2D3695A9E13641146433FBCC939DCE249B3EF9" - + "7D2FE363630C75D8F681B202AEC4617AD3DF1ED5D5FD6561" - + "2433F51F5F066ED0856365553DED1AF3B557135E7F57C935" - + "984F0C70E0E68B77E2A689DAF3EFE8721DF158A136ADE735" - + "30ACCA4F483A797ABC0AB182B324FB61D108A94BB2C8E3FB" - + "B96ADAB760D7F4681D4F42A3DE394DF4AE56EDE76372BB19" - + "0B07A7C8EE0A6D709E02FCE1CDF7E2ECC03404CD28342F61" - + "9172FE9CE98583FF8E4F1232EEF28183C3FE3B1B4C6FAD73" - + "3BB5FCBC2EC22005C58EF1837D1683B2C6F34A26C1B2EFFA" - + "886B4238611FCFDCDE355B3B6519035BBC34F4DEF99C0238" - + "61B46FC9D6E6C9077AD91D2691F7F7EE598CB0FAC186D91C" - + "AEFE130985139270B4130C93BC437944F4FD4452E2D74DD3" - + "64F2E21E71F54BFF5CAE82AB9C9DF69EE86D2BC522363A0D" - + "ABC521979B0DEADA1DBF9A42D5C4484E0ABCD06BFA53DDEF" - + "3C1B20EE3FD59D7C25E41D2B669E1EF16E6F52C3164DF4FB" - + "7930E9E4E58857B6AC7D5F42D69F6D187763CF1D55034004" - + "87F55BA57E31CC7A7135C886EFB4318AED6A1E012D9E6832" - + "A907600A918130C46DC778F971AD0038092999A333CB8B7A" - + "1A1DB93D7140003C2A4ECEA9F98D0ACC0A8291CDCEC97DCF" - + "8EC9B55A7F88A46B4DB5A851F44182E1C68A007E5E0DD902" - + "0BFD64B645036C7A4E677D2C38532A3A23BA4442CAF53EA6" - + "3BB454329B7624C8917BDD64B1C0FD4CB38E8C334C701C3A" - + "CDAD0657FCCFEC719B1F5C3E4E46041F388147FB4CFDB477" - + "A52471F7A9A96910B855322EDB6340D8A00EF092350511E3" - + "0ABEC1FFF9E3A26E7FB29F8C183023C3587E38DA0077D9B4" - + "763E4E4B94B2BBC194C6651E77CAF992EEAAC0232A281BF6" - + "B3A739C1226116820AE8DB5847A67CBEF9C9091B462D538C" - + "D72B03746AE77F5E62292C311562A846505DC82DB854338A" - + "E49F5235C95B91178CCF2DD5CACEF403EC9D1810C6272B04" - + "5B3B71F9DC6B80D63FDD4A8E9ADB1E6962A69526D43161C1" - + "A41D570D7938DAD4A40E329CCFF46AAA36AD004CF600C838" - + "1E425A31D951AE64FDB23FCEC9509D43687FEB69EDD1CC5E" - + "0B8CC3BDF64B10EF86B63142A3AB8829555B2F747C932665" - + "CB2C0F1CC01BD70229388839D2AF05E454504AC78B758282" - + "2846C0BA35C35F5C59160CC046FD8251541FC68C9C86B022" - + "BB7099876A460E7451A8A93109703FEE1C217E6C3826E52C" - + "51AA691E0E423CFC99E9E31650C1217B624816CDAD9A95F9" - + "D5B8019488D9C0A0A1FE3075A577E23183F81D4A3F2FA457" - + "1EFC8CE0BA8A4FE8B6855DFE72B0A66EDED2FBABFBE58A30" - + "FAFABE1C5D71A87E2F741EF8C1FE86FEA6BBFDE530677F0D" - + "97D11D49F7A8443D0822E506A9F4614E011E2A94838FF88C" - + "D68C8BB7C5C6424CFFFFFFFFFFFFFFFF"; - internal static readonly DHParameters draft_ffdhe8192 = FromSafeP(draft_ffdhe8192_p); - - - public static void AddNegotiatedDheGroupsClientExtension(IDictionary extensions, byte[] dheGroups) - { - extensions[ExtensionType.negotiated_ff_dhe_groups] = CreateNegotiatedDheGroupsClientExtension(dheGroups); - } - - public static void AddNegotiatedDheGroupsServerExtension(IDictionary extensions, byte dheGroup) - { - extensions[ExtensionType.negotiated_ff_dhe_groups] = CreateNegotiatedDheGroupsServerExtension(dheGroup); - } - - public static byte[] GetNegotiatedDheGroupsClientExtension(IDictionary extensions) - { - byte[] extensionData = TlsUtilities.GetExtensionData(extensions, ExtensionType.negotiated_ff_dhe_groups); - return extensionData == null ? null : ReadNegotiatedDheGroupsClientExtension(extensionData); - } - - public static short GetNegotiatedDheGroupsServerExtension(IDictionary extensions) - { - byte[] extensionData = TlsUtilities.GetExtensionData(extensions, ExtensionType.negotiated_ff_dhe_groups); - return extensionData == null ? (short)-1 : (short)ReadNegotiatedDheGroupsServerExtension(extensionData); - } - - public static byte[] CreateNegotiatedDheGroupsClientExtension(byte[] dheGroups) - { - if (dheGroups == null || dheGroups.Length < 1 || dheGroups.Length > 255) - throw new TlsFatalAlert(AlertDescription.internal_error); - - return TlsUtilities.EncodeUint8ArrayWithUint8Length(dheGroups); - } - - public static byte[] CreateNegotiatedDheGroupsServerExtension(byte dheGroup) - { - return TlsUtilities.EncodeUint8(dheGroup); - } - - public static byte[] ReadNegotiatedDheGroupsClientExtension(byte[] extensionData) - { - byte[] dheGroups = TlsUtilities.DecodeUint8ArrayWithUint8Length(extensionData); - if (dheGroups.Length < 1) - throw new TlsFatalAlert(AlertDescription.decode_error); - return dheGroups; - } - - public static byte ReadNegotiatedDheGroupsServerExtension(byte[] extensionData) - { - return TlsUtilities.DecodeUint8(extensionData); - } - - public static DHParameters GetParametersForDHEGroup(short dheGroup) - { - switch (dheGroup) - { - case FiniteFieldDheGroup.ffdhe2432: - return draft_ffdhe2432; - case FiniteFieldDheGroup.ffdhe3072: - return draft_ffdhe3072; - case FiniteFieldDheGroup.ffdhe4096: - return draft_ffdhe4096; - case FiniteFieldDheGroup.ffdhe6144: - return draft_ffdhe6144; - case FiniteFieldDheGroup.ffdhe8192: - return draft_ffdhe8192; - default: - return null; - } - } - - public static bool ContainsDheCipherSuites(int[] cipherSuites) - { - for (int i = 0; i < cipherSuites.Length; ++i) - { - if (IsDheCipherSuite(cipherSuites[i])) - return true; - } - return false; - } - - public static bool IsDheCipherSuite(int cipherSuite) - { - switch (cipherSuite) - { - /* - * RFC 2246 - */ - case CipherSuite.TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA: - case CipherSuite.TLS_DHE_DSS_WITH_DES_CBC_SHA: - case CipherSuite.TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA: - case CipherSuite.TLS_DHE_RSA_WITH_DES_CBC_SHA: - case CipherSuite.TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA: - - /* - * RFC 3268 - */ - case CipherSuite.TLS_DHE_DSS_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_DHE_RSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_DHE_DSS_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_DHE_RSA_WITH_AES_256_CBC_SHA: - - /* - * RFC 5932 - */ - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256: - - /* - * RFC 4162 - */ - case CipherSuite.TLS_DHE_DSS_WITH_SEED_CBC_SHA: - case CipherSuite.TLS_DHE_RSA_WITH_SEED_CBC_SHA: - - /* - * RFC 4279 - */ - case CipherSuite.TLS_DHE_PSK_WITH_RC4_128_SHA: - case CipherSuite.TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_DHE_PSK_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_DHE_PSK_WITH_AES_256_CBC_SHA: - - /* - * RFC 4785 - */ - case CipherSuite.TLS_DHE_PSK_WITH_NULL_SHA: - - /* - * RFC 5246 - */ - case CipherSuite.TLS_DHE_DSS_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: - - /* - * RFC 5288 - */ - case CipherSuite.TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_DHE_DSS_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_AES_256_GCM_SHA384: - - /* - * RFC 5487 - */ - case CipherSuite.TLS_DHE_PSK_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_DHE_PSK_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_DHE_PSK_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DHE_PSK_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_DHE_PSK_WITH_NULL_SHA256: - case CipherSuite.TLS_DHE_PSK_WITH_NULL_SHA384: - - /* - * RFC 6367 - */ - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384: - - /* - * RFC 6655 - */ - case CipherSuite.TLS_DHE_RSA_WITH_AES_128_CCM: - case CipherSuite.TLS_DHE_RSA_WITH_AES_256_CCM: - case CipherSuite.TLS_DHE_RSA_WITH_AES_128_CCM_8: - case CipherSuite.TLS_DHE_RSA_WITH_AES_256_CCM_8: - case CipherSuite.TLS_DHE_PSK_WITH_AES_128_CCM: - case CipherSuite.TLS_DHE_PSK_WITH_AES_256_CCM: - case CipherSuite.TLS_PSK_DHE_WITH_AES_128_CCM_8: - case CipherSuite.TLS_PSK_DHE_WITH_AES_256_CCM_8: - - /* - * draft-ietf-tls-chacha20-poly1305-04 - */ - case CipherSuite.DRAFT_TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.DRAFT_TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256: - - /* - * draft-zauner-tls-aes-ocb-04 - */ - case CipherSuite.DRAFT_TLS_DHE_RSA_WITH_AES_128_OCB: - case CipherSuite.DRAFT_TLS_DHE_RSA_WITH_AES_256_OCB: - case CipherSuite.DRAFT_TLS_DHE_PSK_WITH_AES_128_OCB: - case CipherSuite.DRAFT_TLS_DHE_PSK_WITH_AES_256_OCB: - - return true; - - default: - return false; - } - } - - public static bool AreCompatibleParameters(DHParameters a, DHParameters b) - { - return a.P.Equals(b.P) && a.G.Equals(b.G) - && (a.Q == null || b.Q == null || a.Q.Equals(b.Q)); - } - - public static byte[] CalculateDHBasicAgreement(DHPublicKeyParameters publicKey, - DHPrivateKeyParameters privateKey) - { - DHBasicAgreement basicAgreement = new DHBasicAgreement(); - basicAgreement.Init(privateKey); - BigInteger agreementValue = basicAgreement.CalculateAgreement(publicKey); - - /* - * RFC 5246 8.1.2. Leading bytes of Z that contain all zero bits are stripped before it is - * used as the pre_master_secret. - */ - return BigIntegers.AsUnsignedByteArray(agreementValue); - } - - public static AsymmetricCipherKeyPair GenerateDHKeyPair(SecureRandom random, DHParameters dhParams) - { - DHBasicKeyPairGenerator dhGen = new DHBasicKeyPairGenerator(); - dhGen.Init(new DHKeyGenerationParameters(random, dhParams)); - return dhGen.GenerateKeyPair(); - } - - public static DHPrivateKeyParameters GenerateEphemeralClientKeyExchange(SecureRandom random, - DHParameters dhParams, Stream output) - { - AsymmetricCipherKeyPair kp = GenerateDHKeyPair(random, dhParams); - - DHPublicKeyParameters dhPublic = (DHPublicKeyParameters)kp.Public; - WriteDHParameter(dhPublic.Y, output); - - return (DHPrivateKeyParameters)kp.Private; - } - - public static DHPrivateKeyParameters GenerateEphemeralServerKeyExchange(SecureRandom random, - DHParameters dhParams, Stream output) - { - AsymmetricCipherKeyPair kp = GenerateDHKeyPair(random, dhParams); - - DHPublicKeyParameters dhPublic = (DHPublicKeyParameters)kp.Public; - new ServerDHParams(dhPublic).Encode(output); - - return (DHPrivateKeyParameters)kp.Private; - } - - public static DHParameters ValidateDHParameters(DHParameters parameters) - { - BigInteger p = parameters.P; - BigInteger g = parameters.G; - - if (!p.IsProbablePrime(2)) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - if (g.CompareTo(Two) < 0 || g.CompareTo(p.Subtract(Two)) > 0) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - - - return parameters; - } - - public static DHPublicKeyParameters ValidateDHPublicKey(DHPublicKeyParameters key) - { - DHParameters parameters = ValidateDHParameters(key.Parameters); - - BigInteger Y = key.Y; - if (Y.CompareTo(Two) < 0 || Y.CompareTo(parameters.P.Subtract(Two)) > 0) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - - // TODO See RFC 2631 for more discussion of Diffie-Hellman validation - - return key; - } - - public static BigInteger ReadDHParameter(Stream input) - { - return new BigInteger(1, TlsUtilities.ReadOpaque16(input)); - } - - public static void WriteDHParameter(BigInteger x, Stream output) - { - TlsUtilities.WriteOpaque16(BigIntegers.AsUnsignedByteArray(x), output); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsDeflateCompression.cs b/bc-sharp-crypto/src/crypto/tls/TlsDeflateCompression.cs deleted file mode 100644 index 9e11529..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsDeflateCompression.cs +++ /dev/null @@ -1,68 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities.Zlib; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class TlsDeflateCompression : TlsCompression - { - public const int LEVEL_NONE = JZlib.Z_NO_COMPRESSION; - public const int LEVEL_FASTEST = JZlib.Z_BEST_SPEED; - public const int LEVEL_SMALLEST = JZlib.Z_BEST_COMPRESSION; - public const int LEVEL_DEFAULT = JZlib.Z_DEFAULT_COMPRESSION; - - protected readonly ZStream zIn, zOut; - - public TlsDeflateCompression() - : this(LEVEL_DEFAULT) - { - } - - public TlsDeflateCompression(int level) - { - this.zIn = new ZStream(); - this.zIn.inflateInit(); - - this.zOut = new ZStream(); - this.zOut.deflateInit(level); - } - - public virtual Stream Compress(Stream output) - { - return new DeflateOutputStream(output, zOut, true); - } - - public virtual Stream Decompress(Stream output) - { - return new DeflateOutputStream(output, zIn, false); - } - - protected class DeflateOutputStream : ZOutputStream - { - public DeflateOutputStream(Stream output, ZStream z, bool compress) - : base(output, z) - { - this.compress = compress; - - /* - * See discussion at http://www.bolet.org/~pornin/deflate-flush.html . - */ - this.FlushMode = JZlib.Z_SYNC_FLUSH; - } - - public override void Flush() - { - /* - * TODO The inflateSyncPoint doesn't appear to work the way I hoped at the moment. - * In any case, we may like to accept PARTIAL_FLUSH input, not just SYNC_FLUSH. - * It's not clear how to check this in the Inflater. - */ - //if (!this.compress && (z == null || z.istate == null || z.istate.inflateSyncPoint(z) <= 0)) - //{ - // throw new TlsFatalAlert(AlertDescription.decompression_failure); - //} - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsDheKeyExchange.cs b/bc-sharp-crypto/src/crypto/tls/TlsDheKeyExchange.cs deleted file mode 100644 index cdd6292..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsDheKeyExchange.cs +++ /dev/null @@ -1,94 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class TlsDheKeyExchange - : TlsDHKeyExchange - { - protected TlsSignerCredentials mServerCredentials = null; - - public TlsDheKeyExchange(int keyExchange, IList supportedSignatureAlgorithms, DHParameters dhParameters) - : base(keyExchange, supportedSignatureAlgorithms, dhParameters) - { - } - - public override void ProcessServerCredentials(TlsCredentials serverCredentials) - { - if (!(serverCredentials is TlsSignerCredentials)) - throw new TlsFatalAlert(AlertDescription.internal_error); - - ProcessServerCertificate(serverCredentials.Certificate); - - this.mServerCredentials = (TlsSignerCredentials)serverCredentials; - } - - public override byte[] GenerateServerKeyExchange() - { - if (this.mDHParameters == null) - throw new TlsFatalAlert(AlertDescription.internal_error); - - DigestInputBuffer buf = new DigestInputBuffer(); - - this.mDHAgreePrivateKey = TlsDHUtilities.GenerateEphemeralServerKeyExchange(mContext.SecureRandom, - this.mDHParameters, buf); - - /* - * RFC 5246 4.7. digitally-signed element needs SignatureAndHashAlgorithm from TLS 1.2 - */ - SignatureAndHashAlgorithm signatureAndHashAlgorithm = TlsUtilities.GetSignatureAndHashAlgorithm( - mContext, mServerCredentials); - - IDigest d = TlsUtilities.CreateHash(signatureAndHashAlgorithm); - - SecurityParameters securityParameters = mContext.SecurityParameters; - d.BlockUpdate(securityParameters.clientRandom, 0, securityParameters.clientRandom.Length); - d.BlockUpdate(securityParameters.serverRandom, 0, securityParameters.serverRandom.Length); - buf.UpdateDigest(d); - - byte[] hash = DigestUtilities.DoFinal(d); - - byte[] signature = mServerCredentials.GenerateCertificateSignature(hash); - - DigitallySigned signed_params = new DigitallySigned(signatureAndHashAlgorithm, signature); - signed_params.Encode(buf); - - return buf.ToArray(); - } - - public override void ProcessServerKeyExchange(Stream input) - { - SecurityParameters securityParameters = mContext.SecurityParameters; - - SignerInputBuffer buf = new SignerInputBuffer(); - Stream teeIn = new TeeInputStream(input, buf); - - ServerDHParams dhParams = ServerDHParams.Parse(teeIn); - - DigitallySigned signed_params = ParseSignature(input); - - ISigner signer = InitVerifyer(mTlsSigner, signed_params.Algorithm, securityParameters); - buf.UpdateSigner(signer); - if (!signer.VerifySignature(signed_params.Signature)) - throw new TlsFatalAlert(AlertDescription.decrypt_error); - - this.mDHAgreePublicKey = TlsDHUtilities.ValidateDHPublicKey(dhParams.PublicKey); - this.mDHParameters = ValidateDHParameters(mDHAgreePublicKey.Parameters); - } - - protected virtual ISigner InitVerifyer(TlsSigner tlsSigner, SignatureAndHashAlgorithm algorithm, - SecurityParameters securityParameters) - { - ISigner signer = tlsSigner.CreateVerifyer(algorithm, this.mServerPublicKey); - signer.BlockUpdate(securityParameters.clientRandom, 0, securityParameters.clientRandom.Length); - signer.BlockUpdate(securityParameters.serverRandom, 0, securityParameters.serverRandom.Length); - return signer; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsDsaSigner.cs b/bc-sharp-crypto/src/crypto/tls/TlsDsaSigner.cs deleted file mode 100644 index f0c1e94..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsDsaSigner.cs +++ /dev/null @@ -1,82 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Signers; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public abstract class TlsDsaSigner - : AbstractTlsSigner - { - public override byte[] GenerateRawSignature(SignatureAndHashAlgorithm algorithm, - AsymmetricKeyParameter privateKey, byte[] hash) - { - ISigner signer = MakeSigner(algorithm, true, true, - new ParametersWithRandom(privateKey, this.mContext.SecureRandom)); - if (algorithm == null) - { - // Note: Only use the SHA1 part of the (MD5/SHA1) hash - signer.BlockUpdate(hash, 16, 20); - } - else - { - signer.BlockUpdate(hash, 0, hash.Length); - } - return signer.GenerateSignature(); - } - - public override bool VerifyRawSignature(SignatureAndHashAlgorithm algorithm, byte[] sigBytes, - AsymmetricKeyParameter publicKey, byte[] hash) - { - ISigner signer = MakeSigner(algorithm, true, false, publicKey); - if (algorithm == null) - { - // Note: Only use the SHA1 part of the (MD5/SHA1) hash - signer.BlockUpdate(hash, 16, 20); - } - else - { - signer.BlockUpdate(hash, 0, hash.Length); - } - return signer.VerifySignature(sigBytes); - } - - public override ISigner CreateSigner(SignatureAndHashAlgorithm algorithm, AsymmetricKeyParameter privateKey) - { - return MakeSigner(algorithm, false, true, privateKey); - } - - public override ISigner CreateVerifyer(SignatureAndHashAlgorithm algorithm, AsymmetricKeyParameter publicKey) - { - return MakeSigner(algorithm, false, false, publicKey); - } - - protected virtual ICipherParameters MakeInitParameters(bool forSigning, ICipherParameters cp) - { - return cp; - } - - protected virtual ISigner MakeSigner(SignatureAndHashAlgorithm algorithm, bool raw, bool forSigning, - ICipherParameters cp) - { - if ((algorithm != null) != TlsUtilities.IsTlsV12(mContext)) - throw new InvalidOperationException(); - - if (algorithm != null && algorithm.Signature != SignatureAlgorithm) - throw new InvalidOperationException(); - - byte hashAlgorithm = algorithm == null ? HashAlgorithm.sha1 : algorithm.Hash; - IDigest d = raw ? new NullDigest() : TlsUtilities.CreateHash(hashAlgorithm); - - ISigner s = new DsaDigestSigner(CreateDsaImpl(hashAlgorithm), d); - s.Init(forSigning, MakeInitParameters(forSigning, cp)); - return s; - } - - protected abstract byte SignatureAlgorithm { get; } - - protected abstract IDsa CreateDsaImpl(byte hashAlgorithm); - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsDssSigner.cs b/bc-sharp-crypto/src/crypto/tls/TlsDssSigner.cs deleted file mode 100644 index 707ef38..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsDssSigner.cs +++ /dev/null @@ -1,26 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Signers; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class TlsDssSigner - : TlsDsaSigner - { - public override bool IsValidPublicKey(AsymmetricKeyParameter publicKey) - { - return publicKey is DsaPublicKeyParameters; - } - - protected override IDsa CreateDsaImpl(byte hashAlgorithm) - { - return new DsaSigner(new HMacDsaKCalculator(TlsUtilities.CreateHash(hashAlgorithm))); - } - - protected override byte SignatureAlgorithm - { - get { return Tls.SignatureAlgorithm.dsa; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsECDHKeyExchange.cs b/bc-sharp-crypto/src/crypto/tls/TlsECDHKeyExchange.cs deleted file mode 100644 index c508fb9..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsECDHKeyExchange.cs +++ /dev/null @@ -1,252 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /// (D)TLS ECDH key exchange (see RFC 4492). - public class TlsECDHKeyExchange - : AbstractTlsKeyExchange - { - protected TlsSigner mTlsSigner; - protected int[] mNamedCurves; - protected byte[] mClientECPointFormats, mServerECPointFormats; - - protected AsymmetricKeyParameter mServerPublicKey; - protected TlsAgreementCredentials mAgreementCredentials; - - protected ECPrivateKeyParameters mECAgreePrivateKey; - protected ECPublicKeyParameters mECAgreePublicKey; - - public TlsECDHKeyExchange(int keyExchange, IList supportedSignatureAlgorithms, int[] namedCurves, - byte[] clientECPointFormats, byte[] serverECPointFormats) - : base(keyExchange, supportedSignatureAlgorithms) - { - switch (keyExchange) - { - case KeyExchangeAlgorithm.ECDHE_RSA: - this.mTlsSigner = new TlsRsaSigner(); - break; - case KeyExchangeAlgorithm.ECDHE_ECDSA: - this.mTlsSigner = new TlsECDsaSigner(); - break; - case KeyExchangeAlgorithm.ECDH_anon: - case KeyExchangeAlgorithm.ECDH_RSA: - case KeyExchangeAlgorithm.ECDH_ECDSA: - this.mTlsSigner = null; - break; - default: - throw new InvalidOperationException("unsupported key exchange algorithm"); - } - - this.mNamedCurves = namedCurves; - this.mClientECPointFormats = clientECPointFormats; - this.mServerECPointFormats = serverECPointFormats; - } - - public override void Init(TlsContext context) - { - base.Init(context); - - if (this.mTlsSigner != null) - { - this.mTlsSigner.Init(context); - } - } - - public override void SkipServerCredentials() - { - if (mKeyExchange != KeyExchangeAlgorithm.ECDH_anon) - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - - public override void ProcessServerCertificate(Certificate serverCertificate) - { - if (mKeyExchange == KeyExchangeAlgorithm.ECDH_anon) - throw new TlsFatalAlert(AlertDescription.unexpected_message); - if (serverCertificate.IsEmpty) - throw new TlsFatalAlert(AlertDescription.bad_certificate); - - X509CertificateStructure x509Cert = serverCertificate.GetCertificateAt(0); - - SubjectPublicKeyInfo keyInfo = x509Cert.SubjectPublicKeyInfo; - try - { - this.mServerPublicKey = PublicKeyFactory.CreateKey(keyInfo); - } - catch (Exception e) - { - throw new TlsFatalAlert(AlertDescription.unsupported_certificate, e); - } - - if (mTlsSigner == null) - { - try - { - this.mECAgreePublicKey = TlsEccUtilities.ValidateECPublicKey((ECPublicKeyParameters) this.mServerPublicKey); - } - catch (InvalidCastException e) - { - throw new TlsFatalAlert(AlertDescription.certificate_unknown, e); - } - - TlsUtilities.ValidateKeyUsage(x509Cert, KeyUsage.KeyAgreement); - } - else - { - if (!mTlsSigner.IsValidPublicKey(this.mServerPublicKey)) - throw new TlsFatalAlert(AlertDescription.certificate_unknown); - - TlsUtilities.ValidateKeyUsage(x509Cert, KeyUsage.DigitalSignature); - } - - base.ProcessServerCertificate(serverCertificate); - } - - public override bool RequiresServerKeyExchange - { - get - { - switch (mKeyExchange) - { - case KeyExchangeAlgorithm.ECDH_anon: - case KeyExchangeAlgorithm.ECDHE_ECDSA: - case KeyExchangeAlgorithm.ECDHE_RSA: - return true; - default: - return false; - } - } - } - - public override byte[] GenerateServerKeyExchange() - { - if (!RequiresServerKeyExchange) - return null; - - // ECDH_anon is handled here, ECDHE_* in a subclass - - MemoryStream buf = new MemoryStream(); - this.mECAgreePrivateKey = TlsEccUtilities.GenerateEphemeralServerKeyExchange(mContext.SecureRandom, mNamedCurves, - mClientECPointFormats, buf); - return buf.ToArray(); - } - - public override void ProcessServerKeyExchange(Stream input) - { - if (!RequiresServerKeyExchange) - throw new TlsFatalAlert(AlertDescription.unexpected_message); - - // ECDH_anon is handled here, ECDHE_* in a subclass - - ECDomainParameters curve_params = TlsEccUtilities.ReadECParameters(mNamedCurves, mClientECPointFormats, input); - - byte[] point = TlsUtilities.ReadOpaque8(input); - - this.mECAgreePublicKey = TlsEccUtilities.ValidateECPublicKey(TlsEccUtilities.DeserializeECPublicKey( - mClientECPointFormats, curve_params, point)); - } - - public override void ValidateCertificateRequest(CertificateRequest certificateRequest) - { - if (mKeyExchange == KeyExchangeAlgorithm.ECDH_anon) - throw new TlsFatalAlert(AlertDescription.handshake_failure); - - /* - * RFC 4492 3. [...] The ECDSA_fixed_ECDH and RSA_fixed_ECDH mechanisms are usable with - * ECDH_ECDSA and ECDH_RSA. Their use with ECDHE_ECDSA and ECDHE_RSA is prohibited because - * the use of a long-term ECDH client key would jeopardize the forward secrecy property of - * these algorithms. - */ - byte[] types = certificateRequest.CertificateTypes; - for (int i = 0; i < types.Length; ++i) - { - switch (types[i]) - { - case ClientCertificateType.rsa_sign: - case ClientCertificateType.dss_sign: - case ClientCertificateType.ecdsa_sign: - case ClientCertificateType.rsa_fixed_ecdh: - case ClientCertificateType.ecdsa_fixed_ecdh: - break; - default: - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - } - } - - public override void ProcessClientCredentials(TlsCredentials clientCredentials) - { - if (mKeyExchange == KeyExchangeAlgorithm.ECDH_anon) - throw new TlsFatalAlert(AlertDescription.internal_error); - - if (clientCredentials is TlsAgreementCredentials) - { - // TODO Validate client cert has matching parameters (see 'TlsEccUtilities.AreOnSameCurve')? - - this.mAgreementCredentials = (TlsAgreementCredentials)clientCredentials; - } - else if (clientCredentials is TlsSignerCredentials) - { - // OK - } - else - { - throw new TlsFatalAlert(AlertDescription.internal_error); - } - } - - public override void GenerateClientKeyExchange(Stream output) - { - if (mAgreementCredentials == null) - { - this.mECAgreePrivateKey = TlsEccUtilities.GenerateEphemeralClientKeyExchange(mContext.SecureRandom, - mServerECPointFormats, mECAgreePublicKey.Parameters, output); - } - } - - public override void ProcessClientCertificate(Certificate clientCertificate) - { - if (mKeyExchange == KeyExchangeAlgorithm.ECDH_anon) - throw new TlsFatalAlert(AlertDescription.unexpected_message); - - // TODO Extract the public key - // TODO If the certificate is 'fixed', take the public key as mECAgreeClientPublicKey - } - - public override void ProcessClientKeyExchange(Stream input) - { - if (mECAgreePublicKey != null) - { - // For ecdsa_fixed_ecdh and rsa_fixed_ecdh, the key arrived in the client certificate - return; - } - - byte[] point = TlsUtilities.ReadOpaque8(input); - - ECDomainParameters curve_params = this.mECAgreePrivateKey.Parameters; - - this.mECAgreePublicKey = TlsEccUtilities.ValidateECPublicKey(TlsEccUtilities.DeserializeECPublicKey( - mServerECPointFormats, curve_params, point)); - } - - public override byte[] GeneratePremasterSecret() - { - if (mAgreementCredentials != null) - { - return mAgreementCredentials.GenerateAgreement(mECAgreePublicKey); - } - - if (mECAgreePrivateKey != null) - { - return TlsEccUtilities.CalculateECDHBasicAgreement(mECAgreePublicKey, mECAgreePrivateKey); - } - - throw new TlsFatalAlert(AlertDescription.internal_error); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsECDheKeyExchange.cs b/bc-sharp-crypto/src/crypto/tls/TlsECDheKeyExchange.cs deleted file mode 100644 index e0553b3..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsECDheKeyExchange.cs +++ /dev/null @@ -1,131 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math.EC; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /// (D)TLS ECDHE key exchange (see RFC 4492). - public class TlsECDheKeyExchange - : TlsECDHKeyExchange - { - protected TlsSignerCredentials mServerCredentials = null; - - public TlsECDheKeyExchange(int keyExchange, IList supportedSignatureAlgorithms, int[] namedCurves, - byte[] clientECPointFormats, byte[] serverECPointFormats) - : base(keyExchange, supportedSignatureAlgorithms, namedCurves, clientECPointFormats, serverECPointFormats) - { - } - - public override void ProcessServerCredentials(TlsCredentials serverCredentials) - { - if (!(serverCredentials is TlsSignerCredentials)) - throw new TlsFatalAlert(AlertDescription.internal_error); - - ProcessServerCertificate(serverCredentials.Certificate); - - this.mServerCredentials = (TlsSignerCredentials)serverCredentials; - } - - public override byte[] GenerateServerKeyExchange() - { - DigestInputBuffer buf = new DigestInputBuffer(); - - this.mECAgreePrivateKey = TlsEccUtilities.GenerateEphemeralServerKeyExchange(mContext.SecureRandom, mNamedCurves, - mClientECPointFormats, buf); - - /* - * RFC 5246 4.7. digitally-signed element needs SignatureAndHashAlgorithm from TLS 1.2 - */ - SignatureAndHashAlgorithm signatureAndHashAlgorithm = TlsUtilities.GetSignatureAndHashAlgorithm( - mContext, mServerCredentials); - - IDigest d = TlsUtilities.CreateHash(signatureAndHashAlgorithm); - - SecurityParameters securityParameters = mContext.SecurityParameters; - d.BlockUpdate(securityParameters.clientRandom, 0, securityParameters.clientRandom.Length); - d.BlockUpdate(securityParameters.serverRandom, 0, securityParameters.serverRandom.Length); - buf.UpdateDigest(d); - - byte[] hash = DigestUtilities.DoFinal(d); - - byte[] signature = mServerCredentials.GenerateCertificateSignature(hash); - - DigitallySigned signed_params = new DigitallySigned(signatureAndHashAlgorithm, signature); - signed_params.Encode(buf); - - return buf.ToArray(); - } - - public override void ProcessServerKeyExchange(Stream input) - { - SecurityParameters securityParameters = mContext.SecurityParameters; - - SignerInputBuffer buf = new SignerInputBuffer(); - Stream teeIn = new TeeInputStream(input, buf); - - ECDomainParameters curve_params = TlsEccUtilities.ReadECParameters(mNamedCurves, mClientECPointFormats, teeIn); - - byte[] point = TlsUtilities.ReadOpaque8(teeIn); - - DigitallySigned signed_params = ParseSignature(input); - - ISigner signer = InitVerifyer(mTlsSigner, signed_params.Algorithm, securityParameters); - buf.UpdateSigner(signer); - if (!signer.VerifySignature(signed_params.Signature)) - throw new TlsFatalAlert(AlertDescription.decrypt_error); - - this.mECAgreePublicKey = TlsEccUtilities.ValidateECPublicKey(TlsEccUtilities.DeserializeECPublicKey( - mClientECPointFormats, curve_params, point)); - } - - public override void ValidateCertificateRequest(CertificateRequest certificateRequest) - { - /* - * RFC 4492 3. [...] The ECDSA_fixed_ECDH and RSA_fixed_ECDH mechanisms are usable with - * ECDH_ECDSA and ECDH_RSA. Their use with ECDHE_ECDSA and ECDHE_RSA is prohibited because - * the use of a long-term ECDH client key would jeopardize the forward secrecy property of - * these algorithms. - */ - byte[] types = certificateRequest.CertificateTypes; - for (int i = 0; i < types.Length; ++i) - { - switch (types[i]) - { - case ClientCertificateType.rsa_sign: - case ClientCertificateType.dss_sign: - case ClientCertificateType.ecdsa_sign: - break; - default: - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - } - } - - public override void ProcessClientCredentials(TlsCredentials clientCredentials) - { - if (clientCredentials is TlsSignerCredentials) - { - // OK - } - else - { - throw new TlsFatalAlert(AlertDescription.internal_error); - } - } - - protected virtual ISigner InitVerifyer(TlsSigner tlsSigner, SignatureAndHashAlgorithm algorithm, - SecurityParameters securityParameters) - { - ISigner signer = tlsSigner.CreateVerifyer(algorithm, this.mServerPublicKey); - signer.BlockUpdate(securityParameters.clientRandom, 0, securityParameters.clientRandom.Length); - signer.BlockUpdate(securityParameters.serverRandom, 0, securityParameters.serverRandom.Length); - return signer; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsECDsaSigner.cs b/bc-sharp-crypto/src/crypto/tls/TlsECDsaSigner.cs deleted file mode 100644 index fa9d0b7..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsECDsaSigner.cs +++ /dev/null @@ -1,26 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Signers; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class TlsECDsaSigner - : TlsDsaSigner - { - public override bool IsValidPublicKey(AsymmetricKeyParameter publicKey) - { - return publicKey is ECPublicKeyParameters; - } - - protected override IDsa CreateDsaImpl(byte hashAlgorithm) - { - return new ECDsaSigner(new HMacDsaKCalculator(TlsUtilities.CreateHash(hashAlgorithm))); - } - - protected override byte SignatureAlgorithm - { - get { return Tls.SignatureAlgorithm.ecdsa; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsEccUtilities.cs b/bc-sharp-crypto/src/crypto/tls/TlsEccUtilities.cs deleted file mode 100644 index fb31e1b..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsEccUtilities.cs +++ /dev/null @@ -1,705 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Agreement; -using Org.BouncyCastle.Crypto.EC; -using Org.BouncyCastle.Crypto.Generators; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC; -using Org.BouncyCastle.Math.Field; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public abstract class TlsEccUtilities - { - private static readonly string[] CurveNames = new string[] { "sect163k1", "sect163r1", "sect163r2", "sect193r1", - "sect193r2", "sect233k1", "sect233r1", "sect239k1", "sect283k1", "sect283r1", "sect409k1", "sect409r1", - "sect571k1", "sect571r1", "secp160k1", "secp160r1", "secp160r2", "secp192k1", "secp192r1", "secp224k1", - "secp224r1", "secp256k1", "secp256r1", "secp384r1", "secp521r1", - "brainpoolP256r1", "brainpoolP384r1", "brainpoolP512r1"}; - - public static void AddSupportedEllipticCurvesExtension(IDictionary extensions, int[] namedCurves) - { - extensions[ExtensionType.elliptic_curves] = CreateSupportedEllipticCurvesExtension(namedCurves); - } - - public static void AddSupportedPointFormatsExtension(IDictionary extensions, byte[] ecPointFormats) - { - extensions[ExtensionType.ec_point_formats] = CreateSupportedPointFormatsExtension(ecPointFormats); - } - - public static int[] GetSupportedEllipticCurvesExtension(IDictionary extensions) - { - byte[] extensionData = TlsUtilities.GetExtensionData(extensions, ExtensionType.elliptic_curves); - return extensionData == null ? null : ReadSupportedEllipticCurvesExtension(extensionData); - } - - public static byte[] GetSupportedPointFormatsExtension(IDictionary extensions) - { - byte[] extensionData = TlsUtilities.GetExtensionData(extensions, ExtensionType.ec_point_formats); - return extensionData == null ? null : ReadSupportedPointFormatsExtension(extensionData); - } - - public static byte[] CreateSupportedEllipticCurvesExtension(int[] namedCurves) - { - if (namedCurves == null || namedCurves.Length < 1) - throw new TlsFatalAlert(AlertDescription.internal_error); - - return TlsUtilities.EncodeUint16ArrayWithUint16Length(namedCurves); - } - - public static byte[] CreateSupportedPointFormatsExtension(byte[] ecPointFormats) - { - if (ecPointFormats == null || !Arrays.Contains(ecPointFormats, ECPointFormat.uncompressed)) - { - /* - * RFC 4492 5.1. If the Supported Point Formats Extension is indeed sent, it MUST - * contain the value 0 (uncompressed) as one of the items in the list of point formats. - */ - - // NOTE: We add it at the end (lowest preference) - ecPointFormats = Arrays.Append(ecPointFormats, ECPointFormat.uncompressed); - } - - return TlsUtilities.EncodeUint8ArrayWithUint8Length(ecPointFormats); - } - - public static int[] ReadSupportedEllipticCurvesExtension(byte[] extensionData) - { - if (extensionData == null) - throw new ArgumentNullException("extensionData"); - - MemoryStream buf = new MemoryStream(extensionData, false); - - int length = TlsUtilities.ReadUint16(buf); - if (length < 2 || (length & 1) != 0) - throw new TlsFatalAlert(AlertDescription.decode_error); - - int[] namedCurves = TlsUtilities.ReadUint16Array(length / 2, buf); - - TlsProtocol.AssertEmpty(buf); - - return namedCurves; - } - - public static byte[] ReadSupportedPointFormatsExtension(byte[] extensionData) - { - byte[] ecPointFormats = TlsUtilities.DecodeUint8ArrayWithUint8Length(extensionData); - if (!Arrays.Contains(ecPointFormats, ECPointFormat.uncompressed)) - { - /* - * RFC 4492 5.1. If the Supported Point Formats Extension is indeed sent, it MUST - * contain the value 0 (uncompressed) as one of the items in the list of point formats. - */ - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - return ecPointFormats; - } - - public static string GetNameOfNamedCurve(int namedCurve) - { - return IsSupportedNamedCurve(namedCurve) ? CurveNames[namedCurve - 1] : null; - } - - public static ECDomainParameters GetParametersForNamedCurve(int namedCurve) - { - string curveName = GetNameOfNamedCurve(namedCurve); - if (curveName == null) - return null; - - // Parameters are lazily created the first time a particular curve is accessed - - X9ECParameters ecP = CustomNamedCurves.GetByName(curveName); - if (ecP == null) - { - ecP = ECNamedCurveTable.GetByName(curveName); - if (ecP == null) - return null; - } - - // It's a bit inefficient to do this conversion every time - return new ECDomainParameters(ecP.Curve, ecP.G, ecP.N, ecP.H, ecP.GetSeed()); - } - - public static bool HasAnySupportedNamedCurves() - { - return CurveNames.Length > 0; - } - - public static bool ContainsEccCipherSuites(int[] cipherSuites) - { - for (int i = 0; i < cipherSuites.Length; ++i) - { - if (IsEccCipherSuite(cipherSuites[i])) - return true; - } - return false; - } - - public static bool IsEccCipherSuite(int cipherSuite) - { - switch (cipherSuite) - { - /* - * RFC 4492 - */ - case CipherSuite.TLS_ECDH_ECDSA_WITH_NULL_SHA: - case CipherSuite.TLS_ECDH_ECDSA_WITH_RC4_128_SHA: - case CipherSuite.TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_NULL_SHA: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_RC4_128_SHA: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_ECDH_RSA_WITH_NULL_SHA: - case CipherSuite.TLS_ECDH_RSA_WITH_RC4_128_SHA: - case CipherSuite.TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_ECDHE_RSA_WITH_NULL_SHA: - case CipherSuite.TLS_ECDHE_RSA_WITH_RC4_128_SHA: - case CipherSuite.TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_ECDH_anon_WITH_NULL_SHA: - case CipherSuite.TLS_ECDH_anon_WITH_RC4_128_SHA: - case CipherSuite.TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_ECDH_anon_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_ECDH_anon_WITH_AES_256_CBC_SHA: - - /* - * RFC 5289 - */ - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384: - - /* - * RFC 5489 - */ - case CipherSuite.TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_PSK_WITH_NULL_SHA: - case CipherSuite.TLS_ECDHE_PSK_WITH_NULL_SHA256: - case CipherSuite.TLS_ECDHE_PSK_WITH_NULL_SHA384: - case CipherSuite.TLS_ECDHE_PSK_WITH_RC4_128_SHA: - - /* - * RFC 6367 - */ - case CipherSuite.TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384: - - case CipherSuite.TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384: - - case CipherSuite.TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384: - - /* - * RFC 7251 - */ - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_CCM: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_CCM: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8: - - /* - * draft-ietf-tls-chacha20-poly1305-04 - */ - case CipherSuite.DRAFT_TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.DRAFT_TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.DRAFT_TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256: - - /* - * draft-zauner-tls-aes-ocb-04 - */ - case CipherSuite.DRAFT_TLS_ECDHE_RSA_WITH_AES_128_OCB: - case CipherSuite.DRAFT_TLS_ECDHE_RSA_WITH_AES_256_OCB: - case CipherSuite.DRAFT_TLS_ECDHE_ECDSA_WITH_AES_128_OCB: - case CipherSuite.DRAFT_TLS_ECDHE_ECDSA_WITH_AES_256_OCB: - case CipherSuite.DRAFT_TLS_ECDHE_PSK_WITH_AES_128_OCB: - case CipherSuite.DRAFT_TLS_ECDHE_PSK_WITH_AES_256_OCB: - - return true; - - default: - return false; - } - } - - public static bool AreOnSameCurve(ECDomainParameters a, ECDomainParameters b) - { - return a != null && a.Equals(b); - } - - public static bool IsSupportedNamedCurve(int namedCurve) - { - return (namedCurve > 0 && namedCurve <= CurveNames.Length); - } - - public static bool IsCompressionPreferred(byte[] ecPointFormats, byte compressionFormat) - { - if (ecPointFormats == null) - return false; - - for (int i = 0; i < ecPointFormats.Length; ++i) - { - byte ecPointFormat = ecPointFormats[i]; - if (ecPointFormat == ECPointFormat.uncompressed) - return false; - if (ecPointFormat == compressionFormat) - return true; - } - return false; - } - - public static byte[] SerializeECFieldElement(int fieldSize, BigInteger x) - { - return BigIntegers.AsUnsignedByteArray((fieldSize + 7) / 8, x); - } - - public static byte[] SerializeECPoint(byte[] ecPointFormats, ECPoint point) - { - ECCurve curve = point.Curve; - - /* - * RFC 4492 5.7. ...an elliptic curve point in uncompressed or compressed format. Here, the - * format MUST conform to what the server has requested through a Supported Point Formats - * Extension if this extension was used, and MUST be uncompressed if this extension was not - * used. - */ - bool compressed = false; - if (ECAlgorithms.IsFpCurve(curve)) - { - compressed = IsCompressionPreferred(ecPointFormats, ECPointFormat.ansiX962_compressed_prime); - } - else if (ECAlgorithms.IsF2mCurve(curve)) - { - compressed = IsCompressionPreferred(ecPointFormats, ECPointFormat.ansiX962_compressed_char2); - } - return point.GetEncoded(compressed); - } - - public static byte[] SerializeECPublicKey(byte[] ecPointFormats, ECPublicKeyParameters keyParameters) - { - return SerializeECPoint(ecPointFormats, keyParameters.Q); - } - - public static BigInteger DeserializeECFieldElement(int fieldSize, byte[] encoding) - { - int requiredLength = (fieldSize + 7) / 8; - if (encoding.Length != requiredLength) - throw new TlsFatalAlert(AlertDescription.decode_error); - return new BigInteger(1, encoding); - } - - public static ECPoint DeserializeECPoint(byte[] ecPointFormats, ECCurve curve, byte[] encoding) - { - if (encoding == null || encoding.Length < 1) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - - byte actualFormat; - switch (encoding[0]) - { - case 0x02: // compressed - case 0x03: // compressed - { - if (ECAlgorithms.IsF2mCurve(curve)) - { - actualFormat = ECPointFormat.ansiX962_compressed_char2; - } - else if (ECAlgorithms.IsFpCurve(curve)) - { - actualFormat = ECPointFormat.ansiX962_compressed_prime; - } - else - { - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - break; - } - case 0x04: // uncompressed - { - actualFormat = ECPointFormat.uncompressed; - break; - } - case 0x00: // infinity - case 0x06: // hybrid - case 0x07: // hybrid - default: - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - - if (actualFormat != ECPointFormat.uncompressed - && (ecPointFormats == null || !Arrays.Contains(ecPointFormats, actualFormat))) - { - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - - return curve.DecodePoint(encoding); - } - - public static ECPublicKeyParameters DeserializeECPublicKey(byte[] ecPointFormats, ECDomainParameters curve_params, - byte[] encoding) - { - try - { - ECPoint Y = DeserializeECPoint(ecPointFormats, curve_params.Curve, encoding); - return new ECPublicKeyParameters(Y, curve_params); - } - catch (Exception e) - { - throw new TlsFatalAlert(AlertDescription.illegal_parameter, e); - } - } - - public static byte[] CalculateECDHBasicAgreement(ECPublicKeyParameters publicKey, ECPrivateKeyParameters privateKey) - { - ECDHBasicAgreement basicAgreement = new ECDHBasicAgreement(); - basicAgreement.Init(privateKey); - BigInteger agreementValue = basicAgreement.CalculateAgreement(publicKey); - - /* - * RFC 4492 5.10. Note that this octet string (Z in IEEE 1363 terminology) as output by - * FE2OSP, the Field Element to Octet String Conversion Primitive, has constant length for - * any given field; leading zeros found in this octet string MUST NOT be truncated. - */ - return BigIntegers.AsUnsignedByteArray(basicAgreement.GetFieldSize(), agreementValue); - } - - public static AsymmetricCipherKeyPair GenerateECKeyPair(SecureRandom random, ECDomainParameters ecParams) - { - ECKeyPairGenerator keyPairGenerator = new ECKeyPairGenerator(); - keyPairGenerator.Init(new ECKeyGenerationParameters(ecParams, random)); - return keyPairGenerator.GenerateKeyPair(); - } - - public static ECPrivateKeyParameters GenerateEphemeralClientKeyExchange(SecureRandom random, byte[] ecPointFormats, - ECDomainParameters ecParams, Stream output) - { - AsymmetricCipherKeyPair kp = GenerateECKeyPair(random, ecParams); - - ECPublicKeyParameters ecPublicKey = (ECPublicKeyParameters)kp.Public; - WriteECPoint(ecPointFormats, ecPublicKey.Q, output); - - return (ECPrivateKeyParameters)kp.Private; - } - - // TODO Refactor around ServerECDHParams before making this public - internal static ECPrivateKeyParameters GenerateEphemeralServerKeyExchange(SecureRandom random, int[] namedCurves, - byte[] ecPointFormats, Stream output) - { - /* First we try to find a supported named curve from the client's list. */ - int namedCurve = -1; - if (namedCurves == null) - { - // TODO Let the peer choose the default named curve - namedCurve = NamedCurve.secp256r1; - } - else - { - for (int i = 0; i < namedCurves.Length; ++i) - { - int entry = namedCurves[i]; - if (NamedCurve.IsValid(entry) && IsSupportedNamedCurve(entry)) - { - namedCurve = entry; - break; - } - } - } - - ECDomainParameters ecParams = null; - if (namedCurve >= 0) - { - ecParams = GetParametersForNamedCurve(namedCurve); - } - else - { - /* If no named curves are suitable, check if the client supports explicit curves. */ - if (Arrays.Contains(namedCurves, NamedCurve.arbitrary_explicit_prime_curves)) - { - ecParams = GetParametersForNamedCurve(NamedCurve.secp256r1); - } - else if (Arrays.Contains(namedCurves, NamedCurve.arbitrary_explicit_char2_curves)) - { - ecParams = GetParametersForNamedCurve(NamedCurve.sect283r1); - } - } - - if (ecParams == null) - { - /* - * NOTE: We shouldn't have negotiated ECDHE key exchange since we apparently can't find - * a suitable curve. - */ - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - if (namedCurve < 0) - { - WriteExplicitECParameters(ecPointFormats, ecParams, output); - } - else - { - WriteNamedECParameters(namedCurve, output); - } - - return GenerateEphemeralClientKeyExchange(random, ecPointFormats, ecParams, output); - } - - public static ECPublicKeyParameters ValidateECPublicKey(ECPublicKeyParameters key) - { - // TODO Check RFC 4492 for validation - return key; - } - - public static int ReadECExponent(int fieldSize, Stream input) - { - BigInteger K = ReadECParameter(input); - if (K.BitLength < 32) - { - int k = K.IntValue; - if (k > 0 && k < fieldSize) - { - return k; - } - } - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - - public static BigInteger ReadECFieldElement(int fieldSize, Stream input) - { - return DeserializeECFieldElement(fieldSize, TlsUtilities.ReadOpaque8(input)); - } - - public static BigInteger ReadECParameter(Stream input) - { - // TODO Are leading zeroes okay here? - return new BigInteger(1, TlsUtilities.ReadOpaque8(input)); - } - - public static ECDomainParameters ReadECParameters(int[] namedCurves, byte[] ecPointFormats, Stream input) - { - try - { - byte curveType = TlsUtilities.ReadUint8(input); - - switch (curveType) - { - case ECCurveType.explicit_prime: - { - CheckNamedCurve(namedCurves, NamedCurve.arbitrary_explicit_prime_curves); - - BigInteger prime_p = ReadECParameter(input); - BigInteger a = ReadECFieldElement(prime_p.BitLength, input); - BigInteger b = ReadECFieldElement(prime_p.BitLength, input); - byte[] baseEncoding = TlsUtilities.ReadOpaque8(input); - BigInteger order = ReadECParameter(input); - BigInteger cofactor = ReadECParameter(input); - ECCurve curve = new FpCurve(prime_p, a, b, order, cofactor); - ECPoint basePoint = DeserializeECPoint(ecPointFormats, curve, baseEncoding); - return new ECDomainParameters(curve, basePoint, order, cofactor); - } - case ECCurveType.explicit_char2: - { - CheckNamedCurve(namedCurves, NamedCurve.arbitrary_explicit_char2_curves); - - int m = TlsUtilities.ReadUint16(input); - byte basis = TlsUtilities.ReadUint8(input); - if (!ECBasisType.IsValid(basis)) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - - int k1 = ReadECExponent(m, input), k2 = -1, k3 = -1; - if (basis == ECBasisType.ec_basis_pentanomial) - { - k2 = ReadECExponent(m, input); - k3 = ReadECExponent(m, input); - } - - BigInteger a = ReadECFieldElement(m, input); - BigInteger b = ReadECFieldElement(m, input); - byte[] baseEncoding = TlsUtilities.ReadOpaque8(input); - BigInteger order = ReadECParameter(input); - BigInteger cofactor = ReadECParameter(input); - - ECCurve curve = (basis == ECBasisType.ec_basis_pentanomial) - ? new F2mCurve(m, k1, k2, k3, a, b, order, cofactor) - : new F2mCurve(m, k1, a, b, order, cofactor); - - ECPoint basePoint = DeserializeECPoint(ecPointFormats, curve, baseEncoding); - - return new ECDomainParameters(curve, basePoint, order, cofactor); - } - case ECCurveType.named_curve: - { - int namedCurve = TlsUtilities.ReadUint16(input); - if (!NamedCurve.RefersToASpecificNamedCurve(namedCurve)) - { - /* - * RFC 4492 5.4. All those values of NamedCurve are allowed that refer to a - * specific curve. Values of NamedCurve that indicate support for a class of - * explicitly defined curves are not allowed here [...]. - */ - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - - CheckNamedCurve(namedCurves, namedCurve); - - return GetParametersForNamedCurve(namedCurve); - } - default: - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - } - catch (Exception e) - { - throw new TlsFatalAlert(AlertDescription.illegal_parameter, e); - } - } - - private static void CheckNamedCurve(int[] namedCurves, int namedCurve) - { - if (namedCurves != null && !Arrays.Contains(namedCurves, namedCurve)) - { - /* - * RFC 4492 4. [...] servers MUST NOT negotiate the use of an ECC cipher suite - * unless they can complete the handshake while respecting the choice of curves - * and compression techniques specified by the client. - */ - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - } - - public static void WriteECExponent(int k, Stream output) - { - BigInteger K = BigInteger.ValueOf(k); - WriteECParameter(K, output); - } - - public static void WriteECFieldElement(ECFieldElement x, Stream output) - { - TlsUtilities.WriteOpaque8(x.GetEncoded(), output); - } - - public static void WriteECFieldElement(int fieldSize, BigInteger x, Stream output) - { - TlsUtilities.WriteOpaque8(SerializeECFieldElement(fieldSize, x), output); - } - - public static void WriteECParameter(BigInteger x, Stream output) - { - TlsUtilities.WriteOpaque8(BigIntegers.AsUnsignedByteArray(x), output); - } - - public static void WriteExplicitECParameters(byte[] ecPointFormats, ECDomainParameters ecParameters, - Stream output) - { - ECCurve curve = ecParameters.Curve; - - if (ECAlgorithms.IsFpCurve(curve)) - { - TlsUtilities.WriteUint8(ECCurveType.explicit_prime, output); - - WriteECParameter(curve.Field.Characteristic, output); - } - else if (ECAlgorithms.IsF2mCurve(curve)) - { - IPolynomialExtensionField field = (IPolynomialExtensionField)curve.Field; - int[] exponents = field.MinimalPolynomial.GetExponentsPresent(); - - TlsUtilities.WriteUint8(ECCurveType.explicit_char2, output); - - int m = exponents[exponents.Length - 1]; - TlsUtilities.CheckUint16(m); - TlsUtilities.WriteUint16(m, output); - - if (exponents.Length == 3) - { - TlsUtilities.WriteUint8(ECBasisType.ec_basis_trinomial, output); - WriteECExponent(exponents[1], output); - } - else if (exponents.Length == 5) - { - TlsUtilities.WriteUint8(ECBasisType.ec_basis_pentanomial, output); - WriteECExponent(exponents[1], output); - WriteECExponent(exponents[2], output); - WriteECExponent(exponents[3], output); - } - else - { - throw new ArgumentException("Only trinomial and pentomial curves are supported"); - } - } - else - { - throw new ArgumentException("'ecParameters' not a known curve type"); - } - - WriteECFieldElement(curve.A, output); - WriteECFieldElement(curve.B, output); - TlsUtilities.WriteOpaque8(SerializeECPoint(ecPointFormats, ecParameters.G), output); - WriteECParameter(ecParameters.N, output); - WriteECParameter(ecParameters.H, output); - } - - public static void WriteECPoint(byte[] ecPointFormats, ECPoint point, Stream output) - { - TlsUtilities.WriteOpaque8(SerializeECPoint(ecPointFormats, point), output); - } - - public static void WriteNamedECParameters(int namedCurve, Stream output) - { - if (!NamedCurve.RefersToASpecificNamedCurve(namedCurve)) - { - /* - * RFC 4492 5.4. All those values of NamedCurve are allowed that refer to a specific - * curve. Values of NamedCurve that indicate support for a class of explicitly defined - * curves are not allowed here [...]. - */ - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - TlsUtilities.WriteUint8(ECCurveType.named_curve, output); - TlsUtilities.CheckUint16(namedCurve); - TlsUtilities.WriteUint16(namedCurve, output); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsEncryptionCredentials.cs b/bc-sharp-crypto/src/crypto/tls/TlsEncryptionCredentials.cs deleted file mode 100644 index 52f0070..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsEncryptionCredentials.cs +++ /dev/null @@ -1,12 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public interface TlsEncryptionCredentials - : TlsCredentials - { - /// - byte[] DecryptPreMasterSecret(byte[] encryptedPreMasterSecret); - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsException.cs b/bc-sharp-crypto/src/crypto/tls/TlsException.cs deleted file mode 100644 index cea9e3e..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsException.cs +++ /dev/null @@ -1,14 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class TlsException - : IOException - { - public TlsException(string message, Exception cause) - : base(message, cause) - { - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsExtensionsUtilities.cs b/bc-sharp-crypto/src/crypto/tls/TlsExtensionsUtilities.cs deleted file mode 100644 index 4b3d9e0..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsExtensionsUtilities.cs +++ /dev/null @@ -1,368 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public abstract class TlsExtensionsUtilities - { - public static IDictionary EnsureExtensionsInitialised(IDictionary extensions) - { - return extensions == null ? Platform.CreateHashtable() : extensions; - } - - /// - public static void AddClientCertificateTypeExtensionClient(IDictionary extensions, byte[] certificateTypes) - { - extensions[ExtensionType.client_certificate_type] = CreateCertificateTypeExtensionClient(certificateTypes); - } - - /// - public static void AddClientCertificateTypeExtensionServer(IDictionary extensions, byte certificateType) - { - extensions[ExtensionType.client_certificate_type] = CreateCertificateTypeExtensionServer(certificateType); - } - - public static void AddEncryptThenMacExtension(IDictionary extensions) - { - extensions[ExtensionType.encrypt_then_mac] = CreateEncryptThenMacExtension(); - } - - public static void AddExtendedMasterSecretExtension(IDictionary extensions) - { - extensions[ExtensionType.extended_master_secret] = CreateExtendedMasterSecretExtension(); - } - - /// - public static void AddHeartbeatExtension(IDictionary extensions, HeartbeatExtension heartbeatExtension) - { - extensions[ExtensionType.heartbeat] = CreateHeartbeatExtension(heartbeatExtension); - } - - /// - public static void AddMaxFragmentLengthExtension(IDictionary extensions, byte maxFragmentLength) - { - extensions[ExtensionType.max_fragment_length] = CreateMaxFragmentLengthExtension(maxFragmentLength); - } - - /// - public static void AddPaddingExtension(IDictionary extensions, int dataLength) - { - extensions[ExtensionType.padding] = CreatePaddingExtension(dataLength); - } - - /// - public static void AddServerCertificateTypeExtensionClient(IDictionary extensions, byte[] certificateTypes) - { - extensions[ExtensionType.server_certificate_type] = CreateCertificateTypeExtensionClient(certificateTypes); - } - - /// - public static void AddServerCertificateTypeExtensionServer(IDictionary extensions, byte certificateType) - { - extensions[ExtensionType.server_certificate_type] = CreateCertificateTypeExtensionServer(certificateType); - } - - /// - public static void AddServerNameExtension(IDictionary extensions, ServerNameList serverNameList) - { - extensions[ExtensionType.server_name] = CreateServerNameExtension(serverNameList); - } - - /// - public static void AddStatusRequestExtension(IDictionary extensions, CertificateStatusRequest statusRequest) - { - extensions[ExtensionType.status_request] = CreateStatusRequestExtension(statusRequest); - } - - public static void AddTruncatedHMacExtension(IDictionary extensions) - { - extensions[ExtensionType.truncated_hmac] = CreateTruncatedHMacExtension(); - } - - /// - public static byte[] GetClientCertificateTypeExtensionClient(IDictionary extensions) - { - byte[] extensionData = TlsUtilities.GetExtensionData(extensions, ExtensionType.client_certificate_type); - return extensionData == null ? null : ReadCertificateTypeExtensionClient(extensionData); - } - - /// - public static short GetClientCertificateTypeExtensionServer(IDictionary extensions) - { - byte[] extensionData = TlsUtilities.GetExtensionData(extensions, ExtensionType.client_certificate_type); - return extensionData == null ? (short)-1 : (short)ReadCertificateTypeExtensionServer(extensionData); - } - - /// - public static HeartbeatExtension GetHeartbeatExtension(IDictionary extensions) - { - byte[] extensionData = TlsUtilities.GetExtensionData(extensions, ExtensionType.heartbeat); - return extensionData == null ? null : ReadHeartbeatExtension(extensionData); - } - - /// - public static short GetMaxFragmentLengthExtension(IDictionary extensions) - { - byte[] extensionData = TlsUtilities.GetExtensionData(extensions, ExtensionType.max_fragment_length); - return extensionData == null ? (short)-1 : (short)ReadMaxFragmentLengthExtension(extensionData); - } - - /// - public static int GetPaddingExtension(IDictionary extensions) - { - byte[] extensionData = TlsUtilities.GetExtensionData(extensions, ExtensionType.padding); - return extensionData == null ? -1 : ReadPaddingExtension(extensionData); - } - - /// - public static byte[] GetServerCertificateTypeExtensionClient(IDictionary extensions) - { - byte[] extensionData = TlsUtilities.GetExtensionData(extensions, ExtensionType.server_certificate_type); - return extensionData == null ? null : ReadCertificateTypeExtensionClient(extensionData); - } - - /// - public static short GetServerCertificateTypeExtensionServer(IDictionary extensions) - { - byte[] extensionData = TlsUtilities.GetExtensionData(extensions, ExtensionType.server_certificate_type); - return extensionData == null ? (short)-1 : (short)ReadCertificateTypeExtensionServer(extensionData); - } - - /// - public static ServerNameList GetServerNameExtension(IDictionary extensions) - { - byte[] extensionData = TlsUtilities.GetExtensionData(extensions, ExtensionType.server_name); - return extensionData == null ? null : ReadServerNameExtension(extensionData); - } - - /// - public static CertificateStatusRequest GetStatusRequestExtension(IDictionary extensions) - { - byte[] extensionData = TlsUtilities.GetExtensionData(extensions, ExtensionType.status_request); - return extensionData == null ? null : ReadStatusRequestExtension(extensionData); - } - - /// - public static bool HasEncryptThenMacExtension(IDictionary extensions) - { - byte[] extensionData = TlsUtilities.GetExtensionData(extensions, ExtensionType.encrypt_then_mac); - return extensionData == null ? false : ReadEncryptThenMacExtension(extensionData); - } - - /// - public static bool HasExtendedMasterSecretExtension(IDictionary extensions) - { - byte[] extensionData = TlsUtilities.GetExtensionData(extensions, ExtensionType.extended_master_secret); - return extensionData == null ? false : ReadExtendedMasterSecretExtension(extensionData); - } - - /// - public static bool HasTruncatedHMacExtension(IDictionary extensions) - { - byte[] extensionData = TlsUtilities.GetExtensionData(extensions, ExtensionType.truncated_hmac); - return extensionData == null ? false : ReadTruncatedHMacExtension(extensionData); - } - - /// - public static byte[] CreateCertificateTypeExtensionClient(byte[] certificateTypes) - { - if (certificateTypes == null || certificateTypes.Length < 1 || certificateTypes.Length > 255) - throw new TlsFatalAlert(AlertDescription.internal_error); - - return TlsUtilities.EncodeUint8ArrayWithUint8Length(certificateTypes); - } - - /// - public static byte[] CreateCertificateTypeExtensionServer(byte certificateType) - { - return TlsUtilities.EncodeUint8(certificateType); - } - - public static byte[] CreateEmptyExtensionData() - { - return TlsUtilities.EmptyBytes; - } - - public static byte[] CreateEncryptThenMacExtension() - { - return CreateEmptyExtensionData(); - } - - public static byte[] CreateExtendedMasterSecretExtension() - { - return CreateEmptyExtensionData(); - } - - /// - public static byte[] CreateHeartbeatExtension(HeartbeatExtension heartbeatExtension) - { - if (heartbeatExtension == null) - throw new TlsFatalAlert(AlertDescription.internal_error); - - MemoryStream buf = new MemoryStream(); - - heartbeatExtension.Encode(buf); - - return buf.ToArray(); - } - - /// - public static byte[] CreateMaxFragmentLengthExtension(byte maxFragmentLength) - { - return TlsUtilities.EncodeUint8(maxFragmentLength); - } - - /// - public static byte[] CreatePaddingExtension(int dataLength) - { - TlsUtilities.CheckUint16(dataLength); - return new byte[dataLength]; - } - - /// - public static byte[] CreateServerNameExtension(ServerNameList serverNameList) - { - if (serverNameList == null) - throw new TlsFatalAlert(AlertDescription.internal_error); - - MemoryStream buf = new MemoryStream(); - - serverNameList.Encode(buf); - - return buf.ToArray(); - } - - /// - public static byte[] CreateStatusRequestExtension(CertificateStatusRequest statusRequest) - { - if (statusRequest == null) - { - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - MemoryStream buf = new MemoryStream(); - - statusRequest.Encode(buf); - - return buf.ToArray(); - } - - public static byte[] CreateTruncatedHMacExtension() - { - return CreateEmptyExtensionData(); - } - - /// - private static bool ReadEmptyExtensionData(byte[] extensionData) - { - if (extensionData == null) - throw new ArgumentNullException("extensionData"); - - if (extensionData.Length != 0) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - - return true; - } - - /// - public static byte[] ReadCertificateTypeExtensionClient(byte[] extensionData) - { - byte[] certificateTypes = TlsUtilities.DecodeUint8ArrayWithUint8Length(extensionData); - if (certificateTypes.Length < 1) - throw new TlsFatalAlert(AlertDescription.decode_error); - return certificateTypes; - } - - /// - public static byte ReadCertificateTypeExtensionServer(byte[] extensionData) - { - return TlsUtilities.DecodeUint8(extensionData); - } - - /// - public static bool ReadEncryptThenMacExtension(byte[] extensionData) - { - return ReadEmptyExtensionData(extensionData); - } - - /// - public static bool ReadExtendedMasterSecretExtension(byte[] extensionData) - { - return ReadEmptyExtensionData(extensionData); - } - - /// - public static HeartbeatExtension ReadHeartbeatExtension(byte[] extensionData) - { - if (extensionData == null) - throw new ArgumentNullException("extensionData"); - - MemoryStream buf = new MemoryStream(extensionData, false); - - HeartbeatExtension heartbeatExtension = HeartbeatExtension.Parse(buf); - - TlsProtocol.AssertEmpty(buf); - - return heartbeatExtension; - } - - /// - public static byte ReadMaxFragmentLengthExtension(byte[] extensionData) - { - return TlsUtilities.DecodeUint8(extensionData); - } - - /// - public static int ReadPaddingExtension(byte[] extensionData) - { - if (extensionData == null) - throw new ArgumentNullException("extensionData"); - - for (int i = 0; i < extensionData.Length; ++i) - { - if (extensionData[i] != 0) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - return extensionData.Length; - } - - /// - public static ServerNameList ReadServerNameExtension(byte[] extensionData) - { - if (extensionData == null) - throw new ArgumentNullException("extensionData"); - - MemoryStream buf = new MemoryStream(extensionData, false); - - ServerNameList serverNameList = ServerNameList.Parse(buf); - - TlsProtocol.AssertEmpty(buf); - - return serverNameList; - } - - /// - public static CertificateStatusRequest ReadStatusRequestExtension(byte[] extensionData) - { - if (extensionData == null) - throw new ArgumentNullException("extensionData"); - - MemoryStream buf = new MemoryStream(extensionData, false); - - CertificateStatusRequest statusRequest = CertificateStatusRequest.Parse(buf); - - TlsProtocol.AssertEmpty(buf); - - return statusRequest; - } - - /// - public static bool ReadTruncatedHMacExtension(byte[] extensionData) - { - return ReadEmptyExtensionData(extensionData); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsFatalAlert.cs b/bc-sharp-crypto/src/crypto/tls/TlsFatalAlert.cs deleted file mode 100644 index 6f18981..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsFatalAlert.cs +++ /dev/null @@ -1,26 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class TlsFatalAlert - : TlsException - { - private readonly byte alertDescription; - - public TlsFatalAlert(byte alertDescription) - : this(alertDescription, null) - { - } - - public TlsFatalAlert(byte alertDescription, Exception alertCause) - : base(Tls.AlertDescription.GetText(alertDescription), alertCause) - { - this.alertDescription = alertDescription; - } - - public virtual byte AlertDescription - { - get { return alertDescription; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsFatalAlertReceived.cs b/bc-sharp-crypto/src/crypto/tls/TlsFatalAlertReceived.cs deleted file mode 100644 index 044fc80..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsFatalAlertReceived.cs +++ /dev/null @@ -1,21 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class TlsFatalAlertReceived - : TlsException - { - private readonly byte alertDescription; - - public TlsFatalAlertReceived(byte alertDescription) - : base(Tls.AlertDescription.GetText(alertDescription), null) - { - this.alertDescription = alertDescription; - } - - public virtual byte AlertDescription - { - get { return alertDescription; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsHandshakeHash.cs b/bc-sharp-crypto/src/crypto/tls/TlsHandshakeHash.cs deleted file mode 100644 index 7118d97..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsHandshakeHash.cs +++ /dev/null @@ -1,22 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public interface TlsHandshakeHash - : IDigest - { - void Init(TlsContext context); - - TlsHandshakeHash NotifyPrfDetermined(); - - void TrackHashAlgorithm(byte hashAlgorithm); - - void SealHashAlgorithms(); - - TlsHandshakeHash StopTracking(); - - IDigest ForkPrfHash(); - - byte[] GetFinalHash(byte hashAlgorithm); - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsKeyExchange.cs b/bc-sharp-crypto/src/crypto/tls/TlsKeyExchange.cs deleted file mode 100644 index 6731f6f..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsKeyExchange.cs +++ /dev/null @@ -1,54 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /// - /// A generic interface for key exchange implementations in (D)TLS. - /// - public interface TlsKeyExchange - { - void Init(TlsContext context); - - /// - void SkipServerCredentials(); - - /// - void ProcessServerCredentials(TlsCredentials serverCredentials); - - /// - void ProcessServerCertificate(Certificate serverCertificate); - - bool RequiresServerKeyExchange { get; } - - /// - byte[] GenerateServerKeyExchange(); - - /// - void SkipServerKeyExchange(); - - /// - void ProcessServerKeyExchange(Stream input); - - /// - void ValidateCertificateRequest(CertificateRequest certificateRequest); - - /// - void SkipClientCredentials(); - - /// - void ProcessClientCredentials(TlsCredentials clientCredentials); - - /// - void ProcessClientCertificate(Certificate clientCertificate); - - /// - void GenerateClientKeyExchange(Stream output); - - /// - void ProcessClientKeyExchange(Stream input); - - /// - byte[] GeneratePremasterSecret(); - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsMac.cs b/bc-sharp-crypto/src/crypto/tls/TlsMac.cs deleted file mode 100644 index a80319a..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsMac.cs +++ /dev/null @@ -1,173 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Crypto.Macs; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /// - /// A generic TLS MAC implementation, acting as an HMAC based on some underlying Digest. - /// - public class TlsMac - { - protected readonly TlsContext context; - protected readonly byte[] secret; - protected readonly IMac mac; - protected readonly int digestBlockSize; - protected readonly int digestOverhead; - protected readonly int macLength; - - /** - * Generate a new instance of an TlsMac. - * - * @param context the TLS client context - * @param digest The digest to use. - * @param key A byte-array where the key for this MAC is located. - * @param keyOff The number of bytes to skip, before the key starts in the buffer. - * @param keyLen The length of the key. - */ - public TlsMac(TlsContext context, IDigest digest, byte[] key, int keyOff, int keyLen) - { - this.context = context; - - KeyParameter keyParameter = new KeyParameter(key, keyOff, keyLen); - - this.secret = Arrays.Clone(keyParameter.GetKey()); - - // TODO This should check the actual algorithm, not rely on the engine type - if (digest is LongDigest) - { - this.digestBlockSize = 128; - this.digestOverhead = 16; - } - else - { - this.digestBlockSize = 64; - this.digestOverhead = 8; - } - - if (TlsUtilities.IsSsl(context)) - { - this.mac = new Ssl3Mac(digest); - - // TODO This should check the actual algorithm, not assume based on the digest size - if (digest.GetDigestSize() == 20) - { - /* - * NOTE: When SHA-1 is used with the SSL 3.0 MAC, the secret + input pad is not - * digest block-aligned. - */ - this.digestOverhead = 4; - } - } - else - { - this.mac = new HMac(digest); - - // NOTE: The input pad for HMAC is always a full digest block - } - - this.mac.Init(keyParameter); - - this.macLength = mac.GetMacSize(); - if (context.SecurityParameters.truncatedHMac) - { - this.macLength = System.Math.Min(this.macLength, 10); - } - } - - /** - * @return the MAC write secret - */ - public virtual byte[] MacSecret - { - get { return this.secret; } - } - - /** - * @return The output length of this MAC. - */ - public virtual int Size - { - get { return macLength; } - } - - /** - * Calculate the MAC for some given data. - * - * @param type The message type of the message. - * @param message A byte-buffer containing the message. - * @param offset The number of bytes to skip, before the message starts. - * @param length The length of the message. - * @return A new byte-buffer containing the MAC value. - */ - public virtual byte[] CalculateMac(long seqNo, byte type, byte[] message, int offset, int length) - { - ProtocolVersion serverVersion = context.ServerVersion; - bool isSsl = serverVersion.IsSsl; - - byte[] macHeader = new byte[isSsl ? 11 : 13]; - TlsUtilities.WriteUint64(seqNo, macHeader, 0); - TlsUtilities.WriteUint8(type, macHeader, 8); - if (!isSsl) - { - TlsUtilities.WriteVersion(serverVersion, macHeader, 9); - } - TlsUtilities.WriteUint16(length, macHeader, macHeader.Length - 2); - - mac.BlockUpdate(macHeader, 0, macHeader.Length); - mac.BlockUpdate(message, offset, length); - - return Truncate(MacUtilities.DoFinal(mac)); - } - - public virtual byte[] CalculateMacConstantTime(long seqNo, byte type, byte[] message, int offset, int length, - int fullLength, byte[] dummyData) - { - /* - * Actual MAC only calculated on 'length' bytes... - */ - byte[] result = CalculateMac(seqNo, type, message, offset, length); - - /* - * ...but ensure a constant number of complete digest blocks are processed (as many as would - * be needed for 'fullLength' bytes of input). - */ - int headerLength = TlsUtilities.IsSsl(context) ? 11 : 13; - - // How many extra full blocks do we need to calculate? - int extra = GetDigestBlockCount(headerLength + fullLength) - GetDigestBlockCount(headerLength + length); - - while (--extra >= 0) - { - mac.BlockUpdate(dummyData, 0, digestBlockSize); - } - - // One more byte in case the implementation is "lazy" about processing blocks - mac.Update(dummyData[0]); - mac.Reset(); - - return result; - } - - protected virtual int GetDigestBlockCount(int inputLength) - { - // NOTE: This calculation assumes a minimum of 1 pad byte - return (inputLength + digestOverhead) / digestBlockSize; - } - - protected virtual byte[] Truncate(byte[] bs) - { - if (bs.Length <= macLength) - { - return bs; - } - - return Arrays.CopyOf(bs, macLength); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsNoCloseNotifyException.cs b/bc-sharp-crypto/src/crypto/tls/TlsNoCloseNotifyException.cs deleted file mode 100644 index 0bafd82..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsNoCloseNotifyException.cs +++ /dev/null @@ -1,23 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /// - /// This exception will be thrown(only) when the connection is closed by the peer without sending a - /// close_notify warning alert. - /// - /// - /// If this happens, the TLS protocol cannot rule out truncation of the connection data (potentially - /// malicious). It may be possible to check for truncation via some property of a higher level protocol - /// built upon TLS, e.g.the Content-Length header for HTTPS. - /// - public class TlsNoCloseNotifyException - : EndOfStreamException - { - public TlsNoCloseNotifyException() - : base("No close_notify alert received before connection closed") - { - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsNullCipher.cs b/bc-sharp-crypto/src/crypto/tls/TlsNullCipher.cs deleted file mode 100644 index f30ace2..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsNullCipher.cs +++ /dev/null @@ -1,118 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /// - /// A NULL CipherSuite, with optional MAC. - /// - public class TlsNullCipher - : TlsCipher - { - protected readonly TlsContext context; - - protected readonly TlsMac writeMac; - protected readonly TlsMac readMac; - - public TlsNullCipher(TlsContext context) - { - this.context = context; - this.writeMac = null; - this.readMac = null; - } - - /// - public TlsNullCipher(TlsContext context, IDigest clientWriteDigest, IDigest serverWriteDigest) - { - if ((clientWriteDigest == null) != (serverWriteDigest == null)) - throw new TlsFatalAlert(AlertDescription.internal_error); - - this.context = context; - - TlsMac clientWriteMac = null, serverWriteMac = null; - - if (clientWriteDigest != null) - { - int key_block_size = clientWriteDigest.GetDigestSize() - + serverWriteDigest.GetDigestSize(); - byte[] key_block = TlsUtilities.CalculateKeyBlock(context, key_block_size); - - int offset = 0; - - clientWriteMac = new TlsMac(context, clientWriteDigest, key_block, offset, - clientWriteDigest.GetDigestSize()); - offset += clientWriteDigest.GetDigestSize(); - - serverWriteMac = new TlsMac(context, serverWriteDigest, key_block, offset, - serverWriteDigest.GetDigestSize()); - offset += serverWriteDigest.GetDigestSize(); - - if (offset != key_block_size) - { - throw new TlsFatalAlert(AlertDescription.internal_error); - } - } - - if (context.IsServer) - { - writeMac = serverWriteMac; - readMac = clientWriteMac; - } - else - { - writeMac = clientWriteMac; - readMac = serverWriteMac; - } - } - - public virtual int GetPlaintextLimit(int ciphertextLimit) - { - int result = ciphertextLimit; - if (writeMac != null) - { - result -= writeMac.Size; - } - return result; - } - - /// - public virtual byte[] EncodePlaintext(long seqNo, byte type, byte[] plaintext, int offset, int len) - { - if (writeMac == null) - { - return Arrays.CopyOfRange(plaintext, offset, offset + len); - } - - byte[] mac = writeMac.CalculateMac(seqNo, type, plaintext, offset, len); - byte[] ciphertext = new byte[len + mac.Length]; - Array.Copy(plaintext, offset, ciphertext, 0, len); - Array.Copy(mac, 0, ciphertext, len, mac.Length); - return ciphertext; - } - - /// - public virtual byte[] DecodeCiphertext(long seqNo, byte type, byte[] ciphertext, int offset, int len) - { - if (readMac == null) - { - return Arrays.CopyOfRange(ciphertext, offset, offset + len); - } - - int macSize = readMac.Size; - if (len < macSize) - throw new TlsFatalAlert(AlertDescription.decode_error); - - int macInputLen = len - macSize; - - byte[] receivedMac = Arrays.CopyOfRange(ciphertext, offset + macInputLen, offset + len); - byte[] computedMac = readMac.CalculateMac(seqNo, type, ciphertext, offset, macInputLen); - - if (!Arrays.ConstantTimeAreEqual(receivedMac, computedMac)) - throw new TlsFatalAlert(AlertDescription.bad_record_mac); - - return Arrays.CopyOfRange(ciphertext, offset, offset + macInputLen); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsNullCompression.cs b/bc-sharp-crypto/src/crypto/tls/TlsNullCompression.cs deleted file mode 100644 index 45f8fc7..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsNullCompression.cs +++ /dev/null @@ -1,19 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class TlsNullCompression - : TlsCompression - { - public virtual Stream Compress(Stream output) - { - return output; - } - - public virtual Stream Decompress(Stream output) - { - return output; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsPeer.cs b/bc-sharp-crypto/src/crypto/tls/TlsPeer.cs deleted file mode 100644 index 1ae41a4..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsPeer.cs +++ /dev/null @@ -1,62 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public interface TlsPeer - { - /// - /// draft-mathewson-no-gmtunixtime-00 2. "If existing users of a TLS implementation may rely on - /// gmt_unix_time containing the current time, we recommend that implementors MAY provide the - /// ability to set gmt_unix_time as an option only, off by default." - /// - /// - /// true if the current time should be used in the gmt_unix_time field of - /// Random, or false if gmt_unix_time should contain a cryptographically - /// random value. - /// - bool ShouldUseGmtUnixTime(); - - /// - /// Report whether the server supports secure renegotiation - /// - /// - /// The protocol handler automatically processes the relevant extensions - /// - /// - /// A , true if the server supports secure renegotiation - /// - /// - void NotifySecureRenegotiation(bool secureRenegotiation); - - /// - /// Return an implementation of to handle record compression. - /// - /// A - /// - TlsCompression GetCompression(); - - /// - /// Return an implementation of to use for encryption/decryption. - /// - /// A - /// - TlsCipher GetCipher(); - - /// This method will be called when an alert is raised by the protocol. - /// - /// - /// A human-readable message explaining what caused this alert. May be null. - /// The Exception that caused this alert to be raised. May be null. - void NotifyAlertRaised(byte alertLevel, byte alertDescription, string message, Exception cause); - - /// This method will be called when an alert is received from the remote peer. - /// - /// - void NotifyAlertReceived(byte alertLevel, byte alertDescription); - - /// Notifies the peer that the handshake has been successfully completed. - /// - void NotifyHandshakeComplete(); - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsProtocol.cs b/bc-sharp-crypto/src/crypto/tls/TlsProtocol.cs deleted file mode 100644 index 72151d4..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsProtocol.cs +++ /dev/null @@ -1,1450 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Crypto.Prng; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public abstract class TlsProtocol - { - /* - * Our Connection states - */ - protected const short CS_START = 0; - protected const short CS_CLIENT_HELLO = 1; - protected const short CS_SERVER_HELLO = 2; - protected const short CS_SERVER_SUPPLEMENTAL_DATA = 3; - protected const short CS_SERVER_CERTIFICATE = 4; - protected const short CS_CERTIFICATE_STATUS = 5; - protected const short CS_SERVER_KEY_EXCHANGE = 6; - protected const short CS_CERTIFICATE_REQUEST = 7; - protected const short CS_SERVER_HELLO_DONE = 8; - protected const short CS_CLIENT_SUPPLEMENTAL_DATA = 9; - protected const short CS_CLIENT_CERTIFICATE = 10; - protected const short CS_CLIENT_KEY_EXCHANGE = 11; - protected const short CS_CERTIFICATE_VERIFY = 12; - protected const short CS_CLIENT_FINISHED = 13; - protected const short CS_SERVER_SESSION_TICKET = 14; - protected const short CS_SERVER_FINISHED = 15; - protected const short CS_END = 16; - - /* - * Different modes to handle the known IV weakness - */ - protected const short ADS_MODE_1_Nsub1 = 0; // 1/n-1 record splitting - protected const short ADS_MODE_0_N = 1; // 0/n record splitting - protected const short ADS_MODE_0_N_FIRSTONLY = 2; // 0/n record splitting on first data fragment only - - /* - * Queues for data from some protocols. - */ - private ByteQueue mApplicationDataQueue = new ByteQueue(0); - private ByteQueue mAlertQueue = new ByteQueue(2); - private ByteQueue mHandshakeQueue = new ByteQueue(0); - // private ByteQueue mHeartbeatQueue = new ByteQueue(); - - /* - * The Record Stream we use - */ - internal RecordStream mRecordStream; - protected SecureRandom mSecureRandom; - - private TlsStream mTlsStream = null; - - private volatile bool mClosed = false; - private volatile bool mFailedWithError = false; - private volatile bool mAppDataReady = false; - private volatile bool mAppDataSplitEnabled = true; - private volatile int mAppDataSplitMode = ADS_MODE_1_Nsub1; - private byte[] mExpectedVerifyData = null; - - protected TlsSession mTlsSession = null; - protected SessionParameters mSessionParameters = null; - protected SecurityParameters mSecurityParameters = null; - protected Certificate mPeerCertificate = null; - - protected int[] mOfferedCipherSuites = null; - protected byte[] mOfferedCompressionMethods = null; - protected IDictionary mClientExtensions = null; - protected IDictionary mServerExtensions = null; - - protected short mConnectionState = CS_START; - protected bool mResumedSession = false; - protected bool mReceivedChangeCipherSpec = false; - protected bool mSecureRenegotiation = false; - protected bool mAllowCertificateStatus = false; - protected bool mExpectSessionTicket = false; - - protected bool mBlocking = true; - protected ByteQueueStream mInputBuffers = null; - protected ByteQueueStream mOutputBuffer = null; - - public TlsProtocol(Stream stream, SecureRandom secureRandom) - : this(stream, stream, secureRandom) - { - } - - public TlsProtocol(Stream input, Stream output, SecureRandom secureRandom) - { - this.mRecordStream = new RecordStream(this, input, output); - this.mSecureRandom = secureRandom; - } - - public TlsProtocol(SecureRandom secureRandom) - { - this.mBlocking = false; - this.mInputBuffers = new ByteQueueStream(); - this.mOutputBuffer = new ByteQueueStream(); - this.mRecordStream = new RecordStream(this, mInputBuffers, mOutputBuffer); - this.mSecureRandom = secureRandom; - } - - protected abstract TlsContext Context { get; } - - internal abstract AbstractTlsContext ContextAdmin { get; } - - protected abstract TlsPeer Peer { get; } - - protected virtual void HandleAlertMessage(byte alertLevel, byte alertDescription) - { - Peer.NotifyAlertReceived(alertLevel, alertDescription); - - if (alertLevel == AlertLevel.warning) - { - HandleAlertWarningMessage(alertDescription); - } - else - { - HandleFailure(); - - throw new TlsFatalAlertReceived(alertDescription); - } - } - - protected virtual void HandleAlertWarningMessage(byte alertDescription) - { - /* - * RFC 5246 7.2.1. The other party MUST respond with a close_notify alert of its own - * and close down the connection immediately, discarding any pending writes. - */ - if (alertDescription == AlertDescription.close_notify) - { - if (!mAppDataReady) - throw new TlsFatalAlert(AlertDescription.handshake_failure); - - HandleClose(false); - } - } - - protected virtual void HandleChangeCipherSpecMessage() - { - } - - protected virtual void HandleClose(bool user_canceled) - { - if (!mClosed) - { - this.mClosed = true; - - if (user_canceled && !mAppDataReady) - { - RaiseAlertWarning(AlertDescription.user_canceled, "User canceled handshake"); - } - - RaiseAlertWarning(AlertDescription.close_notify, "Connection closed"); - - mRecordStream.SafeClose(); - - if (!mAppDataReady) - { - CleanupHandshake(); - } - } - } - - protected virtual void HandleException(byte alertDescription, string message, Exception cause) - { - if (!mClosed) - { - RaiseAlertFatal(alertDescription, message, cause); - - HandleFailure(); - } - } - - protected virtual void HandleFailure() - { - this.mClosed = true; - this.mFailedWithError = true; - - /* - * RFC 2246 7.2.1. The session becomes unresumable if any connection is terminated - * without proper close_notify messages with level equal to warning. - */ - // TODO This isn't quite in the right place. Also, as of TLS 1.1 the above is obsolete. - InvalidateSession(); - - mRecordStream.SafeClose(); - - if (!mAppDataReady) - { - CleanupHandshake(); - } - } - - protected abstract void HandleHandshakeMessage(byte type, MemoryStream buf); - - protected virtual void ApplyMaxFragmentLengthExtension() - { - if (mSecurityParameters.maxFragmentLength >= 0) - { - if (!MaxFragmentLength.IsValid((byte)mSecurityParameters.maxFragmentLength)) - throw new TlsFatalAlert(AlertDescription.internal_error); - - int plainTextLimit = 1 << (8 + mSecurityParameters.maxFragmentLength); - mRecordStream.SetPlaintextLimit(plainTextLimit); - } - } - - protected virtual void CheckReceivedChangeCipherSpec(bool expected) - { - if (expected != mReceivedChangeCipherSpec) - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - - protected virtual void CleanupHandshake() - { - if (this.mExpectedVerifyData != null) - { - Arrays.Fill(this.mExpectedVerifyData, (byte)0); - this.mExpectedVerifyData = null; - } - - this.mSecurityParameters.Clear(); - this.mPeerCertificate = null; - - this.mOfferedCipherSuites = null; - this.mOfferedCompressionMethods = null; - this.mClientExtensions = null; - this.mServerExtensions = null; - - this.mResumedSession = false; - this.mReceivedChangeCipherSpec = false; - this.mSecureRenegotiation = false; - this.mAllowCertificateStatus = false; - this.mExpectSessionTicket = false; - } - - protected virtual void BlockForHandshake() - { - if (mBlocking) - { - while (this.mConnectionState != CS_END) - { - if (this.mClosed) - { - // NOTE: Any close during the handshake should have raised an exception. - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - SafeReadRecord(); - } - } - } - - protected virtual void CompleteHandshake() - { - try - { - this.mConnectionState = CS_END; - - this.mAlertQueue.Shrink(); - this.mHandshakeQueue.Shrink(); - - this.mRecordStream.FinaliseHandshake(); - - this.mAppDataSplitEnabled = !TlsUtilities.IsTlsV11(Context); - - /* - * If this was an initial handshake, we are now ready to send and receive application data. - */ - if (!mAppDataReady) - { - this.mAppDataReady = true; - - if (mBlocking) - { - this.mTlsStream = new TlsStream(this); - } - } - - if (this.mTlsSession != null) - { - if (this.mSessionParameters == null) - { - this.mSessionParameters = new SessionParameters.Builder() - .SetCipherSuite(this.mSecurityParameters.CipherSuite) - .SetCompressionAlgorithm(this.mSecurityParameters.CompressionAlgorithm) - .SetMasterSecret(this.mSecurityParameters.MasterSecret) - .SetPeerCertificate(this.mPeerCertificate) - .SetPskIdentity(this.mSecurityParameters.PskIdentity) - .SetSrpIdentity(this.mSecurityParameters.SrpIdentity) - // TODO Consider filtering extensions that aren't relevant to resumed sessions - .SetServerExtensions(this.mServerExtensions) - .Build(); - - this.mTlsSession = new TlsSessionImpl(this.mTlsSession.SessionID, this.mSessionParameters); - } - - ContextAdmin.SetResumableSession(this.mTlsSession); - } - - Peer.NotifyHandshakeComplete(); - } - finally - { - CleanupHandshake(); - } - } - - protected internal void ProcessRecord(byte protocol, byte[] buf, int off, int len) - { - /* - * Have a look at the protocol type, and add it to the correct queue. - */ - switch (protocol) - { - case ContentType.alert: - { - mAlertQueue.AddData(buf, off, len); - ProcessAlertQueue(); - break; - } - case ContentType.application_data: - { - if (!mAppDataReady) - throw new TlsFatalAlert(AlertDescription.unexpected_message); - - mApplicationDataQueue.AddData(buf, off, len); - ProcessApplicationDataQueue(); - break; - } - case ContentType.change_cipher_spec: - { - ProcessChangeCipherSpec(buf, off, len); - break; - } - case ContentType.handshake: - { - if (mHandshakeQueue.Available > 0) - { - mHandshakeQueue.AddData(buf, off, len); - ProcessHandshakeQueue(mHandshakeQueue); - } - else - { - ByteQueue tmpQueue = new ByteQueue(buf, off, len); - ProcessHandshakeQueue(tmpQueue); - int remaining = tmpQueue.Available; - if (remaining > 0) - { - mHandshakeQueue.AddData(buf, off + len - remaining, remaining); - } - } - break; - } - //case ContentType.heartbeat: - //{ - // if (!mAppDataReady) - // throw new TlsFatalAlert(AlertDescription.unexpected_message); - - // // TODO[RFC 6520] - // //mHeartbeatQueue.AddData(buf, offset, len); - // //ProcessHeartbeat(); - // break; - //} - default: - // Record type should already have been checked - throw new TlsFatalAlert(AlertDescription.internal_error); - } - } - - private void ProcessHandshakeQueue(ByteQueue queue) - { - while (queue.Available >= 4) - { - /* - * We need the first 4 bytes, they contain type and length of the message. - */ - byte[] beginning = new byte[4]; - queue.Read(beginning, 0, 4, 0); - byte type = TlsUtilities.ReadUint8(beginning, 0); - int length = TlsUtilities.ReadUint24(beginning, 1); - int totalLength = 4 + length; - - /* - * Check if we have enough bytes in the buffer to read the full message. - */ - if (queue.Available < totalLength) - break; - - CheckReceivedChangeCipherSpec(mConnectionState == CS_END || type == HandshakeType.finished); - - /* - * RFC 2246 7.4.9. The value handshake_messages includes all handshake messages - * starting at client hello up to, but not including, this finished message. - * [..] Note: [Also,] Hello Request messages are omitted from handshake hashes. - */ - switch (type) - { - case HandshakeType.hello_request: - break; - case HandshakeType.finished: - default: - { - TlsContext ctx = Context; - if (type == HandshakeType.finished - && this.mExpectedVerifyData == null - && ctx.SecurityParameters.MasterSecret != null) - { - this.mExpectedVerifyData = CreateVerifyData(!ctx.IsServer); - } - - queue.CopyTo(mRecordStream.HandshakeHashUpdater, totalLength); - break; - } - } - - queue.RemoveData(4); - - MemoryStream buf = queue.ReadFrom(length); - - /* - * Now, parse the message. - */ - HandleHandshakeMessage(type, buf); - } - } - - private void ProcessApplicationDataQueue() - { - /* - * There is nothing we need to do here. - * - * This function could be used for callbacks when application data arrives in the future. - */ - } - - private void ProcessAlertQueue() - { - while (mAlertQueue.Available >= 2) - { - /* - * An alert is always 2 bytes. Read the alert. - */ - byte[] alert = mAlertQueue.RemoveData(2, 0); - byte alertLevel = alert[0]; - byte alertDescription = alert[1]; - - HandleAlertMessage(alertLevel, alertDescription); - } - } - - /** - * This method is called, when a change cipher spec message is received. - * - * @throws IOException If the message has an invalid content or the handshake is not in the correct - * state. - */ - private void ProcessChangeCipherSpec(byte[] buf, int off, int len) - { - for (int i = 0; i < len; ++i) - { - byte message = TlsUtilities.ReadUint8(buf, off + i); - - if (message != ChangeCipherSpec.change_cipher_spec) - throw new TlsFatalAlert(AlertDescription.decode_error); - - if (this.mReceivedChangeCipherSpec - || mAlertQueue.Available > 0 - || mHandshakeQueue.Available > 0) - { - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - - mRecordStream.ReceivedReadCipherSpec(); - - this.mReceivedChangeCipherSpec = true; - - HandleChangeCipherSpecMessage(); - } - } - - protected internal virtual int ApplicationDataAvailable() - { - return mApplicationDataQueue.Available; - } - - /** - * Read data from the network. The method will return immediately, if there is still some data - * left in the buffer, or block until some application data has been read from the network. - * - * @param buf The buffer where the data will be copied to. - * @param offset The position where the data will be placed in the buffer. - * @param len The maximum number of bytes to read. - * @return The number of bytes read. - * @throws IOException If something goes wrong during reading data. - */ - protected internal virtual int ReadApplicationData(byte[] buf, int offset, int len) - { - if (len < 1) - return 0; - - while (mApplicationDataQueue.Available == 0) - { - if (this.mClosed) - { - if (this.mFailedWithError) - throw new IOException("Cannot read application data on failed TLS connection"); - - if (!mAppDataReady) - throw new InvalidOperationException("Cannot read application data until initial handshake completed."); - - return 0; - } - - SafeReadRecord(); - } - - len = System.Math.Min(len, mApplicationDataQueue.Available); - mApplicationDataQueue.RemoveData(buf, offset, len, 0); - return len; - } - - protected virtual void SafeCheckRecordHeader(byte[] recordHeader) - { - try - { - mRecordStream.CheckRecordHeader(recordHeader); - } - catch (TlsFatalAlert e) - { - HandleException(e.AlertDescription, "Failed to read record", e); - throw e; - } - catch (IOException e) - { - HandleException(AlertDescription.internal_error, "Failed to read record", e); - throw e; - } - catch (Exception e) - { - HandleException(AlertDescription.internal_error, "Failed to read record", e); - throw new TlsFatalAlert(AlertDescription.internal_error, e); - } - } - - protected virtual void SafeReadRecord() - { - try - { - if (mRecordStream.ReadRecord()) - return; - - if (!mAppDataReady) - throw new TlsFatalAlert(AlertDescription.handshake_failure); - } - catch (TlsFatalAlertReceived e) - { - // Connection failure already handled at source - throw e; - } - catch (TlsFatalAlert e) - { - HandleException(e.AlertDescription, "Failed to read record", e); - throw e; - } - catch (IOException e) - { - HandleException(AlertDescription.internal_error, "Failed to read record", e); - throw e; - } - catch (Exception e) - { - HandleException(AlertDescription.internal_error, "Failed to read record", e); - throw new TlsFatalAlert(AlertDescription.internal_error, e); - } - - HandleFailure(); - - throw new TlsNoCloseNotifyException(); - } - - protected virtual void SafeWriteRecord(byte type, byte[] buf, int offset, int len) - { - try - { - mRecordStream.WriteRecord(type, buf, offset, len); - } - catch (TlsFatalAlert e) - { - HandleException(e.AlertDescription, "Failed to write record", e); - throw e; - } - catch (IOException e) - { - HandleException(AlertDescription.internal_error, "Failed to write record", e); - throw e; - } - catch (Exception e) - { - HandleException(AlertDescription.internal_error, "Failed to write record", e); - throw new TlsFatalAlert(AlertDescription.internal_error, e); - } - } - - /** - * Send some application data to the remote system. - *

- * The method will handle fragmentation internally. - * - * @param buf The buffer with the data. - * @param offset The position in the buffer where the data is placed. - * @param len The length of the data. - * @throws IOException If something goes wrong during sending. - */ - protected internal virtual void WriteData(byte[] buf, int offset, int len) - { - if (this.mClosed) - throw new IOException("Cannot write application data on closed/failed TLS connection"); - - while (len > 0) - { - /* - * RFC 5246 6.2.1. Zero-length fragments of Application data MAY be sent as they are - * potentially useful as a traffic analysis countermeasure. - * - * NOTE: Actually, implementations appear to have settled on 1/n-1 record splitting. - */ - - if (this.mAppDataSplitEnabled) - { - /* - * Protect against known IV attack! - * - * DO NOT REMOVE THIS CODE, EXCEPT YOU KNOW EXACTLY WHAT YOU ARE DOING HERE. - */ - switch (mAppDataSplitMode) - { - case ADS_MODE_0_N: - SafeWriteRecord(ContentType.application_data, TlsUtilities.EmptyBytes, 0, 0); - break; - case ADS_MODE_0_N_FIRSTONLY: - this.mAppDataSplitEnabled = false; - SafeWriteRecord(ContentType.application_data, TlsUtilities.EmptyBytes, 0, 0); - break; - case ADS_MODE_1_Nsub1: - default: - SafeWriteRecord(ContentType.application_data, buf, offset, 1); - ++offset; - --len; - break; - } - } - - if (len > 0) - { - // Fragment data according to the current fragment limit. - int toWrite = System.Math.Min(len, mRecordStream.GetPlaintextLimit()); - SafeWriteRecord(ContentType.application_data, buf, offset, toWrite); - offset += toWrite; - len -= toWrite; - } - } - } - - protected virtual void SetAppDataSplitMode(int appDataSplitMode) - { - if (appDataSplitMode < ADS_MODE_1_Nsub1 || appDataSplitMode > ADS_MODE_0_N_FIRSTONLY) - throw new ArgumentException("Illegal appDataSplitMode mode: " + appDataSplitMode, "appDataSplitMode"); - - this.mAppDataSplitMode = appDataSplitMode; - } - - protected virtual void WriteHandshakeMessage(byte[] buf, int off, int len) - { - if (len < 4) - throw new TlsFatalAlert(AlertDescription.internal_error); - - byte type = TlsUtilities.ReadUint8(buf, off); - if (type != HandshakeType.hello_request) - { - mRecordStream.HandshakeHashUpdater.Write(buf, off, len); - } - - int total = 0; - do - { - // Fragment data according to the current fragment limit. - int toWrite = System.Math.Min(len - total, mRecordStream.GetPlaintextLimit()); - SafeWriteRecord(ContentType.handshake, buf, off + total, toWrite); - total += toWrite; - } - while (total < len); - } - - ///

The secure bidirectional stream for this connection - /// Only allowed in blocking mode. - public virtual Stream Stream - { - get - { - if (!mBlocking) - throw new InvalidOperationException("Cannot use Stream in non-blocking mode! Use OfferInput()/OfferOutput() instead."); - return this.mTlsStream; - } - } - - /** - * Should be called in non-blocking mode when the input data reaches EOF. - */ - public virtual void CloseInput() - { - if (mBlocking) - throw new InvalidOperationException("Cannot use CloseInput() in blocking mode!"); - - if (mClosed) - return; - - if (mInputBuffers.Available > 0) - throw new EndOfStreamException(); - - if (!mAppDataReady) - throw new TlsFatalAlert(AlertDescription.handshake_failure); - - throw new TlsNoCloseNotifyException(); - } - - /** - * Offer input from an arbitrary source. Only allowed in non-blocking mode.
- *
- * After this method returns, the input buffer is "owned" by this object. Other code - * must not attempt to do anything with it.
- *
- * This method will decrypt and process all records that are fully available. - * If only part of a record is available, the buffer will be retained until the - * remainder of the record is offered.
- *
- * If any records containing application data were processed, the decrypted data - * can be obtained using {@link #readInput(byte[], int, int)}. If any records - * containing protocol data were processed, a response may have been generated. - * You should always check to see if there is any available output after calling - * this method by calling {@link #getAvailableOutputBytes()}. - * @param input The input buffer to offer - * @throws IOException If an error occurs while decrypting or processing a record - */ - public virtual void OfferInput(byte[] input) - { - if (mBlocking) - throw new InvalidOperationException("Cannot use OfferInput() in blocking mode! Use Stream instead."); - if (mClosed) - throw new IOException("Connection is closed, cannot accept any more input"); - - mInputBuffers.Write(input); - - // loop while there are enough bytes to read the length of the next record - while (mInputBuffers.Available >= RecordStream.TLS_HEADER_SIZE) - { - byte[] recordHeader = new byte[RecordStream.TLS_HEADER_SIZE]; - mInputBuffers.Peek(recordHeader); - - int totalLength = TlsUtilities.ReadUint16(recordHeader, RecordStream.TLS_HEADER_LENGTH_OFFSET) + RecordStream.TLS_HEADER_SIZE; - if (mInputBuffers.Available < totalLength) - { - // not enough bytes to read a whole record - SafeCheckRecordHeader(recordHeader); - break; - } - - SafeReadRecord(); - - if (mClosed) - { - if (mConnectionState != CS_END) - { - // NOTE: Any close during the handshake should have raised an exception. - throw new TlsFatalAlert(AlertDescription.internal_error); - } - break; - } - } - } - - /** - * Gets the amount of received application data. A call to {@link #readInput(byte[], int, int)} - * is guaranteed to be able to return at least this much data.
- *
- * Only allowed in non-blocking mode. - * @return The number of bytes of available application data - */ - public virtual int GetAvailableInputBytes() - { - if (mBlocking) - throw new InvalidOperationException("Cannot use GetAvailableInputBytes() in blocking mode! Use ApplicationDataAvailable() instead."); - - return ApplicationDataAvailable(); - } - - /** - * Retrieves received application data. Use {@link #getAvailableInputBytes()} to check - * how much application data is currently available. This method functions similarly to - * {@link InputStream#read(byte[], int, int)}, except that it never blocks. If no data - * is available, nothing will be copied and zero will be returned.
- *
- * Only allowed in non-blocking mode. - * @param buffer The buffer to hold the application data - * @param offset The start offset in the buffer at which the data is written - * @param length The maximum number of bytes to read - * @return The total number of bytes copied to the buffer. May be less than the - * length specified if the length was greater than the amount of available data. - */ - public virtual int ReadInput(byte[] buffer, int offset, int length) - { - if (mBlocking) - throw new InvalidOperationException("Cannot use ReadInput() in blocking mode! Use Stream instead."); - - return ReadApplicationData(buffer, offset, System.Math.Min(length, ApplicationDataAvailable())); - } - - /** - * Offer output from an arbitrary source. Only allowed in non-blocking mode.
- *
- * After this method returns, the specified section of the buffer will have been - * processed. Use {@link #readOutput(byte[], int, int)} to get the bytes to - * transmit to the other peer.
- *
- * This method must not be called until after the handshake is complete! Attempting - * to call it before the handshake is complete will result in an exception. - * @param buffer The buffer containing application data to encrypt - * @param offset The offset at which to begin reading data - * @param length The number of bytes of data to read - * @throws IOException If an error occurs encrypting the data, or the handshake is not complete - */ - public virtual void OfferOutput(byte[] buffer, int offset, int length) - { - if (mBlocking) - throw new InvalidOperationException("Cannot use OfferOutput() in blocking mode! Use Stream instead."); - if (!mAppDataReady) - throw new IOException("Application data cannot be sent until the handshake is complete!"); - - WriteData(buffer, offset, length); - } - - /** - * Gets the amount of encrypted data available to be sent. A call to - * {@link #readOutput(byte[], int, int)} is guaranteed to be able to return at - * least this much data.
- *
- * Only allowed in non-blocking mode. - * @return The number of bytes of available encrypted data - */ - public virtual int GetAvailableOutputBytes() - { - if (mBlocking) - throw new InvalidOperationException("Cannot use GetAvailableOutputBytes() in blocking mode! Use Stream instead."); - - return mOutputBuffer.Available; - } - - /** - * Retrieves encrypted data to be sent. Use {@link #getAvailableOutputBytes()} to check - * how much encrypted data is currently available. This method functions similarly to - * {@link InputStream#read(byte[], int, int)}, except that it never blocks. If no data - * is available, nothing will be copied and zero will be returned.
- *
- * Only allowed in non-blocking mode. - * @param buffer The buffer to hold the encrypted data - * @param offset The start offset in the buffer at which the data is written - * @param length The maximum number of bytes to read - * @return The total number of bytes copied to the buffer. May be less than the - * length specified if the length was greater than the amount of available data. - */ - public virtual int ReadOutput(byte[] buffer, int offset, int length) - { - if (mBlocking) - throw new InvalidOperationException("Cannot use ReadOutput() in blocking mode! Use Stream instead."); - - return mOutputBuffer.Read(buffer, offset, length); - } - - protected virtual void InvalidateSession() - { - if (this.mSessionParameters != null) - { - this.mSessionParameters.Clear(); - this.mSessionParameters = null; - } - - if (this.mTlsSession != null) - { - this.mTlsSession.Invalidate(); - this.mTlsSession = null; - } - } - - protected virtual void ProcessFinishedMessage(MemoryStream buf) - { - if (mExpectedVerifyData == null) - throw new TlsFatalAlert(AlertDescription.internal_error); - - byte[] verify_data = TlsUtilities.ReadFully(mExpectedVerifyData.Length, buf); - - AssertEmpty(buf); - - /* - * Compare both checksums. - */ - if (!Arrays.ConstantTimeAreEqual(mExpectedVerifyData, verify_data)) - { - /* - * Wrong checksum in the finished message. - */ - throw new TlsFatalAlert(AlertDescription.decrypt_error); - } - } - - protected virtual void RaiseAlertFatal(byte alertDescription, string message, Exception cause) - { - Peer.NotifyAlertRaised(AlertLevel.fatal, alertDescription, message, cause); - - byte[] alert = new byte[]{ AlertLevel.fatal, alertDescription }; - - try - { - mRecordStream.WriteRecord(ContentType.alert, alert, 0, 2); - } - catch (Exception) - { - // We are already processing an exception, so just ignore this - } - } - - protected virtual void RaiseAlertWarning(byte alertDescription, string message) - { - Peer.NotifyAlertRaised(AlertLevel.warning, alertDescription, message, null); - - byte[] alert = new byte[]{ AlertLevel.warning, alertDescription }; - - SafeWriteRecord(ContentType.alert, alert, 0, 2); - } - - protected virtual void SendCertificateMessage(Certificate certificate) - { - if (certificate == null) - { - certificate = Certificate.EmptyChain; - } - - if (certificate.IsEmpty) - { - TlsContext context = Context; - if (!context.IsServer) - { - ProtocolVersion serverVersion = Context.ServerVersion; - if (serverVersion.IsSsl) - { - string errorMessage = serverVersion.ToString() + " client didn't provide credentials"; - RaiseAlertWarning(AlertDescription.no_certificate, errorMessage); - return; - } - } - } - - HandshakeMessage message = new HandshakeMessage(HandshakeType.certificate); - - certificate.Encode(message); - - message.WriteToRecordStream(this); - } - - protected virtual void SendChangeCipherSpecMessage() - { - byte[] message = new byte[]{ 1 }; - SafeWriteRecord(ContentType.change_cipher_spec, message, 0, message.Length); - mRecordStream.SentWriteCipherSpec(); - } - - protected virtual void SendFinishedMessage() - { - byte[] verify_data = CreateVerifyData(Context.IsServer); - - HandshakeMessage message = new HandshakeMessage(HandshakeType.finished, verify_data.Length); - - message.Write(verify_data, 0, verify_data.Length); - - message.WriteToRecordStream(this); - } - - protected virtual void SendSupplementalDataMessage(IList supplementalData) - { - HandshakeMessage message = new HandshakeMessage(HandshakeType.supplemental_data); - - WriteSupplementalData(message, supplementalData); - - message.WriteToRecordStream(this); - } - - protected virtual byte[] CreateVerifyData(bool isServer) - { - TlsContext context = Context; - string asciiLabel = isServer ? ExporterLabel.server_finished : ExporterLabel.client_finished; - byte[] sslSender = isServer ? TlsUtilities.SSL_SERVER : TlsUtilities.SSL_CLIENT; - byte[] hash = GetCurrentPrfHash(context, mRecordStream.HandshakeHash, sslSender); - return TlsUtilities.CalculateVerifyData(context, asciiLabel, hash); - } - - /** - * Closes this connection. - * - * @throws IOException If something goes wrong during closing. - */ - public virtual void Close() - { - HandleClose(true); - } - - protected internal virtual void Flush() - { - mRecordStream.Flush(); - } - - public virtual bool IsClosed - { - get { return mClosed; } - } - - protected virtual short ProcessMaxFragmentLengthExtension(IDictionary clientExtensions, IDictionary serverExtensions, - byte alertDescription) - { - short maxFragmentLength = TlsExtensionsUtilities.GetMaxFragmentLengthExtension(serverExtensions); - if (maxFragmentLength >= 0) - { - if (!MaxFragmentLength.IsValid((byte)maxFragmentLength) - || (!this.mResumedSession && maxFragmentLength != TlsExtensionsUtilities - .GetMaxFragmentLengthExtension(clientExtensions))) - { - throw new TlsFatalAlert(alertDescription); - } - } - return maxFragmentLength; - } - - protected virtual void RefuseRenegotiation() - { - /* - * RFC 5746 4.5 SSLv3 clients that refuse renegotiation SHOULD use a fatal - * handshake_failure alert. - */ - if (TlsUtilities.IsSsl(Context)) - throw new TlsFatalAlert(AlertDescription.handshake_failure); - - RaiseAlertWarning(AlertDescription.no_renegotiation, "Renegotiation not supported"); - } - - /** - * Make sure the InputStream 'buf' now empty. Fail otherwise. - * - * @param buf The InputStream to check. - * @throws IOException If 'buf' is not empty. - */ - protected internal static void AssertEmpty(MemoryStream buf) - { - if (buf.Position < buf.Length) - throw new TlsFatalAlert(AlertDescription.decode_error); - } - - protected internal static byte[] CreateRandomBlock(bool useGmtUnixTime, IRandomGenerator randomGenerator) - { - byte[] result = new byte[32]; - randomGenerator.NextBytes(result); - - if (useGmtUnixTime) - { - TlsUtilities.WriteGmtUnixTime(result, 0); - } - - return result; - } - - protected internal static byte[] CreateRenegotiationInfo(byte[] renegotiated_connection) - { - return TlsUtilities.EncodeOpaque8(renegotiated_connection); - } - - protected internal static void EstablishMasterSecret(TlsContext context, TlsKeyExchange keyExchange) - { - byte[] pre_master_secret = keyExchange.GeneratePremasterSecret(); - - try - { - context.SecurityParameters.masterSecret = TlsUtilities.CalculateMasterSecret(context, pre_master_secret); - } - finally - { - // TODO Is there a way to ensure the data is really overwritten? - /* - * RFC 2246 8.1. The pre_master_secret should be deleted from memory once the - * master_secret has been computed. - */ - if (pre_master_secret != null) - { - Arrays.Fill(pre_master_secret, (byte)0); - } - } - } - - /** - * 'sender' only relevant to SSLv3 - */ - protected internal static byte[] GetCurrentPrfHash(TlsContext context, TlsHandshakeHash handshakeHash, byte[] sslSender) - { - IDigest d = handshakeHash.ForkPrfHash(); - - if (sslSender != null && TlsUtilities.IsSsl(context)) - { - d.BlockUpdate(sslSender, 0, sslSender.Length); - } - - return DigestUtilities.DoFinal(d); - } - - protected internal static IDictionary ReadExtensions(MemoryStream input) - { - if (input.Position >= input.Length) - return null; - - byte[] extBytes = TlsUtilities.ReadOpaque16(input); - - AssertEmpty(input); - - MemoryStream buf = new MemoryStream(extBytes, false); - - // Integer -> byte[] - IDictionary extensions = Platform.CreateHashtable(); - - while (buf.Position < buf.Length) - { - int extension_type = TlsUtilities.ReadUint16(buf); - byte[] extension_data = TlsUtilities.ReadOpaque16(buf); - - /* - * RFC 3546 2.3 There MUST NOT be more than one extension of the same type. - */ - if (extensions.Contains(extension_type)) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - - extensions.Add(extension_type, extension_data); - } - - return extensions; - } - - protected internal static IList ReadSupplementalDataMessage(MemoryStream input) - { - byte[] supp_data = TlsUtilities.ReadOpaque24(input); - - AssertEmpty(input); - - MemoryStream buf = new MemoryStream(supp_data, false); - - IList supplementalData = Platform.CreateArrayList(); - - while (buf.Position < buf.Length) - { - int supp_data_type = TlsUtilities.ReadUint16(buf); - byte[] data = TlsUtilities.ReadOpaque16(buf); - - supplementalData.Add(new SupplementalDataEntry(supp_data_type, data)); - } - - return supplementalData; - } - - protected internal static void WriteExtensions(Stream output, IDictionary extensions) - { - MemoryStream buf = new MemoryStream(); - - /* - * NOTE: There are reports of servers that don't accept a zero-length extension as the last - * one, so we write out any zero-length ones first as a best-effort workaround. - */ - WriteSelectedExtensions(buf, extensions, true); - WriteSelectedExtensions(buf, extensions, false); - - byte[] extBytes = buf.ToArray(); - - TlsUtilities.WriteOpaque16(extBytes, output); - } - - protected internal static void WriteSelectedExtensions(Stream output, IDictionary extensions, bool selectEmpty) - { - foreach (int extension_type in extensions.Keys) - { - byte[] extension_data = (byte[])extensions[extension_type]; - if (selectEmpty == (extension_data.Length == 0)) - { - TlsUtilities.CheckUint16(extension_type); - TlsUtilities.WriteUint16(extension_type, output); - TlsUtilities.WriteOpaque16(extension_data, output); - } - } - } - - protected internal static void WriteSupplementalData(Stream output, IList supplementalData) - { - MemoryStream buf = new MemoryStream(); - - foreach (SupplementalDataEntry entry in supplementalData) - { - int supp_data_type = entry.DataType; - TlsUtilities.CheckUint16(supp_data_type); - TlsUtilities.WriteUint16(supp_data_type, buf); - TlsUtilities.WriteOpaque16(entry.Data, buf); - } - - byte[] supp_data = buf.ToArray(); - - TlsUtilities.WriteOpaque24(supp_data, output); - } - - protected internal static int GetPrfAlgorithm(TlsContext context, int ciphersuite) - { - bool isTLSv12 = TlsUtilities.IsTlsV12(context); - - switch (ciphersuite) - { - case CipherSuite.TLS_DH_anon_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DH_anon_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_DH_anon_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_DHE_PSK_WITH_AES_128_CCM: - case CipherSuite.TLS_DHE_PSK_WITH_AES_128_GCM_SHA256: - case CipherSuite.DRAFT_TLS_DHE_PSK_WITH_AES_128_OCB: - case CipherSuite.TLS_DHE_PSK_WITH_AES_256_CCM: - case CipherSuite.DRAFT_TLS_DHE_PSK_WITH_AES_256_OCB: - case CipherSuite.TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.DRAFT_TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_AES_128_CCM: - case CipherSuite.TLS_DHE_RSA_WITH_AES_128_CCM_8: - case CipherSuite.TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.DRAFT_TLS_DHE_RSA_WITH_AES_128_OCB: - case CipherSuite.TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_AES_256_CCM: - case CipherSuite.TLS_DHE_RSA_WITH_AES_256_CCM_8: - case CipherSuite.DRAFT_TLS_DHE_RSA_WITH_AES_256_OCB: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.DRAFT_TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_CCM: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.DRAFT_TLS_ECDHE_ECDSA_WITH_AES_128_OCB: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_CCM: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8: - case CipherSuite.DRAFT_TLS_ECDHE_ECDSA_WITH_AES_256_OCB: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.DRAFT_TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.DRAFT_TLS_ECDHE_PSK_WITH_AES_128_OCB: - case CipherSuite.DRAFT_TLS_ECDHE_PSK_WITH_AES_256_OCB: - case CipherSuite.DRAFT_TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.DRAFT_TLS_ECDHE_RSA_WITH_AES_128_OCB: - case CipherSuite.DRAFT_TLS_ECDHE_RSA_WITH_AES_256_OCB: - case CipherSuite.TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.DRAFT_TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.TLS_PSK_DHE_WITH_AES_128_CCM_8: - case CipherSuite.TLS_PSK_DHE_WITH_AES_256_CCM_8: - case CipherSuite.TLS_PSK_WITH_AES_128_CCM: - case CipherSuite.TLS_PSK_WITH_AES_128_CCM_8: - case CipherSuite.TLS_PSK_WITH_AES_128_GCM_SHA256: - case CipherSuite.DRAFT_TLS_PSK_WITH_AES_128_OCB: - case CipherSuite.TLS_PSK_WITH_AES_256_CCM: - case CipherSuite.TLS_PSK_WITH_AES_256_CCM_8: - case CipherSuite.DRAFT_TLS_PSK_WITH_AES_256_OCB: - case CipherSuite.TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.DRAFT_TLS_PSK_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.TLS_RSA_PSK_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.DRAFT_TLS_RSA_PSK_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.TLS_RSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_RSA_WITH_AES_128_CCM: - case CipherSuite.TLS_RSA_WITH_AES_128_CCM_8: - case CipherSuite.TLS_RSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_RSA_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_RSA_WITH_AES_256_CCM: - case CipherSuite.TLS_RSA_WITH_AES_256_CCM_8: - case CipherSuite.TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_RSA_WITH_NULL_SHA256: - { - if (isTLSv12) - { - return PrfAlgorithm.tls_prf_sha256; - } - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - - case CipherSuite.TLS_DH_anon_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_DH_DSS_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_DH_RSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_DHE_DSS_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_DHE_PSK_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_DHE_RSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_PSK_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_RSA_PSK_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_RSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384: - { - if (isTLSv12) - { - return PrfAlgorithm.tls_prf_sha384; - } - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - - case CipherSuite.TLS_DHE_PSK_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_DHE_PSK_WITH_NULL_SHA384: - case CipherSuite.TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_PSK_WITH_NULL_SHA384: - case CipherSuite.TLS_PSK_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_PSK_WITH_NULL_SHA384: - case CipherSuite.TLS_RSA_PSK_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_RSA_PSK_WITH_NULL_SHA384: - { - if (isTLSv12) - { - return PrfAlgorithm.tls_prf_sha384; - } - return PrfAlgorithm.tls_prf_legacy; - } - - default: - { - if (isTLSv12) - { - return PrfAlgorithm.tls_prf_sha256; - } - return PrfAlgorithm.tls_prf_legacy; - } - } - } - - internal class HandshakeMessage - : MemoryStream - { - internal HandshakeMessage(byte handshakeType) - : this(handshakeType, 60) - { - } - - internal HandshakeMessage(byte handshakeType, int length) - : base(length + 4) - { - TlsUtilities.WriteUint8(handshakeType, this); - // Reserve space for length - TlsUtilities.WriteUint24(0, this); - } - - internal void Write(byte[] data) - { - Write(data, 0, data.Length); - } - - internal void WriteToRecordStream(TlsProtocol protocol) - { - // Patch actual length back in - long length = Length - 4; - TlsUtilities.CheckUint24(length); - this.Position = 1; - TlsUtilities.WriteUint24((int)length, this); - -#if PORTABLE - byte[] buf = ToArray(); - int bufLen = buf.Length; -#else - byte[] buf = GetBuffer(); - int bufLen = (int)Length; -#endif - - protocol.WriteHandshakeMessage(buf, 0, bufLen); - Platform.Dispose(this); - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsProtocolHandler.cs b/bc-sharp-crypto/src/crypto/tls/TlsProtocolHandler.cs deleted file mode 100644 index 6f22346..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsProtocolHandler.cs +++ /dev/null @@ -1,39 +0,0 @@ -using System; -using System.Collections; -using System.IO; -using System.Text; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto.Agreement; -using Org.BouncyCastle.Crypto.Agreement.Srp; -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Crypto.Encodings; -using Org.BouncyCastle.Crypto.Engines; -using Org.BouncyCastle.Crypto.Generators; -using Org.BouncyCastle.Crypto.IO; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Prng; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Date; - -namespace Org.BouncyCastle.Crypto.Tls -{ - [Obsolete("Use 'TlsClientProtocol' instead")] - public class TlsProtocolHandler - : TlsClientProtocol - { - public TlsProtocolHandler(Stream stream, SecureRandom secureRandom) - : base(stream, stream, secureRandom) - { - } - - /// Both streams can be the same object - public TlsProtocolHandler(Stream input, Stream output, SecureRandom secureRandom) - : base(input, output, secureRandom) - { - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsPskIdentity.cs b/bc-sharp-crypto/src/crypto/tls/TlsPskIdentity.cs deleted file mode 100644 index 119064e..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsPskIdentity.cs +++ /dev/null @@ -1,15 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public interface TlsPskIdentity - { - void SkipIdentityHint(); - - void NotifyIdentityHint(byte[] psk_identity_hint); - - byte[] GetPskIdentity(); - - byte[] GetPsk(); - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsPskIdentityManager.cs b/bc-sharp-crypto/src/crypto/tls/TlsPskIdentityManager.cs deleted file mode 100644 index a72c229..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsPskIdentityManager.cs +++ /dev/null @@ -1,11 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public interface TlsPskIdentityManager - { - byte[] GetHint(); - - byte[] GetPsk(byte[] identity); - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsPskKeyExchange.cs b/bc-sharp-crypto/src/crypto/tls/TlsPskKeyExchange.cs deleted file mode 100644 index 0af7f7a..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsPskKeyExchange.cs +++ /dev/null @@ -1,328 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /// (D)TLS PSK key exchange (RFC 4279). - public class TlsPskKeyExchange - : AbstractTlsKeyExchange - { - protected TlsPskIdentity mPskIdentity; - protected TlsPskIdentityManager mPskIdentityManager; - - protected DHParameters mDHParameters; - protected int[] mNamedCurves; - protected byte[] mClientECPointFormats, mServerECPointFormats; - - protected byte[] mPskIdentityHint = null; - protected byte[] mPsk = null; - - protected DHPrivateKeyParameters mDHAgreePrivateKey = null; - protected DHPublicKeyParameters mDHAgreePublicKey = null; - - protected ECPrivateKeyParameters mECAgreePrivateKey = null; - protected ECPublicKeyParameters mECAgreePublicKey = null; - - protected AsymmetricKeyParameter mServerPublicKey = null; - protected RsaKeyParameters mRsaServerPublicKey = null; - protected TlsEncryptionCredentials mServerCredentials = null; - protected byte[] mPremasterSecret; - - public TlsPskKeyExchange(int keyExchange, IList supportedSignatureAlgorithms, TlsPskIdentity pskIdentity, - TlsPskIdentityManager pskIdentityManager, DHParameters dhParameters, int[] namedCurves, - byte[] clientECPointFormats, byte[] serverECPointFormats) - : base(keyExchange, supportedSignatureAlgorithms) - { - switch (keyExchange) - { - case KeyExchangeAlgorithm.DHE_PSK: - case KeyExchangeAlgorithm.ECDHE_PSK: - case KeyExchangeAlgorithm.PSK: - case KeyExchangeAlgorithm.RSA_PSK: - break; - default: - throw new InvalidOperationException("unsupported key exchange algorithm"); - } - - this.mPskIdentity = pskIdentity; - this.mPskIdentityManager = pskIdentityManager; - this.mDHParameters = dhParameters; - this.mNamedCurves = namedCurves; - this.mClientECPointFormats = clientECPointFormats; - this.mServerECPointFormats = serverECPointFormats; - } - - public override void SkipServerCredentials() - { - if (mKeyExchange == KeyExchangeAlgorithm.RSA_PSK) - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - - public override void ProcessServerCredentials(TlsCredentials serverCredentials) - { - if (!(serverCredentials is TlsEncryptionCredentials)) - throw new TlsFatalAlert(AlertDescription.internal_error); - - ProcessServerCertificate(serverCredentials.Certificate); - - this.mServerCredentials = (TlsEncryptionCredentials)serverCredentials; - } - - public override byte[] GenerateServerKeyExchange() - { - this.mPskIdentityHint = mPskIdentityManager.GetHint(); - - if (this.mPskIdentityHint == null && !RequiresServerKeyExchange) - return null; - - MemoryStream buf = new MemoryStream(); - - if (this.mPskIdentityHint == null) - { - TlsUtilities.WriteOpaque16(TlsUtilities.EmptyBytes, buf); - } - else - { - TlsUtilities.WriteOpaque16(this.mPskIdentityHint, buf); - } - - if (this.mKeyExchange == KeyExchangeAlgorithm.DHE_PSK) - { - if (this.mDHParameters == null) - throw new TlsFatalAlert(AlertDescription.internal_error); - - this.mDHAgreePrivateKey = TlsDHUtilities.GenerateEphemeralServerKeyExchange(mContext.SecureRandom, - this.mDHParameters, buf); - } - else if (this.mKeyExchange == KeyExchangeAlgorithm.ECDHE_PSK) - { - this.mECAgreePrivateKey = TlsEccUtilities.GenerateEphemeralServerKeyExchange(mContext.SecureRandom, - mNamedCurves, mClientECPointFormats, buf); - } - - return buf.ToArray(); - } - - public override void ProcessServerCertificate(Certificate serverCertificate) - { - if (mKeyExchange != KeyExchangeAlgorithm.RSA_PSK) - throw new TlsFatalAlert(AlertDescription.unexpected_message); - if (serverCertificate.IsEmpty) - throw new TlsFatalAlert(AlertDescription.bad_certificate); - - X509CertificateStructure x509Cert = serverCertificate.GetCertificateAt(0); - - SubjectPublicKeyInfo keyInfo = x509Cert.SubjectPublicKeyInfo; - try - { - this.mServerPublicKey = PublicKeyFactory.CreateKey(keyInfo); - } - catch (Exception e) - { - throw new TlsFatalAlert(AlertDescription.unsupported_certificate, e); - } - - // Sanity check the PublicKeyFactory - if (this.mServerPublicKey.IsPrivate) - throw new TlsFatalAlert(AlertDescription.internal_error); - - this.mRsaServerPublicKey = ValidateRsaPublicKey((RsaKeyParameters)this.mServerPublicKey); - - TlsUtilities.ValidateKeyUsage(x509Cert, KeyUsage.KeyEncipherment); - - base.ProcessServerCertificate(serverCertificate); - } - - public override bool RequiresServerKeyExchange - { - get - { - switch (mKeyExchange) - { - case KeyExchangeAlgorithm.DHE_PSK: - case KeyExchangeAlgorithm.ECDHE_PSK: - return true; - default: - return false; - } - } - } - - public override void ProcessServerKeyExchange(Stream input) - { - this.mPskIdentityHint = TlsUtilities.ReadOpaque16(input); - - if (this.mKeyExchange == KeyExchangeAlgorithm.DHE_PSK) - { - ServerDHParams serverDHParams = ServerDHParams.Parse(input); - - this.mDHAgreePublicKey = TlsDHUtilities.ValidateDHPublicKey(serverDHParams.PublicKey); - this.mDHParameters = mDHAgreePublicKey.Parameters; - } - else if (this.mKeyExchange == KeyExchangeAlgorithm.ECDHE_PSK) - { - ECDomainParameters ecParams = TlsEccUtilities.ReadECParameters(mNamedCurves, mClientECPointFormats, input); - - byte[] point = TlsUtilities.ReadOpaque8(input); - - this.mECAgreePublicKey = TlsEccUtilities.ValidateECPublicKey(TlsEccUtilities.DeserializeECPublicKey( - mClientECPointFormats, ecParams, point)); - } - } - - public override void ValidateCertificateRequest(CertificateRequest certificateRequest) - { - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - - public override void ProcessClientCredentials(TlsCredentials clientCredentials) - { - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - public override void GenerateClientKeyExchange(Stream output) - { - if (mPskIdentityHint == null) - { - mPskIdentity.SkipIdentityHint(); - } - else - { - mPskIdentity.NotifyIdentityHint(mPskIdentityHint); - } - - byte[] psk_identity = mPskIdentity.GetPskIdentity(); - if (psk_identity == null) - throw new TlsFatalAlert(AlertDescription.internal_error); - - this.mPsk = mPskIdentity.GetPsk(); - if (mPsk == null) - throw new TlsFatalAlert(AlertDescription.internal_error); - - TlsUtilities.WriteOpaque16(psk_identity, output); - - mContext.SecurityParameters.pskIdentity = psk_identity; - - if (this.mKeyExchange == KeyExchangeAlgorithm.DHE_PSK) - { - this.mDHAgreePrivateKey = TlsDHUtilities.GenerateEphemeralClientKeyExchange(mContext.SecureRandom, - mDHParameters, output); - } - else if (this.mKeyExchange == KeyExchangeAlgorithm.ECDHE_PSK) - { - this.mECAgreePrivateKey = TlsEccUtilities.GenerateEphemeralClientKeyExchange(mContext.SecureRandom, - mServerECPointFormats, mECAgreePublicKey.Parameters, output); - } - else if (this.mKeyExchange == KeyExchangeAlgorithm.RSA_PSK) - { - this.mPremasterSecret = TlsRsaUtilities.GenerateEncryptedPreMasterSecret(mContext, - this.mRsaServerPublicKey, output); - } - } - - public override void ProcessClientKeyExchange(Stream input) - { - byte[] psk_identity = TlsUtilities.ReadOpaque16(input); - - this.mPsk = mPskIdentityManager.GetPsk(psk_identity); - if (mPsk == null) - throw new TlsFatalAlert(AlertDescription.unknown_psk_identity); - - mContext.SecurityParameters.pskIdentity = psk_identity; - - if (this.mKeyExchange == KeyExchangeAlgorithm.DHE_PSK) - { - BigInteger Yc = TlsDHUtilities.ReadDHParameter(input); - - this.mDHAgreePublicKey = TlsDHUtilities.ValidateDHPublicKey(new DHPublicKeyParameters(Yc, mDHParameters)); - } - else if (this.mKeyExchange == KeyExchangeAlgorithm.ECDHE_PSK) - { - byte[] point = TlsUtilities.ReadOpaque8(input); - - ECDomainParameters curve_params = this.mECAgreePrivateKey.Parameters; - - this.mECAgreePublicKey = TlsEccUtilities.ValidateECPublicKey(TlsEccUtilities.DeserializeECPublicKey( - mServerECPointFormats, curve_params, point)); - } - else if (this.mKeyExchange == KeyExchangeAlgorithm.RSA_PSK) - { - byte[] encryptedPreMasterSecret; - if (TlsUtilities.IsSsl(mContext)) - { - // TODO Do any SSLv3 clients actually include the length? - encryptedPreMasterSecret = Streams.ReadAll(input); - } - else - { - encryptedPreMasterSecret = TlsUtilities.ReadOpaque16(input); - } - - this.mPremasterSecret = mServerCredentials.DecryptPreMasterSecret(encryptedPreMasterSecret); - } - } - - public override byte[] GeneratePremasterSecret() - { - byte[] other_secret = GenerateOtherSecret(mPsk.Length); - - MemoryStream buf = new MemoryStream(4 + other_secret.Length + mPsk.Length); - TlsUtilities.WriteOpaque16(other_secret, buf); - TlsUtilities.WriteOpaque16(mPsk, buf); - - Arrays.Fill(mPsk, (byte)0); - this.mPsk = null; - - return buf.ToArray(); - } - - protected virtual byte[] GenerateOtherSecret(int pskLength) - { - if (this.mKeyExchange == KeyExchangeAlgorithm.DHE_PSK) - { - if (mDHAgreePrivateKey != null) - { - return TlsDHUtilities.CalculateDHBasicAgreement(mDHAgreePublicKey, mDHAgreePrivateKey); - } - - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - if (this.mKeyExchange == KeyExchangeAlgorithm.ECDHE_PSK) - { - if (mECAgreePrivateKey != null) - { - return TlsEccUtilities.CalculateECDHBasicAgreement(mECAgreePublicKey, mECAgreePrivateKey); - } - - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - if (this.mKeyExchange == KeyExchangeAlgorithm.RSA_PSK) - { - return this.mPremasterSecret; - } - - return new byte[pskLength]; - } - - protected virtual RsaKeyParameters ValidateRsaPublicKey(RsaKeyParameters key) - { - // TODO What is the minimum bit length required? - // key.Modulus.BitLength; - - if (!key.Exponent.IsProbablePrime(2)) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - - return key; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsRsaKeyExchange.cs b/bc-sharp-crypto/src/crypto/tls/TlsRsaKeyExchange.cs deleted file mode 100644 index b02d564..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsRsaKeyExchange.cs +++ /dev/null @@ -1,140 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto.Encodings; -using Org.BouncyCastle.Crypto.Engines; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /// (D)TLS and SSLv3 RSA key exchange. - public class TlsRsaKeyExchange - : AbstractTlsKeyExchange - { - protected AsymmetricKeyParameter mServerPublicKey = null; - - protected RsaKeyParameters mRsaServerPublicKey = null; - - protected TlsEncryptionCredentials mServerCredentials = null; - - protected byte[] mPremasterSecret; - - public TlsRsaKeyExchange(IList supportedSignatureAlgorithms) - : base(KeyExchangeAlgorithm.RSA, supportedSignatureAlgorithms) - { - } - - public override void SkipServerCredentials() - { - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - - public override void ProcessServerCredentials(TlsCredentials serverCredentials) - { - if (!(serverCredentials is TlsEncryptionCredentials)) - throw new TlsFatalAlert(AlertDescription.internal_error); - - ProcessServerCertificate(serverCredentials.Certificate); - - this.mServerCredentials = (TlsEncryptionCredentials)serverCredentials; - } - - public override void ProcessServerCertificate(Certificate serverCertificate) - { - if (serverCertificate.IsEmpty) - throw new TlsFatalAlert(AlertDescription.bad_certificate); - - X509CertificateStructure x509Cert = serverCertificate.GetCertificateAt(0); - - SubjectPublicKeyInfo keyInfo = x509Cert.SubjectPublicKeyInfo; - try - { - this.mServerPublicKey = PublicKeyFactory.CreateKey(keyInfo); - } - catch (Exception e) - { - throw new TlsFatalAlert(AlertDescription.unsupported_certificate, e); - } - - // Sanity check the PublicKeyFactory - if (this.mServerPublicKey.IsPrivate) - throw new TlsFatalAlert(AlertDescription.internal_error); - - this.mRsaServerPublicKey = ValidateRsaPublicKey((RsaKeyParameters)this.mServerPublicKey); - - TlsUtilities.ValidateKeyUsage(x509Cert, KeyUsage.KeyEncipherment); - - base.ProcessServerCertificate(serverCertificate); - } - - public override void ValidateCertificateRequest(CertificateRequest certificateRequest) - { - byte[] types = certificateRequest.CertificateTypes; - for (int i = 0; i < types.Length; ++i) - { - switch (types[i]) - { - case ClientCertificateType.rsa_sign: - case ClientCertificateType.dss_sign: - case ClientCertificateType.ecdsa_sign: - break; - default: - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - } - } - - public override void ProcessClientCredentials(TlsCredentials clientCredentials) - { - if (!(clientCredentials is TlsSignerCredentials)) - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - public override void GenerateClientKeyExchange(Stream output) - { - this.mPremasterSecret = TlsRsaUtilities.GenerateEncryptedPreMasterSecret(mContext, mRsaServerPublicKey, output); - } - - public override void ProcessClientKeyExchange(Stream input) - { - byte[] encryptedPreMasterSecret; - if (TlsUtilities.IsSsl(mContext)) - { - // TODO Do any SSLv3 clients actually include the length? - encryptedPreMasterSecret = Streams.ReadAll(input); - } - else - { - encryptedPreMasterSecret = TlsUtilities.ReadOpaque16(input); - } - - this.mPremasterSecret = mServerCredentials.DecryptPreMasterSecret(encryptedPreMasterSecret); - } - - public override byte[] GeneratePremasterSecret() - { - if (this.mPremasterSecret == null) - throw new TlsFatalAlert(AlertDescription.internal_error); - - byte[] tmp = this.mPremasterSecret; - this.mPremasterSecret = null; - return tmp; - } - - protected virtual RsaKeyParameters ValidateRsaPublicKey(RsaKeyParameters key) - { - // TODO What is the minimum bit length required? - // key.Modulus.BitLength; - - if (!key.Exponent.IsProbablePrime(2)) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - - return key; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsRsaSigner.cs b/bc-sharp-crypto/src/crypto/tls/TlsRsaSigner.cs deleted file mode 100644 index 1614f50..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsRsaSigner.cs +++ /dev/null @@ -1,102 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Crypto.Encodings; -using Org.BouncyCastle.Crypto.Engines; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Signers; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class TlsRsaSigner - : AbstractTlsSigner - { - public override byte[] GenerateRawSignature(SignatureAndHashAlgorithm algorithm, - AsymmetricKeyParameter privateKey, byte[] hash) - { - ISigner signer = MakeSigner(algorithm, true, true, - new ParametersWithRandom(privateKey, this.mContext.SecureRandom)); - signer.BlockUpdate(hash, 0, hash.Length); - return signer.GenerateSignature(); - } - - public override bool VerifyRawSignature(SignatureAndHashAlgorithm algorithm, byte[] sigBytes, - AsymmetricKeyParameter publicKey, byte[] hash) - { - ISigner signer = MakeSigner(algorithm, true, false, publicKey); - signer.BlockUpdate(hash, 0, hash.Length); - return signer.VerifySignature(sigBytes); - } - - public override ISigner CreateSigner(SignatureAndHashAlgorithm algorithm, AsymmetricKeyParameter privateKey) - { - return MakeSigner(algorithm, false, true, new ParametersWithRandom(privateKey, this.mContext.SecureRandom)); - } - - public override ISigner CreateVerifyer(SignatureAndHashAlgorithm algorithm, AsymmetricKeyParameter publicKey) - { - return MakeSigner(algorithm, false, false, publicKey); - } - - public override bool IsValidPublicKey(AsymmetricKeyParameter publicKey) - { - return publicKey is RsaKeyParameters && !publicKey.IsPrivate; - } - - protected virtual ISigner MakeSigner(SignatureAndHashAlgorithm algorithm, bool raw, bool forSigning, - ICipherParameters cp) - { - if ((algorithm != null) != TlsUtilities.IsTlsV12(mContext)) - throw new InvalidOperationException(); - if (algorithm != null && algorithm.Signature != SignatureAlgorithm.rsa) - throw new InvalidOperationException(); - - IDigest d; - if (raw) - { - d = new NullDigest(); - } - else if (algorithm == null) - { - d = new CombinedHash(); - } - else - { - d = TlsUtilities.CreateHash(algorithm.Hash); - } - - ISigner s; - if (algorithm != null) - { - /* - * RFC 5246 4.7. In RSA signing, the opaque vector contains the signature generated - * using the RSASSA-PKCS1-v1_5 signature scheme defined in [PKCS1]. - */ - s = new RsaDigestSigner(d, TlsUtilities.GetOidForHashAlgorithm(algorithm.Hash)); - } - else - { - /* - * RFC 5246 4.7. Note that earlier versions of TLS used a different RSA signature scheme - * that did not include a DigestInfo encoding. - */ - s = new GenericSigner(CreateRsaImpl(), d); - } - s.Init(forSigning, cp); - return s; - } - - protected virtual IAsymmetricBlockCipher CreateRsaImpl() - { - /* - * RFC 5246 7.4.7.1. Implementation note: It is now known that remote timing-based attacks - * on TLS are possible, at least when the client and server are on the same LAN. - * Accordingly, implementations that use static RSA keys MUST use RSA blinding or some other - * anti-timing technique, as described in [TIMING]. - */ - return new Pkcs1Encoding(new RsaBlindedEngine()); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsRsaUtilities.cs b/bc-sharp-crypto/src/crypto/tls/TlsRsaUtilities.cs deleted file mode 100644 index 0e42c17..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsRsaUtilities.cs +++ /dev/null @@ -1,132 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Crypto.Encodings; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Engines; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public abstract class TlsRsaUtilities - { - /// - public static byte[] GenerateEncryptedPreMasterSecret(TlsContext context, RsaKeyParameters rsaServerPublicKey, - Stream output) - { - /* - * Choose a PremasterSecret and send it encrypted to the server - */ - byte[] premasterSecret = new byte[48]; - context.SecureRandom.NextBytes(premasterSecret); - TlsUtilities.WriteVersion(context.ClientVersion, premasterSecret, 0); - - Pkcs1Encoding encoding = new Pkcs1Encoding(new RsaBlindedEngine()); - encoding.Init(true, new ParametersWithRandom(rsaServerPublicKey, context.SecureRandom)); - - try - { - byte[] encryptedPreMasterSecret = encoding.ProcessBlock(premasterSecret, 0, premasterSecret.Length); - - if (TlsUtilities.IsSsl(context)) - { - // TODO Do any SSLv3 servers actually expect the length? - output.Write(encryptedPreMasterSecret, 0, encryptedPreMasterSecret.Length); - } - else - { - TlsUtilities.WriteOpaque16(encryptedPreMasterSecret, output); - } - } - catch (InvalidCipherTextException e) - { - /* - * This should never happen, only during decryption. - */ - throw new TlsFatalAlert(AlertDescription.internal_error, e); - } - - return premasterSecret; - } - - public static byte[] SafeDecryptPreMasterSecret(TlsContext context, RsaKeyParameters rsaServerPrivateKey, - byte[] encryptedPreMasterSecret) - { - /* - * RFC 5246 7.4.7.1. - */ - ProtocolVersion clientVersion = context.ClientVersion; - - // TODO Provide as configuration option? - bool versionNumberCheckDisabled = false; - - /* - * Generate 48 random bytes we can use as a Pre-Master-Secret, if the - * PKCS1 padding check should fail. - */ - byte[] fallback = new byte[48]; - context.SecureRandom.NextBytes(fallback); - - byte[] M = Arrays.Clone(fallback); - try - { - Pkcs1Encoding encoding = new Pkcs1Encoding(new RsaBlindedEngine(), fallback); - encoding.Init(false, - new ParametersWithRandom(rsaServerPrivateKey, context.SecureRandom)); - - M = encoding.ProcessBlock(encryptedPreMasterSecret, 0, encryptedPreMasterSecret.Length); - } - catch (Exception) - { - /* - * This should never happen since the decryption should never throw an exception - * and return a random value instead. - * - * In any case, a TLS server MUST NOT generate an alert if processing an - * RSA-encrypted premaster secret message fails, or the version number is not as - * expected. Instead, it MUST continue the handshake with a randomly generated - * premaster secret. - */ - } - - /* - * If ClientHello.client_version is TLS 1.1 or higher, server implementations MUST - * check the version number [..]. - */ - if (versionNumberCheckDisabled && clientVersion.IsEqualOrEarlierVersionOf(ProtocolVersion.TLSv10)) - { - /* - * If the version number is TLS 1.0 or earlier, server - * implementations SHOULD check the version number, but MAY have a - * configuration option to disable the check. - * - * So there is nothing to do here. - */ - } - else - { - /* - * OK, we need to compare the version number in the decrypted Pre-Master-Secret with the - * clientVersion received during the handshake. If they don't match, we replace the - * decrypted Pre-Master-Secret with a random one. - */ - int correct = (clientVersion.MajorVersion ^ (M[0] & 0xff)) - | (clientVersion.MinorVersion ^ (M[1] & 0xff)); - correct |= correct >> 1; - correct |= correct >> 2; - correct |= correct >> 4; - int mask = ~((correct & 1) - 1); - - /* - * mask will be all bits set to 0xff if the version number differed. - */ - for (int i = 0; i < 48; i++) - { - M[i] = (byte)((M[i] & (~mask)) | (fallback[i] & mask)); - } - } - return M; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsServer.cs b/bc-sharp-crypto/src/crypto/tls/TlsServer.cs deleted file mode 100644 index e791f93..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsServer.cs +++ /dev/null @@ -1,93 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public interface TlsServer - : TlsPeer - { - void Init(TlsServerContext context); - - /// - void NotifyClientVersion(ProtocolVersion clientVersion); - - /// - void NotifyFallback(bool isFallback); - - /// - void NotifyOfferedCipherSuites(int[] offeredCipherSuites); - - /// - void NotifyOfferedCompressionMethods(byte[] offeredCompressionMethods); - - /// A (Int32 -> byte[]). Will never be null. - /// - void ProcessClientExtensions(IDictionary clientExtensions); - - /// - ProtocolVersion GetServerVersion(); - - /// - int GetSelectedCipherSuite(); - - /// - byte GetSelectedCompressionMethod(); - - /// - /// Get the (optional) table of server extensions to be included in (extended) server hello. - /// - /// - /// A (Int32 -> byte[]). May be null. - /// - /// - IDictionary GetServerExtensions(); - - /// - /// A (). May be null. - /// - /// - IList GetServerSupplementalData(); - - /// - TlsCredentials GetCredentials(); - - /// - /// This method will be called (only) if the server included an extension of type - /// "status_request" with empty "extension_data" in the extended server hello. See RFC 3546 - /// 3.6. Certificate Status Request. If a non-null is returned, it - /// is sent to the client as a handshake message of type "certificate_status". - /// - /// A to be sent to the client (or null for none). - /// - CertificateStatus GetCertificateStatus(); - - /// - TlsKeyExchange GetKeyExchange(); - - /// - CertificateRequest GetCertificateRequest(); - - /// () - /// - void ProcessClientSupplementalData(IList clientSupplementalData); - - /// - /// Called by the protocol handler to report the client certificate, only if GetCertificateRequest - /// returned non-null. - /// - /// Note: this method is responsible for certificate verification and validation. - /// the effective client certificate (may be an empty chain). - /// - void NotifyClientCertificate(Certificate clientCertificate); - - /// RFC 5077 3.3. NewSessionTicket Handshake Message. - /// - /// This method will be called (only) if a NewSessionTicket extension was sent by the server. See - /// RFC 5077 4. Recommended Ticket Construction for recommended format and protection. - /// - /// The ticket) - /// - NewSessionTicket GetNewSessionTicket(); - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsServerContext.cs b/bc-sharp-crypto/src/crypto/tls/TlsServerContext.cs deleted file mode 100644 index 4021571..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsServerContext.cs +++ /dev/null @@ -1,11 +0,0 @@ -using System; - -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public interface TlsServerContext - : TlsContext - { - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsServerContextImpl.cs b/bc-sharp-crypto/src/crypto/tls/TlsServerContextImpl.cs deleted file mode 100644 index d56566f..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsServerContextImpl.cs +++ /dev/null @@ -1,20 +0,0 @@ -using System; - -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Crypto.Tls -{ - internal class TlsServerContextImpl - : AbstractTlsContext, TlsServerContext - { - internal TlsServerContextImpl(SecureRandom secureRandom, SecurityParameters securityParameters) - : base(secureRandom, securityParameters) - { - } - - public override bool IsServer - { - get { return true; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsServerProtocol.cs b/bc-sharp-crypto/src/crypto/tls/TlsServerProtocol.cs deleted file mode 100644 index c2bfbcb..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsServerProtocol.cs +++ /dev/null @@ -1,833 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class TlsServerProtocol - : TlsProtocol - { - protected TlsServer mTlsServer = null; - internal TlsServerContextImpl mTlsServerContext = null; - - protected TlsKeyExchange mKeyExchange = null; - protected TlsCredentials mServerCredentials = null; - protected CertificateRequest mCertificateRequest = null; - - protected short mClientCertificateType = -1; - protected TlsHandshakeHash mPrepareFinishHash = null; - - /** - * Constructor for blocking mode. - * @param stream The bi-directional stream of data to/from the client - * @param output The stream of data to the client - * @param secureRandom Random number generator for various cryptographic functions - */ - public TlsServerProtocol(Stream stream, SecureRandom secureRandom) - : base(stream, secureRandom) - { - } - - /** - * Constructor for blocking mode. - * @param input The stream of data from the client - * @param output The stream of data to the client - * @param secureRandom Random number generator for various cryptographic functions - */ - public TlsServerProtocol(Stream input, Stream output, SecureRandom secureRandom) - : base(input, output, secureRandom) - { - } - - /** - * Constructor for non-blocking mode.
- *
- * When data is received, use {@link #offerInput(java.nio.ByteBuffer)} to - * provide the received ciphertext, then use - * {@link #readInput(byte[], int, int)} to read the corresponding cleartext.
- *
- * Similarly, when data needs to be sent, use - * {@link #offerOutput(byte[], int, int)} to provide the cleartext, then use - * {@link #readOutput(byte[], int, int)} to get the corresponding - * ciphertext. - * - * @param secureRandom - * Random number generator for various cryptographic functions - */ - public TlsServerProtocol(SecureRandom secureRandom) - : base(secureRandom) - { - } - - /** - * Receives a TLS handshake in the role of server.
- *
- * In blocking mode, this will not return until the handshake is complete. - * In non-blocking mode, use {@link TlsPeer#notifyHandshakeComplete()} to - * receive a callback when the handshake is complete. - * - * @param tlsServer - * @throws IOException If in blocking mode and handshake was not successful. - */ - public virtual void Accept(TlsServer tlsServer) - { - if (tlsServer == null) - throw new ArgumentNullException("tlsServer"); - if (this.mTlsServer != null) - throw new InvalidOperationException("'Accept' can only be called once"); - - this.mTlsServer = tlsServer; - - this.mSecurityParameters = new SecurityParameters(); - this.mSecurityParameters.entity = ConnectionEnd.server; - - this.mTlsServerContext = new TlsServerContextImpl(mSecureRandom, mSecurityParameters); - - this.mSecurityParameters.serverRandom = CreateRandomBlock(tlsServer.ShouldUseGmtUnixTime(), - mTlsServerContext.NonceRandomGenerator); - - this.mTlsServer.Init(mTlsServerContext); - this.mRecordStream.Init(mTlsServerContext); - - this.mRecordStream.SetRestrictReadVersion(false); - - BlockForHandshake(); - } - - protected override void CleanupHandshake() - { - base.CleanupHandshake(); - - this.mKeyExchange = null; - this.mServerCredentials = null; - this.mCertificateRequest = null; - this.mPrepareFinishHash = null; - } - - protected override TlsContext Context - { - get { return mTlsServerContext; } - } - - internal override AbstractTlsContext ContextAdmin - { - get { return mTlsServerContext; } - } - - protected override TlsPeer Peer - { - get { return mTlsServer; } - } - - protected override void HandleHandshakeMessage(byte type, MemoryStream buf) - { - switch (type) - { - case HandshakeType.client_hello: - { - switch (this.mConnectionState) - { - case CS_START: - { - ReceiveClientHelloMessage(buf); - this.mConnectionState = CS_CLIENT_HELLO; - - SendServerHelloMessage(); - this.mConnectionState = CS_SERVER_HELLO; - - mRecordStream.NotifyHelloComplete(); - - IList serverSupplementalData = mTlsServer.GetServerSupplementalData(); - if (serverSupplementalData != null) - { - SendSupplementalDataMessage(serverSupplementalData); - } - this.mConnectionState = CS_SERVER_SUPPLEMENTAL_DATA; - - this.mKeyExchange = mTlsServer.GetKeyExchange(); - this.mKeyExchange.Init(Context); - - this.mServerCredentials = mTlsServer.GetCredentials(); - - Certificate serverCertificate = null; - - if (this.mServerCredentials == null) - { - this.mKeyExchange.SkipServerCredentials(); - } - else - { - this.mKeyExchange.ProcessServerCredentials(this.mServerCredentials); - - serverCertificate = this.mServerCredentials.Certificate; - SendCertificateMessage(serverCertificate); - } - this.mConnectionState = CS_SERVER_CERTIFICATE; - - // TODO[RFC 3546] Check whether empty certificates is possible, allowed, or excludes CertificateStatus - if (serverCertificate == null || serverCertificate.IsEmpty) - { - this.mAllowCertificateStatus = false; - } - - if (this.mAllowCertificateStatus) - { - CertificateStatus certificateStatus = mTlsServer.GetCertificateStatus(); - if (certificateStatus != null) - { - SendCertificateStatusMessage(certificateStatus); - } - } - - this.mConnectionState = CS_CERTIFICATE_STATUS; - - byte[] serverKeyExchange = this.mKeyExchange.GenerateServerKeyExchange(); - if (serverKeyExchange != null) - { - SendServerKeyExchangeMessage(serverKeyExchange); - } - this.mConnectionState = CS_SERVER_KEY_EXCHANGE; - - if (this.mServerCredentials != null) - { - this.mCertificateRequest = mTlsServer.GetCertificateRequest(); - if (this.mCertificateRequest != null) - { - if (TlsUtilities.IsTlsV12(Context) != (mCertificateRequest.SupportedSignatureAlgorithms != null)) - throw new TlsFatalAlert(AlertDescription.internal_error); - - this.mKeyExchange.ValidateCertificateRequest(mCertificateRequest); - - SendCertificateRequestMessage(mCertificateRequest); - - TlsUtilities.TrackHashAlgorithms(this.mRecordStream.HandshakeHash, - this.mCertificateRequest.SupportedSignatureAlgorithms); - } - } - this.mConnectionState = CS_CERTIFICATE_REQUEST; - - SendServerHelloDoneMessage(); - this.mConnectionState = CS_SERVER_HELLO_DONE; - - this.mRecordStream.HandshakeHash.SealHashAlgorithms(); - - break; - } - case CS_END: - { - RefuseRenegotiation(); - break; - } - default: - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - break; - } - case HandshakeType.supplemental_data: - { - switch (this.mConnectionState) - { - case CS_SERVER_HELLO_DONE: - { - mTlsServer.ProcessClientSupplementalData(ReadSupplementalDataMessage(buf)); - this.mConnectionState = CS_CLIENT_SUPPLEMENTAL_DATA; - break; - } - default: - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - break; - } - case HandshakeType.certificate: - { - switch (this.mConnectionState) - { - case CS_SERVER_HELLO_DONE: - case CS_CLIENT_SUPPLEMENTAL_DATA: - { - if (mConnectionState < CS_CLIENT_SUPPLEMENTAL_DATA) - { - mTlsServer.ProcessClientSupplementalData(null); - } - - if (this.mCertificateRequest == null) - throw new TlsFatalAlert(AlertDescription.unexpected_message); - - ReceiveCertificateMessage(buf); - this.mConnectionState = CS_CLIENT_CERTIFICATE; - break; - } - default: - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - break; - } - case HandshakeType.client_key_exchange: - { - switch (this.mConnectionState) - { - case CS_SERVER_HELLO_DONE: - case CS_CLIENT_SUPPLEMENTAL_DATA: - case CS_CLIENT_CERTIFICATE: - { - if (mConnectionState < CS_CLIENT_SUPPLEMENTAL_DATA) - { - mTlsServer.ProcessClientSupplementalData(null); - } - - if (mConnectionState < CS_CLIENT_CERTIFICATE) - { - if (this.mCertificateRequest == null) - { - this.mKeyExchange.SkipClientCredentials(); - } - else - { - if (TlsUtilities.IsTlsV12(Context)) - { - /* - * RFC 5246 If no suitable certificate is available, the client MUST Send a - * certificate message containing no certificates. - * - * NOTE: In previous RFCs, this was SHOULD instead of MUST. - */ - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - else if (TlsUtilities.IsSsl(Context)) - { - if (this.mPeerCertificate == null) - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - else - { - NotifyClientCertificate(Certificate.EmptyChain); - } - } - } - - ReceiveClientKeyExchangeMessage(buf); - this.mConnectionState = CS_CLIENT_KEY_EXCHANGE; - break; - } - default: - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - break; - } - case HandshakeType.certificate_verify: - { - switch (this.mConnectionState) - { - case CS_CLIENT_KEY_EXCHANGE: - { - /* - * RFC 5246 7.4.8 This message is only sent following a client certificate that has - * signing capability (i.e., all certificates except those containing fixed - * Diffie-Hellman parameters). - */ - if (!ExpectCertificateVerifyMessage()) - throw new TlsFatalAlert(AlertDescription.unexpected_message); - - ReceiveCertificateVerifyMessage(buf); - this.mConnectionState = CS_CERTIFICATE_VERIFY; - - break; - } - default: - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - break; - } - case HandshakeType.finished: - { - switch (this.mConnectionState) - { - case CS_CLIENT_KEY_EXCHANGE: - case CS_CERTIFICATE_VERIFY: - { - if (mConnectionState < CS_CERTIFICATE_VERIFY && ExpectCertificateVerifyMessage()) - throw new TlsFatalAlert(AlertDescription.unexpected_message); - - ProcessFinishedMessage(buf); - this.mConnectionState = CS_CLIENT_FINISHED; - - if (this.mExpectSessionTicket) - { - SendNewSessionTicketMessage(mTlsServer.GetNewSessionTicket()); - SendChangeCipherSpecMessage(); - } - this.mConnectionState = CS_SERVER_SESSION_TICKET; - - SendFinishedMessage(); - this.mConnectionState = CS_SERVER_FINISHED; - - CompleteHandshake(); - break; - } - default: - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - break; - } - case HandshakeType.hello_request: - case HandshakeType.hello_verify_request: - case HandshakeType.server_hello: - case HandshakeType.server_key_exchange: - case HandshakeType.certificate_request: - case HandshakeType.server_hello_done: - case HandshakeType.session_ticket: - default: - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - } - - protected override void HandleAlertWarningMessage(byte alertDescription) - { - base.HandleAlertWarningMessage(alertDescription); - - switch (alertDescription) - { - case AlertDescription.no_certificate: - { - /* - * SSL 3.0 If the server has sent a certificate request Message, the client must send - * either the certificate message or a no_certificate alert. - */ - if (TlsUtilities.IsSsl(Context) && this.mCertificateRequest != null) - { - switch (this.mConnectionState) - { - case CS_SERVER_HELLO_DONE: - case CS_CLIENT_SUPPLEMENTAL_DATA: - { - if (mConnectionState < CS_CLIENT_SUPPLEMENTAL_DATA) - { - mTlsServer.ProcessClientSupplementalData(null); - } - - NotifyClientCertificate(Certificate.EmptyChain); - this.mConnectionState = CS_CLIENT_CERTIFICATE; - return; - } - } - } - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - } - } - - protected virtual void NotifyClientCertificate(Certificate clientCertificate) - { - if (mCertificateRequest == null) - throw new InvalidOperationException(); - if (mPeerCertificate != null) - throw new TlsFatalAlert(AlertDescription.unexpected_message); - - this.mPeerCertificate = clientCertificate; - - if (clientCertificate.IsEmpty) - { - this.mKeyExchange.SkipClientCredentials(); - } - else - { - - /* - * TODO RFC 5246 7.4.6. If the certificate_authorities list in the certificate request - * message was non-empty, one of the certificates in the certificate chain SHOULD be - * issued by one of the listed CAs. - */ - - this.mClientCertificateType = TlsUtilities.GetClientCertificateType(clientCertificate, - this.mServerCredentials.Certificate); - - this.mKeyExchange.ProcessClientCertificate(clientCertificate); - } - - /* - * RFC 5246 7.4.6. If the client does not Send any certificates, the server MAY at its - * discretion either continue the handshake without client authentication, or respond with a - * fatal handshake_failure alert. Also, if some aspect of the certificate chain was - * unacceptable (e.g., it was not signed by a known, trusted CA), the server MAY at its - * discretion either continue the handshake (considering the client unauthenticated) or Send - * a fatal alert. - */ - this.mTlsServer.NotifyClientCertificate(clientCertificate); - } - - protected virtual void ReceiveCertificateMessage(MemoryStream buf) - { - Certificate clientCertificate = Certificate.Parse(buf); - - AssertEmpty(buf); - - NotifyClientCertificate(clientCertificate); - } - - protected virtual void ReceiveCertificateVerifyMessage(MemoryStream buf) - { - if (mCertificateRequest == null) - throw new InvalidOperationException(); - - DigitallySigned clientCertificateVerify = DigitallySigned.Parse(Context, buf); - - AssertEmpty(buf); - - // Verify the CertificateVerify message contains a correct signature. - try - { - SignatureAndHashAlgorithm signatureAlgorithm = clientCertificateVerify.Algorithm; - - byte[] hash; - if (TlsUtilities.IsTlsV12(Context)) - { - TlsUtilities.VerifySupportedSignatureAlgorithm(mCertificateRequest.SupportedSignatureAlgorithms, signatureAlgorithm); - hash = mPrepareFinishHash.GetFinalHash(signatureAlgorithm.Hash); - } - else - { - hash = mSecurityParameters.SessionHash; - } - - X509CertificateStructure x509Cert = mPeerCertificate.GetCertificateAt(0); - SubjectPublicKeyInfo keyInfo = x509Cert.SubjectPublicKeyInfo; - AsymmetricKeyParameter publicKey = PublicKeyFactory.CreateKey(keyInfo); - - TlsSigner tlsSigner = TlsUtilities.CreateTlsSigner((byte)mClientCertificateType); - tlsSigner.Init(Context); - if (!tlsSigner.VerifyRawSignature(signatureAlgorithm, clientCertificateVerify.Signature, publicKey, hash)) - throw new TlsFatalAlert(AlertDescription.decrypt_error); - } - catch (TlsFatalAlert e) - { - throw e; - } - catch (Exception e) - { - throw new TlsFatalAlert(AlertDescription.decrypt_error, e); - } - } - - protected virtual void ReceiveClientHelloMessage(MemoryStream buf) - { - ProtocolVersion client_version = TlsUtilities.ReadVersion(buf); - mRecordStream.SetWriteVersion(client_version); - - if (client_version.IsDtls) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - - byte[] client_random = TlsUtilities.ReadFully(32, buf); - - /* - * TODO RFC 5077 3.4. If a ticket is presented by the client, the server MUST NOT attempt to - * use the Session ID in the ClientHello for stateful session resumption. - */ - byte[] sessionID = TlsUtilities.ReadOpaque8(buf); - if (sessionID.Length > 32) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - - /* - * TODO RFC 5246 7.4.1.2. If the session_id field is not empty (implying a session - * resumption request), this vector MUST include at least the cipher_suite from that - * session. - */ - int cipher_suites_length = TlsUtilities.ReadUint16(buf); - if (cipher_suites_length < 2 || (cipher_suites_length & 1) != 0) - throw new TlsFatalAlert(AlertDescription.decode_error); - - this.mOfferedCipherSuites = TlsUtilities.ReadUint16Array(cipher_suites_length / 2, buf); - - /* - * TODO RFC 5246 7.4.1.2. If the session_id field is not empty (implying a session - * resumption request), it MUST include the compression_method from that session. - */ - int compression_methods_length = TlsUtilities.ReadUint8(buf); - if (compression_methods_length < 1) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - - this.mOfferedCompressionMethods = TlsUtilities.ReadUint8Array(compression_methods_length, buf); - - /* - * TODO RFC 3546 2.3 If [...] the older session is resumed, then the server MUST ignore - * extensions appearing in the client hello, and Send a server hello containing no - * extensions. - */ - this.mClientExtensions = ReadExtensions(buf); - - /* - * TODO[session-hash] - * - * draft-ietf-tls-session-hash-04 4. Clients and servers SHOULD NOT accept handshakes - * that do not use the extended master secret [..]. (and see 5.2, 5.3) - */ - this.mSecurityParameters.extendedMasterSecret = TlsExtensionsUtilities.HasExtendedMasterSecretExtension(mClientExtensions); - - ContextAdmin.SetClientVersion(client_version); - - mTlsServer.NotifyClientVersion(client_version); - mTlsServer.NotifyFallback(Arrays.Contains(mOfferedCipherSuites, CipherSuite.TLS_FALLBACK_SCSV)); - - mSecurityParameters.clientRandom = client_random; - - mTlsServer.NotifyOfferedCipherSuites(mOfferedCipherSuites); - mTlsServer.NotifyOfferedCompressionMethods(mOfferedCompressionMethods); - - /* - * RFC 5746 3.6. Server Behavior: Initial Handshake - */ - { - /* - * RFC 5746 3.4. The client MUST include either an empty "renegotiation_info" extension, - * or the TLS_EMPTY_RENEGOTIATION_INFO_SCSV signaling cipher suite value in the - * ClientHello. Including both is NOT RECOMMENDED. - */ - - /* - * When a ClientHello is received, the server MUST check if it includes the - * TLS_EMPTY_RENEGOTIATION_INFO_SCSV SCSV. If it does, set the secure_renegotiation flag - * to TRUE. - */ - if (Arrays.Contains(mOfferedCipherSuites, CipherSuite.TLS_EMPTY_RENEGOTIATION_INFO_SCSV)) - { - this.mSecureRenegotiation = true; - } - - /* - * The server MUST check if the "renegotiation_info" extension is included in the - * ClientHello. - */ - byte[] renegExtData = TlsUtilities.GetExtensionData(mClientExtensions, ExtensionType.renegotiation_info); - if (renegExtData != null) - { - /* - * If the extension is present, set secure_renegotiation flag to TRUE. The - * server MUST then verify that the length of the "renegotiated_connection" - * field is zero, and if it is not, MUST abort the handshake. - */ - this.mSecureRenegotiation = true; - - if (!Arrays.ConstantTimeAreEqual(renegExtData, CreateRenegotiationInfo(TlsUtilities.EmptyBytes))) - throw new TlsFatalAlert(AlertDescription.handshake_failure); - } - } - - mTlsServer.NotifySecureRenegotiation(this.mSecureRenegotiation); - - if (mClientExtensions != null) - { - // NOTE: Validates the padding extension data, if present - TlsExtensionsUtilities.GetPaddingExtension(mClientExtensions); - - mTlsServer.ProcessClientExtensions(mClientExtensions); - } - } - - protected virtual void ReceiveClientKeyExchangeMessage(MemoryStream buf) - { - mKeyExchange.ProcessClientKeyExchange(buf); - - AssertEmpty(buf); - - if (TlsUtilities.IsSsl(Context)) - { - EstablishMasterSecret(Context, mKeyExchange); - } - - this.mPrepareFinishHash = mRecordStream.PrepareToFinish(); - this.mSecurityParameters.sessionHash = GetCurrentPrfHash(Context, mPrepareFinishHash, null); - - if (!TlsUtilities.IsSsl(Context)) - { - EstablishMasterSecret(Context, mKeyExchange); - } - - mRecordStream.SetPendingConnectionState(Peer.GetCompression(), Peer.GetCipher()); - - if (!mExpectSessionTicket) - { - SendChangeCipherSpecMessage(); - } - } - - protected virtual void SendCertificateRequestMessage(CertificateRequest certificateRequest) - { - HandshakeMessage message = new HandshakeMessage(HandshakeType.certificate_request); - - certificateRequest.Encode(message); - - message.WriteToRecordStream(this); - } - - protected virtual void SendCertificateStatusMessage(CertificateStatus certificateStatus) - { - HandshakeMessage message = new HandshakeMessage(HandshakeType.certificate_status); - - certificateStatus.Encode(message); - - message.WriteToRecordStream(this); - } - - protected virtual void SendNewSessionTicketMessage(NewSessionTicket newSessionTicket) - { - if (newSessionTicket == null) - throw new TlsFatalAlert(AlertDescription.internal_error); - - HandshakeMessage message = new HandshakeMessage(HandshakeType.session_ticket); - - newSessionTicket.Encode(message); - - message.WriteToRecordStream(this); - } - - protected virtual void SendServerHelloMessage() - { - HandshakeMessage message = new HandshakeMessage(HandshakeType.server_hello); - - { - ProtocolVersion server_version = mTlsServer.GetServerVersion(); - if (!server_version.IsEqualOrEarlierVersionOf(Context.ClientVersion)) - throw new TlsFatalAlert(AlertDescription.internal_error); - - mRecordStream.ReadVersion = server_version; - mRecordStream.SetWriteVersion(server_version); - mRecordStream.SetRestrictReadVersion(true); - ContextAdmin.SetServerVersion(server_version); - - TlsUtilities.WriteVersion(server_version, message); - } - - message.Write(this.mSecurityParameters.serverRandom); - - /* - * The server may return an empty session_id to indicate that the session will not be cached - * and therefore cannot be resumed. - */ - TlsUtilities.WriteOpaque8(TlsUtilities.EmptyBytes, message); - - int selectedCipherSuite = mTlsServer.GetSelectedCipherSuite(); - if (!Arrays.Contains(mOfferedCipherSuites, selectedCipherSuite) - || selectedCipherSuite == CipherSuite.TLS_NULL_WITH_NULL_NULL - || CipherSuite.IsScsv(selectedCipherSuite) - || !TlsUtilities.IsValidCipherSuiteForVersion(selectedCipherSuite, Context.ServerVersion)) - { - throw new TlsFatalAlert(AlertDescription.internal_error); - } - mSecurityParameters.cipherSuite = selectedCipherSuite; - - byte selectedCompressionMethod = mTlsServer.GetSelectedCompressionMethod(); - if (!Arrays.Contains(mOfferedCompressionMethods, selectedCompressionMethod)) - { - throw new TlsFatalAlert(AlertDescription.internal_error); - } - mSecurityParameters.compressionAlgorithm = selectedCompressionMethod; - - TlsUtilities.WriteUint16(selectedCipherSuite, message); - TlsUtilities.WriteUint8(selectedCompressionMethod, message); - - this.mServerExtensions = mTlsServer.GetServerExtensions(); - - /* - * RFC 5746 3.6. Server Behavior: Initial Handshake - */ - if (this.mSecureRenegotiation) - { - byte[] renegExtData = TlsUtilities.GetExtensionData(this.mServerExtensions, ExtensionType.renegotiation_info); - bool noRenegExt = (null == renegExtData); - - if (noRenegExt) - { - /* - * Note that Sending a "renegotiation_info" extension in response to a ClientHello - * containing only the SCSV is an explicit exception to the prohibition in RFC 5246, - * Section 7.4.1.4, on the server Sending unsolicited extensions and is only allowed - * because the client is signaling its willingness to receive the extension via the - * TLS_EMPTY_RENEGOTIATION_INFO_SCSV SCSV. - */ - - /* - * If the secure_renegotiation flag is set to TRUE, the server MUST include an empty - * "renegotiation_info" extension in the ServerHello message. - */ - this.mServerExtensions = TlsExtensionsUtilities.EnsureExtensionsInitialised(mServerExtensions); - this.mServerExtensions[ExtensionType.renegotiation_info] = CreateRenegotiationInfo(TlsUtilities.EmptyBytes); - } - } - - if (mSecurityParameters.extendedMasterSecret) - { - this.mServerExtensions = TlsExtensionsUtilities.EnsureExtensionsInitialised(mServerExtensions); - TlsExtensionsUtilities.AddExtendedMasterSecretExtension(mServerExtensions); - } - - /* - * TODO RFC 3546 2.3 If [...] the older session is resumed, then the server MUST ignore - * extensions appearing in the client hello, and Send a server hello containing no - * extensions. - */ - - if (this.mServerExtensions != null) - { - this.mSecurityParameters.encryptThenMac = TlsExtensionsUtilities.HasEncryptThenMacExtension(mServerExtensions); - - this.mSecurityParameters.maxFragmentLength = ProcessMaxFragmentLengthExtension(mClientExtensions, - mServerExtensions, AlertDescription.internal_error); - - this.mSecurityParameters.truncatedHMac = TlsExtensionsUtilities.HasTruncatedHMacExtension(mServerExtensions); - - /* - * TODO It's surprising that there's no provision to allow a 'fresh' CertificateStatus to be sent in - * a session resumption handshake. - */ - this.mAllowCertificateStatus = !mResumedSession - && TlsUtilities.HasExpectedEmptyExtensionData(mServerExtensions, ExtensionType.status_request, - AlertDescription.internal_error); - - this.mExpectSessionTicket = !mResumedSession - && TlsUtilities.HasExpectedEmptyExtensionData(mServerExtensions, ExtensionType.session_ticket, - AlertDescription.internal_error); - - WriteExtensions(message, this.mServerExtensions); - } - - mSecurityParameters.prfAlgorithm = GetPrfAlgorithm(Context, mSecurityParameters.CipherSuite); - - /* - * RFC 5246 7.4.9. Any cipher suite which does not explicitly specify verify_data_length has - * a verify_data_length equal to 12. This includes all existing cipher suites. - */ - mSecurityParameters.verifyDataLength = 12; - - ApplyMaxFragmentLengthExtension(); - - message.WriteToRecordStream(this); - } - - protected virtual void SendServerHelloDoneMessage() - { - byte[] message = new byte[4]; - TlsUtilities.WriteUint8(HandshakeType.server_hello_done, message, 0); - TlsUtilities.WriteUint24(0, message, 1); - - WriteHandshakeMessage(message, 0, message.Length); - } - - protected virtual void SendServerKeyExchangeMessage(byte[] serverKeyExchange) - { - HandshakeMessage message = new HandshakeMessage(HandshakeType.server_key_exchange, serverKeyExchange.Length); - - message.Write(serverKeyExchange); - - message.WriteToRecordStream(this); - } - - protected virtual bool ExpectCertificateVerifyMessage() - { - return mClientCertificateType >= 0 && TlsUtilities.HasSigningCapability((byte)mClientCertificateType); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsSession.cs b/bc-sharp-crypto/src/crypto/tls/TlsSession.cs deleted file mode 100644 index 6c22991..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsSession.cs +++ /dev/null @@ -1,15 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public interface TlsSession - { - SessionParameters ExportSessionParameters(); - - byte[] SessionID { get; } - - void Invalidate(); - - bool IsResumable { get; } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsSessionImpl.cs b/bc-sharp-crypto/src/crypto/tls/TlsSessionImpl.cs deleted file mode 100644 index 8663926..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsSessionImpl.cs +++ /dev/null @@ -1,54 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - internal class TlsSessionImpl - : TlsSession - { - internal readonly byte[] mSessionID; - internal SessionParameters mSessionParameters; - - internal TlsSessionImpl(byte[] sessionID, SessionParameters sessionParameters) - { - if (sessionID == null) - throw new ArgumentNullException("sessionID"); - if (sessionID.Length < 1 || sessionID.Length > 32) - throw new ArgumentException("must have length between 1 and 32 bytes, inclusive", "sessionID"); - - this.mSessionID = Arrays.Clone(sessionID); - this.mSessionParameters = sessionParameters; - } - - public virtual SessionParameters ExportSessionParameters() - { - lock (this) - { - return this.mSessionParameters == null ? null : this.mSessionParameters.Copy(); - } - } - - public virtual byte[] SessionID - { - get { lock (this) return mSessionID; } - } - - public virtual void Invalidate() - { - lock (this) - { - if (this.mSessionParameters != null) - { - this.mSessionParameters.Clear(); - this.mSessionParameters = null; - } - } - } - - public virtual bool IsResumable - { - get { lock (this) return this.mSessionParameters != null; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsSigner.cs b/bc-sharp-crypto/src/crypto/tls/TlsSigner.cs deleted file mode 100644 index ffdd4c9..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsSigner.cs +++ /dev/null @@ -1,29 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public interface TlsSigner - { - void Init(TlsContext context); - - byte[] GenerateRawSignature(AsymmetricKeyParameter privateKey, byte[] md5AndSha1); - - byte[] GenerateRawSignature(SignatureAndHashAlgorithm algorithm, - AsymmetricKeyParameter privateKey, byte[] hash); - - bool VerifyRawSignature(byte[] sigBytes, AsymmetricKeyParameter publicKey, byte[] md5AndSha1); - - bool VerifyRawSignature(SignatureAndHashAlgorithm algorithm, byte[] sigBytes, - AsymmetricKeyParameter publicKey, byte[] hash); - - ISigner CreateSigner(AsymmetricKeyParameter privateKey); - - ISigner CreateSigner(SignatureAndHashAlgorithm algorithm, AsymmetricKeyParameter privateKey); - - ISigner CreateVerifyer(AsymmetricKeyParameter publicKey); - - ISigner CreateVerifyer(SignatureAndHashAlgorithm algorithm, AsymmetricKeyParameter publicKey); - - bool IsValidPublicKey(AsymmetricKeyParameter publicKey); - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsSignerCredentials.cs b/bc-sharp-crypto/src/crypto/tls/TlsSignerCredentials.cs deleted file mode 100644 index 92ed7cc..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsSignerCredentials.cs +++ /dev/null @@ -1,14 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public interface TlsSignerCredentials - : TlsCredentials - { - /// - byte[] GenerateCertificateSignature(byte[] hash); - - SignatureAndHashAlgorithm SignatureAndHashAlgorithm { get; } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsSrpGroupVerifier.cs b/bc-sharp-crypto/src/crypto/tls/TlsSrpGroupVerifier.cs deleted file mode 100644 index 185f2f5..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsSrpGroupVerifier.cs +++ /dev/null @@ -1,17 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public interface TlsSrpGroupVerifier - { - /** - * Check whether the given SRP group parameters are acceptable for use. - * - * @param group the {@link SRP6GroupParameters} to check - * @return true if (and only if) the specified group parameters are acceptable - */ - bool Accept(Srp6GroupParameters group); - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsSrpIdentityManager.cs b/bc-sharp-crypto/src/crypto/tls/TlsSrpIdentityManager.cs deleted file mode 100644 index 080a0dc..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsSrpIdentityManager.cs +++ /dev/null @@ -1,21 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public interface TlsSrpIdentityManager - { - /** - * Lookup the {@link TlsSRPLoginParameters} corresponding to the specified identity. - * - * NOTE: To avoid "identity probing", unknown identities SHOULD be handled as recommended in RFC - * 5054 2.5.1.3. {@link SimulatedTlsSRPIdentityManager} is provided for this purpose. - * - * @param identity - * the SRP identity sent by the connecting client - * @return the {@link TlsSRPLoginParameters} for the specified identity, or else 'simulated' - * parameters if the identity is not recognized. A null value is also allowed, but not - * recommended. - */ - TlsSrpLoginParameters GetLoginParameters(byte[] identity); - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsSrpKeyExchange.cs b/bc-sharp-crypto/src/crypto/tls/TlsSrpKeyExchange.cs deleted file mode 100644 index 09fa723..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsSrpKeyExchange.cs +++ /dev/null @@ -1,285 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto.Agreement.Srp; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /// (D)TLS SRP key exchange (RFC 5054). - public class TlsSrpKeyExchange - : AbstractTlsKeyExchange - { - protected static TlsSigner CreateSigner(int keyExchange) - { - switch (keyExchange) - { - case KeyExchangeAlgorithm.SRP: - return null; - case KeyExchangeAlgorithm.SRP_RSA: - return new TlsRsaSigner(); - case KeyExchangeAlgorithm.SRP_DSS: - return new TlsDssSigner(); - default: - throw new ArgumentException("unsupported key exchange algorithm"); - } - } - - protected TlsSigner mTlsSigner; - protected TlsSrpGroupVerifier mGroupVerifier; - protected byte[] mIdentity; - protected byte[] mPassword; - - protected AsymmetricKeyParameter mServerPublicKey = null; - - protected Srp6GroupParameters mSrpGroup = null; - protected Srp6Client mSrpClient = null; - protected Srp6Server mSrpServer = null; - protected BigInteger mSrpPeerCredentials = null; - protected BigInteger mSrpVerifier = null; - protected byte[] mSrpSalt = null; - - protected TlsSignerCredentials mServerCredentials = null; - - [Obsolete("Use constructor taking an explicit 'groupVerifier' argument")] - public TlsSrpKeyExchange(int keyExchange, IList supportedSignatureAlgorithms, byte[] identity, byte[] password) - : this(keyExchange, supportedSignatureAlgorithms, new DefaultTlsSrpGroupVerifier(), identity, password) - { - } - - public TlsSrpKeyExchange(int keyExchange, IList supportedSignatureAlgorithms, TlsSrpGroupVerifier groupVerifier, - byte[] identity, byte[] password) - : base(keyExchange, supportedSignatureAlgorithms) - { - this.mTlsSigner = CreateSigner(keyExchange); - this.mGroupVerifier = groupVerifier; - this.mIdentity = identity; - this.mPassword = password; - this.mSrpClient = new Srp6Client(); - } - - public TlsSrpKeyExchange(int keyExchange, IList supportedSignatureAlgorithms, byte[] identity, - TlsSrpLoginParameters loginParameters) - : base(keyExchange, supportedSignatureAlgorithms) - { - this.mTlsSigner = CreateSigner(keyExchange); - this.mIdentity = identity; - this.mSrpServer = new Srp6Server(); - this.mSrpGroup = loginParameters.Group; - this.mSrpVerifier = loginParameters.Verifier; - this.mSrpSalt = loginParameters.Salt; - } - - public override void Init(TlsContext context) - { - base.Init(context); - - if (this.mTlsSigner != null) - { - this.mTlsSigner.Init(context); - } - } - - public override void SkipServerCredentials() - { - if (mTlsSigner != null) - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - - public override void ProcessServerCertificate(Certificate serverCertificate) - { - if (mTlsSigner == null) - throw new TlsFatalAlert(AlertDescription.unexpected_message); - if (serverCertificate.IsEmpty) - throw new TlsFatalAlert(AlertDescription.bad_certificate); - - X509CertificateStructure x509Cert = serverCertificate.GetCertificateAt(0); - - SubjectPublicKeyInfo keyInfo = x509Cert.SubjectPublicKeyInfo; - try - { - this.mServerPublicKey = PublicKeyFactory.CreateKey(keyInfo); - } - catch (Exception e) - { - throw new TlsFatalAlert(AlertDescription.unsupported_certificate, e); - } - - if (!mTlsSigner.IsValidPublicKey(this.mServerPublicKey)) - throw new TlsFatalAlert(AlertDescription.certificate_unknown); - - TlsUtilities.ValidateKeyUsage(x509Cert, KeyUsage.DigitalSignature); - - base.ProcessServerCertificate(serverCertificate); - } - - public override void ProcessServerCredentials(TlsCredentials serverCredentials) - { - if ((mKeyExchange == KeyExchangeAlgorithm.SRP) || !(serverCredentials is TlsSignerCredentials)) - throw new TlsFatalAlert(AlertDescription.internal_error); - - ProcessServerCertificate(serverCredentials.Certificate); - - this.mServerCredentials = (TlsSignerCredentials)serverCredentials; - } - - public override bool RequiresServerKeyExchange - { - get { return true; } - } - - public override byte[] GenerateServerKeyExchange() - { - mSrpServer.Init(mSrpGroup, mSrpVerifier, TlsUtilities.CreateHash(HashAlgorithm.sha1), mContext.SecureRandom); - BigInteger B = mSrpServer.GenerateServerCredentials(); - - ServerSrpParams srpParams = new ServerSrpParams(mSrpGroup.N, mSrpGroup.G, mSrpSalt, B); - - DigestInputBuffer buf = new DigestInputBuffer(); - - srpParams.Encode(buf); - - if (mServerCredentials != null) - { - /* - * RFC 5246 4.7. digitally-signed element needs SignatureAndHashAlgorithm from TLS 1.2 - */ - SignatureAndHashAlgorithm signatureAndHashAlgorithm = TlsUtilities.GetSignatureAndHashAlgorithm( - mContext, mServerCredentials); - - IDigest d = TlsUtilities.CreateHash(signatureAndHashAlgorithm); - - SecurityParameters securityParameters = mContext.SecurityParameters; - d.BlockUpdate(securityParameters.clientRandom, 0, securityParameters.clientRandom.Length); - d.BlockUpdate(securityParameters.serverRandom, 0, securityParameters.serverRandom.Length); - buf.UpdateDigest(d); - - byte[] hash = new byte[d.GetDigestSize()]; - d.DoFinal(hash, 0); - - byte[] signature = mServerCredentials.GenerateCertificateSignature(hash); - - DigitallySigned signed_params = new DigitallySigned(signatureAndHashAlgorithm, signature); - signed_params.Encode(buf); - } - - return buf.ToArray(); - } - - public override void ProcessServerKeyExchange(Stream input) - { - SecurityParameters securityParameters = mContext.SecurityParameters; - - SignerInputBuffer buf = null; - Stream teeIn = input; - - if (mTlsSigner != null) - { - buf = new SignerInputBuffer(); - teeIn = new TeeInputStream(input, buf); - } - - ServerSrpParams srpParams = ServerSrpParams.Parse(teeIn); - - if (buf != null) - { - DigitallySigned signed_params = ParseSignature(input); - - ISigner signer = InitVerifyer(mTlsSigner, signed_params.Algorithm, securityParameters); - buf.UpdateSigner(signer); - if (!signer.VerifySignature(signed_params.Signature)) - throw new TlsFatalAlert(AlertDescription.decrypt_error); - } - - this.mSrpGroup = new Srp6GroupParameters(srpParams.N, srpParams.G); - - if (!mGroupVerifier.Accept(mSrpGroup)) - throw new TlsFatalAlert(AlertDescription.insufficient_security); - - this.mSrpSalt = srpParams.S; - - /* - * RFC 5054 2.5.3: The client MUST abort the handshake with an "illegal_parameter" alert if - * B % N = 0. - */ - try - { - this.mSrpPeerCredentials = Srp6Utilities.ValidatePublicValue(mSrpGroup.N, srpParams.B); - } - catch (CryptoException e) - { - throw new TlsFatalAlert(AlertDescription.illegal_parameter, e); - } - - this.mSrpClient.Init(mSrpGroup, TlsUtilities.CreateHash(HashAlgorithm.sha1), mContext.SecureRandom); - } - - public override void ValidateCertificateRequest(CertificateRequest certificateRequest) - { - throw new TlsFatalAlert(AlertDescription.unexpected_message); - } - - public override void ProcessClientCredentials(TlsCredentials clientCredentials) - { - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - public override void GenerateClientKeyExchange(Stream output) - { - BigInteger A = mSrpClient.GenerateClientCredentials(mSrpSalt, mIdentity, mPassword); - TlsSrpUtilities.WriteSrpParameter(A, output); - - mContext.SecurityParameters.srpIdentity = Arrays.Clone(mIdentity); - } - - public override void ProcessClientKeyExchange(Stream input) - { - /* - * RFC 5054 2.5.4: The server MUST abort the handshake with an "illegal_parameter" alert if - * A % N = 0. - */ - try - { - this.mSrpPeerCredentials = Srp6Utilities.ValidatePublicValue(mSrpGroup.N, TlsSrpUtilities.ReadSrpParameter(input)); - } - catch (CryptoException e) - { - throw new TlsFatalAlert(AlertDescription.illegal_parameter, e); - } - - mContext.SecurityParameters.srpIdentity = Arrays.Clone(mIdentity); - } - - public override byte[] GeneratePremasterSecret() - { - try - { - BigInteger S = mSrpServer != null - ? mSrpServer.CalculateSecret(mSrpPeerCredentials) - : mSrpClient.CalculateSecret(mSrpPeerCredentials); - - // TODO Check if this needs to be a fixed size - return BigIntegers.AsUnsignedByteArray(S); - } - catch (CryptoException e) - { - throw new TlsFatalAlert(AlertDescription.illegal_parameter, e); - } - } - - protected virtual ISigner InitVerifyer(TlsSigner tlsSigner, SignatureAndHashAlgorithm algorithm, - SecurityParameters securityParameters) - { - ISigner signer = tlsSigner.CreateVerifyer(algorithm, this.mServerPublicKey); - signer.BlockUpdate(securityParameters.clientRandom, 0, securityParameters.clientRandom.Length); - signer.BlockUpdate(securityParameters.serverRandom, 0, securityParameters.serverRandom.Length); - return signer; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsSrpLoginParameters.cs b/bc-sharp-crypto/src/crypto/tls/TlsSrpLoginParameters.cs deleted file mode 100644 index 5ae4641..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsSrpLoginParameters.cs +++ /dev/null @@ -1,36 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class TlsSrpLoginParameters - { - protected readonly Srp6GroupParameters mGroup; - protected readonly BigInteger mVerifier; - protected readonly byte[] mSalt; - - public TlsSrpLoginParameters(Srp6GroupParameters group, BigInteger verifier, byte[] salt) - { - this.mGroup = group; - this.mVerifier = verifier; - this.mSalt = salt; - } - - public virtual Srp6GroupParameters Group - { - get { return mGroup; } - } - - public virtual byte[] Salt - { - get { return mSalt; } - } - - public virtual BigInteger Verifier - { - get { return mVerifier; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsSrpUtilities.cs b/bc-sharp-crypto/src/crypto/tls/TlsSrpUtilities.cs deleted file mode 100644 index 873189d..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsSrpUtilities.cs +++ /dev/null @@ -1,74 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public abstract class TlsSrpUtilities - { - public static void AddSrpExtension(IDictionary extensions, byte[] identity) - { - extensions[ExtensionType.srp] = CreateSrpExtension(identity); - } - - public static byte[] GetSrpExtension(IDictionary extensions) - { - byte[] extensionData = TlsUtilities.GetExtensionData(extensions, ExtensionType.srp); - return extensionData == null ? null : ReadSrpExtension(extensionData); - } - - public static byte[] CreateSrpExtension(byte[] identity) - { - if (identity == null) - throw new TlsFatalAlert(AlertDescription.internal_error); - - return TlsUtilities.EncodeOpaque8(identity); - } - - public static byte[] ReadSrpExtension(byte[] extensionData) - { - if (extensionData == null) - throw new ArgumentNullException("extensionData"); - - MemoryStream buf = new MemoryStream(extensionData, false); - byte[] identity = TlsUtilities.ReadOpaque8(buf); - - TlsProtocol.AssertEmpty(buf); - - return identity; - } - - public static BigInteger ReadSrpParameter(Stream input) - { - return new BigInteger(1, TlsUtilities.ReadOpaque16(input)); - } - - public static void WriteSrpParameter(BigInteger x, Stream output) - { - TlsUtilities.WriteOpaque16(BigIntegers.AsUnsignedByteArray(x), output); - } - - public static bool IsSrpCipherSuite(int cipherSuite) - { - switch (cipherSuite) - { - case CipherSuite.TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_WITH_AES_256_CBC_SHA: - return true; - - default: - return false; - } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsSrtpUtilities.cs b/bc-sharp-crypto/src/crypto/tls/TlsSrtpUtilities.cs deleted file mode 100644 index 626c0e3..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsSrtpUtilities.cs +++ /dev/null @@ -1,62 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /** - * RFC 5764 DTLS Extension to Establish Keys for SRTP. - */ - public abstract class TlsSRTPUtils - { - public static void AddUseSrtpExtension(IDictionary extensions, UseSrtpData useSRTPData) - { - extensions[ExtensionType.use_srtp] = CreateUseSrtpExtension(useSRTPData); - } - - public static UseSrtpData GetUseSrtpExtension(IDictionary extensions) - { - byte[] extensionData = TlsUtilities.GetExtensionData(extensions, ExtensionType.use_srtp); - return extensionData == null ? null : ReadUseSrtpExtension(extensionData); - } - - public static byte[] CreateUseSrtpExtension(UseSrtpData useSrtpData) - { - if (useSrtpData == null) - throw new ArgumentNullException("useSrtpData"); - - MemoryStream buf = new MemoryStream(); - - // SRTPProtectionProfiles - TlsUtilities.WriteUint16ArrayWithUint16Length(useSrtpData.ProtectionProfiles, buf); - - // srtp_mki - TlsUtilities.WriteOpaque8(useSrtpData.Mki, buf); - - return buf.ToArray(); - } - - public static UseSrtpData ReadUseSrtpExtension(byte[] extensionData) - { - if (extensionData == null) - throw new ArgumentNullException("extensionData"); - - MemoryStream buf = new MemoryStream(extensionData, true); - - // SRTPProtectionProfiles - int length = TlsUtilities.ReadUint16(buf); - if (length < 2 || (length & 1) != 0) - { - throw new TlsFatalAlert(AlertDescription.decode_error); - } - int[] protectionProfiles = TlsUtilities.ReadUint16Array(length / 2, buf); - - // srtp_mki - byte[] mki = TlsUtilities.ReadOpaque8(buf); - - TlsProtocol.AssertEmpty(buf); - - return new UseSrtpData(protectionProfiles, mki); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsStream.cs b/bc-sharp-crypto/src/crypto/tls/TlsStream.cs deleted file mode 100644 index bfd80ed..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsStream.cs +++ /dev/null @@ -1,97 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - internal class TlsStream - : Stream - { - private readonly TlsProtocol handler; - - internal TlsStream(TlsProtocol handler) - { - this.handler = handler; - } - - public override bool CanRead - { - get { return !handler.IsClosed; } - } - - public override bool CanSeek - { - get { return false; } - } - - public override bool CanWrite - { - get { return !handler.IsClosed; } - } - -#if PORTABLE - protected override void Dispose(bool disposing) - { - if (disposing) - { - handler.Close(); - } - base.Dispose(disposing); - } -#else - public override void Close() - { - handler.Close(); - base.Close(); - } -#endif - - public override void Flush() - { - handler.Flush(); - } - - public override long Length - { - get { throw new NotSupportedException(); } - } - - public override long Position - { - get { throw new NotSupportedException(); } - set { throw new NotSupportedException(); } - } - - public override int Read(byte[] buf, int off, int len) - { - return this.handler.ReadApplicationData(buf, off, len); - } - - public override int ReadByte() - { - byte[] buf = new byte[1]; - if (this.Read(buf, 0, 1) <= 0) - return -1; - return buf[0]; - } - - public override long Seek(long offset, SeekOrigin origin) - { - throw new NotSupportedException(); - } - - public override void SetLength(long value) - { - throw new NotSupportedException(); - } - - public override void Write(byte[] buf, int off, int len) - { - this.handler.WriteData(buf, off, len); - } - - public override void WriteByte(byte b) - { - this.handler.WriteData(new byte[] { b }, 0, 1); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsStreamCipher.cs b/bc-sharp-crypto/src/crypto/tls/TlsStreamCipher.cs deleted file mode 100644 index 555442e..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsStreamCipher.cs +++ /dev/null @@ -1,152 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Tls; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - public class TlsStreamCipher - : TlsCipher - { - protected readonly TlsContext context; - - protected readonly IStreamCipher encryptCipher; - protected readonly IStreamCipher decryptCipher; - - protected readonly TlsMac writeMac; - protected readonly TlsMac readMac; - - protected readonly bool usesNonce; - - /// - public TlsStreamCipher(TlsContext context, IStreamCipher clientWriteCipher, - IStreamCipher serverWriteCipher, IDigest clientWriteDigest, IDigest serverWriteDigest, - int cipherKeySize, bool usesNonce) - { - bool isServer = context.IsServer; - - this.context = context; - this.usesNonce = usesNonce; - - this.encryptCipher = clientWriteCipher; - this.decryptCipher = serverWriteCipher; - - int key_block_size = (2 * cipherKeySize) + clientWriteDigest.GetDigestSize() - + serverWriteDigest.GetDigestSize(); - - byte[] key_block = TlsUtilities.CalculateKeyBlock(context, key_block_size); - - int offset = 0; - - // Init MACs - TlsMac clientWriteMac = new TlsMac(context, clientWriteDigest, key_block, offset, - clientWriteDigest.GetDigestSize()); - offset += clientWriteDigest.GetDigestSize(); - TlsMac serverWriteMac = new TlsMac(context, serverWriteDigest, key_block, offset, - serverWriteDigest.GetDigestSize()); - offset += serverWriteDigest.GetDigestSize(); - - // Build keys - KeyParameter clientWriteKey = new KeyParameter(key_block, offset, cipherKeySize); - offset += cipherKeySize; - KeyParameter serverWriteKey = new KeyParameter(key_block, offset, cipherKeySize); - offset += cipherKeySize; - - if (offset != key_block_size) - { - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - ICipherParameters encryptParams, decryptParams; - if (isServer) - { - this.writeMac = serverWriteMac; - this.readMac = clientWriteMac; - this.encryptCipher = serverWriteCipher; - this.decryptCipher = clientWriteCipher; - encryptParams = serverWriteKey; - decryptParams = clientWriteKey; - } - else - { - this.writeMac = clientWriteMac; - this.readMac = serverWriteMac; - this.encryptCipher = clientWriteCipher; - this.decryptCipher = serverWriteCipher; - encryptParams = clientWriteKey; - decryptParams = serverWriteKey; - } - - if (usesNonce) - { - byte[] dummyNonce = new byte[8]; - encryptParams = new ParametersWithIV(encryptParams, dummyNonce); - decryptParams = new ParametersWithIV(decryptParams, dummyNonce); - } - - this.encryptCipher.Init(true, encryptParams); - this.decryptCipher.Init(false, decryptParams); - } - - public virtual int GetPlaintextLimit(int ciphertextLimit) - { - return ciphertextLimit - writeMac.Size; - } - - public virtual byte[] EncodePlaintext(long seqNo, byte type, byte[] plaintext, int offset, int len) - { - if (usesNonce) - { - UpdateIV(encryptCipher, true, seqNo); - } - - byte[] outBuf = new byte[len + writeMac.Size]; - - encryptCipher.ProcessBytes(plaintext, offset, len, outBuf, 0); - - byte[] mac = writeMac.CalculateMac(seqNo, type, plaintext, offset, len); - encryptCipher.ProcessBytes(mac, 0, mac.Length, outBuf, len); - - return outBuf; - } - - /// - public virtual byte[] DecodeCiphertext(long seqNo, byte type, byte[] ciphertext, int offset, int len) - { - if (usesNonce) - { - UpdateIV(decryptCipher, false, seqNo); - } - - int macSize = readMac.Size; - if (len < macSize) - throw new TlsFatalAlert(AlertDescription.decode_error); - - int plaintextLength = len - macSize; - - byte[] deciphered = new byte[len]; - decryptCipher.ProcessBytes(ciphertext, offset, len, deciphered, 0); - CheckMac(seqNo, type, deciphered, plaintextLength, len, deciphered, 0, plaintextLength); - return Arrays.CopyOfRange(deciphered, 0, plaintextLength); - } - - /// - protected virtual void CheckMac(long seqNo, byte type, byte[] recBuf, int recStart, int recEnd, byte[] calcBuf, int calcOff, int calcLen) - { - byte[] receivedMac = Arrays.CopyOfRange(recBuf, recStart, recEnd); - byte[] computedMac = readMac.CalculateMac(seqNo, type, calcBuf, calcOff, calcLen); - - if (!Arrays.ConstantTimeAreEqual(receivedMac, computedMac)) - throw new TlsFatalAlert(AlertDescription.bad_record_mac); - } - - protected virtual void UpdateIV(IStreamCipher cipher, bool forEncryption, long seqNo) - { - byte[] nonce = new byte[8]; - TlsUtilities.WriteUint64(seqNo, nonce, 0); - cipher.Init(forEncryption, new ParametersWithIV(null, nonce)); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/TlsUtilities.cs b/bc-sharp-crypto/src/crypto/tls/TlsUtilities.cs deleted file mode 100644 index 48eb9d3..0000000 --- a/bc-sharp-crypto/src/crypto/tls/TlsUtilities.cs +++ /dev/null @@ -1,2398 +0,0 @@ -using System; -using System.Collections; -using System.IO; -using System.Text; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Crypto.Macs; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Date; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /// Some helper functions for MicroTLS. - public abstract class TlsUtilities - { - public static readonly byte[] EmptyBytes = new byte[0]; - public static readonly short[] EmptyShorts = new short[0]; - public static readonly int[] EmptyInts = new int[0]; - public static readonly long[] EmptyLongs = new long[0]; - - public static void CheckUint8(int i) - { - if (!IsValidUint8(i)) - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - public static void CheckUint8(long i) - { - if (!IsValidUint8(i)) - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - public static void CheckUint16(int i) - { - if (!IsValidUint16(i)) - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - public static void CheckUint16(long i) - { - if (!IsValidUint16(i)) - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - public static void CheckUint24(int i) - { - if (!IsValidUint24(i)) - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - public static void CheckUint24(long i) - { - if (!IsValidUint24(i)) - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - public static void CheckUint32(long i) - { - if (!IsValidUint32(i)) - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - public static void CheckUint48(long i) - { - if (!IsValidUint48(i)) - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - public static void CheckUint64(long i) - { - if (!IsValidUint64(i)) - throw new TlsFatalAlert(AlertDescription.internal_error); - } - - public static bool IsValidUint8(int i) - { - return (i & 0xFF) == i; - } - - public static bool IsValidUint8(long i) - { - return (i & 0xFFL) == i; - } - - public static bool IsValidUint16(int i) - { - return (i & 0xFFFF) == i; - } - - public static bool IsValidUint16(long i) - { - return (i & 0xFFFFL) == i; - } - - public static bool IsValidUint24(int i) - { - return (i & 0xFFFFFF) == i; - } - - public static bool IsValidUint24(long i) - { - return (i & 0xFFFFFFL) == i; - } - - public static bool IsValidUint32(long i) - { - return (i & 0xFFFFFFFFL) == i; - } - - public static bool IsValidUint48(long i) - { - return (i & 0xFFFFFFFFFFFFL) == i; - } - - public static bool IsValidUint64(long i) - { - return true; - } - - public static bool IsSsl(TlsContext context) - { - return context.ServerVersion.IsSsl; - } - - public static bool IsTlsV11(ProtocolVersion version) - { - return ProtocolVersion.TLSv11.IsEqualOrEarlierVersionOf(version.GetEquivalentTLSVersion()); - } - - public static bool IsTlsV11(TlsContext context) - { - return IsTlsV11(context.ServerVersion); - } - - public static bool IsTlsV12(ProtocolVersion version) - { - return ProtocolVersion.TLSv12.IsEqualOrEarlierVersionOf(version.GetEquivalentTLSVersion()); - } - - public static bool IsTlsV12(TlsContext context) - { - return IsTlsV12(context.ServerVersion); - } - - public static void WriteUint8(byte i, Stream output) - { - output.WriteByte(i); - } - - public static void WriteUint8(byte i, byte[] buf, int offset) - { - buf[offset] = i; - } - - public static void WriteUint16(int i, Stream output) - { - output.WriteByte((byte)(i >> 8)); - output.WriteByte((byte)i); - } - - public static void WriteUint16(int i, byte[] buf, int offset) - { - buf[offset] = (byte)(i >> 8); - buf[offset + 1] = (byte)i; - } - - public static void WriteUint24(int i, Stream output) - { - output.WriteByte((byte)(i >> 16)); - output.WriteByte((byte)(i >> 8)); - output.WriteByte((byte)i); - } - - public static void WriteUint24(int i, byte[] buf, int offset) - { - buf[offset] = (byte)(i >> 16); - buf[offset + 1] = (byte)(i >> 8); - buf[offset + 2] = (byte)i; - } - - public static void WriteUint32(long i, Stream output) - { - output.WriteByte((byte)(i >> 24)); - output.WriteByte((byte)(i >> 16)); - output.WriteByte((byte)(i >> 8)); - output.WriteByte((byte)i); - } - - public static void WriteUint32(long i, byte[] buf, int offset) - { - buf[offset] = (byte)(i >> 24); - buf[offset + 1] = (byte)(i >> 16); - buf[offset + 2] = (byte)(i >> 8); - buf[offset + 3] = (byte)i; - } - - public static void WriteUint48(long i, Stream output) - { - output.WriteByte((byte)(i >> 40)); - output.WriteByte((byte)(i >> 32)); - output.WriteByte((byte)(i >> 24)); - output.WriteByte((byte)(i >> 16)); - output.WriteByte((byte)(i >> 8)); - output.WriteByte((byte)i); - } - - public static void WriteUint48(long i, byte[] buf, int offset) - { - buf[offset] = (byte)(i >> 40); - buf[offset + 1] = (byte)(i >> 32); - buf[offset + 2] = (byte)(i >> 24); - buf[offset + 3] = (byte)(i >> 16); - buf[offset + 4] = (byte)(i >> 8); - buf[offset + 5] = (byte)i; - } - - public static void WriteUint64(long i, Stream output) - { - output.WriteByte((byte)(i >> 56)); - output.WriteByte((byte)(i >> 48)); - output.WriteByte((byte)(i >> 40)); - output.WriteByte((byte)(i >> 32)); - output.WriteByte((byte)(i >> 24)); - output.WriteByte((byte)(i >> 16)); - output.WriteByte((byte)(i >> 8)); - output.WriteByte((byte)i); - } - - public static void WriteUint64(long i, byte[] buf, int offset) - { - buf[offset] = (byte)(i >> 56); - buf[offset + 1] = (byte)(i >> 48); - buf[offset + 2] = (byte)(i >> 40); - buf[offset + 3] = (byte)(i >> 32); - buf[offset + 4] = (byte)(i >> 24); - buf[offset + 5] = (byte)(i >> 16); - buf[offset + 6] = (byte)(i >> 8); - buf[offset + 7] = (byte)i; - } - - public static void WriteOpaque8(byte[] buf, Stream output) - { - WriteUint8((byte)buf.Length, output); - output.Write(buf, 0, buf.Length); - } - - public static void WriteOpaque16(byte[] buf, Stream output) - { - WriteUint16(buf.Length, output); - output.Write(buf, 0, buf.Length); - } - - public static void WriteOpaque24(byte[] buf, Stream output) - { - WriteUint24(buf.Length, output); - output.Write(buf, 0, buf.Length); - } - - public static void WriteUint8Array(byte[] uints, Stream output) - { - output.Write(uints, 0, uints.Length); - } - - public static void WriteUint8Array(byte[] uints, byte[] buf, int offset) - { - for (int i = 0; i < uints.Length; ++i) - { - WriteUint8(uints[i], buf, offset); - ++offset; - } - } - - public static void WriteUint8ArrayWithUint8Length(byte[] uints, Stream output) - { - CheckUint8(uints.Length); - WriteUint8((byte)uints.Length, output); - WriteUint8Array(uints, output); - } - - public static void WriteUint8ArrayWithUint8Length(byte[] uints, byte[] buf, int offset) - { - CheckUint8(uints.Length); - WriteUint8((byte)uints.Length, buf, offset); - WriteUint8Array(uints, buf, offset + 1); - } - - public static void WriteUint16Array(int[] uints, Stream output) - { - for (int i = 0; i < uints.Length; ++i) - { - WriteUint16(uints[i], output); - } - } - - public static void WriteUint16Array(int[] uints, byte[] buf, int offset) - { - for (int i = 0; i < uints.Length; ++i) - { - WriteUint16(uints[i], buf, offset); - offset += 2; - } - } - - public static void WriteUint16ArrayWithUint16Length(int[] uints, Stream output) - { - int length = 2 * uints.Length; - CheckUint16(length); - WriteUint16(length, output); - WriteUint16Array(uints, output); - } - - public static void WriteUint16ArrayWithUint16Length(int[] uints, byte[] buf, int offset) - { - int length = 2 * uints.Length; - CheckUint16(length); - WriteUint16(length, buf, offset); - WriteUint16Array(uints, buf, offset + 2); - } - - public static byte DecodeUint8(byte[] buf) - { - if (buf == null) - throw new ArgumentNullException("buf"); - if (buf.Length != 1) - throw new TlsFatalAlert(AlertDescription.decode_error); - return ReadUint8(buf, 0); - } - - public static byte[] DecodeUint8ArrayWithUint8Length(byte[] buf) - { - if (buf == null) - throw new ArgumentNullException("buf"); - - int count = ReadUint8(buf, 0); - if (buf.Length != (count + 1)) - throw new TlsFatalAlert(AlertDescription.decode_error); - - byte[] uints = new byte[count]; - for (int i = 0; i < count; ++i) - { - uints[i] = ReadUint8(buf, i + 1); - } - return uints; - } - - public static byte[] EncodeOpaque8(byte[] buf) - { - CheckUint8(buf.Length); - return Arrays.Prepend(buf, (byte)buf.Length); - } - - public static byte[] EncodeUint8(byte val) - { - CheckUint8(val); - - byte[] extensionData = new byte[1]; - WriteUint8(val, extensionData, 0); - return extensionData; - } - - public static byte[] EncodeUint8ArrayWithUint8Length(byte[] uints) - { - byte[] result = new byte[1 + uints.Length]; - WriteUint8ArrayWithUint8Length(uints, result, 0); - return result; - } - - public static byte[] EncodeUint16ArrayWithUint16Length(int[] uints) - { - int length = 2 * uints.Length; - byte[] result = new byte[2 + length]; - WriteUint16ArrayWithUint16Length(uints, result, 0); - return result; - } - - public static byte ReadUint8(Stream input) - { - int i = input.ReadByte(); - if (i < 0) - throw new EndOfStreamException(); - return (byte)i; - } - - public static byte ReadUint8(byte[] buf, int offset) - { - return buf[offset]; - } - - public static int ReadUint16(Stream input) - { - int i1 = input.ReadByte(); - int i2 = input.ReadByte(); - if (i2 < 0) - throw new EndOfStreamException(); - return (i1 << 8) | i2; - } - - public static int ReadUint16(byte[] buf, int offset) - { - uint n = (uint)buf[offset] << 8; - n |= (uint)buf[++offset]; - return (int)n; - } - - public static int ReadUint24(Stream input) - { - int i1 = input.ReadByte(); - int i2 = input.ReadByte(); - int i3 = input.ReadByte(); - if (i3 < 0) - throw new EndOfStreamException(); - return (i1 << 16) | (i2 << 8) | i3; - } - - public static int ReadUint24(byte[] buf, int offset) - { - uint n = (uint)buf[offset] << 16; - n |= (uint)buf[++offset] << 8; - n |= (uint)buf[++offset]; - return (int)n; - } - - public static long ReadUint32(Stream input) - { - int i1 = input.ReadByte(); - int i2 = input.ReadByte(); - int i3 = input.ReadByte(); - int i4 = input.ReadByte(); - if (i4 < 0) - throw new EndOfStreamException(); - return (long)(uint)((i1 << 24) | (i2 << 16) | (i3 << 8) | i4); - } - - public static long ReadUint32(byte[] buf, int offset) - { - uint n = (uint)buf[offset] << 24; - n |= (uint)buf[++offset] << 16; - n |= (uint)buf[++offset] << 8; - n |= (uint)buf[++offset]; - return (long)n; - } - - public static long ReadUint48(Stream input) - { - int hi = ReadUint24(input); - int lo = ReadUint24(input); - return ((long)(hi & 0xffffffffL) << 24) | (long)(lo & 0xffffffffL); - } - - public static long ReadUint48(byte[] buf, int offset) - { - int hi = ReadUint24(buf, offset); - int lo = ReadUint24(buf, offset + 3); - return ((long)(hi & 0xffffffffL) << 24) | (long)(lo & 0xffffffffL); - } - - public static byte[] ReadAllOrNothing(int length, Stream input) - { - if (length < 1) - return EmptyBytes; - byte[] buf = new byte[length]; - int read = Streams.ReadFully(input, buf); - if (read == 0) - return null; - if (read != length) - throw new EndOfStreamException(); - return buf; - } - - public static byte[] ReadFully(int length, Stream input) - { - if (length < 1) - return EmptyBytes; - byte[] buf = new byte[length]; - if (length != Streams.ReadFully(input, buf)) - throw new EndOfStreamException(); - return buf; - } - - public static void ReadFully(byte[] buf, Stream input) - { - if (Streams.ReadFully(input, buf, 0, buf.Length) < buf.Length) - throw new EndOfStreamException(); - } - - public static byte[] ReadOpaque8(Stream input) - { - byte length = ReadUint8(input); - byte[] bytes = new byte[length]; - ReadFully(bytes, input); - return bytes; - } - - public static byte[] ReadOpaque16(Stream input) - { - int length = ReadUint16(input); - byte[] bytes = new byte[length]; - ReadFully(bytes, input); - return bytes; - } - - public static byte[] ReadOpaque24(Stream input) - { - int length = ReadUint24(input); - return ReadFully(length, input); - } - - public static byte[] ReadUint8Array(int count, Stream input) - { - byte[] uints = new byte[count]; - for (int i = 0; i < count; ++i) - { - uints[i] = ReadUint8(input); - } - return uints; - } - - public static int[] ReadUint16Array(int count, Stream input) - { - int[] uints = new int[count]; - for (int i = 0; i < count; ++i) - { - uints[i] = ReadUint16(input); - } - return uints; - } - - public static ProtocolVersion ReadVersion(byte[] buf, int offset) - { - return ProtocolVersion.Get(buf[offset], buf[offset + 1]); - } - - public static ProtocolVersion ReadVersion(Stream input) - { - int i1 = input.ReadByte(); - int i2 = input.ReadByte(); - if (i2 < 0) - throw new EndOfStreamException(); - return ProtocolVersion.Get(i1, i2); - } - - public static int ReadVersionRaw(byte[] buf, int offset) - { - return (buf[offset] << 8) | buf[offset + 1]; - } - - public static int ReadVersionRaw(Stream input) - { - int i1 = input.ReadByte(); - int i2 = input.ReadByte(); - if (i2 < 0) - throw new EndOfStreamException(); - return (i1 << 8) | i2; - } - - public static Asn1Object ReadAsn1Object(byte[] encoding) - { - MemoryStream input = new MemoryStream(encoding, false); - Asn1InputStream asn1 = new Asn1InputStream(input, encoding.Length); - Asn1Object result = asn1.ReadObject(); - if (null == result) - throw new TlsFatalAlert(AlertDescription.decode_error); - if (input.Position != input.Length) - throw new TlsFatalAlert(AlertDescription.decode_error); - return result; - } - - public static Asn1Object ReadDerObject(byte[] encoding) - { - /* - * NOTE: The current ASN.1 parsing code can't enforce DER-only parsing, but since DER is - * canonical, we can check it by re-encoding the result and comparing to the original. - */ - Asn1Object result = ReadAsn1Object(encoding); - byte[] check = result.GetEncoded(Asn1Encodable.Der); - if (!Arrays.AreEqual(check, encoding)) - throw new TlsFatalAlert(AlertDescription.decode_error); - return result; - } - - public static void WriteGmtUnixTime(byte[] buf, int offset) - { - int t = (int)(DateTimeUtilities.CurrentUnixMs() / 1000L); - buf[offset] = (byte)(t >> 24); - buf[offset + 1] = (byte)(t >> 16); - buf[offset + 2] = (byte)(t >> 8); - buf[offset + 3] = (byte)t; - } - - public static void WriteVersion(ProtocolVersion version, Stream output) - { - output.WriteByte((byte)version.MajorVersion); - output.WriteByte((byte)version.MinorVersion); - } - - public static void WriteVersion(ProtocolVersion version, byte[] buf, int offset) - { - buf[offset] = (byte)version.MajorVersion; - buf[offset + 1] = (byte)version.MinorVersion; - } - - public static IList GetAllSignatureAlgorithms() - { - IList v = Platform.CreateArrayList(4); - v.Add(SignatureAlgorithm.anonymous); - v.Add(SignatureAlgorithm.rsa); - v.Add(SignatureAlgorithm.dsa); - v.Add(SignatureAlgorithm.ecdsa); - return v; - } - - public static IList GetDefaultDssSignatureAlgorithms() - { - return VectorOfOne(new SignatureAndHashAlgorithm(HashAlgorithm.sha1, SignatureAlgorithm.dsa)); - } - - public static IList GetDefaultECDsaSignatureAlgorithms() - { - return VectorOfOne(new SignatureAndHashAlgorithm(HashAlgorithm.sha1, SignatureAlgorithm.ecdsa)); - } - - public static IList GetDefaultRsaSignatureAlgorithms() - { - return VectorOfOne(new SignatureAndHashAlgorithm(HashAlgorithm.sha1, SignatureAlgorithm.rsa)); - } - - public static byte[] GetExtensionData(IDictionary extensions, int extensionType) - { - return extensions == null ? null : (byte[])extensions[extensionType]; - } - - public static IList GetDefaultSupportedSignatureAlgorithms() - { - byte[] hashAlgorithms = new byte[]{ HashAlgorithm.sha1, HashAlgorithm.sha224, HashAlgorithm.sha256, - HashAlgorithm.sha384, HashAlgorithm.sha512 }; - byte[] signatureAlgorithms = new byte[]{ SignatureAlgorithm.rsa, SignatureAlgorithm.dsa, - SignatureAlgorithm.ecdsa }; - - IList result = Platform.CreateArrayList(); - for (int i = 0; i < signatureAlgorithms.Length; ++i) - { - for (int j = 0; j < hashAlgorithms.Length; ++j) - { - result.Add(new SignatureAndHashAlgorithm(hashAlgorithms[j], signatureAlgorithms[i])); - } - } - return result; - } - - public static SignatureAndHashAlgorithm GetSignatureAndHashAlgorithm(TlsContext context, - TlsSignerCredentials signerCredentials) - { - SignatureAndHashAlgorithm signatureAndHashAlgorithm = null; - if (IsTlsV12(context)) - { - signatureAndHashAlgorithm = signerCredentials.SignatureAndHashAlgorithm; - if (signatureAndHashAlgorithm == null) - throw new TlsFatalAlert(AlertDescription.internal_error); - } - return signatureAndHashAlgorithm; - } - - public static bool HasExpectedEmptyExtensionData(IDictionary extensions, int extensionType, - byte alertDescription) - { - byte[] extension_data = GetExtensionData(extensions, extensionType); - if (extension_data == null) - return false; - if (extension_data.Length != 0) - throw new TlsFatalAlert(alertDescription); - return true; - } - - public static TlsSession ImportSession(byte[] sessionID, SessionParameters sessionParameters) - { - return new TlsSessionImpl(sessionID, sessionParameters); - } - - public static bool IsSignatureAlgorithmsExtensionAllowed(ProtocolVersion clientVersion) - { - return ProtocolVersion.TLSv12.IsEqualOrEarlierVersionOf(clientVersion.GetEquivalentTLSVersion()); - } - - /** - * Add a 'signature_algorithms' extension to existing extensions. - * - * @param extensions A {@link Hashtable} to add the extension to. - * @param supportedSignatureAlgorithms {@link Vector} containing at least 1 {@link SignatureAndHashAlgorithm}. - * @throws IOException - */ - public static void AddSignatureAlgorithmsExtension(IDictionary extensions, IList supportedSignatureAlgorithms) - { - extensions[ExtensionType.signature_algorithms] = CreateSignatureAlgorithmsExtension(supportedSignatureAlgorithms); - } - - /** - * Get a 'signature_algorithms' extension from extensions. - * - * @param extensions A {@link Hashtable} to get the extension from, if it is present. - * @return A {@link Vector} containing at least 1 {@link SignatureAndHashAlgorithm}, or null. - * @throws IOException - */ - public static IList GetSignatureAlgorithmsExtension(IDictionary extensions) - { - byte[] extensionData = GetExtensionData(extensions, ExtensionType.signature_algorithms); - return extensionData == null ? null : ReadSignatureAlgorithmsExtension(extensionData); - } - - /** - * Create a 'signature_algorithms' extension value. - * - * @param supportedSignatureAlgorithms A {@link Vector} containing at least 1 {@link SignatureAndHashAlgorithm}. - * @return A byte array suitable for use as an extension value. - * @throws IOException - */ - public static byte[] CreateSignatureAlgorithmsExtension(IList supportedSignatureAlgorithms) - { - MemoryStream buf = new MemoryStream(); - - // supported_signature_algorithms - EncodeSupportedSignatureAlgorithms(supportedSignatureAlgorithms, false, buf); - - return buf.ToArray(); - } - - /** - * Read 'signature_algorithms' extension data. - * - * @param extensionData The extension data. - * @return A {@link Vector} containing at least 1 {@link SignatureAndHashAlgorithm}. - * @throws IOException - */ - public static IList ReadSignatureAlgorithmsExtension(byte[] extensionData) - { - if (extensionData == null) - throw new ArgumentNullException("extensionData"); - - MemoryStream buf = new MemoryStream(extensionData, false); - - // supported_signature_algorithms - IList supported_signature_algorithms = ParseSupportedSignatureAlgorithms(false, buf); - - TlsProtocol.AssertEmpty(buf); - - return supported_signature_algorithms; - } - - public static void EncodeSupportedSignatureAlgorithms(IList supportedSignatureAlgorithms, bool allowAnonymous, - Stream output) - { - if (supportedSignatureAlgorithms == null) - throw new ArgumentNullException("supportedSignatureAlgorithms"); - if (supportedSignatureAlgorithms.Count < 1 || supportedSignatureAlgorithms.Count >= (1 << 15)) - throw new ArgumentException("must have length from 1 to (2^15 - 1)", "supportedSignatureAlgorithms"); - - // supported_signature_algorithms - int length = 2 * supportedSignatureAlgorithms.Count; - CheckUint16(length); - WriteUint16(length, output); - - foreach (SignatureAndHashAlgorithm entry in supportedSignatureAlgorithms) - { - if (!allowAnonymous && entry.Signature == SignatureAlgorithm.anonymous) - { - /* - * RFC 5246 7.4.1.4.1 The "anonymous" value is meaningless in this context but used - * in Section 7.4.3. It MUST NOT appear in this extension. - */ - throw new ArgumentException( - "SignatureAlgorithm.anonymous MUST NOT appear in the signature_algorithms extension"); - } - entry.Encode(output); - } - } - - public static IList ParseSupportedSignatureAlgorithms(bool allowAnonymous, Stream input) - { - // supported_signature_algorithms - int length = ReadUint16(input); - if (length < 2 || (length & 1) != 0) - throw new TlsFatalAlert(AlertDescription.decode_error); - int count = length / 2; - IList supportedSignatureAlgorithms = Platform.CreateArrayList(count); - for (int i = 0; i < count; ++i) - { - SignatureAndHashAlgorithm entry = SignatureAndHashAlgorithm.Parse(input); - if (!allowAnonymous && entry.Signature == SignatureAlgorithm.anonymous) - { - /* - * RFC 5246 7.4.1.4.1 The "anonymous" value is meaningless in this context but used - * in Section 7.4.3. It MUST NOT appear in this extension. - */ - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - supportedSignatureAlgorithms.Add(entry); - } - return supportedSignatureAlgorithms; - } - - public static void VerifySupportedSignatureAlgorithm(IList supportedSignatureAlgorithms, SignatureAndHashAlgorithm signatureAlgorithm) - { - if (supportedSignatureAlgorithms == null) - throw new ArgumentNullException("supportedSignatureAlgorithms"); - if (supportedSignatureAlgorithms.Count < 1 || supportedSignatureAlgorithms.Count >= (1 << 15)) - throw new ArgumentException("must have length from 1 to (2^15 - 1)", "supportedSignatureAlgorithms"); - if (signatureAlgorithm == null) - throw new ArgumentNullException("signatureAlgorithm"); - - if (signatureAlgorithm.Signature != SignatureAlgorithm.anonymous) - { - foreach (SignatureAndHashAlgorithm entry in supportedSignatureAlgorithms) - { - if (entry.Hash == signatureAlgorithm.Hash && entry.Signature == signatureAlgorithm.Signature) - return; - } - } - - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - - public static byte[] PRF(TlsContext context, byte[] secret, string asciiLabel, byte[] seed, int size) - { - ProtocolVersion version = context.ServerVersion; - - if (version.IsSsl) - throw new InvalidOperationException("No PRF available for SSLv3 session"); - - byte[] label = Strings.ToByteArray(asciiLabel); - byte[] labelSeed = Concat(label, seed); - - int prfAlgorithm = context.SecurityParameters.PrfAlgorithm; - - if (prfAlgorithm == PrfAlgorithm.tls_prf_legacy) - return PRF_legacy(secret, label, labelSeed, size); - - IDigest prfDigest = CreatePrfHash(prfAlgorithm); - byte[] buf = new byte[size]; - HMacHash(prfDigest, secret, labelSeed, buf); - return buf; - } - - public static byte[] PRF_legacy(byte[] secret, string asciiLabel, byte[] seed, int size) - { - byte[] label = Strings.ToByteArray(asciiLabel); - byte[] labelSeed = Concat(label, seed); - - return PRF_legacy(secret, label, labelSeed, size); - } - - internal static byte[] PRF_legacy(byte[] secret, byte[] label, byte[] labelSeed, int size) - { - int s_half = (secret.Length + 1) / 2; - byte[] s1 = new byte[s_half]; - byte[] s2 = new byte[s_half]; - Array.Copy(secret, 0, s1, 0, s_half); - Array.Copy(secret, secret.Length - s_half, s2, 0, s_half); - - byte[] b1 = new byte[size]; - byte[] b2 = new byte[size]; - HMacHash(CreateHash(HashAlgorithm.md5), s1, labelSeed, b1); - HMacHash(CreateHash(HashAlgorithm.sha1), s2, labelSeed, b2); - for (int i = 0; i < size; i++) - { - b1[i] ^= b2[i]; - } - return b1; - } - - internal static byte[] Concat(byte[] a, byte[] b) - { - byte[] c = new byte[a.Length + b.Length]; - Array.Copy(a, 0, c, 0, a.Length); - Array.Copy(b, 0, c, a.Length, b.Length); - return c; - } - - internal static void HMacHash(IDigest digest, byte[] secret, byte[] seed, byte[] output) - { - HMac mac = new HMac(digest); - mac.Init(new KeyParameter(secret)); - byte[] a = seed; - int size = digest.GetDigestSize(); - int iterations = (output.Length + size - 1) / size; - byte[] buf = new byte[mac.GetMacSize()]; - byte[] buf2 = new byte[mac.GetMacSize()]; - for (int i = 0; i < iterations; i++) - { - mac.BlockUpdate(a, 0, a.Length); - mac.DoFinal(buf, 0); - a = buf; - mac.BlockUpdate(a, 0, a.Length); - mac.BlockUpdate(seed, 0, seed.Length); - mac.DoFinal(buf2, 0); - Array.Copy(buf2, 0, output, (size * i), System.Math.Min(size, output.Length - (size * i))); - } - } - - internal static void ValidateKeyUsage(X509CertificateStructure c, int keyUsageBits) - { - X509Extensions exts = c.TbsCertificate.Extensions; - if (exts != null) - { - X509Extension ext = exts.GetExtension(X509Extensions.KeyUsage); - if (ext != null) - { - DerBitString ku = KeyUsage.GetInstance(ext); - int bits = ku.GetBytes()[0]; - if ((bits & keyUsageBits) != keyUsageBits) - throw new TlsFatalAlert(AlertDescription.certificate_unknown); - } - } - } - - internal static byte[] CalculateKeyBlock(TlsContext context, int size) - { - SecurityParameters securityParameters = context.SecurityParameters; - byte[] master_secret = securityParameters.MasterSecret; - byte[] seed = Concat(securityParameters.ServerRandom, securityParameters.ClientRandom); - - if (IsSsl(context)) - return CalculateKeyBlock_Ssl(master_secret, seed, size); - - return PRF(context, master_secret, ExporterLabel.key_expansion, seed, size); - } - - internal static byte[] CalculateKeyBlock_Ssl(byte[] master_secret, byte[] random, int size) - { - IDigest md5 = CreateHash(HashAlgorithm.md5); - IDigest sha1 = CreateHash(HashAlgorithm.sha1); - int md5Size = md5.GetDigestSize(); - byte[] shatmp = new byte[sha1.GetDigestSize()]; - byte[] tmp = new byte[size + md5Size]; - - int i = 0, pos = 0; - while (pos < size) - { - byte[] ssl3Const = SSL3_CONST[i]; - - sha1.BlockUpdate(ssl3Const, 0, ssl3Const.Length); - sha1.BlockUpdate(master_secret, 0, master_secret.Length); - sha1.BlockUpdate(random, 0, random.Length); - sha1.DoFinal(shatmp, 0); - - md5.BlockUpdate(master_secret, 0, master_secret.Length); - md5.BlockUpdate(shatmp, 0, shatmp.Length); - md5.DoFinal(tmp, pos); - - pos += md5Size; - ++i; - } - - return Arrays.CopyOfRange(tmp, 0, size); - } - - internal static byte[] CalculateMasterSecret(TlsContext context, byte[] pre_master_secret) - { - SecurityParameters securityParameters = context.SecurityParameters; - - byte[] seed = securityParameters.extendedMasterSecret - ? securityParameters.SessionHash - : Concat(securityParameters.ClientRandom, securityParameters.ServerRandom); - - if (IsSsl(context)) - return CalculateMasterSecret_Ssl(pre_master_secret, seed); - - string asciiLabel = securityParameters.extendedMasterSecret - ? ExporterLabel.extended_master_secret - : ExporterLabel.master_secret; - - return PRF(context, pre_master_secret, asciiLabel, seed, 48); - } - - internal static byte[] CalculateMasterSecret_Ssl(byte[] pre_master_secret, byte[] random) - { - IDigest md5 = CreateHash(HashAlgorithm.md5); - IDigest sha1 = CreateHash(HashAlgorithm.sha1); - int md5Size = md5.GetDigestSize(); - byte[] shatmp = new byte[sha1.GetDigestSize()]; - - byte[] rval = new byte[md5Size * 3]; - int pos = 0; - - for (int i = 0; i < 3; ++i) - { - byte[] ssl3Const = SSL3_CONST[i]; - - sha1.BlockUpdate(ssl3Const, 0, ssl3Const.Length); - sha1.BlockUpdate(pre_master_secret, 0, pre_master_secret.Length); - sha1.BlockUpdate(random, 0, random.Length); - sha1.DoFinal(shatmp, 0); - - md5.BlockUpdate(pre_master_secret, 0, pre_master_secret.Length); - md5.BlockUpdate(shatmp, 0, shatmp.Length); - md5.DoFinal(rval, pos); - - pos += md5Size; - } - - return rval; - } - - internal static byte[] CalculateVerifyData(TlsContext context, string asciiLabel, byte[] handshakeHash) - { - if (IsSsl(context)) - return handshakeHash; - - SecurityParameters securityParameters = context.SecurityParameters; - byte[] master_secret = securityParameters.MasterSecret; - int verify_data_length = securityParameters.VerifyDataLength; - - return PRF(context, master_secret, asciiLabel, handshakeHash, verify_data_length); - } - - public static IDigest CreateHash(byte hashAlgorithm) - { - switch (hashAlgorithm) - { - case HashAlgorithm.md5: - return new MD5Digest(); - case HashAlgorithm.sha1: - return new Sha1Digest(); - case HashAlgorithm.sha224: - return new Sha224Digest(); - case HashAlgorithm.sha256: - return new Sha256Digest(); - case HashAlgorithm.sha384: - return new Sha384Digest(); - case HashAlgorithm.sha512: - return new Sha512Digest(); - default: - throw new ArgumentException("unknown HashAlgorithm", "hashAlgorithm"); - } - } - - public static IDigest CreateHash(SignatureAndHashAlgorithm signatureAndHashAlgorithm) - { - return signatureAndHashAlgorithm == null - ? new CombinedHash() - : CreateHash(signatureAndHashAlgorithm.Hash); - } - - public static IDigest CloneHash(byte hashAlgorithm, IDigest hash) - { - switch (hashAlgorithm) - { - case HashAlgorithm.md5: - return new MD5Digest((MD5Digest)hash); - case HashAlgorithm.sha1: - return new Sha1Digest((Sha1Digest)hash); - case HashAlgorithm.sha224: - return new Sha224Digest((Sha224Digest)hash); - case HashAlgorithm.sha256: - return new Sha256Digest((Sha256Digest)hash); - case HashAlgorithm.sha384: - return new Sha384Digest((Sha384Digest)hash); - case HashAlgorithm.sha512: - return new Sha512Digest((Sha512Digest)hash); - default: - throw new ArgumentException("unknown HashAlgorithm", "hashAlgorithm"); - } - } - - public static IDigest CreatePrfHash(int prfAlgorithm) - { - switch (prfAlgorithm) - { - case PrfAlgorithm.tls_prf_legacy: - return new CombinedHash(); - default: - return CreateHash(GetHashAlgorithmForPrfAlgorithm(prfAlgorithm)); - } - } - - public static IDigest ClonePrfHash(int prfAlgorithm, IDigest hash) - { - switch (prfAlgorithm) - { - case PrfAlgorithm.tls_prf_legacy: - return new CombinedHash((CombinedHash)hash); - default: - return CloneHash(GetHashAlgorithmForPrfAlgorithm(prfAlgorithm), hash); - } - } - - public static byte GetHashAlgorithmForPrfAlgorithm(int prfAlgorithm) - { - switch (prfAlgorithm) - { - case PrfAlgorithm.tls_prf_legacy: - throw new ArgumentException("legacy PRF not a valid algorithm", "prfAlgorithm"); - case PrfAlgorithm.tls_prf_sha256: - return HashAlgorithm.sha256; - case PrfAlgorithm.tls_prf_sha384: - return HashAlgorithm.sha384; - default: - throw new ArgumentException("unknown PrfAlgorithm", "prfAlgorithm"); - } - } - - public static DerObjectIdentifier GetOidForHashAlgorithm(byte hashAlgorithm) - { - switch (hashAlgorithm) - { - case HashAlgorithm.md5: - return PkcsObjectIdentifiers.MD5; - case HashAlgorithm.sha1: - return X509ObjectIdentifiers.IdSha1; - case HashAlgorithm.sha224: - return NistObjectIdentifiers.IdSha224; - case HashAlgorithm.sha256: - return NistObjectIdentifiers.IdSha256; - case HashAlgorithm.sha384: - return NistObjectIdentifiers.IdSha384; - case HashAlgorithm.sha512: - return NistObjectIdentifiers.IdSha512; - default: - throw new ArgumentException("unknown HashAlgorithm", "hashAlgorithm"); - } - } - - internal static short GetClientCertificateType(Certificate clientCertificate, Certificate serverCertificate) - { - if (clientCertificate.IsEmpty) - return -1; - - X509CertificateStructure x509Cert = clientCertificate.GetCertificateAt(0); - SubjectPublicKeyInfo keyInfo = x509Cert.SubjectPublicKeyInfo; - try - { - AsymmetricKeyParameter publicKey = PublicKeyFactory.CreateKey(keyInfo); - if (publicKey.IsPrivate) - throw new TlsFatalAlert(AlertDescription.internal_error); - - /* - * TODO RFC 5246 7.4.6. The certificates MUST be signed using an acceptable hash/ - * signature algorithm pair, as described in Section 7.4.4. Note that this relaxes the - * constraints on certificate-signing algorithms found in prior versions of TLS. - */ - - /* - * RFC 5246 7.4.6. Client Certificate - */ - - /* - * RSA public key; the certificate MUST allow the key to be used for signing with the - * signature scheme and hash algorithm that will be employed in the certificate verify - * message. - */ - if (publicKey is RsaKeyParameters) - { - ValidateKeyUsage(x509Cert, KeyUsage.DigitalSignature); - return ClientCertificateType.rsa_sign; - } - - /* - * DSA public key; the certificate MUST allow the key to be used for signing with the - * hash algorithm that will be employed in the certificate verify message. - */ - if (publicKey is DsaPublicKeyParameters) - { - ValidateKeyUsage(x509Cert, KeyUsage.DigitalSignature); - return ClientCertificateType.dss_sign; - } - - /* - * ECDSA-capable public key; the certificate MUST allow the key to be used for signing - * with the hash algorithm that will be employed in the certificate verify message; the - * public key MUST use a curve and point format supported by the server. - */ - if (publicKey is ECPublicKeyParameters) - { - ValidateKeyUsage(x509Cert, KeyUsage.DigitalSignature); - // TODO Check the curve and point format - return ClientCertificateType.ecdsa_sign; - } - - // TODO Add support for ClientCertificateType.*_fixed_* - - throw new TlsFatalAlert(AlertDescription.unsupported_certificate); - } - catch (Exception e) - { - throw new TlsFatalAlert(AlertDescription.unsupported_certificate, e); - } - } - - internal static void TrackHashAlgorithms(TlsHandshakeHash handshakeHash, IList supportedSignatureAlgorithms) - { - if (supportedSignatureAlgorithms != null) - { - foreach (SignatureAndHashAlgorithm signatureAndHashAlgorithm in supportedSignatureAlgorithms) - { - byte hashAlgorithm = signatureAndHashAlgorithm.Hash; - - // TODO Support values in the "Reserved for Private Use" range - if (!HashAlgorithm.IsPrivate(hashAlgorithm)) - { - handshakeHash.TrackHashAlgorithm(hashAlgorithm); - } - } - } - } - - public static bool HasSigningCapability(byte clientCertificateType) - { - switch (clientCertificateType) - { - case ClientCertificateType.dss_sign: - case ClientCertificateType.ecdsa_sign: - case ClientCertificateType.rsa_sign: - return true; - default: - return false; - } - } - - public static TlsSigner CreateTlsSigner(byte clientCertificateType) - { - switch (clientCertificateType) - { - case ClientCertificateType.dss_sign: - return new TlsDssSigner(); - case ClientCertificateType.ecdsa_sign: - return new TlsECDsaSigner(); - case ClientCertificateType.rsa_sign: - return new TlsRsaSigner(); - default: - throw new ArgumentException("not a type with signing capability", "clientCertificateType"); - } - } - - internal static readonly byte[] SSL_CLIENT = {0x43, 0x4C, 0x4E, 0x54}; - internal static readonly byte[] SSL_SERVER = {0x53, 0x52, 0x56, 0x52}; - - // SSL3 magic mix constants ("A", "BB", "CCC", ...) - internal static readonly byte[][] SSL3_CONST = GenSsl3Const(); - - private static byte[][] GenSsl3Const() - { - int n = 10; - byte[][] arr = new byte[n][]; - for (int i = 0; i < n; i++) - { - byte[] b = new byte[i + 1]; - Arrays.Fill(b, (byte)('A' + i)); - arr[i] = b; - } - return arr; - } - - private static IList VectorOfOne(object obj) - { - IList v = Platform.CreateArrayList(1); - v.Add(obj); - return v; - } - - public static int GetCipherType(int ciphersuite) - { - switch (GetEncryptionAlgorithm(ciphersuite)) - { - case EncryptionAlgorithm.AES_128_CCM: - case EncryptionAlgorithm.AES_128_CCM_8: - case EncryptionAlgorithm.AES_128_GCM: - case EncryptionAlgorithm.AES_128_OCB_TAGLEN96: - case EncryptionAlgorithm.AES_256_CCM: - case EncryptionAlgorithm.AES_256_CCM_8: - case EncryptionAlgorithm.AES_256_GCM: - case EncryptionAlgorithm.AES_256_OCB_TAGLEN96: - case EncryptionAlgorithm.CAMELLIA_128_GCM: - case EncryptionAlgorithm.CAMELLIA_256_GCM: - case EncryptionAlgorithm.CHACHA20_POLY1305: - return CipherType.aead; - - case EncryptionAlgorithm.RC2_CBC_40: - case EncryptionAlgorithm.IDEA_CBC: - case EncryptionAlgorithm.DES40_CBC: - case EncryptionAlgorithm.DES_CBC: - case EncryptionAlgorithm.cls_3DES_EDE_CBC: - case EncryptionAlgorithm.AES_128_CBC: - case EncryptionAlgorithm.AES_256_CBC: - case EncryptionAlgorithm.CAMELLIA_128_CBC: - case EncryptionAlgorithm.CAMELLIA_256_CBC: - case EncryptionAlgorithm.SEED_CBC: - return CipherType.block; - - case EncryptionAlgorithm.NULL: - case EncryptionAlgorithm.RC4_40: - case EncryptionAlgorithm.RC4_128: - return CipherType.stream; - - default: - throw new TlsFatalAlert(AlertDescription.internal_error); - } - } - - public static int GetEncryptionAlgorithm(int ciphersuite) - { - switch (ciphersuite) - { - case CipherSuite.TLS_DH_anon_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_PSK_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_RSA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA: - return EncryptionAlgorithm.cls_3DES_EDE_CBC; - - case CipherSuite.TLS_DH_anon_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_DH_anon_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_DH_DSS_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_DH_RSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_DHE_DSS_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DHE_PSK_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_DHE_PSK_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_ECDH_anon_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_PSK_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_PSK_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_RSA_PSK_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_RSA_PSK_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_RSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_RSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_WITH_AES_128_CBC_SHA: - return EncryptionAlgorithm.AES_128_CBC; - - case CipherSuite.TLS_DHE_PSK_WITH_AES_128_CCM: - case CipherSuite.TLS_DHE_RSA_WITH_AES_128_CCM: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_CCM: - case CipherSuite.TLS_PSK_WITH_AES_128_CCM: - case CipherSuite.TLS_RSA_WITH_AES_128_CCM: - return EncryptionAlgorithm.AES_128_CCM; - - case CipherSuite.TLS_DHE_RSA_WITH_AES_128_CCM_8: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8: - case CipherSuite.TLS_PSK_DHE_WITH_AES_128_CCM_8: - case CipherSuite.TLS_PSK_WITH_AES_128_CCM_8: - case CipherSuite.TLS_RSA_WITH_AES_128_CCM_8: - return EncryptionAlgorithm.AES_128_CCM_8; - - case CipherSuite.TLS_DH_anon_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_DHE_PSK_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_PSK_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_RSA_PSK_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_RSA_WITH_AES_128_GCM_SHA256: - return EncryptionAlgorithm.AES_128_GCM; - - case CipherSuite.DRAFT_TLS_DHE_PSK_WITH_AES_128_OCB: - case CipherSuite.DRAFT_TLS_DHE_RSA_WITH_AES_128_OCB: - case CipherSuite.DRAFT_TLS_ECDHE_ECDSA_WITH_AES_128_OCB: - case CipherSuite.DRAFT_TLS_ECDHE_PSK_WITH_AES_128_OCB: - case CipherSuite.DRAFT_TLS_ECDHE_RSA_WITH_AES_128_OCB: - case CipherSuite.DRAFT_TLS_PSK_WITH_AES_128_OCB: - return EncryptionAlgorithm.AES_128_OCB_TAGLEN96; - - case CipherSuite.TLS_DH_anon_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_DH_anon_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_DH_DSS_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_DH_RSA_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_DHE_DSS_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_DHE_PSK_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_DHE_PSK_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_DHE_RSA_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_ECDH_anon_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_PSK_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_PSK_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_RSA_PSK_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_RSA_PSK_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_RSA_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_RSA_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_WITH_AES_256_CBC_SHA: - return EncryptionAlgorithm.AES_256_CBC; - - case CipherSuite.TLS_DHE_PSK_WITH_AES_256_CCM: - case CipherSuite.TLS_DHE_RSA_WITH_AES_256_CCM: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_CCM: - case CipherSuite.TLS_PSK_WITH_AES_256_CCM: - case CipherSuite.TLS_RSA_WITH_AES_256_CCM: - return EncryptionAlgorithm.AES_256_CCM; - - case CipherSuite.TLS_DHE_RSA_WITH_AES_256_CCM_8: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8: - case CipherSuite.TLS_PSK_DHE_WITH_AES_256_CCM_8: - case CipherSuite.TLS_PSK_WITH_AES_256_CCM_8: - case CipherSuite.TLS_RSA_WITH_AES_256_CCM_8: - return EncryptionAlgorithm.AES_256_CCM_8; - - case CipherSuite.TLS_DH_anon_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_DH_DSS_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_DH_RSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_DHE_DSS_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_DHE_PSK_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_DHE_RSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_PSK_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_RSA_PSK_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_RSA_WITH_AES_256_GCM_SHA384: - return EncryptionAlgorithm.AES_256_GCM; - - case CipherSuite.DRAFT_TLS_DHE_PSK_WITH_AES_256_OCB: - case CipherSuite.DRAFT_TLS_DHE_RSA_WITH_AES_256_OCB: - case CipherSuite.DRAFT_TLS_ECDHE_ECDSA_WITH_AES_256_OCB: - case CipherSuite.DRAFT_TLS_ECDHE_PSK_WITH_AES_256_OCB: - case CipherSuite.DRAFT_TLS_ECDHE_RSA_WITH_AES_256_OCB: - case CipherSuite.DRAFT_TLS_PSK_WITH_AES_256_OCB: - return EncryptionAlgorithm.AES_256_OCB_TAGLEN96; - - case CipherSuite.TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA: - case CipherSuite.TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA: - case CipherSuite.TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA: - case CipherSuite.TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: - case CipherSuite.TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256: - return EncryptionAlgorithm.CAMELLIA_128_CBC; - - case CipherSuite.TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256: - return EncryptionAlgorithm.CAMELLIA_128_GCM; - - case CipherSuite.TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA: - case CipherSuite.TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA: - case CipherSuite.TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA: - case CipherSuite.TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: - case CipherSuite.TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384: - return EncryptionAlgorithm.CAMELLIA_256_CBC; - - case CipherSuite.TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384: - return EncryptionAlgorithm.CAMELLIA_256_GCM; - - case CipherSuite.DRAFT_TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.DRAFT_TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.DRAFT_TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.DRAFT_TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.DRAFT_TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.DRAFT_TLS_PSK_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.DRAFT_TLS_RSA_PSK_WITH_CHACHA20_POLY1305_SHA256: - return EncryptionAlgorithm.CHACHA20_POLY1305; - - case CipherSuite.TLS_RSA_WITH_NULL_MD5: - return EncryptionAlgorithm.NULL; - - case CipherSuite.TLS_DHE_PSK_WITH_NULL_SHA: - case CipherSuite.TLS_ECDH_anon_WITH_NULL_SHA: - case CipherSuite.TLS_ECDH_ECDSA_WITH_NULL_SHA: - case CipherSuite.TLS_ECDH_RSA_WITH_NULL_SHA: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_NULL_SHA: - case CipherSuite.TLS_ECDHE_PSK_WITH_NULL_SHA: - case CipherSuite.TLS_ECDHE_RSA_WITH_NULL_SHA: - case CipherSuite.TLS_PSK_WITH_NULL_SHA: - case CipherSuite.TLS_RSA_PSK_WITH_NULL_SHA: - case CipherSuite.TLS_RSA_WITH_NULL_SHA: - return EncryptionAlgorithm.NULL; - - case CipherSuite.TLS_DHE_PSK_WITH_NULL_SHA256: - case CipherSuite.TLS_ECDHE_PSK_WITH_NULL_SHA256: - case CipherSuite.TLS_PSK_WITH_NULL_SHA256: - case CipherSuite.TLS_RSA_PSK_WITH_NULL_SHA256: - case CipherSuite.TLS_RSA_WITH_NULL_SHA256: - return EncryptionAlgorithm.NULL; - - case CipherSuite.TLS_DHE_PSK_WITH_NULL_SHA384: - case CipherSuite.TLS_ECDHE_PSK_WITH_NULL_SHA384: - case CipherSuite.TLS_PSK_WITH_NULL_SHA384: - case CipherSuite.TLS_RSA_PSK_WITH_NULL_SHA384: - return EncryptionAlgorithm.NULL; - - case CipherSuite.TLS_DH_anon_WITH_RC4_128_MD5: - case CipherSuite.TLS_RSA_WITH_RC4_128_MD5: - return EncryptionAlgorithm.RC4_128; - - case CipherSuite.TLS_DHE_PSK_WITH_RC4_128_SHA: - case CipherSuite.TLS_ECDH_anon_WITH_RC4_128_SHA: - case CipherSuite.TLS_ECDH_ECDSA_WITH_RC4_128_SHA: - case CipherSuite.TLS_ECDH_RSA_WITH_RC4_128_SHA: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_RC4_128_SHA: - case CipherSuite.TLS_ECDHE_PSK_WITH_RC4_128_SHA: - case CipherSuite.TLS_ECDHE_RSA_WITH_RC4_128_SHA: - case CipherSuite.TLS_PSK_WITH_RC4_128_SHA: - case CipherSuite.TLS_RSA_WITH_RC4_128_SHA: - case CipherSuite.TLS_RSA_PSK_WITH_RC4_128_SHA: - return EncryptionAlgorithm.RC4_128; - - case CipherSuite.TLS_DH_anon_WITH_SEED_CBC_SHA: - case CipherSuite.TLS_DH_DSS_WITH_SEED_CBC_SHA: - case CipherSuite.TLS_DH_RSA_WITH_SEED_CBC_SHA: - case CipherSuite.TLS_DHE_DSS_WITH_SEED_CBC_SHA: - case CipherSuite.TLS_DHE_RSA_WITH_SEED_CBC_SHA: - case CipherSuite.TLS_RSA_WITH_SEED_CBC_SHA: - return EncryptionAlgorithm.SEED_CBC; - - default: - throw new TlsFatalAlert(AlertDescription.internal_error); - } - } - - public static int GetKeyExchangeAlgorithm(int ciphersuite) - { - switch (ciphersuite) - { - case CipherSuite.TLS_DH_anon_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_DH_anon_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_DH_anon_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DH_anon_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_DH_anon_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_DH_anon_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_DH_anon_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA: - case CipherSuite.TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA: - case CipherSuite.TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_DH_anon_WITH_RC4_128_MD5: - case CipherSuite.TLS_DH_anon_WITH_SEED_CBC_SHA: - return KeyExchangeAlgorithm.DH_anon; - - case CipherSuite.TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_DH_DSS_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_DH_DSS_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_DH_DSS_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA: - case CipherSuite.TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA: - case CipherSuite.TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_DH_DSS_WITH_SEED_CBC_SHA: - return KeyExchangeAlgorithm.DH_DSS; - - case CipherSuite.TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_DH_RSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_DH_RSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_DH_RSA_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA: - case CipherSuite.TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA: - case CipherSuite.TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_DH_RSA_WITH_SEED_CBC_SHA: - return KeyExchangeAlgorithm.DH_RSA; - - case CipherSuite.TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_DHE_DSS_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_DHE_DSS_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_DHE_DSS_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_DHE_DSS_WITH_SEED_CBC_SHA: - return KeyExchangeAlgorithm.DHE_DSS; - - case CipherSuite.TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_DHE_PSK_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_DHE_PSK_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DHE_PSK_WITH_AES_128_CCM: - case CipherSuite.TLS_DHE_PSK_WITH_AES_128_GCM_SHA256: - case CipherSuite.DRAFT_TLS_DHE_PSK_WITH_AES_128_OCB: - case CipherSuite.TLS_DHE_PSK_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_DHE_PSK_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_DHE_PSK_WITH_AES_256_CCM: - case CipherSuite.TLS_DHE_PSK_WITH_AES_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_DHE_PSK_WITH_AES_256_OCB: - case CipherSuite.TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.TLS_DHE_PSK_WITH_NULL_SHA: - case CipherSuite.TLS_DHE_PSK_WITH_NULL_SHA256: - case CipherSuite.TLS_DHE_PSK_WITH_NULL_SHA384: - case CipherSuite.TLS_DHE_PSK_WITH_RC4_128_SHA: - case CipherSuite.TLS_PSK_DHE_WITH_AES_128_CCM_8: - case CipherSuite.TLS_PSK_DHE_WITH_AES_256_CCM_8: - return KeyExchangeAlgorithm.DHE_PSK; - - case CipherSuite.TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_DHE_RSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_AES_128_CCM: - case CipherSuite.TLS_DHE_RSA_WITH_AES_128_CCM_8: - case CipherSuite.TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.DRAFT_TLS_DHE_RSA_WITH_AES_128_OCB: - case CipherSuite.TLS_DHE_RSA_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_AES_256_CCM: - case CipherSuite.TLS_DHE_RSA_WITH_AES_256_CCM_8: - case CipherSuite.TLS_DHE_RSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_DHE_RSA_WITH_AES_256_OCB: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_SEED_CBC_SHA: - return KeyExchangeAlgorithm.DHE_RSA; - - case CipherSuite.TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_ECDH_anon_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_ECDH_anon_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_ECDH_anon_WITH_NULL_SHA: - case CipherSuite.TLS_ECDH_anon_WITH_RC4_128_SHA: - return KeyExchangeAlgorithm.ECDH_anon; - - case CipherSuite.TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.DRAFT_TLS_ECDHE_ECDSA_WITH_AES_128_OCB: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_ECDHE_ECDSA_WITH_AES_256_OCB: - case CipherSuite.TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_ECDH_ECDSA_WITH_NULL_SHA: - case CipherSuite.TLS_ECDH_ECDSA_WITH_RC4_128_SHA: - return KeyExchangeAlgorithm.ECDH_ECDSA; - - case CipherSuite.TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_ECDH_RSA_WITH_NULL_SHA: - case CipherSuite.TLS_ECDH_RSA_WITH_RC4_128_SHA: - return KeyExchangeAlgorithm.ECDH_RSA; - - case CipherSuite.TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_CCM: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_CCM: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_NULL_SHA: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_RC4_128_SHA: - return KeyExchangeAlgorithm.ECDHE_ECDSA; - - case CipherSuite.TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256: - case CipherSuite.DRAFT_TLS_ECDHE_PSK_WITH_AES_128_OCB: - case CipherSuite.TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384: - case CipherSuite.DRAFT_TLS_ECDHE_PSK_WITH_AES_256_OCB: - case CipherSuite.TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.DRAFT_TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.TLS_ECDHE_PSK_WITH_NULL_SHA: - case CipherSuite.TLS_ECDHE_PSK_WITH_NULL_SHA256: - case CipherSuite.TLS_ECDHE_PSK_WITH_NULL_SHA384: - case CipherSuite.TLS_ECDHE_PSK_WITH_RC4_128_SHA: - return KeyExchangeAlgorithm.ECDHE_PSK; - - case CipherSuite.TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.DRAFT_TLS_ECDHE_RSA_WITH_AES_128_OCB: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_ECDHE_RSA_WITH_AES_256_OCB: - case CipherSuite.TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.TLS_ECDHE_RSA_WITH_NULL_SHA: - case CipherSuite.TLS_ECDHE_RSA_WITH_RC4_128_SHA: - return KeyExchangeAlgorithm.ECDHE_RSA; - - case CipherSuite.TLS_PSK_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_PSK_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_PSK_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_PSK_WITH_AES_128_CCM: - case CipherSuite.TLS_PSK_WITH_AES_128_CCM_8: - case CipherSuite.TLS_PSK_WITH_AES_128_GCM_SHA256: - case CipherSuite.DRAFT_TLS_PSK_WITH_AES_128_OCB: - case CipherSuite.TLS_PSK_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_PSK_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_PSK_WITH_AES_256_CCM: - case CipherSuite.TLS_PSK_WITH_AES_256_CCM_8: - case CipherSuite.TLS_PSK_WITH_AES_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_PSK_WITH_AES_256_OCB: - case CipherSuite.TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_PSK_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.TLS_PSK_WITH_NULL_SHA: - case CipherSuite.TLS_PSK_WITH_NULL_SHA256: - case CipherSuite.TLS_PSK_WITH_NULL_SHA384: - case CipherSuite.TLS_PSK_WITH_RC4_128_SHA: - return KeyExchangeAlgorithm.PSK; - - case CipherSuite.TLS_RSA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_RSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_RSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_RSA_WITH_AES_128_CCM: - case CipherSuite.TLS_RSA_WITH_AES_128_CCM_8: - case CipherSuite.TLS_RSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_RSA_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_RSA_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_RSA_WITH_AES_256_CCM: - case CipherSuite.TLS_RSA_WITH_AES_256_CCM_8: - case CipherSuite.TLS_RSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: - case CipherSuite.TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: - case CipherSuite.TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_RSA_PSK_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.TLS_RSA_WITH_NULL_MD5: - case CipherSuite.TLS_RSA_WITH_NULL_SHA: - case CipherSuite.TLS_RSA_WITH_NULL_SHA256: - case CipherSuite.TLS_RSA_WITH_RC4_128_MD5: - case CipherSuite.TLS_RSA_WITH_RC4_128_SHA: - case CipherSuite.TLS_RSA_WITH_SEED_CBC_SHA: - return KeyExchangeAlgorithm.RSA; - - case CipherSuite.TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_RSA_PSK_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_RSA_PSK_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_RSA_PSK_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_RSA_PSK_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_RSA_PSK_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_RSA_PSK_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_RSA_PSK_WITH_NULL_SHA: - case CipherSuite.TLS_RSA_PSK_WITH_NULL_SHA256: - case CipherSuite.TLS_RSA_PSK_WITH_NULL_SHA384: - case CipherSuite.TLS_RSA_PSK_WITH_RC4_128_SHA: - return KeyExchangeAlgorithm.RSA_PSK; - - case CipherSuite.TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_WITH_AES_256_CBC_SHA: - return KeyExchangeAlgorithm.SRP; - - case CipherSuite.TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA: - return KeyExchangeAlgorithm.SRP_DSS; - - case CipherSuite.TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA: - return KeyExchangeAlgorithm.SRP_RSA; - - default: - throw new TlsFatalAlert(AlertDescription.internal_error); - } - } - - public static int GetMacAlgorithm(int ciphersuite) - { - switch (ciphersuite) - { - case CipherSuite.TLS_DH_anon_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_DH_anon_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_DH_DSS_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_DH_RSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_DHE_DSS_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_DHE_PSK_WITH_AES_128_CCM: - case CipherSuite.TLS_DHE_PSK_WITH_AES_128_GCM_SHA256: - case CipherSuite.DRAFT_TLS_DHE_PSK_WITH_AES_128_OCB: - case CipherSuite.TLS_DHE_PSK_WITH_AES_256_CCM: - case CipherSuite.TLS_DHE_PSK_WITH_AES_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_DHE_PSK_WITH_AES_256_OCB: - case CipherSuite.TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_AES_128_CCM: - case CipherSuite.TLS_DHE_RSA_WITH_AES_128_CCM_8: - case CipherSuite.TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.DRAFT_TLS_DHE_RSA_WITH_AES_128_OCB: - case CipherSuite.TLS_DHE_RSA_WITH_AES_256_CCM: - case CipherSuite.TLS_DHE_RSA_WITH_AES_256_CCM_8: - case CipherSuite.TLS_DHE_RSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_DHE_RSA_WITH_AES_256_OCB: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_CCM: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.DRAFT_TLS_ECDHE_ECDSA_WITH_AES_128_OCB: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_CCM: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_ECDHE_ECDSA_WITH_AES_256_OCB: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.DRAFT_TLS_ECDHE_PSK_WITH_AES_128_OCB: - case CipherSuite.DRAFT_TLS_ECDHE_PSK_WITH_AES_256_OCB: - case CipherSuite.DRAFT_TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.DRAFT_TLS_ECDHE_RSA_WITH_AES_128_OCB: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_ECDHE_RSA_WITH_AES_256_OCB: - case CipherSuite.TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.TLS_PSK_DHE_WITH_AES_128_CCM_8: - case CipherSuite.TLS_PSK_DHE_WITH_AES_256_CCM_8: - case CipherSuite.TLS_PSK_WITH_AES_128_CCM: - case CipherSuite.TLS_PSK_WITH_AES_128_CCM_8: - case CipherSuite.TLS_PSK_WITH_AES_128_GCM_SHA256: - case CipherSuite.DRAFT_TLS_PSK_WITH_AES_128_OCB: - case CipherSuite.TLS_PSK_WITH_AES_256_CCM: - case CipherSuite.TLS_PSK_WITH_AES_256_CCM_8: - case CipherSuite.TLS_PSK_WITH_AES_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_PSK_WITH_AES_256_OCB: - case CipherSuite.TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_PSK_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.TLS_RSA_PSK_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_RSA_PSK_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_RSA_PSK_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.TLS_RSA_WITH_AES_128_CCM: - case CipherSuite.TLS_RSA_WITH_AES_128_CCM_8: - case CipherSuite.TLS_RSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_RSA_WITH_AES_256_CCM: - case CipherSuite.TLS_RSA_WITH_AES_256_CCM_8: - case CipherSuite.TLS_RSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384: - return MacAlgorithm.cls_null; - - case CipherSuite.TLS_DH_anon_WITH_RC4_128_MD5: - case CipherSuite.TLS_RSA_WITH_NULL_MD5: - case CipherSuite.TLS_RSA_WITH_RC4_128_MD5: - return MacAlgorithm.hmac_md5; - - case CipherSuite.TLS_DH_anon_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_DH_anon_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_DH_anon_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA: - case CipherSuite.TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA: - case CipherSuite.TLS_DH_anon_WITH_SEED_CBC_SHA: - case CipherSuite.TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_DH_DSS_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_DH_DSS_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA: - case CipherSuite.TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA: - case CipherSuite.TLS_DH_DSS_WITH_SEED_CBC_SHA: - case CipherSuite.TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_DH_RSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_DH_RSA_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA: - case CipherSuite.TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA: - case CipherSuite.TLS_DH_RSA_WITH_SEED_CBC_SHA: - case CipherSuite.TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_DHE_DSS_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_DHE_DSS_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA: - case CipherSuite.TLS_DHE_DSS_WITH_SEED_CBC_SHA: - case CipherSuite.TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_DHE_PSK_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_DHE_PSK_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_DHE_PSK_WITH_NULL_SHA: - case CipherSuite.TLS_DHE_PSK_WITH_RC4_128_SHA: - case CipherSuite.TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_DHE_RSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_DHE_RSA_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA: - case CipherSuite.TLS_DHE_RSA_WITH_SEED_CBC_SHA: - case CipherSuite.TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_ECDH_anon_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_ECDH_anon_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_ECDH_anon_WITH_NULL_SHA: - case CipherSuite.TLS_ECDH_anon_WITH_RC4_128_SHA: - case CipherSuite.TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_ECDH_ECDSA_WITH_NULL_SHA: - case CipherSuite.TLS_ECDH_ECDSA_WITH_RC4_128_SHA: - case CipherSuite.TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_ECDH_RSA_WITH_NULL_SHA: - case CipherSuite.TLS_ECDH_RSA_WITH_RC4_128_SHA: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_NULL_SHA: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_RC4_128_SHA: - case CipherSuite.TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_ECDHE_PSK_WITH_NULL_SHA: - case CipherSuite.TLS_ECDHE_PSK_WITH_RC4_128_SHA: - case CipherSuite.TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_ECDHE_RSA_WITH_NULL_SHA: - case CipherSuite.TLS_ECDHE_RSA_WITH_RC4_128_SHA: - case CipherSuite.TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_RSA_PSK_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_RSA_PSK_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_PSK_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_PSK_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_PSK_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_PSK_WITH_NULL_SHA: - case CipherSuite.TLS_PSK_WITH_RC4_128_SHA: - case CipherSuite.TLS_RSA_PSK_WITH_NULL_SHA: - case CipherSuite.TLS_RSA_PSK_WITH_RC4_128_SHA: - case CipherSuite.TLS_RSA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_RSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_RSA_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_RSA_WITH_CAMELLIA_128_CBC_SHA: - case CipherSuite.TLS_RSA_WITH_CAMELLIA_256_CBC_SHA: - case CipherSuite.TLS_RSA_WITH_NULL_SHA: - case CipherSuite.TLS_RSA_WITH_RC4_128_SHA: - case CipherSuite.TLS_RSA_WITH_SEED_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_WITH_AES_128_CBC_SHA: - case CipherSuite.TLS_SRP_SHA_WITH_AES_256_CBC_SHA: - return MacAlgorithm.hmac_sha1; - - case CipherSuite.TLS_DH_anon_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DH_anon_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_DHE_PSK_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DHE_PSK_WITH_NULL_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_PSK_WITH_NULL_SHA256: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_PSK_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_PSK_WITH_NULL_SHA256: - case CipherSuite.TLS_RSA_PSK_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_RSA_PSK_WITH_NULL_SHA256: - case CipherSuite.TLS_RSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_RSA_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_RSA_WITH_NULL_SHA256: - return MacAlgorithm.hmac_sha256; - - case CipherSuite.TLS_DHE_PSK_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_DHE_PSK_WITH_NULL_SHA384: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_PSK_WITH_NULL_SHA384: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_PSK_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_PSK_WITH_NULL_SHA384: - case CipherSuite.TLS_RSA_PSK_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_RSA_PSK_WITH_NULL_SHA384: - return MacAlgorithm.hmac_sha384; - - default: - throw new TlsFatalAlert(AlertDescription.internal_error); - } - } - - public static ProtocolVersion GetMinimumVersion(int ciphersuite) - { - switch (ciphersuite) - { - case CipherSuite.TLS_DH_anon_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DH_anon_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_DH_anon_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_DH_anon_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_DH_DSS_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_DH_RSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_DHE_DSS_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_DHE_PSK_WITH_AES_128_CCM: - case CipherSuite.TLS_DHE_PSK_WITH_AES_128_GCM_SHA256: - case CipherSuite.DRAFT_TLS_DHE_PSK_WITH_AES_128_OCB: - case CipherSuite.TLS_DHE_PSK_WITH_AES_256_CCM: - case CipherSuite.TLS_DHE_PSK_WITH_AES_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_DHE_PSK_WITH_AES_256_OCB: - case CipherSuite.TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_AES_128_CCM: - case CipherSuite.TLS_DHE_RSA_WITH_AES_128_CCM_8: - case CipherSuite.TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.DRAFT_TLS_DHE_RSA_WITH_AES_128_OCB: - case CipherSuite.TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_AES_256_CCM: - case CipherSuite.TLS_DHE_RSA_WITH_AES_256_CCM_8: - case CipherSuite.TLS_DHE_RSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_DHE_RSA_WITH_AES_256_OCB: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_CCM: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.DRAFT_TLS_ECDHE_ECDSA_WITH_AES_128_OCB: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_CCM: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_ECDHE_ECDSA_WITH_AES_256_OCB: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.DRAFT_TLS_ECDHE_PSK_WITH_AES_128_OCB: - case CipherSuite.DRAFT_TLS_ECDHE_PSK_WITH_AES_256_OCB: - case CipherSuite.DRAFT_TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.DRAFT_TLS_ECDHE_RSA_WITH_AES_128_OCB: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_ECDHE_RSA_WITH_AES_256_OCB: - case CipherSuite.TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384: - case CipherSuite.TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.TLS_PSK_DHE_WITH_AES_128_CCM_8: - case CipherSuite.TLS_PSK_DHE_WITH_AES_256_CCM_8: - case CipherSuite.TLS_PSK_WITH_AES_128_CCM: - case CipherSuite.TLS_PSK_WITH_AES_128_CCM_8: - case CipherSuite.TLS_PSK_WITH_AES_128_GCM_SHA256: - case CipherSuite.DRAFT_TLS_PSK_WITH_AES_128_OCB: - case CipherSuite.TLS_PSK_WITH_AES_256_CCM: - case CipherSuite.TLS_PSK_WITH_AES_256_CCM_8: - case CipherSuite.TLS_PSK_WITH_AES_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_PSK_WITH_AES_256_OCB: - case CipherSuite.TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_PSK_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.TLS_RSA_PSK_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_RSA_PSK_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.DRAFT_TLS_RSA_PSK_WITH_CHACHA20_POLY1305_SHA256: - case CipherSuite.TLS_RSA_WITH_AES_128_CBC_SHA256: - case CipherSuite.TLS_RSA_WITH_AES_128_CCM: - case CipherSuite.TLS_RSA_WITH_AES_128_CCM_8: - case CipherSuite.TLS_RSA_WITH_AES_128_GCM_SHA256: - case CipherSuite.TLS_RSA_WITH_AES_256_CBC_SHA256: - case CipherSuite.TLS_RSA_WITH_AES_256_CCM: - case CipherSuite.TLS_RSA_WITH_AES_256_CCM_8: - case CipherSuite.TLS_RSA_WITH_AES_256_GCM_SHA384: - case CipherSuite.TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256: - case CipherSuite.TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256: - case CipherSuite.TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256: - case CipherSuite.TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384: - case CipherSuite.TLS_RSA_WITH_NULL_SHA256: - return ProtocolVersion.TLSv12; - - default: - return ProtocolVersion.SSLv3; - } - } - - public static bool IsAeadCipherSuite(int ciphersuite) - { - return CipherType.aead == GetCipherType(ciphersuite); - } - - public static bool IsBlockCipherSuite(int ciphersuite) - { - return CipherType.block == GetCipherType(ciphersuite); - } - - public static bool IsStreamCipherSuite(int ciphersuite) - { - return CipherType.stream == GetCipherType(ciphersuite); - } - - public static bool IsValidCipherSuiteForSignatureAlgorithms(int cipherSuite, IList sigAlgs) - { - int keyExchangeAlgorithm; - try - { - keyExchangeAlgorithm = GetKeyExchangeAlgorithm(cipherSuite); - } - catch (IOException e) - { - return true; - } - - switch (keyExchangeAlgorithm) - { - case KeyExchangeAlgorithm.DH_anon: - case KeyExchangeAlgorithm.DH_anon_EXPORT: - case KeyExchangeAlgorithm.ECDH_anon: - return sigAlgs.Contains(SignatureAlgorithm.anonymous); - - case KeyExchangeAlgorithm.DHE_RSA: - case KeyExchangeAlgorithm.DHE_RSA_EXPORT: - case KeyExchangeAlgorithm.ECDHE_RSA: - case KeyExchangeAlgorithm.SRP_RSA: - return sigAlgs.Contains(SignatureAlgorithm.rsa); - - case KeyExchangeAlgorithm.DHE_DSS: - case KeyExchangeAlgorithm.DHE_DSS_EXPORT: - case KeyExchangeAlgorithm.SRP_DSS: - return sigAlgs.Contains(SignatureAlgorithm.dsa); - - case KeyExchangeAlgorithm.ECDHE_ECDSA: - return sigAlgs.Contains(SignatureAlgorithm.ecdsa); - - default: - return true; - } - } - - public static bool IsValidCipherSuiteForVersion(int cipherSuite, ProtocolVersion serverVersion) - { - return GetMinimumVersion(cipherSuite).IsEqualOrEarlierVersionOf(serverVersion.GetEquivalentTLSVersion()); - } - - public static IList GetUsableSignatureAlgorithms(IList sigHashAlgs) - { - if (sigHashAlgs == null) - return GetAllSignatureAlgorithms(); - - IList v = Platform.CreateArrayList(4); - v.Add(SignatureAlgorithm.anonymous); - foreach (SignatureAndHashAlgorithm sigHashAlg in sigHashAlgs) - { - //if (sigHashAlg.Hash >= MINIMUM_HASH_STRICT) - { - byte sigAlg = sigHashAlg.Signature; - if (!v.Contains(sigAlg)) - { - v.Add(sigAlg); - } - } - } - return v; - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/UrlAndHash.cs b/bc-sharp-crypto/src/crypto/tls/UrlAndHash.cs deleted file mode 100644 index 9ffd2cb..0000000 --- a/bc-sharp-crypto/src/crypto/tls/UrlAndHash.cs +++ /dev/null @@ -1,94 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /** - * RFC 6066 5. - */ - public class UrlAndHash - { - protected readonly string mUrl; - protected readonly byte[] mSha1Hash; - - public UrlAndHash(string url, byte[] sha1Hash) - { - if (url == null || url.Length < 1 || url.Length >= (1 << 16)) - throw new ArgumentException("must have length from 1 to (2^16 - 1)", "url"); - if (sha1Hash != null && sha1Hash.Length != 20) - throw new ArgumentException("must have length == 20, if present", "sha1Hash"); - - this.mUrl = url; - this.mSha1Hash = sha1Hash; - } - - public virtual string Url - { - get { return mUrl; } - } - - public virtual byte[] Sha1Hash - { - get { return mSha1Hash; } - } - - /** - * Encode this {@link UrlAndHash} to a {@link Stream}. - * - * @param output the {@link Stream} to encode to. - * @throws IOException - */ - public virtual void Encode(Stream output) - { - byte[] urlEncoding = Strings.ToByteArray(this.mUrl); - TlsUtilities.WriteOpaque16(urlEncoding, output); - - if (this.mSha1Hash == null) - { - TlsUtilities.WriteUint8(0, output); - } - else - { - TlsUtilities.WriteUint8(1, output); - output.Write(this.mSha1Hash, 0, this.mSha1Hash.Length); - } - } - - /** - * Parse a {@link UrlAndHash} from a {@link Stream}. - * - * @param context - * the {@link TlsContext} of the current connection. - * @param input - * the {@link Stream} to parse from. - * @return a {@link UrlAndHash} object. - * @throws IOException - */ - public static UrlAndHash Parse(TlsContext context, Stream input) - { - byte[] urlEncoding = TlsUtilities.ReadOpaque16(input); - if (urlEncoding.Length < 1) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - string url = Strings.FromByteArray(urlEncoding); - - byte[] sha1Hash = null; - byte padding = TlsUtilities.ReadUint8(input); - switch (padding) - { - case 0: - if (TlsUtilities.IsTlsV12(context)) - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - break; - case 1: - sha1Hash = TlsUtilities.ReadFully(20, input); - break; - default: - throw new TlsFatalAlert(AlertDescription.illegal_parameter); - } - - return new UrlAndHash(url, sha1Hash); - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/UseSrtpData.cs b/bc-sharp-crypto/src/crypto/tls/UseSrtpData.cs deleted file mode 100644 index fe8f8ac..0000000 --- a/bc-sharp-crypto/src/crypto/tls/UseSrtpData.cs +++ /dev/null @@ -1,56 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /** - * RFC 5764 4.1.1 - */ - public class UseSrtpData - { - protected readonly int[] mProtectionProfiles; - protected readonly byte[] mMki; - - /** - * @param protectionProfiles see {@link SrtpProtectionProfile} for valid constants. - * @param mki valid lengths from 0 to 255. - */ - public UseSrtpData(int[] protectionProfiles, byte[] mki) - { - if (protectionProfiles == null || protectionProfiles.Length < 1 - || protectionProfiles.Length >= (1 << 15)) - { - throw new ArgumentException("must have length from 1 to (2^15 - 1)", "protectionProfiles"); - } - - if (mki == null) - { - mki = TlsUtilities.EmptyBytes; - } - else if (mki.Length > 255) - { - throw new ArgumentException("cannot be longer than 255 bytes", "mki"); - } - - this.mProtectionProfiles = protectionProfiles; - this.mMki = mki; - } - - /** - * @return see {@link SrtpProtectionProfile} for valid constants. - */ - public virtual int[] ProtectionProfiles - { - get { return mProtectionProfiles; } - } - - /** - * @return valid lengths from 0 to 255. - */ - public virtual byte[] Mki - { - get { return mMki; } - } - } -} diff --git a/bc-sharp-crypto/src/crypto/tls/UserMappingType.cs b/bc-sharp-crypto/src/crypto/tls/UserMappingType.cs deleted file mode 100644 index 6cff517..0000000 --- a/bc-sharp-crypto/src/crypto/tls/UserMappingType.cs +++ /dev/null @@ -1,13 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Tls -{ - /// RFC 4681 - public abstract class UserMappingType - { - /* - * RFC 4681 - */ - public const byte upn_domain_hint = 64; - } -} diff --git a/bc-sharp-crypto/src/crypto/util/Pack.cs b/bc-sharp-crypto/src/crypto/util/Pack.cs deleted file mode 100644 index 1b94fee..0000000 --- a/bc-sharp-crypto/src/crypto/util/Pack.cs +++ /dev/null @@ -1,345 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Crypto.Utilities -{ - internal sealed class Pack - { - private Pack() - { - } - - internal static void UInt16_To_BE(ushort n, byte[] bs) - { - bs[0] = (byte)(n >> 8); - bs[1] = (byte)(n); - } - - internal static void UInt16_To_BE(ushort n, byte[] bs, int off) - { - bs[off] = (byte)(n >> 8); - bs[off + 1] = (byte)(n); - } - - internal static ushort BE_To_UInt16(byte[] bs) - { - uint n = (uint)bs[0] << 8 - | (uint)bs[1]; - return (ushort)n; - } - - internal static ushort BE_To_UInt16(byte[] bs, int off) - { - uint n = (uint)bs[off] << 8 - | (uint)bs[off + 1]; - return (ushort)n; - } - - internal static byte[] UInt32_To_BE(uint n) - { - byte[] bs = new byte[4]; - UInt32_To_BE(n, bs, 0); - return bs; - } - - internal static void UInt32_To_BE(uint n, byte[] bs) - { - bs[0] = (byte)(n >> 24); - bs[1] = (byte)(n >> 16); - bs[2] = (byte)(n >> 8); - bs[3] = (byte)(n); - } - - internal static void UInt32_To_BE(uint n, byte[] bs, int off) - { - bs[off] = (byte)(n >> 24); - bs[off + 1] = (byte)(n >> 16); - bs[off + 2] = (byte)(n >> 8); - bs[off + 3] = (byte)(n); - } - - internal static byte[] UInt32_To_BE(uint[] ns) - { - byte[] bs = new byte[4 * ns.Length]; - UInt32_To_BE(ns, bs, 0); - return bs; - } - - internal static void UInt32_To_BE(uint[] ns, byte[] bs, int off) - { - for (int i = 0; i < ns.Length; ++i) - { - UInt32_To_BE(ns[i], bs, off); - off += 4; - } - } - - internal static uint BE_To_UInt32(byte[] bs) - { - return (uint)bs[0] << 24 - | (uint)bs[1] << 16 - | (uint)bs[2] << 8 - | (uint)bs[3]; - } - - internal static uint BE_To_UInt32(byte[] bs, int off) - { - return (uint)bs[off] << 24 - | (uint)bs[off + 1] << 16 - | (uint)bs[off + 2] << 8 - | (uint)bs[off + 3]; - } - - internal static void BE_To_UInt32(byte[] bs, int off, uint[] ns) - { - for (int i = 0; i < ns.Length; ++i) - { - ns[i] = BE_To_UInt32(bs, off); - off += 4; - } - } - - internal static byte[] UInt64_To_BE(ulong n) - { - byte[] bs = new byte[8]; - UInt64_To_BE(n, bs, 0); - return bs; - } - - internal static void UInt64_To_BE(ulong n, byte[] bs) - { - UInt32_To_BE((uint)(n >> 32), bs); - UInt32_To_BE((uint)(n), bs, 4); - } - - internal static void UInt64_To_BE(ulong n, byte[] bs, int off) - { - UInt32_To_BE((uint)(n >> 32), bs, off); - UInt32_To_BE((uint)(n), bs, off + 4); - } - - internal static byte[] UInt64_To_BE(ulong[] ns) - { - byte[] bs = new byte[8 * ns.Length]; - UInt64_To_BE(ns, bs, 0); - return bs; - } - - internal static void UInt64_To_BE(ulong[] ns, byte[] bs, int off) - { - for (int i = 0; i < ns.Length; ++i) - { - UInt64_To_BE(ns[i], bs, off); - off += 8; - } - } - - internal static ulong BE_To_UInt64(byte[] bs) - { - uint hi = BE_To_UInt32(bs); - uint lo = BE_To_UInt32(bs, 4); - return ((ulong)hi << 32) | (ulong)lo; - } - - internal static ulong BE_To_UInt64(byte[] bs, int off) - { - uint hi = BE_To_UInt32(bs, off); - uint lo = BE_To_UInt32(bs, off + 4); - return ((ulong)hi << 32) | (ulong)lo; - } - - internal static void BE_To_UInt64(byte[] bs, int off, ulong[] ns) - { - for (int i = 0; i < ns.Length; ++i) - { - ns[i] = BE_To_UInt64(bs, off); - off += 8; - } - } - - internal static void UInt16_To_LE(ushort n, byte[] bs) - { - bs[0] = (byte)(n); - bs[1] = (byte)(n >> 8); - } - - internal static void UInt16_To_LE(ushort n, byte[] bs, int off) - { - bs[off] = (byte)(n); - bs[off + 1] = (byte)(n >> 8); - } - - internal static ushort LE_To_UInt16(byte[] bs) - { - uint n = (uint)bs[0] - | (uint)bs[1] << 8; - return (ushort)n; - } - - internal static ushort LE_To_UInt16(byte[] bs, int off) - { - uint n = (uint)bs[off] - | (uint)bs[off + 1] << 8; - return (ushort)n; - } - - internal static byte[] UInt32_To_LE(uint n) - { - byte[] bs = new byte[4]; - UInt32_To_LE(n, bs, 0); - return bs; - } - - internal static void UInt32_To_LE(uint n, byte[] bs) - { - bs[0] = (byte)(n); - bs[1] = (byte)(n >> 8); - bs[2] = (byte)(n >> 16); - bs[3] = (byte)(n >> 24); - } - - internal static void UInt32_To_LE(uint n, byte[] bs, int off) - { - bs[off] = (byte)(n); - bs[off + 1] = (byte)(n >> 8); - bs[off + 2] = (byte)(n >> 16); - bs[off + 3] = (byte)(n >> 24); - } - - internal static byte[] UInt32_To_LE(uint[] ns) - { - byte[] bs = new byte[4 * ns.Length]; - UInt32_To_LE(ns, bs, 0); - return bs; - } - - internal static void UInt32_To_LE(uint[] ns, byte[] bs, int off) - { - for (int i = 0; i < ns.Length; ++i) - { - UInt32_To_LE(ns[i], bs, off); - off += 4; - } - } - - internal static uint LE_To_UInt32(byte[] bs) - { - return (uint)bs[0] - | (uint)bs[1] << 8 - | (uint)bs[2] << 16 - | (uint)bs[3] << 24; - } - - internal static uint LE_To_UInt32(byte[] bs, int off) - { - return (uint)bs[off] - | (uint)bs[off + 1] << 8 - | (uint)bs[off + 2] << 16 - | (uint)bs[off + 3] << 24; - } - - internal static void LE_To_UInt32(byte[] bs, int off, uint[] ns) - { - for (int i = 0; i < ns.Length; ++i) - { - ns[i] = LE_To_UInt32(bs, off); - off += 4; - } - } - - internal static void LE_To_UInt32(byte[] bs, int bOff, uint[] ns, int nOff, int count) - { - for (int i = 0; i < count; ++i) - { - ns[nOff + i] = LE_To_UInt32(bs, bOff); - bOff += 4; - } - } - - internal static uint[] LE_To_UInt32(byte[] bs, int off, int count) - { - uint[] ns = new uint[count]; - for (int i = 0; i < ns.Length; ++i) - { - ns[i] = LE_To_UInt32(bs, off); - off += 4; - } - return ns; - } - - internal static byte[] UInt64_To_LE(ulong n) - { - byte[] bs = new byte[8]; - UInt64_To_LE(n, bs, 0); - return bs; - } - - internal static void UInt64_To_LE(ulong n, byte[] bs) - { - UInt32_To_LE((uint)(n), bs); - UInt32_To_LE((uint)(n >> 32), bs, 4); - } - - internal static void UInt64_To_LE(ulong n, byte[] bs, int off) - { - UInt32_To_LE((uint)(n), bs, off); - UInt32_To_LE((uint)(n >> 32), bs, off + 4); - } - - internal static byte[] UInt64_To_LE(ulong[] ns) - { - byte[] bs = new byte[8 * ns.Length]; - UInt64_To_LE(ns, bs, 0); - return bs; - } - - internal static void UInt64_To_LE(ulong[] ns, byte[] bs, int off) - { - for (int i = 0; i < ns.Length; ++i) - { - UInt64_To_LE(ns[i], bs, off); - off += 8; - } - } - - internal static void UInt64_To_LE(ulong[] ns, int nsOff, int nsLen, byte[] bs, int bsOff) - { - for (int i = 0; i < nsLen; ++i) - { - UInt64_To_LE(ns[nsOff + i], bs, bsOff); - bsOff += 8; - } - } - - internal static ulong LE_To_UInt64(byte[] bs) - { - uint lo = LE_To_UInt32(bs); - uint hi = LE_To_UInt32(bs, 4); - return ((ulong)hi << 32) | (ulong)lo; - } - - internal static ulong LE_To_UInt64(byte[] bs, int off) - { - uint lo = LE_To_UInt32(bs, off); - uint hi = LE_To_UInt32(bs, off + 4); - return ((ulong)hi << 32) | (ulong)lo; - } - - internal static void LE_To_UInt64(byte[] bs, int off, ulong[] ns) - { - for (int i = 0; i < ns.Length; ++i) - { - ns[i] = LE_To_UInt64(bs, off); - off += 8; - } - } - - internal static void LE_To_UInt64(byte[] bs, int bsOff, ulong[] ns, int nsOff, int nsLen) - { - for (int i = 0; i < nsLen; ++i) - { - ns[nsOff + i] = LE_To_UInt64(bs, bsOff); - bsOff += 8; - } - } - } -} diff --git a/bc-sharp-crypto/src/math/BigInteger.cs b/bc-sharp-crypto/src/math/BigInteger.cs deleted file mode 100644 index b35701f..0000000 --- a/bc-sharp-crypto/src/math/BigInteger.cs +++ /dev/null @@ -1,3592 +0,0 @@ -using System; -using System.Collections; -using System.Diagnostics; -using System.Globalization; -using System.Text; - -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class BigInteger - { - // The first few odd primes - /* - 3 5 7 11 13 17 19 23 29 - 31 37 41 43 47 53 59 61 67 71 - 73 79 83 89 97 101 103 107 109 113 - 127 131 137 139 149 151 157 163 167 173 - 179 181 191 193 197 199 211 223 227 229 - 233 239 241 251 257 263 269 271 277 281 - 283 293 307 311 313 317 331 337 347 349 - 353 359 367 373 379 383 389 397 401 409 - 419 421 431 433 439 443 449 457 461 463 - 467 479 487 491 499 503 509 521 523 541 - 547 557 563 569 571 577 587 593 599 601 - 607 613 617 619 631 641 643 647 653 659 - 661 673 677 683 691 701 709 719 727 733 - 739 743 751 757 761 769 773 787 797 809 - 811 821 823 827 829 839 853 857 859 863 - 877 881 883 887 907 911 919 929 937 941 - 947 953 967 971 977 983 991 997 1009 - 1013 1019 1021 1031 1033 1039 1049 1051 - 1061 1063 1069 1087 1091 1093 1097 1103 - 1109 1117 1123 1129 1151 1153 1163 1171 - 1181 1187 1193 1201 1213 1217 1223 1229 - 1231 1237 1249 1259 1277 1279 1283 1289 - */ - - // Each list has a product < 2^31 - internal static readonly int[][] primeLists = new int[][] - { - new int[]{ 3, 5, 7, 11, 13, 17, 19, 23 }, - new int[]{ 29, 31, 37, 41, 43 }, - new int[]{ 47, 53, 59, 61, 67 }, - new int[]{ 71, 73, 79, 83 }, - new int[]{ 89, 97, 101, 103 }, - - new int[]{ 107, 109, 113, 127 }, - new int[]{ 131, 137, 139, 149 }, - new int[]{ 151, 157, 163, 167 }, - new int[]{ 173, 179, 181, 191 }, - new int[]{ 193, 197, 199, 211 }, - - new int[]{ 223, 227, 229 }, - new int[]{ 233, 239, 241 }, - new int[]{ 251, 257, 263 }, - new int[]{ 269, 271, 277 }, - new int[]{ 281, 283, 293 }, - - new int[]{ 307, 311, 313 }, - new int[]{ 317, 331, 337 }, - new int[]{ 347, 349, 353 }, - new int[]{ 359, 367, 373 }, - new int[]{ 379, 383, 389 }, - - new int[]{ 397, 401, 409 }, - new int[]{ 419, 421, 431 }, - new int[]{ 433, 439, 443 }, - new int[]{ 449, 457, 461 }, - new int[]{ 463, 467, 479 }, - - new int[]{ 487, 491, 499 }, - new int[]{ 503, 509, 521 }, - new int[]{ 523, 541, 547 }, - new int[]{ 557, 563, 569 }, - new int[]{ 571, 577, 587 }, - - new int[]{ 593, 599, 601 }, - new int[]{ 607, 613, 617 }, - new int[]{ 619, 631, 641 }, - new int[]{ 643, 647, 653 }, - new int[]{ 659, 661, 673 }, - - new int[]{ 677, 683, 691 }, - new int[]{ 701, 709, 719 }, - new int[]{ 727, 733, 739 }, - new int[]{ 743, 751, 757 }, - new int[]{ 761, 769, 773 }, - - new int[]{ 787, 797, 809 }, - new int[]{ 811, 821, 823 }, - new int[]{ 827, 829, 839 }, - new int[]{ 853, 857, 859 }, - new int[]{ 863, 877, 881 }, - - new int[]{ 883, 887, 907 }, - new int[]{ 911, 919, 929 }, - new int[]{ 937, 941, 947 }, - new int[]{ 953, 967, 971 }, - new int[]{ 977, 983, 991 }, - - new int[]{ 997, 1009, 1013 }, - new int[]{ 1019, 1021, 1031 }, - new int[]{ 1033, 1039, 1049 }, - new int[]{ 1051, 1061, 1063 }, - new int[]{ 1069, 1087, 1091 }, - - new int[]{ 1093, 1097, 1103 }, - new int[]{ 1109, 1117, 1123 }, - new int[]{ 1129, 1151, 1153 }, - new int[]{ 1163, 1171, 1181 }, - new int[]{ 1187, 1193, 1201 }, - - new int[]{ 1213, 1217, 1223 }, - new int[]{ 1229, 1231, 1237 }, - new int[]{ 1249, 1259, 1277 }, - new int[]{ 1279, 1283, 1289 }, - }; - - internal static readonly int[] primeProducts; - - private const long IMASK = 0xFFFFFFFFL; - private const ulong UIMASK = 0xFFFFFFFFUL; - - private static readonly int[] ZeroMagnitude = new int[0]; - private static readonly byte[] ZeroEncoding = new byte[0]; - - private static readonly BigInteger[] SMALL_CONSTANTS = new BigInteger[17]; - public static readonly BigInteger Zero; - public static readonly BigInteger One; - public static readonly BigInteger Two; - public static readonly BigInteger Three; - public static readonly BigInteger Ten; - - //private readonly static byte[] BitCountTable = - //{ - // 0, 1, 1, 2, 1, 2, 2, 3, 1, 2, 2, 3, 2, 3, 3, 4, - // 1, 2, 2, 3, 2, 3, 3, 4, 2, 3, 3, 4, 3, 4, 4, 5, - // 1, 2, 2, 3, 2, 3, 3, 4, 2, 3, 3, 4, 3, 4, 4, 5, - // 2, 3, 3, 4, 3, 4, 4, 5, 3, 4, 4, 5, 4, 5, 5, 6, - // 1, 2, 2, 3, 2, 3, 3, 4, 2, 3, 3, 4, 3, 4, 4, 5, - // 2, 3, 3, 4, 3, 4, 4, 5, 3, 4, 4, 5, 4, 5, 5, 6, - // 2, 3, 3, 4, 3, 4, 4, 5, 3, 4, 4, 5, 4, 5, 5, 6, - // 3, 4, 4, 5, 4, 5, 5, 6, 4, 5, 5, 6, 5, 6, 6, 7, - // 1, 2, 2, 3, 2, 3, 3, 4, 2, 3, 3, 4, 3, 4, 4, 5, - // 2, 3, 3, 4, 3, 4, 4, 5, 3, 4, 4, 5, 4, 5, 5, 6, - // 2, 3, 3, 4, 3, 4, 4, 5, 3, 4, 4, 5, 4, 5, 5, 6, - // 3, 4, 4, 5, 4, 5, 5, 6, 4, 5, 5, 6, 5, 6, 6, 7, - // 2, 3, 3, 4, 3, 4, 4, 5, 3, 4, 4, 5, 4, 5, 5, 6, - // 3, 4, 4, 5, 4, 5, 5, 6, 4, 5, 5, 6, 5, 6, 6, 7, - // 3, 4, 4, 5, 4, 5, 5, 6, 4, 5, 5, 6, 5, 6, 6, 7, - // 4, 5, 5, 6, 5, 6, 6, 7, 5, 6, 6, 7, 6, 7, 7, 8 - //}; - - private readonly static byte[] BitLengthTable = - { - 0, 1, 2, 2, 3, 3, 3, 3, 4, 4, 4, 4, 4, 4, 4, 4, - 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, - 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, - 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, - 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, - 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, - 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, - 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, - 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, - 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, - 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, - 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, - 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, - 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, - 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, - 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8 - }; - - // TODO Parse radix-2 64 bits at a time and radix-8 63 bits at a time - private const int chunk2 = 1, chunk8 = 1, chunk10 = 19, chunk16 = 16; - private static readonly BigInteger radix2, radix2E, radix8, radix8E, radix10, radix10E, radix16, radix16E; - - private static readonly SecureRandom RandomSource = new SecureRandom(); - - /* - * These are the threshold bit-lengths (of an exponent) where we increase the window size. - * They are calculated according to the expected savings in multiplications. - * Some squares will also be saved on average, but we offset these against the extra storage costs. - */ - private static readonly int[] ExpWindowThresholds = { 7, 25, 81, 241, 673, 1793, 4609, Int32.MaxValue }; - - private const int BitsPerByte = 8; - private const int BitsPerInt = 32; - private const int BytesPerInt = 4; - - static BigInteger() - { - Zero = new BigInteger(0, ZeroMagnitude, false); - Zero.nBits = 0; Zero.nBitLength = 0; - - SMALL_CONSTANTS[0] = Zero; - for (uint i = 1; i < SMALL_CONSTANTS.Length; ++i) - { - SMALL_CONSTANTS[i] = CreateUValueOf(i); - } - - One = SMALL_CONSTANTS[1]; - Two = SMALL_CONSTANTS[2]; - Three = SMALL_CONSTANTS[3]; - Ten = SMALL_CONSTANTS[10]; - - radix2 = ValueOf(2); - radix2E = radix2.Pow(chunk2); - - radix8 = ValueOf(8); - radix8E = radix8.Pow(chunk8); - - radix10 = ValueOf(10); - radix10E = radix10.Pow(chunk10); - - radix16 = ValueOf(16); - radix16E = radix16.Pow(chunk16); - - primeProducts = new int[primeLists.Length]; - - for (int i = 0; i < primeLists.Length; ++i) - { - int[] primeList = primeLists[i]; - int product = primeList[0]; - for (int j = 1; j < primeList.Length; ++j) - { - product *= primeList[j]; - } - primeProducts[i] = product; - } - } - - private int[] magnitude; // array of ints with [0] being the most significant - private int sign; // -1 means -ve; +1 means +ve; 0 means 0; - private int nBits = -1; // cache BitCount() value - private int nBitLength = -1; // cache BitLength() value - private int mQuote = 0; // -m^(-1) mod b, b = 2^32 (see Montgomery mult.), 0 when uninitialised - - private static int GetByteLength( - int nBits) - { - return (nBits + BitsPerByte - 1) / BitsPerByte; - } - - internal static BigInteger Arbitrary(int sizeInBits) - { - return new BigInteger(sizeInBits, RandomSource); - } - - private BigInteger( - int signum, - int[] mag, - bool checkMag) - { - if (checkMag) - { - int i = 0; - while (i < mag.Length && mag[i] == 0) - { - ++i; - } - - if (i == mag.Length) - { - this.sign = 0; - this.magnitude = ZeroMagnitude; - } - else - { - this.sign = signum; - - if (i == 0) - { - this.magnitude = mag; - } - else - { - // strip leading 0 words - this.magnitude = new int[mag.Length - i]; - Array.Copy(mag, i, this.magnitude, 0, this.magnitude.Length); - } - } - } - else - { - this.sign = signum; - this.magnitude = mag; - } - } - - public BigInteger( - string value) - : this(value, 10) - { - } - - public BigInteger( - string str, - int radix) - { - if (str.Length == 0) - throw new FormatException("Zero length BigInteger"); - - NumberStyles style; - int chunk; - BigInteger r; - BigInteger rE; - - switch (radix) - { - case 2: - // Is there anyway to restrict to binary digits? - style = NumberStyles.Integer; - chunk = chunk2; - r = radix2; - rE = radix2E; - break; - case 8: - // Is there anyway to restrict to octal digits? - style = NumberStyles.Integer; - chunk = chunk8; - r = radix8; - rE = radix8E; - break; - case 10: - // This style seems to handle spaces and minus sign already (our processing redundant?) - style = NumberStyles.Integer; - chunk = chunk10; - r = radix10; - rE = radix10E; - break; - case 16: - // TODO Should this be HexNumber? - style = NumberStyles.AllowHexSpecifier; - chunk = chunk16; - r = radix16; - rE = radix16E; - break; - default: - throw new FormatException("Only bases 2, 8, 10, or 16 allowed"); - } - - - int index = 0; - sign = 1; - - if (str[0] == '-') - { - if (str.Length == 1) - throw new FormatException("Zero length BigInteger"); - - sign = -1; - index = 1; - } - - // strip leading zeros from the string str - while (index < str.Length && Int32.Parse(str[index].ToString(), style) == 0) - { - index++; - } - - if (index >= str.Length) - { - // zero value - we're done - sign = 0; - magnitude = ZeroMagnitude; - return; - } - - ////// - // could we work out the max number of ints required to store - // str.Length digits in the given base, then allocate that - // storage in one hit?, then Generate the magnitude in one hit too? - ////// - - BigInteger b = Zero; - - - int next = index + chunk; - - if (next <= str.Length) - { - do - { - string s = str.Substring(index, chunk); - ulong i = ulong.Parse(s, style); - BigInteger bi = CreateUValueOf(i); - - switch (radix) - { - case 2: - // TODO Need this because we are parsing in radix 10 above - if (i >= 2) - throw new FormatException("Bad character in radix 2 string: " + s); - - // TODO Parse 64 bits at a time - b = b.ShiftLeft(1); - break; - case 8: - // TODO Need this because we are parsing in radix 10 above - if (i >= 8) - throw new FormatException("Bad character in radix 8 string: " + s); - - // TODO Parse 63 bits at a time - b = b.ShiftLeft(3); - break; - case 16: - b = b.ShiftLeft(64); - break; - default: - b = b.Multiply(rE); - break; - } - - b = b.Add(bi); - - index = next; - next += chunk; - } - while (next <= str.Length); - } - - if (index < str.Length) - { - string s = str.Substring(index); - ulong i = ulong.Parse(s, style); - BigInteger bi = CreateUValueOf(i); - - if (b.sign > 0) - { - if (radix == 2) - { - // NB: Can't reach here since we are parsing one char at a time - Debug.Assert(false); - - // TODO Parse all bits at once -// b = b.ShiftLeft(s.Length); - } - else if (radix == 8) - { - // NB: Can't reach here since we are parsing one char at a time - Debug.Assert(false); - - // TODO Parse all bits at once -// b = b.ShiftLeft(s.Length * 3); - } - else if (radix == 16) - { - b = b.ShiftLeft(s.Length << 2); - } - else - { - b = b.Multiply(r.Pow(s.Length)); - } - - b = b.Add(bi); - } - else - { - b = bi; - } - } - - // Note: This is the previous (slower) algorithm -// while (index < value.Length) -// { -// char c = value[index]; -// string s = c.ToString(); -// int i = Int32.Parse(s, style); -// -// b = b.Multiply(r).Add(ValueOf(i)); -// index++; -// } - - magnitude = b.magnitude; - } - - public BigInteger( - byte[] bytes) - : this(bytes, 0, bytes.Length) - { - } - - public BigInteger( - byte[] bytes, - int offset, - int length) - { - if (length == 0) - throw new FormatException("Zero length BigInteger"); - - // TODO Move this processing into MakeMagnitude (provide sign argument) - if ((sbyte)bytes[offset] < 0) - { - this.sign = -1; - - int end = offset + length; - - int iBval; - // strip leading sign bytes - for (iBval = offset; iBval < end && ((sbyte)bytes[iBval] == -1); iBval++) - { - } - - if (iBval >= end) - { - this.magnitude = One.magnitude; - } - else - { - int numBytes = end - iBval; - byte[] inverse = new byte[numBytes]; - - int index = 0; - while (index < numBytes) - { - inverse[index++] = (byte)~bytes[iBval++]; - } - - Debug.Assert(iBval == end); - - while (inverse[--index] == byte.MaxValue) - { - inverse[index] = byte.MinValue; - } - - inverse[index]++; - - this.magnitude = MakeMagnitude(inverse, 0, inverse.Length); - } - } - else - { - // strip leading zero bytes and return magnitude bytes - this.magnitude = MakeMagnitude(bytes, offset, length); - this.sign = this.magnitude.Length > 0 ? 1 : 0; - } - } - - private static int[] MakeMagnitude( - byte[] bytes, - int offset, - int length) - { - int end = offset + length; - - // strip leading zeros - int firstSignificant; - for (firstSignificant = offset; firstSignificant < end - && bytes[firstSignificant] == 0; firstSignificant++) - { - } - - if (firstSignificant >= end) - { - return ZeroMagnitude; - } - - int nInts = (end - firstSignificant + 3) / BytesPerInt; - int bCount = (end - firstSignificant) % BytesPerInt; - if (bCount == 0) - { - bCount = BytesPerInt; - } - - if (nInts < 1) - { - return ZeroMagnitude; - } - - int[] mag = new int[nInts]; - - int v = 0; - int magnitudeIndex = 0; - for (int i = firstSignificant; i < end; ++i) - { - v <<= 8; - v |= bytes[i] & 0xff; - bCount--; - if (bCount <= 0) - { - mag[magnitudeIndex] = v; - magnitudeIndex++; - bCount = BytesPerInt; - v = 0; - } - } - - if (magnitudeIndex < mag.Length) - { - mag[magnitudeIndex] = v; - } - - return mag; - } - - public BigInteger( - int sign, - byte[] bytes) - : this(sign, bytes, 0, bytes.Length) - { - } - - public BigInteger( - int sign, - byte[] bytes, - int offset, - int length) - { - if (sign < -1 || sign > 1) - throw new FormatException("Invalid sign value"); - - if (sign == 0) - { - this.sign = 0; - this.magnitude = ZeroMagnitude; - } - else - { - // copy bytes - this.magnitude = MakeMagnitude(bytes, offset, length); - this.sign = this.magnitude.Length < 1 ? 0 : sign; - } - } - - public BigInteger( - int sizeInBits, - Random random) - { - if (sizeInBits < 0) - throw new ArgumentException("sizeInBits must be non-negative"); - - this.nBits = -1; - this.nBitLength = -1; - - if (sizeInBits == 0) - { - this.sign = 0; - this.magnitude = ZeroMagnitude; - return; - } - - int nBytes = GetByteLength(sizeInBits); - byte[] b = new byte[nBytes]; - random.NextBytes(b); - - // strip off any excess bits in the MSB - int xBits = BitsPerByte * nBytes - sizeInBits; - b[0] &= (byte)(255U >> xBits); - - this.magnitude = MakeMagnitude(b, 0, b.Length); - this.sign = this.magnitude.Length < 1 ? 0 : 1; - } - - public BigInteger( - int bitLength, - int certainty, - Random random) - { - if (bitLength < 2) - throw new ArithmeticException("bitLength < 2"); - - this.sign = 1; - this.nBitLength = bitLength; - - if (bitLength == 2) - { - this.magnitude = random.Next(2) == 0 - ? Two.magnitude - : Three.magnitude; - return; - } - - int nBytes = GetByteLength(bitLength); - byte[] b = new byte[nBytes]; - - int xBits = BitsPerByte * nBytes - bitLength; - byte mask = (byte)(255U >> xBits); - byte lead = (byte)(1 << (7 - xBits)); - - for (;;) - { - random.NextBytes(b); - - // strip off any excess bits in the MSB - b[0] &= mask; - - // ensure the leading bit is 1 (to meet the strength requirement) - b[0] |= lead; - - // ensure the trailing bit is 1 (i.e. must be odd) - b[nBytes - 1] |= 1; - - this.magnitude = MakeMagnitude(b, 0, b.Length); - this.nBits = -1; - this.mQuote = 0; - - if (certainty < 1) - break; - - if (CheckProbablePrime(certainty, random, true)) - break; - - for (int j = 1; j < (magnitude.Length - 1); ++j) - { - this.magnitude[j] ^= random.Next(); - - if (CheckProbablePrime(certainty, random, true)) - return; - } - } - } - - public BigInteger Abs() - { - return sign >= 0 ? this : Negate(); - } - - /** - * return a = a + b - b preserved. - */ - private static int[] AddMagnitudes( - int[] a, - int[] b) - { - int tI = a.Length - 1; - int vI = b.Length - 1; - long m = 0; - - while (vI >= 0) - { - m += ((long)(uint)a[tI] + (long)(uint)b[vI--]); - a[tI--] = (int)m; - m = (long)((ulong)m >> 32); - } - - if (m != 0) - { - while (tI >= 0 && ++a[tI--] == 0) - { - } - } - - return a; - } - - public BigInteger Add( - BigInteger value) - { - if (this.sign == 0) - return value; - - if (this.sign != value.sign) - { - if (value.sign == 0) - return this; - - if (value.sign < 0) - return Subtract(value.Negate()); - - return value.Subtract(Negate()); - } - - return AddToMagnitude(value.magnitude); - } - - private BigInteger AddToMagnitude( - int[] magToAdd) - { - int[] big, small; - if (this.magnitude.Length < magToAdd.Length) - { - big = magToAdd; - small = this.magnitude; - } - else - { - big = this.magnitude; - small = magToAdd; - } - - // Conservatively avoid over-allocation when no overflow possible - uint limit = uint.MaxValue; - if (big.Length == small.Length) - limit -= (uint) small[0]; - - bool possibleOverflow = (uint) big[0] >= limit; - - int[] bigCopy; - if (possibleOverflow) - { - bigCopy = new int[big.Length + 1]; - big.CopyTo(bigCopy, 1); - } - else - { - bigCopy = (int[]) big.Clone(); - } - - bigCopy = AddMagnitudes(bigCopy, small); - - return new BigInteger(this.sign, bigCopy, possibleOverflow); - } - - public BigInteger And( - BigInteger value) - { - if (this.sign == 0 || value.sign == 0) - { - return Zero; - } - - int[] aMag = this.sign > 0 - ? this.magnitude - : Add(One).magnitude; - - int[] bMag = value.sign > 0 - ? value.magnitude - : value.Add(One).magnitude; - - bool resultNeg = sign < 0 && value.sign < 0; - int resultLength = System.Math.Max(aMag.Length, bMag.Length); - int[] resultMag = new int[resultLength]; - - int aStart = resultMag.Length - aMag.Length; - int bStart = resultMag.Length - bMag.Length; - - for (int i = 0; i < resultMag.Length; ++i) - { - int aWord = i >= aStart ? aMag[i - aStart] : 0; - int bWord = i >= bStart ? bMag[i - bStart] : 0; - - if (this.sign < 0) - { - aWord = ~aWord; - } - - if (value.sign < 0) - { - bWord = ~bWord; - } - - resultMag[i] = aWord & bWord; - - if (resultNeg) - { - resultMag[i] = ~resultMag[i]; - } - } - - BigInteger result = new BigInteger(1, resultMag, true); - - // TODO Optimise this case - if (resultNeg) - { - result = result.Not(); - } - - return result; - } - - public BigInteger AndNot( - BigInteger val) - { - return And(val.Not()); - } - - public int BitCount - { - get - { - if (nBits == -1) - { - if (sign < 0) - { - // TODO Optimise this case - nBits = Not().BitCount; - } - else - { - int sum = 0; - for (int i = 0; i < magnitude.Length; ++i) - { - sum += BitCnt(magnitude[i]); - } - nBits = sum; - } - } - - return nBits; - } - } - - public static int BitCnt(int i) - { - uint u = (uint)i; - u = u - ((u >> 1) & 0x55555555); - u = (u & 0x33333333) + ((u >> 2) & 0x33333333); - u = (u + (u >> 4)) & 0x0f0f0f0f; - u += (u >> 8); - u += (u >> 16); - u &= 0x3f; - return (int)u; - } - - private static int CalcBitLength(int sign, int indx, int[] mag) - { - for (;;) - { - if (indx >= mag.Length) - return 0; - - if (mag[indx] != 0) - break; - - ++indx; - } - - // bit length for everything after the first int - int bitLength = 32 * ((mag.Length - indx) - 1); - - // and determine bitlength of first int - int firstMag = mag[indx]; - bitLength += BitLen(firstMag); - - // Check for negative powers of two - if (sign < 0 && ((firstMag & -firstMag) == firstMag)) - { - do - { - if (++indx >= mag.Length) - { - --bitLength; - break; - } - } - while (mag[indx] == 0); - } - - return bitLength; - } - - public int BitLength - { - get - { - if (nBitLength == -1) - { - nBitLength = sign == 0 - ? 0 - : CalcBitLength(sign, 0, magnitude); - } - - return nBitLength; - } - } - - // - // BitLen(value) is the number of bits in value. - // - internal static int BitLen(int w) - { - uint v = (uint)w; - uint t = v >> 24; - if (t != 0) - return 24 + BitLengthTable[t]; - t = v >> 16; - if (t != 0) - return 16 + BitLengthTable[t]; - t = v >> 8; - if (t != 0) - return 8 + BitLengthTable[t]; - return BitLengthTable[v]; - } - - private bool QuickPow2Check() - { - return sign > 0 && nBits == 1; - } - - public int CompareTo( - object obj) - { - return CompareTo((BigInteger)obj); - } - - /** - * unsigned comparison on two arrays - note the arrays may - * start with leading zeros. - */ - private static int CompareTo( - int xIndx, - int[] x, - int yIndx, - int[] y) - { - while (xIndx != x.Length && x[xIndx] == 0) - { - xIndx++; - } - - while (yIndx != y.Length && y[yIndx] == 0) - { - yIndx++; - } - - return CompareNoLeadingZeroes(xIndx, x, yIndx, y); - } - - private static int CompareNoLeadingZeroes( - int xIndx, - int[] x, - int yIndx, - int[] y) - { - int diff = (x.Length - y.Length) - (xIndx - yIndx); - - if (diff != 0) - { - return diff < 0 ? -1 : 1; - } - - // lengths of magnitudes the same, test the magnitude values - - while (xIndx < x.Length) - { - uint v1 = (uint)x[xIndx++]; - uint v2 = (uint)y[yIndx++]; - - if (v1 != v2) - return v1 < v2 ? -1 : 1; - } - - return 0; - } - - public int CompareTo( - BigInteger value) - { - return sign < value.sign ? -1 - : sign > value.sign ? 1 - : sign == 0 ? 0 - : sign * CompareNoLeadingZeroes(0, magnitude, 0, value.magnitude); - } - - /** - * return z = x / y - done in place (z value preserved, x contains the - * remainder) - */ - private int[] Divide( - int[] x, - int[] y) - { - int xStart = 0; - while (xStart < x.Length && x[xStart] == 0) - { - ++xStart; - } - - int yStart = 0; - while (yStart < y.Length && y[yStart] == 0) - { - ++yStart; - } - - Debug.Assert(yStart < y.Length); - - int xyCmp = CompareNoLeadingZeroes(xStart, x, yStart, y); - int[] count; - - if (xyCmp > 0) - { - int yBitLength = CalcBitLength(1, yStart, y); - int xBitLength = CalcBitLength(1, xStart, x); - int shift = xBitLength - yBitLength; - - int[] iCount; - int iCountStart = 0; - - int[] c; - int cStart = 0; - int cBitLength = yBitLength; - if (shift > 0) - { -// iCount = ShiftLeft(One.magnitude, shift); - iCount = new int[(shift >> 5) + 1]; - iCount[0] = 1 << (shift % 32); - - c = ShiftLeft(y, shift); - cBitLength += shift; - } - else - { - iCount = new int[] { 1 }; - - int len = y.Length - yStart; - c = new int[len]; - Array.Copy(y, yStart, c, 0, len); - } - - count = new int[iCount.Length]; - - for (;;) - { - if (cBitLength < xBitLength - || CompareNoLeadingZeroes(xStart, x, cStart, c) >= 0) - { - Subtract(xStart, x, cStart, c); - AddMagnitudes(count, iCount); - - while (x[xStart] == 0) - { - if (++xStart == x.Length) - return count; - } - - //xBitLength = CalcBitLength(xStart, x); - xBitLength = 32 * (x.Length - xStart - 1) + BitLen(x[xStart]); - - if (xBitLength <= yBitLength) - { - if (xBitLength < yBitLength) - return count; - - xyCmp = CompareNoLeadingZeroes(xStart, x, yStart, y); - - if (xyCmp <= 0) - break; - } - } - - shift = cBitLength - xBitLength; - - // NB: The case where c[cStart] is 1-bit is harmless - if (shift == 1) - { - uint firstC = (uint) c[cStart] >> 1; - uint firstX = (uint) x[xStart]; - if (firstC > firstX) - ++shift; - } - - if (shift < 2) - { - ShiftRightOneInPlace(cStart, c); - --cBitLength; - ShiftRightOneInPlace(iCountStart, iCount); - } - else - { - ShiftRightInPlace(cStart, c, shift); - cBitLength -= shift; - ShiftRightInPlace(iCountStart, iCount, shift); - } - - //cStart = c.Length - ((cBitLength + 31) / 32); - while (c[cStart] == 0) - { - ++cStart; - } - - while (iCount[iCountStart] == 0) - { - ++iCountStart; - } - } - } - else - { - count = new int[1]; - } - - if (xyCmp == 0) - { - AddMagnitudes(count, One.magnitude); - Array.Clear(x, xStart, x.Length - xStart); - } - - return count; - } - - public BigInteger Divide( - BigInteger val) - { - if (val.sign == 0) - throw new ArithmeticException("Division by zero error"); - - if (sign == 0) - return Zero; - - if (val.QuickPow2Check()) // val is power of two - { - BigInteger result = this.Abs().ShiftRight(val.Abs().BitLength - 1); - return val.sign == this.sign ? result : result.Negate(); - } - - int[] mag = (int[]) this.magnitude.Clone(); - - return new BigInteger(this.sign * val.sign, Divide(mag, val.magnitude), true); - } - - public BigInteger[] DivideAndRemainder( - BigInteger val) - { - if (val.sign == 0) - throw new ArithmeticException("Division by zero error"); - - BigInteger[] biggies = new BigInteger[2]; - - if (sign == 0) - { - biggies[0] = Zero; - biggies[1] = Zero; - } - else if (val.QuickPow2Check()) // val is power of two - { - int e = val.Abs().BitLength - 1; - BigInteger quotient = this.Abs().ShiftRight(e); - int[] remainder = this.LastNBits(e); - - biggies[0] = val.sign == this.sign ? quotient : quotient.Negate(); - biggies[1] = new BigInteger(this.sign, remainder, true); - } - else - { - int[] remainder = (int[]) this.magnitude.Clone(); - int[] quotient = Divide(remainder, val.magnitude); - - biggies[0] = new BigInteger(this.sign * val.sign, quotient, true); - biggies[1] = new BigInteger(this.sign, remainder, true); - } - - return biggies; - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - BigInteger biggie = obj as BigInteger; - if (biggie == null) - return false; - - return sign == biggie.sign && IsEqualMagnitude(biggie); - } - - private bool IsEqualMagnitude(BigInteger x) - { - int[] xMag = x.magnitude; - if (magnitude.Length != x.magnitude.Length) - return false; - for (int i = 0; i < magnitude.Length; i++) - { - if (magnitude[i] != x.magnitude[i]) - return false; - } - return true; - } - - public BigInteger Gcd( - BigInteger value) - { - if (value.sign == 0) - return Abs(); - - if (sign == 0) - return value.Abs(); - - BigInteger r; - BigInteger u = this; - BigInteger v = value; - - while (v.sign != 0) - { - r = u.Mod(v); - u = v; - v = r; - } - - return u; - } - - public override int GetHashCode() - { - int hc = magnitude.Length; - if (magnitude.Length > 0) - { - hc ^= magnitude[0]; - - if (magnitude.Length > 1) - { - hc ^= magnitude[magnitude.Length - 1]; - } - } - - return sign < 0 ? ~hc : hc; - } - - // TODO Make public? - private BigInteger Inc() - { - if (this.sign == 0) - return One; - - if (this.sign < 0) - return new BigInteger(-1, doSubBigLil(this.magnitude, One.magnitude), true); - - return AddToMagnitude(One.magnitude); - } - - public int IntValue - { - get - { - if (sign == 0) - return 0; - - int n = magnitude.Length; - - int v = magnitude[n - 1]; - - return sign < 0 ? -v : v; - } - } - - /** - * return whether or not a BigInteger is probably prime with a - * probability of 1 - (1/2)**certainty. - *

From Knuth Vol 2, pg 395.

- */ - public bool IsProbablePrime(int certainty) - { - return IsProbablePrime(certainty, false); - } - - internal bool IsProbablePrime(int certainty, bool randomlySelected) - { - if (certainty <= 0) - return true; - - BigInteger n = Abs(); - - if (!n.TestBit(0)) - return n.Equals(Two); - - if (n.Equals(One)) - return false; - - return n.CheckProbablePrime(certainty, RandomSource, randomlySelected); - } - - private bool CheckProbablePrime(int certainty, Random random, bool randomlySelected) - { - Debug.Assert(certainty > 0); - Debug.Assert(CompareTo(Two) > 0); - Debug.Assert(TestBit(0)); - - - // Try to reduce the penalty for really small numbers - int numLists = System.Math.Min(BitLength - 1, primeLists.Length); - - for (int i = 0; i < numLists; ++i) - { - int test = Remainder(primeProducts[i]); - - int[] primeList = primeLists[i]; - for (int j = 0; j < primeList.Length; ++j) - { - int prime = primeList[j]; - int qRem = test % prime; - if (qRem == 0) - { - // We may find small numbers in the list - return BitLength < 16 && IntValue == prime; - } - } - } - - - // TODO Special case for < 10^16 (RabinMiller fixed list) -// if (BitLength < 30) -// { -// RabinMiller against 2, 3, 5, 7, 11, 13, 23 is sufficient -// } - - - // TODO Is it worth trying to create a hybrid of these two? - return RabinMillerTest(certainty, random, randomlySelected); -// return SolovayStrassenTest(certainty, random); - -// bool rbTest = RabinMillerTest(certainty, random); -// bool ssTest = SolovayStrassenTest(certainty, random); -// -// Debug.Assert(rbTest == ssTest); -// -// return rbTest; - } - - public bool RabinMillerTest(int certainty, Random random) - { - return RabinMillerTest(certainty, random, false); - } - - internal bool RabinMillerTest(int certainty, Random random, bool randomlySelected) - { - int bits = BitLength; - - Debug.Assert(certainty > 0); - Debug.Assert(bits > 2); - Debug.Assert(TestBit(0)); - - int iterations = ((certainty - 1) / 2) + 1; - if (randomlySelected) - { - int itersFor100Cert = bits >= 1024 ? 4 - : bits >= 512 ? 8 - : bits >= 256 ? 16 - : 50; - - if (certainty < 100) - { - iterations = System.Math.Min(itersFor100Cert, iterations); - } - else - { - iterations -= 50; - iterations += itersFor100Cert; - } - } - - // let n = 1 + d . 2^s - BigInteger n = this; - int s = n.GetLowestSetBitMaskFirst(-1 << 1); - Debug.Assert(s >= 1); - BigInteger r = n.ShiftRight(s); - - // NOTE: Avoid conversion to/from Montgomery form and check for R/-R as result instead - - BigInteger montRadix = One.ShiftLeft(32 * n.magnitude.Length).Remainder(n); - BigInteger minusMontRadix = n.Subtract(montRadix); - - do - { - BigInteger a; - do - { - a = new BigInteger(n.BitLength, random); - } - while (a.sign == 0 || a.CompareTo(n) >= 0 - || a.IsEqualMagnitude(montRadix) || a.IsEqualMagnitude(minusMontRadix)); - - BigInteger y = ModPowMonty(a, r, n, false); - - if (!y.Equals(montRadix)) - { - int j = 0; - while (!y.Equals(minusMontRadix)) - { - if (++j == s) - return false; - - y = ModPowMonty(y, Two, n, false); - - if (y.Equals(montRadix)) - return false; - } - } - } - while (--iterations > 0); - - return true; - } - -// private bool SolovayStrassenTest( -// int certainty, -// Random random) -// { -// Debug.Assert(certainty > 0); -// Debug.Assert(CompareTo(Two) > 0); -// Debug.Assert(TestBit(0)); -// -// BigInteger n = this; -// BigInteger nMinusOne = n.Subtract(One); -// BigInteger e = nMinusOne.ShiftRight(1); -// -// do -// { -// BigInteger a; -// do -// { -// a = new BigInteger(nBitLength, random); -// } -// // NB: Spec says 0 < x < n, but 1 is trivial -// while (a.CompareTo(One) <= 0 || a.CompareTo(n) >= 0); -// -// -// // TODO Check this is redundant given the way Jacobi() works? -//// if (!a.Gcd(n).Equals(One)) -//// return false; -// -// int x = Jacobi(a, n); -// -// if (x == 0) -// return false; -// -// BigInteger check = a.ModPow(e, n); -// -// if (x == 1 && !check.Equals(One)) -// return false; -// -// if (x == -1 && !check.Equals(nMinusOne)) -// return false; -// -// --certainty; -// } -// while (certainty > 0); -// -// return true; -// } -// -// private static int Jacobi( -// BigInteger a, -// BigInteger b) -// { -// Debug.Assert(a.sign >= 0); -// Debug.Assert(b.sign > 0); -// Debug.Assert(b.TestBit(0)); -// Debug.Assert(a.CompareTo(b) < 0); -// -// int totalS = 1; -// for (;;) -// { -// if (a.sign == 0) -// return 0; -// -// if (a.Equals(One)) -// break; -// -// int e = a.GetLowestSetBit(); -// -// int bLsw = b.magnitude[b.magnitude.Length - 1]; -// if ((e & 1) != 0 && ((bLsw & 7) == 3 || (bLsw & 7) == 5)) -// totalS = -totalS; -// -// // TODO Confirm this is faster than later a1.Equals(One) test -// if (a.BitLength == e + 1) -// break; -// BigInteger a1 = a.ShiftRight(e); -//// if (a1.Equals(One)) -//// break; -// -// int a1Lsw = a1.magnitude[a1.magnitude.Length - 1]; -// if ((bLsw & 3) == 3 && (a1Lsw & 3) == 3) -// totalS = -totalS; -// -//// a = b.Mod(a1); -// a = b.Remainder(a1); -// b = a1; -// } -// return totalS; -// } - - public long LongValue - { - get - { - if (sign == 0) - return 0; - - int n = magnitude.Length; - - long v = magnitude[n - 1] & IMASK; - if (n > 1) - { - v |= (magnitude[n - 2] & IMASK) << 32; - } - - return sign < 0 ? -v : v; - } - } - - public BigInteger Max( - BigInteger value) - { - return CompareTo(value) > 0 ? this : value; - } - - public BigInteger Min( - BigInteger value) - { - return CompareTo(value) < 0 ? this : value; - } - - public BigInteger Mod( - BigInteger m) - { - if (m.sign < 1) - throw new ArithmeticException("Modulus must be positive"); - - BigInteger biggie = Remainder(m); - - return (biggie.sign >= 0 ? biggie : biggie.Add(m)); - } - - public BigInteger ModInverse( - BigInteger m) - { - if (m.sign < 1) - throw new ArithmeticException("Modulus must be positive"); - - // TODO Too slow at the moment -// // "Fast Key Exchange with Elliptic Curve Systems" R.Schoeppel -// if (m.TestBit(0)) -// { -// //The Almost Inverse Algorithm -// int k = 0; -// BigInteger B = One, C = Zero, F = this, G = m, tmp; -// -// for (;;) -// { -// // While F is even, do F=F/u, C=C*u, k=k+1. -// int zeroes = F.GetLowestSetBit(); -// if (zeroes > 0) -// { -// F = F.ShiftRight(zeroes); -// C = C.ShiftLeft(zeroes); -// k += zeroes; -// } -// -// // If F = 1, then return B,k. -// if (F.Equals(One)) -// { -// BigInteger half = m.Add(One).ShiftRight(1); -// BigInteger halfK = half.ModPow(BigInteger.ValueOf(k), m); -// return B.Multiply(halfK).Mod(m); -// } -// -// if (F.CompareTo(G) < 0) -// { -// tmp = G; G = F; F = tmp; -// tmp = B; B = C; C = tmp; -// } -// -// F = F.Add(G); -// B = B.Add(C); -// } -// } - - if (m.QuickPow2Check()) - { - return ModInversePow2(m); - } - - BigInteger d = this.Remainder(m); - BigInteger x; - BigInteger gcd = ExtEuclid(d, m, out x); - - if (!gcd.Equals(One)) - throw new ArithmeticException("Numbers not relatively prime."); - - if (x.sign < 0) - { - x = x.Add(m); - } - - return x; - } - - private BigInteger ModInversePow2(BigInteger m) - { - Debug.Assert(m.SignValue > 0); - Debug.Assert(m.BitCount == 1); - - if (!TestBit(0)) - { - throw new ArithmeticException("Numbers not relatively prime."); - } - - int pow = m.BitLength - 1; - - long inv64 = ModInverse64(LongValue); - if (pow < 64) - { - inv64 &= ((1L << pow) - 1); - } - - BigInteger x = BigInteger.ValueOf(inv64); - - if (pow > 64) - { - BigInteger d = this.Remainder(m); - int bitsCorrect = 64; - - do - { - BigInteger t = x.Multiply(d).Remainder(m); - x = x.Multiply(Two.Subtract(t)).Remainder(m); - bitsCorrect <<= 1; - } - while (bitsCorrect < pow); - } - - if (x.sign < 0) - { - x = x.Add(m); - } - - return x; - } - - private static int ModInverse32(int d) - { - // Newton's method with initial estimate "correct to 4 bits" - Debug.Assert((d & 1) != 0); - int x = d + (((d + 1) & 4) << 1); // d.x == 1 mod 2**4 - Debug.Assert(((d * x) & 15) == 1); - x *= 2 - d * x; // d.x == 1 mod 2**8 - x *= 2 - d * x; // d.x == 1 mod 2**16 - x *= 2 - d * x; // d.x == 1 mod 2**32 - Debug.Assert(d * x == 1); - return x; - } - - private static long ModInverse64(long d) - { - // Newton's method with initial estimate "correct to 4 bits" - Debug.Assert((d & 1L) != 0); - long x = d + (((d + 1L) & 4L) << 1); // d.x == 1 mod 2**4 - Debug.Assert(((d * x) & 15L) == 1L); - x *= 2 - d * x; // d.x == 1 mod 2**8 - x *= 2 - d * x; // d.x == 1 mod 2**16 - x *= 2 - d * x; // d.x == 1 mod 2**32 - x *= 2 - d * x; // d.x == 1 mod 2**64 - Debug.Assert(d * x == 1L); - return x; - } - - /** - * Calculate the numbers u1, u2, and u3 such that: - * - * u1 * a + u2 * b = u3 - * - * where u3 is the greatest common divider of a and b. - * a and b using the extended Euclid algorithm (refer p. 323 - * of The Art of Computer Programming vol 2, 2nd ed). - * This also seems to have the side effect of calculating - * some form of multiplicative inverse. - * - * @param a First number to calculate gcd for - * @param b Second number to calculate gcd for - * @param u1Out the return object for the u1 value - * @return The greatest common divisor of a and b - */ - private static BigInteger ExtEuclid(BigInteger a, BigInteger b, out BigInteger u1Out) - { - BigInteger u1 = One, v1 = Zero; - BigInteger u3 = a, v3 = b; - - if (v3.sign > 0) - { - for (;;) - { - BigInteger[] q = u3.DivideAndRemainder(v3); - u3 = v3; - v3 = q[1]; - - BigInteger oldU1 = u1; - u1 = v1; - - if (v3.sign <= 0) - break; - - v1 = oldU1.Subtract(v1.Multiply(q[0])); - } - } - - u1Out = u1; - - return u3; - } - - private static void ZeroOut( - int[] x) - { - Array.Clear(x, 0, x.Length); - } - - public BigInteger ModPow(BigInteger e, BigInteger m) - { - if (m.sign < 1) - throw new ArithmeticException("Modulus must be positive"); - - if (m.Equals(One)) - return Zero; - - if (e.sign == 0) - return One; - - if (sign == 0) - return Zero; - - bool negExp = e.sign < 0; - if (negExp) - e = e.Negate(); - - BigInteger result = this.Mod(m); - if (!e.Equals(One)) - { - if ((m.magnitude[m.magnitude.Length - 1] & 1) == 0) - { - result = ModPowBarrett(result, e, m); - } - else - { - result = ModPowMonty(result, e, m, true); - } - } - - if (negExp) - result = result.ModInverse(m); - - return result; - } - - private static BigInteger ModPowBarrett(BigInteger b, BigInteger e, BigInteger m) - { - int k = m.magnitude.Length; - BigInteger mr = One.ShiftLeft((k + 1) << 5); - BigInteger yu = One.ShiftLeft(k << 6).Divide(m); - - // Sliding window from MSW to LSW - int extraBits = 0, expLength = e.BitLength; - while (expLength > ExpWindowThresholds[extraBits]) - { - ++extraBits; - } - - int numPowers = 1 << extraBits; - BigInteger[] oddPowers = new BigInteger[numPowers]; - oddPowers[0] = b; - - BigInteger b2 = ReduceBarrett(b.Square(), m, mr, yu); - - for (int i = 1; i < numPowers; ++i) - { - oddPowers[i] = ReduceBarrett(oddPowers[i - 1].Multiply(b2), m, mr, yu); - } - - int[] windowList = GetWindowList(e.magnitude, extraBits); - Debug.Assert(windowList.Length > 0); - - int window = windowList[0]; - int mult = window & 0xFF, lastZeroes = window >> 8; - - BigInteger y; - if (mult == 1) - { - y = b2; - --lastZeroes; - } - else - { - y = oddPowers[mult >> 1]; - } - - int windowPos = 1; - while ((window = windowList[windowPos++]) != -1) - { - mult = window & 0xFF; - - int bits = lastZeroes + BitLengthTable[mult]; - for (int j = 0; j < bits; ++j) - { - y = ReduceBarrett(y.Square(), m, mr, yu); - } - - y = ReduceBarrett(y.Multiply(oddPowers[mult >> 1]), m, mr, yu); - - lastZeroes = window >> 8; - } - - for (int i = 0; i < lastZeroes; ++i) - { - y = ReduceBarrett(y.Square(), m, mr, yu); - } - - return y; - } - - private static BigInteger ReduceBarrett(BigInteger x, BigInteger m, BigInteger mr, BigInteger yu) - { - int xLen = x.BitLength, mLen = m.BitLength; - if (xLen < mLen) - return x; - - if (xLen - mLen > 1) - { - int k = m.magnitude.Length; - - BigInteger q1 = x.DivideWords(k - 1); - BigInteger q2 = q1.Multiply(yu); // TODO Only need partial multiplication here - BigInteger q3 = q2.DivideWords(k + 1); - - BigInteger r1 = x.RemainderWords(k + 1); - BigInteger r2 = q3.Multiply(m); // TODO Only need partial multiplication here - BigInteger r3 = r2.RemainderWords(k + 1); - - x = r1.Subtract(r3); - if (x.sign < 0) - { - x = x.Add(mr); - } - } - - while (x.CompareTo(m) >= 0) - { - x = x.Subtract(m); - } - - return x; - } - - private static BigInteger ModPowMonty(BigInteger b, BigInteger e, BigInteger m, bool convert) - { - int n = m.magnitude.Length; - int powR = 32 * n; - bool smallMontyModulus = m.BitLength + 2 <= powR; - uint mDash = (uint)m.GetMQuote(); - - // tmp = this * R mod m - if (convert) - { - b = b.ShiftLeft(powR).Remainder(m); - } - - int[] yAccum = new int[n + 1]; - - int[] zVal = b.magnitude; - Debug.Assert(zVal.Length <= n); - if (zVal.Length < n) - { - int[] tmp = new int[n]; - zVal.CopyTo(tmp, n - zVal.Length); - zVal = tmp; - } - - // Sliding window from MSW to LSW - - int extraBits = 0; - - // Filter the common case of small RSA exponents with few bits set - if (e.magnitude.Length > 1 || e.BitCount > 2) - { - int expLength = e.BitLength; - while (expLength > ExpWindowThresholds[extraBits]) - { - ++extraBits; - } - } - - int numPowers = 1 << extraBits; - int[][] oddPowers = new int[numPowers][]; - oddPowers[0] = zVal; - - int[] zSquared = Arrays.Clone(zVal); - SquareMonty(yAccum, zSquared, m.magnitude, mDash, smallMontyModulus); - - for (int i = 1; i < numPowers; ++i) - { - oddPowers[i] = Arrays.Clone(oddPowers[i - 1]); - MultiplyMonty(yAccum, oddPowers[i], zSquared, m.magnitude, mDash, smallMontyModulus); - } - - int[] windowList = GetWindowList(e.magnitude, extraBits); - Debug.Assert(windowList.Length > 1); - - int window = windowList[0]; - int mult = window & 0xFF, lastZeroes = window >> 8; - - int[] yVal; - if (mult == 1) - { - yVal = zSquared; - --lastZeroes; - } - else - { - yVal = Arrays.Clone(oddPowers[mult >> 1]); - } - - int windowPos = 1; - while ((window = windowList[windowPos++]) != -1) - { - mult = window & 0xFF; - - int bits = lastZeroes + BitLengthTable[mult]; - for (int j = 0; j < bits; ++j) - { - SquareMonty(yAccum, yVal, m.magnitude, mDash, smallMontyModulus); - } - - MultiplyMonty(yAccum, yVal, oddPowers[mult >> 1], m.magnitude, mDash, smallMontyModulus); - - lastZeroes = window >> 8; - } - - for (int i = 0; i < lastZeroes; ++i) - { - SquareMonty(yAccum, yVal, m.magnitude, mDash, smallMontyModulus); - } - - if (convert) - { - // Return y * R^(-1) mod m - MontgomeryReduce(yVal, m.magnitude, mDash); - } - else if (smallMontyModulus && CompareTo(0, yVal, 0, m.magnitude) >= 0) - { - Subtract(0, yVal, 0, m.magnitude); - } - - return new BigInteger(1, yVal, true); - } - - private static int[] GetWindowList(int[] mag, int extraBits) - { - int v = mag[0]; - Debug.Assert(v != 0); - - int leadingBits = BitLen(v); - - int resultSize = (((mag.Length - 1) << 5) + leadingBits) / (1 + extraBits) + 2; - int[] result = new int[resultSize]; - int resultPos = 0; - - int bitPos = 33 - leadingBits; - v <<= bitPos; - - int mult = 1, multLimit = 1 << extraBits; - int zeroes = 0; - - int i = 0; - for (; ; ) - { - for (; bitPos < 32; ++bitPos) - { - if (mult < multLimit) - { - mult = (mult << 1) | (int)((uint)v >> 31); - } - else if (v < 0) - { - result[resultPos++] = CreateWindowEntry(mult, zeroes); - mult = 1; - zeroes = 0; - } - else - { - ++zeroes; - } - - v <<= 1; - } - - if (++i == mag.Length) - { - result[resultPos++] = CreateWindowEntry(mult, zeroes); - break; - } - - v = mag[i]; - bitPos = 0; - } - - result[resultPos] = -1; - return result; - } - - private static int CreateWindowEntry(int mult, int zeroes) - { - while ((mult & 1) == 0) - { - mult >>= 1; - ++zeroes; - } - - return mult | (zeroes << 8); - } - - /** - * return w with w = x * x - w is assumed to have enough space. - */ - private static int[] Square( - int[] w, - int[] x) - { - // Note: this method allows w to be only (2 * x.Length - 1) words if result will fit -// if (w.Length != 2 * x.Length) -// throw new ArgumentException("no I don't think so..."); - - ulong c; - - int wBase = w.Length - 1; - - for (int i = x.Length - 1; i > 0; --i) - { - ulong v = (uint)x[i]; - - c = v * v + (uint)w[wBase]; - w[wBase] = (int)c; - c >>= 32; - - for (int j = i - 1; j >= 0; --j) - { - ulong prod = v * (uint)x[j]; - - c += ((uint)w[--wBase] & UIMASK) + ((uint)prod << 1); - w[wBase] = (int)c; - c = (c >> 32) + (prod >> 31); - } - - c += (uint)w[--wBase]; - w[wBase] = (int)c; - - if (--wBase >= 0) - { - w[wBase] = (int)(c >> 32); - } - else - { - Debug.Assert((c >> 32) == 0); - } - - wBase += i; - } - - c = (uint)x[0]; - - c = c * c + (uint)w[wBase]; - w[wBase] = (int)c; - - if (--wBase >= 0) - { - w[wBase] += (int)(c >> 32); - } - else - { - Debug.Assert((c >> 32) == 0); - } - - return w; - } - - /** - * return x with x = y * z - x is assumed to have enough space. - */ - private static int[] Multiply(int[] x, int[] y, int[] z) - { - int i = z.Length; - - if (i < 1) - return x; - - int xBase = x.Length - y.Length; - - do - { - long a = z[--i] & IMASK; - long val = 0; - - if (a != 0) - { - for (int j = y.Length - 1; j >= 0; j--) - { - val += a * (y[j] & IMASK) + (x[xBase + j] & IMASK); - - x[xBase + j] = (int)val; - - val = (long)((ulong)val >> 32); - } - } - - --xBase; - - if (xBase >= 0) - { - x[xBase] = (int)val; - } - else - { - Debug.Assert(val == 0); - } - } - while (i > 0); - - return x; - } - - /** - * Calculate mQuote = -m^(-1) mod b with b = 2^32 (32 = word size) - */ - private int GetMQuote() - { - if (mQuote != 0) - { - return mQuote; // already calculated - } - - Debug.Assert(this.sign > 0); - - int d = -magnitude[magnitude.Length - 1]; - - Debug.Assert((d & 1) != 0); - - return mQuote = ModInverse32(d); - } - - private static void MontgomeryReduce(int[] x, int[] m, uint mDash) // mDash = -m^(-1) mod b - { - // NOTE: Not a general purpose reduction (which would allow x up to twice the bitlength of m) - Debug.Assert(x.Length == m.Length); - - int n = m.Length; - - for (int i = n - 1; i >= 0; --i) - { - uint x0 = (uint)x[n - 1]; - ulong t = x0 * mDash; - - ulong carry = t * (uint)m[n - 1] + x0; - Debug.Assert((uint)carry == 0); - carry >>= 32; - - for (int j = n - 2; j >= 0; --j) - { - carry += t * (uint)m[j] + (uint)x[j]; - x[j + 1] = (int)carry; - carry >>= 32; - } - - x[0] = (int)carry; - Debug.Assert(carry >> 32 == 0); - } - - if (CompareTo(0, x, 0, m) >= 0) - { - Subtract(0, x, 0, m); - } - } - - /** - * Montgomery multiplication: a = x * y * R^(-1) mod m - *
- * Based algorithm 14.36 of Handbook of Applied Cryptography. - *
- *
  • m, x, y should have length n
    • - *
  • a should have length (n + 1)
    • - *
  • b = 2^32, R = b^n
    • - *
    - * The result is put in x - *
    - * NOTE: the indices of x, y, m, a different in HAC and in Java - */ - private static void MultiplyMonty(int[] a, int[] x, int[] y, int[] m, uint mDash, bool smallMontyModulus) - // mDash = -m^(-1) mod b - { - int n = m.Length; - - if (n == 1) - { - x[0] = (int)MultiplyMontyNIsOne((uint)x[0], (uint)y[0], (uint)m[0], mDash); - return; - } - - uint y0 = (uint)y[n - 1]; - int aMax; - - { - ulong xi = (uint)x[n - 1]; - - ulong carry = xi * y0; - ulong t = (uint)carry * mDash; - - ulong prod2 = t * (uint)m[n - 1]; - carry += (uint)prod2; - Debug.Assert((uint)carry == 0); - carry = (carry >> 32) + (prod2 >> 32); - - for (int j = n - 2; j >= 0; --j) - { - ulong prod1 = xi * (uint)y[j]; - prod2 = t * (uint)m[j]; - - carry += (prod1 & UIMASK) + (uint)prod2; - a[j + 2] = (int)carry; - carry = (carry >> 32) + (prod1 >> 32) + (prod2 >> 32); - } - - a[1] = (int)carry; - aMax = (int)(carry >> 32); - } - - for (int i = n - 2; i >= 0; --i) - { - uint a0 = (uint)a[n]; - ulong xi = (uint)x[i]; - - ulong prod1 = xi * y0; - ulong carry = (prod1 & UIMASK) + a0; - ulong t = (uint)carry * mDash; - - ulong prod2 = t * (uint)m[n - 1]; - carry += (uint)prod2; - Debug.Assert((uint)carry == 0); - carry = (carry >> 32) + (prod1 >> 32) + (prod2 >> 32); - - for (int j = n - 2; j >= 0; --j) - { - prod1 = xi * (uint)y[j]; - prod2 = t * (uint)m[j]; - - carry += (prod1 & UIMASK) + (uint)prod2 + (uint)a[j + 1]; - a[j + 2] = (int)carry; - carry = (carry >> 32) + (prod1 >> 32) + (prod2 >> 32); - } - - carry += (uint)aMax; - a[1] = (int)carry; - aMax = (int)(carry >> 32); - } - - a[0] = aMax; - - if (!smallMontyModulus && CompareTo(0, a, 0, m) >= 0) - { - Subtract(0, a, 0, m); - } - - Array.Copy(a, 1, x, 0, n); - } - - private static void SquareMonty(int[] a, int[] x, int[] m, uint mDash, bool smallMontyModulus) - // mDash = -m^(-1) mod b - { - int n = m.Length; - - if (n == 1) - { - uint xVal = (uint)x[0]; - x[0] = (int)MultiplyMontyNIsOne(xVal, xVal, (uint)m[0], mDash); - return; - } - - ulong x0 = (uint)x[n - 1]; - int aMax; - - { - ulong carry = x0 * x0; - ulong t = (uint)carry * mDash; - - ulong prod2 = t * (uint)m[n - 1]; - carry += (uint)prod2; - Debug.Assert((uint)carry == 0); - carry = (carry >> 32) + (prod2 >> 32); - - for (int j = n - 2; j >= 0; --j) - { - ulong prod1 = x0 * (uint)x[j]; - prod2 = t * (uint)m[j]; - - carry += (prod2 & UIMASK) + ((uint)prod1 << 1); - a[j + 2] = (int)carry; - carry = (carry >> 32) + (prod1 >> 31) + (prod2 >> 32); - } - - a[1] = (int)carry; - aMax = (int)(carry >> 32); - } - - for (int i = n - 2; i >= 0; --i) - { - uint a0 = (uint)a[n]; - ulong t = a0 * mDash; - - ulong carry = t * (uint)m[n - 1] + a0; - Debug.Assert((uint)carry == 0); - carry >>= 32; - - for (int j = n - 2; j > i; --j) - { - carry += t * (uint)m[j] + (uint)a[j + 1]; - a[j + 2] = (int)carry; - carry >>= 32; - } - - ulong xi = (uint)x[i]; - - { - ulong prod1 = xi * xi; - ulong prod2 = t * (uint)m[i]; - - carry += (prod1 & UIMASK) + (uint)prod2 + (uint)a[i + 1]; - a[i + 2] = (int)carry; - carry = (carry >> 32) + (prod1 >> 32) + (prod2 >> 32); - } - - for (int j = i - 1; j >= 0; --j) - { - ulong prod1 = xi * (uint)x[j]; - ulong prod2 = t * (uint)m[j]; - - carry += (prod2 & UIMASK) + ((uint)prod1 << 1) + (uint)a[j + 1]; - a[j + 2] = (int)carry; - carry = (carry >> 32) + (prod1 >> 31) + (prod2 >> 32); - } - - carry += (uint)aMax; - a[1] = (int)carry; - aMax = (int)(carry >> 32); - } - - a[0] = aMax; - - if (!smallMontyModulus && CompareTo(0, a, 0, m) >= 0) - { - Subtract(0, a, 0, m); - } - - Array.Copy(a, 1, x, 0, n); - } - - private static uint MultiplyMontyNIsOne(uint x, uint y, uint m, uint mDash) - { - ulong carry = (ulong)x * y; - uint t = (uint)carry * mDash; - ulong um = m; - ulong prod2 = um * t; - carry += (uint)prod2; - Debug.Assert((uint)carry == 0); - carry = (carry >> 32) + (prod2 >> 32); - if (carry > um) - { - carry -= um; - } - Debug.Assert(carry < um); - return (uint)carry; - } - - public BigInteger Multiply( - BigInteger val) - { - if (val == this) - return Square(); - - if ((sign & val.sign) == 0) - return Zero; - - if (val.QuickPow2Check()) // val is power of two - { - BigInteger result = this.ShiftLeft(val.Abs().BitLength - 1); - return val.sign > 0 ? result : result.Negate(); - } - - if (this.QuickPow2Check()) // this is power of two - { - BigInteger result = val.ShiftLeft(this.Abs().BitLength - 1); - return this.sign > 0 ? result : result.Negate(); - } - - int resLength = magnitude.Length + val.magnitude.Length; - int[] res = new int[resLength]; - - Multiply(res, this.magnitude, val.magnitude); - - int resSign = sign ^ val.sign ^ 1; - return new BigInteger(resSign, res, true); - } - - public BigInteger Square() - { - if (sign == 0) - return Zero; - if (this.QuickPow2Check()) - return ShiftLeft(Abs().BitLength - 1); - int resLength = magnitude.Length << 1; - if ((uint)magnitude[0] >> 16 == 0) - --resLength; - int[] res = new int[resLength]; - Square(res, magnitude); - return new BigInteger(1, res, false); - } - - public BigInteger Negate() - { - if (sign == 0) - return this; - - return new BigInteger(-sign, magnitude, false); - } - - public BigInteger NextProbablePrime() - { - if (sign < 0) - throw new ArithmeticException("Cannot be called on value < 0"); - - if (CompareTo(Two) < 0) - return Two; - - BigInteger n = Inc().SetBit(0); - - while (!n.CheckProbablePrime(100, RandomSource, false)) - { - n = n.Add(Two); - } - - return n; - } - - public BigInteger Not() - { - return Inc().Negate(); - } - - public BigInteger Pow(int exp) - { - if (exp <= 0) - { - if (exp < 0) - throw new ArithmeticException("Negative exponent"); - - return One; - } - - if (sign == 0) - { - return this; - } - - if (QuickPow2Check()) - { - long powOf2 = (long)exp * (BitLength - 1); - if (powOf2 > Int32.MaxValue) - { - throw new ArithmeticException("Result too large"); - } - return One.ShiftLeft((int)powOf2); - } - - BigInteger y = One; - BigInteger z = this; - - for (;;) - { - if ((exp & 0x1) == 1) - { - y = y.Multiply(z); - } - exp >>= 1; - if (exp == 0) break; - z = z.Multiply(z); - } - - return y; - } - - public static BigInteger ProbablePrime( - int bitLength, - Random random) - { - return new BigInteger(bitLength, 100, random); - } - - private int Remainder( - int m) - { - Debug.Assert(m > 0); - - long acc = 0; - for (int pos = 0; pos < magnitude.Length; ++pos) - { - long posVal = (uint) magnitude[pos]; - acc = (acc << 32 | posVal) % m; - } - - return (int) acc; - } - - /** - * return x = x % y - done in place (y value preserved) - */ - private static int[] Remainder( - int[] x, - int[] y) - { - int xStart = 0; - while (xStart < x.Length && x[xStart] == 0) - { - ++xStart; - } - - int yStart = 0; - while (yStart < y.Length && y[yStart] == 0) - { - ++yStart; - } - - Debug.Assert(yStart < y.Length); - - int xyCmp = CompareNoLeadingZeroes(xStart, x, yStart, y); - - if (xyCmp > 0) - { - int yBitLength = CalcBitLength(1, yStart, y); - int xBitLength = CalcBitLength(1, xStart, x); - int shift = xBitLength - yBitLength; - - int[] c; - int cStart = 0; - int cBitLength = yBitLength; - if (shift > 0) - { - c = ShiftLeft(y, shift); - cBitLength += shift; - Debug.Assert(c[0] != 0); - } - else - { - int len = y.Length - yStart; - c = new int[len]; - Array.Copy(y, yStart, c, 0, len); - } - - for (;;) - { - if (cBitLength < xBitLength - || CompareNoLeadingZeroes(xStart, x, cStart, c) >= 0) - { - Subtract(xStart, x, cStart, c); - - while (x[xStart] == 0) - { - if (++xStart == x.Length) - return x; - } - - //xBitLength = CalcBitLength(xStart, x); - xBitLength = 32 * (x.Length - xStart - 1) + BitLen(x[xStart]); - - if (xBitLength <= yBitLength) - { - if (xBitLength < yBitLength) - return x; - - xyCmp = CompareNoLeadingZeroes(xStart, x, yStart, y); - - if (xyCmp <= 0) - break; - } - } - - shift = cBitLength - xBitLength; - - // NB: The case where c[cStart] is 1-bit is harmless - if (shift == 1) - { - uint firstC = (uint) c[cStart] >> 1; - uint firstX = (uint) x[xStart]; - if (firstC > firstX) - ++shift; - } - - if (shift < 2) - { - ShiftRightOneInPlace(cStart, c); - --cBitLength; - } - else - { - ShiftRightInPlace(cStart, c, shift); - cBitLength -= shift; - } - - //cStart = c.Length - ((cBitLength + 31) / 32); - while (c[cStart] == 0) - { - ++cStart; - } - } - } - - if (xyCmp == 0) - { - Array.Clear(x, xStart, x.Length - xStart); - } - - return x; - } - - public BigInteger Remainder( - BigInteger n) - { - if (n.sign == 0) - throw new ArithmeticException("Division by zero error"); - - if (this.sign == 0) - return Zero; - - // For small values, use fast remainder method - if (n.magnitude.Length == 1) - { - int val = n.magnitude[0]; - - if (val > 0) - { - if (val == 1) - return Zero; - - // TODO Make this func work on uint, and handle val == 1? - int rem = Remainder(val); - - return rem == 0 - ? Zero - : new BigInteger(sign, new int[]{ rem }, false); - } - } - - if (CompareNoLeadingZeroes(0, magnitude, 0, n.magnitude) < 0) - return this; - - int[] result; - if (n.QuickPow2Check()) // n is power of two - { - // TODO Move before small values branch above? - result = LastNBits(n.Abs().BitLength - 1); - } - else - { - result = (int[]) this.magnitude.Clone(); - result = Remainder(result, n.magnitude); - } - - return new BigInteger(sign, result, true); - } - - private int[] LastNBits( - int n) - { - if (n < 1) - return ZeroMagnitude; - - int numWords = (n + BitsPerInt - 1) / BitsPerInt; - numWords = System.Math.Min(numWords, this.magnitude.Length); - int[] result = new int[numWords]; - - Array.Copy(this.magnitude, this.magnitude.Length - numWords, result, 0, numWords); - - int excessBits = (numWords << 5) - n; - if (excessBits > 0) - { - result[0] &= (int)(UInt32.MaxValue >> excessBits); - } - - return result; - } - - private BigInteger DivideWords(int w) - { - Debug.Assert(w >= 0); - int n = magnitude.Length; - if (w >= n) - return Zero; - int[] mag = new int[n - w]; - Array.Copy(magnitude, 0, mag, 0, n - w); - return new BigInteger(sign, mag, false); - } - - private BigInteger RemainderWords(int w) - { - Debug.Assert(w >= 0); - int n = magnitude.Length; - if (w >= n) - return this; - int[] mag = new int[w]; - Array.Copy(magnitude, n - w, mag, 0, w); - return new BigInteger(sign, mag, false); - } - - /** - * do a left shift - this returns a new array. - */ - private static int[] ShiftLeft( - int[] mag, - int n) - { - int nInts = (int)((uint)n >> 5); - int nBits = n & 0x1f; - int magLen = mag.Length; - int[] newMag; - - if (nBits == 0) - { - newMag = new int[magLen + nInts]; - mag.CopyTo(newMag, 0); - } - else - { - int i = 0; - int nBits2 = 32 - nBits; - int highBits = (int)((uint)mag[0] >> nBits2); - - if (highBits != 0) - { - newMag = new int[magLen + nInts + 1]; - newMag[i++] = highBits; - } - else - { - newMag = new int[magLen + nInts]; - } - - int m = mag[0]; - for (int j = 0; j < magLen - 1; j++) - { - int next = mag[j + 1]; - - newMag[i++] = (m << nBits) | (int)((uint)next >> nBits2); - m = next; - } - - newMag[i] = mag[magLen - 1] << nBits; - } - - return newMag; - } - - private static int ShiftLeftOneInPlace(int[] x, int carry) - { - Debug.Assert(carry == 0 || carry == 1); - int pos = x.Length; - while (--pos >= 0) - { - uint val = (uint)x[pos]; - x[pos] = (int)(val << 1) | carry; - carry = (int)(val >> 31); - } - return carry; - } - - public BigInteger ShiftLeft( - int n) - { - if (sign == 0 || magnitude.Length == 0) - return Zero; - - if (n == 0) - return this; - - if (n < 0) - return ShiftRight(-n); - - BigInteger result = new BigInteger(sign, ShiftLeft(magnitude, n), true); - - if (this.nBits != -1) - { - result.nBits = sign > 0 - ? this.nBits - : this.nBits + n; - } - - if (this.nBitLength != -1) - { - result.nBitLength = this.nBitLength + n; - } - - return result; - } - - /** - * do a right shift - this does it in place. - */ - private static void ShiftRightInPlace( - int start, - int[] mag, - int n) - { - int nInts = (int)((uint)n >> 5) + start; - int nBits = n & 0x1f; - int magEnd = mag.Length - 1; - - if (nInts != start) - { - int delta = (nInts - start); - - for (int i = magEnd; i >= nInts; i--) - { - mag[i] = mag[i - delta]; - } - for (int i = nInts - 1; i >= start; i--) - { - mag[i] = 0; - } - } - - if (nBits != 0) - { - int nBits2 = 32 - nBits; - int m = mag[magEnd]; - - for (int i = magEnd; i > nInts; --i) - { - int next = mag[i - 1]; - - mag[i] = (int)((uint)m >> nBits) | (next << nBits2); - m = next; - } - - mag[nInts] = (int)((uint)mag[nInts] >> nBits); - } - } - - /** - * do a right shift by one - this does it in place. - */ - private static void ShiftRightOneInPlace( - int start, - int[] mag) - { - int i = mag.Length; - int m = mag[i - 1]; - - while (--i > start) - { - int next = mag[i - 1]; - mag[i] = ((int)((uint)m >> 1)) | (next << 31); - m = next; - } - - mag[start] = (int)((uint)mag[start] >> 1); - } - - public BigInteger ShiftRight( - int n) - { - if (n == 0) - return this; - - if (n < 0) - return ShiftLeft(-n); - - if (n >= BitLength) - return (this.sign < 0 ? One.Negate() : Zero); - -// int[] res = (int[]) this.magnitude.Clone(); -// -// ShiftRightInPlace(0, res, n); -// -// return new BigInteger(this.sign, res, true); - - int resultLength = (BitLength - n + 31) >> 5; - int[] res = new int[resultLength]; - - int numInts = n >> 5; - int numBits = n & 31; - - if (numBits == 0) - { - Array.Copy(this.magnitude, 0, res, 0, res.Length); - } - else - { - int numBits2 = 32 - numBits; - - int magPos = this.magnitude.Length - 1 - numInts; - for (int i = resultLength - 1; i >= 0; --i) - { - res[i] = (int)((uint) this.magnitude[magPos--] >> numBits); - - if (magPos >= 0) - { - res[i] |= this.magnitude[magPos] << numBits2; - } - } - } - - Debug.Assert(res[0] != 0); - - return new BigInteger(this.sign, res, false); - } - - public int SignValue - { - get { return sign; } - } - - /** - * returns x = x - y - we assume x is >= y - */ - private static int[] Subtract( - int xStart, - int[] x, - int yStart, - int[] y) - { - Debug.Assert(yStart < y.Length); - Debug.Assert(x.Length - xStart >= y.Length - yStart); - - int iT = x.Length; - int iV = y.Length; - long m; - int borrow = 0; - - do - { - m = (x[--iT] & IMASK) - (y[--iV] & IMASK) + borrow; - x[iT] = (int) m; - -// borrow = (m < 0) ? -1 : 0; - borrow = (int)(m >> 63); - } - while (iV > yStart); - - if (borrow != 0) - { - while (--x[--iT] == -1) - { - } - } - - return x; - } - - public BigInteger Subtract( - BigInteger n) - { - if (n.sign == 0) - return this; - - if (this.sign == 0) - return n.Negate(); - - if (this.sign != n.sign) - return Add(n.Negate()); - - int compare = CompareNoLeadingZeroes(0, magnitude, 0, n.magnitude); - if (compare == 0) - return Zero; - - BigInteger bigun, lilun; - if (compare < 0) - { - bigun = n; - lilun = this; - } - else - { - bigun = this; - lilun = n; - } - - return new BigInteger(this.sign * compare, doSubBigLil(bigun.magnitude, lilun.magnitude), true); - } - - private static int[] doSubBigLil( - int[] bigMag, - int[] lilMag) - { - int[] res = (int[]) bigMag.Clone(); - - return Subtract(0, res, 0, lilMag); - } - - public byte[] ToByteArray() - { - return ToByteArray(false); - } - - public byte[] ToByteArrayUnsigned() - { - return ToByteArray(true); - } - - private byte[] ToByteArray( - bool unsigned) - { - if (sign == 0) - return unsigned ? ZeroEncoding : new byte[1]; - - int nBits = (unsigned && sign > 0) - ? BitLength - : BitLength + 1; - - int nBytes = GetByteLength(nBits); - byte[] bytes = new byte[nBytes]; - - int magIndex = magnitude.Length; - int bytesIndex = bytes.Length; - - if (sign > 0) - { - while (magIndex > 1) - { - uint mag = (uint) magnitude[--magIndex]; - bytes[--bytesIndex] = (byte) mag; - bytes[--bytesIndex] = (byte)(mag >> 8); - bytes[--bytesIndex] = (byte)(mag >> 16); - bytes[--bytesIndex] = (byte)(mag >> 24); - } - - uint lastMag = (uint) magnitude[0]; - while (lastMag > byte.MaxValue) - { - bytes[--bytesIndex] = (byte) lastMag; - lastMag >>= 8; - } - - bytes[--bytesIndex] = (byte) lastMag; - } - else // sign < 0 - { - bool carry = true; - - while (magIndex > 1) - { - uint mag = ~((uint) magnitude[--magIndex]); - - if (carry) - { - carry = (++mag == uint.MinValue); - } - - bytes[--bytesIndex] = (byte) mag; - bytes[--bytesIndex] = (byte)(mag >> 8); - bytes[--bytesIndex] = (byte)(mag >> 16); - bytes[--bytesIndex] = (byte)(mag >> 24); - } - - uint lastMag = (uint) magnitude[0]; - - if (carry) - { - // Never wraps because magnitude[0] != 0 - --lastMag; - } - - while (lastMag > byte.MaxValue) - { - bytes[--bytesIndex] = (byte) ~lastMag; - lastMag >>= 8; - } - - bytes[--bytesIndex] = (byte) ~lastMag; - - if (bytesIndex > 0) - { - bytes[--bytesIndex] = byte.MaxValue; - } - } - - return bytes; - } - - public override string ToString() - { - return ToString(10); - } - - public string ToString(int radix) - { - // TODO Make this method work for other radices (ideally 2 <= radix <= 36 as in Java) - - switch (radix) - { - case 2: - case 8: - case 10: - case 16: - break; - default: - throw new FormatException("Only bases 2, 8, 10, 16 are allowed"); - } - - // NB: Can only happen to internally managed instances - if (magnitude == null) - return "null"; - - if (sign == 0) - return "0"; - - - // NOTE: This *should* be unnecessary, since the magnitude *should* never have leading zero digits - int firstNonZero = 0; - while (firstNonZero < magnitude.Length) - { - if (magnitude[firstNonZero] != 0) - { - break; - } - ++firstNonZero; - } - - if (firstNonZero == magnitude.Length) - { - return "0"; - } - - - StringBuilder sb = new StringBuilder(); - if (sign == -1) - { - sb.Append('-'); - } - - switch (radix) - { - case 2: - { - int pos = firstNonZero; - sb.Append(Convert.ToString(magnitude[pos], 2)); - while (++pos < magnitude.Length) - { - AppendZeroExtendedString(sb, Convert.ToString(magnitude[pos], 2), 32); - } - break; - } - case 8: - { - int mask = (1 << 30) - 1; - BigInteger u = this.Abs(); - int bits = u.BitLength; - IList S = Platform.CreateArrayList(); - while (bits > 30) - { - S.Add(Convert.ToString(u.IntValue & mask, 8)); - u = u.ShiftRight(30); - bits -= 30; - } - sb.Append(Convert.ToString(u.IntValue, 8)); - for (int i = S.Count - 1; i >= 0; --i) - { - AppendZeroExtendedString(sb, (string)S[i], 10); - } - break; - } - case 16: - { - int pos = firstNonZero; - sb.Append(Convert.ToString(magnitude[pos], 16)); - while (++pos < magnitude.Length) - { - AppendZeroExtendedString(sb, Convert.ToString(magnitude[pos], 16), 8); - } - break; - } - // TODO This could work for other radices if there is an alternative to Convert.ToString method - //default: - case 10: - { - BigInteger q = this.Abs(); - if (q.BitLength < 64) - { - sb.Append(Convert.ToString(q.LongValue, radix)); - break; - } - - // Based on algorithm 1a from chapter 4.4 in Seminumerical Algorithms (Knuth) - - // Work out the largest power of 'rdx' that is a positive 64-bit integer - // TODO possibly cache power/exponent against radix? - long limit = Int64.MaxValue / radix; - long power = radix; - int exponent = 1; - while (power <= limit) - { - power *= radix; - ++exponent; - } - - BigInteger bigPower = BigInteger.ValueOf(power); - - IList S = Platform.CreateArrayList(); - while (q.CompareTo(bigPower) >= 0) - { - BigInteger[] qr = q.DivideAndRemainder(bigPower); - S.Add(Convert.ToString(qr[1].LongValue, radix)); - q = qr[0]; - } - - sb.Append(Convert.ToString(q.LongValue, radix)); - for (int i = S.Count - 1; i >= 0; --i) - { - AppendZeroExtendedString(sb, (string)S[i], exponent); - } - break; - } - } - - return sb.ToString(); - } - - private static void AppendZeroExtendedString(StringBuilder sb, string s, int minLength) - { - for (int len = s.Length; len < minLength; ++len) - { - sb.Append('0'); - } - sb.Append(s); - } - - private static BigInteger CreateUValueOf( - ulong value) - { - int msw = (int)(value >> 32); - int lsw = (int)value; - - if (msw != 0) - return new BigInteger(1, new int[] { msw, lsw }, false); - - if (lsw != 0) - { - BigInteger n = new BigInteger(1, new int[] { lsw }, false); - // Check for a power of two - if ((lsw & -lsw) == lsw) - { - n.nBits = 1; - } - return n; - } - - return Zero; - } - - private static BigInteger CreateValueOf( - long value) - { - if (value < 0) - { - if (value == long.MinValue) - return CreateValueOf(~value).Not(); - - return CreateValueOf(-value).Negate(); - } - - return CreateUValueOf((ulong)value); - } - - public static BigInteger ValueOf( - long value) - { - if (value >= 0 && value < SMALL_CONSTANTS.Length) - { - return SMALL_CONSTANTS[value]; - } - - return CreateValueOf(value); - } - - public int GetLowestSetBit() - { - if (this.sign == 0) - return -1; - - return GetLowestSetBitMaskFirst(-1); - } - - private int GetLowestSetBitMaskFirst(int firstWordMask) - { - int w = magnitude.Length, offset = 0; - - uint word = (uint)(magnitude[--w] & firstWordMask); - Debug.Assert(magnitude[0] != 0); - - while (word == 0) - { - word = (uint)magnitude[--w]; - offset += 32; - } - - while ((word & 0xFF) == 0) - { - word >>= 8; - offset += 8; - } - - while ((word & 1) == 0) - { - word >>= 1; - ++offset; - } - - return offset; - } - - public bool TestBit( - int n) - { - if (n < 0) - throw new ArithmeticException("Bit position must not be negative"); - - if (sign < 0) - return !Not().TestBit(n); - - int wordNum = n / 32; - if (wordNum >= magnitude.Length) - return false; - - int word = magnitude[magnitude.Length - 1 - wordNum]; - return ((word >> (n % 32)) & 1) > 0; - } - - public BigInteger Or( - BigInteger value) - { - if (this.sign == 0) - return value; - - if (value.sign == 0) - return this; - - int[] aMag = this.sign > 0 - ? this.magnitude - : Add(One).magnitude; - - int[] bMag = value.sign > 0 - ? value.magnitude - : value.Add(One).magnitude; - - bool resultNeg = sign < 0 || value.sign < 0; - int resultLength = System.Math.Max(aMag.Length, bMag.Length); - int[] resultMag = new int[resultLength]; - - int aStart = resultMag.Length - aMag.Length; - int bStart = resultMag.Length - bMag.Length; - - for (int i = 0; i < resultMag.Length; ++i) - { - int aWord = i >= aStart ? aMag[i - aStart] : 0; - int bWord = i >= bStart ? bMag[i - bStart] : 0; - - if (this.sign < 0) - { - aWord = ~aWord; - } - - if (value.sign < 0) - { - bWord = ~bWord; - } - - resultMag[i] = aWord | bWord; - - if (resultNeg) - { - resultMag[i] = ~resultMag[i]; - } - } - - BigInteger result = new BigInteger(1, resultMag, true); - - // TODO Optimise this case - if (resultNeg) - { - result = result.Not(); - } - - return result; - } - - public BigInteger Xor( - BigInteger value) - { - if (this.sign == 0) - return value; - - if (value.sign == 0) - return this; - - int[] aMag = this.sign > 0 - ? this.magnitude - : Add(One).magnitude; - - int[] bMag = value.sign > 0 - ? value.magnitude - : value.Add(One).magnitude; - - // TODO Can just replace with sign != value.sign? - bool resultNeg = (sign < 0 && value.sign >= 0) || (sign >= 0 && value.sign < 0); - int resultLength = System.Math.Max(aMag.Length, bMag.Length); - int[] resultMag = new int[resultLength]; - - int aStart = resultMag.Length - aMag.Length; - int bStart = resultMag.Length - bMag.Length; - - for (int i = 0; i < resultMag.Length; ++i) - { - int aWord = i >= aStart ? aMag[i - aStart] : 0; - int bWord = i >= bStart ? bMag[i - bStart] : 0; - - if (this.sign < 0) - { - aWord = ~aWord; - } - - if (value.sign < 0) - { - bWord = ~bWord; - } - - resultMag[i] = aWord ^ bWord; - - if (resultNeg) - { - resultMag[i] = ~resultMag[i]; - } - } - - BigInteger result = new BigInteger(1, resultMag, true); - - // TODO Optimise this case - if (resultNeg) - { - result = result.Not(); - } - - return result; - } - - public BigInteger SetBit( - int n) - { - if (n < 0) - throw new ArithmeticException("Bit address less than zero"); - - if (TestBit(n)) - return this; - - // TODO Handle negative values and zero - if (sign > 0 && n < (BitLength - 1)) - return FlipExistingBit(n); - - return Or(One.ShiftLeft(n)); - } - - public BigInteger ClearBit( - int n) - { - if (n < 0) - throw new ArithmeticException("Bit address less than zero"); - - if (!TestBit(n)) - return this; - - // TODO Handle negative values - if (sign > 0 && n < (BitLength - 1)) - return FlipExistingBit(n); - - return AndNot(One.ShiftLeft(n)); - } - - public BigInteger FlipBit( - int n) - { - if (n < 0) - throw new ArithmeticException("Bit address less than zero"); - - // TODO Handle negative values and zero - if (sign > 0 && n < (BitLength - 1)) - return FlipExistingBit(n); - - return Xor(One.ShiftLeft(n)); - } - - private BigInteger FlipExistingBit( - int n) - { - Debug.Assert(sign > 0); - Debug.Assert(n >= 0); - Debug.Assert(n < BitLength - 1); - - int[] mag = (int[]) this.magnitude.Clone(); - mag[mag.Length - 1 - (n >> 5)] ^= (1 << (n & 31)); // Flip bit - //mag[mag.Length - 1 - (n / 32)] ^= (1 << (n % 32)); - return new BigInteger(this.sign, mag, false); - } - } -} diff --git a/bc-sharp-crypto/src/math/Primes.cs b/bc-sharp-crypto/src/math/Primes.cs deleted file mode 100644 index fb279f1..0000000 --- a/bc-sharp-crypto/src/math/Primes.cs +++ /dev/null @@ -1,629 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math -{ - /** - * Utility methods for generating primes and testing for primality. - */ - public abstract class Primes - { - public static readonly int SmallFactorLimit = 211; - - private static readonly BigInteger One = BigInteger.One; - private static readonly BigInteger Two = BigInteger.Two; - private static readonly BigInteger Three = BigInteger.Three; - - /** - * Used to return the output from the - * {@linkplain Primes#enhancedMRProbablePrimeTest(BigInteger, SecureRandom, int) Enhanced - * Miller-Rabin Probabilistic Primality Test} - */ - public class MROutput - { - internal static MROutput ProbablyPrime() - { - return new MROutput(false, null); - } - - internal static MROutput ProvablyCompositeWithFactor(BigInteger factor) - { - return new MROutput(true, factor); - } - - internal static MROutput ProvablyCompositeNotPrimePower() - { - return new MROutput(true, null); - } - - private readonly bool mProvablyComposite; - private readonly BigInteger mFactor; - - private MROutput(bool provablyComposite, BigInteger factor) - { - this.mProvablyComposite = provablyComposite; - this.mFactor = factor; - } - - public BigInteger Factor - { - get { return mFactor; } - } - - public bool IsProvablyComposite - { - get { return mProvablyComposite; } - } - - public bool IsNotPrimePower - { - get { return mProvablyComposite && mFactor == null; } - } - } - - /** - * Used to return the output from the {@linkplain Primes#generateSTRandomPrime(Digest, int, byte[]) Shawe-Taylor Random_Prime Routine} - */ - public class STOutput - { - private readonly BigInteger mPrime; - private readonly byte[] mPrimeSeed; - private readonly int mPrimeGenCounter; - - internal STOutput(BigInteger prime, byte[] primeSeed, int primeGenCounter) - { - this.mPrime = prime; - this.mPrimeSeed = primeSeed; - this.mPrimeGenCounter = primeGenCounter; - } - - public BigInteger Prime - { - get { return mPrime; } - } - - public byte[] PrimeSeed - { - get { return mPrimeSeed; } - } - - public int PrimeGenCounter - { - get { return mPrimeGenCounter; } - } - } - - /** - * FIPS 186-4 C.6 Shawe-Taylor Random_Prime Routine - * - * Construct a provable prime number using a hash function. - * - * @param hash - * the {@link Digest} instance to use (as "Hash()"). Cannot be null. - * @param length - * the length (in bits) of the prime to be generated. Must be at least 2. - * @param inputSeed - * the seed to be used for the generation of the requested prime. Cannot be null or - * empty. - * @return an {@link STOutput} instance containing the requested prime. - */ - public static STOutput GenerateSTRandomPrime(IDigest hash, int length, byte[] inputSeed) - { - if (hash == null) - throw new ArgumentNullException("hash"); - if (length < 2) - throw new ArgumentException("must be >= 2", "length"); - if (inputSeed == null) - throw new ArgumentNullException("inputSeed"); - if (inputSeed.Length == 0) - throw new ArgumentException("cannot be empty", "inputSeed"); - - return ImplSTRandomPrime(hash, length, Arrays.Clone(inputSeed)); - } - - /** - * FIPS 186-4 C.3.2 Enhanced Miller-Rabin Probabilistic Primality Test - * - * Run several iterations of the Miller-Rabin algorithm with randomly-chosen bases. This is an - * alternative to {@link #isMRProbablePrime(BigInteger, SecureRandom, int)} that provides more - * information about a composite candidate, which may be useful when generating or validating - * RSA moduli. - * - * @param candidate - * the {@link BigInteger} instance to test for primality. - * @param random - * the source of randomness to use to choose bases. - * @param iterations - * the number of randomly-chosen bases to perform the test for. - * @return an {@link MROutput} instance that can be further queried for details. - */ - public static MROutput EnhancedMRProbablePrimeTest(BigInteger candidate, SecureRandom random, int iterations) - { - CheckCandidate(candidate, "candidate"); - - if (random == null) - throw new ArgumentNullException("random"); - if (iterations < 1) - throw new ArgumentException("must be > 0", "iterations"); - - if (candidate.BitLength == 2) - return MROutput.ProbablyPrime(); - - if (!candidate.TestBit(0)) - return MROutput.ProvablyCompositeWithFactor(Two); - - BigInteger w = candidate; - BigInteger wSubOne = candidate.Subtract(One); - BigInteger wSubTwo = candidate.Subtract(Two); - - int a = wSubOne.GetLowestSetBit(); - BigInteger m = wSubOne.ShiftRight(a); - - for (int i = 0; i < iterations; ++i) - { - BigInteger b = BigIntegers.CreateRandomInRange(Two, wSubTwo, random); - BigInteger g = b.Gcd(w); - - if (g.CompareTo(One) > 0) - return MROutput.ProvablyCompositeWithFactor(g); - - BigInteger z = b.ModPow(m, w); - - if (z.Equals(One) || z.Equals(wSubOne)) - continue; - - bool primeToBase = false; - - BigInteger x = z; - for (int j = 1; j < a; ++j) - { - z = z.ModPow(Two, w); - - if (z.Equals(wSubOne)) - { - primeToBase = true; - break; - } - - if (z.Equals(One)) - break; - - x = z; - } - - if (!primeToBase) - { - if (!z.Equals(One)) - { - x = z; - z = z.ModPow(Two, w); - - if (!z.Equals(One)) - { - x = z; - } - } - - g = x.Subtract(One).Gcd(w); - - if (g.CompareTo(One) > 0) - return MROutput.ProvablyCompositeWithFactor(g); - - return MROutput.ProvablyCompositeNotPrimePower(); - } - } - - return MROutput.ProbablyPrime(); - } - - /** - * A fast check for small divisors, up to some implementation-specific limit. - * - * @param candidate - * the {@link BigInteger} instance to test for division by small factors. - * - * @return true if the candidate is found to have any small factors, - * false otherwise. - */ - public static bool HasAnySmallFactors(BigInteger candidate) - { - CheckCandidate(candidate, "candidate"); - - return ImplHasAnySmallFactors(candidate); - } - - /** - * FIPS 186-4 C.3.1 Miller-Rabin Probabilistic Primality Test - * - * Run several iterations of the Miller-Rabin algorithm with randomly-chosen bases. - * - * @param candidate - * the {@link BigInteger} instance to test for primality. - * @param random - * the source of randomness to use to choose bases. - * @param iterations - * the number of randomly-chosen bases to perform the test for. - * @return false if any witness to compositeness is found amongst the chosen bases - * (so candidate is definitely NOT prime), or else true - * (indicating primality with some probability dependent on the number of iterations - * that were performed). - */ - public static bool IsMRProbablePrime(BigInteger candidate, SecureRandom random, int iterations) - { - CheckCandidate(candidate, "candidate"); - - if (random == null) - throw new ArgumentException("cannot be null", "random"); - if (iterations < 1) - throw new ArgumentException("must be > 0", "iterations"); - - if (candidate.BitLength == 2) - return true; - if (!candidate.TestBit(0)) - return false; - - BigInteger w = candidate; - BigInteger wSubOne = candidate.Subtract(One); - BigInteger wSubTwo = candidate.Subtract(Two); - - int a = wSubOne.GetLowestSetBit(); - BigInteger m = wSubOne.ShiftRight(a); - - for (int i = 0; i < iterations; ++i) - { - BigInteger b = BigIntegers.CreateRandomInRange(Two, wSubTwo, random); - - if (!ImplMRProbablePrimeToBase(w, wSubOne, m, a, b)) - return false; - } - - return true; - } - - /** - * FIPS 186-4 C.3.1 Miller-Rabin Probabilistic Primality Test (to a fixed base). - * - * Run a single iteration of the Miller-Rabin algorithm against the specified base. - * - * @param candidate - * the {@link BigInteger} instance to test for primality. - * @param baseValue - * the base value to use for this iteration. - * @return false if the specified base is a witness to compositeness (so - * candidate is definitely NOT prime), or else true. - */ - public static bool IsMRProbablePrimeToBase(BigInteger candidate, BigInteger baseValue) - { - CheckCandidate(candidate, "candidate"); - CheckCandidate(baseValue, "baseValue"); - - if (baseValue.CompareTo(candidate.Subtract(One)) >= 0) - throw new ArgumentException("must be < ('candidate' - 1)", "baseValue"); - - if (candidate.BitLength == 2) - return true; - - BigInteger w = candidate; - BigInteger wSubOne = candidate.Subtract(One); - - int a = wSubOne.GetLowestSetBit(); - BigInteger m = wSubOne.ShiftRight(a); - - return ImplMRProbablePrimeToBase(w, wSubOne, m, a, baseValue); - } - - private static void CheckCandidate(BigInteger n, string name) - { - if (n == null || n.SignValue < 1 || n.BitLength < 2) - throw new ArgumentException("must be non-null and >= 2", name); - } - - private static bool ImplHasAnySmallFactors(BigInteger x) - { - /* - * Bundle trial divisors into ~32-bit moduli then use fast tests on the ~32-bit remainders. - */ - int m = 2 * 3 * 5 * 7 * 11 * 13 * 17 * 19 * 23; - int r = x.Mod(BigInteger.ValueOf(m)).IntValue; - if ((r % 2) == 0 || (r % 3) == 0 || (r % 5) == 0 || (r % 7) == 0 || (r % 11) == 0 || (r % 13) == 0 - || (r % 17) == 0 || (r % 19) == 0 || (r % 23) == 0) - { - return true; - } - - m = 29 * 31 * 37 * 41 * 43; - r = x.Mod(BigInteger.ValueOf(m)).IntValue; - if ((r % 29) == 0 || (r % 31) == 0 || (r % 37) == 0 || (r % 41) == 0 || (r % 43) == 0) - { - return true; - } - - m = 47 * 53 * 59 * 61 * 67; - r = x.Mod(BigInteger.ValueOf(m)).IntValue; - if ((r % 47) == 0 || (r % 53) == 0 || (r % 59) == 0 || (r % 61) == 0 || (r % 67) == 0) - { - return true; - } - - m = 71 * 73 * 79 * 83; - r = x.Mod(BigInteger.ValueOf(m)).IntValue; - if ((r % 71) == 0 || (r % 73) == 0 || (r % 79) == 0 || (r % 83) == 0) - { - return true; - } - - m = 89 * 97 * 101 * 103; - r = x.Mod(BigInteger.ValueOf(m)).IntValue; - if ((r % 89) == 0 || (r % 97) == 0 || (r % 101) == 0 || (r % 103) == 0) - { - return true; - } - - m = 107 * 109 * 113 * 127; - r = x.Mod(BigInteger.ValueOf(m)).IntValue; - if ((r % 107) == 0 || (r % 109) == 0 || (r % 113) == 0 || (r % 127) == 0) - { - return true; - } - - m = 131 * 137 * 139 * 149; - r = x.Mod(BigInteger.ValueOf(m)).IntValue; - if ((r % 131) == 0 || (r % 137) == 0 || (r % 139) == 0 || (r % 149) == 0) - { - return true; - } - - m = 151 * 157 * 163 * 167; - r = x.Mod(BigInteger.ValueOf(m)).IntValue; - if ((r % 151) == 0 || (r % 157) == 0 || (r % 163) == 0 || (r % 167) == 0) - { - return true; - } - - m = 173 * 179 * 181 * 191; - r = x.Mod(BigInteger.ValueOf(m)).IntValue; - if ((r % 173) == 0 || (r % 179) == 0 || (r % 181) == 0 || (r % 191) == 0) - { - return true; - } - - m = 193 * 197 * 199 * 211; - r = x.Mod(BigInteger.ValueOf(m)).IntValue; - if ((r % 193) == 0 || (r % 197) == 0 || (r % 199) == 0 || (r % 211) == 0) - { - return true; - } - - /* - * NOTE: Unit tests depend on SMALL_FACTOR_LIMIT matching the - * highest small factor tested here. - */ - return false; - } - - private static bool ImplMRProbablePrimeToBase(BigInteger w, BigInteger wSubOne, BigInteger m, int a, BigInteger b) - { - BigInteger z = b.ModPow(m, w); - - if (z.Equals(One) || z.Equals(wSubOne)) - return true; - - bool result = false; - - for (int j = 1; j < a; ++j) - { - z = z.ModPow(Two, w); - - if (z.Equals(wSubOne)) - { - result = true; - break; - } - - if (z.Equals(One)) - return false; - } - - return result; - } - - private static STOutput ImplSTRandomPrime(IDigest d, int length, byte[] primeSeed) - { - int dLen = d.GetDigestSize(); - - if (length < 33) - { - int primeGenCounter = 0; - - byte[] c0 = new byte[dLen]; - byte[] c1 = new byte[dLen]; - - for (;;) - { - Hash(d, primeSeed, c0, 0); - Inc(primeSeed, 1); - - Hash(d, primeSeed, c1, 0); - Inc(primeSeed, 1); - - uint c = Extract32(c0) ^ Extract32(c1); - c &= (uint.MaxValue >> (32 - length)); - c |= (1U << (length - 1)) | 1U; - - ++primeGenCounter; - - if (IsPrime32(c)) - { - return new STOutput(BigInteger.ValueOf((long)c), primeSeed, primeGenCounter); - } - - if (primeGenCounter > (4 * length)) - { - throw new InvalidOperationException("Too many iterations in Shawe-Taylor Random_Prime Routine"); - } - } - } - - STOutput rec = ImplSTRandomPrime(d, (length + 3)/2, primeSeed); - - { - BigInteger c0 = rec.Prime; - primeSeed = rec.PrimeSeed; - int primeGenCounter = rec.PrimeGenCounter; - - int outlen = 8 * dLen; - int iterations = (length - 1)/outlen; - - int oldCounter = primeGenCounter; - - BigInteger x = HashGen(d, primeSeed, iterations + 1); - x = x.Mod(One.ShiftLeft(length - 1)).SetBit(length - 1); - - BigInteger c0x2 = c0.ShiftLeft(1); - BigInteger tx2 = x.Subtract(One).Divide(c0x2).Add(One).ShiftLeft(1); - int dt = 0; - - BigInteger c = tx2.Multiply(c0).Add(One); - - /* - * TODO Since the candidate primes are generated by constant steps ('c0x2'), - * sieving could be used here in place of the 'HasAnySmallFactors' approach. - */ - for (;;) - { - if (c.BitLength > length) - { - tx2 = One.ShiftLeft(length - 1).Subtract(One).Divide(c0x2).Add(One).ShiftLeft(1); - c = tx2.Multiply(c0).Add(One); - } - - ++primeGenCounter; - - /* - * This is an optimization of the original algorithm, using trial division to screen out - * many non-primes quickly. - * - * NOTE: 'primeSeed' is still incremented as if we performed the full check! - */ - if (!ImplHasAnySmallFactors(c)) - { - BigInteger a = HashGen(d, primeSeed, iterations + 1); - a = a.Mod(c.Subtract(Three)).Add(Two); - - tx2 = tx2.Add(BigInteger.ValueOf(dt)); - dt = 0; - - BigInteger z = a.ModPow(tx2, c); - - if (c.Gcd(z.Subtract(One)).Equals(One) && z.ModPow(c0, c).Equals(One)) - { - return new STOutput(c, primeSeed, primeGenCounter); - } - } - else - { - Inc(primeSeed, iterations + 1); - } - - if (primeGenCounter >= ((4 * length) + oldCounter)) - { - throw new InvalidOperationException("Too many iterations in Shawe-Taylor Random_Prime Routine"); - } - - dt += 2; - c = c.Add(c0x2); - } - } - } - - private static uint Extract32(byte[] bs) - { - uint result = 0; - - int count = System.Math.Min(4, bs.Length); - for (int i = 0; i < count; ++i) - { - uint b = bs[bs.Length - (i + 1)]; - result |= (b << (8 * i)); - } - - return result; - } - - private static void Hash(IDigest d, byte[] input, byte[] output, int outPos) - { - d.BlockUpdate(input, 0, input.Length); - d.DoFinal(output, outPos); - } - - private static BigInteger HashGen(IDigest d, byte[] seed, int count) - { - int dLen = d.GetDigestSize(); - int pos = count * dLen; - byte[] buf = new byte[pos]; - for (int i = 0; i < count; ++i) - { - pos -= dLen; - Hash(d, seed, buf, pos); - Inc(seed, 1); - } - return new BigInteger(1, buf); - } - - private static void Inc(byte[] seed, int c) - { - int pos = seed.Length; - while (c > 0 && --pos >= 0) - { - c += seed[pos]; - seed[pos] = (byte)c; - c >>= 8; - } - } - - private static bool IsPrime32(uint x) - { - /* - * Use wheel factorization with 2, 3, 5 to select trial divisors. - */ - - if (x <= 5) - { - return x == 2 || x == 3 || x == 5; - } - - if ((x & 1) == 0 || (x % 3) == 0 || (x % 5) == 0) - { - return false; - } - - uint[] ds = new uint[]{ 1, 7, 11, 13, 17, 19, 23, 29 }; - uint b = 0; - for (int pos = 1; ; pos = 0) - { - /* - * Trial division by wheel-selected divisors - */ - while (pos < ds.Length) - { - uint d = b + ds[pos]; - if (x % d == 0) - { - return x < 30; - } - ++pos; - } - - b += 30; - - if ((b >> 16 != 0) || (b * b >= x)) - { - return true; - } - } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/ECAlgorithms.cs b/bc-sharp-crypto/src/math/ec/ECAlgorithms.cs deleted file mode 100644 index 5d60de4..0000000 --- a/bc-sharp-crypto/src/math/ec/ECAlgorithms.cs +++ /dev/null @@ -1,479 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.EC.Endo; -using Org.BouncyCastle.Math.EC.Multiplier; -using Org.BouncyCastle.Math.Field; - -namespace Org.BouncyCastle.Math.EC -{ - public class ECAlgorithms - { - public static bool IsF2mCurve(ECCurve c) - { - return IsF2mField(c.Field); - } - - public static bool IsF2mField(IFiniteField field) - { - return field.Dimension > 1 && field.Characteristic.Equals(BigInteger.Two) - && field is IPolynomialExtensionField; - } - - public static bool IsFpCurve(ECCurve c) - { - return IsFpField(c.Field); - } - - public static bool IsFpField(IFiniteField field) - { - return field.Dimension == 1; - } - - public static ECPoint SumOfMultiplies(ECPoint[] ps, BigInteger[] ks) - { - if (ps == null || ks == null || ps.Length != ks.Length || ps.Length < 1) - throw new ArgumentException("point and scalar arrays should be non-null, and of equal, non-zero, length"); - - int count = ps.Length; - switch (count) - { - case 1: - return ps[0].Multiply(ks[0]); - case 2: - return SumOfTwoMultiplies(ps[0], ks[0], ps[1], ks[1]); - default: - break; - } - - ECPoint p = ps[0]; - ECCurve c = p.Curve; - - ECPoint[] imported = new ECPoint[count]; - imported[0] = p; - for (int i = 1; i < count; ++i) - { - imported[i] = ImportPoint(c, ps[i]); - } - - GlvEndomorphism glvEndomorphism = c.GetEndomorphism() as GlvEndomorphism; - if (glvEndomorphism != null) - { - return ValidatePoint(ImplSumOfMultipliesGlv(imported, ks, glvEndomorphism)); - } - - return ValidatePoint(ImplSumOfMultiplies(imported, ks)); - } - - public static ECPoint SumOfTwoMultiplies(ECPoint P, BigInteger a, ECPoint Q, BigInteger b) - { - ECCurve cp = P.Curve; - Q = ImportPoint(cp, Q); - - // Point multiplication for Koblitz curves (using WTNAF) beats Shamir's trick - { - AbstractF2mCurve f2mCurve = cp as AbstractF2mCurve; - if (f2mCurve != null && f2mCurve.IsKoblitz) - { - return ValidatePoint(P.Multiply(a).Add(Q.Multiply(b))); - } - } - - GlvEndomorphism glvEndomorphism = cp.GetEndomorphism() as GlvEndomorphism; - if (glvEndomorphism != null) - { - return ValidatePoint( - ImplSumOfMultipliesGlv(new ECPoint[] { P, Q }, new BigInteger[] { a, b }, glvEndomorphism)); - } - - return ValidatePoint(ImplShamirsTrickWNaf(P, a, Q, b)); - } - - /* - * "Shamir's Trick", originally due to E. G. Straus - * (Addition chains of vectors. American Mathematical Monthly, - * 71(7):806-808, Aug./Sept. 1964) - * - * Input: The points P, Q, scalar k = (km?, ... , k1, k0) - * and scalar l = (lm?, ... , l1, l0). - * Output: R = k * P + l * Q. - * 1: Z <- P + Q - * 2: R <- O - * 3: for i from m-1 down to 0 do - * 4: R <- R + R {point doubling} - * 5: if (ki = 1) and (li = 0) then R <- R + P end if - * 6: if (ki = 0) and (li = 1) then R <- R + Q end if - * 7: if (ki = 1) and (li = 1) then R <- R + Z end if - * 8: end for - * 9: return R - */ - public static ECPoint ShamirsTrick(ECPoint P, BigInteger k, ECPoint Q, BigInteger l) - { - ECCurve cp = P.Curve; - Q = ImportPoint(cp, Q); - - return ValidatePoint(ImplShamirsTrickJsf(P, k, Q, l)); - } - - public static ECPoint ImportPoint(ECCurve c, ECPoint p) - { - ECCurve cp = p.Curve; - if (!c.Equals(cp)) - throw new ArgumentException("Point must be on the same curve"); - - return c.ImportPoint(p); - } - - public static void MontgomeryTrick(ECFieldElement[] zs, int off, int len) - { - MontgomeryTrick(zs, off, len, null); - } - - public static void MontgomeryTrick(ECFieldElement[] zs, int off, int len, ECFieldElement scale) - { - /* - * Uses the "Montgomery Trick" to invert many field elements, with only a single actual - * field inversion. See e.g. the paper: - * "Fast Multi-scalar Multiplication Methods on Elliptic Curves with Precomputation Strategy Using Montgomery Trick" - * by Katsuyuki Okeya, Kouichi Sakurai. - */ - - ECFieldElement[] c = new ECFieldElement[len]; - c[0] = zs[off]; - - int i = 0; - while (++i < len) - { - c[i] = c[i - 1].Multiply(zs[off + i]); - } - - --i; - - if (scale != null) - { - c[i] = c[i].Multiply(scale); - } - - ECFieldElement u = c[i].Invert(); - - while (i > 0) - { - int j = off + i--; - ECFieldElement tmp = zs[j]; - zs[j] = c[i].Multiply(u); - u = u.Multiply(tmp); - } - - zs[off] = u; - } - - /** - * Simple shift-and-add multiplication. Serves as reference implementation - * to verify (possibly faster) implementations, and for very small scalars. - * - * @param p - * The point to multiply. - * @param k - * The multiplier. - * @return The result of the point multiplication kP. - */ - public static ECPoint ReferenceMultiply(ECPoint p, BigInteger k) - { - BigInteger x = k.Abs(); - ECPoint q = p.Curve.Infinity; - int t = x.BitLength; - if (t > 0) - { - if (x.TestBit(0)) - { - q = p; - } - for (int i = 1; i < t; i++) - { - p = p.Twice(); - if (x.TestBit(i)) - { - q = q.Add(p); - } - } - } - return k.SignValue < 0 ? q.Negate() : q; - } - - public static ECPoint ValidatePoint(ECPoint p) - { - if (!p.IsValid()) - throw new ArgumentException("Invalid point", "p"); - - return p; - } - - internal static ECPoint ImplShamirsTrickJsf(ECPoint P, BigInteger k, ECPoint Q, BigInteger l) - { - ECCurve curve = P.Curve; - ECPoint infinity = curve.Infinity; - - // TODO conjugate co-Z addition (ZADDC) can return both of these - ECPoint PaddQ = P.Add(Q); - ECPoint PsubQ = P.Subtract(Q); - - ECPoint[] points = new ECPoint[] { Q, PsubQ, P, PaddQ }; - curve.NormalizeAll(points); - - ECPoint[] table = new ECPoint[] { - points[3].Negate(), points[2].Negate(), points[1].Negate(), - points[0].Negate(), infinity, points[0], - points[1], points[2], points[3] }; - - byte[] jsf = WNafUtilities.GenerateJsf(k, l); - - ECPoint R = infinity; - - int i = jsf.Length; - while (--i >= 0) - { - int jsfi = jsf[i]; - - // NOTE: The shifting ensures the sign is extended correctly - int kDigit = ((jsfi << 24) >> 28), lDigit = ((jsfi << 28) >> 28); - - int index = 4 + (kDigit * 3) + lDigit; - R = R.TwicePlus(table[index]); - } - - return R; - } - - internal static ECPoint ImplShamirsTrickWNaf(ECPoint P, BigInteger k, - ECPoint Q, BigInteger l) - { - bool negK = k.SignValue < 0, negL = l.SignValue < 0; - - k = k.Abs(); - l = l.Abs(); - - int widthP = System.Math.Max(2, System.Math.Min(16, WNafUtilities.GetWindowSize(k.BitLength))); - int widthQ = System.Math.Max(2, System.Math.Min(16, WNafUtilities.GetWindowSize(l.BitLength))); - - WNafPreCompInfo infoP = WNafUtilities.Precompute(P, widthP, true); - WNafPreCompInfo infoQ = WNafUtilities.Precompute(Q, widthQ, true); - - ECPoint[] preCompP = negK ? infoP.PreCompNeg : infoP.PreComp; - ECPoint[] preCompQ = negL ? infoQ.PreCompNeg : infoQ.PreComp; - ECPoint[] preCompNegP = negK ? infoP.PreComp : infoP.PreCompNeg; - ECPoint[] preCompNegQ = negL ? infoQ.PreComp : infoQ.PreCompNeg; - - byte[] wnafP = WNafUtilities.GenerateWindowNaf(widthP, k); - byte[] wnafQ = WNafUtilities.GenerateWindowNaf(widthQ, l); - - return ImplShamirsTrickWNaf(preCompP, preCompNegP, wnafP, preCompQ, preCompNegQ, wnafQ); - } - - internal static ECPoint ImplShamirsTrickWNaf(ECPoint P, BigInteger k, ECPointMap pointMapQ, BigInteger l) - { - bool negK = k.SignValue < 0, negL = l.SignValue < 0; - - k = k.Abs(); - l = l.Abs(); - - int width = System.Math.Max(2, System.Math.Min(16, WNafUtilities.GetWindowSize(System.Math.Max(k.BitLength, l.BitLength)))); - - ECPoint Q = WNafUtilities.MapPointWithPrecomp(P, width, true, pointMapQ); - WNafPreCompInfo infoP = WNafUtilities.GetWNafPreCompInfo(P); - WNafPreCompInfo infoQ = WNafUtilities.GetWNafPreCompInfo(Q); - - ECPoint[] preCompP = negK ? infoP.PreCompNeg : infoP.PreComp; - ECPoint[] preCompQ = negL ? infoQ.PreCompNeg : infoQ.PreComp; - ECPoint[] preCompNegP = negK ? infoP.PreComp : infoP.PreCompNeg; - ECPoint[] preCompNegQ = negL ? infoQ.PreComp : infoQ.PreCompNeg; - - byte[] wnafP = WNafUtilities.GenerateWindowNaf(width, k); - byte[] wnafQ = WNafUtilities.GenerateWindowNaf(width, l); - - return ImplShamirsTrickWNaf(preCompP, preCompNegP, wnafP, preCompQ, preCompNegQ, wnafQ); - } - - private static ECPoint ImplShamirsTrickWNaf(ECPoint[] preCompP, ECPoint[] preCompNegP, byte[] wnafP, - ECPoint[] preCompQ, ECPoint[] preCompNegQ, byte[] wnafQ) - { - int len = System.Math.Max(wnafP.Length, wnafQ.Length); - - ECCurve curve = preCompP[0].Curve; - ECPoint infinity = curve.Infinity; - - ECPoint R = infinity; - int zeroes = 0; - - for (int i = len - 1; i >= 0; --i) - { - int wiP = i < wnafP.Length ? (int)(sbyte)wnafP[i] : 0; - int wiQ = i < wnafQ.Length ? (int)(sbyte)wnafQ[i] : 0; - - if ((wiP | wiQ) == 0) - { - ++zeroes; - continue; - } - - ECPoint r = infinity; - if (wiP != 0) - { - int nP = System.Math.Abs(wiP); - ECPoint[] tableP = wiP < 0 ? preCompNegP : preCompP; - r = r.Add(tableP[nP >> 1]); - } - if (wiQ != 0) - { - int nQ = System.Math.Abs(wiQ); - ECPoint[] tableQ = wiQ < 0 ? preCompNegQ : preCompQ; - r = r.Add(tableQ[nQ >> 1]); - } - - if (zeroes > 0) - { - R = R.TimesPow2(zeroes); - zeroes = 0; - } - - R = R.TwicePlus(r); - } - - if (zeroes > 0) - { - R = R.TimesPow2(zeroes); - } - - return R; - } - - internal static ECPoint ImplSumOfMultiplies(ECPoint[] ps, BigInteger[] ks) - { - int count = ps.Length; - bool[] negs = new bool[count]; - WNafPreCompInfo[] infos = new WNafPreCompInfo[count]; - byte[][] wnafs = new byte[count][]; - - for (int i = 0; i < count; ++i) - { - BigInteger ki = ks[i]; negs[i] = ki.SignValue < 0; ki = ki.Abs(); - - int width = System.Math.Max(2, System.Math.Min(16, WNafUtilities.GetWindowSize(ki.BitLength))); - infos[i] = WNafUtilities.Precompute(ps[i], width, true); - wnafs[i] = WNafUtilities.GenerateWindowNaf(width, ki); - } - - return ImplSumOfMultiplies(negs, infos, wnafs); - } - - internal static ECPoint ImplSumOfMultipliesGlv(ECPoint[] ps, BigInteger[] ks, GlvEndomorphism glvEndomorphism) - { - BigInteger n = ps[0].Curve.Order; - - int len = ps.Length; - - BigInteger[] abs = new BigInteger[len << 1]; - for (int i = 0, j = 0; i < len; ++i) - { - BigInteger[] ab = glvEndomorphism.DecomposeScalar(ks[i].Mod(n)); - abs[j++] = ab[0]; - abs[j++] = ab[1]; - } - - ECPointMap pointMap = glvEndomorphism.PointMap; - if (glvEndomorphism.HasEfficientPointMap) - { - return ECAlgorithms.ImplSumOfMultiplies(ps, pointMap, abs); - } - - ECPoint[] pqs = new ECPoint[len << 1]; - for (int i = 0, j = 0; i < len; ++i) - { - ECPoint p = ps[i], q = pointMap.Map(p); - pqs[j++] = p; - pqs[j++] = q; - } - - return ECAlgorithms.ImplSumOfMultiplies(pqs, abs); - } - - internal static ECPoint ImplSumOfMultiplies(ECPoint[] ps, ECPointMap pointMap, BigInteger[] ks) - { - int halfCount = ps.Length, fullCount = halfCount << 1; - - bool[] negs = new bool[fullCount]; - WNafPreCompInfo[] infos = new WNafPreCompInfo[fullCount]; - byte[][] wnafs = new byte[fullCount][]; - - for (int i = 0; i < halfCount; ++i) - { - int j0 = i << 1, j1 = j0 + 1; - - BigInteger kj0 = ks[j0]; negs[j0] = kj0.SignValue < 0; kj0 = kj0.Abs(); - BigInteger kj1 = ks[j1]; negs[j1] = kj1.SignValue < 0; kj1 = kj1.Abs(); - - int width = System.Math.Max(2, System.Math.Min(16, WNafUtilities.GetWindowSize(System.Math.Max(kj0.BitLength, kj1.BitLength)))); - - ECPoint P = ps[i], Q = WNafUtilities.MapPointWithPrecomp(P, width, true, pointMap); - infos[j0] = WNafUtilities.GetWNafPreCompInfo(P); - infos[j1] = WNafUtilities.GetWNafPreCompInfo(Q); - wnafs[j0] = WNafUtilities.GenerateWindowNaf(width, kj0); - wnafs[j1] = WNafUtilities.GenerateWindowNaf(width, kj1); - } - - return ImplSumOfMultiplies(negs, infos, wnafs); - } - - private static ECPoint ImplSumOfMultiplies(bool[] negs, WNafPreCompInfo[] infos, byte[][] wnafs) - { - int len = 0, count = wnafs.Length; - for (int i = 0; i < count; ++i) - { - len = System.Math.Max(len, wnafs[i].Length); - } - - ECCurve curve = infos[0].PreComp[0].Curve; - ECPoint infinity = curve.Infinity; - - ECPoint R = infinity; - int zeroes = 0; - - for (int i = len - 1; i >= 0; --i) - { - ECPoint r = infinity; - - for (int j = 0; j < count; ++j) - { - byte[] wnaf = wnafs[j]; - int wi = i < wnaf.Length ? (int)(sbyte)wnaf[i] : 0; - if (wi != 0) - { - int n = System.Math.Abs(wi); - WNafPreCompInfo info = infos[j]; - ECPoint[] table = (wi < 0 == negs[j]) ? info.PreComp : info.PreCompNeg; - r = r.Add(table[n >> 1]); - } - } - - if (r == infinity) - { - ++zeroes; - continue; - } - - if (zeroes > 0) - { - R = R.TimesPow2(zeroes); - zeroes = 0; - } - - R = R.TwicePlus(r); - } - - if (zeroes > 0) - { - R = R.TimesPow2(zeroes); - } - - return R; - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/ECCurve.cs b/bc-sharp-crypto/src/math/ec/ECCurve.cs deleted file mode 100644 index 6ccd97e..0000000 --- a/bc-sharp-crypto/src/math/ec/ECCurve.cs +++ /dev/null @@ -1,1131 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Math.EC.Abc; -using Org.BouncyCastle.Math.EC.Endo; -using Org.BouncyCastle.Math.EC.Multiplier; -using Org.BouncyCastle.Math.Field; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math.EC -{ - /// Base class for an elliptic curve. - public abstract class ECCurve - { - public const int COORD_AFFINE = 0; - public const int COORD_HOMOGENEOUS = 1; - public const int COORD_JACOBIAN = 2; - public const int COORD_JACOBIAN_CHUDNOVSKY = 3; - public const int COORD_JACOBIAN_MODIFIED = 4; - public const int COORD_LAMBDA_AFFINE = 5; - public const int COORD_LAMBDA_PROJECTIVE = 6; - public const int COORD_SKEWED = 7; - - public static int[] GetAllCoordinateSystems() - { - return new int[]{ COORD_AFFINE, COORD_HOMOGENEOUS, COORD_JACOBIAN, COORD_JACOBIAN_CHUDNOVSKY, - COORD_JACOBIAN_MODIFIED, COORD_LAMBDA_AFFINE, COORD_LAMBDA_PROJECTIVE, COORD_SKEWED }; - } - - public class Config - { - protected ECCurve outer; - protected int coord; - protected ECEndomorphism endomorphism; - protected ECMultiplier multiplier; - - internal Config(ECCurve outer, int coord, ECEndomorphism endomorphism, ECMultiplier multiplier) - { - this.outer = outer; - this.coord = coord; - this.endomorphism = endomorphism; - this.multiplier = multiplier; - } - - public Config SetCoordinateSystem(int coord) - { - this.coord = coord; - return this; - } - - public Config SetEndomorphism(ECEndomorphism endomorphism) - { - this.endomorphism = endomorphism; - return this; - } - - public Config SetMultiplier(ECMultiplier multiplier) - { - this.multiplier = multiplier; - return this; - } - - public ECCurve Create() - { - if (!outer.SupportsCoordinateSystem(coord)) - { - throw new InvalidOperationException("unsupported coordinate system"); - } - - ECCurve c = outer.CloneCurve(); - if (c == outer) - { - throw new InvalidOperationException("implementation returned current curve"); - } - - c.m_coord = coord; - c.m_endomorphism = endomorphism; - c.m_multiplier = multiplier; - - return c; - } - } - - protected readonly IFiniteField m_field; - protected ECFieldElement m_a, m_b; - protected BigInteger m_order, m_cofactor; - - protected int m_coord = COORD_AFFINE; - protected ECEndomorphism m_endomorphism = null; - protected ECMultiplier m_multiplier = null; - - protected ECCurve(IFiniteField field) - { - this.m_field = field; - } - - public abstract int FieldSize { get; } - public abstract ECFieldElement FromBigInteger(BigInteger x); - public abstract bool IsValidFieldElement(BigInteger x); - - public virtual Config Configure() - { - return new Config(this, this.m_coord, this.m_endomorphism, this.m_multiplier); - } - - public virtual ECPoint ValidatePoint(BigInteger x, BigInteger y) - { - ECPoint p = CreatePoint(x, y); - if (!p.IsValid()) - { - throw new ArgumentException("Invalid point coordinates"); - } - return p; - } - - [Obsolete("Per-point compression property will be removed")] - public virtual ECPoint ValidatePoint(BigInteger x, BigInteger y, bool withCompression) - { - ECPoint p = CreatePoint(x, y, withCompression); - if (!p.IsValid()) - { - throw new ArgumentException("Invalid point coordinates"); - } - return p; - } - - public virtual ECPoint CreatePoint(BigInteger x, BigInteger y) - { - return CreatePoint(x, y, false); - } - - [Obsolete("Per-point compression property will be removed")] - public virtual ECPoint CreatePoint(BigInteger x, BigInteger y, bool withCompression) - { - return CreateRawPoint(FromBigInteger(x), FromBigInteger(y), withCompression); - } - - protected abstract ECCurve CloneCurve(); - - protected internal abstract ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression); - - protected internal abstract ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression); - - protected virtual ECMultiplier CreateDefaultMultiplier() - { - GlvEndomorphism glvEndomorphism = m_endomorphism as GlvEndomorphism; - if (glvEndomorphism != null) - { - return new GlvMultiplier(this, glvEndomorphism); - } - - return new WNafL2RMultiplier(); - } - - public virtual bool SupportsCoordinateSystem(int coord) - { - return coord == COORD_AFFINE; - } - - public virtual PreCompInfo GetPreCompInfo(ECPoint point, string name) - { - CheckPoint(point); - lock (point) - { - IDictionary table = point.m_preCompTable; - return table == null ? null : (PreCompInfo)table[name]; - } - } - - /** - * Adds PreCompInfo for a point on this curve, under a given name. Used by - * ECMultipliers to save the precomputation for this ECPoint for use - * by subsequent multiplication. - * - * @param point - * The ECPoint to store precomputations for. - * @param name - * A String used to index precomputations of different types. - * @param preCompInfo - * The values precomputed by the ECMultiplier. - */ - public virtual void SetPreCompInfo(ECPoint point, string name, PreCompInfo preCompInfo) - { - CheckPoint(point); - lock (point) - { - IDictionary table = point.m_preCompTable; - if (null == table) - { - point.m_preCompTable = table = Platform.CreateHashtable(4); - } - table[name] = preCompInfo; - } - } - - public virtual ECPoint ImportPoint(ECPoint p) - { - if (this == p.Curve) - { - return p; - } - if (p.IsInfinity) - { - return Infinity; - } - - // TODO Default behaviour could be improved if the two curves have the same coordinate system by copying any Z coordinates. - p = p.Normalize(); - - return ValidatePoint(p.XCoord.ToBigInteger(), p.YCoord.ToBigInteger(), p.IsCompressed); - } - - /** - * Normalization ensures that any projective coordinate is 1, and therefore that the x, y - * coordinates reflect those of the equivalent point in an affine coordinate system. Where more - * than one point is to be normalized, this method will generally be more efficient than - * normalizing each point separately. - * - * @param points - * An array of points that will be updated in place with their normalized versions, - * where necessary - */ - public virtual void NormalizeAll(ECPoint[] points) - { - NormalizeAll(points, 0, points.Length, null); - } - - /** - * Normalization ensures that any projective coordinate is 1, and therefore that the x, y - * coordinates reflect those of the equivalent point in an affine coordinate system. Where more - * than one point is to be normalized, this method will generally be more efficient than - * normalizing each point separately. An (optional) z-scaling factor can be applied; effectively - * each z coordinate is scaled by this value prior to normalization (but only one - * actual multiplication is needed). - * - * @param points - * An array of points that will be updated in place with their normalized versions, - * where necessary - * @param off - * The start of the range of points to normalize - * @param len - * The length of the range of points to normalize - * @param iso - * The (optional) z-scaling factor - can be null - */ - public virtual void NormalizeAll(ECPoint[] points, int off, int len, ECFieldElement iso) - { - CheckPoints(points, off, len); - - switch (this.CoordinateSystem) - { - case ECCurve.COORD_AFFINE: - case ECCurve.COORD_LAMBDA_AFFINE: - { - if (iso != null) - throw new ArgumentException("not valid for affine coordinates", "iso"); - - return; - } - } - - /* - * Figure out which of the points actually need to be normalized - */ - ECFieldElement[] zs = new ECFieldElement[len]; - int[] indices = new int[len]; - int count = 0; - for (int i = 0; i < len; ++i) - { - ECPoint p = points[off + i]; - if (null != p && (iso != null || !p.IsNormalized())) - { - zs[count] = p.GetZCoord(0); - indices[count++] = off + i; - } - } - - if (count == 0) - { - return; - } - - ECAlgorithms.MontgomeryTrick(zs, 0, count, iso); - - for (int j = 0; j < count; ++j) - { - int index = indices[j]; - points[index] = points[index].Normalize(zs[j]); - } - } - - public abstract ECPoint Infinity { get; } - - public virtual IFiniteField Field - { - get { return m_field; } - } - - public virtual ECFieldElement A - { - get { return m_a; } - } - - public virtual ECFieldElement B - { - get { return m_b; } - } - - public virtual BigInteger Order - { - get { return m_order; } - } - - public virtual BigInteger Cofactor - { - get { return m_cofactor; } - } - - public virtual int CoordinateSystem - { - get { return m_coord; } - } - - protected virtual void CheckPoint(ECPoint point) - { - if (null == point || (this != point.Curve)) - throw new ArgumentException("must be non-null and on this curve", "point"); - } - - protected virtual void CheckPoints(ECPoint[] points) - { - CheckPoints(points, 0, points.Length); - } - - protected virtual void CheckPoints(ECPoint[] points, int off, int len) - { - if (points == null) - throw new ArgumentNullException("points"); - if (off < 0 || len < 0 || (off > (points.Length - len))) - throw new ArgumentException("invalid range specified", "points"); - - for (int i = 0; i < len; ++i) - { - ECPoint point = points[off + i]; - if (null != point && this != point.Curve) - throw new ArgumentException("entries must be null or on this curve", "points"); - } - } - - public virtual bool Equals(ECCurve other) - { - if (this == other) - return true; - if (null == other) - return false; - return Field.Equals(other.Field) - && A.ToBigInteger().Equals(other.A.ToBigInteger()) - && B.ToBigInteger().Equals(other.B.ToBigInteger()); - } - - public override bool Equals(object obj) - { - return Equals(obj as ECCurve); - } - - public override int GetHashCode() - { - return Field.GetHashCode() - ^ Integers.RotateLeft(A.ToBigInteger().GetHashCode(), 8) - ^ Integers.RotateLeft(B.ToBigInteger().GetHashCode(), 16); - } - - protected abstract ECPoint DecompressPoint(int yTilde, BigInteger X1); - - public virtual ECEndomorphism GetEndomorphism() - { - return m_endomorphism; - } - - /** - * Sets the default ECMultiplier, unless already set. - */ - public virtual ECMultiplier GetMultiplier() - { - lock (this) - { - if (this.m_multiplier == null) - { - this.m_multiplier = CreateDefaultMultiplier(); - } - return this.m_multiplier; - } - } - - /** - * Decode a point on this curve from its ASN.1 encoding. The different - * encodings are taken account of, including point compression for - * Fp (X9.62 s 4.2.1 pg 17). - * @return The decoded point. - */ - public virtual ECPoint DecodePoint(byte[] encoded) - { - ECPoint p = null; - int expectedLength = (FieldSize + 7) / 8; - - byte type = encoded[0]; - switch (type) - { - case 0x00: // infinity - { - if (encoded.Length != 1) - throw new ArgumentException("Incorrect length for infinity encoding", "encoded"); - - p = Infinity; - break; - } - - case 0x02: // compressed - case 0x03: // compressed - { - if (encoded.Length != (expectedLength + 1)) - throw new ArgumentException("Incorrect length for compressed encoding", "encoded"); - - int yTilde = type & 1; - BigInteger X = new BigInteger(1, encoded, 1, expectedLength); - - p = DecompressPoint(yTilde, X); - if (!p.SatisfiesCofactor()) - throw new ArgumentException("Invalid point"); - - break; - } - - case 0x04: // uncompressed - { - if (encoded.Length != (2 * expectedLength + 1)) - throw new ArgumentException("Incorrect length for uncompressed encoding", "encoded"); - - BigInteger X = new BigInteger(1, encoded, 1, expectedLength); - BigInteger Y = new BigInteger(1, encoded, 1 + expectedLength, expectedLength); - - p = ValidatePoint(X, Y); - break; - } - - case 0x06: // hybrid - case 0x07: // hybrid - { - if (encoded.Length != (2 * expectedLength + 1)) - throw new ArgumentException("Incorrect length for hybrid encoding", "encoded"); - - BigInteger X = new BigInteger(1, encoded, 1, expectedLength); - BigInteger Y = new BigInteger(1, encoded, 1 + expectedLength, expectedLength); - - if (Y.TestBit(0) != (type == 0x07)) - throw new ArgumentException("Inconsistent Y coordinate in hybrid encoding", "encoded"); - - p = ValidatePoint(X, Y); - break; - } - - default: - throw new FormatException("Invalid point encoding " + type); - } - - if (type != 0x00 && p.IsInfinity) - throw new ArgumentException("Invalid infinity encoding", "encoded"); - - return p; - } - } - - public abstract class AbstractFpCurve - : ECCurve - { - protected AbstractFpCurve(BigInteger q) - : base(FiniteFields.GetPrimeField(q)) - { - } - - public override bool IsValidFieldElement(BigInteger x) - { - return x != null && x.SignValue >= 0 && x.CompareTo(Field.Characteristic) < 0; - } - - protected override ECPoint DecompressPoint(int yTilde, BigInteger X1) - { - ECFieldElement x = FromBigInteger(X1); - ECFieldElement rhs = x.Square().Add(A).Multiply(x).Add(B); - ECFieldElement y = rhs.Sqrt(); - - /* - * If y is not a square, then we haven't got a point on the curve - */ - if (y == null) - throw new ArgumentException("Invalid point compression"); - - if (y.TestBitZero() != (yTilde == 1)) - { - // Use the other root - y = y.Negate(); - } - - return CreateRawPoint(x, y, true); - } - } - - /** - * Elliptic curve over Fp - */ - public class FpCurve - : AbstractFpCurve - { - private const int FP_DEFAULT_COORDS = COORD_JACOBIAN_MODIFIED; - - protected readonly BigInteger m_q, m_r; - protected readonly FpPoint m_infinity; - - public FpCurve(BigInteger q, BigInteger a, BigInteger b) - : this(q, a, b, null, null) - { - } - - public FpCurve(BigInteger q, BigInteger a, BigInteger b, BigInteger order, BigInteger cofactor) - : base(q) - { - this.m_q = q; - this.m_r = FpFieldElement.CalculateResidue(q); - this.m_infinity = new FpPoint(this, null, null); - - this.m_a = FromBigInteger(a); - this.m_b = FromBigInteger(b); - this.m_order = order; - this.m_cofactor = cofactor; - this.m_coord = FP_DEFAULT_COORDS; - } - - protected FpCurve(BigInteger q, BigInteger r, ECFieldElement a, ECFieldElement b) - : this(q, r, a, b, null, null) - { - } - - protected FpCurve(BigInteger q, BigInteger r, ECFieldElement a, ECFieldElement b, BigInteger order, BigInteger cofactor) - : base(q) - { - this.m_q = q; - this.m_r = r; - this.m_infinity = new FpPoint(this, null, null); - - this.m_a = a; - this.m_b = b; - this.m_order = order; - this.m_cofactor = cofactor; - this.m_coord = FP_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new FpCurve(m_q, m_r, m_a, m_b, m_order, m_cofactor); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_AFFINE: - case COORD_HOMOGENEOUS: - case COORD_JACOBIAN: - case COORD_JACOBIAN_MODIFIED: - return true; - default: - return false; - } - } - - public virtual BigInteger Q - { - get { return m_q; } - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return m_q.BitLength; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new FpFieldElement(this.m_q, this.m_r, x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new FpPoint(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new FpPoint(this, x, y, zs, withCompression); - } - - public override ECPoint ImportPoint(ECPoint p) - { - if (this != p.Curve && this.CoordinateSystem == COORD_JACOBIAN && !p.IsInfinity) - { - switch (p.Curve.CoordinateSystem) - { - case COORD_JACOBIAN: - case COORD_JACOBIAN_CHUDNOVSKY: - case COORD_JACOBIAN_MODIFIED: - return new FpPoint(this, - FromBigInteger(p.RawXCoord.ToBigInteger()), - FromBigInteger(p.RawYCoord.ToBigInteger()), - new ECFieldElement[] { FromBigInteger(p.GetZCoord(0).ToBigInteger()) }, - p.IsCompressed); - default: - break; - } - } - - return base.ImportPoint(p); - } - } - - public abstract class AbstractF2mCurve - : ECCurve - { - public static BigInteger Inverse(int m, int[] ks, BigInteger x) - { - return new LongArray(x).ModInverse(m, ks).ToBigInteger(); - } - - /** - * The auxiliary values s0 and - * s1 used for partial modular reduction for - * Koblitz curves. - */ - private BigInteger[] si = null; - - private static IFiniteField BuildField(int m, int k1, int k2, int k3) - { - if (k1 == 0) - { - throw new ArgumentException("k1 must be > 0"); - } - - if (k2 == 0) - { - if (k3 != 0) - { - throw new ArgumentException("k3 must be 0 if k2 == 0"); - } - - return FiniteFields.GetBinaryExtensionField(new int[]{ 0, k1, m }); - } - - if (k2 <= k1) - { - throw new ArgumentException("k2 must be > k1"); - } - - if (k3 <= k2) - { - throw new ArgumentException("k3 must be > k2"); - } - - return FiniteFields.GetBinaryExtensionField(new int[]{ 0, k1, k2, k3, m }); - } - - protected AbstractF2mCurve(int m, int k1, int k2, int k3) - : base(BuildField(m, k1, k2, k3)) - { - } - - public override bool IsValidFieldElement(BigInteger x) - { - return x != null && x.SignValue >= 0 && x.BitLength <= FieldSize; - } - - [Obsolete("Per-point compression property will be removed")] - public override ECPoint CreatePoint(BigInteger x, BigInteger y, bool withCompression) - { - ECFieldElement X = FromBigInteger(x), Y = FromBigInteger(y); - - switch (this.CoordinateSystem) - { - case COORD_LAMBDA_AFFINE: - case COORD_LAMBDA_PROJECTIVE: - { - if (X.IsZero) - { - if (!Y.Square().Equals(B)) - throw new ArgumentException(); - } - else - { - // Y becomes Lambda (X + Y/X) here - Y = Y.Divide(X).Add(X); - } - break; - } - default: - { - break; - } - } - - return CreateRawPoint(X, Y, withCompression); - } - - protected override ECPoint DecompressPoint(int yTilde, BigInteger X1) - { - ECFieldElement xp = FromBigInteger(X1), yp = null; - if (xp.IsZero) - { - yp = B.Sqrt(); - } - else - { - ECFieldElement beta = xp.Square().Invert().Multiply(B).Add(A).Add(xp); - ECFieldElement z = SolveQuadradicEquation(beta); - - if (z != null) - { - if (z.TestBitZero() != (yTilde == 1)) - { - z = z.AddOne(); - } - - switch (this.CoordinateSystem) - { - case COORD_LAMBDA_AFFINE: - case COORD_LAMBDA_PROJECTIVE: - { - yp = z.Add(xp); - break; - } - default: - { - yp = z.Multiply(xp); - break; - } - } - } - } - - if (yp == null) - throw new ArgumentException("Invalid point compression"); - - return CreateRawPoint(xp, yp, true); - } - - /** - * Solves a quadratic equation z2 + z = beta(X9.62 - * D.1.6) The other solution is z + 1. - * - * @param beta - * The value to solve the qradratic equation for. - * @return the solution for z2 + z = beta or - * null if no solution exists. - */ - private ECFieldElement SolveQuadradicEquation(ECFieldElement beta) - { - if (beta.IsZero) - return beta; - - ECFieldElement gamma, z, zeroElement = FromBigInteger(BigInteger.Zero); - - int m = FieldSize; - do - { - ECFieldElement t = FromBigInteger(BigInteger.Arbitrary(m)); - z = zeroElement; - ECFieldElement w = beta; - for (int i = 1; i < m; i++) - { - ECFieldElement w2 = w.Square(); - z = z.Square().Add(w2.Multiply(t)); - w = w2.Add(beta); - } - if (!w.IsZero) - { - return null; - } - gamma = z.Square().Add(z); - } - while (gamma.IsZero); - - return z; - } - - /** - * @return the auxiliary values s0 and - * s1 used for partial modular reduction for - * Koblitz curves. - */ - internal virtual BigInteger[] GetSi() - { - if (si == null) - { - lock (this) - { - if (si == null) - { - si = Tnaf.GetSi(this); - } - } - } - return si; - } - - /** - * Returns true if this is a Koblitz curve (ABC curve). - * @return true if this is a Koblitz curve (ABC curve), false otherwise - */ - public virtual bool IsKoblitz - { - get - { - return m_order != null && m_cofactor != null && m_b.IsOne && (m_a.IsZero || m_a.IsOne); - } - } - } - - /** - * Elliptic curves over F2m. The Weierstrass equation is given by - * y2 + xy = x3 + ax2 + b. - */ - public class F2mCurve - : AbstractF2mCurve - { - private const int F2M_DEFAULT_COORDS = COORD_LAMBDA_PROJECTIVE; - - /** - * The exponent m of F2m. - */ - private readonly int m; - - /** - * TPB: The integer k where xm + - * xk + 1 represents the reduction polynomial - * f(z).
    - * PPB: The integer k1 where xm + - * xk3 + xk2 + xk1 + 1 - * represents the reduction polynomial f(z).
    - */ - private readonly int k1; - - /** - * TPB: Always set to 0
    - * PPB: The integer k2 where xm + - * xk3 + xk2 + xk1 + 1 - * represents the reduction polynomial f(z).
    - */ - private readonly int k2; - - /** - * TPB: Always set to 0
    - * PPB: The integer k3 where xm + - * xk3 + xk2 + xk1 + 1 - * represents the reduction polynomial f(z).
    - */ - private readonly int k3; - - /** - * The point at infinity on this curve. - */ - protected readonly F2mPoint m_infinity; - - /** - * Constructor for Trinomial Polynomial Basis (TPB). - * @param m The exponent m of - * F2m. - * @param k The integer k where xm + - * xk + 1 represents the reduction - * polynomial f(z). - * @param a The coefficient a in the Weierstrass equation - * for non-supersingular elliptic curves over - * F2m. - * @param b The coefficient b in the Weierstrass equation - * for non-supersingular elliptic curves over - * F2m. - */ - public F2mCurve( - int m, - int k, - BigInteger a, - BigInteger b) - : this(m, k, 0, 0, a, b, null, null) - { - } - - /** - * Constructor for Trinomial Polynomial Basis (TPB). - * @param m The exponent m of - * F2m. - * @param k The integer k where xm + - * xk + 1 represents the reduction - * polynomial f(z). - * @param a The coefficient a in the Weierstrass equation - * for non-supersingular elliptic curves over - * F2m. - * @param b The coefficient b in the Weierstrass equation - * for non-supersingular elliptic curves over - * F2m. - * @param order The order of the main subgroup of the elliptic curve. - * @param cofactor The cofactor of the elliptic curve, i.e. - * #Ea(F2m) = h * n. - */ - public F2mCurve( - int m, - int k, - BigInteger a, - BigInteger b, - BigInteger order, - BigInteger cofactor) - : this(m, k, 0, 0, a, b, order, cofactor) - { - } - - /** - * Constructor for Pentanomial Polynomial Basis (PPB). - * @param m The exponent m of - * F2m. - * @param k1 The integer k1 where xm + - * xk3 + xk2 + xk1 + 1 - * represents the reduction polynomial f(z). - * @param k2 The integer k2 where xm + - * xk3 + xk2 + xk1 + 1 - * represents the reduction polynomial f(z). - * @param k3 The integer k3 where xm + - * xk3 + xk2 + xk1 + 1 - * represents the reduction polynomial f(z). - * @param a The coefficient a in the Weierstrass equation - * for non-supersingular elliptic curves over - * F2m. - * @param b The coefficient b in the Weierstrass equation - * for non-supersingular elliptic curves over - * F2m. - */ - public F2mCurve( - int m, - int k1, - int k2, - int k3, - BigInteger a, - BigInteger b) - : this(m, k1, k2, k3, a, b, null, null) - { - } - - /** - * Constructor for Pentanomial Polynomial Basis (PPB). - * @param m The exponent m of - * F2m. - * @param k1 The integer k1 where xm + - * xk3 + xk2 + xk1 + 1 - * represents the reduction polynomial f(z). - * @param k2 The integer k2 where xm + - * xk3 + xk2 + xk1 + 1 - * represents the reduction polynomial f(z). - * @param k3 The integer k3 where xm + - * xk3 + xk2 + xk1 + 1 - * represents the reduction polynomial f(z). - * @param a The coefficient a in the Weierstrass equation - * for non-supersingular elliptic curves over - * F2m. - * @param b The coefficient b in the Weierstrass equation - * for non-supersingular elliptic curves over - * F2m. - * @param order The order of the main subgroup of the elliptic curve. - * @param cofactor The cofactor of the elliptic curve, i.e. - * #Ea(F2m) = h * n. - */ - public F2mCurve( - int m, - int k1, - int k2, - int k3, - BigInteger a, - BigInteger b, - BigInteger order, - BigInteger cofactor) - : base(m, k1, k2, k3) - { - this.m = m; - this.k1 = k1; - this.k2 = k2; - this.k3 = k3; - this.m_order = order; - this.m_cofactor = cofactor; - this.m_infinity = new F2mPoint(this, null, null); - - if (k1 == 0) - throw new ArgumentException("k1 must be > 0"); - - if (k2 == 0) - { - if (k3 != 0) - throw new ArgumentException("k3 must be 0 if k2 == 0"); - } - else - { - if (k2 <= k1) - throw new ArgumentException("k2 must be > k1"); - - if (k3 <= k2) - throw new ArgumentException("k3 must be > k2"); - } - - this.m_a = FromBigInteger(a); - this.m_b = FromBigInteger(b); - this.m_coord = F2M_DEFAULT_COORDS; - } - - protected F2mCurve(int m, int k1, int k2, int k3, ECFieldElement a, ECFieldElement b, BigInteger order, BigInteger cofactor) - : base(m, k1, k2, k3) - { - this.m = m; - this.k1 = k1; - this.k2 = k2; - this.k3 = k3; - this.m_order = order; - this.m_cofactor = cofactor; - - this.m_infinity = new F2mPoint(this, null, null); - this.m_a = a; - this.m_b = b; - this.m_coord = F2M_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new F2mCurve(m, k1, k2, k3, m_a, m_b, m_order, m_cofactor); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_AFFINE: - case COORD_HOMOGENEOUS: - case COORD_LAMBDA_PROJECTIVE: - return true; - default: - return false; - } - } - - protected override ECMultiplier CreateDefaultMultiplier() - { - if (IsKoblitz) - { - return new WTauNafMultiplier(); - } - - return base.CreateDefaultMultiplier(); - } - - public override int FieldSize - { - get { return m; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new F2mFieldElement(this.m, this.k1, this.k2, this.k3, x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new F2mPoint(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new F2mPoint(this, x, y, zs, withCompression); - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public int M - { - get { return m; } - } - - /** - * Return true if curve uses a Trinomial basis. - * - * @return true if curve Trinomial, false otherwise. - */ - public bool IsTrinomial() - { - return k2 == 0 && k3 == 0; - } - - public int K1 - { - get { return k1; } - } - - public int K2 - { - get { return k2; } - } - - public int K3 - { - get { return k3; } - } - - [Obsolete("Use 'Order' property instead")] - public BigInteger N - { - get { return m_order; } - } - - [Obsolete("Use 'Cofactor' property instead")] - public BigInteger H - { - get { return m_cofactor; } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/ECFieldElement.cs b/bc-sharp-crypto/src/math/ec/ECFieldElement.cs deleted file mode 100644 index d0e008a..0000000 --- a/bc-sharp-crypto/src/math/ec/ECFieldElement.cs +++ /dev/null @@ -1,928 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Math.Raw; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math.EC -{ - public abstract class ECFieldElement - { - public abstract BigInteger ToBigInteger(); - public abstract string FieldName { get; } - public abstract int FieldSize { get; } - public abstract ECFieldElement Add(ECFieldElement b); - public abstract ECFieldElement AddOne(); - public abstract ECFieldElement Subtract(ECFieldElement b); - public abstract ECFieldElement Multiply(ECFieldElement b); - public abstract ECFieldElement Divide(ECFieldElement b); - public abstract ECFieldElement Negate(); - public abstract ECFieldElement Square(); - public abstract ECFieldElement Invert(); - public abstract ECFieldElement Sqrt(); - - public virtual int BitLength - { - get { return ToBigInteger().BitLength; } - } - - public virtual bool IsOne - { - get { return BitLength == 1; } - } - - public virtual bool IsZero - { - get { return 0 == ToBigInteger().SignValue; } - } - - public virtual ECFieldElement MultiplyMinusProduct(ECFieldElement b, ECFieldElement x, ECFieldElement y) - { - return Multiply(b).Subtract(x.Multiply(y)); - } - - public virtual ECFieldElement MultiplyPlusProduct(ECFieldElement b, ECFieldElement x, ECFieldElement y) - { - return Multiply(b).Add(x.Multiply(y)); - } - - public virtual ECFieldElement SquareMinusProduct(ECFieldElement x, ECFieldElement y) - { - return Square().Subtract(x.Multiply(y)); - } - - public virtual ECFieldElement SquarePlusProduct(ECFieldElement x, ECFieldElement y) - { - return Square().Add(x.Multiply(y)); - } - - public virtual ECFieldElement SquarePow(int pow) - { - ECFieldElement r = this; - for (int i = 0; i < pow; ++i) - { - r = r.Square(); - } - return r; - } - - public virtual bool TestBitZero() - { - return ToBigInteger().TestBit(0); - } - - public override bool Equals(object obj) - { - return Equals(obj as ECFieldElement); - } - - public virtual bool Equals(ECFieldElement other) - { - if (this == other) - return true; - if (null == other) - return false; - return ToBigInteger().Equals(other.ToBigInteger()); - } - - public override int GetHashCode() - { - return ToBigInteger().GetHashCode(); - } - - public override string ToString() - { - return this.ToBigInteger().ToString(16); - } - - public virtual byte[] GetEncoded() - { - return BigIntegers.AsUnsignedByteArray((FieldSize + 7) / 8, ToBigInteger()); - } - } - - public class FpFieldElement - : ECFieldElement - { - private readonly BigInteger q, r, x; - - internal static BigInteger CalculateResidue(BigInteger p) - { - int bitLength = p.BitLength; - if (bitLength >= 96) - { - BigInteger firstWord = p.ShiftRight(bitLength - 64); - if (firstWord.LongValue == -1L) - { - return BigInteger.One.ShiftLeft(bitLength).Subtract(p); - } - if ((bitLength & 7) == 0) - { - return BigInteger.One.ShiftLeft(bitLength << 1).Divide(p).Negate(); - } - } - return null; - } - - [Obsolete("Use ECCurve.FromBigInteger to construct field elements")] - public FpFieldElement(BigInteger q, BigInteger x) - : this(q, CalculateResidue(q), x) - { - } - - internal FpFieldElement(BigInteger q, BigInteger r, BigInteger x) - { - if (x == null || x.SignValue < 0 || x.CompareTo(q) >= 0) - throw new ArgumentException("value invalid in Fp field element", "x"); - - this.q = q; - this.r = r; - this.x = x; - } - - public override BigInteger ToBigInteger() - { - return x; - } - - /** - * return the field name for this field. - * - * @return the string "Fp". - */ - public override string FieldName - { - get { return "Fp"; } - } - - public override int FieldSize - { - get { return q.BitLength; } - } - - public BigInteger Q - { - get { return q; } - } - - public override ECFieldElement Add( - ECFieldElement b) - { - return new FpFieldElement(q, r, ModAdd(x, b.ToBigInteger())); - } - - public override ECFieldElement AddOne() - { - BigInteger x2 = x.Add(BigInteger.One); - if (x2.CompareTo(q) == 0) - { - x2 = BigInteger.Zero; - } - return new FpFieldElement(q, r, x2); - } - - public override ECFieldElement Subtract( - ECFieldElement b) - { - return new FpFieldElement(q, r, ModSubtract(x, b.ToBigInteger())); - } - - public override ECFieldElement Multiply( - ECFieldElement b) - { - return new FpFieldElement(q, r, ModMult(x, b.ToBigInteger())); - } - - public override ECFieldElement MultiplyMinusProduct(ECFieldElement b, ECFieldElement x, ECFieldElement y) - { - BigInteger ax = this.x, bx = b.ToBigInteger(), xx = x.ToBigInteger(), yx = y.ToBigInteger(); - BigInteger ab = ax.Multiply(bx); - BigInteger xy = xx.Multiply(yx); - return new FpFieldElement(q, r, ModReduce(ab.Subtract(xy))); - } - - public override ECFieldElement MultiplyPlusProduct(ECFieldElement b, ECFieldElement x, ECFieldElement y) - { - BigInteger ax = this.x, bx = b.ToBigInteger(), xx = x.ToBigInteger(), yx = y.ToBigInteger(); - BigInteger ab = ax.Multiply(bx); - BigInteger xy = xx.Multiply(yx); - BigInteger sum = ab.Add(xy); - if (r != null && r.SignValue < 0 && sum.BitLength > (q.BitLength << 1)) - { - sum = sum.Subtract(q.ShiftLeft(q.BitLength)); - } - return new FpFieldElement(q, r, ModReduce(sum)); - } - - public override ECFieldElement Divide( - ECFieldElement b) - { - return new FpFieldElement(q, r, ModMult(x, ModInverse(b.ToBigInteger()))); - } - - public override ECFieldElement Negate() - { - return x.SignValue == 0 ? this : new FpFieldElement(q, r, q.Subtract(x)); - } - - public override ECFieldElement Square() - { - return new FpFieldElement(q, r, ModMult(x, x)); - } - - public override ECFieldElement SquareMinusProduct(ECFieldElement x, ECFieldElement y) - { - BigInteger ax = this.x, xx = x.ToBigInteger(), yx = y.ToBigInteger(); - BigInteger aa = ax.Multiply(ax); - BigInteger xy = xx.Multiply(yx); - return new FpFieldElement(q, r, ModReduce(aa.Subtract(xy))); - } - - public override ECFieldElement SquarePlusProduct(ECFieldElement x, ECFieldElement y) - { - BigInteger ax = this.x, xx = x.ToBigInteger(), yx = y.ToBigInteger(); - BigInteger aa = ax.Multiply(ax); - BigInteger xy = xx.Multiply(yx); - BigInteger sum = aa.Add(xy); - if (r != null && r.SignValue < 0 && sum.BitLength > (q.BitLength << 1)) - { - sum = sum.Subtract(q.ShiftLeft(q.BitLength)); - } - return new FpFieldElement(q, r, ModReduce(sum)); - } - - public override ECFieldElement Invert() - { - // TODO Modular inversion can be faster for a (Generalized) Mersenne Prime. - return new FpFieldElement(q, r, ModInverse(x)); - } - - /** - * return a sqrt root - the routine verifies that the calculation - * returns the right value - if none exists it returns null. - */ - public override ECFieldElement Sqrt() - { - if (IsZero || IsOne) - return this; - - if (!q.TestBit(0)) - throw Platform.CreateNotImplementedException("even value of q"); - - if (q.TestBit(1)) // q == 4m + 3 - { - BigInteger e = q.ShiftRight(2).Add(BigInteger.One); - return CheckSqrt(new FpFieldElement(q, r, x.ModPow(e, q))); - } - - if (q.TestBit(2)) // q == 8m + 5 - { - BigInteger t1 = x.ModPow(q.ShiftRight(3), q); - BigInteger t2 = ModMult(t1, x); - BigInteger t3 = ModMult(t2, t1); - - if (t3.Equals(BigInteger.One)) - { - return CheckSqrt(new FpFieldElement(q, r, t2)); - } - - // TODO This is constant and could be precomputed - BigInteger t4 = BigInteger.Two.ModPow(q.ShiftRight(2), q); - - BigInteger y = ModMult(t2, t4); - - return CheckSqrt(new FpFieldElement(q, r, y)); - } - - // q == 8m + 1 - - BigInteger legendreExponent = q.ShiftRight(1); - if (!(x.ModPow(legendreExponent, q).Equals(BigInteger.One))) - return null; - - BigInteger X = this.x; - BigInteger fourX = ModDouble(ModDouble(X)); ; - - BigInteger k = legendreExponent.Add(BigInteger.One), qMinusOne = q.Subtract(BigInteger.One); - - BigInteger U, V; - do - { - BigInteger P; - do - { - P = BigInteger.Arbitrary(q.BitLength); - } - while (P.CompareTo(q) >= 0 - || !ModReduce(P.Multiply(P).Subtract(fourX)).ModPow(legendreExponent, q).Equals(qMinusOne)); - - BigInteger[] result = LucasSequence(P, X, k); - U = result[0]; - V = result[1]; - - if (ModMult(V, V).Equals(fourX)) - { - return new FpFieldElement(q, r, ModHalfAbs(V)); - } - } - while (U.Equals(BigInteger.One) || U.Equals(qMinusOne)); - - return null; - } - - private ECFieldElement CheckSqrt(ECFieldElement z) - { - return z.Square().Equals(this) ? z : null; - } - - private BigInteger[] LucasSequence( - BigInteger P, - BigInteger Q, - BigInteger k) - { - // TODO Research and apply "common-multiplicand multiplication here" - - int n = k.BitLength; - int s = k.GetLowestSetBit(); - - Debug.Assert(k.TestBit(s)); - - BigInteger Uh = BigInteger.One; - BigInteger Vl = BigInteger.Two; - BigInteger Vh = P; - BigInteger Ql = BigInteger.One; - BigInteger Qh = BigInteger.One; - - for (int j = n - 1; j >= s + 1; --j) - { - Ql = ModMult(Ql, Qh); - - if (k.TestBit(j)) - { - Qh = ModMult(Ql, Q); - Uh = ModMult(Uh, Vh); - Vl = ModReduce(Vh.Multiply(Vl).Subtract(P.Multiply(Ql))); - Vh = ModReduce(Vh.Multiply(Vh).Subtract(Qh.ShiftLeft(1))); - } - else - { - Qh = Ql; - Uh = ModReduce(Uh.Multiply(Vl).Subtract(Ql)); - Vh = ModReduce(Vh.Multiply(Vl).Subtract(P.Multiply(Ql))); - Vl = ModReduce(Vl.Multiply(Vl).Subtract(Ql.ShiftLeft(1))); - } - } - - Ql = ModMult(Ql, Qh); - Qh = ModMult(Ql, Q); - Uh = ModReduce(Uh.Multiply(Vl).Subtract(Ql)); - Vl = ModReduce(Vh.Multiply(Vl).Subtract(P.Multiply(Ql))); - Ql = ModMult(Ql, Qh); - - for (int j = 1; j <= s; ++j) - { - Uh = ModMult(Uh, Vl); - Vl = ModReduce(Vl.Multiply(Vl).Subtract(Ql.ShiftLeft(1))); - Ql = ModMult(Ql, Ql); - } - - return new BigInteger[] { Uh, Vl }; - } - - protected virtual BigInteger ModAdd(BigInteger x1, BigInteger x2) - { - BigInteger x3 = x1.Add(x2); - if (x3.CompareTo(q) >= 0) - { - x3 = x3.Subtract(q); - } - return x3; - } - - protected virtual BigInteger ModDouble(BigInteger x) - { - BigInteger _2x = x.ShiftLeft(1); - if (_2x.CompareTo(q) >= 0) - { - _2x = _2x.Subtract(q); - } - return _2x; - } - - protected virtual BigInteger ModHalf(BigInteger x) - { - if (x.TestBit(0)) - { - x = q.Add(x); - } - return x.ShiftRight(1); - } - - protected virtual BigInteger ModHalfAbs(BigInteger x) - { - if (x.TestBit(0)) - { - x = q.Subtract(x); - } - return x.ShiftRight(1); - } - - protected virtual BigInteger ModInverse(BigInteger x) - { - int bits = FieldSize; - int len = (bits + 31) >> 5; - uint[] p = Nat.FromBigInteger(bits, q); - uint[] n = Nat.FromBigInteger(bits, x); - uint[] z = Nat.Create(len); - Mod.Invert(p, n, z); - return Nat.ToBigInteger(len, z); - } - - protected virtual BigInteger ModMult(BigInteger x1, BigInteger x2) - { - return ModReduce(x1.Multiply(x2)); - } - - protected virtual BigInteger ModReduce(BigInteger x) - { - if (r == null) - { - x = x.Mod(q); - } - else - { - bool negative = x.SignValue < 0; - if (negative) - { - x = x.Abs(); - } - int qLen = q.BitLength; - if (r.SignValue > 0) - { - BigInteger qMod = BigInteger.One.ShiftLeft(qLen); - bool rIsOne = r.Equals(BigInteger.One); - while (x.BitLength > (qLen + 1)) - { - BigInteger u = x.ShiftRight(qLen); - BigInteger v = x.Remainder(qMod); - if (!rIsOne) - { - u = u.Multiply(r); - } - x = u.Add(v); - } - } - else - { - int d = ((qLen - 1) & 31) + 1; - BigInteger mu = r.Negate(); - BigInteger u = mu.Multiply(x.ShiftRight(qLen - d)); - BigInteger quot = u.ShiftRight(qLen + d); - BigInteger v = quot.Multiply(q); - BigInteger bk1 = BigInteger.One.ShiftLeft(qLen + d); - v = v.Remainder(bk1); - x = x.Remainder(bk1); - x = x.Subtract(v); - if (x.SignValue < 0) - { - x = x.Add(bk1); - } - } - while (x.CompareTo(q) >= 0) - { - x = x.Subtract(q); - } - if (negative && x.SignValue != 0) - { - x = q.Subtract(x); - } - } - return x; - } - - protected virtual BigInteger ModSubtract(BigInteger x1, BigInteger x2) - { - BigInteger x3 = x1.Subtract(x2); - if (x3.SignValue < 0) - { - x3 = x3.Add(q); - } - return x3; - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - FpFieldElement other = obj as FpFieldElement; - - if (other == null) - return false; - - return Equals(other); - } - - public virtual bool Equals( - FpFieldElement other) - { - return q.Equals(other.q) && base.Equals(other); - } - - public override int GetHashCode() - { - return q.GetHashCode() ^ base.GetHashCode(); - } - } - - /** - * Class representing the Elements of the finite field - * F2m in polynomial basis (PB) - * representation. Both trinomial (Tpb) and pentanomial (Ppb) polynomial - * basis representations are supported. Gaussian normal basis (GNB) - * representation is not supported. - */ - public class F2mFieldElement - : ECFieldElement - { - /** - * Indicates gaussian normal basis representation (GNB). Number chosen - * according to X9.62. GNB is not implemented at present. - */ - public const int Gnb = 1; - - /** - * Indicates trinomial basis representation (Tpb). Number chosen - * according to X9.62. - */ - public const int Tpb = 2; - - /** - * Indicates pentanomial basis representation (Ppb). Number chosen - * according to X9.62. - */ - public const int Ppb = 3; - - /** - * Tpb or Ppb. - */ - private int representation; - - /** - * The exponent m of F2m. - */ - private int m; - - private int[] ks; - - /** - * The LongArray holding the bits. - */ - private LongArray x; - - /** - * Constructor for Ppb. - * @param m The exponent m of - * F2m. - * @param k1 The integer k1 where xm + - * xk3 + xk2 + xk1 + 1 - * represents the reduction polynomial f(z). - * @param k2 The integer k2 where xm + - * xk3 + xk2 + xk1 + 1 - * represents the reduction polynomial f(z). - * @param k3 The integer k3 where xm + - * xk3 + xk2 + xk1 + 1 - * represents the reduction polynomial f(z). - * @param x The BigInteger representing the value of the field element. - */ - public F2mFieldElement( - int m, - int k1, - int k2, - int k3, - BigInteger x) - { - if (x == null || x.SignValue < 0 || x.BitLength > m) - throw new ArgumentException("value invalid in F2m field element", "x"); - - if ((k2 == 0) && (k3 == 0)) - { - this.representation = Tpb; - this.ks = new int[] { k1 }; - } - else - { - if (k2 >= k3) - throw new ArgumentException("k2 must be smaller than k3"); - if (k2 <= 0) - throw new ArgumentException("k2 must be larger than 0"); - - this.representation = Ppb; - this.ks = new int[] { k1, k2, k3 }; - } - - this.m = m; - this.x = new LongArray(x); - } - - /** - * Constructor for Tpb. - * @param m The exponent m of - * F2m. - * @param k The integer k where xm + - * xk + 1 represents the reduction - * polynomial f(z). - * @param x The BigInteger representing the value of the field element. - */ - public F2mFieldElement( - int m, - int k, - BigInteger x) - : this(m, k, 0, 0, x) - { - // Set k1 to k, and set k2 and k3 to 0 - } - - private F2mFieldElement(int m, int[] ks, LongArray x) - { - this.m = m; - this.representation = (ks.Length == 1) ? Tpb : Ppb; - this.ks = ks; - this.x = x; - } - - public override int BitLength - { - get { return x.Degree(); } - } - - public override bool IsOne - { - get { return x.IsOne(); } - } - - public override bool IsZero - { - get { return x.IsZero(); } - } - - public override bool TestBitZero() - { - return x.TestBitZero(); - } - - public override BigInteger ToBigInteger() - { - return x.ToBigInteger(); - } - - public override string FieldName - { - get { return "F2m"; } - } - - public override int FieldSize - { - get { return m; } - } - - /** - * Checks, if the ECFieldElements a and b - * are elements of the same field F2m - * (having the same representation). - * @param a field element. - * @param b field element to be compared. - * @throws ArgumentException if a and b - * are not elements of the same field - * F2m (having the same - * representation). - */ - public static void CheckFieldElements( - ECFieldElement a, - ECFieldElement b) - { - if (!(a is F2mFieldElement) || !(b is F2mFieldElement)) - { - throw new ArgumentException("Field elements are not " - + "both instances of F2mFieldElement"); - } - - F2mFieldElement aF2m = (F2mFieldElement)a; - F2mFieldElement bF2m = (F2mFieldElement)b; - - if (aF2m.representation != bF2m.representation) - { - // Should never occur - throw new ArgumentException("One of the F2m field elements has incorrect representation"); - } - - if ((aF2m.m != bF2m.m) || !Arrays.AreEqual(aF2m.ks, bF2m.ks)) - { - throw new ArgumentException("Field elements are not elements of the same field F2m"); - } - } - - public override ECFieldElement Add( - ECFieldElement b) - { - // No check performed here for performance reasons. Instead the - // elements involved are checked in ECPoint.F2m - // checkFieldElements(this, b); - LongArray iarrClone = this.x.Copy(); - F2mFieldElement bF2m = (F2mFieldElement)b; - iarrClone.AddShiftedByWords(bF2m.x, 0); - return new F2mFieldElement(m, ks, iarrClone); - } - - public override ECFieldElement AddOne() - { - return new F2mFieldElement(m, ks, x.AddOne()); - } - - public override ECFieldElement Subtract( - ECFieldElement b) - { - // Addition and subtraction are the same in F2m - return Add(b); - } - - public override ECFieldElement Multiply( - ECFieldElement b) - { - // Right-to-left comb multiplication in the LongArray - // Input: Binary polynomials a(z) and b(z) of degree at most m-1 - // Output: c(z) = a(z) * b(z) mod f(z) - - // No check performed here for performance reasons. Instead the - // elements involved are checked in ECPoint.F2m - // checkFieldElements(this, b); - return new F2mFieldElement(m, ks, x.ModMultiply(((F2mFieldElement)b).x, m, ks)); - } - - public override ECFieldElement MultiplyMinusProduct(ECFieldElement b, ECFieldElement x, ECFieldElement y) - { - return MultiplyPlusProduct(b, x, y); - } - - public override ECFieldElement MultiplyPlusProduct(ECFieldElement b, ECFieldElement x, ECFieldElement y) - { - LongArray ax = this.x, bx = ((F2mFieldElement)b).x, xx = ((F2mFieldElement)x).x, yx = ((F2mFieldElement)y).x; - - LongArray ab = ax.Multiply(bx, m, ks); - LongArray xy = xx.Multiply(yx, m, ks); - - if (ab == ax || ab == bx) - { - ab = (LongArray)ab.Copy(); - } - - ab.AddShiftedByWords(xy, 0); - ab.Reduce(m, ks); - - return new F2mFieldElement(m, ks, ab); - } - - public override ECFieldElement Divide( - ECFieldElement b) - { - // There may be more efficient implementations - ECFieldElement bInv = b.Invert(); - return Multiply(bInv); - } - - public override ECFieldElement Negate() - { - // -x == x holds for all x in F2m - return this; - } - - public override ECFieldElement Square() - { - return new F2mFieldElement(m, ks, x.ModSquare(m, ks)); - } - - public override ECFieldElement SquareMinusProduct(ECFieldElement x, ECFieldElement y) - { - return SquarePlusProduct(x, y); - } - - public override ECFieldElement SquarePlusProduct(ECFieldElement x, ECFieldElement y) - { - LongArray ax = this.x, xx = ((F2mFieldElement)x).x, yx = ((F2mFieldElement)y).x; - - LongArray aa = ax.Square(m, ks); - LongArray xy = xx.Multiply(yx, m, ks); - - if (aa == ax) - { - aa = (LongArray)aa.Copy(); - } - - aa.AddShiftedByWords(xy, 0); - aa.Reduce(m, ks); - - return new F2mFieldElement(m, ks, aa); - } - - public override ECFieldElement SquarePow(int pow) - { - return pow < 1 ? this : new F2mFieldElement(m, ks, x.ModSquareN(pow, m, ks)); - } - - public override ECFieldElement Invert() - { - return new F2mFieldElement(this.m, this.ks, this.x.ModInverse(m, ks)); - } - - public override ECFieldElement Sqrt() - { - return (x.IsZero() || x.IsOne()) ? this : SquarePow(m - 1); - } - - /** - * @return the representation of the field - * F2m, either of - * {@link F2mFieldElement.Tpb} (trinomial - * basis representation) or - * {@link F2mFieldElement.Ppb} (pentanomial - * basis representation). - */ - public int Representation - { - get { return this.representation; } - } - - /** - * @return the degree m of the reduction polynomial - * f(z). - */ - public int M - { - get { return this.m; } - } - - /** - * @return Tpb: The integer k where xm + - * xk + 1 represents the reduction polynomial - * f(z).
    - * Ppb: The integer k1 where xm + - * xk3 + xk2 + xk1 + 1 - * represents the reduction polynomial f(z).
    - */ - public int K1 - { - get { return this.ks[0]; } - } - - /** - * @return Tpb: Always returns 0
    - * Ppb: The integer k2 where xm + - * xk3 + xk2 + xk1 + 1 - * represents the reduction polynomial f(z).
    - */ - public int K2 - { - get { return this.ks.Length >= 2 ? this.ks[1] : 0; } - } - - /** - * @return Tpb: Always set to 0
    - * Ppb: The integer k3 where xm + - * xk3 + xk2 + xk1 + 1 - * represents the reduction polynomial f(z).
    - */ - public int K3 - { - get { return this.ks.Length >= 3 ? this.ks[2] : 0; } - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - F2mFieldElement other = obj as F2mFieldElement; - - if (other == null) - return false; - - return Equals(other); - } - - public virtual bool Equals( - F2mFieldElement other) - { - return ((this.m == other.m) - && (this.representation == other.representation) - && Arrays.AreEqual(this.ks, other.ks) - && (this.x.Equals(other.x))); - } - - public override int GetHashCode() - { - return x.GetHashCode() ^ m ^ Arrays.GetHashCode(ks); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/ECPoint.cs b/bc-sharp-crypto/src/math/ec/ECPoint.cs deleted file mode 100644 index a5ba515..0000000 --- a/bc-sharp-crypto/src/math/ec/ECPoint.cs +++ /dev/null @@ -1,2064 +0,0 @@ -using System; -using System.Collections; -using System.Diagnostics; -using System.Text; - -using Org.BouncyCastle.Math.EC.Multiplier; - -namespace Org.BouncyCastle.Math.EC -{ - /** - * base class for points on elliptic curves. - */ - public abstract class ECPoint - { - protected static ECFieldElement[] EMPTY_ZS = new ECFieldElement[0]; - - protected static ECFieldElement[] GetInitialZCoords(ECCurve curve) - { - // Cope with null curve, most commonly used by implicitlyCa - int coord = null == curve ? ECCurve.COORD_AFFINE : curve.CoordinateSystem; - - switch (coord) - { - case ECCurve.COORD_AFFINE: - case ECCurve.COORD_LAMBDA_AFFINE: - return EMPTY_ZS; - default: - break; - } - - ECFieldElement one = curve.FromBigInteger(BigInteger.One); - - switch (coord) - { - case ECCurve.COORD_HOMOGENEOUS: - case ECCurve.COORD_JACOBIAN: - case ECCurve.COORD_LAMBDA_PROJECTIVE: - return new ECFieldElement[] { one }; - case ECCurve.COORD_JACOBIAN_CHUDNOVSKY: - return new ECFieldElement[] { one, one, one }; - case ECCurve.COORD_JACOBIAN_MODIFIED: - return new ECFieldElement[] { one, curve.A }; - default: - throw new ArgumentException("unknown coordinate system"); - } - } - - protected internal readonly ECCurve m_curve; - protected internal readonly ECFieldElement m_x, m_y; - protected internal readonly ECFieldElement[] m_zs; - protected internal readonly bool m_withCompression; - - // Dictionary is (string -> PreCompInfo) - protected internal IDictionary m_preCompTable = null; - - protected ECPoint(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : this(curve, x, y, GetInitialZCoords(curve), withCompression) - { - } - - internal ECPoint(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - this.m_curve = curve; - this.m_x = x; - this.m_y = y; - this.m_zs = zs; - this.m_withCompression = withCompression; - } - - protected internal bool SatisfiesCofactor() - { - BigInteger h = Curve.Cofactor; - return h == null || h.Equals(BigInteger.One) || !ECAlgorithms.ReferenceMultiply(this, h).IsInfinity; - } - - protected abstract bool SatisfiesCurveEquation(); - - public ECPoint GetDetachedPoint() - { - return Normalize().Detach(); - } - - public virtual ECCurve Curve - { - get { return m_curve; } - } - - protected abstract ECPoint Detach(); - - protected virtual int CurveCoordinateSystem - { - get - { - // Cope with null curve, most commonly used by implicitlyCa - return null == m_curve ? ECCurve.COORD_AFFINE : m_curve.CoordinateSystem; - } - } - - /** - * Normalizes this point, and then returns the affine x-coordinate. - * - * Note: normalization can be expensive, this method is deprecated in favour - * of caller-controlled normalization. - */ - [Obsolete("Use AffineXCoord, or Normalize() and XCoord, instead")] - public virtual ECFieldElement X - { - get { return Normalize().XCoord; } - } - - /** - * Normalizes this point, and then returns the affine y-coordinate. - * - * Note: normalization can be expensive, this method is deprecated in favour - * of caller-controlled normalization. - */ - [Obsolete("Use AffineYCoord, or Normalize() and YCoord, instead")] - public virtual ECFieldElement Y - { - get { return Normalize().YCoord; } - } - - /** - * Returns the affine x-coordinate after checking that this point is normalized. - * - * @return The affine x-coordinate of this point - * @throws IllegalStateException if the point is not normalized - */ - public virtual ECFieldElement AffineXCoord - { - get - { - CheckNormalized(); - return XCoord; - } - } - - /** - * Returns the affine y-coordinate after checking that this point is normalized - * - * @return The affine y-coordinate of this point - * @throws IllegalStateException if the point is not normalized - */ - public virtual ECFieldElement AffineYCoord - { - get - { - CheckNormalized(); - return YCoord; - } - } - - /** - * Returns the x-coordinate. - * - * Caution: depending on the curve's coordinate system, this may not be the same value as in an - * affine coordinate system; use Normalize() to get a point where the coordinates have their - * affine values, or use AffineXCoord if you expect the point to already have been normalized. - * - * @return the x-coordinate of this point - */ - public virtual ECFieldElement XCoord - { - get { return m_x; } - } - - /** - * Returns the y-coordinate. - * - * Caution: depending on the curve's coordinate system, this may not be the same value as in an - * affine coordinate system; use Normalize() to get a point where the coordinates have their - * affine values, or use AffineYCoord if you expect the point to already have been normalized. - * - * @return the y-coordinate of this point - */ - public virtual ECFieldElement YCoord - { - get { return m_y; } - } - - public virtual ECFieldElement GetZCoord(int index) - { - return (index < 0 || index >= m_zs.Length) ? null : m_zs[index]; - } - - public virtual ECFieldElement[] GetZCoords() - { - int zsLen = m_zs.Length; - if (zsLen == 0) - { - return m_zs; - } - ECFieldElement[] copy = new ECFieldElement[zsLen]; - Array.Copy(m_zs, 0, copy, 0, zsLen); - return copy; - } - - protected internal ECFieldElement RawXCoord - { - get { return m_x; } - } - - protected internal ECFieldElement RawYCoord - { - get { return m_y; } - } - - protected internal ECFieldElement[] RawZCoords - { - get { return m_zs; } - } - - protected virtual void CheckNormalized() - { - if (!IsNormalized()) - throw new InvalidOperationException("point not in normal form"); - } - - public virtual bool IsNormalized() - { - int coord = this.CurveCoordinateSystem; - - return coord == ECCurve.COORD_AFFINE - || coord == ECCurve.COORD_LAMBDA_AFFINE - || IsInfinity - || RawZCoords[0].IsOne; - } - - /** - * Normalization ensures that any projective coordinate is 1, and therefore that the x, y - * coordinates reflect those of the equivalent point in an affine coordinate system. - * - * @return a new ECPoint instance representing the same point, but with normalized coordinates - */ - public virtual ECPoint Normalize() - { - if (this.IsInfinity) - { - return this; - } - - switch (this.CurveCoordinateSystem) - { - case ECCurve.COORD_AFFINE: - case ECCurve.COORD_LAMBDA_AFFINE: - { - return this; - } - default: - { - ECFieldElement Z1 = RawZCoords[0]; - if (Z1.IsOne) - { - return this; - } - - return Normalize(Z1.Invert()); - } - } - } - - internal virtual ECPoint Normalize(ECFieldElement zInv) - { - switch (this.CurveCoordinateSystem) - { - case ECCurve.COORD_HOMOGENEOUS: - case ECCurve.COORD_LAMBDA_PROJECTIVE: - { - return CreateScaledPoint(zInv, zInv); - } - case ECCurve.COORD_JACOBIAN: - case ECCurve.COORD_JACOBIAN_CHUDNOVSKY: - case ECCurve.COORD_JACOBIAN_MODIFIED: - { - ECFieldElement zInv2 = zInv.Square(), zInv3 = zInv2.Multiply(zInv); - return CreateScaledPoint(zInv2, zInv3); - } - default: - { - throw new InvalidOperationException("not a projective coordinate system"); - } - } - } - - protected virtual ECPoint CreateScaledPoint(ECFieldElement sx, ECFieldElement sy) - { - return Curve.CreateRawPoint(RawXCoord.Multiply(sx), RawYCoord.Multiply(sy), IsCompressed); - } - - public bool IsInfinity - { - get { return m_x == null && m_y == null; } - } - - public bool IsCompressed - { - get { return m_withCompression; } - } - - public bool IsValid() - { - if (IsInfinity) - return true; - - // TODO Sanity-check the field elements - - ECCurve curve = Curve; - if (curve != null) - { - if (!SatisfiesCurveEquation()) - return false; - - if (!SatisfiesCofactor()) - return false; - } - - return true; - } - - public virtual ECPoint ScaleX(ECFieldElement scale) - { - return IsInfinity - ? this - : Curve.CreateRawPoint(RawXCoord.Multiply(scale), RawYCoord, RawZCoords, IsCompressed); - } - - public virtual ECPoint ScaleY(ECFieldElement scale) - { - return IsInfinity - ? this - : Curve.CreateRawPoint(RawXCoord, RawYCoord.Multiply(scale), RawZCoords, IsCompressed); - } - - public override bool Equals(object obj) - { - return Equals(obj as ECPoint); - } - - public virtual bool Equals(ECPoint other) - { - if (this == other) - return true; - if (null == other) - return false; - - ECCurve c1 = this.Curve, c2 = other.Curve; - bool n1 = (null == c1), n2 = (null == c2); - bool i1 = IsInfinity, i2 = other.IsInfinity; - - if (i1 || i2) - { - return (i1 && i2) && (n1 || n2 || c1.Equals(c2)); - } - - ECPoint p1 = this, p2 = other; - if (n1 && n2) - { - // Points with null curve are in affine form, so already normalized - } - else if (n1) - { - p2 = p2.Normalize(); - } - else if (n2) - { - p1 = p1.Normalize(); - } - else if (!c1.Equals(c2)) - { - return false; - } - else - { - // TODO Consider just requiring already normalized, to avoid silent performance degradation - - ECPoint[] points = new ECPoint[] { this, c1.ImportPoint(p2) }; - - // TODO This is a little strong, really only requires coZNormalizeAll to get Zs equal - c1.NormalizeAll(points); - - p1 = points[0]; - p2 = points[1]; - } - - return p1.XCoord.Equals(p2.XCoord) && p1.YCoord.Equals(p2.YCoord); - } - - public override int GetHashCode() - { - ECCurve c = this.Curve; - int hc = (null == c) ? 0 : ~c.GetHashCode(); - - if (!this.IsInfinity) - { - // TODO Consider just requiring already normalized, to avoid silent performance degradation - - ECPoint p = Normalize(); - - hc ^= p.XCoord.GetHashCode() * 17; - hc ^= p.YCoord.GetHashCode() * 257; - } - - return hc; - } - - public override string ToString() - { - if (this.IsInfinity) - { - return "INF"; - } - - StringBuilder sb = new StringBuilder(); - sb.Append('('); - sb.Append(RawXCoord); - sb.Append(','); - sb.Append(RawYCoord); - for (int i = 0; i < m_zs.Length; ++i) - { - sb.Append(','); - sb.Append(m_zs[i]); - } - sb.Append(')'); - return sb.ToString(); - } - - public virtual byte[] GetEncoded() - { - return GetEncoded(m_withCompression); - } - - public abstract byte[] GetEncoded(bool compressed); - - protected internal abstract bool CompressionYTilde { get; } - - public abstract ECPoint Add(ECPoint b); - public abstract ECPoint Subtract(ECPoint b); - public abstract ECPoint Negate(); - - public virtual ECPoint TimesPow2(int e) - { - if (e < 0) - throw new ArgumentException("cannot be negative", "e"); - - ECPoint p = this; - while (--e >= 0) - { - p = p.Twice(); - } - return p; - } - - public abstract ECPoint Twice(); - public abstract ECPoint Multiply(BigInteger b); - - public virtual ECPoint TwicePlus(ECPoint b) - { - return Twice().Add(b); - } - - public virtual ECPoint ThreeTimes() - { - return TwicePlus(this); - } - } - - public abstract class ECPointBase - : ECPoint - { - protected internal ECPointBase( - ECCurve curve, - ECFieldElement x, - ECFieldElement y, - bool withCompression) - : base(curve, x, y, withCompression) - { - } - - protected internal ECPointBase(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - /** - * return the field element encoded with point compression. (S 4.3.6) - */ - public override byte[] GetEncoded(bool compressed) - { - if (this.IsInfinity) - { - return new byte[1]; - } - - ECPoint normed = Normalize(); - - byte[] X = normed.XCoord.GetEncoded(); - - if (compressed) - { - byte[] PO = new byte[X.Length + 1]; - PO[0] = (byte)(normed.CompressionYTilde ? 0x03 : 0x02); - Array.Copy(X, 0, PO, 1, X.Length); - return PO; - } - - byte[] Y = normed.YCoord.GetEncoded(); - - { - byte[] PO = new byte[X.Length + Y.Length + 1]; - PO[0] = 0x04; - Array.Copy(X, 0, PO, 1, X.Length); - Array.Copy(Y, 0, PO, X.Length + 1, Y.Length); - return PO; - } - } - - /** - * Multiplies this ECPoint by the given number. - * @param k The multiplicator. - * @return k * this. - */ - public override ECPoint Multiply(BigInteger k) - { - return this.Curve.GetMultiplier().Multiply(this, k); - } - } - - public abstract class AbstractFpPoint - : ECPointBase - { - protected AbstractFpPoint(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - } - - protected AbstractFpPoint(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected internal override bool CompressionYTilde - { - get { return this.AffineYCoord.TestBitZero(); } - } - - protected override bool SatisfiesCurveEquation() - { - ECFieldElement X = this.RawXCoord, Y = this.RawYCoord, A = Curve.A, B = Curve.B; - ECFieldElement lhs = Y.Square(); - - switch (CurveCoordinateSystem) - { - case ECCurve.COORD_AFFINE: - break; - case ECCurve.COORD_HOMOGENEOUS: - { - ECFieldElement Z = this.RawZCoords[0]; - if (!Z.IsOne) - { - ECFieldElement Z2 = Z.Square(), Z3 = Z.Multiply(Z2); - lhs = lhs.Multiply(Z); - A = A.Multiply(Z2); - B = B.Multiply(Z3); - } - break; - } - case ECCurve.COORD_JACOBIAN: - case ECCurve.COORD_JACOBIAN_CHUDNOVSKY: - case ECCurve.COORD_JACOBIAN_MODIFIED: - { - ECFieldElement Z = this.RawZCoords[0]; - if (!Z.IsOne) - { - ECFieldElement Z2 = Z.Square(), Z4 = Z2.Square(), Z6 = Z2.Multiply(Z4); - A = A.Multiply(Z4); - B = B.Multiply(Z6); - } - break; - } - default: - throw new InvalidOperationException("unsupported coordinate system"); - } - - ECFieldElement rhs = X.Square().Add(A).Multiply(X).Add(B); - return lhs.Equals(rhs); - } - - public override ECPoint Subtract(ECPoint b) - { - if (b.IsInfinity) - return this; - - // Add -b - return Add(b.Negate()); - } - } - - /** - * Elliptic curve points over Fp - */ - public class FpPoint - : AbstractFpPoint - { - /** - * Create a point which encodes without point compression. - * - * @param curve the curve to use - * @param x affine x co-ordinate - * @param y affine y co-ordinate - */ - public FpPoint(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * Create a point that encodes with or without point compression. - * - * @param curve the curve to use - * @param x affine x co-ordinate - * @param y affine y co-ordinate - * @param withCompression if true encode with point compression - */ - public FpPoint(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal FpPoint(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new FpPoint(null, AffineXCoord, AffineYCoord); - } - - public override ECFieldElement GetZCoord(int index) - { - if (index == 1 && ECCurve.COORD_JACOBIAN_MODIFIED == this.CurveCoordinateSystem) - { - return GetJacobianModifiedW(); - } - - return base.GetZCoord(index); - } - - // B.3 pg 62 - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - if (this == b) - return Twice(); - - ECCurve curve = this.Curve; - int coord = curve.CoordinateSystem; - - ECFieldElement X1 = this.RawXCoord, Y1 = this.RawYCoord; - ECFieldElement X2 = b.RawXCoord, Y2 = b.RawYCoord; - - switch (coord) - { - case ECCurve.COORD_AFFINE: - { - ECFieldElement dx = X2.Subtract(X1), dy = Y2.Subtract(Y1); - - if (dx.IsZero) - { - if (dy.IsZero) - { - // this == b, i.e. this must be doubled - return Twice(); - } - - // this == -b, i.e. the result is the point at infinity - return Curve.Infinity; - } - - ECFieldElement gamma = dy.Divide(dx); - ECFieldElement X3 = gamma.Square().Subtract(X1).Subtract(X2); - ECFieldElement Y3 = gamma.Multiply(X1.Subtract(X3)).Subtract(Y1); - - return new FpPoint(Curve, X3, Y3, IsCompressed); - } - - case ECCurve.COORD_HOMOGENEOUS: - { - ECFieldElement Z1 = this.RawZCoords[0]; - ECFieldElement Z2 = b.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - bool Z2IsOne = Z2.IsOne; - - ECFieldElement u1 = Z1IsOne ? Y2 : Y2.Multiply(Z1); - ECFieldElement u2 = Z2IsOne ? Y1 : Y1.Multiply(Z2); - ECFieldElement u = u1.Subtract(u2); - ECFieldElement v1 = Z1IsOne ? X2 : X2.Multiply(Z1); - ECFieldElement v2 = Z2IsOne ? X1 : X1.Multiply(Z2); - ECFieldElement v = v1.Subtract(v2); - - // Check if b == this or b == -this - if (v.IsZero) - { - if (u.IsZero) - { - // this == b, i.e. this must be doubled - return this.Twice(); - } - - // this == -b, i.e. the result is the point at infinity - return curve.Infinity; - } - - // TODO Optimize for when w == 1 - ECFieldElement w = Z1IsOne ? Z2 : Z2IsOne ? Z1 : Z1.Multiply(Z2); - ECFieldElement vSquared = v.Square(); - ECFieldElement vCubed = vSquared.Multiply(v); - ECFieldElement vSquaredV2 = vSquared.Multiply(v2); - ECFieldElement A = u.Square().Multiply(w).Subtract(vCubed).Subtract(Two(vSquaredV2)); - - ECFieldElement X3 = v.Multiply(A); - ECFieldElement Y3 = vSquaredV2.Subtract(A).MultiplyMinusProduct(u, u2, vCubed); - ECFieldElement Z3 = vCubed.Multiply(w); - - return new FpPoint(curve, X3, Y3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - case ECCurve.COORD_JACOBIAN: - case ECCurve.COORD_JACOBIAN_MODIFIED: - { - ECFieldElement Z1 = this.RawZCoords[0]; - ECFieldElement Z2 = b.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - - ECFieldElement X3, Y3, Z3, Z3Squared = null; - - if (!Z1IsOne && Z1.Equals(Z2)) - { - // TODO Make this available as public method coZAdd? - - ECFieldElement dx = X1.Subtract(X2), dy = Y1.Subtract(Y2); - if (dx.IsZero) - { - if (dy.IsZero) - { - return Twice(); - } - return curve.Infinity; - } - - ECFieldElement C = dx.Square(); - ECFieldElement W1 = X1.Multiply(C), W2 = X2.Multiply(C); - ECFieldElement A1 = W1.Subtract(W2).Multiply(Y1); - - X3 = dy.Square().Subtract(W1).Subtract(W2); - Y3 = W1.Subtract(X3).Multiply(dy).Subtract(A1); - Z3 = dx; - - if (Z1IsOne) - { - Z3Squared = C; - } - else - { - Z3 = Z3.Multiply(Z1); - } - } - else - { - ECFieldElement Z1Squared, U2, S2; - if (Z1IsOne) - { - Z1Squared = Z1; U2 = X2; S2 = Y2; - } - else - { - Z1Squared = Z1.Square(); - U2 = Z1Squared.Multiply(X2); - ECFieldElement Z1Cubed = Z1Squared.Multiply(Z1); - S2 = Z1Cubed.Multiply(Y2); - } - - bool Z2IsOne = Z2.IsOne; - ECFieldElement Z2Squared, U1, S1; - if (Z2IsOne) - { - Z2Squared = Z2; U1 = X1; S1 = Y1; - } - else - { - Z2Squared = Z2.Square(); - U1 = Z2Squared.Multiply(X1); - ECFieldElement Z2Cubed = Z2Squared.Multiply(Z2); - S1 = Z2Cubed.Multiply(Y1); - } - - ECFieldElement H = U1.Subtract(U2); - ECFieldElement R = S1.Subtract(S2); - - // Check if b == this or b == -this - if (H.IsZero) - { - if (R.IsZero) - { - // this == b, i.e. this must be doubled - return this.Twice(); - } - - // this == -b, i.e. the result is the point at infinity - return curve.Infinity; - } - - ECFieldElement HSquared = H.Square(); - ECFieldElement G = HSquared.Multiply(H); - ECFieldElement V = HSquared.Multiply(U1); - - X3 = R.Square().Add(G).Subtract(Two(V)); - Y3 = V.Subtract(X3).MultiplyMinusProduct(R, G, S1); - - Z3 = H; - if (!Z1IsOne) - { - Z3 = Z3.Multiply(Z1); - } - if (!Z2IsOne) - { - Z3 = Z3.Multiply(Z2); - } - - // Alternative calculation of Z3 using fast square - //X3 = four(X3); - //Y3 = eight(Y3); - //Z3 = doubleProductFromSquares(Z1, Z2, Z1Squared, Z2Squared).Multiply(H); - - if (Z3 == H) - { - Z3Squared = HSquared; - } - } - - ECFieldElement[] zs; - if (coord == ECCurve.COORD_JACOBIAN_MODIFIED) - { - // TODO If the result will only be used in a subsequent addition, we don't need W3 - ECFieldElement W3 = CalculateJacobianModifiedW(Z3, Z3Squared); - - zs = new ECFieldElement[] { Z3, W3 }; - } - else - { - zs = new ECFieldElement[] { Z3 }; - } - - return new FpPoint(curve, X3, Y3, zs, IsCompressed); - } - - default: - { - throw new InvalidOperationException("unsupported coordinate system"); - } - } - } - - // B.3 pg 62 - public override ECPoint Twice() - { - if (this.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - ECFieldElement Y1 = this.RawYCoord; - if (Y1.IsZero) - return curve.Infinity; - - int coord = curve.CoordinateSystem; - - ECFieldElement X1 = this.RawXCoord; - - switch (coord) - { - case ECCurve.COORD_AFFINE: - { - ECFieldElement X1Squared = X1.Square(); - ECFieldElement gamma = Three(X1Squared).Add(this.Curve.A).Divide(Two(Y1)); - ECFieldElement X3 = gamma.Square().Subtract(Two(X1)); - ECFieldElement Y3 = gamma.Multiply(X1.Subtract(X3)).Subtract(Y1); - - return new FpPoint(Curve, X3, Y3, IsCompressed); - } - - case ECCurve.COORD_HOMOGENEOUS: - { - ECFieldElement Z1 = this.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - - // TODO Optimize for small negative a4 and -3 - ECFieldElement w = curve.A; - if (!w.IsZero && !Z1IsOne) - { - w = w.Multiply(Z1.Square()); - } - w = w.Add(Three(X1.Square())); - - ECFieldElement s = Z1IsOne ? Y1 : Y1.Multiply(Z1); - ECFieldElement t = Z1IsOne ? Y1.Square() : s.Multiply(Y1); - ECFieldElement B = X1.Multiply(t); - ECFieldElement _4B = Four(B); - ECFieldElement h = w.Square().Subtract(Two(_4B)); - - ECFieldElement _2s = Two(s); - ECFieldElement X3 = h.Multiply(_2s); - ECFieldElement _2t = Two(t); - ECFieldElement Y3 = _4B.Subtract(h).Multiply(w).Subtract(Two(_2t.Square())); - ECFieldElement _4sSquared = Z1IsOne ? Two(_2t) : _2s.Square(); - ECFieldElement Z3 = Two(_4sSquared).Multiply(s); - - return new FpPoint(curve, X3, Y3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - case ECCurve.COORD_JACOBIAN: - { - ECFieldElement Z1 = this.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - - ECFieldElement Y1Squared = Y1.Square(); - ECFieldElement T = Y1Squared.Square(); - - ECFieldElement a4 = curve.A; - ECFieldElement a4Neg = a4.Negate(); - - ECFieldElement M, S; - if (a4Neg.ToBigInteger().Equals(BigInteger.ValueOf(3))) - { - ECFieldElement Z1Squared = Z1IsOne ? Z1 : Z1.Square(); - M = Three(X1.Add(Z1Squared).Multiply(X1.Subtract(Z1Squared))); - S = Four(Y1Squared.Multiply(X1)); - } - else - { - ECFieldElement X1Squared = X1.Square(); - M = Three(X1Squared); - if (Z1IsOne) - { - M = M.Add(a4); - } - else if (!a4.IsZero) - { - ECFieldElement Z1Squared = Z1IsOne ? Z1 : Z1.Square(); - ECFieldElement Z1Pow4 = Z1Squared.Square(); - if (a4Neg.BitLength < a4.BitLength) - { - M = M.Subtract(Z1Pow4.Multiply(a4Neg)); - } - else - { - M = M.Add(Z1Pow4.Multiply(a4)); - } - } - //S = two(doubleProductFromSquares(X1, Y1Squared, X1Squared, T)); - S = Four(X1.Multiply(Y1Squared)); - } - - ECFieldElement X3 = M.Square().Subtract(Two(S)); - ECFieldElement Y3 = S.Subtract(X3).Multiply(M).Subtract(Eight(T)); - - ECFieldElement Z3 = Two(Y1); - if (!Z1IsOne) - { - Z3 = Z3.Multiply(Z1); - } - - // Alternative calculation of Z3 using fast square - //ECFieldElement Z3 = doubleProductFromSquares(Y1, Z1, Y1Squared, Z1Squared); - - return new FpPoint(curve, X3, Y3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - case ECCurve.COORD_JACOBIAN_MODIFIED: - { - return TwiceJacobianModified(true); - } - - default: - { - throw new InvalidOperationException("unsupported coordinate system"); - } - } - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this == b) - return ThreeTimes(); - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECFieldElement Y1 = this.RawYCoord; - if (Y1.IsZero) - return b; - - ECCurve curve = this.Curve; - int coord = curve.CoordinateSystem; - - switch (coord) - { - case ECCurve.COORD_AFFINE: - { - ECFieldElement X1 = this.RawXCoord; - ECFieldElement X2 = b.RawXCoord, Y2 = b.RawYCoord; - - ECFieldElement dx = X2.Subtract(X1), dy = Y2.Subtract(Y1); - - if (dx.IsZero) - { - if (dy.IsZero) - { - // this == b i.e. the result is 3P - return ThreeTimes(); - } - - // this == -b, i.e. the result is P - return this; - } - - /* - * Optimized calculation of 2P + Q, as described in "Trading Inversions for - * Multiplications in Elliptic Curve Cryptography", by Ciet, Joye, Lauter, Montgomery. - */ - - ECFieldElement X = dx.Square(), Y = dy.Square(); - ECFieldElement d = X.Multiply(Two(X1).Add(X2)).Subtract(Y); - if (d.IsZero) - { - return Curve.Infinity; - } - - ECFieldElement D = d.Multiply(dx); - ECFieldElement I = D.Invert(); - ECFieldElement L1 = d.Multiply(I).Multiply(dy); - ECFieldElement L2 = Two(Y1).Multiply(X).Multiply(dx).Multiply(I).Subtract(L1); - ECFieldElement X4 = (L2.Subtract(L1)).Multiply(L1.Add(L2)).Add(X2); - ECFieldElement Y4 = (X1.Subtract(X4)).Multiply(L2).Subtract(Y1); - - return new FpPoint(Curve, X4, Y4, IsCompressed); - } - case ECCurve.COORD_JACOBIAN_MODIFIED: - { - return TwiceJacobianModified(false).Add(b); - } - default: - { - return Twice().Add(b); - } - } - } - - public override ECPoint ThreeTimes() - { - if (this.IsInfinity) - return this; - - ECFieldElement Y1 = this.RawYCoord; - if (Y1.IsZero) - return this; - - ECCurve curve = this.Curve; - int coord = curve.CoordinateSystem; - - switch (coord) - { - case ECCurve.COORD_AFFINE: - { - ECFieldElement X1 = this.RawXCoord; - - ECFieldElement _2Y1 = Two(Y1); - ECFieldElement X = _2Y1.Square(); - ECFieldElement Z = Three(X1.Square()).Add(Curve.A); - ECFieldElement Y = Z.Square(); - - ECFieldElement d = Three(X1).Multiply(X).Subtract(Y); - if (d.IsZero) - { - return Curve.Infinity; - } - - ECFieldElement D = d.Multiply(_2Y1); - ECFieldElement I = D.Invert(); - ECFieldElement L1 = d.Multiply(I).Multiply(Z); - ECFieldElement L2 = X.Square().Multiply(I).Subtract(L1); - - ECFieldElement X4 = (L2.Subtract(L1)).Multiply(L1.Add(L2)).Add(X1); - ECFieldElement Y4 = (X1.Subtract(X4)).Multiply(L2).Subtract(Y1); - return new FpPoint(Curve, X4, Y4, IsCompressed); - } - case ECCurve.COORD_JACOBIAN_MODIFIED: - { - return TwiceJacobianModified(false).Add(this); - } - default: - { - // NOTE: Be careful about recursions between TwicePlus and ThreeTimes - return Twice().Add(this); - } - } - } - - public override ECPoint TimesPow2(int e) - { - if (e < 0) - throw new ArgumentException("cannot be negative", "e"); - if (e == 0 || this.IsInfinity) - return this; - if (e == 1) - return Twice(); - - ECCurve curve = this.Curve; - - ECFieldElement Y1 = this.RawYCoord; - if (Y1.IsZero) - return curve.Infinity; - - int coord = curve.CoordinateSystem; - - ECFieldElement W1 = curve.A; - ECFieldElement X1 = this.RawXCoord; - ECFieldElement Z1 = this.RawZCoords.Length < 1 ? curve.FromBigInteger(BigInteger.One) : this.RawZCoords[0]; - - if (!Z1.IsOne) - { - switch (coord) - { - case ECCurve.COORD_HOMOGENEOUS: - ECFieldElement Z1Sq = Z1.Square(); - X1 = X1.Multiply(Z1); - Y1 = Y1.Multiply(Z1Sq); - W1 = CalculateJacobianModifiedW(Z1, Z1Sq); - break; - case ECCurve.COORD_JACOBIAN: - W1 = CalculateJacobianModifiedW(Z1, null); - break; - case ECCurve.COORD_JACOBIAN_MODIFIED: - W1 = GetJacobianModifiedW(); - break; - } - } - - for (int i = 0; i < e; ++i) - { - if (Y1.IsZero) - return curve.Infinity; - - ECFieldElement X1Squared = X1.Square(); - ECFieldElement M = Three(X1Squared); - ECFieldElement _2Y1 = Two(Y1); - ECFieldElement _2Y1Squared = _2Y1.Multiply(Y1); - ECFieldElement S = Two(X1.Multiply(_2Y1Squared)); - ECFieldElement _4T = _2Y1Squared.Square(); - ECFieldElement _8T = Two(_4T); - - if (!W1.IsZero) - { - M = M.Add(W1); - W1 = Two(_8T.Multiply(W1)); - } - - X1 = M.Square().Subtract(Two(S)); - Y1 = M.Multiply(S.Subtract(X1)).Subtract(_8T); - Z1 = Z1.IsOne ? _2Y1 : _2Y1.Multiply(Z1); - } - - switch (coord) - { - case ECCurve.COORD_AFFINE: - ECFieldElement zInv = Z1.Invert(), zInv2 = zInv.Square(), zInv3 = zInv2.Multiply(zInv); - return new FpPoint(curve, X1.Multiply(zInv2), Y1.Multiply(zInv3), IsCompressed); - case ECCurve.COORD_HOMOGENEOUS: - X1 = X1.Multiply(Z1); - Z1 = Z1.Multiply(Z1.Square()); - return new FpPoint(curve, X1, Y1, new ECFieldElement[] { Z1 }, IsCompressed); - case ECCurve.COORD_JACOBIAN: - return new FpPoint(curve, X1, Y1, new ECFieldElement[] { Z1 }, IsCompressed); - case ECCurve.COORD_JACOBIAN_MODIFIED: - return new FpPoint(curve, X1, Y1, new ECFieldElement[] { Z1, W1 }, IsCompressed); - default: - throw new InvalidOperationException("unsupported coordinate system"); - } - } - - protected virtual ECFieldElement Two(ECFieldElement x) - { - return x.Add(x); - } - - protected virtual ECFieldElement Three(ECFieldElement x) - { - return Two(x).Add(x); - } - - protected virtual ECFieldElement Four(ECFieldElement x) - { - return Two(Two(x)); - } - - protected virtual ECFieldElement Eight(ECFieldElement x) - { - return Four(Two(x)); - } - - protected virtual ECFieldElement DoubleProductFromSquares(ECFieldElement a, ECFieldElement b, - ECFieldElement aSquared, ECFieldElement bSquared) - { - /* - * NOTE: If squaring in the field is faster than multiplication, then this is a quicker - * way to calculate 2.A.B, if A^2 and B^2 are already known. - */ - return a.Add(b).Square().Subtract(aSquared).Subtract(bSquared); - } - - public override ECPoint Negate() - { - if (IsInfinity) - return this; - - ECCurve curve = Curve; - int coord = curve.CoordinateSystem; - - if (ECCurve.COORD_AFFINE != coord) - { - return new FpPoint(curve, RawXCoord, RawYCoord.Negate(), RawZCoords, IsCompressed); - } - - return new FpPoint(curve, RawXCoord, RawYCoord.Negate(), IsCompressed); - } - - protected virtual ECFieldElement CalculateJacobianModifiedW(ECFieldElement Z, ECFieldElement ZSquared) - { - ECFieldElement a4 = this.Curve.A; - if (a4.IsZero || Z.IsOne) - return a4; - - if (ZSquared == null) - { - ZSquared = Z.Square(); - } - - ECFieldElement W = ZSquared.Square(); - ECFieldElement a4Neg = a4.Negate(); - if (a4Neg.BitLength < a4.BitLength) - { - W = W.Multiply(a4Neg).Negate(); - } - else - { - W = W.Multiply(a4); - } - return W; - } - - protected virtual ECFieldElement GetJacobianModifiedW() - { - ECFieldElement[] ZZ = this.RawZCoords; - ECFieldElement W = ZZ[1]; - if (W == null) - { - // NOTE: Rarely, TwicePlus will result in the need for a lazy W1 calculation here - ZZ[1] = W = CalculateJacobianModifiedW(ZZ[0], null); - } - return W; - } - - protected virtual FpPoint TwiceJacobianModified(bool calculateW) - { - ECFieldElement X1 = this.RawXCoord, Y1 = this.RawYCoord, Z1 = this.RawZCoords[0], W1 = GetJacobianModifiedW(); - - ECFieldElement X1Squared = X1.Square(); - ECFieldElement M = Three(X1Squared).Add(W1); - ECFieldElement _2Y1 = Two(Y1); - ECFieldElement _2Y1Squared = _2Y1.Multiply(Y1); - ECFieldElement S = Two(X1.Multiply(_2Y1Squared)); - ECFieldElement X3 = M.Square().Subtract(Two(S)); - ECFieldElement _4T = _2Y1Squared.Square(); - ECFieldElement _8T = Two(_4T); - ECFieldElement Y3 = M.Multiply(S.Subtract(X3)).Subtract(_8T); - ECFieldElement W3 = calculateW ? Two(_8T.Multiply(W1)) : null; - ECFieldElement Z3 = Z1.IsOne ? _2Y1 : _2Y1.Multiply(Z1); - - return new FpPoint(this.Curve, X3, Y3, new ECFieldElement[] { Z3, W3 }, IsCompressed); - } - } - - public abstract class AbstractF2mPoint - : ECPointBase - { - protected AbstractF2mPoint(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - } - - protected AbstractF2mPoint(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override bool SatisfiesCurveEquation() - { - ECCurve curve = Curve; - ECFieldElement X = this.RawXCoord, Y = this.RawYCoord, A = curve.A, B = curve.B; - ECFieldElement lhs, rhs; - - int coord = curve.CoordinateSystem; - if (coord == ECCurve.COORD_LAMBDA_PROJECTIVE) - { - ECFieldElement Z = this.RawZCoords[0]; - bool ZIsOne = Z.IsOne; - - if (X.IsZero) - { - // NOTE: For x == 0, we expect the affine-y instead of the lambda-y - lhs = Y.Square(); - rhs = B; - if (!ZIsOne) - { - ECFieldElement Z2 = Z.Square(); - rhs = rhs.Multiply(Z2); - } - } - else - { - ECFieldElement L = Y, X2 = X.Square(); - if (ZIsOne) - { - lhs = L.Square().Add(L).Add(A); - rhs = X2.Square().Add(B); - } - else - { - ECFieldElement Z2 = Z.Square(), Z4 = Z2.Square(); - lhs = L.Add(Z).MultiplyPlusProduct(L, A, Z2); - // TODO If sqrt(b) is precomputed this can be simplified to a single square - rhs = X2.SquarePlusProduct(B, Z4); - } - lhs = lhs.Multiply(X2); - } - } - else - { - lhs = Y.Add(X).Multiply(Y); - - switch (coord) - { - case ECCurve.COORD_AFFINE: - break; - case ECCurve.COORD_HOMOGENEOUS: - { - ECFieldElement Z = this.RawZCoords[0]; - if (!Z.IsOne) - { - ECFieldElement Z2 = Z.Square(), Z3 = Z.Multiply(Z2); - lhs = lhs.Multiply(Z); - A = A.Multiply(Z); - B = B.Multiply(Z3); - } - break; - } - default: - throw new InvalidOperationException("unsupported coordinate system"); - } - - rhs = X.Add(A).Multiply(X.Square()).Add(B); - } - - return lhs.Equals(rhs); - } - - public override ECPoint ScaleX(ECFieldElement scale) - { - if (this.IsInfinity) - return this; - - switch (CurveCoordinateSystem) - { - case ECCurve.COORD_LAMBDA_AFFINE: - { - // Y is actually Lambda (X + Y/X) here - ECFieldElement X = RawXCoord, L = RawYCoord; - - ECFieldElement X2 = X.Multiply(scale); - ECFieldElement L2 = L.Add(X).Divide(scale).Add(X2); - - return Curve.CreateRawPoint(X, L2, RawZCoords, IsCompressed); - } - case ECCurve.COORD_LAMBDA_PROJECTIVE: - { - // Y is actually Lambda (X + Y/X) here - ECFieldElement X = RawXCoord, L = RawYCoord, Z = RawZCoords[0]; - - // We scale the Z coordinate also, to avoid an inversion - ECFieldElement X2 = X.Multiply(scale.Square()); - ECFieldElement L2 = L.Add(X).Add(X2); - ECFieldElement Z2 = Z.Multiply(scale); - - return Curve.CreateRawPoint(X, L2, new ECFieldElement[] { Z2 }, IsCompressed); - } - default: - { - return base.ScaleX(scale); - } - } - } - - public override ECPoint ScaleY(ECFieldElement scale) - { - if (this.IsInfinity) - return this; - - switch (CurveCoordinateSystem) - { - case ECCurve.COORD_LAMBDA_AFFINE: - case ECCurve.COORD_LAMBDA_PROJECTIVE: - { - ECFieldElement X = RawXCoord, L = RawYCoord; - - // Y is actually Lambda (X + Y/X) here - ECFieldElement L2 = L.Add(X).Multiply(scale).Add(X); - - return Curve.CreateRawPoint(X, L2, RawZCoords, IsCompressed); - } - default: - { - return base.ScaleY(scale); - } - } - } - - public override ECPoint Subtract(ECPoint b) - { - if (b.IsInfinity) - return this; - - // Add -b - return Add(b.Negate()); - } - - public virtual AbstractF2mPoint Tau() - { - if (this.IsInfinity) - return this; - - ECCurve curve = this.Curve; - int coord = curve.CoordinateSystem; - - ECFieldElement X1 = this.RawXCoord; - - switch (coord) - { - case ECCurve.COORD_AFFINE: - case ECCurve.COORD_LAMBDA_AFFINE: - { - ECFieldElement Y1 = this.RawYCoord; - return (AbstractF2mPoint)curve.CreateRawPoint(X1.Square(), Y1.Square(), IsCompressed); - } - case ECCurve.COORD_HOMOGENEOUS: - case ECCurve.COORD_LAMBDA_PROJECTIVE: - { - ECFieldElement Y1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - return (AbstractF2mPoint)curve.CreateRawPoint(X1.Square(), Y1.Square(), - new ECFieldElement[] { Z1.Square() }, IsCompressed); - } - default: - { - throw new InvalidOperationException("unsupported coordinate system"); - } - } - } - - public virtual AbstractF2mPoint TauPow(int pow) - { - if (this.IsInfinity) - return this; - - ECCurve curve = this.Curve; - int coord = curve.CoordinateSystem; - - ECFieldElement X1 = this.RawXCoord; - - switch (coord) - { - case ECCurve.COORD_AFFINE: - case ECCurve.COORD_LAMBDA_AFFINE: - { - ECFieldElement Y1 = this.RawYCoord; - return (AbstractF2mPoint)curve.CreateRawPoint(X1.SquarePow(pow), Y1.SquarePow(pow), IsCompressed); - } - case ECCurve.COORD_HOMOGENEOUS: - case ECCurve.COORD_LAMBDA_PROJECTIVE: - { - ECFieldElement Y1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - return (AbstractF2mPoint)curve.CreateRawPoint(X1.SquarePow(pow), Y1.SquarePow(pow), - new ECFieldElement[] { Z1.SquarePow(pow) }, IsCompressed); - } - default: - { - throw new InvalidOperationException("unsupported coordinate system"); - } - } - } - } - - /** - * Elliptic curve points over F2m - */ - public class F2mPoint - : AbstractF2mPoint - { - /** - * @param curve base curve - * @param x x point - * @param y y point - */ - public F2mPoint( - ECCurve curve, - ECFieldElement x, - ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * @param curve base curve - * @param x x point - * @param y y point - * @param withCompression true if encode with point compression. - */ - public F2mPoint( - ECCurve curve, - ECFieldElement x, - ECFieldElement y, - bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - { - throw new ArgumentException("Exactly one of the field elements is null"); - } - - if (x != null) - { - // Check if x and y are elements of the same field - F2mFieldElement.CheckFieldElements(x, y); - - // Check if x and a are elements of the same field - if (curve != null) - { - F2mFieldElement.CheckFieldElements(x, curve.A); - } - } - } - - internal F2mPoint(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - /** - * Constructor for point at infinity - */ - [Obsolete("Use ECCurve.Infinity property")] - public F2mPoint( - ECCurve curve) - : this(curve, null, null) - { - } - - protected override ECPoint Detach() - { - return new F2mPoint(null, AffineXCoord, AffineYCoord); - } - - public override ECFieldElement YCoord - { - get - { - int coord = this.CurveCoordinateSystem; - - switch (coord) - { - case ECCurve.COORD_LAMBDA_AFFINE: - case ECCurve.COORD_LAMBDA_PROJECTIVE: - { - ECFieldElement X = RawXCoord, L = RawYCoord; - - if (this.IsInfinity || X.IsZero) - return L; - - // Y is actually Lambda (X + Y/X) here; convert to affine value on the fly - ECFieldElement Y = L.Add(X).Multiply(X); - if (ECCurve.COORD_LAMBDA_PROJECTIVE == coord) - { - ECFieldElement Z = RawZCoords[0]; - if (!Z.IsOne) - { - Y = Y.Divide(Z); - } - } - return Y; - } - default: - { - return RawYCoord; - } - } - } - } - - protected internal override bool CompressionYTilde - { - get - { - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - { - return false; - } - - ECFieldElement Y = this.RawYCoord; - - switch (this.CurveCoordinateSystem) - { - case ECCurve.COORD_LAMBDA_AFFINE: - case ECCurve.COORD_LAMBDA_PROJECTIVE: - { - // Y is actually Lambda (X + Y/X) here - return Y.TestBitZero() != X.TestBitZero(); - } - default: - { - return Y.Divide(X).TestBitZero(); - } - } - } - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - - ECCurve curve = this.Curve; - int coord = curve.CoordinateSystem; - - ECFieldElement X1 = this.RawXCoord; - ECFieldElement X2 = b.RawXCoord; - - switch (coord) - { - case ECCurve.COORD_AFFINE: - { - ECFieldElement Y1 = this.RawYCoord; - ECFieldElement Y2 = b.RawYCoord; - - ECFieldElement dx = X1.Add(X2), dy = Y1.Add(Y2); - if (dx.IsZero) - { - if (dy.IsZero) - { - return Twice(); - } - - return curve.Infinity; - } - - ECFieldElement L = dy.Divide(dx); - - ECFieldElement X3 = L.Square().Add(L).Add(dx).Add(curve.A); - ECFieldElement Y3 = L.Multiply(X1.Add(X3)).Add(X3).Add(Y1); - - return new F2mPoint(curve, X3, Y3, IsCompressed); - } - case ECCurve.COORD_HOMOGENEOUS: - { - ECFieldElement Y1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement Y2 = b.RawYCoord, Z2 = b.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement U1 = Y2, V1 = X2; - if (!Z1IsOne) - { - U1 = U1.Multiply(Z1); - V1 = V1.Multiply(Z1); - } - - bool Z2IsOne = Z2.IsOne; - ECFieldElement U2 = Y1, V2 = X1; - if (!Z2IsOne) - { - U2 = U2.Multiply(Z2); - V2 = V2.Multiply(Z2); - } - - ECFieldElement U = U1.Add(U2); - ECFieldElement V = V1.Add(V2); - - if (V.IsZero) - { - if (U.IsZero) - { - return Twice(); - } - - return curve.Infinity; - } - - ECFieldElement VSq = V.Square(); - ECFieldElement VCu = VSq.Multiply(V); - ECFieldElement W = Z1IsOne ? Z2 : Z2IsOne ? Z1 : Z1.Multiply(Z2); - ECFieldElement uv = U.Add(V); - ECFieldElement A = uv.MultiplyPlusProduct(U, VSq, curve.A).Multiply(W).Add(VCu); - - ECFieldElement X3 = V.Multiply(A); - ECFieldElement VSqZ2 = Z2IsOne ? VSq : VSq.Multiply(Z2); - ECFieldElement Y3 = U.MultiplyPlusProduct(X1, V, Y1).MultiplyPlusProduct(VSqZ2, uv, A); - ECFieldElement Z3 = VCu.Multiply(W); - - return new F2mPoint(curve, X3, Y3, new ECFieldElement[] { Z3 }, IsCompressed); - } - case ECCurve.COORD_LAMBDA_PROJECTIVE: - { - if (X1.IsZero) - { - if (X2.IsZero) - return curve.Infinity; - - return b.Add(this); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord, Z2 = b.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement U2 = X2, S2 = L2; - if (!Z1IsOne) - { - U2 = U2.Multiply(Z1); - S2 = S2.Multiply(Z1); - } - - bool Z2IsOne = Z2.IsOne; - ECFieldElement U1 = X1, S1 = L1; - if (!Z2IsOne) - { - U1 = U1.Multiply(Z2); - S1 = S1.Multiply(Z2); - } - - ECFieldElement A = S1.Add(S2); - ECFieldElement B = U1.Add(U2); - - if (B.IsZero) - { - if (A.IsZero) - { - return Twice(); - } - - return curve.Infinity; - } - - ECFieldElement X3, L3, Z3; - if (X2.IsZero) - { - // TODO This can probably be optimized quite a bit - ECPoint p = this.Normalize(); - X1 = p.RawXCoord; - ECFieldElement Y1 = p.YCoord; - - ECFieldElement Y2 = L2; - ECFieldElement L = Y1.Add(Y2).Divide(X1); - - X3 = L.Square().Add(L).Add(X1).Add(curve.A); - if (X3.IsZero) - { - return new F2mPoint(curve, X3, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement Y3 = L.Multiply(X1.Add(X3)).Add(X3).Add(Y1); - L3 = Y3.Divide(X3).Add(X3); - Z3 = curve.FromBigInteger(BigInteger.One); - } - else - { - B = B.Square(); - - ECFieldElement AU1 = A.Multiply(U1); - ECFieldElement AU2 = A.Multiply(U2); - - X3 = AU1.Multiply(AU2); - if (X3.IsZero) - { - return new F2mPoint(curve, X3, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement ABZ2 = A.Multiply(B); - if (!Z2IsOne) - { - ABZ2 = ABZ2.Multiply(Z2); - } - - L3 = AU2.Add(B).SquarePlusProduct(ABZ2, L1.Add(Z1)); - - Z3 = ABZ2; - if (!Z1IsOne) - { - Z3 = Z3.Multiply(Z1); - } - } - - return new F2mPoint(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - default: - { - throw new InvalidOperationException("unsupported coordinate system"); - } - } - } - - /* (non-Javadoc) - * @see Org.BouncyCastle.Math.EC.ECPoint#twice() - */ - public override ECPoint Twice() - { - if (this.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own additive inverse - return curve.Infinity; - } - - int coord = curve.CoordinateSystem; - - switch (coord) - { - case ECCurve.COORD_AFFINE: - { - ECFieldElement Y1 = this.RawYCoord; - - ECFieldElement L1 = Y1.Divide(X1).Add(X1); - - ECFieldElement X3 = L1.Square().Add(L1).Add(curve.A); - ECFieldElement Y3 = X1.SquarePlusProduct(X3, L1.AddOne()); - - return new F2mPoint(curve, X3, Y3, IsCompressed); - } - case ECCurve.COORD_HOMOGENEOUS: - { - ECFieldElement Y1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement X1Z1 = Z1IsOne ? X1 : X1.Multiply(Z1); - ECFieldElement Y1Z1 = Z1IsOne ? Y1 : Y1.Multiply(Z1); - - ECFieldElement X1Sq = X1.Square(); - ECFieldElement S = X1Sq.Add(Y1Z1); - ECFieldElement V = X1Z1; - ECFieldElement vSquared = V.Square(); - ECFieldElement sv = S.Add(V); - ECFieldElement h = sv.MultiplyPlusProduct(S, vSquared, curve.A); - - ECFieldElement X3 = V.Multiply(h); - ECFieldElement Y3 = X1Sq.Square().MultiplyPlusProduct(V, h, sv); - ECFieldElement Z3 = V.Multiply(vSquared); - - return new F2mPoint(curve, X3, Y3, new ECFieldElement[] { Z3 }, IsCompressed); - } - case ECCurve.COORD_LAMBDA_PROJECTIVE: - { - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement L1Z1 = Z1IsOne ? L1 : L1.Multiply(Z1); - ECFieldElement Z1Sq = Z1IsOne ? Z1 : Z1.Square(); - ECFieldElement a = curve.A; - ECFieldElement aZ1Sq = Z1IsOne ? a : a.Multiply(Z1Sq); - ECFieldElement T = L1.Square().Add(L1Z1).Add(aZ1Sq); - if (T.IsZero) - { - return new F2mPoint(curve, T, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement X3 = T.Square(); - ECFieldElement Z3 = Z1IsOne ? T : T.Multiply(Z1Sq); - - ECFieldElement b = curve.B; - ECFieldElement L3; - if (b.BitLength < (curve.FieldSize >> 1)) - { - ECFieldElement t1 = L1.Add(X1).Square(); - ECFieldElement t2; - if (b.IsOne) - { - t2 = aZ1Sq.Add(Z1Sq).Square(); - } - else - { - // TODO Can be calculated with one square if we pre-compute sqrt(b) - t2 = aZ1Sq.SquarePlusProduct(b, Z1Sq.Square()); - } - L3 = t1.Add(T).Add(Z1Sq).Multiply(t1).Add(t2).Add(X3); - if (a.IsZero) - { - L3 = L3.Add(Z3); - } - else if (!a.IsOne) - { - L3 = L3.Add(a.AddOne().Multiply(Z3)); - } - } - else - { - ECFieldElement X1Z1 = Z1IsOne ? X1 : X1.Multiply(Z1); - L3 = X1Z1.SquarePlusProduct(T, L1Z1).Add(X3).Add(Z3); - } - - return new F2mPoint(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - default: - { - throw new InvalidOperationException("unsupported coordinate system"); - } - } - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own additive inverse - return b; - } - - int coord = curve.CoordinateSystem; - - switch (coord) - { - case ECCurve.COORD_LAMBDA_PROJECTIVE: - { - // NOTE: twicePlus() only optimized for lambda-affine argument - ECFieldElement X2 = b.RawXCoord, Z2 = b.RawZCoords[0]; - if (X2.IsZero || !Z2.IsOne) - { - return Twice().Add(b); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord; - - ECFieldElement X1Sq = X1.Square(); - ECFieldElement L1Sq = L1.Square(); - ECFieldElement Z1Sq = Z1.Square(); - ECFieldElement L1Z1 = L1.Multiply(Z1); - - ECFieldElement T = curve.A.Multiply(Z1Sq).Add(L1Sq).Add(L1Z1); - ECFieldElement L2plus1 = L2.AddOne(); - ECFieldElement A = curve.A.Add(L2plus1).Multiply(Z1Sq).Add(L1Sq).MultiplyPlusProduct(T, X1Sq, Z1Sq); - ECFieldElement X2Z1Sq = X2.Multiply(Z1Sq); - ECFieldElement B = X2Z1Sq.Add(T).Square(); - - if (B.IsZero) - { - if (A.IsZero) - { - return b.Twice(); - } - - return curve.Infinity; - } - - if (A.IsZero) - { - return new F2mPoint(curve, A, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement X3 = A.Square().Multiply(X2Z1Sq); - ECFieldElement Z3 = A.Multiply(B).Multiply(Z1Sq); - ECFieldElement L3 = A.Add(B).Square().MultiplyPlusProduct(T, L2plus1, Z3); - - return new F2mPoint(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - default: - { - return Twice().Add(b); - } - } - } - - public override ECPoint Negate() - { - if (this.IsInfinity) - return this; - - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return this; - - ECCurve curve = this.Curve; - int coord = curve.CoordinateSystem; - - switch (coord) - { - case ECCurve.COORD_AFFINE: - { - ECFieldElement Y = this.RawYCoord; - return new F2mPoint(curve, X, Y.Add(X), IsCompressed); - } - case ECCurve.COORD_HOMOGENEOUS: - { - ECFieldElement Y = this.RawYCoord, Z = this.RawZCoords[0]; - return new F2mPoint(curve, X, Y.Add(X), new ECFieldElement[] { Z }, IsCompressed); - } - case ECCurve.COORD_LAMBDA_AFFINE: - { - ECFieldElement L = this.RawYCoord; - return new F2mPoint(curve, X, L.AddOne(), IsCompressed); - } - case ECCurve.COORD_LAMBDA_PROJECTIVE: - { - // L is actually Lambda (X + Y/X) here - ECFieldElement L = this.RawYCoord, Z = this.RawZCoords[0]; - return new F2mPoint(curve, X, L.Add(Z), new ECFieldElement[] { Z }, IsCompressed); - } - default: - { - throw new InvalidOperationException("unsupported coordinate system"); - } - } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/ECPointMap.cs b/bc-sharp-crypto/src/math/ec/ECPointMap.cs deleted file mode 100644 index e78c800..0000000 --- a/bc-sharp-crypto/src/math/ec/ECPointMap.cs +++ /dev/null @@ -1,9 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC -{ - public interface ECPointMap - { - ECPoint Map(ECPoint p); - } -} diff --git a/bc-sharp-crypto/src/math/ec/LongArray.cs b/bc-sharp-crypto/src/math/ec/LongArray.cs deleted file mode 100644 index 84462e0..0000000 --- a/bc-sharp-crypto/src/math/ec/LongArray.cs +++ /dev/null @@ -1,2201 +0,0 @@ -using System; -using System.Text; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math.EC -{ - internal class LongArray - { - //private static long DEInterleave_MASK = 0x5555555555555555L; - - /* - * This expands 8 bit indices into 16 bit contents (high bit 14), by inserting 0s between bits. - * In a binary field, this operation is the same as squaring an 8 bit number. - */ - private static readonly ushort[] INTERLEAVE2_TABLE = new ushort[] - { - 0x0000, 0x0001, 0x0004, 0x0005, 0x0010, 0x0011, 0x0014, 0x0015, - 0x0040, 0x0041, 0x0044, 0x0045, 0x0050, 0x0051, 0x0054, 0x0055, - 0x0100, 0x0101, 0x0104, 0x0105, 0x0110, 0x0111, 0x0114, 0x0115, - 0x0140, 0x0141, 0x0144, 0x0145, 0x0150, 0x0151, 0x0154, 0x0155, - 0x0400, 0x0401, 0x0404, 0x0405, 0x0410, 0x0411, 0x0414, 0x0415, - 0x0440, 0x0441, 0x0444, 0x0445, 0x0450, 0x0451, 0x0454, 0x0455, - 0x0500, 0x0501, 0x0504, 0x0505, 0x0510, 0x0511, 0x0514, 0x0515, - 0x0540, 0x0541, 0x0544, 0x0545, 0x0550, 0x0551, 0x0554, 0x0555, - 0x1000, 0x1001, 0x1004, 0x1005, 0x1010, 0x1011, 0x1014, 0x1015, - 0x1040, 0x1041, 0x1044, 0x1045, 0x1050, 0x1051, 0x1054, 0x1055, - 0x1100, 0x1101, 0x1104, 0x1105, 0x1110, 0x1111, 0x1114, 0x1115, - 0x1140, 0x1141, 0x1144, 0x1145, 0x1150, 0x1151, 0x1154, 0x1155, - 0x1400, 0x1401, 0x1404, 0x1405, 0x1410, 0x1411, 0x1414, 0x1415, - 0x1440, 0x1441, 0x1444, 0x1445, 0x1450, 0x1451, 0x1454, 0x1455, - 0x1500, 0x1501, 0x1504, 0x1505, 0x1510, 0x1511, 0x1514, 0x1515, - 0x1540, 0x1541, 0x1544, 0x1545, 0x1550, 0x1551, 0x1554, 0x1555, - 0x4000, 0x4001, 0x4004, 0x4005, 0x4010, 0x4011, 0x4014, 0x4015, - 0x4040, 0x4041, 0x4044, 0x4045, 0x4050, 0x4051, 0x4054, 0x4055, - 0x4100, 0x4101, 0x4104, 0x4105, 0x4110, 0x4111, 0x4114, 0x4115, - 0x4140, 0x4141, 0x4144, 0x4145, 0x4150, 0x4151, 0x4154, 0x4155, - 0x4400, 0x4401, 0x4404, 0x4405, 0x4410, 0x4411, 0x4414, 0x4415, - 0x4440, 0x4441, 0x4444, 0x4445, 0x4450, 0x4451, 0x4454, 0x4455, - 0x4500, 0x4501, 0x4504, 0x4505, 0x4510, 0x4511, 0x4514, 0x4515, - 0x4540, 0x4541, 0x4544, 0x4545, 0x4550, 0x4551, 0x4554, 0x4555, - 0x5000, 0x5001, 0x5004, 0x5005, 0x5010, 0x5011, 0x5014, 0x5015, - 0x5040, 0x5041, 0x5044, 0x5045, 0x5050, 0x5051, 0x5054, 0x5055, - 0x5100, 0x5101, 0x5104, 0x5105, 0x5110, 0x5111, 0x5114, 0x5115, - 0x5140, 0x5141, 0x5144, 0x5145, 0x5150, 0x5151, 0x5154, 0x5155, - 0x5400, 0x5401, 0x5404, 0x5405, 0x5410, 0x5411, 0x5414, 0x5415, - 0x5440, 0x5441, 0x5444, 0x5445, 0x5450, 0x5451, 0x5454, 0x5455, - 0x5500, 0x5501, 0x5504, 0x5505, 0x5510, 0x5511, 0x5514, 0x5515, - 0x5540, 0x5541, 0x5544, 0x5545, 0x5550, 0x5551, 0x5554, 0x5555 - }; - - /* - * This expands 7 bit indices into 21 bit contents (high bit 18), by inserting 0s between bits. - */ - private static readonly int[] INTERLEAVE3_TABLE = new int[] - { - 0x00000, 0x00001, 0x00008, 0x00009, 0x00040, 0x00041, 0x00048, 0x00049, - 0x00200, 0x00201, 0x00208, 0x00209, 0x00240, 0x00241, 0x00248, 0x00249, - 0x01000, 0x01001, 0x01008, 0x01009, 0x01040, 0x01041, 0x01048, 0x01049, - 0x01200, 0x01201, 0x01208, 0x01209, 0x01240, 0x01241, 0x01248, 0x01249, - 0x08000, 0x08001, 0x08008, 0x08009, 0x08040, 0x08041, 0x08048, 0x08049, - 0x08200, 0x08201, 0x08208, 0x08209, 0x08240, 0x08241, 0x08248, 0x08249, - 0x09000, 0x09001, 0x09008, 0x09009, 0x09040, 0x09041, 0x09048, 0x09049, - 0x09200, 0x09201, 0x09208, 0x09209, 0x09240, 0x09241, 0x09248, 0x09249, - 0x40000, 0x40001, 0x40008, 0x40009, 0x40040, 0x40041, 0x40048, 0x40049, - 0x40200, 0x40201, 0x40208, 0x40209, 0x40240, 0x40241, 0x40248, 0x40249, - 0x41000, 0x41001, 0x41008, 0x41009, 0x41040, 0x41041, 0x41048, 0x41049, - 0x41200, 0x41201, 0x41208, 0x41209, 0x41240, 0x41241, 0x41248, 0x41249, - 0x48000, 0x48001, 0x48008, 0x48009, 0x48040, 0x48041, 0x48048, 0x48049, - 0x48200, 0x48201, 0x48208, 0x48209, 0x48240, 0x48241, 0x48248, 0x48249, - 0x49000, 0x49001, 0x49008, 0x49009, 0x49040, 0x49041, 0x49048, 0x49049, - 0x49200, 0x49201, 0x49208, 0x49209, 0x49240, 0x49241, 0x49248, 0x49249 - }; - - /* - * This expands 8 bit indices into 32 bit contents (high bit 28), by inserting 0s between bits. - */ - private static readonly int[] INTERLEAVE4_TABLE = new int[] - { - 0x00000000, 0x00000001, 0x00000010, 0x00000011, 0x00000100, 0x00000101, 0x00000110, 0x00000111, - 0x00001000, 0x00001001, 0x00001010, 0x00001011, 0x00001100, 0x00001101, 0x00001110, 0x00001111, - 0x00010000, 0x00010001, 0x00010010, 0x00010011, 0x00010100, 0x00010101, 0x00010110, 0x00010111, - 0x00011000, 0x00011001, 0x00011010, 0x00011011, 0x00011100, 0x00011101, 0x00011110, 0x00011111, - 0x00100000, 0x00100001, 0x00100010, 0x00100011, 0x00100100, 0x00100101, 0x00100110, 0x00100111, - 0x00101000, 0x00101001, 0x00101010, 0x00101011, 0x00101100, 0x00101101, 0x00101110, 0x00101111, - 0x00110000, 0x00110001, 0x00110010, 0x00110011, 0x00110100, 0x00110101, 0x00110110, 0x00110111, - 0x00111000, 0x00111001, 0x00111010, 0x00111011, 0x00111100, 0x00111101, 0x00111110, 0x00111111, - 0x01000000, 0x01000001, 0x01000010, 0x01000011, 0x01000100, 0x01000101, 0x01000110, 0x01000111, - 0x01001000, 0x01001001, 0x01001010, 0x01001011, 0x01001100, 0x01001101, 0x01001110, 0x01001111, - 0x01010000, 0x01010001, 0x01010010, 0x01010011, 0x01010100, 0x01010101, 0x01010110, 0x01010111, - 0x01011000, 0x01011001, 0x01011010, 0x01011011, 0x01011100, 0x01011101, 0x01011110, 0x01011111, - 0x01100000, 0x01100001, 0x01100010, 0x01100011, 0x01100100, 0x01100101, 0x01100110, 0x01100111, - 0x01101000, 0x01101001, 0x01101010, 0x01101011, 0x01101100, 0x01101101, 0x01101110, 0x01101111, - 0x01110000, 0x01110001, 0x01110010, 0x01110011, 0x01110100, 0x01110101, 0x01110110, 0x01110111, - 0x01111000, 0x01111001, 0x01111010, 0x01111011, 0x01111100, 0x01111101, 0x01111110, 0x01111111, - 0x10000000, 0x10000001, 0x10000010, 0x10000011, 0x10000100, 0x10000101, 0x10000110, 0x10000111, - 0x10001000, 0x10001001, 0x10001010, 0x10001011, 0x10001100, 0x10001101, 0x10001110, 0x10001111, - 0x10010000, 0x10010001, 0x10010010, 0x10010011, 0x10010100, 0x10010101, 0x10010110, 0x10010111, - 0x10011000, 0x10011001, 0x10011010, 0x10011011, 0x10011100, 0x10011101, 0x10011110, 0x10011111, - 0x10100000, 0x10100001, 0x10100010, 0x10100011, 0x10100100, 0x10100101, 0x10100110, 0x10100111, - 0x10101000, 0x10101001, 0x10101010, 0x10101011, 0x10101100, 0x10101101, 0x10101110, 0x10101111, - 0x10110000, 0x10110001, 0x10110010, 0x10110011, 0x10110100, 0x10110101, 0x10110110, 0x10110111, - 0x10111000, 0x10111001, 0x10111010, 0x10111011, 0x10111100, 0x10111101, 0x10111110, 0x10111111, - 0x11000000, 0x11000001, 0x11000010, 0x11000011, 0x11000100, 0x11000101, 0x11000110, 0x11000111, - 0x11001000, 0x11001001, 0x11001010, 0x11001011, 0x11001100, 0x11001101, 0x11001110, 0x11001111, - 0x11010000, 0x11010001, 0x11010010, 0x11010011, 0x11010100, 0x11010101, 0x11010110, 0x11010111, - 0x11011000, 0x11011001, 0x11011010, 0x11011011, 0x11011100, 0x11011101, 0x11011110, 0x11011111, - 0x11100000, 0x11100001, 0x11100010, 0x11100011, 0x11100100, 0x11100101, 0x11100110, 0x11100111, - 0x11101000, 0x11101001, 0x11101010, 0x11101011, 0x11101100, 0x11101101, 0x11101110, 0x11101111, - 0x11110000, 0x11110001, 0x11110010, 0x11110011, 0x11110100, 0x11110101, 0x11110110, 0x11110111, - 0x11111000, 0x11111001, 0x11111010, 0x11111011, 0x11111100, 0x11111101, 0x11111110, 0x11111111 - }; - - /* - * This expands 7 bit indices into 35 bit contents (high bit 30), by inserting 0s between bits. - */ - private static readonly int[] INTERLEAVE5_TABLE = new int[] { - 0x00000000, 0x00000001, 0x00000020, 0x00000021, 0x00000400, 0x00000401, 0x00000420, 0x00000421, - 0x00008000, 0x00008001, 0x00008020, 0x00008021, 0x00008400, 0x00008401, 0x00008420, 0x00008421, - 0x00100000, 0x00100001, 0x00100020, 0x00100021, 0x00100400, 0x00100401, 0x00100420, 0x00100421, - 0x00108000, 0x00108001, 0x00108020, 0x00108021, 0x00108400, 0x00108401, 0x00108420, 0x00108421, - 0x02000000, 0x02000001, 0x02000020, 0x02000021, 0x02000400, 0x02000401, 0x02000420, 0x02000421, - 0x02008000, 0x02008001, 0x02008020, 0x02008021, 0x02008400, 0x02008401, 0x02008420, 0x02008421, - 0x02100000, 0x02100001, 0x02100020, 0x02100021, 0x02100400, 0x02100401, 0x02100420, 0x02100421, - 0x02108000, 0x02108001, 0x02108020, 0x02108021, 0x02108400, 0x02108401, 0x02108420, 0x02108421, - 0x40000000, 0x40000001, 0x40000020, 0x40000021, 0x40000400, 0x40000401, 0x40000420, 0x40000421, - 0x40008000, 0x40008001, 0x40008020, 0x40008021, 0x40008400, 0x40008401, 0x40008420, 0x40008421, - 0x40100000, 0x40100001, 0x40100020, 0x40100021, 0x40100400, 0x40100401, 0x40100420, 0x40100421, - 0x40108000, 0x40108001, 0x40108020, 0x40108021, 0x40108400, 0x40108401, 0x40108420, 0x40108421, - 0x42000000, 0x42000001, 0x42000020, 0x42000021, 0x42000400, 0x42000401, 0x42000420, 0x42000421, - 0x42008000, 0x42008001, 0x42008020, 0x42008021, 0x42008400, 0x42008401, 0x42008420, 0x42008421, - 0x42100000, 0x42100001, 0x42100020, 0x42100021, 0x42100400, 0x42100401, 0x42100420, 0x42100421, - 0x42108000, 0x42108001, 0x42108020, 0x42108021, 0x42108400, 0x42108401, 0x42108420, 0x42108421 - }; - - /* - * This expands 9 bit indices into 63 bit (long) contents (high bit 56), by inserting 0s between bits. - */ - private static readonly long[] INTERLEAVE7_TABLE = new long[] - { - 0x0000000000000000L, 0x0000000000000001L, 0x0000000000000080L, 0x0000000000000081L, - 0x0000000000004000L, 0x0000000000004001L, 0x0000000000004080L, 0x0000000000004081L, - 0x0000000000200000L, 0x0000000000200001L, 0x0000000000200080L, 0x0000000000200081L, - 0x0000000000204000L, 0x0000000000204001L, 0x0000000000204080L, 0x0000000000204081L, - 0x0000000010000000L, 0x0000000010000001L, 0x0000000010000080L, 0x0000000010000081L, - 0x0000000010004000L, 0x0000000010004001L, 0x0000000010004080L, 0x0000000010004081L, - 0x0000000010200000L, 0x0000000010200001L, 0x0000000010200080L, 0x0000000010200081L, - 0x0000000010204000L, 0x0000000010204001L, 0x0000000010204080L, 0x0000000010204081L, - 0x0000000800000000L, 0x0000000800000001L, 0x0000000800000080L, 0x0000000800000081L, - 0x0000000800004000L, 0x0000000800004001L, 0x0000000800004080L, 0x0000000800004081L, - 0x0000000800200000L, 0x0000000800200001L, 0x0000000800200080L, 0x0000000800200081L, - 0x0000000800204000L, 0x0000000800204001L, 0x0000000800204080L, 0x0000000800204081L, - 0x0000000810000000L, 0x0000000810000001L, 0x0000000810000080L, 0x0000000810000081L, - 0x0000000810004000L, 0x0000000810004001L, 0x0000000810004080L, 0x0000000810004081L, - 0x0000000810200000L, 0x0000000810200001L, 0x0000000810200080L, 0x0000000810200081L, - 0x0000000810204000L, 0x0000000810204001L, 0x0000000810204080L, 0x0000000810204081L, - 0x0000040000000000L, 0x0000040000000001L, 0x0000040000000080L, 0x0000040000000081L, - 0x0000040000004000L, 0x0000040000004001L, 0x0000040000004080L, 0x0000040000004081L, - 0x0000040000200000L, 0x0000040000200001L, 0x0000040000200080L, 0x0000040000200081L, - 0x0000040000204000L, 0x0000040000204001L, 0x0000040000204080L, 0x0000040000204081L, - 0x0000040010000000L, 0x0000040010000001L, 0x0000040010000080L, 0x0000040010000081L, - 0x0000040010004000L, 0x0000040010004001L, 0x0000040010004080L, 0x0000040010004081L, - 0x0000040010200000L, 0x0000040010200001L, 0x0000040010200080L, 0x0000040010200081L, - 0x0000040010204000L, 0x0000040010204001L, 0x0000040010204080L, 0x0000040010204081L, - 0x0000040800000000L, 0x0000040800000001L, 0x0000040800000080L, 0x0000040800000081L, - 0x0000040800004000L, 0x0000040800004001L, 0x0000040800004080L, 0x0000040800004081L, - 0x0000040800200000L, 0x0000040800200001L, 0x0000040800200080L, 0x0000040800200081L, - 0x0000040800204000L, 0x0000040800204001L, 0x0000040800204080L, 0x0000040800204081L, - 0x0000040810000000L, 0x0000040810000001L, 0x0000040810000080L, 0x0000040810000081L, - 0x0000040810004000L, 0x0000040810004001L, 0x0000040810004080L, 0x0000040810004081L, - 0x0000040810200000L, 0x0000040810200001L, 0x0000040810200080L, 0x0000040810200081L, - 0x0000040810204000L, 0x0000040810204001L, 0x0000040810204080L, 0x0000040810204081L, - 0x0002000000000000L, 0x0002000000000001L, 0x0002000000000080L, 0x0002000000000081L, - 0x0002000000004000L, 0x0002000000004001L, 0x0002000000004080L, 0x0002000000004081L, - 0x0002000000200000L, 0x0002000000200001L, 0x0002000000200080L, 0x0002000000200081L, - 0x0002000000204000L, 0x0002000000204001L, 0x0002000000204080L, 0x0002000000204081L, - 0x0002000010000000L, 0x0002000010000001L, 0x0002000010000080L, 0x0002000010000081L, - 0x0002000010004000L, 0x0002000010004001L, 0x0002000010004080L, 0x0002000010004081L, - 0x0002000010200000L, 0x0002000010200001L, 0x0002000010200080L, 0x0002000010200081L, - 0x0002000010204000L, 0x0002000010204001L, 0x0002000010204080L, 0x0002000010204081L, - 0x0002000800000000L, 0x0002000800000001L, 0x0002000800000080L, 0x0002000800000081L, - 0x0002000800004000L, 0x0002000800004001L, 0x0002000800004080L, 0x0002000800004081L, - 0x0002000800200000L, 0x0002000800200001L, 0x0002000800200080L, 0x0002000800200081L, - 0x0002000800204000L, 0x0002000800204001L, 0x0002000800204080L, 0x0002000800204081L, - 0x0002000810000000L, 0x0002000810000001L, 0x0002000810000080L, 0x0002000810000081L, - 0x0002000810004000L, 0x0002000810004001L, 0x0002000810004080L, 0x0002000810004081L, - 0x0002000810200000L, 0x0002000810200001L, 0x0002000810200080L, 0x0002000810200081L, - 0x0002000810204000L, 0x0002000810204001L, 0x0002000810204080L, 0x0002000810204081L, - 0x0002040000000000L, 0x0002040000000001L, 0x0002040000000080L, 0x0002040000000081L, - 0x0002040000004000L, 0x0002040000004001L, 0x0002040000004080L, 0x0002040000004081L, - 0x0002040000200000L, 0x0002040000200001L, 0x0002040000200080L, 0x0002040000200081L, - 0x0002040000204000L, 0x0002040000204001L, 0x0002040000204080L, 0x0002040000204081L, - 0x0002040010000000L, 0x0002040010000001L, 0x0002040010000080L, 0x0002040010000081L, - 0x0002040010004000L, 0x0002040010004001L, 0x0002040010004080L, 0x0002040010004081L, - 0x0002040010200000L, 0x0002040010200001L, 0x0002040010200080L, 0x0002040010200081L, - 0x0002040010204000L, 0x0002040010204001L, 0x0002040010204080L, 0x0002040010204081L, - 0x0002040800000000L, 0x0002040800000001L, 0x0002040800000080L, 0x0002040800000081L, - 0x0002040800004000L, 0x0002040800004001L, 0x0002040800004080L, 0x0002040800004081L, - 0x0002040800200000L, 0x0002040800200001L, 0x0002040800200080L, 0x0002040800200081L, - 0x0002040800204000L, 0x0002040800204001L, 0x0002040800204080L, 0x0002040800204081L, - 0x0002040810000000L, 0x0002040810000001L, 0x0002040810000080L, 0x0002040810000081L, - 0x0002040810004000L, 0x0002040810004001L, 0x0002040810004080L, 0x0002040810004081L, - 0x0002040810200000L, 0x0002040810200001L, 0x0002040810200080L, 0x0002040810200081L, - 0x0002040810204000L, 0x0002040810204001L, 0x0002040810204080L, 0x0002040810204081L, - 0x0100000000000000L, 0x0100000000000001L, 0x0100000000000080L, 0x0100000000000081L, - 0x0100000000004000L, 0x0100000000004001L, 0x0100000000004080L, 0x0100000000004081L, - 0x0100000000200000L, 0x0100000000200001L, 0x0100000000200080L, 0x0100000000200081L, - 0x0100000000204000L, 0x0100000000204001L, 0x0100000000204080L, 0x0100000000204081L, - 0x0100000010000000L, 0x0100000010000001L, 0x0100000010000080L, 0x0100000010000081L, - 0x0100000010004000L, 0x0100000010004001L, 0x0100000010004080L, 0x0100000010004081L, - 0x0100000010200000L, 0x0100000010200001L, 0x0100000010200080L, 0x0100000010200081L, - 0x0100000010204000L, 0x0100000010204001L, 0x0100000010204080L, 0x0100000010204081L, - 0x0100000800000000L, 0x0100000800000001L, 0x0100000800000080L, 0x0100000800000081L, - 0x0100000800004000L, 0x0100000800004001L, 0x0100000800004080L, 0x0100000800004081L, - 0x0100000800200000L, 0x0100000800200001L, 0x0100000800200080L, 0x0100000800200081L, - 0x0100000800204000L, 0x0100000800204001L, 0x0100000800204080L, 0x0100000800204081L, - 0x0100000810000000L, 0x0100000810000001L, 0x0100000810000080L, 0x0100000810000081L, - 0x0100000810004000L, 0x0100000810004001L, 0x0100000810004080L, 0x0100000810004081L, - 0x0100000810200000L, 0x0100000810200001L, 0x0100000810200080L, 0x0100000810200081L, - 0x0100000810204000L, 0x0100000810204001L, 0x0100000810204080L, 0x0100000810204081L, - 0x0100040000000000L, 0x0100040000000001L, 0x0100040000000080L, 0x0100040000000081L, - 0x0100040000004000L, 0x0100040000004001L, 0x0100040000004080L, 0x0100040000004081L, - 0x0100040000200000L, 0x0100040000200001L, 0x0100040000200080L, 0x0100040000200081L, - 0x0100040000204000L, 0x0100040000204001L, 0x0100040000204080L, 0x0100040000204081L, - 0x0100040010000000L, 0x0100040010000001L, 0x0100040010000080L, 0x0100040010000081L, - 0x0100040010004000L, 0x0100040010004001L, 0x0100040010004080L, 0x0100040010004081L, - 0x0100040010200000L, 0x0100040010200001L, 0x0100040010200080L, 0x0100040010200081L, - 0x0100040010204000L, 0x0100040010204001L, 0x0100040010204080L, 0x0100040010204081L, - 0x0100040800000000L, 0x0100040800000001L, 0x0100040800000080L, 0x0100040800000081L, - 0x0100040800004000L, 0x0100040800004001L, 0x0100040800004080L, 0x0100040800004081L, - 0x0100040800200000L, 0x0100040800200001L, 0x0100040800200080L, 0x0100040800200081L, - 0x0100040800204000L, 0x0100040800204001L, 0x0100040800204080L, 0x0100040800204081L, - 0x0100040810000000L, 0x0100040810000001L, 0x0100040810000080L, 0x0100040810000081L, - 0x0100040810004000L, 0x0100040810004001L, 0x0100040810004080L, 0x0100040810004081L, - 0x0100040810200000L, 0x0100040810200001L, 0x0100040810200080L, 0x0100040810200081L, - 0x0100040810204000L, 0x0100040810204001L, 0x0100040810204080L, 0x0100040810204081L, - 0x0102000000000000L, 0x0102000000000001L, 0x0102000000000080L, 0x0102000000000081L, - 0x0102000000004000L, 0x0102000000004001L, 0x0102000000004080L, 0x0102000000004081L, - 0x0102000000200000L, 0x0102000000200001L, 0x0102000000200080L, 0x0102000000200081L, - 0x0102000000204000L, 0x0102000000204001L, 0x0102000000204080L, 0x0102000000204081L, - 0x0102000010000000L, 0x0102000010000001L, 0x0102000010000080L, 0x0102000010000081L, - 0x0102000010004000L, 0x0102000010004001L, 0x0102000010004080L, 0x0102000010004081L, - 0x0102000010200000L, 0x0102000010200001L, 0x0102000010200080L, 0x0102000010200081L, - 0x0102000010204000L, 0x0102000010204001L, 0x0102000010204080L, 0x0102000010204081L, - 0x0102000800000000L, 0x0102000800000001L, 0x0102000800000080L, 0x0102000800000081L, - 0x0102000800004000L, 0x0102000800004001L, 0x0102000800004080L, 0x0102000800004081L, - 0x0102000800200000L, 0x0102000800200001L, 0x0102000800200080L, 0x0102000800200081L, - 0x0102000800204000L, 0x0102000800204001L, 0x0102000800204080L, 0x0102000800204081L, - 0x0102000810000000L, 0x0102000810000001L, 0x0102000810000080L, 0x0102000810000081L, - 0x0102000810004000L, 0x0102000810004001L, 0x0102000810004080L, 0x0102000810004081L, - 0x0102000810200000L, 0x0102000810200001L, 0x0102000810200080L, 0x0102000810200081L, - 0x0102000810204000L, 0x0102000810204001L, 0x0102000810204080L, 0x0102000810204081L, - 0x0102040000000000L, 0x0102040000000001L, 0x0102040000000080L, 0x0102040000000081L, - 0x0102040000004000L, 0x0102040000004001L, 0x0102040000004080L, 0x0102040000004081L, - 0x0102040000200000L, 0x0102040000200001L, 0x0102040000200080L, 0x0102040000200081L, - 0x0102040000204000L, 0x0102040000204001L, 0x0102040000204080L, 0x0102040000204081L, - 0x0102040010000000L, 0x0102040010000001L, 0x0102040010000080L, 0x0102040010000081L, - 0x0102040010004000L, 0x0102040010004001L, 0x0102040010004080L, 0x0102040010004081L, - 0x0102040010200000L, 0x0102040010200001L, 0x0102040010200080L, 0x0102040010200081L, - 0x0102040010204000L, 0x0102040010204001L, 0x0102040010204080L, 0x0102040010204081L, - 0x0102040800000000L, 0x0102040800000001L, 0x0102040800000080L, 0x0102040800000081L, - 0x0102040800004000L, 0x0102040800004001L, 0x0102040800004080L, 0x0102040800004081L, - 0x0102040800200000L, 0x0102040800200001L, 0x0102040800200080L, 0x0102040800200081L, - 0x0102040800204000L, 0x0102040800204001L, 0x0102040800204080L, 0x0102040800204081L, - 0x0102040810000000L, 0x0102040810000001L, 0x0102040810000080L, 0x0102040810000081L, - 0x0102040810004000L, 0x0102040810004001L, 0x0102040810004080L, 0x0102040810004081L, - 0x0102040810200000L, 0x0102040810200001L, 0x0102040810200080L, 0x0102040810200081L, - 0x0102040810204000L, 0x0102040810204001L, 0x0102040810204080L, 0x0102040810204081L - }; - - // For toString(); must have length 64 - private const string ZEROES = "0000000000000000000000000000000000000000000000000000000000000000"; - - internal static readonly byte[] BitLengths = - { - 0, 1, 2, 2, 3, 3, 3, 3, 4, 4, 4, 4, 4, 4, 4, 4, - 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, - 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, - 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, - 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, - 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, - 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, - 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, - 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, - 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, - 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, - 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, - 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, - 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, - 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, - 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8 - }; - - // TODO make m fixed for the LongArray, and hence compute T once and for all - - private long[] m_ints; - - public LongArray(int intLen) - { - m_ints = new long[intLen]; - } - - public LongArray(long[] ints) - { - m_ints = ints; - } - - public LongArray(long[] ints, int off, int len) - { - if (off == 0 && len == ints.Length) - { - m_ints = ints; - } - else - { - m_ints = new long[len]; - Array.Copy(ints, off, m_ints, 0, len); - } - } - - public LongArray(BigInteger bigInt) - { - if (bigInt == null || bigInt.SignValue < 0) - { - throw new ArgumentException("invalid F2m field value", "bigInt"); - } - - if (bigInt.SignValue == 0) - { - m_ints = new long[] { 0L }; - return; - } - - byte[] barr = bigInt.ToByteArray(); - int barrLen = barr.Length; - int barrStart = 0; - if (barr[0] == 0) - { - // First byte is 0 to enforce highest (=sign) bit is zero. - // In this case ignore barr[0]. - barrLen--; - barrStart = 1; - } - int intLen = (barrLen + 7) / 8; - m_ints = new long[intLen]; - - int iarrJ = intLen - 1; - int rem = barrLen % 8 + barrStart; - long temp = 0; - int barrI = barrStart; - if (barrStart < rem) - { - for (; barrI < rem; barrI++) - { - temp <<= 8; - uint barrBarrI = barr[barrI]; - temp |= barrBarrI; - } - m_ints[iarrJ--] = temp; - } - - for (; iarrJ >= 0; iarrJ--) - { - temp = 0; - for (int i = 0; i < 8; i++) - { - temp <<= 8; - uint barrBarrI = barr[barrI++]; - temp |= barrBarrI; - } - m_ints[iarrJ] = temp; - } - } - - public bool IsOne() - { - long[] a = m_ints; - if (a[0] != 1L) - { - return false; - } - for (int i = 1; i < a.Length; ++i) - { - if (a[i] != 0L) - { - return false; - } - } - return true; - } - - public bool IsZero() - { - long[] a = m_ints; - for (int i = 0; i < a.Length; ++i) - { - if (a[i] != 0L) - { - return false; - } - } - return true; - } - - public int GetUsedLength() - { - return GetUsedLengthFrom(m_ints.Length); - } - - public int GetUsedLengthFrom(int from) - { - long[] a = m_ints; - from = System.Math.Min(from, a.Length); - - if (from < 1) - { - return 0; - } - - // Check if first element will act as sentinel - if (a[0] != 0) - { - while (a[--from] == 0) - { - } - return from + 1; - } - - do - { - if (a[--from] != 0) - { - return from + 1; - } - } - while (from > 0); - - return 0; - } - - public int Degree() - { - int i = m_ints.Length; - long w; - do - { - if (i == 0) - { - return 0; - } - w = m_ints[--i]; - } - while (w == 0); - - return (i << 6) + BitLength(w); - } - - private int DegreeFrom(int limit) - { - int i = (int)(((uint)limit + 62) >> 6); - long w; - do - { - if (i == 0) - { - return 0; - } - w = m_ints[--i]; - } - while (w == 0); - - return (i << 6) + BitLength(w); - } - - // private int lowestCoefficient() - // { - // for (int i = 0; i < m_ints.Length; ++i) - // { - // long mi = m_ints[i]; - // if (mi != 0) - // { - // int j = 0; - // while ((mi & 0xFFL) == 0) - // { - // j += 8; - // mi >>>= 8; - // } - // while ((mi & 1L) == 0) - // { - // ++j; - // mi >>>= 1; - // } - // return (i << 6) + j; - // } - // } - // return -1; - // } - - private static int BitLength(long w) - { - int u = (int)((ulong)w >> 32), b; - if (u == 0) - { - u = (int)w; - b = 0; - } - else - { - b = 32; - } - - int t = (int)((uint)u >> 16), k; - if (t == 0) - { - t = (int)((uint)u >> 8); - k = (t == 0) ? BitLengths[u] : 8 + BitLengths[t]; - } - else - { - int v = (int)((uint)t >> 8); - k = (v == 0) ? 16 + BitLengths[t] : 24 + BitLengths[v]; - } - - return b + k; - } - - private long[] ResizedInts(int newLen) - { - long[] newInts = new long[newLen]; - Array.Copy(m_ints, 0, newInts, 0, System.Math.Min(m_ints.Length, newLen)); - return newInts; - } - - public BigInteger ToBigInteger() - { - int usedLen = GetUsedLength(); - if (usedLen == 0) - { - return BigInteger.Zero; - } - - long highestInt = m_ints[usedLen - 1]; - byte[] temp = new byte[8]; - int barrI = 0; - bool trailingZeroBytesDone = false; - for (int j = 7; j >= 0; j--) - { - byte thisByte = (byte)((ulong)highestInt >> (8 * j)); - if (trailingZeroBytesDone || (thisByte != 0)) - { - trailingZeroBytesDone = true; - temp[barrI++] = thisByte; - } - } - - int barrLen = 8 * (usedLen - 1) + barrI; - byte[] barr = new byte[barrLen]; - for (int j = 0; j < barrI; j++) - { - barr[j] = temp[j]; - } - // Highest value int is done now - - for (int iarrJ = usedLen - 2; iarrJ >= 0; iarrJ--) - { - long mi = m_ints[iarrJ]; - for (int j = 7; j >= 0; j--) - { - barr[barrI++] = (byte)((ulong)mi >> (8 * j)); - } - } - return new BigInteger(1, barr); - } - - // private static long shiftUp(long[] x, int xOff, int count) - // { - // long prev = 0; - // for (int i = 0; i < count; ++i) - // { - // long next = x[xOff + i]; - // x[xOff + i] = (next << 1) | prev; - // prev = next >>> 63; - // } - // return prev; - // } - - private static long ShiftUp(long[] x, int xOff, int count, int shift) - { - int shiftInv = 64 - shift; - long prev = 0; - for (int i = 0; i < count; ++i) - { - long next = x[xOff + i]; - x[xOff + i] = (next << shift) | prev; - prev = (long)((ulong)next >> shiftInv); - } - return prev; - } - - private static long ShiftUp(long[] x, int xOff, long[] z, int zOff, int count, int shift) - { - int shiftInv = 64 - shift; - long prev = 0; - for (int i = 0; i < count; ++i) - { - long next = x[xOff + i]; - z[zOff + i] = (next << shift) | prev; - prev = (long)((ulong)next >> shiftInv); - } - return prev; - } - - public LongArray AddOne() - { - if (m_ints.Length == 0) - { - return new LongArray(new long[]{ 1L }); - } - - int resultLen = System.Math.Max(1, GetUsedLength()); - long[] ints = ResizedInts(resultLen); - ints[0] ^= 1L; - return new LongArray(ints); - } - - // private void addShiftedByBits(LongArray other, int bits) - // { - // int words = bits >>> 6; - // int shift = bits & 0x3F; - // - // if (shift == 0) - // { - // addShiftedByWords(other, words); - // return; - // } - // - // int otherUsedLen = other.GetUsedLength(); - // if (otherUsedLen == 0) - // { - // return; - // } - // - // int minLen = otherUsedLen + words + 1; - // if (minLen > m_ints.Length) - // { - // m_ints = resizedInts(minLen); - // } - // - // long carry = addShiftedByBits(m_ints, words, other.m_ints, 0, otherUsedLen, shift); - // m_ints[otherUsedLen + words] ^= carry; - // } - - private void AddShiftedByBitsSafe(LongArray other, int otherDegree, int bits) - { - int otherLen = (int)((uint)(otherDegree + 63) >> 6); - - int words = (int)((uint)bits >> 6); - int shift = bits & 0x3F; - - if (shift == 0) - { - Add(m_ints, words, other.m_ints, 0, otherLen); - return; - } - - long carry = AddShiftedUp(m_ints, words, other.m_ints, 0, otherLen, shift); - if (carry != 0L) - { - m_ints[otherLen + words] ^= carry; - } - } - - private static long AddShiftedUp(long[] x, int xOff, long[] y, int yOff, int count, int shift) - { - int shiftInv = 64 - shift; - long prev = 0; - for (int i = 0; i < count; ++i) - { - long next = y[yOff + i]; - x[xOff + i] ^= (next << shift) | prev; - prev = (long)((ulong)next >> shiftInv); - } - return prev; - } - - private static long AddShiftedDown(long[] x, int xOff, long[] y, int yOff, int count, int shift) - { - int shiftInv = 64 - shift; - long prev = 0; - int i = count; - while (--i >= 0) - { - long next = y[yOff + i]; - x[xOff + i] ^= (long)((ulong)next >> shift) | prev; - prev = next << shiftInv; - } - return prev; - } - - public void AddShiftedByWords(LongArray other, int words) - { - int otherUsedLen = other.GetUsedLength(); - if (otherUsedLen == 0) - { - return; - } - - int minLen = otherUsedLen + words; - if (minLen > m_ints.Length) - { - m_ints = ResizedInts(minLen); - } - - Add(m_ints, words, other.m_ints, 0, otherUsedLen); - } - - private static void Add(long[] x, int xOff, long[] y, int yOff, int count) - { - for (int i = 0; i < count; ++i) - { - x[xOff + i] ^= y[yOff + i]; - } - } - - private static void Add(long[] x, int xOff, long[] y, int yOff, long[] z, int zOff, int count) - { - for (int i = 0; i < count; ++i) - { - z[zOff + i] = x[xOff + i] ^ y[yOff + i]; - } - } - - private static void AddBoth(long[] x, int xOff, long[] y1, int y1Off, long[] y2, int y2Off, int count) - { - for (int i = 0; i < count; ++i) - { - x[xOff + i] ^= y1[y1Off + i] ^ y2[y2Off + i]; - } - } - - private static void Distribute(long[] x, int src, int dst1, int dst2, int count) - { - for (int i = 0; i < count; ++i) - { - long v = x[src + i]; - x[dst1 + i] ^= v; - x[dst2 + i] ^= v; - } - } - - public int Length - { - get { return m_ints.Length; } - } - - private static void FlipWord(long[] buf, int off, int bit, long word) - { - int n = off + (int)((uint)bit >> 6); - int shift = bit & 0x3F; - if (shift == 0) - { - buf[n] ^= word; - } - else - { - buf[n] ^= word << shift; - word = (long)((ulong)word >> (64 - shift)); - if (word != 0) - { - buf[++n] ^= word; - } - } - } - - // private static long getWord(long[] buf, int off, int len, int bit) - // { - // int n = off + (bit >>> 6); - // int shift = bit & 0x3F; - // if (shift == 0) - // { - // return buf[n]; - // } - // long result = buf[n] >>> shift; - // if (++n < len) - // { - // result |= buf[n] << (64 - shift); - // } - // return result; - // } - - public bool TestBitZero() - { - return m_ints.Length > 0 && (m_ints[0] & 1L) != 0; - } - - private static bool TestBit(long[] buf, int off, int n) - { - // theInt = n / 64 - int theInt = (int)((uint)n >> 6); - // theBit = n % 64 - int theBit = n & 0x3F; - long tester = 1L << theBit; - return (buf[off + theInt] & tester) != 0; - } - - private static void FlipBit(long[] buf, int off, int n) - { - // theInt = n / 64 - int theInt = (int)((uint)n >> 6); - // theBit = n % 64 - int theBit = n & 0x3F; - long flipper = 1L << theBit; - buf[off + theInt] ^= flipper; - } - - // private static void SetBit(long[] buf, int off, int n) - // { - // // theInt = n / 64 - // int theInt = n >>> 6; - // // theBit = n % 64 - // int theBit = n & 0x3F; - // long setter = 1L << theBit; - // buf[off + theInt] |= setter; - // } - // - // private static void ClearBit(long[] buf, int off, int n) - // { - // // theInt = n / 64 - // int theInt = n >>> 6; - // // theBit = n % 64 - // int theBit = n & 0x3F; - // long setter = 1L << theBit; - // buf[off + theInt] &= ~setter; - // } - - private static void MultiplyWord(long a, long[] b, int bLen, long[] c, int cOff) - { - if ((a & 1L) != 0L) - { - Add(c, cOff, b, 0, bLen); - } - int k = 1; - while ((a = (long)((ulong)a >> 1)) != 0L) - { - if ((a & 1L) != 0L) - { - long carry = AddShiftedUp(c, cOff, b, 0, bLen, k); - if (carry != 0L) - { - c[cOff + bLen] ^= carry; - } - } - ++k; - } - } - - public LongArray ModMultiplyLD(LongArray other, int m, int[] ks) - { - /* - * Find out the degree of each argument and handle the zero cases - */ - int aDeg = Degree(); - if (aDeg == 0) - { - return this; - } - int bDeg = other.Degree(); - if (bDeg == 0) - { - return other; - } - - /* - * Swap if necessary so that A is the smaller argument - */ - LongArray A = this, B = other; - if (aDeg > bDeg) - { - A = other; B = this; - int tmp = aDeg; aDeg = bDeg; bDeg = tmp; - } - - /* - * Establish the word lengths of the arguments and result - */ - int aLen = (int)((uint)(aDeg + 63) >> 6); - int bLen = (int)((uint)(bDeg + 63) >> 6); - int cLen = (int)((uint)(aDeg + bDeg + 62) >> 6); - - if (aLen == 1) - { - long a0 = A.m_ints[0]; - if (a0 == 1L) - { - return B; - } - - /* - * Fast path for small A, with performance dependent only on the number of set bits - */ - long[] c0 = new long[cLen]; - MultiplyWord(a0, B.m_ints, bLen, c0, 0); - - /* - * Reduce the raw answer against the reduction coefficients - */ - return ReduceResult(c0, 0, cLen, m, ks); - } - - /* - * Determine if B will get bigger during shifting - */ - int bMax = (int)((uint)(bDeg + 7 + 63) >> 6); - - /* - * Lookup table for the offset of each B in the tables - */ - int[] ti = new int[16]; - - /* - * Precompute table of all 4-bit products of B - */ - long[] T0 = new long[bMax << 4]; - int tOff = bMax; - ti[1] = tOff; - Array.Copy(B.m_ints, 0, T0, tOff, bLen); - for (int i = 2; i < 16; ++i) - { - ti[i] = (tOff += bMax); - if ((i & 1) == 0) - { - ShiftUp(T0, (int)((uint)tOff >> 1), T0, tOff, bMax, 1); - } - else - { - Add(T0, bMax, T0, tOff - bMax, T0, tOff, bMax); - } - } - - /* - * Second table with all 4-bit products of B shifted 4 bits - */ - long[] T1 = new long[T0.Length]; - ShiftUp(T0, 0, T1, 0, T0.Length, 4); - // shiftUp(T0, bMax, T1, bMax, tOff, 4); - - long[] a = A.m_ints; - long[] c = new long[cLen]; - - int MASK = 0xF; - - /* - * Lopez-Dahab algorithm - */ - - for (int k = 56; k >= 0; k -= 8) - { - for (int j = 1; j < aLen; j += 2) - { - int aVal = (int)((ulong)a[j] >> k); - int u = aVal & MASK; - int v = (int)((uint)aVal >> 4) & MASK; - AddBoth(c, j - 1, T0, ti[u], T1, ti[v], bMax); - } - ShiftUp(c, 0, cLen, 8); - } - - for (int k = 56; k >= 0; k -= 8) - { - for (int j = 0; j < aLen; j += 2) - { - int aVal = (int)((ulong)a[j] >> k); - int u = aVal & MASK; - int v = (int)((uint)aVal >> 4) & MASK; - AddBoth(c, j, T0, ti[u], T1, ti[v], bMax); - } - if (k > 0) - { - ShiftUp(c, 0, cLen, 8); - } - } - - /* - * Finally the raw answer is collected, reduce it against the reduction coefficients - */ - return ReduceResult(c, 0, cLen, m, ks); - } - - public LongArray ModMultiply(LongArray other, int m, int[] ks) - { - /* - * Find out the degree of each argument and handle the zero cases - */ - int aDeg = Degree(); - if (aDeg == 0) - { - return this; - } - int bDeg = other.Degree(); - if (bDeg == 0) - { - return other; - } - - /* - * Swap if necessary so that A is the smaller argument - */ - LongArray A = this, B = other; - if (aDeg > bDeg) - { - A = other; B = this; - int tmp = aDeg; aDeg = bDeg; bDeg = tmp; - } - - /* - * Establish the word lengths of the arguments and result - */ - int aLen = (int)((uint)(aDeg + 63) >> 6); - int bLen = (int)((uint)(bDeg + 63) >> 6); - int cLen = (int)((uint)(aDeg + bDeg + 62) >> 6); - - if (aLen == 1) - { - long a0 = A.m_ints[0]; - if (a0 == 1L) - { - return B; - } - - /* - * Fast path for small A, with performance dependent only on the number of set bits - */ - long[] c0 = new long[cLen]; - MultiplyWord(a0, B.m_ints, bLen, c0, 0); - - /* - * Reduce the raw answer against the reduction coefficients - */ - return ReduceResult(c0, 0, cLen, m, ks); - } - - /* - * Determine if B will get bigger during shifting - */ - int bMax = (int)((uint)(bDeg + 7 + 63) >> 6); - - /* - * Lookup table for the offset of each B in the tables - */ - int[] ti = new int[16]; - - /* - * Precompute table of all 4-bit products of B - */ - long[] T0 = new long[bMax << 4]; - int tOff = bMax; - ti[1] = tOff; - Array.Copy(B.m_ints, 0, T0, tOff, bLen); - for (int i = 2; i < 16; ++i) - { - ti[i] = (tOff += bMax); - if ((i & 1) == 0) - { - ShiftUp(T0, (int)((uint)tOff >> 1), T0, tOff, bMax, 1); - } - else - { - Add(T0, bMax, T0, tOff - bMax, T0, tOff, bMax); - } - } - - /* - * Second table with all 4-bit products of B shifted 4 bits - */ - long[] T1 = new long[T0.Length]; - ShiftUp(T0, 0, T1, 0, T0.Length, 4); - // ShiftUp(T0, bMax, T1, bMax, tOff, 4); - - long[] a = A.m_ints; - long[] c = new long[cLen << 3]; - - int MASK = 0xF; - - /* - * Lopez-Dahab (Modified) algorithm - */ - - for (int aPos = 0; aPos < aLen; ++aPos) - { - long aVal = a[aPos]; - int cOff = aPos; - for (;;) - { - int u = (int)aVal & MASK; - aVal = (long)((ulong)aVal >> 4); - int v = (int)aVal & MASK; - AddBoth(c, cOff, T0, ti[u], T1, ti[v], bMax); - aVal = (long)((ulong)aVal >> 4); - if (aVal == 0L) - { - break; - } - cOff += cLen; - } - } - - { - int cOff = c.Length; - while ((cOff -= cLen) != 0) - { - AddShiftedUp(c, cOff - cLen, c, cOff, cLen, 8); - } - } - - /* - * Finally the raw answer is collected, reduce it against the reduction coefficients - */ - return ReduceResult(c, 0, cLen, m, ks); - } - - public LongArray ModMultiplyAlt(LongArray other, int m, int[] ks) - { - /* - * Find out the degree of each argument and handle the zero cases - */ - int aDeg = Degree(); - if (aDeg == 0) - { - return this; - } - int bDeg = other.Degree(); - if (bDeg == 0) - { - return other; - } - - /* - * Swap if necessary so that A is the smaller argument - */ - LongArray A = this, B = other; - if (aDeg > bDeg) - { - A = other; B = this; - int tmp = aDeg; aDeg = bDeg; bDeg = tmp; - } - - /* - * Establish the word lengths of the arguments and result - */ - int aLen = (int)((uint)(aDeg + 63) >> 6); - int bLen = (int)((uint)(bDeg + 63) >> 6); - int cLen = (int)((uint)(aDeg + bDeg + 62) >> 6); - - if (aLen == 1) - { - long a0 = A.m_ints[0]; - if (a0 == 1L) - { - return B; - } - - /* - * Fast path for small A, with performance dependent only on the number of set bits - */ - long[] c0 = new long[cLen]; - MultiplyWord(a0, B.m_ints, bLen, c0, 0); - - /* - * Reduce the raw answer against the reduction coefficients - */ - return ReduceResult(c0, 0, cLen, m, ks); - } - - // NOTE: This works, but is slower than width 4 processing - // if (aLen == 2) - // { - // /* - // * Use common-multiplicand optimization to save ~1/4 of the adds - // */ - // long a1 = A.m_ints[0], a2 = A.m_ints[1]; - // long aa = a1 & a2; a1 ^= aa; a2 ^= aa; - // - // long[] b = B.m_ints; - // long[] c = new long[cLen]; - // multiplyWord(aa, b, bLen, c, 1); - // add(c, 0, c, 1, cLen - 1); - // multiplyWord(a1, b, bLen, c, 0); - // multiplyWord(a2, b, bLen, c, 1); - // - // /* - // * Reduce the raw answer against the reduction coefficients - // */ - // return ReduceResult(c, 0, cLen, m, ks); - // } - - /* - * Determine the parameters of the Interleaved window algorithm: the 'width' in bits to - * process together, the number of evaluation 'positions' implied by that width, and the - * 'top' position at which the regular window algorithm stops. - */ - int width, positions, top, banks; - - // NOTE: width 4 is the fastest over the entire range of sizes used in current crypto - // width = 1; positions = 64; top = 64; banks = 4; - // width = 2; positions = 32; top = 64; banks = 4; - // width = 3; positions = 21; top = 63; banks = 3; - width = 4; positions = 16; top = 64; banks = 8; - // width = 5; positions = 13; top = 65; banks = 7; - // width = 7; positions = 9; top = 63; banks = 9; - // width = 8; positions = 8; top = 64; banks = 8; - - /* - * Determine if B will get bigger during shifting - */ - int shifts = top < 64 ? positions : positions - 1; - int bMax = (int)((uint)(bDeg + shifts + 63) >> 6); - - int bTotal = bMax * banks, stride = width * banks; - - /* - * Create a single temporary buffer, with an offset table to find the positions of things in it - */ - int[] ci = new int[1 << width]; - int cTotal = aLen; - { - ci[0] = cTotal; - cTotal += bTotal; - ci[1] = cTotal; - for (int i = 2; i < ci.Length; ++i) - { - cTotal += cLen; - ci[i] = cTotal; - } - cTotal += cLen; - } - // NOTE: Provide a safe dump for "high zeroes" since we are adding 'bMax' and not 'bLen' - ++cTotal; - - long[] c = new long[cTotal]; - - // Prepare A in Interleaved form, according to the chosen width - Interleave(A.m_ints, 0, c, 0, aLen, width); - - // Make a working copy of B, since we will be shifting it - { - int bOff = aLen; - Array.Copy(B.m_ints, 0, c, bOff, bLen); - for (int bank = 1; bank < banks; ++bank) - { - ShiftUp(c, aLen, c, bOff += bMax, bMax, bank); - } - } - - /* - * The main loop analyzes the Interleaved windows in A, and for each non-zero window - * a single word-array XOR is performed to a carefully selected slice of 'c'. The loop is - * breadth-first, checking the lowest window in each word, then looping again for the - * next higher window position. - */ - int MASK = (1 << width) - 1; - - int k = 0; - for (;;) - { - int aPos = 0; - do - { - long aVal = (long)((ulong)c[aPos] >> k); - int bank = 0, bOff = aLen; - for (;;) - { - int index = (int)(aVal) & MASK; - if (index != 0) - { - /* - * Add to a 'c' buffer based on the bit-pattern of 'index'. Since A is in - * Interleaved form, the bits represent the current B shifted by 0, 'positions', - * 'positions' * 2, ..., 'positions' * ('width' - 1) - */ - Add(c, aPos + ci[index], c, bOff, bMax); - } - if (++bank == banks) - { - break; - } - bOff += bMax; - aVal = (long)((ulong)aVal >> width); - } - } - while (++aPos < aLen); - - if ((k += stride) >= top) - { - if (k >= 64) - { - break; - } - - /* - * Adjustment for window setups with top == 63, the final bit (if any) is processed - * as the top-bit of a window - */ - k = 64 - width; - MASK &= MASK << (top - k); - } - - /* - * After each position has been checked for all words of A, B is shifted up 1 place - */ - ShiftUp(c, aLen, bTotal, banks); - } - - int ciPos = ci.Length; - while (--ciPos > 1) - { - if ((ciPos & 1L) == 0L) - { - /* - * For even numbers, shift contents and add to the half-position - */ - AddShiftedUp(c, ci[(uint)ciPos >> 1], c, ci[ciPos], cLen, positions); - } - else - { - /* - * For odd numbers, 'distribute' contents to the result and the next-lowest position - */ - Distribute(c, ci[ciPos], ci[ciPos - 1], ci[1], cLen); - } - } - - /* - * Finally the raw answer is collected, reduce it against the reduction coefficients - */ - return ReduceResult(c, ci[1], cLen, m, ks); - } - - public LongArray ModReduce(int m, int[] ks) - { - long[] buf = Arrays.Clone(m_ints); - int rLen = ReduceInPlace(buf, 0, buf.Length, m, ks); - return new LongArray(buf, 0, rLen); - } - - public LongArray Multiply(LongArray other, int m, int[] ks) - { - /* - * Find out the degree of each argument and handle the zero cases - */ - int aDeg = Degree(); - if (aDeg == 0) - { - return this; - } - int bDeg = other.Degree(); - if (bDeg == 0) - { - return other; - } - - /* - * Swap if necessary so that A is the smaller argument - */ - LongArray A = this, B = other; - if (aDeg > bDeg) - { - A = other; B = this; - int tmp = aDeg; aDeg = bDeg; bDeg = tmp; - } - - /* - * Establish the word lengths of the arguments and result - */ - int aLen = (int)((uint)(aDeg + 63) >> 6); - int bLen = (int)((uint)(bDeg + 63) >> 6); - int cLen = (int)((uint)(aDeg + bDeg + 62) >> 6); - - if (aLen == 1) - { - long a0 = A.m_ints[0]; - if (a0 == 1L) - { - return B; - } - - /* - * Fast path for small A, with performance dependent only on the number of set bits - */ - long[] c0 = new long[cLen]; - MultiplyWord(a0, B.m_ints, bLen, c0, 0); - - /* - * Reduce the raw answer against the reduction coefficients - */ - //return ReduceResult(c0, 0, cLen, m, ks); - return new LongArray(c0, 0, cLen); - } - - /* - * Determine if B will get bigger during shifting - */ - int bMax = (int)((uint)(bDeg + 7 + 63) >> 6); - - /* - * Lookup table for the offset of each B in the tables - */ - int[] ti = new int[16]; - - /* - * Precompute table of all 4-bit products of B - */ - long[] T0 = new long[bMax << 4]; - int tOff = bMax; - ti[1] = tOff; - Array.Copy(B.m_ints, 0, T0, tOff, bLen); - for (int i = 2; i < 16; ++i) - { - ti[i] = (tOff += bMax); - if ((i & 1) == 0) - { - ShiftUp(T0, (int)((uint)tOff >> 1), T0, tOff, bMax, 1); - } - else - { - Add(T0, bMax, T0, tOff - bMax, T0, tOff, bMax); - } - } - - /* - * Second table with all 4-bit products of B shifted 4 bits - */ - long[] T1 = new long[T0.Length]; - ShiftUp(T0, 0, T1, 0, T0.Length, 4); - // ShiftUp(T0, bMax, T1, bMax, tOff, 4); - - long[] a = A.m_ints; - long[] c = new long[cLen << 3]; - - int MASK = 0xF; - - /* - * Lopez-Dahab (Modified) algorithm - */ - - for (int aPos = 0; aPos < aLen; ++aPos) - { - long aVal = a[aPos]; - int cOff = aPos; - for (; ; ) - { - int u = (int)aVal & MASK; - aVal = (long)((ulong)aVal >> 4); - int v = (int)aVal & MASK; - AddBoth(c, cOff, T0, ti[u], T1, ti[v], bMax); - aVal = (long)((ulong)aVal >> 4); - if (aVal == 0L) - { - break; - } - cOff += cLen; - } - } - - { - int cOff = c.Length; - while ((cOff -= cLen) != 0) - { - AddShiftedUp(c, cOff - cLen, c, cOff, cLen, 8); - } - } - - /* - * Finally the raw answer is collected, reduce it against the reduction coefficients - */ - //return ReduceResult(c, 0, cLen, m, ks); - return new LongArray(c, 0, cLen); - } - - public void Reduce(int m, int[] ks) - { - long[] buf = m_ints; - int rLen = ReduceInPlace(buf, 0, buf.Length, m, ks); - if (rLen < buf.Length) - { - m_ints = new long[rLen]; - Array.Copy(buf, 0, m_ints, 0, rLen); - } - } - - private static LongArray ReduceResult(long[] buf, int off, int len, int m, int[] ks) - { - int rLen = ReduceInPlace(buf, off, len, m, ks); - return new LongArray(buf, off, rLen); - } - - // private static void deInterleave(long[] x, int xOff, long[] z, int zOff, int count, int rounds) - // { - // for (int i = 0; i < count; ++i) - // { - // z[zOff + i] = deInterleave(x[zOff + i], rounds); - // } - // } - // - // private static long deInterleave(long x, int rounds) - // { - // while (--rounds >= 0) - // { - // x = deInterleave32(x & DEInterleave_MASK) | (deInterleave32((x >>> 1) & DEInterleave_MASK) << 32); - // } - // return x; - // } - // - // private static long deInterleave32(long x) - // { - // x = (x | (x >>> 1)) & 0x3333333333333333L; - // x = (x | (x >>> 2)) & 0x0F0F0F0F0F0F0F0FL; - // x = (x | (x >>> 4)) & 0x00FF00FF00FF00FFL; - // x = (x | (x >>> 8)) & 0x0000FFFF0000FFFFL; - // x = (x | (x >>> 16)) & 0x00000000FFFFFFFFL; - // return x; - // } - - private static int ReduceInPlace(long[] buf, int off, int len, int m, int[] ks) - { - int mLen = (m + 63) >> 6; - if (len < mLen) - { - return len; - } - - int numBits = System.Math.Min(len << 6, (m << 1) - 1); // TODO use actual degree? - int excessBits = (len << 6) - numBits; - while (excessBits >= 64) - { - --len; - excessBits -= 64; - } - - int kLen = ks.Length, kMax = ks[kLen - 1], kNext = kLen > 1 ? ks[kLen - 2] : 0; - int wordWiseLimit = System.Math.Max(m, kMax + 64); - int vectorableWords = (excessBits + System.Math.Min(numBits - wordWiseLimit, m - kNext)) >> 6; - if (vectorableWords > 1) - { - int vectorWiseWords = len - vectorableWords; - ReduceVectorWise(buf, off, len, vectorWiseWords, m, ks); - while (len > vectorWiseWords) - { - buf[off + --len] = 0L; - } - numBits = vectorWiseWords << 6; - } - - if (numBits > wordWiseLimit) - { - ReduceWordWise(buf, off, len, wordWiseLimit, m, ks); - numBits = wordWiseLimit; - } - - if (numBits > m) - { - ReduceBitWise(buf, off, numBits, m, ks); - } - - return mLen; - } - - private static void ReduceBitWise(long[] buf, int off, int BitLength, int m, int[] ks) - { - while (--BitLength >= m) - { - if (TestBit(buf, off, BitLength)) - { - ReduceBit(buf, off, BitLength, m, ks); - } - } - } - - private static void ReduceBit(long[] buf, int off, int bit, int m, int[] ks) - { - FlipBit(buf, off, bit); - int n = bit - m; - int j = ks.Length; - while (--j >= 0) - { - FlipBit(buf, off, ks[j] + n); - } - FlipBit(buf, off, n); - } - - private static void ReduceWordWise(long[] buf, int off, int len, int toBit, int m, int[] ks) - { - int toPos = (int)((uint)toBit >> 6); - - while (--len > toPos) - { - long word = buf[off + len]; - if (word != 0) - { - buf[off + len] = 0; - ReduceWord(buf, off, (len << 6), word, m, ks); - } - } - - { - int partial = toBit & 0x3F; - long word = (long)((ulong)buf[off + toPos] >> partial); - if (word != 0) - { - buf[off + toPos] ^= word << partial; - ReduceWord(buf, off, toBit, word, m, ks); - } - } - } - - private static void ReduceWord(long[] buf, int off, int bit, long word, int m, int[] ks) - { - int offset = bit - m; - int j = ks.Length; - while (--j >= 0) - { - FlipWord(buf, off, offset + ks[j], word); - } - FlipWord(buf, off, offset, word); - } - - private static void ReduceVectorWise(long[] buf, int off, int len, int words, int m, int[] ks) - { - /* - * NOTE: It's important we go from highest coefficient to lowest, because for the highest - * one (only) we allow the ranges to partially overlap, and therefore any changes must take - * effect for the subsequent lower coefficients. - */ - int baseBit = (words << 6) - m; - int j = ks.Length; - while (--j >= 0) - { - FlipVector(buf, off, buf, off + words, len - words, baseBit + ks[j]); - } - FlipVector(buf, off, buf, off + words, len - words, baseBit); - } - - private static void FlipVector(long[] x, int xOff, long[] y, int yOff, int yLen, int bits) - { - xOff += (int)((uint)bits >> 6); - bits &= 0x3F; - - if (bits == 0) - { - Add(x, xOff, y, yOff, yLen); - } - else - { - long carry = AddShiftedDown(x, xOff + 1, y, yOff, yLen, 64 - bits); - x[xOff] ^= carry; - } - } - - public LongArray ModSquare(int m, int[] ks) - { - int len = GetUsedLength(); - if (len == 0) - { - return this; - } - - int _2len = len << 1; - long[] r = new long[_2len]; - - int pos = 0; - while (pos < _2len) - { - long mi = m_ints[(uint)pos >> 1]; - r[pos++] = Interleave2_32to64((int)mi); - r[pos++] = Interleave2_32to64((int)((ulong)mi >> 32)); - } - - return new LongArray(r, 0, ReduceInPlace(r, 0, r.Length, m, ks)); - } - - public LongArray ModSquareN(int n, int m, int[] ks) - { - int len = GetUsedLength(); - if (len == 0) - { - return this; - } - - int mLen = (m + 63) >> 6; - long[] r = new long[mLen << 1]; - Array.Copy(m_ints, 0, r, 0, len); - - while (--n >= 0) - { - SquareInPlace(r, len, m, ks); - len = ReduceInPlace(r, 0, r.Length, m, ks); - } - - return new LongArray(r, 0, len); - } - - public LongArray Square(int m, int[] ks) - { - int len = GetUsedLength(); - if (len == 0) - { - return this; - } - - int _2len = len << 1; - long[] r = new long[_2len]; - - int pos = 0; - while (pos < _2len) - { - long mi = m_ints[(uint)pos >> 1]; - r[pos++] = Interleave2_32to64((int)mi); - r[pos++] = Interleave2_32to64((int)((ulong)mi >> 32)); - } - - return new LongArray(r, 0, r.Length); - } - - private static void SquareInPlace(long[] x, int xLen, int m, int[] ks) - { - int pos = xLen << 1; - while (--xLen >= 0) - { - long xVal = x[xLen]; - x[--pos] = Interleave2_32to64((int)((ulong)xVal >> 32)); - x[--pos] = Interleave2_32to64((int)xVal); - } - } - - private static void Interleave(long[] x, int xOff, long[] z, int zOff, int count, int width) - { - switch (width) - { - case 3: - Interleave3(x, xOff, z, zOff, count); - break; - case 5: - Interleave5(x, xOff, z, zOff, count); - break; - case 7: - Interleave7(x, xOff, z, zOff, count); - break; - default: - Interleave2_n(x, xOff, z, zOff, count, BitLengths[width] - 1); - break; - } - } - - private static void Interleave3(long[] x, int xOff, long[] z, int zOff, int count) - { - for (int i = 0; i < count; ++i) - { - z[zOff + i] = Interleave3(x[xOff + i]); - } - } - - private static long Interleave3(long x) - { - long z = x & (1L << 63); - return z - | Interleave3_21to63((int)x & 0x1FFFFF) - | Interleave3_21to63((int)((ulong)x >> 21) & 0x1FFFFF) << 1 - | Interleave3_21to63((int)((ulong)x >> 42) & 0x1FFFFF) << 2; - - // int zPos = 0, wPos = 0, xPos = 0; - // for (;;) - // { - // z |= ((x >>> xPos) & 1L) << zPos; - // if (++zPos == 63) - // { - // String sz2 = Long.toBinaryString(z); - // return z; - // } - // if ((xPos += 21) >= 63) - // { - // xPos = ++wPos; - // } - // } - } - - private static long Interleave3_21to63(int x) - { - int r00 = INTERLEAVE3_TABLE[x & 0x7F]; - int r21 = INTERLEAVE3_TABLE[((uint)x >> 7) & 0x7F]; - int r42 = INTERLEAVE3_TABLE[(uint)x >> 14]; - return (r42 & 0xFFFFFFFFL) << 42 | (r21 & 0xFFFFFFFFL) << 21 | (r00 & 0xFFFFFFFFL); - } - - private static void Interleave5(long[] x, int xOff, long[] z, int zOff, int count) - { - for (int i = 0; i < count; ++i) - { - z[zOff + i] = Interleave5(x[xOff + i]); - } - } - - private static long Interleave5(long x) - { - return Interleave3_13to65((int)x & 0x1FFF) - | Interleave3_13to65((int)((ulong)x >> 13) & 0x1FFF) << 1 - | Interleave3_13to65((int)((ulong)x >> 26) & 0x1FFF) << 2 - | Interleave3_13to65((int)((ulong)x >> 39) & 0x1FFF) << 3 - | Interleave3_13to65((int)((ulong)x >> 52) & 0x1FFF) << 4; - - // long z = 0; - // int zPos = 0, wPos = 0, xPos = 0; - // for (;;) - // { - // z |= ((x >>> xPos) & 1L) << zPos; - // if (++zPos == 64) - // { - // return z; - // } - // if ((xPos += 13) >= 64) - // { - // xPos = ++wPos; - // } - // } - } - - private static long Interleave3_13to65(int x) - { - int r00 = INTERLEAVE5_TABLE[x & 0x7F]; - int r35 = INTERLEAVE5_TABLE[(uint)x >> 7]; - return (r35 & 0xFFFFFFFFL) << 35 | (r00 & 0xFFFFFFFFL); - } - - private static void Interleave7(long[] x, int xOff, long[] z, int zOff, int count) - { - for (int i = 0; i < count; ++i) - { - z[zOff + i] = Interleave7(x[xOff + i]); - } - } - - private static long Interleave7(long x) - { - long z = x & (1L << 63); - return z - | INTERLEAVE7_TABLE[(int)x & 0x1FF] - | INTERLEAVE7_TABLE[(int)((ulong)x >> 9) & 0x1FF] << 1 - | INTERLEAVE7_TABLE[(int)((ulong)x >> 18) & 0x1FF] << 2 - | INTERLEAVE7_TABLE[(int)((ulong)x >> 27) & 0x1FF] << 3 - | INTERLEAVE7_TABLE[(int)((ulong)x >> 36) & 0x1FF] << 4 - | INTERLEAVE7_TABLE[(int)((ulong)x >> 45) & 0x1FF] << 5 - | INTERLEAVE7_TABLE[(int)((ulong)x >> 54) & 0x1FF] << 6; - - // int zPos = 0, wPos = 0, xPos = 0; - // for (;;) - // { - // z |= ((x >>> xPos) & 1L) << zPos; - // if (++zPos == 63) - // { - // return z; - // } - // if ((xPos += 9) >= 63) - // { - // xPos = ++wPos; - // } - // } - } - - private static void Interleave2_n(long[] x, int xOff, long[] z, int zOff, int count, int rounds) - { - for (int i = 0; i < count; ++i) - { - z[zOff + i] = Interleave2_n(x[xOff + i], rounds); - } - } - - private static long Interleave2_n(long x, int rounds) - { - while (rounds > 1) - { - rounds -= 2; - x = Interleave4_16to64((int)x & 0xFFFF) - | Interleave4_16to64((int)((ulong)x >> 16) & 0xFFFF) << 1 - | Interleave4_16to64((int)((ulong)x >> 32) & 0xFFFF) << 2 - | Interleave4_16to64((int)((ulong)x >> 48) & 0xFFFF) << 3; - } - if (rounds > 0) - { - x = Interleave2_32to64((int)x) | Interleave2_32to64((int)((ulong)x >> 32)) << 1; - } - return x; - } - - private static long Interleave4_16to64(int x) - { - int r00 = INTERLEAVE4_TABLE[x & 0xFF]; - int r32 = INTERLEAVE4_TABLE[(uint)x >> 8]; - return (r32 & 0xFFFFFFFFL) << 32 | (r00 & 0xFFFFFFFFL); - } - - private static long Interleave2_32to64(int x) - { - int r00 = INTERLEAVE2_TABLE[x & 0xFF] | INTERLEAVE2_TABLE[((uint)x >> 8) & 0xFF] << 16; - int r32 = INTERLEAVE2_TABLE[((uint)x >> 16) & 0xFF] | INTERLEAVE2_TABLE[(uint)x >> 24] << 16; - return (r32 & 0xFFFFFFFFL) << 32 | (r00 & 0xFFFFFFFFL); - } - - // private static LongArray ExpItohTsujii2(LongArray B, int n, int m, int[] ks) - // { - // LongArray t1 = B, t3 = new LongArray(new long[]{ 1L }); - // int scale = 1; - // - // int numTerms = n; - // while (numTerms > 1) - // { - // if ((numTerms & 1) != 0) - // { - // t3 = t3.ModMultiply(t1, m, ks); - // t1 = t1.modSquareN(scale, m, ks); - // } - // - // LongArray t2 = t1.modSquareN(scale, m, ks); - // t1 = t1.ModMultiply(t2, m, ks); - // numTerms >>>= 1; scale <<= 1; - // } - // - // return t3.ModMultiply(t1, m, ks); - // } - // - // private static LongArray ExpItohTsujii23(LongArray B, int n, int m, int[] ks) - // { - // LongArray t1 = B, t3 = new LongArray(new long[]{ 1L }); - // int scale = 1; - // - // int numTerms = n; - // while (numTerms > 1) - // { - // bool m03 = numTerms % 3 == 0; - // bool m14 = !m03 && (numTerms & 1) != 0; - // - // if (m14) - // { - // t3 = t3.ModMultiply(t1, m, ks); - // t1 = t1.modSquareN(scale, m, ks); - // } - // - // LongArray t2 = t1.modSquareN(scale, m, ks); - // t1 = t1.ModMultiply(t2, m, ks); - // - // if (m03) - // { - // t2 = t2.modSquareN(scale, m, ks); - // t1 = t1.ModMultiply(t2, m, ks); - // numTerms /= 3; scale *= 3; - // } - // else - // { - // numTerms >>>= 1; scale <<= 1; - // } - // } - // - // return t3.ModMultiply(t1, m, ks); - // } - // - // private static LongArray ExpItohTsujii235(LongArray B, int n, int m, int[] ks) - // { - // LongArray t1 = B, t4 = new LongArray(new long[]{ 1L }); - // int scale = 1; - // - // int numTerms = n; - // while (numTerms > 1) - // { - // if (numTerms % 5 == 0) - // { - //// t1 = ExpItohTsujii23(t1, 5, m, ks); - // - // LongArray t3 = t1; - // t1 = t1.modSquareN(scale, m, ks); - // - // LongArray t2 = t1.modSquareN(scale, m, ks); - // t1 = t1.ModMultiply(t2, m, ks); - // t2 = t1.modSquareN(scale << 1, m, ks); - // t1 = t1.ModMultiply(t2, m, ks); - // - // t1 = t1.ModMultiply(t3, m, ks); - // - // numTerms /= 5; scale *= 5; - // continue; - // } - // - // bool m03 = numTerms % 3 == 0; - // bool m14 = !m03 && (numTerms & 1) != 0; - // - // if (m14) - // { - // t4 = t4.ModMultiply(t1, m, ks); - // t1 = t1.modSquareN(scale, m, ks); - // } - // - // LongArray t2 = t1.modSquareN(scale, m, ks); - // t1 = t1.ModMultiply(t2, m, ks); - // - // if (m03) - // { - // t2 = t2.modSquareN(scale, m, ks); - // t1 = t1.ModMultiply(t2, m, ks); - // numTerms /= 3; scale *= 3; - // } - // else - // { - // numTerms >>>= 1; scale <<= 1; - // } - // } - // - // return t4.ModMultiply(t1, m, ks); - // } - - public LongArray ModInverse(int m, int[] ks) - { - /* - * Fermat's Little Theorem - */ - // LongArray A = this; - // LongArray B = A.modSquare(m, ks); - // LongArray R0 = B, R1 = B; - // for (int i = 2; i < m; ++i) - // { - // R1 = R1.modSquare(m, ks); - // R0 = R0.ModMultiply(R1, m, ks); - // } - // - // return R0; - - /* - * Itoh-Tsujii - */ - // LongArray B = modSquare(m, ks); - // switch (m) - // { - // case 409: - // return ExpItohTsujii23(B, m - 1, m, ks); - // case 571: - // return ExpItohTsujii235(B, m - 1, m, ks); - // case 163: - // case 233: - // case 283: - // default: - // return ExpItohTsujii2(B, m - 1, m, ks); - // } - - /* - * Inversion in F2m using the extended Euclidean algorithm - * - * Input: A nonzero polynomial a(z) of degree at most m-1 - * Output: a(z)^(-1) mod f(z) - */ - int uzDegree = Degree(); - if (uzDegree == 0) - { - throw new InvalidOperationException(); - } - if (uzDegree == 1) - { - return this; - } - - // u(z) := a(z) - LongArray uz = (LongArray)Copy(); - - int t = (m + 63) >> 6; - - // v(z) := f(z) - LongArray vz = new LongArray(t); - ReduceBit(vz.m_ints, 0, m, m, ks); - - // g1(z) := 1, g2(z) := 0 - LongArray g1z = new LongArray(t); - g1z.m_ints[0] = 1L; - LongArray g2z = new LongArray(t); - - int[] uvDeg = new int[]{ uzDegree, m + 1 }; - LongArray[] uv = new LongArray[]{ uz, vz }; - - int[] ggDeg = new int[]{ 1, 0 }; - LongArray[] gg = new LongArray[]{ g1z, g2z }; - - int b = 1; - int duv1 = uvDeg[b]; - int dgg1 = ggDeg[b]; - int j = duv1 - uvDeg[1 - b]; - - for (;;) - { - if (j < 0) - { - j = -j; - uvDeg[b] = duv1; - ggDeg[b] = dgg1; - b = 1 - b; - duv1 = uvDeg[b]; - dgg1 = ggDeg[b]; - } - - uv[b].AddShiftedByBitsSafe(uv[1 - b], uvDeg[1 - b], j); - - int duv2 = uv[b].DegreeFrom(duv1); - if (duv2 == 0) - { - return gg[1 - b]; - } - - { - int dgg2 = ggDeg[1 - b]; - gg[b].AddShiftedByBitsSafe(gg[1 - b], dgg2, j); - dgg2 += j; - - if (dgg2 > dgg1) - { - dgg1 = dgg2; - } - else if (dgg2 == dgg1) - { - dgg1 = gg[b].DegreeFrom(dgg1); - } - } - - j += (duv2 - duv1); - duv1 = duv2; - } - } - - public override bool Equals(object obj) - { - return Equals(obj as LongArray); - } - - public virtual bool Equals(LongArray other) - { - if (this == other) - return true; - if (null == other) - return false; - int usedLen = GetUsedLength(); - if (other.GetUsedLength() != usedLen) - { - return false; - } - for (int i = 0; i < usedLen; i++) - { - if (m_ints[i] != other.m_ints[i]) - { - return false; - } - } - return true; - } - - public override int GetHashCode() - { - int usedLen = GetUsedLength(); - int hash = 1; - for (int i = 0; i < usedLen; i++) - { - long mi = m_ints[i]; - hash *= 31; - hash ^= (int)mi; - hash *= 31; - hash ^= (int)((ulong)mi >> 32); - } - return hash; - } - - public LongArray Copy() - { - return new LongArray(Arrays.Clone(m_ints)); - } - - public override string ToString() - { - int i = GetUsedLength(); - if (i == 0) - { - return "0"; - } - - StringBuilder sb = new StringBuilder(Convert.ToString(m_ints[--i], 2)); - while (--i >= 0) - { - string s = Convert.ToString(m_ints[i], 2); - - // Add leading zeroes, except for highest significant word - int len = s.Length; - if (len < 64) - { - sb.Append(ZEROES.Substring(len)); - } - - sb.Append(s); - } - return sb.ToString(); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/ScaleXPointMap.cs b/bc-sharp-crypto/src/math/ec/ScaleXPointMap.cs deleted file mode 100644 index f8a363b..0000000 --- a/bc-sharp-crypto/src/math/ec/ScaleXPointMap.cs +++ /dev/null @@ -1,20 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC -{ - public class ScaleXPointMap - : ECPointMap - { - protected readonly ECFieldElement scale; - - public ScaleXPointMap(ECFieldElement scale) - { - this.scale = scale; - } - - public virtual ECPoint Map(ECPoint p) - { - return p.ScaleX(scale); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/ScaleYPointMap.cs b/bc-sharp-crypto/src/math/ec/ScaleYPointMap.cs deleted file mode 100644 index 1c4795b..0000000 --- a/bc-sharp-crypto/src/math/ec/ScaleYPointMap.cs +++ /dev/null @@ -1,20 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC -{ - public class ScaleYPointMap - : ECPointMap - { - protected readonly ECFieldElement scale; - - public ScaleYPointMap(ECFieldElement scale) - { - this.scale = scale; - } - - public virtual ECPoint Map(ECPoint p) - { - return p.ScaleY(scale); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/SimpleLookupTable.cs b/bc-sharp-crypto/src/math/ec/SimpleLookupTable.cs deleted file mode 100644 index f1e32f2..0000000 --- a/bc-sharp-crypto/src/math/ec/SimpleLookupTable.cs +++ /dev/null @@ -1,35 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC -{ - public class SimpleLookupTable - : ECLookupTable - { - private static ECPoint[] Copy(ECPoint[] points, int off, int len) - { - ECPoint[] result = new ECPoint[len]; - for (int i = 0; i < len; ++i) - { - result[i] = points[off + i]; - } - return result; - } - - private readonly ECPoint[] points; - - public SimpleLookupTable(ECPoint[] points, int off, int len) - { - this.points = Copy(points, off, len); - } - - public virtual int Size - { - get { return points.Length; } - } - - public virtual ECPoint Lookup(int index) - { - return points[index]; - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/abc/SimpleBigDecimal.cs b/bc-sharp-crypto/src/math/ec/abc/SimpleBigDecimal.cs deleted file mode 100644 index d5664db..0000000 --- a/bc-sharp-crypto/src/math/ec/abc/SimpleBigDecimal.cs +++ /dev/null @@ -1,241 +0,0 @@ -using System; -using System.Text; - -namespace Org.BouncyCastle.Math.EC.Abc -{ - /** - * Class representing a simple version of a big decimal. A - * SimpleBigDecimal is basically a - * {@link java.math.BigInteger BigInteger} with a few digits on the right of - * the decimal point. The number of (binary) digits on the right of the decimal - * point is called the scale of the SimpleBigDecimal. - * Unlike in {@link java.math.BigDecimal BigDecimal}, the scale is not adjusted - * automatically, but must be set manually. All SimpleBigDecimals - * taking part in the same arithmetic operation must have equal scale. The - * result of a multiplication of two SimpleBigDecimals returns a - * SimpleBigDecimal with double scale. - */ - internal class SimpleBigDecimal - // : Number - { - // private static final long serialVersionUID = 1L; - - private readonly BigInteger bigInt; - private readonly int scale; - - /** - * Returns a SimpleBigDecimal representing the same numerical - * value as value. - * @param value The value of the SimpleBigDecimal to be - * created. - * @param scale The scale of the SimpleBigDecimal to be - * created. - * @return The such created SimpleBigDecimal. - */ - public static SimpleBigDecimal GetInstance(BigInteger val, int scale) - { - return new SimpleBigDecimal(val.ShiftLeft(scale), scale); - } - - /** - * Constructor for SimpleBigDecimal. The value of the - * constructed SimpleBigDecimal Equals bigInt / - * 2scale. - * @param bigInt The bigInt value parameter. - * @param scale The scale of the constructed SimpleBigDecimal. - */ - public SimpleBigDecimal(BigInteger bigInt, int scale) - { - if (scale < 0) - throw new ArgumentException("scale may not be negative"); - - this.bigInt = bigInt; - this.scale = scale; - } - - private SimpleBigDecimal(SimpleBigDecimal limBigDec) - { - bigInt = limBigDec.bigInt; - scale = limBigDec.scale; - } - - private void CheckScale(SimpleBigDecimal b) - { - if (scale != b.scale) - throw new ArgumentException("Only SimpleBigDecimal of same scale allowed in arithmetic operations"); - } - - public SimpleBigDecimal AdjustScale(int newScale) - { - if (newScale < 0) - throw new ArgumentException("scale may not be negative"); - - if (newScale == scale) - return this; - - return new SimpleBigDecimal(bigInt.ShiftLeft(newScale - scale), newScale); - } - - public SimpleBigDecimal Add(SimpleBigDecimal b) - { - CheckScale(b); - return new SimpleBigDecimal(bigInt.Add(b.bigInt), scale); - } - - public SimpleBigDecimal Add(BigInteger b) - { - return new SimpleBigDecimal(bigInt.Add(b.ShiftLeft(scale)), scale); - } - - public SimpleBigDecimal Negate() - { - return new SimpleBigDecimal(bigInt.Negate(), scale); - } - - public SimpleBigDecimal Subtract(SimpleBigDecimal b) - { - return Add(b.Negate()); - } - - public SimpleBigDecimal Subtract(BigInteger b) - { - return new SimpleBigDecimal(bigInt.Subtract(b.ShiftLeft(scale)), scale); - } - - public SimpleBigDecimal Multiply(SimpleBigDecimal b) - { - CheckScale(b); - return new SimpleBigDecimal(bigInt.Multiply(b.bigInt), scale + scale); - } - - public SimpleBigDecimal Multiply(BigInteger b) - { - return new SimpleBigDecimal(bigInt.Multiply(b), scale); - } - - public SimpleBigDecimal Divide(SimpleBigDecimal b) - { - CheckScale(b); - BigInteger dividend = bigInt.ShiftLeft(scale); - return new SimpleBigDecimal(dividend.Divide(b.bigInt), scale); - } - - public SimpleBigDecimal Divide(BigInteger b) - { - return new SimpleBigDecimal(bigInt.Divide(b), scale); - } - - public SimpleBigDecimal ShiftLeft(int n) - { - return new SimpleBigDecimal(bigInt.ShiftLeft(n), scale); - } - - public int CompareTo(SimpleBigDecimal val) - { - CheckScale(val); - return bigInt.CompareTo(val.bigInt); - } - - public int CompareTo(BigInteger val) - { - return bigInt.CompareTo(val.ShiftLeft(scale)); - } - - public BigInteger Floor() - { - return bigInt.ShiftRight(scale); - } - - public BigInteger Round() - { - SimpleBigDecimal oneHalf = new SimpleBigDecimal(BigInteger.One, 1); - return Add(oneHalf.AdjustScale(scale)).Floor(); - } - - public int IntValue - { - get { return Floor().IntValue; } - } - - public long LongValue - { - get { return Floor().LongValue; } - } - -// public double doubleValue() -// { -// return new Double(ToString()).doubleValue(); -// } -// -// public float floatValue() -// { -// return new Float(ToString()).floatValue(); -// } - - public int Scale - { - get { return scale; } - } - - public override string ToString() - { - if (scale == 0) - return bigInt.ToString(); - - BigInteger floorBigInt = Floor(); - - BigInteger fract = bigInt.Subtract(floorBigInt.ShiftLeft(scale)); - if (bigInt.SignValue < 0) - { - fract = BigInteger.One.ShiftLeft(scale).Subtract(fract); - } - - if ((floorBigInt.SignValue == -1) && (!(fract.Equals(BigInteger.Zero)))) - { - floorBigInt = floorBigInt.Add(BigInteger.One); - } - string leftOfPoint = floorBigInt.ToString(); - - char[] fractCharArr = new char[scale]; - string fractStr = fract.ToString(2); - int fractLen = fractStr.Length; - int zeroes = scale - fractLen; - for (int i = 0; i < zeroes; i++) - { - fractCharArr[i] = '0'; - } - for (int j = 0; j < fractLen; j++) - { - fractCharArr[zeroes + j] = fractStr[j]; - } - string rightOfPoint = new string(fractCharArr); - - StringBuilder sb = new StringBuilder(leftOfPoint); - sb.Append("."); - sb.Append(rightOfPoint); - - return sb.ToString(); - } - - public override bool Equals( - object obj) - { - if (this == obj) - return true; - - SimpleBigDecimal other = obj as SimpleBigDecimal; - - if (other == null) - return false; - - return bigInt.Equals(other.bigInt) - && scale == other.scale; - } - - public override int GetHashCode() - { - return bigInt.GetHashCode() ^ scale; - } - - } -} diff --git a/bc-sharp-crypto/src/math/ec/abc/Tnaf.cs b/bc-sharp-crypto/src/math/ec/abc/Tnaf.cs deleted file mode 100644 index b6e792a..0000000 --- a/bc-sharp-crypto/src/math/ec/abc/Tnaf.cs +++ /dev/null @@ -1,845 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC.Abc -{ - /** - * Class holding methods for point multiplication based on the window - * τ-adic nonadjacent form (WTNAF). The algorithms are based on the - * paper "Improved Algorithms for Arithmetic on Anomalous Binary Curves" - * by Jerome A. Solinas. The paper first appeared in the Proceedings of - * Crypto 1997. - */ - internal class Tnaf - { - private static readonly BigInteger MinusOne = BigInteger.One.Negate(); - private static readonly BigInteger MinusTwo = BigInteger.Two.Negate(); - private static readonly BigInteger MinusThree = BigInteger.Three.Negate(); - private static readonly BigInteger Four = BigInteger.ValueOf(4); - - /** - * The window width of WTNAF. The standard value of 4 is slightly less - * than optimal for running time, but keeps space requirements for - * precomputation low. For typical curves, a value of 5 or 6 results in - * a better running time. When changing this value, the - * αu's must be computed differently, see - * e.g. "Guide to Elliptic Curve Cryptography", Darrel Hankerson, - * Alfred Menezes, Scott Vanstone, Springer-Verlag New York Inc., 2004, - * p. 121-122 - */ - public const sbyte Width = 4; - - /** - * 24 - */ - public const sbyte Pow2Width = 16; - - /** - * The αu's for a=0 as an array - * of ZTauElements. - */ - public static readonly ZTauElement[] Alpha0 = - { - null, - new ZTauElement(BigInteger.One, BigInteger.Zero), null, - new ZTauElement(MinusThree, MinusOne), null, - new ZTauElement(MinusOne, MinusOne), null, - new ZTauElement(BigInteger.One, MinusOne), null - }; - - /** - * The αu's for a=0 as an array - * of TNAFs. - */ - public static readonly sbyte[][] Alpha0Tnaf = - { - null, new sbyte[]{1}, null, new sbyte[]{-1, 0, 1}, null, new sbyte[]{1, 0, 1}, null, new sbyte[]{-1, 0, 0, 1} - }; - - /** - * The αu's for a=1 as an array - * of ZTauElements. - */ - public static readonly ZTauElement[] Alpha1 = - { - null, - new ZTauElement(BigInteger.One, BigInteger.Zero), null, - new ZTauElement(MinusThree, BigInteger.One), null, - new ZTauElement(MinusOne, BigInteger.One), null, - new ZTauElement(BigInteger.One, BigInteger.One), null - }; - - /** - * The αu's for a=1 as an array - * of TNAFs. - */ - public static readonly sbyte[][] Alpha1Tnaf = - { - null, new sbyte[]{1}, null, new sbyte[]{-1, 0, 1}, null, new sbyte[]{1, 0, 1}, null, new sbyte[]{-1, 0, 0, -1} - }; - - /** - * Computes the norm of an element λ of - * Z[τ]. - * @param mu The parameter μ of the elliptic curve. - * @param lambda The element λ of - * Z[τ]. - * @return The norm of λ. - */ - public static BigInteger Norm(sbyte mu, ZTauElement lambda) - { - BigInteger norm; - - // s1 = u^2 - BigInteger s1 = lambda.u.Multiply(lambda.u); - - // s2 = u * v - BigInteger s2 = lambda.u.Multiply(lambda.v); - - // s3 = 2 * v^2 - BigInteger s3 = lambda.v.Multiply(lambda.v).ShiftLeft(1); - - if (mu == 1) - { - norm = s1.Add(s2).Add(s3); - } - else if (mu == -1) - { - norm = s1.Subtract(s2).Add(s3); - } - else - { - throw new ArgumentException("mu must be 1 or -1"); - } - - return norm; - } - - /** - * Computes the norm of an element λ of - * R[τ], where λ = u + vτ - * and u and u are real numbers (elements of - * R). - * @param mu The parameter μ of the elliptic curve. - * @param u The real part of the element λ of - * R[τ]. - * @param v The τ-adic part of the element - * λ of R[τ]. - * @return The norm of λ. - */ - public static SimpleBigDecimal Norm(sbyte mu, SimpleBigDecimal u, SimpleBigDecimal v) - { - SimpleBigDecimal norm; - - // s1 = u^2 - SimpleBigDecimal s1 = u.Multiply(u); - - // s2 = u * v - SimpleBigDecimal s2 = u.Multiply(v); - - // s3 = 2 * v^2 - SimpleBigDecimal s3 = v.Multiply(v).ShiftLeft(1); - - if (mu == 1) - { - norm = s1.Add(s2).Add(s3); - } - else if (mu == -1) - { - norm = s1.Subtract(s2).Add(s3); - } - else - { - throw new ArgumentException("mu must be 1 or -1"); - } - - return norm; - } - - /** - * Rounds an element λ of R[τ] - * to an element of Z[τ], such that their difference - * has minimal norm. λ is given as - * λ = λ0 + λ1τ. - * @param lambda0 The component λ0. - * @param lambda1 The component λ1. - * @param mu The parameter μ of the elliptic curve. Must - * equal 1 or -1. - * @return The rounded element of Z[τ]. - * @throws ArgumentException if lambda0 and - * lambda1 do not have same scale. - */ - public static ZTauElement Round(SimpleBigDecimal lambda0, - SimpleBigDecimal lambda1, sbyte mu) - { - int scale = lambda0.Scale; - if (lambda1.Scale != scale) - throw new ArgumentException("lambda0 and lambda1 do not have same scale"); - - if (!((mu == 1) || (mu == -1))) - throw new ArgumentException("mu must be 1 or -1"); - - BigInteger f0 = lambda0.Round(); - BigInteger f1 = lambda1.Round(); - - SimpleBigDecimal eta0 = lambda0.Subtract(f0); - SimpleBigDecimal eta1 = lambda1.Subtract(f1); - - // eta = 2*eta0 + mu*eta1 - SimpleBigDecimal eta = eta0.Add(eta0); - if (mu == 1) - { - eta = eta.Add(eta1); - } - else - { - // mu == -1 - eta = eta.Subtract(eta1); - } - - // check1 = eta0 - 3*mu*eta1 - // check2 = eta0 + 4*mu*eta1 - SimpleBigDecimal threeEta1 = eta1.Add(eta1).Add(eta1); - SimpleBigDecimal fourEta1 = threeEta1.Add(eta1); - SimpleBigDecimal check1; - SimpleBigDecimal check2; - if (mu == 1) - { - check1 = eta0.Subtract(threeEta1); - check2 = eta0.Add(fourEta1); - } - else - { - // mu == -1 - check1 = eta0.Add(threeEta1); - check2 = eta0.Subtract(fourEta1); - } - - sbyte h0 = 0; - sbyte h1 = 0; - - // if eta >= 1 - if (eta.CompareTo(BigInteger.One) >= 0) - { - if (check1.CompareTo(MinusOne) < 0) - { - h1 = mu; - } - else - { - h0 = 1; - } - } - else - { - // eta < 1 - if (check2.CompareTo(BigInteger.Two) >= 0) - { - h1 = mu; - } - } - - // if eta < -1 - if (eta.CompareTo(MinusOne) < 0) - { - if (check1.CompareTo(BigInteger.One) >= 0) - { - h1 = (sbyte)-mu; - } - else - { - h0 = -1; - } - } - else - { - // eta >= -1 - if (check2.CompareTo(MinusTwo) < 0) - { - h1 = (sbyte)-mu; - } - } - - BigInteger q0 = f0.Add(BigInteger.ValueOf(h0)); - BigInteger q1 = f1.Add(BigInteger.ValueOf(h1)); - return new ZTauElement(q0, q1); - } - - /** - * Approximate division by n. For an integer - * k, the value λ = s k / n is - * computed to c bits of accuracy. - * @param k The parameter k. - * @param s The curve parameter s0 or - * s1. - * @param vm The Lucas Sequence element Vm. - * @param a The parameter a of the elliptic curve. - * @param m The bit length of the finite field - * Fm. - * @param c The number of bits of accuracy, i.e. the scale of the returned - * SimpleBigDecimal. - * @return The value λ = s k / n computed to - * c bits of accuracy. - */ - public static SimpleBigDecimal ApproximateDivisionByN(BigInteger k, - BigInteger s, BigInteger vm, sbyte a, int m, int c) - { - int _k = (m + 5)/2 + c; - BigInteger ns = k.ShiftRight(m - _k - 2 + a); - - BigInteger gs = s.Multiply(ns); - - BigInteger hs = gs.ShiftRight(m); - - BigInteger js = vm.Multiply(hs); - - BigInteger gsPlusJs = gs.Add(js); - BigInteger ls = gsPlusJs.ShiftRight(_k-c); - if (gsPlusJs.TestBit(_k-c-1)) - { - // round up - ls = ls.Add(BigInteger.One); - } - - return new SimpleBigDecimal(ls, c); - } - - /** - * Computes the τ-adic NAF (non-adjacent form) of an - * element λ of Z[τ]. - * @param mu The parameter μ of the elliptic curve. - * @param lambda The element λ of - * Z[τ]. - * @return The τ-adic NAF of λ. - */ - public static sbyte[] TauAdicNaf(sbyte mu, ZTauElement lambda) - { - if (!((mu == 1) || (mu == -1))) - throw new ArgumentException("mu must be 1 or -1"); - - BigInteger norm = Norm(mu, lambda); - - // Ceiling of log2 of the norm - int log2Norm = norm.BitLength; - - // If length(TNAF) > 30, then length(TNAF) < log2Norm + 3.52 - int maxLength = log2Norm > 30 ? log2Norm + 4 : 34; - - // The array holding the TNAF - sbyte[] u = new sbyte[maxLength]; - int i = 0; - - // The actual length of the TNAF - int length = 0; - - BigInteger r0 = lambda.u; - BigInteger r1 = lambda.v; - - while(!((r0.Equals(BigInteger.Zero)) && (r1.Equals(BigInteger.Zero)))) - { - // If r0 is odd - if (r0.TestBit(0)) - { - u[i] = (sbyte) BigInteger.Two.Subtract((r0.Subtract(r1.ShiftLeft(1))).Mod(Four)).IntValue; - - // r0 = r0 - u[i] - if (u[i] == 1) - { - r0 = r0.ClearBit(0); - } - else - { - // u[i] == -1 - r0 = r0.Add(BigInteger.One); - } - length = i; - } - else - { - u[i] = 0; - } - - BigInteger t = r0; - BigInteger s = r0.ShiftRight(1); - if (mu == 1) - { - r0 = r1.Add(s); - } - else - { - // mu == -1 - r0 = r1.Subtract(s); - } - - r1 = t.ShiftRight(1).Negate(); - i++; - } - - length++; - - // Reduce the TNAF array to its actual length - sbyte[] tnaf = new sbyte[length]; - Array.Copy(u, 0, tnaf, 0, length); - return tnaf; - } - - /** - * Applies the operation τ() to an - * AbstractF2mPoint. - * @param p The AbstractF2mPoint to which τ() is applied. - * @return τ(p) - */ - public static AbstractF2mPoint Tau(AbstractF2mPoint p) - { - return p.Tau(); - } - - /** - * Returns the parameter μ of the elliptic curve. - * @param curve The elliptic curve from which to obtain μ. - * The curve must be a Koblitz curve, i.e. a Equals - * 0 or 1 and b Equals - * 1. - * @return μ of the elliptic curve. - * @throws ArgumentException if the given ECCurve is not a Koblitz - * curve. - */ - public static sbyte GetMu(AbstractF2mCurve curve) - { - BigInteger a = curve.A.ToBigInteger(); - - sbyte mu; - if (a.SignValue == 0) - { - mu = -1; - } - else if (a.Equals(BigInteger.One)) - { - mu = 1; - } - else - { - throw new ArgumentException("No Koblitz curve (ABC), TNAF multiplication not possible"); - } - return mu; - } - - public static sbyte GetMu(ECFieldElement curveA) - { - return (sbyte)(curveA.IsZero ? -1 : 1); - } - - public static sbyte GetMu(int curveA) - { - return (sbyte)(curveA == 0 ? -1 : 1); - } - - /** - * Calculates the Lucas Sequence elements Uk-1 and - * Uk or Vk-1 and - * Vk. - * @param mu The parameter μ of the elliptic curve. - * @param k The index of the second element of the Lucas Sequence to be - * returned. - * @param doV If set to true, computes Vk-1 and - * Vk, otherwise Uk-1 and - * Uk. - * @return An array with 2 elements, containing Uk-1 - * and Uk or Vk-1 - * and Vk. - */ - public static BigInteger[] GetLucas(sbyte mu, int k, bool doV) - { - if (!(mu == 1 || mu == -1)) - throw new ArgumentException("mu must be 1 or -1"); - - BigInteger u0; - BigInteger u1; - BigInteger u2; - - if (doV) - { - u0 = BigInteger.Two; - u1 = BigInteger.ValueOf(mu); - } - else - { - u0 = BigInteger.Zero; - u1 = BigInteger.One; - } - - for (int i = 1; i < k; i++) - { - // u2 = mu*u1 - 2*u0; - BigInteger s = null; - if (mu == 1) - { - s = u1; - } - else - { - // mu == -1 - s = u1.Negate(); - } - - u2 = s.Subtract(u0.ShiftLeft(1)); - u0 = u1; - u1 = u2; - // System.out.println(i + ": " + u2); - // System.out.println(); - } - - BigInteger[] retVal = {u0, u1}; - return retVal; - } - - /** - * Computes the auxiliary value tw. If the width is - * 4, then for mu = 1, tw = 6 and for - * mu = -1, tw = 10 - * @param mu The parameter μ of the elliptic curve. - * @param w The window width of the WTNAF. - * @return the auxiliary value tw - */ - public static BigInteger GetTw(sbyte mu, int w) - { - if (w == 4) - { - if (mu == 1) - { - return BigInteger.ValueOf(6); - } - else - { - // mu == -1 - return BigInteger.ValueOf(10); - } - } - else - { - // For w <> 4, the values must be computed - BigInteger[] us = GetLucas(mu, w, false); - BigInteger twoToW = BigInteger.Zero.SetBit(w); - BigInteger u1invert = us[1].ModInverse(twoToW); - BigInteger tw; - tw = BigInteger.Two.Multiply(us[0]).Multiply(u1invert).Mod(twoToW); - //System.out.println("mu = " + mu); - //System.out.println("tw = " + tw); - return tw; - } - } - - /** - * Computes the auxiliary values s0 and - * s1 used for partial modular reduction. - * @param curve The elliptic curve for which to compute - * s0 and s1. - * @throws ArgumentException if curve is not a - * Koblitz curve (Anomalous Binary Curve, ABC). - */ - public static BigInteger[] GetSi(AbstractF2mCurve curve) - { - if (!curve.IsKoblitz) - throw new ArgumentException("si is defined for Koblitz curves only"); - - int m = curve.FieldSize; - int a = curve.A.ToBigInteger().IntValue; - sbyte mu = GetMu(a); - int shifts = GetShiftsForCofactor(curve.Cofactor); - int index = m + 3 - a; - BigInteger[] ui = GetLucas(mu, index, false); - - if (mu == 1) - { - ui[0] = ui[0].Negate(); - ui[1] = ui[1].Negate(); - } - - BigInteger dividend0 = BigInteger.One.Add(ui[1]).ShiftRight(shifts); - BigInteger dividend1 = BigInteger.One.Add(ui[0]).ShiftRight(shifts).Negate(); - - return new BigInteger[] { dividend0, dividend1 }; - } - - public static BigInteger[] GetSi(int fieldSize, int curveA, BigInteger cofactor) - { - sbyte mu = GetMu(curveA); - int shifts = GetShiftsForCofactor(cofactor); - int index = fieldSize + 3 - curveA; - BigInteger[] ui = GetLucas(mu, index, false); - if (mu == 1) - { - ui[0] = ui[0].Negate(); - ui[1] = ui[1].Negate(); - } - - BigInteger dividend0 = BigInteger.One.Add(ui[1]).ShiftRight(shifts); - BigInteger dividend1 = BigInteger.One.Add(ui[0]).ShiftRight(shifts).Negate(); - - return new BigInteger[] { dividend0, dividend1 }; - } - - protected static int GetShiftsForCofactor(BigInteger h) - { - if (h != null && h.BitLength < 4) - { - int hi = h.IntValue; - if (hi == 2) - return 1; - if (hi == 4) - return 2; - } - - throw new ArgumentException("h (Cofactor) must be 2 or 4"); - } - - /** - * Partial modular reduction modulo - * (τm - 1)/(τ - 1). - * @param k The integer to be reduced. - * @param m The bitlength of the underlying finite field. - * @param a The parameter a of the elliptic curve. - * @param s The auxiliary values s0 and - * s1. - * @param mu The parameter μ of the elliptic curve. - * @param c The precision (number of bits of accuracy) of the partial - * modular reduction. - * @return ρ := k partmod (τm - 1)/(τ - 1) - */ - public static ZTauElement PartModReduction(BigInteger k, int m, sbyte a, - BigInteger[] s, sbyte mu, sbyte c) - { - // d0 = s[0] + mu*s[1]; mu is either 1 or -1 - BigInteger d0; - if (mu == 1) - { - d0 = s[0].Add(s[1]); - } - else - { - d0 = s[0].Subtract(s[1]); - } - - BigInteger[] v = GetLucas(mu, m, true); - BigInteger vm = v[1]; - - SimpleBigDecimal lambda0 = ApproximateDivisionByN( - k, s[0], vm, a, m, c); - - SimpleBigDecimal lambda1 = ApproximateDivisionByN( - k, s[1], vm, a, m, c); - - ZTauElement q = Round(lambda0, lambda1, mu); - - // r0 = n - d0*q0 - 2*s1*q1 - BigInteger r0 = k.Subtract(d0.Multiply(q.u)).Subtract( - BigInteger.ValueOf(2).Multiply(s[1]).Multiply(q.v)); - - // r1 = s1*q0 - s0*q1 - BigInteger r1 = s[1].Multiply(q.u).Subtract(s[0].Multiply(q.v)); - - return new ZTauElement(r0, r1); - } - - /** - * Multiplies a {@link org.bouncycastle.math.ec.AbstractF2mPoint AbstractF2mPoint} - * by a BigInteger using the reduced τ-adic - * NAF (RTNAF) method. - * @param p The AbstractF2mPoint to Multiply. - * @param k The BigInteger by which to Multiply p. - * @return k * p - */ - public static AbstractF2mPoint MultiplyRTnaf(AbstractF2mPoint p, BigInteger k) - { - AbstractF2mCurve curve = (AbstractF2mCurve)p.Curve; - int m = curve.FieldSize; - int a = curve.A.ToBigInteger().IntValue; - sbyte mu = GetMu(a); - BigInteger[] s = curve.GetSi(); - ZTauElement rho = PartModReduction(k, m, (sbyte)a, s, mu, (sbyte)10); - - return MultiplyTnaf(p, rho); - } - - /** - * Multiplies a {@link org.bouncycastle.math.ec.AbstractF2mPoint AbstractF2mPoint} - * by an element λ of Z[τ] - * using the τ-adic NAF (TNAF) method. - * @param p The AbstractF2mPoint to Multiply. - * @param lambda The element λ of - * Z[τ]. - * @return λ * p - */ - public static AbstractF2mPoint MultiplyTnaf(AbstractF2mPoint p, ZTauElement lambda) - { - AbstractF2mCurve curve = (AbstractF2mCurve)p.Curve; - sbyte mu = GetMu(curve.A); - sbyte[] u = TauAdicNaf(mu, lambda); - - AbstractF2mPoint q = MultiplyFromTnaf(p, u); - - return q; - } - - /** - * Multiplies a {@link org.bouncycastle.math.ec.AbstractF2mPoint AbstractF2mPoint} - * by an element λ of Z[τ] - * using the τ-adic NAF (TNAF) method, given the TNAF - * of λ. - * @param p The AbstractF2mPoint to Multiply. - * @param u The the TNAF of λ.. - * @return λ * p - */ - public static AbstractF2mPoint MultiplyFromTnaf(AbstractF2mPoint p, sbyte[] u) - { - ECCurve curve = p.Curve; - AbstractF2mPoint q = (AbstractF2mPoint)curve.Infinity; - AbstractF2mPoint pNeg = (AbstractF2mPoint)p.Negate(); - int tauCount = 0; - for (int i = u.Length - 1; i >= 0; i--) - { - ++tauCount; - sbyte ui = u[i]; - if (ui != 0) - { - q = q.TauPow(tauCount); - tauCount = 0; - - ECPoint x = ui > 0 ? p : pNeg; - q = (AbstractF2mPoint)q.Add(x); - } - } - if (tauCount > 0) - { - q = q.TauPow(tauCount); - } - return q; - } - - /** - * Computes the [τ]-adic window NAF of an element - * λ of Z[τ]. - * @param mu The parameter μ of the elliptic curve. - * @param lambda The element λ of - * Z[τ] of which to compute the - * [τ]-adic NAF. - * @param width The window width of the resulting WNAF. - * @param pow2w 2width. - * @param tw The auxiliary value tw. - * @param alpha The αu's for the window width. - * @return The [τ]-adic window NAF of - * λ. - */ - public static sbyte[] TauAdicWNaf(sbyte mu, ZTauElement lambda, - sbyte width, BigInteger pow2w, BigInteger tw, ZTauElement[] alpha) - { - if (!((mu == 1) || (mu == -1))) - throw new ArgumentException("mu must be 1 or -1"); - - BigInteger norm = Norm(mu, lambda); - - // Ceiling of log2 of the norm - int log2Norm = norm.BitLength; - - // If length(TNAF) > 30, then length(TNAF) < log2Norm + 3.52 - int maxLength = log2Norm > 30 ? log2Norm + 4 + width : 34 + width; - - // The array holding the TNAF - sbyte[] u = new sbyte[maxLength]; - - // 2^(width - 1) - BigInteger pow2wMin1 = pow2w.ShiftRight(1); - - // Split lambda into two BigIntegers to simplify calculations - BigInteger r0 = lambda.u; - BigInteger r1 = lambda.v; - int i = 0; - - // while lambda <> (0, 0) - while (!((r0.Equals(BigInteger.Zero))&&(r1.Equals(BigInteger.Zero)))) - { - // if r0 is odd - if (r0.TestBit(0)) - { - // uUnMod = r0 + r1*tw Mod 2^width - BigInteger uUnMod - = r0.Add(r1.Multiply(tw)).Mod(pow2w); - - sbyte uLocal; - // if uUnMod >= 2^(width - 1) - if (uUnMod.CompareTo(pow2wMin1) >= 0) - { - uLocal = (sbyte) uUnMod.Subtract(pow2w).IntValue; - } - else - { - uLocal = (sbyte) uUnMod.IntValue; - } - // uLocal is now in [-2^(width-1), 2^(width-1)-1] - - u[i] = uLocal; - bool s = true; - if (uLocal < 0) - { - s = false; - uLocal = (sbyte)-uLocal; - } - // uLocal is now >= 0 - - if (s) - { - r0 = r0.Subtract(alpha[uLocal].u); - r1 = r1.Subtract(alpha[uLocal].v); - } - else - { - r0 = r0.Add(alpha[uLocal].u); - r1 = r1.Add(alpha[uLocal].v); - } - } - else - { - u[i] = 0; - } - - BigInteger t = r0; - - if (mu == 1) - { - r0 = r1.Add(r0.ShiftRight(1)); - } - else - { - // mu == -1 - r0 = r1.Subtract(r0.ShiftRight(1)); - } - r1 = t.ShiftRight(1).Negate(); - i++; - } - return u; - } - - /** - * Does the precomputation for WTNAF multiplication. - * @param p The ECPoint for which to do the precomputation. - * @param a The parameter a of the elliptic curve. - * @return The precomputation array for p. - */ - public static AbstractF2mPoint[] GetPreComp(AbstractF2mPoint p, sbyte a) - { - sbyte[][] alphaTnaf = (a == 0) ? Tnaf.Alpha0Tnaf : Tnaf.Alpha1Tnaf; - - AbstractF2mPoint[] pu = new AbstractF2mPoint[(uint)(alphaTnaf.Length + 1) >> 1]; - pu[0] = p; - - uint precompLen = (uint)alphaTnaf.Length; - for (uint i = 3; i < precompLen; i += 2) - { - pu[i >> 1] = Tnaf.MultiplyFromTnaf(p, alphaTnaf[i]); - } - - p.Curve.NormalizeAll(pu); - - return pu; - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/abc/ZTauElement.cs b/bc-sharp-crypto/src/math/ec/abc/ZTauElement.cs deleted file mode 100644 index 4fcbf1b..0000000 --- a/bc-sharp-crypto/src/math/ec/abc/ZTauElement.cs +++ /dev/null @@ -1,36 +0,0 @@ -namespace Org.BouncyCastle.Math.EC.Abc -{ - /** - * Class representing an element of Z[τ]. Let - * λ be an element of Z[τ]. Then - * λ is given as λ = u + vτ. The - * components u and v may be used directly, there - * are no accessor methods. - * Immutable class. - */ - internal class ZTauElement - { - /** - * The "real" part of λ. - */ - public readonly BigInteger u; - - /** - * The "τ-adic" part of λ. - */ - public readonly BigInteger v; - - /** - * Constructor for an element λ of - * Z[τ]. - * @param u The "real" part of λ. - * @param v The "τ-adic" part of - * λ. - */ - public ZTauElement(BigInteger u, BigInteger v) - { - this.u = u; - this.v = v; - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/djb/Curve25519.cs b/bc-sharp-crypto/src/math/ec/custom/djb/Curve25519.cs deleted file mode 100644 index 6ed7c06..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/djb/Curve25519.cs +++ /dev/null @@ -1,77 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Djb -{ - internal class Curve25519 - : AbstractFpCurve - { - public static readonly BigInteger q = Nat256.ToBigInteger(Curve25519Field.P); - - private const int Curve25519_DEFAULT_COORDS = COORD_JACOBIAN_MODIFIED; - - protected readonly Curve25519Point m_infinity; - - public Curve25519() - : base(q) - { - this.m_infinity = new Curve25519Point(this, null, null); - - this.m_a = FromBigInteger(new BigInteger(1, - Hex.Decode("2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA984914A144"))); - this.m_b = FromBigInteger(new BigInteger(1, - Hex.Decode("7B425ED097B425ED097B425ED097B425ED097B425ED097B4260B5E9C7710C864"))); - this.m_order = new BigInteger(1, Hex.Decode("1000000000000000000000000000000014DEF9DEA2F79CD65812631A5CF5D3ED")); - this.m_cofactor = BigInteger.ValueOf(8); - this.m_coord = Curve25519_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new Curve25519(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_JACOBIAN_MODIFIED: - return true; - default: - return false; - } - } - - public virtual BigInteger Q - { - get { return q; } - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return q.BitLength; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new Curve25519FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new Curve25519Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new Curve25519Point(this, x, y, zs, withCompression); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/djb/Curve25519Field.cs b/bc-sharp-crypto/src/math/ec/custom/djb/Curve25519Field.cs deleted file mode 100644 index 837821e..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/djb/Curve25519Field.cs +++ /dev/null @@ -1,253 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Djb -{ - internal class Curve25519Field - { - // 2^255 - 2^4 - 2^1 - 1 - internal static readonly uint[] P = new uint[]{ 0xFFFFFFED, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, - 0xFFFFFFFF, 0x7FFFFFFF }; - private const uint P7 = 0x7FFFFFFF; - private static readonly uint[] PExt = new uint[]{ 0x00000169, 0x00000000, 0x00000000, 0x00000000, 0x00000000, - 0x00000000, 0x00000000, 0x00000000, 0xFFFFFFED, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, - 0xFFFFFFFF, 0x3FFFFFFF }; - private const uint PInv = 0x13; - - public static void Add(uint[] x, uint[] y, uint[] z) - { - Nat256.Add(x, y, z); - if (Nat256.Gte(z, P)) - { - SubPFrom(z); - } - } - - public static void AddExt(uint[] xx, uint[] yy, uint[] zz) - { - Nat.Add(16, xx, yy, zz); - if (Nat.Gte(16, zz, PExt)) - { - SubPExtFrom(zz); - } - } - - public static void AddOne(uint[] x, uint[] z) - { - Nat.Inc(8, x, z); - if (Nat256.Gte(z, P)) - { - SubPFrom(z); - } - } - - public static uint[] FromBigInteger(BigInteger x) - { - uint[] z = Nat256.FromBigInteger(x); - while (Nat256.Gte(z, P)) - { - Nat256.SubFrom(P, z); - } - return z; - } - - public static void Half(uint[] x, uint[] z) - { - if ((x[0] & 1) == 0) - { - Nat.ShiftDownBit(8, x, 0, z); - } - else - { - Nat256.Add(x, P, z); - Nat.ShiftDownBit(8, z, 0); - } - } - - public static void Multiply(uint[] x, uint[] y, uint[] z) - { - uint[] tt = Nat256.CreateExt(); - Nat256.Mul(x, y, tt); - Reduce(tt, z); - } - - public static void MultiplyAddToExt(uint[] x, uint[] y, uint[] zz) - { - Nat256.MulAddTo(x, y, zz); - if (Nat.Gte(16, zz, PExt)) - { - SubPExtFrom(zz); - } - } - - public static void Negate(uint[] x, uint[] z) - { - if (Nat256.IsZero(x)) - { - Nat256.Zero(z); - } - else - { - Nat256.Sub(P, x, z); - } - } - - public static void Reduce(uint[] xx, uint[] z) - { - Debug.Assert(xx[15] >> 30 == 0); - - uint xx07 = xx[7]; - Nat.ShiftUpBit(8, xx, 8, xx07, z, 0); - uint c = Nat256.MulByWordAddTo(PInv, xx, z) << 1; - uint z7 = z[7]; - c += (z7 >> 31) - (xx07 >> 31); - z7 &= P7; - z7 += Nat.AddWordTo(7, c * PInv, z); - z[7] = z7; - if (z7 >= P7 && Nat256.Gte(z, P)) - { - SubPFrom(z); - } - } - - public static void Reduce27(uint x, uint[] z) - { - Debug.Assert(x >> 26 == 0); - - uint z7 = z[7]; - uint c = (x << 1 | z7 >> 31); - z7 &= P7; - z7 += Nat.AddWordTo(7, c * PInv, z); - z[7] = z7; - if (z7 >= P7 && Nat256.Gte(z, P)) - { - SubPFrom(z); - } - } - - public static void Square(uint[] x, uint[] z) - { - uint[] tt = Nat256.CreateExt(); - Nat256.Square(x, tt); - Reduce(tt, z); - } - - public static void SquareN(uint[] x, int n, uint[] z) - { - Debug.Assert(n > 0); - - uint[] tt = Nat256.CreateExt(); - Nat256.Square(x, tt); - Reduce(tt, z); - - while (--n > 0) - { - Nat256.Square(z, tt); - Reduce(tt, z); - } - } - - public static void Subtract(uint[] x, uint[] y, uint[] z) - { - int c = Nat256.Sub(x, y, z); - if (c != 0) - { - AddPTo(z); - } - } - - public static void SubtractExt(uint[] xx, uint[] yy, uint[] zz) - { - int c = Nat.Sub(16, xx, yy, zz); - if (c != 0) - { - AddPExtTo(zz); - } - } - - public static void Twice(uint[] x, uint[] z) - { - Nat.ShiftUpBit(8, x, 0, z); - if (Nat256.Gte(z, P)) - { - SubPFrom(z); - } - } - - private static uint AddPTo(uint[] z) - { - long c = (long)z[0] - PInv; - z[0] = (uint)c; - c >>= 32; - if (c != 0) - { - c = Nat.DecAt(7, z, 1); - } - c += (long)z[7] + (P7 + 1); - z[7] = (uint)c; - c >>= 32; - return (uint)c; - } - - private static uint AddPExtTo(uint[] zz) - { - long c = (long)zz[0] + PExt[0]; - zz[0] = (uint)c; - c >>= 32; - if (c != 0) - { - c = Nat.IncAt(8, zz, 1); - } - c += (long)zz[8] - PInv; - zz[8] = (uint)c; - c >>= 32; - if (c != 0) - { - c = Nat.DecAt(15, zz, 9); - } - c += (long)zz[15] + (PExt[15] + 1); - zz[15] = (uint)c; - c >>= 32; - return (uint)c; - } - - private static int SubPFrom(uint[] z) - { - long c = (long)z[0] + PInv; - z[0] = (uint)c; - c >>= 32; - if (c != 0) - { - c = Nat.IncAt(7, z, 1); - } - c += (long)z[7] - (P7 + 1); - z[7] = (uint)c; - c >>= 32; - return (int)c; - } - - private static int SubPExtFrom(uint[] zz) - { - long c = (long)zz[0] - PExt[0]; - zz[0] = (uint)c; - c >>= 32; - if (c != 0) - { - c = Nat.DecAt(8, zz, 1); - } - c += (long)zz[8] + PInv; - zz[8] = (uint)c; - c >>= 32; - if (c != 0) - { - c = Nat.IncAt(15, zz, 9); - } - c += (long)zz[15] - (PExt[15] + 1); - zz[15] = (uint)c; - c >>= 32; - return (int)c; - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/djb/Curve25519FieldElement.cs b/bc-sharp-crypto/src/math/ec/custom/djb/Curve25519FieldElement.cs deleted file mode 100644 index 732e9e4..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/djb/Curve25519FieldElement.cs +++ /dev/null @@ -1,233 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math.EC.Custom.Djb -{ - internal class Curve25519FieldElement - : ECFieldElement - { - public static readonly BigInteger Q = Curve25519.q; - - // Calculated as ECConstants.TWO.modPow(Q.shiftRight(2), Q) - private static readonly uint[] PRECOMP_POW2 = new uint[]{ 0x4a0ea0b0, 0xc4ee1b27, 0xad2fe478, 0x2f431806, - 0x3dfbd7a7, 0x2b4d0099, 0x4fc1df0b, 0x2b832480 }; - - protected internal readonly uint[] x; - - public Curve25519FieldElement(BigInteger x) - { - if (x == null || x.SignValue < 0 || x.CompareTo(Q) >= 0) - throw new ArgumentException("value invalid for Curve25519FieldElement", "x"); - - this.x = Curve25519Field.FromBigInteger(x); - } - - public Curve25519FieldElement() - { - this.x = Nat256.Create(); - } - - protected internal Curve25519FieldElement(uint[] x) - { - this.x = x; - } - - public override bool IsZero - { - get { return Nat256.IsZero(x); } - } - - public override bool IsOne - { - get { return Nat256.IsOne(x); } - } - - public override bool TestBitZero() - { - return Nat256.GetBit(x, 0) == 1; - } - - public override BigInteger ToBigInteger() - { - return Nat256.ToBigInteger(x); - } - - public override string FieldName - { - get { return "Curve25519Field"; } - } - - public override int FieldSize - { - get { return Q.BitLength; } - } - - public override ECFieldElement Add(ECFieldElement b) - { - uint[] z = Nat256.Create(); - Curve25519Field.Add(x, ((Curve25519FieldElement)b).x, z); - return new Curve25519FieldElement(z); - } - - public override ECFieldElement AddOne() - { - uint[] z = Nat256.Create(); - Curve25519Field.AddOne(x, z); - return new Curve25519FieldElement(z); - } - - public override ECFieldElement Subtract(ECFieldElement b) - { - uint[] z = Nat256.Create(); - Curve25519Field.Subtract(x, ((Curve25519FieldElement)b).x, z); - return new Curve25519FieldElement(z); - } - - public override ECFieldElement Multiply(ECFieldElement b) - { - uint[] z = Nat256.Create(); - Curve25519Field.Multiply(x, ((Curve25519FieldElement)b).x, z); - return new Curve25519FieldElement(z); - } - - public override ECFieldElement Divide(ECFieldElement b) - { - //return Multiply(b.Invert()); - uint[] z = Nat256.Create(); - Mod.Invert(Curve25519Field.P, ((Curve25519FieldElement)b).x, z); - Curve25519Field.Multiply(z, x, z); - return new Curve25519FieldElement(z); - } - - public override ECFieldElement Negate() - { - uint[] z = Nat256.Create(); - Curve25519Field.Negate(x, z); - return new Curve25519FieldElement(z); - } - - public override ECFieldElement Square() - { - uint[] z = Nat256.Create(); - Curve25519Field.Square(x, z); - return new Curve25519FieldElement(z); - } - - public override ECFieldElement Invert() - { - //return new Curve25519FieldElement(ToBigInteger().ModInverse(Q)); - uint[] z = Nat256.Create(); - Mod.Invert(Curve25519Field.P, x, z); - return new Curve25519FieldElement(z); - } - - /** - * return a sqrt root - the routine verifies that the calculation returns the right value - if - * none exists it returns null. - */ - public override ECFieldElement Sqrt() - { - /* - * Q == 8m + 5, so we use Pocklington's method for this case. - * - * First, raise this element to the exponent 2^252 - 2^1 (i.e. m + 1) - * - * Breaking up the exponent's binary representation into "repunits", we get: - * { 251 1s } { 1 0s } - * - * Therefore we need an addition chain containing 251 (the lengths of the repunits) - * We use: 1, 2, 3, 4, 7, 11, 15, 30, 60, 120, 131, [251] - */ - - uint[] x1 = this.x; - if (Nat256.IsZero(x1) || Nat256.IsOne(x1)) - return this; - - uint[] x2 = Nat256.Create(); - Curve25519Field.Square(x1, x2); - Curve25519Field.Multiply(x2, x1, x2); - uint[] x3 = x2; - Curve25519Field.Square(x2, x3); - Curve25519Field.Multiply(x3, x1, x3); - uint[] x4 = Nat256.Create(); - Curve25519Field.Square(x3, x4); - Curve25519Field.Multiply(x4, x1, x4); - uint[] x7 = Nat256.Create(); - Curve25519Field.SquareN(x4, 3, x7); - Curve25519Field.Multiply(x7, x3, x7); - uint[] x11 = x3; - Curve25519Field.SquareN(x7, 4, x11); - Curve25519Field.Multiply(x11, x4, x11); - uint[] x15 = x7; - Curve25519Field.SquareN(x11, 4, x15); - Curve25519Field.Multiply(x15, x4, x15); - uint[] x30 = x4; - Curve25519Field.SquareN(x15, 15, x30); - Curve25519Field.Multiply(x30, x15, x30); - uint[] x60 = x15; - Curve25519Field.SquareN(x30, 30, x60); - Curve25519Field.Multiply(x60, x30, x60); - uint[] x120 = x30; - Curve25519Field.SquareN(x60, 60, x120); - Curve25519Field.Multiply(x120, x60, x120); - uint[] x131 = x60; - Curve25519Field.SquareN(x120, 11, x131); - Curve25519Field.Multiply(x131, x11, x131); - uint[] x251 = x11; - Curve25519Field.SquareN(x131, 120, x251); - Curve25519Field.Multiply(x251, x120, x251); - - uint[] t1 = x251; - Curve25519Field.Square(t1, t1); - - uint[] t2 = x120; - Curve25519Field.Square(t1, t2); - - if (Nat256.Eq(x1, t2)) - { - return new Curve25519FieldElement(t1); - } - - /* - * If the first guess is incorrect, we multiply by a precomputed power of 2 to get the second guess, - * which is ((4x)^(m + 1))/2 mod Q - */ - Curve25519Field.Multiply(t1, PRECOMP_POW2, t1); - - Curve25519Field.Square(t1, t2); - - if (Nat256.Eq(x1, t2)) - { - return new Curve25519FieldElement(t1); - } - - return null; - } - - public override bool Equals(object obj) - { - return Equals(obj as Curve25519FieldElement); - } - - public override bool Equals(ECFieldElement other) - { - return Equals(other as Curve25519FieldElement); - } - - public virtual bool Equals(Curve25519FieldElement other) - { - if (this == other) - return true; - if (null == other) - return false; - return Nat256.Eq(x, other.x); - } - - public override int GetHashCode() - { - return Q.GetHashCode() ^ Arrays.GetHashCode(x, 0, 8); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/djb/Curve25519Point.cs b/bc-sharp-crypto/src/math/ec/custom/djb/Curve25519Point.cs deleted file mode 100644 index eb8fc12..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/djb/Curve25519Point.cs +++ /dev/null @@ -1,313 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Djb -{ - internal class Curve25519Point - : AbstractFpPoint - { - /** - * Create a point which encodes with point compression. - * - * @param curve the curve to use - * @param x affine x co-ordinate - * @param y affine y co-ordinate - * - * @deprecated Use ECCurve.CreatePoint to construct points - */ - public Curve25519Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * Create a point that encodes with or without point compresion. - * - * @param curve the curve to use - * @param x affine x co-ordinate - * @param y affine y co-ordinate - * @param withCompression if true encode with point compression - * - * @deprecated per-point compression property will be removed, refer {@link #getEncoded(bool)} - */ - public Curve25519Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal Curve25519Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new Curve25519Point(null, AffineXCoord, AffineYCoord); - } - - public override ECFieldElement GetZCoord(int index) - { - if (index == 1) - { - return GetJacobianModifiedW(); - } - - return base.GetZCoord(index); - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - if (this == b) - return Twice(); - - ECCurve curve = this.Curve; - - Curve25519FieldElement X1 = (Curve25519FieldElement)this.RawXCoord, Y1 = (Curve25519FieldElement)this.RawYCoord, - Z1 = (Curve25519FieldElement)this.RawZCoords[0]; - Curve25519FieldElement X2 = (Curve25519FieldElement)b.RawXCoord, Y2 = (Curve25519FieldElement)b.RawYCoord, - Z2 = (Curve25519FieldElement)b.RawZCoords[0]; - - uint c; - uint[] tt1 = Nat256.CreateExt(); - uint[] t2 = Nat256.Create(); - uint[] t3 = Nat256.Create(); - uint[] t4 = Nat256.Create(); - - bool Z1IsOne = Z1.IsOne; - uint[] U2, S2; - if (Z1IsOne) - { - U2 = X2.x; - S2 = Y2.x; - } - else - { - S2 = t3; - Curve25519Field.Square(Z1.x, S2); - - U2 = t2; - Curve25519Field.Multiply(S2, X2.x, U2); - - Curve25519Field.Multiply(S2, Z1.x, S2); - Curve25519Field.Multiply(S2, Y2.x, S2); - } - - bool Z2IsOne = Z2.IsOne; - uint[] U1, S1; - if (Z2IsOne) - { - U1 = X1.x; - S1 = Y1.x; - } - else - { - S1 = t4; - Curve25519Field.Square(Z2.x, S1); - - U1 = tt1; - Curve25519Field.Multiply(S1, X1.x, U1); - - Curve25519Field.Multiply(S1, Z2.x, S1); - Curve25519Field.Multiply(S1, Y1.x, S1); - } - - uint[] H = Nat256.Create(); - Curve25519Field.Subtract(U1, U2, H); - - uint[] R = t2; - Curve25519Field.Subtract(S1, S2, R); - - // Check if b == this or b == -this - if (Nat256.IsZero(H)) - { - if (Nat256.IsZero(R)) - { - // this == b, i.e. this must be doubled - return this.Twice(); - } - - // this == -b, i.e. the result is the point at infinity - return curve.Infinity; - } - - uint[] HSquared = Nat256.Create(); - Curve25519Field.Square(H, HSquared); - - uint[] G = Nat256.Create(); - Curve25519Field.Multiply(HSquared, H, G); - - uint[] V = t3; - Curve25519Field.Multiply(HSquared, U1, V); - - Curve25519Field.Negate(G, G); - Nat256.Mul(S1, G, tt1); - - c = Nat256.AddBothTo(V, V, G); - Curve25519Field.Reduce27(c, G); - - Curve25519FieldElement X3 = new Curve25519FieldElement(t4); - Curve25519Field.Square(R, X3.x); - Curve25519Field.Subtract(X3.x, G, X3.x); - - Curve25519FieldElement Y3 = new Curve25519FieldElement(G); - Curve25519Field.Subtract(V, X3.x, Y3.x); - Curve25519Field.MultiplyAddToExt(Y3.x, R, tt1); - Curve25519Field.Reduce(tt1, Y3.x); - - Curve25519FieldElement Z3 = new Curve25519FieldElement(H); - if (!Z1IsOne) - { - Curve25519Field.Multiply(Z3.x, Z1.x, Z3.x); - } - if (!Z2IsOne) - { - Curve25519Field.Multiply(Z3.x, Z2.x, Z3.x); - } - - uint[] Z3Squared = (Z1IsOne && Z2IsOne) ? HSquared : null; - - // TODO If the result will only be used in a subsequent addition, we don't need W3 - Curve25519FieldElement W3 = CalculateJacobianModifiedW((Curve25519FieldElement)Z3, Z3Squared); - - ECFieldElement[] zs = new ECFieldElement[] { Z3, W3 }; - - return new Curve25519Point(curve, X3, Y3, zs, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - ECFieldElement Y1 = this.RawYCoord; - if (Y1.IsZero) - return curve.Infinity; - - return TwiceJacobianModified(true); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this == b) - return ThreeTimes(); - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECFieldElement Y1 = this.RawYCoord; - if (Y1.IsZero) - return b; - - return TwiceJacobianModified(false).Add(b); - } - - public override ECPoint ThreeTimes() - { - if (this.IsInfinity || this.RawYCoord.IsZero) - return this; - - return TwiceJacobianModified(false).Add(this); - } - - public override ECPoint Negate() - { - if (IsInfinity) - return this; - - return new Curve25519Point(Curve, RawXCoord, RawYCoord.Negate(), RawZCoords, IsCompressed); - } - - protected virtual Curve25519FieldElement CalculateJacobianModifiedW(Curve25519FieldElement Z, uint[] ZSquared) - { - Curve25519FieldElement a4 = (Curve25519FieldElement)this.Curve.A; - if (Z.IsOne) - return a4; - - Curve25519FieldElement W = new Curve25519FieldElement(); - if (ZSquared == null) - { - ZSquared = W.x; - Curve25519Field.Square(Z.x, ZSquared); - } - Curve25519Field.Square(ZSquared, W.x); - Curve25519Field.Multiply(W.x, a4.x, W.x); - return W; - } - - protected virtual Curve25519FieldElement GetJacobianModifiedW() - { - ECFieldElement[] ZZ = this.RawZCoords; - Curve25519FieldElement W = (Curve25519FieldElement)ZZ[1]; - if (W == null) - { - // NOTE: Rarely, TwicePlus will result in the need for a lazy W1 calculation here - ZZ[1] = W = CalculateJacobianModifiedW((Curve25519FieldElement)ZZ[0], null); - } - return W; - } - - protected virtual Curve25519Point TwiceJacobianModified(bool calculateW) - { - Curve25519FieldElement X1 = (Curve25519FieldElement)this.RawXCoord, Y1 = (Curve25519FieldElement)this.RawYCoord, - Z1 = (Curve25519FieldElement)this.RawZCoords[0], W1 = GetJacobianModifiedW(); - - uint c; - - uint[] M = Nat256.Create(); - Curve25519Field.Square(X1.x, M); - c = Nat256.AddBothTo(M, M, M); - c += Nat256.AddTo(W1.x, M); - Curve25519Field.Reduce27(c, M); - - uint[] _2Y1 = Nat256.Create(); - Curve25519Field.Twice(Y1.x, _2Y1); - - uint[] _2Y1Squared = Nat256.Create(); - Curve25519Field.Multiply(_2Y1, Y1.x, _2Y1Squared); - - uint[] S = Nat256.Create(); - Curve25519Field.Multiply(_2Y1Squared, X1.x, S); - Curve25519Field.Twice(S, S); - - uint[] _8T = Nat256.Create(); - Curve25519Field.Square(_2Y1Squared, _8T); - Curve25519Field.Twice(_8T, _8T); - - Curve25519FieldElement X3 = new Curve25519FieldElement(_2Y1Squared); - Curve25519Field.Square(M, X3.x); - Curve25519Field.Subtract(X3.x, S, X3.x); - Curve25519Field.Subtract(X3.x, S, X3.x); - - Curve25519FieldElement Y3 = new Curve25519FieldElement(S); - Curve25519Field.Subtract(S, X3.x, Y3.x); - Curve25519Field.Multiply(Y3.x, M, Y3.x); - Curve25519Field.Subtract(Y3.x, _8T, Y3.x); - - Curve25519FieldElement Z3 = new Curve25519FieldElement(_2Y1); - if (!Nat256.IsOne(Z1.x)) - { - Curve25519Field.Multiply(Z3.x, Z1.x, Z3.x); - } - - Curve25519FieldElement W3 = null; - if (calculateW) - { - W3 = new Curve25519FieldElement(_8T); - Curve25519Field.Multiply(W3.x, W1.x, W3.x); - Curve25519Field.Twice(W3.x, W3.x); - } - - return new Curve25519Point(this.Curve, X3, Y3, new ECFieldElement[] { Z3, W3 }, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/gm/SM2P256V1Curve.cs b/bc-sharp-crypto/src/math/ec/custom/gm/SM2P256V1Curve.cs deleted file mode 100644 index 70b1190..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/gm/SM2P256V1Curve.cs +++ /dev/null @@ -1,77 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.GM -{ - internal class SM2P256V1Curve - : AbstractFpCurve - { - public static readonly BigInteger q = new BigInteger(1, - Hex.Decode("FFFFFFFEFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF00000000FFFFFFFFFFFFFFFF")); - - private const int SM2P256V1_DEFAULT_COORDS = COORD_JACOBIAN; - - protected readonly SM2P256V1Point m_infinity; - - public SM2P256V1Curve() - : base(q) - { - this.m_infinity = new SM2P256V1Point(this, null, null); - - this.m_a = FromBigInteger(new BigInteger(1, - Hex.Decode("FFFFFFFEFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF00000000FFFFFFFFFFFFFFFC"))); - this.m_b = FromBigInteger(new BigInteger(1, - Hex.Decode("28E9FA9E9D9F5E344D5A9E4BCF6509A7F39789F515AB8F92DDBCBD414D940E93"))); - this.m_order = new BigInteger(1, Hex.Decode("FFFFFFFEFFFFFFFFFFFFFFFFFFFFFFFF7203DF6B21C6052B53BBF40939D54123")); - this.m_cofactor = BigInteger.One; - this.m_coord = SM2P256V1_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SM2P256V1Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_JACOBIAN: - return true; - default: - return false; - } - } - - public virtual BigInteger Q - { - get { return q; } - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return q.BitLength; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SM2P256V1FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SM2P256V1Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SM2P256V1Point(this, x, y, zs, withCompression); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/gm/SM2P256V1Field.cs b/bc-sharp-crypto/src/math/ec/custom/gm/SM2P256V1Field.cs deleted file mode 100644 index b1d2323..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/gm/SM2P256V1Field.cs +++ /dev/null @@ -1,307 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.GM -{ - internal class SM2P256V1Field - { - // 2^256 - 2^224 - 2^96 + 2^64 - 1 - internal static readonly uint[] P = new uint[]{ 0xFFFFFFFF, 0xFFFFFFFF, 0x00000000, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, - 0xFFFFFFFF, 0xFFFFFFFE }; - internal static readonly uint[] PExt = new uint[]{ 00000001, 0x00000000, 0xFFFFFFFE, 0x00000001, 0x00000001, - 0xFFFFFFFE, 0x00000000, 0x00000002, 0xFFFFFFFE, 0xFFFFFFFD, 0x00000003, 0xFFFFFFFE, 0xFFFFFFFF, 0xFFFFFFFF, - 0x00000000, 0xFFFFFFFE }; - internal const uint P7 = 0xFFFFFFFE; - internal const uint PExt15 = 0xFFFFFFFE; - - public static void Add(uint[] x, uint[] y, uint[] z) - { - uint c = Nat256.Add(x, y, z); - if (c != 0 || (z[7] >= P7 && Nat256.Gte(z, P))) - { - AddPInvTo(z); - } - } - - public static void AddExt(uint[] xx, uint[] yy, uint[] zz) - { - uint c = Nat.Add(16, xx, yy, zz); - if (c != 0 || (zz[15] >= PExt15 && Nat.Gte(16, zz, PExt))) - { - Nat.SubFrom(16, PExt, zz); - } - } - - public static void AddOne(uint[] x, uint[] z) - { - uint c = Nat.Inc(8, x, z); - if (c != 0 || (z[7] >= P7 && Nat256.Gte(z, P))) - { - AddPInvTo(z); - } - } - - public static uint[] FromBigInteger(BigInteger x) - { - uint[] z = Nat256.FromBigInteger(x); - if (z[7] >= P7 && Nat256.Gte(z, P)) - { - Nat256.SubFrom(P, z); - } - return z; - } - - public static void Half(uint[] x, uint[] z) - { - if ((x[0] & 1) == 0) - { - Nat.ShiftDownBit(8, x, 0, z); - } - else - { - uint c = Nat256.Add(x, P, z); - Nat.ShiftDownBit(8, z, c); - } - } - - public static void Multiply(uint[] x, uint[] y, uint[] z) - { - uint[] tt = Nat256.CreateExt(); - Nat256.Mul(x, y, tt); - Reduce(tt, z); - } - - public static void MultiplyAddToExt(uint[] x, uint[] y, uint[] zz) - { - uint c = Nat256.MulAddTo(x, y, zz); - if (c != 0 || (zz[15] >= PExt15 && Nat.Gte(16, zz, PExt))) - { - Nat.SubFrom(16, PExt, zz); - } - } - - public static void Negate(uint[] x, uint[] z) - { - if (Nat256.IsZero(x)) - { - Nat256.Zero(z); - } - else - { - Nat256.Sub(P, x, z); - } - } - - public static void Reduce(uint[] xx, uint[] z) - { - long xx08 = xx[8], xx09 = xx[9], xx10 = xx[10], xx11 = xx[11]; - long xx12 = xx[12], xx13 = xx[13], xx14 = xx[14], xx15 = xx[15]; - - long t0 = xx08 + xx09; - long t1 = xx10 + xx11; - long t2 = xx12 + xx15; - long t3 = xx13 + xx14; - long t4 = t3 + (xx15 << 1); - - long ts = t0 + t3; - long tt = t1 + t2 + ts; - - long cc = 0; - cc += (long)xx[0] + tt + xx13 + xx14 + xx15; - z[0] = (uint)cc; - cc >>= 32; - cc += (long)xx[1] + tt - xx08 + xx14 + xx15; - z[1] = (uint)cc; - cc >>= 32; - cc += (long)xx[2] - ts; - z[2] = (uint)cc; - cc >>= 32; - cc += (long)xx[3] + tt - xx09 - xx10 + xx13; - z[3] = (uint)cc; - cc >>= 32; - cc += (long)xx[4] + tt - t1 - xx08 + xx14; - z[4] = (uint)cc; - cc >>= 32; - cc += (long)xx[5] + t4 + xx10; - z[5] = (uint)cc; - cc >>= 32; - cc += (long)xx[6] + xx11 + xx14 + xx15; - z[6] = (uint)cc; - cc >>= 32; - cc += (long)xx[7] + tt + t4 + xx12; - z[7] = (uint)cc; - cc >>= 32; - - Debug.Assert(cc >= 0); - - Reduce32((uint)cc, z); - } - - public static void Reduce32(uint x, uint[] z) - { - long cc = 0; - - if (x != 0) - { - long xx08 = x; - - cc += (long)z[0] + xx08; - z[0] = (uint)cc; - cc >>= 32; - if (cc != 0) - { - cc += (long)z[1]; - z[1] = (uint)cc; - cc >>= 32; - } - cc += (long)z[2] - xx08; - z[2] = (uint)cc; - cc >>= 32; - cc += (long)z[3] + xx08; - z[3] = (uint)cc; - cc >>= 32; - if (cc != 0) - { - cc += (long)z[4]; - z[4] = (uint)cc; - cc >>= 32; - cc += (long)z[5]; - z[5] = (uint)cc; - cc >>= 32; - cc += (long)z[6]; - z[6] = (uint)cc; - cc >>= 32; - } - cc += (long)z[7] + xx08; - z[7] = (uint)cc; - cc >>= 32; - - Debug.Assert(cc == 0 || cc == 1); - } - - if (cc != 0 || (z[7] >= P7 && Nat256.Gte(z, P))) - { - AddPInvTo(z); - } - } - - public static void Square(uint[] x, uint[] z) - { - uint[] tt = Nat256.CreateExt(); - Nat256.Square(x, tt); - Reduce(tt, z); - } - - public static void SquareN(uint[] x, int n, uint[] z) - { - Debug.Assert(n > 0); - - uint[] tt = Nat256.CreateExt(); - Nat256.Square(x, tt); - Reduce(tt, z); - - while (--n > 0) - { - Nat256.Square(z, tt); - Reduce(tt, z); - } - } - - public static void Subtract(uint[] x, uint[] y, uint[] z) - { - int c = Nat256.Sub(x, y, z); - if (c != 0) - { - SubPInvFrom(z); - } - } - - public static void SubtractExt(uint[] xx, uint[] yy, uint[] zz) - { - int c = Nat.Sub(16, xx, yy, zz); - if (c != 0) - { - Nat.AddTo(16, PExt, zz); - } - } - - public static void Twice(uint[] x, uint[] z) - { - uint c = Nat.ShiftUpBit(8, x, 0, z); - if (c != 0 || (z[7] >= P7 && Nat256.Gte(z, P))) - { - AddPInvTo(z); - } - } - - private static void AddPInvTo(uint[] z) - { - long c = (long)z[0] + 1; - z[0] = (uint)c; - c >>= 32; - if (c != 0) - { - c += (long)z[1]; - z[1] = (uint)c; - c >>= 32; - } - c += (long)z[2] - 1; - z[2] = (uint)c; - c >>= 32; - c += (long)z[3] + 1; - z[3] = (uint)c; - c >>= 32; - if (c != 0) - { - c += (long)z[4]; - z[4] = (uint)c; - c >>= 32; - c += (long)z[5]; - z[5] = (uint)c; - c >>= 32; - c += (long)z[6]; - z[6] = (uint)c; - c >>= 32; - } - c += (long)z[7] + 1; - z[7] = (uint)c; - //c >>= 32; - } - - private static void SubPInvFrom(uint[] z) - { - long c = (long)z[0] - 1; - z[0] = (uint)c; - c >>= 32; - if (c != 0) - { - c += (long)z[1]; - z[1] = (uint)c; - c >>= 32; - } - c += (long)z[2] + 1; - z[2] = (uint)c; - c >>= 32; - c += (long)z[3] - 1; - z[3] = (uint)c; - c >>= 32; - if (c != 0) - { - c += (long)z[4]; - z[4] = (uint)c; - c >>= 32; - c += (long)z[5]; - z[5] = (uint)c; - c >>= 32; - c += (long)z[6]; - z[6] = (uint)c; - c >>= 32; - } - c += (long)z[7] - 1; - z[7] = (uint)c; - //c >>= 32; - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/gm/SM2P256V1FieldElement.cs b/bc-sharp-crypto/src/math/ec/custom/gm/SM2P256V1FieldElement.cs deleted file mode 100644 index 4f6428f..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/gm/SM2P256V1FieldElement.cs +++ /dev/null @@ -1,211 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math.EC.Custom.GM -{ - internal class SM2P256V1FieldElement - : ECFieldElement - { - public static readonly BigInteger Q = SM2P256V1Curve.q; - - protected internal readonly uint[] x; - - public SM2P256V1FieldElement(BigInteger x) - { - if (x == null || x.SignValue < 0 || x.CompareTo(Q) >= 0) - throw new ArgumentException("value invalid for SM2P256V1FieldElement", "x"); - - this.x = SM2P256V1Field.FromBigInteger(x); - } - - public SM2P256V1FieldElement() - { - this.x = Nat256.Create(); - } - - protected internal SM2P256V1FieldElement(uint[] x) - { - this.x = x; - } - - public override bool IsZero - { - get { return Nat256.IsZero(x); } - } - - public override bool IsOne - { - get { return Nat256.IsOne(x); } - } - - public override bool TestBitZero() - { - return Nat256.GetBit(x, 0) == 1; - } - - public override BigInteger ToBigInteger() - { - return Nat256.ToBigInteger(x); - } - - public override string FieldName - { - get { return "SM2P256V1Field"; } - } - - public override int FieldSize - { - get { return Q.BitLength; } - } - - public override ECFieldElement Add(ECFieldElement b) - { - uint[] z = Nat256.Create(); - SM2P256V1Field.Add(x, ((SM2P256V1FieldElement)b).x, z); - return new SM2P256V1FieldElement(z); - } - - public override ECFieldElement AddOne() - { - uint[] z = Nat256.Create(); - SM2P256V1Field.AddOne(x, z); - return new SM2P256V1FieldElement(z); - } - - public override ECFieldElement Subtract(ECFieldElement b) - { - uint[] z = Nat256.Create(); - SM2P256V1Field.Subtract(x, ((SM2P256V1FieldElement)b).x, z); - return new SM2P256V1FieldElement(z); - } - - public override ECFieldElement Multiply(ECFieldElement b) - { - uint[] z = Nat256.Create(); - SM2P256V1Field.Multiply(x, ((SM2P256V1FieldElement)b).x, z); - return new SM2P256V1FieldElement(z); - } - - public override ECFieldElement Divide(ECFieldElement b) - { - //return Multiply(b.Invert()); - uint[] z = Nat256.Create(); - Mod.Invert(SM2P256V1Field.P, ((SM2P256V1FieldElement)b).x, z); - SM2P256V1Field.Multiply(z, x, z); - return new SM2P256V1FieldElement(z); - } - - public override ECFieldElement Negate() - { - uint[] z = Nat256.Create(); - SM2P256V1Field.Negate(x, z); - return new SM2P256V1FieldElement(z); - } - - public override ECFieldElement Square() - { - uint[] z = Nat256.Create(); - SM2P256V1Field.Square(x, z); - return new SM2P256V1FieldElement(z); - } - - public override ECFieldElement Invert() - { - //return new SM2P256V1FieldElement(ToBigInteger().ModInverse(Q)); - uint[] z = Nat256.Create(); - Mod.Invert(SM2P256V1Field.P, x, z); - return new SM2P256V1FieldElement(z); - } - - /** - * return a sqrt root - the routine verifies that the calculation returns the right value - if - * none exists it returns null. - */ - public override ECFieldElement Sqrt() - { - /* - * Raise this element to the exponent 2^254 - 2^222 - 2^94 + 2^62 - * - * Breaking up the exponent's binary representation into "repunits", we get: - * { 31 1s } { 1 0s } { 128 1s } { 31 0s } { 1 1s } { 62 0s} - * - * We use an addition chain for the beginning: [1], 2, 3, 6, 12, [24], 30, [31] - */ - - uint[] x1 = this.x; - if (Nat256.IsZero(x1) || Nat256.IsOne(x1)) - { - return this; - } - - uint[] x2 = Nat256.Create(); - SM2P256V1Field.Square(x1, x2); - SM2P256V1Field.Multiply(x2, x1, x2); - uint[] x4 = Nat256.Create(); - SM2P256V1Field.SquareN(x2, 2, x4); - SM2P256V1Field.Multiply(x4, x2, x4); - uint[] x6 = Nat256.Create(); - SM2P256V1Field.SquareN(x4, 2, x6); - SM2P256V1Field.Multiply(x6, x2, x6); - uint[] x12 = x2; - SM2P256V1Field.SquareN(x6, 6, x12); - SM2P256V1Field.Multiply(x12, x6, x12); - uint[] x24 = Nat256.Create(); - SM2P256V1Field.SquareN(x12, 12, x24); - SM2P256V1Field.Multiply(x24, x12, x24); - uint[] x30 = x12; - SM2P256V1Field.SquareN(x24, 6, x30); - SM2P256V1Field.Multiply(x30, x6, x30); - uint[] x31 = x6; - SM2P256V1Field.Square(x30, x31); - SM2P256V1Field.Multiply(x31, x1, x31); - - uint[] t1 = x24; - SM2P256V1Field.SquareN(x31, 31, t1); - - uint[] x62 = x30; - SM2P256V1Field.Multiply(t1, x31, x62); - - SM2P256V1Field.SquareN(t1, 32, t1); - SM2P256V1Field.Multiply(t1, x62, t1); - SM2P256V1Field.SquareN(t1, 62, t1); - SM2P256V1Field.Multiply(t1, x62, t1); - SM2P256V1Field.SquareN(t1, 4, t1); - SM2P256V1Field.Multiply(t1, x4, t1); - SM2P256V1Field.SquareN(t1, 32, t1); - SM2P256V1Field.Multiply(t1, x1, t1); - SM2P256V1Field.SquareN(t1, 62, t1); - - uint[] t2 = x4; - SM2P256V1Field.Square(t1, t2); - - return Nat256.Eq(x1, t2) ? new SM2P256V1FieldElement(t1) : null; - } - - public override bool Equals(object obj) - { - return Equals(obj as SM2P256V1FieldElement); - } - - public override bool Equals(ECFieldElement other) - { - return Equals(other as SM2P256V1FieldElement); - } - - public virtual bool Equals(SM2P256V1FieldElement other) - { - if (this == other) - return true; - if (null == other) - return false; - return Nat256.Eq(x, other.x); - } - - public override int GetHashCode() - { - return Q.GetHashCode() ^ Arrays.GetHashCode(x, 0, 8); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/gm/SM2P256V1Point.cs b/bc-sharp-crypto/src/math/ec/custom/gm/SM2P256V1Point.cs deleted file mode 100644 index 916c906..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/gm/SM2P256V1Point.cs +++ /dev/null @@ -1,279 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.GM -{ - internal class SM2P256V1Point - : AbstractFpPoint - { - /** - * Create a point which encodes with point compression. - * - * @param curve - * the curve to use - * @param x - * affine x co-ordinate - * @param y - * affine y co-ordinate - * - * @deprecated Use ECCurve.createPoint to construct points - */ - public SM2P256V1Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * Create a point that encodes with or without point compresion. - * - * @param curve - * the curve to use - * @param x - * affine x co-ordinate - * @param y - * affine y co-ordinate - * @param withCompression - * if true encode with point compression - * - * @deprecated per-point compression property will be removed, refer - * {@link #getEncoded(bool)} - */ - public SM2P256V1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SM2P256V1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SM2P256V1Point(null, AffineXCoord, AffineYCoord); - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - if (this == b) - return Twice(); - - ECCurve curve = this.Curve; - - SM2P256V1FieldElement X1 = (SM2P256V1FieldElement)this.RawXCoord, Y1 = (SM2P256V1FieldElement)this.RawYCoord; - SM2P256V1FieldElement X2 = (SM2P256V1FieldElement)b.RawXCoord, Y2 = (SM2P256V1FieldElement)b.RawYCoord; - - SM2P256V1FieldElement Z1 = (SM2P256V1FieldElement)this.RawZCoords[0]; - SM2P256V1FieldElement Z2 = (SM2P256V1FieldElement)b.RawZCoords[0]; - - uint c; - uint[] tt1 = Nat256.CreateExt(); - uint[] t2 = Nat256.Create(); - uint[] t3 = Nat256.Create(); - uint[] t4 = Nat256.Create(); - - bool Z1IsOne = Z1.IsOne; - uint[] U2, S2; - if (Z1IsOne) - { - U2 = X2.x; - S2 = Y2.x; - } - else - { - S2 = t3; - SM2P256V1Field.Square(Z1.x, S2); - - U2 = t2; - SM2P256V1Field.Multiply(S2, X2.x, U2); - - SM2P256V1Field.Multiply(S2, Z1.x, S2); - SM2P256V1Field.Multiply(S2, Y2.x, S2); - } - - bool Z2IsOne = Z2.IsOne; - uint[] U1, S1; - if (Z2IsOne) - { - U1 = X1.x; - S1 = Y1.x; - } - else - { - S1 = t4; - SM2P256V1Field.Square(Z2.x, S1); - - U1 = tt1; - SM2P256V1Field.Multiply(S1, X1.x, U1); - - SM2P256V1Field.Multiply(S1, Z2.x, S1); - SM2P256V1Field.Multiply(S1, Y1.x, S1); - } - - uint[] H = Nat256.Create(); - SM2P256V1Field.Subtract(U1, U2, H); - - uint[] R = t2; - SM2P256V1Field.Subtract(S1, S2, R); - - // Check if b == this or b == -this - if (Nat256.IsZero(H)) - { - if (Nat256.IsZero(R)) - { - // this == b, i.e. this must be doubled - return this.Twice(); - } - - // this == -b, i.e. the result is the point at infinity - return curve.Infinity; - } - - uint[] HSquared = t3; - SM2P256V1Field.Square(H, HSquared); - - uint[] G = Nat256.Create(); - SM2P256V1Field.Multiply(HSquared, H, G); - - uint[] V = t3; - SM2P256V1Field.Multiply(HSquared, U1, V); - - SM2P256V1Field.Negate(G, G); - Nat256.Mul(S1, G, tt1); - - c = Nat256.AddBothTo(V, V, G); - SM2P256V1Field.Reduce32(c, G); - - SM2P256V1FieldElement X3 = new SM2P256V1FieldElement(t4); - SM2P256V1Field.Square(R, X3.x); - SM2P256V1Field.Subtract(X3.x, G, X3.x); - - SM2P256V1FieldElement Y3 = new SM2P256V1FieldElement(G); - SM2P256V1Field.Subtract(V, X3.x, Y3.x); - SM2P256V1Field.MultiplyAddToExt(Y3.x, R, tt1); - SM2P256V1Field.Reduce(tt1, Y3.x); - - SM2P256V1FieldElement Z3 = new SM2P256V1FieldElement(H); - if (!Z1IsOne) - { - SM2P256V1Field.Multiply(Z3.x, Z1.x, Z3.x); - } - if (!Z2IsOne) - { - SM2P256V1Field.Multiply(Z3.x, Z2.x, Z3.x); - } - - ECFieldElement[] zs = new ECFieldElement[]{ Z3 }; - - return new SM2P256V1Point(curve, X3, Y3, zs, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - SM2P256V1FieldElement Y1 = (SM2P256V1FieldElement)this.RawYCoord; - if (Y1.IsZero) - return curve.Infinity; - - SM2P256V1FieldElement X1 = (SM2P256V1FieldElement)this.RawXCoord, Z1 = (SM2P256V1FieldElement)this.RawZCoords[0]; - - uint c; - uint[] t1 = Nat256.Create(); - uint[] t2 = Nat256.Create(); - - uint[] Y1Squared = Nat256.Create(); - SM2P256V1Field.Square(Y1.x, Y1Squared); - - uint[] T = Nat256.Create(); - SM2P256V1Field.Square(Y1Squared, T); - - bool Z1IsOne = Z1.IsOne; - - uint[] Z1Squared = Z1.x; - if (!Z1IsOne) - { - Z1Squared = t2; - SM2P256V1Field.Square(Z1.x, Z1Squared); - } - - SM2P256V1Field.Subtract(X1.x, Z1Squared, t1); - - uint[] M = t2; - SM2P256V1Field.Add(X1.x, Z1Squared, M); - SM2P256V1Field.Multiply(M, t1, M); - c = Nat256.AddBothTo(M, M, M); - SM2P256V1Field.Reduce32(c, M); - - uint[] S = Y1Squared; - SM2P256V1Field.Multiply(Y1Squared, X1.x, S); - c = Nat.ShiftUpBits(8, S, 2, 0); - SM2P256V1Field.Reduce32(c, S); - - c = Nat.ShiftUpBits(8, T, 3, 0, t1); - SM2P256V1Field.Reduce32(c, t1); - - SM2P256V1FieldElement X3 = new SM2P256V1FieldElement(T); - SM2P256V1Field.Square(M, X3.x); - SM2P256V1Field.Subtract(X3.x, S, X3.x); - SM2P256V1Field.Subtract(X3.x, S, X3.x); - - SM2P256V1FieldElement Y3 = new SM2P256V1FieldElement(S); - SM2P256V1Field.Subtract(S, X3.x, Y3.x); - SM2P256V1Field.Multiply(Y3.x, M, Y3.x); - SM2P256V1Field.Subtract(Y3.x, t1, Y3.x); - - SM2P256V1FieldElement Z3 = new SM2P256V1FieldElement(M); - SM2P256V1Field.Twice(Y1.x, Z3.x); - if (!Z1IsOne) - { - SM2P256V1Field.Multiply(Z3.x, Z1.x, Z3.x); - } - - return new SM2P256V1Point(curve, X3, Y3, new ECFieldElement[]{ Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this == b) - return ThreeTimes(); - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECFieldElement Y1 = this.RawYCoord; - if (Y1.IsZero) - return b; - - return Twice().Add(b); - } - - public override ECPoint ThreeTimes() - { - if (this.IsInfinity || this.RawYCoord.IsZero) - return this; - - // NOTE: Be careful about recursions between TwicePlus and ThreeTimes - return Twice().Add(this); - } - - public override ECPoint Negate() - { - if (IsInfinity) - return this; - - return new SM2P256V1Point(Curve, RawXCoord, RawYCoord.Negate(), RawZCoords, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP128R1Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP128R1Curve.cs deleted file mode 100644 index 9da27b4..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP128R1Curve.cs +++ /dev/null @@ -1,78 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP128R1Curve - : AbstractFpCurve - { - public static readonly BigInteger q = new BigInteger(1, - Hex.Decode("FFFFFFFDFFFFFFFFFFFFFFFFFFFFFFFF")); - - private const int SecP128R1_DEFAULT_COORDS = COORD_JACOBIAN; - - protected readonly SecP128R1Point m_infinity; - - public SecP128R1Curve() - : base(q) - { - this.m_infinity = new SecP128R1Point(this, null, null); - - this.m_a = FromBigInteger(new BigInteger(1, - Hex.Decode("FFFFFFFDFFFFFFFFFFFFFFFFFFFFFFFC"))); - this.m_b = FromBigInteger(new BigInteger(1, - Hex.Decode("E87579C11079F43DD824993C2CEE5ED3"))); - this.m_order = new BigInteger(1, Hex.Decode("FFFFFFFE0000000075A30D1B9038A115")); - this.m_cofactor = BigInteger.One; - - this.m_coord = SecP128R1_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecP128R1Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_JACOBIAN: - return true; - default: - return false; - } - } - - public virtual BigInteger Q - { - get { return q; } - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return q.BitLength; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecP128R1FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecP128R1Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecP128R1Point(this, x, y, zs, withCompression); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP128R1Field.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP128R1Field.cs deleted file mode 100644 index d1ac009..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP128R1Field.cs +++ /dev/null @@ -1,218 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP128R1Field - { - // 2^128 - 2^97 - 1 - internal static readonly uint[] P = new uint[] { 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFD }; - internal static readonly uint[] PExt = new uint[] { 0x00000001, 0x00000000, 0x00000000, 0x00000004, 0xFFFFFFFE, - 0xFFFFFFFF, 0x00000003, 0xFFFFFFFC }; - private static readonly uint[] PExtInv = new uint[]{ 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFB, - 0x00000001, 0x00000000, 0xFFFFFFFC, 0x00000003 }; - private const uint P3 = 0xFFFFFFFD; - private const uint PExt7 = 0xFFFFFFFC; - - public static void Add(uint[] x, uint[] y, uint[] z) - { - uint c = Nat128.Add(x, y, z); - if (c != 0 || (z[3] >= P3 && Nat128.Gte(z, P))) - { - AddPInvTo(z); - } - } - - public static void AddExt(uint[] xx, uint[] yy, uint[] zz) - { - uint c = Nat256.Add(xx, yy, zz); - if (c != 0 || (zz[7] >= PExt7 && Nat256.Gte(zz, PExt))) - { - Nat.AddTo(PExtInv.Length, PExtInv, zz); - } - } - - public static void AddOne(uint[] x, uint[] z) - { - uint c = Nat.Inc(4, x, z); - if (c != 0 || (z[3] >= P3 && Nat128.Gte(z, P))) - { - AddPInvTo(z); - } - } - - public static uint[] FromBigInteger(BigInteger x) - { - uint[] z = Nat128.FromBigInteger(x); - if (z[3] >= P3 && Nat128.Gte(z, P)) - { - Nat128.SubFrom(P, z); - } - return z; - } - - public static void Half(uint[] x, uint[] z) - { - if ((x[0] & 1) == 0) - { - Nat.ShiftDownBit(4, x, 0, z); - } - else - { - uint c = Nat128.Add(x, P, z); - Nat.ShiftDownBit(4, z, c); - } - } - - public static void Multiply(uint[] x, uint[] y, uint[] z) - { - uint[] tt = Nat128.CreateExt(); - Nat128.Mul(x, y, tt); - Reduce(tt, z); - } - - public static void MultiplyAddToExt(uint[] x, uint[] y, uint[] zz) - { - uint c = Nat128.MulAddTo(x, y, zz); - if (c != 0 || (zz[7] >= PExt7 && Nat256.Gte(zz, PExt))) - { - Nat.AddTo(PExtInv.Length, PExtInv, zz); - } - } - - public static void Negate(uint[] x, uint[] z) - { - if (Nat128.IsZero(x)) - { - Nat128.Zero(z); - } - else - { - Nat128.Sub(P, x, z); - } - } - - public static void Reduce(uint[] xx, uint[] z) - { - ulong x0 = xx[0], x1 = xx[1], x2 = xx[2], x3 = xx[3]; - ulong x4 = xx[4], x5 = xx[5], x6 = xx[6], x7 = xx[7]; - - x3 += x7; x6 += (x7 << 1); - x2 += x6; x5 += (x6 << 1); - x1 += x5; x4 += (x5 << 1); - x0 += x4; x3 += (x4 << 1); - - z[0] = (uint)x0; x1 += (x0 >> 32); - z[1] = (uint)x1; x2 += (x1 >> 32); - z[2] = (uint)x2; x3 += (x2 >> 32); - z[3] = (uint)x3; - - Reduce32((uint)(x3 >> 32), z); - } - - public static void Reduce32(uint x, uint[] z) - { - while (x != 0) - { - ulong c, x4 = x; - - c = (ulong)z[0] + x4; - z[0] = (uint)c; c >>= 32; - if (c != 0) - { - c += (ulong)z[1]; - z[1] = (uint)c; c >>= 32; - c += (ulong)z[2]; - z[2] = (uint)c; c >>= 32; - } - c += (ulong)z[3] + (x4 << 1); - z[3] = (uint)c; c >>= 32; - - Debug.Assert(c >= 0 && c <= 2); - - x = (uint)c; - } - } - - public static void Square(uint[] x, uint[] z) - { - uint[] tt = Nat128.CreateExt(); - Nat128.Square(x, tt); - Reduce(tt, z); - } - - public static void SquareN(uint[] x, int n, uint[] z) - { - Debug.Assert(n > 0); - - uint[] tt = Nat128.CreateExt(); - Nat128.Square(x, tt); - Reduce(tt, z); - - while (--n > 0) - { - Nat128.Square(z, tt); - Reduce(tt, z); - } - } - - public static void Subtract(uint[] x, uint[] y, uint[] z) - { - int c = Nat128.Sub(x, y, z); - if (c != 0) - { - SubPInvFrom(z); - } - } - - public static void SubtractExt(uint[] xx, uint[] yy, uint[] zz) - { - int c = Nat.Sub(10, xx, yy, zz); - if (c != 0) - { - Nat.SubFrom(PExtInv.Length, PExtInv, zz); - } - } - - public static void Twice(uint[] x, uint[] z) - { - uint c = Nat.ShiftUpBit(4, x, 0, z); - if (c != 0 || (z[3] >= P3 && Nat128.Gte(z, P))) - { - AddPInvTo(z); - } - } - - private static void AddPInvTo(uint[] z) - { - long c = (long)z[0] + 1; - z[0] = (uint)c; c >>= 32; - if (c != 0) - { - c += (long)z[1]; - z[1] = (uint)c; c >>= 32; - c += (long)z[2]; - z[2] = (uint)c; c >>= 32; - } - c += (long)z[3] + 2; - z[3] = (uint)c; - } - - private static void SubPInvFrom(uint[] z) - { - long c = (long)z[0] - 1; - z[0] = (uint)c; c >>= 32; - if (c != 0) - { - c += (long)z[1]; - z[1] = (uint)c; c >>= 32; - c += (long)z[2]; - z[2] = (uint)c; c >>= 32; - } - c += (long)z[3] - 2; - z[3] = (uint)c; - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP128R1FieldElement.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP128R1FieldElement.cs deleted file mode 100644 index fa7951d..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP128R1FieldElement.cs +++ /dev/null @@ -1,198 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP128R1FieldElement - : ECFieldElement - { - public static readonly BigInteger Q = SecP128R1Curve.q; - - protected internal readonly uint[] x; - - public SecP128R1FieldElement(BigInteger x) - { - if (x == null || x.SignValue < 0 || x.CompareTo(Q) >= 0) - throw new ArgumentException("value invalid for SecP128R1FieldElement", "x"); - - this.x = SecP128R1Field.FromBigInteger(x); - } - - public SecP128R1FieldElement() - { - this.x = Nat128.Create(); - } - - protected internal SecP128R1FieldElement(uint[] x) - { - this.x = x; - } - - public override bool IsZero - { - get { return Nat128.IsZero(x); } - } - - public override bool IsOne - { - get { return Nat128.IsOne(x); } - } - - public override bool TestBitZero() - { - return Nat128.GetBit(x, 0) == 1; - } - - public override BigInteger ToBigInteger() - { - return Nat128.ToBigInteger(x); - } - - public override string FieldName - { - get { return "SecP128R1Field"; } - } - - public override int FieldSize - { - get { return Q.BitLength; } - } - - public override ECFieldElement Add(ECFieldElement b) - { - uint[] z = Nat128.Create(); - SecP128R1Field.Add(x, ((SecP128R1FieldElement)b).x, z); - return new SecP128R1FieldElement(z); - } - - public override ECFieldElement AddOne() - { - uint[] z = Nat128.Create(); - SecP128R1Field.AddOne(x, z); - return new SecP128R1FieldElement(z); - } - - public override ECFieldElement Subtract(ECFieldElement b) - { - uint[] z = Nat128.Create(); - SecP128R1Field.Subtract(x, ((SecP128R1FieldElement)b).x, z); - return new SecP128R1FieldElement(z); - } - - public override ECFieldElement Multiply(ECFieldElement b) - { - uint[] z = Nat128.Create(); - SecP128R1Field.Multiply(x, ((SecP128R1FieldElement)b).x, z); - return new SecP128R1FieldElement(z); - } - - public override ECFieldElement Divide(ECFieldElement b) - { - // return multiply(b.invert()); - uint[] z = Nat128.Create(); - Mod.Invert(SecP128R1Field.P, ((SecP128R1FieldElement)b).x, z); - SecP128R1Field.Multiply(z, x, z); - return new SecP128R1FieldElement(z); - } - - public override ECFieldElement Negate() - { - uint[] z = Nat128.Create(); - SecP128R1Field.Negate(x, z); - return new SecP128R1FieldElement(z); - } - - public override ECFieldElement Square() - { - uint[] z = Nat128.Create(); - SecP128R1Field.Square(x, z); - return new SecP128R1FieldElement(z); - } - - public override ECFieldElement Invert() - { - // return new SecP128R1FieldElement(toBigInteger().modInverse(Q)); - uint[] z = Nat128.Create(); - Mod.Invert(SecP128R1Field.P, x, z); - return new SecP128R1FieldElement(z); - } - - // D.1.4 91 - /** - * return a sqrt root - the routine verifies that the calculation returns the right value - if - * none exists it returns null. - */ - public override ECFieldElement Sqrt() - { - /* - * Raise this element to the exponent 2^126 - 2^95 - * - * Breaking up the exponent's binary representation into "repunits", we get: - * { 31 1s } { 95 0s } - * - * Therefore we need an addition chain containing 31 (the length of the repunit) We use: - * 1, 2, 4, 8, 10, 20, 30, [31] - */ - - uint[] x1 = this.x; - if (Nat128.IsZero(x1) || Nat128.IsOne(x1)) - return this; - - uint[] x2 = Nat128.Create(); - SecP128R1Field.Square(x1, x2); - SecP128R1Field.Multiply(x2, x1, x2); - uint[] x4 = Nat128.Create(); - SecP128R1Field.SquareN(x2, 2, x4); - SecP128R1Field.Multiply(x4, x2, x4); - uint[] x8 = Nat128.Create(); - SecP128R1Field.SquareN(x4, 4, x8); - SecP128R1Field.Multiply(x8, x4, x8); - uint[] x10 = x4; - SecP128R1Field.SquareN(x8, 2, x10); - SecP128R1Field.Multiply(x10, x2, x10); - uint[] x20 = x2; - SecP128R1Field.SquareN(x10, 10, x20); - SecP128R1Field.Multiply(x20, x10, x20); - uint[] x30 = x8; - SecP128R1Field.SquareN(x20, 10, x30); - SecP128R1Field.Multiply(x30, x10, x30); - uint[] x31 = x10; - SecP128R1Field.Square(x30, x31); - SecP128R1Field.Multiply(x31, x1, x31); - - uint[] t1 = x31; - SecP128R1Field.SquareN(t1, 95, t1); - - uint[] t2 = x30; - SecP128R1Field.Square(t1, t2); - - return Nat128.Eq(x1, t2) ? new SecP128R1FieldElement(t1) : null; - } - - public override bool Equals(object obj) - { - return Equals(obj as SecP128R1FieldElement); - } - - public override bool Equals(ECFieldElement other) - { - return Equals(other as SecP128R1FieldElement); - } - - public virtual bool Equals(SecP128R1FieldElement other) - { - if (this == other) - return true; - if (null == other) - return false; - return Nat128.Eq(x, other.x); - } - - public override int GetHashCode() - { - return Q.GetHashCode() ^ Arrays.GetHashCode(x, 0, 4); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP128R1Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP128R1Point.cs deleted file mode 100644 index ae76d3c..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP128R1Point.cs +++ /dev/null @@ -1,279 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP128R1Point - : AbstractFpPoint - { - /** - * Create a point which encodes with point compression. - * - * @param curve - * the curve to use - * @param x - * affine x co-ordinate - * @param y - * affine y co-ordinate - * - * @deprecated Use ECCurve.createPoint to construct points - */ - public SecP128R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * Create a point that encodes with or without point compresion. - * - * @param curve - * the curve to use - * @param x - * affine x co-ordinate - * @param y - * affine y co-ordinate - * @param withCompression - * if true encode with point compression - * - * @deprecated per-point compression property will be removed, refer - * {@link #getEncoded(boolean)} - */ - public SecP128R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecP128R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecP128R1Point(null, AffineXCoord, AffineYCoord); - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - if (this == b) - return Twice(); - - ECCurve curve = this.Curve; - - SecP128R1FieldElement X1 = (SecP128R1FieldElement)this.RawXCoord, Y1 = (SecP128R1FieldElement)this.RawYCoord; - SecP128R1FieldElement X2 = (SecP128R1FieldElement)b.RawXCoord, Y2 = (SecP128R1FieldElement)b.RawYCoord; - - SecP128R1FieldElement Z1 = (SecP128R1FieldElement)this.RawZCoords[0]; - SecP128R1FieldElement Z2 = (SecP128R1FieldElement)b.RawZCoords[0]; - - uint c; - uint[] tt1 = Nat128.CreateExt(); - uint[] t2 = Nat128.Create(); - uint[] t3 = Nat128.Create(); - uint[] t4 = Nat128.Create(); - - bool Z1IsOne = Z1.IsOne; - uint[] U2, S2; - if (Z1IsOne) - { - U2 = X2.x; - S2 = Y2.x; - } - else - { - S2 = t3; - SecP128R1Field.Square(Z1.x, S2); - - U2 = t2; - SecP128R1Field.Multiply(S2, X2.x, U2); - - SecP128R1Field.Multiply(S2, Z1.x, S2); - SecP128R1Field.Multiply(S2, Y2.x, S2); - } - - bool Z2IsOne = Z2.IsOne; - uint[] U1, S1; - if (Z2IsOne) - { - U1 = X1.x; - S1 = Y1.x; - } - else - { - S1 = t4; - SecP128R1Field.Square(Z2.x, S1); - - U1 = tt1; - SecP128R1Field.Multiply(S1, X1.x, U1); - - SecP128R1Field.Multiply(S1, Z2.x, S1); - SecP128R1Field.Multiply(S1, Y1.x, S1); - } - - uint[] H = Nat128.Create(); - SecP128R1Field.Subtract(U1, U2, H); - - uint[] R = t2; - SecP128R1Field.Subtract(S1, S2, R); - - // Check if b == this or b == -this - if (Nat128.IsZero(H)) - { - if (Nat128.IsZero(R)) - { - // this == b, i.e. this must be doubled - return this.Twice(); - } - - // this == -b, i.e. the result is the point at infinity - return curve.Infinity; - } - - uint[] HSquared = t3; - SecP128R1Field.Square(H, HSquared); - - uint[] G = Nat128.Create(); - SecP128R1Field.Multiply(HSquared, H, G); - - uint[] V = t3; - SecP128R1Field.Multiply(HSquared, U1, V); - - SecP128R1Field.Negate(G, G); - Nat128.Mul(S1, G, tt1); - - c = Nat128.AddBothTo(V, V, G); - SecP128R1Field.Reduce32(c, G); - - SecP128R1FieldElement X3 = new SecP128R1FieldElement(t4); - SecP128R1Field.Square(R, X3.x); - SecP128R1Field.Subtract(X3.x, G, X3.x); - - SecP128R1FieldElement Y3 = new SecP128R1FieldElement(G); - SecP128R1Field.Subtract(V, X3.x, Y3.x); - SecP128R1Field.MultiplyAddToExt(Y3.x, R, tt1); - SecP128R1Field.Reduce(tt1, Y3.x); - - SecP128R1FieldElement Z3 = new SecP128R1FieldElement(H); - if (!Z1IsOne) - { - SecP128R1Field.Multiply(Z3.x, Z1.x, Z3.x); - } - if (!Z2IsOne) - { - SecP128R1Field.Multiply(Z3.x, Z2.x, Z3.x); - } - - ECFieldElement[] zs = new ECFieldElement[]{ Z3 }; - - return new SecP128R1Point(curve, X3, Y3, zs, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - SecP128R1FieldElement Y1 = (SecP128R1FieldElement)this.RawYCoord; - if (Y1.IsZero) - return curve.Infinity; - - SecP128R1FieldElement X1 = (SecP128R1FieldElement)this.RawXCoord, Z1 = (SecP128R1FieldElement)this.RawZCoords[0]; - - uint c; - uint[] t1 = Nat128.Create(); - uint[] t2 = Nat128.Create(); - - uint[] Y1Squared = Nat128.Create(); - SecP128R1Field.Square(Y1.x, Y1Squared); - - uint[] T = Nat128.Create(); - SecP128R1Field.Square(Y1Squared, T); - - bool Z1IsOne = Z1.IsOne; - - uint[] Z1Squared = Z1.x; - if (!Z1IsOne) - { - Z1Squared = t2; - SecP128R1Field.Square(Z1.x, Z1Squared); - } - - SecP128R1Field.Subtract(X1.x, Z1Squared, t1); - - uint[] M = t2; - SecP128R1Field.Add(X1.x, Z1Squared, M); - SecP128R1Field.Multiply(M, t1, M); - c = Nat128.AddBothTo(M, M, M); - SecP128R1Field.Reduce32(c, M); - - uint[] S = Y1Squared; - SecP128R1Field.Multiply(Y1Squared, X1.x, S); - c = Nat.ShiftUpBits(4, S, 2, 0); - SecP128R1Field.Reduce32(c, S); - - c = Nat.ShiftUpBits(4, T, 3, 0, t1); - SecP128R1Field.Reduce32(c, t1); - - SecP128R1FieldElement X3 = new SecP128R1FieldElement(T); - SecP128R1Field.Square(M, X3.x); - SecP128R1Field.Subtract(X3.x, S, X3.x); - SecP128R1Field.Subtract(X3.x, S, X3.x); - - SecP128R1FieldElement Y3 = new SecP128R1FieldElement(S); - SecP128R1Field.Subtract(S, X3.x, Y3.x); - SecP128R1Field.Multiply(Y3.x, M, Y3.x); - SecP128R1Field.Subtract(Y3.x, t1, Y3.x); - - SecP128R1FieldElement Z3 = new SecP128R1FieldElement(M); - SecP128R1Field.Twice(Y1.x, Z3.x); - if (!Z1IsOne) - { - SecP128R1Field.Multiply(Z3.x, Z1.x, Z3.x); - } - - return new SecP128R1Point(curve, X3, Y3, new ECFieldElement[]{ Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this == b) - return ThreeTimes(); - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECFieldElement Y1 = this.RawYCoord; - if (Y1.IsZero) - return b; - - return Twice().Add(b); - } - - public override ECPoint ThreeTimes() - { - if (this.IsInfinity || this.RawYCoord.IsZero) - return this; - - // NOTE: Be careful about recursions between twicePlus and threeTimes - return Twice().Add(this); - } - - public override ECPoint Negate() - { - if (IsInfinity) - return this; - - return new SecP128R1Point(Curve, RawXCoord, RawYCoord.Negate(), RawZCoords, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP160K1Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP160K1Curve.cs deleted file mode 100644 index 7d45c62..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP160K1Curve.cs +++ /dev/null @@ -1,74 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP160K1Curve - : AbstractFpCurve - { - public static readonly BigInteger q = SecP160R2Curve.q; - - private const int SECP160K1_DEFAULT_COORDS = COORD_JACOBIAN; - - protected readonly SecP160K1Point m_infinity; - - public SecP160K1Curve() - : base(q) - { - this.m_infinity = new SecP160K1Point(this, null, null); - - this.m_a = FromBigInteger(BigInteger.Zero); - this.m_b = FromBigInteger(BigInteger.ValueOf(7)); - this.m_order = new BigInteger(1, Hex.Decode("0100000000000000000001B8FA16DFAB9ACA16B6B3")); - this.m_cofactor = BigInteger.One; - this.m_coord = SECP160K1_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecP160K1Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_JACOBIAN: - return true; - default: - return false; - } - } - - public virtual BigInteger Q - { - get { return q; } - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return q.BitLength; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecP160R2FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecP160K1Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecP160K1Point(this, x, y, zs, withCompression); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP160K1Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP160K1Point.cs deleted file mode 100644 index 1bcbadb..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP160K1Point.cs +++ /dev/null @@ -1,269 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP160K1Point - : AbstractFpPoint - { - /** - * Create a point which encodes with point compression. - * - * @param curve - * the curve to use - * @param x - * affine x co-ordinate - * @param y - * affine y co-ordinate - * - * @deprecated Use ECCurve.CreatePoint to construct points - */ - public SecP160K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * Create a point that encodes with or without point compresion. - * - * @param curve - * the curve to use - * @param x - * affine x co-ordinate - * @param y - * affine y co-ordinate - * @param withCompression - * if true encode with point compression - * - * @deprecated per-point compression property will be removed, refer - * {@link #getEncoded(bool)} - */ - public SecP160K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecP160K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, - bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecP160K1Point(null, AffineXCoord, AffineYCoord); - } - - // B.3 pg 62 - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - if (this == b) - return Twice(); - - ECCurve curve = this.Curve; - - SecP160R2FieldElement X1 = (SecP160R2FieldElement)this.RawXCoord, Y1 = (SecP160R2FieldElement)this.RawYCoord; - SecP160R2FieldElement X2 = (SecP160R2FieldElement)b.RawXCoord, Y2 = (SecP160R2FieldElement)b.RawYCoord; - - SecP160R2FieldElement Z1 = (SecP160R2FieldElement)this.RawZCoords[0]; - SecP160R2FieldElement Z2 = (SecP160R2FieldElement)b.RawZCoords[0]; - - uint c; - uint[] tt1 = Nat160.CreateExt(); - uint[] t2 = Nat160.Create(); - uint[] t3 = Nat160.Create(); - uint[] t4 = Nat160.Create(); - - bool Z1IsOne = Z1.IsOne; - uint[] U2, S2; - if (Z1IsOne) - { - U2 = X2.x; - S2 = Y2.x; - } - else - { - S2 = t3; - SecP160R2Field.Square(Z1.x, S2); - - U2 = t2; - SecP160R2Field.Multiply(S2, X2.x, U2); - - SecP160R2Field.Multiply(S2, Z1.x, S2); - SecP160R2Field.Multiply(S2, Y2.x, S2); - } - - bool Z2IsOne = Z2.IsOne; - uint[] U1, S1; - if (Z2IsOne) - { - U1 = X1.x; - S1 = Y1.x; - } - else - { - S1 = t4; - SecP160R2Field.Square(Z2.x, S1); - - U1 = tt1; - SecP160R2Field.Multiply(S1, X1.x, U1); - - SecP160R2Field.Multiply(S1, Z2.x, S1); - SecP160R2Field.Multiply(S1, Y1.x, S1); - } - - uint[] H = Nat160.Create(); - SecP160R2Field.Subtract(U1, U2, H); - - uint[] R = t2; - SecP160R2Field.Subtract(S1, S2, R); - - // Check if b == this or b == -this - if (Nat160.IsZero(H)) - { - if (Nat160.IsZero(R)) - { - // this == b, i.e. this must be doubled - return this.Twice(); - } - - // this == -b, i.e. the result is the point at infinity - return curve.Infinity; - } - - uint[] HSquared = t3; - SecP160R2Field.Square(H, HSquared); - - uint[] G = Nat160.Create(); - SecP160R2Field.Multiply(HSquared, H, G); - - uint[] V = t3; - SecP160R2Field.Multiply(HSquared, U1, V); - - SecP160R2Field.Negate(G, G); - Nat160.Mul(S1, G, tt1); - - c = Nat160.AddBothTo(V, V, G); - SecP160R2Field.Reduce32(c, G); - - SecP160R2FieldElement X3 = new SecP160R2FieldElement(t4); - SecP160R2Field.Square(R, X3.x); - SecP160R2Field.Subtract(X3.x, G, X3.x); - - SecP160R2FieldElement Y3 = new SecP160R2FieldElement(G); - SecP160R2Field.Subtract(V, X3.x, Y3.x); - SecP160R2Field.MultiplyAddToExt(Y3.x, R, tt1); - SecP160R2Field.Reduce(tt1, Y3.x); - - SecP160R2FieldElement Z3 = new SecP160R2FieldElement(H); - if (!Z1IsOne) - { - SecP160R2Field.Multiply(Z3.x, Z1.x, Z3.x); - } - if (!Z2IsOne) - { - SecP160R2Field.Multiply(Z3.x, Z2.x, Z3.x); - } - - ECFieldElement[] zs = new ECFieldElement[] { Z3 }; - - return new SecP160K1Point(curve, X3, Y3, zs, IsCompressed); - } - - // B.3 pg 62 - public override ECPoint Twice() - { - if (this.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - SecP160R2FieldElement Y1 = (SecP160R2FieldElement)this.RawYCoord; - if (Y1.IsZero) - return curve.Infinity; - - SecP160R2FieldElement X1 = (SecP160R2FieldElement)this.RawXCoord, Z1 = (SecP160R2FieldElement)this.RawZCoords[0]; - - uint c; - - uint[] Y1Squared = Nat160.Create(); - SecP160R2Field.Square(Y1.x, Y1Squared); - - uint[] T = Nat160.Create(); - SecP160R2Field.Square(Y1Squared, T); - - uint[] M = Nat160.Create(); - SecP160R2Field.Square(X1.x, M); - c = Nat160.AddBothTo(M, M, M); - SecP160R2Field.Reduce32(c, M); - - uint[] S = Y1Squared; - SecP160R2Field.Multiply(Y1Squared, X1.x, S); - c = Nat.ShiftUpBits(5, S, 2, 0); - SecP160R2Field.Reduce32(c, S); - - uint[] t1 = Nat160.Create(); - c = Nat.ShiftUpBits(5, T, 3, 0, t1); - SecP160R2Field.Reduce32(c, t1); - - SecP160R2FieldElement X3 = new SecP160R2FieldElement(T); - SecP160R2Field.Square(M, X3.x); - SecP160R2Field.Subtract(X3.x, S, X3.x); - SecP160R2Field.Subtract(X3.x, S, X3.x); - - SecP160R2FieldElement Y3 = new SecP160R2FieldElement(S); - SecP160R2Field.Subtract(S, X3.x, Y3.x); - SecP160R2Field.Multiply(Y3.x, M, Y3.x); - SecP160R2Field.Subtract(Y3.x, t1, Y3.x); - - SecP160R2FieldElement Z3 = new SecP160R2FieldElement(M); - SecP160R2Field.Twice(Y1.x, Z3.x); - if (!Z1.IsOne) - { - SecP160R2Field.Multiply(Z3.x, Z1.x, Z3.x); - } - - return new SecP160K1Point(curve, X3, Y3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this == b) - return ThreeTimes(); - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECFieldElement Y1 = this.RawYCoord; - if (Y1.IsZero) - return b; - - return Twice().Add(b); - } - - public override ECPoint ThreeTimes() - { - if (this.IsInfinity || this.RawYCoord.IsZero) - return this; - - // NOTE: Be careful about recursions between TwicePlus and threeTimes - return Twice().Add(this); - } - - public override ECPoint Negate() - { - if (IsInfinity) - return this; - - return new SecP160K1Point(Curve, this.RawXCoord, this.RawYCoord.Negate(), this.RawZCoords, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP160R1Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP160R1Curve.cs deleted file mode 100644 index 87389af..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP160R1Curve.cs +++ /dev/null @@ -1,78 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP160R1Curve - : AbstractFpCurve - { - public static readonly BigInteger q = new BigInteger(1, - Hex.Decode("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF7FFFFFFF")); - - private const int SecP160R1_DEFAULT_COORDS = COORD_JACOBIAN; - - protected readonly SecP160R1Point m_infinity; - - public SecP160R1Curve() - : base(q) - { - this.m_infinity = new SecP160R1Point(this, null, null); - - this.m_a = FromBigInteger(new BigInteger(1, - Hex.Decode("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF7FFFFFFC"))); - this.m_b = FromBigInteger(new BigInteger(1, - Hex.Decode("1C97BEFC54BD7A8B65ACF89F81D4D4ADC565FA45"))); - this.m_order = new BigInteger(1, Hex.Decode("0100000000000000000001F4C8F927AED3CA752257")); - this.m_cofactor = BigInteger.One; - - this.m_coord = SecP160R1_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecP160R1Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_JACOBIAN: - return true; - default: - return false; - } - } - - public virtual BigInteger Q - { - get { return q; } - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return q.BitLength; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecP160R1FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecP160R1Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecP160R1Point(this, x, y, zs, withCompression); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP160R1Field.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP160R1Field.cs deleted file mode 100644 index 6a5a2ef..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP160R1Field.cs +++ /dev/null @@ -1,186 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP160R1Field - { - // 2^160 - 2^31 - 1 - internal static readonly uint[] P = new uint[] { 0x7FFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF}; - internal static readonly uint[] PExt = new uint[] { 0x00000001, 0x40000001, 0x00000000, 0x00000000, 0x00000000, - 0xFFFFFFFE, 0xFFFFFFFE, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF }; - private static readonly uint[] PExtInv = new uint[]{ 0xFFFFFFFF, 0xBFFFFFFE, 0xFFFFFFFF, 0xFFFFFFFF, - 0xFFFFFFFF, 0x00000001, 0x00000001 }; - private const uint P4 = 0xFFFFFFFF; - private const uint PExt9 = 0xFFFFFFFF; - private const uint PInv = 0x80000001; - - public static void Add(uint[] x, uint[] y, uint[] z) - { - uint c = Nat160.Add(x, y, z); - if (c != 0 || (z[4] == P4 && Nat160.Gte(z, P))) - { - Nat.AddWordTo(5, PInv, z); - } - } - - public static void AddExt(uint[] xx, uint[] yy, uint[] zz) - { - uint c = Nat.Add(10, xx, yy, zz); - if (c != 0 || (zz[9] == PExt9 && Nat.Gte(10, zz, PExt))) - { - if (Nat.AddTo(PExtInv.Length, PExtInv, zz) != 0) - { - Nat.IncAt(10, zz, PExtInv.Length); - } - } - } - - public static void AddOne(uint[] x, uint[] z) - { - uint c = Nat.Inc(5, x, z); - if (c != 0 || (z[4] == P4 && Nat160.Gte(z, P))) - { - Nat.AddWordTo(5, PInv, z); - } - } - - public static uint[] FromBigInteger(BigInteger x) - { - uint[] z = Nat160.FromBigInteger(x); - if (z[4] == P4 && Nat160.Gte(z, P)) - { - Nat160.SubFrom(P, z); - } - return z; - } - - public static void Half(uint[] x, uint[] z) - { - if ((x[0] & 1) == 0) - { - Nat.ShiftDownBit(5, x, 0, z); - } - else - { - uint c = Nat160.Add(x, P, z); - Nat.ShiftDownBit(5, z, c); - } - } - - public static void Multiply(uint[] x, uint[] y, uint[] z) - { - uint[] tt = Nat160.CreateExt(); - Nat160.Mul(x, y, tt); - Reduce(tt, z); - } - - public static void MultiplyAddToExt(uint[] x, uint[] y, uint[] zz) - { - uint c = Nat160.MulAddTo(x, y, zz); - if (c != 0 || (zz[9] == PExt9 && Nat.Gte(10, zz, PExt))) - { - if (Nat.AddTo(PExtInv.Length, PExtInv, zz) != 0) - { - Nat.IncAt(10, zz, PExtInv.Length); - } - } - } - - public static void Negate(uint[] x, uint[] z) - { - if (Nat160.IsZero(x)) - { - Nat160.Zero(z); - } - else - { - Nat160.Sub(P, x, z); - } - } - - public static void Reduce(uint[] xx, uint[] z) - { - ulong x5 = xx[5], x6 = xx[6], x7 = xx[7], x8 = xx[8], x9 = xx[9]; - - ulong c = 0; - c += (ulong)xx[0] + x5 + (x5 << 31); - z[0] = (uint)c; c >>= 32; - c += (ulong)xx[1] + x6 + (x6 << 31); - z[1] = (uint)c; c >>= 32; - c += (ulong)xx[2] + x7 + (x7 << 31); - z[2] = (uint)c; c >>= 32; - c += (ulong)xx[3] + x8 + (x8 << 31); - z[3] = (uint)c; c >>= 32; - c += (ulong)xx[4] + x9 + (x9 << 31); - z[4] = (uint)c; c >>= 32; - - Debug.Assert(c >> 32 == 0); - - Reduce32((uint)c, z); - } - - public static void Reduce32(uint x, uint[] z) - { - if ((x != 0 && Nat160.MulWordsAdd(PInv, x, z, 0) != 0) - || (z[4] == P4 && Nat160.Gte(z, P))) - { - Nat.AddWordTo(5, PInv, z); - } - } - - public static void Square(uint[] x, uint[] z) - { - uint[] tt = Nat160.CreateExt(); - Nat160.Square(x, tt); - Reduce(tt, z); - } - - public static void SquareN(uint[] x, int n, uint[] z) - { - Debug.Assert(n > 0); - - uint[] tt = Nat160.CreateExt(); - Nat160.Square(x, tt); - Reduce(tt, z); - - while (--n > 0) - { - Nat160.Square(z, tt); - Reduce(tt, z); - } - } - - public static void Subtract(uint[] x, uint[] y, uint[] z) - { - int c = Nat160.Sub(x, y, z); - if (c != 0) - { - Nat.SubWordFrom(5, PInv, z); - } - } - - public static void SubtractExt(uint[] xx, uint[] yy, uint[] zz) - { - int c = Nat.Sub(10, xx, yy, zz); - if (c != 0) - { - if (Nat.SubFrom(PExtInv.Length, PExtInv, zz) != 0) - { - Nat.DecAt(10, zz, PExtInv.Length); - } - } - } - - public static void Twice(uint[] x, uint[] z) - { - uint c = Nat.ShiftUpBit(5, x, 0, z); - if (c != 0 || (z[4] == P4 && Nat160.Gte(z, P))) - { - Nat.AddWordTo(5, PInv, z); - } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP160R1FieldElement.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP160R1FieldElement.cs deleted file mode 100644 index d1fc756..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP160R1FieldElement.cs +++ /dev/null @@ -1,203 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP160R1FieldElement - : ECFieldElement - { - public static readonly BigInteger Q = SecP160R1Curve.q; - - protected internal readonly uint[] x; - - public SecP160R1FieldElement(BigInteger x) - { - if (x == null || x.SignValue < 0 || x.CompareTo(Q) >= 0) - throw new ArgumentException("value invalid for SecP160R1FieldElement", "x"); - - this.x = SecP160R1Field.FromBigInteger(x); - } - - public SecP160R1FieldElement() - { - this.x = Nat160.Create(); - } - - protected internal SecP160R1FieldElement(uint[] x) - { - this.x = x; - } - - public override bool IsZero - { - get { return Nat160.IsZero(x); } - } - - public override bool IsOne - { - get { return Nat160.IsOne(x); } - } - - public override bool TestBitZero() - { - return Nat160.GetBit(x, 0) == 1; - } - - public override BigInteger ToBigInteger() - { - return Nat160.ToBigInteger(x); - } - - public override string FieldName - { - get { return "SecP160R1Field"; } - } - - public override int FieldSize - { - get { return Q.BitLength; } - } - - public override ECFieldElement Add(ECFieldElement b) - { - uint[] z = Nat160.Create(); - SecP160R1Field.Add(x, ((SecP160R1FieldElement)b).x, z); - return new SecP160R1FieldElement(z); - } - - public override ECFieldElement AddOne() - { - uint[] z = Nat160.Create(); - SecP160R1Field.AddOne(x, z); - return new SecP160R1FieldElement(z); - } - - public override ECFieldElement Subtract(ECFieldElement b) - { - uint[] z = Nat160.Create(); - SecP160R1Field.Subtract(x, ((SecP160R1FieldElement)b).x, z); - return new SecP160R1FieldElement(z); - } - - public override ECFieldElement Multiply(ECFieldElement b) - { - uint[] z = Nat160.Create(); - SecP160R1Field.Multiply(x, ((SecP160R1FieldElement)b).x, z); - return new SecP160R1FieldElement(z); - } - - public override ECFieldElement Divide(ECFieldElement b) - { - // return multiply(b.invert()); - uint[] z = Nat160.Create(); - Mod.Invert(SecP160R1Field.P, ((SecP160R1FieldElement)b).x, z); - SecP160R1Field.Multiply(z, x, z); - return new SecP160R1FieldElement(z); - } - - public override ECFieldElement Negate() - { - uint[] z = Nat160.Create(); - SecP160R1Field.Negate(x, z); - return new SecP160R1FieldElement(z); - } - - public override ECFieldElement Square() - { - uint[] z = Nat160.Create(); - SecP160R1Field.Square(x, z); - return new SecP160R1FieldElement(z); - } - - public override ECFieldElement Invert() - { - // return new SecP160R1FieldElement(ToBigInteger().modInverse(Q)); - uint[] z = Nat160.Create(); - Mod.Invert(SecP160R1Field.P, x, z); - return new SecP160R1FieldElement(z); - } - - // D.1.4 91 - /** - * return a sqrt root - the routine verifies that the calculation returns the right value - if - * none exists it returns null. - */ - public override ECFieldElement Sqrt() - { - /* - * Raise this element to the exponent 2^158 - 2^29 - * - * Breaking up the exponent's binary representation into "repunits", we get: - * { 129 1s } { 29 0s } - * - * Therefore we need an addition chain containing 129 (the length of the repunit) We use: - * 1, 2, 4, 8, 16, 32, 64, 128, [129] - */ - - uint[] x1 = this.x; - if (Nat160.IsZero(x1) || Nat160.IsOne(x1)) - { - return this; - } - - uint[] x2 = Nat160.Create(); - SecP160R1Field.Square(x1, x2); - SecP160R1Field.Multiply(x2, x1, x2); - uint[] x4 = Nat160.Create(); - SecP160R1Field.SquareN(x2, 2, x4); - SecP160R1Field.Multiply(x4, x2, x4); - uint[] x8 = x2; - SecP160R1Field.SquareN(x4, 4, x8); - SecP160R1Field.Multiply(x8, x4, x8); - uint[] x16 = x4; - SecP160R1Field.SquareN(x8, 8, x16); - SecP160R1Field.Multiply(x16, x8, x16); - uint[] x32 = x8; - SecP160R1Field.SquareN(x16, 16, x32); - SecP160R1Field.Multiply(x32, x16, x32); - uint[] x64 = x16; - SecP160R1Field.SquareN(x32, 32, x64); - SecP160R1Field.Multiply(x64, x32, x64); - uint[] x128 = x32; - SecP160R1Field.SquareN(x64, 64, x128); - SecP160R1Field.Multiply(x128, x64, x128); - uint[] x129 = x64; - SecP160R1Field.Square(x128, x129); - SecP160R1Field.Multiply(x129, x1, x129); - - uint[] t1 = x129; - SecP160R1Field.SquareN(t1, 29, t1); - - uint[] t2 = x128; - SecP160R1Field.Square(t1, t2); - - return Nat160.Eq(x1, t2) ? new SecP160R1FieldElement(t1) : null; - } - - public override bool Equals(object obj) - { - return Equals(obj as SecP160R1FieldElement); - } - - public override bool Equals(ECFieldElement other) - { - return Equals(other as SecP160R1FieldElement); - } - - public virtual bool Equals(SecP160R1FieldElement other) - { - if (this == other) - return true; - if (null == other) - return false; - return Nat160.Eq(x, other.x); - } - - public override int GetHashCode() - { - return Q.GetHashCode() ^ Arrays.GetHashCode(x, 0, 5); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP160R1Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP160R1Point.cs deleted file mode 100644 index f9f065d..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP160R1Point.cs +++ /dev/null @@ -1,279 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP160R1Point - : AbstractFpPoint - { - /** - * Create a point which encodes with point compression. - * - * @param curve - * the curve to use - * @param x - * affine x co-ordinate - * @param y - * affine y co-ordinate - * - * @deprecated Use ECCurve.CreatePoint to construct points - */ - public SecP160R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * Create a point that encodes with or without point compresion. - * - * @param curve - * the curve to use - * @param x - * affine x co-ordinate - * @param y - * affine y co-ordinate - * @param withCompression - * if true encode with point compression - * - * @deprecated per-point compression property will be removed, refer - * {@link #getEncoded(bool)} - */ - public SecP160R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecP160R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecP160R1Point(null, AffineXCoord, AffineYCoord); - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - if (this == b) - return Twice(); - - ECCurve curve = this.Curve; - - SecP160R1FieldElement X1 = (SecP160R1FieldElement)this.RawXCoord, Y1 = (SecP160R1FieldElement)this.RawYCoord; - SecP160R1FieldElement X2 = (SecP160R1FieldElement)b.RawXCoord, Y2 = (SecP160R1FieldElement)b.RawYCoord; - - SecP160R1FieldElement Z1 = (SecP160R1FieldElement)this.RawZCoords[0]; - SecP160R1FieldElement Z2 = (SecP160R1FieldElement)b.RawZCoords[0]; - - uint c; - uint[] tt1 = Nat160.CreateExt(); - uint[] t2 = Nat160.Create(); - uint[] t3 = Nat160.Create(); - uint[] t4 = Nat160.Create(); - - bool Z1IsOne = Z1.IsOne; - uint[] U2, S2; - if (Z1IsOne) - { - U2 = X2.x; - S2 = Y2.x; - } - else - { - S2 = t3; - SecP160R1Field.Square(Z1.x, S2); - - U2 = t2; - SecP160R1Field.Multiply(S2, X2.x, U2); - - SecP160R1Field.Multiply(S2, Z1.x, S2); - SecP160R1Field.Multiply(S2, Y2.x, S2); - } - - bool Z2IsOne = Z2.IsOne; - uint[] U1, S1; - if (Z2IsOne) - { - U1 = X1.x; - S1 = Y1.x; - } - else - { - S1 = t4; - SecP160R1Field.Square(Z2.x, S1); - - U1 = tt1; - SecP160R1Field.Multiply(S1, X1.x, U1); - - SecP160R1Field.Multiply(S1, Z2.x, S1); - SecP160R1Field.Multiply(S1, Y1.x, S1); - } - - uint[] H = Nat160.Create(); - SecP160R1Field.Subtract(U1, U2, H); - - uint[] R = t2; - SecP160R1Field.Subtract(S1, S2, R); - - // Check if b == this or b == -this - if (Nat160.IsZero(H)) - { - if (Nat160.IsZero(R)) - { - // this == b, i.e. this must be doubled - return this.Twice(); - } - - // this == -b, i.e. the result is the point at infinity - return curve.Infinity; - } - - uint[] HSquared = t3; - SecP160R1Field.Square(H, HSquared); - - uint[] G = Nat160.Create(); - SecP160R1Field.Multiply(HSquared, H, G); - - uint[] V = t3; - SecP160R1Field.Multiply(HSquared, U1, V); - - SecP160R1Field.Negate(G, G); - Nat160.Mul(S1, G, tt1); - - c = Nat160.AddBothTo(V, V, G); - SecP160R1Field.Reduce32(c, G); - - SecP160R1FieldElement X3 = new SecP160R1FieldElement(t4); - SecP160R1Field.Square(R, X3.x); - SecP160R1Field.Subtract(X3.x, G, X3.x); - - SecP160R1FieldElement Y3 = new SecP160R1FieldElement(G); - SecP160R1Field.Subtract(V, X3.x, Y3.x); - SecP160R1Field.MultiplyAddToExt(Y3.x, R, tt1); - SecP160R1Field.Reduce(tt1, Y3.x); - - SecP160R1FieldElement Z3 = new SecP160R1FieldElement(H); - if (!Z1IsOne) - { - SecP160R1Field.Multiply(Z3.x, Z1.x, Z3.x); - } - if (!Z2IsOne) - { - SecP160R1Field.Multiply(Z3.x, Z2.x, Z3.x); - } - - ECFieldElement[] zs = new ECFieldElement[]{ Z3 }; - - return new SecP160R1Point(curve, X3, Y3, zs, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - SecP160R1FieldElement Y1 = (SecP160R1FieldElement)this.RawYCoord; - if (Y1.IsZero) - return curve.Infinity; - - SecP160R1FieldElement X1 = (SecP160R1FieldElement)this.RawXCoord, Z1 = (SecP160R1FieldElement)this.RawZCoords[0]; - - uint c; - uint[] t1 = Nat160.Create(); - uint[] t2 = Nat160.Create(); - - uint[] Y1Squared = Nat160.Create(); - SecP160R1Field.Square(Y1.x, Y1Squared); - - uint[] T = Nat160.Create(); - SecP160R1Field.Square(Y1Squared, T); - - bool Z1IsOne = Z1.IsOne; - - uint[] Z1Squared = Z1.x; - if (!Z1IsOne) - { - Z1Squared = t2; - SecP160R1Field.Square(Z1.x, Z1Squared); - } - - SecP160R1Field.Subtract(X1.x, Z1Squared, t1); - - uint[] M = t2; - SecP160R1Field.Add(X1.x, Z1Squared, M); - SecP160R1Field.Multiply(M, t1, M); - c = Nat160.AddBothTo(M, M, M); - SecP160R1Field.Reduce32(c, M); - - uint[] S = Y1Squared; - SecP160R1Field.Multiply(Y1Squared, X1.x, S); - c = Nat.ShiftUpBits(5, S, 2, 0); - SecP160R1Field.Reduce32(c, S); - - c = Nat.ShiftUpBits(5, T, 3, 0, t1); - SecP160R1Field.Reduce32(c, t1); - - SecP160R1FieldElement X3 = new SecP160R1FieldElement(T); - SecP160R1Field.Square(M, X3.x); - SecP160R1Field.Subtract(X3.x, S, X3.x); - SecP160R1Field.Subtract(X3.x, S, X3.x); - - SecP160R1FieldElement Y3 = new SecP160R1FieldElement(S); - SecP160R1Field.Subtract(S, X3.x, Y3.x); - SecP160R1Field.Multiply(Y3.x, M, Y3.x); - SecP160R1Field.Subtract(Y3.x, t1, Y3.x); - - SecP160R1FieldElement Z3 = new SecP160R1FieldElement(M); - SecP160R1Field.Twice(Y1.x, Z3.x); - if (!Z1IsOne) - { - SecP160R1Field.Multiply(Z3.x, Z1.x, Z3.x); - } - - return new SecP160R1Point(curve, X3, Y3, new ECFieldElement[]{ Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this == b) - return ThreeTimes(); - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECFieldElement Y1 = this.RawYCoord; - if (Y1.IsZero) - return b; - - return Twice().Add(b); - } - - public override ECPoint ThreeTimes() - { - if (this.IsInfinity || this.RawYCoord.IsZero) - return this; - - // NOTE: Be careful about recursions between TwicePlus and ThreeTimes - return Twice().Add(this); - } - - public override ECPoint Negate() - { - if (IsInfinity) - return this; - - return new SecP160R1Point(Curve, RawXCoord, RawYCoord.Negate(), RawZCoords, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP160R2Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP160R2Curve.cs deleted file mode 100644 index 1005614..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP160R2Curve.cs +++ /dev/null @@ -1,78 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP160R2Curve - : AbstractFpCurve - { - public static readonly BigInteger q = new BigInteger(1, - Hex.Decode("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFAC73")); - - private const int SecP160R2_DEFAULT_COORDS = COORD_JACOBIAN; - - protected readonly SecP160R2Point m_infinity; - - public SecP160R2Curve() - : base(q) - { - this.m_infinity = new SecP160R2Point(this, null, null); - - this.m_a = FromBigInteger(new BigInteger(1, - Hex.Decode("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFAC70"))); - this.m_b = FromBigInteger(new BigInteger(1, - Hex.Decode("B4E134D3FB59EB8BAB57274904664D5AF50388BA"))); - this.m_order = new BigInteger(1, Hex.Decode("0100000000000000000000351EE786A818F3A1A16B")); - this.m_cofactor = BigInteger.One; - - this.m_coord = SecP160R2_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecP160R2Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_JACOBIAN: - return true; - default: - return false; - } - } - - public virtual BigInteger Q - { - get { return q; } - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return q.BitLength; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecP160R2FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecP160R2Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecP160R2Point(this, x, y, zs, withCompression); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP160R2Field.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP160R2Field.cs deleted file mode 100644 index 1bef32e..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP160R2Field.cs +++ /dev/null @@ -1,178 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP160R2Field - { - // 2^160 - 2^32 - 2^14 - 2^12 - 2^9 - 2^8 - 2^7 - 2^3 - 2^2 - 1 - internal static readonly uint[] P = new uint[]{ 0xFFFFAC73, 0xFFFFFFFE, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF }; - internal static readonly uint[] PExt = new uint[]{ 0x1B44BBA9, 0x0000A71A, 0x00000001, 0x00000000, 0x00000000, - 0xFFFF58E6, 0xFFFFFFFD, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF }; - private static readonly uint[] PExtInv = new uint[]{ 0xE4BB4457, 0xFFFF58E5, 0xFFFFFFFE, 0xFFFFFFFF, 0xFFFFFFFF, - 0x0000A719, 0x00000002 }; - private const uint P4 = 0xFFFFFFFF; - private const uint PExt9 = 0xFFFFFFFF; - private const uint PInv33 = 0x538D; - - public static void Add(uint[] x, uint[] y, uint[] z) - { - uint c = Nat160.Add(x, y, z); - if (c != 0 || (z[4] == P4 && Nat160.Gte(z, P))) - { - Nat.Add33To(5, PInv33, z); - } - } - - public static void AddExt(uint[] xx, uint[] yy, uint[] zz) - { - uint c = Nat.Add(10, xx, yy, zz); - if (c != 0 || (zz[9] == PExt9 && Nat.Gte(10, zz, PExt))) - { - if (Nat.AddTo(PExtInv.Length, PExtInv, zz) != 0) - { - Nat.IncAt(10, zz, PExtInv.Length); - } - } - } - - public static void AddOne(uint[] x, uint[] z) - { - uint c = Nat.Inc(5, x, z); - if (c != 0 || (z[4] == P4 && Nat160.Gte(z, P))) - { - Nat.Add33To(5, PInv33, z); - } - } - - public static uint[] FromBigInteger(BigInteger x) - { - uint[] z = Nat160.FromBigInteger(x); - if (z[4] == P4 && Nat160.Gte(z, P)) - { - Nat160.SubFrom(P, z); - } - return z; - } - - public static void Half(uint[] x, uint[] z) - { - if ((x[0] & 1) == 0) - { - Nat.ShiftDownBit(5, x, 0, z); - } - else - { - uint c = Nat160.Add(x, P, z); - Nat.ShiftDownBit(5, z, c); - } - } - - public static void Multiply(uint[] x, uint[] y, uint[] z) - { - uint[] tt = Nat160.CreateExt(); - Nat160.Mul(x, y, tt); - Reduce(tt, z); - } - - public static void MultiplyAddToExt(uint[] x, uint[] y, uint[] zz) - { - uint c = Nat160.MulAddTo(x, y, zz); - if (c != 0 || (zz[9] == PExt9 && Nat.Gte(10, zz, PExt))) - { - if (Nat.AddTo(PExtInv.Length, PExtInv, zz) != 0) - { - Nat.IncAt(10, zz, PExtInv.Length); - } - } - } - - public static void Negate(uint[] x, uint[] z) - { - if (Nat160.IsZero(x)) - { - Nat160.Zero(z); - } - else - { - Nat160.Sub(P, x, z); - } - } - - public static void Reduce(uint[] xx, uint[] z) - { - ulong cc = Nat160.Mul33Add(PInv33, xx, 5, xx, 0, z, 0); - uint c = Nat160.Mul33DWordAdd(PInv33, cc, z, 0); - - Debug.Assert(c == 0 || c == 1); - - if (c != 0 || (z[4] == P4 && Nat160.Gte(z, P))) - { - Nat.Add33To(5, PInv33, z); - } - } - - public static void Reduce32(uint x, uint[] z) - { - if ((x != 0 && Nat160.Mul33WordAdd(PInv33, x, z, 0) != 0) - || (z[4] == P4 && Nat160.Gte(z, P))) - { - Nat.Add33To(5, PInv33, z); - } - } - - public static void Square(uint[] x, uint[] z) - { - uint[] tt = Nat160.CreateExt(); - Nat160.Square(x, tt); - Reduce(tt, z); - } - - public static void SquareN(uint[] x, int n, uint[] z) - { - Debug.Assert(n > 0); - - uint[] tt = Nat160.CreateExt(); - Nat160.Square(x, tt); - Reduce(tt, z); - - while (--n > 0) - { - Nat160.Square(z, tt); - Reduce(tt, z); - } - } - - public static void Subtract(uint[] x, uint[] y, uint[] z) - { - int c = Nat160.Sub(x, y, z); - if (c != 0) - { - Nat.Sub33From(5, PInv33, z); - } - } - - public static void SubtractExt(uint[] xx, uint[] yy, uint[] zz) - { - int c = Nat.Sub(10, xx, yy, zz); - if (c != 0) - { - if (Nat.SubFrom(PExtInv.Length, PExtInv, zz) != 0) - { - Nat.DecAt(10, zz, PExtInv.Length); - } - } - } - - public static void Twice(uint[] x, uint[] z) - { - uint c = Nat.ShiftUpBit(5, x, 0, z); - if (c != 0 || (z[4] == P4 && Nat160.Gte(z, P))) - { - Nat.Add33To(5, PInv33, z); - } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP160R2FieldElement.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP160R2FieldElement.cs deleted file mode 100644 index bdb5245..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP160R2FieldElement.cs +++ /dev/null @@ -1,218 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP160R2FieldElement - : ECFieldElement - { - public static readonly BigInteger Q = SecP160R2Curve.q; - - protected internal readonly uint[] x; - - public SecP160R2FieldElement(BigInteger x) - { - if (x == null || x.SignValue < 0 || x.CompareTo(Q) >= 0) - throw new ArgumentException("value invalid for SecP160R2FieldElement", "x"); - - this.x = SecP160R2Field.FromBigInteger(x); - } - - public SecP160R2FieldElement() - { - this.x = Nat160.Create(); - } - - protected internal SecP160R2FieldElement(uint[] x) - { - this.x = x; - } - - public override bool IsZero - { - get { return Nat160.IsZero(x); } - } - - public override bool IsOne - { - get { return Nat160.IsOne(x); } - } - - public override bool TestBitZero() - { - return Nat160.GetBit(x, 0) == 1; - } - - public override BigInteger ToBigInteger() - { - return Nat160.ToBigInteger(x); - } - - public override string FieldName - { - get { return "SecP160R2Field"; } - } - - public override int FieldSize - { - get { return Q.BitLength; } - } - - public override ECFieldElement Add(ECFieldElement b) - { - uint[] z = Nat160.Create(); - SecP160R2Field.Add(x, ((SecP160R2FieldElement)b).x, z); - return new SecP160R2FieldElement(z); - } - - public override ECFieldElement AddOne() - { - uint[] z = Nat160.Create(); - SecP160R2Field.AddOne(x, z); - return new SecP160R2FieldElement(z); - } - - public override ECFieldElement Subtract(ECFieldElement b) - { - uint[] z = Nat160.Create(); - SecP160R2Field.Subtract(x, ((SecP160R2FieldElement)b).x, z); - return new SecP160R2FieldElement(z); - } - - public override ECFieldElement Multiply(ECFieldElement b) - { - uint[] z = Nat160.Create(); - SecP160R2Field.Multiply(x, ((SecP160R2FieldElement)b).x, z); - return new SecP160R2FieldElement(z); - } - - public override ECFieldElement Divide(ECFieldElement b) - { - // return Multiply(b.invert()); - uint[] z = Nat160.Create(); - Mod.Invert(SecP160R2Field.P, ((SecP160R2FieldElement)b).x, z); - SecP160R2Field.Multiply(z, x, z); - return new SecP160R2FieldElement(z); - } - - public override ECFieldElement Negate() - { - uint[] z = Nat160.Create(); - SecP160R2Field.Negate(x, z); - return new SecP160R2FieldElement(z); - } - - public override ECFieldElement Square() - { - uint[] z = Nat160.Create(); - SecP160R2Field.Square(x, z); - return new SecP160R2FieldElement(z); - } - - public override ECFieldElement Invert() - { - // return new SecP160R2FieldElement(ToBigInteger().modInverse(Q)); - uint[] z = Nat160.Create(); - Mod.Invert(SecP160R2Field.P, x, z); - return new SecP160R2FieldElement(z); - } - - // D.1.4 91 - /** - * return a sqrt root - the routine verifies that the calculation returns the right value - if - * none exists it returns null. - */ - public override ECFieldElement Sqrt() - { - /* - * Raise this element to the exponent 2^158 - 2^30 - 2^12 - 2^10 - 2^7 - 2^6 - 2^5 - 2^1 - 2^0 - * - * Breaking up the exponent's binary representation into "repunits", we get: { 127 1s } { 1 - * 0s } { 17 1s } { 1 0s } { 1 1s } { 1 0s } { 2 1s } { 3 0s } { 3 1s } { 1 0s } { 1 1s } - * - * Therefore we need an Addition chain containing 1, 2, 3, 17, 127 (the lengths of the repunits) - * We use: [1], [2], [3], 4, 7, 14, [17], 31, 62, 124, [127] - */ - - uint[] x1 = this.x; - if (Nat160.IsZero(x1) || Nat160.IsOne(x1)) - { - return this; - } - - uint[] x2 = Nat160.Create(); - SecP160R2Field.Square(x1, x2); - SecP160R2Field.Multiply(x2, x1, x2); - uint[] x3 = Nat160.Create(); - SecP160R2Field.Square(x2, x3); - SecP160R2Field.Multiply(x3, x1, x3); - uint[] x4 = Nat160.Create(); - SecP160R2Field.Square(x3, x4); - SecP160R2Field.Multiply(x4, x1, x4); - uint[] x7 = Nat160.Create(); - SecP160R2Field.SquareN(x4, 3, x7); - SecP160R2Field.Multiply(x7, x3, x7); - uint[] x14 = x4; - SecP160R2Field.SquareN(x7, 7, x14); - SecP160R2Field.Multiply(x14, x7, x14); - uint[] x17 = x7; - SecP160R2Field.SquareN(x14, 3, x17); - SecP160R2Field.Multiply(x17, x3, x17); - uint[] x31 = Nat160.Create(); - SecP160R2Field.SquareN(x17, 14, x31); - SecP160R2Field.Multiply(x31, x14, x31); - uint[] x62 = x14; - SecP160R2Field.SquareN(x31, 31, x62); - SecP160R2Field.Multiply(x62, x31, x62); - uint[] x124 = x31; - SecP160R2Field.SquareN(x62, 62, x124); - SecP160R2Field.Multiply(x124, x62, x124); - uint[] x127 = x62; - SecP160R2Field.SquareN(x124, 3, x127); - SecP160R2Field.Multiply(x127, x3, x127); - - uint[] t1 = x127; - SecP160R2Field.SquareN(t1, 18, t1); - SecP160R2Field.Multiply(t1, x17, t1); - SecP160R2Field.SquareN(t1, 2, t1); - SecP160R2Field.Multiply(t1, x1, t1); - SecP160R2Field.SquareN(t1, 3, t1); - SecP160R2Field.Multiply(t1, x2, t1); - SecP160R2Field.SquareN(t1, 6, t1); - SecP160R2Field.Multiply(t1, x3, t1); - SecP160R2Field.SquareN(t1, 2, t1); - SecP160R2Field.Multiply(t1, x1, t1); - - uint[] t2 = x2; - SecP160R2Field.Square(t1, t2); - - return Nat160.Eq(x1, t2) ? new SecP160R2FieldElement(t1) : null; - } - - public override bool Equals(object obj) - { - return Equals(obj as SecP160R2FieldElement); - } - - public override bool Equals(ECFieldElement other) - { - return Equals(other as SecP160R2FieldElement); - } - - public virtual bool Equals(SecP160R2FieldElement other) - { - if (this == other) - return true; - if (null == other) - return false; - return Nat160.Eq(x, other.x); - } - - public override int GetHashCode() - { - return Q.GetHashCode() ^ Arrays.GetHashCode(x, 0, 5); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP160R2Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP160R2Point.cs deleted file mode 100644 index 343cf8c..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP160R2Point.cs +++ /dev/null @@ -1,279 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP160R2Point - : AbstractFpPoint - { - /** - * Create a point which encodes with point compression. - * - * @param curve - * the curve to use - * @param x - * affine x co-ordinate - * @param y - * affine y co-ordinate - * - * @deprecated Use ECCurve.CreatePoint to construct points - */ - public SecP160R2Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * Create a point that encodes with or without point compresion. - * - * @param curve - * the curve to use - * @param x - * affine x co-ordinate - * @param y - * affine y co-ordinate - * @param withCompression - * if true encode with point compression - * - * @deprecated per-point compression property will be removed, refer - * {@link #getEncoded(bool)} - */ - public SecP160R2Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecP160R2Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecP160R2Point(null, AffineXCoord, AffineYCoord); - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - if (this == b) - return Twice(); - - ECCurve curve = this.Curve; - - SecP160R2FieldElement X1 = (SecP160R2FieldElement)this.RawXCoord, Y1 = (SecP160R2FieldElement)this.RawYCoord; - SecP160R2FieldElement X2 = (SecP160R2FieldElement)b.RawXCoord, Y2 = (SecP160R2FieldElement)b.RawYCoord; - - SecP160R2FieldElement Z1 = (SecP160R2FieldElement)this.RawZCoords[0]; - SecP160R2FieldElement Z2 = (SecP160R2FieldElement)b.RawZCoords[0]; - - uint c; - uint[] tt1 = Nat160.CreateExt(); - uint[] t2 = Nat160.Create(); - uint[] t3 = Nat160.Create(); - uint[] t4 = Nat160.Create(); - - bool Z1IsOne = Z1.IsOne; - uint[] U2, S2; - if (Z1IsOne) - { - U2 = X2.x; - S2 = Y2.x; - } - else - { - S2 = t3; - SecP160R2Field.Square(Z1.x, S2); - - U2 = t2; - SecP160R2Field.Multiply(S2, X2.x, U2); - - SecP160R2Field.Multiply(S2, Z1.x, S2); - SecP160R2Field.Multiply(S2, Y2.x, S2); - } - - bool Z2IsOne = Z2.IsOne; - uint[] U1, S1; - if (Z2IsOne) - { - U1 = X1.x; - S1 = Y1.x; - } - else - { - S1 = t4; - SecP160R2Field.Square(Z2.x, S1); - - U1 = tt1; - SecP160R2Field.Multiply(S1, X1.x, U1); - - SecP160R2Field.Multiply(S1, Z2.x, S1); - SecP160R2Field.Multiply(S1, Y1.x, S1); - } - - uint[] H = Nat160.Create(); - SecP160R2Field.Subtract(U1, U2, H); - - uint[] R = t2; - SecP160R2Field.Subtract(S1, S2, R); - - // Check if b == this or b == -this - if (Nat160.IsZero(H)) - { - if (Nat160.IsZero(R)) - { - // this == b, i.e. this must be doubled - return this.Twice(); - } - - // this == -b, i.e. the result is the point at infinity - return curve.Infinity; - } - - uint[] HSquared = t3; - SecP160R2Field.Square(H, HSquared); - - uint[] G = Nat160.Create(); - SecP160R2Field.Multiply(HSquared, H, G); - - uint[] V = t3; - SecP160R2Field.Multiply(HSquared, U1, V); - - SecP160R2Field.Negate(G, G); - Nat160.Mul(S1, G, tt1); - - c = Nat160.AddBothTo(V, V, G); - SecP160R2Field.Reduce32(c, G); - - SecP160R2FieldElement X3 = new SecP160R2FieldElement(t4); - SecP160R2Field.Square(R, X3.x); - SecP160R2Field.Subtract(X3.x, G, X3.x); - - SecP160R2FieldElement Y3 = new SecP160R2FieldElement(G); - SecP160R2Field.Subtract(V, X3.x, Y3.x); - SecP160R2Field.MultiplyAddToExt(Y3.x, R, tt1); - SecP160R2Field.Reduce(tt1, Y3.x); - - SecP160R2FieldElement Z3 = new SecP160R2FieldElement(H); - if (!Z1IsOne) - { - SecP160R2Field.Multiply(Z3.x, Z1.x, Z3.x); - } - if (!Z2IsOne) - { - SecP160R2Field.Multiply(Z3.x, Z2.x, Z3.x); - } - - ECFieldElement[] zs = new ECFieldElement[]{ Z3 }; - - return new SecP160R2Point(curve, X3, Y3, zs, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - SecP160R2FieldElement Y1 = (SecP160R2FieldElement)this.RawYCoord; - if (Y1.IsZero) - return curve.Infinity; - - SecP160R2FieldElement X1 = (SecP160R2FieldElement)this.RawXCoord, Z1 = (SecP160R2FieldElement)this.RawZCoords[0]; - - uint c; - uint[] t1 = Nat160.Create(); - uint[] t2 = Nat160.Create(); - - uint[] Y1Squared = Nat160.Create(); - SecP160R2Field.Square(Y1.x, Y1Squared); - - uint[] T = Nat160.Create(); - SecP160R2Field.Square(Y1Squared, T); - - bool Z1IsOne = Z1.IsOne; - - uint[] Z1Squared = Z1.x; - if (!Z1IsOne) - { - Z1Squared = t2; - SecP160R2Field.Square(Z1.x, Z1Squared); - } - - SecP160R2Field.Subtract(X1.x, Z1Squared, t1); - - uint[] M = t2; - SecP160R2Field.Add(X1.x, Z1Squared, M); - SecP160R2Field.Multiply(M, t1, M); - c = Nat160.AddBothTo(M, M, M); - SecP160R2Field.Reduce32(c, M); - - uint[] S = Y1Squared; - SecP160R2Field.Multiply(Y1Squared, X1.x, S); - c = Nat.ShiftUpBits(5, S, 2, 0); - SecP160R2Field.Reduce32(c, S); - - c = Nat.ShiftUpBits(5, T, 3, 0, t1); - SecP160R2Field.Reduce32(c, t1); - - SecP160R2FieldElement X3 = new SecP160R2FieldElement(T); - SecP160R2Field.Square(M, X3.x); - SecP160R2Field.Subtract(X3.x, S, X3.x); - SecP160R2Field.Subtract(X3.x, S, X3.x); - - SecP160R2FieldElement Y3 = new SecP160R2FieldElement(S); - SecP160R2Field.Subtract(S, X3.x, Y3.x); - SecP160R2Field.Multiply(Y3.x, M, Y3.x); - SecP160R2Field.Subtract(Y3.x, t1, Y3.x); - - SecP160R2FieldElement Z3 = new SecP160R2FieldElement(M); - SecP160R2Field.Twice(Y1.x, Z3.x); - if (!Z1IsOne) - { - SecP160R2Field.Multiply(Z3.x, Z1.x, Z3.x); - } - - return new SecP160R2Point(curve, X3, Y3, new ECFieldElement[]{ Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this == b) - return ThreeTimes(); - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECFieldElement Y1 = this.RawYCoord; - if (Y1.IsZero) - return b; - - return Twice().Add(b); - } - - public override ECPoint ThreeTimes() - { - if (this.IsInfinity || this.RawYCoord.IsZero) - return this; - - // NOTE: Be careful about recursions between TwicePlus and ThreeTimes - return Twice().Add(this); - } - - public override ECPoint Negate() - { - if (IsInfinity) - return this; - - return new SecP160R2Point(Curve, this.RawXCoord, this.RawYCoord.Negate(), this.RawZCoords, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP192K1Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP192K1Curve.cs deleted file mode 100644 index 81f7719..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP192K1Curve.cs +++ /dev/null @@ -1,75 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP192K1Curve - : AbstractFpCurve - { - public static readonly BigInteger q = new BigInteger(1, - Hex.Decode("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFEE37")); - - private const int SECP192K1_DEFAULT_COORDS = COORD_JACOBIAN; - - protected readonly SecP192K1Point m_infinity; - - public SecP192K1Curve() - : base(q) - { - this.m_infinity = new SecP192K1Point(this, null, null); - - this.m_a = FromBigInteger(BigInteger.Zero); - this.m_b = FromBigInteger(BigInteger.ValueOf(3)); - this.m_order = new BigInteger(1, Hex.Decode("FFFFFFFFFFFFFFFFFFFFFFFE26F2FC170F69466A74DEFD8D")); - this.m_cofactor = BigInteger.One; - this.m_coord = SECP192K1_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecP192K1Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_JACOBIAN: - return true; - default: - return false; - } - } - - public virtual BigInteger Q - { - get { return q; } - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return q.BitLength; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecP192K1FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecP192K1Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecP192K1Point(this, x, y, zs, withCompression); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP192K1Field.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP192K1Field.cs deleted file mode 100644 index a003603..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP192K1Field.cs +++ /dev/null @@ -1,178 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP192K1Field - { - // 2^192 - 2^32 - 2^12 - 2^8 - 2^7 - 2^6 - 2^3 - 1 - internal static readonly uint[] P = new uint[]{ 0xFFFFEE37, 0xFFFFFFFE, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF }; - internal static readonly uint[] PExt = new uint[]{ 0x013C4FD1, 0x00002392, 0x00000001, 0x00000000, 0x00000000, - 0x00000000, 0xFFFFDC6E, 0xFFFFFFFD, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF }; - private static readonly uint[] PExtInv = new uint[]{ 0xFEC3B02F, 0xFFFFDC6D, 0xFFFFFFFE, 0xFFFFFFFF, 0xFFFFFFFF, - 0xFFFFFFFF, 0x00002391, 0x00000002 }; - private const uint P5 = 0xFFFFFFFF; - private const uint PExt11 = 0xFFFFFFFF; - private const uint PInv33 = 0x11C9; - - public static void Add(uint[] x, uint[] y, uint[] z) - { - uint c = Nat192.Add(x, y, z); - if (c != 0 || (z[5] == P5 && Nat192.Gte(z, P))) - { - Nat.Add33To(6, PInv33, z); - } - } - - public static void AddExt(uint[] xx, uint[] yy, uint[] zz) - { - uint c = Nat.Add(12, xx, yy, zz); - if (c != 0 || (zz[11] == PExt11 && Nat.Gte(12, zz, PExt))) - { - if (Nat.AddTo(PExtInv.Length, PExtInv, zz) != 0) - { - Nat.IncAt(12, zz, PExtInv.Length); - } - } - } - - public static void AddOne(uint[] x, uint[] z) - { - uint c = Nat.Inc(6, x, z); - if (c != 0 || (z[5] == P5 && Nat192.Gte(z, P))) - { - Nat.Add33To(6, PInv33, z); - } - } - - public static uint[] FromBigInteger(BigInteger x) - { - uint[] z = Nat192.FromBigInteger(x); - if (z[5] == P5 && Nat192.Gte(z, P)) - { - Nat192.SubFrom(P, z); - } - return z; - } - - public static void Half(uint[] x, uint[] z) - { - if ((x[0] & 1) == 0) - { - Nat.ShiftDownBit(6, x, 0, z); - } - else - { - uint c = Nat192.Add(x, P, z); - Nat.ShiftDownBit(6, z, c); - } - } - - public static void Multiply(uint[] x, uint[] y, uint[] z) - { - uint[] tt = Nat192.CreateExt(); - Nat192.Mul(x, y, tt); - Reduce(tt, z); - } - - public static void MultiplyAddToExt(uint[] x, uint[] y, uint[] zz) - { - uint c = Nat192.MulAddTo(x, y, zz); - if (c != 0 || (zz[11] == PExt11 && Nat.Gte(12, zz, PExt))) - { - if (Nat.AddTo(PExtInv.Length, PExtInv, zz) != 0) - { - Nat.IncAt(12, zz, PExtInv.Length); - } - } - } - - public static void Negate(uint[] x, uint[] z) - { - if (Nat192.IsZero(x)) - { - Nat192.Zero(z); - } - else - { - Nat192.Sub(P, x, z); - } - } - - public static void Reduce(uint[] xx, uint[] z) - { - ulong cc = Nat192.Mul33Add(PInv33, xx, 6, xx, 0, z, 0); - uint c = Nat192.Mul33DWordAdd(PInv33, cc, z, 0); - - Debug.Assert(c == 0 || c == 1); - - if (c != 0 || (z[5] == P5 && Nat192.Gte(z, P))) - { - Nat.Add33To(6, PInv33, z); - } - } - - public static void Reduce32(uint x, uint[] z) - { - if ((x != 0 && Nat192.Mul33WordAdd(PInv33, x, z, 0) != 0) - || (z[5] == P5 && Nat192.Gte(z, P))) - { - Nat.Add33To(6, PInv33, z); - } - } - - public static void Square(uint[] x, uint[] z) - { - uint[] tt = Nat192.CreateExt(); - Nat192.Square(x, tt); - Reduce(tt, z); - } - - public static void SquareN(uint[] x, int n, uint[] z) - { - Debug.Assert(n > 0); - - uint[] tt = Nat192.CreateExt(); - Nat192.Square(x, tt); - Reduce(tt, z); - - while (--n > 0) - { - Nat192.Square(z, tt); - Reduce(tt, z); - } - } - - public static void Subtract(uint[] x, uint[] y, uint[] z) - { - int c = Nat192.Sub(x, y, z); - if (c != 0) - { - Nat.Sub33From(6, PInv33, z); - } - } - - public static void SubtractExt(uint[] xx, uint[] yy, uint[] zz) - { - int c = Nat.Sub(12, xx, yy, zz); - if (c != 0) - { - if (Nat.SubFrom(PExtInv.Length, PExtInv, zz) != 0) - { - Nat.DecAt(12, zz, PExtInv.Length); - } - } - } - - public static void Twice(uint[] x, uint[] z) - { - uint c = Nat.ShiftUpBit(6, x, 0, z); - if (c != 0 || (z[5] == P5 && Nat192.Gte(z, P))) - { - Nat.Add33To(6, PInv33, z); - } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP192K1FieldElement.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP192K1FieldElement.cs deleted file mode 100644 index dce3770..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP192K1FieldElement.cs +++ /dev/null @@ -1,213 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Math.Raw; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP192K1FieldElement - : ECFieldElement - { - public static readonly BigInteger Q = SecP192K1Curve.q; - - protected internal readonly uint[] x; - - public SecP192K1FieldElement(BigInteger x) - { - if (x == null || x.SignValue < 0 || x.CompareTo(Q) >= 0) - throw new ArgumentException("value invalid for SecP192K1FieldElement", "x"); - - this.x = SecP192K1Field.FromBigInteger(x); - } - - public SecP192K1FieldElement() - { - this.x = Nat192.Create(); - } - - protected internal SecP192K1FieldElement(uint[] x) - { - this.x = x; - } - - public override bool IsZero - { - get { return Nat192.IsZero(x); } - } - - public override bool IsOne - { - get { return Nat192.IsOne(x); } - } - - public override bool TestBitZero() - { - return Nat192.GetBit(x, 0) == 1; - } - - public override BigInteger ToBigInteger() - { - return Nat192.ToBigInteger(x); - } - - public override string FieldName - { - get { return "SecP192K1Field"; } - } - - public override int FieldSize - { - get { return Q.BitLength; } - } - - public override ECFieldElement Add(ECFieldElement b) - { - uint[] z = Nat192.Create(); - SecP192K1Field.Add(x, ((SecP192K1FieldElement)b).x, z); - return new SecP192K1FieldElement(z); - } - - public override ECFieldElement AddOne() - { - uint[] z = Nat192.Create(); - SecP192K1Field.AddOne(x, z); - return new SecP192K1FieldElement(z); - } - - public override ECFieldElement Subtract(ECFieldElement b) - { - uint[] z = Nat192.Create(); - SecP192K1Field.Subtract(x, ((SecP192K1FieldElement)b).x, z); - return new SecP192K1FieldElement(z); - } - - public override ECFieldElement Multiply(ECFieldElement b) - { - uint[] z = Nat192.Create(); - SecP192K1Field.Multiply(x, ((SecP192K1FieldElement)b).x, z); - return new SecP192K1FieldElement(z); - } - - public override ECFieldElement Divide(ECFieldElement b) - { - //return Multiply(b.Invert()); - uint[] z = Nat192.Create(); - Mod.Invert(SecP192K1Field.P, ((SecP192K1FieldElement)b).x, z); - SecP192K1Field.Multiply(z, x, z); - return new SecP192K1FieldElement(z); - } - - public override ECFieldElement Negate() - { - uint[] z = Nat192.Create(); - SecP192K1Field.Negate(x, z); - return new SecP192K1FieldElement(z); - } - - public override ECFieldElement Square() - { - uint[] z = Nat192.Create(); - SecP192K1Field.Square(x, z); - return new SecP192K1FieldElement(z); - } - - public override ECFieldElement Invert() - { - //return new SecP192K1FieldElement(ToBigInteger().ModInverse(Q)); - uint[] z = Nat192.Create(); - Mod.Invert(SecP192K1Field.P, x, z); - return new SecP192K1FieldElement(z); - } - - /** - * return a sqrt root - the routine verifies that the calculation returns the right value - if - * none exists it returns null. - */ - public override ECFieldElement Sqrt() - { - /* - * Raise this element to the exponent 2^190 - 2^30 - 2^10 - 2^6 - 2^5 - 2^4 - 2^1 - * - * Breaking up the exponent's binary representation into "repunits", we get: - * { 159 1s } { 1 0s } { 19 1s } { 1 0s } { 3 1s } { 3 0s} { 3 1s } { 1 0s } - * - * Therefore we need an addition chain containing 3, 19, 159 (the lengths of the repunits) - * We use: 1, 2, [3], 6, 8, 16, [19], 35, 70, 140, [159] - */ - - uint[] x1 = this.x; - if (Nat192.IsZero(x1) || Nat192.IsOne(x1)) - return this; - - uint[] x2 = Nat192.Create(); - SecP192K1Field.Square(x1, x2); - SecP192K1Field.Multiply(x2, x1, x2); - uint[] x3 = Nat192.Create(); - SecP192K1Field.Square(x2, x3); - SecP192K1Field.Multiply(x3, x1, x3); - uint[] x6 = Nat192.Create(); - SecP192K1Field.SquareN(x3, 3, x6); - SecP192K1Field.Multiply(x6, x3, x6); - uint[] x8 = x6; - SecP192K1Field.SquareN(x6, 2, x8); - SecP192K1Field.Multiply(x8, x2, x8); - uint[] x16 = x2; - SecP192K1Field.SquareN(x8, 8, x16); - SecP192K1Field.Multiply(x16, x8, x16); - uint[] x19 = x8; - SecP192K1Field.SquareN(x16, 3, x19); - SecP192K1Field.Multiply(x19, x3, x19); - uint[] x35 = Nat192.Create(); - SecP192K1Field.SquareN(x19, 16, x35); - SecP192K1Field.Multiply(x35, x16, x35); - uint[] x70 = x16; - SecP192K1Field.SquareN(x35, 35, x70); - SecP192K1Field.Multiply(x70, x35, x70); - uint[] x140 = x35; - SecP192K1Field.SquareN(x70, 70, x140); - SecP192K1Field.Multiply(x140, x70, x140); - uint[] x159 = x70; - SecP192K1Field.SquareN(x140, 19, x159); - SecP192K1Field.Multiply(x159, x19, x159); - - uint[] t1 = x159; - SecP192K1Field.SquareN(t1, 20, t1); - SecP192K1Field.Multiply(t1, x19, t1); - SecP192K1Field.SquareN(t1, 4, t1); - SecP192K1Field.Multiply(t1, x3, t1); - SecP192K1Field.SquareN(t1, 6, t1); - SecP192K1Field.Multiply(t1, x3, t1); - SecP192K1Field.Square(t1, t1); - - uint[] t2 = x3; - SecP192K1Field.Square(t1, t2); - - return Nat192.Eq(x1, t2) ? new SecP192K1FieldElement(t1) : null; - } - - public override bool Equals(object obj) - { - return Equals(obj as SecP192K1FieldElement); - } - - public override bool Equals(ECFieldElement other) - { - return Equals(other as SecP192K1FieldElement); - } - - public virtual bool Equals(SecP192K1FieldElement other) - { - if (this == other) - return true; - if (null == other) - return false; - return Nat192.Eq(x, other.x); - } - - public override int GetHashCode() - { - return Q.GetHashCode() ^ Arrays.GetHashCode(x, 0, 6); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP192K1Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP192K1Point.cs deleted file mode 100644 index 58eb091..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP192K1Point.cs +++ /dev/null @@ -1,267 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP192K1Point - : AbstractFpPoint - { - /** - * Create a point which encodes with point compression. - * - * @param curve - * the curve to use - * @param x - * affine x co-ordinate - * @param y - * affine y co-ordinate - * - * @deprecated Use ECCurve.createPoint to construct points - */ - public SecP192K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * Create a point that encodes with or without point compresion. - * - * @param curve - * the curve to use - * @param x - * affine x co-ordinate - * @param y - * affine y co-ordinate - * @param withCompression - * if true encode with point compression - * - * @deprecated per-point compression property will be removed, refer - * {@link #getEncoded(bool)} - */ - public SecP192K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecP192K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, - bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecP192K1Point(null, AffineXCoord, AffineYCoord); - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - if (this == b) - return Twice(); - - ECCurve curve = this.Curve; - - SecP192K1FieldElement X1 = (SecP192K1FieldElement)this.RawXCoord, Y1 = (SecP192K1FieldElement)this.RawYCoord; - SecP192K1FieldElement X2 = (SecP192K1FieldElement)b.RawXCoord, Y2 = (SecP192K1FieldElement)b.RawYCoord; - - SecP192K1FieldElement Z1 = (SecP192K1FieldElement)this.RawZCoords[0]; - SecP192K1FieldElement Z2 = (SecP192K1FieldElement)b.RawZCoords[0]; - - uint c; - uint[] tt1 = Nat192.CreateExt(); - uint[] t2 = Nat192.Create(); - uint[] t3 = Nat192.Create(); - uint[] t4 = Nat192.Create(); - - bool Z1IsOne = Z1.IsOne; - uint[] U2, S2; - if (Z1IsOne) - { - U2 = X2.x; - S2 = Y2.x; - } - else - { - S2 = t3; - SecP192K1Field.Square(Z1.x, S2); - - U2 = t2; - SecP192K1Field.Multiply(S2, X2.x, U2); - - SecP192K1Field.Multiply(S2, Z1.x, S2); - SecP192K1Field.Multiply(S2, Y2.x, S2); - } - - bool Z2IsOne = Z2.IsOne; - uint[] U1, S1; - if (Z2IsOne) - { - U1 = X1.x; - S1 = Y1.x; - } - else - { - S1 = t4; - SecP192K1Field.Square(Z2.x, S1); - - U1 = tt1; - SecP192K1Field.Multiply(S1, X1.x, U1); - - SecP192K1Field.Multiply(S1, Z2.x, S1); - SecP192K1Field.Multiply(S1, Y1.x, S1); - } - - uint[] H = Nat192.Create(); - SecP192K1Field.Subtract(U1, U2, H); - - uint[] R = t2; - SecP192K1Field.Subtract(S1, S2, R); - - // Check if b == this or b == -this - if (Nat192.IsZero(H)) - { - if (Nat192.IsZero(R)) - { - // this == b, i.e. this must be doubled - return this.Twice(); - } - - // this == -b, i.e. the result is the point at infinity - return curve.Infinity; - } - - uint[] HSquared = t3; - SecP192K1Field.Square(H, HSquared); - - uint[] G = Nat192.Create(); - SecP192K1Field.Multiply(HSquared, H, G); - - uint[] V = t3; - SecP192K1Field.Multiply(HSquared, U1, V); - - SecP192K1Field.Negate(G, G); - Nat192.Mul(S1, G, tt1); - - c = Nat192.AddBothTo(V, V, G); - SecP192K1Field.Reduce32(c, G); - - SecP192K1FieldElement X3 = new SecP192K1FieldElement(t4); - SecP192K1Field.Square(R, X3.x); - SecP192K1Field.Subtract(X3.x, G, X3.x); - - SecP192K1FieldElement Y3 = new SecP192K1FieldElement(G); - SecP192K1Field.Subtract(V, X3.x, Y3.x); - SecP192K1Field.MultiplyAddToExt(Y3.x, R, tt1); - SecP192K1Field.Reduce(tt1, Y3.x); - - SecP192K1FieldElement Z3 = new SecP192K1FieldElement(H); - if (!Z1IsOne) - { - SecP192K1Field.Multiply(Z3.x, Z1.x, Z3.x); - } - if (!Z2IsOne) - { - SecP192K1Field.Multiply(Z3.x, Z2.x, Z3.x); - } - - ECFieldElement[] zs = new ECFieldElement[] { Z3 }; - - return new SecP192K1Point(curve, X3, Y3, zs, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - SecP192K1FieldElement Y1 = (SecP192K1FieldElement)this.RawYCoord; - if (Y1.IsZero) - return curve.Infinity; - - SecP192K1FieldElement X1 = (SecP192K1FieldElement)this.RawXCoord, Z1 = (SecP192K1FieldElement)this.RawZCoords[0]; - - uint c; - - uint[] Y1Squared = Nat192.Create(); - SecP192K1Field.Square(Y1.x, Y1Squared); - - uint[] T = Nat192.Create(); - SecP192K1Field.Square(Y1Squared, T); - - uint[] M = Nat192.Create(); - SecP192K1Field.Square(X1.x, M); - c = Nat192.AddBothTo(M, M, M); - SecP192K1Field.Reduce32(c, M); - - uint[] S = Y1Squared; - SecP192K1Field.Multiply(Y1Squared, X1.x, S); - c = Nat.ShiftUpBits(6, S, 2, 0); - SecP192K1Field.Reduce32(c, S); - - uint[] t1 = Nat192.Create(); - c = Nat.ShiftUpBits(6, T, 3, 0, t1); - SecP192K1Field.Reduce32(c, t1); - - SecP192K1FieldElement X3 = new SecP192K1FieldElement(T); - SecP192K1Field.Square(M, X3.x); - SecP192K1Field.Subtract(X3.x, S, X3.x); - SecP192K1Field.Subtract(X3.x, S, X3.x); - - SecP192K1FieldElement Y3 = new SecP192K1FieldElement(S); - SecP192K1Field.Subtract(S, X3.x, Y3.x); - SecP192K1Field.Multiply(Y3.x, M, Y3.x); - SecP192K1Field.Subtract(Y3.x, t1, Y3.x); - - SecP192K1FieldElement Z3 = new SecP192K1FieldElement(M); - SecP192K1Field.Twice(Y1.x, Z3.x); - if (!Z1.IsOne) - { - SecP192K1Field.Multiply(Z3.x, Z1.x, Z3.x); - } - - return new SecP192K1Point(curve, X3, Y3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this == b) - return ThreeTimes(); - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECFieldElement Y1 = this.RawYCoord; - if (Y1.IsZero) - return b; - - return Twice().Add(b); - } - - public override ECPoint ThreeTimes() - { - if (this.IsInfinity || this.RawYCoord.IsZero) - return this; - - // NOTE: Be careful about recursions between TwicePlus and ThreeTimes - return Twice().Add(this); - } - - public override ECPoint Negate() - { - if (IsInfinity) - return this; - - return new SecP192K1Point(Curve, RawXCoord, RawYCoord.Negate(), RawZCoords, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP192R1Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP192R1Curve.cs deleted file mode 100644 index cb3a981..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP192R1Curve.cs +++ /dev/null @@ -1,78 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP192R1Curve - : AbstractFpCurve - { - public static readonly BigInteger q = new BigInteger(1, - Hex.Decode("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFFFFFFFFFF")); - - private const int SecP192R1_DEFAULT_COORDS = COORD_JACOBIAN; - - protected readonly SecP192R1Point m_infinity; - - public SecP192R1Curve() - : base(q) - { - this.m_infinity = new SecP192R1Point(this, null, null); - - this.m_a = FromBigInteger(new BigInteger(1, - Hex.Decode("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFFFFFFFFFC"))); - this.m_b = FromBigInteger(new BigInteger(1, - Hex.Decode("64210519E59C80E70FA7E9AB72243049FEB8DEECC146B9B1"))); - this.m_order = new BigInteger(1, Hex.Decode("FFFFFFFFFFFFFFFFFFFFFFFF99DEF836146BC9B1B4D22831")); - this.m_cofactor = BigInteger.One; - - this.m_coord = SecP192R1_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecP192R1Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_JACOBIAN: - return true; - default: - return false; - } - } - - public virtual BigInteger Q - { - get { return q; } - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return q.BitLength; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecP192R1FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecP192R1Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecP192R1Point(this, x, y, zs, withCompression); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP192R1Field.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP192R1Field.cs deleted file mode 100644 index 096c2b5..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP192R1Field.cs +++ /dev/null @@ -1,283 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP192R1Field - { - // 2^192 - 2^64 - 1 - internal static readonly uint[] P = new uint[]{ 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFE, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF }; - internal static readonly uint[] PExt = new uint[]{ 0x00000001, 0x00000000, 0x00000002, 0x00000000, 0x00000001, - 0x00000000, 0xFFFFFFFE, 0xFFFFFFFF, 0xFFFFFFFD, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF }; - private static readonly uint[] PExtInv = new uint[]{ 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFD, 0xFFFFFFFF, 0xFFFFFFFE, - 0xFFFFFFFF, 0x00000001, 0x00000000, 0x00000002 }; - private const uint P5 = 0xFFFFFFFF; - private const uint PExt11 = 0xFFFFFFFF; - - public static void Add(uint[] x, uint[] y, uint[] z) - { - uint c = Nat192.Add(x, y, z); - if (c != 0 || (z[5] == P5 && Nat192.Gte(z, P))) - { - AddPInvTo(z); - } - } - - public static void AddExt(uint[] xx, uint[] yy, uint[] zz) - { - uint c = Nat.Add(12, xx, yy, zz); - if (c != 0 || (zz[11] == PExt11 && Nat.Gte(12, zz, PExt))) - { - if (Nat.AddTo(PExtInv.Length, PExtInv, zz) != 0) - { - Nat.IncAt(12, zz, PExtInv.Length); - } - } - } - - public static void AddOne(uint[] x, uint[] z) - { - uint c = Nat.Inc(6, x, z); - if (c != 0 || (z[5] == P5 && Nat192.Gte(z, P))) - { - AddPInvTo(z); - } - } - - public static uint[] FromBigInteger(BigInteger x) - { - uint[] z = Nat192.FromBigInteger(x); - if (z[5] == P5 && Nat192.Gte(z, P)) - { - Nat192.SubFrom(P, z); - } - return z; - } - - public static void Half(uint[] x, uint[] z) - { - if ((x[0] & 1) == 0) - { - Nat.ShiftDownBit(6, x, 0, z); - } - else - { - uint c = Nat192.Add(x, P, z); - Nat.ShiftDownBit(6, z, c); - } - } - - public static void Multiply(uint[] x, uint[] y, uint[] z) - { - uint[] tt = Nat192.CreateExt(); - Nat192.Mul(x, y, tt); - Reduce(tt, z); - } - - public static void MultiplyAddToExt(uint[] x, uint[] y, uint[] zz) - { - uint c = Nat192.MulAddTo(x, y, zz); - if (c != 0 || (zz[11] == PExt11 && Nat.Gte(12, zz, PExt))) - { - if (Nat.AddTo(PExtInv.Length, PExtInv, zz) != 0) - { - Nat.IncAt(12, zz, PExtInv.Length); - } - } - } - - public static void Negate(uint[] x, uint[] z) - { - if (Nat192.IsZero(x)) - { - Nat192.Zero(z); - } - else - { - Nat192.Sub(P, x, z); - } - } - - public static void Reduce(uint[] xx, uint[] z) - { - ulong xx06 = xx[6], xx07 = xx[7], xx08 = xx[8]; - ulong xx09 = xx[9], xx10 = xx[10], xx11 = xx[11]; - - ulong t0 = xx06 + xx10; - ulong t1 = xx07 + xx11; - - ulong cc = 0; - cc += (ulong)xx[0] + t0; - uint z0 = (uint)cc; - cc >>= 32; - cc += (ulong)xx[1] + t1; - z[1] = (uint)cc; - cc >>= 32; - - t0 += xx08; - t1 += xx09; - - cc += (ulong)xx[2] + t0; - ulong z2 = (uint)cc; - cc >>= 32; - cc += (ulong)xx[3] + t1; - z[3] = (uint)cc; - cc >>= 32; - - t0 -= xx06; - t1 -= xx07; - - cc += (ulong)xx[4] + t0; - z[4] = (uint)cc; - cc >>= 32; - cc += (ulong)xx[5] + t1; - z[5] = (uint)cc; - cc >>= 32; - - z2 += cc; - - cc += z0; - z[0] = (uint)cc; - cc >>= 32; - if (cc != 0) - { - cc += z[1]; - z[1] = (uint)cc; - z2 += cc >> 32; - } - z[2] = (uint)z2; - cc = z2 >> 32; - - Debug.Assert(cc == 0 || cc == 1); - - if ((cc != 0 && Nat.IncAt(6, z, 3) != 0) - || (z[5] == P5 && Nat192.Gte(z, P))) - { - AddPInvTo(z); - } - } - - public static void Reduce32(uint x, uint[] z) - { - ulong cc = 0; - - if (x != 0) - { - cc += (ulong)z[0] + x; - z[0] = (uint)cc; - cc >>= 32; - if (cc != 0) - { - cc += (ulong)z[1]; - z[1] = (uint)cc; - cc >>= 32; - } - cc += (ulong)z[2] + x; - z[2] = (uint)cc; - cc >>= 32; - - Debug.Assert(cc == 0 || cc == 1); - } - - if ((cc != 0 && Nat.IncAt(6, z, 3) != 0) - || (z[5] == P5 && Nat192.Gte(z, P))) - { - AddPInvTo(z); - } - } - - public static void Square(uint[] x, uint[] z) - { - uint[] tt = Nat192.CreateExt(); - Nat192.Square(x, tt); - Reduce(tt, z); - } - - public static void SquareN(uint[] x, int n, uint[] z) - { - Debug.Assert(n > 0); - - uint[] tt = Nat192.CreateExt(); - Nat192.Square(x, tt); - Reduce(tt, z); - - while (--n > 0) - { - Nat192.Square(z, tt); - Reduce(tt, z); - } - } - - public static void Subtract(uint[] x, uint[] y, uint[] z) - { - int c = Nat192.Sub(x, y, z); - if (c != 0) - { - SubPInvFrom(z); - } - } - - public static void SubtractExt(uint[] xx, uint[] yy, uint[] zz) - { - int c = Nat.Sub(12, xx, yy, zz); - if (c != 0) - { - if (Nat.SubFrom(PExtInv.Length, PExtInv, zz) != 0) - { - Nat.DecAt(12, zz, PExtInv.Length); - } - } - } - - public static void Twice(uint[] x, uint[] z) - { - uint c = Nat.ShiftUpBit(6, x, 0, z); - if (c != 0 || (z[5] == P5 && Nat192.Gte(z, P))) - { - AddPInvTo(z); - } - } - - private static void AddPInvTo(uint[] z) - { - long c = (long)z[0] + 1; - z[0] = (uint)c; - c >>= 32; - if (c != 0) - { - c += (long)z[1]; - z[1] = (uint)c; - c >>= 32; - } - c += (long)z[2] + 1; - z[2] = (uint)c; - c >>= 32; - if (c != 0) - { - Nat.IncAt(6, z, 3); - } - } - - private static void SubPInvFrom(uint[] z) - { - long c = (long)z[0] - 1; - z[0] = (uint)c; - c >>= 32; - if (c != 0) - { - c += (long)z[1]; - z[1] = (uint)c; - c >>= 32; - } - c += (long)z[2] - 1; - z[2] = (uint)c; - c >>= 32; - if (c != 0) - { - Nat.DecAt(6, z, 3); - } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP192R1FieldElement.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP192R1FieldElement.cs deleted file mode 100644 index 45bcb00..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP192R1FieldElement.cs +++ /dev/null @@ -1,188 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP192R1FieldElement - : ECFieldElement - { - public static readonly BigInteger Q = SecP192R1Curve.q; - - protected internal readonly uint[] x; - - public SecP192R1FieldElement(BigInteger x) - { - if (x == null || x.SignValue < 0 || x.CompareTo(Q) >= 0) - throw new ArgumentException("value invalid for SecP192R1FieldElement", "x"); - - this.x = SecP192R1Field.FromBigInteger(x); - } - - public SecP192R1FieldElement() - { - this.x = Nat192.Create(); - } - - protected internal SecP192R1FieldElement(uint[] x) - { - this.x = x; - } - - public override bool IsZero - { - get { return Nat192.IsZero(x); } - } - - public override bool IsOne - { - get { return Nat192.IsOne(x); } - } - - public override bool TestBitZero() - { - return Nat192.GetBit(x, 0) == 1; - } - - public override BigInteger ToBigInteger() - { - return Nat192.ToBigInteger(x); - } - - public override string FieldName - { - get { return "SecP192R1Field"; } - } - - public override int FieldSize - { - get { return Q.BitLength; } - } - - public override ECFieldElement Add(ECFieldElement b) - { - uint[] z = Nat192.Create(); - SecP192R1Field.Add(x, ((SecP192R1FieldElement)b).x, z); - return new SecP192R1FieldElement(z); - } - - public override ECFieldElement AddOne() - { - uint[] z = Nat192.Create(); - SecP192R1Field.AddOne(x, z); - return new SecP192R1FieldElement(z); - } - - public override ECFieldElement Subtract(ECFieldElement b) - { - uint[] z = Nat192.Create(); - SecP192R1Field.Subtract(x, ((SecP192R1FieldElement)b).x, z); - return new SecP192R1FieldElement(z); - } - - public override ECFieldElement Multiply(ECFieldElement b) - { - uint[] z = Nat192.Create(); - SecP192R1Field.Multiply(x, ((SecP192R1FieldElement)b).x, z); - return new SecP192R1FieldElement(z); - } - - public override ECFieldElement Divide(ECFieldElement b) - { - //return Multiply(b.Invert()); - uint[] z = Nat192.Create(); - Mod.Invert(SecP192R1Field.P, ((SecP192R1FieldElement)b).x, z); - SecP192R1Field.Multiply(z, x, z); - return new SecP192R1FieldElement(z); - } - - public override ECFieldElement Negate() - { - uint[] z = Nat192.Create(); - SecP192R1Field.Negate(x, z); - return new SecP192R1FieldElement(z); - } - - public override ECFieldElement Square() - { - uint[] z = Nat192.Create(); - SecP192R1Field.Square(x, z); - return new SecP192R1FieldElement(z); - } - - public override ECFieldElement Invert() - { - //return new SecP192R1FieldElement(ToBigInteger().ModInverse(Q)); - uint[] z = Nat192.Create(); - Mod.Invert(SecP192R1Field.P, x, z); - return new SecP192R1FieldElement(z); - } - - /** - * return a sqrt root - the routine verifies that the calculation returns the right value - if - * none exists it returns null. - */ - public override ECFieldElement Sqrt() - { - // Raise this element to the exponent 2^190 - 2^62 - - uint[] x1 = this.x; - if (Nat192.IsZero(x1) || Nat192.IsOne(x1)) - return this; - - uint[] t1 = Nat192.Create(); - uint[] t2 = Nat192.Create(); - - SecP192R1Field.Square(x1, t1); - SecP192R1Field.Multiply(t1, x1, t1); - - SecP192R1Field.SquareN(t1, 2, t2); - SecP192R1Field.Multiply(t2, t1, t2); - - SecP192R1Field.SquareN(t2, 4, t1); - SecP192R1Field.Multiply(t1, t2, t1); - - SecP192R1Field.SquareN(t1, 8, t2); - SecP192R1Field.Multiply(t2, t1, t2); - - SecP192R1Field.SquareN(t2, 16, t1); - SecP192R1Field.Multiply(t1, t2, t1); - - SecP192R1Field.SquareN(t1, 32, t2); - SecP192R1Field.Multiply(t2, t1, t2); - - SecP192R1Field.SquareN(t2, 64, t1); - SecP192R1Field.Multiply(t1, t2, t1); - - SecP192R1Field.SquareN(t1, 62, t1); - SecP192R1Field.Square(t1, t2); - - return Nat192.Eq(x1, t2) ? new SecP192R1FieldElement(t1) : null; - } - - public override bool Equals(object obj) - { - return Equals(obj as SecP192R1FieldElement); - } - - public override bool Equals(ECFieldElement other) - { - return Equals(other as SecP192R1FieldElement); - } - - public virtual bool Equals(SecP192R1FieldElement other) - { - if (this == other) - return true; - if (null == other) - return false; - return Nat192.Eq(x, other.x); - } - - public override int GetHashCode() - { - return Q.GetHashCode() ^ Arrays.GetHashCode(x, 0, 6); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP192R1Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP192R1Point.cs deleted file mode 100644 index 3b53e34..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP192R1Point.cs +++ /dev/null @@ -1,279 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP192R1Point - : AbstractFpPoint - { - /** - * Create a point which encodes with point compression. - * - * @param curve - * the curve to use - * @param x - * affine x co-ordinate - * @param y - * affine y co-ordinate - * - * @deprecated Use ECCurve.createPoint to construct points - */ - public SecP192R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * Create a point that encodes with or without point compresion. - * - * @param curve - * the curve to use - * @param x - * affine x co-ordinate - * @param y - * affine y co-ordinate - * @param withCompression - * if true encode with point compression - * - * @deprecated per-point compression property will be removed, refer - * {@link #getEncoded(bool)} - */ - public SecP192R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecP192R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecP192R1Point(null, AffineXCoord, AffineYCoord); - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - if (this == b) - return Twice(); - - ECCurve curve = this.Curve; - - SecP192R1FieldElement X1 = (SecP192R1FieldElement)this.RawXCoord, Y1 = (SecP192R1FieldElement)this.RawYCoord; - SecP192R1FieldElement X2 = (SecP192R1FieldElement)b.RawXCoord, Y2 = (SecP192R1FieldElement)b.RawYCoord; - - SecP192R1FieldElement Z1 = (SecP192R1FieldElement)this.RawZCoords[0]; - SecP192R1FieldElement Z2 = (SecP192R1FieldElement)b.RawZCoords[0]; - - uint c; - uint[] tt1 = Nat192.CreateExt(); - uint[] t2 = Nat192.Create(); - uint[] t3 = Nat192.Create(); - uint[] t4 = Nat192.Create(); - - bool Z1IsOne = Z1.IsOne; - uint[] U2, S2; - if (Z1IsOne) - { - U2 = X2.x; - S2 = Y2.x; - } - else - { - S2 = t3; - SecP192R1Field.Square(Z1.x, S2); - - U2 = t2; - SecP192R1Field.Multiply(S2, X2.x, U2); - - SecP192R1Field.Multiply(S2, Z1.x, S2); - SecP192R1Field.Multiply(S2, Y2.x, S2); - } - - bool Z2IsOne = Z2.IsOne; - uint[] U1, S1; - if (Z2IsOne) - { - U1 = X1.x; - S1 = Y1.x; - } - else - { - S1 = t4; - SecP192R1Field.Square(Z2.x, S1); - - U1 = tt1; - SecP192R1Field.Multiply(S1, X1.x, U1); - - SecP192R1Field.Multiply(S1, Z2.x, S1); - SecP192R1Field.Multiply(S1, Y1.x, S1); - } - - uint[] H = Nat192.Create(); - SecP192R1Field.Subtract(U1, U2, H); - - uint[] R = t2; - SecP192R1Field.Subtract(S1, S2, R); - - // Check if b == this or b == -this - if (Nat192.IsZero(H)) - { - if (Nat192.IsZero(R)) - { - // this == b, i.e. this must be doubled - return this.Twice(); - } - - // this == -b, i.e. the result is the point at infinity - return curve.Infinity; - } - - uint[] HSquared = t3; - SecP192R1Field.Square(H, HSquared); - - uint[] G = Nat192.Create(); - SecP192R1Field.Multiply(HSquared, H, G); - - uint[] V = t3; - SecP192R1Field.Multiply(HSquared, U1, V); - - SecP192R1Field.Negate(G, G); - Nat192.Mul(S1, G, tt1); - - c = Nat192.AddBothTo(V, V, G); - SecP192R1Field.Reduce32(c, G); - - SecP192R1FieldElement X3 = new SecP192R1FieldElement(t4); - SecP192R1Field.Square(R, X3.x); - SecP192R1Field.Subtract(X3.x, G, X3.x); - - SecP192R1FieldElement Y3 = new SecP192R1FieldElement(G); - SecP192R1Field.Subtract(V, X3.x, Y3.x); - SecP192R1Field.MultiplyAddToExt(Y3.x, R, tt1); - SecP192R1Field.Reduce(tt1, Y3.x); - - SecP192R1FieldElement Z3 = new SecP192R1FieldElement(H); - if (!Z1IsOne) - { - SecP192R1Field.Multiply(Z3.x, Z1.x, Z3.x); - } - if (!Z2IsOne) - { - SecP192R1Field.Multiply(Z3.x, Z2.x, Z3.x); - } - - ECFieldElement[] zs = new ECFieldElement[] { Z3 }; - - return new SecP192R1Point(curve, X3, Y3, zs, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - SecP192R1FieldElement Y1 = (SecP192R1FieldElement)this.RawYCoord; - if (Y1.IsZero) - return curve.Infinity; - - SecP192R1FieldElement X1 = (SecP192R1FieldElement)this.RawXCoord, Z1 = (SecP192R1FieldElement)this.RawZCoords[0]; - - uint c; - uint[] t1 = Nat192.Create(); - uint[] t2 = Nat192.Create(); - - uint[] Y1Squared = Nat192.Create(); - SecP192R1Field.Square(Y1.x, Y1Squared); - - uint[] T = Nat192.Create(); - SecP192R1Field.Square(Y1Squared, T); - - bool Z1IsOne = Z1.IsOne; - - uint[] Z1Squared = Z1.x; - if (!Z1IsOne) - { - Z1Squared = t2; - SecP192R1Field.Square(Z1.x, Z1Squared); - } - - SecP192R1Field.Subtract(X1.x, Z1Squared, t1); - - uint[] M = t2; - SecP192R1Field.Add(X1.x, Z1Squared, M); - SecP192R1Field.Multiply(M, t1, M); - c = Nat192.AddBothTo(M, M, M); - SecP192R1Field.Reduce32(c, M); - - uint[] S = Y1Squared; - SecP192R1Field.Multiply(Y1Squared, X1.x, S); - c = Nat.ShiftUpBits(6, S, 2, 0); - SecP192R1Field.Reduce32(c, S); - - c = Nat.ShiftUpBits(6, T, 3, 0, t1); - SecP192R1Field.Reduce32(c, t1); - - SecP192R1FieldElement X3 = new SecP192R1FieldElement(T); - SecP192R1Field.Square(M, X3.x); - SecP192R1Field.Subtract(X3.x, S, X3.x); - SecP192R1Field.Subtract(X3.x, S, X3.x); - - SecP192R1FieldElement Y3 = new SecP192R1FieldElement(S); - SecP192R1Field.Subtract(S, X3.x, Y3.x); - SecP192R1Field.Multiply(Y3.x, M, Y3.x); - SecP192R1Field.Subtract(Y3.x, t1, Y3.x); - - SecP192R1FieldElement Z3 = new SecP192R1FieldElement(M); - SecP192R1Field.Twice(Y1.x, Z3.x); - if (!Z1IsOne) - { - SecP192R1Field.Multiply(Z3.x, Z1.x, Z3.x); - } - - return new SecP192R1Point(curve, X3, Y3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this == b) - return ThreeTimes(); - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECFieldElement Y1 = this.RawYCoord; - if (Y1.IsZero) - return b; - - return Twice().Add(b); - } - - public override ECPoint ThreeTimes() - { - if (this.IsInfinity || this.RawYCoord.IsZero) - return this; - - // NOTE: Be careful about recursions between TwicePlus and ThreeTimes - return Twice().Add(this); - } - - public override ECPoint Negate() - { - if (IsInfinity) - return this; - - return new SecP192R1Point(Curve, RawXCoord, RawYCoord.Negate(), RawZCoords, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP224K1Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP224K1Curve.cs deleted file mode 100644 index d4be7d8..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP224K1Curve.cs +++ /dev/null @@ -1,75 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP224K1Curve - : AbstractFpCurve - { - public static readonly BigInteger q = new BigInteger(1, - Hex.Decode("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFE56D")); - - private const int SECP224K1_DEFAULT_COORDS = COORD_JACOBIAN; - - protected readonly SecP224K1Point m_infinity; - - public SecP224K1Curve() - : base(q) - { - this.m_infinity = new SecP224K1Point(this, null, null); - - this.m_a = FromBigInteger(BigInteger.Zero); - this.m_b = FromBigInteger(BigInteger.ValueOf(5)); - this.m_order = new BigInteger(1, Hex.Decode("010000000000000000000000000001DCE8D2EC6184CAF0A971769FB1F7")); - this.m_cofactor = BigInteger.One; - this.m_coord = SECP224K1_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecP224K1Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_JACOBIAN: - return true; - default: - return false; - } - } - - public virtual BigInteger Q - { - get { return q; } - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return q.BitLength; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecP224K1FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecP224K1Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecP224K1Point(this, x, y, zs, withCompression); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP224K1Field.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP224K1Field.cs deleted file mode 100644 index 98cf777..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP224K1Field.cs +++ /dev/null @@ -1,179 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP224K1Field - { - // 2^224 - 2^32 - 2^12 - 2^11 - 2^9 - 2^7 - 2^4 - 2 - 1 - internal static readonly uint[] P = new uint[]{ 0xFFFFE56D, 0xFFFFFFFE, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, - 0xFFFFFFFF }; - internal static readonly uint[] PExt = new uint[]{ 0x02C23069, 0x00003526, 0x00000001, 0x00000000, 0x00000000, - 0x00000000, 0x00000000, 0xFFFFCADA, 0xFFFFFFFD, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF }; - private static readonly uint[] PExtInv = new uint[]{ 0xFD3DCF97, 0xFFFFCAD9, 0xFFFFFFFE, 0xFFFFFFFF, 0xFFFFFFFF, - 0xFFFFFFFF, 0xFFFFFFFF, 0x00003525, 0x00000002 }; - private const uint P6 = 0xFFFFFFFF; - private const uint PExt13 = 0xFFFFFFFF; - private const uint PInv33 = 0x1A93; - - public static void Add(uint[] x, uint[] y, uint[] z) - { - uint c = Nat224.Add(x, y, z); - if (c != 0 || (z[6] == P6 && Nat224.Gte(z, P))) - { - Nat.Add33To(7, PInv33, z); - } - } - - public static void AddExt(uint[] xx, uint[] yy, uint[] zz) - { - uint c = Nat.Add(14, xx, yy, zz); - if (c != 0 || (zz[13] == PExt13 && Nat.Gte(14, zz, PExt))) - { - if (Nat.AddTo(PExtInv.Length, PExtInv, zz) != 0) - { - Nat.IncAt(14, zz, PExtInv.Length); - } - } - } - - public static void AddOne(uint[] x, uint[] z) - { - uint c = Nat.Inc(7, x, z); - if (c != 0 || (z[6] == P6 && Nat224.Gte(z, P))) - { - Nat.Add33To(7, PInv33, z); - } - } - - public static uint[] FromBigInteger(BigInteger x) - { - uint[] z = Nat224.FromBigInteger(x); - if (z[6] == P6 && Nat224.Gte(z, P)) - { - Nat224.SubFrom(P, z); - } - return z; - } - - public static void Half(uint[] x, uint[] z) - { - if ((x[0] & 1) == 0) - { - Nat.ShiftDownBit(7, x, 0, z); - } - else - { - uint c = Nat224.Add(x, P, z); - Nat.ShiftDownBit(7, z, c); - } - } - - public static void Multiply(uint[] x, uint[] y, uint[] z) - { - uint[] tt = Nat224.CreateExt(); - Nat224.Mul(x, y, tt); - Reduce(tt, z); - } - - public static void MultiplyAddToExt(uint[] x, uint[] y, uint[] zz) - { - uint c = Nat224.MulAddTo(x, y, zz); - if (c != 0 || (zz[13] == PExt13 && Nat.Gte(14, zz, PExt))) - { - if (Nat.AddTo(PExtInv.Length, PExtInv, zz) != 0) - { - Nat.IncAt(14, zz, PExtInv.Length); - } - } - } - - public static void Negate(uint[] x, uint[] z) - { - if (Nat224.IsZero(x)) - { - Nat224.Zero(z); - } - else - { - Nat224.Sub(P, x, z); - } - } - - public static void Reduce(uint[] xx, uint[] z) - { - ulong cc = Nat224.Mul33Add(PInv33, xx, 7, xx, 0, z, 0); - uint c = Nat224.Mul33DWordAdd(PInv33, cc, z, 0); - - Debug.Assert(c == 0 || c == 1); - - if (c != 0 || (z[6] == P6 && Nat224.Gte(z, P))) - { - Nat.Add33To(7, PInv33, z); - } - } - - public static void Reduce32(uint x, uint[] z) - { - if ((x != 0 && Nat224.Mul33WordAdd(PInv33, x, z, 0) != 0) - || (z[6] == P6 && Nat224.Gte(z, P))) - { - Nat.Add33To(7, PInv33, z); - } - } - - public static void Square(uint[] x, uint[] z) - { - uint[] tt = Nat224.CreateExt(); - Nat224.Square(x, tt); - Reduce(tt, z); - } - - public static void SquareN(uint[] x, int n, uint[] z) - { - Debug.Assert(n > 0); - - uint[] tt = Nat224.CreateExt(); - Nat224.Square(x, tt); - Reduce(tt, z); - - while (--n > 0) - { - Nat224.Square(z, tt); - Reduce(tt, z); - } - } - - public static void Subtract(uint[] x, uint[] y, uint[] z) - { - int c = Nat224.Sub(x, y, z); - if (c != 0) - { - Nat.Sub33From(7, PInv33, z); - } - } - - public static void SubtractExt(uint[] xx, uint[] yy, uint[] zz) - { - int c = Nat.Sub(14, xx, yy, zz); - if (c != 0) - { - if (Nat.SubFrom(PExtInv.Length, PExtInv, zz) != 0) - { - Nat.DecAt(14, zz, PExtInv.Length); - } - } - } - - public static void Twice(uint[] x, uint[] z) - { - uint c = Nat.ShiftUpBit(7, x, 0, z); - if (c != 0 || (z[6] == P6 && Nat224.Gte(z, P))) - { - Nat.Add33To(7, PInv33, z); - } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP224K1FieldElement.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP224K1FieldElement.cs deleted file mode 100644 index fec0743..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP224K1FieldElement.cs +++ /dev/null @@ -1,242 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Math.Raw; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP224K1FieldElement - : ECFieldElement - { - public static readonly BigInteger Q = SecP224K1Curve.q; - - // Calculated as BigInteger.Two.ModPow(Q.ShiftRight(2), Q) - private static readonly uint[] PRECOMP_POW2 = new uint[]{ 0x33bfd202, 0xdcfad133, 0x2287624a, 0xc3811ba8, - 0xa85558fc, 0x1eaef5d7, 0x8edf154c }; - - protected internal readonly uint[] x; - - public SecP224K1FieldElement(BigInteger x) - { - if (x == null || x.SignValue < 0 || x.CompareTo(Q) >= 0) - throw new ArgumentException("value invalid for SecP224K1FieldElement", "x"); - - this.x = SecP224K1Field.FromBigInteger(x); - } - - public SecP224K1FieldElement() - { - this.x = Nat224.Create(); - } - - protected internal SecP224K1FieldElement(uint[] x) - { - this.x = x; - } - - public override bool IsZero - { - get { return Nat224.IsZero(x); } - } - - public override bool IsOne - { - get { return Nat224.IsOne(x); } - } - - public override bool TestBitZero() - { - return Nat224.GetBit(x, 0) == 1; - } - - public override BigInteger ToBigInteger() - { - return Nat224.ToBigInteger(x); - } - - public override string FieldName - { - get { return "SecP224K1Field"; } - } - - public override int FieldSize - { - get { return Q.BitLength; } - } - - public override ECFieldElement Add(ECFieldElement b) - { - uint[] z = Nat224.Create(); - SecP224K1Field.Add(x, ((SecP224K1FieldElement)b).x, z); - return new SecP224K1FieldElement(z); - } - - public override ECFieldElement AddOne() - { - uint[] z = Nat224.Create(); - SecP224K1Field.AddOne(x, z); - return new SecP224K1FieldElement(z); - } - - public override ECFieldElement Subtract(ECFieldElement b) - { - uint[] z = Nat224.Create(); - SecP224K1Field.Subtract(x, ((SecP224K1FieldElement)b).x, z); - return new SecP224K1FieldElement(z); - } - - public override ECFieldElement Multiply(ECFieldElement b) - { - uint[] z = Nat224.Create(); - SecP224K1Field.Multiply(x, ((SecP224K1FieldElement)b).x, z); - return new SecP224K1FieldElement(z); - } - - public override ECFieldElement Divide(ECFieldElement b) - { - //return Multiply(b.Invert()); - uint[] z = Nat224.Create(); - Mod.Invert(SecP224K1Field.P, ((SecP224K1FieldElement)b).x, z); - SecP224K1Field.Multiply(z, x, z); - return new SecP224K1FieldElement(z); - } - - public override ECFieldElement Negate() - { - uint[] z = Nat224.Create(); - SecP224K1Field.Negate(x, z); - return new SecP224K1FieldElement(z); - } - - public override ECFieldElement Square() - { - uint[] z = Nat224.Create(); - SecP224K1Field.Square(x, z); - return new SecP224K1FieldElement(z); - } - - public override ECFieldElement Invert() - { - //return new SecP224K1FieldElement(ToBigInteger().ModInverse(Q)); - uint[] z = Nat224.Create(); - Mod.Invert(SecP224K1Field.P, x, z); - return new SecP224K1FieldElement(z); - } - - /** - * return a sqrt root - the routine verifies that the calculation returns the right value - if - * none exists it returns null. - */ - public override ECFieldElement Sqrt() - { - /* - * Q == 8m + 5, so we use Pocklington's method for this case. - * - * First, raise this element to the exponent 2^221 - 2^29 - 2^9 - 2^8 - 2^6 - 2^4 - 2^1 (i.e. m + 1) - * - * Breaking up the exponent's binary representation into "repunits", we get: - * { 191 1s } { 1 0s } { 19 1s } { 2 0s } { 1 1s } { 1 0s} { 1 1s } { 1 0s} { 3 1s } { 1 0s} - * - * Therefore we need an addition chain containing 1, 3, 19, 191 (the lengths of the repunits) - * We use: [1], 2, [3], 4, 8, 11, [19], 23, 42, 84, 107, [191] - */ - - uint[] x1 = this.x; - if (Nat224.IsZero(x1) || Nat224.IsOne(x1)) - return this; - - uint[] x2 = Nat224.Create(); - SecP224K1Field.Square(x1, x2); - SecP224K1Field.Multiply(x2, x1, x2); - uint[] x3 = x2; - SecP224K1Field.Square(x2, x3); - SecP224K1Field.Multiply(x3, x1, x3); - uint[] x4 = Nat224.Create(); - SecP224K1Field.Square(x3, x4); - SecP224K1Field.Multiply(x4, x1, x4); - uint[] x8 = Nat224.Create(); - SecP224K1Field.SquareN(x4, 4, x8); - SecP224K1Field.Multiply(x8, x4, x8); - uint[] x11 = Nat224.Create(); - SecP224K1Field.SquareN(x8, 3, x11); - SecP224K1Field.Multiply(x11, x3, x11); - uint[] x19 = x11; - SecP224K1Field.SquareN(x11, 8, x19); - SecP224K1Field.Multiply(x19, x8, x19); - uint[] x23 = x8; - SecP224K1Field.SquareN(x19, 4, x23); - SecP224K1Field.Multiply(x23, x4, x23); - uint[] x42 = x4; - SecP224K1Field.SquareN(x23, 19, x42); - SecP224K1Field.Multiply(x42, x19, x42); - uint[] x84 = Nat224.Create(); - SecP224K1Field.SquareN(x42, 42, x84); - SecP224K1Field.Multiply(x84, x42, x84); - uint[] x107 = x42; - SecP224K1Field.SquareN(x84, 23, x107); - SecP224K1Field.Multiply(x107, x23, x107); - uint[] x191 = x23; - SecP224K1Field.SquareN(x107, 84, x191); - SecP224K1Field.Multiply(x191, x84, x191); - - uint[] t1 = x191; - SecP224K1Field.SquareN(t1, 20, t1); - SecP224K1Field.Multiply(t1, x19, t1); - SecP224K1Field.SquareN(t1, 3, t1); - SecP224K1Field.Multiply(t1, x1, t1); - SecP224K1Field.SquareN(t1, 2, t1); - SecP224K1Field.Multiply(t1, x1, t1); - SecP224K1Field.SquareN(t1, 4, t1); - SecP224K1Field.Multiply(t1, x3, t1); - SecP224K1Field.Square(t1, t1); - - uint[] t2 = x84; - SecP224K1Field.Square(t1, t2); - - if (Nat224.Eq(x1, t2)) - { - return new SecP224K1FieldElement(t1); - } - - /* - * If the first guess is incorrect, we multiply by a precomputed power of 2 to get the second guess, - * which is ((4x)^(m + 1))/2 mod Q - */ - SecP224K1Field.Multiply(t1, PRECOMP_POW2, t1); - - SecP224K1Field.Square(t1, t2); - - if (Nat224.Eq(x1, t2)) - { - return new SecP224K1FieldElement(t1); - } - - return null; - } - - public override bool Equals(object obj) - { - return Equals(obj as SecP224K1FieldElement); - } - - public override bool Equals(ECFieldElement other) - { - return Equals(other as SecP224K1FieldElement); - } - - public virtual bool Equals(SecP224K1FieldElement other) - { - if (this == other) - return true; - if (null == other) - return false; - return Nat224.Eq(x, other.x); - } - - public override int GetHashCode() - { - return Q.GetHashCode() ^ Arrays.GetHashCode(x, 0, 7); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP224K1Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP224K1Point.cs deleted file mode 100644 index 98cb292..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP224K1Point.cs +++ /dev/null @@ -1,267 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP224K1Point - : AbstractFpPoint - { - /** - * Create a point which encodes with point compression. - * - * @param curve - * the curve to use - * @param x - * affine x co-ordinate - * @param y - * affine y co-ordinate - * - * @deprecated Use ECCurve.createPoint to construct points - */ - public SecP224K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * Create a point that encodes with or without point compresion. - * - * @param curve - * the curve to use - * @param x - * affine x co-ordinate - * @param y - * affine y co-ordinate - * @param withCompression - * if true encode with point compression - * - * @deprecated per-point compression property will be removed, refer - * {@link #getEncoded(bool)} - */ - public SecP224K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecP224K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, - bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecP224K1Point(null, AffineXCoord, AffineYCoord); - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - if (this == b) - return Twice(); - - ECCurve curve = this.Curve; - - SecP224K1FieldElement X1 = (SecP224K1FieldElement)this.RawXCoord, Y1 = (SecP224K1FieldElement)this.RawYCoord; - SecP224K1FieldElement X2 = (SecP224K1FieldElement)b.RawXCoord, Y2 = (SecP224K1FieldElement)b.RawYCoord; - - SecP224K1FieldElement Z1 = (SecP224K1FieldElement)this.RawZCoords[0]; - SecP224K1FieldElement Z2 = (SecP224K1FieldElement)b.RawZCoords[0]; - - uint c; - uint[] tt1 = Nat224.CreateExt(); - uint[] t2 = Nat224.Create(); - uint[] t3 = Nat224.Create(); - uint[] t4 = Nat224.Create(); - - bool Z1IsOne = Z1.IsOne; - uint[] U2, S2; - if (Z1IsOne) - { - U2 = X2.x; - S2 = Y2.x; - } - else - { - S2 = t3; - SecP224K1Field.Square(Z1.x, S2); - - U2 = t2; - SecP224K1Field.Multiply(S2, X2.x, U2); - - SecP224K1Field.Multiply(S2, Z1.x, S2); - SecP224K1Field.Multiply(S2, Y2.x, S2); - } - - bool Z2IsOne = Z2.IsOne; - uint[] U1, S1; - if (Z2IsOne) - { - U1 = X1.x; - S1 = Y1.x; - } - else - { - S1 = t4; - SecP224K1Field.Square(Z2.x, S1); - - U1 = tt1; - SecP224K1Field.Multiply(S1, X1.x, U1); - - SecP224K1Field.Multiply(S1, Z2.x, S1); - SecP224K1Field.Multiply(S1, Y1.x, S1); - } - - uint[] H = Nat224.Create(); - SecP224K1Field.Subtract(U1, U2, H); - - uint[] R = t2; - SecP224K1Field.Subtract(S1, S2, R); - - // Check if b == this or b == -this - if (Nat224.IsZero(H)) - { - if (Nat224.IsZero(R)) - { - // this == b, i.e. this must be doubled - return this.Twice(); - } - - // this == -b, i.e. the result is the point at infinity - return curve.Infinity; - } - - uint[] HSquared = t3; - SecP224K1Field.Square(H, HSquared); - - uint[] G = Nat224.Create(); - SecP224K1Field.Multiply(HSquared, H, G); - - uint[] V = t3; - SecP224K1Field.Multiply(HSquared, U1, V); - - SecP224K1Field.Negate(G, G); - Nat224.Mul(S1, G, tt1); - - c = Nat224.AddBothTo(V, V, G); - SecP224K1Field.Reduce32(c, G); - - SecP224K1FieldElement X3 = new SecP224K1FieldElement(t4); - SecP224K1Field.Square(R, X3.x); - SecP224K1Field.Subtract(X3.x, G, X3.x); - - SecP224K1FieldElement Y3 = new SecP224K1FieldElement(G); - SecP224K1Field.Subtract(V, X3.x, Y3.x); - SecP224K1Field.MultiplyAddToExt(Y3.x, R, tt1); - SecP224K1Field.Reduce(tt1, Y3.x); - - SecP224K1FieldElement Z3 = new SecP224K1FieldElement(H); - if (!Z1IsOne) - { - SecP224K1Field.Multiply(Z3.x, Z1.x, Z3.x); - } - if (!Z2IsOne) - { - SecP224K1Field.Multiply(Z3.x, Z2.x, Z3.x); - } - - ECFieldElement[] zs = new ECFieldElement[] { Z3 }; - - return new SecP224K1Point(curve, X3, Y3, zs, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - SecP224K1FieldElement Y1 = (SecP224K1FieldElement)this.RawYCoord; - if (Y1.IsZero) - return curve.Infinity; - - SecP224K1FieldElement X1 = (SecP224K1FieldElement)this.RawXCoord, Z1 = (SecP224K1FieldElement)this.RawZCoords[0]; - - uint c; - - uint[] Y1Squared = Nat224.Create(); - SecP224K1Field.Square(Y1.x, Y1Squared); - - uint[] T = Nat224.Create(); - SecP224K1Field.Square(Y1Squared, T); - - uint[] M = Nat224.Create(); - SecP224K1Field.Square(X1.x, M); - c = Nat224.AddBothTo(M, M, M); - SecP224K1Field.Reduce32(c, M); - - uint[] S = Y1Squared; - SecP224K1Field.Multiply(Y1Squared, X1.x, S); - c = Nat.ShiftUpBits(7, S, 2, 0); - SecP224K1Field.Reduce32(c, S); - - uint[] t1 = Nat224.Create(); - c = Nat.ShiftUpBits(7, T, 3, 0, t1); - SecP224K1Field.Reduce32(c, t1); - - SecP224K1FieldElement X3 = new SecP224K1FieldElement(T); - SecP224K1Field.Square(M, X3.x); - SecP224K1Field.Subtract(X3.x, S, X3.x); - SecP224K1Field.Subtract(X3.x, S, X3.x); - - SecP224K1FieldElement Y3 = new SecP224K1FieldElement(S); - SecP224K1Field.Subtract(S, X3.x, Y3.x); - SecP224K1Field.Multiply(Y3.x, M, Y3.x); - SecP224K1Field.Subtract(Y3.x, t1, Y3.x); - - SecP224K1FieldElement Z3 = new SecP224K1FieldElement(M); - SecP224K1Field.Twice(Y1.x, Z3.x); - if (!Z1.IsOne) - { - SecP224K1Field.Multiply(Z3.x, Z1.x, Z3.x); - } - - return new SecP224K1Point(curve, X3, Y3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this == b) - return ThreeTimes(); - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECFieldElement Y1 = this.RawYCoord; - if (Y1.IsZero) - return b; - - return Twice().Add(b); - } - - public override ECPoint ThreeTimes() - { - if (this.IsInfinity || this.RawYCoord.IsZero) - return this; - - // NOTE: Be careful about recursions between TwicePlus and ThreeTimes - return Twice().Add(this); - } - - public override ECPoint Negate() - { - if (IsInfinity) - return this; - - return new SecP224K1Point(Curve, RawXCoord, RawYCoord.Negate(), RawZCoords, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP224R1Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP224R1Curve.cs deleted file mode 100644 index cda8781..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP224R1Curve.cs +++ /dev/null @@ -1,78 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP224R1Curve - : AbstractFpCurve - { - public static readonly BigInteger q = new BigInteger(1, - Hex.Decode("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF000000000000000000000001")); - - private const int SecP224R1_DEFAULT_COORDS = COORD_JACOBIAN; - - protected readonly SecP224R1Point m_infinity; - - public SecP224R1Curve() - : base(q) - { - this.m_infinity = new SecP224R1Point(this, null, null); - - this.m_a = FromBigInteger(new BigInteger(1, - Hex.Decode("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFFFFFFFFFFFFFFFFFE"))); - this.m_b = FromBigInteger(new BigInteger(1, - Hex.Decode("B4050A850C04B3ABF54132565044B0B7D7BFD8BA270B39432355FFB4"))); - this.m_order = new BigInteger(1, Hex.Decode("FFFFFFFFFFFFFFFFFFFFFFFFFFFF16A2E0B8F03E13DD29455C5C2A3D")); - this.m_cofactor = BigInteger.One; - - this.m_coord = SecP224R1_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecP224R1Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_JACOBIAN: - return true; - default: - return false; - } - } - - public virtual BigInteger Q - { - get { return q; } - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return q.BitLength; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecP224R1FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecP224R1Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecP224R1Point(this, x, y, zs, withCompression); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP224R1Field.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP224R1Field.cs deleted file mode 100644 index 4f5c3bb..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP224R1Field.cs +++ /dev/null @@ -1,297 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP224R1Field - { - // 2^224 - 2^96 + 1 - internal static readonly uint[] P = new uint[] { 0x00000001, 0x00000000, 0x00000000, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF }; - internal static readonly uint[] PExt = new uint[]{ 0x00000001, 0x00000000, 0x00000000, 0xFFFFFFFE, 0xFFFFFFFF, - 0xFFFFFFFF, 0x00000000, 0x00000002, 0x00000000, 0x00000000, 0xFFFFFFFE, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF }; - private static readonly uint[] PExtInv = new uint[]{ 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0x00000001, 0x00000000, - 0x00000000, 0xFFFFFFFF, 0xFFFFFFFD, 0xFFFFFFFF, 0xFFFFFFFF, 0x00000001 }; - private const uint P6 = 0xFFFFFFFF; - private const uint PExt13 = 0xFFFFFFFF; - - public static void Add(uint[] x, uint[] y, uint[] z) - { - uint c = Nat224.Add(x, y, z); - if (c != 0 || (z[6] == P6 && Nat224.Gte(z, P))) - { - AddPInvTo(z); - } - } - - public static void AddExt(uint[] xx, uint[] yy, uint[] zz) - { - uint c = Nat.Add(14, xx, yy, zz); - if (c != 0 || (zz[13] == PExt13 && Nat.Gte(14, zz, PExt))) - { - if (Nat.AddTo(PExtInv.Length, PExtInv, zz) != 0) - { - Nat.IncAt(14, zz, PExtInv.Length); - } - } - } - - public static void AddOne(uint[] x, uint[] z) - { - uint c = Nat.Inc(7, x, z); - if (c != 0 || (z[6] == P6 && Nat224.Gte(z, P))) - { - AddPInvTo(z); - } - } - - public static uint[] FromBigInteger(BigInteger x) - { - uint[] z = Nat224.FromBigInteger(x); - if (z[6] == P6 && Nat224.Gte(z, P)) - { - Nat224.SubFrom(P, z); - } - return z; - } - - public static void Half(uint[] x, uint[] z) - { - if ((x[0] & 1) == 0) - { - Nat.ShiftDownBit(7, x, 0, z); - } - else - { - uint c = Nat224.Add(x, P, z); - Nat.ShiftDownBit(7, z, c); - } - } - - public static void Multiply(uint[] x, uint[] y, uint[] z) - { - uint[] tt = Nat224.CreateExt(); - Nat224.Mul(x, y, tt); - Reduce(tt, z); - } - - public static void MultiplyAddToExt(uint[] x, uint[] y, uint[] zz) - { - uint c = Nat224.MulAddTo(x, y, zz); - if (c != 0 || (zz[13] == PExt13 && Nat.Gte(14, zz, PExt))) - { - if (Nat.AddTo(PExtInv.Length, PExtInv, zz) != 0) - { - Nat.IncAt(14, zz, PExtInv.Length); - } - } - } - - public static void Negate(uint[] x, uint[] z) - { - if (Nat224.IsZero(x)) - { - Nat224.Zero(z); - } - else - { - Nat224.Sub(P, x, z); - } - } - - public static void Reduce(uint[] xx, uint[] z) - { - long xx10 = xx[10], xx11 = xx[11], xx12 = xx[12], xx13 = xx[13]; - - const long n = 1; - - long t0 = (long)xx[7] + xx11 - n; - long t1 = (long)xx[8] + xx12; - long t2 = (long)xx[9] + xx13; - - long cc = 0; - cc += (long)xx[0] - t0; - long z0 = (uint)cc; - cc >>= 32; - cc += (long)xx[1] - t1; - z[1] = (uint)cc; - cc >>= 32; - cc += (long)xx[2] - t2; - z[2] = (uint)cc; - cc >>= 32; - cc += (long)xx[3] + t0 - xx10; - long z3 = (uint)cc; - cc >>= 32; - cc += (long)xx[4] + t1 - xx11; - z[4] = (uint)cc; - cc >>= 32; - cc += (long)xx[5] + t2 - xx12; - z[5] = (uint)cc; - cc >>= 32; - cc += (long)xx[6] + xx10 - xx13; - z[6] = (uint)cc; - cc >>= 32; - cc += n; - - Debug.Assert(cc >= 0); - - z3 += cc; - - z0 -= cc; - z[0] = (uint)z0; - cc = z0 >> 32; - if (cc != 0) - { - cc += (long)z[1]; - z[1] = (uint)cc; - cc >>= 32; - cc += (long)z[2]; - z[2] = (uint)cc; - z3 += cc >> 32; - } - z[3] = (uint)z3; - cc = z3 >> 32; - - Debug.Assert(cc == 0 || cc == 1); - - if ((cc != 0 && Nat.IncAt(7, z, 4) != 0) - || (z[6] == P6 && Nat224.Gte(z, P))) - { - AddPInvTo(z); - } - } - - public static void Reduce32(uint x, uint[] z) - { - long cc = 0; - - if (x != 0) - { - long xx07 = x; - - cc += (long)z[0] - xx07; - z[0] = (uint)cc; - cc >>= 32; - if (cc != 0) - { - cc += (long)z[1]; - z[1] = (uint)cc; - cc >>= 32; - cc += (long)z[2]; - z[2] = (uint)cc; - cc >>= 32; - } - cc += (long)z[3] + xx07; - z[3] = (uint)cc; - cc >>= 32; - - Debug.Assert(cc == 0 || cc == 1); - } - - if ((cc != 0 && Nat.IncAt(7, z, 4) != 0) - || (z[6] == P6 && Nat224.Gte(z, P))) - { - AddPInvTo(z); - } - } - - public static void Square(uint[] x, uint[] z) - { - uint[] tt = Nat224.CreateExt(); - Nat224.Square(x, tt); - Reduce(tt, z); - } - - public static void SquareN(uint[] x, int n, uint[] z) - { - Debug.Assert(n > 0); - - uint[] tt = Nat224.CreateExt(); - Nat224.Square(x, tt); - Reduce(tt, z); - - while (--n > 0) - { - Nat224.Square(z, tt); - Reduce(tt, z); - } - } - - public static void Subtract(uint[] x, uint[] y, uint[] z) - { - int c = Nat224.Sub(x, y, z); - if (c != 0) - { - SubPInvFrom(z); - } - } - - public static void SubtractExt(uint[] xx, uint[] yy, uint[] zz) - { - int c = Nat.Sub(14, xx, yy, zz); - if (c != 0) - { - if (Nat.SubFrom(PExtInv.Length, PExtInv, zz) != 0) - { - Nat.DecAt(14, zz, PExtInv.Length); - } - } - } - - public static void Twice(uint[] x, uint[] z) - { - uint c = Nat.ShiftUpBit(7, x, 0, z); - if (c != 0 || (z[6] == P6 && Nat224.Gte(z, P))) - { - AddPInvTo(z); - } - } - - private static void AddPInvTo(uint[] z) - { - long c = (long)z[0] - 1; - z[0] = (uint)c; - c >>= 32; - if (c != 0) - { - c += (long)z[1]; - z[1] = (uint)c; - c >>= 32; - c += (long)z[2]; - z[2] = (uint)c; - c >>= 32; - } - c += (long)z[3] + 1; - z[3] = (uint)c; - c >>= 32; - if (c != 0) - { - Nat.IncAt(7, z, 4); - } - } - - private static void SubPInvFrom(uint[] z) - { - long c = (long)z[0] + 1; - z[0] = (uint)c; - c >>= 32; - if (c != 0) - { - c += (long)z[1]; - z[1] = (uint)c; - c >>= 32; - c += (long)z[2]; - z[2] = (uint)c; - c >>= 32; - } - c += (long)z[3] - 1; - z[3] = (uint)c; - c >>= 32; - if (c != 0) - { - Nat.DecAt(7, z, 4); - } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP224R1FieldElement.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP224R1FieldElement.cs deleted file mode 100644 index 2b9a065..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP224R1FieldElement.cs +++ /dev/null @@ -1,269 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP224R1FieldElement - : ECFieldElement - { - public static readonly BigInteger Q = SecP224R1Curve.q; - - protected internal readonly uint[] x; - - public SecP224R1FieldElement(BigInteger x) - { - if (x == null || x.SignValue < 0 || x.CompareTo(Q) >= 0) - throw new ArgumentException("value invalid for SecP224R1FieldElement", "x"); - - this.x = SecP224R1Field.FromBigInteger(x); - } - - public SecP224R1FieldElement() - { - this.x = Nat224.Create(); - } - - protected internal SecP224R1FieldElement(uint[] x) - { - this.x = x; - } - - public override bool IsZero - { - get { return Nat224.IsZero(x); } - } - - public override bool IsOne - { - get { return Nat224.IsOne(x); } - } - - public override bool TestBitZero() - { - return Nat224.GetBit(x, 0) == 1; - } - - public override BigInteger ToBigInteger() - { - return Nat224.ToBigInteger(x); - } - - public override string FieldName - { - get { return "SecP224R1Field"; } - } - - public override int FieldSize - { - get { return Q.BitLength; } - } - - public override ECFieldElement Add(ECFieldElement b) - { - uint[] z = Nat224.Create(); - SecP224R1Field.Add(x, ((SecP224R1FieldElement)b).x, z); - return new SecP224R1FieldElement(z); - } - - public override ECFieldElement AddOne() - { - uint[] z = Nat224.Create(); - SecP224R1Field.AddOne(x, z); - return new SecP224R1FieldElement(z); - } - - public override ECFieldElement Subtract(ECFieldElement b) - { - uint[] z = Nat224.Create(); - SecP224R1Field.Subtract(x, ((SecP224R1FieldElement)b).x, z); - return new SecP224R1FieldElement(z); - } - - public override ECFieldElement Multiply(ECFieldElement b) - { - uint[] z = Nat224.Create(); - SecP224R1Field.Multiply(x, ((SecP224R1FieldElement)b).x, z); - return new SecP224R1FieldElement(z); - } - - public override ECFieldElement Divide(ECFieldElement b) - { - //return Multiply(b.Invert()); - uint[] z = Nat224.Create(); - Mod.Invert(SecP224R1Field.P, ((SecP224R1FieldElement)b).x, z); - SecP224R1Field.Multiply(z, x, z); - return new SecP224R1FieldElement(z); - } - - public override ECFieldElement Negate() - { - uint[] z = Nat224.Create(); - SecP224R1Field.Negate(x, z); - return new SecP224R1FieldElement(z); - } - - public override ECFieldElement Square() - { - uint[] z = Nat224.Create(); - SecP224R1Field.Square(x, z); - return new SecP224R1FieldElement(z); - } - - public override ECFieldElement Invert() - { - //return new SecP224R1FieldElement(ToBigInteger().ModInverse(Q)); - uint[] z = Nat224.Create(); - Mod.Invert(SecP224R1Field.P, x, z); - return new SecP224R1FieldElement(z); - } - - /** - * return a sqrt root - the routine verifies that the calculation returns the right value - if - * none exists it returns null. - */ - public override ECFieldElement Sqrt() - { - uint[] c = this.x; - if (Nat224.IsZero(c) || Nat224.IsOne(c)) - return this; - - uint[] nc = Nat224.Create(); - SecP224R1Field.Negate(c, nc); - - uint[] r = Mod.Random(SecP224R1Field.P); - uint[] t = Nat224.Create(); - - if (!IsSquare(c)) - return null; - - while (!TrySqrt(nc, r, t)) - { - SecP224R1Field.AddOne(r, r); - } - - SecP224R1Field.Square(t, r); - - return Nat224.Eq(c, r) ? new SecP224R1FieldElement(t) : null; - } - - public override bool Equals(object obj) - { - return Equals(obj as SecP224R1FieldElement); - } - - public override bool Equals(ECFieldElement other) - { - return Equals(other as SecP224R1FieldElement); - } - - public virtual bool Equals(SecP224R1FieldElement other) - { - if (this == other) - return true; - if (null == other) - return false; - return Nat224.Eq(x, other.x); - } - - public override int GetHashCode() - { - return Q.GetHashCode() ^ Arrays.GetHashCode(x, 0, 7); - } - - private static bool IsSquare(uint[] x) - { - uint[] t1 = Nat224.Create(); - uint[] t2 = Nat224.Create(); - Nat224.Copy(x, t1); - - for (int i = 0; i < 7; ++i) - { - Nat224.Copy(t1, t2); - SecP224R1Field.SquareN(t1, 1 << i, t1); - SecP224R1Field.Multiply(t1, t2, t1); - } - - SecP224R1Field.SquareN(t1, 95, t1); - return Nat224.IsOne(t1); - } - - private static void RM(uint[] nc, uint[] d0, uint[] e0, uint[] d1, uint[] e1, uint[] f1, uint[] t) - { - SecP224R1Field.Multiply(e1, e0, t); - SecP224R1Field.Multiply(t, nc, t); - SecP224R1Field.Multiply(d1, d0, f1); - SecP224R1Field.Add(f1, t, f1); - SecP224R1Field.Multiply(d1, e0, t); - Nat224.Copy(f1, d1); - SecP224R1Field.Multiply(e1, d0, e1); - SecP224R1Field.Add(e1, t, e1); - SecP224R1Field.Square(e1, f1); - SecP224R1Field.Multiply(f1, nc, f1); - } - - private static void RP(uint[] nc, uint[] d1, uint[] e1, uint[] f1, uint[] t) - { - Nat224.Copy(nc, f1); - - uint[] d0 = Nat224.Create(); - uint[] e0 = Nat224.Create(); - - for (int i = 0; i < 7; ++i) - { - Nat224.Copy(d1, d0); - Nat224.Copy(e1, e0); - - int j = 1 << i; - while (--j >= 0) - { - RS(d1, e1, f1, t); - } - - RM(nc, d0, e0, d1, e1, f1, t); - } - } - - private static void RS(uint[] d, uint[] e, uint[] f, uint[] t) - { - SecP224R1Field.Multiply(e, d, e); - SecP224R1Field.Twice(e, e); - SecP224R1Field.Square(d, t); - SecP224R1Field.Add(f, t, d); - SecP224R1Field.Multiply(f, t, f); - uint c = Nat.ShiftUpBits(7, f, 2, 0); - SecP224R1Field.Reduce32(c, f); - } - - private static bool TrySqrt(uint[] nc, uint[] r, uint[] t) - { - uint[] d1 = Nat224.Create(); - Nat224.Copy(r, d1); - uint[] e1 = Nat224.Create(); - e1[0] = 1; - uint[] f1 = Nat224.Create(); - RP(nc, d1, e1, f1, t); - - uint[] d0 = Nat224.Create(); - uint[] e0 = Nat224.Create(); - - for (int k = 1; k < 96; ++k) - { - Nat224.Copy(d1, d0); - Nat224.Copy(e1, e0); - - RS(d1, e1, f1, t); - - if (Nat224.IsZero(d1)) - { - Mod.Invert(SecP224R1Field.P, e0, t); - SecP224R1Field.Multiply(t, d0, t); - return true; - } - } - - return false; - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP224R1Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP224R1Point.cs deleted file mode 100644 index 73c4f19..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP224R1Point.cs +++ /dev/null @@ -1,279 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP224R1Point - : AbstractFpPoint - { - /** - * Create a point which encodes with point compression. - * - * @param curve - * the curve to use - * @param x - * affine x co-ordinate - * @param y - * affine y co-ordinate - * - * @deprecated Use ECCurve.createPoint to construct points - */ - public SecP224R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * Create a point that encodes with or without point compresion. - * - * @param curve - * the curve to use - * @param x - * affine x co-ordinate - * @param y - * affine y co-ordinate - * @param withCompression - * if true encode with point compression - * - * @deprecated per-point compression property will be removed, refer - * {@link #getEncoded(bool)} - */ - public SecP224R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecP224R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecP224R1Point(null, AffineXCoord, AffineYCoord); - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - if (this == b) - return Twice(); - - ECCurve curve = this.Curve; - - SecP224R1FieldElement X1 = (SecP224R1FieldElement)this.RawXCoord, Y1 = (SecP224R1FieldElement)this.RawYCoord; - SecP224R1FieldElement X2 = (SecP224R1FieldElement)b.RawXCoord, Y2 = (SecP224R1FieldElement)b.RawYCoord; - - SecP224R1FieldElement Z1 = (SecP224R1FieldElement)this.RawZCoords[0]; - SecP224R1FieldElement Z2 = (SecP224R1FieldElement)b.RawZCoords[0]; - - uint c; - uint[] tt1 = Nat224.CreateExt(); - uint[] t2 = Nat224.Create(); - uint[] t3 = Nat224.Create(); - uint[] t4 = Nat224.Create(); - - bool Z1IsOne = Z1.IsOne; - uint[] U2, S2; - if (Z1IsOne) - { - U2 = X2.x; - S2 = Y2.x; - } - else - { - S2 = t3; - SecP224R1Field.Square(Z1.x, S2); - - U2 = t2; - SecP224R1Field.Multiply(S2, X2.x, U2); - - SecP224R1Field.Multiply(S2, Z1.x, S2); - SecP224R1Field.Multiply(S2, Y2.x, S2); - } - - bool Z2IsOne = Z2.IsOne; - uint[] U1, S1; - if (Z2IsOne) - { - U1 = X1.x; - S1 = Y1.x; - } - else - { - S1 = t4; - SecP224R1Field.Square(Z2.x, S1); - - U1 = tt1; - SecP224R1Field.Multiply(S1, X1.x, U1); - - SecP224R1Field.Multiply(S1, Z2.x, S1); - SecP224R1Field.Multiply(S1, Y1.x, S1); - } - - uint[] H = Nat224.Create(); - SecP224R1Field.Subtract(U1, U2, H); - - uint[] R = t2; - SecP224R1Field.Subtract(S1, S2, R); - - // Check if b == this or b == -this - if (Nat224.IsZero(H)) - { - if (Nat224.IsZero(R)) - { - // this == b, i.e. this must be doubled - return this.Twice(); - } - - // this == -b, i.e. the result is the point at infinity - return curve.Infinity; - } - - uint[] HSquared = t3; - SecP224R1Field.Square(H, HSquared); - - uint[] G = Nat224.Create(); - SecP224R1Field.Multiply(HSquared, H, G); - - uint[] V = t3; - SecP224R1Field.Multiply(HSquared, U1, V); - - SecP224R1Field.Negate(G, G); - Nat224.Mul(S1, G, tt1); - - c = Nat224.AddBothTo(V, V, G); - SecP224R1Field.Reduce32(c, G); - - SecP224R1FieldElement X3 = new SecP224R1FieldElement(t4); - SecP224R1Field.Square(R, X3.x); - SecP224R1Field.Subtract(X3.x, G, X3.x); - - SecP224R1FieldElement Y3 = new SecP224R1FieldElement(G); - SecP224R1Field.Subtract(V, X3.x, Y3.x); - SecP224R1Field.MultiplyAddToExt(Y3.x, R, tt1); - SecP224R1Field.Reduce(tt1, Y3.x); - - SecP224R1FieldElement Z3 = new SecP224R1FieldElement(H); - if (!Z1IsOne) - { - SecP224R1Field.Multiply(Z3.x, Z1.x, Z3.x); - } - if (!Z2IsOne) - { - SecP224R1Field.Multiply(Z3.x, Z2.x, Z3.x); - } - - ECFieldElement[] zs = new ECFieldElement[] { Z3 }; - - return new SecP224R1Point(curve, X3, Y3, zs, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - SecP224R1FieldElement Y1 = (SecP224R1FieldElement)this.RawYCoord; - if (Y1.IsZero) - return curve.Infinity; - - SecP224R1FieldElement X1 = (SecP224R1FieldElement)this.RawXCoord, Z1 = (SecP224R1FieldElement)this.RawZCoords[0]; - - uint c; - uint[] t1 = Nat224.Create(); - uint[] t2 = Nat224.Create(); - - uint[] Y1Squared = Nat224.Create(); - SecP224R1Field.Square(Y1.x, Y1Squared); - - uint[] T = Nat224.Create(); - SecP224R1Field.Square(Y1Squared, T); - - bool Z1IsOne = Z1.IsOne; - - uint[] Z1Squared = Z1.x; - if (!Z1IsOne) - { - Z1Squared = t2; - SecP224R1Field.Square(Z1.x, Z1Squared); - } - - SecP224R1Field.Subtract(X1.x, Z1Squared, t1); - - uint[] M = t2; - SecP224R1Field.Add(X1.x, Z1Squared, M); - SecP224R1Field.Multiply(M, t1, M); - c = Nat224.AddBothTo(M, M, M); - SecP224R1Field.Reduce32(c, M); - - uint[] S = Y1Squared; - SecP224R1Field.Multiply(Y1Squared, X1.x, S); - c = Nat.ShiftUpBits(7, S, 2, 0); - SecP224R1Field.Reduce32(c, S); - - c = Nat.ShiftUpBits(7, T, 3, 0, t1); - SecP224R1Field.Reduce32(c, t1); - - SecP224R1FieldElement X3 = new SecP224R1FieldElement(T); - SecP224R1Field.Square(M, X3.x); - SecP224R1Field.Subtract(X3.x, S, X3.x); - SecP224R1Field.Subtract(X3.x, S, X3.x); - - SecP224R1FieldElement Y3 = new SecP224R1FieldElement(S); - SecP224R1Field.Subtract(S, X3.x, Y3.x); - SecP224R1Field.Multiply(Y3.x, M, Y3.x); - SecP224R1Field.Subtract(Y3.x, t1, Y3.x); - - SecP224R1FieldElement Z3 = new SecP224R1FieldElement(M); - SecP224R1Field.Twice(Y1.x, Z3.x); - if (!Z1IsOne) - { - SecP224R1Field.Multiply(Z3.x, Z1.x, Z3.x); - } - - return new SecP224R1Point(curve, X3, Y3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this == b) - return ThreeTimes(); - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECFieldElement Y1 = this.RawYCoord; - if (Y1.IsZero) - return b; - - return Twice().Add(b); - } - - public override ECPoint ThreeTimes() - { - if (this.IsInfinity || this.RawYCoord.IsZero) - return this; - - // NOTE: Be careful about recursions between TwicePlus and ThreeTimes - return Twice().Add(this); - } - - public override ECPoint Negate() - { - if (IsInfinity) - return this; - - return new SecP224R1Point(Curve, RawXCoord, RawYCoord.Negate(), RawZCoords, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP256K1Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP256K1Curve.cs deleted file mode 100644 index 59e2cef..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP256K1Curve.cs +++ /dev/null @@ -1,75 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP256K1Curve - : AbstractFpCurve - { - public static readonly BigInteger q = new BigInteger(1, - Hex.Decode("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFC2F")); - - private const int SECP256K1_DEFAULT_COORDS = COORD_JACOBIAN; - - protected readonly SecP256K1Point m_infinity; - - public SecP256K1Curve() - : base(q) - { - this.m_infinity = new SecP256K1Point(this, null, null); - - this.m_a = FromBigInteger(BigInteger.Zero); - this.m_b = FromBigInteger(BigInteger.ValueOf(7)); - this.m_order = new BigInteger(1, Hex.Decode("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364141")); - this.m_cofactor = BigInteger.One; - this.m_coord = SECP256K1_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecP256K1Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_JACOBIAN: - return true; - default: - return false; - } - } - - public virtual BigInteger Q - { - get { return q; } - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return q.BitLength; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecP256K1FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecP256K1Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecP256K1Point(this, x, y, zs, withCompression); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP256K1Field.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP256K1Field.cs deleted file mode 100644 index b0646e9..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP256K1Field.cs +++ /dev/null @@ -1,180 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP256K1Field - { - // 2^256 - 2^32 - 2^9 - 2^8 - 2^7 - 2^6 - 2^4 - 1 - internal static readonly uint[] P = new uint[]{ 0xFFFFFC2F, 0xFFFFFFFE, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, - 0xFFFFFFFF, 0xFFFFFFFF }; - internal static readonly uint[] PExt = new uint[]{ 0x000E90A1, 0x000007A2, 0x00000001, 0x00000000, 0x00000000, - 0x00000000, 0x00000000, 0x00000000, 0xFFFFF85E, 0xFFFFFFFD, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, - 0xFFFFFFFF, 0xFFFFFFFF }; - private static readonly uint[] PExtInv = new uint[]{ 0xFFF16F5F, 0xFFFFF85D, 0xFFFFFFFE, 0xFFFFFFFF, 0xFFFFFFFF, - 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0x000007A1, 0x00000002 }; - private const uint P7 = 0xFFFFFFFF; - private const uint PExt15 = 0xFFFFFFFF; - private const uint PInv33 = 0x3D1; - - public static void Add(uint[] x, uint[] y, uint[] z) - { - uint c = Nat256.Add(x, y, z); - if (c != 0 || (z[7] == P7 && Nat256.Gte(z, P))) - { - Nat.Add33To(8, PInv33, z); - } - } - - public static void AddExt(uint[] xx, uint[] yy, uint[] zz) - { - uint c = Nat.Add(16, xx, yy, zz); - if (c != 0 || (zz[15] == PExt15 && Nat.Gte(16, zz, PExt))) - { - if (Nat.AddTo(PExtInv.Length, PExtInv, zz) != 0) - { - Nat.IncAt(16, zz, PExtInv.Length); - } - } - } - - public static void AddOne(uint[] x, uint[] z) - { - uint c = Nat.Inc(8, x, z); - if (c != 0 || (z[7] == P7 && Nat256.Gte(z, P))) - { - Nat.Add33To(8, PInv33, z); - } - } - - public static uint[] FromBigInteger(BigInteger x) - { - uint[] z = Nat256.FromBigInteger(x); - if (z[7] == P7 && Nat256.Gte(z, P)) - { - Nat256.SubFrom(P, z); - } - return z; - } - - public static void Half(uint[] x, uint[] z) - { - if ((x[0] & 1) == 0) - { - Nat.ShiftDownBit(8, x, 0, z); - } - else - { - uint c = Nat256.Add(x, P, z); - Nat.ShiftDownBit(8, z, c); - } - } - - public static void Multiply(uint[] x, uint[] y, uint[] z) - { - uint[] tt = Nat256.CreateExt(); - Nat256.Mul(x, y, tt); - Reduce(tt, z); - } - - public static void MultiplyAddToExt(uint[] x, uint[] y, uint[] zz) - { - uint c = Nat256.MulAddTo(x, y, zz); - if (c != 0 || (zz[15] == PExt15 && Nat.Gte(16, zz, PExt))) - { - if (Nat.AddTo(PExtInv.Length, PExtInv, zz) != 0) - { - Nat.IncAt(16, zz, PExtInv.Length); - } - } - } - - public static void Negate(uint[] x, uint[] z) - { - if (Nat256.IsZero(x)) - { - Nat256.Zero(z); - } - else - { - Nat256.Sub(P, x, z); - } - } - - public static void Reduce(uint[] xx, uint[] z) - { - ulong cc = Nat256.Mul33Add(PInv33, xx, 8, xx, 0, z, 0); - uint c = Nat256.Mul33DWordAdd(PInv33, cc, z, 0); - - Debug.Assert(c == 0 || c == 1); - - if (c != 0 || (z[7] == P7 && Nat256.Gte(z, P))) - { - Nat.Add33To(8, PInv33, z); - } - } - - public static void Reduce32(uint x, uint[] z) - { - if ((x != 0 && Nat256.Mul33WordAdd(PInv33, x, z, 0) != 0) - || (z[7] == P7 && Nat256.Gte(z, P))) - { - Nat.Add33To(8, PInv33, z); - } - } - - public static void Square(uint[] x, uint[] z) - { - uint[] tt = Nat256.CreateExt(); - Nat256.Square(x, tt); - Reduce(tt, z); - } - - public static void SquareN(uint[] x, int n, uint[] z) - { - Debug.Assert(n > 0); - - uint[] tt = Nat256.CreateExt(); - Nat256.Square(x, tt); - Reduce(tt, z); - - while (--n > 0) - { - Nat256.Square(z, tt); - Reduce(tt, z); - } - } - - public static void Subtract(uint[] x, uint[] y, uint[] z) - { - int c = Nat256.Sub(x, y, z); - if (c != 0) - { - Nat.Sub33From(8, PInv33, z); - } - } - - public static void SubtractExt(uint[] xx, uint[] yy, uint[] zz) - { - int c = Nat.Sub(16, xx, yy, zz); - if (c != 0) - { - if (Nat.SubFrom(PExtInv.Length, PExtInv, zz) != 0) - { - Nat.DecAt(16, zz, PExtInv.Length); - } - } - } - - public static void Twice(uint[] x, uint[] z) - { - uint c = Nat.ShiftUpBit(8, x, 0, z); - if (c != 0 || (z[7] == P7 && Nat256.Gte(z, P))) - { - Nat.Add33To(8, PInv33, z); - } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP256K1FieldElement.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP256K1FieldElement.cs deleted file mode 100644 index 473113d..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP256K1FieldElement.cs +++ /dev/null @@ -1,214 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Math.Raw; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP256K1FieldElement - : ECFieldElement - { - public static readonly BigInteger Q = SecP256K1Curve.q; - - protected internal readonly uint[] x; - - public SecP256K1FieldElement(BigInteger x) - { - if (x == null || x.SignValue < 0 || x.CompareTo(Q) >= 0) - throw new ArgumentException("value invalid for SecP256K1FieldElement", "x"); - - this.x = SecP256K1Field.FromBigInteger(x); - } - - public SecP256K1FieldElement() - { - this.x = Nat256.Create(); - } - - protected internal SecP256K1FieldElement(uint[] x) - { - this.x = x; - } - - public override bool IsZero - { - get { return Nat256.IsZero(x); } - } - - public override bool IsOne - { - get { return Nat256.IsOne(x); } - } - - public override bool TestBitZero() - { - return Nat256.GetBit(x, 0) == 1; - } - - public override BigInteger ToBigInteger() - { - return Nat256.ToBigInteger(x); - } - - public override string FieldName - { - get { return "SecP256K1Field"; } - } - - public override int FieldSize - { - get { return Q.BitLength; } - } - - public override ECFieldElement Add(ECFieldElement b) - { - uint[] z = Nat256.Create(); - SecP256K1Field.Add(x, ((SecP256K1FieldElement)b).x, z); - return new SecP256K1FieldElement(z); - } - - public override ECFieldElement AddOne() - { - uint[] z = Nat256.Create(); - SecP256K1Field.AddOne(x, z); - return new SecP256K1FieldElement(z); - } - - public override ECFieldElement Subtract(ECFieldElement b) - { - uint[] z = Nat256.Create(); - SecP256K1Field.Subtract(x, ((SecP256K1FieldElement)b).x, z); - return new SecP256K1FieldElement(z); - } - - public override ECFieldElement Multiply(ECFieldElement b) - { - uint[] z = Nat256.Create(); - SecP256K1Field.Multiply(x, ((SecP256K1FieldElement)b).x, z); - return new SecP256K1FieldElement(z); - } - - public override ECFieldElement Divide(ECFieldElement b) - { - //return Multiply(b.Invert()); - uint[] z = Nat256.Create(); - Mod.Invert(SecP256K1Field.P, ((SecP256K1FieldElement)b).x, z); - SecP256K1Field.Multiply(z, x, z); - return new SecP256K1FieldElement(z); - } - - public override ECFieldElement Negate() - { - uint[] z = Nat256.Create(); - SecP256K1Field.Negate(x, z); - return new SecP256K1FieldElement(z); - } - - public override ECFieldElement Square() - { - uint[] z = Nat256.Create(); - SecP256K1Field.Square(x, z); - return new SecP256K1FieldElement(z); - } - - public override ECFieldElement Invert() - { - //return new SecP256K1FieldElement(ToBigInteger().ModInverse(Q)); - uint[] z = Nat256.Create(); - Mod.Invert(SecP256K1Field.P, x, z); - return new SecP256K1FieldElement(z); - } - - /** - * return a sqrt root - the routine verifies that the calculation returns the right value - if - * none exists it returns null. - */ - public override ECFieldElement Sqrt() - { - /* - * Raise this element to the exponent 2^254 - 2^30 - 2^7 - 2^6 - 2^5 - 2^4 - 2^2 - * - * Breaking up the exponent's binary representation into "repunits", we get: - * { 223 1s } { 1 0s } { 22 1s } { 4 0s } { 2 1s } { 2 0s} - * - * Therefore we need an addition chain containing 2, 22, 223 (the lengths of the repunits) - * We use: 1, [2], 3, 6, 9, 11, [22], 44, 88, 176, 220, [223] - */ - - uint[] x1 = this.x; - if (Nat256.IsZero(x1) || Nat256.IsOne(x1)) - return this; - - uint[] x2 = Nat256.Create(); - SecP256K1Field.Square(x1, x2); - SecP256K1Field.Multiply(x2, x1, x2); - uint[] x3 = Nat256.Create(); - SecP256K1Field.Square(x2, x3); - SecP256K1Field.Multiply(x3, x1, x3); - uint[] x6 = Nat256.Create(); - SecP256K1Field.SquareN(x3, 3, x6); - SecP256K1Field.Multiply(x6, x3, x6); - uint[] x9 = x6; - SecP256K1Field.SquareN(x6, 3, x9); - SecP256K1Field.Multiply(x9, x3, x9); - uint[] x11 = x9; - SecP256K1Field.SquareN(x9, 2, x11); - SecP256K1Field.Multiply(x11, x2, x11); - uint[] x22 = Nat256.Create(); - SecP256K1Field.SquareN(x11, 11, x22); - SecP256K1Field.Multiply(x22, x11, x22); - uint[] x44 = x11; - SecP256K1Field.SquareN(x22, 22, x44); - SecP256K1Field.Multiply(x44, x22, x44); - uint[] x88 = Nat256.Create(); - SecP256K1Field.SquareN(x44, 44, x88); - SecP256K1Field.Multiply(x88, x44, x88); - uint[] x176 = Nat256.Create(); - SecP256K1Field.SquareN(x88, 88, x176); - SecP256K1Field.Multiply(x176, x88, x176); - uint[] x220 = x88; - SecP256K1Field.SquareN(x176, 44, x220); - SecP256K1Field.Multiply(x220, x44, x220); - uint[] x223 = x44; - SecP256K1Field.SquareN(x220, 3, x223); - SecP256K1Field.Multiply(x223, x3, x223); - - uint[] t1 = x223; - SecP256K1Field.SquareN(t1, 23, t1); - SecP256K1Field.Multiply(t1, x22, t1); - SecP256K1Field.SquareN(t1, 6, t1); - SecP256K1Field.Multiply(t1, x2, t1); - SecP256K1Field.SquareN(t1, 2, t1); - - uint[] t2 = x2; - SecP256K1Field.Square(t1, t2); - - return Nat256.Eq(x1, t2) ? new SecP256K1FieldElement(t1) : null; - } - - public override bool Equals(object obj) - { - return Equals(obj as SecP256K1FieldElement); - } - - public override bool Equals(ECFieldElement other) - { - return Equals(other as SecP256K1FieldElement); - } - - public virtual bool Equals(SecP256K1FieldElement other) - { - if (this == other) - return true; - if (null == other) - return false; - return Nat256.Eq(x, other.x); - } - - public override int GetHashCode() - { - return Q.GetHashCode() ^ Arrays.GetHashCode(x, 0, 8); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP256K1Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP256K1Point.cs deleted file mode 100644 index 072a0b9..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP256K1Point.cs +++ /dev/null @@ -1,267 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP256K1Point - : AbstractFpPoint - { - /** - * Create a point which encodes with point compression. - * - * @param curve - * the curve to use - * @param x - * affine x co-ordinate - * @param y - * affine y co-ordinate - * - * @deprecated Use ECCurve.createPoint to construct points - */ - public SecP256K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * Create a point that encodes with or without point compresion. - * - * @param curve - * the curve to use - * @param x - * affine x co-ordinate - * @param y - * affine y co-ordinate - * @param withCompression - * if true encode with point compression - * - * @deprecated per-point compression property will be removed, refer - * {@link #getEncoded(bool)} - */ - public SecP256K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecP256K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, - bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecP256K1Point(null, AffineXCoord, AffineYCoord); - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - if (this == b) - return Twice(); - - ECCurve curve = this.Curve; - - SecP256K1FieldElement X1 = (SecP256K1FieldElement)this.RawXCoord, Y1 = (SecP256K1FieldElement)this.RawYCoord; - SecP256K1FieldElement X2 = (SecP256K1FieldElement)b.RawXCoord, Y2 = (SecP256K1FieldElement)b.RawYCoord; - - SecP256K1FieldElement Z1 = (SecP256K1FieldElement)this.RawZCoords[0]; - SecP256K1FieldElement Z2 = (SecP256K1FieldElement)b.RawZCoords[0]; - - uint c; - uint[] tt1 = Nat256.CreateExt(); - uint[] t2 = Nat256.Create(); - uint[] t3 = Nat256.Create(); - uint[] t4 = Nat256.Create(); - - bool Z1IsOne = Z1.IsOne; - uint[] U2, S2; - if (Z1IsOne) - { - U2 = X2.x; - S2 = Y2.x; - } - else - { - S2 = t3; - SecP256K1Field.Square(Z1.x, S2); - - U2 = t2; - SecP256K1Field.Multiply(S2, X2.x, U2); - - SecP256K1Field.Multiply(S2, Z1.x, S2); - SecP256K1Field.Multiply(S2, Y2.x, S2); - } - - bool Z2IsOne = Z2.IsOne; - uint[] U1, S1; - if (Z2IsOne) - { - U1 = X1.x; - S1 = Y1.x; - } - else - { - S1 = t4; - SecP256K1Field.Square(Z2.x, S1); - - U1 = tt1; - SecP256K1Field.Multiply(S1, X1.x, U1); - - SecP256K1Field.Multiply(S1, Z2.x, S1); - SecP256K1Field.Multiply(S1, Y1.x, S1); - } - - uint[] H = Nat256.Create(); - SecP256K1Field.Subtract(U1, U2, H); - - uint[] R = t2; - SecP256K1Field.Subtract(S1, S2, R); - - // Check if b == this or b == -this - if (Nat256.IsZero(H)) - { - if (Nat256.IsZero(R)) - { - // this == b, i.e. this must be doubled - return this.Twice(); - } - - // this == -b, i.e. the result is the point at infinity - return curve.Infinity; - } - - uint[] HSquared = t3; - SecP256K1Field.Square(H, HSquared); - - uint[] G = Nat256.Create(); - SecP256K1Field.Multiply(HSquared, H, G); - - uint[] V = t3; - SecP256K1Field.Multiply(HSquared, U1, V); - - SecP256K1Field.Negate(G, G); - Nat256.Mul(S1, G, tt1); - - c = Nat256.AddBothTo(V, V, G); - SecP256K1Field.Reduce32(c, G); - - SecP256K1FieldElement X3 = new SecP256K1FieldElement(t4); - SecP256K1Field.Square(R, X3.x); - SecP256K1Field.Subtract(X3.x, G, X3.x); - - SecP256K1FieldElement Y3 = new SecP256K1FieldElement(G); - SecP256K1Field.Subtract(V, X3.x, Y3.x); - SecP256K1Field.MultiplyAddToExt(Y3.x, R, tt1); - SecP256K1Field.Reduce(tt1, Y3.x); - - SecP256K1FieldElement Z3 = new SecP256K1FieldElement(H); - if (!Z1IsOne) - { - SecP256K1Field.Multiply(Z3.x, Z1.x, Z3.x); - } - if (!Z2IsOne) - { - SecP256K1Field.Multiply(Z3.x, Z2.x, Z3.x); - } - - ECFieldElement[] zs = new ECFieldElement[] { Z3 }; - - return new SecP256K1Point(curve, X3, Y3, zs, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - SecP256K1FieldElement Y1 = (SecP256K1FieldElement)this.RawYCoord; - if (Y1.IsZero) - return curve.Infinity; - - SecP256K1FieldElement X1 = (SecP256K1FieldElement)this.RawXCoord, Z1 = (SecP256K1FieldElement)this.RawZCoords[0]; - - uint c; - - uint[] Y1Squared = Nat256.Create(); - SecP256K1Field.Square(Y1.x, Y1Squared); - - uint[] T = Nat256.Create(); - SecP256K1Field.Square(Y1Squared, T); - - uint[] M = Nat256.Create(); - SecP256K1Field.Square(X1.x, M); - c = Nat256.AddBothTo(M, M, M); - SecP256K1Field.Reduce32(c, M); - - uint[] S = Y1Squared; - SecP256K1Field.Multiply(Y1Squared, X1.x, S); - c = Nat.ShiftUpBits(8, S, 2, 0); - SecP256K1Field.Reduce32(c, S); - - uint[] t1 = Nat256.Create(); - c = Nat.ShiftUpBits(8, T, 3, 0, t1); - SecP256K1Field.Reduce32(c, t1); - - SecP256K1FieldElement X3 = new SecP256K1FieldElement(T); - SecP256K1Field.Square(M, X3.x); - SecP256K1Field.Subtract(X3.x, S, X3.x); - SecP256K1Field.Subtract(X3.x, S, X3.x); - - SecP256K1FieldElement Y3 = new SecP256K1FieldElement(S); - SecP256K1Field.Subtract(S, X3.x, Y3.x); - SecP256K1Field.Multiply(Y3.x, M, Y3.x); - SecP256K1Field.Subtract(Y3.x, t1, Y3.x); - - SecP256K1FieldElement Z3 = new SecP256K1FieldElement(M); - SecP256K1Field.Twice(Y1.x, Z3.x); - if (!Z1.IsOne) - { - SecP256K1Field.Multiply(Z3.x, Z1.x, Z3.x); - } - - return new SecP256K1Point(curve, X3, Y3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this == b) - return ThreeTimes(); - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECFieldElement Y1 = this.RawYCoord; - if (Y1.IsZero) - return b; - - return Twice().Add(b); - } - - public override ECPoint ThreeTimes() - { - if (this.IsInfinity || this.RawYCoord.IsZero) - return this; - - // NOTE: Be careful about recursions between TwicePlus and ThreeTimes - return Twice().Add(this); - } - - public override ECPoint Negate() - { - if (IsInfinity) - return this; - - return new SecP256K1Point(Curve, RawXCoord, RawYCoord.Negate(), RawZCoords, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP256R1Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP256R1Curve.cs deleted file mode 100644 index 6b3448f..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP256R1Curve.cs +++ /dev/null @@ -1,77 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP256R1Curve - : AbstractFpCurve - { - public static readonly BigInteger q = new BigInteger(1, - Hex.Decode("FFFFFFFF00000001000000000000000000000000FFFFFFFFFFFFFFFFFFFFFFFF")); - - private const int SecP256R1_DEFAULT_COORDS = COORD_JACOBIAN; - - protected readonly SecP256R1Point m_infinity; - - public SecP256R1Curve() - : base(q) - { - this.m_infinity = new SecP256R1Point(this, null, null); - - this.m_a = FromBigInteger(new BigInteger(1, - Hex.Decode("FFFFFFFF00000001000000000000000000000000FFFFFFFFFFFFFFFFFFFFFFFC"))); - this.m_b = FromBigInteger(new BigInteger(1, - Hex.Decode("5AC635D8AA3A93E7B3EBBD55769886BC651D06B0CC53B0F63BCE3C3E27D2604B"))); - this.m_order = new BigInteger(1, Hex.Decode("FFFFFFFF00000000FFFFFFFFFFFFFFFFBCE6FAADA7179E84F3B9CAC2FC632551")); - this.m_cofactor = BigInteger.One; - this.m_coord = SecP256R1_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecP256R1Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_JACOBIAN: - return true; - default: - return false; - } - } - - public virtual BigInteger Q - { - get { return q; } - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return q.BitLength; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecP256R1FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecP256R1Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecP256R1Point(this, x, y, zs, withCompression); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP256R1Field.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP256R1Field.cs deleted file mode 100644 index 5b3de6d..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP256R1Field.cs +++ /dev/null @@ -1,312 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP256R1Field - { - // 2^256 - 2^224 + 2^192 + 2^96 - 1 - internal static readonly uint[] P = new uint[]{ 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0x00000000, 0x00000000, 0x00000000, - 0x00000001, 0xFFFFFFFF }; - internal static readonly uint[] PExt = new uint[]{ 0x00000001, 0x00000000, 0x00000000, 0xFFFFFFFE, 0xFFFFFFFF, - 0xFFFFFFFF, 0xFFFFFFFE, 0x00000001, 0xFFFFFFFE, 0x00000001, 0xFFFFFFFE, 0x00000001, 0x00000001, 0xFFFFFFFE, - 0x00000002, 0xFFFFFFFE }; - internal const uint P7 = 0xFFFFFFFF; - internal const uint PExt15 = 0xFFFFFFFE; - - public static void Add(uint[] x, uint[] y, uint[] z) - { - uint c = Nat256.Add(x, y, z); - if (c != 0 || (z[7] == P7 && Nat256.Gte(z, P))) - { - AddPInvTo(z); - } - } - - public static void AddExt(uint[] xx, uint[] yy, uint[] zz) - { - uint c = Nat.Add(16, xx, yy, zz); - if (c != 0 || (zz[15] >= PExt15 && Nat.Gte(16, zz, PExt))) - { - Nat.SubFrom(16, PExt, zz); - } - } - - public static void AddOne(uint[] x, uint[] z) - { - uint c = Nat.Inc(8, x, z); - if (c != 0 || (z[7] == P7 && Nat256.Gte(z, P))) - { - AddPInvTo(z); - } - } - - public static uint[] FromBigInteger(BigInteger x) - { - uint[] z = Nat256.FromBigInteger(x); - if (z[7] == P7 && Nat256.Gte(z, P)) - { - Nat256.SubFrom(P, z); - } - return z; - } - - public static void Half(uint[] x, uint[] z) - { - if ((x[0] & 1) == 0) - { - Nat.ShiftDownBit(8, x, 0, z); - } - else - { - uint c = Nat256.Add(x, P, z); - Nat.ShiftDownBit(8, z, c); - } - } - - public static void Multiply(uint[] x, uint[] y, uint[] z) - { - uint[] tt = Nat256.CreateExt(); - Nat256.Mul(x, y, tt); - Reduce(tt, z); - } - - public static void MultiplyAddToExt(uint[] x, uint[] y, uint[] zz) - { - uint c = Nat256.MulAddTo(x, y, zz); - if (c != 0 || (zz[15] >= PExt15 && Nat.Gte(16, zz, PExt))) - { - Nat.SubFrom(16, PExt, zz); - } - } - - public static void Negate(uint[] x, uint[] z) - { - if (Nat256.IsZero(x)) - { - Nat256.Zero(z); - } - else - { - Nat256.Sub(P, x, z); - } - } - - public static void Reduce(uint[] xx, uint[] z) - { - long xx08 = xx[8], xx09 = xx[9], xx10 = xx[10], xx11 = xx[11]; - long xx12 = xx[12], xx13 = xx[13], xx14 = xx[14], xx15 = xx[15]; - - const long n = 6; - - xx08 -= n; - - long t0 = xx08 + xx09; - long t1 = xx09 + xx10; - long t2 = xx10 + xx11 - xx15; - long t3 = xx11 + xx12; - long t4 = xx12 + xx13; - long t5 = xx13 + xx14; - long t6 = xx14 + xx15; - long t7 = t5 - t0; - - long cc = 0; - cc += (long)xx[0] - t3 - t7; - z[0] = (uint)cc; - cc >>= 32; - cc += (long)xx[1] + t1 - t4 - t6; - z[1] = (uint)cc; - cc >>= 32; - cc += (long)xx[2] + t2 - t5; - z[2] = (uint)cc; - cc >>= 32; - cc += (long)xx[3] + (t3 << 1) + t7 - t6; - z[3] = (uint)cc; - cc >>= 32; - cc += (long)xx[4] + (t4 << 1) + xx14 - t1; - z[4] = (uint)cc; - cc >>= 32; - cc += (long)xx[5] + (t5 << 1) - t2; - z[5] = (uint)cc; - cc >>= 32; - cc += (long)xx[6] + (t6 << 1) + t7; - z[6] = (uint)cc; - cc >>= 32; - cc += (long)xx[7] + (xx15 << 1) + xx08 - t2 - t4; - z[7] = (uint)cc; - cc >>= 32; - cc += n; - - Debug.Assert(cc >= 0); - - Reduce32((uint)cc, z); - } - - public static void Reduce32(uint x, uint[] z) - { - long cc = 0; - - if (x != 0) - { - long xx08 = x; - - cc += (long)z[0] + xx08; - z[0] = (uint)cc; - cc >>= 32; - if (cc != 0) - { - cc += (long)z[1]; - z[1] = (uint)cc; - cc >>= 32; - cc += (long)z[2]; - z[2] = (uint)cc; - cc >>= 32; - } - cc += (long)z[3] - xx08; - z[3] = (uint)cc; - cc >>= 32; - if (cc != 0) - { - cc += (long)z[4]; - z[4] = (uint)cc; - cc >>= 32; - cc += (long)z[5]; - z[5] = (uint)cc; - cc >>= 32; - } - cc += (long)z[6] - xx08; - z[6] = (uint)cc; - cc >>= 32; - cc += (long)z[7] + xx08; - z[7] = (uint)cc; - cc >>= 32; - - Debug.Assert(cc == 0 || cc == 1); - } - - if (cc != 0 || (z[7] == P7 && Nat256.Gte(z, P))) - { - AddPInvTo(z); - } - } - - public static void Square(uint[] x, uint[] z) - { - uint[] tt = Nat256.CreateExt(); - Nat256.Square(x, tt); - Reduce(tt, z); - } - - public static void SquareN(uint[] x, int n, uint[] z) - { - Debug.Assert(n > 0); - - uint[] tt = Nat256.CreateExt(); - Nat256.Square(x, tt); - Reduce(tt, z); - - while (--n > 0) - { - Nat256.Square(z, tt); - Reduce(tt, z); - } - } - - public static void Subtract(uint[] x, uint[] y, uint[] z) - { - int c = Nat256.Sub(x, y, z); - if (c != 0) - { - SubPInvFrom(z); - } - } - - public static void SubtractExt(uint[] xx, uint[] yy, uint[] zz) - { - int c = Nat.Sub(16, xx, yy, zz); - if (c != 0) - { - Nat.AddTo(16, PExt, zz); - } - } - - public static void Twice(uint[] x, uint[] z) - { - uint c = Nat.ShiftUpBit(8, x, 0, z); - if (c != 0 || (z[7] == P7 && Nat256.Gte(z, P))) - { - AddPInvTo(z); - } - } - - private static void AddPInvTo(uint[] z) - { - long c = (long)z[0] + 1; - z[0] = (uint)c; - c >>= 32; - if (c != 0) - { - c += (long)z[1]; - z[1] = (uint)c; - c >>= 32; - c += (long)z[2]; - z[2] = (uint)c; - c >>= 32; - } - c += (long)z[3] - 1; - z[3] = (uint)c; - c >>= 32; - if (c != 0) - { - c += (long)z[4]; - z[4] = (uint)c; - c >>= 32; - c += (long)z[5]; - z[5] = (uint)c; - c >>= 32; - } - c += (long)z[6] - 1; - z[6] = (uint)c; - c >>= 32; - c += (long)z[7] + 1; - z[7] = (uint)c; - //c >>= 32; - } - - private static void SubPInvFrom(uint[] z) - { - long c = (long)z[0] - 1; - z[0] = (uint)c; - c >>= 32; - if (c != 0) - { - c += (long)z[1]; - z[1] = (uint)c; - c >>= 32; - c += (long)z[2]; - z[2] = (uint)c; - c >>= 32; - } - c += (long)z[3] + 1; - z[3] = (uint)c; - c >>= 32; - if (c != 0) - { - c += (long)z[4]; - z[4] = (uint)c; - c >>= 32; - c += (long)z[5]; - z[5] = (uint)c; - c >>= 32; - } - c += (long)z[6] + 1; - z[6] = (uint)c; - c >>= 32; - c += (long)z[7] - 1; - z[7] = (uint)c; - //c >>= 32; - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP256R1FieldElement.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP256R1FieldElement.cs deleted file mode 100644 index d7838ae..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP256R1FieldElement.cs +++ /dev/null @@ -1,188 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP256R1FieldElement - : ECFieldElement - { - public static readonly BigInteger Q = SecP256R1Curve.q; - - protected internal readonly uint[] x; - - public SecP256R1FieldElement(BigInteger x) - { - if (x == null || x.SignValue < 0 || x.CompareTo(Q) >= 0) - throw new ArgumentException("value invalid for SecP256R1FieldElement", "x"); - - this.x = SecP256R1Field.FromBigInteger(x); - } - - public SecP256R1FieldElement() - { - this.x = Nat256.Create(); - } - - protected internal SecP256R1FieldElement(uint[] x) - { - this.x = x; - } - - public override bool IsZero - { - get { return Nat256.IsZero(x); } - } - - public override bool IsOne - { - get { return Nat256.IsOne(x); } - } - - public override bool TestBitZero() - { - return Nat256.GetBit(x, 0) == 1; - } - - public override BigInteger ToBigInteger() - { - return Nat256.ToBigInteger(x); - } - - public override string FieldName - { - get { return "SecP256R1Field"; } - } - - public override int FieldSize - { - get { return Q.BitLength; } - } - - public override ECFieldElement Add(ECFieldElement b) - { - uint[] z = Nat256.Create(); - SecP256R1Field.Add(x, ((SecP256R1FieldElement)b).x, z); - return new SecP256R1FieldElement(z); - } - - public override ECFieldElement AddOne() - { - uint[] z = Nat256.Create(); - SecP256R1Field.AddOne(x, z); - return new SecP256R1FieldElement(z); - } - - public override ECFieldElement Subtract(ECFieldElement b) - { - uint[] z = Nat256.Create(); - SecP256R1Field.Subtract(x, ((SecP256R1FieldElement)b).x, z); - return new SecP256R1FieldElement(z); - } - - public override ECFieldElement Multiply(ECFieldElement b) - { - uint[] z = Nat256.Create(); - SecP256R1Field.Multiply(x, ((SecP256R1FieldElement)b).x, z); - return new SecP256R1FieldElement(z); - } - - public override ECFieldElement Divide(ECFieldElement b) - { - //return Multiply(b.Invert()); - uint[] z = Nat256.Create(); - Mod.Invert(SecP256R1Field.P, ((SecP256R1FieldElement)b).x, z); - SecP256R1Field.Multiply(z, x, z); - return new SecP256R1FieldElement(z); - } - - public override ECFieldElement Negate() - { - uint[] z = Nat256.Create(); - SecP256R1Field.Negate(x, z); - return new SecP256R1FieldElement(z); - } - - public override ECFieldElement Square() - { - uint[] z = Nat256.Create(); - SecP256R1Field.Square(x, z); - return new SecP256R1FieldElement(z); - } - - public override ECFieldElement Invert() - { - //return new SecP256R1FieldElement(ToBigInteger().ModInverse(Q)); - uint[] z = Nat256.Create(); - Mod.Invert(SecP256R1Field.P, x, z); - return new SecP256R1FieldElement(z); - } - - /** - * return a sqrt root - the routine verifies that the calculation returns the right value - if - * none exists it returns null. - */ - public override ECFieldElement Sqrt() - { - // Raise this element to the exponent 2^254 - 2^222 + 2^190 + 2^94 - - uint[] x1 = this.x; - if (Nat256.IsZero(x1) || Nat256.IsOne(x1)) - return this; - - uint[] t1 = Nat256.Create(); - uint[] t2 = Nat256.Create(); - - SecP256R1Field.Square(x1, t1); - SecP256R1Field.Multiply(t1, x1, t1); - - SecP256R1Field.SquareN(t1, 2, t2); - SecP256R1Field.Multiply(t2, t1, t2); - - SecP256R1Field.SquareN(t2, 4, t1); - SecP256R1Field.Multiply(t1, t2, t1); - - SecP256R1Field.SquareN(t1, 8, t2); - SecP256R1Field.Multiply(t2, t1, t2); - - SecP256R1Field.SquareN(t2, 16, t1); - SecP256R1Field.Multiply(t1, t2, t1); - - SecP256R1Field.SquareN(t1, 32, t1); - SecP256R1Field.Multiply(t1, x1, t1); - - SecP256R1Field.SquareN(t1, 96, t1); - SecP256R1Field.Multiply(t1, x1, t1); - - SecP256R1Field.SquareN(t1, 94, t1); - SecP256R1Field.Multiply(t1, t1, t2); - - return Nat256.Eq(x1, t2) ? new SecP256R1FieldElement(t1) : null; - } - - public override bool Equals(object obj) - { - return Equals(obj as SecP256R1FieldElement); - } - - public override bool Equals(ECFieldElement other) - { - return Equals(other as SecP256R1FieldElement); - } - - public virtual bool Equals(SecP256R1FieldElement other) - { - if (this == other) - return true; - if (null == other) - return false; - return Nat256.Eq(x, other.x); - } - - public override int GetHashCode() - { - return Q.GetHashCode() ^ Arrays.GetHashCode(x, 0, 8); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP256R1Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP256R1Point.cs deleted file mode 100644 index 8332082..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP256R1Point.cs +++ /dev/null @@ -1,279 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP256R1Point - : AbstractFpPoint - { - /** - * Create a point which encodes with point compression. - * - * @param curve - * the curve to use - * @param x - * affine x co-ordinate - * @param y - * affine y co-ordinate - * - * @deprecated Use ECCurve.createPoint to construct points - */ - public SecP256R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * Create a point that encodes with or without point compresion. - * - * @param curve - * the curve to use - * @param x - * affine x co-ordinate - * @param y - * affine y co-ordinate - * @param withCompression - * if true encode with point compression - * - * @deprecated per-point compression property will be removed, refer - * {@link #getEncoded(bool)} - */ - public SecP256R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecP256R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecP256R1Point(null, AffineXCoord, AffineYCoord); - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - if (this == b) - return Twice(); - - ECCurve curve = this.Curve; - - SecP256R1FieldElement X1 = (SecP256R1FieldElement)this.RawXCoord, Y1 = (SecP256R1FieldElement)this.RawYCoord; - SecP256R1FieldElement X2 = (SecP256R1FieldElement)b.RawXCoord, Y2 = (SecP256R1FieldElement)b.RawYCoord; - - SecP256R1FieldElement Z1 = (SecP256R1FieldElement)this.RawZCoords[0]; - SecP256R1FieldElement Z2 = (SecP256R1FieldElement)b.RawZCoords[0]; - - uint c; - uint[] tt1 = Nat256.CreateExt(); - uint[] t2 = Nat256.Create(); - uint[] t3 = Nat256.Create(); - uint[] t4 = Nat256.Create(); - - bool Z1IsOne = Z1.IsOne; - uint[] U2, S2; - if (Z1IsOne) - { - U2 = X2.x; - S2 = Y2.x; - } - else - { - S2 = t3; - SecP256R1Field.Square(Z1.x, S2); - - U2 = t2; - SecP256R1Field.Multiply(S2, X2.x, U2); - - SecP256R1Field.Multiply(S2, Z1.x, S2); - SecP256R1Field.Multiply(S2, Y2.x, S2); - } - - bool Z2IsOne = Z2.IsOne; - uint[] U1, S1; - if (Z2IsOne) - { - U1 = X1.x; - S1 = Y1.x; - } - else - { - S1 = t4; - SecP256R1Field.Square(Z2.x, S1); - - U1 = tt1; - SecP256R1Field.Multiply(S1, X1.x, U1); - - SecP256R1Field.Multiply(S1, Z2.x, S1); - SecP256R1Field.Multiply(S1, Y1.x, S1); - } - - uint[] H = Nat256.Create(); - SecP256R1Field.Subtract(U1, U2, H); - - uint[] R = t2; - SecP256R1Field.Subtract(S1, S2, R); - - // Check if b == this or b == -this - if (Nat256.IsZero(H)) - { - if (Nat256.IsZero(R)) - { - // this == b, i.e. this must be doubled - return this.Twice(); - } - - // this == -b, i.e. the result is the point at infinity - return curve.Infinity; - } - - uint[] HSquared = t3; - SecP256R1Field.Square(H, HSquared); - - uint[] G = Nat256.Create(); - SecP256R1Field.Multiply(HSquared, H, G); - - uint[] V = t3; - SecP256R1Field.Multiply(HSquared, U1, V); - - SecP256R1Field.Negate(G, G); - Nat256.Mul(S1, G, tt1); - - c = Nat256.AddBothTo(V, V, G); - SecP256R1Field.Reduce32(c, G); - - SecP256R1FieldElement X3 = new SecP256R1FieldElement(t4); - SecP256R1Field.Square(R, X3.x); - SecP256R1Field.Subtract(X3.x, G, X3.x); - - SecP256R1FieldElement Y3 = new SecP256R1FieldElement(G); - SecP256R1Field.Subtract(V, X3.x, Y3.x); - SecP256R1Field.MultiplyAddToExt(Y3.x, R, tt1); - SecP256R1Field.Reduce(tt1, Y3.x); - - SecP256R1FieldElement Z3 = new SecP256R1FieldElement(H); - if (!Z1IsOne) - { - SecP256R1Field.Multiply(Z3.x, Z1.x, Z3.x); - } - if (!Z2IsOne) - { - SecP256R1Field.Multiply(Z3.x, Z2.x, Z3.x); - } - - ECFieldElement[] zs = new ECFieldElement[]{ Z3 }; - - return new SecP256R1Point(curve, X3, Y3, zs, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - SecP256R1FieldElement Y1 = (SecP256R1FieldElement)this.RawYCoord; - if (Y1.IsZero) - return curve.Infinity; - - SecP256R1FieldElement X1 = (SecP256R1FieldElement)this.RawXCoord, Z1 = (SecP256R1FieldElement)this.RawZCoords[0]; - - uint c; - uint[] t1 = Nat256.Create(); - uint[] t2 = Nat256.Create(); - - uint[] Y1Squared = Nat256.Create(); - SecP256R1Field.Square(Y1.x, Y1Squared); - - uint[] T = Nat256.Create(); - SecP256R1Field.Square(Y1Squared, T); - - bool Z1IsOne = Z1.IsOne; - - uint[] Z1Squared = Z1.x; - if (!Z1IsOne) - { - Z1Squared = t2; - SecP256R1Field.Square(Z1.x, Z1Squared); - } - - SecP256R1Field.Subtract(X1.x, Z1Squared, t1); - - uint[] M = t2; - SecP256R1Field.Add(X1.x, Z1Squared, M); - SecP256R1Field.Multiply(M, t1, M); - c = Nat256.AddBothTo(M, M, M); - SecP256R1Field.Reduce32(c, M); - - uint[] S = Y1Squared; - SecP256R1Field.Multiply(Y1Squared, X1.x, S); - c = Nat.ShiftUpBits(8, S, 2, 0); - SecP256R1Field.Reduce32(c, S); - - c = Nat.ShiftUpBits(8, T, 3, 0, t1); - SecP256R1Field.Reduce32(c, t1); - - SecP256R1FieldElement X3 = new SecP256R1FieldElement(T); - SecP256R1Field.Square(M, X3.x); - SecP256R1Field.Subtract(X3.x, S, X3.x); - SecP256R1Field.Subtract(X3.x, S, X3.x); - - SecP256R1FieldElement Y3 = new SecP256R1FieldElement(S); - SecP256R1Field.Subtract(S, X3.x, Y3.x); - SecP256R1Field.Multiply(Y3.x, M, Y3.x); - SecP256R1Field.Subtract(Y3.x, t1, Y3.x); - - SecP256R1FieldElement Z3 = new SecP256R1FieldElement(M); - SecP256R1Field.Twice(Y1.x, Z3.x); - if (!Z1IsOne) - { - SecP256R1Field.Multiply(Z3.x, Z1.x, Z3.x); - } - - return new SecP256R1Point(curve, X3, Y3, new ECFieldElement[]{ Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this == b) - return ThreeTimes(); - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECFieldElement Y1 = this.RawYCoord; - if (Y1.IsZero) - return b; - - return Twice().Add(b); - } - - public override ECPoint ThreeTimes() - { - if (this.IsInfinity || this.RawYCoord.IsZero) - return this; - - // NOTE: Be careful about recursions between TwicePlus and ThreeTimes - return Twice().Add(this); - } - - public override ECPoint Negate() - { - if (IsInfinity) - return this; - - return new SecP256R1Point(Curve, RawXCoord, RawYCoord.Negate(), RawZCoords, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP384R1Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP384R1Curve.cs deleted file mode 100644 index 7fd5827..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP384R1Curve.cs +++ /dev/null @@ -1,77 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP384R1Curve - : AbstractFpCurve - { - public static readonly BigInteger q = new BigInteger(1, - Hex.Decode("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFF0000000000000000FFFFFFFF")); - - private const int SecP384R1_DEFAULT_COORDS = COORD_JACOBIAN; - - protected readonly SecP384R1Point m_infinity; - - public SecP384R1Curve() - : base(q) - { - this.m_infinity = new SecP384R1Point(this, null, null); - - this.m_a = FromBigInteger(new BigInteger(1, - Hex.Decode("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFF0000000000000000FFFFFFFC"))); - this.m_b = FromBigInteger(new BigInteger(1, - Hex.Decode("B3312FA7E23EE7E4988E056BE3F82D19181D9C6EFE8141120314088F5013875AC656398D8A2ED19D2A85C8EDD3EC2AEF"))); - this.m_order = new BigInteger(1, Hex.Decode("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFC7634D81F4372DDF581A0DB248B0A77AECEC196ACCC52973")); - this.m_cofactor = BigInteger.One; - this.m_coord = SecP384R1_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecP384R1Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_JACOBIAN: - return true; - default: - return false; - } - } - - public virtual BigInteger Q - { - get { return q; } - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return q.BitLength; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecP384R1FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecP384R1Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecP384R1Point(this, x, y, zs, withCompression); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP384R1Field.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP384R1Field.cs deleted file mode 100644 index 0780df3..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP384R1Field.cs +++ /dev/null @@ -1,295 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP384R1Field - { - // 2^384 - 2^128 - 2^96 + 2^32 - 1 - internal static readonly uint[] P = new uint[]{ 0xFFFFFFFF, 0x00000000, 0x00000000, 0xFFFFFFFF, 0xFFFFFFFE, 0xFFFFFFFF, - 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF }; - internal static readonly uint[] PExt = new uint[]{ 0x00000001, 0xFFFFFFFE, 0x00000000, 0x00000002, 0x00000000, 0xFFFFFFFE, - 0x00000000, 0x00000002, 0x00000001, 0x00000000, 0x00000000, 0x00000000, 0xFFFFFFFE, 0x00000001, 0x00000000, - 0xFFFFFFFE, 0xFFFFFFFD, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF }; - private static readonly uint[] PExtInv = new uint[]{ 0xFFFFFFFF, 0x00000001, 0xFFFFFFFF, 0xFFFFFFFD, 0xFFFFFFFF, 0x00000001, - 0xFFFFFFFF, 0xFFFFFFFD, 0xFFFFFFFE, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0x00000001, 0xFFFFFFFE, 0xFFFFFFFF, - 0x00000001, 0x00000002 }; - private const uint P11 = 0xFFFFFFFF; - private const uint PExt23 = 0xFFFFFFFF; - - public static void Add(uint[] x, uint[] y, uint[] z) - { - uint c = Nat.Add(12, x, y, z); - if (c != 0 || (z[11] == P11 && Nat.Gte(12, z, P))) - { - AddPInvTo(z); - } - } - - public static void AddExt(uint[] xx, uint[] yy, uint[] zz) - { - uint c = Nat.Add(24, xx, yy, zz); - if (c != 0 || (zz[23] == PExt23 && Nat.Gte(24, zz, PExt))) - { - if (Nat.AddTo(PExtInv.Length, PExtInv, zz) != 0) - { - Nat.IncAt(24, zz, PExtInv.Length); - } - } - } - - public static void AddOne(uint[] x, uint[] z) - { - uint c = Nat.Inc(12, x, z); - if (c != 0 || (z[11] == P11 && Nat.Gte(12, z, P))) - { - AddPInvTo(z); - } - } - - public static uint[] FromBigInteger(BigInteger x) - { - uint[] z = Nat.FromBigInteger(384, x); - if (z[11] == P11 && Nat.Gte(12, z, P)) - { - Nat.SubFrom(12, P, z); - } - return z; - } - - public static void Half(uint[] x, uint[] z) - { - if ((x[0] & 1) == 0) - { - Nat.ShiftDownBit(12, x, 0, z); - } - else - { - uint c = Nat.Add(12, x, P, z); - Nat.ShiftDownBit(12, z, c); - } - } - - public static void Multiply(uint[] x, uint[] y, uint[] z) - { - uint[] tt = Nat.Create(24); - Nat384.Mul(x, y, tt); - Reduce(tt, z); - } - - public static void Negate(uint[] x, uint[] z) - { - if (Nat.IsZero(12, x)) - { - Nat.Zero(12, z); - } - else - { - Nat.Sub(12, P, x, z); - } - } - - public static void Reduce(uint[] xx, uint[] z) - { - long xx16 = xx[16], xx17 = xx[17], xx18 = xx[18], xx19 = xx[19]; - long xx20 = xx[20], xx21 = xx[21], xx22 = xx[22], xx23 = xx[23]; - - const long n = 1; - - long t0 = (long)xx[12] + xx20 - n; - long t1 = (long)xx[13] + xx22; - long t2 = (long)xx[14] + xx22 + xx23; - long t3 = (long)xx[15] + xx23; - long t4 = xx17 + xx21; - long t5 = xx21 - xx23; - long t6 = xx22 - xx23; - long t7 = t0 + t5; - - long cc = 0; - cc += (long)xx[0] + t7; - z[0] = (uint)cc; - cc >>= 32; - cc += (long)xx[1] + xx23 - t0 + t1; - z[1] = (uint)cc; - cc >>= 32; - cc += (long)xx[2] - xx21 - t1 + t2; - z[2] = (uint)cc; - cc >>= 32; - cc += (long)xx[3] - t2 + t3 + t7; - z[3] = (uint)cc; - cc >>= 32; - cc += (long)xx[4] + xx16 + xx21 + t1 - t3 + t7; - z[4] = (uint)cc; - cc >>= 32; - cc += (long)xx[5] - xx16 + t1 + t2 + t4; - z[5] = (uint)cc; - cc >>= 32; - cc += (long)xx[6] + xx18 - xx17 + t2 + t3; - z[6] = (uint)cc; - cc >>= 32; - cc += (long)xx[7] + xx16 + xx19 - xx18 + t3; - z[7] = (uint)cc; - cc >>= 32; - cc += (long)xx[8] + xx16 + xx17 + xx20 - xx19; - z[8] = (uint)cc; - cc >>= 32; - cc += (long)xx[9] + xx18 - xx20 + t4; - z[9] = (uint)cc; - cc >>= 32; - cc += (long)xx[10] + xx18 + xx19 - t5 + t6; - z[10] = (uint)cc; - cc >>= 32; - cc += (long)xx[11] + xx19 + xx20 - t6; - z[11] = (uint)cc; - cc >>= 32; - cc += n; - - Debug.Assert(cc >= 0); - - Reduce32((uint)cc, z); - } - - public static void Reduce32(uint x, uint[] z) - { - long cc = 0; - - if (x != 0) - { - long xx12 = x; - - cc += (long)z[0] + xx12; - z[0] = (uint)cc; - cc >>= 32; - cc += (long)z[1] - xx12; - z[1] = (uint)cc; - cc >>= 32; - if (cc != 0) - { - cc += (long)z[2]; - z[2] = (uint)cc; - cc >>= 32; - } - cc += (long)z[3] + xx12; - z[3] = (uint)cc; - cc >>= 32; - cc += (long)z[4] + xx12; - z[4] = (uint)cc; - cc >>= 32; - - Debug.Assert(cc == 0 || cc == 1); - } - - if ((cc != 0 && Nat.IncAt(12, z, 5) != 0) - || (z[11] == P11 && Nat.Gte(12, z, P))) - { - AddPInvTo(z); - } - } - - public static void Square(uint[] x, uint[] z) - { - uint[] tt = Nat.Create(24); - Nat384.Square(x, tt); - Reduce(tt, z); - } - - public static void SquareN(uint[] x, int n, uint[] z) - { - Debug.Assert(n > 0); - - uint[] tt = Nat.Create(24); - Nat384.Square(x, tt); - Reduce(tt, z); - - while (--n > 0) - { - Nat384.Square(z, tt); - Reduce(tt, z); - } - } - - public static void Subtract(uint[] x, uint[] y, uint[] z) - { - int c = Nat.Sub(12, x, y, z); - if (c != 0) - { - SubPInvFrom(z); - } - } - - public static void SubtractExt(uint[] xx, uint[] yy, uint[] zz) - { - int c = Nat.Sub(24, xx, yy, zz); - if (c != 0) - { - if (Nat.SubFrom(PExtInv.Length, PExtInv, zz) != 0) - { - Nat.DecAt(24, zz, PExtInv.Length); - } - } - } - - public static void Twice(uint[] x, uint[] z) - { - uint c = Nat.ShiftUpBit(12, x, 0, z); - if (c != 0 || (z[11] == P11 && Nat.Gte(12, z, P))) - { - AddPInvTo(z); - } - } - - private static void AddPInvTo(uint[] z) - { - long c = (long)z[0] + 1; - z[0] = (uint)c; - c >>= 32; - c += (long)z[1] - 1; - z[1] = (uint)c; - c >>= 32; - if (c != 0) - { - c += (long)z[2]; - z[2] = (uint)c; - c >>= 32; - } - c += (long)z[3] + 1; - z[3] = (uint)c; - c >>= 32; - c += (long)z[4] + 1; - z[4] = (uint)c; - c >>= 32; - if (c != 0) - { - Nat.IncAt(12, z, 5); - } - } - - private static void SubPInvFrom(uint[] z) - { - long c = (long)z[0] - 1; - z[0] = (uint)c; - c >>= 32; - c += (long)z[1] + 1; - z[1] = (uint)c; - c >>= 32; - if (c != 0) - { - c += (long)z[2]; - z[2] = (uint)c; - c >>= 32; - } - c += (long)z[3] - 1; - z[3] = (uint)c; - c >>= 32; - c += (long)z[4] - 1; - z[4] = (uint)c; - c >>= 32; - if (c != 0) - { - Nat.DecAt(12, z, 5); - } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP384R1FieldElement.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP384R1FieldElement.cs deleted file mode 100644 index 18d48a5..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP384R1FieldElement.cs +++ /dev/null @@ -1,210 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP384R1FieldElement - : ECFieldElement - { - public static readonly BigInteger Q = SecP384R1Curve.q; - - protected internal readonly uint[] x; - - public SecP384R1FieldElement(BigInteger x) - { - if (x == null || x.SignValue < 0 || x.CompareTo(Q) >= 0) - throw new ArgumentException("value invalid for SecP384R1FieldElement", "x"); - - this.x = SecP384R1Field.FromBigInteger(x); - } - - public SecP384R1FieldElement() - { - this.x = Nat.Create(12); - } - - protected internal SecP384R1FieldElement(uint[] x) - { - this.x = x; - } - - public override bool IsZero - { - get { return Nat.IsZero(12, x); } - } - - public override bool IsOne - { - get { return Nat.IsOne(12, x); } - } - - public override bool TestBitZero() - { - return Nat.GetBit(x, 0) == 1; - } - - public override BigInteger ToBigInteger() - { - return Nat.ToBigInteger(12, x); - } - - public override string FieldName - { - get { return "SecP384R1Field"; } - } - - public override int FieldSize - { - get { return Q.BitLength; } - } - - public override ECFieldElement Add(ECFieldElement b) - { - uint[] z = Nat.Create(12); - SecP384R1Field.Add(x, ((SecP384R1FieldElement)b).x, z); - return new SecP384R1FieldElement(z); - } - - public override ECFieldElement AddOne() - { - uint[] z = Nat.Create(12); - SecP384R1Field.AddOne(x, z); - return new SecP384R1FieldElement(z); - } - - public override ECFieldElement Subtract(ECFieldElement b) - { - uint[] z = Nat.Create(12); - SecP384R1Field.Subtract(x, ((SecP384R1FieldElement)b).x, z); - return new SecP384R1FieldElement(z); - } - - public override ECFieldElement Multiply(ECFieldElement b) - { - uint[] z = Nat.Create(12); - SecP384R1Field.Multiply(x, ((SecP384R1FieldElement)b).x, z); - return new SecP384R1FieldElement(z); - } - - public override ECFieldElement Divide(ECFieldElement b) - { - //return Multiply(b.Invert()); - uint[] z = Nat.Create(12); - Mod.Invert(SecP384R1Field.P, ((SecP384R1FieldElement)b).x, z); - SecP384R1Field.Multiply(z, x, z); - return new SecP384R1FieldElement(z); - } - - public override ECFieldElement Negate() - { - uint[] z = Nat.Create(12); - SecP384R1Field.Negate(x, z); - return new SecP384R1FieldElement(z); - } - - public override ECFieldElement Square() - { - uint[] z = Nat.Create(12); - SecP384R1Field.Square(x, z); - return new SecP384R1FieldElement(z); - } - - public override ECFieldElement Invert() - { - //return new SecP384R1FieldElement(ToBigInteger().ModInverse(Q)); - uint[] z = Nat.Create(12); - Mod.Invert(SecP384R1Field.P, x, z); - return new SecP384R1FieldElement(z); - } - - /** - * return a sqrt root - the routine verifies that the calculation returns the right value - if - * none exists it returns null. - */ - public override ECFieldElement Sqrt() - { - // Raise this element to the exponent 2^382 - 2^126 - 2^94 + 2^30 - - uint[] x1 = this.x; - if (Nat.IsZero(12, x1) || Nat.IsOne(12, x1)) - return this; - - uint[] t1 = Nat.Create(12); - uint[] t2 = Nat.Create(12); - uint[] t3 = Nat.Create(12); - uint[] t4 = Nat.Create(12); - - SecP384R1Field.Square(x1, t1); - SecP384R1Field.Multiply(t1, x1, t1); - - SecP384R1Field.SquareN(t1, 2, t2); - SecP384R1Field.Multiply(t2, t1, t2); - - SecP384R1Field.Square(t2, t2); - SecP384R1Field.Multiply(t2, x1, t2); - - SecP384R1Field.SquareN(t2, 5, t3); - SecP384R1Field.Multiply(t3, t2, t3); - - SecP384R1Field.SquareN(t3, 5, t4); - SecP384R1Field.Multiply(t4, t2, t4); - - SecP384R1Field.SquareN(t4, 15, t2); - SecP384R1Field.Multiply(t2, t4, t2); - - SecP384R1Field.SquareN(t2, 2, t3); - SecP384R1Field.Multiply(t1, t3, t1); - - SecP384R1Field.SquareN(t3, 28, t3); - SecP384R1Field.Multiply(t2, t3, t2); - - SecP384R1Field.SquareN(t2, 60, t3); - SecP384R1Field.Multiply(t3, t2, t3); - - uint[] r = t2; - - SecP384R1Field.SquareN(t3, 120, r); - SecP384R1Field.Multiply(r, t3, r); - - SecP384R1Field.SquareN(r, 15, r); - SecP384R1Field.Multiply(r, t4, r); - - SecP384R1Field.SquareN(r, 33, r); - SecP384R1Field.Multiply(r, t1, r); - - SecP384R1Field.SquareN(r, 64, r); - SecP384R1Field.Multiply(r, x1, r); - - SecP384R1Field.SquareN(r, 30, t1); - SecP384R1Field.Square(t1, t2); - - return Nat.Eq(12, x1, t2) ? new SecP384R1FieldElement(t1) : null; - } - - public override bool Equals(object obj) - { - return Equals(obj as SecP384R1FieldElement); - } - - public override bool Equals(ECFieldElement other) - { - return Equals(other as SecP384R1FieldElement); - } - - public virtual bool Equals(SecP384R1FieldElement other) - { - if (this == other) - return true; - if (null == other) - return false; - return Nat.Eq(12, x, other.x); - } - - public override int GetHashCode() - { - return Q.GetHashCode() ^ Arrays.GetHashCode(x, 0, 12); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP384R1Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP384R1Point.cs deleted file mode 100644 index 83159ce..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP384R1Point.cs +++ /dev/null @@ -1,280 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP384R1Point - : AbstractFpPoint - { - /** - * Create a point which encodes with point compression. - * - * @param curve - * the curve to use - * @param x - * affine x co-ordinate - * @param y - * affine y co-ordinate - * - * @deprecated Use ECCurve.createPoint to construct points - */ - public SecP384R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * Create a point that encodes with or without point compresion. - * - * @param curve - * the curve to use - * @param x - * affine x co-ordinate - * @param y - * affine y co-ordinate - * @param withCompression - * if true encode with point compression - * - * @deprecated per-point compression property will be removed, refer - * {@link #getEncoded(bool)} - */ - public SecP384R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecP384R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecP384R1Point(null, AffineXCoord, AffineYCoord); - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - if (this == b) - return Twice(); - - ECCurve curve = this.Curve; - - SecP384R1FieldElement X1 = (SecP384R1FieldElement)this.RawXCoord, Y1 = (SecP384R1FieldElement)this.RawYCoord; - SecP384R1FieldElement X2 = (SecP384R1FieldElement)b.RawXCoord, Y2 = (SecP384R1FieldElement)b.RawYCoord; - - SecP384R1FieldElement Z1 = (SecP384R1FieldElement)this.RawZCoords[0]; - SecP384R1FieldElement Z2 = (SecP384R1FieldElement)b.RawZCoords[0]; - - uint c; - uint[] tt1 = Nat.Create(24); - uint[] tt2 = Nat.Create(24); - uint[] t3 = Nat.Create(12); - uint[] t4 = Nat.Create(12); - - bool Z1IsOne = Z1.IsOne; - uint[] U2, S2; - if (Z1IsOne) - { - U2 = X2.x; - S2 = Y2.x; - } - else - { - S2 = t3; - SecP384R1Field.Square(Z1.x, S2); - - U2 = tt2; - SecP384R1Field.Multiply(S2, X2.x, U2); - - SecP384R1Field.Multiply(S2, Z1.x, S2); - SecP384R1Field.Multiply(S2, Y2.x, S2); - } - - bool Z2IsOne = Z2.IsOne; - uint[] U1, S1; - if (Z2IsOne) - { - U1 = X1.x; - S1 = Y1.x; - } - else - { - S1 = t4; - SecP384R1Field.Square(Z2.x, S1); - - U1 = tt1; - SecP384R1Field.Multiply(S1, X1.x, U1); - - SecP384R1Field.Multiply(S1, Z2.x, S1); - SecP384R1Field.Multiply(S1, Y1.x, S1); - } - - uint[] H = Nat.Create(12); - SecP384R1Field.Subtract(U1, U2, H); - - uint[] R = Nat.Create(12); - SecP384R1Field.Subtract(S1, S2, R); - - // Check if b == this or b == -this - if (Nat.IsZero(12, H)) - { - if (Nat.IsZero(12, R)) - { - // this == b, i.e. this must be doubled - return this.Twice(); - } - - // this == -b, i.e. the result is the point at infinity - return curve.Infinity; - } - - uint[] HSquared = t3; - SecP384R1Field.Square(H, HSquared); - - uint[] G = Nat.Create(12); - SecP384R1Field.Multiply(HSquared, H, G); - - uint[] V = t3; - SecP384R1Field.Multiply(HSquared, U1, V); - - SecP384R1Field.Negate(G, G); - Nat384.Mul(S1, G, tt1); - - c = Nat.AddBothTo(12, V, V, G); - SecP384R1Field.Reduce32(c, G); - - SecP384R1FieldElement X3 = new SecP384R1FieldElement(t4); - SecP384R1Field.Square(R, X3.x); - SecP384R1Field.Subtract(X3.x, G, X3.x); - - SecP384R1FieldElement Y3 = new SecP384R1FieldElement(G); - SecP384R1Field.Subtract(V, X3.x, Y3.x); - Nat384.Mul(Y3.x, R, tt2); - SecP384R1Field.AddExt(tt1, tt2, tt1); - SecP384R1Field.Reduce(tt1, Y3.x); - - SecP384R1FieldElement Z3 = new SecP384R1FieldElement(H); - if (!Z1IsOne) - { - SecP384R1Field.Multiply(Z3.x, Z1.x, Z3.x); - } - if (!Z2IsOne) - { - SecP384R1Field.Multiply(Z3.x, Z2.x, Z3.x); - } - - ECFieldElement[] zs = new ECFieldElement[] { Z3 }; - - return new SecP384R1Point(curve, X3, Y3, zs, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - SecP384R1FieldElement Y1 = (SecP384R1FieldElement)this.RawYCoord; - if (Y1.IsZero) - return curve.Infinity; - - SecP384R1FieldElement X1 = (SecP384R1FieldElement)this.RawXCoord, Z1 = (SecP384R1FieldElement)this.RawZCoords[0]; - - uint c; - uint[] t1 = Nat.Create(12); - uint[] t2 = Nat.Create(12); - - uint[] Y1Squared = Nat.Create(12); - SecP384R1Field.Square(Y1.x, Y1Squared); - - uint[] T = Nat.Create(12); - SecP384R1Field.Square(Y1Squared, T); - - bool Z1IsOne = Z1.IsOne; - - uint[] Z1Squared = Z1.x; - if (!Z1IsOne) - { - Z1Squared = t2; - SecP384R1Field.Square(Z1.x, Z1Squared); - } - - SecP384R1Field.Subtract(X1.x, Z1Squared, t1); - - uint[] M = t2; - SecP384R1Field.Add(X1.x, Z1Squared, M); - SecP384R1Field.Multiply(M, t1, M); - c = Nat.AddBothTo(12, M, M, M); - SecP384R1Field.Reduce32(c, M); - - uint[] S = Y1Squared; - SecP384R1Field.Multiply(Y1Squared, X1.x, S); - c = Nat.ShiftUpBits(12, S, 2, 0); - SecP384R1Field.Reduce32(c, S); - - c = Nat.ShiftUpBits(12, T, 3, 0, t1); - SecP384R1Field.Reduce32(c, t1); - - SecP384R1FieldElement X3 = new SecP384R1FieldElement(T); - SecP384R1Field.Square(M, X3.x); - SecP384R1Field.Subtract(X3.x, S, X3.x); - SecP384R1Field.Subtract(X3.x, S, X3.x); - - SecP384R1FieldElement Y3 = new SecP384R1FieldElement(S); - SecP384R1Field.Subtract(S, X3.x, Y3.x); - SecP384R1Field.Multiply(Y3.x, M, Y3.x); - SecP384R1Field.Subtract(Y3.x, t1, Y3.x); - - SecP384R1FieldElement Z3 = new SecP384R1FieldElement(M); - SecP384R1Field.Twice(Y1.x, Z3.x); - if (!Z1IsOne) - { - SecP384R1Field.Multiply(Z3.x, Z1.x, Z3.x); - } - - return new SecP384R1Point(curve, X3, Y3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this == b) - return ThreeTimes(); - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECFieldElement Y1 = this.RawYCoord; - if (Y1.IsZero) - return b; - - return Twice().Add(b); - } - - public override ECPoint ThreeTimes() - { - if (this.IsInfinity || this.RawYCoord.IsZero) - return this; - - // NOTE: Be careful about recursions between TwicePlus and ThreeTimes - return Twice().Add(this); - } - - public override ECPoint Negate() - { - if (IsInfinity) - return this; - - return new SecP384R1Point(Curve, RawXCoord, RawYCoord.Negate(), RawZCoords, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP521R1Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP521R1Curve.cs deleted file mode 100644 index e5083c7..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP521R1Curve.cs +++ /dev/null @@ -1,77 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP521R1Curve - : AbstractFpCurve - { - public static readonly BigInteger q = new BigInteger(1, - Hex.Decode("01FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF")); - - private const int SecP521R1_DEFAULT_COORDS = COORD_JACOBIAN; - - protected readonly SecP521R1Point m_infinity; - - public SecP521R1Curve() - : base(q) - { - this.m_infinity = new SecP521R1Point(this, null, null); - - this.m_a = FromBigInteger(new BigInteger(1, - Hex.Decode("01FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFC"))); - this.m_b = FromBigInteger(new BigInteger(1, - Hex.Decode("0051953EB9618E1C9A1F929A21A0B68540EEA2DA725B99B315F3B8B489918EF109E156193951EC7E937B1652C0BD3BB1BF073573DF883D2C34F1EF451FD46B503F00"))); - this.m_order = new BigInteger(1, Hex.Decode("01FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFA51868783BF2F966B7FCC0148F709A5D03BB5C9B8899C47AEBB6FB71E91386409")); - this.m_cofactor = BigInteger.One; - this.m_coord = SecP521R1_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecP521R1Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_JACOBIAN: - return true; - default: - return false; - } - } - - public virtual BigInteger Q - { - get { return q; } - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return q.BitLength; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecP521R1FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecP521R1Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecP521R1Point(this, x, y, zs, withCompression); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP521R1Field.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP521R1Field.cs deleted file mode 100644 index b7f8eb1..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP521R1Field.cs +++ /dev/null @@ -1,155 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP521R1Field - { - // 2^521 - 1 - internal static readonly uint[] P = new uint[]{ 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, - 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0x1FF }; - private const int P16 = 0x1FF; - - public static void Add(uint[] x, uint[] y, uint[] z) - { - uint c = Nat.Add(16, x, y, z) + x[16] + y[16]; - if (c > P16 || (c == P16 && Nat.Eq(16, z, P))) - { - c += Nat.Inc(16, z); - c &= P16; - } - z[16] = c; - } - - public static void AddOne(uint[] x, uint[] z) - { - uint c = Nat.Inc(16, x, z) + x[16]; - if (c > P16 || (c == P16 && Nat.Eq(16, z, P))) - { - c += Nat.Inc(16, z); - c &= P16; - } - z[16] = c; - } - - public static uint[] FromBigInteger(BigInteger x) - { - uint[] z = Nat.FromBigInteger(521, x); - if (Nat.Eq(17, z, P)) - { - Nat.Zero(17, z); - } - return z; - } - - public static void Half(uint[] x, uint[] z) - { - uint x16 = x[16]; - uint c = Nat.ShiftDownBit(16, x, x16, z); - z[16] = (x16 >> 1) | (c >> 23); - } - - public static void Multiply(uint[] x, uint[] y, uint[] z) - { - uint[] tt = Nat.Create(33); - ImplMultiply(x, y, tt); - Reduce(tt, z); - } - - public static void Negate(uint[] x, uint[] z) - { - if (Nat.IsZero(17, x)) - { - Nat.Zero(17, z); - } - else - { - Nat.Sub(17, P, x, z); - } - } - - public static void Reduce(uint[] xx, uint[] z) - { - Debug.Assert(xx[32] >> 18 == 0); - uint xx32 = xx[32]; - uint c = Nat.ShiftDownBits(16, xx, 16, 9, xx32, z, 0) >> 23; - c += xx32 >> 9; - c += Nat.AddTo(16, xx, z); - if (c > P16 || (c == P16 && Nat.Eq(16, z, P))) - { - c += Nat.Inc(16, z); - c &= P16; - } - z[16] = c; - } - - public static void Reduce23(uint[] z) - { - uint z16 = z[16]; - uint c = Nat.AddWordTo(16, z16 >> 9, z) + (z16 & P16); - if (c > P16 || (c == P16 && Nat.Eq(16, z, P))) - { - c += Nat.Inc(16, z); - c &= P16; - } - z[16] = c; - } - - public static void Square(uint[] x, uint[] z) - { - uint[] tt = Nat.Create(33); - ImplSquare(x, tt); - Reduce(tt, z); - } - - public static void SquareN(uint[] x, int n, uint[] z) - { - Debug.Assert(n > 0); - uint[] tt = Nat.Create(33); - ImplSquare(x, tt); - Reduce(tt, z); - - while (--n > 0) - { - ImplSquare(z, tt); - Reduce(tt, z); - } - } - - public static void Subtract(uint[] x, uint[] y, uint[] z) - { - int c = Nat.Sub(16, x, y, z) + (int)(x[16] - y[16]); - if (c < 0) - { - c += Nat.Dec(16, z); - c &= P16; - } - z[16] = (uint)c; - } - - public static void Twice(uint[] x, uint[] z) - { - uint x16 = x[16]; - uint c = Nat.ShiftUpBit(16, x, x16 << 23, z) | (x16 << 1); - z[16] = c & P16; - } - - protected static void ImplMultiply(uint[] x, uint[] y, uint[] zz) - { - Nat512.Mul(x, y, zz); - - uint x16 = x[16], y16 = y[16]; - zz[32] = Nat.Mul31BothAdd(16, x16, y, y16, x, zz, 16) + (x16 * y16); - } - - protected static void ImplSquare(uint[] x, uint[] zz) - { - Nat512.Square(x, zz); - - uint x16 = x[16]; - zz[32] = Nat.MulWordAddTo(16, x16 << 1, x, 0, zz, 16) + (x16 * x16); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP521R1FieldElement.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP521R1FieldElement.cs deleted file mode 100644 index 6f02a7e..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP521R1FieldElement.cs +++ /dev/null @@ -1,167 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP521R1FieldElement - : ECFieldElement - { - public static readonly BigInteger Q = SecP521R1Curve.q; - - protected internal readonly uint[] x; - - public SecP521R1FieldElement(BigInteger x) - { - if (x == null || x.SignValue < 0 || x.CompareTo(Q) >= 0) - throw new ArgumentException("value invalid for SecP521R1FieldElement", "x"); - - this.x = SecP521R1Field.FromBigInteger(x); - } - - public SecP521R1FieldElement() - { - this.x = Nat.Create(17); - } - - protected internal SecP521R1FieldElement(uint[] x) - { - this.x = x; - } - - public override bool IsZero - { - get { return Nat.IsZero(17, x); } - } - - public override bool IsOne - { - get { return Nat.IsOne(17, x); } - } - - public override bool TestBitZero() - { - return Nat.GetBit(x, 0) == 1; - } - - public override BigInteger ToBigInteger() - { - return Nat.ToBigInteger(17, x); - } - - public override string FieldName - { - get { return "SecP521R1Field"; } - } - - public override int FieldSize - { - get { return Q.BitLength; } - } - - public override ECFieldElement Add(ECFieldElement b) - { - uint[] z = Nat.Create(17); - SecP521R1Field.Add(x, ((SecP521R1FieldElement)b).x, z); - return new SecP521R1FieldElement(z); - } - - public override ECFieldElement AddOne() - { - uint[] z = Nat.Create(17); - SecP521R1Field.AddOne(x, z); - return new SecP521R1FieldElement(z); - } - - public override ECFieldElement Subtract(ECFieldElement b) - { - uint[] z = Nat.Create(17); - SecP521R1Field.Subtract(x, ((SecP521R1FieldElement)b).x, z); - return new SecP521R1FieldElement(z); - } - - public override ECFieldElement Multiply(ECFieldElement b) - { - uint[] z = Nat.Create(17); - SecP521R1Field.Multiply(x, ((SecP521R1FieldElement)b).x, z); - return new SecP521R1FieldElement(z); - } - - public override ECFieldElement Divide(ECFieldElement b) - { - //return Multiply(b.Invert()); - uint[] z = Nat.Create(17); - Mod.Invert(SecP521R1Field.P, ((SecP521R1FieldElement)b).x, z); - SecP521R1Field.Multiply(z, x, z); - return new SecP521R1FieldElement(z); - } - - public override ECFieldElement Negate() - { - uint[] z = Nat.Create(17); - SecP521R1Field.Negate(x, z); - return new SecP521R1FieldElement(z); - } - - public override ECFieldElement Square() - { - uint[] z = Nat.Create(17); - SecP521R1Field.Square(x, z); - return new SecP521R1FieldElement(z); - } - - public override ECFieldElement Invert() - { - //return new SecP521R1FieldElement(ToBigInteger().ModInverse(Q)); - uint[] z = Nat.Create(17); - Mod.Invert(SecP521R1Field.P, x, z); - return new SecP521R1FieldElement(z); - } - - /** - * return a sqrt root - the routine verifies that the calculation returns the right value - if - * none exists it returns null. - */ - public override ECFieldElement Sqrt() - { - // Raise this element to the exponent 2^519 - - uint[] x1 = this.x; - if (Nat.IsZero(17, x1) || Nat.IsOne(17, x1)) - return this; - - uint[] t1 = Nat.Create(17); - uint[] t2 = Nat.Create(17); - - SecP521R1Field.SquareN(x1, 519, t1); - SecP521R1Field.Square(t1, t2); - - return Nat.Eq(17, x1, t2) ? new SecP521R1FieldElement(t1) : null; - } - - public override bool Equals(object obj) - { - return Equals(obj as SecP521R1FieldElement); - } - - public override bool Equals(ECFieldElement other) - { - return Equals(other as SecP521R1FieldElement); - } - - public virtual bool Equals(SecP521R1FieldElement other) - { - if (this == other) - return true; - if (null == other) - return false; - return Nat.Eq(17, x, other.x); - } - - public override int GetHashCode() - { - return Q.GetHashCode() ^ Arrays.GetHashCode(x, 0, 17); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecP521R1Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecP521R1Point.cs deleted file mode 100644 index 7ad97f7..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecP521R1Point.cs +++ /dev/null @@ -1,275 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecP521R1Point - : AbstractFpPoint - { - /** - * Create a point which encodes with point compression. - * - * @param curve - * the curve to use - * @param x - * affine x co-ordinate - * @param y - * affine y co-ordinate - * - * @deprecated Use ECCurve.createPoint to construct points - */ - public SecP521R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * Create a point that encodes with or without point compresion. - * - * @param curve - * the curve to use - * @param x - * affine x co-ordinate - * @param y - * affine y co-ordinate - * @param withCompression - * if true encode with point compression - * - * @deprecated per-point compression property will be removed, refer - * {@link #getEncoded(bool)} - */ - public SecP521R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecP521R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecP521R1Point(null, AffineXCoord, AffineYCoord); - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - if (this == b) - return Twice(); - - ECCurve curve = this.Curve; - - SecP521R1FieldElement X1 = (SecP521R1FieldElement)this.RawXCoord, Y1 = (SecP521R1FieldElement)this.RawYCoord; - SecP521R1FieldElement X2 = (SecP521R1FieldElement)b.RawXCoord, Y2 = (SecP521R1FieldElement)b.RawYCoord; - - SecP521R1FieldElement Z1 = (SecP521R1FieldElement)this.RawZCoords[0]; - SecP521R1FieldElement Z2 = (SecP521R1FieldElement)b.RawZCoords[0]; - - uint[] t1 = Nat.Create(17); - uint[] t2 = Nat.Create(17); - uint[] t3 = Nat.Create(17); - uint[] t4 = Nat.Create(17); - - bool Z1IsOne = Z1.IsOne; - uint[] U2, S2; - if (Z1IsOne) - { - U2 = X2.x; - S2 = Y2.x; - } - else - { - S2 = t3; - SecP521R1Field.Square(Z1.x, S2); - - U2 = t2; - SecP521R1Field.Multiply(S2, X2.x, U2); - - SecP521R1Field.Multiply(S2, Z1.x, S2); - SecP521R1Field.Multiply(S2, Y2.x, S2); - } - - bool Z2IsOne = Z2.IsOne; - uint[] U1, S1; - if (Z2IsOne) - { - U1 = X1.x; - S1 = Y1.x; - } - else - { - S1 = t4; - SecP521R1Field.Square(Z2.x, S1); - - U1 = t1; - SecP521R1Field.Multiply(S1, X1.x, U1); - - SecP521R1Field.Multiply(S1, Z2.x, S1); - SecP521R1Field.Multiply(S1, Y1.x, S1); - } - - uint[] H = Nat.Create(17); - SecP521R1Field.Subtract(U1, U2, H); - - uint[] R = t2; - SecP521R1Field.Subtract(S1, S2, R); - - // Check if b == this or b == -this - if (Nat.IsZero(17, H)) - { - if (Nat.IsZero(17, R)) - { - // this == b, i.e. this must be doubled - return this.Twice(); - } - - // this == -b, i.e. the result is the point at infinity - return curve.Infinity; - } - - uint[] HSquared = t3; - SecP521R1Field.Square(H, HSquared); - - uint[] G = Nat.Create(17); - SecP521R1Field.Multiply(HSquared, H, G); - - uint[] V = t3; - SecP521R1Field.Multiply(HSquared, U1, V); - - SecP521R1Field.Multiply(S1, G, t1); - - SecP521R1FieldElement X3 = new SecP521R1FieldElement(t4); - SecP521R1Field.Square(R, X3.x); - SecP521R1Field.Add(X3.x, G, X3.x); - SecP521R1Field.Subtract(X3.x, V, X3.x); - SecP521R1Field.Subtract(X3.x, V, X3.x); - - SecP521R1FieldElement Y3 = new SecP521R1FieldElement(G); - SecP521R1Field.Subtract(V, X3.x, Y3.x); - SecP521R1Field.Multiply(Y3.x, R, t2); - SecP521R1Field.Subtract(t2, t1, Y3.x); - - SecP521R1FieldElement Z3 = new SecP521R1FieldElement(H); - if (!Z1IsOne) - { - SecP521R1Field.Multiply(Z3.x, Z1.x, Z3.x); - } - if (!Z2IsOne) - { - SecP521R1Field.Multiply(Z3.x, Z2.x, Z3.x); - } - - ECFieldElement[] zs = new ECFieldElement[] { Z3 }; - - return new SecP521R1Point(curve, X3, Y3, zs, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - SecP521R1FieldElement Y1 = (SecP521R1FieldElement)this.RawYCoord; - if (Y1.IsZero) - return curve.Infinity; - - SecP521R1FieldElement X1 = (SecP521R1FieldElement)this.RawXCoord, Z1 = (SecP521R1FieldElement)this.RawZCoords[0]; - - uint[] t1 = Nat.Create(17); - uint[] t2 = Nat.Create(17); - - uint[] Y1Squared = Nat.Create(17); - SecP521R1Field.Square(Y1.x, Y1Squared); - - uint[] T = Nat.Create(17); - SecP521R1Field.Square(Y1Squared, T); - - bool Z1IsOne = Z1.IsOne; - - uint[] Z1Squared = Z1.x; - if (!Z1IsOne) - { - Z1Squared = t2; - SecP521R1Field.Square(Z1.x, Z1Squared); - } - - SecP521R1Field.Subtract(X1.x, Z1Squared, t1); - - uint[] M = t2; - SecP521R1Field.Add(X1.x, Z1Squared, M); - SecP521R1Field.Multiply(M, t1, M); - Nat.AddBothTo(17, M, M, M); - SecP521R1Field.Reduce23(M); - - uint[] S = Y1Squared; - SecP521R1Field.Multiply(Y1Squared, X1.x, S); - Nat.ShiftUpBits(17, S, 2, 0); - SecP521R1Field.Reduce23(S); - - Nat.ShiftUpBits(17, T, 3, 0, t1); - SecP521R1Field.Reduce23(t1); - - SecP521R1FieldElement X3 = new SecP521R1FieldElement(T); - SecP521R1Field.Square(M, X3.x); - SecP521R1Field.Subtract(X3.x, S, X3.x); - SecP521R1Field.Subtract(X3.x, S, X3.x); - - SecP521R1FieldElement Y3 = new SecP521R1FieldElement(S); - SecP521R1Field.Subtract(S, X3.x, Y3.x); - SecP521R1Field.Multiply(Y3.x, M, Y3.x); - SecP521R1Field.Subtract(Y3.x, t1, Y3.x); - - SecP521R1FieldElement Z3 = new SecP521R1FieldElement(M); - SecP521R1Field.Twice(Y1.x, Z3.x); - if (!Z1IsOne) - { - SecP521R1Field.Multiply(Z3.x, Z1.x, Z3.x); - } - - return new SecP521R1Point(curve, X3, Y3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this == b) - return ThreeTimes(); - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECFieldElement Y1 = this.RawYCoord; - if (Y1.IsZero) - return b; - - return Twice().Add(b); - } - - public override ECPoint ThreeTimes() - { - if (this.IsInfinity || this.RawYCoord.IsZero) - return this; - - // NOTE: Be careful about recursions between TwicePlus and ThreeTimes - return Twice().Add(this); - } - - public override ECPoint Negate() - { - if (IsInfinity) - return this; - - return new SecP521R1Point(Curve, RawXCoord, RawYCoord.Negate(), RawZCoords, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT113Field.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT113Field.cs deleted file mode 100644 index 49773b6..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT113Field.cs +++ /dev/null @@ -1,225 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT113Field - { - private const ulong M49 = ulong.MaxValue >> 15; - private const ulong M57 = ulong.MaxValue >> 7; - - public static void Add(ulong[] x, ulong[] y, ulong[] z) - { - z[0] = x[0] ^ y[0]; - z[1] = x[1] ^ y[1]; - } - - public static void AddExt(ulong[] xx, ulong[] yy, ulong[] zz) - { - zz[0] = xx[0] ^ yy[0]; - zz[1] = xx[1] ^ yy[1]; - zz[2] = xx[2] ^ yy[2]; - zz[3] = xx[3] ^ yy[3]; - } - - public static void AddOne(ulong[] x, ulong[] z) - { - z[0] = x[0] ^ 1UL; - z[1] = x[1]; - } - - public static ulong[] FromBigInteger(BigInteger x) - { - ulong[] z = Nat128.FromBigInteger64(x); - Reduce15(z, 0); - return z; - } - - public static void Invert(ulong[] x, ulong[] z) - { - if (Nat128.IsZero64(x)) - throw new InvalidOperationException(); - - // Itoh-Tsujii inversion - - ulong[] t0 = Nat128.Create64(); - ulong[] t1 = Nat128.Create64(); - - Square(x, t0); - Multiply(t0, x, t0); - Square(t0, t0); - Multiply(t0, x, t0); - SquareN(t0, 3, t1); - Multiply(t1, t0, t1); - Square(t1, t1); - Multiply(t1, x, t1); - SquareN(t1, 7, t0); - Multiply(t0, t1, t0); - SquareN(t0, 14, t1); - Multiply(t1, t0, t1); - SquareN(t1, 28, t0); - Multiply(t0, t1, t0); - SquareN(t0, 56, t1); - Multiply(t1, t0, t1); - Square(t1, z); - } - - public static void Multiply(ulong[] x, ulong[] y, ulong[] z) - { - ulong[] tt = Nat128.CreateExt64(); - ImplMultiply(x, y, tt); - Reduce(tt, z); - } - - public static void MultiplyAddToExt(ulong[] x, ulong[] y, ulong[] zz) - { - ulong[] tt = Nat128.CreateExt64(); - ImplMultiply(x, y, tt); - AddExt(zz, tt, zz); - } - - public static void Reduce(ulong[] xx, ulong[] z) - { - ulong x0 = xx[0], x1 = xx[1], x2 = xx[2], x3 = xx[3]; - - x1 ^= (x3 << 15) ^ (x3 << 24); - x2 ^= (x3 >> 49) ^ (x3 >> 40); - - x0 ^= (x2 << 15) ^ (x2 << 24); - x1 ^= (x2 >> 49) ^ (x2 >> 40); - - ulong t = x1 >> 49; - z[0] = x0 ^ t ^ (t << 9); - z[1] = x1 & M49; - } - - public static void Reduce15(ulong[] z, int zOff) - { - ulong z1 = z[zOff + 1], t = z1 >> 49; - z[zOff ] ^= t ^ (t << 9); - z[zOff + 1] = z1 & M49; - } - - public static void Sqrt(ulong[] x, ulong[] z) - { - ulong u0 = Interleave.Unshuffle(x[0]), u1 = Interleave.Unshuffle(x[1]); - ulong e0 = (u0 & 0x00000000FFFFFFFFUL) | (u1 << 32); - ulong c0 = (u0 >> 32) | (u1 & 0xFFFFFFFF00000000UL); - - z[0] = e0 ^ (c0 << 57) ^ (c0 << 5); - z[1] = (c0 >> 7) ^ (c0 >> 59); - } - - public static void Square(ulong[] x, ulong[] z) - { - ulong[] tt = Nat128.CreateExt64(); - ImplSquare(x, tt); - Reduce(tt, z); - } - - public static void SquareAddToExt(ulong[] x, ulong[] zz) - { - ulong[] tt = Nat128.CreateExt64(); - ImplSquare(x, tt); - AddExt(zz, tt, zz); - } - - public static void SquareN(ulong[] x, int n, ulong[] z) - { - Debug.Assert(n > 0); - - ulong[] tt = Nat128.CreateExt64(); - ImplSquare(x, tt); - Reduce(tt, z); - - while (--n > 0) - { - ImplSquare(z, tt); - Reduce(tt, z); - } - } - - public static uint Trace(ulong[] x) - { - // Non-zero-trace bits: 0 - return (uint)(x[0]) & 1U; - } - - protected static void ImplMultiply(ulong[] x, ulong[] y, ulong[] zz) - { - /* - * "Three-way recursion" as described in "Batch binary Edwards", Daniel J. Bernstein. - */ - - ulong f0 = x[0], f1 = x[1]; - f1 = ((f0 >> 57) ^ (f1 << 7)) & M57; - f0 &= M57; - - ulong g0 = y[0], g1 = y[1]; - g1 = ((g0 >> 57) ^ (g1 << 7)) & M57; - g0 &= M57; - - ulong[] H = new ulong[6]; - - ImplMulw(f0, g0, H, 0); // H(0) 57/56 bits - ImplMulw(f1, g1, H, 2); // H(INF) 57/54 bits - ImplMulw(f0 ^ f1, g0 ^ g1, H, 4); // H(1) 57/56 bits - - ulong r = H[1] ^ H[2]; - ulong z0 = H[0], - z3 = H[3], - z1 = H[4] ^ z0 ^ r, - z2 = H[5] ^ z3 ^ r; - - zz[0] = z0 ^ (z1 << 57); - zz[1] = (z1 >> 7) ^ (z2 << 50); - zz[2] = (z2 >> 14) ^ (z3 << 43); - zz[3] = (z3 >> 21); - } - - protected static void ImplMulw(ulong x, ulong y, ulong[] z, int zOff) - { - Debug.Assert(x >> 57 == 0); - Debug.Assert(y >> 57 == 0); - - ulong[] u = new ulong[8]; - //u[0] = 0; - u[1] = y; - u[2] = u[1] << 1; - u[3] = u[2] ^ y; - u[4] = u[2] << 1; - u[5] = u[4] ^ y; - u[6] = u[3] << 1; - u[7] = u[6] ^ y; - - uint j = (uint)x; - ulong g, h = 0, l = u[j & 7]; - int k = 48; - do - { - j = (uint)(x >> k); - g = u[j & 7] - ^ u[(j >> 3) & 7] << 3 - ^ u[(j >> 6) & 7] << 6; - l ^= (g << k); - h ^= (g >> -k); - } - while ((k -= 9) > 0); - - h ^= ((x & 0x0100804020100800UL) & (ulong)(((long)y << 7) >> 63)) >> 8; - - Debug.Assert(h >> 49 == 0); - - z[zOff ] = l & M57; - z[zOff + 1] = (l >> 57) ^ (h << 7); - } - - protected static void ImplSquare(ulong[] x, ulong[] zz) - { - Interleave.Expand64To128(x[0], zz, 0); - Interleave.Expand64To128(x[1], zz, 2); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT113FieldElement.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT113FieldElement.cs deleted file mode 100644 index 9ba25d9..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT113FieldElement.cs +++ /dev/null @@ -1,216 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT113FieldElement - : ECFieldElement - { - protected internal readonly ulong[] x; - - public SecT113FieldElement(BigInteger x) - { - if (x == null || x.SignValue < 0 || x.BitLength > 113) - throw new ArgumentException("value invalid for SecT113FieldElement", "x"); - - this.x = SecT113Field.FromBigInteger(x); - } - - public SecT113FieldElement() - { - this.x = Nat128.Create64(); - } - - protected internal SecT113FieldElement(ulong[] x) - { - this.x = x; - } - - public override bool IsOne - { - get { return Nat128.IsOne64(x); } - } - - public override bool IsZero - { - get { return Nat128.IsZero64(x); } - } - - public override bool TestBitZero() - { - return (x[0] & 1L) != 0L; - } - - public override BigInteger ToBigInteger() - { - return Nat128.ToBigInteger64(x); - } - - public override string FieldName - { - get { return "SecT113Field"; } - } - - public override int FieldSize - { - get { return 113; } - } - - public override ECFieldElement Add(ECFieldElement b) - { - ulong[] z = Nat128.Create64(); - SecT113Field.Add(x, ((SecT113FieldElement)b).x, z); - return new SecT113FieldElement(z); - } - - public override ECFieldElement AddOne() - { - ulong[] z = Nat128.Create64(); - SecT113Field.AddOne(x, z); - return new SecT113FieldElement(z); - } - - public override ECFieldElement Subtract(ECFieldElement b) - { - // Addition and Subtraction are the same in F2m - return Add(b); - } - - public override ECFieldElement Multiply(ECFieldElement b) - { - ulong[] z = Nat128.Create64(); - SecT113Field.Multiply(x, ((SecT113FieldElement)b).x, z); - return new SecT113FieldElement(z); - } - - public override ECFieldElement MultiplyMinusProduct(ECFieldElement b, ECFieldElement x, ECFieldElement y) - { - return MultiplyPlusProduct(b, x, y); - } - - public override ECFieldElement MultiplyPlusProduct(ECFieldElement b, ECFieldElement x, ECFieldElement y) - { - ulong[] ax = this.x, bx = ((SecT113FieldElement)b).x; - ulong[] xx = ((SecT113FieldElement)x).x, yx = ((SecT113FieldElement)y).x; - - ulong[] tt = Nat128.CreateExt64(); - SecT113Field.MultiplyAddToExt(ax, bx, tt); - SecT113Field.MultiplyAddToExt(xx, yx, tt); - - ulong[] z = Nat128.Create64(); - SecT113Field.Reduce(tt, z); - return new SecT113FieldElement(z); - } - - public override ECFieldElement Divide(ECFieldElement b) - { - return Multiply(b.Invert()); - } - - public override ECFieldElement Negate() - { - return this; - } - - public override ECFieldElement Square() - { - ulong[] z = Nat128.Create64(); - SecT113Field.Square(x, z); - return new SecT113FieldElement(z); - } - - public override ECFieldElement SquareMinusProduct(ECFieldElement x, ECFieldElement y) - { - return SquarePlusProduct(x, y); - } - - public override ECFieldElement SquarePlusProduct(ECFieldElement x, ECFieldElement y) - { - ulong[] ax = this.x; - ulong[] xx = ((SecT113FieldElement)x).x, yx = ((SecT113FieldElement)y).x; - - ulong[] tt = Nat128.CreateExt64(); - SecT113Field.SquareAddToExt(ax, tt); - SecT113Field.MultiplyAddToExt(xx, yx, tt); - - ulong[] z = Nat128.Create64(); - SecT113Field.Reduce(tt, z); - return new SecT113FieldElement(z); - } - - public override ECFieldElement SquarePow(int pow) - { - if (pow < 1) - return this; - - ulong[] z = Nat128.Create64(); - SecT113Field.SquareN(x, pow, z); - return new SecT113FieldElement(z); - } - - public override ECFieldElement Invert() - { - ulong[] z = Nat128.Create64(); - SecT113Field.Invert(x, z); - return new SecT113FieldElement(z); - } - - public override ECFieldElement Sqrt() - { - ulong[] z = Nat128.Create64(); - SecT113Field.Sqrt(x, z); - return new SecT113FieldElement(z); - } - - public virtual int Representation - { - get { return F2mFieldElement.Tpb; } - } - - public virtual int M - { - get { return 113; } - } - - public virtual int K1 - { - get { return 9; } - } - - public virtual int K2 - { - get { return 0; } - } - - public virtual int K3 - { - get { return 0; } - } - - public override bool Equals(object obj) - { - return Equals(obj as SecT113FieldElement); - } - - public override bool Equals(ECFieldElement other) - { - return Equals(other as SecT113FieldElement); - } - - public virtual bool Equals(SecT113FieldElement other) - { - if (this == other) - return true; - if (null == other) - return false; - return Nat128.Eq64(x, other.x); - } - - public override int GetHashCode() - { - return 113009 ^ Arrays.GetHashCode(x, 0, 2); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT113R1Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT113R1Curve.cs deleted file mode 100644 index 2705c94..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT113R1Curve.cs +++ /dev/null @@ -1,98 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT113R1Curve - : AbstractF2mCurve - { - private const int SecT113R1_DEFAULT_COORDS = COORD_LAMBDA_PROJECTIVE; - - protected readonly SecT113R1Point m_infinity; - - public SecT113R1Curve() - : base(113, 9, 0, 0) - { - this.m_infinity = new SecT113R1Point(this, null, null); - - this.m_a = FromBigInteger(new BigInteger(1, Hex.Decode("003088250CA6E7C7FE649CE85820F7"))); - this.m_b = FromBigInteger(new BigInteger(1, Hex.Decode("00E8BEE4D3E2260744188BE0E9C723"))); - this.m_order = new BigInteger(1, Hex.Decode("0100000000000000D9CCEC8A39E56F")); - this.m_cofactor = BigInteger.Two; - - this.m_coord = SecT113R1_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecT113R1Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_LAMBDA_PROJECTIVE: - return true; - default: - return false; - } - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return 113; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecT113FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecT113R1Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecT113R1Point(this, x, y, zs, withCompression); - } - - public override bool IsKoblitz - { - get { return false; } - } - - public virtual int M - { - get { return 113; } - } - - public virtual bool IsTrinomial - { - get { return true; } - } - - public virtual int K1 - { - get { return 9; } - } - - public virtual int K2 - { - get { return 0; } - } - - public virtual int K3 - { - get { return 0; } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT113R1Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT113R1Point.cs deleted file mode 100644 index 6ecc8b0..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT113R1Point.cs +++ /dev/null @@ -1,281 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT113R1Point - : AbstractF2mPoint - { - /** - * @deprecated Use ECCurve.createPoint to construct points - */ - public SecT113R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * @deprecated per-point compression property will be removed, refer {@link #getEncoded(bool)} - */ - public SecT113R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecT113R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecT113R1Point(null, AffineXCoord, AffineYCoord); - } - - public override ECFieldElement YCoord - { - get - { - ECFieldElement X = RawXCoord, L = RawYCoord; - - if (this.IsInfinity || X.IsZero) - return L; - - // Y is actually Lambda (X + Y/X) here; convert to affine value on the fly - ECFieldElement Y = L.Add(X).Multiply(X); - - ECFieldElement Z = RawZCoords[0]; - if (!Z.IsOne) - { - Y = Y.Divide(Z); - } - - return Y; - } - } - - protected internal override bool CompressionYTilde - { - get - { - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return false; - - ECFieldElement Y = this.RawYCoord; - - // Y is actually Lambda (X + Y/X) here - return Y.TestBitZero() != X.TestBitZero(); - } - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - ECFieldElement X2 = b.RawXCoord; - - if (X1.IsZero) - { - if (X2.IsZero) - return curve.Infinity; - - return b.Add(this); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord, Z2 = b.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement U2 = X2, S2 = L2; - if (!Z1IsOne) - { - U2 = U2.Multiply(Z1); - S2 = S2.Multiply(Z1); - } - - bool Z2IsOne = Z2.IsOne; - ECFieldElement U1 = X1, S1 = L1; - if (!Z2IsOne) - { - U1 = U1.Multiply(Z2); - S1 = S1.Multiply(Z2); - } - - ECFieldElement A = S1.Add(S2); - ECFieldElement B = U1.Add(U2); - - if (B.IsZero) - { - if (A.IsZero) - return Twice(); - - return curve.Infinity; - } - - ECFieldElement X3, L3, Z3; - if (X2.IsZero) - { - // TODO This can probably be optimized quite a bit - ECPoint p = this.Normalize(); - X1 = p.XCoord; - ECFieldElement Y1 = p.YCoord; - - ECFieldElement Y2 = L2; - ECFieldElement L = Y1.Add(Y2).Divide(X1); - - X3 = L.Square().Add(L).Add(X1).Add(curve.A); - if (X3.IsZero) - { - return new SecT113R1Point(curve, X3, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement Y3 = L.Multiply(X1.Add(X3)).Add(X3).Add(Y1); - L3 = Y3.Divide(X3).Add(X3); - Z3 = curve.FromBigInteger(BigInteger.One); - } - else - { - B = B.Square(); - - ECFieldElement AU1 = A.Multiply(U1); - ECFieldElement AU2 = A.Multiply(U2); - - X3 = AU1.Multiply(AU2); - if (X3.IsZero) - { - return new SecT113R1Point(curve, X3, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement ABZ2 = A.Multiply(B); - if (!Z2IsOne) - { - ABZ2 = ABZ2.Multiply(Z2); - } - - L3 = AU2.Add(B).SquarePlusProduct(ABZ2, L1.Add(Z1)); - - Z3 = ABZ2; - if (!Z1IsOne) - { - Z3 = Z3.Multiply(Z1); - } - } - - return new SecT113R1Point(curve, X3, L3, new ECFieldElement[]{ Z3 }, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return curve.Infinity; - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement L1Z1 = Z1IsOne ? L1 : L1.Multiply(Z1); - ECFieldElement Z1Sq = Z1IsOne ? Z1 : Z1.Square(); - ECFieldElement a = curve.A; - ECFieldElement aZ1Sq = Z1IsOne ? a : a.Multiply(Z1Sq); - ECFieldElement T = L1.Square().Add(L1Z1).Add(aZ1Sq); - if (T.IsZero) - { - return new SecT113R1Point(curve, T, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement X3 = T.Square(); - ECFieldElement Z3 = Z1IsOne ? T : T.Multiply(Z1Sq); - - ECFieldElement X1Z1 = Z1IsOne ? X1 : X1.Multiply(Z1); - ECFieldElement L3 = X1Z1.SquarePlusProduct(T, L1Z1).Add(X3).Add(Z3); - - return new SecT113R1Point(curve, X3, L3, new ECFieldElement[]{ Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return b; - } - - ECFieldElement X2 = b.RawXCoord, Z2 = b.RawZCoords[0]; - if (X2.IsZero || !Z2.IsOne) - { - return Twice().Add(b); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord; - - ECFieldElement X1Sq = X1.Square(); - ECFieldElement L1Sq = L1.Square(); - ECFieldElement Z1Sq = Z1.Square(); - ECFieldElement L1Z1 = L1.Multiply(Z1); - - ECFieldElement T = curve.A.Multiply(Z1Sq).Add(L1Sq).Add(L1Z1); - ECFieldElement L2plus1 = L2.AddOne(); - ECFieldElement A = curve.A.Add(L2plus1).Multiply(Z1Sq).Add(L1Sq).MultiplyPlusProduct(T, X1Sq, Z1Sq); - ECFieldElement X2Z1Sq = X2.Multiply(Z1Sq); - ECFieldElement B = X2Z1Sq.Add(T).Square(); - - if (B.IsZero) - { - if (A.IsZero) - return b.Twice(); - - return curve.Infinity; - } - - if (A.IsZero) - { - return new SecT113R1Point(curve, A, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement X3 = A.Square().Multiply(X2Z1Sq); - ECFieldElement Z3 = A.Multiply(B).Multiply(Z1Sq); - ECFieldElement L3 = A.Add(B).Square().MultiplyPlusProduct(T, L2plus1, Z3); - - return new SecT113R1Point(curve, X3, L3, new ECFieldElement[]{ Z3 }, IsCompressed); - } - - public override ECPoint Negate() - { - if (IsInfinity) - return this; - - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return this; - - // L is actually Lambda (X + Y/X) here - ECFieldElement L = this.RawYCoord, Z = this.RawZCoords[0]; - return new SecT113R1Point(Curve, X, L.Add(Z), new ECFieldElement[]{ Z }, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT113R2Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT113R2Curve.cs deleted file mode 100644 index abfd26d..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT113R2Curve.cs +++ /dev/null @@ -1,98 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT113R2Curve - : AbstractF2mCurve - { - private const int SecT113R2_DEFAULT_COORDS = COORD_LAMBDA_PROJECTIVE; - - protected readonly SecT113R2Point m_infinity; - - public SecT113R2Curve() - : base(113, 9, 0, 0) - { - this.m_infinity = new SecT113R2Point(this, null, null); - - this.m_a = FromBigInteger(new BigInteger(1, Hex.Decode("00689918DBEC7E5A0DD6DFC0AA55C7"))); - this.m_b = FromBigInteger(new BigInteger(1, Hex.Decode("0095E9A9EC9B297BD4BF36E059184F"))); - this.m_order = new BigInteger(1, Hex.Decode("010000000000000108789B2496AF93")); - this.m_cofactor = BigInteger.Two; - - this.m_coord = SecT113R2_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecT113R2Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_LAMBDA_PROJECTIVE: - return true; - default: - return false; - } - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return 113; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecT113FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecT113R2Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecT113R2Point(this, x, y, zs, withCompression); - } - - public override bool IsKoblitz - { - get { return false; } - } - - public virtual int M - { - get { return 113; } - } - - public virtual bool IsTrinomial - { - get { return true; } - } - - public virtual int K1 - { - get { return 9; } - } - - public virtual int K2 - { - get { return 0; } - } - - public virtual int K3 - { - get { return 0; } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT113R2Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT113R2Point.cs deleted file mode 100644 index 1453d78..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT113R2Point.cs +++ /dev/null @@ -1,291 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT113R2Point - : AbstractF2mPoint - { - /** - * @deprecated Use ECCurve.createPoint to construct points - */ - public SecT113R2Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * @deprecated per-point compression property will be removed, refer {@link #getEncoded(bool)} - */ - public SecT113R2Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecT113R2Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecT113R2Point(null, AffineXCoord, AffineYCoord); - } - - public override ECFieldElement YCoord - { - get - { - ECFieldElement X = RawXCoord, L = RawYCoord; - - if (this.IsInfinity || X.IsZero) - return L; - - // Y is actually Lambda (X + Y/X) here; convert to affine value on the fly - ECFieldElement Y = L.Add(X).Multiply(X); - - ECFieldElement Z = RawZCoords[0]; - if (!Z.IsOne) - { - Y = Y.Divide(Z); - } - - return Y; - } - } - - protected internal override bool CompressionYTilde - { - get - { - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return false; - - ECFieldElement Y = this.RawYCoord; - - // Y is actually Lambda (X + Y/X) here - return Y.TestBitZero() != X.TestBitZero(); - } - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - { - return b; - } - if (b.IsInfinity) - { - return this; - } - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - ECFieldElement X2 = b.RawXCoord; - - if (X1.IsZero) - { - if (X2.IsZero) - return curve.Infinity; - - return b.Add(this); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord, Z2 = b.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement U2 = X2, S2 = L2; - if (!Z1IsOne) - { - U2 = U2.Multiply(Z1); - S2 = S2.Multiply(Z1); - } - - bool Z2IsOne = Z2.IsOne; - ECFieldElement U1 = X1, S1 = L1; - if (!Z2IsOne) - { - U1 = U1.Multiply(Z2); - S1 = S1.Multiply(Z2); - } - - ECFieldElement A = S1.Add(S2); - ECFieldElement B = U1.Add(U2); - - if (B.IsZero) - { - if (A.IsZero) - return Twice(); - - return curve.Infinity; - } - - ECFieldElement X3, L3, Z3; - if (X2.IsZero) - { - // TODO This can probably be optimized quite a bit - ECPoint p = this.Normalize(); - X1 = p.XCoord; - ECFieldElement Y1 = p.YCoord; - - ECFieldElement Y2 = L2; - ECFieldElement L = Y1.Add(Y2).Divide(X1); - - X3 = L.Square().Add(L).Add(X1).Add(curve.A); - if (X3.IsZero) - { - return new SecT113R2Point(curve, X3, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement Y3 = L.Multiply(X1.Add(X3)).Add(X3).Add(Y1); - L3 = Y3.Divide(X3).Add(X3); - Z3 = curve.FromBigInteger(BigInteger.One); - } - else - { - B = B.Square(); - - ECFieldElement AU1 = A.Multiply(U1); - ECFieldElement AU2 = A.Multiply(U2); - - X3 = AU1.Multiply(AU2); - if (X3.IsZero) - { - return new SecT113R2Point(curve, X3, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement ABZ2 = A.Multiply(B); - if (!Z2IsOne) - { - ABZ2 = ABZ2.Multiply(Z2); - } - - L3 = AU2.Add(B).SquarePlusProduct(ABZ2, L1.Add(Z1)); - - Z3 = ABZ2; - if (!Z1IsOne) - { - Z3 = Z3.Multiply(Z1); - } - } - - return new SecT113R2Point(curve, X3, L3, new ECFieldElement[]{ Z3 }, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - { - return this; - } - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return curve.Infinity; - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement L1Z1 = Z1IsOne ? L1 : L1.Multiply(Z1); - ECFieldElement Z1Sq = Z1IsOne ? Z1 : Z1.Square(); - ECFieldElement a = curve.A; - ECFieldElement aZ1Sq = Z1IsOne ? a : a.Multiply(Z1Sq); - ECFieldElement T = L1.Square().Add(L1Z1).Add(aZ1Sq); - if (T.IsZero) - { - return new SecT113R2Point(curve, T, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement X3 = T.Square(); - ECFieldElement Z3 = Z1IsOne ? T : T.Multiply(Z1Sq); - - ECFieldElement X1Z1 = Z1IsOne ? X1 : X1.Multiply(Z1); - ECFieldElement L3 = X1Z1.SquarePlusProduct(T, L1Z1).Add(X3).Add(Z3); - - return new SecT113R2Point(curve, X3, L3, new ECFieldElement[]{ Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this.IsInfinity) - { - return b; - } - if (b.IsInfinity) - { - return Twice(); - } - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return b; - } - - ECFieldElement X2 = b.RawXCoord, Z2 = b.RawZCoords[0]; - if (X2.IsZero || !Z2.IsOne) - { - return Twice().Add(b); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord; - - ECFieldElement X1Sq = X1.Square(); - ECFieldElement L1Sq = L1.Square(); - ECFieldElement Z1Sq = Z1.Square(); - ECFieldElement L1Z1 = L1.Multiply(Z1); - - ECFieldElement T = curve.A.Multiply(Z1Sq).Add(L1Sq).Add(L1Z1); - ECFieldElement L2plus1 = L2.AddOne(); - ECFieldElement A = curve.A.Add(L2plus1).Multiply(Z1Sq).Add(L1Sq).MultiplyPlusProduct(T, X1Sq, Z1Sq); - ECFieldElement X2Z1Sq = X2.Multiply(Z1Sq); - ECFieldElement B = X2Z1Sq.Add(T).Square(); - - if (B.IsZero) - { - if (A.IsZero) - return b.Twice(); - - return curve.Infinity; - } - - if (A.IsZero) - { - return new SecT113R2Point(curve, A, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement X3 = A.Square().Multiply(X2Z1Sq); - ECFieldElement Z3 = A.Multiply(B).Multiply(Z1Sq); - ECFieldElement L3 = A.Add(B).Square().MultiplyPlusProduct(T, L2plus1, Z3); - - return new SecT113R2Point(curve, X3, L3, new ECFieldElement[]{ Z3 }, IsCompressed); - } - - public override ECPoint Negate() - { - if (IsInfinity) - return this; - - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return this; - - // L is actually Lambda (X + Y/X) here - ECFieldElement L = this.RawYCoord, Z = this.RawZCoords[0]; - return new SecT113R2Point(Curve, X, L.Add(Z), new ECFieldElement[]{ Z }, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT131Field.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT131Field.cs deleted file mode 100644 index 1b6697a..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT131Field.cs +++ /dev/null @@ -1,330 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT131Field - { - private const ulong M03 = ulong.MaxValue >> 61; - private const ulong M44 = ulong.MaxValue >> 20; - - private static readonly ulong[] ROOT_Z = new ulong[]{ 0x26BC4D789AF13523UL, 0x26BC4D789AF135E2UL, 0x6UL }; - - public static void Add(ulong[] x, ulong[] y, ulong[] z) - { - z[0] = x[0] ^ y[0]; - z[1] = x[1] ^ y[1]; - z[2] = x[2] ^ y[2]; - } - - public static void AddExt(ulong[] xx, ulong[] yy, ulong[] zz) - { - zz[0] = xx[0] ^ yy[0]; - zz[1] = xx[1] ^ yy[1]; - zz[2] = xx[2] ^ yy[2]; - zz[3] = xx[3] ^ yy[3]; - zz[4] = xx[4] ^ yy[4]; - } - - public static void AddOne(ulong[] x, ulong[] z) - { - z[0] = x[0] ^ 1UL; - z[1] = x[1]; - z[2] = x[2]; - } - - public static ulong[] FromBigInteger(BigInteger x) - { - ulong[] z = Nat192.FromBigInteger64(x); - Reduce61(z, 0); - return z; - } - - public static void Invert(ulong[] x, ulong[] z) - { - if (Nat192.IsZero64(x)) - throw new InvalidOperationException(); - - // Itoh-Tsujii inversion - - ulong[] t0 = Nat192.Create64(); - ulong[] t1 = Nat192.Create64(); - - Square(x, t0); - Multiply(t0, x, t0); - SquareN(t0, 2, t1); - Multiply(t1, t0, t1); - SquareN(t1, 4, t0); - Multiply(t0, t1, t0); - SquareN(t0, 8, t1); - Multiply(t1, t0, t1); - SquareN(t1, 16, t0); - Multiply(t0, t1, t0); - SquareN(t0, 32, t1); - Multiply(t1, t0, t1); - Square(t1, t1); - Multiply(t1, x, t1); - SquareN(t1, 65, t0); - Multiply(t0, t1, t0); - Square(t0, z); - } - - public static void Multiply(ulong[] x, ulong[] y, ulong[] z) - { - ulong[] tt = Nat192.CreateExt64(); - ImplMultiply(x, y, tt); - Reduce(tt, z); - } - - public static void MultiplyAddToExt(ulong[] x, ulong[] y, ulong[] zz) - { - ulong[] tt = Nat192.CreateExt64(); - ImplMultiply(x, y, tt); - AddExt(zz, tt, zz); - } - - public static void Reduce(ulong[] xx, ulong[] z) - { - ulong x0 = xx[0], x1 = xx[1], x2 = xx[2], x3 = xx[3], x4 = xx[4]; - - x1 ^= (x4 << 61) ^ (x4 << 63); - x2 ^= (x4 >> 3) ^ (x4 >> 1) ^ x4 ^ (x4 << 5); - x3 ^= (x4 >> 59); - - x0 ^= (x3 << 61) ^ (x3 << 63); - x1 ^= (x3 >> 3) ^ (x3 >> 1) ^ x3 ^ (x3 << 5); - x2 ^= (x3 >> 59); - - ulong t = x2 >> 3; - z[0] = x0 ^ t ^ (t << 2) ^ (t << 3) ^ (t << 8); - z[1] = x1 ^ (t >> 56); - z[2] = x2 & M03; - } - - public static void Reduce61(ulong[] z, int zOff) - { - ulong z2 = z[zOff + 2], t = z2 >> 3; - z[zOff ] ^= t ^ (t << 2) ^ (t << 3) ^ (t << 8); - z[zOff + 1] ^= (t >> 56); - z[zOff + 2] = z2 & M03; - } - - public static void Sqrt(ulong[] x, ulong[] z) - { - ulong[] odd = Nat192.Create64(); - - ulong u0, u1; - u0 = Interleave.Unshuffle(x[0]); u1 = Interleave.Unshuffle(x[1]); - ulong e0 = (u0 & 0x00000000FFFFFFFFUL) | (u1 << 32); - odd[0] = (u0 >> 32) | (u1 & 0xFFFFFFFF00000000UL); - - u0 = Interleave.Unshuffle(x[2]); - ulong e1 = (u0 & 0x00000000FFFFFFFFUL); - odd[1] = (u0 >> 32); - - Multiply(odd, ROOT_Z, z); - - z[0] ^= e0; - z[1] ^= e1; - } - - public static void Square(ulong[] x, ulong[] z) - { - ulong[] tt = Nat.Create64(5); - ImplSquare(x, tt); - Reduce(tt, z); - } - - public static void SquareAddToExt(ulong[] x, ulong[] zz) - { - ulong[] tt = Nat.Create64(5); - ImplSquare(x, tt); - AddExt(zz, tt, zz); - } - - public static void SquareN(ulong[] x, int n, ulong[] z) - { - Debug.Assert(n > 0); - - ulong[] tt = Nat.Create64(5); - ImplSquare(x, tt); - Reduce(tt, z); - - while (--n > 0) - { - ImplSquare(z, tt); - Reduce(tt, z); - } - } - - public static uint Trace(ulong[] x) - { - // Non-zero-trace bits: 0, 123, 129 - return (uint)(x[0] ^ (x[1] >> 59) ^ (x[2] >> 1)) & 1U; - } - - protected static void ImplCompactExt(ulong[] zz) - { - ulong z0 = zz[0], z1 = zz[1], z2 = zz[2], z3 = zz[3], z4 = zz[4], z5 = zz[5]; - zz[0] = z0 ^ (z1 << 44); - zz[1] = (z1 >> 20) ^ (z2 << 24); - zz[2] = (z2 >> 40) ^ (z3 << 4) - ^ (z4 << 48); - zz[3] = (z3 >> 60) ^ (z5 << 28) - ^ (z4 >> 16); - zz[4] = (z5 >> 36); - zz[5] = 0; - } - - protected static void ImplMultiply(ulong[] x, ulong[] y, ulong[] zz) - { - /* - * "Five-way recursion" as described in "Batch binary Edwards", Daniel J. Bernstein. - */ - - ulong f0 = x[0], f1 = x[1], f2 = x[2]; - f2 = ((f1 >> 24) ^ (f2 << 40)) & M44; - f1 = ((f0 >> 44) ^ (f1 << 20)) & M44; - f0 &= M44; - - ulong g0 = y[0], g1 = y[1], g2 = y[2]; - g2 = ((g1 >> 24) ^ (g2 << 40)) & M44; - g1 = ((g0 >> 44) ^ (g1 << 20)) & M44; - g0 &= M44; - - ulong[] H = new ulong[10]; - - ImplMulw(f0, g0, H, 0); // H(0) 44/43 bits - ImplMulw(f2, g2, H, 2); // H(INF) 44/41 bits - - ulong t0 = f0 ^ f1 ^ f2; - ulong t1 = g0 ^ g1 ^ g2; - - ImplMulw(t0, t1, H, 4); // H(1) 44/43 bits - - ulong t2 = (f1 << 1) ^ (f2 << 2); - ulong t3 = (g1 << 1) ^ (g2 << 2); - - ImplMulw(f0 ^ t2, g0 ^ t3, H, 6); // H(t) 44/45 bits - ImplMulw(t0 ^ t2, t1 ^ t3, H, 8); // H(t + 1) 44/45 bits - - ulong t4 = H[6] ^ H[8]; - ulong t5 = H[7] ^ H[9]; - - Debug.Assert(t5 >> 44 == 0); - - // Calculate V - ulong v0 = (t4 << 1) ^ H[6]; - ulong v1 = t4 ^ (t5 << 1) ^ H[7]; - ulong v2 = t5; - - // Calculate U - ulong u0 = H[0]; - ulong u1 = H[1] ^ H[0] ^ H[4]; - ulong u2 = H[1] ^ H[5]; - - // Calculate W - ulong w0 = u0 ^ v0 ^ (H[2] << 4) ^ (H[2] << 1); - ulong w1 = u1 ^ v1 ^ (H[3] << 4) ^ (H[3] << 1); - ulong w2 = u2 ^ v2; - - // Propagate carries - w1 ^= (w0 >> 44); w0 &= M44; - w2 ^= (w1 >> 44); w1 &= M44; - - Debug.Assert((w0 & 1UL) == 0); - - // Divide W by t - - w0 = (w0 >> 1) ^ ((w1 & 1UL) << 43); - w1 = (w1 >> 1) ^ ((w2 & 1UL) << 43); - w2 = (w2 >> 1); - - // Divide W by (t + 1) - - w0 ^= (w0 << 1); - w0 ^= (w0 << 2); - w0 ^= (w0 << 4); - w0 ^= (w0 << 8); - w0 ^= (w0 << 16); - w0 ^= (w0 << 32); - - w0 &= M44; w1 ^= (w0 >> 43); - - w1 ^= (w1 << 1); - w1 ^= (w1 << 2); - w1 ^= (w1 << 4); - w1 ^= (w1 << 8); - w1 ^= (w1 << 16); - w1 ^= (w1 << 32); - - w1 &= M44; w2 ^= (w1 >> 43); - - w2 ^= (w2 << 1); - w2 ^= (w2 << 2); - w2 ^= (w2 << 4); - w2 ^= (w2 << 8); - w2 ^= (w2 << 16); - w2 ^= (w2 << 32); - - Debug.Assert(w2 >> 42 == 0); - - zz[0] = u0; - zz[1] = u1 ^ w0 ^ H[2]; - zz[2] = u2 ^ w1 ^ w0 ^ H[3]; - zz[3] = w2 ^ w1; - zz[4] = w2 ^ H[2]; - zz[5] = H[3]; - - ImplCompactExt(zz); - } - - protected static void ImplMulw(ulong x, ulong y, ulong[] z, int zOff) - { - Debug.Assert(x >> 45 == 0); - Debug.Assert(y >> 45 == 0); - - ulong[] u = new ulong[8]; - //u[0] = 0; - u[1] = y; - u[2] = u[1] << 1; - u[3] = u[2] ^ y; - u[4] = u[2] << 1; - u[5] = u[4] ^ y; - u[6] = u[3] << 1; - u[7] = u[6] ^ y; - - uint j = (uint)x; - ulong g, h = 0, l = u[j & 7] - ^ u[(j >> 3) & 7] << 3 - ^ u[(j >> 6) & 7] << 6; - int k = 33; - do - { - j = (uint)(x >> k); - g = u[j & 7] - ^ u[(j >> 3) & 7] << 3 - ^ u[(j >> 6) & 7] << 6 - ^ u[(j >> 9) & 7] << 9; - l ^= (g << k); - h ^= (g >> -k); - } - while ((k -= 12) > 0); - - Debug.Assert(h >> 25 == 0); - - z[zOff ] = l & M44; - z[zOff + 1] = (l >> 44) ^ (h << 20); - } - - protected static void ImplSquare(ulong[] x, ulong[] zz) - { - Interleave.Expand64To128(x[0], zz, 0); - Interleave.Expand64To128(x[1], zz, 2); - - zz[4] = Interleave.Expand8to16((uint)x[2]); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT131FieldElement.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT131FieldElement.cs deleted file mode 100644 index e0ecc10..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT131FieldElement.cs +++ /dev/null @@ -1,216 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT131FieldElement - : ECFieldElement - { - protected readonly ulong[] x; - - public SecT131FieldElement(BigInteger x) - { - if (x == null || x.SignValue < 0 || x.BitLength > 131) - throw new ArgumentException("value invalid for SecT131FieldElement", "x"); - - this.x = SecT131Field.FromBigInteger(x); - } - - public SecT131FieldElement() - { - this.x = Nat192.Create64(); - } - - protected internal SecT131FieldElement(ulong[] x) - { - this.x = x; - } - - public override bool IsOne - { - get { return Nat192.IsOne64(x); } - } - - public override bool IsZero - { - get { return Nat192.IsZero64(x); } - } - - public override bool TestBitZero() - { - return (x[0] & 1UL) != 0UL; - } - - public override BigInteger ToBigInteger() - { - return Nat192.ToBigInteger64(x); - } - - public override string FieldName - { - get { return "SecT131Field"; } - } - - public override int FieldSize - { - get { return 131; } - } - - public override ECFieldElement Add(ECFieldElement b) - { - ulong[] z = Nat192.Create64(); - SecT131Field.Add(x, ((SecT131FieldElement)b).x, z); - return new SecT131FieldElement(z); - } - - public override ECFieldElement AddOne() - { - ulong[] z = Nat192.Create64(); - SecT131Field.AddOne(x, z); - return new SecT131FieldElement(z); - } - - public override ECFieldElement Subtract(ECFieldElement b) - { - // Addition and Subtraction are the same in F2m - return Add(b); - } - - public override ECFieldElement Multiply(ECFieldElement b) - { - ulong[] z = Nat192.Create64(); - SecT131Field.Multiply(x, ((SecT131FieldElement)b).x, z); - return new SecT131FieldElement(z); - } - - public override ECFieldElement MultiplyMinusProduct(ECFieldElement b, ECFieldElement x, ECFieldElement y) - { - return MultiplyPlusProduct(b, x, y); - } - - public override ECFieldElement MultiplyPlusProduct(ECFieldElement b, ECFieldElement x, ECFieldElement y) - { - ulong[] ax = this.x, bx = ((SecT131FieldElement)b).x; - ulong[] xx = ((SecT131FieldElement)x).x, yx = ((SecT131FieldElement)y).x; - - ulong[] tt = Nat.Create64(5); - SecT131Field.MultiplyAddToExt(ax, bx, tt); - SecT131Field.MultiplyAddToExt(xx, yx, tt); - - ulong[] z = Nat192.Create64(); - SecT131Field.Reduce(tt, z); - return new SecT131FieldElement(z); - } - - public override ECFieldElement Divide(ECFieldElement b) - { - return Multiply(b.Invert()); - } - - public override ECFieldElement Negate() - { - return this; - } - - public override ECFieldElement Square() - { - ulong[] z = Nat192.Create64(); - SecT131Field.Square(x, z); - return new SecT131FieldElement(z); - } - - public override ECFieldElement SquareMinusProduct(ECFieldElement x, ECFieldElement y) - { - return SquarePlusProduct(x, y); - } - - public override ECFieldElement SquarePlusProduct(ECFieldElement x, ECFieldElement y) - { - ulong[] ax = this.x; - ulong[] xx = ((SecT131FieldElement)x).x, yx = ((SecT131FieldElement)y).x; - - ulong[] tt = Nat.Create64(5); - SecT131Field.SquareAddToExt(ax, tt); - SecT131Field.MultiplyAddToExt(xx, yx, tt); - - ulong[] z = Nat192.Create64(); - SecT131Field.Reduce(tt, z); - return new SecT131FieldElement(z); - } - - public override ECFieldElement SquarePow(int pow) - { - if (pow < 1) - return this; - - ulong[] z = Nat192.Create64(); - SecT131Field.SquareN(x, pow, z); - return new SecT131FieldElement(z); - } - - public override ECFieldElement Invert() - { - ulong[] z = Nat192.Create64(); - SecT131Field.Invert(x, z); - return new SecT131FieldElement(z); - } - - public override ECFieldElement Sqrt() - { - ulong[] z = Nat192.Create64(); - SecT131Field.Sqrt(x, z); - return new SecT131FieldElement(z); - } - - public virtual int Representation - { - get { return F2mFieldElement.Ppb; } - } - - public virtual int M - { - get { return 131; } - } - - public virtual int K1 - { - get { return 2; } - } - - public virtual int K2 - { - get { return 3; } - } - - public virtual int K3 - { - get { return 8; } - } - - public override bool Equals(object obj) - { - return Equals(obj as SecT131FieldElement); - } - - public override bool Equals(ECFieldElement other) - { - return Equals(other as SecT131FieldElement); - } - - public virtual bool Equals(SecT131FieldElement other) - { - if (this == other) - return true; - if (null == other) - return false; - return Nat192.Eq64(x, other.x); - } - - public override int GetHashCode() - { - return 131832 ^ Arrays.GetHashCode(x, 0, 3); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT131R1Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT131R1Curve.cs deleted file mode 100644 index b73964c..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT131R1Curve.cs +++ /dev/null @@ -1,98 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT131R1Curve - : AbstractF2mCurve - { - private const int SecT131R1_DEFAULT_COORDS = COORD_LAMBDA_PROJECTIVE; - - protected readonly SecT131R1Point m_infinity; - - public SecT131R1Curve() - : base(131, 2, 3, 8) - { - this.m_infinity = new SecT131R1Point(this, null, null); - - this.m_a = FromBigInteger(new BigInteger(1, Hex.Decode("07A11B09A76B562144418FF3FF8C2570B8"))); - this.m_b = FromBigInteger(new BigInteger(1, Hex.Decode("0217C05610884B63B9C6C7291678F9D341"))); - this.m_order = new BigInteger(1, Hex.Decode("0400000000000000023123953A9464B54D")); - this.m_cofactor = BigInteger.Two; - - this.m_coord = SecT131R1_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecT131R1Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_LAMBDA_PROJECTIVE: - return true; - default: - return false; - } - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return 131; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecT131FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecT131R1Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecT131R1Point(this, x, y, zs, withCompression); - } - - public override bool IsKoblitz - { - get { return false; } - } - - public virtual int M - { - get { return 131; } - } - - public virtual bool IsTrinomial - { - get { return false; } - } - - public virtual int K1 - { - get { return 2; } - } - - public virtual int K2 - { - get { return 3; } - } - - public virtual int K3 - { - get { return 8; } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT131R1Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT131R1Point.cs deleted file mode 100644 index 7afdad8..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT131R1Point.cs +++ /dev/null @@ -1,287 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT131R1Point - : AbstractF2mPoint - { - /** - * @deprecated Use ECCurve.createPoint to construct points - */ - public SecT131R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * @deprecated per-point compression property will be removed, refer {@link #getEncoded(bool)} - */ - public SecT131R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecT131R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecT131R1Point(null, AffineXCoord, AffineYCoord); - } - - public override ECFieldElement YCoord - { - get - { - ECFieldElement X = RawXCoord, L = RawYCoord; - - if (this.IsInfinity || X.IsZero) - return L; - - // Y is actually Lambda (X + Y/X) here; convert to affine value on the fly - ECFieldElement Y = L.Add(X).Multiply(X); - - ECFieldElement Z = RawZCoords[0]; - if (!Z.IsOne) - { - Y = Y.Divide(Z); - } - - return Y; - } - } - - protected internal override bool CompressionYTilde - { - get - { - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return false; - - ECFieldElement Y = this.RawYCoord; - - // Y is actually Lambda (X + Y/X) here - return Y.TestBitZero() != X.TestBitZero(); - } - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - ECFieldElement X2 = b.RawXCoord; - - if (X1.IsZero) - { - if (X2.IsZero) - return curve.Infinity; - - return b.Add(this); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord, Z2 = b.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement U2 = X2, S2 = L2; - if (!Z1IsOne) - { - U2 = U2.Multiply(Z1); - S2 = S2.Multiply(Z1); - } - - bool Z2IsOne = Z2.IsOne; - ECFieldElement U1 = X1, S1 = L1; - if (!Z2IsOne) - { - U1 = U1.Multiply(Z2); - S1 = S1.Multiply(Z2); - } - - ECFieldElement A = S1.Add(S2); - ECFieldElement B = U1.Add(U2); - - if (B.IsZero) - { - if (A.IsZero) - return Twice(); - - return curve.Infinity; - } - - ECFieldElement X3, L3, Z3; - if (X2.IsZero) - { - // TODO This can probably be optimized quite a bit - ECPoint p = this.Normalize(); - X1 = p.XCoord; - ECFieldElement Y1 = p.YCoord; - - ECFieldElement Y2 = L2; - ECFieldElement L = Y1.Add(Y2).Divide(X1); - - X3 = L.Square().Add(L).Add(X1).Add(curve.A); - if (X3.IsZero) - { - return new SecT131R1Point(curve, X3, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement Y3 = L.Multiply(X1.Add(X3)).Add(X3).Add(Y1); - L3 = Y3.Divide(X3).Add(X3); - Z3 = curve.FromBigInteger(BigInteger.One); - } - else - { - B = B.Square(); - - ECFieldElement AU1 = A.Multiply(U1); - ECFieldElement AU2 = A.Multiply(U2); - - X3 = AU1.Multiply(AU2); - if (X3.IsZero) - { - return new SecT131R1Point(curve, X3, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement ABZ2 = A.Multiply(B); - if (!Z2IsOne) - { - ABZ2 = ABZ2.Multiply(Z2); - } - - L3 = AU2.Add(B).SquarePlusProduct(ABZ2, L1.Add(Z1)); - - Z3 = ABZ2; - if (!Z1IsOne) - { - Z3 = Z3.Multiply(Z1); - } - } - - return new SecT131R1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - { - return this; - } - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return curve.Infinity; - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement L1Z1 = Z1IsOne ? L1 : L1.Multiply(Z1); - ECFieldElement Z1Sq = Z1IsOne ? Z1 : Z1.Square(); - ECFieldElement a = curve.A; - ECFieldElement aZ1Sq = Z1IsOne ? a : a.Multiply(Z1Sq); - ECFieldElement T = L1.Square().Add(L1Z1).Add(aZ1Sq); - if (T.IsZero) - { - return new SecT131R1Point(curve, T, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement X3 = T.Square(); - ECFieldElement Z3 = Z1IsOne ? T : T.Multiply(Z1Sq); - - ECFieldElement X1Z1 = Z1IsOne ? X1 : X1.Multiply(Z1); - ECFieldElement L3 = X1Z1.SquarePlusProduct(T, L1Z1).Add(X3).Add(Z3); - - return new SecT131R1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this.IsInfinity) - { - return b; - } - if (b.IsInfinity) - { - return Twice(); - } - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return b; - } - - ECFieldElement X2 = b.RawXCoord, Z2 = b.RawZCoords[0]; - if (X2.IsZero || !Z2.IsOne) - { - return Twice().Add(b); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord; - - ECFieldElement X1Sq = X1.Square(); - ECFieldElement L1Sq = L1.Square(); - ECFieldElement Z1Sq = Z1.Square(); - ECFieldElement L1Z1 = L1.Multiply(Z1); - - ECFieldElement T = curve.A.Multiply(Z1Sq).Add(L1Sq).Add(L1Z1); - ECFieldElement L2plus1 = L2.AddOne(); - ECFieldElement A = curve.A.Add(L2plus1).Multiply(Z1Sq).Add(L1Sq).MultiplyPlusProduct(T, X1Sq, Z1Sq); - ECFieldElement X2Z1Sq = X2.Multiply(Z1Sq); - ECFieldElement B = X2Z1Sq.Add(T).Square(); - - if (B.IsZero) - { - if (A.IsZero) - return b.Twice(); - - return curve.Infinity; - } - - if (A.IsZero) - { - return new SecT131R1Point(curve, A, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement X3 = A.Square().Multiply(X2Z1Sq); - ECFieldElement Z3 = A.Multiply(B).Multiply(Z1Sq); - ECFieldElement L3 = A.Add(B).Square().MultiplyPlusProduct(T, L2plus1, Z3); - - return new SecT131R1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Negate() - { - if (IsInfinity) - return this; - - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return this; - - // L is actually Lambda (X + Y/X) here - ECFieldElement L = this.RawYCoord, Z = this.RawZCoords[0]; - return new SecT131R1Point(Curve, X, L.Add(Z), new ECFieldElement[] { Z }, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT131R2Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT131R2Curve.cs deleted file mode 100644 index 724921c..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT131R2Curve.cs +++ /dev/null @@ -1,98 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT131R2Curve - : AbstractF2mCurve - { - private const int SecT131R2_DEFAULT_COORDS = COORD_LAMBDA_PROJECTIVE; - - protected readonly SecT131R2Point m_infinity; - - public SecT131R2Curve() - : base(131, 2, 3, 8) - { - this.m_infinity = new SecT131R2Point(this, null, null); - - this.m_a = FromBigInteger(new BigInteger(1, Hex.Decode("03E5A88919D7CAFCBF415F07C2176573B2"))); - this.m_b = FromBigInteger(new BigInteger(1, Hex.Decode("04B8266A46C55657AC734CE38F018F2192"))); - this.m_order = new BigInteger(1, Hex.Decode("0400000000000000016954A233049BA98F")); - this.m_cofactor = BigInteger.Two; - - this.m_coord = SecT131R2_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecT131R2Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_LAMBDA_PROJECTIVE: - return true; - default: - return false; - } - } - - public override int FieldSize - { - get { return 131; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecT131FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecT131R2Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecT131R2Point(this, x, y, zs, withCompression); - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override bool IsKoblitz - { - get { return false; } - } - - public virtual int M - { - get { return 131; } - } - - public virtual bool IsTrinomial - { - get { return false; } - } - - public virtual int K1 - { - get { return 2; } - } - - public virtual int K2 - { - get { return 3; } - } - - public virtual int K3 - { - get { return 8; } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT131R2Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT131R2Point.cs deleted file mode 100644 index be61561..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT131R2Point.cs +++ /dev/null @@ -1,283 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT131R2Point - : AbstractF2mPoint - { - /** - * @deprecated Use ECCurve.createPoint to construct points - */ - public SecT131R2Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * @deprecated per-point compression property will be removed, refer {@link #getEncoded(bool)} - */ - public SecT131R2Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecT131R2Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecT131R2Point(null, AffineXCoord, AffineYCoord); - } - - public override ECFieldElement YCoord - { - get - { - ECFieldElement X = RawXCoord, L = RawYCoord; - - if (this.IsInfinity || X.IsZero) - return L; - - // Y is actually Lambda (X + Y/X) here; convert to affine value on the fly - ECFieldElement Y = L.Add(X).Multiply(X); - - ECFieldElement Z = RawZCoords[0]; - if (!Z.IsOne) - { - Y = Y.Divide(Z); - } - - return Y; - } - } - - protected internal override bool CompressionYTilde - { - get - { - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return false; - - ECFieldElement Y = this.RawYCoord; - - // Y is actually Lambda (X + Y/X) here - return Y.TestBitZero() != X.TestBitZero(); - } - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - ECFieldElement X2 = b.RawXCoord; - - if (X1.IsZero) - { - if (X2.IsZero) - return curve.Infinity; - - return b.Add(this); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord, Z2 = b.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement U2 = X2, S2 = L2; - if (!Z1IsOne) - { - U2 = U2.Multiply(Z1); - S2 = S2.Multiply(Z1); - } - - bool Z2IsOne = Z2.IsOne; - ECFieldElement U1 = X1, S1 = L1; - if (!Z2IsOne) - { - U1 = U1.Multiply(Z2); - S1 = S1.Multiply(Z2); - } - - ECFieldElement A = S1.Add(S2); - ECFieldElement B = U1.Add(U2); - - if (B.IsZero) - { - if (A.IsZero) - return Twice(); - - return curve.Infinity; - } - - ECFieldElement X3, L3, Z3; - if (X2.IsZero) - { - // TODO This can probably be optimized quite a bit - ECPoint p = this.Normalize(); - X1 = p.XCoord; - ECFieldElement Y1 = p.YCoord; - - ECFieldElement Y2 = L2; - ECFieldElement L = Y1.Add(Y2).Divide(X1); - - X3 = L.Square().Add(L).Add(X1).Add(curve.A); - if (X3.IsZero) - { - return new SecT131R2Point(curve, X3, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement Y3 = L.Multiply(X1.Add(X3)).Add(X3).Add(Y1); - L3 = Y3.Divide(X3).Add(X3); - Z3 = curve.FromBigInteger(BigInteger.One); - } - else - { - B = B.Square(); - - ECFieldElement AU1 = A.Multiply(U1); - ECFieldElement AU2 = A.Multiply(U2); - - X3 = AU1.Multiply(AU2); - if (X3.IsZero) - { - return new SecT131R2Point(curve, X3, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement ABZ2 = A.Multiply(B); - if (!Z2IsOne) - { - ABZ2 = ABZ2.Multiply(Z2); - } - - L3 = AU2.Add(B).SquarePlusProduct(ABZ2, L1.Add(Z1)); - - Z3 = ABZ2; - if (!Z1IsOne) - { - Z3 = Z3.Multiply(Z1); - } - } - - return new SecT131R2Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - { - return this; - } - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return curve.Infinity; - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement L1Z1 = Z1IsOne ? L1 : L1.Multiply(Z1); - ECFieldElement Z1Sq = Z1IsOne ? Z1 : Z1.Square(); - ECFieldElement a = curve.A; - ECFieldElement aZ1Sq = Z1IsOne ? a : a.Multiply(Z1Sq); - ECFieldElement T = L1.Square().Add(L1Z1).Add(aZ1Sq); - if (T.IsZero) - { - return new SecT131R2Point(curve, T, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement X3 = T.Square(); - ECFieldElement Z3 = Z1IsOne ? T : T.Multiply(Z1Sq); - - ECFieldElement X1Z1 = Z1IsOne ? X1 : X1.Multiply(Z1); - ECFieldElement L3 = X1Z1.SquarePlusProduct(T, L1Z1).Add(X3).Add(Z3); - - return new SecT131R2Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return b; - } - - ECFieldElement X2 = b.RawXCoord, Z2 = b.RawZCoords[0]; - if (X2.IsZero || !Z2.IsOne) - { - return Twice().Add(b); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord; - - ECFieldElement X1Sq = X1.Square(); - ECFieldElement L1Sq = L1.Square(); - ECFieldElement Z1Sq = Z1.Square(); - ECFieldElement L1Z1 = L1.Multiply(Z1); - - ECFieldElement T = curve.A.Multiply(Z1Sq).Add(L1Sq).Add(L1Z1); - ECFieldElement L2plus1 = L2.AddOne(); - ECFieldElement A = curve.A.Add(L2plus1).Multiply(Z1Sq).Add(L1Sq).MultiplyPlusProduct(T, X1Sq, Z1Sq); - ECFieldElement X2Z1Sq = X2.Multiply(Z1Sq); - ECFieldElement B = X2Z1Sq.Add(T).Square(); - - if (B.IsZero) - { - if (A.IsZero) - return b.Twice(); - - return curve.Infinity; - } - - if (A.IsZero) - { - return new SecT131R2Point(curve, A, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement X3 = A.Square().Multiply(X2Z1Sq); - ECFieldElement Z3 = A.Multiply(B).Multiply(Z1Sq); - ECFieldElement L3 = A.Add(B).Square().MultiplyPlusProduct(T, L2plus1, Z3); - - return new SecT131R2Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Negate() - { - if (IsInfinity) - return this; - - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return this; - - // L is actually Lambda (X + Y/X) here - ECFieldElement L = this.RawYCoord, Z = this.RawZCoords[0]; - return new SecT131R2Point(Curve, X, L.Add(Z), new ECFieldElement[] { Z }, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT163Field.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT163Field.cs deleted file mode 100644 index b1e9aa7..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT163Field.cs +++ /dev/null @@ -1,340 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT163Field - { - private const ulong M35 = ulong.MaxValue >> 29; - private const ulong M55 = ulong.MaxValue >> 9; - - private static readonly ulong[] ROOT_Z = new ulong[]{ 0xB6DB6DB6DB6DB6B0UL, 0x492492492492DB6DUL, 0x492492492UL }; - - public static void Add(ulong[] x, ulong[] y, ulong[] z) - { - z[0] = x[0] ^ y[0]; - z[1] = x[1] ^ y[1]; - z[2] = x[2] ^ y[2]; - } - - public static void AddExt(ulong[] xx, ulong[] yy, ulong[] zz) - { - zz[0] = xx[0] ^ yy[0]; - zz[1] = xx[1] ^ yy[1]; - zz[2] = xx[2] ^ yy[2]; - zz[3] = xx[3] ^ yy[3]; - zz[4] = xx[4] ^ yy[4]; - zz[5] = xx[5] ^ yy[5]; - } - - public static void AddOne(ulong[] x, ulong[] z) - { - z[0] = x[0] ^ 1UL; - z[1] = x[1]; - z[2] = x[2]; - } - - public static ulong[] FromBigInteger(BigInteger x) - { - ulong[] z = Nat192.FromBigInteger64(x); - Reduce29(z, 0); - return z; - } - - public static void Invert(ulong[] x, ulong[] z) - { - if (Nat192.IsZero64(x)) - throw new InvalidOperationException(); - - // Itoh-Tsujii inversion with bases { 2, 3 } - - ulong[] t0 = Nat192.Create64(); - ulong[] t1 = Nat192.Create64(); - - Square(x, t0); - - // 3 | 162 - SquareN(t0, 1, t1); - Multiply(t0, t1, t0); - SquareN(t1, 1, t1); - Multiply(t0, t1, t0); - - // 3 | 54 - SquareN(t0, 3, t1); - Multiply(t0, t1, t0); - SquareN(t1, 3, t1); - Multiply(t0, t1, t0); - - // 3 | 18 - SquareN(t0, 9, t1); - Multiply(t0, t1, t0); - SquareN(t1, 9, t1); - Multiply(t0, t1, t0); - - // 3 | 6 - SquareN(t0, 27, t1); - Multiply(t0, t1, t0); - SquareN(t1, 27, t1); - Multiply(t0, t1, t0); - - // 2 | 2 - SquareN(t0, 81, t1); - Multiply(t0, t1, z); - } - - public static void Multiply(ulong[] x, ulong[] y, ulong[] z) - { - ulong[] tt = Nat192.CreateExt64(); - ImplMultiply(x, y, tt); - Reduce(tt, z); - } - - public static void MultiplyAddToExt(ulong[] x, ulong[] y, ulong[] zz) - { - ulong[] tt = Nat192.CreateExt64(); - ImplMultiply(x, y, tt); - AddExt(zz, tt, zz); - } - - public static void Reduce(ulong[] xx, ulong[] z) - { - ulong x0 = xx[0], x1 = xx[1], x2 = xx[2], x3 = xx[3], x4 = xx[4], x5 = xx[5]; - - x2 ^= (x5 << 29) ^ (x5 << 32) ^ (x5 << 35) ^ (x5 << 36); - x3 ^= (x5 >> 35) ^ (x5 >> 32) ^ (x5 >> 29) ^ (x5 >> 28); - - x1 ^= (x4 << 29) ^ (x4 << 32) ^ (x4 << 35) ^ (x4 << 36); - x2 ^= (x4 >> 35) ^ (x4 >> 32) ^ (x4 >> 29) ^ (x4 >> 28); - - x0 ^= (x3 << 29) ^ (x3 << 32) ^ (x3 << 35) ^ (x3 << 36); - x1 ^= (x3 >> 35) ^ (x3 >> 32) ^ (x3 >> 29) ^ (x3 >> 28); - - ulong t = x2 >> 35; - z[0] = x0 ^ t ^ (t << 3) ^ (t << 6) ^ (t << 7); - z[1] = x1; - z[2] = x2 & M35; - } - - public static void Reduce29(ulong[] z, int zOff) - { - ulong z2 = z[zOff + 2], t = z2 >> 35; - z[zOff ] ^= t ^ (t << 3) ^ (t << 6) ^ (t << 7); - z[zOff + 2] = z2 & M35; - } - - public static void Sqrt(ulong[] x, ulong[] z) - { - ulong[] odd = Nat192.Create64(); - - ulong u0, u1; - u0 = Interleave.Unshuffle(x[0]); u1 = Interleave.Unshuffle(x[1]); - ulong e0 = (u0 & 0x00000000FFFFFFFFUL) | (u1 << 32); - odd[0] = (u0 >> 32) | (u1 & 0xFFFFFFFF00000000UL); - - u0 = Interleave.Unshuffle(x[2]); - ulong e1 = (u0 & 0x00000000FFFFFFFFUL); - odd[1] = (u0 >> 32); - - Multiply(odd, ROOT_Z, z); - - z[0] ^= e0; - z[1] ^= e1; - } - - public static void Square(ulong[] x, ulong[] z) - { - ulong[] tt = Nat192.CreateExt64(); - ImplSquare(x, tt); - Reduce(tt, z); - } - - public static void SquareAddToExt(ulong[] x, ulong[] zz) - { - ulong[] tt = Nat192.CreateExt64(); - ImplSquare(x, tt); - AddExt(zz, tt, zz); - } - - public static void SquareN(ulong[] x, int n, ulong[] z) - { - Debug.Assert(n > 0); - - ulong[] tt = Nat192.CreateExt64(); - ImplSquare(x, tt); - Reduce(tt, z); - - while (--n > 0) - { - ImplSquare(z, tt); - Reduce(tt, z); - } - } - - public static uint Trace(ulong[] x) - { - // Non-zero-trace bits: 0, 157 - return (uint)(x[0] ^ (x[2] >> 29)) & 1U; - } - - protected static void ImplCompactExt(ulong[] zz) - { - ulong z0 = zz[0], z1 = zz[1], z2 = zz[2], z3 = zz[3], z4 = zz[4], z5 = zz[5]; - zz[0] = z0 ^ (z1 << 55); - zz[1] = (z1 >> 9) ^ (z2 << 46); - zz[2] = (z2 >> 18) ^ (z3 << 37); - zz[3] = (z3 >> 27) ^ (z4 << 28); - zz[4] = (z4 >> 36) ^ (z5 << 19); - zz[5] = (z5 >> 45); - } - - protected static void ImplMultiply(ulong[] x, ulong[] y, ulong[] zz) - { - /* - * "Five-way recursion" as described in "Batch binary Edwards", Daniel J. Bernstein. - */ - - ulong f0 = x[0], f1 = x[1], f2 = x[2]; - f2 = ((f1 >> 46) ^ (f2 << 18)); - f1 = ((f0 >> 55) ^ (f1 << 9)) & M55; - f0 &= M55; - - ulong g0 = y[0], g1 = y[1], g2 = y[2]; - g2 = ((g1 >> 46) ^ (g2 << 18)); - g1 = ((g0 >> 55) ^ (g1 << 9)) & M55; - g0 &= M55; - - ulong[] H = new ulong[10]; - - ImplMulw(f0, g0, H, 0); // H(0) 55/54 bits - ImplMulw(f2, g2, H, 2); // H(INF) 55/50 bits - - ulong t0 = f0 ^ f1 ^ f2; - ulong t1 = g0 ^ g1 ^ g2; - - ImplMulw(t0, t1, H, 4); // H(1) 55/54 bits - - ulong t2 = (f1 << 1) ^ (f2 << 2); - ulong t3 = (g1 << 1) ^ (g2 << 2); - - ImplMulw(f0 ^ t2, g0 ^ t3, H, 6); // H(t) 55/56 bits - ImplMulw(t0 ^ t2, t1 ^ t3, H, 8); // H(t + 1) 55/56 bits - - ulong t4 = H[6] ^ H[8]; - ulong t5 = H[7] ^ H[9]; - - Debug.Assert(t5 >> 55 == 0); - - // Calculate V - ulong v0 = (t4 << 1) ^ H[6]; - ulong v1 = t4 ^ (t5 << 1) ^ H[7]; - ulong v2 = t5; - - // Calculate U - ulong u0 = H[0]; - ulong u1 = H[1] ^ H[0] ^ H[4]; - ulong u2 = H[1] ^ H[5]; - - // Calculate W - ulong w0 = u0 ^ v0 ^ (H[2] << 4) ^ (H[2] << 1); - ulong w1 = u1 ^ v1 ^ (H[3] << 4) ^ (H[3] << 1); - ulong w2 = u2 ^ v2; - - // Propagate carries - w1 ^= (w0 >> 55); w0 &= M55; - w2 ^= (w1 >> 55); w1 &= M55; - - Debug.Assert((w0 & 1UL) == 0UL); - - // Divide W by t - - w0 = (w0 >> 1) ^ ((w1 & 1UL) << 54); - w1 = (w1 >> 1) ^ ((w2 & 1UL) << 54); - w2 = (w2 >> 1); - - // Divide W by (t + 1) - - w0 ^= (w0 << 1); - w0 ^= (w0 << 2); - w0 ^= (w0 << 4); - w0 ^= (w0 << 8); - w0 ^= (w0 << 16); - w0 ^= (w0 << 32); - - w0 &= M55; w1 ^= (w0 >> 54); - - w1 ^= (w1 << 1); - w1 ^= (w1 << 2); - w1 ^= (w1 << 4); - w1 ^= (w1 << 8); - w1 ^= (w1 << 16); - w1 ^= (w1 << 32); - - w1 &= M55; w2 ^= (w1 >> 54); - - w2 ^= (w2 << 1); - w2 ^= (w2 << 2); - w2 ^= (w2 << 4); - w2 ^= (w2 << 8); - w2 ^= (w2 << 16); - w2 ^= (w2 << 32); - - Debug.Assert(w2 >> 52 == 0); - - zz[0] = u0; - zz[1] = u1 ^ w0 ^ H[2]; - zz[2] = u2 ^ w1 ^ w0 ^ H[3]; - zz[3] = w2 ^ w1; - zz[4] = w2 ^ H[2]; - zz[5] = H[3]; - - ImplCompactExt(zz); - } - - protected static void ImplMulw(ulong x, ulong y, ulong[] z, int zOff) - { - Debug.Assert(x >> 56 == 0); - Debug.Assert(y >> 56 == 0); - - ulong[] u = new ulong[8]; - //u[0] = 0; - u[1] = y; - u[2] = u[1] << 1; - u[3] = u[2] ^ y; - u[4] = u[2] << 1; - u[5] = u[4] ^ y; - u[6] = u[3] << 1; - u[7] = u[6] ^ y; - - uint j = (uint)x; - ulong g, h = 0, l = u[j & 3]; - int k = 47; - do - { - j = (uint)(x >> k); - g = u[j & 7] - ^ u[(j >> 3) & 7] << 3 - ^ u[(j >> 6) & 7] << 6; - l ^= (g << k); - h ^= (g >> -k); - } - while ((k -= 9) > 0); - - Debug.Assert(h >> 47 == 0); - - z[zOff ] = l & M55; - z[zOff + 1] = (l >> 55) ^ (h << 9); - } - - protected static void ImplSquare(ulong[] x, ulong[] zz) - { - Interleave.Expand64To128(x[0], zz, 0); - Interleave.Expand64To128(x[1], zz, 2); - - ulong x2 = x[2]; - zz[4] = Interleave.Expand32to64((uint)x2); - zz[5] = Interleave.Expand8to16((uint)(x2 >> 32)); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT163FieldElement.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT163FieldElement.cs deleted file mode 100644 index 8953fb5..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT163FieldElement.cs +++ /dev/null @@ -1,216 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT163FieldElement - : ECFieldElement - { - protected readonly ulong[] x; - - public SecT163FieldElement(BigInteger x) - { - if (x == null || x.SignValue < 0 || x.BitLength > 163) - throw new ArgumentException("value invalid for SecT163FieldElement", "x"); - - this.x = SecT163Field.FromBigInteger(x); - } - - public SecT163FieldElement() - { - this.x = Nat192.Create64(); - } - - protected internal SecT163FieldElement(ulong[] x) - { - this.x = x; - } - - public override bool IsOne - { - get { return Nat192.IsOne64(x); } - } - - public override bool IsZero - { - get { return Nat192.IsZero64(x); } - } - - public override bool TestBitZero() - { - return (x[0] & 1L) != 0L; - } - - public override BigInteger ToBigInteger() - { - return Nat192.ToBigInteger64(x); - } - - public override string FieldName - { - get { return "SecT163Field"; } - } - - public override int FieldSize - { - get { return 163; } - } - - public override ECFieldElement Add(ECFieldElement b) - { - ulong[] z = Nat192.Create64(); - SecT163Field.Add(x, ((SecT163FieldElement)b).x, z); - return new SecT163FieldElement(z); - } - - public override ECFieldElement AddOne() - { - ulong[] z = Nat192.Create64(); - SecT163Field.AddOne(x, z); - return new SecT163FieldElement(z); - } - - public override ECFieldElement Subtract(ECFieldElement b) - { - // Addition and subtraction are the same in F2m - return Add(b); - } - - public override ECFieldElement Multiply(ECFieldElement b) - { - ulong[] z = Nat192.Create64(); - SecT163Field.Multiply(x, ((SecT163FieldElement)b).x, z); - return new SecT163FieldElement(z); - } - - public override ECFieldElement MultiplyMinusProduct(ECFieldElement b, ECFieldElement x, ECFieldElement y) - { - return MultiplyPlusProduct(b, x, y); - } - - public override ECFieldElement MultiplyPlusProduct(ECFieldElement b, ECFieldElement x, ECFieldElement y) - { - ulong[] ax = this.x, bx = ((SecT163FieldElement)b).x; - ulong[] xx = ((SecT163FieldElement)x).x, yx = ((SecT163FieldElement)y).x; - - ulong[] tt = Nat192.CreateExt64(); - SecT163Field.MultiplyAddToExt(ax, bx, tt); - SecT163Field.MultiplyAddToExt(xx, yx, tt); - - ulong[] z = Nat192.Create64(); - SecT163Field.Reduce(tt, z); - return new SecT163FieldElement(z); - } - - public override ECFieldElement Divide(ECFieldElement b) - { - return Multiply(b.Invert()); - } - - public override ECFieldElement Negate() - { - return this; - } - - public override ECFieldElement Square() - { - ulong[] z = Nat192.Create64(); - SecT163Field.Square(x, z); - return new SecT163FieldElement(z); - } - - public override ECFieldElement SquareMinusProduct(ECFieldElement x, ECFieldElement y) - { - return SquarePlusProduct(x, y); - } - - public override ECFieldElement SquarePlusProduct(ECFieldElement x, ECFieldElement y) - { - ulong[] ax = this.x; - ulong[] xx = ((SecT163FieldElement)x).x, yx = ((SecT163FieldElement)y).x; - - ulong[] tt = Nat192.CreateExt64(); - SecT163Field.SquareAddToExt(ax, tt); - SecT163Field.MultiplyAddToExt(xx, yx, tt); - - ulong[] z = Nat192.Create64(); - SecT163Field.Reduce(tt, z); - return new SecT163FieldElement(z); - } - - public override ECFieldElement SquarePow(int pow) - { - if (pow < 1) - return this; - - ulong[] z = Nat192.Create64(); - SecT163Field.SquareN(x, pow, z); - return new SecT163FieldElement(z); - } - - public override ECFieldElement Invert() - { - ulong[] z = Nat192.Create64(); - SecT163Field.Invert(x, z); - return new SecT163FieldElement(z); - } - - public override ECFieldElement Sqrt() - { - ulong[] z = Nat192.Create64(); - SecT163Field.Sqrt(x, z); - return new SecT163FieldElement(z); - } - - public virtual int Representation - { - get { return F2mFieldElement.Ppb; } - } - - public virtual int M - { - get { return 163; } - } - - public virtual int K1 - { - get { return 3; } - } - - public virtual int K2 - { - get { return 6; } - } - - public virtual int K3 - { - get { return 7; } - } - - public override bool Equals(object obj) - { - return Equals(obj as SecT163FieldElement); - } - - public override bool Equals(ECFieldElement other) - { - return Equals(other as SecT163FieldElement); - } - - public virtual bool Equals(SecT163FieldElement other) - { - if (this == other) - return true; - if (null == other) - return false; - return Nat192.Eq64(x, other.x); - } - - public override int GetHashCode() - { - return 163763 ^ Arrays.GetHashCode(x, 0, 3); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT163K1Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT163K1Curve.cs deleted file mode 100644 index 68ff646..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT163K1Curve.cs +++ /dev/null @@ -1,104 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.EC.Multiplier; -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT163K1Curve - : AbstractF2mCurve - { - private const int SecT163K1_DEFAULT_COORDS = COORD_LAMBDA_PROJECTIVE; - - protected readonly SecT163K1Point m_infinity; - - public SecT163K1Curve() - : base(163, 3, 6, 7) - { - this.m_infinity = new SecT163K1Point(this, null, null); - - this.m_a = FromBigInteger(BigInteger.One); - this.m_b = this.m_a; - this.m_order = new BigInteger(1, Hex.Decode("04000000000000000000020108A2E0CC0D99F8A5EF")); - this.m_cofactor = BigInteger.Two; - - this.m_coord = SecT163K1_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecT163K1Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_LAMBDA_PROJECTIVE: - return true; - default: - return false; - } - } - - protected override ECMultiplier CreateDefaultMultiplier() - { - return new WTauNafMultiplier(); - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return 163; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecT163FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecT163K1Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecT163K1Point(this, x, y, zs, withCompression); - } - - public override bool IsKoblitz - { - get { return true; } - } - - public virtual int M - { - get { return 163; } - } - - public virtual bool IsTrinomial - { - get { return false; } - } - - public virtual int K1 - { - get { return 3; } - } - - public virtual int K2 - { - get { return 6; } - } - - public virtual int K3 - { - get { return 7; } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT163K1Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT163K1Point.cs deleted file mode 100644 index 8693fe1..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT163K1Point.cs +++ /dev/null @@ -1,281 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT163K1Point - : AbstractF2mPoint - { - /** - * @deprecated Use ECCurve.createPoint to construct points - */ - public SecT163K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * @deprecated per-point compression property will be removed, refer {@link #getEncoded(bool)} - */ - public SecT163K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecT163K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecT163K1Point(null, this.AffineXCoord, this.AffineYCoord); - } - - public override ECFieldElement YCoord - { - get - { - ECFieldElement X = RawXCoord, L = RawYCoord; - - if (this.IsInfinity || X.IsZero) - return L; - - // Y is actually Lambda (X + Y/X) here; convert to affine value on the fly - ECFieldElement Y = L.Add(X).Multiply(X); - - ECFieldElement Z = RawZCoords[0]; - if (!Z.IsOne) - { - Y = Y.Divide(Z); - } - - return Y; - } - } - - protected internal override bool CompressionYTilde - { - get - { - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return false; - - ECFieldElement Y = this.RawYCoord; - - // Y is actually Lambda (X + Y/X) here - return Y.TestBitZero() != X.TestBitZero(); - } - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - ECFieldElement X2 = b.RawXCoord; - - if (X1.IsZero) - { - if (X2.IsZero) - return curve.Infinity; - - return b.Add(this); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord, Z2 = b.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement U2 = X2, S2 = L2; - if (!Z1IsOne) - { - U2 = U2.Multiply(Z1); - S2 = S2.Multiply(Z1); - } - - bool Z2IsOne = Z2.IsOne; - ECFieldElement U1 = X1, S1 = L1; - if (!Z2IsOne) - { - U1 = U1.Multiply(Z2); - S1 = S1.Multiply(Z2); - } - - ECFieldElement A = S1.Add(S2); - ECFieldElement B = U1.Add(U2); - - if (B.IsZero) - { - if (A.IsZero) - return Twice(); - - return curve.Infinity; - } - - ECFieldElement X3, L3, Z3; - if (X2.IsZero) - { - // TODO This can probably be optimized quite a bit - ECPoint p = this.Normalize(); - X1 = p.XCoord; - ECFieldElement Y1 = p.YCoord; - - ECFieldElement Y2 = L2; - ECFieldElement L = Y1.Add(Y2).Divide(X1); - - X3 = L.Square().Add(L).Add(X1).AddOne(); - if (X3.IsZero) - { - return new SecT163K1Point(curve, X3, curve.B, IsCompressed); - } - - ECFieldElement Y3 = L.Multiply(X1.Add(X3)).Add(X3).Add(Y1); - L3 = Y3.Divide(X3).Add(X3); - Z3 = curve.FromBigInteger(BigInteger.One); - } - else - { - B = B.Square(); - - ECFieldElement AU1 = A.Multiply(U1); - ECFieldElement AU2 = A.Multiply(U2); - - X3 = AU1.Multiply(AU2); - if (X3.IsZero) - { - return new SecT163K1Point(curve, X3, curve.B, IsCompressed); - } - - ECFieldElement ABZ2 = A.Multiply(B); - if (!Z2IsOne) - { - ABZ2 = ABZ2.Multiply(Z2); - } - - L3 = AU2.Add(B).SquarePlusProduct(ABZ2, L1.Add(Z1)); - - Z3 = ABZ2; - if (!Z1IsOne) - { - Z3 = Z3.Multiply(Z1); - } - } - - return new SecT163K1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - { - return this; - } - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return curve.Infinity; - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement L1Z1 = Z1IsOne ? L1 : L1.Multiply(Z1); - ECFieldElement Z1Sq = Z1IsOne ? Z1 : Z1.Square(); - ECFieldElement T = L1.Square().Add(L1Z1).Add(Z1Sq); - if (T.IsZero) - { - return new SecT163K1Point(curve, T, curve.B, IsCompressed); - } - - ECFieldElement X3 = T.Square(); - ECFieldElement Z3 = Z1IsOne ? T : T.Multiply(Z1Sq); - - ECFieldElement t1 = L1.Add(X1).Square(); - ECFieldElement L3 = t1.Add(T).Add(Z1Sq).Multiply(t1).Add(X3); - - return new SecT163K1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return b; - } - - // NOTE: TwicePlus() only optimized for lambda-affine argument - ECFieldElement X2 = b.RawXCoord, Z2 = b.RawZCoords[0]; - if (X2.IsZero || !Z2.IsOne) - { - return Twice().Add(b); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord; - - ECFieldElement X1Sq = X1.Square(); - ECFieldElement L1Sq = L1.Square(); - ECFieldElement Z1Sq = Z1.Square(); - ECFieldElement L1Z1 = L1.Multiply(Z1); - - ECFieldElement T = Z1Sq.Add(L1Sq).Add(L1Z1); - ECFieldElement A = L2.Multiply(Z1Sq).Add(L1Sq).MultiplyPlusProduct(T, X1Sq, Z1Sq); - ECFieldElement X2Z1Sq = X2.Multiply(Z1Sq); - ECFieldElement B = X2Z1Sq.Add(T).Square(); - - if (B.IsZero) - { - if (A.IsZero) - return b.Twice(); - - return curve.Infinity; - } - - if (A.IsZero) - { - return new SecT163K1Point(curve, A, curve.B, IsCompressed); - } - - ECFieldElement X3 = A.Square().Multiply(X2Z1Sq); - ECFieldElement Z3 = A.Multiply(B).Multiply(Z1Sq); - ECFieldElement L3 = A.Add(B).Square().MultiplyPlusProduct(T, L2.AddOne(), Z3); - - return new SecT163K1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Negate() - { - if (this.IsInfinity) - return this; - - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return this; - - // L is actually Lambda (X + Y/X) here - ECFieldElement L = this.RawYCoord, Z = this.RawZCoords[0]; - return new SecT163K1Point(Curve, X, L.Add(Z), new ECFieldElement[] { Z }, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT163R1Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT163R1Curve.cs deleted file mode 100644 index 8ae58cc..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT163R1Curve.cs +++ /dev/null @@ -1,98 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT163R1Curve - : AbstractF2mCurve - { - private const int SecT163R1_DEFAULT_COORDS = COORD_LAMBDA_PROJECTIVE; - - protected readonly SecT163R1Point m_infinity; - - public SecT163R1Curve() - : base(163, 3, 6, 7) - { - this.m_infinity = new SecT163R1Point(this, null, null); - - this.m_a = FromBigInteger(new BigInteger(1, Hex.Decode("07B6882CAAEFA84F9554FF8428BD88E246D2782AE2"))); - this.m_b = FromBigInteger(new BigInteger(1, Hex.Decode("0713612DCDDCB40AAB946BDA29CA91F73AF958AFD9"))); - this.m_order = new BigInteger(1, Hex.Decode("03FFFFFFFFFFFFFFFFFFFF48AAB689C29CA710279B")); - this.m_cofactor = BigInteger.Two; - - this.m_coord = SecT163R1_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecT163R1Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_LAMBDA_PROJECTIVE: - return true; - default: - return false; - } - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return 163; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecT163FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecT163R1Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecT163R1Point(this, x, y, zs, withCompression); - } - - public override bool IsKoblitz - { - get { return false; } - } - - public virtual int M - { - get { return 163; } - } - - public virtual bool IsTrinomial - { - get { return false; } - } - - public virtual int K1 - { - get { return 3; } - } - - public virtual int K2 - { - get { return 6; } - } - - public virtual int K3 - { - get { return 7; } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT163R1Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT163R1Point.cs deleted file mode 100644 index 811a09f..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT163R1Point.cs +++ /dev/null @@ -1,283 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT163R1Point - : AbstractF2mPoint - { - /** - * @deprecated Use ECCurve.createPoint to construct points - */ - public SecT163R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * @deprecated per-point compression property will be removed, refer {@link #getEncoded(bool)} - */ - public SecT163R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecT163R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecT163R1Point(null, AffineXCoord, AffineYCoord); - } - - public override ECFieldElement YCoord - { - get - { - ECFieldElement X = RawXCoord, L = RawYCoord; - - if (this.IsInfinity || X.IsZero) - return L; - - // Y is actually Lambda (X + Y/X) here; convert to affine value on the fly - ECFieldElement Y = L.Add(X).Multiply(X); - - ECFieldElement Z = RawZCoords[0]; - if (!Z.IsOne) - { - Y = Y.Divide(Z); - } - - return Y; - } - } - - protected internal override bool CompressionYTilde - { - get - { - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return false; - - ECFieldElement Y = this.RawYCoord; - - // Y is actually Lambda (X + Y/X) here - return Y.TestBitZero() != X.TestBitZero(); - } - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - ECFieldElement X2 = b.RawXCoord; - - if (X1.IsZero) - { - if (X2.IsZero) - return curve.Infinity; - - return b.Add(this); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord, Z2 = b.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement U2 = X2, S2 = L2; - if (!Z1IsOne) - { - U2 = U2.Multiply(Z1); - S2 = S2.Multiply(Z1); - } - - bool Z2IsOne = Z2.IsOne; - ECFieldElement U1 = X1, S1 = L1; - if (!Z2IsOne) - { - U1 = U1.Multiply(Z2); - S1 = S1.Multiply(Z2); - } - - ECFieldElement A = S1.Add(S2); - ECFieldElement B = U1.Add(U2); - - if (B.IsZero) - { - if (A.IsZero) - return Twice(); - - return curve.Infinity; - } - - ECFieldElement X3, L3, Z3; - if (X2.IsZero) - { - // TODO This can probably be optimized quite a bit - ECPoint p = this.Normalize(); - X1 = p.XCoord; - ECFieldElement Y1 = p.YCoord; - - ECFieldElement Y2 = L2; - ECFieldElement L = Y1.Add(Y2).Divide(X1); - - X3 = L.Square().Add(L).Add(X1).Add(curve.A); - if (X3.IsZero) - { - return new SecT163R1Point(curve, X3, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement Y3 = L.Multiply(X1.Add(X3)).Add(X3).Add(Y1); - L3 = Y3.Divide(X3).Add(X3); - Z3 = curve.FromBigInteger(BigInteger.One); - } - else - { - B = B.Square(); - - ECFieldElement AU1 = A.Multiply(U1); - ECFieldElement AU2 = A.Multiply(U2); - - X3 = AU1.Multiply(AU2); - if (X3.IsZero) - { - return new SecT163R1Point(curve, X3, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement ABZ2 = A.Multiply(B); - if (!Z2IsOne) - { - ABZ2 = ABZ2.Multiply(Z2); - } - - L3 = AU2.Add(B).SquarePlusProduct(ABZ2, L1.Add(Z1)); - - Z3 = ABZ2; - if (!Z1IsOne) - { - Z3 = Z3.Multiply(Z1); - } - } - - return new SecT163R1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - { - return this; - } - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return curve.Infinity; - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement L1Z1 = Z1IsOne ? L1 : L1.Multiply(Z1); - ECFieldElement Z1Sq = Z1IsOne ? Z1 : Z1.Square(); - ECFieldElement a = curve.A; - ECFieldElement aZ1Sq = Z1IsOne ? a : a.Multiply(Z1Sq); - ECFieldElement T = L1.Square().Add(L1Z1).Add(aZ1Sq); - if (T.IsZero) - { - return new SecT163R1Point(curve, T, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement X3 = T.Square(); - ECFieldElement Z3 = Z1IsOne ? T : T.Multiply(Z1Sq); - - ECFieldElement X1Z1 = Z1IsOne ? X1 : X1.Multiply(Z1); - ECFieldElement L3 = X1Z1.SquarePlusProduct(T, L1Z1).Add(X3).Add(Z3); - - return new SecT163R1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return b; - } - - ECFieldElement X2 = b.RawXCoord, Z2 = b.RawZCoords[0]; - if (X2.IsZero || !Z2.IsOne) - { - return Twice().Add(b); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord; - - ECFieldElement X1Sq = X1.Square(); - ECFieldElement L1Sq = L1.Square(); - ECFieldElement Z1Sq = Z1.Square(); - ECFieldElement L1Z1 = L1.Multiply(Z1); - - ECFieldElement T = curve.A.Multiply(Z1Sq).Add(L1Sq).Add(L1Z1); - ECFieldElement L2plus1 = L2.AddOne(); - ECFieldElement A = curve.A.Add(L2plus1).Multiply(Z1Sq).Add(L1Sq).MultiplyPlusProduct(T, X1Sq, Z1Sq); - ECFieldElement X2Z1Sq = X2.Multiply(Z1Sq); - ECFieldElement B = X2Z1Sq.Add(T).Square(); - - if (B.IsZero) - { - if (A.IsZero) - return b.Twice(); - - return curve.Infinity; - } - - if (A.IsZero) - { - return new SecT163R1Point(curve, A, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement X3 = A.Square().Multiply(X2Z1Sq); - ECFieldElement Z3 = A.Multiply(B).Multiply(Z1Sq); - ECFieldElement L3 = A.Add(B).Square().MultiplyPlusProduct(T, L2plus1, Z3); - - return new SecT163R1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Negate() - { - if (this.IsInfinity) - return this; - - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return this; - - // L is actually Lambda (X + Y/X) here - ECFieldElement L = this.RawYCoord, Z = this.RawZCoords[0]; - return new SecT163R1Point(Curve, X, L.Add(Z), new ECFieldElement[] { Z }, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT163R2Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT163R2Curve.cs deleted file mode 100644 index 5a4fa5a..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT163R2Curve.cs +++ /dev/null @@ -1,98 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT163R2Curve - : AbstractF2mCurve - { - private const int SecT163R2_DEFAULT_COORDS = COORD_LAMBDA_PROJECTIVE; - - protected readonly SecT163R2Point m_infinity; - - public SecT163R2Curve() - : base(163, 3, 6, 7) - { - this.m_infinity = new SecT163R2Point(this, null, null); - - this.m_a = FromBigInteger(BigInteger.One); - this.m_b = FromBigInteger(new BigInteger(1, Hex.Decode("020A601907B8C953CA1481EB10512F78744A3205FD"))); - this.m_order = new BigInteger(1, Hex.Decode("040000000000000000000292FE77E70C12A4234C33")); - this.m_cofactor = BigInteger.Two; - - this.m_coord = SecT163R2_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecT163R2Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_LAMBDA_PROJECTIVE: - return true; - default: - return false; - } - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return 163; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecT163FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecT163R2Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecT163R2Point(this, x, y, zs, withCompression); - } - - public override bool IsKoblitz - { - get { return false; } - } - - public virtual int M - { - get { return 163; } - } - - public virtual bool IsTrinomial - { - get { return false; } - } - - public virtual int K1 - { - get { return 3; } - } - - public virtual int K2 - { - get { return 6; } - } - - public virtual int K3 - { - get { return 7; } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT163R2Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT163R2Point.cs deleted file mode 100644 index 69e2497..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT163R2Point.cs +++ /dev/null @@ -1,286 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT163R2Point - : AbstractF2mPoint - { - /** - * @deprecated Use ECCurve.createPoint to construct points - */ - public SecT163R2Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * @deprecated per-point compression property will be removed, refer {@link #getEncoded(bool)} - */ - public SecT163R2Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecT163R2Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecT163R2Point(null, AffineXCoord, AffineYCoord); - } - - public override ECFieldElement YCoord - { - get - { - ECFieldElement X = RawXCoord, L = RawYCoord; - - if (this.IsInfinity || X.IsZero) - return L; - - // Y is actually Lambda (X + Y/X) here; convert to affine value on the fly - ECFieldElement Y = L.Add(X).Multiply(X); - - ECFieldElement Z = RawZCoords[0]; - if (!Z.IsOne) - { - Y = Y.Divide(Z); - } - - return Y; - } - } - - protected internal override bool CompressionYTilde - { - get - { - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return false; - - ECFieldElement Y = this.RawYCoord; - - // Y is actually Lambda (X + Y/X) here - return Y.TestBitZero() != X.TestBitZero(); - } - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - ECFieldElement X2 = b.RawXCoord; - - if (X1.IsZero) - { - if (X2.IsZero) - return curve.Infinity; - - return b.Add(this); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord, Z2 = b.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement U2 = X2, S2 = L2; - if (!Z1IsOne) - { - U2 = U2.Multiply(Z1); - S2 = S2.Multiply(Z1); - } - - bool Z2IsOne = Z2.IsOne; - ECFieldElement U1 = X1, S1 = L1; - if (!Z2IsOne) - { - U1 = U1.Multiply(Z2); - S1 = S1.Multiply(Z2); - } - - ECFieldElement A = S1.Add(S2); - ECFieldElement B = U1.Add(U2); - - if (B.IsZero) - { - if (A.IsZero) - { - return Twice(); - } - - return curve.Infinity; - } - - ECFieldElement X3, L3, Z3; - if (X2.IsZero) - { - // TODO This can probably be optimized quite a bit - ECPoint p = this.Normalize(); - X1 = p.XCoord; - ECFieldElement Y1 = p.YCoord; - - ECFieldElement Y2 = L2; - ECFieldElement L = Y1.Add(Y2).Divide(X1); - - X3 = L.Square().Add(L).Add(X1).AddOne(); - if (X3.IsZero) - { - return new SecT163R2Point(curve, X3, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement Y3 = L.Multiply(X1.Add(X3)).Add(X3).Add(Y1); - L3 = Y3.Divide(X3).Add(X3); - Z3 = curve.FromBigInteger(BigInteger.One); - } - else - { - B = B.Square(); - - ECFieldElement AU1 = A.Multiply(U1); - ECFieldElement AU2 = A.Multiply(U2); - - X3 = AU1.Multiply(AU2); - if (X3.IsZero) - { - return new SecT163R2Point(curve, X3, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement ABZ2 = A.Multiply(B); - if (!Z2IsOne) - { - ABZ2 = ABZ2.Multiply(Z2); - } - - L3 = AU2.Add(B).SquarePlusProduct(ABZ2, L1.Add(Z1)); - - Z3 = ABZ2; - if (!Z1IsOne) - { - Z3 = Z3.Multiply(Z1); - } - } - - return new SecT163R2Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - { - return this; - } - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return curve.Infinity; - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement L1Z1 = Z1IsOne ? L1 : L1.Multiply(Z1); - ECFieldElement Z1Sq = Z1IsOne ? Z1 : Z1.Square(); - ECFieldElement T = L1.Square().Add(L1Z1).Add(Z1Sq); - if (T.IsZero) - { - return new SecT163R2Point(curve, T, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement X3 = T.Square(); - ECFieldElement Z3 = Z1IsOne ? T : T.Multiply(Z1Sq); - - ECFieldElement X1Z1 = Z1IsOne ? X1 : X1.Multiply(Z1); - ECFieldElement L3 = X1Z1.SquarePlusProduct(T, L1Z1).Add(X3).Add(Z3); - - return new SecT163R2Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this.IsInfinity) - { - return b; - } - if (b.IsInfinity) - { - return Twice(); - } - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return b; - } - - ECFieldElement X2 = b.RawXCoord, Z2 = b.RawZCoords[0]; - if (X2.IsZero || !Z2.IsOne) - { - return Twice().Add(b); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord; - - ECFieldElement X1Sq = X1.Square(); - ECFieldElement L1Sq = L1.Square(); - ECFieldElement Z1Sq = Z1.Square(); - ECFieldElement L1Z1 = L1.Multiply(Z1); - - ECFieldElement T = Z1Sq.Add(L1Sq).Add(L1Z1); - ECFieldElement A = L2.Multiply(Z1Sq).Add(L1Sq).MultiplyPlusProduct(T, X1Sq, Z1Sq); - ECFieldElement X2Z1Sq = X2.Multiply(Z1Sq); - ECFieldElement B = X2Z1Sq.Add(T).Square(); - - if (B.IsZero) - { - if (A.IsZero) - return b.Twice(); - - return curve.Infinity; - } - - if (A.IsZero) - { - return new SecT163R2Point(curve, A, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement X3 = A.Square().Multiply(X2Z1Sq); - ECFieldElement Z3 = A.Multiply(B).Multiply(Z1Sq); - ECFieldElement L3 = A.Add(B).Square().MultiplyPlusProduct(T, L2.AddOne(), Z3); - - return new SecT163R2Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Negate() - { - if (this.IsInfinity) - return this; - - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return this; - - // L is actually Lambda (X + Y/X) here - ECFieldElement L = this.RawYCoord, Z = this.RawZCoords[0]; - return new SecT163R2Point(Curve, X, L.Add(Z), new ECFieldElement[] { Z }, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT193Field.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT193Field.cs deleted file mode 100644 index 41acb4f..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT193Field.cs +++ /dev/null @@ -1,305 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT193Field - { - private const ulong M01 = 1UL; - private const ulong M49 = ulong.MaxValue >> 15; - - public static void Add(ulong[] x, ulong[] y, ulong[] z) - { - z[0] = x[0] ^ y[0]; - z[1] = x[1] ^ y[1]; - z[2] = x[2] ^ y[2]; - z[3] = x[3] ^ y[3]; - } - - public static void AddExt(ulong[] xx, ulong[] yy, ulong[] zz) - { - zz[0] = xx[0] ^ yy[0]; - zz[1] = xx[1] ^ yy[1]; - zz[2] = xx[2] ^ yy[2]; - zz[3] = xx[3] ^ yy[3]; - zz[4] = xx[4] ^ yy[4]; - zz[5] = xx[5] ^ yy[5]; - zz[6] = xx[6] ^ yy[6]; - } - - public static void AddOne(ulong[] x, ulong[] z) - { - z[0] = x[0] ^ 1UL; - z[1] = x[1]; - z[2] = x[2]; - z[3] = x[3]; - } - - public static ulong[] FromBigInteger(BigInteger x) - { - ulong[] z = Nat256.FromBigInteger64(x); - Reduce63(z, 0); - return z; - } - - public static void Invert(ulong[] x, ulong[] z) - { - if (Nat256.IsZero64(x)) - throw new InvalidOperationException(); - - // Itoh-Tsujii inversion with bases { 2, 3 } - - ulong[] t0 = Nat256.Create64(); - ulong[] t1 = Nat256.Create64(); - - Square(x, t0); - - // 3 | 192 - SquareN(t0, 1, t1); - Multiply(t0, t1, t0); - SquareN(t1, 1, t1); - Multiply(t0, t1, t0); - - // 2 | 64 - SquareN(t0, 3, t1); - Multiply(t0, t1, t0); - - // 2 | 32 - SquareN(t0, 6, t1); - Multiply(t0, t1, t0); - - // 2 | 16 - SquareN(t0, 12, t1); - Multiply(t0, t1, t0); - - // 2 | 8 - SquareN(t0, 24, t1); - Multiply(t0, t1, t0); - - // 2 | 4 - SquareN(t0, 48, t1); - Multiply(t0, t1, t0); - - // 2 | 2 - SquareN(t0, 96, t1); - Multiply(t0, t1, z); - } - - public static void Multiply(ulong[] x, ulong[] y, ulong[] z) - { - ulong[] tt = Nat256.CreateExt64(); - ImplMultiply(x, y, tt); - Reduce(tt, z); - } - - public static void MultiplyAddToExt(ulong[] x, ulong[] y, ulong[] zz) - { - ulong[] tt = Nat256.CreateExt64(); - ImplMultiply(x, y, tt); - AddExt(zz, tt, zz); - } - - public static void Reduce(ulong[] xx, ulong[] z) - { - ulong x0 = xx[0], x1 = xx[1], x2 = xx[2], x3 = xx[3], x4 = xx[4], x5 = xx[5], x6 = xx[6]; - - x2 ^= (x6 << 63); - x3 ^= (x6 >> 1) ^ (x6 << 14); - x4 ^= (x6 >> 50); - - x1 ^= (x5 << 63); - x2 ^= (x5 >> 1) ^ (x5 << 14); - x3 ^= (x5 >> 50); - - x0 ^= (x4 << 63); - x1 ^= (x4 >> 1) ^ (x4 << 14); - x2 ^= (x4 >> 50); - - ulong t = x3 >> 1; - z[0] = x0 ^ t ^ (t << 15); - z[1] = x1 ^ (t >> 49); - z[2] = x2; - z[3] = x3 & M01; - } - - public static void Reduce63(ulong[] z, int zOff) - { - ulong z3 = z[zOff + 3], t = z3 >> 1; - z[zOff ] ^= t ^ (t << 15); - z[zOff + 1] ^= (t >> 49); - z[zOff + 3] = z3 & M01; - } - - public static void Sqrt(ulong[] x, ulong[] z) - { - ulong u0, u1; - u0 = Interleave.Unshuffle(x[0]); u1 = Interleave.Unshuffle(x[1]); - ulong e0 = (u0 & 0x00000000FFFFFFFFUL) | (u1 << 32); - ulong c0 = (u0 >> 32) | (u1 & 0xFFFFFFFF00000000UL); - - u0 = Interleave.Unshuffle(x[2]); - ulong e1 = (u0 & 0x00000000FFFFFFFFUL) ^ (x[3] << 32); - ulong c1 = (u0 >> 32); - - z[0] = e0 ^ (c0 << 8); - z[1] = e1 ^ (c1 << 8) ^ (c0 >> 56) ^ (c0 << 33); - z[2] = (c1 >> 56) ^ (c1 << 33) ^ (c0 >> 31); - z[3] = (c1 >> 31); - } - - public static void Square(ulong[] x, ulong[] z) - { - ulong[] tt = Nat256.CreateExt64(); - ImplSquare(x, tt); - Reduce(tt, z); - } - - public static void SquareAddToExt(ulong[] x, ulong[] zz) - { - ulong[] tt = Nat256.CreateExt64(); - ImplSquare(x, tt); - AddExt(zz, tt, zz); - } - - public static void SquareN(ulong[] x, int n, ulong[] z) - { - Debug.Assert(n > 0); - - ulong[] tt = Nat256.CreateExt64(); - ImplSquare(x, tt); - Reduce(tt, z); - - while (--n > 0) - { - ImplSquare(z, tt); - Reduce(tt, z); - } - } - - public static uint Trace(ulong[] x) - { - // Non-zero-trace bits: 0 - return (uint)(x[0]) & 1U; - } - - protected static void ImplCompactExt(ulong[] zz) - { - ulong z0 = zz[0], z1 = zz[1], z2 = zz[2], z3 = zz[3], z4 = zz[4], z5 = zz[5], z6 = zz[6], z7 = zz[7]; - zz[0] = z0 ^ (z1 << 49); - zz[1] = (z1 >> 15) ^ (z2 << 34); - zz[2] = (z2 >> 30) ^ (z3 << 19); - zz[3] = (z3 >> 45) ^ (z4 << 4) - ^ (z5 << 53); - zz[4] = (z4 >> 60) ^ (z6 << 38) - ^ (z5 >> 11); - zz[5] = (z6 >> 26) ^ (z7 << 23); - zz[6] = (z7 >> 41); - zz[7] = 0; - } - - protected static void ImplExpand(ulong[] x, ulong[] z) - { - ulong x0 = x[0], x1 = x[1], x2 = x[2], x3 = x[3]; - z[0] = x0 & M49; - z[1] = ((x0 >> 49) ^ (x1 << 15)) & M49; - z[2] = ((x1 >> 34) ^ (x2 << 30)) & M49; - z[3] = ((x2 >> 19) ^ (x3 << 45)); - } - - protected static void ImplMultiply(ulong[] x, ulong[] y, ulong[] zz) - { - /* - * "Two-level seven-way recursion" as described in "Batch binary Edwards", Daniel J. Bernstein. - */ - - ulong[] f = new ulong[4], g = new ulong[4]; - ImplExpand(x, f); - ImplExpand(y, g); - - ImplMulwAcc(f[0], g[0], zz, 0); - ImplMulwAcc(f[1], g[1], zz, 1); - ImplMulwAcc(f[2], g[2], zz, 2); - ImplMulwAcc(f[3], g[3], zz, 3); - - // U *= (1 - t^n) - for (int i = 5; i > 0; --i) - { - zz[i] ^= zz[i - 1]; - } - - ImplMulwAcc(f[0] ^ f[1], g[0] ^ g[1], zz, 1); - ImplMulwAcc(f[2] ^ f[3], g[2] ^ g[3], zz, 3); - - // V *= (1 - t^2n) - for (int i = 7; i > 1; --i) - { - zz[i] ^= zz[i - 2]; - } - - // Double-length recursion - { - ulong c0 = f[0] ^ f[2], c1 = f[1] ^ f[3]; - ulong d0 = g[0] ^ g[2], d1 = g[1] ^ g[3]; - ImplMulwAcc(c0 ^ c1, d0 ^ d1, zz, 3); - ulong[] t = new ulong[3]; - ImplMulwAcc(c0, d0, t, 0); - ImplMulwAcc(c1, d1, t, 1); - ulong t0 = t[0], t1 = t[1], t2 = t[2]; - zz[2] ^= t0; - zz[3] ^= t0 ^ t1; - zz[4] ^= t2 ^ t1; - zz[5] ^= t2; - } - - ImplCompactExt(zz); - } - - protected static void ImplMulwAcc(ulong x, ulong y, ulong[] z, int zOff) - { - Debug.Assert(x >> 49 == 0); - Debug.Assert(y >> 49 == 0); - - ulong[] u = new ulong[8]; - //u[0] = 0; - u[1] = y; - u[2] = u[1] << 1; - u[3] = u[2] ^ y; - u[4] = u[2] << 1; - u[5] = u[4] ^ y; - u[6] = u[3] << 1; - u[7] = u[6] ^ y; - - uint j = (uint)x; - ulong g, h = 0, l = u[j & 7] - ^ (u[(j >> 3) & 7] << 3); - int k = 36; - do - { - j = (uint)(x >> k); - g = u[j & 7] - ^ u[(j >> 3) & 7] << 3 - ^ u[(j >> 6) & 7] << 6 - ^ u[(j >> 9) & 7] << 9 - ^ u[(j >> 12) & 7] << 12; - l ^= (g << k); - h ^= (g >> -k); - } - while ((k -= 15) > 0); - - Debug.Assert(h >> 33 == 0); - - z[zOff ] ^= l & M49; - z[zOff + 1] ^= (l >> 49) ^ (h << 15); - } - - protected static void ImplSquare(ulong[] x, ulong[] zz) - { - Interleave.Expand64To128(x[0], zz, 0); - Interleave.Expand64To128(x[1], zz, 2); - Interleave.Expand64To128(x[2], zz, 4); - zz[6] = (x[3] & M01); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT193FieldElement.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT193FieldElement.cs deleted file mode 100644 index a1150b3..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT193FieldElement.cs +++ /dev/null @@ -1,216 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT193FieldElement - : ECFieldElement - { - protected readonly ulong[] x; - - public SecT193FieldElement(BigInteger x) - { - if (x == null || x.SignValue < 0 || x.BitLength > 193) - throw new ArgumentException("value invalid for SecT193FieldElement", "x"); - - this.x = SecT193Field.FromBigInteger(x); - } - - public SecT193FieldElement() - { - this.x = Nat256.Create64(); - } - - protected internal SecT193FieldElement(ulong[] x) - { - this.x = x; - } - - public override bool IsOne - { - get { return Nat256.IsOne64(x); } - } - - public override bool IsZero - { - get { return Nat256.IsZero64(x); } - } - - public override bool TestBitZero() - { - return (x[0] & 1UL) != 0UL; - } - - public override BigInteger ToBigInteger() - { - return Nat256.ToBigInteger64(x); - } - - public override string FieldName - { - get { return "SecT193Field"; } - } - - public override int FieldSize - { - get { return 193; } - } - - public override ECFieldElement Add(ECFieldElement b) - { - ulong[] z = Nat256.Create64(); - SecT193Field.Add(x, ((SecT193FieldElement)b).x, z); - return new SecT193FieldElement(z); - } - - public override ECFieldElement AddOne() - { - ulong[] z = Nat256.Create64(); - SecT193Field.AddOne(x, z); - return new SecT193FieldElement(z); - } - - public override ECFieldElement Subtract(ECFieldElement b) - { - // Addition and Subtraction are the same in F2m - return Add(b); - } - - public override ECFieldElement Multiply(ECFieldElement b) - { - ulong[] z = Nat256.Create64(); - SecT193Field.Multiply(x, ((SecT193FieldElement)b).x, z); - return new SecT193FieldElement(z); - } - - public override ECFieldElement MultiplyMinusProduct(ECFieldElement b, ECFieldElement x, ECFieldElement y) - { - return MultiplyPlusProduct(b, x, y); - } - - public override ECFieldElement MultiplyPlusProduct(ECFieldElement b, ECFieldElement x, ECFieldElement y) - { - ulong[] ax = this.x, bx = ((SecT193FieldElement)b).x; - ulong[] xx = ((SecT193FieldElement)x).x, yx = ((SecT193FieldElement)y).x; - - ulong[] tt = Nat256.CreateExt64(); - SecT193Field.MultiplyAddToExt(ax, bx, tt); - SecT193Field.MultiplyAddToExt(xx, yx, tt); - - ulong[] z = Nat256.Create64(); - SecT193Field.Reduce(tt, z); - return new SecT193FieldElement(z); - } - - public override ECFieldElement Divide(ECFieldElement b) - { - return Multiply(b.Invert()); - } - - public override ECFieldElement Negate() - { - return this; - } - - public override ECFieldElement Square() - { - ulong[] z = Nat256.Create64(); - SecT193Field.Square(x, z); - return new SecT193FieldElement(z); - } - - public override ECFieldElement SquareMinusProduct(ECFieldElement x, ECFieldElement y) - { - return SquarePlusProduct(x, y); - } - - public override ECFieldElement SquarePlusProduct(ECFieldElement x, ECFieldElement y) - { - ulong[] ax = this.x; - ulong[] xx = ((SecT193FieldElement)x).x, yx = ((SecT193FieldElement)y).x; - - ulong[] tt = Nat256.CreateExt64(); - SecT193Field.SquareAddToExt(ax, tt); - SecT193Field.MultiplyAddToExt(xx, yx, tt); - - ulong[] z = Nat256.Create64(); - SecT193Field.Reduce(tt, z); - return new SecT193FieldElement(z); - } - - public override ECFieldElement SquarePow(int pow) - { - if (pow < 1) - return this; - - ulong[] z = Nat256.Create64(); - SecT193Field.SquareN(x, pow, z); - return new SecT193FieldElement(z); - } - - public override ECFieldElement Invert() - { - ulong[] z = Nat256.Create64(); - SecT193Field.Invert(x, z); - return new SecT193FieldElement(z); - } - - public override ECFieldElement Sqrt() - { - ulong[] z = Nat256.Create64(); - SecT193Field.Sqrt(x, z); - return new SecT193FieldElement(z); - } - - public virtual int Representation - { - get { return F2mFieldElement.Tpb; } - } - - public virtual int M - { - get { return 193; } - } - - public virtual int K1 - { - get { return 15; } - } - - public virtual int K2 - { - get { return 0; } - } - - public virtual int K3 - { - get { return 0; } - } - - public override bool Equals(object obj) - { - return Equals(obj as SecT193FieldElement); - } - - public override bool Equals(ECFieldElement other) - { - return Equals(other as SecT193FieldElement); - } - - public virtual bool Equals(SecT193FieldElement other) - { - if (this == other) - return true; - if (null == other) - return false; - return Nat256.Eq64(x, other.x); - } - - public override int GetHashCode() - { - return 1930015 ^ Arrays.GetHashCode(x, 0, 4); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT193R1Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT193R1Curve.cs deleted file mode 100644 index a2cb5a8..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT193R1Curve.cs +++ /dev/null @@ -1,98 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT193R1Curve - : AbstractF2mCurve - { - private const int SecT193R1_DEFAULT_COORDS = COORD_LAMBDA_PROJECTIVE; - - protected readonly SecT193R1Point m_infinity; - - public SecT193R1Curve() - : base(193, 15, 0, 0) - { - this.m_infinity = new SecT193R1Point(this, null, null); - - this.m_a = FromBigInteger(new BigInteger(1, Hex.Decode("0017858FEB7A98975169E171F77B4087DE098AC8A911DF7B01"))); - this.m_b = FromBigInteger(new BigInteger(1, Hex.Decode("00FDFB49BFE6C3A89FACADAA7A1E5BBC7CC1C2E5D831478814"))); - this.m_order = new BigInteger(1, Hex.Decode("01000000000000000000000000C7F34A778F443ACC920EBA49")); - this.m_cofactor = BigInteger.Two; - - this.m_coord = SecT193R1_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecT193R1Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_LAMBDA_PROJECTIVE: - return true; - default: - return false; - } - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return 193; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecT193FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecT193R1Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecT193R1Point(this, x, y, zs, withCompression); - } - - public override bool IsKoblitz - { - get { return false; } - } - - public virtual int M - { - get { return 193; } - } - - public virtual bool IsTrinomial - { - get { return true; } - } - - public virtual int K1 - { - get { return 15; } - } - - public virtual int K2 - { - get { return 0; } - } - - public virtual int K3 - { - get { return 0; } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT193R1Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT193R1Point.cs deleted file mode 100644 index 062fce9..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT193R1Point.cs +++ /dev/null @@ -1,283 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT193R1Point - : AbstractF2mPoint - { - /** - * @deprecated Use ECCurve.createPoint to construct points - */ - public SecT193R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * @deprecated per-point compression property will be removed, refer {@link #getEncoded(bool)} - */ - public SecT193R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecT193R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecT193R1Point(null, AffineXCoord, AffineYCoord); - } - - public override ECFieldElement YCoord - { - get - { - ECFieldElement X = RawXCoord, L = RawYCoord; - - if (this.IsInfinity || X.IsZero) - return L; - - // Y is actually Lambda (X + Y/X) here; convert to affine value on the fly - ECFieldElement Y = L.Add(X).Multiply(X); - - ECFieldElement Z = RawZCoords[0]; - if (!Z.IsOne) - { - Y = Y.Divide(Z); - } - - return Y; - } - } - - protected internal override bool CompressionYTilde - { - get - { - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return false; - - ECFieldElement Y = this.RawYCoord; - - // Y is actually Lambda (X + Y/X) here - return Y.TestBitZero() != X.TestBitZero(); - } - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - ECFieldElement X2 = b.RawXCoord; - - if (X1.IsZero) - { - if (X2.IsZero) - return curve.Infinity; - - return b.Add(this); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord, Z2 = b.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement U2 = X2, S2 = L2; - if (!Z1IsOne) - { - U2 = U2.Multiply(Z1); - S2 = S2.Multiply(Z1); - } - - bool Z2IsOne = Z2.IsOne; - ECFieldElement U1 = X1, S1 = L1; - if (!Z2IsOne) - { - U1 = U1.Multiply(Z2); - S1 = S1.Multiply(Z2); - } - - ECFieldElement A = S1.Add(S2); - ECFieldElement B = U1.Add(U2); - - if (B.IsZero) - { - if (A.IsZero) - return Twice(); - - return curve.Infinity; - } - - ECFieldElement X3, L3, Z3; - if (X2.IsZero) - { - // TODO This can probably be optimized quite a bit - ECPoint p = this.Normalize(); - X1 = p.XCoord; - ECFieldElement Y1 = p.YCoord; - - ECFieldElement Y2 = L2; - ECFieldElement L = Y1.Add(Y2).Divide(X1); - - X3 = L.Square().Add(L).Add(X1).Add(curve.A); - if (X3.IsZero) - { - return new SecT193R1Point(curve, X3, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement Y3 = L.Multiply(X1.Add(X3)).Add(X3).Add(Y1); - L3 = Y3.Divide(X3).Add(X3); - Z3 = curve.FromBigInteger(BigInteger.One); - } - else - { - B = B.Square(); - - ECFieldElement AU1 = A.Multiply(U1); - ECFieldElement AU2 = A.Multiply(U2); - - X3 = AU1.Multiply(AU2); - if (X3.IsZero) - { - return new SecT193R1Point(curve, X3, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement ABZ2 = A.Multiply(B); - if (!Z2IsOne) - { - ABZ2 = ABZ2.Multiply(Z2); - } - - L3 = AU2.Add(B).SquarePlusProduct(ABZ2, L1.Add(Z1)); - - Z3 = ABZ2; - if (!Z1IsOne) - { - Z3 = Z3.Multiply(Z1); - } - } - - return new SecT193R1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - { - return this; - } - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return curve.Infinity; - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement L1Z1 = Z1IsOne ? L1 : L1.Multiply(Z1); - ECFieldElement Z1Sq = Z1IsOne ? Z1 : Z1.Square(); - ECFieldElement a = curve.A; - ECFieldElement aZ1Sq = Z1IsOne ? a : a.Multiply(Z1Sq); - ECFieldElement T = L1.Square().Add(L1Z1).Add(aZ1Sq); - if (T.IsZero) - { - return new SecT193R1Point(curve, T, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement X3 = T.Square(); - ECFieldElement Z3 = Z1IsOne ? T : T.Multiply(Z1Sq); - - ECFieldElement X1Z1 = Z1IsOne ? X1 : X1.Multiply(Z1); - ECFieldElement L3 = X1Z1.SquarePlusProduct(T, L1Z1).Add(X3).Add(Z3); - - return new SecT193R1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return b; - } - - ECFieldElement X2 = b.RawXCoord, Z2 = b.RawZCoords[0]; - if (X2.IsZero || !Z2.IsOne) - { - return Twice().Add(b); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord; - - ECFieldElement X1Sq = X1.Square(); - ECFieldElement L1Sq = L1.Square(); - ECFieldElement Z1Sq = Z1.Square(); - ECFieldElement L1Z1 = L1.Multiply(Z1); - - ECFieldElement T = curve.A.Multiply(Z1Sq).Add(L1Sq).Add(L1Z1); - ECFieldElement L2plus1 = L2.AddOne(); - ECFieldElement A = curve.A.Add(L2plus1).Multiply(Z1Sq).Add(L1Sq).MultiplyPlusProduct(T, X1Sq, Z1Sq); - ECFieldElement X2Z1Sq = X2.Multiply(Z1Sq); - ECFieldElement B = X2Z1Sq.Add(T).Square(); - - if (B.IsZero) - { - if (A.IsZero) - return b.Twice(); - - return curve.Infinity; - } - - if (A.IsZero) - { - return new SecT193R1Point(curve, A, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement X3 = A.Square().Multiply(X2Z1Sq); - ECFieldElement Z3 = A.Multiply(B).Multiply(Z1Sq); - ECFieldElement L3 = A.Add(B).Square().MultiplyPlusProduct(T, L2plus1, Z3); - - return new SecT193R1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Negate() - { - if (this.IsInfinity) - return this; - - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return this; - - // L is actually Lambda (X + Y/X) here - ECFieldElement L = this.RawYCoord, Z = this.RawZCoords[0]; - return new SecT193R1Point(Curve, X, L.Add(Z), new ECFieldElement[] { Z }, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT193R2Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT193R2Curve.cs deleted file mode 100644 index 1c84a3e..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT193R2Curve.cs +++ /dev/null @@ -1,98 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT193R2Curve - : AbstractF2mCurve - { - private const int SecT193R2_DEFAULT_COORDS = COORD_LAMBDA_PROJECTIVE; - - protected readonly SecT193R2Point m_infinity; - - public SecT193R2Curve() - : base(193, 15, 0, 0) - { - this.m_infinity = new SecT193R2Point(this, null, null); - - this.m_a = FromBigInteger(new BigInteger(1, Hex.Decode("0163F35A5137C2CE3EA6ED8667190B0BC43ECD69977702709B"))); - this.m_b = FromBigInteger(new BigInteger(1, Hex.Decode("00C9BB9E8927D4D64C377E2AB2856A5B16E3EFB7F61D4316AE"))); - this.m_order = new BigInteger(1, Hex.Decode("010000000000000000000000015AAB561B005413CCD4EE99D5")); - this.m_cofactor = BigInteger.Two; - - this.m_coord = SecT193R2_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecT193R2Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_LAMBDA_PROJECTIVE: - return true; - default: - return false; - } - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return 193; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecT193FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecT193R2Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecT193R2Point(this, x, y, zs, withCompression); - } - - public override bool IsKoblitz - { - get { return false; } - } - - public virtual int M - { - get { return 193; } - } - - public virtual bool IsTrinomial - { - get { return true; } - } - - public virtual int K1 - { - get { return 15; } - } - - public virtual int K2 - { - get { return 0; } - } - - public virtual int K3 - { - get { return 0; } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT193R2Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT193R2Point.cs deleted file mode 100644 index 18d89e3..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT193R2Point.cs +++ /dev/null @@ -1,283 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT193R2Point - : AbstractF2mPoint - { - /** - * @deprecated Use ECCurve.createPoint to construct points - */ - public SecT193R2Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * @deprecated per-point compression property will be removed, refer {@link #getEncoded(bool)} - */ - public SecT193R2Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecT193R2Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecT193R2Point(null, AffineXCoord, AffineYCoord); - } - - public override ECFieldElement YCoord - { - get - { - ECFieldElement X = RawXCoord, L = RawYCoord; - - if (this.IsInfinity || X.IsZero) - return L; - - // Y is actually Lambda (X + Y/X) here; convert to affine value on the fly - ECFieldElement Y = L.Add(X).Multiply(X); - - ECFieldElement Z = RawZCoords[0]; - if (!Z.IsOne) - { - Y = Y.Divide(Z); - } - - return Y; - } - } - - protected internal override bool CompressionYTilde - { - get - { - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return false; - - ECFieldElement Y = this.RawYCoord; - - // Y is actually Lambda (X + Y/X) here - return Y.TestBitZero() != X.TestBitZero(); - } - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - ECFieldElement X2 = b.RawXCoord; - - if (X1.IsZero) - { - if (X2.IsZero) - return curve.Infinity; - - return b.Add(this); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord, Z2 = b.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement U2 = X2, S2 = L2; - if (!Z1IsOne) - { - U2 = U2.Multiply(Z1); - S2 = S2.Multiply(Z1); - } - - bool Z2IsOne = Z2.IsOne; - ECFieldElement U1 = X1, S1 = L1; - if (!Z2IsOne) - { - U1 = U1.Multiply(Z2); - S1 = S1.Multiply(Z2); - } - - ECFieldElement A = S1.Add(S2); - ECFieldElement B = U1.Add(U2); - - if (B.IsZero) - { - if (A.IsZero) - return Twice(); - - return curve.Infinity; - } - - ECFieldElement X3, L3, Z3; - if (X2.IsZero) - { - // TODO This can probably be optimized quite a bit - ECPoint p = this.Normalize(); - X1 = p.XCoord; - ECFieldElement Y1 = p.YCoord; - - ECFieldElement Y2 = L2; - ECFieldElement L = Y1.Add(Y2).Divide(X1); - - X3 = L.Square().Add(L).Add(X1).Add(curve.A); - if (X3.IsZero) - { - return new SecT193R2Point(curve, X3, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement Y3 = L.Multiply(X1.Add(X3)).Add(X3).Add(Y1); - L3 = Y3.Divide(X3).Add(X3); - Z3 = curve.FromBigInteger(BigInteger.One); - } - else - { - B = B.Square(); - - ECFieldElement AU1 = A.Multiply(U1); - ECFieldElement AU2 = A.Multiply(U2); - - X3 = AU1.Multiply(AU2); - if (X3.IsZero) - { - return new SecT193R2Point(curve, X3, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement ABZ2 = A.Multiply(B); - if (!Z2IsOne) - { - ABZ2 = ABZ2.Multiply(Z2); - } - - L3 = AU2.Add(B).SquarePlusProduct(ABZ2, L1.Add(Z1)); - - Z3 = ABZ2; - if (!Z1IsOne) - { - Z3 = Z3.Multiply(Z1); - } - } - - return new SecT193R2Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - { - return this; - } - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return curve.Infinity; - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement L1Z1 = Z1IsOne ? L1 : L1.Multiply(Z1); - ECFieldElement Z1Sq = Z1IsOne ? Z1 : Z1.Square(); - ECFieldElement a = curve.A; - ECFieldElement aZ1Sq = Z1IsOne ? a : a.Multiply(Z1Sq); - ECFieldElement T = L1.Square().Add(L1Z1).Add(aZ1Sq); - if (T.IsZero) - { - return new SecT193R2Point(curve, T, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement X3 = T.Square(); - ECFieldElement Z3 = Z1IsOne ? T : T.Multiply(Z1Sq); - - ECFieldElement X1Z1 = Z1IsOne ? X1 : X1.Multiply(Z1); - ECFieldElement L3 = X1Z1.SquarePlusProduct(T, L1Z1).Add(X3).Add(Z3); - - return new SecT193R2Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return b; - } - - ECFieldElement X2 = b.RawXCoord, Z2 = b.RawZCoords[0]; - if (X2.IsZero || !Z2.IsOne) - { - return Twice().Add(b); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord; - - ECFieldElement X1Sq = X1.Square(); - ECFieldElement L1Sq = L1.Square(); - ECFieldElement Z1Sq = Z1.Square(); - ECFieldElement L1Z1 = L1.Multiply(Z1); - - ECFieldElement T = curve.A.Multiply(Z1Sq).Add(L1Sq).Add(L1Z1); - ECFieldElement L2plus1 = L2.AddOne(); - ECFieldElement A = curve.A.Add(L2plus1).Multiply(Z1Sq).Add(L1Sq).MultiplyPlusProduct(T, X1Sq, Z1Sq); - ECFieldElement X2Z1Sq = X2.Multiply(Z1Sq); - ECFieldElement B = X2Z1Sq.Add(T).Square(); - - if (B.IsZero) - { - if (A.IsZero) - return b.Twice(); - - return curve.Infinity; - } - - if (A.IsZero) - { - return new SecT193R2Point(curve, A, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement X3 = A.Square().Multiply(X2Z1Sq); - ECFieldElement Z3 = A.Multiply(B).Multiply(Z1Sq); - ECFieldElement L3 = A.Add(B).Square().MultiplyPlusProduct(T, L2plus1, Z3); - - return new SecT193R2Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Negate() - { - if (this.IsInfinity) - return this; - - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return this; - - // L is actually Lambda (X + Y/X) here - ECFieldElement L = this.RawYCoord, Z = this.RawZCoords[0]; - return new SecT193R2Point(Curve, X, L.Add(Z), new ECFieldElement[] { Z }, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT233Field.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT233Field.cs deleted file mode 100644 index 870dade..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT233Field.cs +++ /dev/null @@ -1,317 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT233Field - { - private const ulong M41 = ulong.MaxValue >> 23; - private const ulong M59 = ulong.MaxValue >> 5; - - public static void Add(ulong[] x, ulong[] y, ulong[] z) - { - z[0] = x[0] ^ y[0]; - z[1] = x[1] ^ y[1]; - z[2] = x[2] ^ y[2]; - z[3] = x[3] ^ y[3]; - } - - public static void AddExt(ulong[] xx, ulong[] yy, ulong[] zz) - { - zz[0] = xx[0] ^ yy[0]; - zz[1] = xx[1] ^ yy[1]; - zz[2] = xx[2] ^ yy[2]; - zz[3] = xx[3] ^ yy[3]; - zz[4] = xx[4] ^ yy[4]; - zz[5] = xx[5] ^ yy[5]; - zz[6] = xx[6] ^ yy[6]; - zz[7] = xx[7] ^ yy[7]; - } - - public static void AddOne(ulong[] x, ulong[] z) - { - z[0] = x[0] ^ 1UL; - z[1] = x[1]; - z[2] = x[2]; - z[3] = x[3]; - } - - public static ulong[] FromBigInteger(BigInteger x) - { - ulong[] z = Nat256.FromBigInteger64(x); - Reduce23(z, 0); - return z; - } - - public static void Invert(ulong[] x, ulong[] z) - { - if (Nat256.IsZero64(x)) - throw new InvalidOperationException(); - - // Itoh-Tsujii inversion - - ulong[] t0 = Nat256.Create64(); - ulong[] t1 = Nat256.Create64(); - - Square(x, t0); - Multiply(t0, x, t0); - Square(t0, t0); - Multiply(t0, x, t0); - SquareN(t0, 3, t1); - Multiply(t1, t0, t1); - Square(t1, t1); - Multiply(t1, x, t1); - SquareN(t1, 7, t0); - Multiply(t0, t1, t0); - SquareN(t0, 14, t1); - Multiply(t1, t0, t1); - Square(t1, t1); - Multiply(t1, x, t1); - SquareN(t1, 29, t0); - Multiply(t0, t1, t0); - SquareN(t0, 58, t1); - Multiply(t1, t0, t1); - SquareN(t1, 116, t0); - Multiply(t0, t1, t0); - Square(t0, z); - } - - public static void Multiply(ulong[] x, ulong[] y, ulong[] z) - { - ulong[] tt = Nat256.CreateExt64(); - ImplMultiply(x, y, tt); - Reduce(tt, z); - } - - public static void MultiplyAddToExt(ulong[] x, ulong[] y, ulong[] zz) - { - ulong[] tt = Nat256.CreateExt64(); - ImplMultiply(x, y, tt); - AddExt(zz, tt, zz); - } - - public static void Reduce(ulong[] xx, ulong[] z) - { - ulong x0 = xx[0], x1 = xx[1], x2 = xx[2], x3 = xx[3]; - ulong x4 = xx[4], x5 = xx[5], x6 = xx[6], x7 = xx[7]; - - x3 ^= (x7 << 23); - x4 ^= (x7 >> 41) ^ (x7 << 33); - x5 ^= (x7 >> 31); - - x2 ^= (x6 << 23); - x3 ^= (x6 >> 41) ^ (x6 << 33); - x4 ^= (x6 >> 31); - - x1 ^= (x5 << 23); - x2 ^= (x5 >> 41) ^ (x5 << 33); - x3 ^= (x5 >> 31); - - x0 ^= (x4 << 23); - x1 ^= (x4 >> 41) ^ (x4 << 33); - x2 ^= (x4 >> 31); - - ulong t = x3 >> 41; - z[0] = x0 ^ t; - z[1] = x1 ^ (t << 10); - z[2] = x2; - z[3] = x3 & M41; - } - - public static void Reduce23(ulong[] z, int zOff) - { - ulong z3 = z[zOff + 3], t = z3 >> 41; - z[zOff ] ^= t; - z[zOff + 1] ^= (t << 10); - z[zOff + 3] = z3 & M41; - } - - public static void Sqrt(ulong[] x, ulong[] z) - { - ulong u0, u1; - u0 = Interleave.Unshuffle(x[0]); u1 = Interleave.Unshuffle(x[1]); - ulong e0 = (u0 & 0x00000000FFFFFFFFUL) | (u1 << 32); - ulong c0 = (u0 >> 32) | (u1 & 0xFFFFFFFF00000000UL); - - u0 = Interleave.Unshuffle(x[2]); u1 = Interleave.Unshuffle(x[3]); - ulong e1 = (u0 & 0x00000000FFFFFFFFUL) | (u1 << 32); - ulong c1 = (u0 >> 32) | (u1 & 0xFFFFFFFF00000000UL); - - ulong c2; - c2 = (c1 >> 27); - c1 ^= (c0 >> 27) | (c1 << 37); - c0 ^= (c0 << 37); - - ulong[] tt = Nat256.CreateExt64(); - - int[] shifts = { 32, 117, 191 }; - for (int i = 0; i < shifts.Length; ++i) - { - int w = shifts[i] >> 6, s = shifts[i] & 63; - Debug.Assert(s != 0); - tt[w ] ^= (c0 << s); - tt[w + 1] ^= (c1 << s) | (c0 >> -s); - tt[w + 2] ^= (c2 << s) | (c1 >> -s); - tt[w + 3] ^= (c2 >> -s); - } - - Reduce(tt, z); - - z[0] ^= e0; - z[1] ^= e1; - } - - public static void Square(ulong[] x, ulong[] z) - { - ulong[] tt = Nat256.CreateExt64(); - ImplSquare(x, tt); - Reduce(tt, z); - } - - public static void SquareAddToExt(ulong[] x, ulong[] zz) - { - ulong[] tt = Nat256.CreateExt64(); - ImplSquare(x, tt); - AddExt(zz, tt, zz); - } - - public static void SquareN(ulong[] x, int n, ulong[] z) - { - Debug.Assert(n > 0); - - ulong[] tt = Nat256.CreateExt64(); - ImplSquare(x, tt); - Reduce(tt, z); - - while (--n > 0) - { - ImplSquare(z, tt); - Reduce(tt, z); - } - } - - public static uint Trace(ulong[] x) - { - // Non-zero-trace bits: 0, 159 - return (uint)(x[0] ^ (x[2] >> 31)) & 1U; - } - - protected static void ImplCompactExt(ulong[] zz) - { - ulong z0 = zz[0], z1 = zz[1], z2 = zz[2], z3 = zz[3], z4 = zz[4], z5 = zz[5], z6 = zz[6], z7 = zz[7]; - zz[0] = z0 ^ (z1 << 59); - zz[1] = (z1 >> 5) ^ (z2 << 54); - zz[2] = (z2 >> 10) ^ (z3 << 49); - zz[3] = (z3 >> 15) ^ (z4 << 44); - zz[4] = (z4 >> 20) ^ (z5 << 39); - zz[5] = (z5 >> 25) ^ (z6 << 34); - zz[6] = (z6 >> 30) ^ (z7 << 29); - zz[7] = (z7 >> 35); - } - - protected static void ImplExpand(ulong[] x, ulong[] z) - { - ulong x0 = x[0], x1 = x[1], x2 = x[2], x3 = x[3]; - z[0] = x0 & M59; - z[1] = ((x0 >> 59) ^ (x1 << 5)) & M59; - z[2] = ((x1 >> 54) ^ (x2 << 10)) & M59; - z[3] = ((x2 >> 49) ^ (x3 << 15)); - } - - protected static void ImplMultiply(ulong[] x, ulong[] y, ulong[] zz) - { - /* - * "Two-level seven-way recursion" as described in "Batch binary Edwards", Daniel J. Bernstein. - */ - - ulong[] f = new ulong[4], g = new ulong[4]; - ImplExpand(x, f); - ImplExpand(y, g); - - ImplMulwAcc(f[0], g[0], zz, 0); - ImplMulwAcc(f[1], g[1], zz, 1); - ImplMulwAcc(f[2], g[2], zz, 2); - ImplMulwAcc(f[3], g[3], zz, 3); - - // U *= (1 - t^n) - for (int i = 5; i > 0; --i) - { - zz[i] ^= zz[i - 1]; - } - - ImplMulwAcc(f[0] ^ f[1], g[0] ^ g[1], zz, 1); - ImplMulwAcc(f[2] ^ f[3], g[2] ^ g[3], zz, 3); - - // V *= (1 - t^2n) - for (int i = 7; i > 1; --i) - { - zz[i] ^= zz[i - 2]; - } - - // Double-length recursion - { - ulong c0 = f[0] ^ f[2], c1 = f[1] ^ f[3]; - ulong d0 = g[0] ^ g[2], d1 = g[1] ^ g[3]; - ImplMulwAcc(c0 ^ c1, d0 ^ d1, zz, 3); - ulong[] t = new ulong[3]; - ImplMulwAcc(c0, d0, t, 0); - ImplMulwAcc(c1, d1, t, 1); - ulong t0 = t[0], t1 = t[1], t2 = t[2]; - zz[2] ^= t0; - zz[3] ^= t0 ^ t1; - zz[4] ^= t2 ^ t1; - zz[5] ^= t2; - } - - ImplCompactExt(zz); - } - - protected static void ImplMulwAcc(ulong x, ulong y, ulong[] z, int zOff) - { - Debug.Assert(x >> 59 == 0); - Debug.Assert(y >> 59 == 0); - - ulong[] u = new ulong[8]; - //u[0] = 0; - u[1] = y; - u[2] = u[1] << 1; - u[3] = u[2] ^ y; - u[4] = u[2] << 1; - u[5] = u[4] ^ y; - u[6] = u[3] << 1; - u[7] = u[6] ^ y; - - uint j = (uint)x; - ulong g, h = 0, l = u[j & 7] - ^ (u[(j >> 3) & 7] << 3); - int k = 54; - do - { - j = (uint)(x >> k); - g = u[j & 7] - ^ u[(j >> 3) & 7] << 3; - l ^= (g << k); - h ^= (g >> -k); - } - while ((k -= 6) > 0); - - Debug.Assert(h >> 53 == 0); - - z[zOff ] ^= l & M59; - z[zOff + 1] ^= (l >> 59) ^ (h << 5); - } - - protected static void ImplSquare(ulong[] x, ulong[] zz) - { - Interleave.Expand64To128(x[0], zz, 0); - Interleave.Expand64To128(x[1], zz, 2); - Interleave.Expand64To128(x[2], zz, 4); - - ulong x3 = x[3]; - zz[6] = Interleave.Expand32to64((uint)x3); - zz[7] = Interleave.Expand16to32((uint)(x3 >> 32)); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT233FieldElement.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT233FieldElement.cs deleted file mode 100644 index 91b8e2f..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT233FieldElement.cs +++ /dev/null @@ -1,216 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT233FieldElement - : ECFieldElement - { - protected readonly ulong[] x; - - public SecT233FieldElement(BigInteger x) - { - if (x == null || x.SignValue < 0 || x.BitLength > 233) - throw new ArgumentException("value invalid for SecT233FieldElement", "x"); - - this.x = SecT233Field.FromBigInteger(x); - } - - public SecT233FieldElement() - { - this.x = Nat256.Create64(); - } - - protected internal SecT233FieldElement(ulong[] x) - { - this.x = x; - } - - public override bool IsOne - { - get { return Nat256.IsOne64(x); } - } - - public override bool IsZero - { - get { return Nat256.IsZero64(x); } - } - - public override bool TestBitZero() - { - return (x[0] & 1UL) != 0UL; - } - - public override BigInteger ToBigInteger() - { - return Nat256.ToBigInteger64(x); - } - - public override string FieldName - { - get { return "SecT233Field"; } - } - - public override int FieldSize - { - get { return 233; } - } - - public override ECFieldElement Add(ECFieldElement b) - { - ulong[] z = Nat256.Create64(); - SecT233Field.Add(x, ((SecT233FieldElement)b).x, z); - return new SecT233FieldElement(z); - } - - public override ECFieldElement AddOne() - { - ulong[] z = Nat256.Create64(); - SecT233Field.AddOne(x, z); - return new SecT233FieldElement(z); - } - - public override ECFieldElement Subtract(ECFieldElement b) - { - // Addition and Subtraction are the same in F2m - return Add(b); - } - - public override ECFieldElement Multiply(ECFieldElement b) - { - ulong[] z = Nat256.Create64(); - SecT233Field.Multiply(x, ((SecT233FieldElement)b).x, z); - return new SecT233FieldElement(z); - } - - public override ECFieldElement MultiplyMinusProduct(ECFieldElement b, ECFieldElement x, ECFieldElement y) - { - return MultiplyPlusProduct(b, x, y); - } - - public override ECFieldElement MultiplyPlusProduct(ECFieldElement b, ECFieldElement x, ECFieldElement y) - { - ulong[] ax = this.x, bx = ((SecT233FieldElement)b).x; - ulong[] xx = ((SecT233FieldElement)x).x, yx = ((SecT233FieldElement)y).x; - - ulong[] tt = Nat256.CreateExt64(); - SecT233Field.MultiplyAddToExt(ax, bx, tt); - SecT233Field.MultiplyAddToExt(xx, yx, tt); - - ulong[] z = Nat256.Create64(); - SecT233Field.Reduce(tt, z); - return new SecT233FieldElement(z); - } - - public override ECFieldElement Divide(ECFieldElement b) - { - return Multiply(b.Invert()); - } - - public override ECFieldElement Negate() - { - return this; - } - - public override ECFieldElement Square() - { - ulong[] z = Nat256.Create64(); - SecT233Field.Square(x, z); - return new SecT233FieldElement(z); - } - - public override ECFieldElement SquareMinusProduct(ECFieldElement x, ECFieldElement y) - { - return SquarePlusProduct(x, y); - } - - public override ECFieldElement SquarePlusProduct(ECFieldElement x, ECFieldElement y) - { - ulong[] ax = this.x; - ulong[] xx = ((SecT233FieldElement)x).x, yx = ((SecT233FieldElement)y).x; - - ulong[] tt = Nat256.CreateExt64(); - SecT233Field.SquareAddToExt(ax, tt); - SecT233Field.MultiplyAddToExt(xx, yx, tt); - - ulong[] z = Nat256.Create64(); - SecT233Field.Reduce(tt, z); - return new SecT233FieldElement(z); - } - - public override ECFieldElement SquarePow(int pow) - { - if (pow < 1) - return this; - - ulong[] z = Nat256.Create64(); - SecT233Field.SquareN(x, pow, z); - return new SecT233FieldElement(z); - } - - public override ECFieldElement Invert() - { - ulong[] z = Nat256.Create64(); - SecT233Field.Invert(x, z); - return new SecT233FieldElement(z); - } - - public override ECFieldElement Sqrt() - { - ulong[] z = Nat256.Create64(); - SecT233Field.Sqrt(x, z); - return new SecT233FieldElement(z); - } - - public virtual int Representation - { - get { return F2mFieldElement.Tpb; } - } - - public virtual int M - { - get { return 233; } - } - - public virtual int K1 - { - get { return 74; } - } - - public virtual int K2 - { - get { return 0; } - } - - public virtual int K3 - { - get { return 0; } - } - - public override bool Equals(object obj) - { - return Equals(obj as SecT233FieldElement); - } - - public override bool Equals(ECFieldElement other) - { - return Equals(other as SecT233FieldElement); - } - - public virtual bool Equals(SecT233FieldElement other) - { - if (this == other) - return true; - if (null == other) - return false; - return Nat256.Eq64(x, other.x); - } - - public override int GetHashCode() - { - return 2330074 ^ Arrays.GetHashCode(x, 0, 4); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT233K1Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT233K1Curve.cs deleted file mode 100644 index 7293591..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT233K1Curve.cs +++ /dev/null @@ -1,104 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.EC.Multiplier; -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT233K1Curve - : AbstractF2mCurve - { - private const int SecT233K1_DEFAULT_COORDS = COORD_LAMBDA_PROJECTIVE; - - protected readonly SecT233K1Point m_infinity; - - public SecT233K1Curve() - : base(233, 74, 0, 0) - { - this.m_infinity = new SecT233K1Point(this, null, null); - - this.m_a = FromBigInteger(BigInteger.Zero); - this.m_b = FromBigInteger(BigInteger.One); - this.m_order = new BigInteger(1, Hex.Decode("8000000000000000000000000000069D5BB915BCD46EFB1AD5F173ABDF")); - this.m_cofactor = BigInteger.ValueOf(4); - - this.m_coord = SecT233K1_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecT233K1Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_LAMBDA_PROJECTIVE: - return true; - default: - return false; - } - } - - protected override ECMultiplier CreateDefaultMultiplier() - { - return new WTauNafMultiplier(); - } - - public override int FieldSize - { - get { return 233; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecT233FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecT233K1Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecT233K1Point(this, x, y, zs, withCompression); - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override bool IsKoblitz - { - get { return true; } - } - - public virtual int M - { - get { return 233; } - } - - public virtual bool IsTrinomial - { - get { return true; } - } - - public virtual int K1 - { - get { return 74; } - } - - public virtual int K2 - { - get { return 0; } - } - - public virtual int K3 - { - get { return 0; } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT233K1Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT233K1Point.cs deleted file mode 100644 index 9a357ff..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT233K1Point.cs +++ /dev/null @@ -1,295 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT233K1Point - : AbstractF2mPoint - { - /** - * @deprecated Use ECCurve.createPoint to construct points - */ - public SecT233K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * @deprecated per-point compression property will be removed, refer {@link #getEncoded(bool)} - */ - public SecT233K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecT233K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecT233K1Point(null, this.AffineXCoord, this.AffineYCoord); // earlier JDK - } - - public override ECFieldElement YCoord - { - get - { - ECFieldElement X = RawXCoord, L = RawYCoord; - - if (this.IsInfinity || X.IsZero) - return L; - - // Y is actually Lambda (X + Y/X) here; convert to affine value on the fly - ECFieldElement Y = L.Add(X).Multiply(X); - - ECFieldElement Z = RawZCoords[0]; - if (!Z.IsOne) - { - Y = Y.Divide(Z); - } - - return Y; - } - } - - protected internal override bool CompressionYTilde - { - get - { - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return false; - - ECFieldElement Y = this.RawYCoord; - - // Y is actually Lambda (X + Y/X) here - return Y.TestBitZero() != X.TestBitZero(); - } - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - ECFieldElement X2 = b.RawXCoord; - - if (X1.IsZero) - { - if (X2.IsZero) - { - return curve.Infinity; - } - - return b.Add(this); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord, Z2 = b.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement U2 = X2, S2 = L2; - if (!Z1IsOne) - { - U2 = U2.Multiply(Z1); - S2 = S2.Multiply(Z1); - } - - bool Z2IsOne = Z2.IsOne; - ECFieldElement U1 = X1, S1 = L1; - if (!Z2IsOne) - { - U1 = U1.Multiply(Z2); - S1 = S1.Multiply(Z2); - } - - ECFieldElement A = S1.Add(S2); - ECFieldElement B = U1.Add(U2); - - if (B.IsZero) - { - if (A.IsZero) - return Twice(); - - return curve.Infinity; - } - - ECFieldElement X3, L3, Z3; - if (X2.IsZero) - { - // TODO This can probably be optimized quite a bit - ECPoint p = this.Normalize(); - X1 = p.XCoord; - ECFieldElement Y1 = p.YCoord; - - ECFieldElement Y2 = L2; - ECFieldElement L = Y1.Add(Y2).Divide(X1); - - X3 = L.Square().Add(L).Add(X1); - if (X3.IsZero) - { - return new SecT233K1Point(curve, X3, curve.B, IsCompressed); - } - - ECFieldElement Y3 = L.Multiply(X1.Add(X3)).Add(X3).Add(Y1); - L3 = Y3.Divide(X3).Add(X3); - Z3 = curve.FromBigInteger(BigInteger.One); - } - else - { - B = B.Square(); - - ECFieldElement AU1 = A.Multiply(U1); - ECFieldElement AU2 = A.Multiply(U2); - - X3 = AU1.Multiply(AU2); - if (X3.IsZero) - { - return new SecT233K1Point(curve, X3, curve.B, IsCompressed); - } - - ECFieldElement ABZ2 = A.Multiply(B); - if (!Z2IsOne) - { - ABZ2 = ABZ2.Multiply(Z2); - } - - L3 = AU2.Add(B).SquarePlusProduct(ABZ2, L1.Add(Z1)); - - Z3 = ABZ2; - if (!Z1IsOne) - { - Z3 = Z3.Multiply(Z1); - } - } - - return new SecT233K1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - { - return this; - } - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return curve.Infinity; - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement Z1Sq = Z1IsOne ? Z1 : Z1.Square(); - ECFieldElement T; - if (Z1IsOne) - { - T = L1.Square().Add(L1); - } - else - { - T = L1.Add(Z1).Multiply(L1); - } - - if (T.IsZero) - { - return new SecT233K1Point(curve, T, curve.B, IsCompressed); - } - - ECFieldElement X3 = T.Square(); - ECFieldElement Z3 = Z1IsOne ? T : T.Multiply(Z1Sq); - - ECFieldElement t1 = L1.Add(X1).Square(); - ECFieldElement t2 = Z1IsOne ? Z1 : Z1Sq.Square(); - ECFieldElement L3 = t1.Add(T).Add(Z1Sq).Multiply(t1).Add(t2).Add(X3).Add(Z3); - - return new SecT233K1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return b; - } - - // NOTE: TwicePlus() only optimized for lambda-affine argument - ECFieldElement X2 = b.RawXCoord, Z2 = b.RawZCoords[0]; - if (X2.IsZero || !Z2.IsOne) - { - return Twice().Add(b); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord; - - ECFieldElement X1Sq = X1.Square(); - ECFieldElement L1Sq = L1.Square(); - ECFieldElement Z1Sq = Z1.Square(); - ECFieldElement L1Z1 = L1.Multiply(Z1); - - ECFieldElement T = L1Sq.Add(L1Z1); - ECFieldElement L2plus1 = L2.AddOne(); - ECFieldElement A = L2plus1.Multiply(Z1Sq).Add(L1Sq).MultiplyPlusProduct(T, X1Sq, Z1Sq); - ECFieldElement X2Z1Sq = X2.Multiply(Z1Sq); - ECFieldElement B = X2Z1Sq.Add(T).Square(); - - if (B.IsZero) - { - if (A.IsZero) - { - return b.Twice(); - } - - return curve.Infinity; - } - - if (A.IsZero) - { - return new SecT233K1Point(curve, A, curve.B, IsCompressed); - } - - ECFieldElement X3 = A.Square().Multiply(X2Z1Sq); - ECFieldElement Z3 = A.Multiply(B).Multiply(Z1Sq); - ECFieldElement L3 = A.Add(B).Square().MultiplyPlusProduct(T, L2plus1, Z3); - - return new SecT233K1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Negate() - { - if (this.IsInfinity) - return this; - - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return this; - - // L is actually Lambda (X + Y/X) here - ECFieldElement L = this.RawYCoord, Z = this.RawZCoords[0]; - return new SecT233K1Point(Curve, X, L.Add(Z), new ECFieldElement[] { Z }, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT233R1Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT233R1Curve.cs deleted file mode 100644 index db6e6e1..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT233R1Curve.cs +++ /dev/null @@ -1,98 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT233R1Curve - : AbstractF2mCurve - { - private const int SecT233R1_DEFAULT_COORDS = COORD_LAMBDA_PROJECTIVE; - - protected readonly SecT233R1Point m_infinity; - - public SecT233R1Curve() - : base(233, 74, 0, 0) - { - this.m_infinity = new SecT233R1Point(this, null, null); - - this.m_a = FromBigInteger(BigInteger.One); - this.m_b = FromBigInteger(new BigInteger(1, Hex.Decode("0066647EDE6C332C7F8C0923BB58213B333B20E9CE4281FE115F7D8F90AD"))); - this.m_order = new BigInteger(1, Hex.Decode("01000000000000000000000000000013E974E72F8A6922031D2603CFE0D7")); - this.m_cofactor = BigInteger.Two; - - this.m_coord = SecT233R1_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecT233R1Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_LAMBDA_PROJECTIVE: - return true; - default: - return false; - } - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return 233; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecT233FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecT233R1Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecT233R1Point(this, x, y, zs, withCompression); - } - - public override bool IsKoblitz - { - get { return false; } - } - - public virtual int M - { - get { return 233; } - } - - public virtual bool IsTrinomial - { - get { return true; } - } - - public virtual int K1 - { - get { return 74; } - } - - public virtual int K2 - { - get { return 0; } - } - - public virtual int K3 - { - get { return 0; } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT233R1Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT233R1Point.cs deleted file mode 100644 index 6347051..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT233R1Point.cs +++ /dev/null @@ -1,278 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT233R1Point - : AbstractF2mPoint - { - /** - * @deprecated Use ECCurve.createPoint to construct points - */ - public SecT233R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * @deprecated per-point compression property will be removed, refer {@link #getEncoded(bool)} - */ - public SecT233R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecT233R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecT233R1Point(null, AffineXCoord, AffineYCoord); - } - - public override ECFieldElement YCoord - { - get - { - ECFieldElement X = RawXCoord, L = RawYCoord; - - if (this.IsInfinity || X.IsZero) - return L; - - // Y is actually Lambda (X + Y/X) here; convert to affine value on the fly - ECFieldElement Y = L.Add(X).Multiply(X); - - ECFieldElement Z = RawZCoords[0]; - if (!Z.IsOne) - { - Y = Y.Divide(Z); - } - - return Y; - } - } - - protected internal override bool CompressionYTilde - { - get - { - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return false; - - ECFieldElement Y = this.RawYCoord; - - // Y is actually Lambda (X + Y/X) here - return Y.TestBitZero() != X.TestBitZero(); - } - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - ECFieldElement X2 = b.RawXCoord; - - if (X1.IsZero) - { - if (X2.IsZero) - return curve.Infinity; - - return b.Add(this); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord, Z2 = b.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement U2 = X2, S2 = L2; - if (!Z1IsOne) - { - U2 = U2.Multiply(Z1); - S2 = S2.Multiply(Z1); - } - - bool Z2IsOne = Z2.IsOne; - ECFieldElement U1 = X1, S1 = L1; - if (!Z2IsOne) - { - U1 = U1.Multiply(Z2); - S1 = S1.Multiply(Z2); - } - - ECFieldElement A = S1.Add(S2); - ECFieldElement B = U1.Add(U2); - - if (B.IsZero) - { - if (A.IsZero) - return Twice(); - - return curve.Infinity; - } - - ECFieldElement X3, L3, Z3; - if (X2.IsZero) - { - // TODO This can probably be optimized quite a bit - ECPoint p = this.Normalize(); - X1 = p.XCoord; - ECFieldElement Y1 = p.YCoord; - - ECFieldElement Y2 = L2; - ECFieldElement L = Y1.Add(Y2).Divide(X1); - - X3 = L.Square().Add(L).Add(X1).AddOne(); - if (X3.IsZero) - { - return new SecT233R1Point(curve, X3, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement Y3 = L.Multiply(X1.Add(X3)).Add(X3).Add(Y1); - L3 = Y3.Divide(X3).Add(X3); - Z3 = curve.FromBigInteger(BigInteger.One); - } - else - { - B = B.Square(); - - ECFieldElement AU1 = A.Multiply(U1); - ECFieldElement AU2 = A.Multiply(U2); - - X3 = AU1.Multiply(AU2); - if (X3.IsZero) - { - return new SecT233R1Point(curve, X3, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement ABZ2 = A.Multiply(B); - if (!Z2IsOne) - { - ABZ2 = ABZ2.Multiply(Z2); - } - - L3 = AU2.Add(B).SquarePlusProduct(ABZ2, L1.Add(Z1)); - - Z3 = ABZ2; - if (!Z1IsOne) - { - Z3 = Z3.Multiply(Z1); - } - } - - return new SecT233R1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return curve.Infinity; - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement L1Z1 = Z1IsOne ? L1 : L1.Multiply(Z1); - ECFieldElement Z1Sq = Z1IsOne ? Z1 : Z1.Square(); - ECFieldElement T = L1.Square().Add(L1Z1).Add(Z1Sq); - if (T.IsZero) - { - return new SecT233R1Point(curve, T, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement X3 = T.Square(); - ECFieldElement Z3 = Z1IsOne ? T : T.Multiply(Z1Sq); - - ECFieldElement X1Z1 = Z1IsOne ? X1 : X1.Multiply(Z1); - ECFieldElement L3 = X1Z1.SquarePlusProduct(T, L1Z1).Add(X3).Add(Z3); - - return new SecT233R1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return b; - } - - ECFieldElement X2 = b.RawXCoord, Z2 = b.RawZCoords[0]; - if (X2.IsZero || !Z2.IsOne) - { - return Twice().Add(b); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord; - - ECFieldElement X1Sq = X1.Square(); - ECFieldElement L1Sq = L1.Square(); - ECFieldElement Z1Sq = Z1.Square(); - ECFieldElement L1Z1 = L1.Multiply(Z1); - - ECFieldElement T = Z1Sq.Add(L1Sq).Add(L1Z1); - ECFieldElement A = L2.Multiply(Z1Sq).Add(L1Sq).MultiplyPlusProduct(T, X1Sq, Z1Sq); - ECFieldElement X2Z1Sq = X2.Multiply(Z1Sq); - ECFieldElement B = X2Z1Sq.Add(T).Square(); - - if (B.IsZero) - { - if (A.IsZero) - return b.Twice(); - - return curve.Infinity; - } - - if (A.IsZero) - { - return new SecT233R1Point(curve, A, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement X3 = A.Square().Multiply(X2Z1Sq); - ECFieldElement Z3 = A.Multiply(B).Multiply(Z1Sq); - ECFieldElement L3 = A.Add(B).Square().MultiplyPlusProduct(T, L2.AddOne(), Z3); - - return new SecT233R1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Negate() - { - if (this.IsInfinity) - return this; - - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return this; - - // L is actually Lambda (X + Y/X) here - ECFieldElement L = this.RawYCoord, Z = this.RawZCoords[0]; - return new SecT233R1Point(Curve, X, L.Add(Z), new ECFieldElement[] { Z }, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT239Field.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT239Field.cs deleted file mode 100644 index 2e6ed2a..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT239Field.cs +++ /dev/null @@ -1,328 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT239Field - { - private const ulong M47 = ulong.MaxValue >> 17; - private const ulong M60 = ulong.MaxValue >> 4; - - public static void Add(ulong[] x, ulong[] y, ulong[] z) - { - z[0] = x[0] ^ y[0]; - z[1] = x[1] ^ y[1]; - z[2] = x[2] ^ y[2]; - z[3] = x[3] ^ y[3]; - } - - public static void AddExt(ulong[] xx, ulong[] yy, ulong[] zz) - { - zz[0] = xx[0] ^ yy[0]; - zz[1] = xx[1] ^ yy[1]; - zz[2] = xx[2] ^ yy[2]; - zz[3] = xx[3] ^ yy[3]; - zz[4] = xx[4] ^ yy[4]; - zz[5] = xx[5] ^ yy[5]; - zz[6] = xx[6] ^ yy[6]; - zz[7] = xx[7] ^ yy[7]; - } - - public static void AddOne(ulong[] x, ulong[] z) - { - z[0] = x[0] ^ 1UL; - z[1] = x[1]; - z[2] = x[2]; - z[3] = x[3]; - } - - public static ulong[] FromBigInteger(BigInteger x) - { - ulong[] z = Nat256.FromBigInteger64(x); - Reduce17(z, 0); - return z; - } - - public static void Invert(ulong[] x, ulong[] z) - { - if (Nat256.IsZero64(x)) - throw new InvalidOperationException(); - - // Itoh-Tsujii inversion - - ulong[] t0 = Nat256.Create64(); - ulong[] t1 = Nat256.Create64(); - - Square(x, t0); - Multiply(t0, x, t0); - Square(t0, t0); - Multiply(t0, x, t0); - SquareN(t0, 3, t1); - Multiply(t1, t0, t1); - Square(t1, t1); - Multiply(t1, x, t1); - SquareN(t1, 7, t0); - Multiply(t0, t1, t0); - SquareN(t0, 14, t1); - Multiply(t1, t0, t1); - Square(t1, t1); - Multiply(t1, x, t1); - SquareN(t1, 29, t0); - Multiply(t0, t1, t0); - Square(t0, t0); - Multiply(t0, x, t0); - SquareN(t0, 59, t1); - Multiply(t1, t0, t1); - Square(t1, t1); - Multiply(t1, x, t1); - SquareN(t1, 119, t0); - Multiply(t0, t1, t0); - Square(t0, z); - } - - public static void Multiply(ulong[] x, ulong[] y, ulong[] z) - { - ulong[] tt = Nat256.CreateExt64(); - ImplMultiply(x, y, tt); - Reduce(tt, z); - } - - public static void MultiplyAddToExt(ulong[] x, ulong[] y, ulong[] zz) - { - ulong[] tt = Nat256.CreateExt64(); - ImplMultiply(x, y, tt); - AddExt(zz, tt, zz); - } - - public static void Reduce(ulong[] xx, ulong[] z) - { - ulong x0 = xx[0], x1 = xx[1], x2 = xx[2], x3 = xx[3]; - ulong x4 = xx[4], x5 = xx[5], x6 = xx[6], x7 = xx[7]; - - x3 ^= (x7 << 17); - x4 ^= (x7 >> 47); - x5 ^= (x7 << 47); - x6 ^= (x7 >> 17); - - x2 ^= (x6 << 17); - x3 ^= (x6 >> 47); - x4 ^= (x6 << 47); - x5 ^= (x6 >> 17); - - x1 ^= (x5 << 17); - x2 ^= (x5 >> 47); - x3 ^= (x5 << 47); - x4 ^= (x5 >> 17); - - x0 ^= (x4 << 17); - x1 ^= (x4 >> 47); - x2 ^= (x4 << 47); - x3 ^= (x4 >> 17); - - ulong t = x3 >> 47; - z[0] = x0 ^ t; - z[1] = x1; - z[2] = x2 ^ (t << 30); - z[3] = x3 & M47; - } - - public static void Reduce17(ulong[] z, int zOff) - { - ulong z3 = z[zOff + 3], t = z3 >> 47; - z[zOff ] ^= t; - z[zOff + 2] ^= (t << 30); - z[zOff + 3] = z3 & M47; - } - - public static void Sqrt(ulong[] x, ulong[] z) - { - ulong u0, u1; - u0 = Interleave.Unshuffle(x[0]); u1 = Interleave.Unshuffle(x[1]); - ulong e0 = (u0 & 0x00000000FFFFFFFFUL) | (u1 << 32); - ulong c0 = (u0 >> 32) | (u1 & 0xFFFFFFFF00000000UL); - - u0 = Interleave.Unshuffle(x[2]); u1 = Interleave.Unshuffle(x[3]); - ulong e1 = (u0 & 0x00000000FFFFFFFFUL) | (u1 << 32); - ulong c1 = (u0 >> 32) | (u1 & 0xFFFFFFFF00000000UL); - - ulong c2, c3; - c3 = (c1 >> 49); - c2 = (c0 >> 49) | (c1 << 15); - c1 ^= (c0 << 15); - - ulong[] tt = Nat256.CreateExt64(); - - int[] shifts = { 39, 120 }; - for (int i = 0; i < shifts.Length; ++i) - { - int w = shifts[i] >> 6, s = shifts[i] & 63; - Debug.Assert(s != 0); - tt[w ] ^= (c0 << s); - tt[w + 1] ^= (c1 << s) | (c0 >> -s); - tt[w + 2] ^= (c2 << s) | (c1 >> -s); - tt[w + 3] ^= (c3 << s) | (c2 >> -s); - tt[w + 4] ^= (c3 >> -s); - } - - Reduce(tt, z); - - z[0] ^= e0; - z[1] ^= e1; - } - - public static void Square(ulong[] x, ulong[] z) - { - ulong[] tt = Nat256.CreateExt64(); - ImplSquare(x, tt); - Reduce(tt, z); - } - - public static void SquareAddToExt(ulong[] x, ulong[] zz) - { - ulong[] tt = Nat256.CreateExt64(); - ImplSquare(x, tt); - AddExt(zz, tt, zz); - } - - public static void SquareN(ulong[] x, int n, ulong[] z) - { - Debug.Assert(n > 0); - - ulong[] tt = Nat256.CreateExt64(); - ImplSquare(x, tt); - Reduce(tt, z); - - while (--n > 0) - { - ImplSquare(z, tt); - Reduce(tt, z); - } - } - - public static uint Trace(ulong[] x) - { - // Non-zero-trace bits: 0, 81, 162 - return (uint)(x[0] ^ (x[1] >> 17) ^ (x[2] >> 34)) & 1U; - } - - protected static void ImplCompactExt(ulong[] zz) - { - ulong z0 = zz[0], z1 = zz[1], z2 = zz[2], z3 = zz[3], z4 = zz[4], z5 = zz[5], z6 = zz[6], z7 = zz[7]; - zz[0] = z0 ^ (z1 << 60); - zz[1] = (z1 >> 4) ^ (z2 << 56); - zz[2] = (z2 >> 8) ^ (z3 << 52); - zz[3] = (z3 >> 12) ^ (z4 << 48); - zz[4] = (z4 >> 16) ^ (z5 << 44); - zz[5] = (z5 >> 20) ^ (z6 << 40); - zz[6] = (z6 >> 24) ^ (z7 << 36); - zz[7] = (z7 >> 28); - } - - protected static void ImplExpand(ulong[] x, ulong[] z) - { - ulong x0 = x[0], x1 = x[1], x2 = x[2], x3 = x[3]; - z[0] = x0 & M60; - z[1] = ((x0 >> 60) ^ (x1 << 4)) & M60; - z[2] = ((x1 >> 56) ^ (x2 << 8)) & M60; - z[3] = ((x2 >> 52) ^ (x3 << 12)); - } - - protected static void ImplMultiply(ulong[] x, ulong[] y, ulong[] zz) - { - /* - * "Two-level seven-way recursion" as described in "Batch binary Edwards", Daniel J. Bernstein. - */ - - ulong[] f = new ulong[4], g = new ulong[4]; - ImplExpand(x, f); - ImplExpand(y, g); - - ImplMulwAcc(f[0], g[0], zz, 0); - ImplMulwAcc(f[1], g[1], zz, 1); - ImplMulwAcc(f[2], g[2], zz, 2); - ImplMulwAcc(f[3], g[3], zz, 3); - - // U *= (1 - t^n) - for (int i = 5; i > 0; --i) - { - zz[i] ^= zz[i - 1]; - } - - ImplMulwAcc(f[0] ^ f[1], g[0] ^ g[1], zz, 1); - ImplMulwAcc(f[2] ^ f[3], g[2] ^ g[3], zz, 3); - - // V *= (1 - t^2n) - for (int i = 7; i > 1; --i) - { - zz[i] ^= zz[i - 2]; - } - - // Double-length recursion - { - ulong c0 = f[0] ^ f[2], c1 = f[1] ^ f[3]; - ulong d0 = g[0] ^ g[2], d1 = g[1] ^ g[3]; - ImplMulwAcc(c0 ^ c1, d0 ^ d1, zz, 3); - ulong[] t = new ulong[3]; - ImplMulwAcc(c0, d0, t, 0); - ImplMulwAcc(c1, d1, t, 1); - ulong t0 = t[0], t1 = t[1], t2 = t[2]; - zz[2] ^= t0; - zz[3] ^= t0 ^ t1; - zz[4] ^= t2 ^ t1; - zz[5] ^= t2; - } - - ImplCompactExt(zz); - } - - protected static void ImplMulwAcc(ulong x, ulong y, ulong[] z, int zOff) - { - Debug.Assert(x >> 60 == 0); - Debug.Assert(y >> 60 == 0); - - ulong[] u = new ulong[8]; - //u[0] = 0; - u[1] = y; - u[2] = u[1] << 1; - u[3] = u[2] ^ y; - u[4] = u[2] << 1; - u[5] = u[4] ^ y; - u[6] = u[3] << 1; - u[7] = u[6] ^ y; - - uint j = (uint)x; - ulong g, h = 0, l = u[j & 7] - ^ (u[(j >> 3) & 7] << 3); - int k = 54; - do - { - j = (uint)(x >> k); - g = u[j & 7] - ^ u[(j >> 3) & 7] << 3; - l ^= (g << k); - h ^= (g >> -k); - } - while ((k -= 6) > 0); - - h ^= ((x & 0x0820820820820820L) & (ulong)(((long)y << 4) >> 63)) >> 5; - - Debug.Assert(h >> 55 == 0); - - z[zOff ] ^= l & M60; - z[zOff + 1] ^= (l >> 60) ^ (h << 4); - } - - protected static void ImplSquare(ulong[] x, ulong[] zz) - { - Interleave.Expand64To128(x[0], zz, 0); - Interleave.Expand64To128(x[1], zz, 2); - Interleave.Expand64To128(x[2], zz, 4); - - ulong x3 = x[3]; - zz[6] = Interleave.Expand32to64((uint)x3); - zz[7] = Interleave.Expand16to32((uint)(x3 >> 32)); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT239FieldElement.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT239FieldElement.cs deleted file mode 100644 index a32ffc5..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT239FieldElement.cs +++ /dev/null @@ -1,216 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT239FieldElement - : ECFieldElement - { - protected ulong[] x; - - public SecT239FieldElement(BigInteger x) - { - if (x == null || x.SignValue < 0 || x.BitLength > 239) - throw new ArgumentException("value invalid for SecT239FieldElement", "x"); - - this.x = SecT239Field.FromBigInteger(x); - } - - public SecT239FieldElement() - { - this.x = Nat256.Create64(); - } - - protected internal SecT239FieldElement(ulong[] x) - { - this.x = x; - } - - public override bool IsOne - { - get { return Nat256.IsOne64(x); } - } - - public override bool IsZero - { - get { return Nat256.IsZero64(x); } - } - - public override bool TestBitZero() - { - return (x[0] & 1L) != 0L; - } - - public override BigInteger ToBigInteger() - { - return Nat256.ToBigInteger64(x); - } - - public override string FieldName - { - get { return "SecT239Field"; } - } - - public override int FieldSize - { - get { return 239; } - } - - public override ECFieldElement Add(ECFieldElement b) - { - ulong[] z = Nat256.Create64(); - SecT239Field.Add(x, ((SecT239FieldElement)b).x, z); - return new SecT239FieldElement(z); - } - - public override ECFieldElement AddOne() - { - ulong[] z = Nat256.Create64(); - SecT239Field.AddOne(x, z); - return new SecT239FieldElement(z); - } - - public override ECFieldElement Subtract(ECFieldElement b) - { - // Addition and Subtraction are the same in F2m - return Add(b); - } - - public override ECFieldElement Multiply(ECFieldElement b) - { - ulong[] z = Nat256.Create64(); - SecT239Field.Multiply(x, ((SecT239FieldElement)b).x, z); - return new SecT239FieldElement(z); - } - - public override ECFieldElement MultiplyMinusProduct(ECFieldElement b, ECFieldElement x, ECFieldElement y) - { - return MultiplyPlusProduct(b, x, y); - } - - public override ECFieldElement MultiplyPlusProduct(ECFieldElement b, ECFieldElement x, ECFieldElement y) - { - ulong[] ax = this.x, bx = ((SecT239FieldElement)b).x; - ulong[] xx = ((SecT239FieldElement)x).x, yx = ((SecT239FieldElement)y).x; - - ulong[] tt = Nat256.CreateExt64(); - SecT239Field.MultiplyAddToExt(ax, bx, tt); - SecT239Field.MultiplyAddToExt(xx, yx, tt); - - ulong[] z = Nat256.Create64(); - SecT239Field.Reduce(tt, z); - return new SecT239FieldElement(z); - } - - public override ECFieldElement Divide(ECFieldElement b) - { - return Multiply(b.Invert()); - } - - public override ECFieldElement Negate() - { - return this; - } - - public override ECFieldElement Square() - { - ulong[] z = Nat256.Create64(); - SecT239Field.Square(x, z); - return new SecT239FieldElement(z); - } - - public override ECFieldElement SquareMinusProduct(ECFieldElement x, ECFieldElement y) - { - return SquarePlusProduct(x, y); - } - - public override ECFieldElement SquarePlusProduct(ECFieldElement x, ECFieldElement y) - { - ulong[] ax = this.x; - ulong[] xx = ((SecT239FieldElement)x).x, yx = ((SecT239FieldElement)y).x; - - ulong[] tt = Nat256.CreateExt64(); - SecT239Field.SquareAddToExt(ax, tt); - SecT239Field.MultiplyAddToExt(xx, yx, tt); - - ulong[] z = Nat256.Create64(); - SecT239Field.Reduce(tt, z); - return new SecT239FieldElement(z); - } - - public override ECFieldElement SquarePow(int pow) - { - if (pow < 1) - return this; - - ulong[] z = Nat256.Create64(); - SecT239Field.SquareN(x, pow, z); - return new SecT239FieldElement(z); - } - - public override ECFieldElement Invert() - { - ulong[] z = Nat256.Create64(); - SecT239Field.Invert(x, z); - return new SecT239FieldElement(z); - } - - public override ECFieldElement Sqrt() - { - ulong[] z = Nat256.Create64(); - SecT239Field.Sqrt(x, z); - return new SecT239FieldElement(z); - } - - public virtual int Representation - { - get { return F2mFieldElement.Tpb; } - } - - public virtual int M - { - get { return 239; } - } - - public virtual int K1 - { - get { return 158; } - } - - public virtual int K2 - { - get { return 0; } - } - - public virtual int K3 - { - get { return 0; } - } - - public override bool Equals(object obj) - { - return Equals(obj as SecT239FieldElement); - } - - public override bool Equals(ECFieldElement other) - { - return Equals(other as SecT239FieldElement); - } - - public virtual bool Equals(SecT239FieldElement other) - { - if (this == other) - return true; - if (null == other) - return false; - return Nat256.Eq64(x, other.x); - } - - public override int GetHashCode() - { - return 23900158 ^ Arrays.GetHashCode(x, 0, 4); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT239K1Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT239K1Curve.cs deleted file mode 100644 index a499d48..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT239K1Curve.cs +++ /dev/null @@ -1,104 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.EC.Multiplier; -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT239K1Curve - : AbstractF2mCurve - { - private const int SecT239K1_DEFAULT_COORDS = COORD_LAMBDA_PROJECTIVE; - - protected readonly SecT239K1Point m_infinity; - - public SecT239K1Curve() - : base(239, 158, 0, 0) - { - this.m_infinity = new SecT239K1Point(this, null, null); - - this.m_a = FromBigInteger(BigInteger.Zero); - this.m_b = FromBigInteger(BigInteger.One); - this.m_order = new BigInteger(1, Hex.Decode("2000000000000000000000000000005A79FEC67CB6E91F1C1DA800E478A5")); - this.m_cofactor = BigInteger.ValueOf(4); - - this.m_coord = SecT239K1_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecT239K1Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_LAMBDA_PROJECTIVE: - return true; - default: - return false; - } - } - - protected override ECMultiplier CreateDefaultMultiplier() - { - return new WTauNafMultiplier(); - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return 239; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecT239FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecT239K1Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecT239K1Point(this, x, y, zs, withCompression); - } - - public override bool IsKoblitz - { - get { return true; } - } - - public virtual int M - { - get { return 239; } - } - - public virtual bool IsTrinomial - { - get { return true; } - } - - public virtual int K1 - { - get { return 158; } - } - - public virtual int K2 - { - get { return 0; } - } - - public virtual int K3 - { - get { return 0; } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT239K1Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT239K1Point.cs deleted file mode 100644 index fbd5117..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT239K1Point.cs +++ /dev/null @@ -1,290 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT239K1Point - : AbstractF2mPoint - { - /** - * @deprecated Use ECCurve.createPoint to construct points - */ - public SecT239K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * @deprecated per-point compression property will be removed, refer {@link #getEncoded(bool)} - */ - public SecT239K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecT239K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecT239K1Point(null, this.AffineXCoord, this.AffineYCoord); // earlier JDK - } - - public override ECFieldElement YCoord - { - get - { - ECFieldElement X = RawXCoord, L = RawYCoord; - - if (this.IsInfinity || X.IsZero) - return L; - - // Y is actually Lambda (X + Y/X) here; convert to affine value on the fly - ECFieldElement Y = L.Add(X).Multiply(X); - - ECFieldElement Z = RawZCoords[0]; - if (!Z.IsOne) - { - Y = Y.Divide(Z); - } - - return Y; - } - } - - protected internal override bool CompressionYTilde - { - get - { - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return false; - - ECFieldElement Y = this.RawYCoord; - - // Y is actually Lambda (X + Y/X) here - return Y.TestBitZero() != X.TestBitZero(); - } - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - ECFieldElement X2 = b.RawXCoord; - - if (X1.IsZero) - { - if (X2.IsZero) - return curve.Infinity; - - return b.Add(this); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord, Z2 = b.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement U2 = X2, S2 = L2; - if (!Z1IsOne) - { - U2 = U2.Multiply(Z1); - S2 = S2.Multiply(Z1); - } - - bool Z2IsOne = Z2.IsOne; - ECFieldElement U1 = X1, S1 = L1; - if (!Z2IsOne) - { - U1 = U1.Multiply(Z2); - S1 = S1.Multiply(Z2); - } - - ECFieldElement A = S1.Add(S2); - ECFieldElement B = U1.Add(U2); - - if (B.IsZero) - { - if (A.IsZero) - return Twice(); - - return curve.Infinity; - } - - ECFieldElement X3, L3, Z3; - if (X2.IsZero) - { - // TODO This can probably be optimized quite a bit - ECPoint p = this.Normalize(); - X1 = p.XCoord; - ECFieldElement Y1 = p.YCoord; - - ECFieldElement Y2 = L2; - ECFieldElement L = Y1.Add(Y2).Divide(X1); - - X3 = L.Square().Add(L).Add(X1); - if (X3.IsZero) - { - return new SecT239K1Point(curve, X3, curve.B, IsCompressed); - } - - ECFieldElement Y3 = L.Multiply(X1.Add(X3)).Add(X3).Add(Y1); - L3 = Y3.Divide(X3).Add(X3); - Z3 = curve.FromBigInteger(BigInteger.One); - } - else - { - B = B.Square(); - - ECFieldElement AU1 = A.Multiply(U1); - ECFieldElement AU2 = A.Multiply(U2); - - X3 = AU1.Multiply(AU2); - if (X3.IsZero) - { - return new SecT239K1Point(curve, X3, curve.B, IsCompressed); - } - - ECFieldElement ABZ2 = A.Multiply(B); - if (!Z2IsOne) - { - ABZ2 = ABZ2.Multiply(Z2); - } - - L3 = AU2.Add(B).SquarePlusProduct(ABZ2, L1.Add(Z1)); - - Z3 = ABZ2; - if (!Z1IsOne) - { - Z3 = Z3.Multiply(Z1); - } - } - - return new SecT239K1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return curve.Infinity; - } - - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement Z1Sq = Z1IsOne ? Z1 : Z1.Square(); - ECFieldElement T; - if (Z1IsOne) - { - T = L1.Square().Add(L1); - } - else - { - T = L1.Add(Z1).Multiply(L1); - } - - if (T.IsZero) - { - return new SecT239K1Point(curve, T, curve.B, IsCompressed); - } - - ECFieldElement X3 = T.Square(); - ECFieldElement Z3 = Z1IsOne ? T : T.Multiply(Z1Sq); - - ECFieldElement t1 = L1.Add(X1).Square(); - ECFieldElement t2 = Z1IsOne ? Z1 : Z1Sq.Square(); - ECFieldElement L3 = t1.Add(T).Add(Z1Sq).Multiply(t1).Add(t2).Add(X3).Add(Z3); - - return new SecT239K1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return b; - } - - // NOTE: TwicePlus() only optimized for lambda-affine argument - ECFieldElement X2 = b.RawXCoord, Z2 = b.RawZCoords[0]; - if (X2.IsZero || !Z2.IsOne) - { - return Twice().Add(b); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord; - - ECFieldElement X1Sq = X1.Square(); - ECFieldElement L1Sq = L1.Square(); - ECFieldElement Z1Sq = Z1.Square(); - ECFieldElement L1Z1 = L1.Multiply(Z1); - - ECFieldElement T = L1Sq.Add(L1Z1); - ECFieldElement L2plus1 = L2.AddOne(); - ECFieldElement A = L2plus1.Multiply(Z1Sq).Add(L1Sq).MultiplyPlusProduct(T, X1Sq, Z1Sq); - ECFieldElement X2Z1Sq = X2.Multiply(Z1Sq); - ECFieldElement B = X2Z1Sq.Add(T).Square(); - - if (B.IsZero) - { - if (A.IsZero) - return b.Twice(); - - return curve.Infinity; - } - - if (A.IsZero) - { - return new SecT239K1Point(curve, A, curve.B, IsCompressed); - } - - ECFieldElement X3 = A.Square().Multiply(X2Z1Sq); - ECFieldElement Z3 = A.Multiply(B).Multiply(Z1Sq); - ECFieldElement L3 = A.Add(B).Square().MultiplyPlusProduct(T, L2plus1, Z3); - - return new SecT239K1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Negate() - { - if (this.IsInfinity) - return this; - - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return this; - - // L is actually Lambda (X + Y/X) here - ECFieldElement L = this.RawYCoord, Z = this.RawZCoords[0]; - return new SecT239K1Point(Curve, X, L.Add(Z), new ECFieldElement[] { Z }, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT283Field.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT283Field.cs deleted file mode 100644 index 22b7eaa..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT283Field.cs +++ /dev/null @@ -1,402 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT283Field - { - private const ulong M27 = ulong.MaxValue >> 37; - private const ulong M57 = ulong.MaxValue >> 7; - - private static readonly ulong[] ROOT_Z = new ulong[]{ 0x0C30C30C30C30808UL, 0x30C30C30C30C30C3UL, 0x820820820820830CUL, 0x0820820820820820UL, 0x2082082UL }; - - public static void Add(ulong[] x, ulong[] y, ulong[] z) - { - z[0] = x[0] ^ y[0]; - z[1] = x[1] ^ y[1]; - z[2] = x[2] ^ y[2]; - z[3] = x[3] ^ y[3]; - z[4] = x[4] ^ y[4]; - } - - public static void AddExt(ulong[] xx, ulong[] yy, ulong[] zz) - { - zz[0] = xx[0] ^ yy[0]; - zz[1] = xx[1] ^ yy[1]; - zz[2] = xx[2] ^ yy[2]; - zz[3] = xx[3] ^ yy[3]; - zz[4] = xx[4] ^ yy[4]; - zz[5] = xx[5] ^ yy[5]; - zz[6] = xx[6] ^ yy[6]; - zz[7] = xx[7] ^ yy[7]; - zz[8] = xx[8] ^ yy[8]; - } - - public static void AddOne(ulong[] x, ulong[] z) - { - z[0] = x[0] ^ 1UL; - z[1] = x[1]; - z[2] = x[2]; - z[3] = x[3]; - z[4] = x[4]; - } - - public static ulong[] FromBigInteger(BigInteger x) - { - ulong[] z = Nat320.FromBigInteger64(x); - Reduce37(z, 0); - return z; - } - - public static void Invert(ulong[] x, ulong[] z) - { - if (Nat320.IsZero64(x)) - throw new InvalidOperationException(); - - // Itoh-Tsujii inversion - - ulong[] t0 = Nat320.Create64(); - ulong[] t1 = Nat320.Create64(); - - Square(x, t0); - Multiply(t0, x, t0); - SquareN(t0, 2, t1); - Multiply(t1, t0, t1); - SquareN(t1, 4, t0); - Multiply(t0, t1, t0); - SquareN(t0, 8, t1); - Multiply(t1, t0, t1); - Square(t1, t1); - Multiply(t1, x, t1); - SquareN(t1, 17, t0); - Multiply(t0, t1, t0); - Square(t0, t0); - Multiply(t0, x, t0); - SquareN(t0, 35, t1); - Multiply(t1, t0, t1); - SquareN(t1, 70, t0); - Multiply(t0, t1, t0); - Square(t0, t0); - Multiply(t0, x, t0); - SquareN(t0, 141, t1); - Multiply(t1, t0, t1); - Square(t1, z); - } - - public static void Multiply(ulong[] x, ulong[] y, ulong[] z) - { - ulong[] tt = Nat320.CreateExt64(); - ImplMultiply(x, y, tt); - Reduce(tt, z); - } - - public static void MultiplyAddToExt(ulong[] x, ulong[] y, ulong[] zz) - { - ulong[] tt = Nat320.CreateExt64(); - ImplMultiply(x, y, tt); - AddExt(zz, tt, zz); - } - - public static void Reduce(ulong[] xx, ulong[] z) - { - ulong x0 = xx[0], x1 = xx[1], x2 = xx[2], x3 = xx[3], x4 = xx[4]; - ulong x5 = xx[5], x6 = xx[6], x7 = xx[7], x8 = xx[8]; - - x3 ^= (x8 << 37) ^ (x8 << 42) ^ (x8 << 44) ^ (x8 << 49); - x4 ^= (x8 >> 27) ^ (x8 >> 22) ^ (x8 >> 20) ^ (x8 >> 15); - - x2 ^= (x7 << 37) ^ (x7 << 42) ^ (x7 << 44) ^ (x7 << 49); - x3 ^= (x7 >> 27) ^ (x7 >> 22) ^ (x7 >> 20) ^ (x7 >> 15); - - x1 ^= (x6 << 37) ^ (x6 << 42) ^ (x6 << 44) ^ (x6 << 49); - x2 ^= (x6 >> 27) ^ (x6 >> 22) ^ (x6 >> 20) ^ (x6 >> 15); - - x0 ^= (x5 << 37) ^ (x5 << 42) ^ (x5 << 44) ^ (x5 << 49); - x1 ^= (x5 >> 27) ^ (x5 >> 22) ^ (x5 >> 20) ^ (x5 >> 15); - - ulong t = x4 >> 27; - z[0] = x0 ^ t ^ (t << 5) ^ (t << 7) ^ (t << 12); - z[1] = x1; - z[2] = x2; - z[3] = x3; - z[4] = x4 & M27; - } - - public static void Reduce37(ulong[] z, int zOff) - { - ulong z4 = z[zOff + 4], t = z4 >> 27; - z[zOff ] ^= t ^ (t << 5) ^ (t << 7) ^ (t << 12); - z[zOff + 4] = z4 & M27; - } - - public static void Sqrt(ulong[] x, ulong[] z) - { - ulong[] odd = Nat320.Create64(); - - ulong u0, u1; - u0 = Interleave.Unshuffle(x[0]); u1 = Interleave.Unshuffle(x[1]); - ulong e0 = (u0 & 0x00000000FFFFFFFFUL) | (u1 << 32); - odd[0] = (u0 >> 32) | (u1 & 0xFFFFFFFF00000000UL); - - u0 = Interleave.Unshuffle(x[2]); u1 = Interleave.Unshuffle(x[3]); - ulong e1 = (u0 & 0x00000000FFFFFFFFUL) | (u1 << 32); - odd[1] = (u0 >> 32) | (u1 & 0xFFFFFFFF00000000UL); - - u0 = Interleave.Unshuffle(x[4]); - ulong e2 = (u0 & 0x00000000FFFFFFFFUL); - odd[2] = (u0 >> 32); - - Multiply(odd, ROOT_Z, z); - - z[0] ^= e0; - z[1] ^= e1; - z[2] ^= e2; - } - - public static void Square(ulong[] x, ulong[] z) - { - ulong[] tt = Nat.Create64(9); - ImplSquare(x, tt); - Reduce(tt, z); - } - - public static void SquareAddToExt(ulong[] x, ulong[] zz) - { - ulong[] tt = Nat.Create64(9); - ImplSquare(x, tt); - AddExt(zz, tt, zz); - } - - public static void SquareN(ulong[] x, int n, ulong[] z) - { - Debug.Assert(n > 0); - - ulong[] tt = Nat.Create64(9); - ImplSquare(x, tt); - Reduce(tt, z); - - while (--n > 0) - { - ImplSquare(z, tt); - Reduce(tt, z); - } - } - - public static uint Trace(ulong[] x) - { - // Non-zero-trace bits: 0, 271 - return (uint)(x[0] ^ (x[4] >> 15)) & 1U; - } - - protected static void ImplCompactExt(ulong[] zz) - { - ulong z0 = zz[0], z1 = zz[1], z2 = zz[2], z3 = zz[3], z4 = zz[4]; - ulong z5 = zz[5], z6 = zz[6], z7 = zz[7], z8 = zz[8], z9 = zz[9]; - zz[0] = z0 ^ (z1 << 57); - zz[1] = (z1 >> 7) ^ (z2 << 50); - zz[2] = (z2 >> 14) ^ (z3 << 43); - zz[3] = (z3 >> 21) ^ (z4 << 36); - zz[4] = (z4 >> 28) ^ (z5 << 29); - zz[5] = (z5 >> 35) ^ (z6 << 22); - zz[6] = (z6 >> 42) ^ (z7 << 15); - zz[7] = (z7 >> 49) ^ (z8 << 8); - zz[8] = (z8 >> 56) ^ (z9 << 1); - zz[9] = (z9 >> 63); // Zero! - } - - protected static void ImplExpand(ulong[] x, ulong[] z) - { - ulong x0 = x[0], x1 = x[1], x2 = x[2], x3 = x[3], x4 = x[4]; - z[0] = x0 & M57; - z[1] = ((x0 >> 57) ^ (x1 << 7)) & M57; - z[2] = ((x1 >> 50) ^ (x2 << 14)) & M57; - z[3] = ((x2 >> 43) ^ (x3 << 21)) & M57; - z[4] = ((x3 >> 36) ^ (x4 << 28)); - } - - //protected static void AddMs(ulong[] zz, int zOff, ulong[] p, params int[] ms) - //{ - // ulong t0 = 0, t1 = 0; - // foreach (int m in ms) - // { - // int i = (m - 1) << 1; - // t0 ^= p[i ]; - // t1 ^= p[i + 1]; - // } - // zz[zOff ] ^= t0; - // zz[zOff + 1] ^= t1; - //} - - protected static void ImplMultiply(ulong[] x, ulong[] y, ulong[] zz) - { - /* - * Formula (17) from "Some New Results on Binary Polynomial Multiplication", - * Murat Cenk and M. Anwar Hasan. - * - * The formula as given contained an error in the term t25, as noted below - */ - ulong[] a = new ulong[5], b = new ulong[5]; - ImplExpand(x, a); - ImplExpand(y, b); - - ulong[] p = new ulong[26]; - - ImplMulw(a[0], b[0], p, 0); // m1 - ImplMulw(a[1], b[1], p, 2); // m2 - ImplMulw(a[2], b[2], p, 4); // m3 - ImplMulw(a[3], b[3], p, 6); // m4 - ImplMulw(a[4], b[4], p, 8); // m5 - - ulong u0 = a[0] ^ a[1], v0 = b[0] ^ b[1]; - ulong u1 = a[0] ^ a[2], v1 = b[0] ^ b[2]; - ulong u2 = a[2] ^ a[4], v2 = b[2] ^ b[4]; - ulong u3 = a[3] ^ a[4], v3 = b[3] ^ b[4]; - - ImplMulw(u1 ^ a[3], v1 ^ b[3], p, 18); // m10 - ImplMulw(u2 ^ a[1], v2 ^ b[1], p, 20); // m11 - - ulong A4 = u0 ^ u3 , B4 = v0 ^ v3; - ulong A5 = A4 ^ a[2], B5 = B4 ^ b[2]; - - ImplMulw(A4, B4, p, 22); // m12 - ImplMulw(A5, B5, p, 24); // m13 - - ImplMulw(u0, v0, p, 10); // m6 - ImplMulw(u1, v1, p, 12); // m7 - ImplMulw(u2, v2, p, 14); // m8 - ImplMulw(u3, v3, p, 16); // m9 - - - // Original method, corresponding to formula (16) - //AddMs(zz, 0, p, 1); - //AddMs(zz, 1, p, 1, 2, 6); - //AddMs(zz, 2, p, 1, 2, 3, 7); - //AddMs(zz, 3, p, 1, 3, 4, 5, 8, 10, 12, 13); - //AddMs(zz, 4, p, 1, 2, 4, 5, 6, 9, 10, 11, 13); - //AddMs(zz, 5, p, 1, 2, 3, 5, 7, 11, 12, 13); - //AddMs(zz, 6, p, 3, 4, 5, 8); - //AddMs(zz, 7, p, 4, 5, 9); - //AddMs(zz, 8, p, 5); - - // Improved method factors out common single-word terms - // NOTE: p1,...,p26 in the paper maps to p[0],...,p[25] here - - zz[0] = p[ 0]; - zz[9] = p[ 9]; - - ulong t1 = p[ 0] ^ p[ 1]; - ulong t2 = t1 ^ p[ 2]; - ulong t3 = t2 ^ p[10]; - - zz[1] = t3; - - ulong t4 = p[ 3] ^ p[ 4]; - ulong t5 = p[11] ^ p[12]; - ulong t6 = t4 ^ t5; - ulong t7 = t2 ^ t6; - - zz[2] = t7; - - ulong t8 = t1 ^ t4; - ulong t9 = p[ 5] ^ p[ 6]; - ulong t10 = t8 ^ t9; - ulong t11 = t10 ^ p[ 8]; - ulong t12 = p[13] ^ p[14]; - ulong t13 = t11 ^ t12; - ulong t14 = p[18] ^ p[22]; - ulong t15 = t14 ^ p[24]; - ulong t16 = t13 ^ t15; - - zz[3] = t16; - - ulong t17 = p[ 7] ^ p[ 8]; - ulong t18 = t17 ^ p[ 9]; - ulong t19 = t18 ^ p[17]; - - zz[8] = t19; - - ulong t20 = t18 ^ t9; - ulong t21 = p[15] ^ p[16]; - ulong t22 = t20 ^ t21; - - zz[7] = t22; - - ulong t23 = t22 ^ t3; - ulong t24 = p[19] ^ p[20]; - // ulong t25 = p[23] ^ p[24]; - ulong t25 = p[25] ^ p[24]; // Fixes an error in the paper: p[23] -> p{25] - ulong t26 = p[18] ^ p[23]; - ulong t27 = t24 ^ t25; - ulong t28 = t27 ^ t26; - ulong t29 = t28 ^ t23; - - zz[4] = t29; - - ulong t30 = t7 ^ t19; - ulong t31 = t27 ^ t30; - ulong t32 = p[21] ^ p[22]; - ulong t33 = t31 ^ t32; - - zz[5] = t33; - - ulong t34 = t11 ^ p[0]; - ulong t35 = t34 ^ p[9]; - ulong t36 = t35 ^ t12; - ulong t37 = t36 ^ p[21]; - ulong t38 = t37 ^ p[23]; - ulong t39 = t38 ^ p[25]; - - zz[6] = t39; - - ImplCompactExt(zz); - } - - protected static void ImplMulw(ulong x, ulong y, ulong[] z, int zOff) - { - Debug.Assert(x >> 57 == 0); - Debug.Assert(y >> 57 == 0); - - ulong[] u = new ulong[8]; - //u[0] = 0; - u[1] = y; - u[2] = u[1] << 1; - u[3] = u[2] ^ y; - u[4] = u[2] << 1; - u[5] = u[4] ^ y; - u[6] = u[3] << 1; - u[7] = u[6] ^ y; - - uint j = (uint)x; - ulong g, h = 0, l = u[j & 7]; - int k = 48; - do - { - j = (uint)(x >> k); - g = u[j & 7] - ^ u[(j >> 3) & 7] << 3 - ^ u[(j >> 6) & 7] << 6; - l ^= (g << k); - h ^= (g >> -k); - } - while ((k -= 9) > 0); - - h ^= ((x & 0x0100804020100800L) & (ulong)(((long)y << 7) >> 63)) >> 8; - - Debug.Assert(h >> 49 == 0); - - z[zOff ] = l & M57; - z[zOff + 1] = (l >> 57) ^ (h << 7); - } - - protected static void ImplSquare(ulong[] x, ulong[] zz) - { - for (int i = 0; i < 4; ++i) - { - Interleave.Expand64To128(x[i], zz, i << 1); - } - zz[8] = Interleave.Expand32to64((uint)x[4]); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT283FieldElement.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT283FieldElement.cs deleted file mode 100644 index adfd4e0..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT283FieldElement.cs +++ /dev/null @@ -1,216 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT283FieldElement - : ECFieldElement - { - protected readonly ulong[] x; - - public SecT283FieldElement(BigInteger x) - { - if (x == null || x.SignValue < 0 || x.BitLength > 283) - throw new ArgumentException("value invalid for SecT283FieldElement", "x"); - - this.x = SecT283Field.FromBigInteger(x); - } - - public SecT283FieldElement() - { - this.x = Nat320.Create64(); - } - - protected internal SecT283FieldElement(ulong[] x) - { - this.x = x; - } - - public override bool IsOne - { - get { return Nat320.IsOne64(x); } - } - - public override bool IsZero - { - get { return Nat320.IsZero64(x); } - } - - public override bool TestBitZero() - { - return (x[0] & 1UL) != 0UL; - } - - public override BigInteger ToBigInteger() - { - return Nat320.ToBigInteger64(x); - } - - public override string FieldName - { - get { return "SecT283Field"; } - } - - public override int FieldSize - { - get { return 283; } - } - - public override ECFieldElement Add(ECFieldElement b) - { - ulong[] z = Nat320.Create64(); - SecT283Field.Add(x, ((SecT283FieldElement)b).x, z); - return new SecT283FieldElement(z); - } - - public override ECFieldElement AddOne() - { - ulong[] z = Nat320.Create64(); - SecT283Field.AddOne(x, z); - return new SecT283FieldElement(z); - } - - public override ECFieldElement Subtract(ECFieldElement b) - { - // Addition and subtraction are the same in F2m - return Add(b); - } - - public override ECFieldElement Multiply(ECFieldElement b) - { - ulong[] z = Nat320.Create64(); - SecT283Field.Multiply(x, ((SecT283FieldElement)b).x, z); - return new SecT283FieldElement(z); - } - - public override ECFieldElement MultiplyMinusProduct(ECFieldElement b, ECFieldElement x, ECFieldElement y) - { - return MultiplyPlusProduct(b, x, y); - } - - public override ECFieldElement MultiplyPlusProduct(ECFieldElement b, ECFieldElement x, ECFieldElement y) - { - ulong[] ax = this.x, bx = ((SecT283FieldElement)b).x; - ulong[] xx = ((SecT283FieldElement)x).x, yx = ((SecT283FieldElement)y).x; - - ulong[] tt = Nat.Create64(9); - SecT283Field.MultiplyAddToExt(ax, bx, tt); - SecT283Field.MultiplyAddToExt(xx, yx, tt); - - ulong[] z = Nat320.Create64(); - SecT283Field.Reduce(tt, z); - return new SecT283FieldElement(z); - } - - public override ECFieldElement Divide(ECFieldElement b) - { - return Multiply(b.Invert()); - } - - public override ECFieldElement Negate() - { - return this; - } - - public override ECFieldElement Square() - { - ulong[] z = Nat320.Create64(); - SecT283Field.Square(x, z); - return new SecT283FieldElement(z); - } - - public override ECFieldElement SquareMinusProduct(ECFieldElement x, ECFieldElement y) - { - return SquarePlusProduct(x, y); - } - - public override ECFieldElement SquarePlusProduct(ECFieldElement x, ECFieldElement y) - { - ulong[] ax = this.x; - ulong[] xx = ((SecT283FieldElement)x).x, yx = ((SecT283FieldElement)y).x; - - ulong[] tt = Nat.Create64(9); - SecT283Field.SquareAddToExt(ax, tt); - SecT283Field.MultiplyAddToExt(xx, yx, tt); - - ulong[] z = Nat320.Create64(); - SecT283Field.Reduce(tt, z); - return new SecT283FieldElement(z); - } - - public override ECFieldElement SquarePow(int pow) - { - if (pow < 1) - return this; - - ulong[] z = Nat320.Create64(); - SecT283Field.SquareN(x, pow, z); - return new SecT283FieldElement(z); - } - - public override ECFieldElement Invert() - { - ulong[] z = Nat320.Create64(); - SecT283Field.Invert(x, z); - return new SecT283FieldElement(z); - } - - public override ECFieldElement Sqrt() - { - ulong[] z = Nat320.Create64(); - SecT283Field.Sqrt(x, z); - return new SecT283FieldElement(z); - } - - public virtual int Representation - { - get { return F2mFieldElement.Ppb; } - } - - public virtual int M - { - get { return 283; } - } - - public virtual int K1 - { - get { return 5; } - } - - public virtual int K2 - { - get { return 7; } - } - - public virtual int K3 - { - get { return 12; } - } - - public override bool Equals(object obj) - { - return Equals(obj as SecT283FieldElement); - } - - public override bool Equals(ECFieldElement other) - { - return Equals(other as SecT283FieldElement); - } - - public virtual bool Equals(SecT283FieldElement other) - { - if (this == other) - return true; - if (null == other) - return false; - return Nat320.Eq64(x, other.x); - } - - public override int GetHashCode() - { - return 2831275 ^ Arrays.GetHashCode(x, 0, 5); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT283K1Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT283K1Curve.cs deleted file mode 100644 index 4053287..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT283K1Curve.cs +++ /dev/null @@ -1,104 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.EC.Multiplier; -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT283K1Curve - : AbstractF2mCurve - { - private const int SecT283K1_DEFAULT_COORDS = COORD_LAMBDA_PROJECTIVE; - - protected readonly SecT283K1Point m_infinity; - - public SecT283K1Curve() - : base(283, 5, 7, 12) - { - this.m_infinity = new SecT283K1Point(this, null, null); - - this.m_a = FromBigInteger(BigInteger.Zero); - this.m_b = FromBigInteger(BigInteger.One); - this.m_order = new BigInteger(1, Hex.Decode("01FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFE9AE2ED07577265DFF7F94451E061E163C61")); - this.m_cofactor = BigInteger.ValueOf(4); - - this.m_coord = SecT283K1_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecT283K1Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_LAMBDA_PROJECTIVE: - return true; - default: - return false; - } - } - - protected override ECMultiplier CreateDefaultMultiplier() - { - return new WTauNafMultiplier(); - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return 283; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecT283FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecT283K1Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecT283K1Point(this, x, y, zs, withCompression); - } - - public override bool IsKoblitz - { - get { return true; } - } - - public virtual int M - { - get { return 283; } - } - - public virtual bool IsTrinomial - { - get { return false; } - } - - public virtual int K1 - { - get { return 5; } - } - - public virtual int K2 - { - get { return 7; } - } - - public virtual int K3 - { - get { return 12; } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT283K1Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT283K1Point.cs deleted file mode 100644 index 9856894..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT283K1Point.cs +++ /dev/null @@ -1,289 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT283K1Point - : AbstractF2mPoint - { - /** - * @deprecated Use ECCurve.createPoint to construct points - */ - public SecT283K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * @deprecated per-point compression property will be removed, refer {@link #getEncoded(bool)} - */ - public SecT283K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecT283K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecT283K1Point(null, this.AffineXCoord, this.AffineYCoord); // earlier JDK - } - - public override ECFieldElement YCoord - { - get - { - ECFieldElement X = RawXCoord, L = RawYCoord; - - if (this.IsInfinity || X.IsZero) - return L; - - // Y is actually Lambda (X + Y/X) here; convert to affine value on the fly - ECFieldElement Y = L.Add(X).Multiply(X); - - ECFieldElement Z = RawZCoords[0]; - if (!Z.IsOne) - { - Y = Y.Divide(Z); - } - - return Y; - } - } - - protected internal override bool CompressionYTilde - { - get - { - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return false; - - ECFieldElement Y = this.RawYCoord; - - // Y is actually Lambda (X + Y/X) here - return Y.TestBitZero() != X.TestBitZero(); - } - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - ECFieldElement X2 = b.RawXCoord; - - if (X1.IsZero) - { - if (X2.IsZero) - return curve.Infinity; - - return b.Add(this); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord, Z2 = b.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement U2 = X2, S2 = L2; - if (!Z1IsOne) - { - U2 = U2.Multiply(Z1); - S2 = S2.Multiply(Z1); - } - - bool Z2IsOne = Z2.IsOne; - ECFieldElement U1 = X1, S1 = L1; - if (!Z2IsOne) - { - U1 = U1.Multiply(Z2); - S1 = S1.Multiply(Z2); - } - - ECFieldElement A = S1.Add(S2); - ECFieldElement B = U1.Add(U2); - - if (B.IsZero) - { - if (A.IsZero) - return Twice(); - - return curve.Infinity; - } - - ECFieldElement X3, L3, Z3; - if (X2.IsZero) - { - // TODO This can probably be optimized quite a bit - ECPoint p = this.Normalize(); - X1 = p.XCoord; - ECFieldElement Y1 = p.YCoord; - - ECFieldElement Y2 = L2; - ECFieldElement L = Y1.Add(Y2).Divide(X1); - - X3 = L.Square().Add(L).Add(X1); - if (X3.IsZero) - { - return new SecT283K1Point(curve, X3, curve.B, IsCompressed); - } - - ECFieldElement Y3 = L.Multiply(X1.Add(X3)).Add(X3).Add(Y1); - L3 = Y3.Divide(X3).Add(X3); - Z3 = curve.FromBigInteger(BigInteger.One); - } - else - { - B = B.Square(); - - ECFieldElement AU1 = A.Multiply(U1); - ECFieldElement AU2 = A.Multiply(U2); - - X3 = AU1.Multiply(AU2); - if (X3.IsZero) - { - return new SecT283K1Point(curve, X3, curve.B, IsCompressed); - } - - ECFieldElement ABZ2 = A.Multiply(B); - if (!Z2IsOne) - { - ABZ2 = ABZ2.Multiply(Z2); - } - - L3 = AU2.Add(B).SquarePlusProduct(ABZ2, L1.Add(Z1)); - - Z3 = ABZ2; - if (!Z1IsOne) - { - Z3 = Z3.Multiply(Z1); - } - } - - return new SecT283K1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return curve.Infinity; - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement Z1Sq = Z1IsOne ? Z1 : Z1.Square(); - ECFieldElement T; - if (Z1IsOne) - { - T = L1.Square().Add(L1); - } - else - { - T = L1.Add(Z1).Multiply(L1); - } - - if (T.IsZero) - { - return new SecT283K1Point(curve, T, curve.B, IsCompressed); - } - - ECFieldElement X3 = T.Square(); - ECFieldElement Z3 = Z1IsOne ? T : T.Multiply(Z1Sq); - - ECFieldElement t1 = L1.Add(X1).Square(); - ECFieldElement t2 = Z1IsOne ? Z1 : Z1Sq.Square(); - ECFieldElement L3 = t1.Add(T).Add(Z1Sq).Multiply(t1).Add(t2).Add(X3).Add(Z3); - - return new SecT283K1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return b; - } - - // NOTE: TwicePlus() only optimized for lambda-affine argument - ECFieldElement X2 = b.RawXCoord, Z2 = b.RawZCoords[0]; - if (X2.IsZero || !Z2.IsOne) - { - return Twice().Add(b); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord; - - ECFieldElement X1Sq = X1.Square(); - ECFieldElement L1Sq = L1.Square(); - ECFieldElement Z1Sq = Z1.Square(); - ECFieldElement L1Z1 = L1.Multiply(Z1); - - ECFieldElement T = L1Sq.Add(L1Z1); - ECFieldElement L2plus1 = L2.AddOne(); - ECFieldElement A = L2plus1.Multiply(Z1Sq).Add(L1Sq).MultiplyPlusProduct(T, X1Sq, Z1Sq); - ECFieldElement X2Z1Sq = X2.Multiply(Z1Sq); - ECFieldElement B = X2Z1Sq.Add(T).Square(); - - if (B.IsZero) - { - if (A.IsZero) - return b.Twice(); - - return curve.Infinity; - } - - if (A.IsZero) - { - return new SecT283K1Point(curve, A, curve.B, IsCompressed); - } - - ECFieldElement X3 = A.Square().Multiply(X2Z1Sq); - ECFieldElement Z3 = A.Multiply(B).Multiply(Z1Sq); - ECFieldElement L3 = A.Add(B).Square().MultiplyPlusProduct(T, L2plus1, Z3); - - return new SecT283K1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Negate() - { - if (this.IsInfinity) - return this; - - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return this; - - // L is actually Lambda (X + Y/X) here - ECFieldElement L = this.RawYCoord, Z = this.RawZCoords[0]; - return new SecT283K1Point(Curve, X, L.Add(Z), new ECFieldElement[] { Z }, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT283R1Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT283R1Curve.cs deleted file mode 100644 index e659675..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT283R1Curve.cs +++ /dev/null @@ -1,98 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT283R1Curve - : AbstractF2mCurve - { - private const int SecT283R1_DEFAULT_COORDS = COORD_LAMBDA_PROJECTIVE; - - protected readonly SecT283R1Point m_infinity; - - public SecT283R1Curve() - : base(283, 5, 7, 12) - { - this.m_infinity = new SecT283R1Point(this, null, null); - - this.m_a = FromBigInteger(BigInteger.One); - this.m_b = FromBigInteger(new BigInteger(1, Hex.Decode("027B680AC8B8596DA5A4AF8A19A0303FCA97FD7645309FA2A581485AF6263E313B79A2F5"))); - this.m_order = new BigInteger(1, Hex.Decode("03FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEF90399660FC938A90165B042A7CEFADB307")); - this.m_cofactor = BigInteger.Two; - - this.m_coord = SecT283R1_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecT283R1Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_LAMBDA_PROJECTIVE: - return true; - default: - return false; - } - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return 283; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecT283FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecT283R1Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecT283R1Point(this, x, y, zs, withCompression); - } - - public override bool IsKoblitz - { - get { return false; } - } - - public virtual int M - { - get { return 283; } - } - - public virtual bool IsTrinomial - { - get { return false; } - } - - public virtual int K1 - { - get { return 5; } - } - - public virtual int K2 - { - get { return 7; } - } - - public virtual int K3 - { - get { return 12; } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT283R1Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT283R1Point.cs deleted file mode 100644 index 4c1a780..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT283R1Point.cs +++ /dev/null @@ -1,278 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT283R1Point - : AbstractF2mPoint - { - /** - * @deprecated Use ECCurve.createPoint to construct points - */ - public SecT283R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * @deprecated per-point compression property will be removed, refer {@link #getEncoded(bool)} - */ - public SecT283R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecT283R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecT283R1Point(null, AffineXCoord, AffineYCoord); - } - - public override ECFieldElement YCoord - { - get - { - ECFieldElement X = RawXCoord, L = RawYCoord; - - if (this.IsInfinity || X.IsZero) - return L; - - // Y is actually Lambda (X + Y/X) here; convert to affine value on the fly - ECFieldElement Y = L.Add(X).Multiply(X); - - ECFieldElement Z = RawZCoords[0]; - if (!Z.IsOne) - { - Y = Y.Divide(Z); - } - - return Y; - } - } - - protected internal override bool CompressionYTilde - { - get - { - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return false; - - ECFieldElement Y = this.RawYCoord; - - // Y is actually Lambda (X + Y/X) here - return Y.TestBitZero() != X.TestBitZero(); - } - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - ECFieldElement X2 = b.RawXCoord; - - if (X1.IsZero) - { - if (X2.IsZero) - return curve.Infinity; - - return b.Add(this); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord, Z2 = b.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement U2 = X2, S2 = L2; - if (!Z1IsOne) - { - U2 = U2.Multiply(Z1); - S2 = S2.Multiply(Z1); - } - - bool Z2IsOne = Z2.IsOne; - ECFieldElement U1 = X1, S1 = L1; - if (!Z2IsOne) - { - U1 = U1.Multiply(Z2); - S1 = S1.Multiply(Z2); - } - - ECFieldElement A = S1.Add(S2); - ECFieldElement B = U1.Add(U2); - - if (B.IsZero) - { - if (A.IsZero) - return Twice(); - - return curve.Infinity; - } - - ECFieldElement X3, L3, Z3; - if (X2.IsZero) - { - // TODO This can probably be optimized quite a bit - ECPoint p = this.Normalize(); - X1 = p.XCoord; - ECFieldElement Y1 = p.YCoord; - - ECFieldElement Y2 = L2; - ECFieldElement L = Y1.Add(Y2).Divide(X1); - - X3 = L.Square().Add(L).Add(X1).AddOne(); - if (X3.IsZero) - { - return new SecT283R1Point(curve, X3, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement Y3 = L.Multiply(X1.Add(X3)).Add(X3).Add(Y1); - L3 = Y3.Divide(X3).Add(X3); - Z3 = curve.FromBigInteger(BigInteger.One); - } - else - { - B = B.Square(); - - ECFieldElement AU1 = A.Multiply(U1); - ECFieldElement AU2 = A.Multiply(U2); - - X3 = AU1.Multiply(AU2); - if (X3.IsZero) - { - return new SecT283R1Point(curve, X3, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement ABZ2 = A.Multiply(B); - if (!Z2IsOne) - { - ABZ2 = ABZ2.Multiply(Z2); - } - - L3 = AU2.Add(B).SquarePlusProduct(ABZ2, L1.Add(Z1)); - - Z3 = ABZ2; - if (!Z1IsOne) - { - Z3 = Z3.Multiply(Z1); - } - } - - return new SecT283R1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return curve.Infinity; - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement L1Z1 = Z1IsOne ? L1 : L1.Multiply(Z1); - ECFieldElement Z1Sq = Z1IsOne ? Z1 : Z1.Square(); - ECFieldElement T = L1.Square().Add(L1Z1).Add(Z1Sq); - if (T.IsZero) - { - return new SecT283R1Point(curve, T, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement X3 = T.Square(); - ECFieldElement Z3 = Z1IsOne ? T : T.Multiply(Z1Sq); - - ECFieldElement X1Z1 = Z1IsOne ? X1 : X1.Multiply(Z1); - ECFieldElement L3 = X1Z1.SquarePlusProduct(T, L1Z1).Add(X3).Add(Z3); - - return new SecT283R1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return b; - } - - ECFieldElement X2 = b.RawXCoord, Z2 = b.RawZCoords[0]; - if (X2.IsZero || !Z2.IsOne) - { - return Twice().Add(b); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord; - - ECFieldElement X1Sq = X1.Square(); - ECFieldElement L1Sq = L1.Square(); - ECFieldElement Z1Sq = Z1.Square(); - ECFieldElement L1Z1 = L1.Multiply(Z1); - - ECFieldElement T = Z1Sq.Add(L1Sq).Add(L1Z1); - ECFieldElement A = L2.Multiply(Z1Sq).Add(L1Sq).MultiplyPlusProduct(T, X1Sq, Z1Sq); - ECFieldElement X2Z1Sq = X2.Multiply(Z1Sq); - ECFieldElement B = X2Z1Sq.Add(T).Square(); - - if (B.IsZero) - { - if (A.IsZero) - return b.Twice(); - - return curve.Infinity; - } - - if (A.IsZero) - { - return new SecT283R1Point(curve, A, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement X3 = A.Square().Multiply(X2Z1Sq); - ECFieldElement Z3 = A.Multiply(B).Multiply(Z1Sq); - ECFieldElement L3 = A.Add(B).Square().MultiplyPlusProduct(T, L2.AddOne(), Z3); - - return new SecT283R1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Negate() - { - if (this.IsInfinity) - return this; - - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return this; - - // L is actually Lambda (X + Y/X) here - ECFieldElement L = this.RawYCoord, Z = this.RawZCoords[0]; - return new SecT283R1Point(Curve, X, L.Add(Z), new ECFieldElement[] { Z }, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT409Field.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT409Field.cs deleted file mode 100644 index 861b77a..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT409Field.cs +++ /dev/null @@ -1,331 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT409Field - { - private const ulong M25 = ulong.MaxValue >> 39; - private const ulong M59 = ulong.MaxValue >> 5; - - public static void Add(ulong[] x, ulong[] y, ulong[] z) - { - z[0] = x[0] ^ y[0]; - z[1] = x[1] ^ y[1]; - z[2] = x[2] ^ y[2]; - z[3] = x[3] ^ y[3]; - z[4] = x[4] ^ y[4]; - z[5] = x[5] ^ y[5]; - z[6] = x[6] ^ y[6]; - } - - public static void AddExt(ulong[] xx, ulong[] yy, ulong[] zz) - { - for (int i = 0; i < 13; ++i) - { - zz[i] = xx[i] ^ yy[i]; - } - } - - public static void AddOne(ulong[] x, ulong[] z) - { - z[0] = x[0] ^ 1UL; - z[1] = x[1]; - z[2] = x[2]; - z[3] = x[3]; - z[4] = x[4]; - z[5] = x[5]; - z[6] = x[6]; - } - - public static ulong[] FromBigInteger(BigInteger x) - { - ulong[] z = Nat448.FromBigInteger64(x); - Reduce39(z, 0); - return z; - } - - public static void Invert(ulong[] x, ulong[] z) - { - if (Nat448.IsZero64(x)) - throw new InvalidOperationException(); - - // Itoh-Tsujii inversion with bases { 2, 3 } - - ulong[] t0 = Nat448.Create64(); - ulong[] t1 = Nat448.Create64(); - ulong[] t2 = Nat448.Create64(); - - Square(x, t0); - - // 3 | 408 - SquareN(t0, 1, t1); - Multiply(t0, t1, t0); - SquareN(t1, 1, t1); - Multiply(t0, t1, t0); - - // 2 | 136 - SquareN(t0, 3, t1); - Multiply(t0, t1, t0); - - // 2 | 68 - SquareN(t0, 6, t1); - Multiply(t0, t1, t0); - - // 2 | 34 - SquareN(t0, 12, t1); - Multiply(t0, t1, t2); - - // ! {2,3} | 17 - SquareN(t2, 24, t0); - SquareN(t0, 24, t1); - Multiply(t0, t1, t0); - - // 2 | 8 - SquareN(t0, 48, t1); - Multiply(t0, t1, t0); - - // 2 | 4 - SquareN(t0, 96, t1); - Multiply(t0, t1, t0); - - // 2 | 2 - SquareN(t0, 192, t1); - Multiply(t0, t1, t0); - - Multiply(t0, t2, z); - } - - public static void Multiply(ulong[] x, ulong[] y, ulong[] z) - { - ulong[] tt = Nat448.CreateExt64(); - ImplMultiply(x, y, tt); - Reduce(tt, z); - } - - public static void MultiplyAddToExt(ulong[] x, ulong[] y, ulong[] zz) - { - ulong[] tt = Nat448.CreateExt64(); - ImplMultiply(x, y, tt); - AddExt(zz, tt, zz); - } - - public static void Reduce(ulong[] xx, ulong[] z) - { - ulong x00 = xx[0], x01 = xx[1], x02 = xx[2], x03 = xx[3]; - ulong x04 = xx[4], x05 = xx[5], x06 = xx[6], x07 = xx[7]; - - ulong u = xx[12]; - x05 ^= (u << 39); - x06 ^= (u >> 25) ^ (u << 62); - x07 ^= (u >> 2); - - u = xx[11]; - x04 ^= (u << 39); - x05 ^= (u >> 25) ^ (u << 62); - x06 ^= (u >> 2); - - u = xx[10]; - x03 ^= (u << 39); - x04 ^= (u >> 25) ^ (u << 62); - x05 ^= (u >> 2); - - u = xx[9]; - x02 ^= (u << 39); - x03 ^= (u >> 25) ^ (u << 62); - x04 ^= (u >> 2); - - u = xx[8]; - x01 ^= (u << 39); - x02 ^= (u >> 25) ^ (u << 62); - x03 ^= (u >> 2); - - u = x07; - x00 ^= (u << 39); - x01 ^= (u >> 25) ^ (u << 62); - x02 ^= (u >> 2); - - ulong t = x06 >> 25; - z[0] = x00 ^ t; - z[1] = x01 ^ (t << 23); - z[2] = x02; - z[3] = x03; - z[4] = x04; - z[5] = x05; - z[6] = x06 & M25; - } - - public static void Reduce39(ulong[] z, int zOff) - { - ulong z6 = z[zOff + 6], t = z6 >> 25; - z[zOff ] ^= t; - z[zOff + 1] ^= (t << 23); - z[zOff + 6] = z6 & M25; - } - - public static void Sqrt(ulong[] x, ulong[] z) - { - ulong u0, u1; - u0 = Interleave.Unshuffle(x[0]); u1 = Interleave.Unshuffle(x[1]); - ulong e0 = (u0 & 0x00000000FFFFFFFFUL) | (u1 << 32); - ulong c0 = (u0 >> 32) | (u1 & 0xFFFFFFFF00000000UL); - - u0 = Interleave.Unshuffle(x[2]); u1 = Interleave.Unshuffle(x[3]); - ulong e1 = (u0 & 0x00000000FFFFFFFFUL) | (u1 << 32); - ulong c1 = (u0 >> 32) | (u1 & 0xFFFFFFFF00000000UL); - - u0 = Interleave.Unshuffle(x[4]); u1 = Interleave.Unshuffle(x[5]); - ulong e2 = (u0 & 0x00000000FFFFFFFFUL) | (u1 << 32); - ulong c2 = (u0 >> 32) | (u1 & 0xFFFFFFFF00000000UL); - - u0 = Interleave.Unshuffle(x[6]); - ulong e3 = (u0 & 0x00000000FFFFFFFFUL); - ulong c3 = (u0 >> 32); - - z[0] = e0 ^ (c0 << 44); - z[1] = e1 ^ (c1 << 44) ^ (c0 >> 20); - z[2] = e2 ^ (c2 << 44) ^ (c1 >> 20); - z[3] = e3 ^ (c3 << 44) ^ (c2 >> 20) ^ (c0 << 13); - z[4] = (c3 >> 20) ^ (c1 << 13) ^ (c0 >> 51); - z[5] = (c2 << 13) ^ (c1 >> 51); - z[6] = (c3 << 13) ^ (c2 >> 51); - - Debug.Assert((c3 >> 51) == 0); - } - - public static void Square(ulong[] x, ulong[] z) - { - ulong[] tt = Nat.Create64(13); - ImplSquare(x, tt); - Reduce(tt, z); - } - - public static void SquareAddToExt(ulong[] x, ulong[] zz) - { - ulong[] tt = Nat.Create64(13); - ImplSquare(x, tt); - AddExt(zz, tt, zz); - } - - public static void SquareN(ulong[] x, int n, ulong[] z) - { - Debug.Assert(n > 0); - - ulong[] tt = Nat.Create64(13); - ImplSquare(x, tt); - Reduce(tt, z); - - while (--n > 0) - { - ImplSquare(z, tt); - Reduce(tt, z); - } - } - - public static uint Trace(ulong[] x) - { - // Non-zero-trace bits: 0 - return (uint)(x[0]) & 1U; - } - - protected static void ImplCompactExt(ulong[] zz) - { - ulong z00 = zz[ 0], z01 = zz[ 1], z02 = zz[ 2], z03 = zz[ 3], z04 = zz[ 4], z05 = zz[ 5], z06 = zz[ 6]; - ulong z07 = zz[ 7], z08 = zz[ 8], z09 = zz[ 9], z10 = zz[10], z11 = zz[11], z12 = zz[12], z13 = zz[13]; - zz[ 0] = z00 ^ (z01 << 59); - zz[ 1] = (z01 >> 5) ^ (z02 << 54); - zz[ 2] = (z02 >> 10) ^ (z03 << 49); - zz[ 3] = (z03 >> 15) ^ (z04 << 44); - zz[ 4] = (z04 >> 20) ^ (z05 << 39); - zz[ 5] = (z05 >> 25) ^ (z06 << 34); - zz[ 6] = (z06 >> 30) ^ (z07 << 29); - zz[ 7] = (z07 >> 35) ^ (z08 << 24); - zz[ 8] = (z08 >> 40) ^ (z09 << 19); - zz[ 9] = (z09 >> 45) ^ (z10 << 14); - zz[10] = (z10 >> 50) ^ (z11 << 9); - zz[11] = (z11 >> 55) ^ (z12 << 4) - ^ (z13 << 63); - zz[12] = (z12 >> 60) - ^ (z13 >> 1); - zz[13] = 0; - } - - protected static void ImplExpand(ulong[] x, ulong[] z) - { - ulong x0 = x[0], x1 = x[1], x2 = x[2], x3 = x[3], x4 = x[4], x5 = x[5], x6 = x[6]; - z[0] = x0 & M59; - z[1] = ((x0 >> 59) ^ (x1 << 5)) & M59; - z[2] = ((x1 >> 54) ^ (x2 << 10)) & M59; - z[3] = ((x2 >> 49) ^ (x3 << 15)) & M59; - z[4] = ((x3 >> 44) ^ (x4 << 20)) & M59; - z[5] = ((x4 >> 39) ^ (x5 << 25)) & M59; - z[6] = ((x5 >> 34) ^ (x6 << 30)); - } - - protected static void ImplMultiply(ulong[] x, ulong[] y, ulong[] zz) - { - ulong[] a = new ulong[7], b = new ulong[7]; - ImplExpand(x, a); - ImplExpand(y, b); - - for (int i = 0; i < 7; ++i) - { - ImplMulwAcc(a, b[i], zz, i); - } - - ImplCompactExt(zz); - } - - protected static void ImplMulwAcc(ulong[] xs, ulong y, ulong[] z, int zOff) - { - Debug.Assert(y >> 59 == 0); - - ulong[] u = new ulong[8]; - //u[0] = 0; - u[1] = y; - u[2] = u[1] << 1; - u[3] = u[2] ^ y; - u[4] = u[2] << 1; - u[5] = u[4] ^ y; - u[6] = u[3] << 1; - u[7] = u[6] ^ y; - - for (int i = 0; i < 7; ++i) - { - ulong x = xs[i]; - - Debug.Assert(x >> 59 == 0); - - uint j = (uint)x; - ulong g, h = 0, l = u[j & 7] - ^ (u[(j >> 3) & 7] << 3); - int k = 54; - do - { - j = (uint)(x >> k); - g = u[j & 7] - ^ u[(j >> 3) & 7] << 3; - l ^= (g << k); - h ^= (g >> -k); - } - while ((k -= 6) > 0); - - Debug.Assert(h >> 53 == 0); - - z[zOff + i ] ^= l & M59; - z[zOff + i + 1] ^= (l >> 59) ^ (h << 5); - } - } - - protected static void ImplSquare(ulong[] x, ulong[] zz) - { - for (int i = 0; i < 6; ++i) - { - Interleave.Expand64To128(x[i], zz, i << 1); - } - zz[12] = Interleave.Expand32to64((uint)x[6]); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT409FieldElement.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT409FieldElement.cs deleted file mode 100644 index f954f46..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT409FieldElement.cs +++ /dev/null @@ -1,216 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT409FieldElement - : ECFieldElement - { - protected ulong[] x; - - public SecT409FieldElement(BigInteger x) - { - if (x == null || x.SignValue < 0 || x.BitLength > 409) - throw new ArgumentException("value invalid for SecT409FieldElement", "x"); - - this.x = SecT409Field.FromBigInteger(x); - } - - public SecT409FieldElement() - { - this.x = Nat448.Create64(); - } - - protected internal SecT409FieldElement(ulong[] x) - { - this.x = x; - } - - public override bool IsOne - { - get { return Nat448.IsOne64(x); } - } - - public override bool IsZero - { - get { return Nat448.IsZero64(x); } - } - - public override bool TestBitZero() - { - return (x[0] & 1UL) != 0UL; - } - - public override BigInteger ToBigInteger() - { - return Nat448.ToBigInteger64(x); - } - - public override string FieldName - { - get { return "SecT409Field"; } - } - - public override int FieldSize - { - get { return 409; } - } - - public override ECFieldElement Add(ECFieldElement b) - { - ulong[] z = Nat448.Create64(); - SecT409Field.Add(x, ((SecT409FieldElement)b).x, z); - return new SecT409FieldElement(z); - } - - public override ECFieldElement AddOne() - { - ulong[] z = Nat448.Create64(); - SecT409Field.AddOne(x, z); - return new SecT409FieldElement(z); - } - - public override ECFieldElement Subtract(ECFieldElement b) - { - // Addition and subtraction are the same in F2m - return Add(b); - } - - public override ECFieldElement Multiply(ECFieldElement b) - { - ulong[] z = Nat448.Create64(); - SecT409Field.Multiply(x, ((SecT409FieldElement)b).x, z); - return new SecT409FieldElement(z); - } - - public override ECFieldElement MultiplyMinusProduct(ECFieldElement b, ECFieldElement x, ECFieldElement y) - { - return MultiplyPlusProduct(b, x, y); - } - - public override ECFieldElement MultiplyPlusProduct(ECFieldElement b, ECFieldElement x, ECFieldElement y) - { - ulong[] ax = this.x, bx = ((SecT409FieldElement)b).x; - ulong[] xx = ((SecT409FieldElement)x).x, yx = ((SecT409FieldElement)y).x; - - ulong[] tt = Nat.Create64(13); - SecT409Field.MultiplyAddToExt(ax, bx, tt); - SecT409Field.MultiplyAddToExt(xx, yx, tt); - - ulong[] z = Nat448.Create64(); - SecT409Field.Reduce(tt, z); - return new SecT409FieldElement(z); - } - - public override ECFieldElement Divide(ECFieldElement b) - { - return Multiply(b.Invert()); - } - - public override ECFieldElement Negate() - { - return this; - } - - public override ECFieldElement Square() - { - ulong[] z = Nat448.Create64(); - SecT409Field.Square(x, z); - return new SecT409FieldElement(z); - } - - public override ECFieldElement SquareMinusProduct(ECFieldElement x, ECFieldElement y) - { - return SquarePlusProduct(x, y); - } - - public override ECFieldElement SquarePlusProduct(ECFieldElement x, ECFieldElement y) - { - ulong[] ax = this.x; - ulong[] xx = ((SecT409FieldElement)x).x, yx = ((SecT409FieldElement)y).x; - - ulong[] tt = Nat.Create64(13); - SecT409Field.SquareAddToExt(ax, tt); - SecT409Field.MultiplyAddToExt(xx, yx, tt); - - ulong[] z = Nat448.Create64(); - SecT409Field.Reduce(tt, z); - return new SecT409FieldElement(z); - } - - public override ECFieldElement SquarePow(int pow) - { - if (pow < 1) - return this; - - ulong[] z = Nat448.Create64(); - SecT409Field.SquareN(x, pow, z); - return new SecT409FieldElement(z); - } - - public override ECFieldElement Invert() - { - ulong[] z = Nat448.Create64(); - SecT409Field.Invert(x, z); - return new SecT409FieldElement(z); - } - - public override ECFieldElement Sqrt() - { - ulong[] z = Nat448.Create64(); - SecT409Field.Sqrt(x, z); - return new SecT409FieldElement(z); - } - - public virtual int Representation - { - get { return F2mFieldElement.Tpb; } - } - - public virtual int M - { - get { return 409; } - } - - public virtual int K1 - { - get { return 87; } - } - - public virtual int K2 - { - get { return 0; } - } - - public virtual int K3 - { - get { return 0; } - } - - public override bool Equals(object obj) - { - return Equals(obj as SecT409FieldElement); - } - - public override bool Equals(ECFieldElement other) - { - return Equals(other as SecT409FieldElement); - } - - public virtual bool Equals(SecT409FieldElement other) - { - if (this == other) - return true; - if (null == other) - return false; - return Nat448.Eq64(x, other.x); - } - - public override int GetHashCode() - { - return 4090087 ^ Arrays.GetHashCode(x, 0, 7); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT409K1Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT409K1Curve.cs deleted file mode 100644 index 4f57355..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT409K1Curve.cs +++ /dev/null @@ -1,104 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.EC.Multiplier; -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT409K1Curve - : AbstractF2mCurve - { - private const int SecT409K1_DEFAULT_COORDS = COORD_LAMBDA_PROJECTIVE; - - protected readonly SecT409K1Point m_infinity; - - public SecT409K1Curve() - : base(409, 87, 0, 0) - { - this.m_infinity = new SecT409K1Point(this, null, null); - - this.m_a = FromBigInteger(BigInteger.Zero); - this.m_b = FromBigInteger(BigInteger.One); - this.m_order = new BigInteger(1, Hex.Decode("7FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFE5F83B2D4EA20400EC4557D5ED3E3E7CA5B4B5C83B8E01E5FCF")); - this.m_cofactor = BigInteger.ValueOf(4); - - this.m_coord = SecT409K1_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecT409K1Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_LAMBDA_PROJECTIVE: - return true; - default: - return false; - } - } - - protected override ECMultiplier CreateDefaultMultiplier() - { - return new WTauNafMultiplier(); - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return 409; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecT409FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecT409K1Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecT409K1Point(this, x, y, zs, withCompression); - } - - public override bool IsKoblitz - { - get { return true; } - } - - public virtual int M - { - get { return 409; } - } - - public virtual bool IsTrinomial - { - get { return true; } - } - - public virtual int K1 - { - get { return 87; } - } - - public virtual int K2 - { - get { return 0; } - } - - public virtual int K3 - { - get { return 0; } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT409K1Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT409K1Point.cs deleted file mode 100644 index e67ca9a..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT409K1Point.cs +++ /dev/null @@ -1,289 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT409K1Point - : AbstractF2mPoint - { - /** - * @deprecated Use ECCurve.createPoint to construct points - */ - public SecT409K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * @deprecated per-point compression property will be removed, refer {@link #getEncoded(bool)} - */ - public SecT409K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecT409K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecT409K1Point(null, this.AffineXCoord, this.AffineYCoord); // earlier JDK - } - - public override ECFieldElement YCoord - { - get - { - ECFieldElement X = RawXCoord, L = RawYCoord; - - if (this.IsInfinity || X.IsZero) - return L; - - // Y is actually Lambda (X + Y/X) here; convert to affine value on the fly - ECFieldElement Y = L.Add(X).Multiply(X); - - ECFieldElement Z = RawZCoords[0]; - if (!Z.IsOne) - { - Y = Y.Divide(Z); - } - - return Y; - } - } - - protected internal override bool CompressionYTilde - { - get - { - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return false; - - ECFieldElement Y = this.RawYCoord; - - // Y is actually Lambda (X + Y/X) here - return Y.TestBitZero() != X.TestBitZero(); - } - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - ECFieldElement X2 = b.RawXCoord; - - if (X1.IsZero) - { - if (X2.IsZero) - return curve.Infinity; - - return b.Add(this); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord, Z2 = b.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement U2 = X2, S2 = L2; - if (!Z1IsOne) - { - U2 = U2.Multiply(Z1); - S2 = S2.Multiply(Z1); - } - - bool Z2IsOne = Z2.IsOne; - ECFieldElement U1 = X1, S1 = L1; - if (!Z2IsOne) - { - U1 = U1.Multiply(Z2); - S1 = S1.Multiply(Z2); - } - - ECFieldElement A = S1.Add(S2); - ECFieldElement B = U1.Add(U2); - - if (B.IsZero) - { - if (A.IsZero) - return Twice(); - - return curve.Infinity; - } - - ECFieldElement X3, L3, Z3; - if (X2.IsZero) - { - // TODO This can probably be optimized quite a bit - ECPoint p = this.Normalize(); - X1 = p.XCoord; - ECFieldElement Y1 = p.YCoord; - - ECFieldElement Y2 = L2; - ECFieldElement L = Y1.Add(Y2).Divide(X1); - - X3 = L.Square().Add(L).Add(X1); - if (X3.IsZero) - { - return new SecT409K1Point(curve, X3, curve.B, IsCompressed); - } - - ECFieldElement Y3 = L.Multiply(X1.Add(X3)).Add(X3).Add(Y1); - L3 = Y3.Divide(X3).Add(X3); - Z3 = curve.FromBigInteger(BigInteger.One); - } - else - { - B = B.Square(); - - ECFieldElement AU1 = A.Multiply(U1); - ECFieldElement AU2 = A.Multiply(U2); - - X3 = AU1.Multiply(AU2); - if (X3.IsZero) - { - return new SecT409K1Point(curve, X3, curve.B, IsCompressed); - } - - ECFieldElement ABZ2 = A.Multiply(B); - if (!Z2IsOne) - { - ABZ2 = ABZ2.Multiply(Z2); - } - - L3 = AU2.Add(B).SquarePlusProduct(ABZ2, L1.Add(Z1)); - - Z3 = ABZ2; - if (!Z1IsOne) - { - Z3 = Z3.Multiply(Z1); - } - } - - return new SecT409K1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return curve.Infinity; - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement Z1Sq = Z1IsOne ? Z1 : Z1.Square(); - ECFieldElement T; - if (Z1IsOne) - { - T = L1.Square().Add(L1); - } - else - { - T = L1.Add(Z1).Multiply(L1); - } - - if (T.IsZero) - { - return new SecT409K1Point(curve, T, curve.B, IsCompressed); - } - - ECFieldElement X3 = T.Square(); - ECFieldElement Z3 = Z1IsOne ? T : T.Multiply(Z1Sq); - - ECFieldElement t1 = L1.Add(X1).Square(); - ECFieldElement t2 = Z1IsOne ? Z1 : Z1Sq.Square(); - ECFieldElement L3 = t1.Add(T).Add(Z1Sq).Multiply(t1).Add(t2).Add(X3).Add(Z3); - - return new SecT409K1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return b; - } - - // NOTE: TwicePlus() only optimized for lambda-affine argument - ECFieldElement X2 = b.RawXCoord, Z2 = b.RawZCoords[0]; - if (X2.IsZero || !Z2.IsOne) - { - return Twice().Add(b); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord; - - ECFieldElement X1Sq = X1.Square(); - ECFieldElement L1Sq = L1.Square(); - ECFieldElement Z1Sq = Z1.Square(); - ECFieldElement L1Z1 = L1.Multiply(Z1); - - ECFieldElement T = L1Sq.Add(L1Z1); - ECFieldElement L2plus1 = L2.AddOne(); - ECFieldElement A = L2plus1.Multiply(Z1Sq).Add(L1Sq).MultiplyPlusProduct(T, X1Sq, Z1Sq); - ECFieldElement X2Z1Sq = X2.Multiply(Z1Sq); - ECFieldElement B = X2Z1Sq.Add(T).Square(); - - if (B.IsZero) - { - if (A.IsZero) - return b.Twice(); - - return curve.Infinity; - } - - if (A.IsZero) - { - return new SecT409K1Point(curve, A, curve.B, IsCompressed); - } - - ECFieldElement X3 = A.Square().Multiply(X2Z1Sq); - ECFieldElement Z3 = A.Multiply(B).Multiply(Z1Sq); - ECFieldElement L3 = A.Add(B).Square().MultiplyPlusProduct(T, L2plus1, Z3); - - return new SecT409K1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Negate() - { - if (this.IsInfinity) - return this; - - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return this; - - // L is actually Lambda (X + Y/X) here - ECFieldElement L = this.RawYCoord, Z = this.RawZCoords[0]; - return new SecT409K1Point(Curve, X, L.Add(Z), new ECFieldElement[] { Z }, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT409R1Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT409R1Curve.cs deleted file mode 100644 index 9212fb5..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT409R1Curve.cs +++ /dev/null @@ -1,98 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT409R1Curve - : AbstractF2mCurve - { - private const int SecT409R1_DEFAULT_COORDS = COORD_LAMBDA_PROJECTIVE; - - protected readonly SecT409R1Point m_infinity; - - public SecT409R1Curve() - : base(409, 87, 0, 0) - { - this.m_infinity = new SecT409R1Point(this, null, null); - - this.m_a = FromBigInteger(BigInteger.One); - this.m_b = FromBigInteger(new BigInteger(1, Hex.Decode("0021A5C2C8EE9FEB5C4B9A753B7B476B7FD6422EF1F3DD674761FA99D6AC27C8A9A197B272822F6CD57A55AA4F50AE317B13545F"))); - this.m_order = new BigInteger(1, Hex.Decode("010000000000000000000000000000000000000000000000000001E2AAD6A612F33307BE5FA47C3C9E052F838164CD37D9A21173")); - this.m_cofactor = BigInteger.Two; - - this.m_coord = SecT409R1_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecT409R1Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_LAMBDA_PROJECTIVE: - return true; - default: - return false; - } - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return 409; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecT409FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecT409R1Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecT409R1Point(this, x, y, zs, withCompression); - } - - public override bool IsKoblitz - { - get { return false; } - } - - public virtual int M - { - get { return 409; } - } - - public virtual bool IsTrinomial - { - get { return true; } - } - - public virtual int K1 - { - get { return 87; } - } - - public virtual int K2 - { - get { return 0; } - } - - public virtual int K3 - { - get { return 0; } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT409R1Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT409R1Point.cs deleted file mode 100644 index 92f6143..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT409R1Point.cs +++ /dev/null @@ -1,278 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT409R1Point - : AbstractF2mPoint - { - /** - * @deprecated Use ECCurve.createPoint to construct points - */ - public SecT409R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * @deprecated per-point compression property will be removed, refer {@link #getEncoded(bool)} - */ - public SecT409R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecT409R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecT409R1Point(null, AffineXCoord, AffineYCoord); - } - - public override ECFieldElement YCoord - { - get - { - ECFieldElement X = RawXCoord, L = RawYCoord; - - if (this.IsInfinity || X.IsZero) - return L; - - // Y is actually Lambda (X + Y/X) here; convert to affine value on the fly - ECFieldElement Y = L.Add(X).Multiply(X); - - ECFieldElement Z = RawZCoords[0]; - if (!Z.IsOne) - { - Y = Y.Divide(Z); - } - - return Y; - } - } - - protected internal override bool CompressionYTilde - { - get - { - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return false; - - ECFieldElement Y = this.RawYCoord; - - // Y is actually Lambda (X + Y/X) here - return Y.TestBitZero() != X.TestBitZero(); - } - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - ECFieldElement X2 = b.RawXCoord; - - if (X1.IsZero) - { - if (X2.IsZero) - return curve.Infinity; - - return b.Add(this); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord, Z2 = b.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement U2 = X2, S2 = L2; - if (!Z1IsOne) - { - U2 = U2.Multiply(Z1); - S2 = S2.Multiply(Z1); - } - - bool Z2IsOne = Z2.IsOne; - ECFieldElement U1 = X1, S1 = L1; - if (!Z2IsOne) - { - U1 = U1.Multiply(Z2); - S1 = S1.Multiply(Z2); - } - - ECFieldElement A = S1.Add(S2); - ECFieldElement B = U1.Add(U2); - - if (B.IsZero) - { - if (A.IsZero) - return Twice(); - - return curve.Infinity; - } - - ECFieldElement X3, L3, Z3; - if (X2.IsZero) - { - // TODO This can probably be optimized quite a bit - ECPoint p = this.Normalize(); - X1 = p.XCoord; - ECFieldElement Y1 = p.YCoord; - - ECFieldElement Y2 = L2; - ECFieldElement L = Y1.Add(Y2).Divide(X1); - - X3 = L.Square().Add(L).Add(X1).AddOne(); - if (X3.IsZero) - { - return new SecT409R1Point(curve, X3, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement Y3 = L.Multiply(X1.Add(X3)).Add(X3).Add(Y1); - L3 = Y3.Divide(X3).Add(X3); - Z3 = curve.FromBigInteger(BigInteger.One); - } - else - { - B = B.Square(); - - ECFieldElement AU1 = A.Multiply(U1); - ECFieldElement AU2 = A.Multiply(U2); - - X3 = AU1.Multiply(AU2); - if (X3.IsZero) - { - return new SecT409R1Point(curve, X3, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement ABZ2 = A.Multiply(B); - if (!Z2IsOne) - { - ABZ2 = ABZ2.Multiply(Z2); - } - - L3 = AU2.Add(B).SquarePlusProduct(ABZ2, L1.Add(Z1)); - - Z3 = ABZ2; - if (!Z1IsOne) - { - Z3 = Z3.Multiply(Z1); - } - } - - return new SecT409R1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return curve.Infinity; - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement L1Z1 = Z1IsOne ? L1 : L1.Multiply(Z1); - ECFieldElement Z1Sq = Z1IsOne ? Z1 : Z1.Square(); - ECFieldElement T = L1.Square().Add(L1Z1).Add(Z1Sq); - if (T.IsZero) - { - return new SecT409R1Point(curve, T, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement X3 = T.Square(); - ECFieldElement Z3 = Z1IsOne ? T : T.Multiply(Z1Sq); - - ECFieldElement X1Z1 = Z1IsOne ? X1 : X1.Multiply(Z1); - ECFieldElement L3 = X1Z1.SquarePlusProduct(T, L1Z1).Add(X3).Add(Z3); - - return new SecT409R1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return b; - } - - ECFieldElement X2 = b.RawXCoord, Z2 = b.RawZCoords[0]; - if (X2.IsZero || !Z2.IsOne) - { - return Twice().Add(b); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord; - - ECFieldElement X1Sq = X1.Square(); - ECFieldElement L1Sq = L1.Square(); - ECFieldElement Z1Sq = Z1.Square(); - ECFieldElement L1Z1 = L1.Multiply(Z1); - - ECFieldElement T = Z1Sq.Add(L1Sq).Add(L1Z1); - ECFieldElement A = L2.Multiply(Z1Sq).Add(L1Sq).MultiplyPlusProduct(T, X1Sq, Z1Sq); - ECFieldElement X2Z1Sq = X2.Multiply(Z1Sq); - ECFieldElement B = X2Z1Sq.Add(T).Square(); - - if (B.IsZero) - { - if (A.IsZero) - return b.Twice(); - - return curve.Infinity; - } - - if (A.IsZero) - { - return new SecT409R1Point(curve, A, curve.B.Sqrt(), IsCompressed); - } - - ECFieldElement X3 = A.Square().Multiply(X2Z1Sq); - ECFieldElement Z3 = A.Multiply(B).Multiply(Z1Sq); - ECFieldElement L3 = A.Add(B).Square().MultiplyPlusProduct(T, L2.AddOne(), Z3); - - return new SecT409R1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Negate() - { - if (this.IsInfinity) - return this; - - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return this; - - // L is actually Lambda (X + Y/X) here - ECFieldElement L = this.RawYCoord, Z = this.RawZCoords[0]; - return new SecT409R1Point(Curve, X, L.Add(Z), new ECFieldElement[] { Z }, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT571Field.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT571Field.cs deleted file mode 100644 index 98f4f7f..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT571Field.cs +++ /dev/null @@ -1,333 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Math.Raw; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT571Field - { - private const ulong M59 = ulong.MaxValue >> 5; - - private const ulong RM = 0xEF7BDEF7BDEF7BDEUL; - - private static readonly ulong[] ROOT_Z = new ulong[]{ 0x2BE1195F08CAFB99UL, 0x95F08CAF84657C23UL, 0xCAF84657C232BE11UL, 0x657C232BE1195F08UL, - 0xF84657C2308CAF84UL, 0x7C232BE1195F08CAUL, 0xBE1195F08CAF8465UL, 0x5F08CAF84657C232UL, 0x784657C232BE119UL }; - - public static void Add(ulong[] x, ulong[] y, ulong[] z) - { - for (int i = 0; i < 9; ++i) - { - z[i] = x[i] ^ y[i]; - } - } - - private static void Add(ulong[] x, int xOff, ulong[] y, int yOff, ulong[] z, int zOff) - { - for (int i = 0; i < 9; ++i) - { - z[zOff + i] = x[xOff + i] ^ y[yOff + i]; - } - } - - private static void AddBothTo(ulong[] x, int xOff, ulong[] y, int yOff, ulong[] z, int zOff) - { - for (int i = 0; i < 9; ++i) - { - z[zOff + i] ^= x[xOff + i] ^ y[yOff + i]; - } - } - - public static void AddExt(ulong[] xx, ulong[] yy, ulong[] zz) - { - for (int i = 0; i < 18; ++i) - { - zz[i] = xx[i] ^ yy[i]; - } - } - - public static void AddOne(ulong[] x, ulong[] z) - { - z[0] = x[0] ^ 1UL; - for (int i = 1; i < 9; ++i) - { - z[i] = x[i]; - } - } - - public static ulong[] FromBigInteger(BigInteger x) - { - ulong[] z = Nat576.FromBigInteger64(x); - Reduce5(z, 0); - return z; - } - - public static void Invert(ulong[] x, ulong[] z) - { - if (Nat576.IsZero64(x)) - throw new InvalidOperationException(); - - // Itoh-Tsujii inversion with bases { 2, 3, 5 } - - ulong[] t0 = Nat576.Create64(); - ulong[] t1 = Nat576.Create64(); - ulong[] t2 = Nat576.Create64(); - - Square(x, t2); - - // 5 | 570 - Square(t2, t0); - Square(t0, t1); - Multiply(t0, t1, t0); - SquareN(t0, 2, t1); - Multiply(t0, t1, t0); - Multiply(t0, t2, t0); - - // 3 | 114 - SquareN(t0, 5, t1); - Multiply(t0, t1, t0); - SquareN(t1, 5, t1); - Multiply(t0, t1, t0); - - // 2 | 38 - SquareN(t0, 15, t1); - Multiply(t0, t1, t2); - - // ! {2,3,5} | 19 - SquareN(t2, 30, t0); - SquareN(t0, 30, t1); - Multiply(t0, t1, t0); - - // 3 | 9 - SquareN(t0, 60, t1); - Multiply(t0, t1, t0); - SquareN(t1, 60, t1); - Multiply(t0, t1, t0); - - // 3 | 3 - SquareN(t0, 180, t1); - Multiply(t0, t1, t0); - SquareN(t1, 180, t1); - Multiply(t0, t1, t0); - - Multiply(t0, t2, z); - } - - public static void Multiply(ulong[] x, ulong[] y, ulong[] z) - { - ulong[] tt = Nat576.CreateExt64(); - ImplMultiply(x, y, tt); - Reduce(tt, z); - } - - public static void MultiplyAddToExt(ulong[] x, ulong[] y, ulong[] zz) - { - ulong[] tt = Nat576.CreateExt64(); - ImplMultiply(x, y, tt); - AddExt(zz, tt, zz); - } - - public static void Reduce(ulong[] xx, ulong[] z) - { - ulong xx09 = xx[9]; - ulong u = xx[17], v = xx09; - - xx09 = v ^ (u >> 59) ^ (u >> 57) ^ (u >> 54) ^ (u >> 49); - v = xx[8] ^ (u << 5) ^ (u << 7) ^ (u << 10) ^ (u << 15); - - for (int i = 16; i >= 10; --i) - { - u = xx[i]; - z[i - 8] = v ^ (u >> 59) ^ (u >> 57) ^ (u >> 54) ^ (u >> 49); - v = xx[i - 9] ^ (u << 5) ^ (u << 7) ^ (u << 10) ^ (u << 15); - } - - u = xx09; - z[1] = v ^ (u >> 59) ^ (u >> 57) ^ (u >> 54) ^ (u >> 49); - v = xx[0] ^ (u << 5) ^ (u << 7) ^ (u << 10) ^ (u << 15); - - ulong x08 = z[8]; - ulong t = x08 >> 59; - z[0] = v ^ t ^ (t << 2) ^ (t << 5) ^ (t << 10); - z[8] = x08 & M59; - } - - public static void Reduce5(ulong[] z, int zOff) - { - ulong z8 = z[zOff + 8], t = z8 >> 59; - z[zOff ] ^= t ^ (t << 2) ^ (t << 5) ^ (t << 10); - z[zOff + 8] = z8 & M59; - } - - public static void Sqrt(ulong[] x, ulong[] z) - { - ulong[] evn = Nat576.Create64(), odd = Nat576.Create64(); - - int pos = 0; - for (int i = 0; i < 4; ++i) - { - ulong u0 = Interleave.Unshuffle(x[pos++]); - ulong u1 = Interleave.Unshuffle(x[pos++]); - evn[i] = (u0 & 0x00000000FFFFFFFFUL) | (u1 << 32); - odd[i] = (u0 >> 32) | (u1 & 0xFFFFFFFF00000000UL); - } - { - ulong u0 = Interleave.Unshuffle(x[pos]); - evn[4] = (u0 & 0x00000000FFFFFFFFUL); - odd[4] = (u0 >> 32); - } - - Multiply(odd, ROOT_Z, z); - Add(z, evn, z); - } - - public static void Square(ulong[] x, ulong[] z) - { - ulong[] tt = Nat576.CreateExt64(); - ImplSquare(x, tt); - Reduce(tt, z); - } - - public static void SquareAddToExt(ulong[] x, ulong[] zz) - { - ulong[] tt = Nat576.CreateExt64(); - ImplSquare(x, tt); - AddExt(zz, tt, zz); - } - - public static void SquareN(ulong[] x, int n, ulong[] z) - { - Debug.Assert(n > 0); - - ulong[] tt = Nat576.CreateExt64(); - ImplSquare(x, tt); - Reduce(tt, z); - - while (--n > 0) - { - ImplSquare(z, tt); - Reduce(tt, z); - } - } - - public static uint Trace(ulong[] x) - { - // Non-zero-trace bits: 0, 561, 569 - return (uint)(x[0] ^ (x[8] >> 49) ^ (x[8] >> 57)) & 1U; - } - - protected static void ImplMultiply(ulong[] x, ulong[] y, ulong[] zz) - { - //for (int i = 0; i < 9; ++i) - //{ - // ImplMulwAcc(x, y[i], zz, i); - //} - - /* - * Precompute table of all 4-bit products of y - */ - ulong[] T0 = new ulong[9 << 4]; - Array.Copy(y, 0, T0, 9, 9); - // Reduce5(T0, 9); - int tOff = 0; - for (int i = 7; i > 0; --i) - { - tOff += 18; - Nat.ShiftUpBit64(9, T0, tOff >> 1, 0UL, T0, tOff); - Reduce5(T0, tOff); - Add(T0, 9, T0, tOff, T0, tOff + 9); - } - - /* - * Second table with all 4-bit products of B shifted 4 bits - */ - ulong[] T1 = new ulong[T0.Length]; - Nat.ShiftUpBits64(T0.Length, T0, 0, 4, 0L, T1, 0); - - uint MASK = 0xF; - - /* - * Lopez-Dahab algorithm - */ - - for (int k = 56; k >= 0; k -= 8) - { - for (int j = 1; j < 9; j += 2) - { - uint aVal = (uint)(x[j] >> k); - uint u = aVal & MASK; - uint v = (aVal >> 4) & MASK; - AddBothTo(T0, (int)(9 * u), T1, (int)(9 * v), zz, j - 1); - } - Nat.ShiftUpBits64(16, zz, 0, 8, 0L); - } - - for (int k = 56; k >= 0; k -= 8) - { - for (int j = 0; j < 9; j += 2) - { - uint aVal = (uint)(x[j] >> k); - uint u = aVal & MASK; - uint v = (aVal >> 4) & MASK; - AddBothTo(T0, (int)(9 * u), T1, (int)(9 * v), zz, j); - } - if (k > 0) - { - Nat.ShiftUpBits64(18, zz, 0, 8, 0L); - } - } - } - - protected static void ImplMulwAcc(ulong[] xs, ulong y, ulong[] z, int zOff) - { - ulong[] u = new ulong[32]; - //u[0] = 0; - u[1] = y; - for (int i = 2; i < 32; i += 2) - { - u[i ] = u[i >> 1] << 1; - u[i + 1] = u[i ] ^ y; - } - - ulong l = 0; - for (int i = 0; i < 9; ++i) - { - ulong x = xs[i]; - - uint j = (uint)x; - - l ^= u[j & 31]; - - ulong g, h = 0; - int k = 60; - do - { - j = (uint)(x >> k); - g = u[j & 31]; - l ^= (g << k); - h ^= (g >> -k); - } - while ((k -= 5) > 0); - - for (int p = 0; p < 4; ++p) - { - x = (x & RM) >> 1; - h ^= x & (ulong)(((long)y << p) >> 63); - } - - z[zOff + i] ^= l; - - l = h; - } - z[zOff + 9] ^= l; - } - - protected static void ImplSquare(ulong[] x, ulong[] zz) - { - for (int i = 0; i < 9; ++i) - { - Interleave.Expand64To128(x[i], zz, i << 1); - } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT571FieldElement.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT571FieldElement.cs deleted file mode 100644 index c43b8dc..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT571FieldElement.cs +++ /dev/null @@ -1,216 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.Raw; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT571FieldElement - : ECFieldElement - { - protected readonly ulong[] x; - - public SecT571FieldElement(BigInteger x) - { - if (x == null || x.SignValue < 0 || x.BitLength > 571) - throw new ArgumentException("value invalid for SecT571FieldElement", "x"); - - this.x = SecT571Field.FromBigInteger(x); - } - - public SecT571FieldElement() - { - this.x = Nat576.Create64(); - } - - protected internal SecT571FieldElement(ulong[] x) - { - this.x = x; - } - - public override bool IsOne - { - get { return Nat576.IsOne64(x); } - } - - public override bool IsZero - { - get { return Nat576.IsZero64(x); } - } - - public override bool TestBitZero() - { - return (x[0] & 1UL) != 0UL; - } - - public override BigInteger ToBigInteger() - { - return Nat576.ToBigInteger64(x); - } - - public override String FieldName - { - get { return "SecT571Field"; } - } - - public override int FieldSize - { - get { return 571; } - } - - public override ECFieldElement Add(ECFieldElement b) - { - ulong[] z = Nat576.Create64(); - SecT571Field.Add(x, ((SecT571FieldElement)b).x, z); - return new SecT571FieldElement(z); - } - - public override ECFieldElement AddOne() - { - ulong[] z = Nat576.Create64(); - SecT571Field.AddOne(x, z); - return new SecT571FieldElement(z); - } - - public override ECFieldElement Subtract(ECFieldElement b) - { - // Addition and subtraction are the same in F2m - return Add(b); - } - - public override ECFieldElement Multiply(ECFieldElement b) - { - ulong[] z = Nat576.Create64(); - SecT571Field.Multiply(x, ((SecT571FieldElement)b).x, z); - return new SecT571FieldElement(z); - } - - public override ECFieldElement MultiplyMinusProduct(ECFieldElement b, ECFieldElement x, ECFieldElement y) - { - return MultiplyPlusProduct(b, x, y); - } - - public override ECFieldElement MultiplyPlusProduct(ECFieldElement b, ECFieldElement x, ECFieldElement y) - { - ulong[] ax = this.x, bx = ((SecT571FieldElement)b).x; - ulong[] xx = ((SecT571FieldElement)x).x, yx = ((SecT571FieldElement)y).x; - - ulong[] tt = Nat576.CreateExt64(); - SecT571Field.MultiplyAddToExt(ax, bx, tt); - SecT571Field.MultiplyAddToExt(xx, yx, tt); - - ulong[] z = Nat576.Create64(); - SecT571Field.Reduce(tt, z); - return new SecT571FieldElement(z); - } - - public override ECFieldElement Divide(ECFieldElement b) - { - return Multiply(b.Invert()); - } - - public override ECFieldElement Negate() - { - return this; - } - - public override ECFieldElement Square() - { - ulong[] z = Nat576.Create64(); - SecT571Field.Square(x, z); - return new SecT571FieldElement(z); - } - - public override ECFieldElement SquareMinusProduct(ECFieldElement x, ECFieldElement y) - { - return SquarePlusProduct(x, y); - } - - public override ECFieldElement SquarePlusProduct(ECFieldElement x, ECFieldElement y) - { - ulong[] ax = this.x; - ulong[] xx = ((SecT571FieldElement)x).x, yx = ((SecT571FieldElement)y).x; - - ulong[] tt = Nat576.CreateExt64(); - SecT571Field.SquareAddToExt(ax, tt); - SecT571Field.MultiplyAddToExt(xx, yx, tt); - - ulong[] z = Nat576.Create64(); - SecT571Field.Reduce(tt, z); - return new SecT571FieldElement(z); - } - - public override ECFieldElement SquarePow(int pow) - { - if (pow < 1) - return this; - - ulong[] z = Nat576.Create64(); - SecT571Field.SquareN(x, pow, z); - return new SecT571FieldElement(z); - } - - public override ECFieldElement Invert() - { - ulong[] z = Nat576.Create64(); - SecT571Field.Invert(x, z); - return new SecT571FieldElement(z); - } - - public override ECFieldElement Sqrt() - { - ulong[] z = Nat576.Create64(); - SecT571Field.Sqrt(x, z); - return new SecT571FieldElement(z); - } - - public virtual int Representation - { - get { return F2mFieldElement.Ppb; } - } - - public virtual int M - { - get { return 571; } - } - - public virtual int K1 - { - get { return 2; } - } - - public virtual int K2 - { - get { return 5; } - } - - public virtual int K3 - { - get { return 10; } - } - - public override bool Equals(object obj) - { - return Equals(obj as SecT571FieldElement); - } - - public override bool Equals(ECFieldElement other) - { - return Equals(other as SecT571FieldElement); - } - - public virtual bool Equals(SecT571FieldElement other) - { - if (this == other) - return true; - if (null == other) - return false; - return Nat576.Eq64(x, other.x); - } - - public override int GetHashCode() - { - return 5711052 ^ Arrays.GetHashCode(x, 0, 9); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT571K1Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT571K1Curve.cs deleted file mode 100644 index f5806f0..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT571K1Curve.cs +++ /dev/null @@ -1,104 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.EC.Multiplier; -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT571K1Curve - : AbstractF2mCurve - { - private const int SecT571K1_DEFAULT_COORDS = COORD_LAMBDA_PROJECTIVE; - - protected readonly SecT571K1Point m_infinity; - - public SecT571K1Curve() - : base(571, 2, 5, 10) - { - this.m_infinity = new SecT571K1Point(this, null, null); - - this.m_a = FromBigInteger(BigInteger.Zero); - this.m_b = FromBigInteger(BigInteger.One); - this.m_order = new BigInteger(1, Hex.Decode("020000000000000000000000000000000000000000000000000000000000000000000000131850E1F19A63E4B391A8DB917F4138B630D84BE5D639381E91DEB45CFE778F637C1001")); - this.m_cofactor = BigInteger.ValueOf(4); - - this.m_coord = SecT571K1_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecT571K1Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_LAMBDA_PROJECTIVE: - return true; - default: - return false; - } - } - - protected override ECMultiplier CreateDefaultMultiplier() - { - return new WTauNafMultiplier(); - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return 571; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecT571FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecT571K1Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecT571K1Point(this, x, y, zs, withCompression); - } - - public override bool IsKoblitz - { - get { return true; } - } - - public virtual int M - { - get { return 571; } - } - - public virtual bool IsTrinomial - { - get { return false; } - } - - public virtual int K1 - { - get { return 2; } - } - - public virtual int K2 - { - get { return 5; } - } - - public virtual int K3 - { - get { return 10; } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT571K1Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT571K1Point.cs deleted file mode 100644 index deaaf0c..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT571K1Point.cs +++ /dev/null @@ -1,289 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT571K1Point - : AbstractF2mPoint - { - /** - * @deprecated Use ECCurve.createPoint to construct points - */ - public SecT571K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * @deprecated per-point compression property will be removed, refer {@link #getEncoded(bool)} - */ - public SecT571K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecT571K1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecT571K1Point(null, this.AffineXCoord, this.AffineYCoord); // earlier JDK - } - - public override ECFieldElement YCoord - { - get - { - ECFieldElement X = RawXCoord, L = RawYCoord; - - if (this.IsInfinity || X.IsZero) - return L; - - // Y is actually Lambda (X + Y/X) here; convert to affine value on the fly - ECFieldElement Y = L.Add(X).Multiply(X); - - ECFieldElement Z = RawZCoords[0]; - if (!Z.IsOne) - { - Y = Y.Divide(Z); - } - - return Y; - } - } - - protected internal override bool CompressionYTilde - { - get - { - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return false; - - ECFieldElement Y = this.RawYCoord; - - // Y is actually Lambda (X + Y/X) here - return Y.TestBitZero() != X.TestBitZero(); - } - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - ECFieldElement X2 = b.RawXCoord; - - if (X1.IsZero) - { - if (X2.IsZero) - return curve.Infinity; - - return b.Add(this); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord, Z2 = b.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement U2 = X2, S2 = L2; - if (!Z1IsOne) - { - U2 = U2.Multiply(Z1); - S2 = S2.Multiply(Z1); - } - - bool Z2IsOne = Z2.IsOne; - ECFieldElement U1 = X1, S1 = L1; - if (!Z2IsOne) - { - U1 = U1.Multiply(Z2); - S1 = S1.Multiply(Z2); - } - - ECFieldElement A = S1.Add(S2); - ECFieldElement B = U1.Add(U2); - - if (B.IsZero) - { - if (A.IsZero) - return Twice(); - - return curve.Infinity; - } - - ECFieldElement X3, L3, Z3; - if (X2.IsZero) - { - // TODO This can probably be optimized quite a bit - ECPoint p = this.Normalize(); - X1 = p.XCoord; - ECFieldElement Y1 = p.YCoord; - - ECFieldElement Y2 = L2; - ECFieldElement L = Y1.Add(Y2).Divide(X1); - - X3 = L.Square().Add(L).Add(X1); - if (X3.IsZero) - { - return new SecT571K1Point(curve, X3, curve.B, IsCompressed); - } - - ECFieldElement Y3 = L.Multiply(X1.Add(X3)).Add(X3).Add(Y1); - L3 = Y3.Divide(X3).Add(X3); - Z3 = curve.FromBigInteger(BigInteger.One); - } - else - { - B = B.Square(); - - ECFieldElement AU1 = A.Multiply(U1); - ECFieldElement AU2 = A.Multiply(U2); - - X3 = AU1.Multiply(AU2); - if (X3.IsZero) - { - return new SecT571K1Point(curve, X3, curve.B, IsCompressed); - } - - ECFieldElement ABZ2 = A.Multiply(B); - if (!Z2IsOne) - { - ABZ2 = ABZ2.Multiply(Z2); - } - - L3 = AU2.Add(B).SquarePlusProduct(ABZ2, L1.Add(Z1)); - - Z3 = ABZ2; - if (!Z1IsOne) - { - Z3 = Z3.Multiply(Z1); - } - } - - return new SecT571K1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return curve.Infinity; - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement Z1Sq = Z1IsOne ? Z1 : Z1.Square(); - ECFieldElement T; - if (Z1IsOne) - { - T = L1.Square().Add(L1); - } - else - { - T = L1.Add(Z1).Multiply(L1); - } - - if (T.IsZero) - { - return new SecT571K1Point(curve, T, curve.B, IsCompressed); - } - - ECFieldElement X3 = T.Square(); - ECFieldElement Z3 = Z1IsOne ? T : T.Multiply(Z1Sq); - - ECFieldElement t1 = L1.Add(X1).Square(); - ECFieldElement t2 = Z1IsOne ? Z1 : Z1Sq.Square(); - ECFieldElement L3 = t1.Add(T).Add(Z1Sq).Multiply(t1).Add(t2).Add(X3).Add(Z3); - - return new SecT571K1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return b; - } - - // NOTE: TwicePlus() only optimized for lambda-affine argument - ECFieldElement X2 = b.RawXCoord, Z2 = b.RawZCoords[0]; - if (X2.IsZero || !Z2.IsOne) - { - return Twice().Add(b); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord; - - ECFieldElement X1Sq = X1.Square(); - ECFieldElement L1Sq = L1.Square(); - ECFieldElement Z1Sq = Z1.Square(); - ECFieldElement L1Z1 = L1.Multiply(Z1); - - ECFieldElement T = L1Sq.Add(L1Z1); - ECFieldElement L2plus1 = L2.AddOne(); - ECFieldElement A = L2plus1.Multiply(Z1Sq).Add(L1Sq).MultiplyPlusProduct(T, X1Sq, Z1Sq); - ECFieldElement X2Z1Sq = X2.Multiply(Z1Sq); - ECFieldElement B = X2Z1Sq.Add(T).Square(); - - if (B.IsZero) - { - if (A.IsZero) - return b.Twice(); - - return curve.Infinity; - } - - if (A.IsZero) - { - return new SecT571K1Point(curve, A, curve.B, IsCompressed); - } - - ECFieldElement X3 = A.Square().Multiply(X2Z1Sq); - ECFieldElement Z3 = A.Multiply(B).Multiply(Z1Sq); - ECFieldElement L3 = A.Add(B).Square().MultiplyPlusProduct(T, L2plus1, Z3); - - return new SecT571K1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Negate() - { - if (this.IsInfinity) - return this; - - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return this; - - // L is actually Lambda (X + Y/X) here - ECFieldElement L = this.RawYCoord, Z = this.RawZCoords[0]; - return new SecT571K1Point(Curve, X, L.Add(Z), new ECFieldElement[] { Z }, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT571R1Curve.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT571R1Curve.cs deleted file mode 100644 index 082afa5..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT571R1Curve.cs +++ /dev/null @@ -1,102 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT571R1Curve - : AbstractF2mCurve - { - private const int SecT571R1_DEFAULT_COORDS = COORD_LAMBDA_PROJECTIVE; - - protected readonly SecT571R1Point m_infinity; - - internal static readonly SecT571FieldElement SecT571R1_B = new SecT571FieldElement( - new BigInteger(1, Hex.Decode("02F40E7E2221F295DE297117B7F3D62F5C6A97FFCB8CEFF1CD6BA8CE4A9A18AD84FFABBD8EFA59332BE7AD6756A66E294AFD185A78FF12AA520E4DE739BACA0C7FFEFF7F2955727A"))); - internal static readonly SecT571FieldElement SecT571R1_B_SQRT = (SecT571FieldElement)SecT571R1_B.Sqrt(); - - public SecT571R1Curve() - : base(571, 2, 5, 10) - { - this.m_infinity = new SecT571R1Point(this, null, null); - - this.m_a = FromBigInteger(BigInteger.One); - this.m_b = SecT571R1_B; - this.m_order = new BigInteger(1, Hex.Decode("03FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFE661CE18FF55987308059B186823851EC7DD9CA1161DE93D5174D66E8382E9BB2FE84E47")); - this.m_cofactor = BigInteger.Two; - - this.m_coord = SecT571R1_DEFAULT_COORDS; - } - - protected override ECCurve CloneCurve() - { - return new SecT571R1Curve(); - } - - public override bool SupportsCoordinateSystem(int coord) - { - switch (coord) - { - case COORD_LAMBDA_PROJECTIVE: - return true; - default: - return false; - } - } - - public override ECPoint Infinity - { - get { return m_infinity; } - } - - public override int FieldSize - { - get { return 571; } - } - - public override ECFieldElement FromBigInteger(BigInteger x) - { - return new SecT571FieldElement(x); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression) - { - return new SecT571R1Point(this, x, y, withCompression); - } - - protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - { - return new SecT571R1Point(this, x, y, zs, withCompression); - } - - public override bool IsKoblitz - { - get { return false; } - } - - public virtual int M - { - get { return 571; } - } - - public virtual bool IsTrinomial - { - get { return false; } - } - - public virtual int K1 - { - get { return 2; } - } - - public virtual int K2 - { - get { return 5; } - } - - public virtual int K3 - { - get { return 10; } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/custom/sec/SecT571R1Point.cs b/bc-sharp-crypto/src/math/ec/custom/sec/SecT571R1Point.cs deleted file mode 100644 index 0d1fc98..0000000 --- a/bc-sharp-crypto/src/math/ec/custom/sec/SecT571R1Point.cs +++ /dev/null @@ -1,278 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC.Custom.Sec -{ - internal class SecT571R1Point - : AbstractF2mPoint - { - /** - * @deprecated Use ECCurve.createPoint to construct points - */ - public SecT571R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y) - : this(curve, x, y, false) - { - } - - /** - * @deprecated per-point compression property will be removed, refer {@link #getEncoded(bool)} - */ - public SecT571R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, bool withCompression) - : base(curve, x, y, withCompression) - { - if ((x == null) != (y == null)) - throw new ArgumentException("Exactly one of the field elements is null"); - } - - internal SecT571R1Point(ECCurve curve, ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression) - : base(curve, x, y, zs, withCompression) - { - } - - protected override ECPoint Detach() - { - return new SecT571R1Point(null, AffineXCoord, AffineYCoord); - } - - public override ECFieldElement YCoord - { - get - { - ECFieldElement X = RawXCoord, L = RawYCoord; - - if (this.IsInfinity || X.IsZero) - return L; - - // Y is actually Lambda (X + Y/X) here; convert to affine value on the fly - ECFieldElement Y = L.Add(X).Multiply(X); - - ECFieldElement Z = RawZCoords[0]; - if (!Z.IsOne) - { - Y = Y.Divide(Z); - } - - return Y; - } - } - - protected internal override bool CompressionYTilde - { - get - { - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return false; - - ECFieldElement Y = this.RawYCoord; - - // Y is actually Lambda (X + Y/X) here - return Y.TestBitZero() != X.TestBitZero(); - } - } - - public override ECPoint Add(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - ECFieldElement X2 = b.RawXCoord; - - if (X1.IsZero) - { - if (X2.IsZero) - return curve.Infinity; - - return b.Add(this); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord, Z2 = b.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement U2 = X2, S2 = L2; - if (!Z1IsOne) - { - U2 = U2.Multiply(Z1); - S2 = S2.Multiply(Z1); - } - - bool Z2IsOne = Z2.IsOne; - ECFieldElement U1 = X1, S1 = L1; - if (!Z2IsOne) - { - U1 = U1.Multiply(Z2); - S1 = S1.Multiply(Z2); - } - - ECFieldElement A = S1.Add(S2); - ECFieldElement B = U1.Add(U2); - - if (B.IsZero) - { - if (A.IsZero) - return Twice(); - - return curve.Infinity; - } - - ECFieldElement X3, L3, Z3; - if (X2.IsZero) - { - // TODO This can probably be optimized quite a bit - ECPoint p = this.Normalize(); - X1 = p.XCoord; - ECFieldElement Y1 = p.YCoord; - - ECFieldElement Y2 = L2; - ECFieldElement L = Y1.Add(Y2).Divide(X1); - - X3 = L.Square().Add(L).Add(X1).AddOne(); - if (X3.IsZero) - { - return new SecT571R1Point(curve, X3, SecT571R1Curve.SecT571R1_B_SQRT, IsCompressed); - } - - ECFieldElement Y3 = L.Multiply(X1.Add(X3)).Add(X3).Add(Y1); - L3 = Y3.Divide(X3).Add(X3); - Z3 = curve.FromBigInteger(BigInteger.One); - } - else - { - B = B.Square(); - - ECFieldElement AU1 = A.Multiply(U1); - ECFieldElement AU2 = A.Multiply(U2); - - X3 = AU1.Multiply(AU2); - if (X3.IsZero) - { - return new SecT571R1Point(curve, X3, SecT571R1Curve.SecT571R1_B_SQRT, IsCompressed); - } - - ECFieldElement ABZ2 = A.Multiply(B); - if (!Z2IsOne) - { - ABZ2 = ABZ2.Multiply(Z2); - } - - L3 = AU2.Add(B).SquarePlusProduct(ABZ2, L1.Add(Z1)); - - Z3 = ABZ2; - if (!Z1IsOne) - { - Z3 = Z3.Multiply(Z1); - } - } - - return new SecT571R1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Twice() - { - if (this.IsInfinity) - return this; - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return curve.Infinity; - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - - bool Z1IsOne = Z1.IsOne; - ECFieldElement L1Z1 = Z1IsOne ? L1 : L1.Multiply(Z1); - ECFieldElement Z1Sq = Z1IsOne ? Z1 : Z1.Square(); - ECFieldElement T = L1.Square().Add(L1Z1).Add(Z1Sq); - if (T.IsZero) - { - return new SecT571R1Point(curve, T, SecT571R1Curve.SecT571R1_B_SQRT, IsCompressed); - } - - ECFieldElement X3 = T.Square(); - ECFieldElement Z3 = Z1IsOne ? T : T.Multiply(Z1Sq); - - ECFieldElement X1Z1 = Z1IsOne ? X1 : X1.Multiply(Z1); - ECFieldElement L3 = X1Z1.SquarePlusProduct(T, L1Z1).Add(X3).Add(Z3); - - return new SecT571R1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint TwicePlus(ECPoint b) - { - if (this.IsInfinity) - return b; - if (b.IsInfinity) - return Twice(); - - ECCurve curve = this.Curve; - - ECFieldElement X1 = this.RawXCoord; - if (X1.IsZero) - { - // A point with X == 0 is it's own Additive inverse - return b; - } - - ECFieldElement X2 = b.RawXCoord, Z2 = b.RawZCoords[0]; - if (X2.IsZero || !Z2.IsOne) - { - return Twice().Add(b); - } - - ECFieldElement L1 = this.RawYCoord, Z1 = this.RawZCoords[0]; - ECFieldElement L2 = b.RawYCoord; - - ECFieldElement X1Sq = X1.Square(); - ECFieldElement L1Sq = L1.Square(); - ECFieldElement Z1Sq = Z1.Square(); - ECFieldElement L1Z1 = L1.Multiply(Z1); - - ECFieldElement T = Z1Sq.Add(L1Sq).Add(L1Z1); - ECFieldElement A = L2.Multiply(Z1Sq).Add(L1Sq).MultiplyPlusProduct(T, X1Sq, Z1Sq); - ECFieldElement X2Z1Sq = X2.Multiply(Z1Sq); - ECFieldElement B = X2Z1Sq.Add(T).Square(); - - if (B.IsZero) - { - if (A.IsZero) - return b.Twice(); - - return curve.Infinity; - } - - if (A.IsZero) - { - return new SecT571R1Point(curve, A, SecT571R1Curve.SecT571R1_B_SQRT, IsCompressed); - } - - ECFieldElement X3 = A.Square().Multiply(X2Z1Sq); - ECFieldElement Z3 = A.Multiply(B).Multiply(Z1Sq); - ECFieldElement L3 = A.Add(B).Square().MultiplyPlusProduct(T, L2.AddOne(), Z3); - - return new SecT571R1Point(curve, X3, L3, new ECFieldElement[] { Z3 }, IsCompressed); - } - - public override ECPoint Negate() - { - if (this.IsInfinity) - return this; - - ECFieldElement X = this.RawXCoord; - if (X.IsZero) - return this; - - // L is actually Lambda (X + Y/X) here - ECFieldElement L = this.RawYCoord, Z = this.RawZCoords[0]; - return new SecT571R1Point(Curve, X, L.Add(Z), new ECFieldElement[] { Z }, IsCompressed); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/endo/ECEndomorphism.cs b/bc-sharp-crypto/src/math/ec/endo/ECEndomorphism.cs deleted file mode 100644 index dfb3213..0000000 --- a/bc-sharp-crypto/src/math/ec/endo/ECEndomorphism.cs +++ /dev/null @@ -1,11 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC.Endo -{ - public interface ECEndomorphism - { - ECPointMap PointMap { get; } - - bool HasEfficientPointMap { get; } - } -} diff --git a/bc-sharp-crypto/src/math/ec/endo/GlvEndomorphism.cs b/bc-sharp-crypto/src/math/ec/endo/GlvEndomorphism.cs deleted file mode 100644 index f65bdd6..0000000 --- a/bc-sharp-crypto/src/math/ec/endo/GlvEndomorphism.cs +++ /dev/null @@ -1,10 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC.Endo -{ - public interface GlvEndomorphism - : ECEndomorphism - { - BigInteger[] DecomposeScalar(BigInteger k); - } -} diff --git a/bc-sharp-crypto/src/math/ec/endo/GlvTypeBEndomorphism.cs b/bc-sharp-crypto/src/math/ec/endo/GlvTypeBEndomorphism.cs deleted file mode 100644 index d234d88..0000000 --- a/bc-sharp-crypto/src/math/ec/endo/GlvTypeBEndomorphism.cs +++ /dev/null @@ -1,55 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC.Endo -{ - public class GlvTypeBEndomorphism - : GlvEndomorphism - { - protected readonly ECCurve m_curve; - protected readonly GlvTypeBParameters m_parameters; - protected readonly ECPointMap m_pointMap; - - public GlvTypeBEndomorphism(ECCurve curve, GlvTypeBParameters parameters) - { - this.m_curve = curve; - this.m_parameters = parameters; - this.m_pointMap = new ScaleXPointMap(curve.FromBigInteger(parameters.Beta)); - } - - public virtual BigInteger[] DecomposeScalar(BigInteger k) - { - int bits = m_parameters.Bits; - BigInteger b1 = CalculateB(k, m_parameters.G1, bits); - BigInteger b2 = CalculateB(k, m_parameters.G2, bits); - - BigInteger[] v1 = m_parameters.V1, v2 = m_parameters.V2; - BigInteger a = k.Subtract((b1.Multiply(v1[0])).Add(b2.Multiply(v2[0]))); - BigInteger b = (b1.Multiply(v1[1])).Add(b2.Multiply(v2[1])).Negate(); - - return new BigInteger[]{ a, b }; - } - - public virtual ECPointMap PointMap - { - get { return m_pointMap; } - } - - public virtual bool HasEfficientPointMap - { - get { return true; } - } - - protected virtual BigInteger CalculateB(BigInteger k, BigInteger g, int t) - { - bool negative = (g.SignValue < 0); - BigInteger b = k.Multiply(g.Abs()); - bool extra = b.TestBit(t - 1); - b = b.ShiftRight(t); - if (extra) - { - b = b.Add(BigInteger.One); - } - return negative ? b.Negate() : b; - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/endo/GlvTypeBParameters.cs b/bc-sharp-crypto/src/math/ec/endo/GlvTypeBParameters.cs deleted file mode 100644 index f93dfaf..0000000 --- a/bc-sharp-crypto/src/math/ec/endo/GlvTypeBParameters.cs +++ /dev/null @@ -1,60 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC.Endo -{ - public class GlvTypeBParameters - { - protected readonly BigInteger m_beta; - protected readonly BigInteger m_lambda; - protected readonly BigInteger[] m_v1, m_v2; - protected readonly BigInteger m_g1, m_g2; - protected readonly int m_bits; - - public GlvTypeBParameters(BigInteger beta, BigInteger lambda, BigInteger[] v1, BigInteger[] v2, - BigInteger g1, BigInteger g2, int bits) - { - this.m_beta = beta; - this.m_lambda = lambda; - this.m_v1 = v1; - this.m_v2 = v2; - this.m_g1 = g1; - this.m_g2 = g2; - this.m_bits = bits; - } - - public virtual BigInteger Beta - { - get { return m_beta; } - } - - public virtual BigInteger Lambda - { - get { return m_lambda; } - } - - public virtual BigInteger[] V1 - { - get { return m_v1; } - } - - public virtual BigInteger[] V2 - { - get { return m_v2; } - } - - public virtual BigInteger G1 - { - get { return m_g1; } - } - - public virtual BigInteger G2 - { - get { return m_g2; } - } - - public virtual int Bits - { - get { return m_bits; } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/multiplier/AbstractECMultiplier.cs b/bc-sharp-crypto/src/math/ec/multiplier/AbstractECMultiplier.cs deleted file mode 100644 index 5178813..0000000 --- a/bc-sharp-crypto/src/math/ec/multiplier/AbstractECMultiplier.cs +++ /dev/null @@ -1,24 +0,0 @@ -namespace Org.BouncyCastle.Math.EC.Multiplier -{ - public abstract class AbstractECMultiplier - : ECMultiplier - { - public virtual ECPoint Multiply(ECPoint p, BigInteger k) - { - int sign = k.SignValue; - if (sign == 0 || p.IsInfinity) - return p.Curve.Infinity; - - ECPoint positive = MultiplyPositive(p, k.Abs()); - ECPoint result = sign > 0 ? positive : positive.Negate(); - - /* - * Although the various multipliers ought not to produce invalid output under normal - * circumstances, a final check here is advised to guard against fault attacks. - */ - return ECAlgorithms.ValidatePoint(result); - } - - protected abstract ECPoint MultiplyPositive(ECPoint p, BigInteger k); - } -} diff --git a/bc-sharp-crypto/src/math/ec/multiplier/DoubleAddMultiplier.cs b/bc-sharp-crypto/src/math/ec/multiplier/DoubleAddMultiplier.cs deleted file mode 100644 index 18a72c0..0000000 --- a/bc-sharp-crypto/src/math/ec/multiplier/DoubleAddMultiplier.cs +++ /dev/null @@ -1,24 +0,0 @@ -namespace Org.BouncyCastle.Math.EC.Multiplier -{ - public class DoubleAddMultiplier - : AbstractECMultiplier - { - /** - * Joye's double-add algorithm. - */ - protected override ECPoint MultiplyPositive(ECPoint p, BigInteger k) - { - ECPoint[] R = new ECPoint[]{ p.Curve.Infinity, p }; - - int n = k.BitLength; - for (int i = 0; i < n; ++i) - { - int b = k.TestBit(i) ? 1 : 0; - int bp = 1 - b; - R[bp] = R[bp].TwicePlus(R[b]); - } - - return R[0]; - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/multiplier/ECMultiplier.cs b/bc-sharp-crypto/src/math/ec/multiplier/ECMultiplier.cs deleted file mode 100644 index 8d6136b..0000000 --- a/bc-sharp-crypto/src/math/ec/multiplier/ECMultiplier.cs +++ /dev/null @@ -1,18 +0,0 @@ -namespace Org.BouncyCastle.Math.EC.Multiplier -{ - /** - * Interface for classes encapsulating a point multiplication algorithm - * for ECPoints. - */ - public interface ECMultiplier - { - /** - * Multiplies the ECPoint p by k, i.e. - * p is added k times to itself. - * @param p The ECPoint to be multiplied. - * @param k The factor by which p is multiplied. - * @return p multiplied by k. - */ - ECPoint Multiply(ECPoint p, BigInteger k); - } -} diff --git a/bc-sharp-crypto/src/math/ec/multiplier/FixedPointCombMultiplier.cs b/bc-sharp-crypto/src/math/ec/multiplier/FixedPointCombMultiplier.cs deleted file mode 100644 index a8ef5a7..0000000 --- a/bc-sharp-crypto/src/math/ec/multiplier/FixedPointCombMultiplier.cs +++ /dev/null @@ -1,59 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC.Multiplier -{ - public class FixedPointCombMultiplier - : AbstractECMultiplier - { - protected override ECPoint MultiplyPositive(ECPoint p, BigInteger k) - { - ECCurve c = p.Curve; - int size = FixedPointUtilities.GetCombSize(c); - - if (k.BitLength > size) - { - /* - * TODO The comb works best when the scalars are less than the (possibly unknown) order. - * Still, if we want to handle larger scalars, we could allow customization of the comb - * size, or alternatively we could deal with the 'extra' bits either by running the comb - * multiple times as necessary, or by using an alternative multiplier as prelude. - */ - throw new InvalidOperationException("fixed-point comb doesn't support scalars larger than the curve order"); - } - - int minWidth = GetWidthForCombSize(size); - - FixedPointPreCompInfo info = FixedPointUtilities.Precompute(p, minWidth); - ECPoint[] lookupTable = info.PreComp; - int width = info.Width; - - int d = (size + width - 1) / width; - - ECPoint R = c.Infinity; - - int top = d * width - 1; - for (int i = 0; i < d; ++i) - { - int index = 0; - - for (int j = top - i; j >= 0; j -= d) - { - index <<= 1; - if (k.TestBit(j)) - { - index |= 1; - } - } - - R = R.TwicePlus(lookupTable[index]); - } - - return R; - } - - protected virtual int GetWidthForCombSize(int combSize) - { - return combSize > 257 ? 6 : 5; - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/multiplier/FixedPointPreCompInfo.cs b/bc-sharp-crypto/src/math/ec/multiplier/FixedPointPreCompInfo.cs deleted file mode 100644 index 56a6326..0000000 --- a/bc-sharp-crypto/src/math/ec/multiplier/FixedPointPreCompInfo.cs +++ /dev/null @@ -1,34 +0,0 @@ -namespace Org.BouncyCastle.Math.EC.Multiplier -{ - /** - * Class holding precomputation data for fixed-point multiplications. - */ - public class FixedPointPreCompInfo - : PreCompInfo - { - /** - * Array holding the precomputed ECPoints used for a fixed - * point multiplication. - */ - protected ECPoint[] m_preComp = null; - - /** - * The width used for the precomputation. If a larger width precomputation - * is already available this may be larger than was requested, so calling - * code should refer to the actual width. - */ - protected int m_width = -1; - - public virtual ECPoint[] PreComp - { - get { return m_preComp; } - set { this.m_preComp = value; } - } - - public virtual int Width - { - get { return m_width; } - set { this.m_width = value; } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/multiplier/FixedPointUtilities.cs b/bc-sharp-crypto/src/math/ec/multiplier/FixedPointUtilities.cs deleted file mode 100644 index d927d01..0000000 --- a/bc-sharp-crypto/src/math/ec/multiplier/FixedPointUtilities.cs +++ /dev/null @@ -1,72 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC.Multiplier -{ - public class FixedPointUtilities - { - public static readonly string PRECOMP_NAME = "bc_fixed_point"; - - public static int GetCombSize(ECCurve c) - { - BigInteger order = c.Order; - return order == null ? c.FieldSize + 1 : order.BitLength; - } - - public static FixedPointPreCompInfo GetFixedPointPreCompInfo(PreCompInfo preCompInfo) - { - if ((preCompInfo != null) && (preCompInfo is FixedPointPreCompInfo)) - { - return (FixedPointPreCompInfo)preCompInfo; - } - - return new FixedPointPreCompInfo(); - } - - public static FixedPointPreCompInfo Precompute(ECPoint p, int minWidth) - { - ECCurve c = p.Curve; - - int n = 1 << minWidth; - FixedPointPreCompInfo info = GetFixedPointPreCompInfo(c.GetPreCompInfo(p, PRECOMP_NAME)); - ECPoint[] lookupTable = info.PreComp; - - if (lookupTable == null || lookupTable.Length < n) - { - int bits = GetCombSize(c); - int d = (bits + minWidth - 1) / minWidth; - - ECPoint[] pow2Table = new ECPoint[minWidth]; - pow2Table[0] = p; - for (int i = 1; i < minWidth; ++i) - { - pow2Table[i] = pow2Table[i - 1].TimesPow2(d); - } - - c.NormalizeAll(pow2Table); - - lookupTable = new ECPoint[n]; - lookupTable[0] = c.Infinity; - - for (int bit = minWidth - 1; bit >= 0; --bit) - { - ECPoint pow2 = pow2Table[bit]; - - int step = 1 << bit; - for (int i = step; i < n; i += (step << 1)) - { - lookupTable[i] = lookupTable[i - step].Add(pow2); - } - } - - c.NormalizeAll(lookupTable); - - info.PreComp = lookupTable; - info.Width = minWidth; - - c.SetPreCompInfo(p, PRECOMP_NAME, info); - } - - return info; - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/multiplier/GlvMultiplier.cs b/bc-sharp-crypto/src/math/ec/multiplier/GlvMultiplier.cs deleted file mode 100644 index f190494..0000000 --- a/bc-sharp-crypto/src/math/ec/multiplier/GlvMultiplier.cs +++ /dev/null @@ -1,40 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.EC.Endo; - -namespace Org.BouncyCastle.Math.EC.Multiplier -{ - public class GlvMultiplier - : AbstractECMultiplier - { - protected readonly ECCurve curve; - protected readonly GlvEndomorphism glvEndomorphism; - - public GlvMultiplier(ECCurve curve, GlvEndomorphism glvEndomorphism) - { - if (curve == null || curve.Order == null) - throw new ArgumentException("Need curve with known group order", "curve"); - - this.curve = curve; - this.glvEndomorphism = glvEndomorphism; - } - - protected override ECPoint MultiplyPositive(ECPoint p, BigInteger k) - { - if (!curve.Equals(p.Curve)) - throw new InvalidOperationException(); - - BigInteger n = p.Curve.Order; - BigInteger[] ab = glvEndomorphism.DecomposeScalar(k.Mod(n)); - BigInteger a = ab[0], b = ab[1]; - - ECPointMap pointMap = glvEndomorphism.PointMap; - if (glvEndomorphism.HasEfficientPointMap) - { - return ECAlgorithms.ImplShamirsTrickWNaf(p, a, pointMap, b); - } - - return ECAlgorithms.ImplShamirsTrickWNaf(p, a, pointMap.Map(p), b); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/multiplier/MixedNafR2LMultiplier.cs b/bc-sharp-crypto/src/math/ec/multiplier/MixedNafR2LMultiplier.cs deleted file mode 100644 index a4c2018..0000000 --- a/bc-sharp-crypto/src/math/ec/multiplier/MixedNafR2LMultiplier.cs +++ /dev/null @@ -1,75 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC.Multiplier -{ - /** - * Class implementing the NAF (Non-Adjacent Form) multiplication algorithm (right-to-left) using - * mixed coordinates. - */ - public class MixedNafR2LMultiplier - : AbstractECMultiplier - { - protected readonly int additionCoord, doublingCoord; - - /** - * By default, addition will be done in Jacobian coordinates, and doubling will be done in - * Modified Jacobian coordinates (independent of the original coordinate system of each point). - */ - public MixedNafR2LMultiplier() - : this(ECCurve.COORD_JACOBIAN, ECCurve.COORD_JACOBIAN_MODIFIED) - { - } - - public MixedNafR2LMultiplier(int additionCoord, int doublingCoord) - { - this.additionCoord = additionCoord; - this.doublingCoord = doublingCoord; - } - - protected override ECPoint MultiplyPositive(ECPoint p, BigInteger k) - { - ECCurve curveOrig = p.Curve; - - ECCurve curveAdd = ConfigureCurve(curveOrig, additionCoord); - ECCurve curveDouble = ConfigureCurve(curveOrig, doublingCoord); - - int[] naf = WNafUtilities.GenerateCompactNaf(k); - - ECPoint Ra = curveAdd.Infinity; - ECPoint Td = curveDouble.ImportPoint(p); - - int zeroes = 0; - for (int i = 0; i < naf.Length; ++i) - { - int ni = naf[i]; - int digit = ni >> 16; - zeroes += ni & 0xFFFF; - - Td = Td.TimesPow2(zeroes); - - ECPoint Tj = curveAdd.ImportPoint(Td); - if (digit < 0) - { - Tj = Tj.Negate(); - } - - Ra = Ra.Add(Tj); - - zeroes = 1; - } - - return curveOrig.ImportPoint(Ra); - } - - protected virtual ECCurve ConfigureCurve(ECCurve c, int coord) - { - if (c.CoordinateSystem == coord) - return c; - - if (!c.SupportsCoordinateSystem(coord)) - throw new ArgumentException("Coordinate system " + coord + " not supported by this curve", "coord"); - - return c.Configure().SetCoordinateSystem(coord).Create(); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/multiplier/MontgomeryLadderMultiplier.cs b/bc-sharp-crypto/src/math/ec/multiplier/MontgomeryLadderMultiplier.cs deleted file mode 100644 index e2470a3..0000000 --- a/bc-sharp-crypto/src/math/ec/multiplier/MontgomeryLadderMultiplier.cs +++ /dev/null @@ -1,25 +0,0 @@ -namespace Org.BouncyCastle.Math.EC.Multiplier -{ - public class MontgomeryLadderMultiplier - : AbstractECMultiplier - { - /** - * Montgomery ladder. - */ - protected override ECPoint MultiplyPositive(ECPoint p, BigInteger k) - { - ECPoint[] R = new ECPoint[]{ p.Curve.Infinity, p }; - - int n = k.BitLength; - int i = n; - while (--i >= 0) - { - int b = k.TestBit(i) ? 1 : 0; - int bp = 1 - b; - R[bp] = R[bp].Add(R[b]); - R[b] = R[b].Twice(); - } - return R[0]; - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/multiplier/NafL2RMultiplier.cs b/bc-sharp-crypto/src/math/ec/multiplier/NafL2RMultiplier.cs deleted file mode 100644 index ac80cf9..0000000 --- a/bc-sharp-crypto/src/math/ec/multiplier/NafL2RMultiplier.cs +++ /dev/null @@ -1,30 +0,0 @@ -namespace Org.BouncyCastle.Math.EC.Multiplier -{ - /** - * Class implementing the NAF (Non-Adjacent Form) multiplication algorithm (left-to-right). - */ - public class NafL2RMultiplier - : AbstractECMultiplier - { - protected override ECPoint MultiplyPositive(ECPoint p, BigInteger k) - { - int[] naf = WNafUtilities.GenerateCompactNaf(k); - - ECPoint addP = p.Normalize(), subP = addP.Negate(); - - ECPoint R = p.Curve.Infinity; - - int i = naf.Length; - while (--i >= 0) - { - int ni = naf[i]; - int digit = ni >> 16, zeroes = ni & 0xFFFF; - - R = R.TwicePlus(digit < 0 ? subP : addP); - R = R.TimesPow2(zeroes); - } - - return R; - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/multiplier/NafR2LMultiplier.cs b/bc-sharp-crypto/src/math/ec/multiplier/NafR2LMultiplier.cs deleted file mode 100644 index 1fa69fa..0000000 --- a/bc-sharp-crypto/src/math/ec/multiplier/NafR2LMultiplier.cs +++ /dev/null @@ -1,31 +0,0 @@ -namespace Org.BouncyCastle.Math.EC.Multiplier -{ - /** - * Class implementing the NAF (Non-Adjacent Form) multiplication algorithm (right-to-left). - */ - public class NafR2LMultiplier - : AbstractECMultiplier - { - protected override ECPoint MultiplyPositive(ECPoint p, BigInteger k) - { - int[] naf = WNafUtilities.GenerateCompactNaf(k); - - ECPoint R0 = p.Curve.Infinity, R1 = p; - - int zeroes = 0; - for (int i = 0; i < naf.Length; ++i) - { - int ni = naf[i]; - int digit = ni >> 16; - zeroes += ni & 0xFFFF; - - R1 = R1.TimesPow2(zeroes); - R0 = R0.Add(digit < 0 ? R1.Negate() : R1); - - zeroes = 1; - } - - return R0; - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/multiplier/PreCompInfo.cs b/bc-sharp-crypto/src/math/ec/multiplier/PreCompInfo.cs deleted file mode 100644 index 5c32892..0000000 --- a/bc-sharp-crypto/src/math/ec/multiplier/PreCompInfo.cs +++ /dev/null @@ -1,11 +0,0 @@ -namespace Org.BouncyCastle.Math.EC.Multiplier -{ - /** - * Interface for classes storing precomputation data for multiplication - * algorithms. Used as a Memento (see GOF patterns) for - * WNafMultiplier. - */ - public interface PreCompInfo - { - } -} diff --git a/bc-sharp-crypto/src/math/ec/multiplier/ReferenceMultiplier.cs b/bc-sharp-crypto/src/math/ec/multiplier/ReferenceMultiplier.cs deleted file mode 100644 index 4848ada..0000000 --- a/bc-sharp-crypto/src/math/ec/multiplier/ReferenceMultiplier.cs +++ /dev/null @@ -1,11 +0,0 @@ -namespace Org.BouncyCastle.Math.EC.Multiplier -{ - public class ReferenceMultiplier - : AbstractECMultiplier - { - protected override ECPoint MultiplyPositive(ECPoint p, BigInteger k) - { - return ECAlgorithms.ReferenceMultiply(p, k); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/multiplier/WNafL2RMultiplier.cs b/bc-sharp-crypto/src/math/ec/multiplier/WNafL2RMultiplier.cs deleted file mode 100644 index f671f6a..0000000 --- a/bc-sharp-crypto/src/math/ec/multiplier/WNafL2RMultiplier.cs +++ /dev/null @@ -1,98 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC.Multiplier -{ - /** - * Class implementing the WNAF (Window Non-Adjacent Form) multiplication - * algorithm. - */ - public class WNafL2RMultiplier - : AbstractECMultiplier - { - /** - * Multiplies this by an integer k using the - * Window NAF method. - * @param k The integer by which this is multiplied. - * @return A new ECPoint which equals this - * multiplied by k. - */ - protected override ECPoint MultiplyPositive(ECPoint p, BigInteger k) - { - // Clamp the window width in the range [2, 16] - int width = System.Math.Max(2, System.Math.Min(16, GetWindowSize(k.BitLength))); - - WNafPreCompInfo wnafPreCompInfo = WNafUtilities.Precompute(p, width, true); - ECPoint[] preComp = wnafPreCompInfo.PreComp; - ECPoint[] preCompNeg = wnafPreCompInfo.PreCompNeg; - - int[] wnaf = WNafUtilities.GenerateCompactWindowNaf(width, k); - - ECPoint R = p.Curve.Infinity; - - int i = wnaf.Length; - - /* - * NOTE: We try to optimize the first window using the precomputed points to substitute an - * addition for 2 or more doublings. - */ - if (i > 1) - { - int wi = wnaf[--i]; - int digit = wi >> 16, zeroes = wi & 0xFFFF; - - int n = System.Math.Abs(digit); - ECPoint[] table = digit < 0 ? preCompNeg : preComp; - - // Optimization can only be used for values in the lower half of the table - if ((n << 2) < (1 << width)) - { - int highest = LongArray.BitLengths[n]; - - // TODO Get addition/doubling cost ratio from curve and compare to 'scale' to see if worth substituting? - int scale = width - highest; - int lowBits = n ^ (1 << (highest - 1)); - - int i1 = ((1 << (width - 1)) - 1); - int i2 = (lowBits << scale) + 1; - R = table[i1 >> 1].Add(table[i2 >> 1]); - - zeroes -= scale; - - //Console.WriteLine("Optimized: 2^" + scale + " * " + n + " = " + i1 + " + " + i2); - } - else - { - R = table[n >> 1]; - } - - R = R.TimesPow2(zeroes); - } - - while (i > 0) - { - int wi = wnaf[--i]; - int digit = wi >> 16, zeroes = wi & 0xFFFF; - - int n = System.Math.Abs(digit); - ECPoint[] table = digit < 0 ? preCompNeg : preComp; - ECPoint r = table[n >> 1]; - - R = R.TwicePlus(r); - R = R.TimesPow2(zeroes); - } - - return R; - } - - /** - * Determine window width to use for a scalar multiplication of the given size. - * - * @param bits the bit-length of the scalar to multiply by - * @return the window size to use - */ - protected virtual int GetWindowSize(int bits) - { - return WNafUtilities.GetWindowSize(bits); - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/multiplier/WNafPreCompInfo.cs b/bc-sharp-crypto/src/math/ec/multiplier/WNafPreCompInfo.cs deleted file mode 100644 index 7e0a731..0000000 --- a/bc-sharp-crypto/src/math/ec/multiplier/WNafPreCompInfo.cs +++ /dev/null @@ -1,46 +0,0 @@ -namespace Org.BouncyCastle.Math.EC.Multiplier -{ - /** - * Class holding precomputation data for the WNAF (Window Non-Adjacent Form) - * algorithm. - */ - public class WNafPreCompInfo - : PreCompInfo - { - /** - * Array holding the precomputed ECPoints used for a Window - * NAF multiplication. - */ - protected ECPoint[] m_preComp = null; - - /** - * Array holding the negations of the precomputed ECPoints used - * for a Window NAF multiplication. - */ - protected ECPoint[] m_preCompNeg = null; - - /** - * Holds an ECPoint representing Twice(this). Used for the - * Window NAF multiplication to create or extend the precomputed values. - */ - protected ECPoint m_twice = null; - - public virtual ECPoint[] PreComp - { - get { return m_preComp; } - set { this.m_preComp = value; } - } - - public virtual ECPoint[] PreCompNeg - { - get { return m_preCompNeg; } - set { this.m_preCompNeg = value; } - } - - public virtual ECPoint Twice - { - get { return m_twice; } - set { this.m_twice = value; } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/multiplier/WNafUtilities.cs b/bc-sharp-crypto/src/math/ec/multiplier/WNafUtilities.cs deleted file mode 100644 index 7d565df..0000000 --- a/bc-sharp-crypto/src/math/ec/multiplier/WNafUtilities.cs +++ /dev/null @@ -1,524 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.EC.Multiplier -{ - public abstract class WNafUtilities - { - public static readonly string PRECOMP_NAME = "bc_wnaf"; - - private static readonly int[] DEFAULT_WINDOW_SIZE_CUTOFFS = new int[]{ 13, 41, 121, 337, 897, 2305 }; - - private static readonly byte[] EMPTY_BYTES = new byte[0]; - private static readonly int[] EMPTY_INTS = new int[0]; - private static readonly ECPoint[] EMPTY_POINTS = new ECPoint[0]; - - public static int[] GenerateCompactNaf(BigInteger k) - { - if ((k.BitLength >> 16) != 0) - throw new ArgumentException("must have bitlength < 2^16", "k"); - if (k.SignValue == 0) - return EMPTY_INTS; - - BigInteger _3k = k.ShiftLeft(1).Add(k); - - int bits = _3k.BitLength; - int[] naf = new int[bits >> 1]; - - BigInteger diff = _3k.Xor(k); - - int highBit = bits - 1, length = 0, zeroes = 0; - for (int i = 1; i < highBit; ++i) - { - if (!diff.TestBit(i)) - { - ++zeroes; - continue; - } - - int digit = k.TestBit(i) ? -1 : 1; - naf[length++] = (digit << 16) | zeroes; - zeroes = 1; - ++i; - } - - naf[length++] = (1 << 16) | zeroes; - - if (naf.Length > length) - { - naf = Trim(naf, length); - } - - return naf; - } - - public static int[] GenerateCompactWindowNaf(int width, BigInteger k) - { - if (width == 2) - { - return GenerateCompactNaf(k); - } - - if (width < 2 || width > 16) - throw new ArgumentException("must be in the range [2, 16]", "width"); - if ((k.BitLength >> 16) != 0) - throw new ArgumentException("must have bitlength < 2^16", "k"); - if (k.SignValue == 0) - return EMPTY_INTS; - - int[] wnaf = new int[k.BitLength / width + 1]; - - // 2^width and a mask and sign bit set accordingly - int pow2 = 1 << width; - int mask = pow2 - 1; - int sign = pow2 >> 1; - - bool carry = false; - int length = 0, pos = 0; - - while (pos <= k.BitLength) - { - if (k.TestBit(pos) == carry) - { - ++pos; - continue; - } - - k = k.ShiftRight(pos); - - int digit = k.IntValue & mask; - if (carry) - { - ++digit; - } - - carry = (digit & sign) != 0; - if (carry) - { - digit -= pow2; - } - - int zeroes = length > 0 ? pos - 1 : pos; - wnaf[length++] = (digit << 16) | zeroes; - pos = width; - } - - // Reduce the WNAF array to its actual length - if (wnaf.Length > length) - { - wnaf = Trim(wnaf, length); - } - - return wnaf; - } - - public static byte[] GenerateJsf(BigInteger g, BigInteger h) - { - int digits = System.Math.Max(g.BitLength, h.BitLength) + 1; - byte[] jsf = new byte[digits]; - - BigInteger k0 = g, k1 = h; - int j = 0, d0 = 0, d1 = 0; - - int offset = 0; - while ((d0 | d1) != 0 || k0.BitLength > offset || k1.BitLength > offset) - { - int n0 = ((int)((uint)k0.IntValue >> offset) + d0) & 7; - int n1 = ((int)((uint)k1.IntValue >> offset) + d1) & 7; - - int u0 = n0 & 1; - if (u0 != 0) - { - u0 -= (n0 & 2); - if ((n0 + u0) == 4 && (n1 & 3) == 2) - { - u0 = -u0; - } - } - - int u1 = n1 & 1; - if (u1 != 0) - { - u1 -= (n1 & 2); - if ((n1 + u1) == 4 && (n0 & 3) == 2) - { - u1 = -u1; - } - } - - if ((d0 << 1) == 1 + u0) - { - d0 ^= 1; - } - if ((d1 << 1) == 1 + u1) - { - d1 ^= 1; - } - - if (++offset == 30) - { - offset = 0; - k0 = k0.ShiftRight(30); - k1 = k1.ShiftRight(30); - } - - jsf[j++] = (byte)((u0 << 4) | (u1 & 0xF)); - } - - // Reduce the JSF array to its actual length - if (jsf.Length > j) - { - jsf = Trim(jsf, j); - } - - return jsf; - } - - public static byte[] GenerateNaf(BigInteger k) - { - if (k.SignValue == 0) - return EMPTY_BYTES; - - BigInteger _3k = k.ShiftLeft(1).Add(k); - - int digits = _3k.BitLength - 1; - byte[] naf = new byte[digits]; - - BigInteger diff = _3k.Xor(k); - - for (int i = 1; i < digits; ++i) - { - if (diff.TestBit(i)) - { - naf[i - 1] = (byte)(k.TestBit(i) ? -1 : 1); - ++i; - } - } - - naf[digits - 1] = 1; - - return naf; - } - - /** - * Computes the Window NAF (non-adjacent Form) of an integer. - * @param width The width w of the Window NAF. The width is - * defined as the minimal number w, such that for any - * w consecutive digits in the resulting representation, at - * most one is non-zero. - * @param k The integer of which the Window NAF is computed. - * @return The Window NAF of the given width, such that the following holds: - * k = &sum;i=0l-1 ki2i - * , where the ki denote the elements of the - * returned byte[]. - */ - public static byte[] GenerateWindowNaf(int width, BigInteger k) - { - if (width == 2) - { - return GenerateNaf(k); - } - - if (width < 2 || width > 8) - throw new ArgumentException("must be in the range [2, 8]", "width"); - if (k.SignValue == 0) - return EMPTY_BYTES; - - byte[] wnaf = new byte[k.BitLength + 1]; - - // 2^width and a mask and sign bit set accordingly - int pow2 = 1 << width; - int mask = pow2 - 1; - int sign = pow2 >> 1; - - bool carry = false; - int length = 0, pos = 0; - - while (pos <= k.BitLength) - { - if (k.TestBit(pos) == carry) - { - ++pos; - continue; - } - - k = k.ShiftRight(pos); - - int digit = k.IntValue & mask; - if (carry) - { - ++digit; - } - - carry = (digit & sign) != 0; - if (carry) - { - digit -= pow2; - } - - length += (length > 0) ? pos - 1 : pos; - wnaf[length++] = (byte)digit; - pos = width; - } - - // Reduce the WNAF array to its actual length - if (wnaf.Length > length) - { - wnaf = Trim(wnaf, length); - } - - return wnaf; - } - - public static int GetNafWeight(BigInteger k) - { - if (k.SignValue == 0) - return 0; - - BigInteger _3k = k.ShiftLeft(1).Add(k); - BigInteger diff = _3k.Xor(k); - - return diff.BitCount; - } - - public static WNafPreCompInfo GetWNafPreCompInfo(ECPoint p) - { - return GetWNafPreCompInfo(p.Curve.GetPreCompInfo(p, PRECOMP_NAME)); - } - - public static WNafPreCompInfo GetWNafPreCompInfo(PreCompInfo preCompInfo) - { - if ((preCompInfo != null) && (preCompInfo is WNafPreCompInfo)) - { - return (WNafPreCompInfo)preCompInfo; - } - - return new WNafPreCompInfo(); - } - - /** - * Determine window width to use for a scalar multiplication of the given size. - * - * @param bits the bit-length of the scalar to multiply by - * @return the window size to use - */ - public static int GetWindowSize(int bits) - { - return GetWindowSize(bits, DEFAULT_WINDOW_SIZE_CUTOFFS); - } - - /** - * Determine window width to use for a scalar multiplication of the given size. - * - * @param bits the bit-length of the scalar to multiply by - * @param windowSizeCutoffs a monotonically increasing list of bit sizes at which to increment the window width - * @return the window size to use - */ - public static int GetWindowSize(int bits, int[] windowSizeCutoffs) - { - int w = 0; - for (; w < windowSizeCutoffs.Length; ++w) - { - if (bits < windowSizeCutoffs[w]) - { - break; - } - } - return w + 2; - } - - public static ECPoint MapPointWithPrecomp(ECPoint p, int width, bool includeNegated, - ECPointMap pointMap) - { - ECCurve c = p.Curve; - WNafPreCompInfo wnafPreCompP = Precompute(p, width, includeNegated); - - ECPoint q = pointMap.Map(p); - WNafPreCompInfo wnafPreCompQ = GetWNafPreCompInfo(c.GetPreCompInfo(q, PRECOMP_NAME)); - - ECPoint twiceP = wnafPreCompP.Twice; - if (twiceP != null) - { - ECPoint twiceQ = pointMap.Map(twiceP); - wnafPreCompQ.Twice = twiceQ; - } - - ECPoint[] preCompP = wnafPreCompP.PreComp; - ECPoint[] preCompQ = new ECPoint[preCompP.Length]; - for (int i = 0; i < preCompP.Length; ++i) - { - preCompQ[i] = pointMap.Map(preCompP[i]); - } - wnafPreCompQ.PreComp = preCompQ; - - if (includeNegated) - { - ECPoint[] preCompNegQ = new ECPoint[preCompQ.Length]; - for (int i = 0; i < preCompNegQ.Length; ++i) - { - preCompNegQ[i] = preCompQ[i].Negate(); - } - wnafPreCompQ.PreCompNeg = preCompNegQ; - } - - c.SetPreCompInfo(q, PRECOMP_NAME, wnafPreCompQ); - - return q; - } - - public static WNafPreCompInfo Precompute(ECPoint p, int width, bool includeNegated) - { - ECCurve c = p.Curve; - WNafPreCompInfo wnafPreCompInfo = GetWNafPreCompInfo(c.GetPreCompInfo(p, PRECOMP_NAME)); - - int iniPreCompLen = 0, reqPreCompLen = 1 << System.Math.Max(0, width - 2); - - ECPoint[] preComp = wnafPreCompInfo.PreComp; - if (preComp == null) - { - preComp = EMPTY_POINTS; - } - else - { - iniPreCompLen = preComp.Length; - } - - if (iniPreCompLen < reqPreCompLen) - { - preComp = ResizeTable(preComp, reqPreCompLen); - - if (reqPreCompLen == 1) - { - preComp[0] = p.Normalize(); - } - else - { - int curPreCompLen = iniPreCompLen; - if (curPreCompLen == 0) - { - preComp[0] = p; - curPreCompLen = 1; - } - - ECFieldElement iso = null; - - if (reqPreCompLen == 2) - { - preComp[1] = p.ThreeTimes(); - } - else - { - ECPoint twiceP = wnafPreCompInfo.Twice, last = preComp[curPreCompLen - 1]; - if (twiceP == null) - { - twiceP = preComp[0].Twice(); - wnafPreCompInfo.Twice = twiceP; - - /* - * For Fp curves with Jacobian projective coordinates, use a (quasi-)isomorphism - * where 'twiceP' is "affine", so that the subsequent additions are cheaper. This - * also requires scaling the initial point's X, Y coordinates, and reversing the - * isomorphism as part of the subsequent normalization. - * - * NOTE: The correctness of this optimization depends on: - * 1) additions do not use the curve's A, B coefficients. - * 2) no special cases (i.e. Q +/- Q) when calculating 1P, 3P, 5P, ... - */ - if (!twiceP.IsInfinity && ECAlgorithms.IsFpCurve(c) && c.FieldSize >= 64) - { - switch (c.CoordinateSystem) - { - case ECCurve.COORD_JACOBIAN: - case ECCurve.COORD_JACOBIAN_CHUDNOVSKY: - case ECCurve.COORD_JACOBIAN_MODIFIED: - { - iso = twiceP.GetZCoord(0); - twiceP = c.CreatePoint(twiceP.XCoord.ToBigInteger(), - twiceP.YCoord.ToBigInteger()); - - ECFieldElement iso2 = iso.Square(), iso3 = iso2.Multiply(iso); - last = last.ScaleX(iso2).ScaleY(iso3); - - if (iniPreCompLen == 0) - { - preComp[0] = last; - } - break; - } - } - } - } - - while (curPreCompLen < reqPreCompLen) - { - /* - * Compute the new ECPoints for the precomputation array. The values 1, 3, - * 5, ..., 2^(width-1)-1 times p are computed - */ - preComp[curPreCompLen++] = last = last.Add(twiceP); - } - } - - /* - * Having oft-used operands in affine form makes operations faster. - */ - c.NormalizeAll(preComp, iniPreCompLen, reqPreCompLen - iniPreCompLen, iso); - } - } - - wnafPreCompInfo.PreComp = preComp; - - if (includeNegated) - { - ECPoint[] preCompNeg = wnafPreCompInfo.PreCompNeg; - - int pos; - if (preCompNeg == null) - { - pos = 0; - preCompNeg = new ECPoint[reqPreCompLen]; - } - else - { - pos = preCompNeg.Length; - if (pos < reqPreCompLen) - { - preCompNeg = ResizeTable(preCompNeg, reqPreCompLen); - } - } - - while (pos < reqPreCompLen) - { - preCompNeg[pos] = preComp[pos].Negate(); - ++pos; - } - - wnafPreCompInfo.PreCompNeg = preCompNeg; - } - - c.SetPreCompInfo(p, PRECOMP_NAME, wnafPreCompInfo); - - return wnafPreCompInfo; - } - - private static byte[] Trim(byte[] a, int length) - { - byte[] result = new byte[length]; - Array.Copy(a, 0, result, 0, result.Length); - return result; - } - - private static int[] Trim(int[] a, int length) - { - int[] result = new int[length]; - Array.Copy(a, 0, result, 0, result.Length); - return result; - } - - private static ECPoint[] ResizeTable(ECPoint[] a, int length) - { - ECPoint[] result = new ECPoint[length]; - Array.Copy(a, 0, result, 0, a.Length); - return result; - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/multiplier/WTauNafMultiplier.cs b/bc-sharp-crypto/src/math/ec/multiplier/WTauNafMultiplier.cs deleted file mode 100644 index 1e7ddae..0000000 --- a/bc-sharp-crypto/src/math/ec/multiplier/WTauNafMultiplier.cs +++ /dev/null @@ -1,125 +0,0 @@ -using System; - -using Org.BouncyCastle.Math.EC.Abc; - -namespace Org.BouncyCastle.Math.EC.Multiplier -{ - /** - * Class implementing the WTNAF (Window - * τ-adic Non-Adjacent Form) algorithm. - */ - public class WTauNafMultiplier - : AbstractECMultiplier - { - // TODO Create WTauNafUtilities class and move various functionality into it - internal static readonly string PRECOMP_NAME = "bc_wtnaf"; - - /** - * Multiplies a {@link org.bouncycastle.math.ec.AbstractF2mPoint AbstractF2mPoint} - * by k using the reduced τ-adic NAF (RTNAF) - * method. - * @param p The AbstractF2mPoint to multiply. - * @param k The integer by which to multiply k. - * @return p multiplied by k. - */ - protected override ECPoint MultiplyPositive(ECPoint point, BigInteger k) - { - if (!(point is AbstractF2mPoint)) - throw new ArgumentException("Only AbstractF2mPoint can be used in WTauNafMultiplier"); - - AbstractF2mPoint p = (AbstractF2mPoint)point; - AbstractF2mCurve curve = (AbstractF2mCurve)p.Curve; - int m = curve.FieldSize; - sbyte a = (sbyte)curve.A.ToBigInteger().IntValue; - sbyte mu = Tnaf.GetMu(a); - BigInteger[] s = curve.GetSi(); - - ZTauElement rho = Tnaf.PartModReduction(k, m, a, s, mu, (sbyte)10); - - return MultiplyWTnaf(p, rho, curve.GetPreCompInfo(p, PRECOMP_NAME), a, mu); - } - - /** - * Multiplies a {@link org.bouncycastle.math.ec.AbstractF2mPoint AbstractF2mPoint} - * by an element λ of Z[τ] using - * the τ-adic NAF (TNAF) method. - * @param p The AbstractF2mPoint to multiply. - * @param lambda The element λ of - * Z[τ] of which to compute the - * [τ]-adic NAF. - * @return p multiplied by λ. - */ - private AbstractF2mPoint MultiplyWTnaf(AbstractF2mPoint p, ZTauElement lambda, - PreCompInfo preCompInfo, sbyte a, sbyte mu) - { - ZTauElement[] alpha = (a == 0) ? Tnaf.Alpha0 : Tnaf.Alpha1; - - BigInteger tw = Tnaf.GetTw(mu, Tnaf.Width); - - sbyte[]u = Tnaf.TauAdicWNaf(mu, lambda, Tnaf.Width, - BigInteger.ValueOf(Tnaf.Pow2Width), tw, alpha); - - return MultiplyFromWTnaf(p, u, preCompInfo); - } - - /** - * Multiplies a {@link org.bouncycastle.math.ec.AbstractF2mPoint AbstractF2mPoint} - * by an element λ of Z[τ] - * using the window τ-adic NAF (TNAF) method, given the - * WTNAF of λ. - * @param p The AbstractF2mPoint to multiply. - * @param u The the WTNAF of λ.. - * @return λ * p - */ - private static AbstractF2mPoint MultiplyFromWTnaf(AbstractF2mPoint p, sbyte[] u, PreCompInfo preCompInfo) - { - AbstractF2mCurve curve = (AbstractF2mCurve)p.Curve; - sbyte a = (sbyte)curve.A.ToBigInteger().IntValue; - - AbstractF2mPoint[] pu; - if ((preCompInfo == null) || !(preCompInfo is WTauNafPreCompInfo)) - { - pu = Tnaf.GetPreComp(p, a); - - WTauNafPreCompInfo pre = new WTauNafPreCompInfo(); - pre.PreComp = pu; - curve.SetPreCompInfo(p, PRECOMP_NAME, pre); - } - else - { - pu = ((WTauNafPreCompInfo)preCompInfo).PreComp; - } - - // TODO Include negations in precomp (optionally) and use from here - AbstractF2mPoint[] puNeg = new AbstractF2mPoint[pu.Length]; - for (int i = 0; i < pu.Length; ++i) - { - puNeg[i] = (AbstractF2mPoint)pu[i].Negate(); - } - - - // q = infinity - AbstractF2mPoint q = (AbstractF2mPoint) p.Curve.Infinity; - - int tauCount = 0; - for (int i = u.Length - 1; i >= 0; i--) - { - ++tauCount; - int ui = u[i]; - if (ui != 0) - { - q = q.TauPow(tauCount); - tauCount = 0; - - ECPoint x = ui > 0 ? pu[ui >> 1] : puNeg[(-ui) >> 1]; - q = (AbstractF2mPoint)q.Add(x); - } - } - if (tauCount > 0) - { - q = q.TauPow(tauCount); - } - return q; - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/multiplier/WTauNafPreCompInfo.cs b/bc-sharp-crypto/src/math/ec/multiplier/WTauNafPreCompInfo.cs deleted file mode 100644 index 72659b3..0000000 --- a/bc-sharp-crypto/src/math/ec/multiplier/WTauNafPreCompInfo.cs +++ /dev/null @@ -1,24 +0,0 @@ -namespace Org.BouncyCastle.Math.EC.Multiplier -{ - /** - * Class holding precomputation data for the WTNAF (Window - * τ-adic Non-Adjacent Form) algorithm. - */ - public class WTauNafPreCompInfo - : PreCompInfo - { - /** - * Array holding the precomputed AbstractF2mPoints used for the - * WTNAF multiplication in - * {@link org.bouncycastle.math.ec.multiplier.WTauNafMultiplier.multiply() - * WTauNafMultiplier.multiply()}. - */ - protected AbstractF2mPoint[] m_preComp; - - public virtual AbstractF2mPoint[] PreComp - { - get { return m_preComp; } - set { this.m_preComp = value; } - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/multiplier/ZSignedDigitL2RMultiplier.cs b/bc-sharp-crypto/src/math/ec/multiplier/ZSignedDigitL2RMultiplier.cs deleted file mode 100644 index 554ac61..0000000 --- a/bc-sharp-crypto/src/math/ec/multiplier/ZSignedDigitL2RMultiplier.cs +++ /dev/null @@ -1,29 +0,0 @@ -namespace Org.BouncyCastle.Math.EC.Multiplier -{ - public class ZSignedDigitL2RMultiplier - : AbstractECMultiplier - { - /** - * 'Zeroless' Signed Digit Left-to-Right. - */ - protected override ECPoint MultiplyPositive(ECPoint p, BigInteger k) - { - ECPoint addP = p.Normalize(), subP = addP.Negate(); - - ECPoint R0 = addP; - - int n = k.BitLength; - int s = k.GetLowestSetBit(); - - int i = n; - while (--i > s) - { - R0 = R0.TwicePlus(k.TestBit(i) ? addP : subP); - } - - R0 = R0.TimesPow2(s); - - return R0; - } - } -} diff --git a/bc-sharp-crypto/src/math/ec/multiplier/ZSignedDigitR2LMultiplier.cs b/bc-sharp-crypto/src/math/ec/multiplier/ZSignedDigitR2LMultiplier.cs deleted file mode 100644 index 91c06cb..0000000 --- a/bc-sharp-crypto/src/math/ec/multiplier/ZSignedDigitR2LMultiplier.cs +++ /dev/null @@ -1,30 +0,0 @@ -namespace Org.BouncyCastle.Math.EC.Multiplier -{ - public class ZSignedDigitR2LMultiplier - : AbstractECMultiplier - { - /** - * 'Zeroless' Signed Digit Right-to-Left. - */ - protected override ECPoint MultiplyPositive(ECPoint p, BigInteger k) - { - ECPoint R0 = p.Curve.Infinity, R1 = p; - - int n = k.BitLength; - int s = k.GetLowestSetBit(); - - R1 = R1.TimesPow2(s); - - int i = s; - while (++i < n) - { - R0 = R0.Add(k.TestBit(i) ? R1 : R1.Negate()); - R1 = R1.Twice(); - } - - R0 = R0.Add(R1); - - return R0; - } - } -} diff --git a/bc-sharp-crypto/src/math/field/FiniteFields.cs b/bc-sharp-crypto/src/math/field/FiniteFields.cs deleted file mode 100644 index 7b84569..0000000 --- a/bc-sharp-crypto/src/math/field/FiniteFields.cs +++ /dev/null @@ -1,54 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.Field -{ - public abstract class FiniteFields - { - internal static readonly IFiniteField GF_2 = new PrimeField(BigInteger.ValueOf(2)); - internal static readonly IFiniteField GF_3 = new PrimeField(BigInteger.ValueOf(3)); - - public static IPolynomialExtensionField GetBinaryExtensionField(int[] exponents) - { - if (exponents[0] != 0) - { - throw new ArgumentException("Irreducible polynomials in GF(2) must have constant term", "exponents"); - } - for (int i = 1; i < exponents.Length; ++i) - { - if (exponents[i] <= exponents[i - 1]) - { - throw new ArgumentException("Polynomial exponents must be montonically increasing", "exponents"); - } - } - - return new GenericPolynomialExtensionField(GF_2, new GF2Polynomial(exponents)); - } - - // public static IPolynomialExtensionField GetTernaryExtensionField(Term[] terms) - // { - // return new GenericPolynomialExtensionField(GF_3, new GF3Polynomial(terms)); - // } - - public static IFiniteField GetPrimeField(BigInteger characteristic) - { - int bitLength = characteristic.BitLength; - if (characteristic.SignValue <= 0 || bitLength < 2) - { - throw new ArgumentException("Must be >= 2", "characteristic"); - } - - if (bitLength < 3) - { - switch (characteristic.IntValue) - { - case 2: - return GF_2; - case 3: - return GF_3; - } - } - - return new PrimeField(characteristic); - } - } -} diff --git a/bc-sharp-crypto/src/math/field/GF2Polynomial.cs b/bc-sharp-crypto/src/math/field/GF2Polynomial.cs deleted file mode 100644 index c062d50..0000000 --- a/bc-sharp-crypto/src/math/field/GF2Polynomial.cs +++ /dev/null @@ -1,46 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math.Field -{ - internal class GF2Polynomial - : IPolynomial - { - protected readonly int[] exponents; - - internal GF2Polynomial(int[] exponents) - { - this.exponents = Arrays.Clone(exponents); - } - - public virtual int Degree - { - get { return exponents[exponents.Length - 1]; } - } - - public virtual int[] GetExponentsPresent() - { - return Arrays.Clone(exponents); - } - - public override bool Equals(object obj) - { - if (this == obj) - { - return true; - } - GF2Polynomial other = obj as GF2Polynomial; - if (null == other) - { - return false; - } - return Arrays.AreEqual(exponents, other.exponents); - } - - public override int GetHashCode() - { - return Arrays.GetHashCode(exponents); - } - } -} diff --git a/bc-sharp-crypto/src/math/field/GenericPolynomialExtensionField.cs b/bc-sharp-crypto/src/math/field/GenericPolynomialExtensionField.cs deleted file mode 100644 index 13ef571..0000000 --- a/bc-sharp-crypto/src/math/field/GenericPolynomialExtensionField.cs +++ /dev/null @@ -1,63 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math.Field -{ - internal class GenericPolynomialExtensionField - : IPolynomialExtensionField - { - protected readonly IFiniteField subfield; - protected readonly IPolynomial minimalPolynomial; - - internal GenericPolynomialExtensionField(IFiniteField subfield, IPolynomial polynomial) - { - this.subfield = subfield; - this.minimalPolynomial = polynomial; - } - - public virtual BigInteger Characteristic - { - get { return subfield.Characteristic; } - } - - public virtual int Dimension - { - get { return subfield.Dimension * minimalPolynomial.Degree; } - } - - public virtual IFiniteField Subfield - { - get { return subfield; } - } - - public virtual int Degree - { - get { return minimalPolynomial.Degree; } - } - - public virtual IPolynomial MinimalPolynomial - { - get { return minimalPolynomial; } - } - - public override bool Equals(object obj) - { - if (this == obj) - { - return true; - } - GenericPolynomialExtensionField other = obj as GenericPolynomialExtensionField; - if (null == other) - { - return false; - } - return subfield.Equals(other.subfield) && minimalPolynomial.Equals(other.minimalPolynomial); - } - - public override int GetHashCode() - { - return subfield.GetHashCode() ^ Integers.RotateLeft(minimalPolynomial.GetHashCode(), 16); - } - } -} diff --git a/bc-sharp-crypto/src/math/field/IExtensionField.cs b/bc-sharp-crypto/src/math/field/IExtensionField.cs deleted file mode 100644 index 17f45c1..0000000 --- a/bc-sharp-crypto/src/math/field/IExtensionField.cs +++ /dev/null @@ -1,12 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.Field -{ - public interface IExtensionField - : IFiniteField - { - IFiniteField Subfield { get; } - - int Degree { get; } - } -} diff --git a/bc-sharp-crypto/src/math/field/IFiniteField.cs b/bc-sharp-crypto/src/math/field/IFiniteField.cs deleted file mode 100644 index b618be7..0000000 --- a/bc-sharp-crypto/src/math/field/IFiniteField.cs +++ /dev/null @@ -1,11 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.Field -{ - public interface IFiniteField - { - BigInteger Characteristic { get; } - - int Dimension { get; } - } -} diff --git a/bc-sharp-crypto/src/math/field/IPolynomial.cs b/bc-sharp-crypto/src/math/field/IPolynomial.cs deleted file mode 100644 index ad6dfb6..0000000 --- a/bc-sharp-crypto/src/math/field/IPolynomial.cs +++ /dev/null @@ -1,15 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.Field -{ - public interface IPolynomial - { - int Degree { get; } - - //BigInteger[] GetCoefficients(); - - int[] GetExponentsPresent(); - - //Term[] GetNonZeroTerms(); - } -} diff --git a/bc-sharp-crypto/src/math/field/IPolynomialExtensionField.cs b/bc-sharp-crypto/src/math/field/IPolynomialExtensionField.cs deleted file mode 100644 index 3818c18..0000000 --- a/bc-sharp-crypto/src/math/field/IPolynomialExtensionField.cs +++ /dev/null @@ -1,10 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.Field -{ - public interface IPolynomialExtensionField - : IExtensionField - { - IPolynomial MinimalPolynomial { get; } - } -} diff --git a/bc-sharp-crypto/src/math/field/PrimeField.cs b/bc-sharp-crypto/src/math/field/PrimeField.cs deleted file mode 100644 index f6ba629..0000000 --- a/bc-sharp-crypto/src/math/field/PrimeField.cs +++ /dev/null @@ -1,44 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.Field -{ - internal class PrimeField - : IFiniteField - { - protected readonly BigInteger characteristic; - - internal PrimeField(BigInteger characteristic) - { - this.characteristic = characteristic; - } - - public virtual BigInteger Characteristic - { - get { return characteristic; } - } - - public virtual int Dimension - { - get { return 1; } - } - - public override bool Equals(object obj) - { - if (this == obj) - { - return true; - } - PrimeField other = obj as PrimeField; - if (null == other) - { - return false; - } - return characteristic.Equals(other.characteristic); - } - - public override int GetHashCode() - { - return characteristic.GetHashCode(); - } - } -} diff --git a/bc-sharp-crypto/src/math/raw/Interleave.cs b/bc-sharp-crypto/src/math/raw/Interleave.cs deleted file mode 100644 index d218406..0000000 --- a/bc-sharp-crypto/src/math/raw/Interleave.cs +++ /dev/null @@ -1,107 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Math.Raw -{ - internal abstract class Interleave - { - private const ulong M32 = 0x55555555UL; - private const ulong M64 = 0x5555555555555555UL; - - /* - * This expands 8 bit indices into 16 bit contents (high bit 14), by inserting 0s between bits. - * In a binary field, this operation is the same as squaring an 8 bit number. - */ - //private static readonly ushort[] INTERLEAVE2_TABLE = new ushort[] - //{ - // 0x0000, 0x0001, 0x0004, 0x0005, 0x0010, 0x0011, 0x0014, 0x0015, - // 0x0040, 0x0041, 0x0044, 0x0045, 0x0050, 0x0051, 0x0054, 0x0055, - // 0x0100, 0x0101, 0x0104, 0x0105, 0x0110, 0x0111, 0x0114, 0x0115, - // 0x0140, 0x0141, 0x0144, 0x0145, 0x0150, 0x0151, 0x0154, 0x0155, - // 0x0400, 0x0401, 0x0404, 0x0405, 0x0410, 0x0411, 0x0414, 0x0415, - // 0x0440, 0x0441, 0x0444, 0x0445, 0x0450, 0x0451, 0x0454, 0x0455, - // 0x0500, 0x0501, 0x0504, 0x0505, 0x0510, 0x0511, 0x0514, 0x0515, - // 0x0540, 0x0541, 0x0544, 0x0545, 0x0550, 0x0551, 0x0554, 0x0555, - // 0x1000, 0x1001, 0x1004, 0x1005, 0x1010, 0x1011, 0x1014, 0x1015, - // 0x1040, 0x1041, 0x1044, 0x1045, 0x1050, 0x1051, 0x1054, 0x1055, - // 0x1100, 0x1101, 0x1104, 0x1105, 0x1110, 0x1111, 0x1114, 0x1115, - // 0x1140, 0x1141, 0x1144, 0x1145, 0x1150, 0x1151, 0x1154, 0x1155, - // 0x1400, 0x1401, 0x1404, 0x1405, 0x1410, 0x1411, 0x1414, 0x1415, - // 0x1440, 0x1441, 0x1444, 0x1445, 0x1450, 0x1451, 0x1454, 0x1455, - // 0x1500, 0x1501, 0x1504, 0x1505, 0x1510, 0x1511, 0x1514, 0x1515, - // 0x1540, 0x1541, 0x1544, 0x1545, 0x1550, 0x1551, 0x1554, 0x1555, - // 0x4000, 0x4001, 0x4004, 0x4005, 0x4010, 0x4011, 0x4014, 0x4015, - // 0x4040, 0x4041, 0x4044, 0x4045, 0x4050, 0x4051, 0x4054, 0x4055, - // 0x4100, 0x4101, 0x4104, 0x4105, 0x4110, 0x4111, 0x4114, 0x4115, - // 0x4140, 0x4141, 0x4144, 0x4145, 0x4150, 0x4151, 0x4154, 0x4155, - // 0x4400, 0x4401, 0x4404, 0x4405, 0x4410, 0x4411, 0x4414, 0x4415, - // 0x4440, 0x4441, 0x4444, 0x4445, 0x4450, 0x4451, 0x4454, 0x4455, - // 0x4500, 0x4501, 0x4504, 0x4505, 0x4510, 0x4511, 0x4514, 0x4515, - // 0x4540, 0x4541, 0x4544, 0x4545, 0x4550, 0x4551, 0x4554, 0x4555, - // 0x5000, 0x5001, 0x5004, 0x5005, 0x5010, 0x5011, 0x5014, 0x5015, - // 0x5040, 0x5041, 0x5044, 0x5045, 0x5050, 0x5051, 0x5054, 0x5055, - // 0x5100, 0x5101, 0x5104, 0x5105, 0x5110, 0x5111, 0x5114, 0x5115, - // 0x5140, 0x5141, 0x5144, 0x5145, 0x5150, 0x5151, 0x5154, 0x5155, - // 0x5400, 0x5401, 0x5404, 0x5405, 0x5410, 0x5411, 0x5414, 0x5415, - // 0x5440, 0x5441, 0x5444, 0x5445, 0x5450, 0x5451, 0x5454, 0x5455, - // 0x5500, 0x5501, 0x5504, 0x5505, 0x5510, 0x5511, 0x5514, 0x5515, - // 0x5540, 0x5541, 0x5544, 0x5545, 0x5550, 0x5551, 0x5554, 0x5555 - //}; - - internal static uint Expand8to16(uint x) - { - x &= 0xFFU; - x = (x | (x << 4)) & 0x0F0FU; - x = (x | (x << 2)) & 0x3333U; - x = (x | (x << 1)) & 0x5555U; - return x; - } - - internal static uint Expand16to32(uint x) - { - x &= 0xFFFFU; - x = (x | (x << 8)) & 0x00FF00FFU; - x = (x | (x << 4)) & 0x0F0F0F0FU; - x = (x | (x << 2)) & 0x33333333U; - x = (x | (x << 1)) & 0x55555555U; - return x; - } - - internal static ulong Expand32to64(uint x) - { - // "shuffle" low half to even bits and high half to odd bits - uint t; - t = (x ^ (x >> 8)) & 0x0000FF00U; x ^= (t ^ (t << 8)); - t = (x ^ (x >> 4)) & 0x00F000F0U; x ^= (t ^ (t << 4)); - t = (x ^ (x >> 2)) & 0x0C0C0C0CU; x ^= (t ^ (t << 2)); - t = (x ^ (x >> 1)) & 0x22222222U; x ^= (t ^ (t << 1)); - - return ((x >> 1) & M32) << 32 | (x & M32); - } - - internal static void Expand64To128(ulong x, ulong[] z, int zOff) - { - // "shuffle" low half to even bits and high half to odd bits - ulong t; - t = (x ^ (x >> 16)) & 0x00000000FFFF0000UL; x ^= (t ^ (t << 16)); - t = (x ^ (x >> 8)) & 0x0000FF000000FF00UL; x ^= (t ^ (t << 8)); - t = (x ^ (x >> 4)) & 0x00F000F000F000F0UL; x ^= (t ^ (t << 4)); - t = (x ^ (x >> 2)) & 0x0C0C0C0C0C0C0C0CUL; x ^= (t ^ (t << 2)); - t = (x ^ (x >> 1)) & 0x2222222222222222UL; x ^= (t ^ (t << 1)); - - z[zOff ] = (x ) & M64; - z[zOff + 1] = (x >> 1) & M64; - } - - internal static ulong Unshuffle(ulong x) - { - // "unshuffle" even bits to low half and odd bits to high half - ulong t; - t = (x ^ (x >> 1)) & 0x2222222222222222UL; x ^= (t ^ (t << 1)); - t = (x ^ (x >> 2)) & 0x0C0C0C0C0C0C0C0CUL; x ^= (t ^ (t << 2)); - t = (x ^ (x >> 4)) & 0x00F000F000F000F0UL; x ^= (t ^ (t << 4)); - t = (x ^ (x >> 8)) & 0x0000FF000000FF00UL; x ^= (t ^ (t << 8)); - t = (x ^ (x >> 16)) & 0x00000000FFFF0000UL; x ^= (t ^ (t << 16)); - return x; - } - } -} diff --git a/bc-sharp-crypto/src/math/raw/Mod.cs b/bc-sharp-crypto/src/math/raw/Mod.cs deleted file mode 100644 index 8d9e8fd..0000000 --- a/bc-sharp-crypto/src/math/raw/Mod.cs +++ /dev/null @@ -1,186 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Crypto.Utilities; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Math.Raw -{ - internal abstract class Mod - { - private static readonly SecureRandom RandomSource = new SecureRandom(); - - public static void Invert(uint[] p, uint[] x, uint[] z) - { - int len = p.Length; - if (Nat.IsZero(len, x)) - throw new ArgumentException("cannot be 0", "x"); - if (Nat.IsOne(len, x)) - { - Array.Copy(x, 0, z, 0, len); - return; - } - - uint[] u = Nat.Copy(len, x); - uint[] a = Nat.Create(len); - a[0] = 1; - int ac = 0; - - if ((u[0] & 1) == 0) - { - InversionStep(p, u, len, a, ref ac); - } - if (Nat.IsOne(len, u)) - { - InversionResult(p, ac, a, z); - return; - } - - uint[] v = Nat.Copy(len, p); - uint[] b = Nat.Create(len); - int bc = 0; - - int uvLen = len; - - for (;;) - { - while (u[uvLen - 1] == 0 && v[uvLen - 1] == 0) - { - --uvLen; - } - - if (Nat.Gte(len, u, v)) - { - Nat.SubFrom(len, v, u); - Debug.Assert((u[0] & 1) == 0); - ac += Nat.SubFrom(len, b, a) - bc; - InversionStep(p, u, uvLen, a, ref ac); - if (Nat.IsOne(len, u)) - { - InversionResult(p, ac, a, z); - return; - } - } - else - { - Nat.SubFrom(len, u, v); - Debug.Assert((v[0] & 1) == 0); - bc += Nat.SubFrom(len, a, b) - ac; - InversionStep(p, v, uvLen, b, ref bc); - if (Nat.IsOne(len, v)) - { - InversionResult(p, bc, b, z); - return; - } - } - } - } - - public static uint[] Random(uint[] p) - { - int len = p.Length; - uint[] s = Nat.Create(len); - - uint m = p[len - 1]; - m |= m >> 1; - m |= m >> 2; - m |= m >> 4; - m |= m >> 8; - m |= m >> 16; - - do - { - byte[] bytes = new byte[len << 2]; - RandomSource.NextBytes(bytes); - Pack.BE_To_UInt32(bytes, 0, s); - s[len - 1] &= m; - } - while (Nat.Gte(len, s, p)); - - return s; - } - - public static void Add(uint[] p, uint[] x, uint[] y, uint[] z) - { - int len = p.Length; - uint c = Nat.Add(len, x, y, z); - if (c != 0) - { - Nat.SubFrom(len, p, z); - } - } - - public static void Subtract(uint[] p, uint[] x, uint[] y, uint[] z) - { - int len = p.Length; - int c = Nat.Sub(len, x, y, z); - if (c != 0) - { - Nat.AddTo(len, p, z); - } - } - - private static void InversionResult(uint[] p, int ac, uint[] a, uint[] z) - { - if (ac < 0) - { - Nat.Add(p.Length, a, p, z); - } - else - { - Array.Copy(a, 0, z, 0, p.Length); - } - } - - private static void InversionStep(uint[] p, uint[] u, int uLen, uint[] x, ref int xc) - { - int len = p.Length; - int count = 0; - while (u[0] == 0) - { - Nat.ShiftDownWord(uLen, u, 0); - count += 32; - } - - { - int zeroes = GetTrailingZeroes(u[0]); - if (zeroes > 0) - { - Nat.ShiftDownBits(uLen, u, zeroes, 0); - count += zeroes; - } - } - - for (int i = 0; i < count; ++i) - { - if ((x[0] & 1) != 0) - { - if (xc < 0) - { - xc += (int)Nat.AddTo(len, p, x); - } - else - { - xc += Nat.SubFrom(len, p, x); - } - } - - Debug.Assert(xc == 0 || xc == -1); - Nat.ShiftDownBit(len, x, (uint)xc); - } - } - - private static int GetTrailingZeroes(uint x) - { - Debug.Assert(x != 0); - int count = 0; - while ((x & 1) == 0) - { - x >>= 1; - ++count; - } - return count; - } - } -} diff --git a/bc-sharp-crypto/src/math/raw/Nat.cs b/bc-sharp-crypto/src/math/raw/Nat.cs deleted file mode 100644 index 1f9ab00..0000000 --- a/bc-sharp-crypto/src/math/raw/Nat.cs +++ /dev/null @@ -1,1053 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Crypto.Utilities; - -namespace Org.BouncyCastle.Math.Raw -{ - internal abstract class Nat - { - private const ulong M = 0xFFFFFFFFUL; - - public static uint Add(int len, uint[] x, uint[] y, uint[] z) - { - ulong c = 0; - for (int i = 0; i < len; ++i) - { - c += (ulong)x[i] + y[i]; - z[i] = (uint)c; - c >>= 32; - } - return (uint)c; - } - - public static uint Add33At(int len, uint x, uint[] z, int zPos) - { - Debug.Assert(zPos <= (len - 2)); - ulong c = (ulong)z[zPos + 0] + x; - z[zPos + 0] = (uint)c; - c >>= 32; - c += (ulong)z[zPos + 1] + 1; - z[zPos + 1] = (uint)c; - c >>= 32; - return c == 0 ? 0 : IncAt(len, z, zPos + 2); - } - - public static uint Add33At(int len, uint x, uint[] z, int zOff, int zPos) - { - Debug.Assert(zPos <= (len - 2)); - ulong c = (ulong)z[zOff + zPos] + x; - z[zOff + zPos] = (uint)c; - c >>= 32; - c += (ulong)z[zOff + zPos + 1] + 1; - z[zOff + zPos + 1] = (uint)c; - c >>= 32; - return c == 0 ? 0 : IncAt(len, z, zOff, zPos + 2); - } - - public static uint Add33To(int len, uint x, uint[] z) - { - ulong c = (ulong)z[0] + x; - z[0] = (uint)c; - c >>= 32; - c += (ulong)z[1] + 1; - z[1] = (uint)c; - c >>= 32; - return c == 0 ? 0 : IncAt(len, z, 2); - } - - public static uint Add33To(int len, uint x, uint[] z, int zOff) - { - ulong c = (ulong)z[zOff + 0] + x; - z[zOff + 0] = (uint)c; - c >>= 32; - c += (ulong)z[zOff + 1] + 1; - z[zOff + 1] = (uint)c; - c >>= 32; - return c == 0 ? 0 : IncAt(len, z, zOff, 2); - } - - public static uint AddBothTo(int len, uint[] x, uint[] y, uint[] z) - { - ulong c = 0; - for (int i = 0; i < len; ++i) - { - c += (ulong)x[i] + y[i] + z[i]; - z[i] = (uint)c; - c >>= 32; - } - return (uint)c; - } - - public static uint AddBothTo(int len, uint[] x, int xOff, uint[] y, int yOff, uint[] z, int zOff) - { - ulong c = 0; - for (int i = 0; i < len; ++i) - { - c += (ulong)x[xOff + i] + y[yOff + i] + z[zOff + i]; - z[zOff + i] = (uint)c; - c >>= 32; - } - return (uint)c; - } - - public static uint AddDWordAt(int len, ulong x, uint[] z, int zPos) - { - Debug.Assert(zPos <= (len - 2)); - ulong c = (ulong)z[zPos + 0] + (x & M); - z[zPos + 0] = (uint)c; - c >>= 32; - c += (ulong)z[zPos + 1] + (x >> 32); - z[zPos + 1] = (uint)c; - c >>= 32; - return c == 0 ? 0 : IncAt(len, z, zPos + 2); - } - - public static uint AddDWordAt(int len, ulong x, uint[] z, int zOff, int zPos) - { - Debug.Assert(zPos <= (len - 2)); - ulong c = (ulong)z[zOff + zPos] + (x & M); - z[zOff + zPos] = (uint)c; - c >>= 32; - c += (ulong)z[zOff + zPos + 1] + (x >> 32); - z[zOff + zPos + 1] = (uint)c; - c >>= 32; - return c == 0 ? 0 : IncAt(len, z, zOff, zPos + 2); - } - - public static uint AddDWordTo(int len, ulong x, uint[] z) - { - ulong c = (ulong)z[0] + (x & M); - z[0] = (uint)c; - c >>= 32; - c += (ulong)z[1] + (x >> 32); - z[1] = (uint)c; - c >>= 32; - return c == 0 ? 0 : IncAt(len, z, 2); - } - - public static uint AddDWordTo(int len, ulong x, uint[] z, int zOff) - { - ulong c = (ulong)z[zOff + 0] + (x & M); - z[zOff + 0] = (uint)c; - c >>= 32; - c += (ulong)z[zOff + 1] + (x >> 32); - z[zOff + 1] = (uint)c; - c >>= 32; - return c == 0 ? 0 : IncAt(len, z, zOff, 2); - } - - public static uint AddTo(int len, uint[] x, uint[] z) - { - ulong c = 0; - for (int i = 0; i < len; ++i) - { - c += (ulong)x[i] + z[i]; - z[i] = (uint)c; - c >>= 32; - } - return (uint)c; - } - - public static uint AddTo(int len, uint[] x, int xOff, uint[] z, int zOff) - { - ulong c = 0; - for (int i = 0; i < len; ++i) - { - c += (ulong)x[xOff + i] + z[zOff + i]; - z[zOff + i] = (uint)c; - c >>= 32; - } - return (uint)c; - } - - public static uint AddWordAt(int len, uint x, uint[] z, int zPos) - { - Debug.Assert(zPos <= (len - 1)); - ulong c = (ulong)x + z[zPos]; - z[zPos] = (uint)c; - c >>= 32; - return c == 0 ? 0 : IncAt(len, z, zPos + 1); - } - - public static uint AddWordAt(int len, uint x, uint[] z, int zOff, int zPos) - { - Debug.Assert(zPos <= (len - 1)); - ulong c = (ulong)x + z[zOff + zPos]; - z[zOff + zPos] = (uint)c; - c >>= 32; - return c == 0 ? 0 : IncAt(len, z, zOff, zPos + 1); - } - - public static uint AddWordTo(int len, uint x, uint[] z) - { - ulong c = (ulong)x + z[0]; - z[0] = (uint)c; - c >>= 32; - return c == 0 ? 0 : IncAt(len, z, 1); - } - - public static uint AddWordTo(int len, uint x, uint[] z, int zOff) - { - ulong c = (ulong)x + z[zOff]; - z[zOff] = (uint)c; - c >>= 32; - return c == 0 ? 0 : IncAt(len, z, zOff, 1); - } - - public static void Copy(int len, uint[] x, uint[] z) - { - Array.Copy(x, 0, z, 0, len); - } - - public static uint[] Copy(int len, uint[] x) - { - uint[] z = new uint[len]; - Array.Copy(x, 0, z, 0, len); - return z; - } - - public static uint[] Create(int len) - { - return new uint[len]; - } - - public static ulong[] Create64(int len) - { - return new ulong[len]; - } - - public static int Dec(int len, uint[] z) - { - for (int i = 0; i < len; ++i) - { - if (--z[i] != uint.MaxValue) - { - return 0; - } - } - return -1; - } - - public static int Dec(int len, uint[] x, uint[] z) - { - int i = 0; - while (i < len) - { - uint c = x[i] - 1; - z[i] = c; - ++i; - if (c != uint.MaxValue) - { - while (i < len) - { - z[i] = x[i]; - ++i; - } - return 0; - } - } - return -1; - } - - public static int DecAt(int len, uint[] z, int zPos) - { - Debug.Assert(zPos <= len); - for (int i = zPos; i < len; ++i) - { - if (--z[i] != uint.MaxValue) - { - return 0; - } - } - return -1; - } - - public static int DecAt(int len, uint[] z, int zOff, int zPos) - { - Debug.Assert(zPos <= len); - for (int i = zPos; i < len; ++i) - { - if (--z[zOff + i] != uint.MaxValue) - { - return 0; - } - } - return -1; - } - - public static bool Eq(int len, uint[] x, uint[] y) - { - for (int i = len - 1; i >= 0; --i) - { - if (x[i] != y[i]) - { - return false; - } - } - return true; - } - - public static uint[] FromBigInteger(int bits, BigInteger x) - { - if (x.SignValue < 0 || x.BitLength > bits) - throw new ArgumentException(); - - int len = (bits + 31) >> 5; - uint[] z = Create(len); - int i = 0; - while (x.SignValue != 0) - { - z[i++] = (uint)x.IntValue; - x = x.ShiftRight(32); - } - return z; - } - - public static uint GetBit(uint[] x, int bit) - { - if (bit == 0) - { - return x[0] & 1; - } - int w = bit >> 5; - if (w < 0 || w >= x.Length) - { - return 0; - } - int b = bit & 31; - return (x[w] >> b) & 1; - } - - public static bool Gte(int len, uint[] x, uint[] y) - { - for (int i = len - 1; i >= 0; --i) - { - uint x_i = x[i], y_i = y[i]; - if (x_i < y_i) - return false; - if (x_i > y_i) - return true; - } - return true; - } - - public static uint Inc(int len, uint[] z) - { - for (int i = 0; i < len; ++i) - { - if (++z[i] != uint.MinValue) - { - return 0; - } - } - return 1; - } - - public static uint Inc(int len, uint[] x, uint[] z) - { - int i = 0; - while (i < len) - { - uint c = x[i] + 1; - z[i] = c; - ++i; - if (c != 0) - { - while (i < len) - { - z[i] = x[i]; - ++i; - } - return 0; - } - } - return 1; - } - - public static uint IncAt(int len, uint[] z, int zPos) - { - Debug.Assert(zPos <= len); - for (int i = zPos; i < len; ++i) - { - if (++z[i] != uint.MinValue) - { - return 0; - } - } - return 1; - } - - public static uint IncAt(int len, uint[] z, int zOff, int zPos) - { - Debug.Assert(zPos <= len); - for (int i = zPos; i < len; ++i) - { - if (++z[zOff + i] != uint.MinValue) - { - return 0; - } - } - return 1; - } - - public static bool IsOne(int len, uint[] x) - { - if (x[0] != 1) - { - return false; - } - for (int i = 1; i < len; ++i) - { - if (x[i] != 0) - { - return false; - } - } - return true; - } - - public static bool IsZero(int len, uint[] x) - { - if (x[0] != 0) - { - return false; - } - for (int i = 1; i < len; ++i) - { - if (x[i] != 0) - { - return false; - } - } - return true; - } - - public static void Mul(int len, uint[] x, uint[] y, uint[] zz) - { - zz[len] = (uint)MulWord(len, x[0], y, zz); - - for (int i = 1; i < len; ++i) - { - zz[i + len] = (uint)MulWordAddTo(len, x[i], y, 0, zz, i); - } - } - - public static void Mul(int len, uint[] x, int xOff, uint[] y, int yOff, uint[] zz, int zzOff) - { - zz[zzOff + len] = (uint)MulWord(len, x[xOff], y, yOff, zz, zzOff); - - for (int i = 1; i < len; ++i) - { - zz[zzOff + i + len] = (uint)MulWordAddTo(len, x[xOff + i], y, yOff, zz, zzOff + i); - } - } - - public static uint Mul31BothAdd(int len, uint a, uint[] x, uint b, uint[] y, uint[] z, int zOff) - { - ulong c = 0, aVal = (ulong)a, bVal = (ulong)b; - int i = 0; - do - { - c += aVal * x[i] + bVal * y[i] + z[zOff + i]; - z[zOff + i] = (uint)c; - c >>= 32; - } - while (++i < len); - return (uint)c; - } - - public static uint MulWord(int len, uint x, uint[] y, uint[] z) - { - ulong c = 0, xVal = (ulong)x; - int i = 0; - do - { - c += xVal * y[i]; - z[i] = (uint)c; - c >>= 32; - } - while (++i < len); - return (uint)c; - } - - public static uint MulWord(int len, uint x, uint[] y, int yOff, uint[] z, int zOff) - { - ulong c = 0, xVal = (ulong)x; - int i = 0; - do - { - c += xVal * y[yOff + i]; - z[zOff + i] = (uint)c; - c >>= 32; - } - while (++i < len); - return (uint)c; - } - - public static uint MulWordAddTo(int len, uint x, uint[] y, int yOff, uint[] z, int zOff) - { - ulong c = 0, xVal = (ulong)x; - int i = 0; - do - { - c += xVal * y[yOff + i] + z[zOff + i]; - z[zOff + i] = (uint)c; - c >>= 32; - } - while (++i < len); - return (uint)c; - } - - public static uint MulWordDwordAddAt(int len, uint x, ulong y, uint[] z, int zPos) - { - Debug.Assert(zPos <= (len - 3)); - ulong c = 0, xVal = (ulong)x; - c += xVal * (uint)y + z[zPos + 0]; - z[zPos + 0] = (uint)c; - c >>= 32; - c += xVal * (y >> 32) + z[zPos + 1]; - z[zPos + 1] = (uint)c; - c >>= 32; - c += (ulong)z[zPos + 2]; - z[zPos + 2] = (uint)c; - c >>= 32; - return c == 0 ? 0 : IncAt(len, z, zPos + 3); - } - - public static uint ShiftDownBit(int len, uint[] z, uint c) - { - int i = len; - while (--i >= 0) - { - uint next = z[i]; - z[i] = (next >> 1) | (c << 31); - c = next; - } - return c << 31; - } - - public static uint ShiftDownBit(int len, uint[] z, int zOff, uint c) - { - int i = len; - while (--i >= 0) - { - uint next = z[zOff + i]; - z[zOff + i] = (next >> 1) | (c << 31); - c = next; - } - return c << 31; - } - - public static uint ShiftDownBit(int len, uint[] x, uint c, uint[] z) - { - int i = len; - while (--i >= 0) - { - uint next = x[i]; - z[i] = (next >> 1) | (c << 31); - c = next; - } - return c << 31; - } - - public static uint ShiftDownBit(int len, uint[] x, int xOff, uint c, uint[] z, int zOff) - { - int i = len; - while (--i >= 0) - { - uint next = x[xOff + i]; - z[zOff + i] = (next >> 1) | (c << 31); - c = next; - } - return c << 31; - } - - public static uint ShiftDownBits(int len, uint[] z, int bits, uint c) - { - Debug.Assert(bits > 0 && bits < 32); - int i = len; - while (--i >= 0) - { - uint next = z[i]; - z[i] = (next >> bits) | (c << -bits); - c = next; - } - return c << -bits; - } - - public static uint ShiftDownBits(int len, uint[] z, int zOff, int bits, uint c) - { - Debug.Assert(bits > 0 && bits < 32); - int i = len; - while (--i >= 0) - { - uint next = z[zOff + i]; - z[zOff + i] = (next >> bits) | (c << -bits); - c = next; - } - return c << -bits; - } - - public static uint ShiftDownBits(int len, uint[] x, int bits, uint c, uint[] z) - { - Debug.Assert(bits > 0 && bits < 32); - int i = len; - while (--i >= 0) - { - uint next = x[i]; - z[i] = (next >> bits) | (c << -bits); - c = next; - } - return c << -bits; - } - - public static uint ShiftDownBits(int len, uint[] x, int xOff, int bits, uint c, uint[] z, int zOff) - { - Debug.Assert(bits > 0 && bits < 32); - int i = len; - while (--i >= 0) - { - uint next = x[xOff + i]; - z[zOff + i] = (next >> bits) | (c << -bits); - c = next; - } - return c << -bits; - } - - public static uint ShiftDownWord(int len, uint[] z, uint c) - { - int i = len; - while (--i >= 0) - { - uint next = z[i]; - z[i] = c; - c = next; - } - return c; - } - - public static uint ShiftUpBit(int len, uint[] z, uint c) - { - for (int i = 0; i < len; ++i) - { - uint next = z[i]; - z[i] = (next << 1) | (c >> 31); - c = next; - } - return c >> 31; - } - - public static uint ShiftUpBit(int len, uint[] z, int zOff, uint c) - { - for (int i = 0; i < len; ++i) - { - uint next = z[zOff + i]; - z[zOff + i] = (next << 1) | (c >> 31); - c = next; - } - return c >> 31; - } - - public static uint ShiftUpBit(int len, uint[] x, uint c, uint[] z) - { - for (int i = 0; i < len; ++i) - { - uint next = x[i]; - z[i] = (next << 1) | (c >> 31); - c = next; - } - return c >> 31; - } - - public static uint ShiftUpBit(int len, uint[] x, int xOff, uint c, uint[] z, int zOff) - { - for (int i = 0; i < len; ++i) - { - uint next = x[xOff + i]; - z[zOff + i] = (next << 1) | (c >> 31); - c = next; - } - return c >> 31; - } - - public static ulong ShiftUpBit64(int len, ulong[] x, int xOff, ulong c, ulong[] z, int zOff) - { - for (int i = 0; i < len; ++i) - { - ulong next = x[xOff + i]; - z[zOff + i] = (next << 1) | (c >> 63); - c = next; - } - return c >> 63; - } - - public static uint ShiftUpBits(int len, uint[] z, int bits, uint c) - { - Debug.Assert(bits > 0 && bits < 32); - for (int i = 0; i < len; ++i) - { - uint next = z[i]; - z[i] = (next << bits) | (c >> -bits); - c = next; - } - return c >> -bits; - } - - public static uint ShiftUpBits(int len, uint[] z, int zOff, int bits, uint c) - { - Debug.Assert(bits > 0 && bits < 32); - for (int i = 0; i < len; ++i) - { - uint next = z[zOff + i]; - z[zOff + i] = (next << bits) | (c >> -bits); - c = next; - } - return c >> -bits; - } - - public static ulong ShiftUpBits64(int len, ulong[] z, int zOff, int bits, ulong c) - { - Debug.Assert(bits > 0 && bits < 64); - for (int i = 0; i < len; ++i) - { - ulong next = z[zOff + i]; - z[zOff + i] = (next << bits) | (c >> -bits); - c = next; - } - return c >> -bits; - } - - public static uint ShiftUpBits(int len, uint[] x, int bits, uint c, uint[] z) - { - Debug.Assert(bits > 0 && bits < 32); - for (int i = 0; i < len; ++i) - { - uint next = x[i]; - z[i] = (next << bits) | (c >> -bits); - c = next; - } - return c >> -bits; - } - - public static uint ShiftUpBits(int len, uint[] x, int xOff, int bits, uint c, uint[] z, int zOff) - { - Debug.Assert(bits > 0 && bits < 32); - for (int i = 0; i < len; ++i) - { - uint next = x[xOff + i]; - z[zOff + i] = (next << bits) | (c >> -bits); - c = next; - } - return c >> -bits; - } - - public static ulong ShiftUpBits64(int len, ulong[] x, int xOff, int bits, ulong c, ulong[] z, int zOff) - { - Debug.Assert(bits > 0 && bits < 64); - for (int i = 0; i < len; ++i) - { - ulong next = x[xOff + i]; - z[zOff + i] = (next << bits) | (c >> -bits); - c = next; - } - return c >> -bits; - } - - public static void Square(int len, uint[] x, uint[] zz) - { - int extLen = len << 1; - uint c = 0; - int j = len, k = extLen; - do - { - ulong xVal = (ulong)x[--j]; - ulong p = xVal * xVal; - zz[--k] = (c << 31) | (uint)(p >> 33); - zz[--k] = (uint)(p >> 1); - c = (uint)p; - } - while (j > 0); - - for (int i = 1; i < len; ++i) - { - c = SquareWordAdd(x, i, zz); - AddWordAt(extLen, c, zz, i << 1); - } - - ShiftUpBit(extLen, zz, x[0] << 31); - } - - public static void Square(int len, uint[] x, int xOff, uint[] zz, int zzOff) - { - int extLen = len << 1; - uint c = 0; - int j = len, k = extLen; - do - { - ulong xVal = (ulong)x[xOff + --j]; - ulong p = xVal * xVal; - zz[zzOff + --k] = (c << 31) | (uint)(p >> 33); - zz[zzOff + --k] = (uint)(p >> 1); - c = (uint)p; - } - while (j > 0); - - for (int i = 1; i < len; ++i) - { - c = SquareWordAdd(x, xOff, i, zz, zzOff); - AddWordAt(extLen, c, zz, zzOff, i << 1); - } - - ShiftUpBit(extLen, zz, zzOff, x[xOff] << 31); - } - - public static uint SquareWordAdd(uint[] x, int xPos, uint[] z) - { - ulong c = 0, xVal = (ulong)x[xPos]; - int i = 0; - do - { - c += xVal * x[i] + z[xPos + i]; - z[xPos + i] = (uint)c; - c >>= 32; - } - while (++i < xPos); - return (uint)c; - } - - public static uint SquareWordAdd(uint[] x, int xOff, int xPos, uint[] z, int zOff) - { - ulong c = 0, xVal = (ulong)x[xOff + xPos]; - int i = 0; - do - { - c += xVal * (x[xOff + i] & M) + (z[xPos + zOff] & M); - z[xPos + zOff] = (uint)c; - c >>= 32; - ++zOff; - } - while (++i < xPos); - return (uint)c; - } - - public static int Sub(int len, uint[] x, uint[] y, uint[] z) - { - long c = 0; - for (int i = 0; i < len; ++i) - { - c += (long)x[i] - y[i]; - z[i] = (uint)c; - c >>= 32; - } - return (int)c; - } - - public static int Sub(int len, uint[] x, int xOff, uint[] y, int yOff, uint[] z, int zOff) - { - long c = 0; - for (int i = 0; i < len; ++i) - { - c += (long)x[xOff + i] - y[yOff + i]; - z[zOff + i] = (uint)c; - c >>= 32; - } - return (int)c; - } - public static int Sub33At(int len, uint x, uint[] z, int zPos) - { - Debug.Assert(zPos <= (len - 2)); - long c = (long)z[zPos + 0] - x; - z[zPos + 0] = (uint)c; - c >>= 32; - c += (long)z[zPos + 1] - 1; - z[zPos + 1] = (uint)c; - c >>= 32; - return c == 0 ? 0 : DecAt(len, z, zPos + 2); - } - - public static int Sub33At(int len, uint x, uint[] z, int zOff, int zPos) - { - Debug.Assert(zPos <= (len - 2)); - long c = (long)z[zOff + zPos] - x; - z[zOff + zPos] = (uint)c; - c >>= 32; - c += (long)z[zOff + zPos + 1] - 1; - z[zOff + zPos + 1] = (uint)c; - c >>= 32; - return c == 0 ? 0 : DecAt(len, z, zOff, zPos + 2); - } - - public static int Sub33From(int len, uint x, uint[] z) - { - long c = (long)z[0] - x; - z[0] = (uint)c; - c >>= 32; - c += (long)z[1] - 1; - z[1] = (uint)c; - c >>= 32; - return c == 0 ? 0 : DecAt(len, z, 2); - } - - public static int Sub33From(int len, uint x, uint[] z, int zOff) - { - long c = (long)z[zOff + 0] - x; - z[zOff + 0] = (uint)c; - c >>= 32; - c += (long)z[zOff + 1] - 1; - z[zOff + 1] = (uint)c; - c >>= 32; - return c == 0 ? 0 : DecAt(len, z, zOff, 2); - } - - public static int SubBothFrom(int len, uint[] x, uint[] y, uint[] z) - { - long c = 0; - for (int i = 0; i < len; ++i) - { - c += (long)z[i] - x[i] - y[i]; - z[i] = (uint)c; - c >>= 32; - } - return (int)c; - } - - public static int SubBothFrom(int len, uint[] x, int xOff, uint[] y, int yOff, uint[] z, int zOff) - { - long c = 0; - for (int i = 0; i < len; ++i) - { - c += (long)z[zOff + i] - x[xOff + i] - y[yOff + i]; - z[zOff + i] = (uint)c; - c >>= 32; - } - return (int)c; - } - - public static int SubDWordAt(int len, ulong x, uint[] z, int zPos) - { - Debug.Assert(zPos <= (len - 2)); - long c = (long)z[zPos + 0] - (long)(x & M); - z[zPos + 0] = (uint)c; - c >>= 32; - c += (long)z[zPos + 1] - (long)(x >> 32); - z[zPos + 1] = (uint)c; - c >>= 32; - return c == 0 ? 0 : DecAt(len, z, zPos + 2); - } - - public static int SubDWordAt(int len, ulong x, uint[] z, int zOff, int zPos) - { - Debug.Assert(zPos <= (len - 2)); - long c = (long)z[zOff + zPos] - (long)(x & M); - z[zOff + zPos] = (uint)c; - c >>= 32; - c += (long)z[zOff + zPos + 1] - (long)(x >> 32); - z[zOff + zPos + 1] = (uint)c; - c >>= 32; - return c == 0 ? 0 : DecAt(len, z, zOff, zPos + 2); - } - - public static int SubDWordFrom(int len, ulong x, uint[] z) - { - long c = (long)z[0] - (long)(x & M); - z[0] = (uint)c; - c >>= 32; - c += (long)z[1] - (long)(x >> 32); - z[1] = (uint)c; - c >>= 32; - return c == 0 ? 0 : DecAt(len, z, 2); - } - - public static int SubDWordFrom(int len, ulong x, uint[] z, int zOff) - { - long c = (long)z[zOff + 0] - (long)(x & M); - z[zOff + 0] = (uint)c; - c >>= 32; - c += (long)z[zOff + 1] - (long)(x >> 32); - z[zOff + 1] = (uint)c; - c >>= 32; - return c == 0 ? 0 : DecAt(len, z, zOff, 2); - } - - public static int SubFrom(int len, uint[] x, uint[] z) - { - long c = 0; - for (int i = 0; i < len; ++i) - { - c += (long)z[i] - x[i]; - z[i] = (uint)c; - c >>= 32; - } - return (int)c; - } - - public static int SubFrom(int len, uint[] x, int xOff, uint[] z, int zOff) - { - long c = 0; - for (int i = 0; i < len; ++i) - { - c += (long)z[zOff + i] - x[xOff + i]; - z[zOff + i] = (uint)c; - c >>= 32; - } - return (int)c; - } - - public static int SubWordAt(int len, uint x, uint[] z, int zPos) - { - Debug.Assert(zPos <= (len - 1)); - long c = (long)z[zPos] - x; - z[zPos] = (uint)c; - c >>= 32; - return c == 0 ? 0 : DecAt(len, z, zPos + 1); - } - - public static int SubWordAt(int len, uint x, uint[] z, int zOff, int zPos) - { - Debug.Assert(zPos <= (len - 1)); - long c = (long)z[zOff + zPos] - x; - z[zOff + zPos] = (uint)c; - c >>= 32; - return c == 0 ? 0 : DecAt(len, z, zOff, zPos + 1); - } - - public static int SubWordFrom(int len, uint x, uint[] z) - { - long c = (long)z[0] - x; - z[0] = (uint)c; - c >>= 32; - return c == 0 ? 0 : DecAt(len, z, 1); - } - - public static int SubWordFrom(int len, uint x, uint[] z, int zOff) - { - long c = (long)z[zOff + 0] - x; - z[zOff + 0] = (uint)c; - c >>= 32; - return c == 0 ? 0 : DecAt(len, z, zOff, 1); - } - - public static BigInteger ToBigInteger(int len, uint[] x) - { - byte[] bs = new byte[len << 2]; - for (int i = 0; i < len; ++i) - { - uint x_i = x[i]; - if (x_i != 0) - { - Pack.UInt32_To_BE(x_i, bs, (len - 1 - i) << 2); - } - } - return new BigInteger(1, bs); - } - - public static void Zero(int len, uint[] z) - { - for (int i = 0; i < len; ++i) - { - z[i] = 0; - } - } - } -} diff --git a/bc-sharp-crypto/src/math/raw/Nat128.cs b/bc-sharp-crypto/src/math/raw/Nat128.cs deleted file mode 100644 index 1d3b64d..0000000 --- a/bc-sharp-crypto/src/math/raw/Nat128.cs +++ /dev/null @@ -1,856 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Crypto.Utilities; - -namespace Org.BouncyCastle.Math.Raw -{ - internal abstract class Nat128 - { - private const ulong M = 0xFFFFFFFFUL; - - public static uint Add(uint[] x, uint[] y, uint[] z) - { - ulong c = 0; - c += (ulong)x[0] + y[0]; - z[0] = (uint)c; - c >>= 32; - c += (ulong)x[1] + y[1]; - z[1] = (uint)c; - c >>= 32; - c += (ulong)x[2] + y[2]; - z[2] = (uint)c; - c >>= 32; - c += (ulong)x[3] + y[3]; - z[3] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint AddBothTo(uint[] x, uint[] y, uint[] z) - { - ulong c = 0; - c += (ulong)x[0] + y[0] + z[0]; - z[0] = (uint)c; - c >>= 32; - c += (ulong)x[1] + y[1] + z[1]; - z[1] = (uint)c; - c >>= 32; - c += (ulong)x[2] + y[2] + z[2]; - z[2] = (uint)c; - c >>= 32; - c += (ulong)x[3] + y[3] + z[3]; - z[3] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint AddTo(uint[] x, uint[] z) - { - ulong c = 0; - c += (ulong)x[0] + z[0]; - z[0] = (uint)c; - c >>= 32; - c += (ulong)x[1] + z[1]; - z[1] = (uint)c; - c >>= 32; - c += (ulong)x[2] + z[2]; - z[2] = (uint)c; - c >>= 32; - c += (ulong)x[3] + z[3]; - z[3] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint AddTo(uint[] x, int xOff, uint[] z, int zOff, uint cIn) - { - ulong c = cIn; - c += (ulong)x[xOff + 0] + z[zOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 1] + z[zOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 2] + z[zOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 3] + z[zOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint AddToEachOther(uint[] u, int uOff, uint[] v, int vOff) - { - ulong c = 0; - c += (ulong)u[uOff + 0] + v[vOff + 0]; - u[uOff + 0] = (uint)c; - v[vOff + 0] = (uint)c; - c >>= 32; - c += (ulong)u[uOff + 1] + v[vOff + 1]; - u[uOff + 1] = (uint)c; - v[vOff + 1] = (uint)c; - c >>= 32; - c += (ulong)u[uOff + 2] + v[vOff + 2]; - u[uOff + 2] = (uint)c; - v[vOff + 2] = (uint)c; - c >>= 32; - c += (ulong)u[uOff + 3] + v[vOff + 3]; - u[uOff + 3] = (uint)c; - v[vOff + 3] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static void Copy(uint[] x, uint[] z) - { - z[0] = x[0]; - z[1] = x[1]; - z[2] = x[2]; - z[3] = x[3]; - } - - public static void Copy64(ulong[] x, ulong[] z) - { - z[0] = x[0]; - z[1] = x[1]; - } - - public static uint[] Create() - { - return new uint[4]; - } - - public static ulong[] Create64() - { - return new ulong[2]; - } - - public static uint[] CreateExt() - { - return new uint[8]; - } - - public static ulong[] CreateExt64() - { - return new ulong[4]; - } - - public static bool Diff(uint[] x, int xOff, uint[] y, int yOff, uint[] z, int zOff) - { - bool pos = Gte(x, xOff, y, yOff); - if (pos) - { - Sub(x, xOff, y, yOff, z, zOff); - } - else - { - Sub(y, yOff, x, xOff, z, zOff); - } - return pos; - } - - public static bool Eq(uint[] x, uint[] y) - { - for (int i = 3; i >= 0; --i) - { - if (x[i] != y[i]) - return false; - } - return true; - } - - public static bool Eq64(ulong[] x, ulong[] y) - { - for (int i = 1; i >= 0; --i) - { - if (x[i] != y[i]) - return false; - } - return true; - } - - public static uint[] FromBigInteger(BigInteger x) - { - if (x.SignValue < 0 || x.BitLength > 128) - throw new ArgumentException(); - - uint[] z = Create(); - int i = 0; - while (x.SignValue != 0) - { - z[i++] = (uint)x.IntValue; - x = x.ShiftRight(32); - } - return z; - } - - public static ulong[] FromBigInteger64(BigInteger x) - { - if (x.SignValue < 0 || x.BitLength > 128) - throw new ArgumentException(); - - ulong[] z = Create64(); - int i = 0; - while (x.SignValue != 0) - { - z[i++] = (ulong)x.LongValue; - x = x.ShiftRight(64); - } - return z; - } - - public static uint GetBit(uint[] x, int bit) - { - if (bit == 0) - { - return x[0] & 1; - } - if ((bit & 127) != bit) - { - return 0; - } - int w = bit >> 5; - int b = bit & 31; - return (x[w] >> b) & 1; - } - - public static bool Gte(uint[] x, uint[] y) - { - for (int i = 3; i >= 0; --i) - { - uint x_i = x[i], y_i = y[i]; - if (x_i < y_i) - return false; - if (x_i > y_i) - return true; - } - return true; - } - - public static bool Gte(uint[] x, int xOff, uint[] y, int yOff) - { - for (int i = 3; i >= 0; --i) - { - uint x_i = x[xOff + i], y_i = y[yOff + i]; - if (x_i < y_i) - return false; - if (x_i > y_i) - return true; - } - return true; - } - - public static bool IsOne(uint[] x) - { - if (x[0] != 1) - { - return false; - } - for (int i = 1; i < 4; ++i) - { - if (x[i] != 0) - { - return false; - } - } - return true; - } - - public static bool IsOne64(ulong[] x) - { - if (x[0] != 1UL) - { - return false; - } - for (int i = 1; i < 2; ++i) - { - if (x[i] != 0UL) - { - return false; - } - } - return true; - } - - public static bool IsZero(uint[] x) - { - for (int i = 0; i < 4; ++i) - { - if (x[i] != 0) - { - return false; - } - } - return true; - } - - public static bool IsZero64(ulong[] x) - { - for (int i = 0; i < 2; ++i) - { - if (x[i] != 0UL) - { - return false; - } - } - return true; - } - - public static void Mul(uint[] x, uint[] y, uint[] zz) - { - ulong y_0 = y[0]; - ulong y_1 = y[1]; - ulong y_2 = y[2]; - ulong y_3 = y[3]; - - { - ulong c = 0, x_0 = x[0]; - c += x_0 * y_0; - zz[0] = (uint)c; - c >>= 32; - c += x_0 * y_1; - zz[1] = (uint)c; - c >>= 32; - c += x_0 * y_2; - zz[2] = (uint)c; - c >>= 32; - c += x_0 * y_3; - zz[3] = (uint)c; - c >>= 32; - zz[4] = (uint)c; - } - - for (int i = 1; i < 4; ++i) - { - ulong c = 0, x_i = x[i]; - c += x_i * y_0 + zz[i + 0]; - zz[i + 0] = (uint)c; - c >>= 32; - c += x_i * y_1 + zz[i + 1]; - zz[i + 1] = (uint)c; - c >>= 32; - c += x_i * y_2 + zz[i + 2]; - zz[i + 2] = (uint)c; - c >>= 32; - c += x_i * y_3 + zz[i + 3]; - zz[i + 3] = (uint)c; - c >>= 32; - zz[i + 4] = (uint)c; - } - } - - public static void Mul(uint[] x, int xOff, uint[] y, int yOff, uint[] zz, int zzOff) - { - ulong y_0 = y[yOff + 0]; - ulong y_1 = y[yOff + 1]; - ulong y_2 = y[yOff + 2]; - ulong y_3 = y[yOff + 3]; - - { - ulong c = 0, x_0 = x[xOff + 0]; - c += x_0 * y_0; - zz[zzOff + 0] = (uint)c; - c >>= 32; - c += x_0 * y_1; - zz[zzOff + 1] = (uint)c; - c >>= 32; - c += x_0 * y_2; - zz[zzOff + 2] = (uint)c; - c >>= 32; - c += x_0 * y_3; - zz[zzOff + 3] = (uint)c; - c >>= 32; - zz[zzOff + 4] = (uint)c; - } - - for (int i = 1; i < 4; ++i) - { - ++zzOff; - ulong c = 0, x_i = x[xOff + i]; - c += x_i * y_0 + zz[zzOff + 0]; - zz[zzOff + 0] = (uint)c; - c >>= 32; - c += x_i * y_1 + zz[zzOff + 1]; - zz[zzOff + 1] = (uint)c; - c >>= 32; - c += x_i * y_2 + zz[zzOff + 2]; - zz[zzOff + 2] = (uint)c; - c >>= 32; - c += x_i * y_3 + zz[zzOff + 3]; - zz[zzOff + 3] = (uint)c; - c >>= 32; - zz[zzOff + 4] = (uint)c; - } - } - - public static uint MulAddTo(uint[] x, uint[] y, uint[] zz) - { - ulong y_0 = y[0]; - ulong y_1 = y[1]; - ulong y_2 = y[2]; - ulong y_3 = y[3]; - - ulong zc = 0; - for (int i = 0; i < 4; ++i) - { - ulong c = 0, x_i = x[i]; - c += x_i * y_0 + zz[i + 0]; - zz[i + 0] = (uint)c; - c >>= 32; - c += x_i * y_1 + zz[i + 1]; - zz[i + 1] = (uint)c; - c >>= 32; - c += x_i * y_2 + zz[i + 2]; - zz[i + 2] = (uint)c; - c >>= 32; - c += x_i * y_3 + zz[i + 3]; - zz[i + 3] = (uint)c; - c >>= 32; - c += zc + zz[i + 4]; - zz[i + 4] = (uint)c; - zc = c >> 32; - } - return (uint)zc; - } - - public static uint MulAddTo(uint[] x, int xOff, uint[] y, int yOff, uint[] zz, int zzOff) - { - ulong y_0 = y[yOff + 0]; - ulong y_1 = y[yOff + 1]; - ulong y_2 = y[yOff + 2]; - ulong y_3 = y[yOff + 3]; - - ulong zc = 0; - for (int i = 0; i < 4; ++i) - { - ulong c = 0, x_i = x[xOff + i]; - c += x_i * y_0 + zz[zzOff + 0]; - zz[zzOff + 0] = (uint)c; - c >>= 32; - c += x_i * y_1 + zz[zzOff + 1]; - zz[zzOff + 1] = (uint)c; - c >>= 32; - c += x_i * y_2 + zz[zzOff + 2]; - zz[zzOff + 2] = (uint)c; - c >>= 32; - c += x_i * y_3 + zz[zzOff + 3]; - zz[zzOff + 3] = (uint)c; - c >>= 32; - c += zc + zz[zzOff + 4]; - zz[zzOff + 4] = (uint)c; - zc = c >> 32; - ++zzOff; - } - return (uint)zc; - } - - public static ulong Mul33Add(uint w, uint[] x, int xOff, uint[] y, int yOff, uint[] z, int zOff) - { - Debug.Assert(w >> 31 == 0); - - ulong c = 0, wVal = w; - ulong x0 = x[xOff + 0]; - c += wVal * x0 + y[yOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - ulong x1 = x[xOff + 1]; - c += wVal * x1 + x0 + y[yOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - ulong x2 = x[xOff + 2]; - c += wVal * x2 + x1 + y[yOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - ulong x3 = x[xOff + 3]; - c += wVal * x3 + x2 + y[yOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - c += x3; - return c; - } - - public static uint MulWordAddExt(uint x, uint[] yy, int yyOff, uint[] zz, int zzOff) - { - Debug.Assert(yyOff <= 4); - Debug.Assert(zzOff <= 4); - - ulong c = 0, xVal = x; - c += xVal * yy[yyOff + 0] + zz[zzOff + 0]; - zz[zzOff + 0] = (uint)c; - c >>= 32; - c += xVal * yy[yyOff + 1] + zz[zzOff + 1]; - zz[zzOff + 1] = (uint)c; - c >>= 32; - c += xVal * yy[yyOff + 2] + zz[zzOff + 2]; - zz[zzOff + 2] = (uint)c; - c >>= 32; - c += xVal * yy[yyOff + 3] + zz[zzOff + 3]; - zz[zzOff + 3] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint Mul33DWordAdd(uint x, ulong y, uint[] z, int zOff) - { - Debug.Assert(x >> 31 == 0); - Debug.Assert(zOff <= 0); - ulong c = 0, xVal = x; - ulong y00 = y & M; - c += xVal * y00 + z[zOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - ulong y01 = y >> 32; - c += xVal * y01 + y00 + z[zOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += y01 + z[zOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - c += z[zOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint Mul33WordAdd(uint x, uint y, uint[] z, int zOff) - { - Debug.Assert(x >> 31 == 0); - Debug.Assert(zOff <= 1); - ulong c = 0, yVal = y; - c += yVal * x + z[zOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += yVal + z[zOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += z[zOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - return c == 0 ? 0 : Nat.IncAt(4, z, zOff, 3); - } - - public static uint MulWordDwordAdd(uint x, ulong y, uint[] z, int zOff) - { - Debug.Assert(zOff <= 1); - ulong c = 0, xVal = x; - c += xVal * y + z[zOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += xVal * (y >> 32) + z[zOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += z[zOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - return c == 0 ? 0 : Nat.IncAt(4, z, zOff, 3); - } - - public static uint MulWordsAdd(uint x, uint y, uint[] z, int zOff) - { - Debug.Assert(zOff <= 2); - - ulong c = 0, xVal = x, yVal = y; - c += yVal * xVal + z[zOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += z[zOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - return c == 0 ? 0 : Nat.IncAt(4, z, zOff, 2); - } - - public static uint MulWord(uint x, uint[] y, uint[] z, int zOff) - { - ulong c = 0, xVal = x; - int i = 0; - do - { - c += xVal * y[i]; - z[zOff + i] = (uint)c; - c >>= 32; - } - while (++i < 4); - return (uint)c; - } - - public static void Square(uint[] x, uint[] zz) - { - ulong x_0 = x[0]; - ulong zz_1; - - uint c = 0, w; - { - int i = 3, j = 8; - do - { - ulong xVal = x[i--]; - ulong p = xVal * xVal; - zz[--j] = (c << 31) | (uint)(p >> 33); - zz[--j] = (uint)(p >> 1); - c = (uint)p; - } - while (i > 0); - - { - ulong p = x_0 * x_0; - zz_1 = (ulong)(c << 31) | (p >> 33); - zz[0] = (uint)p; - c = (uint)(p >> 32) & 1; - } - } - - ulong x_1 = x[1]; - ulong zz_2 = zz[2]; - - { - zz_1 += x_1 * x_0; - w = (uint)zz_1; - zz[1] = (w << 1) | c; - c = w >> 31; - zz_2 += zz_1 >> 32; - } - - ulong x_2 = x[2]; - ulong zz_3 = zz[3]; - ulong zz_4 = zz[4]; - { - zz_2 += x_2 * x_0; - w = (uint)zz_2; - zz[2] = (w << 1) | c; - c = w >> 31; - zz_3 += (zz_2 >> 32) + x_2 * x_1; - zz_4 += zz_3 >> 32; - zz_3 &= M; - } - - ulong x_3 = x[3]; - ulong zz_5 = zz[5] + (zz_4 >> 32); zz_4 &= M; - ulong zz_6 = zz[6] + (zz_5 >> 32); zz_5 &= M; - { - zz_3 += x_3 * x_0; - w = (uint)zz_3; - zz[3] = (w << 1) | c; - c = w >> 31; - zz_4 += (zz_3 >> 32) + x_3 * x_1; - zz_5 += (zz_4 >> 32) + x_3 * x_2; - zz_6 += zz_5 >> 32; - } - - w = (uint)zz_4; - zz[4] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_5; - zz[5] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_6; - zz[6] = (w << 1) | c; - c = w >> 31; - w = zz[7] + (uint)(zz_6 >> 32); - zz[7] = (w << 1) | c; - } - - public static void Square(uint[] x, int xOff, uint[] zz, int zzOff) - { - ulong x_0 = x[xOff + 0]; - ulong zz_1; - - uint c = 0, w; - { - int i = 3, j = 8; - do - { - ulong xVal = x[xOff + i--]; - ulong p = xVal * xVal; - zz[zzOff + --j] = (c << 31) | (uint)(p >> 33); - zz[zzOff + --j] = (uint)(p >> 1); - c = (uint)p; - } - while (i > 0); - - { - ulong p = x_0 * x_0; - zz_1 = (ulong)(c << 31) | (p >> 33); - zz[zzOff + 0] = (uint)p; - c = (uint)(p >> 32) & 1; - } - } - - ulong x_1 = x[xOff + 1]; - ulong zz_2 = zz[zzOff + 2]; - - { - zz_1 += x_1 * x_0; - w = (uint)zz_1; - zz[zzOff + 1] = (w << 1) | c; - c = w >> 31; - zz_2 += zz_1 >> 32; - } - - ulong x_2 = x[xOff + 2]; - ulong zz_3 = zz[zzOff + 3]; - ulong zz_4 = zz[zzOff + 4]; - { - zz_2 += x_2 * x_0; - w = (uint)zz_2; - zz[zzOff + 2] = (w << 1) | c; - c = w >> 31; - zz_3 += (zz_2 >> 32) + x_2 * x_1; - zz_4 += zz_3 >> 32; - zz_3 &= M; - } - - ulong x_3 = x[xOff + 3]; - ulong zz_5 = zz[zzOff + 5] + (zz_4 >> 32); zz_4 &= M; - ulong zz_6 = zz[zzOff + 6] + (zz_5 >> 32); zz_5 &= M; - { - zz_3 += x_3 * x_0; - w = (uint)zz_3; - zz[zzOff + 3] = (w << 1) | c; - c = w >> 31; - zz_4 += (zz_3 >> 32) + x_3 * x_1; - zz_5 += (zz_4 >> 32) + x_3 * x_2; - zz_6 += zz_5 >> 32; - } - - w = (uint)zz_4; - zz[zzOff + 4] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_5; - zz[zzOff + 5] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_6; - zz[zzOff + 6] = (w << 1) | c; - c = w >> 31; - w = zz[zzOff + 7] + (uint)(zz_6 >> 32); - zz[zzOff + 7] = (w << 1) | c; - } - - public static int Sub(uint[] x, uint[] y, uint[] z) - { - long c = 0; - c += (long)x[0] - y[0]; - z[0] = (uint)c; - c >>= 32; - c += (long)x[1] - y[1]; - z[1] = (uint)c; - c >>= 32; - c += (long)x[2] - y[2]; - z[2] = (uint)c; - c >>= 32; - c += (long)x[3] - y[3]; - z[3] = (uint)c; - c >>= 32; - return (int)c; - } - - public static int Sub(uint[] x, int xOff, uint[] y, int yOff, uint[] z, int zOff) - { - long c = 0; - c += (long)x[xOff + 0] - y[yOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += (long)x[xOff + 1] - y[yOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += (long)x[xOff + 2] - y[yOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - c += (long)x[xOff + 3] - y[yOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - return (int)c; - } - - public static int SubBothFrom(uint[] x, uint[] y, uint[] z) - { - long c = 0; - c += (long)z[0] - x[0] - y[0]; - z[0] = (uint)c; - c >>= 32; - c += (long)z[1] - x[1] - y[1]; - z[1] = (uint)c; - c >>= 32; - c += (long)z[2] - x[2] - y[2]; - z[2] = (uint)c; - c >>= 32; - c += (long)z[3] - x[3] - y[3]; - z[3] = (uint)c; - c >>= 32; - return (int)c; - } - - public static int SubFrom(uint[] x, uint[] z) - { - long c = 0; - c += (long)z[0] - x[0]; - z[0] = (uint)c; - c >>= 32; - c += (long)z[1] - x[1]; - z[1] = (uint)c; - c >>= 32; - c += (long)z[2] - x[2]; - z[2] = (uint)c; - c >>= 32; - c += (long)z[3] - x[3]; - z[3] = (uint)c; - c >>= 32; - return (int)c; - } - - public static int SubFrom(uint[] x, int xOff, uint[] z, int zOff) - { - long c = 0; - c += (long)z[zOff + 0] - x[xOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += (long)z[zOff + 1] - x[xOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += (long)z[zOff + 2] - x[xOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - c += (long)z[zOff + 3] - x[xOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - return (int)c; - } - - public static BigInteger ToBigInteger(uint[] x) - { - byte[] bs = new byte[16]; - for (int i = 0; i < 4; ++i) - { - uint x_i = x[i]; - if (x_i != 0) - { - Pack.UInt32_To_BE(x_i, bs, (3 - i) << 2); - } - } - return new BigInteger(1, bs); - } - - public static BigInteger ToBigInteger64(ulong[] x) - { - byte[] bs = new byte[16]; - for (int i = 0; i < 2; ++i) - { - ulong x_i = x[i]; - if (x_i != 0UL) - { - Pack.UInt64_To_BE(x_i, bs, (1 - i) << 3); - } - } - return new BigInteger(1, bs); - } - - public static void Zero(uint[] z) - { - z[0] = 0; - z[1] = 0; - z[2] = 0; - z[3] = 0; - } - } -} diff --git a/bc-sharp-crypto/src/math/raw/Nat160.cs b/bc-sharp-crypto/src/math/raw/Nat160.cs deleted file mode 100644 index 1fd00e5..0000000 --- a/bc-sharp-crypto/src/math/raw/Nat160.cs +++ /dev/null @@ -1,874 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Crypto.Utilities; - -namespace Org.BouncyCastle.Math.Raw -{ - internal abstract class Nat160 - { - private const ulong M = 0xFFFFFFFFUL; - - public static uint Add(uint[] x, uint[] y, uint[] z) - { - ulong c = 0; - c += (ulong)x[0] + y[0]; - z[0] = (uint)c; - c >>= 32; - c += (ulong)x[1] + y[1]; - z[1] = (uint)c; - c >>= 32; - c += (ulong)x[2] + y[2]; - z[2] = (uint)c; - c >>= 32; - c += (ulong)x[3] + y[3]; - z[3] = (uint)c; - c >>= 32; - c += (ulong)x[4] + y[4]; - z[4] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint AddBothTo(uint[] x, uint[] y, uint[] z) - { - ulong c = 0; - c += (ulong)x[0] + y[0] + z[0]; - z[0] = (uint)c; - c >>= 32; - c += (ulong)x[1] + y[1] + z[1]; - z[1] = (uint)c; - c >>= 32; - c += (ulong)x[2] + y[2] + z[2]; - z[2] = (uint)c; - c >>= 32; - c += (ulong)x[3] + y[3] + z[3]; - z[3] = (uint)c; - c >>= 32; - c += (ulong)x[4] + y[4] + z[4]; - z[4] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint AddTo(uint[] x, uint[] z) - { - ulong c = 0; - c += (ulong)x[0] + z[0]; - z[0] = (uint)c; - c >>= 32; - c += (ulong)x[1] + z[1]; - z[1] = (uint)c; - c >>= 32; - c += (ulong)x[2] + z[2]; - z[2] = (uint)c; - c >>= 32; - c += (ulong)x[3] + z[3]; - z[3] = (uint)c; - c >>= 32; - c += (ulong)x[4] + z[4]; - z[4] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint AddTo(uint[] x, int xOff, uint[] z, int zOff, uint cIn) - { - ulong c = cIn; - c += (ulong)x[xOff + 0] + z[zOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 1] + z[zOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 2] + z[zOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 3] + z[zOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 4] + z[zOff + 4]; - z[zOff + 4] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 5] + z[zOff + 5]; - return (uint)c; - } - - public static uint AddToEachOther(uint[] u, int uOff, uint[] v, int vOff) - { - ulong c = 0; - c += (ulong)u[uOff + 0] + v[vOff + 0]; - u[uOff + 0] = (uint)c; - v[vOff + 0] = (uint)c; - c >>= 32; - c += (ulong)u[uOff + 1] + v[vOff + 1]; - u[uOff + 1] = (uint)c; - v[vOff + 1] = (uint)c; - c >>= 32; - c += (ulong)u[uOff + 2] + v[vOff + 2]; - u[uOff + 2] = (uint)c; - v[vOff + 2] = (uint)c; - c >>= 32; - c += (ulong)u[uOff + 3] + v[vOff + 3]; - u[uOff + 3] = (uint)c; - v[vOff + 3] = (uint)c; - c >>= 32; - c += (ulong)u[uOff + 4] + v[vOff + 4]; - u[uOff + 4] = (uint)c; - v[vOff + 4] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static void Copy(uint[] x, uint[] z) - { - z[0] = x[0]; - z[1] = x[1]; - z[2] = x[2]; - z[3] = x[3]; - z[4] = x[4]; - } - - public static uint[] Create() - { - return new uint[5]; - } - - public static uint[] CreateExt() - { - return new uint[10]; - } - - public static bool Diff(uint[] x, int xOff, uint[] y, int yOff, uint[] z, int zOff) - { - bool pos = Gte(x, xOff, y, yOff); - if (pos) - { - Sub(x, xOff, y, yOff, z, zOff); - } - else - { - Sub(y, yOff, x, xOff, z, zOff); - } - return pos; - } - - public static bool Eq(uint[] x, uint[] y) - { - for (int i = 4; i >= 0; --i) - { - if (x[i] != y[i]) - return false; - } - return true; - } - - public static uint[] FromBigInteger(BigInteger x) - { - if (x.SignValue < 0 || x.BitLength > 160) - throw new ArgumentException(); - - uint[] z = Create(); - int i = 0; - while (x.SignValue != 0) - { - z[i++] = (uint)x.IntValue; - x = x.ShiftRight(32); - } - return z; - } - - public static uint GetBit(uint[] x, int bit) - { - if (bit == 0) - { - return x[0] & 1; - } - int w = bit >> 5; - if (w < 0 || w >= 5) - { - return 0; - } - int b = bit & 31; - return (x[w] >> b) & 1; - } - - public static bool Gte(uint[] x, uint[] y) - { - for (int i = 4; i >= 0; --i) - { - uint x_i = x[i], y_i = y[i]; - if (x_i < y_i) - return false; - if (x_i > y_i) - return true; - } - return true; - } - - public static bool Gte(uint[] x, int xOff, uint[] y, int yOff) - { - for (int i = 4; i >= 0; --i) - { - uint x_i = x[xOff + i], y_i = y[yOff + i]; - if (x_i < y_i) - return false; - if (x_i > y_i) - return true; - } - return true; - } - - public static bool IsOne(uint[] x) - { - if (x[0] != 1) - { - return false; - } - for (int i = 1; i < 5; ++i) - { - if (x[i] != 0) - { - return false; - } - } - return true; - } - - public static bool IsZero(uint[] x) - { - for (int i = 0; i < 5; ++i) - { - if (x[i] != 0) - { - return false; - } - } - return true; - } - - public static void Mul(uint[] x, uint[] y, uint[] zz) - { - ulong y_0 = y[0]; - ulong y_1 = y[1]; - ulong y_2 = y[2]; - ulong y_3 = y[3]; - ulong y_4 = y[4]; - - { - ulong c = 0, x_0 = x[0]; - c += x_0 * y_0; - zz[0] = (uint)c; - c >>= 32; - c += x_0 * y_1; - zz[1] = (uint)c; - c >>= 32; - c += x_0 * y_2; - zz[2] = (uint)c; - c >>= 32; - c += x_0 * y_3; - zz[3] = (uint)c; - c >>= 32; - c += x_0 * y_4; - zz[4] = (uint)c; - c >>= 32; - zz[5] = (uint)c; - } - - for (int i = 1; i < 5; ++i) - { - ulong c = 0, x_i = x[i]; - c += x_i * y_0 + zz[i + 0]; - zz[i + 0] = (uint)c; - c >>= 32; - c += x_i * y_1 + zz[i + 1]; - zz[i + 1] = (uint)c; - c >>= 32; - c += x_i * y_2 + zz[i + 2]; - zz[i + 2] = (uint)c; - c >>= 32; - c += x_i * y_3 + zz[i + 3]; - zz[i + 3] = (uint)c; - c >>= 32; - c += x_i * y_4 + zz[i + 4]; - zz[i + 4] = (uint)c; - c >>= 32; - zz[i + 5] = (uint)c; - } - } - - public static void Mul(uint[] x, int xOff, uint[] y, int yOff, uint[] zz, int zzOff) - { - ulong y_0 = y[yOff + 0]; - ulong y_1 = y[yOff + 1]; - ulong y_2 = y[yOff + 2]; - ulong y_3 = y[yOff + 3]; - ulong y_4 = y[yOff + 4]; - - { - ulong c = 0, x_0 = x[xOff + 0]; - c += x_0 * y_0; - zz[zzOff + 0] = (uint)c; - c >>= 32; - c += x_0 * y_1; - zz[zzOff + 1] = (uint)c; - c >>= 32; - c += x_0 * y_2; - zz[zzOff + 2] = (uint)c; - c >>= 32; - c += x_0 * y_3; - zz[zzOff + 3] = (uint)c; - c >>= 32; - c += x_0 * y_4; - zz[zzOff + 4] = (uint)c; - c >>= 32; - zz[zzOff + 5] = (uint)c; - } - - for (int i = 1; i < 5; ++i) - { - ++zzOff; - ulong c = 0, x_i = x[xOff + i]; - c += x_i * y_0 + zz[zzOff + 0]; - zz[zzOff + 0] = (uint)c; - c >>= 32; - c += x_i * y_1 + zz[zzOff + 1]; - zz[zzOff + 1] = (uint)c; - c >>= 32; - c += x_i * y_2 + zz[zzOff + 2]; - zz[zzOff + 2] = (uint)c; - c >>= 32; - c += x_i * y_3 + zz[zzOff + 3]; - zz[zzOff + 3] = (uint)c; - c >>= 32; - c += x_i * y_4 + zz[zzOff + 4]; - zz[zzOff + 4] = (uint)c; - c >>= 32; - zz[zzOff + 5] = (uint)c; - } - } - - public static uint MulAddTo(uint[] x, uint[] y, uint[] zz) - { - ulong y_0 = y[0]; - ulong y_1 = y[1]; - ulong y_2 = y[2]; - ulong y_3 = y[3]; - ulong y_4 = y[4]; - - ulong zc = 0; - for (int i = 0; i < 5; ++i) - { - ulong c = 0, x_i = x[i]; - c += x_i * y_0 + zz[i + 0]; - zz[i + 0] = (uint)c; - c >>= 32; - c += x_i * y_1 + zz[i + 1]; - zz[i + 1] = (uint)c; - c >>= 32; - c += x_i * y_2 + zz[i + 2]; - zz[i + 2] = (uint)c; - c >>= 32; - c += x_i * y_3 + zz[i + 3]; - zz[i + 3] = (uint)c; - c >>= 32; - c += x_i * y_4 + zz[i + 4]; - zz[i + 4] = (uint)c; - c >>= 32; - c += zc + zz[i + 5]; - zz[i + 5] = (uint)c; - zc = c >> 32; - } - return (uint)zc; - } - - public static uint MulAddTo(uint[] x, int xOff, uint[] y, int yOff, uint[] zz, int zzOff) - { - ulong y_0 = y[yOff + 0]; - ulong y_1 = y[yOff + 1]; - ulong y_2 = y[yOff + 2]; - ulong y_3 = y[yOff + 3]; - ulong y_4 = y[yOff + 4]; - - ulong zc = 0; - for (int i = 0; i < 5; ++i) - { - ulong c = 0, x_i = x[xOff + i]; - c += x_i * y_0 + zz[zzOff + 0]; - zz[zzOff + 0] = (uint)c; - c >>= 32; - c += x_i * y_1 + zz[zzOff + 1]; - zz[zzOff + 1] = (uint)c; - c >>= 32; - c += x_i * y_2 + zz[zzOff + 2]; - zz[zzOff + 2] = (uint)c; - c >>= 32; - c += x_i * y_3 + zz[zzOff + 3]; - zz[zzOff + 3] = (uint)c; - c >>= 32; - c += x_i * y_4 + zz[zzOff + 4]; - zz[zzOff + 4] = (uint)c; - c >>= 32; - c += zc + zz[zzOff + 5]; - zz[zzOff + 5] = (uint)c; - zc = c >> 32; - ++zzOff; - } - return (uint)zc; - } - - public static ulong Mul33Add(uint w, uint[] x, int xOff, uint[] y, int yOff, uint[] z, int zOff) - { - Debug.Assert(w >> 31 == 0); - - ulong c = 0, wVal = w; - ulong x0 = x[xOff + 0]; - c += wVal * x0 + y[yOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - ulong x1 = x[xOff + 1]; - c += wVal * x1 + x0 + y[yOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - ulong x2 = x[xOff + 2]; - c += wVal * x2 + x1 + y[yOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - ulong x3 = x[xOff + 3]; - c += wVal * x3 + x2 + y[yOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - ulong x4 = x[xOff + 4]; - c += wVal * x4 + x3 + y[yOff + 4]; - z[zOff + 4] = (uint)c; - c >>= 32; - c += x4; - return c; - } - - public static uint MulWordAddExt(uint x, uint[] yy, int yyOff, uint[] zz, int zzOff) - { - Debug.Assert(yyOff <= 5); - Debug.Assert(zzOff <= 5); - - ulong c = 0, xVal = x; - c += xVal * yy[yyOff + 0] + zz[zzOff + 0]; - zz[zzOff + 0] = (uint)c; - c >>= 32; - c += xVal * yy[yyOff + 1] + zz[zzOff + 1]; - zz[zzOff + 1] = (uint)c; - c >>= 32; - c += xVal * yy[yyOff + 2] + zz[zzOff + 2]; - zz[zzOff + 2] = (uint)c; - c >>= 32; - c += xVal * yy[yyOff + 3] + zz[zzOff + 3]; - zz[zzOff + 3] = (uint)c; - c >>= 32; - c += xVal * yy[yyOff + 4] + zz[zzOff + 4]; - zz[zzOff + 4] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint Mul33DWordAdd(uint x, ulong y, uint[] z, int zOff) - { - Debug.Assert(x >> 31 == 0); - Debug.Assert(zOff <= 1); - ulong c = 0, xVal = x; - ulong y00 = y & M; - c += xVal * y00 + z[zOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - ulong y01 = y >> 32; - c += xVal * y01 + y00 + z[zOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += y01 + z[zOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - c += z[zOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - return c == 0 ? 0 : Nat.IncAt(5, z, zOff, 4); - } - - public static uint Mul33WordAdd(uint x, uint y, uint[] z, int zOff) - { - Debug.Assert(x >> 31 == 0); - Debug.Assert(zOff <= 2); - ulong c = 0, yVal = y; - c += yVal * x + z[zOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += yVal + z[zOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += z[zOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - return c == 0 ? 0 : Nat.IncAt(5, z, zOff, 3); - } - - public static uint MulWordDwordAdd(uint x, ulong y, uint[] z, int zOff) - { - Debug.Assert(zOff <= 2); - ulong c = 0, xVal = x; - c += xVal * y + z[zOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += xVal * (y >> 32) + z[zOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += z[zOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - return c == 0 ? 0 : Nat.IncAt(5, z, zOff, 3); - } - - public static uint MulWordsAdd(uint x, uint y, uint[] z, int zOff) - { - Debug.Assert(zOff <= 3); - - ulong c = 0, xVal = x, yVal = y; - c += yVal * xVal + z[zOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += z[zOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - return c == 0 ? 0 : Nat.IncAt(5, z, zOff, 2); - } - - public static uint MulWord(uint x, uint[] y, uint[] z, int zOff) - { - ulong c = 0, xVal = x; - int i = 0; - do - { - c += xVal * y[i]; - z[zOff + i] = (uint)c; - c >>= 32; - } - while (++i < 5); - return (uint)c; - } - - public static void Square(uint[] x, uint[] zz) - { - ulong x_0 = x[0]; - ulong zz_1; - - uint c = 0, w; - { - int i = 4, j = 10; - do - { - ulong xVal = x[i--]; - ulong p = xVal * xVal; - zz[--j] = (c << 31) | (uint)(p >> 33); - zz[--j] = (uint)(p >> 1); - c = (uint)p; - } - while (i > 0); - - { - ulong p = x_0 * x_0; - zz_1 = (ulong)(c << 31) | (p >> 33); - zz[0] = (uint)p; - c = (uint)(p >> 32) & 1; - } - } - - ulong x_1 = x[1]; - ulong zz_2 = zz[2]; - - { - zz_1 += x_1 * x_0; - w = (uint)zz_1; - zz[1] = (w << 1) | c; - c = w >> 31; - zz_2 += zz_1 >> 32; - } - - ulong x_2 = x[2]; - ulong zz_3 = zz[3]; - ulong zz_4 = zz[4]; - { - zz_2 += x_2 * x_0; - w = (uint)zz_2; - zz[2] = (w << 1) | c; - c = w >> 31; - zz_3 += (zz_2 >> 32) + x_2 * x_1; - zz_4 += zz_3 >> 32; - zz_3 &= M; - } - - ulong x_3 = x[3]; - ulong zz_5 = zz[5] + (zz_4 >> 32); zz_4 &= M; - ulong zz_6 = zz[6] + (zz_5 >> 32); zz_5 &= M; - { - zz_3 += x_3 * x_0; - w = (uint)zz_3; - zz[3] = (w << 1) | c; - c = w >> 31; - zz_4 += (zz_3 >> 32) + x_3 * x_1; - zz_5 += (zz_4 >> 32) + x_3 * x_2; - zz_4 &= M; - zz_6 += zz_5 >> 32; - zz_5 &= M; - } - - ulong x_4 = x[4]; - ulong zz_7 = zz[7] + (zz_6 >> 32); zz_6 &= M; - ulong zz_8 = zz[8] + (zz_7 >> 32); zz_7 &= M; - { - zz_4 += x_4 * x_0; - w = (uint)zz_4; - zz[4] = (w << 1) | c; - c = w >> 31; - zz_5 += (zz_4 >> 32) + x_4 * x_1; - zz_6 += (zz_5 >> 32) + x_4 * x_2; - zz_7 += (zz_6 >> 32) + x_4 * x_3; - zz_8 += zz_7 >> 32; - } - - w = (uint)zz_5; - zz[5] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_6; - zz[6] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_7; - zz[7] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_8; - zz[8] = (w << 1) | c; - c = w >> 31; - w = zz[9] + (uint)(zz_8 >> 32); - zz[9] = (w << 1) | c; - } - - public static void Square(uint[] x, int xOff, uint[] zz, int zzOff) - { - ulong x_0 = x[xOff + 0]; - ulong zz_1; - - uint c = 0, w; - { - int i = 4, j = 10; - do - { - ulong xVal = x[xOff + i--]; - ulong p = xVal * xVal; - zz[zzOff + --j] = (c << 31) | (uint)(p >> 33); - zz[zzOff + --j] = (uint)(p >> 1); - c = (uint)p; - } - while (i > 0); - - { - ulong p = x_0 * x_0; - zz_1 = (ulong)(c << 31) | (p >> 33); - zz[zzOff + 0] = (uint)p; - c = (uint)(p >> 32) & 1; - } - } - - ulong x_1 = x[xOff + 1]; - ulong zz_2 = zz[zzOff + 2]; - - { - zz_1 += x_1 * x_0; - w = (uint)zz_1; - zz[zzOff + 1] = (w << 1) | c; - c = w >> 31; - zz_2 += zz_1 >> 32; - } - - ulong x_2 = x[xOff + 2]; - ulong zz_3 = zz[zzOff + 3]; - ulong zz_4 = zz[zzOff + 4]; - { - zz_2 += x_2 * x_0; - w = (uint)zz_2; - zz[zzOff + 2] = (w << 1) | c; - c = w >> 31; - zz_3 += (zz_2 >> 32) + x_2 * x_1; - zz_4 += zz_3 >> 32; - zz_3 &= M; - } - - ulong x_3 = x[xOff + 3]; - ulong zz_5 = zz[zzOff + 5] + (zz_4 >> 32); zz_4 &= M; - ulong zz_6 = zz[zzOff + 6] + (zz_5 >> 32); zz_5 &= M; - { - zz_3 += x_3 * x_0; - w = (uint)zz_3; - zz[zzOff + 3] = (w << 1) | c; - c = w >> 31; - zz_4 += (zz_3 >> 32) + x_3 * x_1; - zz_5 += (zz_4 >> 32) + x_3 * x_2; - zz_4 &= M; - zz_6 += zz_5 >> 32; - zz_5 &= M; - } - - ulong x_4 = x[xOff + 4]; - ulong zz_7 = zz[zzOff + 7] + (zz_6 >> 32); zz_6 &= M; - ulong zz_8 = zz[zzOff + 8] + (zz_7 >> 32); zz_7 &= M; - { - zz_4 += x_4 * x_0; - w = (uint)zz_4; - zz[zzOff + 4] = (w << 1) | c; - c = w >> 31; - zz_5 += (zz_4 >> 32) + x_4 * x_1; - zz_6 += (zz_5 >> 32) + x_4 * x_2; - zz_7 += (zz_6 >> 32) + x_4 * x_3; - zz_8 += zz_7 >> 32; - } - - w = (uint)zz_5; - zz[zzOff + 5] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_6; - zz[zzOff + 6] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_7; - zz[zzOff + 7] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_8; - zz[zzOff + 8] = (w << 1) | c; - c = w >> 31; - w = zz[zzOff + 9] + (uint)(zz_8 >> 32); - zz[zzOff + 9] = (w << 1) | c; - } - - public static int Sub(uint[] x, uint[] y, uint[] z) - { - long c = 0; - c += (long)x[0] - y[0]; - z[0] = (uint)c; - c >>= 32; - c += (long)x[1] - y[1]; - z[1] = (uint)c; - c >>= 32; - c += (long)x[2] - y[2]; - z[2] = (uint)c; - c >>= 32; - c += (long)x[3] - y[3]; - z[3] = (uint)c; - c >>= 32; - c += (long)x[4] - y[4]; - z[4] = (uint)c; - c >>= 32; - return (int)c; - } - - public static int Sub(uint[] x, int xOff, uint[] y, int yOff, uint[] z, int zOff) - { - long c = 0; - c += (long)x[xOff + 0] - y[yOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += (long)x[xOff + 1] - y[yOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += (long)x[xOff + 2] - y[yOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - c += (long)x[xOff + 3] - y[yOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - c += (long)x[xOff + 4] - y[yOff + 4]; - z[zOff + 4] = (uint)c; - c >>= 32; - return (int)c; - } - - public static int SubBothFrom(uint[] x, uint[] y, uint[] z) - { - long c = 0; - c += (long)z[0] - x[0] - y[0]; - z[0] = (uint)c; - c >>= 32; - c += (long)z[1] - x[1] - y[1]; - z[1] = (uint)c; - c >>= 32; - c += (long)z[2] - x[2] - y[2]; - z[2] = (uint)c; - c >>= 32; - c += (long)z[3] - x[3] - y[3]; - z[3] = (uint)c; - c >>= 32; - c += (long)z[4] - x[4] - y[4]; - z[4] = (uint)c; - c >>= 32; - return (int)c; - } - - public static int SubFrom(uint[] x, uint[] z) - { - long c = 0; - c += (long)z[0] - x[0]; - z[0] = (uint)c; - c >>= 32; - c += (long)z[1] - x[1]; - z[1] = (uint)c; - c >>= 32; - c += (long)z[2] - x[2]; - z[2] = (uint)c; - c >>= 32; - c += (long)z[3] - x[3]; - z[3] = (uint)c; - c >>= 32; - c += (long)z[4] - x[4]; - z[4] = (uint)c; - c >>= 32; - return (int)c; - } - - public static int SubFrom(uint[] x, int xOff, uint[] z, int zOff) - { - long c = 0; - c += (long)z[zOff + 0] - x[xOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += (long)z[zOff + 1] - x[xOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += (long)z[zOff + 2] - x[xOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - c += (long)z[zOff + 3] - x[xOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - c += (long)z[zOff + 4] - x[xOff + 4]; - z[zOff + 4] = (uint)c; - c >>= 32; - return (int)c; - } - - public static BigInteger ToBigInteger(uint[] x) - { - byte[] bs = new byte[20]; - for (int i = 0; i < 5; ++i) - { - uint x_i = x[i]; - if (x_i != 0) - { - Pack.UInt32_To_BE(x_i, bs, (4 - i) << 2); - } - } - return new BigInteger(1, bs); - } - - public static void Zero(uint[] z) - { - z[0] = 0; - z[1] = 0; - z[2] = 0; - z[3] = 0; - z[4] = 0; - } - } -} diff --git a/bc-sharp-crypto/src/math/raw/Nat192.cs b/bc-sharp-crypto/src/math/raw/Nat192.cs deleted file mode 100644 index 3099baf..0000000 --- a/bc-sharp-crypto/src/math/raw/Nat192.cs +++ /dev/null @@ -1,1048 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Crypto.Utilities; - -namespace Org.BouncyCastle.Math.Raw -{ - internal abstract class Nat192 - { - private const ulong M = 0xFFFFFFFFUL; - - public static uint Add(uint[] x, uint[] y, uint[] z) - { - ulong c = 0; - c += (ulong)x[0] + y[0]; - z[0] = (uint)c; - c >>= 32; - c += (ulong)x[1] + y[1]; - z[1] = (uint)c; - c >>= 32; - c += (ulong)x[2] + y[2]; - z[2] = (uint)c; - c >>= 32; - c += (ulong)x[3] + y[3]; - z[3] = (uint)c; - c >>= 32; - c += (ulong)x[4] + y[4]; - z[4] = (uint)c; - c >>= 32; - c += (ulong)x[5] + y[5]; - z[5] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint AddBothTo(uint[] x, uint[] y, uint[] z) - { - ulong c = 0; - c += (ulong)x[0] + y[0] + z[0]; - z[0] = (uint)c; - c >>= 32; - c += (ulong)x[1] + y[1] + z[1]; - z[1] = (uint)c; - c >>= 32; - c += (ulong)x[2] + y[2] + z[2]; - z[2] = (uint)c; - c >>= 32; - c += (ulong)x[3] + y[3] + z[3]; - z[3] = (uint)c; - c >>= 32; - c += (ulong)x[4] + y[4] + z[4]; - z[4] = (uint)c; - c >>= 32; - c += (ulong)x[5] + y[5] + z[5]; - z[5] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint AddTo(uint[] x, uint[] z) - { - ulong c = 0; - c += (ulong)x[0] + z[0]; - z[0] = (uint)c; - c >>= 32; - c += (ulong)x[1] + z[1]; - z[1] = (uint)c; - c >>= 32; - c += (ulong)x[2] + z[2]; - z[2] = (uint)c; - c >>= 32; - c += (ulong)x[3] + z[3]; - z[3] = (uint)c; - c >>= 32; - c += (ulong)x[4] + z[4]; - z[4] = (uint)c; - c >>= 32; - c += (ulong)x[5] + z[5]; - z[5] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint AddTo(uint[] x, int xOff, uint[] z, int zOff, uint cIn) - { - ulong c = cIn; - c += (ulong)x[xOff + 0] + z[zOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 1] + z[zOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 2] + z[zOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 3] + z[zOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 4] + z[zOff + 4]; - z[zOff + 4] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 5] + z[zOff + 5]; - z[zOff + 5] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint AddToEachOther(uint[] u, int uOff, uint[] v, int vOff) - { - ulong c = 0; - c += (ulong)u[uOff + 0] + v[vOff + 0]; - u[uOff + 0] = (uint)c; - v[vOff + 0] = (uint)c; - c >>= 32; - c += (ulong)u[uOff + 1] + v[vOff + 1]; - u[uOff + 1] = (uint)c; - v[vOff + 1] = (uint)c; - c >>= 32; - c += (ulong)u[uOff + 2] + v[vOff + 2]; - u[uOff + 2] = (uint)c; - v[vOff + 2] = (uint)c; - c >>= 32; - c += (ulong)u[uOff + 3] + v[vOff + 3]; - u[uOff + 3] = (uint)c; - v[vOff + 3] = (uint)c; - c >>= 32; - c += (ulong)u[uOff + 4] + v[vOff + 4]; - u[uOff + 4] = (uint)c; - v[vOff + 4] = (uint)c; - c >>= 32; - c += (ulong)u[uOff + 5] + v[vOff + 5]; - u[uOff + 5] = (uint)c; - v[vOff + 5] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static void Copy(uint[] x, uint[] z) - { - z[0] = x[0]; - z[1] = x[1]; - z[2] = x[2]; - z[3] = x[3]; - z[4] = x[4]; - z[5] = x[5]; - } - - public static void Copy64(ulong[] x, ulong[] z) - { - z[0] = x[0]; - z[1] = x[1]; - z[2] = x[2]; - } - - public static uint[] Create() - { - return new uint[6]; - } - - public static ulong[] Create64() - { - return new ulong[3]; - } - - public static uint[] CreateExt() - { - return new uint[12]; - } - - public static ulong[] CreateExt64() - { - return new ulong[6]; - } - - public static bool Diff(uint[] x, int xOff, uint[] y, int yOff, uint[] z, int zOff) - { - bool pos = Gte(x, xOff, y, yOff); - if (pos) - { - Sub(x, xOff, y, yOff, z, zOff); - } - else - { - Sub(y, yOff, x, xOff, z, zOff); - } - return pos; - } - - public static bool Eq(uint[] x, uint[] y) - { - for (int i = 5; i >= 0; --i) - { - if (x[i] != y[i]) - return false; - } - return true; - } - - public static bool Eq64(ulong[] x, ulong[] y) - { - for (int i = 2; i >= 0; --i) - { - if (x[i] != y[i]) - { - return false; - } - } - return true; - } - - public static uint[] FromBigInteger(BigInteger x) - { - if (x.SignValue < 0 || x.BitLength > 192) - throw new ArgumentException(); - - uint[] z = Create(); - int i = 0; - while (x.SignValue != 0) - { - z[i++] = (uint)x.IntValue; - x = x.ShiftRight(32); - } - return z; - } - - public static ulong[] FromBigInteger64(BigInteger x) - { - if (x.SignValue < 0 || x.BitLength > 192) - throw new ArgumentException(); - - ulong[] z = Create64(); - int i = 0; - while (x.SignValue != 0) - { - z[i++] = (ulong)x.LongValue; - x = x.ShiftRight(64); - } - return z; - } - - public static uint GetBit(uint[] x, int bit) - { - if (bit == 0) - { - return x[0] & 1; - } - int w = bit >> 5; - if (w < 0 || w >= 6) - { - return 0; - } - int b = bit & 31; - return (x[w] >> b) & 1; - } - - public static bool Gte(uint[] x, uint[] y) - { - for (int i = 5; i >= 0; --i) - { - uint x_i = x[i], y_i = y[i]; - if (x_i < y_i) - return false; - if (x_i > y_i) - return true; - } - return true; - } - - public static bool Gte(uint[] x, int xOff, uint[] y, int yOff) - { - for (int i = 5; i >= 0; --i) - { - uint x_i = x[xOff + i], y_i = y[yOff + i]; - if (x_i < y_i) - return false; - if (x_i > y_i) - return true; - } - return true; - } - - public static bool IsOne(uint[] x) - { - if (x[0] != 1) - { - return false; - } - for (int i = 1; i < 6; ++i) - { - if (x[i] != 0) - { - return false; - } - } - return true; - } - - public static bool IsOne64(ulong[] x) - { - if (x[0] != 1UL) - { - return false; - } - for (int i = 1; i < 3; ++i) - { - if (x[i] != 0UL) - { - return false; - } - } - return true; - } - - public static bool IsZero(uint[] x) - { - for (int i = 0; i < 6; ++i) - { - if (x[i] != 0) - { - return false; - } - } - return true; - } - - public static bool IsZero64(ulong[] x) - { - for (int i = 0; i < 3; ++i) - { - if (x[i] != 0UL) - { - return false; - } - } - return true; - } - - public static void Mul(uint[] x, uint[] y, uint[] zz) - { - ulong y_0 = y[0]; - ulong y_1 = y[1]; - ulong y_2 = y[2]; - ulong y_3 = y[3]; - ulong y_4 = y[4]; - ulong y_5 = y[5]; - - { - ulong c = 0, x_0 = x[0]; - c += x_0 * y_0; - zz[0] = (uint)c; - c >>= 32; - c += x_0 * y_1; - zz[1] = (uint)c; - c >>= 32; - c += x_0 * y_2; - zz[2] = (uint)c; - c >>= 32; - c += x_0 * y_3; - zz[3] = (uint)c; - c >>= 32; - c += x_0 * y_4; - zz[4] = (uint)c; - c >>= 32; - c += x_0 * y_5; - zz[5] = (uint)c; - c >>= 32; - zz[6] = (uint)c; - } - - for (int i = 1; i < 6; ++i) - { - ulong c = 0, x_i = x[i]; - c += x_i * y_0 + zz[i + 0]; - zz[i + 0] = (uint)c; - c >>= 32; - c += x_i * y_1 + zz[i + 1]; - zz[i + 1] = (uint)c; - c >>= 32; - c += x_i * y_2 + zz[i + 2]; - zz[i + 2] = (uint)c; - c >>= 32; - c += x_i * y_3 + zz[i + 3]; - zz[i + 3] = (uint)c; - c >>= 32; - c += x_i * y_4 + zz[i + 4]; - zz[i + 4] = (uint)c; - c >>= 32; - c += x_i * y_5 + zz[i + 5]; - zz[i + 5] = (uint)c; - c >>= 32; - zz[i + 6] = (uint)c; - } - } - - public static void Mul(uint[] x, int xOff, uint[] y, int yOff, uint[] zz, int zzOff) - { - ulong y_0 = y[yOff + 0]; - ulong y_1 = y[yOff + 1]; - ulong y_2 = y[yOff + 2]; - ulong y_3 = y[yOff + 3]; - ulong y_4 = y[yOff + 4]; - ulong y_5 = y[yOff + 5]; - - { - ulong c = 0, x_0 = x[xOff + 0]; - c += x_0 * y_0; - zz[zzOff + 0] = (uint)c; - c >>= 32; - c += x_0 * y_1; - zz[zzOff + 1] = (uint)c; - c >>= 32; - c += x_0 * y_2; - zz[zzOff + 2] = (uint)c; - c >>= 32; - c += x_0 * y_3; - zz[zzOff + 3] = (uint)c; - c >>= 32; - c += x_0 * y_4; - zz[zzOff + 4] = (uint)c; - c >>= 32; - c += x_0 * y_5; - zz[zzOff + 5] = (uint)c; - c >>= 32; - zz[zzOff + 6] = (uint)c; - } - - for (int i = 1; i < 6; ++i) - { - ++zzOff; - ulong c = 0, x_i = x[xOff + i]; - c += x_i * y_0 + zz[zzOff + 0]; - zz[zzOff + 0] = (uint)c; - c >>= 32; - c += x_i * y_1 + zz[zzOff + 1]; - zz[zzOff + 1] = (uint)c; - c >>= 32; - c += x_i * y_2 + zz[zzOff + 2]; - zz[zzOff + 2] = (uint)c; - c >>= 32; - c += x_i * y_3 + zz[zzOff + 3]; - zz[zzOff + 3] = (uint)c; - c >>= 32; - c += x_i * y_4 + zz[zzOff + 4]; - zz[zzOff + 4] = (uint)c; - c >>= 32; - c += x_i * y_5 + zz[zzOff + 5]; - zz[zzOff + 5] = (uint)c; - c >>= 32; - zz[zzOff + 6] = (uint)c; - } - } - - public static uint MulAddTo(uint[] x, uint[] y, uint[] zz) - { - ulong y_0 = y[0]; - ulong y_1 = y[1]; - ulong y_2 = y[2]; - ulong y_3 = y[3]; - ulong y_4 = y[4]; - ulong y_5 = y[5]; - - ulong zc = 0; - for (int i = 0; i < 6; ++i) - { - ulong c = 0, x_i = x[i]; - c += x_i * y_0 + zz[i + 0]; - zz[i + 0] = (uint)c; - c >>= 32; - c += x_i * y_1 + zz[i + 1]; - zz[i + 1] = (uint)c; - c >>= 32; - c += x_i * y_2 + zz[i + 2]; - zz[i + 2] = (uint)c; - c >>= 32; - c += x_i * y_3 + zz[i + 3]; - zz[i + 3] = (uint)c; - c >>= 32; - c += x_i * y_4 + zz[i + 4]; - zz[i + 4] = (uint)c; - c >>= 32; - c += x_i * y_5 + zz[i + 5]; - zz[i + 5] = (uint)c; - c >>= 32; - c += zc + zz[i + 6]; - zz[i + 6] = (uint)c; - zc = c >> 32; - } - return (uint)zc; - } - - public static uint MulAddTo(uint[] x, int xOff, uint[] y, int yOff, uint[] zz, int zzOff) - { - ulong y_0 = y[yOff + 0]; - ulong y_1 = y[yOff + 1]; - ulong y_2 = y[yOff + 2]; - ulong y_3 = y[yOff + 3]; - ulong y_4 = y[yOff + 4]; - ulong y_5 = y[yOff + 5]; - - ulong zc = 0; - for (int i = 0; i < 6; ++i) - { - ulong c = 0, x_i = x[xOff + i]; - c += x_i * y_0 + zz[zzOff + 0]; - zz[zzOff + 0] = (uint)c; - c >>= 32; - c += x_i * y_1 + zz[zzOff + 1]; - zz[zzOff + 1] = (uint)c; - c >>= 32; - c += x_i * y_2 + zz[zzOff + 2]; - zz[zzOff + 2] = (uint)c; - c >>= 32; - c += x_i * y_3 + zz[zzOff + 3]; - zz[zzOff + 3] = (uint)c; - c >>= 32; - c += x_i * y_4 + zz[zzOff + 4]; - zz[zzOff + 4] = (uint)c; - c >>= 32; - c += x_i * y_5 + zz[zzOff + 5]; - zz[zzOff + 5] = (uint)c; - c >>= 32; - c += zc + zz[zzOff + 6]; - zz[zzOff + 6] = (uint)c; - zc = c >> 32; - ++zzOff; - } - return (uint)zc; - } - - public static ulong Mul33Add(uint w, uint[] x, int xOff, uint[] y, int yOff, uint[] z, int zOff) - { - Debug.Assert(w >> 31 == 0); - - ulong c = 0, wVal = w; - ulong x0 = x[xOff + 0]; - c += wVal * x0 + y[yOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - ulong x1 = x[xOff + 1]; - c += wVal * x1 + x0 + y[yOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - ulong x2 = x[xOff + 2]; - c += wVal * x2 + x1 + y[yOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - ulong x3 = x[xOff + 3]; - c += wVal * x3 + x2 + y[yOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - ulong x4 = x[xOff + 4]; - c += wVal * x4 + x3 + y[yOff + 4]; - z[zOff + 4] = (uint)c; - c >>= 32; - ulong x5 = x[xOff + 5]; - c += wVal * x5 + x4 + y[yOff + 5]; - z[zOff + 5] = (uint)c; - c >>= 32; - c += x5; - return c; - } - - public static uint MulWordAddExt(uint x, uint[] yy, int yyOff, uint[] zz, int zzOff) - { - Debug.Assert(yyOff <= 6); - Debug.Assert(zzOff <= 6); - ulong c = 0, xVal = x; - c += xVal * yy[yyOff + 0] + zz[zzOff + 0]; - zz[zzOff + 0] = (uint)c; - c >>= 32; - c += xVal * yy[yyOff + 1] + zz[zzOff + 1]; - zz[zzOff + 1] = (uint)c; - c >>= 32; - c += xVal * yy[yyOff + 2] + zz[zzOff + 2]; - zz[zzOff + 2] = (uint)c; - c >>= 32; - c += xVal * yy[yyOff + 3] + zz[zzOff + 3]; - zz[zzOff + 3] = (uint)c; - c >>= 32; - c += xVal * yy[yyOff + 4] + zz[zzOff + 4]; - zz[zzOff + 4] = (uint)c; - c >>= 32; - c += xVal * yy[yyOff + 5] + zz[zzOff + 5]; - zz[zzOff + 5] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint Mul33DWordAdd(uint x, ulong y, uint[] z, int zOff) - { - Debug.Assert(x >> 31 == 0); - Debug.Assert(zOff <= 2); - ulong c = 0, xVal = x; - ulong y00 = y & M; - c += xVal * y00 + z[zOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - ulong y01 = y >> 32; - c += xVal * y01 + y00 + z[zOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += y01 + z[zOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - c += z[zOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - return c == 0 ? 0 : Nat.IncAt(6, z, zOff, 4); - } - - public static uint Mul33WordAdd(uint x, uint y, uint[] z, int zOff) - { - Debug.Assert(x >> 31 == 0); - Debug.Assert(zOff <=3); - ulong c = 0, yVal = y; - c += yVal * x + z[zOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += yVal + z[zOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += z[zOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - return c == 0 ? 0 : Nat.IncAt(6, z, zOff, 3); - } - - public static uint MulWordDwordAdd(uint x, ulong y, uint[] z, int zOff) - { - Debug.Assert(zOff <= 3); - ulong c = 0, xVal = x; - c += xVal * y + z[zOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += xVal * (y >> 32) + z[zOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += z[zOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - return c == 0 ? 0 : Nat.IncAt(6, z, zOff, 3); - } - - public static uint MulWord(uint x, uint[] y, uint[] z, int zOff) - { - ulong c = 0, xVal = x; - int i = 0; - do - { - c += xVal * y[i]; - z[zOff + i] = (uint)c; - c >>= 32; - } - while (++i < 6); - return (uint)c; - } - - public static void Square(uint[] x, uint[] zz) - { - ulong x_0 = x[0]; - ulong zz_1; - - uint c = 0, w; - { - int i = 5, j = 12; - do - { - ulong xVal = x[i--]; - ulong p = xVal * xVal; - zz[--j] = (c << 31) | (uint)(p >> 33); - zz[--j] = (uint)(p >> 1); - c = (uint)p; - } - while (i > 0); - - { - ulong p = x_0 * x_0; - zz_1 = (ulong)(c << 31) | (p >> 33); - zz[0] = (uint)p; - c = (uint)(p >> 32) & 1; - } - } - - ulong x_1 = x[1]; - ulong zz_2 = zz[2]; - - { - zz_1 += x_1 * x_0; - w = (uint)zz_1; - zz[1] = (w << 1) | c; - c = w >> 31; - zz_2 += zz_1 >> 32; - } - - ulong x_2 = x[2]; - ulong zz_3 = zz[3]; - ulong zz_4 = zz[4]; - { - zz_2 += x_2 * x_0; - w = (uint)zz_2; - zz[2] = (w << 1) | c; - c = w >> 31; - zz_3 += (zz_2 >> 32) + x_2 * x_1; - zz_4 += zz_3 >> 32; - zz_3 &= M; - } - - ulong x_3 = x[3]; - ulong zz_5 = zz[5] + (zz_4 >> 32); zz_4 &= M; - ulong zz_6 = zz[6] + (zz_5 >> 32); zz_5 &= M; - { - zz_3 += x_3 * x_0; - w = (uint)zz_3; - zz[3] = (w << 1) | c; - c = w >> 31; - zz_4 += (zz_3 >> 32) + x_3 * x_1; - zz_5 += (zz_4 >> 32) + x_3 * x_2; - zz_4 &= M; - zz_6 += zz_5 >> 32; - zz_5 &= M; - } - - ulong x_4 = x[4]; - ulong zz_7 = zz[7] + (zz_6 >> 32); zz_6 &= M; - ulong zz_8 = zz[8] + (zz_7 >> 32); zz_7 &= M; - { - zz_4 += x_4 * x_0; - w = (uint)zz_4; - zz[4] = (w << 1) | c; - c = w >> 31; - zz_5 += (zz_4 >> 32) + x_4 * x_1; - zz_6 += (zz_5 >> 32) + x_4 * x_2; - zz_5 &= M; - zz_7 += (zz_6 >> 32) + x_4 * x_3; - zz_6 &= M; - zz_8 += zz_7 >> 32; - zz_7 &= M; - } - - ulong x_5 = x[5]; - ulong zz_9 = zz[9] + (zz_8 >> 32); zz_8 &= M; - ulong zz_10 = zz[10] + (zz_9 >> 32); zz_9 &= M; - { - zz_5 += x_5 * x_0; - w = (uint)zz_5; - zz[5] = (w << 1) | c; - c = w >> 31; - zz_6 += (zz_5 >> 32) + x_5 * x_1; - zz_7 += (zz_6 >> 32) + x_5 * x_2; - zz_8 += (zz_7 >> 32) + x_5 * x_3; - zz_9 += (zz_8 >> 32) + x_5 * x_4; - zz_10 += zz_9 >> 32; - } - - w = (uint)zz_6; - zz[6] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_7; - zz[7] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_8; - zz[8] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_9; - zz[9] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_10; - zz[10] = (w << 1) | c; - c = w >> 31; - w = zz[11] + (uint)(zz_10 >> 32); - zz[11] = (w << 1) | c; - } - - public static void Square(uint[] x, int xOff, uint[] zz, int zzOff) - { - ulong x_0 = x[xOff + 0]; - ulong zz_1; - - uint c = 0, w; - { - int i = 5, j = 12; - do - { - ulong xVal = x[xOff + i--]; - ulong p = xVal * xVal; - zz[zzOff + --j] = (c << 31) | (uint)(p >> 33); - zz[zzOff + --j] = (uint)(p >> 1); - c = (uint)p; - } - while (i > 0); - - { - ulong p = x_0 * x_0; - zz_1 = (ulong)(c << 31) | (p >> 33); - zz[zzOff + 0] = (uint)p; - c = (uint)(p >> 32) & 1; - } - } - - ulong x_1 = x[xOff + 1]; - ulong zz_2 = zz[zzOff + 2]; - - { - zz_1 += x_1 * x_0; - w = (uint)zz_1; - zz[zzOff + 1] = (w << 1) | c; - c = w >> 31; - zz_2 += zz_1 >> 32; - } - - ulong x_2 = x[xOff + 2]; - ulong zz_3 = zz[zzOff + 3]; - ulong zz_4 = zz[zzOff + 4]; - { - zz_2 += x_2 * x_0; - w = (uint)zz_2; - zz[zzOff + 2] = (w << 1) | c; - c = w >> 31; - zz_3 += (zz_2 >> 32) + x_2 * x_1; - zz_4 += zz_3 >> 32; - zz_3 &= M; - } - - ulong x_3 = x[xOff + 3]; - ulong zz_5 = zz[zzOff + 5] + (zz_4 >> 32); zz_4 &= M; - ulong zz_6 = zz[zzOff + 6] + (zz_5 >> 32); zz_5 &= M; - { - zz_3 += x_3 * x_0; - w = (uint)zz_3; - zz[zzOff + 3] = (w << 1) | c; - c = w >> 31; - zz_4 += (zz_3 >> 32) + x_3 * x_1; - zz_5 += (zz_4 >> 32) + x_3 * x_2; - zz_4 &= M; - zz_6 += zz_5 >> 32; - zz_5 &= M; - } - - ulong x_4 = x[xOff + 4]; - ulong zz_7 = zz[zzOff + 7] + (zz_6 >> 32); zz_6 &= M; - ulong zz_8 = zz[zzOff + 8] + (zz_7 >> 32); zz_7 &= M; - { - zz_4 += x_4 * x_0; - w = (uint)zz_4; - zz[zzOff + 4] = (w << 1) | c; - c = w >> 31; - zz_5 += (zz_4 >> 32) + x_4 * x_1; - zz_6 += (zz_5 >> 32) + x_4 * x_2; - zz_5 &= M; - zz_7 += (zz_6 >> 32) + x_4 * x_3; - zz_6 &= M; - zz_8 += zz_7 >> 32; - zz_7 &= M; - } - - ulong x_5 = x[xOff + 5]; - ulong zz_9 = zz[zzOff + 9] + (zz_8 >> 32); zz_8 &= M; - ulong zz_10 = zz[zzOff + 10] + (zz_9 >> 32); zz_9 &= M; - { - zz_5 += x_5 * x_0; - w = (uint)zz_5; - zz[zzOff + 5] = (w << 1) | c; - c = w >> 31; - zz_6 += (zz_5 >> 32) + x_5 * x_1; - zz_7 += (zz_6 >> 32) + x_5 * x_2; - zz_8 += (zz_7 >> 32) + x_5 * x_3; - zz_9 += (zz_8 >> 32) + x_5 * x_4; - zz_10 += zz_9 >> 32; - } - - w = (uint)zz_6; - zz[zzOff + 6] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_7; - zz[zzOff + 7] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_8; - zz[zzOff + 8] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_9; - zz[zzOff + 9] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_10; - zz[zzOff + 10] = (w << 1) | c; - c = w >> 31; - w = zz[zzOff + 11] + (uint)(zz_10 >> 32); - zz[zzOff + 11] = (w << 1) | c; - } - - public static int Sub(uint[] x, uint[] y, uint[] z) - { - long c = 0; - c += (long)x[0] - y[0]; - z[0] = (uint)c; - c >>= 32; - c += (long)x[1] - y[1]; - z[1] = (uint)c; - c >>= 32; - c += (long)x[2] - y[2]; - z[2] = (uint)c; - c >>= 32; - c += (long)x[3] - y[3]; - z[3] = (uint)c; - c >>= 32; - c += (long)x[4] - y[4]; - z[4] = (uint)c; - c >>= 32; - c += (long)x[5] - y[5]; - z[5] = (uint)c; - c >>= 32; - return (int)c; - } - - public static int Sub(uint[] x, int xOff, uint[] y, int yOff, uint[] z, int zOff) - { - long c = 0; - c += (long)x[xOff + 0] - y[yOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += (long)x[xOff + 1] - y[yOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += (long)x[xOff + 2] - y[yOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - c += (long)x[xOff + 3] - y[yOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - c += (long)x[xOff + 4] - y[yOff + 4]; - z[zOff + 4] = (uint)c; - c >>= 32; - c += (long)x[xOff + 5] - y[yOff + 5]; - z[zOff + 5] = (uint)c; - c >>= 32; - return (int)c; - } - - public static int SubBothFrom(uint[] x, uint[] y, uint[] z) - { - long c = 0; - c += (long)z[0] - x[0] - y[0]; - z[0] = (uint)c; - c >>= 32; - c += (long)z[1] - x[1] - y[1]; - z[1] = (uint)c; - c >>= 32; - c += (long)z[2] - x[2] - y[2]; - z[2] = (uint)c; - c >>= 32; - c += (long)z[3] - x[3] - y[3]; - z[3] = (uint)c; - c >>= 32; - c += (long)z[4] - x[4] - y[4]; - z[4] = (uint)c; - c >>= 32; - c += (long)z[5] - x[5] - y[5]; - z[5] = (uint)c; - c >>= 32; - return (int)c; - } - - public static int SubFrom(uint[] x, uint[] z) - { - long c = 0; - c += (long)z[0] - x[0]; - z[0] = (uint)c; - c >>= 32; - c += (long)z[1] - x[1]; - z[1] = (uint)c; - c >>= 32; - c += (long)z[2] - x[2]; - z[2] = (uint)c; - c >>= 32; - c += (long)z[3] - x[3]; - z[3] = (uint)c; - c >>= 32; - c += (long)z[4] - x[4]; - z[4] = (uint)c; - c >>= 32; - c += (long)z[5] - x[5]; - z[5] = (uint)c; - c >>= 32; - return (int)c; - } - - public static int SubFrom(uint[] x, int xOff, uint[] z, int zOff) - { - long c = 0; - c += (long)z[zOff + 0] - x[xOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += (long)z[zOff + 1] - x[xOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += (long)z[zOff + 2] - x[xOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - c += (long)z[zOff + 3] - x[xOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - c += (long)z[zOff + 4] - x[xOff + 4]; - z[zOff + 4] = (uint)c; - c >>= 32; - c += (long)z[zOff + 5] - x[xOff + 5]; - z[zOff + 5] = (uint)c; - c >>= 32; - return (int)c; - } - - public static BigInteger ToBigInteger(uint[] x) - { - byte[] bs = new byte[24]; - for (int i = 0; i < 6; ++i) - { - uint x_i = x[i]; - if (x_i != 0) - { - Pack.UInt32_To_BE(x_i, bs, (5 - i) << 2); - } - } - return new BigInteger(1, bs); - } - - public static BigInteger ToBigInteger64(ulong[] x) - { - byte[] bs = new byte[24]; - for (int i = 0; i < 3; ++i) - { - ulong x_i = x[i]; - if (x_i != 0L) - { - Pack.UInt64_To_BE(x_i, bs, (2 - i) << 3); - } - } - return new BigInteger(1, bs); - } - - public static void Zero(uint[] z) - { - z[0] = 0; - z[1] = 0; - z[2] = 0; - z[3] = 0; - z[4] = 0; - z[5] = 0; - } - } -} diff --git a/bc-sharp-crypto/src/math/raw/Nat224.cs b/bc-sharp-crypto/src/math/raw/Nat224.cs deleted file mode 100644 index 978caf2..0000000 --- a/bc-sharp-crypto/src/math/raw/Nat224.cs +++ /dev/null @@ -1,1176 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Crypto.Utilities; - -namespace Org.BouncyCastle.Math.Raw -{ - internal abstract class Nat224 - { - private const ulong M = 0xFFFFFFFFUL; - - public static uint Add(uint[] x, uint[] y, uint[] z) - { - ulong c = 0; - c += (ulong)x[0] + y[0]; - z[0] = (uint)c; - c >>= 32; - c += (ulong)x[1] + y[1]; - z[1] = (uint)c; - c >>= 32; - c += (ulong)x[2] + y[2]; - z[2] = (uint)c; - c >>= 32; - c += (ulong)x[3] + y[3]; - z[3] = (uint)c; - c >>= 32; - c += (ulong)x[4] + y[4]; - z[4] = (uint)c; - c >>= 32; - c += (ulong)x[5] + y[5]; - z[5] = (uint)c; - c >>= 32; - c += (ulong)x[6] + y[6]; - z[6] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint Add(uint[] x, int xOff, uint[] y, int yOff, uint[] z, int zOff) - { - ulong c = 0; - c += (ulong)x[xOff + 0] + y[yOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 1] + y[yOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 2] + y[yOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 3] + y[yOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 4] + y[yOff + 4]; - z[zOff + 4] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 5] + y[yOff + 5]; - z[zOff + 5] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 6] + y[yOff + 6]; - z[zOff + 6] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint AddBothTo(uint[] x, uint[] y, uint[] z) - { - ulong c = 0; - c += (ulong)x[0] + y[0] + z[0]; - z[0] = (uint)c; - c >>= 32; - c += (ulong)x[1] + y[1] + z[1]; - z[1] = (uint)c; - c >>= 32; - c += (ulong)x[2] + y[2] + z[2]; - z[2] = (uint)c; - c >>= 32; - c += (ulong)x[3] + y[3] + z[3]; - z[3] = (uint)c; - c >>= 32; - c += (ulong)x[4] + y[4] + z[4]; - z[4] = (uint)c; - c >>= 32; - c += (ulong)x[5] + y[5] + z[5]; - z[5] = (uint)c; - c >>= 32; - c += (ulong)x[6] + y[6] + z[6]; - z[6] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint AddBothTo(uint[] x, int xOff, uint[] y, int yOff, uint[] z, int zOff) - { - ulong c = 0; - c += (ulong)x[xOff + 0] + y[yOff + 0] + z[zOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 1] + y[yOff + 1] + z[zOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 2] + y[yOff + 2] + z[zOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 3] + y[yOff + 3] + z[zOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 4] + y[yOff + 4] + z[zOff + 4]; - z[zOff + 4] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 5] + y[yOff + 5] + z[zOff + 5]; - z[zOff + 5] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 6] + y[yOff + 6] + z[zOff + 6]; - z[zOff + 6] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint AddTo(uint[] x, uint[] z) - { - ulong c = 0; - c += (ulong)x[0] + z[0]; - z[0] = (uint)c; - c >>= 32; - c += (ulong)x[1] + z[1]; - z[1] = (uint)c; - c >>= 32; - c += (ulong)x[2] + z[2]; - z[2] = (uint)c; - c >>= 32; - c += (ulong)x[3] + z[3]; - z[3] = (uint)c; - c >>= 32; - c += (ulong)x[4] + z[4]; - z[4] = (uint)c; - c >>= 32; - c += (ulong)x[5] + z[5]; - z[5] = (uint)c; - c >>= 32; - c += (ulong)x[6] + z[6]; - z[6] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint AddTo(uint[] x, int xOff, uint[] z, int zOff, uint cIn) - { - ulong c = cIn; - c += (ulong)x[xOff + 0] + z[zOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 1] + z[zOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 2] + z[zOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 3] + z[zOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 4] + z[zOff + 4]; - z[zOff + 4] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 5] + z[zOff + 5]; - z[zOff + 5] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 6] + z[zOff + 6]; - z[zOff + 6] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint AddToEachOther(uint[] u, int uOff, uint[] v, int vOff) - { - ulong c = 0; - c += (ulong)u[uOff + 0] + v[vOff + 0]; - u[uOff + 0] = (uint)c; - v[vOff + 0] = (uint)c; - c >>= 32; - c += (ulong)u[uOff + 1] + v[vOff + 1]; - u[uOff + 1] = (uint)c; - v[vOff + 1] = (uint)c; - c >>= 32; - c += (ulong)u[uOff + 2] + v[vOff + 2]; - u[uOff + 2] = (uint)c; - v[vOff + 2] = (uint)c; - c >>= 32; - c += (ulong)u[uOff + 3] + v[vOff + 3]; - u[uOff + 3] = (uint)c; - v[vOff + 3] = (uint)c; - c >>= 32; - c += (ulong)u[uOff + 4] + v[vOff + 4]; - u[uOff + 4] = (uint)c; - v[vOff + 4] = (uint)c; - c >>= 32; - c += (ulong)u[uOff + 5] + v[vOff + 5]; - u[uOff + 5] = (uint)c; - v[vOff + 5] = (uint)c; - c >>= 32; - c += (ulong)u[uOff + 6] + v[vOff + 6]; - u[uOff + 6] = (uint)c; - v[vOff + 6] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static void Copy(uint[] x, uint[] z) - { - z[0] = x[0]; - z[1] = x[1]; - z[2] = x[2]; - z[3] = x[3]; - z[4] = x[4]; - z[5] = x[5]; - z[6] = x[6]; - } - - public static uint[] Create() - { - return new uint[7]; - } - - public static uint[] CreateExt() - { - return new uint[14]; - } - - public static bool Diff(uint[] x, int xOff, uint[] y, int yOff, uint[] z, int zOff) - { - bool pos = Gte(x, xOff, y, yOff); - if (pos) - { - Sub(x, xOff, y, yOff, z, zOff); - } - else - { - Sub(y, yOff, x, xOff, z, zOff); - } - return pos; - } - - public static bool Eq(uint[] x, uint[] y) - { - for (int i = 6; i >= 0; --i) - { - if (x[i] != y[i]) - return false; - } - return true; - } - - public static uint[] FromBigInteger(BigInteger x) - { - if (x.SignValue < 0 || x.BitLength > 224) - throw new ArgumentException(); - - uint[] z = Create(); - int i = 0; - while (x.SignValue != 0) - { - z[i++] = (uint)x.IntValue; - x = x.ShiftRight(32); - } - return z; - } - - public static uint GetBit(uint[] x, int bit) - { - if (bit == 0) - { - return x[0] & 1; - } - int w = bit >> 5; - if (w < 0 || w >= 7) - { - return 0; - } - int b = bit & 31; - return (x[w] >> b) & 1; - } - - public static bool Gte(uint[] x, uint[] y) - { - for (int i = 6; i >= 0; --i) - { - uint x_i = x[i], y_i = y[i]; - if (x_i < y_i) - return false; - if (x_i > y_i) - return true; - } - return true; - } - - public static bool Gte(uint[] x, int xOff, uint[] y, int yOff) - { - for (int i = 6; i >= 0; --i) - { - uint x_i = x[xOff + i], y_i = y[yOff + i]; - if (x_i < y_i) - return false; - if (x_i > y_i) - return true; - } - return true; - } - - public static bool IsOne(uint[] x) - { - if (x[0] != 1) - { - return false; - } - for (int i = 1; i < 7; ++i) - { - if (x[i] != 0) - { - return false; - } - } - return true; - } - - public static bool IsZero(uint[] x) - { - for (int i = 0; i < 7; ++i) - { - if (x[i] != 0) - { - return false; - } - } - return true; - } - - public static void Mul(uint[] x, uint[] y, uint[] zz) - { - ulong y_0 = y[0]; - ulong y_1 = y[1]; - ulong y_2 = y[2]; - ulong y_3 = y[3]; - ulong y_4 = y[4]; - ulong y_5 = y[5]; - ulong y_6 = y[6]; - - { - ulong c = 0, x_0 = x[0]; - c += x_0 * y_0; - zz[0] = (uint)c; - c >>= 32; - c += x_0 * y_1; - zz[1] = (uint)c; - c >>= 32; - c += x_0 * y_2; - zz[2] = (uint)c; - c >>= 32; - c += x_0 * y_3; - zz[3] = (uint)c; - c >>= 32; - c += x_0 * y_4; - zz[4] = (uint)c; - c >>= 32; - c += x_0 * y_5; - zz[5] = (uint)c; - c >>= 32; - c += x_0 * y_6; - zz[6] = (uint)c; - c >>= 32; - zz[7] = (uint)c; - } - - for (int i = 1; i < 7; ++i) - { - ulong c = 0, x_i = x[i]; - c += x_i * y_0 + zz[i + 0]; - zz[i + 0] = (uint)c; - c >>= 32; - c += x_i * y_1 + zz[i + 1]; - zz[i + 1] = (uint)c; - c >>= 32; - c += x_i * y_2 + zz[i + 2]; - zz[i + 2] = (uint)c; - c >>= 32; - c += x_i * y_3 + zz[i + 3]; - zz[i + 3] = (uint)c; - c >>= 32; - c += x_i * y_4 + zz[i + 4]; - zz[i + 4] = (uint)c; - c >>= 32; - c += x_i * y_5 + zz[i + 5]; - zz[i + 5] = (uint)c; - c >>= 32; - c += x_i * y_6 + zz[i + 6]; - zz[i + 6] = (uint)c; - c >>= 32; - zz[i + 7] = (uint)c; - } - } - - public static void Mul(uint[] x, int xOff, uint[] y, int yOff, uint[] zz, int zzOff) - { - ulong y_0 = y[yOff + 0]; - ulong y_1 = y[yOff + 1]; - ulong y_2 = y[yOff + 2]; - ulong y_3 = y[yOff + 3]; - ulong y_4 = y[yOff + 4]; - ulong y_5 = y[yOff + 5]; - ulong y_6 = y[yOff + 6]; - - { - ulong c = 0, x_0 = x[xOff + 0]; - c += x_0 * y_0; - zz[zzOff + 0] = (uint)c; - c >>= 32; - c += x_0 * y_1; - zz[zzOff + 1] = (uint)c; - c >>= 32; - c += x_0 * y_2; - zz[zzOff + 2] = (uint)c; - c >>= 32; - c += x_0 * y_3; - zz[zzOff + 3] = (uint)c; - c >>= 32; - c += x_0 * y_4; - zz[zzOff + 4] = (uint)c; - c >>= 32; - c += x_0 * y_5; - zz[zzOff + 5] = (uint)c; - c >>= 32; - c += x_0 * y_6; - zz[zzOff + 6] = (uint)c; - c >>= 32; - zz[zzOff + 7] = (uint)c; - } - - for (int i = 1; i < 7; ++i) - { - ++zzOff; - ulong c = 0, x_i = x[xOff + i]; - c += x_i * y_0 + zz[zzOff + 0]; - zz[zzOff + 0] = (uint)c; - c >>= 32; - c += x_i * y_1 + zz[zzOff + 1]; - zz[zzOff + 1] = (uint)c; - c >>= 32; - c += x_i * y_2 + zz[zzOff + 2]; - zz[zzOff + 2] = (uint)c; - c >>= 32; - c += x_i * y_3 + zz[zzOff + 3]; - zz[zzOff + 3] = (uint)c; - c >>= 32; - c += x_i * y_4 + zz[zzOff + 4]; - zz[zzOff + 4] = (uint)c; - c >>= 32; - c += x_i * y_5 + zz[zzOff + 5]; - zz[zzOff + 5] = (uint)c; - c >>= 32; - c += x_i * y_6 + zz[zzOff + 6]; - zz[zzOff + 6] = (uint)c; - c >>= 32; - zz[zzOff + 7] = (uint)c; - } - } - - public static uint MulAddTo(uint[] x, uint[] y, uint[] zz) - { - ulong y_0 = y[0]; - ulong y_1 = y[1]; - ulong y_2 = y[2]; - ulong y_3 = y[3]; - ulong y_4 = y[4]; - ulong y_5 = y[5]; - ulong y_6 = y[6]; - - ulong zc = 0; - for (int i = 0; i < 7; ++i) - { - ulong c = 0, x_i = x[i]; - c += x_i * y_0 + zz[i + 0]; - zz[i + 0] = (uint)c; - c >>= 32; - c += x_i * y_1 + zz[i + 1]; - zz[i + 1] = (uint)c; - c >>= 32; - c += x_i * y_2 + zz[i + 2]; - zz[i + 2] = (uint)c; - c >>= 32; - c += x_i * y_3 + zz[i + 3]; - zz[i + 3] = (uint)c; - c >>= 32; - c += x_i * y_4 + zz[i + 4]; - zz[i + 4] = (uint)c; - c >>= 32; - c += x_i * y_5 + zz[i + 5]; - zz[i + 5] = (uint)c; - c >>= 32; - c += x_i * y_6 + zz[i + 6]; - zz[i + 6] = (uint)c; - c >>= 32; - c += zc + zz[i + 7]; - zz[i + 7] = (uint)c; - zc = c >> 32; - } - return (uint)zc; - } - - public static uint MulAddTo(uint[] x, int xOff, uint[] y, int yOff, uint[] zz, int zzOff) - { - ulong y_0 = y[yOff + 0]; - ulong y_1 = y[yOff + 1]; - ulong y_2 = y[yOff + 2]; - ulong y_3 = y[yOff + 3]; - ulong y_4 = y[yOff + 4]; - ulong y_5 = y[yOff + 5]; - ulong y_6 = y[yOff + 6]; - - ulong zc = 0; - for (int i = 0; i < 7; ++i) - { - ulong c = 0, x_i = x[xOff + i]; - c += x_i * y_0 + zz[zzOff + 0]; - zz[zzOff + 0] = (uint)c; - c >>= 32; - c += x_i * y_1 + zz[zzOff + 1]; - zz[zzOff + 1] = (uint)c; - c >>= 32; - c += x_i * y_2 + zz[zzOff + 2]; - zz[zzOff + 2] = (uint)c; - c >>= 32; - c += x_i * y_3 + zz[zzOff + 3]; - zz[zzOff + 3] = (uint)c; - c >>= 32; - c += x_i * y_4 + zz[zzOff + 4]; - zz[zzOff + 4] = (uint)c; - c >>= 32; - c += x_i * y_5 + zz[zzOff + 5]; - zz[zzOff + 5] = (uint)c; - c >>= 32; - c += x_i * y_6 + zz[zzOff + 6]; - zz[zzOff + 6] = (uint)c; - c >>= 32; - c += zc + zz[zzOff + 7]; - zz[zzOff + 7] = (uint)c; - zc = c >> 32; - ++zzOff; - } - return (uint)zc; - } - - public static ulong Mul33Add(uint w, uint[] x, int xOff, uint[] y, int yOff, uint[] z, int zOff) - { - Debug.Assert(w >> 31 == 0); - - ulong c = 0, wVal = w; - ulong x0 = x[xOff + 0]; - c += wVal * x0 + y[yOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - ulong x1 = x[xOff + 1]; - c += wVal * x1 + x0 + y[yOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - ulong x2 = x[xOff + 2]; - c += wVal * x2 + x1 + y[yOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - ulong x3 = x[xOff + 3]; - c += wVal * x3 + x2 + y[yOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - ulong x4 = x[xOff + 4]; - c += wVal * x4 + x3 + y[yOff + 4]; - z[zOff + 4] = (uint)c; - c >>= 32; - ulong x5 = x[xOff + 5]; - c += wVal * x5 + x4 + y[yOff + 5]; - z[zOff + 5] = (uint)c; - c >>= 32; - ulong x6 = x[xOff + 6]; - c += wVal * x6 + x5 + y[yOff + 6]; - z[zOff + 6] = (uint)c; - c >>= 32; - c += x6; - return c; - } - - public static uint MulByWord(uint x, uint[] z) - { - ulong c = 0, xVal = x; - c += xVal * (ulong)z[0]; - z[0] = (uint)c; - c >>= 32; - c += xVal * (ulong)z[1]; - z[1] = (uint)c; - c >>= 32; - c += xVal * (ulong)z[2]; - z[2] = (uint)c; - c >>= 32; - c += xVal * (ulong)z[3]; - z[3] = (uint)c; - c >>= 32; - c += xVal * (ulong)z[4]; - z[4] = (uint)c; - c >>= 32; - c += xVal * (ulong)z[5]; - z[5] = (uint)c; - c >>= 32; - c += xVal * (ulong)z[6]; - z[6] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint MulByWordAddTo(uint x, uint[] y, uint[] z) - { - ulong c = 0, xVal = x; - c += xVal * (ulong)z[0] + y[0]; - z[0] = (uint)c; - c >>= 32; - c += xVal * (ulong)z[1] + y[1]; - z[1] = (uint)c; - c >>= 32; - c += xVal * (ulong)z[2] + y[2]; - z[2] = (uint)c; - c >>= 32; - c += xVal * (ulong)z[3] + y[3]; - z[3] = (uint)c; - c >>= 32; - c += xVal * (ulong)z[4] + y[4]; - z[4] = (uint)c; - c >>= 32; - c += xVal * (ulong)z[5] + y[5]; - z[5] = (uint)c; - c >>= 32; - c += xVal * (ulong)z[6] + y[6]; - z[6] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint MulWordAddTo(uint x, uint[] y, int yOff, uint[] z, int zOff) - { - ulong c = 0, xVal = x; - c += xVal * y[yOff + 0] + z[zOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += xVal * y[yOff + 1] + z[zOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += xVal * y[yOff + 2] + z[zOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - c += xVal * y[yOff + 3] + z[zOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - c += xVal * y[yOff + 4] + z[zOff + 4]; - z[zOff + 4] = (uint)c; - c >>= 32; - c += xVal * y[yOff + 5] + z[zOff + 5]; - z[zOff + 5] = (uint)c; - c >>= 32; - c += xVal * y[yOff + 6] + z[zOff + 6]; - z[zOff + 6] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint Mul33DWordAdd(uint x, ulong y, uint[] z, int zOff) - { - Debug.Assert(x >> 31 == 0); - Debug.Assert(zOff <= 3); - ulong c = 0, xVal = x; - ulong y00 = y & M; - c += xVal * y00 + z[zOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - ulong y01 = y >> 32; - c += xVal * y01 + y00 + z[zOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += y01 + z[zOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - c += z[zOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - return c == 0 ? 0 : Nat.IncAt(7, z, zOff, 4); - } - - public static uint Mul33WordAdd(uint x, uint y, uint[] z, int zOff) - { - Debug.Assert(x >> 31 == 0); - Debug.Assert(zOff <= 4); - ulong c = 0, yVal = y; - c += yVal * x + z[zOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += yVal + z[zOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += z[zOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - return c == 0 ? 0 : Nat.IncAt(7, z, zOff, 3); - } - - public static uint MulWordDwordAdd(uint x, ulong y, uint[] z, int zOff) - { - Debug.Assert(zOff <= 4); - ulong c = 0, xVal = x; - c += xVal * y + z[zOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += xVal * (y >> 32) + z[zOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += z[zOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - return c == 0 ? 0 : Nat.IncAt(7, z, zOff, 3); - } - - public static uint MulWord(uint x, uint[] y, uint[] z, int zOff) - { - ulong c = 0, xVal = x; - int i = 0; - do - { - c += xVal * y[i]; - z[zOff + i] = (uint)c; - c >>= 32; - } - while (++i < 7); - return (uint)c; - } - - public static void Square(uint[] x, uint[] zz) - { - ulong x_0 = x[0]; - ulong zz_1; - - uint c = 0, w; - { - int i = 6, j = 14; - do - { - ulong xVal = x[i--]; - ulong p = xVal * xVal; - zz[--j] = (c << 31) | (uint)(p >> 33); - zz[--j] = (uint)(p >> 1); - c = (uint)p; - } - while (i > 0); - - { - ulong p = x_0 * x_0; - zz_1 = (ulong)(c << 31) | (p >> 33); - zz[0] = (uint)p; - c = (uint)(p >> 32) & 1; - } - } - - ulong x_1 = x[1]; - ulong zz_2 = zz[2]; - - { - zz_1 += x_1 * x_0; - w = (uint)zz_1; - zz[1] = (w << 1) | c; - c = w >> 31; - zz_2 += zz_1 >> 32; - } - - ulong x_2 = x[2]; - ulong zz_3 = zz[3]; - ulong zz_4 = zz[4]; - { - zz_2 += x_2 * x_0; - w = (uint)zz_2; - zz[2] = (w << 1) | c; - c = w >> 31; - zz_3 += (zz_2 >> 32) + x_2 * x_1; - zz_4 += zz_3 >> 32; - zz_3 &= M; - } - - ulong x_3 = x[3]; - ulong zz_5 = zz[5] + (zz_4 >> 32); zz_4 &= M; - ulong zz_6 = zz[6] + (zz_5 >> 32); zz_5 &= M; - { - zz_3 += x_3 * x_0; - w = (uint)zz_3; - zz[3] = (w << 1) | c; - c = w >> 31; - zz_4 += (zz_3 >> 32) + x_3 * x_1; - zz_5 += (zz_4 >> 32) + x_3 * x_2; - zz_4 &= M; - zz_6 += zz_5 >> 32; - zz_5 &= M; - } - - ulong x_4 = x[4]; - ulong zz_7 = zz[7] + (zz_6 >> 32); zz_6 &= M; - ulong zz_8 = zz[8] + (zz_7 >> 32); zz_7 &= M; - { - zz_4 += x_4 * x_0; - w = (uint)zz_4; - zz[4] = (w << 1) | c; - c = w >> 31; - zz_5 += (zz_4 >> 32) + x_4 * x_1; - zz_6 += (zz_5 >> 32) + x_4 * x_2; - zz_5 &= M; - zz_7 += (zz_6 >> 32) + x_4 * x_3; - zz_6 &= M; - zz_8 += zz_7 >> 32; - zz_7 &= M; - } - - ulong x_5 = x[5]; - ulong zz_9 = zz[9] + (zz_8 >> 32); zz_8 &= M; - ulong zz_10 = zz[10] + (zz_9 >> 32); zz_9 &= M; - { - zz_5 += x_5 * x_0; - w = (uint)zz_5; - zz[5] = (w << 1) | c; - c = w >> 31; - zz_6 += (zz_5 >> 32) + x_5 * x_1; - zz_7 += (zz_6 >> 32) + x_5 * x_2; - zz_6 &= M; - zz_8 += (zz_7 >> 32) + x_5 * x_3; - zz_7 &= M; - zz_9 += (zz_8 >> 32) + x_5 * x_4; - zz_8 &= M; - zz_10 += zz_9 >> 32; - zz_9 &= M; - } - - ulong x_6 = x[6]; - ulong zz_11 = zz[11] + (zz_10 >> 32); zz_10 &= M; - ulong zz_12 = zz[12] + (zz_11 >> 32); zz_11 &= M; - { - zz_6 += x_6 * x_0; - w = (uint)zz_6; - zz[6] = (w << 1) | c; - c = w >> 31; - zz_7 += (zz_6 >> 32) + x_6 * x_1; - zz_8 += (zz_7 >> 32) + x_6 * x_2; - zz_9 += (zz_8 >> 32) + x_6 * x_3; - zz_10 += (zz_9 >> 32) + x_6 * x_4; - zz_11 += (zz_10 >> 32) + x_6 * x_5; - zz_12 += zz_11 >> 32; - } - - w = (uint)zz_7; - zz[7] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_8; - zz[8] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_9; - zz[9] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_10; - zz[10] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_11; - zz[11] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_12; - zz[12] = (w << 1) | c; - c = w >> 31; - w = zz[13] + (uint)(zz_12 >> 32); - zz[13] = (w << 1) | c; - } - - public static void Square(uint[] x, int xOff, uint[] zz, int zzOff) - { - ulong x_0 = x[xOff + 0]; - ulong zz_1; - - uint c = 0, w; - { - int i = 6, j = 14; - do - { - ulong xVal = x[xOff + i--]; - ulong p = xVal * xVal; - zz[zzOff + --j] = (c << 31) | (uint)(p >> 33); - zz[zzOff + --j] = (uint)(p >> 1); - c = (uint)p; - } - while (i > 0); - - { - ulong p = x_0 * x_0; - zz_1 = (ulong)(c << 31) | (p >> 33); - zz[zzOff + 0] = (uint)p; - c = (uint)(p >> 32) & 1; - } - } - - ulong x_1 = x[xOff + 1]; - ulong zz_2 = zz[zzOff + 2]; - - { - zz_1 += x_1 * x_0; - w = (uint)zz_1; - zz[zzOff + 1] = (w << 1) | c; - c = w >> 31; - zz_2 += zz_1 >> 32; - } - - ulong x_2 = x[xOff + 2]; - ulong zz_3 = zz[zzOff + 3]; - ulong zz_4 = zz[zzOff + 4]; - { - zz_2 += x_2 * x_0; - w = (uint)zz_2; - zz[zzOff + 2] = (w << 1) | c; - c = w >> 31; - zz_3 += (zz_2 >> 32) + x_2 * x_1; - zz_4 += zz_3 >> 32; - zz_3 &= M; - } - - ulong x_3 = x[xOff + 3]; - ulong zz_5 = zz[zzOff + 5] + (zz_4 >> 32); zz_4 &= M; - ulong zz_6 = zz[zzOff + 6] + (zz_5 >> 32); zz_5 &= M; - { - zz_3 += x_3 * x_0; - w = (uint)zz_3; - zz[zzOff + 3] = (w << 1) | c; - c = w >> 31; - zz_4 += (zz_3 >> 32) + x_3 * x_1; - zz_5 += (zz_4 >> 32) + x_3 * x_2; - zz_4 &= M; - zz_6 += zz_5 >> 32; - zz_5 &= M; - } - - ulong x_4 = x[xOff + 4]; - ulong zz_7 = zz[zzOff + 7] + (zz_6 >> 32); zz_6 &= M; - ulong zz_8 = zz[zzOff + 8] + (zz_7 >> 32); zz_7 &= M; - { - zz_4 += x_4 * x_0; - w = (uint)zz_4; - zz[zzOff + 4] = (w << 1) | c; - c = w >> 31; - zz_5 += (zz_4 >> 32) + x_4 * x_1; - zz_6 += (zz_5 >> 32) + x_4 * x_2; - zz_5 &= M; - zz_7 += (zz_6 >> 32) + x_4 * x_3; - zz_6 &= M; - zz_8 += zz_7 >> 32; - zz_7 &= M; - } - - ulong x_5 = x[xOff + 5]; - ulong zz_9 = zz[zzOff + 9] + (zz_8 >> 32); zz_8 &= M; - ulong zz_10 = zz[zzOff + 10] + (zz_9 >> 32); zz_9 &= M; - { - zz_5 += x_5 * x_0; - w = (uint)zz_5; - zz[zzOff + 5] = (w << 1) | c; - c = w >> 31; - zz_6 += (zz_5 >> 32) + x_5 * x_1; - zz_7 += (zz_6 >> 32) + x_5 * x_2; - zz_6 &= M; - zz_8 += (zz_7 >> 32) + x_5 * x_3; - zz_7 &= M; - zz_9 += (zz_8 >> 32) + x_5 * x_4; - zz_8 &= M; - zz_10 += zz_9 >> 32; - zz_9 &= M; - } - - ulong x_6 = x[xOff + 6]; - ulong zz_11 = zz[zzOff + 11] + (zz_10 >> 32); zz_10 &= M; - ulong zz_12 = zz[zzOff + 12] + (zz_11 >> 32); zz_11 &= M; - { - zz_6 += x_6 * x_0; - w = (uint)zz_6; - zz[zzOff + 6] = (w << 1) | c; - c = w >> 31; - zz_7 += (zz_6 >> 32) + x_6 * x_1; - zz_8 += (zz_7 >> 32) + x_6 * x_2; - zz_9 += (zz_8 >> 32) + x_6 * x_3; - zz_10 += (zz_9 >> 32) + x_6 * x_4; - zz_11 += (zz_10 >> 32) + x_6 * x_5; - zz_12 += zz_11 >> 32; - } - - w = (uint)zz_7; - zz[zzOff + 7] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_8; - zz[zzOff + 8] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_9; - zz[zzOff + 9] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_10; - zz[zzOff + 10] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_11; - zz[zzOff + 11] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_12; - zz[zzOff + 12] = (w << 1) | c; - c = w >> 31; - w = zz[zzOff + 13] + (uint)(zz_12 >> 32); - zz[zzOff + 13] = (w << 1) | c; - } - - public static int Sub(uint[] x, uint[] y, uint[] z) - { - long c = 0; - c += (long)x[0] - y[0]; - z[0] = (uint)c; - c >>= 32; - c += (long)x[1] - y[1]; - z[1] = (uint)c; - c >>= 32; - c += (long)x[2] - y[2]; - z[2] = (uint)c; - c >>= 32; - c += (long)x[3] - y[3]; - z[3] = (uint)c; - c >>= 32; - c += (long)x[4] - y[4]; - z[4] = (uint)c; - c >>= 32; - c += (long)x[5] - y[5]; - z[5] = (uint)c; - c >>= 32; - c += (long)x[6] - y[6]; - z[6] = (uint)c; - c >>= 32; - return (int)c; - } - - public static int Sub(uint[] x, int xOff, uint[] y, int yOff, uint[] z, int zOff) - { - long c = 0; - c += (long)x[xOff + 0] - y[yOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += (long)x[xOff + 1] - y[yOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += (long)x[xOff + 2] - y[yOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - c += (long)x[xOff + 3] - y[yOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - c += (long)x[xOff + 4] - y[yOff + 4]; - z[zOff + 4] = (uint)c; - c >>= 32; - c += (long)x[xOff + 5] - y[yOff + 5]; - z[zOff + 5] = (uint)c; - c >>= 32; - c += (long)x[xOff + 6] - y[yOff + 6]; - z[zOff + 6] = (uint)c; - c >>= 32; - return (int)c; - } - - public static int SubBothFrom(uint[] x, uint[] y, uint[] z) - { - long c = 0; - c += (long)z[0] - x[0] - y[0]; - z[0] = (uint)c; - c >>= 32; - c += (long)z[1] - x[1] - y[1]; - z[1] = (uint)c; - c >>= 32; - c += (long)z[2] - x[2] - y[2]; - z[2] = (uint)c; - c >>= 32; - c += (long)z[3] - x[3] - y[3]; - z[3] = (uint)c; - c >>= 32; - c += (long)z[4] - x[4] - y[4]; - z[4] = (uint)c; - c >>= 32; - c += (long)z[5] - x[5] - y[5]; - z[5] = (uint)c; - c >>= 32; - c += (long)z[6] - x[6] - y[6]; - z[6] = (uint)c; - c >>= 32; - return (int)c; - } - - public static int SubFrom(uint[] x, uint[] z) - { - long c = 0; - c += (long)z[0] - x[0]; - z[0] = (uint)c; - c >>= 32; - c += (long)z[1] - x[1]; - z[1] = (uint)c; - c >>= 32; - c += (long)z[2] - x[2]; - z[2] = (uint)c; - c >>= 32; - c += (long)z[3] - x[3]; - z[3] = (uint)c; - c >>= 32; - c += (long)z[4] - x[4]; - z[4] = (uint)c; - c >>= 32; - c += (long)z[5] - x[5]; - z[5] = (uint)c; - c >>= 32; - c += (long)z[6] - x[6]; - z[6] = (uint)c; - c >>= 32; - return (int)c; - } - - public static int SubFrom(uint[] x, int xOff, uint[] z, int zOff) - { - long c = 0; - c += (long)z[zOff + 0] - x[xOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += (long)z[zOff + 1] - x[xOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += (long)z[zOff + 2] - x[xOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - c += (long)z[zOff + 3] - x[xOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - c += (long)z[zOff + 4] - x[xOff + 4]; - z[zOff + 4] = (uint)c; - c >>= 32; - c += (long)z[zOff + 5] - x[xOff + 5]; - z[zOff + 5] = (uint)c; - c >>= 32; - c += (long)z[zOff + 6] - x[xOff + 6]; - z[zOff + 6] = (uint)c; - c >>= 32; - return (int)c; - } - - public static BigInteger ToBigInteger(uint[] x) - { - byte[] bs = new byte[28]; - for (int i = 0; i < 7; ++i) - { - uint x_i = x[i]; - if (x_i != 0) - { - Pack.UInt32_To_BE(x_i, bs, (6 - i) << 2); - } - } - return new BigInteger(1, bs); - } - - public static void Zero(uint[] z) - { - z[0] = 0; - z[1] = 0; - z[2] = 0; - z[3] = 0; - z[4] = 0; - z[5] = 0; - z[6] = 0; - } - } -} diff --git a/bc-sharp-crypto/src/math/raw/Nat256.cs b/bc-sharp-crypto/src/math/raw/Nat256.cs deleted file mode 100644 index 09c751a..0000000 --- a/bc-sharp-crypto/src/math/raw/Nat256.cs +++ /dev/null @@ -1,1387 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Crypto.Utilities; - -namespace Org.BouncyCastle.Math.Raw -{ - internal abstract class Nat256 - { - private const ulong M = 0xFFFFFFFFUL; - - public static uint Add(uint[] x, uint[] y, uint[] z) - { - ulong c = 0; - c += (ulong)x[0] + y[0]; - z[0] = (uint)c; - c >>= 32; - c += (ulong)x[1] + y[1]; - z[1] = (uint)c; - c >>= 32; - c += (ulong)x[2] + y[2]; - z[2] = (uint)c; - c >>= 32; - c += (ulong)x[3] + y[3]; - z[3] = (uint)c; - c >>= 32; - c += (ulong)x[4] + y[4]; - z[4] = (uint)c; - c >>= 32; - c += (ulong)x[5] + y[5]; - z[5] = (uint)c; - c >>= 32; - c += (ulong)x[6] + y[6]; - z[6] = (uint)c; - c >>= 32; - c += (ulong)x[7] + y[7]; - z[7] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint Add(uint[] x, int xOff, uint[] y, int yOff, uint[] z, int zOff) - { - ulong c = 0; - c += (ulong)x[xOff + 0] + y[yOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 1] + y[yOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 2] + y[yOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 3] + y[yOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 4] + y[yOff + 4]; - z[zOff + 4] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 5] + y[yOff + 5]; - z[zOff + 5] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 6] + y[yOff + 6]; - z[zOff + 6] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 7] + y[yOff + 7]; - z[zOff + 7] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint AddBothTo(uint[] x, uint[] y, uint[] z) - { - ulong c = 0; - c += (ulong)x[0] + y[0] + z[0]; - z[0] = (uint)c; - c >>= 32; - c += (ulong)x[1] + y[1] + z[1]; - z[1] = (uint)c; - c >>= 32; - c += (ulong)x[2] + y[2] + z[2]; - z[2] = (uint)c; - c >>= 32; - c += (ulong)x[3] + y[3] + z[3]; - z[3] = (uint)c; - c >>= 32; - c += (ulong)x[4] + y[4] + z[4]; - z[4] = (uint)c; - c >>= 32; - c += (ulong)x[5] + y[5] + z[5]; - z[5] = (uint)c; - c >>= 32; - c += (ulong)x[6] + y[6] + z[6]; - z[6] = (uint)c; - c >>= 32; - c += (ulong)x[7] + y[7] + z[7]; - z[7] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint AddBothTo(uint[] x, int xOff, uint[] y, int yOff, uint[] z, int zOff) - { - ulong c = 0; - c += (ulong)x[xOff + 0] + y[yOff + 0] + z[zOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 1] + y[yOff + 1] + z[zOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 2] + y[yOff + 2] + z[zOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 3] + y[yOff + 3] + z[zOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 4] + y[yOff + 4] + z[zOff + 4]; - z[zOff + 4] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 5] + y[yOff + 5] + z[zOff + 5]; - z[zOff + 5] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 6] + y[yOff + 6] + z[zOff + 6]; - z[zOff + 6] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 7] + y[yOff + 7] + z[zOff + 7]; - z[zOff + 7] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint AddTo(uint[] x, uint[] z) - { - ulong c = 0; - c += (ulong)x[0] + z[0]; - z[0] = (uint)c; - c >>= 32; - c += (ulong)x[1] + z[1]; - z[1] = (uint)c; - c >>= 32; - c += (ulong)x[2] + z[2]; - z[2] = (uint)c; - c >>= 32; - c += (ulong)x[3] + z[3]; - z[3] = (uint)c; - c >>= 32; - c += (ulong)x[4] + z[4]; - z[4] = (uint)c; - c >>= 32; - c += (ulong)x[5] + z[5]; - z[5] = (uint)c; - c >>= 32; - c += (ulong)x[6] + z[6]; - z[6] = (uint)c; - c >>= 32; - c += (ulong)x[7] + z[7]; - z[7] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint AddTo(uint[] x, int xOff, uint[] z, int zOff, uint cIn) - { - ulong c = cIn; - c += (ulong)x[xOff + 0] + z[zOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 1] + z[zOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 2] + z[zOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 3] + z[zOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 4] + z[zOff + 4]; - z[zOff + 4] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 5] + z[zOff + 5]; - z[zOff + 5] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 6] + z[zOff + 6]; - z[zOff + 6] = (uint)c; - c >>= 32; - c += (ulong)x[xOff + 7] + z[zOff + 7]; - z[zOff + 7] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint AddToEachOther(uint[] u, int uOff, uint[] v, int vOff) - { - ulong c = 0; - c += (ulong)u[uOff + 0] + v[vOff + 0]; - u[uOff + 0] = (uint)c; - v[vOff + 0] = (uint)c; - c >>= 32; - c += (ulong)u[uOff + 1] + v[vOff + 1]; - u[uOff + 1] = (uint)c; - v[vOff + 1] = (uint)c; - c >>= 32; - c += (ulong)u[uOff + 2] + v[vOff + 2]; - u[uOff + 2] = (uint)c; - v[vOff + 2] = (uint)c; - c >>= 32; - c += (ulong)u[uOff + 3] + v[vOff + 3]; - u[uOff + 3] = (uint)c; - v[vOff + 3] = (uint)c; - c >>= 32; - c += (ulong)u[uOff + 4] + v[vOff + 4]; - u[uOff + 4] = (uint)c; - v[vOff + 4] = (uint)c; - c >>= 32; - c += (ulong)u[uOff + 5] + v[vOff + 5]; - u[uOff + 5] = (uint)c; - v[vOff + 5] = (uint)c; - c >>= 32; - c += (ulong)u[uOff + 6] + v[vOff + 6]; - u[uOff + 6] = (uint)c; - v[vOff + 6] = (uint)c; - c >>= 32; - c += (ulong)u[uOff + 7] + v[vOff + 7]; - u[uOff + 7] = (uint)c; - v[vOff + 7] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static void Copy(uint[] x, uint[] z) - { - z[0] = x[0]; - z[1] = x[1]; - z[2] = x[2]; - z[3] = x[3]; - z[4] = x[4]; - z[5] = x[5]; - z[6] = x[6]; - z[7] = x[7]; - } - - public static void Copy64(ulong[] x, ulong[] z) - { - z[0] = x[0]; - z[1] = x[1]; - z[2] = x[2]; - z[3] = x[3]; - } - - public static uint[] Create() - { - return new uint[8]; - } - - public static ulong[] Create64() - { - return new ulong[4]; - } - - public static uint[] CreateExt() - { - return new uint[16]; - } - - public static ulong[] CreateExt64() - { - return new ulong[8]; - } - - public static bool Diff(uint[] x, int xOff, uint[] y, int yOff, uint[] z, int zOff) - { - bool pos = Gte(x, xOff, y, yOff); - if (pos) - { - Sub(x, xOff, y, yOff, z, zOff); - } - else - { - Sub(y, yOff, x, xOff, z, zOff); - } - return pos; - } - - public static bool Eq(uint[] x, uint[] y) - { - for (int i = 7; i >= 0; --i) - { - if (x[i] != y[i]) - return false; - } - return true; - } - - public static bool Eq64(ulong[] x, ulong[] y) - { - for (int i = 3; i >= 0; --i) - { - if (x[i] != y[i]) - { - return false; - } - } - return true; - } - - public static uint[] FromBigInteger(BigInteger x) - { - if (x.SignValue < 0 || x.BitLength > 256) - throw new ArgumentException(); - - uint[] z = Create(); - int i = 0; - while (x.SignValue != 0) - { - z[i++] = (uint)x.IntValue; - x = x.ShiftRight(32); - } - return z; - } - - public static ulong[] FromBigInteger64(BigInteger x) - { - if (x.SignValue < 0 || x.BitLength > 256) - throw new ArgumentException(); - - ulong[] z = Create64(); - int i = 0; - while (x.SignValue != 0) - { - z[i++] = (ulong)x.LongValue; - x = x.ShiftRight(64); - } - return z; - } - - public static uint GetBit(uint[] x, int bit) - { - if (bit == 0) - { - return x[0] & 1; - } - if ((bit & 255) != bit) - { - return 0; - } - int w = bit >> 5; - int b = bit & 31; - return (x[w] >> b) & 1; - } - - public static bool Gte(uint[] x, uint[] y) - { - for (int i = 7; i >= 0; --i) - { - uint x_i = x[i], y_i = y[i]; - if (x_i < y_i) - return false; - if (x_i > y_i) - return true; - } - return true; - } - - public static bool Gte(uint[] x, int xOff, uint[] y, int yOff) - { - for (int i = 7; i >= 0; --i) - { - uint x_i = x[xOff + i], y_i = y[yOff + i]; - if (x_i < y_i) - return false; - if (x_i > y_i) - return true; - } - return true; - } - - public static bool IsOne(uint[] x) - { - if (x[0] != 1) - { - return false; - } - for (int i = 1; i < 8; ++i) - { - if (x[i] != 0) - { - return false; - } - } - return true; - } - - public static bool IsOne64(ulong[] x) - { - if (x[0] != 1UL) - { - return false; - } - for (int i = 1; i < 4; ++i) - { - if (x[i] != 0UL) - { - return false; - } - } - return true; - } - - public static bool IsZero(uint[] x) - { - for (int i = 0; i < 8; ++i) - { - if (x[i] != 0) - { - return false; - } - } - return true; - } - - public static bool IsZero64(ulong[] x) - { - for (int i = 0; i < 4; ++i) - { - if (x[i] != 0UL) - { - return false; - } - } - return true; - } - - public static void Mul(uint[] x, uint[] y, uint[] zz) - { - ulong y_0 = y[0]; - ulong y_1 = y[1]; - ulong y_2 = y[2]; - ulong y_3 = y[3]; - ulong y_4 = y[4]; - ulong y_5 = y[5]; - ulong y_6 = y[6]; - ulong y_7 = y[7]; - - { - ulong c = 0, x_0 = x[0]; - c += x_0 * y_0; - zz[0] = (uint)c; - c >>= 32; - c += x_0 * y_1; - zz[1] = (uint)c; - c >>= 32; - c += x_0 * y_2; - zz[2] = (uint)c; - c >>= 32; - c += x_0 * y_3; - zz[3] = (uint)c; - c >>= 32; - c += x_0 * y_4; - zz[4] = (uint)c; - c >>= 32; - c += x_0 * y_5; - zz[5] = (uint)c; - c >>= 32; - c += x_0 * y_6; - zz[6] = (uint)c; - c >>= 32; - c += x_0 * y_7; - zz[7] = (uint)c; - c >>= 32; - zz[8] = (uint)c; - } - - for (int i = 1; i < 8; ++i) - { - ulong c = 0, x_i = x[i]; - c += x_i * y_0 + zz[i + 0]; - zz[i + 0] = (uint)c; - c >>= 32; - c += x_i * y_1 + zz[i + 1]; - zz[i + 1] = (uint)c; - c >>= 32; - c += x_i * y_2 + zz[i + 2]; - zz[i + 2] = (uint)c; - c >>= 32; - c += x_i * y_3 + zz[i + 3]; - zz[i + 3] = (uint)c; - c >>= 32; - c += x_i * y_4 + zz[i + 4]; - zz[i + 4] = (uint)c; - c >>= 32; - c += x_i * y_5 + zz[i + 5]; - zz[i + 5] = (uint)c; - c >>= 32; - c += x_i * y_6 + zz[i + 6]; - zz[i + 6] = (uint)c; - c >>= 32; - c += x_i * y_7 + zz[i + 7]; - zz[i + 7] = (uint)c; - c >>= 32; - zz[i + 8] = (uint)c; - } - } - - public static void Mul(uint[] x, int xOff, uint[] y, int yOff, uint[] zz, int zzOff) - { - ulong y_0 = y[yOff + 0]; - ulong y_1 = y[yOff + 1]; - ulong y_2 = y[yOff + 2]; - ulong y_3 = y[yOff + 3]; - ulong y_4 = y[yOff + 4]; - ulong y_5 = y[yOff + 5]; - ulong y_6 = y[yOff + 6]; - ulong y_7 = y[yOff + 7]; - - { - ulong c = 0, x_0 = x[xOff + 0]; - c += x_0 * y_0; - zz[zzOff + 0] = (uint)c; - c >>= 32; - c += x_0 * y_1; - zz[zzOff + 1] = (uint)c; - c >>= 32; - c += x_0 * y_2; - zz[zzOff + 2] = (uint)c; - c >>= 32; - c += x_0 * y_3; - zz[zzOff + 3] = (uint)c; - c >>= 32; - c += x_0 * y_4; - zz[zzOff + 4] = (uint)c; - c >>= 32; - c += x_0 * y_5; - zz[zzOff + 5] = (uint)c; - c >>= 32; - c += x_0 * y_6; - zz[zzOff + 6] = (uint)c; - c >>= 32; - c += x_0 * y_7; - zz[zzOff + 7] = (uint)c; - c >>= 32; - zz[zzOff + 8] = (uint)c; - } - - for (int i = 1; i < 8; ++i) - { - ++zzOff; - ulong c = 0, x_i = x[xOff + i]; - c += x_i * y_0 + zz[zzOff + 0]; - zz[zzOff + 0] = (uint)c; - c >>= 32; - c += x_i * y_1 + zz[zzOff + 1]; - zz[zzOff + 1] = (uint)c; - c >>= 32; - c += x_i * y_2 + zz[zzOff + 2]; - zz[zzOff + 2] = (uint)c; - c >>= 32; - c += x_i * y_3 + zz[zzOff + 3]; - zz[zzOff + 3] = (uint)c; - c >>= 32; - c += x_i * y_4 + zz[zzOff + 4]; - zz[zzOff + 4] = (uint)c; - c >>= 32; - c += x_i * y_5 + zz[zzOff + 5]; - zz[zzOff + 5] = (uint)c; - c >>= 32; - c += x_i * y_6 + zz[zzOff + 6]; - zz[zzOff + 6] = (uint)c; - c >>= 32; - c += x_i * y_7 + zz[zzOff + 7]; - zz[zzOff + 7] = (uint)c; - c >>= 32; - zz[zzOff + 8] = (uint)c; - } - } - - public static uint MulAddTo(uint[] x, uint[] y, uint[] zz) - { - ulong y_0 = y[0]; - ulong y_1 = y[1]; - ulong y_2 = y[2]; - ulong y_3 = y[3]; - ulong y_4 = y[4]; - ulong y_5 = y[5]; - ulong y_6 = y[6]; - ulong y_7 = y[7]; - - ulong zc = 0; - for (int i = 0; i < 8; ++i) - { - ulong c = 0, x_i = x[i]; - c += x_i * y_0 + zz[i + 0]; - zz[i + 0] = (uint)c; - c >>= 32; - c += x_i * y_1 + zz[i + 1]; - zz[i + 1] = (uint)c; - c >>= 32; - c += x_i * y_2 + zz[i + 2]; - zz[i + 2] = (uint)c; - c >>= 32; - c += x_i * y_3 + zz[i + 3]; - zz[i + 3] = (uint)c; - c >>= 32; - c += x_i * y_4 + zz[i + 4]; - zz[i + 4] = (uint)c; - c >>= 32; - c += x_i * y_5 + zz[i + 5]; - zz[i + 5] = (uint)c; - c >>= 32; - c += x_i * y_6 + zz[i + 6]; - zz[i + 6] = (uint)c; - c >>= 32; - c += x_i * y_7 + zz[i + 7]; - zz[i + 7] = (uint)c; - c >>= 32; - c += zc + zz[i + 8]; - zz[i + 8] = (uint)c; - zc = c >> 32; - } - return (uint)zc; - } - - public static uint MulAddTo(uint[] x, int xOff, uint[] y, int yOff, uint[] zz, int zzOff) - { - ulong y_0 = y[yOff + 0]; - ulong y_1 = y[yOff + 1]; - ulong y_2 = y[yOff + 2]; - ulong y_3 = y[yOff + 3]; - ulong y_4 = y[yOff + 4]; - ulong y_5 = y[yOff + 5]; - ulong y_6 = y[yOff + 6]; - ulong y_7 = y[yOff + 7]; - - ulong zc = 0; - for (int i = 0; i < 8; ++i) - { - ulong c = 0, x_i = x[xOff + i]; - c += x_i * y_0 + zz[zzOff + 0]; - zz[zzOff + 0] = (uint)c; - c >>= 32; - c += x_i * y_1 + zz[zzOff + 1]; - zz[zzOff + 1] = (uint)c; - c >>= 32; - c += x_i * y_2 + zz[zzOff + 2]; - zz[zzOff + 2] = (uint)c; - c >>= 32; - c += x_i * y_3 + zz[zzOff + 3]; - zz[zzOff + 3] = (uint)c; - c >>= 32; - c += x_i * y_4 + zz[zzOff + 4]; - zz[zzOff + 4] = (uint)c; - c >>= 32; - c += x_i * y_5 + zz[zzOff + 5]; - zz[zzOff + 5] = (uint)c; - c >>= 32; - c += x_i * y_6 + zz[zzOff + 6]; - zz[zzOff + 6] = (uint)c; - c >>= 32; - c += x_i * y_7 + zz[zzOff + 7]; - zz[zzOff + 7] = (uint)c; - c >>= 32; - c += zc + zz[zzOff + 8]; - zz[zzOff + 8] = (uint)c; - zc = c >> 32; - ++zzOff; - } - return (uint)zc; - } - - public static ulong Mul33Add(uint w, uint[] x, int xOff, uint[] y, int yOff, uint[] z, int zOff) - { - Debug.Assert(w >> 31 == 0); - - ulong c = 0, wVal = w; - ulong x0 = x[xOff + 0]; - c += wVal * x0 + y[yOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - ulong x1 = x[xOff + 1]; - c += wVal * x1 + x0 + y[yOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - ulong x2 = x[xOff + 2]; - c += wVal * x2 + x1 + y[yOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - ulong x3 = x[xOff + 3]; - c += wVal * x3 + x2 + y[yOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - ulong x4 = x[xOff + 4]; - c += wVal * x4 + x3 + y[yOff + 4]; - z[zOff + 4] = (uint)c; - c >>= 32; - ulong x5 = x[xOff + 5]; - c += wVal * x5 + x4 + y[yOff + 5]; - z[zOff + 5] = (uint)c; - c >>= 32; - ulong x6 = x[xOff + 6]; - c += wVal * x6 + x5 + y[yOff + 6]; - z[zOff + 6] = (uint)c; - c >>= 32; - ulong x7 = x[xOff + 7]; - c += wVal * x7 + x6 + y[yOff + 7]; - z[zOff + 7] = (uint)c; - c >>= 32; - c += x7; - return c; - } - - public static uint MulByWord(uint x, uint[] z) - { - ulong c = 0, xVal = x; - c += xVal * (ulong)z[0]; - z[0] = (uint)c; - c >>= 32; - c += xVal * (ulong)z[1]; - z[1] = (uint)c; - c >>= 32; - c += xVal * (ulong)z[2]; - z[2] = (uint)c; - c >>= 32; - c += xVal * (ulong)z[3]; - z[3] = (uint)c; - c >>= 32; - c += xVal * (ulong)z[4]; - z[4] = (uint)c; - c >>= 32; - c += xVal * (ulong)z[5]; - z[5] = (uint)c; - c >>= 32; - c += xVal * (ulong)z[6]; - z[6] = (uint)c; - c >>= 32; - c += xVal * (ulong)z[7]; - z[7] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint MulByWordAddTo(uint x, uint[] y, uint[] z) - { - ulong c = 0, xVal = x; - c += xVal * (ulong)z[0] + y[0]; - z[0] = (uint)c; - c >>= 32; - c += xVal * (ulong)z[1] + y[1]; - z[1] = (uint)c; - c >>= 32; - c += xVal * (ulong)z[2] + y[2]; - z[2] = (uint)c; - c >>= 32; - c += xVal * (ulong)z[3] + y[3]; - z[3] = (uint)c; - c >>= 32; - c += xVal * (ulong)z[4] + y[4]; - z[4] = (uint)c; - c >>= 32; - c += xVal * (ulong)z[5] + y[5]; - z[5] = (uint)c; - c >>= 32; - c += xVal * (ulong)z[6] + y[6]; - z[6] = (uint)c; - c >>= 32; - c += xVal * (ulong)z[7] + y[7]; - z[7] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint MulWordAddTo(uint x, uint[] y, int yOff, uint[] z, int zOff) - { - ulong c = 0, xVal = x; - c += xVal * y[yOff + 0] + z[zOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += xVal * y[yOff + 1] + z[zOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += xVal * y[yOff + 2] + z[zOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - c += xVal * y[yOff + 3] + z[zOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - c += xVal * y[yOff + 4] + z[zOff + 4]; - z[zOff + 4] = (uint)c; - c >>= 32; - c += xVal * y[yOff + 5] + z[zOff + 5]; - z[zOff + 5] = (uint)c; - c >>= 32; - c += xVal * y[yOff + 6] + z[zOff + 6]; - z[zOff + 6] = (uint)c; - c >>= 32; - c += xVal * y[yOff + 7] + z[zOff + 7]; - z[zOff + 7] = (uint)c; - c >>= 32; - return (uint)c; - } - - public static uint Mul33DWordAdd(uint x, ulong y, uint[] z, int zOff) - { - Debug.Assert(x >> 31 == 0); - Debug.Assert(zOff <= 4); - ulong c = 0, xVal = x; - ulong y00 = y & M; - c += xVal * y00 + z[zOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - ulong y01 = y >> 32; - c += xVal * y01 + y00 + z[zOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += y01 + z[zOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - c += z[zOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - return c == 0 ? 0 : Nat.IncAt(8, z, zOff, 4); - } - - public static uint Mul33WordAdd(uint x, uint y, uint[] z, int zOff) - { - Debug.Assert(x >> 31 == 0); - Debug.Assert(zOff <= 5); - ulong c = 0, yVal = y; - c += yVal * x + z[zOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += yVal + z[zOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += z[zOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - return c == 0 ? 0 : Nat.IncAt(8, z, zOff, 3); - } - - public static uint MulWordDwordAdd(uint x, ulong y, uint[] z, int zOff) - { - Debug.Assert(zOff <= 5); - ulong c = 0, xVal = x; - c += xVal * y + z[zOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += xVal * (y >> 32) + z[zOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += z[zOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - return c == 0 ? 0 : Nat.IncAt(8, z, zOff, 3); - } - - public static uint MulWord(uint x, uint[] y, uint[] z, int zOff) - { - ulong c = 0, xVal = x; - int i = 0; - do - { - c += xVal * y[i]; - z[zOff + i] = (uint)c; - c >>= 32; - } - while (++i < 8); - return (uint)c; - } - - public static void Square(uint[] x, uint[] zz) - { - ulong x_0 = x[0]; - ulong zz_1; - - uint c = 0, w; - { - int i = 7, j = 16; - do - { - ulong xVal = x[i--]; - ulong p = xVal * xVal; - zz[--j] = (c << 31) | (uint)(p >> 33); - zz[--j] = (uint)(p >> 1); - c = (uint)p; - } - while (i > 0); - - { - ulong p = x_0 * x_0; - zz_1 = (ulong)(c << 31) | (p >> 33); - zz[0] = (uint)p; - c = (uint)(p >> 32) & 1; - } - } - - ulong x_1 = x[1]; - ulong zz_2 = zz[2]; - - { - zz_1 += x_1 * x_0; - w = (uint)zz_1; - zz[1] = (w << 1) | c; - c = w >> 31; - zz_2 += zz_1 >> 32; - } - - ulong x_2 = x[2]; - ulong zz_3 = zz[3]; - ulong zz_4 = zz[4]; - { - zz_2 += x_2 * x_0; - w = (uint)zz_2; - zz[2] = (w << 1) | c; - c = w >> 31; - zz_3 += (zz_2 >> 32) + x_2 * x_1; - zz_4 += zz_3 >> 32; - zz_3 &= M; - } - - ulong x_3 = x[3]; - ulong zz_5 = zz[5] + (zz_4 >> 32); zz_4 &= M; - ulong zz_6 = zz[6] + (zz_5 >> 32); zz_5 &= M; - { - zz_3 += x_3 * x_0; - w = (uint)zz_3; - zz[3] = (w << 1) | c; - c = w >> 31; - zz_4 += (zz_3 >> 32) + x_3 * x_1; - zz_5 += (zz_4 >> 32) + x_3 * x_2; - zz_4 &= M; - zz_6 += zz_5 >> 32; - zz_5 &= M; - } - - ulong x_4 = x[4]; - ulong zz_7 = zz[7] + (zz_6 >> 32); zz_6 &= M; - ulong zz_8 = zz[8] + (zz_7 >> 32); zz_7 &= M; - { - zz_4 += x_4 * x_0; - w = (uint)zz_4; - zz[4] = (w << 1) | c; - c = w >> 31; - zz_5 += (zz_4 >> 32) + x_4 * x_1; - zz_6 += (zz_5 >> 32) + x_4 * x_2; - zz_5 &= M; - zz_7 += (zz_6 >> 32) + x_4 * x_3; - zz_6 &= M; - zz_8 += zz_7 >> 32; - zz_7 &= M; - } - - ulong x_5 = x[5]; - ulong zz_9 = zz[9] + (zz_8 >> 32); zz_8 &= M; - ulong zz_10 = zz[10] + (zz_9 >> 32); zz_9 &= M; - { - zz_5 += x_5 * x_0; - w = (uint)zz_5; - zz[5] = (w << 1) | c; - c = w >> 31; - zz_6 += (zz_5 >> 32) + x_5 * x_1; - zz_7 += (zz_6 >> 32) + x_5 * x_2; - zz_6 &= M; - zz_8 += (zz_7 >> 32) + x_5 * x_3; - zz_7 &= M; - zz_9 += (zz_8 >> 32) + x_5 * x_4; - zz_8 &= M; - zz_10 += zz_9 >> 32; - zz_9 &= M; - } - - ulong x_6 = x[6]; - ulong zz_11 = zz[11] + (zz_10 >> 32); zz_10 &= M; - ulong zz_12 = zz[12] + (zz_11 >> 32); zz_11 &= M; - { - zz_6 += x_6 * x_0; - w = (uint)zz_6; - zz[6] = (w << 1) | c; - c = w >> 31; - zz_7 += (zz_6 >> 32) + x_6 * x_1; - zz_8 += (zz_7 >> 32) + x_6 * x_2; - zz_7 &= M; - zz_9 += (zz_8 >> 32) + x_6 * x_3; - zz_8 &= M; - zz_10 += (zz_9 >> 32) + x_6 * x_4; - zz_9 &= M; - zz_11 += (zz_10 >> 32) + x_6 * x_5; - zz_10 &= M; - zz_12 += zz_11 >> 32; - zz_11 &= M; - } - - ulong x_7 = x[7]; - ulong zz_13 = zz[13] + (zz_12 >> 32); zz_12 &= M; - ulong zz_14 = zz[14] + (zz_13 >> 32); zz_13 &= M; - { - zz_7 += x_7 * x_0; - w = (uint)zz_7; - zz[7] = (w << 1) | c; - c = w >> 31; - zz_8 += (zz_7 >> 32) + x_7 * x_1; - zz_9 += (zz_8 >> 32) + x_7 * x_2; - zz_10 += (zz_9 >> 32) + x_7 * x_3; - zz_11 += (zz_10 >> 32) + x_7 * x_4; - zz_12 += (zz_11 >> 32) + x_7 * x_5; - zz_13 += (zz_12 >> 32) + x_7 * x_6; - zz_14 += zz_13 >> 32; - } - - w = (uint)zz_8; - zz[8] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_9; - zz[9] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_10; - zz[10] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_11; - zz[11] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_12; - zz[12] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_13; - zz[13] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_14; - zz[14] = (w << 1) | c; - c = w >> 31; - w = zz[15] + (uint)(zz_14 >> 32); - zz[15] = (w << 1) | c; - } - - public static void Square(uint[] x, int xOff, uint[] zz, int zzOff) - { - ulong x_0 = x[xOff + 0]; - ulong zz_1; - - uint c = 0, w; - { - int i = 7, j = 16; - do - { - ulong xVal = x[xOff + i--]; - ulong p = xVal * xVal; - zz[zzOff + --j] = (c << 31) | (uint)(p >> 33); - zz[zzOff + --j] = (uint)(p >> 1); - c = (uint)p; - } - while (i > 0); - - { - ulong p = x_0 * x_0; - zz_1 = (ulong)(c << 31) | (p >> 33); - zz[zzOff + 0] = (uint)p; - c = (uint)(p >> 32) & 1; - } - } - - ulong x_1 = x[xOff + 1]; - ulong zz_2 = zz[zzOff + 2]; - - { - zz_1 += x_1 * x_0; - w = (uint)zz_1; - zz[zzOff + 1] = (w << 1) | c; - c = w >> 31; - zz_2 += zz_1 >> 32; - } - - ulong x_2 = x[xOff + 2]; - ulong zz_3 = zz[zzOff + 3]; - ulong zz_4 = zz[zzOff + 4]; - { - zz_2 += x_2 * x_0; - w = (uint)zz_2; - zz[zzOff + 2] = (w << 1) | c; - c = w >> 31; - zz_3 += (zz_2 >> 32) + x_2 * x_1; - zz_4 += zz_3 >> 32; - zz_3 &= M; - } - - ulong x_3 = x[xOff + 3]; - ulong zz_5 = zz[zzOff + 5] + (zz_4 >> 32); zz_4 &= M; - ulong zz_6 = zz[zzOff + 6] + (zz_5 >> 32); zz_5 &= M; - { - zz_3 += x_3 * x_0; - w = (uint)zz_3; - zz[zzOff + 3] = (w << 1) | c; - c = w >> 31; - zz_4 += (zz_3 >> 32) + x_3 * x_1; - zz_5 += (zz_4 >> 32) + x_3 * x_2; - zz_4 &= M; - zz_6 += zz_5 >> 32; - zz_5 &= M; - } - - ulong x_4 = x[xOff + 4]; - ulong zz_7 = zz[zzOff + 7] + (zz_6 >> 32); zz_6 &= M; - ulong zz_8 = zz[zzOff + 8] + (zz_7 >> 32); zz_7 &= M; - { - zz_4 += x_4 * x_0; - w = (uint)zz_4; - zz[zzOff + 4] = (w << 1) | c; - c = w >> 31; - zz_5 += (zz_4 >> 32) + x_4 * x_1; - zz_6 += (zz_5 >> 32) + x_4 * x_2; - zz_5 &= M; - zz_7 += (zz_6 >> 32) + x_4 * x_3; - zz_6 &= M; - zz_8 += zz_7 >> 32; - zz_7 &= M; - } - - ulong x_5 = x[xOff + 5]; - ulong zz_9 = zz[zzOff + 9] + (zz_8 >> 32); zz_8 &= M; - ulong zz_10 = zz[zzOff + 10] + (zz_9 >> 32); zz_9 &= M; - { - zz_5 += x_5 * x_0; - w = (uint)zz_5; - zz[zzOff + 5] = (w << 1) | c; - c = w >> 31; - zz_6 += (zz_5 >> 32) + x_5 * x_1; - zz_7 += (zz_6 >> 32) + x_5 * x_2; - zz_6 &= M; - zz_8 += (zz_7 >> 32) + x_5 * x_3; - zz_7 &= M; - zz_9 += (zz_8 >> 32) + x_5 * x_4; - zz_8 &= M; - zz_10 += zz_9 >> 32; - zz_9 &= M; - } - - ulong x_6 = x[xOff + 6]; - ulong zz_11 = zz[zzOff + 11] + (zz_10 >> 32); zz_10 &= M; - ulong zz_12 = zz[zzOff + 12] + (zz_11 >> 32); zz_11 &= M; - { - zz_6 += x_6 * x_0; - w = (uint)zz_6; - zz[zzOff + 6] = (w << 1) | c; - c = w >> 31; - zz_7 += (zz_6 >> 32) + x_6 * x_1; - zz_8 += (zz_7 >> 32) + x_6 * x_2; - zz_7 &= M; - zz_9 += (zz_8 >> 32) + x_6 * x_3; - zz_8 &= M; - zz_10 += (zz_9 >> 32) + x_6 * x_4; - zz_9 &= M; - zz_11 += (zz_10 >> 32) + x_6 * x_5; - zz_10 &= M; - zz_12 += zz_11 >> 32; - zz_11 &= M; - } - - ulong x_7 = x[xOff + 7]; - ulong zz_13 = zz[zzOff + 13] + (zz_12 >> 32); zz_12 &= M; - ulong zz_14 = zz[zzOff + 14] + (zz_13 >> 32); zz_13 &= M; - { - zz_7 += x_7 * x_0; - w = (uint)zz_7; - zz[zzOff + 7] = (w << 1) | c; - c = w >> 31; - zz_8 += (zz_7 >> 32) + x_7 * x_1; - zz_9 += (zz_8 >> 32) + x_7 * x_2; - zz_10 += (zz_9 >> 32) + x_7 * x_3; - zz_11 += (zz_10 >> 32) + x_7 * x_4; - zz_12 += (zz_11 >> 32) + x_7 * x_5; - zz_13 += (zz_12 >> 32) + x_7 * x_6; - zz_14 += zz_13 >> 32; - } - - w = (uint)zz_8; - zz[zzOff + 8] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_9; - zz[zzOff + 9] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_10; - zz[zzOff + 10] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_11; - zz[zzOff + 11] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_12; - zz[zzOff + 12] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_13; - zz[zzOff + 13] = (w << 1) | c; - c = w >> 31; - w = (uint)zz_14; - zz[zzOff + 14] = (w << 1) | c; - c = w >> 31; - w = zz[zzOff + 15] + (uint)(zz_14 >> 32); - zz[zzOff + 15] = (w << 1) | c; - } - - public static int Sub(uint[] x, uint[] y, uint[] z) - { - long c = 0; - c += (long)x[0] - y[0]; - z[0] = (uint)c; - c >>= 32; - c += (long)x[1] - y[1]; - z[1] = (uint)c; - c >>= 32; - c += (long)x[2] - y[2]; - z[2] = (uint)c; - c >>= 32; - c += (long)x[3] - y[3]; - z[3] = (uint)c; - c >>= 32; - c += (long)x[4] - y[4]; - z[4] = (uint)c; - c >>= 32; - c += (long)x[5] - y[5]; - z[5] = (uint)c; - c >>= 32; - c += (long)x[6] - y[6]; - z[6] = (uint)c; - c >>= 32; - c += (long)x[7] - y[7]; - z[7] = (uint)c; - c >>= 32; - return (int)c; - } - - public static int Sub(uint[] x, int xOff, uint[] y, int yOff, uint[] z, int zOff) - { - long c = 0; - c += (long)x[xOff + 0] - y[yOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += (long)x[xOff + 1] - y[yOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += (long)x[xOff + 2] - y[yOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - c += (long)x[xOff + 3] - y[yOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - c += (long)x[xOff + 4] - y[yOff + 4]; - z[zOff + 4] = (uint)c; - c >>= 32; - c += (long)x[xOff + 5] - y[yOff + 5]; - z[zOff + 5] = (uint)c; - c >>= 32; - c += (long)x[xOff + 6] - y[yOff + 6]; - z[zOff + 6] = (uint)c; - c >>= 32; - c += (long)x[xOff + 7] - y[yOff + 7]; - z[zOff + 7] = (uint)c; - c >>= 32; - return (int)c; - } - - public static int SubBothFrom(uint[] x, uint[] y, uint[] z) - { - long c = 0; - c += (long)z[0] - x[0] - y[0]; - z[0] = (uint)c; - c >>= 32; - c += (long)z[1] - x[1] - y[1]; - z[1] = (uint)c; - c >>= 32; - c += (long)z[2] - x[2] - y[2]; - z[2] = (uint)c; - c >>= 32; - c += (long)z[3] - x[3] - y[3]; - z[3] = (uint)c; - c >>= 32; - c += (long)z[4] - x[4] - y[4]; - z[4] = (uint)c; - c >>= 32; - c += (long)z[5] - x[5] - y[5]; - z[5] = (uint)c; - c >>= 32; - c += (long)z[6] - x[6] - y[6]; - z[6] = (uint)c; - c >>= 32; - c += (long)z[7] - x[7] - y[7]; - z[7] = (uint)c; - c >>= 32; - return (int)c; - } - - public static int SubFrom(uint[] x, uint[] z) - { - long c = 0; - c += (long)z[0] - x[0]; - z[0] = (uint)c; - c >>= 32; - c += (long)z[1] - x[1]; - z[1] = (uint)c; - c >>= 32; - c += (long)z[2] - x[2]; - z[2] = (uint)c; - c >>= 32; - c += (long)z[3] - x[3]; - z[3] = (uint)c; - c >>= 32; - c += (long)z[4] - x[4]; - z[4] = (uint)c; - c >>= 32; - c += (long)z[5] - x[5]; - z[5] = (uint)c; - c >>= 32; - c += (long)z[6] - x[6]; - z[6] = (uint)c; - c >>= 32; - c += (long)z[7] - x[7]; - z[7] = (uint)c; - c >>= 32; - return (int)c; - } - - public static int SubFrom(uint[] x, int xOff, uint[] z, int zOff) - { - long c = 0; - c += (long)z[zOff + 0] - x[xOff + 0]; - z[zOff + 0] = (uint)c; - c >>= 32; - c += (long)z[zOff + 1] - x[xOff + 1]; - z[zOff + 1] = (uint)c; - c >>= 32; - c += (long)z[zOff + 2] - x[xOff + 2]; - z[zOff + 2] = (uint)c; - c >>= 32; - c += (long)z[zOff + 3] - x[xOff + 3]; - z[zOff + 3] = (uint)c; - c >>= 32; - c += (long)z[zOff + 4] - x[xOff + 4]; - z[zOff + 4] = (uint)c; - c >>= 32; - c += (long)z[zOff + 5] - x[xOff + 5]; - z[zOff + 5] = (uint)c; - c >>= 32; - c += (long)z[zOff + 6] - x[xOff + 6]; - z[zOff + 6] = (uint)c; - c >>= 32; - c += (long)z[zOff + 7] - x[xOff + 7]; - z[zOff + 7] = (uint)c; - c >>= 32; - return (int)c; - } - - public static BigInteger ToBigInteger(uint[] x) - { - byte[] bs = new byte[32]; - for (int i = 0; i < 8; ++i) - { - uint x_i = x[i]; - if (x_i != 0) - { - Pack.UInt32_To_BE(x_i, bs, (7 - i) << 2); - } - } - return new BigInteger(1, bs); - } - - public static BigInteger ToBigInteger64(ulong[] x) - { - byte[] bs = new byte[32]; - for (int i = 0; i < 4; ++i) - { - ulong x_i = x[i]; - if (x_i != 0L) - { - Pack.UInt64_To_BE(x_i, bs, (3 - i) << 3); - } - } - return new BigInteger(1, bs); - } - - public static void Zero(uint[] z) - { - z[0] = 0; - z[1] = 0; - z[2] = 0; - z[3] = 0; - z[4] = 0; - z[5] = 0; - z[6] = 0; - z[7] = 0; - } - } -} diff --git a/bc-sharp-crypto/src/math/raw/Nat320.cs b/bc-sharp-crypto/src/math/raw/Nat320.cs deleted file mode 100644 index c7daa71..0000000 --- a/bc-sharp-crypto/src/math/raw/Nat320.cs +++ /dev/null @@ -1,98 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Crypto.Utilities; - -namespace Org.BouncyCastle.Math.Raw -{ - internal abstract class Nat320 - { - public static void Copy64(ulong[] x, ulong[] z) - { - z[0] = x[0]; - z[1] = x[1]; - z[2] = x[2]; - z[3] = x[3]; - z[4] = x[4]; - } - - public static ulong[] Create64() - { - return new ulong[5]; - } - - public static ulong[] CreateExt64() - { - return new ulong[10]; - } - - public static bool Eq64(ulong[] x, ulong[] y) - { - for (int i = 4; i >= 0; --i) - { - if (x[i] != y[i]) - { - return false; - } - } - return true; - } - - public static ulong[] FromBigInteger64(BigInteger x) - { - if (x.SignValue < 0 || x.BitLength > 320) - throw new ArgumentException(); - - ulong[] z = Create64(); - int i = 0; - while (x.SignValue != 0) - { - z[i++] = (ulong)x.LongValue; - x = x.ShiftRight(64); - } - return z; - } - - public static bool IsOne64(ulong[] x) - { - if (x[0] != 1UL) - { - return false; - } - for (int i = 1; i < 5; ++i) - { - if (x[i] != 0UL) - { - return false; - } - } - return true; - } - - public static bool IsZero64(ulong[] x) - { - for (int i = 0; i < 5; ++i) - { - if (x[i] != 0UL) - { - return false; - } - } - return true; - } - - public static BigInteger ToBigInteger64(ulong[] x) - { - byte[] bs = new byte[40]; - for (int i = 0; i < 5; ++i) - { - ulong x_i = x[i]; - if (x_i != 0L) - { - Pack.UInt64_To_BE(x_i, bs, (4 - i) << 3); - } - } - return new BigInteger(1, bs); - } - } -} diff --git a/bc-sharp-crypto/src/math/raw/Nat384.cs b/bc-sharp-crypto/src/math/raw/Nat384.cs deleted file mode 100644 index ed1c47e..0000000 --- a/bc-sharp-crypto/src/math/raw/Nat384.cs +++ /dev/null @@ -1,46 +0,0 @@ -using System; -using System.Diagnostics; - -namespace Org.BouncyCastle.Math.Raw -{ - internal abstract class Nat384 - { - public static void Mul(uint[] x, uint[] y, uint[] zz) - { - Nat192.Mul(x, y, zz); - Nat192.Mul(x, 6, y, 6, zz, 12); - - uint c18 = Nat192.AddToEachOther(zz, 6, zz, 12); - uint c12 = c18 + Nat192.AddTo(zz, 0, zz, 6, 0); - c18 += Nat192.AddTo(zz, 18, zz, 12, c12); - - uint[] dx = Nat192.Create(), dy = Nat192.Create(); - bool neg = Nat192.Diff(x, 6, x, 0, dx, 0) != Nat192.Diff(y, 6, y, 0, dy, 0); - - uint[] tt = Nat192.CreateExt(); - Nat192.Mul(dx, dy, tt); - - c18 += neg ? Nat.AddTo(12, tt, 0, zz, 6) : (uint)Nat.SubFrom(12, tt, 0, zz, 6); - Nat.AddWordAt(24, c18, zz, 18); - } - - public static void Square(uint[] x, uint[] zz) - { - Nat192.Square(x, zz); - Nat192.Square(x, 6, zz, 12); - - uint c18 = Nat192.AddToEachOther(zz, 6, zz, 12); - uint c12 = c18 + Nat192.AddTo(zz, 0, zz, 6, 0); - c18 += Nat192.AddTo(zz, 18, zz, 12, c12); - - uint[] dx = Nat192.Create(); - Nat192.Diff(x, 6, x, 0, dx, 0); - - uint[] m = Nat192.CreateExt(); - Nat192.Square(dx, m); - - c18 += (uint)Nat.SubFrom(12, m, 0, zz, 6); - Nat.AddWordAt(24, c18, zz, 18); - } - } -} diff --git a/bc-sharp-crypto/src/math/raw/Nat448.cs b/bc-sharp-crypto/src/math/raw/Nat448.cs deleted file mode 100644 index 52a253f..0000000 --- a/bc-sharp-crypto/src/math/raw/Nat448.cs +++ /dev/null @@ -1,100 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Crypto.Utilities; - -namespace Org.BouncyCastle.Math.Raw -{ - internal abstract class Nat448 - { - public static void Copy64(ulong[] x, ulong[] z) - { - z[0] = x[0]; - z[1] = x[1]; - z[2] = x[2]; - z[3] = x[3]; - z[4] = x[4]; - z[5] = x[5]; - z[6] = x[6]; - } - - public static ulong[] Create64() - { - return new ulong[7]; - } - - public static ulong[] CreateExt64() - { - return new ulong[14]; - } - - public static bool Eq64(ulong[] x, ulong[] y) - { - for (int i = 6; i >= 0; --i) - { - if (x[i] != y[i]) - { - return false; - } - } - return true; - } - - public static ulong[] FromBigInteger64(BigInteger x) - { - if (x.SignValue < 0 || x.BitLength > 448) - throw new ArgumentException(); - - ulong[] z = Create64(); - int i = 0; - while (x.SignValue != 0) - { - z[i++] = (ulong)x.LongValue; - x = x.ShiftRight(64); - } - return z; - } - - public static bool IsOne64(ulong[] x) - { - if (x[0] != 1UL) - { - return false; - } - for (int i = 1; i < 7; ++i) - { - if (x[i] != 0UL) - { - return false; - } - } - return true; - } - - public static bool IsZero64(ulong[] x) - { - for (int i = 0; i < 7; ++i) - { - if (x[i] != 0UL) - { - return false; - } - } - return true; - } - - public static BigInteger ToBigInteger64(ulong[] x) - { - byte[] bs = new byte[56]; - for (int i = 0; i < 7; ++i) - { - ulong x_i = x[i]; - if (x_i != 0L) - { - Pack.UInt64_To_BE(x_i, bs, (6 - i) << 3); - } - } - return new BigInteger(1, bs); - } - } -} diff --git a/bc-sharp-crypto/src/math/raw/Nat512.cs b/bc-sharp-crypto/src/math/raw/Nat512.cs deleted file mode 100644 index a9ef2b3..0000000 --- a/bc-sharp-crypto/src/math/raw/Nat512.cs +++ /dev/null @@ -1,46 +0,0 @@ -using System; -using System.Diagnostics; - -namespace Org.BouncyCastle.Math.Raw -{ - internal abstract class Nat512 - { - public static void Mul(uint[] x, uint[] y, uint[] zz) - { - Nat256.Mul(x, y, zz); - Nat256.Mul(x, 8, y, 8, zz, 16); - - uint c24 = Nat256.AddToEachOther(zz, 8, zz, 16); - uint c16 = c24 + Nat256.AddTo(zz, 0, zz, 8, 0); - c24 += Nat256.AddTo(zz, 24, zz, 16, c16); - - uint[] dx = Nat256.Create(), dy = Nat256.Create(); - bool neg = Nat256.Diff(x, 8, x, 0, dx, 0) != Nat256.Diff(y, 8, y, 0, dy, 0); - - uint[] tt = Nat256.CreateExt(); - Nat256.Mul(dx, dy, tt); - - c24 += neg ? Nat.AddTo(16, tt, 0, zz, 8) : (uint)Nat.SubFrom(16, tt, 0, zz, 8); - Nat.AddWordAt(32, c24, zz, 24); - } - - public static void Square(uint[] x, uint[] zz) - { - Nat256.Square(x, zz); - Nat256.Square(x, 8, zz, 16); - - uint c24 = Nat256.AddToEachOther(zz, 8, zz, 16); - uint c16 = c24 + Nat256.AddTo(zz, 0, zz, 8, 0); - c24 += Nat256.AddTo(zz, 24, zz, 16, c16); - - uint[] dx = Nat256.Create(); - Nat256.Diff(x, 8, x, 0, dx, 0); - - uint[] m = Nat256.CreateExt(); - Nat256.Square(dx, m); - - c24 += (uint)Nat.SubFrom(16, m, 0, zz, 8); - Nat.AddWordAt(32, c24, zz, 24); - } - } -} diff --git a/bc-sharp-crypto/src/math/raw/Nat576.cs b/bc-sharp-crypto/src/math/raw/Nat576.cs deleted file mode 100644 index 813fb86..0000000 --- a/bc-sharp-crypto/src/math/raw/Nat576.cs +++ /dev/null @@ -1,102 +0,0 @@ -using System; -using System.Diagnostics; - -using Org.BouncyCastle.Crypto.Utilities; - -namespace Org.BouncyCastle.Math.Raw -{ - internal abstract class Nat576 - { - public static void Copy64(ulong[] x, ulong[] z) - { - z[0] = x[0]; - z[1] = x[1]; - z[2] = x[2]; - z[3] = x[3]; - z[4] = x[4]; - z[5] = x[5]; - z[6] = x[6]; - z[7] = x[7]; - z[8] = x[8]; - } - - public static ulong[] Create64() - { - return new ulong[9]; - } - - public static ulong[] CreateExt64() - { - return new ulong[18]; - } - - public static bool Eq64(ulong[] x, ulong[] y) - { - for (int i = 8; i >= 0; --i) - { - if (x[i] != y[i]) - { - return false; - } - } - return true; - } - - public static ulong[] FromBigInteger64(BigInteger x) - { - if (x.SignValue < 0 || x.BitLength > 576) - throw new ArgumentException(); - - ulong[] z = Create64(); - int i = 0; - while (x.SignValue != 0) - { - z[i++] = (ulong)x.LongValue; - x = x.ShiftRight(64); - } - return z; - } - - public static bool IsOne64(ulong[] x) - { - if (x[0] != 1UL) - { - return false; - } - for (int i = 1; i < 9; ++i) - { - if (x[i] != 0UL) - { - return false; - } - } - return true; - } - - public static bool IsZero64(ulong[] x) - { - for (int i = 0; i < 9; ++i) - { - if (x[i] != 0UL) - { - return false; - } - } - return true; - } - - public static BigInteger ToBigInteger64(ulong[] x) - { - byte[] bs = new byte[72]; - for (int i = 0; i < 9; ++i) - { - ulong x_i = x[i]; - if (x_i != 0L) - { - Pack.UInt64_To_BE(x_i, bs, (8 - i) << 3); - } - } - return new BigInteger(1, bs); - } - } -} diff --git a/bc-sharp-crypto/src/ocsp/BasicOCSPResp.cs b/bc-sharp-crypto/src/ocsp/BasicOCSPResp.cs deleted file mode 100644 index 63ab892..0000000 --- a/bc-sharp-crypto/src/ocsp/BasicOCSPResp.cs +++ /dev/null @@ -1,220 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Ocsp; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.X509; -using Org.BouncyCastle.X509.Store; - -namespace Org.BouncyCastle.Ocsp -{ - /// - /// - /// BasicOcspResponse ::= SEQUENCE { - /// tbsResponseData ResponseData, - /// signatureAlgorithm AlgorithmIdentifier, - /// signature BIT STRING, - /// certs [0] EXPLICIT SEQUENCE OF Certificate OPTIONAL - /// } - /// - /// - public class BasicOcspResp - : X509ExtensionBase - { - private readonly BasicOcspResponse resp; - private readonly ResponseData data; -// private readonly X509Certificate[] chain; - - public BasicOcspResp( - BasicOcspResponse resp) - { - this.resp = resp; - this.data = resp.TbsResponseData; - } - - /// The DER encoding of the tbsResponseData field. - /// In the event of an encoding error. - public byte[] GetTbsResponseData() - { - try - { - return data.GetDerEncoded(); - } - catch (IOException e) - { - throw new OcspException("problem encoding tbsResponseData", e); - } - } - - public int Version - { - get { return data.Version.Value.IntValue + 1; } - } - - public RespID ResponderId - { - get { return new RespID(data.ResponderID); } - } - - public DateTime ProducedAt - { - get { return data.ProducedAt.ToDateTime(); } - } - - public SingleResp[] Responses - { - get - { - Asn1Sequence s = data.Responses; - SingleResp[] rs = new SingleResp[s.Count]; - - for (int i = 0; i != rs.Length; i++) - { - rs[i] = new SingleResp(SingleResponse.GetInstance(s[i])); - } - - return rs; - } - } - - public X509Extensions ResponseExtensions - { - get { return data.ResponseExtensions; } - } - - protected override X509Extensions GetX509Extensions() - { - return ResponseExtensions; - } - - public string SignatureAlgName - { - get { return OcspUtilities.GetAlgorithmName(resp.SignatureAlgorithm.Algorithm); } - } - - public string SignatureAlgOid - { - get { return resp.SignatureAlgorithm.Algorithm.Id; } - } - - [Obsolete("RespData class is no longer required as all functionality is available on this class")] - public RespData GetResponseData() - { - return new RespData(data); - } - - public byte[] GetSignature() - { - return resp.GetSignatureOctets(); - } - - private IList GetCertList() - { - // load the certificates and revocation lists if we have any - - IList certs = Platform.CreateArrayList(); - Asn1Sequence s = resp.Certs; - - if (s != null) - { - foreach (Asn1Encodable ae in s) - { - try - { - certs.Add(new X509CertificateParser().ReadCertificate(ae.GetEncoded())); - } - catch (IOException ex) - { - throw new OcspException("can't re-encode certificate!", ex); - } - catch (CertificateException ex) - { - throw new OcspException("can't re-encode certificate!", ex); - } - } - } - - return certs; - } - - public X509Certificate[] GetCerts() - { - IList certs = GetCertList(); - X509Certificate[] result = new X509Certificate[certs.Count]; - for (int i = 0; i < certs.Count; ++i) - { - result[i] = (X509Certificate)certs[i]; - } - return result; - } - - /// The certificates, if any, associated with the response. - /// In the event of an encoding error. - public IX509Store GetCertificates( - string type) - { - try - { - return X509StoreFactory.Create( - "Certificate/" + type, - new X509CollectionStoreParameters(this.GetCertList())); - } - catch (Exception e) - { - throw new OcspException("can't setup the CertStore", e); - } - } - - /// - /// Verify the signature against the tbsResponseData object we contain. - /// - public bool Verify( - AsymmetricKeyParameter publicKey) - { - try - { - ISigner signature = SignerUtilities.GetSigner(this.SignatureAlgName); - signature.Init(false, publicKey); - byte[] bs = data.GetDerEncoded(); - signature.BlockUpdate(bs, 0, bs.Length); - - return signature.VerifySignature(this.GetSignature()); - } - catch (Exception e) - { - throw new OcspException("exception processing sig: " + e, e); - } - } - - /// The ASN.1 encoded representation of this object. - public byte[] GetEncoded() - { - return resp.GetEncoded(); - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - BasicOcspResp other = obj as BasicOcspResp; - - if (other == null) - return false; - - return resp.Equals(other.resp); - } - - public override int GetHashCode() - { - return resp.GetHashCode(); - } - } -} diff --git a/bc-sharp-crypto/src/ocsp/BasicOCSPRespGenerator.cs b/bc-sharp-crypto/src/ocsp/BasicOCSPRespGenerator.cs deleted file mode 100644 index 0dd4e0a..0000000 --- a/bc-sharp-crypto/src/ocsp/BasicOCSPRespGenerator.cs +++ /dev/null @@ -1,313 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Ocsp; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.X509; -using Org.BouncyCastle.Crypto.Operators; - -namespace Org.BouncyCastle.Ocsp -{ - /** - * Generator for basic OCSP response objects. - */ - public class BasicOcspRespGenerator - { - private readonly IList list = Platform.CreateArrayList(); - - private X509Extensions responseExtensions; - private RespID responderID; - - private class ResponseObject - { - internal CertificateID certId; - internal CertStatus certStatus; - internal DerGeneralizedTime thisUpdate; - internal DerGeneralizedTime nextUpdate; - internal X509Extensions extensions; - - public ResponseObject( - CertificateID certId, - CertificateStatus certStatus, - DateTime thisUpdate, - X509Extensions extensions) - : this(certId, certStatus, new DerGeneralizedTime(thisUpdate), null, extensions) - { - } - - public ResponseObject( - CertificateID certId, - CertificateStatus certStatus, - DateTime thisUpdate, - DateTime nextUpdate, - X509Extensions extensions) - : this(certId, certStatus, new DerGeneralizedTime(thisUpdate), new DerGeneralizedTime(nextUpdate), extensions) - { - } - - private ResponseObject( - CertificateID certId, - CertificateStatus certStatus, - DerGeneralizedTime thisUpdate, - DerGeneralizedTime nextUpdate, - X509Extensions extensions) - { - this.certId = certId; - - if (certStatus == null) - { - this.certStatus = new CertStatus(); - } - else if (certStatus is UnknownStatus) - { - this.certStatus = new CertStatus(2, DerNull.Instance); - } - else - { - RevokedStatus rs = (RevokedStatus) certStatus; - CrlReason revocationReason = rs.HasRevocationReason - ? new CrlReason(rs.RevocationReason) - : null; - - this.certStatus = new CertStatus( - new RevokedInfo(new DerGeneralizedTime(rs.RevocationTime), revocationReason)); - } - - this.thisUpdate = thisUpdate; - this.nextUpdate = nextUpdate; - - this.extensions = extensions; - } - - public SingleResponse ToResponse() - { - return new SingleResponse(certId.ToAsn1Object(), certStatus, thisUpdate, nextUpdate, extensions); - } - } - - /** - * basic constructor - */ - public BasicOcspRespGenerator( - RespID responderID) - { - this.responderID = responderID; - } - - /** - * construct with the responderID to be the SHA-1 keyHash of the passed in public key. - */ - public BasicOcspRespGenerator( - AsymmetricKeyParameter publicKey) - { - this.responderID = new RespID(publicKey); - } - - /** - * Add a response for a particular Certificate ID. - * - * @param certID certificate ID details - * @param certStatus status of the certificate - null if okay - */ - public void AddResponse( - CertificateID certID, - CertificateStatus certStatus) - { - list.Add(new ResponseObject(certID, certStatus, DateTime.UtcNow, null)); - } - - /** - * Add a response for a particular Certificate ID. - * - * @param certID certificate ID details - * @param certStatus status of the certificate - null if okay - * @param singleExtensions optional extensions - */ - public void AddResponse( - CertificateID certID, - CertificateStatus certStatus, - X509Extensions singleExtensions) - { - list.Add(new ResponseObject(certID, certStatus, DateTime.UtcNow, singleExtensions)); - } - - /** - * Add a response for a particular Certificate ID. - * - * @param certID certificate ID details - * @param nextUpdate date when next update should be requested - * @param certStatus status of the certificate - null if okay - * @param singleExtensions optional extensions - */ - public void AddResponse( - CertificateID certID, - CertificateStatus certStatus, - DateTime nextUpdate, - X509Extensions singleExtensions) - { - list.Add(new ResponseObject(certID, certStatus, DateTime.UtcNow, nextUpdate, singleExtensions)); - } - - /** - * Add a response for a particular Certificate ID. - * - * @param certID certificate ID details - * @param thisUpdate date this response was valid on - * @param nextUpdate date when next update should be requested - * @param certStatus status of the certificate - null if okay - * @param singleExtensions optional extensions - */ - public void AddResponse( - CertificateID certID, - CertificateStatus certStatus, - DateTime thisUpdate, - DateTime nextUpdate, - X509Extensions singleExtensions) - { - list.Add(new ResponseObject(certID, certStatus, thisUpdate, nextUpdate, singleExtensions)); - } - - /** - * Set the extensions for the response. - * - * @param responseExtensions the extension object to carry. - */ - public void SetResponseExtensions( - X509Extensions responseExtensions) - { - this.responseExtensions = responseExtensions; - } - - private BasicOcspResp GenerateResponse( - ISignatureFactory signatureCalculator, - X509Certificate[] chain, - DateTime producedAt) - { - AlgorithmIdentifier signingAlgID = (AlgorithmIdentifier)signatureCalculator.AlgorithmDetails; - DerObjectIdentifier signingAlgorithm = signingAlgID.Algorithm; - - Asn1EncodableVector responses = new Asn1EncodableVector(); - - foreach (ResponseObject respObj in list) - { - try - { - responses.Add(respObj.ToResponse()); - } - catch (Exception e) - { - throw new OcspException("exception creating Request", e); - } - } - - ResponseData tbsResp = new ResponseData(responderID.ToAsn1Object(), new DerGeneralizedTime(producedAt), new DerSequence(responses), responseExtensions); - DerBitString bitSig = null; - - try - { - IStreamCalculator streamCalculator = signatureCalculator.CreateCalculator(); - - byte[] encoded = tbsResp.GetDerEncoded(); - - streamCalculator.Stream.Write(encoded, 0, encoded.Length); - - Platform.Dispose(streamCalculator.Stream); - - bitSig = new DerBitString(((IBlockResult)streamCalculator.GetResult()).Collect()); - } - catch (Exception e) - { - throw new OcspException("exception processing TBSRequest: " + e, e); - } - - AlgorithmIdentifier sigAlgId = OcspUtilities.GetSigAlgID(signingAlgorithm); - - DerSequence chainSeq = null; - if (chain != null && chain.Length > 0) - { - Asn1EncodableVector v = new Asn1EncodableVector(); - try - { - for (int i = 0; i != chain.Length; i++) - { - v.Add( - X509CertificateStructure.GetInstance( - Asn1Object.FromByteArray(chain[i].GetEncoded()))); - } - } - catch (IOException e) - { - throw new OcspException("error processing certs", e); - } - catch (CertificateEncodingException e) - { - throw new OcspException("error encoding certs", e); - } - - chainSeq = new DerSequence(v); - } - - return new BasicOcspResp(new BasicOcspResponse(tbsResp, sigAlgId, bitSig, chainSeq)); - } - - public BasicOcspResp Generate( - string signingAlgorithm, - AsymmetricKeyParameter privateKey, - X509Certificate[] chain, - DateTime thisUpdate) - { - return Generate(signingAlgorithm, privateKey, chain, thisUpdate, null); - } - - public BasicOcspResp Generate( - string signingAlgorithm, - AsymmetricKeyParameter privateKey, - X509Certificate[] chain, - DateTime producedAt, - SecureRandom random) - { - if (signingAlgorithm == null) - { - throw new ArgumentException("no signing algorithm specified"); - } - - return GenerateResponse(new Asn1SignatureFactory(signingAlgorithm, privateKey, random), chain, producedAt); - } - - /// - /// Generate the signed response using the passed in signature calculator. - /// - /// Implementation of signing calculator factory. - /// The certificate chain associated with the response signer. - /// "produced at" date. - /// - public BasicOcspResp Generate( - ISignatureFactory signatureCalculatorFactory, - X509Certificate[] chain, - DateTime producedAt) - { - if (signatureCalculatorFactory == null) - { - throw new ArgumentException("no signature calculator specified"); - } - - return GenerateResponse(signatureCalculatorFactory, chain, producedAt); - } - - /** - * Return an IEnumerable of the signature names supported by the generator. - * - * @return an IEnumerable containing recognised names. - */ - public IEnumerable SignatureAlgNames - { - get { return OcspUtilities.AlgNames; } - } - } -} diff --git a/bc-sharp-crypto/src/ocsp/CertificateID.cs b/bc-sharp-crypto/src/ocsp/CertificateID.cs deleted file mode 100644 index ec902d5..0000000 --- a/bc-sharp-crypto/src/ocsp/CertificateID.cs +++ /dev/null @@ -1,141 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Ocsp; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.X509; - -namespace Org.BouncyCastle.Ocsp -{ - public class CertificateID - { - public const string HashSha1 = "1.3.14.3.2.26"; - - private readonly CertID id; - - public CertificateID( - CertID id) - { - if (id == null) - throw new ArgumentNullException("id"); - - this.id = id; - } - - /** - * create from an issuer certificate and the serial number of the - * certificate it signed. - * @exception OcspException if any problems occur creating the id fields. - */ - public CertificateID( - string hashAlgorithm, - X509Certificate issuerCert, - BigInteger serialNumber) - { - AlgorithmIdentifier hashAlg = new AlgorithmIdentifier( - new DerObjectIdentifier(hashAlgorithm), DerNull.Instance); - - this.id = CreateCertID(hashAlg, issuerCert, new DerInteger(serialNumber)); - } - - public string HashAlgOid - { - get { return id.HashAlgorithm.Algorithm.Id; } - } - - public byte[] GetIssuerNameHash() - { - return id.IssuerNameHash.GetOctets(); - } - - public byte[] GetIssuerKeyHash() - { - return id.IssuerKeyHash.GetOctets(); - } - - /** - * return the serial number for the certificate associated - * with this request. - */ - public BigInteger SerialNumber - { - get { return id.SerialNumber.Value; } - } - - public bool MatchesIssuer( - X509Certificate issuerCert) - { - return CreateCertID(id.HashAlgorithm, issuerCert, id.SerialNumber).Equals(id); - } - - public CertID ToAsn1Object() - { - return id; - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - CertificateID other = obj as CertificateID; - - if (other == null) - return false; - - return id.ToAsn1Object().Equals(other.id.ToAsn1Object()); - } - - public override int GetHashCode() - { - return id.ToAsn1Object().GetHashCode(); - } - - - /** - * Create a new CertificateID for a new serial number derived from a previous one - * calculated for the same CA certificate. - * - * @param original the previously calculated CertificateID for the CA. - * @param newSerialNumber the serial number for the new certificate of interest. - * - * @return a new CertificateID for newSerialNumber - */ - public static CertificateID DeriveCertificateID(CertificateID original, BigInteger newSerialNumber) - { - return new CertificateID(new CertID(original.id.HashAlgorithm, original.id.IssuerNameHash, - original.id.IssuerKeyHash, new DerInteger(newSerialNumber))); - } - - private static CertID CreateCertID( - AlgorithmIdentifier hashAlg, - X509Certificate issuerCert, - DerInteger serialNumber) - { - try - { - String hashAlgorithm = hashAlg.Algorithm.Id; - - X509Name issuerName = PrincipalUtilities.GetSubjectX509Principal(issuerCert); - byte[] issuerNameHash = DigestUtilities.CalculateDigest( - hashAlgorithm, issuerName.GetEncoded()); - - AsymmetricKeyParameter issuerKey = issuerCert.GetPublicKey(); - SubjectPublicKeyInfo info = SubjectPublicKeyInfoFactory.CreateSubjectPublicKeyInfo(issuerKey); - byte[] issuerKeyHash = DigestUtilities.CalculateDigest( - hashAlgorithm, info.PublicKeyData.GetBytes()); - - return new CertID(hashAlg, new DerOctetString(issuerNameHash), - new DerOctetString(issuerKeyHash), serialNumber); - } - catch (Exception e) - { - throw new OcspException("problem creating ID: " + e, e); - } - } - } -} diff --git a/bc-sharp-crypto/src/ocsp/CertificateStatus.cs b/bc-sharp-crypto/src/ocsp/CertificateStatus.cs deleted file mode 100644 index edfcc25..0000000 --- a/bc-sharp-crypto/src/ocsp/CertificateStatus.cs +++ /dev/null @@ -1,9 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Ocsp -{ - public abstract class CertificateStatus - { - public static readonly CertificateStatus Good = null; - } -} diff --git a/bc-sharp-crypto/src/ocsp/OCSPException.cs b/bc-sharp-crypto/src/ocsp/OCSPException.cs deleted file mode 100644 index d7b14dd..0000000 --- a/bc-sharp-crypto/src/ocsp/OCSPException.cs +++ /dev/null @@ -1,28 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Ocsp -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class OcspException - : Exception - { - public OcspException() - { - } - - public OcspException( - string message) - : base(message) - { - } - - public OcspException( - string message, - Exception e) - : base(message, e) - { - } - } -} diff --git a/bc-sharp-crypto/src/ocsp/OCSPReq.cs b/bc-sharp-crypto/src/ocsp/OCSPReq.cs deleted file mode 100644 index 0cd95c6..0000000 --- a/bc-sharp-crypto/src/ocsp/OCSPReq.cs +++ /dev/null @@ -1,268 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Ocsp; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.X509; -using Org.BouncyCastle.X509.Store; - -namespace Org.BouncyCastle.Ocsp -{ - /** - * 
    -	 * OcspRequest     ::=     SEQUENCE {
-	 *       tbsRequest                  TBSRequest,
-	 *       optionalSignature   [0]     EXPLICIT Signature OPTIONAL }
-	 *
-	 *   TBSRequest      ::=     SEQUENCE {
-	 *       version             [0]     EXPLICIT Version DEFAULT v1,
-	 *       requestorName       [1]     EXPLICIT GeneralName OPTIONAL,
-	 *       requestList                 SEQUENCE OF Request,
-	 *       requestExtensions   [2]     EXPLICIT Extensions OPTIONAL }
-	 *
-	 *   Signature       ::=     SEQUENCE {
-	 *       signatureAlgorithm      AlgorithmIdentifier,
-	 *       signature               BIT STRING,
-	 *       certs               [0] EXPLICIT SEQUENCE OF Certificate OPTIONAL}
-	 *
-	 *   Version         ::=             INTEGER  {  v1(0) }
-	 *
-	 *   Request         ::=     SEQUENCE {
-	 *       reqCert                     CertID,
-	 *       singleRequestExtensions     [0] EXPLICIT Extensions OPTIONAL }
-	 *
-	 *   CertID          ::=     SEQUENCE {
-	 *       hashAlgorithm       AlgorithmIdentifier,
-	 *       issuerNameHash      OCTET STRING, -- Hash of Issuer's DN
-	 *       issuerKeyHash       OCTET STRING, -- Hash of Issuers public key
-	 *       serialNumber        CertificateSerialNumber }
-	 *
    - */ - public class OcspReq - : X509ExtensionBase - { - private OcspRequest req; - - public OcspReq( - OcspRequest req) - { - this.req = req; - } - - public OcspReq( - byte[] req) - : this(new Asn1InputStream(req)) - { - } - - public OcspReq( - Stream inStr) - : this(new Asn1InputStream(inStr)) - { - } - - private OcspReq( - Asn1InputStream aIn) - { - try - { - this.req = OcspRequest.GetInstance(aIn.ReadObject()); - } - catch (ArgumentException e) - { - throw new IOException("malformed request: " + e.Message); - } - catch (InvalidCastException e) - { - throw new IOException("malformed request: " + e.Message); - } - } - - /** - * Return the DER encoding of the tbsRequest field. - * @return DER encoding of tbsRequest - * @throws OcspException in the event of an encoding error. - */ - public byte[] GetTbsRequest() - { - try - { - return req.TbsRequest.GetEncoded(); - } - catch (IOException e) - { - throw new OcspException("problem encoding tbsRequest", e); - } - } - - public int Version - { - get { return req.TbsRequest.Version.Value.IntValue + 1; } - } - - public GeneralName RequestorName - { - get { return GeneralName.GetInstance(req.TbsRequest.RequestorName); } - } - - public Req[] GetRequestList() - { - Asn1Sequence seq = req.TbsRequest.RequestList; - Req[] requests = new Req[seq.Count]; - - for (int i = 0; i != requests.Length; i++) - { - requests[i] = new Req(Request.GetInstance(seq[i])); - } - - return requests; - } - - public X509Extensions RequestExtensions - { - get { return X509Extensions.GetInstance(req.TbsRequest.RequestExtensions); } - } - - protected override X509Extensions GetX509Extensions() - { - return RequestExtensions; - } - - /** - * return the object identifier representing the signature algorithm - */ - public string SignatureAlgOid - { - get - { - if (!this.IsSigned) - return null; - - return req.OptionalSignature.SignatureAlgorithm.Algorithm.Id; - } - } - - public byte[] GetSignature() - { - if (!this.IsSigned) - return null; - - return req.OptionalSignature.GetSignatureOctets(); - } - - private IList GetCertList() - { - // load the certificates if we have any - - IList certs = Platform.CreateArrayList(); - Asn1Sequence s = req.OptionalSignature.Certs; - - if (s != null) - { - foreach (Asn1Encodable ae in s) - { - try - { - certs.Add(new X509CertificateParser().ReadCertificate(ae.GetEncoded())); - } - catch (Exception e) - { - throw new OcspException("can't re-encode certificate!", e); - } - } - } - - return certs; - } - - public X509Certificate[] GetCerts() - { - if (!this.IsSigned) - return null; - - IList certs = this.GetCertList(); - X509Certificate[] result = new X509Certificate[certs.Count]; - for (int i = 0; i < certs.Count; ++i) - { - result[i] = (X509Certificate)certs[i]; - } - return result; - } - - /** - * If the request is signed return a possibly empty CertStore containing the certificates in the - * request. If the request is not signed the method returns null. - * - * @return null if not signed, a CertStore otherwise - * @throws OcspException - */ - public IX509Store GetCertificates( - string type) - { - if (!this.IsSigned) - return null; - - try - { - return X509StoreFactory.Create( - "Certificate/" + type, - new X509CollectionStoreParameters(this.GetCertList())); - } - catch (Exception e) - { - throw new OcspException("can't setup the CertStore", e); - } - } - - /** - * Return whether or not this request is signed. - * - * @return true if signed false otherwise. - */ - public bool IsSigned - { - get { return req.OptionalSignature != null; } - } - - /** - * Verify the signature against the TBSRequest object we contain. - */ - public bool Verify( - AsymmetricKeyParameter publicKey) - { - if (!this.IsSigned) - throw new OcspException("attempt to Verify signature on unsigned object"); - - try - { - ISigner signature = SignerUtilities.GetSigner(this.SignatureAlgOid); - - signature.Init(false, publicKey); - - byte[] encoded = req.TbsRequest.GetEncoded(); - - signature.BlockUpdate(encoded, 0, encoded.Length); - - return signature.VerifySignature(this.GetSignature()); - } - catch (Exception e) - { - throw new OcspException("exception processing sig: " + e, e); - } - } - - /** - * return the ASN.1 encoded representation of this object. - */ - public byte[] GetEncoded() - { - return req.GetEncoded(); - } - } -} diff --git a/bc-sharp-crypto/src/ocsp/OCSPReqGenerator.cs b/bc-sharp-crypto/src/ocsp/OCSPReqGenerator.cs deleted file mode 100644 index 8032a45..0000000 --- a/bc-sharp-crypto/src/ocsp/OCSPReqGenerator.cs +++ /dev/null @@ -1,243 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Ocsp; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.X509; - -namespace Org.BouncyCastle.Ocsp -{ - public class OcspReqGenerator - { - private IList list = Platform.CreateArrayList(); - private GeneralName requestorName = null; - private X509Extensions requestExtensions = null; - - private class RequestObject - { - internal CertificateID certId; - internal X509Extensions extensions; - - public RequestObject( - CertificateID certId, - X509Extensions extensions) - { - this.certId = certId; - this.extensions = extensions; - } - - public Request ToRequest() - { - return new Request(certId.ToAsn1Object(), extensions); - } - } - - /** - * Add a request for the given CertificateID. - * - * @param certId certificate ID of interest - */ - public void AddRequest( - CertificateID certId) - { - list.Add(new RequestObject(certId, null)); - } - - /** - * Add a request with extensions - * - * @param certId certificate ID of interest - * @param singleRequestExtensions the extensions to attach to the request - */ - public void AddRequest( - CertificateID certId, - X509Extensions singleRequestExtensions) - { - list.Add(new RequestObject(certId, singleRequestExtensions)); - } - - /** - * Set the requestor name to the passed in X509Principal - * - * @param requestorName a X509Principal representing the requestor name. - */ - public void SetRequestorName( - X509Name requestorName) - { - try - { - this.requestorName = new GeneralName(GeneralName.DirectoryName, requestorName); - } - catch (Exception e) - { - throw new ArgumentException("cannot encode principal", e); - } - } - - public void SetRequestorName( - GeneralName requestorName) - { - this.requestorName = requestorName; - } - - public void SetRequestExtensions( - X509Extensions requestExtensions) - { - this.requestExtensions = requestExtensions; - } - - private OcspReq GenerateRequest( - DerObjectIdentifier signingAlgorithm, - AsymmetricKeyParameter privateKey, - X509Certificate[] chain, - SecureRandom random) - { - Asn1EncodableVector requests = new Asn1EncodableVector(); - - foreach (RequestObject reqObj in list) - { - try - { - requests.Add(reqObj.ToRequest()); - } - catch (Exception e) - { - throw new OcspException("exception creating Request", e); - } - } - - TbsRequest tbsReq = new TbsRequest(requestorName, new DerSequence(requests), requestExtensions); - - ISigner sig = null; - Signature signature = null; - - if (signingAlgorithm != null) - { - if (requestorName == null) - { - throw new OcspException("requestorName must be specified if request is signed."); - } - - try - { - sig = SignerUtilities.GetSigner(signingAlgorithm.Id); - if (random != null) - { - sig.Init(true, new ParametersWithRandom(privateKey, random)); - } - else - { - sig.Init(true, privateKey); - } - } - catch (Exception e) - { - throw new OcspException("exception creating signature: " + e, e); - } - - DerBitString bitSig = null; - - try - { - byte[] encoded = tbsReq.GetEncoded(); - sig.BlockUpdate(encoded, 0, encoded.Length); - - bitSig = new DerBitString(sig.GenerateSignature()); - } - catch (Exception e) - { - throw new OcspException("exception processing TBSRequest: " + e, e); - } - - AlgorithmIdentifier sigAlgId = new AlgorithmIdentifier(signingAlgorithm, DerNull.Instance); - - if (chain != null && chain.Length > 0) - { - Asn1EncodableVector v = new Asn1EncodableVector(); - try - { - for (int i = 0; i != chain.Length; i++) - { - v.Add( - X509CertificateStructure.GetInstance( - Asn1Object.FromByteArray(chain[i].GetEncoded()))); - } - } - catch (IOException e) - { - throw new OcspException("error processing certs", e); - } - catch (CertificateEncodingException e) - { - throw new OcspException("error encoding certs", e); - } - - signature = new Signature(sigAlgId, bitSig, new DerSequence(v)); - } - else - { - signature = new Signature(sigAlgId, bitSig); - } - } - - return new OcspReq(new OcspRequest(tbsReq, signature)); - } - - /** - * Generate an unsigned request - * - * @return the OcspReq - * @throws OcspException - */ - public OcspReq Generate() - { - return GenerateRequest(null, null, null, null); - } - - public OcspReq Generate( - string signingAlgorithm, - AsymmetricKeyParameter privateKey, - X509Certificate[] chain) - { - return Generate(signingAlgorithm, privateKey, chain, null); - } - - public OcspReq Generate( - string signingAlgorithm, - AsymmetricKeyParameter privateKey, - X509Certificate[] chain, - SecureRandom random) - { - if (signingAlgorithm == null) - throw new ArgumentException("no signing algorithm specified"); - - try - { - DerObjectIdentifier oid = OcspUtilities.GetAlgorithmOid(signingAlgorithm); - - return GenerateRequest(oid, privateKey, chain, random); - } - catch (ArgumentException) - { - throw new ArgumentException("unknown signing algorithm specified: " + signingAlgorithm); - } - } - - /** - * Return an IEnumerable of the signature names supported by the generator. - * - * @return an IEnumerable containing recognised names. - */ - public IEnumerable SignatureAlgNames - { - get { return OcspUtilities.AlgNames; } - } - } -} diff --git a/bc-sharp-crypto/src/ocsp/OCSPResp.cs b/bc-sharp-crypto/src/ocsp/OCSPResp.cs deleted file mode 100644 index dc99c6a..0000000 --- a/bc-sharp-crypto/src/ocsp/OCSPResp.cs +++ /dev/null @@ -1,100 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Ocsp; - -namespace Org.BouncyCastle.Ocsp -{ - public class OcspResp - { - private OcspResponse resp; - - public OcspResp( - OcspResponse resp) - { - this.resp = resp; - } - - public OcspResp( - byte[] resp) - : this(new Asn1InputStream(resp)) - { - } - - public OcspResp( - Stream inStr) - : this(new Asn1InputStream(inStr)) - { - } - - private OcspResp( - Asn1InputStream aIn) - { - try - { - this.resp = OcspResponse.GetInstance(aIn.ReadObject()); - } - catch (Exception e) - { - throw new IOException("malformed response: " + e.Message, e); - } - } - - public int Status - { - get { return this.resp.ResponseStatus.Value.IntValue; } - } - - public object GetResponseObject() - { - ResponseBytes rb = this.resp.ResponseBytes; - - if (rb == null) - return null; - - if (rb.ResponseType.Equals(OcspObjectIdentifiers.PkixOcspBasic)) - { - try - { - return new BasicOcspResp( - BasicOcspResponse.GetInstance( - Asn1Object.FromByteArray(rb.Response.GetOctets()))); - } - catch (Exception e) - { - throw new OcspException("problem decoding object: " + e, e); - } - } - - return rb.Response; - } - - /** - * return the ASN.1 encoded representation of this object. - */ - public byte[] GetEncoded() - { - return resp.GetEncoded(); - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - OcspResp other = obj as OcspResp; - - if (other == null) - return false; - - return resp.Equals(other.resp); - } - - public override int GetHashCode() - { - return resp.GetHashCode(); - } - } -} diff --git a/bc-sharp-crypto/src/ocsp/OCSPRespGenerator.cs b/bc-sharp-crypto/src/ocsp/OCSPRespGenerator.cs deleted file mode 100644 index e0eb9ae..0000000 --- a/bc-sharp-crypto/src/ocsp/OCSPRespGenerator.cs +++ /dev/null @@ -1,54 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Ocsp; - -namespace Org.BouncyCastle.Ocsp -{ - /** - * base generator for an OCSP response - at the moment this only supports the - * generation of responses containing BasicOCSP responses. - */ - public class OCSPRespGenerator - { - public const int Successful = 0; // Response has valid confirmations - public const int MalformedRequest = 1; // Illegal confirmation request - public const int InternalError = 2; // Internal error in issuer - public const int TryLater = 3; // Try again later - // (4) is not used - public const int SigRequired = 5; // Must sign the request - public const int Unauthorized = 6; // Request unauthorized - - public OcspResp Generate( - int status, - object response) - { - if (response == null) - { - return new OcspResp(new OcspResponse(new OcspResponseStatus(status),null)); - } - if (response is BasicOcspResp) - { - BasicOcspResp r = (BasicOcspResp)response; - Asn1OctetString octs; - - try - { - octs = new DerOctetString(r.GetEncoded()); - } - catch (Exception e) - { - throw new OcspException("can't encode object.", e); - } - - ResponseBytes rb = new ResponseBytes( - OcspObjectIdentifiers.PkixOcspBasic, octs); - - return new OcspResp(new OcspResponse( - new OcspResponseStatus(status), rb)); - } - - throw new OcspException("unknown response object"); - } - } -} diff --git a/bc-sharp-crypto/src/ocsp/OCSPRespStatus.cs b/bc-sharp-crypto/src/ocsp/OCSPRespStatus.cs deleted file mode 100644 index 9c00c70..0000000 --- a/bc-sharp-crypto/src/ocsp/OCSPRespStatus.cs +++ /dev/null @@ -1,22 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Ocsp -{ - [Obsolete("Use version with correct spelling 'OcspRespStatus'")] - public abstract class OcscpRespStatus : OcspRespStatus - { - } - - public abstract class OcspRespStatus - { - /** - * note 4 is not used. - */ - public const int Successful = 0; // --Response has valid confirmations - public const int MalformedRequest = 1; // --Illegal confirmation request - public const int InternalError = 2; // --Internal error in issuer - public const int TryLater = 3; // --Try again later - public const int SigRequired = 5; // --Must sign the request - public const int Unauthorized = 6; // --Request unauthorized - } -} diff --git a/bc-sharp-crypto/src/ocsp/OCSPUtil.cs b/bc-sharp-crypto/src/ocsp/OCSPUtil.cs deleted file mode 100644 index cbc1e95..0000000 --- a/bc-sharp-crypto/src/ocsp/OCSPUtil.cs +++ /dev/null @@ -1,132 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.CryptoPro; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.TeleTrust; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Ocsp -{ - class OcspUtilities - { - private static readonly IDictionary algorithms = Platform.CreateHashtable(); - private static readonly IDictionary oids = Platform.CreateHashtable(); - private static readonly ISet noParams = new HashSet(); - - static OcspUtilities() - { - algorithms.Add("MD2WITHRSAENCRYPTION", PkcsObjectIdentifiers.MD2WithRsaEncryption); - algorithms.Add("MD2WITHRSA", PkcsObjectIdentifiers.MD2WithRsaEncryption); - algorithms.Add("MD5WITHRSAENCRYPTION", PkcsObjectIdentifiers.MD5WithRsaEncryption); - algorithms.Add("MD5WITHRSA", PkcsObjectIdentifiers.MD5WithRsaEncryption); - algorithms.Add("SHA1WITHRSAENCRYPTION", PkcsObjectIdentifiers.Sha1WithRsaEncryption); - algorithms.Add("SHA1WITHRSA", PkcsObjectIdentifiers.Sha1WithRsaEncryption); - algorithms.Add("SHA224WITHRSAENCRYPTION", PkcsObjectIdentifiers.Sha224WithRsaEncryption); - algorithms.Add("SHA224WITHRSA", PkcsObjectIdentifiers.Sha224WithRsaEncryption); - algorithms.Add("SHA256WITHRSAENCRYPTION", PkcsObjectIdentifiers.Sha256WithRsaEncryption); - algorithms.Add("SHA256WITHRSA", PkcsObjectIdentifiers.Sha256WithRsaEncryption); - algorithms.Add("SHA384WITHRSAENCRYPTION", PkcsObjectIdentifiers.Sha384WithRsaEncryption); - algorithms.Add("SHA384WITHRSA", PkcsObjectIdentifiers.Sha384WithRsaEncryption); - algorithms.Add("SHA512WITHRSAENCRYPTION", PkcsObjectIdentifiers.Sha512WithRsaEncryption); - algorithms.Add("SHA512WITHRSA", PkcsObjectIdentifiers.Sha512WithRsaEncryption); - algorithms.Add("RIPEMD160WITHRSAENCRYPTION", TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD160); - algorithms.Add("RIPEMD160WITHRSA", TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD160); - algorithms.Add("RIPEMD128WITHRSAENCRYPTION", TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD128); - algorithms.Add("RIPEMD128WITHRSA", TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD128); - algorithms.Add("RIPEMD256WITHRSAENCRYPTION", TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD256); - algorithms.Add("RIPEMD256WITHRSA", TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD256); - algorithms.Add("SHA1WITHDSA", X9ObjectIdentifiers.IdDsaWithSha1); - algorithms.Add("DSAWITHSHA1", X9ObjectIdentifiers.IdDsaWithSha1); - algorithms.Add("SHA224WITHDSA", NistObjectIdentifiers.DsaWithSha224); - algorithms.Add("SHA256WITHDSA", NistObjectIdentifiers.DsaWithSha256); - algorithms.Add("SHA1WITHECDSA", X9ObjectIdentifiers.ECDsaWithSha1); - algorithms.Add("ECDSAWITHSHA1", X9ObjectIdentifiers.ECDsaWithSha1); - algorithms.Add("SHA224WITHECDSA", X9ObjectIdentifiers.ECDsaWithSha224); - algorithms.Add("SHA256WITHECDSA", X9ObjectIdentifiers.ECDsaWithSha256); - algorithms.Add("SHA384WITHECDSA", X9ObjectIdentifiers.ECDsaWithSha384); - algorithms.Add("SHA512WITHECDSA", X9ObjectIdentifiers.ECDsaWithSha512); - algorithms.Add("GOST3411WITHGOST3410", CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x94); - algorithms.Add("GOST3411WITHGOST3410-94", CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x94); - - oids.Add(PkcsObjectIdentifiers.MD2WithRsaEncryption, "MD2WITHRSA"); - oids.Add(PkcsObjectIdentifiers.MD5WithRsaEncryption, "MD5WITHRSA"); - oids.Add(PkcsObjectIdentifiers.Sha1WithRsaEncryption, "SHA1WITHRSA"); - oids.Add(PkcsObjectIdentifiers.Sha224WithRsaEncryption, "SHA224WITHRSA"); - oids.Add(PkcsObjectIdentifiers.Sha256WithRsaEncryption, "SHA256WITHRSA"); - oids.Add(PkcsObjectIdentifiers.Sha384WithRsaEncryption, "SHA384WITHRSA"); - oids.Add(PkcsObjectIdentifiers.Sha512WithRsaEncryption, "SHA512WITHRSA"); - oids.Add(TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD160, "RIPEMD160WITHRSA"); - oids.Add(TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD128, "RIPEMD128WITHRSA"); - oids.Add(TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD256, "RIPEMD256WITHRSA"); - oids.Add(X9ObjectIdentifiers.IdDsaWithSha1, "SHA1WITHDSA"); - oids.Add(NistObjectIdentifiers.DsaWithSha224, "SHA224WITHDSA"); - oids.Add(NistObjectIdentifiers.DsaWithSha256, "SHA256WITHDSA"); - oids.Add(X9ObjectIdentifiers.ECDsaWithSha1, "SHA1WITHECDSA"); - oids.Add(X9ObjectIdentifiers.ECDsaWithSha224, "SHA224WITHECDSA"); - oids.Add(X9ObjectIdentifiers.ECDsaWithSha256, "SHA256WITHECDSA"); - oids.Add(X9ObjectIdentifiers.ECDsaWithSha384, "SHA384WITHECDSA"); - oids.Add(X9ObjectIdentifiers.ECDsaWithSha512, "SHA512WITHECDSA"); - oids.Add(CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x94, "GOST3411WITHGOST3410"); - - // - // According to RFC 3279, the ASN.1 encoding SHALL (id-dsa-with-sha1) or MUST (ecdsa-with-SHA*) omit the parameters field. - // The parameters field SHALL be NULL for RSA based signature algorithms. - // - noParams.Add(X9ObjectIdentifiers.ECDsaWithSha1); - noParams.Add(X9ObjectIdentifiers.ECDsaWithSha224); - noParams.Add(X9ObjectIdentifiers.ECDsaWithSha256); - noParams.Add(X9ObjectIdentifiers.ECDsaWithSha384); - noParams.Add(X9ObjectIdentifiers.ECDsaWithSha512); - noParams.Add(X9ObjectIdentifiers.IdDsaWithSha1); - noParams.Add(NistObjectIdentifiers.DsaWithSha224); - noParams.Add(NistObjectIdentifiers.DsaWithSha256); - } - - internal static DerObjectIdentifier GetAlgorithmOid( - string algorithmName) - { - algorithmName = Platform.ToUpperInvariant(algorithmName); - - if (algorithms.Contains(algorithmName)) - { - return (DerObjectIdentifier)algorithms[algorithmName]; - } - - return new DerObjectIdentifier(algorithmName); - } - - - internal static string GetAlgorithmName( - DerObjectIdentifier oid) - { - if (oids.Contains(oid)) - { - return (string)oids[oid]; - } - - return oid.Id; - } - - internal static AlgorithmIdentifier GetSigAlgID( - DerObjectIdentifier sigOid) - { - if (noParams.Contains(sigOid)) - { - return new AlgorithmIdentifier(sigOid); - } - - return new AlgorithmIdentifier(sigOid, DerNull.Instance); - } - - internal static IEnumerable AlgNames - { - get { return new EnumerableProxy(algorithms.Keys); } - } - } -} diff --git a/bc-sharp-crypto/src/ocsp/Req.cs b/bc-sharp-crypto/src/ocsp/Req.cs deleted file mode 100644 index 68fd9f1..0000000 --- a/bc-sharp-crypto/src/ocsp/Req.cs +++ /dev/null @@ -1,38 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Ocsp; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.X509; - -namespace Org.BouncyCastle.Ocsp -{ - public class Req - : X509ExtensionBase - { - private Request req; - - public Req( - Request req) - { - this.req = req; - } - - public CertificateID GetCertID() - { - return new CertificateID(req.ReqCert); - } - - public X509Extensions SingleRequestExtensions - { - get { return req.SingleRequestExtensions; } - } - - protected override X509Extensions GetX509Extensions() - { - return SingleRequestExtensions; - } - } -} diff --git a/bc-sharp-crypto/src/ocsp/RespData.cs b/bc-sharp-crypto/src/ocsp/RespData.cs deleted file mode 100644 index 105726c..0000000 --- a/bc-sharp-crypto/src/ocsp/RespData.cs +++ /dev/null @@ -1,60 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Ocsp; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.X509; - -namespace Org.BouncyCastle.Ocsp -{ - public class RespData - : X509ExtensionBase - { - internal readonly ResponseData data; - - public RespData( - ResponseData data) - { - this.data = data; - } - - public int Version - { - get { return data.Version.Value.IntValue + 1; } - } - - public RespID GetResponderId() - { - return new RespID(data.ResponderID); - } - - public DateTime ProducedAt - { - get { return data.ProducedAt.ToDateTime(); } - } - - public SingleResp[] GetResponses() - { - Asn1Sequence s = data.Responses; - SingleResp[] rs = new SingleResp[s.Count]; - - for (int i = 0; i != rs.Length; i++) - { - rs[i] = new SingleResp(SingleResponse.GetInstance(s[i])); - } - - return rs; - } - - public X509Extensions ResponseExtensions - { - get { return data.ResponseExtensions; } - } - - protected override X509Extensions GetX509Extensions() - { - return ResponseExtensions; - } - } -} diff --git a/bc-sharp-crypto/src/ocsp/RespID.cs b/bc-sharp-crypto/src/ocsp/RespID.cs deleted file mode 100644 index 3238b26..0000000 --- a/bc-sharp-crypto/src/ocsp/RespID.cs +++ /dev/null @@ -1,72 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Ocsp; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.X509; - -namespace Org.BouncyCastle.Ocsp -{ - /** - * Carrier for a ResponderID. - */ - public class RespID - { - internal readonly ResponderID id; - - public RespID( - ResponderID id) - { - this.id = id; - } - - public RespID( - X509Name name) - { - this.id = new ResponderID(name); - } - - public RespID( - AsymmetricKeyParameter publicKey) - { - try - { - SubjectPublicKeyInfo info = SubjectPublicKeyInfoFactory.CreateSubjectPublicKeyInfo(publicKey); - - byte[] keyHash = DigestUtilities.CalculateDigest("SHA1", info.PublicKeyData.GetBytes()); - - this.id = new ResponderID(new DerOctetString(keyHash)); - } - catch (Exception e) - { - throw new OcspException("problem creating ID: " + e, e); - } - } - - public ResponderID ToAsn1Object() - { - return id; - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - RespID other = obj as RespID; - - if (other == null) - return false; - - return id.Equals(other.id); - } - - public override int GetHashCode() - { - return id.GetHashCode(); - } - } -} diff --git a/bc-sharp-crypto/src/ocsp/RevokedStatus.cs b/bc-sharp-crypto/src/ocsp/RevokedStatus.cs deleted file mode 100644 index 6e5ad1b..0000000 --- a/bc-sharp-crypto/src/ocsp/RevokedStatus.cs +++ /dev/null @@ -1,58 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Ocsp; -using Org.BouncyCastle.Asn1.X509; - -namespace Org.BouncyCastle.Ocsp -{ - /** - * wrapper for the RevokedInfo object - */ - public class RevokedStatus - : CertificateStatus - { - internal readonly RevokedInfo info; - - public RevokedStatus( - RevokedInfo info) - { - this.info = info; - } - - public RevokedStatus( - DateTime revocationDate, - int reason) - { - this.info = new RevokedInfo(new DerGeneralizedTime(revocationDate), new CrlReason(reason)); - } - - public DateTime RevocationTime - { - get { return info.RevocationTime.ToDateTime(); } - } - - public bool HasRevocationReason - { - get { return (info.RevocationReason != null); } - } - - /** - * return the revocation reason. Note: this field is optional, test for it - * with hasRevocationReason() first. - * @exception InvalidOperationException if a reason is asked for and none is avaliable - */ - public int RevocationReason - { - get - { - if (info.RevocationReason == null) - { - throw new InvalidOperationException("attempt to get a reason where none is available"); - } - - return info.RevocationReason.Value.IntValue; - } - } - } -} diff --git a/bc-sharp-crypto/src/ocsp/SingleResp.cs b/bc-sharp-crypto/src/ocsp/SingleResp.cs deleted file mode 100644 index b8979c5..0000000 --- a/bc-sharp-crypto/src/ocsp/SingleResp.cs +++ /dev/null @@ -1,81 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Ocsp; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities.Date; -using Org.BouncyCastle.X509; - -namespace Org.BouncyCastle.Ocsp -{ - public class SingleResp - : X509ExtensionBase - { - internal readonly SingleResponse resp; - - public SingleResp( - SingleResponse resp) - { - this.resp = resp; - } - - public CertificateID GetCertID() - { - return new CertificateID(resp.CertId); - } - - /** - * Return the status object for the response - null indicates good. - * - * @return the status object for the response, null if it is good. - */ - public object GetCertStatus() - { - CertStatus s = resp.CertStatus; - - if (s.TagNo == 0) - { - return null; // good - } - - if (s.TagNo == 1) - { - return new RevokedStatus(RevokedInfo.GetInstance(s.Status)); - } - - return new UnknownStatus(); - } - - public DateTime ThisUpdate - { - get { return resp.ThisUpdate.ToDateTime(); } - } - - /** - * return the NextUpdate value - note: this is an optional field so may - * be returned as null. - * - * @return nextUpdate, or null if not present. - */ - public DateTimeObject NextUpdate - { - get - { - return resp.NextUpdate == null - ? null - : new DateTimeObject(resp.NextUpdate.ToDateTime()); - } - } - - public X509Extensions SingleExtensions - { - get { return resp.SingleExtensions; } - } - - protected override X509Extensions GetX509Extensions() - { - return SingleExtensions; - } - } -} diff --git a/bc-sharp-crypto/src/ocsp/UnknownStatus.cs b/bc-sharp-crypto/src/ocsp/UnknownStatus.cs deleted file mode 100644 index c0f7a3a..0000000 --- a/bc-sharp-crypto/src/ocsp/UnknownStatus.cs +++ /dev/null @@ -1,15 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Ocsp -{ - /** - * wrapper for the UnknownInfo object - */ - public class UnknownStatus - : CertificateStatus - { - public UnknownStatus() - { - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/IStreamGenerator.cs b/bc-sharp-crypto/src/openpgp/IStreamGenerator.cs deleted file mode 100644 index 379213a..0000000 --- a/bc-sharp-crypto/src/openpgp/IStreamGenerator.cs +++ /dev/null @@ -1,7 +0,0 @@ -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - public interface IStreamGenerator - { - void Close(); - } -} diff --git a/bc-sharp-crypto/src/openpgp/PGPKeyRing.cs b/bc-sharp-crypto/src/openpgp/PGPKeyRing.cs deleted file mode 100644 index 6426f3f..0000000 --- a/bc-sharp-crypto/src/openpgp/PGPKeyRing.cs +++ /dev/null @@ -1,79 +0,0 @@ -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - public abstract class PgpKeyRing - : PgpObject - { - internal PgpKeyRing() - { - } - - internal static TrustPacket ReadOptionalTrustPacket( - BcpgInputStream bcpgInput) - { - return (bcpgInput.NextPacketTag() == PacketTag.Trust) - ? (TrustPacket) bcpgInput.ReadPacket() - : null; - } - - internal static IList ReadSignaturesAndTrust( - BcpgInputStream bcpgInput) - { - try - { - IList sigList = Platform.CreateArrayList(); - - while (bcpgInput.NextPacketTag() == PacketTag.Signature) - { - SignaturePacket signaturePacket = (SignaturePacket) bcpgInput.ReadPacket(); - TrustPacket trustPacket = ReadOptionalTrustPacket(bcpgInput); - - sigList.Add(new PgpSignature(signaturePacket, trustPacket)); - } - - return sigList; - } - catch (PgpException e) - { - throw new IOException("can't create signature object: " + e.Message, e); - } - } - - internal static void ReadUserIDs( - BcpgInputStream bcpgInput, - out IList ids, - out IList idTrusts, - out IList idSigs) - { - ids = Platform.CreateArrayList(); - idTrusts = Platform.CreateArrayList(); - idSigs = Platform.CreateArrayList(); - - while (bcpgInput.NextPacketTag() == PacketTag.UserId - || bcpgInput.NextPacketTag() == PacketTag.UserAttribute) - { - Packet obj = bcpgInput.ReadPacket(); - if (obj is UserIdPacket) - { - UserIdPacket id = (UserIdPacket)obj; - ids.Add(id.GetId()); - } - else - { - UserAttributePacket user = (UserAttributePacket) obj; - ids.Add(new PgpUserAttributeSubpacketVector(user.GetSubpackets())); - } - - idTrusts.Add( - ReadOptionalTrustPacket(bcpgInput)); - - idSigs.Add( - ReadSignaturesAndTrust(bcpgInput)); - } - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PGPObject.cs b/bc-sharp-crypto/src/openpgp/PGPObject.cs deleted file mode 100644 index d38276c..0000000 --- a/bc-sharp-crypto/src/openpgp/PGPObject.cs +++ /dev/null @@ -1,9 +0,0 @@ -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - public abstract class PgpObject - { - internal PgpObject() - { - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PGPUserAttributeSubpacketVectorGenerator.cs b/bc-sharp-crypto/src/openpgp/PGPUserAttributeSubpacketVectorGenerator.cs deleted file mode 100644 index 9d56c8b..0000000 --- a/bc-sharp-crypto/src/openpgp/PGPUserAttributeSubpacketVectorGenerator.cs +++ /dev/null @@ -1,33 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Bcpg.Attr; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - public class PgpUserAttributeSubpacketVectorGenerator - { - private IList list = Platform.CreateArrayList(); - - public virtual void SetImageAttribute( - ImageAttrib.Format imageType, - byte[] imageData) - { - if (imageData == null) - throw new ArgumentException("attempt to set null image", "imageData"); - - list.Add(new ImageAttrib(imageType, imageData)); - } - - public virtual PgpUserAttributeSubpacketVector Generate() - { - UserAttributeSubpacket[] a = new UserAttributeSubpacket[list.Count]; - for (int i = 0; i < list.Count; ++i) - { - a[i] = (UserAttributeSubpacket)list[i]; - } - return new PgpUserAttributeSubpacketVector(a); - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpCompressedData.cs b/bc-sharp-crypto/src/openpgp/PgpCompressedData.cs deleted file mode 100644 index e64a17c..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpCompressedData.cs +++ /dev/null @@ -1,50 +0,0 @@ -using System.IO; - -using Org.BouncyCastle.Apache.Bzip2; -using Org.BouncyCastle.Utilities.Zlib; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// Compressed data objects - public class PgpCompressedData - : PgpObject - { - private readonly CompressedDataPacket data; - - public PgpCompressedData( - BcpgInputStream bcpgInput) - { - data = (CompressedDataPacket) bcpgInput.ReadPacket(); - } - - /// The algorithm used for compression - public CompressionAlgorithmTag Algorithm - { - get { return data.Algorithm; } - } - - /// Get the raw input stream contained in the object. - public Stream GetInputStream() - { - return data.GetInputStream(); - } - - /// Return an uncompressed input stream which allows reading of the compressed data. - public Stream GetDataStream() - { - switch (Algorithm) - { - case CompressionAlgorithmTag.Uncompressed: - return GetInputStream(); - case CompressionAlgorithmTag.Zip: - return new ZInputStream(GetInputStream(), true); - case CompressionAlgorithmTag.ZLib: - return new ZInputStream(GetInputStream()); - case CompressionAlgorithmTag.BZip2: - return new CBZip2InputStream(GetInputStream()); - default: - throw new PgpException("can't recognise compression algorithm: " + Algorithm); - } - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpCompressedDataGenerator.cs b/bc-sharp-crypto/src/openpgp/PgpCompressedDataGenerator.cs deleted file mode 100644 index 51b6452..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpCompressedDataGenerator.cs +++ /dev/null @@ -1,221 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Apache.Bzip2; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Zlib; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// Class for producing compressed data packets. - public class PgpCompressedDataGenerator - : IStreamGenerator - { - private readonly CompressionAlgorithmTag algorithm; - private readonly int compression; - - private Stream dOut; - private BcpgOutputStream pkOut; - - public PgpCompressedDataGenerator( - CompressionAlgorithmTag algorithm) - : this(algorithm, JZlib.Z_DEFAULT_COMPRESSION) - { - } - - public PgpCompressedDataGenerator( - CompressionAlgorithmTag algorithm, - int compression) - { - switch (algorithm) - { - case CompressionAlgorithmTag.Uncompressed: - case CompressionAlgorithmTag.Zip: - case CompressionAlgorithmTag.ZLib: - case CompressionAlgorithmTag.BZip2: - break; - default: - throw new ArgumentException("unknown compression algorithm", "algorithm"); - } - - if (compression != JZlib.Z_DEFAULT_COMPRESSION) - { - if ((compression < JZlib.Z_NO_COMPRESSION) || (compression > JZlib.Z_BEST_COMPRESSION)) - { - throw new ArgumentException("unknown compression level: " + compression); - } - } - - this.algorithm = algorithm; - this.compression = compression; - } - - /// - ///

    - /// Return an output stream which will save the data being written to - /// the compressed object. - ///

    - ///

    - /// The stream created can be closed off by either calling Close() - /// on the stream or Close() on the generator. Closing the returned - /// stream does not close off the Stream parameter outStr. - ///

    - ///     - /// Stream to be used for output. - /// A Stream for output of the compressed data. - /// - /// - /// - public Stream Open( - Stream outStr) - { - if (dOut != null) - throw new InvalidOperationException("generator already in open state"); - if (outStr == null) - throw new ArgumentNullException("outStr"); - - this.pkOut = new BcpgOutputStream(outStr, PacketTag.CompressedData); - - doOpen(); - - return new WrappedGeneratorStream(this, dOut); - } - - /// - ///

    - /// Return an output stream which will compress the data as it is written to it. - /// The stream will be written out in chunks according to the size of the passed in buffer. - ///

    - ///

    - /// The stream created can be closed off by either calling Close() - /// on the stream or Close() on the generator. Closing the returned - /// stream does not close off the Stream parameter outStr. - ///

    - ///

    - /// Note: if the buffer is not a power of 2 in length only the largest power of 2 - /// bytes worth of the buffer will be used. - ///

    - ///

    - /// Note: using this may break compatibility with RFC 1991 compliant tools. - /// Only recent OpenPGP implementations are capable of accepting these streams. - ///

    - ///     - /// Stream to be used for output. - /// The buffer to use. - /// A Stream for output of the compressed data. - /// - /// - /// - /// - public Stream Open( - Stream outStr, - byte[] buffer) - { - if (dOut != null) - throw new InvalidOperationException("generator already in open state"); - if (outStr == null) - throw new ArgumentNullException("outStr"); - if (buffer == null) - throw new ArgumentNullException("buffer"); - - this.pkOut = new BcpgOutputStream(outStr, PacketTag.CompressedData, buffer); - - doOpen(); - - return new WrappedGeneratorStream(this, dOut); - } - - private void doOpen() - { - pkOut.WriteByte((byte) algorithm); - - switch (algorithm) - { - case CompressionAlgorithmTag.Uncompressed: - dOut = pkOut; - break; - case CompressionAlgorithmTag.Zip: - dOut = new SafeZOutputStream(pkOut, compression, true); - break; - case CompressionAlgorithmTag.ZLib: - dOut = new SafeZOutputStream(pkOut, compression, false); - break; - case CompressionAlgorithmTag.BZip2: - dOut = new SafeCBZip2OutputStream(pkOut); - break; - default: - // Constructor should guard against this possibility - throw new InvalidOperationException(); - } - } - - /// Close the compressed object.summary> - public void Close() - { - if (dOut != null) - { - if (dOut != pkOut) - { - Platform.Dispose(dOut); - } - dOut = null; - - pkOut.Finish(); - pkOut.Flush(); - pkOut = null; - } - } - - private class SafeCBZip2OutputStream : CBZip2OutputStream - { - public SafeCBZip2OutputStream(Stream output) - : base(output) - { - } - -#if PORTABLE - protected override void Dispose(bool disposing) - { - if (disposing) - { - Finish(); - return; - } - base.Dispose(disposing); - } -#else - public override void Close() - { - Finish(); - } -#endif - } - - private class SafeZOutputStream : ZOutputStream - { - public SafeZOutputStream(Stream output, int level, bool nowrap) - : base(output, level, nowrap) - { - } - -#if PORTABLE - protected override void Dispose(bool disposing) - { - if (disposing) - { - Finish(); - End(); - return; - } - base.Dispose(disposing); - } -#else - public override void Close() - { - Finish(); - End(); - } -#endif - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpDataValidationException.cs b/bc-sharp-crypto/src/openpgp/PgpDataValidationException.cs deleted file mode 100644 index d06833c..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpDataValidationException.cs +++ /dev/null @@ -1,18 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// - /// Thrown if the IV at the start of a data stream indicates the wrong key is being used. - /// -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class PgpDataValidationException - : PgpException - { - public PgpDataValidationException() : base() {} - public PgpDataValidationException(string message) : base(message) {} - public PgpDataValidationException(string message, Exception exception) : base(message, exception) {} - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpEncryptedData.cs b/bc-sharp-crypto/src/openpgp/PgpEncryptedData.cs deleted file mode 100644 index 558e0b8..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpEncryptedData.cs +++ /dev/null @@ -1,151 +0,0 @@ -using System; -using System.Diagnostics; -using System.IO; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.IO; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - public abstract class PgpEncryptedData - { - internal class TruncatedStream - : BaseInputStream - { - private const int LookAheadSize = 22; - private const int LookAheadBufSize = 512; - private const int LookAheadBufLimit = LookAheadBufSize - LookAheadSize; - - private readonly Stream inStr; - private readonly byte[] lookAhead = new byte[LookAheadBufSize]; - private int bufStart, bufEnd; - - internal TruncatedStream( - Stream inStr) - { - int numRead = Streams.ReadFully(inStr, lookAhead, 0, lookAhead.Length); - - if (numRead < LookAheadSize) - throw new EndOfStreamException(); - - this.inStr = inStr; - this.bufStart = 0; - this.bufEnd = numRead - LookAheadSize; - } - - private int FillBuffer() - { - if (bufEnd < LookAheadBufLimit) - return 0; - - Debug.Assert(bufStart == LookAheadBufLimit); - Debug.Assert(bufEnd == LookAheadBufLimit); - - Array.Copy(lookAhead, LookAheadBufLimit, lookAhead, 0, LookAheadSize); - bufEnd = Streams.ReadFully(inStr, lookAhead, LookAheadSize, LookAheadBufLimit); - bufStart = 0; - return bufEnd; - } - - public override int ReadByte() - { - if (bufStart < bufEnd) - return lookAhead[bufStart++]; - - if (FillBuffer() < 1) - return -1; - - return lookAhead[bufStart++]; - } - - public override int Read(byte[] buf, int off, int len) - { - int avail = bufEnd - bufStart; - - int pos = off; - while (len > avail) - { - Array.Copy(lookAhead, bufStart, buf, pos, avail); - - bufStart += avail; - pos += avail; - len -= avail; - - if ((avail = FillBuffer()) < 1) - return pos - off; - } - - Array.Copy(lookAhead, bufStart, buf, pos, len); - bufStart += len; - - return pos + len - off; - } - - internal byte[] GetLookAhead() - { - byte[] temp = new byte[LookAheadSize]; - Array.Copy(lookAhead, bufStart, temp, 0, LookAheadSize); - return temp; - } - } - - internal InputStreamPacket encData; - internal Stream encStream; - internal TruncatedStream truncStream; - - internal PgpEncryptedData( - InputStreamPacket encData) - { - this.encData = encData; - } - - /// Return the raw input stream for the data stream. - public virtual Stream GetInputStream() - { - return encData.GetInputStream(); - } - - /// Return true if the message is integrity protected. - /// True, if there is a modification detection code namespace associated - /// with this stream. - public bool IsIntegrityProtected() - { - return encData is SymmetricEncIntegrityPacket; - } - - /// Note: This can only be called after the message has been read. - /// True, if the message verifies, false otherwise - public bool Verify() - { - if (!IsIntegrityProtected()) - throw new PgpException("data not integrity protected."); - - DigestStream dIn = (DigestStream) encStream; - - // - // make sure we are at the end. - // - while (encStream.ReadByte() >= 0) - { - // do nothing - } - - // - // process the MDC packet - // - byte[] lookAhead = truncStream.GetLookAhead(); - - IDigest hash = dIn.ReadDigest(); - hash.BlockUpdate(lookAhead, 0, 2); - byte[] digest = DigestUtilities.DoFinal(hash); - - byte[] streamDigest = new byte[digest.Length]; - Array.Copy(lookAhead, 2, streamDigest, 0, streamDigest.Length); - - return Arrays.ConstantTimeAreEqual(digest, streamDigest); - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpEncryptedDataGenerator.cs b/bc-sharp-crypto/src/openpgp/PgpEncryptedDataGenerator.cs deleted file mode 100644 index 014281b..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpEncryptedDataGenerator.cs +++ /dev/null @@ -1,598 +0,0 @@ -using System; -using System.Collections; -using System.Diagnostics; -using System.IO; - -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.IO; -using Org.BouncyCastle.Crypto.Generators; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// Generator for encrypted objects. - public class PgpEncryptedDataGenerator - : IStreamGenerator - { - private BcpgOutputStream pOut; - private CipherStream cOut; - private IBufferedCipher c; - private bool withIntegrityPacket; - private bool oldFormat; - private DigestStream digestOut; - - private abstract class EncMethod - : ContainedPacket - { - protected byte[] sessionInfo; - protected SymmetricKeyAlgorithmTag encAlgorithm; - protected KeyParameter key; - - public abstract void AddSessionInfo(byte[] si, SecureRandom random); - } - - private class PbeMethod - : EncMethod - { - private S2k s2k; - - internal PbeMethod( - SymmetricKeyAlgorithmTag encAlgorithm, - S2k s2k, - KeyParameter key) - { - this.encAlgorithm = encAlgorithm; - this.s2k = s2k; - this.key = key; - } - - public KeyParameter GetKey() - { - return key; - } - - public override void AddSessionInfo( - byte[] si, - SecureRandom random) - { - string cName = PgpUtilities.GetSymmetricCipherName(encAlgorithm); - IBufferedCipher c = CipherUtilities.GetCipher(cName + "/CFB/NoPadding"); - - byte[] iv = new byte[c.GetBlockSize()]; - c.Init(true, new ParametersWithRandom(new ParametersWithIV(key, iv), random)); - - this.sessionInfo = c.DoFinal(si, 0, si.Length - 2); - } - - public override void Encode(BcpgOutputStream pOut) - { - SymmetricKeyEncSessionPacket pk = new SymmetricKeyEncSessionPacket( - encAlgorithm, s2k, sessionInfo); - - pOut.WritePacket(pk); - } - } - - private class PubMethod - : EncMethod - { - internal PgpPublicKey pubKey; - internal byte[][] data; - - internal PubMethod(PgpPublicKey pubKey) - { - this.pubKey = pubKey; - } - - public override void AddSessionInfo( - byte[] sessionInfo, - SecureRandom random) - { - byte[] encryptedSessionInfo = EncryptSessionInfo(sessionInfo, random); - - this.data = ProcessSessionInfo(encryptedSessionInfo); - } - - private byte[] EncryptSessionInfo(byte[] sessionInfo, SecureRandom random) - { - if (pubKey.Algorithm != PublicKeyAlgorithmTag.ECDH) - { - IBufferedCipher c; - switch (pubKey.Algorithm) - { - case PublicKeyAlgorithmTag.RsaEncrypt: - case PublicKeyAlgorithmTag.RsaGeneral: - c = CipherUtilities.GetCipher("RSA//PKCS1Padding"); - break; - case PublicKeyAlgorithmTag.ElGamalEncrypt: - case PublicKeyAlgorithmTag.ElGamalGeneral: - c = CipherUtilities.GetCipher("ElGamal/ECB/PKCS1Padding"); - break; - case PublicKeyAlgorithmTag.Dsa: - throw new PgpException("Can't use DSA for encryption."); - case PublicKeyAlgorithmTag.ECDsa: - throw new PgpException("Can't use ECDSA for encryption."); - default: - throw new PgpException("unknown asymmetric algorithm: " + pubKey.Algorithm); - } - - AsymmetricKeyParameter akp = pubKey.GetKey(); - c.Init(true, new ParametersWithRandom(akp, random)); - return c.DoFinal(sessionInfo); - } - - ECDHPublicBcpgKey ecKey = (ECDHPublicBcpgKey)pubKey.PublicKeyPacket.Key; - - // Generate the ephemeral key pair - IAsymmetricCipherKeyPairGenerator gen = GeneratorUtilities.GetKeyPairGenerator("ECDH"); - gen.Init(new ECKeyGenerationParameters(ecKey.CurveOid, random)); - - AsymmetricCipherKeyPair ephKp = gen.GenerateKeyPair(); - ECPrivateKeyParameters ephPriv = (ECPrivateKeyParameters)ephKp.Private; - ECPublicKeyParameters ephPub = (ECPublicKeyParameters)ephKp.Public; - - ECPublicKeyParameters pub = (ECPublicKeyParameters)pubKey.GetKey(); - ECPoint S = pub.Q.Multiply(ephPriv.D).Normalize(); - - KeyParameter key = new KeyParameter(Rfc6637Utilities.CreateKey(pubKey.PublicKeyPacket, S)); - - IWrapper w = PgpUtilities.CreateWrapper(ecKey.SymmetricKeyAlgorithm); - w.Init(true, new ParametersWithRandom(key, random)); - - byte[] paddedSessionData = PgpPad.PadSessionData(sessionInfo); - - byte[] C = w.Wrap(paddedSessionData, 0, paddedSessionData.Length); - byte[] VB = new MPInteger(new BigInteger(1, ephPub.Q.GetEncoded(false))).GetEncoded(); - - byte[] rv = new byte[VB.Length + 1 + C.Length]; - - Array.Copy(VB, 0, rv, 0, VB.Length); - rv[VB.Length] = (byte)C.Length; - Array.Copy(C, 0, rv, VB.Length + 1, C.Length); - - return rv; - } - - private byte[][] ProcessSessionInfo(byte[] encryptedSessionInfo) - { - byte[][] data; - - switch (pubKey.Algorithm) - { - case PublicKeyAlgorithmTag.RsaEncrypt: - case PublicKeyAlgorithmTag.RsaGeneral: - data = new byte[][] { ConvertToEncodedMpi(encryptedSessionInfo) }; - break; - case PublicKeyAlgorithmTag.ElGamalEncrypt: - case PublicKeyAlgorithmTag.ElGamalGeneral: - int halfLength = encryptedSessionInfo.Length / 2; - byte[] b1 = new byte[halfLength]; - byte[] b2 = new byte[halfLength]; - - Array.Copy(encryptedSessionInfo, 0, b1, 0, halfLength); - Array.Copy(encryptedSessionInfo, halfLength, b2, 0, halfLength); - - data = new byte[][] { - ConvertToEncodedMpi(b1), - ConvertToEncodedMpi(b2), - }; - break; - case PublicKeyAlgorithmTag.ECDH: - data = new byte[][]{ encryptedSessionInfo }; - break; - default: - throw new PgpException("unknown asymmetric algorithm: " + pubKey.Algorithm); - } - - return data; - } - - private byte[] ConvertToEncodedMpi(byte[] encryptedSessionInfo) - { - try - { - return new MPInteger(new BigInteger(1, encryptedSessionInfo)).GetEncoded(); - } - catch (IOException e) - { - throw new PgpException("Invalid MPI encoding: " + e.Message, e); - } - } - - public override void Encode(BcpgOutputStream pOut) - { - PublicKeyEncSessionPacket pk = new PublicKeyEncSessionPacket(pubKey.KeyId, pubKey.Algorithm, data); - - pOut.WritePacket(pk); - } - } - - private readonly IList methods = Platform.CreateArrayList(); - private readonly SymmetricKeyAlgorithmTag defAlgorithm; - private readonly SecureRandom rand; - - public PgpEncryptedDataGenerator( - SymmetricKeyAlgorithmTag encAlgorithm) - { - this.defAlgorithm = encAlgorithm; - this.rand = new SecureRandom(); - } - - public PgpEncryptedDataGenerator( - SymmetricKeyAlgorithmTag encAlgorithm, - bool withIntegrityPacket) - { - this.defAlgorithm = encAlgorithm; - this.withIntegrityPacket = withIntegrityPacket; - this.rand = new SecureRandom(); - } - - /// Existing SecureRandom constructor. - /// The symmetric algorithm to use. - /// Source of randomness. - public PgpEncryptedDataGenerator( - SymmetricKeyAlgorithmTag encAlgorithm, - SecureRandom rand) - { - this.defAlgorithm = encAlgorithm; - this.rand = rand; - } - - /// Creates a cipher stream which will have an integrity packet associated with it. - public PgpEncryptedDataGenerator( - SymmetricKeyAlgorithmTag encAlgorithm, - bool withIntegrityPacket, - SecureRandom rand) - { - this.defAlgorithm = encAlgorithm; - this.rand = rand; - this.withIntegrityPacket = withIntegrityPacket; - } - - /// Base constructor. - /// The symmetric algorithm to use. - /// Source of randomness. - /// PGP 2.6.x compatibility required. - public PgpEncryptedDataGenerator( - SymmetricKeyAlgorithmTag encAlgorithm, - SecureRandom rand, - bool oldFormat) - { - this.defAlgorithm = encAlgorithm; - this.rand = rand; - this.oldFormat = oldFormat; - } - - /// - /// Add a PBE encryption method to the encrypted object using the default algorithm (S2K_SHA1). - /// - /// - /// Conversion of the passphrase characters to bytes is performed using Convert.ToByte(), which is - /// the historical behaviour of the library (1.7 and earlier). - /// - [Obsolete("Use version that takes an explicit s2kDigest parameter")] - public void AddMethod(char[] passPhrase) - { - AddMethod(passPhrase, HashAlgorithmTag.Sha1); - } - - /// Add a PBE encryption method to the encrypted object. - /// - /// Conversion of the passphrase characters to bytes is performed using Convert.ToByte(), which is - /// the historical behaviour of the library (1.7 and earlier). - /// - public void AddMethod(char[] passPhrase, HashAlgorithmTag s2kDigest) - { - DoAddMethod(PgpUtilities.EncodePassPhrase(passPhrase, false), true, s2kDigest); - } - - /// Add a PBE encryption method to the encrypted object. - /// - /// The passphrase is encoded to bytes using UTF8 (Encoding.UTF8.GetBytes). - /// - public void AddMethodUtf8(char[] passPhrase, HashAlgorithmTag s2kDigest) - { - DoAddMethod(PgpUtilities.EncodePassPhrase(passPhrase, true), true, s2kDigest); - } - - /// Add a PBE encryption method to the encrypted object. - /// - /// Allows the caller to handle the encoding of the passphrase to bytes. - /// - public void AddMethodRaw(byte[] rawPassPhrase, HashAlgorithmTag s2kDigest) - { - DoAddMethod(rawPassPhrase, false, s2kDigest); - } - - internal void DoAddMethod(byte[] rawPassPhrase, bool clearPassPhrase, HashAlgorithmTag s2kDigest) - { - S2k s2k = PgpUtilities.GenerateS2k(s2kDigest, 0x60, rand); - - methods.Add(new PbeMethod(defAlgorithm, s2k, PgpUtilities.DoMakeKeyFromPassPhrase(defAlgorithm, s2k, rawPassPhrase, clearPassPhrase))); - } - - /// Add a public key encrypted session key to the encrypted object. - public void AddMethod( - PgpPublicKey key) - { - if (!key.IsEncryptionKey) - { - throw new ArgumentException("passed in key not an encryption key!"); - } - - methods.Add(new PubMethod(key)); - } - - private void AddCheckSum( - byte[] sessionInfo) - { - Debug.Assert(sessionInfo != null); - Debug.Assert(sessionInfo.Length >= 3); - - int check = 0; - - for (int i = 1; i < sessionInfo.Length - 2; i++) - { - check += sessionInfo[i]; - } - - sessionInfo[sessionInfo.Length - 2] = (byte)(check >> 8); - sessionInfo[sessionInfo.Length - 1] = (byte)(check); - } - - private byte[] CreateSessionInfo( - SymmetricKeyAlgorithmTag algorithm, - KeyParameter key) - { - byte[] keyBytes = key.GetKey(); - byte[] sessionInfo = new byte[keyBytes.Length + 3]; - sessionInfo[0] = (byte) algorithm; - keyBytes.CopyTo(sessionInfo, 1); - AddCheckSum(sessionInfo); - return sessionInfo; - } - - /// - ///

    - /// If buffer is non null stream assumed to be partial, otherwise the length will be used - /// to output a fixed length packet. - ///

    - ///

    - /// The stream created can be closed off by either calling Close() - /// on the stream or Close() on the generator. Closing the returned - /// stream does not close off the Stream parameter outStr. - ///

    - ///     - private Stream Open( - Stream outStr, - long length, - byte[] buffer) - { - if (cOut != null) - throw new InvalidOperationException("generator already in open state"); - if (methods.Count == 0) - throw new InvalidOperationException("No encryption methods specified"); - if (outStr == null) - throw new ArgumentNullException("outStr"); - - pOut = new BcpgOutputStream(outStr); - - KeyParameter key; - - if (methods.Count == 1) - { - if (methods[0] is PbeMethod) - { - PbeMethod m = (PbeMethod)methods[0]; - - key = m.GetKey(); - } - else - { - key = PgpUtilities.MakeRandomKey(defAlgorithm, rand); - - byte[] sessionInfo = CreateSessionInfo(defAlgorithm, key); - PubMethod m = (PubMethod)methods[0]; - - try - { - m.AddSessionInfo(sessionInfo, rand); - } - catch (Exception e) - { - throw new PgpException("exception encrypting session key", e); - } - } - - pOut.WritePacket((ContainedPacket)methods[0]); - } - else // multiple methods - { - key = PgpUtilities.MakeRandomKey(defAlgorithm, rand); - byte[] sessionInfo = CreateSessionInfo(defAlgorithm, key); - - for (int i = 0; i != methods.Count; i++) - { - EncMethod m = (EncMethod)methods[i]; - - try - { - m.AddSessionInfo(sessionInfo, rand); - } - catch (Exception e) - { - throw new PgpException("exception encrypting session key", e); - } - - pOut.WritePacket(m); - } - } - - string cName = PgpUtilities.GetSymmetricCipherName(defAlgorithm); - if (cName == null) - { - throw new PgpException("null cipher specified"); - } - - try - { - if (withIntegrityPacket) - { - cName += "/CFB/NoPadding"; - } - else - { - cName += "/OpenPGPCFB/NoPadding"; - } - - c = CipherUtilities.GetCipher(cName); - - // TODO Confirm the IV should be all zero bytes (not inLineIv - see below) - byte[] iv = new byte[c.GetBlockSize()]; - c.Init(true, new ParametersWithRandom(new ParametersWithIV(key, iv), rand)); - - if (buffer == null) - { - // - // we have to Add block size + 2 for the Generated IV and + 1 + 22 if integrity protected - // - if (withIntegrityPacket) - { - pOut = new BcpgOutputStream(outStr, PacketTag.SymmetricEncryptedIntegrityProtected, length + c.GetBlockSize() + 2 + 1 + 22); - pOut.WriteByte(1); // version number - } - else - { - pOut = new BcpgOutputStream(outStr, PacketTag.SymmetricKeyEncrypted, length + c.GetBlockSize() + 2, oldFormat); - } - } - else - { - if (withIntegrityPacket) - { - pOut = new BcpgOutputStream(outStr, PacketTag.SymmetricEncryptedIntegrityProtected, buffer); - pOut.WriteByte(1); // version number - } - else - { - pOut = new BcpgOutputStream(outStr, PacketTag.SymmetricKeyEncrypted, buffer); - } - } - - int blockSize = c.GetBlockSize(); - byte[] inLineIv = new byte[blockSize + 2]; - rand.NextBytes(inLineIv, 0, blockSize); - Array.Copy(inLineIv, inLineIv.Length - 4, inLineIv, inLineIv.Length - 2, 2); - - Stream myOut = cOut = new CipherStream(pOut, null, c); - - if (withIntegrityPacket) - { - string digestName = PgpUtilities.GetDigestName(HashAlgorithmTag.Sha1); - IDigest digest = DigestUtilities.GetDigest(digestName); - myOut = digestOut = new DigestStream(myOut, null, digest); - } - - myOut.Write(inLineIv, 0, inLineIv.Length); - - return new WrappedGeneratorStream(this, myOut); - } - catch (Exception e) - { - throw new PgpException("Exception creating cipher", e); - } - } - - /// - ///

    - /// Return an output stream which will encrypt the data as it is written to it. - ///

    - ///

    - /// The stream created can be closed off by either calling Close() - /// on the stream or Close() on the generator. Closing the returned - /// stream does not close off the Stream parameter outStr. - ///

    - ///     - public Stream Open( - Stream outStr, - long length) - { - return Open(outStr, length, null); - } - - /// - ///

    - /// Return an output stream which will encrypt the data as it is written to it. - /// The stream will be written out in chunks according to the size of the passed in buffer. - ///

    - ///

    - /// The stream created can be closed off by either calling Close() - /// on the stream or Close() on the generator. Closing the returned - /// stream does not close off the Stream parameter outStr. - ///

    - ///

    - /// Note: if the buffer is not a power of 2 in length only the largest power of 2 - /// bytes worth of the buffer will be used. - ///

    - ///     - public Stream Open( - Stream outStr, - byte[] buffer) - { - return Open(outStr, 0, buffer); - } - - /// - ///

    - /// Close off the encrypted object - this is equivalent to calling Close() on the stream - /// returned by the Open() method. - ///

    - ///

    - /// Note: This does not close the underlying output stream, only the stream on top of - /// it created by the Open() method. - ///

    - ///     - public void Close() - { - if (cOut != null) - { - // TODO Should this all be under the try/catch block? - if (digestOut != null) - { - // - // hand code a mod detection packet - // - BcpgOutputStream bOut = new BcpgOutputStream( - digestOut, PacketTag.ModificationDetectionCode, 20); - - bOut.Flush(); - digestOut.Flush(); - - // TODO - byte[] dig = DigestUtilities.DoFinal(digestOut.WriteDigest()); - cOut.Write(dig, 0, dig.Length); - } - - cOut.Flush(); - - try - { - pOut.Write(c.DoFinal()); - pOut.Finish(); - } - catch (Exception e) - { - throw new IOException(e.Message, e); - } - - cOut = null; - pOut = null; - } - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpEncryptedDataList.cs b/bc-sharp-crypto/src/openpgp/PgpEncryptedDataList.cs deleted file mode 100644 index 8dded7c..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpEncryptedDataList.cs +++ /dev/null @@ -1,72 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// A holder for a list of PGP encryption method packets. - public class PgpEncryptedDataList - : PgpObject - { - private IList list = Platform.CreateArrayList(); - private InputStreamPacket data; - - public PgpEncryptedDataList( - BcpgInputStream bcpgInput) - { - while (bcpgInput.NextPacketTag() == PacketTag.PublicKeyEncryptedSession - || bcpgInput.NextPacketTag() == PacketTag.SymmetricKeyEncryptedSessionKey) - { - list.Add(bcpgInput.ReadPacket()); - } - - data = (InputStreamPacket)bcpgInput.ReadPacket(); - - for (int i = 0; i != list.Count; i++) - { - if (list[i] is SymmetricKeyEncSessionPacket) - { - list[i] = new PgpPbeEncryptedData((SymmetricKeyEncSessionPacket) list[i], data); - } - else - { - list[i] = new PgpPublicKeyEncryptedData((PublicKeyEncSessionPacket) list[i], data); - } - } - } - - public PgpEncryptedData this[int index] - { - get { return (PgpEncryptedData) list[index]; } - } - - [Obsolete("Use 'object[index]' syntax instead")] - public object Get(int index) - { - return this[index]; - } - - [Obsolete("Use 'Count' property instead")] - public int Size - { - get { return list.Count; } - } - - public int Count - { - get { return list.Count; } - } - - public bool IsEmpty - { - get { return list.Count == 0; } - } - - public IEnumerable GetEncryptedDataObjects() - { - return new EnumerableProxy(list); - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpException.cs b/bc-sharp-crypto/src/openpgp/PgpException.cs deleted file mode 100644 index 230dab8..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpException.cs +++ /dev/null @@ -1,22 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// Generic exception class for PGP encoding/decoding problems. -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class PgpException - : Exception - { - public PgpException() : base() {} - public PgpException(string message) : base(message) {} - public PgpException(string message, Exception exception) : base(message, exception) {} - - [Obsolete("Use InnerException property")] - public Exception UnderlyingException - { - get { return InnerException; } - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpExperimental.cs b/bc-sharp-crypto/src/openpgp/PgpExperimental.cs deleted file mode 100644 index 8518335..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpExperimental.cs +++ /dev/null @@ -1,16 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - public class PgpExperimental - : PgpObject - { - private readonly ExperimentalPacket p; - - public PgpExperimental( - BcpgInputStream bcpgIn) - { - p = (ExperimentalPacket) bcpgIn.ReadPacket(); - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpKeyFlags.cs b/bc-sharp-crypto/src/openpgp/PgpKeyFlags.cs deleted file mode 100644 index ea18006..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpKeyFlags.cs +++ /dev/null @@ -1,13 +0,0 @@ -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// Key flag values for the KeyFlags subpacket. - public abstract class PgpKeyFlags - { - public const int CanCertify = 0x01; // This key may be used to certify other keys. - public const int CanSign = 0x02; // This key may be used to sign data. - public const int CanEncryptCommunications = 0x04; // This key may be used to encrypt communications. - public const int CanEncryptStorage = 0x08; // This key may be used to encrypt storage. - public const int MaybeSplit = 0x10; // The private component of this key may have been split by a secret-sharing mechanism. - public const int MaybeShared = 0x80; // The private component of this key may be in the possession of more than one person. - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpKeyPair.cs b/bc-sharp-crypto/src/openpgp/PgpKeyPair.cs deleted file mode 100644 index 9cf78fa..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpKeyPair.cs +++ /dev/null @@ -1,67 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// - /// General class to handle JCA key pairs and convert them into OpenPGP ones. - ///

    - /// A word for the unwary, the KeyId for an OpenPGP public key is calculated from - /// a hash that includes the time of creation, if you pass a different date to the - /// constructor below with the same public private key pair the KeyIs will not be the - /// same as for previous generations of the key, so ideally you only want to do - /// this once. - ///

    - ///     - public class PgpKeyPair - { - private readonly PgpPublicKey pub; - private readonly PgpPrivateKey priv; - - public PgpKeyPair( - PublicKeyAlgorithmTag algorithm, - AsymmetricCipherKeyPair keyPair, - DateTime time) - : this(algorithm, keyPair.Public, keyPair.Private, time) - { - } - - public PgpKeyPair( - PublicKeyAlgorithmTag algorithm, - AsymmetricKeyParameter pubKey, - AsymmetricKeyParameter privKey, - DateTime time) - { - this.pub = new PgpPublicKey(algorithm, pubKey, time); - this.priv = new PgpPrivateKey(pub.KeyId, pub.PublicKeyPacket, privKey); - } - - /// Create a key pair from a PgpPrivateKey and a PgpPublicKey. - /// The public key. - /// The private key. - public PgpKeyPair( - PgpPublicKey pub, - PgpPrivateKey priv) - { - this.pub = pub; - this.priv = priv; - } - - /// The keyId associated with this key pair. - public long KeyId - { - get { return pub.KeyId; } - } - - public PgpPublicKey PublicKey - { - get { return pub; } - } - - public PgpPrivateKey PrivateKey - { - get { return priv; } - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpKeyRingGenerator.cs b/bc-sharp-crypto/src/openpgp/PgpKeyRingGenerator.cs deleted file mode 100644 index 4f6a4b1..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpKeyRingGenerator.cs +++ /dev/null @@ -1,402 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// - /// Generator for a PGP master and subkey ring. - /// This class will generate both the secret and public key rings - /// - public class PgpKeyRingGenerator - { - private IList keys = Platform.CreateArrayList(); - private string id; - private SymmetricKeyAlgorithmTag encAlgorithm; - private HashAlgorithmTag hashAlgorithm; - private int certificationLevel; - private byte[] rawPassPhrase; - private bool useSha1; - private PgpKeyPair masterKey; - private PgpSignatureSubpacketVector hashedPacketVector; - private PgpSignatureSubpacketVector unhashedPacketVector; - private SecureRandom rand; - - /// - /// Create a new key ring generator using old style checksumming. It is recommended to use - /// SHA1 checksumming where possible. - /// - /// - /// Conversion of the passphrase characters to bytes is performed using Convert.ToByte(), which is - /// the historical behaviour of the library (1.7 and earlier). - /// - /// The certification level for keys on this ring. - /// The master key pair. - /// The id to be associated with the ring. - /// The algorithm to be used to protect secret keys. - /// The passPhrase to be used to protect secret keys. - /// Packets to be included in the certification hash. - /// Packets to be attached unhashed to the certification. - /// input secured random. - [Obsolete("Use version taking an explicit 'useSha1' parameter instead")] - public PgpKeyRingGenerator( - int certificationLevel, - PgpKeyPair masterKey, - string id, - SymmetricKeyAlgorithmTag encAlgorithm, - char[] passPhrase, - PgpSignatureSubpacketVector hashedPackets, - PgpSignatureSubpacketVector unhashedPackets, - SecureRandom rand) - : this(certificationLevel, masterKey, id, encAlgorithm, passPhrase, false, hashedPackets, unhashedPackets, rand) - { - } - - /// - /// Create a new key ring generator. - /// - /// - /// Conversion of the passphrase characters to bytes is performed using Convert.ToByte(), which is - /// the historical behaviour of the library (1.7 and earlier). - /// - /// The certification level for keys on this ring. - /// The master key pair. - /// The id to be associated with the ring. - /// The algorithm to be used to protect secret keys. - /// The passPhrase to be used to protect secret keys. - /// Checksum the secret keys with SHA1 rather than the older 16 bit checksum. - /// Packets to be included in the certification hash. - /// Packets to be attached unhashed to the certification. - /// input secured random. - public PgpKeyRingGenerator( - int certificationLevel, - PgpKeyPair masterKey, - string id, - SymmetricKeyAlgorithmTag encAlgorithm, - char[] passPhrase, - bool useSha1, - PgpSignatureSubpacketVector hashedPackets, - PgpSignatureSubpacketVector unhashedPackets, - SecureRandom rand) - : this(certificationLevel, masterKey, id, encAlgorithm, false, passPhrase, useSha1, hashedPackets, unhashedPackets, rand) - { - } - - /// - /// Create a new key ring generator. - /// - /// The certification level for keys on this ring. - /// The master key pair. - /// The id to be associated with the ring. - /// The algorithm to be used to protect secret keys. - /// - /// If true, conversion of the passphrase to bytes uses Encoding.UTF8.GetBytes(), otherwise the conversion - /// is performed using Convert.ToByte(), which is the historical behaviour of the library (1.7 and earlier). - /// - /// The passPhrase to be used to protect secret keys. - /// Checksum the secret keys with SHA1 rather than the older 16 bit checksum. - /// Packets to be included in the certification hash. - /// Packets to be attached unhashed to the certification. - /// input secured random. - public PgpKeyRingGenerator( - int certificationLevel, - PgpKeyPair masterKey, - string id, - SymmetricKeyAlgorithmTag encAlgorithm, - bool utf8PassPhrase, - char[] passPhrase, - bool useSha1, - PgpSignatureSubpacketVector hashedPackets, - PgpSignatureSubpacketVector unhashedPackets, - SecureRandom rand) - : this(certificationLevel, masterKey, id, encAlgorithm, - PgpUtilities.EncodePassPhrase(passPhrase, utf8PassPhrase), - useSha1, hashedPackets, unhashedPackets, rand) - { - } - - /// - /// Create a new key ring generator. - /// - /// The certification level for keys on this ring. - /// The master key pair. - /// The id to be associated with the ring. - /// The algorithm to be used to protect secret keys. - /// The passPhrase to be used to protect secret keys. - /// Checksum the secret keys with SHA1 rather than the older 16 bit checksum. - /// Packets to be included in the certification hash. - /// Packets to be attached unhashed to the certification. - /// input secured random. - public PgpKeyRingGenerator( - int certificationLevel, - PgpKeyPair masterKey, - string id, - SymmetricKeyAlgorithmTag encAlgorithm, - byte[] rawPassPhrase, - bool useSha1, - PgpSignatureSubpacketVector hashedPackets, - PgpSignatureSubpacketVector unhashedPackets, - SecureRandom rand) - { - this.certificationLevel = certificationLevel; - this.masterKey = masterKey; - this.id = id; - this.encAlgorithm = encAlgorithm; - this.rawPassPhrase = rawPassPhrase; - this.useSha1 = useSha1; - this.hashedPacketVector = hashedPackets; - this.unhashedPacketVector = unhashedPackets; - this.rand = rand; - - keys.Add(new PgpSecretKey(certificationLevel, masterKey, id, encAlgorithm, rawPassPhrase, false, useSha1, hashedPackets, unhashedPackets, rand)); - } - - /// - /// Create a new key ring generator. - /// - /// - /// Conversion of the passphrase characters to bytes is performed using Convert.ToByte(), which is - /// the historical behaviour of the library (1.7 and earlier). - /// - /// The certification level for keys on this ring. - /// The master key pair. - /// The id to be associated with the ring. - /// The algorithm to be used to protect secret keys. - /// The hash algorithm. - /// The passPhrase to be used to protect secret keys. - /// Checksum the secret keys with SHA1 rather than the older 16 bit checksum. - /// Packets to be included in the certification hash. - /// Packets to be attached unhashed to the certification. - /// input secured random. - public PgpKeyRingGenerator( - int certificationLevel, - PgpKeyPair masterKey, - string id, - SymmetricKeyAlgorithmTag encAlgorithm, - HashAlgorithmTag hashAlgorithm, - char[] passPhrase, - bool useSha1, - PgpSignatureSubpacketVector hashedPackets, - PgpSignatureSubpacketVector unhashedPackets, - SecureRandom rand) - : this(certificationLevel, masterKey, id, encAlgorithm, hashAlgorithm, false, passPhrase, useSha1, hashedPackets, unhashedPackets, rand) - { - } - - /// - /// Create a new key ring generator. - /// - /// The certification level for keys on this ring. - /// The master key pair. - /// The id to be associated with the ring. - /// The algorithm to be used to protect secret keys. - /// The hash algorithm. - /// - /// If true, conversion of the passphrase to bytes uses Encoding.UTF8.GetBytes(), otherwise the conversion - /// is performed using Convert.ToByte(), which is the historical behaviour of the library (1.7 and earlier). - /// - /// The passPhrase to be used to protect secret keys. - /// Checksum the secret keys with SHA1 rather than the older 16 bit checksum. - /// Packets to be included in the certification hash. - /// Packets to be attached unhashed to the certification. - /// input secured random. - public PgpKeyRingGenerator( - int certificationLevel, - PgpKeyPair masterKey, - string id, - SymmetricKeyAlgorithmTag encAlgorithm, - HashAlgorithmTag hashAlgorithm, - bool utf8PassPhrase, - char[] passPhrase, - bool useSha1, - PgpSignatureSubpacketVector hashedPackets, - PgpSignatureSubpacketVector unhashedPackets, - SecureRandom rand) - : this(certificationLevel, masterKey, id, encAlgorithm, hashAlgorithm, - PgpUtilities.EncodePassPhrase(passPhrase, utf8PassPhrase), - useSha1, hashedPackets, unhashedPackets, rand) - { - } - - /// - /// Create a new key ring generator. - /// - /// - /// Allows the caller to handle the encoding of the passphrase to bytes. - /// - /// The certification level for keys on this ring. - /// The master key pair. - /// The id to be associated with the ring. - /// The algorithm to be used to protect secret keys. - /// The hash algorithm. - /// The passPhrase to be used to protect secret keys. - /// Checksum the secret keys with SHA1 rather than the older 16 bit checksum. - /// Packets to be included in the certification hash. - /// Packets to be attached unhashed to the certification. - /// input secured random. - public PgpKeyRingGenerator( - int certificationLevel, - PgpKeyPair masterKey, - string id, - SymmetricKeyAlgorithmTag encAlgorithm, - HashAlgorithmTag hashAlgorithm, - byte[] rawPassPhrase, - bool useSha1, - PgpSignatureSubpacketVector hashedPackets, - PgpSignatureSubpacketVector unhashedPackets, - SecureRandom rand) - { - this.certificationLevel = certificationLevel; - this.masterKey = masterKey; - this.id = id; - this.encAlgorithm = encAlgorithm; - this.rawPassPhrase = rawPassPhrase; - this.useSha1 = useSha1; - this.hashedPacketVector = hashedPackets; - this.unhashedPacketVector = unhashedPackets; - this.rand = rand; - this.hashAlgorithm = hashAlgorithm; - - keys.Add(new PgpSecretKey(certificationLevel, masterKey, id, encAlgorithm, hashAlgorithm, rawPassPhrase, false, useSha1, hashedPackets, unhashedPackets, rand)); - } - - /// Add a subkey to the key ring to be generated with default certification. - public void AddSubKey( - PgpKeyPair keyPair) - { - AddSubKey(keyPair, this.hashedPacketVector, this.unhashedPacketVector); - } - - - /// - /// Add a subkey to the key ring to be generated with default certification. - /// - /// The key pair. - /// The hash algorithm. - public void AddSubKey(PgpKeyPair keyPair, HashAlgorithmTag hashAlgorithm) - { - this.AddSubKey(keyPair, this.hashedPacketVector, this.unhashedPacketVector, hashAlgorithm); - } - - /// - /// Add a subkey with specific hashed and unhashed packets associated with it and - /// default certification. - /// - /// Public/private key pair. - /// Hashed packet values to be included in certification. - /// Unhashed packets values to be included in certification. - /// - public void AddSubKey( - PgpKeyPair keyPair, - PgpSignatureSubpacketVector hashedPackets, - PgpSignatureSubpacketVector unhashedPackets) - { - try - { - PgpSignatureGenerator sGen = new PgpSignatureGenerator( - masterKey.PublicKey.Algorithm, HashAlgorithmTag.Sha1); - - // - // Generate the certification - // - sGen.InitSign(PgpSignature.SubkeyBinding, masterKey.PrivateKey); - - sGen.SetHashedSubpackets(hashedPackets); - sGen.SetUnhashedSubpackets(unhashedPackets); - - IList subSigs = Platform.CreateArrayList(); - - subSigs.Add(sGen.GenerateCertification(masterKey.PublicKey, keyPair.PublicKey)); - - keys.Add(new PgpSecretKey(keyPair.PrivateKey, new PgpPublicKey(keyPair.PublicKey, null, subSigs), encAlgorithm, - rawPassPhrase, false, useSha1, rand, false)); - } - catch (PgpException e) - { - throw e; - } - catch (Exception e) - { - throw new PgpException("exception adding subkey: ", e); - } - } - - /// - /// Add a subkey with specific hashed and unhashed packets associated with it and - /// default certification. - /// - /// Public/private key pair. - /// Hashed packet values to be included in certification. - /// Unhashed packets values to be included in certification. - /// The hash algorithm. - /// exception adding subkey: - /// - public void AddSubKey( - PgpKeyPair keyPair, - PgpSignatureSubpacketVector hashedPackets, - PgpSignatureSubpacketVector unhashedPackets, - HashAlgorithmTag hashAlgorithm) - { - try - { - PgpSignatureGenerator sGen = new PgpSignatureGenerator(masterKey.PublicKey.Algorithm, hashAlgorithm); - - // - // Generate the certification - // - sGen.InitSign(PgpSignature.SubkeyBinding, masterKey.PrivateKey); - - sGen.SetHashedSubpackets(hashedPackets); - sGen.SetUnhashedSubpackets(unhashedPackets); - - IList subSigs = Platform.CreateArrayList(); - subSigs.Add(sGen.GenerateCertification(masterKey.PublicKey, keyPair.PublicKey)); - - keys.Add(new PgpSecretKey(keyPair.PrivateKey, new PgpPublicKey(keyPair.PublicKey, null, subSigs), encAlgorithm, - rawPassPhrase, false, useSha1, rand, false)); - } - catch (PgpException) - { - throw; - } - catch (Exception e) - { - throw new PgpException("exception adding subkey: ", e); - } - } - - - /// Return the secret key ring. - public PgpSecretKeyRing GenerateSecretKeyRing() - { - return new PgpSecretKeyRing(keys); - } - - /// Return the public key ring that corresponds to the secret key ring. - public PgpPublicKeyRing GeneratePublicKeyRing() - { - IList pubKeys = Platform.CreateArrayList(); - - IEnumerator enumerator = keys.GetEnumerator(); - enumerator.MoveNext(); - - PgpSecretKey pgpSecretKey = (PgpSecretKey) enumerator.Current; - pubKeys.Add(pgpSecretKey.PublicKey); - - while (enumerator.MoveNext()) - { - pgpSecretKey = (PgpSecretKey) enumerator.Current; - - PgpPublicKey k = new PgpPublicKey(pgpSecretKey.PublicKey); - k.publicPk = new PublicSubkeyPacket( - k.Algorithm, k.CreationTime, k.publicPk.Key); - - pubKeys.Add(k); - } - - return new PgpPublicKeyRing(pubKeys); - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpKeyValidationException.cs b/bc-sharp-crypto/src/openpgp/PgpKeyValidationException.cs deleted file mode 100644 index 383ae57..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpKeyValidationException.cs +++ /dev/null @@ -1,18 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// - /// Thrown if the key checksum is invalid. - /// -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class PgpKeyValidationException - : PgpException - { - public PgpKeyValidationException() : base() {} - public PgpKeyValidationException(string message) : base(message) {} - public PgpKeyValidationException(string message, Exception exception) : base(message, exception) {} - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpLiteralData.cs b/bc-sharp-crypto/src/openpgp/PgpLiteralData.cs deleted file mode 100644 index 79bbc39..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpLiteralData.cs +++ /dev/null @@ -1,63 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities.Date; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// Class for processing literal data objects. - public class PgpLiteralData - : PgpObject - { - public const char Binary = 'b'; - public const char Text = 't'; - public const char Utf8 = 'u'; - - /// The special name indicating a "for your eyes only" packet. - public const string Console = "_CONSOLE"; - - private LiteralDataPacket data; - - public PgpLiteralData( - BcpgInputStream bcpgInput) - { - data = (LiteralDataPacket) bcpgInput.ReadPacket(); - } - - /// The format of the data stream - Binary or Text - public int Format - { - get { return data.Format; } - } - - /// The file name that's associated with the data stream. - public string FileName - { - get { return data.FileName; } - } - - /// Return the file name as an unintrepreted byte array. - public byte[] GetRawFileName() - { - return data.GetRawFileName(); - } - - /// The modification time for the file. - public DateTime ModificationTime - { - get { return DateTimeUtilities.UnixMsToDateTime(data.ModificationTime); } - } - - /// The raw input stream for the data stream. - public Stream GetInputStream() - { - return data.GetInputStream(); - } - - /// The input stream representing the data stream. - public Stream GetDataStream() - { - return GetInputStream(); - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpLiteralDataGenerator.cs b/bc-sharp-crypto/src/openpgp/PgpLiteralDataGenerator.cs deleted file mode 100644 index 7672659..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpLiteralDataGenerator.cs +++ /dev/null @@ -1,182 +0,0 @@ -using System; -using System.IO; -using System.Text; - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Date; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// Class for producing literal data packets. - public class PgpLiteralDataGenerator - : IStreamGenerator - { - public const char Binary = PgpLiteralData.Binary; - public const char Text = PgpLiteralData.Text; - public const char Utf8 = PgpLiteralData.Utf8; - - /// The special name indicating a "for your eyes only" packet. - public const string Console = PgpLiteralData.Console; - - private BcpgOutputStream pkOut; - private bool oldFormat; - - public PgpLiteralDataGenerator() - { - } - - /// - /// Generates literal data objects in the old format. - /// This is important if you need compatibility with PGP 2.6.x. - /// - /// If true, uses old format. - public PgpLiteralDataGenerator( - bool oldFormat) - { - this.oldFormat = oldFormat; - } - - private void WriteHeader( - BcpgOutputStream outStr, - char format, - byte[] encName, - long modificationTime) - { - outStr.Write( - (byte) format, - (byte) encName.Length); - - outStr.Write(encName); - - long modDate = modificationTime / 1000L; - - outStr.Write( - (byte)(modDate >> 24), - (byte)(modDate >> 16), - (byte)(modDate >> 8), - (byte)modDate); - } - - /// - ///

    - /// Open a literal data packet, returning a stream to store the data inside the packet. - ///

    - ///

    - /// The stream created can be closed off by either calling Close() - /// on the stream or Close() on the generator. Closing the returned - /// stream does not close off the Stream parameter outStr. - ///

    - ///     - /// The stream we want the packet in. - /// The format we are using. - /// The name of the 'file'. - /// The length of the data we will write. - /// The time of last modification we want stored. - public Stream Open( - Stream outStr, - char format, - string name, - long length, - DateTime modificationTime) - { - if (pkOut != null) - throw new InvalidOperationException("generator already in open state"); - if (outStr == null) - throw new ArgumentNullException("outStr"); - - // Do this first, since it might throw an exception - long unixMs = DateTimeUtilities.DateTimeToUnixMs(modificationTime); - - byte[] encName = Strings.ToUtf8ByteArray(name); - - pkOut = new BcpgOutputStream(outStr, PacketTag.LiteralData, - length + 2 + encName.Length + 4, oldFormat); - - WriteHeader(pkOut, format, encName, unixMs); - - return new WrappedGeneratorStream(this, pkOut); - } - - /// - ///

    - /// Open a literal data packet, returning a stream to store the data inside the packet, - /// as an indefinite length stream. The stream is written out as a series of partial - /// packets with a chunk size determined by the size of the passed in buffer. - ///

    - ///

    - /// The stream created can be closed off by either calling Close() - /// on the stream or Close() on the generator. Closing the returned - /// stream does not close off the Stream parameter outStr. - ///

    - ///

    - /// Note: if the buffer is not a power of 2 in length only the largest power of 2 - /// bytes worth of the buffer will be used.

    - ///     - /// The stream we want the packet in. - /// The format we are using. - /// The name of the 'file'. - /// The time of last modification we want stored. - /// The buffer to use for collecting data to put into chunks. - public Stream Open( - Stream outStr, - char format, - string name, - DateTime modificationTime, - byte[] buffer) - { - if (pkOut != null) - throw new InvalidOperationException("generator already in open state"); - if (outStr == null) - throw new ArgumentNullException("outStr"); - - // Do this first, since it might throw an exception - long unixMs = DateTimeUtilities.DateTimeToUnixMs(modificationTime); - - byte[] encName = Strings.ToUtf8ByteArray(name); - - pkOut = new BcpgOutputStream(outStr, PacketTag.LiteralData, buffer); - - WriteHeader(pkOut, format, encName, unixMs); - - return new WrappedGeneratorStream(this, pkOut); - } - -#if !PORTABLE || DOTNET - /// - ///

    - /// Open a literal data packet for the passed in FileInfo object, returning - /// an output stream for saving the file contents. - ///

    - ///

    - /// The stream created can be closed off by either calling Close() - /// on the stream or Close() on the generator. Closing the returned - /// stream does not close off the Stream parameter outStr. - ///

    - ///     - /// The stream we want the packet in. - /// The format we are using. - /// The FileInfo object containg the packet details. - public Stream Open( - Stream outStr, - char format, - FileInfo file) - { - return Open(outStr, format, file.Name, file.Length, file.LastWriteTime); - } -#endif - - /// - /// Close the literal data packet - this is equivalent to calling Close() - /// on the stream returned by the Open() method. - /// - public void Close() - { - if (pkOut != null) - { - pkOut.Finish(); - pkOut.Flush(); - pkOut = null; - } - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpMarker.cs b/bc-sharp-crypto/src/openpgp/PgpMarker.cs deleted file mode 100644 index 733e4e9..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpMarker.cs +++ /dev/null @@ -1,18 +0,0 @@ -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// - /// A PGP marker packet - in general these should be ignored other than where - /// the idea is to preserve the original input stream. - /// - public class PgpMarker - : PgpObject - { - private readonly MarkerPacket p; - - public PgpMarker( - BcpgInputStream bcpgIn) - { - p = (MarkerPacket) bcpgIn.ReadPacket(); - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpObjectFactory.cs b/bc-sharp-crypto/src/openpgp/PgpObjectFactory.cs deleted file mode 100644 index c5c6fcb..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpObjectFactory.cs +++ /dev/null @@ -1,143 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// - /// General class for reading a PGP object stream. - ///

    - /// Note: if this class finds a PgpPublicKey or a PgpSecretKey it - /// will create a PgpPublicKeyRing, or a PgpSecretKeyRing for each - /// key found. If all you are trying to do is read a key ring file use - /// either PgpPublicKeyRingBundle or PgpSecretKeyRingBundle.

    - ///     - public class PgpObjectFactory - { - private readonly BcpgInputStream bcpgIn; - - public PgpObjectFactory( - Stream inputStream) - { - this.bcpgIn = BcpgInputStream.Wrap(inputStream); - } - - public PgpObjectFactory( - byte[] bytes) - : this(new MemoryStream(bytes, false)) - { - } - - /// Return the next object in the stream, or null if the end is reached. - /// On a parse error - public PgpObject NextPgpObject() - { - PacketTag tag = bcpgIn.NextPacketTag(); - - if ((int) tag == -1) return null; - - switch (tag) - { - case PacketTag.Signature: - { - IList l = Platform.CreateArrayList(); - - while (bcpgIn.NextPacketTag() == PacketTag.Signature) - { - try - { - l.Add(new PgpSignature(bcpgIn)); - } - catch (PgpException e) - { - throw new IOException("can't create signature object: " + e); - } - } - - PgpSignature[] sigs = new PgpSignature[l.Count]; - for (int i = 0; i < l.Count; ++i) - { - sigs[i] = (PgpSignature)l[i]; - } - return new PgpSignatureList(sigs); - } - case PacketTag.SecretKey: - try - { - return new PgpSecretKeyRing(bcpgIn); - } - catch (PgpException e) - { - throw new IOException("can't create secret key object: " + e); - } - case PacketTag.PublicKey: - return new PgpPublicKeyRing(bcpgIn); - // TODO Make PgpPublicKey a PgpObject or return a PgpPublicKeyRing -// case PacketTag.PublicSubkey: -// return PgpPublicKeyRing.ReadSubkey(bcpgIn); - case PacketTag.CompressedData: - return new PgpCompressedData(bcpgIn); - case PacketTag.LiteralData: - return new PgpLiteralData(bcpgIn); - case PacketTag.PublicKeyEncryptedSession: - case PacketTag.SymmetricKeyEncryptedSessionKey: - return new PgpEncryptedDataList(bcpgIn); - case PacketTag.OnePassSignature: - { - IList l = Platform.CreateArrayList(); - - while (bcpgIn.NextPacketTag() == PacketTag.OnePassSignature) - { - try - { - l.Add(new PgpOnePassSignature(bcpgIn)); - } - catch (PgpException e) - { - throw new IOException("can't create one pass signature object: " + e); - } - } - - PgpOnePassSignature[] sigs = new PgpOnePassSignature[l.Count]; - for (int i = 0; i < l.Count; ++i) - { - sigs[i] = (PgpOnePassSignature)l[i]; - } - return new PgpOnePassSignatureList(sigs); - } - case PacketTag.Marker: - return new PgpMarker(bcpgIn); - case PacketTag.Experimental1: - case PacketTag.Experimental2: - case PacketTag.Experimental3: - case PacketTag.Experimental4: - return new PgpExperimental(bcpgIn); - } - - throw new IOException("unknown object in stream " + bcpgIn.NextPacketTag()); - } - - [Obsolete("Use NextPgpObject() instead")] - public object NextObject() - { - return NextPgpObject(); - } - - /// - /// Return all available objects in a list. - /// - /// An IList containing all objects from this factory, in order. - public IList AllPgpObjects() - { - IList result = Platform.CreateArrayList(); - PgpObject pgpObject; - while ((pgpObject = NextPgpObject()) != null) - { - result.Add(pgpObject); - } - return result; - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpOnePassSignature.cs b/bc-sharp-crypto/src/openpgp/PgpOnePassSignature.cs deleted file mode 100644 index 68fc599..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpOnePassSignature.cs +++ /dev/null @@ -1,179 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// A one pass signature object. - public class PgpOnePassSignature - { - private OnePassSignaturePacket sigPack; - private int signatureType; - private ISigner sig; - private byte lastb; - - internal PgpOnePassSignature( - BcpgInputStream bcpgInput) - : this((OnePassSignaturePacket) bcpgInput.ReadPacket()) - { - } - - internal PgpOnePassSignature( - OnePassSignaturePacket sigPack) - { - this.sigPack = sigPack; - this.signatureType = sigPack.SignatureType; - } - - /// Initialise the signature object for verification. - public void InitVerify( - PgpPublicKey pubKey) - { - lastb = 0; - - try - { - sig = SignerUtilities.GetSigner( - PgpUtilities.GetSignatureName(sigPack.KeyAlgorithm, sigPack.HashAlgorithm)); - } - catch (Exception e) - { - throw new PgpException("can't set up signature object.", e); - } - - try - { - sig.Init(false, pubKey.GetKey()); - } - catch (InvalidKeyException e) - { - throw new PgpException("invalid key.", e); - } - } - - public void Update( - byte b) - { - if (signatureType == PgpSignature.CanonicalTextDocument) - { - doCanonicalUpdateByte(b); - } - else - { - sig.Update(b); - } - } - - private void doCanonicalUpdateByte( - byte b) - { - if (b == '\r') - { - doUpdateCRLF(); - } - else if (b == '\n') - { - if (lastb != '\r') - { - doUpdateCRLF(); - } - } - else - { - sig.Update(b); - } - - lastb = b; - } - - private void doUpdateCRLF() - { - sig.Update((byte)'\r'); - sig.Update((byte)'\n'); - } - - public void Update( - byte[] bytes) - { - if (signatureType == PgpSignature.CanonicalTextDocument) - { - for (int i = 0; i != bytes.Length; i++) - { - doCanonicalUpdateByte(bytes[i]); - } - } - else - { - sig.BlockUpdate(bytes, 0, bytes.Length); - } - } - - public void Update( - byte[] bytes, - int off, - int length) - { - if (signatureType == PgpSignature.CanonicalTextDocument) - { - int finish = off + length; - - for (int i = off; i != finish; i++) - { - doCanonicalUpdateByte(bytes[i]); - } - } - else - { - sig.BlockUpdate(bytes, off, length); - } - } - - /// Verify the calculated signature against the passed in PgpSignature. - public bool Verify( - PgpSignature pgpSig) - { - byte[] trailer = pgpSig.GetSignatureTrailer(); - - sig.BlockUpdate(trailer, 0, trailer.Length); - - return sig.VerifySignature(pgpSig.GetSignature()); - } - - public long KeyId - { - get { return sigPack.KeyId; } - } - - public int SignatureType - { - get { return sigPack.SignatureType; } - } - - public HashAlgorithmTag HashAlgorithm - { - get { return sigPack.HashAlgorithm; } - } - - public PublicKeyAlgorithmTag KeyAlgorithm - { - get { return sigPack.KeyAlgorithm; } - } - - public byte[] GetEncoded() - { - MemoryStream bOut = new MemoryStream(); - - Encode(bOut); - - return bOut.ToArray(); - } - - public void Encode( - Stream outStr) - { - BcpgOutputStream.Wrap(outStr).WritePacket(sigPack); - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpOnePassSignatureList.cs b/bc-sharp-crypto/src/openpgp/PgpOnePassSignatureList.cs deleted file mode 100644 index 37c4288..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpOnePassSignatureList.cs +++ /dev/null @@ -1,51 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// Holder for a list of PgpOnePassSignature objects. - public class PgpOnePassSignatureList - : PgpObject - { - private readonly PgpOnePassSignature[] sigs; - - public PgpOnePassSignatureList( - PgpOnePassSignature[] sigs) - { - this.sigs = (PgpOnePassSignature[]) sigs.Clone(); - } - - public PgpOnePassSignatureList( - PgpOnePassSignature sig) - { - this.sigs = new PgpOnePassSignature[]{ sig }; - } - - public PgpOnePassSignature this[int index] - { - get { return sigs[index]; } - } - - [Obsolete("Use 'object[index]' syntax instead")] - public PgpOnePassSignature Get( - int index) - { - return this[index]; - } - - [Obsolete("Use 'Count' property instead")] - public int Size - { - get { return sigs.Length; } - } - - public int Count - { - get { return sigs.Length; } - } - - public bool IsEmpty - { - get { return (sigs.Length == 0); } - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpPad.cs b/bc-sharp-crypto/src/openpgp/PgpPad.cs deleted file mode 100644 index 48f7f2f..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpPad.cs +++ /dev/null @@ -1,45 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// Padding functions. - public sealed class PgpPad - { - private PgpPad() - { - } - - public static byte[] PadSessionData(byte[] sessionInfo) - { - byte[] result = new byte[40]; - - Array.Copy(sessionInfo, 0, result, 0, sessionInfo.Length); - - byte padValue = (byte)(result.Length - sessionInfo.Length); - - for (int i = sessionInfo.Length; i != result.Length; i++) - { - result[i] = padValue; - } - - return result; - } - - public static byte[] UnpadSessionData(byte[] encoded) - { - byte padValue = encoded[encoded.Length - 1]; - - for (int i = encoded.Length - padValue; i != encoded.Length; i++) - { - if (encoded[i] != padValue) - throw new PgpException("bad padding found in session data"); - } - - byte[] taggedKey = new byte[encoded.Length - padValue]; - - Array.Copy(encoded, 0, taggedKey, 0, taggedKey.Length); - - return taggedKey; - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpPbeEncryptedData.cs b/bc-sharp-crypto/src/openpgp/PgpPbeEncryptedData.cs deleted file mode 100644 index f43f2f5..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpPbeEncryptedData.cs +++ /dev/null @@ -1,160 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.IO; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// A password based encryption object. - public class PgpPbeEncryptedData - : PgpEncryptedData - { - private readonly SymmetricKeyEncSessionPacket keyData; - - internal PgpPbeEncryptedData( - SymmetricKeyEncSessionPacket keyData, - InputStreamPacket encData) - : base(encData) - { - this.keyData = keyData; - } - - /// Return the raw input stream for the data stream. - public override Stream GetInputStream() - { - return encData.GetInputStream(); - } - - /// Return the decrypted input stream, using the passed in passphrase. - /// - /// Conversion of the passphrase characters to bytes is performed using Convert.ToByte(), which is - /// the historical behaviour of the library (1.7 and earlier). - /// - public Stream GetDataStream(char[] passPhrase) - { - return DoGetDataStream(PgpUtilities.EncodePassPhrase(passPhrase, false), true); - } - - /// Return the decrypted input stream, using the passed in passphrase. - /// - /// The passphrase is encoded to bytes using UTF8 (Encoding.UTF8.GetBytes). - /// - public Stream GetDataStreamUtf8(char[] passPhrase) - { - return DoGetDataStream(PgpUtilities.EncodePassPhrase(passPhrase, true), true); - } - - /// Return the decrypted input stream, using the passed in passphrase. - /// - /// Allows the caller to handle the encoding of the passphrase to bytes. - /// - public Stream GetDataStreamRaw(byte[] rawPassPhrase) - { - return DoGetDataStream(rawPassPhrase, false); - } - - internal Stream DoGetDataStream(byte[] rawPassPhrase, bool clearPassPhrase) - { - try - { - SymmetricKeyAlgorithmTag keyAlgorithm = keyData.EncAlgorithm; - - KeyParameter key = PgpUtilities.DoMakeKeyFromPassPhrase( - keyAlgorithm, keyData.S2k, rawPassPhrase, clearPassPhrase); - - byte[] secKeyData = keyData.GetSecKeyData(); - if (secKeyData != null && secKeyData.Length > 0) - { - IBufferedCipher keyCipher = CipherUtilities.GetCipher( - PgpUtilities.GetSymmetricCipherName(keyAlgorithm) + "/CFB/NoPadding"); - - keyCipher.Init(false, - new ParametersWithIV(key, new byte[keyCipher.GetBlockSize()])); - - byte[] keyBytes = keyCipher.DoFinal(secKeyData); - - keyAlgorithm = (SymmetricKeyAlgorithmTag) keyBytes[0]; - - key = ParameterUtilities.CreateKeyParameter( - PgpUtilities.GetSymmetricCipherName(keyAlgorithm), - keyBytes, 1, keyBytes.Length - 1); - } - - - IBufferedCipher c = CreateStreamCipher(keyAlgorithm); - - byte[] iv = new byte[c.GetBlockSize()]; - - c.Init(false, new ParametersWithIV(key, iv)); - - encStream = BcpgInputStream.Wrap(new CipherStream(encData.GetInputStream(), c, null)); - - if (encData is SymmetricEncIntegrityPacket) - { - truncStream = new TruncatedStream(encStream); - - string digestName = PgpUtilities.GetDigestName(HashAlgorithmTag.Sha1); - IDigest digest = DigestUtilities.GetDigest(digestName); - - encStream = new DigestStream(truncStream, digest, null); - } - - if (Streams.ReadFully(encStream, iv, 0, iv.Length) < iv.Length) - throw new EndOfStreamException("unexpected end of stream."); - - int v1 = encStream.ReadByte(); - int v2 = encStream.ReadByte(); - - if (v1 < 0 || v2 < 0) - throw new EndOfStreamException("unexpected end of stream."); - - - // Note: the oracle attack on the "quick check" bytes is not deemed - // a security risk for PBE (see PgpPublicKeyEncryptedData) - - bool repeatCheckPassed = - iv[iv.Length - 2] == (byte)v1 - && iv[iv.Length - 1] == (byte)v2; - - // Note: some versions of PGP appear to produce 0 for the extra - // bytes rather than repeating the two previous bytes - bool zeroesCheckPassed = - v1 == 0 - && v2 == 0; - - if (!repeatCheckPassed && !zeroesCheckPassed) - { - throw new PgpDataValidationException("quick check failed."); - } - - - return encStream; - } - catch (PgpException e) - { - throw e; - } - catch (Exception e) - { - throw new PgpException("Exception creating cipher", e); - } - } - - private IBufferedCipher CreateStreamCipher( - SymmetricKeyAlgorithmTag keyAlgorithm) - { - string mode = (encData is SymmetricEncIntegrityPacket) - ? "CFB" - : "OpenPGPCFB"; - - string cName = PgpUtilities.GetSymmetricCipherName(keyAlgorithm) - + "/" + mode + "/NoPadding"; - - return CipherUtilities.GetCipher(cName); - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpPrivateKey.cs b/bc-sharp-crypto/src/openpgp/PgpPrivateKey.cs deleted file mode 100644 index 61487a5..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpPrivateKey.cs +++ /dev/null @@ -1,51 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// General class to contain a private key for use with other OpenPGP objects. - public class PgpPrivateKey - { - private readonly long keyID; - private readonly PublicKeyPacket publicKeyPacket; - private readonly AsymmetricKeyParameter privateKey; - - /// - /// Create a PgpPrivateKey from a keyID, the associated public data packet, and a regular private key. - /// - /// ID of the corresponding public key. - /// the public key data packet to be associated with this private key. - /// the private key data packet to be associated with this private key. - public PgpPrivateKey( - long keyID, - PublicKeyPacket publicKeyPacket, - AsymmetricKeyParameter privateKey) - { - if (!privateKey.IsPrivate) - throw new ArgumentException("Expected a private key", "privateKey"); - - this.keyID = keyID; - this.publicKeyPacket = publicKeyPacket; - this.privateKey = privateKey; - } - - /// The keyId associated with the contained private key. - public long KeyId - { - get { return keyID; } - } - - /// The public key packet associated with this private key, if available. - public PublicKeyPacket PublicKeyPacket - { - get { return publicKeyPacket; } - } - - /// The contained private key. - public AsymmetricKeyParameter Key - { - get { return privateKey; } - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpPublicKey.cs b/bc-sharp-crypto/src/openpgp/PgpPublicKey.cs deleted file mode 100644 index fc125e8..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpPublicKey.cs +++ /dev/null @@ -1,980 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1.Sec; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Generators; -using Org.BouncyCastle.Crypto.IO; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// General class to handle a PGP public key object. - public class PgpPublicKey - { - public static byte[] CalculateFingerprint(PublicKeyPacket publicPk) - { - IBcpgKey key = publicPk.Key; - IDigest digest; - - if (publicPk.Version <= 3) - { - RsaPublicBcpgKey rK = (RsaPublicBcpgKey)key; - - try - { - digest = DigestUtilities.GetDigest("MD5"); - UpdateDigest(digest, rK.Modulus); - UpdateDigest(digest, rK.PublicExponent); - } - catch (Exception e) - { - throw new PgpException("can't encode key components: " + e.Message, e); - } - } - else - { - try - { - byte[] kBytes = publicPk.GetEncodedContents(); - - digest = DigestUtilities.GetDigest("SHA1"); - - digest.Update(0x99); - digest.Update((byte)(kBytes.Length >> 8)); - digest.Update((byte)kBytes.Length); - digest.BlockUpdate(kBytes, 0, kBytes.Length); - } - catch (Exception e) - { - throw new PgpException("can't encode key components: " + e.Message, e); - } - } - - return DigestUtilities.DoFinal(digest); - } - - private static void UpdateDigest(IDigest d, BigInteger b) - { - byte[] bytes = b.ToByteArrayUnsigned(); - d.BlockUpdate(bytes, 0, bytes.Length); - } - - private static readonly int[] MasterKeyCertificationTypes = new int[] - { - PgpSignature.PositiveCertification, - PgpSignature.CasualCertification, - PgpSignature.NoCertification, - PgpSignature.DefaultCertification - }; - - private long keyId; - private byte[] fingerprint; - private int keyStrength; - - internal PublicKeyPacket publicPk; - internal TrustPacket trustPk; - internal IList keySigs = Platform.CreateArrayList(); - internal IList ids = Platform.CreateArrayList(); - internal IList idTrusts = Platform.CreateArrayList(); - internal IList idSigs = Platform.CreateArrayList(); - internal IList subSigs; - - private void Init() - { - IBcpgKey key = publicPk.Key; - - this.fingerprint = CalculateFingerprint(publicPk); - - if (publicPk.Version <= 3) - { - RsaPublicBcpgKey rK = (RsaPublicBcpgKey) key; - - this.keyId = rK.Modulus.LongValue; - this.keyStrength = rK.Modulus.BitLength; - } - else - { - this.keyId = (long)(((ulong)fingerprint[fingerprint.Length - 8] << 56) - | ((ulong)fingerprint[fingerprint.Length - 7] << 48) - | ((ulong)fingerprint[fingerprint.Length - 6] << 40) - | ((ulong)fingerprint[fingerprint.Length - 5] << 32) - | ((ulong)fingerprint[fingerprint.Length - 4] << 24) - | ((ulong)fingerprint[fingerprint.Length - 3] << 16) - | ((ulong)fingerprint[fingerprint.Length - 2] << 8) - | (ulong)fingerprint[fingerprint.Length - 1]); - - if (key is RsaPublicBcpgKey) - { - this.keyStrength = ((RsaPublicBcpgKey)key).Modulus.BitLength; - } - else if (key is DsaPublicBcpgKey) - { - this.keyStrength = ((DsaPublicBcpgKey)key).P.BitLength; - } - else if (key is ElGamalPublicBcpgKey) - { - this.keyStrength = ((ElGamalPublicBcpgKey)key).P.BitLength; - } - else if (key is ECPublicBcpgKey) - { - this.keyStrength = ECKeyPairGenerator.FindECCurveByOid(((ECPublicBcpgKey)key).CurveOid).Curve.FieldSize; - } - } - } - - /// - /// Create a PgpPublicKey from the passed in lightweight one. - /// - /// - /// Note: the time passed in affects the value of the key's keyId, so you probably only want - /// to do this once for a lightweight key, or make sure you keep track of the time you used. - /// - /// Asymmetric algorithm type representing the public key. - /// Actual public key to associate. - /// Date of creation. - /// If pubKey is not public. - /// On key creation problem. - public PgpPublicKey( - PublicKeyAlgorithmTag algorithm, - AsymmetricKeyParameter pubKey, - DateTime time) - { - if (pubKey.IsPrivate) - throw new ArgumentException("Expected a public key", "pubKey"); - - IBcpgKey bcpgKey; - if (pubKey is RsaKeyParameters) - { - RsaKeyParameters rK = (RsaKeyParameters) pubKey; - - bcpgKey = new RsaPublicBcpgKey(rK.Modulus, rK.Exponent); - } - else if (pubKey is DsaPublicKeyParameters) - { - DsaPublicKeyParameters dK = (DsaPublicKeyParameters) pubKey; - DsaParameters dP = dK.Parameters; - - bcpgKey = new DsaPublicBcpgKey(dP.P, dP.Q, dP.G, dK.Y); - } - else if (pubKey is ECPublicKeyParameters) - { - ECPublicKeyParameters ecK = (ECPublicKeyParameters)pubKey; - - if (algorithm == PublicKeyAlgorithmTag.ECDH) - { - bcpgKey = new ECDHPublicBcpgKey(ecK.PublicKeyParamSet, ecK.Q, HashAlgorithmTag.Sha256, SymmetricKeyAlgorithmTag.Aes128); - } - else if (algorithm == PublicKeyAlgorithmTag.ECDsa) - { - bcpgKey = new ECDsaPublicBcpgKey(ecK.PublicKeyParamSet, ecK.Q); - } - else - { - throw new PgpException("unknown EC algorithm"); - } - } - else if (pubKey is ElGamalPublicKeyParameters) - { - ElGamalPublicKeyParameters eK = (ElGamalPublicKeyParameters) pubKey; - ElGamalParameters eS = eK.Parameters; - - bcpgKey = new ElGamalPublicBcpgKey(eS.P, eS.G, eK.Y); - } - else - { - throw new PgpException("unknown key class"); - } - - this.publicPk = new PublicKeyPacket(algorithm, time, bcpgKey); - this.ids = Platform.CreateArrayList(); - this.idSigs = Platform.CreateArrayList(); - - try - { - Init(); - } - catch (IOException e) - { - throw new PgpException("exception calculating keyId", e); - } - } - - public PgpPublicKey(PublicKeyPacket publicPk) - : this(publicPk, Platform.CreateArrayList(), Platform.CreateArrayList()) - { - } - - /// Constructor for a sub-key. - internal PgpPublicKey( - PublicKeyPacket publicPk, - TrustPacket trustPk, - IList sigs) - { - this.publicPk = publicPk; - this.trustPk = trustPk; - this.subSigs = sigs; - - Init(); - } - - internal PgpPublicKey( - PgpPublicKey key, - TrustPacket trust, - IList subSigs) - { - this.publicPk = key.publicPk; - this.trustPk = trust; - this.subSigs = subSigs; - - this.fingerprint = key.fingerprint; - this.keyId = key.keyId; - this.keyStrength = key.keyStrength; - } - - /// Copy constructor. - /// The public key to copy. - internal PgpPublicKey( - PgpPublicKey pubKey) - { - this.publicPk = pubKey.publicPk; - - this.keySigs = Platform.CreateArrayList(pubKey.keySigs); - this.ids = Platform.CreateArrayList(pubKey.ids); - this.idTrusts = Platform.CreateArrayList(pubKey.idTrusts); - this.idSigs = Platform.CreateArrayList(pubKey.idSigs.Count); - for (int i = 0; i != pubKey.idSigs.Count; i++) - { - this.idSigs.Add(Platform.CreateArrayList((IList)pubKey.idSigs[i])); - } - - if (pubKey.subSigs != null) - { - this.subSigs = Platform.CreateArrayList(pubKey.subSigs.Count); - for (int i = 0; i != pubKey.subSigs.Count; i++) - { - this.subSigs.Add(pubKey.subSigs[i]); - } - } - - this.fingerprint = pubKey.fingerprint; - this.keyId = pubKey.keyId; - this.keyStrength = pubKey.keyStrength; - } - - internal PgpPublicKey( - PublicKeyPacket publicPk, - TrustPacket trustPk, - IList keySigs, - IList ids, - IList idTrusts, - IList idSigs) - { - this.publicPk = publicPk; - this.trustPk = trustPk; - this.keySigs = keySigs; - this.ids = ids; - this.idTrusts = idTrusts; - this.idSigs = idSigs; - - Init(); - } - - internal PgpPublicKey( - PublicKeyPacket publicPk, - IList ids, - IList idSigs) - { - this.publicPk = publicPk; - this.ids = ids; - this.idSigs = idSigs; - Init(); - } - - /// The version of this key. - public int Version - { - get { return publicPk.Version; } - } - - /// The creation time of this key. - public DateTime CreationTime - { - get { return publicPk.GetTime(); } - } - - /// The number of valid days from creation time - zero means no expiry. - /// WARNING: This method will return 1 for keys with version > 3 that expire in less than 1 day - [Obsolete("Use 'GetValidSeconds' instead")] - public int ValidDays - { - get - { - if (publicPk.Version <= 3) - { - return publicPk.ValidDays; - } - - long expSecs = GetValidSeconds(); - if (expSecs <= 0) - return 0; - - int days = (int)(expSecs / (24 * 60 * 60)); - return System.Math.Max(1, days); - } - } - - /// Return the trust data associated with the public key, if present. - /// A byte array with trust data, null otherwise. - public byte[] GetTrustData() - { - if (trustPk == null) - { - return null; - } - - return Arrays.Clone(trustPk.GetLevelAndTrustAmount()); - } - - /// The number of valid seconds from creation time - zero means no expiry. - public long GetValidSeconds() - { - if (publicPk.Version <= 3) - { - return (long)publicPk.ValidDays * (24 * 60 * 60); - } - - if (IsMasterKey) - { - for (int i = 0; i != MasterKeyCertificationTypes.Length; i++) - { - long seconds = GetExpirationTimeFromSig(true, MasterKeyCertificationTypes[i]); - if (seconds >= 0) - { - return seconds; - } - } - } - else - { - long seconds = GetExpirationTimeFromSig(false, PgpSignature.SubkeyBinding); - if (seconds >= 0) - { - return seconds; - } - } - - return 0; - } - - private long GetExpirationTimeFromSig(bool selfSigned, int signatureType) - { - long expiryTime = -1; - long lastDate = -1; - - foreach (PgpSignature sig in GetSignaturesOfType(signatureType)) - { - if (selfSigned && sig.KeyId != this.KeyId) - continue; - - PgpSignatureSubpacketVector hashed = sig.GetHashedSubPackets(); - if (hashed == null) - continue; - - long current = hashed.GetKeyExpirationTime(); - - if (sig.KeyId == this.KeyId) - { - if (sig.CreationTime.Ticks > lastDate) - { - lastDate = sig.CreationTime.Ticks; - expiryTime = current; - } - } - else if (current == 0 || current > expiryTime) - { - expiryTime = current; - } - } - - return expiryTime; - } - - /// The keyId associated with the public key. - public long KeyId - { - get { return keyId; } - } - - /// The fingerprint of the key - public byte[] GetFingerprint() - { - return (byte[]) fingerprint.Clone(); - } - - /// - /// Check if this key has an algorithm type that makes it suitable to use for encryption. - /// - /// - /// Note: with version 4 keys KeyFlags subpackets should also be considered when present for - /// determining the preferred use of the key. - /// - /// - /// true if this key algorithm is suitable for encryption. - /// - public bool IsEncryptionKey - { - get - { - switch (publicPk.Algorithm) - { - case PublicKeyAlgorithmTag.ECDH: - case PublicKeyAlgorithmTag.ElGamalEncrypt: - case PublicKeyAlgorithmTag.ElGamalGeneral: - case PublicKeyAlgorithmTag.RsaEncrypt: - case PublicKeyAlgorithmTag.RsaGeneral: - return true; - default: - return false; - } - } - } - - /// True, if this is a master key. - public bool IsMasterKey - { - get { return subSigs == null; } - } - - /// The algorithm code associated with the public key. - public PublicKeyAlgorithmTag Algorithm - { - get { return publicPk.Algorithm; } - } - - /// The strength of the key in bits. - public int BitStrength - { - get { return keyStrength; } - } - - /// The public key contained in the object. - /// A lightweight public key. - /// If the key algorithm is not recognised. - public AsymmetricKeyParameter GetKey() - { - try - { - switch (publicPk.Algorithm) - { - case PublicKeyAlgorithmTag.RsaEncrypt: - case PublicKeyAlgorithmTag.RsaGeneral: - case PublicKeyAlgorithmTag.RsaSign: - RsaPublicBcpgKey rsaK = (RsaPublicBcpgKey)publicPk.Key; - return new RsaKeyParameters(false, rsaK.Modulus, rsaK.PublicExponent); - case PublicKeyAlgorithmTag.Dsa: - DsaPublicBcpgKey dsaK = (DsaPublicBcpgKey)publicPk.Key; - return new DsaPublicKeyParameters(dsaK.Y, new DsaParameters(dsaK.P, dsaK.Q, dsaK.G)); - case PublicKeyAlgorithmTag.ECDsa: - return GetECKey("ECDSA"); - case PublicKeyAlgorithmTag.ECDH: - return GetECKey("ECDH"); - case PublicKeyAlgorithmTag.ElGamalEncrypt: - case PublicKeyAlgorithmTag.ElGamalGeneral: - ElGamalPublicBcpgKey elK = (ElGamalPublicBcpgKey)publicPk.Key; - return new ElGamalPublicKeyParameters(elK.Y, new ElGamalParameters(elK.P, elK.G)); - default: - throw new PgpException("unknown public key algorithm encountered"); - } - } - catch (PgpException e) - { - throw e; - } - catch (Exception e) - { - throw new PgpException("exception constructing public key", e); - } - } - - private ECPublicKeyParameters GetECKey(string algorithm) - { - ECPublicBcpgKey ecK = (ECPublicBcpgKey)publicPk.Key; - X9ECParameters x9 = ECKeyPairGenerator.FindECCurveByOid(ecK.CurveOid); - ECPoint q = x9.Curve.DecodePoint(BigIntegers.AsUnsignedByteArray(ecK.EncodedPoint)); - return new ECPublicKeyParameters(algorithm, q, ecK.CurveOid); - } - - /// Allows enumeration of any user IDs associated with the key. - /// An IEnumerable of string objects. - public IEnumerable GetUserIds() - { - IList temp = Platform.CreateArrayList(); - - foreach (object o in ids) - { - if (o is string) - { - temp.Add(o); - } - } - - return new EnumerableProxy(temp); - } - - /// Allows enumeration of any user attribute vectors associated with the key. - /// An IEnumerable of PgpUserAttributeSubpacketVector objects. - public IEnumerable GetUserAttributes() - { - IList temp = Platform.CreateArrayList(); - - foreach (object o in ids) - { - if (o is PgpUserAttributeSubpacketVector) - { - temp.Add(o); - } - } - - return new EnumerableProxy(temp); - } - - /// Allows enumeration of any signatures associated with the passed in id. - /// The ID to be matched. - /// An IEnumerable of PgpSignature objects. - public IEnumerable GetSignaturesForId( - string id) - { - if (id == null) - throw new ArgumentNullException("id"); - - for (int i = 0; i != ids.Count; i++) - { - if (id.Equals(ids[i])) - { - return new EnumerableProxy((IList)idSigs[i]); - } - } - - return null; - } - - /// Allows enumeration of signatures associated with the passed in user attributes. - /// The vector of user attributes to be matched. - /// An IEnumerable of PgpSignature objects. - public IEnumerable GetSignaturesForUserAttribute( - PgpUserAttributeSubpacketVector userAttributes) - { - for (int i = 0; i != ids.Count; i++) - { - if (userAttributes.Equals(ids[i])) - { - return new EnumerableProxy((IList) idSigs[i]); - } - } - - return null; - } - - /// Allows enumeration of signatures of the passed in type that are on this key. - /// The type of the signature to be returned. - /// An IEnumerable of PgpSignature objects. - public IEnumerable GetSignaturesOfType( - int signatureType) - { - IList temp = Platform.CreateArrayList(); - - foreach (PgpSignature sig in GetSignatures()) - { - if (sig.SignatureType == signatureType) - { - temp.Add(sig); - } - } - - return new EnumerableProxy(temp); - } - - /// Allows enumeration of all signatures/certifications associated with this key. - /// An IEnumerable with all signatures/certifications. - public IEnumerable GetSignatures() - { - IList sigs = subSigs; - if (sigs == null) - { - sigs = Platform.CreateArrayList(keySigs); - - foreach (ICollection extraSigs in idSigs) - { - CollectionUtilities.AddRange(sigs, extraSigs); - } - } - - return new EnumerableProxy(sigs); - } - - /** - * Return all signatures/certifications directly associated with this key (ie, not to a user id). - * - * @return an iterator (possibly empty) with all signatures/certifications. - */ - public IEnumerable GetKeySignatures() - { - IList sigs = subSigs; - if (sigs == null) - { - sigs = Platform.CreateArrayList(keySigs); - } - return new EnumerableProxy(sigs); - } - - public PublicKeyPacket PublicKeyPacket - { - get { return publicPk; } - } - - public byte[] GetEncoded() - { - MemoryStream bOut = new MemoryStream(); - Encode(bOut); - return bOut.ToArray(); - } - - public void Encode( - Stream outStr) - { - BcpgOutputStream bcpgOut = BcpgOutputStream.Wrap(outStr); - - bcpgOut.WritePacket(publicPk); - if (trustPk != null) - { - bcpgOut.WritePacket(trustPk); - } - - if (subSigs == null) // not a sub-key - { - foreach (PgpSignature keySig in keySigs) - { - keySig.Encode(bcpgOut); - } - - for (int i = 0; i != ids.Count; i++) - { - if (ids[i] is string) - { - string id = (string) ids[i]; - - bcpgOut.WritePacket(new UserIdPacket(id)); - } - else - { - PgpUserAttributeSubpacketVector v = (PgpUserAttributeSubpacketVector)ids[i]; - bcpgOut.WritePacket(new UserAttributePacket(v.ToSubpacketArray())); - } - - if (idTrusts[i] != null) - { - bcpgOut.WritePacket((ContainedPacket)idTrusts[i]); - } - - foreach (PgpSignature sig in (IList) idSigs[i]) - { - sig.Encode(bcpgOut); - } - } - } - else - { - foreach (PgpSignature subSig in subSigs) - { - subSig.Encode(bcpgOut); - } - } - } - - /// Check whether this (sub)key has a revocation signature on it. - /// True, if this (sub)key has been revoked. - public bool IsRevoked() - { - int ns = 0; - bool revoked = false; - if (IsMasterKey) // Master key - { - while (!revoked && (ns < keySigs.Count)) - { - if (((PgpSignature)keySigs[ns++]).SignatureType == PgpSignature.KeyRevocation) - { - revoked = true; - } - } - } - else // Sub-key - { - while (!revoked && (ns < subSigs.Count)) - { - if (((PgpSignature)subSigs[ns++]).SignatureType == PgpSignature.SubkeyRevocation) - { - revoked = true; - } - } - } - return revoked; - } - - /// Add a certification for an id to the given public key. - /// The key the certification is to be added to. - /// The ID the certification is associated with. - /// The new certification. - /// The re-certified key. - public static PgpPublicKey AddCertification( - PgpPublicKey key, - string id, - PgpSignature certification) - { - return AddCert(key, id, certification); - } - - /// Add a certification for the given UserAttributeSubpackets to the given public key. - /// The key the certification is to be added to. - /// The attributes the certification is associated with. - /// The new certification. - /// The re-certified key. - public static PgpPublicKey AddCertification( - PgpPublicKey key, - PgpUserAttributeSubpacketVector userAttributes, - PgpSignature certification) - { - return AddCert(key, userAttributes, certification); - } - - private static PgpPublicKey AddCert( - PgpPublicKey key, - object id, - PgpSignature certification) - { - PgpPublicKey returnKey = new PgpPublicKey(key); - IList sigList = null; - - for (int i = 0; i != returnKey.ids.Count; i++) - { - if (id.Equals(returnKey.ids[i])) - { - sigList = (IList) returnKey.idSigs[i]; - } - } - - if (sigList != null) - { - sigList.Add(certification); - } - else - { - sigList = Platform.CreateArrayList(); - sigList.Add(certification); - returnKey.ids.Add(id); - returnKey.idTrusts.Add(null); - returnKey.idSigs.Add(sigList); - } - - return returnKey; - } - - /// - /// Remove any certifications associated with a user attribute subpacket on a key. - /// - /// The key the certifications are to be removed from. - /// The attributes to be removed. - /// - /// The re-certified key, or null if the user attribute subpacket was not found on the key. - /// - public static PgpPublicKey RemoveCertification( - PgpPublicKey key, - PgpUserAttributeSubpacketVector userAttributes) - { - return RemoveCert(key, userAttributes); - } - - /// Remove any certifications associated with a given ID on a key. - /// The key the certifications are to be removed from. - /// The ID that is to be removed. - /// The re-certified key, or null if the ID was not found on the key. - public static PgpPublicKey RemoveCertification( - PgpPublicKey key, - string id) - { - return RemoveCert(key, id); - } - - private static PgpPublicKey RemoveCert( - PgpPublicKey key, - object id) - { - PgpPublicKey returnKey = new PgpPublicKey(key); - bool found = false; - - for (int i = 0; i < returnKey.ids.Count; i++) - { - if (id.Equals(returnKey.ids[i])) - { - found = true; - returnKey.ids.RemoveAt(i); - returnKey.idTrusts.RemoveAt(i); - returnKey.idSigs.RemoveAt(i); - } - } - - return found ? returnKey : null; - } - - /// Remove a certification associated with a given ID on a key. - /// The key the certifications are to be removed from. - /// The ID that the certfication is to be removed from. - /// The certfication to be removed. - /// The re-certified key, or null if the certification was not found. - public static PgpPublicKey RemoveCertification( - PgpPublicKey key, - string id, - PgpSignature certification) - { - return RemoveCert(key, id, certification); - } - - /// Remove a certification associated with a given user attributes on a key. - /// The key the certifications are to be removed from. - /// The user attributes that the certfication is to be removed from. - /// The certification to be removed. - /// The re-certified key, or null if the certification was not found. - public static PgpPublicKey RemoveCertification( - PgpPublicKey key, - PgpUserAttributeSubpacketVector userAttributes, - PgpSignature certification) - { - return RemoveCert(key, userAttributes, certification); - } - - private static PgpPublicKey RemoveCert( - PgpPublicKey key, - object id, - PgpSignature certification) - { - PgpPublicKey returnKey = new PgpPublicKey(key); - bool found = false; - - for (int i = 0; i < returnKey.ids.Count; i++) - { - if (id.Equals(returnKey.ids[i])) - { - IList certs = (IList) returnKey.idSigs[i]; - found = certs.Contains(certification); - - if (found) - { - certs.Remove(certification); - } - } - } - - return found ? returnKey : null; - } - - /// Add a revocation or some other key certification to a key. - /// The key the revocation is to be added to. - /// The key signature to be added. - /// The new changed public key object. - public static PgpPublicKey AddCertification( - PgpPublicKey key, - PgpSignature certification) - { - if (key.IsMasterKey) - { - if (certification.SignatureType == PgpSignature.SubkeyRevocation) - { - throw new ArgumentException("signature type incorrect for master key revocation."); - } - } - else - { - if (certification.SignatureType == PgpSignature.KeyRevocation) - { - throw new ArgumentException("signature type incorrect for sub-key revocation."); - } - } - - PgpPublicKey returnKey = new PgpPublicKey(key); - - if (returnKey.subSigs != null) - { - returnKey.subSigs.Add(certification); - } - else - { - returnKey.keySigs.Add(certification); - } - - return returnKey; - } - - /// Remove a certification from the key. - /// The key the certifications are to be removed from. - /// The certfication to be removed. - /// The modified key, null if the certification was not found. - public static PgpPublicKey RemoveCertification( - PgpPublicKey key, - PgpSignature certification) - { - PgpPublicKey returnKey = new PgpPublicKey(key); - IList sigs = returnKey.subSigs != null - ? returnKey.subSigs - : returnKey.keySigs; - -// bool found = sigs.Remove(certification); - int pos = sigs.IndexOf(certification); - bool found = pos >= 0; - - if (found) - { - sigs.RemoveAt(pos); - } - else - { - foreach (String id in key.GetUserIds()) - { - foreach (object sig in key.GetSignaturesForId(id)) - { - // TODO Is this the right type of equality test? - if (certification == sig) - { - found = true; - returnKey = PgpPublicKey.RemoveCertification(returnKey, id, certification); - } - } - } - - if (!found) - { - foreach (PgpUserAttributeSubpacketVector id in key.GetUserAttributes()) - { - foreach (object sig in key.GetSignaturesForUserAttribute(id)) - { - // TODO Is this the right type of equality test? - if (certification == sig) - { - found = true; - returnKey = PgpPublicKey.RemoveCertification(returnKey, id, certification); - } - } - } - } - } - - return returnKey; - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpPublicKeyEncryptedData.cs b/bc-sharp-crypto/src/openpgp/PgpPublicKeyEncryptedData.cs deleted file mode 100644 index c2a3511..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpPublicKeyEncryptedData.cs +++ /dev/null @@ -1,272 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.IO; -using Org.BouncyCastle.Crypto.Generators; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// A public key encrypted data object. - public class PgpPublicKeyEncryptedData - : PgpEncryptedData - { - private PublicKeyEncSessionPacket keyData; - - internal PgpPublicKeyEncryptedData( - PublicKeyEncSessionPacket keyData, - InputStreamPacket encData) - : base(encData) - { - this.keyData = keyData; - } - - private static IBufferedCipher GetKeyCipher( - PublicKeyAlgorithmTag algorithm) - { - try - { - switch (algorithm) - { - case PublicKeyAlgorithmTag.RsaEncrypt: - case PublicKeyAlgorithmTag.RsaGeneral: - return CipherUtilities.GetCipher("RSA//PKCS1Padding"); - case PublicKeyAlgorithmTag.ElGamalEncrypt: - case PublicKeyAlgorithmTag.ElGamalGeneral: - return CipherUtilities.GetCipher("ElGamal/ECB/PKCS1Padding"); - default: - throw new PgpException("unknown asymmetric algorithm: " + algorithm); - } - } - catch (PgpException e) - { - throw e; - } - catch (Exception e) - { - throw new PgpException("Exception creating cipher", e); - } - } - - private bool ConfirmCheckSum( - byte[] sessionInfo) - { - int check = 0; - - for (int i = 1; i != sessionInfo.Length - 2; i++) - { - check += sessionInfo[i] & 0xff; - } - - return (sessionInfo[sessionInfo.Length - 2] == (byte)(check >> 8)) - && (sessionInfo[sessionInfo.Length - 1] == (byte)(check)); - } - - /// The key ID for the key used to encrypt the data. - public long KeyId - { - get { return keyData.KeyId; } - } - - /// - /// Return the algorithm code for the symmetric algorithm used to encrypt the data. - /// - public SymmetricKeyAlgorithmTag GetSymmetricAlgorithm( - PgpPrivateKey privKey) - { - byte[] sessionData = RecoverSessionData(privKey); - - return (SymmetricKeyAlgorithmTag)sessionData[0]; - } - - /// Return the decrypted data stream for the packet. - public Stream GetDataStream( - PgpPrivateKey privKey) - { - byte[] sessionData = RecoverSessionData(privKey); - - if (!ConfirmCheckSum(sessionData)) - throw new PgpKeyValidationException("key checksum failed"); - - SymmetricKeyAlgorithmTag symmAlg = (SymmetricKeyAlgorithmTag)sessionData[0]; - if (symmAlg == SymmetricKeyAlgorithmTag.Null) - return encData.GetInputStream(); - - IBufferedCipher cipher; - string cipherName = PgpUtilities.GetSymmetricCipherName(symmAlg); - string cName = cipherName; - - try - { - if (encData is SymmetricEncIntegrityPacket) - { - cName += "/CFB/NoPadding"; - } - else - { - cName += "/OpenPGPCFB/NoPadding"; - } - - cipher = CipherUtilities.GetCipher(cName); - } - catch (PgpException e) - { - throw e; - } - catch (Exception e) - { - throw new PgpException("exception creating cipher", e); - } - - try - { - KeyParameter key = ParameterUtilities.CreateKeyParameter( - cipherName, sessionData, 1, sessionData.Length - 3); - - byte[] iv = new byte[cipher.GetBlockSize()]; - - cipher.Init(false, new ParametersWithIV(key, iv)); - - encStream = BcpgInputStream.Wrap(new CipherStream(encData.GetInputStream(), cipher, null)); - - if (encData is SymmetricEncIntegrityPacket) - { - truncStream = new TruncatedStream(encStream); - - string digestName = PgpUtilities.GetDigestName(HashAlgorithmTag.Sha1); - IDigest digest = DigestUtilities.GetDigest(digestName); - - encStream = new DigestStream(truncStream, digest, null); - } - - if (Streams.ReadFully(encStream, iv, 0, iv.Length) < iv.Length) - throw new EndOfStreamException("unexpected end of stream."); - - int v1 = encStream.ReadByte(); - int v2 = encStream.ReadByte(); - - if (v1 < 0 || v2 < 0) - throw new EndOfStreamException("unexpected end of stream."); - - // Note: the oracle attack on the "quick check" bytes is deemed - // a security risk for typical public key encryption usages, - // therefore we do not perform the check. - -// bool repeatCheckPassed = -// iv[iv.Length - 2] == (byte)v1 -// && iv[iv.Length - 1] == (byte)v2; -// -// // Note: some versions of PGP appear to produce 0 for the extra -// // bytes rather than repeating the two previous bytes -// bool zeroesCheckPassed = -// v1 == 0 -// && v2 == 0; -// -// if (!repeatCheckPassed && !zeroesCheckPassed) -// { -// throw new PgpDataValidationException("quick check failed."); -// } - - return encStream; - } - catch (PgpException e) - { - throw e; - } - catch (Exception e) - { - throw new PgpException("Exception starting decryption", e); - } - } - - private byte[] RecoverSessionData(PgpPrivateKey privKey) - { - byte[][] secKeyData = keyData.GetEncSessionKey(); - - if (keyData.Algorithm == PublicKeyAlgorithmTag.ECDH) - { - ECDHPublicBcpgKey ecKey = (ECDHPublicBcpgKey)privKey.PublicKeyPacket.Key; - X9ECParameters x9Params = ECKeyPairGenerator.FindECCurveByOid(ecKey.CurveOid); - - byte[] enc = secKeyData[0]; - - int pLen = ((((enc[0] & 0xff) << 8) + (enc[1] & 0xff)) + 7) / 8; - byte[] pEnc = new byte[pLen]; - - Array.Copy(enc, 2, pEnc, 0, pLen); - - byte[] keyEnc = new byte[enc[pLen + 2]]; - - Array.Copy(enc, 2 + pLen + 1, keyEnc, 0, keyEnc.Length); - - ECPoint publicPoint = x9Params.Curve.DecodePoint(pEnc); - - ECPrivateKeyParameters privKeyParams = (ECPrivateKeyParameters)privKey.Key; - ECPoint S = publicPoint.Multiply(privKeyParams.D).Normalize(); - - KeyParameter key = new KeyParameter(Rfc6637Utilities.CreateKey(privKey.PublicKeyPacket, S)); - - IWrapper w = PgpUtilities.CreateWrapper(ecKey.SymmetricKeyAlgorithm); - w.Init(false, key); - - return PgpPad.UnpadSessionData(w.Unwrap(keyEnc, 0, keyEnc.Length)); - } - - IBufferedCipher cipher = GetKeyCipher(keyData.Algorithm); - - try - { - cipher.Init(false, privKey.Key); - } - catch (InvalidKeyException e) - { - throw new PgpException("error setting asymmetric cipher", e); - } - - if (keyData.Algorithm == PublicKeyAlgorithmTag.RsaEncrypt - || keyData.Algorithm == PublicKeyAlgorithmTag.RsaGeneral) - { - byte[] bi = secKeyData[0]; - - cipher.ProcessBytes(bi, 2, bi.Length - 2); - } - else - { - ElGamalPrivateKeyParameters k = (ElGamalPrivateKeyParameters)privKey.Key; - int size = (k.Parameters.P.BitLength + 7) / 8; - - ProcessEncodedMpi(cipher, size, secKeyData[0]); - ProcessEncodedMpi(cipher, size, secKeyData[1]); - } - - try - { - return cipher.DoFinal(); - } - catch (Exception e) - { - throw new PgpException("exception decrypting secret key", e); - } - } - - private static void ProcessEncodedMpi(IBufferedCipher cipher, int size, byte[] mpiEnc) - { - if (mpiEnc.Length - 2 > size) // leading Zero? Shouldn't happen but... - { - cipher.ProcessBytes(mpiEnc, 3, mpiEnc.Length - 3); - } - else - { - byte[] tmp = new byte[size]; - Array.Copy(mpiEnc, 2, tmp, tmp.Length - (mpiEnc.Length - 2), mpiEnc.Length - 2); - cipher.ProcessBytes(tmp, 0, tmp.Length); - } - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpPublicKeyRing.cs b/bc-sharp-crypto/src/openpgp/PgpPublicKeyRing.cs deleted file mode 100644 index 92464d6..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpPublicKeyRing.cs +++ /dev/null @@ -1,200 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// - /// Class to hold a single master public key and its subkeys. - ///

    - /// Often PGP keyring files consist of multiple master keys, if you are trying to process - /// or construct one of these you should use the PgpPublicKeyRingBundle class. - ///

    - ///     - public class PgpPublicKeyRing - : PgpKeyRing - { - private readonly IList keys; - - public PgpPublicKeyRing( - byte[] encoding) - : this(new MemoryStream(encoding, false)) - { - } - - internal PgpPublicKeyRing( - IList pubKeys) - { - this.keys = pubKeys; - } - - public PgpPublicKeyRing( - Stream inputStream) - { - this.keys = Platform.CreateArrayList(); - - BcpgInputStream bcpgInput = BcpgInputStream.Wrap(inputStream); - - PacketTag initialTag = bcpgInput.NextPacketTag(); - if (initialTag != PacketTag.PublicKey && initialTag != PacketTag.PublicSubkey) - { - throw new IOException("public key ring doesn't start with public key tag: " - + "tag 0x" + ((int)initialTag).ToString("X")); - } - - PublicKeyPacket pubPk = (PublicKeyPacket) bcpgInput.ReadPacket(); - TrustPacket trustPk = ReadOptionalTrustPacket(bcpgInput); - - // direct signatures and revocations - IList keySigs = ReadSignaturesAndTrust(bcpgInput); - - IList ids, idTrusts, idSigs; - ReadUserIDs(bcpgInput, out ids, out idTrusts, out idSigs); - - keys.Add(new PgpPublicKey(pubPk, trustPk, keySigs, ids, idTrusts, idSigs)); - - - // Read subkeys - while (bcpgInput.NextPacketTag() == PacketTag.PublicSubkey) - { - keys.Add(ReadSubkey(bcpgInput)); - } - } - - /// Return the first public key in the ring. - public virtual PgpPublicKey GetPublicKey() - { - return (PgpPublicKey) keys[0]; - } - - /// Return the public key referred to by the passed in key ID if it is present. - public virtual PgpPublicKey GetPublicKey( - long keyId) - { - foreach (PgpPublicKey k in keys) - { - if (keyId == k.KeyId) - { - return k; - } - } - - return null; - } - - /// Allows enumeration of all the public keys. - /// An IEnumerable of PgpPublicKey objects. - public virtual IEnumerable GetPublicKeys() - { - return new EnumerableProxy(keys); - } - - public virtual byte[] GetEncoded() - { - MemoryStream bOut = new MemoryStream(); - - Encode(bOut); - - return bOut.ToArray(); - } - - public virtual void Encode( - Stream outStr) - { - if (outStr == null) - throw new ArgumentNullException("outStr"); - - foreach (PgpPublicKey k in keys) - { - k.Encode(outStr); - } - } - - /// - /// Returns a new key ring with the public key passed in either added or - /// replacing an existing one. - /// - /// The public key ring to be modified. - /// The public key to be inserted. - /// A new PgpPublicKeyRing - public static PgpPublicKeyRing InsertPublicKey( - PgpPublicKeyRing pubRing, - PgpPublicKey pubKey) - { - IList keys = Platform.CreateArrayList(pubRing.keys); - bool found = false; - bool masterFound = false; - - for (int i = 0; i != keys.Count; i++) - { - PgpPublicKey key = (PgpPublicKey) keys[i]; - - if (key.KeyId == pubKey.KeyId) - { - found = true; - keys[i] = pubKey; - } - if (key.IsMasterKey) - { - masterFound = true; - } - } - - if (!found) - { - if (pubKey.IsMasterKey) - { - if (masterFound) - throw new ArgumentException("cannot add a master key to a ring that already has one"); - - keys.Insert(0, pubKey); - } - else - { - keys.Add(pubKey); - } - } - - return new PgpPublicKeyRing(keys); - } - - /// Returns a new key ring with the public key passed in removed from the key ring. - /// The public key ring to be modified. - /// The public key to be removed. - /// A new PgpPublicKeyRing, or null if pubKey is not found. - public static PgpPublicKeyRing RemovePublicKey( - PgpPublicKeyRing pubRing, - PgpPublicKey pubKey) - { - IList keys = Platform.CreateArrayList(pubRing.keys); - bool found = false; - - for (int i = 0; i < keys.Count; i++) - { - PgpPublicKey key = (PgpPublicKey) keys[i]; - - if (key.KeyId == pubKey.KeyId) - { - found = true; - keys.RemoveAt(i); - } - } - - return found ? new PgpPublicKeyRing(keys) : null; - } - - internal static PgpPublicKey ReadSubkey(BcpgInputStream bcpgInput) - { - PublicKeyPacket pk = (PublicKeyPacket) bcpgInput.ReadPacket(); - TrustPacket kTrust = ReadOptionalTrustPacket(bcpgInput); - - // PGP 8 actually leaves out the signature. - IList sigList = ReadSignaturesAndTrust(bcpgInput); - - return new PgpPublicKey(pk, kTrust, sigList); - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpPublicKeyRingBundle.cs b/bc-sharp-crypto/src/openpgp/PgpPublicKeyRingBundle.cs deleted file mode 100644 index 91113e9..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpPublicKeyRingBundle.cs +++ /dev/null @@ -1,279 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// - /// Often a PGP key ring file is made up of a succession of master/sub-key key rings. - /// If you want to read an entire public key file in one hit this is the class for you. - /// - public class PgpPublicKeyRingBundle - { - private readonly IDictionary pubRings; - private readonly IList order; - - private PgpPublicKeyRingBundle( - IDictionary pubRings, - IList order) - { - this.pubRings = pubRings; - this.order = order; - } - - public PgpPublicKeyRingBundle( - byte[] encoding) - : this(new MemoryStream(encoding, false)) - { - } - - /// Build a PgpPublicKeyRingBundle from the passed in input stream. - /// Input stream containing data. - /// If a problem parsing the stream occurs. - /// If an object is encountered which isn't a PgpPublicKeyRing. - public PgpPublicKeyRingBundle( - Stream inputStream) - : this(new PgpObjectFactory(inputStream).AllPgpObjects()) - { - } - - public PgpPublicKeyRingBundle( - IEnumerable e) - { - this.pubRings = Platform.CreateHashtable(); - this.order = Platform.CreateArrayList(); - - foreach (object obj in e) - { - PgpPublicKeyRing pgpPub = obj as PgpPublicKeyRing; - - if (pgpPub == null) - { - throw new PgpException(Platform.GetTypeName(obj) + " found where PgpPublicKeyRing expected"); - } - - long key = pgpPub.GetPublicKey().KeyId; - pubRings.Add(key, pgpPub); - order.Add(key); - } - } - - [Obsolete("Use 'Count' property instead")] - public int Size - { - get { return order.Count; } - } - - /// Return the number of key rings in this collection. - public int Count - { - get { return order.Count; } - } - - /// Allow enumeration of the public key rings making up this collection. - public IEnumerable GetKeyRings() - { - return new EnumerableProxy(pubRings.Values); - } - - /// Allow enumeration of the key rings associated with the passed in userId. - /// The user ID to be matched. - /// An IEnumerable of key rings which matched (possibly none). - public IEnumerable GetKeyRings( - string userId) - { - return GetKeyRings(userId, false, false); - } - - /// Allow enumeration of the key rings associated with the passed in userId. - /// The user ID to be matched. - /// If true, userId need only be a substring of an actual ID string to match. - /// An IEnumerable of key rings which matched (possibly none). - public IEnumerable GetKeyRings( - string userId, - bool matchPartial) - { - return GetKeyRings(userId, matchPartial, false); - } - - /// Allow enumeration of the key rings associated with the passed in userId. - /// The user ID to be matched. - /// If true, userId need only be a substring of an actual ID string to match. - /// If true, case is ignored in user ID comparisons. - /// An IEnumerable of key rings which matched (possibly none). - public IEnumerable GetKeyRings( - string userId, - bool matchPartial, - bool ignoreCase) - { - IList rings = Platform.CreateArrayList(); - - if (ignoreCase) - { - userId = Platform.ToUpperInvariant(userId); - } - - foreach (PgpPublicKeyRing pubRing in GetKeyRings()) - { - foreach (string nextUserID in pubRing.GetPublicKey().GetUserIds()) - { - string next = nextUserID; - if (ignoreCase) - { - next = Platform.ToUpperInvariant(next); - } - - if (matchPartial) - { - if (Platform.IndexOf(next, userId) > -1) - { - rings.Add(pubRing); - } - } - else - { - if (next.Equals(userId)) - { - rings.Add(pubRing); - } - } - } - } - - return new EnumerableProxy(rings); - } - - /// Return the PGP public key associated with the given key id. - /// The ID of the public key to return. - public PgpPublicKey GetPublicKey( - long keyId) - { - foreach (PgpPublicKeyRing pubRing in GetKeyRings()) - { - PgpPublicKey pub = pubRing.GetPublicKey(keyId); - - if (pub != null) - { - return pub; - } - } - - return null; - } - - /// Return the public key ring which contains the key referred to by keyId - /// key ID to match against - public PgpPublicKeyRing GetPublicKeyRing( - long keyId) - { - if (pubRings.Contains(keyId)) - { - return (PgpPublicKeyRing)pubRings[keyId]; - } - - foreach (PgpPublicKeyRing pubRing in GetKeyRings()) - { - PgpPublicKey pub = pubRing.GetPublicKey(keyId); - - if (pub != null) - { - return pubRing; - } - } - - return null; - } - - /// - /// Return true if a key matching the passed in key ID is present, false otherwise. - /// - /// key ID to look for. - public bool Contains( - long keyID) - { - return GetPublicKey(keyID) != null; - } - - public byte[] GetEncoded() - { - MemoryStream bOut = new MemoryStream(); - - Encode(bOut); - - return bOut.ToArray(); - } - - public void Encode( - Stream outStr) - { - BcpgOutputStream bcpgOut = BcpgOutputStream.Wrap(outStr); - - foreach (long key in order) - { - PgpPublicKeyRing sec = (PgpPublicKeyRing) pubRings[key]; - - sec.Encode(bcpgOut); - } - } - - /// - /// Return a new bundle containing the contents of the passed in bundle and - /// the passed in public key ring. - /// - /// The PgpPublicKeyRingBundle the key ring is to be added to. - /// The key ring to be added. - /// A new PgpPublicKeyRingBundle merging the current one with the passed in key ring. - /// If the keyId for the passed in key ring is already present. - public static PgpPublicKeyRingBundle AddPublicKeyRing( - PgpPublicKeyRingBundle bundle, - PgpPublicKeyRing publicKeyRing) - { - long key = publicKeyRing.GetPublicKey().KeyId; - - if (bundle.pubRings.Contains(key)) - { - throw new ArgumentException("Bundle already contains a key with a keyId for the passed in ring."); - } - - IDictionary newPubRings = Platform.CreateHashtable(bundle.pubRings); - IList newOrder = Platform.CreateArrayList(bundle.order); - - newPubRings[key] = publicKeyRing; - - newOrder.Add(key); - - return new PgpPublicKeyRingBundle(newPubRings, newOrder); - } - - /// - /// Return a new bundle containing the contents of the passed in bundle with - /// the passed in public key ring removed. - /// - /// The PgpPublicKeyRingBundle the key ring is to be removed from. - /// The key ring to be removed. - /// A new PgpPublicKeyRingBundle not containing the passed in key ring. - /// If the keyId for the passed in key ring is not present. - public static PgpPublicKeyRingBundle RemovePublicKeyRing( - PgpPublicKeyRingBundle bundle, - PgpPublicKeyRing publicKeyRing) - { - long key = publicKeyRing.GetPublicKey().KeyId; - - if (!bundle.pubRings.Contains(key)) - { - throw new ArgumentException("Bundle does not contain a key with a keyId for the passed in ring."); - } - - IDictionary newPubRings = Platform.CreateHashtable(bundle.pubRings); - IList newOrder = Platform.CreateArrayList(bundle.order); - - newPubRings.Remove(key); - newOrder.Remove(key); - - return new PgpPublicKeyRingBundle(newPubRings, newOrder); - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpSecretKey.cs b/bc-sharp-crypto/src/openpgp/PgpSecretKey.cs deleted file mode 100644 index b398607..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpSecretKey.cs +++ /dev/null @@ -1,1295 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Generators; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// General class to handle a PGP secret key object. - public class PgpSecretKey - { - private readonly SecretKeyPacket secret; - private readonly PgpPublicKey pub; - - internal PgpSecretKey( - SecretKeyPacket secret, - PgpPublicKey pub) - { - this.secret = secret; - this.pub = pub; - } - - internal PgpSecretKey( - PgpPrivateKey privKey, - PgpPublicKey pubKey, - SymmetricKeyAlgorithmTag encAlgorithm, - byte[] rawPassPhrase, - bool clearPassPhrase, - bool useSha1, - SecureRandom rand, - bool isMasterKey) - { - BcpgObject secKey; - - this.pub = pubKey; - - switch (pubKey.Algorithm) - { - case PublicKeyAlgorithmTag.RsaEncrypt: - case PublicKeyAlgorithmTag.RsaSign: - case PublicKeyAlgorithmTag.RsaGeneral: - RsaPrivateCrtKeyParameters rsK = (RsaPrivateCrtKeyParameters) privKey.Key; - secKey = new RsaSecretBcpgKey(rsK.Exponent, rsK.P, rsK.Q); - break; - case PublicKeyAlgorithmTag.Dsa: - DsaPrivateKeyParameters dsK = (DsaPrivateKeyParameters) privKey.Key; - secKey = new DsaSecretBcpgKey(dsK.X); - break; - case PublicKeyAlgorithmTag.ECDH: - case PublicKeyAlgorithmTag.ECDsa: - ECPrivateKeyParameters ecK = (ECPrivateKeyParameters)privKey.Key; - secKey = new ECSecretBcpgKey(ecK.D); - break; - case PublicKeyAlgorithmTag.ElGamalEncrypt: - case PublicKeyAlgorithmTag.ElGamalGeneral: - ElGamalPrivateKeyParameters esK = (ElGamalPrivateKeyParameters) privKey.Key; - secKey = new ElGamalSecretBcpgKey(esK.X); - break; - default: - throw new PgpException("unknown key class"); - } - - try - { - MemoryStream bOut = new MemoryStream(); - BcpgOutputStream pOut = new BcpgOutputStream(bOut); - - pOut.WriteObject(secKey); - - byte[] keyData = bOut.ToArray(); - byte[] checksumData = Checksum(useSha1, keyData, keyData.Length); - - keyData = Arrays.Concatenate(keyData, checksumData); - - if (encAlgorithm == SymmetricKeyAlgorithmTag.Null) - { - if (isMasterKey) - { - this.secret = new SecretKeyPacket(pub.publicPk, encAlgorithm, null, null, keyData); - } - else - { - this.secret = new SecretSubkeyPacket(pub.publicPk, encAlgorithm, null, null, keyData); - } - } - else - { - S2k s2k; - byte[] iv; - - byte[] encData; - if (pub.Version >= 4) - { - encData = EncryptKeyDataV4(keyData, encAlgorithm, HashAlgorithmTag.Sha1, rawPassPhrase, clearPassPhrase, rand, out s2k, out iv); - } - else - { - encData = EncryptKeyDataV3(keyData, encAlgorithm, rawPassPhrase, clearPassPhrase, rand, out s2k, out iv); - } - - int s2kUsage = useSha1 - ? SecretKeyPacket.UsageSha1 - : SecretKeyPacket.UsageChecksum; - - if (isMasterKey) - { - this.secret = new SecretKeyPacket(pub.publicPk, encAlgorithm, s2kUsage, s2k, iv, encData); - } - else - { - this.secret = new SecretSubkeyPacket(pub.publicPk, encAlgorithm, s2kUsage, s2k, iv, encData); - } - } - } - catch (PgpException e) - { - throw e; - } - catch (Exception e) - { - throw new PgpException("Exception encrypting key", e); - } - } - - /// - /// Conversion of the passphrase characters to bytes is performed using Convert.ToByte(), which is - /// the historical behaviour of the library (1.7 and earlier). - /// - [Obsolete("Use the constructor taking an explicit 'useSha1' parameter instead")] - public PgpSecretKey( - int certificationLevel, - PgpKeyPair keyPair, - string id, - SymmetricKeyAlgorithmTag encAlgorithm, - char[] passPhrase, - PgpSignatureSubpacketVector hashedPackets, - PgpSignatureSubpacketVector unhashedPackets, - SecureRandom rand) - : this(certificationLevel, keyPair, id, encAlgorithm, passPhrase, false, hashedPackets, unhashedPackets, rand) - { - } - - /// - /// Conversion of the passphrase characters to bytes is performed using Convert.ToByte(), which is - /// the historical behaviour of the library (1.7 and earlier). - /// - public PgpSecretKey( - int certificationLevel, - PgpKeyPair keyPair, - string id, - SymmetricKeyAlgorithmTag encAlgorithm, - char[] passPhrase, - bool useSha1, - PgpSignatureSubpacketVector hashedPackets, - PgpSignatureSubpacketVector unhashedPackets, - SecureRandom rand) - : this(certificationLevel, keyPair, id, encAlgorithm, false, passPhrase, useSha1, hashedPackets, unhashedPackets, rand) - { - } - - /// - /// If utf8PassPhrase is true, conversion of the passphrase to bytes uses Encoding.UTF8.GetBytes(), otherwise the conversion - /// is performed using Convert.ToByte(), which is the historical behaviour of the library (1.7 and earlier). - /// - public PgpSecretKey( - int certificationLevel, - PgpKeyPair keyPair, - string id, - SymmetricKeyAlgorithmTag encAlgorithm, - bool utf8PassPhrase, - char[] passPhrase, - bool useSha1, - PgpSignatureSubpacketVector hashedPackets, - PgpSignatureSubpacketVector unhashedPackets, - SecureRandom rand) - : this(certificationLevel, keyPair, id, encAlgorithm, - PgpUtilities.EncodePassPhrase(passPhrase, utf8PassPhrase), true, - useSha1, hashedPackets, unhashedPackets, rand) - { - } - - /// - /// Allows the caller to handle the encoding of the passphrase to bytes. - /// - public PgpSecretKey( - int certificationLevel, - PgpKeyPair keyPair, - string id, - SymmetricKeyAlgorithmTag encAlgorithm, - byte[] rawPassPhrase, - bool useSha1, - PgpSignatureSubpacketVector hashedPackets, - PgpSignatureSubpacketVector unhashedPackets, - SecureRandom rand) - : this(certificationLevel, keyPair, id, encAlgorithm, rawPassPhrase, false, useSha1, hashedPackets, unhashedPackets, rand) - { - } - - internal PgpSecretKey( - int certificationLevel, - PgpKeyPair keyPair, - string id, - SymmetricKeyAlgorithmTag encAlgorithm, - byte[] rawPassPhrase, - bool clearPassPhrase, - bool useSha1, - PgpSignatureSubpacketVector hashedPackets, - PgpSignatureSubpacketVector unhashedPackets, - SecureRandom rand) - : this(keyPair.PrivateKey, CertifiedPublicKey(certificationLevel, keyPair, id, hashedPackets, unhashedPackets), - encAlgorithm, rawPassPhrase, clearPassPhrase, useSha1, rand, true) - { - } - - /// - /// Conversion of the passphrase characters to bytes is performed using Convert.ToByte(), which is - /// the historical behaviour of the library (1.7 and earlier). - /// - public PgpSecretKey( - int certificationLevel, - PgpKeyPair keyPair, - string id, - SymmetricKeyAlgorithmTag encAlgorithm, - HashAlgorithmTag hashAlgorithm, - char[] passPhrase, - bool useSha1, - PgpSignatureSubpacketVector hashedPackets, - PgpSignatureSubpacketVector unhashedPackets, - SecureRandom rand) - : this(certificationLevel, keyPair, id, encAlgorithm, hashAlgorithm, false, passPhrase, useSha1, hashedPackets, unhashedPackets, rand) - { - } - - /// - /// If utf8PassPhrase is true, conversion of the passphrase to bytes uses Encoding.UTF8.GetBytes(), otherwise the conversion - /// is performed using Convert.ToByte(), which is the historical behaviour of the library (1.7 and earlier). - /// - public PgpSecretKey( - int certificationLevel, - PgpKeyPair keyPair, - string id, - SymmetricKeyAlgorithmTag encAlgorithm, - HashAlgorithmTag hashAlgorithm, - bool utf8PassPhrase, - char[] passPhrase, - bool useSha1, - PgpSignatureSubpacketVector hashedPackets, - PgpSignatureSubpacketVector unhashedPackets, - SecureRandom rand) - : this(certificationLevel, keyPair, id, encAlgorithm, hashAlgorithm, - PgpUtilities.EncodePassPhrase(passPhrase, utf8PassPhrase), true, - useSha1, hashedPackets, unhashedPackets, rand) - { - } - - /// - /// Allows the caller to handle the encoding of the passphrase to bytes. - /// - public PgpSecretKey( - int certificationLevel, - PgpKeyPair keyPair, - string id, - SymmetricKeyAlgorithmTag encAlgorithm, - HashAlgorithmTag hashAlgorithm, - byte[] rawPassPhrase, - bool useSha1, - PgpSignatureSubpacketVector hashedPackets, - PgpSignatureSubpacketVector unhashedPackets, - SecureRandom rand) - : this(certificationLevel, keyPair, id, encAlgorithm, hashAlgorithm, rawPassPhrase, false, useSha1, hashedPackets, unhashedPackets, rand) - { - } - - internal PgpSecretKey( - int certificationLevel, - PgpKeyPair keyPair, - string id, - SymmetricKeyAlgorithmTag encAlgorithm, - HashAlgorithmTag hashAlgorithm, - byte[] rawPassPhrase, - bool clearPassPhrase, - bool useSha1, - PgpSignatureSubpacketVector hashedPackets, - PgpSignatureSubpacketVector unhashedPackets, - SecureRandom rand) - : this(keyPair.PrivateKey, CertifiedPublicKey(certificationLevel, keyPair, id, hashedPackets, unhashedPackets, hashAlgorithm), - encAlgorithm, rawPassPhrase, clearPassPhrase, useSha1, rand, true) - { - } - - private static PgpPublicKey CertifiedPublicKey( - int certificationLevel, - PgpKeyPair keyPair, - string id, - PgpSignatureSubpacketVector hashedPackets, - PgpSignatureSubpacketVector unhashedPackets) - { - PgpSignatureGenerator sGen; - try - { - sGen = new PgpSignatureGenerator(keyPair.PublicKey.Algorithm, HashAlgorithmTag.Sha1); - } - catch (Exception e) - { - throw new PgpException("Creating signature generator: " + e.Message, e); - } - - // - // Generate the certification - // - sGen.InitSign(certificationLevel, keyPair.PrivateKey); - - sGen.SetHashedSubpackets(hashedPackets); - sGen.SetUnhashedSubpackets(unhashedPackets); - - try - { - PgpSignature certification = sGen.GenerateCertification(id, keyPair.PublicKey); - return PgpPublicKey.AddCertification(keyPair.PublicKey, id, certification); - } - catch (Exception e) - { - throw new PgpException("Exception doing certification: " + e.Message, e); - } - } - - - private static PgpPublicKey CertifiedPublicKey( - int certificationLevel, - PgpKeyPair keyPair, - string id, - PgpSignatureSubpacketVector hashedPackets, - PgpSignatureSubpacketVector unhashedPackets, - HashAlgorithmTag hashAlgorithm) - { - PgpSignatureGenerator sGen; - try - { - sGen = new PgpSignatureGenerator(keyPair.PublicKey.Algorithm, hashAlgorithm); - } - catch (Exception e) - { - throw new PgpException("Creating signature generator: " + e.Message, e); - } - - // - // Generate the certification - // - sGen.InitSign(certificationLevel, keyPair.PrivateKey); - - sGen.SetHashedSubpackets(hashedPackets); - sGen.SetUnhashedSubpackets(unhashedPackets); - - try - { - PgpSignature certification = sGen.GenerateCertification(id, keyPair.PublicKey); - return PgpPublicKey.AddCertification(keyPair.PublicKey, id, certification); - } - catch (Exception e) - { - throw new PgpException("Exception doing certification: " + e.Message, e); - } - } - - public PgpSecretKey( - int certificationLevel, - PublicKeyAlgorithmTag algorithm, - AsymmetricKeyParameter pubKey, - AsymmetricKeyParameter privKey, - DateTime time, - string id, - SymmetricKeyAlgorithmTag encAlgorithm, - char[] passPhrase, - PgpSignatureSubpacketVector hashedPackets, - PgpSignatureSubpacketVector unhashedPackets, - SecureRandom rand) - : this(certificationLevel, - new PgpKeyPair(algorithm, pubKey, privKey, time), - id, encAlgorithm, passPhrase, false, hashedPackets, unhashedPackets, rand) - { - } - - public PgpSecretKey( - int certificationLevel, - PublicKeyAlgorithmTag algorithm, - AsymmetricKeyParameter pubKey, - AsymmetricKeyParameter privKey, - DateTime time, - string id, - SymmetricKeyAlgorithmTag encAlgorithm, - char[] passPhrase, - bool useSha1, - PgpSignatureSubpacketVector hashedPackets, - PgpSignatureSubpacketVector unhashedPackets, - SecureRandom rand) - : this(certificationLevel, new PgpKeyPair(algorithm, pubKey, privKey, time), id, encAlgorithm, passPhrase, useSha1, hashedPackets, unhashedPackets, rand) - { - } - - /// - /// Check if this key has an algorithm type that makes it suitable to use for signing. - /// - /// - /// Note: with version 4 keys KeyFlags subpackets should also be considered when present for - /// determining the preferred use of the key. - /// - /// - /// true if this key algorithm is suitable for use with signing. - /// - public bool IsSigningKey - { - get - { - switch (pub.Algorithm) - { - case PublicKeyAlgorithmTag.RsaGeneral: - case PublicKeyAlgorithmTag.RsaSign: - case PublicKeyAlgorithmTag.Dsa: - case PublicKeyAlgorithmTag.ECDsa: - case PublicKeyAlgorithmTag.ElGamalGeneral: - return true; - default: - return false; - } - } - } - - /// True, if this is a master key. - public bool IsMasterKey - { - get { return pub.IsMasterKey; } - } - - /// Detect if the Secret Key's Private Key is empty or not - public bool IsPrivateKeyEmpty - { - get - { - byte[] secKeyData = secret.GetSecretKeyData(); - - return secKeyData == null || secKeyData.Length < 1; - } - } - - /// The algorithm the key is encrypted with. - public SymmetricKeyAlgorithmTag KeyEncryptionAlgorithm - { - get { return secret.EncAlgorithm; } - } - - /// The key ID of the public key associated with this key. - public long KeyId - { - get { return pub.KeyId; } - } - - /// Return the S2K usage associated with this key. - public int S2kUsage - { - get { return secret.S2kUsage; } - } - - /// Return the S2K used to process this key. - public S2k S2k - { - get { return secret.S2k; } - } - - /// The public key associated with this key. - public PgpPublicKey PublicKey - { - get { return pub; } - } - - /// Allows enumeration of any user IDs associated with the key. - /// An IEnumerable of string objects. - public IEnumerable UserIds - { - get { return pub.GetUserIds(); } - } - - /// Allows enumeration of any user attribute vectors associated with the key. - /// An IEnumerable of string objects. - public IEnumerable UserAttributes - { - get { return pub.GetUserAttributes(); } - } - - private byte[] ExtractKeyData(byte[] rawPassPhrase, bool clearPassPhrase) - { - SymmetricKeyAlgorithmTag encAlgorithm = secret.EncAlgorithm; - byte[] encData = secret.GetSecretKeyData(); - - if (encAlgorithm == SymmetricKeyAlgorithmTag.Null) - // TODO Check checksum here? - return encData; - - // TODO Factor this block out as 'decryptData' - try - { - KeyParameter key = PgpUtilities.DoMakeKeyFromPassPhrase(secret.EncAlgorithm, secret.S2k, rawPassPhrase, clearPassPhrase); - byte[] iv = secret.GetIV(); - byte[] data; - - if (secret.PublicKeyPacket.Version >= 4) - { - data = RecoverKeyData(encAlgorithm, "/CFB/NoPadding", key, iv, encData, 0, encData.Length); - - bool useSha1 = secret.S2kUsage == SecretKeyPacket.UsageSha1; - byte[] check = Checksum(useSha1, data, (useSha1) ? data.Length - 20 : data.Length - 2); - - for (int i = 0; i != check.Length; i++) - { - if (check[i] != data[data.Length - check.Length + i]) - { - throw new PgpException("Checksum mismatch at " + i + " of " + check.Length); - } - } - } - else // version 2 or 3, RSA only. - { - data = new byte[encData.Length]; - - iv = Arrays.Clone(iv); - - // - // read in the four numbers - // - int pos = 0; - - for (int i = 0; i != 4; i++) - { - int encLen = (((encData[pos] << 8) | (encData[pos + 1] & 0xff)) + 7) / 8; - - data[pos] = encData[pos]; - data[pos + 1] = encData[pos + 1]; - pos += 2; - - byte[] tmp = RecoverKeyData(encAlgorithm, "/CFB/NoPadding", key, iv, encData, pos, encLen); - Array.Copy(tmp, 0, data, pos, encLen); - pos += encLen; - - if (i != 3) - { - Array.Copy(encData, pos - iv.Length, iv, 0, iv.Length); - } - } - - // - // verify and copy checksum - // - - data[pos] = encData[pos]; - data[pos + 1] = encData[pos + 1]; - - int cs = ((encData[pos] << 8) & 0xff00) | (encData[pos + 1] & 0xff); - int calcCs = 0; - for (int j = 0; j < pos; j++) - { - calcCs += data[j] & 0xff; - } - - calcCs &= 0xffff; - if (calcCs != cs) - { - throw new PgpException("Checksum mismatch: passphrase wrong, expected " - + cs.ToString("X") - + " found " + calcCs.ToString("X")); - } - } - - return data; - } - catch (PgpException e) - { - throw e; - } - catch (Exception e) - { - throw new PgpException("Exception decrypting key", e); - } - } - - private static byte[] RecoverKeyData(SymmetricKeyAlgorithmTag encAlgorithm, string modeAndPadding, - KeyParameter key, byte[] iv, byte[] keyData, int keyOff, int keyLen) - { - IBufferedCipher c; - try - { - string cName = PgpUtilities.GetSymmetricCipherName(encAlgorithm); - c = CipherUtilities.GetCipher(cName + modeAndPadding); - } - catch (Exception e) - { - throw new PgpException("Exception creating cipher", e); - } - - c.Init(false, new ParametersWithIV(key, iv)); - - return c.DoFinal(keyData, keyOff, keyLen); - } - - /// Extract a PgpPrivateKey from this secret key's encrypted contents. - /// - /// Conversion of the passphrase characters to bytes is performed using Convert.ToByte(), which is - /// the historical behaviour of the library (1.7 and earlier). - /// - public PgpPrivateKey ExtractPrivateKey(char[] passPhrase) - { - return DoExtractPrivateKey(PgpUtilities.EncodePassPhrase(passPhrase, false), true); - } - - /// Extract a PgpPrivateKey from this secret key's encrypted contents. - /// - /// The passphrase is encoded to bytes using UTF8 (Encoding.UTF8.GetBytes). - /// - public PgpPrivateKey ExtractPrivateKeyUtf8(char[] passPhrase) - { - return DoExtractPrivateKey(PgpUtilities.EncodePassPhrase(passPhrase, true), true); - } - - /// Extract a PgpPrivateKey from this secret key's encrypted contents. - /// - /// Allows the caller to handle the encoding of the passphrase to bytes. - /// - public PgpPrivateKey ExtractPrivateKeyRaw(byte[] rawPassPhrase) - { - return DoExtractPrivateKey(rawPassPhrase, false); - } - - internal PgpPrivateKey DoExtractPrivateKey(byte[] rawPassPhrase, bool clearPassPhrase) - { - if (IsPrivateKeyEmpty) - return null; - - PublicKeyPacket pubPk = secret.PublicKeyPacket; - try - { - byte[] data = ExtractKeyData(rawPassPhrase, clearPassPhrase); - BcpgInputStream bcpgIn = BcpgInputStream.Wrap(new MemoryStream(data, false)); - AsymmetricKeyParameter privateKey; - switch (pubPk.Algorithm) - { - case PublicKeyAlgorithmTag.RsaEncrypt: - case PublicKeyAlgorithmTag.RsaGeneral: - case PublicKeyAlgorithmTag.RsaSign: - RsaPublicBcpgKey rsaPub = (RsaPublicBcpgKey)pubPk.Key; - RsaSecretBcpgKey rsaPriv = new RsaSecretBcpgKey(bcpgIn); - RsaPrivateCrtKeyParameters rsaPrivSpec = new RsaPrivateCrtKeyParameters( - rsaPriv.Modulus, - rsaPub.PublicExponent, - rsaPriv.PrivateExponent, - rsaPriv.PrimeP, - rsaPriv.PrimeQ, - rsaPriv.PrimeExponentP, - rsaPriv.PrimeExponentQ, - rsaPriv.CrtCoefficient); - privateKey = rsaPrivSpec; - break; - case PublicKeyAlgorithmTag.Dsa: - DsaPublicBcpgKey dsaPub = (DsaPublicBcpgKey)pubPk.Key; - DsaSecretBcpgKey dsaPriv = new DsaSecretBcpgKey(bcpgIn); - DsaParameters dsaParams = new DsaParameters(dsaPub.P, dsaPub.Q, dsaPub.G); - privateKey = new DsaPrivateKeyParameters(dsaPriv.X, dsaParams); - break; - case PublicKeyAlgorithmTag.ECDH: - privateKey = GetECKey("ECDH", bcpgIn); - break; - case PublicKeyAlgorithmTag.ECDsa: - privateKey = GetECKey("ECDSA", bcpgIn); - break; - case PublicKeyAlgorithmTag.ElGamalEncrypt: - case PublicKeyAlgorithmTag.ElGamalGeneral: - ElGamalPublicBcpgKey elPub = (ElGamalPublicBcpgKey)pubPk.Key; - ElGamalSecretBcpgKey elPriv = new ElGamalSecretBcpgKey(bcpgIn); - ElGamalParameters elParams = new ElGamalParameters(elPub.P, elPub.G); - privateKey = new ElGamalPrivateKeyParameters(elPriv.X, elParams); - break; - default: - throw new PgpException("unknown public key algorithm encountered"); - } - - return new PgpPrivateKey(KeyId, pubPk, privateKey); - } - catch (PgpException e) - { - throw e; - } - catch (Exception e) - { - throw new PgpException("Exception constructing key", e); - } - } - - private ECPrivateKeyParameters GetECKey(string algorithm, BcpgInputStream bcpgIn) - { - ECPublicBcpgKey ecdsaPub = (ECPublicBcpgKey)secret.PublicKeyPacket.Key; - ECSecretBcpgKey ecdsaPriv = new ECSecretBcpgKey(bcpgIn); - return new ECPrivateKeyParameters(algorithm, ecdsaPriv.X, ecdsaPub.CurveOid); - } - - private static byte[] Checksum( - bool useSha1, - byte[] bytes, - int length) - { - if (useSha1) - { - try - { - IDigest dig = DigestUtilities.GetDigest("SHA1"); - dig.BlockUpdate(bytes, 0, length); - return DigestUtilities.DoFinal(dig); - } - //catch (NoSuchAlgorithmException e) - catch (Exception e) - { - throw new PgpException("Can't find SHA-1", e); - } - } - else - { - int Checksum = 0; - for (int i = 0; i != length; i++) - { - Checksum += bytes[i]; - } - - return new byte[] { (byte)(Checksum >> 8), (byte)Checksum }; - } - } - - public byte[] GetEncoded() - { - MemoryStream bOut = new MemoryStream(); - Encode(bOut); - return bOut.ToArray(); - } - - public void Encode( - Stream outStr) - { - BcpgOutputStream bcpgOut = BcpgOutputStream.Wrap(outStr); - - bcpgOut.WritePacket(secret); - if (pub.trustPk != null) - { - bcpgOut.WritePacket(pub.trustPk); - } - - if (pub.subSigs == null) // is not a sub key - { - foreach (PgpSignature keySig in pub.keySigs) - { - keySig.Encode(bcpgOut); - } - - for (int i = 0; i != pub.ids.Count; i++) - { - object pubID = pub.ids[i]; - if (pubID is string) - { - string id = (string) pubID; - bcpgOut.WritePacket(new UserIdPacket(id)); - } - else - { - PgpUserAttributeSubpacketVector v = (PgpUserAttributeSubpacketVector) pubID; - bcpgOut.WritePacket(new UserAttributePacket(v.ToSubpacketArray())); - } - - if (pub.idTrusts[i] != null) - { - bcpgOut.WritePacket((ContainedPacket)pub.idTrusts[i]); - } - - foreach (PgpSignature sig in (IList) pub.idSigs[i]) - { - sig.Encode(bcpgOut); - } - } - } - else - { - foreach (PgpSignature subSig in pub.subSigs) - { - subSig.Encode(bcpgOut); - } - } - - // TODO Check that this is right/necessary - //bcpgOut.Finish(); - } - - /// - /// Return a copy of the passed in secret key, encrypted using a new password - /// and the passed in algorithm. - /// - /// - /// Conversion of the passphrase characters to bytes is performed using Convert.ToByte(), which is - /// the historical behaviour of the library (1.7 and earlier). - /// - /// The PgpSecretKey to be copied. - /// The current password for the key. - /// The new password for the key. - /// The algorithm to be used for the encryption. - /// Source of randomness. - public static PgpSecretKey CopyWithNewPassword( - PgpSecretKey key, - char[] oldPassPhrase, - char[] newPassPhrase, - SymmetricKeyAlgorithmTag newEncAlgorithm, - SecureRandom rand) - { - return DoCopyWithNewPassword(key, PgpUtilities.EncodePassPhrase(oldPassPhrase, false), - PgpUtilities.EncodePassPhrase(newPassPhrase, false), true, newEncAlgorithm, rand); - } - - /// - /// Return a copy of the passed in secret key, encrypted using a new password - /// and the passed in algorithm. - /// - /// - /// The passphrase is encoded to bytes using UTF8 (Encoding.UTF8.GetBytes). - /// - /// The PgpSecretKey to be copied. - /// The current password for the key. - /// The new password for the key. - /// The algorithm to be used for the encryption. - /// Source of randomness. - public static PgpSecretKey CopyWithNewPasswordUtf8( - PgpSecretKey key, - char[] oldPassPhrase, - char[] newPassPhrase, - SymmetricKeyAlgorithmTag newEncAlgorithm, - SecureRandom rand) - { - return DoCopyWithNewPassword(key, PgpUtilities.EncodePassPhrase(oldPassPhrase, true), - PgpUtilities.EncodePassPhrase(newPassPhrase, true), true, newEncAlgorithm, rand); - } - - /// - /// Return a copy of the passed in secret key, encrypted using a new password - /// and the passed in algorithm. - /// - /// - /// Allows the caller to handle the encoding of the passphrase to bytes. - /// - /// The PgpSecretKey to be copied. - /// The current password for the key. - /// The new password for the key. - /// The algorithm to be used for the encryption. - /// Source of randomness. - public static PgpSecretKey CopyWithNewPasswordRaw( - PgpSecretKey key, - byte[] rawOldPassPhrase, - byte[] rawNewPassPhrase, - SymmetricKeyAlgorithmTag newEncAlgorithm, - SecureRandom rand) - { - return DoCopyWithNewPassword(key, rawOldPassPhrase, rawNewPassPhrase, false, newEncAlgorithm, rand); - } - - internal static PgpSecretKey DoCopyWithNewPassword( - PgpSecretKey key, - byte[] rawOldPassPhrase, - byte[] rawNewPassPhrase, - bool clearPassPhrase, - SymmetricKeyAlgorithmTag newEncAlgorithm, - SecureRandom rand) - { - if (key.IsPrivateKeyEmpty) - throw new PgpException("no private key in this SecretKey - public key present only."); - - byte[] rawKeyData = key.ExtractKeyData(rawOldPassPhrase, clearPassPhrase); - int s2kUsage = key.secret.S2kUsage; - byte[] iv = null; - S2k s2k = null; - byte[] keyData; - PublicKeyPacket pubKeyPacket = key.secret.PublicKeyPacket; - - if (newEncAlgorithm == SymmetricKeyAlgorithmTag.Null) - { - s2kUsage = SecretKeyPacket.UsageNone; - if (key.secret.S2kUsage == SecretKeyPacket.UsageSha1) // SHA-1 hash, need to rewrite Checksum - { - keyData = new byte[rawKeyData.Length - 18]; - - Array.Copy(rawKeyData, 0, keyData, 0, keyData.Length - 2); - - byte[] check = Checksum(false, keyData, keyData.Length - 2); - - keyData[keyData.Length - 2] = check[0]; - keyData[keyData.Length - 1] = check[1]; - } - else - { - keyData = rawKeyData; - } - } - else - { - if (s2kUsage == SecretKeyPacket.UsageNone) - { - s2kUsage = SecretKeyPacket.UsageChecksum; - } - - try - { - if (pubKeyPacket.Version >= 4) - { - keyData = EncryptKeyDataV4(rawKeyData, newEncAlgorithm, HashAlgorithmTag.Sha1, rawNewPassPhrase, clearPassPhrase, rand, out s2k, out iv); - } - else - { - keyData = EncryptKeyDataV3(rawKeyData, newEncAlgorithm, rawNewPassPhrase, clearPassPhrase, rand, out s2k, out iv); - } - } - catch (PgpException e) - { - throw e; - } - catch (Exception e) - { - throw new PgpException("Exception encrypting key", e); - } - } - - SecretKeyPacket secret; - if (key.secret is SecretSubkeyPacket) - { - secret = new SecretSubkeyPacket(pubKeyPacket, newEncAlgorithm, s2kUsage, s2k, iv, keyData); - } - else - { - secret = new SecretKeyPacket(pubKeyPacket, newEncAlgorithm, s2kUsage, s2k, iv, keyData); - } - - return new PgpSecretKey(secret, key.pub); - } - - /// Replace the passed the public key on the passed in secret key. - /// Secret key to change. - /// New public key. - /// A new secret key. - /// If KeyId's do not match. - public static PgpSecretKey ReplacePublicKey( - PgpSecretKey secretKey, - PgpPublicKey publicKey) - { - if (publicKey.KeyId != secretKey.KeyId) - throw new ArgumentException("KeyId's do not match"); - - return new PgpSecretKey(secretKey.secret, publicKey); - } - - private static byte[] EncryptKeyDataV3( - byte[] rawKeyData, - SymmetricKeyAlgorithmTag encAlgorithm, - byte[] rawPassPhrase, - bool clearPassPhrase, - SecureRandom random, - out S2k s2k, - out byte[] iv) - { - // Version 2 or 3 - RSA Keys only - - s2k = null; - iv = null; - - KeyParameter encKey = PgpUtilities.DoMakeKeyFromPassPhrase(encAlgorithm, s2k, rawPassPhrase, clearPassPhrase); - - byte[] keyData = new byte[rawKeyData.Length]; - - // - // process 4 numbers - // - int pos = 0; - for (int i = 0; i != 4; i++) - { - int encLen = (((rawKeyData[pos] << 8) | (rawKeyData[pos + 1] & 0xff)) + 7) / 8; - - keyData[pos] = rawKeyData[pos]; - keyData[pos + 1] = rawKeyData[pos + 1]; - - byte[] tmp; - if (i == 0) - { - tmp = EncryptData(encAlgorithm, encKey, rawKeyData, pos + 2, encLen, random, ref iv); - } - else - { - byte[] tmpIv = Arrays.CopyOfRange(keyData, pos - iv.Length, pos); - - tmp = EncryptData(encAlgorithm, encKey, rawKeyData, pos + 2, encLen, random, ref tmpIv); - } - - Array.Copy(tmp, 0, keyData, pos + 2, tmp.Length); - pos += 2 + encLen; - } - - // - // copy in checksum. - // - keyData[pos] = rawKeyData[pos]; - keyData[pos + 1] = rawKeyData[pos + 1]; - - return keyData; - } - - private static byte[] EncryptKeyDataV4( - byte[] rawKeyData, - SymmetricKeyAlgorithmTag encAlgorithm, - HashAlgorithmTag hashAlgorithm, - byte[] rawPassPhrase, - bool clearPassPhrase, - SecureRandom random, - out S2k s2k, - out byte[] iv) - { - s2k = PgpUtilities.GenerateS2k(hashAlgorithm, 0x60, random); - - KeyParameter key = PgpUtilities.DoMakeKeyFromPassPhrase(encAlgorithm, s2k, rawPassPhrase, clearPassPhrase); - - iv = null; - return EncryptData(encAlgorithm, key, rawKeyData, 0, rawKeyData.Length, random, ref iv); - } - - private static byte[] EncryptData( - SymmetricKeyAlgorithmTag encAlgorithm, - KeyParameter key, - byte[] data, - int dataOff, - int dataLen, - SecureRandom random, - ref byte[] iv) - { - IBufferedCipher c; - try - { - string cName = PgpUtilities.GetSymmetricCipherName(encAlgorithm); - c = CipherUtilities.GetCipher(cName + "/CFB/NoPadding"); - } - catch (Exception e) - { - throw new PgpException("Exception creating cipher", e); - } - - if (iv == null) - { - iv = PgpUtilities.GenerateIV(c.GetBlockSize(), random); - } - - c.Init(true, new ParametersWithRandom(new ParametersWithIV(key, iv), random)); - - return c.DoFinal(data, dataOff, dataLen); - } - - /// - /// Parse a secret key from one of the GPG S expression keys associating it with the passed in public key. - /// - /// - /// Conversion of the passphrase characters to bytes is performed using Convert.ToByte(), which is - /// the historical behaviour of the library (1.7 and earlier). - /// - public static PgpSecretKey ParseSecretKeyFromSExpr(Stream inputStream, char[] passPhrase, PgpPublicKey pubKey) - { - return DoParseSecretKeyFromSExpr(inputStream, PgpUtilities.EncodePassPhrase(passPhrase, false), true, pubKey); - } - - /// - /// Parse a secret key from one of the GPG S expression keys associating it with the passed in public key. - /// - /// - /// The passphrase is encoded to bytes using UTF8 (Encoding.UTF8.GetBytes). - /// - public static PgpSecretKey ParseSecretKeyFromSExprUtf8(Stream inputStream, char[] passPhrase, PgpPublicKey pubKey) - { - return DoParseSecretKeyFromSExpr(inputStream, PgpUtilities.EncodePassPhrase(passPhrase, true), true, pubKey); - } - - /// - /// Parse a secret key from one of the GPG S expression keys associating it with the passed in public key. - /// - /// - /// Allows the caller to handle the encoding of the passphrase to bytes. - /// - public static PgpSecretKey ParseSecretKeyFromSExprRaw(Stream inputStream, byte[] rawPassPhrase, PgpPublicKey pubKey) - { - return DoParseSecretKeyFromSExpr(inputStream, rawPassPhrase, false, pubKey); - } - - internal static PgpSecretKey DoParseSecretKeyFromSExpr(Stream inputStream, byte[] rawPassPhrase, bool clearPassPhrase, PgpPublicKey pubKey) - { - SXprUtilities.SkipOpenParenthesis(inputStream); - - string type = SXprUtilities.ReadString(inputStream, inputStream.ReadByte()); - if (type.Equals("protected-private-key")) - { - SXprUtilities.SkipOpenParenthesis(inputStream); - - string curveName; - - string keyType = SXprUtilities.ReadString(inputStream, inputStream.ReadByte()); - if (keyType.Equals("ecc")) - { - SXprUtilities.SkipOpenParenthesis(inputStream); - - string curveID = SXprUtilities.ReadString(inputStream, inputStream.ReadByte()); - curveName = SXprUtilities.ReadString(inputStream, inputStream.ReadByte()); - - SXprUtilities.SkipCloseParenthesis(inputStream); - } - else - { - throw new PgpException("no curve details found"); - } - - byte[] qVal; - - SXprUtilities.SkipOpenParenthesis(inputStream); - - type = SXprUtilities.ReadString(inputStream, inputStream.ReadByte()); - if (type.Equals("q")) - { - qVal = SXprUtilities.ReadBytes(inputStream, inputStream.ReadByte()); - } - else - { - throw new PgpException("no q value found"); - } - - SXprUtilities.SkipCloseParenthesis(inputStream); - - byte[] dValue = GetDValue(inputStream, rawPassPhrase, clearPassPhrase, curveName); - // TODO: check SHA-1 hash. - - return new PgpSecretKey(new SecretKeyPacket(pubKey.PublicKeyPacket, SymmetricKeyAlgorithmTag.Null, null, null, - new ECSecretBcpgKey(new BigInteger(1, dValue)).GetEncoded()), pubKey); - } - - throw new PgpException("unknown key type found"); - } - - /// - /// Parse a secret key from one of the GPG S expression keys. - /// - /// - /// Conversion of the passphrase characters to bytes is performed using Convert.ToByte(), which is - /// the historical behaviour of the library (1.7 and earlier). - /// - public static PgpSecretKey ParseSecretKeyFromSExpr(Stream inputStream, char[] passPhrase) - { - return DoParseSecretKeyFromSExpr(inputStream, PgpUtilities.EncodePassPhrase(passPhrase, false), true); - } - - /// - /// Parse a secret key from one of the GPG S expression keys. - /// - /// - /// The passphrase is encoded to bytes using UTF8 (Encoding.UTF8.GetBytes). - /// - public static PgpSecretKey ParseSecretKeyFromSExprUtf8(Stream inputStream, char[] passPhrase) - { - return DoParseSecretKeyFromSExpr(inputStream, PgpUtilities.EncodePassPhrase(passPhrase, true), true); - } - - /// - /// Parse a secret key from one of the GPG S expression keys. - /// - /// - /// Allows the caller to handle the encoding of the passphrase to bytes. - /// - public static PgpSecretKey ParseSecretKeyFromSExprRaw(Stream inputStream, byte[] rawPassPhrase) - { - return DoParseSecretKeyFromSExpr(inputStream, rawPassPhrase, false); - } - - /// - /// Parse a secret key from one of the GPG S expression keys. - /// - internal static PgpSecretKey DoParseSecretKeyFromSExpr(Stream inputStream, byte[] rawPassPhrase, bool clearPassPhrase) - { - SXprUtilities.SkipOpenParenthesis(inputStream); - - string type = SXprUtilities.ReadString(inputStream, inputStream.ReadByte()); - if (type.Equals("protected-private-key")) - { - SXprUtilities.SkipOpenParenthesis(inputStream); - - string curveName; - - string keyType = SXprUtilities.ReadString(inputStream, inputStream.ReadByte()); - if (keyType.Equals("ecc")) - { - SXprUtilities.SkipOpenParenthesis(inputStream); - - string curveID = SXprUtilities.ReadString(inputStream, inputStream.ReadByte()); - curveName = SXprUtilities.ReadString(inputStream, inputStream.ReadByte()); - - if (Platform.StartsWith(curveName, "NIST ")) - { - curveName = curveName.Substring("NIST ".Length); - } - - SXprUtilities.SkipCloseParenthesis(inputStream); - } - else - { - throw new PgpException("no curve details found"); - } - - byte[] qVal; - - SXprUtilities.SkipOpenParenthesis(inputStream); - - type = SXprUtilities.ReadString(inputStream, inputStream.ReadByte()); - if (type.Equals("q")) - { - qVal = SXprUtilities.ReadBytes(inputStream, inputStream.ReadByte()); - } - else - { - throw new PgpException("no q value found"); - } - - PublicKeyPacket pubPacket = new PublicKeyPacket(PublicKeyAlgorithmTag.ECDsa, DateTime.UtcNow, - new ECDsaPublicBcpgKey(ECNamedCurveTable.GetOid(curveName), new BigInteger(1, qVal))); - - SXprUtilities.SkipCloseParenthesis(inputStream); - - byte[] dValue = GetDValue(inputStream, rawPassPhrase, clearPassPhrase, curveName); - // TODO: check SHA-1 hash. - - return new PgpSecretKey(new SecretKeyPacket(pubPacket, SymmetricKeyAlgorithmTag.Null, null, null, - new ECSecretBcpgKey(new BigInteger(1, dValue)).GetEncoded()), new PgpPublicKey(pubPacket)); - } - - throw new PgpException("unknown key type found"); - } - - private static byte[] GetDValue(Stream inputStream, byte[] rawPassPhrase, bool clearPassPhrase, string curveName) - { - string type; - SXprUtilities.SkipOpenParenthesis(inputStream); - - string protection; - S2k s2k; - byte[] iv; - byte[] secKeyData; - - type = SXprUtilities.ReadString(inputStream, inputStream.ReadByte()); - if (type.Equals("protected")) - { - protection = SXprUtilities.ReadString(inputStream, inputStream.ReadByte()); - - SXprUtilities.SkipOpenParenthesis(inputStream); - - s2k = SXprUtilities.ParseS2k(inputStream); - - iv = SXprUtilities.ReadBytes(inputStream, inputStream.ReadByte()); - - SXprUtilities.SkipCloseParenthesis(inputStream); - - secKeyData = SXprUtilities.ReadBytes(inputStream, inputStream.ReadByte()); - } - else - { - throw new PgpException("protected block not found"); - } - - // TODO: recognise other algorithms - KeyParameter key = PgpUtilities.DoMakeKeyFromPassPhrase(SymmetricKeyAlgorithmTag.Aes128, s2k, rawPassPhrase, clearPassPhrase); - - byte[] data = RecoverKeyData(SymmetricKeyAlgorithmTag.Aes128, "/CBC/NoPadding", key, iv, secKeyData, 0, secKeyData.Length); - - // - // parse the secret key S-expr - // - Stream keyIn = new MemoryStream(data, false); - - SXprUtilities.SkipOpenParenthesis(keyIn); - SXprUtilities.SkipOpenParenthesis(keyIn); - SXprUtilities.SkipOpenParenthesis(keyIn); - String name = SXprUtilities.ReadString(keyIn, keyIn.ReadByte()); - return SXprUtilities.ReadBytes(keyIn, keyIn.ReadByte()); - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpSecretKeyRing.cs b/bc-sharp-crypto/src/openpgp/PgpSecretKeyRing.cs deleted file mode 100644 index 70cd721..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpSecretKeyRing.cs +++ /dev/null @@ -1,308 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// - /// Class to hold a single master secret key and its subkeys. - ///

    - /// Often PGP keyring files consist of multiple master keys, if you are trying to process - /// or construct one of these you should use the PgpSecretKeyRingBundle class. - ///

    - ///     - public class PgpSecretKeyRing - : PgpKeyRing - { - private readonly IList keys; - private readonly IList extraPubKeys; - - internal PgpSecretKeyRing( - IList keys) - : this(keys, Platform.CreateArrayList()) - { - } - - private PgpSecretKeyRing( - IList keys, - IList extraPubKeys) - { - this.keys = keys; - this.extraPubKeys = extraPubKeys; - } - - public PgpSecretKeyRing( - byte[] encoding) - : this(new MemoryStream(encoding)) - { - } - - public PgpSecretKeyRing( - Stream inputStream) - { - this.keys = Platform.CreateArrayList(); - this.extraPubKeys = Platform.CreateArrayList(); - - BcpgInputStream bcpgInput = BcpgInputStream.Wrap(inputStream); - - PacketTag initialTag = bcpgInput.NextPacketTag(); - if (initialTag != PacketTag.SecretKey && initialTag != PacketTag.SecretSubkey) - { - throw new IOException("secret key ring doesn't start with secret key tag: " - + "tag 0x" + ((int)initialTag).ToString("X")); - } - - SecretKeyPacket secret = (SecretKeyPacket) bcpgInput.ReadPacket(); - - // - // ignore GPG comment packets if found. - // - while (bcpgInput.NextPacketTag() == PacketTag.Experimental2) - { - bcpgInput.ReadPacket(); - } - - TrustPacket trust = ReadOptionalTrustPacket(bcpgInput); - - // revocation and direct signatures - IList keySigs = ReadSignaturesAndTrust(bcpgInput); - - IList ids, idTrusts, idSigs; - ReadUserIDs(bcpgInput, out ids, out idTrusts, out idSigs); - - keys.Add(new PgpSecretKey(secret, new PgpPublicKey(secret.PublicKeyPacket, trust, keySigs, ids, idTrusts, idSigs))); - - - // Read subkeys - while (bcpgInput.NextPacketTag() == PacketTag.SecretSubkey - || bcpgInput.NextPacketTag() == PacketTag.PublicSubkey) - { - if (bcpgInput.NextPacketTag() == PacketTag.SecretSubkey) - { - SecretSubkeyPacket sub = (SecretSubkeyPacket) bcpgInput.ReadPacket(); - - // - // ignore GPG comment packets if found. - // - while (bcpgInput.NextPacketTag() == PacketTag.Experimental2) - { - bcpgInput.ReadPacket(); - } - - TrustPacket subTrust = ReadOptionalTrustPacket(bcpgInput); - IList sigList = ReadSignaturesAndTrust(bcpgInput); - - keys.Add(new PgpSecretKey(sub, new PgpPublicKey(sub.PublicKeyPacket, subTrust, sigList))); - } - else - { - PublicSubkeyPacket sub = (PublicSubkeyPacket) bcpgInput.ReadPacket(); - - TrustPacket subTrust = ReadOptionalTrustPacket(bcpgInput); - IList sigList = ReadSignaturesAndTrust(bcpgInput); - - extraPubKeys.Add(new PgpPublicKey(sub, subTrust, sigList)); - } - } - } - - /// Return the public key for the master key. - public PgpPublicKey GetPublicKey() - { - return ((PgpSecretKey) keys[0]).PublicKey; - } - - /// Return the master private key. - public PgpSecretKey GetSecretKey() - { - return (PgpSecretKey) keys[0]; - } - - /// Allows enumeration of the secret keys. - /// An IEnumerable of PgpSecretKey objects. - public IEnumerable GetSecretKeys() - { - return new EnumerableProxy(keys); - } - - public PgpSecretKey GetSecretKey( - long keyId) - { - foreach (PgpSecretKey k in keys) - { - if (keyId == k.KeyId) - { - return k; - } - } - - return null; - } - - /// - /// Return an iterator of the public keys in the secret key ring that - /// have no matching private key. At the moment only personal certificate data - /// appears in this fashion. - /// - /// An IEnumerable of unattached, or extra, public keys. - public IEnumerable GetExtraPublicKeys() - { - return new EnumerableProxy(extraPubKeys); - } - - public byte[] GetEncoded() - { - MemoryStream bOut = new MemoryStream(); - - Encode(bOut); - - return bOut.ToArray(); - } - - public void Encode( - Stream outStr) - { - if (outStr == null) - throw new ArgumentNullException("outStr"); - - foreach (PgpSecretKey key in keys) - { - key.Encode(outStr); - } - foreach (PgpPublicKey extraPubKey in extraPubKeys) - { - extraPubKey.Encode(outStr); - } - } - - /// - /// Replace the public key set on the secret ring with the corresponding key off the public ring. - /// - /// Secret ring to be changed. - /// Public ring containing the new public key set. - public static PgpSecretKeyRing ReplacePublicKeys( - PgpSecretKeyRing secretRing, - PgpPublicKeyRing publicRing) - { - IList newList = Platform.CreateArrayList(secretRing.keys.Count); - - foreach (PgpSecretKey sk in secretRing.keys) - { - PgpPublicKey pk = publicRing.GetPublicKey(sk.KeyId); - - newList.Add(PgpSecretKey.ReplacePublicKey(sk, pk)); - } - - return new PgpSecretKeyRing(newList); - } - - /// - /// Return a copy of the passed in secret key ring, with the master key and sub keys encrypted - /// using a new password and the passed in algorithm. - /// - /// The PgpSecretKeyRing to be copied. - /// The current password for key. - /// The new password for the key. - /// The algorithm to be used for the encryption. - /// Source of randomness. - public static PgpSecretKeyRing CopyWithNewPassword( - PgpSecretKeyRing ring, - char[] oldPassPhrase, - char[] newPassPhrase, - SymmetricKeyAlgorithmTag newEncAlgorithm, - SecureRandom rand) - { - IList newKeys = Platform.CreateArrayList(ring.keys.Count); - foreach (PgpSecretKey secretKey in ring.GetSecretKeys()) - { - if (secretKey.IsPrivateKeyEmpty) - { - newKeys.Add(secretKey); - } - else - { - newKeys.Add(PgpSecretKey.CopyWithNewPassword(secretKey, oldPassPhrase, newPassPhrase, newEncAlgorithm, rand)); - } - } - - return new PgpSecretKeyRing(newKeys, ring.extraPubKeys); - } - - /// - /// Returns a new key ring with the secret key passed in either added or - /// replacing an existing one with the same key ID. - /// - /// The secret key ring to be modified. - /// The secret key to be inserted. - /// A new PgpSecretKeyRing - public static PgpSecretKeyRing InsertSecretKey( - PgpSecretKeyRing secRing, - PgpSecretKey secKey) - { - IList keys = Platform.CreateArrayList(secRing.keys); - bool found = false; - bool masterFound = false; - - for (int i = 0; i != keys.Count; i++) - { - PgpSecretKey key = (PgpSecretKey) keys[i]; - - if (key.KeyId == secKey.KeyId) - { - found = true; - keys[i] = secKey; - } - if (key.IsMasterKey) - { - masterFound = true; - } - } - - if (!found) - { - if (secKey.IsMasterKey) - { - if (masterFound) - throw new ArgumentException("cannot add a master key to a ring that already has one"); - - keys.Insert(0, secKey); - } - else - { - keys.Add(secKey); - } - } - - return new PgpSecretKeyRing(keys, secRing.extraPubKeys); - } - - /// Returns a new key ring with the secret key passed in removed from the key ring. - /// The secret key ring to be modified. - /// The secret key to be removed. - /// A new PgpSecretKeyRing, or null if secKey is not found. - public static PgpSecretKeyRing RemoveSecretKey( - PgpSecretKeyRing secRing, - PgpSecretKey secKey) - { - IList keys = Platform.CreateArrayList(secRing.keys); - bool found = false; - - for (int i = 0; i < keys.Count; i++) - { - PgpSecretKey key = (PgpSecretKey)keys[i]; - - if (key.KeyId == secKey.KeyId) - { - found = true; - keys.RemoveAt(i); - } - } - - return found ? new PgpSecretKeyRing(keys, secRing.extraPubKeys) : null; - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpSecretKeyRingBundle.cs b/bc-sharp-crypto/src/openpgp/PgpSecretKeyRingBundle.cs deleted file mode 100644 index c9f4d39..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpSecretKeyRingBundle.cs +++ /dev/null @@ -1,280 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// - /// Often a PGP key ring file is made up of a succession of master/sub-key key rings. - /// If you want to read an entire secret key file in one hit this is the class for you. - /// - public class PgpSecretKeyRingBundle - { - private readonly IDictionary secretRings; - private readonly IList order; - - private PgpSecretKeyRingBundle( - IDictionary secretRings, - IList order) - { - this.secretRings = secretRings; - this.order = order; - } - - public PgpSecretKeyRingBundle( - byte[] encoding) - : this(new MemoryStream(encoding, false)) - { - } - - /// Build a PgpSecretKeyRingBundle from the passed in input stream. - /// Input stream containing data. - /// If a problem parsing the stream occurs. - /// If an object is encountered which isn't a PgpSecretKeyRing. - public PgpSecretKeyRingBundle( - Stream inputStream) - : this(new PgpObjectFactory(inputStream).AllPgpObjects()) - { - } - - public PgpSecretKeyRingBundle( - IEnumerable e) - { - this.secretRings = Platform.CreateHashtable(); - this.order = Platform.CreateArrayList(); - - foreach (object obj in e) - { - PgpSecretKeyRing pgpSecret = obj as PgpSecretKeyRing; - - if (pgpSecret == null) - { - throw new PgpException(Platform.GetTypeName(obj) + " found where PgpSecretKeyRing expected"); - } - - long key = pgpSecret.GetPublicKey().KeyId; - secretRings.Add(key, pgpSecret); - order.Add(key); - } - } - - [Obsolete("Use 'Count' property instead")] - public int Size - { - get { return order.Count; } - } - - /// Return the number of rings in this collection. - public int Count - { - get { return order.Count; } - } - - /// Allow enumeration of the secret key rings making up this collection. - public IEnumerable GetKeyRings() - { - return new EnumerableProxy(secretRings.Values); - } - - /// Allow enumeration of the key rings associated with the passed in userId. - /// The user ID to be matched. - /// An IEnumerable of key rings which matched (possibly none). - public IEnumerable GetKeyRings( - string userId) - { - return GetKeyRings(userId, false, false); - } - - /// Allow enumeration of the key rings associated with the passed in userId. - /// The user ID to be matched. - /// If true, userId need only be a substring of an actual ID string to match. - /// An IEnumerable of key rings which matched (possibly none). - public IEnumerable GetKeyRings( - string userId, - bool matchPartial) - { - return GetKeyRings(userId, matchPartial, false); - } - - /// Allow enumeration of the key rings associated with the passed in userId. - /// The user ID to be matched. - /// If true, userId need only be a substring of an actual ID string to match. - /// If true, case is ignored in user ID comparisons. - /// An IEnumerable of key rings which matched (possibly none). - public IEnumerable GetKeyRings( - string userId, - bool matchPartial, - bool ignoreCase) - { - IList rings = Platform.CreateArrayList(); - - if (ignoreCase) - { - userId = Platform.ToUpperInvariant(userId); - } - - foreach (PgpSecretKeyRing secRing in GetKeyRings()) - { - foreach (string nextUserID in secRing.GetSecretKey().UserIds) - { - string next = nextUserID; - if (ignoreCase) - { - next = Platform.ToUpperInvariant(next); - } - - if (matchPartial) - { - if (Platform.IndexOf(next, userId) > -1) - { - rings.Add(secRing); - } - } - else - { - if (next.Equals(userId)) - { - rings.Add(secRing); - } - } - } - } - - return new EnumerableProxy(rings); - } - - /// Return the PGP secret key associated with the given key id. - /// The ID of the secret key to return. - public PgpSecretKey GetSecretKey( - long keyId) - { - foreach (PgpSecretKeyRing secRing in GetKeyRings()) - { - PgpSecretKey sec = secRing.GetSecretKey(keyId); - - if (sec != null) - { - return sec; - } - } - - return null; - } - - /// Return the secret key ring which contains the key referred to by keyId - /// The ID of the secret key - public PgpSecretKeyRing GetSecretKeyRing( - long keyId) - { - long id = keyId; - - if (secretRings.Contains(id)) - { - return (PgpSecretKeyRing) secretRings[id]; - } - - foreach (PgpSecretKeyRing secretRing in GetKeyRings()) - { - PgpSecretKey secret = secretRing.GetSecretKey(keyId); - - if (secret != null) - { - return secretRing; - } - } - - return null; - } - - /// - /// Return true if a key matching the passed in key ID is present, false otherwise. - /// - /// key ID to look for. - public bool Contains( - long keyID) - { - return GetSecretKey(keyID) != null; - } - - public byte[] GetEncoded() - { - MemoryStream bOut = new MemoryStream(); - - Encode(bOut); - - return bOut.ToArray(); - } - - public void Encode( - Stream outStr) - { - BcpgOutputStream bcpgOut = BcpgOutputStream.Wrap(outStr); - - foreach (long key in order) - { - PgpSecretKeyRing pub = (PgpSecretKeyRing) secretRings[key]; - - pub.Encode(bcpgOut); - } - } - - /// - /// Return a new bundle containing the contents of the passed in bundle and - /// the passed in secret key ring. - /// - /// The PgpSecretKeyRingBundle the key ring is to be added to. - /// The key ring to be added. - /// A new PgpSecretKeyRingBundle merging the current one with the passed in key ring. - /// If the keyId for the passed in key ring is already present. - public static PgpSecretKeyRingBundle AddSecretKeyRing( - PgpSecretKeyRingBundle bundle, - PgpSecretKeyRing secretKeyRing) - { - long key = secretKeyRing.GetPublicKey().KeyId; - - if (bundle.secretRings.Contains(key)) - { - throw new ArgumentException("Collection already contains a key with a keyId for the passed in ring."); - } - - IDictionary newSecretRings = Platform.CreateHashtable(bundle.secretRings); - IList newOrder = Platform.CreateArrayList(bundle.order); - - newSecretRings[key] = secretKeyRing; - newOrder.Add(key); - - return new PgpSecretKeyRingBundle(newSecretRings, newOrder); - } - - /// - /// Return a new bundle containing the contents of the passed in bundle with - /// the passed in secret key ring removed. - /// - /// The PgpSecretKeyRingBundle the key ring is to be removed from. - /// The key ring to be removed. - /// A new PgpSecretKeyRingBundle not containing the passed in key ring. - /// If the keyId for the passed in key ring is not present. - public static PgpSecretKeyRingBundle RemoveSecretKeyRing( - PgpSecretKeyRingBundle bundle, - PgpSecretKeyRing secretKeyRing) - { - long key = secretKeyRing.GetPublicKey().KeyId; - - if (!bundle.secretRings.Contains(key)) - { - throw new ArgumentException("Collection does not contain a key with a keyId for the passed in ring."); - } - - IDictionary newSecretRings = Platform.CreateHashtable(bundle.secretRings); - IList newOrder = Platform.CreateArrayList(bundle.order); - - newSecretRings.Remove(key); - newOrder.Remove(key); - - return new PgpSecretKeyRingBundle(newSecretRings, newOrder); - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpSignature.cs b/bc-sharp-crypto/src/openpgp/PgpSignature.cs deleted file mode 100644 index c8c541b..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpSignature.cs +++ /dev/null @@ -1,447 +0,0 @@ -using System; -using System.IO; -using Org.BouncyCastle.Asn1; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Date; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// A PGP signature object. - public class PgpSignature - { - public const int BinaryDocument = 0x00; - public const int CanonicalTextDocument = 0x01; - public const int StandAlone = 0x02; - - public const int DefaultCertification = 0x10; - public const int NoCertification = 0x11; - public const int CasualCertification = 0x12; - public const int PositiveCertification = 0x13; - - public const int SubkeyBinding = 0x18; - public const int PrimaryKeyBinding = 0x19; - public const int DirectKey = 0x1f; - public const int KeyRevocation = 0x20; - public const int SubkeyRevocation = 0x28; - public const int CertificationRevocation = 0x30; - public const int Timestamp = 0x40; - - private readonly SignaturePacket sigPck; - private readonly int signatureType; - private readonly TrustPacket trustPck; - - private ISigner sig; - private byte lastb; // Initial value anything but '\r' - - internal PgpSignature( - BcpgInputStream bcpgInput) - : this((SignaturePacket)bcpgInput.ReadPacket()) - { - } - - internal PgpSignature( - SignaturePacket sigPacket) - : this(sigPacket, null) - { - } - - internal PgpSignature( - SignaturePacket sigPacket, - TrustPacket trustPacket) - { - if (sigPacket == null) - throw new ArgumentNullException("sigPacket"); - - this.sigPck = sigPacket; - this.signatureType = sigPck.SignatureType; - this.trustPck = trustPacket; - } - - private void GetSig() - { - this.sig = SignerUtilities.GetSigner( - PgpUtilities.GetSignatureName(sigPck.KeyAlgorithm, sigPck.HashAlgorithm)); - } - - /// The OpenPGP version number for this signature. - public int Version - { - get { return sigPck.Version; } - } - - /// The key algorithm associated with this signature. - public PublicKeyAlgorithmTag KeyAlgorithm - { - get { return sigPck.KeyAlgorithm; } - } - - /// The hash algorithm associated with this signature. - public HashAlgorithmTag HashAlgorithm - { - get { return sigPck.HashAlgorithm; } - } - - /// Return true if this signature represents a certification. - public bool IsCertification() - { - return IsCertification(SignatureType); - } - - public void InitVerify( - PgpPublicKey pubKey) - { - lastb = 0; - if (sig == null) - { - GetSig(); - } - try - { - sig.Init(false, pubKey.GetKey()); - } - catch (InvalidKeyException e) - { - throw new PgpException("invalid key.", e); - } - } - - public void Update( - byte b) - { - if (signatureType == CanonicalTextDocument) - { - doCanonicalUpdateByte(b); - } - else - { - sig.Update(b); - } - } - - private void doCanonicalUpdateByte( - byte b) - { - if (b == '\r') - { - doUpdateCRLF(); - } - else if (b == '\n') - { - if (lastb != '\r') - { - doUpdateCRLF(); - } - } - else - { - sig.Update(b); - } - - lastb = b; - } - - private void doUpdateCRLF() - { - sig.Update((byte)'\r'); - sig.Update((byte)'\n'); - } - - public void Update( - params byte[] bytes) - { - Update(bytes, 0, bytes.Length); - } - - public void Update( - byte[] bytes, - int off, - int length) - { - if (signatureType == CanonicalTextDocument) - { - int finish = off + length; - - for (int i = off; i != finish; i++) - { - doCanonicalUpdateByte(bytes[i]); - } - } - else - { - sig.BlockUpdate(bytes, off, length); - } - } - - public bool Verify() - { - byte[] trailer = GetSignatureTrailer(); - sig.BlockUpdate(trailer, 0, trailer.Length); - - return sig.VerifySignature(GetSignature()); - } - - private void UpdateWithIdData( - int header, - byte[] idBytes) - { - this.Update( - (byte) header, - (byte)(idBytes.Length >> 24), - (byte)(idBytes.Length >> 16), - (byte)(idBytes.Length >> 8), - (byte)(idBytes.Length)); - this.Update(idBytes); - } - - private void UpdateWithPublicKey( - PgpPublicKey key) - { - byte[] keyBytes = GetEncodedPublicKey(key); - - this.Update( - (byte) 0x99, - (byte)(keyBytes.Length >> 8), - (byte)(keyBytes.Length)); - this.Update(keyBytes); - } - - /// - /// Verify the signature as certifying the passed in public key as associated - /// with the passed in user attributes. - /// - /// User attributes the key was stored under. - /// The key to be verified. - /// True, if the signature matches, false otherwise. - public bool VerifyCertification( - PgpUserAttributeSubpacketVector userAttributes, - PgpPublicKey key) - { - UpdateWithPublicKey(key); - - // - // hash in the userAttributes - // - try - { - MemoryStream bOut = new MemoryStream(); - foreach (UserAttributeSubpacket packet in userAttributes.ToSubpacketArray()) - { - packet.Encode(bOut); - } - UpdateWithIdData(0xd1, bOut.ToArray()); - } - catch (IOException e) - { - throw new PgpException("cannot encode subpacket array", e); - } - - this.Update(sigPck.GetSignatureTrailer()); - - return sig.VerifySignature(this.GetSignature()); - } - - /// - /// Verify the signature as certifying the passed in public key as associated - /// with the passed in ID. - /// - /// ID the key was stored under. - /// The key to be verified. - /// True, if the signature matches, false otherwise. - public bool VerifyCertification( - string id, - PgpPublicKey key) - { - UpdateWithPublicKey(key); - - // - // hash in the id - // - UpdateWithIdData(0xb4, Strings.ToUtf8ByteArray(id)); - - Update(sigPck.GetSignatureTrailer()); - - return sig.VerifySignature(GetSignature()); - } - - /// Verify a certification for the passed in key against the passed in master key. - /// The key we are verifying against. - /// The key we are verifying. - /// True, if the certification is valid, false otherwise. - public bool VerifyCertification( - PgpPublicKey masterKey, - PgpPublicKey pubKey) - { - UpdateWithPublicKey(masterKey); - UpdateWithPublicKey(pubKey); - - Update(sigPck.GetSignatureTrailer()); - - return sig.VerifySignature(GetSignature()); - } - - /// Verify a key certification, such as revocation, for the passed in key. - /// The key we are checking. - /// True, if the certification is valid, false otherwise. - public bool VerifyCertification( - PgpPublicKey pubKey) - { - if (SignatureType != KeyRevocation - && SignatureType != SubkeyRevocation) - { - throw new InvalidOperationException("signature is not a key signature"); - } - - UpdateWithPublicKey(pubKey); - - Update(sigPck.GetSignatureTrailer()); - - return sig.VerifySignature(GetSignature()); - } - - public int SignatureType - { - get { return sigPck.SignatureType; } - } - - /// The ID of the key that created the signature. - public long KeyId - { - get { return sigPck.KeyId; } - } - - [Obsolete("Use 'CreationTime' property instead")] - public DateTime GetCreationTime() - { - return CreationTime; - } - - /// The creation time of this signature. - public DateTime CreationTime - { - get { return DateTimeUtilities.UnixMsToDateTime(sigPck.CreationTime); } - } - - public byte[] GetSignatureTrailer() - { - return sigPck.GetSignatureTrailer(); - } - - /// - /// Return true if the signature has either hashed or unhashed subpackets. - /// - public bool HasSubpackets - { - get - { - return sigPck.GetHashedSubPackets() != null - || sigPck.GetUnhashedSubPackets() != null; - } - } - - public PgpSignatureSubpacketVector GetHashedSubPackets() - { - return createSubpacketVector(sigPck.GetHashedSubPackets()); - } - - public PgpSignatureSubpacketVector GetUnhashedSubPackets() - { - return createSubpacketVector(sigPck.GetUnhashedSubPackets()); - } - - private PgpSignatureSubpacketVector createSubpacketVector(SignatureSubpacket[] pcks) - { - return pcks == null ? null : new PgpSignatureSubpacketVector(pcks); - } - - public byte[] GetSignature() - { - MPInteger[] sigValues = sigPck.GetSignature(); - byte[] signature; - - if (sigValues != null) - { - if (sigValues.Length == 1) // an RSA signature - { - signature = sigValues[0].Value.ToByteArrayUnsigned(); - } - else - { - try - { - signature = new DerSequence( - new DerInteger(sigValues[0].Value), - new DerInteger(sigValues[1].Value)).GetEncoded(); - } - catch (IOException e) - { - throw new PgpException("exception encoding DSA sig.", e); - } - } - } - else - { - signature = sigPck.GetSignatureBytes(); - } - - return signature; - } - - // TODO Handle the encoding stuff by subclassing BcpgObject? - public byte[] GetEncoded() - { - MemoryStream bOut = new MemoryStream(); - - Encode(bOut); - - return bOut.ToArray(); - } - - public void Encode( - Stream outStream) - { - BcpgOutputStream bcpgOut = BcpgOutputStream.Wrap(outStream); - - bcpgOut.WritePacket(sigPck); - - if (trustPck != null) - { - bcpgOut.WritePacket(trustPck); - } - } - - private byte[] GetEncodedPublicKey( - PgpPublicKey pubKey) - { - try - { - return pubKey.publicPk.GetEncodedContents(); - } - catch (IOException e) - { - throw new PgpException("exception preparing key.", e); - } - } - - /// - /// Return true if the passed in signature type represents a certification, false if the signature type is not. - /// - /// - /// true if signatureType is a certification, false otherwise. - public static bool IsCertification(int signatureType) - { - switch (signatureType) - { - case DefaultCertification: - case NoCertification: - case CasualCertification: - case PositiveCertification: - return true; - default: - return false; - } - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpSignatureGenerator.cs b/bc-sharp-crypto/src/openpgp/PgpSignatureGenerator.cs deleted file mode 100644 index c530968..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpSignatureGenerator.cs +++ /dev/null @@ -1,393 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Bcpg.Sig; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// Generator for PGP signatures. - // TODO Should be able to implement ISigner? - public class PgpSignatureGenerator - { - private static readonly SignatureSubpacket[] EmptySignatureSubpackets = new SignatureSubpacket[0]; - - private PublicKeyAlgorithmTag keyAlgorithm; - private HashAlgorithmTag hashAlgorithm; - private PgpPrivateKey privKey; - private ISigner sig; - private IDigest dig; - private int signatureType; - private byte lastb; - - private SignatureSubpacket[] unhashed = EmptySignatureSubpackets; - private SignatureSubpacket[] hashed = EmptySignatureSubpackets; - - /// Create a generator for the passed in keyAlgorithm and hashAlgorithm codes. - public PgpSignatureGenerator( - PublicKeyAlgorithmTag keyAlgorithm, - HashAlgorithmTag hashAlgorithm) - { - this.keyAlgorithm = keyAlgorithm; - this.hashAlgorithm = hashAlgorithm; - - dig = DigestUtilities.GetDigest(PgpUtilities.GetDigestName(hashAlgorithm)); - sig = SignerUtilities.GetSigner(PgpUtilities.GetSignatureName(keyAlgorithm, hashAlgorithm)); - } - - /// Initialise the generator for signing. - public void InitSign( - int sigType, - PgpPrivateKey key) - { - InitSign(sigType, key, null); - } - - /// Initialise the generator for signing. - public void InitSign( - int sigType, - PgpPrivateKey key, - SecureRandom random) - { - this.privKey = key; - this.signatureType = sigType; - - try - { - ICipherParameters cp = key.Key; - if (random != null) - { - cp = new ParametersWithRandom(key.Key, random); - } - - sig.Init(true, cp); - } - catch (InvalidKeyException e) - { - throw new PgpException("invalid key.", e); - } - - dig.Reset(); - lastb = 0; - } - - public void Update( - byte b) - { - if (signatureType == PgpSignature.CanonicalTextDocument) - { - doCanonicalUpdateByte(b); - } - else - { - doUpdateByte(b); - } - } - - private void doCanonicalUpdateByte( - byte b) - { - if (b == '\r') - { - doUpdateCRLF(); - } - else if (b == '\n') - { - if (lastb != '\r') - { - doUpdateCRLF(); - } - } - else - { - doUpdateByte(b); - } - - lastb = b; - } - - private void doUpdateCRLF() - { - doUpdateByte((byte)'\r'); - doUpdateByte((byte)'\n'); - } - - private void doUpdateByte( - byte b) - { - sig.Update(b); - dig.Update(b); - } - - public void Update( - params byte[] b) - { - Update(b, 0, b.Length); - } - - public void Update( - byte[] b, - int off, - int len) - { - if (signatureType == PgpSignature.CanonicalTextDocument) - { - int finish = off + len; - - for (int i = off; i != finish; i++) - { - doCanonicalUpdateByte(b[i]); - } - } - else - { - sig.BlockUpdate(b, off, len); - dig.BlockUpdate(b, off, len); - } - } - - public void SetHashedSubpackets( - PgpSignatureSubpacketVector hashedPackets) - { - hashed = hashedPackets == null - ? EmptySignatureSubpackets - : hashedPackets.ToSubpacketArray(); - } - - public void SetUnhashedSubpackets( - PgpSignatureSubpacketVector unhashedPackets) - { - unhashed = unhashedPackets == null - ? EmptySignatureSubpackets - : unhashedPackets.ToSubpacketArray(); - } - - /// Return the one pass header associated with the current signature. - public PgpOnePassSignature GenerateOnePassVersion( - bool isNested) - { - return new PgpOnePassSignature( - new OnePassSignaturePacket( - signatureType, hashAlgorithm, keyAlgorithm, privKey.KeyId, isNested)); - } - - /// Return a signature object containing the current signature state. - public PgpSignature Generate() - { - SignatureSubpacket[] hPkts = hashed, unhPkts = unhashed; - - if (!packetPresent(hashed, SignatureSubpacketTag.CreationTime)) - { - hPkts = insertSubpacket(hPkts, new SignatureCreationTime(false, DateTime.UtcNow)); - } - - if (!packetPresent(hashed, SignatureSubpacketTag.IssuerKeyId) - && !packetPresent(unhashed, SignatureSubpacketTag.IssuerKeyId)) - { - unhPkts = insertSubpacket(unhPkts, new IssuerKeyId(false, privKey.KeyId)); - } - - int version = 4; - byte[] hData; - - try - { - MemoryStream hOut = new MemoryStream(); - - for (int i = 0; i != hPkts.Length; i++) - { - hPkts[i].Encode(hOut); - } - - byte[] data = hOut.ToArray(); - - MemoryStream sOut = new MemoryStream(data.Length + 6); - sOut.WriteByte((byte)version); - sOut.WriteByte((byte)signatureType); - sOut.WriteByte((byte)keyAlgorithm); - sOut.WriteByte((byte)hashAlgorithm); - sOut.WriteByte((byte)(data.Length >> 8)); - sOut.WriteByte((byte)data.Length); - sOut.Write(data, 0, data.Length); - - hData = sOut.ToArray(); - } - catch (IOException e) - { - throw new PgpException("exception encoding hashed data.", e); - } - - sig.BlockUpdate(hData, 0, hData.Length); - dig.BlockUpdate(hData, 0, hData.Length); - - hData = new byte[] - { - (byte) version, - 0xff, - (byte)(hData.Length >> 24), - (byte)(hData.Length >> 16), - (byte)(hData.Length >> 8), - (byte) hData.Length - }; - - sig.BlockUpdate(hData, 0, hData.Length); - dig.BlockUpdate(hData, 0, hData.Length); - - byte[] sigBytes = sig.GenerateSignature(); - byte[] digest = DigestUtilities.DoFinal(dig); - byte[] fingerPrint = new byte[] { digest[0], digest[1] }; - - // an RSA signature - bool isRsa = keyAlgorithm == PublicKeyAlgorithmTag.RsaSign - || keyAlgorithm == PublicKeyAlgorithmTag.RsaGeneral; - - MPInteger[] sigValues = isRsa - ? PgpUtilities.RsaSigToMpi(sigBytes) - : PgpUtilities.DsaSigToMpi(sigBytes); - - return new PgpSignature( - new SignaturePacket(signatureType, privKey.KeyId, keyAlgorithm, - hashAlgorithm, hPkts, unhPkts, fingerPrint, sigValues)); - } - - /// Generate a certification for the passed in ID and key. - /// The ID we are certifying against the public key. - /// The key we are certifying against the ID. - /// The certification. - public PgpSignature GenerateCertification( - string id, - PgpPublicKey pubKey) - { - UpdateWithPublicKey(pubKey); - - // - // hash in the id - // - UpdateWithIdData(0xb4, Strings.ToUtf8ByteArray(id)); - - return Generate(); - } - - /// Generate a certification for the passed in userAttributes. - /// The ID we are certifying against the public key. - /// The key we are certifying against the ID. - /// The certification. - public PgpSignature GenerateCertification( - PgpUserAttributeSubpacketVector userAttributes, - PgpPublicKey pubKey) - { - UpdateWithPublicKey(pubKey); - - // - // hash in the attributes - // - try - { - MemoryStream bOut = new MemoryStream(); - foreach (UserAttributeSubpacket packet in userAttributes.ToSubpacketArray()) - { - packet.Encode(bOut); - } - UpdateWithIdData(0xd1, bOut.ToArray()); - } - catch (IOException e) - { - throw new PgpException("cannot encode subpacket array", e); - } - - return this.Generate(); - } - - /// Generate a certification for the passed in key against the passed in master key. - /// The key we are certifying against. - /// The key we are certifying. - /// The certification. - public PgpSignature GenerateCertification( - PgpPublicKey masterKey, - PgpPublicKey pubKey) - { - UpdateWithPublicKey(masterKey); - UpdateWithPublicKey(pubKey); - - return Generate(); - } - - /// Generate a certification, such as a revocation, for the passed in key. - /// The key we are certifying. - /// The certification. - public PgpSignature GenerateCertification( - PgpPublicKey pubKey) - { - UpdateWithPublicKey(pubKey); - - return Generate(); - } - - private byte[] GetEncodedPublicKey( - PgpPublicKey pubKey) - { - try - { - return pubKey.publicPk.GetEncodedContents(); - } - catch (IOException e) - { - throw new PgpException("exception preparing key.", e); - } - } - - private bool packetPresent( - SignatureSubpacket[] packets, - SignatureSubpacketTag type) - { - for (int i = 0; i != packets.Length; i++) - { - if (packets[i].SubpacketType == type) - { - return true; - } - } - - return false; - } - - private SignatureSubpacket[] insertSubpacket( - SignatureSubpacket[] packets, - SignatureSubpacket subpacket) - { - SignatureSubpacket[] tmp = new SignatureSubpacket[packets.Length + 1]; - tmp[0] = subpacket; - packets.CopyTo(tmp, 1); - return tmp; - } - - private void UpdateWithIdData( - int header, - byte[] idBytes) - { - this.Update( - (byte) header, - (byte)(idBytes.Length >> 24), - (byte)(idBytes.Length >> 16), - (byte)(idBytes.Length >> 8), - (byte)(idBytes.Length)); - this.Update(idBytes); - } - - private void UpdateWithPublicKey( - PgpPublicKey key) - { - byte[] keyBytes = GetEncodedPublicKey(key); - - this.Update( - (byte) 0x99, - (byte)(keyBytes.Length >> 8), - (byte)(keyBytes.Length)); - this.Update(keyBytes); - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpSignatureList.cs b/bc-sharp-crypto/src/openpgp/PgpSignatureList.cs deleted file mode 100644 index 61976fc..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpSignatureList.cs +++ /dev/null @@ -1,51 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// A list of PGP signatures - normally in the signature block after literal data. - public class PgpSignatureList - : PgpObject - { - private PgpSignature[] sigs; - - public PgpSignatureList( - PgpSignature[] sigs) - { - this.sigs = (PgpSignature[]) sigs.Clone(); - } - - public PgpSignatureList( - PgpSignature sig) - { - this.sigs = new PgpSignature[]{ sig }; - } - - public PgpSignature this[int index] - { - get { return sigs[index]; } - } - - [Obsolete("Use 'object[index]' syntax instead")] - public PgpSignature Get( - int index) - { - return this[index]; - } - - [Obsolete("Use 'Count' property instead")] - public int Size - { - get { return sigs.Length; } - } - - public int Count - { - get { return sigs.Length; } - } - - public bool IsEmpty - { - get { return (sigs.Length == 0); } - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpSignatureSubpacketGenerator.cs b/bc-sharp-crypto/src/openpgp/PgpSignatureSubpacketGenerator.cs deleted file mode 100644 index d2177d0..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpSignatureSubpacketGenerator.cs +++ /dev/null @@ -1,210 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Bcpg.Sig; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// Generator for signature subpackets. - public class PgpSignatureSubpacketGenerator - { - private IList list = Platform.CreateArrayList(); - - public void SetRevocable( - bool isCritical, - bool isRevocable) - { - list.Add(new Revocable(isCritical, isRevocable)); - } - - public void SetExportable( - bool isCritical, - bool isExportable) - { - list.Add(new Exportable(isCritical, isExportable)); - } - - public void SetFeature( - bool isCritical, - byte feature) - { - list.Add(new Features(isCritical, feature)); - } - - /// - /// Add a TrustSignature packet to the signature. The values for depth and trust are largely - /// installation dependent but there are some guidelines in RFC 4880 - 5.2.3.13. - /// - /// true if the packet is critical. - /// depth level. - /// trust amount. - public void SetTrust( - bool isCritical, - int depth, - int trustAmount) - { - list.Add(new TrustSignature(isCritical, depth, trustAmount)); - } - - /// - /// Set the number of seconds a key is valid for after the time of its creation. - /// A value of zero means the key never expires. - /// - /// True, if should be treated as critical, false otherwise. - /// The number of seconds the key is valid, or zero if no expiry. - public void SetKeyExpirationTime( - bool isCritical, - long seconds) - { - list.Add(new KeyExpirationTime(isCritical, seconds)); - } - - /// - /// Set the number of seconds a signature is valid for after the time of its creation. - /// A value of zero means the signature never expires. - /// - /// True, if should be treated as critical, false otherwise. - /// The number of seconds the signature is valid, or zero if no expiry. - public void SetSignatureExpirationTime( - bool isCritical, - long seconds) - { - list.Add(new SignatureExpirationTime(isCritical, seconds)); - } - - /// - /// Set the creation time for the signature. - ///

    - /// Note: this overrides the generation of a creation time when the signature - /// is generated.

    - ///     - public void SetSignatureCreationTime( - bool isCritical, - DateTime date) - { - list.Add(new SignatureCreationTime(isCritical, date)); - } - - public void SetPreferredHashAlgorithms( - bool isCritical, - int[] algorithms) - { - list.Add(new PreferredAlgorithms(SignatureSubpacketTag.PreferredHashAlgorithms, isCritical, algorithms)); - } - - public void SetPreferredSymmetricAlgorithms( - bool isCritical, - int[] algorithms) - { - list.Add(new PreferredAlgorithms(SignatureSubpacketTag.PreferredSymmetricAlgorithms, isCritical, algorithms)); - } - - public void SetPreferredCompressionAlgorithms( - bool isCritical, - int[] algorithms) - { - list.Add(new PreferredAlgorithms(SignatureSubpacketTag.PreferredCompressionAlgorithms, isCritical, algorithms)); - } - - public void SetKeyFlags( - bool isCritical, - int flags) - { - list.Add(new KeyFlags(isCritical, flags)); - } - - public void SetSignerUserId( - bool isCritical, - string userId) - { - if (userId == null) - throw new ArgumentNullException("userId"); - - list.Add(new SignerUserId(isCritical, userId)); - } - - public void SetSignerUserId( - bool isCritical, - byte[] rawUserId) - { - if (rawUserId == null) - throw new ArgumentNullException("rawUserId"); - - list.Add(new SignerUserId(isCritical, false, rawUserId)); - } - - public void SetEmbeddedSignature( - bool isCritical, - PgpSignature pgpSignature) - { - byte[] sig = pgpSignature.GetEncoded(); - byte[] data; - - // TODO Should be >= ? - if (sig.Length - 1 > 256) - { - data = new byte[sig.Length - 3]; - } - else - { - data = new byte[sig.Length - 2]; - } - - Array.Copy(sig, sig.Length - data.Length, data, 0, data.Length); - - list.Add(new EmbeddedSignature(isCritical, false, data)); - } - - public void SetPrimaryUserId( - bool isCritical, - bool isPrimaryUserId) - { - list.Add(new PrimaryUserId(isCritical, isPrimaryUserId)); - } - - public void SetNotationData( - bool isCritical, - bool isHumanReadable, - string notationName, - string notationValue) - { - list.Add(new NotationData(isCritical, isHumanReadable, notationName, notationValue)); - } - - /// - /// Sets revocation reason sub packet - /// - public void SetRevocationReason(bool isCritical, RevocationReasonTag reason, - string description) - { - list.Add(new RevocationReason(isCritical, reason, description)); - } - - /// - /// Sets revocation key sub packet - /// - public void SetRevocationKey(bool isCritical, PublicKeyAlgorithmTag keyAlgorithm, byte[] fingerprint) - { - list.Add(new RevocationKey(isCritical, RevocationKeyTag.ClassDefault, keyAlgorithm, fingerprint)); - } - - /// - /// Sets issuer key sub packet - /// - public void SetIssuerKeyID(bool isCritical, long keyID) - { - list.Add(new IssuerKeyId(isCritical, keyID)); - } - - public PgpSignatureSubpacketVector Generate() - { - SignatureSubpacket[] a = new SignatureSubpacket[list.Count]; - for (int i = 0; i < list.Count; ++i) - { - a[i] = (SignatureSubpacket)list[i]; - } - return new PgpSignatureSubpacketVector(a); - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpSignatureSubpacketVector.cs b/bc-sharp-crypto/src/openpgp/PgpSignatureSubpacketVector.cs deleted file mode 100644 index 156243f..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpSignatureSubpacketVector.cs +++ /dev/null @@ -1,239 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Bcpg.Sig; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// Container for a list of signature subpackets. - public class PgpSignatureSubpacketVector - { - private readonly SignatureSubpacket[] packets; - - internal PgpSignatureSubpacketVector( - SignatureSubpacket[] packets) - { - this.packets = packets; - } - - public SignatureSubpacket GetSubpacket( - SignatureSubpacketTag type) - { - for (int i = 0; i != packets.Length; i++) - { - if (packets[i].SubpacketType == type) - { - return packets[i]; - } - } - - return null; - } - - /** - * Return true if a particular subpacket type exists. - * - * @param type type to look for. - * @return true if present, false otherwise. - */ - public bool HasSubpacket( - SignatureSubpacketTag type) - { - return GetSubpacket(type) != null; - } - - /** - * Return all signature subpackets of the passed in type. - * @param type subpacket type code - * @return an array of zero or more matching subpackets. - */ - public SignatureSubpacket[] GetSubpackets( - SignatureSubpacketTag type) - { - int count = 0; - for (int i = 0; i < packets.Length; ++i) - { - if (packets[i].SubpacketType == type) - { - ++count; - } - } - - SignatureSubpacket[] result = new SignatureSubpacket[count]; - - int pos = 0; - for (int i = 0; i < packets.Length; ++i) - { - if (packets[i].SubpacketType == type) - { - result[pos++] = packets[i]; - } - } - - return result; - } - - public NotationData[] GetNotationDataOccurences() - { - SignatureSubpacket[] notations = GetSubpackets(SignatureSubpacketTag.NotationData); - NotationData[] vals = new NotationData[notations.Length]; - - for (int i = 0; i < notations.Length; i++) - { - vals[i] = (NotationData) notations[i]; - } - - return vals; - } - - public long GetIssuerKeyId() - { - SignatureSubpacket p = GetSubpacket(SignatureSubpacketTag.IssuerKeyId); - - return p == null ? 0 : ((IssuerKeyId) p).KeyId; - } - - public bool HasSignatureCreationTime() - { - return GetSubpacket(SignatureSubpacketTag.CreationTime) != null; - } - - public DateTime GetSignatureCreationTime() - { - SignatureSubpacket p = GetSubpacket(SignatureSubpacketTag.CreationTime); - - if (p == null) - { - throw new PgpException("SignatureCreationTime not available"); - } - - return ((SignatureCreationTime)p).GetTime(); - } - - /// - /// Return the number of seconds a signature is valid for after its creation date. - /// A value of zero means the signature never expires. - /// - /// Seconds a signature is valid for. - public long GetSignatureExpirationTime() - { - SignatureSubpacket p = GetSubpacket(SignatureSubpacketTag.ExpireTime); - - return p == null ? 0 : ((SignatureExpirationTime) p).Time; - } - - /// - /// Return the number of seconds a key is valid for after its creation date. - /// A value of zero means the key never expires. - /// - /// Seconds a signature is valid for. - public long GetKeyExpirationTime() - { - SignatureSubpacket p = GetSubpacket(SignatureSubpacketTag.KeyExpireTime); - - return p == null ? 0 : ((KeyExpirationTime) p).Time; - } - - public int[] GetPreferredHashAlgorithms() - { - SignatureSubpacket p = GetSubpacket(SignatureSubpacketTag.PreferredHashAlgorithms); - - return p == null ? null : ((PreferredAlgorithms) p).GetPreferences(); - } - - public int[] GetPreferredSymmetricAlgorithms() - { - SignatureSubpacket p = GetSubpacket(SignatureSubpacketTag.PreferredSymmetricAlgorithms); - - return p == null ? null : ((PreferredAlgorithms) p).GetPreferences(); - } - - public int[] GetPreferredCompressionAlgorithms() - { - SignatureSubpacket p = GetSubpacket(SignatureSubpacketTag.PreferredCompressionAlgorithms); - - return p == null ? null : ((PreferredAlgorithms) p).GetPreferences(); - } - - public int GetKeyFlags() - { - SignatureSubpacket p = GetSubpacket(SignatureSubpacketTag.KeyFlags); - - return p == null ? 0 : ((KeyFlags) p).Flags; - } - - public string GetSignerUserId() - { - SignatureSubpacket p = GetSubpacket(SignatureSubpacketTag.SignerUserId); - - return p == null ? null : ((SignerUserId) p).GetId(); - } - - public bool IsPrimaryUserId() - { - PrimaryUserId primaryId = (PrimaryUserId) - this.GetSubpacket(SignatureSubpacketTag.PrimaryUserId); - - if (primaryId != null) - { - return primaryId.IsPrimaryUserId(); - } - - return false; - } - - public SignatureSubpacketTag[] GetCriticalTags() - { - int count = 0; - for (int i = 0; i != packets.Length; i++) - { - if (packets[i].IsCritical()) - { - count++; - } - } - - SignatureSubpacketTag[] list = new SignatureSubpacketTag[count]; - - count = 0; - - for (int i = 0; i != packets.Length; i++) - { - if (packets[i].IsCritical()) - { - list[count++] = packets[i].SubpacketType; - } - } - - return list; - } - - public Features GetFeatures() - { - SignatureSubpacket p = this.GetSubpacket(SignatureSubpacketTag.Features); - - if (p == null) - return null; - - return new Features(p.IsCritical(), p.IsLongLength(), p.GetData()); - } - - [Obsolete("Use 'Count' property instead")] - public int Size - { - get { return packets.Length; } - } - - /// Return the number of packets this vector contains. - public int Count - { - get { return packets.Length; } - } - - internal SignatureSubpacket[] ToSubpacketArray() - { - return packets; - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpUserAttributeSubpacketVector.cs b/bc-sharp-crypto/src/openpgp/PgpUserAttributeSubpacketVector.cs deleted file mode 100644 index 4cdbeda..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpUserAttributeSubpacketVector.cs +++ /dev/null @@ -1,81 +0,0 @@ -using Org.BouncyCastle.Bcpg.Attr; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// Container for a list of user attribute subpackets. - public class PgpUserAttributeSubpacketVector - { - private readonly UserAttributeSubpacket[] packets; - - internal PgpUserAttributeSubpacketVector( - UserAttributeSubpacket[] packets) - { - this.packets = packets; - } - - public UserAttributeSubpacket GetSubpacket( - UserAttributeSubpacketTag type) - { - for (int i = 0; i != packets.Length; i++) - { - if (packets[i].SubpacketType == type) - { - return packets[i]; - } - } - - return null; - } - - public ImageAttrib GetImageAttribute() - { - UserAttributeSubpacket p = GetSubpacket(UserAttributeSubpacketTag.ImageAttribute); - - return p == null ? null : (ImageAttrib) p; - } - - internal UserAttributeSubpacket[] ToSubpacketArray() - { - return packets; - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - PgpUserAttributeSubpacketVector other = obj as PgpUserAttributeSubpacketVector; - - if (other == null) - return false; - - if (other.packets.Length != packets.Length) - { - return false; - } - - for (int i = 0; i != packets.Length; i++) - { - if (!other.packets[i].Equals(packets[i])) - { - return false; - } - } - - return true; - } - - public override int GetHashCode() - { - int code = 0; - - foreach (object o in packets) - { - code ^= o.GetHashCode(); - } - - return code; - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpUtilities.cs b/bc-sharp-crypto/src/openpgp/PgpUtilities.cs deleted file mode 100644 index 7d96dee..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpUtilities.cs +++ /dev/null @@ -1,518 +0,0 @@ -using System; -using System.IO; -using System.Text; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Encoders; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// Basic utility class. - public sealed class PgpUtilities - { - private PgpUtilities() - { - } - - public static MPInteger[] DsaSigToMpi( - byte[] encoding) - { - DerInteger i1, i2; - - try - { - Asn1Sequence s = (Asn1Sequence) Asn1Object.FromByteArray(encoding); - - i1 = (DerInteger) s[0]; - i2 = (DerInteger) s[1]; - } - catch (IOException e) - { - throw new PgpException("exception encoding signature", e); - } - - return new MPInteger[]{ new MPInteger(i1.Value), new MPInteger(i2.Value) }; - } - - public static MPInteger[] RsaSigToMpi( - byte[] encoding) - { - return new MPInteger[]{ new MPInteger(new BigInteger(1, encoding)) }; - } - - public static string GetDigestName( - HashAlgorithmTag hashAlgorithm) - { - switch (hashAlgorithm) - { - case HashAlgorithmTag.Sha1: - return "SHA1"; - case HashAlgorithmTag.MD2: - return "MD2"; - case HashAlgorithmTag.MD5: - return "MD5"; - case HashAlgorithmTag.RipeMD160: - return "RIPEMD160"; - case HashAlgorithmTag.Sha224: - return "SHA224"; - case HashAlgorithmTag.Sha256: - return "SHA256"; - case HashAlgorithmTag.Sha384: - return "SHA384"; - case HashAlgorithmTag.Sha512: - return "SHA512"; - default: - throw new PgpException("unknown hash algorithm tag in GetDigestName: " + hashAlgorithm); - } - } - - public static string GetSignatureName( - PublicKeyAlgorithmTag keyAlgorithm, - HashAlgorithmTag hashAlgorithm) - { - string encAlg; - switch (keyAlgorithm) - { - case PublicKeyAlgorithmTag.RsaGeneral: - case PublicKeyAlgorithmTag.RsaSign: - encAlg = "RSA"; - break; - case PublicKeyAlgorithmTag.Dsa: - encAlg = "DSA"; - break; - case PublicKeyAlgorithmTag.ECDH: - encAlg = "ECDH"; - break; - case PublicKeyAlgorithmTag.ECDsa: - encAlg = "ECDSA"; - break; - case PublicKeyAlgorithmTag.ElGamalEncrypt: // in some malformed cases. - case PublicKeyAlgorithmTag.ElGamalGeneral: - encAlg = "ElGamal"; - break; - default: - throw new PgpException("unknown algorithm tag in signature:" + keyAlgorithm); - } - - return GetDigestName(hashAlgorithm) + "with" + encAlg; - } - - public static string GetSymmetricCipherName( - SymmetricKeyAlgorithmTag algorithm) - { - switch (algorithm) - { - case SymmetricKeyAlgorithmTag.Null: - return null; - case SymmetricKeyAlgorithmTag.TripleDes: - return "DESEDE"; - case SymmetricKeyAlgorithmTag.Idea: - return "IDEA"; - case SymmetricKeyAlgorithmTag.Cast5: - return "CAST5"; - case SymmetricKeyAlgorithmTag.Blowfish: - return "Blowfish"; - case SymmetricKeyAlgorithmTag.Safer: - return "SAFER"; - case SymmetricKeyAlgorithmTag.Des: - return "DES"; - case SymmetricKeyAlgorithmTag.Aes128: - return "AES"; - case SymmetricKeyAlgorithmTag.Aes192: - return "AES"; - case SymmetricKeyAlgorithmTag.Aes256: - return "AES"; - case SymmetricKeyAlgorithmTag.Twofish: - return "Twofish"; - case SymmetricKeyAlgorithmTag.Camellia128: - return "Camellia"; - case SymmetricKeyAlgorithmTag.Camellia192: - return "Camellia"; - case SymmetricKeyAlgorithmTag.Camellia256: - return "Camellia"; - default: - throw new PgpException("unknown symmetric algorithm: " + algorithm); - } - } - - public static int GetKeySize(SymmetricKeyAlgorithmTag algorithm) - { - int keySize; - switch (algorithm) - { - case SymmetricKeyAlgorithmTag.Des: - keySize = 64; - break; - case SymmetricKeyAlgorithmTag.Idea: - case SymmetricKeyAlgorithmTag.Cast5: - case SymmetricKeyAlgorithmTag.Blowfish: - case SymmetricKeyAlgorithmTag.Safer: - case SymmetricKeyAlgorithmTag.Aes128: - case SymmetricKeyAlgorithmTag.Camellia128: - keySize = 128; - break; - case SymmetricKeyAlgorithmTag.TripleDes: - case SymmetricKeyAlgorithmTag.Aes192: - case SymmetricKeyAlgorithmTag.Camellia192: - keySize = 192; - break; - case SymmetricKeyAlgorithmTag.Aes256: - case SymmetricKeyAlgorithmTag.Twofish: - case SymmetricKeyAlgorithmTag.Camellia256: - keySize = 256; - break; - default: - throw new PgpException("unknown symmetric algorithm: " + algorithm); - } - - return keySize; - } - - public static KeyParameter MakeKey( - SymmetricKeyAlgorithmTag algorithm, - byte[] keyBytes) - { - string algName = GetSymmetricCipherName(algorithm); - - return ParameterUtilities.CreateKeyParameter(algName, keyBytes); - } - - public static KeyParameter MakeRandomKey( - SymmetricKeyAlgorithmTag algorithm, - SecureRandom random) - { - int keySize = GetKeySize(algorithm); - byte[] keyBytes = new byte[(keySize + 7) / 8]; - random.NextBytes(keyBytes); - return MakeKey(algorithm, keyBytes); - } - - internal static byte[] EncodePassPhrase(char[] passPhrase, bool utf8) - { - return passPhrase == null - ? null - : utf8 - ? Encoding.UTF8.GetBytes(passPhrase) - : Strings.ToByteArray(passPhrase); - } - - /// - /// Conversion of the passphrase characters to bytes is performed using Convert.ToByte(), which is - /// the historical behaviour of the library (1.7 and earlier). - /// - public static KeyParameter MakeKeyFromPassPhrase(SymmetricKeyAlgorithmTag algorithm, S2k s2k, char[] passPhrase) - { - return DoMakeKeyFromPassPhrase(algorithm, s2k, EncodePassPhrase(passPhrase, false), true); - } - - /// - /// The passphrase is encoded to bytes using UTF8 (Encoding.UTF8.GetBytes). - /// - public static KeyParameter MakeKeyFromPassPhraseUtf8(SymmetricKeyAlgorithmTag algorithm, S2k s2k, char[] passPhrase) - { - return DoMakeKeyFromPassPhrase(algorithm, s2k, EncodePassPhrase(passPhrase, true), true); - } - - /// - /// Allows the caller to handle the encoding of the passphrase to bytes. - /// - public static KeyParameter MakeKeyFromPassPhraseRaw(SymmetricKeyAlgorithmTag algorithm, S2k s2k, byte[] rawPassPhrase) - { - return DoMakeKeyFromPassPhrase(algorithm, s2k, rawPassPhrase, false); - } - - internal static KeyParameter DoMakeKeyFromPassPhrase(SymmetricKeyAlgorithmTag algorithm, S2k s2k, byte[] rawPassPhrase, bool clearPassPhrase) - { - int keySize = GetKeySize(algorithm); - byte[] pBytes = rawPassPhrase; - byte[] keyBytes = new byte[(keySize + 7) / 8]; - - int generatedBytes = 0; - int loopCount = 0; - - while (generatedBytes < keyBytes.Length) - { - IDigest digest; - if (s2k != null) - { - string digestName = GetDigestName(s2k.HashAlgorithm); - - try - { - digest = DigestUtilities.GetDigest(digestName); - } - catch (Exception e) - { - throw new PgpException("can't find S2k digest", e); - } - - for (int i = 0; i != loopCount; i++) - { - digest.Update(0); - } - - byte[] iv = s2k.GetIV(); - - switch (s2k.Type) - { - case S2k.Simple: - digest.BlockUpdate(pBytes, 0, pBytes.Length); - break; - case S2k.Salted: - digest.BlockUpdate(iv, 0, iv.Length); - digest.BlockUpdate(pBytes, 0, pBytes.Length); - break; - case S2k.SaltedAndIterated: - long count = s2k.IterationCount; - digest.BlockUpdate(iv, 0, iv.Length); - digest.BlockUpdate(pBytes, 0, pBytes.Length); - - count -= iv.Length + pBytes.Length; - - while (count > 0) - { - if (count < iv.Length) - { - digest.BlockUpdate(iv, 0, (int)count); - break; - } - else - { - digest.BlockUpdate(iv, 0, iv.Length); - count -= iv.Length; - } - - if (count < pBytes.Length) - { - digest.BlockUpdate(pBytes, 0, (int)count); - count = 0; - } - else - { - digest.BlockUpdate(pBytes, 0, pBytes.Length); - count -= pBytes.Length; - } - } - break; - default: - throw new PgpException("unknown S2k type: " + s2k.Type); - } - } - else - { - try - { - digest = DigestUtilities.GetDigest("MD5"); - - for (int i = 0; i != loopCount; i++) - { - digest.Update(0); - } - - digest.BlockUpdate(pBytes, 0, pBytes.Length); - } - catch (Exception e) - { - throw new PgpException("can't find MD5 digest", e); - } - } - - byte[] dig = DigestUtilities.DoFinal(digest); - - if (dig.Length > (keyBytes.Length - generatedBytes)) - { - Array.Copy(dig, 0, keyBytes, generatedBytes, keyBytes.Length - generatedBytes); - } - else - { - Array.Copy(dig, 0, keyBytes, generatedBytes, dig.Length); - } - - generatedBytes += dig.Length; - - loopCount++; - } - - if (clearPassPhrase && rawPassPhrase != null) - { - Array.Clear(rawPassPhrase, 0, rawPassPhrase.Length); - } - - return MakeKey(algorithm, keyBytes); - } - -#if !PORTABLE || DOTNET - /// Write out the passed in file as a literal data packet. - public static void WriteFileToLiteralData( - Stream output, - char fileType, - FileInfo file) - { - PgpLiteralDataGenerator lData = new PgpLiteralDataGenerator(); - Stream pOut = lData.Open(output, fileType, file.Name, file.Length, file.LastWriteTime); - PipeFileContents(file, pOut, 4096); - } - - /// Write out the passed in file as a literal data packet in partial packet format. - public static void WriteFileToLiteralData( - Stream output, - char fileType, - FileInfo file, - byte[] buffer) - { - PgpLiteralDataGenerator lData = new PgpLiteralDataGenerator(); - Stream pOut = lData.Open(output, fileType, file.Name, file.LastWriteTime, buffer); - PipeFileContents(file, pOut, buffer.Length); - } - - private static void PipeFileContents(FileInfo file, Stream pOut, int bufSize) - { - FileStream inputStream = file.OpenRead(); - byte[] buf = new byte[bufSize]; - - int len; - while ((len = inputStream.Read(buf, 0, buf.Length)) > 0) - { - pOut.Write(buf, 0, len); - } - - Platform.Dispose(pOut); - Platform.Dispose(inputStream); - } -#endif - - private const int ReadAhead = 60; - - private static bool IsPossiblyBase64( - int ch) - { - return (ch >= 'A' && ch <= 'Z') || (ch >= 'a' && ch <= 'z') - || (ch >= '0' && ch <= '9') || (ch == '+') || (ch == '/') - || (ch == '\r') || (ch == '\n'); - } - - /// - /// Return either an ArmoredInputStream or a BcpgInputStream based on whether - /// the initial characters of the stream are binary PGP encodings or not. - /// - public static Stream GetDecoderStream( - Stream inputStream) - { - // TODO Remove this restriction? - if (!inputStream.CanSeek) - throw new ArgumentException("inputStream must be seek-able", "inputStream"); - - long markedPos = inputStream.Position; - - int ch = inputStream.ReadByte(); - if ((ch & 0x80) != 0) - { - inputStream.Position = markedPos; - - return inputStream; - } - - if (!IsPossiblyBase64(ch)) - { - inputStream.Position = markedPos; - - return new ArmoredInputStream(inputStream); - } - - byte[] buf = new byte[ReadAhead]; - int count = 1; - int index = 1; - - buf[0] = (byte)ch; - while (count != ReadAhead && (ch = inputStream.ReadByte()) >= 0) - { - if (!IsPossiblyBase64(ch)) - { - inputStream.Position = markedPos; - - return new ArmoredInputStream(inputStream); - } - - if (ch != '\n' && ch != '\r') - { - buf[index++] = (byte)ch; - } - - count++; - } - - inputStream.Position = markedPos; - - // - // nothing but new lines, little else, assume regular armoring - // - if (count < 4) - { - return new ArmoredInputStream(inputStream); - } - - // - // test our non-blank data - // - byte[] firstBlock = new byte[8]; - - Array.Copy(buf, 0, firstBlock, 0, firstBlock.Length); - - try - { - byte[] decoded = Base64.Decode(firstBlock); - - // - // it's a base64 PGP block. - // - bool hasHeaders = (decoded[0] & 0x80) == 0; - - return new ArmoredInputStream(inputStream, hasHeaders); - } - catch (IOException e) - { - throw e; - } - catch (Exception e) - { - throw new IOException(e.Message); - } - } - - internal static IWrapper CreateWrapper(SymmetricKeyAlgorithmTag encAlgorithm) - { - switch (encAlgorithm) - { - case SymmetricKeyAlgorithmTag.Aes128: - case SymmetricKeyAlgorithmTag.Aes192: - case SymmetricKeyAlgorithmTag.Aes256: - return WrapperUtilities.GetWrapper("AESWRAP"); - case SymmetricKeyAlgorithmTag.Camellia128: - case SymmetricKeyAlgorithmTag.Camellia192: - case SymmetricKeyAlgorithmTag.Camellia256: - return WrapperUtilities.GetWrapper("CAMELLIAWRAP"); - default: - throw new PgpException("unknown wrap algorithm: " + encAlgorithm); - } - } - - internal static byte[] GenerateIV(int length, SecureRandom random) - { - byte[] iv = new byte[length]; - random.NextBytes(iv); - return iv; - } - - internal static S2k GenerateS2k(HashAlgorithmTag hashAlgorithm, int s2kCount, SecureRandom random) - { - byte[] iv = GenerateIV(8, random); - return new S2k(hashAlgorithm, iv, s2kCount); - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/PgpV3SignatureGenerator.cs b/bc-sharp-crypto/src/openpgp/PgpV3SignatureGenerator.cs deleted file mode 100644 index fc8b42d..0000000 --- a/bc-sharp-crypto/src/openpgp/PgpV3SignatureGenerator.cs +++ /dev/null @@ -1,199 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities.Date; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /// Generator for old style PGP V3 Signatures. - // TODO Should be able to implement ISigner? - public class PgpV3SignatureGenerator - { - private PublicKeyAlgorithmTag keyAlgorithm; - private HashAlgorithmTag hashAlgorithm; - private PgpPrivateKey privKey; - private ISigner sig; - private IDigest dig; - private int signatureType; - private byte lastb; - - /// Create a generator for the passed in keyAlgorithm and hashAlgorithm codes. - public PgpV3SignatureGenerator( - PublicKeyAlgorithmTag keyAlgorithm, - HashAlgorithmTag hashAlgorithm) - { - this.keyAlgorithm = keyAlgorithm; - this.hashAlgorithm = hashAlgorithm; - - dig = DigestUtilities.GetDigest(PgpUtilities.GetDigestName(hashAlgorithm)); - sig = SignerUtilities.GetSigner(PgpUtilities.GetSignatureName(keyAlgorithm, hashAlgorithm)); - } - - /// Initialise the generator for signing. - public void InitSign( - int sigType, - PgpPrivateKey key) - { - InitSign(sigType, key, null); - } - - /// Initialise the generator for signing. - public void InitSign( - int sigType, - PgpPrivateKey key, - SecureRandom random) - { - this.privKey = key; - this.signatureType = sigType; - - try - { - ICipherParameters cp = key.Key; - if (random != null) - { - cp = new ParametersWithRandom(key.Key, random); - } - - sig.Init(true, cp); - } - catch (InvalidKeyException e) - { - throw new PgpException("invalid key.", e); - } - - dig.Reset(); - lastb = 0; - } - - public void Update( - byte b) - { - if (signatureType == PgpSignature.CanonicalTextDocument) - { - doCanonicalUpdateByte(b); - } - else - { - doUpdateByte(b); - } - } - - private void doCanonicalUpdateByte( - byte b) - { - if (b == '\r') - { - doUpdateCRLF(); - } - else if (b == '\n') - { - if (lastb != '\r') - { - doUpdateCRLF(); - } - } - else - { - doUpdateByte(b); - } - - lastb = b; - } - - private void doUpdateCRLF() - { - doUpdateByte((byte)'\r'); - doUpdateByte((byte)'\n'); - } - - private void doUpdateByte( - byte b) - { - sig.Update(b); - dig.Update(b); - } - - public void Update( - byte[] b) - { - if (signatureType == PgpSignature.CanonicalTextDocument) - { - for (int i = 0; i != b.Length; i++) - { - doCanonicalUpdateByte(b[i]); - } - } - else - { - sig.BlockUpdate(b, 0, b.Length); - dig.BlockUpdate(b, 0, b.Length); - } - } - - public void Update( - byte[] b, - int off, - int len) - { - if (signatureType == PgpSignature.CanonicalTextDocument) - { - int finish = off + len; - - for (int i = off; i != finish; i++) - { - doCanonicalUpdateByte(b[i]); - } - } - else - { - sig.BlockUpdate(b, off, len); - dig.BlockUpdate(b, off, len); - } - } - - /// Return the one pass header associated with the current signature. - public PgpOnePassSignature GenerateOnePassVersion( - bool isNested) - { - return new PgpOnePassSignature( - new OnePassSignaturePacket(signatureType, hashAlgorithm, keyAlgorithm, privKey.KeyId, isNested)); - } - - /// Return a V3 signature object containing the current signature state. - public PgpSignature Generate() - { - long creationTime = DateTimeUtilities.CurrentUnixMs() / 1000L; - - byte[] hData = new byte[] - { - (byte) signatureType, - (byte)(creationTime >> 24), - (byte)(creationTime >> 16), - (byte)(creationTime >> 8), - (byte) creationTime - }; - - sig.BlockUpdate(hData, 0, hData.Length); - dig.BlockUpdate(hData, 0, hData.Length); - - byte[] sigBytes = sig.GenerateSignature(); - byte[] digest = DigestUtilities.DoFinal(dig); - byte[] fingerPrint = new byte[]{ digest[0], digest[1] }; - - // an RSA signature - bool isRsa = keyAlgorithm == PublicKeyAlgorithmTag.RsaSign - || keyAlgorithm == PublicKeyAlgorithmTag.RsaGeneral; - - MPInteger[] sigValues = isRsa - ? PgpUtilities.RsaSigToMpi(sigBytes) - : PgpUtilities.DsaSigToMpi(sigBytes); - - return new PgpSignature( - new SignaturePacket(3, signatureType, privKey.KeyId, keyAlgorithm, - hashAlgorithm, creationTime * 1000L, fingerPrint, sigValues)); - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/Rfc6637Utilities.cs b/bc-sharp-crypto/src/openpgp/Rfc6637Utilities.cs deleted file mode 100644 index 5d992ec..0000000 --- a/bc-sharp-crypto/src/openpgp/Rfc6637Utilities.cs +++ /dev/null @@ -1,138 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Math.EC; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - public sealed class Rfc6637Utilities - { - private Rfc6637Utilities() - { - } - - // "Anonymous Sender ", which is the octet sequence - private static readonly byte[] ANONYMOUS_SENDER = Hex.Decode("416E6F6E796D6F75732053656E64657220202020"); - - public static string GetAgreementAlgorithm(PublicKeyPacket pubKeyData) - { - ECDHPublicBcpgKey ecKey = (ECDHPublicBcpgKey)pubKeyData.Key; - - switch (ecKey.HashAlgorithm) - { - case HashAlgorithmTag.Sha256: - return "ECCDHwithSHA256CKDF"; - case HashAlgorithmTag.Sha384: - return "ECCDHwithSHA384CKDF"; - case HashAlgorithmTag.Sha512: - return "ECCDHwithSHA512CKDF"; - default: - throw new ArgumentException("Unknown hash algorithm specified: " + ecKey.HashAlgorithm); - } - } - - public static DerObjectIdentifier GetKeyEncryptionOID(SymmetricKeyAlgorithmTag algID) - { - switch (algID) - { - case SymmetricKeyAlgorithmTag.Aes128: - return NistObjectIdentifiers.IdAes128Wrap; - case SymmetricKeyAlgorithmTag.Aes192: - return NistObjectIdentifiers.IdAes192Wrap; - case SymmetricKeyAlgorithmTag.Aes256: - return NistObjectIdentifiers.IdAes256Wrap; - default: - throw new PgpException("unknown symmetric algorithm ID: " + algID); - } - } - - public static int GetKeyLength(SymmetricKeyAlgorithmTag algID) - { - switch (algID) - { - case SymmetricKeyAlgorithmTag.Aes128: - return 16; - case SymmetricKeyAlgorithmTag.Aes192: - return 24; - case SymmetricKeyAlgorithmTag.Aes256: - return 32; - default: - throw new PgpException("unknown symmetric algorithm ID: " + algID); - } - } - - public static byte[] CreateKey(PublicKeyPacket pubKeyData, ECPoint s) - { - byte[] userKeyingMaterial = CreateUserKeyingMaterial(pubKeyData); - - ECDHPublicBcpgKey ecKey = (ECDHPublicBcpgKey)pubKeyData.Key; - - return Kdf(ecKey.HashAlgorithm, s, GetKeyLength(ecKey.SymmetricKeyAlgorithm), userKeyingMaterial); - } - - // RFC 6637 - Section 8 - // curve_OID_len = (byte)len(curve_OID); - // Param = curve_OID_len || curve_OID || public_key_alg_ID || 03 - // || 01 || KDF_hash_ID || KEK_alg_ID for AESKeyWrap || "Anonymous - // Sender " || recipient_fingerprint; - // Z_len = the key size for the KEK_alg_ID used with AESKeyWrap - // Compute Z = KDF( S, Z_len, Param ); - public static byte[] CreateUserKeyingMaterial(PublicKeyPacket pubKeyData) - { - MemoryStream pOut = new MemoryStream(); - ECDHPublicBcpgKey ecKey = (ECDHPublicBcpgKey)pubKeyData.Key; - byte[] encOid = ecKey.CurveOid.GetEncoded(); - - pOut.Write(encOid, 1, encOid.Length - 1); - pOut.WriteByte((byte)pubKeyData.Algorithm); - pOut.WriteByte(0x03); - pOut.WriteByte(0x01); - pOut.WriteByte((byte)ecKey.HashAlgorithm); - pOut.WriteByte((byte)ecKey.SymmetricKeyAlgorithm); - pOut.Write(ANONYMOUS_SENDER, 0, ANONYMOUS_SENDER.Length); - - byte[] fingerprint = PgpPublicKey.CalculateFingerprint(pubKeyData); - pOut.Write(fingerprint, 0, fingerprint.Length); - - return pOut.ToArray(); - } - - // RFC 6637 - Section 7 - // Implements KDF( X, oBits, Param ); - // Input: point X = (x,y) - // oBits - the desired size of output - // hBits - the size of output of hash function Hash - // Param - octets representing the parameters - // Assumes that oBits <= hBits - // Convert the point X to the octet string, see section 6: - // ZB' = 04 || x || y - // and extract the x portion from ZB' - // ZB = x; - // MB = Hash ( 00 || 00 || 00 || 01 || ZB || Param ); - // return oBits leftmost bits of MB. - private static byte[] Kdf(HashAlgorithmTag digestAlg, ECPoint s, int keyLen, byte[] parameters) - { - byte[] ZB = s.XCoord.GetEncoded(); - - string digestName = PgpUtilities.GetDigestName(digestAlg); - IDigest digest = DigestUtilities.GetDigest(digestName); - - digest.Update(0x00); - digest.Update(0x00); - digest.Update(0x00); - digest.Update(0x01); - digest.BlockUpdate(ZB, 0, ZB.Length); - digest.BlockUpdate(parameters, 0, parameters.Length); - - byte[] hash = DigestUtilities.DoFinal(digest); - - return Arrays.CopyOfRange(hash, 0, keyLen); - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/SXprUtilities.cs b/bc-sharp-crypto/src/openpgp/SXprUtilities.cs deleted file mode 100644 index 68ff373..0000000 --- a/bc-sharp-crypto/src/openpgp/SXprUtilities.cs +++ /dev/null @@ -1,102 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - /** - * Utility functions for looking a S-expression keys. This class will move when it finds a better home! - *

    - * Format documented here: - * http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=blob;f=agent/keyformat.txt;h=42c4b1f06faf1bbe71ffadc2fee0fad6bec91a97;hb=refs/heads/master - *

    - */ - public sealed class SXprUtilities - { - private SXprUtilities() - { - } - - private static int ReadLength(Stream input, int ch) - { - int len = ch - '0'; - - while ((ch = input.ReadByte()) >= 0 && ch != ':') - { - len = len * 10 + ch - '0'; - } - - return len; - } - - internal static string ReadString(Stream input, int ch) - { - int len = ReadLength(input, ch); - - char[] chars = new char[len]; - - for (int i = 0; i != chars.Length; i++) - { - chars[i] = (char)input.ReadByte(); - } - - return new string(chars); - } - - internal static byte[] ReadBytes(Stream input, int ch) - { - int len = ReadLength(input, ch); - - byte[] data = new byte[len]; - - Streams.ReadFully(input, data); - - return data; - } - - internal static S2k ParseS2k(Stream input) - { - SkipOpenParenthesis(input); - - string alg = ReadString(input, input.ReadByte()); - byte[] iv = ReadBytes(input, input.ReadByte()); - long iterationCount = Int64.Parse(ReadString(input, input.ReadByte())); - - SkipCloseParenthesis(input); - - // we have to return the actual iteration count provided. - return new MyS2k(HashAlgorithmTag.Sha1, iv, iterationCount); - } - - internal static void SkipOpenParenthesis(Stream input) - { - int ch = input.ReadByte(); - if (ch != '(') - throw new IOException("unknown character encountered"); - } - - internal static void SkipCloseParenthesis(Stream input) - { - int ch = input.ReadByte(); - if (ch != ')') - throw new IOException("unknown character encountered"); - } - - private class MyS2k : S2k - { - private readonly long mIterationCount64; - - internal MyS2k(HashAlgorithmTag algorithm, byte[] iv, long iterationCount64) - : base(algorithm, iv, (int)iterationCount64) - { - this.mIterationCount64 = iterationCount64; - } - - public override long IterationCount - { - get { return mIterationCount64; } - } - } - } -} diff --git a/bc-sharp-crypto/src/openpgp/WrappedGeneratorStream.cs b/bc-sharp-crypto/src/openpgp/WrappedGeneratorStream.cs deleted file mode 100644 index 5f4a4b0..0000000 --- a/bc-sharp-crypto/src/openpgp/WrappedGeneratorStream.cs +++ /dev/null @@ -1,37 +0,0 @@ -using System.IO; - -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.Bcpg.OpenPgp -{ - public class WrappedGeneratorStream - : FilterStream - { - private readonly IStreamGenerator gen; - - public WrappedGeneratorStream( - IStreamGenerator gen, - Stream str) - : base(str) - { - this.gen = gen; - } - -#if PORTABLE - protected override void Dispose(bool disposing) - { - if (disposing) - { - gen.Close(); - return; - } - base.Dispose(disposing); - } -#else - public override void Close() - { - gen.Close(); - } -#endif - } -} diff --git a/bc-sharp-crypto/src/openssl/EncryptionException.cs b/bc-sharp-crypto/src/openssl/EncryptionException.cs deleted file mode 100644 index 043e902..0000000 --- a/bc-sharp-crypto/src/openssl/EncryptionException.cs +++ /dev/null @@ -1,25 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Security -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class EncryptionException - : IOException - { - public EncryptionException( - string message) - : base(message) - { - } - - public EncryptionException( - string message, - Exception exception) - : base(message, exception) - { - } - } -} diff --git a/bc-sharp-crypto/src/openssl/IPasswordFinder.cs b/bc-sharp-crypto/src/openssl/IPasswordFinder.cs deleted file mode 100644 index 4fcef1b..0000000 --- a/bc-sharp-crypto/src/openssl/IPasswordFinder.cs +++ /dev/null @@ -1,9 +0,0 @@ -using System; - -namespace Org.BouncyCastle.OpenSsl -{ - public interface IPasswordFinder - { - char[] GetPassword(); - } -} diff --git a/bc-sharp-crypto/src/openssl/MiscPemGenerator.cs b/bc-sharp-crypto/src/openssl/MiscPemGenerator.cs deleted file mode 100644 index 22ae1ea..0000000 --- a/bc-sharp-crypto/src/openssl/MiscPemGenerator.cs +++ /dev/null @@ -1,275 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.CryptoPro; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Pkcs; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Encoders; -using Org.BouncyCastle.Utilities.IO.Pem; -using Org.BouncyCastle.X509; - -namespace Org.BouncyCastle.OpenSsl -{ - /** - * PEM generator for the original set of PEM objects used in Open SSL. - */ - public class MiscPemGenerator - : PemObjectGenerator - { - private object obj; - private string algorithm; - private char[] password; - private SecureRandom random; - - public MiscPemGenerator(object obj) - { - this.obj = obj; - } - - public MiscPemGenerator( - object obj, - string algorithm, - char[] password, - SecureRandom random) - { - this.obj = obj; - this.algorithm = algorithm; - this.password = password; - this.random = random; - } - - private static PemObject CreatePemObject(object obj) - { - if (obj == null) - throw new ArgumentNullException("obj"); - - if (obj is AsymmetricCipherKeyPair) - { - return CreatePemObject(((AsymmetricCipherKeyPair)obj).Private); - } - - string type; - byte[] encoding; - - if (obj is PemObject) - return (PemObject)obj; - - if (obj is PemObjectGenerator) - return ((PemObjectGenerator)obj).Generate(); - - if (obj is X509Certificate) - { - // TODO Should we prefer "X509 CERTIFICATE" here? - type = "CERTIFICATE"; - try - { - encoding = ((X509Certificate)obj).GetEncoded(); - } - catch (CertificateEncodingException e) - { - throw new IOException("Cannot Encode object: " + e.ToString()); - } - } - else if (obj is X509Crl) - { - type = "X509 CRL"; - try - { - encoding = ((X509Crl)obj).GetEncoded(); - } - catch (CrlException e) - { - throw new IOException("Cannot Encode object: " + e.ToString()); - } - } - else if (obj is AsymmetricKeyParameter) - { - AsymmetricKeyParameter akp = (AsymmetricKeyParameter) obj; - if (akp.IsPrivate) - { - string keyType; - encoding = EncodePrivateKey(akp, out keyType); - - type = keyType + " PRIVATE KEY"; - } - else - { - type = "PUBLIC KEY"; - - encoding = SubjectPublicKeyInfoFactory.CreateSubjectPublicKeyInfo(akp).GetDerEncoded(); - } - } - else if (obj is IX509AttributeCertificate) - { - type = "ATTRIBUTE CERTIFICATE"; - encoding = ((X509V2AttributeCertificate)obj).GetEncoded(); - } - else if (obj is Pkcs10CertificationRequest) - { - type = "CERTIFICATE REQUEST"; - encoding = ((Pkcs10CertificationRequest)obj).GetEncoded(); - } - else if (obj is Asn1.Cms.ContentInfo) - { - type = "PKCS7"; - encoding = ((Asn1.Cms.ContentInfo)obj).GetEncoded(); - } - else - { - throw new PemGenerationException("Object type not supported: " + Platform.GetTypeName(obj)); - } - - return new PemObject(type, encoding); - } - -// private string GetHexEncoded(byte[] bytes) -// { -// bytes = Hex.Encode(bytes); -// -// char[] chars = new char[bytes.Length]; -// -// for (int i = 0; i != bytes.Length; i++) -// { -// chars[i] = (char)bytes[i]; -// } -// -// return new string(chars); -// } - - private static PemObject CreatePemObject( - object obj, - string algorithm, - char[] password, - SecureRandom random) - { - if (obj == null) - throw new ArgumentNullException("obj"); - if (algorithm == null) - throw new ArgumentNullException("algorithm"); - if (password == null) - throw new ArgumentNullException("password"); - if (random == null) - throw new ArgumentNullException("random"); - - if (obj is AsymmetricCipherKeyPair) - { - return CreatePemObject(((AsymmetricCipherKeyPair)obj).Private, algorithm, password, random); - } - - string type = null; - byte[] keyData = null; - - if (obj is AsymmetricKeyParameter) - { - AsymmetricKeyParameter akp = (AsymmetricKeyParameter) obj; - if (akp.IsPrivate) - { - string keyType; - keyData = EncodePrivateKey(akp, out keyType); - - type = keyType + " PRIVATE KEY"; - } - } - - if (type == null || keyData == null) - { - // TODO Support other types? - throw new PemGenerationException("Object type not supported: " + Platform.GetTypeName(obj)); - } - - - string dekAlgName = Platform.ToUpperInvariant(algorithm); - - // Note: For backward compatibility - if (dekAlgName == "DESEDE") - { - dekAlgName = "DES-EDE3-CBC"; - } - - int ivLength = Platform.StartsWith(dekAlgName, "AES-") ? 16 : 8; - - byte[] iv = new byte[ivLength]; - random.NextBytes(iv); - - byte[] encData = PemUtilities.Crypt(true, keyData, password, dekAlgName, iv); - - IList headers = Platform.CreateArrayList(2); - - headers.Add(new PemHeader("Proc-Type", "4,ENCRYPTED")); - headers.Add(new PemHeader("DEK-Info", dekAlgName + "," + Hex.ToHexString(iv))); - - return new PemObject(type, headers, encData); - } - - private static byte[] EncodePrivateKey( - AsymmetricKeyParameter akp, - out string keyType) - { - PrivateKeyInfo info = PrivateKeyInfoFactory.CreatePrivateKeyInfo(akp); - AlgorithmIdentifier algID = info.PrivateKeyAlgorithm; - DerObjectIdentifier oid = algID.Algorithm; - - if (oid.Equals(X9ObjectIdentifiers.IdDsa)) - { - keyType = "DSA"; - - DsaParameter p = DsaParameter.GetInstance(algID.Parameters); - - BigInteger x = ((DsaPrivateKeyParameters) akp).X; - BigInteger y = p.G.ModPow(x, p.P); - - // TODO Create an ASN1 object somewhere for this? - return new DerSequence( - new DerInteger(0), - new DerInteger(p.P), - new DerInteger(p.Q), - new DerInteger(p.G), - new DerInteger(y), - new DerInteger(x)).GetEncoded(); - } - - if (oid.Equals(PkcsObjectIdentifiers.RsaEncryption)) - { - keyType = "RSA"; - } - else if (oid.Equals(CryptoProObjectIdentifiers.GostR3410x2001) - || oid.Equals(X9ObjectIdentifiers.IdECPublicKey)) - { - keyType = "EC"; - } - else - { - throw new ArgumentException("Cannot handle private key of type: " + Platform.GetTypeName(akp), "akp"); - } - - return info.ParsePrivateKey().GetEncoded(); - } - - public PemObject Generate() - { - try - { - if (algorithm != null) - { - return CreatePemObject(obj, algorithm, password, random); - } - - return CreatePemObject(obj); - } - catch (IOException e) - { - throw new PemGenerationException("encoding exception", e); - } - } - } -} diff --git a/bc-sharp-crypto/src/openssl/PEMException.cs b/bc-sharp-crypto/src/openssl/PEMException.cs deleted file mode 100644 index 6b3e510..0000000 --- a/bc-sharp-crypto/src/openssl/PEMException.cs +++ /dev/null @@ -1,25 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.OpenSsl -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class PemException - : IOException - { - public PemException( - string message) - : base(message) - { - } - - public PemException( - string message, - Exception exception) - : base(message, exception) - { - } - } -} diff --git a/bc-sharp-crypto/src/openssl/PEMReader.cs b/bc-sharp-crypto/src/openssl/PEMReader.cs deleted file mode 100644 index 9a5f99b..0000000 --- a/bc-sharp-crypto/src/openssl/PEMReader.cs +++ /dev/null @@ -1,401 +0,0 @@ -using System; -using System.Collections; -using System.Diagnostics; -using System.IO; -using System.Text; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.Sec; -using Org.BouncyCastle.Asn1.TeleTrust; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.EC; -using Org.BouncyCastle.Crypto.Generators; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Pkcs; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Encoders; -using Org.BouncyCastle.Utilities.IO.Pem; -using Org.BouncyCastle.X509; - -namespace Org.BouncyCastle.OpenSsl -{ - /** - * Class for reading OpenSSL PEM encoded streams containing - * X509 certificates, PKCS8 encoded keys and PKCS7 objects. - *

    - * In the case of PKCS7 objects the reader will return a CMS ContentInfo object. Keys and - * Certificates will be returned using the appropriate java.security type.

    - */ - public class PemReader - : Org.BouncyCastle.Utilities.IO.Pem.PemReader - { -// private static readonly IDictionary parsers = new Hashtable(); - - static PemReader() - { -// parsers.Add("CERTIFICATE REQUEST", new PKCS10CertificationRequestParser()); -// parsers.Add("NEW CERTIFICATE REQUEST", new PKCS10CertificationRequestParser()); -// parsers.Add("CERTIFICATE", new X509CertificateParser(provider)); -// parsers.Add("X509 CERTIFICATE", new X509CertificateParser(provider)); -// parsers.Add("X509 CRL", new X509CRLParser(provider)); -// parsers.Add("PKCS7", new PKCS7Parser()); -// parsers.Add("ATTRIBUTE CERTIFICATE", new X509AttributeCertificateParser()); -// parsers.Add("EC PARAMETERS", new ECNamedCurveSpecParser()); -// parsers.Add("PUBLIC KEY", new PublicKeyParser(provider)); -// parsers.Add("RSA PUBLIC KEY", new RSAPublicKeyParser(provider)); -// parsers.Add("RSA PRIVATE KEY", new RSAKeyPairParser(provider)); -// parsers.Add("DSA PRIVATE KEY", new DSAKeyPairParser(provider)); -// parsers.Add("EC PRIVATE KEY", new ECDSAKeyPairParser(provider)); -// parsers.Add("ENCRYPTED PRIVATE KEY", new EncryptedPrivateKeyParser(provider)); -// parsers.Add("PRIVATE KEY", new PrivateKeyParser(provider)); - } - - private readonly IPasswordFinder pFinder; - - /** - * Create a new PemReader - * - * @param reader the Reader - */ - public PemReader( - TextReader reader) - : this(reader, null) - { - } - - /** - * Create a new PemReader with a password finder - * - * @param reader the Reader - * @param pFinder the password finder - */ - public PemReader( - TextReader reader, - IPasswordFinder pFinder) - : base(reader) - { - this.pFinder = pFinder; - } - - public object ReadObject() - { - PemObject obj = ReadPemObject(); - - if (obj == null) - return null; - - // TODO Follow Java build and map to parser objects? -// if (parsers.Contains(obj.Type)) -// return ((PemObjectParser)parsers[obj.Type]).ParseObject(obj); - - if (Platform.EndsWith(obj.Type, "PRIVATE KEY")) - return ReadPrivateKey(obj); - - switch (obj.Type) - { - case "PUBLIC KEY": - return ReadPublicKey(obj); - case "RSA PUBLIC KEY": - return ReadRsaPublicKey(obj); - case "CERTIFICATE REQUEST": - case "NEW CERTIFICATE REQUEST": - return ReadCertificateRequest(obj); - case "CERTIFICATE": - case "X509 CERTIFICATE": - return ReadCertificate(obj); - case "PKCS7": - case "CMS": - return ReadPkcs7(obj); - case "X509 CRL": - return ReadCrl(obj); - case "ATTRIBUTE CERTIFICATE": - return ReadAttributeCertificate(obj); - // TODO Add back in when tests done, and return type issue resolved - //case "EC PARAMETERS": - // return ReadECParameters(obj); - default: - throw new IOException("unrecognised object: " + obj.Type); - } - } - - private AsymmetricKeyParameter ReadRsaPublicKey(PemObject pemObject) - { - RsaPublicKeyStructure rsaPubStructure = RsaPublicKeyStructure.GetInstance( - Asn1Object.FromByteArray(pemObject.Content)); - - return new RsaKeyParameters( - false, // not private - rsaPubStructure.Modulus, - rsaPubStructure.PublicExponent); - } - - private AsymmetricKeyParameter ReadPublicKey(PemObject pemObject) - { - return PublicKeyFactory.CreateKey(pemObject.Content); - } - - /** - * Reads in a X509Certificate. - * - * @return the X509Certificate - * @throws IOException if an I/O error occured - */ - private X509Certificate ReadCertificate(PemObject pemObject) - { - try - { - return new X509CertificateParser().ReadCertificate(pemObject.Content); - } - catch (Exception e) - { - throw new PemException("problem parsing cert: " + e.ToString()); - } - } - - /** - * Reads in a X509CRL. - * - * @return the X509Certificate - * @throws IOException if an I/O error occured - */ - private X509Crl ReadCrl(PemObject pemObject) - { - try - { - return new X509CrlParser().ReadCrl(pemObject.Content); - } - catch (Exception e) - { - throw new PemException("problem parsing cert: " + e.ToString()); - } - } - - /** - * Reads in a PKCS10 certification request. - * - * @return the certificate request. - * @throws IOException if an I/O error occured - */ - private Pkcs10CertificationRequest ReadCertificateRequest(PemObject pemObject) - { - try - { - return new Pkcs10CertificationRequest(pemObject.Content); - } - catch (Exception e) - { - throw new PemException("problem parsing cert: " + e.ToString()); - } - } - - /** - * Reads in a X509 Attribute Certificate. - * - * @return the X509 Attribute Certificate - * @throws IOException if an I/O error occured - */ - private IX509AttributeCertificate ReadAttributeCertificate(PemObject pemObject) - { - return new X509V2AttributeCertificate(pemObject.Content); - } - - /** - * Reads in a PKCS7 object. This returns a ContentInfo object suitable for use with the CMS - * API. - * - * @return the X509Certificate - * @throws IOException if an I/O error occured - */ - // TODO Consider returning Asn1.Pkcs.ContentInfo - private Asn1.Cms.ContentInfo ReadPkcs7(PemObject pemObject) - { - try - { - return Asn1.Cms.ContentInfo.GetInstance( - Asn1Object.FromByteArray(pemObject.Content)); - } - catch (Exception e) - { - throw new PemException("problem parsing PKCS7 object: " + e.ToString()); - } - } - - /** - * Read a Key Pair - */ - private object ReadPrivateKey(PemObject pemObject) - { - // - // extract the key - // - Debug.Assert(Platform.EndsWith(pemObject.Type, "PRIVATE KEY")); - - string type = pemObject.Type.Substring(0, pemObject.Type.Length - "PRIVATE KEY".Length).Trim(); - byte[] keyBytes = pemObject.Content; - - IDictionary fields = Platform.CreateHashtable(); - foreach (PemHeader header in pemObject.Headers) - { - fields[header.Name] = header.Value; - } - - string procType = (string) fields["Proc-Type"]; - - if (procType == "4,ENCRYPTED") - { - if (pFinder == null) - throw new PasswordException("No password finder specified, but a password is required"); - - char[] password = pFinder.GetPassword(); - - if (password == null) - throw new PasswordException("Password is null, but a password is required"); - - string dekInfo = (string) fields["DEK-Info"]; - string[] tknz = dekInfo.Split(','); - - string dekAlgName = tknz[0].Trim(); - byte[] iv = Hex.Decode(tknz[1].Trim()); - - keyBytes = PemUtilities.Crypt(false, keyBytes, password, dekAlgName, iv); - } - - try - { - AsymmetricKeyParameter pubSpec, privSpec; - Asn1Sequence seq = Asn1Sequence.GetInstance(keyBytes); - - switch (type) - { - case "RSA": - { - if (seq.Count != 9) - throw new PemException("malformed sequence in RSA private key"); - - RsaPrivateKeyStructure rsa = RsaPrivateKeyStructure.GetInstance(seq); - - pubSpec = new RsaKeyParameters(false, rsa.Modulus, rsa.PublicExponent); - privSpec = new RsaPrivateCrtKeyParameters( - rsa.Modulus, rsa.PublicExponent, rsa.PrivateExponent, - rsa.Prime1, rsa.Prime2, rsa.Exponent1, rsa.Exponent2, - rsa.Coefficient); - - break; - } - - case "DSA": - { - if (seq.Count != 6) - throw new PemException("malformed sequence in DSA private key"); - - // TODO Create an ASN1 object somewhere for this? - //DerInteger v = (DerInteger)seq[0]; - DerInteger p = (DerInteger)seq[1]; - DerInteger q = (DerInteger)seq[2]; - DerInteger g = (DerInteger)seq[3]; - DerInteger y = (DerInteger)seq[4]; - DerInteger x = (DerInteger)seq[5]; - - DsaParameters parameters = new DsaParameters(p.Value, q.Value, g.Value); - - privSpec = new DsaPrivateKeyParameters(x.Value, parameters); - pubSpec = new DsaPublicKeyParameters(y.Value, parameters); - - break; - } - - case "EC": - { - ECPrivateKeyStructure pKey = ECPrivateKeyStructure.GetInstance(seq); - AlgorithmIdentifier algId = new AlgorithmIdentifier( - X9ObjectIdentifiers.IdECPublicKey, pKey.GetParameters()); - - PrivateKeyInfo privInfo = new PrivateKeyInfo(algId, pKey.ToAsn1Object()); - - // TODO Are the keys returned here ECDSA, as Java version forces? - privSpec = PrivateKeyFactory.CreateKey(privInfo); - - DerBitString pubKey = pKey.GetPublicKey(); - if (pubKey != null) - { - SubjectPublicKeyInfo pubInfo = new SubjectPublicKeyInfo(algId, pubKey.GetBytes()); - - // TODO Are the keys returned here ECDSA, as Java version forces? - pubSpec = PublicKeyFactory.CreateKey(pubInfo); - } - else - { - pubSpec = ECKeyPairGenerator.GetCorrespondingPublicKey( - (ECPrivateKeyParameters)privSpec); - } - - break; - } - - case "ENCRYPTED": - { - char[] password = pFinder.GetPassword(); - - if (password == null) - throw new PasswordException("Password is null, but a password is required"); - - return PrivateKeyFactory.DecryptKey(password, EncryptedPrivateKeyInfo.GetInstance(seq)); - } - - case "": - { - return PrivateKeyFactory.CreateKey(PrivateKeyInfo.GetInstance(seq)); - } - - default: - throw new ArgumentException("Unknown key type: " + type, "type"); - } - - return new AsymmetricCipherKeyPair(pubSpec, privSpec); - } - catch (IOException e) - { - throw e; - } - catch (Exception e) - { - throw new PemException( - "problem creating " + type + " private key: " + e.ToString()); - } - } - - // TODO Add an equivalent class for ECNamedCurveParameterSpec? - //private ECNamedCurveParameterSpec ReadECParameters( -// private X9ECParameters ReadECParameters(PemObject pemObject) -// { -// DerObjectIdentifier oid = (DerObjectIdentifier)Asn1Object.FromByteArray(pemObject.Content); -// -// //return ECNamedCurveTable.getParameterSpec(oid.Id); -// return GetCurveParameters(oid.Id); -// } - - //private static ECDomainParameters GetCurveParameters( - private static X9ECParameters GetCurveParameters( - string name) - { - // TODO ECGost3410NamedCurves support (returns ECDomainParameters though) - - X9ECParameters ecP = CustomNamedCurves.GetByName(name); - if (ecP == null) - { - ecP = ECNamedCurveTable.GetByName(name); - } - - if (ecP == null) - throw new Exception("unknown curve name: " + name); - - //return new ECDomainParameters(ecP.Curve, ecP.G, ecP.N, ecP.H, ecP.GetSeed()); - return ecP; - } - } -} diff --git a/bc-sharp-crypto/src/openssl/PEMUtilities.cs b/bc-sharp-crypto/src/openssl/PEMUtilities.cs deleted file mode 100644 index b58e5e7..0000000 --- a/bc-sharp-crypto/src/openssl/PEMUtilities.cs +++ /dev/null @@ -1,158 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Generators; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.OpenSsl -{ - internal sealed class PemUtilities - { - private enum PemBaseAlg { AES_128, AES_192, AES_256, BF, DES, DES_EDE, DES_EDE3, RC2, RC2_40, RC2_64 }; - private enum PemMode { CBC, CFB, ECB, OFB }; - - static PemUtilities() - { - // Signal to obfuscation tools not to change enum constants - ((PemBaseAlg)Enums.GetArbitraryValue(typeof(PemBaseAlg))).ToString(); - ((PemMode)Enums.GetArbitraryValue(typeof(PemMode))).ToString(); - } - - private static void ParseDekAlgName( - string dekAlgName, - out PemBaseAlg baseAlg, - out PemMode mode) - { - try - { - mode = PemMode.ECB; - - if (dekAlgName == "DES-EDE" || dekAlgName == "DES-EDE3") - { - baseAlg = (PemBaseAlg)Enums.GetEnumValue(typeof(PemBaseAlg), dekAlgName); - return; - } - - int pos = dekAlgName.LastIndexOf('-'); - if (pos >= 0) - { - baseAlg = (PemBaseAlg)Enums.GetEnumValue(typeof(PemBaseAlg), dekAlgName.Substring(0, pos)); - mode = (PemMode)Enums.GetEnumValue(typeof(PemMode), dekAlgName.Substring(pos + 1)); - return; - } - } - catch (ArgumentException) - { - } - - throw new EncryptionException("Unknown DEK algorithm: " + dekAlgName); - } - - internal static byte[] Crypt( - bool encrypt, - byte[] bytes, - char[] password, - string dekAlgName, - byte[] iv) - { - PemBaseAlg baseAlg; - PemMode mode; - ParseDekAlgName(dekAlgName, out baseAlg, out mode); - - string padding; - switch (mode) - { - case PemMode.CBC: - case PemMode.ECB: - padding = "PKCS5Padding"; - break; - case PemMode.CFB: - case PemMode.OFB: - padding = "NoPadding"; - break; - default: - throw new EncryptionException("Unknown DEK algorithm: " + dekAlgName); - } - - string algorithm; - - byte[] salt = iv; - switch (baseAlg) - { - case PemBaseAlg.AES_128: - case PemBaseAlg.AES_192: - case PemBaseAlg.AES_256: - algorithm = "AES"; - if (salt.Length > 8) - { - salt = new byte[8]; - Array.Copy(iv, 0, salt, 0, salt.Length); - } - break; - case PemBaseAlg.BF: - algorithm = "BLOWFISH"; - break; - case PemBaseAlg.DES: - algorithm = "DES"; - break; - case PemBaseAlg.DES_EDE: - case PemBaseAlg.DES_EDE3: - algorithm = "DESede"; - break; - case PemBaseAlg.RC2: - case PemBaseAlg.RC2_40: - case PemBaseAlg.RC2_64: - algorithm = "RC2"; - break; - default: - throw new EncryptionException("Unknown DEK algorithm: " + dekAlgName); - } - - string cipherName = algorithm + "/" + mode + "/" + padding; - IBufferedCipher cipher = CipherUtilities.GetCipher(cipherName); - - ICipherParameters cParams = GetCipherParameters(password, baseAlg, salt); - - if (mode != PemMode.ECB) - { - cParams = new ParametersWithIV(cParams, iv); - } - - cipher.Init(encrypt, cParams); - - return cipher.DoFinal(bytes); - } - - private static ICipherParameters GetCipherParameters( - char[] password, - PemBaseAlg baseAlg, - byte[] salt) - { - string algorithm; - int keyBits; - switch (baseAlg) - { - case PemBaseAlg.AES_128: keyBits = 128; algorithm = "AES128"; break; - case PemBaseAlg.AES_192: keyBits = 192; algorithm = "AES192"; break; - case PemBaseAlg.AES_256: keyBits = 256; algorithm = "AES256"; break; - case PemBaseAlg.BF: keyBits = 128; algorithm = "BLOWFISH"; break; - case PemBaseAlg.DES: keyBits = 64; algorithm = "DES"; break; - case PemBaseAlg.DES_EDE: keyBits = 128; algorithm = "DESEDE"; break; - case PemBaseAlg.DES_EDE3: keyBits = 192; algorithm = "DESEDE3"; break; - case PemBaseAlg.RC2: keyBits = 128; algorithm = "RC2"; break; - case PemBaseAlg.RC2_40: keyBits = 40; algorithm = "RC2"; break; - case PemBaseAlg.RC2_64: keyBits = 64; algorithm = "RC2"; break; - default: - return null; - } - - OpenSslPbeParametersGenerator pGen = new OpenSslPbeParametersGenerator(); - - pGen.Init(PbeParametersGenerator.Pkcs5PasswordToBytes(password), salt); - - return pGen.GenerateDerivedParameters(algorithm, keyBits); - } - } -} diff --git a/bc-sharp-crypto/src/openssl/PEMWriter.cs b/bc-sharp-crypto/src/openssl/PEMWriter.cs deleted file mode 100644 index aefb018..0000000 --- a/bc-sharp-crypto/src/openssl/PEMWriter.cs +++ /dev/null @@ -1,61 +0,0 @@ -using System; -using System.Diagnostics; -using System.Globalization; -using System.IO; -using System.Text; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.CryptoPro; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Generators; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Pkcs; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities.Encoders; -using Org.BouncyCastle.Utilities.IO.Pem; -using Org.BouncyCastle.X509; - -namespace Org.BouncyCastle.OpenSsl -{ - /// General purpose writer for OpenSSL PEM objects. - public class PemWriter - : Org.BouncyCastle.Utilities.IO.Pem.PemWriter - { - /// The TextWriter object to write the output to. - public PemWriter( - TextWriter writer) - : base(writer) - { - } - - public void WriteObject( - object obj) - { - try - { - base.WriteObject(new MiscPemGenerator(obj)); - } - catch (PemGenerationException e) - { - if (e.InnerException is IOException) - throw (IOException)e.InnerException; - - throw e; - } - } - - public void WriteObject( - object obj, - string algorithm, - char[] password, - SecureRandom random) - { - base.WriteObject(new MiscPemGenerator(obj, algorithm, password, random)); - } - } -} diff --git a/bc-sharp-crypto/src/openssl/PasswordException.cs b/bc-sharp-crypto/src/openssl/PasswordException.cs deleted file mode 100644 index 38e679b..0000000 --- a/bc-sharp-crypto/src/openssl/PasswordException.cs +++ /dev/null @@ -1,25 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Security -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class PasswordException - : IOException - { - public PasswordException( - string message) - : base(message) - { - } - - public PasswordException( - string message, - Exception exception) - : base(message, exception) - { - } - } -} diff --git a/bc-sharp-crypto/src/openssl/Pkcs8Generator.cs b/bc-sharp-crypto/src/openssl/Pkcs8Generator.cs deleted file mode 100644 index d03ea08..0000000 --- a/bc-sharp-crypto/src/openssl/Pkcs8Generator.cs +++ /dev/null @@ -1,111 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Pkcs; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities.IO.Pem; - -namespace Org.BouncyCastle.OpenSsl -{ - public class Pkcs8Generator - : PemObjectGenerator - { - // FIXME See PbeUtilities static constructor -// public static readonly string Aes128Cbc = NistObjectIdentifiers.IdAes128Cbc.Id; -// public static readonly string Aes192Cbc = NistObjectIdentifiers.IdAes192Cbc.Id; -// public static readonly string Aes256Cbc = NistObjectIdentifiers.IdAes256Cbc.Id; -// -// public static readonly string Des3Cbc = PkcsObjectIdentifiers.DesEde3Cbc.Id; - - public static readonly string PbeSha1_RC4_128 = PkcsObjectIdentifiers.PbeWithShaAnd128BitRC4.Id; - public static readonly string PbeSha1_RC4_40 = PkcsObjectIdentifiers.PbeWithShaAnd40BitRC4.Id; - public static readonly string PbeSha1_3DES = PkcsObjectIdentifiers.PbeWithShaAnd3KeyTripleDesCbc.Id; - public static readonly string PbeSha1_2DES = PkcsObjectIdentifiers.PbeWithShaAnd2KeyTripleDesCbc.Id; - public static readonly string PbeSha1_RC2_128 = PkcsObjectIdentifiers.PbeWithShaAnd128BitRC2Cbc.Id; - public static readonly string PbeSha1_RC2_40 = PkcsObjectIdentifiers.PbewithShaAnd40BitRC2Cbc.Id; - - private char[] password; - private string algorithm; - private int iterationCount; - private AsymmetricKeyParameter privKey; - private SecureRandom random; - - /** - * Constructor for an unencrypted private key PEM object. - * - * @param key private key to be encoded. - */ - public Pkcs8Generator(AsymmetricKeyParameter privKey) - { - this.privKey = privKey; - } - - /** - * Constructor for an encrypted private key PEM object. - * - * @param key private key to be encoded - * @param algorithm encryption algorithm to use - * @param provider provider to use - * @throws NoSuchAlgorithmException if algorithm/mode cannot be found - */ - public Pkcs8Generator(AsymmetricKeyParameter privKey, string algorithm) - { - // TODO Check privKey.IsPrivate - this.privKey = privKey; - this.algorithm = algorithm; - this.iterationCount = 2048; - } - - public SecureRandom SecureRandom - { - set { this.random = value; } - } - - public char[] Password - { - set { this.password = value; } - } - - public int IterationCount - { - set { this.iterationCount = value; } - } - - public PemObject Generate() - { - if (algorithm == null) - { - PrivateKeyInfo pki = PrivateKeyInfoFactory.CreatePrivateKeyInfo(privKey); - - return new PemObject("PRIVATE KEY", pki.GetEncoded()); - } - - // TODO Theoretically, the amount of salt needed depends on the algorithm - byte[] salt = new byte[20]; - if (random == null) - { - random = new SecureRandom(); - } - random.NextBytes(salt); - - try - { - EncryptedPrivateKeyInfo epki = EncryptedPrivateKeyInfoFactory.CreateEncryptedPrivateKeyInfo( - algorithm, password, salt, iterationCount, privKey); - - return new PemObject("ENCRYPTED PRIVATE KEY", epki.GetEncoded()); - } - catch (Exception e) - { - throw new PemGenerationException("Couldn't encrypt private key", e); - } - } - } -} diff --git a/bc-sharp-crypto/src/pkcs/AsymmetricKeyEntry.cs b/bc-sharp-crypto/src/pkcs/AsymmetricKeyEntry.cs deleted file mode 100644 index 6da3ade..0000000 --- a/bc-sharp-crypto/src/pkcs/AsymmetricKeyEntry.cs +++ /dev/null @@ -1,60 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Pkcs -{ - public class AsymmetricKeyEntry - : Pkcs12Entry - { - private readonly AsymmetricKeyParameter key; - - public AsymmetricKeyEntry( - AsymmetricKeyParameter key) - : base(Platform.CreateHashtable()) - { - this.key = key; - } - -#if !(SILVERLIGHT || PORTABLE) - [Obsolete] - public AsymmetricKeyEntry( - AsymmetricKeyParameter key, - Hashtable attributes) - : base(attributes) - { - this.key = key; - } -#endif - - public AsymmetricKeyEntry( - AsymmetricKeyParameter key, - IDictionary attributes) - : base(attributes) - { - this.key = key; - } - - public AsymmetricKeyParameter Key - { - get { return this.key; } - } - - public override bool Equals(object obj) - { - AsymmetricKeyEntry other = obj as AsymmetricKeyEntry; - - if (other == null) - return false; - - return key.Equals(other.key); - } - - public override int GetHashCode() - { - return ~key.GetHashCode(); - } - } -} diff --git a/bc-sharp-crypto/src/pkcs/EncryptedPrivateKeyInfoFactory.cs b/bc-sharp-crypto/src/pkcs/EncryptedPrivateKeyInfoFactory.cs deleted file mode 100644 index b6b7bac..0000000 --- a/bc-sharp-crypto/src/pkcs/EncryptedPrivateKeyInfoFactory.cs +++ /dev/null @@ -1,64 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Pkcs -{ - public sealed class EncryptedPrivateKeyInfoFactory - { - private EncryptedPrivateKeyInfoFactory() - { - } - - public static EncryptedPrivateKeyInfo CreateEncryptedPrivateKeyInfo( - DerObjectIdentifier algorithm, - char[] passPhrase, - byte[] salt, - int iterationCount, - AsymmetricKeyParameter key) - { - return CreateEncryptedPrivateKeyInfo( - algorithm.Id, passPhrase, salt, iterationCount, - PrivateKeyInfoFactory.CreatePrivateKeyInfo(key)); - } - - public static EncryptedPrivateKeyInfo CreateEncryptedPrivateKeyInfo( - string algorithm, - char[] passPhrase, - byte[] salt, - int iterationCount, - AsymmetricKeyParameter key) - { - return CreateEncryptedPrivateKeyInfo( - algorithm, passPhrase, salt, iterationCount, - PrivateKeyInfoFactory.CreatePrivateKeyInfo(key)); - } - - public static EncryptedPrivateKeyInfo CreateEncryptedPrivateKeyInfo( - string algorithm, - char[] passPhrase, - byte[] salt, - int iterationCount, - PrivateKeyInfo keyInfo) - { - IBufferedCipher cipher = PbeUtilities.CreateEngine(algorithm) as IBufferedCipher; - if (cipher == null) - throw new Exception("Unknown encryption algorithm: " + algorithm); - - Asn1Encodable pbeParameters = PbeUtilities.GenerateAlgorithmParameters( - algorithm, salt, iterationCount); - ICipherParameters cipherParameters = PbeUtilities.GenerateCipherParameters( - algorithm, passPhrase, pbeParameters); - cipher.Init(true, cipherParameters); - byte[] encoding = cipher.DoFinal(keyInfo.GetEncoded()); - - DerObjectIdentifier oid = PbeUtilities.GetObjectIdentifier(algorithm); - AlgorithmIdentifier algID = new AlgorithmIdentifier(oid, pbeParameters); - return new EncryptedPrivateKeyInfo(algID, encoding); - } - } -} diff --git a/bc-sharp-crypto/src/pkcs/PKCS12StoreBuilder.cs b/bc-sharp-crypto/src/pkcs/PKCS12StoreBuilder.cs deleted file mode 100644 index c8fa0f6..0000000 --- a/bc-sharp-crypto/src/pkcs/PKCS12StoreBuilder.cs +++ /dev/null @@ -1,41 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Pkcs; - -namespace Org.BouncyCastle.Pkcs -{ - public class Pkcs12StoreBuilder - { - private DerObjectIdentifier keyAlgorithm = PkcsObjectIdentifiers.PbeWithShaAnd3KeyTripleDesCbc; - private DerObjectIdentifier certAlgorithm = PkcsObjectIdentifiers.PbewithShaAnd40BitRC2Cbc; - private bool useDerEncoding = false; - - public Pkcs12StoreBuilder() - { - } - - public Pkcs12Store Build() - { - return new Pkcs12Store(keyAlgorithm, certAlgorithm, useDerEncoding); - } - - public Pkcs12StoreBuilder SetCertAlgorithm(DerObjectIdentifier certAlgorithm) - { - this.certAlgorithm = certAlgorithm; - return this; - } - - public Pkcs12StoreBuilder SetKeyAlgorithm(DerObjectIdentifier keyAlgorithm) - { - this.keyAlgorithm = keyAlgorithm; - return this; - } - - public Pkcs12StoreBuilder SetUseDerEncoding(bool useDerEncoding) - { - this.useDerEncoding = useDerEncoding; - return this; - } - } -} diff --git a/bc-sharp-crypto/src/pkcs/Pkcs10CertificationRequest.cs b/bc-sharp-crypto/src/pkcs/Pkcs10CertificationRequest.cs deleted file mode 100644 index c2504e6..0000000 --- a/bc-sharp-crypto/src/pkcs/Pkcs10CertificationRequest.cs +++ /dev/null @@ -1,464 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.CryptoPro; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Oiw; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.TeleTrust; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; -using Org.BouncyCastle.X509; -using Org.BouncyCastle.Crypto.Operators; - -namespace Org.BouncyCastle.Pkcs -{ - /// - /// A class for verifying and creating Pkcs10 Certification requests. - /// - /// - /// CertificationRequest ::= Sequence { - /// certificationRequestInfo CertificationRequestInfo, - /// signatureAlgorithm AlgorithmIdentifier{{ SignatureAlgorithms }}, - /// signature BIT STRING - /// } - /// - /// CertificationRequestInfo ::= Sequence { - /// version Integer { v1(0) } (v1,...), - /// subject Name, - /// subjectPKInfo SubjectPublicKeyInfo{{ PKInfoAlgorithms }}, - /// attributes [0] Attributes{{ CRIAttributes }} - /// } - /// - /// Attributes { ATTRIBUTE:IOSet } ::= Set OF Attr{{ IOSet }} - /// - /// Attr { ATTRIBUTE:IOSet } ::= Sequence { - /// type ATTRIBUTE.&id({IOSet}), - /// values Set SIZE(1..MAX) OF ATTRIBUTE.&Type({IOSet}{\@type}) - /// } - /// - /// see - public class Pkcs10CertificationRequest - : CertificationRequest - { - protected static readonly IDictionary algorithms = Platform.CreateHashtable(); - protected static readonly IDictionary exParams = Platform.CreateHashtable(); - protected static readonly IDictionary keyAlgorithms = Platform.CreateHashtable(); - protected static readonly IDictionary oids = Platform.CreateHashtable(); - protected static readonly ISet noParams = new HashSet(); - - static Pkcs10CertificationRequest() - { - algorithms.Add("MD2WITHRSAENCRYPTION", new DerObjectIdentifier("1.2.840.113549.1.1.2")); - algorithms.Add("MD2WITHRSA", new DerObjectIdentifier("1.2.840.113549.1.1.2")); - algorithms.Add("MD5WITHRSAENCRYPTION", new DerObjectIdentifier("1.2.840.113549.1.1.4")); - algorithms.Add("MD5WITHRSA", new DerObjectIdentifier("1.2.840.113549.1.1.4")); - algorithms.Add("RSAWITHMD5", new DerObjectIdentifier("1.2.840.113549.1.1.4")); - algorithms.Add("SHA1WITHRSAENCRYPTION", new DerObjectIdentifier("1.2.840.113549.1.1.5")); - algorithms.Add("SHA1WITHRSA", new DerObjectIdentifier("1.2.840.113549.1.1.5")); - algorithms.Add("SHA224WITHRSAENCRYPTION", PkcsObjectIdentifiers.Sha224WithRsaEncryption); - algorithms.Add("SHA224WITHRSA", PkcsObjectIdentifiers.Sha224WithRsaEncryption); - algorithms.Add("SHA256WITHRSAENCRYPTION", PkcsObjectIdentifiers.Sha256WithRsaEncryption); - algorithms.Add("SHA256WITHRSA", PkcsObjectIdentifiers.Sha256WithRsaEncryption); - algorithms.Add("SHA384WITHRSAENCRYPTION", PkcsObjectIdentifiers.Sha384WithRsaEncryption); - algorithms.Add("SHA384WITHRSA", PkcsObjectIdentifiers.Sha384WithRsaEncryption); - algorithms.Add("SHA512WITHRSAENCRYPTION", PkcsObjectIdentifiers.Sha512WithRsaEncryption); - algorithms.Add("SHA512WITHRSA", PkcsObjectIdentifiers.Sha512WithRsaEncryption); - algorithms.Add("SHA1WITHRSAANDMGF1", PkcsObjectIdentifiers.IdRsassaPss); - algorithms.Add("SHA224WITHRSAANDMGF1", PkcsObjectIdentifiers.IdRsassaPss); - algorithms.Add("SHA256WITHRSAANDMGF1", PkcsObjectIdentifiers.IdRsassaPss); - algorithms.Add("SHA384WITHRSAANDMGF1", PkcsObjectIdentifiers.IdRsassaPss); - algorithms.Add("SHA512WITHRSAANDMGF1", PkcsObjectIdentifiers.IdRsassaPss); - algorithms.Add("RSAWITHSHA1", new DerObjectIdentifier("1.2.840.113549.1.1.5")); - algorithms.Add("RIPEMD128WITHRSAENCRYPTION", TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD128); - algorithms.Add("RIPEMD128WITHRSA", TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD128); - algorithms.Add("RIPEMD160WITHRSAENCRYPTION", TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD160); - algorithms.Add("RIPEMD160WITHRSA", TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD160); - algorithms.Add("RIPEMD256WITHRSAENCRYPTION", TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD256); - algorithms.Add("RIPEMD256WITHRSA", TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD256); - algorithms.Add("SHA1WITHDSA", new DerObjectIdentifier("1.2.840.10040.4.3")); - algorithms.Add("DSAWITHSHA1", new DerObjectIdentifier("1.2.840.10040.4.3")); - algorithms.Add("SHA224WITHDSA", NistObjectIdentifiers.DsaWithSha224); - algorithms.Add("SHA256WITHDSA", NistObjectIdentifiers.DsaWithSha256); - algorithms.Add("SHA384WITHDSA", NistObjectIdentifiers.DsaWithSha384); - algorithms.Add("SHA512WITHDSA", NistObjectIdentifiers.DsaWithSha512); - algorithms.Add("SHA1WITHECDSA", X9ObjectIdentifiers.ECDsaWithSha1); - algorithms.Add("SHA224WITHECDSA", X9ObjectIdentifiers.ECDsaWithSha224); - algorithms.Add("SHA256WITHECDSA", X9ObjectIdentifiers.ECDsaWithSha256); - algorithms.Add("SHA384WITHECDSA", X9ObjectIdentifiers.ECDsaWithSha384); - algorithms.Add("SHA512WITHECDSA", X9ObjectIdentifiers.ECDsaWithSha512); - algorithms.Add("ECDSAWITHSHA1", X9ObjectIdentifiers.ECDsaWithSha1); - algorithms.Add("GOST3411WITHGOST3410", CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x94); - algorithms.Add("GOST3410WITHGOST3411", CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x94); - algorithms.Add("GOST3411WITHECGOST3410", CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x2001); - algorithms.Add("GOST3411WITHECGOST3410-2001", CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x2001); - algorithms.Add("GOST3411WITHGOST3410-2001", CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x2001); - - // - // reverse mappings - // - oids.Add(new DerObjectIdentifier("1.2.840.113549.1.1.5"), "SHA1WITHRSA"); - oids.Add(PkcsObjectIdentifiers.Sha224WithRsaEncryption, "SHA224WITHRSA"); - oids.Add(PkcsObjectIdentifiers.Sha256WithRsaEncryption, "SHA256WITHRSA"); - oids.Add(PkcsObjectIdentifiers.Sha384WithRsaEncryption, "SHA384WITHRSA"); - oids.Add(PkcsObjectIdentifiers.Sha512WithRsaEncryption, "SHA512WITHRSA"); - oids.Add(CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x94, "GOST3411WITHGOST3410"); - oids.Add(CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x2001, "GOST3411WITHECGOST3410"); - - oids.Add(new DerObjectIdentifier("1.2.840.113549.1.1.4"), "MD5WITHRSA"); - oids.Add(new DerObjectIdentifier("1.2.840.113549.1.1.2"), "MD2WITHRSA"); - oids.Add(new DerObjectIdentifier("1.2.840.10040.4.3"), "SHA1WITHDSA"); - oids.Add(X9ObjectIdentifiers.ECDsaWithSha1, "SHA1WITHECDSA"); - oids.Add(X9ObjectIdentifiers.ECDsaWithSha224, "SHA224WITHECDSA"); - oids.Add(X9ObjectIdentifiers.ECDsaWithSha256, "SHA256WITHECDSA"); - oids.Add(X9ObjectIdentifiers.ECDsaWithSha384, "SHA384WITHECDSA"); - oids.Add(X9ObjectIdentifiers.ECDsaWithSha512, "SHA512WITHECDSA"); - oids.Add(OiwObjectIdentifiers.Sha1WithRsa, "SHA1WITHRSA"); - oids.Add(OiwObjectIdentifiers.DsaWithSha1, "SHA1WITHDSA"); - oids.Add(NistObjectIdentifiers.DsaWithSha224, "SHA224WITHDSA"); - oids.Add(NistObjectIdentifiers.DsaWithSha256, "SHA256WITHDSA"); - - // - // key types - // - keyAlgorithms.Add(PkcsObjectIdentifiers.RsaEncryption, "RSA"); - keyAlgorithms.Add(X9ObjectIdentifiers.IdDsa, "DSA"); - - // - // According to RFC 3279, the ASN.1 encoding SHALL (id-dsa-with-sha1) or MUST (ecdsa-with-SHA*) omit the parameters field. - // The parameters field SHALL be NULL for RSA based signature algorithms. - // - noParams.Add(X9ObjectIdentifiers.ECDsaWithSha1); - noParams.Add(X9ObjectIdentifiers.ECDsaWithSha224); - noParams.Add(X9ObjectIdentifiers.ECDsaWithSha256); - noParams.Add(X9ObjectIdentifiers.ECDsaWithSha384); - noParams.Add(X9ObjectIdentifiers.ECDsaWithSha512); - noParams.Add(X9ObjectIdentifiers.IdDsaWithSha1); - noParams.Add(NistObjectIdentifiers.DsaWithSha224); - noParams.Add(NistObjectIdentifiers.DsaWithSha256); - - // - // RFC 4491 - // - noParams.Add(CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x94); - noParams.Add(CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x2001); - - // - // explicit params - // - AlgorithmIdentifier sha1AlgId = new AlgorithmIdentifier(OiwObjectIdentifiers.IdSha1, DerNull.Instance); - exParams.Add("SHA1WITHRSAANDMGF1", CreatePssParams(sha1AlgId, 20)); - - AlgorithmIdentifier sha224AlgId = new AlgorithmIdentifier(NistObjectIdentifiers.IdSha224, DerNull.Instance); - exParams.Add("SHA224WITHRSAANDMGF1", CreatePssParams(sha224AlgId, 28)); - - AlgorithmIdentifier sha256AlgId = new AlgorithmIdentifier(NistObjectIdentifiers.IdSha256, DerNull.Instance); - exParams.Add("SHA256WITHRSAANDMGF1", CreatePssParams(sha256AlgId, 32)); - - AlgorithmIdentifier sha384AlgId = new AlgorithmIdentifier(NistObjectIdentifiers.IdSha384, DerNull.Instance); - exParams.Add("SHA384WITHRSAANDMGF1", CreatePssParams(sha384AlgId, 48)); - - AlgorithmIdentifier sha512AlgId = new AlgorithmIdentifier(NistObjectIdentifiers.IdSha512, DerNull.Instance); - exParams.Add("SHA512WITHRSAANDMGF1", CreatePssParams(sha512AlgId, 64)); - } - - private static RsassaPssParameters CreatePssParams( - AlgorithmIdentifier hashAlgId, - int saltSize) - { - return new RsassaPssParameters( - hashAlgId, - new AlgorithmIdentifier(PkcsObjectIdentifiers.IdMgf1, hashAlgId), - new DerInteger(saltSize), - new DerInteger(1)); - } - - protected Pkcs10CertificationRequest() - { - } - - public Pkcs10CertificationRequest( - byte[] encoded) - : base((Asn1Sequence) Asn1Object.FromByteArray(encoded)) - { - } - - public Pkcs10CertificationRequest( - Asn1Sequence seq) - : base(seq) - { - } - - public Pkcs10CertificationRequest( - Stream input) - : base((Asn1Sequence) Asn1Object.FromStream(input)) - { - } - - /// - /// Instantiate a Pkcs10CertificationRequest object with the necessary credentials. - /// - ///Name of Sig Alg. - /// X509Name of subject eg OU="My unit." O="My Organisatioin" C="au" - /// Public Key to be included in cert reqest. - /// ASN1Set of Attributes. - /// Matching Private key for nominated (above) public key to be used to sign the request. - [Obsolete("Use constructor with an ISignatureFactory")] - public Pkcs10CertificationRequest( - string signatureAlgorithm, - X509Name subject, - AsymmetricKeyParameter publicKey, - Asn1Set attributes, - AsymmetricKeyParameter signingKey) - { - if (signatureAlgorithm == null) - throw new ArgumentNullException("signatureAlgorithm"); - if (subject == null) - throw new ArgumentNullException("subject"); - if (publicKey == null) - throw new ArgumentNullException("publicKey"); - if (publicKey.IsPrivate) - throw new ArgumentException("expected public key", "publicKey"); - if (!signingKey.IsPrivate) - throw new ArgumentException("key for signing must be private", "signingKey"); - - init(new Asn1SignatureFactory(signatureAlgorithm, signingKey), subject, publicKey, attributes, signingKey); - } - - /// - /// Instantiate a Pkcs10CertificationRequest object with the necessary credentials. - /// - ///The factory for signature calculators to sign the PKCS#10 request with. - /// X509Name of subject eg OU="My unit." O="My Organisatioin" C="au" - /// Public Key to be included in cert reqest. - /// ASN1Set of Attributes. - /// Matching Private key for nominated (above) public key to be used to sign the request. - public Pkcs10CertificationRequest( - ISignatureFactory signatureCalculatorFactory, - X509Name subject, - AsymmetricKeyParameter publicKey, - Asn1Set attributes, - AsymmetricKeyParameter signingKey) - { - if (signatureCalculatorFactory == null) - throw new ArgumentNullException("signatureCalculator"); - if (subject == null) - throw new ArgumentNullException("subject"); - if (publicKey == null) - throw new ArgumentNullException("publicKey"); - if (publicKey.IsPrivate) - throw new ArgumentException("expected public key", "publicKey"); - if (!signingKey.IsPrivate) - throw new ArgumentException("key for signing must be private", "signingKey"); - - init(signatureCalculatorFactory, subject, publicKey, attributes, signingKey); - } - - private void init( - ISignatureFactory signatureCalculator, - X509Name subject, - AsymmetricKeyParameter publicKey, - Asn1Set attributes, - AsymmetricKeyParameter signingKey) - { - this.sigAlgId = (AlgorithmIdentifier)signatureCalculator.AlgorithmDetails; - - SubjectPublicKeyInfo pubInfo = SubjectPublicKeyInfoFactory.CreateSubjectPublicKeyInfo(publicKey); - - this.reqInfo = new CertificationRequestInfo(subject, pubInfo, attributes); - - IStreamCalculator streamCalculator = signatureCalculator.CreateCalculator(); - - byte[] reqInfoData = reqInfo.GetDerEncoded(); - - streamCalculator.Stream.Write(reqInfoData, 0, reqInfoData.Length); - - Platform.Dispose(streamCalculator.Stream); - - // Generate Signature. - sigBits = new DerBitString(((IBlockResult)streamCalculator.GetResult()).Collect()); - } - - // internal Pkcs10CertificationRequest( - // Asn1InputStream seqStream) - // { - // Asn1Sequence seq = (Asn1Sequence) seqStream.ReadObject(); - // try - // { - // this.reqInfo = CertificationRequestInfo.GetInstance(seq[0]); - // this.sigAlgId = AlgorithmIdentifier.GetInstance(seq[1]); - // this.sigBits = (DerBitString) seq[2]; - // } - // catch (Exception ex) - // { - // throw new ArgumentException("Create From Asn1Sequence: " + ex.Message); - // } - // } - - /// - /// Get the public key. - /// - /// The public key. - public AsymmetricKeyParameter GetPublicKey() - { - return PublicKeyFactory.CreateKey(reqInfo.SubjectPublicKeyInfo); - } - - /// - /// Verify Pkcs10 Cert Request is valid. - /// - /// true = valid. - public bool Verify() - { - return Verify(this.GetPublicKey()); - } - - public bool Verify( - AsymmetricKeyParameter publicKey) - { - return Verify(new Asn1VerifierFactoryProvider(publicKey)); - } - - public bool Verify( - IVerifierFactoryProvider verifierProvider) - { - return Verify(verifierProvider.CreateVerifierFactory(sigAlgId)); - } - - public bool Verify( - IVerifierFactory verifier) - { - try - { - byte[] b = reqInfo.GetDerEncoded(); - - IStreamCalculator streamCalculator = verifier.CreateCalculator(); - - streamCalculator.Stream.Write(b, 0, b.Length); - - Platform.Dispose(streamCalculator.Stream); - - return ((IVerifier)streamCalculator.GetResult()).IsVerified(sigBits.GetOctets()); - } - catch (Exception e) - { - throw new SignatureException("exception encoding TBS cert request", e); - } - } - - // /// - // /// Get the Der Encoded Pkcs10 Certification Request. - // /// - // /// A byte array. - // public byte[] GetEncoded() - // { - // return new CertificationRequest(reqInfo, sigAlgId, sigBits).GetDerEncoded(); - // } - - // TODO Figure out how to set parameters on an ISigner - private void SetSignatureParameters( - ISigner signature, - Asn1Encodable asn1Params) - { - if (asn1Params != null && !(asn1Params is Asn1Null)) - { -// AlgorithmParameters sigParams = AlgorithmParameters.GetInstance(signature.getAlgorithm()); -// -// try -// { -// sigParams.init(asn1Params.ToAsn1Object().GetDerEncoded()); -// } -// catch (IOException e) -// { -// throw new SignatureException("IOException decoding parameters: " + e.Message); -// } - - if (Platform.EndsWith(signature.AlgorithmName, "MGF1")) - { - throw Platform.CreateNotImplementedException("signature algorithm with MGF1"); - -// try -// { -// signature.setParameter(sigParams.getParameterSpec(PSSParameterSpec.class)); -// } -// catch (GeneralSecurityException e) -// { -// throw new SignatureException("Exception extracting parameters: " + e.getMessage()); -// } - } - } - } - - internal static string GetSignatureName( - AlgorithmIdentifier sigAlgId) - { - Asn1Encodable asn1Params = sigAlgId.Parameters; - - if (asn1Params != null && !(asn1Params is Asn1Null)) - { - if (sigAlgId.Algorithm.Equals(PkcsObjectIdentifiers.IdRsassaPss)) - { - RsassaPssParameters rsaParams = RsassaPssParameters.GetInstance(asn1Params); - return GetDigestAlgName(rsaParams.HashAlgorithm.Algorithm) + "withRSAandMGF1"; - } - } - - return sigAlgId.Algorithm.Id; - } - - private static string GetDigestAlgName( - DerObjectIdentifier digestAlgOID) - { - if (PkcsObjectIdentifiers.MD5.Equals(digestAlgOID)) - { - return "MD5"; - } - else if (OiwObjectIdentifiers.IdSha1.Equals(digestAlgOID)) - { - return "SHA1"; - } - else if (NistObjectIdentifiers.IdSha224.Equals(digestAlgOID)) - { - return "SHA224"; - } - else if (NistObjectIdentifiers.IdSha256.Equals(digestAlgOID)) - { - return "SHA256"; - } - else if (NistObjectIdentifiers.IdSha384.Equals(digestAlgOID)) - { - return "SHA384"; - } - else if (NistObjectIdentifiers.IdSha512.Equals(digestAlgOID)) - { - return "SHA512"; - } - else if (TeleTrusTObjectIdentifiers.RipeMD128.Equals(digestAlgOID)) - { - return "RIPEMD128"; - } - else if (TeleTrusTObjectIdentifiers.RipeMD160.Equals(digestAlgOID)) - { - return "RIPEMD160"; - } - else if (TeleTrusTObjectIdentifiers.RipeMD256.Equals(digestAlgOID)) - { - return "RIPEMD256"; - } - else if (CryptoProObjectIdentifiers.GostR3411.Equals(digestAlgOID)) - { - return "GOST3411"; - } - else - { - return digestAlgOID.Id; - } - } - } -} diff --git a/bc-sharp-crypto/src/pkcs/Pkcs10CertificationRequestDelaySigned.cs b/bc-sharp-crypto/src/pkcs/Pkcs10CertificationRequestDelaySigned.cs deleted file mode 100644 index ecbb4ab..0000000 --- a/bc-sharp-crypto/src/pkcs/Pkcs10CertificationRequestDelaySigned.cs +++ /dev/null @@ -1,150 +0,0 @@ -using System; -using System.Collections; -using System.Globalization; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.CryptoPro; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Oiw; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.TeleTrust; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; -using Org.BouncyCastle.X509; - -namespace Org.BouncyCastle.Pkcs -{ - /// - /// A class for creating and verifying Pkcs10 Certification requests (this is an extension on ). - /// The requests are made using delay signing. This is useful for situations where - /// the private key is in another environment and not directly accessible (e.g. HSM) - /// So the first step creates the request, then the signing is done outside this - /// object and the signature is then used to complete the request. - /// - /// - /// CertificationRequest ::= Sequence { - /// certificationRequestInfo CertificationRequestInfo, - /// signatureAlgorithm AlgorithmIdentifier{{ SignatureAlgorithms }}, - /// signature BIT STRING - /// } - /// - /// CertificationRequestInfo ::= Sequence { - /// version Integer { v1(0) } (v1,...), - /// subject Name, - /// subjectPKInfo SubjectPublicKeyInfo{{ PKInfoAlgorithms }}, - /// attributes [0] Attributes{{ CRIAttributes }} - /// } - /// - /// Attributes { ATTRIBUTE:IOSet } ::= Set OF Attr{{ IOSet }} - /// - /// Attr { ATTRIBUTE:IOSet } ::= Sequence { - /// type ATTRIBUTE.&id({IOSet}), - /// values Set SIZE(1..MAX) OF ATTRIBUTE.&Type({IOSet}{\@type}) - /// } - /// - /// see - public class Pkcs10CertificationRequestDelaySigned : Pkcs10CertificationRequest - { - protected Pkcs10CertificationRequestDelaySigned() - : base() - { - } - public Pkcs10CertificationRequestDelaySigned( - byte[] encoded) - : base(encoded) - { - } - public Pkcs10CertificationRequestDelaySigned( - Asn1Sequence seq) - : base(seq) - { - } - public Pkcs10CertificationRequestDelaySigned( - Stream input) - : base(input) - { - } - public Pkcs10CertificationRequestDelaySigned( - string signatureAlgorithm, - X509Name subject, - AsymmetricKeyParameter publicKey, - Asn1Set attributes, - AsymmetricKeyParameter signingKey) - : base(signatureAlgorithm, subject, publicKey, attributes, signingKey) - { - } - /// - /// Instantiate a Pkcs10CertificationRequest object with the necessary credentials. - /// - /// Name of Sig Alg. - /// X509Name of subject eg OU="My unit." O="My Organisatioin" C="au" - /// Public Key to be included in cert reqest. - /// ASN1Set of Attributes. - /// - /// After the object is constructed use the and finally the - /// SignRequest methods to finalize the request. - /// - public Pkcs10CertificationRequestDelaySigned( - string signatureAlgorithm, - X509Name subject, - AsymmetricKeyParameter publicKey, - Asn1Set attributes) - { - if (signatureAlgorithm == null) - throw new ArgumentNullException("signatureAlgorithm"); - if (subject == null) - throw new ArgumentNullException("subject"); - if (publicKey == null) - throw new ArgumentNullException("publicKey"); - if (publicKey.IsPrivate) - throw new ArgumentException("expected public key", "publicKey"); -// DerObjectIdentifier sigOid = SignerUtilities.GetObjectIdentifier(signatureAlgorithm); - string algorithmName = Platform.ToUpperInvariant(signatureAlgorithm); - DerObjectIdentifier sigOid = (DerObjectIdentifier) algorithms[algorithmName]; - if (sigOid == null) - { - try - { - sigOid = new DerObjectIdentifier(algorithmName); - } - catch (Exception e) - { - throw new ArgumentException("Unknown signature type requested", e); - } - } - if (noParams.Contains(sigOid)) - { - this.sigAlgId = new AlgorithmIdentifier(sigOid); - } - else if (exParams.Contains(algorithmName)) - { - this.sigAlgId = new AlgorithmIdentifier(sigOid, (Asn1Encodable) exParams[algorithmName]); - } - else - { - this.sigAlgId = new AlgorithmIdentifier(sigOid, DerNull.Instance); - } - SubjectPublicKeyInfo pubInfo = SubjectPublicKeyInfoFactory.CreateSubjectPublicKeyInfo(publicKey); - this.reqInfo = new CertificationRequestInfo(subject, pubInfo, attributes); - } - public byte[] GetDataToSign() - { - return reqInfo.GetDerEncoded(); - } - public void SignRequest(byte[] signedData) - { - //build the signature from the signed data - sigBits = new DerBitString(signedData); - } - public void SignRequest(DerBitString signedData) - { - //build the signature from the signed data - sigBits = signedData; - } - } -} diff --git a/bc-sharp-crypto/src/pkcs/Pkcs12Entry.cs b/bc-sharp-crypto/src/pkcs/Pkcs12Entry.cs deleted file mode 100644 index 5dcc94e..0000000 --- a/bc-sharp-crypto/src/pkcs/Pkcs12Entry.cs +++ /dev/null @@ -1,64 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Pkcs -{ - public abstract class Pkcs12Entry - { - private readonly IDictionary attributes; - - protected internal Pkcs12Entry( - IDictionary attributes) - { - this.attributes = attributes; - - foreach (DictionaryEntry entry in attributes) - { - if (!(entry.Key is string)) - throw new ArgumentException("Attribute keys must be of type: " + typeof(string).FullName, "attributes"); - if (!(entry.Value is Asn1Encodable)) - throw new ArgumentException("Attribute values must be of type: " + typeof(Asn1Encodable).FullName, "attributes"); - } - } - - [Obsolete("Use 'object[index]' syntax instead")] - public Asn1Encodable GetBagAttribute( - DerObjectIdentifier oid) - { - return (Asn1Encodable)this.attributes[oid.Id]; - } - - [Obsolete("Use 'object[index]' syntax instead")] - public Asn1Encodable GetBagAttribute( - string oid) - { - return (Asn1Encodable)this.attributes[oid]; - } - - [Obsolete("Use 'BagAttributeKeys' property")] - public IEnumerator GetBagAttributeKeys() - { - return this.attributes.Keys.GetEnumerator(); - } - - public Asn1Encodable this[ - DerObjectIdentifier oid] - { - get { return (Asn1Encodable) this.attributes[oid.Id]; } - } - - public Asn1Encodable this[ - string oid] - { - get { return (Asn1Encodable) this.attributes[oid]; } - } - - public IEnumerable BagAttributeKeys - { - get { return new EnumerableProxy(this.attributes.Keys); } - } - } -} diff --git a/bc-sharp-crypto/src/pkcs/Pkcs12Store.cs b/bc-sharp-crypto/src/pkcs/Pkcs12Store.cs deleted file mode 100644 index e657887..0000000 --- a/bc-sharp-crypto/src/pkcs/Pkcs12Store.cs +++ /dev/null @@ -1,1100 +0,0 @@ -using System; -using System.Collections; -using System.IO; -using System.Text; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Oiw; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Asn1.Utilities; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; -using Org.BouncyCastle.Utilities.Encoders; -using Org.BouncyCastle.X509; - -namespace Org.BouncyCastle.Pkcs -{ - public class Pkcs12Store - { - private readonly IgnoresCaseHashtable keys = new IgnoresCaseHashtable(); - private readonly IDictionary localIds = Platform.CreateHashtable(); - private readonly IgnoresCaseHashtable certs = new IgnoresCaseHashtable(); - private readonly IDictionary chainCerts = Platform.CreateHashtable(); - private readonly IDictionary keyCerts = Platform.CreateHashtable(); - private readonly DerObjectIdentifier keyAlgorithm; - private readonly DerObjectIdentifier certAlgorithm; - private readonly bool useDerEncoding; - - private AsymmetricKeyEntry unmarkedKeyEntry = null; - - private const int MinIterations = 1024; - private const int SaltSize = 20; - - private static SubjectKeyIdentifier CreateSubjectKeyID( - AsymmetricKeyParameter pubKey) - { - return new SubjectKeyIdentifier( - SubjectPublicKeyInfoFactory.CreateSubjectPublicKeyInfo(pubKey)); - } - - internal class CertId - { - private readonly byte[] id; - - internal CertId( - AsymmetricKeyParameter pubKey) - { - this.id = CreateSubjectKeyID(pubKey).GetKeyIdentifier(); - } - - internal CertId( - byte[] id) - { - this.id = id; - } - - internal byte[] Id - { - get { return id; } - } - - public override int GetHashCode() - { - return Arrays.GetHashCode(id); - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - CertId other = obj as CertId; - - if (other == null) - return false; - - return Arrays.AreEqual(id, other.id); - } - } - - internal Pkcs12Store( - DerObjectIdentifier keyAlgorithm, - DerObjectIdentifier certAlgorithm, - bool useDerEncoding) - { - this.keyAlgorithm = keyAlgorithm; - this.certAlgorithm = certAlgorithm; - this.useDerEncoding = useDerEncoding; - } - - // TODO Consider making obsolete -// [Obsolete("Use 'Pkcs12StoreBuilder' instead")] - public Pkcs12Store() - : this(PkcsObjectIdentifiers.PbeWithShaAnd3KeyTripleDesCbc, - PkcsObjectIdentifiers.PbewithShaAnd40BitRC2Cbc, false) - { - } - - // TODO Consider making obsolete -// [Obsolete("Use 'Pkcs12StoreBuilder' and 'Load' method instead")] - public Pkcs12Store( - Stream input, - char[] password) - : this() - { - Load(input, password); - } - - protected virtual void LoadKeyBag(PrivateKeyInfo privKeyInfo, Asn1Set bagAttributes) - { - AsymmetricKeyParameter privKey = PrivateKeyFactory.CreateKey(privKeyInfo); - - IDictionary attributes = Platform.CreateHashtable(); - AsymmetricKeyEntry keyEntry = new AsymmetricKeyEntry(privKey, attributes); - - string alias = null; - Asn1OctetString localId = null; - - if (bagAttributes != null) - { - foreach (Asn1Sequence sq in bagAttributes) - { - DerObjectIdentifier aOid = DerObjectIdentifier.GetInstance(sq[0]); - Asn1Set attrSet = Asn1Set.GetInstance(sq[1]); - Asn1Encodable attr = null; - - if (attrSet.Count > 0) - { - // TODO We should be adding all attributes in the set - attr = attrSet[0]; - - // TODO We might want to "merge" attribute sets with - // the same OID - currently, differing values give an error - if (attributes.Contains(aOid.Id)) - { - // OK, but the value has to be the same - if (!attributes[aOid.Id].Equals(attr)) - throw new IOException("attempt to add existing attribute with different value"); - } - else - { - attributes.Add(aOid.Id, attr); - } - - if (aOid.Equals(PkcsObjectIdentifiers.Pkcs9AtFriendlyName)) - { - alias = ((DerBmpString)attr).GetString(); - // TODO Do these in a separate loop, just collect aliases here - keys[alias] = keyEntry; - } - else if (aOid.Equals(PkcsObjectIdentifiers.Pkcs9AtLocalKeyID)) - { - localId = (Asn1OctetString)attr; - } - } - } - } - - if (localId != null) - { - string name = Hex.ToHexString(localId.GetOctets()); - - if (alias == null) - { - keys[name] = keyEntry; - } - else - { - // TODO There may have been more than one alias - localIds[alias] = name; - } - } - else - { - unmarkedKeyEntry = keyEntry; - } - } - - protected virtual void LoadPkcs8ShroudedKeyBag(EncryptedPrivateKeyInfo encPrivKeyInfo, Asn1Set bagAttributes, - char[] password, bool wrongPkcs12Zero) - { - if (password != null) - { - PrivateKeyInfo privInfo = PrivateKeyInfoFactory.CreatePrivateKeyInfo( - password, wrongPkcs12Zero, encPrivKeyInfo); - - LoadKeyBag(privInfo, bagAttributes); - } - } - - public void Load( - Stream input, - char[] password) - { - if (input == null) - throw new ArgumentNullException("input"); - - Asn1Sequence obj = (Asn1Sequence) Asn1Object.FromStream(input); - Pfx bag = new Pfx(obj); - ContentInfo info = bag.AuthSafe; - bool wrongPkcs12Zero = false; - - if (password != null && bag.MacData != null) // check the mac code - { - MacData mData = bag.MacData; - DigestInfo dInfo = mData.Mac; - AlgorithmIdentifier algId = dInfo.AlgorithmID; - byte[] salt = mData.GetSalt(); - int itCount = mData.IterationCount.IntValue; - - byte[] data = ((Asn1OctetString) info.Content).GetOctets(); - - byte[] mac = CalculatePbeMac(algId.Algorithm, salt, itCount, password, false, data); - byte[] dig = dInfo.GetDigest(); - - if (!Arrays.ConstantTimeAreEqual(mac, dig)) - { - if (password.Length > 0) - throw new IOException("PKCS12 key store MAC invalid - wrong password or corrupted file."); - - // Try with incorrect zero length password - mac = CalculatePbeMac(algId.Algorithm, salt, itCount, password, true, data); - - if (!Arrays.ConstantTimeAreEqual(mac, dig)) - throw new IOException("PKCS12 key store MAC invalid - wrong password or corrupted file."); - - wrongPkcs12Zero = true; - } - } - - keys.Clear(); - localIds.Clear(); - unmarkedKeyEntry = null; - - IList certBags = Platform.CreateArrayList(); - - if (info.ContentType.Equals(PkcsObjectIdentifiers.Data)) - { - byte[] octs = ((Asn1OctetString)info.Content).GetOctets(); - AuthenticatedSafe authSafe = new AuthenticatedSafe( - (Asn1Sequence) Asn1OctetString.FromByteArray(octs)); - ContentInfo[] cis = authSafe.GetContentInfo(); - - foreach (ContentInfo ci in cis) - { - DerObjectIdentifier oid = ci.ContentType; - - byte[] octets = null; - if (oid.Equals(PkcsObjectIdentifiers.Data)) - { - octets = ((Asn1OctetString)ci.Content).GetOctets(); - } - else if (oid.Equals(PkcsObjectIdentifiers.EncryptedData)) - { - if (password != null) - { - EncryptedData d = EncryptedData.GetInstance(ci.Content); - octets = CryptPbeData(false, d.EncryptionAlgorithm, - password, wrongPkcs12Zero, d.Content.GetOctets()); - } - } - else - { - // TODO Other data types - } - - if (octets != null) - { - Asn1Sequence seq = (Asn1Sequence)Asn1Object.FromByteArray(octets); - - foreach (Asn1Sequence subSeq in seq) - { - SafeBag b = new SafeBag(subSeq); - - if (b.BagID.Equals(PkcsObjectIdentifiers.CertBag)) - { - certBags.Add(b); - } - else if (b.BagID.Equals(PkcsObjectIdentifiers.Pkcs8ShroudedKeyBag)) - { - LoadPkcs8ShroudedKeyBag(EncryptedPrivateKeyInfo.GetInstance(b.BagValue), - b.BagAttributes, password, wrongPkcs12Zero); - } - else if (b.BagID.Equals(PkcsObjectIdentifiers.KeyBag)) - { - LoadKeyBag(PrivateKeyInfo.GetInstance(b.BagValue), b.BagAttributes); - } - else - { - // TODO Other bag types - } - } - } - } - } - - certs.Clear(); - chainCerts.Clear(); - keyCerts.Clear(); - - foreach (SafeBag b in certBags) - { - CertBag certBag = new CertBag((Asn1Sequence)b.BagValue); - byte[] octets = ((Asn1OctetString)certBag.CertValue).GetOctets(); - X509Certificate cert = new X509CertificateParser().ReadCertificate(octets); - - // - // set the attributes - // - IDictionary attributes = Platform.CreateHashtable(); - Asn1OctetString localId = null; - string alias = null; - - if (b.BagAttributes != null) - { - foreach (Asn1Sequence sq in b.BagAttributes) - { - DerObjectIdentifier aOid = DerObjectIdentifier.GetInstance(sq[0]); - Asn1Set attrSet = Asn1Set.GetInstance(sq[1]); - - if (attrSet.Count > 0) - { - // TODO We should be adding all attributes in the set - Asn1Encodable attr = attrSet[0]; - - // TODO We might want to "merge" attribute sets with - // the same OID - currently, differing values give an error - if (attributes.Contains(aOid.Id)) - { - // OK, but the value has to be the same - if (!attributes[aOid.Id].Equals(attr)) - { - throw new IOException("attempt to add existing attribute with different value"); - } - } - else - { - attributes.Add(aOid.Id, attr); - } - - if (aOid.Equals(PkcsObjectIdentifiers.Pkcs9AtFriendlyName)) - { - alias = ((DerBmpString)attr).GetString(); - } - else if (aOid.Equals(PkcsObjectIdentifiers.Pkcs9AtLocalKeyID)) - { - localId = (Asn1OctetString)attr; - } - } - } - } - - CertId certId = new CertId(cert.GetPublicKey()); - X509CertificateEntry certEntry = new X509CertificateEntry(cert, attributes); - - chainCerts[certId] = certEntry; - - if (unmarkedKeyEntry != null) - { - if (keyCerts.Count == 0) - { - string name = Hex.ToHexString(certId.Id); - - keyCerts[name] = certEntry; - keys[name] = unmarkedKeyEntry; - } - } - else - { - if (localId != null) - { - string name = Hex.ToHexString(localId.GetOctets()); - - keyCerts[name] = certEntry; - } - - if (alias != null) - { - // TODO There may have been more than one alias - certs[alias] = certEntry; - } - } - } - } - - public AsymmetricKeyEntry GetKey( - string alias) - { - if (alias == null) - throw new ArgumentNullException("alias"); - - return (AsymmetricKeyEntry)keys[alias]; - } - - public bool IsCertificateEntry( - string alias) - { - if (alias == null) - throw new ArgumentNullException("alias"); - - return (certs[alias] != null && keys[alias] == null); - } - - public bool IsKeyEntry( - string alias) - { - if (alias == null) - throw new ArgumentNullException("alias"); - - return (keys[alias] != null); - } - - private IDictionary GetAliasesTable() - { - IDictionary tab = Platform.CreateHashtable(); - - foreach (string key in certs.Keys) - { - tab[key] = "cert"; - } - - foreach (string a in keys.Keys) - { - if (tab[a] == null) - { - tab[a] = "key"; - } - } - - return tab; - } - - public IEnumerable Aliases - { - get { return new EnumerableProxy(GetAliasesTable().Keys); } - } - - public bool ContainsAlias( - string alias) - { - return certs[alias] != null || keys[alias] != null; - } - - /** - * simply return the cert entry for the private key - */ - public X509CertificateEntry GetCertificate( - string alias) - { - if (alias == null) - throw new ArgumentNullException("alias"); - - X509CertificateEntry c = (X509CertificateEntry) certs[alias]; - - // - // look up the key table - and try the local key id - // - if (c == null) - { - string id = (string)localIds[alias]; - if (id != null) - { - c = (X509CertificateEntry)keyCerts[id]; - } - else - { - c = (X509CertificateEntry)keyCerts[alias]; - } - } - - return c; - } - - public string GetCertificateAlias( - X509Certificate cert) - { - if (cert == null) - throw new ArgumentNullException("cert"); - - foreach (DictionaryEntry entry in certs) - { - X509CertificateEntry entryValue = (X509CertificateEntry) entry.Value; - if (entryValue.Certificate.Equals(cert)) - { - return (string) entry.Key; - } - } - - foreach (DictionaryEntry entry in keyCerts) - { - X509CertificateEntry entryValue = (X509CertificateEntry) entry.Value; - if (entryValue.Certificate.Equals(cert)) - { - return (string) entry.Key; - } - } - - return null; - } - - public X509CertificateEntry[] GetCertificateChain( - string alias) - { - if (alias == null) - throw new ArgumentNullException("alias"); - - if (!IsKeyEntry(alias)) - { - return null; - } - - X509CertificateEntry c = GetCertificate(alias); - - if (c != null) - { - IList cs = Platform.CreateArrayList(); - - while (c != null) - { - X509Certificate x509c = c.Certificate; - X509CertificateEntry nextC = null; - - Asn1OctetString ext = x509c.GetExtensionValue(X509Extensions.AuthorityKeyIdentifier); - if (ext != null) - { - AuthorityKeyIdentifier id = AuthorityKeyIdentifier.GetInstance( - Asn1Object.FromByteArray(ext.GetOctets())); - - if (id.GetKeyIdentifier() != null) - { - nextC = (X509CertificateEntry) chainCerts[new CertId(id.GetKeyIdentifier())]; - } - } - - if (nextC == null) - { - // - // no authority key id, try the Issuer DN - // - X509Name i = x509c.IssuerDN; - X509Name s = x509c.SubjectDN; - - if (!i.Equivalent(s)) - { - foreach (CertId certId in chainCerts.Keys) - { - X509CertificateEntry x509CertEntry = (X509CertificateEntry) chainCerts[certId]; - - X509Certificate crt = x509CertEntry.Certificate; - - X509Name sub = crt.SubjectDN; - if (sub.Equivalent(i)) - { - try - { - x509c.Verify(crt.GetPublicKey()); - - nextC = x509CertEntry; - break; - } - catch (InvalidKeyException) - { - // TODO What if it doesn't verify? - } - } - } - } - } - - cs.Add(c); - if (nextC != c) // self signed - end of the chain - { - c = nextC; - } - else - { - c = null; - } - } - - X509CertificateEntry[] result = new X509CertificateEntry[cs.Count]; - for (int i = 0; i < cs.Count; ++i) - { - result[i] = (X509CertificateEntry)cs[i]; - } - return result; - } - - return null; - } - - public void SetCertificateEntry( - string alias, - X509CertificateEntry certEntry) - { - if (alias == null) - throw new ArgumentNullException("alias"); - if (certEntry == null) - throw new ArgumentNullException("certEntry"); - if (keys[alias] != null) - throw new ArgumentException("There is a key entry with the name " + alias + "."); - - certs[alias] = certEntry; - chainCerts[new CertId(certEntry.Certificate.GetPublicKey())] = certEntry; - } - - public void SetKeyEntry( - string alias, - AsymmetricKeyEntry keyEntry, - X509CertificateEntry[] chain) - { - if (alias == null) - throw new ArgumentNullException("alias"); - if (keyEntry == null) - throw new ArgumentNullException("keyEntry"); - if (keyEntry.Key.IsPrivate && (chain == null)) - throw new ArgumentException("No certificate chain for private key"); - - if (keys[alias] != null) - { - DeleteEntry(alias); - } - - keys[alias] = keyEntry; - certs[alias] = chain[0]; - - for (int i = 0; i != chain.Length; i++) - { - chainCerts[new CertId(chain[i].Certificate.GetPublicKey())] = chain[i]; - } - } - - public void DeleteEntry( - string alias) - { - if (alias == null) - throw new ArgumentNullException("alias"); - - AsymmetricKeyEntry k = (AsymmetricKeyEntry)keys[alias]; - if (k != null) - { - keys.Remove(alias); - } - - X509CertificateEntry c = (X509CertificateEntry)certs[alias]; - - if (c != null) - { - certs.Remove(alias); - chainCerts.Remove(new CertId(c.Certificate.GetPublicKey())); - } - - if (k != null) - { - string id = (string)localIds[alias]; - if (id != null) - { - localIds.Remove(alias); - c = (X509CertificateEntry)keyCerts[id]; - } - if (c != null) - { - keyCerts.Remove(id); - chainCerts.Remove(new CertId(c.Certificate.GetPublicKey())); - } - } - - if (c == null && k == null) - { - throw new ArgumentException("no such entry as " + alias); - } - } - - public bool IsEntryOfType( - string alias, - Type entryType) - { - if (entryType == typeof(X509CertificateEntry)) - return IsCertificateEntry(alias); - - if (entryType == typeof(AsymmetricKeyEntry)) - return IsKeyEntry(alias) && GetCertificate(alias) != null; - - return false; - } - - [Obsolete("Use 'Count' property instead")] - public int Size() - { - return Count; - } - - public int Count - { - // TODO Seems a little inefficient - get { return GetAliasesTable().Count; } - } - - public void Save( - Stream stream, - char[] password, - SecureRandom random) - { - if (stream == null) - throw new ArgumentNullException("stream"); - if (random == null) - throw new ArgumentNullException("random"); - - // - // handle the keys - // - Asn1EncodableVector keyBags = new Asn1EncodableVector(); - foreach (string name in keys.Keys) - { - byte[] kSalt = new byte[SaltSize]; - random.NextBytes(kSalt); - - AsymmetricKeyEntry privKey = (AsymmetricKeyEntry)keys[name]; - - DerObjectIdentifier bagOid; - Asn1Encodable bagData; - - if (password == null) - { - bagOid = PkcsObjectIdentifiers.KeyBag; - bagData = PrivateKeyInfoFactory.CreatePrivateKeyInfo(privKey.Key); - } - else - { - bagOid = PkcsObjectIdentifiers.Pkcs8ShroudedKeyBag; - bagData = EncryptedPrivateKeyInfoFactory.CreateEncryptedPrivateKeyInfo( - keyAlgorithm, password, kSalt, MinIterations, privKey.Key); - } - - Asn1EncodableVector kName = new Asn1EncodableVector(); - - foreach (string oid in privKey.BagAttributeKeys) - { - Asn1Encodable entry = privKey[oid]; - - // NB: Ignore any existing FriendlyName - if (oid.Equals(PkcsObjectIdentifiers.Pkcs9AtFriendlyName.Id)) - continue; - - kName.Add( - new DerSequence( - new DerObjectIdentifier(oid), - new DerSet(entry))); - } - - // - // make sure we are using the local alias on store - // - // NB: We always set the FriendlyName based on 'name' - //if (privKey[PkcsObjectIdentifiers.Pkcs9AtFriendlyName] == null) - { - kName.Add( - new DerSequence( - PkcsObjectIdentifiers.Pkcs9AtFriendlyName, - new DerSet(new DerBmpString(name)))); - } - - // - // make sure we have a local key-id - // - if (privKey[PkcsObjectIdentifiers.Pkcs9AtLocalKeyID] == null) - { - X509CertificateEntry ct = GetCertificate(name); - AsymmetricKeyParameter pubKey = ct.Certificate.GetPublicKey(); - SubjectKeyIdentifier subjectKeyID = CreateSubjectKeyID(pubKey); - - kName.Add( - new DerSequence( - PkcsObjectIdentifiers.Pkcs9AtLocalKeyID, - new DerSet(subjectKeyID))); - } - - keyBags.Add(new SafeBag(bagOid, bagData.ToAsn1Object(), new DerSet(kName))); - } - - byte[] keyBagsEncoding = new DerSequence(keyBags).GetDerEncoded(); - ContentInfo keysInfo = new ContentInfo(PkcsObjectIdentifiers.Data, new BerOctetString(keyBagsEncoding)); - - // - // certificate processing - // - byte[] cSalt = new byte[SaltSize]; - - random.NextBytes(cSalt); - - Asn1EncodableVector certBags = new Asn1EncodableVector(); - Pkcs12PbeParams cParams = new Pkcs12PbeParams(cSalt, MinIterations); - AlgorithmIdentifier cAlgId = new AlgorithmIdentifier(certAlgorithm, cParams.ToAsn1Object()); - ISet doneCerts = new HashSet(); - - foreach (string name in keys.Keys) - { - X509CertificateEntry certEntry = GetCertificate(name); - CertBag cBag = new CertBag( - PkcsObjectIdentifiers.X509Certificate, - new DerOctetString(certEntry.Certificate.GetEncoded())); - - Asn1EncodableVector fName = new Asn1EncodableVector(); - - foreach (string oid in certEntry.BagAttributeKeys) - { - Asn1Encodable entry = certEntry[oid]; - - // NB: Ignore any existing FriendlyName - if (oid.Equals(PkcsObjectIdentifiers.Pkcs9AtFriendlyName.Id)) - continue; - - fName.Add( - new DerSequence( - new DerObjectIdentifier(oid), - new DerSet(entry))); - } - - // - // make sure we are using the local alias on store - // - // NB: We always set the FriendlyName based on 'name' - //if (certEntry[PkcsObjectIdentifiers.Pkcs9AtFriendlyName] == null) - { - fName.Add( - new DerSequence( - PkcsObjectIdentifiers.Pkcs9AtFriendlyName, - new DerSet(new DerBmpString(name)))); - } - - // - // make sure we have a local key-id - // - if (certEntry[PkcsObjectIdentifiers.Pkcs9AtLocalKeyID] == null) - { - AsymmetricKeyParameter pubKey = certEntry.Certificate.GetPublicKey(); - SubjectKeyIdentifier subjectKeyID = CreateSubjectKeyID(pubKey); - - fName.Add( - new DerSequence( - PkcsObjectIdentifiers.Pkcs9AtLocalKeyID, - new DerSet(subjectKeyID))); - } - - certBags.Add(new SafeBag(PkcsObjectIdentifiers.CertBag, cBag.ToAsn1Object(), new DerSet(fName))); - - doneCerts.Add(certEntry.Certificate); - } - - foreach (string certId in certs.Keys) - { - X509CertificateEntry cert = (X509CertificateEntry)certs[certId]; - - if (keys[certId] != null) - continue; - - CertBag cBag = new CertBag( - PkcsObjectIdentifiers.X509Certificate, - new DerOctetString(cert.Certificate.GetEncoded())); - - Asn1EncodableVector fName = new Asn1EncodableVector(); - - foreach (string oid in cert.BagAttributeKeys) - { - // a certificate not immediately linked to a key doesn't require - // a localKeyID and will confuse some PKCS12 implementations. - // - // If we find one, we'll prune it out. - if (oid.Equals(PkcsObjectIdentifiers.Pkcs9AtLocalKeyID.Id)) - continue; - - Asn1Encodable entry = cert[oid]; - - // NB: Ignore any existing FriendlyName - if (oid.Equals(PkcsObjectIdentifiers.Pkcs9AtFriendlyName.Id)) - continue; - - fName.Add( - new DerSequence( - new DerObjectIdentifier(oid), - new DerSet(entry))); - } - - // - // make sure we are using the local alias on store - // - // NB: We always set the FriendlyName based on 'certId' - //if (cert[PkcsObjectIdentifiers.Pkcs9AtFriendlyName] == null) - { - fName.Add( - new DerSequence( - PkcsObjectIdentifiers.Pkcs9AtFriendlyName, - new DerSet(new DerBmpString(certId)))); - } - - certBags.Add(new SafeBag(PkcsObjectIdentifiers.CertBag, cBag.ToAsn1Object(), new DerSet(fName))); - - doneCerts.Add(cert.Certificate); - } - - foreach (CertId certId in chainCerts.Keys) - { - X509CertificateEntry cert = (X509CertificateEntry)chainCerts[certId]; - - if (doneCerts.Contains(cert.Certificate)) - continue; - - CertBag cBag = new CertBag( - PkcsObjectIdentifiers.X509Certificate, - new DerOctetString(cert.Certificate.GetEncoded())); - - Asn1EncodableVector fName = new Asn1EncodableVector(); - - foreach (string oid in cert.BagAttributeKeys) - { - // a certificate not immediately linked to a key doesn't require - // a localKeyID and will confuse some PKCS12 implementations. - // - // If we find one, we'll prune it out. - if (oid.Equals(PkcsObjectIdentifiers.Pkcs9AtLocalKeyID.Id)) - continue; - - fName.Add( - new DerSequence( - new DerObjectIdentifier(oid), - new DerSet(cert[oid]))); - } - - certBags.Add(new SafeBag(PkcsObjectIdentifiers.CertBag, cBag.ToAsn1Object(), new DerSet(fName))); - } - - byte[] certBagsEncoding = new DerSequence(certBags).GetDerEncoded(); - - ContentInfo certsInfo; - if (password == null) - { - certsInfo = new ContentInfo(PkcsObjectIdentifiers.Data, new BerOctetString(certBagsEncoding)); - } - else - { - byte[] certBytes = CryptPbeData(true, cAlgId, password, false, certBagsEncoding); - EncryptedData cInfo = new EncryptedData(PkcsObjectIdentifiers.Data, cAlgId, new BerOctetString(certBytes)); - certsInfo = new ContentInfo(PkcsObjectIdentifiers.EncryptedData, cInfo.ToAsn1Object()); - } - - ContentInfo[] info = new ContentInfo[]{ keysInfo, certsInfo }; - - byte[] data = new AuthenticatedSafe(info).GetEncoded( - useDerEncoding ? Asn1Encodable.Der : Asn1Encodable.Ber); - - ContentInfo mainInfo = new ContentInfo(PkcsObjectIdentifiers.Data, new BerOctetString(data)); - - // - // create the mac - // - MacData macData = null; - if (password != null) - { - byte[] mSalt = new byte[20]; - random.NextBytes(mSalt); - - byte[] mac = CalculatePbeMac(OiwObjectIdentifiers.IdSha1, - mSalt, MinIterations, password, false, data); - - AlgorithmIdentifier algId = new AlgorithmIdentifier( - OiwObjectIdentifiers.IdSha1, DerNull.Instance); - DigestInfo dInfo = new DigestInfo(algId, mac); - - macData = new MacData(dInfo, mSalt, MinIterations); - } - - // - // output the Pfx - // - Pfx pfx = new Pfx(mainInfo, macData); - - DerOutputStream derOut; - if (useDerEncoding) - { - derOut = new DerOutputStream(stream); - } - else - { - derOut = new BerOutputStream(stream); - } - - derOut.WriteObject(pfx); - } - - internal static byte[] CalculatePbeMac( - DerObjectIdentifier oid, - byte[] salt, - int itCount, - char[] password, - bool wrongPkcs12Zero, - byte[] data) - { - Asn1Encodable asn1Params = PbeUtilities.GenerateAlgorithmParameters( - oid, salt, itCount); - ICipherParameters cipherParams = PbeUtilities.GenerateCipherParameters( - oid, password, wrongPkcs12Zero, asn1Params); - - IMac mac = (IMac) PbeUtilities.CreateEngine(oid); - mac.Init(cipherParams); - return MacUtilities.DoFinal(mac, data); - } - - private static byte[] CryptPbeData( - bool forEncryption, - AlgorithmIdentifier algId, - char[] password, - bool wrongPkcs12Zero, - byte[] data) - { - IBufferedCipher cipher = PbeUtilities.CreateEngine(algId.Algorithm) as IBufferedCipher; - - if (cipher == null) - throw new Exception("Unknown encryption algorithm: " + algId.Algorithm); - - Pkcs12PbeParams pbeParameters = Pkcs12PbeParams.GetInstance(algId.Parameters); - ICipherParameters cipherParams = PbeUtilities.GenerateCipherParameters( - algId.Algorithm, password, wrongPkcs12Zero, pbeParameters); - cipher.Init(forEncryption, cipherParams); - return cipher.DoFinal(data); - } - - private class IgnoresCaseHashtable - : IEnumerable - { - private readonly IDictionary orig = Platform.CreateHashtable(); - private readonly IDictionary keys = Platform.CreateHashtable(); - - public void Clear() - { - orig.Clear(); - keys.Clear(); - } - - public IEnumerator GetEnumerator() - { - return orig.GetEnumerator(); - } - - public ICollection Keys - { - get { return orig.Keys; } - } - - public object Remove( - string alias) - { - string upper = Platform.ToUpperInvariant(alias); - string k = (string)keys[upper]; - - if (k == null) - return null; - - keys.Remove(upper); - - object o = orig[k]; - orig.Remove(k); - return o; - } - - public object this[ - string alias] - { - get - { - string upper = Platform.ToUpperInvariant(alias); - string k = (string)keys[upper]; - - if (k == null) - return null; - - return orig[k]; - } - set - { - string upper = Platform.ToUpperInvariant(alias); - string k = (string)keys[upper]; - if (k != null) - { - orig.Remove(k); - } - keys[upper] = alias; - orig[alias] = value; - } - } - - public ICollection Values - { - get { return orig.Values; } - } - } - } -} diff --git a/bc-sharp-crypto/src/pkcs/Pkcs12Utilities.cs b/bc-sharp-crypto/src/pkcs/Pkcs12Utilities.cs deleted file mode 100644 index 923eca5..0000000 --- a/bc-sharp-crypto/src/pkcs/Pkcs12Utilities.cs +++ /dev/null @@ -1,77 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.X509; - -namespace Org.BouncyCastle.Pkcs -{ - /** - * Utility class for reencoding PKCS#12 files to definite length. - */ - public class Pkcs12Utilities - { - /** - * Just re-encode the outer layer of the PKCS#12 file to definite length encoding. - * - * @param berPKCS12File - original PKCS#12 file - * @return a byte array representing the DER encoding of the PFX structure - * @throws IOException - */ - public static byte[] ConvertToDefiniteLength( - byte[] berPkcs12File) - { - Pfx pfx = new Pfx(Asn1Sequence.GetInstance(Asn1Object.FromByteArray(berPkcs12File))); - - return pfx.GetEncoded(Asn1Encodable.Der); - } - - /** - * Re-encode the PKCS#12 structure to definite length encoding at the inner layer - * as well, recomputing the MAC accordingly. - * - * @param berPKCS12File - original PKCS12 file. - * @param provider - provider to use for MAC calculation. - * @return a byte array representing the DER encoding of the PFX structure. - * @throws IOException on parsing, encoding errors. - */ - public static byte[] ConvertToDefiniteLength( - byte[] berPkcs12File, - char[] passwd) - { - Pfx pfx = new Pfx(Asn1Sequence.GetInstance(Asn1Object.FromByteArray(berPkcs12File))); - - ContentInfo info = pfx.AuthSafe; - - Asn1OctetString content = Asn1OctetString.GetInstance(info.Content); - Asn1Object obj = Asn1Object.FromByteArray(content.GetOctets()); - - info = new ContentInfo(info.ContentType, new DerOctetString(obj.GetEncoded(Asn1Encodable.Der))); - - MacData mData = pfx.MacData; - - try - { - int itCount = mData.IterationCount.IntValue; - byte[] data = Asn1OctetString.GetInstance(info.Content).GetOctets(); - byte[] res = Pkcs12Store.CalculatePbeMac( - mData.Mac.AlgorithmID.Algorithm, mData.GetSalt(), itCount, passwd, false, data); - - AlgorithmIdentifier algId = new AlgorithmIdentifier( - mData.Mac.AlgorithmID.Algorithm, DerNull.Instance); - DigestInfo dInfo = new DigestInfo(algId, res); - - mData = new MacData(dInfo, mData.GetSalt(), itCount); - } - catch (Exception e) - { - throw new IOException("error constructing MAC: " + e.ToString()); - } - - pfx = new Pfx(info, mData); - - return pfx.GetEncoded(Asn1Encodable.Der); - } - } -} \ No newline at end of file diff --git a/bc-sharp-crypto/src/pkcs/PrivateKeyInfoFactory.cs b/bc-sharp-crypto/src/pkcs/PrivateKeyInfoFactory.cs deleted file mode 100644 index a349a11..0000000 --- a/bc-sharp-crypto/src/pkcs/PrivateKeyInfoFactory.cs +++ /dev/null @@ -1,205 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.CryptoPro; -using Org.BouncyCastle.Asn1.Oiw; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.Sec; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Pkcs -{ - public sealed class PrivateKeyInfoFactory - { - private PrivateKeyInfoFactory() - { - } - - public static PrivateKeyInfo CreatePrivateKeyInfo( - AsymmetricKeyParameter key) - { - if (key == null) - throw new ArgumentNullException("key"); - if (!key.IsPrivate) - throw new ArgumentException("Public key passed - private key expected", "key"); - - if (key is ElGamalPrivateKeyParameters) - { - ElGamalPrivateKeyParameters _key = (ElGamalPrivateKeyParameters)key; - return new PrivateKeyInfo( - new AlgorithmIdentifier( - OiwObjectIdentifiers.ElGamalAlgorithm, - new ElGamalParameter( - _key.Parameters.P, - _key.Parameters.G).ToAsn1Object()), - new DerInteger(_key.X)); - } - - if (key is DsaPrivateKeyParameters) - { - DsaPrivateKeyParameters _key = (DsaPrivateKeyParameters)key; - return new PrivateKeyInfo( - new AlgorithmIdentifier( - X9ObjectIdentifiers.IdDsa, - new DsaParameter( - _key.Parameters.P, - _key.Parameters.Q, - _key.Parameters.G).ToAsn1Object()), - new DerInteger(_key.X)); - } - - if (key is DHPrivateKeyParameters) - { - DHPrivateKeyParameters _key = (DHPrivateKeyParameters)key; - - DHParameter p = new DHParameter( - _key.Parameters.P, _key.Parameters.G, _key.Parameters.L); - - return new PrivateKeyInfo( - new AlgorithmIdentifier(_key.AlgorithmOid, p.ToAsn1Object()), - new DerInteger(_key.X)); - } - - if (key is RsaKeyParameters) - { - AlgorithmIdentifier algID = new AlgorithmIdentifier( - PkcsObjectIdentifiers.RsaEncryption, DerNull.Instance); - - RsaPrivateKeyStructure keyStruct; - if (key is RsaPrivateCrtKeyParameters) - { - RsaPrivateCrtKeyParameters _key = (RsaPrivateCrtKeyParameters)key; - - keyStruct = new RsaPrivateKeyStructure( - _key.Modulus, - _key.PublicExponent, - _key.Exponent, - _key.P, - _key.Q, - _key.DP, - _key.DQ, - _key.QInv); - } - else - { - RsaKeyParameters _key = (RsaKeyParameters) key; - - keyStruct = new RsaPrivateKeyStructure( - _key.Modulus, - BigInteger.Zero, - _key.Exponent, - BigInteger.Zero, - BigInteger.Zero, - BigInteger.Zero, - BigInteger.Zero, - BigInteger.Zero); - } - - return new PrivateKeyInfo(algID, keyStruct.ToAsn1Object()); - } - - if (key is ECPrivateKeyParameters) - { - ECPrivateKeyParameters priv = (ECPrivateKeyParameters)key; - ECDomainParameters dp = priv.Parameters; - int orderBitLength = dp.N.BitLength; - - AlgorithmIdentifier algID; - ECPrivateKeyStructure ec; - - if (priv.AlgorithmName == "ECGOST3410") - { - if (priv.PublicKeyParamSet == null) - throw Platform.CreateNotImplementedException("Not a CryptoPro parameter set"); - - Gost3410PublicKeyAlgParameters gostParams = new Gost3410PublicKeyAlgParameters( - priv.PublicKeyParamSet, CryptoProObjectIdentifiers.GostR3411x94CryptoProParamSet); - - algID = new AlgorithmIdentifier(CryptoProObjectIdentifiers.GostR3410x2001, gostParams); - - // TODO Do we need to pass any parameters here? - ec = new ECPrivateKeyStructure(orderBitLength, priv.D); - } - else - { - X962Parameters x962; - if (priv.PublicKeyParamSet == null) - { - X9ECParameters ecP = new X9ECParameters(dp.Curve, dp.G, dp.N, dp.H, dp.GetSeed()); - x962 = new X962Parameters(ecP); - } - else - { - x962 = new X962Parameters(priv.PublicKeyParamSet); - } - - // TODO Possible to pass the publicKey bitstring here? - ec = new ECPrivateKeyStructure(orderBitLength, priv.D, x962); - - algID = new AlgorithmIdentifier(X9ObjectIdentifiers.IdECPublicKey, x962); - } - - return new PrivateKeyInfo(algID, ec); - } - - if (key is Gost3410PrivateKeyParameters) - { - Gost3410PrivateKeyParameters _key = (Gost3410PrivateKeyParameters)key; - - if (_key.PublicKeyParamSet == null) - throw Platform.CreateNotImplementedException("Not a CryptoPro parameter set"); - - byte[] keyEnc = _key.X.ToByteArrayUnsigned(); - byte[] keyBytes = new byte[keyEnc.Length]; - - for (int i = 0; i != keyBytes.Length; i++) - { - keyBytes[i] = keyEnc[keyEnc.Length - 1 - i]; // must be little endian - } - - Gost3410PublicKeyAlgParameters algParams = new Gost3410PublicKeyAlgParameters( - _key.PublicKeyParamSet, CryptoProObjectIdentifiers.GostR3411x94CryptoProParamSet, null); - - AlgorithmIdentifier algID = new AlgorithmIdentifier( - CryptoProObjectIdentifiers.GostR3410x94, - algParams.ToAsn1Object()); - - return new PrivateKeyInfo(algID, new DerOctetString(keyBytes)); - } - - throw new ArgumentException("Class provided is not convertible: " + Platform.GetTypeName(key)); - } - - public static PrivateKeyInfo CreatePrivateKeyInfo( - char[] passPhrase, - EncryptedPrivateKeyInfo encInfo) - { - return CreatePrivateKeyInfo(passPhrase, false, encInfo); - } - - public static PrivateKeyInfo CreatePrivateKeyInfo( - char[] passPhrase, - bool wrongPkcs12Zero, - EncryptedPrivateKeyInfo encInfo) - { - AlgorithmIdentifier algID = encInfo.EncryptionAlgorithm; - - IBufferedCipher cipher = PbeUtilities.CreateEngine(algID) as IBufferedCipher; - if (cipher == null) - throw new Exception("Unknown encryption algorithm: " + algID.Algorithm); - - ICipherParameters cipherParameters = PbeUtilities.GenerateCipherParameters( - algID, passPhrase, wrongPkcs12Zero); - cipher.Init(false, cipherParameters); - byte[] keyBytes = cipher.DoFinal(encInfo.GetEncryptedData()); - - return PrivateKeyInfo.GetInstance(keyBytes); - } - } -} diff --git a/bc-sharp-crypto/src/pkcs/X509CertificateEntry.cs b/bc-sharp-crypto/src/pkcs/X509CertificateEntry.cs deleted file mode 100644 index 2f81dd8..0000000 --- a/bc-sharp-crypto/src/pkcs/X509CertificateEntry.cs +++ /dev/null @@ -1,60 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.X509; - -namespace Org.BouncyCastle.Pkcs -{ - public class X509CertificateEntry - : Pkcs12Entry - { - private readonly X509Certificate cert; - - public X509CertificateEntry( - X509Certificate cert) - : base(Platform.CreateHashtable()) - { - this.cert = cert; - } - -#if !(SILVERLIGHT || PORTABLE) - [Obsolete] - public X509CertificateEntry( - X509Certificate cert, - Hashtable attributes) - : base(attributes) - { - this.cert = cert; - } -#endif - - public X509CertificateEntry( - X509Certificate cert, - IDictionary attributes) - : base(attributes) - { - this.cert = cert; - } - - public X509Certificate Certificate - { - get { return this.cert; } - } - - public override bool Equals(object obj) - { - X509CertificateEntry other = obj as X509CertificateEntry; - - if (other == null) - return false; - - return cert.Equals(other.cert); - } - - public override int GetHashCode() - { - return ~cert.GetHashCode(); - } - } -} diff --git a/bc-sharp-crypto/src/pkix/CertStatus.cs b/bc-sharp-crypto/src/pkix/CertStatus.cs deleted file mode 100644 index 4f40b7b..0000000 --- a/bc-sharp-crypto/src/pkix/CertStatus.cs +++ /dev/null @@ -1,35 +0,0 @@ -using System; - -using Org.BouncyCastle.Utilities.Date; - -namespace Org.BouncyCastle.Pkix -{ - public class CertStatus - { - public const int Unrevoked = 11; - - public const int Undetermined = 12; - - private int status = Unrevoked; - - DateTimeObject revocationDate = null; - - /// - /// Returns the revocationDate. - /// - public DateTimeObject RevocationDate - { - get { return revocationDate; } - set { this.revocationDate = value; } - } - - /// - /// Returns the certStatus. - /// - public int Status - { - get { return status; } - set { this.status = value; } - } - } -} diff --git a/bc-sharp-crypto/src/pkix/PkixAttrCertChecker.cs b/bc-sharp-crypto/src/pkix/PkixAttrCertChecker.cs deleted file mode 100644 index a6eab84..0000000 --- a/bc-sharp-crypto/src/pkix/PkixAttrCertChecker.cs +++ /dev/null @@ -1,57 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities.Collections; -using Org.BouncyCastle.X509; - -namespace Org.BouncyCastle.Pkix -{ - public abstract class PkixAttrCertChecker - { - /** - * Returns an immutable Set of X.509 attribute certificate - * extensions that this PkixAttrCertChecker supports or - * null if no extensions are supported. - *

    - * Each element of the set is a String representing the - * Object Identifier (OID) of the X.509 extension that is supported. - *

    - *

    - * All X.509 attribute certificate extensions that a - * PkixAttrCertChecker might possibly be able to process - * should be included in the set. - *

    - * - * @return an immutable Set of X.509 extension OIDs (in - * String format) supported by this - * PkixAttrCertChecker, or null if no - * extensions are supported - */ - public abstract ISet GetSupportedExtensions(); - - /** - * Performs checks on the specified attribute certificate. Every handled - * extension is rmeoved from the unresolvedCritExts - * collection. - * - * @param attrCert The attribute certificate to be checked. - * @param certPath The certificate path which belongs to the attribute - * certificate issuer public key certificate. - * @param holderCertPath The certificate path which belongs to the holder - * certificate. - * @param unresolvedCritExts a Collection of OID strings - * representing the current set of unresolved critical extensions - * @throws CertPathValidatorException if the specified attribute certificate - * does not pass the check. - */ - public abstract void Check(IX509AttributeCertificate attrCert, PkixCertPath certPath, - PkixCertPath holderCertPath, ICollection unresolvedCritExts); - - /** - * Returns a clone of this object. - * - * @return a copy of this PkixAttrCertChecker - */ - public abstract PkixAttrCertChecker Clone(); - } -} diff --git a/bc-sharp-crypto/src/pkix/PkixAttrCertPathBuilder.cs b/bc-sharp-crypto/src/pkix/PkixAttrCertPathBuilder.cs deleted file mode 100644 index 646cc5d..0000000 --- a/bc-sharp-crypto/src/pkix/PkixAttrCertPathBuilder.cs +++ /dev/null @@ -1,215 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; -using Org.BouncyCastle.X509; -using Org.BouncyCastle.X509.Store; - -namespace Org.BouncyCastle.Pkix -{ - public class PkixAttrCertPathBuilder - { - /** - * Build and validate a CertPath using the given parameter. - * - * @param params PKIXBuilderParameters object containing all information to - * build the CertPath - */ - public virtual PkixCertPathBuilderResult Build( - PkixBuilderParameters pkixParams) - { - // search target certificates - - IX509Selector certSelect = pkixParams.GetTargetConstraints(); - if (!(certSelect is X509AttrCertStoreSelector)) - { - throw new PkixCertPathBuilderException( - "TargetConstraints must be an instance of " - + typeof(X509AttrCertStoreSelector).FullName - + " for " - + typeof(PkixAttrCertPathBuilder).FullName + " class."); - } - - ICollection targets; - try - { - targets = PkixCertPathValidatorUtilities.FindCertificates( - (X509AttrCertStoreSelector)certSelect, pkixParams.GetStores()); - } - catch (Exception e) - { - throw new PkixCertPathBuilderException("Error finding target attribute certificate.", e); - } - - if (targets.Count == 0) - { - throw new PkixCertPathBuilderException( - "No attribute certificate found matching targetContraints."); - } - - PkixCertPathBuilderResult result = null; - - // check all potential target certificates - foreach (IX509AttributeCertificate cert in targets) - { - X509CertStoreSelector selector = new X509CertStoreSelector(); - X509Name[] principals = cert.Issuer.GetPrincipals(); - ISet issuers = new HashSet(); - for (int i = 0; i < principals.Length; i++) - { - try - { - selector.Subject = principals[i]; - - issuers.AddAll(PkixCertPathValidatorUtilities.FindCertificates(selector, pkixParams.GetStores())); - } - catch (Exception e) - { - throw new PkixCertPathBuilderException( - "Public key certificate for attribute certificate cannot be searched.", - e); - } - } - - if (issuers.IsEmpty) - throw new PkixCertPathBuilderException("Public key certificate for attribute certificate cannot be found."); - - IList certPathList = Platform.CreateArrayList(); - - foreach (X509Certificate issuer in issuers) - { - result = Build(cert, issuer, pkixParams, certPathList); - - if (result != null) - break; - } - - if (result != null) - break; - } - - if (result == null && certPathException != null) - { - throw new PkixCertPathBuilderException( - "Possible certificate chain could not be validated.", - certPathException); - } - - if (result == null && certPathException == null) - { - throw new PkixCertPathBuilderException( - "Unable to find certificate chain."); - } - - return result; - } - - private Exception certPathException; - - private PkixCertPathBuilderResult Build( - IX509AttributeCertificate attrCert, - X509Certificate tbvCert, - PkixBuilderParameters pkixParams, - IList tbvPath) - { - // If tbvCert is readily present in tbvPath, it indicates having run - // into a cycle in the - // PKI graph. - if (tbvPath.Contains(tbvCert)) - return null; - - // step out, the certificate is not allowed to appear in a certification - // chain - if (pkixParams.GetExcludedCerts().Contains(tbvCert)) - return null; - - // test if certificate path exceeds maximum length - if (pkixParams.MaxPathLength != -1) - { - if (tbvPath.Count - 1 > pkixParams.MaxPathLength) - return null; - } - - tbvPath.Add(tbvCert); - - PkixCertPathBuilderResult builderResult = null; - -// X509CertificateParser certParser = new X509CertificateParser(); - PkixAttrCertPathValidator validator = new PkixAttrCertPathValidator(); - - try - { - // check whether the issuer of is a TrustAnchor - if (PkixCertPathValidatorUtilities.FindTrustAnchor(tbvCert, pkixParams.GetTrustAnchors()) != null) - { - PkixCertPath certPath = new PkixCertPath(tbvPath); - PkixCertPathValidatorResult result; - - try - { - result = validator.Validate(certPath, pkixParams); - } - catch (Exception e) - { - throw new Exception("Certification path could not be validated.", e); - } - - return new PkixCertPathBuilderResult(certPath, result.TrustAnchor, - result.PolicyTree, result.SubjectPublicKey); - } - else - { - // add additional X.509 stores from locations in certificate - try - { - PkixCertPathValidatorUtilities.AddAdditionalStoresFromAltNames(tbvCert, pkixParams); - } - catch (CertificateParsingException e) - { - throw new Exception("No additional X.509 stores can be added from certificate locations.", e); - } - - // try to get the issuer certificate from one of the stores - ISet issuers = new HashSet(); - try - { - issuers.AddAll(PkixCertPathValidatorUtilities.FindIssuerCerts(tbvCert, pkixParams)); - } - catch (Exception e) - { - throw new Exception("Cannot find issuer certificate for certificate in certification path.", e); - } - - if (issuers.IsEmpty) - throw new Exception("No issuer certificate for certificate in certification path found."); - - foreach (X509Certificate issuer in issuers) - { - // if untrusted self signed certificate continue - if (PkixCertPathValidatorUtilities.IsSelfIssued(issuer)) - continue; - - builderResult = Build(attrCert, issuer, pkixParams, tbvPath); - - if (builderResult != null) - break; - } - } - } - catch (Exception e) - { - certPathException = new Exception("No valid certification path could be build.", e); - } - - if (builderResult == null) - { - tbvPath.Remove(tbvCert); - } - - return builderResult; - } - } -} diff --git a/bc-sharp-crypto/src/pkix/PkixAttrCertPathValidator.cs b/bc-sharp-crypto/src/pkix/PkixAttrCertPathValidator.cs deleted file mode 100644 index 5f53bcd..0000000 --- a/bc-sharp-crypto/src/pkix/PkixAttrCertPathValidator.cs +++ /dev/null @@ -1,76 +0,0 @@ -using System; - -using Org.BouncyCastle.X509; -using Org.BouncyCastle.X509.Store; - -namespace Org.BouncyCastle.Pkix -{ - /** - * CertPathValidatorSpi implementation for X.509 Attribute Certificates la RFC 3281. - * - * @see org.bouncycastle.x509.ExtendedPkixParameters - */ - public class PkixAttrCertPathValidator - // extends CertPathValidatorSpi - { - /** - * Validates an attribute certificate with the given certificate path. - * - *

    - * params must be an instance of - * ExtendedPkixParameters. - *

    - * The target constraints in the params must be an - * X509AttrCertStoreSelector with at least the attribute - * certificate criterion set. Obey that also target informations may be - * necessary to correctly validate this attribute certificate. - *

    - * The attribute certificate issuer must be added to the trusted attribute - * issuers with {@link ExtendedPkixParameters#setTrustedACIssuers(Set)}. - *

    - * @param certPath The certificate path which belongs to the attribute - * certificate issuer public key certificate. - * @param params The PKIX parameters. - * @return A PKIXCertPathValidatorResult of the result of - * validating the certPath. - * @throws InvalidAlgorithmParameterException if params is - * inappropriate for this validator. - * @throws CertPathValidatorException if the verification fails. - */ - public virtual PkixCertPathValidatorResult Validate( - PkixCertPath certPath, - PkixParameters pkixParams) - { - IX509Selector certSelect = pkixParams.GetTargetConstraints(); - if (!(certSelect is X509AttrCertStoreSelector)) - { - throw new ArgumentException( - "TargetConstraints must be an instance of " + typeof(X509AttrCertStoreSelector).FullName, - "pkixParams"); - } - IX509AttributeCertificate attrCert = ((X509AttrCertStoreSelector) certSelect).AttributeCert; - - PkixCertPath holderCertPath = Rfc3281CertPathUtilities.ProcessAttrCert1(attrCert, pkixParams); - PkixCertPathValidatorResult result = Rfc3281CertPathUtilities.ProcessAttrCert2(certPath, pkixParams); - X509Certificate issuerCert = (X509Certificate)certPath.Certificates[0]; - Rfc3281CertPathUtilities.ProcessAttrCert3(issuerCert, pkixParams); - Rfc3281CertPathUtilities.ProcessAttrCert4(issuerCert, pkixParams); - Rfc3281CertPathUtilities.ProcessAttrCert5(attrCert, pkixParams); - // 6 already done in X509AttrCertStoreSelector - Rfc3281CertPathUtilities.ProcessAttrCert7(attrCert, certPath, holderCertPath, pkixParams); - Rfc3281CertPathUtilities.AdditionalChecks(attrCert, pkixParams); - DateTime date; - try - { - date = PkixCertPathValidatorUtilities.GetValidCertDateFromValidityModel(pkixParams, null, -1); - } - catch (Exception e) - { - throw new PkixCertPathValidatorException( - "Could not get validity date from attribute certificate.", e); - } - Rfc3281CertPathUtilities.CheckCrls(attrCert, pkixParams, issuerCert, date, certPath.Certificates); - return result; - } - } -} diff --git a/bc-sharp-crypto/src/pkix/PkixBuilderParameters.cs b/bc-sharp-crypto/src/pkix/PkixBuilderParameters.cs deleted file mode 100644 index 32fc043..0000000 --- a/bc-sharp-crypto/src/pkix/PkixBuilderParameters.cs +++ /dev/null @@ -1,140 +0,0 @@ -using System; -using System.Text; - -using Org.BouncyCastle.Security; -using Org.BouncyCastle.X509.Store; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Pkix -{ - /// - /// Summary description for PkixBuilderParameters. - /// - public class PkixBuilderParameters - : PkixParameters - { - private int maxPathLength = 5; - - private ISet excludedCerts = new HashSet(); - - /** - * Returns an instance of PkixBuilderParameters. - *

    - * This method can be used to get a copy from other - * PKIXBuilderParameters, PKIXParameters, - * and ExtendedPKIXParameters instances. - *

    - * - * @param pkixParams The PKIX parameters to create a copy of. - * @return An PkixBuilderParameters instance. - */ - public static PkixBuilderParameters GetInstance( - PkixParameters pkixParams) - { - PkixBuilderParameters parameters = new PkixBuilderParameters( - pkixParams.GetTrustAnchors(), - new X509CertStoreSelector(pkixParams.GetTargetCertConstraints())); - parameters.SetParams(pkixParams); - return parameters; - } - - public PkixBuilderParameters( - ISet trustAnchors, - IX509Selector targetConstraints) - : base(trustAnchors) - { - SetTargetCertConstraints(targetConstraints); - } - - public virtual int MaxPathLength - { - get { return maxPathLength; } - set - { - if (value < -1) - { - throw new InvalidParameterException( - "The maximum path length parameter can not be less than -1."); - } - this.maxPathLength = value; - } - } - - /// - /// Excluded certificates are not used for building a certification path. - /// - /// the excluded certificates. - public virtual ISet GetExcludedCerts() - { - return new HashSet(excludedCerts); - } - - /// - /// Sets the excluded certificates which are not used for building a - /// certification path. If the ISet is null an - /// empty set is assumed. - /// - /// - /// The given set is cloned to protect it against subsequent modifications. - /// - /// The excluded certificates to set. - public virtual void SetExcludedCerts( - ISet excludedCerts) - { - if (excludedCerts == null) - { - excludedCerts = new HashSet(); - } - else - { - this.excludedCerts = new HashSet(excludedCerts); - } - } - - /** - * Can alse handle ExtendedPKIXBuilderParameters and - * PKIXBuilderParameters. - * - * @param params Parameters to set. - * @see org.bouncycastle.x509.ExtendedPKIXParameters#setParams(java.security.cert.PKIXParameters) - */ - protected override void SetParams( - PkixParameters parameters) - { - base.SetParams(parameters); - if (parameters is PkixBuilderParameters) - { - PkixBuilderParameters _params = (PkixBuilderParameters) parameters; - maxPathLength = _params.maxPathLength; - excludedCerts = new HashSet(_params.excludedCerts); - } - } - - /** - * Makes a copy of this PKIXParameters object. Changes to the - * copy will not affect the original and vice versa. - * - * @return a copy of this PKIXParameters object - */ - public override object Clone() - { - PkixBuilderParameters parameters = new PkixBuilderParameters( - GetTrustAnchors(), GetTargetCertConstraints()); - parameters.SetParams(this); - return parameters; - } - - public override string ToString() - { - string nl = Platform.NewLine; - StringBuilder s = new StringBuilder(); - s.Append("PkixBuilderParameters [" + nl); - s.Append(base.ToString()); - s.Append(" Maximum Path Length: "); - s.Append(MaxPathLength); - s.Append(nl + "]" + nl); - return s.ToString(); - } - } -} diff --git a/bc-sharp-crypto/src/pkix/PkixCertPath.cs b/bc-sharp-crypto/src/pkix/PkixCertPath.cs deleted file mode 100644 index 3c428f6..0000000 --- a/bc-sharp-crypto/src/pkix/PkixCertPath.cs +++ /dev/null @@ -1,460 +0,0 @@ -using System; -using System.Collections; -using System.IO; -using System.Text; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Cms; -using Org.BouncyCastle.X509; -using Org.BouncyCastle.OpenSsl; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Pkix -{ - /** - * An immutable sequence of certificates (a certification path).
    - *
    - * This is an abstract class that defines the methods common to all CertPaths. - * Subclasses can handle different kinds of certificates (X.509, PGP, etc.).
    - *
    - * All CertPath objects have a type, a list of Certificates, and one or more - * supported encodings. Because the CertPath class is immutable, a CertPath - * cannot change in any externally visible way after being constructed. This - * stipulation applies to all public fields and methods of this class and any - * added or overridden by subclasses.
    - *
    - * The type is a string that identifies the type of Certificates in the - * certification path. For each certificate cert in a certification path - * certPath, cert.getType().equals(certPath.getType()) must be true.
    - *
    - * The list of Certificates is an ordered List of zero or more Certificates. - * This List and all of the Certificates contained in it must be immutable.
    - *
    - * Each CertPath object must support one or more encodings so that the object - * can be translated into a byte array for storage or transmission to other - * parties. Preferably, these encodings should be well-documented standards - * (such as PKCS#7). One of the encodings supported by a CertPath is considered - * the default encoding. This encoding is used if no encoding is explicitly - * requested (for the {@link #getEncoded()} method, for instance).
    - *
    - * All CertPath objects are also Serializable. CertPath objects are resolved - * into an alternate {@link CertPathRep} object during serialization. This - * allows a CertPath object to be serialized into an equivalent representation - * regardless of its underlying implementation.
    - *
    - * CertPath objects can be created with a CertificateFactory or they can be - * returned by other classes, such as a CertPathBuilder.
    - *
    - * By convention, X.509 CertPaths (consisting of X509Certificates), are ordered - * starting with the target certificate and ending with a certificate issued by - * the trust anchor. That is, the issuer of one certificate is the subject of - * the following one. The certificate representing the - * {@link TrustAnchor TrustAnchor} should not be included in the certification - * path. Unvalidated X.509 CertPaths may not follow these conventions. PKIX - * CertPathValidators will detect any departure from these conventions that - * cause the certification path to be invalid and throw a - * CertPathValidatorException.
    - *
    - * Concurrent Access
    - *
    - * All CertPath objects must be thread-safe. That is, multiple threads may - * concurrently invoke the methods defined in this class on a single CertPath - * object (or more than one) with no ill effects. This is also true for the List - * returned by CertPath.getCertificates.
    - *
    - * Requiring CertPath objects to be immutable and thread-safe allows them to be - * passed around to various pieces of code without worrying about coordinating - * access. Providing this thread-safety is generally not difficult, since the - * CertPath and List objects in question are immutable. - * - * @see CertificateFactory - * @see CertPathBuilder - */ - /// - /// CertPath implementation for X.509 certificates. - /// - public class PkixCertPath -// : CertPath - { - internal static readonly IList certPathEncodings; - - static PkixCertPath() - { - IList encodings = Platform.CreateArrayList(); - encodings.Add("PkiPath"); - encodings.Add("PEM"); - encodings.Add("PKCS7"); - certPathEncodings = CollectionUtilities.ReadOnly(encodings); - } - - private readonly IList certificates; - - /** - * @param certs - */ - private static IList SortCerts( - IList certs) - { - if (certs.Count < 2) - return certs; - - X509Name issuer = ((X509Certificate)certs[0]).IssuerDN; - bool okay = true; - - for (int i = 1; i != certs.Count; i++) - { - X509Certificate cert = (X509Certificate)certs[i]; - - if (issuer.Equivalent(cert.SubjectDN, true)) - { - issuer = ((X509Certificate)certs[i]).IssuerDN; - } - else - { - okay = false; - break; - } - } - - if (okay) - return certs; - - // find end-entity cert - IList retList = Platform.CreateArrayList(certs.Count); - IList orig = Platform.CreateArrayList(certs); - - for (int i = 0; i < certs.Count; i++) - { - X509Certificate cert = (X509Certificate)certs[i]; - bool found = false; - - X509Name subject = cert.SubjectDN; - foreach (X509Certificate c in certs) - { - if (c.IssuerDN.Equivalent(subject, true)) - { - found = true; - break; - } - } - - if (!found) - { - retList.Add(cert); - certs.RemoveAt(i); - } - } - - // can only have one end entity cert - something's wrong, give up. - if (retList.Count > 1) - return orig; - - for (int i = 0; i != retList.Count; i++) - { - issuer = ((X509Certificate)retList[i]).IssuerDN; - - for (int j = 0; j < certs.Count; j++) - { - X509Certificate c = (X509Certificate)certs[j]; - if (issuer.Equivalent(c.SubjectDN, true)) - { - retList.Add(c); - certs.RemoveAt(j); - break; - } - } - } - - // make sure all certificates are accounted for. - if (certs.Count > 0) - return orig; - - return retList; - } - - /** - * Creates a CertPath of the specified type. - * This constructor is protected because most users should use - * a CertificateFactory to create CertPaths. - * @param type the standard name of the type of Certificatesin this path - **/ - public PkixCertPath( - ICollection certificates) -// : base("X.509") - { - this.certificates = SortCerts(Platform.CreateArrayList(certificates)); - } - - public PkixCertPath( - Stream inStream) - : this(inStream, "PkiPath") - { - } - - /** - * Creates a CertPath of the specified type. - * This constructor is protected because most users should use - * a CertificateFactory to create CertPaths. - * - * @param type the standard name of the type of Certificatesin this path - **/ - public PkixCertPath( - Stream inStream, - string encoding) -// : base("X.509") - { - string upper = Platform.ToUpperInvariant(encoding); - - IList certs; - try - { - if (upper.Equals(Platform.ToUpperInvariant("PkiPath"))) - { - Asn1InputStream derInStream = new Asn1InputStream(inStream); - Asn1Object derObject = derInStream.ReadObject(); - if (!(derObject is Asn1Sequence)) - { - throw new CertificateException( - "input stream does not contain a ASN1 SEQUENCE while reading PkiPath encoded data to load CertPath"); - } - - certs = Platform.CreateArrayList(); - - foreach (Asn1Encodable ae in (Asn1Sequence)derObject) - { - byte[] derBytes = ae.GetEncoded(Asn1Encodable.Der); - Stream certInStream = new MemoryStream(derBytes, false); - - // TODO Is inserting at the front important (list will be sorted later anyway)? - certs.Insert(0, new X509CertificateParser().ReadCertificate(certInStream)); - } - } - else if (upper.Equals("PKCS7") || upper.Equals("PEM")) - { - certs = Platform.CreateArrayList(new X509CertificateParser().ReadCertificates(inStream)); - } - else - { - throw new CertificateException("unsupported encoding: " + encoding); - } - } - catch (IOException ex) - { - throw new CertificateException( - "IOException throw while decoding CertPath:\n" - + ex.ToString()); - } - - this.certificates = SortCerts(certs); - } - - /** - * Returns an iteration of the encodings supported by this - * certification path, with the default encoding - * first. Attempts to modify the returned Iterator via its - * remove method result in an UnsupportedOperationException. - * - * @return an Iterator over the names of the supported encodings (as Strings) - **/ - public virtual IEnumerable Encodings - { - get { return new EnumerableProxy(certPathEncodings); } - } - - /** - * Compares this certification path for equality with the specified object. - * Two CertPaths are equal if and only if their types are equal and their - * certificate Lists (and by implication the Certificates in those Lists) - * are equal. A CertPath is never equal to an object that is not a CertPath.
    - *
    - * This algorithm is implemented by this method. If it is overridden, the - * behavior specified here must be maintained. - * - * @param other - * the object to test for equality with this certification path - * - * @return true if the specified object is equal to this certification path, - * false otherwise - * - * @see Object#hashCode() Object.hashCode() - */ - public override bool Equals( - object obj) - { - if (this == obj) - return true; - - PkixCertPath other = obj as PkixCertPath; - if (other == null) - return false; - -// if (!this.Type.Equals(other.Type)) -// return false; - - //return this.Certificates.Equals(other.Certificates); - - // TODO Extract this to a utility class - IList thisCerts = this.Certificates; - IList otherCerts = other.Certificates; - - if (thisCerts.Count != otherCerts.Count) - return false; - - IEnumerator e1 = thisCerts.GetEnumerator(); - IEnumerator e2 = thisCerts.GetEnumerator(); - - while (e1.MoveNext()) - { - e2.MoveNext(); - - if (!Platform.Equals(e1.Current, e2.Current)) - return false; - } - - return true; - } - - public override int GetHashCode() - { - // FIXME? - return this.Certificates.GetHashCode(); - } - - /** - * Returns the encoded form of this certification path, using - * the default encoding. - * - * @return the encoded bytes - * @exception CertificateEncodingException if an encoding error occurs - **/ - public virtual byte[] GetEncoded() - { - foreach (object enc in Encodings) - { - if (enc is string) - { - return GetEncoded((string)enc); - } - } - return null; - } - - /** - * Returns the encoded form of this certification path, using - * the specified encoding. - * - * @param encoding the name of the encoding to use - * @return the encoded bytes - * @exception CertificateEncodingException if an encoding error - * occurs or the encoding requested is not supported - * - */ - public virtual byte[] GetEncoded( - string encoding) - { - if (Platform.EqualsIgnoreCase(encoding, "PkiPath")) - { - Asn1EncodableVector v = new Asn1EncodableVector(); - - for (int i = certificates.Count - 1; i >= 0; i--) - { - v.Add(ToAsn1Object((X509Certificate) certificates[i])); - } - - return ToDerEncoded(new DerSequence(v)); - } - else if (Platform.EqualsIgnoreCase(encoding, "PKCS7")) - { - Asn1.Pkcs.ContentInfo encInfo = new Asn1.Pkcs.ContentInfo( - PkcsObjectIdentifiers.Data, null); - - Asn1EncodableVector v = new Asn1EncodableVector(); - for (int i = 0; i != certificates.Count; i++) - { - v.Add(ToAsn1Object((X509Certificate)certificates[i])); - } - - Asn1.Pkcs.SignedData sd = new Asn1.Pkcs.SignedData( - new DerInteger(1), - new DerSet(), - encInfo, - new DerSet(v), - null, - new DerSet()); - - return ToDerEncoded(new Asn1.Pkcs.ContentInfo(PkcsObjectIdentifiers.SignedData, sd)); - } - else if (Platform.EqualsIgnoreCase(encoding, "PEM")) - { - MemoryStream bOut = new MemoryStream(); - PemWriter pWrt = new PemWriter(new StreamWriter(bOut)); - - try - { - for (int i = 0; i != certificates.Count; i++) - { - pWrt.WriteObject(certificates[i]); - } - - Platform.Dispose(pWrt.Writer); - } - catch (Exception) - { - throw new CertificateEncodingException("can't encode certificate for PEM encoded path"); - } - - return bOut.ToArray(); - } - else - { - throw new CertificateEncodingException("unsupported encoding: " + encoding); - } - } - - /// - /// Returns the list of certificates in this certification - /// path. - /// - public virtual IList Certificates - { - get { return CollectionUtilities.ReadOnly(certificates); } - } - - /** - * Return a DERObject containing the encoded certificate. - * - * @param cert the X509Certificate object to be encoded - * - * @return the DERObject - **/ - private Asn1Object ToAsn1Object( - X509Certificate cert) - { - try - { - return Asn1Object.FromByteArray(cert.GetEncoded()); - } - catch (Exception e) - { - throw new CertificateEncodingException("Exception while encoding certificate", e); - } - } - - private byte[] ToDerEncoded(Asn1Encodable obj) - { - try - { - return obj.GetEncoded(Asn1Encodable.Der); - } - catch (IOException e) - { - throw new CertificateEncodingException("Exception thrown", e); - } - } - } -} diff --git a/bc-sharp-crypto/src/pkix/PkixCertPathBuilder.cs b/bc-sharp-crypto/src/pkix/PkixCertPathBuilder.cs deleted file mode 100644 index fa38a5e..0000000 --- a/bc-sharp-crypto/src/pkix/PkixCertPathBuilder.cs +++ /dev/null @@ -1,205 +0,0 @@ -using System; -using System.Collections; -using System.Text; - -using Org.BouncyCastle.Asn1.IsisMtt; -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Asn1.X500; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; -using Org.BouncyCastle.X509; -using Org.BouncyCastle.X509.Store; - -namespace Org.BouncyCastle.Pkix -{ - /** - * Implements the PKIX CertPathBuilding algorithm for BouncyCastle. - * - * @see CertPathBuilderSpi - */ - public class PkixCertPathBuilder - // : CertPathBuilderSpi - { - /** - * Build and validate a CertPath using the given parameter. - * - * @param params PKIXBuilderParameters object containing all information to - * build the CertPath - */ - public virtual PkixCertPathBuilderResult Build( - PkixBuilderParameters pkixParams) - { - // search target certificates - - IX509Selector certSelect = pkixParams.GetTargetCertConstraints(); - if (!(certSelect is X509CertStoreSelector)) - { - throw new PkixCertPathBuilderException( - "TargetConstraints must be an instance of " - + typeof(X509CertStoreSelector).FullName + " for " - + Platform.GetTypeName(this) + " class."); - } - - ISet targets = new HashSet(); - try - { - targets.AddAll(PkixCertPathValidatorUtilities.FindCertificates((X509CertStoreSelector)certSelect, pkixParams.GetStores())); - // TODO Should this include an entry for pkixParams.GetAdditionalStores() too? - } - catch (Exception e) - { - throw new PkixCertPathBuilderException( - "Error finding target certificate.", e); - } - - if (targets.IsEmpty) - throw new PkixCertPathBuilderException("No certificate found matching targetContraints."); - - PkixCertPathBuilderResult result = null; - IList certPathList = Platform.CreateArrayList(); - - // check all potential target certificates - foreach (X509Certificate cert in targets) - { - result = Build(cert, pkixParams, certPathList); - - if (result != null) - break; - } - - if (result == null && certPathException != null) - { - throw new PkixCertPathBuilderException(certPathException.Message, certPathException.InnerException); - } - - if (result == null && certPathException == null) - { - throw new PkixCertPathBuilderException("Unable to find certificate chain."); - } - - return result; - } - - private Exception certPathException; - - protected virtual PkixCertPathBuilderResult Build( - X509Certificate tbvCert, - PkixBuilderParameters pkixParams, - IList tbvPath) - { - // If tbvCert is readily present in tbvPath, it indicates having run - // into a cycle in the PKI graph. - if (tbvPath.Contains(tbvCert)) - return null; - - // step out, the certificate is not allowed to appear in a certification - // chain. - if (pkixParams.GetExcludedCerts().Contains(tbvCert)) - return null; - - // test if certificate path exceeds maximum length - if (pkixParams.MaxPathLength != -1) - { - if (tbvPath.Count - 1 > pkixParams.MaxPathLength) - return null; - } - - tbvPath.Add(tbvCert); - -// X509CertificateParser certParser = new X509CertificateParser(); - PkixCertPathBuilderResult builderResult = null; - PkixCertPathValidator validator = new PkixCertPathValidator(); - - try - { - // check whether the issuer of is a TrustAnchor - if (PkixCertPathValidatorUtilities.FindTrustAnchor(tbvCert, pkixParams.GetTrustAnchors()) != null) - { - // exception message from possibly later tried certification - // chains - PkixCertPath certPath = null; - try - { - certPath = new PkixCertPath(tbvPath); - } - catch (Exception e) - { - throw new Exception( - "Certification path could not be constructed from certificate list.", - e); - } - - PkixCertPathValidatorResult result = null; - try - { - result = (PkixCertPathValidatorResult)validator.Validate( - certPath, pkixParams); - } - catch (Exception e) - { - throw new Exception( - "Certification path could not be validated.", e); - } - - return new PkixCertPathBuilderResult(certPath, result.TrustAnchor, - result.PolicyTree, result.SubjectPublicKey); - } - else - { - // add additional X.509 stores from locations in certificate - try - { - PkixCertPathValidatorUtilities.AddAdditionalStoresFromAltNames( - tbvCert, pkixParams); - } - catch (CertificateParsingException e) - { - throw new Exception( - "No additiontal X.509 stores can be added from certificate locations.", - e); - } - - // try to get the issuer certificate from one of the stores - HashSet issuers = new HashSet(); - try - { - issuers.AddAll(PkixCertPathValidatorUtilities.FindIssuerCerts(tbvCert, pkixParams)); - } - catch (Exception e) - { - throw new Exception( - "Cannot find issuer certificate for certificate in certification path.", - e); - } - - if (issuers.IsEmpty) - throw new Exception("No issuer certificate for certificate in certification path found."); - - foreach (X509Certificate issuer in issuers) - { - builderResult = Build(issuer, pkixParams, tbvPath); - - if (builderResult != null) - break; - } - } - } - catch (Exception e) - { - certPathException = e; - } - - if (builderResult == null) - { - tbvPath.Remove(tbvCert); - } - - return builderResult; - } - } -} diff --git a/bc-sharp-crypto/src/pkix/PkixCertPathBuilderException.cs b/bc-sharp-crypto/src/pkix/PkixCertPathBuilderException.cs deleted file mode 100644 index 0f10179..0000000 --- a/bc-sharp-crypto/src/pkix/PkixCertPathBuilderException.cs +++ /dev/null @@ -1,22 +0,0 @@ -using System; - -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Pkix -{ - /// - /// Summary description for PkixCertPathBuilderException. - /// -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class PkixCertPathBuilderException : GeneralSecurityException - { - public PkixCertPathBuilderException() : base() { } - - public PkixCertPathBuilderException(string message) : base(message) { } - - public PkixCertPathBuilderException(string message, Exception exception) : base(message, exception) { } - - } -} diff --git a/bc-sharp-crypto/src/pkix/PkixCertPathBuilderResult.cs b/bc-sharp-crypto/src/pkix/PkixCertPathBuilderResult.cs deleted file mode 100644 index f800303..0000000 --- a/bc-sharp-crypto/src/pkix/PkixCertPathBuilderResult.cs +++ /dev/null @@ -1,45 +0,0 @@ -using System; -using System.Text; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Pkix; - -namespace Org.BouncyCastle.Pkix -{ - /// - /// Summary description for PkixCertPathBuilderResult. - /// - public class PkixCertPathBuilderResult - : PkixCertPathValidatorResult//, ICertPathBuilderResult - { - private PkixCertPath certPath; - - public PkixCertPathBuilderResult( - PkixCertPath certPath, - TrustAnchor trustAnchor, - PkixPolicyNode policyTree, - AsymmetricKeyParameter subjectPublicKey) - : base(trustAnchor, policyTree, subjectPublicKey) - { - if (certPath == null) - throw new ArgumentNullException("certPath"); - - this.certPath = certPath; - } - - public PkixCertPath CertPath - { - get { return certPath; } - } - - public override string ToString() - { - StringBuilder s = new StringBuilder(); - s.Append("SimplePKIXCertPathBuilderResult: [\n"); - s.Append(" Certification Path: ").Append(CertPath).Append('\n'); - s.Append(" Trust Anchor: ").Append(this.TrustAnchor.TrustedCert.IssuerDN.ToString()).Append('\n'); - s.Append(" Subject Public Key: ").Append(this.SubjectPublicKey).Append("\n]"); - return s.ToString(); - } - } -} diff --git a/bc-sharp-crypto/src/pkix/PkixCertPathChecker.cs b/bc-sharp-crypto/src/pkix/PkixCertPathChecker.cs deleted file mode 100644 index da7e82b..0000000 --- a/bc-sharp-crypto/src/pkix/PkixCertPathChecker.cs +++ /dev/null @@ -1,99 +0,0 @@ -using Org.BouncyCastle.Utilities.Collections; -using Org.BouncyCastle.X509; - -namespace Org.BouncyCastle.Pkix -{ - public abstract class PkixCertPathChecker - { - protected PkixCertPathChecker() - { - } - - /** - * Initializes the internal state of this PKIXCertPathChecker. - *

    - * The forward flag specifies the order that certificates - * will be passed to the {@link #check check} method (forward or reverse). A - * PKIXCertPathChecker must support reverse checking - * and may support forward checking. - *

    - * - * @param forward - * the order that certificates are presented to the - * check method. If true, - * certificates are presented from target to most-trusted CA - * (forward); if false, from most-trusted CA to - * target (reverse). - * @exception CertPathValidatorException - * if this PKIXCertPathChecker is unable to - * check certificates in the specified order; it should never - * be thrown if the forward flag is false since reverse - * checking must be supported - */ - public abstract void Init(bool forward); - //throws CertPathValidatorException; - - /** - * Indicates if forward checking is supported. Forward checking refers to - * the ability of the PKIXCertPathChecker to perform its - * checks when certificates are presented to the check method - * in the forward direction (from target to most-trusted CA). - * - * @return true if forward checking is supported, - * false otherwise - */ - public abstract bool IsForwardCheckingSupported(); - - /** - * Returns an immutable Set of X.509 certificate extensions - * that this PKIXCertPathChecker supports (i.e. recognizes, - * is able to process), or null if no extensions are - * supported. - *

    - * Each element of the set is a String representing the - * Object Identifier (OID) of the X.509 extension that is supported. The OID - * is represented by a set of nonnegative integers separated by periods. - *

    - * All X.509 certificate extensions that a PKIXCertPathChecker - * might possibly be able to process should be included in the set. - *

    - * - * @return an immutable Set of X.509 extension OIDs (in - * String format) supported by this - * PKIXCertPathChecker, or null if no - * extensions are supported - */ - public abstract ISet GetSupportedExtensions(); - - /** - * Performs the check(s) on the specified certificate using its internal - * state and removes any critical extensions that it processes from the - * specified collection of OID strings that represent the unresolved - * critical extensions. The certificates are presented in the order - * specified by the init method. - * - * @param cert - * the Certificate to be checked - * @param unresolvedCritExts - * a Collection of OID strings representing the - * current set of unresolved critical extensions - * @exception CertPathValidatorException - * if the specified certificate does not pass the check - */ - public abstract void Check(X509Certificate cert, ISet unresolvedCritExts); - //throws CertPathValidatorException; - - /** - * Returns a clone of this object. Calls the Object.clone() - * method. All subclasses which maintain state must support and override - * this method, if necessary. - * - * @return a copy of this PKIXCertPathChecker - */ - public virtual object Clone() - { - // TODO Check this - return base.MemberwiseClone(); - } - } -} diff --git a/bc-sharp-crypto/src/pkix/PkixCertPathValidator.cs b/bc-sharp-crypto/src/pkix/PkixCertPathValidator.cs deleted file mode 100644 index fcfa638..0000000 --- a/bc-sharp-crypto/src/pkix/PkixCertPathValidator.cs +++ /dev/null @@ -1,420 +0,0 @@ -using System; -using System.Collections; -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; -using Org.BouncyCastle.X509; -using Org.BouncyCastle.X509.Store; - -namespace Org.BouncyCastle.Pkix -{ - /** - * The Service Provider Interface (SPI) - * for the {@link CertPathValidator CertPathValidator} class. All - * CertPathValidator implementations must include a class (the - * SPI class) that extends this class (CertPathValidatorSpi) - * and implements all of its methods. In general, instances of this class - * should only be accessed through the CertPathValidator class. - * For details, see the Java Cryptography Architecture.
    - *
    - * Concurrent Access
    - *
    - * Instances of this class need not be protected against concurrent - * access from multiple threads. Threads that need to access a single - * CertPathValidatorSpi instance concurrently should synchronize - * amongst themselves and provide the necessary locking before calling the - * wrapping CertPathValidator object.
    - *
    - * However, implementations of CertPathValidatorSpi may still - * encounter concurrency issues, since multiple threads each - * manipulating a different CertPathValidatorSpi instance need not - * synchronize. - */ - /// - /// CertPathValidatorSpi implementation for X.509 Certificate validation a la RFC - /// 3280. - /// - public class PkixCertPathValidator - { - public virtual PkixCertPathValidatorResult Validate( - PkixCertPath certPath, - PkixParameters paramsPkix) - { - if (paramsPkix.GetTrustAnchors() == null) - { - throw new ArgumentException( - "trustAnchors is null, this is not allowed for certification path validation.", - "parameters"); - } - - // - // 6.1.1 - inputs - // - - // - // (a) - // - IList certs = certPath.Certificates; - int n = certs.Count; - - if (certs.Count == 0) - throw new PkixCertPathValidatorException("Certification path is empty.", null, certPath, 0); - - // - // (b) - // - // DateTime validDate = PkixCertPathValidatorUtilities.GetValidDate(paramsPkix); - - // - // (c) - // - ISet userInitialPolicySet = paramsPkix.GetInitialPolicies(); - - // - // (d) - // - TrustAnchor trust; - try - { - trust = PkixCertPathValidatorUtilities.FindTrustAnchor( - (X509Certificate)certs[certs.Count - 1], - paramsPkix.GetTrustAnchors()); - } - catch (Exception e) - { - throw new PkixCertPathValidatorException(e.Message, e, certPath, certs.Count - 1); - } - - if (trust == null) - throw new PkixCertPathValidatorException("Trust anchor for certification path not found.", null, certPath, -1); - - // - // (e), (f), (g) are part of the paramsPkix object. - // - IEnumerator certIter; - int index = 0; - int i; - // Certificate for each interation of the validation loop - // Signature information for each iteration of the validation loop - // - // 6.1.2 - setup - // - - // - // (a) - // - IList[] policyNodes = new IList[n + 1]; - for (int j = 0; j < policyNodes.Length; j++) - { - policyNodes[j] = Platform.CreateArrayList(); - } - - ISet policySet = new HashSet(); - - policySet.Add(Rfc3280CertPathUtilities.ANY_POLICY); - - PkixPolicyNode validPolicyTree = new PkixPolicyNode(Platform.CreateArrayList(), 0, policySet, null, new HashSet(), - Rfc3280CertPathUtilities.ANY_POLICY, false); - - policyNodes[0].Add(validPolicyTree); - - // - // (b) and (c) - // - PkixNameConstraintValidator nameConstraintValidator = new PkixNameConstraintValidator(); - - // (d) - // - int explicitPolicy; - ISet acceptablePolicies = new HashSet(); - - if (paramsPkix.IsExplicitPolicyRequired) - { - explicitPolicy = 0; - } - else - { - explicitPolicy = n + 1; - } - - // - // (e) - // - int inhibitAnyPolicy; - - if (paramsPkix.IsAnyPolicyInhibited) - { - inhibitAnyPolicy = 0; - } - else - { - inhibitAnyPolicy = n + 1; - } - - // - // (f) - // - int policyMapping; - - if (paramsPkix.IsPolicyMappingInhibited) - { - policyMapping = 0; - } - else - { - policyMapping = n + 1; - } - - // - // (g), (h), (i), (j) - // - AsymmetricKeyParameter workingPublicKey; - X509Name workingIssuerName; - - X509Certificate sign = trust.TrustedCert; - try - { - if (sign != null) - { - workingIssuerName = sign.SubjectDN; - workingPublicKey = sign.GetPublicKey(); - } - else - { - workingIssuerName = new X509Name(trust.CAName); - workingPublicKey = trust.CAPublicKey; - } - } - catch (ArgumentException ex) - { - throw new PkixCertPathValidatorException("Subject of trust anchor could not be (re)encoded.", ex, certPath, - -1); - } - - AlgorithmIdentifier workingAlgId = null; - try - { - workingAlgId = PkixCertPathValidatorUtilities.GetAlgorithmIdentifier(workingPublicKey); - } - catch (PkixCertPathValidatorException e) - { - throw new PkixCertPathValidatorException( - "Algorithm identifier of public key of trust anchor could not be read.", e, certPath, -1); - } - -// DerObjectIdentifier workingPublicKeyAlgorithm = workingAlgId.Algorithm; -// Asn1Encodable workingPublicKeyParameters = workingAlgId.Parameters; - - // - // (k) - // - int maxPathLength = n; - - // - // 6.1.3 - // - - X509CertStoreSelector certConstraints = paramsPkix.GetTargetCertConstraints(); - if (certConstraints != null && !certConstraints.Match((X509Certificate)certs[0])) - { - throw new PkixCertPathValidatorException( - "Target certificate in certification path does not match targetConstraints.", null, certPath, 0); - } - - // - // initialize CertPathChecker's - // - IList pathCheckers = paramsPkix.GetCertPathCheckers(); - certIter = pathCheckers.GetEnumerator(); - - while (certIter.MoveNext()) - { - ((PkixCertPathChecker)certIter.Current).Init(false); - } - - X509Certificate cert = null; - - for (index = certs.Count - 1; index >= 0; index--) - { - // try - // { - // - // i as defined in the algorithm description - // - i = n - index; - - // - // set certificate to be checked in this round - // sign and workingPublicKey and workingIssuerName are set - // at the end of the for loop and initialized the - // first time from the TrustAnchor - // - cert = (X509Certificate)certs[index]; - - // - // 6.1.3 - // - - Rfc3280CertPathUtilities.ProcessCertA(certPath, paramsPkix, index, workingPublicKey, - workingIssuerName, sign); - - Rfc3280CertPathUtilities.ProcessCertBC(certPath, index, nameConstraintValidator); - - validPolicyTree = Rfc3280CertPathUtilities.ProcessCertD(certPath, index, - acceptablePolicies, validPolicyTree, policyNodes, inhibitAnyPolicy); - - validPolicyTree = Rfc3280CertPathUtilities.ProcessCertE(certPath, index, validPolicyTree); - - Rfc3280CertPathUtilities.ProcessCertF(certPath, index, validPolicyTree, explicitPolicy); - - // - // 6.1.4 - // - - if (i != n) - { - if (cert != null && cert.Version == 1) - { - throw new PkixCertPathValidatorException( - "Version 1 certificates can't be used as CA ones.", null, certPath, index); - } - - Rfc3280CertPathUtilities.PrepareNextCertA(certPath, index); - - validPolicyTree = Rfc3280CertPathUtilities.PrepareCertB(certPath, index, policyNodes, - validPolicyTree, policyMapping); - - Rfc3280CertPathUtilities.PrepareNextCertG(certPath, index, nameConstraintValidator); - - // (h) - explicitPolicy = Rfc3280CertPathUtilities.PrepareNextCertH1(certPath, index, explicitPolicy); - policyMapping = Rfc3280CertPathUtilities.PrepareNextCertH2(certPath, index, policyMapping); - inhibitAnyPolicy = Rfc3280CertPathUtilities.PrepareNextCertH3(certPath, index, inhibitAnyPolicy); - - // - // (i) - // - explicitPolicy = Rfc3280CertPathUtilities.PrepareNextCertI1(certPath, index, explicitPolicy); - policyMapping = Rfc3280CertPathUtilities.PrepareNextCertI2(certPath, index, policyMapping); - - // (j) - inhibitAnyPolicy = Rfc3280CertPathUtilities.PrepareNextCertJ(certPath, index, inhibitAnyPolicy); - - // (k) - Rfc3280CertPathUtilities.PrepareNextCertK(certPath, index); - - // (l) - maxPathLength = Rfc3280CertPathUtilities.PrepareNextCertL(certPath, index, maxPathLength); - - // (m) - maxPathLength = Rfc3280CertPathUtilities.PrepareNextCertM(certPath, index, maxPathLength); - - // (n) - Rfc3280CertPathUtilities.PrepareNextCertN(certPath, index); - - ISet criticalExtensions1 = cert.GetCriticalExtensionOids(); - - if (criticalExtensions1 != null) - { - criticalExtensions1 = new HashSet(criticalExtensions1); - - // these extensions are handled by the algorithm - criticalExtensions1.Remove(X509Extensions.KeyUsage.Id); - criticalExtensions1.Remove(X509Extensions.CertificatePolicies.Id); - criticalExtensions1.Remove(X509Extensions.PolicyMappings.Id); - criticalExtensions1.Remove(X509Extensions.InhibitAnyPolicy.Id); - criticalExtensions1.Remove(X509Extensions.IssuingDistributionPoint.Id); - criticalExtensions1.Remove(X509Extensions.DeltaCrlIndicator.Id); - criticalExtensions1.Remove(X509Extensions.PolicyConstraints.Id); - criticalExtensions1.Remove(X509Extensions.BasicConstraints.Id); - criticalExtensions1.Remove(X509Extensions.SubjectAlternativeName.Id); - criticalExtensions1.Remove(X509Extensions.NameConstraints.Id); - } - else - { - criticalExtensions1 = new HashSet(); - } - - // (o) - Rfc3280CertPathUtilities.PrepareNextCertO(certPath, index, criticalExtensions1, pathCheckers); - - // set signing certificate for next round - sign = cert; - - // (c) - workingIssuerName = sign.SubjectDN; - - // (d) - try - { - workingPublicKey = PkixCertPathValidatorUtilities.GetNextWorkingKey(certPath.Certificates, index); - } - catch (PkixCertPathValidatorException e) - { - throw new PkixCertPathValidatorException("Next working key could not be retrieved.", e, certPath, index); - } - - workingAlgId = PkixCertPathValidatorUtilities.GetAlgorithmIdentifier(workingPublicKey); - // (f) -// workingPublicKeyAlgorithm = workingAlgId.Algorithm; - // (e) -// workingPublicKeyParameters = workingAlgId.Parameters; - } - } - - // - // 6.1.5 Wrap-up procedure - // - - explicitPolicy = Rfc3280CertPathUtilities.WrapupCertA(explicitPolicy, cert); - - explicitPolicy = Rfc3280CertPathUtilities.WrapupCertB(certPath, index + 1, explicitPolicy); - - // - // (c) (d) and (e) are already done - // - - // - // (f) - // - ISet criticalExtensions = cert.GetCriticalExtensionOids(); - - if (criticalExtensions != null) - { - criticalExtensions = new HashSet(criticalExtensions); - - // Requires .Id - // these extensions are handled by the algorithm - criticalExtensions.Remove(X509Extensions.KeyUsage.Id); - criticalExtensions.Remove(X509Extensions.CertificatePolicies.Id); - criticalExtensions.Remove(X509Extensions.PolicyMappings.Id); - criticalExtensions.Remove(X509Extensions.InhibitAnyPolicy.Id); - criticalExtensions.Remove(X509Extensions.IssuingDistributionPoint.Id); - criticalExtensions.Remove(X509Extensions.DeltaCrlIndicator.Id); - criticalExtensions.Remove(X509Extensions.PolicyConstraints.Id); - criticalExtensions.Remove(X509Extensions.BasicConstraints.Id); - criticalExtensions.Remove(X509Extensions.SubjectAlternativeName.Id); - criticalExtensions.Remove(X509Extensions.NameConstraints.Id); - criticalExtensions.Remove(X509Extensions.CrlDistributionPoints.Id); - } - else - { - criticalExtensions = new HashSet(); - } - - Rfc3280CertPathUtilities.WrapupCertF(certPath, index + 1, pathCheckers, criticalExtensions); - - PkixPolicyNode intersection = Rfc3280CertPathUtilities.WrapupCertG(certPath, paramsPkix, userInitialPolicySet, - index + 1, policyNodes, validPolicyTree, acceptablePolicies); - - if ((explicitPolicy > 0) || (intersection != null)) - { - return new PkixCertPathValidatorResult(trust, intersection, cert.GetPublicKey()); - } - - throw new PkixCertPathValidatorException("Path processing failed on policy.", null, certPath, index); - } - } -} diff --git a/bc-sharp-crypto/src/pkix/PkixCertPathValidatorException.cs b/bc-sharp-crypto/src/pkix/PkixCertPathValidatorException.cs deleted file mode 100644 index a477f7d..0000000 --- a/bc-sharp-crypto/src/pkix/PkixCertPathValidatorException.cs +++ /dev/null @@ -1,221 +0,0 @@ -using System; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Pkix -{ - /** - * An exception indicating one of a variety of problems encountered when - * validating a certification path.
    - *
    - * A CertPathValidatorException provides support for wrapping - * exceptions. The {@link #getCause getCause} method returns the throwable, - * if any, that caused this exception to be thrown.
    - *
    - * A CertPathValidatorException may also include the - * certification path that was being validated when the exception was thrown - * and the index of the certificate in the certification path that caused the - * exception to be thrown. Use the {@link #getCertPath getCertPath} and - * {@link #getIndex getIndex} methods to retrieve this information.
    - *
    - * Concurrent Access
    - *
    - * Unless otherwise specified, the methods defined in this class are not - * thread-safe. Multiple threads that need to access a single - * object concurrently should synchronize amongst themselves and - * provide the necessary locking. Multiple threads each manipulating - * separate objects need not synchronize. - * - * @see CertPathValidator - **/ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class PkixCertPathValidatorException - : GeneralSecurityException - { - private Exception cause; - private PkixCertPath certPath; - private int index = -1; - - public PkixCertPathValidatorException() : base() { } - - /// - /// Creates a PkixCertPathValidatorException with the given detail - /// message. A detail message is a String that describes this - /// particular exception. - /// - /// the detail message - public PkixCertPathValidatorException(string message) : base(message) { } - - /// - /// Creates a PkixCertPathValidatorException with the specified - /// detail message and cause. - /// - /// the detail message - /// the cause (which is saved for later retrieval by the - /// {@link #getCause getCause()} method). (A null - /// value is permitted, and indicates that the cause is - /// nonexistent or unknown.) - public PkixCertPathValidatorException(string message, Exception cause) : base(message) - { - this.cause = cause; - } - - /// - /// Creates a PkixCertPathValidatorException with the specified - /// detail message, cause, certification path, and index. - /// - /// the detail message (or null if none) - /// the cause (or null if none) - /// the certification path that was in the process of being - /// validated when the error was encountered - /// the index of the certificate in the certification path that * - public PkixCertPathValidatorException( - string message, - Exception cause, - PkixCertPath certPath, - int index) - : base(message) - { - if (certPath == null && index != -1) - { - throw new ArgumentNullException( - "certPath = null and index != -1"); - } - if (index < -1 - || (certPath != null && index >= certPath.Certificates.Count)) - { - throw new IndexOutOfRangeException( - " index < -1 or out of bound of certPath.getCertificates()"); - } - - this.cause = cause; - this.certPath = certPath; - this.index = index; - } - - // - // Prints a stack trace to a PrintWriter, including the - // backtrace of the cause, if any. - // - // @param pw - // the PrintWriter to use for output - // - // public void printStackTrace(PrintWriter pw) - // { - // super.printStackTrace(pw); - // if (getCause() != null) - // { - // getCause().printStackTrace(pw); - // } - // } - //} - - - // /** - // * Creates a CertPathValidatorException that wraps the - // * specified throwable. This allows any exception to be converted into a - // * CertPathValidatorException, while retaining information - // * about the wrapped exception, which may be useful for debugging. The - // * detail message is set to (cause==null ? null : cause.toString() - // * ) - // * (which typically contains the class and detail message of cause). - // * - // * @param cause - // * the cause (which is saved for later retrieval by the - // * {@link #getCause getCause()} method). (A null - // * value is permitted, and indicates that the cause is - // * nonexistent or unknown.) - // */ - // public PkixCertPathValidatorException(Throwable cause) - // { - // this.cause = cause; - // } - // - - /// - /// Returns the detail message for this CertPathValidatorException. - /// - /// the detail message, or null if neither the message nor cause were specified - public override string Message - { - get - { - string message = base.Message; - - if (message != null) - { - return message; - } - - if (cause != null) - { - return cause.Message; - } - - return null; - } - } - - /** - * Returns the certification path that was being validated when the - * exception was thrown. - * - * @return the CertPath that was being validated when the - * exception was thrown (or null if not specified) - */ - public PkixCertPath CertPath - { - get { return certPath; } - } - - /** - * Returns the index of the certificate in the certification path that - * caused the exception to be thrown. Note that the list of certificates in - * a CertPath is zero based. If no index has been set, -1 is - * returned. - * - * @return the index that has been set, or -1 if none has been set - */ - public int Index - { - get { return index; } - } - -// /** -// * Returns the cause of this CertPathValidatorException or -// * null if the cause is nonexistent or unknown. -// * -// * @return the cause of this throwable or null if the cause -// * is nonexistent or unknown. -// */ -// public Throwable getCause() -// { -// return cause; -// } -// -// /** -// * Returns a string describing this exception, including a description of -// * the internal (wrapped) cause if there is one. -// * -// * @return a string representation of this -// * CertPathValidatorException -// */ -// public String toString() -// { -// StringBuffer sb = new StringBuffer(); -// String s = getMessage(); -// if (s != null) -// { -// sb.append(s); -// } -// if (getIndex() >= 0) -// { -// sb.append("index in certpath: ").append(getIndex()).append('\n'); -// sb.append(getCertPath()); -// } -// return sb.toString(); -// } - - } -} diff --git a/bc-sharp-crypto/src/pkix/PkixCertPathValidatorResult.cs b/bc-sharp-crypto/src/pkix/PkixCertPathValidatorResult.cs deleted file mode 100644 index c7d81c7..0000000 --- a/bc-sharp-crypto/src/pkix/PkixCertPathValidatorResult.cs +++ /dev/null @@ -1,69 +0,0 @@ -using System; -using System.Text; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Pkix -{ - /// - /// Summary description for PkixCertPathValidatorResult. - /// - public class PkixCertPathValidatorResult - //: ICertPathValidatorResult - { - private TrustAnchor trustAnchor; - private PkixPolicyNode policyTree; - private AsymmetricKeyParameter subjectPublicKey; - - public PkixPolicyNode PolicyTree - { - get { return this.policyTree; } - } - - public TrustAnchor TrustAnchor - { - get { return this.trustAnchor; } - } - - public AsymmetricKeyParameter SubjectPublicKey - { - get { return this.subjectPublicKey; } - } - - public PkixCertPathValidatorResult( - TrustAnchor trustAnchor, - PkixPolicyNode policyTree, - AsymmetricKeyParameter subjectPublicKey) - { - if (subjectPublicKey == null) - { - throw new NullReferenceException("subjectPublicKey must be non-null"); - } - if (trustAnchor == null) - { - throw new NullReferenceException("trustAnchor must be non-null"); - } - - this.trustAnchor = trustAnchor; - this.policyTree = policyTree; - this.subjectPublicKey = subjectPublicKey; - } - - public object Clone() - { - return new PkixCertPathValidatorResult(this.TrustAnchor, this.PolicyTree, this.SubjectPublicKey); - } - - public override String ToString() - { - StringBuilder sB = new StringBuilder(); - sB.Append("PKIXCertPathValidatorResult: [ \n"); - sB.Append(" Trust Anchor: ").Append(this.TrustAnchor).Append('\n'); - sB.Append(" Policy Tree: ").Append(this.PolicyTree).Append('\n'); - sB.Append(" Subject Public Key: ").Append(this.SubjectPublicKey).Append("\n]"); - return sB.ToString(); - } - - } -} diff --git a/bc-sharp-crypto/src/pkix/PkixCertPathValidatorUtilities.cs b/bc-sharp-crypto/src/pkix/PkixCertPathValidatorUtilities.cs deleted file mode 100644 index a2704a7..0000000 --- a/bc-sharp-crypto/src/pkix/PkixCertPathValidatorUtilities.cs +++ /dev/null @@ -1,1194 +0,0 @@ -using System; -using System.Collections; -using System.IO; -using System.Text; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.IsisMtt; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; -using Org.BouncyCastle.Utilities.Date; -using Org.BouncyCastle.X509; -using Org.BouncyCastle.X509.Extension; -using Org.BouncyCastle.X509.Store; - -namespace Org.BouncyCastle.Pkix -{ - /// - /// Summary description for PkixCertPathValidatorUtilities. - /// - public class PkixCertPathValidatorUtilities - { - private static readonly PkixCrlUtilities CrlUtilities = new PkixCrlUtilities(); - - internal static readonly string ANY_POLICY = "2.5.29.32.0"; - - internal static readonly string CRL_NUMBER = X509Extensions.CrlNumber.Id; - - /// - /// key usage bits - /// - internal static readonly int KEY_CERT_SIGN = 5; - internal static readonly int CRL_SIGN = 6; - - internal static readonly string[] crlReasons = new string[] - { - "unspecified", - "keyCompromise", - "cACompromise", - "affiliationChanged", - "superseded", - "cessationOfOperation", - "certificateHold", - "unknown", - "removeFromCRL", - "privilegeWithdrawn", - "aACompromise" - }; - - /// - /// Search the given Set of TrustAnchor's for one that is the - /// issuer of the given X509 certificate. - /// - /// the X509 certificate - /// a Set of TrustAnchor's - /// the TrustAnchor object if found or - /// null if not. - /// - /// @exception - internal static TrustAnchor FindTrustAnchor( - X509Certificate cert, - ISet trustAnchors) - { - IEnumerator iter = trustAnchors.GetEnumerator(); - TrustAnchor trust = null; - AsymmetricKeyParameter trustPublicKey = null; - Exception invalidKeyEx = null; - - X509CertStoreSelector certSelectX509 = new X509CertStoreSelector(); - - try - { - certSelectX509.Subject = GetIssuerPrincipal(cert); - } - catch (IOException ex) - { - throw new Exception("Cannot set subject search criteria for trust anchor.", ex); - } - - while (iter.MoveNext() && trust == null) - { - trust = (TrustAnchor) iter.Current; - if (trust.TrustedCert != null) - { - if (certSelectX509.Match(trust.TrustedCert)) - { - trustPublicKey = trust.TrustedCert.GetPublicKey(); - } - else - { - trust = null; - } - } - else if (trust.CAName != null && trust.CAPublicKey != null) - { - try - { - X509Name certIssuer = GetIssuerPrincipal(cert); - X509Name caName = new X509Name(trust.CAName); - - if (certIssuer.Equivalent(caName, true)) - { - trustPublicKey = trust.CAPublicKey; - } - else - { - trust = null; - } - } - catch (InvalidParameterException) - { - trust = null; - } - } - else - { - trust = null; - } - - if (trustPublicKey != null) - { - try - { - cert.Verify(trustPublicKey); - } - catch (Exception ex) - { - invalidKeyEx = ex; - trust = null; - } - } - } - - if (trust == null && invalidKeyEx != null) - { - throw new Exception("TrustAnchor found but certificate validation failed.", invalidKeyEx); - } - - return trust; - } - - internal static void AddAdditionalStoresFromAltNames( - X509Certificate cert, - PkixParameters pkixParams) - { - // if in the IssuerAltName extension an URI - // is given, add an additinal X.509 store - if (cert.GetIssuerAlternativeNames() != null) - { - IEnumerator it = cert.GetIssuerAlternativeNames().GetEnumerator(); - while (it.MoveNext()) - { - // look for URI - IList list = (IList)it.Current; - //if (list[0].Equals(new Integer(GeneralName.UniformResourceIdentifier))) - if (list[0].Equals(GeneralName.UniformResourceIdentifier)) - { - // found - string temp = (string)list[1]; - PkixCertPathValidatorUtilities.AddAdditionalStoreFromLocation(temp, pkixParams); - } - } - } - } - - internal static DateTime GetValidDate(PkixParameters paramsPKIX) - { - DateTimeObject validDate = paramsPKIX.Date; - - if (validDate == null) - return DateTime.UtcNow; - - return validDate.Value; - } - - /// - /// Returns the issuer of an attribute certificate or certificate. - /// - /// The attribute certificate or certificate. - /// The issuer as X500Principal. - internal static X509Name GetIssuerPrincipal( - object cert) - { - if (cert is X509Certificate) - { - return ((X509Certificate)cert).IssuerDN; - } - else - { - return ((IX509AttributeCertificate)cert).Issuer.GetPrincipals()[0]; - } - } - - internal static bool IsSelfIssued( - X509Certificate cert) - { - return cert.SubjectDN.Equivalent(cert.IssuerDN, true); - } - - internal static AlgorithmIdentifier GetAlgorithmIdentifier( - AsymmetricKeyParameter key) - { - try - { - SubjectPublicKeyInfo info = SubjectPublicKeyInfoFactory.CreateSubjectPublicKeyInfo(key); - - return info.AlgorithmID; - } - catch (Exception e) - { - throw new PkixCertPathValidatorException("Subject public key cannot be decoded.", e); - } - } - - internal static bool IsAnyPolicy( - ISet policySet) - { - return policySet == null || policySet.Contains(ANY_POLICY) || policySet.Count == 0; - } - - internal static void AddAdditionalStoreFromLocation( - string location, - PkixParameters pkixParams) - { - if (pkixParams.IsAdditionalLocationsEnabled) - { - try - { - if (Platform.StartsWith(location, "ldap://")) - { - // ldap://directory.d-trust.net/CN=D-TRUST - // Qualified CA 2003 1:PN,O=D-Trust GmbH,C=DE - // skip "ldap://" - location = location.Substring(7); - // after first / baseDN starts - string url;//, baseDN; - int slashPos = location.IndexOf('/'); - if (slashPos != -1) - { - url = "ldap://" + location.Substring(0, slashPos); -// baseDN = location.Substring(slashPos); - } - else - { - url = "ldap://" + location; -// baseDN = nsull; - } - - throw Platform.CreateNotImplementedException("LDAP cert/CRL stores"); - - // use all purpose parameters - //X509LDAPCertStoreParameters ldapParams = new X509LDAPCertStoreParameters.Builder( - // url, baseDN).build(); - //pkixParams.AddAdditionalStore(X509Store.getInstance( - // "CERTIFICATE/LDAP", ldapParams)); - //pkixParams.AddAdditionalStore(X509Store.getInstance( - // "CRL/LDAP", ldapParams)); - //pkixParams.AddAdditionalStore(X509Store.getInstance( - // "ATTRIBUTECERTIFICATE/LDAP", ldapParams)); - //pkixParams.AddAdditionalStore(X509Store.getInstance( - // "CERTIFICATEPAIR/LDAP", ldapParams)); - } - } - catch (Exception) - { - // cannot happen - throw new Exception("Exception adding X.509 stores."); - } - } - } - - private static BigInteger GetSerialNumber( - object cert) - { - if (cert is X509Certificate) - { - return ((X509Certificate)cert).SerialNumber; - } - else - { - return ((X509V2AttributeCertificate)cert).SerialNumber; - } - } - - // - // policy checking - // - - internal static ISet GetQualifierSet(Asn1Sequence qualifiers) - { - ISet pq = new HashSet(); - - if (qualifiers == null) - { - return pq; - } - - foreach (Asn1Encodable ae in qualifiers) - { - try - { -// pq.Add(PolicyQualifierInfo.GetInstance(Asn1Object.FromByteArray(ae.GetEncoded()))); - pq.Add(PolicyQualifierInfo.GetInstance(ae.ToAsn1Object())); - } - catch (IOException ex) - { - throw new PkixCertPathValidatorException("Policy qualifier info cannot be decoded.", ex); - } - } - - return pq; - } - - internal static PkixPolicyNode RemovePolicyNode( - PkixPolicyNode validPolicyTree, - IList[] policyNodes, - PkixPolicyNode _node) - { - PkixPolicyNode _parent = (PkixPolicyNode)_node.Parent; - - if (validPolicyTree == null) - { - return null; - } - - if (_parent == null) - { - for (int j = 0; j < policyNodes.Length; j++) - { - policyNodes[j] = Platform.CreateArrayList(); - } - - return null; - } - else - { - _parent.RemoveChild(_node); - RemovePolicyNodeRecurse(policyNodes, _node); - - return validPolicyTree; - } - } - - private static void RemovePolicyNodeRecurse(IList[] policyNodes, PkixPolicyNode _node) - { - policyNodes[_node.Depth].Remove(_node); - - if (_node.HasChildren) - { - foreach (PkixPolicyNode _child in _node.Children) - { - RemovePolicyNodeRecurse(policyNodes, _child); - } - } - } - - internal static void PrepareNextCertB1( - int i, - IList[] policyNodes, - string id_p, - IDictionary m_idp, - X509Certificate cert) - { - bool idp_found = false; - IEnumerator nodes_i = policyNodes[i].GetEnumerator(); - while (nodes_i.MoveNext()) - { - PkixPolicyNode node = (PkixPolicyNode)nodes_i.Current; - if (node.ValidPolicy.Equals(id_p)) - { - idp_found = true; - node.ExpectedPolicies = (ISet)m_idp[id_p]; - break; - } - } - - if (!idp_found) - { - nodes_i = policyNodes[i].GetEnumerator(); - while (nodes_i.MoveNext()) - { - PkixPolicyNode node = (PkixPolicyNode)nodes_i.Current; - if (ANY_POLICY.Equals(node.ValidPolicy)) - { - ISet pq = null; - Asn1Sequence policies = null; - try - { - policies = DerSequence.GetInstance(GetExtensionValue(cert, X509Extensions.CertificatePolicies)); - } - catch (Exception e) - { - throw new Exception("Certificate policies cannot be decoded.", e); - } - - IEnumerator enm = policies.GetEnumerator(); - while (enm.MoveNext()) - { - PolicyInformation pinfo = null; - - try - { - pinfo = PolicyInformation.GetInstance(enm.Current); - } - catch (Exception ex) - { - throw new Exception("Policy information cannot be decoded.", ex); - } - - if (ANY_POLICY.Equals(pinfo.PolicyIdentifier.Id)) - { - try - { - pq = GetQualifierSet(pinfo.PolicyQualifiers); - } - catch (PkixCertPathValidatorException ex) - { - throw new PkixCertPathValidatorException( - "Policy qualifier info set could not be built.", ex); - } - break; - } - } - bool ci = false; - ISet critExtOids = cert.GetCriticalExtensionOids(); - if (critExtOids != null) - { - ci = critExtOids.Contains(X509Extensions.CertificatePolicies.Id); - } - - PkixPolicyNode p_node = (PkixPolicyNode)node.Parent; - if (ANY_POLICY.Equals(p_node.ValidPolicy)) - { - PkixPolicyNode c_node = new PkixPolicyNode( - Platform.CreateArrayList(), i, - (ISet)m_idp[id_p], - p_node, pq, id_p, ci); - p_node.AddChild(c_node); - policyNodes[i].Add(c_node); - } - break; - } - } - } - } - - internal static PkixPolicyNode PrepareNextCertB2( - int i, - IList[] policyNodes, - string id_p, - PkixPolicyNode validPolicyTree) - { - int pos = 0; - - // Copy to avoid RemoveAt calls interfering with enumeration - foreach (PkixPolicyNode node in Platform.CreateArrayList(policyNodes[i])) - { - if (node.ValidPolicy.Equals(id_p)) - { - PkixPolicyNode p_node = (PkixPolicyNode)node.Parent; - p_node.RemoveChild(node); - - // Removal of element at current iterator position not supported in C# - //nodes_i.remove(); - policyNodes[i].RemoveAt(pos); - - for (int k = (i - 1); k >= 0; k--) - { - IList nodes = policyNodes[k]; - for (int l = 0; l < nodes.Count; l++) - { - PkixPolicyNode node2 = (PkixPolicyNode)nodes[l]; - if (!node2.HasChildren) - { - validPolicyTree = RemovePolicyNode(validPolicyTree, policyNodes, node2); - if (validPolicyTree == null) - break; - } - } - } - } - else - { - ++pos; - } - } - return validPolicyTree; - } - - internal static void GetCertStatus( - DateTime validDate, - X509Crl crl, - Object cert, - CertStatus certStatus) - { - X509Crl bcCRL = null; - - try - { - bcCRL = new X509Crl(CertificateList.GetInstance((Asn1Sequence)Asn1Sequence.FromByteArray(crl.GetEncoded()))); - } - catch (Exception exception) - { - throw new Exception("Bouncy Castle X509Crl could not be created.", exception); - } - - X509CrlEntry crl_entry = (X509CrlEntry)bcCRL.GetRevokedCertificate(GetSerialNumber(cert)); - - if (crl_entry == null) - return; - - X509Name issuer = GetIssuerPrincipal(cert); - - if (issuer.Equivalent(crl_entry.GetCertificateIssuer(), true) - || issuer.Equivalent(crl.IssuerDN, true)) - { - DerEnumerated reasonCode = null; - if (crl_entry.HasExtensions) - { - try - { - reasonCode = DerEnumerated.GetInstance( - GetExtensionValue(crl_entry, X509Extensions.ReasonCode)); - } - catch (Exception e) - { - throw new Exception( - "Reason code CRL entry extension could not be decoded.", - e); - } - } - - // for reason keyCompromise, caCompromise, aACompromise or - // unspecified - if (!(validDate.Ticks < crl_entry.RevocationDate.Ticks) - || reasonCode == null - || reasonCode.Value.TestBit(0) - || reasonCode.Value.TestBit(1) - || reasonCode.Value.TestBit(2) - || reasonCode.Value.TestBit(8)) - { - if (reasonCode != null) // (i) or (j) (1) - { - certStatus.Status = reasonCode.Value.SignValue; - } - else // (i) or (j) (2) - { - certStatus.Status = CrlReason.Unspecified; - } - certStatus.RevocationDate = new DateTimeObject(crl_entry.RevocationDate); - } - } - } - - /** - * Return the next working key inheriting DSA parameters if necessary. - *

    - * This methods inherits DSA parameters from the indexed certificate or - * previous certificates in the certificate chain to the returned - * PublicKey. The list is searched upwards, meaning the end - * certificate is at position 0 and previous certificates are following. - *

    - *

    - * If the indexed certificate does not contain a DSA key this method simply - * returns the public key. If the DSA key already contains DSA parameters - * the key is also only returned. - *

    - * - * @param certs The certification path. - * @param index The index of the certificate which contains the public key - * which should be extended with DSA parameters. - * @return The public key of the certificate in list position - * index extended with DSA parameters if applicable. - * @throws Exception if DSA parameters cannot be inherited. - */ - internal static AsymmetricKeyParameter GetNextWorkingKey( - IList certs, - int index) - { - //Only X509Certificate - X509Certificate cert = (X509Certificate)certs[index]; - - AsymmetricKeyParameter pubKey = cert.GetPublicKey(); - - if (!(pubKey is DsaPublicKeyParameters)) - return pubKey; - - DsaPublicKeyParameters dsaPubKey = (DsaPublicKeyParameters)pubKey; - - if (dsaPubKey.Parameters != null) - return dsaPubKey; - - for (int i = index + 1; i < certs.Count; i++) - { - X509Certificate parentCert = (X509Certificate)certs[i]; - pubKey = parentCert.GetPublicKey(); - - if (!(pubKey is DsaPublicKeyParameters)) - { - throw new PkixCertPathValidatorException( - "DSA parameters cannot be inherited from previous certificate."); - } - - DsaPublicKeyParameters prevDSAPubKey = (DsaPublicKeyParameters)pubKey; - - if (prevDSAPubKey.Parameters == null) - continue; - - DsaParameters dsaParams = prevDSAPubKey.Parameters; - - try - { - return new DsaPublicKeyParameters(dsaPubKey.Y, dsaParams); - } - catch (Exception exception) - { - throw new Exception(exception.Message); - } - } - - throw new PkixCertPathValidatorException("DSA parameters cannot be inherited from previous certificate."); - } - - internal static DateTime GetValidCertDateFromValidityModel( - PkixParameters paramsPkix, - PkixCertPath certPath, - int index) - { - if (paramsPkix.ValidityModel != PkixParameters.ChainValidityModel) - { - return GetValidDate(paramsPkix); - } - - // if end cert use given signing/encryption/... time - if (index <= 0) - { - return PkixCertPathValidatorUtilities.GetValidDate(paramsPkix); - // else use time when previous cert was created - } - - if (index - 1 == 0) - { - DerGeneralizedTime dateOfCertgen = null; - try - { - X509Certificate cert = (X509Certificate)certPath.Certificates[index - 1]; - Asn1OctetString extVal = cert.GetExtensionValue( - IsisMttObjectIdentifiers.IdIsisMttATDateOfCertGen); - dateOfCertgen = DerGeneralizedTime.GetInstance(extVal); - } - catch (ArgumentException) - { - throw new Exception( - "Date of cert gen extension could not be read."); - } - if (dateOfCertgen != null) - { - try - { - return dateOfCertgen.ToDateTime(); - } - catch (ArgumentException e) - { - throw new Exception( - "Date from date of cert gen extension could not be parsed.", - e); - } - } - } - - return ((X509Certificate)certPath.Certificates[index - 1]).NotBefore; - } - - /// - /// Return a Collection of all certificates or attribute certificates found - /// in the X509Store's that are matching the certSelect criteriums. - /// - /// a {@link Selector} object that will be used to select - /// the certificates - /// a List containing only X509Store objects. These - /// are used to search for certificates. - /// a Collection of all found or - /// objects. - /// May be empty but never null. - /// - internal static ICollection FindCertificates( - X509CertStoreSelector certSelect, - IList certStores) - { - ISet certs = new HashSet(); - - foreach (IX509Store certStore in certStores) - { - try - { -// certs.AddAll(certStore.GetMatches(certSelect)); - foreach (X509Certificate c in certStore.GetMatches(certSelect)) - { - certs.Add(c); - } - } - catch (Exception e) - { - throw new Exception("Problem while picking certificates from X.509 store.", e); - } - } - - return certs; - } - - /** - * Add the CRL issuers from the cRLIssuer field of the distribution point or - * from the certificate if not given to the issuer criterion of the - * selector. - *

    - * The issuerPrincipals are a collection with a single - * X500Principal for X509Certificates. For - * {@link X509AttributeCertificate}s the issuer may contain more than one - * X500Principal. - *

    - * - * @param dp The distribution point. - * @param issuerPrincipals The issuers of the certificate or attribute - * certificate which contains the distribution point. - * @param selector The CRL selector. - * @param pkixParams The PKIX parameters containing the cert stores. - * @throws Exception if an exception occurs while processing. - * @throws ClassCastException if issuerPrincipals does not - * contain only X500Principals. - */ - internal static void GetCrlIssuersFromDistributionPoint( - DistributionPoint dp, - ICollection issuerPrincipals, - X509CrlStoreSelector selector, - PkixParameters pkixParams) - { - IList issuers = Platform.CreateArrayList(); - // indirect CRL - if (dp.CrlIssuer != null) - { - GeneralName[] genNames = dp.CrlIssuer.GetNames(); - // look for a DN - for (int j = 0; j < genNames.Length; j++) - { - if (genNames[j].TagNo == GeneralName.DirectoryName) - { - try - { - issuers.Add(X509Name.GetInstance(genNames[j].Name.ToAsn1Object())); - } - catch (IOException e) - { - throw new Exception( - "CRL issuer information from distribution point cannot be decoded.", - e); - } - } - } - } - else - { - /* - * certificate issuer is CRL issuer, distributionPoint field MUST be - * present. - */ - if (dp.DistributionPointName == null) - { - throw new Exception( - "CRL issuer is omitted from distribution point but no distributionPoint field present."); - } - - // add and check issuer principals - for (IEnumerator it = issuerPrincipals.GetEnumerator(); it.MoveNext(); ) - { - issuers.Add((X509Name)it.Current); - } - } - // TODO: is not found although this should correctly add the rel name. selector of Sun is buggy here or PKI test case is invalid - // distributionPoint - // if (dp.getDistributionPoint() != null) - // { - // // look for nameRelativeToCRLIssuer - // if (dp.getDistributionPoint().getType() == DistributionPointName.NAME_RELATIVE_TO_CRL_ISSUER) - // { - // // append fragment to issuer, only one - // // issuer can be there, if this is given - // if (issuers.size() != 1) - // { - // throw new AnnotatedException( - // "nameRelativeToCRLIssuer field is given but more than one CRL issuer is given."); - // } - // DEREncodable relName = dp.getDistributionPoint().getName(); - // Iterator it = issuers.iterator(); - // List issuersTemp = new ArrayList(issuers.size()); - // while (it.hasNext()) - // { - // Enumeration e = null; - // try - // { - // e = ASN1Sequence.getInstance( - // new ASN1InputStream(((X500Principal) it.next()) - // .getEncoded()).readObject()).getObjects(); - // } - // catch (IOException ex) - // { - // throw new AnnotatedException( - // "Cannot decode CRL issuer information.", ex); - // } - // ASN1EncodableVector v = new ASN1EncodableVector(); - // while (e.hasMoreElements()) - // { - // v.add((DEREncodable) e.nextElement()); - // } - // v.add(relName); - // issuersTemp.add(new X500Principal(new DERSequence(v) - // .getDEREncoded())); - // } - // issuers.clear(); - // issuers.addAll(issuersTemp); - // } - // } - - selector.Issuers = issuers; - } - - /** - * Fetches complete CRLs according to RFC 3280. - * - * @param dp The distribution point for which the complete CRL - * @param cert The X509Certificate or - * {@link org.bouncycastle.x509.X509AttributeCertificate} for - * which the CRL should be searched. - * @param currentDate The date for which the delta CRLs must be valid. - * @param paramsPKIX The extended PKIX parameters. - * @return A Set of X509CRLs with complete - * CRLs. - * @throws Exception if an exception occurs while picking the CRLs - * or no CRLs are found. - */ - internal static ISet GetCompleteCrls( - DistributionPoint dp, - object cert, - DateTime currentDate, - PkixParameters paramsPKIX) - { - X509CrlStoreSelector crlselect = new X509CrlStoreSelector(); - try - { - ISet issuers = new HashSet(); - if (cert is X509V2AttributeCertificate) - { - issuers.Add(((X509V2AttributeCertificate)cert) - .Issuer.GetPrincipals()[0]); - } - else - { - issuers.Add(GetIssuerPrincipal(cert)); - } - PkixCertPathValidatorUtilities.GetCrlIssuersFromDistributionPoint(dp, issuers, crlselect, paramsPKIX); - } - catch (Exception e) - { - throw new Exception("Could not get issuer information from distribution point.", e); - } - - if (cert is X509Certificate) - { - crlselect.CertificateChecking = (X509Certificate)cert; - } - else if (cert is X509V2AttributeCertificate) - { - crlselect.AttrCertChecking = (IX509AttributeCertificate)cert; - } - - crlselect.CompleteCrlEnabled = true; - ISet crls = CrlUtilities.FindCrls(crlselect, paramsPKIX, currentDate); - - if (crls.IsEmpty) - { - if (cert is IX509AttributeCertificate) - { - IX509AttributeCertificate aCert = (IX509AttributeCertificate)cert; - - throw new Exception("No CRLs found for issuer \"" + aCert.Issuer.GetPrincipals()[0] + "\""); - } - else - { - X509Certificate xCert = (X509Certificate)cert; - - throw new Exception("No CRLs found for issuer \"" + xCert.IssuerDN + "\""); - } - } - - return crls; - } - - /** - * Fetches delta CRLs according to RFC 3280 section 5.2.4. - * - * @param currentDate The date for which the delta CRLs must be valid. - * @param paramsPKIX The extended PKIX parameters. - * @param completeCRL The complete CRL the delta CRL is for. - * @return A Set of X509CRLs with delta CRLs. - * @throws Exception if an exception occurs while picking the delta - * CRLs. - */ - internal static ISet GetDeltaCrls( - DateTime currentDate, - PkixParameters paramsPKIX, - X509Crl completeCRL) - { - X509CrlStoreSelector deltaSelect = new X509CrlStoreSelector(); - - // 5.2.4 (a) - try - { - IList deltaSelectIssuer = Platform.CreateArrayList(); - deltaSelectIssuer.Add(completeCRL.IssuerDN); - deltaSelect.Issuers = deltaSelectIssuer; - } - catch (IOException e) - { - throw new Exception("Cannot extract issuer from CRL.", e); - } - - BigInteger completeCRLNumber = null; - try - { - Asn1Object asn1Object = GetExtensionValue(completeCRL, X509Extensions.CrlNumber); - if (asn1Object != null) - { - completeCRLNumber = CrlNumber.GetInstance(asn1Object).PositiveValue; - } - } - catch (Exception e) - { - throw new Exception( - "CRL number extension could not be extracted from CRL.", e); - } - - // 5.2.4 (b) - byte[] idp = null; - - try - { - Asn1Object obj = GetExtensionValue(completeCRL, X509Extensions.IssuingDistributionPoint); - if (obj != null) - { - idp = obj.GetDerEncoded(); - } - } - catch (Exception e) - { - throw new Exception( - "Issuing distribution point extension value could not be read.", - e); - } - - // 5.2.4 (d) - - deltaSelect.MinCrlNumber = (completeCRLNumber == null) - ? null - : completeCRLNumber.Add(BigInteger.One); - - deltaSelect.IssuingDistributionPoint = idp; - deltaSelect.IssuingDistributionPointEnabled = true; - - // 5.2.4 (c) - deltaSelect.MaxBaseCrlNumber = completeCRLNumber; - - // find delta CRLs - ISet temp = CrlUtilities.FindCrls(deltaSelect, paramsPKIX, currentDate); - - ISet result = new HashSet(); - - foreach (X509Crl crl in temp) - { - if (isDeltaCrl(crl)) - { - result.Add(crl); - } - } - - return result; - } - - private static bool isDeltaCrl( - X509Crl crl) - { - ISet critical = crl.GetCriticalExtensionOids(); - - return critical.Contains(X509Extensions.DeltaCrlIndicator.Id); - } - - internal static ICollection FindCertificates( - X509AttrCertStoreSelector certSelect, - IList certStores) - { - ISet certs = new HashSet(); - - foreach (IX509Store certStore in certStores) - { - try - { -// certs.AddAll(certStore.GetMatches(certSelect)); - foreach (X509V2AttributeCertificate ac in certStore.GetMatches(certSelect)) - { - certs.Add(ac); - } - } - catch (Exception e) - { - throw new Exception( - "Problem while picking certificates from X.509 store.", e); - } - } - - return certs; - } - - internal static void AddAdditionalStoresFromCrlDistributionPoint( - CrlDistPoint crldp, - PkixParameters pkixParams) - { - if (crldp != null) - { - DistributionPoint[] dps = null; - try - { - dps = crldp.GetDistributionPoints(); - } - catch (Exception e) - { - throw new Exception( - "Distribution points could not be read.", e); - } - for (int i = 0; i < dps.Length; i++) - { - DistributionPointName dpn = dps[i].DistributionPointName; - // look for URIs in fullName - if (dpn != null) - { - if (dpn.PointType == DistributionPointName.FullName) - { - GeneralName[] genNames = GeneralNames.GetInstance( - dpn.Name).GetNames(); - // look for an URI - for (int j = 0; j < genNames.Length; j++) - { - if (genNames[j].TagNo == GeneralName.UniformResourceIdentifier) - { - string location = DerIA5String.GetInstance( - genNames[j].Name).GetString(); - PkixCertPathValidatorUtilities.AddAdditionalStoreFromLocation( - location, pkixParams); - } - } - } - } - } - } - } - - internal static bool ProcessCertD1i( - int index, - IList[] policyNodes, - DerObjectIdentifier pOid, - ISet pq) - { - IList policyNodeVec = policyNodes[index - 1]; - - for (int j = 0; j < policyNodeVec.Count; j++) - { - PkixPolicyNode node = (PkixPolicyNode)policyNodeVec[j]; - ISet expectedPolicies = node.ExpectedPolicies; - - if (expectedPolicies.Contains(pOid.Id)) - { - ISet childExpectedPolicies = new HashSet(); - childExpectedPolicies.Add(pOid.Id); - - PkixPolicyNode child = new PkixPolicyNode(Platform.CreateArrayList(), - index, - childExpectedPolicies, - node, - pq, - pOid.Id, - false); - node.AddChild(child); - policyNodes[index].Add(child); - - return true; - } - } - - return false; - } - - internal static void ProcessCertD1ii( - int index, - IList[] policyNodes, - DerObjectIdentifier _poid, - ISet _pq) - { - IList policyNodeVec = policyNodes[index - 1]; - - for (int j = 0; j < policyNodeVec.Count; j++) - { - PkixPolicyNode _node = (PkixPolicyNode)policyNodeVec[j]; - - if (ANY_POLICY.Equals(_node.ValidPolicy)) - { - ISet _childExpectedPolicies = new HashSet(); - _childExpectedPolicies.Add(_poid.Id); - - PkixPolicyNode _child = new PkixPolicyNode(Platform.CreateArrayList(), - index, - _childExpectedPolicies, - _node, - _pq, - _poid.Id, - false); - _node.AddChild(_child); - policyNodes[index].Add(_child); - return; - } - } - } - - /** - * Find the issuer certificates of a given certificate. - * - * @param cert - * The certificate for which an issuer should be found. - * @param pkixParams - * @return A Collection object containing the issuer - * X509Certificates. Never null. - * - * @exception Exception - * if an error occurs. - */ - internal static ICollection FindIssuerCerts( - X509Certificate cert, - PkixBuilderParameters pkixParams) - { - X509CertStoreSelector certSelect = new X509CertStoreSelector(); - ISet certs = new HashSet(); - try - { - certSelect.Subject = cert.IssuerDN; - } - catch (IOException ex) - { - throw new Exception( - "Subject criteria for certificate selector to find issuer certificate could not be set.", ex); - } - - try - { - certs.AddAll(PkixCertPathValidatorUtilities.FindCertificates(certSelect, pkixParams.GetStores())); - certs.AddAll(PkixCertPathValidatorUtilities.FindCertificates(certSelect, pkixParams.GetAdditionalStores())); - } - catch (Exception e) - { - throw new Exception("Issuer certificate cannot be searched.", e); - } - - return certs; - } - - /// - /// Extract the value of the given extension, if it exists. - /// - /// The extension object. - /// The object identifier to obtain. - /// Asn1Object - /// if the extension cannot be read. - internal static Asn1Object GetExtensionValue( - IX509Extension ext, - DerObjectIdentifier oid) - { - Asn1OctetString bytes = ext.GetExtensionValue(oid); - - if (bytes == null) - return null; - - return X509ExtensionUtilities.FromExtensionValue(bytes); - } - } -} diff --git a/bc-sharp-crypto/src/pkix/PkixCrlUtilities.cs b/bc-sharp-crypto/src/pkix/PkixCrlUtilities.cs deleted file mode 100644 index c386b8a..0000000 --- a/bc-sharp-crypto/src/pkix/PkixCrlUtilities.cs +++ /dev/null @@ -1,114 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities.Collections; -using Org.BouncyCastle.X509; -using Org.BouncyCastle.X509.Store; - -namespace Org.BouncyCastle.Pkix -{ - public class PkixCrlUtilities - { - public virtual ISet FindCrls(X509CrlStoreSelector crlselect, PkixParameters paramsPkix, DateTime currentDate) - { - ISet initialSet = new HashSet(); - - // get complete CRL(s) - try - { - initialSet.AddAll(FindCrls(crlselect, paramsPkix.GetAdditionalStores())); - initialSet.AddAll(FindCrls(crlselect, paramsPkix.GetStores())); - } - catch (Exception e) - { - throw new Exception("Exception obtaining complete CRLs.", e); - } - - ISet finalSet = new HashSet(); - DateTime validityDate = currentDate; - - if (paramsPkix.Date != null) - { - validityDate = paramsPkix.Date.Value; - } - - // based on RFC 5280 6.3.3 - foreach (X509Crl crl in initialSet) - { - if (crl.NextUpdate.Value.CompareTo(validityDate) > 0) - { - X509Certificate cert = crlselect.CertificateChecking; - - if (cert != null) - { - if (crl.ThisUpdate.CompareTo(cert.NotAfter) < 0) - { - finalSet.Add(crl); - } - } - else - { - finalSet.Add(crl); - } - } - } - - return finalSet; - } - - public virtual ISet FindCrls(X509CrlStoreSelector crlselect, PkixParameters paramsPkix) - { - ISet completeSet = new HashSet(); - - // get complete CRL(s) - try - { - completeSet.AddAll(FindCrls(crlselect, paramsPkix.GetStores())); - } - catch (Exception e) - { - throw new Exception("Exception obtaining complete CRLs.", e); - } - - return completeSet; - } - - /// - /// crl checking - /// Return a Collection of all CRLs found in the X509Store's that are - /// matching the crlSelect criteriums. - /// - /// a {@link X509CRLStoreSelector} object that will be used - /// to select the CRLs - /// a List containing only {@link org.bouncycastle.x509.X509Store - /// X509Store} objects. These are used to search for CRLs - /// a Collection of all found {@link X509CRL X509CRL} objects. May be - /// empty but never null. - /// - private ICollection FindCrls(X509CrlStoreSelector crlSelect, IList crlStores) - { - ISet crls = new HashSet(); - - Exception lastException = null; - bool foundValidStore = false; - - foreach (IX509Store store in crlStores) - { - try - { - crls.AddAll(store.GetMatches(crlSelect)); - foundValidStore = true; - } - catch (X509StoreException e) - { - lastException = new Exception("Exception searching in X.509 CRL store.", e); - } - } - - if (!foundValidStore && lastException != null) - throw lastException; - - return crls; - } - } -} diff --git a/bc-sharp-crypto/src/pkix/PkixNameConstraintValidator.cs b/bc-sharp-crypto/src/pkix/PkixNameConstraintValidator.cs deleted file mode 100644 index f4ae739..0000000 --- a/bc-sharp-crypto/src/pkix/PkixNameConstraintValidator.cs +++ /dev/null @@ -1,1939 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Pkix -{ - public class PkixNameConstraintValidator - { - private ISet excludedSubtreesDN = new HashSet(); - - private ISet excludedSubtreesDNS = new HashSet(); - - private ISet excludedSubtreesEmail = new HashSet(); - - private ISet excludedSubtreesURI = new HashSet(); - - private ISet excludedSubtreesIP = new HashSet(); - - private ISet permittedSubtreesDN; - - private ISet permittedSubtreesDNS; - - private ISet permittedSubtreesEmail; - - private ISet permittedSubtreesURI; - - private ISet permittedSubtreesIP; - - public PkixNameConstraintValidator() - { - } - - private static bool WithinDNSubtree( - Asn1Sequence dns, - Asn1Sequence subtree) - { - if (subtree.Count < 1) - { - return false; - } - - if (subtree.Count > dns.Count) - { - return false; - } - - for (int j = subtree.Count - 1; j >= 0; j--) - { - if (!(subtree[j].Equals(dns[j]))) - { - return false; - } - } - - return true; - } - - public void CheckPermittedDN(Asn1Sequence dns) - //throws PkixNameConstraintValidatorException - { - CheckPermittedDN(permittedSubtreesDN, dns); - } - - public void CheckExcludedDN(Asn1Sequence dns) - //throws PkixNameConstraintValidatorException - { - CheckExcludedDN(excludedSubtreesDN, dns); - } - - private void CheckPermittedDN(ISet permitted, Asn1Sequence dns) - //throws PkixNameConstraintValidatorException - { - if (permitted == null) - { - return; - } - - if ((permitted.Count == 0) && dns.Count == 0) - { - return; - } - - IEnumerator it = permitted.GetEnumerator(); - - while (it.MoveNext()) - { - Asn1Sequence subtree = (Asn1Sequence)it.Current; - - if (WithinDNSubtree(dns, subtree)) - { - return; - } - } - - throw new PkixNameConstraintValidatorException( - "Subject distinguished name is not from a permitted subtree"); - } - - private void CheckExcludedDN(ISet excluded, Asn1Sequence dns) - //throws PkixNameConstraintValidatorException - { - if (excluded.IsEmpty) - { - return; - } - - IEnumerator it = excluded.GetEnumerator(); - - while (it.MoveNext()) - { - Asn1Sequence subtree = (Asn1Sequence)it.Current; - - if (WithinDNSubtree(dns, subtree)) - { - throw new PkixNameConstraintValidatorException( - "Subject distinguished name is from an excluded subtree"); - } - } - } - - private ISet IntersectDN(ISet permitted, ISet dns) - { - ISet intersect = new HashSet(); - for (IEnumerator it = dns.GetEnumerator(); it.MoveNext(); ) - { - Asn1Sequence dn = Asn1Sequence.GetInstance(((GeneralSubtree)it - .Current).Base.Name.ToAsn1Object()); - if (permitted == null) - { - if (dn != null) - { - intersect.Add(dn); - } - } - else - { - IEnumerator _iter = permitted.GetEnumerator(); - while (_iter.MoveNext()) - { - Asn1Sequence subtree = (Asn1Sequence)_iter.Current; - - if (WithinDNSubtree(dn, subtree)) - { - intersect.Add(dn); - } - else if (WithinDNSubtree(subtree, dn)) - { - intersect.Add(subtree); - } - } - } - } - return intersect; - } - - private ISet UnionDN(ISet excluded, Asn1Sequence dn) - { - if (excluded.IsEmpty) - { - if (dn == null) - { - return excluded; - } - excluded.Add(dn); - - return excluded; - } - else - { - ISet intersect = new HashSet(); - - IEnumerator it = excluded.GetEnumerator(); - while (it.MoveNext()) - { - Asn1Sequence subtree = (Asn1Sequence)it.Current; - - if (WithinDNSubtree(dn, subtree)) - { - intersect.Add(subtree); - } - else if (WithinDNSubtree(subtree, dn)) - { - intersect.Add(dn); - } - else - { - intersect.Add(subtree); - intersect.Add(dn); - } - } - - return intersect; - } - } - - private ISet IntersectEmail(ISet permitted, ISet emails) - { - ISet intersect = new HashSet(); - for (IEnumerator it = emails.GetEnumerator(); it.MoveNext(); ) - { - String email = ExtractNameAsString(((GeneralSubtree)it.Current) - .Base); - - if (permitted == null) - { - if (email != null) - { - intersect.Add(email); - } - } - else - { - IEnumerator it2 = permitted.GetEnumerator(); - while (it2.MoveNext()) - { - String _permitted = (String)it2.Current; - - intersectEmail(email, _permitted, intersect); - } - } - } - return intersect; - } - - private ISet UnionEmail(ISet excluded, String email) - { - if (excluded.IsEmpty) - { - if (email == null) - { - return excluded; - } - excluded.Add(email); - return excluded; - } - else - { - ISet union = new HashSet(); - - IEnumerator it = excluded.GetEnumerator(); - while (it.MoveNext()) - { - String _excluded = (String)it.Current; - - unionEmail(_excluded, email, union); - } - - return union; - } - } - - /** - * Returns the intersection of the permitted IP ranges in - * permitted with ip. - * - * @param permitted A Set of permitted IP addresses with - * their subnet mask as byte arrays. - * @param ips The IP address with its subnet mask. - * @return The Set of permitted IP ranges intersected with - * ip. - */ - private ISet IntersectIP(ISet permitted, ISet ips) - { - ISet intersect = new HashSet(); - for (IEnumerator it = ips.GetEnumerator(); it.MoveNext(); ) - { - byte[] ip = Asn1OctetString.GetInstance( - ((GeneralSubtree)it.Current).Base.Name).GetOctets(); - if (permitted == null) - { - if (ip != null) - { - intersect.Add(ip); - } - } - else - { - IEnumerator it2 = permitted.GetEnumerator(); - while (it2.MoveNext()) - { - byte[] _permitted = (byte[])it2.Current; - intersect.AddAll(IntersectIPRange(_permitted, ip)); - } - } - } - return intersect; - } - - /** - * Returns the union of the excluded IP ranges in excluded - * with ip. - * - * @param excluded A Set of excluded IP addresses with their - * subnet mask as byte arrays. - * @param ip The IP address with its subnet mask. - * @return The Set of excluded IP ranges unified with - * ip as byte arrays. - */ - private ISet UnionIP(ISet excluded, byte[] ip) - { - if (excluded.IsEmpty) - { - if (ip == null) - { - return excluded; - } - excluded.Add(ip); - - return excluded; - } - else - { - ISet union = new HashSet(); - - IEnumerator it = excluded.GetEnumerator(); - while (it.MoveNext()) - { - byte[] _excluded = (byte[])it.Current; - union.AddAll(UnionIPRange(_excluded, ip)); - } - - return union; - } - } - - /** - * Calculates the union if two IP ranges. - * - * @param ipWithSubmask1 The first IP address with its subnet mask. - * @param ipWithSubmask2 The second IP address with its subnet mask. - * @return A Set with the union of both addresses. - */ - private ISet UnionIPRange(byte[] ipWithSubmask1, byte[] ipWithSubmask2) - { - ISet set = new HashSet(); - - // difficult, adding always all IPs is not wrong - if (Org.BouncyCastle.Utilities.Arrays.AreEqual(ipWithSubmask1, ipWithSubmask2)) - { - set.Add(ipWithSubmask1); - } - else - { - set.Add(ipWithSubmask1); - set.Add(ipWithSubmask2); - } - return set; - } - - /** - * Calculates the interesction if two IP ranges. - * - * @param ipWithSubmask1 The first IP address with its subnet mask. - * @param ipWithSubmask2 The second IP address with its subnet mask. - * @return A Set with the single IP address with its subnet - * mask as a byte array or an empty Set. - */ - private ISet IntersectIPRange(byte[] ipWithSubmask1, byte[] ipWithSubmask2) - { - if (ipWithSubmask1.Length != ipWithSubmask2.Length) - { - //Collections.EMPTY_SET; - return new HashSet(); - } - - byte[][] temp = ExtractIPsAndSubnetMasks(ipWithSubmask1, ipWithSubmask2); - byte[] ip1 = temp[0]; - byte[] subnetmask1 = temp[1]; - byte[] ip2 = temp[2]; - byte[] subnetmask2 = temp[3]; - - byte[][] minMax = MinMaxIPs(ip1, subnetmask1, ip2, subnetmask2); - byte[] min; - byte[] max; - max = Min(minMax[1], minMax[3]); - min = Max(minMax[0], minMax[2]); - - // minimum IP address must be bigger than max - if (CompareTo(min, max) == 1) - { - //return Collections.EMPTY_SET; - return new HashSet(); - } - // OR keeps all significant bits - byte[] ip = Or(minMax[0], minMax[2]); - byte[] subnetmask = Or(subnetmask1, subnetmask2); - - //return new HashSet( ICollectionsingleton(IpWithSubnetMask(ip, subnetmask)); - ISet hs = new HashSet(); - hs.Add(IpWithSubnetMask(ip, subnetmask)); - - return hs; - } - - /** - * Concatenates the IP address with its subnet mask. - * - * @param ip The IP address. - * @param subnetMask Its subnet mask. - * @return The concatenated IP address with its subnet mask. - */ - private byte[] IpWithSubnetMask(byte[] ip, byte[] subnetMask) - { - int ipLength = ip.Length; - byte[] temp = new byte[ipLength * 2]; - Array.Copy(ip, 0, temp, 0, ipLength); - Array.Copy(subnetMask, 0, temp, ipLength, ipLength); - return temp; - } - - /** - * Splits the IP addresses and their subnet mask. - * - * @param ipWithSubmask1 The first IP address with the subnet mask. - * @param ipWithSubmask2 The second IP address with the subnet mask. - * @return An array with two elements. Each element contains the IP address - * and the subnet mask in this order. - */ - private byte[][] ExtractIPsAndSubnetMasks( - byte[] ipWithSubmask1, - byte[] ipWithSubmask2) - { - int ipLength = ipWithSubmask1.Length / 2; - byte[] ip1 = new byte[ipLength]; - byte[] subnetmask1 = new byte[ipLength]; - Array.Copy(ipWithSubmask1, 0, ip1, 0, ipLength); - Array.Copy(ipWithSubmask1, ipLength, subnetmask1, 0, ipLength); - - byte[] ip2 = new byte[ipLength]; - byte[] subnetmask2 = new byte[ipLength]; - Array.Copy(ipWithSubmask2, 0, ip2, 0, ipLength); - Array.Copy(ipWithSubmask2, ipLength, subnetmask2, 0, ipLength); - return new byte[][] - {ip1, subnetmask1, ip2, subnetmask2}; - } - - /** - * Based on the two IP addresses and their subnet masks the IP range is - * computed for each IP address - subnet mask pair and returned as the - * minimum IP address and the maximum address of the range. - * - * @param ip1 The first IP address. - * @param subnetmask1 The subnet mask of the first IP address. - * @param ip2 The second IP address. - * @param subnetmask2 The subnet mask of the second IP address. - * @return A array with two elements. The first/second element contains the - * min and max IP address of the first/second IP address and its - * subnet mask. - */ - private byte[][] MinMaxIPs( - byte[] ip1, - byte[] subnetmask1, - byte[] ip2, - byte[] subnetmask2) - { - int ipLength = ip1.Length; - byte[] min1 = new byte[ipLength]; - byte[] max1 = new byte[ipLength]; - - byte[] min2 = new byte[ipLength]; - byte[] max2 = new byte[ipLength]; - - for (int i = 0; i < ipLength; i++) - { - min1[i] = (byte)(ip1[i] & subnetmask1[i]); - max1[i] = (byte)(ip1[i] & subnetmask1[i] | ~subnetmask1[i]); - - min2[i] = (byte)(ip2[i] & subnetmask2[i]); - max2[i] = (byte)(ip2[i] & subnetmask2[i] | ~subnetmask2[i]); - } - - return new byte[][] { min1, max1, min2, max2 }; - } - - private void CheckPermittedEmail(ISet permitted, String email) - //throws PkixNameConstraintValidatorException - { - if (permitted == null) - { - return; - } - - IEnumerator it = permitted.GetEnumerator(); - - while (it.MoveNext()) - { - String str = ((String)it.Current); - - if (EmailIsConstrained(email, str)) - { - return; - } - } - - if (email.Length == 0 && permitted.Count == 0) - { - return; - } - - throw new PkixNameConstraintValidatorException( - "Subject email address is not from a permitted subtree."); - } - - private void CheckExcludedEmail(ISet excluded, String email) - //throws PkixNameConstraintValidatorException - { - if (excluded.IsEmpty) - { - return; - } - - IEnumerator it = excluded.GetEnumerator(); - - while (it.MoveNext()) - { - String str = (String)it.Current; - - if (EmailIsConstrained(email, str)) - { - throw new PkixNameConstraintValidatorException( - "Email address is from an excluded subtree."); - } - } - } - - /** - * Checks if the IP ip is included in the permitted ISet - * permitted. - * - * @param permitted A Set of permitted IP addresses with - * their subnet mask as byte arrays. - * @param ip The IP address. - * @throws PkixNameConstraintValidatorException - * if the IP is not permitted. - */ - private void CheckPermittedIP(ISet permitted, byte[] ip) - //throws PkixNameConstraintValidatorException - { - if (permitted == null) - { - return; - } - - IEnumerator it = permitted.GetEnumerator(); - - while (it.MoveNext()) - { - byte[] ipWithSubnet = (byte[])it.Current; - - if (IsIPConstrained(ip, ipWithSubnet)) - { - return; - } - } - if (ip.Length == 0 && permitted.Count == 0) - { - return; - } - throw new PkixNameConstraintValidatorException( - "IP is not from a permitted subtree."); - } - - /** - * Checks if the IP ip is included in the excluded ISet - * excluded. - * - * @param excluded A Set of excluded IP addresses with their - * subnet mask as byte arrays. - * @param ip The IP address. - * @throws PkixNameConstraintValidatorException - * if the IP is excluded. - */ - private void checkExcludedIP(ISet excluded, byte[] ip) - //throws PkixNameConstraintValidatorException - { - if (excluded.IsEmpty) - { - return; - } - - IEnumerator it = excluded.GetEnumerator(); - - while (it.MoveNext()) - { - byte[] ipWithSubnet = (byte[])it.Current; - - if (IsIPConstrained(ip, ipWithSubnet)) - { - throw new PkixNameConstraintValidatorException( - "IP is from an excluded subtree."); - } - } - } - - /** - * Checks if the IP address ip is constrained by - * constraint. - * - * @param ip The IP address. - * @param constraint The constraint. This is an IP address concatenated with - * its subnetmask. - * @return true if constrained, false - * otherwise. - */ - private bool IsIPConstrained(byte[] ip, byte[] constraint) - { - int ipLength = ip.Length; - - if (ipLength != (constraint.Length / 2)) - { - return false; - } - - byte[] subnetMask = new byte[ipLength]; - Array.Copy(constraint, ipLength, subnetMask, 0, ipLength); - - byte[] permittedSubnetAddress = new byte[ipLength]; - - byte[] ipSubnetAddress = new byte[ipLength]; - - // the resulting IP address by applying the subnet mask - for (int i = 0; i < ipLength; i++) - { - permittedSubnetAddress[i] = (byte)(constraint[i] & subnetMask[i]); - ipSubnetAddress[i] = (byte)(ip[i] & subnetMask[i]); - } - - return Org.BouncyCastle.Utilities.Arrays.AreEqual(permittedSubnetAddress, ipSubnetAddress); - } - - private bool EmailIsConstrained(String email, String constraint) - { - String sub = email.Substring(email.IndexOf('@') + 1); - // a particular mailbox - if (constraint.IndexOf('@') != -1) - { - if (Platform.ToUpperInvariant(email).Equals(Platform.ToUpperInvariant(constraint))) - { - return true; - } - } - // on particular host - else if (!(constraint[0].Equals('.'))) - { - if (Platform.ToUpperInvariant(sub).Equals(Platform.ToUpperInvariant(constraint))) - { - return true; - } - } - // address in sub domain - else if (WithinDomain(sub, constraint)) - { - return true; - } - return false; - } - - private bool WithinDomain(String testDomain, String domain) - { - String tempDomain = domain; - if (Platform.StartsWith(tempDomain, ".")) - { - tempDomain = tempDomain.Substring(1); - } - String[] domainParts = tempDomain.Split('.'); // Strings.split(tempDomain, '.'); - String[] testDomainParts = testDomain.Split('.'); // Strings.split(testDomain, '.'); - - // must have at least one subdomain - if (testDomainParts.Length <= domainParts.Length) - { - return false; - } - - int d = testDomainParts.Length - domainParts.Length; - for (int i = -1; i < domainParts.Length; i++) - { - if (i == -1) - { - if (testDomainParts[i + d].Equals("")) - { - return false; - } - } - else if (!Platform.EqualsIgnoreCase(testDomainParts[i + d], domainParts[i])) - { - return false; - } - } - return true; - } - - private void CheckPermittedDNS(ISet permitted, String dns) - //throws PkixNameConstraintValidatorException - { - if (permitted == null) - { - return; - } - - IEnumerator it = permitted.GetEnumerator(); - - while (it.MoveNext()) - { - String str = ((String)it.Current); - - // is sub domain - if (WithinDomain(dns, str) - || Platform.ToUpperInvariant(dns).Equals(Platform.ToUpperInvariant(str))) - { - return; - } - } - if (dns.Length == 0 && permitted.Count == 0) - { - return; - } - throw new PkixNameConstraintValidatorException( - "DNS is not from a permitted subtree."); - } - - private void checkExcludedDNS(ISet excluded, String dns) - // throws PkixNameConstraintValidatorException - { - if (excluded.IsEmpty) - { - return; - } - - IEnumerator it = excluded.GetEnumerator(); - - while (it.MoveNext()) - { - String str = ((String)it.Current); - - // is sub domain or the same - if (WithinDomain(dns, str) || Platform.EqualsIgnoreCase(dns, str)) - { - throw new PkixNameConstraintValidatorException( - "DNS is from an excluded subtree."); - } - } - } - - /** - * The common part of email1 and email2 is - * added to the union union. If email1 and - * email2 have nothing in common they are added both. - * - * @param email1 Email address constraint 1. - * @param email2 Email address constraint 2. - * @param union The union. - */ - private void unionEmail(String email1, String email2, ISet union) - { - // email1 is a particular address - if (email1.IndexOf('@') != -1) - { - String _sub = email1.Substring(email1.IndexOf('@') + 1); - // both are a particular mailbox - if (email2.IndexOf('@') != -1) - { - if (Platform.EqualsIgnoreCase(email1, email2)) - { - union.Add(email1); - } - else - { - union.Add(email1); - union.Add(email2); - } - } - // email2 specifies a domain - else if (Platform.StartsWith(email2, ".")) - { - if (WithinDomain(_sub, email2)) - { - union.Add(email2); - } - else - { - union.Add(email1); - union.Add(email2); - } - } - // email2 specifies a particular host - else - { - if (Platform.EqualsIgnoreCase(_sub, email2)) - { - union.Add(email2); - } - else - { - union.Add(email1); - union.Add(email2); - } - } - } - // email1 specifies a domain - else if (Platform.StartsWith(email1, ".")) - { - if (email2.IndexOf('@') != -1) - { - String _sub = email2.Substring(email1.IndexOf('@') + 1); - if (WithinDomain(_sub, email1)) - { - union.Add(email1); - } - else - { - union.Add(email1); - union.Add(email2); - } - } - // email2 specifies a domain - else if (Platform.StartsWith(email2, ".")) - { - if (WithinDomain(email1, email2) || Platform.EqualsIgnoreCase(email1, email2)) - { - union.Add(email2); - } - else if (WithinDomain(email2, email1)) - { - union.Add(email1); - } - else - { - union.Add(email1); - union.Add(email2); - } - } - else - { - if (WithinDomain(email2, email1)) - { - union.Add(email1); - } - else - { - union.Add(email1); - union.Add(email2); - } - } - } - // email specifies a host - else - { - if (email2.IndexOf('@') != -1) - { - String _sub = email2.Substring(email1.IndexOf('@') + 1); - if (Platform.EqualsIgnoreCase(_sub, email1)) - { - union.Add(email1); - } - else - { - union.Add(email1); - union.Add(email2); - } - } - // email2 specifies a domain - else if (Platform.StartsWith(email2, ".")) - { - if (WithinDomain(email1, email2)) - { - union.Add(email2); - } - else - { - union.Add(email1); - union.Add(email2); - } - } - // email2 specifies a particular host - else - { - if (Platform.EqualsIgnoreCase(email1, email2)) - { - union.Add(email1); - } - else - { - union.Add(email1); - union.Add(email2); - } - } - } - } - - private void unionURI(String email1, String email2, ISet union) - { - // email1 is a particular address - if (email1.IndexOf('@') != -1) - { - String _sub = email1.Substring(email1.IndexOf('@') + 1); - // both are a particular mailbox - if (email2.IndexOf('@') != -1) - { - if (Platform.EqualsIgnoreCase(email1, email2)) - { - union.Add(email1); - } - else - { - union.Add(email1); - union.Add(email2); - } - } - // email2 specifies a domain - else if (Platform.StartsWith(email2, ".")) - { - if (WithinDomain(_sub, email2)) - { - union.Add(email2); - } - else - { - union.Add(email1); - union.Add(email2); - } - } - // email2 specifies a particular host - else - { - if (Platform.EqualsIgnoreCase(_sub, email2)) - { - union.Add(email2); - } - else - { - union.Add(email1); - union.Add(email2); - - } - } - } - // email1 specifies a domain - else if (Platform.StartsWith(email1, ".")) - { - if (email2.IndexOf('@') != -1) - { - String _sub = email2.Substring(email1.IndexOf('@') + 1); - if (WithinDomain(_sub, email1)) - { - union.Add(email1); - } - else - { - union.Add(email1); - union.Add(email2); - } - } - // email2 specifies a domain - else if (Platform.StartsWith(email2, ".")) - { - if (WithinDomain(email1, email2) || Platform.EqualsIgnoreCase(email1, email2)) - { - union.Add(email2); - } - else if (WithinDomain(email2, email1)) - { - union.Add(email1); - } - else - { - union.Add(email1); - union.Add(email2); - } - } - else - { - if (WithinDomain(email2, email1)) - { - union.Add(email1); - } - else - { - union.Add(email1); - union.Add(email2); - } - } - } - // email specifies a host - else - { - if (email2.IndexOf('@') != -1) - { - String _sub = email2.Substring(email1.IndexOf('@') + 1); - if (Platform.EqualsIgnoreCase(_sub, email1)) - { - union.Add(email1); - } - else - { - union.Add(email1); - union.Add(email2); - } - } - // email2 specifies a domain - else if (Platform.StartsWith(email2, ".")) - { - if (WithinDomain(email1, email2)) - { - union.Add(email2); - } - else - { - union.Add(email1); - union.Add(email2); - } - } - // email2 specifies a particular host - else - { - if (Platform.EqualsIgnoreCase(email1, email2)) - { - union.Add(email1); - } - else - { - union.Add(email1); - union.Add(email2); - } - } - } - } - - private ISet intersectDNS(ISet permitted, ISet dnss) - { - ISet intersect = new HashSet(); - for (IEnumerator it = dnss.GetEnumerator(); it.MoveNext(); ) - { - String dns = ExtractNameAsString(((GeneralSubtree)it.Current) - .Base); - if (permitted == null) - { - if (dns != null) - { - intersect.Add(dns); - } - } - else - { - IEnumerator _iter = permitted.GetEnumerator(); - while (_iter.MoveNext()) - { - String _permitted = (String)_iter.Current; - - if (WithinDomain(_permitted, dns)) - { - intersect.Add(_permitted); - } - else if (WithinDomain(dns, _permitted)) - { - intersect.Add(dns); - } - } - } - } - - return intersect; - } - - protected ISet unionDNS(ISet excluded, String dns) - { - if (excluded.IsEmpty) - { - if (dns == null) - { - return excluded; - } - excluded.Add(dns); - - return excluded; - } - else - { - ISet union = new HashSet(); - - IEnumerator _iter = excluded.GetEnumerator(); - while (_iter.MoveNext()) - { - String _permitted = (String)_iter.Current; - - if (WithinDomain(_permitted, dns)) - { - union.Add(dns); - } - else if (WithinDomain(dns, _permitted)) - { - union.Add(_permitted); - } - else - { - union.Add(_permitted); - union.Add(dns); - } - } - - return union; - } - } - - /** - * The most restricting part from email1 and - * email2 is added to the intersection intersect. - * - * @param email1 Email address constraint 1. - * @param email2 Email address constraint 2. - * @param intersect The intersection. - */ - private void intersectEmail(String email1, String email2, ISet intersect) - { - // email1 is a particular address - if (email1.IndexOf('@') != -1) - { - String _sub = email1.Substring(email1.IndexOf('@') + 1); - // both are a particular mailbox - if (email2.IndexOf('@') != -1) - { - if (Platform.EqualsIgnoreCase(email1, email2)) - { - intersect.Add(email1); - } - } - // email2 specifies a domain - else if (Platform.StartsWith(email2, ".")) - { - if (WithinDomain(_sub, email2)) - { - intersect.Add(email1); - } - } - // email2 specifies a particular host - else - { - if (Platform.EqualsIgnoreCase(_sub, email2)) - { - intersect.Add(email1); - } - } - } - // email specifies a domain - else if (Platform.StartsWith(email1, ".")) - { - if (email2.IndexOf('@') != -1) - { - String _sub = email2.Substring(email1.IndexOf('@') + 1); - if (WithinDomain(_sub, email1)) - { - intersect.Add(email2); - } - } - // email2 specifies a domain - else if (Platform.StartsWith(email2, ".")) - { - if (WithinDomain(email1, email2) || Platform.EqualsIgnoreCase(email1, email2)) - { - intersect.Add(email1); - } - else if (WithinDomain(email2, email1)) - { - intersect.Add(email2); - } - } - else - { - if (WithinDomain(email2, email1)) - { - intersect.Add(email2); - } - } - } - // email1 specifies a host - else - { - if (email2.IndexOf('@') != -1) - { - String _sub = email2.Substring(email2.IndexOf('@') + 1); - if (Platform.EqualsIgnoreCase(_sub, email1)) - { - intersect.Add(email2); - } - } - // email2 specifies a domain - else if (Platform.StartsWith(email2, ".")) - { - if (WithinDomain(email1, email2)) - { - intersect.Add(email1); - } - } - // email2 specifies a particular host - else - { - if (Platform.EqualsIgnoreCase(email1, email2)) - { - intersect.Add(email1); - } - } - } - } - - private void checkExcludedURI(ISet excluded, String uri) - // throws PkixNameConstraintValidatorException - { - if (excluded.IsEmpty) - { - return; - } - - IEnumerator it = excluded.GetEnumerator(); - - while (it.MoveNext()) - { - String str = ((String)it.Current); - - if (IsUriConstrained(uri, str)) - { - throw new PkixNameConstraintValidatorException( - "URI is from an excluded subtree."); - } - } - } - - private ISet intersectURI(ISet permitted, ISet uris) - { - ISet intersect = new HashSet(); - for (IEnumerator it = uris.GetEnumerator(); it.MoveNext(); ) - { - String uri = ExtractNameAsString(((GeneralSubtree)it.Current) - .Base); - if (permitted == null) - { - if (uri != null) - { - intersect.Add(uri); - } - } - else - { - IEnumerator _iter = permitted.GetEnumerator(); - while (_iter.MoveNext()) - { - String _permitted = (String)_iter.Current; - intersectURI(_permitted, uri, intersect); - } - } - } - return intersect; - } - - private ISet unionURI(ISet excluded, String uri) - { - if (excluded.IsEmpty) - { - if (uri == null) - { - return excluded; - } - excluded.Add(uri); - - return excluded; - } - else - { - ISet union = new HashSet(); - - IEnumerator _iter = excluded.GetEnumerator(); - while (_iter.MoveNext()) - { - String _excluded = (String)_iter.Current; - - unionURI(_excluded, uri, union); - } - - return union; - } - } - - private void intersectURI(String email1, String email2, ISet intersect) - { - // email1 is a particular address - if (email1.IndexOf('@') != -1) - { - String _sub = email1.Substring(email1.IndexOf('@') + 1); - // both are a particular mailbox - if (email2.IndexOf('@') != -1) - { - if (Platform.EqualsIgnoreCase(email1, email2)) - { - intersect.Add(email1); - } - } - // email2 specifies a domain - else if (Platform.StartsWith(email2, ".")) - { - if (WithinDomain(_sub, email2)) - { - intersect.Add(email1); - } - } - // email2 specifies a particular host - else - { - if (Platform.EqualsIgnoreCase(_sub, email2)) - { - intersect.Add(email1); - } - } - } - // email specifies a domain - else if (Platform.StartsWith(email1, ".")) - { - if (email2.IndexOf('@') != -1) - { - String _sub = email2.Substring(email1.IndexOf('@') + 1); - if (WithinDomain(_sub, email1)) - { - intersect.Add(email2); - } - } - // email2 specifies a domain - else if (Platform.StartsWith(email2, ".")) - { - if (WithinDomain(email1, email2) || Platform.EqualsIgnoreCase(email1, email2)) - { - intersect.Add(email1); - } - else if (WithinDomain(email2, email1)) - { - intersect.Add(email2); - } - } - else - { - if (WithinDomain(email2, email1)) - { - intersect.Add(email2); - } - } - } - // email1 specifies a host - else - { - if (email2.IndexOf('@') != -1) - { - String _sub = email2.Substring(email2.IndexOf('@') + 1); - if (Platform.EqualsIgnoreCase(_sub, email1)) - { - intersect.Add(email2); - } - } - // email2 specifies a domain - else if (Platform.StartsWith(email2, ".")) - { - if (WithinDomain(email1, email2)) - { - intersect.Add(email1); - } - } - // email2 specifies a particular host - else - { - if (Platform.EqualsIgnoreCase(email1, email2)) - { - intersect.Add(email1); - } - } - } - } - - private void CheckPermittedURI(ISet permitted, String uri) - // throws PkixNameConstraintValidatorException - { - if (permitted == null) - { - return; - } - - IEnumerator it = permitted.GetEnumerator(); - - while (it.MoveNext()) - { - String str = ((String)it.Current); - - if (IsUriConstrained(uri, str)) - { - return; - } - } - if (uri.Length == 0 && permitted.Count == 0) - { - return; - } - throw new PkixNameConstraintValidatorException( - "URI is not from a permitted subtree."); - } - - private bool IsUriConstrained(String uri, String constraint) - { - String host = ExtractHostFromURL(uri); - // a host - if (!Platform.StartsWith(constraint, ".")) - { - if (Platform.EqualsIgnoreCase(host, constraint)) - { - return true; - } - } - - // in sub domain or domain - else if (WithinDomain(host, constraint)) - { - return true; - } - - return false; - } - - private static String ExtractHostFromURL(String url) - { - // see RFC 1738 - // remove ':' after protocol, e.g. http: - String sub = url.Substring(url.IndexOf(':') + 1); - // extract host from Common Internet Scheme Syntax, e.g. http:// - int idxOfSlashes = Platform.IndexOf(sub, "//"); - if (idxOfSlashes != -1) - { - sub = sub.Substring(idxOfSlashes + 2); - } - // first remove port, e.g. http://test.com:21 - if (sub.LastIndexOf(':') != -1) - { - sub = sub.Substring(0, sub.LastIndexOf(':')); - } - // remove user and password, e.g. http://john:password@test.com - sub = sub.Substring(sub.IndexOf(':') + 1); - sub = sub.Substring(sub.IndexOf('@') + 1); - // remove local parts, e.g. http://test.com/bla - if (sub.IndexOf('/') != -1) - { - sub = sub.Substring(0, sub.IndexOf('/')); - } - return sub; - } - - /** - * Checks if the given GeneralName is in the permitted ISet. - * - * @param name The GeneralName - * @throws PkixNameConstraintValidatorException - * If the name - */ - public void checkPermitted(GeneralName name) - // throws PkixNameConstraintValidatorException - { - switch (name.TagNo) - { - case 1: - CheckPermittedEmail(permittedSubtreesEmail, - ExtractNameAsString(name)); - break; - case 2: - CheckPermittedDNS(permittedSubtreesDNS, DerIA5String.GetInstance( - name.Name).GetString()); - break; - case 4: - CheckPermittedDN(Asn1Sequence.GetInstance(name.Name.ToAsn1Object())); - break; - case 6: - CheckPermittedURI(permittedSubtreesURI, DerIA5String.GetInstance( - name.Name).GetString()); - break; - case 7: - byte[] ip = Asn1OctetString.GetInstance(name.Name).GetOctets(); - - CheckPermittedIP(permittedSubtreesIP, ip); - break; - } - } - - /** - * Check if the given GeneralName is contained in the excluded ISet. - * - * @param name The GeneralName. - * @throws PkixNameConstraintValidatorException - * If the name is - * excluded. - */ - public void checkExcluded(GeneralName name) - // throws PkixNameConstraintValidatorException - { - switch (name.TagNo) - { - case 1: - CheckExcludedEmail(excludedSubtreesEmail, ExtractNameAsString(name)); - break; - case 2: - checkExcludedDNS(excludedSubtreesDNS, DerIA5String.GetInstance( - name.Name).GetString()); - break; - case 4: - CheckExcludedDN(Asn1Sequence.GetInstance(name.Name.ToAsn1Object())); - break; - case 6: - checkExcludedURI(excludedSubtreesURI, DerIA5String.GetInstance( - name.Name).GetString()); - break; - case 7: - byte[] ip = Asn1OctetString.GetInstance(name.Name).GetOctets(); - - checkExcludedIP(excludedSubtreesIP, ip); - break; - } - } - - /** - * Updates the permitted ISet of these name constraints with the intersection - * with the given subtree. - * - * @param permitted The permitted subtrees - */ - - public void IntersectPermittedSubtree(Asn1Sequence permitted) - { - IDictionary subtreesMap = Platform.CreateHashtable(); - - // group in ISets in a map ordered by tag no. - for (IEnumerator e = permitted.GetEnumerator(); e.MoveNext(); ) - { - GeneralSubtree subtree = GeneralSubtree.GetInstance(e.Current); - - int tagNo = subtree.Base.TagNo; - if (subtreesMap[tagNo] == null) - { - subtreesMap[tagNo] = new HashSet(); - } - - ((ISet)subtreesMap[tagNo]).Add(subtree); - } - - for (IEnumerator it = subtreesMap.GetEnumerator(); it.MoveNext(); ) - { - DictionaryEntry entry = (DictionaryEntry)it.Current; - - // go through all subtree groups - switch ((int)entry.Key ) - { - case 1: - permittedSubtreesEmail = IntersectEmail(permittedSubtreesEmail, - (ISet)entry.Value); - break; - case 2: - permittedSubtreesDNS = intersectDNS(permittedSubtreesDNS, - (ISet)entry.Value); - break; - case 4: - permittedSubtreesDN = IntersectDN(permittedSubtreesDN, - (ISet)entry.Value); - break; - case 6: - permittedSubtreesURI = intersectURI(permittedSubtreesURI, - (ISet)entry.Value); - break; - case 7: - permittedSubtreesIP = IntersectIP(permittedSubtreesIP, - (ISet)entry.Value); - break; - } - } - } - - private String ExtractNameAsString(GeneralName name) - { - return DerIA5String.GetInstance(name.Name).GetString(); - } - - public void IntersectEmptyPermittedSubtree(int nameType) - { - switch (nameType) - { - case 1: - permittedSubtreesEmail = new HashSet(); - break; - case 2: - permittedSubtreesDNS = new HashSet(); - break; - case 4: - permittedSubtreesDN = new HashSet(); - break; - case 6: - permittedSubtreesURI = new HashSet(); - break; - case 7: - permittedSubtreesIP = new HashSet(); - break; - } - } - - /** - * Adds a subtree to the excluded ISet of these name constraints. - * - * @param subtree A subtree with an excluded GeneralName. - */ - public void AddExcludedSubtree(GeneralSubtree subtree) - { - GeneralName subTreeBase = subtree.Base; - - switch (subTreeBase.TagNo) - { - case 1: - excludedSubtreesEmail = UnionEmail(excludedSubtreesEmail, - ExtractNameAsString(subTreeBase)); - break; - case 2: - excludedSubtreesDNS = unionDNS(excludedSubtreesDNS, - ExtractNameAsString(subTreeBase)); - break; - case 4: - excludedSubtreesDN = UnionDN(excludedSubtreesDN, - (Asn1Sequence)subTreeBase.Name.ToAsn1Object()); - break; - case 6: - excludedSubtreesURI = unionURI(excludedSubtreesURI, - ExtractNameAsString(subTreeBase)); - break; - case 7: - excludedSubtreesIP = UnionIP(excludedSubtreesIP, Asn1OctetString - .GetInstance(subTreeBase.Name).GetOctets()); - break; - } - } - - /** - * Returns the maximum IP address. - * - * @param ip1 The first IP address. - * @param ip2 The second IP address. - * @return The maximum IP address. - */ - private static byte[] Max(byte[] ip1, byte[] ip2) - { - for (int i = 0; i < ip1.Length; i++) - { - if ((ip1[i] & 0xFFFF) > (ip2[i] & 0xFFFF)) - { - return ip1; - } - } - return ip2; - } - - /** - * Returns the minimum IP address. - * - * @param ip1 The first IP address. - * @param ip2 The second IP address. - * @return The minimum IP address. - */ - private static byte[] Min(byte[] ip1, byte[] ip2) - { - for (int i = 0; i < ip1.Length; i++) - { - if ((ip1[i] & 0xFFFF) < (ip2[i] & 0xFFFF)) - { - return ip1; - } - } - return ip2; - } - - /** - * Compares IP address ip1 with ip2. If ip1 - * is equal to ip2 0 is returned. If ip1 is bigger 1 is returned, -1 - * otherwise. - * - * @param ip1 The first IP address. - * @param ip2 The second IP address. - * @return 0 if ip1 is equal to ip2, 1 if ip1 is bigger, -1 otherwise. - */ - private static int CompareTo(byte[] ip1, byte[] ip2) - { - if (Org.BouncyCastle.Utilities.Arrays.AreEqual(ip1, ip2)) - { - return 0; - } - if (Org.BouncyCastle.Utilities.Arrays.AreEqual(Max(ip1, ip2), ip1)) - { - return 1; - } - return -1; - } - - /** - * Returns the logical OR of the IP addresses ip1 and - * ip2. - * - * @param ip1 The first IP address. - * @param ip2 The second IP address. - * @return The OR of ip1 and ip2. - */ - private static byte[] Or(byte[] ip1, byte[] ip2) - { - byte[] temp = new byte[ip1.Length]; - for (int i = 0; i < ip1.Length; i++) - { - temp[i] = (byte)(ip1[i] | ip2[i]); - } - return temp; - } - - [Obsolete("Use GetHashCode instead")] - public int HashCode() - { - return GetHashCode(); - } - - public override int GetHashCode() - { - return HashCollection(excludedSubtreesDN) - + HashCollection(excludedSubtreesDNS) - + HashCollection(excludedSubtreesEmail) - + HashCollection(excludedSubtreesIP) - + HashCollection(excludedSubtreesURI) - + HashCollection(permittedSubtreesDN) - + HashCollection(permittedSubtreesDNS) - + HashCollection(permittedSubtreesEmail) - + HashCollection(permittedSubtreesIP) - + HashCollection(permittedSubtreesURI); - } - - private int HashCollection(ICollection coll) - { - if (coll == null) - { - return 0; - } - int hash = 0; - IEnumerator it1 = coll.GetEnumerator(); - while (it1.MoveNext()) - { - Object o = it1.Current; - if (o is byte[]) - { - hash += Org.BouncyCastle.Utilities.Arrays.GetHashCode((byte[])o); - } - else - { - hash += o.GetHashCode(); - } - } - return hash; - } - - public override bool Equals(Object o) - { - if (!(o is PkixNameConstraintValidator)) - return false; - - PkixNameConstraintValidator constraintValidator = (PkixNameConstraintValidator)o; - - return CollectionsAreEqual(constraintValidator.excludedSubtreesDN, excludedSubtreesDN) - && CollectionsAreEqual(constraintValidator.excludedSubtreesDNS, excludedSubtreesDNS) - && CollectionsAreEqual(constraintValidator.excludedSubtreesEmail, excludedSubtreesEmail) - && CollectionsAreEqual(constraintValidator.excludedSubtreesIP, excludedSubtreesIP) - && CollectionsAreEqual(constraintValidator.excludedSubtreesURI, excludedSubtreesURI) - && CollectionsAreEqual(constraintValidator.permittedSubtreesDN, permittedSubtreesDN) - && CollectionsAreEqual(constraintValidator.permittedSubtreesDNS, permittedSubtreesDNS) - && CollectionsAreEqual(constraintValidator.permittedSubtreesEmail, permittedSubtreesEmail) - && CollectionsAreEqual(constraintValidator.permittedSubtreesIP, permittedSubtreesIP) - && CollectionsAreEqual(constraintValidator.permittedSubtreesURI, permittedSubtreesURI); - } - - private bool CollectionsAreEqual(ICollection coll1, ICollection coll2) - { - if (coll1 == coll2) - { - return true; - } - if (coll1 == null || coll2 == null) - { - return false; - } - if (coll1.Count != coll2.Count) - { - return false; - } - IEnumerator it1 = coll1.GetEnumerator(); - - while (it1.MoveNext()) - { - Object a = it1.Current; - IEnumerator it2 = coll2.GetEnumerator(); - bool found = false; - while (it2.MoveNext()) - { - Object b = it2.Current; - if (SpecialEquals(a, b)) - { - found = true; - break; - } - } - if (!found) - { - return false; - } - } - return true; - } - - private bool SpecialEquals(Object o1, Object o2) - { - if (o1 == o2) - { - return true; - } - if (o1 == null || o2 == null) - { - return false; - } - if ((o1 is byte[]) && (o2 is byte[])) - { - return Org.BouncyCastle.Utilities.Arrays.AreEqual((byte[])o1, (byte[])o2); - } - else - { - return o1.Equals(o2); - } - } - - /** - * Stringifies an IPv4 or v6 address with subnet mask. - * - * @param ip The IP with subnet mask. - * @return The stringified IP address. - */ - private String StringifyIP(byte[] ip) - { - String temp = ""; - for (int i = 0; i < ip.Length / 2; i++) - { - //temp += Integer.toString(ip[i] & 0x00FF) + "."; - temp += (ip[i] & 0x00FF) + "."; - } - temp = temp.Substring(0, temp.Length - 1); - temp += "/"; - for (int i = ip.Length / 2; i < ip.Length; i++) - { - //temp += Integer.toString(ip[i] & 0x00FF) + "."; - temp += (ip[i] & 0x00FF) + "."; - } - temp = temp.Substring(0, temp.Length - 1); - return temp; - } - - private String StringifyIPCollection(ISet ips) - { - String temp = ""; - temp += "["; - for (IEnumerator it = ips.GetEnumerator(); it.MoveNext(); ) - { - temp += StringifyIP((byte[])it.Current) + ","; - } - if (temp.Length > 1) - { - temp = temp.Substring(0, temp.Length - 1); - } - temp += "]"; - - return temp; - } - - public override String ToString() - { - String temp = ""; - - temp += "permitted:\n"; - if (permittedSubtreesDN != null) - { - temp += "DN:\n"; - temp += permittedSubtreesDN.ToString() + "\n"; - } - if (permittedSubtreesDNS != null) - { - temp += "DNS:\n"; - temp += permittedSubtreesDNS.ToString() + "\n"; - } - if (permittedSubtreesEmail != null) - { - temp += "Email:\n"; - temp += permittedSubtreesEmail.ToString() + "\n"; - } - if (permittedSubtreesURI != null) - { - temp += "URI:\n"; - temp += permittedSubtreesURI.ToString() + "\n"; - } - if (permittedSubtreesIP != null) - { - temp += "IP:\n"; - temp += StringifyIPCollection(permittedSubtreesIP) + "\n"; - } - temp += "excluded:\n"; - if (!(excludedSubtreesDN.IsEmpty)) - { - temp += "DN:\n"; - temp += excludedSubtreesDN.ToString() + "\n"; - } - if (!excludedSubtreesDNS.IsEmpty) - { - temp += "DNS:\n"; - temp += excludedSubtreesDNS.ToString() + "\n"; - } - if (!excludedSubtreesEmail.IsEmpty) - { - temp += "Email:\n"; - temp += excludedSubtreesEmail.ToString() + "\n"; - } - if (!excludedSubtreesURI.IsEmpty) - { - temp += "URI:\n"; - temp += excludedSubtreesURI.ToString() + "\n"; - } - if (!excludedSubtreesIP.IsEmpty) - { - temp += "IP:\n"; - temp += StringifyIPCollection(excludedSubtreesIP) + "\n"; - } - return temp; - } - - } -} diff --git a/bc-sharp-crypto/src/pkix/PkixNameConstraintValidatorException.cs b/bc-sharp-crypto/src/pkix/PkixNameConstraintValidatorException.cs deleted file mode 100644 index b187525..0000000 --- a/bc-sharp-crypto/src/pkix/PkixNameConstraintValidatorException.cs +++ /dev/null @@ -1,16 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Pkix -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class PkixNameConstraintValidatorException - : Exception - { - public PkixNameConstraintValidatorException(String msg) - : base(msg) - { - } - } -} diff --git a/bc-sharp-crypto/src/pkix/PkixParameters.cs b/bc-sharp-crypto/src/pkix/PkixParameters.cs deleted file mode 100644 index 01ed9d4..0000000 --- a/bc-sharp-crypto/src/pkix/PkixParameters.cs +++ /dev/null @@ -1,893 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; -using Org.BouncyCastle.Utilities.Date; -using Org.BouncyCastle.X509.Store; - -namespace Org.BouncyCastle.Pkix -{ - /// - /// Summary description for PkixParameters. - /// - public class PkixParameters -// : ICertPathParameters - { - /** - * This is the default PKIX validity model. Actually there are two variants - * of this: The PKIX model and the modified PKIX model. The PKIX model - * verifies that all involved certificates must have been valid at the - * current time. The modified PKIX model verifies that all involved - * certificates were valid at the signing time. Both are indirectly choosen - * with the {@link PKIXParameters#setDate(java.util.Date)} method, so this - * methods sets the Date when all certificates must have been - * valid. - */ - public const int PkixValidityModel = 0; - - /** - * This model uses the following validity model. Each certificate must have - * been valid at the moment where is was used. That means the end - * certificate must have been valid at the time the signature was done. The - * CA certificate which signed the end certificate must have been valid, - * when the end certificate was signed. The CA (or Root CA) certificate must - * have been valid, when the CA certificate was signed and so on. So the - * {@link PKIXParameters#setDate(java.util.Date)} method sets the time, when - * the end certificate must have been valid.

    It is used e.g. - * in the German signature law. - */ - public const int ChainValidityModel = 1; - - private ISet trustAnchors; - private DateTimeObject date; - private IList certPathCheckers; - private bool revocationEnabled = true; - private ISet initialPolicies; - //private bool checkOnlyEECertificateCrl = false; - private bool explicitPolicyRequired = false; - private bool anyPolicyInhibited = false; - private bool policyMappingInhibited = false; - private bool policyQualifiersRejected = true; - private IX509Selector certSelector; - private IList stores; - private IX509Selector selector; - private bool additionalLocationsEnabled; - private IList additionalStores; - private ISet trustedACIssuers; - private ISet necessaryACAttributes; - private ISet prohibitedACAttributes; - private ISet attrCertCheckers; - private int validityModel = PkixValidityModel; - private bool useDeltas = false; - - /** - * Creates an instance of PKIXParameters with the specified Set of - * most-trusted CAs. Each element of the set is a TrustAnchor.
    - *
    - * Note that the Set is copied to protect against subsequent modifications. - * - * @param trustAnchors - * a Set of TrustAnchors - * - * @exception InvalidAlgorithmParameterException - * if the specified Set is empty - * (trustAnchors.isEmpty() == true) - * @exception NullPointerException - * if the specified Set is null - * @exception ClassCastException - * if any of the elements in the Set are not of type - * java.security.cert.TrustAnchor - */ - public PkixParameters( - ISet trustAnchors) - { - SetTrustAnchors(trustAnchors); - - this.initialPolicies = new HashSet(); - this.certPathCheckers = Platform.CreateArrayList(); - this.stores = Platform.CreateArrayList(); - this.additionalStores = Platform.CreateArrayList(); - this.trustedACIssuers = new HashSet(); - this.necessaryACAttributes = new HashSet(); - this.prohibitedACAttributes = new HashSet(); - this.attrCertCheckers = new HashSet(); - } - -// // TODO implement for other keystores (see Java build)? -// /** -// * Creates an instance of PKIXParameters that -// * populates the set of most-trusted CAs from the trusted -// * certificate entries contained in the specified KeyStore. -// * Only keystore entries that contain trusted X509Certificates -// * are considered; all other certificate types are ignored. -// * -// * @param keystore a KeyStore from which the set of -// * most-trusted CAs will be populated -// * @throws KeyStoreException if the keystore has not been initialized -// * @throws InvalidAlgorithmParameterException if the keystore does -// * not contain at least one trusted certificate entry -// * @throws NullPointerException if the keystore is null -// */ -// public PkixParameters( -// Pkcs12Store keystore) -//// throws KeyStoreException, InvalidAlgorithmParameterException -// { -// if (keystore == null) -// throw new ArgumentNullException("keystore"); -// ISet trustAnchors = new HashSet(); -// foreach (string alias in keystore.Aliases) -// { -// if (keystore.IsCertificateEntry(alias)) -// { -// X509CertificateEntry x509Entry = keystore.GetCertificate(alias); -// trustAnchors.Add(new TrustAnchor(x509Entry.Certificate, null)); -// } -// } -// SetTrustAnchors(trustAnchors); -// -// this.initialPolicies = new HashSet(); -// this.certPathCheckers = new ArrayList(); -// this.stores = new ArrayList(); -// this.additionalStores = new ArrayList(); -// this.trustedACIssuers = new HashSet(); -// this.necessaryACAttributes = new HashSet(); -// this.prohibitedACAttributes = new HashSet(); -// this.attrCertCheckers = new HashSet(); -// } - - public virtual bool IsRevocationEnabled - { - get { return revocationEnabled; } - set { revocationEnabled = value; } - } - - public virtual bool IsExplicitPolicyRequired - { - get { return explicitPolicyRequired; } - set { this.explicitPolicyRequired = value; } - } - - public virtual bool IsAnyPolicyInhibited - { - get { return anyPolicyInhibited; } - set { this.anyPolicyInhibited = value; } - } - - public virtual bool IsPolicyMappingInhibited - { - get { return policyMappingInhibited; } - set { this.policyMappingInhibited = value; } - } - - public virtual bool IsPolicyQualifiersRejected - { - get { return policyQualifiersRejected; } - set { this.policyQualifiersRejected = value; } - } - - //public bool IsCheckOnlyEECertificateCrl - //{ - // get { return this.checkOnlyEECertificateCrl; } - // set { this.checkOnlyEECertificateCrl = value; } - //} - - public virtual DateTimeObject Date - { - get { return this.date; } - set { this.date = value; } - } - - // Returns a Set of the most-trusted CAs. - public virtual ISet GetTrustAnchors() - { - return new HashSet(this.trustAnchors); - } - - // Sets the set of most-trusted CAs. - // Set is copied to protect against subsequent modifications. - public virtual void SetTrustAnchors( - ISet tas) - { - if (tas == null) - throw new ArgumentNullException("value"); - if (tas.IsEmpty) - throw new ArgumentException("non-empty set required", "value"); - - // Explicit copy to enforce type-safety - this.trustAnchors = new HashSet(); - foreach (TrustAnchor ta in tas) - { - if (ta != null) - { - trustAnchors.Add(ta); - } - } - } - - /** - * Returns the required constraints on the target certificate. The - * constraints are returned as an instance of CertSelector. If - * null, no constraints are defined.
    - *
    - * Note that the CertSelector returned is cloned to protect against - * subsequent modifications. - * - * @return a CertSelector specifying the constraints on the target - * certificate (or null) - * - * @see #setTargetCertConstraints(CertSelector) - */ - public virtual X509CertStoreSelector GetTargetCertConstraints() - { - if (certSelector == null) - { - return null; - } - - return (X509CertStoreSelector)certSelector.Clone(); - } - - /** - * Sets the required constraints on the target certificate. The constraints - * are specified as an instance of CertSelector. If null, no constraints are - * defined.
    - *
    - * Note that the CertSelector specified is cloned to protect against - * subsequent modifications. - * - * @param selector - * a CertSelector specifying the constraints on the target - * certificate (or null) - * - * @see #getTargetCertConstraints() - */ - public virtual void SetTargetCertConstraints( - IX509Selector selector) - { - if (selector == null) - { - certSelector = null; - } - else - { - certSelector = (IX509Selector)selector.Clone(); - } - } - - /** - * Returns an immutable Set of initial policy identifiers (OID strings), - * indicating that any one of these policies would be acceptable to the - * certificate user for the purposes of certification path processing. The - * default return value is an empty Set, which is - * interpreted as meaning that any policy would be acceptable. - * - * @return an immutable Set of initial policy OIDs in String - * format, or an empty Set (implying any policy is - * acceptable). Never returns null. - * - * @see #setInitialPolicies(java.util.Set) - */ - public virtual ISet GetInitialPolicies() - { - ISet returnSet = initialPolicies; - - // TODO Can it really be null? - if (initialPolicies == null) - { - returnSet = new HashSet(); - } - - return new HashSet(returnSet); - } - - /** - * Sets the Set of initial policy identifiers (OID strings), - * indicating that any one of these policies would be acceptable to the - * certificate user for the purposes of certification path processing. By - * default, any policy is acceptable (i.e. all policies), so a user that - * wants to allow any policy as acceptable does not need to call this - * method, or can call it with an empty Set (or - * null).
    - *
    - * Note that the Set is copied to protect against subsequent modifications.
    - *
    - * - * @param initialPolicies - * a Set of initial policy OIDs in String format (or - * null) - * - * @exception ClassCastException - * if any of the elements in the set are not of type String - * - * @see #getInitialPolicies() - */ - public virtual void SetInitialPolicies( - ISet initialPolicies) - { - this.initialPolicies = new HashSet(); - if (initialPolicies != null) - { - foreach (string obj in initialPolicies) - { - if (obj != null) - { - this.initialPolicies.Add(obj); - } - } - } - } - - /** - * Sets a List of additional certification path checkers. If - * the specified List contains an object that is not a PKIXCertPathChecker, - * it is ignored.
    - *
    - * Each PKIXCertPathChecker specified implements additional - * checks on a certificate. Typically, these are checks to process and - * verify private extensions contained in certificates. Each - * PKIXCertPathChecker should be instantiated with any - * initialization parameters needed to execute the check.
    - *
    - * This method allows sophisticated applications to extend a PKIX - * CertPathValidator or CertPathBuilder. Each - * of the specified PKIXCertPathCheckers will be called, in turn, by a PKIX - * CertPathValidator or CertPathBuilder for - * each certificate processed or validated.
    - *
    - * Regardless of whether these additional PKIXCertPathCheckers are set, a - * PKIX CertPathValidator or CertPathBuilder - * must perform all of the required PKIX checks on each certificate. The one - * exception to this rule is if the RevocationEnabled flag is set to false - * (see the {@link #setRevocationEnabled(boolean) setRevocationEnabled} - * method).
    - *
    - * Note that the List supplied here is copied and each PKIXCertPathChecker - * in the list is cloned to protect against subsequent modifications. - * - * @param checkers - * a List of PKIXCertPathCheckers. May be null, in which case no - * additional checkers will be used. - * @exception ClassCastException - * if any of the elements in the list are not of type - * java.security.cert.PKIXCertPathChecker - * @see #getCertPathCheckers() - */ - public virtual void SetCertPathCheckers(IList checkers) - { - certPathCheckers = Platform.CreateArrayList(); - if (checkers != null) - { - foreach (PkixCertPathChecker obj in checkers) - { - certPathCheckers.Add(obj.Clone()); - } - } - } - - /** - * Returns the List of certification path checkers. Each PKIXCertPathChecker - * in the returned IList is cloned to protect against subsequent modifications. - * - * @return an immutable List of PKIXCertPathCheckers (may be empty, but not - * null) - * - * @see #setCertPathCheckers(java.util.List) - */ - public virtual IList GetCertPathCheckers() - { - IList checkers = Platform.CreateArrayList(); - foreach (PkixCertPathChecker obj in certPathCheckers) - { - checkers.Add(obj.Clone()); - } - return checkers; - } - - /** - * Adds a PKIXCertPathChecker to the list of certification - * path checkers. See the {@link #setCertPathCheckers setCertPathCheckers} - * method for more details. - *

    - * Note that the PKIXCertPathChecker is cloned to protect - * against subsequent modifications.

    - * - * @param checker a PKIXCertPathChecker to add to the list of - * checks. If null, the checker is ignored (not added to list). - */ - public virtual void AddCertPathChecker( - PkixCertPathChecker checker) - { - if (checker != null) - { - certPathCheckers.Add(checker.Clone()); - } - } - - public virtual object Clone() - { - // FIXME Check this whole method against the Java implementation! - - PkixParameters parameters = new PkixParameters(GetTrustAnchors()); - parameters.SetParams(this); - return parameters; - - -// PkixParameters obj = new PkixParameters(new HashSet()); -//// (PkixParameters) this.MemberwiseClone(); -// obj.x509Stores = new ArrayList(x509Stores); -// obj.certPathCheckers = new ArrayList(certPathCheckers); -// -// //Iterator iter = certPathCheckers.iterator(); -// //obj.certPathCheckers = new ArrayList(); -// //while (iter.hasNext()) -// //{ -// // obj.certPathCheckers.add(((PKIXCertPathChecker)iter.next()) -// // .clone()); -// //} -// //if (initialPolicies != null) -// //{ -// // obj.initialPolicies = new HashSet(initialPolicies); -// //} -//// if (trustAnchors != null) -//// { -//// obj.trustAnchors = new HashSet(trustAnchors); -//// } -//// if (certSelector != null) -//// { -//// obj.certSelector = (X509CertStoreSelector) certSelector.Clone(); -//// } -// return obj; - } - - /** - * Method to support Clone() under J2ME. - * super.Clone() does not exist and fields are not copied. - * - * @param params Parameters to set. If this are - * ExtendedPkixParameters they are copied to. - */ - protected virtual void SetParams( - PkixParameters parameters) - { - Date = parameters.Date; - SetCertPathCheckers(parameters.GetCertPathCheckers()); - IsAnyPolicyInhibited = parameters.IsAnyPolicyInhibited; - IsExplicitPolicyRequired = parameters.IsExplicitPolicyRequired; - IsPolicyMappingInhibited = parameters.IsPolicyMappingInhibited; - IsRevocationEnabled = parameters.IsRevocationEnabled; - SetInitialPolicies(parameters.GetInitialPolicies()); - IsPolicyQualifiersRejected = parameters.IsPolicyQualifiersRejected; - SetTargetCertConstraints(parameters.GetTargetCertConstraints()); - SetTrustAnchors(parameters.GetTrustAnchors()); - - validityModel = parameters.validityModel; - useDeltas = parameters.useDeltas; - additionalLocationsEnabled = parameters.additionalLocationsEnabled; - selector = parameters.selector == null ? null - : (IX509Selector) parameters.selector.Clone(); - stores = Platform.CreateArrayList(parameters.stores); - additionalStores = Platform.CreateArrayList(parameters.additionalStores); - trustedACIssuers = new HashSet(parameters.trustedACIssuers); - prohibitedACAttributes = new HashSet(parameters.prohibitedACAttributes); - necessaryACAttributes = new HashSet(parameters.necessaryACAttributes); - attrCertCheckers = new HashSet(parameters.attrCertCheckers); - } - - /** - * Whether delta CRLs should be used for checking the revocation status. - * Defaults to false. - */ - public virtual bool IsUseDeltasEnabled - { - get { return useDeltas; } - set { useDeltas = value; } - } - - /** - * The validity model. - * @see #CHAIN_VALIDITY_MODEL - * @see #PKIX_VALIDITY_MODEL - */ - public virtual int ValidityModel - { - get { return validityModel; } - set { validityModel = value; } - } - - /** - * Sets the Bouncy Castle Stores for finding CRLs, certificates, attribute - * certificates or cross certificates. - *

    - * The IList is cloned. - *

    - * - * @param stores A list of stores to use. - * @see #getStores - * @throws ClassCastException if an element of stores is not - * a {@link Store}. - */ - public virtual void SetStores( - IList stores) - { - if (stores == null) - { - this.stores = Platform.CreateArrayList(); - } - else - { - foreach (object obj in stores) - { - if (!(obj is IX509Store)) - { - throw new InvalidCastException( - "All elements of list must be of type " + typeof(IX509Store).FullName); - } - } - this.stores = Platform.CreateArrayList(stores); - } - } - - /** - * Adds a Bouncy Castle {@link Store} to find CRLs, certificates, attribute - * certificates or cross certificates. - *

    - * This method should be used to add local stores, like collection based - * X.509 stores, if available. Local stores should be considered first, - * before trying to use additional (remote) locations, because they do not - * need possible additional network traffic. - *

    - * If store is null it is ignored. - *

    - * - * @param store The store to add. - * @see #getStores - */ - public virtual void AddStore( - IX509Store store) - { - if (store != null) - { - stores.Add(store); - } - } - - /** - * Adds an additional Bouncy Castle {@link Store} to find CRLs, certificates, - * attribute certificates or cross certificates. - *

    - * You should not use this method. This method is used for adding additional - * X.509 stores, which are used to add (remote) locations, e.g. LDAP, found - * during X.509 object processing, e.g. in certificates or CRLs. This method - * is used in PKIX certification path processing. - *

    - * If store is null it is ignored. - *

    - * - * @param store The store to add. - * @see #getStores() - */ - public virtual void AddAdditionalStore( - IX509Store store) - { - if (store != null) - { - additionalStores.Add(store); - } - } - - /** - * Returns an IList of additional Bouncy Castle - * Stores used for finding CRLs, certificates, attribute - * certificates or cross certificates. - * - * @return an immutable IList of additional Bouncy Castle - * Stores. Never null. - * - * @see #addAddionalStore(Store) - */ - public virtual IList GetAdditionalStores() - { - return Platform.CreateArrayList(additionalStores); - } - - /** - * Returns an IList of Bouncy Castle - * Stores used for finding CRLs, certificates, attribute - * certificates or cross certificates. - * - * @return an immutable IList of Bouncy Castle - * Stores. Never null. - * - * @see #setStores(IList) - */ - public virtual IList GetStores() - { - return Platform.CreateArrayList(stores); - } - - /** - * Returns if additional {@link X509Store}s for locations like LDAP found - * in certificates or CRLs should be used. - * - * @return Returns true if additional stores are used. - */ - public virtual bool IsAdditionalLocationsEnabled - { - get { return additionalLocationsEnabled; } - } - - /** - * Sets if additional {@link X509Store}s for locations like LDAP found in - * certificates or CRLs should be used. - * - * @param enabled true if additional stores are used. - */ - public virtual void SetAdditionalLocationsEnabled( - bool enabled) - { - additionalLocationsEnabled = enabled; - } - - /** - * Returns the required constraints on the target certificate or attribute - * certificate. The constraints are returned as an instance of - * IX509Selector. If null, no constraints are - * defined. - * - *

    - * The target certificate in a PKIX path may be a certificate or an - * attribute certificate. - *

    - * Note that the IX509Selector returned is cloned to protect - * against subsequent modifications. - *

    - * @return a IX509Selector specifying the constraints on the - * target certificate or attribute certificate (or null) - * @see #setTargetConstraints - * @see X509CertStoreSelector - * @see X509AttributeCertStoreSelector - */ - public virtual IX509Selector GetTargetConstraints() - { - if (selector != null) - { - return (IX509Selector) selector.Clone(); - } - else - { - return null; - } - } - - /** - * Sets the required constraints on the target certificate or attribute - * certificate. The constraints are specified as an instance of - * IX509Selector. If null, no constraints are - * defined. - *

    - * The target certificate in a PKIX path may be a certificate or an - * attribute certificate. - *

    - * Note that the IX509Selector specified is cloned to protect - * against subsequent modifications. - *

    - * - * @param selector a IX509Selector specifying the constraints on - * the target certificate or attribute certificate (or - * null) - * @see #getTargetConstraints - * @see X509CertStoreSelector - * @see X509AttributeCertStoreSelector - */ - public virtual void SetTargetConstraints(IX509Selector selector) - { - if (selector != null) - { - this.selector = (IX509Selector) selector.Clone(); - } - else - { - this.selector = null; - } - } - - /** - * Returns the trusted attribute certificate issuers. If attribute - * certificates is verified the trusted AC issuers must be set. - *

    - * The returned ISet consists of TrustAnchors. - *

    - * The returned ISet is immutable. Never null - *

    - * - * @return Returns an immutable set of the trusted AC issuers. - */ - public virtual ISet GetTrustedACIssuers() - { - return new HashSet(trustedACIssuers); - } - - /** - * Sets the trusted attribute certificate issuers. If attribute certificates - * is verified the trusted AC issuers must be set. - *

    - * The trustedACIssuers must be a ISet of - * TrustAnchor - *

    - * The given set is cloned. - *

    - * - * @param trustedACIssuers The trusted AC issuers to set. Is never - * null. - * @throws ClassCastException if an element of stores is not - * a TrustAnchor. - */ - public virtual void SetTrustedACIssuers( - ISet trustedACIssuers) - { - if (trustedACIssuers == null) - { - this.trustedACIssuers = new HashSet(); - } - else - { - foreach (object obj in trustedACIssuers) - { - if (!(obj is TrustAnchor)) - { - throw new InvalidCastException("All elements of set must be " - + "of type " + typeof(TrustAnchor).FullName + "."); - } - } - this.trustedACIssuers = new HashSet(trustedACIssuers); - } - } - - /** - * Returns the necessary attributes which must be contained in an attribute - * certificate. - *

    - * The returned ISet is immutable and contains - * Strings with the OIDs. - *

    - * - * @return Returns the necessary AC attributes. - */ - public virtual ISet GetNecessaryACAttributes() - { - return new HashSet(necessaryACAttributes); - } - - /** - * Sets the necessary which must be contained in an attribute certificate. - *

    - * The ISet must contain Strings with the - * OIDs. - *

    - * The set is cloned. - *

    - * - * @param necessaryACAttributes The necessary AC attributes to set. - * @throws ClassCastException if an element of - * necessaryACAttributes is not a - * String. - */ - public virtual void SetNecessaryACAttributes( - ISet necessaryACAttributes) - { - if (necessaryACAttributes == null) - { - this.necessaryACAttributes = new HashSet(); - } - else - { - foreach (object obj in necessaryACAttributes) - { - if (!(obj is string)) - { - throw new InvalidCastException("All elements of set must be " - + "of type string."); - } - } - this.necessaryACAttributes = new HashSet(necessaryACAttributes); - } - } - - /** - * Returns the attribute certificates which are not allowed. - *

    - * The returned ISet is immutable and contains - * Strings with the OIDs. - *

    - * - * @return Returns the prohibited AC attributes. Is never null. - */ - public virtual ISet GetProhibitedACAttributes() - { - return new HashSet(prohibitedACAttributes); - } - - /** - * Sets the attribute certificates which are not allowed. - *

    - * The ISet must contain Strings with the - * OIDs. - *

    - * The set is cloned. - *

    - * - * @param prohibitedACAttributes The prohibited AC attributes to set. - * @throws ClassCastException if an element of - * prohibitedACAttributes is not a - * String. - */ - public virtual void SetProhibitedACAttributes( - ISet prohibitedACAttributes) - { - if (prohibitedACAttributes == null) - { - this.prohibitedACAttributes = new HashSet(); - } - else - { - foreach (object obj in prohibitedACAttributes) - { - if (!(obj is String)) - { - throw new InvalidCastException("All elements of set must be " - + "of type string."); - } - } - this.prohibitedACAttributes = new HashSet(prohibitedACAttributes); - } - } - - /** - * Returns the attribute certificate checker. The returned set contains - * {@link PKIXAttrCertChecker}s and is immutable. - * - * @return Returns the attribute certificate checker. Is never - * null. - */ - public virtual ISet GetAttrCertCheckers() - { - return new HashSet(attrCertCheckers); - } - - /** - * Sets the attribute certificate checkers. - *

    - * All elements in the ISet must a {@link PKIXAttrCertChecker}. - *

    - *

    - * The given set is cloned. - *

    - * - * @param attrCertCheckers The attribute certificate checkers to set. Is - * never null. - * @throws ClassCastException if an element of attrCertCheckers - * is not a PKIXAttrCertChecker. - */ - public virtual void SetAttrCertCheckers( - ISet attrCertCheckers) - { - if (attrCertCheckers == null) - { - this.attrCertCheckers = new HashSet(); - } - else - { - foreach (object obj in attrCertCheckers) - { - if (!(obj is PkixAttrCertChecker)) - { - throw new InvalidCastException("All elements of set must be " - + "of type " + typeof(PkixAttrCertChecker).FullName + "."); - } - } - this.attrCertCheckers = new HashSet(attrCertCheckers); - } - } - } -} diff --git a/bc-sharp-crypto/src/pkix/PkixPolicyNode.cs b/bc-sharp-crypto/src/pkix/PkixPolicyNode.cs deleted file mode 100644 index fc5b82f..0000000 --- a/bc-sharp-crypto/src/pkix/PkixPolicyNode.cs +++ /dev/null @@ -1,158 +0,0 @@ -using System; -using System.Collections; -using System.Text; - -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Pkix -{ - /// - /// Summary description for PkixPolicyNode. - /// - public class PkixPolicyNode -// : IPolicyNode - { - protected IList mChildren; - protected int mDepth; - protected ISet mExpectedPolicies; - protected PkixPolicyNode mParent; - protected ISet mPolicyQualifiers; - protected string mValidPolicy; - protected bool mCritical; - - public virtual int Depth - { - get { return this.mDepth; } - } - - public virtual IEnumerable Children - { - get { return new EnumerableProxy(mChildren); } - } - - public virtual bool IsCritical - { - get { return this.mCritical; } - set { this.mCritical = value; } - } - - public virtual ISet PolicyQualifiers - { - get { return new HashSet(this.mPolicyQualifiers); } - } - - public virtual string ValidPolicy - { - get { return this.mValidPolicy; } - } - - public virtual bool HasChildren - { - get { return mChildren.Count != 0; } - } - - public virtual ISet ExpectedPolicies - { - get { return new HashSet(this.mExpectedPolicies); } - set { this.mExpectedPolicies = new HashSet(value); } - } - - public virtual PkixPolicyNode Parent - { - get { return this.mParent; } - set { this.mParent = value; } - } - - /// Constructors - public PkixPolicyNode( - IList children, - int depth, - ISet expectedPolicies, - PkixPolicyNode parent, - ISet policyQualifiers, - string validPolicy, - bool critical) - { - if (children == null) - { - this.mChildren = Platform.CreateArrayList(); - } - else - { - this.mChildren = Platform.CreateArrayList(children); - } - - this.mDepth = depth; - this.mExpectedPolicies = expectedPolicies; - this.mParent = parent; - this.mPolicyQualifiers = policyQualifiers; - this.mValidPolicy = validPolicy; - this.mCritical = critical; - } - - public virtual void AddChild( - PkixPolicyNode child) - { - child.Parent = this; - mChildren.Add(child); - } - - public virtual void RemoveChild( - PkixPolicyNode child) - { - mChildren.Remove(child); - } - - public override string ToString() - { - return ToString(""); - } - - public virtual string ToString( - string indent) - { - StringBuilder buf = new StringBuilder(); - buf.Append(indent); - buf.Append(mValidPolicy); - buf.Append(" {"); - buf.Append(Platform.NewLine); - - foreach (PkixPolicyNode child in mChildren) - { - buf.Append(child.ToString(indent + " ")); - } - - buf.Append(indent); - buf.Append("}"); - buf.Append(Platform.NewLine); - return buf.ToString(); - } - - public virtual object Clone() - { - return Copy(); - } - - public virtual PkixPolicyNode Copy() - { - PkixPolicyNode node = new PkixPolicyNode( - Platform.CreateArrayList(), - mDepth, - new HashSet(mExpectedPolicies), - null, - new HashSet(mPolicyQualifiers), - mValidPolicy, - mCritical); - - foreach (PkixPolicyNode child in mChildren) - { - PkixPolicyNode copy = child.Copy(); - copy.Parent = node; - node.AddChild(copy); - } - - return node; - } - } -} diff --git a/bc-sharp-crypto/src/pkix/ReasonsMask.cs b/bc-sharp-crypto/src/pkix/ReasonsMask.cs deleted file mode 100644 index e389bfe..0000000 --- a/bc-sharp-crypto/src/pkix/ReasonsMask.cs +++ /dev/null @@ -1,96 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.X509; - -namespace Org.BouncyCastle.Pkix -{ - /// - /// This class helps to handle CRL revocation reasons mask. Each CRL handles a - /// certain set of revocation reasons. - /// - internal class ReasonsMask - { - private int _reasons; - - /// - /// Constructs are reason mask with the reasons. - /// - /// The reasons. - internal ReasonsMask( - int reasons) - { - _reasons = reasons; - } - - /// - /// A reason mask with no reason. - /// - internal ReasonsMask() - : this(0) - { - } - - /// - /// A mask with all revocation reasons. - /// - internal static readonly ReasonsMask AllReasons = new ReasonsMask( - ReasonFlags.AACompromise | ReasonFlags.AffiliationChanged | ReasonFlags.CACompromise - | ReasonFlags.CertificateHold | ReasonFlags.CessationOfOperation - | ReasonFlags.KeyCompromise | ReasonFlags.PrivilegeWithdrawn | ReasonFlags.Unused - | ReasonFlags.Superseded); - - /** - * Adds all reasons from the reasons mask to this mask. - * - * @param mask The reasons mask to add. - */ - internal void AddReasons( - ReasonsMask mask) - { - _reasons = _reasons | mask.Reasons.IntValue; - } - - /// - /// Returns true if this reasons mask contains all possible - /// reasons. - /// - /// true if this reasons mask contains all possible reasons. - /// - internal bool IsAllReasons - { - get { return _reasons == AllReasons._reasons; } - } - - /// - /// Intersects this mask with the given reasons mask. - /// - /// mask The mask to intersect with. - /// The intersection of this and teh given mask. - internal ReasonsMask Intersect( - ReasonsMask mask) - { - ReasonsMask _mask = new ReasonsMask(); - _mask.AddReasons(new ReasonsMask(_reasons & mask.Reasons.IntValue)); - return _mask; - } - - /// - /// Returns true if the passed reasons mask has new reasons. - /// - /// The reasons mask which should be tested for new reasons. - /// true if the passed reasons mask has new reasons. - internal bool HasNewReasons( - ReasonsMask mask) - { - return ((_reasons | mask.Reasons.IntValue ^ _reasons) != 0); - } - - /// - /// Returns the reasons in this mask. - /// - public ReasonFlags Reasons - { - get { return new ReasonFlags(_reasons); } - } - } -} diff --git a/bc-sharp-crypto/src/pkix/Rfc3280CertPathUtilities.cs b/bc-sharp-crypto/src/pkix/Rfc3280CertPathUtilities.cs deleted file mode 100644 index c6f3fbf..0000000 --- a/bc-sharp-crypto/src/pkix/Rfc3280CertPathUtilities.cs +++ /dev/null @@ -1,2448 +0,0 @@ -using System; -using System.Collections; -using System.Globalization; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; -using Org.BouncyCastle.Utilities.Date; -using Org.BouncyCastle.X509; -using Org.BouncyCastle.X509.Store; - -namespace Org.BouncyCastle.Pkix -{ - public class Rfc3280CertPathUtilities - { - private static readonly PkixCrlUtilities CrlUtilities = new PkixCrlUtilities(); - - internal static readonly string ANY_POLICY = "2.5.29.32.0"; - - // key usage bits - internal static readonly int KEY_CERT_SIGN = 5; - internal static readonly int CRL_SIGN = 6; - - /** - * If the complete CRL includes an issuing distribution point (IDP) CRL - * extension check the following: - *

    - * (i) If the distribution point name is present in the IDP CRL extension - * and the distribution field is present in the DP, then verify that one of - * the names in the IDP matches one of the names in the DP. If the - * distribution point name is present in the IDP CRL extension and the - * distribution field is omitted from the DP, then verify that one of the - * names in the IDP matches one of the names in the cRLIssuer field of the - * DP. - *

    - *

    - * (ii) If the onlyContainsUserCerts boolean is asserted in the IDP CRL - * extension, verify that the certificate does not include the basic - * constraints extension with the cA boolean asserted. - *

    - *

    - * (iii) If the onlyContainsCACerts boolean is asserted in the IDP CRL - * extension, verify that the certificate includes the basic constraints - * extension with the cA boolean asserted. - *

    - *

    - * (iv) Verify that the onlyContainsAttributeCerts boolean is not asserted. - *

    - * - * @param dp The distribution point. - * @param cert The certificate. - * @param crl The CRL. - * @throws AnnotatedException if one of the conditions is not met or an error occurs. - */ - internal static void ProcessCrlB2( - DistributionPoint dp, - object cert, - X509Crl crl) - { - IssuingDistributionPoint idp = null; - try - { - idp = IssuingDistributionPoint.GetInstance(PkixCertPathValidatorUtilities.GetExtensionValue(crl, X509Extensions.IssuingDistributionPoint)); - } - catch (Exception e) - { - throw new Exception("0 Issuing distribution point extension could not be decoded.", e); - } - // (b) (2) (i) - // distribution point name is present - if (idp != null) - { - if (idp.DistributionPoint != null) - { - // make list of names - DistributionPointName dpName = IssuingDistributionPoint.GetInstance(idp).DistributionPoint; - IList names = Platform.CreateArrayList(); - - if (dpName.PointType == DistributionPointName.FullName) - { - GeneralName[] genNames = GeneralNames.GetInstance(dpName.Name).GetNames(); - for (int j = 0; j < genNames.Length; j++) - { - names.Add(genNames[j]); - } - } - if (dpName.PointType == DistributionPointName.NameRelativeToCrlIssuer) - { - Asn1EncodableVector vec = new Asn1EncodableVector(); - try - { - IEnumerator e = Asn1Sequence.GetInstance( - Asn1Sequence.FromByteArray(crl.IssuerDN.GetEncoded())).GetEnumerator(); - while (e.MoveNext()) - { - vec.Add((Asn1Encodable)e.Current); - } - } - catch (IOException e) - { - throw new Exception("Could not read CRL issuer.", e); - } - vec.Add(dpName.Name); - names.Add(new GeneralName(X509Name.GetInstance(new DerSequence(vec)))); - } - bool matches = false; - // verify that one of the names in the IDP matches one - // of the names in the DP. - if (dp.DistributionPointName != null) - { - dpName = dp.DistributionPointName; - GeneralName[] genNames = null; - if (dpName.PointType == DistributionPointName.FullName) - { - genNames = GeneralNames.GetInstance(dpName.Name).GetNames(); - } - if (dpName.PointType == DistributionPointName.NameRelativeToCrlIssuer) - { - if (dp.CrlIssuer != null) - { - genNames = dp.CrlIssuer.GetNames(); - } - else - { - genNames = new GeneralName[1]; - try - { - genNames[0] = new GeneralName( - PkixCertPathValidatorUtilities.GetIssuerPrincipal(cert)); - } - catch (IOException e) - { - throw new Exception("Could not read certificate issuer.", e); - } - } - for (int j = 0; j < genNames.Length; j++) - { - IEnumerator e = Asn1Sequence.GetInstance(genNames[j].Name.ToAsn1Object()).GetEnumerator(); - Asn1EncodableVector vec = new Asn1EncodableVector(); - while (e.MoveNext()) - { - vec.Add((Asn1Encodable)e.Current); - } - vec.Add(dpName.Name); - genNames[j] = new GeneralName(X509Name.GetInstance(new DerSequence(vec))); - } - } - if (genNames != null) - { - for (int j = 0; j < genNames.Length; j++) - { - if (names.Contains(genNames[j])) - { - matches = true; - break; - } - } - } - if (!matches) - { - throw new Exception( - "No match for certificate CRL issuing distribution point name to cRLIssuer CRL distribution point."); - } - } - // verify that one of the names in - // the IDP matches one of the names in the cRLIssuer field of - // the DP - else - { - if (dp.CrlIssuer == null) - { - throw new Exception("Either the cRLIssuer or the distributionPoint field must " - + "be contained in DistributionPoint."); - } - GeneralName[] genNames = dp.CrlIssuer.GetNames(); - for (int j = 0; j < genNames.Length; j++) - { - if (names.Contains(genNames[j])) - { - matches = true; - break; - } - } - if (!matches) - { - throw new Exception( - "No match for certificate CRL issuing distribution point name to cRLIssuer CRL distribution point."); - } - } - } - BasicConstraints bc = null; - try - { - bc = BasicConstraints.GetInstance(PkixCertPathValidatorUtilities.GetExtensionValue( - (IX509Extension)cert, X509Extensions.BasicConstraints)); - } - catch (Exception e) - { - throw new Exception("Basic constraints extension could not be decoded.", e); - } - - //if (cert is X509Certificate) - { - // (b) (2) (ii) - if (idp.OnlyContainsUserCerts && ((bc != null) && bc.IsCA())) - { - throw new Exception("CA Cert CRL only contains user certificates."); - } - - // (b) (2) (iii) - if (idp.OnlyContainsCACerts && (bc == null || !bc.IsCA())) - { - throw new Exception("End CRL only contains CA certificates."); - } - } - - // (b) (2) (iv) - if (idp.OnlyContainsAttributeCerts) - { - throw new Exception("onlyContainsAttributeCerts boolean is asserted."); - } - } - } - - internal static void ProcessCertBC( - PkixCertPath certPath, - int index, - PkixNameConstraintValidator nameConstraintValidator) - //throws CertPathValidatorException - { - IList certs = certPath.Certificates; - X509Certificate cert = (X509Certificate)certs[index]; - int n = certs.Count; - // i as defined in the algorithm description - int i = n - index; - // - // (b), (c) permitted and excluded subtree checking. - // - if (!(PkixCertPathValidatorUtilities.IsSelfIssued(cert) && (i < n))) - { - X509Name principal = cert.SubjectDN; - Asn1InputStream aIn = new Asn1InputStream(principal.GetEncoded()); - Asn1Sequence dns; - - try - { - dns = DerSequence.GetInstance(aIn.ReadObject()); - } - catch (Exception e) - { - throw new PkixCertPathValidatorException( - "Exception extracting subject name when checking subtrees.", e, certPath, index); - } - - try - { - nameConstraintValidator.CheckPermittedDN(dns); - nameConstraintValidator.CheckExcludedDN(dns); - } - catch (PkixNameConstraintValidatorException e) - { - throw new PkixCertPathValidatorException( - "Subtree check for certificate subject failed.", e, certPath, index); - } - - GeneralNames altName = null; - try - { - altName = GeneralNames.GetInstance( - PkixCertPathValidatorUtilities.GetExtensionValue(cert, X509Extensions.SubjectAlternativeName)); - } - catch (Exception e) - { - throw new PkixCertPathValidatorException( - "Subject alternative name extension could not be decoded.", e, certPath, index); - } - - IList emails = X509Name.GetInstance(dns).GetValueList(X509Name.EmailAddress); - foreach (string email in emails) - { - GeneralName emailAsGeneralName = new GeneralName(GeneralName.Rfc822Name, email); - try - { - nameConstraintValidator.checkPermitted(emailAsGeneralName); - nameConstraintValidator.checkExcluded(emailAsGeneralName); - } - catch (PkixNameConstraintValidatorException ex) - { - throw new PkixCertPathValidatorException( - "Subtree check for certificate subject alternative email failed.", ex, certPath, index); - } - } - if (altName != null) - { - GeneralName[] genNames = null; - try - { - genNames = altName.GetNames(); - } - catch (Exception e) - { - throw new PkixCertPathValidatorException( - "Subject alternative name contents could not be decoded.", e, certPath, index); - } - foreach (GeneralName genName in genNames) - { - try - { - nameConstraintValidator.checkPermitted(genName); - nameConstraintValidator.checkExcluded(genName); - } - catch (PkixNameConstraintValidatorException e) - { - throw new PkixCertPathValidatorException( - "Subtree check for certificate subject alternative name failed.", e, certPath, index); - } - } - } - } - } - - internal static void PrepareNextCertA( - PkixCertPath certPath, - int index) - //throws CertPathValidatorException - { - IList certs = certPath.Certificates; - X509Certificate cert = (X509Certificate)certs[index]; - // - // - // (a) check the policy mappings - // - Asn1Sequence pm = null; - try - { - pm = Asn1Sequence.GetInstance( - PkixCertPathValidatorUtilities.GetExtensionValue(cert, X509Extensions.PolicyMappings)); - } - catch (Exception ex) - { - throw new PkixCertPathValidatorException( - "Policy mappings extension could not be decoded.", ex, certPath, index); - } - if (pm != null) - { - Asn1Sequence mappings = pm; - - for (int j = 0; j < mappings.Count; j++) - { - DerObjectIdentifier issuerDomainPolicy = null; - DerObjectIdentifier subjectDomainPolicy = null; - try - { - Asn1Sequence mapping = DerSequence.GetInstance(mappings[j]); - - issuerDomainPolicy = DerObjectIdentifier.GetInstance(mapping[0]); - subjectDomainPolicy = DerObjectIdentifier.GetInstance(mapping[1]); - } - catch (Exception e) - { - throw new PkixCertPathValidatorException( - "Policy mappings extension contents could not be decoded.", e, certPath, index); - } - - if (Rfc3280CertPathUtilities.ANY_POLICY.Equals(issuerDomainPolicy.Id)) - throw new PkixCertPathValidatorException( - "IssuerDomainPolicy is anyPolicy", null, certPath, index); - - if (Rfc3280CertPathUtilities.ANY_POLICY.Equals(subjectDomainPolicy.Id)) - throw new PkixCertPathValidatorException( - "SubjectDomainPolicy is anyPolicy,", null, certPath, index); - } - } - } - - internal static PkixPolicyNode ProcessCertD( - PkixCertPath certPath, - int index, - ISet acceptablePolicies, - PkixPolicyNode validPolicyTree, - IList[] policyNodes, - int inhibitAnyPolicy) - //throws CertPathValidatorException - { - IList certs = certPath.Certificates; - X509Certificate cert = (X509Certificate)certs[index]; - int n = certs.Count; - // i as defined in the algorithm description - int i = n - index; - // - // (d) policy Information checking against initial policy and - // policy mapping - // - Asn1Sequence certPolicies = null; - try - { - certPolicies = DerSequence.GetInstance( - PkixCertPathValidatorUtilities.GetExtensionValue(cert, X509Extensions.CertificatePolicies)); - } - catch (Exception e) - { - throw new PkixCertPathValidatorException( - "Could not read certificate policies extension from certificate.", e, certPath, index); - } - if (certPolicies != null && validPolicyTree != null) - { - // - // (d) (1) - // - ISet pols = new HashSet(); - - foreach (Asn1Encodable ae in certPolicies) - { - PolicyInformation pInfo = PolicyInformation.GetInstance(ae.ToAsn1Object()); - DerObjectIdentifier pOid = pInfo.PolicyIdentifier; - - pols.Add(pOid.Id); - - if (!Rfc3280CertPathUtilities.ANY_POLICY.Equals(pOid.Id)) - { - ISet pq = null; - try - { - pq = PkixCertPathValidatorUtilities.GetQualifierSet(pInfo.PolicyQualifiers); - } - catch (PkixCertPathValidatorException ex) - { - throw new PkixCertPathValidatorException( - "Policy qualifier info set could not be build.", ex, certPath, index); - } - - bool match = PkixCertPathValidatorUtilities.ProcessCertD1i(i, policyNodes, pOid, pq); - - if (!match) - { - PkixCertPathValidatorUtilities.ProcessCertD1ii(i, policyNodes, pOid, pq); - } - } - } - - if (acceptablePolicies.IsEmpty || acceptablePolicies.Contains(Rfc3280CertPathUtilities.ANY_POLICY)) - { - acceptablePolicies.Clear(); - acceptablePolicies.AddAll(pols); - } - else - { - ISet t1 = new HashSet(); - - foreach (object o in acceptablePolicies) - { - if (pols.Contains(o)) - { - t1.Add(o); - } - } - acceptablePolicies.Clear(); - acceptablePolicies.AddAll(t1); - } - - // - // (d) (2) - // - if ((inhibitAnyPolicy > 0) || ((i < n) && PkixCertPathValidatorUtilities.IsSelfIssued(cert))) - { - foreach (Asn1Encodable ae in certPolicies) - { - PolicyInformation pInfo = PolicyInformation.GetInstance(ae.ToAsn1Object()); - if (Rfc3280CertPathUtilities.ANY_POLICY.Equals(pInfo.PolicyIdentifier.Id)) - { - ISet _apq = PkixCertPathValidatorUtilities.GetQualifierSet(pInfo.PolicyQualifiers); - IList _nodes = policyNodes[i - 1]; - - for (int k = 0; k < _nodes.Count; k++) - { - PkixPolicyNode _node = (PkixPolicyNode)_nodes[k]; - - IEnumerator _policySetIter = _node.ExpectedPolicies.GetEnumerator(); - while (_policySetIter.MoveNext()) - { - object _tmp = _policySetIter.Current; - - string _policy; - if (_tmp is string) - { - _policy = (string)_tmp; - } - else if (_tmp is DerObjectIdentifier) - { - _policy = ((DerObjectIdentifier)_tmp).Id; - } - else - { - continue; - } - - bool _found = false; - - foreach (PkixPolicyNode _child in _node.Children) - { - if (_policy.Equals(_child.ValidPolicy)) - { - _found = true; - } - } - - if (!_found) - { - ISet _newChildExpectedPolicies = new HashSet(); - _newChildExpectedPolicies.Add(_policy); - - PkixPolicyNode _newChild = new PkixPolicyNode(Platform.CreateArrayList(), i, - _newChildExpectedPolicies, _node, _apq, _policy, false); - _node.AddChild(_newChild); - policyNodes[i].Add(_newChild); - } - } - } - break; - } - } - } - - PkixPolicyNode _validPolicyTree = validPolicyTree; - // - // (d) (3) - // - for (int j = (i - 1); j >= 0; j--) - { - IList nodes = policyNodes[j]; - - for (int k = 0; k < nodes.Count; k++) - { - PkixPolicyNode node = (PkixPolicyNode)nodes[k]; - if (!node.HasChildren) - { - _validPolicyTree = PkixCertPathValidatorUtilities.RemovePolicyNode(_validPolicyTree, policyNodes, - node); - if (_validPolicyTree == null) - { - break; - } - } - } - } - - // - // d (4) - // - ISet criticalExtensionOids = cert.GetCriticalExtensionOids(); - - if (criticalExtensionOids != null) - { - bool critical = criticalExtensionOids.Contains(X509Extensions.CertificatePolicies.Id); - - IList nodes = policyNodes[i]; - for (int j = 0; j < nodes.Count; j++) - { - PkixPolicyNode node = (PkixPolicyNode)nodes[j]; - node.IsCritical = critical; - } - } - return _validPolicyTree; - } - return null; - } - - /** - * If the DP includes cRLIssuer, then verify that the issuer field in the - * complete CRL matches cRLIssuer in the DP and that the complete CRL - * contains an - * g distribution point extension with the indirectCRL - * boolean asserted. Otherwise, verify that the CRL issuer matches the - * certificate issuer. - * - * @param dp The distribution point. - * @param cert The certificate ot attribute certificate. - * @param crl The CRL for cert. - * @throws AnnotatedException if one of the above conditions does not apply or an error - * occurs. - */ - internal static void ProcessCrlB1( - DistributionPoint dp, - object cert, - X509Crl crl) - { - Asn1Object idp = PkixCertPathValidatorUtilities.GetExtensionValue( - crl, X509Extensions.IssuingDistributionPoint); - - bool isIndirect = false; - if (idp != null) - { - if (IssuingDistributionPoint.GetInstance(idp).IsIndirectCrl) - { - isIndirect = true; - } - } - byte[] issuerBytes = crl.IssuerDN.GetEncoded(); - - bool matchIssuer = false; - if (dp.CrlIssuer != null) - { - GeneralName[] genNames = dp.CrlIssuer.GetNames(); - for (int j = 0; j < genNames.Length; j++) - { - if (genNames[j].TagNo == GeneralName.DirectoryName) - { - try - { - if (Org.BouncyCastle.Utilities.Arrays.AreEqual(genNames[j].Name.ToAsn1Object().GetEncoded(), issuerBytes)) - { - matchIssuer = true; - } - } - catch (IOException e) - { - throw new Exception( - "CRL issuer information from distribution point cannot be decoded.", e); - } - } - } - if (matchIssuer && !isIndirect) - { - throw new Exception("Distribution point contains cRLIssuer field but CRL is not indirect."); - } - if (!matchIssuer) - { - throw new Exception("CRL issuer of CRL does not match CRL issuer of distribution point."); - } - } - else - { - if (crl.IssuerDN.Equivalent(PkixCertPathValidatorUtilities.GetIssuerPrincipal(cert), true)) - { - matchIssuer = true; - } - } - if (!matchIssuer) - { - throw new Exception("Cannot find matching CRL issuer for certificate."); - } - } - - internal static ReasonsMask ProcessCrlD( - X509Crl crl, - DistributionPoint dp) - //throws AnnotatedException - { - IssuingDistributionPoint idp = null; - try - { - idp = IssuingDistributionPoint.GetInstance(PkixCertPathValidatorUtilities.GetExtensionValue(crl, X509Extensions.IssuingDistributionPoint)); - } - catch (Exception e) - { - throw new Exception("issuing distribution point extension could not be decoded.", e); - } - - // (d) (1) - if (idp != null && idp.OnlySomeReasons != null && dp.Reasons != null) - { - return new ReasonsMask(dp.Reasons.IntValue).Intersect(new ReasonsMask(idp.OnlySomeReasons - .IntValue)); - } - // (d) (4) - if ((idp == null || idp.OnlySomeReasons == null) && dp.Reasons == null) - { - return ReasonsMask.AllReasons; - } - - // (d) (2) and (d)(3) - - ReasonsMask dpReasons = null; - - if (dp.Reasons == null) - { - dpReasons = ReasonsMask.AllReasons; - } - else - { - dpReasons = new ReasonsMask(dp.Reasons.IntValue); - } - - ReasonsMask idpReasons = null; - - if (idp == null) - { - idpReasons = ReasonsMask.AllReasons; - } - else - { - idpReasons = new ReasonsMask(idp.OnlySomeReasons.IntValue); - } - - return dpReasons.Intersect(idpReasons); - } - - /** - * Obtain and validate the certification path for the complete CRL issuer. - * If a key usage extension is present in the CRL issuer's certificate, - * verify that the cRLSign bit is set. - * - * @param crl CRL which contains revocation information for the certificate - * cert. - * @param cert The attribute certificate or certificate to check if it is - * revoked. - * @param defaultCRLSignCert The issuer certificate of the certificate cert. - * @param defaultCRLSignKey The public key of the issuer certificate - * defaultCRLSignCert. - * @param paramsPKIX paramsPKIX PKIX parameters. - * @param certPathCerts The certificates on the certification path. - * @return A Set with all keys of possible CRL issuer - * certificates. - * @throws AnnotatedException if the CRL is not valid or the status cannot be checked or - * some error occurs. - */ - internal static ISet ProcessCrlF( - X509Crl crl, - object cert, - X509Certificate defaultCRLSignCert, - AsymmetricKeyParameter defaultCRLSignKey, - PkixParameters paramsPKIX, - IList certPathCerts) - { - // (f) - - // get issuer from CRL - X509CertStoreSelector selector = new X509CertStoreSelector(); - try - { - selector.Subject = crl.IssuerDN; - } - catch (IOException e) - { - throw new Exception( - "Subject criteria for certificate selector to find issuer certificate for CRL could not be set.", e); - } - - // get CRL signing certs - IList coll = Platform.CreateArrayList(); - - try - { - CollectionUtilities.AddRange(coll, PkixCertPathValidatorUtilities.FindCertificates(selector, paramsPKIX.GetStores())); - CollectionUtilities.AddRange(coll, PkixCertPathValidatorUtilities.FindCertificates(selector, paramsPKIX.GetAdditionalStores())); - } - catch (Exception e) - { - throw new Exception("Issuer certificate for CRL cannot be searched.", e); - } - - coll.Add(defaultCRLSignCert); - - IEnumerator cert_it = coll.GetEnumerator(); - - IList validCerts = Platform.CreateArrayList(); - IList validKeys = Platform.CreateArrayList(); - - while (cert_it.MoveNext()) - { - X509Certificate signingCert = (X509Certificate)cert_it.Current; - - /* - * CA of the certificate, for which this CRL is checked, has also - * signed CRL, so skip the path validation, because is already done - */ - if (signingCert.Equals(defaultCRLSignCert)) - { - validCerts.Add(signingCert); - validKeys.Add(defaultCRLSignKey); - continue; - } - try - { -// CertPathBuilder builder = CertPathBuilder.GetInstance("PKIX"); - PkixCertPathBuilder builder = new PkixCertPathBuilder(); - selector = new X509CertStoreSelector(); - selector.Certificate = signingCert; - - PkixParameters temp = (PkixParameters)paramsPKIX.Clone(); - temp.SetTargetCertConstraints(selector); - - PkixBuilderParameters parameters = (PkixBuilderParameters) - PkixBuilderParameters.GetInstance(temp); - - /* - * if signingCert is placed not higher on the cert path a - * dependency loop results. CRL for cert is checked, but - * signingCert is needed for checking the CRL which is dependent - * on checking cert because it is higher in the cert path and so - * signing signingCert transitively. so, revocation is disabled, - * forgery attacks of the CRL are detected in this outer loop - * for all other it must be enabled to prevent forgery attacks - */ - if (certPathCerts.Contains(signingCert)) - { - parameters.IsRevocationEnabled = false; - } - else - { - parameters.IsRevocationEnabled = true; - } - IList certs = builder.Build(parameters).CertPath.Certificates; - validCerts.Add(signingCert); - validKeys.Add(PkixCertPathValidatorUtilities.GetNextWorkingKey(certs, 0)); - } - catch (PkixCertPathBuilderException e) - { - throw new Exception("Internal error.", e); - } - catch (PkixCertPathValidatorException e) - { - throw new Exception("Public key of issuer certificate of CRL could not be retrieved.", e); - } - //catch (Exception e) - //{ - // throw new Exception(e.Message); - //} - } - - ISet checkKeys = new HashSet(); - - Exception lastException = null; - for (int i = 0; i < validCerts.Count; i++) - { - X509Certificate signCert = (X509Certificate)validCerts[i]; - bool[] keyusage = signCert.GetKeyUsage(); - - if (keyusage != null && (keyusage.Length < 7 || !keyusage[CRL_SIGN])) - { - lastException = new Exception( - "Issuer certificate key usage extension does not permit CRL signing."); - } - else - { - checkKeys.Add(validKeys[i]); - } - } - - if ((checkKeys.Count == 0) && lastException == null) - { - throw new Exception("Cannot find a valid issuer certificate."); - } - if ((checkKeys.Count == 0) && lastException != null) - { - throw lastException; - } - - return checkKeys; - } - - internal static AsymmetricKeyParameter ProcessCrlG( - X509Crl crl, - ISet keys) - { - Exception lastException = null; - foreach (AsymmetricKeyParameter key in keys) - { - try - { - crl.Verify(key); - return key; - } - catch (Exception e) - { - lastException = e; - } - } - throw new Exception("Cannot verify CRL.", lastException); - } - - internal static X509Crl ProcessCrlH( - ISet deltaCrls, - AsymmetricKeyParameter key) - { - Exception lastException = null; - foreach (X509Crl crl in deltaCrls) - { - try - { - crl.Verify(key); - return crl; - } - catch (Exception e) - { - lastException = e; - } - } - if (lastException != null) - { - throw new Exception("Cannot verify delta CRL.", lastException); - } - return null; - } - - /** - * Checks a distribution point for revocation information for the - * certificate cert. - * - * @param dp The distribution point to consider. - * @param paramsPKIX PKIX parameters. - * @param cert Certificate to check if it is revoked. - * @param validDate The date when the certificate revocation status should be - * checked. - * @param defaultCRLSignCert The issuer certificate of the certificate cert. - * @param defaultCRLSignKey The public key of the issuer certificate - * defaultCRLSignCert. - * @param certStatus The current certificate revocation status. - * @param reasonMask The reasons mask which is already checked. - * @param certPathCerts The certificates of the certification path. - * @throws AnnotatedException if the certificate is revoked or the status cannot be checked - * or some error occurs. - */ - private static void CheckCrl( - DistributionPoint dp, - PkixParameters paramsPKIX, - X509Certificate cert, - DateTime validDate, - X509Certificate defaultCRLSignCert, - AsymmetricKeyParameter defaultCRLSignKey, - CertStatus certStatus, - ReasonsMask reasonMask, - IList certPathCerts) - //throws AnnotatedException - { - DateTime currentDate = DateTime.UtcNow; - - if (validDate.Ticks > currentDate.Ticks) - { - throw new Exception("Validation time is in future."); - } - - // (a) - /* - * We always get timely valid CRLs, so there is no step (a) (1). - * "locally cached" CRLs are assumed to be in getStore(), additional - * CRLs must be enabled in the ExtendedPKIXParameters and are in - * getAdditionalStore() - */ - - ISet crls = PkixCertPathValidatorUtilities.GetCompleteCrls(dp, cert, currentDate, paramsPKIX); - bool validCrlFound = false; - Exception lastException = null; - - IEnumerator crl_iter = crls.GetEnumerator(); - - while (crl_iter.MoveNext() && certStatus.Status == CertStatus.Unrevoked && !reasonMask.IsAllReasons) - { - try - { - X509Crl crl = (X509Crl)crl_iter.Current; - - // (d) - ReasonsMask interimReasonsMask = Rfc3280CertPathUtilities.ProcessCrlD(crl, dp); - - // (e) - /* - * The reasons mask is updated at the end, so only valid CRLs - * can update it. If this CRL does not contain new reasons it - * must be ignored. - */ - if (!interimReasonsMask.HasNewReasons(reasonMask)) - { - continue; - } - - // (f) - ISet keys = Rfc3280CertPathUtilities.ProcessCrlF(crl, cert, defaultCRLSignCert, defaultCRLSignKey, - paramsPKIX, certPathCerts); - // (g) - AsymmetricKeyParameter key = Rfc3280CertPathUtilities.ProcessCrlG(crl, keys); - - X509Crl deltaCRL = null; - - if (paramsPKIX.IsUseDeltasEnabled) - { - // get delta CRLs - ISet deltaCRLs = PkixCertPathValidatorUtilities.GetDeltaCrls(currentDate, paramsPKIX, crl); - // we only want one valid delta CRL - // (h) - deltaCRL = Rfc3280CertPathUtilities.ProcessCrlH(deltaCRLs, key); - } - - /* - * CRL must be be valid at the current time, not the validation - * time. If a certificate is revoked with reason keyCompromise, - * cACompromise, it can be used for forgery, also for the past. - * This reason may not be contained in older CRLs. - */ - - /* - * in the chain model signatures stay valid also after the - * certificate has been expired, so they do not have to be in - * the CRL validity time - */ - - if (paramsPKIX.ValidityModel != PkixParameters.ChainValidityModel) - { - /* - * if a certificate has expired, but was revoked, it is not - * more in the CRL, so it would be regarded as valid if the - * first check is not done - */ - if (cert.NotAfter.Ticks < crl.ThisUpdate.Ticks) - { - throw new Exception("No valid CRL for current time found."); - } - } - - Rfc3280CertPathUtilities.ProcessCrlB1(dp, cert, crl); - - // (b) (2) - Rfc3280CertPathUtilities.ProcessCrlB2(dp, cert, crl); - - // (c) - Rfc3280CertPathUtilities.ProcessCrlC(deltaCRL, crl, paramsPKIX); - - // (i) - Rfc3280CertPathUtilities.ProcessCrlI(validDate, deltaCRL, cert, certStatus, paramsPKIX); - - // (j) - Rfc3280CertPathUtilities.ProcessCrlJ(validDate, crl, cert, certStatus); - - // (k) - if (certStatus.Status == CrlReason.RemoveFromCrl) - { - certStatus.Status = CertStatus.Unrevoked; - } - - // update reasons mask - reasonMask.AddReasons(interimReasonsMask); - - ISet criticalExtensions = crl.GetCriticalExtensionOids(); - - if (criticalExtensions != null) - { - criticalExtensions = new HashSet(criticalExtensions); - criticalExtensions.Remove(X509Extensions.IssuingDistributionPoint.Id); - criticalExtensions.Remove(X509Extensions.DeltaCrlIndicator.Id); - - if (!criticalExtensions.IsEmpty) - throw new Exception("CRL contains unsupported critical extensions."); - } - - if (deltaCRL != null) - { - criticalExtensions = deltaCRL.GetCriticalExtensionOids(); - if (criticalExtensions != null) - { - criticalExtensions = new HashSet(criticalExtensions); - criticalExtensions.Remove(X509Extensions.IssuingDistributionPoint.Id); - criticalExtensions.Remove(X509Extensions.DeltaCrlIndicator.Id); - - if (!criticalExtensions.IsEmpty) - throw new Exception("Delta CRL contains unsupported critical extension."); - } - } - - validCrlFound = true; - } - catch (Exception e) - { - lastException = e; - } - } - if (!validCrlFound) - { - throw lastException; - } - } - - /** - * Checks a certificate if it is revoked. - * - * @param paramsPKIX PKIX parameters. - * @param cert Certificate to check if it is revoked. - * @param validDate The date when the certificate revocation status should be - * checked. - * @param sign The issuer certificate of the certificate cert. - * @param workingPublicKey The public key of the issuer certificate sign. - * @param certPathCerts The certificates of the certification path. - * @throws AnnotatedException if the certificate is revoked or the status cannot be checked - * or some error occurs. - */ - protected static void CheckCrls( - PkixParameters paramsPKIX, - X509Certificate cert, - DateTime validDate, - X509Certificate sign, - AsymmetricKeyParameter workingPublicKey, - IList certPathCerts) - { - Exception lastException = null; - CrlDistPoint crldp = null; - - try - { - crldp = CrlDistPoint.GetInstance(PkixCertPathValidatorUtilities.GetExtensionValue(cert, X509Extensions.CrlDistributionPoints)); - } - catch (Exception e) - { - throw new Exception("CRL distribution point extension could not be read.", e); - } - - try - { - PkixCertPathValidatorUtilities.AddAdditionalStoresFromCrlDistributionPoint(crldp, paramsPKIX); - } - catch (Exception e) - { - throw new Exception( - "No additional CRL locations could be decoded from CRL distribution point extension.", e); - } - CertStatus certStatus = new CertStatus(); - ReasonsMask reasonsMask = new ReasonsMask(); - - bool validCrlFound = false; - - // for each distribution point - if (crldp != null) - { - DistributionPoint[] dps = null; - try - { - dps = crldp.GetDistributionPoints(); - } - catch (Exception e) - { - throw new Exception("Distribution points could not be read.", e); - } - if (dps != null) - { - for (int i = 0; i < dps.Length && certStatus.Status == CertStatus.Unrevoked && !reasonsMask.IsAllReasons; i++) - { - PkixParameters paramsPKIXClone = (PkixParameters)paramsPKIX.Clone(); - try - { - CheckCrl(dps[i], paramsPKIXClone, cert, validDate, sign, workingPublicKey, certStatus, reasonsMask, certPathCerts); - validCrlFound = true; - } - catch (Exception e) - { - lastException = e; - } - } - } - } - - /* - * If the revocation status has not been determined, repeat the process - * above with any available CRLs not specified in a distribution point - * but issued by the certificate issuer. - */ - - if (certStatus.Status == CertStatus.Unrevoked && !reasonsMask.IsAllReasons) - { - try - { - /* - * assume a DP with both the reasons and the cRLIssuer fields - * omitted and a distribution point name of the certificate - * issuer. - */ - Asn1Object issuer = null; - try - { - issuer = new Asn1InputStream(cert.IssuerDN.GetEncoded()).ReadObject(); - } - catch (Exception e) - { - throw new Exception("Issuer from certificate for CRL could not be reencoded.", e); - } - DistributionPoint dp = new DistributionPoint(new DistributionPointName(0, new GeneralNames( - new GeneralName(GeneralName.DirectoryName, issuer))), null, null); - PkixParameters paramsPKIXClone = (PkixParameters)paramsPKIX.Clone(); - - CheckCrl(dp, paramsPKIXClone, cert, validDate, sign, workingPublicKey, certStatus, reasonsMask, - certPathCerts); - - validCrlFound = true; - } - catch (Exception e) - { - lastException = e; - } - } - - if (!validCrlFound) - { - throw lastException; - } - if (certStatus.Status != CertStatus.Unrevoked) - { - // This format is enforced by the NistCertPath tests - string formattedDate = certStatus.RevocationDate.Value.ToString( - "ddd MMM dd HH:mm:ss K yyyy"); - string message = "Certificate revocation after " + formattedDate; - message += ", reason: " + CrlReasons[certStatus.Status]; - throw new Exception(message); - } - - if (!reasonsMask.IsAllReasons && certStatus.Status == CertStatus.Unrevoked) - { - certStatus.Status = CertStatus.Undetermined; - } - - if (certStatus.Status == CertStatus.Undetermined) - { - throw new Exception("Certificate status could not be determined."); - } - } - - internal static PkixPolicyNode PrepareCertB( - PkixCertPath certPath, - int index, - IList[] policyNodes, - PkixPolicyNode validPolicyTree, - int policyMapping) - //throws CertPathValidatorException - { - IList certs = certPath.Certificates; - X509Certificate cert = (X509Certificate)certs[index]; - int n = certs.Count; - // i as defined in the algorithm description - int i = n - index; - // (b) - // - Asn1Sequence pm = null; - try - { - pm = (Asn1Sequence)Asn1Sequence.GetInstance(PkixCertPathValidatorUtilities.GetExtensionValue(cert, X509Extensions.PolicyMappings)); - } - catch (Exception ex) - { - throw new PkixCertPathValidatorException( - "Policy mappings extension could not be decoded.", ex, certPath, index); - } - PkixPolicyNode _validPolicyTree = validPolicyTree; - if (pm != null) - { - Asn1Sequence mappings = (Asn1Sequence)pm; - IDictionary m_idp = Platform.CreateHashtable(); - ISet s_idp = new HashSet(); - - for (int j = 0; j < mappings.Count; j++) - { - Asn1Sequence mapping = (Asn1Sequence) mappings[j]; - string id_p = ((DerObjectIdentifier) mapping[0]).Id; - string sd_p = ((DerObjectIdentifier) mapping[1]).Id; - ISet tmp; - - if (!m_idp.Contains(id_p)) - { - tmp = new HashSet(); - tmp.Add(sd_p); - m_idp[id_p] = tmp; - s_idp.Add(id_p); - } - else - { - tmp = (ISet)m_idp[id_p]; - tmp.Add(sd_p); - } - } - - IEnumerator it_idp = s_idp.GetEnumerator(); - while (it_idp.MoveNext()) - { - string id_p = (string)it_idp.Current; - - // - // (1) - // - if (policyMapping > 0) - { - bool idp_found = false; - IEnumerator nodes_i = policyNodes[i].GetEnumerator(); - - while (nodes_i.MoveNext()) - { - PkixPolicyNode node = (PkixPolicyNode)nodes_i.Current; - if (node.ValidPolicy.Equals(id_p)) - { - idp_found = true; - node.ExpectedPolicies = (ISet)m_idp[id_p]; - break; - } - } - - if (!idp_found) - { - nodes_i = policyNodes[i].GetEnumerator(); - while (nodes_i.MoveNext()) - { - PkixPolicyNode node = (PkixPolicyNode)nodes_i.Current; - if (Rfc3280CertPathUtilities.ANY_POLICY.Equals(node.ValidPolicy)) - { - ISet pq = null; - Asn1Sequence policies = null; - try - { - policies = (Asn1Sequence)PkixCertPathValidatorUtilities.GetExtensionValue(cert, - X509Extensions.CertificatePolicies); - } - catch (Exception e) - { - throw new PkixCertPathValidatorException( - "Certificate policies extension could not be decoded.", e, certPath, index); - } - - foreach (Asn1Encodable ae in policies) - { - PolicyInformation pinfo = null; - try - { - pinfo = PolicyInformation.GetInstance(ae.ToAsn1Object()); - } - catch (Exception ex) - { - throw new PkixCertPathValidatorException( - "Policy information could not be decoded.", ex, certPath, index); - } - if (Rfc3280CertPathUtilities.ANY_POLICY.Equals(pinfo.PolicyIdentifier.Id)) - { - try - { - pq = PkixCertPathValidatorUtilities - .GetQualifierSet(pinfo.PolicyQualifiers); - } - catch (PkixCertPathValidatorException ex) - { - throw new PkixCertPathValidatorException( - "Policy qualifier info set could not be decoded.", ex, certPath, - index); - } - break; - } - } - bool ci = false; - ISet critExtOids = cert.GetCriticalExtensionOids(); - if (critExtOids != null) - { - ci = critExtOids.Contains(X509Extensions.CertificatePolicies.Id); - } - - PkixPolicyNode p_node = (PkixPolicyNode)node.Parent; - if (Rfc3280CertPathUtilities.ANY_POLICY.Equals(p_node.ValidPolicy)) - { - PkixPolicyNode c_node = new PkixPolicyNode(Platform.CreateArrayList(), i, - (ISet)m_idp[id_p], p_node, pq, id_p, ci); - p_node.AddChild(c_node); - policyNodes[i].Add(c_node); - } - break; - } - } - } - - // - // (2) - // - } - else if (policyMapping <= 0) - { - foreach (PkixPolicyNode node in Platform.CreateArrayList(policyNodes[i])) - { - if (node.ValidPolicy.Equals(id_p)) - { - node.Parent.RemoveChild(node); - - for (int k = i - 1; k >= 0; k--) - { - foreach (PkixPolicyNode node2 in Platform.CreateArrayList(policyNodes[k])) - { - if (!node2.HasChildren) - { - _validPolicyTree = PkixCertPathValidatorUtilities.RemovePolicyNode( - _validPolicyTree, policyNodes, node2); - - if (_validPolicyTree == null) - break; - } - } - } - } - } - } - } - } - return _validPolicyTree; - } - - internal static ISet[] ProcessCrlA1ii( - DateTime currentDate, - PkixParameters paramsPKIX, - X509Certificate cert, - X509Crl crl) - { - ISet deltaSet = new HashSet(); - X509CrlStoreSelector crlselect = new X509CrlStoreSelector(); - crlselect.CertificateChecking = cert; - - try - { - IList issuer = Platform.CreateArrayList(); - issuer.Add(crl.IssuerDN); - crlselect.Issuers = issuer; - } - catch (IOException e) - { - throw new Exception("Cannot extract issuer from CRL." + e, e); - } - - crlselect.CompleteCrlEnabled = true; - ISet completeSet = CrlUtilities.FindCrls(crlselect, paramsPKIX, currentDate); - - if (paramsPKIX.IsUseDeltasEnabled) - { - // get delta CRL(s) - try - { - deltaSet.AddAll(PkixCertPathValidatorUtilities.GetDeltaCrls(currentDate, paramsPKIX, crl)); - } - catch (Exception e) - { - throw new Exception("Exception obtaining delta CRLs.", e); - } - } - - return new ISet[]{ completeSet, deltaSet }; - } - - internal static ISet ProcessCrlA1i( - DateTime currentDate, - PkixParameters paramsPKIX, - X509Certificate cert, - X509Crl crl) - { - ISet deltaSet = new HashSet(); - if (paramsPKIX.IsUseDeltasEnabled) - { - CrlDistPoint freshestCRL = null; - try - { - freshestCRL = CrlDistPoint.GetInstance( - PkixCertPathValidatorUtilities.GetExtensionValue(cert, X509Extensions.FreshestCrl)); - } - catch (Exception e) - { - throw new Exception("Freshest CRL extension could not be decoded from certificate.", e); - } - - if (freshestCRL == null) - { - try - { - freshestCRL = CrlDistPoint.GetInstance(PkixCertPathValidatorUtilities.GetExtensionValue(crl, X509Extensions.FreshestCrl)); - } - catch (Exception e) - { - throw new Exception("Freshest CRL extension could not be decoded from CRL.", e); - } - } - if (freshestCRL != null) - { - try - { - PkixCertPathValidatorUtilities.AddAdditionalStoresFromCrlDistributionPoint(freshestCRL, paramsPKIX); - } - catch (Exception e) - { - throw new Exception( - "No new delta CRL locations could be added from Freshest CRL extension.", e); - } - // get delta CRL(s) - try - { - deltaSet.AddAll(PkixCertPathValidatorUtilities.GetDeltaCrls(currentDate, paramsPKIX, crl)); - } - catch (Exception e) - { - throw new Exception("Exception obtaining delta CRLs.", e); - } - } - } - return deltaSet; - } - - internal static void ProcessCertF( - PkixCertPath certPath, - int index, - PkixPolicyNode validPolicyTree, - int explicitPolicy) - { - // - // (f) - // - if (explicitPolicy <= 0 && validPolicyTree == null) - { - throw new PkixCertPathValidatorException( - "No valid policy tree found when one expected.", null, certPath, index); - } - } - - internal static void ProcessCertA( - PkixCertPath certPath, - PkixParameters paramsPKIX, - int index, - AsymmetricKeyParameter workingPublicKey, - X509Name workingIssuerName, - X509Certificate sign) - { - IList certs = certPath.Certificates; - X509Certificate cert = (X509Certificate)certs[index]; - // - // (a) verify - // - try - { - // (a) (1) - // - cert.Verify(workingPublicKey); - } - catch (GeneralSecurityException e) - { - throw new PkixCertPathValidatorException("Could not validate certificate signature.", e, certPath, index); - } - - try - { - // (a) (2) - // - cert.CheckValidity(PkixCertPathValidatorUtilities - .GetValidCertDateFromValidityModel(paramsPKIX, certPath, index)); - } - catch (CertificateExpiredException e) - { - throw new PkixCertPathValidatorException("Could not validate certificate: " + e.Message, e, certPath, index); - } - catch (CertificateNotYetValidException e) - { - throw new PkixCertPathValidatorException("Could not validate certificate: " + e.Message, e, certPath, index); - } - catch (Exception e) - { - throw new PkixCertPathValidatorException("Could not validate time of certificate.", e, certPath, index); - } - - // - // (a) (3) - // - if (paramsPKIX.IsRevocationEnabled) - { - try - { - CheckCrls(paramsPKIX, cert, PkixCertPathValidatorUtilities.GetValidCertDateFromValidityModel(paramsPKIX, - certPath, index), sign, workingPublicKey, certs); - } - catch (Exception e) - { - Exception cause = e.InnerException; - if (cause == null) - { - cause = e; - } - throw new PkixCertPathValidatorException(e.Message, cause, certPath, index); - } - } - - // - // (a) (4) name chaining - // - X509Name issuer = PkixCertPathValidatorUtilities.GetIssuerPrincipal(cert); - if (!issuer.Equivalent(workingIssuerName, true)) - { - throw new PkixCertPathValidatorException("IssuerName(" + issuer - + ") does not match SubjectName(" + workingIssuerName + ") of signing certificate.", null, - certPath, index); - } - } - - internal static int PrepareNextCertI1( - PkixCertPath certPath, - int index, - int explicitPolicy) - { - IList certs = certPath.Certificates; - X509Certificate cert = (X509Certificate)certs[index]; - // - // (i) - // - Asn1Sequence pc = null; - try - { - pc = DerSequence.GetInstance( - PkixCertPathValidatorUtilities.GetExtensionValue(cert, X509Extensions.PolicyConstraints)); - } - catch (Exception e) - { - throw new PkixCertPathValidatorException( - "Policy constraints extension cannot be decoded.", e, certPath, index); - } - - int tmpInt; - - if (pc != null) - { - IEnumerator policyConstraints = pc.GetEnumerator(); - - while (policyConstraints.MoveNext()) - { - try - { - Asn1TaggedObject constraint = Asn1TaggedObject.GetInstance(policyConstraints.Current); - if (constraint.TagNo == 0) - { - tmpInt = DerInteger.GetInstance(constraint, false).Value.IntValue; - if (tmpInt < explicitPolicy) - { - return tmpInt; - } - break; - } - } - catch (ArgumentException e) - { - throw new PkixCertPathValidatorException( - "Policy constraints extension contents cannot be decoded.", e, certPath, index); - } - } - } - return explicitPolicy; - } - - internal static int PrepareNextCertI2( - PkixCertPath certPath, - int index, - int policyMapping) - //throws CertPathValidatorException - { - IList certs = certPath.Certificates; - X509Certificate cert = (X509Certificate)certs[index]; - - // - // (i) - // - Asn1Sequence pc = null; - try - { - pc = DerSequence.GetInstance( - PkixCertPathValidatorUtilities.GetExtensionValue(cert, X509Extensions.PolicyConstraints)); - } - catch (Exception e) - { - throw new PkixCertPathValidatorException( - "Policy constraints extension cannot be decoded.", e, certPath, index); - } - - int tmpInt; - - if (pc != null) - { - IEnumerator policyConstraints = pc.GetEnumerator(); - - while (policyConstraints.MoveNext()) - { - try - { - Asn1TaggedObject constraint = Asn1TaggedObject.GetInstance(policyConstraints.Current); - if (constraint.TagNo == 1) - { - tmpInt = DerInteger.GetInstance(constraint, false).Value.IntValue; - if (tmpInt < policyMapping) - { - return tmpInt; - } - break; - } - } - catch (ArgumentException e) - { - throw new PkixCertPathValidatorException( - "Policy constraints extension contents cannot be decoded.", e, certPath, index); - } - } - } - return policyMapping; - } - - internal static void PrepareNextCertG( - PkixCertPath certPath, - int index, - PkixNameConstraintValidator nameConstraintValidator) - //throws CertPathValidatorException - { - IList certs = certPath.Certificates; - X509Certificate cert = (X509Certificate)certs[index]; - - // - // (g) handle the name constraints extension - // - NameConstraints nc = null; - try - { - Asn1Sequence ncSeq = DerSequence.GetInstance( - PkixCertPathValidatorUtilities.GetExtensionValue(cert, X509Extensions.NameConstraints)); - if (ncSeq != null) - { - nc = new NameConstraints(ncSeq); - } - } - catch (Exception e) - { - throw new PkixCertPathValidatorException( - "Name constraints extension could not be decoded.", e, certPath, index); - } - if (nc != null) - { - // - // (g) (1) permitted subtrees - // - Asn1Sequence permitted = nc.PermittedSubtrees; - if (permitted != null) - { - try - { - nameConstraintValidator.IntersectPermittedSubtree(permitted); - } - catch (Exception ex) - { - throw new PkixCertPathValidatorException( - "Permitted subtrees cannot be build from name constraints extension.", ex, certPath, index); - } - } - - // - // (g) (2) excluded subtrees - // - Asn1Sequence excluded = nc.ExcludedSubtrees; - if (excluded != null) - { - IEnumerator e = excluded.GetEnumerator(); - try - { - while (e.MoveNext()) - { - GeneralSubtree subtree = GeneralSubtree.GetInstance(e.Current); - nameConstraintValidator.AddExcludedSubtree(subtree); - } - } - catch (Exception ex) - { - throw new PkixCertPathValidatorException( - "Excluded subtrees cannot be build from name constraints extension.", ex, certPath, index); - } - } - } - } - - internal static int PrepareNextCertJ( - PkixCertPath certPath, - int index, - int inhibitAnyPolicy) - //throws CertPathValidatorException - { - IList certs = certPath.Certificates; - X509Certificate cert = (X509Certificate)certs[index]; - - // - // (j) - // - DerInteger iap = null; - try - { - iap = DerInteger.GetInstance( - PkixCertPathValidatorUtilities.GetExtensionValue(cert, X509Extensions.InhibitAnyPolicy)); - } - catch (Exception e) - { - throw new PkixCertPathValidatorException( - "Inhibit any-policy extension cannot be decoded.", e, certPath, index); - } - - if (iap != null) - { - int _inhibitAnyPolicy = iap.Value.IntValue; - - if (_inhibitAnyPolicy < inhibitAnyPolicy) - return _inhibitAnyPolicy; - } - return inhibitAnyPolicy; - } - - internal static void PrepareNextCertK( - PkixCertPath certPath, - int index) - //throws CertPathValidatorException - { - IList certs = certPath.Certificates; - X509Certificate cert = (X509Certificate)certs[index]; - // - // (k) - // - BasicConstraints bc = null; - try - { - bc = BasicConstraints.GetInstance( - PkixCertPathValidatorUtilities.GetExtensionValue(cert, X509Extensions.BasicConstraints)); - } - catch (Exception e) - { - throw new PkixCertPathValidatorException("Basic constraints extension cannot be decoded.", e, certPath, - index); - } - if (bc != null) - { - if (!(bc.IsCA())) - throw new PkixCertPathValidatorException("Not a CA certificate"); - } - else - { - throw new PkixCertPathValidatorException("Intermediate certificate lacks BasicConstraints"); - } - } - - internal static int PrepareNextCertL( - PkixCertPath certPath, - int index, - int maxPathLength) - //throws CertPathValidatorException - { - IList certs = certPath.Certificates; - X509Certificate cert = (X509Certificate)certs[index]; - // - // (l) - // - if (!PkixCertPathValidatorUtilities.IsSelfIssued(cert)) - { - if (maxPathLength <= 0) - { - throw new PkixCertPathValidatorException("Max path length not greater than zero", null, certPath, index); - } - - return maxPathLength - 1; - } - return maxPathLength; - } - - internal static int PrepareNextCertM( - PkixCertPath certPath, - int index, - int maxPathLength) - //throws CertPathValidatorException - { - IList certs = certPath.Certificates; - X509Certificate cert = (X509Certificate)certs[index]; - - // - // (m) - // - BasicConstraints bc = null; - try - { - bc = BasicConstraints.GetInstance( - PkixCertPathValidatorUtilities.GetExtensionValue(cert, X509Extensions.BasicConstraints)); - } - catch (Exception e) - { - throw new PkixCertPathValidatorException("Basic constraints extension cannot be decoded.", e, certPath, - index); - } - if (bc != null) - { - BigInteger _pathLengthConstraint = bc.PathLenConstraint; - - if (_pathLengthConstraint != null) - { - int _plc = _pathLengthConstraint.IntValue; - - if (_plc < maxPathLength) - { - return _plc; - } - } - } - return maxPathLength; - } - - internal static void PrepareNextCertN( - PkixCertPath certPath, - int index) - //throws CertPathValidatorException - { - IList certs = certPath.Certificates; - X509Certificate cert = (X509Certificate)certs[index]; - - // - // (n) - // - bool[] _usage = cert.GetKeyUsage(); - - if ((_usage != null) && !_usage[Rfc3280CertPathUtilities.KEY_CERT_SIGN]) - { - throw new PkixCertPathValidatorException( - "Issuer certificate keyusage extension is critical and does not permit key signing.", null, - certPath, index); - } - } - - internal static void PrepareNextCertO( - PkixCertPath certPath, - int index, - ISet criticalExtensions, - IList pathCheckers) - //throws CertPathValidatorException - { - IList certs = certPath.Certificates; - X509Certificate cert = (X509Certificate)certs[index]; - - // - // (o) - // - IEnumerator tmpIter = pathCheckers.GetEnumerator(); - while (tmpIter.MoveNext()) - { - try - { - ((PkixCertPathChecker)tmpIter.Current).Check(cert, criticalExtensions); - } - catch (PkixCertPathValidatorException e) - { - throw new PkixCertPathValidatorException(e.Message, e.InnerException, certPath, index); - } - } - if (!criticalExtensions.IsEmpty) - { - throw new PkixCertPathValidatorException("Certificate has unsupported critical extension.", null, certPath, - index); - } - } - - internal static int PrepareNextCertH1( - PkixCertPath certPath, - int index, - int explicitPolicy) - { - IList certs = certPath.Certificates; - X509Certificate cert = (X509Certificate)certs[index]; - - // - // (h) - // - if (!PkixCertPathValidatorUtilities.IsSelfIssued(cert)) - { - // - // (1) - // - if (explicitPolicy != 0) - return explicitPolicy - 1; - } - return explicitPolicy; - } - - internal static int PrepareNextCertH2( - PkixCertPath certPath, - int index, - int policyMapping) - { - IList certs = certPath.Certificates; - X509Certificate cert = (X509Certificate)certs[index]; - - // - // (h) - // - if (!PkixCertPathValidatorUtilities.IsSelfIssued(cert)) - { - // - // (2) - // - if (policyMapping != 0) - return policyMapping - 1; - } - return policyMapping; - } - - - internal static int PrepareNextCertH3( - PkixCertPath certPath, - int index, - int inhibitAnyPolicy) - { - IList certs = certPath.Certificates; - X509Certificate cert = (X509Certificate)certs[index]; - - // - // (h) - // - if (!PkixCertPathValidatorUtilities.IsSelfIssued(cert)) - { - // - // (3) - // - if (inhibitAnyPolicy != 0) - return inhibitAnyPolicy - 1; - } - return inhibitAnyPolicy; - } - - internal static int WrapupCertA( - int explicitPolicy, - X509Certificate cert) - { - // - // (a) - // - if (!PkixCertPathValidatorUtilities.IsSelfIssued(cert) && (explicitPolicy != 0)) - { - explicitPolicy--; - } - return explicitPolicy; - } - - internal static int WrapupCertB( - PkixCertPath certPath, - int index, - int explicitPolicy) - //throws CertPathValidatorException - { - IList certs = certPath.Certificates; - X509Certificate cert = (X509Certificate)certs[index]; - - // - // (b) - // - int tmpInt; - Asn1Sequence pc = null; - try - { - pc = DerSequence.GetInstance( - PkixCertPathValidatorUtilities.GetExtensionValue(cert, X509Extensions.PolicyConstraints)); - } - catch (Exception e) - { - throw new PkixCertPathValidatorException("Policy constraints could not be decoded.", e, certPath, index); - } - - if (pc != null) - { - IEnumerator policyConstraints = pc.GetEnumerator(); - - while (policyConstraints.MoveNext()) - { - Asn1TaggedObject constraint = (Asn1TaggedObject)policyConstraints.Current; - switch (constraint.TagNo) - { - case 0: - try - { - tmpInt = DerInteger.GetInstance(constraint, false).Value.IntValue; - } - catch (Exception e) - { - throw new PkixCertPathValidatorException( - "Policy constraints requireExplicitPolicy field could not be decoded.", e, certPath, - index); - } - if (tmpInt == 0) - { - return 0; - } - break; - } - } - } - return explicitPolicy; - } - - internal static void WrapupCertF( - PkixCertPath certPath, - int index, - IList pathCheckers, - ISet criticalExtensions) - //throws CertPathValidatorException - { - IList certs = certPath.Certificates; - X509Certificate cert = (X509Certificate)certs[index]; - IEnumerator tmpIter = pathCheckers.GetEnumerator(); - - while (tmpIter.MoveNext()) - { - try - { - ((PkixCertPathChecker)tmpIter.Current).Check(cert, criticalExtensions); - } - catch (PkixCertPathValidatorException e) - { - throw new PkixCertPathValidatorException("Additional certificate path checker failed.", e, certPath, - index); - } - } - - if (!criticalExtensions.IsEmpty) - { - throw new PkixCertPathValidatorException("Certificate has unsupported critical extension", - null, certPath, index); - } - } - - internal static PkixPolicyNode WrapupCertG( - PkixCertPath certPath, - PkixParameters paramsPKIX, - ISet userInitialPolicySet, - int index, - IList[] policyNodes, - PkixPolicyNode validPolicyTree, - ISet acceptablePolicies) - { - int n = certPath.Certificates.Count; - - // - // (g) - // - PkixPolicyNode intersection; - - // - // (g) (i) - // - if (validPolicyTree == null) - { - if (paramsPKIX.IsExplicitPolicyRequired) - { - throw new PkixCertPathValidatorException( - "Explicit policy requested but none available.", null, certPath, index); - } - intersection = null; - } - else if (PkixCertPathValidatorUtilities.IsAnyPolicy(userInitialPolicySet)) // (g) - // (ii) - { - if (paramsPKIX.IsExplicitPolicyRequired) - { - if (acceptablePolicies.IsEmpty) - { - throw new PkixCertPathValidatorException( - "Explicit policy requested but none available.", null, certPath, index); - } - else - { - ISet _validPolicyNodeSet = new HashSet(); - - for (int j = 0; j < policyNodes.Length; j++) - { - IList _nodeDepth = policyNodes[j]; - - for (int k = 0; k < _nodeDepth.Count; k++) - { - PkixPolicyNode _node = (PkixPolicyNode)_nodeDepth[k]; - - if (Rfc3280CertPathUtilities.ANY_POLICY.Equals(_node.ValidPolicy)) - { - foreach (object o in _node.Children) - { - _validPolicyNodeSet.Add(o); - } - } - } - } - - foreach (PkixPolicyNode _node in _validPolicyNodeSet) - { - string _validPolicy = _node.ValidPolicy; - - if (!acceptablePolicies.Contains(_validPolicy)) - { - // TODO? - // validPolicyTree = - // removePolicyNode(validPolicyTree, policyNodes, - // _node); - } - } - if (validPolicyTree != null) - { - for (int j = (n - 1); j >= 0; j--) - { - IList nodes = policyNodes[j]; - - for (int k = 0; k < nodes.Count; k++) - { - PkixPolicyNode node = (PkixPolicyNode)nodes[k]; - if (!node.HasChildren) - { - validPolicyTree = PkixCertPathValidatorUtilities.RemovePolicyNode(validPolicyTree, - policyNodes, node); - } - } - } - } - } - } - - intersection = validPolicyTree; - } - else - { - // - // (g) (iii) - // - // This implementation is not exactly same as the one described in - // RFC3280. - // However, as far as the validation result is concerned, both - // produce - // adequate result. The only difference is whether AnyPolicy is - // remain - // in the policy tree or not. - // - // (g) (iii) 1 - // - ISet _validPolicyNodeSet = new HashSet(); - - for (int j = 0; j < policyNodes.Length; j++) - { - IList _nodeDepth = policyNodes[j]; - - for (int k = 0; k < _nodeDepth.Count; k++) - { - PkixPolicyNode _node = (PkixPolicyNode)_nodeDepth[k]; - - if (Rfc3280CertPathUtilities.ANY_POLICY.Equals(_node.ValidPolicy)) - { - foreach (PkixPolicyNode _c_node in _node.Children) - { - if (!Rfc3280CertPathUtilities.ANY_POLICY.Equals(_c_node.ValidPolicy)) - { - _validPolicyNodeSet.Add(_c_node); - } - } - } - } - } - - // - // (g) (iii) 2 - // - IEnumerator _vpnsIter = _validPolicyNodeSet.GetEnumerator(); - while (_vpnsIter.MoveNext()) - { - PkixPolicyNode _node = (PkixPolicyNode)_vpnsIter.Current; - string _validPolicy = _node.ValidPolicy; - - if (!userInitialPolicySet.Contains(_validPolicy)) - { - validPolicyTree = PkixCertPathValidatorUtilities.RemovePolicyNode(validPolicyTree, policyNodes, _node); - } - } - - // - // (g) (iii) 4 - // - if (validPolicyTree != null) - { - for (int j = (n - 1); j >= 0; j--) - { - IList nodes = policyNodes[j]; - - for (int k = 0; k < nodes.Count; k++) - { - PkixPolicyNode node = (PkixPolicyNode)nodes[k]; - if (!node.HasChildren) - { - validPolicyTree = PkixCertPathValidatorUtilities.RemovePolicyNode(validPolicyTree, policyNodes, - node); - } - } - } - } - - intersection = validPolicyTree; - } - return intersection; - } - - /** - * If use-deltas is set, verify the issuer and scope of the delta CRL. - * - * @param deltaCRL The delta CRL. - * @param completeCRL The complete CRL. - * @param pkixParams The PKIX paramaters. - * @throws AnnotatedException if an exception occurs. - */ - internal static void ProcessCrlC( - X509Crl deltaCRL, - X509Crl completeCRL, - PkixParameters pkixParams) - { - if (deltaCRL == null) - return; - - IssuingDistributionPoint completeidp = null; - try - { - completeidp = IssuingDistributionPoint.GetInstance( - PkixCertPathValidatorUtilities.GetExtensionValue(completeCRL, X509Extensions.IssuingDistributionPoint)); - } - catch (Exception e) - { - throw new Exception("000 Issuing distribution point extension could not be decoded.", e); - } - - if (pkixParams.IsUseDeltasEnabled) - { - // (c) (1) - if (!deltaCRL.IssuerDN.Equivalent(completeCRL.IssuerDN, true)) - throw new Exception("Complete CRL issuer does not match delta CRL issuer."); - - // (c) (2) - IssuingDistributionPoint deltaidp = null; - try - { - deltaidp = IssuingDistributionPoint.GetInstance( - PkixCertPathValidatorUtilities.GetExtensionValue(deltaCRL, X509Extensions.IssuingDistributionPoint)); - } - catch (Exception e) - { - throw new Exception( - "Issuing distribution point extension from delta CRL could not be decoded.", e); - } - - if (!Platform.Equals(completeidp, deltaidp)) - { - throw new Exception( - "Issuing distribution point extension from delta CRL and complete CRL does not match."); - } - - // (c) (3) - Asn1Object completeKeyIdentifier = null; - try - { - completeKeyIdentifier = PkixCertPathValidatorUtilities.GetExtensionValue( - completeCRL, X509Extensions.AuthorityKeyIdentifier); - } - catch (Exception e) - { - throw new Exception( - "Authority key identifier extension could not be extracted from complete CRL.", e); - } - - Asn1Object deltaKeyIdentifier = null; - try - { - deltaKeyIdentifier = PkixCertPathValidatorUtilities.GetExtensionValue( - deltaCRL, X509Extensions.AuthorityKeyIdentifier); - } - catch (Exception e) - { - throw new Exception( - "Authority key identifier extension could not be extracted from delta CRL.", e); - } - - if (completeKeyIdentifier == null) - throw new Exception("CRL authority key identifier is null."); - - if (deltaKeyIdentifier == null) - throw new Exception("Delta CRL authority key identifier is null."); - - if (!completeKeyIdentifier.Equals(deltaKeyIdentifier)) - { - throw new Exception( - "Delta CRL authority key identifier does not match complete CRL authority key identifier."); - } - } - } - - internal static void ProcessCrlI( - DateTime validDate, - X509Crl deltacrl, - object cert, - CertStatus certStatus, - PkixParameters pkixParams) - { - if (pkixParams.IsUseDeltasEnabled && deltacrl != null) - { - PkixCertPathValidatorUtilities.GetCertStatus(validDate, deltacrl, cert, certStatus); - } - } - - internal static void ProcessCrlJ( - DateTime validDate, - X509Crl completecrl, - object cert, - CertStatus certStatus) - { - if (certStatus.Status == CertStatus.Unrevoked) - { - PkixCertPathValidatorUtilities.GetCertStatus(validDate, completecrl, cert, certStatus); - } - } - - internal static PkixPolicyNode ProcessCertE( - PkixCertPath certPath, - int index, - PkixPolicyNode validPolicyTree) - { - IList certs = certPath.Certificates; - X509Certificate cert = (X509Certificate)certs[index]; - - // - // (e) - // - Asn1Sequence certPolicies = null; - try - { - certPolicies = DerSequence.GetInstance( - PkixCertPathValidatorUtilities.GetExtensionValue(cert, X509Extensions.CertificatePolicies)); - } - catch (Exception e) - { - throw new PkixCertPathValidatorException("Could not read certificate policies extension from certificate.", - e, certPath, index); - } - if (certPolicies == null) - { - validPolicyTree = null; - } - return validPolicyTree; - } - - internal static readonly string[] CrlReasons = new string[] - { - "unspecified", - "keyCompromise", - "cACompromise", - "affiliationChanged", - "superseded", - "cessationOfOperation", - "certificateHold", - "unknown", - "removeFromCRL", - "privilegeWithdrawn", - "aACompromise" - }; - } -} diff --git a/bc-sharp-crypto/src/pkix/Rfc3281CertPathUtilities.cs b/bc-sharp-crypto/src/pkix/Rfc3281CertPathUtilities.cs deleted file mode 100644 index 101ef5e..0000000 --- a/bc-sharp-crypto/src/pkix/Rfc3281CertPathUtilities.cs +++ /dev/null @@ -1,608 +0,0 @@ -using System; -using System.Collections; -using System.Globalization; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities.Collections; -using Org.BouncyCastle.X509; -using Org.BouncyCastle.X509.Store; - -namespace Org.BouncyCastle.Pkix -{ - internal class Rfc3281CertPathUtilities - { - internal static void ProcessAttrCert7( - IX509AttributeCertificate attrCert, - PkixCertPath certPath, - PkixCertPath holderCertPath, - PkixParameters pkixParams) - { - // TODO: - // AA Controls - // Attribute encryption - // Proxy - ISet critExtOids = attrCert.GetCriticalExtensionOids(); - - // 7.1 - // process extensions - - // target information checked in step 6 / X509AttributeCertStoreSelector - if (critExtOids.Contains(X509Extensions.TargetInformation.Id)) - { - try - { - TargetInformation.GetInstance(PkixCertPathValidatorUtilities - .GetExtensionValue(attrCert, X509Extensions.TargetInformation)); - } - catch (Exception e) - { - throw new PkixCertPathValidatorException( - "Target information extension could not be read.", e); - } - } - critExtOids.Remove(X509Extensions.TargetInformation.Id); - foreach (PkixAttrCertChecker checker in pkixParams.GetAttrCertCheckers()) - { - checker.Check(attrCert, certPath, holderCertPath, critExtOids); - } - if (!critExtOids.IsEmpty) - { - throw new PkixCertPathValidatorException( - "Attribute certificate contains unsupported critical extensions: " - + critExtOids); - } - } - - /** - * Checks if an attribute certificate is revoked. - * - * @param attrCert Attribute certificate to check if it is revoked. - * @param paramsPKIX PKIX parameters. - * @param issuerCert The issuer certificate of the attribute certificate - * attrCert. - * @param validDate The date when the certificate revocation status should - * be checked. - * @param certPathCerts The certificates of the certification path to be - * checked. - * - * @throws CertPathValidatorException if the certificate is revoked or the - * status cannot be checked or some error occurs. - */ - internal static void CheckCrls( - IX509AttributeCertificate attrCert, - PkixParameters paramsPKIX, - X509Certificate issuerCert, - DateTime validDate, - IList certPathCerts) - { - if (paramsPKIX.IsRevocationEnabled) - { - // check if revocation is available - if (attrCert.GetExtensionValue(X509Extensions.NoRevAvail) == null) - { - CrlDistPoint crldp = null; - try - { - crldp = CrlDistPoint.GetInstance( - PkixCertPathValidatorUtilities.GetExtensionValue( - attrCert, X509Extensions.CrlDistributionPoints)); - } - catch (Exception e) - { - throw new PkixCertPathValidatorException( - "CRL distribution point extension could not be read.", e); - } - try - { - PkixCertPathValidatorUtilities - .AddAdditionalStoresFromCrlDistributionPoint(crldp, paramsPKIX); - } - catch (Exception e) - { - throw new PkixCertPathValidatorException( - "No additional CRL locations could be decoded from CRL distribution point extension.", e); - } - CertStatus certStatus = new CertStatus(); - ReasonsMask reasonsMask = new ReasonsMask(); - - Exception lastException = null; - bool validCrlFound = false; - // for each distribution point - if (crldp != null) - { - DistributionPoint[] dps = null; - try - { - dps = crldp.GetDistributionPoints(); - } - catch (Exception e) - { - throw new PkixCertPathValidatorException( - "Distribution points could not be read.", e); - } - try - { - for (int i = 0; i < dps.Length - && certStatus.Status == CertStatus.Unrevoked - && !reasonsMask.IsAllReasons; i++) - { - PkixParameters paramsPKIXClone = (PkixParameters) paramsPKIX - .Clone(); - CheckCrl(dps[i], attrCert, paramsPKIXClone, - validDate, issuerCert, certStatus, reasonsMask, - certPathCerts); - validCrlFound = true; - } - } - catch (Exception e) - { - lastException = new Exception( - "No valid CRL for distribution point found.", e); - } - } - - /* - * If the revocation status has not been determined, repeat the - * process above with any available CRLs not specified in a - * distribution point but issued by the certificate issuer. - */ - - if (certStatus.Status == CertStatus.Unrevoked - && !reasonsMask.IsAllReasons) - { - try - { - /* - * assume a DP with both the reasons and the cRLIssuer - * fields omitted and a distribution point name of the - * certificate issuer. - */ - Asn1Object issuer = null; - try - { - issuer = new Asn1InputStream( - attrCert.Issuer.GetPrincipals()[0].GetEncoded()).ReadObject(); - } - catch (Exception e) - { - throw new Exception( - "Issuer from certificate for CRL could not be reencoded.", - e); - } - DistributionPoint dp = new DistributionPoint( - new DistributionPointName(0, new GeneralNames( - new GeneralName(GeneralName.DirectoryName, issuer))), null, null); - PkixParameters paramsPKIXClone = (PkixParameters) paramsPKIX.Clone(); - CheckCrl(dp, attrCert, paramsPKIXClone, validDate, - issuerCert, certStatus, reasonsMask, certPathCerts); - validCrlFound = true; - } - catch (Exception e) - { - lastException = new Exception( - "No valid CRL for distribution point found.", e); - } - } - - if (!validCrlFound) - { - throw new PkixCertPathValidatorException( - "No valid CRL found.", lastException); - } - if (certStatus.Status != CertStatus.Unrevoked) - { - // This format is enforced by the NistCertPath tests - string formattedDate = certStatus.RevocationDate.Value.ToString( - "ddd MMM dd HH:mm:ss K yyyy"); - string message = "Attribute certificate revocation after " - + formattedDate; - message += ", reason: " - + Rfc3280CertPathUtilities.CrlReasons[certStatus.Status]; - throw new PkixCertPathValidatorException(message); - } - if (!reasonsMask.IsAllReasons - && certStatus.Status == CertStatus.Unrevoked) - { - certStatus.Status = CertStatus.Undetermined; - } - if (certStatus.Status == CertStatus.Undetermined) - { - throw new PkixCertPathValidatorException( - "Attribute certificate status could not be determined."); - } - - } - else - { - if (attrCert.GetExtensionValue(X509Extensions.CrlDistributionPoints) != null - || attrCert.GetExtensionValue(X509Extensions.AuthorityInfoAccess) != null) - { - throw new PkixCertPathValidatorException( - "No rev avail extension is set, but also an AC revocation pointer."); - } - } - } - } - - internal static void AdditionalChecks( - IX509AttributeCertificate attrCert, - PkixParameters pkixParams) - { - // 1 - foreach (string oid in pkixParams.GetProhibitedACAttributes()) - { - if (attrCert.GetAttributes(oid) != null) - { - throw new PkixCertPathValidatorException( - "Attribute certificate contains prohibited attribute: " - + oid + "."); - } - } - foreach (string oid in pkixParams.GetNecessaryACAttributes()) - { - if (attrCert.GetAttributes(oid) == null) - { - throw new PkixCertPathValidatorException( - "Attribute certificate does not contain necessary attribute: " - + oid + "."); - } - } - } - - internal static void ProcessAttrCert5( - IX509AttributeCertificate attrCert, - PkixParameters pkixParams) - { - try - { - attrCert.CheckValidity(PkixCertPathValidatorUtilities.GetValidDate(pkixParams)); - } - catch (CertificateExpiredException e) - { - throw new PkixCertPathValidatorException( - "Attribute certificate is not valid.", e); - } - catch (CertificateNotYetValidException e) - { - throw new PkixCertPathValidatorException( - "Attribute certificate is not valid.", e); - } - } - - internal static void ProcessAttrCert4( - X509Certificate acIssuerCert, - PkixParameters pkixParams) - { - ISet set = pkixParams.GetTrustedACIssuers(); - bool trusted = false; - foreach (TrustAnchor anchor in set) - { - IDictionary symbols = X509Name.RFC2253Symbols; - if (acIssuerCert.SubjectDN.ToString(false, symbols).Equals(anchor.CAName) - || acIssuerCert.Equals(anchor.TrustedCert)) - { - trusted = true; - } - } - if (!trusted) - { - throw new PkixCertPathValidatorException( - "Attribute certificate issuer is not directly trusted."); - } - } - - internal static void ProcessAttrCert3( - X509Certificate acIssuerCert, - PkixParameters pkixParams) - { - if (acIssuerCert.GetKeyUsage() != null - && (!acIssuerCert.GetKeyUsage()[0] && !acIssuerCert.GetKeyUsage()[1])) - { - throw new PkixCertPathValidatorException( - "Attribute certificate issuer public key cannot be used to validate digital signatures."); - } - if (acIssuerCert.GetBasicConstraints() != -1) - { - throw new PkixCertPathValidatorException( - "Attribute certificate issuer is also a public key certificate issuer."); - } - } - - internal static PkixCertPathValidatorResult ProcessAttrCert2( - PkixCertPath certPath, - PkixParameters pkixParams) - { - PkixCertPathValidator validator = new PkixCertPathValidator(); - - try - { - return validator.Validate(certPath, pkixParams); - } - catch (PkixCertPathValidatorException e) - { - throw new PkixCertPathValidatorException( - "Certification path for issuer certificate of attribute certificate could not be validated.", - e); - } - } - - /** - * Searches for a holder public key certificate and verifies its - * certification path. - * - * @param attrCert the attribute certificate. - * @param pkixParams The PKIX parameters. - * @return The certificate path of the holder certificate. - * @throws Exception if - *
      - *
    • no public key certificate can be found although holder - * information is given by an entity name or a base certificate - * ID
      • - *
    • support classes cannot be created
      • - *
    • no certification path for the public key certificate can - * be built
      • - *
    - */ - internal static PkixCertPath ProcessAttrCert1( - IX509AttributeCertificate attrCert, - PkixParameters pkixParams) - { - PkixCertPathBuilderResult result = null; - // find holder PKCs - ISet holderPKCs = new HashSet(); - if (attrCert.Holder.GetIssuer() != null) - { - X509CertStoreSelector selector = new X509CertStoreSelector(); - selector.SerialNumber = attrCert.Holder.SerialNumber; - X509Name[] principals = attrCert.Holder.GetIssuer(); - for (int i = 0; i < principals.Length; i++) - { - try - { -// if (principals[i] is X500Principal) - { - selector.Issuer = principals[i]; - } - holderPKCs.AddAll(PkixCertPathValidatorUtilities - .FindCertificates(selector, pkixParams.GetStores())); - } - catch (Exception e) - { - throw new PkixCertPathValidatorException( - "Public key certificate for attribute certificate cannot be searched.", - e); - } - } - if (holderPKCs.IsEmpty) - { - throw new PkixCertPathValidatorException( - "Public key certificate specified in base certificate ID for attribute certificate cannot be found."); - } - } - if (attrCert.Holder.GetEntityNames() != null) - { - X509CertStoreSelector selector = new X509CertStoreSelector(); - X509Name[] principals = attrCert.Holder.GetEntityNames(); - for (int i = 0; i < principals.Length; i++) - { - try - { -// if (principals[i] is X500Principal) - { - selector.Issuer = principals[i]; - } - holderPKCs.AddAll(PkixCertPathValidatorUtilities - .FindCertificates(selector, pkixParams.GetStores())); - } - catch (Exception e) - { - throw new PkixCertPathValidatorException( - "Public key certificate for attribute certificate cannot be searched.", - e); - } - } - if (holderPKCs.IsEmpty) - { - throw new PkixCertPathValidatorException( - "Public key certificate specified in entity name for attribute certificate cannot be found."); - } - } - - // verify cert paths for PKCs - PkixBuilderParameters parameters = (PkixBuilderParameters) - PkixBuilderParameters.GetInstance(pkixParams); - - PkixCertPathValidatorException lastException = null; - foreach (X509Certificate cert in holderPKCs) - { - X509CertStoreSelector selector = new X509CertStoreSelector(); - selector.Certificate = cert; - parameters.SetTargetConstraints(selector); - - PkixCertPathBuilder builder = new PkixCertPathBuilder(); - - try - { - result = builder.Build(PkixBuilderParameters.GetInstance(parameters)); - } - catch (PkixCertPathBuilderException e) - { - lastException = new PkixCertPathValidatorException( - "Certification path for public key certificate of attribute certificate could not be build.", - e); - } - } - if (lastException != null) - { - throw lastException; - } - return result.CertPath; - } - - /** - * - * Checks a distribution point for revocation information for the - * certificate attrCert. - * - * @param dp The distribution point to consider. - * @param attrCert The attribute certificate which should be checked. - * @param paramsPKIX PKIX parameters. - * @param validDate The date when the certificate revocation status should - * be checked. - * @param issuerCert Certificate to check if it is revoked. - * @param reasonMask The reasons mask which is already checked. - * @param certPathCerts The certificates of the certification path to be - * checked. - * @throws Exception if the certificate is revoked or the status - * cannot be checked or some error occurs. - */ - private static void CheckCrl( - DistributionPoint dp, - IX509AttributeCertificate attrCert, - PkixParameters paramsPKIX, - DateTime validDate, - X509Certificate issuerCert, - CertStatus certStatus, - ReasonsMask reasonMask, - IList certPathCerts) - { - /* - * 4.3.6 No Revocation Available - * - * The noRevAvail extension, defined in [X.509-2000], allows an AC - * issuer to indicate that no revocation information will be made - * available for this AC. - */ - if (attrCert.GetExtensionValue(X509Extensions.NoRevAvail) != null) - { - return; - } - - DateTime currentDate = DateTime.UtcNow; - if (validDate.CompareTo(currentDate) > 0) - { - throw new Exception("Validation time is in future."); - } - - // (a) - /* - * We always get timely valid CRLs, so there is no step (a) (1). - * "locally cached" CRLs are assumed to be in getStore(), additional - * CRLs must be enabled in the ExtendedPkixParameters and are in - * getAdditionalStore() - */ - ISet crls = PkixCertPathValidatorUtilities.GetCompleteCrls(dp, attrCert, - currentDate, paramsPKIX); - bool validCrlFound = false; - Exception lastException = null; - - IEnumerator crl_iter = crls.GetEnumerator(); - - while (crl_iter.MoveNext() - && certStatus.Status == CertStatus.Unrevoked - && !reasonMask.IsAllReasons) - { - try - { - X509Crl crl = (X509Crl) crl_iter.Current; - - // (d) - ReasonsMask interimReasonsMask = Rfc3280CertPathUtilities.ProcessCrlD(crl, dp); - - // (e) - /* - * The reasons mask is updated at the end, so only valid CRLs - * can update it. If this CRL does not contain new reasons it - * must be ignored. - */ - if (!interimReasonsMask.HasNewReasons(reasonMask)) - { - continue; - } - - // (f) - ISet keys = Rfc3280CertPathUtilities.ProcessCrlF(crl, attrCert, - null, null, paramsPKIX, certPathCerts); - // (g) - AsymmetricKeyParameter pubKey = Rfc3280CertPathUtilities.ProcessCrlG(crl, keys); - - X509Crl deltaCRL = null; - - if (paramsPKIX.IsUseDeltasEnabled) - { - // get delta CRLs - ISet deltaCRLs = PkixCertPathValidatorUtilities.GetDeltaCrls( - currentDate, paramsPKIX, crl); - // we only want one valid delta CRL - // (h) - deltaCRL = Rfc3280CertPathUtilities.ProcessCrlH(deltaCRLs, pubKey); - } - - /* - * CRL must be be valid at the current time, not the validation - * time. If a certificate is revoked with reason keyCompromise, - * cACompromise, it can be used for forgery, also for the past. - * This reason may not be contained in older CRLs. - */ - - /* - * in the chain model signatures stay valid also after the - * certificate has been expired, so they do not have to be in - * the CRL vality time - */ - if (paramsPKIX.ValidityModel != PkixParameters.ChainValidityModel) - { - /* - * if a certificate has expired, but was revoked, it is not - * more in the CRL, so it would be regarded as valid if the - * first check is not done - */ - if (attrCert.NotAfter.CompareTo(crl.ThisUpdate) < 0) - { - throw new Exception( - "No valid CRL for current time found."); - } - } - - Rfc3280CertPathUtilities.ProcessCrlB1(dp, attrCert, crl); - - // (b) (2) - Rfc3280CertPathUtilities.ProcessCrlB2(dp, attrCert, crl); - - // (c) - Rfc3280CertPathUtilities.ProcessCrlC(deltaCRL, crl, paramsPKIX); - - // (i) - Rfc3280CertPathUtilities.ProcessCrlI(validDate, deltaCRL, - attrCert, certStatus, paramsPKIX); - - // (j) - Rfc3280CertPathUtilities.ProcessCrlJ(validDate, crl, attrCert, - certStatus); - - // (k) - if (certStatus.Status == CrlReason.RemoveFromCrl) - { - certStatus.Status = CertStatus.Unrevoked; - } - - // update reasons mask - reasonMask.AddReasons(interimReasonsMask); - validCrlFound = true; - } - catch (Exception e) - { - lastException = e; - } - } - if (!validCrlFound) - { - throw lastException; - } - } - } -} diff --git a/bc-sharp-crypto/src/pkix/TrustAnchor.cs b/bc-sharp-crypto/src/pkix/TrustAnchor.cs deleted file mode 100644 index 22078ba..0000000 --- a/bc-sharp-crypto/src/pkix/TrustAnchor.cs +++ /dev/null @@ -1,259 +0,0 @@ -using System; -using System.IO; -using System.Text; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.X509; - -namespace Org.BouncyCastle.Pkix -{ - /// - /// A trust anchor or most-trusted Certification Authority (CA). - /// - /// This class represents a "most-trusted CA", which is used as a trust anchor - /// for validating X.509 certification paths. A most-trusted CA includes the - /// public key of the CA, the CA's name, and any constraints upon the set of - /// paths which may be validated using this key. These parameters can be - /// specified in the form of a trusted X509Certificate or as individual - /// parameters. - /// - public class TrustAnchor - { - private readonly AsymmetricKeyParameter pubKey; - private readonly string caName; - private readonly X509Name caPrincipal; - private readonly X509Certificate trustedCert; - private byte[] ncBytes; - private NameConstraints nc; - - /// - /// Creates an instance of TrustAnchor with the specified X509Certificate and - /// optional name constraints, which are intended to be used as additional - /// constraints when validating an X.509 certification path. - /// The name constraints are specified as a byte array. This byte array - /// should contain the DER encoded form of the name constraints, as they - /// would appear in the NameConstraints structure defined in RFC 2459 and - /// X.509. The ASN.1 definition of this structure appears below. - /// - /// 
    -	    ///	NameConstraints ::= SEQUENCE {
-	    ///		permittedSubtrees       [0]     GeneralSubtrees OPTIONAL,
-	    ///		excludedSubtrees        [1]     GeneralSubtrees OPTIONAL }
-	    ///	   
-        /// GeneralSubtrees ::= SEQUENCE SIZE (1..MAX) OF GeneralSubtree
-        /// 
-        ///		GeneralSubtree ::= SEQUENCE {
-        ///		base                    GeneralName,
-        ///		minimum         [0]     BaseDistance DEFAULT 0,
-        ///		maximum         [1]     BaseDistance OPTIONAL }
-        ///		
-        ///		BaseDistance ::= INTEGER (0..MAX)
-		///
-		///		GeneralName ::= CHOICE {
-		///		otherName                       [0]     OtherName,
-		///		rfc822Name                      [1]     IA5String,
-		///		dNSName                         [2]     IA5String,
-		///		x400Address                     [3]     ORAddress,
-		///		directoryName                   [4]     Name,
-		///		ediPartyName                    [5]     EDIPartyName,
-		///		uniformResourceIdentifier       [6]     IA5String,
-		///		iPAddress                       [7]     OCTET STRING,
-		///		registeredID                    [8]     OBJECT IDENTIFIER}
-		///
    - /// - /// Note that the name constraints byte array supplied is cloned to protect - /// against subsequent modifications. - ///     - /// a trusted X509Certificate - /// a byte array containing the ASN.1 DER encoding of a - /// NameConstraints extension to be used for checking name - /// constraints. Only the value of the extension is included, not - /// the OID or criticality flag. Specify null to omit the - /// parameter. - /// if the specified X509Certificate is null - public TrustAnchor( - X509Certificate trustedCert, - byte[] nameConstraints) - { - if (trustedCert == null) - throw new ArgumentNullException("trustedCert"); - - this.trustedCert = trustedCert; - this.pubKey = null; - this.caName = null; - this.caPrincipal = null; - setNameConstraints(nameConstraints); - } - - /// - /// Creates an instance of TrustAnchor where the - /// most-trusted CA is specified as an X500Principal and public key. - /// - /// - ///

    - /// Name constraints are an optional parameter, and are intended to be used - /// as additional constraints when validating an X.509 certification path. - ///

    - /// The name constraints are specified as a byte array. This byte array - /// contains the DER encoded form of the name constraints, as they - /// would appear in the NameConstraints structure defined in RFC 2459 - /// and X.509. The ASN.1 notation for this structure is supplied in the - /// documentation for the other constructors. - ///

    - /// Note that the name constraints byte array supplied here is cloned to - /// protect against subsequent modifications. - ///

    - ///     - /// the name of the most-trusted CA as X509Name - /// the public key of the most-trusted CA - /// - /// a byte array containing the ASN.1 DER encoding of a NameConstraints extension to - /// be used for checking name constraints. Only the value of the extension is included, - /// not the OID or criticality flag. Specify null to omit the parameter. - /// - /// - /// if caPrincipal or pubKey is null - /// - public TrustAnchor( - X509Name caPrincipal, - AsymmetricKeyParameter pubKey, - byte[] nameConstraints) - { - if (caPrincipal == null) - throw new ArgumentNullException("caPrincipal"); - if (pubKey == null) - throw new ArgumentNullException("pubKey"); - - this.trustedCert = null; - this.caPrincipal = caPrincipal; - this.caName = caPrincipal.ToString(); - this.pubKey = pubKey; - setNameConstraints(nameConstraints); - } - - /// - /// Creates an instance of TrustAnchor where the most-trusted - /// CA is specified as a distinguished name and public key. Name constraints - /// are an optional parameter, and are intended to be used as additional - /// constraints when validating an X.509 certification path. - ///
    - /// The name constraints are specified as a byte array. This byte array - /// contains the DER encoded form of the name constraints, as they would - /// appear in the NameConstraints structure defined in RFC 2459 and X.509. - ///     - /// the X.500 distinguished name of the most-trusted CA in RFC - /// 2253 string format - /// the public key of the most-trusted CA - /// a byte array containing the ASN.1 DER encoding of a - /// NameConstraints extension to be used for checking name - /// constraints. Only the value of the extension is included, not - /// the OID or criticality flag. Specify null to omit the - /// parameter. - /// throws NullPointerException, IllegalArgumentException - public TrustAnchor( - string caName, - AsymmetricKeyParameter pubKey, - byte[] nameConstraints) - { - if (caName == null) - throw new ArgumentNullException("caName"); - if (pubKey == null) - throw new ArgumentNullException("pubKey"); - if (caName.Length == 0) - throw new ArgumentException("caName can not be an empty string"); - - this.caPrincipal = new X509Name(caName); - this.pubKey = pubKey; - this.caName = caName; - this.trustedCert = null; - setNameConstraints(nameConstraints); - } - - /// - /// Returns the most-trusted CA certificate. - /// - public X509Certificate TrustedCert - { - get { return this.trustedCert; } - } - - /// - /// Returns the name of the most-trusted CA as an X509Name. - /// - public X509Name CA - { - get { return this.caPrincipal; } - } - - /// - /// Returns the name of the most-trusted CA in RFC 2253 string format. - /// - public string CAName - { - get { return this.caName; } - } - - /// - /// Returns the public key of the most-trusted CA. - /// - public AsymmetricKeyParameter CAPublicKey - { - get { return this.pubKey; } - } - - /// - /// Decode the name constraints and clone them if not null. - /// - private void setNameConstraints( - byte[] bytes) - { - if (bytes == null) - { - ncBytes = null; - nc = null; - } - else - { - ncBytes = (byte[]) bytes.Clone(); - // validate DER encoding - //nc = new NameConstraintsExtension(Boolean.FALSE, bytes); - nc = NameConstraints.GetInstance(Asn1Object.FromByteArray(bytes)); - } - } - - public byte[] GetNameConstraints - { - get { return Arrays.Clone(ncBytes); } - } - - /// - /// Returns a formatted string describing the TrustAnchor. - /// - /// a formatted string describing the TrustAnchor - public override string ToString() - { - // TODO Some of the sub-objects might not implement ToString() properly - string nl = Platform.NewLine; - StringBuilder sb = new StringBuilder(); - sb.Append("["); - sb.Append(nl); - if (this.pubKey != null) - { - sb.Append(" Trusted CA Public Key: ").Append(this.pubKey).Append(nl); - sb.Append(" Trusted CA Issuer Name: ").Append(this.caName).Append(nl); - } - else - { - sb.Append(" Trusted CA cert: ").Append(this.TrustedCert).Append(nl); - } - if (nc != null) - { - sb.Append(" Name Constraints: ").Append(nc).Append(nl); - } - return sb.ToString(); - } - } -} \ No newline at end of file diff --git a/bc-sharp-crypto/src/security/AgreementUtilities.cs b/bc-sharp-crypto/src/security/AgreementUtilities.cs deleted file mode 100644 index 12d427c..0000000 --- a/bc-sharp-crypto/src/security/AgreementUtilities.cs +++ /dev/null @@ -1,105 +0,0 @@ -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Agreement; -using Org.BouncyCastle.Crypto.Agreement.Kdf; -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Security -{ - /// - /// Utility class for creating IBasicAgreement objects from their names/Oids - /// - public sealed class AgreementUtilities - { - private AgreementUtilities() - { - } - - private static readonly IDictionary algorithms = Platform.CreateHashtable(); - //private static readonly IDictionary oids = Platform.CreateHashtable(); - - static AgreementUtilities() - { - algorithms[X9ObjectIdentifiers.DHSinglePassCofactorDHSha1KdfScheme.Id] = "ECCDHWITHSHA1KDF"; - algorithms[X9ObjectIdentifiers.DHSinglePassStdDHSha1KdfScheme.Id] = "ECDHWITHSHA1KDF"; - algorithms[X9ObjectIdentifiers.MqvSinglePassSha1KdfScheme.Id] = "ECMQVWITHSHA1KDF"; - } - - public static IBasicAgreement GetBasicAgreement( - DerObjectIdentifier oid) - { - return GetBasicAgreement(oid.Id); - } - - public static IBasicAgreement GetBasicAgreement( - string algorithm) - { - string upper = Platform.ToUpperInvariant(algorithm); - string mechanism = (string) algorithms[upper]; - - if (mechanism == null) - { - mechanism = upper; - } - - if (mechanism == "DH" || mechanism == "DIFFIEHELLMAN") - return new DHBasicAgreement(); - - if (mechanism == "ECDH") - return new ECDHBasicAgreement(); - - if (mechanism == "ECDHC" || mechanism == "ECCDH") - return new ECDHCBasicAgreement(); - - if (mechanism == "ECMQV") - return new ECMqvBasicAgreement(); - - throw new SecurityUtilityException("Basic Agreement " + algorithm + " not recognised."); - } - - public static IBasicAgreement GetBasicAgreementWithKdf( - DerObjectIdentifier oid, - string wrapAlgorithm) - { - return GetBasicAgreementWithKdf(oid.Id, wrapAlgorithm); - } - - public static IBasicAgreement GetBasicAgreementWithKdf( - string agreeAlgorithm, - string wrapAlgorithm) - { - string upper = Platform.ToUpperInvariant(agreeAlgorithm); - string mechanism = (string) algorithms[upper]; - - if (mechanism == null) - { - mechanism = upper; - } - - // 'DHWITHSHA1KDF' retained for backward compatibility - if (mechanism == "DHWITHSHA1KDF" || mechanism == "ECDHWITHSHA1KDF") - return new ECDHWithKdfBasicAgreement( - wrapAlgorithm, - new ECDHKekGenerator( - new Sha1Digest())); - - if (mechanism == "ECMQVWITHSHA1KDF") - return new ECMqvWithKdfBasicAgreement( - wrapAlgorithm, - new ECDHKekGenerator( - new Sha1Digest())); - - throw new SecurityUtilityException("Basic Agreement (with KDF) " + agreeAlgorithm + " not recognised."); - } - - public static string GetAlgorithmName( - DerObjectIdentifier oid) - { - return (string) algorithms[oid.Id]; - } - } -} diff --git a/bc-sharp-crypto/src/security/CipherUtilities.cs b/bc-sharp-crypto/src/security/CipherUtilities.cs deleted file mode 100644 index de05bc9..0000000 --- a/bc-sharp-crypto/src/security/CipherUtilities.cs +++ /dev/null @@ -1,755 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.CryptoPro; -using Org.BouncyCastle.Asn1.Kisa; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Ntt; -using Org.BouncyCastle.Asn1.Oiw; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Agreement; -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Crypto.Encodings; -using Org.BouncyCastle.Crypto.Engines; -using Org.BouncyCastle.Crypto.Generators; -using Org.BouncyCastle.Crypto.Macs; -using Org.BouncyCastle.Crypto.Modes; -using Org.BouncyCastle.Crypto.Paddings; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Security -{ - /// - /// Cipher Utility class contains methods that can not be specifically grouped into other classes. - /// - public sealed class CipherUtilities - { - private enum CipherAlgorithm { - AES, - ARC4, - BLOWFISH, - CAMELLIA, - CAST5, - CAST6, - DES, - DESEDE, - ELGAMAL, - GOST28147, - HC128, - HC256, - IDEA, - NOEKEON, - PBEWITHSHAAND128BITRC4, - PBEWITHSHAAND40BITRC4, - RC2, - RC5, - RC5_64, - RC6, - RIJNDAEL, - RSA, - SALSA20, - SEED, - SERPENT, - SKIPJACK, - TEA, - THREEFISH_256, - THREEFISH_512, - THREEFISH_1024, - TNEPRES, - TWOFISH, - VMPC, - VMPC_KSA3, - XTEA, - }; - - private enum CipherMode { ECB, NONE, CBC, CCM, CFB, CTR, CTS, EAX, GCM, GOFB, OCB, OFB, OPENPGPCFB, SIC }; - private enum CipherPadding - { - NOPADDING, - RAW, - ISO10126PADDING, - ISO10126D2PADDING, - ISO10126_2PADDING, - ISO7816_4PADDING, - ISO9797_1PADDING, - ISO9796_1, - ISO9796_1PADDING, - OAEP, - OAEPPADDING, - OAEPWITHMD5ANDMGF1PADDING, - OAEPWITHSHA1ANDMGF1PADDING, - OAEPWITHSHA_1ANDMGF1PADDING, - OAEPWITHSHA224ANDMGF1PADDING, - OAEPWITHSHA_224ANDMGF1PADDING, - OAEPWITHSHA256ANDMGF1PADDING, - OAEPWITHSHA_256ANDMGF1PADDING, - OAEPWITHSHA384ANDMGF1PADDING, - OAEPWITHSHA_384ANDMGF1PADDING, - OAEPWITHSHA512ANDMGF1PADDING, - OAEPWITHSHA_512ANDMGF1PADDING, - PKCS1, - PKCS1PADDING, - PKCS5, - PKCS5PADDING, - PKCS7, - PKCS7PADDING, - TBCPADDING, - WITHCTS, - X923PADDING, - ZEROBYTEPADDING, - }; - - private static readonly IDictionary algorithms = Platform.CreateHashtable(); - private static readonly IDictionary oids = Platform.CreateHashtable(); - - static CipherUtilities() - { - // Signal to obfuscation tools not to change enum constants - ((CipherAlgorithm)Enums.GetArbitraryValue(typeof(CipherAlgorithm))).ToString(); - ((CipherMode)Enums.GetArbitraryValue(typeof(CipherMode))).ToString(); - ((CipherPadding)Enums.GetArbitraryValue(typeof(CipherPadding))).ToString(); - - // TODO Flesh out the list of aliases - - algorithms[NistObjectIdentifiers.IdAes128Ecb.Id] = "AES/ECB/PKCS7PADDING"; - algorithms[NistObjectIdentifiers.IdAes192Ecb.Id] = "AES/ECB/PKCS7PADDING"; - algorithms[NistObjectIdentifiers.IdAes256Ecb.Id] = "AES/ECB/PKCS7PADDING"; - algorithms["AES//PKCS7"] = "AES/ECB/PKCS7PADDING"; - algorithms["AES//PKCS7PADDING"] = "AES/ECB/PKCS7PADDING"; - algorithms["AES//PKCS5"] = "AES/ECB/PKCS7PADDING"; - algorithms["AES//PKCS5PADDING"] = "AES/ECB/PKCS7PADDING"; - - algorithms[NistObjectIdentifiers.IdAes128Cbc.Id] = "AES/CBC/PKCS7PADDING"; - algorithms[NistObjectIdentifiers.IdAes192Cbc.Id] = "AES/CBC/PKCS7PADDING"; - algorithms[NistObjectIdentifiers.IdAes256Cbc.Id] = "AES/CBC/PKCS7PADDING"; - - algorithms[NistObjectIdentifiers.IdAes128Ofb.Id] = "AES/OFB/NOPADDING"; - algorithms[NistObjectIdentifiers.IdAes192Ofb.Id] = "AES/OFB/NOPADDING"; - algorithms[NistObjectIdentifiers.IdAes256Ofb.Id] = "AES/OFB/NOPADDING"; - - algorithms[NistObjectIdentifiers.IdAes128Cfb.Id] = "AES/CFB/NOPADDING"; - algorithms[NistObjectIdentifiers.IdAes192Cfb.Id] = "AES/CFB/NOPADDING"; - algorithms[NistObjectIdentifiers.IdAes256Cfb.Id] = "AES/CFB/NOPADDING"; - - algorithms["RSA/ECB/PKCS1"] = "RSA//PKCS1PADDING"; - algorithms["RSA/ECB/PKCS1PADDING"] = "RSA//PKCS1PADDING"; - algorithms[PkcsObjectIdentifiers.RsaEncryption.Id] = "RSA//PKCS1PADDING"; - algorithms[PkcsObjectIdentifiers.IdRsaesOaep.Id] = "RSA//OAEPPADDING"; - - algorithms[OiwObjectIdentifiers.DesCbc.Id] = "DES/CBC"; - algorithms[OiwObjectIdentifiers.DesCfb.Id] = "DES/CFB"; - algorithms[OiwObjectIdentifiers.DesEcb.Id] = "DES/ECB"; - algorithms[OiwObjectIdentifiers.DesOfb.Id] = "DES/OFB"; - algorithms[OiwObjectIdentifiers.DesEde.Id] = "DESEDE"; - algorithms["TDEA"] = "DESEDE"; - algorithms[PkcsObjectIdentifiers.DesEde3Cbc.Id] = "DESEDE/CBC"; - algorithms[PkcsObjectIdentifiers.RC2Cbc.Id] = "RC2/CBC"; - algorithms["1.3.6.1.4.1.188.7.1.1.2"] = "IDEA/CBC"; - algorithms["1.2.840.113533.7.66.10"] = "CAST5/CBC"; - - algorithms["RC4"] = "ARC4"; - algorithms["ARCFOUR"] = "ARC4"; - algorithms["1.2.840.113549.3.4"] = "ARC4"; - - - - algorithms["PBEWITHSHA1AND128BITRC4"] = "PBEWITHSHAAND128BITRC4"; - algorithms[PkcsObjectIdentifiers.PbeWithShaAnd128BitRC4.Id] = "PBEWITHSHAAND128BITRC4"; - algorithms["PBEWITHSHA1AND40BITRC4"] = "PBEWITHSHAAND40BITRC4"; - algorithms[PkcsObjectIdentifiers.PbeWithShaAnd40BitRC4.Id] = "PBEWITHSHAAND40BITRC4"; - - algorithms["PBEWITHSHA1ANDDES"] = "PBEWITHSHA1ANDDES-CBC"; - algorithms[PkcsObjectIdentifiers.PbeWithSha1AndDesCbc.Id] = "PBEWITHSHA1ANDDES-CBC"; - algorithms["PBEWITHSHA1ANDRC2"] = "PBEWITHSHA1ANDRC2-CBC"; - algorithms[PkcsObjectIdentifiers.PbeWithSha1AndRC2Cbc.Id] = "PBEWITHSHA1ANDRC2-CBC"; - - algorithms["PBEWITHSHA1AND3-KEYTRIPLEDES-CBC"] = "PBEWITHSHAAND3-KEYTRIPLEDES-CBC"; - algorithms["PBEWITHSHAAND3KEYTRIPLEDES"] = "PBEWITHSHAAND3-KEYTRIPLEDES-CBC"; - algorithms[PkcsObjectIdentifiers.PbeWithShaAnd3KeyTripleDesCbc.Id] = "PBEWITHSHAAND3-KEYTRIPLEDES-CBC"; - algorithms["PBEWITHSHA1ANDDESEDE"] = "PBEWITHSHAAND3-KEYTRIPLEDES-CBC"; - - algorithms["PBEWITHSHA1AND2-KEYTRIPLEDES-CBC"] = "PBEWITHSHAAND2-KEYTRIPLEDES-CBC"; - algorithms[PkcsObjectIdentifiers.PbeWithShaAnd2KeyTripleDesCbc.Id] = "PBEWITHSHAAND2-KEYTRIPLEDES-CBC"; - - algorithms["PBEWITHSHA1AND128BITRC2-CBC"] = "PBEWITHSHAAND128BITRC2-CBC"; - algorithms[PkcsObjectIdentifiers.PbeWithShaAnd128BitRC2Cbc.Id] = "PBEWITHSHAAND128BITRC2-CBC"; - - algorithms["PBEWITHSHA1AND40BITRC2-CBC"] = "PBEWITHSHAAND40BITRC2-CBC"; - algorithms[PkcsObjectIdentifiers.PbewithShaAnd40BitRC2Cbc.Id] = "PBEWITHSHAAND40BITRC2-CBC"; - - algorithms["PBEWITHSHA1AND128BITAES-CBC-BC"] = "PBEWITHSHAAND128BITAES-CBC-BC"; - algorithms["PBEWITHSHA-1AND128BITAES-CBC-BC"] = "PBEWITHSHAAND128BITAES-CBC-BC"; - - algorithms["PBEWITHSHA1AND192BITAES-CBC-BC"] = "PBEWITHSHAAND192BITAES-CBC-BC"; - algorithms["PBEWITHSHA-1AND192BITAES-CBC-BC"] = "PBEWITHSHAAND192BITAES-CBC-BC"; - - algorithms["PBEWITHSHA1AND256BITAES-CBC-BC"] = "PBEWITHSHAAND256BITAES-CBC-BC"; - algorithms["PBEWITHSHA-1AND256BITAES-CBC-BC"] = "PBEWITHSHAAND256BITAES-CBC-BC"; - - algorithms["PBEWITHSHA-256AND128BITAES-CBC-BC"] = "PBEWITHSHA256AND128BITAES-CBC-BC"; - algorithms["PBEWITHSHA-256AND192BITAES-CBC-BC"] = "PBEWITHSHA256AND192BITAES-CBC-BC"; - algorithms["PBEWITHSHA-256AND256BITAES-CBC-BC"] = "PBEWITHSHA256AND256BITAES-CBC-BC"; - - - algorithms["GOST"] = "GOST28147"; - algorithms["GOST-28147"] = "GOST28147"; - algorithms[CryptoProObjectIdentifiers.GostR28147Cbc.Id] = "GOST28147/CBC/PKCS7PADDING"; - - algorithms["RC5-32"] = "RC5"; - - algorithms[NttObjectIdentifiers.IdCamellia128Cbc.Id] = "CAMELLIA/CBC/PKCS7PADDING"; - algorithms[NttObjectIdentifiers.IdCamellia192Cbc.Id] = "CAMELLIA/CBC/PKCS7PADDING"; - algorithms[NttObjectIdentifiers.IdCamellia256Cbc.Id] = "CAMELLIA/CBC/PKCS7PADDING"; - - algorithms[KisaObjectIdentifiers.IdSeedCbc.Id] = "SEED/CBC/PKCS7PADDING"; - - algorithms["1.3.6.1.4.1.3029.1.2"] = "BLOWFISH/CBC"; - } - - private CipherUtilities() - { - } - - /// - /// Returns a ObjectIdentifier for a give encoding. - /// - /// A string representation of the encoding. - /// A DerObjectIdentifier, null if the Oid is not available. - // TODO Don't really want to support this - public static DerObjectIdentifier GetObjectIdentifier( - string mechanism) - { - if (mechanism == null) - throw new ArgumentNullException("mechanism"); - - mechanism = Platform.ToUpperInvariant(mechanism); - string aliased = (string) algorithms[mechanism]; - - if (aliased != null) - mechanism = aliased; - - return (DerObjectIdentifier) oids[mechanism]; - } - - public static ICollection Algorithms - { - get { return oids.Keys; } - } - - public static IBufferedCipher GetCipher( - DerObjectIdentifier oid) - { - return GetCipher(oid.Id); - } - - public static IBufferedCipher GetCipher( - string algorithm) - { - if (algorithm == null) - throw new ArgumentNullException("algorithm"); - - algorithm = Platform.ToUpperInvariant(algorithm); - - { - string aliased = (string) algorithms[algorithm]; - - if (aliased != null) - algorithm = aliased; - } - - IBasicAgreement iesAgreement = null; - if (algorithm == "IES") - { - iesAgreement = new DHBasicAgreement(); - } - else if (algorithm == "ECIES") - { - iesAgreement = new ECDHBasicAgreement(); - } - - if (iesAgreement != null) - { - return new BufferedIesCipher( - new IesEngine( - iesAgreement, - new Kdf2BytesGenerator( - new Sha1Digest()), - new HMac( - new Sha1Digest()))); - } - - - - if (Platform.StartsWith(algorithm, "PBE")) - { - if (Platform.EndsWith(algorithm, "-CBC")) - { - if (algorithm == "PBEWITHSHA1ANDDES-CBC") - { - return new PaddedBufferedBlockCipher( - new CbcBlockCipher(new DesEngine())); - } - else if (algorithm == "PBEWITHSHA1ANDRC2-CBC") - { - return new PaddedBufferedBlockCipher( - new CbcBlockCipher(new RC2Engine())); - } - else if (Strings.IsOneOf(algorithm, - "PBEWITHSHAAND2-KEYTRIPLEDES-CBC", "PBEWITHSHAAND3-KEYTRIPLEDES-CBC")) - { - return new PaddedBufferedBlockCipher( - new CbcBlockCipher(new DesEdeEngine())); - } - else if (Strings.IsOneOf(algorithm, - "PBEWITHSHAAND128BITRC2-CBC", "PBEWITHSHAAND40BITRC2-CBC")) - { - return new PaddedBufferedBlockCipher( - new CbcBlockCipher(new RC2Engine())); - } - } - else if (Platform.EndsWith(algorithm, "-BC") || Platform.EndsWith(algorithm, "-OPENSSL")) - { - if (Strings.IsOneOf(algorithm, - "PBEWITHSHAAND128BITAES-CBC-BC", - "PBEWITHSHAAND192BITAES-CBC-BC", - "PBEWITHSHAAND256BITAES-CBC-BC", - "PBEWITHSHA256AND128BITAES-CBC-BC", - "PBEWITHSHA256AND192BITAES-CBC-BC", - "PBEWITHSHA256AND256BITAES-CBC-BC", - "PBEWITHMD5AND128BITAES-CBC-OPENSSL", - "PBEWITHMD5AND192BITAES-CBC-OPENSSL", - "PBEWITHMD5AND256BITAES-CBC-OPENSSL")) - { - return new PaddedBufferedBlockCipher( - new CbcBlockCipher(new AesEngine())); - } - } - } - - - - string[] parts = algorithm.Split('/'); - - IBlockCipher blockCipher = null; - IAsymmetricBlockCipher asymBlockCipher = null; - IStreamCipher streamCipher = null; - - string algorithmName = parts[0]; - - { - string aliased = (string)algorithms[algorithmName]; - - if (aliased != null) - algorithmName = aliased; - } - - CipherAlgorithm cipherAlgorithm; - try - { - cipherAlgorithm = (CipherAlgorithm)Enums.GetEnumValue(typeof(CipherAlgorithm), algorithmName); - } - catch (ArgumentException) - { - throw new SecurityUtilityException("Cipher " + algorithm + " not recognised."); - } - - switch (cipherAlgorithm) - { - case CipherAlgorithm.AES: - blockCipher = new AesEngine(); - break; - case CipherAlgorithm.ARC4: - streamCipher = new RC4Engine(); - break; - case CipherAlgorithm.BLOWFISH: - blockCipher = new BlowfishEngine(); - break; - case CipherAlgorithm.CAMELLIA: - blockCipher = new CamelliaEngine(); - break; - case CipherAlgorithm.CAST5: - blockCipher = new Cast5Engine(); - break; - case CipherAlgorithm.CAST6: - blockCipher = new Cast6Engine(); - break; - case CipherAlgorithm.DES: - blockCipher = new DesEngine(); - break; - case CipherAlgorithm.DESEDE: - blockCipher = new DesEdeEngine(); - break; - case CipherAlgorithm.ELGAMAL: - asymBlockCipher = new ElGamalEngine(); - break; - case CipherAlgorithm.GOST28147: - blockCipher = new Gost28147Engine(); - break; - case CipherAlgorithm.HC128: - streamCipher = new HC128Engine(); - break; - case CipherAlgorithm.HC256: - streamCipher = new HC256Engine(); - break; - case CipherAlgorithm.IDEA: - blockCipher = new IdeaEngine(); - break; - case CipherAlgorithm.NOEKEON: - blockCipher = new NoekeonEngine(); - break; - case CipherAlgorithm.PBEWITHSHAAND128BITRC4: - case CipherAlgorithm.PBEWITHSHAAND40BITRC4: - streamCipher = new RC4Engine(); - break; - case CipherAlgorithm.RC2: - blockCipher = new RC2Engine(); - break; - case CipherAlgorithm.RC5: - blockCipher = new RC532Engine(); - break; - case CipherAlgorithm.RC5_64: - blockCipher = new RC564Engine(); - break; - case CipherAlgorithm.RC6: - blockCipher = new RC6Engine(); - break; - case CipherAlgorithm.RIJNDAEL: - blockCipher = new RijndaelEngine(); - break; - case CipherAlgorithm.RSA: - asymBlockCipher = new RsaBlindedEngine(); - break; - case CipherAlgorithm.SALSA20: - streamCipher = new Salsa20Engine(); - break; - case CipherAlgorithm.SEED: - blockCipher = new SeedEngine(); - break; - case CipherAlgorithm.SERPENT: - blockCipher = new SerpentEngine(); - break; - case CipherAlgorithm.SKIPJACK: - blockCipher = new SkipjackEngine(); - break; - case CipherAlgorithm.TEA: - blockCipher = new TeaEngine(); - break; - case CipherAlgorithm.THREEFISH_256: - blockCipher = new ThreefishEngine(ThreefishEngine.BLOCKSIZE_256); - break; - case CipherAlgorithm.THREEFISH_512: - blockCipher = new ThreefishEngine(ThreefishEngine.BLOCKSIZE_512); - break; - case CipherAlgorithm.THREEFISH_1024: - blockCipher = new ThreefishEngine(ThreefishEngine.BLOCKSIZE_1024); - break; - case CipherAlgorithm.TNEPRES: - blockCipher = new TnepresEngine(); - break; - case CipherAlgorithm.TWOFISH: - blockCipher = new TwofishEngine(); - break; - case CipherAlgorithm.VMPC: - streamCipher = new VmpcEngine(); - break; - case CipherAlgorithm.VMPC_KSA3: - streamCipher = new VmpcKsa3Engine(); - break; - case CipherAlgorithm.XTEA: - blockCipher = new XteaEngine(); - break; - default: - throw new SecurityUtilityException("Cipher " + algorithm + " not recognised."); - } - - if (streamCipher != null) - { - if (parts.Length > 1) - throw new ArgumentException("Modes and paddings not used for stream ciphers"); - - return new BufferedStreamCipher(streamCipher); - } - - - bool cts = false; - bool padded = true; - IBlockCipherPadding padding = null; - IAeadBlockCipher aeadBlockCipher = null; - - if (parts.Length > 2) - { - if (streamCipher != null) - throw new ArgumentException("Paddings not used for stream ciphers"); - - string paddingName = parts[2]; - - CipherPadding cipherPadding; - if (paddingName == "") - { - cipherPadding = CipherPadding.RAW; - } - else if (paddingName == "X9.23PADDING") - { - cipherPadding = CipherPadding.X923PADDING; - } - else - { - try - { - cipherPadding = (CipherPadding)Enums.GetEnumValue(typeof(CipherPadding), paddingName); - } - catch (ArgumentException) - { - throw new SecurityUtilityException("Cipher " + algorithm + " not recognised."); - } - } - - switch (cipherPadding) - { - case CipherPadding.NOPADDING: - padded = false; - break; - case CipherPadding.RAW: - break; - case CipherPadding.ISO10126PADDING: - case CipherPadding.ISO10126D2PADDING: - case CipherPadding.ISO10126_2PADDING: - padding = new ISO10126d2Padding(); - break; - case CipherPadding.ISO7816_4PADDING: - case CipherPadding.ISO9797_1PADDING: - padding = new ISO7816d4Padding(); - break; - case CipherPadding.ISO9796_1: - case CipherPadding.ISO9796_1PADDING: - asymBlockCipher = new ISO9796d1Encoding(asymBlockCipher); - break; - case CipherPadding.OAEP: - case CipherPadding.OAEPPADDING: - asymBlockCipher = new OaepEncoding(asymBlockCipher); - break; - case CipherPadding.OAEPWITHMD5ANDMGF1PADDING: - asymBlockCipher = new OaepEncoding(asymBlockCipher, new MD5Digest()); - break; - case CipherPadding.OAEPWITHSHA1ANDMGF1PADDING: - case CipherPadding.OAEPWITHSHA_1ANDMGF1PADDING: - asymBlockCipher = new OaepEncoding(asymBlockCipher, new Sha1Digest()); - break; - case CipherPadding.OAEPWITHSHA224ANDMGF1PADDING: - case CipherPadding.OAEPWITHSHA_224ANDMGF1PADDING: - asymBlockCipher = new OaepEncoding(asymBlockCipher, new Sha224Digest()); - break; - case CipherPadding.OAEPWITHSHA256ANDMGF1PADDING: - case CipherPadding.OAEPWITHSHA_256ANDMGF1PADDING: - asymBlockCipher = new OaepEncoding(asymBlockCipher, new Sha256Digest()); - break; - case CipherPadding.OAEPWITHSHA384ANDMGF1PADDING: - case CipherPadding.OAEPWITHSHA_384ANDMGF1PADDING: - asymBlockCipher = new OaepEncoding(asymBlockCipher, new Sha384Digest()); - break; - case CipherPadding.OAEPWITHSHA512ANDMGF1PADDING: - case CipherPadding.OAEPWITHSHA_512ANDMGF1PADDING: - asymBlockCipher = new OaepEncoding(asymBlockCipher, new Sha512Digest()); - break; - case CipherPadding.PKCS1: - case CipherPadding.PKCS1PADDING: - asymBlockCipher = new Pkcs1Encoding(asymBlockCipher); - break; - case CipherPadding.PKCS5: - case CipherPadding.PKCS5PADDING: - case CipherPadding.PKCS7: - case CipherPadding.PKCS7PADDING: - padding = new Pkcs7Padding(); - break; - case CipherPadding.TBCPADDING: - padding = new TbcPadding(); - break; - case CipherPadding.WITHCTS: - cts = true; - break; - case CipherPadding.X923PADDING: - padding = new X923Padding(); - break; - case CipherPadding.ZEROBYTEPADDING: - padding = new ZeroBytePadding(); - break; - default: - throw new SecurityUtilityException("Cipher " + algorithm + " not recognised."); - } - } - - string mode = ""; - if (parts.Length > 1) - { - mode = parts[1]; - - int di = GetDigitIndex(mode); - string modeName = di >= 0 ? mode.Substring(0, di) : mode; - - try - { - CipherMode cipherMode = modeName == "" - ? CipherMode.NONE - : (CipherMode)Enums.GetEnumValue(typeof(CipherMode), modeName); - - switch (cipherMode) - { - case CipherMode.ECB: - case CipherMode.NONE: - break; - case CipherMode.CBC: - blockCipher = new CbcBlockCipher(blockCipher); - break; - case CipherMode.CCM: - aeadBlockCipher = new CcmBlockCipher(blockCipher); - break; - case CipherMode.CFB: - { - int bits = (di < 0) - ? 8 * blockCipher.GetBlockSize() - : int.Parse(mode.Substring(di)); - - blockCipher = new CfbBlockCipher(blockCipher, bits); - break; - } - case CipherMode.CTR: - blockCipher = new SicBlockCipher(blockCipher); - break; - case CipherMode.CTS: - cts = true; - blockCipher = new CbcBlockCipher(blockCipher); - break; - case CipherMode.EAX: - aeadBlockCipher = new EaxBlockCipher(blockCipher); - break; - case CipherMode.GCM: - aeadBlockCipher = new GcmBlockCipher(blockCipher); - break; - case CipherMode.GOFB: - blockCipher = new GOfbBlockCipher(blockCipher); - break; - case CipherMode.OCB: - aeadBlockCipher = new OcbBlockCipher(blockCipher, CreateBlockCipher(cipherAlgorithm)); - break; - case CipherMode.OFB: - { - int bits = (di < 0) - ? 8 * blockCipher.GetBlockSize() - : int.Parse(mode.Substring(di)); - - blockCipher = new OfbBlockCipher(blockCipher, bits); - break; - } - case CipherMode.OPENPGPCFB: - blockCipher = new OpenPgpCfbBlockCipher(blockCipher); - break; - case CipherMode.SIC: - if (blockCipher.GetBlockSize() < 16) - { - throw new ArgumentException("Warning: SIC-Mode can become a twotime-pad if the blocksize of the cipher is too small. Use a cipher with a block size of at least 128 bits (e.g. AES)"); - } - blockCipher = new SicBlockCipher(blockCipher); - break; - default: - throw new SecurityUtilityException("Cipher " + algorithm + " not recognised."); - } - } - catch (ArgumentException) - { - throw new SecurityUtilityException("Cipher " + algorithm + " not recognised."); - } - } - - if (aeadBlockCipher != null) - { - if (cts) - throw new SecurityUtilityException("CTS mode not valid for AEAD ciphers."); - if (padded && parts.Length > 2 && parts[2] != "") - throw new SecurityUtilityException("Bad padding specified for AEAD cipher."); - - return new BufferedAeadBlockCipher(aeadBlockCipher); - } - - if (blockCipher != null) - { - if (cts) - { - return new CtsBlockCipher(blockCipher); - } - - if (padding != null) - { - return new PaddedBufferedBlockCipher(blockCipher, padding); - } - - if (!padded || blockCipher.IsPartialBlockOkay) - { - return new BufferedBlockCipher(blockCipher); - } - - return new PaddedBufferedBlockCipher(blockCipher); - } - - if (asymBlockCipher != null) - { - return new BufferedAsymmetricBlockCipher(asymBlockCipher); - } - - throw new SecurityUtilityException("Cipher " + algorithm + " not recognised."); - } - - public static string GetAlgorithmName( - DerObjectIdentifier oid) - { - return (string) algorithms[oid.Id]; - } - - private static int GetDigitIndex( - string s) - { - for (int i = 0; i < s.Length; ++i) - { - if (char.IsDigit(s[i])) - return i; - } - - return -1; - } - - private static IBlockCipher CreateBlockCipher(CipherAlgorithm cipherAlgorithm) - { - switch (cipherAlgorithm) - { - case CipherAlgorithm.AES: return new AesEngine(); - case CipherAlgorithm.BLOWFISH: return new BlowfishEngine(); - case CipherAlgorithm.CAMELLIA: return new CamelliaEngine(); - case CipherAlgorithm.CAST5: return new Cast5Engine(); - case CipherAlgorithm.CAST6: return new Cast6Engine(); - case CipherAlgorithm.DES: return new DesEngine(); - case CipherAlgorithm.DESEDE: return new DesEdeEngine(); - case CipherAlgorithm.GOST28147: return new Gost28147Engine(); - case CipherAlgorithm.IDEA: return new IdeaEngine(); - case CipherAlgorithm.NOEKEON: return new NoekeonEngine(); - case CipherAlgorithm.RC2: return new RC2Engine(); - case CipherAlgorithm.RC5: return new RC532Engine(); - case CipherAlgorithm.RC5_64: return new RC564Engine(); - case CipherAlgorithm.RC6: return new RC6Engine(); - case CipherAlgorithm.RIJNDAEL: return new RijndaelEngine(); - case CipherAlgorithm.SEED: return new SeedEngine(); - case CipherAlgorithm.SERPENT: return new SerpentEngine(); - case CipherAlgorithm.SKIPJACK: return new SkipjackEngine(); - case CipherAlgorithm.TEA: return new TeaEngine(); - case CipherAlgorithm.THREEFISH_256: return new ThreefishEngine(ThreefishEngine.BLOCKSIZE_256); - case CipherAlgorithm.THREEFISH_512: return new ThreefishEngine(ThreefishEngine.BLOCKSIZE_512); - case CipherAlgorithm.THREEFISH_1024: return new ThreefishEngine(ThreefishEngine.BLOCKSIZE_1024); - case CipherAlgorithm.TNEPRES: return new TnepresEngine(); - case CipherAlgorithm.TWOFISH: return new TwofishEngine(); - case CipherAlgorithm.XTEA: return new XteaEngine(); - default: - throw new SecurityUtilityException("Cipher " + cipherAlgorithm + " not recognised or not a block cipher"); - } - } - } -} diff --git a/bc-sharp-crypto/src/security/DigestUtilities.cs b/bc-sharp-crypto/src/security/DigestUtilities.cs deleted file mode 100644 index 7ddf6c8..0000000 --- a/bc-sharp-crypto/src/security/DigestUtilities.cs +++ /dev/null @@ -1,222 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.CryptoPro; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.Oiw; -using Org.BouncyCastle.Asn1.TeleTrust; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Security -{ - /// - /// Utility class for creating IDigest objects from their names/Oids - /// - public sealed class DigestUtilities - { - private enum DigestAlgorithm { - GOST3411, - KECCAK_224, KECCAK_256, KECCAK_288, KECCAK_384, KECCAK_512, - MD2, MD4, MD5, - RIPEMD128, RIPEMD160, RIPEMD256, RIPEMD320, - SHA_1, SHA_224, SHA_256, SHA_384, SHA_512, - SHA_512_224, SHA_512_256, - SHA3_224, SHA3_256, SHA3_384, SHA3_512, - SHAKE128, SHAKE256, - TIGER, - WHIRLPOOL, - }; - - private DigestUtilities() - { - } - - private static readonly IDictionary algorithms = Platform.CreateHashtable(); - private static readonly IDictionary oids = Platform.CreateHashtable(); - - static DigestUtilities() - { - // Signal to obfuscation tools not to change enum constants - ((DigestAlgorithm)Enums.GetArbitraryValue(typeof(DigestAlgorithm))).ToString(); - - algorithms[PkcsObjectIdentifiers.MD2.Id] = "MD2"; - algorithms[PkcsObjectIdentifiers.MD4.Id] = "MD4"; - algorithms[PkcsObjectIdentifiers.MD5.Id] = "MD5"; - - algorithms["SHA1"] = "SHA-1"; - algorithms[OiwObjectIdentifiers.IdSha1.Id] = "SHA-1"; - algorithms["SHA224"] = "SHA-224"; - algorithms[NistObjectIdentifiers.IdSha224.Id] = "SHA-224"; - algorithms["SHA256"] = "SHA-256"; - algorithms[NistObjectIdentifiers.IdSha256.Id] = "SHA-256"; - algorithms["SHA384"] = "SHA-384"; - algorithms[NistObjectIdentifiers.IdSha384.Id] = "SHA-384"; - algorithms["SHA512"] = "SHA-512"; - algorithms[NistObjectIdentifiers.IdSha512.Id] = "SHA-512"; - algorithms["SHA512/224"] = "SHA-512/224"; - algorithms[NistObjectIdentifiers.IdSha512_224.Id] = "SHA-512/224"; - algorithms["SHA512/256"] = "SHA-512/256"; - algorithms[NistObjectIdentifiers.IdSha512_256.Id] = "SHA-512/256"; - - algorithms["RIPEMD-128"] = "RIPEMD128"; - algorithms[TeleTrusTObjectIdentifiers.RipeMD128.Id] = "RIPEMD128"; - algorithms["RIPEMD-160"] = "RIPEMD160"; - algorithms[TeleTrusTObjectIdentifiers.RipeMD160.Id] = "RIPEMD160"; - algorithms["RIPEMD-256"] = "RIPEMD256"; - algorithms[TeleTrusTObjectIdentifiers.RipeMD256.Id] = "RIPEMD256"; - algorithms["RIPEMD-320"] = "RIPEMD320"; -// algorithms[TeleTrusTObjectIdentifiers.RipeMD320.Id] = "RIPEMD320"; - - algorithms[CryptoProObjectIdentifiers.GostR3411.Id] = "GOST3411"; - - algorithms[NistObjectIdentifiers.IdSha3_224.Id] = "SHA3-224"; - algorithms[NistObjectIdentifiers.IdSha3_256.Id] = "SHA3-256"; - algorithms[NistObjectIdentifiers.IdSha3_384.Id] = "SHA3-384"; - algorithms[NistObjectIdentifiers.IdSha3_512.Id] = "SHA3-512"; - algorithms[NistObjectIdentifiers.IdShake128.Id] = "SHAKE128"; - algorithms[NistObjectIdentifiers.IdShake256.Id] = "SHAKE256"; - - oids["MD2"] = PkcsObjectIdentifiers.MD2; - oids["MD4"] = PkcsObjectIdentifiers.MD4; - oids["MD5"] = PkcsObjectIdentifiers.MD5; - oids["SHA-1"] = OiwObjectIdentifiers.IdSha1; - oids["SHA-224"] = NistObjectIdentifiers.IdSha224; - oids["SHA-256"] = NistObjectIdentifiers.IdSha256; - oids["SHA-384"] = NistObjectIdentifiers.IdSha384; - oids["SHA-512"] = NistObjectIdentifiers.IdSha512; - oids["SHA-512/224"] = NistObjectIdentifiers.IdSha512_224; - oids["SHA-512/256"] = NistObjectIdentifiers.IdSha512_256; - oids["SHA3-224"] = NistObjectIdentifiers.IdSha3_224; - oids["SHA3-256"] = NistObjectIdentifiers.IdSha3_256; - oids["SHA3-384"] = NistObjectIdentifiers.IdSha3_384; - oids["SHA3-512"] = NistObjectIdentifiers.IdSha3_512; - oids["SHAKE128"] = NistObjectIdentifiers.IdShake128; - oids["SHAKE256"] = NistObjectIdentifiers.IdShake256; - oids["RIPEMD128"] = TeleTrusTObjectIdentifiers.RipeMD128; - oids["RIPEMD160"] = TeleTrusTObjectIdentifiers.RipeMD160; - oids["RIPEMD256"] = TeleTrusTObjectIdentifiers.RipeMD256; - oids["GOST3411"] = CryptoProObjectIdentifiers.GostR3411; - } - - /// - /// Returns a ObjectIdentifier for a given digest mechanism. - /// - /// A string representation of the digest meanism. - /// A DerObjectIdentifier, null if the Oid is not available. - - public static DerObjectIdentifier GetObjectIdentifier( - string mechanism) - { - if (mechanism == null) - throw new System.ArgumentNullException("mechanism"); - - mechanism = Platform.ToUpperInvariant(mechanism); - string aliased = (string) algorithms[mechanism]; - - if (aliased != null) - mechanism = aliased; - - return (DerObjectIdentifier) oids[mechanism]; - } - - public static ICollection Algorithms - { - get { return oids.Keys; } - } - - public static IDigest GetDigest( - DerObjectIdentifier id) - { - return GetDigest(id.Id); - } - - public static IDigest GetDigest( - string algorithm) - { - string upper = Platform.ToUpperInvariant(algorithm); - string mechanism = (string) algorithms[upper]; - - if (mechanism == null) - { - mechanism = upper; - } - - try - { - DigestAlgorithm digestAlgorithm = (DigestAlgorithm)Enums.GetEnumValue( - typeof(DigestAlgorithm), mechanism); - - switch (digestAlgorithm) - { - case DigestAlgorithm.GOST3411: return new Gost3411Digest(); - case DigestAlgorithm.KECCAK_224: return new KeccakDigest(224); - case DigestAlgorithm.KECCAK_256: return new KeccakDigest(256); - case DigestAlgorithm.KECCAK_288: return new KeccakDigest(288); - case DigestAlgorithm.KECCAK_384: return new KeccakDigest(384); - case DigestAlgorithm.KECCAK_512: return new KeccakDigest(512); - case DigestAlgorithm.MD2: return new MD2Digest(); - case DigestAlgorithm.MD4: return new MD4Digest(); - case DigestAlgorithm.MD5: return new MD5Digest(); - case DigestAlgorithm.RIPEMD128: return new RipeMD128Digest(); - case DigestAlgorithm.RIPEMD160: return new RipeMD160Digest(); - case DigestAlgorithm.RIPEMD256: return new RipeMD256Digest(); - case DigestAlgorithm.RIPEMD320: return new RipeMD320Digest(); - case DigestAlgorithm.SHA_1: return new Sha1Digest(); - case DigestAlgorithm.SHA_224: return new Sha224Digest(); - case DigestAlgorithm.SHA_256: return new Sha256Digest(); - case DigestAlgorithm.SHA_384: return new Sha384Digest(); - case DigestAlgorithm.SHA_512: return new Sha512Digest(); - case DigestAlgorithm.SHA_512_224: return new Sha512tDigest(224); - case DigestAlgorithm.SHA_512_256: return new Sha512tDigest(256); - case DigestAlgorithm.SHA3_224: return new Sha3Digest(224); - case DigestAlgorithm.SHA3_256: return new Sha3Digest(256); - case DigestAlgorithm.SHA3_384: return new Sha3Digest(384); - case DigestAlgorithm.SHA3_512: return new Sha3Digest(512); - case DigestAlgorithm.SHAKE128: return new ShakeDigest(128); - case DigestAlgorithm.SHAKE256: return new ShakeDigest(256); - case DigestAlgorithm.TIGER: return new TigerDigest(); - case DigestAlgorithm.WHIRLPOOL: return new WhirlpoolDigest(); - } - } - catch (ArgumentException) - { - } - - throw new SecurityUtilityException("Digest " + mechanism + " not recognised."); - } - - public static string GetAlgorithmName( - DerObjectIdentifier oid) - { - return (string) algorithms[oid.Id]; - } - - public static byte[] CalculateDigest(string algorithm, byte[] input) - { - IDigest digest = GetDigest(algorithm); - digest.BlockUpdate(input, 0, input.Length); - return DoFinal(digest); - } - - public static byte[] DoFinal( - IDigest digest) - { - byte[] b = new byte[digest.GetDigestSize()]; - digest.DoFinal(b, 0); - return b; - } - - public static byte[] DoFinal( - IDigest digest, - byte[] input) - { - digest.BlockUpdate(input, 0, input.Length); - return DoFinal(digest); - } - } -} diff --git a/bc-sharp-crypto/src/security/DotNetUtilities.cs b/bc-sharp-crypto/src/security/DotNetUtilities.cs deleted file mode 100644 index 69322b5..0000000 --- a/bc-sharp-crypto/src/security/DotNetUtilities.cs +++ /dev/null @@ -1,245 +0,0 @@ -#if !(NETCF_1_0 || SILVERLIGHT || PORTABLE) - -using System; -using System.Security.Cryptography; -using SystemX509 = System.Security.Cryptography.X509Certificates; - -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.X509; - -namespace Org.BouncyCastle.Security -{ - /// - /// A class containing methods to interface the BouncyCastle world to the .NET Crypto world. - /// - public sealed class DotNetUtilities - { - private DotNetUtilities() - { - } - - /// - /// Create an System.Security.Cryptography.X509Certificate from an X509Certificate Structure. - /// - /// - /// A System.Security.Cryptography.X509Certificate. - public static SystemX509.X509Certificate ToX509Certificate( - X509CertificateStructure x509Struct) - { - return new SystemX509.X509Certificate(x509Struct.GetDerEncoded()); - } - - public static SystemX509.X509Certificate ToX509Certificate( - X509Certificate x509Cert) - { - return new SystemX509.X509Certificate(x509Cert.GetEncoded()); - } - - public static X509Certificate FromX509Certificate( - SystemX509.X509Certificate x509Cert) - { - return new X509CertificateParser().ReadCertificate(x509Cert.GetRawCertData()); - } - - public static AsymmetricCipherKeyPair GetDsaKeyPair( - DSA dsa) - { - return GetDsaKeyPair(dsa.ExportParameters(true)); - } - - public static AsymmetricCipherKeyPair GetDsaKeyPair( - DSAParameters dp) - { - DsaValidationParameters validationParameters = (dp.Seed != null) - ? new DsaValidationParameters(dp.Seed, dp.Counter) - : null; - - DsaParameters parameters = new DsaParameters( - new BigInteger(1, dp.P), - new BigInteger(1, dp.Q), - new BigInteger(1, dp.G), - validationParameters); - - DsaPublicKeyParameters pubKey = new DsaPublicKeyParameters( - new BigInteger(1, dp.Y), - parameters); - - DsaPrivateKeyParameters privKey = new DsaPrivateKeyParameters( - new BigInteger(1, dp.X), - parameters); - - return new AsymmetricCipherKeyPair(pubKey, privKey); - } - - public static DsaPublicKeyParameters GetDsaPublicKey( - DSA dsa) - { - return GetDsaPublicKey(dsa.ExportParameters(false)); - } - - public static DsaPublicKeyParameters GetDsaPublicKey( - DSAParameters dp) - { - DsaValidationParameters validationParameters = (dp.Seed != null) - ? new DsaValidationParameters(dp.Seed, dp.Counter) - : null; - - DsaParameters parameters = new DsaParameters( - new BigInteger(1, dp.P), - new BigInteger(1, dp.Q), - new BigInteger(1, dp.G), - validationParameters); - - return new DsaPublicKeyParameters( - new BigInteger(1, dp.Y), - parameters); - } - - public static AsymmetricCipherKeyPair GetRsaKeyPair( - RSA rsa) - { - return GetRsaKeyPair(rsa.ExportParameters(true)); - } - - public static AsymmetricCipherKeyPair GetRsaKeyPair( - RSAParameters rp) - { - BigInteger modulus = new BigInteger(1, rp.Modulus); - BigInteger pubExp = new BigInteger(1, rp.Exponent); - - RsaKeyParameters pubKey = new RsaKeyParameters( - false, - modulus, - pubExp); - - RsaPrivateCrtKeyParameters privKey = new RsaPrivateCrtKeyParameters( - modulus, - pubExp, - new BigInteger(1, rp.D), - new BigInteger(1, rp.P), - new BigInteger(1, rp.Q), - new BigInteger(1, rp.DP), - new BigInteger(1, rp.DQ), - new BigInteger(1, rp.InverseQ)); - - return new AsymmetricCipherKeyPair(pubKey, privKey); - } - - public static RsaKeyParameters GetRsaPublicKey( - RSA rsa) - { - return GetRsaPublicKey(rsa.ExportParameters(false)); - } - - public static RsaKeyParameters GetRsaPublicKey( - RSAParameters rp) - { - return new RsaKeyParameters( - false, - new BigInteger(1, rp.Modulus), - new BigInteger(1, rp.Exponent)); - } - - public static AsymmetricCipherKeyPair GetKeyPair(AsymmetricAlgorithm privateKey) - { - if (privateKey is DSA) - { - return GetDsaKeyPair((DSA)privateKey); - } - - if (privateKey is RSA) - { - return GetRsaKeyPair((RSA)privateKey); - } - - throw new ArgumentException("Unsupported algorithm specified", "privateKey"); - } - - public static RSA ToRSA(RsaKeyParameters rsaKey) - { - // TODO This appears to not work for private keys (when no CRT info) - return CreateRSAProvider(ToRSAParameters(rsaKey)); - } - - public static RSA ToRSA(RsaPrivateCrtKeyParameters privKey) - { - return CreateRSAProvider(ToRSAParameters(privKey)); - } - - public static RSA ToRSA(RsaPrivateKeyStructure privKey) - { - return CreateRSAProvider(ToRSAParameters(privKey)); - } - - public static RSAParameters ToRSAParameters(RsaKeyParameters rsaKey) - { - RSAParameters rp = new RSAParameters(); - rp.Modulus = rsaKey.Modulus.ToByteArrayUnsigned(); - if (rsaKey.IsPrivate) - rp.D = ConvertRSAParametersField(rsaKey.Exponent, rp.Modulus.Length); - else - rp.Exponent = rsaKey.Exponent.ToByteArrayUnsigned(); - return rp; - } - - public static RSAParameters ToRSAParameters(RsaPrivateCrtKeyParameters privKey) - { - RSAParameters rp = new RSAParameters(); - rp.Modulus = privKey.Modulus.ToByteArrayUnsigned(); - rp.Exponent = privKey.PublicExponent.ToByteArrayUnsigned(); - rp.P = privKey.P.ToByteArrayUnsigned(); - rp.Q = privKey.Q.ToByteArrayUnsigned(); - rp.D = ConvertRSAParametersField(privKey.Exponent, rp.Modulus.Length); - rp.DP = ConvertRSAParametersField(privKey.DP, rp.P.Length); - rp.DQ = ConvertRSAParametersField(privKey.DQ, rp.Q.Length); - rp.InverseQ = ConvertRSAParametersField(privKey.QInv, rp.Q.Length); - return rp; - } - - public static RSAParameters ToRSAParameters(RsaPrivateKeyStructure privKey) - { - RSAParameters rp = new RSAParameters(); - rp.Modulus = privKey.Modulus.ToByteArrayUnsigned(); - rp.Exponent = privKey.PublicExponent.ToByteArrayUnsigned(); - rp.P = privKey.Prime1.ToByteArrayUnsigned(); - rp.Q = privKey.Prime2.ToByteArrayUnsigned(); - rp.D = ConvertRSAParametersField(privKey.PrivateExponent, rp.Modulus.Length); - rp.DP = ConvertRSAParametersField(privKey.Exponent1, rp.P.Length); - rp.DQ = ConvertRSAParametersField(privKey.Exponent2, rp.Q.Length); - rp.InverseQ = ConvertRSAParametersField(privKey.Coefficient, rp.Q.Length); - return rp; - } - - // TODO Move functionality to more general class - private static byte[] ConvertRSAParametersField(BigInteger n, int size) - { - byte[] bs = n.ToByteArrayUnsigned(); - - if (bs.Length == size) - return bs; - - if (bs.Length > size) - throw new ArgumentException("Specified size too small", "size"); - - byte[] padded = new byte[size]; - Array.Copy(bs, 0, padded, size - bs.Length, bs.Length); - return padded; - } - - private static RSA CreateRSAProvider(RSAParameters rp) - { - CspParameters csp = new CspParameters(); - csp.KeyContainerName = string.Format("BouncyCastle-{0}", Guid.NewGuid()); - RSACryptoServiceProvider rsaCsp = new RSACryptoServiceProvider(csp); - rsaCsp.ImportParameters(rp); - return rsaCsp; - } - } -} - -#endif diff --git a/bc-sharp-crypto/src/security/GeneralSecurityException.cs b/bc-sharp-crypto/src/security/GeneralSecurityException.cs deleted file mode 100644 index d4ab38c..0000000 --- a/bc-sharp-crypto/src/security/GeneralSecurityException.cs +++ /dev/null @@ -1,29 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Security -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class GeneralSecurityException - : Exception - { - public GeneralSecurityException() - : base() - { - } - - public GeneralSecurityException( - string message) - : base(message) - { - } - - public GeneralSecurityException( - string message, - Exception exception) - : base(message, exception) - { - } - } -} diff --git a/bc-sharp-crypto/src/security/GeneratorUtilities.cs b/bc-sharp-crypto/src/security/GeneratorUtilities.cs deleted file mode 100644 index 3beebd0..0000000 --- a/bc-sharp-crypto/src/security/GeneratorUtilities.cs +++ /dev/null @@ -1,352 +0,0 @@ -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.CryptoPro; -using Org.BouncyCastle.Asn1.Iana; -using Org.BouncyCastle.Asn1.Kisa; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Ntt; -using Org.BouncyCastle.Asn1.Oiw; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Generators; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Security -{ - public sealed class GeneratorUtilities - { - private GeneratorUtilities() - { - } - - private static readonly IDictionary kgAlgorithms = Platform.CreateHashtable(); - private static readonly IDictionary kpgAlgorithms = Platform.CreateHashtable(); - private static readonly IDictionary defaultKeySizes = Platform.CreateHashtable(); - - static GeneratorUtilities() - { - // - // key generators. - // - AddKgAlgorithm("AES", - "AESWRAP"); - AddKgAlgorithm("AES128", - "2.16.840.1.101.3.4.2", - NistObjectIdentifiers.IdAes128Cbc, - NistObjectIdentifiers.IdAes128Cfb, - NistObjectIdentifiers.IdAes128Ecb, - NistObjectIdentifiers.IdAes128Ofb, - NistObjectIdentifiers.IdAes128Wrap); - AddKgAlgorithm("AES192", - "2.16.840.1.101.3.4.22", - NistObjectIdentifiers.IdAes192Cbc, - NistObjectIdentifiers.IdAes192Cfb, - NistObjectIdentifiers.IdAes192Ecb, - NistObjectIdentifiers.IdAes192Ofb, - NistObjectIdentifiers.IdAes192Wrap); - AddKgAlgorithm("AES256", - "2.16.840.1.101.3.4.42", - NistObjectIdentifiers.IdAes256Cbc, - NistObjectIdentifiers.IdAes256Cfb, - NistObjectIdentifiers.IdAes256Ecb, - NistObjectIdentifiers.IdAes256Ofb, - NistObjectIdentifiers.IdAes256Wrap); - AddKgAlgorithm("BLOWFISH", - "1.3.6.1.4.1.3029.1.2"); - AddKgAlgorithm("CAMELLIA", - "CAMELLIAWRAP"); - AddKgAlgorithm("CAMELLIA128", - NttObjectIdentifiers.IdCamellia128Cbc, - NttObjectIdentifiers.IdCamellia128Wrap); - AddKgAlgorithm("CAMELLIA192", - NttObjectIdentifiers.IdCamellia192Cbc, - NttObjectIdentifiers.IdCamellia192Wrap); - AddKgAlgorithm("CAMELLIA256", - NttObjectIdentifiers.IdCamellia256Cbc, - NttObjectIdentifiers.IdCamellia256Wrap); - AddKgAlgorithm("CAST5", - "1.2.840.113533.7.66.10"); - AddKgAlgorithm("CAST6"); - AddKgAlgorithm("DES", - OiwObjectIdentifiers.DesCbc, - OiwObjectIdentifiers.DesCfb, - OiwObjectIdentifiers.DesEcb, - OiwObjectIdentifiers.DesOfb); - AddKgAlgorithm("DESEDE", - "DESEDEWRAP", - "TDEA", - OiwObjectIdentifiers.DesEde); - AddKgAlgorithm("DESEDE3", - PkcsObjectIdentifiers.DesEde3Cbc, - PkcsObjectIdentifiers.IdAlgCms3DesWrap); - AddKgAlgorithm("GOST28147", - "GOST", - "GOST-28147", - CryptoProObjectIdentifiers.GostR28147Cbc); - AddKgAlgorithm("HC128"); - AddKgAlgorithm("HC256"); - AddKgAlgorithm("IDEA", - "1.3.6.1.4.1.188.7.1.1.2"); - AddKgAlgorithm("NOEKEON"); - AddKgAlgorithm("RC2", - PkcsObjectIdentifiers.RC2Cbc, - PkcsObjectIdentifiers.IdAlgCmsRC2Wrap); - AddKgAlgorithm("RC4", - "ARC4", - "1.2.840.113549.3.4"); - AddKgAlgorithm("RC5", - "RC5-32"); - AddKgAlgorithm("RC5-64"); - AddKgAlgorithm("RC6"); - AddKgAlgorithm("RIJNDAEL"); - AddKgAlgorithm("SALSA20"); - AddKgAlgorithm("SEED", - KisaObjectIdentifiers.IdNpkiAppCmsSeedWrap, - KisaObjectIdentifiers.IdSeedCbc); - AddKgAlgorithm("SERPENT"); - AddKgAlgorithm("SKIPJACK"); - AddKgAlgorithm("TEA"); - AddKgAlgorithm("THREEFISH-256"); - AddKgAlgorithm("THREEFISH-512"); - AddKgAlgorithm("THREEFISH-1024"); - AddKgAlgorithm("TNEPRES"); - AddKgAlgorithm("TWOFISH"); - AddKgAlgorithm("VMPC"); - AddKgAlgorithm("VMPC-KSA3"); - AddKgAlgorithm("XTEA"); - - // - // HMac key generators - // - AddHMacKeyGenerator("MD2"); - AddHMacKeyGenerator("MD4"); - AddHMacKeyGenerator("MD5", - IanaObjectIdentifiers.HmacMD5); - AddHMacKeyGenerator("SHA1", - PkcsObjectIdentifiers.IdHmacWithSha1, - IanaObjectIdentifiers.HmacSha1); - AddHMacKeyGenerator("SHA224", - PkcsObjectIdentifiers.IdHmacWithSha224); - AddHMacKeyGenerator("SHA256", - PkcsObjectIdentifiers.IdHmacWithSha256); - AddHMacKeyGenerator("SHA384", - PkcsObjectIdentifiers.IdHmacWithSha384); - AddHMacKeyGenerator("SHA512", - PkcsObjectIdentifiers.IdHmacWithSha512); - AddHMacKeyGenerator("SHA512/224"); - AddHMacKeyGenerator("SHA512/256"); - AddHMacKeyGenerator("SHA3-224"); - AddHMacKeyGenerator("SHA3-256"); - AddHMacKeyGenerator("SHA3-384"); - AddHMacKeyGenerator("SHA3-512"); - AddHMacKeyGenerator("RIPEMD128"); - AddHMacKeyGenerator("RIPEMD160", - IanaObjectIdentifiers.HmacRipeMD160); - AddHMacKeyGenerator("TIGER", - IanaObjectIdentifiers.HmacTiger); - - - - // - // key pair generators. - // - AddKpgAlgorithm("DH", - "DIFFIEHELLMAN"); - AddKpgAlgorithm("DSA"); - AddKpgAlgorithm("EC", - // TODO Should this be an alias for ECDH? - X9ObjectIdentifiers.DHSinglePassStdDHSha1KdfScheme); - AddKpgAlgorithm("ECDH", - "ECIES"); - AddKpgAlgorithm("ECDHC"); - AddKpgAlgorithm("ECMQV", - X9ObjectIdentifiers.MqvSinglePassSha1KdfScheme); - AddKpgAlgorithm("ECDSA"); - AddKpgAlgorithm("ECGOST3410", - "ECGOST-3410", - "GOST-3410-2001"); - AddKpgAlgorithm("ELGAMAL"); - AddKpgAlgorithm("GOST3410", - "GOST-3410", - "GOST-3410-94"); - AddKpgAlgorithm("RSA", - "1.2.840.113549.1.1.1"); - - AddDefaultKeySizeEntries(64, "DES"); - AddDefaultKeySizeEntries(80, "SKIPJACK"); - AddDefaultKeySizeEntries(128, "AES128", "BLOWFISH", "CAMELLIA128", "CAST5", "DESEDE", - "HC128", "HMACMD2", "HMACMD4", "HMACMD5", "HMACRIPEMD128", "IDEA", "NOEKEON", - "RC2", "RC4", "RC5", "SALSA20", "SEED", "TEA", "XTEA", "VMPC", "VMPC-KSA3"); - AddDefaultKeySizeEntries(160, "HMACRIPEMD160", "HMACSHA1"); - AddDefaultKeySizeEntries(192, "AES", "AES192", "CAMELLIA192", "DESEDE3", "HMACTIGER", - "RIJNDAEL", "SERPENT", "TNEPRES"); - AddDefaultKeySizeEntries(224, "HMACSHA224", "HMACSHA512/224"); - AddDefaultKeySizeEntries(256, "AES256", "CAMELLIA", "CAMELLIA256", "CAST6", "GOST28147", - "HC256", "HMACSHA256", "HMACSHA512/256", "RC5-64", "RC6", "THREEFISH-256", "TWOFISH"); - AddDefaultKeySizeEntries(384, "HMACSHA384"); - AddDefaultKeySizeEntries(512, "HMACSHA512", "THREEFISH-512"); - AddDefaultKeySizeEntries(1024, "THREEFISH-1024"); - } - - private static void AddDefaultKeySizeEntries(int size, params string[] algorithms) - { - foreach (string algorithm in algorithms) - { - defaultKeySizes.Add(algorithm, size); - } - } - - private static void AddKgAlgorithm( - string canonicalName, - params object[] aliases) - { - kgAlgorithms[canonicalName] = canonicalName; - - foreach (object alias in aliases) - { - kgAlgorithms[alias.ToString()] = canonicalName; - } - } - - private static void AddKpgAlgorithm( - string canonicalName, - params object[] aliases) - { - kpgAlgorithms[canonicalName] = canonicalName; - - foreach (object alias in aliases) - { - kpgAlgorithms[alias.ToString()] = canonicalName; - } - } - - private static void AddHMacKeyGenerator( - string algorithm, - params object[] aliases) - { - string mainName = "HMAC" + algorithm; - - kgAlgorithms[mainName] = mainName; - kgAlgorithms["HMAC-" + algorithm] = mainName; - kgAlgorithms["HMAC/" + algorithm] = mainName; - - foreach (object alias in aliases) - { - kgAlgorithms[alias.ToString()] = mainName; - } - } - - // TODO Consider making this public - internal static string GetCanonicalKeyGeneratorAlgorithm( - string algorithm) - { - return (string) kgAlgorithms[Platform.ToUpperInvariant(algorithm)]; - } - - // TODO Consider making this public - internal static string GetCanonicalKeyPairGeneratorAlgorithm( - string algorithm) - { - return (string)kpgAlgorithms[Platform.ToUpperInvariant(algorithm)]; - } - - public static CipherKeyGenerator GetKeyGenerator( - DerObjectIdentifier oid) - { - return GetKeyGenerator(oid.Id); - } - - public static CipherKeyGenerator GetKeyGenerator( - string algorithm) - { - string canonicalName = GetCanonicalKeyGeneratorAlgorithm(algorithm); - - if (canonicalName == null) - throw new SecurityUtilityException("KeyGenerator " + algorithm + " not recognised."); - - int defaultKeySize = FindDefaultKeySize(canonicalName); - if (defaultKeySize == -1) - throw new SecurityUtilityException("KeyGenerator " + algorithm - + " (" + canonicalName + ") not supported."); - - if (canonicalName == "DES") - return new DesKeyGenerator(defaultKeySize); - - if (canonicalName == "DESEDE" || canonicalName == "DESEDE3") - return new DesEdeKeyGenerator(defaultKeySize); - - return new CipherKeyGenerator(defaultKeySize); - } - - public static IAsymmetricCipherKeyPairGenerator GetKeyPairGenerator( - DerObjectIdentifier oid) - { - return GetKeyPairGenerator(oid.Id); - } - - public static IAsymmetricCipherKeyPairGenerator GetKeyPairGenerator( - string algorithm) - { - string canonicalName = GetCanonicalKeyPairGeneratorAlgorithm(algorithm); - - if (canonicalName == null) - throw new SecurityUtilityException("KeyPairGenerator " + algorithm + " not recognised."); - - if (canonicalName == "DH") - return new DHKeyPairGenerator(); - - if (canonicalName == "DSA") - return new DsaKeyPairGenerator(); - - // "EC", "ECDH", "ECDHC", "ECDSA", "ECGOST3410", "ECMQV" - if (Platform.StartsWith(canonicalName, "EC")) - return new ECKeyPairGenerator(canonicalName); - - if (canonicalName == "ELGAMAL") - return new ElGamalKeyPairGenerator(); - - if (canonicalName == "GOST3410") - return new Gost3410KeyPairGenerator(); - - if (canonicalName == "RSA") - return new RsaKeyPairGenerator(); - - throw new SecurityUtilityException("KeyPairGenerator " + algorithm - + " (" + canonicalName + ") not supported."); - } - - internal static int GetDefaultKeySize( - DerObjectIdentifier oid) - { - return GetDefaultKeySize(oid.Id); - } - - internal static int GetDefaultKeySize( - string algorithm) - { - string canonicalName = GetCanonicalKeyGeneratorAlgorithm(algorithm); - - if (canonicalName == null) - throw new SecurityUtilityException("KeyGenerator " + algorithm + " not recognised."); - - int defaultKeySize = FindDefaultKeySize(canonicalName); - if (defaultKeySize == -1) - throw new SecurityUtilityException("KeyGenerator " + algorithm - + " (" + canonicalName + ") not supported."); - - return defaultKeySize; - } - - private static int FindDefaultKeySize( - string canonicalName) - { - if (!defaultKeySizes.Contains(canonicalName)) - return -1; - - return (int)defaultKeySizes[canonicalName]; - } - } -} diff --git a/bc-sharp-crypto/src/security/InvalidKeyException.cs b/bc-sharp-crypto/src/security/InvalidKeyException.cs deleted file mode 100644 index ebad9e3..0000000 --- a/bc-sharp-crypto/src/security/InvalidKeyException.cs +++ /dev/null @@ -1,14 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Security -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class InvalidKeyException : KeyException - { - public InvalidKeyException() : base() { } - public InvalidKeyException(string message) : base(message) { } - public InvalidKeyException(string message, Exception exception) : base(message, exception) { } - } -} diff --git a/bc-sharp-crypto/src/security/InvalidParameterException.cs b/bc-sharp-crypto/src/security/InvalidParameterException.cs deleted file mode 100644 index 48172f4..0000000 --- a/bc-sharp-crypto/src/security/InvalidParameterException.cs +++ /dev/null @@ -1,14 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Security -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class InvalidParameterException : KeyException - { - public InvalidParameterException() : base() { } - public InvalidParameterException(string message) : base(message) { } - public InvalidParameterException(string message, Exception exception) : base(message, exception) { } - } -} diff --git a/bc-sharp-crypto/src/security/KeyException.cs b/bc-sharp-crypto/src/security/KeyException.cs deleted file mode 100644 index e19fa89..0000000 --- a/bc-sharp-crypto/src/security/KeyException.cs +++ /dev/null @@ -1,14 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Security -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class KeyException : GeneralSecurityException - { - public KeyException() : base() { } - public KeyException(string message) : base(message) { } - public KeyException(string message, Exception exception) : base(message, exception) { } - } -} diff --git a/bc-sharp-crypto/src/security/MacUtilities.cs b/bc-sharp-crypto/src/security/MacUtilities.cs deleted file mode 100644 index 278f3be..0000000 --- a/bc-sharp-crypto/src/security/MacUtilities.cs +++ /dev/null @@ -1,256 +0,0 @@ -using System; -using System.Collections; -using System.Globalization; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Iana; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Engines; -using Org.BouncyCastle.Crypto.Macs; -using Org.BouncyCastle.Crypto.Paddings; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Security -{ - /// - /// Utility class for creating HMac object from their names/Oids - /// - public sealed class MacUtilities - { - private MacUtilities() - { - } - - private static readonly IDictionary algorithms = Platform.CreateHashtable(); - //private static readonly IDictionary oids = Platform.CreateHashtable(); - - static MacUtilities() - { - algorithms[IanaObjectIdentifiers.HmacMD5.Id] = "HMAC-MD5"; - algorithms[IanaObjectIdentifiers.HmacRipeMD160.Id] = "HMAC-RIPEMD160"; - algorithms[IanaObjectIdentifiers.HmacSha1.Id] = "HMAC-SHA1"; - algorithms[IanaObjectIdentifiers.HmacTiger.Id] = "HMAC-TIGER"; - - algorithms[PkcsObjectIdentifiers.IdHmacWithSha1.Id] = "HMAC-SHA1"; - algorithms[PkcsObjectIdentifiers.IdHmacWithSha224.Id] = "HMAC-SHA224"; - algorithms[PkcsObjectIdentifiers.IdHmacWithSha256.Id] = "HMAC-SHA256"; - algorithms[PkcsObjectIdentifiers.IdHmacWithSha384.Id] = "HMAC-SHA384"; - algorithms[PkcsObjectIdentifiers.IdHmacWithSha512.Id] = "HMAC-SHA512"; - - // TODO AESMAC? - - algorithms["DES"] = "DESMAC"; - algorithms["DES/CFB8"] = "DESMAC/CFB8"; - algorithms["DES64"] = "DESMAC64"; - algorithms["DESEDE"] = "DESEDEMAC"; - algorithms[PkcsObjectIdentifiers.DesEde3Cbc.Id] = "DESEDEMAC"; - algorithms["DESEDE/CFB8"] = "DESEDEMAC/CFB8"; - algorithms["DESISO9797MAC"] = "DESWITHISO9797"; - algorithms["DESEDE64"] = "DESEDEMAC64"; - - algorithms["DESEDE64WITHISO7816-4PADDING"] = "DESEDEMAC64WITHISO7816-4PADDING"; - algorithms["DESEDEISO9797ALG1MACWITHISO7816-4PADDING"] = "DESEDEMAC64WITHISO7816-4PADDING"; - algorithms["DESEDEISO9797ALG1WITHISO7816-4PADDING"] = "DESEDEMAC64WITHISO7816-4PADDING"; - - algorithms["ISO9797ALG3"] = "ISO9797ALG3MAC"; - algorithms["ISO9797ALG3MACWITHISO7816-4PADDING"] = "ISO9797ALG3WITHISO7816-4PADDING"; - - algorithms["SKIPJACK"] = "SKIPJACKMAC"; - algorithms["SKIPJACK/CFB8"] = "SKIPJACKMAC/CFB8"; - algorithms["IDEA"] = "IDEAMAC"; - algorithms["IDEA/CFB8"] = "IDEAMAC/CFB8"; - algorithms["RC2"] = "RC2MAC"; - algorithms["RC2/CFB8"] = "RC2MAC/CFB8"; - algorithms["RC5"] = "RC5MAC"; - algorithms["RC5/CFB8"] = "RC5MAC/CFB8"; - algorithms["GOST28147"] = "GOST28147MAC"; - algorithms["VMPC"] = "VMPCMAC"; - algorithms["VMPC-MAC"] = "VMPCMAC"; - algorithms["SIPHASH"] = "SIPHASH-2-4"; - - algorithms["PBEWITHHMACSHA"] = "PBEWITHHMACSHA1"; - algorithms["1.3.14.3.2.26"] = "PBEWITHHMACSHA1"; - } - -// /// -// /// Returns a ObjectIdentifier for a given digest mechanism. -// /// -// /// A string representation of the digest meanism. -// /// A DerObjectIdentifier, null if the Oid is not available. -// public static DerObjectIdentifier GetObjectIdentifier( -// string mechanism) -// { -// mechanism = (string) algorithms[Platform.ToUpperInvariant(mechanism)]; -// -// if (mechanism != null) -// { -// return (DerObjectIdentifier)oids[mechanism]; -// } -// -// return null; -// } - -// public static ICollection Algorithms -// { -// get { return oids.Keys; } -// } - - public static IMac GetMac( - DerObjectIdentifier id) - { - return GetMac(id.Id); - } - - public static IMac GetMac( - string algorithm) - { - string upper = Platform.ToUpperInvariant(algorithm); - - string mechanism = (string) algorithms[upper]; - - if (mechanism == null) - { - mechanism = upper; - } - - if (Platform.StartsWith(mechanism, "PBEWITH")) - { - mechanism = mechanism.Substring("PBEWITH".Length); - } - - if (Platform.StartsWith(mechanism, "HMAC")) - { - string digestName; - if (Platform.StartsWith(mechanism, "HMAC-") || Platform.StartsWith(mechanism, "HMAC/")) - { - digestName = mechanism.Substring(5); - } - else - { - digestName = mechanism.Substring(4); - } - - return new HMac(DigestUtilities.GetDigest(digestName)); - } - - if (mechanism == "AESCMAC") - { - return new CMac(new AesEngine()); - } - if (mechanism == "DESMAC") - { - return new CbcBlockCipherMac(new DesEngine()); - } - if (mechanism == "DESMAC/CFB8") - { - return new CfbBlockCipherMac(new DesEngine()); - } - if (mechanism == "DESMAC64") - { - return new CbcBlockCipherMac(new DesEngine(), 64); - } - if (mechanism == "DESEDECMAC") - { - return new CMac(new DesEdeEngine()); - } - if (mechanism == "DESEDEMAC") - { - return new CbcBlockCipherMac(new DesEdeEngine()); - } - if (mechanism == "DESEDEMAC/CFB8") - { - return new CfbBlockCipherMac(new DesEdeEngine()); - } - if (mechanism == "DESEDEMAC64") - { - return new CbcBlockCipherMac(new DesEdeEngine(), 64); - } - if (mechanism == "DESEDEMAC64WITHISO7816-4PADDING") - { - return new CbcBlockCipherMac(new DesEdeEngine(), 64, new ISO7816d4Padding()); - } - if (mechanism == "DESWITHISO9797" - || mechanism == "ISO9797ALG3MAC") - { - return new ISO9797Alg3Mac(new DesEngine()); - } - if (mechanism == "ISO9797ALG3WITHISO7816-4PADDING") - { - return new ISO9797Alg3Mac(new DesEngine(), new ISO7816d4Padding()); - } - if (mechanism == "SKIPJACKMAC") - { - return new CbcBlockCipherMac(new SkipjackEngine()); - } - if (mechanism == "SKIPJACKMAC/CFB8") - { - return new CfbBlockCipherMac(new SkipjackEngine()); - } - if (mechanism == "IDEAMAC") - { - return new CbcBlockCipherMac(new IdeaEngine()); - } - if (mechanism == "IDEAMAC/CFB8") - { - return new CfbBlockCipherMac(new IdeaEngine()); - } - if (mechanism == "RC2MAC") - { - return new CbcBlockCipherMac(new RC2Engine()); - } - if (mechanism == "RC2MAC/CFB8") - { - return new CfbBlockCipherMac(new RC2Engine()); - } - if (mechanism == "RC5MAC") - { - return new CbcBlockCipherMac(new RC532Engine()); - } - if (mechanism == "RC5MAC/CFB8") - { - return new CfbBlockCipherMac(new RC532Engine()); - } - if (mechanism == "GOST28147MAC") - { - return new Gost28147Mac(); - } - if (mechanism == "VMPCMAC") - { - return new VmpcMac(); - } - if (mechanism == "SIPHASH-2-4") - { - return new SipHash(); - } - throw new SecurityUtilityException("Mac " + mechanism + " not recognised."); - } - - public static string GetAlgorithmName( - DerObjectIdentifier oid) - { - return (string) algorithms[oid.Id]; - } - - public static byte[] CalculateMac(string algorithm, ICipherParameters cp, byte[] input) - { - IMac mac = GetMac(algorithm); - mac.Init(cp); - mac.BlockUpdate(input, 0, input.Length); - return DoFinal(mac); - } - - public static byte[] DoFinal(IMac mac) - { - byte[] b = new byte[mac.GetMacSize()]; - mac.DoFinal(b, 0); - return b; - } - - public static byte[] DoFinal(IMac mac, byte[] input) - { - mac.BlockUpdate(input, 0, input.Length); - return DoFinal(mac); - } - } -} diff --git a/bc-sharp-crypto/src/security/NoSuchAlgorithmException.cs b/bc-sharp-crypto/src/security/NoSuchAlgorithmException.cs deleted file mode 100644 index c56ec65..0000000 --- a/bc-sharp-crypto/src/security/NoSuchAlgorithmException.cs +++ /dev/null @@ -1,15 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Security -{ - [Obsolete("Never thrown")] -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class NoSuchAlgorithmException : GeneralSecurityException - { - public NoSuchAlgorithmException() : base() {} - public NoSuchAlgorithmException(string message) : base(message) {} - public NoSuchAlgorithmException(string message, Exception exception) : base(message, exception) {} - } -} diff --git a/bc-sharp-crypto/src/security/ParameterUtilities.cs b/bc-sharp-crypto/src/security/ParameterUtilities.cs deleted file mode 100644 index c121558..0000000 --- a/bc-sharp-crypto/src/security/ParameterUtilities.cs +++ /dev/null @@ -1,325 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.CryptoPro; -using Org.BouncyCastle.Asn1.Kisa; -using Org.BouncyCastle.Asn1.Misc; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Ntt; -using Org.BouncyCastle.Asn1.Oiw; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Security -{ - public sealed class ParameterUtilities - { - private ParameterUtilities() - { - } - - private static readonly IDictionary algorithms = Platform.CreateHashtable(); - private static readonly IDictionary basicIVSizes = Platform.CreateHashtable(); - - static ParameterUtilities() - { - AddAlgorithm("AES", - "AESWRAP"); - AddAlgorithm("AES128", - "2.16.840.1.101.3.4.2", - NistObjectIdentifiers.IdAes128Cbc, - NistObjectIdentifiers.IdAes128Cfb, - NistObjectIdentifiers.IdAes128Ecb, - NistObjectIdentifiers.IdAes128Ofb, - NistObjectIdentifiers.IdAes128Wrap); - AddAlgorithm("AES192", - "2.16.840.1.101.3.4.22", - NistObjectIdentifiers.IdAes192Cbc, - NistObjectIdentifiers.IdAes192Cfb, - NistObjectIdentifiers.IdAes192Ecb, - NistObjectIdentifiers.IdAes192Ofb, - NistObjectIdentifiers.IdAes192Wrap); - AddAlgorithm("AES256", - "2.16.840.1.101.3.4.42", - NistObjectIdentifiers.IdAes256Cbc, - NistObjectIdentifiers.IdAes256Cfb, - NistObjectIdentifiers.IdAes256Ecb, - NistObjectIdentifiers.IdAes256Ofb, - NistObjectIdentifiers.IdAes256Wrap); - AddAlgorithm("BLOWFISH", - "1.3.6.1.4.1.3029.1.2"); - AddAlgorithm("CAMELLIA", - "CAMELLIAWRAP"); - AddAlgorithm("CAMELLIA128", - NttObjectIdentifiers.IdCamellia128Cbc, - NttObjectIdentifiers.IdCamellia128Wrap); - AddAlgorithm("CAMELLIA192", - NttObjectIdentifiers.IdCamellia192Cbc, - NttObjectIdentifiers.IdCamellia192Wrap); - AddAlgorithm("CAMELLIA256", - NttObjectIdentifiers.IdCamellia256Cbc, - NttObjectIdentifiers.IdCamellia256Wrap); - AddAlgorithm("CAST5", - "1.2.840.113533.7.66.10"); - AddAlgorithm("CAST6"); - AddAlgorithm("DES", - OiwObjectIdentifiers.DesCbc, - OiwObjectIdentifiers.DesCfb, - OiwObjectIdentifiers.DesEcb, - OiwObjectIdentifiers.DesOfb); - AddAlgorithm("DESEDE", - "DESEDEWRAP", - "TDEA", - OiwObjectIdentifiers.DesEde, - PkcsObjectIdentifiers.IdAlgCms3DesWrap); - AddAlgorithm("DESEDE3", - PkcsObjectIdentifiers.DesEde3Cbc); - AddAlgorithm("GOST28147", - "GOST", - "GOST-28147", - CryptoProObjectIdentifiers.GostR28147Cbc); - AddAlgorithm("HC128"); - AddAlgorithm("HC256"); - AddAlgorithm("IDEA", - "1.3.6.1.4.1.188.7.1.1.2"); - AddAlgorithm("NOEKEON"); - AddAlgorithm("RC2", - PkcsObjectIdentifiers.RC2Cbc, - PkcsObjectIdentifiers.IdAlgCmsRC2Wrap); - AddAlgorithm("RC4", - "ARC4", - "1.2.840.113549.3.4"); - AddAlgorithm("RC5", - "RC5-32"); - AddAlgorithm("RC5-64"); - AddAlgorithm("RC6"); - AddAlgorithm("RIJNDAEL"); - AddAlgorithm("SALSA20"); - AddAlgorithm("SEED", - KisaObjectIdentifiers.IdNpkiAppCmsSeedWrap, - KisaObjectIdentifiers.IdSeedCbc); - AddAlgorithm("SERPENT"); - AddAlgorithm("SKIPJACK"); - AddAlgorithm("TEA"); - AddAlgorithm("THREEFISH-256"); - AddAlgorithm("THREEFISH-512"); - AddAlgorithm("THREEFISH-1024"); - AddAlgorithm("TNEPRES"); - AddAlgorithm("TWOFISH"); - AddAlgorithm("VMPC"); - AddAlgorithm("VMPC-KSA3"); - AddAlgorithm("XTEA"); - - AddBasicIVSizeEntries(8, "BLOWFISH", "DES", "DESEDE", "DESEDE3"); - AddBasicIVSizeEntries(16, "AES", "AES128", "AES192", "AES256", - "CAMELLIA", "CAMELLIA128", "CAMELLIA192", "CAMELLIA256", "NOEKEON", "SEED"); - - // TODO These algorithms support an IV - // but JCE doesn't seem to provide an AlgorithmParametersGenerator for them - // "RIJNDAEL", "SKIPJACK", "TWOFISH" - } - - private static void AddAlgorithm( - string canonicalName, - params object[] aliases) - { - algorithms[canonicalName] = canonicalName; - - foreach (object alias in aliases) - { - algorithms[alias.ToString()] = canonicalName; - } - } - - private static void AddBasicIVSizeEntries(int size, params string[] algorithms) - { - foreach (string algorithm in algorithms) - { - basicIVSizes.Add(algorithm, size); - } - } - - public static string GetCanonicalAlgorithmName( - string algorithm) - { - return (string) algorithms[Platform.ToUpperInvariant(algorithm)]; - } - - public static KeyParameter CreateKeyParameter( - DerObjectIdentifier algOid, - byte[] keyBytes) - { - return CreateKeyParameter(algOid.Id, keyBytes, 0, keyBytes.Length); - } - - public static KeyParameter CreateKeyParameter( - string algorithm, - byte[] keyBytes) - { - return CreateKeyParameter(algorithm, keyBytes, 0, keyBytes.Length); - } - - public static KeyParameter CreateKeyParameter( - DerObjectIdentifier algOid, - byte[] keyBytes, - int offset, - int length) - { - return CreateKeyParameter(algOid.Id, keyBytes, offset, length); - } - - public static KeyParameter CreateKeyParameter( - string algorithm, - byte[] keyBytes, - int offset, - int length) - { - if (algorithm == null) - throw new ArgumentNullException("algorithm"); - - string canonical = GetCanonicalAlgorithmName(algorithm); - - if (canonical == null) - throw new SecurityUtilityException("Algorithm " + algorithm + " not recognised."); - - if (canonical == "DES") - return new DesParameters(keyBytes, offset, length); - - if (canonical == "DESEDE" || canonical =="DESEDE3") - return new DesEdeParameters(keyBytes, offset, length); - - if (canonical == "RC2") - return new RC2Parameters(keyBytes, offset, length); - - return new KeyParameter(keyBytes, offset, length); - } - - public static ICipherParameters GetCipherParameters( - DerObjectIdentifier algOid, - ICipherParameters key, - Asn1Object asn1Params) - { - return GetCipherParameters(algOid.Id, key, asn1Params); - } - - public static ICipherParameters GetCipherParameters( - string algorithm, - ICipherParameters key, - Asn1Object asn1Params) - { - if (algorithm == null) - throw new ArgumentNullException("algorithm"); - - string canonical = GetCanonicalAlgorithmName(algorithm); - - if (canonical == null) - throw new SecurityUtilityException("Algorithm " + algorithm + " not recognised."); - - byte[] iv = null; - - try - { - // TODO These algorithms support an IV - // but JCE doesn't seem to provide an AlgorithmParametersGenerator for them - // "RIJNDAEL", "SKIPJACK", "TWOFISH" - - int basicIVKeySize = FindBasicIVSize(canonical); - if (basicIVKeySize != -1 - || canonical == "RIJNDAEL" || canonical == "SKIPJACK" || canonical == "TWOFISH") - { - iv = ((Asn1OctetString) asn1Params).GetOctets(); - } - else if (canonical == "CAST5") - { - iv = Cast5CbcParameters.GetInstance(asn1Params).GetIV(); - } - else if (canonical == "IDEA") - { - iv = IdeaCbcPar.GetInstance(asn1Params).GetIV(); - } - else if (canonical == "RC2") - { - iv = RC2CbcParameter.GetInstance(asn1Params).GetIV(); - } - } - catch (Exception e) - { - throw new ArgumentException("Could not process ASN.1 parameters", e); - } - - if (iv != null) - { - return new ParametersWithIV(key, iv); - } - - throw new SecurityUtilityException("Algorithm " + algorithm + " not recognised."); - } - - public static Asn1Encodable GenerateParameters( - DerObjectIdentifier algID, - SecureRandom random) - { - return GenerateParameters(algID.Id, random); - } - - public static Asn1Encodable GenerateParameters( - string algorithm, - SecureRandom random) - { - if (algorithm == null) - throw new ArgumentNullException("algorithm"); - - string canonical = GetCanonicalAlgorithmName(algorithm); - - if (canonical == null) - throw new SecurityUtilityException("Algorithm " + algorithm + " not recognised."); - - // TODO These algorithms support an IV - // but JCE doesn't seem to provide an AlgorithmParametersGenerator for them - // "RIJNDAEL", "SKIPJACK", "TWOFISH" - - int basicIVKeySize = FindBasicIVSize(canonical); - if (basicIVKeySize != -1) - return CreateIVOctetString(random, basicIVKeySize); - - if (canonical == "CAST5") - return new Cast5CbcParameters(CreateIV(random, 8), 128); - - if (canonical == "IDEA") - return new IdeaCbcPar(CreateIV(random, 8)); - - if (canonical == "RC2") - return new RC2CbcParameter(CreateIV(random, 8)); - - throw new SecurityUtilityException("Algorithm " + algorithm + " not recognised."); - } - - private static Asn1OctetString CreateIVOctetString( - SecureRandom random, - int ivLength) - { - return new DerOctetString(CreateIV(random, ivLength)); - } - - private static byte[] CreateIV( - SecureRandom random, - int ivLength) - { - byte[] iv = new byte[ivLength]; - random.NextBytes(iv); - return iv; - } - - private static int FindBasicIVSize( - string canonicalName) - { - if (!basicIVSizes.Contains(canonicalName)) - return -1; - - return (int)basicIVSizes[canonicalName]; - } - } -} diff --git a/bc-sharp-crypto/src/security/PbeUtilities.cs b/bc-sharp-crypto/src/security/PbeUtilities.cs deleted file mode 100644 index 33f31e5..0000000 --- a/bc-sharp-crypto/src/security/PbeUtilities.cs +++ /dev/null @@ -1,663 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.BC; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Oiw; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.TeleTrust; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Crypto.Engines; -using Org.BouncyCastle.Crypto.Generators; -using Org.BouncyCastle.Crypto.Macs; -using Org.BouncyCastle.Crypto.Modes; -using Org.BouncyCastle.Crypto.Paddings; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Security -{ - /// - /// - /// - public sealed class PbeUtilities - { - private PbeUtilities() - { - } - - const string Pkcs5S1 = "Pkcs5S1"; - const string Pkcs5S2 = "Pkcs5S2"; - const string Pkcs12 = "Pkcs12"; - const string OpenSsl = "OpenSsl"; - - private static readonly IDictionary algorithms = Platform.CreateHashtable(); - private static readonly IDictionary algorithmType = Platform.CreateHashtable(); - private static readonly IDictionary oids = Platform.CreateHashtable(); - - static PbeUtilities() - { - algorithms["PKCS5SCHEME1"] = "Pkcs5scheme1"; - algorithms["PKCS5SCHEME2"] = "Pkcs5scheme2"; - algorithms[PkcsObjectIdentifiers.IdPbeS2.Id] = "Pkcs5scheme2"; -// algorithms[PkcsObjectIdentifiers.IdPbkdf2.Id] = "Pkcs5scheme2"; - - // FIXME Add support for these? (see Pkcs8Generator) -// algorithms[PkcsObjectIdentifiers.DesEde3Cbc.Id] = "Pkcs5scheme2"; -// algorithms[NistObjectIdentifiers.IdAes128Cbc.Id] = "Pkcs5scheme2"; -// algorithms[NistObjectIdentifiers.IdAes192Cbc.Id] = "Pkcs5scheme2"; -// algorithms[NistObjectIdentifiers.IdAes256Cbc.Id] = "Pkcs5scheme2"; - - algorithms["PBEWITHMD2ANDDES-CBC"] = "PBEwithMD2andDES-CBC"; - algorithms[PkcsObjectIdentifiers.PbeWithMD2AndDesCbc.Id] = "PBEwithMD2andDES-CBC"; - algorithms["PBEWITHMD2ANDRC2-CBC"] = "PBEwithMD2andRC2-CBC"; - algorithms[PkcsObjectIdentifiers.PbeWithMD2AndRC2Cbc.Id] = "PBEwithMD2andRC2-CBC"; - algorithms["PBEWITHMD5ANDDES-CBC"] = "PBEwithMD5andDES-CBC"; - algorithms[PkcsObjectIdentifiers.PbeWithMD5AndDesCbc.Id] = "PBEwithMD5andDES-CBC"; - algorithms["PBEWITHMD5ANDRC2-CBC"] = "PBEwithMD5andRC2-CBC"; - algorithms[PkcsObjectIdentifiers.PbeWithMD5AndRC2Cbc.Id] = "PBEwithMD5andRC2-CBC"; - algorithms["PBEWITHSHA1ANDDES"] = "PBEwithSHA-1andDES-CBC"; - algorithms["PBEWITHSHA-1ANDDES"] = "PBEwithSHA-1andDES-CBC"; - algorithms["PBEWITHSHA1ANDDES-CBC"] = "PBEwithSHA-1andDES-CBC"; - algorithms["PBEWITHSHA-1ANDDES-CBC"] = "PBEwithSHA-1andDES-CBC"; - algorithms[PkcsObjectIdentifiers.PbeWithSha1AndDesCbc.Id] = "PBEwithSHA-1andDES-CBC"; - algorithms["PBEWITHSHA1ANDRC2"] = "PBEwithSHA-1andRC2-CBC"; - algorithms["PBEWITHSHA-1ANDRC2"] = "PBEwithSHA-1andRC2-CBC"; - algorithms["PBEWITHSHA1ANDRC2-CBC"] = "PBEwithSHA-1andRC2-CBC"; - algorithms["PBEWITHSHA-1ANDRC2-CBC"] = "PBEwithSHA-1andRC2-CBC"; - algorithms[PkcsObjectIdentifiers.PbeWithSha1AndRC2Cbc.Id] = "PBEwithSHA-1andRC2-CBC"; - algorithms["PKCS12"] = "Pkcs12"; - algorithms[BCObjectIdentifiers.bc_pbe_sha1_pkcs12_aes128_cbc.Id] = "PBEwithSHA-1and128bitAES-CBC-BC"; - algorithms[BCObjectIdentifiers.bc_pbe_sha1_pkcs12_aes192_cbc.Id] = "PBEwithSHA-1and192bitAES-CBC-BC"; - algorithms[BCObjectIdentifiers.bc_pbe_sha1_pkcs12_aes256_cbc.Id] = "PBEwithSHA-1and256bitAES-CBC-BC"; - algorithms[BCObjectIdentifiers.bc_pbe_sha256_pkcs12_aes128_cbc.Id] = "PBEwithSHA-256and128bitAES-CBC-BC"; - algorithms[BCObjectIdentifiers.bc_pbe_sha256_pkcs12_aes192_cbc.Id] = "PBEwithSHA-256and192bitAES-CBC-BC"; - algorithms[BCObjectIdentifiers.bc_pbe_sha256_pkcs12_aes256_cbc.Id] = "PBEwithSHA-256and256bitAES-CBC-BC"; - algorithms["PBEWITHSHAAND128BITRC4"] = "PBEwithSHA-1and128bitRC4"; - algorithms["PBEWITHSHA1AND128BITRC4"] = "PBEwithSHA-1and128bitRC4"; - algorithms["PBEWITHSHA-1AND128BITRC4"] = "PBEwithSHA-1and128bitRC4"; - algorithms[PkcsObjectIdentifiers.PbeWithShaAnd128BitRC4.Id] = "PBEwithSHA-1and128bitRC4"; - algorithms["PBEWITHSHAAND40BITRC4"] = "PBEwithSHA-1and40bitRC4"; - algorithms["PBEWITHSHA1AND40BITRC4"] = "PBEwithSHA-1and40bitRC4"; - algorithms["PBEWITHSHA-1AND40BITRC4"] = "PBEwithSHA-1and40bitRC4"; - algorithms[PkcsObjectIdentifiers.PbeWithShaAnd40BitRC4.Id] = "PBEwithSHA-1and40bitRC4"; - algorithms["PBEWITHSHAAND3-KEYDESEDE-CBC"] = "PBEwithSHA-1and3-keyDESEDE-CBC"; - algorithms["PBEWITHSHAAND3-KEYTRIPLEDES-CBC"] = "PBEwithSHA-1and3-keyDESEDE-CBC"; - algorithms["PBEWITHSHA1AND3-KEYDESEDE-CBC"] = "PBEwithSHA-1and3-keyDESEDE-CBC"; - algorithms["PBEWITHSHA1AND3-KEYTRIPLEDES-CBC"] = "PBEwithSHA-1and3-keyDESEDE-CBC"; - algorithms["PBEWITHSHA-1AND3-KEYDESEDE-CBC"] = "PBEwithSHA-1and3-keyDESEDE-CBC"; - algorithms["PBEWITHSHA-1AND3-KEYTRIPLEDES-CBC"] = "PBEwithSHA-1and3-keyDESEDE-CBC"; - algorithms[PkcsObjectIdentifiers.PbeWithShaAnd3KeyTripleDesCbc.Id] = "PBEwithSHA-1and3-keyDESEDE-CBC"; - algorithms["PBEWITHSHAAND2-KEYDESEDE-CBC"] = "PBEwithSHA-1and2-keyDESEDE-CBC"; - algorithms["PBEWITHSHAAND2-KEYTRIPLEDES-CBC"] = "PBEwithSHA-1and2-keyDESEDE-CBC"; - algorithms["PBEWITHSHA1AND2-KEYDESEDE-CBC"] = "PBEwithSHA-1and2-keyDESEDE-CBC"; - algorithms["PBEWITHSHA1AND2-KEYTRIPLEDES-CBC"] = "PBEwithSHA-1and2-keyDESEDE-CBC"; - algorithms["PBEWITHSHA-1AND2-KEYDESEDE-CBC"] = "PBEwithSHA-1and2-keyDESEDE-CBC"; - algorithms["PBEWITHSHA-1AND2-KEYTRIPLEDES-CBC"] = "PBEwithSHA-1and2-keyDESEDE-CBC"; - algorithms[PkcsObjectIdentifiers.PbeWithShaAnd2KeyTripleDesCbc.Id] = "PBEwithSHA-1and2-keyDESEDE-CBC"; - algorithms["PBEWITHSHAAND128BITRC2-CBC"] = "PBEwithSHA-1and128bitRC2-CBC"; - algorithms["PBEWITHSHA1AND128BITRC2-CBC"] = "PBEwithSHA-1and128bitRC2-CBC"; - algorithms["PBEWITHSHA-1AND128BITRC2-CBC"] = "PBEwithSHA-1and128bitRC2-CBC"; - algorithms[PkcsObjectIdentifiers.PbeWithShaAnd128BitRC2Cbc.Id] = "PBEwithSHA-1and128bitRC2-CBC"; - algorithms["PBEWITHSHAAND40BITRC2-CBC"] = "PBEwithSHA-1and40bitRC2-CBC"; - algorithms["PBEWITHSHA1AND40BITRC2-CBC"] = "PBEwithSHA-1and40bitRC2-CBC"; - algorithms["PBEWITHSHA-1AND40BITRC2-CBC"] = "PBEwithSHA-1and40bitRC2-CBC"; - algorithms[PkcsObjectIdentifiers.PbewithShaAnd40BitRC2Cbc.Id] = "PBEwithSHA-1and40bitRC2-CBC"; - algorithms["PBEWITHSHAAND128BITAES-CBC-BC"] = "PBEwithSHA-1and128bitAES-CBC-BC"; - algorithms["PBEWITHSHA1AND128BITAES-CBC-BC"] = "PBEwithSHA-1and128bitAES-CBC-BC"; - algorithms["PBEWITHSHA-1AND128BITAES-CBC-BC"] = "PBEwithSHA-1and128bitAES-CBC-BC"; - algorithms["PBEWITHSHAAND192BITAES-CBC-BC"] = "PBEwithSHA-1and192bitAES-CBC-BC"; - algorithms["PBEWITHSHA1AND192BITAES-CBC-BC"] = "PBEwithSHA-1and192bitAES-CBC-BC"; - algorithms["PBEWITHSHA-1AND192BITAES-CBC-BC"] = "PBEwithSHA-1and192bitAES-CBC-BC"; - algorithms["PBEWITHSHAAND256BITAES-CBC-BC"] = "PBEwithSHA-1and256bitAES-CBC-BC"; - algorithms["PBEWITHSHA1AND256BITAES-CBC-BC"] = "PBEwithSHA-1and256bitAES-CBC-BC"; - algorithms["PBEWITHSHA-1AND256BITAES-CBC-BC"] = "PBEwithSHA-1and256bitAES-CBC-BC"; - algorithms["PBEWITHSHA256AND128BITAES-CBC-BC"] = "PBEwithSHA-256and128bitAES-CBC-BC"; - algorithms["PBEWITHSHA-256AND128BITAES-CBC-BC"] = "PBEwithSHA-256and128bitAES-CBC-BC"; - algorithms["PBEWITHSHA256AND192BITAES-CBC-BC"] = "PBEwithSHA-256and192bitAES-CBC-BC"; - algorithms["PBEWITHSHA-256AND192BITAES-CBC-BC"] = "PBEwithSHA-256and192bitAES-CBC-BC"; - algorithms["PBEWITHSHA256AND256BITAES-CBC-BC"] = "PBEwithSHA-256and256bitAES-CBC-BC"; - algorithms["PBEWITHSHA-256AND256BITAES-CBC-BC"] = "PBEwithSHA-256and256bitAES-CBC-BC"; - algorithms["PBEWITHSHAANDIDEA"] = "PBEwithSHA-1andIDEA-CBC"; - algorithms["PBEWITHSHAANDIDEA-CBC"] = "PBEwithSHA-1andIDEA-CBC"; - algorithms["PBEWITHSHAANDTWOFISH"] = "PBEwithSHA-1andTWOFISH-CBC"; - algorithms["PBEWITHSHAANDTWOFISH-CBC"] = "PBEwithSHA-1andTWOFISH-CBC"; - algorithms["PBEWITHHMACSHA1"] = "PBEwithHmacSHA-1"; - algorithms["PBEWITHHMACSHA-1"] = "PBEwithHmacSHA-1"; - algorithms[OiwObjectIdentifiers.IdSha1.Id] = "PBEwithHmacSHA-1"; - algorithms["PBEWITHHMACSHA224"] = "PBEwithHmacSHA-224"; - algorithms["PBEWITHHMACSHA-224"] = "PBEwithHmacSHA-224"; - algorithms[NistObjectIdentifiers.IdSha224.Id] = "PBEwithHmacSHA-224"; - algorithms["PBEWITHHMACSHA256"] = "PBEwithHmacSHA-256"; - algorithms["PBEWITHHMACSHA-256"] = "PBEwithHmacSHA-256"; - algorithms[NistObjectIdentifiers.IdSha256.Id] = "PBEwithHmacSHA-256"; - algorithms["PBEWITHHMACRIPEMD128"] = "PBEwithHmacRipeMD128"; - algorithms[TeleTrusTObjectIdentifiers.RipeMD128.Id] = "PBEwithHmacRipeMD128"; - algorithms["PBEWITHHMACRIPEMD160"] = "PBEwithHmacRipeMD160"; - algorithms[TeleTrusTObjectIdentifiers.RipeMD160.Id] = "PBEwithHmacRipeMD160"; - algorithms["PBEWITHHMACRIPEMD256"] = "PBEwithHmacRipeMD256"; - algorithms[TeleTrusTObjectIdentifiers.RipeMD256.Id] = "PBEwithHmacRipeMD256"; - algorithms["PBEWITHHMACTIGER"] = "PBEwithHmacTiger"; - - algorithms["PBEWITHMD5AND128BITAES-CBC-OPENSSL"] = "PBEwithMD5and128bitAES-CBC-OpenSSL"; - algorithms["PBEWITHMD5AND192BITAES-CBC-OPENSSL"] = "PBEwithMD5and192bitAES-CBC-OpenSSL"; - algorithms["PBEWITHMD5AND256BITAES-CBC-OPENSSL"] = "PBEwithMD5and256bitAES-CBC-OpenSSL"; - - algorithmType["Pkcs5scheme1"] = Pkcs5S1; - algorithmType["Pkcs5scheme2"] = Pkcs5S2; - algorithmType["PBEwithMD2andDES-CBC"] = Pkcs5S1; - algorithmType["PBEwithMD2andRC2-CBC"] = Pkcs5S1; - algorithmType["PBEwithMD5andDES-CBC"] = Pkcs5S1; - algorithmType["PBEwithMD5andRC2-CBC"] = Pkcs5S1; - algorithmType["PBEwithSHA-1andDES-CBC"] = Pkcs5S1; - algorithmType["PBEwithSHA-1andRC2-CBC"] = Pkcs5S1; - algorithmType["Pkcs12"] = Pkcs12; - algorithmType["PBEwithSHA-1and128bitRC4"] = Pkcs12; - algorithmType["PBEwithSHA-1and40bitRC4"] = Pkcs12; - algorithmType["PBEwithSHA-1and3-keyDESEDE-CBC"] = Pkcs12; - algorithmType["PBEwithSHA-1and2-keyDESEDE-CBC"] = Pkcs12; - algorithmType["PBEwithSHA-1and128bitRC2-CBC"] = Pkcs12; - algorithmType["PBEwithSHA-1and40bitRC2-CBC"] = Pkcs12; - algorithmType["PBEwithSHA-1and128bitAES-CBC-BC"] = Pkcs12; - algorithmType["PBEwithSHA-1and192bitAES-CBC-BC"] = Pkcs12; - algorithmType["PBEwithSHA-1and256bitAES-CBC-BC"] = Pkcs12; - algorithmType["PBEwithSHA-256and128bitAES-CBC-BC"] = Pkcs12; - algorithmType["PBEwithSHA-256and192bitAES-CBC-BC"] = Pkcs12; - algorithmType["PBEwithSHA-256and256bitAES-CBC-BC"] = Pkcs12; - algorithmType["PBEwithSHA-1andIDEA-CBC"] = Pkcs12; - algorithmType["PBEwithSHA-1andTWOFISH-CBC"] = Pkcs12; - algorithmType["PBEwithHmacSHA-1"] = Pkcs12; - algorithmType["PBEwithHmacSHA-224"] = Pkcs12; - algorithmType["PBEwithHmacSHA-256"] = Pkcs12; - algorithmType["PBEwithHmacRipeMD128"] = Pkcs12; - algorithmType["PBEwithHmacRipeMD160"] = Pkcs12; - algorithmType["PBEwithHmacRipeMD256"] = Pkcs12; - algorithmType["PBEwithHmacTiger"] = Pkcs12; - - algorithmType["PBEwithMD5and128bitAES-CBC-OpenSSL"] = OpenSsl; - algorithmType["PBEwithMD5and192bitAES-CBC-OpenSSL"] = OpenSsl; - algorithmType["PBEwithMD5and256bitAES-CBC-OpenSSL"] = OpenSsl; - - oids["PBEwithMD2andDES-CBC"] = PkcsObjectIdentifiers.PbeWithMD2AndDesCbc; - oids["PBEwithMD2andRC2-CBC"] = PkcsObjectIdentifiers.PbeWithMD2AndRC2Cbc; - oids["PBEwithMD5andDES-CBC"] = PkcsObjectIdentifiers.PbeWithMD5AndDesCbc; - oids["PBEwithMD5andRC2-CBC"] = PkcsObjectIdentifiers.PbeWithMD5AndRC2Cbc; - oids["PBEwithSHA-1andDES-CBC"] = PkcsObjectIdentifiers.PbeWithSha1AndDesCbc; - oids["PBEwithSHA-1andRC2-CBC"] = PkcsObjectIdentifiers.PbeWithSha1AndRC2Cbc; - oids["PBEwithSHA-1and128bitRC4"] = PkcsObjectIdentifiers.PbeWithShaAnd128BitRC4; - oids["PBEwithSHA-1and40bitRC4"] = PkcsObjectIdentifiers.PbeWithShaAnd40BitRC4; - oids["PBEwithSHA-1and3-keyDESEDE-CBC"] = PkcsObjectIdentifiers.PbeWithShaAnd3KeyTripleDesCbc; - oids["PBEwithSHA-1and2-keyDESEDE-CBC"] = PkcsObjectIdentifiers.PbeWithShaAnd2KeyTripleDesCbc; - oids["PBEwithSHA-1and128bitRC2-CBC"] = PkcsObjectIdentifiers.PbeWithShaAnd128BitRC2Cbc; - oids["PBEwithSHA-1and40bitRC2-CBC"] = PkcsObjectIdentifiers.PbewithShaAnd40BitRC2Cbc; - oids["PBEwithHmacSHA-1"] = OiwObjectIdentifiers.IdSha1; - oids["PBEwithHmacSHA-224"] = NistObjectIdentifiers.IdSha224; - oids["PBEwithHmacSHA-256"] = NistObjectIdentifiers.IdSha256; - oids["PBEwithHmacRipeMD128"] = TeleTrusTObjectIdentifiers.RipeMD128; - oids["PBEwithHmacRipeMD160"] = TeleTrusTObjectIdentifiers.RipeMD160; - oids["PBEwithHmacRipeMD256"] = TeleTrusTObjectIdentifiers.RipeMD256; - oids["Pkcs5scheme2"] = PkcsObjectIdentifiers.IdPbeS2; - } - - static PbeParametersGenerator MakePbeGenerator( - string type, - IDigest digest, - byte[] key, - byte[] salt, - int iterationCount) - { - PbeParametersGenerator generator; - - if (type.Equals(Pkcs5S1)) - { - generator = new Pkcs5S1ParametersGenerator(digest); - } - else if (type.Equals(Pkcs5S2)) - { - generator = new Pkcs5S2ParametersGenerator(); - } - else if (type.Equals(Pkcs12)) - { - generator = new Pkcs12ParametersGenerator(digest); - } - else if (type.Equals(OpenSsl)) - { - generator = new OpenSslPbeParametersGenerator(); - } - else - { - throw new ArgumentException("Unknown PBE type: " + type, "type"); - } - - generator.Init(key, salt, iterationCount); - return generator; - } - - /// - /// Returns a ObjectIdentifier for a give encoding. - /// - /// A string representation of the encoding. - /// A DerObjectIdentifier, null if the Oid is not available. - public static DerObjectIdentifier GetObjectIdentifier( - string mechanism) - { - mechanism = (string) algorithms[Platform.ToUpperInvariant(mechanism)]; - if (mechanism != null) - { - return (DerObjectIdentifier)oids[mechanism]; - } - return null; - } - - public static ICollection Algorithms - { - get { return oids.Keys; } - } - - public static bool IsPkcs12( - string algorithm) - { - string mechanism = (string)algorithms[Platform.ToUpperInvariant(algorithm)]; - - return mechanism != null && Pkcs12.Equals(algorithmType[mechanism]); - } - - public static bool IsPkcs5Scheme1( - string algorithm) - { - string mechanism = (string)algorithms[Platform.ToUpperInvariant(algorithm)]; - - return mechanism != null && Pkcs5S1.Equals(algorithmType[mechanism]); - } - - public static bool IsPkcs5Scheme2( - string algorithm) - { - string mechanism = (string)algorithms[Platform.ToUpperInvariant(algorithm)]; - - return mechanism != null && Pkcs5S2.Equals(algorithmType[mechanism]); - } - - public static bool IsOpenSsl( - string algorithm) - { - string mechanism = (string)algorithms[Platform.ToUpperInvariant(algorithm)]; - - return mechanism != null && OpenSsl.Equals(algorithmType[mechanism]); - } - - public static bool IsPbeAlgorithm( - string algorithm) - { - string mechanism = (string)algorithms[Platform.ToUpperInvariant(algorithm)]; - - return mechanism != null && algorithmType[mechanism] != null; - } - - public static Asn1Encodable GenerateAlgorithmParameters( - DerObjectIdentifier algorithmOid, - byte[] salt, - int iterationCount) - { - return GenerateAlgorithmParameters(algorithmOid.Id, salt, iterationCount); - } - - public static Asn1Encodable GenerateAlgorithmParameters( - string algorithm, - byte[] salt, - int iterationCount) - { - if (IsPkcs12(algorithm)) - { - return new Pkcs12PbeParams(salt, iterationCount); - } - else if (IsPkcs5Scheme2(algorithm)) - { - return new Pbkdf2Params(salt, iterationCount); - } - else - { - return new PbeParameter(salt, iterationCount); - } - } - - public static ICipherParameters GenerateCipherParameters( - DerObjectIdentifier algorithmOid, - char[] password, - Asn1Encodable pbeParameters) - { - return GenerateCipherParameters(algorithmOid.Id, password, false, pbeParameters); - } - - public static ICipherParameters GenerateCipherParameters( - DerObjectIdentifier algorithmOid, - char[] password, - bool wrongPkcs12Zero, - Asn1Encodable pbeParameters) - { - return GenerateCipherParameters(algorithmOid.Id, password, wrongPkcs12Zero, pbeParameters); - } - - public static ICipherParameters GenerateCipherParameters( - AlgorithmIdentifier algID, - char[] password) - { - return GenerateCipherParameters(algID.Algorithm.Id, password, false, algID.Parameters); - } - - public static ICipherParameters GenerateCipherParameters( - AlgorithmIdentifier algID, - char[] password, - bool wrongPkcs12Zero) - { - return GenerateCipherParameters(algID.Algorithm.Id, password, wrongPkcs12Zero, algID.Parameters); - } - - public static ICipherParameters GenerateCipherParameters( - string algorithm, - char[] password, - Asn1Encodable pbeParameters) - { - return GenerateCipherParameters(algorithm, password, false, pbeParameters); - } - - public static ICipherParameters GenerateCipherParameters( - string algorithm, - char[] password, - bool wrongPkcs12Zero, - Asn1Encodable pbeParameters) - { - string mechanism = (string)algorithms[Platform.ToUpperInvariant(algorithm)]; - - byte[] keyBytes = null; - byte[] salt = null; - int iterationCount = 0; - - if (IsPkcs12(mechanism)) - { - Pkcs12PbeParams pbeParams = Pkcs12PbeParams.GetInstance(pbeParameters); - salt = pbeParams.GetIV(); - iterationCount = pbeParams.Iterations.IntValue; - keyBytes = PbeParametersGenerator.Pkcs12PasswordToBytes(password, wrongPkcs12Zero); - } - else if (IsPkcs5Scheme2(mechanism)) - { - // See below - } - else - { - PbeParameter pbeParams = PbeParameter.GetInstance(pbeParameters); - salt = pbeParams.GetSalt(); - iterationCount = pbeParams.IterationCount.IntValue; - keyBytes = PbeParametersGenerator.Pkcs5PasswordToBytes(password); - } - - ICipherParameters parameters = null; - - if (IsPkcs5Scheme2(mechanism)) - { - PbeS2Parameters s2p = PbeS2Parameters.GetInstance(pbeParameters.ToAsn1Object()); - AlgorithmIdentifier encScheme = s2p.EncryptionScheme; - DerObjectIdentifier encOid = encScheme.Algorithm; - Asn1Object encParams = encScheme.Parameters.ToAsn1Object(); - - // TODO What about s2p.KeyDerivationFunc.Algorithm? - Pbkdf2Params pbeParams = Pbkdf2Params.GetInstance(s2p.KeyDerivationFunc.Parameters.ToAsn1Object()); - - byte[] iv; - if (encOid.Equals(PkcsObjectIdentifiers.RC2Cbc)) // PKCS5.B.2.3 - { - RC2CbcParameter rc2Params = RC2CbcParameter.GetInstance(encParams); - iv = rc2Params.GetIV(); - } - else - { - iv = Asn1OctetString.GetInstance(encParams).GetOctets(); - } - - salt = pbeParams.GetSalt(); - iterationCount = pbeParams.IterationCount.IntValue; - keyBytes = PbeParametersGenerator.Pkcs5PasswordToBytes(password); - - int keyLength = pbeParams.KeyLength != null - ? pbeParams.KeyLength.IntValue * 8 - : GeneratorUtilities.GetDefaultKeySize(encOid); - - PbeParametersGenerator gen = MakePbeGenerator( - (string)algorithmType[mechanism], null, keyBytes, salt, iterationCount); - - parameters = gen.GenerateDerivedParameters(encOid.Id, keyLength); - - if (iv != null) - { - // FIXME? OpenSSL weirdness with IV of zeros (for ECB keys?) - if (Arrays.AreEqual(iv, new byte[iv.Length])) - { - //Console.Error.Write("***** IV all 0 (length " + iv.Length + ") *****"); - } - else - { - parameters = new ParametersWithIV(parameters, iv); - } - } - } - else if (Platform.StartsWith(mechanism, "PBEwithSHA-1")) - { - PbeParametersGenerator generator = MakePbeGenerator( - (string) algorithmType[mechanism], new Sha1Digest(), keyBytes, salt, iterationCount); - - if (mechanism.Equals("PBEwithSHA-1and128bitAES-CBC-BC")) - { - parameters = generator.GenerateDerivedParameters("AES", 128, 128); - } - else if (mechanism.Equals("PBEwithSHA-1and192bitAES-CBC-BC")) - { - parameters = generator.GenerateDerivedParameters("AES", 192, 128); - } - else if (mechanism.Equals("PBEwithSHA-1and256bitAES-CBC-BC")) - { - parameters = generator.GenerateDerivedParameters("AES", 256, 128); - } - else if (mechanism.Equals("PBEwithSHA-1and128bitRC4")) - { - parameters = generator.GenerateDerivedParameters("RC4", 128); - } - else if (mechanism.Equals("PBEwithSHA-1and40bitRC4")) - { - parameters = generator.GenerateDerivedParameters("RC4", 40); - } - else if (mechanism.Equals("PBEwithSHA-1and3-keyDESEDE-CBC")) - { - parameters = generator.GenerateDerivedParameters("DESEDE", 192, 64); - } - else if (mechanism.Equals("PBEwithSHA-1and2-keyDESEDE-CBC")) - { - parameters = generator.GenerateDerivedParameters("DESEDE", 128, 64); - } - else if (mechanism.Equals("PBEwithSHA-1and128bitRC2-CBC")) - { - parameters = generator.GenerateDerivedParameters("RC2", 128, 64); - } - else if (mechanism.Equals("PBEwithSHA-1and40bitRC2-CBC")) - { - parameters = generator.GenerateDerivedParameters("RC2", 40, 64); - } - else if (mechanism.Equals("PBEwithSHA-1andDES-CBC")) - { - parameters = generator.GenerateDerivedParameters("DES", 64, 64); - } - else if (mechanism.Equals("PBEwithSHA-1andRC2-CBC")) - { - parameters = generator.GenerateDerivedParameters("RC2", 64, 64); - } - } - else if (Platform.StartsWith(mechanism, "PBEwithSHA-256")) - { - PbeParametersGenerator generator = MakePbeGenerator( - (string) algorithmType[mechanism], new Sha256Digest(), keyBytes, salt, iterationCount); - - if (mechanism.Equals("PBEwithSHA-256and128bitAES-CBC-BC")) - { - parameters = generator.GenerateDerivedParameters("AES", 128, 128); - } - else if (mechanism.Equals("PBEwithSHA-256and192bitAES-CBC-BC")) - { - parameters = generator.GenerateDerivedParameters("AES", 192, 128); - } - else if (mechanism.Equals("PBEwithSHA-256and256bitAES-CBC-BC")) - { - parameters = generator.GenerateDerivedParameters("AES", 256, 128); - } - } - else if (Platform.StartsWith(mechanism, "PBEwithMD5")) - { - PbeParametersGenerator generator = MakePbeGenerator( - (string)algorithmType[mechanism], new MD5Digest(), keyBytes, salt, iterationCount); - - if (mechanism.Equals("PBEwithMD5andDES-CBC")) - { - parameters = generator.GenerateDerivedParameters("DES", 64, 64); - } - else if (mechanism.Equals("PBEwithMD5andRC2-CBC")) - { - parameters = generator.GenerateDerivedParameters("RC2", 64, 64); - } - else if (mechanism.Equals("PBEwithMD5and128bitAES-CBC-OpenSSL")) - { - parameters = generator.GenerateDerivedParameters("AES", 128, 128); - } - else if (mechanism.Equals("PBEwithMD5and192bitAES-CBC-OpenSSL")) - { - parameters = generator.GenerateDerivedParameters("AES", 192, 128); - } - else if (mechanism.Equals("PBEwithMD5and256bitAES-CBC-OpenSSL")) - { - parameters = generator.GenerateDerivedParameters("AES", 256, 128); - } - } - else if (Platform.StartsWith(mechanism, "PBEwithMD2")) - { - PbeParametersGenerator generator = MakePbeGenerator( - (string)algorithmType[mechanism], new MD2Digest(), keyBytes, salt, iterationCount); - if (mechanism.Equals("PBEwithMD2andDES-CBC")) - { - parameters = generator.GenerateDerivedParameters("DES", 64, 64); - } - else if (mechanism.Equals("PBEwithMD2andRC2-CBC")) - { - parameters = generator.GenerateDerivedParameters("RC2", 64, 64); - } - } - else if (Platform.StartsWith(mechanism, "PBEwithHmac")) - { - string digestName = mechanism.Substring("PBEwithHmac".Length); - IDigest digest = DigestUtilities.GetDigest(digestName); - - PbeParametersGenerator generator = MakePbeGenerator( - (string) algorithmType[mechanism], digest, keyBytes, salt, iterationCount); - - int bitLen = digest.GetDigestSize() * 8; - parameters = generator.GenerateDerivedMacParameters(bitLen); - } - - Array.Clear(keyBytes, 0, keyBytes.Length); - - return FixDesParity(mechanism, parameters); - } - - public static object CreateEngine( - DerObjectIdentifier algorithmOid) - { - return CreateEngine(algorithmOid.Id); - } - - public static object CreateEngine( - AlgorithmIdentifier algID) - { - string algorithm = algID.Algorithm.Id; - - if (IsPkcs5Scheme2(algorithm)) - { - PbeS2Parameters s2p = PbeS2Parameters.GetInstance(algID.Parameters.ToAsn1Object()); - AlgorithmIdentifier encScheme = s2p.EncryptionScheme; - return CipherUtilities.GetCipher(encScheme.Algorithm); - } - - return CreateEngine(algorithm); - } - - public static object CreateEngine( - string algorithm) - { - string mechanism = (string)algorithms[Platform.ToUpperInvariant(algorithm)]; - - if (Platform.StartsWith(mechanism, "PBEwithHmac")) - { - string digestName = mechanism.Substring("PBEwithHmac".Length); - - return MacUtilities.GetMac("HMAC/" + digestName); - } - - if (Platform.StartsWith(mechanism, "PBEwithMD2") - || Platform.StartsWith(mechanism, "PBEwithMD5") - || Platform.StartsWith(mechanism, "PBEwithSHA-1") - || Platform.StartsWith(mechanism, "PBEwithSHA-256")) - { - if (Platform.EndsWith(mechanism, "AES-CBC-BC") || Platform.EndsWith(mechanism, "AES-CBC-OPENSSL")) - { - return CipherUtilities.GetCipher("AES/CBC"); - } - - if (Platform.EndsWith(mechanism, "DES-CBC")) - { - return CipherUtilities.GetCipher("DES/CBC"); - } - - if (Platform.EndsWith(mechanism, "DESEDE-CBC")) - { - return CipherUtilities.GetCipher("DESEDE/CBC"); - } - - if (Platform.EndsWith(mechanism, "RC2-CBC")) - { - return CipherUtilities.GetCipher("RC2/CBC"); - } - - if (Platform.EndsWith(mechanism, "RC4")) - { - return CipherUtilities.GetCipher("RC4"); - } - } - - return null; - } - - public static string GetEncodingName( - DerObjectIdentifier oid) - { - return (string) algorithms[oid.Id]; - } - - private static ICipherParameters FixDesParity(string mechanism, ICipherParameters parameters) - { - if (!Platform.EndsWith(mechanism, "DES-CBC") && !Platform.EndsWith(mechanism, "DESEDE-CBC")) - { - return parameters; - } - - if (parameters is ParametersWithIV) - { - ParametersWithIV ivParams = (ParametersWithIV)parameters; - return new ParametersWithIV(FixDesParity(mechanism, ivParams.Parameters), ivParams.GetIV()); - } - - KeyParameter kParam = (KeyParameter)parameters; - byte[] keyBytes = kParam.GetKey(); - DesParameters.SetOddParity(keyBytes); - return new KeyParameter(keyBytes); - } - } -} diff --git a/bc-sharp-crypto/src/security/PrivateKeyFactory.cs b/bc-sharp-crypto/src/security/PrivateKeyFactory.cs deleted file mode 100644 index 8c2ecfd..0000000 --- a/bc-sharp-crypto/src/security/PrivateKeyFactory.cs +++ /dev/null @@ -1,222 +0,0 @@ -using System; -using System.Collections; -using System.IO; -using System.Text; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.CryptoPro; -using Org.BouncyCastle.Asn1.Oiw; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.Sec; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Generators; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Pkcs; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Security -{ - public sealed class PrivateKeyFactory - { - private PrivateKeyFactory() - { - } - - public static AsymmetricKeyParameter CreateKey( - byte[] privateKeyInfoData) - { - return CreateKey( - PrivateKeyInfo.GetInstance( - Asn1Object.FromByteArray(privateKeyInfoData))); - } - - public static AsymmetricKeyParameter CreateKey( - Stream inStr) - { - return CreateKey( - PrivateKeyInfo.GetInstance( - Asn1Object.FromStream(inStr))); - } - - public static AsymmetricKeyParameter CreateKey( - PrivateKeyInfo keyInfo) - { - AlgorithmIdentifier algID = keyInfo.PrivateKeyAlgorithm; - DerObjectIdentifier algOid = algID.Algorithm; - - // TODO See RSAUtil.isRsaOid in Java build - if (algOid.Equals(PkcsObjectIdentifiers.RsaEncryption) - || algOid.Equals(X509ObjectIdentifiers.IdEARsa) - || algOid.Equals(PkcsObjectIdentifiers.IdRsassaPss) - || algOid.Equals(PkcsObjectIdentifiers.IdRsaesOaep)) - { - RsaPrivateKeyStructure keyStructure = RsaPrivateKeyStructure.GetInstance(keyInfo.ParsePrivateKey()); - - return new RsaPrivateCrtKeyParameters( - keyStructure.Modulus, - keyStructure.PublicExponent, - keyStructure.PrivateExponent, - keyStructure.Prime1, - keyStructure.Prime2, - keyStructure.Exponent1, - keyStructure.Exponent2, - keyStructure.Coefficient); - } - // TODO? -// else if (algOid.Equals(X9ObjectIdentifiers.DHPublicNumber)) - else if (algOid.Equals(PkcsObjectIdentifiers.DhKeyAgreement)) - { - DHParameter para = new DHParameter( - Asn1Sequence.GetInstance(algID.Parameters.ToAsn1Object())); - DerInteger derX = (DerInteger)keyInfo.ParsePrivateKey(); - - BigInteger lVal = para.L; - int l = lVal == null ? 0 : lVal.IntValue; - DHParameters dhParams = new DHParameters(para.P, para.G, null, l); - - return new DHPrivateKeyParameters(derX.Value, dhParams, algOid); - } - else if (algOid.Equals(OiwObjectIdentifiers.ElGamalAlgorithm)) - { - ElGamalParameter para = new ElGamalParameter( - Asn1Sequence.GetInstance(algID.Parameters.ToAsn1Object())); - DerInteger derX = (DerInteger)keyInfo.ParsePrivateKey(); - - return new ElGamalPrivateKeyParameters( - derX.Value, - new ElGamalParameters(para.P, para.G)); - } - else if (algOid.Equals(X9ObjectIdentifiers.IdDsa)) - { - DerInteger derX = (DerInteger)keyInfo.ParsePrivateKey(); - Asn1Encodable ae = algID.Parameters; - - DsaParameters parameters = null; - if (ae != null) - { - DsaParameter para = DsaParameter.GetInstance(ae.ToAsn1Object()); - parameters = new DsaParameters(para.P, para.Q, para.G); - } - - return new DsaPrivateKeyParameters(derX.Value, parameters); - } - else if (algOid.Equals(X9ObjectIdentifiers.IdECPublicKey)) - { - X962Parameters para = new X962Parameters(algID.Parameters.ToAsn1Object()); - - X9ECParameters x9; - if (para.IsNamedCurve) - { - x9 = ECKeyPairGenerator.FindECCurveByOid((DerObjectIdentifier)para.Parameters); - } - else - { - x9 = new X9ECParameters((Asn1Sequence)para.Parameters); - } - - ECPrivateKeyStructure ec = ECPrivateKeyStructure.GetInstance(keyInfo.ParsePrivateKey()); - BigInteger d = ec.GetKey(); - - if (para.IsNamedCurve) - { - return new ECPrivateKeyParameters("EC", d, (DerObjectIdentifier)para.Parameters); - } - - ECDomainParameters dParams = new ECDomainParameters(x9.Curve, x9.G, x9.N, x9.H, x9.GetSeed()); - return new ECPrivateKeyParameters(d, dParams); - } - else if (algOid.Equals(CryptoProObjectIdentifiers.GostR3410x2001)) - { - Gost3410PublicKeyAlgParameters gostParams = new Gost3410PublicKeyAlgParameters( - Asn1Sequence.GetInstance(algID.Parameters.ToAsn1Object())); - - ECDomainParameters ecP = ECGost3410NamedCurves.GetByOid(gostParams.PublicKeyParamSet); - - if (ecP == null) - throw new ArgumentException("Unrecognized curve OID for GostR3410x2001 private key"); - - Asn1Object privKey = keyInfo.ParsePrivateKey(); - ECPrivateKeyStructure ec; - - if (privKey is DerInteger) - { - // TODO Do we need to pass any parameters here? - ec = new ECPrivateKeyStructure(ecP.N.BitLength, ((DerInteger)privKey).Value); - } - else - { - ec = ECPrivateKeyStructure.GetInstance(privKey); - } - - return new ECPrivateKeyParameters("ECGOST3410", ec.GetKey(), gostParams.PublicKeyParamSet); - } - else if (algOid.Equals(CryptoProObjectIdentifiers.GostR3410x94)) - { - Gost3410PublicKeyAlgParameters gostParams = new Gost3410PublicKeyAlgParameters( - Asn1Sequence.GetInstance(algID.Parameters.ToAsn1Object())); - - DerOctetString derX = (DerOctetString)keyInfo.ParsePrivateKey(); - BigInteger x = new BigInteger(1, Arrays.Reverse(derX.GetOctets())); - - return new Gost3410PrivateKeyParameters(x, gostParams.PublicKeyParamSet); - } - else - { - throw new SecurityUtilityException("algorithm identifier in key not recognised"); - } - } - - public static AsymmetricKeyParameter DecryptKey( - char[] passPhrase, - EncryptedPrivateKeyInfo encInfo) - { - return CreateKey(PrivateKeyInfoFactory.CreatePrivateKeyInfo(passPhrase, encInfo)); - } - - public static AsymmetricKeyParameter DecryptKey( - char[] passPhrase, - byte[] encryptedPrivateKeyInfoData) - { - return DecryptKey(passPhrase, Asn1Object.FromByteArray(encryptedPrivateKeyInfoData)); - } - - public static AsymmetricKeyParameter DecryptKey( - char[] passPhrase, - Stream encryptedPrivateKeyInfoStream) - { - return DecryptKey(passPhrase, Asn1Object.FromStream(encryptedPrivateKeyInfoStream)); - } - - private static AsymmetricKeyParameter DecryptKey( - char[] passPhrase, - Asn1Object asn1Object) - { - return DecryptKey(passPhrase, EncryptedPrivateKeyInfo.GetInstance(asn1Object)); - } - - public static byte[] EncryptKey( - DerObjectIdentifier algorithm, - char[] passPhrase, - byte[] salt, - int iterationCount, - AsymmetricKeyParameter key) - { - return EncryptedPrivateKeyInfoFactory.CreateEncryptedPrivateKeyInfo( - algorithm, passPhrase, salt, iterationCount, key).GetEncoded(); - } - - public static byte[] EncryptKey( - string algorithm, - char[] passPhrase, - byte[] salt, - int iterationCount, - AsymmetricKeyParameter key) - { - return EncryptedPrivateKeyInfoFactory.CreateEncryptedPrivateKeyInfo( - algorithm, passPhrase, salt, iterationCount, key).GetEncoded(); - } - } -} diff --git a/bc-sharp-crypto/src/security/PublicKeyFactory.cs b/bc-sharp-crypto/src/security/PublicKeyFactory.cs deleted file mode 100644 index f1b28b7..0000000 --- a/bc-sharp-crypto/src/security/PublicKeyFactory.cs +++ /dev/null @@ -1,253 +0,0 @@ -using System; -using System.Collections; -using System.IO; -using System.Text; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.CryptoPro; -using Org.BouncyCastle.Asn1.Oiw; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.Sec; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Generators; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC; - -namespace Org.BouncyCastle.Security -{ - public sealed class PublicKeyFactory - { - private PublicKeyFactory() - { - } - - public static AsymmetricKeyParameter CreateKey( - byte[] keyInfoData) - { - return CreateKey( - SubjectPublicKeyInfo.GetInstance( - Asn1Object.FromByteArray(keyInfoData))); - } - - public static AsymmetricKeyParameter CreateKey( - Stream inStr) - { - return CreateKey( - SubjectPublicKeyInfo.GetInstance( - Asn1Object.FromStream(inStr))); - } - - public static AsymmetricKeyParameter CreateKey( - SubjectPublicKeyInfo keyInfo) - { - AlgorithmIdentifier algID = keyInfo.AlgorithmID; - DerObjectIdentifier algOid = algID.Algorithm; - - // TODO See RSAUtil.isRsaOid in Java build - if (algOid.Equals(PkcsObjectIdentifiers.RsaEncryption) - || algOid.Equals(X509ObjectIdentifiers.IdEARsa) - || algOid.Equals(PkcsObjectIdentifiers.IdRsassaPss) - || algOid.Equals(PkcsObjectIdentifiers.IdRsaesOaep)) - { - RsaPublicKeyStructure pubKey = RsaPublicKeyStructure.GetInstance( - keyInfo.GetPublicKey()); - - return new RsaKeyParameters(false, pubKey.Modulus, pubKey.PublicExponent); - } - else if (algOid.Equals(X9ObjectIdentifiers.DHPublicNumber)) - { - Asn1Sequence seq = Asn1Sequence.GetInstance(algID.Parameters.ToAsn1Object()); - - DHPublicKey dhPublicKey = DHPublicKey.GetInstance(keyInfo.GetPublicKey()); - - BigInteger y = dhPublicKey.Y.Value; - - if (IsPkcsDHParam(seq)) - return ReadPkcsDHParam(algOid, y, seq); - - DHDomainParameters dhParams = DHDomainParameters.GetInstance(seq); - - BigInteger p = dhParams.P.Value; - BigInteger g = dhParams.G.Value; - BigInteger q = dhParams.Q.Value; - - BigInteger j = null; - if (dhParams.J != null) - { - j = dhParams.J.Value; - } - - DHValidationParameters validation = null; - DHValidationParms dhValidationParms = dhParams.ValidationParms; - if (dhValidationParms != null) - { - byte[] seed = dhValidationParms.Seed.GetBytes(); - BigInteger pgenCounter = dhValidationParms.PgenCounter.Value; - - // TODO Check pgenCounter size? - - validation = new DHValidationParameters(seed, pgenCounter.IntValue); - } - - return new DHPublicKeyParameters(y, new DHParameters(p, g, q, j, validation)); - } - else if (algOid.Equals(PkcsObjectIdentifiers.DhKeyAgreement)) - { - Asn1Sequence seq = Asn1Sequence.GetInstance(algID.Parameters.ToAsn1Object()); - - DerInteger derY = (DerInteger) keyInfo.GetPublicKey(); - - return ReadPkcsDHParam(algOid, derY.Value, seq); - } - else if (algOid.Equals(OiwObjectIdentifiers.ElGamalAlgorithm)) - { - ElGamalParameter para = new ElGamalParameter( - Asn1Sequence.GetInstance(algID.Parameters.ToAsn1Object())); - DerInteger derY = (DerInteger) keyInfo.GetPublicKey(); - - return new ElGamalPublicKeyParameters( - derY.Value, - new ElGamalParameters(para.P, para.G)); - } - else if (algOid.Equals(X9ObjectIdentifiers.IdDsa) - || algOid.Equals(OiwObjectIdentifiers.DsaWithSha1)) - { - DerInteger derY = (DerInteger) keyInfo.GetPublicKey(); - Asn1Encodable ae = algID.Parameters; - - DsaParameters parameters = null; - if (ae != null) - { - DsaParameter para = DsaParameter.GetInstance(ae.ToAsn1Object()); - parameters = new DsaParameters(para.P, para.Q, para.G); - } - - return new DsaPublicKeyParameters(derY.Value, parameters); - } - else if (algOid.Equals(X9ObjectIdentifiers.IdECPublicKey)) - { - X962Parameters para = new X962Parameters(algID.Parameters.ToAsn1Object()); - - X9ECParameters x9; - if (para.IsNamedCurve) - { - x9 = ECKeyPairGenerator.FindECCurveByOid((DerObjectIdentifier)para.Parameters); - } - else - { - x9 = new X9ECParameters((Asn1Sequence)para.Parameters); - } - - Asn1OctetString key = new DerOctetString(keyInfo.PublicKeyData.GetBytes()); - X9ECPoint derQ = new X9ECPoint(x9.Curve, key); - ECPoint q = derQ.Point; - - if (para.IsNamedCurve) - { - return new ECPublicKeyParameters("EC", q, (DerObjectIdentifier)para.Parameters); - } - - ECDomainParameters dParams = new ECDomainParameters(x9.Curve, x9.G, x9.N, x9.H, x9.GetSeed()); - return new ECPublicKeyParameters(q, dParams); - } - else if (algOid.Equals(CryptoProObjectIdentifiers.GostR3410x2001)) - { - Gost3410PublicKeyAlgParameters gostParams = new Gost3410PublicKeyAlgParameters( - (Asn1Sequence) algID.Parameters); - - Asn1OctetString key; - try - { - key = (Asn1OctetString) keyInfo.GetPublicKey(); - } - catch (IOException) - { - throw new ArgumentException("invalid info structure in GOST3410 public key"); - } - - byte[] keyEnc = key.GetOctets(); - byte[] x = new byte[32]; - byte[] y = new byte[32]; - - for (int i = 0; i != y.Length; i++) - { - x[i] = keyEnc[32 - 1 - i]; - } - - for (int i = 0; i != x.Length; i++) - { - y[i] = keyEnc[64 - 1 - i]; - } - - ECDomainParameters ecP = ECGost3410NamedCurves.GetByOid(gostParams.PublicKeyParamSet); - - if (ecP == null) - return null; - - ECPoint q = ecP.Curve.CreatePoint(new BigInteger(1, x), new BigInteger(1, y)); - - return new ECPublicKeyParameters("ECGOST3410", q, gostParams.PublicKeyParamSet); - } - else if (algOid.Equals(CryptoProObjectIdentifiers.GostR3410x94)) - { - Gost3410PublicKeyAlgParameters algParams = new Gost3410PublicKeyAlgParameters( - (Asn1Sequence) algID.Parameters); - - DerOctetString derY; - try - { - derY = (DerOctetString) keyInfo.GetPublicKey(); - } - catch (IOException) - { - throw new ArgumentException("invalid info structure in GOST3410 public key"); - } - - byte[] keyEnc = derY.GetOctets(); - byte[] keyBytes = new byte[keyEnc.Length]; - - for (int i = 0; i != keyEnc.Length; i++) - { - keyBytes[i] = keyEnc[keyEnc.Length - 1 - i]; // was little endian - } - - BigInteger y = new BigInteger(1, keyBytes); - - return new Gost3410PublicKeyParameters(y, algParams.PublicKeyParamSet); - } - else - { - throw new SecurityUtilityException("algorithm identifier in key not recognised: " + algOid); - } - } - - private static bool IsPkcsDHParam(Asn1Sequence seq) - { - if (seq.Count == 2) - return true; - - if (seq.Count > 3) - return false; - - DerInteger l = DerInteger.GetInstance(seq[2]); - DerInteger p = DerInteger.GetInstance(seq[0]); - - return l.Value.CompareTo(BigInteger.ValueOf(p.Value.BitLength)) <= 0; - } - - private static DHPublicKeyParameters ReadPkcsDHParam(DerObjectIdentifier algOid, - BigInteger y, Asn1Sequence seq) - { - DHParameter para = new DHParameter(seq); - - BigInteger lVal = para.L; - int l = lVal == null ? 0 : lVal.IntValue; - DHParameters dhParams = new DHParameters(para.P, para.G, null, l); - - return new DHPublicKeyParameters(y, dhParams, algOid); - } - } -} diff --git a/bc-sharp-crypto/src/security/SecureRandom.cs b/bc-sharp-crypto/src/security/SecureRandom.cs deleted file mode 100644 index bd639a3..0000000 --- a/bc-sharp-crypto/src/security/SecureRandom.cs +++ /dev/null @@ -1,262 +0,0 @@ -using System; -using System.Threading; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Crypto.Prng; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Security -{ - public class SecureRandom - : Random - { - private static long counter = Times.NanoTime(); - -#if NETCF_1_0 || PORTABLE - private static object counterLock = new object(); - private static long NextCounterValue() - { - lock (counterLock) - { - return ++counter; - } - } - - private static readonly SecureRandom[] master = { null }; - private static SecureRandom Master - { - get - { - lock (master) - { - if (master[0] == null) - { - SecureRandom sr = master[0] = GetInstance("SHA256PRNG", false); - - // Even though Ticks has at most 8 or 14 bits of entropy, there's no harm in adding it. - sr.SetSeed(DateTime.Now.Ticks); - - // 32 will be enough when ThreadedSeedGenerator is fixed. Until then, ThreadedSeedGenerator returns low - // entropy, and this is not sufficient to be secure. http://www.bouncycastle.org/csharpdevmailarchive/msg00814.html - sr.SetSeed(new ThreadedSeedGenerator().GenerateSeed(32, true)); - } - - return master[0]; - } - } - } -#else - private static long NextCounterValue() - { - return Interlocked.Increment(ref counter); - } - - private static readonly SecureRandom master = new SecureRandom(new CryptoApiRandomGenerator()); - private static SecureRandom Master - { - get { return master; } - } -#endif - - private static DigestRandomGenerator CreatePrng(string digestName, bool autoSeed) - { - IDigest digest = DigestUtilities.GetDigest(digestName); - if (digest == null) - return null; - DigestRandomGenerator prng = new DigestRandomGenerator(digest); - if (autoSeed) - { - prng.AddSeedMaterial(NextCounterValue()); - prng.AddSeedMaterial(GetNextBytes(Master, digest.GetDigestSize())); - } - return prng; - } - - public static byte[] GetNextBytes(SecureRandom secureRandom, int length) - { - byte[] result = new byte[length]; - secureRandom.NextBytes(result); - return result; - } - - /// - /// Create and auto-seed an instance based on the given algorithm. - /// - /// Equivalent to GetInstance(algorithm, true) - /// e.g. "SHA256PRNG" - public static SecureRandom GetInstance(string algorithm) - { - return GetInstance(algorithm, true); - } - - /// - /// Create an instance based on the given algorithm, with optional auto-seeding - /// - /// e.g. "SHA256PRNG" - /// If true, the instance will be auto-seeded. - public static SecureRandom GetInstance(string algorithm, bool autoSeed) - { - string upper = Platform.ToUpperInvariant(algorithm); - if (Platform.EndsWith(upper, "PRNG")) - { - string digestName = upper.Substring(0, upper.Length - "PRNG".Length); - DigestRandomGenerator prng = CreatePrng(digestName, autoSeed); - if (prng != null) - { - return new SecureRandom(prng); - } - } - - throw new ArgumentException("Unrecognised PRNG algorithm: " + algorithm, "algorithm"); - } - - [Obsolete("Call GenerateSeed() on a SecureRandom instance instead")] - public static byte[] GetSeed(int length) - { - return GetNextBytes(Master, length); - } - - protected readonly IRandomGenerator generator; - - public SecureRandom() - : this(CreatePrng("SHA256", true)) - { - } - - /// - /// To replicate existing predictable output, replace with GetInstance("SHA1PRNG", false), followed by SetSeed(seed) - /// - [Obsolete("Use GetInstance/SetSeed instead")] - public SecureRandom(byte[] seed) - : this(CreatePrng("SHA1", false)) - { - SetSeed(seed); - } - - /// Use the specified instance of IRandomGenerator as random source. - /// - /// This constructor performs no seeding of either the IRandomGenerator or the - /// constructed SecureRandom. It is the responsibility of the client to provide - /// proper seed material as necessary/appropriate for the given IRandomGenerator - /// implementation. - /// - /// The source to generate all random bytes from. - public SecureRandom(IRandomGenerator generator) - : base(0) - { - this.generator = generator; - } - - public virtual byte[] GenerateSeed(int length) - { - return GetNextBytes(Master, length); - } - - public virtual void SetSeed(byte[] seed) - { - generator.AddSeedMaterial(seed); - } - - public virtual void SetSeed(long seed) - { - generator.AddSeedMaterial(seed); - } - - public override int Next() - { - return NextInt() & int.MaxValue; - } - - public override int Next(int maxValue) - { - - if (maxValue < 2) - { - if (maxValue < 0) - throw new ArgumentOutOfRangeException("maxValue", "cannot be negative"); - - return 0; - } - - int bits; - - // Test whether maxValue is a power of 2 - if ((maxValue & (maxValue - 1)) == 0) - { - bits = NextInt() & int.MaxValue; - return (int)(((long)bits * maxValue) >> 31); - } - - int result; - do - { - bits = NextInt() & int.MaxValue; - result = bits % maxValue; - } - while (bits - result + (maxValue - 1) < 0); // Ignore results near overflow - - return result; - } - - public override int Next(int minValue, int maxValue) - { - if (maxValue <= minValue) - { - if (maxValue == minValue) - return minValue; - - throw new ArgumentException("maxValue cannot be less than minValue"); - } - - int diff = maxValue - minValue; - if (diff > 0) - return minValue + Next(diff); - - for (;;) - { - int i = NextInt(); - - if (i >= minValue && i < maxValue) - return i; - } - } - - public override void NextBytes(byte[] buf) - { - generator.NextBytes(buf); - } - - public virtual void NextBytes(byte[] buf, int off, int len) - { - generator.NextBytes(buf, off, len); - } - - private static readonly double DoubleScale = System.Math.Pow(2.0, 64.0); - - public override double NextDouble() - { - return Convert.ToDouble((ulong) NextLong()) / DoubleScale; - } - - public virtual int NextInt() - { - byte[] bytes = new byte[4]; - NextBytes(bytes); - - uint result = bytes[0]; - result <<= 8; - result |= bytes[1]; - result <<= 8; - result |= bytes[2]; - result <<= 8; - result |= bytes[3]; - return (int)result; - } - - public virtual long NextLong() - { - return ((long)(uint) NextInt() << 32) | (long)(uint) NextInt(); - } - } -} diff --git a/bc-sharp-crypto/src/security/SecurityUtilityException.cs b/bc-sharp-crypto/src/security/SecurityUtilityException.cs deleted file mode 100644 index 8a19530..0000000 --- a/bc-sharp-crypto/src/security/SecurityUtilityException.cs +++ /dev/null @@ -1,36 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Security -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class SecurityUtilityException - : Exception - { - /** - * base constructor. - */ - public SecurityUtilityException() - { - } - - /** - * create a SecurityUtilityException with the given message. - * - * @param message the message to be carried with the exception. - */ - public SecurityUtilityException( - string message) - : base(message) - { - } - - public SecurityUtilityException( - string message, - Exception exception) - : base(message, exception) - { - } - } -} diff --git a/bc-sharp-crypto/src/security/SignatureException.cs b/bc-sharp-crypto/src/security/SignatureException.cs deleted file mode 100644 index 3ad617d..0000000 --- a/bc-sharp-crypto/src/security/SignatureException.cs +++ /dev/null @@ -1,14 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Security -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class SignatureException : GeneralSecurityException - { - public SignatureException() : base() { } - public SignatureException(string message) : base(message) { } - public SignatureException(string message, Exception exception) : base(message, exception) { } - } -} diff --git a/bc-sharp-crypto/src/security/SignerUtilities.cs b/bc-sharp-crypto/src/security/SignerUtilities.cs deleted file mode 100644 index 9a4915b..0000000 --- a/bc-sharp-crypto/src/security/SignerUtilities.cs +++ /dev/null @@ -1,566 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.CryptoPro; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.TeleTrust; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Crypto.Digests; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Engines; -using Org.BouncyCastle.Crypto.Signers; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Security -{ - /// - /// Signer Utility class contains methods that can not be specifically grouped into other classes. - /// - public sealed class SignerUtilities - { - private SignerUtilities() - { - } - - internal static readonly IDictionary algorithms = Platform.CreateHashtable(); - internal static readonly IDictionary oids = Platform.CreateHashtable(); - - static SignerUtilities() - { - algorithms["MD2WITHRSA"] = "MD2withRSA"; - algorithms["MD2WITHRSAENCRYPTION"] = "MD2withRSA"; - algorithms[PkcsObjectIdentifiers.MD2WithRsaEncryption.Id] = "MD2withRSA"; - - algorithms["MD4WITHRSA"] = "MD4withRSA"; - algorithms["MD4WITHRSAENCRYPTION"] = "MD4withRSA"; - algorithms[PkcsObjectIdentifiers.MD4WithRsaEncryption.Id] = "MD4withRSA"; - - algorithms["MD5WITHRSA"] = "MD5withRSA"; - algorithms["MD5WITHRSAENCRYPTION"] = "MD5withRSA"; - algorithms[PkcsObjectIdentifiers.MD5WithRsaEncryption.Id] = "MD5withRSA"; - - algorithms["SHA1WITHRSA"] = "SHA-1withRSA"; - algorithms["SHA1WITHRSAENCRYPTION"] = "SHA-1withRSA"; - algorithms[PkcsObjectIdentifiers.Sha1WithRsaEncryption.Id] = "SHA-1withRSA"; - algorithms["SHA-1WITHRSA"] = "SHA-1withRSA"; - - algorithms["SHA224WITHRSA"] = "SHA-224withRSA"; - algorithms["SHA224WITHRSAENCRYPTION"] = "SHA-224withRSA"; - algorithms[PkcsObjectIdentifiers.Sha224WithRsaEncryption.Id] = "SHA-224withRSA"; - algorithms["SHA-224WITHRSA"] = "SHA-224withRSA"; - - algorithms["SHA256WITHRSA"] = "SHA-256withRSA"; - algorithms["SHA256WITHRSAENCRYPTION"] = "SHA-256withRSA"; - algorithms[PkcsObjectIdentifiers.Sha256WithRsaEncryption.Id] = "SHA-256withRSA"; - algorithms["SHA-256WITHRSA"] = "SHA-256withRSA"; - - algorithms["SHA384WITHRSA"] = "SHA-384withRSA"; - algorithms["SHA384WITHRSAENCRYPTION"] = "SHA-384withRSA"; - algorithms[PkcsObjectIdentifiers.Sha384WithRsaEncryption.Id] = "SHA-384withRSA"; - algorithms["SHA-384WITHRSA"] = "SHA-384withRSA"; - - algorithms["SHA512WITHRSA"] = "SHA-512withRSA"; - algorithms["SHA512WITHRSAENCRYPTION"] = "SHA-512withRSA"; - algorithms[PkcsObjectIdentifiers.Sha512WithRsaEncryption.Id] = "SHA-512withRSA"; - algorithms["SHA-512WITHRSA"] = "SHA-512withRSA"; - - algorithms["PSSWITHRSA"] = "PSSwithRSA"; - algorithms["RSASSA-PSS"] = "PSSwithRSA"; - algorithms[PkcsObjectIdentifiers.IdRsassaPss.Id] = "PSSwithRSA"; - algorithms["RSAPSS"] = "PSSwithRSA"; - - algorithms["SHA1WITHRSAANDMGF1"] = "SHA-1withRSAandMGF1"; - algorithms["SHA-1WITHRSAANDMGF1"] = "SHA-1withRSAandMGF1"; - algorithms["SHA1WITHRSA/PSS"] = "SHA-1withRSAandMGF1"; - algorithms["SHA-1WITHRSA/PSS"] = "SHA-1withRSAandMGF1"; - - algorithms["SHA224WITHRSAANDMGF1"] = "SHA-224withRSAandMGF1"; - algorithms["SHA-224WITHRSAANDMGF1"] = "SHA-224withRSAandMGF1"; - algorithms["SHA224WITHRSA/PSS"] = "SHA-224withRSAandMGF1"; - algorithms["SHA-224WITHRSA/PSS"] = "SHA-224withRSAandMGF1"; - - algorithms["SHA256WITHRSAANDMGF1"] = "SHA-256withRSAandMGF1"; - algorithms["SHA-256WITHRSAANDMGF1"] = "SHA-256withRSAandMGF1"; - algorithms["SHA256WITHRSA/PSS"] = "SHA-256withRSAandMGF1"; - algorithms["SHA-256WITHRSA/PSS"] = "SHA-256withRSAandMGF1"; - - algorithms["SHA384WITHRSAANDMGF1"] = "SHA-384withRSAandMGF1"; - algorithms["SHA-384WITHRSAANDMGF1"] = "SHA-384withRSAandMGF1"; - algorithms["SHA384WITHRSA/PSS"] = "SHA-384withRSAandMGF1"; - algorithms["SHA-384WITHRSA/PSS"] = "SHA-384withRSAandMGF1"; - - algorithms["SHA512WITHRSAANDMGF1"] = "SHA-512withRSAandMGF1"; - algorithms["SHA-512WITHRSAANDMGF1"] = "SHA-512withRSAandMGF1"; - algorithms["SHA512WITHRSA/PSS"] = "SHA-512withRSAandMGF1"; - algorithms["SHA-512WITHRSA/PSS"] = "SHA-512withRSAandMGF1"; - - algorithms["RIPEMD128WITHRSA"] = "RIPEMD128withRSA"; - algorithms["RIPEMD128WITHRSAENCRYPTION"] = "RIPEMD128withRSA"; - algorithms[TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD128.Id] = "RIPEMD128withRSA"; - - algorithms["RIPEMD160WITHRSA"] = "RIPEMD160withRSA"; - algorithms["RIPEMD160WITHRSAENCRYPTION"] = "RIPEMD160withRSA"; - algorithms[TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD160.Id] = "RIPEMD160withRSA"; - - algorithms["RIPEMD256WITHRSA"] = "RIPEMD256withRSA"; - algorithms["RIPEMD256WITHRSAENCRYPTION"] = "RIPEMD256withRSA"; - algorithms[TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD256.Id] = "RIPEMD256withRSA"; - - algorithms["NONEWITHRSA"] = "RSA"; - algorithms["RSAWITHNONE"] = "RSA"; - algorithms["RAWRSA"] = "RSA"; - - algorithms["RAWRSAPSS"] = "RAWRSASSA-PSS"; - algorithms["NONEWITHRSAPSS"] = "RAWRSASSA-PSS"; - algorithms["NONEWITHRSASSA-PSS"] = "RAWRSASSA-PSS"; - - algorithms["NONEWITHDSA"] = "NONEwithDSA"; - algorithms["DSAWITHNONE"] = "NONEwithDSA"; - algorithms["RAWDSA"] = "NONEwithDSA"; - - algorithms["DSA"] = "SHA-1withDSA"; - algorithms["DSAWITHSHA1"] = "SHA-1withDSA"; - algorithms["DSAWITHSHA-1"] = "SHA-1withDSA"; - algorithms["SHA/DSA"] = "SHA-1withDSA"; - algorithms["SHA1/DSA"] = "SHA-1withDSA"; - algorithms["SHA-1/DSA"] = "SHA-1withDSA"; - algorithms["SHA1WITHDSA"] = "SHA-1withDSA"; - algorithms["SHA-1WITHDSA"] = "SHA-1withDSA"; - algorithms[X9ObjectIdentifiers.IdDsaWithSha1.Id] = "SHA-1withDSA"; - - algorithms["DSAWITHSHA224"] = "SHA-224withDSA"; - algorithms["DSAWITHSHA-224"] = "SHA-224withDSA"; - algorithms["SHA224/DSA"] = "SHA-224withDSA"; - algorithms["SHA-224/DSA"] = "SHA-224withDSA"; - algorithms["SHA224WITHDSA"] = "SHA-224withDSA"; - algorithms["SHA-224WITHDSA"] = "SHA-224withDSA"; - algorithms[NistObjectIdentifiers.DsaWithSha224.Id] = "SHA-224withDSA"; - - algorithms["DSAWITHSHA256"] = "SHA-256withDSA"; - algorithms["DSAWITHSHA-256"] = "SHA-256withDSA"; - algorithms["SHA256/DSA"] = "SHA-256withDSA"; - algorithms["SHA-256/DSA"] = "SHA-256withDSA"; - algorithms["SHA256WITHDSA"] = "SHA-256withDSA"; - algorithms["SHA-256WITHDSA"] = "SHA-256withDSA"; - algorithms[NistObjectIdentifiers.DsaWithSha256.Id] = "SHA-256withDSA"; - - algorithms["DSAWITHSHA384"] = "SHA-384withDSA"; - algorithms["DSAWITHSHA-384"] = "SHA-384withDSA"; - algorithms["SHA384/DSA"] = "SHA-384withDSA"; - algorithms["SHA-384/DSA"] = "SHA-384withDSA"; - algorithms["SHA384WITHDSA"] = "SHA-384withDSA"; - algorithms["SHA-384WITHDSA"] = "SHA-384withDSA"; - algorithms[NistObjectIdentifiers.DsaWithSha384.Id] = "SHA-384withDSA"; - - algorithms["DSAWITHSHA512"] = "SHA-512withDSA"; - algorithms["DSAWITHSHA-512"] = "SHA-512withDSA"; - algorithms["SHA512/DSA"] = "SHA-512withDSA"; - algorithms["SHA-512/DSA"] = "SHA-512withDSA"; - algorithms["SHA512WITHDSA"] = "SHA-512withDSA"; - algorithms["SHA-512WITHDSA"] = "SHA-512withDSA"; - algorithms[NistObjectIdentifiers.DsaWithSha512.Id] = "SHA-512withDSA"; - - algorithms["NONEWITHECDSA"] = "NONEwithECDSA"; - algorithms["ECDSAWITHNONE"] = "NONEwithECDSA"; - - algorithms["ECDSA"] = "SHA-1withECDSA"; - algorithms["SHA1/ECDSA"] = "SHA-1withECDSA"; - algorithms["SHA-1/ECDSA"] = "SHA-1withECDSA"; - algorithms["ECDSAWITHSHA1"] = "SHA-1withECDSA"; - algorithms["ECDSAWITHSHA-1"] = "SHA-1withECDSA"; - algorithms["SHA1WITHECDSA"] = "SHA-1withECDSA"; - algorithms["SHA-1WITHECDSA"] = "SHA-1withECDSA"; - algorithms[X9ObjectIdentifiers.ECDsaWithSha1.Id] = "SHA-1withECDSA"; - algorithms[TeleTrusTObjectIdentifiers.ECSignWithSha1.Id] = "SHA-1withECDSA"; - - algorithms["SHA224/ECDSA"] = "SHA-224withECDSA"; - algorithms["SHA-224/ECDSA"] = "SHA-224withECDSA"; - algorithms["ECDSAWITHSHA224"] = "SHA-224withECDSA"; - algorithms["ECDSAWITHSHA-224"] = "SHA-224withECDSA"; - algorithms["SHA224WITHECDSA"] = "SHA-224withECDSA"; - algorithms["SHA-224WITHECDSA"] = "SHA-224withECDSA"; - algorithms[X9ObjectIdentifiers.ECDsaWithSha224.Id] = "SHA-224withECDSA"; - - algorithms["SHA256/ECDSA"] = "SHA-256withECDSA"; - algorithms["SHA-256/ECDSA"] = "SHA-256withECDSA"; - algorithms["ECDSAWITHSHA256"] = "SHA-256withECDSA"; - algorithms["ECDSAWITHSHA-256"] = "SHA-256withECDSA"; - algorithms["SHA256WITHECDSA"] = "SHA-256withECDSA"; - algorithms["SHA-256WITHECDSA"] = "SHA-256withECDSA"; - algorithms[X9ObjectIdentifiers.ECDsaWithSha256.Id] = "SHA-256withECDSA"; - - algorithms["SHA384/ECDSA"] = "SHA-384withECDSA"; - algorithms["SHA-384/ECDSA"] = "SHA-384withECDSA"; - algorithms["ECDSAWITHSHA384"] = "SHA-384withECDSA"; - algorithms["ECDSAWITHSHA-384"] = "SHA-384withECDSA"; - algorithms["SHA384WITHECDSA"] = "SHA-384withECDSA"; - algorithms["SHA-384WITHECDSA"] = "SHA-384withECDSA"; - algorithms[X9ObjectIdentifiers.ECDsaWithSha384.Id] = "SHA-384withECDSA"; - - algorithms["SHA512/ECDSA"] = "SHA-512withECDSA"; - algorithms["SHA-512/ECDSA"] = "SHA-512withECDSA"; - algorithms["ECDSAWITHSHA512"] = "SHA-512withECDSA"; - algorithms["ECDSAWITHSHA-512"] = "SHA-512withECDSA"; - algorithms["SHA512WITHECDSA"] = "SHA-512withECDSA"; - algorithms["SHA-512WITHECDSA"] = "SHA-512withECDSA"; - algorithms[X9ObjectIdentifiers.ECDsaWithSha512.Id] = "SHA-512withECDSA"; - - algorithms["RIPEMD160/ECDSA"] = "RIPEMD160withECDSA"; - algorithms["ECDSAWITHRIPEMD160"] = "RIPEMD160withECDSA"; - algorithms["RIPEMD160WITHECDSA"] = "RIPEMD160withECDSA"; - algorithms[TeleTrusTObjectIdentifiers.ECSignWithRipeMD160.Id] = "RIPEMD160withECDSA"; - - algorithms["GOST-3410"] = "GOST3410"; - algorithms["GOST-3410-94"] = "GOST3410"; - algorithms["GOST3411WITHGOST3410"] = "GOST3410"; - algorithms[CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x94.Id] = "GOST3410"; - - algorithms["ECGOST-3410"] = "ECGOST3410"; - algorithms["ECGOST-3410-2001"] = "ECGOST3410"; - algorithms["GOST3411WITHECGOST3410"] = "ECGOST3410"; - algorithms[CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x2001.Id] = "ECGOST3410"; - - - - oids["MD2withRSA"] = PkcsObjectIdentifiers.MD2WithRsaEncryption; - oids["MD4withRSA"] = PkcsObjectIdentifiers.MD4WithRsaEncryption; - oids["MD5withRSA"] = PkcsObjectIdentifiers.MD5WithRsaEncryption; - - oids["SHA-1withRSA"] = PkcsObjectIdentifiers.Sha1WithRsaEncryption; - oids["SHA-224withRSA"] = PkcsObjectIdentifiers.Sha224WithRsaEncryption; - oids["SHA-256withRSA"] = PkcsObjectIdentifiers.Sha256WithRsaEncryption; - oids["SHA-384withRSA"] = PkcsObjectIdentifiers.Sha384WithRsaEncryption; - oids["SHA-512withRSA"] = PkcsObjectIdentifiers.Sha512WithRsaEncryption; - - oids["PSSwithRSA"] = PkcsObjectIdentifiers.IdRsassaPss; - oids["SHA-1withRSAandMGF1"] = PkcsObjectIdentifiers.IdRsassaPss; - oids["SHA-224withRSAandMGF1"] = PkcsObjectIdentifiers.IdRsassaPss; - oids["SHA-256withRSAandMGF1"] = PkcsObjectIdentifiers.IdRsassaPss; - oids["SHA-384withRSAandMGF1"] = PkcsObjectIdentifiers.IdRsassaPss; - oids["SHA-512withRSAandMGF1"] = PkcsObjectIdentifiers.IdRsassaPss; - - oids["RIPEMD128withRSA"] = TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD128; - oids["RIPEMD160withRSA"] = TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD160; - oids["RIPEMD256withRSA"] = TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD256; - - oids["SHA-1withDSA"] = X9ObjectIdentifiers.IdDsaWithSha1; - - oids["SHA-1withECDSA"] = X9ObjectIdentifiers.ECDsaWithSha1; - oids["SHA-224withECDSA"] = X9ObjectIdentifiers.ECDsaWithSha224; - oids["SHA-256withECDSA"] = X9ObjectIdentifiers.ECDsaWithSha256; - oids["SHA-384withECDSA"] = X9ObjectIdentifiers.ECDsaWithSha384; - oids["SHA-512withECDSA"] = X9ObjectIdentifiers.ECDsaWithSha512; - - oids["GOST3410"] = CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x94; - oids["ECGOST3410"] = CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x2001; - } - - /// - /// Returns an ObjectIdentifier for a given encoding. - /// - /// A string representation of the encoding. - /// A DerObjectIdentifier, null if the OID is not available. - // TODO Don't really want to support this - public static DerObjectIdentifier GetObjectIdentifier( - string mechanism) - { - if (mechanism == null) - throw new ArgumentNullException("mechanism"); - - mechanism = Platform.ToUpperInvariant(mechanism); - string aliased = (string) algorithms[mechanism]; - - if (aliased != null) - mechanism = aliased; - - return (DerObjectIdentifier) oids[mechanism]; - } - - public static ICollection Algorithms - { - get { return oids.Keys; } - } - - public static Asn1Encodable GetDefaultX509Parameters( - DerObjectIdentifier id) - { - return GetDefaultX509Parameters(id.Id); - } - - public static Asn1Encodable GetDefaultX509Parameters( - string algorithm) - { - if (algorithm == null) - throw new ArgumentNullException("algorithm"); - - algorithm = Platform.ToUpperInvariant(algorithm); - - string mechanism = (string) algorithms[algorithm]; - - if (mechanism == null) - mechanism = algorithm; - - if (mechanism == "PSSwithRSA") - { - // TODO The Sha1Digest here is a default. In JCE version, the actual digest - // to be used can be overridden by subsequent parameter settings. - return GetPssX509Parameters("SHA-1"); - } - - if (Platform.EndsWith(mechanism, "withRSAandMGF1")) - { - string digestName = mechanism.Substring(0, mechanism.Length - "withRSAandMGF1".Length); - return GetPssX509Parameters(digestName); - } - - return DerNull.Instance; - } - - private static Asn1Encodable GetPssX509Parameters( - string digestName) - { - AlgorithmIdentifier hashAlgorithm = new AlgorithmIdentifier( - DigestUtilities.GetObjectIdentifier(digestName), DerNull.Instance); - - // TODO Is it possible for the MGF hash alg to be different from the PSS one? - AlgorithmIdentifier maskGenAlgorithm = new AlgorithmIdentifier( - PkcsObjectIdentifiers.IdMgf1, hashAlgorithm); - - int saltLen = DigestUtilities.GetDigest(digestName).GetDigestSize(); - return new RsassaPssParameters(hashAlgorithm, maskGenAlgorithm, - new DerInteger(saltLen), new DerInteger(1)); - } - - public static ISigner GetSigner( - DerObjectIdentifier id) - { - return GetSigner(id.Id); - } - - public static ISigner GetSigner( - string algorithm) - { - if (algorithm == null) - throw new ArgumentNullException("algorithm"); - - algorithm = Platform.ToUpperInvariant(algorithm); - - string mechanism = (string) algorithms[algorithm]; - - if (mechanism == null) - mechanism = algorithm; - - if (mechanism.Equals("RSA")) - { - return (new RsaDigestSigner(new NullDigest(), (AlgorithmIdentifier)null)); - } - if (mechanism.Equals("MD2withRSA")) - { - return (new RsaDigestSigner(new MD2Digest())); - } - if (mechanism.Equals("MD4withRSA")) - { - return (new RsaDigestSigner(new MD4Digest())); - } - if (mechanism.Equals("MD5withRSA")) - { - return (new RsaDigestSigner(new MD5Digest())); - } - if (mechanism.Equals("SHA-1withRSA")) - { - return (new RsaDigestSigner(new Sha1Digest())); - } - if (mechanism.Equals("SHA-224withRSA")) - { - return (new RsaDigestSigner(new Sha224Digest())); - } - if (mechanism.Equals("SHA-256withRSA")) - { - return (new RsaDigestSigner(new Sha256Digest())); - } - if (mechanism.Equals("SHA-384withRSA")) - { - return (new RsaDigestSigner(new Sha384Digest())); - } - if (mechanism.Equals("SHA-512withRSA")) - { - return (new RsaDigestSigner(new Sha512Digest())); - } - if (mechanism.Equals("RIPEMD128withRSA")) - { - return (new RsaDigestSigner(new RipeMD128Digest())); - } - if (mechanism.Equals("RIPEMD160withRSA")) - { - return (new RsaDigestSigner(new RipeMD160Digest())); - } - if (mechanism.Equals("RIPEMD256withRSA")) - { - return (new RsaDigestSigner(new RipeMD256Digest())); - } - - if (mechanism.Equals("RAWRSASSA-PSS")) - { - // TODO Add support for other parameter settings - return PssSigner.CreateRawSigner(new RsaBlindedEngine(), new Sha1Digest()); - } - if (mechanism.Equals("PSSwithRSA")) - { - // TODO The Sha1Digest here is a default. In JCE version, the actual digest - // to be used can be overridden by subsequent parameter settings. - return (new PssSigner(new RsaBlindedEngine(), new Sha1Digest())); - } - if (mechanism.Equals("SHA-1withRSAandMGF1")) - { - return (new PssSigner(new RsaBlindedEngine(), new Sha1Digest())); - } - if (mechanism.Equals("SHA-224withRSAandMGF1")) - { - return (new PssSigner(new RsaBlindedEngine(), new Sha224Digest())); - } - if (mechanism.Equals("SHA-256withRSAandMGF1")) - { - return (new PssSigner(new RsaBlindedEngine(), new Sha256Digest())); - } - if (mechanism.Equals("SHA-384withRSAandMGF1")) - { - return (new PssSigner(new RsaBlindedEngine(), new Sha384Digest())); - } - if (mechanism.Equals("SHA-512withRSAandMGF1")) - { - return (new PssSigner(new RsaBlindedEngine(), new Sha512Digest())); - } - - if (mechanism.Equals("NONEwithDSA")) - { - return (new DsaDigestSigner(new DsaSigner(), new NullDigest())); - } - if (mechanism.Equals("SHA-1withDSA")) - { - return (new DsaDigestSigner(new DsaSigner(), new Sha1Digest())); - } - if (mechanism.Equals("SHA-224withDSA")) - { - return (new DsaDigestSigner(new DsaSigner(), new Sha224Digest())); - } - if (mechanism.Equals("SHA-256withDSA")) - { - return (new DsaDigestSigner(new DsaSigner(), new Sha256Digest())); - } - if (mechanism.Equals("SHA-384withDSA")) - { - return (new DsaDigestSigner(new DsaSigner(), new Sha384Digest())); - } - if (mechanism.Equals("SHA-512withDSA")) - { - return (new DsaDigestSigner(new DsaSigner(), new Sha512Digest())); - } - - if (mechanism.Equals("NONEwithECDSA")) - { - return (new DsaDigestSigner(new ECDsaSigner(), new NullDigest())); - } - if (mechanism.Equals("SHA-1withECDSA")) - { - return (new DsaDigestSigner(new ECDsaSigner(), new Sha1Digest())); - } - if (mechanism.Equals("SHA-224withECDSA")) - { - return (new DsaDigestSigner(new ECDsaSigner(), new Sha224Digest())); - } - if (mechanism.Equals("SHA-256withECDSA")) - { - return (new DsaDigestSigner(new ECDsaSigner(), new Sha256Digest())); - } - if (mechanism.Equals("SHA-384withECDSA")) - { - return (new DsaDigestSigner(new ECDsaSigner(), new Sha384Digest())); - } - if (mechanism.Equals("SHA-512withECDSA")) - { - return (new DsaDigestSigner(new ECDsaSigner(), new Sha512Digest())); - } - - if (mechanism.Equals("RIPEMD160withECDSA")) - { - return (new DsaDigestSigner(new ECDsaSigner(), new RipeMD160Digest())); - } - - if (mechanism.Equals("SHA1WITHECNR")) - { - return (new DsaDigestSigner(new ECNRSigner(), new Sha1Digest())); - } - if (mechanism.Equals("SHA224WITHECNR")) - { - return (new DsaDigestSigner(new ECNRSigner(), new Sha224Digest())); - } - if (mechanism.Equals("SHA256WITHECNR")) - { - return (new DsaDigestSigner(new ECNRSigner(), new Sha256Digest())); - } - if (mechanism.Equals("SHA384WITHECNR")) - { - return (new DsaDigestSigner(new ECNRSigner(), new Sha384Digest())); - } - if (mechanism.Equals("SHA512WITHECNR")) - { - return (new DsaDigestSigner(new ECNRSigner(), new Sha512Digest())); - } - - if (mechanism.Equals("GOST3410")) - { - return new Gost3410DigestSigner(new Gost3410Signer(), new Gost3411Digest()); - } - if (mechanism.Equals("ECGOST3410")) - { - return new Gost3410DigestSigner(new ECGost3410Signer(), new Gost3411Digest()); - } - - if (mechanism.Equals("SHA1WITHRSA/ISO9796-2")) - { - return new Iso9796d2Signer(new RsaBlindedEngine(), new Sha1Digest(), true); - } - if (mechanism.Equals("MD5WITHRSA/ISO9796-2")) - { - return new Iso9796d2Signer(new RsaBlindedEngine(), new MD5Digest(), true); - } - if (mechanism.Equals("RIPEMD160WITHRSA/ISO9796-2")) - { - return new Iso9796d2Signer(new RsaBlindedEngine(), new RipeMD160Digest(), true); - } - - if (Platform.EndsWith(mechanism, "/X9.31")) - { - string x931 = mechanism.Substring(0, mechanism.Length - "/X9.31".Length); - int withPos = Platform.IndexOf(x931, "WITH"); - if (withPos > 0) - { - int endPos = withPos + "WITH".Length; - - string digestName = x931.Substring(0, withPos); - IDigest digest = DigestUtilities.GetDigest(digestName); - - string cipherName = x931.Substring(endPos, x931.Length - endPos); - if (cipherName.Equals("RSA")) - { - IAsymmetricBlockCipher cipher = new RsaBlindedEngine(); - return new X931Signer(cipher, digest); - } - } - } - - throw new SecurityUtilityException("Signer " + algorithm + " not recognised."); - } - - public static string GetEncodingName( - DerObjectIdentifier oid) - { - return (string) algorithms[oid.Id]; - } - } -} diff --git a/bc-sharp-crypto/src/security/WrapperUtilities.cs b/bc-sharp-crypto/src/security/WrapperUtilities.cs deleted file mode 100644 index c576320..0000000 --- a/bc-sharp-crypto/src/security/WrapperUtilities.cs +++ /dev/null @@ -1,153 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Kisa; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Ntt; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Engines; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Security -{ - /// - /// Utility class for creating IWrapper objects from their names/Oids - /// - public sealed class WrapperUtilities - { - private enum WrapAlgorithm { AESWRAP, CAMELLIAWRAP, DESEDEWRAP, RC2WRAP, SEEDWRAP, - DESEDERFC3211WRAP, AESRFC3211WRAP, CAMELLIARFC3211WRAP }; - - private WrapperUtilities() - { - } - - private static readonly IDictionary algorithms = Platform.CreateHashtable(); - //private static readonly IDictionary oids = Platform.CreateHashtable(); - - static WrapperUtilities() - { - // Signal to obfuscation tools not to change enum constants - ((WrapAlgorithm)Enums.GetArbitraryValue(typeof(WrapAlgorithm))).ToString(); - - algorithms[NistObjectIdentifiers.IdAes128Wrap.Id] = "AESWRAP"; - algorithms[NistObjectIdentifiers.IdAes192Wrap.Id] = "AESWRAP"; - algorithms[NistObjectIdentifiers.IdAes256Wrap.Id] = "AESWRAP"; - - algorithms[NttObjectIdentifiers.IdCamellia128Wrap.Id] = "CAMELLIAWRAP"; - algorithms[NttObjectIdentifiers.IdCamellia192Wrap.Id] = "CAMELLIAWRAP"; - algorithms[NttObjectIdentifiers.IdCamellia256Wrap.Id] = "CAMELLIAWRAP"; - - algorithms[PkcsObjectIdentifiers.IdAlgCms3DesWrap.Id] = "DESEDEWRAP"; - algorithms["TDEAWRAP"] = "DESEDEWRAP"; - - algorithms[PkcsObjectIdentifiers.IdAlgCmsRC2Wrap.Id] = "RC2WRAP"; - - algorithms[KisaObjectIdentifiers.IdNpkiAppCmsSeedWrap.Id] = "SEEDWRAP"; - } - - public static IWrapper GetWrapper( - DerObjectIdentifier oid) - { - return GetWrapper(oid.Id); - } - - public static IWrapper GetWrapper( - string algorithm) - { - string upper = Platform.ToUpperInvariant(algorithm); - string mechanism = (string)algorithms[upper]; - - if (mechanism == null) - { - mechanism = upper; - } - - try - { - WrapAlgorithm wrapAlgorithm = (WrapAlgorithm)Enums.GetEnumValue( - typeof(WrapAlgorithm), mechanism); - - switch (wrapAlgorithm) - { - case WrapAlgorithm.AESWRAP: return new AesWrapEngine(); - case WrapAlgorithm.CAMELLIAWRAP: return new CamelliaWrapEngine(); - case WrapAlgorithm.DESEDEWRAP: return new DesEdeWrapEngine(); - case WrapAlgorithm.RC2WRAP: return new RC2WrapEngine(); - case WrapAlgorithm.SEEDWRAP: return new SeedWrapEngine(); - case WrapAlgorithm.DESEDERFC3211WRAP: return new Rfc3211WrapEngine(new DesEdeEngine()); - case WrapAlgorithm.AESRFC3211WRAP: return new Rfc3211WrapEngine(new AesEngine()); - case WrapAlgorithm.CAMELLIARFC3211WRAP: return new Rfc3211WrapEngine(new CamelliaEngine()); - } - } - catch (ArgumentException) - { - } - - // Create an IBufferedCipher and use it as IWrapper (via BufferedCipherWrapper) - IBufferedCipher blockCipher = CipherUtilities.GetCipher(algorithm); - - if (blockCipher != null) - return new BufferedCipherWrapper(blockCipher); - - throw new SecurityUtilityException("Wrapper " + algorithm + " not recognised."); - } - - public static string GetAlgorithmName( - DerObjectIdentifier oid) - { - return (string) algorithms[oid.Id]; - } - - private class BufferedCipherWrapper - : IWrapper - { - private readonly IBufferedCipher cipher; - private bool forWrapping; - - public BufferedCipherWrapper( - IBufferedCipher cipher) - { - this.cipher = cipher; - } - - public string AlgorithmName - { - get { return cipher.AlgorithmName; } - } - - public void Init( - bool forWrapping, - ICipherParameters parameters) - { - this.forWrapping = forWrapping; - - cipher.Init(forWrapping, parameters); - } - - public byte[] Wrap( - byte[] input, - int inOff, - int length) - { - if (!forWrapping) - throw new InvalidOperationException("Not initialised for wrapping"); - - return cipher.DoFinal(input, inOff, length); - } - - public byte[] Unwrap( - byte[] input, - int inOff, - int length) - { - if (forWrapping) - throw new InvalidOperationException("Not initialised for unwrapping"); - - return cipher.DoFinal(input, inOff, length); - } - } - } -} diff --git a/bc-sharp-crypto/src/security/cert/CertificateEncodingException.cs b/bc-sharp-crypto/src/security/cert/CertificateEncodingException.cs deleted file mode 100644 index ab9024f..0000000 --- a/bc-sharp-crypto/src/security/cert/CertificateEncodingException.cs +++ /dev/null @@ -1,14 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Security.Certificates -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class CertificateEncodingException : CertificateException - { - public CertificateEncodingException() : base() { } - public CertificateEncodingException(string msg) : base(msg) { } - public CertificateEncodingException(string msg, Exception e) : base(msg, e) { } - } -} diff --git a/bc-sharp-crypto/src/security/cert/CertificateException.cs b/bc-sharp-crypto/src/security/cert/CertificateException.cs deleted file mode 100644 index 4bbaccf..0000000 --- a/bc-sharp-crypto/src/security/cert/CertificateException.cs +++ /dev/null @@ -1,14 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Security.Certificates -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class CertificateException : GeneralSecurityException - { - public CertificateException() : base() { } - public CertificateException(string message) : base(message) { } - public CertificateException(string message, Exception exception) : base(message, exception) { } - } -} diff --git a/bc-sharp-crypto/src/security/cert/CertificateExpiredException.cs b/bc-sharp-crypto/src/security/cert/CertificateExpiredException.cs deleted file mode 100644 index 864fb85..0000000 --- a/bc-sharp-crypto/src/security/cert/CertificateExpiredException.cs +++ /dev/null @@ -1,14 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Security.Certificates -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class CertificateExpiredException : CertificateException - { - public CertificateExpiredException() : base() { } - public CertificateExpiredException(string message) : base(message) { } - public CertificateExpiredException(string message, Exception exception) : base(message, exception) { } - } -} diff --git a/bc-sharp-crypto/src/security/cert/CertificateNotYetValidException.cs b/bc-sharp-crypto/src/security/cert/CertificateNotYetValidException.cs deleted file mode 100644 index 02112be..0000000 --- a/bc-sharp-crypto/src/security/cert/CertificateNotYetValidException.cs +++ /dev/null @@ -1,14 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Security.Certificates -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class CertificateNotYetValidException : CertificateException - { - public CertificateNotYetValidException() : base() { } - public CertificateNotYetValidException(string message) : base(message) { } - public CertificateNotYetValidException(string message, Exception exception) : base(message, exception) { } - } -} diff --git a/bc-sharp-crypto/src/security/cert/CertificateParsingException.cs b/bc-sharp-crypto/src/security/cert/CertificateParsingException.cs deleted file mode 100644 index ae909ca..0000000 --- a/bc-sharp-crypto/src/security/cert/CertificateParsingException.cs +++ /dev/null @@ -1,14 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Security.Certificates -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class CertificateParsingException : CertificateException - { - public CertificateParsingException() : base() { } - public CertificateParsingException(string message) : base(message) { } - public CertificateParsingException(string message, Exception exception) : base(message, exception) { } - } -} diff --git a/bc-sharp-crypto/src/security/cert/CrlException.cs b/bc-sharp-crypto/src/security/cert/CrlException.cs deleted file mode 100644 index fe9807e..0000000 --- a/bc-sharp-crypto/src/security/cert/CrlException.cs +++ /dev/null @@ -1,14 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Security.Certificates -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class CrlException : GeneralSecurityException - { - public CrlException() : base() { } - public CrlException(string msg) : base(msg) {} - public CrlException(string msg, Exception e) : base(msg, e) {} - } -} diff --git a/bc-sharp-crypto/src/tsp/GenTimeAccuracy.cs b/bc-sharp-crypto/src/tsp/GenTimeAccuracy.cs deleted file mode 100644 index 8a2f299..0000000 --- a/bc-sharp-crypto/src/tsp/GenTimeAccuracy.cs +++ /dev/null @@ -1,33 +0,0 @@ -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Tsp; - -namespace Org.BouncyCastle.Tsp -{ - public class GenTimeAccuracy - { - private Accuracy accuracy; - - public GenTimeAccuracy( - Accuracy accuracy) - { - this.accuracy = accuracy; - } - - public int Seconds { get { return GetTimeComponent(accuracy.Seconds); } } - - public int Millis { get { return GetTimeComponent(accuracy.Millis); } } - - public int Micros { get { return GetTimeComponent(accuracy.Micros); } } - - private int GetTimeComponent( - DerInteger time) - { - return time == null ? 0 : time.Value.IntValue; - } - - public override string ToString() - { - return Seconds + "." + Millis.ToString("000") + Micros.ToString("000"); - } - } -} diff --git a/bc-sharp-crypto/src/tsp/TSPAlgorithms.cs b/bc-sharp-crypto/src/tsp/TSPAlgorithms.cs deleted file mode 100644 index e3dfc79..0000000 --- a/bc-sharp-crypto/src/tsp/TSPAlgorithms.cs +++ /dev/null @@ -1,48 +0,0 @@ -using System.Collections; - -using Org.BouncyCastle.Asn1.CryptoPro; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Oiw; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.TeleTrust; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Tsp -{ - /** - * Recognised hash algorithms for the time stamp protocol. - */ - public abstract class TspAlgorithms - { - public static readonly string MD5 = PkcsObjectIdentifiers.MD5.Id; - - public static readonly string Sha1 = OiwObjectIdentifiers.IdSha1.Id; - - public static readonly string Sha224 = NistObjectIdentifiers.IdSha224.Id; - public static readonly string Sha256 = NistObjectIdentifiers.IdSha256.Id; - public static readonly string Sha384 = NistObjectIdentifiers.IdSha384.Id; - public static readonly string Sha512 = NistObjectIdentifiers.IdSha512.Id; - - public static readonly string RipeMD128 = TeleTrusTObjectIdentifiers.RipeMD128.Id; - public static readonly string RipeMD160 = TeleTrusTObjectIdentifiers.RipeMD160.Id; - public static readonly string RipeMD256 = TeleTrusTObjectIdentifiers.RipeMD256.Id; - - public static readonly string Gost3411 = CryptoProObjectIdentifiers.GostR3411.Id; - - public static readonly IList Allowed; - - static TspAlgorithms() - { - string[] algs = new string[] - { - Gost3411, MD5, Sha1, Sha224, Sha256, Sha384, Sha512, RipeMD128, RipeMD160, RipeMD256 - }; - - Allowed = Platform.CreateArrayList(); - foreach (string alg in algs) - { - Allowed.Add(alg); - } - } - } -} diff --git a/bc-sharp-crypto/src/tsp/TSPException.cs b/bc-sharp-crypto/src/tsp/TSPException.cs deleted file mode 100644 index 0f29b12..0000000 --- a/bc-sharp-crypto/src/tsp/TSPException.cs +++ /dev/null @@ -1,28 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Tsp -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class TspException - : Exception - { - public TspException() - { - } - - public TspException( - string message) - : base(message) - { - } - - public TspException( - string message, - Exception e) - : base(message, e) - { - } - } -} diff --git a/bc-sharp-crypto/src/tsp/TSPUtil.cs b/bc-sharp-crypto/src/tsp/TSPUtil.cs deleted file mode 100644 index 1026914..0000000 --- a/bc-sharp-crypto/src/tsp/TSPUtil.cs +++ /dev/null @@ -1,202 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.CryptoPro; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Oiw; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.TeleTrust; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Cms; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; -using Org.BouncyCastle.X509; - -namespace Org.BouncyCastle.Tsp -{ - public class TspUtil - { - private static ISet EmptySet = CollectionUtilities.ReadOnly(new HashSet()); - private static IList EmptyList = CollectionUtilities.ReadOnly(Platform.CreateArrayList()); - - private static readonly IDictionary digestLengths = Platform.CreateHashtable(); - private static readonly IDictionary digestNames = Platform.CreateHashtable(); - - static TspUtil() - { - digestLengths.Add(PkcsObjectIdentifiers.MD5.Id, 16); - digestLengths.Add(OiwObjectIdentifiers.IdSha1.Id, 20); - digestLengths.Add(NistObjectIdentifiers.IdSha224.Id, 28); - digestLengths.Add(NistObjectIdentifiers.IdSha256.Id, 32); - digestLengths.Add(NistObjectIdentifiers.IdSha384.Id, 48); - digestLengths.Add(NistObjectIdentifiers.IdSha512.Id, 64); - digestLengths.Add(TeleTrusTObjectIdentifiers.RipeMD128.Id, 16); - digestLengths.Add(TeleTrusTObjectIdentifiers.RipeMD160.Id, 20); - digestLengths.Add(TeleTrusTObjectIdentifiers.RipeMD256.Id, 32); - digestLengths.Add(CryptoProObjectIdentifiers.GostR3411.Id, 32); - - digestNames.Add(PkcsObjectIdentifiers.MD5.Id, "MD5"); - digestNames.Add(OiwObjectIdentifiers.IdSha1.Id, "SHA1"); - digestNames.Add(NistObjectIdentifiers.IdSha224.Id, "SHA224"); - digestNames.Add(NistObjectIdentifiers.IdSha256.Id, "SHA256"); - digestNames.Add(NistObjectIdentifiers.IdSha384.Id, "SHA384"); - digestNames.Add(NistObjectIdentifiers.IdSha512.Id, "SHA512"); - digestNames.Add(PkcsObjectIdentifiers.Sha1WithRsaEncryption.Id, "SHA1"); - digestNames.Add(PkcsObjectIdentifiers.Sha224WithRsaEncryption.Id, "SHA224"); - digestNames.Add(PkcsObjectIdentifiers.Sha256WithRsaEncryption.Id, "SHA256"); - digestNames.Add(PkcsObjectIdentifiers.Sha384WithRsaEncryption.Id, "SHA384"); - digestNames.Add(PkcsObjectIdentifiers.Sha512WithRsaEncryption.Id, "SHA512"); - digestNames.Add(TeleTrusTObjectIdentifiers.RipeMD128.Id, "RIPEMD128"); - digestNames.Add(TeleTrusTObjectIdentifiers.RipeMD160.Id, "RIPEMD160"); - digestNames.Add(TeleTrusTObjectIdentifiers.RipeMD256.Id, "RIPEMD256"); - digestNames.Add(CryptoProObjectIdentifiers.GostR3411.Id, "GOST3411"); - } - - - /** - * Fetches the signature time-stamp attributes from a SignerInformation object. - * Checks that the MessageImprint for each time-stamp matches the signature field. - * (see RFC 3161 Appendix A). - * - * @param signerInfo a SignerInformation to search for time-stamps - * @return a collection of TimeStampToken objects - * @throws TSPValidationException - */ - public static ICollection GetSignatureTimestamps( - SignerInformation signerInfo) - { - IList timestamps = Platform.CreateArrayList(); - - Asn1.Cms.AttributeTable unsignedAttrs = signerInfo.UnsignedAttributes; - if (unsignedAttrs != null) - { - foreach (Asn1.Cms.Attribute tsAttr in unsignedAttrs.GetAll( - PkcsObjectIdentifiers.IdAASignatureTimeStampToken)) - { - foreach (Asn1Encodable asn1 in tsAttr.AttrValues) - { - try - { - Asn1.Cms.ContentInfo contentInfo = Asn1.Cms.ContentInfo.GetInstance( - asn1.ToAsn1Object()); - TimeStampToken timeStampToken = new TimeStampToken(contentInfo); - TimeStampTokenInfo tstInfo = timeStampToken.TimeStampInfo; - - byte[] expectedDigest = DigestUtilities.CalculateDigest( - GetDigestAlgName(tstInfo.MessageImprintAlgOid), - signerInfo.GetSignature()); - - if (!Arrays.ConstantTimeAreEqual(expectedDigest, tstInfo.GetMessageImprintDigest())) - throw new TspValidationException("Incorrect digest in message imprint"); - - timestamps.Add(timeStampToken); - } - catch (SecurityUtilityException) - { - throw new TspValidationException("Unknown hash algorithm specified in timestamp"); - } - catch (Exception) - { - throw new TspValidationException("Timestamp could not be parsed"); - } - } - } - } - - return timestamps; - } - - /** - * Validate the passed in certificate as being of the correct type to be used - * for time stamping. To be valid it must have an ExtendedKeyUsage extension - * which has a key purpose identifier of id-kp-timeStamping. - * - * @param cert the certificate of interest. - * @throws TspValidationException if the certicate fails on one of the check points. - */ - public static void ValidateCertificate( - X509Certificate cert) - { - if (cert.Version != 3) - throw new ArgumentException("Certificate must have an ExtendedKeyUsage extension."); - - Asn1OctetString ext = cert.GetExtensionValue(X509Extensions.ExtendedKeyUsage); - if (ext == null) - throw new TspValidationException("Certificate must have an ExtendedKeyUsage extension."); - - if (!cert.GetCriticalExtensionOids().Contains(X509Extensions.ExtendedKeyUsage.Id)) - throw new TspValidationException("Certificate must have an ExtendedKeyUsage extension marked as critical."); - - try - { - ExtendedKeyUsage extKey = ExtendedKeyUsage.GetInstance( - Asn1Object.FromByteArray(ext.GetOctets())); - - if (!extKey.HasKeyPurposeId(KeyPurposeID.IdKPTimeStamping) || extKey.Count != 1) - throw new TspValidationException("ExtendedKeyUsage not solely time stamping."); - } - catch (IOException) - { - throw new TspValidationException("cannot process ExtendedKeyUsage extension"); - } - } - - /// - /// Return the digest algorithm using one of the standard JCA string - /// representations rather than the algorithm identifier (if possible). - /// - internal static string GetDigestAlgName( - string digestAlgOID) - { - string digestName = (string) digestNames[digestAlgOID]; - - return digestName != null ? digestName : digestAlgOID; - } - - internal static int GetDigestLength( - string digestAlgOID) - { - if (!digestLengths.Contains(digestAlgOID)) - throw new TspException("digest algorithm cannot be found."); - - return (int)digestLengths[digestAlgOID]; - } - - internal static IDigest CreateDigestInstance( - String digestAlgOID) - { - string digestName = GetDigestAlgName(digestAlgOID); - - return DigestUtilities.GetDigest(digestName); - } - - internal static ISet GetCriticalExtensionOids(X509Extensions extensions) - { - if (extensions == null) - return EmptySet; - - return CollectionUtilities.ReadOnly(new HashSet(extensions.GetCriticalExtensionOids())); - } - - internal static ISet GetNonCriticalExtensionOids(X509Extensions extensions) - { - if (extensions == null) - return EmptySet; - - // TODO: should probably produce a set that imposes correct ordering - return CollectionUtilities.ReadOnly(new HashSet(extensions.GetNonCriticalExtensionOids())); - } - - internal static IList GetExtensionOids(X509Extensions extensions) - { - if (extensions == null) - return EmptyList; - - return CollectionUtilities.ReadOnly(Platform.CreateArrayList(extensions.GetExtensionOids())); - } - } -} diff --git a/bc-sharp-crypto/src/tsp/TSPValidationException.cs b/bc-sharp-crypto/src/tsp/TSPValidationException.cs deleted file mode 100644 index 80f6420..0000000 --- a/bc-sharp-crypto/src/tsp/TSPValidationException.cs +++ /dev/null @@ -1,44 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Tsp -{ - /** - * Exception thrown if a TSP request or response fails to validate. - *

    - * If a failure code is associated with the exception it can be retrieved using - * the getFailureCode() method.

    - */ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class TspValidationException - : TspException - { - private int failureCode; - - public TspValidationException( - string message) - : base(message) - { - this.failureCode = -1; - } - - public TspValidationException( - string message, - int failureCode) - : base(message) - { - this.failureCode = failureCode; - } - - /** - * Return the failure code associated with this exception - if one is set. - * - * @return the failure code if set, -1 otherwise. - */ - public int FailureCode - { - get { return failureCode; } - } - } -} diff --git a/bc-sharp-crypto/src/tsp/TimeStampRequest.cs b/bc-sharp-crypto/src/tsp/TimeStampRequest.cs deleted file mode 100644 index 0b41ade..0000000 --- a/bc-sharp-crypto/src/tsp/TimeStampRequest.cs +++ /dev/null @@ -1,186 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cmp; -using Org.BouncyCastle.Asn1.Tsp; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.X509; - -namespace Org.BouncyCastle.Tsp -{ - /** - * Base class for an RFC 3161 Time Stamp Request. - */ - public class TimeStampRequest - : X509ExtensionBase - { - private TimeStampReq req; - private X509Extensions extensions; - - public TimeStampRequest( - TimeStampReq req) - { - this.req = req; - this.extensions = req.Extensions; - } - - /** - * Create a TimeStampRequest from the past in byte array. - * - * @param req byte array containing the request. - * @throws IOException if the request is malformed. - */ - public TimeStampRequest( - byte[] req) - : this(new Asn1InputStream(req)) - { - } - - /** - * Create a TimeStampRequest from the past in input stream. - * - * @param in input stream containing the request. - * @throws IOException if the request is malformed. - */ - public TimeStampRequest( - Stream input) - : this(new Asn1InputStream(input)) - { - } - - private TimeStampRequest( - Asn1InputStream str) - { - try - { - this.req = TimeStampReq.GetInstance(str.ReadObject()); - } - catch (InvalidCastException e) - { - throw new IOException("malformed request: " + e); - } - catch (ArgumentException e) - { - throw new IOException("malformed request: " + e); - } - } - - public int Version - { - get { return req.Version.Value.IntValue; } - } - - public string MessageImprintAlgOid - { - get { return req.MessageImprint.HashAlgorithm.Algorithm.Id; } - } - - public byte[] GetMessageImprintDigest() - { - return req.MessageImprint.GetHashedMessage(); - } - - public string ReqPolicy - { - get - { - return req.ReqPolicy == null - ? null - : req.ReqPolicy.Id; - } - } - - public BigInteger Nonce - { - get - { - return req.Nonce == null - ? null - : req.Nonce.Value; - } - } - - public bool CertReq - { - get - { - return req.CertReq == null - ? false - : req.CertReq.IsTrue; - } - } - - /** - * Validate the timestamp request, checking the digest to see if it is of an - * accepted type and whether it is of the correct length for the algorithm specified. - * - * @param algorithms a set of string OIDS giving accepted algorithms. - * @param policies if non-null a set of policies we are willing to sign under. - * @param extensions if non-null a set of extensions we are willing to accept. - * @throws TspException if the request is invalid, or processing fails. - */ - public void Validate( - IList algorithms, - IList policies, - IList extensions) - { - if (!algorithms.Contains(this.MessageImprintAlgOid)) - throw new TspValidationException("request contains unknown algorithm", PkiFailureInfo.BadAlg); - - if (policies != null && this.ReqPolicy != null && !policies.Contains(this.ReqPolicy)) - throw new TspValidationException("request contains unknown policy", PkiFailureInfo.UnacceptedPolicy); - - if (this.Extensions != null && extensions != null) - { - foreach (DerObjectIdentifier oid in this.Extensions.ExtensionOids) - { - if (!extensions.Contains(oid.Id)) - throw new TspValidationException("request contains unknown extension", PkiFailureInfo.UnacceptedExtension); - } - } - - int digestLength = TspUtil.GetDigestLength(this.MessageImprintAlgOid); - - if (digestLength != this.GetMessageImprintDigest().Length) - throw new TspValidationException("imprint digest the wrong length", PkiFailureInfo.BadDataFormat); - } - - /** - * return the ASN.1 encoded representation of this object. - */ - public byte[] GetEncoded() - { - return req.GetEncoded(); - } - - internal X509Extensions Extensions - { - get { return req.Extensions; } - } - - public virtual bool HasExtensions - { - get { return extensions != null; } - } - - public virtual X509Extension GetExtension(DerObjectIdentifier oid) - { - return extensions == null ? null : extensions.GetExtension(oid); - } - - public virtual IList GetExtensionOids() - { - return TspUtil.GetExtensionOids(extensions); - } - - protected override X509Extensions GetX509Extensions() - { - return Extensions; - } - } -} diff --git a/bc-sharp-crypto/src/tsp/TimeStampRequestGenerator.cs b/bc-sharp-crypto/src/tsp/TimeStampRequestGenerator.cs deleted file mode 100644 index 2c698e4..0000000 --- a/bc-sharp-crypto/src/tsp/TimeStampRequestGenerator.cs +++ /dev/null @@ -1,139 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Tsp; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Math; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Tsp -{ - /** - * Generator for RFC 3161 Time Stamp Request objects. - */ - public class TimeStampRequestGenerator - { - private DerObjectIdentifier reqPolicy; - - private DerBoolean certReq; - - private IDictionary extensions = Platform.CreateHashtable(); - private IList extOrdering = Platform.CreateArrayList(); - - public void SetReqPolicy( - string reqPolicy) - { - this.reqPolicy = new DerObjectIdentifier(reqPolicy); - } - - public void SetCertReq( - bool certReq) - { - this.certReq = DerBoolean.GetInstance(certReq); - } - - /** - * add a given extension field for the standard extensions tag (tag 3) - * @throws IOException - */ - [Obsolete("Use method taking DerObjectIdentifier")] - public void AddExtension( - string oid, - bool critical, - Asn1Encodable value) - { - this.AddExtension(oid, critical, value.GetEncoded()); - } - - /** - * add a given extension field for the standard extensions tag - * The value parameter becomes the contents of the octet string associated - * with the extension. - */ - [Obsolete("Use method taking DerObjectIdentifier")] - public void AddExtension( - string oid, - bool critical, - byte[] value) - { - DerObjectIdentifier derOid = new DerObjectIdentifier(oid); - extensions[derOid] = new X509Extension(critical, new DerOctetString(value)); - extOrdering.Add(derOid); - } - - /** - * add a given extension field for the standard extensions tag (tag 3) - * @throws IOException - */ - public virtual void AddExtension( - DerObjectIdentifier oid, - bool critical, - Asn1Encodable extValue) - { - this.AddExtension(oid, critical, extValue.GetEncoded()); - } - - /** - * add a given extension field for the standard extensions tag - * The value parameter becomes the contents of the octet string associated - * with the extension. - */ - public virtual void AddExtension( - DerObjectIdentifier oid, - bool critical, - byte[] extValue) - { - extensions.Add(oid, new X509Extension(critical, new DerOctetString(extValue))); - extOrdering.Add(oid); - } - - public TimeStampRequest Generate( - string digestAlgorithm, - byte[] digest) - { - return this.Generate(digestAlgorithm, digest, null); - } - - public TimeStampRequest Generate( - string digestAlgorithmOid, - byte[] digest, - BigInteger nonce) - { - if (digestAlgorithmOid == null) - { - throw new ArgumentException("No digest algorithm specified"); - } - - DerObjectIdentifier digestAlgOid = new DerObjectIdentifier(digestAlgorithmOid); - - AlgorithmIdentifier algID = new AlgorithmIdentifier(digestAlgOid, DerNull.Instance); - MessageImprint messageImprint = new MessageImprint(algID, digest); - - X509Extensions ext = null; - - if (extOrdering.Count != 0) - { - ext = new X509Extensions(extOrdering, extensions); - } - - DerInteger derNonce = nonce == null - ? null - : new DerInteger(nonce); - - return new TimeStampRequest( - new TimeStampReq(messageImprint, reqPolicy, derNonce, certReq, ext)); - } - - public virtual TimeStampRequest Generate(DerObjectIdentifier digestAlgorithm, byte[] digest) - { - return Generate(digestAlgorithm.Id, digest); - } - - public virtual TimeStampRequest Generate(DerObjectIdentifier digestAlgorithm, byte[] digest, BigInteger nonce) - { - return Generate(digestAlgorithm.Id, digest, nonce); - } - } -} diff --git a/bc-sharp-crypto/src/tsp/TimeStampResponse.cs b/bc-sharp-crypto/src/tsp/TimeStampResponse.cs deleted file mode 100644 index 0695211..0000000 --- a/bc-sharp-crypto/src/tsp/TimeStampResponse.cs +++ /dev/null @@ -1,184 +0,0 @@ -using System; -using System.IO; -using System.Text; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cmp; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.Tsp; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.Tsp -{ - /** - * Base class for an RFC 3161 Time Stamp Response object. - */ - public class TimeStampResponse - { - private TimeStampResp resp; - private TimeStampToken timeStampToken; - - public TimeStampResponse( - TimeStampResp resp) - { - this.resp = resp; - - if (resp.TimeStampToken != null) - { - timeStampToken = new TimeStampToken(resp.TimeStampToken); - } - } - - /** - * Create a TimeStampResponse from a byte array containing an ASN.1 encoding. - * - * @param resp the byte array containing the encoded response. - * @throws TspException if the response is malformed. - * @throws IOException if the byte array doesn't represent an ASN.1 encoding. - */ - public TimeStampResponse( - byte[] resp) - : this(readTimeStampResp(new Asn1InputStream(resp))) - { - } - - /** - * Create a TimeStampResponse from an input stream containing an ASN.1 encoding. - * - * @param input the input stream containing the encoded response. - * @throws TspException if the response is malformed. - * @throws IOException if the stream doesn't represent an ASN.1 encoding. - */ - public TimeStampResponse( - Stream input) - : this(readTimeStampResp(new Asn1InputStream(input))) - { - } - - private static TimeStampResp readTimeStampResp( - Asn1InputStream input) - { - try - { - return TimeStampResp.GetInstance(input.ReadObject()); - } - catch (ArgumentException e) - { - throw new TspException("malformed timestamp response: " + e, e); - } - catch (InvalidCastException e) - { - throw new TspException("malformed timestamp response: " + e, e); - } - } - - public int Status - { - get { return resp.Status.Status.IntValue; } - } - - public string GetStatusString() - { - if (resp.Status.StatusString == null) - { - return null; - } - - StringBuilder statusStringBuf = new StringBuilder(); - PkiFreeText text = resp.Status.StatusString; - for (int i = 0; i != text.Count; i++) - { - statusStringBuf.Append(text[i].GetString()); - } - - return statusStringBuf.ToString(); - } - - public PkiFailureInfo GetFailInfo() - { - if (resp.Status.FailInfo == null) - { - return null; - } - - return new PkiFailureInfo(resp.Status.FailInfo); - } - - public TimeStampToken TimeStampToken - { - get { return timeStampToken; } - } - - /** - * Check this response against to see if it a well formed response for - * the passed in request. Validation will include checking the time stamp - * token if the response status is GRANTED or GRANTED_WITH_MODS. - * - * @param request the request to be checked against - * @throws TspException if the request can not match this response. - */ - public void Validate( - TimeStampRequest request) - { - TimeStampToken tok = this.TimeStampToken; - - if (tok != null) - { - TimeStampTokenInfo tstInfo = tok.TimeStampInfo; - - if (request.Nonce != null && !request.Nonce.Equals(tstInfo.Nonce)) - { - throw new TspValidationException("response contains wrong nonce value."); - } - - if (this.Status != (int) PkiStatus.Granted && this.Status != (int) PkiStatus.GrantedWithMods) - { - throw new TspValidationException("time stamp token found in failed request."); - } - - if (!Arrays.ConstantTimeAreEqual(request.GetMessageImprintDigest(), tstInfo.GetMessageImprintDigest())) - { - throw new TspValidationException("response for different message imprint digest."); - } - - if (!tstInfo.MessageImprintAlgOid.Equals(request.MessageImprintAlgOid)) - { - throw new TspValidationException("response for different message imprint algorithm."); - } - - Asn1.Cms.Attribute scV1 = tok.SignedAttributes[PkcsObjectIdentifiers.IdAASigningCertificate]; - Asn1.Cms.Attribute scV2 = tok.SignedAttributes[PkcsObjectIdentifiers.IdAASigningCertificateV2]; - - if (scV1 == null && scV2 == null) - { - throw new TspValidationException("no signing certificate attribute present."); - } - - if (scV1 != null && scV2 != null) - { - /* - * RFC 5035 5.4. If both attributes exist in a single message, - * they are independently evaluated. - */ - } - - if (request.ReqPolicy != null && !request.ReqPolicy.Equals(tstInfo.Policy)) - { - throw new TspValidationException("TSA policy wrong for request."); - } - } - else if (this.Status == (int) PkiStatus.Granted || this.Status == (int) PkiStatus.GrantedWithMods) - { - throw new TspValidationException("no time stamp token found and one expected."); - } - } - - /** - * return the ASN.1 encoded representation of this object. - */ - public byte[] GetEncoded() - { - return resp.GetEncoded(); - } - } -} diff --git a/bc-sharp-crypto/src/tsp/TimeStampResponseGenerator.cs b/bc-sharp-crypto/src/tsp/TimeStampResponseGenerator.cs deleted file mode 100644 index b596f8d..0000000 --- a/bc-sharp-crypto/src/tsp/TimeStampResponseGenerator.cs +++ /dev/null @@ -1,209 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Cmp; -using Org.BouncyCastle.Asn1.Cms; -using Org.BouncyCastle.Asn1.Tsp; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities.Date; - -namespace Org.BouncyCastle.Tsp -{ - /** - * Generator for RFC 3161 Time Stamp Responses. - */ - public class TimeStampResponseGenerator - { - private PkiStatus status; - - private Asn1EncodableVector statusStrings; - - private int failInfo; - private TimeStampTokenGenerator tokenGenerator; - private IList acceptedAlgorithms; - private IList acceptedPolicies; - private IList acceptedExtensions; - - public TimeStampResponseGenerator( - TimeStampTokenGenerator tokenGenerator, - IList acceptedAlgorithms) - : this(tokenGenerator, acceptedAlgorithms, null, null) - { - } - - public TimeStampResponseGenerator( - TimeStampTokenGenerator tokenGenerator, - IList acceptedAlgorithms, - IList acceptedPolicy) - : this(tokenGenerator, acceptedAlgorithms, acceptedPolicy, null) - { - } - - public TimeStampResponseGenerator( - TimeStampTokenGenerator tokenGenerator, - IList acceptedAlgorithms, - IList acceptedPolicies, - IList acceptedExtensions) - { - this.tokenGenerator = tokenGenerator; - this.acceptedAlgorithms = acceptedAlgorithms; - this.acceptedPolicies = acceptedPolicies; - this.acceptedExtensions = acceptedExtensions; - - statusStrings = new Asn1EncodableVector(); - } - - private void AddStatusString(string statusString) - { - statusStrings.Add(new DerUtf8String(statusString)); - } - - private void SetFailInfoField(int field) - { - failInfo |= field; - } - - private PkiStatusInfo GetPkiStatusInfo() - { - Asn1EncodableVector v = new Asn1EncodableVector( - new DerInteger((int)status)); - - if (statusStrings.Count > 0) - { - v.Add(new PkiFreeText(new DerSequence(statusStrings))); - } - - if (failInfo != 0) - { - v.Add(new FailInfo(failInfo)); - } - - return new PkiStatusInfo(new DerSequence(v)); - } - - public TimeStampResponse Generate( - TimeStampRequest request, - BigInteger serialNumber, - DateTime genTime) - { - return Generate(request, serialNumber, new DateTimeObject(genTime)); - } - - /** - * Return an appropriate TimeStampResponse. - *

    - * If genTime is null a timeNotAvailable error response will be returned. - * - * @param request the request this response is for. - * @param serialNumber serial number for the response token. - * @param genTime generation time for the response token. - * @param provider provider to use for signature calculation. - * @return - * @throws NoSuchAlgorithmException - * @throws NoSuchProviderException - * @throws TSPException - *

    - */ - public TimeStampResponse Generate( - TimeStampRequest request, - BigInteger serialNumber, - DateTimeObject genTime) - { - TimeStampResp resp; - - try - { - if (genTime == null) - throw new TspValidationException("The time source is not available.", - PkiFailureInfo.TimeNotAvailable); - - request.Validate(acceptedAlgorithms, acceptedPolicies, acceptedExtensions); - - this.status = PkiStatus.Granted; - this.AddStatusString("Operation Okay"); - - PkiStatusInfo pkiStatusInfo = GetPkiStatusInfo(); - - ContentInfo tstTokenContentInfo; - try - { - TimeStampToken token = tokenGenerator.Generate(request, serialNumber, genTime.Value); - byte[] encoded = token.ToCmsSignedData().GetEncoded(); - - tstTokenContentInfo = ContentInfo.GetInstance(Asn1Object.FromByteArray(encoded)); - } - catch (IOException e) - { - throw new TspException("Timestamp token received cannot be converted to ContentInfo", e); - } - - resp = new TimeStampResp(pkiStatusInfo, tstTokenContentInfo); - } - catch (TspValidationException e) - { - status = PkiStatus.Rejection; - - this.SetFailInfoField(e.FailureCode); - this.AddStatusString(e.Message); - - PkiStatusInfo pkiStatusInfo = GetPkiStatusInfo(); - - resp = new TimeStampResp(pkiStatusInfo, null); - } - - try - { - return new TimeStampResponse(resp); - } - catch (IOException e) - { - throw new TspException("created badly formatted response!", e); - } - } - - class FailInfo - : DerBitString - { - internal FailInfo(int failInfoValue) - : base(failInfoValue) - { - } - } - - /** - * Generate a TimeStampResponse with chosen status and FailInfoField. - * - * @param status the PKIStatus to set. - * @param failInfoField the FailInfoField to set. - * @param statusString an optional string describing the failure. - * @return a TimeStampResponse with a failInfoField and optional statusString - * @throws TSPException in case the response could not be created - */ - public TimeStampResponse GenerateFailResponse(PkiStatus status, int failInfoField, string statusString) - { - this.status = status; - - this.SetFailInfoField(failInfoField); - - if (statusString != null) - { - this.AddStatusString(statusString); - } - - PkiStatusInfo pkiStatusInfo = GetPkiStatusInfo(); - - TimeStampResp resp = new TimeStampResp(pkiStatusInfo, null); - - try - { - return new TimeStampResponse(resp); - } - catch (IOException e) - { - throw new TspException("created badly formatted response!", e); - } - } - } -} diff --git a/bc-sharp-crypto/src/tsp/TimeStampToken.cs b/bc-sharp-crypto/src/tsp/TimeStampToken.cs deleted file mode 100644 index 105208a..0000000 --- a/bc-sharp-crypto/src/tsp/TimeStampToken.cs +++ /dev/null @@ -1,305 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Ess; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Oiw; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.Tsp; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Cms; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.X509; -using Org.BouncyCastle.X509.Store; - -namespace Org.BouncyCastle.Tsp -{ - public class TimeStampToken - { - private readonly CmsSignedData tsToken; - private readonly SignerInformation tsaSignerInfo; -// private readonly DateTime genTime; - private readonly TimeStampTokenInfo tstInfo; - private readonly CertID certID; - - public TimeStampToken( - Asn1.Cms.ContentInfo contentInfo) - : this(new CmsSignedData(contentInfo)) - { - } - - public TimeStampToken( - CmsSignedData signedData) - { - this.tsToken = signedData; - - if (!this.tsToken.SignedContentType.Equals(PkcsObjectIdentifiers.IdCTTstInfo)) - { - throw new TspValidationException("ContentInfo object not for a time stamp."); - } - - ICollection signers = tsToken.GetSignerInfos().GetSigners(); - - if (signers.Count != 1) - { - throw new ArgumentException("Time-stamp token signed by " - + signers.Count - + " signers, but it must contain just the TSA signature."); - } - - - IEnumerator signerEnum = signers.GetEnumerator(); - - signerEnum.MoveNext(); - tsaSignerInfo = (SignerInformation) signerEnum.Current; - - try - { - CmsProcessable content = tsToken.SignedContent; - MemoryStream bOut = new MemoryStream(); - - content.Write(bOut); - - this.tstInfo = new TimeStampTokenInfo( - TstInfo.GetInstance( - Asn1Object.FromByteArray(bOut.ToArray()))); - - Asn1.Cms.Attribute attr = tsaSignerInfo.SignedAttributes[ - PkcsObjectIdentifiers.IdAASigningCertificate]; - -// if (attr == null) -// { -// throw new TspValidationException( -// "no signing certificate attribute found, time stamp invalid."); -// } -// -// SigningCertificate signCert = SigningCertificate.GetInstance( -// attr.AttrValues[0]); -// -// this.certID = EssCertID.GetInstance(signCert.GetCerts()[0]); - - if (attr != null) - { - SigningCertificate signCert = SigningCertificate.GetInstance(attr.AttrValues[0]); - - this.certID = new CertID(EssCertID.GetInstance(signCert.GetCerts()[0])); - } - else - { - attr = tsaSignerInfo.SignedAttributes[PkcsObjectIdentifiers.IdAASigningCertificateV2]; - - if (attr == null) - throw new TspValidationException("no signing certificate attribute found, time stamp invalid."); - - SigningCertificateV2 signCertV2 = SigningCertificateV2.GetInstance(attr.AttrValues[0]); - - this.certID = new CertID(EssCertIDv2.GetInstance(signCertV2.GetCerts()[0])); - } - } - catch (CmsException e) - { - throw new TspException(e.Message, e.InnerException); - } - } - - public TimeStampTokenInfo TimeStampInfo - { - get { return tstInfo; } - } - - public SignerID SignerID - { - get { return tsaSignerInfo.SignerID; } - } - - public Asn1.Cms.AttributeTable SignedAttributes - { - get { return tsaSignerInfo.SignedAttributes; } - } - - public Asn1.Cms.AttributeTable UnsignedAttributes - { - get { return tsaSignerInfo.UnsignedAttributes; } - } - - public IX509Store GetCertificates( - string type) - { - return tsToken.GetCertificates(type); - } - - public IX509Store GetCrls( - string type) - { - return tsToken.GetCrls(type); - } - - public IX509Store GetAttributeCertificates( - string type) - { - return tsToken.GetAttributeCertificates(type); - } - - /** - * Validate the time stamp token. - *

    - * To be valid the token must be signed by the passed in certificate and - * the certificate must be the one referred to by the SigningCertificate - * attribute included in the hashed attributes of the token. The - * certificate must also have the ExtendedKeyUsageExtension with only - * KeyPurposeID.IdKPTimeStamping and have been valid at the time the - * timestamp was created. - *

    - *

    - * A successful call to validate means all the above are true. - *

    - */ - public void Validate( - X509Certificate cert) - { - try - { - byte[] hash = DigestUtilities.CalculateDigest( - certID.GetHashAlgorithmName(), cert.GetEncoded()); - - if (!Arrays.ConstantTimeAreEqual(certID.GetCertHash(), hash)) - { - throw new TspValidationException("certificate hash does not match certID hash."); - } - - if (certID.IssuerSerial != null) - { - if (!certID.IssuerSerial.Serial.Value.Equals(cert.SerialNumber)) - { - throw new TspValidationException("certificate serial number does not match certID for signature."); - } - - GeneralName[] names = certID.IssuerSerial.Issuer.GetNames(); - X509Name principal = PrincipalUtilities.GetIssuerX509Principal(cert); - bool found = false; - - for (int i = 0; i != names.Length; i++) - { - if (names[i].TagNo == 4 - && X509Name.GetInstance(names[i].Name).Equivalent(principal)) - { - found = true; - break; - } - } - - if (!found) - { - throw new TspValidationException("certificate name does not match certID for signature. "); - } - } - - TspUtil.ValidateCertificate(cert); - - cert.CheckValidity(tstInfo.GenTime); - - if (!tsaSignerInfo.Verify(cert)) - { - throw new TspValidationException("signature not created by certificate."); - } - } - catch (CmsException e) - { - if (e.InnerException != null) - { - throw new TspException(e.Message, e.InnerException); - } - - throw new TspException("CMS exception: " + e, e); - } - catch (CertificateEncodingException e) - { - throw new TspException("problem processing certificate: " + e, e); - } - catch (SecurityUtilityException e) - { - throw new TspException("cannot find algorithm: " + e.Message, e); - } - } - - /** - * Return the underlying CmsSignedData object. - * - * @return the underlying CMS structure. - */ - public CmsSignedData ToCmsSignedData() - { - return tsToken; - } - - /** - * Return a ASN.1 encoded byte stream representing the encoded object. - * - * @throws IOException if encoding fails. - */ - public byte[] GetEncoded() - { - return tsToken.GetEncoded(); - } - - - // perhaps this should be done using an interface on the ASN.1 classes... - private class CertID - { - private EssCertID certID; - private EssCertIDv2 certIDv2; - - internal CertID(EssCertID certID) - { - this.certID = certID; - this.certIDv2 = null; - } - - internal CertID(EssCertIDv2 certID) - { - this.certIDv2 = certID; - this.certID = null; - } - - public string GetHashAlgorithmName() - { - if (certID != null) - return "SHA-1"; - - if (NistObjectIdentifiers.IdSha256.Equals(certIDv2.HashAlgorithm.Algorithm)) - return "SHA-256"; - - return certIDv2.HashAlgorithm.Algorithm.Id; - } - - public AlgorithmIdentifier GetHashAlgorithm() - { - return (certID != null) - ? new AlgorithmIdentifier(OiwObjectIdentifiers.IdSha1) - : certIDv2.HashAlgorithm; - } - - public byte[] GetCertHash() - { - return certID != null - ? certID.GetCertHash() - : certIDv2.GetCertHash(); - } - - public IssuerSerial IssuerSerial - { - get - { - return certID != null - ? certID.IssuerSerial - : certIDv2.IssuerSerial; - } - } - } - } -} diff --git a/bc-sharp-crypto/src/tsp/TimeStampTokenGenerator.cs b/bc-sharp-crypto/src/tsp/TimeStampTokenGenerator.cs deleted file mode 100644 index 07eddd4..0000000 --- a/bc-sharp-crypto/src/tsp/TimeStampTokenGenerator.cs +++ /dev/null @@ -1,245 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Ess; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.Tsp; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Cms; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.X509; -using Org.BouncyCastle.X509.Store; - -namespace Org.BouncyCastle.Tsp -{ - public class TimeStampTokenGenerator - { - private int accuracySeconds = -1; - private int accuracyMillis = -1; - private int accuracyMicros = -1; - private bool ordering = false; - private GeneralName tsa = null; - private string tsaPolicyOID; - - private AsymmetricKeyParameter key; - private X509Certificate cert; - private string digestOID; - private Asn1.Cms.AttributeTable signedAttr; - private Asn1.Cms.AttributeTable unsignedAttr; - private IX509Store x509Certs; - private IX509Store x509Crls; - - /** - * basic creation - only the default attributes will be included here. - */ - public TimeStampTokenGenerator( - AsymmetricKeyParameter key, - X509Certificate cert, - string digestOID, - string tsaPolicyOID) - : this(key, cert, digestOID, tsaPolicyOID, null, null) - { - } - - /** - * create with a signer with extra signed/unsigned attributes. - */ - public TimeStampTokenGenerator( - AsymmetricKeyParameter key, - X509Certificate cert, - string digestOID, - string tsaPolicyOID, - Asn1.Cms.AttributeTable signedAttr, - Asn1.Cms.AttributeTable unsignedAttr) - { - this.key = key; - this.cert = cert; - this.digestOID = digestOID; - this.tsaPolicyOID = tsaPolicyOID; - this.unsignedAttr = unsignedAttr; - - TspUtil.ValidateCertificate(cert); - - // - // Add the ESSCertID attribute - // - IDictionary signedAttrs; - if (signedAttr != null) - { - signedAttrs = signedAttr.ToDictionary(); - } - else - { - signedAttrs = Platform.CreateHashtable(); - } - - try - { - byte[] hash = DigestUtilities.CalculateDigest("SHA-1", cert.GetEncoded()); - - EssCertID essCertid = new EssCertID(hash); - - Asn1.Cms.Attribute attr = new Asn1.Cms.Attribute( - PkcsObjectIdentifiers.IdAASigningCertificate, - new DerSet(new SigningCertificate(essCertid))); - - signedAttrs[attr.AttrType] = attr; - } - catch (CertificateEncodingException e) - { - throw new TspException("Exception processing certificate.", e); - } - catch (SecurityUtilityException e) - { - throw new TspException("Can't find a SHA-1 implementation.", e); - } - - this.signedAttr = new Asn1.Cms.AttributeTable(signedAttrs); - } - - public void SetCertificates( - IX509Store certificates) - { - this.x509Certs = certificates; - } - - public void SetCrls( - IX509Store crls) - { - this.x509Crls = crls; - } - - public void SetAccuracySeconds( - int accuracySeconds) - { - this.accuracySeconds = accuracySeconds; - } - - public void SetAccuracyMillis( - int accuracyMillis) - { - this.accuracyMillis = accuracyMillis; - } - - public void SetAccuracyMicros( - int accuracyMicros) - { - this.accuracyMicros = accuracyMicros; - } - - public void SetOrdering( - bool ordering) - { - this.ordering = ordering; - } - - public void SetTsa( - GeneralName tsa) - { - this.tsa = tsa; - } - - //------------------------------------------------------------------------------ - - public TimeStampToken Generate( - TimeStampRequest request, - BigInteger serialNumber, - DateTime genTime) - { - DerObjectIdentifier digestAlgOID = new DerObjectIdentifier(request.MessageImprintAlgOid); - - AlgorithmIdentifier algID = new AlgorithmIdentifier(digestAlgOID, DerNull.Instance); - MessageImprint messageImprint = new MessageImprint(algID, request.GetMessageImprintDigest()); - - Accuracy accuracy = null; - if (accuracySeconds > 0 || accuracyMillis > 0 || accuracyMicros > 0) - { - DerInteger seconds = null; - if (accuracySeconds > 0) - { - seconds = new DerInteger(accuracySeconds); - } - - DerInteger millis = null; - if (accuracyMillis > 0) - { - millis = new DerInteger(accuracyMillis); - } - - DerInteger micros = null; - if (accuracyMicros > 0) - { - micros = new DerInteger(accuracyMicros); - } - - accuracy = new Accuracy(seconds, millis, micros); - } - - DerBoolean derOrdering = null; - if (ordering) - { - derOrdering = DerBoolean.GetInstance(ordering); - } - - DerInteger nonce = null; - if (request.Nonce != null) - { - nonce = new DerInteger(request.Nonce); - } - - DerObjectIdentifier tsaPolicy = new DerObjectIdentifier(tsaPolicyOID); - if (request.ReqPolicy != null) - { - tsaPolicy = new DerObjectIdentifier(request.ReqPolicy); - } - - TstInfo tstInfo = new TstInfo(tsaPolicy, messageImprint, - new DerInteger(serialNumber), new DerGeneralizedTime(genTime), accuracy, - derOrdering, nonce, tsa, request.Extensions); - - try - { - CmsSignedDataGenerator signedDataGenerator = new CmsSignedDataGenerator(); - - byte[] derEncodedTstInfo = tstInfo.GetDerEncoded(); - - if (request.CertReq) - { - signedDataGenerator.AddCertificates(x509Certs); - } - - signedDataGenerator.AddCrls(x509Crls); - signedDataGenerator.AddSigner(key, cert, digestOID, signedAttr, unsignedAttr); - - CmsSignedData signedData = signedDataGenerator.Generate( - PkcsObjectIdentifiers.IdCTTstInfo.Id, - new CmsProcessableByteArray(derEncodedTstInfo), - true); - - return new TimeStampToken(signedData); - } - catch (CmsException cmsEx) - { - throw new TspException("Error generating time-stamp token", cmsEx); - } - catch (IOException e) - { - throw new TspException("Exception encoding info", e); - } - catch (X509StoreException e) - { - throw new TspException("Exception handling CertStore", e); - } -// catch (InvalidAlgorithmParameterException e) -// { -// throw new TspException("Exception handling CertStore CRLs", e); -// } - } - } -} diff --git a/bc-sharp-crypto/src/tsp/TimeStampTokenInfo.cs b/bc-sharp-crypto/src/tsp/TimeStampTokenInfo.cs deleted file mode 100644 index cdef826..0000000 --- a/bc-sharp-crypto/src/tsp/TimeStampTokenInfo.cs +++ /dev/null @@ -1,107 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1.Tsp; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Tsp -{ - public class TimeStampTokenInfo - { - private TstInfo tstInfo; - private DateTime genTime; - - public TimeStampTokenInfo( - TstInfo tstInfo) - { - this.tstInfo = tstInfo; - - try - { - this.genTime = tstInfo.GenTime.ToDateTime(); - } - catch (Exception e) - { - throw new TspException("unable to parse genTime field: " + e.Message); - } - } - - public bool IsOrdered - { - get { return tstInfo.Ordering.IsTrue; } - } - - public Accuracy Accuracy - { - get { return tstInfo.Accuracy; } - } - - public DateTime GenTime - { - get { return genTime; } - } - - public GenTimeAccuracy GenTimeAccuracy - { - get - { - return this.Accuracy == null - ? null - : new GenTimeAccuracy(this.Accuracy); - } - } - - public string Policy - { - get { return tstInfo.Policy.Id; } - } - - public BigInteger SerialNumber - { - get { return tstInfo.SerialNumber.Value; } - } - - public GeneralName Tsa - { - get { return tstInfo.Tsa; } - } - - /** - * @return the nonce value, null if there isn't one. - */ - public BigInteger Nonce - { - get - { - return tstInfo.Nonce == null - ? null - : tstInfo.Nonce.Value; - } - } - - public AlgorithmIdentifier HashAlgorithm - { - get { return tstInfo.MessageImprint.HashAlgorithm; } - } - - public string MessageImprintAlgOid - { - get { return tstInfo.MessageImprint.HashAlgorithm.Algorithm.Id; } - } - - public byte[] GetMessageImprintDigest() - { - return tstInfo.MessageImprint.GetHashedMessage(); - } - - public byte[] GetEncoded() - { - return tstInfo.GetEncoded(); - } - - public TstInfo TstInfo - { - get { return tstInfo; } - } - } -} diff --git a/bc-sharp-crypto/src/util/Arrays.cs b/bc-sharp-crypto/src/util/Arrays.cs deleted file mode 100644 index df9b4e7..0000000 --- a/bc-sharp-crypto/src/util/Arrays.cs +++ /dev/null @@ -1,704 +0,0 @@ -using System; -using System.Text; - -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Utilities -{ - /// General array utilities. - public abstract class Arrays - { - public static bool AreEqual( - bool[] a, - bool[] b) - { - if (a == b) - return true; - - if (a == null || b == null) - return false; - - return HaveSameContents(a, b); - } - - public static bool AreEqual( - char[] a, - char[] b) - { - if (a == b) - return true; - - if (a == null || b == null) - return false; - - return HaveSameContents(a, b); - } - - /// - /// Are two arrays equal. - /// - /// Left side. - /// Right side. - /// True if equal. - public static bool AreEqual( - byte[] a, - byte[] b) - { - if (a == b) - return true; - - if (a == null || b == null) - return false; - - return HaveSameContents(a, b); - } - - [Obsolete("Use 'AreEqual' method instead")] - public static bool AreSame( - byte[] a, - byte[] b) - { - return AreEqual(a, b); - } - - /// - /// A constant time equals comparison - does not terminate early if - /// test will fail. - /// - /// first array - /// second array - /// true if arrays equal, false otherwise. - public static bool ConstantTimeAreEqual( - byte[] a, - byte[] b) - { - int i = a.Length; - if (i != b.Length) - return false; - int cmp = 0; - while (i != 0) - { - --i; - cmp |= (a[i] ^ b[i]); - } - return cmp == 0; - } - - public static bool AreEqual( - int[] a, - int[] b) - { - if (a == b) - return true; - - if (a == null || b == null) - return false; - - return HaveSameContents(a, b); - } - - [CLSCompliantAttribute(false)] - public static bool AreEqual(uint[] a, uint[] b) - { - if (a == b) - return true; - - if (a == null || b == null) - return false; - - return HaveSameContents(a, b); - } - - private static bool HaveSameContents( - bool[] a, - bool[] b) - { - int i = a.Length; - if (i != b.Length) - return false; - while (i != 0) - { - --i; - if (a[i] != b[i]) - return false; - } - return true; - } - - private static bool HaveSameContents( - char[] a, - char[] b) - { - int i = a.Length; - if (i != b.Length) - return false; - while (i != 0) - { - --i; - if (a[i] != b[i]) - return false; - } - return true; - } - - private static bool HaveSameContents( - byte[] a, - byte[] b) - { - int i = a.Length; - if (i != b.Length) - return false; - while (i != 0) - { - --i; - if (a[i] != b[i]) - return false; - } - return true; - } - - private static bool HaveSameContents( - int[] a, - int[] b) - { - int i = a.Length; - if (i != b.Length) - return false; - while (i != 0) - { - --i; - if (a[i] != b[i]) - return false; - } - return true; - } - - private static bool HaveSameContents(uint[] a, uint[] b) - { - int i = a.Length; - if (i != b.Length) - return false; - while (i != 0) - { - --i; - if (a[i] != b[i]) - return false; - } - return true; - } - - public static string ToString( - object[] a) - { - StringBuilder sb = new StringBuilder('['); - if (a.Length > 0) - { - sb.Append(a[0]); - for (int index = 1; index < a.Length; ++index) - { - sb.Append(", ").Append(a[index]); - } - } - sb.Append(']'); - return sb.ToString(); - } - - public static int GetHashCode(byte[] data) - { - if (data == null) - { - return 0; - } - - int i = data.Length; - int hc = i + 1; - - while (--i >= 0) - { - hc *= 257; - hc ^= data[i]; - } - - return hc; - } - - public static int GetHashCode(byte[] data, int off, int len) - { - if (data == null) - { - return 0; - } - - int i = len; - int hc = i + 1; - - while (--i >= 0) - { - hc *= 257; - hc ^= data[off + i]; - } - - return hc; - } - - public static int GetHashCode(int[] data) - { - if (data == null) - return 0; - - int i = data.Length; - int hc = i + 1; - - while (--i >= 0) - { - hc *= 257; - hc ^= data[i]; - } - - return hc; - } - - public static int GetHashCode(int[] data, int off, int len) - { - if (data == null) - return 0; - - int i = len; - int hc = i + 1; - - while (--i >= 0) - { - hc *= 257; - hc ^= data[off + i]; - } - - return hc; - } - - [CLSCompliantAttribute(false)] - public static int GetHashCode(uint[] data) - { - if (data == null) - return 0; - - int i = data.Length; - int hc = i + 1; - - while (--i >= 0) - { - hc *= 257; - hc ^= (int)data[i]; - } - - return hc; - } - - [CLSCompliantAttribute(false)] - public static int GetHashCode(uint[] data, int off, int len) - { - if (data == null) - return 0; - - int i = len; - int hc = i + 1; - - while (--i >= 0) - { - hc *= 257; - hc ^= (int)data[off + i]; - } - - return hc; - } - - [CLSCompliantAttribute(false)] - public static int GetHashCode(ulong[] data) - { - if (data == null) - return 0; - - int i = data.Length; - int hc = i + 1; - - while (--i >= 0) - { - ulong di = data[i]; - hc *= 257; - hc ^= (int)di; - hc *= 257; - hc ^= (int)(di >> 32); - } - - return hc; - } - - [CLSCompliantAttribute(false)] - public static int GetHashCode(ulong[] data, int off, int len) - { - if (data == null) - return 0; - - int i = len; - int hc = i + 1; - - while (--i >= 0) - { - ulong di = data[off + i]; - hc *= 257; - hc ^= (int)di; - hc *= 257; - hc ^= (int)(di >> 32); - } - - return hc; - } - - public static byte[] Clone( - byte[] data) - { - return data == null ? null : (byte[])data.Clone(); - } - - public static byte[] Clone( - byte[] data, - byte[] existing) - { - if (data == null) - { - return null; - } - if ((existing == null) || (existing.Length != data.Length)) - { - return Clone(data); - } - Array.Copy(data, 0, existing, 0, existing.Length); - return existing; - } - - public static int[] Clone( - int[] data) - { - return data == null ? null : (int[])data.Clone(); - } - - internal static uint[] Clone(uint[] data) - { - return data == null ? null : (uint[])data.Clone(); - } - - public static long[] Clone(long[] data) - { - return data == null ? null : (long[])data.Clone(); - } - - [CLSCompliantAttribute(false)] - public static ulong[] Clone( - ulong[] data) - { - return data == null ? null : (ulong[]) data.Clone(); - } - - [CLSCompliantAttribute(false)] - public static ulong[] Clone( - ulong[] data, - ulong[] existing) - { - if (data == null) - { - return null; - } - if ((existing == null) || (existing.Length != data.Length)) - { - return Clone(data); - } - Array.Copy(data, 0, existing, 0, existing.Length); - return existing; - } - - public static bool Contains(byte[] a, byte n) - { - for (int i = 0; i < a.Length; ++i) - { - if (a[i] == n) - return true; - } - return false; - } - - public static bool Contains(short[] a, short n) - { - for (int i = 0; i < a.Length; ++i) - { - if (a[i] == n) - return true; - } - return false; - } - - public static bool Contains(int[] a, int n) - { - for (int i = 0; i < a.Length; ++i) - { - if (a[i] == n) - return true; - } - return false; - } - - public static void Fill( - byte[] buf, - byte b) - { - int i = buf.Length; - while (i > 0) - { - buf[--i] = b; - } - } - - public static byte[] CopyOf(byte[] data, int newLength) - { - byte[] tmp = new byte[newLength]; - Array.Copy(data, 0, tmp, 0, System.Math.Min(newLength, data.Length)); - return tmp; - } - - public static char[] CopyOf(char[] data, int newLength) - { - char[] tmp = new char[newLength]; - Array.Copy(data, 0, tmp, 0, System.Math.Min(newLength, data.Length)); - return tmp; - } - - public static int[] CopyOf(int[] data, int newLength) - { - int[] tmp = new int[newLength]; - Array.Copy(data, 0, tmp, 0, System.Math.Min(newLength, data.Length)); - return tmp; - } - - public static long[] CopyOf(long[] data, int newLength) - { - long[] tmp = new long[newLength]; - Array.Copy(data, 0, tmp, 0, System.Math.Min(newLength, data.Length)); - return tmp; - } - - public static BigInteger[] CopyOf(BigInteger[] data, int newLength) - { - BigInteger[] tmp = new BigInteger[newLength]; - Array.Copy(data, 0, tmp, 0, System.Math.Min(newLength, data.Length)); - return tmp; - } - - /** - * Make a copy of a range of bytes from the passed in data array. The range can - * extend beyond the end of the input array, in which case the return array will - * be padded with zeroes. - * - * @param data the array from which the data is to be copied. - * @param from the start index at which the copying should take place. - * @param to the final index of the range (exclusive). - * - * @return a new byte array containing the range given. - */ - public static byte[] CopyOfRange(byte[] data, int from, int to) - { - int newLength = GetLength(from, to); - byte[] tmp = new byte[newLength]; - Array.Copy(data, from, tmp, 0, System.Math.Min(newLength, data.Length - from)); - return tmp; - } - - public static int[] CopyOfRange(int[] data, int from, int to) - { - int newLength = GetLength(from, to); - int[] tmp = new int[newLength]; - Array.Copy(data, from, tmp, 0, System.Math.Min(newLength, data.Length - from)); - return tmp; - } - - public static long[] CopyOfRange(long[] data, int from, int to) - { - int newLength = GetLength(from, to); - long[] tmp = new long[newLength]; - Array.Copy(data, from, tmp, 0, System.Math.Min(newLength, data.Length - from)); - return tmp; - } - - public static BigInteger[] CopyOfRange(BigInteger[] data, int from, int to) - { - int newLength = GetLength(from, to); - BigInteger[] tmp = new BigInteger[newLength]; - Array.Copy(data, from, tmp, 0, System.Math.Min(newLength, data.Length - from)); - return tmp; - } - - private static int GetLength(int from, int to) - { - int newLength = to - from; - if (newLength < 0) - throw new ArgumentException(from + " > " + to); - return newLength; - } - - public static byte[] Append(byte[] a, byte b) - { - if (a == null) - return new byte[] { b }; - - int length = a.Length; - byte[] result = new byte[length + 1]; - Array.Copy(a, 0, result, 0, length); - result[length] = b; - return result; - } - - public static short[] Append(short[] a, short b) - { - if (a == null) - return new short[] { b }; - - int length = a.Length; - short[] result = new short[length + 1]; - Array.Copy(a, 0, result, 0, length); - result[length] = b; - return result; - } - - public static int[] Append(int[] a, int b) - { - if (a == null) - return new int[] { b }; - - int length = a.Length; - int[] result = new int[length + 1]; - Array.Copy(a, 0, result, 0, length); - result[length] = b; - return result; - } - - public static byte[] Concatenate(byte[] a, byte[] b) - { - if (a == null) - return Clone(b); - if (b == null) - return Clone(a); - - byte[] rv = new byte[a.Length + b.Length]; - Array.Copy(a, 0, rv, 0, a.Length); - Array.Copy(b, 0, rv, a.Length, b.Length); - return rv; - } - - public static byte[] ConcatenateAll(params byte[][] vs) - { - byte[][] nonNull = new byte[vs.Length][]; - int count = 0; - int totalLength = 0; - - for (int i = 0; i < vs.Length; ++i) - { - byte[] v = vs[i]; - if (v != null) - { - nonNull[count++] = v; - totalLength += v.Length; - } - } - - byte[] result = new byte[totalLength]; - int pos = 0; - - for (int j = 0; j < count; ++j) - { - byte[] v = nonNull[j]; - Array.Copy(v, 0, result, pos, v.Length); - pos += v.Length; - } - - return result; - } - - public static int[] Concatenate(int[] a, int[] b) - { - if (a == null) - return Clone(b); - if (b == null) - return Clone(a); - - int[] rv = new int[a.Length + b.Length]; - Array.Copy(a, 0, rv, 0, a.Length); - Array.Copy(b, 0, rv, a.Length, b.Length); - return rv; - } - - public static byte[] Prepend(byte[] a, byte b) - { - if (a == null) - return new byte[] { b }; - - int length = a.Length; - byte[] result = new byte[length + 1]; - Array.Copy(a, 0, result, 1, length); - result[0] = b; - return result; - } - - public static short[] Prepend(short[] a, short b) - { - if (a == null) - return new short[] { b }; - - int length = a.Length; - short[] result = new short[length + 1]; - Array.Copy(a, 0, result, 1, length); - result[0] = b; - return result; - } - - public static int[] Prepend(int[] a, int b) - { - if (a == null) - return new int[] { b }; - - int length = a.Length; - int[] result = new int[length + 1]; - Array.Copy(a, 0, result, 1, length); - result[0] = b; - return result; - } - - public static byte[] Reverse(byte[] a) - { - if (a == null) - return null; - - int p1 = 0, p2 = a.Length; - byte[] result = new byte[p2]; - - while (--p2 >= 0) - { - result[p2] = a[p1++]; - } - - return result; - } - - public static int[] Reverse(int[] a) - { - if (a == null) - return null; - - int p1 = 0, p2 = a.Length; - int[] result = new int[p2]; - - while (--p2 >= 0) - { - result[p2] = a[p1++]; - } - - return result; - } - } -} diff --git a/bc-sharp-crypto/src/util/BigIntegers.cs b/bc-sharp-crypto/src/util/BigIntegers.cs deleted file mode 100644 index f2d0425..0000000 --- a/bc-sharp-crypto/src/util/BigIntegers.cs +++ /dev/null @@ -1,90 +0,0 @@ -using System; - -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; - -namespace Org.BouncyCastle.Utilities -{ - /** - * BigInteger utilities. - */ - public abstract class BigIntegers - { - private const int MaxIterations = 1000; - - /** - * Return the passed in value as an unsigned byte array. - * - * @param value value to be converted. - * @return a byte array without a leading zero byte if present in the signed encoding. - */ - public static byte[] AsUnsignedByteArray( - BigInteger n) - { - return n.ToByteArrayUnsigned(); - } - - /** - * Return the passed in value as an unsigned byte array of specified length, zero-extended as necessary. - * - * @param length desired length of result array. - * @param n value to be converted. - * @return a byte array of specified length, with leading zeroes as necessary given the size of n. - */ - public static byte[] AsUnsignedByteArray(int length, BigInteger n) - { - byte[] bytes = n.ToByteArrayUnsigned(); - - if (bytes.Length > length) - throw new ArgumentException("standard length exceeded", "n"); - - if (bytes.Length == length) - return bytes; - - byte[] tmp = new byte[length]; - Array.Copy(bytes, 0, tmp, tmp.Length - bytes.Length, bytes.Length); - return tmp; - } - - /** - * Return a random BigInteger not less than 'min' and not greater than 'max' - * - * @param min the least value that may be generated - * @param max the greatest value that may be generated - * @param random the source of randomness - * @return a random BigInteger value in the range [min,max] - */ - public static BigInteger CreateRandomInRange( - BigInteger min, - BigInteger max, - // TODO Should have been just Random class - SecureRandom random) - { - int cmp = min.CompareTo(max); - if (cmp >= 0) - { - if (cmp > 0) - throw new ArgumentException("'min' may not be greater than 'max'"); - - return min; - } - - if (min.BitLength > max.BitLength / 2) - { - return CreateRandomInRange(BigInteger.Zero, max.Subtract(min), random).Add(min); - } - - for (int i = 0; i < MaxIterations; ++i) - { - BigInteger x = new BigInteger(max.BitLength, random); - if (x.CompareTo(min) >= 0 && x.CompareTo(max) <= 0) - { - return x; - } - } - - // fall back to a faster (restricted) method - return new BigInteger(max.Subtract(min).BitLength - 1, random).Add(min); - } - } -} diff --git a/bc-sharp-crypto/src/util/Enums.cs b/bc-sharp-crypto/src/util/Enums.cs deleted file mode 100644 index 9e908c4..0000000 --- a/bc-sharp-crypto/src/util/Enums.cs +++ /dev/null @@ -1,78 +0,0 @@ -using System; -using System.Text; - -#if NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE -using System.Collections; -using System.Reflection; -#endif - -using Org.BouncyCastle.Utilities.Date; - -namespace Org.BouncyCastle.Utilities -{ - internal abstract class Enums - { - internal static Enum GetEnumValue(System.Type enumType, string s) - { - if (!IsEnumType(enumType)) - throw new ArgumentException("Not an enumeration type", "enumType"); - - // We only want to parse single named constants - if (s.Length > 0 && char.IsLetter(s[0]) && s.IndexOf(',') < 0) - { - s = s.Replace('-', '_'); - s = s.Replace('/', '_'); - -#if NETCF_1_0 - FieldInfo field = enumType.GetField(s, BindingFlags.Static | BindingFlags.Public); - if (field != null) - { - return (Enum)field.GetValue(null); - } -#else - return (Enum)Enum.Parse(enumType, s, false); -#endif - } - - throw new ArgumentException(); - } - - internal static Array GetEnumValues(System.Type enumType) - { - if (!IsEnumType(enumType)) - throw new ArgumentException("Not an enumeration type", "enumType"); - -#if NETCF_1_0 || NETCF_2_0 || SILVERLIGHT - IList result = Platform.CreateArrayList(); - FieldInfo[] fields = enumType.GetFields(BindingFlags.Static | BindingFlags.Public); - foreach (FieldInfo field in fields) - { - // Note: Argument to GetValue() ignored since the fields are static, - // but Silverlight for Windows Phone throws exception if we pass null - result.Add(field.GetValue(enumType)); - } - object[] arr = new object[result.Count]; - result.CopyTo(arr, 0); - return arr; -#else - return Enum.GetValues(enumType); -#endif - } - - internal static Enum GetArbitraryValue(System.Type enumType) - { - Array values = GetEnumValues(enumType); - int pos = (int)(DateTimeUtilities.CurrentUnixMs() & int.MaxValue) % values.Length; - return (Enum)values.GetValue(pos); - } - - internal static bool IsEnumType(System.Type t) - { -#if NEW_REFLECTION - return t.GetTypeInfo().IsEnum; -#else - return t.IsEnum; -#endif - } - } -} diff --git a/bc-sharp-crypto/src/util/IMemoable.cs b/bc-sharp-crypto/src/util/IMemoable.cs deleted file mode 100644 index cc8a2e5..0000000 --- a/bc-sharp-crypto/src/util/IMemoable.cs +++ /dev/null @@ -1,29 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Utilities -{ - public interface IMemoable - { - /// - /// Produce a copy of this object with its configuration and in its current state. - /// - /// - /// The returned object may be used simply to store the state, or may be used as a similar object - /// starting from the copied state. - /// - IMemoable Copy(); - - /// - /// Restore a copied object state into this object. - /// - /// - /// Implementations of this method should try to avoid or minimise memory allocation to perform the reset. - /// - /// an object originally {@link #copy() copied} from an object of the same type as this instance. - /// if the provided object is not of the correct type. - /// if the other parameter is in some other way invalid. - void Reset(IMemoable other); - } - -} - diff --git a/bc-sharp-crypto/src/util/Integers.cs b/bc-sharp-crypto/src/util/Integers.cs deleted file mode 100644 index ccbf872..0000000 --- a/bc-sharp-crypto/src/util/Integers.cs +++ /dev/null @@ -1,17 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Utilities -{ - public abstract class Integers - { - public static int RotateLeft(int i, int distance) - { - return (i << distance) ^ (int)((uint)i >> -distance); - } - - public static int RotateRight(int i, int distance) - { - return (int)((uint)i >> distance) ^ (i << -distance); - } - } -} diff --git a/bc-sharp-crypto/src/util/MemoableResetException.cs b/bc-sharp-crypto/src/util/MemoableResetException.cs deleted file mode 100644 index 99554f6..0000000 --- a/bc-sharp-crypto/src/util/MemoableResetException.cs +++ /dev/null @@ -1,27 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Utilities -{ - /** - * Exception to be thrown on a failure to reset an object implementing Memoable. - *

    - * The exception extends InvalidCastException to enable users to have a single handling case, - * only introducing specific handling of this one if required. - *

    - */ - public class MemoableResetException - : InvalidCastException - { - /** - * Basic Constructor. - * - * @param msg message to be associated with this exception. - */ - public MemoableResetException(string msg) - : base(msg) - { - } - } - -} - diff --git a/bc-sharp-crypto/src/util/Platform.cs b/bc-sharp-crypto/src/util/Platform.cs deleted file mode 100644 index 8648485..0000000 --- a/bc-sharp-crypto/src/util/Platform.cs +++ /dev/null @@ -1,229 +0,0 @@ -using System; -using System.Globalization; -using System.IO; -using System.Text; - -#if SILVERLIGHT || PORTABLE -using System.Collections.Generic; -#else -using System.Collections; -#endif - -namespace Org.BouncyCastle.Utilities -{ - internal abstract class Platform - { - private static readonly CompareInfo InvariantCompareInfo = CultureInfo.InvariantCulture.CompareInfo; - -#if NETCF_1_0 || NETCF_2_0 - private static string GetNewLine() - { - MemoryStream buf = new MemoryStream(); - StreamWriter w = new StreamWriter(buf, Encoding.UTF8); - w.WriteLine(); - Dispose(w); - byte[] bs = buf.ToArray(); - return Encoding.UTF8.GetString(bs, 0, bs.Length); - } -#else - private static string GetNewLine() - { - return Environment.NewLine; - } -#endif - - internal static bool EqualsIgnoreCase(string a, string b) - { -#if PORTABLE - return String.Equals(a, b, StringComparison.OrdinalIgnoreCase); -#else - return ToUpperInvariant(a) == ToUpperInvariant(b); -#endif - } - -#if NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE - internal static string GetEnvironmentVariable( - string variable) - { - return null; - } -#else - internal static string GetEnvironmentVariable( - string variable) - { - try - { - return Environment.GetEnvironmentVariable(variable); - } - catch (System.Security.SecurityException) - { - // We don't have the required permission to read this environment variable, - // which is fine, just act as if it's not set - return null; - } - } -#endif - -#if NETCF_1_0 - internal static Exception CreateNotImplementedException( - string message) - { - return new Exception("Not implemented: " + message); - } - - internal static bool Equals( - object a, - object b) - { - return a == b || (a != null && b != null && a.Equals(b)); - } -#else - internal static Exception CreateNotImplementedException( - string message) - { - return new NotImplementedException(message); - } -#endif - -#if SILVERLIGHT || PORTABLE - internal static System.Collections.IList CreateArrayList() - { - return new List(); - } - internal static System.Collections.IList CreateArrayList(int capacity) - { - return new List(capacity); - } - internal static System.Collections.IList CreateArrayList(System.Collections.ICollection collection) - { - System.Collections.IList result = new List(collection.Count); - foreach (object o in collection) - { - result.Add(o); - } - return result; - } - internal static System.Collections.IList CreateArrayList(System.Collections.IEnumerable collection) - { - System.Collections.IList result = new List(); - foreach (object o in collection) - { - result.Add(o); - } - return result; - } - internal static System.Collections.IDictionary CreateHashtable() - { - return new Dictionary(); - } - internal static System.Collections.IDictionary CreateHashtable(int capacity) - { - return new Dictionary(capacity); - } - internal static System.Collections.IDictionary CreateHashtable(System.Collections.IDictionary dictionary) - { - System.Collections.IDictionary result = new Dictionary(dictionary.Count); - foreach (System.Collections.DictionaryEntry entry in dictionary) - { - result.Add(entry.Key, entry.Value); - } - return result; - } -#else - internal static System.Collections.IList CreateArrayList() - { - return new ArrayList(); - } - internal static System.Collections.IList CreateArrayList(int capacity) - { - return new ArrayList(capacity); - } - internal static System.Collections.IList CreateArrayList(System.Collections.ICollection collection) - { - return new ArrayList(collection); - } - internal static System.Collections.IList CreateArrayList(System.Collections.IEnumerable collection) - { - ArrayList result = new ArrayList(); - foreach (object o in collection) - { - result.Add(o); - } - return result; - } - internal static System.Collections.IDictionary CreateHashtable() - { - return new Hashtable(); - } - internal static System.Collections.IDictionary CreateHashtable(int capacity) - { - return new Hashtable(capacity); - } - internal static System.Collections.IDictionary CreateHashtable(System.Collections.IDictionary dictionary) - { - return new Hashtable(dictionary); - } -#endif - - internal static string ToLowerInvariant(string s) - { -#if PORTABLE - return s.ToLowerInvariant(); -#else - return s.ToLower(CultureInfo.InvariantCulture); -#endif - } - - internal static string ToUpperInvariant(string s) - { -#if PORTABLE - return s.ToUpperInvariant(); -#else - return s.ToUpper(CultureInfo.InvariantCulture); -#endif - } - - internal static readonly string NewLine = GetNewLine(); - -#if PORTABLE - internal static void Dispose(IDisposable d) - { - d.Dispose(); - } -#else - internal static void Dispose(Stream s) - { - s.Close(); - } - internal static void Dispose(TextWriter t) - { - t.Close(); - } -#endif - - internal static int IndexOf(string source, string value) - { - return InvariantCompareInfo.IndexOf(source, value, CompareOptions.Ordinal); - } - - internal static int LastIndexOf(string source, string value) - { - return InvariantCompareInfo.LastIndexOf(source, value, CompareOptions.Ordinal); - } - - internal static bool StartsWith(string source, string prefix) - { - return InvariantCompareInfo.IsPrefix(source, prefix, CompareOptions.Ordinal); - } - - internal static bool EndsWith(string source, string suffix) - { - return InvariantCompareInfo.IsSuffix(source, suffix, CompareOptions.Ordinal); - } - - internal static string GetTypeName(object obj) - { - return obj.GetType().FullName; - } - } -} diff --git a/bc-sharp-crypto/src/util/Strings.cs b/bc-sharp-crypto/src/util/Strings.cs deleted file mode 100644 index 3937a08..0000000 --- a/bc-sharp-crypto/src/util/Strings.cs +++ /dev/null @@ -1,103 +0,0 @@ -using System; -using System.Text; - -namespace Org.BouncyCastle.Utilities -{ - /// General string utilities. - public abstract class Strings - { - internal static bool IsOneOf(string s, params string[] candidates) - { - foreach (string candidate in candidates) - { - if (s == candidate) - return true; - } - return false; - } - - public static string FromByteArray( - byte[] bs) - { - char[] cs = new char[bs.Length]; - for (int i = 0; i < cs.Length; ++i) - { - cs[i] = Convert.ToChar(bs[i]); - } - return new string(cs); - } - - public static byte[] ToByteArray( - char[] cs) - { - byte[] bs = new byte[cs.Length]; - for (int i = 0; i < bs.Length; ++i) - { - bs[i] = Convert.ToByte(cs[i]); - } - return bs; - } - - public static byte[] ToByteArray( - string s) - { - byte[] bs = new byte[s.Length]; - for (int i = 0; i < bs.Length; ++i) - { - bs[i] = Convert.ToByte(s[i]); - } - return bs; - } - - public static string FromAsciiByteArray( - byte[] bytes) - { -#if SILVERLIGHT || PORTABLE - // TODO Check for non-ASCII bytes in input? - return Encoding.UTF8.GetString(bytes, 0, bytes.Length); -#else - return Encoding.ASCII.GetString(bytes, 0, bytes.Length); -#endif - } - - public static byte[] ToAsciiByteArray( - char[] cs) - { -#if SILVERLIGHT || PORTABLE - // TODO Check for non-ASCII characters in input? - return Encoding.UTF8.GetBytes(cs); -#else - return Encoding.ASCII.GetBytes(cs); -#endif - } - - public static byte[] ToAsciiByteArray( - string s) - { -#if SILVERLIGHT || PORTABLE - // TODO Check for non-ASCII characters in input? - return Encoding.UTF8.GetBytes(s); -#else - return Encoding.ASCII.GetBytes(s); -#endif - } - - public static string FromUtf8ByteArray( - byte[] bytes) - { - return Encoding.UTF8.GetString(bytes, 0, bytes.Length); - } - - public static byte[] ToUtf8ByteArray( - char[] cs) - { - return Encoding.UTF8.GetBytes(cs); - } - - public static byte[] ToUtf8ByteArray( - string s) - { - return Encoding.UTF8.GetBytes(s); - } - } -} diff --git a/bc-sharp-crypto/src/util/Times.cs b/bc-sharp-crypto/src/util/Times.cs deleted file mode 100644 index 99a78d2..0000000 --- a/bc-sharp-crypto/src/util/Times.cs +++ /dev/null @@ -1,14 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Utilities -{ - public sealed class Times - { - private static long NanosecondsPerTick = 100L; - - public static long NanoTime() - { - return DateTime.UtcNow.Ticks * NanosecondsPerTick; - } - } -} diff --git a/bc-sharp-crypto/src/util/TypeExtensions.cs b/bc-sharp-crypto/src/util/TypeExtensions.cs deleted file mode 100644 index e2aeae4..0000000 --- a/bc-sharp-crypto/src/util/TypeExtensions.cs +++ /dev/null @@ -1,17 +0,0 @@ -#if NEW_REFLECTION - -using System; -using System.Reflection; - -namespace Org.BouncyCastle -{ - internal static class TypeExtensions - { - public static bool IsInstanceOfType(this Type type, object instance) - { - return instance != null && type.GetTypeInfo().IsAssignableFrom(instance.GetType().GetTypeInfo()); - } - } -} - -#endif diff --git a/bc-sharp-crypto/src/util/collections/CollectionUtilities.cs b/bc-sharp-crypto/src/util/collections/CollectionUtilities.cs deleted file mode 100644 index 18fcb67..0000000 --- a/bc-sharp-crypto/src/util/collections/CollectionUtilities.cs +++ /dev/null @@ -1,64 +0,0 @@ -using System; -using System.Collections; -using System.Text; - -namespace Org.BouncyCastle.Utilities.Collections -{ - public abstract class CollectionUtilities - { - public static void AddRange(IList to, IEnumerable range) - { - foreach (object o in range) - { - to.Add(o); - } - } - - public static bool CheckElementsAreOfType(IEnumerable e, Type t) - { - foreach (object o in e) - { - if (!t.IsInstanceOfType(o)) - return false; - } - return true; - } - - public static IDictionary ReadOnly(IDictionary d) - { - return new UnmodifiableDictionaryProxy(d); - } - - public static IList ReadOnly(IList l) - { - return new UnmodifiableListProxy(l); - } - - public static ISet ReadOnly(ISet s) - { - return new UnmodifiableSetProxy(s); - } - - public static string ToString(IEnumerable c) - { - StringBuilder sb = new StringBuilder("["); - - IEnumerator e = c.GetEnumerator(); - - if (e.MoveNext()) - { - sb.Append(e.Current.ToString()); - - while (e.MoveNext()) - { - sb.Append(", "); - sb.Append(e.Current.ToString()); - } - } - - sb.Append(']'); - - return sb.ToString(); - } - } -} diff --git a/bc-sharp-crypto/src/util/collections/EmptyEnumerable.cs b/bc-sharp-crypto/src/util/collections/EmptyEnumerable.cs deleted file mode 100644 index a61a078..0000000 --- a/bc-sharp-crypto/src/util/collections/EmptyEnumerable.cs +++ /dev/null @@ -1,44 +0,0 @@ -using System; -using System.Collections; - -namespace Org.BouncyCastle.Utilities.Collections -{ - public sealed class EmptyEnumerable - : IEnumerable - { - public static readonly IEnumerable Instance = new EmptyEnumerable(); - - private EmptyEnumerable() - { - } - - public IEnumerator GetEnumerator() - { - return EmptyEnumerator.Instance; - } - } - - public sealed class EmptyEnumerator - : IEnumerator - { - public static readonly IEnumerator Instance = new EmptyEnumerator(); - - private EmptyEnumerator() - { - } - - public bool MoveNext() - { - return false; - } - - public void Reset() - { - } - - public object Current - { - get { throw new InvalidOperationException("No elements"); } - } - } -} diff --git a/bc-sharp-crypto/src/util/collections/EnumerableProxy.cs b/bc-sharp-crypto/src/util/collections/EnumerableProxy.cs deleted file mode 100644 index 9eec4af..0000000 --- a/bc-sharp-crypto/src/util/collections/EnumerableProxy.cs +++ /dev/null @@ -1,25 +0,0 @@ -using System; -using System.Collections; - -namespace Org.BouncyCastle.Utilities.Collections -{ - public sealed class EnumerableProxy - : IEnumerable - { - private readonly IEnumerable inner; - - public EnumerableProxy( - IEnumerable inner) - { - if (inner == null) - throw new ArgumentNullException("inner"); - - this.inner = inner; - } - - public IEnumerator GetEnumerator() - { - return inner.GetEnumerator(); - } - } -} diff --git a/bc-sharp-crypto/src/util/collections/HashSet.cs b/bc-sharp-crypto/src/util/collections/HashSet.cs deleted file mode 100644 index 1facb58..0000000 --- a/bc-sharp-crypto/src/util/collections/HashSet.cs +++ /dev/null @@ -1,99 +0,0 @@ -using System; -using System.Collections; - -namespace Org.BouncyCastle.Utilities.Collections -{ - public class HashSet - : ISet - { - private readonly IDictionary impl = Platform.CreateHashtable(); - - public HashSet() - { - } - - public HashSet(IEnumerable s) - { - foreach (object o in s) - { - Add(o); - } - } - - public virtual void Add(object o) - { - impl[o] = null; - } - - public virtual void AddAll(IEnumerable e) - { - foreach (object o in e) - { - Add(o); - } - } - - public virtual void Clear() - { - impl.Clear(); - } - - public virtual bool Contains(object o) - { - return impl.Contains(o); - } - - public virtual void CopyTo(Array array, int index) - { - impl.Keys.CopyTo(array, index); - } - - public virtual int Count - { - get { return impl.Count; } - } - - public virtual IEnumerator GetEnumerator() - { - return impl.Keys.GetEnumerator(); - } - - public virtual bool IsEmpty - { - get { return impl.Count == 0; } - } - - public virtual bool IsFixedSize - { - get { return impl.IsFixedSize; } - } - - public virtual bool IsReadOnly - { - get { return impl.IsReadOnly; } - } - - public virtual bool IsSynchronized - { - get { return impl.IsSynchronized; } - } - - public virtual void Remove(object o) - { - impl.Remove(o); - } - - public virtual void RemoveAll(IEnumerable e) - { - foreach (object o in e) - { - Remove(o); - } - } - - public virtual object SyncRoot - { - get { return impl.SyncRoot; } - } - } -} diff --git a/bc-sharp-crypto/src/util/collections/ISet.cs b/bc-sharp-crypto/src/util/collections/ISet.cs deleted file mode 100644 index 1f8edba..0000000 --- a/bc-sharp-crypto/src/util/collections/ISet.cs +++ /dev/null @@ -1,19 +0,0 @@ -using System; -using System.Collections; - -namespace Org.BouncyCastle.Utilities.Collections -{ - public interface ISet - : ICollection - { - void Add(object o); - void AddAll(IEnumerable e); - void Clear(); - bool Contains(object o); - bool IsEmpty { get; } - bool IsFixedSize { get; } - bool IsReadOnly { get; } - void Remove(object o); - void RemoveAll(IEnumerable e); - } -} diff --git a/bc-sharp-crypto/src/util/collections/LinkedDictionary.cs b/bc-sharp-crypto/src/util/collections/LinkedDictionary.cs deleted file mode 100644 index 933d38d..0000000 --- a/bc-sharp-crypto/src/util/collections/LinkedDictionary.cs +++ /dev/null @@ -1,178 +0,0 @@ -using System; -using System.Collections; - -namespace Org.BouncyCastle.Utilities.Collections -{ - public class LinkedDictionary - : IDictionary - { - internal readonly IDictionary hash = Platform.CreateHashtable(); - internal readonly IList keys = Platform.CreateArrayList(); - - public LinkedDictionary() - { - } - - public virtual void Add(object k, object v) - { - hash.Add(k, v); - keys.Add(k); - } - - public virtual void Clear() - { - hash.Clear(); - keys.Clear(); - } - - public virtual bool Contains(object k) - { - return hash.Contains(k); - } - - public virtual void CopyTo(Array array, int index) - { - foreach (object k in keys) - { - array.SetValue(hash[k], index++); - } - } - - public virtual int Count - { - get { return hash.Count; } - } - - IEnumerator IEnumerable.GetEnumerator() - { - return GetEnumerator(); - } - - public virtual IDictionaryEnumerator GetEnumerator() - { - return new LinkedDictionaryEnumerator(this); - } - - public virtual void Remove(object k) - { - hash.Remove(k); - keys.Remove(k); - } - - public virtual bool IsFixedSize - { - get { return false; } - } - - public virtual bool IsReadOnly - { - get { return false; } - } - - public virtual bool IsSynchronized - { - get { return false; } - } - - public virtual object SyncRoot - { - get { return false; } - } - - public virtual ICollection Keys - { - get { return Platform.CreateArrayList(keys); } - } - - public virtual ICollection Values - { - // NB: Order has to be the same as for Keys property - get - { - IList values = Platform.CreateArrayList(keys.Count); - foreach (object k in keys) - { - values.Add(hash[k]); - } - return values; - } - } - - public virtual object this[object k] - { - get - { - return hash[k]; - } - set - { - if (!hash.Contains(k)) - keys.Add(k); - hash[k] = value; - } - } - } - - internal class LinkedDictionaryEnumerator : IDictionaryEnumerator - { - private readonly LinkedDictionary parent; - private int pos = -1; - - internal LinkedDictionaryEnumerator(LinkedDictionary parent) - { - this.parent = parent; - } - - public virtual object Current - { - get { return Entry; } - } - - public virtual DictionaryEntry Entry - { - get - { - object k = CurrentKey; - return new DictionaryEntry(k, parent.hash[k]); - } - } - - public virtual object Key - { - get - { - return CurrentKey; - } - } - - public virtual bool MoveNext() - { - if (pos >= parent.keys.Count) - return false; - return ++pos < parent.keys.Count; - } - - public virtual void Reset() - { - this.pos = -1; - } - - public virtual object Value - { - get - { - return parent.hash[CurrentKey]; - } - } - - private object CurrentKey - { - get - { - if (pos < 0 || pos >= parent.keys.Count) - throw new InvalidOperationException(); - return parent.keys[pos]; - } - } - } -} diff --git a/bc-sharp-crypto/src/util/collections/UnmodifiableDictionary.cs b/bc-sharp-crypto/src/util/collections/UnmodifiableDictionary.cs deleted file mode 100644 index 0bdf70a..0000000 --- a/bc-sharp-crypto/src/util/collections/UnmodifiableDictionary.cs +++ /dev/null @@ -1,64 +0,0 @@ -using System; -using System.Collections; - -namespace Org.BouncyCastle.Utilities.Collections -{ - public abstract class UnmodifiableDictionary - : IDictionary - { - protected UnmodifiableDictionary() - { - } - - public virtual void Add(object k, object v) - { - throw new NotSupportedException(); - } - - public virtual void Clear() - { - throw new NotSupportedException(); - } - - public abstract bool Contains(object k); - - public abstract void CopyTo(Array array, int index); - - public abstract int Count { get; } - - IEnumerator IEnumerable.GetEnumerator() - { - return GetEnumerator(); - } - - public abstract IDictionaryEnumerator GetEnumerator(); - - public virtual void Remove(object k) - { - throw new NotSupportedException(); - } - - public abstract bool IsFixedSize { get; } - - public virtual bool IsReadOnly - { - get { return true; } - } - - public abstract bool IsSynchronized { get; } - - public abstract object SyncRoot { get; } - - public abstract ICollection Keys { get; } - - public abstract ICollection Values { get; } - - public virtual object this[object k] - { - get { return GetValue(k); } - set { throw new NotSupportedException(); } - } - - protected abstract object GetValue(object k); - } -} diff --git a/bc-sharp-crypto/src/util/collections/UnmodifiableDictionaryProxy.cs b/bc-sharp-crypto/src/util/collections/UnmodifiableDictionaryProxy.cs deleted file mode 100644 index 0fca909..0000000 --- a/bc-sharp-crypto/src/util/collections/UnmodifiableDictionaryProxy.cs +++ /dev/null @@ -1,66 +0,0 @@ -using System; -using System.Collections; - -namespace Org.BouncyCastle.Utilities.Collections -{ - public class UnmodifiableDictionaryProxy - : UnmodifiableDictionary - { - private readonly IDictionary d; - - public UnmodifiableDictionaryProxy(IDictionary d) - { - this.d = d; - } - - public override bool Contains(object k) - { - return d.Contains(k); - } - - public override void CopyTo(Array array, int index) - { - d.CopyTo(array, index); - } - - public override int Count - { - get { return d.Count; } - } - - public override IDictionaryEnumerator GetEnumerator() - { - return d.GetEnumerator(); - } - - public override bool IsFixedSize - { - get { return d.IsFixedSize; } - } - - public override bool IsSynchronized - { - get { return d.IsSynchronized; } - } - - public override object SyncRoot - { - get { return d.SyncRoot; } - } - - public override ICollection Keys - { - get { return d.Keys; } - } - - public override ICollection Values - { - get { return d.Values; } - } - - protected override object GetValue(object k) - { - return d[k]; - } - } -} diff --git a/bc-sharp-crypto/src/util/collections/UnmodifiableList.cs b/bc-sharp-crypto/src/util/collections/UnmodifiableList.cs deleted file mode 100644 index 28e49ea..0000000 --- a/bc-sharp-crypto/src/util/collections/UnmodifiableList.cs +++ /dev/null @@ -1,67 +0,0 @@ -using System; -using System.Collections; - -namespace Org.BouncyCastle.Utilities.Collections -{ - public abstract class UnmodifiableList - : IList - { - protected UnmodifiableList() - { - } - - public virtual int Add(object o) - { - throw new NotSupportedException(); - } - - public virtual void Clear() - { - throw new NotSupportedException(); - } - - public abstract bool Contains(object o); - - public abstract void CopyTo(Array array, int index); - - public abstract int Count { get; } - - public abstract IEnumerator GetEnumerator(); - - public abstract int IndexOf(object o); - - public virtual void Insert(int i, object o) - { - throw new NotSupportedException(); - } - - public abstract bool IsFixedSize { get; } - - public virtual bool IsReadOnly - { - get { return true; } - } - - public abstract bool IsSynchronized { get; } - - public virtual void Remove(object o) - { - throw new NotSupportedException(); - } - - public virtual void RemoveAt(int i) - { - throw new NotSupportedException(); - } - - public abstract object SyncRoot { get; } - - public virtual object this[int i] - { - get { return GetValue(i); } - set { throw new NotSupportedException(); } - } - - protected abstract object GetValue(int i); - } -} diff --git a/bc-sharp-crypto/src/util/collections/UnmodifiableListProxy.cs b/bc-sharp-crypto/src/util/collections/UnmodifiableListProxy.cs deleted file mode 100644 index 9d00737..0000000 --- a/bc-sharp-crypto/src/util/collections/UnmodifiableListProxy.cs +++ /dev/null @@ -1,61 +0,0 @@ -using System; -using System.Collections; - -namespace Org.BouncyCastle.Utilities.Collections -{ - public class UnmodifiableListProxy - : UnmodifiableList - { - private readonly IList l; - - public UnmodifiableListProxy(IList l) - { - this.l = l; - } - - public override bool Contains(object o) - { - return l.Contains(o); - } - - public override void CopyTo(Array array, int index) - { - l.CopyTo(array, index); - } - - public override int Count - { - get { return l.Count; } - } - - public override IEnumerator GetEnumerator() - { - return l.GetEnumerator(); - } - - public override int IndexOf(object o) - { - return l.IndexOf(o); - } - - public override bool IsFixedSize - { - get { return l.IsFixedSize; } - } - - public override bool IsSynchronized - { - get { return l.IsSynchronized; } - } - - public override object SyncRoot - { - get { return l.SyncRoot; } - } - - protected override object GetValue(int i) - { - return l[i]; - } - } -} diff --git a/bc-sharp-crypto/src/util/collections/UnmodifiableSet.cs b/bc-sharp-crypto/src/util/collections/UnmodifiableSet.cs deleted file mode 100644 index 8792815..0000000 --- a/bc-sharp-crypto/src/util/collections/UnmodifiableSet.cs +++ /dev/null @@ -1,59 +0,0 @@ -using System; -using System.Collections; - -namespace Org.BouncyCastle.Utilities.Collections -{ - public abstract class UnmodifiableSet - : ISet - { - protected UnmodifiableSet() - { - } - - public virtual void Add(object o) - { - throw new NotSupportedException(); - } - - public virtual void AddAll(IEnumerable e) - { - throw new NotSupportedException(); - } - - public virtual void Clear() - { - throw new NotSupportedException(); - } - - public abstract bool Contains(object o); - - public abstract void CopyTo(Array array, int index); - - public abstract int Count { get; } - - public abstract IEnumerator GetEnumerator(); - - public abstract bool IsEmpty { get; } - - public abstract bool IsFixedSize { get; } - - public virtual bool IsReadOnly - { - get { return true; } - } - - public abstract bool IsSynchronized { get; } - - public abstract object SyncRoot { get; } - - public virtual void Remove(object o) - { - throw new NotSupportedException(); - } - - public virtual void RemoveAll(IEnumerable e) - { - throw new NotSupportedException(); - } - } -} diff --git a/bc-sharp-crypto/src/util/collections/UnmodifiableSetProxy.cs b/bc-sharp-crypto/src/util/collections/UnmodifiableSetProxy.cs deleted file mode 100644 index e119e29..0000000 --- a/bc-sharp-crypto/src/util/collections/UnmodifiableSetProxy.cs +++ /dev/null @@ -1,56 +0,0 @@ -using System; -using System.Collections; - -namespace Org.BouncyCastle.Utilities.Collections -{ - public class UnmodifiableSetProxy - : UnmodifiableSet - { - private readonly ISet s; - - public UnmodifiableSetProxy (ISet s) - { - this.s = s; - } - - public override bool Contains(object o) - { - return s.Contains(o); - } - - public override void CopyTo(Array array, int index) - { - s.CopyTo(array, index); - } - - public override int Count - { - get { return s.Count; } - } - - public override IEnumerator GetEnumerator() - { - return s.GetEnumerator(); - } - - public override bool IsEmpty - { - get { return s.IsEmpty; } - } - - public override bool IsFixedSize - { - get { return s.IsFixedSize; } - } - - public override bool IsSynchronized - { - get { return s.IsSynchronized; } - } - - public override object SyncRoot - { - get { return s.SyncRoot; } - } - } -} diff --git a/bc-sharp-crypto/src/util/date/DateTimeObject.cs b/bc-sharp-crypto/src/util/date/DateTimeObject.cs deleted file mode 100644 index 793376b..0000000 --- a/bc-sharp-crypto/src/util/date/DateTimeObject.cs +++ /dev/null @@ -1,25 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Utilities.Date -{ - public sealed class DateTimeObject - { - private readonly DateTime dt; - - public DateTimeObject( - DateTime dt) - { - this.dt = dt; - } - - public DateTime Value - { - get { return dt; } - } - - public override string ToString() - { - return dt.ToString(); - } - } -} diff --git a/bc-sharp-crypto/src/util/date/DateTimeUtilities.cs b/bc-sharp-crypto/src/util/date/DateTimeUtilities.cs deleted file mode 100644 index 311ad5d..0000000 --- a/bc-sharp-crypto/src/util/date/DateTimeUtilities.cs +++ /dev/null @@ -1,47 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Utilities.Date -{ - public class DateTimeUtilities - { - public static readonly DateTime UnixEpoch = new DateTime(1970, 1, 1); - - private DateTimeUtilities() - { - } - - /// - /// Return the number of milliseconds since the Unix epoch (1 Jan., 1970 UTC) for a given DateTime value. - /// - /// A UTC DateTime value not before epoch. - /// Number of whole milliseconds after epoch. - /// 'dateTime' is before epoch. - public static long DateTimeToUnixMs( - DateTime dateTime) - { - if (dateTime.CompareTo(UnixEpoch) < 0) - throw new ArgumentException("DateTime value may not be before the epoch", "dateTime"); - - return (dateTime.Ticks - UnixEpoch.Ticks) / TimeSpan.TicksPerMillisecond; - } - - /// - /// Create a DateTime value from the number of milliseconds since the Unix epoch (1 Jan., 1970 UTC). - /// - /// Number of milliseconds since the epoch. - /// A UTC DateTime value - public static DateTime UnixMsToDateTime( - long unixMs) - { - return new DateTime(unixMs * TimeSpan.TicksPerMillisecond + UnixEpoch.Ticks); - } - - /// - /// Return the current number of milliseconds since the Unix epoch (1 Jan., 1970 UTC). - /// - public static long CurrentUnixMs() - { - return DateTimeToUnixMs(DateTime.UtcNow); - } - } -} diff --git a/bc-sharp-crypto/src/util/encoders/Base64.cs b/bc-sharp-crypto/src/util/encoders/Base64.cs deleted file mode 100644 index ccecd8d..0000000 --- a/bc-sharp-crypto/src/util/encoders/Base64.cs +++ /dev/null @@ -1,120 +0,0 @@ -using System; -using System.IO; -using System.Text; - -namespace Org.BouncyCastle.Utilities.Encoders -{ - public sealed class Base64 - { - private Base64() - { - } - - public static string ToBase64String( - byte[] data) - { - return Convert.ToBase64String(data, 0, data.Length); - } - - public static string ToBase64String( - byte[] data, - int off, - int length) - { - return Convert.ToBase64String(data, off, length); - } - - /** - * encode the input data producing a base 64 encoded byte array. - * - * @return a byte array containing the base 64 encoded data. - */ - public static byte[] Encode( - byte[] data) - { - return Encode(data, 0, data.Length); - } - - /** - * encode the input data producing a base 64 encoded byte array. - * - * @return a byte array containing the base 64 encoded data. - */ - public static byte[] Encode( - byte[] data, - int off, - int length) - { - string s = Convert.ToBase64String(data, off, length); - return Strings.ToAsciiByteArray(s); - } - - /** - * Encode the byte data to base 64 writing it to the given output stream. - * - * @return the number of bytes produced. - */ - public static int Encode( - byte[] data, - Stream outStream) - { - byte[] encoded = Encode(data); - outStream.Write(encoded, 0, encoded.Length); - return encoded.Length; - } - - /** - * Encode the byte data to base 64 writing it to the given output stream. - * - * @return the number of bytes produced. - */ - public static int Encode( - byte[] data, - int off, - int length, - Stream outStream) - { - byte[] encoded = Encode(data, off, length); - outStream.Write(encoded, 0, encoded.Length); - return encoded.Length; - } - - /** - * decode the base 64 encoded input data. It is assumed the input data is valid. - * - * @return a byte array representing the decoded data. - */ - public static byte[] Decode( - byte[] data) - { - string s = Strings.FromAsciiByteArray(data); - return Convert.FromBase64String(s); - } - - /** - * decode the base 64 encoded string data - whitespace will be ignored. - * - * @return a byte array representing the decoded data. - */ - public static byte[] Decode( - string data) - { - return Convert.FromBase64String(data); - } - - /** - * decode the base 64 encoded string data writing it to the given output stream, - * whitespace characters will be ignored. - * - * @return the number of bytes produced. - */ - public static int Decode( - string data, - Stream outStream) - { - byte[] decoded = Decode(data); - outStream.Write(decoded, 0, decoded.Length); - return decoded.Length; - } - } -} diff --git a/bc-sharp-crypto/src/util/encoders/Base64Encoder.cs b/bc-sharp-crypto/src/util/encoders/Base64Encoder.cs deleted file mode 100644 index 7b53df2..0000000 --- a/bc-sharp-crypto/src/util/encoders/Base64Encoder.cs +++ /dev/null @@ -1,324 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Utilities.Encoders -{ - public class Base64Encoder - : IEncoder - { - protected readonly byte[] encodingTable = - { - (byte)'A', (byte)'B', (byte)'C', (byte)'D', (byte)'E', (byte)'F', (byte)'G', - (byte)'H', (byte)'I', (byte)'J', (byte)'K', (byte)'L', (byte)'M', (byte)'N', - (byte)'O', (byte)'P', (byte)'Q', (byte)'R', (byte)'S', (byte)'T', (byte)'U', - (byte)'V', (byte)'W', (byte)'X', (byte)'Y', (byte)'Z', - (byte)'a', (byte)'b', (byte)'c', (byte)'d', (byte)'e', (byte)'f', (byte)'g', - (byte)'h', (byte)'i', (byte)'j', (byte)'k', (byte)'l', (byte)'m', (byte)'n', - (byte)'o', (byte)'p', (byte)'q', (byte)'r', (byte)'s', (byte)'t', (byte)'u', - (byte)'v', - (byte)'w', (byte)'x', (byte)'y', (byte)'z', - (byte)'0', (byte)'1', (byte)'2', (byte)'3', (byte)'4', (byte)'5', (byte)'6', - (byte)'7', (byte)'8', (byte)'9', - (byte)'+', (byte)'/' - }; - - protected byte padding = (byte)'='; - - /* - * set up the decoding table. - */ - protected readonly byte[] decodingTable = new byte[128]; - - protected void InitialiseDecodingTable() - { - Arrays.Fill(decodingTable, (byte)0xff); - - for (int i = 0; i < encodingTable.Length; i++) - { - decodingTable[encodingTable[i]] = (byte)i; - } - } - - public Base64Encoder() - { - InitialiseDecodingTable(); - } - - /** - * encode the input data producing a base 64 output stream. - * - * @return the number of bytes produced. - */ - public int Encode( - byte[] data, - int off, - int length, - Stream outStream) - { - int modulus = length % 3; - int dataLength = (length - modulus); - int a1, a2, a3; - - for (int i = off; i < off + dataLength; i += 3) - { - a1 = data[i] & 0xff; - a2 = data[i + 1] & 0xff; - a3 = data[i + 2] & 0xff; - - outStream.WriteByte(encodingTable[(int) ((uint) a1 >> 2) & 0x3f]); - outStream.WriteByte(encodingTable[((a1 << 4) | (int) ((uint) a2 >> 4)) & 0x3f]); - outStream.WriteByte(encodingTable[((a2 << 2) | (int) ((uint) a3 >> 6)) & 0x3f]); - outStream.WriteByte(encodingTable[a3 & 0x3f]); - } - - /* - * process the tail end. - */ - int b1, b2, b3; - int d1, d2; - - switch (modulus) - { - case 0: /* nothing left to do */ - break; - case 1: - d1 = data[off + dataLength] & 0xff; - b1 = (d1 >> 2) & 0x3f; - b2 = (d1 << 4) & 0x3f; - - outStream.WriteByte(encodingTable[b1]); - outStream.WriteByte(encodingTable[b2]); - outStream.WriteByte(padding); - outStream.WriteByte(padding); - break; - case 2: - d1 = data[off + dataLength] & 0xff; - d2 = data[off + dataLength + 1] & 0xff; - - b1 = (d1 >> 2) & 0x3f; - b2 = ((d1 << 4) | (d2 >> 4)) & 0x3f; - b3 = (d2 << 2) & 0x3f; - - outStream.WriteByte(encodingTable[b1]); - outStream.WriteByte(encodingTable[b2]); - outStream.WriteByte(encodingTable[b3]); - outStream.WriteByte(padding); - break; - } - - return (dataLength / 3) * 4 + ((modulus == 0) ? 0 : 4); - } - - private bool ignore( - char c) - { - return (c == '\n' || c =='\r' || c == '\t' || c == ' '); - } - - /** - * decode the base 64 encoded byte data writing it to the given output stream, - * whitespace characters will be ignored. - * - * @return the number of bytes produced. - */ - public int Decode( - byte[] data, - int off, - int length, - Stream outStream) - { - byte b1, b2, b3, b4; - int outLen = 0; - - int end = off + length; - - while (end > off) - { - if (!ignore((char)data[end - 1])) - { - break; - } - - end--; - } - - int i = off; - int finish = end - 4; - - i = nextI(data, i, finish); - - while (i < finish) - { - b1 = decodingTable[data[i++]]; - - i = nextI(data, i, finish); - - b2 = decodingTable[data[i++]]; - - i = nextI(data, i, finish); - - b3 = decodingTable[data[i++]]; - - i = nextI(data, i, finish); - - b4 = decodingTable[data[i++]]; - - if ((b1 | b2 | b3 | b4) >= 0x80) - throw new IOException("invalid characters encountered in base64 data"); - - outStream.WriteByte((byte)((b1 << 2) | (b2 >> 4))); - outStream.WriteByte((byte)((b2 << 4) | (b3 >> 2))); - outStream.WriteByte((byte)((b3 << 6) | b4)); - - outLen += 3; - - i = nextI(data, i, finish); - } - - outLen += decodeLastBlock(outStream, (char)data[end - 4], (char)data[end - 3], (char)data[end - 2], (char)data[end - 1]); - - return outLen; - } - - private int nextI( - byte[] data, - int i, - int finish) - { - while ((i < finish) && ignore((char)data[i])) - { - i++; - } - return i; - } - - /** - * decode the base 64 encoded string data writing it to the given output stream, - * whitespace characters will be ignored. - * - * @return the number of bytes produced. - */ - public int DecodeString( - string data, - Stream outStream) - { - // Platform Implementation -// byte[] bytes = Convert.FromBase64String(data); -// outStream.Write(bytes, 0, bytes.Length); -// return bytes.Length; - - byte b1, b2, b3, b4; - int length = 0; - - int end = data.Length; - - while (end > 0) - { - if (!ignore(data[end - 1])) - { - break; - } - - end--; - } - - int i = 0; - int finish = end - 4; - - i = nextI(data, i, finish); - - while (i < finish) - { - b1 = decodingTable[data[i++]]; - - i = nextI(data, i, finish); - - b2 = decodingTable[data[i++]]; - - i = nextI(data, i, finish); - - b3 = decodingTable[data[i++]]; - - i = nextI(data, i, finish); - - b4 = decodingTable[data[i++]]; - - if ((b1 | b2 | b3 | b4) >= 0x80) - throw new IOException("invalid characters encountered in base64 data"); - - outStream.WriteByte((byte)((b1 << 2) | (b2 >> 4))); - outStream.WriteByte((byte)((b2 << 4) | (b3 >> 2))); - outStream.WriteByte((byte)((b3 << 6) | b4)); - - length += 3; - - i = nextI(data, i, finish); - } - - length += decodeLastBlock(outStream, data[end - 4], data[end - 3], data[end - 2], data[end - 1]); - - return length; - } - - private int decodeLastBlock( - Stream outStream, - char c1, - char c2, - char c3, - char c4) - { - if (c3 == padding) - { - byte b1 = decodingTable[c1]; - byte b2 = decodingTable[c2]; - - if ((b1 | b2) >= 0x80) - throw new IOException("invalid characters encountered at end of base64 data"); - - outStream.WriteByte((byte)((b1 << 2) | (b2 >> 4))); - - return 1; - } - - if (c4 == padding) - { - byte b1 = decodingTable[c1]; - byte b2 = decodingTable[c2]; - byte b3 = decodingTable[c3]; - - if ((b1 | b2 | b3) >= 0x80) - throw new IOException("invalid characters encountered at end of base64 data"); - - outStream.WriteByte((byte)((b1 << 2) | (b2 >> 4))); - outStream.WriteByte((byte)((b2 << 4) | (b3 >> 2))); - - return 2; - } - - { - byte b1 = decodingTable[c1]; - byte b2 = decodingTable[c2]; - byte b3 = decodingTable[c3]; - byte b4 = decodingTable[c4]; - - if ((b1 | b2 | b3 | b4) >= 0x80) - throw new IOException("invalid characters encountered at end of base64 data"); - - outStream.WriteByte((byte)((b1 << 2) | (b2 >> 4))); - outStream.WriteByte((byte)((b2 << 4) | (b3 >> 2))); - outStream.WriteByte((byte)((b3 << 6) | b4)); - - return 3; - } - } - - private int nextI(string data, int i, int finish) - { - while ((i < finish) && ignore(data[i])) - { - i++; - } - return i; - } - } -} diff --git a/bc-sharp-crypto/src/util/encoders/BufferedDecoder.cs b/bc-sharp-crypto/src/util/encoders/BufferedDecoder.cs deleted file mode 100644 index 633cf1e..0000000 --- a/bc-sharp-crypto/src/util/encoders/BufferedDecoder.cs +++ /dev/null @@ -1,117 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Utilities.Encoders -{ - /// - /// A buffering class to allow translation from one format to another to - /// be done in discrete chunks. - /// - public class BufferedDecoder - { - internal byte[] buffer; - internal int bufOff; - - internal ITranslator translator; - - /// - /// Create a buffered Decoder. - /// - /// The translater to use. - /// The size of the buffer. - public BufferedDecoder( - ITranslator translator, - int bufferSize) - { - this.translator = translator; - - if ((bufferSize % translator.GetEncodedBlockSize()) != 0) - { - throw new ArgumentException("buffer size not multiple of input block size"); - } - - buffer = new byte[bufferSize]; -// bufOff = 0; - } - - /// - /// Process one byte of data. - /// - /// Data in. - /// Byte array for the output. - /// The offset in the output byte array to start writing from. - /// The amount of output bytes. - public int ProcessByte( - byte input, - byte[] output, - int outOff) - { - int resultLen = 0; - - buffer[bufOff++] = input; - - if (bufOff == buffer.Length) - { - resultLen = translator.Decode(buffer, 0, buffer.Length, output, outOff); - bufOff = 0; - } - - return resultLen; - } - - - /// - /// Process data from a byte array. - /// - /// The input data. - /// Start position within input data array. - /// Amount of data to process from input data array. - /// Array to store output. - /// Position in output array to start writing from. - /// The amount of output bytes. - public int ProcessBytes( - byte[] input, - int inOff, - int len, - byte[] outBytes, - int outOff) - { - if (len < 0) - { - throw new ArgumentException("Can't have a negative input length!"); - } - - int resultLen = 0; - int gapLen = buffer.Length - bufOff; - - if (len > gapLen) - { - Array.Copy(input, inOff, buffer, bufOff, gapLen); - - resultLen += translator.Decode(buffer, 0, buffer.Length, outBytes, outOff); - - bufOff = 0; - - len -= gapLen; - inOff += gapLen; - outOff += resultLen; - - int chunkSize = len - (len % buffer.Length); - - resultLen += translator.Decode(input, inOff, chunkSize, outBytes, outOff); - - len -= chunkSize; - inOff += chunkSize; - } - - if (len != 0) - { - Array.Copy(input, inOff, buffer, bufOff, len); - - bufOff += len; - } - - return resultLen; - } - } - -} diff --git a/bc-sharp-crypto/src/util/encoders/BufferedEncoder.cs b/bc-sharp-crypto/src/util/encoders/BufferedEncoder.cs deleted file mode 100644 index 5c3b1ab..0000000 --- a/bc-sharp-crypto/src/util/encoders/BufferedEncoder.cs +++ /dev/null @@ -1,117 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Utilities.Encoders -{ - /// - /// A class that allows encoding of data using a specific encoder to be processed in chunks. - /// - public class BufferedEncoder - { - internal byte[] Buffer; - internal int bufOff; - - internal ITranslator translator; - - - /// - /// Create. - /// - /// The translator to use. - /// Size of the chunks. - public BufferedEncoder( - ITranslator translator, - int bufferSize) - { - this.translator = translator; - - if ((bufferSize % translator.GetEncodedBlockSize()) != 0) - { - throw new ArgumentException("buffer size not multiple of input block size"); - } - - Buffer = new byte[bufferSize]; -// bufOff = 0; - } - - - /// - /// Process one byte of data. - /// - /// The byte. - /// An array to store output in. - /// Offset within output array to start writing from. - /// - public int ProcessByte( - byte input, - byte[] outBytes, - int outOff) - { - int resultLen = 0; - - Buffer[bufOff++] = input; - - if (bufOff == Buffer.Length) - { - resultLen = translator.Encode(Buffer, 0, Buffer.Length, outBytes, outOff); - bufOff = 0; - } - - return resultLen; - } - - /// - /// Process data from a byte array. - /// - /// Input data Byte array containing data to be processed. - /// Start position within input data array. - /// Amount of input data to be processed. - /// Output data array. - /// Offset within output data array to start writing to. - /// The amount of data written. - public int ProcessBytes( - byte[] input, - int inOff, - int len, - byte[] outBytes, - int outOff) - { - if (len < 0) - { - throw new ArgumentException("Can't have a negative input length!"); - } - - int resultLen = 0; - int gapLen = Buffer.Length - bufOff; - - if (len > gapLen) - { - Array.Copy(input, inOff, Buffer, bufOff, gapLen); - - resultLen += translator.Encode(Buffer, 0, Buffer.Length, outBytes, outOff); - - bufOff = 0; - - len -= gapLen; - inOff += gapLen; - outOff += resultLen; - - int chunkSize = len - (len % Buffer.Length); - - resultLen += translator.Encode(input, inOff, chunkSize, outBytes, outOff); - - len -= chunkSize; - inOff += chunkSize; - } - - if (len != 0) - { - Array.Copy(input, inOff, Buffer, bufOff, len); - - bufOff += len; - } - - return resultLen; - } - } - -} diff --git a/bc-sharp-crypto/src/util/encoders/Hex.cs b/bc-sharp-crypto/src/util/encoders/Hex.cs deleted file mode 100644 index 3540a9d..0000000 --- a/bc-sharp-crypto/src/util/encoders/Hex.cs +++ /dev/null @@ -1,130 +0,0 @@ -using System; -using System.IO; -using System.Text; - -namespace Org.BouncyCastle.Utilities.Encoders -{ - /// - /// Class to decode and encode Hex. - /// - public sealed class Hex - { - private static readonly IEncoder encoder = new HexEncoder(); - - private Hex() - { - } - - public static string ToHexString( - byte[] data) - { - return ToHexString(data, 0, data.Length); - } - - public static string ToHexString( - byte[] data, - int off, - int length) - { - byte[] hex = Encode(data, off, length); - return Strings.FromAsciiByteArray(hex); - } - - /** - * encode the input data producing a Hex encoded byte array. - * - * @return a byte array containing the Hex encoded data. - */ - public static byte[] Encode( - byte[] data) - { - return Encode(data, 0, data.Length); - } - - /** - * encode the input data producing a Hex encoded byte array. - * - * @return a byte array containing the Hex encoded data. - */ - public static byte[] Encode( - byte[] data, - int off, - int length) - { - MemoryStream bOut = new MemoryStream(length * 2); - - encoder.Encode(data, off, length, bOut); - - return bOut.ToArray(); - } - - /** - * Hex encode the byte data writing it to the given output stream. - * - * @return the number of bytes produced. - */ - public static int Encode( - byte[] data, - Stream outStream) - { - return encoder.Encode(data, 0, data.Length, outStream); - } - - /** - * Hex encode the byte data writing it to the given output stream. - * - * @return the number of bytes produced. - */ - public static int Encode( - byte[] data, - int off, - int length, - Stream outStream) - { - return encoder.Encode(data, off, length, outStream); - } - - /** - * decode the Hex encoded input data. It is assumed the input data is valid. - * - * @return a byte array representing the decoded data. - */ - public static byte[] Decode( - byte[] data) - { - MemoryStream bOut = new MemoryStream((data.Length + 1) / 2); - - encoder.Decode(data, 0, data.Length, bOut); - - return bOut.ToArray(); - } - - /** - * decode the Hex encoded string data - whitespace will be ignored. - * - * @return a byte array representing the decoded data. - */ - public static byte[] Decode( - string data) - { - MemoryStream bOut = new MemoryStream((data.Length + 1) / 2); - - encoder.DecodeString(data, bOut); - - return bOut.ToArray(); - } - - /** - * decode the Hex encoded string data writing it to the given output stream, - * whitespace characters will be ignored. - * - * @return the number of bytes produced. - */ - public static int Decode( - string data, - Stream outStream) - { - return encoder.DecodeString(data, outStream); - } - } -} diff --git a/bc-sharp-crypto/src/util/encoders/HexEncoder.cs b/bc-sharp-crypto/src/util/encoders/HexEncoder.cs deleted file mode 100644 index af526e0..0000000 --- a/bc-sharp-crypto/src/util/encoders/HexEncoder.cs +++ /dev/null @@ -1,176 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Utilities.Encoders -{ - public class HexEncoder - : IEncoder - { - protected readonly byte[] encodingTable = - { - (byte)'0', (byte)'1', (byte)'2', (byte)'3', (byte)'4', (byte)'5', (byte)'6', (byte)'7', - (byte)'8', (byte)'9', (byte)'a', (byte)'b', (byte)'c', (byte)'d', (byte)'e', (byte)'f' - }; - - /* - * set up the decoding table. - */ - protected readonly byte[] decodingTable = new byte[128]; - - protected void InitialiseDecodingTable() - { - Arrays.Fill(decodingTable, (byte)0xff); - - for (int i = 0; i < encodingTable.Length; i++) - { - decodingTable[encodingTable[i]] = (byte)i; - } - - decodingTable['A'] = decodingTable['a']; - decodingTable['B'] = decodingTable['b']; - decodingTable['C'] = decodingTable['c']; - decodingTable['D'] = decodingTable['d']; - decodingTable['E'] = decodingTable['e']; - decodingTable['F'] = decodingTable['f']; - } - - public HexEncoder() - { - InitialiseDecodingTable(); - } - - /** - * encode the input data producing a Hex output stream. - * - * @return the number of bytes produced. - */ - public int Encode( - byte[] data, - int off, - int length, - Stream outStream) - { - for (int i = off; i < (off + length); i++) - { - int v = data[i]; - - outStream.WriteByte(encodingTable[v >> 4]); - outStream.WriteByte(encodingTable[v & 0xf]); - } - - return length * 2; - } - - private static bool Ignore(char c) - { - return c == '\n' || c =='\r' || c == '\t' || c == ' '; - } - - /** - * decode the Hex encoded byte data writing it to the given output stream, - * whitespace characters will be ignored. - * - * @return the number of bytes produced. - */ - public int Decode( - byte[] data, - int off, - int length, - Stream outStream) - { - byte b1, b2; - int outLen = 0; - int end = off + length; - - while (end > off) - { - if (!Ignore((char)data[end - 1])) - { - break; - } - - end--; - } - - int i = off; - while (i < end) - { - while (i < end && Ignore((char)data[i])) - { - i++; - } - - b1 = decodingTable[data[i++]]; - - while (i < end && Ignore((char)data[i])) - { - i++; - } - - b2 = decodingTable[data[i++]]; - - if ((b1 | b2) >= 0x80) - throw new IOException("invalid characters encountered in Hex data"); - - outStream.WriteByte((byte)((b1 << 4) | b2)); - - outLen++; - } - - return outLen; - } - - /** - * decode the Hex encoded string data writing it to the given output stream, - * whitespace characters will be ignored. - * - * @return the number of bytes produced. - */ - public int DecodeString( - string data, - Stream outStream) - { - byte b1, b2; - int length = 0; - - int end = data.Length; - - while (end > 0) - { - if (!Ignore(data[end - 1])) - { - break; - } - - end--; - } - - int i = 0; - while (i < end) - { - while (i < end && Ignore(data[i])) - { - i++; - } - - b1 = decodingTable[data[i++]]; - - while (i < end && Ignore(data[i])) - { - i++; - } - - b2 = decodingTable[data[i++]]; - - if ((b1 | b2) >= 0x80) - throw new IOException("invalid characters encountered in Hex data"); - - outStream.WriteByte((byte)((b1 << 4) | b2)); - - length++; - } - - return length; - } - } -} diff --git a/bc-sharp-crypto/src/util/encoders/HexTranslator.cs b/bc-sharp-crypto/src/util/encoders/HexTranslator.cs deleted file mode 100644 index 9775b69..0000000 --- a/bc-sharp-crypto/src/util/encoders/HexTranslator.cs +++ /dev/null @@ -1,108 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Utilities.Encoders -{ - /// - /// A hex translator. - /// - public class HexTranslator : ITranslator - { - private static readonly byte[] hexTable = - { - (byte)'0', (byte)'1', (byte)'2', (byte)'3', (byte)'4', (byte)'5', (byte)'6', (byte)'7', - (byte)'8', (byte)'9', (byte)'a', (byte)'b', (byte)'c', (byte)'d', (byte)'e', (byte)'f' - }; - - /// - /// Return encoded block size. - /// - /// 2 - public int GetEncodedBlockSize() - { - return 2; - } - - /// - /// Encode some data. - /// - /// Input data array. - /// Start position within input data array. - /// The amount of data to process. - /// The output data array. - /// The offset within the output data array to start writing from. - /// Amount of data encoded. - public int Encode( - byte[] input, - int inOff, - int length, - byte[] outBytes, - int outOff) - { - for (int i = 0, j = 0; i < length; i++, j += 2) - { - outBytes[outOff + j] = hexTable[(input[inOff] >> 4) & 0x0f]; - outBytes[outOff + j + 1] = hexTable[input[inOff] & 0x0f]; - - inOff++; - } - - return length * 2; - } - - /// - /// Returns the decoded block size. - /// - /// 1 - public int GetDecodedBlockSize() - { - return 1; - } - - /// - /// Decode data from a byte array. - /// - /// The input data array. - /// Start position within input data array. - /// The amounty of data to process. - /// The output data array. - /// The position within the output data array to start writing from. - /// The amount of data written. - public int Decode( - byte[] input, - int inOff, - int length, - byte[] outBytes, - int outOff) - { - int halfLength = length / 2; - byte left, right; - for (int i = 0; i < halfLength; i++) - { - left = input[inOff + i * 2]; - right = input[inOff + i * 2 + 1]; - - if (left < (byte)'a') - { - outBytes[outOff] = (byte)((left - '0') << 4); - } - else - { - outBytes[outOff] = (byte)((left - 'a' + 10) << 4); - } - if (right < (byte)'a') - { - outBytes[outOff] += (byte)(right - '0'); - } - else - { - outBytes[outOff] += (byte)(right - 'a' + 10); - } - - outOff++; - } - - return halfLength; - } - } - -} diff --git a/bc-sharp-crypto/src/util/encoders/IEncoder.cs b/bc-sharp-crypto/src/util/encoders/IEncoder.cs deleted file mode 100644 index 5887d5d..0000000 --- a/bc-sharp-crypto/src/util/encoders/IEncoder.cs +++ /dev/null @@ -1,18 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Utilities.Encoders -{ - /** - * Encode and decode byte arrays (typically from binary to 7-bit ASCII - * encodings). - */ - public interface IEncoder - { - int Encode(byte[] data, int off, int length, Stream outStream); - - int Decode(byte[] data, int off, int length, Stream outStream); - - int DecodeString(string data, Stream outStream); - } -} diff --git a/bc-sharp-crypto/src/util/encoders/Translator.cs b/bc-sharp-crypto/src/util/encoders/Translator.cs deleted file mode 100644 index 10bd24b..0000000 --- a/bc-sharp-crypto/src/util/encoders/Translator.cs +++ /dev/null @@ -1,19 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Utilities.Encoders -{ - /// - /// Translator interface. - /// - public interface ITranslator - { - int GetEncodedBlockSize(); - - int Encode(byte[] input, int inOff, int length, byte[] outBytes, int outOff); - - int GetDecodedBlockSize(); - - int Decode(byte[] input, int inOff, int length, byte[] outBytes, int outOff); - } - -} diff --git a/bc-sharp-crypto/src/util/encoders/UrlBase64.cs b/bc-sharp-crypto/src/util/encoders/UrlBase64.cs deleted file mode 100644 index 94195ef..0000000 --- a/bc-sharp-crypto/src/util/encoders/UrlBase64.cs +++ /dev/null @@ -1,127 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Utilities.Encoders -{ - /** - * Convert binary data to and from UrlBase64 encoding. This is identical to - * Base64 encoding, except that the padding character is "." and the other - * non-alphanumeric characters are "-" and "_" instead of "+" and "/". - *

    - * The purpose of UrlBase64 encoding is to provide a compact encoding of binary - * data that is safe for use as an URL parameter. Base64 encoding does not - * produce encoded values that are safe for use in URLs, since "/" can be - * interpreted as a path delimiter; "+" is the encoded form of a space; and - * "=" is used to separate a name from the corresponding value in an URL - * parameter. - *

    - */ - public class UrlBase64 - { - private static readonly IEncoder encoder = new UrlBase64Encoder(); - - /** - * Encode the input data producing a URL safe base 64 encoded byte array. - * - * @return a byte array containing the URL safe base 64 encoded data. - */ - public static byte[] Encode( - byte[] data) - { - MemoryStream bOut = new MemoryStream(); - - try - { - encoder.Encode(data, 0, data.Length, bOut); - } - catch (IOException e) - { - throw new Exception("exception encoding URL safe base64 string: " + e.Message, e); - } - - return bOut.ToArray(); - } - - /** - * Encode the byte data writing it to the given output stream. - * - * @return the number of bytes produced. - */ - public static int Encode( - byte[] data, - Stream outStr) - { - return encoder.Encode(data, 0, data.Length, outStr); - } - - /** - * Decode the URL safe base 64 encoded input data - white space will be ignored. - * - * @return a byte array representing the decoded data. - */ - public static byte[] Decode( - byte[] data) - { - MemoryStream bOut = new MemoryStream(); - - try - { - encoder.Decode(data, 0, data.Length, bOut); - } - catch (IOException e) - { - throw new Exception("exception decoding URL safe base64 string: " + e.Message, e); - } - - return bOut.ToArray(); - } - - /** - * decode the URL safe base 64 encoded byte data writing it to the given output stream, - * whitespace characters will be ignored. - * - * @return the number of bytes produced. - */ - public static int Decode( - byte[] data, - Stream outStr) - { - return encoder.Decode(data, 0, data.Length, outStr); - } - - /** - * decode the URL safe base 64 encoded string data - whitespace will be ignored. - * - * @return a byte array representing the decoded data. - */ - public static byte[] Decode( - string data) - { - MemoryStream bOut = new MemoryStream(); - - try - { - encoder.DecodeString(data, bOut); - } - catch (IOException e) - { - throw new Exception("exception decoding URL safe base64 string: " + e.Message, e); - } - - return bOut.ToArray(); - } - - /** - * Decode the URL safe base 64 encoded string data writing it to the given output stream, - * whitespace characters will be ignored. - * - * @return the number of bytes produced. - */ - public static int Decode( - string data, - Stream outStr) - { - return encoder.DecodeString(data, outStr); - } - } -} diff --git a/bc-sharp-crypto/src/util/encoders/UrlBase64Encoder.cs b/bc-sharp-crypto/src/util/encoders/UrlBase64Encoder.cs deleted file mode 100644 index 5611a83..0000000 --- a/bc-sharp-crypto/src/util/encoders/UrlBase64Encoder.cs +++ /dev/null @@ -1,31 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Utilities.Encoders -{ - /** - * Convert binary data to and from UrlBase64 encoding. This is identical to - * Base64 encoding, except that the padding character is "." and the other - * non-alphanumeric characters are "-" and "_" instead of "+" and "/". - *

    - * The purpose of UrlBase64 encoding is to provide a compact encoding of binary - * data that is safe for use as an URL parameter. Base64 encoding does not - * produce encoded values that are safe for use in URLs, since "/" can be - * interpreted as a path delimiter; "+" is the encoded form of a space; and - * "=" is used to separate a name from the corresponding value in an URL - * parameter. - *

    - */ - public class UrlBase64Encoder - : Base64Encoder - { - public UrlBase64Encoder() - { - encodingTable[encodingTable.Length - 2] = (byte) '-'; - encodingTable[encodingTable.Length - 1] = (byte) '_'; - padding = (byte) '.'; - // we must re-create the decoding table with the new encoded values. - InitialiseDecodingTable(); - } - } -} \ No newline at end of file diff --git a/bc-sharp-crypto/src/util/io/BaseInputStream.cs b/bc-sharp-crypto/src/util/io/BaseInputStream.cs deleted file mode 100644 index a5613d8..0000000 --- a/bc-sharp-crypto/src/util/io/BaseInputStream.cs +++ /dev/null @@ -1,64 +0,0 @@ -using System; -using System.Diagnostics; -using System.IO; - -namespace Org.BouncyCastle.Utilities.IO -{ - public abstract class BaseInputStream : Stream - { - private bool closed; - - public sealed override bool CanRead { get { return !closed; } } - public sealed override bool CanSeek { get { return false; } } - public sealed override bool CanWrite { get { return false; } } - -#if PORTABLE - protected override void Dispose(bool disposing) - { - if (disposing) - { - closed = true; - } - base.Dispose(disposing); - } -#else - public override void Close() - { - closed = true; - base.Close(); - } -#endif - - public sealed override void Flush() {} - public sealed override long Length { get { throw new NotSupportedException(); } } - public sealed override long Position - { - get { throw new NotSupportedException(); } - set { throw new NotSupportedException(); } - } - - public override int Read(byte[] buffer, int offset, int count) - { - int pos = offset; - try - { - int end = offset + count; - while (pos < end) - { - int b = ReadByte(); - if (b == -1) break; - buffer[pos++] = (byte) b; - } - } - catch (IOException) - { - if (pos == offset) throw; - } - return pos - offset; - } - - public sealed override long Seek(long offset, SeekOrigin origin) { throw new NotSupportedException(); } - public sealed override void SetLength(long value) { throw new NotSupportedException(); } - public sealed override void Write(byte[] buffer, int offset, int count) { throw new NotSupportedException(); } - } -} diff --git a/bc-sharp-crypto/src/util/io/BaseOutputStream.cs b/bc-sharp-crypto/src/util/io/BaseOutputStream.cs deleted file mode 100644 index 0dbe821..0000000 --- a/bc-sharp-crypto/src/util/io/BaseOutputStream.cs +++ /dev/null @@ -1,69 +0,0 @@ -using System; -using System.Diagnostics; -using System.IO; - -namespace Org.BouncyCastle.Utilities.IO -{ - public abstract class BaseOutputStream : Stream - { - private bool closed; - - public sealed override bool CanRead { get { return false; } } - public sealed override bool CanSeek { get { return false; } } - public sealed override bool CanWrite { get { return !closed; } } - -#if PORTABLE - protected override void Dispose(bool disposing) - { - if (disposing) - { - closed = true; - } - base.Dispose(disposing); - } -#else - public override void Close() - { - closed = true; - base.Close(); - } -#endif - - public override void Flush() { } - public sealed override long Length { get { throw new NotSupportedException(); } } - public sealed override long Position - { - get { throw new NotSupportedException(); } - set { throw new NotSupportedException(); } - } - public sealed override int Read(byte[] buffer, int offset, int count) { throw new NotSupportedException(); } - public sealed override long Seek(long offset, SeekOrigin origin) { throw new NotSupportedException(); } - public sealed override void SetLength(long value) { throw new NotSupportedException(); } - - public override void Write(byte[] buffer, int offset, int count) - { - Debug.Assert(buffer != null); - Debug.Assert(0 <= offset && offset <= buffer.Length); - Debug.Assert(count >= 0); - - int end = offset + count; - - Debug.Assert(0 <= end && end <= buffer.Length); - - for (int i = offset; i < end; ++i) - { - this.WriteByte(buffer[i]); - } - } - - public virtual void Write(params byte[] buffer) - { - Write(buffer, 0, buffer.Length); - } - - public override void WriteByte(byte b) - { - Write(new byte[]{ b }, 0, 1); - } - } -} diff --git a/bc-sharp-crypto/src/util/io/FilterStream.cs b/bc-sharp-crypto/src/util/io/FilterStream.cs deleted file mode 100644 index a92dee3..0000000 --- a/bc-sharp-crypto/src/util/io/FilterStream.cs +++ /dev/null @@ -1,78 +0,0 @@ -using System.IO; - -namespace Org.BouncyCastle.Utilities.IO -{ - public class FilterStream : Stream - { - public FilterStream(Stream s) - { - this.s = s; - } - public override bool CanRead - { - get { return s.CanRead; } - } - public override bool CanSeek - { - get { return s.CanSeek; } - } - public override bool CanWrite - { - get { return s.CanWrite; } - } - public override long Length - { - get { return s.Length; } - } - public override long Position - { - get { return s.Position; } - set { s.Position = value; } - } -#if PORTABLE - protected override void Dispose(bool disposing) - { - if (disposing) - { - Platform.Dispose(s); - } - base.Dispose(disposing); - } -#else - public override void Close() - { - Platform.Dispose(s); - base.Close(); - } -#endif - public override void Flush() - { - s.Flush(); - } - public override long Seek(long offset, SeekOrigin origin) - { - return s.Seek(offset, origin); - } - public override void SetLength(long value) - { - s.SetLength(value); - } - public override int Read(byte[] buffer, int offset, int count) - { - return s.Read(buffer, offset, count); - } - public override int ReadByte() - { - return s.ReadByte(); - } - public override void Write(byte[] buffer, int offset, int count) - { - s.Write(buffer, offset, count); - } - public override void WriteByte(byte value) - { - s.WriteByte(value); - } - protected readonly Stream s; - } -} diff --git a/bc-sharp-crypto/src/util/io/NullOutputStream.cs b/bc-sharp-crypto/src/util/io/NullOutputStream.cs deleted file mode 100644 index 13877fa..0000000 --- a/bc-sharp-crypto/src/util/io/NullOutputStream.cs +++ /dev/null @@ -1,18 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Utilities.IO -{ - internal class NullOutputStream - : BaseOutputStream - { - public override void WriteByte(byte b) - { - // do nothing - } - - public override void Write(byte[] buffer, int offset, int count) - { - // do nothing - } - } -} diff --git a/bc-sharp-crypto/src/util/io/PushbackStream.cs b/bc-sharp-crypto/src/util/io/PushbackStream.cs deleted file mode 100644 index 9546942..0000000 --- a/bc-sharp-crypto/src/util/io/PushbackStream.cs +++ /dev/null @@ -1,52 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Asn1.Utilities; - -namespace Org.BouncyCastle.Utilities.IO -{ - public class PushbackStream - : FilterStream - { - private int buf = -1; - - public PushbackStream( - Stream s) - : base(s) - { - } - - public override int ReadByte() - { - if (buf != -1) - { - int tmp = buf; - buf = -1; - return tmp; - } - - return base.ReadByte(); - } - - public override int Read(byte[] buffer, int offset, int count) - { - if (buf != -1 && count > 0) - { - // TODO Can this case be made more efficient? - buffer[offset] = (byte) buf; - buf = -1; - return 1; - } - - return base.Read(buffer, offset, count); - } - - public virtual void Unread(int b) - { - if (buf != -1) - throw new InvalidOperationException("Can only push back one byte"); - - buf = b & 0xFF; - } - } -} diff --git a/bc-sharp-crypto/src/util/io/StreamOverflowException.cs b/bc-sharp-crypto/src/util/io/StreamOverflowException.cs deleted file mode 100644 index 36d21e2..0000000 --- a/bc-sharp-crypto/src/util/io/StreamOverflowException.cs +++ /dev/null @@ -1,30 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Utilities.IO -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class StreamOverflowException - : IOException - { - public StreamOverflowException() - : base() - { - } - - public StreamOverflowException( - string message) - : base(message) - { - } - - public StreamOverflowException( - string message, - Exception exception) - : base(message, exception) - { - } - } -} diff --git a/bc-sharp-crypto/src/util/io/Streams.cs b/bc-sharp-crypto/src/util/io/Streams.cs deleted file mode 100644 index cc7fa92..0000000 --- a/bc-sharp-crypto/src/util/io/Streams.cs +++ /dev/null @@ -1,100 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Utilities.IO -{ - public sealed class Streams - { - private const int BufferSize = 512; - - private Streams() - { - } - - public static void Drain(Stream inStr) - { - byte[] bs = new byte[BufferSize]; - while (inStr.Read(bs, 0, bs.Length) > 0) - { - } - } - - public static byte[] ReadAll(Stream inStr) - { - MemoryStream buf = new MemoryStream(); - PipeAll(inStr, buf); - return buf.ToArray(); - } - - public static byte[] ReadAllLimited(Stream inStr, int limit) - { - MemoryStream buf = new MemoryStream(); - PipeAllLimited(inStr, limit, buf); - return buf.ToArray(); - } - - public static int ReadFully(Stream inStr, byte[] buf) - { - return ReadFully(inStr, buf, 0, buf.Length); - } - - public static int ReadFully(Stream inStr, byte[] buf, int off, int len) - { - int totalRead = 0; - while (totalRead < len) - { - int numRead = inStr.Read(buf, off + totalRead, len - totalRead); - if (numRead < 1) - break; - totalRead += numRead; - } - return totalRead; - } - - public static void PipeAll(Stream inStr, Stream outStr) - { - byte[] bs = new byte[BufferSize]; - int numRead; - while ((numRead = inStr.Read(bs, 0, bs.Length)) > 0) - { - outStr.Write(bs, 0, numRead); - } - } - - /// - /// Pipe all bytes from inStr to outStr, throwing StreamFlowException if greater - /// than limit bytes in inStr. - /// - /// - /// A - /// - /// - /// A - /// - /// - /// A - /// - /// The number of bytes actually transferred, if not greater than limit - /// - public static long PipeAllLimited(Stream inStr, long limit, Stream outStr) - { - byte[] bs = new byte[BufferSize]; - long total = 0; - int numRead; - while ((numRead = inStr.Read(bs, 0, bs.Length)) > 0) - { - if ((limit - total) < numRead) - throw new StreamOverflowException("Data Overflow"); - total += numRead; - outStr.Write(bs, 0, numRead); - } - return total; - } - - /// - public static void WriteBufTo(MemoryStream buf, Stream output) - { - buf.WriteTo(output); - } - } -} diff --git a/bc-sharp-crypto/src/util/io/TeeInputStream.cs b/bc-sharp-crypto/src/util/io/TeeInputStream.cs deleted file mode 100644 index 6996f3f..0000000 --- a/bc-sharp-crypto/src/util/io/TeeInputStream.cs +++ /dev/null @@ -1,64 +0,0 @@ -using System; -using System.Diagnostics; -using System.IO; - -namespace Org.BouncyCastle.Utilities.IO -{ - public class TeeInputStream - : BaseInputStream - { - private readonly Stream input, tee; - - public TeeInputStream(Stream input, Stream tee) - { - Debug.Assert(input.CanRead); - Debug.Assert(tee.CanWrite); - - this.input = input; - this.tee = tee; - } - -#if PORTABLE - protected override void Dispose(bool disposing) - { - if (disposing) - { - Platform.Dispose(input); - Platform.Dispose(tee); - } - base.Dispose(disposing); - } -#else - public override void Close() - { - Platform.Dispose(input); - Platform.Dispose(tee); - base.Close(); - } -#endif - - public override int Read(byte[] buf, int off, int len) - { - int i = input.Read(buf, off, len); - - if (i > 0) - { - tee.Write(buf, off, i); - } - - return i; - } - - public override int ReadByte() - { - int i = input.ReadByte(); - - if (i >= 0) - { - tee.WriteByte((byte)i); - } - - return i; - } - } -} diff --git a/bc-sharp-crypto/src/util/io/TeeOutputStream.cs b/bc-sharp-crypto/src/util/io/TeeOutputStream.cs deleted file mode 100644 index a6c7fd5..0000000 --- a/bc-sharp-crypto/src/util/io/TeeOutputStream.cs +++ /dev/null @@ -1,52 +0,0 @@ -using System; -using System.Diagnostics; -using System.IO; - -namespace Org.BouncyCastle.Utilities.IO -{ - public class TeeOutputStream - : BaseOutputStream - { - private readonly Stream output, tee; - - public TeeOutputStream(Stream output, Stream tee) - { - Debug.Assert(output.CanWrite); - Debug.Assert(tee.CanWrite); - - this.output = output; - this.tee = tee; - } - -#if PORTABLE - protected override void Dispose(bool disposing) - { - if (disposing) - { - Platform.Dispose(output); - Platform.Dispose(tee); - } - base.Dispose(disposing); - } -#else - public override void Close() - { - Platform.Dispose(output); - Platform.Dispose(tee); - base.Close(); - } -#endif - - public override void Write(byte[] buffer, int offset, int count) - { - output.Write(buffer, offset, count); - tee.Write(buffer, offset, count); - } - - public override void WriteByte(byte b) - { - output.WriteByte(b); - tee.WriteByte(b); - } - } -} diff --git a/bc-sharp-crypto/src/util/io/pem/PemGenerationException.cs b/bc-sharp-crypto/src/util/io/pem/PemGenerationException.cs deleted file mode 100644 index 6b39585..0000000 --- a/bc-sharp-crypto/src/util/io/pem/PemGenerationException.cs +++ /dev/null @@ -1,29 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Utilities.IO.Pem -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class PemGenerationException - : Exception - { - public PemGenerationException() - : base() - { - } - - public PemGenerationException( - string message) - : base(message) - { - } - - public PemGenerationException( - string message, - Exception exception) - : base(message, exception) - { - } - } -} diff --git a/bc-sharp-crypto/src/util/io/pem/PemHeader.cs b/bc-sharp-crypto/src/util/io/pem/PemHeader.cs deleted file mode 100644 index 72da8a4..0000000 --- a/bc-sharp-crypto/src/util/io/pem/PemHeader.cs +++ /dev/null @@ -1,55 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Utilities.IO.Pem -{ - public class PemHeader - { - private string name; - private string val; - - public PemHeader(string name, string val) - { - this.name = name; - this.val = val; - } - - public virtual string Name - { - get { return name; } - } - - public virtual string Value - { - get { return val; } - } - - public override int GetHashCode() - { - return GetHashCode(this.name) + 31 * GetHashCode(this.val); - } - - public override bool Equals(object obj) - { - if (obj == this) - return true; - - if (!(obj is PemHeader)) - return false; - - PemHeader other = (PemHeader)obj; - - return Platform.Equals(this.name, other.name) - && Platform.Equals(this.val, other.val); - } - - private int GetHashCode(string s) - { - if (s == null) - { - return 1; - } - - return s.GetHashCode(); - } - } -} diff --git a/bc-sharp-crypto/src/util/io/pem/PemObject.cs b/bc-sharp-crypto/src/util/io/pem/PemObject.cs deleted file mode 100644 index 41212f9..0000000 --- a/bc-sharp-crypto/src/util/io/pem/PemObject.cs +++ /dev/null @@ -1,47 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.Utilities.IO.Pem -{ - public class PemObject - : PemObjectGenerator - { - private string type; - private IList headers; - private byte[] content; - - public PemObject(string type, byte[] content) - : this(type, Platform.CreateArrayList(), content) - { - } - - public PemObject(String type, IList headers, byte[] content) - { - this.type = type; - this.headers = Platform.CreateArrayList(headers); - this.content = content; - } - - public string Type - { - get { return type; } - } - - public IList Headers - { - get { return headers; } - } - - public byte[] Content - { - get { return content; } - } - - public PemObject Generate() - { - return this; - } - } -} diff --git a/bc-sharp-crypto/src/util/io/pem/PemObjectGenerator.cs b/bc-sharp-crypto/src/util/io/pem/PemObjectGenerator.cs deleted file mode 100644 index 6f9bfc1..0000000 --- a/bc-sharp-crypto/src/util/io/pem/PemObjectGenerator.cs +++ /dev/null @@ -1,13 +0,0 @@ -using System; - -namespace Org.BouncyCastle.Utilities.IO.Pem -{ - public interface PemObjectGenerator - { - /// - /// A - /// - /// - PemObject Generate(); - } -} diff --git a/bc-sharp-crypto/src/util/io/pem/PemObjectParser.cs b/bc-sharp-crypto/src/util/io/pem/PemObjectParser.cs deleted file mode 100644 index 91d26dc..0000000 --- a/bc-sharp-crypto/src/util/io/pem/PemObjectParser.cs +++ /dev/null @@ -1,17 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Utilities.IO.Pem -{ - public interface PemObjectParser - { - /// - /// A - /// - /// - /// A - /// - /// - object ParseObject(PemObject obj); - } -} diff --git a/bc-sharp-crypto/src/util/io/pem/PemReader.cs b/bc-sharp-crypto/src/util/io/pem/PemReader.cs deleted file mode 100644 index bf712b6..0000000 --- a/bc-sharp-crypto/src/util/io/pem/PemReader.cs +++ /dev/null @@ -1,96 +0,0 @@ -using System; -using System.Collections; -using System.IO; -using System.Text; - -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Utilities.IO.Pem -{ - public class PemReader - { - private const string BeginString = "-----BEGIN "; - private const string EndString = "-----END "; - - private readonly TextReader reader; - - public PemReader(TextReader reader) - { - if (reader == null) - throw new ArgumentNullException("reader"); - - this.reader = reader; - } - - public TextReader Reader - { - get { return reader; } - } - - /// - /// A - /// - /// - public PemObject ReadPemObject() - { - string line = reader.ReadLine(); - - if (line != null && Platform.StartsWith(line, BeginString)) - { - line = line.Substring(BeginString.Length); - int index = line.IndexOf('-'); - string type = line.Substring(0, index); - - if (index > 0) - return LoadObject(type); - } - - return null; - } - - private PemObject LoadObject(string type) - { - string endMarker = EndString + type; - IList headers = Platform.CreateArrayList(); - StringBuilder buf = new StringBuilder(); - - string line; - while ((line = reader.ReadLine()) != null - && Platform.IndexOf(line, endMarker) == -1) - { - int colonPos = line.IndexOf(':'); - - if (colonPos == -1) - { - buf.Append(line.Trim()); - } - else - { - // Process field - string fieldName = line.Substring(0, colonPos).Trim(); - - if (Platform.StartsWith(fieldName, "X-")) - { - fieldName = fieldName.Substring(2); - } - - string fieldValue = line.Substring(colonPos + 1).Trim(); - - headers.Add(new PemHeader(fieldName, fieldValue)); - } - } - - if (line == null) - { - throw new IOException(endMarker + " not found"); - } - - if (buf.Length % 4 != 0) - { - throw new IOException("base64 data appears to be truncated"); - } - - return new PemObject(type, headers, Base64.Decode(buf.ToString())); - } - } -} diff --git a/bc-sharp-crypto/src/util/io/pem/PemWriter.cs b/bc-sharp-crypto/src/util/io/pem/PemWriter.cs deleted file mode 100644 index e85b315..0000000 --- a/bc-sharp-crypto/src/util/io/pem/PemWriter.cs +++ /dev/null @@ -1,120 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.Utilities.IO.Pem -{ - /** - * A generic PEM writer, based on RFC 1421 - */ - public class PemWriter - { - private const int LineLength = 64; - - private readonly TextWriter writer; - private readonly int nlLength; - private char[] buf = new char[LineLength]; - - /** - * Base constructor. - * - * @param out output stream to use. - */ - public PemWriter(TextWriter writer) - { - if (writer == null) - throw new ArgumentNullException("writer"); - - this.writer = writer; - this.nlLength = Platform.NewLine.Length; - } - - public TextWriter Writer - { - get { return writer; } - } - - /** - * Return the number of bytes or characters required to contain the - * passed in object if it is PEM encoded. - * - * @param obj pem object to be output - * @return an estimate of the number of bytes - */ - public int GetOutputSize(PemObject obj) - { - // BEGIN and END boundaries. - int size = (2 * (obj.Type.Length + 10 + nlLength)) + 6 + 4; - - if (obj.Headers.Count > 0) - { - foreach (PemHeader header in obj.Headers) - { - size += header.Name.Length + ": ".Length + header.Value.Length + nlLength; - } - - size += nlLength; - } - - // base64 encoding - int dataLen = ((obj.Content.Length + 2) / 3) * 4; - - size += dataLen + (((dataLen + LineLength - 1) / LineLength) * nlLength); - - return size; - } - - public void WriteObject(PemObjectGenerator objGen) - { - PemObject obj = objGen.Generate(); - - WritePreEncapsulationBoundary(obj.Type); - - if (obj.Headers.Count > 0) - { - foreach (PemHeader header in obj.Headers) - { - writer.Write(header.Name); - writer.Write(": "); - writer.WriteLine(header.Value); - } - - writer.WriteLine(); - } - - WriteEncoded(obj.Content); - WritePostEncapsulationBoundary(obj.Type); - } - - private void WriteEncoded(byte[] bytes) - { - bytes = Base64.Encode(bytes); - - for (int i = 0; i < bytes.Length; i += buf.Length) - { - int index = 0; - while (index != buf.Length) - { - if ((i + index) >= bytes.Length) - break; - - buf[index] = (char)bytes[i + index]; - index++; - } - writer.WriteLine(buf, 0, index); - } - } - - private void WritePreEncapsulationBoundary(string type) - { - writer.WriteLine("-----BEGIN " + type + "-----"); - } - - private void WritePostEncapsulationBoundary(string type) - { - writer.WriteLine("-----END " + type + "-----"); - } - } -} diff --git a/bc-sharp-crypto/src/util/net/IPAddress.cs b/bc-sharp-crypto/src/util/net/IPAddress.cs deleted file mode 100644 index 38c1245..0000000 --- a/bc-sharp-crypto/src/util/net/IPAddress.cs +++ /dev/null @@ -1,197 +0,0 @@ -using System; -using System.Globalization; - -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.Utilities.Net -{ - public class IPAddress - { - /** - * Validate the given IPv4 or IPv6 address. - * - * @param address the IP address as a string. - * - * @return true if a valid address, false otherwise - */ - public static bool IsValid( - string address) - { - return IsValidIPv4(address) || IsValidIPv6(address); - } - - /** - * Validate the given IPv4 or IPv6 address and netmask. - * - * @param address the IP address as a string. - * - * @return true if a valid address with netmask, false otherwise - */ - public static bool IsValidWithNetMask( - string address) - { - return IsValidIPv4WithNetmask(address) || IsValidIPv6WithNetmask(address); - } - - /** - * Validate the given IPv4 address. - * - * @param address the IP address as a string. - * - * @return true if a valid IPv4 address, false otherwise - */ - public static bool IsValidIPv4( - string address) - { - try - { - return unsafeIsValidIPv4(address); - } - catch (FormatException) {} - catch (OverflowException) {} - return false; - } - - private static bool unsafeIsValidIPv4( - string address) - { - if (address.Length == 0) - return false; - - int octets = 0; - string temp = address + "."; - - int pos; - int start = 0; - while (start < temp.Length - && (pos = temp.IndexOf('.', start)) > start) - { - if (octets == 4) - return false; - - string octetStr = temp.Substring(start, pos - start); - int octet = Int32.Parse(octetStr); - - if (octet < 0 || octet > 255) - return false; - - start = pos + 1; - octets++; - } - - return octets == 4; - } - - public static bool IsValidIPv4WithNetmask( - string address) - { - int index = address.IndexOf('/'); - string mask = address.Substring(index + 1); - - return (index > 0) && IsValidIPv4(address.Substring(0, index)) - && (IsValidIPv4(mask) || IsMaskValue(mask, 32)); - } - - public static bool IsValidIPv6WithNetmask( - string address) - { - int index = address.IndexOf('/'); - string mask = address.Substring(index + 1); - - return (index > 0) && (IsValidIPv6(address.Substring(0, index)) - && (IsValidIPv6(mask) || IsMaskValue(mask, 128))); - } - - private static bool IsMaskValue( - string component, - int size) - { - int val = Int32.Parse(component); - try - { - return val >= 0 && val <= size; - } - catch (FormatException) {} - catch (OverflowException) {} - return false; - } - - /** - * Validate the given IPv6 address. - * - * @param address the IP address as a string. - * - * @return true if a valid IPv4 address, false otherwise - */ - public static bool IsValidIPv6( - string address) - { - try - { - return unsafeIsValidIPv6(address); - } - catch (FormatException) {} - catch (OverflowException) {} - return false; - } - - private static bool unsafeIsValidIPv6( - string address) - { - if (address.Length == 0) - { - return false; - } - - int octets = 0; - - string temp = address + ":"; - bool doubleColonFound = false; - int pos; - int start = 0; - while (start < temp.Length - && (pos = temp.IndexOf(':', start)) >= start) - { - if (octets == 8) - { - return false; - } - - if (start != pos) - { - string value = temp.Substring(start, pos - start); - - if (pos == (temp.Length - 1) && value.IndexOf('.') > 0) - { - if (!IsValidIPv4(value)) - { - return false; - } - - octets++; // add an extra one as address covers 2 words. - } - else - { - string octetStr = temp.Substring(start, pos - start); - int octet = Int32.Parse(octetStr, NumberStyles.AllowHexSpecifier); - - if (octet < 0 || octet > 0xffff) - return false; - } - } - else - { - if (pos != 1 && pos != temp.Length - 1 && doubleColonFound) - { - return false; - } - doubleColonFound = true; - } - start = pos + 1; - octets++; - } - - return octets == 8 || doubleColonFound; - } - } -} diff --git a/bc-sharp-crypto/src/util/zlib/Adler32.cs b/bc-sharp-crypto/src/util/zlib/Adler32.cs deleted file mode 100644 index c38258f..0000000 --- a/bc-sharp-crypto/src/util/zlib/Adler32.cs +++ /dev/null @@ -1,88 +0,0 @@ -using System; -/* - * $Id: Adler32.cs,v 1.1 2006-07-31 13:59:25 bouncy Exp $ - * -Copyright (c) 2000,2001,2002,2003 ymnk, JCraft,Inc. All rights reserved. - -Redistribution and use in source and binary forms, with or without -modification, are permitted provided that the following conditions are met: - - 1. Redistributions of source code must retain the above copyright notice, - this list of conditions and the following disclaimer. - - 2. Redistributions in binary form must reproduce the above copyright - notice, this list of conditions and the following disclaimer in - the documentation and/or other materials provided with the distribution. - - 3. The names of the authors may not be used to endorse or promote products - derived from this software without specific prior written permission. - -THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED WARRANTIES, -INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND -FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL JCRAFT, -INC. OR ANY CONTRIBUTORS TO THIS SOFTWARE BE LIABLE FOR ANY DIRECT, INDIRECT, -INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT -LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, -OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF -LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING -NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, -EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. - */ -/* - * This program is based on zlib-1.1.3, so all credit should go authors - * Jean-loup Gailly(jloup@gzip.org) and Mark Adler(madler@alumni.caltech.edu) - * and contributors of zlib. - */ - -namespace Org.BouncyCastle.Utilities.Zlib { - - internal sealed class Adler32{ - - // largest prime smaller than 65536 - private const int BASE=65521; - // NMAX is the largest n such that 255n(n+1)/2 + (n+1)(BASE-1) <= 2^32-1 - private const int NMAX=5552; - - internal long adler32(long adler, byte[] buf, int index, int len){ - if(buf == null){ return 1L; } - - long s1=adler&0xffff; - long s2=(adler>>16)&0xffff; - int k; - - while(len > 0) { - k=len=16){ - s1+=buf[index++]&0xff; s2+=s1; - s1+=buf[index++]&0xff; s2+=s1; - s1+=buf[index++]&0xff; s2+=s1; - s1+=buf[index++]&0xff; s2+=s1; - s1+=buf[index++]&0xff; s2+=s1; - s1+=buf[index++]&0xff; s2+=s1; - s1+=buf[index++]&0xff; s2+=s1; - s1+=buf[index++]&0xff; s2+=s1; - s1+=buf[index++]&0xff; s2+=s1; - s1+=buf[index++]&0xff; s2+=s1; - s1+=buf[index++]&0xff; s2+=s1; - s1+=buf[index++]&0xff; s2+=s1; - s1+=buf[index++]&0xff; s2+=s1; - s1+=buf[index++]&0xff; s2+=s1; - s1+=buf[index++]&0xff; s2+=s1; - s1+=buf[index++]&0xff; s2+=s1; - k-=16; - } - if(k!=0){ - do{ - s1+=buf[index++]&0xff; s2+=s1; - } - while(--k!=0); - } - s1%=BASE; - s2%=BASE; - } - return (s2<<16)|s1; - } - - } -} \ No newline at end of file diff --git a/bc-sharp-crypto/src/util/zlib/Deflate.cs b/bc-sharp-crypto/src/util/zlib/Deflate.cs deleted file mode 100644 index ca04309..0000000 --- a/bc-sharp-crypto/src/util/zlib/Deflate.cs +++ /dev/null @@ -1,1640 +0,0 @@ -using System; -/* - * $Id: Deflate.cs,v 1.2 2008-05-10 09:35:40 bouncy Exp $ - * -Copyright (c) 2000,2001,2002,2003 ymnk, JCraft,Inc. All rights reserved. - -Redistribution and use in source and binary forms, with or without -modification, are permitted provided that the following conditions are met: - - 1. Redistributions of source code must retain the above copyright notice, - this list of conditions and the following disclaimer. - - 2. Redistributions in binary form must reproduce the above copyright - notice, this list of conditions and the following disclaimer in - the documentation and/or other materials provided with the distribution. - - 3. The names of the authors may not be used to endorse or promote products - derived from this software without specific prior written permission. - -THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED WARRANTIES, -INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND -FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL JCRAFT, -INC. OR ANY CONTRIBUTORS TO THIS SOFTWARE BE LIABLE FOR ANY DIRECT, INDIRECT, -INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT -LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, -OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF -LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING -NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, -EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. - */ -/* - * This program is based on zlib-1.1.3, so all credit should go authors - * Jean-loup Gailly(jloup@gzip.org) and Mark Adler(madler@alumni.caltech.edu) - * and contributors of zlib. - */ - -namespace Org.BouncyCastle.Utilities.Zlib { - - public sealed class Deflate{ - - private const int MAX_MEM_LEVEL=9; - - private const int Z_DEFAULT_COMPRESSION=-1; - - private const int MAX_WBITS=15; // 32K LZ77 window - private const int DEF_MEM_LEVEL=8; - - internal class Config{ - internal int good_length; // reduce lazy search above this match length - internal int max_lazy; // do not perform lazy search above this match length - internal int nice_length; // quit search above this match length - internal int max_chain; - internal int func; - internal Config(int good_length, int max_lazy, - int nice_length, int max_chain, int func){ - this.good_length=good_length; - this.max_lazy=max_lazy; - this.nice_length=nice_length; - this.max_chain=max_chain; - this.func=func; - } - } - - private const int STORED=0; - private const int FAST=1; - private const int SLOW=2; - private static readonly Config[] config_table; - - static Deflate(){ - config_table=new Config[10]; - // good lazy nice chain - config_table[0]=new Config(0, 0, 0, 0, STORED); - config_table[1]=new Config(4, 4, 8, 4, FAST); - config_table[2]=new Config(4, 5, 16, 8, FAST); - config_table[3]=new Config(4, 6, 32, 32, FAST); - - config_table[4]=new Config(4, 4, 16, 16, SLOW); - config_table[5]=new Config(8, 16, 32, 32, SLOW); - config_table[6]=new Config(8, 16, 128, 128, SLOW); - config_table[7]=new Config(8, 32, 128, 256, SLOW); - config_table[8]=new Config(32, 128, 258, 1024, SLOW); - config_table[9]=new Config(32, 258, 258, 4096, SLOW); - } - - private static readonly String[] z_errmsg = { - "need dictionary", // Z_NEED_DICT 2 - "stream end", // Z_STREAM_END 1 - "", // Z_OK 0 - "file error", // Z_ERRNO (-1) - "stream error", // Z_STREAM_ERROR (-2) - "data error", // Z_DATA_ERROR (-3) - "insufficient memory", // Z_MEM_ERROR (-4) - "buffer error", // Z_BUF_ERROR (-5) - "incompatible version",// Z_VERSION_ERROR (-6) - "" - }; - - // block not completed, need more input or more output - private const int NeedMore=0; - - // block flush performed - private const int BlockDone=1; - - // finish started, need only more output at next deflate - private const int FinishStarted=2; - - // finish done, accept no more input or output - private const int FinishDone=3; - - // preset dictionary flag in zlib header - private const int PRESET_DICT=0x20; - - private const int Z_FILTERED=1; - private const int Z_HUFFMAN_ONLY=2; - private const int Z_DEFAULT_STRATEGY=0; - - private const int Z_NO_FLUSH=0; - private const int Z_PARTIAL_FLUSH=1; - private const int Z_SYNC_FLUSH=2; - private const int Z_FULL_FLUSH=3; - private const int Z_FINISH=4; - - private const int Z_OK=0; - private const int Z_STREAM_END=1; - private const int Z_NEED_DICT=2; - private const int Z_ERRNO=-1; - private const int Z_STREAM_ERROR=-2; - private const int Z_DATA_ERROR=-3; - private const int Z_MEM_ERROR=-4; - private const int Z_BUF_ERROR=-5; - private const int Z_VERSION_ERROR=-6; - - private const int INIT_STATE=42; - private const int BUSY_STATE=113; - private const int FINISH_STATE=666; - - // The deflate compression method - private const int Z_DEFLATED=8; - - private const int STORED_BLOCK=0; - private const int STATIC_TREES=1; - private const int DYN_TREES=2; - - // The three kinds of block type - private const int Z_BINARY=0; - private const int Z_ASCII=1; - private const int Z_UNKNOWN=2; - - private const int Buf_size=8*2; - - // repeat previous bit length 3-6 times (2 bits of repeat count) - private const int REP_3_6=16; - - // repeat a zero length 3-10 times (3 bits of repeat count) - private const int REPZ_3_10=17; - - // repeat a zero length 11-138 times (7 bits of repeat count) - private const int REPZ_11_138=18; - - private const int MIN_MATCH=3; - private const int MAX_MATCH=258; - private const int MIN_LOOKAHEAD=(MAX_MATCH+MIN_MATCH+1); - - private const int MAX_BITS=15; - private const int D_CODES=30; - private const int BL_CODES=19; - private const int LENGTH_CODES=29; - private const int LITERALS=256; - private const int L_CODES=(LITERALS+1+LENGTH_CODES); - private const int HEAP_SIZE=(2*L_CODES+1); - - private const int END_BLOCK=256; - - internal ZStream strm; // pointer back to this zlib stream - internal int status; // as the name implies - internal byte[] pending_buf; // output still pending - internal int pending_buf_size; // size of pending_buf - internal int pending_out; // next pending byte to output to the stream - internal int pending; // nb of bytes in the pending buffer - internal int noheader; // suppress zlib header and adler32 - internal byte data_type; // UNKNOWN, BINARY or ASCII - internal byte method; // STORED (for zip only) or DEFLATED - internal int last_flush; // value of flush param for previous deflate call - - internal int w_size; // LZ77 window size (32K by default) - internal int w_bits; // log2(w_size) (8..16) - internal int w_mask; // w_size - 1 - - internal byte[] window; - // Sliding window. Input bytes are read into the second half of the window, - // and move to the first half later to keep a dictionary of at least wSize - // bytes. With this organization, matches are limited to a distance of - // wSize-MAX_MATCH bytes, but this ensures that IO is always - // performed with a length multiple of the block size. Also, it limits - // the window size to 64K, which is quite useful on MSDOS. - // To do: use the user input buffer as sliding window. - - internal int window_size; - // Actual size of window: 2*wSize, except when the user input buffer - // is directly used as sliding window. - - internal short[] prev; - // Link to older string with same hash index. To limit the size of this - // array to 64K, this link is maintained only for the last 32K strings. - // An index in this array is thus a window index modulo 32K. - - internal short[] head; // Heads of the hash chains or NIL. - - internal int ins_h; // hash index of string to be inserted - internal int hash_size; // number of elements in hash table - internal int hash_bits; // log2(hash_size) - internal int hash_mask; // hash_size-1 - - // Number of bits by which ins_h must be shifted at each input - // step. It must be such that after MIN_MATCH steps, the oldest - // byte no longer takes part in the hash key, that is: - // hash_shift * MIN_MATCH >= hash_bits - internal int hash_shift; - - // Window position at the beginning of the current output block. Gets - // negative when the window is moved backwards. - - internal int block_start; - - internal int match_length; // length of best match - internal int prev_match; // previous match - internal int match_available; // set if previous match exists - internal int strstart; // start of string to insert - internal int match_start; // start of matching string - internal int lookahead; // number of valid bytes ahead in window - - // Length of the best match at previous step. Matches not greater than this - // are discarded. This is used in the lazy match evaluation. - internal int prev_length; - - // To speed up deflation, hash chains are never searched beyond this - // length. A higher limit improves compression ratio but degrades the speed. - internal int max_chain_length; - - // Attempt to find a better match only when the current match is strictly - // smaller than this value. This mechanism is used only for compression - // levels >= 4. - internal int max_lazy_match; - - // Insert new strings in the hash table only if the match length is not - // greater than this length. This saves time but degrades compression. - // max_insert_length is used only for compression levels <= 3. - - internal int level; // compression level (1..9) - internal int strategy; // favor or force Huffman coding - - // Use a faster search when the previous match is longer than this - internal int good_match; - - // Stop searching when current match exceeds this - internal int nice_match; - - internal short[] dyn_ltree; // literal and length tree - internal short[] dyn_dtree; // distance tree - internal short[] bl_tree; // Huffman tree for bit lengths - - internal Tree l_desc=new Tree(); // desc for literal tree - internal Tree d_desc=new Tree(); // desc for distance tree - internal Tree bl_desc=new Tree(); // desc for bit length tree - - // number of codes at each bit length for an optimal tree - internal short[] bl_count=new short[MAX_BITS+1]; - - // heap used to build the Huffman trees - internal int[] heap=new int[2*L_CODES+1]; - - internal int heap_len; // number of elements in the heap - internal int heap_max; // element of largest frequency - // The sons of heap[n] are heap[2*n] and heap[2*n+1]. heap[0] is not used. - // The same heap array is used to build all trees. - - // Depth of each subtree used as tie breaker for trees of equal frequency - internal byte[] depth=new byte[2*L_CODES+1]; - - internal int l_buf; // index for literals or lengths */ - - // Size of match buffer for literals/lengths. There are 4 reasons for - // limiting lit_bufsize to 64K: - // - frequencies can be kept in 16 bit counters - // - if compression is not successful for the first block, all input - // data is still in the window so we can still emit a stored block even - // when input comes from standard input. (This can also be done for - // all blocks if lit_bufsize is not greater than 32K.) - // - if compression is not successful for a file smaller than 64K, we can - // even emit a stored file instead of a stored block (saving 5 bytes). - // This is applicable only for zip (not gzip or zlib). - // - creating new Huffman trees less frequently may not provide fast - // adaptation to changes in the input data statistics. (Take for - // example a binary file with poorly compressible code followed by - // a highly compressible string table.) Smaller buffer sizes give - // fast adaptation but have of course the overhead of transmitting - // trees more frequently. - // - I can't count above 4 - internal int lit_bufsize; - - internal int last_lit; // running index in l_buf - - // Buffer for distances. To simplify the code, d_buf and l_buf have - // the same number of elements. To use different lengths, an extra flag - // array would be necessary. - - internal int d_buf; // index of pendig_buf - - internal int opt_len; // bit length of current block with optimal trees - internal int static_len; // bit length of current block with static trees - internal int matches; // number of string matches in current block - internal int last_eob_len; // bit length of EOB code for last block - - // Output buffer. bits are inserted starting at the bottom (least - // significant bits). - internal uint bi_buf; - - // Number of valid bits in bi_buf. All bits above the last valid bit - // are always zero. - internal int bi_valid; - - internal Deflate(){ - dyn_ltree=new short[HEAP_SIZE*2]; - dyn_dtree=new short[(2*D_CODES+1)*2]; // distance tree - bl_tree=new short[(2*BL_CODES+1)*2]; // Huffman tree for bit lengths - } - - internal void lm_init() { - window_size=2*w_size; - - head[hash_size-1]=0; - for(int i=0; i= 3; max_blindex--) { - if (bl_tree[Tree.bl_order[max_blindex]*2+1] != 0) break; - } - // Update opt_len to include the bit length tree and counts - opt_len += 3*(max_blindex+1) + 5+5+4; - - return max_blindex; - } - - - // Send the header for a block using dynamic Huffman trees: the counts, the - // lengths of the bit length codes, the literal tree and the distance tree. - // IN assertion: lcodes >= 257, dcodes >= 1, blcodes >= 4. - internal void send_all_trees(int lcodes, int dcodes, int blcodes){ - int rank; // index in bl_order - - send_bits(lcodes-257, 5); // not +255 as stated in appnote.txt - send_bits(dcodes-1, 5); - send_bits(blcodes-4, 4); // not -3 as stated in appnote.txt - for (rank = 0; rank < blcodes; rank++) { - send_bits(bl_tree[Tree.bl_order[rank]*2+1], 3); - } - send_tree(dyn_ltree, lcodes-1); // literal tree - send_tree(dyn_dtree, dcodes-1); // distance tree - } - - // Send a literal or distance tree in compressed form, using the codes in - // bl_tree. - internal void send_tree (short[] tree,// the tree to be sent - int max_code // and its largest code of non zero frequency - ){ - int n; // iterates over all tree elements - int prevlen = -1; // last emitted length - int curlen; // length of current code - int nextlen = tree[0*2+1]; // length of next code - int count = 0; // repeat count of the current code - int max_count = 7; // max repeat count - int min_count = 4; // min repeat count - - if (nextlen == 0){ max_count = 138; min_count = 3; } - - for (n = 0; n <= max_code; n++) { - curlen = nextlen; nextlen = tree[(n+1)*2+1]; - if(++count < max_count && curlen == nextlen) { - continue; - } - else if(count < min_count) { - do { send_code(curlen, bl_tree); } while (--count != 0); - } - else if(curlen != 0){ - if(curlen != prevlen){ - send_code(curlen, bl_tree); count--; - } - send_code(REP_3_6, bl_tree); - send_bits(count-3, 2); - } - else if(count <= 10){ - send_code(REPZ_3_10, bl_tree); - send_bits(count-3, 3); - } - else{ - send_code(REPZ_11_138, bl_tree); - send_bits(count-11, 7); - } - count = 0; prevlen = curlen; - if(nextlen == 0){ - max_count = 138; min_count = 3; - } - else if(curlen == nextlen){ - max_count = 6; min_count = 3; - } - else{ - max_count = 7; min_count = 4; - } - } - } - - // Output a byte on the stream. - // IN assertion: there is enough room in pending_buf. - internal void put_byte(byte[] p, int start, int len){ - System.Array.Copy(p, start, pending_buf, pending, len); - pending+=len; - } - - internal void put_byte(byte c){ - pending_buf[pending++]=c; - } - internal void put_short(int w) { - pending_buf[pending++]=(byte)(w/*&0xff*/); - pending_buf[pending++]=(byte)(w>>8); - } - internal void putShortMSB(int b){ - pending_buf[pending++]=(byte)(b>>8); - pending_buf[pending++]=(byte)(b/*&0xff*/); - } - - internal void send_code(int c, short[] tree){ - int c2=c*2; - send_bits((tree[c2]&0xffff), (tree[c2+1]&0xffff)); - } - - internal void send_bits(int val, int length){ - if (bi_valid > Buf_size - length) { - bi_buf |= (uint)(val << bi_valid); - pending_buf[pending++]=(byte)(bi_buf/*&0xff*/); - pending_buf[pending++]=(byte)(bi_buf>>8); - bi_buf = ((uint)val) >> (Buf_size - bi_valid); - bi_valid += length - Buf_size; - } else { - bi_buf |= (uint)(val << bi_valid); - bi_valid += length; - } -// int len = length; -// if (bi_valid > (int)Buf_size - len) { -// int val = value; -// // bi_buf |= (val << bi_valid); -// bi_buf = (short)((ushort)bi_buf | (ushort)((val << bi_valid)&0xffff)); -// put_short(bi_buf); -// bi_buf = (short)(((uint)val) >> (Buf_size - bi_valid)); -// bi_valid += len - Buf_size; -// } else { -// // bi_buf |= (value) << bi_valid; -// bi_buf = (short)((ushort)bi_buf | (ushort)(((value) << bi_valid)&0xffff)); -// bi_valid += len; -// } - } - - // Send one empty static block to give enough lookahead for inflate. - // This takes 10 bits, of which 7 may remain in the bit buffer. - // The current inflate code requires 9 bits of lookahead. If the - // last two codes for the previous block (real code plus EOB) were coded - // on 5 bits or less, inflate may have only 5+3 bits of lookahead to decode - // the last real code. In this case we send two empty static blocks instead - // of one. (There are no problems if the previous block is stored or fixed.) - // To simplify the code, we assume the worst case of last real code encoded - // on one bit only. - internal void _tr_align(){ - send_bits(STATIC_TREES<<1, 3); - send_code(END_BLOCK, StaticTree.static_ltree); - - bi_flush(); - - // Of the 10 bits for the empty block, we have already sent - // (10 - bi_valid) bits. The lookahead for the last real code (before - // the EOB of the previous block) was thus at least one plus the length - // of the EOB plus what we have just sent of the empty static block. - if (1 + last_eob_len + 10 - bi_valid < 9) { - send_bits(STATIC_TREES<<1, 3); - send_code(END_BLOCK, StaticTree.static_ltree); - bi_flush(); - } - last_eob_len = 7; - } - - - // Save the match info and tally the frequency counts. Return true if - // the current block must be flushed. - internal bool _tr_tally (int dist, // distance of matched string - int lc // match length-MIN_MATCH or unmatched char (if dist==0) - ){ - - pending_buf[d_buf+last_lit*2] = (byte)(dist>>8); - pending_buf[d_buf+last_lit*2+1] = (byte)dist; - - pending_buf[l_buf+last_lit] = (byte)lc; last_lit++; - - if (dist == 0) { - // lc is the unmatched char - dyn_ltree[lc*2]++; - } - else { - matches++; - // Here, lc is the match length - MIN_MATCH - dist--; // dist = match distance - 1 - dyn_ltree[(Tree._length_code[lc]+LITERALS+1)*2]++; - dyn_dtree[Tree.d_code(dist)*2]++; - } - - if ((last_lit & 0x1fff) == 0 && level > 2) { - // Compute an upper bound for the compressed length - int out_length = last_lit*8; - int in_length = strstart - block_start; - int dcode; - for (dcode = 0; dcode < D_CODES; dcode++) { - out_length += (int)((int)dyn_dtree[dcode*2] * - (5L+Tree.extra_dbits[dcode])); - } - out_length >>= 3; - if ((matches < (last_lit/2)) && out_length < in_length/2) return true; - } - - return (last_lit == lit_bufsize-1); - // We avoid equality with lit_bufsize because of wraparound at 64K - // on 16 bit machines and because stored blocks are restricted to - // 64K-1 bytes. - } - - // Send the block data compressed using the given Huffman trees - internal void compress_block(short[] ltree, short[] dtree){ - int dist; // distance of matched string - int lc; // match length or unmatched char (if dist == 0) - int lx = 0; // running index in l_buf - int code; // the code to send - int extra; // number of extra bits to send - - if (last_lit != 0){ - do{ - dist=((pending_buf[d_buf+lx*2]<<8)&0xff00)| - (pending_buf[d_buf+lx*2+1]&0xff); - lc=(pending_buf[l_buf+lx])&0xff; lx++; - - if(dist == 0){ - send_code(lc, ltree); // send a literal byte - } - else{ - // Here, lc is the match length - MIN_MATCH - code = Tree._length_code[lc]; - - send_code(code+LITERALS+1, ltree); // send the length code - extra = Tree.extra_lbits[code]; - if(extra != 0){ - lc -= Tree.base_length[code]; - send_bits(lc, extra); // send the extra length bits - } - dist--; // dist is now the match distance - 1 - code = Tree.d_code(dist); - - send_code(code, dtree); // send the distance code - extra = Tree.extra_dbits[code]; - if (extra != 0) { - dist -= Tree.base_dist[code]; - send_bits(dist, extra); // send the extra distance bits - } - } // literal or match pair ? - - // Check that the overlay between pending_buf and d_buf+l_buf is ok: - } - while (lx < last_lit); - } - - send_code(END_BLOCK, ltree); - last_eob_len = ltree[END_BLOCK*2+1]; - } - - // Set the data type to ASCII or BINARY, using a crude approximation: - // binary if more than 20% of the bytes are <= 6 or >= 128, ascii otherwise. - // IN assertion: the fields freq of dyn_ltree are set and the total of all - // frequencies does not exceed 64K (to fit in an int on 16 bit machines). - internal void set_data_type(){ - int n = 0; - int ascii_freq = 0; - int bin_freq = 0; - while(n<7){ bin_freq += dyn_ltree[n*2]; n++;} - while(n<128){ ascii_freq += dyn_ltree[n*2]; n++;} - while(n (ascii_freq >> 2) ? Z_BINARY : Z_ASCII); - } - - // Flush the bit buffer, keeping at most 7 bits in it. - internal void bi_flush(){ - if (bi_valid == 16) { - pending_buf[pending++]=(byte)(bi_buf/*&0xff*/); - pending_buf[pending++]=(byte)(bi_buf>>8); - bi_buf=0; - bi_valid=0; - } - else if (bi_valid >= 8) { - pending_buf[pending++]=(byte)(bi_buf); - bi_buf>>=8; - bi_buf &= 0x00ff; - bi_valid-=8; - } - } - - // Flush the bit buffer and align the output on a byte boundary - internal void bi_windup(){ - if (bi_valid > 8) { - pending_buf[pending++]=(byte)(bi_buf); - pending_buf[pending++]=(byte)(bi_buf>>8); - } else if (bi_valid > 0) { - pending_buf[pending++]=(byte)(bi_buf); - } - bi_buf = 0; - bi_valid = 0; - } - - // Copy a stored block, storing first the length and its - // one's complement if requested. - internal void copy_block(int buf, // the input data - int len, // its length - bool header // true if block header must be written - ){ - //int index=0; - bi_windup(); // align on byte boundary - last_eob_len = 8; // enough lookahead for inflate - - if (header) { - put_short((short)len); - put_short((short)~len); - } - - // while(len--!=0) { - // put_byte(window[buf+index]); - // index++; - // } - put_byte(window, buf, len); - } - - internal void flush_block_only(bool eof){ - _tr_flush_block(block_start>=0 ? block_start : -1, - strstart-block_start, - eof); - block_start=strstart; - strm.flush_pending(); - } - - // Copy without compression as much as possible from the input stream, return - // the current block state. - // This function does not insert new strings in the dictionary since - // uncompressible data is probably not useful. This function is used - // only for the level=0 compression option. - // NOTE: this function should be optimized to avoid extra copying from - // window to pending_buf. - internal int deflate_stored(int flush){ - // Stored blocks are limited to 0xffff bytes, pending_buf is limited - // to pending_buf_size, and each stored block has a 5 byte header: - - int max_block_size = 0xffff; - int max_start; - - if(max_block_size > pending_buf_size - 5) { - max_block_size = pending_buf_size - 5; - } - - // Copy as much as possible from input to output: - while(true){ - // Fill the window as much as possible: - if(lookahead<=1){ - fill_window(); - if(lookahead==0 && flush==Z_NO_FLUSH) return NeedMore; - if(lookahead==0) break; // flush the current block - } - - strstart+=lookahead; - lookahead=0; - - // Emit a stored block if pending_buf will be full: - max_start=block_start+max_block_size; - if(strstart==0|| strstart>=max_start) { - // strstart == 0 is possible when wraparound on 16-bit machine - lookahead = (int)(strstart-max_start); - strstart = (int)max_start; - - flush_block_only(false); - if(strm.avail_out==0) return NeedMore; - - } - - // Flush if we may have to slide, otherwise block_start may become - // negative and the data will be gone: - if(strstart-block_start >= w_size-MIN_LOOKAHEAD) { - flush_block_only(false); - if(strm.avail_out==0) return NeedMore; - } - } - - flush_block_only(flush == Z_FINISH); - if(strm.avail_out==0) - return (flush == Z_FINISH) ? FinishStarted : NeedMore; - - return flush == Z_FINISH ? FinishDone : BlockDone; - } - - // Send a stored block - internal void _tr_stored_block(int buf, // input block - int stored_len, // length of input block - bool eof // true if this is the last block for a file - ){ - send_bits((STORED_BLOCK<<1)+(eof?1:0), 3); // send block type - copy_block(buf, stored_len, true); // with header - } - - // Determine the best encoding for the current block: dynamic trees, static - // trees or store, and output the encoded block to the zip file. - internal void _tr_flush_block(int buf, // input block, or NULL if too old - int stored_len, // length of input block - bool eof // true if this is the last block for a file - ) { - int opt_lenb, static_lenb;// opt_len and static_len in bytes - int max_blindex = 0; // index of last bit length code of non zero freq - - // Build the Huffman trees unless a stored block is forced - if(level > 0) { - // Check if the file is ascii or binary - if(data_type == Z_UNKNOWN) set_data_type(); - - // Construct the literal and distance trees - l_desc.build_tree(this); - - d_desc.build_tree(this); - - // At this point, opt_len and static_len are the total bit lengths of - // the compressed block data, excluding the tree representations. - - // Build the bit length tree for the above two trees, and get the index - // in bl_order of the last bit length code to send. - max_blindex=build_bl_tree(); - - // Determine the best encoding. Compute first the block length in bytes - opt_lenb=(opt_len+3+7)>>3; - static_lenb=(static_len+3+7)>>3; - - if(static_lenb<=opt_lenb) opt_lenb=static_lenb; - } - else { - opt_lenb=static_lenb=stored_len+5; // force a stored block - } - - if(stored_len+4<=opt_lenb && buf != -1){ - // 4: two words for the lengths - // The test buf != NULL is only necessary if LIT_BUFSIZE > WSIZE. - // Otherwise we can't have processed more than WSIZE input bytes since - // the last block flush, because compression would have been - // successful. If LIT_BUFSIZE <= WSIZE, it is never too late to - // transform a block into a stored block. - _tr_stored_block(buf, stored_len, eof); - } - else if(static_lenb == opt_lenb){ - send_bits((STATIC_TREES<<1)+(eof?1:0), 3); - compress_block(StaticTree.static_ltree, StaticTree.static_dtree); - } - else{ - send_bits((DYN_TREES<<1)+(eof?1:0), 3); - send_all_trees(l_desc.max_code+1, d_desc.max_code+1, max_blindex+1); - compress_block(dyn_ltree, dyn_dtree); - } - - // The above check is made mod 2^32, for files larger than 512 MB - // and uLong implemented on 32 bits. - - init_block(); - - if(eof){ - bi_windup(); - } - } - - // Fill the window when the lookahead becomes insufficient. - // Updates strstart and lookahead. - // - // IN assertion: lookahead < MIN_LOOKAHEAD - // OUT assertions: strstart <= window_size-MIN_LOOKAHEAD - // At least one byte has been read, or avail_in == 0; reads are - // performed for at least two bytes (required for the zip translate_eol - // option -- not supported here). - internal void fill_window(){ - int n, m; - int p; - int more; // Amount of free space at the end of the window. - - do{ - more = (window_size-lookahead-strstart); - - // Deal with !@#$% 64K limit: - if(more==0 && strstart==0 && lookahead==0){ - more = w_size; - } - else if(more==-1) { - // Very unlikely, but possible on 16 bit machine if strstart == 0 - // and lookahead == 1 (input done one byte at time) - more--; - - // If the window is almost full and there is insufficient lookahead, - // move the upper half to the lower one to make room in the upper half. - } - else if(strstart >= w_size+ w_size-MIN_LOOKAHEAD) { - System.Array.Copy(window, w_size, window, 0, w_size); - match_start-=w_size; - strstart-=w_size; // we now have strstart >= MAX_DIST - block_start-=w_size; - - // Slide the hash table (could be avoided with 32 bit values - // at the expense of memory usage). We slide even when level == 0 - // to keep the hash table consistent if we switch back to level > 0 - // later. (Using level 0 permanently is not an optimal usage of - // zlib, so we don't care about this pathological case.) - - n = hash_size; - p=n; - do { - m = (head[--p]&0xffff); - head[p]=(short)(m>=w_size ? (m-w_size) : 0); - } - while (--n != 0); - - n = w_size; - p = n; - do { - m = (prev[--p]&0xffff); - prev[p] = (short)(m >= w_size ? (m-w_size) : 0); - // If n is not on any hash chain, prev[n] is garbage but - // its value will never be used. - } - while (--n!=0); - more += w_size; - } - - if (strm.avail_in == 0) return; - - // If there was no sliding: - // strstart <= WSIZE+MAX_DIST-1 && lookahead <= MIN_LOOKAHEAD - 1 && - // more == window_size - lookahead - strstart - // => more >= window_size - (MIN_LOOKAHEAD-1 + WSIZE + MAX_DIST-1) - // => more >= window_size - 2*WSIZE + 2 - // In the BIG_MEM or MMAP case (not yet supported), - // window_size == input_size + MIN_LOOKAHEAD && - // strstart + s->lookahead <= input_size => more >= MIN_LOOKAHEAD. - // Otherwise, window_size == 2*WSIZE so more >= 2. - // If there was sliding, more >= WSIZE. So in all cases, more >= 2. - - n = strm.read_buf(window, strstart + lookahead, more); - lookahead += n; - - // Initialize the hash value now that we have some input: - if(lookahead >= MIN_MATCH) { - ins_h = window[strstart]&0xff; - ins_h=(((ins_h)<= MIN_MATCH){ - ins_h=(((ins_h)<=MIN_MATCH){ - // check_match(strstart, match_start, match_length); - - bflush=_tr_tally(strstart-match_start, match_length-MIN_MATCH); - - lookahead -= match_length; - - // Insert new strings in the hash table only if the match length - // is not too large. This saves time but degrades compression. - if(match_length <= max_lazy_match && - lookahead >= MIN_MATCH) { - match_length--; // string at strstart already in hash table - do{ - strstart++; - - ins_h=((ins_h<= MIN_MATCH) { - ins_h=(((ins_h)< 4096))) { - - // If prev_match is also MIN_MATCH, match_start is garbage - // but we will ignore the current match anyway. - match_length = MIN_MATCH-1; - } - } - - // If there was a match at the previous step and the current - // match is not better, output the previous match: - if(prev_length >= MIN_MATCH && match_length <= prev_length) { - int max_insert = strstart + lookahead - MIN_MATCH; - // Do not insert strings in hash table beyond this. - - // check_match(strstart-1, prev_match, prev_length); - - bflush=_tr_tally(strstart-1-prev_match, prev_length - MIN_MATCH); - - // Insert in hash table all strings up to the end of the match. - // strstart-1 and strstart are already inserted. If there is not - // enough lookahead, the last two strings are not inserted in - // the hash table. - lookahead -= prev_length-1; - prev_length -= 2; - do{ - if(++strstart <= max_insert) { - ins_h=(((ins_h)<(w_size-MIN_LOOKAHEAD) ? - strstart-(w_size-MIN_LOOKAHEAD) : 0; - int nice_match=this.nice_match; - - // Stop when cur_match becomes <= limit. To simplify the code, - // we prevent matches with the string of window index 0. - - int wmask = w_mask; - - int strend = strstart + MAX_MATCH; - byte scan_end1 = window[scan+best_len-1]; - byte scan_end = window[scan+best_len]; - - // The code is optimized for HASH_BITS >= 8 and MAX_MATCH-2 multiple of 16. - // It is easy to get rid of this optimization if necessary. - - // Do not waste too much time if we already have a good match: - if (prev_length >= good_match) { - chain_length >>= 2; - } - - // Do not look for matches beyond the end of the input. This is necessary - // to make deflate deterministic. - if (nice_match > lookahead) nice_match = lookahead; - - do { - match = cur_match; - - // Skip to next match if the match length cannot increase - // or if the match length is less than 2: - if (window[match+best_len] != scan_end || - window[match+best_len-1] != scan_end1 || - window[match] != window[scan] || - window[++match] != window[scan+1]) continue; - - // The check at best_len-1 can be removed because it will be made - // again later. (This heuristic is not always a win.) - // It is not necessary to compare scan[2] and match[2] since they - // are always equal when the other bytes match, given that - // the hash keys are equal and that HASH_BITS >= 8. - scan += 2; match++; - - // We check for insufficient lookahead only every 8th comparison; - // the 256th check will be made at strstart+258. - do { - } while (window[++scan] == window[++match] && - window[++scan] == window[++match] && - window[++scan] == window[++match] && - window[++scan] == window[++match] && - window[++scan] == window[++match] && - window[++scan] == window[++match] && - window[++scan] == window[++match] && - window[++scan] == window[++match] && - scan < strend); - - len = MAX_MATCH - (int)(strend - scan); - scan = strend - MAX_MATCH; - - if(len>best_len) { - match_start = cur_match; - best_len = len; - if (len >= nice_match) break; - scan_end1 = window[scan+best_len-1]; - scan_end = window[scan+best_len]; - } - - } while ((cur_match = (prev[cur_match & wmask]&0xffff)) > limit - && --chain_length != 0); - - if (best_len <= lookahead) return best_len; - return lookahead; - } - - internal int deflateInit(ZStream strm, int level, int bits){ - return deflateInit2(strm, level, Z_DEFLATED, bits, DEF_MEM_LEVEL, - Z_DEFAULT_STRATEGY); - } - internal int deflateInit(ZStream strm, int level){ - return deflateInit(strm, level, MAX_WBITS); - } - internal int deflateInit2(ZStream strm, int level, int method, int windowBits, - int memLevel, int strategy){ - int noheader = 0; - // byte[] my_version=ZLIB_VERSION; - - // - // if (version == null || version[0] != my_version[0] - // || stream_size != sizeof(z_stream)) { - // return Z_VERSION_ERROR; - // } - - strm.msg = null; - - if (level == Z_DEFAULT_COMPRESSION) level = 6; - - if (windowBits < 0) { // undocumented feature: suppress zlib header - noheader = 1; - windowBits = -windowBits; - } - - if (memLevel < 1 || memLevel > MAX_MEM_LEVEL || - method != Z_DEFLATED || - windowBits < 9 || windowBits > 15 || level < 0 || level > 9 || - strategy < 0 || strategy > Z_HUFFMAN_ONLY) { - return Z_STREAM_ERROR; - } - - strm.dstate = (Deflate)this; - - this.noheader = noheader; - w_bits = windowBits; - w_size = 1 << w_bits; - w_mask = w_size - 1; - - hash_bits = memLevel + 7; - hash_size = 1 << hash_bits; - hash_mask = hash_size - 1; - hash_shift = ((hash_bits+MIN_MATCH-1)/MIN_MATCH); - - window = new byte[w_size*2]; - prev = new short[w_size]; - head = new short[hash_size]; - - lit_bufsize = 1 << (memLevel + 6); // 16K elements by default - - // We overlay pending_buf and d_buf+l_buf. This works since the average - // output size for (length,distance) codes is <= 24 bits. - pending_buf = new byte[lit_bufsize*4]; - pending_buf_size = lit_bufsize*4; - - d_buf = lit_bufsize/2; - l_buf = (1+2)*lit_bufsize; - - this.level = level; - - //System.out.println("level="+level); - - this.strategy = strategy; - this.method = (byte)method; - - return deflateReset(strm); - } - - internal int deflateReset(ZStream strm){ - strm.total_in = strm.total_out = 0; - strm.msg = null; // - strm.data_type = Z_UNKNOWN; - - pending = 0; - pending_out = 0; - - if(noheader < 0) { - noheader = 0; // was set to -1 by deflate(..., Z_FINISH); - } - status = (noheader!=0) ? BUSY_STATE : INIT_STATE; - strm.adler=strm._adler.adler32(0, null, 0, 0); - - last_flush = Z_NO_FLUSH; - - tr_init(); - lm_init(); - return Z_OK; - } - - internal int deflateEnd(){ - if(status!=INIT_STATE && status!=BUSY_STATE && status!=FINISH_STATE){ - return Z_STREAM_ERROR; - } - // Deallocate in reverse order of allocations: - pending_buf=null; - head=null; - prev=null; - window=null; - // free - // dstate=null; - return status == BUSY_STATE ? Z_DATA_ERROR : Z_OK; - } - - internal int deflateParams(ZStream strm, int _level, int _strategy){ - int err=Z_OK; - - if(_level == Z_DEFAULT_COMPRESSION){ - _level = 6; - } - if(_level < 0 || _level > 9 || - _strategy < 0 || _strategy > Z_HUFFMAN_ONLY) { - return Z_STREAM_ERROR; - } - - if(config_table[level].func!=config_table[_level].func && - strm.total_in != 0) { - // Flush the last buffer: - err = strm.deflate(Z_PARTIAL_FLUSH); - } - - if(level != _level) { - level = _level; - max_lazy_match = config_table[level].max_lazy; - good_match = config_table[level].good_length; - nice_match = config_table[level].nice_length; - max_chain_length = config_table[level].max_chain; - } - strategy = _strategy; - return err; - } - - internal int deflateSetDictionary (ZStream strm, byte[] dictionary, int dictLength){ - int length = dictLength; - int index=0; - - if(dictionary == null || status != INIT_STATE) - return Z_STREAM_ERROR; - - strm.adler=strm._adler.adler32(strm.adler, dictionary, 0, dictLength); - - if(length < MIN_MATCH) return Z_OK; - if(length > w_size-MIN_LOOKAHEAD){ - length = w_size-MIN_LOOKAHEAD; - index=dictLength-length; // use the tail of the dictionary - } - System.Array.Copy(dictionary, index, window, 0, length); - strstart = length; - block_start = length; - - // Insert all strings in the hash table (except for the last two bytes). - // s->lookahead stays null, so s->ins_h will be recomputed at the next - // call of fill_window. - - ins_h = window[0]&0xff; - ins_h=(((ins_h)<Z_FINISH || flush<0){ - return Z_STREAM_ERROR; - } - - if(strm.next_out == null || - (strm.next_in == null && strm.avail_in != 0) || - (status == FINISH_STATE && flush != Z_FINISH)) { - strm.msg=z_errmsg[Z_NEED_DICT-(Z_STREAM_ERROR)]; - return Z_STREAM_ERROR; - } - if(strm.avail_out == 0){ - strm.msg=z_errmsg[Z_NEED_DICT-(Z_BUF_ERROR)]; - return Z_BUF_ERROR; - } - - this.strm = strm; // just in case - old_flush = last_flush; - last_flush = flush; - - // Write the zlib header - if(status == INIT_STATE) { - int header = (Z_DEFLATED+((w_bits-8)<<4))<<8; - int level_flags=((level-1)&0xff)>>1; - - if(level_flags>3) level_flags=3; - header |= (level_flags<<6); - if(strstart!=0) header |= PRESET_DICT; - header+=31-(header % 31); - - status=BUSY_STATE; - putShortMSB(header); - - - // Save the adler32 of the preset dictionary: - if(strstart!=0){ - putShortMSB((int)(strm.adler>>16)); - putShortMSB((int)(strm.adler&0xffff)); - } - strm.adler=strm._adler.adler32(0, null, 0, 0); - } - - // Flush as much pending output as possible - if(pending != 0) { - strm.flush_pending(); - if(strm.avail_out == 0) { - //System.out.println(" avail_out==0"); - // Since avail_out is 0, deflate will be called again with - // more output space, but possibly with both pending and - // avail_in equal to zero. There won't be anything to do, - // but this is not an error situation so make sure we - // return OK instead of BUF_ERROR at next call of deflate: - last_flush = -1; - return Z_OK; - } - - // Make sure there is something to do and avoid duplicate consecutive - // flushes. For repeated and useless calls with Z_FINISH, we keep - // returning Z_STREAM_END instead of Z_BUFF_ERROR. - } - else if(strm.avail_in==0 && flush <= old_flush && - flush != Z_FINISH) { - strm.msg=z_errmsg[Z_NEED_DICT-(Z_BUF_ERROR)]; - return Z_BUF_ERROR; - } - - // User must not provide more input after the first FINISH: - if(status == FINISH_STATE && strm.avail_in != 0) { - strm.msg=z_errmsg[Z_NEED_DICT-(Z_BUF_ERROR)]; - return Z_BUF_ERROR; - } - - // Start a new block or continue the current one. - if(strm.avail_in!=0 || lookahead!=0 || - (flush != Z_NO_FLUSH && status != FINISH_STATE)) { - int bstate=-1; - switch(config_table[level].func){ - case STORED: - bstate = deflate_stored(flush); - break; - case FAST: - bstate = deflate_fast(flush); - break; - case SLOW: - bstate = deflate_slow(flush); - break; - default: - break; - } - - if (bstate==FinishStarted || bstate==FinishDone) { - status = FINISH_STATE; - } - if (bstate==NeedMore || bstate==FinishStarted) { - if(strm.avail_out == 0) { - last_flush = -1; // avoid BUF_ERROR next call, see above - } - return Z_OK; - // If flush != Z_NO_FLUSH && avail_out == 0, the next call - // of deflate should use the same flush parameter to make sure - // that the flush is complete. So we don't have to output an - // empty block here, this will be done at next call. This also - // ensures that for a very small output buffer, we emit at most - // one empty block. - } - - if (bstate==BlockDone) { - if(flush == Z_PARTIAL_FLUSH) { - _tr_align(); - } - else { // FULL_FLUSH or SYNC_FLUSH - _tr_stored_block(0, 0, false); - // For a full flush, this empty block will be recognized - // as a special marker by inflate_sync(). - if(flush == Z_FULL_FLUSH) { - //state.head[s.hash_size-1]=0; - for(int i=0; i>16)); - putShortMSB((int)(strm.adler&0xffff)); - strm.flush_pending(); - - // If avail_out is zero, the application will call deflate again - // to flush the rest. - noheader = -1; // write the trailer only once! - return pending != 0 ? Z_OK : Z_STREAM_END; - } - } -} \ No newline at end of file diff --git a/bc-sharp-crypto/src/util/zlib/InfBlocks.cs b/bc-sharp-crypto/src/util/zlib/InfBlocks.cs deleted file mode 100644 index 479d9b5..0000000 --- a/bc-sharp-crypto/src/util/zlib/InfBlocks.cs +++ /dev/null @@ -1,618 +0,0 @@ -using System; -/* - * $Id: InfBlocks.cs,v 1.2 2008-05-10 09:35:40 bouncy Exp $ - * -Copyright (c) 2000,2001,2002,2003 ymnk, JCraft,Inc. All rights reserved. - -Redistribution and use in source and binary forms, with or without -modification, are permitted provided that the following conditions are met: - - 1. Redistributions of source code must retain the above copyright notice, - this list of conditions and the following disclaimer. - - 2. Redistributions in binary form must reproduce the above copyright - notice, this list of conditions and the following disclaimer in - the documentation and/or other materials provided with the distribution. - - 3. The names of the authors may not be used to endorse or promote products - derived from this software without specific prior written permission. - -THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED WARRANTIES, -INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND -FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL JCRAFT, -INC. OR ANY CONTRIBUTORS TO THIS SOFTWARE BE LIABLE FOR ANY DIRECT, INDIRECT, -INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT -LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, -OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF -LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING -NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, -EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. - */ -/* - * This program is based on zlib-1.1.3, so all credit should go authors - * Jean-loup Gailly(jloup@gzip.org) and Mark Adler(madler@alumni.caltech.edu) - * and contributors of zlib. - */ - -namespace Org.BouncyCastle.Utilities.Zlib { - - internal sealed class InfBlocks{ - private const int MANY=1440; - - // And'ing with mask[n] masks the lower n bits - private static readonly int[] inflate_mask = { - 0x00000000, 0x00000001, 0x00000003, 0x00000007, 0x0000000f, - 0x0000001f, 0x0000003f, 0x0000007f, 0x000000ff, 0x000001ff, - 0x000003ff, 0x000007ff, 0x00000fff, 0x00001fff, 0x00003fff, - 0x00007fff, 0x0000ffff - }; - - // Table for deflate from PKZIP's appnote.txt. - static readonly int[] border = { // Order of the bit length code lengths - 16, 17, 18, 0, 8, 7, 9, 6, 10, 5, 11, 4, 12, 3, 13, 2, 14, 1, 15 - }; - - private const int Z_OK=0; - private const int Z_STREAM_END=1; - private const int Z_NEED_DICT=2; - private const int Z_ERRNO=-1; - private const int Z_STREAM_ERROR=-2; - private const int Z_DATA_ERROR=-3; - private const int Z_MEM_ERROR=-4; - private const int Z_BUF_ERROR=-5; - private const int Z_VERSION_ERROR=-6; - - private const int TYPE=0; // get type bits (3, including end bit) - private const int LENS=1; // get lengths for stored - private const int STORED=2;// processing stored block - private const int TABLE=3; // get table lengths - private const int BTREE=4; // get bit lengths tree for a dynamic block - private const int DTREE=5; // get length, distance trees for a dynamic block - private const int CODES=6; // processing fixed or dynamic block - private const int DRY=7; // output remaining window bytes - private const int DONE=8; // finished last block, done - private const int BAD=9; // ot a data error--stuck here - - internal int mode; // current inflate_block mode - - internal int left; // if STORED, bytes left to copy - - internal int table; // table lengths (14 bits) - internal int index; // index into blens (or border) - internal int[] blens; // bit lengths of codes - internal int[] bb=new int[1]; // bit length tree depth - internal int[] tb=new int[1]; // bit length decoding tree - - internal InfCodes codes=new InfCodes(); // if CODES, current state - - int last; // true if this block is the last block - - // mode independent information - internal int bitk; // bits in bit buffer - internal int bitb; // bit buffer - internal int[] hufts; // single malloc for tree space - internal byte[] window; // sliding window - internal int end; // one byte after sliding window - internal int read; // window read pointer - internal int write; // window write pointer - internal Object checkfn; // check function - internal long check; // check on output - - internal InfTree inftree=new InfTree(); - - internal InfBlocks(ZStream z, Object checkfn, int w){ - hufts=new int[MANY*3]; - window=new byte[w]; - end=w; - this.checkfn = checkfn; - mode = TYPE; - reset(z, null); - } - - internal void reset(ZStream z, long[] c){ - if(c!=null) c[0]=check; - if(mode==BTREE || mode==DTREE){ - } - if(mode==CODES){ - codes.free(z); - } - mode=TYPE; - bitk=0; - bitb=0; - read=write=0; - - if(checkfn != null) - z.adler=check=z._adler.adler32(0L, null, 0, 0); - } - - internal int proc(ZStream z, int r){ - int t; // temporary storage - int b; // bit buffer - int k; // bits in bit buffer - int p; // input data pointer - int n; // bytes available there - int q; // output window write pointer - int m; { // bytes to end of window or read pointer - - // copy input/output information to locals (UPDATE macro restores) - p=z.next_in_index;n=z.avail_in;b=bitb;k=bitk;} { - q=write;m=(int)(q> 1){ - case 0: { // stored - b>>=(3);k-=(3);} - t = k & 7; { // go to byte boundary - - b>>=(t);k-=(t);} - mode = LENS; // get length of stored block - break; - case 1: { // fixed - int[] bl=new int[1]; - int[] bd=new int[1]; - int[][] tl=new int[1][]; - int[][] td=new int[1][]; - - InfTree.inflate_trees_fixed(bl, bd, tl, td, z); - codes.init(bl[0], bd[0], tl[0], 0, td[0], 0, z); - } { - - b>>=(3);k-=(3);} - - mode = CODES; - break; - case 2: { // dynamic - - b>>=(3);k-=(3);} - - mode = TABLE; - break; - case 3: { // illegal - - b>>=(3);k-=(3);} - mode = BAD; - z.msg = "invalid block type"; - r = Z_DATA_ERROR; - - bitb=b; bitk=k; - z.avail_in=n;z.total_in+=p-z.next_in_index;z.next_in_index=p; - write=q; - return inflate_flush(z,r); - } - break; - case LENS: - - while(k<(32)){ - if(n!=0){ - r=Z_OK; - } - else{ - bitb=b; bitk=k; - z.avail_in=n; - z.total_in+=p-z.next_in_index;z.next_in_index=p; - write=q; - return inflate_flush(z,r); - }; - n--; - b|=(z.next_in[p++]&0xff)<> 16) & 0xffff) != (b & 0xffff)){ - mode = BAD; - z.msg = "invalid stored block lengths"; - r = Z_DATA_ERROR; - - bitb=b; bitk=k; - z.avail_in=n;z.total_in+=p-z.next_in_index;z.next_in_index=p; - write=q; - return inflate_flush(z,r); - } - left = (b & 0xffff); - b = k = 0; // dump bits - mode = left!=0 ? STORED : (last!=0 ? DRY : TYPE); - break; - case STORED: - if (n == 0){ - bitb=b; bitk=k; - z.avail_in=n;z.total_in+=p-z.next_in_index;z.next_in_index=p; - write=q; - return inflate_flush(z,r); - } - - if(m==0){ - if(q==end&&read!=0){ - q=0; m=(int)(qn) t = n; - if(t>m) t = m; - System.Array.Copy(z.next_in, p, window, q, t); - p += t; n -= t; - q += t; m -= t; - if ((left -= t) != 0) - break; - mode = last!=0 ? DRY : TYPE; - break; - case TABLE: - - while(k<(14)){ - if(n!=0){ - r=Z_OK; - } - else{ - bitb=b; bitk=k; - z.avail_in=n; - z.total_in+=p-z.next_in_index;z.next_in_index=p; - write=q; - return inflate_flush(z,r); - }; - n--; - b|=(z.next_in[p++]&0xff)< 29 || ((t >> 5) & 0x1f) > 29) { - mode = BAD; - z.msg = "too many length or distance symbols"; - r = Z_DATA_ERROR; - - bitb=b; bitk=k; - z.avail_in=n;z.total_in+=p-z.next_in_index;z.next_in_index=p; - write=q; - return inflate_flush(z,r); - } - t = 258 + (t & 0x1f) + ((t >> 5) & 0x1f); - if(blens==null || blens.Length>=(14);k-=(14);} - - index = 0; - mode = BTREE; - goto case BTREE; - case BTREE: - while (index < 4 + (table >> 10)){ - while(k<(3)){ - if(n!=0){ - r=Z_OK; - } - else{ - bitb=b; bitk=k; - z.avail_in=n; - z.total_in+=p-z.next_in_index;z.next_in_index=p; - write=q; - return inflate_flush(z,r); - }; - n--; - b|=(z.next_in[p++]&0xff)<>=(3);k-=(3);} - } - - while(index < 19){ - blens[border[index++]] = 0; - } - - bb[0] = 7; - t = inftree.inflate_trees_bits(blens, bb, tb, hufts, z); - if (t != Z_OK){ - r = t; - if (r == Z_DATA_ERROR){ - blens=null; - mode = BAD; - } - - bitb=b; bitk=k; - z.avail_in=n;z.total_in+=p-z.next_in_index;z.next_in_index=p; - write=q; - return inflate_flush(z,r); - } - - index = 0; - mode = DTREE; - goto case DTREE; - case DTREE: - while (true){ - t = table; - if(!(index < 258 + (t & 0x1f) + ((t >> 5) & 0x1f))){ - break; - } - - int i, j, c; - - t = bb[0]; - - while(k<(t)){ - if(n!=0){ - r=Z_OK; - } - else{ - bitb=b; bitk=k; - z.avail_in=n; - z.total_in+=p-z.next_in_index;z.next_in_index=p; - write=q; - return inflate_flush(z,r); - }; - n--; - b|=(z.next_in[p++]&0xff)<>=(t);k-=(t); - blens[index++] = c; - } - else { // c == 16..18 - i = c == 18 ? 7 : c - 14; - j = c == 18 ? 11 : 3; - - while(k<(t+i)){ - if(n!=0){ - r=Z_OK; - } - else{ - bitb=b; bitk=k; - z.avail_in=n; - z.total_in+=p-z.next_in_index;z.next_in_index=p; - write=q; - return inflate_flush(z,r); - }; - n--; - b|=(z.next_in[p++]&0xff)<>=(t);k-=(t); - - j += (b & inflate_mask[i]); - - b>>=(i);k-=(i); - - i = index; - t = table; - if (i + j > 258 + (t & 0x1f) + ((t >> 5) & 0x1f) || - (c == 16 && i < 1)){ - blens=null; - mode = BAD; - z.msg = "invalid bit length repeat"; - r = Z_DATA_ERROR; - - bitb=b; bitk=k; - z.avail_in=n;z.total_in+=p-z.next_in_index;z.next_in_index=p; - write=q; - return inflate_flush(z,r); - } - - c = c == 16 ? blens[i-1] : 0; - do{ - blens[i++] = c; - } - while (--j!=0); - index = i; - } - } - - tb[0]=-1; { - int[] bl=new int[1]; - int[] bd=new int[1]; - int[] tl=new int[1]; - int[] td=new int[1]; - bl[0] = 9; // must be <= 9 for lookahead assumptions - bd[0] = 6; // must be <= 9 for lookahead assumptions - - t = table; - t = inftree.inflate_trees_dynamic(257 + (t & 0x1f), - 1 + ((t >> 5) & 0x1f), - blens, bl, bd, tl, td, hufts, z); - - if (t != Z_OK){ - if (t == Z_DATA_ERROR){ - blens=null; - mode = BAD; - } - r = t; - - bitb=b; bitk=k; - z.avail_in=n;z.total_in+=p-z.next_in_index;z.next_in_index=p; - write=q; - return inflate_flush(z,r); - } - codes.init(bl[0], bd[0], hufts, tl[0], hufts, td[0], z); - } - mode = CODES; - goto case CODES; - case CODES: - bitb=b; bitk=k; - z.avail_in=n; z.total_in+=p-z.next_in_index;z.next_in_index=p; - write=q; - - if ((r = codes.proc(this, z, r)) != Z_STREAM_END){ - return inflate_flush(z, r); - } - r = Z_OK; - codes.free(z); - - p=z.next_in_index; n=z.avail_in;b=bitb;k=bitk; - q=write;m=(int)(q z.avail_out) n = z.avail_out; - if (n!=0 && r == Z_BUF_ERROR) r = Z_OK; - - // update counters - z.avail_out -= n; - z.total_out += n; - - // update check information - if(checkfn != null) - z.adler=check=z._adler.adler32(check, window, q, n); - - // copy as far as end of window - System.Array.Copy(window, q, z.next_out, p, n); - p += n; - q += n; - - // see if more to copy at beginning of window - if (q == end){ - // wrap pointers - q = 0; - if (write == end) - write = 0; - - // compute bytes to copy - n = write - q; - if (n > z.avail_out) n = z.avail_out; - if (n!=0 && r == Z_BUF_ERROR) r = Z_OK; - - // update counters - z.avail_out -= n; - z.total_out += n; - - // update check information - if(checkfn != null) - z.adler=check=z._adler.adler32(check, window, q, n); - - // copy - System.Array.Copy(window, q, z.next_out, p, n); - p += n; - q += n; - } - - // update pointers - z.next_out_index = p; - read = q; - - // done - return r; - } - } -} \ No newline at end of file diff --git a/bc-sharp-crypto/src/util/zlib/InfCodes.cs b/bc-sharp-crypto/src/util/zlib/InfCodes.cs deleted file mode 100644 index 6fcafe4..0000000 --- a/bc-sharp-crypto/src/util/zlib/InfCodes.cs +++ /dev/null @@ -1,611 +0,0 @@ -using System; -/* - * $Id: InfCodes.cs,v 1.2 2008-05-10 09:35:40 bouncy Exp $ - * -Copyright (c) 2000,2001,2002,2003 ymnk, JCraft,Inc. All rights reserved. - -Redistribution and use in source and binary forms, with or without -modification, are permitted provided that the following conditions are met: - - 1. Redistributions of source code must retain the above copyright notice, - this list of conditions and the following disclaimer. - - 2. Redistributions in binary form must reproduce the above copyright - notice, this list of conditions and the following disclaimer in - the documentation and/or other materials provided with the distribution. - - 3. The names of the authors may not be used to endorse or promote products - derived from this software without specific prior written permission. - -THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED WARRANTIES, -INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND -FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL JCRAFT, -INC. OR ANY CONTRIBUTORS TO THIS SOFTWARE BE LIABLE FOR ANY DIRECT, INDIRECT, -INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT -LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, -OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF -LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING -NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, -EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. - */ -/* - * This program is based on zlib-1.1.3, so all credit should go authors - * Jean-loup Gailly(jloup@gzip.org) and Mark Adler(madler@alumni.caltech.edu) - * and contributors of zlib. - */ - -namespace Org.BouncyCastle.Utilities.Zlib { - - internal sealed class InfCodes{ - - private static readonly int[] inflate_mask = { - 0x00000000, 0x00000001, 0x00000003, 0x00000007, 0x0000000f, - 0x0000001f, 0x0000003f, 0x0000007f, 0x000000ff, 0x000001ff, - 0x000003ff, 0x000007ff, 0x00000fff, 0x00001fff, 0x00003fff, - 0x00007fff, 0x0000ffff - }; - - private const int Z_OK=0; - private const int Z_STREAM_END=1; - private const int Z_NEED_DICT=2; - private const int Z_ERRNO=-1; - private const int Z_STREAM_ERROR=-2; - private const int Z_DATA_ERROR=-3; - private const int Z_MEM_ERROR=-4; - private const int Z_BUF_ERROR=-5; - private const int Z_VERSION_ERROR=-6; - - // waiting for "i:"=input, - // "o:"=output, - // "x:"=nothing - private const int START=0; // x: set up for LEN - private const int LEN=1; // i: get length/literal/eob next - private const int LENEXT=2; // i: getting length extra (have base) - private const int DIST=3; // i: get distance next - private const int DISTEXT=4;// i: getting distance extra - private const int COPY=5; // o: copying bytes in window, waiting for space - private const int LIT=6; // o: got literal, waiting for output space - private const int WASH=7; // o: got eob, possibly still output waiting - private const int END=8; // x: got eob and all data flushed - private const int BADCODE=9;// x: got error - - int mode; // current inflate_codes mode - - // mode dependent information - int len; - - int[] tree; // pointer into tree - int tree_index=0; - int need; // bits needed - - int lit; - - // if EXT or COPY, where and how much - int get; // bits to get for extra - int dist; // distance back to copy from - - byte lbits; // ltree bits decoded per branch - byte dbits; // dtree bits decoder per branch - int[] ltree; // literal/length/eob tree - int ltree_index; // literal/length/eob tree - int[] dtree; // distance tree - int dtree_index; // distance tree - - internal InfCodes(){ - } - internal void init(int bl, int bd, - int[] tl, int tl_index, - int[] td, int td_index, ZStream z){ - mode=START; - lbits=(byte)bl; - dbits=(byte)bd; - ltree=tl; - ltree_index=tl_index; - dtree = td; - dtree_index=td_index; - tree=null; - } - - internal int proc(InfBlocks s, ZStream z, int r){ - int j; // temporary storage - int tindex; // temporary pointer - int e; // extra bits or operation - int b=0; // bit buffer - int k=0; // bits in bit buffer - int p=0; // input data pointer - int n; // bytes available there - int q; // output window write pointer - int m; // bytes to end of window or read pointer - int f; // pointer to copy strings from - - // copy input/output information to locals (UPDATE macro restores) - p=z.next_in_index;n=z.avail_in;b=s.bitb;k=s.bitk; - q=s.write;m=q= 258 && n >= 10){ - - s.bitb=b;s.bitk=k; - z.avail_in=n;z.total_in+=p-z.next_in_index;z.next_in_index=p; - s.write=q; - r = inflate_fast(lbits, dbits, - ltree, ltree_index, - dtree, dtree_index, - s, z); - - p=z.next_in_index;n=z.avail_in;b=s.bitb;k=s.bitk; - q=s.write;m=q>=(tree[tindex+1]); - k-=(tree[tindex+1]); - - e=tree[tindex]; - - if(e == 0){ // literal - lit = tree[tindex+2]; - mode = LIT; - break; - } - if((e & 16)!=0 ){ // length - get = e & 15; - len = tree[tindex+2]; - mode = LENEXT; - break; - } - if ((e & 64) == 0){ // next table - need = e; - tree_index = tindex/3+tree[tindex+2]; - break; - } - if ((e & 32)!=0){ // end of block - mode = WASH; - break; - } - mode = BADCODE; // invalid code - z.msg = "invalid literal/length code"; - r = Z_DATA_ERROR; - - s.bitb=b;s.bitk=k; - z.avail_in=n;z.total_in+=p-z.next_in_index;z.next_in_index=p; - s.write=q; - return s.inflate_flush(z,r); - - case LENEXT: // i: getting length extra (have base) - j = get; - - while(k<(j)){ - if(n!=0)r=Z_OK; - else{ - - s.bitb=b;s.bitk=k; - z.avail_in=n;z.total_in+=p-z.next_in_index;z.next_in_index=p; - s.write=q; - return s.inflate_flush(z,r); - } - n--; b|=(z.next_in[p++]&0xff)<>=j; - k-=j; - - need = dbits; - tree = dtree; - tree_index=dtree_index; - mode = DIST; - goto case DIST; - case DIST: // i: get distance next - j = need; - - while(k<(j)){ - if(n!=0)r=Z_OK; - else{ - - s.bitb=b;s.bitk=k; - z.avail_in=n;z.total_in+=p-z.next_in_index;z.next_in_index=p; - s.write=q; - return s.inflate_flush(z,r); - } - n--; b|=(z.next_in[p++]&0xff)<>=tree[tindex+1]; - k-=tree[tindex+1]; - - e = (tree[tindex]); - if((e & 16)!=0){ // distance - get = e & 15; - dist = tree[tindex+2]; - mode = DISTEXT; - break; - } - if ((e & 64) == 0){ // next table - need = e; - tree_index = tindex/3 + tree[tindex+2]; - break; - } - mode = BADCODE; // invalid code - z.msg = "invalid distance code"; - r = Z_DATA_ERROR; - - s.bitb=b;s.bitk=k; - z.avail_in=n;z.total_in+=p-z.next_in_index;z.next_in_index=p; - s.write=q; - return s.inflate_flush(z,r); - - case DISTEXT: // i: getting distance extra - j = get; - - while(k<(j)){ - if(n!=0)r=Z_OK; - else{ - - s.bitb=b;s.bitk=k; - z.avail_in=n;z.total_in+=p-z.next_in_index;z.next_in_index=p; - s.write=q; - return s.inflate_flush(z,r); - } - n--; b|=(z.next_in[p++]&0xff)<>=j; - k-=j; - - mode = COPY; - goto case COPY; - case COPY: // o: copying bytes in window, waiting for space - f = q - dist; - while(f < 0){ // modulo window size-"while" instead - f += s.end; // of "if" handles invalid distances - } - while (len!=0){ - - if(m==0){ - if(q==s.end&&s.read!=0){q=0;m=q 7){ // return unused byte, if any - k -= 8; - n++; - p--; // can always return one - } - - s.write=q; r=s.inflate_flush(z,r); - q=s.write;m=q= 258 && n >= 10 - // get literal/length code - while(k<(20)){ // max bits for literal/length code - n--; - b|=(z.next_in[p++]&0xff)<>=(tp[tp_index_t_3+1]); k-=(tp[tp_index_t_3+1]); - - s.window[q++] = (byte)tp[tp_index_t_3+2]; - m--; - continue; - } - do { - - b>>=(tp[tp_index_t_3+1]); k-=(tp[tp_index_t_3+1]); - - if((e&16)!=0){ - e &= 15; - c = tp[tp_index_t_3+2] + ((int)b & inflate_mask[e]); - - b>>=e; k-=e; - - // decode distance base of block to copy - while(k<(15)){ // max bits for distance code - n--; - b|=(z.next_in[p++]&0xff)<>=(tp[tp_index_t_3+1]); k-=(tp[tp_index_t_3+1]); - - if((e&16)!=0){ - // get extra bits to add to distance base - e &= 15; - while(k<(e)){ // get extra bits (up to 13) - n--; - b|=(z.next_in[p++]&0xff)<>=(e); k-=(e); - - // do the copy - m -= c; - if (q >= d){ // offset before dest - // just copy - r=q-d; - if(q-r>0 && 2>(q-r)){ - s.window[q++]=s.window[r++]; // minimum count is three, - s.window[q++]=s.window[r++]; // so unroll loop a little - c-=2; - } - else{ - System.Array.Copy(s.window, r, s.window, q, 2); - q+=2; r+=2; c-=2; - } - } - else{ // else offset after destination - r=q-d; - do{ - r+=s.end; // force pointer in window - }while(r<0); // covers invalid distances - e=s.end-r; - if(c>e){ // if source crosses, - c-=e; // wrapped copy - if(q-r>0 && e>(q-r)){ - do{s.window[q++] = s.window[r++];} - while(--e!=0); - } - else{ - System.Array.Copy(s.window, r, s.window, q, e); - q+=e; r+=e; e=0; - } - r = 0; // copy rest from start of window - } - - } - - // copy all or what's left - if(q-r>0 && c>(q-r)){ - do{s.window[q++] = s.window[r++];} - while(--c!=0); - } - else{ - System.Array.Copy(s.window, r, s.window, q, c); - q+=c; r+=c; c=0; - } - break; - } - else if((e&64)==0){ - t+=tp[tp_index_t_3+2]; - t+=(b&inflate_mask[e]); - tp_index_t_3=(tp_index+t)*3; - e=tp[tp_index_t_3]; - } - else{ - z.msg = "invalid distance code"; - - c=z.avail_in-n;c=(k>>3)>3:c;n+=c;p-=c;k-=c<<3; - - s.bitb=b;s.bitk=k; - z.avail_in=n;z.total_in+=p-z.next_in_index;z.next_in_index=p; - s.write=q; - - return Z_DATA_ERROR; - } - } - while(true); - break; - } - - if((e&64)==0){ - t+=tp[tp_index_t_3+2]; - t+=(b&inflate_mask[e]); - tp_index_t_3=(tp_index+t)*3; - if((e=tp[tp_index_t_3])==0){ - - b>>=(tp[tp_index_t_3+1]); k-=(tp[tp_index_t_3+1]); - - s.window[q++]=(byte)tp[tp_index_t_3+2]; - m--; - break; - } - } - else if((e&32)!=0){ - - c=z.avail_in-n;c=(k>>3)>3:c;n+=c;p-=c;k-=c<<3; - - s.bitb=b;s.bitk=k; - z.avail_in=n;z.total_in+=p-z.next_in_index;z.next_in_index=p; - s.write=q; - - return Z_STREAM_END; - } - else{ - z.msg="invalid literal/length code"; - - c=z.avail_in-n;c=(k>>3)>3:c;n+=c;p-=c;k-=c<<3; - - s.bitb=b;s.bitk=k; - z.avail_in=n;z.total_in+=p-z.next_in_index;z.next_in_index=p; - s.write=q; - - return Z_DATA_ERROR; - } - } - while(true); - } - while(m>=258 && n>= 10); - - // not enough input or output--restore pointers and return - c=z.avail_in-n;c=(k>>3)>3:c;n+=c;p-=c;k-=c<<3; - - s.bitb=b;s.bitk=k; - z.avail_in=n;z.total_in+=p-z.next_in_index;z.next_in_index=p; - s.write=q; - - return Z_OK; - } - } -} \ No newline at end of file diff --git a/bc-sharp-crypto/src/util/zlib/InfTree.cs b/bc-sharp-crypto/src/util/zlib/InfTree.cs deleted file mode 100644 index 6ed7d19..0000000 --- a/bc-sharp-crypto/src/util/zlib/InfTree.cs +++ /dev/null @@ -1,523 +0,0 @@ -using System; -/* - * $Id: InfTree.cs,v 1.2 2008-05-10 09:35:40 bouncy Exp $ - * -Copyright (c) 2000,2001,2002,2003 ymnk, JCraft,Inc. All rights reserved. - -Redistribution and use in source and binary forms, with or without -modification, are permitted provided that the following conditions are met: - - 1. Redistributions of source code must retain the above copyright notice, - this list of conditions and the following disclaimer. - - 2. Redistributions in binary form must reproduce the above copyright - notice, this list of conditions and the following disclaimer in - the documentation and/or other materials provided with the distribution. - - 3. The names of the authors may not be used to endorse or promote products - derived from this software without specific prior written permission. - -THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED WARRANTIES, -INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND -FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL JCRAFT, -INC. OR ANY CONTRIBUTORS TO THIS SOFTWARE BE LIABLE FOR ANY DIRECT, INDIRECT, -INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT -LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, -OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF -LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING -NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, -EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. - */ -/* - * This program is based on zlib-1.1.3, so all credit should go authors - * Jean-loup Gailly(jloup@gzip.org) and Mark Adler(madler@alumni.caltech.edu) - * and contributors of zlib. - */ - -namespace Org.BouncyCastle.Utilities.Zlib { - - internal sealed class InfTree{ - - private const int MANY=1440; - - private const int Z_OK=0; - private const int Z_STREAM_END=1; - private const int Z_NEED_DICT=2; - private const int Z_ERRNO=-1; - private const int Z_STREAM_ERROR=-2; - private const int Z_DATA_ERROR=-3; - private const int Z_MEM_ERROR=-4; - private const int Z_BUF_ERROR=-5; - private const int Z_VERSION_ERROR=-6; - - private const int fixed_bl = 9; - private const int fixed_bd = 5; - - static readonly int[] fixed_tl = { - 96,7,256, 0,8,80, 0,8,16, 84,8,115, - 82,7,31, 0,8,112, 0,8,48, 0,9,192, - 80,7,10, 0,8,96, 0,8,32, 0,9,160, - 0,8,0, 0,8,128, 0,8,64, 0,9,224, - 80,7,6, 0,8,88, 0,8,24, 0,9,144, - 83,7,59, 0,8,120, 0,8,56, 0,9,208, - 81,7,17, 0,8,104, 0,8,40, 0,9,176, - 0,8,8, 0,8,136, 0,8,72, 0,9,240, - 80,7,4, 0,8,84, 0,8,20, 85,8,227, - 83,7,43, 0,8,116, 0,8,52, 0,9,200, - 81,7,13, 0,8,100, 0,8,36, 0,9,168, - 0,8,4, 0,8,132, 0,8,68, 0,9,232, - 80,7,8, 0,8,92, 0,8,28, 0,9,152, - 84,7,83, 0,8,124, 0,8,60, 0,9,216, - 82,7,23, 0,8,108, 0,8,44, 0,9,184, - 0,8,12, 0,8,140, 0,8,76, 0,9,248, - 80,7,3, 0,8,82, 0,8,18, 85,8,163, - 83,7,35, 0,8,114, 0,8,50, 0,9,196, - 81,7,11, 0,8,98, 0,8,34, 0,9,164, - 0,8,2, 0,8,130, 0,8,66, 0,9,228, - 80,7,7, 0,8,90, 0,8,26, 0,9,148, - 84,7,67, 0,8,122, 0,8,58, 0,9,212, - 82,7,19, 0,8,106, 0,8,42, 0,9,180, - 0,8,10, 0,8,138, 0,8,74, 0,9,244, - 80,7,5, 0,8,86, 0,8,22, 192,8,0, - 83,7,51, 0,8,118, 0,8,54, 0,9,204, - 81,7,15, 0,8,102, 0,8,38, 0,9,172, - 0,8,6, 0,8,134, 0,8,70, 0,9,236, - 80,7,9, 0,8,94, 0,8,30, 0,9,156, - 84,7,99, 0,8,126, 0,8,62, 0,9,220, - 82,7,27, 0,8,110, 0,8,46, 0,9,188, - 0,8,14, 0,8,142, 0,8,78, 0,9,252, - 96,7,256, 0,8,81, 0,8,17, 85,8,131, - 82,7,31, 0,8,113, 0,8,49, 0,9,194, - 80,7,10, 0,8,97, 0,8,33, 0,9,162, - 0,8,1, 0,8,129, 0,8,65, 0,9,226, - 80,7,6, 0,8,89, 0,8,25, 0,9,146, - 83,7,59, 0,8,121, 0,8,57, 0,9,210, - 81,7,17, 0,8,105, 0,8,41, 0,9,178, - 0,8,9, 0,8,137, 0,8,73, 0,9,242, - 80,7,4, 0,8,85, 0,8,21, 80,8,258, - 83,7,43, 0,8,117, 0,8,53, 0,9,202, - 81,7,13, 0,8,101, 0,8,37, 0,9,170, - 0,8,5, 0,8,133, 0,8,69, 0,9,234, - 80,7,8, 0,8,93, 0,8,29, 0,9,154, - 84,7,83, 0,8,125, 0,8,61, 0,9,218, - 82,7,23, 0,8,109, 0,8,45, 0,9,186, - 0,8,13, 0,8,141, 0,8,77, 0,9,250, - 80,7,3, 0,8,83, 0,8,19, 85,8,195, - 83,7,35, 0,8,115, 0,8,51, 0,9,198, - 81,7,11, 0,8,99, 0,8,35, 0,9,166, - 0,8,3, 0,8,131, 0,8,67, 0,9,230, - 80,7,7, 0,8,91, 0,8,27, 0,9,150, - 84,7,67, 0,8,123, 0,8,59, 0,9,214, - 82,7,19, 0,8,107, 0,8,43, 0,9,182, - 0,8,11, 0,8,139, 0,8,75, 0,9,246, - 80,7,5, 0,8,87, 0,8,23, 192,8,0, - 83,7,51, 0,8,119, 0,8,55, 0,9,206, - 81,7,15, 0,8,103, 0,8,39, 0,9,174, - 0,8,7, 0,8,135, 0,8,71, 0,9,238, - 80,7,9, 0,8,95, 0,8,31, 0,9,158, - 84,7,99, 0,8,127, 0,8,63, 0,9,222, - 82,7,27, 0,8,111, 0,8,47, 0,9,190, - 0,8,15, 0,8,143, 0,8,79, 0,9,254, - 96,7,256, 0,8,80, 0,8,16, 84,8,115, - 82,7,31, 0,8,112, 0,8,48, 0,9,193, - - 80,7,10, 0,8,96, 0,8,32, 0,9,161, - 0,8,0, 0,8,128, 0,8,64, 0,9,225, - 80,7,6, 0,8,88, 0,8,24, 0,9,145, - 83,7,59, 0,8,120, 0,8,56, 0,9,209, - 81,7,17, 0,8,104, 0,8,40, 0,9,177, - 0,8,8, 0,8,136, 0,8,72, 0,9,241, - 80,7,4, 0,8,84, 0,8,20, 85,8,227, - 83,7,43, 0,8,116, 0,8,52, 0,9,201, - 81,7,13, 0,8,100, 0,8,36, 0,9,169, - 0,8,4, 0,8,132, 0,8,68, 0,9,233, - 80,7,8, 0,8,92, 0,8,28, 0,9,153, - 84,7,83, 0,8,124, 0,8,60, 0,9,217, - 82,7,23, 0,8,108, 0,8,44, 0,9,185, - 0,8,12, 0,8,140, 0,8,76, 0,9,249, - 80,7,3, 0,8,82, 0,8,18, 85,8,163, - 83,7,35, 0,8,114, 0,8,50, 0,9,197, - 81,7,11, 0,8,98, 0,8,34, 0,9,165, - 0,8,2, 0,8,130, 0,8,66, 0,9,229, - 80,7,7, 0,8,90, 0,8,26, 0,9,149, - 84,7,67, 0,8,122, 0,8,58, 0,9,213, - 82,7,19, 0,8,106, 0,8,42, 0,9,181, - 0,8,10, 0,8,138, 0,8,74, 0,9,245, - 80,7,5, 0,8,86, 0,8,22, 192,8,0, - 83,7,51, 0,8,118, 0,8,54, 0,9,205, - 81,7,15, 0,8,102, 0,8,38, 0,9,173, - 0,8,6, 0,8,134, 0,8,70, 0,9,237, - 80,7,9, 0,8,94, 0,8,30, 0,9,157, - 84,7,99, 0,8,126, 0,8,62, 0,9,221, - 82,7,27, 0,8,110, 0,8,46, 0,9,189, - 0,8,14, 0,8,142, 0,8,78, 0,9,253, - 96,7,256, 0,8,81, 0,8,17, 85,8,131, - 82,7,31, 0,8,113, 0,8,49, 0,9,195, - 80,7,10, 0,8,97, 0,8,33, 0,9,163, - 0,8,1, 0,8,129, 0,8,65, 0,9,227, - 80,7,6, 0,8,89, 0,8,25, 0,9,147, - 83,7,59, 0,8,121, 0,8,57, 0,9,211, - 81,7,17, 0,8,105, 0,8,41, 0,9,179, - 0,8,9, 0,8,137, 0,8,73, 0,9,243, - 80,7,4, 0,8,85, 0,8,21, 80,8,258, - 83,7,43, 0,8,117, 0,8,53, 0,9,203, - 81,7,13, 0,8,101, 0,8,37, 0,9,171, - 0,8,5, 0,8,133, 0,8,69, 0,9,235, - 80,7,8, 0,8,93, 0,8,29, 0,9,155, - 84,7,83, 0,8,125, 0,8,61, 0,9,219, - 82,7,23, 0,8,109, 0,8,45, 0,9,187, - 0,8,13, 0,8,141, 0,8,77, 0,9,251, - 80,7,3, 0,8,83, 0,8,19, 85,8,195, - 83,7,35, 0,8,115, 0,8,51, 0,9,199, - 81,7,11, 0,8,99, 0,8,35, 0,9,167, - 0,8,3, 0,8,131, 0,8,67, 0,9,231, - 80,7,7, 0,8,91, 0,8,27, 0,9,151, - 84,7,67, 0,8,123, 0,8,59, 0,9,215, - 82,7,19, 0,8,107, 0,8,43, 0,9,183, - 0,8,11, 0,8,139, 0,8,75, 0,9,247, - 80,7,5, 0,8,87, 0,8,23, 192,8,0, - 83,7,51, 0,8,119, 0,8,55, 0,9,207, - 81,7,15, 0,8,103, 0,8,39, 0,9,175, - 0,8,7, 0,8,135, 0,8,71, 0,9,239, - 80,7,9, 0,8,95, 0,8,31, 0,9,159, - 84,7,99, 0,8,127, 0,8,63, 0,9,223, - 82,7,27, 0,8,111, 0,8,47, 0,9,191, - 0,8,15, 0,8,143, 0,8,79, 0,9,255 - }; - static readonly int[] fixed_td = { - 80,5,1, 87,5,257, 83,5,17, 91,5,4097, - 81,5,5, 89,5,1025, 85,5,65, 93,5,16385, - 80,5,3, 88,5,513, 84,5,33, 92,5,8193, - 82,5,9, 90,5,2049, 86,5,129, 192,5,24577, - 80,5,2, 87,5,385, 83,5,25, 91,5,6145, - 81,5,7, 89,5,1537, 85,5,97, 93,5,24577, - 80,5,4, 88,5,769, 84,5,49, 92,5,12289, - 82,5,13, 90,5,3073, 86,5,193, 192,5,24577 - }; - - // Tables for deflate from PKZIP's appnote.txt. - static readonly int[] cplens = { // Copy lengths for literal codes 257..285 - 3, 4, 5, 6, 7, 8, 9, 10, 11, 13, 15, 17, 19, 23, 27, 31, - 35, 43, 51, 59, 67, 83, 99, 115, 131, 163, 195, 227, 258, 0, 0 - }; - - // see note #13 above about 258 - static readonly int[] cplext = { // Extra bits for literal codes 257..285 - 0, 0, 0, 0, 0, 0, 0, 0, 1, 1, 1, 1, 2, 2, 2, 2, - 3, 3, 3, 3, 4, 4, 4, 4, 5, 5, 5, 5, 0, 112, 112 // 112==invalid - }; - - static readonly int[] cpdist = { // Copy offsets for distance codes 0..29 - 1, 2, 3, 4, 5, 7, 9, 13, 17, 25, 33, 49, 65, 97, 129, 193, - 257, 385, 513, 769, 1025, 1537, 2049, 3073, 4097, 6145, - 8193, 12289, 16385, 24577 - }; - - static readonly int[] cpdext = { // Extra bits for distance codes - 0, 0, 0, 0, 1, 1, 2, 2, 3, 3, 4, 4, 5, 5, 6, 6, - 7, 7, 8, 8, 9, 9, 10, 10, 11, 11, - 12, 12, 13, 13}; - - // If BMAX needs to be larger than 16, then h and x[] should be uLong. - const int BMAX=15; // maximum bit length of any code - - int[] hn = null; // hufts used in space - int[] v = null; // work area for huft_build - int[] c = null; // bit length count table - int[] r = null; // table entry for structure assignment - int[] u = null; // table stack - int[] x = null; // bit offsets, then code stack - - private int huft_build(int[] b, // code lengths in bits (all assumed <= BMAX) - int bindex, - int n, // number of codes (assumed <= 288) - int s, // number of simple-valued codes (0..s-1) - int[] d, // list of base values for non-simple codes - int[] e, // list of extra bits for non-simple codes - int[] t, // result: starting table - int[] m, // maximum lookup bits, returns actual - int[] hp,// space for trees - int[] hn,// hufts used in space - int[] v // working area: values in order of bit length - ){ - // Given a list of code lengths and a maximum table size, make a set of - // tables to decode that set of codes. Return Z_OK on success, Z_BUF_ERROR - // if the given code set is incomplete (the tables are still built in this - // case), Z_DATA_ERROR if the input is invalid (an over-subscribed set of - // lengths), or Z_MEM_ERROR if not enough memory. - - int a; // counter for codes of length k - int f; // i repeats in table every f entries - int g; // maximum code length - int h; // table level - int i; // counter, current code - int j; // counter - int k; // number of bits in current code - int l; // bits per table (returned in m) - int mask; // (1 << w) - 1, to avoid cc -O bug on HP - int p; // pointer into c[], b[], or v[] - int q; // points to current table - int w; // bits before this table == (l * h) - int xp; // pointer into x - int y; // number of dummy codes added - int z; // number of entries in current table - - // Generate counts for each bit length - - p = 0; i = n; - do { - c[b[bindex+p]]++; p++; i--; // assume all entries <= BMAX - }while(i!=0); - - if(c[0] == n){ // null input--all zero length codes - t[0] = -1; - m[0] = 0; - return Z_OK; - } - - // Find minimum and maximum length, bound *m by those - l = m[0]; - for (j = 1; j <= BMAX; j++) - if(c[j]!=0) break; - k = j; // minimum code length - if(l < j){ - l = j; - } - for (i = BMAX; i!=0; i--){ - if(c[i]!=0) break; - } - g = i; // maximum code length - if(l > i){ - l = i; - } - m[0] = l; - - // Adjust last length count to fill out codes, if needed - for (y = 1 << j; j < i; j++, y <<= 1){ - if ((y -= c[j]) < 0){ - return Z_DATA_ERROR; - } - } - if ((y -= c[i]) < 0){ - return Z_DATA_ERROR; - } - c[i] += y; - - // Generate starting offsets into the value table for each length - x[1] = j = 0; - p = 1; xp = 2; - while (--i!=0) { // note that i == g from above - x[xp] = (j += c[p]); - xp++; - p++; - } - - // Make a table of values in order of bit lengths - i = 0; p = 0; - do { - if ((j = b[bindex+p]) != 0){ - v[x[j]++] = i; - } - p++; - } - while (++i < n); - n = x[g]; // set n to length of v - - // Generate the Huffman codes and for each, make the table entries - x[0] = i = 0; // first Huffman code is zero - p = 0; // grab values in bit order - h = -1; // no tables yet--level -1 - w = -l; // bits decoded == (l * h) - u[0] = 0; // just to keep compilers happy - q = 0; // ditto - z = 0; // ditto - - // go through the bit lengths (k already is bits in shortest code) - for (; k <= g; k++){ - a = c[k]; - while (a--!=0){ - // here i is the Huffman code of length k bits for value *p - // make tables up to required level - while (k > w + l){ - h++; - w += l; // previous table always l bits - // compute minimum size table less than or equal to l bits - z = g - w; - z = (z > l) ? l : z; // table size upper limit - if((f=1<<(j=k-w))>a+1){ // try a k-w bit table - // too few codes for k-w bit table - f -= a + 1; // deduct codes from patterns left - xp = k; - if(j < z){ - while (++j < z){ // try smaller tables up to z bits - if((f <<= 1) <= c[++xp]) - break; // enough codes to use up j bits - f -= c[xp]; // else deduct codes from patterns - } - } - } - z = 1 << j; // table entries for j-bit table - - // allocate new table - if (hn[0] + z > MANY){ // (note: doesn't matter for fixed) - return Z_DATA_ERROR; // overflow of MANY - } - u[h] = q = /*hp+*/ hn[0]; // DEBUG - hn[0] += z; - - // connect to last table, if there is one - if(h!=0){ - x[h]=i; // save pattern for backing up - r[0]=(byte)j; // bits in this table - r[1]=(byte)l; // bits to dump before this table - j=i>>(w - l); - r[2] = (int)(q - u[h-1] - j); // offset to this table - System.Array.Copy(r, 0, hp, (u[h-1]+j)*3, 3); // connect to last table - } - else{ - t[0] = q; // first table is returned result - } - } - - // set up table entry in r - r[1] = (byte)(k - w); - if (p >= n){ - r[0] = 128 + 64; // out of values--invalid code - } - else if (v[p] < s){ - r[0] = (byte)(v[p] < 256 ? 0 : 32 + 64); // 256 is end-of-block - r[2] = v[p++]; // simple code is just the value - } - else{ - r[0]=(byte)(e[v[p]-s]+16+64); // non-simple--look up in lists - r[2]=d[v[p++] - s]; - } - - // fill code-like entries with r - f=1<<(k-w); - for (j=i>>w;j>= 1){ - i ^= j; - } - i ^= j; - - // backup over finished tables - mask = (1 << w) - 1; // needed on HP, cc -O bug - while ((i & mask) != x[h]){ - h--; // don't need to update q - w -= l; - mask = (1 << w) - 1; - } - } - } - // Return Z_BUF_ERROR if we were given an incomplete table - return y != 0 && g != 1 ? Z_BUF_ERROR : Z_OK; - } - - internal int inflate_trees_bits(int[] c, // 19 code lengths - int[] bb, // bits tree desired/actual depth - int[] tb, // bits tree result - int[] hp, // space for trees - ZStream z // for messages - ){ - int result; - initWorkArea(19); - hn[0]=0; - result = huft_build(c, 0, 19, 19, null, null, tb, bb, hp, hn, v); - - if(result == Z_DATA_ERROR){ - z.msg = "oversubscribed dynamic bit lengths tree"; - } - else if(result == Z_BUF_ERROR || bb[0] == 0){ - z.msg = "incomplete dynamic bit lengths tree"; - result = Z_DATA_ERROR; - } - return result; - } - - internal int inflate_trees_dynamic(int nl, // number of literal/length codes - int nd, // number of distance codes - int[] c, // that many (total) code lengths - int[] bl, // literal desired/actual bit depth - int[] bd, // distance desired/actual bit depth - int[] tl, // literal/length tree result - int[] td, // distance tree result - int[] hp, // space for trees - ZStream z // for messages - ){ - int result; - - // build literal/length tree - initWorkArea(288); - hn[0]=0; - result = huft_build(c, 0, nl, 257, cplens, cplext, tl, bl, hp, hn, v); - if (result != Z_OK || bl[0] == 0){ - if(result == Z_DATA_ERROR){ - z.msg = "oversubscribed literal/length tree"; - } - else if (result != Z_MEM_ERROR){ - z.msg = "incomplete literal/length tree"; - result = Z_DATA_ERROR; - } - return result; - } - - // build distance tree - initWorkArea(288); - result = huft_build(c, nl, nd, 0, cpdist, cpdext, td, bd, hp, hn, v); - - if (result != Z_OK || (bd[0] == 0 && nl > 257)){ - if (result == Z_DATA_ERROR){ - z.msg = "oversubscribed distance tree"; - } - else if (result == Z_BUF_ERROR) { - z.msg = "incomplete distance tree"; - result = Z_DATA_ERROR; - } - else if (result != Z_MEM_ERROR){ - z.msg = "empty distance tree with lengths"; - result = Z_DATA_ERROR; - } - return result; - } - - return Z_OK; - } - - internal static int inflate_trees_fixed(int[] bl, //literal desired/actual bit depth - int[] bd, //distance desired/actual bit depth - int[][] tl,//literal/length tree result - int[][] td,//distance tree result - ZStream z //for memory allocation - ){ - bl[0]=fixed_bl; - bd[0]=fixed_bd; - tl[0]=fixed_tl; - td[0]=fixed_td; - return Z_OK; - } - - private void initWorkArea(int vsize){ - if(hn==null){ - hn=new int[1]; - v=new int[vsize]; - c=new int[BMAX+1]; - r=new int[3]; - u=new int[BMAX]; - x=new int[BMAX+1]; - } - if(v.Lengthstate); - return Z_OK; - } - - internal int inflateInit(ZStream z, int w){ - z.msg = null; - blocks = null; - - // handle undocumented nowrap option (no zlib header or check) - nowrap = 0; - if(w < 0){ - w = - w; - nowrap = 1; - } - - // set window size - if(w<8 ||w>15){ - inflateEnd(z); - return Z_STREAM_ERROR; - } - wbits=w; - - z.istate.blocks=new InfBlocks(z, - z.istate.nowrap!=0 ? null : this, - 1<>4)+8>z.istate.wbits){ - z.istate.mode = BAD; - z.msg="invalid window size"; - z.istate.marker = 5; // can't try inflateSync - break; - } - z.istate.mode=FLAG; - goto case FLAG; - case FLAG: - - if(z.avail_in==0)return r;r=f; - - z.avail_in--; z.total_in++; - b = (z.next_in[z.next_in_index++])&0xff; - - if((((z.istate.method << 8)+b) % 31)!=0){ - z.istate.mode = BAD; - z.msg = "incorrect header check"; - z.istate.marker = 5; // can't try inflateSync - break; - } - - if((b&PRESET_DICT)==0){ - z.istate.mode = BLOCKS; - break; - } - z.istate.mode = DICT4; - goto case DICT4; - case DICT4: - - if(z.avail_in==0)return r;r=f; - - z.avail_in--; z.total_in++; - z.istate.need=((z.next_in[z.next_in_index++]&0xff)<<24)&0xff000000L; - z.istate.mode=DICT3; - goto case DICT3; - case DICT3: - - if(z.avail_in==0)return r;r=f; - - z.avail_in--; z.total_in++; - z.istate.need+=((z.next_in[z.next_in_index++]&0xff)<<16)&0xff0000L; - z.istate.mode=DICT2; - goto case DICT2; - case DICT2: - - if(z.avail_in==0)return r;r=f; - - z.avail_in--; z.total_in++; - z.istate.need+=((z.next_in[z.next_in_index++]&0xff)<<8)&0xff00L; - z.istate.mode=DICT1; - goto case DICT1; - case DICT1: - - if(z.avail_in==0)return r;r=f; - - z.avail_in--; z.total_in++; - z.istate.need += (z.next_in[z.next_in_index++]&0xffL); - z.adler = z.istate.need; - z.istate.mode = DICT0; - return Z_NEED_DICT; - case DICT0: - z.istate.mode = BAD; - z.msg = "need dictionary"; - z.istate.marker = 0; // can try inflateSync - return Z_STREAM_ERROR; - case BLOCKS: - - r = z.istate.blocks.proc(z, r); - if(r == Z_DATA_ERROR){ - z.istate.mode = BAD; - z.istate.marker = 0; // can try inflateSync - break; - } - if(r == Z_OK){ - r = f; - } - if(r != Z_STREAM_END){ - return r; - } - r = f; - z.istate.blocks.reset(z, z.istate.was); - if(z.istate.nowrap!=0){ - z.istate.mode=DONE; - break; - } - z.istate.mode=CHECK4; - goto case CHECK4; - case CHECK4: - - if(z.avail_in==0)return r;r=f; - - z.avail_in--; z.total_in++; - z.istate.need=((z.next_in[z.next_in_index++]&0xff)<<24)&0xff000000L; - z.istate.mode=CHECK3; - goto case CHECK3; - case CHECK3: - - if(z.avail_in==0)return r;r=f; - - z.avail_in--; z.total_in++; - z.istate.need+=((z.next_in[z.next_in_index++]&0xff)<<16)&0xff0000L; - z.istate.mode = CHECK2; - goto case CHECK2; - case CHECK2: - - if(z.avail_in==0)return r;r=f; - - z.avail_in--; z.total_in++; - z.istate.need+=((z.next_in[z.next_in_index++]&0xff)<<8)&0xff00L; - z.istate.mode = CHECK1; - goto case CHECK1; - case CHECK1: - - if(z.avail_in==0)return r;r=f; - - z.avail_in--; z.total_in++; - z.istate.need+=(z.next_in[z.next_in_index++]&0xffL); - - if(((int)(z.istate.was[0])) != ((int)(z.istate.need))){ - z.istate.mode = BAD; - z.msg = "incorrect data check"; - z.istate.marker = 5; // can't try inflateSync - break; - } - - z.istate.mode = DONE; - goto case DONE; - case DONE: - return Z_STREAM_END; - case BAD: - return Z_DATA_ERROR; - default: - return Z_STREAM_ERROR; - } - } - } - - - internal int inflateSetDictionary(ZStream z, byte[] dictionary, int dictLength){ - int index=0; - int length = dictLength; - if(z==null || z.istate == null|| z.istate.mode != DICT0) - return Z_STREAM_ERROR; - - if(z._adler.adler32(1L, dictionary, 0, dictLength)!=z.adler){ - return Z_DATA_ERROR; - } - - z.adler = z._adler.adler32(0, null, 0, 0); - - if(length >= (1<>7)]); - } - - internal short[] dyn_tree; // the dynamic tree - internal int max_code; // largest code with non zero frequency - internal StaticTree stat_desc; // the corresponding static tree - - // Compute the optimal bit lengths for a tree and update the total bit length - // for the current block. - // IN assertion: the fields freq and dad are set, heap[heap_max] and - // above are the tree nodes sorted by increasing frequency. - // OUT assertions: the field len is set to the optimal bit length, the - // array bl_count contains the frequencies for each bit length. - // The length opt_len is updated; static_len is also updated if stree is - // not null. - internal void gen_bitlen(Deflate s){ - short[] tree = dyn_tree; - short[] stree = stat_desc.static_tree; - int[] extra = stat_desc.extra_bits; - int based = stat_desc.extra_base; - int max_length = stat_desc.max_length; - int h; // heap index - int n, m; // iterate over the tree elements - int bits; // bit length - int xbits; // extra bits - short f; // frequency - int overflow = 0; // number of elements with bit length too large - - for (bits = 0; bits <= MAX_BITS; bits++) s.bl_count[bits] = 0; - - // In a first pass, compute the optimal bit lengths (which may - // overflow in the case of the bit length tree). - tree[s.heap[s.heap_max]*2+1] = 0; // root of the heap - - for(h=s.heap_max+1; h max_length){ bits = max_length; overflow++; } - tree[n*2+1] = (short)bits; - // We overwrite tree[n*2+1] which is no longer needed - - if (n > max_code) continue; // not a leaf node - - s.bl_count[bits]++; - xbits = 0; - if (n >= based) xbits = extra[n-based]; - f = tree[n*2]; - s.opt_len += f * (bits + xbits); - if (stree!=null) s.static_len += f * (stree[n*2+1] + xbits); - } - if (overflow == 0) return; - - // This happens for example on obj2 and pic of the Calgary corpus - // Find the first bit length which could increase: - do { - bits = max_length-1; - while(s.bl_count[bits]==0) bits--; - s.bl_count[bits]--; // move one leaf down the tree - s.bl_count[bits+1]+=2; // move one overflow item as its brother - s.bl_count[max_length]--; - // The brother of the overflow item also moves one step up, - // but this does not affect bl_count[max_length] - overflow -= 2; - } - while (overflow > 0); - - for (bits = max_length; bits != 0; bits--) { - n = s.bl_count[bits]; - while (n != 0) { - m = s.heap[--h]; - if (m > max_code) continue; - if (tree[m*2+1] != bits) { - s.opt_len += (int)(((long)bits - (long)tree[m*2+1])*(long)tree[m*2]); - tree[m*2+1] = (short)bits; - } - n--; - } - } - } - - // Construct one Huffman tree and assigns the code bit strings and lengths. - // Update the total bit length for the current block. - // IN assertion: the field freq is set for all tree elements. - // OUT assertions: the fields len and code are set to the optimal bit length - // and corresponding code. The length opt_len is updated; static_len is - // also updated if stree is not null. The field max_code is set. - internal void build_tree(Deflate s){ - short[] tree=dyn_tree; - short[] stree=stat_desc.static_tree; - int elems=stat_desc.elems; - int n, m; // iterate over heap elements - int max_code=-1; // largest code with non zero frequency - int node; // new node being created - - // Construct the initial heap, with least frequent element in - // heap[1]. The sons of heap[n] are heap[2*n] and heap[2*n+1]. - // heap[0] is not used. - s.heap_len = 0; - s.heap_max = HEAP_SIZE; - - for(n=0; n=1; n--) - s.pqdownheap(tree, n); - - // Construct the Huffman tree by repeatedly combining the least two - // frequent nodes. - - node=elems; // next internal node of the tree - do{ - // n = node of least frequency - n=s.heap[1]; - s.heap[1]=s.heap[s.heap_len--]; - s.pqdownheap(tree, 1); - m=s.heap[1]; // m = node of next least frequency - - s.heap[--s.heap_max] = n; // keep the nodes sorted by frequency - s.heap[--s.heap_max] = m; - - // Create a new node father of n and m - tree[node*2] = (short)(tree[n*2] + tree[m*2]); - s.depth[node] = (byte)(System.Math.Max(s.depth[n],s.depth[m])+1); - tree[n*2+1] = tree[m*2+1] = (short)node; - - // and insert the new node in the heap - s.heap[1] = node++; - s.pqdownheap(tree, 1); - } - while(s.heap_len>=2); - - s.heap[--s.heap_max] = s.heap[1]; - - // At this point, the fields freq and dad are set. We can now - // generate the bit lengths. - - gen_bitlen(s); - - // The field len is now set, we can generate the bit codes - gen_codes(tree, max_code, s.bl_count); - } - - // Generate the codes for a given tree and bit counts (which need not be - // optimal). - // IN assertion: the array bl_count contains the bit length statistics for - // the given tree and the field len is set for all tree elements. - // OUT assertion: the field code is set for all tree elements of non - // zero code length. - internal static void gen_codes(short[] tree, // the tree to decorate - int max_code, // largest code with non zero frequency - short[] bl_count // number of codes at each bit length - ){ - short[] next_code=new short[MAX_BITS+1]; // next code value for each bit length - short code = 0; // running code value - int bits; // bit index - int n; // code index - - // The distribution counts are first used to generate the code values - // without bit reversal. - for (bits = 1; bits <= MAX_BITS; bits++) { - next_code[bits] = code = (short)((code + bl_count[bits-1]) << 1); - } - - // Check that the bit counts in bl_count are consistent. The last code - // must be all ones. - //Assert (code + bl_count[MAX_BITS]-1 == (1<>=1; - res<<=1; - } - while(--len>0); - return res>>1; - } - } -} \ No newline at end of file diff --git a/bc-sharp-crypto/src/util/zlib/ZDeflaterOutputStream.cs b/bc-sharp-crypto/src/util/zlib/ZDeflaterOutputStream.cs deleted file mode 100644 index d0f0bcb..0000000 --- a/bc-sharp-crypto/src/util/zlib/ZDeflaterOutputStream.cs +++ /dev/null @@ -1,171 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Utilities.Zlib { - /// - /// Summary description for DeflaterOutputStream. - /// - [Obsolete("Use 'ZOutputStream' instead")] - public class ZDeflaterOutputStream : Stream { - protected ZStream z=new ZStream(); - protected int flushLevel=JZlib.Z_NO_FLUSH; - private const int BUFSIZE = 4192; - protected byte[] buf=new byte[BUFSIZE]; - private byte[] buf1=new byte[1]; - - protected Stream outp; - - public ZDeflaterOutputStream(Stream outp) : this(outp, 6, false) { - } - - public ZDeflaterOutputStream(Stream outp, int level) : this(outp, level, false) { - } - - public ZDeflaterOutputStream(Stream outp, int level, bool nowrap) { - this.outp=outp; - z.deflateInit(level, nowrap); - } - - - public override bool CanRead { - get { - // TODO: Add DeflaterOutputStream.CanRead getter implementation - return false; - } - } - - public override bool CanSeek { - get { - // TODO: Add DeflaterOutputStream.CanSeek getter implementation - return false; - } - } - - public override bool CanWrite { - get { - // TODO: Add DeflaterOutputStream.CanWrite getter implementation - return true; - } - } - - public override long Length { - get { - // TODO: Add DeflaterOutputStream.Length getter implementation - return 0; - } - } - - public override long Position { - get { - // TODO: Add DeflaterOutputStream.Position getter implementation - return 0; - } - set { - // TODO: Add DeflaterOutputStream.Position setter implementation - } - } - - public override void Write(byte[] b, int off, int len) { - if(len==0) - return; - int err; - z.next_in=b; - z.next_in_index=off; - z.avail_in=len; - do{ - z.next_out=buf; - z.next_out_index=0; - z.avail_out=BUFSIZE; - err=z.deflate(flushLevel); - if(err!=JZlib.Z_OK) - throw new IOException("deflating: "+z.msg); - if (z.avail_out < BUFSIZE) - { - outp.Write(buf, 0, BUFSIZE-z.avail_out); - } - } - while(z.avail_in>0 || z.avail_out==0); - } - - public override long Seek(long offset, SeekOrigin origin) { - // TODO: Add DeflaterOutputStream.Seek implementation - return 0; - } - - public override void SetLength(long value) { - // TODO: Add DeflaterOutputStream.SetLength implementation - - } - - public override int Read(byte[] buffer, int offset, int count) { - // TODO: Add DeflaterOutputStream.Read implementation - return 0; - } - - public override void Flush() { - outp.Flush(); - } - - public override void WriteByte(byte b) { - buf1[0]=(byte)b; - Write(buf1, 0, 1); - } - - public void Finish() { - int err; - do{ - z.next_out=buf; - z.next_out_index=0; - z.avail_out=BUFSIZE; - err=z.deflate(JZlib.Z_FINISH); - if(err!=JZlib.Z_STREAM_END && err != JZlib.Z_OK) - throw new IOException("deflating: "+z.msg); - if(BUFSIZE-z.avail_out>0){ - outp.Write(buf, 0, BUFSIZE-z.avail_out); - } - } - while(z.avail_in>0 || z.avail_out==0); - Flush(); - } - - public void End() { - if(z==null) - return; - z.deflateEnd(); - z.free(); - z=null; - } - -#if PORTABLE - protected override void Dispose(bool disposing) - { - if (disposing) - { - try{ - try{Finish();} - catch (IOException) {} - } - finally{ - End(); - Platform.Dispose(outp); - outp=null; - } - } - base.Dispose(disposing); - } -#else - public override void Close() { - try{ - try{Finish();} - catch (IOException) {} - } - finally{ - End(); - Platform.Dispose(outp); - outp=null; - } - base.Close(); - } -#endif - } -} diff --git a/bc-sharp-crypto/src/util/zlib/ZInflaterInputStream.cs b/bc-sharp-crypto/src/util/zlib/ZInflaterInputStream.cs deleted file mode 100644 index ef742bb..0000000 --- a/bc-sharp-crypto/src/util/zlib/ZInflaterInputStream.cs +++ /dev/null @@ -1,140 +0,0 @@ -using System; -using System.IO; - -namespace Org.BouncyCastle.Utilities.Zlib { - /// - /// Summary description for DeflaterOutputStream. - /// - [Obsolete("Use 'ZInputStream' instead")] - public class ZInflaterInputStream : Stream { - protected ZStream z=new ZStream(); - protected int flushLevel=JZlib.Z_NO_FLUSH; - private const int BUFSIZE = 4192; - protected byte[] buf=new byte[BUFSIZE]; - private byte[] buf1=new byte[1]; - - protected Stream inp=null; - private bool nomoreinput=false; - - public ZInflaterInputStream(Stream inp) : this(inp, false) { - } - - public ZInflaterInputStream(Stream inp, bool nowrap) { - this.inp=inp; - z.inflateInit(nowrap); - z.next_in=buf; - z.next_in_index=0; - z.avail_in=0; - } - - public override bool CanRead { - get { - // TODO: Add DeflaterOutputStream.CanRead getter implementation - return true; - } - } - - public override bool CanSeek { - get { - // TODO: Add DeflaterOutputStream.CanSeek getter implementation - return false; - } - } - - public override bool CanWrite { - get { - // TODO: Add DeflaterOutputStream.CanWrite getter implementation - return false; - } - } - - public override long Length { - get { - // TODO: Add DeflaterOutputStream.Length getter implementation - return 0; - } - } - - public override long Position { - get { - // TODO: Add DeflaterOutputStream.Position getter implementation - return 0; - } - set { - // TODO: Add DeflaterOutputStream.Position setter implementation - } - } - - public override void Write(byte[] b, int off, int len) { - } - - public override long Seek(long offset, SeekOrigin origin) { - // TODO: Add DeflaterOutputStream.Seek implementation - return 0; - } - - public override void SetLength(long value) { - // TODO: Add DeflaterOutputStream.SetLength implementation - - } - - public override int Read(byte[] b, int off, int len) { - if(len==0) - return(0); - int err; - z.next_out=b; - z.next_out_index=off; - z.avail_out=len; - do { - if((z.avail_in==0)&&(!nomoreinput)) { // if buffer is empty and more input is avaiable, refill it - z.next_in_index=0; - z.avail_in=inp.Read(buf, 0, BUFSIZE);//(BUFSIZE 0) - { - output.Write(buf, 0, count); - } - } - while (z.avail_in > 0 || z.avail_out == 0); - - Flush(); - } - - public override void Flush() - { - output.Flush(); - } - - public virtual int FlushMode - { - get { return flushLevel; } - set { this.flushLevel = value; } - } - - public sealed override long Length { get { throw new NotSupportedException(); } } - public sealed override long Position - { - get { throw new NotSupportedException(); } - set { throw new NotSupportedException(); } - } - public sealed override int Read(byte[] buffer, int offset, int count) { throw new NotSupportedException(); } - public sealed override long Seek(long offset, SeekOrigin origin) { throw new NotSupportedException(); } - public sealed override void SetLength(long value) { throw new NotSupportedException(); } - - public virtual long TotalIn - { - get { return z.total_in; } - } - - public virtual long TotalOut - { - get { return z.total_out; } - } - - public override void Write(byte[] b, int off, int len) - { - if (len == 0) - return; - - z.next_in = b; - z.next_in_index = off; - z.avail_in = len; - - do - { - z.next_out = buf; - z.next_out_index = 0; - z.avail_out = buf.Length; - - int err = compress - ? z.deflate(flushLevel) - : z.inflate(flushLevel); - - if (err != JZlib.Z_OK) - // TODO -// throw new ZStreamException((compress ? "de" : "in") + "flating: " + z.msg); - throw new IOException((compress ? "de" : "in") + "flating: " + z.msg); - - output.Write(buf, 0, buf.Length - z.avail_out); - } - while (z.avail_in > 0 || z.avail_out == 0); - } - - public override void WriteByte(byte b) - { - buf1[0] = b; - Write(buf1, 0, 1); - } - } -} diff --git a/bc-sharp-crypto/src/util/zlib/ZStream.cs b/bc-sharp-crypto/src/util/zlib/ZStream.cs deleted file mode 100644 index 7ff9614..0000000 --- a/bc-sharp-crypto/src/util/zlib/ZStream.cs +++ /dev/null @@ -1,214 +0,0 @@ -using System; -/* - * $Id: ZStream.cs,v 1.1 2006-07-31 13:59:26 bouncy Exp $ - * -Copyright (c) 2000,2001,2002,2003 ymnk, JCraft,Inc. All rights reserved. - -Redistribution and use in source and binary forms, with or without -modification, are permitted provided that the following conditions are met: - - 1. Redistributions of source code must retain the above copyright notice, - this list of conditions and the following disclaimer. - - 2. Redistributions in binary form must reproduce the above copyright - notice, this list of conditions and the following disclaimer in - the documentation and/or other materials provided with the distribution. - - 3. The names of the authors may not be used to endorse or promote products - derived from this software without specific prior written permission. - -THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED WARRANTIES, -INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND -FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL JCRAFT, -INC. OR ANY CONTRIBUTORS TO THIS SOFTWARE BE LIABLE FOR ANY DIRECT, INDIRECT, -INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT -LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, -OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF -LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING -NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, -EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. - */ -/* - * This program is based on zlib-1.1.3, so all credit should go authors - * Jean-loup Gailly(jloup@gzip.org) and Mark Adler(madler@alumni.caltech.edu) - * and contributors of zlib. - */ - -namespace Org.BouncyCastle.Utilities.Zlib { - - public sealed class ZStream{ - - private const int MAX_WBITS=15; // 32K LZ77 window - private const int DEF_WBITS=MAX_WBITS; - - private const int Z_NO_FLUSH=0; - private const int Z_PARTIAL_FLUSH=1; - private const int Z_SYNC_FLUSH=2; - private const int Z_FULL_FLUSH=3; - private const int Z_FINISH=4; - - private const int MAX_MEM_LEVEL=9; - - private const int Z_OK=0; - private const int Z_STREAM_END=1; - private const int Z_NEED_DICT=2; - private const int Z_ERRNO=-1; - private const int Z_STREAM_ERROR=-2; - private const int Z_DATA_ERROR=-3; - private const int Z_MEM_ERROR=-4; - private const int Z_BUF_ERROR=-5; - private const int Z_VERSION_ERROR=-6; - - public byte[] next_in; // next input byte - public int next_in_index; - public int avail_in; // number of bytes available at next_in - public long total_in; // total nb of input bytes read so far - - public byte[] next_out; // next output byte should be put there - public int next_out_index; - public int avail_out; // remaining free space at next_out - public long total_out; // total nb of bytes output so far - - public String msg; - - internal Deflate dstate; - internal Inflate istate; - - internal int data_type; // best guess about the data type: ascii or binary - - public long adler; - internal Adler32 _adler=new Adler32(); - - public int inflateInit(){ - return inflateInit(DEF_WBITS); - } - public int inflateInit(bool nowrap){ - return inflateInit(DEF_WBITS, nowrap); - } - public int inflateInit(int w){ - return inflateInit(w, false); - } - - public int inflateInit(int w, bool nowrap){ - istate=new Inflate(); - return istate.inflateInit(this, nowrap?-w:w); - } - - public int inflate(int f){ - if(istate==null) return Z_STREAM_ERROR; - return istate.inflate(this, f); - } - public int inflateEnd(){ - if(istate==null) return Z_STREAM_ERROR; - int ret=istate.inflateEnd(this); - istate = null; - return ret; - } - public int inflateSync(){ - if(istate == null) - return Z_STREAM_ERROR; - return istate.inflateSync(this); - } - public int inflateSetDictionary(byte[] dictionary, int dictLength){ - if(istate == null) - return Z_STREAM_ERROR; - return istate.inflateSetDictionary(this, dictionary, dictLength); - } - - public int deflateInit(int level){ - return deflateInit(level, MAX_WBITS); - } - public int deflateInit(int level, bool nowrap){ - return deflateInit(level, MAX_WBITS, nowrap); - } - public int deflateInit(int level, int bits){ - return deflateInit(level, bits, false); - } - public int deflateInit(int level, int bits, bool nowrap){ - dstate=new Deflate(); - return dstate.deflateInit(this, level, nowrap?-bits:bits); - } - public int deflate(int flush){ - if(dstate==null){ - return Z_STREAM_ERROR; - } - return dstate.deflate(this, flush); - } - public int deflateEnd(){ - if(dstate==null) return Z_STREAM_ERROR; - int ret=dstate.deflateEnd(); - dstate=null; - return ret; - } - public int deflateParams(int level, int strategy){ - if(dstate==null) return Z_STREAM_ERROR; - return dstate.deflateParams(this, level, strategy); - } - public int deflateSetDictionary (byte[] dictionary, int dictLength){ - if(dstate == null) - return Z_STREAM_ERROR; - return dstate.deflateSetDictionary(this, dictionary, dictLength); - } - - // Flush as much pending output as possible. All deflate() output goes - // through this function so some applications may wish to modify it - // to avoid allocating a large strm->next_out buffer and copying into it. - // (See also read_buf()). - internal void flush_pending(){ - int len=dstate.pending; - - if(len>avail_out) len=avail_out; - if(len==0) return; - - if(dstate.pending_buf.Length<=dstate.pending_out || - next_out.Length<=next_out_index || - dstate.pending_buf.Length<(dstate.pending_out+len) || - next_out.Length<(next_out_index+len)){ - // System.out.println(dstate.pending_buf.length+", "+dstate.pending_out+ - // ", "+next_out.length+", "+next_out_index+", "+len); - // System.out.println("avail_out="+avail_out); - } - - System.Array.Copy(dstate.pending_buf, dstate.pending_out, - next_out, next_out_index, len); - - next_out_index+=len; - dstate.pending_out+=len; - total_out+=len; - avail_out-=len; - dstate.pending-=len; - if(dstate.pending==0){ - dstate.pending_out=0; - } - } - - // Read a new buffer from the current input stream, update the adler32 - // and total number of bytes read. All deflate() input goes through - // this function so some applications may wish to modify it to avoid - // allocating a large strm->next_in buffer and copying from it. - // (See also flush_pending()). - internal int read_buf(byte[] buf, int start, int size) { - int len=avail_in; - - if(len>size) len=size; - if(len==0) return 0; - - avail_in-=len; - - if(dstate.noheader==0) { - adler=_adler.adler32(adler, next_in, next_in_index, len); - } - System.Array.Copy(next_in, next_in_index, buf, start, len); - next_in_index += len; - total_in += len; - return len; - } - - public void free(){ - next_in=null; - next_out=null; - msg=null; - _adler=null; - } - } -} \ No newline at end of file diff --git a/bc-sharp-crypto/src/x509/AttributeCertificateHolder.cs b/bc-sharp-crypto/src/x509/AttributeCertificateHolder.cs deleted file mode 100644 index 04460cd..0000000 --- a/bc-sharp-crypto/src/x509/AttributeCertificateHolder.cs +++ /dev/null @@ -1,442 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.X509.Store; - -namespace Org.BouncyCastle.X509 -{ - /// - /// The Holder object. - /// 
    - 	/// Holder ::= SEQUENCE {
- 	///		baseCertificateID   [0] IssuerSerial OPTIONAL,
- 	///			-- the issuer and serial number of
- 	///			-- the holder's Public Key Certificate
- 	///		entityName          [1] GeneralNames OPTIONAL,
- 	///			-- the name of the claimant or role
- 	///		objectDigestInfo    [2] ObjectDigestInfo OPTIONAL
- 	///			-- used to directly authenticate the holder,
- 	///			-- for example, an executable
- 	/// }
-	///
    - ///     - public class AttributeCertificateHolder - //: CertSelector, Selector - : IX509Selector - { - internal readonly Holder holder; - - internal AttributeCertificateHolder( - Asn1Sequence seq) - { - holder = Holder.GetInstance(seq); - } - - public AttributeCertificateHolder( - X509Name issuerName, - BigInteger serialNumber) - { - holder = new Holder( - new IssuerSerial( - GenerateGeneralNames(issuerName), - new DerInteger(serialNumber))); - } - - public AttributeCertificateHolder( - X509Certificate cert) - { - X509Name name; - try - { - name = PrincipalUtilities.GetIssuerX509Principal(cert); - } - catch (Exception e) - { - throw new CertificateParsingException(e.Message); - } - - holder = new Holder(new IssuerSerial(GenerateGeneralNames(name), new DerInteger(cert.SerialNumber))); - } - - public AttributeCertificateHolder( - X509Name principal) - { - holder = new Holder(GenerateGeneralNames(principal)); - } - - /** - * Constructs a holder for v2 attribute certificates with a hash value for - * some type of object. - *

    - * digestedObjectType can be one of the following: - *

      - *
    • 0 - publicKey - A hash of the public key of the holder must be - * passed.
      • - *
    • 1 - publicKeyCert - A hash of the public key certificate of the - * holder must be passed.
      • - *
    • 2 - otherObjectDigest - A hash of some other object type must be - * passed. otherObjectTypeID must not be empty.
      • - *
    - *

    - *

    This cannot be used if a v1 attribute certificate is used.

    - * - * @param digestedObjectType The digest object type. - * @param digestAlgorithm The algorithm identifier for the hash. - * @param otherObjectTypeID The object type ID if - * digestedObjectType is - * otherObjectDigest. - * @param objectDigest The hash value. - */ - public AttributeCertificateHolder( - int digestedObjectType, - string digestAlgorithm, - string otherObjectTypeID, - byte[] objectDigest) - { - // TODO Allow 'objectDigest' to be null? - - holder = new Holder(new ObjectDigestInfo(digestedObjectType, otherObjectTypeID, - new AlgorithmIdentifier(new DerObjectIdentifier(digestAlgorithm)), Arrays.Clone(objectDigest))); - } - - /** - * Returns the digest object type if an object digest info is used. - *

    - *

      - *
    • 0 - publicKey - A hash of the public key of the holder must be - * passed.
      • - *
    • 1 - publicKeyCert - A hash of the public key certificate of the - * holder must be passed.
      • - *
    • 2 - otherObjectDigest - A hash of some other object type must be - * passed. otherObjectTypeID must not be empty.
      • - *
    - *

    - * - * @return The digest object type or -1 if no object digest info is set. - */ - public int DigestedObjectType - { - get - { - ObjectDigestInfo odi = holder.ObjectDigestInfo; - - return odi == null - ? -1 - : odi.DigestedObjectType.Value.IntValue; - } - } - - /** - * Returns the other object type ID if an object digest info is used. - * - * @return The other object type ID or null if no object - * digest info is set. - */ - public string DigestAlgorithm - { - get - { - ObjectDigestInfo odi = holder.ObjectDigestInfo; - - return odi == null - ? null - : odi.DigestAlgorithm.Algorithm.Id; - } - } - - /** - * Returns the hash if an object digest info is used. - * - * @return The hash or null if no object digest info is set. - */ - public byte[] GetObjectDigest() - { - ObjectDigestInfo odi = holder.ObjectDigestInfo; - - return odi == null - ? null - : odi.ObjectDigest.GetBytes(); - } - - /** - * Returns the digest algorithm ID if an object digest info is used. - * - * @return The digest algorithm ID or null if no object - * digest info is set. - */ - public string OtherObjectTypeID - { - get - { - ObjectDigestInfo odi = holder.ObjectDigestInfo; - - return odi == null - ? null - : odi.OtherObjectTypeID.Id; - } - } - - private GeneralNames GenerateGeneralNames( - X509Name principal) - { -// return GeneralNames.GetInstance(new DerSequence(new GeneralName(principal))); - return new GeneralNames(new GeneralName(principal)); - } - - private bool MatchesDN( - X509Name subject, - GeneralNames targets) - { - GeneralName[] names = targets.GetNames(); - - for (int i = 0; i != names.Length; i++) - { - GeneralName gn = names[i]; - - if (gn.TagNo == GeneralName.DirectoryName) - { - try - { - if (X509Name.GetInstance(gn.Name).Equivalent(subject)) - { - return true; - } - } - catch (Exception) - { - } - } - } - - return false; - } - - private object[] GetNames( - GeneralName[] names) - { - int count = 0; - for (int i = 0; i != names.Length; i++) - { - if (names[i].TagNo == GeneralName.DirectoryName) - { - ++count; - } - } - - object[] result = new object[count]; - - int pos = 0; - for (int i = 0; i != names.Length; i++) - { - if (names[i].TagNo == GeneralName.DirectoryName) - { - result[pos++] = X509Name.GetInstance(names[i].Name); - } - } - - return result; - } - - private X509Name[] GetPrincipals( - GeneralNames names) - { - object[] p = this.GetNames(names.GetNames()); - - int count = 0; - - for (int i = 0; i != p.Length; i++) - { - if (p[i] is X509Name) - { - ++count; - } - } - - X509Name[] result = new X509Name[count]; - - int pos = 0; - for (int i = 0; i != p.Length; i++) - { - if (p[i] is X509Name) - { - result[pos++] = (X509Name)p[i]; - } - } - - return result; - } - - /** - * Return any principal objects inside the attribute certificate holder entity names field. - * - * @return an array of IPrincipal objects (usually X509Name), null if no entity names field is set. - */ - public X509Name[] GetEntityNames() - { - if (holder.EntityName != null) - { - return GetPrincipals(holder.EntityName); - } - - return null; - } - - /** - * Return the principals associated with the issuer attached to this holder - * - * @return an array of principals, null if no BaseCertificateID is set. - */ - public X509Name[] GetIssuer() - { - if (holder.BaseCertificateID != null) - { - return GetPrincipals(holder.BaseCertificateID.Issuer); - } - - return null; - } - - /** - * Return the serial number associated with the issuer attached to this holder. - * - * @return the certificate serial number, null if no BaseCertificateID is set. - */ - public BigInteger SerialNumber - { - get - { - if (holder.BaseCertificateID != null) - { - return holder.BaseCertificateID.Serial.Value; - } - - return null; - } - } - - public object Clone() - { - return new AttributeCertificateHolder((Asn1Sequence)holder.ToAsn1Object()); - } - - public bool Match( -// Certificate cert) - X509Certificate x509Cert) - { -// if (!(cert is X509Certificate)) -// { -// return false; -// } -// -// X509Certificate x509Cert = (X509Certificate)cert; - - try - { - if (holder.BaseCertificateID != null) - { - return holder.BaseCertificateID.Serial.Value.Equals(x509Cert.SerialNumber) - && MatchesDN(PrincipalUtilities.GetIssuerX509Principal(x509Cert), holder.BaseCertificateID.Issuer); - } - - if (holder.EntityName != null) - { - if (MatchesDN(PrincipalUtilities.GetSubjectX509Principal(x509Cert), holder.EntityName)) - { - return true; - } - } - - if (holder.ObjectDigestInfo != null) - { - IDigest md = null; - try - { - md = DigestUtilities.GetDigest(DigestAlgorithm); - } - catch (Exception) - { - return false; - } - - switch (DigestedObjectType) - { - case ObjectDigestInfo.PublicKey: - { - // TODO: DSA Dss-parms - - //byte[] b = x509Cert.GetPublicKey().getEncoded(); - // TODO Is this the right way to encode? - byte[] b = SubjectPublicKeyInfoFactory.CreateSubjectPublicKeyInfo( - x509Cert.GetPublicKey()).GetEncoded(); - md.BlockUpdate(b, 0, b.Length); - break; - } - - case ObjectDigestInfo.PublicKeyCert: - { - byte[] b = x509Cert.GetEncoded(); - md.BlockUpdate(b, 0, b.Length); - break; - } - - // TODO Default handler? - } - - // TODO Shouldn't this be the other way around? - if (!Arrays.AreEqual(DigestUtilities.DoFinal(md), GetObjectDigest())) - { - return false; - } - } - } - catch (CertificateEncodingException) - { - return false; - } - - return false; - } - - public override bool Equals( - object obj) - { - if (obj == this) - { - return true; - } - - if (!(obj is AttributeCertificateHolder)) - { - return false; - } - - AttributeCertificateHolder other = (AttributeCertificateHolder)obj; - - return this.holder.Equals(other.holder); - } - - public override int GetHashCode() - { - return this.holder.GetHashCode(); - } - - public bool Match( - object obj) - { - if (!(obj is X509Certificate)) - { - return false; - } - -// return Match((Certificate)obj); - return Match((X509Certificate)obj); - } - } -} diff --git a/bc-sharp-crypto/src/x509/AttributeCertificateIssuer.cs b/bc-sharp-crypto/src/x509/AttributeCertificateIssuer.cs deleted file mode 100644 index 7df1416..0000000 --- a/bc-sharp-crypto/src/x509/AttributeCertificateIssuer.cs +++ /dev/null @@ -1,199 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.X509.Store; - -namespace Org.BouncyCastle.X509 -{ - /** - * Carrying class for an attribute certificate issuer. - */ - public class AttributeCertificateIssuer - //: CertSelector, Selector - : IX509Selector - { - internal readonly Asn1Encodable form; - - /** - * Set the issuer directly with the ASN.1 structure. - * - * @param issuer The issuer - */ - public AttributeCertificateIssuer( - AttCertIssuer issuer) - { - form = issuer.Issuer; - } - - public AttributeCertificateIssuer( - X509Name principal) - { -// form = new V2Form(GeneralNames.GetInstance(new DerSequence(new GeneralName(principal)))); - form = new V2Form(new GeneralNames(new GeneralName(principal))); - } - - private object[] GetNames() - { - GeneralNames name; - if (form is V2Form) - { - name = ((V2Form)form).IssuerName; - } - else - { - name = (GeneralNames)form; - } - - GeneralName[] names = name.GetNames(); - - int count = 0; - for (int i = 0; i != names.Length; i++) - { - if (names[i].TagNo == GeneralName.DirectoryName) - { - ++count; - } - } - - object[] result = new object[count]; - - int pos = 0; - for (int i = 0; i != names.Length; i++) - { - if (names[i].TagNo == GeneralName.DirectoryName) - { - result[pos++] = X509Name.GetInstance(names[i].Name); - } - } - - return result; - } - - /// Return any principal objects inside the attribute certificate issuer object. - /// An array of IPrincipal objects (usually X509Principal). - public X509Name[] GetPrincipals() - { - object[] p = this.GetNames(); - - int count = 0; - for (int i = 0; i != p.Length; i++) - { - if (p[i] is X509Name) - { - ++count; - } - } - - X509Name[] result = new X509Name[count]; - - int pos = 0; - for (int i = 0; i != p.Length; i++) - { - if (p[i] is X509Name) - { - result[pos++] = (X509Name)p[i]; - } - } - - return result; - } - - private bool MatchesDN( - X509Name subject, - GeneralNames targets) - { - GeneralName[] names = targets.GetNames(); - - for (int i = 0; i != names.Length; i++) - { - GeneralName gn = names[i]; - - if (gn.TagNo == GeneralName.DirectoryName) - { - try - { - if (X509Name.GetInstance(gn.Name).Equivalent(subject)) - { - return true; - } - } - catch (Exception) - { - } - } - } - - return false; - } - - public object Clone() - { - return new AttributeCertificateIssuer(AttCertIssuer.GetInstance(form)); - } - - public bool Match( -// Certificate cert) - X509Certificate x509Cert) - { -// if (!(cert is X509Certificate)) -// { -// return false; -// } -// -// X509Certificate x509Cert = (X509Certificate)cert; - - if (form is V2Form) - { - V2Form issuer = (V2Form) form; - if (issuer.BaseCertificateID != null) - { - return issuer.BaseCertificateID.Serial.Value.Equals(x509Cert.SerialNumber) - && MatchesDN(x509Cert.IssuerDN, issuer.BaseCertificateID.Issuer); - } - - return MatchesDN(x509Cert.SubjectDN, issuer.IssuerName); - } - - return MatchesDN(x509Cert.SubjectDN, (GeneralNames) form); - } - - public override bool Equals( - object obj) - { - if (obj == this) - { - return true; - } - - if (!(obj is AttributeCertificateIssuer)) - { - return false; - } - - AttributeCertificateIssuer other = (AttributeCertificateIssuer)obj; - - return this.form.Equals(other.form); - } - - public override int GetHashCode() - { - return this.form.GetHashCode(); - } - - public bool Match( - object obj) - { - if (!(obj is X509Certificate)) - { - return false; - } - - //return Match((Certificate)obj); - return Match((X509Certificate)obj); - } - } -} diff --git a/bc-sharp-crypto/src/x509/IX509AttributeCertificate.cs b/bc-sharp-crypto/src/x509/IX509AttributeCertificate.cs deleted file mode 100644 index 9a3004e..0000000 --- a/bc-sharp-crypto/src/x509/IX509AttributeCertificate.cs +++ /dev/null @@ -1,57 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Math; - -namespace Org.BouncyCastle.X509 -{ - /// Interface for an X.509 Attribute Certificate. - public interface IX509AttributeCertificate - : IX509Extension - { - /// The version number for the certificate. - int Version { get; } - - /// The serial number for the certificate. - BigInteger SerialNumber { get; } - - /// The UTC DateTime before which the certificate is not valid. - DateTime NotBefore { get; } - - /// The UTC DateTime after which the certificate is not valid. - DateTime NotAfter { get; } - - /// The holder of the certificate. - AttributeCertificateHolder Holder { get; } - - /// The issuer details for the certificate. - AttributeCertificateIssuer Issuer { get; } - - /// Return the attributes contained in the attribute block in the certificate. - /// An array of attributes. - X509Attribute[] GetAttributes(); - - /// Return the attributes with the same type as the passed in oid. - /// The object identifier we wish to match. - /// An array of matched attributes, null if there is no match. - X509Attribute[] GetAttributes(string oid); - - bool[] GetIssuerUniqueID(); - - bool IsValidNow { get; } - bool IsValid(DateTime date); - - void CheckValidity(); - void CheckValidity(DateTime date); - - byte[] GetSignature(); - - void Verify(AsymmetricKeyParameter publicKey); - - /// Return an ASN.1 encoded byte array representing the attribute certificate. - /// An ASN.1 encoded byte array. - /// If the certificate cannot be encoded. - byte[] GetEncoded(); - } -} diff --git a/bc-sharp-crypto/src/x509/IX509Extension.cs b/bc-sharp-crypto/src/x509/IX509Extension.cs deleted file mode 100644 index e861e87..0000000 --- a/bc-sharp-crypto/src/x509/IX509Extension.cs +++ /dev/null @@ -1,27 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.X509 -{ - public interface IX509Extension - { - /// - /// Get all critical extension values, by oid - /// - /// IDictionary with string (OID) keys and Asn1OctetString values - ISet GetCriticalExtensionOids(); - - /// - /// Get all non-critical extension values, by oid - /// - /// IDictionary with string (OID) keys and Asn1OctetString values - ISet GetNonCriticalExtensionOids(); - - [Obsolete("Use version taking a DerObjectIdentifier instead")] - Asn1OctetString GetExtensionValue(string oid); - - Asn1OctetString GetExtensionValue(DerObjectIdentifier oid); - } -} diff --git a/bc-sharp-crypto/src/x509/PEMParser.cs b/bc-sharp-crypto/src/x509/PEMParser.cs deleted file mode 100644 index 28f28ee..0000000 --- a/bc-sharp-crypto/src/x509/PEMParser.cs +++ /dev/null @@ -1,95 +0,0 @@ -using System; -using System.IO; -using System.Text; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Encoders; - -namespace Org.BouncyCastle.X509 -{ - class PemParser - { - private readonly string _header1; - private readonly string _header2; - private readonly string _footer1; - private readonly string _footer2; - - internal PemParser( - string type) - { - _header1 = "-----BEGIN " + type + "-----"; - _header2 = "-----BEGIN X509 " + type + "-----"; - _footer1 = "-----END " + type + "-----"; - _footer2 = "-----END X509 " + type + "-----"; - } - - private string ReadLine( - Stream inStream) - { - int c; - StringBuilder l = new StringBuilder(); - - do - { - while (((c = inStream.ReadByte()) != '\r') && c != '\n' && (c >= 0)) - { - if (c == '\r') - { - continue; - } - - l.Append((char)c); - } - } - while (c >= 0 && l.Length == 0); - - if (c < 0) - { - return null; - } - - return l.ToString(); - } - - internal Asn1Sequence ReadPemObject( - Stream inStream) - { - string line; - StringBuilder pemBuf = new StringBuilder(); - - while ((line = ReadLine(inStream)) != null) - { - if (Platform.StartsWith(line, _header1) || Platform.StartsWith(line, _header2)) - { - break; - } - } - - while ((line = ReadLine(inStream)) != null) - { - if (Platform.StartsWith(line, _footer1) || Platform.StartsWith(line, _footer2)) - { - break; - } - - pemBuf.Append(line); - } - - if (pemBuf.Length != 0) - { - Asn1Object o = Asn1Object.FromByteArray(Base64.Decode(pemBuf.ToString())); - - if (!(o is Asn1Sequence)) - { - throw new IOException("malformed PEM data encountered"); - } - - return (Asn1Sequence) o; - } - - return null; - } - } -} - diff --git a/bc-sharp-crypto/src/x509/PrincipalUtil.cs b/bc-sharp-crypto/src/x509/PrincipalUtil.cs deleted file mode 100644 index 0edc4a3..0000000 --- a/bc-sharp-crypto/src/x509/PrincipalUtil.cs +++ /dev/null @@ -1,70 +0,0 @@ -using System; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Security.Certificates; - -namespace Org.BouncyCastle.X509 -{ - /// - /// A utility class that will extract X509Principal objects from X.509 certificates. - ///

    - /// Use this in preference to trying to recreate a principal from a string, not all - /// DNs are what they should be, so it's best to leave them encoded where they - /// can be.

    - ///     - public class PrincipalUtilities - { - /// Return the issuer of the given cert as an X509Principal. - public static X509Name GetIssuerX509Principal( - X509Certificate cert) - { - try - { - TbsCertificateStructure tbsCert = TbsCertificateStructure.GetInstance( - Asn1Object.FromByteArray(cert.GetTbsCertificate())); - - return tbsCert.Issuer; - } - catch (Exception e) - { - throw new CertificateEncodingException("Could not extract issuer", e); - } - } - - /// Return the subject of the given cert as an X509Principal. - public static X509Name GetSubjectX509Principal( - X509Certificate cert) - { - try - { - TbsCertificateStructure tbsCert = TbsCertificateStructure.GetInstance( - Asn1Object.FromByteArray(cert.GetTbsCertificate())); - - return tbsCert.Subject; - } - catch (Exception e) - { - throw new CertificateEncodingException("Could not extract subject", e); - } - } - - /// Return the issuer of the given CRL as an X509Principal. - public static X509Name GetIssuerX509Principal( - X509Crl crl) - { - try - { - TbsCertificateList tbsCertList = TbsCertificateList.GetInstance( - Asn1Object.FromByteArray(crl.GetTbsCertList())); - - return tbsCertList.Issuer; - } - catch (Exception e) - { - throw new CrlException("Could not extract issuer", e); - } - } - } -} diff --git a/bc-sharp-crypto/src/x509/SubjectPublicKeyInfoFactory.cs b/bc-sharp-crypto/src/x509/SubjectPublicKeyInfoFactory.cs deleted file mode 100644 index 7614321..0000000 --- a/bc-sharp-crypto/src/x509/SubjectPublicKeyInfoFactory.cs +++ /dev/null @@ -1,184 +0,0 @@ -using System; - -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.CryptoPro; -using Org.BouncyCastle.Asn1.Oiw; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Math.EC; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.X509 -{ - /// - /// A factory to produce Public Key Info Objects. - /// - public sealed class SubjectPublicKeyInfoFactory - { - private SubjectPublicKeyInfoFactory() - { - } - - /// - /// Create a Subject Public Key Info object for a given public key. - /// - /// One of ElGammalPublicKeyParameters, DSAPublicKeyParameter, DHPublicKeyParameters, RsaKeyParameters or ECPublicKeyParameters - /// A subject public key info object. - /// Throw exception if object provided is not one of the above. - public static SubjectPublicKeyInfo CreateSubjectPublicKeyInfo( - AsymmetricKeyParameter key) - { - if (key == null) - throw new ArgumentNullException("key"); - if (key.IsPrivate) - throw new ArgumentException("Private key passed - public key expected.", "key"); - - if (key is ElGamalPublicKeyParameters) - { - ElGamalPublicKeyParameters _key = (ElGamalPublicKeyParameters)key; - ElGamalParameters kp = _key.Parameters; - - SubjectPublicKeyInfo info = new SubjectPublicKeyInfo( - new AlgorithmIdentifier( - OiwObjectIdentifiers.ElGamalAlgorithm, - new ElGamalParameter(kp.P, kp.G).ToAsn1Object()), - new DerInteger(_key.Y)); - - return info; - } - - if (key is DsaPublicKeyParameters) - { - DsaPublicKeyParameters _key = (DsaPublicKeyParameters) key; - DsaParameters kp = _key.Parameters; - Asn1Encodable ae = kp == null - ? null - : new DsaParameter(kp.P, kp.Q, kp.G).ToAsn1Object(); - - return new SubjectPublicKeyInfo( - new AlgorithmIdentifier(X9ObjectIdentifiers.IdDsa, ae), - new DerInteger(_key.Y)); - } - - if (key is DHPublicKeyParameters) - { - DHPublicKeyParameters _key = (DHPublicKeyParameters) key; - DHParameters kp = _key.Parameters; - - SubjectPublicKeyInfo info = new SubjectPublicKeyInfo( - new AlgorithmIdentifier( - _key.AlgorithmOid, - new DHParameter(kp.P, kp.G, kp.L).ToAsn1Object()), - new DerInteger(_key.Y)); - - return info; - } // End of DH - - if (key is RsaKeyParameters) - { - RsaKeyParameters _key = (RsaKeyParameters) key; - - SubjectPublicKeyInfo info = new SubjectPublicKeyInfo( - new AlgorithmIdentifier(PkcsObjectIdentifiers.RsaEncryption, DerNull.Instance), - new RsaPublicKeyStructure(_key.Modulus, _key.Exponent).ToAsn1Object()); - - return info; - } // End of RSA. - - if (key is ECPublicKeyParameters) - { - ECPublicKeyParameters _key = (ECPublicKeyParameters) key; - - if (_key.AlgorithmName == "ECGOST3410") - { - if (_key.PublicKeyParamSet == null) - throw Platform.CreateNotImplementedException("Not a CryptoPro parameter set"); - - ECPoint q = _key.Q.Normalize(); - BigInteger bX = q.AffineXCoord.ToBigInteger(); - BigInteger bY = q.AffineYCoord.ToBigInteger(); - - byte[] encKey = new byte[64]; - ExtractBytes(encKey, 0, bX); - ExtractBytes(encKey, 32, bY); - - Gost3410PublicKeyAlgParameters gostParams = new Gost3410PublicKeyAlgParameters( - _key.PublicKeyParamSet, CryptoProObjectIdentifiers.GostR3411x94CryptoProParamSet); - - AlgorithmIdentifier algID = new AlgorithmIdentifier( - CryptoProObjectIdentifiers.GostR3410x2001, - gostParams.ToAsn1Object()); - - return new SubjectPublicKeyInfo(algID, new DerOctetString(encKey)); - } - else - { - X962Parameters x962; - if (_key.PublicKeyParamSet == null) - { - ECDomainParameters kp = _key.Parameters; - X9ECParameters ecP = new X9ECParameters(kp.Curve, kp.G, kp.N, kp.H, kp.GetSeed()); - - x962 = new X962Parameters(ecP); - } - else - { - x962 = new X962Parameters(_key.PublicKeyParamSet); - } - - Asn1OctetString p = (Asn1OctetString)(new X9ECPoint(_key.Q).ToAsn1Object()); - - AlgorithmIdentifier algID = new AlgorithmIdentifier( - X9ObjectIdentifiers.IdECPublicKey, x962.ToAsn1Object()); - - return new SubjectPublicKeyInfo(algID, p.GetOctets()); - } - } // End of EC - - if (key is Gost3410PublicKeyParameters) - { - Gost3410PublicKeyParameters _key = (Gost3410PublicKeyParameters) key; - - if (_key.PublicKeyParamSet == null) - throw Platform.CreateNotImplementedException("Not a CryptoPro parameter set"); - - byte[] keyEnc = _key.Y.ToByteArrayUnsigned(); - byte[] keyBytes = new byte[keyEnc.Length]; - - for (int i = 0; i != keyBytes.Length; i++) - { - keyBytes[i] = keyEnc[keyEnc.Length - 1 - i]; // must be little endian - } - - Gost3410PublicKeyAlgParameters algParams = new Gost3410PublicKeyAlgParameters( - _key.PublicKeyParamSet, CryptoProObjectIdentifiers.GostR3411x94CryptoProParamSet); - - AlgorithmIdentifier algID = new AlgorithmIdentifier( - CryptoProObjectIdentifiers.GostR3410x94, - algParams.ToAsn1Object()); - - return new SubjectPublicKeyInfo(algID, new DerOctetString(keyBytes)); - } - - throw new ArgumentException("Class provided no convertible: " + Platform.GetTypeName(key)); - } - - private static void ExtractBytes( - byte[] encKey, - int offset, - BigInteger bI) - { - byte[] val = bI.ToByteArray(); - int n = (bI.BitLength + 7) / 8; - - for (int i = 0; i < n; ++i) - { - encKey[offset + i] = val[val.Length - 1 - i]; - } - } - } -} diff --git a/bc-sharp-crypto/src/x509/X509AttrCertParser.cs b/bc-sharp-crypto/src/x509/X509AttrCertParser.cs deleted file mode 100644 index a5c0736..0000000 --- a/bc-sharp-crypto/src/x509/X509AttrCertParser.cs +++ /dev/null @@ -1,173 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.X509 -{ - public class X509AttrCertParser - { - private static readonly PemParser PemAttrCertParser = new PemParser("ATTRIBUTE CERTIFICATE"); - - private Asn1Set sData; - private int sDataObjectCount; - private Stream currentStream; - - private IX509AttributeCertificate ReadDerCertificate( - Asn1InputStream dIn) - { - Asn1Sequence seq = (Asn1Sequence)dIn.ReadObject(); - - if (seq.Count > 1 && seq[0] is DerObjectIdentifier) - { - if (seq[0].Equals(PkcsObjectIdentifiers.SignedData)) - { - sData = SignedData.GetInstance( - Asn1Sequence.GetInstance((Asn1TaggedObject) seq[1], true)).Certificates; - - return GetCertificate(); - } - } - -// return new X509V2AttributeCertificate(seq.getEncoded()); - return new X509V2AttributeCertificate(AttributeCertificate.GetInstance(seq)); - } - - private IX509AttributeCertificate GetCertificate() - { - if (sData != null) - { - while (sDataObjectCount < sData.Count) - { - object obj = sData[sDataObjectCount++]; - - if (obj is Asn1TaggedObject && ((Asn1TaggedObject)obj).TagNo == 2) - { - //return new X509V2AttributeCertificate( - // Asn1Sequence.GetInstance((Asn1TaggedObject)obj, false).GetEncoded()); - return new X509V2AttributeCertificate( - AttributeCertificate.GetInstance( - Asn1Sequence.GetInstance((Asn1TaggedObject)obj, false))); - } - } - } - - return null; - } - - private IX509AttributeCertificate ReadPemCertificate( - Stream inStream) - { - Asn1Sequence seq = PemAttrCertParser.ReadPemObject(inStream); - - return seq == null - ? null - //: new X509V2AttributeCertificate(seq.getEncoded()); - : new X509V2AttributeCertificate(AttributeCertificate.GetInstance(seq)); - } - - /// - /// Create loading data from byte array. - /// - /// - public IX509AttributeCertificate ReadAttrCert( - byte[] input) - { - return ReadAttrCert(new MemoryStream(input, false)); - } - - /// - /// Create loading data from byte array. - /// - /// - public ICollection ReadAttrCerts( - byte[] input) - { - return ReadAttrCerts(new MemoryStream(input, false)); - } - - /** - * Generates a certificate object and initializes it with the data - * read from the input stream inStream. - */ - public IX509AttributeCertificate ReadAttrCert( - Stream inStream) - { - if (inStream == null) - throw new ArgumentNullException("inStream"); - if (!inStream.CanRead) - throw new ArgumentException("inStream must be read-able", "inStream"); - - if (currentStream == null) - { - currentStream = inStream; - sData = null; - sDataObjectCount = 0; - } - else if (currentStream != inStream) // reset if input stream has changed - { - currentStream = inStream; - sData = null; - sDataObjectCount = 0; - } - - try - { - if (sData != null) - { - if (sDataObjectCount != sData.Count) - { - return GetCertificate(); - } - - sData = null; - sDataObjectCount = 0; - return null; - } - - PushbackStream pis = new PushbackStream(inStream); - int tag = pis.ReadByte(); - - if (tag < 0) - return null; - - pis.Unread(tag); - - if (tag != 0x30) // assume ascii PEM encoded. - { - return ReadPemCertificate(pis); - } - - return ReadDerCertificate(new Asn1InputStream(pis)); - } - catch (Exception e) - { - throw new CertificateException(e.ToString()); - } - } - - /** - * Returns a (possibly empty) collection view of the certificates - * read from the given input stream inStream. - */ - public ICollection ReadAttrCerts( - Stream inStream) - { - IX509AttributeCertificate attrCert; - IList attrCerts = Platform.CreateArrayList(); - - while ((attrCert = ReadAttrCert(inStream)) != null) - { - attrCerts.Add(attrCert); - } - - return attrCerts; - } - } -} \ No newline at end of file diff --git a/bc-sharp-crypto/src/x509/X509Attribute.cs b/bc-sharp-crypto/src/x509/X509Attribute.cs deleted file mode 100644 index 248d66c..0000000 --- a/bc-sharp-crypto/src/x509/X509Attribute.cs +++ /dev/null @@ -1,76 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; - -namespace Org.BouncyCastle.X509 -{ - /** - * Class for carrying the values in an X.509 Attribute. - */ - public class X509Attribute - : Asn1Encodable - { - private readonly AttributeX509 attr; - - /** - * @param at an object representing an attribute. - */ - internal X509Attribute( - Asn1Encodable at) - { - this.attr = AttributeX509.GetInstance(at); - } - - /** - * Create an X.509 Attribute with the type given by the passed in oid and - * the value represented by an ASN.1 Set containing value. - * - * @param oid type of the attribute - * @param value value object to go into the atribute's value set. - */ - public X509Attribute( - string oid, - Asn1Encodable value) - { - this.attr = new AttributeX509(new DerObjectIdentifier(oid), new DerSet(value)); - } - - /** - * Create an X.59 Attribute with the type given by the passed in oid and the - * value represented by an ASN.1 Set containing the objects in value. - * - * @param oid type of the attribute - * @param value vector of values to go in the attribute's value set. - */ - public X509Attribute( - string oid, - Asn1EncodableVector value) - { - this.attr = new AttributeX509(new DerObjectIdentifier(oid), new DerSet(value)); - } - - public string Oid - { - get { return attr.AttrType.Id; } - } - - public Asn1Encodable[] GetValues() - { - Asn1Set s = attr.AttrValues; - Asn1Encodable[] values = new Asn1Encodable[s.Count]; - - for (int i = 0; i != s.Count; i++) - { - values[i] = (Asn1Encodable)s[i]; - } - - return values; - } - - public override Asn1Object ToAsn1Object() - { - return attr.ToAsn1Object(); - } - } -} diff --git a/bc-sharp-crypto/src/x509/X509CertPairParser.cs b/bc-sharp-crypto/src/x509/X509CertPairParser.cs deleted file mode 100644 index 8261259..0000000 --- a/bc-sharp-crypto/src/x509/X509CertPairParser.cs +++ /dev/null @@ -1,95 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.X509 -{ - public class X509CertPairParser - { - private Stream currentStream; - - private X509CertificatePair ReadDerCrossCertificatePair( - Stream inStream) - { - Asn1InputStream dIn = new Asn1InputStream(inStream);//, ProviderUtil.getReadLimit(in)); - Asn1Sequence seq = (Asn1Sequence)dIn.ReadObject(); - CertificatePair pair = CertificatePair.GetInstance(seq); - return new X509CertificatePair(pair); - } - - /// - /// Create loading data from byte array. - /// - /// - public X509CertificatePair ReadCertPair( - byte[] input) - { - return ReadCertPair(new MemoryStream(input, false)); - } - - /// - /// Create loading data from byte array. - /// - /// - public ICollection ReadCertPairs( - byte[] input) - { - return ReadCertPairs(new MemoryStream(input, false)); - } - - public X509CertificatePair ReadCertPair( - Stream inStream) - { - if (inStream == null) - throw new ArgumentNullException("inStream"); - if (!inStream.CanRead) - throw new ArgumentException("inStream must be read-able", "inStream"); - - if (currentStream == null) - { - currentStream = inStream; - } - else if (currentStream != inStream) // reset if input stream has changed - { - currentStream = inStream; - } - - try - { - PushbackStream pis = new PushbackStream(inStream); - int tag = pis.ReadByte(); - - if (tag < 0) - return null; - - pis.Unread(tag); - - return ReadDerCrossCertificatePair(pis); - } - catch (Exception e) - { - throw new CertificateException(e.ToString()); - } - } - - public ICollection ReadCertPairs( - Stream inStream) - { - X509CertificatePair certPair; - IList certPairs = Platform.CreateArrayList(); - - while ((certPair = ReadCertPair(inStream)) != null) - { - certPairs.Add(certPair); - } - - return certPairs; - } - } -} diff --git a/bc-sharp-crypto/src/x509/X509Certificate.cs b/bc-sharp-crypto/src/x509/X509Certificate.cs deleted file mode 100644 index 6d7bd7a..0000000 --- a/bc-sharp-crypto/src/x509/X509Certificate.cs +++ /dev/null @@ -1,604 +0,0 @@ -using System; -using System.Collections; -using System.IO; -using System.Text; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Misc; -using Org.BouncyCastle.Asn1.Utilities; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Encoders; -using Org.BouncyCastle.X509.Extension; -using Org.BouncyCastle.Crypto.Operators; - -namespace Org.BouncyCastle.X509 -{ - /// - /// An Object representing an X509 Certificate. - /// Has static methods for loading Certificates encoded in many forms that return X509Certificate Objects. - /// - public class X509Certificate - : X509ExtensionBase -// , PKCS12BagAttributeCarrier - { - private readonly X509CertificateStructure c; -// private Hashtable pkcs12Attributes = new Hashtable(); -// private ArrayList pkcs12Ordering = new ArrayList(); - private readonly BasicConstraints basicConstraints; - private readonly bool[] keyUsage; - - private bool hashValueSet; - private int hashValue; - - protected X509Certificate() - { - } - - public X509Certificate( - X509CertificateStructure c) - { - this.c = c; - - try - { - Asn1OctetString str = this.GetExtensionValue(new DerObjectIdentifier("2.5.29.19")); - - if (str != null) - { - basicConstraints = BasicConstraints.GetInstance( - X509ExtensionUtilities.FromExtensionValue(str)); - } - } - catch (Exception e) - { - throw new CertificateParsingException("cannot construct BasicConstraints: " + e); - } - - try - { - Asn1OctetString str = this.GetExtensionValue(new DerObjectIdentifier("2.5.29.15")); - - if (str != null) - { - DerBitString bits = DerBitString.GetInstance( - X509ExtensionUtilities.FromExtensionValue(str)); - - byte[] bytes = bits.GetBytes(); - int length = (bytes.Length * 8) - bits.PadBits; - - keyUsage = new bool[(length < 9) ? 9 : length]; - - for (int i = 0; i != length; i++) - { -// keyUsage[i] = (bytes[i / 8] & (0x80 >>> (i % 8))) != 0; - keyUsage[i] = (bytes[i / 8] & (0x80 >> (i % 8))) != 0; - } - } - else - { - keyUsage = null; - } - } - catch (Exception e) - { - throw new CertificateParsingException("cannot construct KeyUsage: " + e); - } - } - -// internal X509Certificate( -// Asn1Sequence seq) -// { -// this.c = X509CertificateStructure.GetInstance(seq); -// } - -// /// -// /// Load certificate from byte array. -// /// -// /// Byte array containing encoded X509Certificate. -// public X509Certificate( -// byte[] encoded) -// : this((Asn1Sequence) new Asn1InputStream(encoded).ReadObject()) -// { -// } -// -// /// -// /// Load certificate from Stream. -// /// Must be positioned at start of certificate. -// /// -// /// -// public X509Certificate( -// Stream input) -// : this((Asn1Sequence) new Asn1InputStream(input).ReadObject()) -// { -// } - - public virtual X509CertificateStructure CertificateStructure - { - get { return c; } - } - - /// - /// Return true if the current time is within the start and end times nominated on the certificate. - /// - /// true id certificate is valid for the current time. - public virtual bool IsValidNow - { - get { return IsValid(DateTime.UtcNow); } - } - - /// - /// Return true if the nominated time is within the start and end times nominated on the certificate. - /// - /// The time to test validity against. - /// True if certificate is valid for nominated time. - public virtual bool IsValid( - DateTime time) - { - return time.CompareTo(NotBefore) >= 0 && time.CompareTo(NotAfter) <= 0; - } - - /// - /// Checks if the current date is within certificate's validity period. - /// - public virtual void CheckValidity() - { - this.CheckValidity(DateTime.UtcNow); - } - - /// - /// Checks if the given date is within certificate's validity period. - /// - /// if the certificate is expired by given date - /// if the certificate is not yet valid on given date - public virtual void CheckValidity( - DateTime time) - { - if (time.CompareTo(NotAfter) > 0) - throw new CertificateExpiredException("certificate expired on " + c.EndDate.GetTime()); - if (time.CompareTo(NotBefore) < 0) - throw new CertificateNotYetValidException("certificate not valid until " + c.StartDate.GetTime()); - } - - /// - /// Return the certificate's version. - /// - /// An integer whose value Equals the version of the cerficate. - public virtual int Version - { - get { return c.Version; } - } - - /// - /// Return a BigInteger containing the serial number. - /// - /// The Serial number. - public virtual BigInteger SerialNumber - { - get { return c.SerialNumber.Value; } - } - - /// - /// Get the Issuer Distinguished Name. (Who signed the certificate.) - /// - /// And X509Object containing name and value pairs. -// public IPrincipal IssuerDN - public virtual X509Name IssuerDN - { - get { return c.Issuer; } - } - - /// - /// Get the subject of this certificate. - /// - /// An X509Name object containing name and value pairs. -// public IPrincipal SubjectDN - public virtual X509Name SubjectDN - { - get { return c.Subject; } - } - - /// - /// The time that this certificate is valid from. - /// - /// A DateTime object representing that time in the local time zone. - public virtual DateTime NotBefore - { - get { return c.StartDate.ToDateTime(); } - } - - /// - /// The time that this certificate is valid up to. - /// - /// A DateTime object representing that time in the local time zone. - public virtual DateTime NotAfter - { - get { return c.EndDate.ToDateTime(); } - } - - /// - /// Return the Der encoded TbsCertificate data. - /// This is the certificate component less the signature. - /// To Get the whole certificate call the GetEncoded() member. - /// - /// A byte array containing the Der encoded Certificate component. - public virtual byte[] GetTbsCertificate() - { - return c.TbsCertificate.GetDerEncoded(); - } - - /// - /// The signature. - /// - /// A byte array containg the signature of the certificate. - public virtual byte[] GetSignature() - { - return c.GetSignatureOctets(); - } - - /// - /// A meaningful version of the Signature Algorithm. (EG SHA1WITHRSA) - /// - /// A sting representing the signature algorithm. - public virtual string SigAlgName - { - get { return SignerUtilities.GetEncodingName(c.SignatureAlgorithm.Algorithm); } - } - - /// - /// Get the Signature Algorithms Object ID. - /// - /// A string containg a '.' separated object id. - public virtual string SigAlgOid - { - get { return c.SignatureAlgorithm.Algorithm.Id; } - } - - /// - /// Get the signature algorithms parameters. (EG DSA Parameters) - /// - /// A byte array containing the Der encoded version of the parameters or null if there are none. - public virtual byte[] GetSigAlgParams() - { - if (c.SignatureAlgorithm.Parameters != null) - { - return c.SignatureAlgorithm.Parameters.GetDerEncoded(); - } - - return null; - } - - /// - /// Get the issuers UID. - /// - /// A DerBitString. - public virtual DerBitString IssuerUniqueID - { - get { return c.TbsCertificate.IssuerUniqueID; } - } - - /// - /// Get the subjects UID. - /// - /// A DerBitString. - public virtual DerBitString SubjectUniqueID - { - get { return c.TbsCertificate.SubjectUniqueID; } - } - - /// - /// Get a key usage guidlines. - /// - public virtual bool[] GetKeyUsage() - { - return keyUsage == null ? null : (bool[]) keyUsage.Clone(); - } - - // TODO Replace with something that returns a list of DerObjectIdentifier - public virtual IList GetExtendedKeyUsage() - { - Asn1OctetString str = this.GetExtensionValue(new DerObjectIdentifier("2.5.29.37")); - - if (str == null) - return null; - - try - { - Asn1Sequence seq = Asn1Sequence.GetInstance( - X509ExtensionUtilities.FromExtensionValue(str)); - - IList list = Platform.CreateArrayList(); - - foreach (DerObjectIdentifier oid in seq) - { - list.Add(oid.Id); - } - - return list; - } - catch (Exception e) - { - throw new CertificateParsingException("error processing extended key usage extension", e); - } - } - - public virtual int GetBasicConstraints() - { - if (basicConstraints != null && basicConstraints.IsCA()) - { - if (basicConstraints.PathLenConstraint == null) - { - return int.MaxValue; - } - - return basicConstraints.PathLenConstraint.IntValue; - } - - return -1; - } - - public virtual ICollection GetSubjectAlternativeNames() - { - return GetAlternativeNames("2.5.29.17"); - } - - public virtual ICollection GetIssuerAlternativeNames() - { - return GetAlternativeNames("2.5.29.18"); - } - - protected virtual ICollection GetAlternativeNames( - string oid) - { - Asn1OctetString altNames = GetExtensionValue(new DerObjectIdentifier(oid)); - - if (altNames == null) - return null; - - Asn1Object asn1Object = X509ExtensionUtilities.FromExtensionValue(altNames); - - GeneralNames gns = GeneralNames.GetInstance(asn1Object); - - IList result = Platform.CreateArrayList(); - foreach (GeneralName gn in gns.GetNames()) - { - IList entry = Platform.CreateArrayList(); - entry.Add(gn.TagNo); - entry.Add(gn.Name.ToString()); - result.Add(entry); - } - return result; - } - - protected override X509Extensions GetX509Extensions() - { - return c.Version >= 3 - ? c.TbsCertificate.Extensions - : null; - } - - /// - /// Get the public key of the subject of the certificate. - /// - /// The public key parameters. - public virtual AsymmetricKeyParameter GetPublicKey() - { - return PublicKeyFactory.CreateKey(c.SubjectPublicKeyInfo); - } - - /// - /// Return a Der encoded version of this certificate. - /// - /// A byte array. - public virtual byte[] GetEncoded() - { - return c.GetDerEncoded(); - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - X509Certificate other = obj as X509Certificate; - - if (other == null) - return false; - - return c.Equals(other.c); - - // NB: May prefer this implementation of Equals if more than one certificate implementation in play -// return Arrays.AreEqual(this.GetEncoded(), other.GetEncoded()); - } - - public override int GetHashCode() - { - lock (this) - { - if (!hashValueSet) - { - hashValue = c.GetHashCode(); - hashValueSet = true; - } - } - - return hashValue; - } - -// public void setBagAttribute( -// DERObjectIdentifier oid, -// DEREncodable attribute) -// { -// pkcs12Attributes.put(oid, attribute); -// pkcs12Ordering.addElement(oid); -// } -// -// public DEREncodable getBagAttribute( -// DERObjectIdentifier oid) -// { -// return (DEREncodable)pkcs12Attributes.get(oid); -// } -// -// public Enumeration getBagAttributeKeys() -// { -// return pkcs12Ordering.elements(); -// } - - public override string ToString() - { - StringBuilder buf = new StringBuilder(); - string nl = Platform.NewLine; - - buf.Append(" [0] Version: ").Append(this.Version).Append(nl); - buf.Append(" SerialNumber: ").Append(this.SerialNumber).Append(nl); - buf.Append(" IssuerDN: ").Append(this.IssuerDN).Append(nl); - buf.Append(" Start Date: ").Append(this.NotBefore).Append(nl); - buf.Append(" Final Date: ").Append(this.NotAfter).Append(nl); - buf.Append(" SubjectDN: ").Append(this.SubjectDN).Append(nl); - buf.Append(" Public Key: ").Append(this.GetPublicKey()).Append(nl); - buf.Append(" Signature Algorithm: ").Append(this.SigAlgName).Append(nl); - - byte[] sig = this.GetSignature(); - buf.Append(" Signature: ").Append(Hex.ToHexString(sig, 0, 20)).Append(nl); - - for (int i = 20; i < sig.Length; i += 20) - { - int len = System.Math.Min(20, sig.Length - i); - buf.Append(" ").Append(Hex.ToHexString(sig, i, len)).Append(nl); - } - - X509Extensions extensions = c.TbsCertificate.Extensions; - - if (extensions != null) - { - IEnumerator e = extensions.ExtensionOids.GetEnumerator(); - - if (e.MoveNext()) - { - buf.Append(" Extensions: \n"); - } - - do - { - DerObjectIdentifier oid = (DerObjectIdentifier)e.Current; - X509Extension ext = extensions.GetExtension(oid); - - if (ext.Value != null) - { - byte[] octs = ext.Value.GetOctets(); - Asn1Object obj = Asn1Object.FromByteArray(octs); - buf.Append(" critical(").Append(ext.IsCritical).Append(") "); - try - { - if (oid.Equals(X509Extensions.BasicConstraints)) - { - buf.Append(BasicConstraints.GetInstance(obj)); - } - else if (oid.Equals(X509Extensions.KeyUsage)) - { - buf.Append(KeyUsage.GetInstance(obj)); - } - else if (oid.Equals(MiscObjectIdentifiers.NetscapeCertType)) - { - buf.Append(new NetscapeCertType((DerBitString) obj)); - } - else if (oid.Equals(MiscObjectIdentifiers.NetscapeRevocationUrl)) - { - buf.Append(new NetscapeRevocationUrl((DerIA5String) obj)); - } - else if (oid.Equals(MiscObjectIdentifiers.VerisignCzagExtension)) - { - buf.Append(new VerisignCzagExtension((DerIA5String) obj)); - } - else - { - buf.Append(oid.Id); - buf.Append(" value = ").Append(Asn1Dump.DumpAsString(obj)); - //buf.Append(" value = ").Append("*****").Append(nl); - } - } - catch (Exception) - { - buf.Append(oid.Id); - //buf.Append(" value = ").Append(new string(Hex.encode(ext.getValue().getOctets()))).Append(nl); - buf.Append(" value = ").Append("*****"); - } - } - - buf.Append(nl); - } - while (e.MoveNext()); - } - - return buf.ToString(); - } - - /// - /// Verify the certificate's signature using the nominated public key. - /// - /// An appropriate public key parameter object, RsaPublicKeyParameters, DsaPublicKeyParameters or ECDsaPublicKeyParameters - /// True if the signature is valid. - /// If key submitted is not of the above nominated types. - public virtual void Verify( - AsymmetricKeyParameter key) - { - CheckSignature(new Asn1VerifierFactory(c.SignatureAlgorithm, key)); - } - - /// - /// Verify the certificate's signature using a verifier created using the passed in verifier provider. - /// - /// An appropriate provider for verifying the certificate's signature. - /// True if the signature is valid. - /// If verifier provider is not appropriate or the certificate algorithm is invalid. - public virtual void Verify( - IVerifierFactoryProvider verifierProvider) - { - CheckSignature(verifierProvider.CreateVerifierFactory (c.SignatureAlgorithm)); - } - - protected virtual void CheckSignature( - IVerifierFactory verifier) - { - if (!IsAlgIDEqual(c.SignatureAlgorithm, c.TbsCertificate.Signature)) - throw new CertificateException("signature algorithm in TBS cert not same as outer cert"); - - Asn1Encodable parameters = c.SignatureAlgorithm.Parameters; - - IStreamCalculator streamCalculator = verifier.CreateCalculator(); - - byte[] b = this.GetTbsCertificate(); - - streamCalculator.Stream.Write(b, 0, b.Length); - - Platform.Dispose(streamCalculator.Stream); - - if (!((IVerifier)streamCalculator.GetResult()).IsVerified(this.GetSignature())) - { - throw new InvalidKeyException("Public key presented not for certificate signature"); - } - } - - private static bool IsAlgIDEqual(AlgorithmIdentifier id1, AlgorithmIdentifier id2) - { - if (!id1.Algorithm.Equals(id2.Algorithm)) - return false; - - Asn1Encodable p1 = id1.Parameters; - Asn1Encodable p2 = id2.Parameters; - - if ((p1 == null) == (p2 == null)) - return Platform.Equals(p1, p2); - - // Exactly one of p1, p2 is null at this point - return p1 == null - ? p2.ToAsn1Object() is Asn1Null - : p1.ToAsn1Object() is Asn1Null; - } - } -} diff --git a/bc-sharp-crypto/src/x509/X509CertificatePair.cs b/bc-sharp-crypto/src/x509/X509CertificatePair.cs deleted file mode 100644 index fbeba4d..0000000 --- a/bc-sharp-crypto/src/x509/X509CertificatePair.cs +++ /dev/null @@ -1,123 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.X509 -{ - /// - /// This class contains a cross certificate pair. Cross certificates pairs may - /// contain two cross signed certificates from two CAs. A certificate from the - /// other CA to this CA is contained in the forward certificate, the certificate - /// from this CA to the other CA is contained in the reverse certificate. - /// - public class X509CertificatePair - { - private readonly X509Certificate forward; - private readonly X509Certificate reverse; - - /// Constructor - /// Certificate from the other CA to this CA. - /// Certificate from this CA to the other CA. - public X509CertificatePair( - X509Certificate forward, - X509Certificate reverse) - { - this.forward = forward; - this.reverse = reverse; - } - - /// Constructor from a ASN.1 CertificatePair structure. - /// The CertificatePair ASN.1 object. - public X509CertificatePair( - CertificatePair pair) - { - if (pair.Forward != null) - { - this.forward = new X509Certificate(pair.Forward); - } - if (pair.Reverse != null) - { - this.reverse = new X509Certificate(pair.Reverse); - } - } - - public byte[] GetEncoded() - { - try - { - X509CertificateStructure f = null, r = null; - - if (forward != null) - { - f = X509CertificateStructure.GetInstance( - Asn1Object.FromByteArray(forward.GetEncoded())); - - if (f == null) - throw new CertificateEncodingException("unable to get encoding for forward"); - } - - if (reverse != null) - { - r = X509CertificateStructure.GetInstance( - Asn1Object.FromByteArray(reverse.GetEncoded())); - - if (r == null) - throw new CertificateEncodingException("unable to get encoding for reverse"); - } - - return new CertificatePair(f, r).GetDerEncoded(); - } - catch (Exception e) - { - // TODO -// throw new ExtCertificateEncodingException(e.toString(), e); - throw new CertificateEncodingException(e.Message, e); - } - } - - /// Returns the certificate from the other CA to this CA. - public X509Certificate Forward - { - get { return forward; } - } - - /// Returns the certificate from this CA to the other CA. - public X509Certificate Reverse - { - get { return reverse; } - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - X509CertificatePair other = obj as X509CertificatePair; - - if (other == null) - return false; - - return Platform.Equals(this.forward, other.forward) - && Platform.Equals(this.reverse, other.reverse); - } - - public override int GetHashCode() - { - int hash = -1; - if (forward != null) - { - hash ^= forward.GetHashCode(); - } - if (reverse != null) - { - hash *= 17; - hash ^= reverse.GetHashCode(); - } - return hash; - } - } -} diff --git a/bc-sharp-crypto/src/x509/X509CertificateParser.cs b/bc-sharp-crypto/src/x509/X509CertificateParser.cs deleted file mode 100644 index 8f0e740..0000000 --- a/bc-sharp-crypto/src/x509/X509CertificateParser.cs +++ /dev/null @@ -1,183 +0,0 @@ -using System; -using System.Collections; -using System.IO; -using System.Text; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Encoders; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.X509 -{ - /** - * class for dealing with X509 certificates. - *

    - * At the moment this will deal with "-----BEGIN CERTIFICATE-----" to "-----END CERTIFICATE-----" - * base 64 encoded certs, as well as the BER binaries of certificates and some classes of PKCS#7 - * objects.

    - */ - public class X509CertificateParser - { - private static readonly PemParser PemCertParser = new PemParser("CERTIFICATE"); - - private Asn1Set sData; - private int sDataObjectCount; - private Stream currentStream; - - private X509Certificate ReadDerCertificate( - Asn1InputStream dIn) - { - Asn1Sequence seq = (Asn1Sequence)dIn.ReadObject(); - - if (seq.Count > 1 && seq[0] is DerObjectIdentifier) - { - if (seq[0].Equals(PkcsObjectIdentifiers.SignedData)) - { - sData = SignedData.GetInstance( - Asn1Sequence.GetInstance((Asn1TaggedObject) seq[1], true)).Certificates; - - return GetCertificate(); - } - } - - return CreateX509Certificate(X509CertificateStructure.GetInstance(seq)); - } - - private X509Certificate GetCertificate() - { - if (sData != null) - { - while (sDataObjectCount < sData.Count) - { - object obj = sData[sDataObjectCount++]; - - if (obj is Asn1Sequence) - { - return CreateX509Certificate( - X509CertificateStructure.GetInstance(obj)); - } - } - } - - return null; - } - - private X509Certificate ReadPemCertificate( - Stream inStream) - { - Asn1Sequence seq = PemCertParser.ReadPemObject(inStream); - - return seq == null - ? null - : CreateX509Certificate(X509CertificateStructure.GetInstance(seq)); - } - - protected virtual X509Certificate CreateX509Certificate( - X509CertificateStructure c) - { - return new X509Certificate(c); - } - - /// - /// Create loading data from byte array. - /// - /// - public X509Certificate ReadCertificate( - byte[] input) - { - return ReadCertificate(new MemoryStream(input, false)); - } - - /// - /// Create loading data from byte array. - /// - /// - public ICollection ReadCertificates( - byte[] input) - { - return ReadCertificates(new MemoryStream(input, false)); - } - - /** - * Generates a certificate object and initializes it with the data - * read from the input stream inStream. - */ - public X509Certificate ReadCertificate( - Stream inStream) - { - if (inStream == null) - throw new ArgumentNullException("inStream"); - if (!inStream.CanRead) - throw new ArgumentException("inStream must be read-able", "inStream"); - - if (currentStream == null) - { - currentStream = inStream; - sData = null; - sDataObjectCount = 0; - } - else if (currentStream != inStream) // reset if input stream has changed - { - currentStream = inStream; - sData = null; - sDataObjectCount = 0; - } - - try - { - if (sData != null) - { - if (sDataObjectCount != sData.Count) - { - return GetCertificate(); - } - - sData = null; - sDataObjectCount = 0; - return null; - } - - PushbackStream pis = new PushbackStream(inStream); - int tag = pis.ReadByte(); - - if (tag < 0) - return null; - - pis.Unread(tag); - - if (tag != 0x30) // assume ascii PEM encoded. - { - return ReadPemCertificate(pis); - } - - return ReadDerCertificate(new Asn1InputStream(pis)); - } - catch (Exception e) - { - throw new CertificateException("Failed to read certificate", e); - } - } - - /** - * Returns a (possibly empty) collection view of the certificates - * read from the given input stream inStream. - */ - public ICollection ReadCertificates( - Stream inStream) - { - X509Certificate cert; - IList certs = Platform.CreateArrayList(); - - while ((cert = ReadCertificate(inStream)) != null) - { - certs.Add(cert); - } - - return certs; - } - } -} diff --git a/bc-sharp-crypto/src/x509/X509Crl.cs b/bc-sharp-crypto/src/x509/X509Crl.cs deleted file mode 100644 index ecfb141..0000000 --- a/bc-sharp-crypto/src/x509/X509Crl.cs +++ /dev/null @@ -1,426 +0,0 @@ -using System; -using System.Collections; -using System.Text; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Utilities; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; -using Org.BouncyCastle.Utilities.Date; -using Org.BouncyCastle.Utilities.Encoders; -using Org.BouncyCastle.X509.Extension; -using Org.BouncyCastle.Crypto.Operators; - -namespace Org.BouncyCastle.X509 -{ - /** - * The following extensions are listed in RFC 2459 as relevant to CRLs - * - * Authority Key Identifier - * Issuer Alternative Name - * CRL Number - * Delta CRL Indicator (critical) - * Issuing Distribution Point (critical) - */ - public class X509Crl - : X509ExtensionBase - // TODO Add interface Crl? - { - private readonly CertificateList c; - private readonly string sigAlgName; - private readonly byte[] sigAlgParams; - private readonly bool isIndirect; - - public X509Crl( - CertificateList c) - { - this.c = c; - - try - { - this.sigAlgName = X509SignatureUtilities.GetSignatureName(c.SignatureAlgorithm); - - if (c.SignatureAlgorithm.Parameters != null) - { - this.sigAlgParams = ((Asn1Encodable)c.SignatureAlgorithm.Parameters).GetDerEncoded(); - } - else - { - this.sigAlgParams = null; - } - - this.isIndirect = IsIndirectCrl; - } - catch (Exception e) - { - throw new CrlException("CRL contents invalid: " + e); - } - } - - protected override X509Extensions GetX509Extensions() - { - return c.Version >= 2 - ? c.TbsCertList.Extensions - : null; - } - - public virtual byte[] GetEncoded() - { - try - { - return c.GetDerEncoded(); - } - catch (Exception e) - { - throw new CrlException(e.ToString()); - } - } - - public virtual void Verify( - AsymmetricKeyParameter publicKey) - { - Verify(new Asn1VerifierFactoryProvider(publicKey)); - } - - /// - /// Verify the CRL's signature using a verifier created using the passed in verifier provider. - /// - /// An appropriate provider for verifying the CRL's signature. - /// True if the signature is valid. - /// If verifier provider is not appropriate or the CRL algorithm is invalid. - public virtual void Verify( - IVerifierFactoryProvider verifierProvider) - { - CheckSignature(verifierProvider.CreateVerifierFactory(c.SignatureAlgorithm)); - } - - protected virtual void CheckSignature( - IVerifierFactory verifier) - { - if (!c.SignatureAlgorithm.Equals(c.TbsCertList.Signature)) - { - throw new CrlException("Signature algorithm on CertificateList does not match TbsCertList."); - } - - Asn1Encodable parameters = c.SignatureAlgorithm.Parameters; - - IStreamCalculator streamCalculator = verifier.CreateCalculator(); - - byte[] b = this.GetTbsCertList(); - - streamCalculator.Stream.Write(b, 0, b.Length); - - Platform.Dispose(streamCalculator.Stream); - - if (!((IVerifier)streamCalculator.GetResult()).IsVerified(this.GetSignature())) - { - throw new InvalidKeyException("CRL does not verify with supplied public key."); - } - } - - public virtual int Version - { - get { return c.Version; } - } - - public virtual X509Name IssuerDN - { - get { return c.Issuer; } - } - - public virtual DateTime ThisUpdate - { - get { return c.ThisUpdate.ToDateTime(); } - } - - public virtual DateTimeObject NextUpdate - { - get - { - return c.NextUpdate == null - ? null - : new DateTimeObject(c.NextUpdate.ToDateTime()); - } - } - - private ISet LoadCrlEntries() - { - ISet entrySet = new HashSet(); - IEnumerable certs = c.GetRevokedCertificateEnumeration(); - - X509Name previousCertificateIssuer = IssuerDN; - foreach (CrlEntry entry in certs) - { - X509CrlEntry crlEntry = new X509CrlEntry(entry, isIndirect, previousCertificateIssuer); - entrySet.Add(crlEntry); - previousCertificateIssuer = crlEntry.GetCertificateIssuer(); - } - - return entrySet; - } - - public virtual X509CrlEntry GetRevokedCertificate( - BigInteger serialNumber) - { - IEnumerable certs = c.GetRevokedCertificateEnumeration(); - - X509Name previousCertificateIssuer = IssuerDN; - foreach (CrlEntry entry in certs) - { - X509CrlEntry crlEntry = new X509CrlEntry(entry, isIndirect, previousCertificateIssuer); - - if (serialNumber.Equals(entry.UserCertificate.Value)) - { - return crlEntry; - } - - previousCertificateIssuer = crlEntry.GetCertificateIssuer(); - } - - return null; - } - - public virtual ISet GetRevokedCertificates() - { - ISet entrySet = LoadCrlEntries(); - - if (entrySet.Count > 0) - { - return entrySet; // TODO? Collections.unmodifiableSet(entrySet); - } - - return null; - } - - public virtual byte[] GetTbsCertList() - { - try - { - return c.TbsCertList.GetDerEncoded(); - } - catch (Exception e) - { - throw new CrlException(e.ToString()); - } - } - - public virtual byte[] GetSignature() - { - return c.GetSignatureOctets(); - } - - public virtual string SigAlgName - { - get { return sigAlgName; } - } - - public virtual string SigAlgOid - { - get { return c.SignatureAlgorithm.Algorithm.Id; } - } - - public virtual byte[] GetSigAlgParams() - { - return Arrays.Clone(sigAlgParams); - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - X509Crl other = obj as X509Crl; - - if (other == null) - return false; - - return c.Equals(other.c); - - // NB: May prefer this implementation of Equals if more than one certificate implementation in play - //return Arrays.AreEqual(this.GetEncoded(), other.GetEncoded()); - } - - public override int GetHashCode() - { - return c.GetHashCode(); - } - - /** - * Returns a string representation of this CRL. - * - * @return a string representation of this CRL. - */ - public override string ToString() - { - StringBuilder buf = new StringBuilder(); - string nl = Platform.NewLine; - - buf.Append(" Version: ").Append(this.Version).Append(nl); - buf.Append(" IssuerDN: ").Append(this.IssuerDN).Append(nl); - buf.Append(" This update: ").Append(this.ThisUpdate).Append(nl); - buf.Append(" Next update: ").Append(this.NextUpdate).Append(nl); - buf.Append(" Signature Algorithm: ").Append(this.SigAlgName).Append(nl); - - byte[] sig = this.GetSignature(); - - buf.Append(" Signature: "); - buf.Append(Hex.ToHexString(sig, 0, 20)).Append(nl); - - for (int i = 20; i < sig.Length; i += 20) - { - int count = System.Math.Min(20, sig.Length - i); - buf.Append(" "); - buf.Append(Hex.ToHexString(sig, i, count)).Append(nl); - } - - X509Extensions extensions = c.TbsCertList.Extensions; - - if (extensions != null) - { - IEnumerator e = extensions.ExtensionOids.GetEnumerator(); - - if (e.MoveNext()) - { - buf.Append(" Extensions: ").Append(nl); - } - - do - { - DerObjectIdentifier oid = (DerObjectIdentifier) e.Current; - X509Extension ext = extensions.GetExtension(oid); - - if (ext.Value != null) - { - Asn1Object asn1Value = X509ExtensionUtilities.FromExtensionValue(ext.Value); - - buf.Append(" critical(").Append(ext.IsCritical).Append(") "); - try - { - if (oid.Equals(X509Extensions.CrlNumber)) - { - buf.Append(new CrlNumber(DerInteger.GetInstance(asn1Value).PositiveValue)).Append(nl); - } - else if (oid.Equals(X509Extensions.DeltaCrlIndicator)) - { - buf.Append( - "Base CRL: " - + new CrlNumber(DerInteger.GetInstance( - asn1Value).PositiveValue)) - .Append(nl); - } - else if (oid.Equals(X509Extensions.IssuingDistributionPoint)) - { - buf.Append(IssuingDistributionPoint.GetInstance((Asn1Sequence) asn1Value)).Append(nl); - } - else if (oid.Equals(X509Extensions.CrlDistributionPoints)) - { - buf.Append(CrlDistPoint.GetInstance((Asn1Sequence) asn1Value)).Append(nl); - } - else if (oid.Equals(X509Extensions.FreshestCrl)) - { - buf.Append(CrlDistPoint.GetInstance((Asn1Sequence) asn1Value)).Append(nl); - } - else - { - buf.Append(oid.Id); - buf.Append(" value = ").Append( - Asn1Dump.DumpAsString(asn1Value)) - .Append(nl); - } - } - catch (Exception) - { - buf.Append(oid.Id); - buf.Append(" value = ").Append("*****").Append(nl); - } - } - else - { - buf.Append(nl); - } - } - while (e.MoveNext()); - } - - ISet certSet = GetRevokedCertificates(); - if (certSet != null) - { - foreach (X509CrlEntry entry in certSet) - { - buf.Append(entry); - buf.Append(nl); - } - } - - return buf.ToString(); - } - - /** - * Checks whether the given certificate is on this CRL. - * - * @param cert the certificate to check for. - * @return true if the given certificate is on this CRL, - * false otherwise. - */ -// public bool IsRevoked( -// Certificate cert) -// { -// if (!cert.getType().Equals("X.509")) -// { -// throw new RuntimeException("X.509 CRL used with non X.509 Cert"); -// } - public virtual bool IsRevoked( - X509Certificate cert) - { - CrlEntry[] certs = c.GetRevokedCertificates(); - - if (certs != null) - { -// BigInteger serial = ((X509Certificate)cert).SerialNumber; - BigInteger serial = cert.SerialNumber; - - for (int i = 0; i < certs.Length; i++) - { - if (certs[i].UserCertificate.Value.Equals(serial)) - { - return true; - } - } - } - - return false; - } - - protected virtual bool IsIndirectCrl - { - get - { - Asn1OctetString idp = GetExtensionValue(X509Extensions.IssuingDistributionPoint); - bool isIndirect = false; - - try - { - if (idp != null) - { - isIndirect = IssuingDistributionPoint.GetInstance( - X509ExtensionUtilities.FromExtensionValue(idp)).IsIndirectCrl; - } - } - catch (Exception e) - { - // TODO -// throw new ExtCrlException("Exception reading IssuingDistributionPoint", e); - throw new CrlException("Exception reading IssuingDistributionPoint" + e); - } - - return isIndirect; - } - } - } -} diff --git a/bc-sharp-crypto/src/x509/X509CrlEntry.cs b/bc-sharp-crypto/src/x509/X509CrlEntry.cs deleted file mode 100644 index caca294..0000000 --- a/bc-sharp-crypto/src/x509/X509CrlEntry.cs +++ /dev/null @@ -1,201 +0,0 @@ -using System; -using System.Collections; -using System.IO; -using System.Text; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Utilities; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.X509.Extension; - -namespace Org.BouncyCastle.X509 -{ - /** - * The following extensions are listed in RFC 2459 as relevant to CRL Entries - * - * ReasonCode Hode Instruction Code Invalidity Date Certificate Issuer - * (critical) - */ - public class X509CrlEntry - : X509ExtensionBase - { - private CrlEntry c; - private bool isIndirect; - private X509Name previousCertificateIssuer; - private X509Name certificateIssuer; - - public X509CrlEntry( - CrlEntry c) - { - this.c = c; - this.certificateIssuer = loadCertificateIssuer(); - } - - /** - * Constructor for CRLEntries of indirect CRLs. If isIndirect - * is false {@link #getCertificateIssuer()} will always - * return null, previousCertificateIssuer is - * ignored. If this isIndirect is specified and this CrlEntry - * has no certificate issuer CRL entry extension - * previousCertificateIssuer is returned by - * {@link #getCertificateIssuer()}. - * - * @param c - * TbsCertificateList.CrlEntry object. - * @param isIndirect - * true if the corresponding CRL is a indirect - * CRL. - * @param previousCertificateIssuer - * Certificate issuer of the previous CrlEntry. - */ - public X509CrlEntry( - CrlEntry c, - bool isIndirect, - X509Name previousCertificateIssuer) - { - this.c = c; - this.isIndirect = isIndirect; - this.previousCertificateIssuer = previousCertificateIssuer; - this.certificateIssuer = loadCertificateIssuer(); - } - - private X509Name loadCertificateIssuer() - { - if (!isIndirect) - { - return null; - } - - Asn1OctetString ext = GetExtensionValue(X509Extensions.CertificateIssuer); - if (ext == null) - { - return previousCertificateIssuer; - } - - try - { - GeneralName[] names = GeneralNames.GetInstance( - X509ExtensionUtilities.FromExtensionValue(ext)).GetNames(); - - for (int i = 0; i < names.Length; i++) - { - if (names[i].TagNo == GeneralName.DirectoryName) - { - return X509Name.GetInstance(names[i].Name); - } - } - } - catch (Exception) - { - } - - return null; - } - - public X509Name GetCertificateIssuer() - { - return certificateIssuer; - } - - protected override X509Extensions GetX509Extensions() - { - return c.Extensions; - } - - public byte[] GetEncoded() - { - try - { - return c.GetDerEncoded(); - } - catch (Exception e) - { - throw new CrlException(e.ToString()); - } - } - - public BigInteger SerialNumber - { - get { return c.UserCertificate.Value; } - } - - public DateTime RevocationDate - { - get { return c.RevocationDate.ToDateTime(); } - } - - public bool HasExtensions - { - get { return c.Extensions != null; } - } - - public override string ToString() - { - StringBuilder buf = new StringBuilder(); - string nl = Platform.NewLine; - - buf.Append(" userCertificate: ").Append(this.SerialNumber).Append(nl); - buf.Append(" revocationDate: ").Append(this.RevocationDate).Append(nl); - buf.Append(" certificateIssuer: ").Append(this.GetCertificateIssuer()).Append(nl); - - X509Extensions extensions = c.Extensions; - - if (extensions != null) - { - IEnumerator e = extensions.ExtensionOids.GetEnumerator(); - if (e.MoveNext()) - { - buf.Append(" crlEntryExtensions:").Append(nl); - - do - { - DerObjectIdentifier oid = (DerObjectIdentifier)e.Current; - X509Extension ext = extensions.GetExtension(oid); - - if (ext.Value != null) - { - Asn1Object obj = Asn1Object.FromByteArray(ext.Value.GetOctets()); - - buf.Append(" critical(") - .Append(ext.IsCritical) - .Append(") "); - try - { - if (oid.Equals(X509Extensions.ReasonCode)) - { - buf.Append(new CrlReason(DerEnumerated.GetInstance(obj))); - } - else if (oid.Equals(X509Extensions.CertificateIssuer)) - { - buf.Append("Certificate issuer: ").Append( - GeneralNames.GetInstance((Asn1Sequence)obj)); - } - else - { - buf.Append(oid.Id); - buf.Append(" value = ").Append(Asn1Dump.DumpAsString(obj)); - } - buf.Append(nl); - } - catch (Exception) - { - buf.Append(oid.Id); - buf.Append(" value = ").Append("*****").Append(nl); - } - } - else - { - buf.Append(nl); - } - } - while (e.MoveNext()); - } - } - - return buf.ToString(); - } - } -} diff --git a/bc-sharp-crypto/src/x509/X509CrlParser.cs b/bc-sharp-crypto/src/x509/X509CrlParser.cs deleted file mode 100644 index d830bb9..0000000 --- a/bc-sharp-crypto/src/x509/X509CrlParser.cs +++ /dev/null @@ -1,195 +0,0 @@ -using System; -using System.Collections; -using System.IO; -using System.Text; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Encoders; -using Org.BouncyCastle.Utilities.IO; - -namespace Org.BouncyCastle.X509 -{ - public class X509CrlParser - { - private static readonly PemParser PemCrlParser = new PemParser("CRL"); - - private readonly bool lazyAsn1; - - private Asn1Set sCrlData; - private int sCrlDataObjectCount; - private Stream currentCrlStream; - - public X509CrlParser() - : this(false) - { - } - - public X509CrlParser( - bool lazyAsn1) - { - this.lazyAsn1 = lazyAsn1; - } - - private X509Crl ReadPemCrl( - Stream inStream) - { - Asn1Sequence seq = PemCrlParser.ReadPemObject(inStream); - - return seq == null - ? null - : CreateX509Crl(CertificateList.GetInstance(seq)); - } - - private X509Crl ReadDerCrl( - Asn1InputStream dIn) - { - Asn1Sequence seq = (Asn1Sequence)dIn.ReadObject(); - - if (seq.Count > 1 && seq[0] is DerObjectIdentifier) - { - if (seq[0].Equals(PkcsObjectIdentifiers.SignedData)) - { - sCrlData = SignedData.GetInstance( - Asn1Sequence.GetInstance((Asn1TaggedObject) seq[1], true)).Crls; - - return GetCrl(); - } - } - - return CreateX509Crl(CertificateList.GetInstance(seq)); - } - - private X509Crl GetCrl() - { - if (sCrlData == null || sCrlDataObjectCount >= sCrlData.Count) - { - return null; - } - - return CreateX509Crl( - CertificateList.GetInstance( - sCrlData[sCrlDataObjectCount++])); - } - - protected virtual X509Crl CreateX509Crl( - CertificateList c) - { - return new X509Crl(c); - } - - /// - /// Create loading data from byte array. - /// - /// - public X509Crl ReadCrl( - byte[] input) - { - return ReadCrl(new MemoryStream(input, false)); - } - - /// - /// Create loading data from byte array. - /// - /// - public ICollection ReadCrls( - byte[] input) - { - return ReadCrls(new MemoryStream(input, false)); - } - - /** - * Generates a certificate revocation list (CRL) object and initializes - * it with the data read from the input stream inStream. - */ - public X509Crl ReadCrl( - Stream inStream) - { - if (inStream == null) - throw new ArgumentNullException("inStream"); - if (!inStream.CanRead) - throw new ArgumentException("inStream must be read-able", "inStream"); - - if (currentCrlStream == null) - { - currentCrlStream = inStream; - sCrlData = null; - sCrlDataObjectCount = 0; - } - else if (currentCrlStream != inStream) // reset if input stream has changed - { - currentCrlStream = inStream; - sCrlData = null; - sCrlDataObjectCount = 0; - } - - try - { - if (sCrlData != null) - { - if (sCrlDataObjectCount != sCrlData.Count) - { - return GetCrl(); - } - - sCrlData = null; - sCrlDataObjectCount = 0; - return null; - } - - PushbackStream pis = new PushbackStream(inStream); - int tag = pis.ReadByte(); - - if (tag < 0) - return null; - - pis.Unread(tag); - - if (tag != 0x30) // assume ascii PEM encoded. - { - return ReadPemCrl(pis); - } - - Asn1InputStream asn1 = lazyAsn1 - ? new LazyAsn1InputStream(pis) - : new Asn1InputStream(pis); - - return ReadDerCrl(asn1); - } - catch (CrlException e) - { - throw e; - } - catch (Exception e) - { - throw new CrlException(e.ToString()); - } - } - - /** - * Returns a (possibly empty) collection view of the CRLs read from - * the given input stream inStream. - * - * The inStream may contain a sequence of DER-encoded CRLs, or - * a PKCS#7 CRL set. This is a PKCS#7 SignedData object, with the - * only significant field being crls. In particular the signature - * and the contents are ignored. - */ - public ICollection ReadCrls( - Stream inStream) - { - X509Crl crl; - IList crls = Platform.CreateArrayList(); - - while ((crl = ReadCrl(inStream)) != null) - { - crls.Add(crl); - } - - return crls; - } - } -} diff --git a/bc-sharp-crypto/src/x509/X509ExtensionBase.cs b/bc-sharp-crypto/src/x509/X509ExtensionBase.cs deleted file mode 100644 index aaf6695..0000000 --- a/bc-sharp-crypto/src/x509/X509ExtensionBase.cs +++ /dev/null @@ -1,82 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.X509 -{ - public abstract class X509ExtensionBase - : IX509Extension - { - protected abstract X509Extensions GetX509Extensions(); - - protected virtual ISet GetExtensionOids( - bool critical) - { - X509Extensions extensions = GetX509Extensions(); - if (extensions != null) - { - HashSet set = new HashSet(); - foreach (DerObjectIdentifier oid in extensions.ExtensionOids) - { - X509Extension ext = extensions.GetExtension(oid); - if (ext.IsCritical == critical) - { - set.Add(oid.Id); - } - } - - return set; - } - - return null; - } - - /// - /// Get non critical extensions. - /// - /// A set of non critical extension oids. - public virtual ISet GetNonCriticalExtensionOids() - { - return GetExtensionOids(false); - } - - /// - /// Get any critical extensions. - /// - /// A sorted list of critical entension. - public virtual ISet GetCriticalExtensionOids() - { - return GetExtensionOids(true); - } - - /// - /// Get the value of a given extension. - /// - /// The object ID of the extension. - /// An Asn1OctetString object if that extension is found or null if not. - [Obsolete("Use version taking a DerObjectIdentifier instead")] - public Asn1OctetString GetExtensionValue( - string oid) - { - return GetExtensionValue(new DerObjectIdentifier(oid)); - } - - public virtual Asn1OctetString GetExtensionValue( - DerObjectIdentifier oid) - { - X509Extensions exts = GetX509Extensions(); - if (exts != null) - { - X509Extension ext = exts.GetExtension(oid); - if (ext != null) - { - return ext.Value; - } - } - - return null; - } - } -} diff --git a/bc-sharp-crypto/src/x509/X509KeyUsage.cs b/bc-sharp-crypto/src/x509/X509KeyUsage.cs deleted file mode 100644 index e0a7b49..0000000 --- a/bc-sharp-crypto/src/x509/X509KeyUsage.cs +++ /dev/null @@ -1,59 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; - -namespace Org.BouncyCastle.X509 -{ - /** - * A holding class for constructing an X509 Key Usage extension. - * - * 
    -	 *    id-ce-keyUsage OBJECT IDENTIFIER ::=  { id-ce 15 }
-	 *
-	 *    KeyUsage ::= BIT STRING {
-	 *         digitalSignature        (0),
-	 *         nonRepudiation          (1),
-	 *         keyEncipherment         (2),
-	 *         dataEncipherment        (3),
-	 *         keyAgreement            (4),
-	 *         keyCertSign             (5),
-	 *         cRLSign                 (6),
-	 *         encipherOnly            (7),
-	 *         decipherOnly            (8) }
-	 *
    - */ - public class X509KeyUsage - : Asn1Encodable - { - public const int DigitalSignature = 1 << 7; - public const int NonRepudiation = 1 << 6; - public const int KeyEncipherment = 1 << 5; - public const int DataEncipherment = 1 << 4; - public const int KeyAgreement = 1 << 3; - public const int KeyCertSign = 1 << 2; - public const int CrlSign = 1 << 1; - public const int EncipherOnly = 1 << 0; - public const int DecipherOnly = 1 << 15; - - private readonly int usage; - - /** - * Basic constructor. - * - * @param usage - the bitwise OR of the Key Usage flags giving the - * allowed uses for the key. - * e.g. (X509KeyUsage.keyEncipherment | X509KeyUsage.dataEncipherment) - */ - public X509KeyUsage( - int usage) - { - this.usage = usage; - } - - public override Asn1Object ToAsn1Object() - { - return new KeyUsage(usage); - } - } -} diff --git a/bc-sharp-crypto/src/x509/X509SignatureUtil.cs b/bc-sharp-crypto/src/x509/X509SignatureUtil.cs deleted file mode 100644 index 83863ae..0000000 --- a/bc-sharp-crypto/src/x509/X509SignatureUtil.cs +++ /dev/null @@ -1,128 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.CryptoPro; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Oiw; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.TeleTrust; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto; - -namespace Org.BouncyCastle.X509 -{ - internal class X509SignatureUtilities - { - private static readonly Asn1Null derNull = DerNull.Instance; - - internal static void SetSignatureParameters( - ISigner signature, - Asn1Encodable parameters) - { - if (parameters != null && !derNull.Equals(parameters)) - { - // TODO Put back in -// AlgorithmParameters sigParams = AlgorithmParameters.GetInstance(signature.getAlgorithm()); -// -// try -// { -// sigParams.Init(parameters.ToAsn1Object().GetDerEncoded()); -// } -// catch (IOException e) -// { -// throw new SignatureException("IOException decoding parameters: " + e.Message); -// } -// -// if (Platform.EndsWith(signature.getAlgorithm(), "MGF1")) -// { -// try -// { -// signature.setParameter(sigParams.getParameterSpec(PSSParameterSpec.class)); -// } -// catch (GeneralSecurityException e) -// { -// throw new SignatureException("Exception extracting parameters: " + e.Message); -// } -// } - } - } - - internal static string GetSignatureName( - AlgorithmIdentifier sigAlgId) - { - Asn1Encodable parameters = sigAlgId.Parameters; - - if (parameters != null && !derNull.Equals(parameters)) - { - if (sigAlgId.Algorithm.Equals(PkcsObjectIdentifiers.IdRsassaPss)) - { - RsassaPssParameters rsaParams = RsassaPssParameters.GetInstance(parameters); - - return GetDigestAlgName(rsaParams.HashAlgorithm.Algorithm) + "withRSAandMGF1"; - } - if (sigAlgId.Algorithm.Equals(X9ObjectIdentifiers.ECDsaWithSha2)) - { - Asn1Sequence ecDsaParams = Asn1Sequence.GetInstance(parameters); - - return GetDigestAlgName((DerObjectIdentifier)ecDsaParams[0]) + "withECDSA"; - } - } - - return sigAlgId.Algorithm.Id; - } - - /** - * Return the digest algorithm using one of the standard JCA string - * representations rather than the algorithm identifier (if possible). - */ - private static string GetDigestAlgName( - DerObjectIdentifier digestAlgOID) - { - if (PkcsObjectIdentifiers.MD5.Equals(digestAlgOID)) - { - return "MD5"; - } - else if (OiwObjectIdentifiers.IdSha1.Equals(digestAlgOID)) - { - return "SHA1"; - } - else if (NistObjectIdentifiers.IdSha224.Equals(digestAlgOID)) - { - return "SHA224"; - } - else if (NistObjectIdentifiers.IdSha256.Equals(digestAlgOID)) - { - return "SHA256"; - } - else if (NistObjectIdentifiers.IdSha384.Equals(digestAlgOID)) - { - return "SHA384"; - } - else if (NistObjectIdentifiers.IdSha512.Equals(digestAlgOID)) - { - return "SHA512"; - } - else if (TeleTrusTObjectIdentifiers.RipeMD128.Equals(digestAlgOID)) - { - return "RIPEMD128"; - } - else if (TeleTrusTObjectIdentifiers.RipeMD160.Equals(digestAlgOID)) - { - return "RIPEMD160"; - } - else if (TeleTrusTObjectIdentifiers.RipeMD256.Equals(digestAlgOID)) - { - return "RIPEMD256"; - } - else if (CryptoProObjectIdentifiers.GostR3411.Equals(digestAlgOID)) - { - return "GOST3411"; - } - else - { - return digestAlgOID.Id; - } - } - } -} diff --git a/bc-sharp-crypto/src/x509/X509Utilities.cs b/bc-sharp-crypto/src/x509/X509Utilities.cs deleted file mode 100644 index 52a122c..0000000 --- a/bc-sharp-crypto/src/x509/X509Utilities.cs +++ /dev/null @@ -1,187 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.CryptoPro; -using Org.BouncyCastle.Asn1.Nist; -using Org.BouncyCastle.Asn1.Oiw; -using Org.BouncyCastle.Asn1.Pkcs; -using Org.BouncyCastle.Asn1.TeleTrust; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Asn1.X9; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.X509 -{ - internal class X509Utilities - { - private static readonly IDictionary algorithms = Platform.CreateHashtable(); - private static readonly IDictionary exParams = Platform.CreateHashtable(); - private static readonly ISet noParams = new HashSet(); - - static X509Utilities() - { - algorithms.Add("MD2WITHRSAENCRYPTION", PkcsObjectIdentifiers.MD2WithRsaEncryption); - algorithms.Add("MD2WITHRSA", PkcsObjectIdentifiers.MD2WithRsaEncryption); - algorithms.Add("MD5WITHRSAENCRYPTION", PkcsObjectIdentifiers.MD5WithRsaEncryption); - algorithms.Add("MD5WITHRSA", PkcsObjectIdentifiers.MD5WithRsaEncryption); - algorithms.Add("SHA1WITHRSAENCRYPTION", PkcsObjectIdentifiers.Sha1WithRsaEncryption); - algorithms.Add("SHA1WITHRSA", PkcsObjectIdentifiers.Sha1WithRsaEncryption); - algorithms.Add("SHA224WITHRSAENCRYPTION", PkcsObjectIdentifiers.Sha224WithRsaEncryption); - algorithms.Add("SHA224WITHRSA", PkcsObjectIdentifiers.Sha224WithRsaEncryption); - algorithms.Add("SHA256WITHRSAENCRYPTION", PkcsObjectIdentifiers.Sha256WithRsaEncryption); - algorithms.Add("SHA256WITHRSA", PkcsObjectIdentifiers.Sha256WithRsaEncryption); - algorithms.Add("SHA384WITHRSAENCRYPTION", PkcsObjectIdentifiers.Sha384WithRsaEncryption); - algorithms.Add("SHA384WITHRSA", PkcsObjectIdentifiers.Sha384WithRsaEncryption); - algorithms.Add("SHA512WITHRSAENCRYPTION", PkcsObjectIdentifiers.Sha512WithRsaEncryption); - algorithms.Add("SHA512WITHRSA", PkcsObjectIdentifiers.Sha512WithRsaEncryption); - algorithms.Add("SHA1WITHRSAANDMGF1", PkcsObjectIdentifiers.IdRsassaPss); - algorithms.Add("SHA224WITHRSAANDMGF1", PkcsObjectIdentifiers.IdRsassaPss); - algorithms.Add("SHA256WITHRSAANDMGF1", PkcsObjectIdentifiers.IdRsassaPss); - algorithms.Add("SHA384WITHRSAANDMGF1", PkcsObjectIdentifiers.IdRsassaPss); - algorithms.Add("SHA512WITHRSAANDMGF1", PkcsObjectIdentifiers.IdRsassaPss); - algorithms.Add("RIPEMD160WITHRSAENCRYPTION", TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD160); - algorithms.Add("RIPEMD160WITHRSA", TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD160); - algorithms.Add("RIPEMD128WITHRSAENCRYPTION", TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD128); - algorithms.Add("RIPEMD128WITHRSA", TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD128); - algorithms.Add("RIPEMD256WITHRSAENCRYPTION", TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD256); - algorithms.Add("RIPEMD256WITHRSA", TeleTrusTObjectIdentifiers.RsaSignatureWithRipeMD256); - algorithms.Add("SHA1WITHDSA", X9ObjectIdentifiers.IdDsaWithSha1); - algorithms.Add("DSAWITHSHA1", X9ObjectIdentifiers.IdDsaWithSha1); - algorithms.Add("SHA224WITHDSA", NistObjectIdentifiers.DsaWithSha224); - algorithms.Add("SHA256WITHDSA", NistObjectIdentifiers.DsaWithSha256); - algorithms.Add("SHA384WITHDSA", NistObjectIdentifiers.DsaWithSha384); - algorithms.Add("SHA512WITHDSA", NistObjectIdentifiers.DsaWithSha512); - algorithms.Add("SHA1WITHECDSA", X9ObjectIdentifiers.ECDsaWithSha1); - algorithms.Add("ECDSAWITHSHA1", X9ObjectIdentifiers.ECDsaWithSha1); - algorithms.Add("SHA224WITHECDSA", X9ObjectIdentifiers.ECDsaWithSha224); - algorithms.Add("SHA256WITHECDSA", X9ObjectIdentifiers.ECDsaWithSha256); - algorithms.Add("SHA384WITHECDSA", X9ObjectIdentifiers.ECDsaWithSha384); - algorithms.Add("SHA512WITHECDSA", X9ObjectIdentifiers.ECDsaWithSha512); - algorithms.Add("GOST3411WITHGOST3410", CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x94); - algorithms.Add("GOST3411WITHGOST3410-94", CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x94); - algorithms.Add("GOST3411WITHECGOST3410", CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x2001); - algorithms.Add("GOST3411WITHECGOST3410-2001", CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x2001); - algorithms.Add("GOST3411WITHGOST3410-2001", CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x2001); - - // - // According to RFC 3279, the ASN.1 encoding SHALL (id-dsa-with-sha1) or MUST (ecdsa-with-SHA*) omit the parameters field. - // The parameters field SHALL be NULL for RSA based signature algorithms. - // - noParams.Add(X9ObjectIdentifiers.ECDsaWithSha1); - noParams.Add(X9ObjectIdentifiers.ECDsaWithSha224); - noParams.Add(X9ObjectIdentifiers.ECDsaWithSha256); - noParams.Add(X9ObjectIdentifiers.ECDsaWithSha384); - noParams.Add(X9ObjectIdentifiers.ECDsaWithSha512); - noParams.Add(X9ObjectIdentifiers.IdDsaWithSha1); - noParams.Add(NistObjectIdentifiers.DsaWithSha224); - noParams.Add(NistObjectIdentifiers.DsaWithSha256); - noParams.Add(NistObjectIdentifiers.DsaWithSha384); - noParams.Add(NistObjectIdentifiers.DsaWithSha512); - - // - // RFC 4491 - // - noParams.Add(CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x94); - noParams.Add(CryptoProObjectIdentifiers.GostR3411x94WithGostR3410x2001); - - // - // explicit params - // - AlgorithmIdentifier sha1AlgId = new AlgorithmIdentifier(OiwObjectIdentifiers.IdSha1, DerNull.Instance); - exParams.Add("SHA1WITHRSAANDMGF1", CreatePssParams(sha1AlgId, 20)); - - AlgorithmIdentifier sha224AlgId = new AlgorithmIdentifier(NistObjectIdentifiers.IdSha224, DerNull.Instance); - exParams.Add("SHA224WITHRSAANDMGF1", CreatePssParams(sha224AlgId, 28)); - - AlgorithmIdentifier sha256AlgId = new AlgorithmIdentifier(NistObjectIdentifiers.IdSha256, DerNull.Instance); - exParams.Add("SHA256WITHRSAANDMGF1", CreatePssParams(sha256AlgId, 32)); - - AlgorithmIdentifier sha384AlgId = new AlgorithmIdentifier(NistObjectIdentifiers.IdSha384, DerNull.Instance); - exParams.Add("SHA384WITHRSAANDMGF1", CreatePssParams(sha384AlgId, 48)); - - AlgorithmIdentifier sha512AlgId = new AlgorithmIdentifier(NistObjectIdentifiers.IdSha512, DerNull.Instance); - exParams.Add("SHA512WITHRSAANDMGF1", CreatePssParams(sha512AlgId, 64)); - } - - private static RsassaPssParameters CreatePssParams( - AlgorithmIdentifier hashAlgId, - int saltSize) - { - return new RsassaPssParameters( - hashAlgId, - new AlgorithmIdentifier(PkcsObjectIdentifiers.IdMgf1, hashAlgId), - new DerInteger(saltSize), - new DerInteger(1)); - } - - internal static DerObjectIdentifier GetAlgorithmOid( - string algorithmName) - { - algorithmName = Platform.ToUpperInvariant(algorithmName); - - if (algorithms.Contains(algorithmName)) - { - return (DerObjectIdentifier) algorithms[algorithmName]; - } - - return new DerObjectIdentifier(algorithmName); - } - - internal static AlgorithmIdentifier GetSigAlgID( - DerObjectIdentifier sigOid, - string algorithmName) - { - if (noParams.Contains(sigOid)) - { - return new AlgorithmIdentifier(sigOid); - } - - algorithmName = Platform.ToUpperInvariant(algorithmName); - - if (exParams.Contains(algorithmName)) - { - return new AlgorithmIdentifier(sigOid, (Asn1Encodable) exParams[algorithmName]); - } - - return new AlgorithmIdentifier(sigOid, DerNull.Instance); - } - - internal static IEnumerable GetAlgNames() - { - return new EnumerableProxy(algorithms.Keys); - } - - internal static byte[] GetSignatureForObject( - DerObjectIdentifier sigOid, // TODO Redundant now? - string sigName, - AsymmetricKeyParameter privateKey, - SecureRandom random, - Asn1Encodable ae) - { - if (sigOid == null) - throw new ArgumentNullException("sigOid"); - - ISigner sig = SignerUtilities.GetSigner(sigName); - - if (random != null) - { - sig.Init(true, new ParametersWithRandom(privateKey, random)); - } - else - { - sig.Init(true, privateKey); - } - - byte[] encoded = ae.GetDerEncoded(); - sig.BlockUpdate(encoded, 0, encoded.Length); - - return sig.GenerateSignature(); - } - } -} diff --git a/bc-sharp-crypto/src/x509/X509V1CertificateGenerator.cs b/bc-sharp-crypto/src/x509/X509V1CertificateGenerator.cs deleted file mode 100644 index 9adebcb..0000000 --- a/bc-sharp-crypto/src/x509/X509V1CertificateGenerator.cs +++ /dev/null @@ -1,210 +0,0 @@ -using System; -using System.IO; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Crypto.Operators; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.X509 -{ - /// - /// Class to Generate X509V1 Certificates. - /// - public class X509V1CertificateGenerator - { - private V1TbsCertificateGenerator tbsGen; - private DerObjectIdentifier sigOID; - private AlgorithmIdentifier sigAlgId; - private string signatureAlgorithm; - - /// - /// Default Constructor. - /// - public X509V1CertificateGenerator() - { - tbsGen = new V1TbsCertificateGenerator(); - } - - /// - /// Reset the generator. - /// - public void Reset() - { - tbsGen = new V1TbsCertificateGenerator(); - } - - /// - /// Set the certificate's serial number. - /// - /// Make serial numbers long, if you have no serial number policy make sure the number is at least 16 bytes of secure random data. - /// You will be surprised how ugly a serial number collision can get. - /// The serial number. - public void SetSerialNumber( - BigInteger serialNumber) - { - if (serialNumber.SignValue <= 0) - { - throw new ArgumentException("serial number must be a positive integer", "serialNumber"); - } - - tbsGen.SetSerialNumber(new DerInteger(serialNumber)); - } - - /// - /// Set the issuer distinguished name. - /// The issuer is the entity whose private key is used to sign the certificate. - /// - /// The issuers DN. - public void SetIssuerDN( - X509Name issuer) - { - tbsGen.SetIssuer(issuer); - } - - /// - /// Set the date that this certificate is to be valid from. - /// - /// - public void SetNotBefore( - DateTime date) - { - tbsGen.SetStartDate(new Time(date)); - } - - /// - /// Set the date after which this certificate will no longer be valid. - /// - /// - public void SetNotAfter( - DateTime date) - { - tbsGen.SetEndDate(new Time(date)); - } - - /// - /// Set the subject distinguished name. - /// The subject describes the entity associated with the public key. - /// - /// - public void SetSubjectDN( - X509Name subject) - { - tbsGen.SetSubject(subject); - } - - /// - /// Set the public key that this certificate identifies. - /// - /// - public void SetPublicKey( - AsymmetricKeyParameter publicKey) - { - try - { - tbsGen.SetSubjectPublicKeyInfo( - SubjectPublicKeyInfoFactory.CreateSubjectPublicKeyInfo(publicKey)); - } - catch (Exception e) - { - throw new ArgumentException("unable to process key - " + e.ToString()); - } - } - - /// - /// Set the signature algorithm that will be used to sign this certificate. - /// This can be either a name or an OID, names are treated as case insensitive. - /// - /// string representation of the algorithm name - [Obsolete("Not needed if Generate used with an ISignatureFactory")] - public void SetSignatureAlgorithm( - string signatureAlgorithm) - { - this.signatureAlgorithm = signatureAlgorithm; - - try - { - sigOID = X509Utilities.GetAlgorithmOid(signatureAlgorithm); - } - catch (Exception) - { - throw new ArgumentException("Unknown signature type requested", "signatureAlgorithm"); - } - - sigAlgId = X509Utilities.GetSigAlgID(sigOID, signatureAlgorithm); - - tbsGen.SetSignature(sigAlgId); - } - - /// - /// Generate a new X509Certificate. - /// - /// The private key of the issuer used to sign this certificate. - /// An X509Certificate. - [Obsolete("Use Generate with an ISignatureFactory")] - public X509Certificate Generate( - AsymmetricKeyParameter privateKey) - { - return Generate(privateKey, null); - } - - /// - /// Generate a new X509Certificate specifying a SecureRandom instance that you would like to use. - /// - /// The private key of the issuer used to sign this certificate. - /// The Secure Random you want to use. - /// An X509Certificate. - [Obsolete("Use Generate with an ISignatureFactory")] - public X509Certificate Generate( - AsymmetricKeyParameter privateKey, - SecureRandom random) - { - return Generate(new Asn1SignatureFactory(signatureAlgorithm, privateKey, random)); - } - - /// - /// Generate a new X509Certificate using the passed in SignatureCalculator. - /// - /// A signature calculator factory with the necessary algorithm details. - /// An X509Certificate. - public X509Certificate Generate(ISignatureFactory signatureCalculatorFactory) - { - tbsGen.SetSignature ((AlgorithmIdentifier)signatureCalculatorFactory.AlgorithmDetails); - - TbsCertificateStructure tbsCert = tbsGen.GenerateTbsCertificate(); - - IStreamCalculator streamCalculator = signatureCalculatorFactory.CreateCalculator(); - - byte[] encoded = tbsCert.GetDerEncoded(); - - streamCalculator.Stream.Write(encoded, 0, encoded.Length); - - Platform.Dispose(streamCalculator.Stream); - - return GenerateJcaObject(tbsCert, (AlgorithmIdentifier)signatureCalculatorFactory.AlgorithmDetails, ((IBlockResult)streamCalculator.GetResult()).Collect()); - } - - private X509Certificate GenerateJcaObject( - TbsCertificateStructure tbsCert, - AlgorithmIdentifier sigAlg, - byte[] signature) - { - return new X509Certificate( - new X509CertificateStructure(tbsCert, sigAlg, new DerBitString(signature))); - } - - /// - /// Allows enumeration of the signature names supported by the generator. - /// - public IEnumerable SignatureAlgNames - { - get { return X509Utilities.GetAlgNames(); } - } - } -} diff --git a/bc-sharp-crypto/src/x509/X509V2AttributeCertificate.cs b/bc-sharp-crypto/src/x509/X509V2AttributeCertificate.cs deleted file mode 100644 index c41b312..0000000 --- a/bc-sharp-crypto/src/x509/X509V2AttributeCertificate.cs +++ /dev/null @@ -1,280 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Operators; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.X509 -{ - /// An implementation of a version 2 X.509 Attribute Certificate. - public class X509V2AttributeCertificate - : X509ExtensionBase, IX509AttributeCertificate - { - private readonly AttributeCertificate cert; - private readonly DateTime notBefore; - private readonly DateTime notAfter; - - private static AttributeCertificate GetObject(Stream input) - { - try - { - return AttributeCertificate.GetInstance(Asn1Object.FromStream(input)); - } - catch (IOException e) - { - throw e; - } - catch (Exception e) - { - throw new IOException("exception decoding certificate structure", e); - } - } - - public X509V2AttributeCertificate( - Stream encIn) - : this(GetObject(encIn)) - { - } - - public X509V2AttributeCertificate( - byte[] encoded) - : this(new MemoryStream(encoded, false)) - { - } - - internal X509V2AttributeCertificate( - AttributeCertificate cert) - { - this.cert = cert; - - try - { - this.notAfter = cert.ACInfo.AttrCertValidityPeriod.NotAfterTime.ToDateTime(); - this.notBefore = cert.ACInfo.AttrCertValidityPeriod.NotBeforeTime.ToDateTime(); - } - catch (Exception e) - { - throw new IOException("invalid data structure in certificate!", e); - } - } - - public virtual int Version - { - get { return cert.ACInfo.Version.Value.IntValue + 1; } - } - - public virtual BigInteger SerialNumber - { - get { return cert.ACInfo.SerialNumber.Value; } - } - - public virtual AttributeCertificateHolder Holder - { - get - { - return new AttributeCertificateHolder((Asn1Sequence)cert.ACInfo.Holder.ToAsn1Object()); - } - } - - public virtual AttributeCertificateIssuer Issuer - { - get - { - return new AttributeCertificateIssuer(cert.ACInfo.Issuer); - } - } - - public virtual DateTime NotBefore - { - get { return notBefore; } - } - - public virtual DateTime NotAfter - { - get { return notAfter; } - } - - public virtual bool[] GetIssuerUniqueID() - { - DerBitString id = cert.ACInfo.IssuerUniqueID; - - if (id != null) - { - byte[] bytes = id.GetBytes(); - bool[] boolId = new bool[bytes.Length * 8 - id.PadBits]; - - for (int i = 0; i != boolId.Length; i++) - { - //boolId[i] = (bytes[i / 8] & (0x80 >>> (i % 8))) != 0; - boolId[i] = (bytes[i / 8] & (0x80 >> (i % 8))) != 0; - } - - return boolId; - } - - return null; - } - - public virtual bool IsValidNow - { - get { return IsValid(DateTime.UtcNow); } - } - - public virtual bool IsValid( - DateTime date) - { - return date.CompareTo(NotBefore) >= 0 && date.CompareTo(NotAfter) <= 0; - } - - public virtual void CheckValidity() - { - this.CheckValidity(DateTime.UtcNow); - } - - public virtual void CheckValidity( - DateTime date) - { - if (date.CompareTo(NotAfter) > 0) - throw new CertificateExpiredException("certificate expired on " + NotAfter); - if (date.CompareTo(NotBefore) < 0) - throw new CertificateNotYetValidException("certificate not valid until " + NotBefore); - } - - public virtual AlgorithmIdentifier SignatureAlgorithm - { - get { return cert.SignatureAlgorithm; } - } - - public virtual byte[] GetSignature() - { - return cert.GetSignatureOctets(); - } - - public virtual void Verify( - AsymmetricKeyParameter key) - { - CheckSignature(new Asn1VerifierFactory(cert.SignatureAlgorithm, key)); - } - - /// - /// Verify the certificate's signature using a verifier created using the passed in verifier provider. - /// - /// An appropriate provider for verifying the certificate's signature. - /// True if the signature is valid. - /// If verifier provider is not appropriate or the certificate algorithm is invalid. - public virtual void Verify( - IVerifierFactoryProvider verifierProvider) - { - CheckSignature(verifierProvider.CreateVerifierFactory(cert.SignatureAlgorithm)); - } - - protected virtual void CheckSignature( - IVerifierFactory verifier) - { - if (!cert.SignatureAlgorithm.Equals(cert.ACInfo.Signature)) - { - throw new CertificateException("Signature algorithm in certificate info not same as outer certificate"); - } - - IStreamCalculator streamCalculator = verifier.CreateCalculator(); - - try - { - byte[] b = this.cert.ACInfo.GetEncoded(); - - streamCalculator.Stream.Write(b, 0, b.Length); - - Platform.Dispose(streamCalculator.Stream); - } - catch (IOException e) - { - throw new SignatureException("Exception encoding certificate info object", e); - } - - if (!((IVerifier)streamCalculator.GetResult()).IsVerified(this.GetSignature())) - { - throw new InvalidKeyException("Public key presented not for certificate signature"); - } - } - - public virtual byte[] GetEncoded() - { - return cert.GetEncoded(); - } - - protected override X509Extensions GetX509Extensions() - { - return cert.ACInfo.Extensions; - } - - public virtual X509Attribute[] GetAttributes() - { - Asn1Sequence seq = cert.ACInfo.Attributes; - X509Attribute[] attrs = new X509Attribute[seq.Count]; - - for (int i = 0; i != seq.Count; i++) - { - attrs[i] = new X509Attribute((Asn1Encodable)seq[i]); - } - - return attrs; - } - - public virtual X509Attribute[] GetAttributes( - string oid) - { - Asn1Sequence seq = cert.ACInfo.Attributes; - IList list = Platform.CreateArrayList(); - - for (int i = 0; i != seq.Count; i++) - { - X509Attribute attr = new X509Attribute((Asn1Encodable)seq[i]); - if (attr.Oid.Equals(oid)) - { - list.Add(attr); - } - } - - if (list.Count < 1) - { - return null; - } - - X509Attribute[] result = new X509Attribute[list.Count]; - for (int i = 0; i < list.Count; ++i) - { - result[i] = (X509Attribute)list[i]; - } - return result; - } - - public override bool Equals( - object obj) - { - if (obj == this) - return true; - - X509V2AttributeCertificate other = obj as X509V2AttributeCertificate; - - if (other == null) - return false; - - return cert.Equals(other.cert); - - // NB: May prefer this implementation of Equals if more than one certificate implementation in play - //return Arrays.AreEqual(this.GetEncoded(), other.GetEncoded()); - } - - public override int GetHashCode() - { - return cert.GetHashCode(); - } - } -} diff --git a/bc-sharp-crypto/src/x509/X509V2AttributeCertificateGenerator.cs b/bc-sharp-crypto/src/x509/X509V2AttributeCertificateGenerator.cs deleted file mode 100644 index bf046cd..0000000 --- a/bc-sharp-crypto/src/x509/X509V2AttributeCertificateGenerator.cs +++ /dev/null @@ -1,203 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Operators; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.X509 -{ - /// Class to produce an X.509 Version 2 AttributeCertificate. - public class X509V2AttributeCertificateGenerator - { - private readonly X509ExtensionsGenerator extGenerator = new X509ExtensionsGenerator(); - - private V2AttributeCertificateInfoGenerator acInfoGen; - private DerObjectIdentifier sigOID; - private AlgorithmIdentifier sigAlgId; - private string signatureAlgorithm; - - public X509V2AttributeCertificateGenerator() - { - acInfoGen = new V2AttributeCertificateInfoGenerator(); - } - - /// Reset the generator - public void Reset() - { - acInfoGen = new V2AttributeCertificateInfoGenerator(); - extGenerator.Reset(); - } - - /// Set the Holder of this Attribute Certificate. - public void SetHolder( - AttributeCertificateHolder holder) - { - acInfoGen.SetHolder(holder.holder); - } - - /// Set the issuer. - public void SetIssuer( - AttributeCertificateIssuer issuer) - { - acInfoGen.SetIssuer(AttCertIssuer.GetInstance(issuer.form)); - } - - /// Set the serial number for the certificate. - public void SetSerialNumber( - BigInteger serialNumber) - { - acInfoGen.SetSerialNumber(new DerInteger(serialNumber)); - } - - public void SetNotBefore( - DateTime date) - { - acInfoGen.SetStartDate(new DerGeneralizedTime(date)); - } - - public void SetNotAfter( - DateTime date) - { - acInfoGen.SetEndDate(new DerGeneralizedTime(date)); - } - - /// - /// Set the signature algorithm. This can be either a name or an OID, names - /// are treated as case insensitive. - /// - /// The algorithm name. - [Obsolete("Not needed if Generate used with an ISignatureFactory")] - public void SetSignatureAlgorithm( - string signatureAlgorithm) - { - this.signatureAlgorithm = signatureAlgorithm; - - try - { - sigOID = X509Utilities.GetAlgorithmOid(signatureAlgorithm); - } - catch (Exception) - { - throw new ArgumentException("Unknown signature type requested"); - } - - sigAlgId = X509Utilities.GetSigAlgID(sigOID, signatureAlgorithm); - - acInfoGen.SetSignature(sigAlgId); - } - - /// Add an attribute. - public void AddAttribute( - X509Attribute attribute) - { - acInfoGen.AddAttribute(AttributeX509.GetInstance(attribute.ToAsn1Object())); - } - - public void SetIssuerUniqueId( - bool[] iui) - { - // TODO convert bool array to bit string - //acInfoGen.SetIssuerUniqueID(iui); - throw Platform.CreateNotImplementedException("SetIssuerUniqueId()"); - } - - /// Add a given extension field for the standard extensions tag. - public void AddExtension( - string oid, - bool critical, - Asn1Encodable extensionValue) - { - extGenerator.AddExtension(new DerObjectIdentifier(oid), critical, extensionValue); - } - - /// - /// Add a given extension field for the standard extensions tag. - /// The value parameter becomes the contents of the octet string associated - /// with the extension. - /// - public void AddExtension( - string oid, - bool critical, - byte[] extensionValue) - { - extGenerator.AddExtension(new DerObjectIdentifier(oid), critical, extensionValue); - } - - /// - /// Generate an X509 certificate, based on the current issuer and subject. - /// - [Obsolete("Use Generate with an ISignatureFactory")] - public IX509AttributeCertificate Generate( - AsymmetricKeyParameter privateKey) - { - return Generate(privateKey, null); - } - - /// - /// Generate an X509 certificate, based on the current issuer and subject, - /// using the supplied source of randomness, if required. - /// - [Obsolete("Use Generate with an ISignatureFactory")] - public IX509AttributeCertificate Generate( - AsymmetricKeyParameter privateKey, - SecureRandom random) - { - return Generate(new Asn1SignatureFactory(signatureAlgorithm, privateKey, random)); - } - - /// - /// Generate a new X.509 Attribute Certificate using the passed in SignatureCalculator. - /// - /// A signature calculator factory with the necessary algorithm details. - /// An IX509AttributeCertificate. - public IX509AttributeCertificate Generate(ISignatureFactory signatureCalculatorFactory) - { - if (!extGenerator.IsEmpty) - { - acInfoGen.SetExtensions(extGenerator.Generate()); - } - - AttributeCertificateInfo acInfo = acInfoGen.GenerateAttributeCertificateInfo(); - - byte[] encoded = acInfo.GetDerEncoded(); - - IStreamCalculator streamCalculator = signatureCalculatorFactory.CreateCalculator(); - - streamCalculator.Stream.Write(encoded, 0, encoded.Length); - - Platform.Dispose(streamCalculator.Stream); - - Asn1EncodableVector v = new Asn1EncodableVector(); - - v.Add(acInfo, (AlgorithmIdentifier)signatureCalculatorFactory.AlgorithmDetails); - - try - { - v.Add(new DerBitString(((IBlockResult)streamCalculator.GetResult()).Collect())); - - return new X509V2AttributeCertificate(AttributeCertificate.GetInstance(new DerSequence(v))); - } - catch (Exception e) - { - // TODO -// throw new ExtCertificateEncodingException("constructed invalid certificate", e); - throw new CertificateEncodingException("constructed invalid certificate", e); - } - } - - /// - /// Allows enumeration of the signature names supported by the generator. - /// - public IEnumerable SignatureAlgNames - { - get { return X509Utilities.GetAlgNames(); } - } - } -} diff --git a/bc-sharp-crypto/src/x509/X509V2CRLGenerator.cs b/bc-sharp-crypto/src/x509/X509V2CRLGenerator.cs deleted file mode 100644 index 566d502..0000000 --- a/bc-sharp-crypto/src/x509/X509V2CRLGenerator.cs +++ /dev/null @@ -1,278 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Operators; -using Org.BouncyCastle.Crypto.Parameters; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; - -namespace Org.BouncyCastle.X509 -{ - /** - * class to produce an X.509 Version 2 CRL. - */ - public class X509V2CrlGenerator - { - private readonly X509ExtensionsGenerator extGenerator = new X509ExtensionsGenerator(); - - private V2TbsCertListGenerator tbsGen; - private DerObjectIdentifier sigOID; - private AlgorithmIdentifier sigAlgId; - private string signatureAlgorithm; - - public X509V2CrlGenerator() - { - tbsGen = new V2TbsCertListGenerator(); - } - - /** - * reset the generator - */ - public void Reset() - { - tbsGen = new V2TbsCertListGenerator(); - extGenerator.Reset(); - } - - /** - * Set the issuer distinguished name - the issuer is the entity whose private key is used to sign the - * certificate. - */ - public void SetIssuerDN( - X509Name issuer) - { - tbsGen.SetIssuer(issuer); - } - - public void SetThisUpdate( - DateTime date) - { - tbsGen.SetThisUpdate(new Time(date)); - } - - public void SetNextUpdate( - DateTime date) - { - tbsGen.SetNextUpdate(new Time(date)); - } - - /** - * Reason being as indicated by CrlReason, i.e. CrlReason.KeyCompromise - * or 0 if CrlReason is not to be used - **/ - public void AddCrlEntry( - BigInteger userCertificate, - DateTime revocationDate, - int reason) - { - tbsGen.AddCrlEntry(new DerInteger(userCertificate), new Time(revocationDate), reason); - } - - /** - * Add a CRL entry with an Invalidity Date extension as well as a CrlReason extension. - * Reason being as indicated by CrlReason, i.e. CrlReason.KeyCompromise - * or 0 if CrlReason is not to be used - **/ - public void AddCrlEntry( - BigInteger userCertificate, - DateTime revocationDate, - int reason, - DateTime invalidityDate) - { - tbsGen.AddCrlEntry(new DerInteger(userCertificate), new Time(revocationDate), reason, new DerGeneralizedTime(invalidityDate)); - } - - /** - * Add a CRL entry with extensions. - **/ - public void AddCrlEntry( - BigInteger userCertificate, - DateTime revocationDate, - X509Extensions extensions) - { - tbsGen.AddCrlEntry(new DerInteger(userCertificate), new Time(revocationDate), extensions); - } - - /** - * Add the CRLEntry objects contained in a previous CRL. - * - * @param other the X509Crl to source the other entries from. - */ - public void AddCrl( - X509Crl other) - { - if (other == null) - throw new ArgumentNullException("other"); - - ISet revocations = other.GetRevokedCertificates(); - - if (revocations != null) - { - foreach (X509CrlEntry entry in revocations) - { - try - { - tbsGen.AddCrlEntry( - Asn1Sequence.GetInstance( - Asn1Object.FromByteArray(entry.GetEncoded()))); - } - catch (IOException e) - { - throw new CrlException("exception processing encoding of CRL", e); - } - } - } - } - - /// - /// Set the signature algorithm that will be used to sign this CRL. - /// - /// - [Obsolete("Not needed if Generate used with an ISignatureFactory")] - public void SetSignatureAlgorithm( - string signatureAlgorithm) - { - this.signatureAlgorithm = signatureAlgorithm; - - try - { - sigOID = X509Utilities.GetAlgorithmOid(signatureAlgorithm); - } - catch (Exception e) - { - throw new ArgumentException("Unknown signature type requested", e); - } - - sigAlgId = X509Utilities.GetSigAlgID(sigOID, signatureAlgorithm); - - tbsGen.SetSignature(sigAlgId); - } - - /** - * add a given extension field for the standard extensions tag (tag 0) - */ - public void AddExtension( - string oid, - bool critical, - Asn1Encodable extensionValue) - { - extGenerator.AddExtension(new DerObjectIdentifier(oid), critical, extensionValue); - } - - /** - * add a given extension field for the standard extensions tag (tag 0) - */ - public void AddExtension( - DerObjectIdentifier oid, - bool critical, - Asn1Encodable extensionValue) - { - extGenerator.AddExtension(oid, critical, extensionValue); - } - - /** - * add a given extension field for the standard extensions tag (tag 0) - */ - public void AddExtension( - string oid, - bool critical, - byte[] extensionValue) - { - extGenerator.AddExtension(new DerObjectIdentifier(oid), critical, new DerOctetString(extensionValue)); - } - - /** - * add a given extension field for the standard extensions tag (tag 0) - */ - public void AddExtension( - DerObjectIdentifier oid, - bool critical, - byte[] extensionValue) - { - extGenerator.AddExtension(oid, critical, new DerOctetString(extensionValue)); - } - - /// - /// Generate an X.509 CRL, based on the current issuer and subject. - /// - /// The private key of the issuer that is signing this certificate. - /// An X509Crl. - [Obsolete("Use Generate with an ISignatureFactory")] - public X509Crl Generate( - AsymmetricKeyParameter privateKey) - { - return Generate(privateKey, null); - } - - /// - /// Generate an X.509 CRL, based on the current issuer and subject using the specified secure random. - /// - /// The private key of the issuer that is signing this certificate. - /// Your Secure Random instance. - /// An X509Crl. - [Obsolete("Use Generate with an ISignatureFactory")] - public X509Crl Generate( - AsymmetricKeyParameter privateKey, - SecureRandom random) - { - return Generate(new Asn1SignatureFactory(signatureAlgorithm, privateKey, random)); - } - - /// - /// Generate a new X509Crl using the passed in SignatureCalculator. - /// - /// A signature calculator factory with the necessary algorithm details. - /// An X509Crl. - public X509Crl Generate(ISignatureFactory signatureCalculatorFactory) - { - tbsGen.SetSignature((AlgorithmIdentifier)signatureCalculatorFactory.AlgorithmDetails); - - TbsCertificateList tbsCertList = GenerateCertList(); - - IStreamCalculator streamCalculator = signatureCalculatorFactory.CreateCalculator(); - - byte[] encoded = tbsCertList.GetDerEncoded(); - - streamCalculator.Stream.Write(encoded, 0, encoded.Length); - - Platform.Dispose(streamCalculator.Stream); - - return GenerateJcaObject(tbsCertList, (AlgorithmIdentifier)signatureCalculatorFactory.AlgorithmDetails, ((IBlockResult)streamCalculator.GetResult()).Collect()); - } - - private TbsCertificateList GenerateCertList() - { - if (!extGenerator.IsEmpty) - { - tbsGen.SetExtensions(extGenerator.Generate()); - } - - return tbsGen.GenerateTbsCertList(); - } - - private X509Crl GenerateJcaObject( - TbsCertificateList tbsCrl, - AlgorithmIdentifier algId, - byte[] signature) - { - return new X509Crl( - CertificateList.GetInstance( - new DerSequence(tbsCrl, algId, new DerBitString(signature)))); - } - - /// - /// Allows enumeration of the signature names supported by the generator. - /// - public IEnumerable SignatureAlgNames - { - get { return X509Utilities.GetAlgNames(); } - } - } -} diff --git a/bc-sharp-crypto/src/x509/X509V3CertificateGenerator.cs b/bc-sharp-crypto/src/x509/X509V3CertificateGenerator.cs deleted file mode 100644 index bc619c3..0000000 --- a/bc-sharp-crypto/src/x509/X509V3CertificateGenerator.cs +++ /dev/null @@ -1,344 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Crypto.Operators; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.X509.Extension; - -namespace Org.BouncyCastle.X509 -{ - /// - /// A class to Generate Version 3 X509Certificates. - /// - public class X509V3CertificateGenerator - { - private readonly X509ExtensionsGenerator extGenerator = new X509ExtensionsGenerator(); - - private V3TbsCertificateGenerator tbsGen; - private DerObjectIdentifier sigOid; - private AlgorithmIdentifier sigAlgId; - private string signatureAlgorithm; - - public X509V3CertificateGenerator() - { - tbsGen = new V3TbsCertificateGenerator(); - } - - /// - /// Reset the Generator. - /// - public void Reset() - { - tbsGen = new V3TbsCertificateGenerator(); - extGenerator.Reset(); - } - - /// - /// Set the certificate's serial number. - /// - /// Make serial numbers long, if you have no serial number policy make sure the number is at least 16 bytes of secure random data. - /// You will be surprised how ugly a serial number collision can Get. - /// The serial number. - public void SetSerialNumber( - BigInteger serialNumber) - { - if (serialNumber.SignValue <= 0) - { - throw new ArgumentException("serial number must be a positive integer", "serialNumber"); - } - - tbsGen.SetSerialNumber(new DerInteger(serialNumber)); - } - - /// - /// Set the distinguished name of the issuer. - /// The issuer is the entity which is signing the certificate. - /// - /// The issuer's DN. - public void SetIssuerDN( - X509Name issuer) - { - tbsGen.SetIssuer(issuer); - } - - /// - /// Set the date that this certificate is to be valid from. - /// - /// - public void SetNotBefore( - DateTime date) - { - tbsGen.SetStartDate(new Time(date)); - } - - /// - /// Set the date after which this certificate will no longer be valid. - /// - /// - public void SetNotAfter( - DateTime date) - { - tbsGen.SetEndDate(new Time(date)); - } - - /// - /// Set the DN of the entity that this certificate is about. - /// - /// - public void SetSubjectDN( - X509Name subject) - { - tbsGen.SetSubject(subject); - } - - /// - /// Set the public key that this certificate identifies. - /// - /// - public void SetPublicKey( - AsymmetricKeyParameter publicKey) - { - tbsGen.SetSubjectPublicKeyInfo(SubjectPublicKeyInfoFactory.CreateSubjectPublicKeyInfo(publicKey)); - } - - /// - /// Set the signature algorithm that will be used to sign this certificate. - /// - /// - [Obsolete("Not needed if Generate used with an ISignatureFactory")] - public void SetSignatureAlgorithm( - string signatureAlgorithm) - { - this.signatureAlgorithm = signatureAlgorithm; - - try - { - sigOid = X509Utilities.GetAlgorithmOid(signatureAlgorithm); - } - catch (Exception) - { - throw new ArgumentException("Unknown signature type requested: " + signatureAlgorithm); - } - - sigAlgId = X509Utilities.GetSigAlgID(sigOid, signatureAlgorithm); - - tbsGen.SetSignature(sigAlgId); - } - - /// - /// Set the subject unique ID - note: it is very rare that it is correct to do this. - /// - /// - public void SetSubjectUniqueID( - bool[] uniqueID) - { - tbsGen.SetSubjectUniqueID(booleanToBitString(uniqueID)); - } - - /// - /// Set the issuer unique ID - note: it is very rare that it is correct to do this. - /// - /// - public void SetIssuerUniqueID( - bool[] uniqueID) - { - tbsGen.SetIssuerUniqueID(booleanToBitString(uniqueID)); - } - - private DerBitString booleanToBitString( - bool[] id) - { - byte[] bytes = new byte[(id.Length + 7) / 8]; - - for (int i = 0; i != id.Length; i++) - { - if (id[i]) - { - bytes[i / 8] |= (byte)(1 << ((7 - (i % 8)))); - } - } - - int pad = id.Length % 8; - - if (pad == 0) - { - return new DerBitString(bytes); - } - - return new DerBitString(bytes, 8 - pad); - } - - /// - /// Add a given extension field for the standard extensions tag (tag 3). - /// - /// string containing a dotted decimal Object Identifier. - /// Is it critical. - /// The value. - public void AddExtension( - string oid, - bool critical, - Asn1Encodable extensionValue) - { - extGenerator.AddExtension(new DerObjectIdentifier(oid), critical, extensionValue); - } - - /// - /// Add an extension to this certificate. - /// - /// Its Object Identifier. - /// Is it critical. - /// The value. - public void AddExtension( - DerObjectIdentifier oid, - bool critical, - Asn1Encodable extensionValue) - { - extGenerator.AddExtension(oid, critical, extensionValue); - } - - /// - /// Add an extension using a string with a dotted decimal OID. - /// - /// string containing a dotted decimal Object Identifier. - /// Is it critical. - /// byte[] containing the value of this extension. - public void AddExtension( - string oid, - bool critical, - byte[] extensionValue) - { - extGenerator.AddExtension(new DerObjectIdentifier(oid), critical, new DerOctetString(extensionValue)); - } - - /// - /// Add an extension to this certificate. - /// - /// Its Object Identifier. - /// Is it critical. - /// byte[] containing the value of this extension. - public void AddExtension( - DerObjectIdentifier oid, - bool critical, - byte[] extensionValue) - { - extGenerator.AddExtension(oid, critical, new DerOctetString(extensionValue)); - } - - /// - /// Add a given extension field for the standard extensions tag (tag 3), - /// copying the extension value from another certificate. - /// - public void CopyAndAddExtension( - string oid, - bool critical, - X509Certificate cert) - { - CopyAndAddExtension(new DerObjectIdentifier(oid), critical, cert); - } - - /** - * add a given extension field for the standard extensions tag (tag 3) - * copying the extension value from another certificate. - * @throws CertificateParsingException if the extension cannot be extracted. - */ - public void CopyAndAddExtension( - DerObjectIdentifier oid, - bool critical, - X509Certificate cert) - { - Asn1OctetString extValue = cert.GetExtensionValue(oid); - - if (extValue == null) - { - throw new CertificateParsingException("extension " + oid + " not present"); - } - - try - { - Asn1Encodable value = X509ExtensionUtilities.FromExtensionValue(extValue); - - this.AddExtension(oid, critical, value); - } - catch (Exception e) - { - throw new CertificateParsingException(e.Message, e); - } - } - - /// - /// Generate an X509Certificate. - /// - /// The private key of the issuer that is signing this certificate. - /// An X509Certificate. - [Obsolete("Use Generate with an ISignatureFactory")] - public X509Certificate Generate( - AsymmetricKeyParameter privateKey) - { - return Generate(privateKey, null); - } - - /// - /// Generate an X509Certificate using your own SecureRandom. - /// - /// The private key of the issuer that is signing this certificate. - /// You Secure Random instance. - /// An X509Certificate. - [Obsolete("Use Generate with an ISignatureFactory")] - public X509Certificate Generate( - AsymmetricKeyParameter privateKey, - SecureRandom random) - { - return Generate(new Asn1SignatureFactory(signatureAlgorithm, privateKey, random)); - } - - /// - /// Generate a new X509Certificate using the passed in SignatureCalculator. - /// - /// A signature calculator factory with the necessary algorithm details. - /// An X509Certificate. - public X509Certificate Generate(ISignatureFactory signatureCalculatorFactory) - { - tbsGen.SetSignature ((AlgorithmIdentifier)signatureCalculatorFactory.AlgorithmDetails); - - if (!extGenerator.IsEmpty) - { - tbsGen.SetExtensions(extGenerator.Generate()); - } - - TbsCertificateStructure tbsCert = tbsGen.GenerateTbsCertificate(); - - IStreamCalculator streamCalculator = signatureCalculatorFactory.CreateCalculator(); - - byte[] encoded = tbsCert.GetDerEncoded(); - - streamCalculator.Stream.Write(encoded, 0, encoded.Length); - - Platform.Dispose(streamCalculator.Stream); - - return GenerateJcaObject(tbsCert, (AlgorithmIdentifier)signatureCalculatorFactory.AlgorithmDetails, ((IBlockResult)streamCalculator.GetResult()).Collect()); - } - - private X509Certificate GenerateJcaObject( - TbsCertificateStructure tbsCert, - AlgorithmIdentifier sigAlg, - byte[] signature) - { - return new X509Certificate( - new X509CertificateStructure(tbsCert, sigAlg, new DerBitString(signature))); - } - - /// - /// Allows enumeration of the signature names supported by the generator. - /// - public IEnumerable SignatureAlgNames - { - get { return X509Utilities.GetAlgNames(); } - } - } -} diff --git a/bc-sharp-crypto/src/x509/extension/AuthorityKeyIdentifierStructure.cs b/bc-sharp-crypto/src/x509/extension/AuthorityKeyIdentifierStructure.cs deleted file mode 100644 index 006dc00..0000000 --- a/bc-sharp-crypto/src/x509/extension/AuthorityKeyIdentifierStructure.cs +++ /dev/null @@ -1,102 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Security; -using Org.BouncyCastle.Security.Certificates; - -namespace Org.BouncyCastle.X509.Extension -{ - /// A high level authority key identifier. - public class AuthorityKeyIdentifierStructure - : AuthorityKeyIdentifier - { - /** - * Constructor which will take the byte[] returned from getExtensionValue() - * - * @param encodedValue a DER octet encoded string with the extension structure in it. - * @throws IOException on parsing errors. - */ - // TODO Add a functional constructor from byte[]? - public AuthorityKeyIdentifierStructure( - Asn1OctetString encodedValue) - : base((Asn1Sequence) X509ExtensionUtilities.FromExtensionValue(encodedValue)) - { - } - - private static Asn1Sequence FromCertificate( - X509Certificate certificate) - { - try - { - GeneralName genName = new GeneralName( - PrincipalUtilities.GetIssuerX509Principal(certificate)); - - if (certificate.Version == 3) - { - Asn1OctetString ext = certificate.GetExtensionValue(X509Extensions.SubjectKeyIdentifier); - - if (ext != null) - { - Asn1OctetString str = (Asn1OctetString) X509ExtensionUtilities.FromExtensionValue(ext); - - return (Asn1Sequence) new AuthorityKeyIdentifier( - str.GetOctets(), new GeneralNames(genName), certificate.SerialNumber).ToAsn1Object(); - } - } - - SubjectPublicKeyInfo info = SubjectPublicKeyInfoFactory.CreateSubjectPublicKeyInfo( - certificate.GetPublicKey()); - - return (Asn1Sequence) new AuthorityKeyIdentifier( - info, new GeneralNames(genName), certificate.SerialNumber).ToAsn1Object(); - } - catch (Exception e) - { - throw new CertificateParsingException("Exception extracting certificate details", e); - } - } - - private static Asn1Sequence FromKey( - AsymmetricKeyParameter pubKey) - { - try - { - SubjectPublicKeyInfo info = SubjectPublicKeyInfoFactory.CreateSubjectPublicKeyInfo(pubKey); - - return (Asn1Sequence) new AuthorityKeyIdentifier(info).ToAsn1Object(); - } - catch (Exception e) - { - throw new InvalidKeyException("can't process key: " + e); - } - } - - /** - * Create an AuthorityKeyIdentifier using the passed in certificate's public - * key, issuer and serial number. - * - * @param certificate the certificate providing the information. - * @throws CertificateParsingException if there is a problem processing the certificate - */ - public AuthorityKeyIdentifierStructure( - X509Certificate certificate) - : base(FromCertificate(certificate)) - { - } - - /** - * Create an AuthorityKeyIdentifier using just the hash of the - * public key. - * - * @param pubKey the key to generate the hash from. - * @throws InvalidKeyException if there is a problem using the key. - */ - public AuthorityKeyIdentifierStructure( - AsymmetricKeyParameter pubKey) - : base(FromKey(pubKey)) - { - } - } -} diff --git a/bc-sharp-crypto/src/x509/extension/SubjectKeyIdentifierStructure.cs b/bc-sharp-crypto/src/x509/extension/SubjectKeyIdentifierStructure.cs deleted file mode 100644 index 4c7b79a..0000000 --- a/bc-sharp-crypto/src/x509/extension/SubjectKeyIdentifierStructure.cs +++ /dev/null @@ -1,49 +0,0 @@ -using System; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Crypto; -using Org.BouncyCastle.Security.Certificates; - -namespace Org.BouncyCastle.X509.Extension -{ - /** - * A high level subject key identifier. - */ - public class SubjectKeyIdentifierStructure - : SubjectKeyIdentifier - { - /** - * Constructor which will take the byte[] returned from getExtensionValue() - * - * @param encodedValue a DER octet encoded string with the extension structure in it. - * @throws IOException on parsing errors. - */ - public SubjectKeyIdentifierStructure( - Asn1OctetString encodedValue) - : base((Asn1OctetString) X509ExtensionUtilities.FromExtensionValue(encodedValue)) - { - } - - private static Asn1OctetString FromPublicKey( - AsymmetricKeyParameter pubKey) - { - try - { - SubjectPublicKeyInfo info = SubjectPublicKeyInfoFactory.CreateSubjectPublicKeyInfo(pubKey); - - return (Asn1OctetString) new SubjectKeyIdentifier(info).ToAsn1Object(); - } - catch (Exception e) - { - throw new CertificateParsingException("Exception extracting certificate details: " + e.ToString()); - } - } - - public SubjectKeyIdentifierStructure( - AsymmetricKeyParameter pubKey) - : base(FromPublicKey(pubKey)) - { - } - } -} diff --git a/bc-sharp-crypto/src/x509/extension/X509ExtensionUtil.cs b/bc-sharp-crypto/src/x509/extension/X509ExtensionUtil.cs deleted file mode 100644 index 5f65ebf..0000000 --- a/bc-sharp-crypto/src/x509/extension/X509ExtensionUtil.cs +++ /dev/null @@ -1,91 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Security.Certificates; -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.X509.Extension -{ - public class X509ExtensionUtilities - { - public static Asn1Object FromExtensionValue( - Asn1OctetString extensionValue) - { - return Asn1Object.FromByteArray(extensionValue.GetOctets()); - } - - public static ICollection GetIssuerAlternativeNames( - X509Certificate cert) - { - Asn1OctetString extVal = cert.GetExtensionValue(X509Extensions.IssuerAlternativeName); - - return GetAlternativeName(extVal); - } - - public static ICollection GetSubjectAlternativeNames( - X509Certificate cert) - { - Asn1OctetString extVal = cert.GetExtensionValue(X509Extensions.SubjectAlternativeName); - - return GetAlternativeName(extVal); - } - - private static ICollection GetAlternativeName( - Asn1OctetString extVal) - { - IList temp = Platform.CreateArrayList(); - - if (extVal != null) - { - try - { - Asn1Sequence seq = DerSequence.GetInstance(FromExtensionValue(extVal)); - - foreach (Asn1Encodable primName in seq) - { - IList list = Platform.CreateArrayList(); - GeneralName genName = GeneralName.GetInstance(primName); - - list.Add(genName.TagNo); - - switch (genName.TagNo) - { - case GeneralName.EdiPartyName: - case GeneralName.X400Address: - case GeneralName.OtherName: - list.Add(genName.Name.ToAsn1Object()); - break; - case GeneralName.DirectoryName: - list.Add(X509Name.GetInstance(genName.Name).ToString()); - break; - case GeneralName.DnsName: - case GeneralName.Rfc822Name: - case GeneralName.UniformResourceIdentifier: - list.Add(((IAsn1String)genName.Name).GetString()); - break; - case GeneralName.RegisteredID: - list.Add(DerObjectIdentifier.GetInstance(genName.Name).Id); - break; - case GeneralName.IPAddress: - list.Add(DerOctetString.GetInstance(genName.Name).GetOctets()); - break; - default: - throw new IOException("Bad tag number: " + genName.TagNo); - } - - temp.Add(list); - } - } - catch (Exception e) - { - throw new CertificateParsingException(e.Message); - } - } - - return temp; - } - } -} diff --git a/bc-sharp-crypto/src/x509/store/IX509Selector.cs b/bc-sharp-crypto/src/x509/store/IX509Selector.cs deleted file mode 100644 index 75358cb..0000000 --- a/bc-sharp-crypto/src/x509/store/IX509Selector.cs +++ /dev/null @@ -1,15 +0,0 @@ -using System; - -namespace Org.BouncyCastle.X509.Store -{ - public interface IX509Selector -#if !(SILVERLIGHT || PORTABLE) - : ICloneable -#endif - { -#if SILVERLIGHT || PORTABLE - object Clone(); -#endif - bool Match(object obj); - } -} diff --git a/bc-sharp-crypto/src/x509/store/IX509Store.cs b/bc-sharp-crypto/src/x509/store/IX509Store.cs deleted file mode 100644 index e5c3a46..0000000 --- a/bc-sharp-crypto/src/x509/store/IX509Store.cs +++ /dev/null @@ -1,11 +0,0 @@ -using System; -using System.Collections; - -namespace Org.BouncyCastle.X509.Store -{ - public interface IX509Store - { -// void Init(IX509StoreParameters parameters); - ICollection GetMatches(IX509Selector selector); - } -} diff --git a/bc-sharp-crypto/src/x509/store/IX509StoreParameters.cs b/bc-sharp-crypto/src/x509/store/IX509StoreParameters.cs deleted file mode 100644 index aee3036..0000000 --- a/bc-sharp-crypto/src/x509/store/IX509StoreParameters.cs +++ /dev/null @@ -1,8 +0,0 @@ -using System; - -namespace Org.BouncyCastle.X509.Store -{ - public interface IX509StoreParameters - { - } -} diff --git a/bc-sharp-crypto/src/x509/store/NoSuchStoreException.cs b/bc-sharp-crypto/src/x509/store/NoSuchStoreException.cs deleted file mode 100644 index 28b1889..0000000 --- a/bc-sharp-crypto/src/x509/store/NoSuchStoreException.cs +++ /dev/null @@ -1,28 +0,0 @@ -using System; - -namespace Org.BouncyCastle.X509.Store -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class NoSuchStoreException - : X509StoreException - { - public NoSuchStoreException() - { - } - - public NoSuchStoreException( - string message) - : base(message) - { - } - - public NoSuchStoreException( - string message, - Exception e) - : base(message, e) - { - } - } -} diff --git a/bc-sharp-crypto/src/x509/store/X509AttrCertStoreSelector.cs b/bc-sharp-crypto/src/x509/store/X509AttrCertStoreSelector.cs deleted file mode 100644 index 9f1dc20..0000000 --- a/bc-sharp-crypto/src/x509/store/X509AttrCertStoreSelector.cs +++ /dev/null @@ -1,376 +0,0 @@ -using System; -using System.Collections; -using System.IO; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities.Collections; -using Org.BouncyCastle.Utilities.Date; -using Org.BouncyCastle.X509.Extension; - -namespace Org.BouncyCastle.X509.Store -{ - /** - * This class is an Selector like implementation to select - * attribute certificates from a given set of criteria. - * - * @see org.bouncycastle.x509.X509AttributeCertificate - * @see org.bouncycastle.x509.X509Store - */ - public class X509AttrCertStoreSelector - : IX509Selector - { - // TODO: name constraints??? - - private IX509AttributeCertificate attributeCert; - private DateTimeObject attributeCertificateValid; - private AttributeCertificateHolder holder; - private AttributeCertificateIssuer issuer; - private BigInteger serialNumber; - private ISet targetNames = new HashSet(); - private ISet targetGroups = new HashSet(); - - public X509AttrCertStoreSelector() - { - } - - private X509AttrCertStoreSelector( - X509AttrCertStoreSelector o) - { - this.attributeCert = o.attributeCert; - this.attributeCertificateValid = o.attributeCertificateValid; - this.holder = o.holder; - this.issuer = o.issuer; - this.serialNumber = o.serialNumber; - this.targetGroups = new HashSet(o.targetGroups); - this.targetNames = new HashSet(o.targetNames); - } - - /// - /// Decides if the given attribute certificate should be selected. - /// - /// The attribute certificate to be checked. - /// true if the object matches this selector. - public bool Match( - object obj) - { - if (obj == null) - throw new ArgumentNullException("obj"); - - IX509AttributeCertificate attrCert = obj as IX509AttributeCertificate; - - if (attrCert == null) - return false; - - if (this.attributeCert != null && !this.attributeCert.Equals(attrCert)) - return false; - - if (serialNumber != null && !attrCert.SerialNumber.Equals(serialNumber)) - return false; - - if (holder != null && !attrCert.Holder.Equals(holder)) - return false; - - if (issuer != null && !attrCert.Issuer.Equals(issuer)) - return false; - - if (attributeCertificateValid != null && !attrCert.IsValid(attributeCertificateValid.Value)) - return false; - - if (targetNames.Count > 0 || targetGroups.Count > 0) - { - Asn1OctetString targetInfoExt = attrCert.GetExtensionValue( - X509Extensions.TargetInformation); - - if (targetInfoExt != null) - { - TargetInformation targetinfo; - try - { - targetinfo = TargetInformation.GetInstance( - X509ExtensionUtilities.FromExtensionValue(targetInfoExt)); - } - catch (Exception) - { - return false; - } - - Targets[] targetss = targetinfo.GetTargetsObjects(); - - if (targetNames.Count > 0) - { - bool found = false; - - for (int i = 0; i < targetss.Length && !found; i++) - { - Target[] targets = targetss[i].GetTargets(); - - for (int j = 0; j < targets.Length; j++) - { - GeneralName targetName = targets[j].TargetName; - - if (targetName != null && targetNames.Contains(targetName)) - { - found = true; - break; - } - } - } - if (!found) - { - return false; - } - } - - if (targetGroups.Count > 0) - { - bool found = false; - - for (int i = 0; i < targetss.Length && !found; i++) - { - Target[] targets = targetss[i].GetTargets(); - - for (int j = 0; j < targets.Length; j++) - { - GeneralName targetGroup = targets[j].TargetGroup; - - if (targetGroup != null && targetGroups.Contains(targetGroup)) - { - found = true; - break; - } - } - } - - if (!found) - { - return false; - } - } - } - } - - return true; - } - - public object Clone() - { - return new X509AttrCertStoreSelector(this); - } - - /// The attribute certificate which must be matched. - /// If null is given, any will do. - public IX509AttributeCertificate AttributeCert - { - get { return attributeCert; } - set { this.attributeCert = value; } - } - - [Obsolete("Use AttributeCertificateValid instead")] - public DateTimeObject AttribueCertificateValid - { - get { return attributeCertificateValid; } - set { this.attributeCertificateValid = value; } - } - - /// The criteria for validity - /// If null is given any will do. - public DateTimeObject AttributeCertificateValid - { - get { return attributeCertificateValid; } - set { this.attributeCertificateValid = value; } - } - - /// The holder. - /// If null is given any will do. - public AttributeCertificateHolder Holder - { - get { return holder; } - set { this.holder = value; } - } - - /// The issuer. - /// If null is given any will do. - public AttributeCertificateIssuer Issuer - { - get { return issuer; } - set { this.issuer = value; } - } - - /// The serial number. - /// If null is given any will do. - public BigInteger SerialNumber - { - get { return serialNumber; } - set { this.serialNumber = value; } - } - - /** - * Adds a target name criterion for the attribute certificate to the target - * information extension criteria. The X509AttributeCertificate - * must contain at least one of the specified target names. - *

    - * Each attribute certificate may contain a target information extension - * limiting the servers where this attribute certificate can be used. If - * this extension is not present, the attribute certificate is not targeted - * and may be accepted by any server. - *

    - * - * @param name The name as a GeneralName (not null) - */ - public void AddTargetName( - GeneralName name) - { - targetNames.Add(name); - } - - /** - * Adds a target name criterion for the attribute certificate to the target - * information extension criteria. The X509AttributeCertificate - * must contain at least one of the specified target names. - *

    - * Each attribute certificate may contain a target information extension - * limiting the servers where this attribute certificate can be used. If - * this extension is not present, the attribute certificate is not targeted - * and may be accepted by any server. - *

    - * - * @param name a byte array containing the name in ASN.1 DER encoded form of a GeneralName - * @throws IOException if a parsing error occurs. - */ - public void AddTargetName( - byte[] name) - { - AddTargetName(GeneralName.GetInstance(Asn1Object.FromByteArray(name))); - } - - /** - * Adds a collection with target names criteria. If null is - * given any will do. - *

    - * The collection consists of either GeneralName objects or byte[] arrays representing - * DER encoded GeneralName structures. - *

    - * - * @param names A collection of target names. - * @throws IOException if a parsing error occurs. - * @see #AddTargetName(byte[]) - * @see #AddTargetName(GeneralName) - */ - public void SetTargetNames( - IEnumerable names) - { - targetNames = ExtractGeneralNames(names); - } - - /** - * Gets the target names. The collection consists of Lists - * made up of an Integer in the first entry and a DER encoded - * byte array or a String in the second entry. - *

    The returned collection is immutable.

    - * - * @return The collection of target names - * @see #setTargetNames(Collection) - */ - public IEnumerable GetTargetNames() - { - return new EnumerableProxy(targetNames); - } - - /** - * Adds a target group criterion for the attribute certificate to the target - * information extension criteria. The X509AttributeCertificate - * must contain at least one of the specified target groups. - *

    - * Each attribute certificate may contain a target information extension - * limiting the servers where this attribute certificate can be used. If - * this extension is not present, the attribute certificate is not targeted - * and may be accepted by any server. - *

    - * - * @param group The group as GeneralName form (not null) - */ - public void AddTargetGroup( - GeneralName group) - { - targetGroups.Add(group); - } - - /** - * Adds a target group criterion for the attribute certificate to the target - * information extension criteria. The X509AttributeCertificate - * must contain at least one of the specified target groups. - *

    - * Each attribute certificate may contain a target information extension - * limiting the servers where this attribute certificate can be used. If - * this extension is not present, the attribute certificate is not targeted - * and may be accepted by any server. - *

    - * - * @param name a byte array containing the group in ASN.1 DER encoded form of a GeneralName - * @throws IOException if a parsing error occurs. - */ - public void AddTargetGroup( - byte[] name) - { - AddTargetGroup(GeneralName.GetInstance(Asn1Object.FromByteArray(name))); - } - - /** - * Adds a collection with target groups criteria. If null is - * given any will do. - *

    - * The collection consists of GeneralName objects or byte[] - * representing DER encoded GeneralNames. - *

    - * - * @param names A collection of target groups. - * @throws IOException if a parsing error occurs. - * @see #AddTargetGroup(byte[]) - * @see #AddTargetGroup(GeneralName) - */ - public void SetTargetGroups( - IEnumerable names) - { - targetGroups = ExtractGeneralNames(names); - } - - /** - * Gets the target groups. The collection consists of Lists - * made up of an Integer in the first entry and a DER encoded - * byte array or a String in the second entry. - *

    The returned collection is immutable.

    - * - * @return The collection of target groups. - * @see #setTargetGroups(Collection) - */ - public IEnumerable GetTargetGroups() - { - return new EnumerableProxy(targetGroups); - } - - private ISet ExtractGeneralNames( - IEnumerable names) - { - ISet result = new HashSet(); - - if (names != null) - { - foreach (object o in names) - { - if (o is GeneralName) - { - result.Add(o); - } - else - { - result.Add(GeneralName.GetInstance(Asn1Object.FromByteArray((byte[]) o))); - } - } - } - - return result; - } - } -} diff --git a/bc-sharp-crypto/src/x509/store/X509CertPairStoreSelector.cs b/bc-sharp-crypto/src/x509/store/X509CertPairStoreSelector.cs deleted file mode 100644 index 2796971..0000000 --- a/bc-sharp-crypto/src/x509/store/X509CertPairStoreSelector.cs +++ /dev/null @@ -1,92 +0,0 @@ -using System; - -namespace Org.BouncyCastle.X509.Store -{ - /// - /// This class is an IX509Selector implementation to select - /// certificate pairs, which are e.g. used for cross certificates. The set of - /// criteria is given from two X509CertStoreSelector objects, - /// each of which, if present, must match the respective component of a pair. - /// - public class X509CertPairStoreSelector - : IX509Selector - { - private static X509CertStoreSelector CloneSelector( - X509CertStoreSelector s) - { - return s == null ? null : (X509CertStoreSelector) s.Clone(); - } - - private X509CertificatePair certPair; - private X509CertStoreSelector forwardSelector; - private X509CertStoreSelector reverseSelector; - - public X509CertPairStoreSelector() - { - } - - private X509CertPairStoreSelector( - X509CertPairStoreSelector o) - { - this.certPair = o.CertPair; - this.forwardSelector = o.ForwardSelector; - this.reverseSelector = o.ReverseSelector; - } - - /// The certificate pair which is used for testing on equality. - public X509CertificatePair CertPair - { - get { return certPair; } - set { this.certPair = value; } - } - - /// The certificate selector for the forward part. - public X509CertStoreSelector ForwardSelector - { - get { return CloneSelector(forwardSelector); } - set { this.forwardSelector = CloneSelector(value); } - } - - /// The certificate selector for the reverse part. - public X509CertStoreSelector ReverseSelector - { - get { return CloneSelector(reverseSelector); } - set { this.reverseSelector = CloneSelector(value); } - } - - /// - /// Decides if the given certificate pair should be selected. If - /// obj is not a X509CertificatePair, this method - /// returns false. - /// - /// The X509CertificatePair to be tested. - /// true if the object matches this selector. - public bool Match( - object obj) - { - if (obj == null) - throw new ArgumentNullException("obj"); - - X509CertificatePair pair = obj as X509CertificatePair; - - if (pair == null) - return false; - - if (certPair != null && !certPair.Equals(pair)) - return false; - - if (forwardSelector != null && !forwardSelector.Match(pair.Forward)) - return false; - - if (reverseSelector != null && !reverseSelector.Match(pair.Reverse)) - return false; - - return true; - } - - public object Clone() - { - return new X509CertPairStoreSelector(this); - } - } -} diff --git a/bc-sharp-crypto/src/x509/store/X509CertStoreSelector.cs b/bc-sharp-crypto/src/x509/store/X509CertStoreSelector.cs deleted file mode 100644 index 3874edf..0000000 --- a/bc-sharp-crypto/src/x509/store/X509CertStoreSelector.cs +++ /dev/null @@ -1,337 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Collections; -using Org.BouncyCastle.Utilities.Date; -using Org.BouncyCastle.X509.Extension; - -namespace Org.BouncyCastle.X509.Store -{ - public class X509CertStoreSelector - : IX509Selector - { - // TODO Missing criteria? - - private byte[] authorityKeyIdentifier; - private int basicConstraints = -1; - private X509Certificate certificate; - private DateTimeObject certificateValid; - private ISet extendedKeyUsage; - private X509Name issuer; - private bool[] keyUsage; - private ISet policy; - private DateTimeObject privateKeyValid; - private BigInteger serialNumber; - private X509Name subject; - private byte[] subjectKeyIdentifier; - private SubjectPublicKeyInfo subjectPublicKey; - private DerObjectIdentifier subjectPublicKeyAlgID; - - public X509CertStoreSelector() - { - } - - public X509CertStoreSelector( - X509CertStoreSelector o) - { - this.authorityKeyIdentifier = o.AuthorityKeyIdentifier; - this.basicConstraints = o.BasicConstraints; - this.certificate = o.Certificate; - this.certificateValid = o.CertificateValid; - this.extendedKeyUsage = o.ExtendedKeyUsage; - this.issuer = o.Issuer; - this.keyUsage = o.KeyUsage; - this.policy = o.Policy; - this.privateKeyValid = o.PrivateKeyValid; - this.serialNumber = o.SerialNumber; - this.subject = o.Subject; - this.subjectKeyIdentifier = o.SubjectKeyIdentifier; - this.subjectPublicKey = o.SubjectPublicKey; - this.subjectPublicKeyAlgID = o.SubjectPublicKeyAlgID; - } - - public virtual object Clone() - { - return new X509CertStoreSelector(this); - } - - public byte[] AuthorityKeyIdentifier - { - get { return Arrays.Clone(authorityKeyIdentifier); } - set { authorityKeyIdentifier = Arrays.Clone(value); } - } - - public int BasicConstraints - { - get { return basicConstraints; } - set - { - if (value < -2) - throw new ArgumentException("value can't be less than -2", "value"); - - basicConstraints = value; - } - } - - public X509Certificate Certificate - { - get { return certificate; } - set { this.certificate = value; } - } - - public DateTimeObject CertificateValid - { - get { return certificateValid; } - set { certificateValid = value; } - } - - public ISet ExtendedKeyUsage - { - get { return CopySet(extendedKeyUsage); } - set { extendedKeyUsage = CopySet(value); } - } - - public X509Name Issuer - { - get { return issuer; } - set { issuer = value; } - } - - [Obsolete("Avoid working with X509Name objects in string form")] - public string IssuerAsString - { - get { return issuer != null ? issuer.ToString() : null; } - } - - public bool[] KeyUsage - { - get { return CopyBoolArray(keyUsage); } - set { keyUsage = CopyBoolArray(value); } - } - - /// - /// An ISet of DerObjectIdentifier objects. - /// - public ISet Policy - { - get { return CopySet(policy); } - set { policy = CopySet(value); } - } - - public DateTimeObject PrivateKeyValid - { - get { return privateKeyValid; } - set { privateKeyValid = value; } - } - - public BigInteger SerialNumber - { - get { return serialNumber; } - set { serialNumber = value; } - } - - public X509Name Subject - { - get { return subject; } - set { subject = value; } - } - - public string SubjectAsString - { - get { return subject != null ? subject.ToString() : null; } - } - - public byte[] SubjectKeyIdentifier - { - get { return Arrays.Clone(subjectKeyIdentifier); } - set { subjectKeyIdentifier = Arrays.Clone(value); } - } - - public SubjectPublicKeyInfo SubjectPublicKey - { - get { return subjectPublicKey; } - set { subjectPublicKey = value; } - } - - public DerObjectIdentifier SubjectPublicKeyAlgID - { - get { return subjectPublicKeyAlgID; } - set { subjectPublicKeyAlgID = value; } - } - - public virtual bool Match( - object obj) - { - X509Certificate c = obj as X509Certificate; - - if (c == null) - return false; - - if (!MatchExtension(authorityKeyIdentifier, c, X509Extensions.AuthorityKeyIdentifier)) - return false; - - if (basicConstraints != -1) - { - int bc = c.GetBasicConstraints(); - - if (basicConstraints == -2) - { - if (bc != -1) - return false; - } - else - { - if (bc < basicConstraints) - return false; - } - } - - if (certificate != null && !certificate.Equals(c)) - return false; - - if (certificateValid != null && !c.IsValid(certificateValid.Value)) - return false; - - if (extendedKeyUsage != null) - { - IList eku = c.GetExtendedKeyUsage(); - - // Note: if no extended key usage set, all key purposes are implicitly allowed - - if (eku != null) - { - foreach (DerObjectIdentifier oid in extendedKeyUsage) - { - if (!eku.Contains(oid.Id)) - return false; - } - } - } - - if (issuer != null && !issuer.Equivalent(c.IssuerDN, true)) - return false; - - if (keyUsage != null) - { - bool[] ku = c.GetKeyUsage(); - - // Note: if no key usage set, all key purposes are implicitly allowed - - if (ku != null) - { - for (int i = 0; i < 9; ++i) - { - if (keyUsage[i] && !ku[i]) - return false; - } - } - } - - if (policy != null) - { - Asn1OctetString extVal = c.GetExtensionValue(X509Extensions.CertificatePolicies); - if (extVal == null) - return false; - - Asn1Sequence certPolicies = Asn1Sequence.GetInstance( - X509ExtensionUtilities.FromExtensionValue(extVal)); - - if (policy.Count < 1 && certPolicies.Count < 1) - return false; - - bool found = false; - foreach (PolicyInformation pi in certPolicies) - { - if (policy.Contains(pi.PolicyIdentifier)) - { - found = true; - break; - } - } - - if (!found) - return false; - } - - if (privateKeyValid != null) - { - Asn1OctetString extVal = c.GetExtensionValue(X509Extensions.PrivateKeyUsagePeriod); - if (extVal == null) - return false; - - PrivateKeyUsagePeriod pkup = PrivateKeyUsagePeriod.GetInstance( - X509ExtensionUtilities.FromExtensionValue(extVal)); - - DateTime dt = privateKeyValid.Value; - DateTime notAfter = pkup.NotAfter.ToDateTime(); - DateTime notBefore = pkup.NotBefore.ToDateTime(); - - if (dt.CompareTo(notAfter) > 0 || dt.CompareTo(notBefore) < 0) - return false; - } - - if (serialNumber != null && !serialNumber.Equals(c.SerialNumber)) - return false; - - if (subject != null && !subject.Equivalent(c.SubjectDN, true)) - return false; - - if (!MatchExtension(subjectKeyIdentifier, c, X509Extensions.SubjectKeyIdentifier)) - return false; - - if (subjectPublicKey != null && !subjectPublicKey.Equals(GetSubjectPublicKey(c))) - return false; - - if (subjectPublicKeyAlgID != null - && !subjectPublicKeyAlgID.Equals(GetSubjectPublicKey(c).AlgorithmID)) - return false; - - return true; - } - - internal static bool IssuersMatch( - X509Name a, - X509Name b) - { - return a == null ? b == null : a.Equivalent(b, true); - } - - private static bool[] CopyBoolArray( - bool[] b) - { - return b == null ? null : (bool[]) b.Clone(); - } - - private static ISet CopySet( - ISet s) - { - return s == null ? null : new HashSet(s); - } - - private static SubjectPublicKeyInfo GetSubjectPublicKey( - X509Certificate c) - { - return SubjectPublicKeyInfoFactory.CreateSubjectPublicKeyInfo(c.GetPublicKey()); - } - - private static bool MatchExtension( - byte[] b, - X509Certificate c, - DerObjectIdentifier oid) - { - if (b == null) - return true; - - Asn1OctetString extVal = c.GetExtensionValue(oid); - - if (extVal == null) - return false; - - return Arrays.AreEqual(b, extVal.GetOctets()); - } - } -} diff --git a/bc-sharp-crypto/src/x509/store/X509CollectionStore.cs b/bc-sharp-crypto/src/x509/store/X509CollectionStore.cs deleted file mode 100644 index 9217314..0000000 --- a/bc-sharp-crypto/src/x509/store/X509CollectionStore.cs +++ /dev/null @@ -1,51 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.X509.Store -{ - /** - * A simple collection backed store. - */ - internal class X509CollectionStore - : IX509Store - { - private ICollection _local; - - /** - * Basic constructor. - * - * @param collection - initial contents for the store, this is copied. - */ - internal X509CollectionStore( - ICollection collection) - { - _local = Platform.CreateArrayList(collection); - } - - /** - * Return the matches in the collection for the passed in selector. - * - * @param selector the selector to match against. - * @return a possibly empty collection of matching objects. - */ - public ICollection GetMatches( - IX509Selector selector) - { - if (selector == null) - { - return Platform.CreateArrayList(_local); - } - - IList result = Platform.CreateArrayList(); - foreach (object obj in _local) - { - if (selector.Match(obj)) - result.Add(obj); - } - - return result; - } - } -} diff --git a/bc-sharp-crypto/src/x509/store/X509CollectionStoreParameters.cs b/bc-sharp-crypto/src/x509/store/X509CollectionStoreParameters.cs deleted file mode 100644 index 7fd047a..0000000 --- a/bc-sharp-crypto/src/x509/store/X509CollectionStoreParameters.cs +++ /dev/null @@ -1,60 +0,0 @@ -using System; -using System.Collections; -using System.Text; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.X509.Store -{ - /// This class contains a collection for collection based X509Stores. - public class X509CollectionStoreParameters - : IX509StoreParameters - { - private readonly IList collection; - - /// - /// Constructor. - ///

    - /// The collection is copied. - ///

    - ///     - /// The collection containing X.509 object types. - /// If collection is null. - public X509CollectionStoreParameters( - ICollection collection) - { - if (collection == null) - throw new ArgumentNullException("collection"); - - this.collection = Platform.CreateArrayList(collection); - } - - // TODO Do we need to be able to Clone() these, and should it really be shallow? -// /** -// * Returns a shallow clone. The returned contents are not copied, so adding -// * or removing objects will effect this. -// * -// * @return a shallow clone. -// */ -// public object Clone() -// { -// return new X509CollectionStoreParameters(collection); -// } - - /// Returns a copy of the ICollection. - public ICollection GetCollection() - { - return Platform.CreateArrayList(collection); - } - - /// Returns a formatted string describing the parameters. - public override string ToString() - { - StringBuilder sb = new StringBuilder(); - sb.Append("X509CollectionStoreParameters: [\n"); - sb.Append(" collection: " + collection + "\n"); - sb.Append("]"); - return sb.ToString(); - } - } -} diff --git a/bc-sharp-crypto/src/x509/store/X509CrlStoreSelector.cs b/bc-sharp-crypto/src/x509/store/X509CrlStoreSelector.cs deleted file mode 100644 index c4b0062..0000000 --- a/bc-sharp-crypto/src/x509/store/X509CrlStoreSelector.cs +++ /dev/null @@ -1,283 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Asn1; -using Org.BouncyCastle.Asn1.X509; -using Org.BouncyCastle.Math; -using Org.BouncyCastle.Utilities; -using Org.BouncyCastle.Utilities.Date; -using Org.BouncyCastle.X509; -using Org.BouncyCastle.X509.Extension; - -namespace Org.BouncyCastle.X509.Store -{ - public class X509CrlStoreSelector - : IX509Selector - { - // TODO Missing criteria? - - private X509Certificate certificateChecking; - private DateTimeObject dateAndTime; - private ICollection issuers; - private BigInteger maxCrlNumber; - private BigInteger minCrlNumber; - - private IX509AttributeCertificate attrCertChecking; - private bool completeCrlEnabled; - private bool deltaCrlIndicatorEnabled; - private byte[] issuingDistributionPoint; - private bool issuingDistributionPointEnabled; - private BigInteger maxBaseCrlNumber; - - public X509CrlStoreSelector() - { - } - - public X509CrlStoreSelector( - X509CrlStoreSelector o) - { - this.certificateChecking = o.CertificateChecking; - this.dateAndTime = o.DateAndTime; - this.issuers = o.Issuers; - this.maxCrlNumber = o.MaxCrlNumber; - this.minCrlNumber = o.MinCrlNumber; - - this.deltaCrlIndicatorEnabled = o.DeltaCrlIndicatorEnabled; - this.completeCrlEnabled = o.CompleteCrlEnabled; - this.maxBaseCrlNumber = o.MaxBaseCrlNumber; - this.attrCertChecking = o.AttrCertChecking; - this.issuingDistributionPointEnabled = o.IssuingDistributionPointEnabled; - this.issuingDistributionPoint = o.IssuingDistributionPoint; - } - - public virtual object Clone() - { - return new X509CrlStoreSelector(this); - } - - public X509Certificate CertificateChecking - { - get { return certificateChecking; } - set { certificateChecking = value; } - } - - public DateTimeObject DateAndTime - { - get { return dateAndTime; } - set { dateAndTime = value; } - } - - /// - /// An ICollection of X509Name objects - /// - public ICollection Issuers - { - get { return Platform.CreateArrayList(issuers); } - set { issuers = Platform.CreateArrayList(value); } - } - - public BigInteger MaxCrlNumber - { - get { return maxCrlNumber; } - set { maxCrlNumber = value; } - } - - public BigInteger MinCrlNumber - { - get { return minCrlNumber; } - set { minCrlNumber = value; } - } - - /** - * The attribute certificate being checked. This is not a criterion. - * Rather, it is optional information that may help a {@link X509Store} find - * CRLs that would be relevant when checking revocation for the specified - * attribute certificate. If null is specified, then no such - * optional information is provided. - * - * @param attrCert the IX509AttributeCertificate being checked (or - * null) - * @see #getAttrCertificateChecking() - */ - public IX509AttributeCertificate AttrCertChecking - { - get { return attrCertChecking; } - set { this.attrCertChecking = value; } - } - - /** - * If true only complete CRLs are returned. Defaults to - * false. - * - * @return true if only complete CRLs are returned. - */ - public bool CompleteCrlEnabled - { - get { return completeCrlEnabled; } - set { this.completeCrlEnabled = value; } - } - - /** - * Returns if this selector must match CRLs with the delta CRL indicator - * extension set. Defaults to false. - * - * @return Returns true if only CRLs with the delta CRL - * indicator extension are selected. - */ - public bool DeltaCrlIndicatorEnabled - { - get { return deltaCrlIndicatorEnabled; } - set { this.deltaCrlIndicatorEnabled = value; } - } - - /** - * The issuing distribution point. - *

    - * The issuing distribution point extension is a CRL extension which - * identifies the scope and the distribution point of a CRL. The scope - * contains among others information about revocation reasons contained in - * the CRL. Delta CRLs and complete CRLs must have matching issuing - * distribution points.

    - *

    - * The byte array is cloned to protect against subsequent modifications.

    - *

    - * You must also enable or disable this criteria with - * {@link #setIssuingDistributionPointEnabled(bool)}.

    - * - * @param issuingDistributionPoint The issuing distribution point to set. - * This is the DER encoded OCTET STRING extension value. - * @see #getIssuingDistributionPoint() - */ - public byte[] IssuingDistributionPoint - { - get { return Arrays.Clone(issuingDistributionPoint); } - set { this.issuingDistributionPoint = Arrays.Clone(value); } - } - - /** - * Whether the issuing distribution point criteria should be applied. - * Defaults to false. - *

    - * You may also set the issuing distribution point criteria if not a missing - * issuing distribution point should be assumed.

    - * - * @return Returns if the issuing distribution point check is enabled. - */ - public bool IssuingDistributionPointEnabled - { - get { return issuingDistributionPointEnabled; } - set { this.issuingDistributionPointEnabled = value; } - } - - /** - * The maximum base CRL number. Defaults to null. - * - * @return Returns the maximum base CRL number. - * @see #setMaxBaseCRLNumber(BigInteger) - */ - public BigInteger MaxBaseCrlNumber - { - get { return maxBaseCrlNumber; } - set { this.maxBaseCrlNumber = value; } - } - - public virtual bool Match( - object obj) - { - X509Crl c = obj as X509Crl; - - if (c == null) - return false; - - if (dateAndTime != null) - { - DateTime dt = dateAndTime.Value; - DateTime tu = c.ThisUpdate; - DateTimeObject nu = c.NextUpdate; - - if (dt.CompareTo(tu) < 0 || nu == null || dt.CompareTo(nu.Value) >= 0) - return false; - } - - if (issuers != null) - { - X509Name i = c.IssuerDN; - - bool found = false; - - foreach (X509Name issuer in issuers) - { - if (issuer.Equivalent(i, true)) - { - found = true; - break; - } - } - - if (!found) - return false; - } - - if (maxCrlNumber != null || minCrlNumber != null) - { - Asn1OctetString extVal = c.GetExtensionValue(X509Extensions.CrlNumber); - if (extVal == null) - return false; - - BigInteger cn = CrlNumber.GetInstance( - X509ExtensionUtilities.FromExtensionValue(extVal)).PositiveValue; - - if (maxCrlNumber != null && cn.CompareTo(maxCrlNumber) > 0) - return false; - - if (minCrlNumber != null && cn.CompareTo(minCrlNumber) < 0) - return false; - } - - DerInteger dci = null; - try - { - Asn1OctetString bytes = c.GetExtensionValue(X509Extensions.DeltaCrlIndicator); - if (bytes != null) - { - dci = DerInteger.GetInstance(X509ExtensionUtilities.FromExtensionValue(bytes)); - } - } - catch (Exception) - { - return false; - } - - if (dci == null) - { - if (DeltaCrlIndicatorEnabled) - return false; - } - else - { - if (CompleteCrlEnabled) - return false; - - if (maxBaseCrlNumber != null && dci.PositiveValue.CompareTo(maxBaseCrlNumber) > 0) - return false; - } - - if (issuingDistributionPointEnabled) - { - Asn1OctetString idp = c.GetExtensionValue(X509Extensions.IssuingDistributionPoint); - if (issuingDistributionPoint == null) - { - if (idp != null) - return false; - } - else - { - if (!Arrays.AreEqual(idp.GetOctets(), issuingDistributionPoint)) - return false; - } - } - - return true; - } - } -} diff --git a/bc-sharp-crypto/src/x509/store/X509StoreException.cs b/bc-sharp-crypto/src/x509/store/X509StoreException.cs deleted file mode 100644 index ea7e51e..0000000 --- a/bc-sharp-crypto/src/x509/store/X509StoreException.cs +++ /dev/null @@ -1,28 +0,0 @@ -using System; - -namespace Org.BouncyCastle.X509.Store -{ -#if !(NETCF_1_0 || NETCF_2_0 || SILVERLIGHT || PORTABLE) - [Serializable] -#endif - public class X509StoreException - : Exception - { - public X509StoreException() - { - } - - public X509StoreException( - string message) - : base(message) - { - } - - public X509StoreException( - string message, - Exception e) - : base(message, e) - { - } - } -} diff --git a/bc-sharp-crypto/src/x509/store/X509StoreFactory.cs b/bc-sharp-crypto/src/x509/store/X509StoreFactory.cs deleted file mode 100644 index 96f22be..0000000 --- a/bc-sharp-crypto/src/x509/store/X509StoreFactory.cs +++ /dev/null @@ -1,62 +0,0 @@ -using System; -using System.Collections; - -using Org.BouncyCastle.Utilities; - -namespace Org.BouncyCastle.X509.Store -{ - public sealed class X509StoreFactory - { - private X509StoreFactory() - { - } - - public static IX509Store Create( - string type, - IX509StoreParameters parameters) - { - if (type == null) - throw new ArgumentNullException("type"); - - string[] parts = Platform.ToUpperInvariant(type).Split('/'); - - if (parts.Length < 2) - throw new ArgumentException("type"); - - if (parts[1] != "COLLECTION") - throw new NoSuchStoreException("X.509 store type '" + type + "' not available."); - - X509CollectionStoreParameters p = (X509CollectionStoreParameters) parameters; - ICollection coll = p.GetCollection(); - - switch (parts[0]) - { - case "ATTRIBUTECERTIFICATE": - checkCorrectType(coll, typeof(IX509AttributeCertificate)); - break; - case "CERTIFICATE": - checkCorrectType(coll, typeof(X509Certificate)); - break; - case "CERTIFICATEPAIR": - checkCorrectType(coll, typeof(X509CertificatePair)); - break; - case "CRL": - checkCorrectType(coll, typeof(X509Crl)); - break; - default: - throw new NoSuchStoreException("X.509 store type '" + type + "' not available."); - } - - return new X509CollectionStore(coll); - } - - private static void checkCorrectType(ICollection coll, Type t) - { - foreach (object o in coll) - { - if (!t.IsInstanceOfType(o)) - throw new InvalidCastException("Can't cast object to type: " + t.FullName); - } - } - } -} diff --git a/bin/x64/Debug/CSR.pem b/bin/x64/Debug/CSR.pem deleted file mode 100644 index 22d8ed7..0000000 --- a/bin/x64/Debug/CSR.pem +++ /dev/null @@ -1,10 +0,0 @@ ------BEGIN CERTIFICATE REQUEST----- -MIIBXTCCAQMCAQAwWjELMAkGA1UEBhMCUlMxFjAUBgNVBAsMDURpZ2l0YWwgTG9n -aWMxGjAYBgNVBAMMEUFsZWtzYW5kYXIgS3JzdGljMRcwFQYDVQQDDA50ZWw6MDYx -MTY2NjQxMDBWMBAGByqGSM49AgEGBSuBBAAKA0IABIE9b5i2aX/jH9yx7NblS1ll -3DQ2egOZXZ/O7ss5tIZuWYcM/D8/oDtPNfMBqRvm3btzxPlDHG1YXi9RvHicLT6g -SjBIBgkqhkiG9w0BCQ4xOzA5MCcGA1UdEQQgMB6BHGFsZWtzYW5kYXIua3JzdGlj -QGQtbG9naWMucnMwDgYDVR0PAQH/BAQDAgbAMAoGCCqGSM49BAMCA0gAMEUCIQCv -qVVnxy93fcGcXpGXh9sdrt/IbDYn4mNg8PZUDrwgSgIgMJ0XWTvpJ9jqznJv+ISP -0/Q96+ZKSkfJegUFPCSP55k= ------END CERTIFICATE REQUEST----- diff --git a/bin/x64/Debug/certificate.pem b/bin/x64/Debug/certificate.pem deleted file mode 100644 index 62b6459..0000000 --- a/bin/x64/Debug/certificate.pem +++ /dev/null @@ -1,17 +0,0 @@ ------BEGIN CERTIFICATE----- -MIICxzCCAk2gAwIBAgIEO5rKGDAKBggqhkjOPQQDAzCBkzELMAkGA1UEBhMCUlMx -GzAZBgNVBAoMEkRpZ2l0YWwgTG9naWMgTHRkLjEYMBYGA1UECwwPd3d3LmQtbG9n -aWMuY29tMScwJQYJKoZIhvcNAQkBFhhjZXJ0aWZpY2F0ZXNAZC1sb2dpYy5jb20x -JDAiBgNVBAMMG0RpZ2l0YWwgTG9naWMgVGVzdCBFQ0MgQ0EgMTAeFw0yMDAxMTcx -MjIzNTVaFw0yMDA0MTgxMjIzNTVaMFsxCzAJBgNVBAYTAlJTMRcwFQYDVQQLDA5F -bGVjdHJvbHV4MTIzNDEaMBgGA1UEAwwRQWxla3NhbmRhciBLcnN0aWMxFzAVBgNV -BAMMDnRlbDowNjExNjY2NDEwMFYwEAYHKoZIzj0CAQYFK4EEAAoDQgAEsGsILb3o -l8d2eHhDB9vWFHLz38EkH/EyE2aRwVhSFCACBkb7MgDQYr95uhlt0P75BbUbyo3w -iLXT+PFEXSNHfKOByDCBxTAJBgNVHRMEAjAAMB0GA1UdDgQWBBRyEju+aiwW3xko -EUdjrFnMNjWcqzA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vY2EuZC1sb2dpYy5j -b20vY3JsL0RMb2dpY1Rlc3RFY2NDQTEuY3JsMB8GA1UdIwQYMBaAFPVfJJk0nYgF -6zxxLuaoYrWlenE9MCcGA1UdEQQgMB6BHGFsZWtzYW5kYXIua3JzdGljQGQtbG9n -aWMucnMwDgYDVR0PAQH/BAQDAgbAMAoGCCqGSM49BAMDA2gAMGUCMH33zk9xAMkc -6CInopfG2shjqHLvaAZE6cm9G3xwWhQieexrddNTD4X/KBUBjSNcggIxAIqbYE1E -3oh4gHzzkhSM12dG12e4eO2v8XWhB738CIOWczOGtWRZ7Q+qaaOs/O827w== ------END CERTIFICATE----- diff --git a/bin/x64/Debug/ufr-signer.exe b/bin/x64/Debug/ufr-signer.exe deleted file mode 100644 index d9a9367a4a2b6f3535510990d6f3e3e24993b13c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 2444288 zcmeFad7NBDxi?;O&gs+J^kmNTO!sV=o&Xb0(lbd2h!fU;A}A<3&IEykfRHF0=uS}6 z^bp(-g+V9jpDsQb&>e&-YxnV4x)2m;`!*CQ6NAPXyg!*)HL>(Lip!LgMOq* z-Az40Fhs9iR;$<6BSL5cjZ*RF;F{~ zFnTu`+oFprEQJxtg|W0KDYnbfK!U zOPO~Vc~M;et>^kk~C zpu6f>^$H1eZ6D>j2EE{4hJ5G?p6cuJ(H?HjE$y^Hdq!FPC%c7e(Mn&t4%Ix_Iw|eH z8~{=S(w0?+hj}gAN%c5AslKkBbWg^=EP*GhdR##?(Bm3RJ#H&1;BwT#zy;oUDpfkw z=|345PfGch8$_%~Nja(K8dBoKs4{IhPKj{Lwc$86i9-@waP)x=^eynwcARY+9`?5~ ze^t5C9$l)4^t7b=uN2JEWcjK}FGW3UwF>DOrrXjE<4`ebrxiBDxId0|u!BWx4Qt9S zRlCZryKTb`|J6Viw~MU~+#{ah7CaimRS|~&2_08QSlGrXbv)?EvOcAJsoU;9S@?QV zUzc-IpXI+nH~>K_WG5FX+qAEf30d3%r`)1bRh~mW^{6M&A95kyQlV6IO2t%v(KV6; zp_wSAPxjKg`#qVG){`ww6f>uK8U1^zWt$Q`x6kfLoz&+**7{N!)W0^QwwU#@tIh%e zyO5j}%8PDK%5!ujdR#BnR-N4=2T9LeI5T$U;F|Kx!_otbIWITaJ?^XpH}liKVWS$D zhnE#Hqsy|HL4m7wm5SY7cMN(T`5vJ&$O>K|hPWLNo)dvYCH8ndlUY+@^$IT)l~;`3 zLs*u&z*`W5pAAI(rH#{ z`}kIb&yingpPV~cP)_+Y8)>JN^VN$Tyi~3@=QQW|VWTgRv6Qc#?i@dIP}(^jWrMru z7b}%>JOqECvhCw7&)Gia9KXYJX4h0I=bXFtG_+uOmPD3zTE&!?n)$Bo>S|v9^wNwVD!r`x)fv z5nPfHV^^u*rYFiX`R$bzT6A5{oy^zX3(nQih`B9p+K*87*?o@x&uBb!{$koow*Y!h zF_re5nY=-$MZB2tGA&@~?%iTU2Wd)h}(Oh)h+fyaC?{TWBFA!xAZYfQD*sP)m{cP&39mAw@S@->c_wEQJ(~O^Ih^f z#n*SovG0*r*aNvH+T5}FoA1+)_wylLwD|#f{XMaNP$$B6ax8y2sX*UCq^p*WVBA;- zafDIBaiey)r7kJDrDD2V%&6LWggjSzU=bqb--bMkmEVs?z65~z{9@&ym5XUL4+NP> zh}Y0ghfNK!n7YTyNR#JlF99Mgndu$f>9O;66w;O6^Byibnabd~*-G!ZYdvReK0OYh zP3=q-Aq=Y^u^@BdwJ@W)CQ7wFTU~O;M0wD8wf!YSK^g7%3zR11)E;ue%Jx}(wqJ@sDS9voDe?(s4fzB?T=iD+N#l&UbwO$`xwY_Vx#hcmGpbZNWW45bWHm{q3=BU_lXlYZ-yrl_n=t?M`5KD@UGl4LH)}KZBh8 zwQ#oAaJIUS@^YHxEeS5BCnDpN_+oaxYB*e^FnbY?p}bg8&AUYi1yoZhXZd$T?CbOTCS5iCQj}53k8@sF$kG;sK7v_W7UhS*YN*@8 z&^WqgXy)OWhl}ajpTMwUzIJ&AkM7!2d=zT0%;M2gOXcubQ0va)(F;>bW)y>GdX665 z2D|}S7m4Wdj7}(drO9qp>qR~-F{%ue36+WhQGIQuQ}>p<+$~;r8``p0#z1s-l-cVR z(JXncm+>59_TdfKGG3uA^Po3~%+LN_A|PB$zS!tehkO#q%OzkCU@K+3UjGoZJ;opK05%e%vSaIa+#)>5?zqM8 z)R~J#)0>O^iS9h&jkI<%C^Aa9SM-YL&|ZI{M~`}=t+2cF=!M?GR)|cxL@LvM5J~2k zH`WSc`4Drcu=#bxN_*EH_r~|SYgcyHwHJAdCeZ=VN#d@(kGId$b#2Q>SA-{~>_fGR zWx21n@1zYY-|}ILNX&lTevE;8!iQY~V*|w;b%O5W-FQ$ntj0eme9;GZsDH)3)1er0 z=$q?IJoN_g?Gc~bQ-s)mjgL^ftp<|dDE=I+(djfW zX}4*2?>4RW1ZrV5KGgysHeZPSJxH3nH9;FyY^iKDJ|5<&e-Un%`nUMAa|wRjDU9FG zB5k!_0y`QYEfX}@E|t~zsrO7`1hpE1`7Ldj%b9j0hGAOg*H-{}p@vD`B}EL-OED~^ zG^XI$D3P->P6w7^x;U2^fXOSRSPc?g??c{t6?y9WECY$(@+p0`3}!j20m*gHgngyC zFWRUwf9ll{6ySOeyK1Vw#YG5XbI{;R#xBxc^OfageALB-MV9s!1eYTb$~$-&&=<3{ z6G$p%zy+Ad2yW8B+S~E;j{(UXq-!5TD0mJ-yM{+%`~sjTJ5{GwX2+8HD9DS*Ma%37%==O6H(_R9;);#dx|N5Q}a%2KX&4=X(c z-sk(fYda7~2almStOn;RqTPcRz=+XsBY>;lG7M4aFIZM4>q-tEIvA}sKT>osC+|>U zZ6-!`;z=i~5p8Sc)Pta9khHYfeB!QoTAQz!4~L2FbYH5^?MwG%`m%jF+WDAd!vZst z0!l@Tfo6FrzXw*MOv~WOnLmzZLT?A+Aw#hyM$12)CiWJP&t1}{Db;+XTBvQSl)Cw? zT2+p~|Jw__Ii%}dhIg=3=%=ldD#={0Hjj3&{ohffvk4Qom=f%lZVMY2gSS$iXkW~&r4j3wCz<*RdnfO zjkj&^vfDPG=VN4^#MHBxn%)YoC@)*`Quu${hR~WAJBw)hz5dB{s#F~CGGk}$D3(ga za`k8^46nSsILL=_H;j3uS$Kce?>Hq9=?$z!c+e}+FSKK#I9MD|UKz7sm}4vo0|d;Y zDNMH++9-bIji3!C&#GULDv6QFLvf5C5}qwClxJ~NKSoISSjijFl&2y6-k3M?aDU0K zB^XrkDs2p^&MI%ADRqV8Ev%*@gx+WZqhRyv30yQNTA7UuBQwQOZ=p8=`hb_(6(+;f zEfDw3iL5jkTC=L^3ME8K^E}+=fbf?ka?oCA%i+O`4^`}Vg~8eFW9RavJiC1@O*mcSV`iT>oN`twmtuJ#-Bl)NQtNRZcRMP<@%T8xPRpt;~g{+xuL z#VT8#DP%1O1Ll)c-^qx-(|9qpeeiPh$r0in$A3zyMc*EDo$j2Ni}Zt9tMNgq#*=|` z6Ugi;W-9$Y1~c?kFH?JI4~C6XkcP3Pb{PU*R*&7M>bP=nntt(5$1^yCf%*&aOV3Pw zhA%SuNY2>gF{4brb`KKtNHxp+YnUIS)gcQ|tR9K-dL$B{p>q99qI5adVSOqcyoecK z6S*a_ zwJgQU1nclDk~GYQ&SjjMr{?G6Xgz~JKn9@*u;(G7kPXhqqqdO+yclmX-dA8hUVuRT zLdL)e6KvoM)S{llnM~J2nVImkGm-;L zK){~9+T9)km*_w_xYWc}`w$DA17nV_nov$$3nl_Ogl(MG$(tlp&DV|xur9e=EI;-J z)V?^Vyul7*9@Ovr#VQLsf|_$OoeiK{KoJcPs!cSIW7>trMv)V*@+T3v49wH-_ie0Psuv3+*GqGyWHN zNu&RQkMc)5=dFl?I-zaBF}A-DvukpJZtcrJfcV18;$<3AwJX7-R#(jQ8Wy4wL!MuO5W?xu@u{v;~{qN0w|*36$sV0FeMCefF;AW8FJVS^0h~!Cd&p5 zfCrZo4Si7=FCBu?xJiQg;{dAJMM%jafB3!;&jpq{6ZJHIW zMw6LtV?d{6kxNXsX;-ws?lRq`<!c6DaKr*)zA)$N)rf7GeEQ% zT7a~x5jMmCY&7Eli+ql?eNpe)75FJtR)^lpGm545NjzORd*z=iE3ed{>$J|?>C<@{ zr`%E%`s5%r>f4a{5y%_Hg~%tz_+^Nz<6jl;{Nw%xzM~&ty?ionHDKPbd!m0~iqL~m ziV<3iVol3$LJ~0J=XzZ^BPh_>>T`%~ei(pO{R+NvHfz&IdMPH7FmU2*K) z@$1K9fKSA)pNs)M6~}%$j{Qs=dk%zYa&8^@P|tKvWn6X#2U*ToU#;OaPF?R4J`39G*zQ2|sWX&_U^L654;w$Q-% z+9L@X1n}9Up}&O&#+O4HB-d{fG?3Bd;2K>P1C?^+MJ)v}vi8SBK>~F`rO;9eBL~A$ zB#Yf2*OYA-mBIi@X||NY$l4-iF)S6R7q^wd$f2+l$+A3A3dKXSYD)`l#@EhD;1<9R ztYZ9dh+cACl|WCCiz>lDr9A#NG)zlbjIZ69C`$lOZL0?(N5X<6%ZC#MQJ|$B zXHxCK1bTt(P!-0Hh9yX@pCw9QKhY&T-d+NeYWabM(P5aVn0L_q?0N?Sn^nGH*l zJXa=4qVCX4ySE)blWK2G;1}2qOk;c{7ZxGeK9wkfIw`6Q1C;^Lm{dKCtUa74NubVe ztBFMB!(t@QIjTHVs=twRZP%nQ)xVw*H^dRp9TP2t364X7Bh(#?7(bD! zuvJMhzETJYlWfmrHZ8ND;NI2vIq9hSjVR5(Ns27{Z<6Qu_knNxNc@Q2^Z!X=>GgoC zkf?%xPR6j-tubtc))+Q_YYb(sHHPxu8pE#E8pH108bg)R8bfW?8bkHj8bh_+8pGkD zHHJf?iK%@KyyN~i2u+!rIPk1J9P<;S+3g(7-hveW7D-0b+rk0Pzg412+(&?%Td;&#p64X zDZp@=tG@$3`Se!8Y3O*r9@dS4ry_XnMS6}K2KQ0cRt8XxP9K-_&qe7L*EvAZ8Fet) zr3W&%sSjmtCCJhgYUGo&&UaG2;ZR$!0%7^Bzl2| z%%}YJMLzp8}3~pu(bVK8^W@o}6PUGW8Mcql6bKwG@ri3kXQ%qSY$J zHlyzeHX(LOpnUkM3*42Ky*Vt{l;D%yo?L}yek5hy%PDss;Ga&`G>+TBia8#96KPzE#-I7C&;;0lz$6Wkv1KR zs@E|Pm<`TcUp&4`sY${mvFb`5my8Ocg0#{I-UaP7IR<4w6=RqYR|tI?-LRB@?AM?p z!75j40aPj^Xkj*wLu`RuqUzNM7E9}ihq=N$}75qV&-PI9$ z6C+_lfNPGc#gi=}LlpHZ%Z2<#?f-5hhI)x*K_?IfWo;gf&_l9WrRoC9-o#k{eh?^i zN(@fHFdC$Z?&>U^ixq#Y{pw#s57g->gMIxWJeO-)m~HcS5*-^oslmuij0_$|R;+Q- z6CjayBN7XFq9KeT8dvFdMdYds)DQ|VdIznl^&|DpLm5$HddGRTdLXhVR3JB#4yml? zKs^*4Novt#P>XEo2qS!FQ=iEe!Dg=;f@e~2fCu!2{qq3nGp+rzKk7h<{>e!6PgdHMU(uMI z`X@nxzpsBj0@}6Cp)9Tgo&1Y>rR-s`YZGO&veCpqg{{2@Ae@Z-qQr6^N;39K5_@VJ z?3WQ6@?#Uq!Z?L>t@l8?g z;JKZvbu3TRx`{eb`o-qq}|~Cpb=Y!5*TD3 z&pjdawz$L(hj2oF=KTM*Az-)a0Vlng!>`ukbZ>LZ-lgDf9m7O!iPa`a8V?LWK=eT%%G9r?ai3lq?rj|z)wcW7;<+Zm^TWNt z^9)1J2@ySS*7V#O;nDQm-kBbrGx~R1@eCMRL(jqTwShtK;)CRc6@0c26-!U{))pdC zr+i3KHs6Aylv)EkUs;6VYXB70%GTIzsSo5XA*ffc#(dbMRXqqW+?;n zj$&@^ran-Slk$*x10mu9-RVDDEbR5BFs{YSqA-TJ(h}?gcr0Ic2m7*wLa!qB#O*uSmuo~qsTr-udDn%^Z78Eo`yBuTLvt_2yEhcKJ{JMK!TMieEZ3!G?({{hLxMnVgjmgpt3Xx} zTN#3v;{}gb=*JfQXz0h~c+?+V3P|i`sNc_*QB}p398FC90Ucv%S^ousLd~XUK@k)e z&Rt4L8BGv~otxgm;C&R=mry+2>93K;n{PL4#|DX2ZzoT!O^hmH`$KRah#+r$&&PsV zg17qyk02@7k^v%YU)Z)mb8wp1w$2j7PK4&uQg7+h zw@ncV&MuxipPXHsAbfvse{Ukm*=nhFADS7~INDkE64XB|YEF;&DcQIAO!j{#cm*iT zIl;kra8nNKylOvGY-Wb%9LuvA5=R3sliuk-U;kLnMqL3eOf$b7yb1gg@(|Fr_sn)ohiKHi=g>gor=l%=guZQEz0nlatZe;Yo&OY`{{4`+# zV`b+*#Yk9yl%+IawnOt3c(hmS+t-5@_?2jD6B_CXrpqQ(eW8iKT=4Gn{l)9v7+K#1X8)cOG8Ym%tddgH6YHy)zK^ww@Nhz)?k`;zcXRrj|9$`;ce zh8E7tbOc222%A9$<3kZ9*OUC>VQEqHIIudHj33BbwqD5&wczf5$ZQ`jP!W? z+xTy;P zvX#wFzhVPrgDtkdFWRyRo#HHgWgIIWJM2+~da7eX({2H#S^;PiYy194k%h1On1HqlubTmtwU=M|96BGiGumP+eP zvf}H6Rr5udSZ@G)MoztGCn^|Pd!z+NK{lU2SSIIGRwJ1KeoBov8Yzz3HjJ%7a4q6z zi)qVCSF$S|FI}}N*=x5!1e%yd;%IcHx&$@jJ2o2N5W?7*+sC(}%G_$my@cmr`x8_) zGzv`=FRkahkjtsBsA?7_lHdX51K2ZM`x(f@&Ij0SIZgXgv)6NhT5+T*Qr46@RlW01 zYCy|f7thA3XKDVDU&312+~oU0iTANKkP9;89XLh#W%^{8zM#trzR+N^$>JIL6$?htoK`LBk-UsPqpWR0voSYhPm6Ega!XiYvo<|(WA^iu{*Vv zy_2W5#%m|WdH&Lx=Vs3g8sh%8rM(D`?F)d1b-qb`riythyyZD*%TaqZo@$y zCe#1gmd-iza}xQ5+;_)7VZTel2pc-U9Gk%Ne@H90lef{Dgz19oIay!&5l#P=x;#Z3 z^tAi02iG(t>Det@LK#p#Fy`}Kkcc;euOImIs7dE$Tn^)f;Mlnt*8RB&98#}syYgoj znCn_$7J-)MX*}#{lYP3!1$RSYH=)~)U~~+5!SU@Tz#lL0wW}dat;&M~o73N2-3-O6 z`~F?vbV1ZMc9dp=Pap_aeFeQAF4){A+9pMe8xA&{aaqA=btGf)E;sevd2Bh}j46^H zsL;p5-Gxr~d@m2y!gRjG%hYe9^y=}0K09@on!HflE}*ue&U=-L#*&i|bAqlf_1a{? zYVaAH12(fSx|7Sneu-KuEy6lwvD5ger>^L(;;2THBug{hRcFBXGqhgNwn6PrpetC| zrWYvlCcQAyA^lBAf4No&~>^I8-)YL0Kj6LA+^l@#4vb#TMe1Ybl$S8Hg z&~m%K+G~VX1o4fLkcF~(Vj|B@r26MZT_@5x$v&9qqEaq|K%wm-zpw+h@c!Cw%VCRN zVTVSuroz=7=v@#ZX&vnc1P$tBp#v^T7ni?$66rLR9)biw7sK+Bg$b$HyOGv>7zsG5 z#&nD$kc71Be~OuYU^SSg?O*yDc)!j;t7J(OW3Hpl$9(z}mL-0n+}r_OI5_Lp7O~ym z4-8h2hjav=#%o%8RNUIhaU$0w19M>)U9v%ORQhEt4EbP_av|)K?Q*Cs5-irO`U*yPD4{acdoain z=-Hs65o5LoQ}?cgrkabRiwO9}1mMX49Ebq9 zy)yxLeF6}Q9UKxJ&gNh2*6Lv;QJuH3>JpD`v;;oN-NDwb3Ul#{I-S=#SJ+VSs2po>ux6X1{*Y%3($iL_uV7Qajqb)2K# z0(_^k?q$%^N5GLA_a0&Es+-r2%kFf5g)BEy;>y~K zz$W-e8R5evh1K2QGQ4m4a2H6IZWCONFlT8rr(u0}jiHzkZK!cB`V!E2n$RiMh^<%u zDI!{#IdJr!V1;y$oIF)!8vhK^9Ig<#7x0DZe(q$i_RMTP3PJ$suJ)wGyAg&(*PR{t z)$QgEDo3XY|2w?l92;P3fNAmG3p?11GPO~IIfV|^Q(&Crh1=pXoesq+=?v<0BIVkz z>>qe5o~H}y{#-wH%(7r$g}Sbyi5QY)OX+m}e{kqABSOA*0a=C}RPGi)5-Gba**Rsx zZ8`H~4ks&U)%VAF-E_SU+I)^mMR&eW4jRa25-+Vi&OEFd`kb$Rz3NNOA28}Z_Q;!EUzG7A#u z$LR0r7_;#*5msYJdYRr6d6_8p`=RVJS@zsF0Ui06dXj{OPNtT&w?)`Z+iTyGmWj~! z1aDF_ztHL0ehkwOj?zQl6ST_T<9qrJ2#4gO(Z%<~Am-1)xKfim5Z@D{TYXO*0BKN} zCWw4b?Obf}J+WPl?Kf?C}qpQ{Tv|LBf_f-1>y0@3F-$doGXW!FVTGEn@q)qi6S-_*%U=rR(w(W}0uSR-MIPPW=P-{Iw)bHG z5OImpTjk;KD4p`~0hGD+?~{k`f^sbnd6eE{P*sPl245lxfRDu_;plf~FCi?lNz7Z) z^NV9IA-#gDKqz84hr`f53f*IzfY>@>^yqpu{g!y%wgh!qx7&6gU)tIM@Z`ZO@H`j! z627nRu`(EqHc+E)M$YENnSBfpH2inVEjC#>L@gR zT6>w^rbp_qJ`2YgYuNAzYt)U1;HC~7I0t=9$>P8 zjPRo%UDU&I8h%`gvlr= z%A+!*sJr?sGxZ@wIOwM7No#r>I~&|U0ieTAPc&#Q;p8ReU-MH~B_NS`xFm$gf1Mx5 zbn@VEHv={+iL6>U?RVl!G>z;Vregp$w9)zpbl(W&$oL+lm0m)g;2-VJaJ)ADKWYj|V*CiwO}ylj&P2api@#6H zsliXJAv=O&{FdAUdm-zau=(KI7;m%r;M-s^t`;TsKjA_w>&p`DN^>qOgZ_w5+e&R< zdaFO;l<{a@e+*dN>W@gc94H^Hlm1u6IgdqR2ZzE(Vu<5*$)4~Tynu-WOO_D4N~+QKyJ0)0M3D_kDD$U>0RwNfQw*NKi2(Q z{04NDQM%<)zJB-(o(!uR&R4O?H{m_VXEFU3?*X?rgx&-A30B?O1=J=^Jf_7Kr$P5_ zoCf*1x3xG8Cd6s*AbaE^_^Dq-AxyZB)bvvxy!n7`Nh7Qqba@murC0G4bM zH4T>x5xgTpK=;D9xEE+b`%mps`;eWtVW8{KhlS-r02Qf+?gcV@tu&j)7R>|Y5CxJ(f_AQmF zi*U~LnX0Aif_HvHTrttENzG=sC<&}mTRXhja}#Ubd*q38~{ zFF-ZUklFczyvGAFlOrUof4Gyo3Q# zgl(aba?fb(&e^i;!N=A%*&z?Fu<^Bh12=yd=P+%p=b{|=Bv6hPlS_aXo>p-IU}ix_ zhpZ}!s5lry@?2KL;ddW0m`xZ>iFHn`uNSDwGHpB65{BGk(1w=f&!Cv*6L??xp7uni ziAHpApU&g$prrRk(EC!&7lOfQA_EKtmn*EfcTx_e2F97dxiQgnSJy?$8}z|z*E_Fr zt}f$BMk+obz;U@~;vN8~9Bt^HUxc9?i+Bq-K^&m@vncLQv>Q3bQI4LSz#U148C*gbV@C=4 z8)+W2*ijbm6Ekb3jfh6t+29K9khIiOkmrk7PV4wI2gwjUWcj#dvPGx4wU5M!XCbk} z5cJa+f>udVC0a2Z-5F3)$gbiIiLhH@|1d;fcX>3`s#BTj)`s^n6oqO6Fw)EQS{BVP z(e!B3NYir=`7h*#RVH!bC)PeRa41^&^mD`RAc{lXfZlN z`xYcV@-18#Chx|#upvrke?0@ep(c3YCIESPy_M;Mki0GSp7%NZ1Oz91O$@@+F*@=z$UdhIfSd_4BgbEKxXGgsZfBwRn$QDzw}P|>u6X@taK5!nY&d@GRfye< zAA`M)o08{wnbI!1ow$Ql?{+#DOajzlR)Z2cg+mqM?y2Jb)B3Bhcc|!Eut(QxC|rLJ z+iwf+(J5#jh)kj7d{`Gcg;H0jdk*h%9|W=T{;bwLQFZdaqhE?`+2#*9x>kcC(0(a) z6-;i}j&DFIn?weKm#~59uE!`?*YnnH^q@!`7OJa~MlGhKv~{>92K6YK3+*K?zh1?A zX2dW%kuz6X&tm9&Hkz`swc_>s3^x0Ky&32Ltm1PVqF42p4e^|?03@4*&QkDF63T%C zakOvZwDK-#eSo=4@+H^Qb!O&$2GU=)YyDw&+EO<&HcWCtOT!&*VK;LALL-IS%9_8` zJmq-E@%Sjg*4c^0e+GI8JHtPRhu*Go85mdF0x^(%La54#CT9)1aO1f=#uc9% zH`tbXx2SB?@Fn}36WQU5*K1B}YM_Iu6Sm1P^usGi``qt9l_kibCg3Z29}wiH{~L9i zyPmg7N)pUNBz;VhAf3?WQIhsB-6Kg~V$yt+6fTT?O%gHXRdYD2Z&1oA4v>Cd5;+-} zdm>JxX@)EMe$K>dZSJIqNYNum`AQ0ewW90YSARp=!`71^~+6Fl~(IIl0k`Tspf`+1fF75u z(HlEO-pj}f+aQ0_DRS|WR!H_cT|@E2&PiD6kqAo_5@De}5f;J|VQH^KSXw0!mIg_L zr7aR+X@*2tc#sH7O?8-xHa_c;o1;dlv2VC=t8KxkV0cHZ8^h%_9J@=pGMa>=3Xb8r zH5_|TrZS#{qc)D=3L1``DvK`>B+8{?j^S{ONeE;|!w#R-2}n6_x-WD&{Oj~Hd>g&P zk^?+;{TmpB%JN(PEQUNi;&P0CCg3j@c>gYF)?TeFt>8W=PK-(YVfYIO%Se~6W-Zx) z7uwOb_)wZMp0Vw%U@g=!@>Wq$Q@BFvW0vS@Yap-s+?efOjb*1CZ}-E%371RRN!1r{ z?dPQkz@wFClnL}WdS|JdF5z@6=BGqcuKGtYsc-%VXj*zOst||3+t7~E zHchZO!(A)f+zbZc67dT`T+PYJ{IcOo3z z-6`@DZ8<+BVXezYJL!#!M_P=^t>~1E+<+yE0xtC=bl_IIT5(z z4@;f@2Xtd8&2ON?H2=uJeBWYKgB^NF?Ku3H`dJO8+5Y7O`%k>;%2^G*2mh++)V`LC z>KzRCirD-%k=YYs_xrC$Zqw+r4ThpLt3f(!r~Z1hs{e)1rX~0csKDN&jY!Pv?ZtaunzLXIN0`h;rQ5MlDOd#z{xu*%X0?xm z^)uS;?LVrk>;P-oXMo|DCtkkHs1s3x)(&cnn)v43)CUc4cD72wGYaKpO*7}mZb}N z1`)}c8n1l8eIy8rU8vWYp4|?=Duma7oOetB?t+YH7c@hWI z3D*tW&(UzKs1({3Pu`e#SJvHM-H!J#;0b|^? z0JF&G(1+7<=)+ur!n>+vevcXG)Pq^9DPk6>7ZyP;^%9go%UO+^BWcs=lVLi~OT38! za~FimoYnZJDBSt1#w`>jz4vV`@SrSxRwJ1YI&egv)d(0ZPD<_Sj*e->#mX^_5q(TU zs7Zk96B^_>>-3rgZ!fOYecC|2!6V-ayigi%6h865Anlgx(H`zJ#TL zw*X7FzLi@k+~oeq+dy^u_JHL6NUdKFRVy!2J=6^$-^@C!5JDP~d@G@j#*ZEodU(h@ z%8Mi8!Bq)9h>|#zF#6!-wOACE!(0PO4s-DcW_>5ToY9Fc9?uLA2zX8cVGp~Tm>QskRNU_+{hjJZP?!qMjftZ z9a`72edJH>U&LBAS?p?w*!^0zv;!vgdM$g-sxO8Qrui3SjV+UVFt{|~PjHsL7?w#C zvKj;n79oRLN{fOZw!S9jvoZ(++(g0>)YozZUyzgtTw5uhZ;QMQdMo&1r^qi!BzQpE z;dyw{ZIfbL-E}3pp&kmBuyYG_zGz^@xlEFpkHyhDzA+d zTp31{q3zWdK`!8yi+51-OT^WB6X1pHpd725D7pC9UBY&`BbY-n9Fk>|p3zz*GG@eJ zF;Ln1LilXsSMLsH#7e|o18^ICyR4^}TukV!B#bIe>s*2iVQ$4m$-!+L*Fp}N}mkr$z*vE#|m0kw4| zq(^V#rvEYc0Si*#c}msJC(l!LxlSW=Cx1M0C)1r5?|{OXtZl=?)S|OgFZDl9WuEYI z?N4UkJRWq*907gP0c#_>-eN$^INJ4Y{eB1;E(>fh-gHhIuet%O2H%5kYlbBHrra0E z-o;jI>vYcvqoZ!fR!RcOEdq%yDrvB#d2NG<4*Tb&VgLMc-0{Nxsne_m>lgOVuf$+7 zo&iR|H_HC0B`mV?b**s!6?6Q)jE2Ne?i^hYSI=^{!- znJ8p62xj^zX!u*_!o+Ci!ao)%VqcfY;HMI1U)Mk~7yfyt$X~YQ{I^yhJ^lTSL{j!o z0-f>)+0UZ{?^wlI_vQtJ#TKg(Ge2CV642*z!5}O*frh@*&_uuV!rwMduS=BIM#zj>5DU9C_ zKmmoP?ezwlZhWUbb;JJUAe#b!0)tDxZTEh7#uf2T5oenTa^x7SK zh4Qy&P|I%MyuZ`r58iPk)M@eu@7R>(H2H&f9Qbsa{K0z<-}!@gmRf%SNs;pH1}V}J ze1j-J&Mfr_OYx4r#2Ag12*>En185B~%`rx&ONHrc0c{Cclb(J?6FaOois44E7Yi5( znJi%s6b5%oXbUHSgynpMu!jgND?`{v1(u;CEJtv{_6RI1OIVnXz{^k)mW#)PeG)Do zOSlGD{SrI_>Xc0q8Rp^t_a}yC`(R7QUgQc6HQ-m<*NnVkk7>3<%4=`cgSL(c!;y5ouiM+vIq9K-aPqo*$MJQ(XZVi8?PNzJ zKj&x}Ab8w%3?+D`%WV*ik4cCgb`N1wG9>7+rls4=z_OT5uu?qjOOC@gvg~NimDJ~0 zg^BbzPXJ@Vg)~u_^SO&MC(Id^P&irAPdBJS6oM&GX!@TLD+93;$wg#F5zz_|Z!dFXu98dnWC8G%zkYD}GVh0}ICA%FI`CiiT1AH&* z_cGrH_4^RthxGd>-?2S~c*giXqTk2)KC0jM;rl}Uz8~Mm^!xsNujuzBd>_~ERlYC6 zyR;>J<)*#`B#3N;ZEXCHtVetfMC5_@#7q4m9LuzPv7QEpUOPYwqwOm@ck=V>y|pO} z=C$)VqJK!{sT7sD`=kmb#q9`e+O7$#(yA>nmI`!O1p zJdg1)WbloGM@PmmQ@B9{C%XwCJK;=yb-#F?hGU!g%UjB2NZK;$Lxx7SX(t*PAJJ&) z%r=i{WGKNGqn{}YF$_Zq7*kiuNDRZ!u61RssViT1t*em_%2+4)V0=XXO`0#1!MI$8 z612TZ!%#M37?D)!ZCgFlQM`v9@+5a)iy;Wboi24xk0HrwP*UBw_re_VSAyHn2QciJ z{FKdP3g>|KEmNJJ0JVX3!j?dt1R>R10&&}7%D`#st$X?&AfVFs3@rS~+F0wJzLQD7 zP9de@;E8f$RviM>ZO7zts-X$x3336ALeVn>&kcY7oH0?M5ZYeIXFxpu%hh6xD+Qr`hp z0b47Yt)GWAP#iZ@;F{6pur9@(6iblCxkYEUJxOg>%z0QBNynajLo0=Uv@P%liPJ^3_% z7qOOHpE1(3+*>Ztyq7|8uPzk1rG~l=Jq_EJNHs2{JM_KSx`aQ@!D)NRcx6rIEL+oG zb!fPVIucuoFwdh7vS^>(jlx=Q9^=^A2N+hep(wLXkLbD&FLy8f2L zo23lxrzZXT+N~#ic(KL;%hjhd_>BXpV&d9=|3e&a_5pX~%t{?){xfkJJ8S{kmx%(_ zU7eLxJ1%=NQq)PIx=6de;q|uR@BWdfO4wHTCULlEXSPazXE(lWO_bRqT~$*vp`B~- z4u0WvXj2K7xi$aNXu1!(Q|hoU>k!%`@WImm%Q#7m`Q~uVU){`feJ;nXT?JfnA_rIe zd=>9HU+ouo6<1Z5_UjlKZ@`B z>-T5z-PiBWk<~^40OZ7Vxp4(ie-;d$@68-*szEA1*%qba4jJL+7Ao(#2Lk5O&YWU4+#rzfc^&xVHg4oZJ0M>NP3I(!_DK+KuKrT6*7X7{~QKrp_~dyXIQKClp7q&KIpo^aeU%y z^f;e!7xmrBVR)HJ2&V-!)ajxJ%aL0NGYG16wi!#HT|%qkIYgE#;YJ9Zrj3d2>SDNv zFvZDjdV-@K4}N$#trX>h$Qzb&9-w0jsvM7JL8czbyUmWMVXJbe2(G&~B^|Exzl zip3PHXf{2F;phX?W7VrcAx3mLF?f_cG#j}9ez#?Iux*QW=*2f4z;Bg92qCq#Uc zeV%y>4$IJ_!nB#6dmoUj7*S9`mZ#zPX5eJ_hovEK|3wn|;eXc$kcA4^CFB?nyuzp| z$K~hY)#k@+3Xgpbx#U77e#{tWfP8j!`HnH^<{+u?VH?Y5ua}F}8I9E}&_wZ=#AmZv z7adB{&yO5)mbxC06gIJLP62sxyjjQ_vl$l*cOlVCkY-k}csR(LG;_O9yJv>yx3=C45>jI$X6%~x?YKd9eP8=e(ITku{E z=xI;{3p`)@Jru0@R)Fk0EnmBx>msGf@>_$iBX17pbO&MOQRofyhY`KSE#F-G3$^vW z2#JffRP&ZWk=LGyU-^!9{ihIWP_$XgegM4$C|Qeb5rMB=gXCThwmI z&D0O17^JbBgS#*2lR6!|yOlh{KE*+Dq&nqF@5?JY9ee{Z=tS^(muh!{a65pBmeXrq z594hMdV+Mqug>?m(g!*5$(jy`mNH{-R;@Z(%oBAAM%T5VK_9a`5nej9CE%!|-ihaJ znilz5lzc15+yXfyRGfgF!nELIDJZ^1`5<$Rvc51Mei#us{gE|Gf4lB9loW6A!z~=R z^eVQ3@U1lYBAWp|xgEF{mzmWb1p{!EncSnwtIW(AQkS~^2EC_&{5$}4c&n+yAD~il zZvCVdY>Q#Spg3g|9k>hntSc0yVs>yslsV@qH{2 z7vTLg{F{CaegxSAVJqu>Wz(-qCdi?7VY5!HUKHiobQLHJ8d!NZNvA|f{?9qm$Ta$6 z=xmFt&y17)g?m5v1qhRCwDw*!WwKIw1LX(UOL;wxU@)6P4tX4>iX+>Z4h8%Rr{35~ zlI1-PkmPVp6~i<%MvgMdZ?n3;7n_2E%pe(@GN1rTY z1qUGEl5@)W>Zmp8(*DLE3=PAtqG9^uzcdsNk)gfMchTRO@8Xtx1<acA?F8XSrkdBKXKt65?EYIfBmb=|{x3629r!62B6)xR}8V%QJ{x*IDE%fa@ zKQ2k+v(-_c{T;i|4lfobbo|f3twoDnV zj7iWNIV`Rj;!7u3+NqqSKcQtV3ed+)*-r2ub6>Kyi6E-7YPcLZbJ#ymiA|4pp{uUR zQ)<^iV#~7=81i}12d$#1$Mx4D(B{r=aKXV&OnnJVwmZ`a*JBYbo8PKvp^L`gZpgZE z4`c~l9dUIgs}rt}ERpMuxH_}zrhgz^op80##lZ$Hrl=jsuVW&*Fw1t|gzplDZRt51 z*5wnS%J_MRXlYznNmKXh2BDmE#BX?rwNtd{-+}+jA%4BSsOP+q{|aMjd~-hS_tmH) zR^4?SF-FLB4lC@*0`@3T)_ICSj}>qj$*ehF^{kRzLb|^XI+3!CU7^c+kKl^RgLRZF zPs6;o6(-#Y=6$U&nNBe8Z-s&VkSt5r4P)_M)(ul~m`I)LroZ*_LE^$^G4KT>j5e~Z zl4gV zI7QB@@or5+mo!y113-ok%G!@qQI z;XkV3uismEm{+9#30Ox@Lw{Ov4F6Ywcl>Q=>6|O|&RcdGTXeQ%WT z;dlX&0R#*}4xsVh}eTo}UE0*rWZYhmp)kvGgKhv4RiqJ0E0sQw#J#2AKiavoI z0CB=jXN)5#Dqr(hil`E+Fnv3+Sn`=bTYd-6#P&jZ_(s*-7i{e8vVxbvP3!o#LKv-J zIo=D^fZc`{{TO<$KSRwd=JbD!_oJHOPqnCjN;qo<6YWfS#|!cp%_|NQRA=7C%=vcKruGM9gAbnJgaJ zpUwBBck#$ZTfdE8c7a+rsr|Act@leAPliQDv`V~H|52C_(rV&=9LMYP#KL#W{|VxQ zpN5I31Le)bGnxLgFdfsF;A{lcQocP;-XxDBYvdvqb7&l_VvZwzb@1~rC-CkL<`=ub zNZYsI`Q=`~{96J>@43=-2!4eG@r#S}Y}9rBH6pi?RR2Bb8e0#*oAk96p!)&xSlJk@ ztHW;k=5A$WMEa;3%TRuplw+h$Lm{qwg6F(>Wfbdo5b}PNc`+!+LIyE-7}%}!b~?;+ zw?-Lv;wuhQKXL27MXb1;n14C)e=W=}mUfi?2LE?}B%zwuoq8)j8CkN{BpwI{_K9}oL{I+mzZYA1yjp)b4mGd@kWsrI(rLa3veVy=JDMKUY zRC#03kzM>Y)Fm#SJtt>Zde@ux{PYjHP(qJ0{vmK|Wm+CptHL&a`;GT_*)g zpx53$4g~6)jWhU;`b_@+kNrpSAyes{g~3(njZCaVUI(vvh8|sR;PtV%)3FKQo12~J zCKxP)sqbS%{5_latX$f>j1`&*2?l+SUXalW3^d%Rl-^Jdk%tM0t34Y`C0=7#tp{^o}KChK5HgMn8-IW zh8Tb)<3D|SSL^84>c<=&x_(%0M&j2uD?$ijN)OQ8p#|}c6?qKInWQ&{7l3}tOnyie8L+$4rkMaFa(&0Hw^~^OZl_KnZPQ;$n zn8&$HR=(A;N)tu5c{}0V=G#b=j=4j}+=fRe4>y9ox061rK|ynF%sJ(A^VJJg+G=3? zinDwi-(+J7M(G>P8=e$G|J$f2cAa20gpZ_Q5LY&~bO>w`0)vmm?_vr1F#Wc4ua!nY zVKH)#i#Y#ZYard*V1L-+w|YqEvj^8)pR-W^>tWxo?03@#7E<>1l(Rj&1BPx|+50HI zWpEaE-WmjhKp_%vmKd6b*u5$qwdAj5N-~z!O+1q<(UBp{&Y98s%*E7 zCSu(61+ser#HE(InXG&oShg9tY8qxYuMy`*&bh;A7+hp4p$V^JU!FM5b1s~@@KjZ8 ziVo+F=V?r+#j7kALF2xS)(mBU>$u9e!NDk1Jrp;t;O2KEJ~=sPL+&rNUsV;`C;-(Uk=-KbWP?iL|%8huv{-oS!Qw59g^`7 z*5x;WmGV3Uy4H-$jLZzr%!q)8CZFiII%xZlmKj-`m>uz-5R#zU!q?RB?68hS$3(x` zm4+dmtXYtfUiw{tQJ>i5S^xWqN&>GA)Aq9QK|n{1xV@Ni-D@v~9XBQf5v1H;bW=F~7{<^1=Ol!0CWUjnWn=;##~_;%Trj`)UU4rtKs0=MIq-KC7J z-*JnSHT`sD5ps7}1V>8ND})ZHL1;nudNJJ3aX_$n)g0A&J*D8IRgXv?XmD_<^g6RU zu>*6}m58UbbKrtzmo)f1*6NW=vrgAB50x&wz(_#oHWJ&D$Ib%)W)vDH&;OsNaq0+A zFgqjTq^e?VZ+8S3U;~NDus>Y@lC|$-(8!fFPBU!|JBdS~^M69=$EJLa!84WIOh^X~ zRKUBnud<#lud)`(0Iugxn}Hu5Esl#?oZbq&R)a(5;F=jb(PE93l=6%nF{*J(lxK$Q z)7imQVzIT`Z4d=er2uPEV^>cik2qcfoDZm+-YyL~hutcUvt3v)!!at6Q7c{BABJ{q zNkB0yb^NIcCT`q}O1o`Pc8$V^_cD__wx-)^i0Rd!JFYP8Ij23LJYy!TYw^7= z-I{EfOcQDcnl%3UZn=1-7_ejX*}b)rm(P$()m z^?2v}!V=T)k6W4a;QAGI8CKzr<|dRR`tNg~1AbigC9R9Z;miwE5~{adpG3W=vo;cS z(_(+CDjJ^nA%HkzL6g?|RfkJdQ=R*H6iFICV-l%4_ zpw?L4eUvF-9ghMY`9nHYL20=?P=$HV_ZAgl`~M~wb!1bgUj(S&)wJ+5K3iReF8f`| zfQ(!GcI_pA8Nr~$#S~Ok2Xkt=hn?GMaLQK}!xIw-9K!H_CB;bmluPZ&4et=l$qbfJ zrg6g1WD5InY8rk=8SAt{Bf^<*UMUkwsSF%gn)JyY{Y;DaaFae)TMi|Ih#)=NluT)Z z!vDFZhgEI-3;Ha}m2HhA=XFwaQkCl2_P7f=XSI8WGX{)HrH+_5RY-At=qSwSiuvhZ z!o0EU;hkL_p=rx?+r!K3QnhOkndBY4a0u^MC|Zh(tWr}S52|G86lhG%`Ll zs{0oOoczPVCxt~Nk5Z@|DwLL4EjzQ=7K76o6eAA3Oi9QuYABwVf|}-tmqqoJQk1}`Re#hX$IcwW@g3(2>E?+H;nzj!vrTzVqMp^l9d>hOoHbpV zzMmXEa;cp{;%_vDCu&4L5!Q*Nq~(ya@O}0|`i^9GpLR{&t6?;v%bAOg%NUVFJsl$S zvZ;IV^-GdBgYUaEqz~R{`XIYiY8rc1OoG;LVJ*q~nQZVH=%yTcHiPbr?%5L1Q%z2t zCSMThMxEE#5Y0JcK~8xzUWtIL8Hy6sfRVYe&T3qV^m8N&$zf^IY|CLLCy2(8ARI~Z z@`rr(ub9M$JiX3V3M+^lyQiOl_hfD^l;Cu6i%QgJL%oQeo5i_aXZmPljRa1lDmDEZ zh^mP+wPin>V{La|slm`#YN=G{He^22i0JHW#E{>wAOl*!ZcT;BL5ik~2kC`6 zPZkL%YNx@5Y$a8}>t|wgzG$>05~OI=!dm^0`$BaU2EGm$TiOB~CCl5WOv`luyB#>` zN5H`8RG-IzbHVg||GlSylUD=`D2}T@>~Sut5ezmfXqZR)hX{-9wh|ZU5c)^!-;CJhB1? zF?)J>**-dE=s*aKbSt4|cAV!uWD*P0hMkhiA7is7kZdM>Ln|@(iVRCo%#W}KuNS>w za8lZ4hGvUY1}vov9l;9YA$ZzV1tZI|k(4qxI4kT5I}&bnfRju#0gjaBwdF%=?f=^~wSFu*#SuIy8=$(`wa$y+sjn+!L^ z#sb*QAOS6%zdUOcithetxo9I7;g6Xas#G>qs2%h`8d~7Ij6({4C(FjCQ?0VDh-uMC zD<@D;QS?tQqoQbpWbz~}YnaqgZDbl2!9LxcSOc7oHs&aTI zW>BRfEU7TKy@*0tn$@@tzj~fRw=upyGPoY+pMj8!!%8xR7>F3+0tyU%BEgpdX105| z16RjE6yaqLgsPDA?WVBp2QD-*SX=21V_`alJMKlxr>0MU45bHW#6`pYER-Tk-eiHv zj_j-N6B*l0B1K`hIj`PB;(@{LvK@H(Zc`53Z3+}*X9^EYr@f4Jj0AiCga)nrXh4hnw?9UGT?pmk<@>2r*|HqqPVr4E4O zTU+VWi|C?h!bv7KS zbyQEPyt3Mps$^G8q{a?h)Z_JvfYT-`_K86hr z;}+6UO?plYz~Grp@kS46_%+R2nC3J&p|^V6CI?e1wWA5|Hukgme?Tk1)`15Xema-m z2T+f*9c;U_aU$1z7ue)B-;Q6?EcRgYePmrp)&=mmlz1BCquz0kp|>P#rOIaXlv7z+ zwJMi3FGj$&8&GjhX=8t>6nq_JH{Y+Z!8wF=^G6VaNzD#ETF#K13%bl&2GLZOE*rHP z@^z{(( z*x_xWn(d)#Mx8UP@-p@&-KKVfP3e?Ual3NWR{M-_`GXBmj2-dN1x3b67E$jwGM92^ z^B9=43JVWfpr>;1!b6;kCUGyOAY}v7GG&EVsS2-F=V_Ve?rxq-!QtrlH1k={#az~d z^PIjbcL?rHs!ndox(0{mumhX@?5i;LpCo^s;T0}>4vbf5yDVh3d-_92v>WdLHz$|a zjoa~@%GeD$H>S|5BUwK%>%i&&a)=VLL&cSpJ$E>$9KKmpC~=)9xI)v20v7@;G(dmp zo<0&l7)|Jouo~=%SYB*OkBpjK7F}>M1?SPVmK>WMK6hs9T-q0u+A^l>NIa*!o>d*v z`^+ZoA%t8nJ$mk10dl*e*D3Wbz27<=LUs6DW2D{d^gW8Uqx3p;BNEndH#=oe5I46Z@Fbd=2EZyYtp|#|EvkW9 zhJ*JpXi@G2k`M3>vJ#6d$NvRbiaU-6@%n51TEHuuL5#I92=opvOMAVz^aAoEqdi<} zqE|(EBOT4w3#SW{X=aau=1{hHXAP9U<{h;6^e<2>E27LZR_Yt{+hKJ722nQ>h7a-$8fbQ!5$K0F1*>x26{zrFTW=3;#M|Vc+$jivb zb7y2(HfAI*7>sSO*>PZGFqY*7>;MPu*bqFK!6XFUOR$L?g(QvsXf3nvRz5a_{b6>u@5t2OT2NYhu@iGYv zAGG&{59v`_xI>Tj0u;jpK9c-cm_!7_W?0o3AkmkMudoA)Nw6;C??*`aio(1yY}|n^ zp_fh8iLe}q#6vdQf*I65FX)PC5$K2u6}1=MM<`$K*8^X&!G#a=R$sVX-}8b=d%nbA zjwyoArL+7*tGpm6;LE7!@HbN@^UMoLjW{GOp|zZ9)MnoAT*#8Jx4mYV;E1>dapdBJ&FFP+!rp6UU0A9w zs736CGc4(V`d?_2)n|S}J?5apwrS_>b^NIZ!!%WsxVNua+sc}HO_L{FZ%>LYP~CDV ztHGm}F8ni%t-xeqVCP~)vbIg})Pm$~{LR#8XjI*Bd9$`bj>P1Ps<78f38)Z&F0AgK z`2wjTC(_nHc(Umc%xr26h38t%(;SS4;@aI;2GO)| zUwD9*$V9Unj{{n|Y!E_V_nDvE12nSa+&^e^l-kk4+FQlb#Ff0q8ffH*TRMjgroV51cO>CU-YZIF{YVkFKw=gfTC6=*rrq_7$K_)&n31`z8I8gY;!o0e4 zym9#~MNPyLd$z(+LDapK2I{;7bDQ5DZ=b%SFfSRcz2#70-b69$4-YKNo5(gVQLLB_ zGskHgaFHX1Pr!a%87`E@e-7_T;)J`Du`{T(N6|Ci1;Xv){OvsAIU((%L&JU420_TK{-C?9AksnL}2TK z_QC4nt4UBfc*|2ToHMrm>95Cg@gpw9R@ z)SwPysk3GahfwRgxB&}Mvo+a|zLVpVk2d-~E1B-TF}q59qNsmYylcF z6`u&YT9eiIM3?{K6Zc}H7rnGj^bypEPmCvLS5VK+Vd3u-GIA5CTNhfV#HUPMy`0L6 zU9LSn+LGHRA#c?$S0_SJuOJP4-C(l@Z24r#@XwK;s>@j!wbY;ATqH8+dyE|In5zpjryW0md z2|bg`e61s)^zOS{=7NZ7Ju^OY z3L}MUsWX4T_{E1?8VFbDIXad$*cy^HaVWB#@82jR$jJ^+ zF_Xij>>UL=FTv8g4P(^YA4h%BN%oMxh9Ec$fc1>|zd#`mO2q)HmMZFGo>DgC)vE6r z9@=iuGS5fEO&PZ^qf|@dKQ%k6890hiHG03|Dtj07;LBD@Q2+Jp*+XRDp3LkaZi(@B z)hcEt*CstPjD&>{Ycs}P8GozU$uan+)+*ef=)gks7&dml4@{X?ya3N*%woZ4@WAD5 za>MH?t&(x|ezZ!~)1%cY&ih?Z*A!~juca2ow0L0ho#U~|z!P^K#-y1rVj4F{0vKYpRhS5-w8>wHDSSyG#k&^%UC+{83*XeUyznhOSoQn1JY*m=9WUFd%iM4R94k`vyRnbjV zRZLYL6jx=cs?EHFqG8yyPhsAW zHg71KH;m02zUB>E^THLpzQi0bTs&%6DQhN|6&_FZ^5_nh+7Q948)u$GyQP8(tc8E$ zhj)Qx-Nn0ra}pS}43ZXsEy9XrLG)et8hM%KMOHHjka3j2rE0mHZcbpY-}u@~7rw4EeR;mD z?=jEwJxHxKel~f0y`Mb@HAi=K0~eNL^~@ToXWnnAw^wx#Um?rChik7wmRg)T+I{qBs=B{@v?<<{k)`n1N0#=vge*4&l8af8SM1(a zy~EWQEO$t5nzbXlS-qCcX8LP0H<F?rHmECREx}!t@6((ln*pr({CC4>Khb zotP0j03`bopm)YuL8|Bu8z2W(C8+Kqd14WSSB5WREfN?PE2e8 zsC{U8s8v63Ys@wY7Ni2^!H4eCD&p=6>kvD^`A824PY-c?jC^~ZsXaq32hFe{G@ugW z+Yvhli`xA}2d1?DYn>x=+x_btS>%pl=Ro-ULuy#kKZSWswReS%$&mbaq>W2kFv08c zvJu|5%FOQWAZ5C+{43F~i;zz5u9xZ(v!mG7U(ixiQ*qW#G)j|yB`Go+qOGBsS5Yw9 z=}{}N^F$QXqgR@A)XvP)zlV-GG|5SDKr26;)0y`FjUJ7LYA*O!crnSpI#e~$zg6Nz z0(Ps+i}4|pFkWvbY}WuU;x}<^Z%6M6dYMAg>I>?1YogG||LL6?nR3pcq zSm$oGDw!x*Hc?W`Hpr4?7R$y*V7{zsPQPD=qh8u5H#x5hWpTsBt+m`UeQ*MgZr|5% zI;2QQkSbM#e?gJJWvr&Ax@rU?M?%+ZJ!8T8R%V!c&RP$XHLI4pKPVnnN4^~NBI1&@ ztS%$uKwPRznpM4Zs{C)XbS*7K#I%++FKrCb)JlI-nU?OUffB*mz)UFBhM8rt?yUvLv-J-vAib#^~jEh~J@*JeqlHA7tE< zNgkiyhxpL^jxaX;Zy^-82jhWySaWVEOle{FJT^uR5gub$`3}kI_ z6q(vesJMxJyh%F(r4f) zSO&mjdBf%Lz^+m}&|$1>xSWuxDwH1`6s0R<1~%-sQHy3Tu*)7QEtz3oue+ZBD)@y)=-a3Bf%AarsL|nJ! z8>~RpJ}Z#cL|^~oU;gs{A*}7zIF`Ke$^ENX@?`F?b0MyxDPPn4TAV^Z_$x@2vnpAb z$L3m=`}T$Ahdy9d)!Gt2bW7}6=DAxuIIJwlM>~Xa%Q#-^srkooWN4)OrDQWss5AJI zD~UVGu@GFp&hW!kx?@m&HV^q3=;BIls9vV7fip4 zZ1Q!-UCRp)4ka}>4l^I^D@cdqpZU1|bht47)5grh2}0YjN`*0|<bh_@H-s_n$Il z-W#@QVT4>Wml$ByQkAmt@~yL>;le+Ym`vs?%KGuDWyN_}qgH39ugT`qOp|{AX707g z_t;o>q7Fl0UI1_1Uu6@>C7K^)rC$N*F{gwD*d?ugDo|9%#Yoqfuk*TqtStuj%)^NG z^kXX;BI~RAZu-77M0j1`rph*J30t> zru9HxZ=if(%^Y$4d$R#DHaN3~dOau~R5}9IJTpDKZG%cXKZf$O&NwUSPheIJU-Xur z<@mCqY@B=knGeEN%wP5QSA_xj*V;{23gGg#+hN#+t+XI)Hbk9sNWjJOzKF4juBiuwx3zZol#XIWFMuD4gjo9>En$R z5XfLG2+lvs5Uft>-%i~7(Hp|t$>^$p@t`Zj}{7j;chxt5_?N=(<-HQLdikv2g+^ISnD=RanKuMuM zHF12M z)A}s>!l^f*W(<(b=JR56CEdb?vIqLsK30O|0l+$4kk~Mw+4f14HAO5zFWIo(yRE4Z zolcugE-g-td9tZte;S8fDi~+fB+i)roQ^XA_i^ksxmi0#MD}4Re6qXo#>)ts7&9Jm z>%<0s-XH{e-PPzpO!nV2nr+p~I{tHhhkz}`_1S|jeY$dAFgkk?CLwIm;e=4%BEgh3 z{V`A7K3JwV#QIw(-tF~=hHCBhA@&l_e3AK-kAto1D5f90H&u9CKB!I-!!LB!XO{v= zU=}IJ((}oWGK265E&27UR0Pr85E3iNOSqnXsbSk*8@ilSRi%`eBcd3 z^@AKbTt0-ELKZYbzO^tM?#e>W^zG~-Wf6cwPt{eV7B*!47>|bVc2O;HIaI8xwAG7S z;u4;7d2u?}SSZGTG5uE0Qad=z$)L*I2E-DbSYJOFSFhw)jQO1wN)UIb56ygq$unzU z1@F>#=zB)nN3rYRWsX`p+iKS0rc7Q#adl@Y9_ke0Dw|9&Xf(l?b;5*B8>EwTpZAk+ z*c_eRi(7-NA+dbAwLWu>%%dC_Jpl}c9k7D&=AhGy3>AgWR+gzejQ0wJjGc#h9gD< z9)l+dFLC*<@H!e-?>dB076j-d)XQ}sgOZHJxD^VAn7t0}W#3Ykb%=%kEIck_!QJ3y zC!LPQaEcooq9K%lPym*Ke~T7(tWd`#_0{P}4IkEHL+8@fN%-qR)1f#`j^k%i1ue7}*``+|<-LHBVm&1?@dJK0G^q_G~YGxtC+8w3l2C znZ{XD$Z$+_I5F5k8>+{RC5^=_tx@Kk#yZaQzf!`eFt{Jq!EN-A^JTgLtjs1TMqykw z-vbs~roR;8My;CtSg&iHF*`ubI-%9bWOGEb^bY{*<3MN1d?t7Vxit-`evx~#H zw7zP4d23E-I92ay5RS6K(PgK&THT7_%MUf4ZZFdvq=|upm+Heke;Z z{&S|Zu(x<1l1TS0tAE=zUYCPVZgWs5;fp6w?_$EwP-O^{;VR%v*ExD2R0>!Ra+g+Q z767bw<5Pobz_eQ#|Cu3?O~`;&?>;e$GtfA8;cq}np&y=dvD98XQ6NkTgz8Xvbr4!Z z<@UkphQn-TW$oLL*zuI$VJl;R0rZDirR*yOV+;ccA52E|?nkpI!P6Pfz%}LH0ABNe z+>aStGQrpZQjm%Iv>0szeD^byk8rWQ=@8IQ0Qha?_9DB4OSf@`IF~fZhp`NDzis%p z4rboQHuT7ROQ>~v(KmRg>vijcX4nNWuEGX?7pEwUuk{acg*=s*G6bcZT;6Aw9LluR zD^CX}Xcwna)Y$M~_Xv=X0|>vaW39B2#CT*$8%eTj1mrCbQm4PD&GAYi2=JLANg#ji z+5n%^U-IniE47(`lRS>aIWH7SsLdMV!yY<$JC-tQ@yLQTcEp=GvS2M7S+KT^EGSbZ zuL$2afp7iWrah?Ewuw7mlsf_n@#FhK@Yi!kK=s4;cnE%0o?3LC2Y)CJ7Uhp`4XNLr z2a6>0;3ww6B2ts@`|kJZo&(WXxBq?ScE~RJi%5xe@7MGwFFZjHTn(RS&+@`7Pb;S! zJ>Q!cZ9AJ8$Iktjxbx$Ag^woT_!%Misd?~Y2=+5BujI`J^0uuI-1yqLF<8hAk5#-S zx{9~<_|`1qaeR&}KGgzSTRidO`4WAXqV2%q^zHLNy!h+H*?VEj<+BGmRSPH_$j@`B zM85^t|KW6=l9*}j**xaeex_)97ZTWVVDG{NQkK073zA!!ZFn?7?jPB*C>y;YR*lI_ z3Pir1{sKOhx;UaZe+$0{bvZ!$<^Dn9@{H6iv;rkTq-<3x@B_O+z<#_u698pi(oxk^ z&?J~!)I4Ead)mu&uEVncikVeLpaN=E0IKg~ZJjMvVGU3dtV}gER#WQiOQ>5xH@9Ty z{4;^kU?r+Pd$He3P}RO@NyVFp{&S0FEysZKL<-BK%d*}2!bsCL(d{@0#$2}Oj(Fvn z5&BspRufyr{XsG)Z&oVF%wNkwGPw6X?eSUA=xhia<2s2DSn5j`H(5MHY@*771n%jZ zg{&EEEe65fM>oSB(j47dJ_F~lg&ch@i9Z6l-J4kR$yN4-ol%CM+BI4HHGA#t=4&`d z+^=!)jOrAz9&PG&*G=U2=@+rur{>Ees3;YF&*k9A##1GF2K4xyBh#Zs;lTP_(-ra~)$S!tb+EL&Ww)9gbDP6heS~7-^4Koq2Q(asvgL_Z?ND5Uf{i?&ab2-O<8KXU!+GW(^k1dyBZCgs+2bSX(OCN`wFh`d52DIy zP+>f<;pb=&?tw!!#I=KmxFN+$3TZhAJx?yQdS@Ai!5SzFMXiWKgtlf|7qE7!@b*4WL;c*CtQP0hqfdv-sB4-Ks=@nWVE9%}{`!~KNOpIse zGmqw*RVGGFGr3d#m3eASGz4FUU^8*&Z|1>IBY2w*CJ8Z(JSLxSLd-+*n5V0#44z-) zvpvJT2TvzY{Y-)uB>bjS(e6Pxys77Ay z9mH;UO^_v53oA!ICEcr(PPBqpUY@~ngZw36iVHG-1;EUD__tMZg> z-+^HzSo3XDi|6FH6w>(#RdS(6`rp)jG=h&u&%c(~uUHC{!NZ?{Bvl$Rh+V> ziBlJcPR^?zxr!ODNqZahx_#V~WqH{qI3soBfmPU6}geeqhdgn;UT7d{Z_WvlM zYp}lOG>}yYjfWNs(N5aucLNx5T{kIkEwX*4FAyPz_ZMmOAib*-CO46H4|&7CLc$ng zY#lBmIC5^^VfG*-CtC)?ck))vE@W1(N1rPsPci&6rZ%gDLew0L%G^`1rVy=(M%D`? z`c0PwpK9eYmI~2tDUg3*jQ$2iF-D)Khat|#=)Ate80A)P?cZ7Ol#6=wMy!R-tCUiD z9ktL-D{@{XgkhtAb{IDPF5@)Bv1A1S4M>w=`Q#AW-(n73A_)iBE1{t|y@b9q_Td%!@bo!H z%M!Z6rH3oLA5=#M9jB%7mHr0!Mn6yti$2+2Iw|pL%nRvcjw%XEfN~tu1h}dDRO2!# zdnK1qQPZ4+a|&$2Qi$VVe^zcuZ#wGfq^$K8cZvq3#WPdx`4YA>EOL3)y*3MqU#R_I z$UGr@267HmEPYAi$ZYlS5m8-x)X>EEr4H2n(t57Q4N<{)(+u>Y>-FUQp8C_~9`3<# za&!y64FXQ@(!});ZKgek_vAbe@VQIAdK{V*GZOe7b;2mJf#C);qT->Jdgk zF~tniNPeurC?^pBtveLMq_S0+>1Ju3J;m-qBK}ne8`n}jOsTl=J1Wc*l6~QY_PKC_ z9`pVy2*O}eKt@{rZiC6EH7|+@yoTq75L?g z)EsaoGtW|faKyRZ{f+v{0Ozp z59Ns4D^~D_-!}fB=4bpt@1?*W^q%tvedPQ>)ROauOCf*7_IDzuVG~lAS3hIy(Sz%h z`&dL?oR0;~*~TKgAW;BKS2bc0A|PFhp-65@;MZ7%hE89QosP-rfkdyuJ^q+3TFE^) zY}g8~cApOy>6E*_!=w9q#!(DJlUrDF%jFgopK%mR@oEBA;V8Yhr5xq2oulN@&QSnP z{6g|Y#xFE5SK}A3XNx+J`>OeU-zF0}LhP)uV1h9kgb%pP7~-|W*o(g}yynS15RKPd z%zJW)2RN^JG35td^Scz?&ue~9-(li?iQaQ2gMj+0FqxZFSdYovXrBxJlSdHcFYWP; zOMy@S;2r-R_+T1V+vtMT;!Hy|aRej38Pm9b*i06D zAP0K#3G3H=7rePt*ujoxU(cgXWG8#iWJG~V4o>Bk0b(7Z zcD1LFSV`hqrjXc|_=53BS4h_N$=H$~R8A&x+ZY`HCxMrXMti(mUqQC)8^>11E3<^w zS4;SS#V;M_<){t6XOFz=giuv^rfM^Q5@$N0-b+Ea)qAcJ>f?TQ6kOZ$sTDcb?h6vv z7Jj8M-v7Sp>y3;|`a3RkPzbuG{y_uUB6U%EpIDUZefG9Q?<+(@c^|Q!@f;uzOjPoT z#_;M$S5E$V-8HUJgNMS8)!!Qs`TtVg-Fa`_4+vS z+4FK1fmfHU6Re(|Dcj*IrHw3yx2cD}BFJ47C_#o=awh!v+EViTEK+s#<->lHN73f~ z^@_QVp=$bZ?k2bvid^

    J&;>rr#l^uOCrWv$p;vcyQeMDd8YjL4{)aL-OSFZy}oM z;Wp&SaLXC+3Q51GNH2BkdO!IMICe$My%>+&|;Yn~tU=P5^1jB>LD zd8u|Lt!~y6kCK6p+uH112bbwS#PZC~X;Da=VxSd26g=}f$Nl89xqXli1^xxklXu=z z%F666?yc@mTj4M&Y&0-atb2Xg`il1qUUWFy1ocT3asQSco_4}uAxI#RK)kM!ovh-` z3CFHv>2<0zL3)Jh{G4aMuuhk&sfm78eZ)Lf!5ad9cAxviJQ|g$ zVkugWP_z#JC5;KTh~x$H#w*yd)Le3B>26b|-ZALZ-wQ96dQG=xfUG`R0Q+kaqG>g}IMH4h#Co7EfuHY!#zCUCu~;moYV6D?Q(@KM`aVmHASL?O<-t7;bfK(2U)gmMD?oGdD3uod`CTn_8Sx0xh5+CD=5=1tEeKsAkldC zLx2Zcp?o(^N*Rm|ow_@l{(`q=rG4`8g?7c@Fsx3kuR3-cxY{Q-IqoPrFj&n2lCh3Z z-eg{$dS_~^YP~c)SlxC58T*RNN|kIVUE)m!qhSIAe|uNG;;R6pYcA=cz{|XkYSFrl zSs(E}?tQeppMU?q+0Pfy^OzR;`&kwq-9lHfivrZquRsF}9X+56g1$s!q6*tO%xdFl z3lzk5N?$mH3U=S9M0oMxXcfqy9y)e(?()1-HXT>wCBH_M zi7q;OmX^oj*R}}8mHbk)#Y(YgYtYW+b=uOZFtkYKRAX;PVdtv z-pEL&MZGb6AMB40k-DIaJ^i8-Jqko%Lg4-ZEJ5Yjru-?>zXGU%8b>gSiFZbd+I!rn zaVu?w3sJ@Irau!Mj<-h@uBb2%oWd_QV*RafDnthF8rDu&ERJ@b62-Fb9viem(d-f% z>b=-Z`r7=azBXH16p*z=W9&-GM&)D=87u8>+-jG0HcQ2ut~PTV==D(6ON6~(|0>Tm z+LfKn%8F#AW=H4PRS%?MWDp)+!`wN_zUt|(O(NkJ+hhsL23QDP1)e~*M5(uh3=DTY zv-4jAt?Q4H@tr5nE6{9lK|C?sERV-Yt8t`wsoBfpgRQ{IM>jrVJj2Z6&tig74$gd6 zgC}M7)b~=elyn;_*Vj^9wrkO*zB&FZI^Rjfs zYbwdVkaBxpO5vy1Z#FuTJ4n-`&2n@K<-l6CC!({JA%w)oMK9L(-1=>|I~6*El`54Y3u7_E0Z%{@U`m*s6=(}ar`t9xtL*a~H{ z`&r@teSm#^wRX*Hvs7us%_e;$^>^&Y!|oqM|Eafr8*1##~hX2Fgd&wE0W?s2ssQ>c#Z6 zq_d%jZ8ky1uauH68hK6L)Q6A1r(iB|d6N`@f6#k*fla%s;6@3T;N}C4Gi6#5e!hpR zlssH=29pD{=7+J0fly#rDA7*cp- zv06*v=#AuOR5>SN3a4$_oN#v5pW|oWcmS5U@K5y8iq5@SrDdJ_9;H}38I9P~tcCZg zv$MWt+ESk?jrH{==82C{2UAQOjTO@`sommVn`bx9Hj3$&74;sXjFEG9 z5S+-u#t6eF-v(yx&HrmM$hH#}+M#m!2!%3cTdBAm@Rh)QztEXRE0qHiSG zw-B8fJ^V$s#2ZOhqYV-C%-BxZ3521jV$Dweiw~OE-%bep`4DEWom@;*>$Q`U6%Cbj zZz_tVe6EFDYjN5aQ1@mxOl+umYya->`kJ>^3v%4i8CvT_q>KsV3ZPSqlm8TS8K~dY z2dp-LY!p z01*Px=VwGmYS-C3^{)W0xeU^pxbtI~W8Z?(7sk(Ac%PnT2ysszD?Ym^E8%!t$Wk=O zwKWlh!rI4%OYHhU&eNUwU6o#p8^QTvfLCsob-{X&kNlE9&hH99*T$|Gf6%2t>&pW- z?yqmWV&BS$`q=)sw0X4{4t&jviQ>kFS@G%;ySB_Bch6ODaP4dxIJXFhW&Rj>(bfE! zF=Xa2Z$**^U^R`5T~3LxsoKWK=>gEp@81qgpGKq-CitMmLN#p@$S4RcI? zZE=0$TDAgowlU=JrQUlWS;MRVOR+h)7O=&IWxzok*mDfT$AQ8_T>nes5AeIee#h)rm@9(^O2G3U0hNQeo!=o~xQyDV$`yW? z?k%50!|}uxs_Do^W%?^vPNFJfvL3yluWyPr$e&8Tj}lq`orp68 zA5y0j(-RMn(7*ydVn2owNVFVDfk zz8?zks&vYPxmP^jEMx|j!B9=m!L>1AwaVFx>eX{eme%+yPeZL;u`P zvQ_#=!Sv6Ed07AG#rj7t+&sc>U;n5s52SxQj{ZqP|0v7-=^rn^D__<>29`n9>z`FB zHzcci>mSv>TK{-Gp?_3L-anr8Nd40Tq}M-I&+LLXx4(Z@$na~0nM{V4EFOzqC5y+3 zsU*lIeX_Xc?~~;%mFF)L)L*X(tfUjmYW6w$#5|u(xXZIv((Nm<0Z%bn zw-n~0r89VU%xxgc4QjE;0i_6=R9JhQXX$wr9YCR6o5b%D9Y6t@4p6YH;|~tc%MQSq zlx_SW;kiE#IVXf%o`*a%gj|t_oEt)}%tOu#Ay*x^b@GeaIDMIE7+=r!2rUSje$B#w z&NYiM+N@5Ho^l@THNJ`o<0Q<@2RL8Xo5$SLC*G<=olh5nT=hXHwN;}Jl*cZ%^?a4t zC*u|*;}#_2aw7eXYGH+pTaLa&{p*ac4^Y}5%XCHd>>Wrp0i)zw*`<(g*J>kQRF`mz z4Ql!`tk%uEjI264!nb&9LG`32mw|X*nUh#SpZ|8(jz z`ByY4XtCmY#Mh1ctJz$s&FHqa>sQ-88S$ppLTZeg;*({qA7|}#v2n1o&6@1<=jzRt zz^G<_LJP{TTG{NiG_RLGYx?JxHr)~|Z~n@hLcyvz?*$Dv+cRW7M7 z_YWz_uPAESTtD`tMtjh2zAKj4lsJ2!=}+{=f$I2WzB;T!7zEPzPOgSW{qIQH)c0k3 zvG7??&C-f!M=kE9HZsqzk>#%0yB-&DUWc;e!IslvhS(xIT=or*x!e3GvYJ5N7`GDodW zkG$A&G^kqHXXlVXf+fz!x9o?uZl3%d@ySfqTNiA5bCr@t=V1Dc8wA~?*^!~OXiVi} zNR|z}(TOW&8*XxyUsyb-xTW{s4zH`2r5EuWd%qjC83w_ATaUJEw<+Jsy^!z?R&F7b zyD2NTSWQ1lO>Vx$9q#b)7^mM($n@tAulE{cCg`&zb1q)QA$V>FuSX~B%GXJb;n@lPE*zmotl{ejg#|;cx~rsh@;P zn`1+Q_heZJSG@ST^>tqXJ%szX7q987H>_E?gH~2Ye>{B0!3uQbX$PwegrN_(r z#Soq{eD5p1FTM{wyAt17JK(|MwT4W_pu@2ksOnQjcW)30e!8CopFU%nJw zbe3g~`HJEQx_HhRn_!kIk8w*IrHknaU;O4j0nR zDnFy|Ppr-@oxX>n9cMUwXE+G-VlXeK7x^1Fy`;|o(fNF&aOxB+ zEm>cxJ|+ThyYrD;E;M}HOPK1k{%XJECVDi7Mf8R&png<8nA?Cw5-vFbc`O2mEZ*oj zc_Y1=^_&d=+y$M(4##8;pVMVOgv(?p%n`U%29wp~zIQISy zbmr($zXbrLtL_wh4!_51oHIqqUm!!`-x9Pvr#fdxPr)(kv%s0LMkI;P@R{=guQPof z{qvHCX9%M%)hQbQM=XJpWKsP`la<%nU9oo05uM2wKG%79o<6fhJc4rg6K)L@FGby8 zXg2FV?a-<7+c6I*4cb!8;O2BTtFte)+1fGSdBb418ZXRO-tT=dI@ktipo2p6NYaga zKdYYht}RCZO6xA1m^w!W9q^C?;#pGW?2Jk*nf6%%>LbtXjLNopy6OR46<>w%6bcpP@f2|8c$O9N+!% zN9YgBzqCJ=;8XEMBka&2tI#i0`nC*fhlRCe^OeGi>AoDv;LL*V31^Bt63#4sDb6&2 zbAD*?mu1!U(OAHV#qYnD_#@!V^5;0~*UA2mTJL?ReJ4Ig7UmV4zI_^hlK-98Djcmy z^Y`~5%|9$peO^4>2bAvJ`dJ4~({F-gORO>_AD{2@nU!g2-$UBIF|&PHc^@QtYF)t#*M}9! zg(u7MfE&$|R_=%T^XS6>UzsP+x#hXNKaW1rYXLnc4bx5VXN+Jm^6N}KOE(#RLza+V zZ1=Cg@U|O(er|UepWxCI)bM!{O|cqlFIj5JMCTmt{--hs@t&cOd{L<@Wn4r_f(Z0X z<}(XSM+J{YGP2NVm?q!G>$T73R8Kq(Z$wTmTj1Eb3C5l3hTL#FBiD4=pOmXp9YWYM}dEirnbHW;*+CM(4cCx;5vg{r!6# zv>Cc7kAGBOKZ*K#@k{otXiR_zj};G~uOj%j`dD$=YOW{74GQUXZC(#DMwT`?O--^9 z?(>}F4Tr4PQPAMi5O<2hN( z{4$9vrSja*$vIb1ubDK-Ey#)pI!s?-={K#g+h~=tQb%9bp#CUprv3>2lI`z-Y@s z6s>=XkVb$^feznXOhOJ~nyQuO?zG`C(kdZo3T3)=TDYpuy^ln5p8%?0X$9tDBww=t zvyp2l`Bop?zRzPxe7V=K>x0TD6cxH3!z8>o?_CqE9garCZ}ore@zIF*@G{=3Hl%k_MLKjUKbo$xzAl<= z>jWPYy>x3yhr2H-3~4S+!8xir5}(WGVC|<+@}5b4+)X(<;hMs8trXVKEi=tEJn?m0XQ7D<&v*Nveqjj$WNcl@CgCCvVc~pK20~!XM#nmVbpRU&yOmsNV@}BXLuH5(Y1+%hU-~Nw^2bF z08kmhjr%Kk84>!Sx4oIS9UVFF21QpdEr}naH8?I^-Rj>n{x{=(uJ?{Jt=dKUPf;`gZYe2adTHdiMOST zq~Jg+ZI}KA(ZziWdbo`CKY_0!FtbeDtV`tFM`1~~S=rFL3Qd2TQdsO`fF z+!pGYdoRQoDgzKz;pb0m=})fUxxa^Yvy>Ij+#o0{(;8ovZEwnGR*d{qu#^<(8l!3X zvVWiWX+tlQyf%Rhcb^C9w?*`+&#T;_U`U%coXrbk>D|IMjxB0pq5BRpB)_zvWDSL5 z&Yu^$H9b9m;B+H_GP9>^MHM5*^TpszUJfRbZMzsY(cxjX7IZ&LL2<>IQnfbsQL(Y; z@E$I^D2#bshz5HoBf;eq0Qfo?8t<=L#6FVcq-~Ws@y}MB3Xnn{e-;%qyn5DvqzU^qEyobGi=&TfFDq@q?voLg9oUJhg@QFk9j|A&x2uirE# z_2M>--oR@Bhe7m5G&isrPd7libmxRXvnkd24ZVI$)crb%J=7G7?lBLdS8oTsK1;i> z7ZxbCvtDBY-}{SEVc|P~K$jaN>!_hsvJH9kF^5^F-#*T|s%*RRyw5*Q$Ifk{aSQ)x zZBPN}Ccx^kBr!nHY8>uloC(uA;8X4N!y=jUcTz{K5ZBTRcx&I1ut-yx`v)k0;lBh* z=gC0RE3?PdtW4i^((K+y`y4q-OMj$FuNUHa`ZzCrhf4p)y!7bssGTouq!%|+B%44{ zMo-q4e;j@5ch-#l3CI!el5A%ztT3U39Y1lS8{s9n&Whis$X>ix-BD6u)^% zyxRg!@%-wWVmd_UgaS05$yTu>o(cbm@q@j1jfa1LCQr3y6y}Ba^c^6nC=*mA`3^fn z;CL4NE`swp3%&e&)s}+_0 zM43Lt&tNh6Hf%r#wX^lT+L>VoQ}vegLqu&nWz^np=RN5_lW?fBcxb+odQstm(lVO@ zbY!szv7YH3a_oJZpK`3}kM?{%2O=sasO%g-?VX)&k5$?WK!9yNA6oS`A-5)D> zZOJ>Dwru`3KA}m#B6Vh4c}P?EI-yOAZsK=eq0G}L2g~qxDTl}R{PBG~+6zC>V`Sln zdbrGu=CSZ&eU=t}qDOh*r+P5S|Hz(|g`e{*dG8E~XB#QvZ25Uu3#Td6B3pfIP;>Xh zheXdR^(c9uHg_UiV9@weeeU7n2p!GUx04m`O$g`1yzwyIDmuIkEx7vt3W>|17nt6j zr|&Sm6)JQ8n;Z*21194eLLxhn&Usrj>^SEAgVC_?x?N5Cg%aA^FY`BH#>0dhe-nQE zO(^m=Vaf1Xk81Sl1Jyq+Bbs{ISfYBlpxM*ER7ra$2j!@a_DqPD~QubajWmP5j|vrxE!zTYeIVs+B2 zlA4K6&9kE_lvE$48#BSOP14104I$lGu$IP3EI0j-jw#HGBCP2xn2H2eCDk>KN~-S= z$;4ADS+?@rAvh45A9b&l@L5b{8=3o8075>Q8#|uoIs}sEGDEdm#q|FWYd3lgM=`b{ zbzgcFiO|jYR3D~K)u+CUZ0C(?=Z$FRMHYp55p25EQ~C5R+g03}`wnyJXnGb^@vHX4X-Eb11|;d?B6Z-~05=zD{I$L&d%e;&2w#s9iy*vCBYUs)4m zA>O~gX81H{Q2hQ(D3s}~Uk2fn45of)2{fdy1h|DY3OPK6u=NaTs`Ply9LiVadZTrl zBiBajkB`RK!*BYf>~O*Mr83jcsX&>#^7+apnrOy(i>3JtX+pH=2%2Zla~q4G$a#;3 z)^5v}Yyk!q+3Y!YXQ^kV5swlK!ER{fe@Zaq)8BFXO}OyhIxw?_1(kq_^`?C>3b0gLR^mU@sSmAIrhgluZYXLVtm_*xV&G+cdm%b zJ8Asv6>)iwtpaD>eXGEk_vI?E9ss_Gbzw5O$U{c2J3;8#OtLV%Az1~ z-At;IP|P$ZE0!6@l9QPO3h5T$FfB!U6^UA6SCeSo?7p4}%r!(VDhdPm@W$;?_xpJS zACG-#mP!!G-^|W8U`?a!YZ?-WYDn+y#29w&@7avMbiR3iS&~X`Kk1rNX=$`SdfM&L zpkzUN|70|%d9%QZ!K=ROYaKe}@!v<+tXFEy)omhon7i?3`jlPLl(davO9Yrwp| zu=x5Gh<_IGvSrFX8=~DbnLd*kPb02v%fKiumW#H+1+&>6`M2?B0+59RZpj&o())Q z17{olj9%Dr^KCTREWTiOjXl`nK^&#l7R9!kofeeEtUULqjGcQHc>NLcY(7$+hb*Z_ z^MTc~i9F`}Wb=g8a~_ARs9_Mw`h}Q;oFkQolsu$2ckd8>3iC>r%Sw`=uJG{nS-5E( z`m#C8?HM8O$dWYr;+z{U%GMj|nKA|S%=ke$>OjHgs6EB>X8_u$T(=WoVFylFkBT;h z$+`O+dWp&TPQ@qxiylhv;07jROoxG1kla7O z#0-zArk~Rq01#q3vbkJ0%MNr{KG8L5@xU$V1S#1`AJ+mfH&Ju?6v%|5D2H2vQTNSM z8V@=|DE-(RU<iS@y1AIMt<-$uaNp;YKQaUl z>SY;pM@O5Ury7}3beS4X3GW475BDb4ddX~+L6@t6`sCqRvudqTc14V0qktgw@2UJr z4qo7Im_PAA9?{qNlT6LNk~|zTi!R|?>p=&3Dxdx-{BQWfH9dM?U%31*@8J8PqRk<0 zSCO9(46!;gIP(_5%jqLQUCDT$d5kMUM%i+DArXEKn=S8bBfA?{_j;Uf?6H!bP6jL8 z-1|lva}OhLlg)?eS9wVm_)*_zS?5C1&0R!5tHvphwQ_pC-s_?jbgQR>B@Edg0m$n` zVCioV%j3EJcpi_rEBP7x{Ew-T%jwI>BA-TTAo;z@KH%A%TA`jMiT;R0ONjEq3ydhe zqNdZIj*)D3KSj(OqnaBWu!4^9(puY@!OCRg!w3)6cQ|Oe=!*@YdYgZ#fKp$(d^xM7kLLeG3*cU`)I=m4cY-H9nz+ z$6Eeg!Cyb^+{L$e-r*2_hm(k{i)aquoS!_sXa~K{_Fg=nXGT*5N6+H#M8f`rKX75R zDVkFG=ZdCEEBT#SFef78bj#RWay77k})={K2>SsYIu$y_wRX3$6Q#BJ!w zptxkg~TB?m68keLZ*k?vsf!7=Y^1m>B%@s;IjQ={j7j=m)tdQCL!dc4nZ=h=K^Bwa|qMk#ZH@V>bVc*Bb$ z{SMDCmEK&~v@ohU!iaEz%RhDC;ir`#DwNW%>&4gq)JI{?QHC&Ixetcf4T|e+^9#g% z<|Dw`)+)ebHdA6iHGNh3>~%i3sV1AFgZgaq^Kry`Sw5#XT`L=26LoYut)({@4JNmT zoNsL{Cf2CpbvFSwBN%~TdsMtuU(G^wUO;#|tMhrySxJJe5FJC^4_kq^RZwPaDIpm} z(ZiMA4z6n0ih8r!{Ttd|G2-!s^J*c1BEn%`)$W&w&LWI&rT<9m_G+d3t!ZUEy_eQ@ zjri^$!6!ay{wprWSGui7Qk1c=O82D41+D$kO%9pU`;9Z}!2!xxa(R^nwDryYJqC z|8-XIKZ7J53ZTlysAYvgZrdcO=F;gqdMr|kB2WTY!qFwRBDu%Ji&N|_L-HWBWN8Xw^On? z4*t_%^OT6zKFl=%4fHS6v+h_kSU2Yxk>qvfqf#=Ag?{bxgsD7`oO1`oRBQk+U6!s@ zs`TwrNGqK)GQrTa(JE_3-JfYBJV(*!pzXOg)7PzfwLORVovAuOGp?k#s?d``s^T=a zT%^*vQVoGFD2<(mRk}8^&J)FOs-O)yeaH$gb#;AY1s4-mO{5_mMI)2HVr}?z5`HnyMzxGL)Em!mF zqWJ8h#{S%e$gDZPzKys?7!N20CS zbt|8D3;;XNGMh7`XFmzRAF1|03Qq(=6NDNacHOBiR{pQs2UegZWJwMxt(v}?K8cil zdlB!thrNjSO7-?44n@1pj)Hz)HCgphsyER8Ux~siQ%{Y0&MZjb8Y9jNxX5XmL!dKv z6OXF(#(Q!JAZ5NJT=qJ^5tKUhj=h8*EL6?6BzX!+*qr`2y1Qu9n5b5bklpImXz_>G zn?~l&*`X29gQHc&g{Z?K{_^UPSD8{8CbKN5Kh~M!bWdLcoPDT+-a2Y)LUWU>zv&R3 zxoKWT>~rp;s=8KK{1Je}HG?FB`c?oe+OTn`HD;dYCkIQ!{4D`4X??dcE4gXy=~B%Hhr#2{44tns^yw7CP~9E>-_Njc1h zap}i)hRD*S%TpJvx$qTh%)XP+pUt~opG~R#^tX*>J=*9mEWFDK!vzQU{(Y5-t8+K2 z=1M5r{QHI^tBH1%_c5Ng$E-Z>&PU%vUX5|_*rz}Qk2U%;2@gGf7egTMOwH=&uGHj} zVpUDPkh}wYVR2ufz?)piD5_km%&Th7EVMojXjy0ty1ePg@}FyVUq(cx#~a@s%(VGx z=LCcZjZqhwYfOK&Vm;jljk|&@_E69?9d?4<33K+XU@kM{%-IxK?p4n8T~QWSiOws? zmcPQQIf@vJeK}0^mH7{z+^_mF^6fx5_shI8+Khja`mMl8$fthG*|7TI{qzF^l5+!n zYfDgB|C->EsjR+xBUf4f*dmsxtlXgxxJ1dM!aj}lX{1-#HtD0Vrr@W^0Yobm)+<?AK)F zK|vzZWFM26S8$CmO?D_$G>|@_XG!VTWCzk;Q^YXjvD}0bqo#{ImMN~mej@T%)qVmS z7?R=|k1U8H`qkBjFx#)KM$v;0S}UU$^N`N-2mJNxs}fi=@BZDg@UQW$^xq5NcQ9Od zjWGV2pR?BFvT_u`xQ|Zd`9hxkdh9a@!zU>^#NQC_qB$HjYj6>KGjw`;-CynW_J+Tc zPCno#@Ra^kkV8juJ*c9)f-2RmJ(i*PM#h`8vdti(r`J7R^jnx$U@j;8E@j;!8Nz*q zE8UIcch#lR-JiV|lB=jCeFw#kH^O%J?(g?vWfe&u58pN^+@u{VqnG&2y~Hw_SW(@( zv%s)Yf}_&axbAx#VoZK zV&^PN$R6r`%nD!c;kZNL)^sB@fE#hUwS_qeBjFa~lD9?i7G}9E@s^miO4PKi@z&|P z-B5(QwfJ~(wo5d&EO}clms-EHi1u8pSrpHz_ASite@pwe&%J_%v>IN*0IU1@9FNDR zs?4>>sa4%i!AmJUte9=_Hj5d|Vg`x1TQSGP$5_lz7BhtGrVhr)8OKaNtz+Y3xy&Gr zT{Ro#g&m*ROd}MPdirZ5o!cd)ak!p7LHQU=hu5`^i@GO09!_#xF`#Fp1wPg$zokmo zDaG+o_Yaif_$)=W)hgNCC$(#8EFS4M!KBknXmqRWpA+!}ekI*)7cJ@9Z>eO|Gq;?T zI{0~oO*9O7G~ug>hyGoHZEcUYPahs>adD66MaO{7T%uuIjmz9y!U>Z-(rC3grK}vU zjcI#w5>4a;*>c=Sj>%rJDbv$~$#H6aU6J+VoZdTD;vGsFb76|@v^gO@VfWWz2Pkw? z11OJLPhu@cO*=6@5vjKOR%;qFu#qh#CdX!#RjF(!>Ey*Xl3iI;Guf?R&T}f0WRKp5 z^gfuJu6GW&EdvYZ0_JH>?n`q@mL@rsH)~@nd4K|2%GgRy%ifa*Dgl6NIjfb#iO6I! zp4<&8X;fl%9fdFcsn)D)sp|?6HzBWG5%QNSLf*I{V zQJ5SYr2@33;;B71|C}>Cn{hiiLugf>jn2|LXWCbWTWkQr?Q}f7`{Rb&QO7OeD{woy z0=J`!%W*rpxE!~mi_394y0{#-ql?RNJG!_Wx1)>8aXY%W47b4intQ_bsIUzJ*2kmC zS;BX*#M$cvh};K~2MH@F7J+9hhK&6o{zWW&@Rt@z+ciNKS^!nVdxllsnMb zR+ty8Ad}^1dHm_iX1sw;X(Y2#`urT^2~`o~i6v{6s&YyA6I}i{W_kD%J$&2p@J9<( zh52K9;RQQm&+r$VQMH@Gv32j3=$Z`&n%>1$q|%`k zaS548bedt!PBe^8XCWF^15pPL&?bnxtZK9U6eVb)w_)gh-RDrQfq^-$Pa?nzg!9$i zq%0i{wbOFuMINqhSJ5mLc^$SgD&1`Z1=dow3Nm9KZel=)2M0YNO_2p^s)EOh&6rpY z%=M!>T|qLl^-&B5Q)n`;2Mu+{LKXdkr8A8S_s?7(tveyxpK>Ug`9xIx2da#s|A+>D z8a2fuG=`r>`n^W8Ivz$Xh649un9`TY8O_d_G|G@G!4D&k$qm5+>@`5j=-Lp~f+2XH z3PzbPCNHGZDBV?IO%2m;)qYby`{`n@^UEShEyY3OH9HcFJE$tQ11KAx_ybYOlPvvp z*dD`L3FFzcaFf!Toi?BAiR`VZw{Hm|IDDdL>ub_8NFn=s!LoVB1$n#>9ZNk=Ry}m} zccCZ*?q^J)x*i^afsM|x12U{{fn>M4ka%5Wwh^^U`Mr**vBKi<3`$%2Wz9O1*kNyB z07?(X-l_Fw(fv;h4^v&L?p{t!cKHi9c}!H;Vz;PZ2MiZ84%WlMu`DJy?<#qrUH97= zwFC(5p}JbInP~wYOVzWI*F*f*yM5{9e1~<|ye$LK<*EA!sV&$qS!KC~S7r z1&MI}2lg3N$sili^T>;>2R%$;26x0-_tL_F&gG<*^?R^$T5#4f+jj|UBet3=*6ErZM6+4M!yXMbfX=B7cigWN7#wqWXe? zAzVC#diJRv3{e%5+!B;`_NA!W$`p*Hm{xfYgN@5SY^-5>EDXRRyudJuroXt_(L(Ad z(PM#AxR1TS&lHk=`Dys-WvaW~C>CxB<)4-fW~-ouhWQ4GyZzteW2$bvgh1yNq~3}Z*bJqN#4u|YuRs1mC~%y;)GN{8V`#+{*( z$#lsdgSO-?TKF&{4+K2Dmu}B&FI-)txCXaSjv$O;M^i1y4roQP>2M2;VnG>(of~?^ zYtxfNOeUS5M|yK9n1HI+raOs9UPPtXpU94J^+U?O&dH1cL>1z~T1uP#JrqtHG)xzO zcWYvi{-$jChHw~@(QuaQ)X5F!ChX0U`)I7Teyzh5< zP|>z7=2S8B?xj695G^H)-G4$nVb(Bcpccrza7)Ek^a>LGJ6B4?y`@#ro~Z|e2+W{n ztQV=7Q>AEL+JWq(8!%+WwdBS0!EjNckC{jdoelI)*gOR)-$Nf@Oki%Ee#3GdgRYpq zF_NCBn??hA_B_CxB!kse`$lRQ*nLT?jEz2uhYW8vUe-l-eK}hnDasZTT`v5L=n5n} z_1r(v*6fli@J5__5Mk^t9b)R8xHzABxu5KJXhq68wYjPK70G@ReaVD|fm$_XmJN%~ z(`)hP!r>u&O48S8`jl`y(&C6ln5T;=aM$YMpQBOu_?X9|5b8Gk<^Ut;6bE|y{GIiD2^reVi z63!?mb$Eg4b(EK$MavOxFiW<>d)c9|jl<~~7R?s;&1xO%`N#Tv8AUIN+P68KickKK z*eis4_@vPc=~>q^wWnFV?m!`1D1b}Vs;nrHD5_qo@PS(TsEsb}fySv?jo8x@lSf&ha z#7dq|Ky&6VNTF?2j46!xz3`h9KDw7+&~-ILRf3?UY!TQ)uc&VE>^4)N+<7G{Cx0pm z!``e#s4Jh82?@4w-{fX`g?U<=cAAH$M1}7mQBH-c)RE#~m-*N_4Lmg3d2KX!0jw*E zZj73L91ZJTH1Ov@eU;klaswcbfyZX&>M*BF(~+`Q*9z&EDb->JJ7YnR5WxVtdUsB4sZqddEB)ZcACNw zCE}fgY^1Q;mCPh0R%Nq$^JoLw&@0r2pbfFS&K=N*et$j=AF2u=N(KS8qze252PF@Ppq9B?3?ZDodRaUUA-%#>{HGdDRd-dC zC*@^$7AU>Ap1cL7@XXS8tKL2LDL}zxbif`O(48m9x4lCe_%=E$t%j#v`=t4t#N@zvM(IO^XAbvxggr;oN7=KQKBkBNV!`k~=vK)R16Si7f2R|fxs4vT z3H8WiLkW93koeGkb(%h_>`p2u&qk%w|H6vepu2)<7iWzHIUns@>l8C~V;j4tigv5f zu_tEw@##_LD#v{k{YJF?P&ST#7M-@s{fVR#$+mKh`lMi@AX{L2W<&{pnZB9vvR}9U zGacxD@-mH>|3C7wg56_@M>05oA{v$5XbK1|oZgYX5C(&xL%Q;-A&DTFaD4s&C8@%} z#Dc`qL`xdA&(U1+S^^~!N{_oj0e?wA@^OBQCu*Ik);UA#Of~0=n}hs#Ob8QSOx`PU z*4aOz)!g(Dvvp3xH>^lWhqN_(^sQECjB$i-XbFI zEe$*a=XA<;F4iJ^3_{<7^{@zFN`Tn*`N7C;L)J8q-r`pwE=$W&Xju8GNQKR1{xG~p znQk_RTi7!}nAYr>2VjZVnu=QJc`pJ+bdx?9e|;&8rir*jpJ{pz4d4N4fV>~P(lYSM zx+OFRuk75XGqMae%{DJ$fN9Qq1~8?9$;^1Zir38SE}1D$wDSEPtw1Ggt^P41Jn3z8 zP|%N-2Dt$K%6+*2jywo5%qHwI2G+E#(a>&_F{Y!*CuaTW{wqj3CTD&F7M>ZOWDn-j z*?n*&)7`Z;{W991e{+YZ{{~GJ-T$J}8)Vrr*6JHmC-~fS!*+f*-*5uIg= zlk3|pa+>mtHJ3Y!5JZnPYvnI}nC7JiNC~d3tJT8g0&I9;I(;Qo`a4J`H)6aYU zFsIPR-Q_r3i7y;ags<#w47W68bNAS|mo3_7&vi7{D{q8-y`WKu8|*wVNUM@%;qVey zx#3rsvu!=29Bb5)Nca2H6hu0+9*4Vo-;)co;+H+US8ZC>Vlxd3--YV+pp`MvXA3(n zT0axDPNUue-W}&WA+v=QqO*Zl|AI&TiBMN~o$S4KdaqNx*J-_mwQ74Y zeHRuRZn#HbF^}qtJ)~gax~ATP&j|_l4(eX|disy#D)=Kin8+y6%4oy8_YT&>8Y8TA z`VOuPkE)Y)z}60cDJK65at$YLsU^kal@d zL;)UAXN47s&Q?0e$X))sgQa@%XB291k!p-claU3`C%Sjjb#tF0UI!PbPWiz;$8jP* zGsJ!}?a7Ls=r4MpRI{RymEny~xI8Nq6cjmw+4qv1Ddu? z|7ks+BP85BZ$%$;o`Ku0gOT?@@nq2s82ir zKCHco8J<`;cq;QFtbq|#%m|Td?!!AKdMD0ofkS6Jvz`|%80_3!iN0^1H?q+U2H|eN zcA+2beiOiL`onZy@gwGZ%OXZCr(1RVwJ~k zNj|JkdRa;%uUMh%G@hW|vtM;4Px>!PTH}uO#NM(^t#JcCSsaF5Pqa59Ze*A2svY8I ze3IeIr}jqD>R+Dtn1*>>jRjz(-uVE!%6Ny8jHApC9U8R`aqt zaGL8pMow4Q#t*=b4qSTIt%%e4mx8X^ch{}3Ci>vOP)MRJbiHp2RVrv7orZ{T7ufWx z?g`jTKPcKB*c%Mie9mJs7Q<}dvK}V3ec=56WA9DiGr!;G^PhZD{qAz^e(t&Fo_p@Oc^Avi=P*iG8L&hx zMV!z)t~%d`RUxDp$mwdStE6n>0Gab23zjPCXeOKk&_C~yGDWDOYu<8O>YVXP#iF<5 zq(+P0H)SnN$Q?G^x&p2QZ8^&38nlI@CvCYWXbbH?MB1`-ymnj^lpeO@f;VnQyhOC) znINZV(b|qCIs1K|68yj7Uea;LQ{KF?}Ac46j->mXOsHK+}9_REq{}P zq&*I7ATUqT53&^!il?{aDvQi@%240WI)a}RC)=Lu>}hjYh4v$t4kH%k7N8sVI#!Hj)m=QFnLWINB4pG-JMp)O}p#ZSV(D9n=D8Muk>ggfcM7) z`9|^n%Vz%G>N?Jaf@^iC1xeE5DBVfKFfdn-fxxu^9cxv2k`)be z%4a2GxUvX*nZYyAP%O3qFm#z4WPtlmTACp18-Y8OXMiP%NSPS;!N0I!_3aSM+83LX z`uQd%L@~iQ4TwW1Z>R06T*aIt#c}b+yI<%b!IZ4&DxTv}=O|kLe!Q)&CGm{(jY=vn zz};#C&#U}z1n*RyXwYiPZTA}6YDj7mGNf`o|3+EY4=QiJVo*(s<>G6!mE#Pm=@&W0 zf1~oKvy^cD7jJ_X6#f@)b#s%8gjCh_^%}0Od*CzG@t$15sgv-LCP3@wQ;QM&ZCQ5#a#p%X#=od@q*uL-@)u z@_~yGAK9{QB0G3P3Bk2?v&TCB8H+;W zHSc27_8(aDCPmgfx&LL?w|%3;pKR8Y`t_|2cv9V37L9T$P@x{PZr#VqHCVS6j-}u< zeH~f1khkqdr+j9#j$EK1tJ}!}6)bq&!GgmDsxHf(`o$<3=Tt6fP;D+e3t-4Mw%pcF z;Al4Gx}N1CgPx5pG61$Ub)d2oT~MM?vbQA;9DrJl;jMPEA9_@GF5suGYsgROJ|gM- z56Yh~xl^S_P%muN|8L5l9?&X8L@R;(>3`>1j2Zm@3Qw=Ylm zrFBp_`8=}Aai@wRkS#=qc;?=2g^>gbIn5f2%@Tx(#gqvYWpS**^hfvm2&fkTq>R$J z<|5l|&1a#cv-t$#1gz0X=V8?QGF_u-GQT<1wPv3*!XPA(_t-v&?+||c9*!Th-kl0n z*6>IQNF~iVQC42MgA=`c9zqxLAV-cc!jt~eeGJg1VkOcoZj|oJ5!X08H*QaojO-nI?SX4k^3W($GJlOe<>4=nX>P*d7?jf5)1?JK)|<|t z4-8@iW1tJ;d>X&~%=c7$FT$_#ar|-7F+>@pUx@TlcIi`S^9VyLn+*u@rw-&nf-tna zmRa!RurB^4#xt~xu2(#&i+_mm#4cPiLp<@OF8*f5Gqfx%70Dy`+o2|KwAfEZ?1smO zv>6>QvJzKp=qwPqcrb+^J&~*YZ^9P}j}E`{@Z)hpd6hY}Wz);M8jmz`uJK5VdW=V^ z-(oykSJE=IKetuqFL41{xWtBBIx;AID39li%gy(Ad^h2z2M*{F!TprZ<4?0Q7*HN% zXUU`c(7Eug)odM zlNlo~RzXES!1m$2%$bgxx}pyXK+f?A>v)|HEy0FxzFdGr@o3neqcSC|+I$BGW==-r z0dJT`@{RJK_Nar`f=J&JB9yf!UxnYCp)cv8OI1(q0}oy+O6y5+=Hq~ zP=idn=_?ZHD|k`>!DB8hRnKPzUNSE{SsUzvS8iyUi2ZUQ^3-r0iPE>wb!NcCeKb5A z$H2pG4Llr&z(Y(6JjB7kL+lJZM7zL4gjA1C0-lrc{PJ?aMGzqA3P^>Iz=ak$zsQvb z4e{dAw2@MHt6YYmgSjn+lzc3cxFAr*`iS#7tg6l7bpgut1|HPTVINRfcZHO<@mi1< zp&R0TFIJ(QQ<)^ zPO%T}M%}KIK1iB__pW^91_UPhQ#?CXQE$dUmvFPC2SREyDm=r0zDB-$mK7c!X@tiG zYz%quq<2K7+f{%sGd1Bd$g}83BVMQS8#F%6sSTt71K);q2rNR}LQ3Yqc0JPJJ&=!e zX#e&PN<^;-n{u8Tl;OF*#C$ zO8y=MNcjuM)Xkz>z*;1~?0ET!8Y2MJBw~a7ELX<5o`)(y=i1gaI!AHs8fy_)AzNPHcUV;UYX;Gomr97$v5;rE&l9%)REV-^n zxEeMnnY1TJ$a6F%tm_zo0OQacEnSIvkdX2@CamiplKloHl2!!?!Qe>3x=s>^u_co5 z1qpf9F}9~1VlqcIT&SWDoVN*3W+Y7>zY-9bU#r zIEDurl&IUVT8!)#I`<5nd(kO;@5q}%=iZ@npU}B4ob$4dI^AYkh;q!B4_7$)SLR6uCvP7Wkaa{SVBEv}cO9HJVY zx8euIp&K$rK#xm?dF8)In~c$mB3}*e|R@pQ!_O z^}M(|%qf(qo{9NoZW8JGG4O-&t}vUind&XFklBP?6*PMLg7vnSUT3H8OX zrM=LoG`lDvZ^efWXYO(>lVb}#mtbt!(R@6btw}`lmpR~yJmWg)8?kOz`ytvJGgu88 z;PM?#{Ri9-h3c1t@Fc3Qu!DYMJhWt0{ju>pPtOa+^AmbrG@j?^`H}I^-dFY4#`9Bp zer7zsq(|&wqfi=)H`FdMOjRN6>IZOkVu#h6lk zj{i+iD?DV4q~PrJeFDv!4YSc~P+bWzB)_p|3IAs5);;WCpbgs@o?tSMmWR3|2ob{vE$%Ogw`E^+DS9)JRVj4Vt<5( zMzk>>Vs!Lin@;#p`cRh5!{FnA%!AB`?I)YZo?6C1HV@9@4wPYN1k08i6?lTYu5KpZ zH`nDmgbAn*knsV99>Pgm@>usqAk$4NRXp-(UXgavnHr(z58Dn}wSLd$?{8Pafs!b!(B<&Yf6zoJY z+i$e>a~I-2#_4WslO~LvEq9njTBBQEz(h4}d80wyrZ~g&%rQ*Qb-*)TzexCBMk-l@ zsw~x{G2GU-8}dK4bpPuO3rxvQFSt}^dFCZG%Ogc?npV4PQ)zSNaCrr1MMc>cnD%C*<(&fv`3A2?H6q69VKmL$hUY7z`j#9oH>s_l)^abd zg7VZr+H)T!MBkc1C<8|_ZXL*|)MuZMH75DCp5ur$GZG%aOinpkB`!Xys z)Sf^MO(SqC*IHVTw}A&CO2#zRo6k+K4;$$nzR`hB7}GnjAse+C_kFG8EqG@n@?L{@CAQjurb`>3eGuu@(W-jn{M+M6i$Y;CP6}2o8_Fi`h zGQe_e1l?Jf#GafK^kjE~p6u41MnLPk4Ta$q;i>a6Rzb(XY_NF=#A_E(CSUtF z38!SJ8*ziBzWN4P`sx2jAnts z0X>1{8-r)%4MAs45X--azI45fj`r*HVqvBhJKdXUik;=n3X7cyl%46#^rlPAVYAoD zs9}0HR;ts{0;zHl11WYz)t=9>z#N!jZY#`n{Jl@Z0L?W6l&ZRzYyGXTb(5_g4=6E> zS){>P=KE>DYHL!}1OXv<%PAn*4Dmd`#m+8Z-P0{Bu(S!lG-Jz54hbVb8`OSi!s+bR zd#nzu&m7cY-*o=rgu-vEyO!wLk`TM{)|UJyg#L(qnPyyA`U>Y6Bz~^3RGrTx*0iMM zO|SlJHe*bEb_p4Q$^=om?rt8ZNa8mZm*rJYseSYK{9u3AH~9 z{WRF}k@J2!U;|V&LKWNGyn17qiKd@Et zxzJVxpZLkZ_O6PlU>X~kPo=XnVY;V)TfAxtp}_n)9N#|^`E`W(6$+hvre`;pmMw0> zd)}x(m#s-xSQ9+#{Zppw4pW-fcDzo!F8qiX{F`tz>B3=7`$*4bWH9sDBeiRXWCd7}aj!9h=@Im$RkO35W+V@=M>7S;Pptm3$c zk?o3j1p|Op52J_>tHdNZ&?&SV$1|r^e@PWacWp%!C=&sqhJCB=M}a`H^!^P{o7bUn zR73kuhmgL(<`X7~<8(Ql{nqx#an6#h+P~zb9>ZGw$?^J2O{2-&qIsuu+>9QKIJFmW zk^ElN2k+0D2?K#&3bxkdqBu?#2BAo5-jT*5Zjc13mA%T12sJkLWW}UeyPO&y5|evq zs+iV8YhV>z`#^M3wO35YzL+wk!MreVD8>hdXYvuld$8Nr4ioJDva?Y`&(<)Dt8Oi@ zD}5Cv5H+ls0jI)5$HrVOQ%fqy0V=6T_dI3<+7zSFBQZX^d$;%M5-p6;2kH_vt zNQl0vSw7udoaEcWGU1EmIk3P-&H?iZZS9gQV5hkoB$TF{t>hU{tPDiYc)hA|O-x~( z=9X$}Q*qJ6Y-V9bNuyBsEXwiiB^2Mf!_P~tFze;UpXfI&7v*HCB zn8#I9Z{~)zq=mDbatV>=fD0k{f(3Y}oFS3{f+2)RIbxa(2JRh{5}3U#lwj+pq%9=7 zUzq23v%Gl`(}`TPpdg2IFtM&(Oa{r!YJYkL8o25e~Y-$$%>E1MN zmNCCF0N;RaD9}6G;8x>TjyFRY8(88V`d8Xq^!hNN!Blv?vc<)OUg#|x`aGie(rJ%C z4;`#8o%S@UoYPdup#KYt%BO)D_ZDp{EG`z7l%Yz$*jo}AgWI4#5C=3+~%gZwyZ^&C7sod_~?%rTE%e{-^El0`Az2)AJEqM=b zkAZKXx`h>G@VqOq|5`EMzELt0$OJBk?|#Wl z)A1j}ac5iJYrZ`e{&PewLp)xws)PS`z}=7EeUWg=3L*YTNdL0q4O(P$tH*+0G2 z>@BgDr~JU+Osc<-s;0@k;!5!iXunyOcqoNSei9^GZ`s2tXy`9Z0rKHR3(E9i2t}iL zsaJE7F5uC5vm@JcNCDo_5yr|TQxk=!L<(by%Q+o+R7kIY8bH`phEkDKIjje`mP}Ra z637`KlMVQ2;@APe$(z|PY72>0ki>?YyzWf)AMdB0kB-5+WZ%FVVqXhPr(knd%+Syp zQVBa(Jju$iz#Ni>F$Y*;TwX&C#_Co&sRT^lwaW|5YtapQvhotq(;TRR1A$FD54T=E z%{7h~*A43z<_Q+QUL=IDawpR`wG+4~=d>AoI=BO88K7d--y(d&N0=AT(40BpO@sXj z-qMQ4LUhkYtOAv6DeB=B?u~PYZajD?qNRE~QdHOR53N-eS|e5QT8r`)g(1y5`p8;e z%SM~+I(doD)9;yGl(Ae0?qMhoj!Vt}3ZO`^Pg^LTjAjq?D4afD#C2-gp*wCeZ0KmR1;npRGq9>VSH{NUp8N z-v4ktgm81>gV6<%u zDp9%|$OPVh0GGK71lLMgrec%KO#(R#fqWC zrJ(O^L~IC8q%qhZt&aM^!x;Mh$)HuZV1?XgAxm}j(FNfg+PacXJPwp>g=dv|Q0-J{ zFS=V()jd%DG_;FcdmaJ3Ib#^O7424mC#rB3tAKqKc}0rC4!{mW&H)%W=Eas=#MGj` zv!m~dv;WA<=ltJ=bysVZoX2aqi;0%R>HD8A2~!v)z2#gx_Sn3^URSozjcEuuj*K^V z0sUR38+voQ@KmP0-<5E(v=g;T_JaCO_{+eAe&Asi7{s|V zc~REc1OCtIe1Wyaggi5&JLUIa>4b?eF$8-Tsumi8#Y4^?!dM9V0PCPV??j}TqP0B{ zk*`rUjn|5kVjGlq)vqMhim*iNIZ{N@2Kk3rbcB^-S)Nop!KGpy1arCaa`5+&1pthR zm)pko^zfovCfnLnnn%QdyoX&y@-OtnK1A%n@WR5*j9?AA3u3HDZ(-*+a3dEh;?$T} zE+^-+x^2Mv7T{ATJ}OaigmBcp;P{WSFG`E|?%R zoid7RAwal|c&Tshjw}CD83i9}3gtV*h<4horGy8>(a0#8Kx9RMk_fpg1r#venvpvz z1#42MSWw$WM7F#LbmXo8Nu!E;BHPYZ@)$HL7YUn)qleb&qv(2$AjNNGvsDBsg!oQ` z8H9lW*#ZywK>Mt*S=i*1)Q=&xTsR^5v}sV;JQjY?bV%)t$cGFF?VN!YiBKU|!5J6; zbGqSOi%}^QT4~3dv}|w+raC58C$?W!2(gk+kx>e<;X1A)phL1X2FpPii|`OrFvB2^ zK+Ou(pl0Uz2Ix_%c!K0-;BK$e5T8M;z}U(JQbtOmeDtX=ZtoH&a_9kAKWUMi2+gipZB{Glw~_anBs) z*c`Mfv*Th8N*d;(J7-6P98;M=$?>0N1|^#Tx9BrOhXA_DR9D8DjNp1^h zI5`jSKYR_Nijoa`Ac84w;xQ+i#zG69@@rPq8mt$QK3Vp?$n%FR3wFhC9R{4)6*p`& z_Px?*`wj+H@hpZtYu>{X*}B+rCTG&#X?XeYxHCft1)}R@D z3plichzwT)2wR55Kn7t8@bsBUK}o*EHbr8af>@0G512M(LlRZ$h>DnlD!M^&txZj- z(tJ*IXU77bmSn1stcgi0PFON^;PW#)^2$g_cu?I|I$hd~JoAu3s*s3_2oFY<;ni*r zs04$@r4ccBOq+TBN^wtWP4bQI^XVxqLc=<2emMVFiO$BBFhAXC17*Rox5O#z<4k+X zx=(bb;jCA~-(%xIwkf1|rJs?RLS^vrmRLsgl@Df!w1P zvxVjz;WGH#-8{$2fx4XeZsa}D;-ehJI{J=Zms8r);(pC(*=*f+IQ`G7n|N^+`stpX z_7k5))qdjJ510oeOMgPKW6oCl`!EXvoTkWwSWOBI?H(*7I5M-#iRiRO&oEh+b5NJh z?X)g@T2<>p6$n$8BQ`gx%QV!58W5azoS`}YF2L2!K~HYtl}`Wpz$^2o4TVR}R7umh z<+*pf`snE!a>qTg8TK(9xjo_U{+ep<Hct5Wc0{X|$X8)=oMQcp#8Hg~um@$8{)r%RuI# z8)oDaXm8r%4#-4?HgE@L&na7Jq8hL8c;3*#60V0+g?3nCZ;$LOahg()iWWLrQ#h1a zi!LArQOrik2!N$FPoXyLx*M#o4M!kRp!}@{LHL?N7g#y;PS>_VH{`G7-5{*>CPjJ& zBD7#9OPSe3rxlV*uScIIY(j~XAkl&3#Ot<=g9v2cerhfvcdyIrS)pz*a5YDw3F9jR zs3%U-sA$1?%3AboD?qJqhSc=lU_L(MQCE!4xS%&aIaL1kH8N+pu@+f z&vp0~>hLYxR#;RlEavbnf|5hnYY-X)!w01aoBNV5_r+)vB2IwbbdiboWhnt9*cGysI!_zaX># z)1Rh4DoYT;ha?*ugoA4t1wk;I)});3v}6al8;2Z~XT#C=Avu_!zTkXbLn0OBQk)t; zVn-0f0N4?)`zMfJlQ}G2lpe;JtWuI!vXijkj~f3xP{NV*><5Q9U6X?ns?zM$n7dyYYAicXV&XNl*fPi?hvIw`tH!-a82G!hHc7b9!vlCKQzSCi1~7F;ESlwm$VOF zh9m}WpWTNxtL7gmwAgI`qA*msjdx;mGzZclVBEmP!Q0tTtPK;&NuJYGO+p|cRHUUm z*}RW)Dfv8k{5=7aKC5Kd%o{i_1aIJQtqyN@>uO1~BJYeBeYc?4l!(@JyAbZLr#hWW z>{~#`J9FP}&!saCOsY8#v7IVGfnDlbxahc}_p-UaLeph_51znKjJ+E>iR0K)pF>XK z(&o|XIAb3ds)9XO*ofChOo8C@O?GR zJs-WYiAM!_C@d!;XK*bzt;lb4y%s#z;o(HNbPy#zFgqR|PBi1xjgN*S3m#HJ>J&S6 zyUp1_jZMGp5|lMjXaVU1P9?`lgav%mAy^c*W4~g4W=wTfXcHe@Qg@<)L z?LCphx^90f({}4&9aw?zuud~FhjoZiR5SfKkPpkDvIp6VoRbYs>r5<9>v+)tQ)LIr zv76f^2D=392HM=wJ3<@;S?el*<6xQtE)CKs{ggAlxlZTqmQEh%HF~ z+ccqrvNYUYn=s=9d&akX!aMKMaIS4wYn_KVCxB$GovO{{T_X12@c>}D3gn>r1(;tv zOaC+~m5$t))eXCfy#^lN(Vh|pg!{6rpQGijXWk?<^M)j^;r`6f>K)ugKZIpfQ#-mvHN8J?K)_O$Ri|g9& z#tf^*ODSVX_~wF?PPpd=u5z zkt@^;O>6NCPo05_(HAk$c%DV>MHJDTy>Sg8TRoD!voDs;fmXbbbvS)oNQnuggsPaR zyPAR90}~h|hR`E1oh+AP$V~um{*KBkuA%PSSfV?QJVj|C_t=M`z8G{)X37itd-Pkp zVgL${4CzwEsG?nB{qc__xWhSkE6P@o+cRtqFs zsx{Fp4_+&(1wPAbk!pcT2i4-SH>x%B@}OD?QQ3nY6Yk^)SKnSf%5KiUExAyp5amCf zQ)8DV>VFyR(f*E6GunYTC+*BgHloajC9A;uXV0M!+&|-zrJ6Ek7k6X0iz5-v;AC6( zlp>O#avT+8R3{LdH|)iL3&I~BDWuo+`Oe-TPL*NFrk2@6Z*r)O*ru(<=1&$ zgL5tCahZS7)m#lVK`|YsyaKH+`x2pOZLyOg3SS8raviJi)r-_Xov6YWkijT?L2if5 zd`#i%6~d@j`AXioMqN@)y1u_8$8?BmGF42l7t&Eyi8XlwO)g)X%M9r%y zRP*99(sHj=wWGM9k7-9~YSE5LMHvsE)zE!7=@#uM)vJMal+}$o1|8OcZiYfvpc_Rx zwG!dvIIy6}TFoIPs7 z!?Cb7R@!O0<5)o8a~wVnUMvEczYjGR8+#g;(963XwhRg-b;39}tF;W~P}&4~ECnH) z<4&2%6P(X-SH4+p*5}e<*{=Fo6fh@kF2lRStfR6fE1a}H{YrDqUL&g5+`!1GCh?C9 zBiUjJwwLO05jO2#8UU1J4UVKnFR_s*2^Fv#LM|0J6eBfFexK4meM0lIu0hcpMXn*gS zuvRwtgP484;;HYKF@z@OtZ`%B$C!N@rMYd~m@2>}+z<<#!@!NPz;FoO$(-oZTS?_?$ataxg|Fi_aMn4dlG= zIT@mXoB}@aJ{m}D_le@sK(@$d+oFN2yw7Gt0>g>#lR`ve0@CA?-b7;ptnrCNkr)|A zpCcL#;|OtDD3 z%&v%E5H{i$v{e6<=!4PO$WPX$=20#;K8anbx1)42)-u!L7wh113P<{v?wt~a+ffIX zS2&WyOmANl?#Fd-Eeb~}neAN^h5JbzTp_7|q?{fe&51yg$KX23z5B56W~1N30J+kx zMD1y;iCyxy_7Ij{;SJ`vrA2TojmNXRl)Q8E6!-?4 zR{~;K2vX7Q|XV`CN|^#Qfsm{h_M*C6`_ghX@JVP!}L_&iNVOHs~ZuN zDdM6=^*FLS8c@1V1Ssk1xy%-}j@;@XT(x6?0wcE}weaxd2@S6*IqrdiO78%t7Vwvp zI+=4A*DaliPAygOr(t}e_EGeI>Fj8H!hxhh&vD#@JItn4H=`n@b1W3kaMl9m>+A=x z=t0wPq3Yd$%xQyQkGoL|O#`9m39C?SSM}{={LV+hyy(9E79*UkZAP0mWsI)M1n1yG z^n8K)lp&POJtgdEwk9{O!T?}{05nsv*$iyhPe*3{Zdc)M$QRJ5Dlc0_?`PrNL?mNA zXCR+%$XHf8z~KV@TT}JfA?5BEhjzp&7e)CX_KS1S9bZJxx8OD+J_1nMfd26}%`mpZ zun%c7N%gkA?n_uMBzexeSpU)Aq4}UJpZXJ3PB#zYVl+bx<=v=SPy?72O^y4%Qpez(;k?7-Z3VqXzNZ-&~ar!2`l=JH; zoJfDi(m2^sjiGXQrj6TZ+03M>*g`kUwU`_fAN80Sl9ZI}ZRAoJq?~w;gi_8YNh2Lu z3Dar?gFOYDN!MC|Z$eX?^4_v?q~vOiDE;&Sz=TO*yz(K7g-HNw$?0%q)IcRoe8D+N zn#|mKpOgE5%KfapLL(yxr!}fGU+fBov}g|Z)Iyb1#{UR#=xOP1s3SGYj{8Kc$(W0M z(1&iWychA27ix02_9QRVY+MVezD{4@`7D0~v-BB;l_1fHn1l5nLWHgxNVyPsZe+_f zB?fku|6QhJ*!U??10G}y)p+-zQ%_6;145(CT#r?D-{pMhGokDrq6Oy}p%ueyS3*x} zgAoww%DD||LG^I;AfP+?R?XxvuPVgSdXp(aqyN7yZ&Y{-sk@XHHD+nY9ZFM>Nysu* zdj~{EraD3^u~5lBxAu))ft)9y4^+Z3ax$G7x-JYoC3K!jXUE7H5)xp?dU}&1r}5J? zaymX>XGYh63XL9zKgH7fbvhs5mM#<*p9{Q{F6dAuXcN)-HtU-x9nIBGqz<`Mx^^5u zAaI952gOFB{52D>&*AQqDawbwhMIe_f!brn)s4>nMGSv?OOB}jRRJPI z^XUrni6-aRM3c~zi4I8h2_k}yL=`f9tfo5SjFE~=b#GLA^k1+nD^lSO<=_uEFUB+o z;~Z`(YIE2JI7Xgp-6Lwmm{rL6eU3D|4HtJNgahAZ&IWX9?!$fQ+K@2@KoQy z0DLW|4G-&=i=0=^;0J7)(t#{>S`kWdhr$IUn^rvx4n@xE+0!^|F9X569wIL+6%KNG z!yC4t(1%lF)xw=#xs{RARjp1YKWy>Ls6EMIV2Y{w6da?61v822f>7N|B1Y_X;01IG zbZ7tsJB9sNl@akZq%IwWKX88?A3UURiQq46$(g(l36jy;)3h+z)nPJ&^lTREDl>OK zow?Ih&5*i?8E>wgxuMO+;@0(hp3JL_?l6h5MGI16gBHUi$Li)Rms8173) zgl%88M+21>?^5|0gUmfh84liqjMCzz-mXzvj2n;vA%^Xx!R?agGDCLWu{x zK|E6%1_~*z1f+P#8zK`NrNuZ~vsri*ON^IBh%pQ^(F|85B*uk>q`yle^cU8gNPjCz ze{m9E?`sZuI*R7XW^5F3RTYPxsoEo$$}ln2?+w&$C5A6{hdF+trYRKG9p+lfeuZTy z=-IeBrjLLMlE|#^R`jDA7gZlcMoPi=R1j}ZXnL9~xPW*FXI5qzamp~|uz>ll^i~3; zy#?+Y23{=;kd%q%KKlb4fAxCRk^{nqw@B)wg-RvkJO3#Pj9& z^ANs&#n-M641X%&$Qxo0V;PHvLyOOO2LSHDnqb4pf02Ltu3aNUpwWGeT_KcI;(DIaXRa8^vXRd4?=2#2nG!NNx1^+ly%AuGxRlkCP z&6QWFl^}VrGw-y!`rsxrg;e3Q=%0kH)KqfqVEh6s>uMUX>4guY7%(p~EcXQ_gz8n3 zOl|d*&@?QqMhb*lb9*K%k*dtmGPyJN2oWiB$6T<MjV$9y(H}w z3Yi^km`poRDoPMUxeCMP>9E!71_7kWnB4XC`rrwn@qDX#~rUOjr3fH5#e-2-hYTnI7nxc>m25GJkhKx8szLu&Pe;@c)P zJ%D6DjS1DN>KSp5a6a1banv!KQ{ns$gun}eX;x35sXkfs_d;wUqS$yRdVG`8*@RjC zwBwV4Zi{A^ctrE zPI@4PQpAoNg>le%{{<1JGz;jWBZh91eml(KWbzp{SY%EmTv5TZll{2TT-t&m%#{}> zpSiIv7Ck%(u_SN(u#hbj4OJB;B54^3u9d(u^Zrt48-R^`i31gc%NqI!YG&m$v}^TO zP^TZ+@icqP<`3Hyi03!5!^aXC1csLB$$G^2h4#u%fFV|AaV=Sfg45fvFmFfMt7a3jbC|u|}XiYKC^;gP@btOw|b!TH+Dp)h$n-|9#+8rX+%(Xok zV9mS$YvwoTd23dgSYtLn^&RSr%`(86S>s~O?0T%>{lC?0U$AWP)}P|af(8XxTv^bl z#!1^m5rN>MBL@kOD8%sv%!VmYPU8b3P=_h{7$Z=z*2Z@=g@u(1Il9KIk_^Qn-~d+( zY+i+skhF6DOQK}LNZ4t=xv8>0QY#89ZioU)A}Fv6%t1#`U}<>-f`SmMmf?D$_G?Hj zXvf(tABlU8%M>?u1B^&zLl_Deh#R}ujtg*OS%4e6HR|c5!jTQVQ{@3ml_`sL*w|bH z^jI`5dc=lsi4Nf|jfT+lni)c47V1nLLSq&xRwG@#Bkb!?Wjcp&D8j+QdZBW#%Of1@ z?!cJcb&%FlqP(ZKCkF5(#}1&0i_PIZA_KU>K?Wh^Us+!3t&9xdD#u$DA3#bb+;YWR zF=lX91%tD@w@L=L(HN~%uK60w-<6F92z-@UKXkh6p?$q#OkcBu$bb)hM>}_@ac&`f zEo5Zve3SPkh);#q;=C{*wlF4CuHd1J6vWM$k_bWfR-lx(w}Kr^61a~DSiOCe)RIgi zW%rg0_8Dr$%FAx&o~Sk#QSLC0Ua2N)FR1>px(Nr8z%C1LRLMNtt>XzWt*xk!oA z6j6yNeE|IrGv7SmNH(RVY>Ixf`>uq{`H&O*6xpIg%ayFgCk#qPlZ$wMI z5|r^cJEU#H0zWLE!-TBy-zfVdBEgjKtmO zk4=sXQF(2k86{pkbT?jY>Pm508$wV9gScO#99T$0P^JV5aceQyLN!g*(o9 zDQxr{BIG1f6&OYKIxQZ5gWa+52Gc{d7<&^(+}*$+o|#r3MX78ujE&Scd200;L{&Gj z&%n=ZU9Wq0JXbT5Hr0CZ-kJn=t?_2Ax#Bu7^AH!|EY$0@@*^!sN*EAYx5PyGWLop9D7 z?&pk4R^N&aYEG37wX2t^S5Y*s>z7f%3)e5)eJx>~g|=nUtX5DaI2yU=?Urnb=dDIs zJ?5^E4`i;tD=FviD+WM&W&=M>BOCd_>#OGyO!cvTj|ub(OM^wOH+vwU!5gmt z*8u(v%YQd;h`#Cc!R^r!rS^=`*=d7>8U+ z*J>^duCB7VVC9lr#;jaU z5Xuo;h433z5RPE6(8!>Euc+|mU^)2xl69x4AQd}sEBDQl0O@Whv3?L;pq1ql+>IYM zK-BmE&|6vrh@o=d3P8KN8?Ogj&JLrF2Y|}pL68$eEf9~absIYBM;HWE6G8AC zgk=0B>!|QAXYgWuJ_3WZu$}Q!4jjmVmlwV`=`2OZ{8Gk7q@=h;xebI0+$C9Xm=`3^ zA~Xc{jjq91I|;eAacElk^*gwiN-BpVTnc7yvidoM@=2BI-DG5rXi4($dW5@11%X@^u)ta6cht&1>FbODUQDat_aHe?`K!b{ee{VI?{7fBu>CcgL$@i z5WfG+J_L~_g~YT17djn2A)6BB4hzv7Cdm|}%@j?XEWWrVsV(mFjGG?y4?gVF# z6;A6QybIh!N9jQz1oV{m#d`D407RL|k#{N`=DLu@?E96D=dTfM*M)RPzVbT^HB4b3 z)V~J>iK;p%a*LZPJ%&v473k9%03P3z?#EdRiE&@|J+Hid>5*_;KKJq|OMBtitLa}m zm;WBk=IN^hFMkHU$~%z*0v4>^>zL(Da7*-sKY7~37Ny4xNM^{P;(RLK-gV3+DspQs%KFZMVYA9)I{VMR{NJ|CiYR<-_3mqPX^h>k)CS zfa@V~?F!eU;+hZF!{X|L>&xOQ`g@~H9bRR7ZsWE(LmcIq<~)3VO}t1{Ujhc`CiE~W z-4-!J@l92a!rvOsRqZwu=>)0u{)b7o7Ceq&nMD6!A@co=fQe?7fx;P0s(D8@46K}u zTIoe;t<`;~?IviXTiovGbh^2Zvvylv(Y)3o1C!Uf|5RRV_p6eZW>bUE;|;15)M;Xy z*2%ViIgrEjTkUez26T$~+d5-Afw^z0%T0KxZ;37JqyKRGGtM8dsly~?S@pBDg!#gk zff!oUj~Elsc{~k~YpQ$TZ*>*^;8F}nI48I($3C%7t#{5C|9YJf*HbwVpN8Ciy^kb9|yNK00hBtdB|@Pk{?J)nOiOkCbo z3Hf>SMeX}U0F9~M0XLU^g3y#)&Ohin3zCr~Ei8hhx@*f7K$Y3W-u~;W-$dDzCgOaW zt;Xu#jHj^aEOk=kn=e8mnma#PLcu{fX?;=FlZ~CM4mt(*^V(%i6WP^iQmO51obHDy2~U!W7+yPN}xBF>RP!++gC(QxUYtwhkLcQM*T0 zQ>qi02&b3iUU6zkE6Y=1x$=05VNM4Plfz41QKQTj+u%0Y)|Vcfsv&PPc&XTj?JKbl z`_DS;g9S}bG;2$1n9-~q$FREG!)ZNc?bzQx0^O=xO#k=fW`#+BV7RUJAX&*-JLd3N zl-Zm35XvUP`X9w#oN~$LV+Byhpv5c@6RVea3_6Co>zCnYWwvlSM`3VlSlgcjjliN$ z{Xq_Q5dJj6``}lZnCn#F#-5Dw#_#rl7;&$T{UJ2vOSeNF&@7vG?9)8|3#e4oVuMO^ zN&EIg9)DmS&-?}30#!M<5q#)P^ftFUuNUc%=FEBKU+O{V&9zT>y-0_G;2uSjb1U+M zEFAPQ*?olT{{n^UENpT8zgQ1AGt{-mNrVNvrH|Q?kJxdh+dEJl5akCo{)vXHtb@j) zMuHeglniU=;!)@7>p?VYc*KrL&W@%z)L-&59}PO>yChb@oxl%W#e6YU`8Mb&Z&N~g4MYucaai*Eg1YVl)_h_ll-gYJGNf-ZHO#bc7Fl(7vR;?m$A>b&z@ugdNTSp1i8i1OC;*4Bn_87 zNoP9Ut;C3LP2iX%jXPmEQY>hDrCeyRiEJM)(}|?SZcfOvyoiSWnSBhwf%FQ_Jw&^6 zI=*B)FvNnS5Rf=0;pgKwf?wqV{OQ|_KRN%SXjgN2Q{ThlyH$K=^l|d!{0GGMb_2B|p^Ud=lmV3+wIa7y=BJhRfiI^Mwrb9o<)bnjTSf&WI|ijx3Q@85hL@*h1q@V<*) z-W}7}P4pfUc!%jdHt?QLFYlNs@CdvrizKb*KjG9iUx09Dlz&IB<))jb{{9M7SD7-6 z`EU@kHWsrjh}j&(pnaBy{Z|) zv9O7>9r+uYo%TO%J)qgxOlE68nt|?5mN%sR$83~H^s=>=H0GGJ|4kb+(319_vmWlp zDc{T1{#hXxrTt&nND&)lYrof+qW=d(xPHeCs0!Hg=GytdlT8rvau3{&_C(s7DD4Ov z%=TW5_`m++?Onz~)}avAmfbEMZEr`S){H9E=FY^QUuor*r+p5AKuOc} z)B=u~D>j?<1dpT`p;whdW>`m$ZTU8c#^2Bu#i93M;MDa`#HMHP(r|R$rdQT&I?TEa z6NFI^dS%_F!+`v?9)#X}yZd^P4h0!y!K1&nIPPD9wi&dQm_Ljg^KawD`1c@>ct-wH zjRIe76qvkmZ1U0H1f`V_9j)OX$Bp^xxG}E;F^9!+`_s5Fe;YUE)gb2FSZ;qFH|DkR zV*G7v{=M}X`Oh^7RKb}Ln;7`$cX?kI_-pmx{_Z!84Gb5>G2ng!aQ`|6?!cdDwS$#39^+5@B*2ftpD1{+(#B)_%LxAE z7~d+A}8%6mab_-MR<m9(S7HV*c#{VCQ% zHj}pmHaKo?)>e(Po+WTj^YKH@Snh8*ANl?vryvfWWY%q;J;h&u+_ul2>Ti(mH2(p9 zwMo?3K+WdFn{+X>?a&*640EB%FmoMhJtAG)26?QYGPW&X$<5t6i13Ioys@72CIckG z)nT_SQW3Iq*xc;shNQ{)Y$LW(L~8rYL zC*xN+6@R3s@|7B$mjQurq<;$CN23Gt6@u1$aUM$Nhs22|R-D==#krhLB51yXt(&4! zzJe{WQ-iUGR7-`{k7@}x^OcEo&eSpzbPuTeUr_Jb0s;9AoyUsvMLJE5cx)u-ov%Da z=T?E>u~F@MapJnZQ@d51H`DnYaekD}m*8xve2~u9;6(c_q`MblxqSKEwb}B0XYFA5 zR%?gK_mn=0C~C)v=a@bUf{f=tz22ZPD{EDOsMOAu@1ok}_+tMxxAsAGOsjoZVv6Hn z22U%gr_(>jNpD@>1sM`AhUEM<;E`TIf<9hO3CR;l2qg>Yu0p0mtdt-@HxfVyI|w-q zD5+$ovedJJ^yzNAndD9P0b$4r%^alhp2ZBOdJ!9IPc4pF@YKkf(ZZyMbEVR?}sN)f%+z3?Ua^LLW@`S|j;+5EQR z%ine8cN4zR-)->Uhu;_QdmO(C=_w!h`aV71#-G}uq@UT!6LcS??g!w`*0y7iS}M#T zTf0r%oN(FN*6ARrw@bhk5+KB012#**By1=ZqU>jDxU6P$B|(zw>_q^fIL} zc!R3AFzMyWuvvo3DI%H`iw_}A40J!k9j6GHy?Hv=3?Q|J9f$&M#q86Hd^x84HRD&r zk0k9-{N9G&8Th>mzxU&JC4L{r@0<8Z_j8U{GN@WcR;avKJe&FsNB`IWsL&T?*_!rhxlb{k4Yxp07NDyfU>DvCifzpMx7cW^?_dL_Mv!UMrrT zs)vL$Q~R4_u$gWs(*6>?Q(K07@PKUf4ay(Lz(B(xEVI0KrgpSAmTTpD+i=m9FK)rQ z#J7WaXKDzIxQ1)OPA3s==O_5K7OcnMwaP`_B2a`0w}T?6oF&uW$+^FHBIdS^A;tj@ zS>S;$Z!tjM9D+929_49Bd*x!bnc2cPNB#b>CwrN4{WNUBL z@WY|ck;zn-VHAiBe5{g7CN~w=fozQEX=v`CRu)AZBUlq zT=_Iveskq_$nu*jW5s2Kxya_qSaE?F#L567$<2=9O3sZ9wV{?A94|X~g8CKX0$PK)FJr;ISAn1L^-cmOE`lDtIhL z3`6=mTIzGB{YV9m#fYg$zv+&8a9Wg9@K}r(kMuiZ;IuKR;ISBgHX!}wG4P)T;ISD0 zaDuOof&VN3kHz@!AvldzMn{BZEwwVS82=iAH_xmGr>#o`kHz?(CHS-$I1OMbcr3<$ zl;A(apJ-)h6;r`!4Ko_^^Pp9)#L~PJ#Qb|K<`+SXcV~TWF9$I*V==!BVwT2Y{yB(Q z9ma58_(XEW`2sJ2k4hl%dsNUp5=hh*Yp14Z0!ai`e2zd8O~t}#6q3j&woRjfL^-i( z8Vw|3i7nG;Akk-3uqjdykz`bGCKAX#9+fVS1hRWarMDx2?AcN2=tv+tbyWH|63G4> zmF|rMvMWcWXCr|`L@~D-tvu09EUiWZiBw`_H5y3N5&NndC}%JKki3QzYCL%jN9qmb zH3S+fuYn;CtcilwrC00ZH3{b^Q1FDrn=>xfVZ1Xg>^uSroK{|x{+29{CHEmqKo-=) zZw7w5;I}t^N8+~*KW-VgnqGq6)%b14?>79%=s$rUHv&8G`xSm%J=0iey78NXAD94V zFZ>R{k0xf$z;7ddm3QG!Z2~p}g{BuSg}d)3NLd@yfK3dL1f*?rC&$7lMM@>ApkVvYIvQvTkOLTLe0{2~XbC&`)8EI|gQ5ry*jyBQ+yf1**Pat-jtI@`HsPY)TtB4i&N7kzyxK_cB zNOFKfeUa#So+3X*prMpUC5ya2*^4wu#Zy7yRHB%GRqG?b{6Y`l_xPii1j$3NNbGNk z^M@i{ls=l>RIz#_d~+0#d6Gw6EpU;{T*<6X-r1z{hZYxV&M8C})g82_)~BxOBEP|vi)4_6R9kmxAG5Eq^9@F4!y z&V=?@bC)|jM9(~^mBS7BPvG9&x>L1d0GdPe9yTZ~x@UO=tq6mtp4O7ds=}5U%tjq- zT{BXbqSp1V^>tkfxa@y(UCT};IM25IwkIlIdM#R)tn*&frI~d><5t?nv7c61Pp*hd z8&vJhr_u-qg$eo$a=F00cf`F<#Jz9C4Z@-DqINi@^K9ScOy5a;Uys%|>C8fXCB7J~ zaJ0TsSA(0b^Jc*3CBKbWUa0p1^?KL@+CX3FUyykYCNnl-7sWUT{uxJK>2DI(=C8-R z^>4->RnmiUy~XJk$+wh%`amg-KL%an@yR!cZyFn)aMqySt;`>)a-D~uKCreWw-@Dd z+z5xtm1`&1_Dx|NZ!@N32%)i+LY5;OsdBrG({vnFY!ZPS$e(n8+p>u}FNZns?q!$* zLwNsELx=?o;Z;lxAuiZ*$JU84ysw!WW=dOI;tXSWg)=qG9Bd3Rh%vm?Ssz1uiqN!% zZK1BL){1?`e5f{C-xg}g*0+TUv-NGELT%%=P^-3aTc~JTUt`-A>fYAJ)U~C_!H_#` zf?raN=G4~p39&Jkgy5|rKHPAFqEnmy5E1nE0fHukmgiE%bOK;&@GH&09Cy-ke8n+e zhP*xIUE2>`g1gdxL*f!llr&#lYkf0}iZwBd_2*8)3DgQu# zlBWE6G~$nui07gae~Lu>G8*ycNCc%j(b`gc6ZLb~9rbg=9rbgs9rbgY9rbhH9QAX{ z9Q4Muk;ZO8w+0a(jzmz0(ng35<@VA<>1e)*rCF<=7ZWYuD78N=Ahj!PglGxa2vM#S z8lgE*h0+3!QcKhVej7rLXi>ClV294X7B%PexszX0x2NHbCipS@L4x0#1Wlg{6Lfwk zEZXl4BYIbMZCR_!2`Sk2QVZMOdq@z<>0v@;r`FqP;i=BedXa8}()gstAaXuQCJ*XK z;CN6^s>6f&{aGpw>etA3n!jGYy;=WV>S*>!f40x=&H1D^aO6dM8;%yA1O<*((TRa$ zqR)vBN1M+X4~OS-=EBkLa|*#x@HyAu=mG~bBE=%P=i?}knGHr z3qn0q6nzsZhzQ>BQdl3F0Ob*0+L^9ST+C0FW~du^k|r!kz=40dqq-FNJEQz7%#xnG z{23i-rnbb8anP9bef2TqpEPE6EQUOV#tg<{$a^(TL#9h(4vwWE*QGJ1#A3*HY0SH0 zG32{6=9>B#nR5Q^vA{3F?>`+2e3^lNj0JKf_nYpo?}<>uI~LtTzPnN2*BJOS{D};xKj8rcuEw8eAXyv#!dT$P2>DJvdGPzoV}aZO`G>~>PatG17RdG9zcdy|*2cdn7Wg?Pj|YB* zf!~io{+59)U#PGA0Q`|a2(>KT=!wwPIdya+;XID{HCgG#y)M=dnOqTxdhE{9{wPEU zB$kf??l6ge8s@vG`tVj0mt7^HTp$ia2$xz3;k_R&u;Q`nLW`50EQz6#Sw;pu)&r$X zO73e^!!4vMQ&G{hzlP-t8K!lTcB3BpMFrs-Bx#u`3PPhK01>U*k15Fa1%&fPL3q#8 zg50Gb_Xr4Qk%I8LWrya{yRvqp0)0S$)(5rW^8?67^lwdV&JYkzFU^N{_brI2&He(y z$)+IGX0{-vHgg1ovrIv#*o@k+ps+SjfI!1J>lBD8&XWQl>c`c#oA!fk#28sfjtFO) zB;$zC8jtOdziX0DND@vz&72l^pqDGXDp|j-aOVpgXQaYGJDOP?4AqaCY3~{V;rvt( zUhKCZroB8qOUrCk5Nb{Xgi5707jSU^;oMaaDotAulMD4>(lV13gzC`%5xr_tmv0CN z=e2@R5!!;7Ty7B%&T<8zwlhGevuf*dp@4ACD+raACmImVrF=?SroYD1kO1`3Uy?2> zza=g6U8AU(jHo5xAD}q6I4!eYqi6sfQ5_mp^xqA<8+&{vc692`$haPkr$3bxwdE-~ z_k}Fr>adt2g@IaJb*`SMXJzw1F&dtgoltjHcGAwz$|N(l#LR?!<=yYAu@m7xUE421 zUDdUPt9&DA=_0ZQ{}pMeX29KGAng2)NlP_@|AMqsGiV?!)rbbtQjOS&v{V6hA}v*b zok&X+fLnhn;P6#isu7{IRQ>+}X{jb43u48qenV*~#H%V4H3=|6wkmQP4fo<@?Ee92 zsRD-5QuT+@QuQ~GmTE*OEmi+cq@@b56KSaekXNvc@l{%?5!~vl97z44v{e0}v{e0} zv{d~&k(MezC@ocgC@ocgC@ocgC@ocgC@ocgC@ob##U#-Ngwj%tCz}(E52d9VA4*Hb zKdr~^M^!4-C9E&^q$-Uva+}g(qC#(5Z?grrVjdN0bsKTdB(X~%+gOpsOg2KUDMk!5 z)yQV1S&3CvrBRx{@J~^h1nE;lnFJ$tDwAj|Qz4bxnM@@rBapJkkr5;p^-tiw1kBPqKAvIJdG7S zgrWoRj(HSNE7FKfvV7FeLU0zWe-`v zw>Q#1$xT$yHSO<2U!-zWtueO;5UKCNMJrCN%U+62fZ|o+2+1 zMFeyv5b_#e6HQvX0aw_JQBil@1w|56)SxKp>MA}~T~|?2e7_J>E( zuJHSQ&#AgyeY*p=`}=)9|9oKj-c#qEsycP5>eQ)Ir)=G5FK_}VI(0*_tF69u8!BSg z`vlOWNnz=chel#hlrm0_MlI=fR9a~mkv_r~s#~nxpci&7W@O;WNQ|(Z8UmrddlmLz zUyVONI5`qqt0K_oK!n#4;V%?n+~pDVO)E;qczKws8@R)p!rbc^~<;jrXAO0`8Ktd@4irbqSlL9qvOrEdQVI zS(z;6E8d611x7K**5OA^YtllRaZ7`-`te8;(|7xoU=FZmd$?z?+OJcDW7FIlvZyFVQfxJWNqh<+>j!lK*M6XRnp?9L~ zIyM#d(>qEaj(@62y$Rpy(+$bf9z5Zidi-tu91_ra0)NcHT7VN>;e9^59Y#SNp5Kxa#no&^IdgmJqPctG?2%}dw}gem3%SR>Qzsg(6e${$iG7bYnue4(rC3l}9RyHY6|l9W4ADHkUxnLE0u$-({B zvr@n<*g5I}UJax)(1`$$rtwdt@u3vqFZ2UGM8YY|PPCeIN~`=upr3(1PEV0Txjn$w z^uv^30O`-~=!f}4AD|N_h@er^tEc)<32QOVENeaPrF_oC0=Y3Z+vdUO_9> zRW!Uo8Ytln(m4k#{OtO;6nsvztW9)0^WOoG&jA37YKSPrF9%ITbHEJJ7-%`DXljU{iEIJayGwpPYTF``mK?#ca=j< z?YA~|fK)a_uV~$x0#bWueIf;rQdw`Tz7f8KW6xjvQUe#AX zfE2|A(NP^BMR7qiQ3ps-To8TJ0a6rIEp&hsMb+LMAf-+f83#zIQzgU!QtDI#aDbFL zoqio4rB0_#2S};YY0m+&HQi%fQg^ndd#p=0koZ?)>Dp`pFt!8=fh$io{2ZE{TtD6~PZ680t9U#G}PES_5J8dNGMx&jqga)}efV zCVSspJZZd|j=#sC+zo+^@F8!3wR8?-6>*WWxu=Tzbc3LCywD+@dnPOJjz!wRY4 zJaFqaXt?&KYFIzVW&7qxL2Iz7fC8({P@s z3_p%{p|8MNbxb5Ylem-E?`f>ShfUzoE2i0!4|C0S=R*naTJ#X|)qIFu+_eY8Lg(q- zv-Km-B&lz_a2A9aWS{OSJ1s8R>sYqU3{s>Q@teATBM?l-!5Z>l+ygxd%G##qea`=e=ZN zH$Ij>&707amC&2{0Gc7v1&!cyL$rhcg&usKr;Kz3Blz4M?cmdIvYS56SpZ+w?}E?W z(ovR&dn}5o(SE&|aY2=}x}b9Rv}RGq>xPxy%zvOzk*>!Dk6Wn+5RY356D;!h$w~db zA;_}y6=a6<=^*d!M#k|FP?kliAT!(#uDq#oRdw8k1YbR3rZ%4dBaxGINdH2XKn+fNR5Sp$@`)OlRJK0n6D8` zSqTXy?`{T54to-o$O=i2ajUa~`~{HeVTr7q1evjCz!F2b4@(}EqC6{M2}8>?dz*8o z%a7HO+GiyP#+8BWt(M&wx0VeEl~`W|jj?4QRI5dpT{N$;DQay@@@MFobHGM{Bz{1= z=vkb1Do3YBpZMscosPj(&OC360TNd<$Hz9`ro&9O3WwVIb9l;%!OzdA2CpM* zCgBSb#uK-as2lJ=`JwxtBOSg-HfgSu#Q7;#KLlE5oeme}ng7+@oYUAjO2nNzN6B!` zoui~5bLR+qA8S8?ufhA5u{9WbkVx0s7rVU#Pv{R3#=wi^nODjew_7A}W*zWaD{iqE zjV)2@+etEamypaTuu7ou%&7I#Bw6>CTCeRSW9Z;mt)UR4HNPm`n6Y=_G~33pC0r(<-}$XbUdhK8HBiRJU_VNHgn-3cZepv;Bvm> z4toRy9KcSYh!md7bc|vM{c>Y0xcvRV!L?n##r9z_TOY-bmu>$uex$^dEAHFiI4tB! zul-4`u}JoIx^VX4{CDT7iv%a<;bJQ9FqKbU5{67Erp0XM?yc!VvkSkg7&T>jG`sL4 ztFypkOXCT@A5w%iMx}A%s@$k0m!d$3dCD^{Cp+_U^+~?TGoAS+&vE9PJfWFy@-$|? z*}3&3oH?ETbqkN$d_>86ahC%1Nz|u(CO)hnq7tw0x?HY1$wKjaHldUT-h@ikh#{=< zNO%?!@N*V^hOpOoIQM1?xU1l9Dm-umUrRtZ^L09~$%V11n9=9%*}a+njM62mgB!D3YtD}zH&#|Ei378)Dq4hc0X#wi$OJ4sB>!>#?Gx&`BNjmG180}iUo!&kW3l&mnhn(8+GBrDgRYI88QVjlsM;vQlItc7A!aKGN9 z-U|H|jIa_cfpHPzL!?IS?+Qa2h!?lP%$m?`1G~lJpm#!g9w>LO&zp)fqBg$+Z>r%_xIhf4iE z2!D&UA%xfMg?gJ6hBTq|9!Nabs?GP}LF5eMT2$XkO@MB-F>k|)>hpXLXWjz(czY{9 z!fe-kNAghtZ~KzBBHnIJ-bzDQpXQtI1b|{rpIcn7qyWvbjP>sTAnyVS@6xnm(n=0A ze?vmNr3ow6#mx^TWO)hlkc__V(iB5F_Ju)mHzlLS`?H4r{OC`ms;1l3{zqrG=qRNsZ{RJ>m@8pVT6rptNn% zao)SZW<=eF!yAY3P5}=v!}x(i7-J43%eW-NFn*vjjAQMk!}x>_;}deprVis{9&W{w z8jk4&Tj9*7Wb)_?;~2HpKAalqbQs5ArNcN@DO`yj)ERJf7(ZBsaRcrQ;|HS-O)y#S z-Qo?*l|$l#byPm2{Tm7ZmSD|);=>A?$6@hd$=FU{XKa7Fat~nPhiYf_fBCvBZd1T2#ccoW4J9II|2wZE}`j6iWoz4QKudRft#1{ol2Cr3Sr; zSIKX4O#!?;LZ^-+43)NFKvAG`LAec3T%*&*}B+8%bSRd%e4*V(JQkE>Qr z;8oto#V5o9##P=YNCi(o1y3NDZfUi~60a413r^wn zqrv**5*L(n5rZ3fUkl>*SjE?e$ke4Qw8dKh?*5DCmjaAM$*p zH^n?dQ717EP=CalDVMd%BW`1&>S#2_oG6avAn&(N*7}NfpS7D~6%~80*bD1-{kd2* z%B;jRc)EGh%xB?7r0HZuTljMTUnzCg@MgwwF~r*B*r@%M5tJp6N>Adh!%HyIH*W$A z&zIskk~M4nPY8Z1!6ujpXp)~#$F~cG?fN&$1ltyfl-azXtv&?-ytR`HBO@YbDxV7CIB8drdd+0+onO{^W!MKiLl zrEjR{2~t5{>Lz7+zAw=xYeKnBVwk{Nz67|ex4;)y3-vC%M&ZF)8Ez<&7D z4L=@2gvY!9SK49QXR!5ARK4{j{AoWACA+GM75%wEP@CIGA3}Oy;<9U(XtX`pzJ7ds z>oy?LSm5Lr1sjU6G|l1bS&--QdHSK`FeJ;t{&WP(5e6dmXtZHIOSi(}^x3UnvLrG> zhQVBcy+dTJ6u=GexoDNya$`l~Ad@f47p%#~neg$DYbtuY0#t4UUgN>M!>soSvrf0n z3^UF53xvF@p-gK;rkXDY@9GEuUs!kxcz$80PjKJkNaBpz@Mp#+v3h+mJGKR9y=&KR zGEc+F(+Hm=5)Shj1`X+p%Cnv06I;yFCdugj`Zu9N?`B7BzX_!i@!ZY6c`&}@zmv_w z^G>cmABEh_LhAYQk8tw>|J0iiiih!Qya`X<0^eIZ4@Ns5{q4jxL4c?B0WRE?_~@n4 zpN-F3n^QDi)(5!oy@W;@{lm=iT`3yZ^Z_p1ozO_5{|nJSm7;NHAK=1035_)R_gL&S zaOMyIf1M(n>jPYPFd>{q≀6jcZ8bP^1{27~%f;eSi!1C4|%Hr;%_Pco%7GO%Z-) zAK=3M3E?#QD@iyFJYW*Qn^S~;L&7QG!UGB6R7&f15>5jjAn>;-!rAZk0@bV|4m@e} z1N)%2W?13|Qd}ONN6a+v>VCkt^#fi^nzyHD{*st!;L^ML0N3^d{yAxGM2cI^za(ZF z_^E!t2l@d&Mw*Mh*G+R8?>)e|e!yM*fDe-9yHhm3OUyLz_x*t5clW{EvjV`=kmA<; z;y%EI^Ao8`qaRQ7%ThF=KEQ?Z5*lgr-w^#TQZzo<2e@!SLL-g-K~|8#XWY7csUPrx ze!yQ6_y_!PKOecL5AfK2zzqamfj{o&*Y*S6+7HMGK&_9bK3{QYAKk>yI$yuA)eC`T@Ve!lpmJtRLow`(eJO59Y$oq}!wjFT5}r&r&I^ zcazZV_~Taik$%A6_X95bQJ>ErV~Nu=Pw0cW&`wI6M&C&Em*bCHuDA6AeyShv-hRNS z-iPMz`d}_xo|G$Hgk|@E#?koWmg|N6fbD+38~OoPuv}@HpXh_Ra79wCH2S?n|1JKw z<*MA@2e_&q@SJ|Y(^;-G&6oDUT(~kRR~r2WqJJEJ+;ZL55BNkM;KFPoxM>;;3MY|< zT*8bH*8{wi)nH5_2Xo=FV!xRK%lzd*t%;KH9Igq;*F$z&a- z>n!y!6(Cnix^QxUT>9ur$N_TMqDvbG$aRP=OB^7V3%aCmfK>H$Ip6@PrmHIN0I7GY z8twq8P4@t)4)*}5&-MVRrS<@+QT70-_^BS~drbd`GtNLfjbCQR}LMtRn=COe;F3J4xu6?r7AppXC=O zF}fr^C!u!=%6PPtvHojp%}H{55IfI>g&$(Lh~&BGiy>1ilZZ^7YkwC8+M4`re;#Jk z#P+H@IYwlq4vvR?ST>g-(f$D z)I>uJF}@+73cZ!uFH;oW!yTywMo?(*0?IB23SAR` zQaGrS(KbO5(}tj!U_rcD!ItH8K@od|pqOAm^p&$H2MdZ=76gTk3&`k12Zct{NNogy zVnPKy*Fkv*8>5jf8U@9K3gQhBHlx266j|g6iU}3;4F~1Tf+A};L1CyMl!f<6SSptb ziY&ombLx2Fo82$#Vt37)K*1doogD4*a- zeGT5vu*n(evPbaL1w`?rz6S5Jf+y<=!QMwZoiUqv@t=d)JQw2}dXu+dHti^Nddw}4HS}SAqo z!PC8FEuUN8zY;uA_N2btF9yA7)?*RndAauAdBJ-rRXxF@w=D1~X}seF@4h5o`pOPF z<3_E0mJ-CIkBVd-v;^rYYY{m>Cy2koycV@qC5UvBwTNty1n~|*yab5qR0tQ@wQmNj zGo4DBGo8XGw$r+su`ZGa_LtQTCS2mC@=~omJXep6k7{2dwQpbpq_qn<_XIz&u}EB>M^!913HSOu2Hr|A zat8CT?svQmx{Y_&f8p+=`nyqDz0HoVxWwV{Dj&>kc0`n$0o0BnVZ4_`;O#m|H+NW(H%==^%tNRzAvS^`XdS+rJFLiW?%7d)fwLp; zki-Qg_@5hX6Zroy{J#eOpN#*prRO!)w_k`eX_e@q*Ws;wgFHXH(Eg@AT+zM;6L2MZ z_{Htz6Y{WCBME*+!58Qy*yimFx&EKDYe(OBWFV z`@nA}m7w|0&_s8=1JBHN8SYlw_S#3f*?82~H?}<;Od8P5=&^7w9H&?Zc=9BSnvT*<6%U&xnhe&oJ`2#j|muA74aQ z2;4(zH;tJ$_r@V6N!}-tu2X)7bkX$s`@s=O;&(|q`B#(0&EJB->calGMU(pP7fbX9y%ps=k>A%pjFA_YO-ZT#KVY#(@j{_1;Vsep zH28&$a5yAmD7*Z4IuB7@k_)fmP@E6t#w$b%^9n1xhbIsjw6*jh_;qGfB5*~!zDN4* z!K)dl(;s?xY5t01C?M|R_5bpX#(p9;nznyTR zH^ls`Y>1DDY1J!0*|t6VBiQbp!twYLVH4B1tLonQt(#F4~L z;LD-*Js1{Mwhm9FW!$tYyT8Nn-}d)AUv5uQkuZ>Pli-&c?7Ep{15fDpN|(B43U8X* z!1v2GnQ8X5SOZP2@ygsVoTuMC1G{AN=AISl2v@yBB&&5@zlN$ z#6judS_Q(Ee;9=ys0^XNk&g&{2QDoElc7-IM88ni!i1#;?l=<`c4idaFlxv3$eruB^9rAHQy`x zjw6-i14fv9oWTjpsQnuZU+r61L>wB5huEfzPR1YaL~q%g#y<1CY46M{#PtjCk9yB} z+^ezQ0B6x@uU=%v89d*xXz**0+zMo32{2EkOd#YrBxtDqIb>lv6vrOM|2j=%2DT}j zLWYO=tthAQl@BO#ugA$1d|Ll3zLb;X{O;i1?|$ljm+7F(m`(*}fpbsYgDhwP*q=!U zb8Kw8TcE`#whny+rNG&_!c~y+TSUs4?=U2j^6sZ-vei#G&7BLMM>=u>RFBUUknY->V6k(&^|RbwENu@x>Fqe@;wBc=m+gLf=%@wp#0EF`F@@A zj(Sk%gdXLch5Fdf(f^t^5-rAI+>oOJMB1U#$U-jCK#E4Ry$ z-u81(s@#IEEeH7CU5*#C90SvxaxC&3J@z2(CpqtFLTey@-#ZlFpDFpLzOT67&*FRiin{D|_~tpx)9SLq8Odmlh(@8kw4=}- z_p}w-!L&ka71-Mo1(s%SoHOYtuvtt#4DhXTw$?k~0z3B{=AH49j?OxVazD3=SM=wG zXY*-({b4e-ONqrs!-$uSrL%q&5^nU^IK=dc1+GL|? z?b2?UX-B&)K0JV#jM{C^O#iIYAc%PtZ+wmFw`?=U$S~t?!g;JAL})oKU4iuHrSmVg zuIKD@7qYwxB3pkD526?svmM2_BjVIyOW9mC2USM2L_0&ZEet%%k2Z7wNc^(vc;TL`QxBdf=_-^ubX3-i`{HKtmS_+LXWL_yt=y?v4iS zFQTvRdan#l0~nnC8MTZwaBHV5=;%w7f1-dA`*3-BAD^g))_l)9S7bU-It!*`s&s}> zIzv@DpPGK@-R*l!)?U(G^AM$=@m+Ly5}4V8w< z&@Td>AYHo^Y7+`YOsE`;??K&X{LxOk2BH>7yOy9i;X7`r3_(8*p`$N`R-|hno(u%c zyciAiFF`1!feuyjSe3G|Dg(KApc)TYdB`=Ji3*!10c`S#3cFYZVzCND&{1bQDr3_W%U_1M^QHWM$|uO7Pu9TA%<8LP))<3#n?A*06*X%Q+*jUKyH z-*N6MAIHM!_W9s(*~1w{0^8@wo0rYEm*A;=H{`ui#o$uKTzfXl+VGa0ZpW5U@60V$ zul=02?mw+wyJXR!YZnIyR;@`_UlB~7zXEe zk&yTB2)gsqA9v{*QTr=YHmvR=I>m@xhf`O^5X-rg1e(i0s=3=v|2n60eBKE>>}Di* z2LMkN;#`{#l^W+o%{2fm+)8^a6<93Lv4%$^ViKfMt*feEQzhi`r-a25#>10P*3@{Y z-l2N(xZwgY}1X~kLQ{B0 zzPbi^z`TNU8M=^J>ILmFRCTC5g1_y5rbspBLoryWt?F#V<^B$eP{!>1F(ix5%9ZRO z?N4p;!Hj&uM9dDWL8+2ay3lbQ!o}7*fUgr%*4S5$^x{*spB?1ae@{8$Sk5yf--S7h z|J3&X3DjAiK8dIHb6}O;{V6 z%E1B$lSdMIfIK;%E;$Y+&lvOoc@#kXbR0|`8t4Jiw_lxi988`9=mFAMUp;ypOuF^= z0O>rfJ~a*|-K=|nbk$au90!w5-911$Q>#mkgZZ0&Ksp1fpN@k`SL7Zb-E-CR*1@E2 zth&8AKzd55n~wveqh$|}9*XMw<6zP~Pmc1=3-=#U^!u^p#xOzGC&R*DjXXyhIk9|E>5Y=yEub7@8X2%yo>Xr z^G;?oop`<)ofBnC#Yfm5HfCF$CX zG*)43l=a{Og~|O^-{sp)nDF_nD2ttMImW(_^MF*}Z*BrBkT3M$_5hUZVq?JXXme%} zNxfkyz7so{lu!K3+Rx^zaE>zPU(EtY8(O_*J>lJZCJ*-NJ^U<^k2_XCl@H2~(FcjtO!OYe z4u8j& zTHr4nVATRAoX=|(_&W!4*aDy7V2)VeT@G;60-x;wms#Lf9N+;KIOzZnw7|b{fMXVT zvjZHrz$+Z!gaz($fXgiq@ud>h9b|!@aexO~;9DHvAr`p80Zv-r^$u`_1%AU}-Jurv zZw|0-fww!KA7+6^Il#j$uZmoU*{}4shB6A9R2#E%1X5aFqpq!~w3hz&jn_ z5f=D*2e`%p5d$b;@{tyJt^+*E0%74vFpsvt4>-VMEbtfyc&r7!%>m9>V95clwZLaN zz;zb*ZU=ar1s>r5kGH@_9pDKT_*V|_L<{_o13bwBPfdWkZ^yh+mGNfx9rCytgXr!r z;&D8__EAixyT63z3GVGmoP^1{ZnGcn{yI|HFUFj^`-gb4{ z-FE`Az(3Vp4|N_N<|DJIO4=>8LIY|s0a3KG{tA3}3(T^!g=nV$uiLi$@vxYkeo)?O zH|_qi{eJkS-CwcKBRB2-s(l_W+_d{^cp26pExW(N1pcWtFJrO3i^nmOb{Et5$E1A^ zkK+ZCcsCRIXS||c-oxiXllpz8^3V97rv88cau@+{IQZ}W9G>A6a*`*|+)d?tbx$S4 zwP+1Q)C;i#zh^xRE^!7%Q0zeDVFcBX8$Vg#m$^9Hr;b&IC{p40GyPFaiJ}iP&Wh?r zW3#onF%#`V(>UjzDs%M$TdUo$6RUii@ji#&4VX{;rP4I`VYB$vU61g`m;*C~XziZ^ z(L$YX*gkJ&+v;Nimu&O_ZlzI^DKKR!_w0WguKR=C=guL-k)Y7;7aVSE~eYrSCP(LfnzC5{=+L{Fm%b-%47KhzFyS0 zEFK)*{&U4L3nBN zWeHuaxkag<^TlyUK@{an+u^~rB_K8JA9q5mt-EQ9f$rpN26&sK2^VA z)4-VEc9-1y!oXQ%H zj@3MWfrEOdgx<`nNG+G2qm0Q+RLNH1<%m#e2v9hQ0W%lm@l(G3(!1ZzIDiq_1pQ?C z5fEOaoMm4Cauws3JdWZTE<*}N^-*xW^m53m3(7YPDaj3 zSgm9bJtRVe@WxG*OujZpatu`_9URfGA?ByZTxlOx%xRs?);u&N9dGfg>Sh^+(YLENi zqKMRCKeb~p0$Xt*+kZB}j<4*CC2eFIWLs@bz?(2klkm=mPlBJDpGu}p7_DOK92VfC z=ww%Q&xtIKOj}F)42g}|puQY6FQ||fG3*_Q!Ok0t)(3N?Y}JUDh+S@ceB=Dx8zE>K z0laS&YPJfPnAcr5t&>xga_zv}94fWtZX6whD<`h7Fx5{go=0_)mpI&n zx2QH}I~`tocwzJrRYXEcJm+Y?u?g*7tDgy8ORw=8=hPsAt6_7Zwh-svAj|EuGR+sF z@|(}^U~{(g8_OZA5N!+*R*_Zi)d4VZK?jOtDQ(*em1c{FrtfPSj}M=^w#qK|N(?hobM=yp+StGU7Lc zfoH2PfI$9=gD9M2PV)3!@}CO*V&ixVz=2$pV=-LCSk?N=@TZ87;ac;iz9LmPU0*G! z9-MWkZ@mp=xJ1jqcDQaExM75`>;>?VCluGDK)6}Q%csVUWRG`CbeI-f-*uE$2<`IL4y3bJVMZHJJCRl|ti6`ZQ!#VXny{oOqm>+XIO$ z#F0RUnlM6k@zFa6I`?7RdGR2qlz9TOwRAAABEJ} zl4=+V6w#x4ai5>l?@TuKMk|h~fp;3p@F!A+LKM~JCoaIhjR;jZaU}k2jE3j+0V~jG zbbfYXG5&4D^VmEg@jjX%l$P~dF@ zt?h{r67;d^?Hb( zGDIH`;~OUhJOVw5!h*FA3aG+lWlh(=!R3#l%hnlReu?8OM+kierErJywFa)W=5M%-&P-L8uWm!2CbU$n&n>)zG0k0$qaiSvl$OJLU=D`UBFZL zFT>;lPiZdigUB#}?Ku7O{jUCHPWrj5|3lTeqaYjBg=0A`dQh3QMdaeu0H%Odvb8AC zCycpqcCM1g610keE6af3{Dz9=YRuNlw%WlT<59I1=f@{DP}$gr$-dqsEnHR==VuWI zywUJ#GLlYKYx^n%4xw{gZ|dk;3bQ=WF=z}4alx2p$}@k0fgU$s#kn<=C_oVLk`!I% zXif__Rk3z2P{0;Ry%M>u$j1elZC2nc9C$X#`5!YGLj&aUmC6hjs_3o4L0)n-egF6b zFe3JIK(&u^!ilr0jPq>&8ZKe77{GaeU#OHprJI=;PbxgOpP8XvtK|m!pw=LP2lWra z5FeNK)aENA$OsG0k$4oN4p*CzDnH;VHAOBp5euC4ZKFouKy41($IPPd9U`Oq>a16dVF;hn`>Uqgd9lZmpO{YVy_aoEW zP5>dDD(!fd@%{^C-uYx@9=`Tbj7^53&Kot1C2AgxYWnNVd<1l~CU9n(!=qCJ=sr>{ z*m|@sKD^jo%vwb_G$%#vQ?FYhY~QgOSOm)aev8+54hDZJIGw6ivRE2B^{eC}Sm&JD zV|A@xC*-o09PSN}bt1>>6Hxx9@S)=ew=%dw>dqL|<_z63r5#BQN9O&g{tVQEsuKrA z(BK??34ULqJQZ!sDgatc_DJv%qCxxXiI{^i?HRp6G4gwK9HvMRXS7F;puYVLobt1I z`W}vhc`xm1N0hjre21s`Gql_kYmV*(Z674m{bEpR40zdG^SP)=Ay>pCl4VD24mgQ6yC#Sl zesrlyrt0jI0MVACI_BrS#ilDbpja2ra#XGQm$H`C1IElfJy0L8*v48K3w1j(1Ms( zXD2HId4Q?Zz(6ng#)fLX-Z7)uhG#q`H%N}QW4QbB@keBD|u%0Lcx zIB^{wdKaS&uk7l_=(3sW_HyG{eLC6pr8_qkBa9g$@Kw+3xkSTrdzgg4=9{=+=MWE# z*6oNK$9Z-|_m%>c`qi|&S^G$zbg|5J(m5WyO!|=IfTl!mEw=9K%;7OKOcXJ(fG;e8l0yVLk6~U>A9u0eQqN%mpdp*M8H`VOgYbHB}Li+!^)f|thmt; zXcx%kMD%dHnkF45r4(mtTVy3~&FFU~^OKAlusG+m%9yw+SQf@bGwwbQb-qgEu7>*t z0#ie*wnjJBwqPwAtsh^!F{yeq3;@=<>0dxQII`*_KevMR)k=H&Mw-hK>f2{Ww|D5{ zal2)1G`!trvEK*g*7-mexy)}T^7}L9C*w##)UKjm3d(uY{Mucf=`~Kk)zcbRw;g_>vS9CRnZuRMlhtvci;_Ac0v1}!bnmOE?+55x*gO$LU>VY`gNYL-+p#T#nQ(#r z2vGBU*~s{1EziXxxpM8J;DyYo{w;oUE4~l2x%vz7i`8jmF}8fL>9Lsq*XC}5nTtKh zV%);>`Li6(G3|z2V@`k1D3tX%QUGVDrm3W2^Jxz!HL;m*!~~ol+e!l-S8NP9ha0T0 zV}te59M(&XBJ(ZOw%!CY9ij;|HeuFJ zC>ocZ4`6MkB)cksETte^be6f7R^BsN$-_Lv*28ji`n6RYnd+NE71&s##zo|S#VB*A z3}ZML#&95G@>lWu3bvmwV;PiSYAY~q$*m<>zdZ9kU|@I4PChS#$ZAW=1(sNg?I0g9 z0%xSq9C7I(q2L@AV|d<46x_uaC<+ah2^e>gAxZ;BIQR=B<2H}bVM+^S9)TrDEYg8N z!?0;?@{wIR%;D2N@$LF85lxqk@rv}1A&tidkMC4mq5pZsi|3qj)A>$?9*YZ&vLD{x~TID z)G_KO+&QPS0NIX^4p@#OXKrZ^Nr#9d_6RoeV_q$eq)&ju;#5iDt;U&K;!GXGAQ=o( zi+1mPuD%HbA(vIEnK_66{zv~1%v*qn*P9&djl{;OJ0mZ&ZBSnB)M6tbsPq;z90m@n zN5afQ`*zU?Jvs)u3+xc=E;MkUyX4WC%jhmR?}sbpa!A{%MSvBEeRnHnrsVUo_L&m; z%t*B|iZvd}InZ4pFCIk^u{j@)pop-Q;GQiY8PW-^R7cB0!^UFvn#JffMbm3wQklM{ zS~+k(c^n9Im`CC=@}N27{)|{YDo_zk7WIpTVT~hmQ#G8>tSY#^4p3{4s#X|IaEa$6 zUy0-uXvYCvZdaD0D=wEg|~G(DfP@aHwLNq5+|nK*Y8{l;$@<&KfIOU^XMx zDv%&@iW|+j`g#<0A1H#7n2!)M3QzbHLXFfgROBOMjRP*Xa)Fe@})r^@loS zndi2Blz%=!Ei!5)%nMi~p)e&ey`nF#dlq;SRQK$}wuM`2mnxTBL!fFl9fkPp`F*JS z*p7ne>o}kBz66H6TE;|7(O5~)Lcr1eLx7{vz_+;~v>dEi3bLethr)KWF#f8=W9n>L z(7}Oh0|y0>5X4zQL_y>1tUS&_Cgd&7Y}-fSm`6iHRmDee)kr)jra#ZM5jPivPplD+ zyI|5FmoR2v6_oHuv~o)Ax{csXGR6lU?FZLLyI)NYIJLC!^f=#2jg#$6Vwb!!XW5k% zRG&-01V;hJB~%dY$+Ec9Y21;Zl<%oS%|gLKcQA*7TG*F)X{KJQ$g z+bIzXc3_G&vqeaLgjlj+335233F4OlA|^=gJi{KyP8EmXoMN(*af1;~Jc+=4&Bsx8 zgW+(=WhYp@?nU5L)vpH5a3ou%B~PF_3UM6@{XfS z9-L|3%z~g54bovG12OuHNMMbdRe{K;Jcz)68Bbdt&cs3_5eFj}@-Z7J zuVZr`fxrm;WCHPlegbhK1R7lz0uh&3TnL0Iu1Es}!)b7~b!C8!JlL4Vbj4;KlXKARZ!_r6ed%&^h8N2`&|u`SDPPG*a;BZN>w8(Y|l@-sVj~X~3$&u_Il{a^nn#MiaIG}SOTpDd91wgkBE)u^#sa(o-z!-$U5k9!YV|MB^tJtb`9 zrVj1QfP2^4x@!-tZs*3yD5^-C0TgjqKPR^2HU--^z$%Mv2P4DKtZ+H%^t}-;Ii;l1 z-(d>#%5|jY_&Y#Xg^Qo{cfcpVaJ(I$mBAUpo^_Dc`+1gHoAq|^vw`F70BK$OK~4fS zfW_M(sv#h$`aQsk5kaqjR~P)ui&QUsP88U+$NZ%J46s{ZqXUUJCX%e!yv8^+Wvt3D zpQueBA7p`oC_e|$AmE9=8b1`SVGikGB7pb8 zpR*)VTv4+qK2#tM!r~rIXz*UBat^J*!cfCF%ymB&kFr#R)`mKeD2g?NeKW*L=X^8WuuI}}NB49?Pl1Bhm@ply zv-e-Hjt$!dLrc-+;lOb$<6VgYzfpLEwIJrgyn3jIjm^RM1WqT7Ph40q+t#pk%MPfS zb+pv_my(vXs$;Zl3w)@hqi`Omz{yy?F`_#u1T#QGRGl zkY%{G&@6)`6;{Zw8Ca6oiP$4U6jV|S6;SaI8rS0HvNQy7XA-~joA$*;SZ}m%VcS%^ zscE_S3O?}hx<}CW!FdPsb6m!}4E}}Q$@slN>NiFAe>n8jOfzA72kY56A|~x8buDNu$s2gBHdy;aJq^Mrmub zt*r5jIKU$hr2uU_k8TWdxuQ0)|G1C&_mRMde`aldpV|}FVC;Rf&>-tMh+=}t%p3qP zT2zip(sBI~RhTm~0TWcS(W-LrTyENGO;!W~haGs_NOUdGx(mhBF9Muqm|eEjYMa5b zttECrJ%+>K8D~=LK*57TI{#wm9iM=MoO7}OQxDBK*eN{=;U~@L5*Kh5piS>b~SpnK{GL5qNb6$Y` zV4kX@N0%u`H-+NU{4rUZICEE;5xY58-TZ3^J;5{8AsE zNRBiWv+|uCRJWB8M%13Lpz4CgTg!pfYn*9%MIIti#)c;jF5?LjkiYxwo#(N6_YDiY zuGe9_V&@igX>j|n>1LRXFefB5a(BNSCvxXG@8o2c2hzn8JP)}T-pr3!DtPKNHg*;4 zQjAk2@x+0xLtS&&*6?Vs+aWm^Hd_dJ*sK~T{7#LWkDhD{Lcx5IM@7oK3h1$wD3SF)TWvVud z0&5R#8JzrdvvskAQpUPr3JV7S#W}CMaZI!PTV@GM-kAET4Zub_Hiv+#{6%YXt@X96 z`O17ErHlvVRt}7oORy5mg7T6kl!e0Oo6xDz?xwuG*4=w%Hh>2x;E=855X>t5>z|~I zS$eSVO;&J1M7QSAc-%5Z{YlbP9DV>&aq&;0PdWGr5IvWI`uc>;Ge5*9%fT}KdquGQ z!b&aJUKy@cMjEL7Z~*hea6AHa6b=W&So6uUlD_0W!7=JrlEb6Q*k#=2sK%q}crz9+ zi^pm=x!Ea;$Er6~aAcZ@JP%@KSvZ%xXy0VbF8g3L6YY%((Q2<|mxVUDk}(H}WPvIBtE!dKmEBtA zphYupwX?iK^2QzzT!5xldH!;ghyQkq7xiNQ()w;NQ;u|%8pHl2`pPM{gdlWs++B9L zNN*Ls18K}f)$MD_ekY0tPw()m2Z8wCzlrhdgivSx8^gDS)sV(07&-NH!b)KJS6MS6lb3;aHOh3ejJpsOG+(hbj-k?=$Tb=Z*T)q- z;ucu9WC+ozSSdS;WYrG2*nm@L*jS;(wmq^ohogVREI#3(n5`@i6eA3NFv?QD4q5|5uKg=1m@}%$bgAR}1j`*Z)r%Ve|ikMquBg z5A?fi-@~v`Y;EoIy`X*#M-Lne@Jo%ghVMs|&03M>3yekQ<=WMp)l9_m+H+Vm&)F3o7tdV7;yAt(F;bhQ8N#JrIJNJ+Tk?k1 zDfN0Q+w3-II9DNN0e4~sTki&_bvxmhS`nlNs4}#EGeHgEbcqohxQ`H55(F3L9qRB; zj_Nm{%4UG1tQ-VI?md!k>j`{Oe=|e*iuLg0$Dz`DvyD71Anv}>f*@2 z3N$j5>i6OPfJ$!WYwXv_c@t4#RWQFq!F!C&}LFarXMo`JQ^Syo{)_!^f4m1vTX^NTOZ(x6d z+N}xjpEnxh$KcuqeldE^tC0_B3m2?oF%LMxzYw4He||fDw@9J$hWJAQ)3-$waE%1r+bp(Kh8>SlBWgDheWDndhwLCjs+%UB)J6_%} zwKO{(ZDI|80#O8nfUA{kw7YT_SLgJ-D z;uV&J8soqbT>s=vZ1~ur)xIPqIL2(48p}@5C`fV>e<=^8>;w&=U0meHrF^F?hc&S>^F)g6DZ1CY#i!Pk%5kxVrgz} zU*Z7@nuI=`)uMoB0b+CI!NQ=sifnt}1^vvqVdAHlGoU<~Q=KhO>)QS8AK!$jnnDa8rK^P-S|@ zfQaanv_~Mi%%eJyABe){M}zfPdQpVnHSq|CG>QJ~&0GR|haZg04qq6G_5nLq^T+(K zkZt}1zk@g;@Ke4Q5m^adgtfW2bRp*FBAlZ_SPy6GH!^c<%}Zk-T{KY{miR)S6QmYQ zNW4LJ8idt|2V=AqY3?>iF)ru9G+z)$jZP}U7MzWqgcBrU(Fsr?Zq}dSb>*!1oMrb* zzAtUDrom8Kk?E4t42(%@*@xInNkw_Cq_Xf+s}xB+MZPqeT@|#Kn2}iw_)-@_E2`Pl zaPpAy%_0;&qe*`jIL#_1lzsz}*HoKOX{b38Dst8#Td zb6T68m*8v#jFGZcyqVjeM|AcwPDEutK)J3KMzN!-2V8N`cp1X6T(=GW4RhDSCv7aZ zo&vaurUrQB)5D&&hX;6S5xabcUyObGDmG-A=c8|cd70(~cvvCxSm-?)d3@06J0T9K z7$ZJ9-T_`Vn!|1CHzmS!m9!x5k>HZ7F2z^z9=x*ksS zhX%hBjsB5IJaRjFJdEYcxAyKSsD4u zWUj<42`sqf!;5a@Vi+WrU2H~EDhxRBf+!AS*W%PaLVkbBhMa}Hhrv`YV$dA~NXqQR zK^H%c_@(q&xIV$S3X|9IdcXiI#2N)P#r!e-?d&+rJXsj_r{SNp-j~=@RD;=-WxS2J zr{1_FfB1W44Bh=GL{oMScT;DTvy{6z{z(|M-4t9MPr2{;A*rvLkZ=ykAKkJEfrJoa zkuSq|Ir2#JQp3vy7wC)b_K;`veX=y3Fqk-~0D?~_4JC-kL>+<%Uc?tAh>%8jN%s3% zpocq#VUzR6<~L7(ipQBG8r!mYGd~&y@L#-tQQ)Wn4g*-iKfxR}z#4!D;hz9&3ariV zlqgEud34yf&*oT#jO+W5|81H-IF15%Pdu?xNQ@5}!YJ2rmaAXcma}aA%D0^5(ACiT(#$*;G?4mP zq!y$4?f8LbO>JMboUQIvVqhJEdl)Qoi4!w#|P=uRjxCpAL8Pp{uL19qIBx{m{t(T?LYCp z!WK#`4S96!oFu^TH(TbBkfe;Zh}eZe=zvZU8=Jhw3sC{&AQYh>Xg!r=97Tu+AW8W- z88uM6II|?unxiCIbNa=>f{*h{8B=$}i}Gd;z|^jN{R&j}V@cZxC*Z$=ik5P)7H`7e zVfi~Mf5+r68hjH^5p0nS*7Cw*7&-D9H!@$%*8i4cyM#%U;qKWvI66hRx=}dAG5XHr z)H%mjy%YK4Nf{Wf^aEg`4bcVf3SVowLi{om|M!^ec~A%P1pMFh;D3V6VEi}^Lmg%9 zYiv&t1^5VnD6?7NVT&WIX5L6~U8_K$L9yf5IpzqRFpTje0)S5@l|@*_372UW@g zoO&LEtnRJ94=EC(R8~C1&R6R{67)Qb?lKx*=4G@Yb)OM8YKCWF(vji5f)~89x-34A zF;S;AAc_G%{9r1FKiFQxXs_bHd#2B-f1g>=nMRJ8aPs9mah>e7axTL>#yt&tmJS=A zI8j=ghhqD%GsOQmAC}2RJM=u6 z@nfahJN;m^!|LgwM;jn66~fsXe|XM0I2va5!oeL*Lm5i~cTv}7_wKB12Vp)YaQH}t znc>;`*HKl@(%8eI9B0IKDzpc}H1UBDq?A4$6H*Mr3XifR7kNukr=Y_E0a<;+%?f!1 z-a1O>4jLnKimnjQ}jRj-&weQ5j!RW$)+}{Le6FCQP z2%Os9pz|zG&YquBk4=JQ5*gvh-Pg(GgZUF!Ws8^GY)(y5DV=- zj2dDY=3-PS!4rwf(vLdI63fdm`ZJQBwhoqv)F;Y~Bd~FWLar(D7=RR&Yr$mkxkP=j zqrKt_%MZkT0&V3>TYZ)^g$IX|2atokFjiyjiM6C`-{VDHAu}|cA-rFQC$v3Hf1P02 zzL)kt2Iain$kuX4Mqw2=AKnU#1J_SLe*o*8@#|1~z~>B&qeMPuJMyXCB~Md0znBz` zJmk15WlPKEf1{wbO@v-rE)Pa1-Hu#7Mb+=IRhKq79%cNzw)0-NnWM2`{0GNim4x`g z3poeX6OnxsR#AJ4?dCs*@e+y=+m^AaEFFCC#}mQ#6@<(_3cq4Q$@nng?1j#K7xbci zxcg?pn-9p3=q&k;&XVuUUJTGswjBGKb2Jk5 z4L#1KcXVi1vEIpsIS|Gqm`i3rSh*%kIvzd(3W@(pM)=y*Tya$kpv z&LOAtD~HliDyoj{m*8CvLGq0LJzr$KFt3idlQVRB@DP>Uv2#6IM#$pVRuu_Q%a}ry znfgATl2p76%bY9^2^hvO07jDeT>}ZQ9JI-OiRFNaXGlgI@unKp`F>cs+1?^M8@%!npF(H^DH``N!KKk#h77&>pLQ9j=h!-6=0NUyi)@r9 zEycZ^Qt-?V;yWviuzCbpEN&dCE`c*L9~HqFo~M}4gqMhQ75qup?Ou~6)gxV=9hS0X zKoMA|QYwC8k-FPSfk`sk}gzjg!0!H_kGK^uZ-(b}Y zd6RE&$_MR&qeLpNs%K%*`zWCauQH-zNPhVC0GIQ%EhxQw&-P5de~?h;``)}Mr%x|$ zj@vfxG0Qn4qy2NgKgpf_l;7Ve<6r^42ITyWiHzg>ljb+wtkRg29^ap&rDt0{%jVxJ zC*TGsDkmx5TT~Q!`EkEVFf0)np)En`)hpkis}rvo5hx*Bj1UNM%6C%SAJ`Pz){)pL zq|Qnk;R|7E&_0>azEMXT)YZ^FX``^B4{fA$XrE=v-IpKemrlRgFGKF@W(fIwuBF?T zACtD_JAG#V9J!~PBibiPfB!sD`j8Au|H-(b^b@Y=Joo3I|7DpEaEcyou%!q+6UXo- zOM7=xi;Y9X(Fo;)1~k|$h^DiAe#fSL3W3RMeg`7#><~{_Ih8tnM-9ivz|R zsi}kk)eTxw@L;E8DvFb(K$dVnOz8&CLw!56xW+crgb?f#>oYJ$0!&i{GyuL>y3_^+ zL#2+rI4qOCl2Et$)K_F2krVKa?Qjm1jBR48Jp*rShudtw$#~R+UR+BuilAhDLRHb~I!*dPJ7Hpn~B3OzPRp}jv_l+aI@CRyN3 zZIF_SyeUhWQDTGqqMH@kU2Tw(m)amvaAVUTRk1;mps_)bme?S>iVQlTM;oNl5gX*w zV}RP9x(Y>Fv_U#;1REqxkF-P1(MXH}^>1iIIgo~?Jac{P(0~n6+ZA-g2swvdKpP~8 z?Z3glVF-d2%S9XHe%lhLlGD>|d$mD! z+Fprwx4tF%)a}o;aHswM2xja@2Dol=+7JDlO)oM4d3@@AP8+22J#3Js!A}l7NEseAdQnn6g`X?Q?RXa9Fw{x(+(gxXSGk(}< zF||QBu?>zLA17_ z*-cgF0maZ1;D16p26BHGQ2bBmu$@sNe*{qcPv}Sj-C_59Lb*SzH$O4)_Ro|9<9>1u z_n&?EWM$Y2_Vtzl*C+O^bI`ZWLEkzDed?@nDkQ&w5MdEHAao!v+tj+ZWUzW&46*NY%bz1X8r`@O6@OVPhauUjZ04ps`h)@dF2< zJFx6`t3cy6(ikbgWb8+Ku|TlaXr?cks!8hctIK4c0I?cVVoK9B3vCf3!i149o^?!n>HMytW6t=;r*R+44Th3 zo^C$*o_u&%^JX7+T{-S8NP~EgfrlmB#eG7IS;vQ0(Pslf&62 zupj()t>tVd?rT_jDd zAJgwo?8kofMh2aC4AFIn8vNjLH!>z_$`Z{$N8G)5R4vh*Lwv6eS|ZDsLvTr6#1hy| zmRP3~lmHU)Qx#% zAQAu)uyX}J+h{$)jfRNgh&80f8YMIzU$8t$0+Z`@f>s}ykK{Cc)X!*zKMbkw8jONRPDIEBcY_#RCgCrUmBD;U@h7{U zK+9r%PNC!k#WI;FeYi}pWwSmzR0!A)qfaybR~e5U``_B1oKj5T!a0M$8zMn)4n>_H zB#;PBv14LBxDc@ndB#KiI_ImU$4i zUktLw+_=5qW8lJW3@+5pCHpdBW;5Pa^a90@h66?GbFTtdB$DY2AgKqi~@eaMOlH^3d@XdXDZZg`>`X|3KFpmIbIy zgqt;BodRt(9`}(TITYOjQ&{}{?lK{r5VAwcY65E zn09IAV@)i~@6ofl$TocMuWRS~tJy}uPU+Xl+?|nijqK6EX`mwuh_TmIHrcK7Vdj%g z;OhU`{>3q+0cNMgamaWS<*~jj9sV$$gOnkit+rslT*(i>jR1D7I-Yjc7#l(l&g9;A z*)|#636X9N^aM_jJ(V^Y%T$##xYRE3mQ!mYxrSSBJg~lkfW(NVGg&D!Vi+Q(i0#_K za3jk+M(@Qt5WBj>FbIsu^YB~5b7$7jfWCLbkCM+}a zvCM>oObCz!k^otlu!OJ-48-|<|8wqJs=6i1#&MhwC+d3d-uv!ywtMb5=iW=Xn)Dye z<(=m*NBkf)rTieO`E0iQ84`eYm`f@LrKE75gxA9_48dJXTAjC>$-Ue zP9s?)Y0Q$iDn?11-@$>OY6$g)hUUr*dBq%jX$>{l;-cz!r@Shq4zG*7tb99P{&tLn zg>piRgvC-qvi;3zi_c%VK9OwqbcBPrq0R`AT)HZP&x+4M7tP1RWb{Gst_i~lwSdbw=lb9 zwkV|*hSJOyrPNs$B-nm4Ta;3RU53=#GFwzNI*v>z+6y)jN=qduYAG3JLS8mUtBsOr zCgf&<+Hy6eInqOJHX#>1aoP6Ta$jT)(^BVv7D9Yj0)Wh60>S|;kCatFLFO<);((-! zvI`?uMh&l;r=CWgzo|K!p+!am+FmaRG0V-` z!r4YF57}QC^P_5irM@q#{S_$KOi;4Fo`ubnugW&lYV=L$wja=(v6=1DRR4L2h zy$3Q=N4OLbA2AllhE@p#!I)L2!2>G)1Ez|~jFdKI)*@~v&&I4ZTtH^6da&8)dki|m z1!UH$yKSJY0+@4#3(#YdgF#0nuxu42cweyhJbp+hW9RARm$>QF)`h1s_)8D51?dLc zX;9h&9uSAv?J_(_Wh??q%8=VV>LX|Yl%)#3L zKyq&Zw#ncF5FyJ4uq4}L^_AIed78T~$l&wP^qj%zGdY|dZ&vvLu@c$T1KH$2krM{P zp-9Jp7RV?sP<6K00K2h`u+uGTA2b_L*_P*)(8rx!H>rq<+BNLIwS(Ar0fLj2*?&u# z5uO&^w9I}Vw%?k}`>%}C?1hzulFe>%=%IjeU5fwZNQ_*=e(#CJuY8_cyT@j~GuMEqgKjIHSFIq}fN)Uc9ksTQe5+;<*y- z1s;2t_F|g&$J>itBimpver_B^zh$xjdx&g~^X;kSu{OsM=t5o&(}wpr4k%5z3NO)R zdAr*jc88vM|8xw-ZiO!F#+eOT zi)v1(+KwGlCSh(3Pg}B1w~{52CM=0lBbCJIx?Ig%Lw7~(++cKe12qSNlnvCnsa)?Z zt{GAFyrY1r5$g21Ig#+8?A7T6C4!;a&G(ZeER}4Y$#V0}cAuh5+RM#g@pL)xhMc}o zD2M1P2?QqTo>3UaXeTE(Y6luCQa7bCH);=28DET0**{&Q_GxL)tR`(DC$LzL(qE;z zq{K5(pq2|IBFLO1kB|l*+OjS>EDY*7C90>TZd9tvY^}_w(cVh*=(e)lCacBfMicZu z-Ugr9%4C@hwz6S+cs2TenIDUO1ltqkrPle}Z}xSqSKLM%@=EsMe~fLuY-tKLXR1`u zQ`r_}`^@|KSlaDn@)R5o$T+Y$AT!%%-oG!EOIt48^{-<4>D>=7b9z6({02XOR$!a>0S<03*~jx{wzsyv7g!W_)xcvi%x)Tg zoOyU;&7VE{nCpzkRBvIAj`97<|Etu6LWjZXekD zTq~AEqbpE-lbH0y!d)>Kl24vFUT6riUAwP7lg{ma~gZ zr?CyO>2JrL`k^!1n>DWz4umJCZ6dO${&2a9Q~TYItde zQ_UYx!%H)gT(!~*rR2(@UT_aI);&n$=HomYSH^GwId2-ld86;~XbcyS^QIB}0V;qyV7P!;!W(Ydvo2r>A1P5)9l@@v zIxvP8C3s)7ch>(zFthj<)p2_0wx zq;C?e9db5_PYyYNVgz~eyje5AU?j`%8f@A{mJ%3!hTp#yeslLv6ZemHlV^BVVaKG6 zqyV8~T8SB|{ka5X6&Z5>G*x61Y%4iKw?B{60=|`=A>5xw%T%pQhH{k|!nqPogY++O z0ygGt(_5|p@4tOEJS&#%;N1Kh!H<`(9OtGumbh>8aT;#r{&eqI;e#dEzphw7cwE^) zE_d41a;K=cMo!Ux&=KN9&9Wp&TYgTb_LUeM&z^rWh>r8AL-Z@r6&axG^ylykw3q`> zK5k>#48Val^8)OJ*KU^$aQ@UrIL83%cfQ*EPDw><+^*xFsvpD$h4;q!+Wb?c6$h?r z{8QOwypr302<^CkYO&-an5>lF9{2t!{8t*U{8wSz_Jqjx0IbsfhST`3Hace>Gym1% z!}VW{ICCB?{}uf>qyK88*+(n5Rd@_4(A zZ)vN1OIzU^uEa=Z4z{-?Xbh^KoB5Wy zsCQk|yRZ3{A{odY3*VA&r`X_Paz9q#Y0A76AOYawpf6JH0X|7y0J&n$-Ql)Xn?2oM6-VoI+bD z0@PjJqw&x_uXLJEGGCWFBT}V|m3$G&a_h~$HAa51R>==hjc&+!BlyK~-bey-XjaL% z1AmsYg8Rh+e-x>ka)|rIhB$;TMmXeaezDOVByLQ9?EGR6mwzmvxjp5Mu2CK$bqvDE zD0@>b+Tdz?RQYIRKg`*A?ZizbUtP{mHk=Yi@!rC_XWPxz^+l_^zee`)+!yrN`t~yW zxO_0dK3;f;r0e~sp}sxN{C#C(a_|Obifb_n_d&>ilEe6M;t!PDLtf+QDIhEQ7>4WP!hh(tBBu@WEuM}hiakcNr}r%`Z162=MZSq|(Q#Gm zF)HfZxW{OA!yco|kUFx*==Mz=mhnQq*XW0#>y3WFFQd;gX3MI!t;&his2^h3GXJ~PXek;^^MAvg0rTdtOa zPD3F#qaVwaJ;AqdhTO#s&N=y3esyS!nJ@Wq>#xnRRyhso#OpKIK?+*S@FwUQy7jO* z`jq1)OvAMh)ngzQf(y^D=!!T{IOK5glpxwDajh$ zfOO&fbiDXw^K<7|MS7ox7k@pY)2|T!cbt@vf`|brIl{_&B|ddo-rOU9X()c zTv?IQmYlv^w2^1y+Z-++r*AVjef2$Vz~KUN`Zj|XPzCUG4i_+|Z!`D+RRV|SNC`Q$ znm%D#Cvj?xl(0egTxlinYZWE9IyS{-6PnSN8PWLj zNG*(C=^5Gh^JtkN*ReIV8Rh8PjCB0DRF4u)Lp;AL;t}oK0=zzQ_HsjFqeBG7Y+%N( zrU(oP5Nyg8h+#yc7!7yN7ojBVacn4#KE#;--aP)Go=0woMHRX6VfjYuuWYlmD;;+q z^mkHJZ8si!)L=%Bi*^ip?q4ADXLS?Q%dYcIpWjfc#j=_s8)Dqrfo zj0XodG5+`vEcWL!qht889bouS8(1GIK!AJ^mI4R@f!R||1Rg-3Iq5X<0~?*=k6HY{ z_JhBR5` zG|sebX)|eCX>CFg(ydz1peAmJN$^d)TeVCoHu0ugJ>DUYZ`kVb4q1Ey`4;bxrnIa0 zhpp+9zHbwF6WWd*op6V=tpJD+=HM>e8KsPu9JtBy#G8Hdw?ZN&@{kCd({@)ferMsS zy}~)aCxPLaCvuJ_mciNEV4<8l@PMml-Mha!uk@)h=<;OeYSxdk`<-!ja*vTm`elVeS&}wJ1)Wk zJ|?n&5A@&6SCsqo9}h7fnXgD5^RW6TJpF~=w&-*4|An{Y7;>|vAi4S3v+lRe$N2b< z6VZxGm^+|V7X#aXx(&4Uc!(cSXRX)8O1Hp*)7r1WCj}lJ_i-goS?-+^8gjSf@VLtR z*%wbAbF#Q0=0p~_O=3=7f7NIx7t82u4}3M!HmYJAS^Poy>Tgab~o5>%`l?m1lGzq!eH@dZL-q7BQ0tOi_zY^n0 za&%YDgmdi`E5@7QTzE4=(L+uu<*8>~IbXFgCvj3D7>(3T_(sngDMxd_>1063wpo$^ zCG%!U29zwE*%|IoYstu2I@_XT=geYERkkn|mSjN5+L;ptWjB=ppUUX}s~}!w2#cCD zHlohfmkXQnz~lS8=W=K+h~Mm-hqH)f8G(>q;r2}c_3IBK+$Gr#l|8W6uQ(h&IYL() zZgPIaS=~`sj+2=liIXYaYq)f#^CNzKllYnUZHS-oluhDiwm;nXnbP?Y+`l(Ja^uvRcuLvXrtj&iz{gmZ8Vasn34w3 zMkC2Gzcx5kVkB9yE)C+2isZ_YUI;H4TRRs{)o5CA$|g4Aa9TR6v7#4jtt}p~=RRNt zT$y&$aRnibg_sg$6F@UuKtV`jAqYtY2q+mYpdh5N5Kp24gwqTcVAv#wXcCnms%E5w zf{?~S5Rys|N-|Qy2H}1=8wS4ikrFnN5c;4x2z@9@@V;d4Y~&+MiTEqg{6so&`EOX5 zlFiGn&1mQ0$3D2OpHUKOZFUwoxRO3s!j?9>8xCEg9mz3zQVwt~FsyHkrj!GKhjW~+ zlm%o*vW&Kr1xQD-jJ}iwEJw2P{sF`yOJ#u~2}WyIiPrK^rWU7QXv7Ds zoa&UAk)1z}6d4L-YN^O3l&9p3^!$0G7C@u)jQIR{w9HT_lQp#&{ps6`0R4Hi9=|y= zBSDoJqCq8`h6sP!h)}-e?*XVEd${sT;;Tal;^l$+|7nFFN~UqZ@~oH1@|q}fL^Zfj%HW*2{0=f3#raYNkJ{~(Uz6Xm$A?d{p+>Gm9PTeFJW znnl*lr~L0=dm%~Z6t^{Jaa#*n+?J=M3l_Jvpt!AB#ceI7iy>}nyT@&9&*HYWv$)#+ zwYaUX#cky`D1?(|z5?R5h6Bp-@U5YMvLcGh&&Amg%;h0vMNC%~Eh0w%rz;V5^(u>^ zSm*Gh8HJk7B+HYebu9d>n|74eLG4brX?@BHozSh}TOaH;fOMNyz3W^<9FEi3=HX{~ zxY;%jKg+|-wt4tj7H-D(7JfF9(hr5BZA-VRz7BDmp)XN7dcnlm9JX^d(PwE#@n|9H z%wtZvN|`K0oFvOrZ}uak6rnbiMW|_wI9JW&8ioeNr{!`j34%>pTqfCwD|0dC@o7P} z6{(v_H;+#nl5Tu4BHg|gpZ2x*w6D_mv@fkJG;eQvn+KJR%0p5o;onROZ7LCEZY;@) zY>s)1Wa7wGCy#clous3IraVIAqXDLr#`_d8d3Ma6#pF$m#N^3Gp2r+Leq-`7AGzX; z!a}u(GLpPkoJ=u}5Hk^?-h7!u`EsyC$jjnnEVqc03AtIEjO7+_G9fpMld;?)PA24L zaWa-$#L0x*EKbI9i#VB(o5jgku2yVrI}f>;k%8QydqWf_lf&REI*w0^ccJ`%7VwOE zGn{*TM?T)iZ;YSDV1p@)ECuF7yPq7w+gEhlpVO&_FbHpXctnzTpD(c*L4%OU-bEqgc7n6S(uljge=xh016pWbSc*~LPU%MyqwwptrXSqdh-#hvQ}N(Z9(G)d!D}=| z;ddTs>_8knLjQMmPtlP7`+UZootMF;vD%5w?GGlc`ijM4q!E|Qj_H!`k-HEoQGxSb zPDdMY&Sgn+hkHNUj%qZ+4bZK6)`=0E1N(X;JMAAB{E|xVcHk4mi^*bTdA#>>y;SV+ zp9yZgpcr*+ir1HP+Z2#Mjm%>jR&MKKRKyr{@D* zTthA=?`+_S?FH#)=k7R9Ocoi8ZHOm0@8wbBiC^4=C;kYijdfc6xu{m(4YkCBvy7*C z#5|G3IzMcl@a>r8_>MA9tet@;2)G{MiL4V3$rHb51h$kcRhFlFzoeInJ^rNNCZ1U8 z^nQY8r--O=`#TXY8Be^Mlw`?xLXR0wyp!j^6V{sZ#I$%~DdUOo7I%7Pk4{ui5)dQ z4}JK9O>SxOSUaB^$~>X)JosZNUds4G=TA8wG)MTLJa23r$t%qpOOGOtTuac$=)Cbc z!0-rpYZ}rdbj`tD&4HN$pO;4POxJ_levD^%k|Hryne0&_~ z9Iw;P8(V$e(1%PMpP=rj5qxns@ZE2!56d^4fk&1$@JQZ?|JAJ>Js$zwuHxaVat=!+ zx{W&j$j5bm=fQ+ArO}aBemZ*fk&p4`=-Z=c?DcfL7sd7a<9heN{dSYUctgeha=4gJ zQt`dFSTk8?Xk+HCKcih9T2Xv-n#M!B_s-tl z`!+tZw7b=}xpIO&+WXSD*Jr>{6eq|3T)nRx|D4i+k>q^JFR_AY6dzOWphfNYN^71U zN88EYSIQqJKR%`!1`|9UEXsPE>8EV`R+nXEZG<}V4@bZIw121k@Le1|i?%;w>B)mz zOb3B-u1@a!9D^CF%{;ip33I%^*E?VHA-s*@uC%?AHSemD`dhe>EYMvNojWqFAEQJV zmmZNxKN3f^o2@S|EI`=%7E+J@g#%D?VYjG9sqr!Wz4tbV%14-u|HmDM%C$O*@yF2` zb^P(@ID5&Re=$1F8Lz%(jr4A(D>kC6jR0e7;|?;djq8ifAOC#TZ^u=@yHc&F>Zxbr z>1O@+{{8Pw`p4Bc!+4;7s;p*z2Lk$L{Zo;FfLy@9=@43j4hPpjSG~>%9j?-^kS`MK zUbH&TnM&+lMNuP29agIZea?$h}$wb^|${qy3^$)s~~khEak`r5tJ z=_zsdWYRs^o2NtVdjEBOCAaE>kMTZUyN3|tc%s>b_q%rZHTtd`1*;^$0RDKvw z4Qb3#W~(1-3~nUj&Sk#R+6*`-c5tN~HIuZ`+e2P&2Y+a2x|#HLm)^OE#`(P(JwV_7 z#KvpAK#Q>ErXi<0|DJ9msv3>KH}Ww+hX1xBS8QCBs{ITe%2EI9^8Dw{>V)Mtx$!k>w2Jo{oX{AqA zL%CZ0UmLux_h9t-mb=J^(0rvrB!kpUXZ(m>|s2r%fHL%f~)U~lg25napUMa z=-cOfjH}EH%t0ci!PWd})ofZCZ}1tIdj=yPe7j~&b*2)96Pq@McP$KJp6S zedId@beoamfTwDtc=ykHd3Am)bU&_G2gdpRBFPi;fru)QP4m?5S%_(_ajIQGMIBs8 zfoQoIN~D#!lh!Lrrj^<3c{Z(dv*)?A0)wjOr*_ZRPwigN`>EZFDspP~c71hf_mV0) z)vhMh-cM+ZwYsi?yZ1H*dnv4*HtrKAF3%obUc3d~Yc4O^Q)`|`uYM{W=dntn6By z#A=pU^~AcDQ~@igPudMH84~@IcC(T6eoDDx&8k1N1TJFch~7$Dy>mfVcCwrEnB?wX zJ?wFZL2AsSAYi1G-n;3;MBID3x>9NS@0WJGjk6kWCDOTRf35MNJWN*az0L48#&lr( z%bXw%9&b!^pl`xKs%yUifZ#-m?@v1YY9+1S_l-1$kXTbX8*m`ZjZ0IMOABCy^r( z7)55&Gn+zS!w^WW;c*iYpwn)dO|_L|tecoDXpc8(t!07$)YemMA^<_-t|_3`WR>3P zyfytT2fC21T^VbTDn`SKBR-eimFUUv^xp{4Z16yyh%uW18vXOc zy)h>wwO6=+N?ayBw_fYD=@VW>S}S8nvl)-enl8UktZrX#OSeIv~^n z{W#r;mhO24e7^hrSIx7ULg)9D#EH0bJgTq;n>oJ4e`5U<%iq6esesrp-EoQE|7&y_ zAG42+**C}Z$M9vyj8t~t8S7}`)<*>}~! z#b@=Qcu4D!e+cb${JXwZ&hx(Np#t*2S?51-{Noq^4PQ(E>W$wWL4jeHuK4mZAisQ*G;(9$d^f$+0B> z$KqhJQ5pO7)Uwr7g zeZfB+CG)*^u^ibweq3!v4OSj)<}LQpm74QVCgKyzaGWc}y_?LRTh(D&iUQM+f7Kk&0t4Q+o zLN)pmn%v@T($}XcCmuYRAGC1hiRQw-xW6-+v=y6l@#!PKDAhRr-h6OUJ`eLJM zwBPDz#^^saN?^5hmI$cm?a9jOIE#Znqh^qY!HFfBq{_-{#5{(!{~2;l)f-6naec;G zFH_~Ku(l?U{{UmUrjSJa%WECBH2Bg-!e%)_4Bp>vC8_>@5(#;7@HthPO9-t95In0N zf?tR1L1I0lrYt=+cpUqO)1-f4G(FfV9z0F@7e~|gNlrLxhj!zr2NcbQkgQDR=yyoj zf@BPUA9;2T^}Uw|Y&y!se@S$g$VYuoAV+gh#R%Z!@F#9~6_U`BR(~1V*18HI82ylq z6Z;r_sbJK6iTVW%S6Gfd$89NzSybFca(O(s7K{Zt&L2G!lgf2PX8vfIkW#*m-kQNN zPVVHci`Z7tK~@Mx*OKq>_m+PQ;FQ`m+s~5Q*Ger~@{rvvqm_!&iUhQ^lF6g0r4PxW z*aWzPU^0s1!4nzKaS3&ZK|hX2qyJF* ziQ(Fdiko^|53Oi(UOG0oP_3-JabsPR=_Gai$?57EFV}^t8KN#(Do&ydSUXIi8t0I?Wt^yk>9S^W&1cam@NhzLF$E=&j)XAgjlVeDDo#R_1EV6m5HhU>EYi*vHRZ>yXFsdUq z!Q+taTWwecS-R_8#{{fAJ>|PFpQyYoFbcXzqFM68d{*>1Ir{%(og3BZsz*~0lJ%Qw z!1+GY_ki`$t$D8c+qAR6n+6ltS@zAi`Y?Mj79i;?K6Nky+!{=qrd_n^vj=7`jr%vo zOm_d9VkY%nX-o#69ZKk$a)CiMaV?=JdMX)6$FWY0_t|ACl;_q_`sd@f`MGlRa=K3b z9sCTQlnq1UKgk%!GzQZvYtou~f10s^j9<)@{fJdS!sJEfQ}fI@SN6Nf1DN<8=>4tS zzWrxc5_8(wbV>2o$0@7=_p zbE)C;?HjHo{y)oX))K~8O8QYPx7t|2q(z6>b&LUrHWxV0Z- z)(mD~wFH>CRN5zeiKtez_T7}FAChTii4M6kV-LwVH8~MCdoSZx{mSh6H?mwC5o*#) zTS~s$$_BkxN~w=q_NXw1zCWuqm=#Hj$P5!&Av76c5R2jPe9_;}QhLH@%SL9PYT#;E zdn+07UH=V9VN^fvSdvAgw@daFAp{doD{0r|V!05DmW{sM^j{`Fm*@`Vw3*n0+if{5 zA#KPNj*|sjNZr~NrZmCUq8X5|%d4r|SG48b)2{8;vF5D@G}-#<`E-@LzooN^2pK!< zd>Kah&Uk%m99CI*o)ky4o8EuGvu;GI#ZP0UUJvW6P)l$V`#Pu{^{&X)L0h8hXwPUl zHhH?TKQ@WFf-6;0cJN(vcV&BQg4epeIuTx!<72!R;csT_%RhbN% z@$5W*l1;k3P(m`Ul+V}7Wy;C(tI_-U{?~C62JXDs>Sn%cieoFs$MjP@-qH`V%((s5 z!z|PASw=HqADMJ~f?SClQ{M|Igz%9Rnq?*CVyIP;LQ(&sD2Nt--zo{5$x5{lMXi#+ z0YQ^thV|)o(kag8z(t>56?b}50UO5N`$vyWbGWrQ8Rqu9twwYOZH4*OKzGa_cgz5H z%)oZKx%L%+Je#wI=i08#wTqk1wac_OWpr&$LqOh)j=l#hwEE4sC+*y4=4}2A^Q`)2 zjR`*TABFjK^FAj>|6|sMorKoO=);A6>yp;+-CK&=n%~L4ufJnYcTRvO6ZvCEAo>&zrc_Onv+ZU z(pg8>;X6v}aMU%o8yOT8t5DGVD1Nk7E?^QzZR)|-s2F>*LM*ot4ThNOM0fpn zCWG4Gn@EcXujMaO$_2IUhcwSg!`dE7bPtCzS5szis~6NHSYa7f+56Nu@ij@MC#{%S zL4AJ~eG+}ey%UyLU6~Eenf+7MBwK_TD|HbZ(?@;=W$wsrc?=ige-hq6{7>npdVHE6 z!|9NYuT%r6WQ>fC2G1k^m&zQ{N-ywmOm&Xv_(Sz6Kh#&XwPcV@)|X?}mH3z%O`PR^ zlED>=0ooTG!^6>5pYK)F;5@hhxUoCNd*EwO%}9;NbQsK%mJ?eWUS)`{IjerWdt*P& z>brMt_MPmg?V|rtv3pq7IyaW?qyt$ub5bzsb_T$BTS7xj zWkv5M+u<)&D!@9k4?og|t2bL`e8h!P*#Aij9 zPMxDIi!Q6tGiiIwTx{U)fe={YY~lUK2+{4@7+q^_ z#HLE4FqfTQxxL@!2T@S!f7}wLoC$lD}3wgou zc|%Ar$&;dn*q~pK(MIpz(^uLa%iEsyx>=1}_MaFe)r*?^yE$v5R7ZOvPFVmLy@_Jm zld(2(8V$)A?ETTyW^Tcq=)NT;Nhb|TSs&hr!PDaQyo`^i+}N}#pZ3br;hNH+ny#cK z|FCO4CWKR6%vf8aFM1|0%Rkwe0S>wW)e8f^`rxO;iuyC2eId$Y#Dbz%;j>@Xp3$4F zBHJ@jO5me`+hq0yt1)K^%ov9>3Wg|m3d$C&d}?DKe`ob=d{b}senPOt4cZ}CA>G!s z*e|HrK+&*obeGG@QW&)}hGfv&`OrYaI`(`>zZmvv3rn%LCn}sxXD@#ut51Mn!V1i5 zF3xROi7892-yTS8nv1E+DNI&4XI9xGG9NBfP`wrabJrGzp%$~CJUcK2#+wx7J!8`F+x}( z?({-Z8$%Ok(tjTCU@i!gP0%-1H`Kl8w|lf!0DSpIBN}do3o#!I$p_ux^<5 zkqr$ctE}kxnVM%*GVpsn9GBT&BOJdOfN}bc>8on^DtF7(eSwN$V)f@{@A)`1yt~t| zsJT4oN;Gf@h~ZpGY;-PoM^uqurJKrUPH}`-Mp4zn-#fe>?)N>~XX=-Y(C9%rUm*0v zW`gN0QR0kl3bfih<2UNyhHsMSDYP@^GFm$GSZ#TEec_f?V9?%w zU9kX1O-X=X9VL8>cMtOmurSdxURG%cypVbDPUpUc5i7ByHft7w0Nv`!C~26WY}ds{ zFV`^S84eRr3RQ=CO>ZMUk((@Y&|AZ70iikByxtY9eLua$H+f)r`H*6R!ndaWGp{5B zrTDVKAfjLyQr5i#xQ@cuttp>DEL)2WygF0N0M@~&Bs@)TNr+N$qz3yd<~JfzF!ZX7 zL^eQ_c{GD-Mge8{?CeVP%IfbB3z1c%pz#pC;)RpY68LD(AS!2!#$}nzc*N*GTNZ&p)s+sGDhs*VKhBd> zV(jZo7q;x$fmTvlc2!rozS^d)4r5-3;@RUf(j2;OVDD5OINsqs>VJKNIm@7pvAK2R z8>q%zUkdi20yCt&B~Oj#yq;k2ryjz=G5Swt6|&yjriLb~=4UwGl}+k`x@K~t^JfZxMsvAq_ttdf#qNE5cyX=ME-L&$qzOi zt3P*~(C+Y>^)~=kCR2uNN`gzkZ*1}DizaLC{37(VGMU&fW_rU~*F7vBDgb|nij5`q z)2ba4HtY7+Jd>aaN6HOIKx#%dkCYYV%%ZKR&lFhfVb!I zYVpkSd8o|;w5f?`VzSr8zj8M1Ywks~I&7UK0v64$v9~^#))y9afpig8tQ_OS8Tw z-TnP?drq6oOQmkznhic%xeMNB4?B5Thv_`AXp}(9#$S>}tN3y3MS^Q}ngx~m&^<8t zUSL}^P1{2Ii@Xy zf?DFRdkwJ5XIkfrbBpmAcx|q=%5V1CdfJ7T&AXN8EtKD7w7Y^?K<-~vC{HX)v4)}m z8+Xmp;za+oICEWblZ&zi6BD+7;3-US1W)=u8Sd4A%fowrE%V{mPfheMoeK_qwz72j zH><>*v!z7$=#ttxviEbDXm9R)t{iMh?{{eySJX%NVN(4Nu5ra$mSSn=^jbMSub=Ai z1^wW6TeRQm@$LM2tc}(b=h&EiBhr(o5v5|Ov@Tyw<63W-^dgqQHx_4ev-@K#5_9lz zec#Xar#f8*f0nwG(`$+Ll)l1JUcWiiRYg|6^NZL2sge3M_m}fOJ(4f`e8~S(vM|FJ zHK_iL`9%#Gzxnsa1k1et<9WTu1l*k8c4X;EXa6>&i6DOOZ5Lqp&{J}fklRqUYV+E; zE-SqlJJl>WP?lt+O!OCOMiOZ5dhgUbwcai*{<5}#WfPdxa9z+GEes4eX4#=Xz;wmKE}{)ArwR%6P+_Wo*4_hAh;i@5^COce|r}N`dY_#`keg0X+U?-1{ug z?i`DI3eFjc{Vw2aG$o&;XoxjuA;2=)3vy8mo8#$5+U^x_M9J4`&&XXD;SLz0|BN~%V_+h6mVM3s-pG1>PTH;&B_6UKHaH5QZ9L)PQa$si?4 zIZZvoem!l98T>7!4GKOFYfsks1_$D6Efl5E<>rDJlI7jA-L-a?ff*A`zTpQEx>}l! z#udTBZZlDB8)uOHqN=6Un=D2I3pLM&R)`|GX_a%#EsWM9D`@4X09M?t5t`Cy9#T*> zTQsBoD;l=iJ5#8Ku)$9(lv^$l||d!i-{)Y3B7@;pkEee;-p3O;7+7|>52F7 zOW+f}PlGXZ+Ki5T2u>RBzxL>l^C6a<-r(6h>&aY-k+l5#8R zJ8LqT4yKR%*Z;{X`}ZXWkbUeUAL|q8W?ONw0CC>)G^Z44*^T%5)9$@iJ@QQlIiX#< ziS5%XwWD>9=f}1M$FlZ!OzPh)Wy2QG3Oo5Q9RzP7;B&H?P5#ac^2Mzdutoq(MqN9x zgUy8Zlj(>gB-Uu<%~VEMm88J_sLm36-OFOj?$icfAa^yH?Qfa;z+37ajJA~Uc_)Qa z`ZqX<4O9ucobSD@aqn&GSq+$6JM;RgUVPQy%^IO#s3#+pEM}l2O9#)SUVL!h4!jH; z7F!Dh>Ld(7py3Ibp5U@_@JT+mFt-3^({(R^ME5y-B&o+-3=!og4zQSeqR;I4Iua&A zoLR-ECau_>qL_018{^->(!VuA3!*jn02qgvPj+XUvc%ppnqMq=pdbgV(AprU&PGE zbC?HQG%W1R*NROKoHOZXGNV0>z?gO&aR)=Q{oyVnkrx%F?I}=%yS`==ZIke&(oH)( z1; z+5Rptp6y=Tns?OsoT~lt@n9$QwJ_l&z0XiXrZ?21Zw9T1t4vPW`keU0`r1uogn2<& z#5q`ByOFe5^NnrZ^u72bKS9Yp#ne2y*Qd>KC$tHV@YOUUiN;P>%}zN@iF&3{Nj}CL zqTjU-^T71euvi^tqiWNi*zD^;ii)b=$G$;-lZ};tLz6~y=52f(s9D>RNjX7^b_!ci zs-`F-8m}Hh#J8yw6ePmYvk^^bl0)&t7kK>8?4-?DbToBduRi7^zcm@S+J}*LtLtks zY1<#Rr8DN`+G_Ro@qyq|+qOE^q<~nVzom)WjN`JsBePb#LN%6&`=~vq;*Gp`gA=Le z(s?hwkS;hB&P~rC%eFE~$a zPq*`E%(}$mygx3}f_OPywD)w$x)G<#gLw$d`?MonNOySgo#`@M%X$Q~Q&XNqY=rPkLTH-|tKJ zUG|%N7|BCt=)FJ(1lZGs=>-m=C!|jhz%KN+OVdls0K0{DbAY{&7rrtPc2Og}$cMHc z2^JnNPWPu5TlGP@T|%`6rTsp3&upJhx$`~cLI>X^-l@Im1?_&?YdGG(*!n^lxEhX7Mx{Sy0{ZrDXFn+7* z@(4g_animby`ufp^r;LxJ+FObqkUDgeRb5|t9%>kmFbm!sz>{(^hy%#^QWax3u9#C z?p5h!-v4XTtJBN<@!Iqnhv*II4TA5r{`Ph0*OlR$Fqj;^f1`n2pqKEu<) z*bw^t^cpg5Om9RfO|JtDQGK3-XQt0w;lN0;R|Y#ona|3s6=`3`c0B7;do}7$p>%u! za^2k_m4sS)e!4eZ9inIg$xCw)fgCzZ^3!nSMI{+5e;M+&y7oRYf?y4EwnuWCl%5Cx ztggMy*xN$(UGPpcGz;ev_FDk(yMg$tDR(RX)?UsZOp1nP9osWlU{FD5UJGqFlXJ<*4d3^ zbC=HEU)joeBNSC3tWo8+xbe@mUE1qtbtYZ*HF#fCf04sx$1 zjnj0nC~R(}VPzr%OQUPYC=eQK8(B`sgc0Son9nV-W3tmko2wpi+VMUW0P50(CZDQu zY>O1IPiMI|#h!wO(w?hvZ9+Gvp1C0@SY7*7v3@QECGw4d7sHT{)IPSQ0LW#;@wW@2 zI}pC#!b3QD&0{q7qRBuDp0d^Zm5%V_2cf-$_xv&=0Gb z)pV6$PwG>akl<8CwFI{)b=gzZ_x4Tz)dU_^&XBu{LRNL0?lPeJ=jWum(sS&QY?Y3g zowkdbY??TixEsUO?sQSTW=fH)*qu#@yXoOM>A5+|b`PVhKO4o}!7dR`b%f=sZbSJi zaJt`k9({@x%S1e=s(5AXBjkjIxt1s>W0kdEAuT9liXWq}7F1;Xlogg*#p*^N_DC*$ zgBLXj4>tOlaL}15jg=|nTx0%<=a9YjQvT4GRt0S~kk~I~0#nmCi2|lKXrMd=xJ+bP zmm+=6<$4isl)xPm?_mfWaiU{9)~5LltSb%6G0X`p?A&zvA2Sj$_`?g<7RsI1IhW4a zE+AW&nC?=s<0Uu&!kJv&bu)#*z|%otq7mcMHhv)CFDwSa7g?dUH$@;6>W^AA1{VQ& zSG-%qIyKX6p6~1*fY1qA;kL9>7I2mRIh>JZSofta%SFXL7i-^OB9K4s+W^hQh0KQn zkoc9gmkV-cL(A}KG@z_!E6dc;0-quV;j=b>#U$Blx)D9YXFY&GNO#CLz@e;;X9N-b{%vZvRr@%WNZz{NK>{V6|+qV8Gbfc2^o0;s|=QEtdZ+Frzg5Z_>j%R z=GP5Yj|3E%F=r@X@;!X0jj}^)qQ=^flI%UpmfKStt+9(^{C) z%&D2VJ)MbBST!v7w<;peS2r$UwPdo-W(YI%q-{-WLL-x$Szt9D7U@J^l4;Ui?2SmC zwvSo5*r!gY734uX=>E>p&c>`I4P>kr(f|V{zqHNPn@M7XP(av$VNr-(g5?^lyykKx z>Zy$UTlx13{QEcjvm=72#HbuS#mB(poGq0WIqNM<7xl2*DHCX8?c1rPgbNFf6CfNn zRX(rh^GkJTerfcdamL(L<>o4C)uQP_+qST3;8-gxB1DCY2XyiYG;2KIdkM=nq{3H} z7@*4~WTPnZF^vc{_Qz}3JYTbOmLEsUdD|7A69frgvrYOUE-PD&UQO926tWZNNhO}> z9}4UiOb~V!m^A70nA?q~T&|jCQ%fa z!R>=MugY5ZLRovv(x^x|4G9Z}a|tu5bTl@#NYANd+Kwc88WF>8G_De@sE^OfsiH75 z%hw>A&l4RE5)d3|#Q~i(2tafievBW=`FMAWqaNLBCRz7ae7EM`N!DZnDibpp17$5j zNEut|j4|Wp%ubf^G+hlm%~TWE+px}z_J~01zjhx&t<^>i0EAyZ7ol&!? zCQ*DZibAWz?d^$%v+r11a{$4;3ioy+O*0+OX?{}6vWX$4(L6cDdaDxs60+*D0*8!W zU|_K#y(g2yHQRp7iFT$tNv&E0mCU7=eHidD$+}Fom656AV?i!T7GJ_y2?jijicBU7 zrZzVTdTdyBO>l@;&{Z%PuHCIV8|}#ep{aDt&W>O;?n@JXG$UpxK)$Ma5Tn#KP8H60 z3^hwDvbI^)kfs9ZWRt`S)OytBrTjZg9DDCdP zO8@zIYVyG=lw5sPBE{%lcQ&p=WC2A7tdN#p$Wod+SMO}74 zI8EfEq$2m~v}ftgY&Lg)mTq6}^ejIXM%8-UTGQ_G%)7e4iPceKao=;-envxdgfrEe zqFX`pwT^-;Z#*$mAw=xZb^2nzby;i-iREJ5{LXh&>^#B#bF!lK96OEdBd4?+>|RwF_E{yvrkjdz z(1<=r&o&v`dq_TuvB{JE+R{IbO=a${e z{(d$C3_gt&CWG9k@qBvsL+CBRr*V$ujrufzRN>ShQwO{4j5sU#m+6W8(>h3FN}CWh zeR}GUbL(7ha(|q#)4pG{@B47gUpDLuQ5jPZG)MmceZ0!$`zNS>jFWEsM2DjQN}@h< zOt?C~%AwKHXr}SGJZE7LcJ9O>GD@Zdvok*9bPgOh2~6lH;rhxPBdB+;c(3S_r^PD{K(1>E z-)3WkRE;56AeTRe;gT;W_uf?3ehIkccFlJSi2BYo&{u~BwWVO>>@XX|o&w85T5ncDmVPS5u*VGRq2MPF@@CJl@hiFFjA6%w_{h#yf}GqsIpki?3tyQUAV-dSYuZcreA?-(`F(sI zMuFPOznS(j3ztQ2533^QPP)*bfa@C= z$#zgym9)>r?c=t(_U;^up|sqgPh_ zlZzVd{psHJ#py-*1P6&e*-x&0f)glv#OHl6J|KhEC6u_pAMrUkCa+4b5+*P4x2w~u z%b5HxsHZt5-_A=I{59z{m;Ew;VPg4n4f$HUA|}oFRXj@jI))>!iF-+cAbJwc5@VYu zSsyaTcW&lyw zX0aBny;~yy4n~_#NP&(+@2Naq;EzvBpPD|+AM?)1fpq51y;1dELd}MZ8yrW$_j5yr zm>Z(>X%tcS(;M*4^nE0z4L>ox0jHW#LvRhPWh8(Fg#o2c%xBTHY-!;XyP1u*9vy`X zuPtP7ruV#rz{55-hh`7wWWGu5Ng_eipCjgN(H*Wit7N zjIJB#gT*Yf`vv(|mXu8$ZQihhk9;LCR?}g6Wo%d0ep*}@W-k^;K@t{jn^A|0JTNSN zf~^%<&}!p-F+5|`Wu0N{kfxK`hU@7v;coSG8DkNYC8@)TVk`DnLuV)0d6a^%F?oWh z4c_baY)u~Y96Pf^*r}|27Eom)naf8aqm4-dj5c&!K6SN4$LHh*$3Nmm9TMi-K^!7N zRThtUR(1)|Ip-Ya@)H?n1C{edYDHVlc#-ao)9_Vg?HS^$9S)M6*1(RUfgSB#VJ&(N z9t$@XtWaCCtE|13A~{dWCa@3ptEekDPtbq@pNPMNevZBM5ME#+4O4E78Ja13 z1=e1pmVNGm2}2ER|1&LQJTTEjW}lx#c``&|Cg9N+WZD@gtmcEc0H!g_r10e3^rgKu zlyaUMDV(AnO*w0|(c6Mu!1&Ut@itlJJNo6DWe#im8$5*UN;1FH4+D~1ko{|3vT`Uh z>=4J{ayn+{zmlRFU8WUvFy*=w$hy?E6phRaB114Hm`pH1Fq;d4?g*J|>W(p5ku<%2 zm{#O;;iPB~Q_|9Hg$R_VmDPW)Wy-_1O~fq!d1&7Tb0^*WZb;BPM} zrWH5E1d=G36e!N|q8fTW#^%TvUzXK9M&U8T`;c7kKRGK<66zF{;2x?tGe8`*Ij*vS z$4XaE-NRuPk}f8L*J*bweish6t99;^Ad|M!t*=t{^FTJF}y)&KL zIkHc;BIr0|83M12`isogOWY#>qVK~9SWCxWb(1V_Y|huR%8KGHTm2m$XjVfnCQ0wnY_t}oILuBZn4&k1_*{h57eG(m|{->7e zPpHK%lwlJ#H(zC)e-7i(4YBB5+oL{0p95_bs;orY7qI##38#&7Bt*8T zE?RQO1j2ZU*Ok`NUAyUZ9P|1pNnV^OP-gzeW^|9e*n-!=eQ9wz*dDUL?@ zORCPnd!n^uk=x@PU8J&|IR8tc`cm3FxO~l_TR)%}V?v3ry|aD3Yurd!xHhT6LCmEX zyHoKlmYcvFsJ5%`Spshd84+Y1!ooZ43H~WkceRjN@^vvPzZ8CO5538|SUM59ZZDf0gLj)c1@MUqE6I)(l~BnjUs{y0^de z=o*Nf==a$$B@~C7glfI(d1=)<-)jYL?B0I!3+kb$$%I;TJ9Xcvx+}}qh)=4Ex3<(d zCuC7MAvZ=|^(2s6?-^8zXJjO~(Yrx?Xi7BLY`!g{sQP+nzj^ZuG<^$3Pu~ni=VQyv z0G@r4f$HWL3_(7J)&DHR%FnV2cnq+gtc>?}pRVFt>oS_Pr&06}=ih{h?TY~A4R^RH*Jv($Okfhf6Gjn1Q9rcvD) zqX4I*mcgr1t*xH`W_AO&M%=2eeoWugM!wPMskL=|dBVSWYxsshui_h7z_WHl+r#a6 z9Vc$i+w*UK+hy|;`Sw{FJAGsum|AMZmAr=f%`b@QK|mUBMW5Nb@;=qErMz$0rysK{ zJ3YKKhizr?RxYoH1fg3abk2jRg^H_G+~zL;K9MlR8Hu=~SFfB5vlqD$j=II5yj|Yh|Vrw{lR^ zWTlcJLJVh^;M-ewPowrYZ?3+}+pb4%WBz`wwcWELFl=s+DVfQwJ-znbWOJ8Qp{ zeg0NGEVIO1?5YQibm@MU9F27Oey(bJru8LVoL$HA!o7xc1@p=3I|&3v@9jO=Mv*Qo z9cZ)843ckWx^wk=XnI%w2(d}$^siOZ=bT7)dDCo&P>Z|MbG_+3G<}XWyxSYzQ)>7e z8pgU}4P&5ReRsM`ik}SbL>reo5v9B6#V+NW{KdesdbgFxQH&}yZE@YthBBUadYau& z_U1G@OU{>+W-VIl>}mEpze;F!F0hzUZ3m)#nP_I=gv@>I?fqxrGr7&_b#eYyQKG$x zXt!@pvS}!XyxJm))f_uU;o5qeCCA&baKT)P2@^$&V80h?;!e(8EQqLeS6VyZKT9Sb z_ds1F?QTO|i3oD_cb)o1X{)BQ8lvZq(w0InBo8}l6|&2;r7${KusUm8mR!)5$L+d2 zoI@VY!DtU54`uc#$wLNb@(@m^fhG-n7Y$_M0l4P!a50mIizRv3SvyGa`8I;E-B`Z1 z-CRQUHJ7j5kDa4?0LyEm-6AL=h)WdobnGCyH){RC_GCA$bGX-Gm!O2Tw5L&|u@pam zwRvJ)$8>dhnQbo#+S5XcPVQPFElQU_%o5L2wuU8Qe)XfF2t~D+Da?C(Iur=(KHkuv{;Y01MK7LkML2j@038oaFIjZbNyrQ?e_OQhw`x;LH*|o4Tk~Sl* zXkYsb>`_@f%!Q}j17@6Q@m4=Dj?otb;&hB`J}@5f*ChZZ(bZ2)Vwjtlhax6+*Dm19#Y%h#^k@*ayQ_xv8fp5isry6m3fT3JXh<(5#S2ul?1cGX`0o5kFH zA{!D~-aQ?!cW!?xWyUElGwG+(@kQ3aR7rx)mS7_SpVsv0A$^(>FQO7&i9-v|J71B))QkVWbTEr#@JzWsZB zs}G;2f)z|C0!fRYoH&`R)bFpYdyZ_!yIZa>vda7f=4%0AixK`fI}MAr6Msk{9SpyaRJvNy&e;hidYLFUu2^ zU_}}y6e`zgeX81?0UKXsvckBk8kYvk)y?($*Q>o}TMvc@_HnX94lrs&Pt9OdT|8XW z(xnz!T?bxXSr2rAo8h`XTom$r>sLLJZR4O|l}us+TA$uxc9&_cmIgZ@Pp~)S`6P(p zJjRr(l;vwNwDi7?wpwvgG5~1JUyoi-y)QC8D%l>jQ03Sp_HZ5Y>w;yT!rIusAS}t7 z-CIvU-)`lr-PSuw?QhLqWrX#VsF~fN`zwtO|H~&Gmkd=TLp8wt2>p2RNI$UBs27#~ z0gwj!*v-t=m0%BOWJe>h&}(S=`vyVO8sf!7!q71tX0!h-zVh}fw2#XaI8>rW@g(LGaY`H`0eivH1p2|w*DpI?dA5iC%nDN-e&#HjNg;h`w*6|wsiCM$wqcA z^<}oJZODXR?dsh|vCP=z2C_eZM-ttS5gpUH#_>*`^xxfwIGgyk9bf$7a&)M7JD=SY zFK@fGoX|Z?(%zw@*~2%vu+RJx1ev7KT|2Po$IIV(=>9Q(+-M|t@J%&6+!Xv1rytKNPBWfEjNtPo7wIvZIu7+-Ny&J5Lfy^ZZ3Oc}NsJ&~ zK5r;#PDz&xCCwkc$&GOu=lQf{_N%*g72~wW?YG|F@)4bL*azfVo$G?9!_i>VG5P&) z8*y~kIck(qF|!^zag)C;H`QHBVT>VdYo5j+L)t=~#wbJDxp^AH3~8%*+CrXoX`Z&2 zp&fd!MtguqMtj|Y_LwieX~W1qZv37^ck|6lMJt?$o6H{IHevezMd9s;;cZ%NTEc$xW+-lOkfYRYqR&%x9D&IotoG@)nNj@c!?cL#}3?opgpnnQ6MJE0?SaDL8cznqM^Ys*@4a)b|jF?^PqU^viunJz}i zPb>oeCc`g#u_0BRDEH5GiW(EI&WU@mJFD0jEq4lm;93+*H!x@T)w=8&r7hTfPq^nK zt)B35(!H!4Hi#f8hv{AEQH^hpocN2NbWB6kLc!d|`1y}~u@Su*3(14z4Ste8 zdvs2Hc(RIvEmbi2@wy#X7UrMCwp!A~Xa|SjMfaQ%#lQa@^HHVu*Hm=3SbWFbWIHds z|MPQMj%Ggp#<=ADN&bzbN%@;jo};N_hxVMP7Ay+ zS?F(B%<<}Hl76G{;IZ>TyX9!Pc3f{pOG9TI?;R?mx4j2B1XqRQZO8Q-6l0=cu|u0EX^Tt-^&UOv!XSAHPX1|B6yLva~Mjmtho2Pq@W zi&_%!mw>+H9-VwCQQ3)4=@L{TD!B7O|GJuf23z>xl%^EB?^JuYp_bJTYcr~y7+JRp zaP>POoMNE>0X)^Gs&6EeW$Q7TDUVXRVBR+`j{85jO zGvP7P!@lhPH z)$E-^^@IS;=#4vv$>tJUPXpF__rirji%=-O`0$iTH1**WN z>^kc@9oH^Wk&ej<{|={vlpz_UTHx2@WP42exyF2dNu^tg*@Jp1tZ<=!tv$HbGBZ{> z;WAD8yI$$zQ1pJq3=@^4)xREzyhe)8u{)0Z7`UvwNfXqO_wm^Kb>_4q&A-eL%*8VL zeDKLjz{+R%V;m=*_C4@tC9mt_+#P&od94jJr)o`!?ijF0bQb|8lHR{iNN>sP*D$_U zX?%_Z^djv?;Z%}{ug3#n2`>|v*O_DX6U%(_aO#lO*t1EUsco65tgLfhiU#-63ROd=<-B>dC zw^Z*@Z|kT~V@a*s`)QH@+7DSr20zTtM6J^M_x$Rp#C$lw4XdK~O(s+Na+!`=5ot8W}xS$jgK=1Spdu)?sA>bp~DPG)7%Rq59n*%*Jf+nqyo?oiIa9? z&f%Ne(_QLUafDr}{TueY&Vpf_7`9tZ^0Sqnu>FepZwjHvUT#gAEi!bfMiusPPK)Hc zD!NRBn`nXacLFW2tHZm@#__DnI4#qTYMP~@S)XqqBBH@VonQ};5cjb9LmY%R4+qZs zoL8DJlioXlsG%o2S31nKNXyb(tGCiz8_HZXR7P*5GKT;7*#4n1dfWRN=3`aJkG|nY z$=S3lIsFAt_)Vgb*ysab$e{;zk@MS-07ssYi-Fj0zd?M6Z+ZYjC*jR*re~?b8sKL| z?975qaMg5NRiYQbFGma(vvf!>AV$aJI}x9kkr~hKug3(a=++-o2&a#Hy&7B=;CO&3@D|0EI`I0(xyp%SJAf$; z{VnEw$U%3rvUE)?LCAxr@Y~SI*rpLmp&SQ_tc1s#gzB)7M9ykXF;#|~A8<F07-Q9H;8;H-9Umf*om-Q`o#<&_1@HPU6HkgL1CyhMfo)@3bFZ!9kv;>Mfd zfskfJ;cEsMn?DTcPaV4H14QnkH{7(^X&A$%^$W+F;mPR|k#_m}9{l1LIqVtgh-Jh8 zA=K3S8SuhWdmBW*&E!WV`aU3ghvUQUwxUB2#Y*$8Cy2YN{W~^eZMGoP4OKa7!;bxn z;b*5xr@Z(nJ$6CBpX2&;=vST(V@#44-s8H2S7=0d!V1!Agx&@HIE6B%}@9t$tX1@$XcRYxdXj zRaVWoqWX!J9A||`WdBLi|Fqtt7U(D)w_3E``v~U>4SvLW6UNc>#ax4+e;p}g`uK}6 z8?ozN^3~SB8!(6Aq}##5ZZcQ%3ox*;84P@B){5?WqS&7!aS(B6eN2^227~T**=>@= zT5SDC0R(?L5<^oZI}<7#NGJ{bRJ3-zNo+B;=5{fk7BRkj=En18Q!}h4Kz-KrGbi~B zPp@EYIAPMV^)+A^*XdQj;4<5?Mm@ejXrnieJA(L?0cy2d>vj2EnW~vVA;bwt)JtA} zGYYU)LK4!m2WBsgE%2^0_>9t;?1=J%`E^t&&vv(ho(KDtulnAXAd8S*{XI?Rjb?+e z)WKC`3lxxIARO7CUkz-epUe0xkSJ_!im9X9beil${bk~O(b7>_RjopCnbbQ0TNq+R zYdRf*V~+x@v0r(;O{#sMz}w%ib7E2;H0S%e6Iz`}MM4RY&DCgu-m&&zjcgOaSlqE7 zCJzcJ?WIwFAe>AxfIMbh6bp|lumuAj_p zt`aI8>(Wm(wfbb`RZXNkOsdX%J#$KP; z**l!CCZ4(jD#epz1je4&Yf19E%B75a;{+EJZv{n_`rsSLX;*bEs=^$`dhb;F|Igl= z07!OK<>NK=s$T8g{ib@Vdas@=!(+N9D}a9;re%N{b_< zCrw8U!2KNpXQTBrRi|saz zuVYvoqan$?EFU+>*ub3zd(e%?;)@L*)cOrbJ6|oCbS7a8$s~HlCH9qgBV)(JrGnqy zQL1o9c-hbXKa4w8o$IZB-(4l`d*wOsl=q@wrhJky<`o`;K0P91OqNG9KR@ytepA26 zTQHQ4F2q`jy-&ALWxk4P1Cj9MbCVl$eq>`Dp?v6>eV?aId47I2an2J1hlk$y?&R5s zr)gf%mwVkaI5sk5PP|EmQ5!XYA}0dbK~j=o49rVY!IB(tm3il&2f<W8{Qfrb!@a&D^%?j87!>zs;Rak$so~wg%W}~?#wAzY%00Ef z*=ktzOt5ij@G3h1s?C2w9bh+|rYZv;%1vom+t1I?^0E%mcRa0w$=Mj3IN^;vjY zo=I8Nj{rQXTNMcNZdA~h(%{WXS$6!5DzNC0LPf8$<2N*Fvk!n28d^%G%$Wakn)#k= z-_rW|{3)+rz#rT#cQ5%Zum6<%`s??W-^%)Z@EecU`*J-lUdbe)dNfgH97!a{w!3&U(eWH$wC_cQsJp65C0Vp-xuEDFJc7Yp*TK%uz~C6*Y5|< zVzGP0qcIypTv(__6lI{T|G?9*qd8$eWLWo#uOx!jZ>Fy_{`xI+POKM@KE~+|OjLY% zvi=AE4t*lULmwB#&gc#DUaR{PxRtPk>-b7IU|hgNwDF`Jr2ICXt``QcVI87&7(+hN z4k9lfbWs@lrpPjQ2mhZf1lRUa_-k6AnjLJSU2H!1@^r&SN(Wmu^by@FPW&&o(T=cz zQCCmC8J;bDjg9jT+^huJM7K0~ZSRL?w@Qca53z73e6gFt`vLlCP&UJVM}cT#fblOt zo>BbQ+4!^9_I|+lKg0O%bmQ+T9DV>iU-)?W!CoB$e~(Fv-!GEZ6wD2N1OY6Ir)BYS z%i=j@DHhH`{O3qr!ci%SM)ea>QHPO&`1oN6sXbUu7kIjwYiUW&k3Uz^=v*sDo1py| zDNGeRUidjFDo-CubWfVAG38al8?_Q_k4dES29A-i&LZGLCY*o+3vT#LHk;;?YPTsV zE!zFowc8%#DeF-&>_|%ZM)X2-6?zGuPf}X6=*jS4Q%k?S3~_EOqMXIfwU^h6-D@vz z6eq5|yjh&Q_VQM7>e|bpahb;7a&ZQK{o*YC0yD4R^fK@ms->{p`pZoM6MPcYCq9Jn z&cYMbvCFt-ri6!<*YPjAuHu6l zr&8fC%K1F@2TocQFK>7#ZDqMGNis$7mzAk{5)aZ}dpUx-$W4PhR0tju)&nA_9SaZN zN$ZOg&c=L3GS~%ToQMA_+t14|JBxsYKyQ7vw3*%^?)I%8p2#-#J=3*ZBkqIpUd{57 zdZbC2kzl3GKv>v`WBMim;}!8FvD4i56`f!FCYLpbAGYj4o=m4rLr%o+=|tqX<+u{L zo_qp-M`n*orl;Kh=xB|{yP0zs;{PbohMjcwz4v@GUoP)ny39?ywErdAH7F^%hT{uC zrfU$yu?7#*HJ4ze=fIn|6g^X9&&b;JAk@i8`=Z;J_C;>m>?i)4x&};5@H)O8u`0Oc z%^BaniM}tml3Cv`MY3GV*iZ3Yy7roNZ*j(;zGt+(!#@YPwe!%ps#LN{)yHB{b}o>| z9Q`_abp7X<>O*Ww#juKQS5I&^HuSCNsR#1bd)jsWU&*Mt2rR^R!ScP}hL3X?Md8K5 zu4FiF5`zG~@nady!@T1qkG+XB^qq-!0nDDf4VAL*q#Xs!BJ+-uHlRLA0y%a#W?#Uu zBQ=Dn2Bz#CItiZ;;`GC>aDe*<{~JI0nw7Q&2PhlQ55JZc9xjjXrlZOFxOv(BIX529 zfID^4H-%fJSEB_m+D!#BiEu3Sso%e(GaMlM?X0X4BlwQIM&`DZ z7W^2#UiMY}kRyoSiv)RKkf^crbtEml*zhZ%WL|+oYA4>!%0xB%4hvPSR2~0Tb*iTR zu-mErReTgp;QLslVM`uPNeBEgeo;fopdomITY_LT75ZJUU`!C+K5$DAzT%*0#o0M2 z6zm$?wy`j7W`nf66vgf{O9c?!+&P6y?9ANh zOodO5Zq`0Uc9lms?e-dLy4)^ej&GJ9uN59QX|QYLD%`&J1M0qE0`X-3nY4k+ z4SIb+@ZmD;;}>2i<3{gzrF|~gf1O#HMS!t>#xt83IWtQ&_{qI~I1w4yLz`Lp4`7-J zduTF;jGc6GL)rf=tcBvnHGec$CT?t8j1@C|EL*c^`smB+xLuWD*{+wk4}&EY&1bBtzu5RZ5TgzNq_6n}CO@!waIb~>jhXx$AwaLQ&dXy^o_@wKkh z$TWgJ@B%CK)f(+m=?Q|KTK@?*SRas7HT(vLJ!ZWLmmPYrQ=?CkdAEZnp<%))nAC(! zr|XkxRGQA&0SmJyIdZ165^|B%w8`t+Q$Fz6iD1fDN8^_oEEwPnIOiqL1f7fV{~~7& ziHfn<4wg=ICq^{r0Zm?w2_T9^d&5hx^nLV=Up6V2CA@|7TRIr@ zg`f{q#i*|qGvBwV1B2HJ8G#Wul0F~<<7=k8R<~?@H3KuCM@@5&YC8WW!x3ySHT{7T z$Qoc;)kx{eAqJ(RAvJovJCXv7q(JwjkH&aVeQ4aYg^EShaSXOy`B3=S7VtLJb)!j=|zAs+1 zZVQpci+VN)`DF2;c^i7l;YT5ZBh1Ba9T-zFpJTpvV8@s`>fYhEoOSQm>>a==DB8UP z-FELlx7|C??d%=oG2T1KqaU8dH&Zpd8-Hs0Q`eu|y~E?sg0goIhr4&62X+C!&Su3c zSoRL$*9xB~e%w14A?r~}c;xOKBp>V@i_YUVHQ>r+*cQ};= z(7nTxM5J->D*Qq_%Dn??WEw#qWbYupT7z9Gt$PQl|Aa=;V11Ci!xfS`_YM;MkUZ|x z=;^(KBxL$?Qst#4v>D>=9YoIbLqaZE=(BqV&f4VO;a~CE|7~Xu2{#2yxTVi=KcE}| zT}%&gSlhjWsKCswZe;28@!o+#@!o+?E$yXpMe2h0tGJPN; zOntRS^L?wDhMd*V(l^{l`hX0KuMSJ&3q7POThXMNrmdP9_M03ok#S~Wkl}T&fi=z1 zNa{e5<8jd_h|J?k=a1lZKVrU1e*)h3taJ3fk99^5=G1oH_plk^um2J}sWZCkf4k}r z_toFM;>w&bvj_M@B51fhz+I59eV1=VXTyWbtpnTswz`boDvU`9>*r41! zz$0xabw=NJ8|?@)6kHZJ62v;6Q?TAbPtz$)UAyZ{sC*s@sqh}~j8sOWh3R=LCPzx) zJFqK<27+aJB+_^Z*C@rSUyl%^GFj@?kj!YWUOIds6Z%W|M+xmK9DW!)p*!M_>W%<$ z12Nf&WJ)G5{HWvtgo7AXRMzQOr_}MJtlogKdU09Rrm)c~ElF)9x}S)yY9&@4CW0We z$EcN9SK1`b>XfEaIwi*SLN;e(x}Q#o+Yiwx$r}$krE}0-g5|KT7uhzYuHar$(qr7B ziUI9GK8k(G>mGY`>YE;n3{~I6nxM6R79K|5R4RM|ab7C#BxsfDR4O&7Q)(9HsBc2A zL*WF2)A+`qLdsvpVF9RV!2H11+-27R-J2JaB2*+)mT?SK199Hi4TMsmx?Ht^VD7tt z&@a@MYc_B)83=_JG*-YDO~O-&U}R1!YpTvch!@@?ZugSd)Y0}>9F>t?^g7}FQTu)U zMjD#T&WdQHDQ-x7O?6D#*M9f_wkvc@+SSAs?*o~%jwvZ^28QaGGy&t4r(-$+>B)Br z#|?YU>X>X9OW_Z6=CX_>vEBQhR0(8tP3b90T~p2!{eYdKlHNJUUvyA1C5#TLU(;ct z*yKojj!uVP5bEjbbVLeuN$7OwsS|A>SEnQ4=ds(O@Ptl>;hpdt2=v$KNE#1H zq~YpxK8#Am@1|I%BW=(}r^6ZomuAY|p}p8Niqj8I=hX2J-WNae7T0kf>pYxzet2eD zIH}WdWD|MZGaXIF2eCEP&Gd_R_uP1~PDkR&x}V6->U3CFKg=YO)YCY5`{7bL!vV7A zW@TNSPFyzI(nhBfwKUr<#GCk9S%;-NpwrgaEd>uZ&+~0@b#b}s?d=jXl$uB(7k190pIwjE(g(?){s3P+Jt5S#1p zY&L^vdulQ^aX=gUaajjkT@MHH+QU$1GuhZ*n}rXd>ycR^Jt76siNUot*7e9-Q(X_G zJJShW4>xB=C}IH{Zu7QB*Tapq*^eq-v*CPe9vi%dt!(icx-DKqx5aDdcJLZ`jPV+I z+%jInh84U<94=l%58yR23oKqEel0V=h}Re)9dXq4xE{H94F%f3Yvk9(Yb0i1$Fb^q z#Ba>xN4&-eX@0(S@ihSx}A=-0T#YqTgaUZc;%Yh*0cB@EX?0G(uOaM_rHjY7KU&wBj{V{|Pr(9|W&Cn-fBGJrZ5EQ_%HDW@)@e5;FZc zsp&~g(s+%?nSMyfMPKS!yylUtT}IdQJI)*$pzGnVws;K>k>%=oC=}y0e6o0rc9yR{ z(Dg|9&DyS>&hi=SdML*Al2{dwIapnfL^o?FbUpfr^<29~bUntep|5=?N2u%3QK7mX z!Ru7lqy2AmJrc30qSI+zk4OR?O6z(wg{pR{>Ux-t89^;AA+yfgI zxRLZhbUl)k*2wr$*W+Yh1~ha%lFq1xT_D3Tsq0~QEg_|&u8*!qM$%7~u7_35!G5T& zaIv44LTvpp@Fe#0wFHcj#D32D9~a_C=zpG*2pSIiIe>iaK6xwH56f@kC9ogX!Mtl- z{SW2)Vn6G)5Zpf``NG%QAnb>;`kxIO3hd|0iP|4whMQwQ`yrLZey;f?FiXNW>K7!- zv^n;3F%wE-KP&JA_QRhn_M?GYz<&Cd)r-s8ANz5mEA~U5TZ{cL?v}A1(KskyU~}x} zwzueT*bi%x#C|Gr7Up;Pew*h|DDo@66W*JjhvMPm>ArYEGx{*iOOrE-v{YjJ#BFYb z1M(vXz~rLdQf%UUe6vJYjAVz@f0}#y2vA6+Ww4k`S}xx=iLQ8|Ha++L!(cHYoy20q zYs**+%Lw}Y@K{V@%A~OvGiA1d#iW|fU@@tt%f({;J7Ur@jR=c5D?(j3KrI$ijeJ?g zA+VUoLM#W1IrV?jSj-xhxOHlyGFXgwx>$^Oq_G%!4#Hw2d;k{1@XfFoNuxg&a}_ET zzbj%aM%rL77Q>W1(fNsn$q%1^<^UE$1?eCxhVlIH^0aU+7L&>KTjFvf*NG`sjvZ7ITGaMlM>v?Sv^J^80VcCkNr41GnwKUuAuYtw9 zOtBc2AP0+~=9XB@$kI{B$_|}ajO0!%Mye;?O&~DhUGtrNWEcU$&m&kGYJ^x z$*e_C!nrvO6GUbf8+Z*+Kt}RVKxPtnj0W-WhnpS|nGql|8VWObaBD=Wb%ECdh|w_p zz|gP?DYw1z0m^8Y5^y!F$`6i705cj?huYSpNYg@%-cEc+Xb_Bx!mY6y6S24BI~n^z zXKQ6=VqY8?wZ3^N@SCIoj+u5l95GsC=moA0*2ROUEnoXBw6jiGtS3plC@*{nyhvt? zYLZ!$JiJKO1I3Fdox+Q_p*unmix+WgxIK8$OKt7B=Oj1yPJRz&-JSd%a)Wi&#(0rF z-^uTBxWOBkK3Tlz_lCoZxV&tN7f~q2i}=(JFXBRim0gxW7cUZz7%!q&9$qBT>lz(+ zkv`&eqf8vZi;Q1GwvFOrB&9Z(s(NEk*rc#$%X4B1EVBBrAy z1Wcrf8iy%nzHd`mK8hDfv=LpNwQl+#c#&kFH8Q@$i^NxD%^L-Hk)$)KVZX`sSs^%D zcM@(e!wp%;NJ+Y|DFQxW1VKjJU>Qk2S$Gkv9N|SVH~5#?$qrZOlMq{fJUnx_!IL@M z;8$V~9v?v;4jXzU^052%tzbhetBseyhFD$+puRZ%4xoHrZ0OHzA+p%er)*FzHuPy5 z3T)_>MD33-!z?!ROZ>hkFKAkML6<@*T!m*u=NT=`%zqST6Z>F8yp<=6c|i@~1vN{D zf0YTPv7slx6W9=cQrHk;XkZ^~XvXCQNm;$a{mUAm4cy0(*JF4=D^gpD?kA!vHpB$| z@HZf|IWK4?#S3CwFJyBzX8Q4h9>wf=*8Ea9c-H()=&pQT&=V*sOsiwqq8V)HS0oqV z1+BA4at@s}L2LgyJPa?$#fCT(imZGmyqvLRY!DmzH9X~FL;1ZW*pQB_sJC*kA;}J@ zKM|<|8_G{hu%Vo^Tx>|&-VYBUA@X#z={Y{~u%V>1=_tj9Gy&taDK^AbjCneCCiTIF zWG=a9!okx?Oqm2W6i=Bx*pLj-h^Ld^bb<|Knl6D2%^2#~vWIpyu) z>jRN5D=-8$^lK2y!G>1;FO3bo9&={>iA>bt={y3>te!45BvNT?h@PPg{D_B>;PFWK zkLk$j)Lztg9bp z5=r7cPTqd_C+Q3a$i6u%>+*Esve}k4*ih8cY`Z^*u_2Zg*bqk+c{&_Hr+RhmE=hC@v%+ zF)pM*f(ylY2vcVaUkn#HkcKHPbU)xi8m73Ah6ygzYXc3^Fu7_* zi;qL7M25!km7rmY3~9W^RP0T($M_NhGQy58JhjCP?xS4_+-E;KL0Cc!nHlYVxDO}N z+Q-qlX0mgUGy8h&z>te$S zPe>dtPlz7i3CV!5JR$LGnGr|a#|Y^VBu~io$mI!9fIK1jb$LP(Gcfs?b6w&$X7VFX z$OvhE;0d|Ux^&>+u$~E*71`kl>GMumed2RnT#I;#@Nj3sr7^TMEl)^`65~GlOx#CS zTEi2P-K;s+^-yN1=elm-kOfbO3#Q=-u|}p5x>`N*gv3{CuuG+tCnWWsaD(+hctUTK z)OoH;qRVy;JR!*}%@dM@On*+QywoJk6B0So4+**GBR$I#`ZQ~o;0gUJ7W!8>b0~TP zWY2YRSXTp#3Im-uRj=lfQ*AN5?96se&}X(W9> z2F6#1rSavtE+>PECWUidl1@{@-p0|RNEq2tq;ko*F3Qvrk~&cOoa>U#ci%0K#<%8+ zrSE@i&vCQP5mpnQ>$-wH?O-*{7Ix%^;7M-JC$Zs;ftVz>=k)(C8)nXRy(AGd9Deh8 z6wmIhw}RiW{5D2Rej^shINS*|BzZmku$y0JB5CaA$?ybr!=Eg6qk&26CMsthc9U05 zFZ^Cy&i=TK8&z=|`rKOFhHCV`oGjuw;bxWkj5jHRJcgp&(a7&Ty@tRU%JQvzE#~ZX?1#>!Fpnpe0Ur(& z3hi6GoMsMUb`8zN z$WncZMaFF{e)lgU{!y7%=)!z^is-?#Jw^DS2O;j-RJ5is8-85c$@pN%M@xT~P;CS>Lg!4)G0GyBEo8f$tMt_{|b*Pkm*SmWM zX@kKyA5-=Y-5s0#E9vyZuW~Z@2fvS>K{%fZe?2Xni}Pjj_}6qaS-UbgUnbr+a^t0O zK8~nFl`PJuWzHm$i`}X0H`5soko`_pHjDGIY__Eh&KI>b+wSi%M_wiKUAiNS^YO+? z;1^4O3PJfoYRKOvAU-Jou|BCGEi8VQMdD#R@u^N#)TdIlGIJT3-dIMcH=mWdS61r$ z$V*ECbkV|NenrMpbjNEF`{LkRtJw`H_aK{x4}p!z=#f_Ji;c89k0TPGD0$d;Zc$fMJ(~i#l|EbU}N&@Vq=n2VDdBAnD~vE{D_Si zAFnwV|~xiQ7Fd7_++s$?JQq^aE4CGZx&oG2X?`1F9TBEsAnq4vMwL`lS^4)&S! z89I>!5|=(hrzupmQM&>|_ULyFbL%55qHu z6E&T~iTW`1q%jmX9HzF*z6NCv(8d<$2HHg4)LtUX8t;F3SBAM?gXJ~vRd-)Z`M#Li zX|@nqOzmfE5XzUu)E;0%fvKJQL$~%vn4x?JMfQitX1WSG4B8nJA+ zk8?Ot&zIUtbUzVYu{9>>hu1@B&!)DLW>cIf#`UB*8?*g5QO{-eKd8 zt-VA_N?S?CuthW2+KVL@;Y7WbMG{UFYl7B33XdF46o*2QmG6YtGPaBja-v>_Cp2UB zyj*^72`5TNR@7UH*(T1*Np?v6_mDb(sQk2q6P1&ei}PsP`{65*5IIrW^c){~I8RdA zbd=&ent<`j!+8?6i`a@WC(6#GKAb3-ODRrNV#*}&o_NY6@t(+bkqps@6P4d|=&{j4 zrs?Ec*y1Jj2;4tL2na_=Z^Qs2pN{YnPWcEgIY07d4Ti%@o(0JqyyT5o$ddMpPQbib ze-6`i@RH}CsnyfPOGFCwN#G^)3}x^~yr*pVi`aEhc!C$j_?_?t5a`c~l01Gtk%r5Q z`XMS6zb|55l(az~yo5CbFN!I9hwgz5pg8@o$7RGncm{rQ@e(JVAMQ>IC-D+THj&3d zI+~1;7%%A;@1)##FE3-k?QI;f&l~RzM9HIbmQ!!I+#0Ec2pq3B;xF(3sERn4Ct_J1I0s?xdK4 zvRs3BuaZWp$zeHKrq>XhvV+^njOXR{f)}O1%8Sx8l^2BzsZE%u$xTrz;6>GY55<>) z#*@3PO<0491#qUCCaj4pnp z2(lPR9dr@k-Z8e-B{5CO_g& zMo9Am{^UOE@)dEj#r1G_Zk9BLwx-3Ov?wwDq|d~kWVJW=lkBPu zH|uH4Qn^{7tdR|!&uVjO$ zj-DKD7G=yzU?g>*^x_>;wuG%$%FMck}B z3@NXio?FiT_>mh`@gw@&TKtG{w~QYhV0-Gfb;{mS4t{joTXQ)4h&4&#M_%DA`0)7y zc^8p}RTmakqu6T-J*!1~+n{Szmb;f;guNF?Ti`d9g|`KM6$l-ClM6wsbP@ShmCG)d zuafyoB!CR9G6TTS!d7eZ5#g z%$>Tpa5EfH>fp$#bm-HNjZ%X(8e3Rju;hU01e|+=I!j4>gQ`%rKzR8rm zL+9fI<4QWA*XE@053b>75WcCxk4g*Y;+vT~9+!?LV>5$qX5#J7jhDtZIieC(viPQ! zIg>~(W~s6(=?n+Ru4ZMk_$JF{TiW28QA@M!$mjhdd3Q^9*Q0q_? zV2kG*{hAB}L@fkmJMUZ!jRR-xX-Gx4(efVHEPM!zO?qBhpfAQIV_PvcN+&Qj)ot<2 z%-YBCaKV}lxea-+-!8+i{2M8iMojb(zi6FhZ=|egj+94yxMh}=W6^S1OEOaOa2>DY zK7vrVMH23^cFst-Xp_?Zs1(+a@f&2!m_*$AqMkonfEHBhSu*w2>bCGTuGjxQo7FDV zx)+_?(i_Tor{=z|7X6BbKU2bOYw(tqeQ)6XI;8^c{4Tt)NS!@)p;Bzm3x9>;MN{BX zxu|t0l}*KFOXgOuI<&HvP?l+x3$H+0e;oIhEwm2vN~e3BxSA+cwG=*!@x;RbBc(1z z>CY7a+)Gt?Z?yI;rKN(ZE0EbRTaf7z;HySvVX0=y)@@f7CNS2!*c0Ohf{Sl1@m#{b zKkUFCd&Iq`9Oft45e`0!)AHkPyKq{5P@C^i#cAIt{d_EWf}Ft?r={ECv~*jXmTm{9 zmB$#TmB%gPw4Ahp(~85zY3Tu+R@NfR6BNIejxgZ~8X*~S!V`2oa&cM;5T})27pIk& zfyvL{wBk2r@*_@bgfu_kwC-~Xr4${e0GyV{N)o3fPw-EiIW&ML$YE`9+P*wN3dJ}rpDa$Ro#pEf zc!E;?iZ-x%Do;>)Hs%RZERQEB(d!x=JVAYgvQfK6c!I_c1aWD8wY9IKLV1D_{@c)H zH!wUwi3sBcj5eF*3Cc(TDxBsC>IkZ8rz%g7>6j7J(h`y(eBg{AE3H~-a z*};521hMs(!ZU{_n0K%8|5jXtb2xnWw~>d%X}5y!vaB{<0^enM&3o0wcPZZ&-+iMk zL>Axuunm%Z3=CNrKBDZN4*sPL1-|>#s$2Ub%rMInd>uBZ!V{cTp5V2R3f~D&hbK5U z|7ou;PjD>B6C4$u;8^MK1`|qSyuSlaV7&ZEVZ4Z;fk})v;t9^VJV7a|cesC9Bjy>u zp&XvzpGj>cx}S)yI4=|Q!%stK&!#-VxfD;3alMeu*_i9c6MPG^Cr|MGaF8eX`{=HG zocDti729dYuthUC?|UT|;R*gNizGZj)&#BnH}DWJr+u1hJB>r3$jW!Z4>7ik4e|s( zf+sX%mM56sTf!66krnlpeoG~If|4Cl|0q%iPcT0%;R)uX<>G|e_I~(rBt)K|Hhn*w zFez<1N^wF>z~KJsP_?DzZwuwL=bgkrb> zkQi4gEY5gqPXdt8Iiu|zemNv_aI^;la!TT8M=@{KU%_-89PI`)wR*ZZnnb#A;EN0WH67ALZ^ zI2!BfhnYl@*qD>IAHF7?;Q-k`$jZ7nT3j~U(gsJ1TAFS5R_MUqB>Q~n4&Z1US>y?F z1SNQa&m&KesS-+)%*hj!+KD&0g5piCVC*gS(_Y82(teuw(|#K5>Wgn6cJ;*{R?@%{ z#C^0TqzqdKPD&&S_F${bgesXsBkEm;9q?X?)2R6yXZK z_Q?R${)OXh>=7}h)|6?|kH^PJwe|tDw3+xEJ1)kU7d`~WC^J?@hm=GoDc904i^Wa2XG)6FBS(9zm^$W$*+q8NzB0HXK*0#8#DP42QosMA8;V|S(lNBuP3Xsg9GXFPFaa!z8=@5 z;rV*f7}}Z^2hyU%IFLRQ2a;9S;6SpwHGI84VwQmXA@W)dS>QliJPi)S8kt7uYW0W% ziLcgRmr5%RB=w(ggY`jhpz9@d^7SOTZ0~>rNoHvrND?yrIjQnelQa$_a;6^=aszOn zzhvz)e7!e2b7%lxkHgyHKz;do6pC>mKDD%$z}M57X_Km_F7ZxZg0Cl1<^^QoGag;dLzr`Fi539iH!7 z)qYgIo)oF!M$!l2>q$~NER8SudQJuvO$vNHNvEk{ujlB=;p?Y>xy^=lcU^hEPusc5rPxAHNhs|$%fHTS0yZ4T4nBnVvI1w})p7RM5PhaMI zmk)pLljXPZ5_k^lVBU`|oD9CTr6j*)Em9Fck|h!J$z@rnyDnfoUuZ0OuS1WKS~J{ za4#Hj^78PSys~(1S^8r&ZdAo;=yPka8pho+R`ZW+GyRVB3iq^aM)b>IHCu17;qVxi zHi^fS3RmMp;w|z{0jUnOyBdw6k%9-SXfT8Zt7xF$Vf%zrrm%`u?2X{ZFQP{;Z&&=8 zOE0SXV5-4-3+QFl+HwHCS{;|AFM}jjqV2RMZq@Rau~mXCvt=A}Y6aDc+N0p>L5CrH zy~ahsC|Gf0uu(P!YT6j7X$&J}59u{83PvQjn+zs#uf80#By1uXM($ptdtf;jT{e*? zlLBP$H7VfZGec6CN(zw2*P=jOLZ_3Vpz`6S5=oy0pGk&-rU+Kufn}s!zX;{0$ZSGn z28=&cG0FHFyUYv!$qWpR|LBIEfY=SkmBj$km8ZXA?Y~?hm`OEI3&Y2!yzS&{y5~c zm(S;uHW-XUGG*`3{qO;DC7piwcbsVc!SCQ_5DuxrUq}n*;*gm*-vflFd?9Dr*#LqxaH7!R9=4}saq2$F%_7qgQ&qL>|} zQmJyO6E8H#DBNwxy05LoHbul}M8JPSGW+#4Q zCO=|!Mo9AmX6HVqFgsbv9L!FiZyRPOjiHE)#q6{wF=nUF#O!2+8jRV=-WHgh%s@S3 z%Nm(R=xX(d*@>^#V3$fOW+(NZaD(+hFuN~vjS=paM3>ziFgwXCjoC>;WzBF>)03K{ zF*}hn{g99wfZ6dYJBitmyY)6_4h`ULaadc-t}l0sLNR8?CyUu>XZiXA?v|9_EXeAq znilEVn7c)>Jnoi6uWSE+yQPm%0cqC=cgy%S^mT1)yy>V=?pA~aHuT%Zaq%0$DBz+L>mL#P$GQQ+) zIT@G%4epktGpb=X$#6{Ccw=}iA*G|P4|hvO(oYt5i&f6S|NelT?BIX*gxLBY!jt&l zIoNde!~cGe6K3$g_m$je!{L8*`)ZVZ!SMJW%WrYH1pdc5n0Kv<|53g#{ zZ-Y?2EdFgy{30K zuc%&BRFu^#kRK#>Va^``3RVn1B&paW{6rG?9LINkQ~Z2`RQk<@LKPpntT*{(&y{t) zb8UA&4zLK7sMmDJUDJqPlmtAvBea2HR>B(M83f&%_s z1n{pKw3ZX#-zaWP$VL7t%fJbN|1mfR`70yrBH(`v&H?{`yETaZF*pnTp{!-#e#-%& zN0G^*e?BuOz}OUlEC5)=0bqtVBs>cN;;b*u0h{0?{KwPF{xWJAh%uHr&wIEZ z_{c-Zf(CXY=#Ph#@s-Gn8vxY;JdCXG=bq^G06EDa-xzetf`^NoFw=TCdB98;7?aSM zU6xRvVgW`8Q*+A?zamr1vr|jt$W^Hu# zOi{~2ly58LNgfH-^3bned9;mfdG3dD@n3X9#AhO$kZ+;hgdsS-Jz_HQ9oP$u_uoa{ ze9=k2ZH6oU2?TR+#h>=mxMCM$YyC}3_7RpTiG^I=F6!+fiz0`5aK3PVW8X1XGC*H6 z!eY!1{}^9HQTQ$!zbLUg;fE2N;5cd?_ciY^&EsY#4VUA1Eh=WycK1rs4hd|L??%DU zOfA83Wa+&_55%XEIQ?*(6V5*v;>YYai-q0!@%*rp5{4Yd;4u00Qc;JEH<=TUT--#x zbR*$b%OZ@duOFrpk#Y~H=Ts`w&E#kE%lx)WKnbOUgd(LW2u04Z%!DGv2ZxG9 zgcM2jn69Y^$&unyn+7vdVkt9HJOe1SZCda)aVJdNO3h?g>&+OiDh?@Y2EFsrIaJ%_ zTJI_NuGU=2H8?ewa&I*DrZzS5-yQptlxfB96?=oL6M4^7G;LH{s*BdGhJV54{BfngZP{snI{00&_0@69=_6P52TY+gW z&5U} z_>tLcu~D|X#YXA2*eKl&HY$%XHY$(4*|M~&)={$)15-+73>5U`wdb*vFs0e<1-->x zg_?ASV5DsAwu_O{0~o1{Ad8WTU&{{4lkOr<#{++ckGWLnejO5P9$BK9s$8-Y(HDf!d{d@32I z;ZsS}boHdBE%i#nry^&%C?PihKD~f7RmvmJ3f&*ytAFmyu?Rao6#>!2`F1pMDr;A> zYm(ThN7;CG#n`FLDLWp@*5O+R5LBsxd5>6c#ZYA$#26|C^DtCNpspPT3{@YoG;3c8 zhHCs8x+yUjsx&BugrcZ2BuIp8ggPY530R5R)ad}>rZG?;oXMt&!aIYbY8qATUBywE zk{MPlEhTYO@ztW{`!+QV#Zjd+BW@&p5FAyK(&2A>iK99hm{ATKRni&Nu-!5)lQ=5F zb)gE3ln%c>II0Y(pDY}eRnEatZ(t`oIO>xjw*D4)5=VV2HrV}e)c01hVFpM2Xw?lG z4oAHo^0j;Ut?(#Wej6`=qp}VXz_VGgopj3g#ZfP|h2VZ;6#Esuivwq04?e{P$sQto zF7`KUC~(vpYi{k2FhjvnmyuqI2U!H-w(Rjw-Jib&Z;rF3^cP?yXpwJ4RM`eahh=va zd<2Alh1Y?NvcFC$ihrG8c@J^(5d2fJ$VuJnm%5iu9pyvnx+kYzTd~oaETDpo_5wdn z3}5(-0(=bUXuweJjfi)=L)L9nxDJ98PDy?a6=^Vo?rNpiUA@@m6Jwsc<>e`u=cCZb z#5^Cy-!$flBY%81V_yl(GjK7_Knmw#o|VF3l;xdTmicRYJ69tcd&S`bB_2x17yh;&MDEuUwyz+=;bWHoSs(iDGJs|Y>cb#aA z(LDeJA5lKTC_bYch=7}?M8FN_FVor#w|N`ar1OxJS}ek6Er#*f75`XI<2DaLSFOLD zsXDk#ATvb0UED_Gq|IF1CMaIX0G%umE)(NAHoPxx!`PePHa3lZxXr1JeB4Ibp$~4O zwFGX%{JlfJfX^Lq`r(6Q{2n}jpB&sK5zh}FoD!DyadDf3d?KGmq@pHqoBr`0niDU^ zZA?6w&WY?SZo~TeVLB1hue1OiFdGao9Cx6;Brdzx^={5Jjh3f?T0@FErn;Di(mNhH7t<`@ySIKN!% zfkR{M5G49w6WQ=#un9A!J)J!SO7gJ@8N-TA$V@@Ko?I;WD^i$K4s$nfgfbSJ;J#wp zunBJF%pRy*cnENXcRAlpQ^C|?)oV{L-6O^(W`Y@F6Vpq3EH**3!eSHCOQRWVf~{$> z3A!ydLAS*w=ytFPd5p0MdGt;Hw=33BwT_x~)GaoF4^13;iK#C$Nn z2v{O;VTuuqeZi5YmoAB6iRq<>5tgX632?OSoKjd~9N+x`unH|w4K}&j$bMH;=5d_Z z*08#)vF#3^jgA!D)KwpXaqBA!vUv!0SzoP;kxluIYs%e78t?^M##?2Rjh^RaHd+nHZHV2QajwzP*^WeeyDF2NyhIbCS{#g>7O#+LpM z{bXludXlMpbq$Rt79wQx1nhe(l7!oO-du_12Qna zI@FDC$@;3SnE)fEtw%JSM@mJdHQPaZaR!4+0!)J%DM`10tA}ue=$ap*lTYphBiFlQ zX$)g&%;@>}P4HqFOTdSzdo8Y&fetqp9#9lu8L!Wh*IYQ)K*~I#0})RA=E9z0$U#>3 z75Cy18p@7pxVLsQ0u4n)_NJ#HukX?Br6#?vrST=UZbeJQhK&v;G@_e*R=IFqGA>bl z$S&w;*Kur8dnTe4!|%x7X#Pk#kHCJi*xB$p8!Jak-C}pc>%z77^|{`qiQ>eDH$l{ks`Aa*iS4%`Vo+XZq$7CgZ0Yj))5|K(p<5Y^)W7by@A0}BfmEK4u zR&ORNwUm+aG;Q-uK8ZTKk$RD^!7`H_^g=0RDSQrpA%=eTgzJzeSHdUt(~Ka$(=UPi z`=m`e8_<_;G|=Krv~{ae>x~|$^(GFitTd{%-s!8gUbwol0>u&hp;Lf=y;6mLRs8X> zeEMp;n?B9eZ*=My%)WzP}p(u z&s8dnw{l?-VSXa2#JxY_zTcEJJc^Zv1r|rc-*x$ZSm!@*aTCYYRx8{o7nt+@i(6g? z#Xsl3N^M$-RGURj&RxYolKH^%Wo|pc)~Yn8XPT33nQn6<;{npJO(|*J2WfqP<%@YE zrk8B0rjzt5S~D_U>91&xY2FX3-=v+5%ewocz1 z!ZucDA*Qnd&1`9M14@h1)JEX11mzW2cqvV91Ql`DN*&$^$8Nx^52~}PxPagcK1{$d zvWlA(7Wgy?$F5a$jr8~bqMm;t^+drz1~E4yc!{SuDRtfNdPn^Uzq`>raMYjlv23gy z^{4R5=V^aRo@e|?d7kxW_*}fK(YdtcS7!Hbv`f9y+T}tK25m0bzj_%g>cG>lOs?W* z^1zB;nW1auzzQ~>xGE1q2UcJ-2hPVb!b%Ho)n4tQliOubhN!0A_tsi*ccD5qf3G8j z9s9l61HB6_**^zCPNldmCA41L1xHJ;-;2qk-E?&Cfr2cR;dL161+JA7>Xh~=7VeGq zAwR>iI=sbQ*8UYX=KQqoJ@MwE1sHxF-{HvvXU{+vufKzzC(eO0E`{pp!V4mmvU^3p za2Ho0K^E9&3AUdCaqjUPRwkYwK0Pf=*%oArGETj< ztMJZ?>oQFK`g%y_uXwacvs7MtL6j=jBYty#Sn`u9)Sc=yN^#Yi<=EYlg@}|0Y`31x zN>sVo6PL6Mr!llr@(u~gQku4pJ&JF}8o#-19iNTTtUWy{lJt8e3fI~XXhVIyIu&M} zMxyv$Y3+q>+Fs#8g#G0Z^_4odU`YGUmk&9R;?hjO7X2o;wQJ@$LH6%$RrLcH+2EdXZle zN8yB6y8$K9DDpmYahAOBAbMcPZai+{GHz*n-5tdLawlXt z`{G?E;sXYjV8ID0PIeXsCq2j5)4zFgKGPiz2)Zf?A|_I31saqTAj zmHszvS(JV3M`VoPmA=?c1 zPSn<(fi#*0(6q21;x-BP`I%_bk2?8j210IXEliu-D{C)COke&={aOo!8sk?A{{ooc zuQk5#g!pL=e6GFpDFm1gz42h2m_mE$-7cm;l2F52<4@DD9Y7~p3=38L1O$g9f*9IM zPh)cW9fyPtG9hUheE0G5tn+)=v#+tK+7U*_y`0j5Dpl;_fEM6tDxe45pu31G2C%P_ z#UDXfQq@_Dz_U7R@YMjn)frrN+(i>x}tG)CpJeZo}Z0b25M89Aq`#07I_~zO_!_mO+H|Q~o%FG3`!JK4P zk$xrAxArWA;)gHqiv0E0?gh7&3DAy~Vt256aW@1<{k5NB=yUMLeA9EFqkY>bOwg+! z0+W(T8+S0Pi2=rg4+oS9Xpi}a@iH%o-J*6-Sc29JiHt~@#9B&28}9@fPEqHH!3n{M z>Wm6^a&YqE+@QiO{00&j(O4&G|Lh6&K!F;ZWIN@gLU1BPSoYu~cCOTdZ)0GdCjmK> zad4O5E{qk}&d2hD$^>H((h*psg9}l+jY-qSH+rRT4qE49&X|vGyxxs~2s4xMZ3Z^k zK1f69R-;S&Akg8Pp01qM`#{;0>MiWRRK+tM*|7^dYHdtHb|^nk_BDVfYTqmraT>8& z)$T8Az0E+ZVQ>nQh=?8AwbrN8M;9IkQRV~o4->D&iPvZXXJ4&ii$&57Mm>;iwrNn; z92@e}ZqW=_3>P&LjW~)%9M$(wrSM;9u8%wINFWMp$N18h5n$F1E(vzVj4yqtUjuWo zz&Q!TeYM1uRmEG=rJ<$sYF{H-63M~kGBA$rBL1ZK5@Hj6)}D!>f37I9vS3b0`=IgF zfkj0f7-Mj9E7=Bu#U4Ui^3kjZrilnEt{tIN(?~V7>5{_i*qZE>+bt|knl1)epe?Lf zMiYjMQ@p}(y@3Wp(Dd=8mtvrqQ8&Ky9L`5)A>wENhMT(tj4wP2qOzQrsYWn=RO@6) z6o`*ZEfM6Z7-+F~`T+lT_L)fI7z5*W3>-kAJ`s-rt6}>^h2dN{P&996n>UhO^_x1~ za3hU0q|LFK7<46MSdw?}zO z+=;c1`<)nv`f6S3N)&9(vVpaWfHPuopFY)yG4|(W^d^ zQ9}NuUiCW?5sq(&W14E;>(CyN}$;gtchH`Qkz_@L8>OYOi{~1q*nxI(sRUuq+#GUfiHM*a_-jCle}Iq)u*?3>1Eu?Y!tFqGux~{Gh3x*w&i!ApM01?Zj9I^0wYbhL~JRpM%9#w(@7jmDLFWSoiE4}JO~*!ttHpH(h1oXX`El*@n-Cs0P@ zIKj*lY4CXKA_jOe6{t^D^T}jdxa#Ls)IR$@@RLsXAM8WG1c5)HZmOSG+SEsjLRpSr z1^$!uoSA!cE z4T>AY4$ORY^u{9Bytk#x}REl5FuRBILBV0!oo#+jZt zn4UN!J#{fXxSaG*HdK)5VY`HKLO>i$PaI57986CflAgMl9$dY>PRD_CFh;roSdh~6 zLN~xk%@uhjnFxdfWQyM@{GxNNrvEd=)Q4YXO z*gX_C0n0;;GzF4q2JsY{E>GcgwceytshE(!X=w=wi{Q*)2{^iUqYop&o5HGgS@?1+ z!Ixu0F)5SzEdTzu=^k$X_>V z$@~ZN7k(KvH2ekD2KWNCLxmSwRvQocalYL918N>RAE<^QSG6EPuf% zH#W4gNA@Ld4u8Rs^}~P88z(V;AtC$itgOR9n6zWL-xzmf9j-&fS8(D-esea>B!_{c zWo>*knzXjxMWcCca1GXkek_L1=7bsad~(E%))zgu>x^<3I#ENh zowmSXU}2>LYj2te*j~#w44ZH35xwPV) z`1$eAW{}~qP58MCf*&1zF4?(UhJpLB^DxiXKWz46`x6_hB%9&2Ibmi$_U%N_ko&Py z>=r=2kvH3q_1pJ2{LumXu6sIpW%pg@N1?j!Vw!3jb_v`!Q+QZQqYcE4ur!JGrI7 zamX!|!LUucF&P3sN^YrSsQa=1yA^bW(loT89&~F|Wy)U3Is0un3ctY3L5zocg-<|s z7>>e&Bx1J`K13WKBK#~Jm5h&%Q{X9?j1TmQ8KJC~-v%OiUTA|p7KDKwF z{5?sD3wWdocph{H2+7|WoE&eF^nf_9!UgG)#3}U{r-36SjDrwJLrDHIP80NpSrv} zH^ajX4i^GxxaZMHgg_!ZTy3}y$s{C=?cqRt1Y2#>(VK7};xp{puYUM&>3+|2f5bx| z&K)LXNPnD6zU8Vye2gCMEYsl>=7N~yH=ND<6LBMc0~1Q~8y?0EGW-T{_v1H6 z;AZ>=5lZqK)T=MQ;cQ3cdwcL3&UX0?Y#0)KIg^PFb564VaZ9}1K}%X!5jmA!=%_* zICUs4!yx`b%FaUXRHv9Re}Ro|`3q-brNHFGqR+FmcSC*OWZrME`kA(_fMrTuR(=>CM~>WUPC5-+4uR${0H+I9)}tlUISADuOX@qcny&oyoSi#lGm}JHT)ba zA+!c@xwHm(<$~70*08h&wC^$EHE0{^*4L@?Te+)5;#rS;l`VVMTp?D>K)(u$xJ6JDb&O<-2+;R<+yYQP)V+_MxVE=rIT-Sr| z#hF#x#tFL&ET{z7e3aARu2~6A!y{|~vbGtnwn6BpEVlmqC^W@saBMCN8c%7wJsMBW zc#Qn|k1@k(U|F{fL+1!EZFB514IYM((*gGXn%X_;XL$FhxO24j?gqZ`2a z2ug5UjWWD}#lCe$87BLb>vq7*x%fDk`79dd({ctt?=J%J9mW8P?bcEWA;|%43^LGU z1L$08kfF8o_v}m=uUj_AkhHpBOl{!O8@0NCo?T?a!A1+u*}EOuT6jF9cygX5=F-+2 zYE?Dhp#n5gs?RVWAZ9JAuWB8vj7inU_8dYe!Mits>RKbYR_5wQ_#vRg~-CkHh zVqzwtrS=?XELlw}SPKth;^W#=PiQ>S|J1$WyNNwgl811gF?au@VP{j( z$iu%}JnJ2p=j)%$$FsUu{99tDmDq&+bl~pK`fb9Jd$2dy*Zx-bU@YJ<+Jn8*DMNM- z_O2-Oc-VuntlPE+W6$4V_h4TGqLj98B{#W;tpc1Hh<@YAisv7XB0A{^^- zCM2JxcLY15cTJf0iwyO&mtKc2>j4wqIO_ z%=SyZ;c=fwA56<9T#^{v`Ir{jPuqrR(RQT4v|RJC(tIsg5*+|+r7VdGv}G-c8W6{P zYxG04q^%69MZDw7XpuCgrN9*Jg*uCaGbLW%uN7ld>p2qn)}mSuUMa6+n`#R?%qyl%bgWJ5^PH{boWv}!{w3x@~->IyVobSM->x1OEX1W)B(#Y zNB91EzKtr6_W~)GFL4LZpVRCD?8tnK8-tiX;1%A9A{id&`yk`ks(Le{g#1feRiBWE zV10g49N>X|gbwmRlRo5urhH~HKD}nv3+As<@p`9ay)KTtJS~Cn7G2KgTUl<}tNN^z zv=sg|f3uv=q#QY)A2Nc}Q@$GQa^qmmC;Fm|yJ379qk?@Z+~N!O2#Ap_Sn>6HXMouR z!&bN(v zV&`7@x!PBL__xxfp6Svgk24`d9;fY2`DVBe>XznlCSsufWuPdJQ!_GNSsrKqyNI4U zR=>sIVn-o0(_iAwO7F}w`7lNVBXUEV$=W6kxQsPs-i z(a?FW?_{;tMj`hhL&;+uuc^;cA2cPVZtD8OmE$w)Gq0k*unAS^Y~VVj8>J_^8LBonr<$13Z?3cUL~g2O4aT~8!HzU@YBTAbH!F|-&c_` zj7+T{btJjsqzUsyD@YfKt=QCNaeXT2YC*}Shnt%uK}^JpXga-%ON(%I+`cd2Mt}|4 zL4qBw?gmq8SC|8Rs>p|l!pfFRQYeF>4AkBa44_k=RyVaJAvLI*%EEU8+NC-yh2e4l zm$1I$>~l+>r=w@ILn-{US-LRR%Y|L&3&US@?^f~>H!U3l z{$k=vC|G4WX(%S6Yn2J^rdVid4z|!V>RM=eIo6K^!_hW{y*Ubl87+pZqoM%RoY%LZ zA@{zekHsb|W8Rc?K6D?mD1ELHlv&%R^9r$ zJVx0+6t85e-l4~m$4I9i{)No^gI~Z;E|1ZP=Z7Co3lGm@bka%WFZ&ihng7r{Mpgkl z#;7{rF-C6i7$bKpPQ~r->`z@F*@}V9-~&Tq}3aO$LN$B8#vt#O5_|Kqa*8wf0Z{*Vjg2c_TyPuhjZxI z!ijlj?ihFP3L2Gx&-oB>%p9F-)-TCpt{}tz1@7`$gnyK;_R;?Q`4``ri$4(c_O)BDlIVa30;y;lH z8V&>ge$-IIa2y>yJj)vOQ@=i?ys^*pcQ&Iem(fSv?OK<`fGbhxFc@%hOhtNlhxb@T znPiRaZE2htE+fmjZ5S{Ifoan_9+&Y>J^YWA9-agJxCMf>aJK^x%*E)(Sr0D_yX|^- zX~jGB@W;CzUIxQ9>EUGv{3!MClA((oAHhC=|MK@^vzX}XpELWhGu!?5V=v1IGyAby z5<$c5$42cIK=8FK@FH2(W3(TebIOq2kM*L^<6%F>vToacjDz6L{n(xMnG!1b56Yr( zn^p39#h}tQ6DLgiDCRlPkK6s27VdV~k8v^jao&$f!*2V2Oj_~I{n+uoACtkbP5Ut! z0zb@P#K`NKb4z@7%%qD!q}-WA$>P-6IpNcPNv%r}^*Yo-J3ef40=5 z6rRFgh>2Wm%SpAmfR9Cvdi~G{Qa47sS2)WG`}TSFQ0cuw)a#3W78iX}rAmE1RjT*{ zRW+2`xQC}gg>}13^*OKxaj{8PW?Z_Mb}Mfs=1W_fKUavMki0Me z5ZbK4uU#btpsLFMYOfA;E6g@g`LD{@9maGM+Mrap2kPc>01)3H0i^W*NJ{np$%NXc z`2}8He50K0Gq+b!X{`5BQOA!vsSaEW>p=6XmEFkE++Ed*cmPnIrG%9Z;7U`w3L8bZ zS{=56V5_JM!$lXt2aU)i{RCZHGCq{8TuNIu1*L{x&jgt z`q!Y=U4|MMhX-Hy_?t_-FzFtTy5*Kzf{LeuG_qG!&AqcLwpV2t3FpWVH?g5#&&~rs z6dCdy?C_TFut7WrP1Q^sr$;5nzbIDQYR;IxzfQcfZ zJJg|_6&eKS4x^k0a;q1a4&xjeccB;!SK(GTUpW#paLjQ+(wJFs7LF5zHi9-N7aoo> zZNhiBrJ{U?b5|?4Ud|93#1nLfyQ65B96-CFxPi zchD!xchD!xcaW!B!FRA}CixEHyPbRo$so;l5Kqf@(1&BocR0%|>CzY9Lw_5-!?_MI zz{BNo$JAa^n(uJ;0epu6_L^o~GQ)doy|bKBmdX)lAs&8dGQ+v6HQtGc8~^z3D-|xl z?_m2)mf3)%x$e#Qml;z|vueue6?#h*(i)2E@J(bFa~&Q#p5{92Mc=G{0U%F?>mZ&k z*FijxZ-VPU&p})V2_L|9VEATS2T7wp*Wt~ml-2XO_w=yp)<1{qz*N0Mze=tHoql*1 zne_+niJw7S2Nk|+T6oJ`hfMyuT}$RaG}nQtf$I=e2V9594X#7vPH-Leu@b^{5SPn! zko_9C4s4BM&vno?)ZML9;Vp0-2G%#?I-J1@lI!5qPq+?Ry^>aMc&>x=ncW0SZ%8ILUAwRQ9y2tix5v_~>)m@`lIw6O3cUU$%mWy0`Vee1xdaEt zijzUnKZaE!ZMkXc((q|mUe|A-p{JSk0@A{M&b2S_$f!|<;Wd!IkY~Fo<~1by&*3$k zYctC78h+IVpmVv{yhK8+q)6q9BUEVO@9c#dcIA`A8!lmQ38*jp`xucqOzTGB{Yyj%Vo!ura*X@9% zb3t;j^!uP!{?@TY6x(gui;(1C&OhT;q?`=ZT)R!xnwZ>K*ij>Glijtr6XSqpc=V)M z+b=8x*!GB$q^gE_`~qw&T}_qLSTH8mxcr1YA8Eao8vgOsJQHvr*lz+RA}K5s1DJG5 z*l)sx&ieo!MWv|&b1;US%4)Z$ruLlb`ebZ9nL^?mT*a~ORJDeGq&b~)a5thgKJK(9 zZbM$g8QJlrcO$^87d+l(C&~EIYx=b_7YH7q8(%siafdhsN0Uh@+fL(4_htsS@e~}G z_^QN06RW*643z%Xom!D~Cs=bzSa*u1EA2VOhh=%dZ3OL8gi%FQ_(fP7%)&9g^mIJ9 z>kG|0wX(xun;>)PV1>+o1a_SyHy1B|5|>H*%im)?9g}(e%eu#cwb;ZSt9!*y?Q-{2 z2}1(!N(A*IEg;|Ie(R8ZmCGJ<3%muEG1}|&+t&=Y-+G2qhU|XpnNg^gJ=!Zpd+UDR zq`D7J@4;do>8;sUv8>y+uVUxlVfR&E#RezWmcUN1xF1T!B zc{rbMkM`1)OfK41UB-m&@Y|~6%9H?y_;Jfv(8ApgyDTn4)|3F&%1U7lFX6O(Onfu6 zmi&IN|CD*m+ryNAG~c$H5|FmC1~S=JUqX|lZ3&2-k-tEIvo_d0RD0=8O9Jhreau^9 zNx)2&?K6_;PKqDFUP`ia_foe5_u!@60L1vUSNH+;RKsu&HY6gr2frl_KTLUmd+@sq zA@@K;z&#KVau3u4Bmxm3_dru2_h7SFQjSkfRXDk@1+RaFsF@ za(N1;rg;jH8ot7F=PpmdB!l;nU!b|*&;1B^3a7&o0~FL$MUNi1SUC%$Y-c^>S)EXt zLZ^3^>rU?Wo^oBg)@j$5{uI3lWgjkM zKx2?^sVtA-I++e8dhVR@Ly;km!A=E9YY>k?Q#F%Jc?=1!JRXDagADHnY!(h%5LRH> zAf_`Q-*VxZ=(Mfz8O~Ea!xTsZOUh@U^@h9A2|7cQbcWOTKsv)1$B>X4NM``K!S96( zBb{M_bOv1irgVlGb4S<1P@c`W45P|rIB&HAI}uiGOiyqbmR75=<%V162`a&f8a96Z^UJIrSz)hGU$`#GU$`#GRV`d;4;`WlUxSz-A*opWRT`Eh^OT; z=)GI!xZ|Xqrf=l*K%j?0tUM+{> zFq*N~aNcSSV;K~O+kxNkZgnz~7KV5;7sCz9VlryssRR)T}q<7W`R zL4{wK7Tz+yA(Ovu36uE`&2M08;5S6o0ly(~gWnLj6a0qXW+jB*ATF2RAbURW8`v7h zp5LHts5@wXo#5!}A-Y&+Il@BKPMvXdPdiH%>DA z29>=wE9-C(a`_GJ7zuLgq~Tz$S>8jENK_Fj}orx51W=HaIz*Vka52;&1c z@2LBWrEX(k-W$Jp2Q0CbI*o;Koob#;xV{{Ro8R<=9V(c|aacnh{8yZ3-RD`+B+cQI zDD(PPF&&1YIlR2%Lh_2c=g}OZwMFkycz@I|w}t26a1U5ugB`p5nCxE%kAIadK$idT zDI0_`XYu$?N1-V^K9}c^%s;~Jb7i+Y<_ym85l@L8baxtRRB2%@Jj z`PUIjzjc`Wom2&6x8cq4l;8^o+5YvWic_!v%so~I#dweMc)molez5=h6>c2jZ#A#L-HO5T zzYH12{_p1*CFEaP@%)-ZgySE?0b{*4(Lv~5d@57E`VgsCnYoNiMUx@CuaSB|CRQe^ z-ieuXdiUEr+Wa-BSth2ZCEytz_e|9nSXbH%{-)Hf6#f%`v-o{dj`;l-jUe}pXJX?1 z{jg^X(VK02M^gz8 z2{+?F5x~=X_`|{x$mCz<(*VecV|_KATCA-EJf{-Wa7HUoz|reg?D@r`9stpKz{?e} zVl3^49y8|`r)a|%DLLmCc~Gl@q+l`>MSxCVYS~Z5zX9?8j^kZMZ5<~(^&Fx-z1Xba z^kS8#7h8S@rx;hOyAi{jU&KK)D{js&#^TU`z(8+We#*!*)ppqj*gC&@)IWR^K1)0u z-w|M5OP%}kCJgK!lm+7|7NYa3y;}HQ5XS46YTuT@=tYB(V|E$^7MsXvIU?w0FmmqG zW@*aaaXJP@uMBfV&^0sTl}6C{-IF>CIJLnJPn-pO1M=M3_%HTq8||8yK|Y7bcegSN z82t=7VFh^vF!ci6z|nURM;COQIQk67o*exnj((zyUJ4RN-^=k2^^D@^(Ap3HKU$o_ zB!ac+8qV7uMYb4_7x2U&$K64c`+Y`_l(3JCm9$-ojU?Z)LxJ{lRyhtW&`wYE{TV1Y zjDNenK-w2jgTb;3Le4qu%zPlCf&XUx;oMrCTFI%l5LUUJJAOvVs5mX6ETz_Aa*$NrR< zJVvT?RDs8fPYs5T#it&WiO~l>Eg@HXJ2h=w=>Qwd0WBoMb6h>qE+>nPk+l!IR$RoZO^8y5+}0W;4*aI`wPQDxnBR(p*NBo1dg*cr4}+T+1kFuu~> zRhkHP9mSQIJ6GDB>hwkx_V?S}pc8agNLZ-imE1;8w-9**&Z%HBm|AI1qcPyqfzM1Z zgWA9`8%zhYEA6?`WH5KMI*YD=Cq9!{%$4?hFkkHjaO^J41-p+1^UUCcYHt+DjKTZF z;Dq4BmG()c+2Ew3!AU`|(mokRxDh&z&^^^2Dk9n3MYCp|!(dNvmzDNigS!UdN_%gx zH#m8vy-=D87LEqHg54|aMT9J_wD(neyG&_M3HAl2th7%pO$VnQ4JOfgEA7*Q)3l7I z2dA@gX9Q<3!bw$AJuF!&-dXM@2H>vOtD=k`Wv3#J)kD13x0RG?oZuZYE<^!F=sUQ zK1NrAlRtH)Jp_M*Zx~H;sPmfB*p|flj9uNdKI8AvRqOxEG#z~g_kHT=>N7+NbxG(m z==uM%_a<w2eiVFxTqv8mP$11J|y6Sqa$F9e^>?-c!0gMNp=z8FN4ZrXAy~v}gYYun8J(QWMxb9FAgjO!VE^};WUL|ynX9s}1iGU>eV_I_ZFyA`ytoFi*H zV)jVuyf5Xe;@n&Qp4T%jM0xOC~bgU`2!UFe@6YBlqpab$kI#JF?}#RFw3m%~RuJ+S^uYzwe=;PAf7M-rITx z_x68sAL?uB$kVC6$qI5sBU3+F(a`F-T0OI(!SZKN#-~_@Q)h>qaqV(*h0!UMXX5FH zBptAx(No7e2l2^n=<$uku$i@pv6!A&dv}({Gq4jWY_e{#A`MG@!pjmEw`;r~liU)O zgQU~$OZ^z>4?3Irt%o)ZGuI{-pG|!+%HThHn)RMo0d3$Mupk2L zk&%TJK)Cx|bme_o$ml?7{NejGhZ3TYCVSgIz_r!Sk(U-ef^8uw{WI$r#MiXJ?%Or9 zj`2hAh=Etx@H?4vI&N-ZDudhNb&N(5yD#e)i}^};W6*loAINKF5rfFeA_jGEj%Uo@ zMm2`qa5abp8w%FJa`@Y|q$Z1FrS{ZMtfw#B457XS3D{TZb0qa2v7>K-5$xz&_!UM- z`1(A+d|G5iNSj$>hrdBD9ZaxraUb`7W6932~)ZsT`dLhSLz3=WP#~@>wz_l|NZ&Y ze+Jt%$=835YZ!{xpI{Axa_2984MV8+XR(GM16-;UU4hr?KJM4NkJd1R z9qy+!3~As$-WrA!mtDh1_iGN)u?|OX?%u6B*5dt|L!()ps%O9E>w2R0dB5iVC@eodiOR)@MB)`SQ4YnszAs@VF|bK(W| z@#;|~Je&g>R9V0N@B1}PXSx6OYi2veAHg3)ip%O!C&LyX|Lz-q5cqZE#FiSbBMifA zEh`Cd4ADh|MnzT;zO(Kldv_CYCUD~M4Y==el9xu)c9HQJ`3}wP@ELg+^@-FT?pQow z?8|E3_#R*?g&A)F_skc!gx_Qm`7OzB8Ecpim*lu7`jPSi_mGG3g*Qj{hVbU-z7X6T z-50`}qfJm=Gs2>mXM!4VOX-Kl9n$?lxI?-xX!@h5(xOo8dlOW3ttIO(@-5br{vwZ& zI=SIVe8zCeT7K9IM}LtA8$h<>gCKMEeZ3q@lT{oejb&_{hbwzLvEoJtkz?Tw0eh4m zpX2|)Uf5YUw*DIhn83ZQ3W6;xeN0H+QoDVQWi}Ce?pLb76Z-XWBzNNA8bvud%de@}4mM zBgvWCxMaBRP;Ip4qyZ-sCRkSb@G{|3N_jh#LXy>np{Mv^z;Dxh|p9(un zQTkWOW_K*xSoW`0#DC>z`jy-t$6BMWj52RJu!L}6(Tl;wg9TTE7wL2YhZbzxg$oMK zEHB6>&O&b-d45pl#o-m+Ko1b?Jm$^el{&8sZ&Y|YIOnT5`V(2V?1SH0#uMg$eSCJj zNX`u42{S`an32>$hQSjE+Mmoh)*C*FpjCABp+AqxT37hycDCgT^_|fNeP>P~H^O&D zp0zT##`E*r-F$c|BXDq4kXcyhwl}N%u!sA1Cal`o` z@Oi?tk9*NE4CH6u53=A2nf6=h&T|iF201xr8e?^<V6@n>k1A;w~d2J+lK`7OK(&5-&n95&YPx9||OS@(Zno8N-uad%H1S-*vCsFdd3>$kwF$KhGO z0nxAQ4s&%b?a*(5uU>c@+1FcmA|3<%7BcC)@c4dUw#UBtEoAcPDPPp2zVi3kZ-G^S z-$GIy_$?&w@LNdUD`u!MehVkE8sfJgZ=!D+zXcg4;I}|}+-H6ZnYzbHZHC}~fZxI% z>uc&rzlBGzg7jO+)KB~tw0f>qFIjioo!>$RZz!y)_)5|NehV2`FFauopQL^ZJ+LP) zhRygQ4BUsAGaf;8|S&u>AB%i7vgzlA|M)^+I3-JhtA zwb*arqVcRw)#JBt%tSV7pZylDh=+2S@9s_C%J?l1$NNaHdUXbe#eNGrlGr}ID$%X8 z{;2o2UPWB*H@%9D{}-!QJ>a+S{}I0hviP5^--06dCs4B}hGI1fvhpwVoM|E7{qDCQ zw94vGx5Jw7fZxI&-EYBkmiy0dA=@eb2!0DvTvnH&oo^351_k3|fd1-P`)6QBts!?P z=e4jn-rDZsCG|_tG+*V~foIX?7Uw^0(!AugyzTc9ecCY>q%TnB2 zYrnW0r-t(Y>YL8F0Y;;;<Ne#>?~d?%CVJ$>T14Eg3M8E=(*;j-{9c}YS5t5FmEQU0P3oYas2xatlQh;|gY6|8QsQHA3I{=K;Lj2KIr#i@idd;l&xpYNy>bdb zxiO5bIS;YyAh*5b1i7jCfr)QGJofz#$^hGX>hoAw$Tf<)T(k9O_8nfysqZGI+Mrx; zatn^hKKgu~CjjS+a{?EOx`E5{FZJUhu;A3d=Z#Wd`w;fni=TyMX^}>jdD}ckV@Bu7(lSi$Du9LH%9? zEVt*}=&9{wH1HWYFFE=G<@(msArrnzI!|8>40J6T>*b9CHlnV=VxCni@#NyeEx)m> zg;jdbub)@j1aa_n9QLsmPn9x^@cc%h6~2)quy97fJh!EBF&8X2`%&+zizM?hUcB0P zZ4=Ic_ztsZEUh%=u-J9BRj>NZqrmX~cC3|i`IyVVg^gIe&5xgtCk|G@I_??R(H|7g zz`}8TK75lF=8v|jKAH>yk+-SOexNbz)~0Hk!f&z!+-Ej5&$g~`PH*rTH|g zRvl{2q0FJ}bT?p`IBo%D4F^l5Okh$7hNa8^We&w94xvOi7fOlCf@QNG3M#BBZyZ}{ zHI`*d$NgC-9-fJ&_>o{__Jz_hmRXMT=Y^WaBaI$74<2g#gRIiEoE% zf%lSecHo%dT;Hel`lE4-NxELYbh3ZF{w-j# z?$4QH=9~eJl^U2`uNNqk+p}KJ!0=}rRR*uuOFReUG`?rOp7DEIua`W2(UV7Zz5Yy8 zN^|dBuV>Zc@a%fM=mU0#xjL6VpX>E}^;G$0gug~Pu zQ@-jKz2)zDz5c1-BXiCGtAO?Tq&iryPu{U!pS)K@@S4^7e_$nKwO-z2Gy?y-K~9A{ zR_jTP`|#Z4OxYF4UuwI{m^}?G5@kzQ~-vj%O#ju(6`hn*RWO+OTn_1gW*5)(&!SkS_ ztl>9`(m}|(+4XpGOY}uxV><1=#P7p;z4SQgY~elV&FOkQ$8$X!Me;K64AHH7y<%B4t$=>Y8`*6+x z@ilFbwd?k_Yi7Ov{V@WI*XzF*M}dzQ+m-K5V*BjM1J~<&%TLzpGdAdiul_(@GYj@a z_Ws%rM@C5a`hjx>9$2rR2qreXO9V&sBd+e@@UQ6Gc)1_e>&e%Dj_dV`*PpxFuM7VGsw&aAEZf%W=7{(8Nz!~L{gFAe<1Td$YmvNq=PMZ?;ij1=c^R_^}NxyTrQu{zgnm`x14pW-8k=)a%hCWQ4KHNVeyMn}vpxik74X7m?-XY{LK z=Swcdz6u}4JCr)td+!^aE80d858I_~a9$a#oSDEeGfTIUx$W?$h+QCWL+`2pfuP|7 zlqb>18HnaRSRp|?(G?*)Ak0KmhrO+dD60n6+)cz9d#nGJr4Gra>%ZdbD!k?;OFi~g zUlX*}1Z!qS2cz{TP`fCqVzmqM)VD@KnSu92TZri8XLEHz-#yV^0#%e<`;T6u)pNFh zW7kNg<`NvchHre5fXyWZTzIN?j^v~T0zJizHf?QBP*4cxFKW;GedS)Lq}mi|^xq)G zz;*i%BO)UQ()*#`ush-{50=jqEC(zJV+zvl!@U#qryfC5*f?g-iFT3Ys&gl>fdAvY z6If$V$``c@l(11v8!L{;oY+*x)>P%}|J8W|F9Vk(;@}1BNak1qUQWU8QC`%_)#m-T zV&BsZq#v9MoNke|OF3x}>%=)5Ye0{&^%z1u7LW@L8h)fX8PE=YfCi~uSJtkAU5i4? z`jx*&`>d(uZ!~g93QYAW*Lp6><3D@r?;x$h#~>Gc@LbH}&_%nuD8isH?QCSnb9Ht6 z9aSa7oin{S&gfa+?1?gNkd$VsXN?Zhvr6$$y-3d*U2ive*BS3PvwW^GsDAcPG@~W> z$GXuHE2Dq04vGFXjJk>~PvD~?cx*nG2AEgIjupm8EVg4kIF3U3i|ts)$FXPB+ZU|N z5@s6-jB*?~>+uEB#ts&)xp3gk*4-7?Hg+9Zakt*fcK857n@egqU=nA^77(x>@}+V_ ze2zmMBzpXkw!Tr1?HsbE?3xqaCa5+?!JniH7H*NeG=(j?|D}~6J;#v#t>l65T||NY10ThU z1-F0|BwOr1@SwP^q}s;``oE!?+TqtCFFD)P4nHC}&6F%B{BIU(HJ55-LDBy}z*-_e zJf8z$`E{x1)U})8mr%HNGxmfRuicD2;iYRgSFqjs+Ra#0Z&dKW845#q;KYTccwm9I zRn6xMEv(35`IT2L<4^`!^uuE8xh*XF;g07PmO8OO+X^aJA;lsjhAz8y?dD*p735j~ zN5WQhsZ$G64ymoUTgY#r>>-QAheb^lyR)!0V_HoDM+5peM&Gs2D{CDy$TqCs05QcscFD9KFEJWhF|qXLfdZA}cP^6dvAl@u}~#onU= z0I*C$86q-K#Ku=8$?hp4WoGE%SZ_r78;lIvT;J3JV;Wc=MPL>`4qb9eeT-iP6A5w#;^%KFbU?^g>llh9*#DV^PR)(qLw%_lTLIQ znznXG)!FI*EINi?(%I1ya24us`)&-n?TfyHBcH))#VwG*qu{Kr%SVt zeF#z=Mre@HVbqV{3i5Ht8WuHY=h7F^kAQ`E;c|8~Z($uCeSQRs(s^OMADH79`EL5CeX9U}#C!B=?#Y1us4-|(V4+NrJEzdm}u+oer_9)6x?Sil4s=SL}8xVs0hnj#0!F~89W3}%5xA2PZ*nRs|nC2^R`;a$_=Osc`* z<7qH_(h}%QE;u482~IM}Lq*C5MMcoV%X>iIS!bk)gQTQMs!&0LvdYq4{{nWF=orw| zbXM|2*8gBo{66>>u=_dM(}_zwhjFbb@TSg5q(8p}a!XmLHWfZA@iAC0GnQ=xi7lp_ zieOT}c?jzvvQp2&FJY4Ye>n@ElRv3F^FG|MtZxX<%AB+c+u2OssZP$VK!mY7tO!=j z;7-xWxdOs?FEuWAotlX)5tDQG^qVE6|KdFT??bf9ds(dz@{VgFlW-`+W^yZ0)tnRQ zTvtEg?gC;~;WN!gK_5kZl!9DzIr67d94}3pS#A}i0iY+l`Z8oSA87?e7}9bQ05?PF zX+Z%nLkb;K40~mOlxc@dHb^A_aCg)Kp?TAk2ZM>P%1@8O_kzF|>PX^O&^qeIFJ z3^!iY5dIbxNx#SCs)z?A?Sb{68q|dhh6wtB^d?kmv|OP_d4HA?ZB!F!w0Vb=mE5X=})p0MV z2cyBbF|!;GJgSqBFOw=?e2c3scV+qzZWLpG3FcO3J4V9vC1ZSqf9p)ev`jGfOSFs{ zg0#ocCE`ju0$#2bO$RVy)H3Xc z$){m1uUbmNN~&7meDz#VGF*Yd4DZtZnE&8aCSo|(uN?R$VOc?^g7RoB{02sH&Xj_( zLgE0ku^LMIRvex)IT#s^BS(WumV@*Id;d(RvdG}jvNFa{0v!xx`AR=ffC)8S-Y`xa zss$K^UTVm_RP$La>?kCK=kd%W=Asf|sA`~8a(L*%LkUYQjSY6fNdY)1P@mefAm^_Z zK7x$pG{%l{koD!}!}V$sOjKQ`+&tQdWllN)LYr;5xmKlZF=Ip|?9!}FH?_;y)(ruYL0N0ddAY`Q+8vWNM$B+7vz?+@==FakWrV zr_ZhhpNz6qIiPNkT?-!Hqm7bvh|~4hC|M6P-Y&6H{hsi<`Mfv^crUh5 zZi{0dvNewaLe4w3u_y>D>Zq$hZ?$b1`{Y_z0cn*)OVS>B9`c}Ji)C{!m%yj?$h9;= z7MVGXkS5LfNt#R>*;>Y$u&iVUE|ck2Aa)CDs^ z5m!FLh!uVfWMA8;BIzfANd4RrY)EB4-)NkVJqqW~w@P{5gZsRVIM2{;RL^k2_ai~8 z?5xONuQ5kfG7SPNG6V}vNZEFu2Ob|#JjPQbP!P^QJ(tCtU6M0bpSQ8-WlJeKE4=G9 zroR-JNV28qTzdDmDkVSr;0eHGZ?-Cd?zL4(&>w88I!76qyieU7h6d~-5nFuLR>f{| zu3>rUC)`&k{E^tGcF*+Wr;`EyEuk-rl8x%7K?a_(wZg84A4B79q8x>tXd0=uZKic6 zwH97t{J>pn8)Cm5=P5lDc>{KlwW|yRd_DXOGTzLLVX-C#fSl^Fi=n}Wtj1Cpvr{B! zv6igyQf~<=jipJdOR%6>kaZB&@2g@D)cOrZgY`?$Na`2cmDEIgQBVE8(_g>Agk${@ z!fE|TwcXY)L87mIL?u(di==*ux$DBjuEnmLn7eLGf+;0+Y~QoJs|>gS_O7pE2o?zD;2vO~v>0}=y-UU?Luo}Tr8H^xZcJHTFa1$~2H3mk$AOv9 z(m9&OWP(C-mlRHOm(%Q$1RM(*mV{w5V+Vnt8wD_ zF^<`UM&t^3l|*Xh8i#F5W5moQF=FOwEQNJTW7O!SiC}bqr3*6@6Q|QEjq_>sY8(Tr zm!_i)%wQPMGF51lV3N`}F69*sA~~4T>{;=2(n!cfKn4{)8Th9oW^y`Sx_aH== zNgOR#=pj>c2OvyrYcwszwza9bWekqKihOZRB|UjWR>Zb7wo2j>B{8tBB~aK~uBJAE zWo&EmxkuZYF&)sfM%z*iJxv-BcC(zmz_tck7i?<<`G%1!WnEg%*py&gWy}=Fe4AX5 zN&N4;5LlbxpBJt!w&C>zc^!JzLk#B#Xnk z#=#Ev&C|NZN*OxnhgjDnR4cJuq1C!3BpB618m%8bM<@1>@0+SgVOq;_Og29TXEIVF$y8maF|% znNr`C15CJZyr0k<>klaZ``UiA{1?6Ybt>U}6otZTnBdxQev`lvVUsnb8?87C(89M$ zFth$Z^GIZ$xzsn7mS$B!<)sMh*raM0G-vt|yzihn#70fS<+<>!m}tuudqhe{)Q;_G zwV+&_4e}Vd0zJY68x2Qcp+cCljFtnnA)ifGkd-teMxjwimVvK*P!tL6n+j2s4=#gg zsP^c=p?S@NXA&5IQZ|u((6XzcDwa$rbd)TtD%;hvN>o|cq*a-U9%MsVK#jE34QigEOZih`e6G8XbK7)t0|DyMCjkD3#1p%t*)pVvfvH#){eHA8&HelVxf71M zX51Dp1y14BNmJ~#>}L(k(-9fE`+A<6q|(~9veiYIHrqanyA!2J7Qu4f_9Nw`EKN0Q zAyLs&o`{Z33YJ`AeQ-c|eUL`=9*i3qcyY4{Ed3v3jTsu~;`XK+P0aI-)LCH{w{Z%o z<6#~78Xp$v1j5bHr9Jr_0GJ<>F0zrKu5_~vrqN5{mX3DdO)0^=)h3~Mgp7(#Oma=* z?-Bcv#y_$zp8mY19_(XAKX<*@VMwW|nCeh`_GJYH@BqK-rQpR^wT> z7-3R5BEOYP0&z*w<8Nlhw33-N_Z1dt2)F#uVSnqtzymsZGm1gcFs*W42bIz6^I+e@ zC?{x?HJ>Z5f#+1kAC0<*{x`0sNf&uaKcUvN9qh&1)QXF&}(q&4bFO@f4m2* zAa-ZJUBjGi6w%mK0+&f_EqM$w0N_#pLgEHF0AlVqdq-j6N6gyKFMwl;JO!wIi(@@K z!dXkjwHO=x_|1?BlC&7>S+rl>qx`S3s9tU!E(d=Da&>`6CzLfE1k6zhfKyHWv9b;{S}zH z^v;Tn`I@LM%Wx`(h_izH7OiGzFGn2x?j?@RpTw1|_OdncXpkO9BDg;dc>PT9a-wU= z-;OKKva8Q}^eTk*l}x!;h(!7=D*0vExWOfp9=Cyee=cniy%s5;sqx{-2qPnLsXdqA z?AF&8T-497BZuHprb>478l){b@+jMW^m2SwoV+~YSfr>{b1un83&c_$eB??6aJNvi zqMyW^R}GPWS+^JhCnLqLzGOj*gfMF)NpJ#;uXz=$W{pg&UlJ}51)L>S#A!)EPPa-Jm%IrR;ZwE7S`gApJ(s z;YN*4uob-Z3%2o)JJA|Fb0`Nx^pNY#kIv^>B7#efFYH~;54jRhaSIYqrBO`F0!w>C zxp|4Evll<=^U>c>(!gb7W*8H1ts@0f71K*VhzPIdfeW4Zc{bz4;J052zk!$7R}3#v zu=em0&T&IMum(*tZVC3YgWSfdrsI#}fUPTEPdSIPwQ8_LNI$M(z+_*o`g0#eZBckl zQKQH_8@%93o6!|b`>+Vxts|uLDJVcbW#G7A2Y|08he9wy+A^mXX^onT>*$hiedb@= z0Z>@%ytK)mMbDLq zlX}m}q{*|EgZo#Swxtw?c=oJ10wGndN@N2(2T>T8hGk5qzWf`__r=I^)~Pp_EWaSu z9hO)_N&HMU3Ta*I?-BRg0X)Jvca}#$e37%#v_)Hc0`S6;FGtRzuwx1R)@yFCMsVLD zTNNV}`jd|v(3(ZdH)KbXpxu%IyX+Tv5*m&N<&ks_#yqg+?1x6L{2GS(H8l@21^>oM zp^EBoRHNSgbl{AQP8e6l#g;d1u{1bdl&ncbtlWI8)iB++%o7r^`uaAoctwzPq8E|@ z+(P|2^ti|HJty@l)UK1R2p2V~l!zq160c+}>ys!OjtcOXk1hbMDUevpQrlV^k2ZD$ z>mtm4GAEZt7G^K`;XeQc>;^jl(c#TR#~W+;I2RBdU-7Hv@}wI(C}w3juoo~Qx84Zm z!+-Ok`iy*&(+fsWNE=9!G}I71CTBo;2L6pPIfVyafI96GdJ2X`SCA{&V=ZUC?BQTS zAss!XNeT`FHBw6OD%3$meO0XZ$>M!Q$`zyto(3vTxdbPdIOT4{afjdykzF?RR}1_8 zLFbv0EpiD5=|L~UJa08y_rX4^|L0!5yuzvpgzk4z6o@)-A{n2MACu z$DBEAfx4tAF@riW6n|4(6anberRF8Sjy-&U&AZM}F8q5ooQ-tpCs-+PhurW@h=K+P zi7kRsm`H@rsInys6UNGk08Qho9-^|TP#QiH?MNk|gTaAf2ir`9@zz*=AzBCUQVsU(+Cfgfxx|*k8)fUOW{B}9Ict*}j@UhC-zf(; zvRgq8nLHquGBV}U7%N@Dv3IQ0&Yh}~n5y-Um0n|&+iK=8TDr-2nKL636k00196Dvl z#GJsNI}l~Dck8H$V}1dC&>SAi|P4l|FRW%PumDrU*~KQZ6%)R?8eBFx0VQ zT!1ecrOG?%7+B$9>52uX1dR-z&~5-(5v35yQf??0l&@2Mm2r|-NRV)!89JM|EIbRz zE`z4YLP`)8b7YA2IYj5G1sMjYJ1z$|L12kcklJxDuVw?aaIkfDkfsiSvrLg!IxJ(5 z&J5XRkcLiq)SGwRdoMg~!MIiNzdi><&9P0L8Gq|InxUE7I*LaTXRg*;_4BV34)kmG zjR+`@Rhn47DAdoly~1_E$2VGqQJjpM-<6|enf-=#FP|(K9Rm&q2bo^NaoD$>&345< zRm~_Kw^74Y4OTv>ZEpP(XPWW}8o1*s8n#hA!pWUiqf@M@OAbFzhK8QV%&(RNM9 zgnVQ}R%j{~sW98>c%8bkXjv0$>UB|D*3{}dklUE~SiWP;C<7+qfVv4-F`hz<0b(2J zwpaAHi?|oPOo%}*4cRt!-=Mb~=&^OzJvp`Vb=m7+{UZ;97i{Ykv`c{hF^CiWGb9y8 zli~K?V5n%nlj8-PhKgHUi2++dp%`v|j*+{PNZ1uuXwFm2S@kdKdziaJ{&pB?^gY!B zO*o+?9G)I(v_wt~%>ulmucT2Ci`}6 zYXtC_d>qNmY;j^ajQ@h-D&;J*!YAR%ceAcwCw_)@xC=Q$Zo@_(w$H z2RT3LY3ryGR}trHD}MzDvDTq?D%*p{S0+53v01K0VA8)KPq^=&{hq+l0oaY2@_r8w zOFYKAJ;rl4Yc_pyUZ$QEbq_ks??C}m9JEqmF(w*ql4)V8# zcs56s5?V}6BcoXo)etW6@o=pg@_3l!0Va!n2C}ZTqhI1-8i0I5|7IggNhy_GQz(^R z$Y049J{t1VGIX}q!J%JSNOk9AYt|ZNfp!1RQi2vN68WJ^U(V5S_FPTh<_kr2pC- zV%93c{7y`-y67zUhs|flp&{TSeGV&L3aiMHZ=Qj;mbRbNQz5W~+>#1=&JGQUGnb+G zK^9EwT3CxrYYUUTIOSNSmfaCr3Sm!RaJs=^C{B|ATDztw%x^T^jdI8BC@y zy~VgfGft`fnj!Eq#Ti0)(6g0m4T=OTm0toY^lfOmVLDlxT3X^0Agr-ofZ^4U?`S za^Rya!47tJ55h)oUD+L*>qyfgPf^_aG1~tt73~7Q~5pyPNE>_u|&b+BVdDhh^ zFOWVrK(6YTSrk-Cutia>;-(!brIZ;&jh;X(Y?wWD9Oai!=`SoXfl?GZ4>|+KQ=__g zu(M~-gE0>Sy1#A$w0J&n6I~J_ktD`E9izZm_!9AP1X>s)OZx-loKbQPd4quMdlF{q zVGPp>(&B5)N1R5{F(s9D(tl3|L+cI>3)YfhurSUgyYw;$WBj`bkdzh>(<(F)F|EuX z7|szXwJB21Sw=cT4F7~3fs131oLn3Wb7({rIx=vjLdS!I!Rk8{4oo0L3+FgXy}*nu zHCQxcbV=o?m(fQY#v>1EaSFloC#JZVu_=qq46bDYIzu7^`|**k)r%4NXfaN|PD)fg z{ScH{mHO)_=&}qTx61|*O49pPGw?8K^c6rpO?9lePQOb^U_AF(Y|%S#Tvaor&K?#= zc+HfuWKjp`Lu$f_+c>DRZK=;=ERnI;UN{}}?qZ1uTaf#vD947GDarwwm}4h6SoO5_ z58rC(y$`3LoxAG*B0=HXu%mkm%E_FEpPbKW%h^uv*YS$EDr1z|k798i2LCM>s<#F*_^CjA49jwMyg1EpAvvO6S$ zR|AVgCpIt(P}NNMY|nZX?r)MR);2{s)=_n&)hLU4)}jXOnR9Z{Z;>vt3ERlJ%@}`Pg9rj{f&b1&4dT`1MK)Jb`lQ)%ovGOgQfDeg5O(IX#pK!NQ5A zrQ%yS(7Xt*-B}_Br%k-CXic5jU2n>9#Aa0!ncQJo;DxK1IxJG#ztnyN5fl*==f7~V zPk$oR=YL8VTTFm zLdOWMO%ddr6}Sq5p}qq*;)ps5j;ZW?@2e8zVo81@@iMlp5TlgWJyej>_rv&}>mH6r zDt`>^2q#d2l$5FXnm+SVAd}Q1)eAbzb5H4Bo=unGHzHy3)A`uRtRBp2Bz!@~%~G>q zhaX2RQn|cm*iZDq(hqWAzC+m)oy z#@X0j0W&=fYdmjp*izfZsEE6Ab2TGdqi3k}3(vx6V%HD`@rNUNifgmH{utybe5$g! zdnAY$i-V-ArelrH!?8*j+kpQ8?9rC^SQZ?C9M*9#<4ZD)?whAGu5X^66W_kg-G-?{@8gz_z)@RVSHw2>oY!l=}tcFokecKw>O zi{9sxaY}8g8t*XPskc%H+EplfM7J0>V;3&xdfHL}(13d$v7_3ZHF{p}vW2#ub~o!a4#=f(W!T z+7ftYj1-a-)V;W8J;rA_eH@+e-9Y(z2k0zObVPZ;ruwhPZIaM*Dy8ZB(t4h2*|@+F zhc3RIVfH1?xYlspW)op*j2Kkf#P!f{s+WfEPxBr~!|kA_5}I2eupgnUufVe&&dd z9?O$)=$*LC8B=ggHpFzU5h_Bdow8mEJ=XNM@RLA+eUp?e`RtqC?)xTzv~Mm3-%UH; ziX?;krqFyh?cAR#Y3EgT=!}5=>(*M0Qx{IDV-j$bz3@#0gmB`7Qf zt8t)~4n$DU1}!L_XHJj@b&8L6Rh@BCWMT9*l8}P|!)d#a@U5SPXKFk~=p0n$8i}1E zXI&526`HTzVR_LjfIa-qJ_sZ+*INnS`S;F;J$mKE=p}1vjr#R#>W$IsyGH}q9+NQ!J_Ya=7~Ro5rYAc>gtsFH&O;a#-oXzT zHe;ut-gxoV?A9J(VJK2{G zMtKcQD`?+AUbM9eJMoUa5M*!V1uUOlf_&03RnIhnDj!(SdoXK#3iM{fcj~+ELcg&` zx({U@Bi$4AagshB#)olb7!Uu0C413hK}}%|IyoPT?4V37ymAZ#Jf7ek{)YDeD0&kD zp?gZeXQ5(c1N`WX66Cp)Zs3d64qjPzx@L&~Hu{K~+kED(Os zG;1LkF9n%qh%alY{VpP|h6*qG9dLzjUoQLv@-a?$>qD}^HZo$5AJ54M01G^v;hfJO z0y?eM_Iw1woNzTV0~w}C2JAg`Am^5X&`jWmA19(*0F(io>3@gx`$>AID;bE4#1R;j zk;$Rsk{pxja(=^2NPzr^N2O4oKaoxo*y$sNJli~X_f4ZU|7Oe|;fBp0-{W+QXI}i~ zdvgYo`rSZC>fJm5U;mhVP2lT2$ycRWYTM12xJbHE>&`}_3&}F8eKMlG5DUabZ2_TU zVpog7X+Ut19(b%f7Sb(x4Wva>l#vuD#qz6n%vmDm{Hv`XDg&1CE0$C7lD(u&{gP6+ zSUR#@NLC~FnU6|*jG-yapfOL+c~hC2BngesjYs`y8S8sS{YR3Wdh3+A)6|b~Nyb*a zKYoqyjooz!+!t{ zDj1<;`g!hp*Hd{J5;h;TKJhODV{=Mh1_=yfp+i78935LbQ% z08DT69QB)WED|V`vOBCz_$}0~h@1u24zY|v-~?al{qTSrb+d&lx?he%dZk6Ml>66^ ztut%6RX#7$u3|_ z03Xq(dPl=_G~=`HSdRjp2MC_w8X&^C6+~Bu9N_uagwF>OAPSlvU#Rez2q#6x)GQ_Q zEfzle*(7Jm{G9b2TzTrV-L&8kf~z>;&RdPaU}cY5bAP-*x^Q;=!7^%`)p6#iE-Q^R{PEAfXT7vWQ=(S z3Oz9IJLw^BMV4NpcKD39fftbD|#;xDu4~wl<6@OFsI{<$N3?|uZoP;w!3v*IW2{ro4WfuYV`6@8j#c<@F!zBZrTUXbV0+b@ylh3)sq^X&E)<=JXG2NLeo_DXr4+@bjU-MEv!}uf((yGiW<}BsdT|o!b8l zxEt4u+E<)|2sq=nKf!?TASh@t&)c&89`j^|?o^Lo#&X>v`RAu0zeYrybsZ@_{WOtaI30FVM^)f%Q z>*t+~S+_l^k8yoW>7y|$&w5J|9%WBsbhg4XP&*6{w_*YG?}%@$dxbu(_C;C_G~1-4 z%eADO2^epGf&p6C&FEk7YbL@&k{j9q8wEcPh`7O0JcisBh8m@e^ylXSmxI~XKv(OG zas_=;0=_FaZWXCYP?9O1G4B|N^zd0}Qwn!sUS8}d+Jw={2XY4{OJcr6cC znbjg8tDzLzHpNMN=%TZd5rH`6WK8JKH`kLZoU)>R`s;Z+U+Al=HiEkx1DRq}uSMs9 z2DNLZ?*;lBv%Ujs2h}HAt``YgXjRyRB&pWnN#urgC&giOHIoob8wDzMmvVO0>Lvam)aZ90b*Z{?n~L+(w-cX4iz4Zo*y?g%NauW z2}&CRJJ%T|AP+Fk@Cf6sx+saWGdgKU;z&;n((sFQtk)ymVao5CE_??DOH7AQX9jSF z*31{Kqrauw{@tT-l*=Eu0#IQ4==#f#ll|Ot$e~b z1Di<^zR6=aeB+<+dT9T3V))~Lq zr&?>TkS!6Qm215h_#ZC#hp$FHyb(^1S*ciCuL1t>7=JlHJUhG*(eQmy$B@UBx4Ss;5;n?W za~!k@inuv3!ZfIODI;#=2@bqwv8d2Ui_NjKw*~IP7PM*XrY-GFRb1O!NFG6kRSD$CVNQNM!E?DmJO>lRQ;0=?Dk(Yz<>Uf5xsc&xSd)uR_(H)L5eX+32Ia~z zX~`riWxdWi?rX}+=%q{69;p1o@XXSF^DDWvxlNym@jt86L9JK-A{hY7!S1We;sfeac7<__P^XtHwHoJ~3b z=)_)t2fc<3D}UP07Z(1Syo>=~F2bUWg6UTDt(ZkI$i4(H6ghNNoQK3~zm8%Lb5Gfx zxgCuU27Uz|AWOo##_x!+Jv<5tO5P>73Ae2Sk#3H(s%u21#8Ug+EKIHWlIl|IIKoXL zme>sR?1l}>-z>|pvfYt_v9@J5r!`YamvR)(5fH(Zu61Fow&mWEqa;7mZsj~Pfd(Oh zhK5j3I2=8YYDd0th*~B+f8lacQdb?B&;F>>(UK4L8X<$Sa~Tn5U&74lmn7rFp)nav zT?Wv8dq3?DP7=Ye`AXCnw0{*I18C3KL9{1$5AD(6g!YUG(-KSV<5`%YJtHsm?JVu* zP)F0wEGwbC6fCtKu{%jRC;A}FF;*YFXOYK)7SkJEg&zWRFNv=PF;f4Cfixz9d!+H{ zD35x6!r$SuGbFwe6>k4z7EYVO-Z+*fE7&Ln+qV$pm)Tah9(6}6+<-?ayA53!*V6_@ zb`w~_C%`LD22RHc4LXE3bX@q}VUQc>D})uPRch9Jm04$?nq><+?Y<9Y#O7fYSl`&W z%olluc^yuk&|w$L+IJ%(ky*o(Su3qoCy0v?`l_zI9>=m{ITh1GOtT4tJK?KP5;kW- zc<@}7Bm&)t19LgA@~9$W3jF{k&O-PD#PIB+Saw?lkwb-84AHdvMI3#z@G7)HHFM60 zYt3NXdNA-x+lfMv$^nMqblnG?;B_ERW4hQVmqxuaM*TBziAg^E41hVtzzFRv{CFI> z<3KW=&YA|GToZu3Nv-h3P$-Bi?p7vH8ioUN7#6sBU1a3RQ;Fr$UUD zTQJ%V%d8wUg`;(N17faPw1a&24TKB)?i=y6sCMAk3Z5>-FpbM=oZVrT^`KyP7`{-# z=JjY7_CJ6hSVAp;a?e~cF(SW;;3d%`oyPFIa2RE>XPt}iwb|YJG|6sl`qVm}6 z)yDP)7Qu8p0!1nVlEcDf&Mi}apA!U6Kt-=dF-6B6@szBxT?5OLZ$NOy=kzGl?cXUz z8fCHb6di9o{9ACGWjwrILTlTahq?YW=iK@@U2$lX#lhd2DIPN`^Wj7ui=fiz2 z$*zi8V_J9@+wH=?K{YL3Jt{aq<5`Q7v_&uER{&@9@{QtN;<+_U9-_Yo##sA6oj`u` z!SFX}I0EI(3lD%7emeik>{WI*g`efBzoUC^&SUNvWLP%%OMOOV#vV!35Uw^kE56UU zYB^h93&PhL!`{5cYg$M4H_1G{QAz5ov~#_wutOr+9d_yHmFPkqu9dl&VL7i+Qda=Q z_K3z(NxqH6=-8*{S3qty)9_|D-PE%xwJp}gouvCo5B+jf-#>-- zb>EKV4i54CR|ItVW7nMyA;ZrBC6mVK5MDzhMjc!c4D)G#0G{wj{d zocsxy==hVg%2}7892ohjAClZ$=HfHF4CK~@v%|Q^$x^nif?;**YWy?~iash#ttDn6 zLXAj@j-H5;AvOgu$bR|8UhUQ*(v@M;ZJCq>WR&zv3?D+7=;wM{T1YY68OXpZ)5qXjbR9FsWt{D+KP&b67p5- zwrfj_>M7zr0*mllZcg@_#3#!@7Z`4@MJ5`l@Rwb#dXlUhLbqMGeHA$R3m`1^DE${6 zR`YoGvh4SSD*h$`dl;T4;_rp{dnNup zkG~(_?>G2E$8B7&ej^_j9{olH%mqkcJGtn;*lKfJy@Ma$a4xzk`RRSA_ zn0fQb{6J1$kgrn-7)PBTsp6=^F+l#O05w_L|CZNj&FVJ!z%6vS=!^22C{CF2pwD|U zPkIE~$FZZY0L1*}qPzH^4|m}_^fr}9{b{}`Y2BSf8E^Z!hDh;WnDJEodU<-#rcK6FQ(7e z1WtZkrH?)uqbY$XtC;trwN5>73vD}(=Ak$k93{RVM@+S}4hx?^-O?%$f0zcX#|k~J zfJUFvBTdtQ+TELmbHv9t)C?xgOQui4pZ!Y|xjb3s%Y4y2nZ}o$`UZ=-Np#<(>aP8{nfS6L!y~r! z2EaUC+DH9^?<50p@;DF22*r|1$6_YWJZ-!)y#L9t_>U5L8h_bm^I+SHzK2FCHxI8pd{Z_LE!WXQ;-w>#pw zE)MB-hyL6PrMTy@?{kRR3%r}cE3XN>qPK8c9Ep55hevx@{{}ES%%OTXTT-`ZmQ+J{ z2Mu-ZZgq!TtUEkCQ8aRU(j9V_y)UCXxL`P=1mt$71pGG!XD9);@saC(5f735J-PrR z4gctVw}*)y-;uN(rn!{GI^p-?x`RU-Qd`+IZ2T@s5A9!1WP5JCbI4?i@GS2xGrW7! zBHn#IXnC6QuJ|2gco$0^at+6$@MIJ6c@+L&i)@tEujM0{hc2&ul6{e#g`FLz$45UE z&f6c`=vUj(&*Wp=j(#C8V9cM(ONKF#jBWb{JWXHf$LD_QOTQId*q44MZ|qCImpAsM zUGfH$@0FJf$}x>&-lhW~4!QzZ+M)IUlXR;7J|g*KJP_?pYma?uH}JdbQv^@@)Dc{V z9toGwRtbU1HlQu)bnt{7J_2>wr~dV3b|%ralm3-NDKUKE#SaNU1`$qa^LsTzVBsy-^=^HNBh1flJ9j# z*-}L4E3aXz7*8$-=I`kWyTzG zowe{z3Ng4u3BbG9z3mQh%10{zh~?vVBdpS#!ttkH0Ly97c85sb8ch-eSIJ?=2j#@7 zxZavYJPIGnUaPApjwT_Z(F7BV{((g~>q&~I8Nrfs>2eT|C?aTF#v!pCVz*Gfh5tA#(f*nz!8e*+DONt7( zZV!m*$_(ZECY14HtxwuUX*J>lrY71~fHF?F14y=S!mHS+lv0i-l}*u-MPmf$k~n?#+`2U@>YIdSWbMLs^W+*9I;1q<9=+?RQ#?$8Kmr zD;p^jACJ_;%>|2yvAh=zwTHzx+_h&M4z^Y%w6Lvb_R<2IJ+!cofdu1;$Bj1wdAAsi zi5@h1xH3lO&OyjvCn2lId6BlyVb=a<#%o`WMOkyG>dVc6lEIY-=MOQXKtOtx{u%%L@uqNgB4KU z^_s0kPD6ND{bU zGjFfn{XWd53qJ(qun6D1W&+~N?%WLoy@hR5Q(lS?tYxRoD3F0(r3l9f&WxvA=qX==3k9oLzpdwVGs0ppb0_1XhbFm1N5*LdA=dgEQ zhBOH4z8p^w2AgE^(f-J;TG;t;+~0#w_y(N{1fsPhK~UU+%Y6{qIMoD{w&0-qOhDsQ z+`%kr3DW#R$aaTZqOjyJ=KtSTG9DuK~yY=5ezUUO@;Md`o zB`?ua@TfF5A?8tds}?nf=vN>*Z==RR|DQxS*VyE$?syxNI}$yb8Q4xC`Xw4OTF=zD zx~Lo;&bNvmUBGxBw=eb-g+}-V;Kz_5uDh9ip?>0i4Y?*@HpU~cogjz~V-_x61nZ=% zgBi@TBI8Yaess1#dYxaOj^T0qa5}F>d*Tk?WgGsPbi`dkY~W}Wm_xnJX~4&|3BoeZ zW%E8p(~+gxr-5^o7JhUN!bigQ10=kK3{n6Lv#lS~CuJdVNm1@&?$GmcIp5{AB8L0^hV$|7F!jXSh+;X?pbo%S2` zU|LxP&_sqnylDGeHqUFNQ3S`c*+{P^Ky{VVkrzPn7HT#tzh!%E6@Fr?D3*CebHO-Q zGAulv1+In-BUqgj7-z$anro){OlIc`71KsNPrkvO>zI${H-_N~YDCMq4DvxuG7e;} z^q}rfDa2K53txr*#4HB&L!vP=tOZ|os?KRC%=ZuWpII=qyOiP8(3BB||HS@zKyU!- zx;|JB2S+cumw2qR;ChFvN)Ct)0Lh|x6pFAQ4Aw;<(=>wvf~E|3)fvd1nJ8qcS--I~ zm`w;Hl3`DsJkL&UWUJG;9u=q_7#uirXv{&%e!M~Gpx_{EnNB**fhesMU6e;AHgM))NTu$-lEI5Z_g)I6N3JP=b`fI#Kp1g9SeB|R5T{ABsFtU14 zL0;k4h`AnKozAO}ZB)W*wDolfgdJ!95E}n(~1Wh)bxQ>Sy9Vn!vO9qlB$u8G?vT)`J}3%^M@%@!}M+tmPFS!@S z37+^upJnng#%02aV}oq6Wi@4d-Y6G{j#4h95Z7=@%}>abndK(NIt`g}gD%ptAMq-@ zG@Znz=`@WOzJyh<9CM)EE0Cqr;jgD&!ip~`q?h7>1z3UbLn0Tn;c)vX?i!^|%z1L7 zw~cjhz$H;kkZowfo&;F>>wzpByHO1E+vVmfngZ3JfvVn?G!>?>gph`+6L~=JgYy8+ zPalaqpQ3sb zmVw5auQ^vB$=3_7VvblcigVQTPeb~r60aE23vUAYB`n#wkx-EQ`Td0*eb(3%clu!5n+SVGBdqHox??Z<`xu&}8uYUAA5<70glac1a-Za}# zsWc5020uDW=w*6*mprZ`7k~X|BXd-zCOPBVv8;=fr_GGw3i~ zDwMwXLgErx_O86{cVC&GnaYQ61qEhndDB3@fpC#6@6y>~=@2&)nj$=bqD>LXN6!{w zh}UsNJ6J)sv9p^)1f&hD2@2731bILF0BGE$SXSZ8p2&N?{uV8SZmRO?_ z4}M9#<#`2cJ{UH(#u$f;M8hRr#FBTjHX&HLJAix;h?ET9huS1gebu0fdYgX9jL3;j zhw#xBVJ(q06w@RCuRar%pZB(&0OO77`_mxQq1A%%izk8dJN*d8R@*`2TMq&v29$$)>8nKNFiDve-ts`y)Kr$JJi)} zW&38PBPS|1B;R!pu-38W2H~KBd zZB6S&&y-3u>%JR(h6A@8uaUMQ^axMx{kVjAHdgWKs#k()C2Y0uaXbl*mawn72%F^8 z;}u6&;9Q~j;v(*yI}gAXUTzK0y~QQb0YrgOt7ze|F@50|4~Z_!Yghp0!x)!~p$XDaji^fkne_UtU?7m3Sl6q)) z5byxYNselfBu4A2PdTkdW8=9c+*thxN?INNZE@jxI&pC2>=&*En86zR#xyIebIcB5 zlMc^@F~Wk29L(OzsT?$RG2lZzrB83gI_dK;81$$!gWxn z3o>9Jp>h2x9bqw+Dv&3;P`UjeD9%^QaIFrCEnJqZHHMw6Y$O2_FatB7&S8i&S(u@; zo*=mfH;{U!9=ubN7fAmENr6T4glszE%@G&((MsjHZ45`|BspvQ;s^~81i2KWpK312 z{;~|U;fRkB`lwrRgXOv#O@7e?lN!RtZJ1>m>dkK~l(k;M~Xh}KsmZS9`lu7$6q?P%N-I1zD zt=6M+NM+=UQ#J0?^exSjC+(n9?T^YSVGSvSx*;~NdDGk8f>pSd&>06Z#I&?KEI3O= zmC4+LCF`|zhj}ReJQ_njyTpV>yqM(jt@PA$A(ft>7YVKPh~_|7yTg`^{$&J;dSyP^ zgkf8Ea_dqtXg4su&?}SvUw4;&0zQnd$DE-}IW$t7dl}wwVN>)tlr04{Dyo$i z?rfmoLZgB(YRaBe(fjofh`^t5OF@bn7TKGs6pgX#A3a>5WX}}{+MFMa zui7=RDHrS4R445Y1yV2(Oh#KdQU?=+qum!A5}hu%P3oW=Oj1m%1=tSHV3cLu`Fs2b zl9Xp+<^|&4McCYRjHy+po5!QXU|P8WCSJV`pt>qpHRD)tJ&qP~F)91MrCg3PySWoN01o1DWfa~J;Z-g|?}I_r2U7x+gz z$+_qu*Rq%3ooiq8`T8K<7uc5@^Bzb%{8s z*Z|p0DD_~EBPCU;YF1(wV5i_ff_P4tR6B?zZG2!veFtt@hgmm=ZRV)sStJwB#1Tmd z!NB8NB#`n{*OgVKqXjrPq6Hwo*Cbp3=?xM#&S>8TB{`ZGs>ci?<3g%eOPVwf*o!$d z%0O#4Y#sa^a&k|l%J7~t*Mjv%osp67Ol{g60(K6{gY!L(L`$cw9M>O@01!69X*%G< zvnFUa8&I#Kl)Z@)DvG*cX|y&HS4+o$PeX>IPr;+5>s9?Y7N1$H9L56{jn>R&;#F;arwLrI*5&1}P z5D1uz&YmxFTdVmr$m}wWjTN0#SDZr4?B+9gQI9XwbvK_^7}L#seqkc~YYZwDk{03} ze)$@P0R))Iwh*&W!#>mKQ*08|S;($BAKkQk^Tx(O=Q?^N0Ow+7AddfxUzrcVfw4T# zhfbObe64qjeAK!neUv4>iDpGgx0~bVLJ5`bdVKBh7v4Z*!*!=n2s0ph0=@-6`mN5Z z-~&wlW4xI!sm=SDneaIM>2Z3q3zPC=6L5bPVKI-=gIMeian;@hFUjyC_U5<-9acvb zc%sGX(8wY6$~*4D&klo%YYUW_0>U5?Ne*7P8Ba_J(RXY)OX%5xW5|_T*kQO%?+AyW zTPH`1d$QcAdr>FAgWm(b&(XROO=wxz{asV?ifdo^G?oSxZThui9?rI@`Y;t&Q~&`!zK`A4wo*^@N&xl_bbq9M{_7n?9h2GB{(5@kE9z!)NVJra?;4>P=&Q0NY#=^+C@ybvKJ;B@i5_ugymgdc;*$?y^cr_pl{ zL#%8aHgapd^_tIGIJ%MJmo0m8w~!9-smU}LWQR7G)trV>sl>251UFs zoJ^(;e?Np99UcBSV>tl@oP>&%^Y}*Ihfu|qZV9#}E|d{qT)txMEIJXed0}5+Q;0qK z9jNeofvI2EmKM^=YGzKCm;hhyary|fyDsso73Vfn)5E;IQD}ubAa$TNlv@>SVF#~} zrC<~|3m|}~D?pW7$0yA@m@3}_2daz)EKkZrysB*!@gwWyM(nDOrEb;sc~$`+eTBp& z95Nw*0YdBRwA3QOnS>AK`zY{><1~gA`HiNkLB5Z!oNZ9tb54Pkd>*9mP*CIlk@wzl zb{^IJ|D)%*b?@$KuXgwDO0sp=O=qV^AOr!DE}!d%opD0)F;bpD@pCwM!YO9 zYzhh0aj#e0aAt!RijQx zf&EK+QDC2PtYtiDG}?Tu>#(m!h9f$8`tmv_gU)h88{o87OUxJ(`%)`E+#Y-F~Msu72F(O>SZ-m$sbHjWWy_~XY2 zWf)+-h_C_-usy*517-)9Ro<}5FIW&LFog%o_M|}GA)cJWEU?&7Or_0z*H=MSrO!6;ZImQT zZ}gXRQ@;(Ko@sc3q-bVqt|zScML01`p?(F;)Q)SW{to(;X6lWcqUD;Yzt=jAi>8HU zs$NQ(seS@Iu-NZuk%(rhUUJP;mJyBgDbU<_6{S+GDjG`BgHl~GT4LZb|wS$NcwY->&rz=o0Cz~HReX7F&7j~r3qtc zf2Ce~w|ZgVf2~SWV9b*ILP_335+H;FoAS>TKM!9p6bAWLIGFyu*1hn14yRIvUr4SQ5Hv@Yi0GK2;b*gS3-r zkm@+xz&l?V7@5i-f!qie5jiZ*Ro1*srY(BRi`4g7(|@g||2+UC1N~Kg$<>}f!NQZN zh5IK{gyg%gYILTY?-Vo4s)W>(VWf0yZ@UEYbe#?Ev;&jrR@&D>w-N(Z-BCOJFDG+N z$wky=nyi^xXdt&|i`+sg*JKqIC(_@jduWNb%vD759(A3?{)40f1{HUu!zyJ^X~>3h zpRuT1&KL`vnDmdCIOz4niCL;lpRODjRQDpsC{m)p(#Uw0B`A%IdU_F2<2BCXh46Mz zF%AlnigN7c3X(=3g`zS8>p3bwx}(z|akXhAkIz6bGw_zbwEDd4IoDZKnaj1A>xC9! zJ=11>7b#8O^kAB9_5MzDb|7URm|mq?52~*#X^g7mpfbI3C1u6PTuIRiE^7iF%zE!& z__+2{r-4nAHzk9=qjczx`Bj=-ddqdc^g`U5JOwkIQs^zsbieeX1&PW;wzWjR@Yxe| zTUqUFFX^t{$8_%!)|Zr5jjm>Y_3Wj5)pQqI8Ge5({K7=M!xrgx*?OQfO{q+%foSgyzvlx0HE zKc#5&nBGFsg&xx)8B@@zY1Dmn*{p{ZXei)k6tM6%vL}Og@YjxQ&jDA8D(Mn2`)EpM zuWy_ABgEa5#GK}Y{CO7JKoxpMVPk|PA1UM5flhaC`FjTfj~I#y6RTuvc8p0d7`;}Z z`IM244-s!CQ8IX|{nbZsRA~2v^koenrJqI7S!vgkIMedc^gx5`bK5_o=~H~yC`BRA z>JJK+PCh{$X_;5Q?+ffK7T&9-*o;+49}#e=;SU+>&BkY9W-OkgaZ>0&mh}pC)7AK_ zV3*wc2ZVp+<0^1^7JLErtO&a7@L_MC5(DTYz%#qCj*~JivZlGE=^8M=jPK3 z%Yh}0aZGNnX1>w7$kocLnweA50J4G~J_Ghtl9=+kqQO)lW z@%+_jM6!GJ>Gu&iJa;i3O_#LLkk+y-S5NECxDpP?k*?_o(pKq>8dCB^{taQADL{%R zO&`uCbLxC{&JxQBa`-~H`;hSYyjt%K6t^G-Q!~{@;YUU!{qQtXyhEk4)_c8DieGT~ z({vhr_=p7wnTB$40UuX|5?#9<^tzpK)YI>ap8Umm+f1(aoc_1IwHpn;NoEt9r%8WM z&LuF?A1a1|1bv})ZEHi8a8nCnOMDiXC58lF5POhN#*`bCsy$LLolLvQq%FCAlj_lE zaAub&H>zkArUT!ZP*v|Rz}lFlR*LjT2B_)JZ-6S6=;&#YSW6$JH2bQfCrIkPgtBqz z`h2$Ua$@crKAKVW7wIOd2d+5U;=ezZn%U5meGv{vIvdrK7PqvtP%C4I2!jP{%)Nwg{ryE?15c4Y=&2Fh~a zauWs`*8!ICi2@dGspPPX|Cz%gZ|bTmJx7)MnaBjN`QCU6JNDE0ty-aS%iPiIfv-A_ zESrw+PG9w4A?FcSZP&ZjMMYlOz%Op(DzEzR63RYI?M9k=DzZwm(lbQ3hMyKy2l4}c zbDG%SHurF9YY{%)!mV>xSlFAp%EFnsYb>0eyTQV-xf?CqCm%DfpvC*_+eU2Ca5D2% zp5m<|v5n+KxKaBv9hgilDe1j|YT(CAg=2H?0lK+g@yA6gh#M{!;wUkbNd#RwMH^}3 z)^MPgV9eKWtggM!Lk9$&=9xt6|OK3F-x;fSa3 z$&y5}2YJmRe1*1$<#51Q?6!&LZ$A>e#f{!S={h!deSXio1ONJj_t{zmr%(0iod z_2)~N>yUEQn2qOO3vNk;3Z3_Dd0Z?XQ;WyVzI-}!Ws8oL`(YUw(bFHK8|di|5zyF- zj)RV`K8E@h-91-oi=U(Kl_=?5M! z^brEloY(ttr#XFF1kYI>uf!p~68$&reSy_CP{Spcgob4+2hAu_N#vjV!ntjs~tMh;YVa=L`P~Qt0`AAt>`yJLilC`WpJ!eW;Y; zH(YFAoZd7QmA)CHKfm;SJRc9en*nF$cHYClFnS%$zwi14b!MOJ+v@zA<>m6a7cAT# z&bJpjormj(&=~~O>hB-hm3uqb;9}sXC>4|T=3YI&%jj~BpK6&DTiHn}=(1CHP5_4c zhbHL_i;@e5W;A2hF6fT+cAzsnl|q<9y?1fttW~Sb zeT&-aZW`zP26wP+8%IwDQ2k?PfD-HvG>t38RU+P*Rf@Ykj}u0a3lcYaY?e;sIFl%D zLmu~O#oYk_b6fJb&nWKqiaRln(z?jEJ@}>v-%>EO@NEUf4S_G}wX*Of1=WRrQ(!)19RTdb5wl=W#PfHs>|6K- z5u1L4G~aFyEEq`fK*55;Wr|%^^+11vVpr_92fhkEY)`d_M}3EMMmO)G+y%XH(y73l zLvr!TV-$p#@A6n$Tlu|$fm&+i*twN8|d3+ zH1hP3C51S!9CL)*lE9_}0V|d$G~K#H{or%$A5o@tyI1U}ExI`?^E~Jzz-g%sm?I9u zh#wU@Xh+~a-a5vBI|7SP);0EKv!AyJ7MnFGr@IUvN%R`(d9nCL;@b4+OAPgXrv8fu zLZfEI28Z9tRPT)}O-7oR&P1HpKmL4UnwR>47K@@n6c+W-&kVZmIFL~PWD7Q(jCb21 zGE;6h#mQnGh!R)amqS7If49^7xswz9SB>C$(e;8CAJHP`-d_WiSwz#)Y;yyb*xPO; zO}HG;sxNDfmTOooK^Ntc{*!Ci!LuUvh@<~Wtcs7+qPNq&mk0;dimeyXmJ^5Q z4yCJ(V$O4_s0YjWx(y)BQtllpO~9rPdF*l#m%flBBY>`#qC@vX^~Dr#9s;w$M9Z%f z#J!&aB6i(WpvG=@gLe-ROY~u->yTrxkvV)5{3jq4da2J<8ndDf^<8z_p?pY?&Kv!q zdh0dZ&udtwaO)KWb)IZsSc7)cAdsRliqy!E0)O`AS@&a&-v&#)qK`wGCq9(c}9F4Xk9Av zC3LBtGmCoxDxX_Bq<0w-9Bg98TDu99-}dx0l9M`5O-!S`UI~{$iPzk4NdDbCQy@5I zLJ+C^NVU2P876JLg?;0q`Aufo7U4Rq&A-1iKFGRsC4Qy!x=OxM{12DL2YHgG||MMa~w)^6s4-F+#0wPee(PCCBc~heZ)P{gU0zpV1fCyAS zfvO`=>15D#eoFbJ2fy;**9v@flg*b0g}%!cJ-Lt3qpr(bdaxY$4H=6u@^T*wiVW>` z|8=h@;?o21eFfbqO?nc~E$p-rB)w0=V>rS(taw36VUfrx6Wi0?VCD2aW!%VuR&2p= zgB^X3obxB}r}s$`%qRQ_N_nEiqn5U((iw<$;c}w2Q1tAy z8E8#k7xiu5$Ci@kZ9j}U&(wW*M2`AUsQ(d_) zJFB=Rs~BFUW$S%RdowsHCt0j6^1TQcG#8RfeB9j|xL)PBbYGC97*v~dR-3sPEHEsgpz`dM&TbHX*m+xL z{2mk(bQWZAiZonH&-_Ky{c5$z?JwE!7E+;fH9(r7k>UPP4R=)#6g9EOOw)(9e^BQ-Ya zOWpI_tsbgKF(?kRxpmz{4 zX-8Oehnt~~?@OqEC0xXm4=xe~0T&fLgNv$#A+lyK!760kUg`@C!i+y}pxm&ZQ2{=; z$`pa#!rZD!Rd)`=`(A5p7+C!StKL$gBCWy)R^PxX8mOB2{b`LMkGvW03-hnaScLDu z6IJS>_|Ol6XmPy5qM8@Sd;bfTmEr|mh>vZ(@PEA=!ONPLL#qn%3V5v|f;A66xi85f zu`#sd{OYmvr%wazXzsmmow=9c&C2J2N-un+@a(G@%(Yn}Z07i|N7;%G5d8=+(9xp= zc3vsF?*UKxw5WX{UTO38okaS-QTvk1C*fE0FE9c{5WntJBp0G&IWV@rM_}=1lfCJ$ zi8e#C>Ax7;d6_KQQg_ELiY>X{QseZ*qO)nnK4nLRmVZ6@UuXFCv%=T{S>)|eoz=t< zV=_O&jw$1NnzxT5-|Llce(gbGbHS@!x}LYlox#li6i+uOIM4r($vgc8FI-`*&mW$Z zTXs*~cC@ZhP+dSBSp!1jR9Cp(;Pjx_U1R*|*k6t&%p+ht&DUDo?B z4D~8iH20cA5enO@nz88|7i-SfV8+}qz6XeL;ikoK*Ehu6SQd9qkTYX3lX~W6(3RA% z&{2^#rp2?3hq$tY;Zf)AH)%f=94@WlhQeSQm2T6=PN>xquhT`ZHQg{p~#wF;76E`6Qi-P)APSoaIEbL$u|+al!h2DX6=*b?L`WIA> zRZ4xaSk7DY#TiR;YD{X5D$94hJ>H1kLaYk)t~7XKiduG9Lnc@Cr6KC939L$&ANLReX{cn@Xhqc+9lXv*htzqy}$b3 z$AtE@VV<*cRJ{`m*msD`pX8>~viHmszONUaO8&ofK9uLrxQim-E^_+_chOrs5CBYB z3g9on7o|R#GfBRvx#f7*N+>17Sf@&Cg=XYFSu2s|5c}tqxwZVeuJ}L)si+w8wK+g@ zh{+HVZxQEz<_6YB{1x4!yIXq?0F_s%gziJKH+jWebkct}BA6R{ieIv}(5Jv_e7_ae z5K3$D9O+1=G+LeN$$_2e_-Nce0a4eD;60-scUuFy3HpnfSZlPla0F$Ia`@XGp4y^S z@9;Dy9#iXv;tdO1_|%{14iB+Kw&$F?Fr{N^3ocq+m?fMZt(=Q{=j|w>>nE z;RQ_a+I&1vjh%LL*_Vtqw6U>q!#yn_2s2bFI&=AqZfrezI(_s;9~%NkBG00FYFEcd zq0+mhF})qkd?s33(52BEyXT*w9*=_GEoa1jdTnQAVe0Z&44Nfu3lyHTq0=_P!Hx>cx?j9A41Z(h|cG0U|AQf0`lvQaY^-6eU)2TbZt6J9owbX z;n5a1;&IWQ5p;433;%5tgt5IMI|^n&le2(8{g6kdXzg|`CRQE)fK{fWtNwWk{qrX4 zAN(<&3#7WV?t=TUCyfW9w5+L)jI86psCQg*ddpG$CwfxrIM3tgVCz^lT;c~Q6C+?qE;>Lx0 z5HUSkJC}n2^VSTlSx9FpZN{?K$js(ZOl(#AyL~%eKoIRwBfjG!+gQRz^d)K zKjO3JD2#x5E^=G8if5~Owmhxux`Yx~LJd^(6o#>mq@ld33QRBgtF3n*3ccLq^rEze z5qe4hrjG&ft%PBve$zDvnzuum&gx_v{{P| zW^wwKJF6=mi1v)ihexaMWK|@B(cJ+qnBzK|bHyD^s*~{?eVv^Qnan}9#NMPwkYy@j zXCU1(&81c&{VwdUq-8ZDi9=v{jKzj`YkM=(#O($y4Yz&w%25b zWSDE@Sp|2-$NQ7A<4`|@met#pTW^Tk<2-T=RE8&nc?`16-qvnl7eU_gL?Wc0)GxgU zG_?^s`T)r_P)tx%WOQxzOMyOgwX*=JjUAM_gM`sE2Wh$l63^Dw+W1H}z@JzBno zVfQPTwkN_4FF+}yc`~?ZqjW+u>HM&q-r3;g4LcXj8lb7)Wou~~x?`F3af_*At` zmtu*^c;0lWrR@$F3vBza zKbl0p1}E<@oVfTG3)O7+!=ceY&2oVXp1>6Ehi!?s*PMSXyig4q=&ySLgU>%Fk8c>IqcdRlk`G%JQlVm;S1x|4(rBP#(@d;tna|fnH=t zNMY_sN(Y6_2uZ>X#8QV1DNkZF|n^ ztwRZwwckKhXyj|6W8%m%Rot_OhHnPzdMl?Wc-s}F5@C3z2paeQEL74RIRfpfS5g4< zYAmo^{L=ok4lI?uu2eSLwW%%DZLb4$Vv-Fu{N(cOj{n3mPeA5ejlM0Obvy}aMFI$7f++%5~Mj9Ot6cap_Y2=YS zNBuTrm^sdo&PeeWbD0%$AmCI{N_@9cV#GGnJJv%|7ei_Rp=+5Hg7w>+q>R?q@j>=A zusmg?;$}V=*&>RNc|X#~1TIEbJ&n5%%ldXh8Jj<#@ouvs(3yGnVyz)IqbZ!@ajb&8 z*^m==o0fNCoVBRfJRH?bDDVV50z#XVmsnQGRMO_?KaxLhz2o#;CmOOSt6mN9= zV;0N4vBEWZ@O&M;Fm0f_z3`iQa$K3tbdatUz-rav; z%R?B#EH1~04xV4u-rszHwK3*f_yF6VwN86~_W`z{yz^7 z4HjRV8Z-hzbYa}31nT|d#{VUa&rF1Pt9f(JDLx>& zGfCk)3F(m(EPPdC%sChU@Qqnshg#~)+kGbmPJYeinRp;RzL|Z9t&Hp~l}EVTcakQU z#IB7Y(6~-03%-+Tn>W;g?(z{iGcpy;OsjCLoP&V(&I{Qf)y*A~~Kx;=xoMCT^ z942YfDLP_;Vl0jPCFzE}CW4x)PTF(b^e4@@D`JLYUQ6pSmG5qoG#%hCtmH9CJiXLs zDy+TM-6na_&BE$~N5qY0_ptQskc?|uTBXgxc@p%g_RY4MW#36R5S4uyZZ2}2q?K1B z`=sVmR0=-AUo$vP3YCWWQ1C5rq2vjc`BD1ls&l)sj`NI<=ziRL#T&Y-=hqx1Mv{3s zjMGWp#YD8<8iQE=!Por0xe+MoWuQ6?a)Zr0AEKHf!I~|e^TRA>0yTGf=o)%HO4U5A zmSquMqt?bLJBKDJjhQb)ZQC2}xsdx$js|mGDB+v|V(tqyjA`RC_0`p4C2GlO&@W{WW6GXj_HJO zS#P?o8MP~YX-L7^H0uRsWI~P1HzMm`{2ph16=|OU_Y~$IQLhnZj>CuCya-%b&DD`2 zX4}eNi)Z?nJS2pO~B2xnqmEC2mL@%UW@AG!$Kn%@q1r(0I=Wn4?h8w+_AOk^la6>h~>-Ee~ zdo6t(U#+(EFrFkdtC*#s^fE+KT07YA?glGEaWk!utS3e8g|meg%2R0SS*!+ggjniFk%f&9^|p%`m@o_Wwcjk*%Ect)YTCe7uN1L zwMo2$5{K}E2U)23Q}5-le-IR==JyYY=fADFz+R@~`7aA{duh!fjLc+GRd0>P(MHNL z8e~<_FfublG6o?;v47=G++dUQW!HW2JcBc!ELjiC2sa1<2RkcsBS$?pwDyf1bl4(3+& zUG$_%t3}-{oQGR!wGF*b(1&cp?;hG5diHL_ie7@CV~YcdhauV)vVb`opqu=T%(iIk z47WoiCo6ZqJ{mb5t#sj9{e~i^c4WdwcDZ}Kv_i1K$WB1^D`dwa3N|b%(TU`_*>IQ+ z(>;K~JSDx;&8~QUr=#1g@R_otc-U!_^}(fO<-3E#hLi-t`#u)j-uj0Y_pyoK!X_$7 z{}QN&xWa!BrlNO`G^f}S(p<~{)7+R1O?J1=tV*EOz$OuPG5c8?YjJcoFtcjPa3)$S zbI9cKu4}7ODWZd9r(PHCD|+d#%h@VaCkYGdw!j&ke=_C*?GKa#TB7K#2x$q!OnM&^ zJ&9pvV?g6_$rv!WvH>7`ONM?>Vz7&uFs6V~9&Hl4MFOgw9~ZYsjQN=SUG4r`Z@0td zwjX1IG%%-!0aUBMDIN$gN~f9HLK_3KxZX!BMLwSd-Ffj6)19$vy4f7&{trH^zD(?n zOnP*K86$lMWtgMJM)&kEOnaZOaz&-0YZ(qWMX*lAy-D0}%^yleFV^_m0et_6(Ma!I zWaREax|0;G+OGQnczym*G*XO69~s5FwlkTSnZl&^k0f>zg`1Xqd0+8`vIT>5|NOq0 zm0+6&bqJ2INZVhD~(!57l!U!-h?E7bA?>@*SYw?xKuUk#zk(W@TWH z%A}q|4DnNEWcH}~y#_oyB=iWe!I@GaAMbX3x{`|YoYE~7NsiQDZ!;Ac!WRCJe#k)o}=^+w)EF1X6?zRgaj|s>!}(DL&WGe zTKX-G%igJG=0-32w*=dM!=KvB?wbMS(Y2Y6@V0epZRTx+RP}EJ%J4qDPM!Rz@cLnY z{Re_=@8wTz<|#K@0!F)~zsg@<9$sJIug~Lk+jIE?1fQXvhty`Sw=YNUR3)#{^QohJ z7s2Xxc=+w>yS0syw;bHxSeyAfJ*`t*bcdij8a=Ms%o=}QK2OEb1F6pWq2I4_4)O+Y zyZM;dZ`s-3)S@=V=~f2)=Jkn(a3Z=9D_(#-% zY$egE+qJ<;c3<#)`tVmwGI?EhmEUd#R?;d3Q}OcrN%S!4|CH5lSQ~PDwQAGpX|PGA zd|NeziL!1?Gi3)_>m1&xI}c5t$g9U0Te3w}CM?P?2?;OvqpnYTUAh`+oSX{nYUHA# z*JDIiHzmEgCFPd^itXHY={)c^Fsou7;HrjoP+=fTXTuu9`nT(2NmRK?bHUt`I5@rP z{ygo{pWeGc+Erp#FAtHm zY6t&l;k}lo@XA0Y&}7y0qyH(C-Kj1rtBt?aO1ZExMWE?W6o=$vNqJ-7?r8IWoOGrt zULM1gc2uMCx6Yz(ekRX437v*)d{raymwy&)@~-L4HnXs{w3n_`@V&WtJPFr+J`XCw zsViC#-2cy$G!i>q=&za{s?0J2|1-4EZ_eLzfc9kVYKtZ27sy z?`hidQTD%5VYG?!rS4EzZ+t}{jH9RH(X9~u)gs#054xLli}fSMDJ1apg~r!NmoGFl z9+b}4B)Ik}(tUktx`Rn~hOPBBH?+nuCr^u47S~ft&ae7K`r)`!5*Cq%O;g9NNE*+L}B4(p-Nbzrd#Jp{@G#;f;E3*jBxpYbVt+tG1aT;asaub!d;X zXl;|j$A~Eer=@X`*mC6rYk%**z|Ab~mYciIV?@SNJ6`VHY~$zQlzpqg-}_I}nbi<2 z?I%Y1XVrRNm=WCC5DHv&!M&R{Wii?!D%stzT>Kxz*3&)q_bc}ItM>P6{GERy953f* zIn5a`I={_m&ezI|*GS(6q`O`ty^=P(#oEdm=@mCKlb=?bIZoj^Y#9>n=uRJfxhC6# z!po!km)2(H^s@ia57CEb`Sbns{Bk`{9eqllQvO!!g6Z1Kn-sV9=&kzx2IBZ`bNZX| zIbDVoNnvyP#NOw0$-HdL#k!IkrsdL{ye|LVx%=wak#tFBurcp9_Y3y9jP9UO?QoA} z-MBG|wI$T{T3x2-gPQnQupPa&!joui;;`PEC!a@8}-NP_2FiKYcPeZ%ST*eIEiRZ|njoBSUXPGw)$CuSGbKk9UH2=$xr zF*5cS&I*I5LzS3X%LrTTYVQu}V4p!RR(q?|Vvs`gPl*m%g2jA!o8heBdGP4yKNOer ze&uMCgn$DR?OnM$kwT^nuFlx-1i9f zO7EA%jg();Ip$Y|;}~aBE5}J>A$RUMeMUKX{(%|;jYL-Kjo49BYGBM>pRRxg$A|ty zhLEULd^W4q%!RfbSRJ>-f^p^2l<0y8#Ju!a?E$L5M)F?{9S@dJnz{vz9 z>NVcL4v!tn;SJn#AMj``;t;cUQ)r2fFAHW7^TjYuD9Rom+B2CkpYioDh4y-vy|#zo zpC?H%m48CqJNff2e$sr+ctn@yFc%FYaD7G`xKxMvq^NT#ZC%=X8odlh>D>+l(I)mG z>5FMxu)kn7=6c`bQ^gO-lpt(Wo&^mc?9-k}_O8BSbZ;Dvd$gKGp!oy1V(*5aYv~C@ zr7iwcysl{5M*!KUmf^-RZ{&ppO11On(8fqJU9B9W{28xIhhiWwO#(Zv6YFrJ(rxI_ z%=PLEW>@XxVk)l~hmqG+dcRfcqW)=0vz|1PR?kL7sd<`qWjagVuB^=-byZ^SVyy+= z%7*<)d;NI+T1!u~X8lf;)Y6lR7g+w2A$Xey0|t}yN@4;I&@(As9NC&OGh~Yo9G3TM zMn>MDfqSjZECd7#+rbF1`laH;LjLZ4S6{%(A)UGL$E>%{ z?x+5+Zf^W>R{Q$7BlK{UR>|CTomhB?mdioUzt=LxZu_P`?u=2T3CGpwz2Nt&qWzT) z6Cb8Z2j}y**83S9yKu2ZNO~R*RL1|(k)n#;ha<(zkhy5(CA8yfYDW<6>tJ)qnPNOB z+SBO$ngk;a=cKw&X6KAm&ITT;%B$u(rIrqX>G4_}i#LAGSmVn9u*3YE(GO&^b4Ev& zmIyzh_}bUFG0!=A6dH&Ud}5&2oBijb_p&ocFP z7iXF5ADNU%pP!3qof}8DPFEjnbPgl3bmk;y&qcY zUXzOOY-#z>veEs6&n(wHwK%hs+|~E1;moqz-hv>a)*Xi=mk5HzFHR%<%{I=KoL3&c z(s^Yu;7SanbZV)7t(aeF6zv(iS(#^zvVf_nuAp<+Dr5H^K^IaOJbhi$ouHb#_^ej-hO) z^?`DD(I}EGI=j^1hzDXY>9d)L6I65qEfgmcx(mBFPP&g&CS!nvlyotFy98&DX+LBzZfpga~!U}@Ie9uvm5w6YlJnp;aleSOUoW%XAxpTL#5*&^P3E@3p zTP49^7QL;AK8MsDOWiwmaqN`G9#_Pw^$s7bq2@2)Heo?T3VmWjmvNrOR^l$>vZT* z22|%4E91k<^Et*j_ad3TMAl_lBFFdHS^W(7T_mUfBXkgkDZ}_}+`CuSNrH9dc)wHn z9iwkxWeQ&eYkvOl8u|%AtzByHJEd8fZnv(i2N6q#6#Z9LCbMg~OojqlsP)}o!4?cb z@@dys>zM+>9v*^}S7Sy()$eBI?G?th=AR`ndfxBdW!@Lly-V}1j5F@iPV}UnhW6^i z5PF3P zYIN0%SV%dnux0gVzEv)NP+~JJWQI5OnX4#b;Zi=t-LZwo5JreT4qipyUC(cAL9eHCE&sFseKGJDPxGQM7v4<-`2ka;l(a#perCt z4z2oZr90A(yDj4r!%3s#mVqjb4ZVRxNp-drv}>59WVhLStDIwdk3^_XC5kY;u9+nV>bCXF#^%I@U@&ZdC)%A}WS!uB@CZFGf+;oww1!I#l|>KR zz1;H*slcl-cPOFFD~QJ(<#vd~XvVi_tG}A8>WAJl5&GF7=&|wK0}+4pF3?$Rw5e>c z@o^+%>-cyNQUaG_e2zMPSfXvMnDH3C%C>vP9m0IUz)~3#LlZ5nJ?XN`K!YsC1iLZg zm4yAf48x39JL4EgM7bE#F-l?PUxu=`?R-Rx*A5x&V=H^(BLd@Ku0JT31_(H=x}Gs% zlK(aEFK^!8}&eEJ+t-@bmGf) z9x|g5RnD=h!k@4GUBBNcbA`CWaqM2ntO;me`ZL<3e{pC2Tv+qMUjjos?a$BDbBKSI zo+lRm%A#%`UwCfz@VxBd`Ffb*)74qbHF}s>xYh$*QsGTEN(gkrgFx4|33L~Oz^;%? zEL`tzFHz9(>wTRCT>;|l#KNmR_&*9V_cMqU=l=s9xA1Jm zRu`T_z`Rq5)*~1H|3UjZj-2^NsE-Xn{%A;Iad4 zcrs=30FI*BJKLm=XXQA3o*pan_b0g0$F}r6IOt+*yJ+fwD87AsAe!O5EU}0?>0env z%9liQu}^jgax;ezPnVCwgFFRFi>qhgF${;kr6=DLoL&KEs>2A=_Hqa?dYFB(jj z*3L{()b4HHL0Mn)Ib6eKAU^~?fsy!LOmlhct-UwV7*JE51*Wi=m#5g??Vf)T7rIn; zJ^iYhp36_PcQTlnq%^)(5FdhzIC^51E*@x1OE%%YDfCwOrqEjeF8zh!c%R1kT@7%j zBjGp5qcq$B;0Tn_ts6xh^nI}#iPM*R=i3c!T`M*W&3=}a>)ao6M$wB*JffAJE_}xW z@x1imj1pQPo|ipapMA$#?OA_uuKgZtrFbqfvZ9xvZ8p zi}zJ}AF_Ax*tErCTH%i~=hA&b2Wft-pcemz*8dWeh7`ZoT8SvLBk@#2^&Zqu!U(!; zlg>jWCKro6lRx+6$6Ck!X>8rj(@!*?LPz*ZIkm$3IsA0^{cwJg+iv?je?X1;#U0~V z-}GLr>b8BrJ{G7qMiRt+@j!D~InQ;L=XsV#@xAL6(O<~A`k@pppNS0)MZNb+xjmxy zB5P*<1Y6V2pGS_7xaqOjL*!LU0=d(a-UK^0BO(=pt+O4R_dG=4b83*w{fy64qu&tu zQ{iIU9>KTHx9a#$TGvU>SDwt76h5GCpgV@wHMWl=R-?9F+8}#Ng^Mfa(O0^uJ+72Tto2bn+s3AtPL@(p6yzx-5MAKZWk^10 zSqIstH<8h%_6V+FqvMC9Z>A3uusBU$mtLr+q>)}g$n7?4p{36^>^a!j?w}l*M>%!` zZ(fFnBs!KR{7iW0s}I!c)1CBUN*Jnjc4M$<_i$Wqq|dT)!e|xNr>!v7^`8pmJdJXG zu5wTidIFc+u!{9k(1wCVv0Bazbc*TC!Yys^8x?HDq=yavKoelmHgvg_7;o~oX);6I zS0(9l3@W=?P^C{GgxO~T4!qN4uwg$Yvb2sX_7BzQ2GadP@K#Zuf`imMEmM`p!=l>A(llmk($?GqAD>;7Lxga0!3y)*g?z|n_SKmF$|G%i zIYy5vh8eDtUZh^E+LlGW)1`m;e8EZYsMnM9zl4Km&nb+2cbY!;IjXLu&lNVzb$a)H z7FG8s^PL`|8Xi@0p1w+oRB(*;nrLbp0&sgiG#clu0PaEjpGE7Kugs78Uy<^cC0Nq$ z0t&c`_gr4Whw+4P91`t03oDB9Bi}Sv^9EPbfoNXI-Mlye2CW+W?aGx{Hp^qH8N6Hp zl~Ci#F!#@2rWf_~sv{kKR2M481o$`Ky=cqkGont`mdy`~(C1fMs?m95TZC6*J>Or3 z+dG!yR#8iEtEj!>cCu5zGdWw}cJf5Wt)~S@Aq58$5RmSd>k)e(ZgW(P%9rg+pKSbPlg2 z)7eF+^>cqq6B9oiAkEO+f2qlw9?GW<0IPvMrmIm(8NaqM3ok3Lyx3xi*}$@F^UeLE zfs zD+ZpXKDt^OWap#c&+g3GE-Z+POCi&Lff>_-65Un8xEODZeT*Q zvDuxhb*9t6irvRxrUN_^Ve12v@6rLTn%|>Rxv-;&#pOtVG(Auk0Xr2-j1l?i{^V%ARYCXLFHyw%SYoW^@E(y)`Zv-Z+j z_Wa)DJL#j1uv>*D~#hVf+WzT{*Z~HxGZ~H8iDdS&)910Tl$Y;WRG$gbLk6LadhY|DDAIJogPkVh>Db*K0-ni6E+(|KzSD&C*LD(L5lr3|Aj5(I2jNEsCx!d5-p0su`e5**B7^cV zvw_v$OwZv%EdUXG6ncnF0?#HZ3r~FIy&*}j7H<=wOU$wA3j-q$YI3{xQg!i zS^m_!$8k}78%em8-hI@L{Z7Vgf}Uq?;OmZ4)yOMYA9D})e;nRK8L#5Euc7MwLw?(C zBtw1X&0M~^=UMi6(9LSY)wDrOgbmFf9qIsQ>F=ykT={uvy8pMo|4(uEr^+upW_VsH zR6T#npGJY*>f7(=b^ZI-{eJ#>-Q}y#jNJictw$~M7+dsIqp6Yp3E7##@ymt#&C5oWM8ug zw;(=fZw;;|o^?$H>w8&z)dbDEG4`6y>Y3t&FKJCO^d7OSh*cLr;CCyDU z<(8RzPK?;SjNQj=GpWC4fP1lS^QfC*63LZJF=<^ccHOWxCbp&t-D*0s^a9JuS+2#& zC>gpHX<1~IS}l|f~Vmh?kfx^UYyygNOmAGX+#6XynWBhR`Cm)o!Hwl`x_)u^qr#Mnkc6GuwpElVoU} z6h5-3?enX(z~fGC=yMUoqL<=C(>@gpLv@H>3_G2c#t&v)2OCw!816US%V4e_6WbZuh|xwm zi}8=#9E>CAa=r4)jy1#EBs$IdS*$p} zbT{3(Fqy3e42+a32_r9bVkwJ{H*i z6nB>-zi`>|UTk7+y0jS7f-el}ckrlffz~7UAhi8-X*4i+*>l-guxs#PxT`E7xaI@F zOA(E#EZ2`6DAIXp&h2809HP7RG21*V-+|=YH<}TwHCuD6wy}_`WN+r18hd54GHzAI zrH5K`Y^1)ikRO{eo_>+#76^=% zLSJbD-rP!zteE>*-sJL~M7G2brisTgM3>r@fnDZ?V@BP!j2|;n27^0%b5ZqBWJYA@ zzyl@f3j=umEsQbZM%mQLs=XP3f!T>4Xi-B{`0#mln)6TM(g#)_q-ygmuv?p7YY}zM znce>Q&ep3qGSeS{)eKebmAzk}j%wGY zE)EaV*~2=2m^y!I$0Nt<9H#g8kGO5m|K08SBhN=TM0oxMaukNC5DAOATRGR@V0`wA z_&uVlxLxiz*%%$MBa=6~zMs+Vly#^461|h5Oz8ehVO zqBe*)bTB?6R4$%F}MHA{!?*l~#7qHPE8 zM~Z;Ml9=Ugm)iEWg3}tqbNX{IJZ#3=!&0V^xmU?OJE+0wuhfBt)`9)?GY|9ZKu=qe zUnq%)eS$MW3&R>(`v+xm_b}${*9);!=|jAemBaSNEO~=}74-MjP7XVpxr-uKbPmd= z6np~-OhJZ?r^E3}%G2-_^OhkKPA72}xmtJtKkiH@0Cc{R!l0B?-VT(sl8#%_*xiC; zO>y@IuDuj0`n4Kt!+M~FM%Yb*JH-dV*8ZJnFrtP$iW>g=4+;a3Y8FCfrLDx z)^o*~NvWvbzlPShKae`jfnfvt)%^nogPWk=&<1ob z+{;cW=b=VtMuGC9v%zlh{yBNoS6!V6%S(gA4I+z))XL$_akR=@3FUA=uR{iV@T60! zM^-*Vsq!+k!Thlxxy~Z3DtU8QUX?*I1SE3h@WfKxa?+5K)~JF%v2}s(z96wfo}9+hJEs+;>pZ`$j`?#GB?`fl5vLR?!Oi5H!Qhn*d{i^sIf% zaY9}+<+QvU_n}iN=T)V0aM;srSzkOkV68iRSi{TIRJwnAe>R_4yK=u~!I7DHj~U<4 z-msY_2KxRT_({jCYWLa$HMq~1;J$}TrmnY{?iMNwz=|gruGX}>0JLN42R8XiE1knb zp}EIo$T!c2Xvl_<1jMknQ$tIJ8%||MW-WutSlle@_)-UCu9;-9AT-)wNeq_PYP!oR z(}WimiCORZowp2Gi7CqGC&5bzXd~Ll&L)h1^}Ybge4e+lourR2LUXJp>2LKG@S-W> zbj>S?xoFFe(NP!`-Z|T=M&BpRl;JKLLSQC?*XT3p9mGtSWv0_+cx7dlb0K4p_*gHP zQKR=E>)3&2#fB|<(;WbYk4ZTps1LsyQsP!wple1{qAp!cG; zd?~8A9vaVkGPzq4{X4v2+U8wz4a9{Ntr3D#kKo9|rI=xpow@31xrAhxOH*>wVXOPx zbdtN)!KvQijb?7SP!mpWdo6BGV7w+%{hNBKzTh4m#cw@b`h#*# zL6H7XF%)(kFYbp!#n=pq=DWMY;q&$SY_`L6EjXJ;H8~<(2~KmGrc2g)Hzj789_D{K zKNeR#4vcP!l%3{eljKaOs&^QLY|K)t^7KarsOvK5JTHt@tss*0QTmv9jVhQkBe-yj zrj(hJwV-n#FKe~{bkcSjjg9#C>THcswsM)i9(BFz0q`vM-U_AZ)VR^KpL?>{h)vwm$y)1EH$ zS^8t39l=wIxQFfba&KACIYS{=0Md|are9atj^<|OR7YQ?vgNr{)|=^XrLEqqxsMrO zu|Z&dE!@eBkyOoXXgN8gKOrMCf(W*5=DIc?fRVU*@N<?b8>fa%##J3_Ooa`iS8`SosN&d&3T!Q}=aG?+BX2VxVpOf?4sD;3f^kV2JS zA2rnElIvyAM<^mxeWa?EXZtW3eAN5L?){eff(n_ARwmtvr2#La_*rzcRn7YD{d#{7 z`kArKZD{rxpN9I3YpCM8Zi>QWpMExT!3>kHBpRNpE(&tp#L?bj_;Xdr7X|RT8;#RhV`e5}3;v-b2}t zFPrFvNGd=DqmWJ>xERKHB&|Y6Uo2-vit!ih!7?y zdAdQCX(H+ct@Sc|LB|8#%_EDlP5)|H*?y@Ii(1KR=KZ zDq4LhIrVd__Wy#9_&zi@}iF&d2@N$A))T&&s&Bse_LraaKyO^c5 zWY^mg8(LGeBaE>kZN6J^+SlGYoDqAPKk|H79ku*?SVhJIeamfM`2unU+gHV*u*(JS z5sjUmtxe!z+8UGjlI5^?jchu7uVgNRR}YMLHl4Xt@xlY`+z2&`~D)- zZFrN3GqYCP^-lU=B3LP^S~O_Q85l}y?S^{;V}fm@2Wl-6HSDY~NN%N1SBYl8*^J{X z2axOe3G0ABZ(7778d&Tj3?F3sfrAl@;<~#(#2mqnpH5Yk6{SP%ws4)mAmAz&pt&7C zS@hG^C%5CrN}#mwLCCe1qMPY7f9Fr84}5G5Y~*_5{$FQvaCue5|u1KvO$u6}BXd@B1n-Rx(OXHeb&>Wf9tCq3k+i=f96YWJ|< zT&qM^@zO$l46cf14v1QUS-Og+QpbT_htdA*csy|6g_-o%0NiJR;^W7n5)F=;S#Dis zaXQoeSQXu4o7W+{oJ1YD?L%W6f20q$vhj&e0Uk5{rxjEeK0{!9KyvAWoPL#JkzCsK zfd@*vC_eO=in4gw`5LwrX3{$uTnBSwHb<_f{9vzYxMaZT6p}5nyCvOb`VZNOpA!^p z%=D4%gi!LHt)x5H;3XXkfU->;Y#O|cX%%EkS7E6go045;>^3j<0pj!dTFPdX1Ps`} zUw1S5Y8w`t5mZA*LqqRVG*ob@orf4)U3WAqR$S|yxwM@pknU!a_xqlzH8;o?a6#27 z{UMoZ?t?N;e`GIa@wcqoq&go(SsOE47@Jvyjj0S9GKRdwYl3DVb|pb;yzDkXs2d69 zgBs2GAMhG%s^2T_{n8hO$-+N5{ls<)EX=QpOW(#y7|xQ@OC1>Pd&xHcL>3nhmgUh# z$0FaNC3W0;m})eoeT#joEwst6aiVgh+ZVFvx`!^@gt{xHW6#|`e1C-_&{}88F1T>} z2^d);Rwjr09E0vQ#fsBP<=kNPaGYHPUTc>mqNf4(NS`x`@8Y58YR z5s%gvKBus<@GlCg3%3wVkJip*VWT-{`)IJ*f}MA>*)rT2Nk&lx58urw%XlSwhx?(`L z>xiHb+1LpSDLiG>Q!Z*AsT!niMx%8T+{{E9e5xJ64Ee}>i`j?-&Fm2w#z6Hqx`5BrJ4p)FALcvLT5fm)llv3X9 zfgY@GR^Hfc>7-YB{i*;;Qe^sAr~o;EAgp)rzgr{Dl4X84n$eZi-Lo+`P~FImt!`^Y zR(CuQO3PMbT;35zpIMC=tr|=$8KY3*(D8bGUc4xzVG^!dZvz>tJVO2yBV zp7*`luUoa06RM>YZ-GGPiFyMl>oQQ*8z|7M`;*IH*;cB5Yw7ua4x_IR&J4{qfT=71 zOjQA3Z-fB$MgVYV1Q3Tt?3XoSe`~}eBWyC>8Z7@Oafdg*_PyyMeF;7QR{F3DYNCTn zIdG;@el`4T1ZG=*SUfhiw$3%{HU%uqu603e+-E^hu>|LyqOJE^I_$x(0j*CBs zqL2+uVL{E3h*!*%>f{Krc3o)2;@ZB&ejzcPzA}8*0iRh2goekMSaScH2A}h(F6G-g zZ5nXSWqEGb$Jo}H_#0@iHc)7PB|2y?X+tf5KE1tnO_tv8`)|tDz)U}_xfkW@X=-zI zJyv?fL0iY}@E3OqtI?yWv!9h=dx}ySo_vV1XqzpenB()(T#(Sh$sE1KjegcopjJi# z(E8$0t8$r%W4%556)d&LN{h*|wAb+cRo;PAacl3z;IQCZNy&GtcXP3nb+RaQCzHab z+Z07*YaHhA=L=mSq54q$@lLIqy+5XFo|el2o!$$Sw(i&wZNPUUuHdk!N#AIDEAGF7 z&R{v9c58vhIBJsC?Vu*Ri#Eiz4o4|FFT;y!VRce#wXCQO7u7GYJ3U4RI=_Cj>w)gx zaFKjuPHjJAY}M`yhP)wahh)~XCD=l_9^mW8j`FkOyJHvCH(Yc<Rqhd1 zu8--J$79`cc~AL#sx_AHw-d&sm3+bfY@El@{VDTEgC!H*&~x+G_C!YM^#sx()UC6E z<=WL~OzgsroU#_}rgD#u-j7=;|0wVCzZ03)=6-kI=(6+*t03+@skUD7=U%{kv|wJ>GI3k@=IV2>Tmfg`?&G@ z>G_@{xnCA0Z2JtImA|jOi|xoq=z>^64NkI*}IbsQ;QK_ivu3ew&~ZF5^N zhum_`I)wc{*VMAsM#mwyoSntAdUji$o1RBRnqk*R4b0N+t~YlZ7~!gXKFyl{I!&}+ za))+o*kQqF2+e-5k*UpFdp85aHo-6fo74?&_|94>=o^8!TrrnFA`R0;Q{kykzGIA* zk|4@-8D0f{k=Va*qd@hF-+C$8GuM7;y^lvTxmVyLHvh23yLPR#FOk4;BnTYe4|JJi z)oEKY$72ni?np_t`T-J_WUIa|xLy4p1dN?p?`G0aoZW@jB_YGh-6`)lE6;JTNSYXi zCwV_e-o?UIwGaHJ105TLdciQ4x>S~3F@{oUBMsEVFx^s*c1hoe81%4l>8{pQ4HBM;~0?p9rv9pF_W9kF zBif;1p4+b2nBGgg2e>O4wma>LquUhUIL^A50;Ah<41{y~$495V!-fSkS&5!Rdrz?T zmQ9*l>8-g>sB`VgK&AI#Fy6vjhix455_A~cHmmCG#ws4R%oouHQfp1*-i?J_JCaVE~K zTqDQ+nz%kU`Xuc9CA|-OjI7Iu4*#BV@mI!qhF>FdqM%%zCJfh$gYA(@!?$$f6$nMh zzBJnPWn{ta>dWmUxziTnA0&x)-9-@ooOI~+5Z??3V=2xAI$OIx6{$ zW98tQXRFU`0$bREIu5}e{x=)-?$$EqRAgnhYhiDGvxPJB$6Gi(f0l(~bEnY@b94N0 ztBSU!SY`5qKeswjA}g*y_UnE#(wPetYJDX=oE6|3BU&t2%eG^cgkS$b$^xs@>+J2=WakBXo3*#i$<7P)c7nZaNOoSVx3leSZ*7>N!Ux#; zjR_aeY6g0%KN|Nw2PxWE40}D7b(GSMCOgq6kLTZtdM&#*&yn#G*7gd?p>P#28Ov^q1hcJ;}TZLcF1!|zX_^^oZ8 zu+kRRqb`zqzgX&Ws~Id2bX`|kF=DQme3`k5GTdaw)W{yJXI{QLB+#6`IKlMDo_mlW zI9L-8+KgR}QVHD?M{xAp_Z2#)l-+(iTs;?aa(#~jqUXNRb*|Jd)+o_^)h=DxrTdvf z+&opQzolL*iLgFv#68mNy^;}_2|$?TFzS-rKLm zH~q@rv$&N)P=nbnIfxvdW)w}e`ojoT^8H@e3;icu<}jfPa?{N${=Wwz#5Q$v;Dv|+ zuIG0Xzt`}4U3k`e_B-W|d{%iYm665$p`qZ+erNE!(hmk1t@L|&NUv|@d{5?mrQaV4 z+n+kUU|iacEbdQTS61FLsB@*CXhJlQ)qhv-H1aJpHJGq;kUPN zX&bU~)RtTLX+QqW|BwFEkJ@wWErgLr@8|cw9qz6EEdJ@h@CtresQKjo@XNw1J`1z> zEL67g+ZaQ zR{z2-)|emCeN?Oe7u{y7|A210)xU3dO{;%Kw}tut?xS1%#8l?_SCH*6*Dm%%1h0{mO9Rc~9W?*Zc&NU=a+eTXm|AJB!!1rQesnXXX5%u>Gmi z3yziA_ou+)-eBDuE`;~;Pkm7SsXxlUy_KVQ{nR%7)OT6`sSnlO|A)Ibfs?DK+J|rM z?Y_OuOr|rF?#VViAPJZB41};H5fM>9kxdYsNq~e+O;j3t2um(^42Xg#$bceZSi~KD z-Ch;<1#w5=9~V?0pd#+b>%QXmJm*y1rKdxJ@_yg<`{$SGd+({LQ>RXyI(6#Q#y^&k ze>P8>m(9b%?bC+ar;TTyk4H~89%uVI%oTFJF!T30e0TnFoYeXEHNZOm-~{J7kjx+Z zqKEPKBm8ae-R5U$v3PBsI||3VjkBY_Um?!_jek4h&9_l*{=Luq-H0du-e&%;$CH0= zG=Dq7_btTZ-@DA;J$UkOdvIGXopf}5cc$!J_Z+s{Jo{D(<8#I5Mg5qEEMD}kJ=nqd|zjy4sO7lo| zTZhB(@l5t`2eEft$)0du_KABn(6KFLC%BlM;0Q)_3)zX**%8iZp!e%-0G1x*sjp z??$VIJ=u9#eB0y2lLdbib?{{Tkq-`J@rgVw?{?;y?f3RXX8(WqqdiU~w7usNggxG0 zXBjLW!tMJiy#L?$XUn&}=i~A1$qd_G{ucgZ=0#l16?Tw^bi$&3gj&Z#6gidPzW| zy8mg+@RLY5(WvZy0zaODgcFU~`#-yRw0azu&G$#z0^DW)eHdeld<^Wrq&d11gcoH+ z35cEgDkjFvav+&!nT>2^&B>4(+zW@R*>aE#!ydWqhG`I-+`5v5e)8LZ^LgZf;|BNB ziR)}DRh)Xy{Wl{3lkoE<4xNj)5%Y(5jO!fK@kiaozfSmG2F5ftd<5_OZXW2F1ybLD zXSt`jw`Z0}>F2JVStO;O1D;tXrJp&oPDg$Jvz$tgQ(B3s0M=_A$c0aC@BoU03p3!_ zPi;J4xoH|5Cv~rDfpE_VqV}w~2=H#px8n6H2WQu>aGeBKuMFfdkE-jqNFXN?I1z%o zvMm_i7F-Y#uVVRlyox2etimix(6ubfoFgx^a|)hwI#TmrO}zP=zk`Y4+7;KJ(3`(2 zuP^26_vH0zzTSgZJpyC#-M(F%wfXxg=!5gjBCgFp05tdkSg@J%&AP7WEaZiXO7_W( zF2F8*6a&kF^koFu#LIy&%hKO|H76#v#uF2{(H`vO=DnA?yhoO^{E%@*HrdGw?7O=c zd1AlaeUdfgS*5rskZs@s zD&zq?C<|I2w<>=b)~!AmS>UJGjg`RgAQ5@dkBG>wUpDp1pw_Wi%h0|VS-TiGT3<(pJ6b$B2~M_(7dYgfwAt^BjJ)2Czl(oU1WsD@QTs%&RwwWfq*S zRPmElQ@6693ow_t$s5CIWDLboHCWA2X+InXxvjrYE|e z`;9HEvJykqdz^^+Izi|SNiMRMe3ypER}V@RB+0rD?D!*AY-Th^8jux!YXW(2asTy& z`t`wIL5^9}YwxE#G06j*sI+g~*$i-ILGU-=!>&cisaU(dSiiot8u|5Z^Orca-fg__ zN_Fdg&hYV$Pu;r8l(u!E6drYxI%{X>iUV<7=i-_-c{di^+_Jcy)0fGGOHrfeVco8g znY?o_`11m7Pd5O54$ixC%R^T@h%RC=7Bsa!P2gDowzeuNzupOxZt-%QuJRB#g~w0% zu$RkEZp7)!(N6$cx@kL6JPoFNq3-}aB9rY!Z*b05!DHDtz8@!@gS<*;^f)ILJk;lq z5xm|~YYs%OToMUH^U7_!N~M#10ChyA?ObRj&dr^}P$AoCHWAs(iZe1NmMiTe(vcae zkzLmt#Q{q!Rcl|APX*d`#@PH_JtyzeUYG;^G z(mEX>I3_5@E5}yhI(2~*N?vP!q(EoQ6MGn`;D*etwV!}Z!UOOz0Es;r$gpvywFb}D z2}P_FYaNYWlnj@gAA>iXvYc<7hL_e}{NWpUWTN?22&#DqP}RT1EapR*s0V(9=jt7m zE!Wxzq_w?g7jmrw`6heDv07D@6_l_bxwHbx)XB&3@*VNG)7ode=2Tv(#wKkc)sUIP zA!nrA7Ea4MfJIMQelD+)f*C%u5?kxZ8k~QkL12hs1R!LQ!3A3Y2XR9E*+oRG(-Dxn zhUJFdMtvam@ETb+SFY!3{^U{sq&-lUY5RU^~ZB7w#=nM$! z*lpEf+`4dNFvKBgT~QtRNmW0gn?RsVe?h`I!2`1vSEL zsR>~U4-yjovvONEfK6PtSi%ACxnMpSg@)7m9ba(3-Dr`SJ_tz#@Bsql%sn}bdF9&y z#-i-jGYRjj_Kgl!`=%ad?WDCujYlAlVw)yn;wEh$h$^f!9B(|@Q|)hE4w!0SIotSH z=JYTz&S~xq>{zkRME$Lc3By^%)j6%J`O4FYeWwn8=d-{$>Ok}ujK3#CaX9hV7eIS+ zcOjh;kkr01iV|To1loMHvJ|DEZrlgYQ;d!nUJb=Cxd)Kr_5`X6tnfjPRdoue1Ab4m z&S9Wau=}~R54@ZE&?Ya1@Yz1lb+~A6E%9Oz6&BGH@X2vpPwH=hff3%EhvmRO2i-V0 z&Ahc@KbsY2tG z>t*Ox=A{D|G**iq#}X6O;>2`v+WD6J71h@eCz4de!K z`fh6u1(g+5lFD{NmV2@Zj>^Hhu^K>28M_w;@~YM;r?d_fL?U-3(}kxs2u?L0yQzwM zF4=Z`LM6M5$u;L&LvJmOAjzgjjtDhrRw zSRxLc7xRd^tQ(JnLp`~vFL}0QFQ1Ld*EVkUuZXUoMbNwAi(pqi6FJ`*nYuzFUyI0K z8?{((UQL0bGAW0ad>+6VAXHaeb*jv8(3;d-qRenM7}$t&%|x52?uXJ+l}1&B)!@C& z5kTVJz+{=|12pDpZ@RtAY|rU-v~M&k)sAjJnWP7oioQ;h+a5RySm6CpR;L z+Yp2vwDoaDVR!Ut3@p!K*?0+n^jS&evF9mDdogMq#YsA7RQT96$bxnT`mRFjGei}e z9_#~PN@|ZO@@A0Cw4eJS6aAKN3&FQD624iceYlfpq#5>4%r@-kB%gW=+c4tcC++rP zH(qr#y25rF-4)X4?nt#z*xT6_%0@?9ytjF}A&4dtoNciU0Fzox0Btm}9S}E~rQl!O zXa=wqrzk8lh7nj)A~042hr0V*uUZ1 zaHi}?bB1r@z&OZlji8G_>mk+fZ7h}HJbfD^IPKez?~HHbD9~%}up+r=d*XW7OytJ5 zA*GHFYlLrufW)`KO!f5LG30CagVU$+I^aH2<&(Gt@uNG7*cL~2!U$%Z=+16}XFKiY z;7z*T0o;BBO^cBff+z5&dylF)tOVDy%Lnq?3UGnofhKA0`Pt7o>SCub-}peJfa(KD zi_7mpGsNY0cyL^yXKol@7lCPC7vpyIbzPE@hd&_Fe~iY1OZkiP<6~#9bP?+gLSbwoKme#qG#xv zk~cU=N{x{!_Kr=o0y=1`xl-d`R;Kwb4fxyU!1h6t-y7l8!sKT9`EYiJ`m$Cy$6V^n zVLkE;(2bz`MG4(v_N9Gjk56>nYm78Tbo5>KYUZ`a+18J3t?fHec-*5U*_-0QWT1yF zKK?8AuPr#%>9?{adB*;=bbtN8NB&*A_fKGMmyViXbksLP+hdOeYE2l>v)O78_^KEd z{gLscqkd}~)i}1+r6V&`BOAN-LGbs*vnhYT5m`A?X*h7I%!BfTZ)_kZ3-!9WSj_Q%15Uv1f(R z$|g%e+Okc8VJMTyFa{DXa{wM!6V@;<`2H zQ{8U``Y}`4WaEbyTlTX?e@5-$+(15(&8pE~yF&j0sM;u)? z3rA~8cBQLuH{`v~F;H5f_YHHbOFL zdsmBYC^Q-2!9ioug#$MMkic-R&XV$#YjIAoluACoaF3MJSXWoF9tk4Z;c^s4&kuP zJbB2(TU6kCKI+AzFNe`C4x%6VG*U)IK%C|txnMOKCWyfV>5rio+PRCM9I&>x47Xq| zm_VRLUAjL`H_O+8l{BHa3zxczPBCNqF;lhu<^V&m8!%Y^n&+GY;dv=#D{bhFSNo;wog5+xQ{vm!(ra!(mshix1k%kzxCy<8VrZ(49MnF)1Le zI;Tr-!&ezc$hK;9kNH69hWx#9y&IA*>V`shg=wi*v-IdbPv$?#HDtStem}sm9w(Wk@rDhf)20a1e`9#kw7KHT4N|`>Am9R0;xX4<2XSPJ5O_ z8M0A^Ps^lOHvm;aK8x5(6;#@{$CXY+BcYUgj#@;G2-T?ahjl9#OUHGGfYp4I)!Ip?0)k>KG9!*ZNG-0y!NsF zm>czhG#5Elb5`Zosk-VOPJ-j$EIQsm1GDVepFj8mY2`tjxZQI!uI#XN`4LWI4{ z>RaHr8tcI+hm1KkN99qmkYH$bC@J2^NW5qp6j$8)J09_+;BArXhlS5(yk^d|$T=qi zH`k9C+*k(#O#3;oPNBG_TL)8uvRqj4v&(0<;9E zewHpBpy!|nXH=ttTy0W7MGcEv^>}k6b(shhdVVU;lHQtZ@=G1sq4^~%MrdHOEIfTh z+SCwd$kIBLtuv3AraX{Y#Yi$IAkC)DO;qzxqr9+>5pa^lmbgF$Fs?;YWm7^yv+!}? zGKvU<&>~IpVxwjT(wKS8as@ll4FcPw;qcD3X&!HqH0ry7R8!1Et6IZko+&tQT%B)n zvgzs*q7czWcwr<9VMB(%3$kta44eX&38|Y9+ykuv84aVIoC&bVTJ$?XkESIXAI#54 zrZ$9Xai9;wnm*VH^g|p2`E03t#wrtTGuE$lk<=g{)C*|4(&fTkfO|)tPT6#}VOb$o zE8JfK8mIXbP|KK}JtNP$dC!2NR^^NsY#%rwomvQ(sfBuMOBxg%WsZNRqEX$3#(=rj zRBJFbZpB_=;Q%V}ol{Mbd`%qdN24oj(V&QJYPJcs5zgLHOf)f}NUSD_Ni0&t;6llg z1}SAj%3x156*LUSui^|MX)2JhA|w;dV8E|aGJBi5!PQsoo#re|@3`sa>3W6@z?rma zFS-%P6%(m=(nJ3Zw_s`&(>B@-%L$sCBi<#}Rz~%u6&jb8tksr9hVgRT1FSkU@t%g7 zWv?`+I)}m>BcblsyojWG2%G~Du6X^{nA5Y;Dbv4XZDw5?8?tW`Lv$0k>@|ka0&;L_ z_47I8u|eeKc{mjDZxX!11TWLzMxf!15kBXeHKpsza0Ev&I4se=abKg6bbM-5tjL3{-kJ}|AaV>V_)sN5V{LJ7A4HO{ zHD*9{y^Y$(!;ffs;UbIwI9~|1#XDhgx0i9)Ixypw-E19j%N! z?kd?b5?ZYbYhgDi7X1_m##5YH$~DilU@RRSK^!JzjO6%RiFOcRWmwWYm#g7;Reu_N zrcoBOvN0yWNG2wsA0wch7iP z|3uCGB6KaAjK$uVy|&RK5h$^hb`k-107Ce>3L*Ymbz^ONL8uf4 z$Ed<)fzh9<%2H-%5Dj+WhT(fih9V|Zf*A9{UpFLw4X#09HXAs7aa?_b^J!xm#Fnq& zoTH3_5%7X&(aJW z9FGMFC)&eR~3{Hg9!{0gw$Y-c%>c>=^M7txhmxk@`#maYqXXFfbOb9}n}bUVbF8mv3}dVxv*@?z`@lt` zvtjzKdc^N02n5d4vN#u6!&`*l`4TVh_Nq56r0z3}QVd95vO! z@z{+tNH>zgrYYuFbt#7a9H_QI82VVFiDGE)U#r%}K3AQ?{-s{6XUJJha+vpy`_Oyq*<0uVVwA{SN{W{BKO z-tHWcsw&8kMb$;4d$5nuK8NZ$I2sbp42G-2SQ!=9XLDB@&uDAkJhdU$&CMAw|NF^; zsxx_Q*zBfztmXYB^w#ZgOJbK%`6-0%-2vU>5JIthHWT-cA0Tu^2Xq^jx{utsZwEC0K|-;KIfG%Y zK;aS1K%Xj5Y^KRT*9-LE4(JD=j7IJ}APWr+!jbl}k~Xp7_atMdmV+g(*zj_Q`#ZQB z(9Scsa`ut%E*qlz~Zi`o+fxo_lL(XW#qz;T_P=gFvgP^|dL7b3dF zUyywV>A1Q4U|%kYa~OsndV5~54(TvWLP%aP1!pK^HRI$k#5Q1NfQY4aEJTy=>LgNk7taY&ZM|~ z@ELe&9c1Q_NQI8kHbK5KV>I3Oa~|s|J&zQxfVQhY?CjABprUT)oKie{BS2_a^1!YN z%WeEjrExRTuC(u9 zcPn#BP&SO6j2REcmu$CVRiqan$+vYo%LS8!*ez+OSKrwN&3wMv1yYfrFjjs!+9bze ztC5@uYX$NHst@eomOj=Vl^th#2JubKxFM@C_RsRe?Le#;#o>=c%tpEfxH?3TBsR=9 zQj>VT7-YSCZpdQmFDVs-^g{~CnDc@?r5SgL7soPF4l<*k;4&zJv(bVugw2bYMl|tR zC=7zFNAd5$VN71D5 zNg%jH1ja6;Kc1h#dba-boe;j$2b1f9Csx-Y->ETomROiEW-(b7jxn_oDuw~P3D^*q zCac!F0_Un)n1;mCX6tYU*j7g_sg9g6RB$VmR)@KcDy|OBGd`i}pu=J>NTk%ZFXjZz z-I)dWA{tKY!04dWNaN6i8b+{u$KIz=wil7pZfr#~fM@2#1ykD6#6gV-ToG;4K5Q#7 zx$46Xc%EU(l4L9mC2jy++hqpD4qId=3K3wdEL1e(>;_v#3zIl{*KU-{PZb*3I5s=S}*OlRR=Bz-cE3vQEM$V~m2Up-K(7IdSY9n>H zTmPL5#my@@qRCpko$glj2dQ;lYD*r1sgvjskcy7}nRvh#C~|}yIb#s zQ6Npzsbe~T!vsFB14wgKj{Ht1r?o2Qf2V;oR^>48G?2EcoD7}@(o~gW!qdQ?66Yfw zx&Ma1-*y1s2Wv!5BiH0hr(91;ZKXcKccyzIg7^-$raLEkc^~Ivs&|w2nal%5Po@37oy`DxL5dZ3ptw#&vc$?~nTX8Y|5cO$ zy%i?Qq5bKho{cr9a((eYZpC}!Kz1c`)UCu}C6a($@6g0R0SV1(u~;{~;n2j^N-qk!i^R06U%W*a_pWO)N)N?_aG|NvBWbvw#rL; zpqt0GRdE3zEWf5s4T#s?o`bOHI32sL0uQ7T;&s}3$5g01rI_kjBYDR|o^D8pH+dDL z9ouTo3z9W#UFUp`M{G#@ad>3rd``!=y@B=NA|3=&%6)g z2^`&{>(X?p=wfY_)MdxBe)tb7!fEbD&qqo(WO|&N!Vk05%X}p3y-s9AH{>HR?O#A( z>ovqLje>Ng8-;wwje^V;%9Yvl0ly5STqwK_UP~<4e~Oiagmqe}U(_INml?iT~LR$#5BUN_!>E zN(BARXp1a>f(q7%V7QHy_?@4hN;$L>Dd}`(-g1eZT^@r=lG+AdP_u>y#QEN=YV9El1cOquVu z4h4H<%F3t%UTW&#ZnzZ3wIa|u(s6apigC3uVuzAexGiHrss{!Vb5jk|o2hHJsC8b7 zC*ZU#&vNE3(6*f3z%vdkXm}HN$ovd^ZO)XoX$cA$;!W1}gS4P6FFnYeJPix{>cLgE zt++A|Nk5D2y*yoQRcZIV3K|?IUzaz*`dF6{H{C2)z;g?HY(^pGZn%Jt&qa=JFVhWAdfaK8;`* zj02qC$7kPzMQ7-K;KlG-*Gk6Fx8}ktT#zB4QVk}evCO3`u5$?T<-Zh->p&Wi#JyH@ z8UghU(b~>{Q%%4rcmf~K>N*&>HcLI=DouaRtN@Z(26`{JnM9$+i7or_Rv~vAN>=a# zOl{!8GILK^-q~wkIr3!(xNrK8a6<*?63{I~vlMyxP7CF@Xl6MucNN^oSg4C$UJkUc zgV`MNA?`r2no^_GdNA<}y}{5T7B}{A-?$kd^4cs8)xY3mi!Hua*U3AloUY}j9)n}j z`JL#oEce`yHG;kV8^)z>{2;>zVJoUdbm7T(zEuIs0qUd;ON)K7yo{8%E;Ith3=2kjN~cCudF^_E?b?}5|s4UKJ0Hgj*0q8Xo#a=1D;i_XA1WyX~=EMGZOW-w89CgX=p<+a`+ zyy~d-xZZbJlE^!p;?9ooy>qAV#WMbWMqj!dA`exdAC&jYk=G?NX~%kiQ&1nIAIGS{ z`fTD$N*}V^=)n0v2mWrNg=p!g6xhK9SrmIXP6d2*vW7@UPYf>bBbi-|H9t>+^jy^s%he_w>B+~K$i<$2Z2^0*<>!S@SQiK#C6 z@>*vL((UHI$DT=@JR!U<-&wpl=OWPi>TdLI5PCVXm`DCfK|_|h^>(m4Vlc|Vhd1bk zEPuY%eXS{;;^`=6yvYnM`n6L}wYUVhT0 z$k==i(n~y7h{Tb3pi-wE&_+DDi@0mOJb`j*VYW~A!G|i{=<|7`QZ2ZR!s#siC1!|U z1_rq!T;Ud-mAtn28t+t#Ucyf=H+cm){8D@@-MVv02Tf8S^AF7oA~3 z%yz zGlgVVAi*S2jD@~?Orz}pM+U{nOgcQdf=%RQa(4uKxnMCKQq~_rZ=TJ9No|SNUwrqQ z?9rIf%Oyxm-8NrM?P(w6%bEVKA&+Y171x7KwjD_lN^J8^{Nf&8J3a3C)8pnn+D;sd z4ira{&O(^Nq=t7q$w^^_Ey$jU>L!b=QZ(FkHI9QXVLITQ%X>Q6;Cv1$pp)Y0@+UzMHT{Ugy=>&XE8qum;T zNmf44bDYP|d~`k^UTZ(_T7)aQ008!Ae42+{eU^#0sWV{+fXZFodA18XOY4SUY?zZ# zCJh~uG2(2-KGnxu^rXeP@UYBBbZ>+UrGh(A!Qz2wwD*OrG2%cA%gnQE)oEWG+aFFd z!3K1|CQGOU-`61;z=uo}ALkA%K6Dh_@#V%K*cXC2jDPImdk3lKGL8W~a36%9X+(Yh$TKqLQKdHRpVyOyA7xR~FthEjR`gT)fmo79<27}|c$pU(T3*V>ZkDNYh$bJ35LMbJ#924xJ+^sl4rgZ%nLnG0`y z;{~jbZ|x}_SA^#R#)jL(QOk%xBL(<+OJm=QZ3ivqXpy%gKjv~H6-Vz=Y0K{wpc$6m zW;}*0E@=b&!#kXoaFg6QyHXQ8Z1gr zD{lq_tFYe24fzV24~hl4u#VFt`KI)MU4lGh&YFC9wb)FPUq(Ulli$RzxDYw+h6l)5 ziG1DKhUoQ30E6TzK8&f67sEvMKv&v#Qu~QV28LtsFp){6RoW+CYD4;Rt&>3u0>q8~ zyEuR&m&=IRi(bP=F1nnLeDpf`vV@LDujMxkgr5Sxp=BFhVU73sSTgeiyu*J%+FuUZ zuOiRpLBgB`IO~_k{Nlu;{4K#XTzTb!Q$!a$fJD&$%vf|fXYiSQ;sm~exfZpPypr#j zQxjOoui%Hwl`4ijvi%@;XHPSK=mH(Fr?L=$tOJg7#dZ?D*RfmsXTYcD6iCfA;Sk6N z_e&-cCy)Exwco(NzgSv5QCe0qZ_Qco9^xbiK(PU8SGtn8{?WlV=r9A#58`-B3<~Ze zM!zOkpKDYf-8Jq!x1Bz8QqIBhFVhYJa@q^9L9v5*!pg_zhwtnLJXW`2EsyBdzMPLK zkhFS*cW>;+qD#rgtI5AQcirPsIpkfK9xr1_>8hss81}es0QsRjy)*4-II%b z%$ZM=DCxa*+cIT|b!uFQCthZ|>-bzJ_5q)U0dWoUO;wjrkQ-jpGh7(wE@~fF&--iq z)%2@KRboG5HD9O&Kaxtq@gei|)vHzW!=}IE+xW<46bsfLx&HeQS^Td&$ zFh(_w;xA84BSj5MovUSAJ+y)_i&ToU#l#Z6^TC6pg4?gFC0ttXFRR4w%~?DUuE5>d z2&(pIwO3(c4qzGzAg+#KzW(rPu6*Jo)AfcZV9DkWB%q~QsZ}eMq}-66DKg+o2~?n~ zfK+h4M-!E;wBk;IE$vWeX9T?0V1rVFTL9F^0~&) z>07sWxXM1)=$E&lahVnI^7F=XvJFl81Q@`)_lB}aMZ?1K|J+pfN&1;BajSPD5fT{fV-Q-Vqy!nR|z&T%!%(sg74B4KF)j? zd<1vLmzV7VSiYAF?xlDR_T%tzm?W}66ikKf8!O{}m!F*qMYoJIk~9gVw_K5L*ug4p znzB>mxC8NJ)WwkUE7zk{T)BQ(RX#12)e}t~ew5lzfNkgK3Pi=Hw68*V^t+hu@c$@E zh`H!n)R(lUY6<9paE+YlP0M=Kg|NE26%DzN)ii$jM7rVCG6%ktgJI#9*oT}S75mU@ z?Sp=_ec6r9*{#E%xO_^wRih|FVd+2}?$3pdC`N8zaV|ZP=bql`g{5nunL^k$(_eKYg8q3?T%- zg$Nr$*k2enWWwel48R2l!)o-AM;SKHgw017fb$VHA7KwNY`zIwfG_~(A#4G{KF_cP zCTtZ+HaO(duzY*a?jVBM7~<IFZ`I4xs7n;rlI`BDu#IT(&kT6Bfj zW_C&pXSs4U2h{1R7ei6xhEL`^Hys$yb%ybU-Bo5C$x`eRDNhen@LR1^i&)8eMzu7I zZC7|Z4Nat4VRxQdRU%6pp@GJ}4E?WXhf*)lSKWQQsdHvrKfr%=Y2J%#^(~vPLFFX^ z{RVuEh#0>SZz`(S;?0@juZrr&JH$>xL{z(mh^TfA5#j0@A_CbpM8x}iEW1q$zEB|I z-4Oy&6&?3mJl_mCvI8BQPw*=!HTXxk$T~gN$;*JoZpW^)Q$rdrdJ}knG0b&*)FPn zmn!>Hta)&TOQ(z#KuA|Bzzvzt6s0Ed*%ekC3zT_#I8!e86Z?mUzrG4%~DPQbH- zM-NUr!da2U@#$P~dVIXX*TU8UbV;LwqcAH$N}#m0GRK8$DrjATxyP#&lhFgh1d1k}B>?vq zV3!1rgTMwuB?R3JjtN0kt)AfTvfdP+36`TjLT6Ot+1!j&^-cRI3bRd{zQz%DiRV8YtYZZ02PYJiBrS%+8eGd=z*r zoR%G44t-If$E7Bab1cc_m>nI?*o{d{?qtcyt`D@Xe=FMzuH?h6{3nvm z^gJ9Jd9_d6lpfM{V!U#=|EEL9A+sHQ09#k84`7>noIc=%)OZ-U;6JN)L`*#jgB~L} z7~rNxbe&7Dx2+!z+;<}w&G=n>EJ75A@$jooxoGWw=Tj{d?lnp+aM5&xOsvg)bDNQ?bYK-sm6J z_vRiFGGx9Mv{$}n*4gP+@N#_X(nLR~f)5xjSK6;2P~70UiX9t5MSb@mLNHgkCA&$3 zGz2u#9^V5`_}pPz$zcb6P)7oIc5pNrJ5hfaljX2AF<<{EXk#p8mOh)D9+tJLmG-R5ZM9=v-jO(r69;iFfveCPpPu?Jh-YDVb;+L9 z#W94`=xi+uaIlXZyBo8EdKM~HiQ`JmxysH)Kf<|#?L9c&3t9k<7?u%sh^`&bq&-1XAe^BccVupzke>#{4R+xED$P9hv zV?VXyqo<_eW3!y+kMl2+24ad7KUsQ~cuS<8UVL}nE?(J8o?t=@Ger&L6I{xk5j{fm ze!@`()dwf&-Vy@ic28PWPqg+y(y?B*wI`mk3ciU8g$R_$hXDK3gV_EP>;e#!6!u{U zpT*rIlF&!3v1y1{g z#w%~)q$WyKY46RJBp^(!UxLN>ARn5wzr7y<+L8dGiUfKjyzFXQUdwsO3GwD^a?G9A zQ3?I+moTBAm4x}xfxJkIo^Eb#fP*&(&9cA!2}b@WX^_b9NlILaC1c$F_N><;$}{m} zqTrZOPZpp&!|BVXqtnjmZy(O+pGrlS?SyF12>V<%%<03OxP9iZ`_v)X90T{a_j(-= zt;dh%i>~&=kOVZE|K=kfeS{BmwI7pbKDtewe)Lg!7NU>inY68EsZ0|^M%E3SIJ?1_ zNjEq%$-qrtPGY*jNn8g0cF|WMi8OF+WAB*R#x9%L##;NQ+t|U7bkoLIJ}>02T%0os zi<(9AWou*DTNFvKN$Rpf(E*O!fgIfCp z!f{YU9sP}JCJT%8o~Z*y%<$r!GkNivnY;)NO!Fe8Z-~ze`Ktw|zM*ci#T9+Sy&b0R zB&L)%Sb}J$8d^NLkNjOyU%C{b(ta7mQd+H>ZkG$NM1k75YvZH>YrmXAEvcowd97uL zKDrCi@kLY1T^M@b8D=eb2#9X=z**-vWRtrxYjT=fOW2JQD1j*YB$@s~1SCvPhp^w& zKF9E$@iV-C_e|bj-i7ziL}uM|J@I)Ve|L`e5_2Z+U0I_<*`A?G|DIHV*SZaS!pURK zg6LDo5<243c!>R7L;V_inn6iSDQ&_BBLhsA;lq1o^5L~z`0$)GA8^WqZI8s~h5X$I z?T!?9@+$|xT0vyH8$p^)I!+K8<~YHbaQ+8^}-F}1S$2x z&#ZbmNPFYC!STo#hR!FgY(TMm0kKj2xAT#YzQ_l8C~OGDGU#{Cyb@aKz^rVzHrt zUDr`kL9x}g{%6)|1CPIsOm$q4(Vqlo`0)Oje7LF$AI?nkA=P$>&kOmR=ufsYTU3#q zRNo~rrL4j85H0DuHlSQLP_GzA+!`m-W5IRnxTG=rR1!KwCP9JqANI*ONCLj6eTX<;uO!ZZavZKC= z=?#A}dW#4%eEZ-`zF}2cC*N9=X}+cUFy`Zh{AC|T$~^gfygp25i~BI9N%djk5E26? zI9C~IRQh0Wo@Fd`UkzK}7v2N^LW@BM2XKql-UlAK_UUV18 za&vMwW%Pgeo{zTj0j2qEdFBIj$$oSZs4x-Or!(v zt8h=N(|6PcDc1j&3`Yr0@+9R02jpP`$7R__n0SwuauI?G(IVyAO-Fp z7~EPmbAJ)@&6LfQnS^BE#-~FhahachEO8*xO{X#+FXV5cQ)l>eQvH;~RGmuqj_s#h zXD{&UzqP(dqs~k5Y-N6VlNW)>mF8?$vhw6oUtI{pxhk&r`iP_rKE~C$Q{O`xwHxmtS+oOb1SzP8k>jKYi?338lwCV}gtg3DHRs&WDs2bM~A1LN!2n6~{S z?i21UA*Q%fFhE-i{B21gm`knuv3RA_+9tmb$S+pz0`epLPEy;IF*&cZ9lu+6#X4-p z#MQOf!N#j=+gou=5HGF0<0iSZw*4)6&TsRY^;;G%Xg|#F%`ENGLtIIP4)tnj4%!a% zo)sBCNg^0Guae+cx^GK~Ui3p^qCJ#zmVghE&a3BxOC$}Is5psJX>!|5qxtM0O~!^| z?itzq80*2y_#1i8a%X>kEvV}zo5bgZ{7q!@a>U)94J9#EHeZWqiEK`Q7q?lN5Dp}k zxGUFy%h>)?toy{5=1Ru`5pMkfb!^>w4|GJ55qwg4ZxK$LI$)bf>JElfN8P2U@Pg}* zGP+kPko6baUtVoS{iV|79yeV_9d19J)}!hFNJOR{KR&Y_-_)fZZ$b&W)g$qFA%C@V zq95n+>QQ2L)+1fJ!P}67?M8CZePoukIX@xw8xj`l&6Mx`zmSr?_xIu%``!tZ$eF?Q z{X~m4q&zWr3C!^1lQVhp<}N&W7qaNa6XNqi{yw3xH4~)9*8DV`u*pWx7rGU>!n|ca z2HQpZ#ZKGyvd8mfqch$H+%R$<;3FSBh)2w8V-GP#%xm_`2F@fIxEaq8M}~)=n#sfK zyYTP>X&ye!v?=r~%-@q=)elc`LuT#CuY&sBkhyyDtILPuc_&xqoeXWnC7e_o%2Z8k z^+Te_70BkA(TV@xk3K39Gd{YZJ+o_=I} zEo1O*MC(#6sHl!|rN?^FkGq$P;7qwbGqYSc>S>1F|3uevxgqg+^1E~8V*DB95}Gkh>`rtJnNvJCw5 zDhotz;OZ;;!b~~8sf(Q72`0pSz`=?BB3)j{UzKwV+DMWozY4;5oz!^pDJcF|jlaZS06o-_D7K2KvfAFE!+u(>Isse4uQUTsF^h16~cT_kw56 z{svUz;rey^+O?5e)k#n1*_uTr{52S zT=|ur*pB~PIWJ4;yO7v);^ac2lGjt+3rSvptz3}l3yDVGg)ot6*Lek=UH$O?N@)#s z2mKEafStd?BR^WmUnvuG^oC*? z`eR|@`b(uF^)u3?!bx=!zR7y(Aozbo2)OhoKJw9@@rY&2__r7%&Xe|^fip=4Ze))* z1b!SRfP#mFN7UMXA#$YekYR!)e)>SZzjnkmc@ivf)9vH$0HO$gV-kzo#Ai^3MgwPD z19zP<&?MuxPTP4d#_zT#O1!+$KbVn}Bk#2F>?)5*+FWgUk(=juY=VeiyYPDSa4&|K zZ_3w}mvJZut{&wIwwIA~syZHGG z5?K|4d5?!U*rAq@$1h3S4H+pTGX~C78Tfs=4vc7GSz5O}c{ui} zG#`XDXU8DrLzWA|s%sfVxB%*BAtO-ll58vIh6V<8qm6M5+;a{EZO{o-4zYD^eq?aZxXsJQz0vH}Q!};ODw^Dkc|)*J4C~ z0+kTr_T{4@o~B);#<_&X_`pBs%PJ>KHTfVUR009Fb@CO})eM&)&YIM)>^|s`98r$E z^9;mK>zvpD_g!*a+6!vD3=|+xyP^s{ayb2qPb_AO)qv!iYOf6MXs-!v4W0WSVpAs9 zc^YUDx#-k?iT|ABi9ifpm#D<32UsAGy?EdtS5HoL3ubE}Q~c2R^+NQf8B#)BN z-S9Apz#-63>?4~|)MW*{4XuRe&P!)qn1ghr}qvd}^WsgA_zCBCZ3*!oWgNxQ_*4}zijhIl@I#I=CHE9@_ z!DVP>M}3ml(V35064zna_9SIOaO9*ObxJE5W7qd&w#tO-&6k@gZ0wlvzq9jqOtjM}-LB zB<@@B#DQYa<7N&lRvv;^lt(-VmcPd8lbj6x^bSzkxa~TEQl#Wl;j%*YaE42IA=Mk} z%_oJy0M)Eby&xM6GjmHJztKFD3mSYr9x0hJ^~S(Vy%{)T$Mtp$%K25TH@P8+>z8f4 zt?)(g+<@Y@&l0^l$qk9u45|Ir7|3u#qRdpK@Q`w>>yR~#j;STCj;RH48C84|ha*z2 zN3=hHqBi;`7o)Z|v)(9=Ip>|g#ee8l@&WGv#D0|aN8V_d7px+rFDHwH+gkxPki1Mn zw11pH{Pypd>MseT&@NvKNI!l|s$zRrLPlcTY#GY~A3*-VM&&y1|)yH#n&=aMwYf>3mJMqd$Z%9io(FqOdDc0hzaaZFIjFg(IeLpDX!nHk?} z-^eH#e1@ltE^wTt(rV7~qCJU*I4Zy;YYo~jMa4=~;P&J!*sn{w!a4O5Te*RY z13so}osUC!d0+i_KMuWtT~MEp-7(v|oWDgqnWRtGh{;-Wnltge*m^*!3t_@2>tbYT zuGhBmpQh>73{883R>en}%3f|{GayPxvjX~RDWZg=Us-ZQ#=#Sw(TDzA&ojjKW}I4x zx!b*qI4oA&JT>g{`2{`%v)T5Qr4wm=T;$-CmVVX^?nfsgOH+2o$ug+zy}%wUtV_-y z-Hq^Cv=|SubWcYc30|NLMR;@^X!-{EjCx*zScB#CEjdHD^zVbvV?D)|Si$x#K}yV)?<8-rr9}>nm-UPXU?B1# z`Ul+BBQ!zXeCts>^}tXb`!ENcZePC8zI=Cdp7UiZ7q7Th255d0z4?+k^5I-*7eb3L zxTNDNY>X9|kYuujNXW_d|jc*5gZdu2;Ih>E8-Pz7FhL>W`(l|E4}?fFlJMxkdQncAyr9gNScGzlVEN=7jn7;XMUtujZVUN$@YLFL7U6N?$HUct&4RANh}`k38oLr1_TUSk;eZ2w{DBkwZT5 z`H3ed(U3#ExFUh7v@|h|Izro(da0z8sP4ct#~W}H=3TZlS=#+KrFH#DpyMu~L-Z=n zaD~Ddt)l=?+V!=gUJc_+wd*CFbO4tSxUmCx7=h<@0AEPpi|W}DUDXZvc>-VD z5%ZC5z$JTRW3t_82~S2dbf)B6%8~k(BBZ{B`qZ}&p8A&hN_|VMq`sv>Qr}V+sc)%< z)VJ^;^(`gU@2hdCV{*An;27`0a^%}YPQ6^qRcH6h%pjgUV{$hh2YYC^bC8zH>(w9-6Ct~fOz z+?9Q0OzN|&>*Dld*eGx>V;Dh%24txtWm1fDE{AJ8A_Ty`SBNDk{ z3wK-V(Atp}oSp0ge=5zVdy0IPNT?^sAzkx9B-@nN66^=!q97rcrywNl&aRu7<;+Ds zQ<4w+^46C?(&TfQ7c!xn=Fb4g=yg8?FCBI!*K=xF`LY0M>96P5i5`D2C}cEDJhaY| zF_Bz*C!p5L2v9#y!KTx>IkA~zSbT=-jC+A4UJ+?!y-96@kf^i8mqQrrUMx@UEUoZp2mS zfCsOEj{~DpqR|Dlm_)|Gc7k1?lbo+=y;N8s_aA7Wf%ubGBG@?Jt?ey!5nMoeSp#Vo z&no1DiLj8=J{9lr+{c@Bu9z@GtFHSnWnj9=X^S!KdOMI2%p8Z) z4_09`H@KRpcn1^?`wV2g0A5T}M_fINr5pcq(Lq2RbNp${J#mMbP%jcVX-d@tVWw>A zGy1mH1L46&5Tupi;}|mLp&a%nuS1AXmgeKr5yA5DV7zzok+5!jWV*?>bmQYQh=qJg zpD!8`iaRF~Mv{+9z{h_|n~{mvvRA{g@RpCbz&=hRWTz|Z5Xppj)PdtWGJZMdCbVx{ zc8#FPH(JW1KIyaTkR_py^B(+X+XfoN;Ye*9Qqf_2$L+az=)~|dI|0w?1RM%L;=et{ z+>H#N;bC5M|97>%u-PofhRA1b;|Jij(w1`soLKyV6RQ{H;K_YTMKXp(7q<#SBlXLa zP|+l4|m(v`E6N>=NfZZfA_;8#7s#Ewy z9Vfm|MWRPe4_^nb4@PEYcAl~t>#vkfgRk7K8z2GdPhqPT+$sxZPLY&gZ-Fj*xE1s_ zak8|mfp`x-gp-e<98zRl@XV6ymn}XnF;*ZS03HQ3Z3^C6p{f_<$;+K{-(y{1XvP{A2jZrD%vWn%^A#>>mN-UG_s#_CtrX%kDkYP`g$B+&B_Ky^%4A>dJcZI@jMrA z>gg4rh#LCIM*Bo?T0k;G(Eg?eJLK!^dd2Ce@}c_Av?pSY_1|wm&-bN0dC`#w$Zfnh zZb&Q8kobjza$9B0Z8^&@Gf9DFtR!J!ycrEYy#VMG8n1sTsuyuY6v)e$nzi z``YLgca|I~1T+uDXx!FE*_^wyNAg757VjCbl+i+5+^;NI2xL{Ve7`kF5+>Ni(*^W#juYclHC-fsE1G zfXrb#$h(X8^|+?JR)Bl-lPE0??Uq6p#j|uPuu2)E9V_*<4XwPkaAL4uU=rn(do3}K zK|6&N1x>-K4sdphvcT#qp+DAFF7=!}_ebbj3wEsc#z7{fOmqa4CUK4TH0$PdIVTGU zn@G)1`VLx(^FuAKNj!%hYDug;pVJI1#N3+G1{-yv$Hbg4F{uh+y^}Rd)OC+?7MzD% z$GKPYpm@Q1Cr5|l7Azu?Yssv5l^e6+)Gf@{bLB=CJN4nhY91XvP|8RAXfVt9Cg>19{`ug2wp|D z@?J22K~$f#Paf~PYpwo9Qs=wu*EORV6u1vWuSkY+kCr#Z(6d36q4 zw$(W}({xUCjz)!tTpZv7)q$}e>@=4^M9ika>fqQ{Q*4?|HqEY8bKvGg%qIY5TRzPe zK4l`L()VK_1*^K+ul1^Q;%hycCVlmDt8>AwgCGdn4&W6ZsKGa0gN>SZ1|aYEsk~Dk zC=Z5LPreo6$5u$eYstyHjeco46*u?{9MK<8^S(qnwwH z<1q_0#4)D?D|s-!R_;Q%af45jT=*YGI57wLp~C^Aswxm|)x(7GZr+9l3JxY%e96oN z%3T_9L>@MteDHDuIghwIx`jaJhU_BQaZwozabA)DXiz>Z*@(s-q(!}r3$b0c>Crtb zl$w12bAfS`^#i>=T1&N83ytF}tHtp~|H)KVJVy_WadbC82WE4OSW_CE>TJj|?)Z_j zF#D_hV-H~w3Og1#I2lJ1>Pg1~RftDb`z($vOrIs0i~d&9N1?>E2+-2w(h;hCI~!?a z46nTBK%N%ru8sc9v}0sW=19chzm%mjjxZNTb4M@WOL{i@_)fs{I{_yE5RbWxeM5Z4 zzRA;f;@mHC?nNgeAT~{4I~{6FlS)DC67ZQB;!ZG}(~gV4^|OR8Ya=qaR#JPokc<(& z3PIDFmO~Ixc_hK!9LIgHIR`4<+WrhwTjMM=PB&z+hgXaB7SM1rw5P@aDL)3sv8G;_ zE-q)PzF5rI{{ISSi|zj}<3m!gzI=yW$2Rf?&7a8Beg|V1No zDFXo!0?9BA)kwCQn8147Sk52*uar|1|>3&t}QgeN)`_9`50QQV-#7H zU{;?1|9`$_L+^D|+gKM1B>E=rT#7ulzn4HfvsC; z-@x86TsO;Mmf*e%EaI_CO;%v`0-e3IPg)X8z9XEtwoq~6?hG}N{eeD|q1uDfbtj7a znKlgQllv#DeXuWJdZf$1D+N&ovdPDY$7&+xPYTUgpeIADrpK`uve>L-t|JsZvVq0G zzr=2kI*v}F7V;)P1G6nD($4!1$VK9~vp!~HgD`H~kEi?xg5$-sv18vI&KrVk|H#-VYmhMZ!5H@meK3@C zal(}8MiCFpnTW~{|Wo#`K1a26!2R;}<;)`hm zB#{1ZQTmPgAAf`)QGpBV+hDE6V@kqgAC!ct_ZO=d=Q3P z%B)qak=&4#5?|#(-qi;cs6*m2!ALZO@6rB}`pU@~Kkk+>!T1r5S zHWn9l4N4`iMN*2=RLZ#NcnYD+T_k0NJ*=_y(h(eCzZ=Ab!iUvhECP=C51D6S`cxl( zxUp4E`qwy6`M8~V?3+uMVqt!8PpT}Ooc)LTz(sC0NO2{v)|uiVszs**ts9d0;3yx~ zU&~cG)Keq_L44RCK)V#W-nGzJT&J9)uwXC)Z|V@I3HS-Le4x^PK&n{<(pI@PO~(OJ z2Wn9EZ-F2gKMJ|!>DWZmkNULRsjZfFc4}_fRTc1XXbC!-kWrj}B z(Qo-oq|vq4uGADgkE|7BjfMd?faMRW2^*|>#Ro}5Fa&)BvVoi&uN`*f9_LSx2CO}1 z9b0_XlPPtqo=m=qCsWYHo=nP7-r*XKpQs%p8dI_1PKj|59p6JMOxiTvPL;w+O!i}| z4%~R8s$IAt5hNA~y#yB>rfLPvgfeAxuuZ7d=QNjPYd5Xpx?;f@11Yg)-BF~NrIbL3 zGUAY~3n&RPK$1E|oJp7G9b3GHhkW4L%%gbjr8LMo>q8VK28n2wr{dkHNa7F$c^}0_ zoY;H1-eB+(wh4}{J?8}ALLZyV(TiySX9rz&&^`-gj-;X6EjlMi=;}o!mYm5O!7|SI zdC`lIC#LpajEB`}sku9bstNEk)LUs7EisW3ZC8118adXY7DVYzMRu*_Z+B>l-7>=TyyROD&=jUYWso6A3V-q-H}KkiuvYZoK+qIg&{)9qf)TCP~GAb|%E_EW{m!k;!Ml zo)#+(v%?(jx#K0lO#9b3tsB0KX|P?APrvm)(EM>in7P^5ur3P`k;`-wU1>OWLlZ?z z&rCe}(MFF0HLTvcam%AbTAZ^1)F3zHJG7HLtf!eGrJ&X|(wh%P>j83_3lz#yz(Gg4 z4!zMbFUJ0INlglI*-#In(j^YFK{$e}7>5M5y6ZQ?Veu(1ZXaN#jZNJxnGuRnqrx zLPrp>?}0Zr?sq%~(}-sOXYeX@-JPJBl%z|@8oP|usf!c410=_VUZbvKTjw_tZc%zpuD*L-XeB; zUhc$roA&V}3a)ToBuG1&#Xu!foRW*ivg1%DCNxuM9L zfX*7Xi3wwNYT0T&Zb-R~vvX)~dd?B33-sSyw`A&q+RF`D$5I!3k-FduY<~u`3r9(C zG7pT?M@a{?Uz2wmnLE7m&Z~g;t`uIZrN;!DIoX2q!Db;v8Hup3PSBcMxsZaDqB*l; zmNrubRW@^&2ZKC4LM&Y&03rr!SG};P1$G)^?}jS@owKj~UEbLUn%Jkpf^GDt3`I9& zTLiyYD9pwOzmZl45||$j?D&I9scAPj!l)(`IZaM#Fb?|xK2bN6d84NEL!&AUzVlAZ zQT=)7*!ahPFOqf+iD+aVvz0oK6J8L$*PU zV#|-A9kVCFA8pA+n^~#S5B;TRL0_T6T=_NdGm%v3w6H2B-AFUCil|mDrB_1@n)b|g z5M0K-10eDPYP#`?4daW>7{EPmqS6My3HB=NOxVd`zun|@NFiN~2AMu++TdaAYN=Xo zT`irGWQCi4BmEK`FEEp_$p>nbogBT#2EDed>WKS zAM>v1_=>AKJDyHuuUu(Qvs0Gw3Isd&Jtd%Irp;vdE)bR9obxkOInSF%ek`x9or*h4 z;p+cOJts?uo>TRZw!Q$KbI1_g1ZYTVd4f>3TWCUQx3of?=I(%+o)@Y_2LIjqUD1(w z=P;C6``zHL;0`w5nhM2+%J`Z{t!d3{%=4PFeA7dzL`&C1(FP;gHytqpCsgTcD4V{n z8;Es?N-E2sXmM7QRsF=5ht^Nw#hO;<@6>VV?6BC&p8$cMg-Oiia(+QmI-)GuSUPl)Y< zxfeI2G1QnnO*2Gau?yNCJ|hn5OM?13f_jsn-j1N2B&Y{LNn6%7$((9%N^r7dNkPV2 zw2k%#{n8(}A;m%mR=XO35d*1RxXG5KeRBM&ZNZiE$7H^#9$kX;i5oY1B|pua(#3oa z`8#X}Z?J^lMr0h>Dk7XctLlv)4A4C67__ff8&Nxc}tYSF8R zrWU;#k9Y)B_E%nom}UrMCyX&Q?1m(RK0Gvzqp>zY0T#@u)W zwZN_{9ozKB-*>PA!eTQ>?L@SbntOIBeqt5Vp@NMEA&Zxudv=}F*p-1gcKrpI+A(%5 zpn&4H>ptJiYB7BColn3Y_H**h)Ytasj+tzHJ9Ebr1+;_b&`J=o5bE8KHHkvA{_M02 z`bzl>Jd{}L$bjZ6i1o!DmDM*g3;)JVtdJoiIf3xiO#o7ByMSqgvzJF@kckR_Pezbh ztcI>2N1mHF3Y%|W+a;f_j}gv>SGmZE1*zuY>cE#ypqPuoRrVnQsLZju6}Q4-o{%*Z zJF?Zd+6-rG^h^wmXvcy~WNtyd6{V&ig3X58D#$jfNQzDw)7N?sWJBj+bMwZh8$+jU z7y;y8XRTfD<%R(0KMmjia@LMx6Yu!+Fut(phF{aNq-L$o+g=SFJa63NTAD4n{1D!- zkOpt{aSw}f@ZxRVqU%pafn8+Lo4;q-Tezq1K_i$sX}V~x2kA0F@yA#>EQMcaelW<& z;h4sC#O4AXv%vN`Br&gV=IeYxlF~$15Nb5hmC3s*muor!S9JoWI{{aB0^ZOGcw;Bv z+D^cm2*?FnrY|ND#RpxvFz@f@d%y z3KK6`>-*z`4mV^(<+}1TdOZM&DfYO86>|5E&s0UxR)05#g(!Q&feelnJKK~*CBq&VCS$zv3if`tdas2kWgu*l9dWiH^M zpw)sUqPX-!6U|67^%}&qIzZ%Akn;c&7t8cmGr{ga1HO~AIBUwfRn;Inm0!9LhP20A z*blv>m2Utu9rlW}F`0y2A&Iw(?qwaPPLrFi(vDZZRl|7oDM-eQtA4ylU$FR^1a1Z@ z(i9V+Suv|W_Ek%~P^~x&@hfN$)G)^%U6}<7jauAy+zLFmkMEFtUOjqe(Uv z315#PBHR4fTsLH<3RLl%Xd*BH_PT{yu@o$jR<5b2j8+~ACCSCZF&o){+Ly7V4~a*U zlZ7MNAXJh~TcQd!!jMO={dAdDWLbg+V^`BSCkFBzyzff~kN1Ns+|Vff`NwzxImL=O zR12}lQjt{))8kwWf=Lfbs4LoyR;4VLiK|{{Gp$Q4^x8lPv&|&0T7qRE;*VS5wOMet z3am`5nx$we`+ySbQOE8yQtyUTvCtjTvUU2gwU`A(K?oZksH_-+!m{6Kjn&CgqY}C> zGF1<226}2(PO@JIUw6nyv&N*_gA#CY$>;JpFc!n|m2U!dXjj#Qxz#LltIFIe_yCW2 zin&)*g>4R<`DVx)4RHU$MHc#o<=Kjh>rX)k3IrwFB^w3o zkb1SwUg&oALOOGsk(Y@9>^7`c)K>AG&8QmjD??rI+$S;-+L) zM*lHEGkcA!#_bSg&Ud>wo8}736P|r%_V0)uGy8WEoo4p$1jA^D*uNvqQTOk_exO6i z`dFlHWKJV(n{XVbwz@)T_w>auBb+7yZTrm#GwU_PkWkl<5eNGr=9c{s4%m;_5Mu%C z_90c~$(J$Gp!BzIqS43x2x$2=`;y69(NC0V@?ar*yQkuu-NL^A@)Dkf@3$BHH2%iG zyV1X_w=}%xFiuHp{6Fk{37lM2mHx|nRqxf-oqnlMRozLtI)M(4R62y9*hB?fSOi2x z#qMOF(;?^(h0<=&k(%nsxNqP@X~)T6t8qm{#eKs;QBZW8h>AOc+qm!B%&7do@0@$z zdsST>0;A6V=S=v~_3n1=x#ymH?z!ild+)%e(Z=?CePq){hBj|HmOm$L+S)k9pZOMe zR-rV;{h1#op$-1bFO$$}f97{dsNbK-?2pTVW2m51Cu`9pob!u3r!ZURlqNVuPef#M zHNv=Gs5y*Z9uvZRH1Bm&Rfln_+>+TsCNzTp~4OAz;X6af3KgkhnldYKxfr_MWHu~@fHz^EgEigEN3T6 zlaxNsY--y$0dNk%wvp2DrEGkz4{hd{fzOFk75^(QItG;{V=QoXBJDPs#CU8;{dRRh zMK>Saud(;#%i0L7JDshQYr-XECPqwjO z3hGZ%)pVE;4W?HuNNeh5Z5rX2?J}Xo{ZWsRS7b?4KtawfjG0adpc;}%GS+v+n)qg% zt$_0)(OU}*UirpC(hFvuu1?%q%AJklM&`yV2%?w_kUC?ZlD=`B?*q;)5X-QlUqdA7 zH63nmmVogLxHcVlHv`?bnEws==(RB;ndQ1;3>CE{ ze>5(y>upmWY}uo{WY+7FWz6WvX~KM80B=bj7iYdqh}RJ#SX^F1oHOm$;z!!uAu||j zWJbptoAEj(&wNeSnDm|RLeBkIdHQuMk4pFpGQJl-vG`&DLq|&%#cfvHU(|Q@95mUG&+hZQg$0Z=4674o80D6?BAByYEO|%YbtyTp z9@m#c(KX&GFOOjcw0Y1;g^Oo)PBqXoqHc>+_iRX+66R#zQ}1#*uwXuh6s@#^-${A(Hk826b@H>j{dV*F4*uE>dS^QDE(R1ix5Y6V;~3|E zk7OYquse9>QuG@}fO`Ca3F;)uG1?@3=T5NYPssD8LSEVdw`WMqN&K%WJbfC;978*? z-&0@CG%JyCXc94d>nBbX@oQp7ZUE3J9;c-E*+`2AKg7`q)CTiIi+X~su@5KcMNA3P zXx2*JOcT5dgM^M7O6v^G6^yJ8;6Q6W%UtkAwN z^TW?r-%8Wj=p=xdK*g*@J6*PL(*Df`2Th&S(Jt(vER{yu4m2Hh080wnZ6Iz7CA|@y zNs0hA1!D7b=|Dw;`Jt&De*n}$5i+ItORh&Cp^quwQhCAn=n)2pC<6jlql{#rQ<%)T zDtUP2nC!_a)X>+=bao&yQvNEM0q*3QVvV^(jItL~ByK@FB;1fo@g<5{pN$bgFDm{8&u2G{vYXt-YcX9>=`NuL8h`J&Q1#1*4!4lwP67!@dY!dEtbDNr#`LPW{uV?r&=Ths;(R>)YBQVwrI&)}@8B0}kuI@*vA4Q*|FILIjI9QEP zpF9tFPNO^!7wh!2$nWNdF(Xzdn>XV}?wU`{lk_T&^T-Vn1%K=V8s{Y?TWpI$)x5-4@X;?r|^$(s+s%H6w#l5&9WR*xARBAazxj)T2R7?zenjgz4i}NxDOdLCn2qUNjxPLGFWU$e> zObVu10l1QBL=>Q_ga#i04Y2;B?B*ads{_%T%(ssI=E-CWKp<2TIJhR^wx~nI<;eUd z&|8yGQfn4^=s>2c0u0oQUI9tJv{s?*c{ti5|Fn9~_JK+;Vq{}frZ67kO@3@2sJg=_ z&1?CE_Nrf`br#o;&H`D|D#&w@ry5KS?t}_<{;fFJXjW{r>5L#v*K3}r30nWNWe1zX_i$6MHf2cd+ zU%Df1Km_}=gLetDmu-OY+Se=5*Z0g`CuKYBbscx$eH5_cJ1};F3E}gv9(vOV2sSry zNq8gjxh*yf9l_?9AG;KDTT+wtgULGZ4|IMl^2uwnl0zAS1m7_Pg^*IK8cP>>h%rOg z5L6%>u-!wDDL`8@EFOaAaR_QV?6{LTkPl&4`(}$Bm!UCGNQ3zD=A45|zMS8%tsoJ( zVCiuqsY{F-B{6gGrugIE1>itOSVy4NCV8s|9EG%!+GMl?7?1W{m4}Z(lC8>Y)d^(8 z(o?g-!y%QG9ToQ>+hfLO4a0+n)d(ugNNv0vN?i*WkpM|Kca{t4AQm5yS=71sODogW5^{Wn-C6l#;LNU~H}-0}<|xDd8K=rD2yzIWNAmyPQHB6e}gZTA+O59 z+n|FtQQM*OC9d)9#h1T4IA4OyWjv>Zfm|+f2~B!nW+Ud=8F?&KEdMy$ z$P04y5(B5sS{X2Keoxl9x>VyG949^hns3q*vPwuiM)ZM$)um$q0ClXx0N_7c|3 z+!2EbCVK+XTPLg|A5`xa8wGzqItiMacHO4jfnesZ)ZQPnsxGnVb@x=4kg}b+gzvl< z9Q>a$&kGuEiyebmmfc|$zoK4nMY{u|19Nscx!!@Xq$7?F+@=t&xUkTG^wI^$mNgn_ z*BIDuBC*aE8#&I6V{L+aWm)kR7n+UY+d&q=#BRQ`tALilPCL#DYH66NE?cqSik=SH z)xHG<4E=bo=6|t`(JWG6iH27emYQ^9WUiwXD~G+AkRSU_O?m5b((7l+5phgUs+ zU>R&7yt)p!j~&3X*U?j%WkXWuCzCp{CGK3q^_8N-vkXjCs5mU5MX7&eoF^jh?}*6GHLL~o9@Y+= zaK&r%J|-(9%`Xv>pZ2OWelG5LdS^%Wil-5jCEDgRuFU_z?)(y=a&5%IcZIDA+MPul zn-Tu-UDK0-?%;eMHW%O+4^K{LOz^oJe;zVAUYMIN=jkSS zAzat$_4A<{59Snm7q4SFX=nvYqm!WMhD^_-wD!bXT#x67^^D=24coqlqPdp!n;Vhbx%>m=7 z=~5n>nN!n!LH$G`of8yKG$`gQuPB+_d8;vc7DnUn`FP0g#T-GSXZWV^kAWDFamF#JdA;b_n%V1>nKpU2x|qDf(Q}YD z0Xz3;jAOrE+ciH8$jr-n6z;GWJ(rndupOC+FZkcNE9Q|3I%$F3RRp_$tOy1>OhgS4 zwRFTFA_kKP^%PhH6Z>pwm|izbuN$V<17_CQ0X#A2XrG!d)JHtL?pE^7 zC4;fV<$$z_RkXWf75C0qbLOg7UAV1nQC*lKJIj|ayb5?suR9iXWv~fMTw}aUT^V^J zMC@LbLbuV2Hn%Q2*r7-9{G2?EdA0Hc?Q3ESaaKi7#MBH80kgH+7<7jt+_3JqnMt$yy8Vs; zPWgKd;4UN2>O7Ar6k91~R)=1Q?U5k*M_@wt7QzTp73plxJ-XCP55?p|@ieb>;Cuu4 zhT}p&$Yuu)e~PC+uzZM#hvJg}hjWAK7*?6kvN=Vbw%*Z#LO_L|)p_tk&;&fK=QBVR znk`J`s1=)LnC@4#8R;~j5govXCtKjC-gm~Ihl0?7@GiRFW}4e#R?OOnznnDPZ({aU zbV`rIGWTnj?603xY8;KWNZEb4+{C`-d$^xN0Dbvr52+ZZ=J(@_{rPaV(mTPa9(@$^ z-S}@oE2oC@3sX)NddJD8M3~(d`YCwasZ&@?3HC)VOrT3%7!<yxb@fgqQvW?~HqxO@%Kr&P5~Bl}X!RpBL=iSMu#3&2fg1R>3tD(q`RKE#FX5vRH|20F#cc4)CFN`D(Q+z znBNx`(qLsBO)QvFjG5ZT6vE;}SVA>Lthr$n3Jc&~>Sa)Ppyi0sh%<_?(>#whjN;yd z5pXo!n%u_UA_~mL)A~=0QRwUqRBTy$7>5SP)>?ZFY#pX?#qj{k))qfF909oyG=T3B z*_t=PU+*~MPQuqbcbMku`tsuVt4SWMCD_nyIHNL7I~@>4*c8an^p1H_2I zn+A4IZ0n=YnqHjcD(%nXN92h5!<+phmKHmJETYbX zU+mQ?mY7iW)Qo^)kO8{x5!u$=YVfN)2W5IEg*w=_Z_{Qsy^RUTXIJ)k;0qL{DIz*b-sZ1 zm^_W&@Ouw6Ozf~ty!~>ZCa@YpeW@7fjG>?tNGvf&LLp?N-3&SYkg*f{5 zvuUpBrq15dt|KMb`^IQu`Grx&=E8k7>1F-F){s7kq`j^5RG$Iq-=6!yUjsN{=dbc3 z&CXxyj`(tS#8(g@bbc=A>~qdaZ8~i{zsm_9J49}aK#c)!t=u9YwV3FRO<#M>05gD_ zwV=`>ea*nzbQG}}$tDulSgE~RCaMii@3m)B@6FyV%bBt0J6}SZ?cOaD;ytKh*A?}W zXt$t>9XHeq@mr)TT1aYI177NedPXnaxg}7$b1VJQVvK8HF^c47WO~~~vv#CvCTp2v z0kdoS9B`NR4)a&+TQEXQwcSCAwNg#+4E7tgx!!PEEWb;|a%XfVGSSDu%AZ|nL!txi z25r-FS?>y5B$s78t9ANzpa?j#Z$ee=I~nNDw7JCCs5IXSxa$p8 zs7-KmTP!W|njcnP`_89O|7})YLk@S!>$thFO+sR`=wvCIQ+w#fS&^awUy^dl0`N{- z0;>t$B1<6I9Hn-SQu}Z|E6@BCR!IXUirsRXCq_QoRbwKz1?q(M1m!kXE{?q4mg+O? z$gw{=qr2|{lyiWUGTF9odm#thje8H%c zzXMT2r}8Hymx-2XlL)R2rzZ+b^dVN_C{K9~eQ92Ece)9VNOON+c$?VAhn<Y-d}{`c2NN*LYGN9S zJ`AMVKVnw5#UG9MF}^VGd8i1=N$AYi*C|xUCR**O>*rg*1Y)Oc9#JfSLOGjjGj=&V= z-LfXp5tG^ySwp0tBl1Ud7s?uWn^8N>>WEDD_52b@!Y+cp?uavc4weFjMAD4tF^GV$ zVAmCST{DFZ>&+VzV$kt2BhjY*BU@6Rw|v6_VWJ}q*R@O-OYg9@HG{yOok~M6B zX;b1`wah7^y|N~m*#_nkwz0)X-EGi39hBLH7CIEuCyp9^w&^$w3|m2$tbNI+^;skqU{f#A$ls7$=P>^1PL z5yi9?jL@GUoW-rA{H5(wQ1Y7JCK4tY{>GY2-E$Uo%Q}tyN31%W;O`!R=m3YgR-;4% zcPNbvPLAPv#yVR|+&dX7xAbdxKHUW!kUy{)F)b}=M3UM|ZQA&l*g(ZPVLRDG<$&!bsMdI^L zIeaP3_!!=n!vcl)-bj3NX0oTvj{Cv1NS zu(Q7B;|88A-on#^ZQNW!Gs!`+ef3q5&p!8|^o+BTz|x(EOtEmnvC8AnedcL2Q>&qZ zE2tRcG+0AshZ(S{{Zvf1;me-{ z*57Chesz~VFoG{jXGkJiU^7)OxwO`;yKbIkx!oa)q?Qz$hhOT7@ zT|0=@x-B-rSU!U05Td{WkUy9@6}`q+Z>pOhMR8r$kH`Z7KLJ$&B12PmNxELwU6QWXahIfv z147ANlCIZvm!yZQC~?^WE{^0Kl-L56FZkf{E=lNwdY5F@c@WwO8xD4fanRbl1C9GO zDpcb!W(&LuD8!W;c$aj<V-2b{ zrXgIY>$W&3ZH;b=BN{wjlf@LFlX;q(Xl?Bn+szezOFI}xg$kAu0(N!)xOjFq~Ol3}X7=|~R!EWkmNuoWl z&CnkB!}-T|-j8ONNh8^%kj5)zL`P!2Kz1qk1(pXt;2=+mAkc(`AUsaIxRYrxJa{L= z<3>B#0O?B`+zXO|~>djMR#emj=aF*$!m0RgK`*V@wmb#RSF1NmV60 z(Mex(wbAQM@usk%MXg7E8DDEbC%dkIhnscn&gkJ$tSLNMPJDaAS&2z{WrXD=wd7P> z#>VM>y2-#X<~ehy14`z>_tU*g*LuQxR=c|agRpa}eFZ3it@bj1xN2U>kF@=Hd3VGB zBP#6>Kf)Jj{i$$uqCeqnK8)kTWE@8U8>gz;SidJn63{U~OI+MBBdtS8#Vl6n%q*e< zACF0u&1xXIVh8pPF^83CEucpegg#u^a+TrPpF(LVy18NfY9B_VgLVZ!PU9iWUPE>$ zDjPQ}nH}%in9^DdYpttOSej*u-1D#w{6R`q16{DlnF@WM@;)3=4qjrnIm|HzLp#bq z<9|TX%Xs8Ejs6m5ZBI(OEt1{n7u*b&ev?QH4)#%ETV{UbkbZJo49OhE54+C4yZtOe zSM#jwXR+v_{Vahm;FJBVC9snHECT7?&tiTW?ve%^Y(FchF`38(>V$G5={5?UtLWU3 zG{S9>zhQ~QT(Mba_!MD71d| zHY}=Pw{u%$)#j(U#Kwdqgt7Fw6_M)$+`vqJJV+LkpM)h(S#3eaphlT@e(2ReLZDXu zq%7KOu`-$QYWRp-)ro$PDR8Em#^SJjBm$gJCn867FBT{5w=8QLWZ13nW?aRwRE#yU{ z4B!llHSVz>g-LPdeJE%IlPp1DdKa1FM@7msH(J3T$o;JIV(?y#_`rl|*3=?miZefm zfheLIS7bJpK<{{CunIXSlB76u)HQL1mFQ+jj{j0@^3aR{P>$h&S}ixU&^%aaf@u!Gf!^r&bE&yBZ zOtps@bXzRHYFoRmAr?evL_;ir&{_?#07B~+GX0=e%oH6Q%Bc^OvrgkUd-aqY_t0!r zT>W1k5K(P!En_ccaL&R=GY1bG!f%nSZy!$Z3}PiI5l7gFVG}WGBkCm+vmP@} zYOn)Lo1`)tsaQZ|;N-b8w*%apq%s<*V@w_1g{t_ajTDUluBNnN0 zpeZOiK*x2(pwpEp=yYWYI;pIjgG9JUxM50|EX3u4;H?QzD$Lph@)sPJvy$Mup>Gq| zyh=-XML+IEG_BlT3R1C*wd0bCK202&&3MCH$ANiDNnOpLi@x!pe!(gW5WwPXx zpq4iIOi3j=lO>-a0mCMrDXD$TWaLZHg)t_lDSK!wk*2P~atYwdSu@o^4zV;I&4E#q z@qvPdL?XI~FR@>6yiVgGn}{Cb`|=W>*LWDPhz#N>6f%=k6YBL{RovzuW*?8yU^>~K z0^>~WNK3HLpTZG7#2GqDz5Y~A;tb8CPJaq-?;@X}kJRT+aSB7Ekiv`$0;&(~+;Oqn z;w*PDnNga#dY3k888n9 zatD*1`!nhx?}mIDaCegnI2w3})I#AY;TGIKM=-TqN% z)XXhTT>D3BGhdR}LAS-i8XIkfaw}K>2K9n?Z(vwsxh8)C(pJfs7BwKP%mx+ba`nc$iC`e3hlu7hUWEOW!%;*MM-CkXhRx zPR2GK0K2WJ2qRHM_lZ+G6>ONj05_lRG7U8C2z_a9j0sigvG+I5SP~cD$l9O>fy)Jp zFc0F$#fXc@lOWDBw$~WH!Hn}yz`7+os;J>8KY{WBG+=0ZKxvTX-$F05eg4riua8Yx1x-FHtEwbL)i<-MGo}Ov$nr^dl zn|FHVf{QPB!qcA=<0^S)FSz9CJ9k}h$#k2j^&YTdFMEjAEOnDI*ujv&tZh=-8X!7S z4H;ZR2U1wkR9&BYkZV*IChnLrh%DHdl*EKUbmVmQdD!roDCF`JCHSgDBcM$&kGlr> z(HHpB#e8nM&##Y2L?IVUl>9udo~ws8>tQBq4q5%_K8Q_;D8-v&F!aer#6RM`T_Izj zbjxX{=7ln#LB^>8=V8Ga-2?X7>3hoO1?|dhiD=8rK64%9!UNEX4ZD-*79(b#6({MK zJ_B$&W!|G8XGG>PfAa;%ZyfYHM4u!+Kb4r0fRxYA1l+pHy7%d(E;p87p<@Wfx`)I| zX$X(HGm9I`{geqm+K6y-3;rN4HfNszq!xL__{|e!9~c+((b3^XC47nv!`6MJf|K!3?u6%Mn)67tvOaL0j`h|E z+g~k?e-(0*RLOh_{!RpO4vDlmnC7-l?#v;P zHV4z()OCgI| zXu(l2mDZRD3+~{Q4|Bv`Rc0mjK^kUeir04NUTPgI=(R&?_0#W^c@Q#bVCMYJ za^^Cn_Jh%-Zi|06uGU|8z;6ldr}ml42MN&g0P}$^Flu3JKZIbk-IybM2k*)_>tv3o zs1zBIgX`0@#FFlKUWwZb{Pgjvuc|GQNA{b(1y`QSdhsomO3Dr%y)e)1WDA97vtZdo z@FsX@9h^75$Cg#m=B<~ae|Zf48K}4yN@3RGgw+xZr9F{~Gtqb8VM{rY|)m+4Q9*BtM?^{vszNXq`%bvWL>b#-#e9hma3? zPe^txdq0euFK`POZY&tI@|0rwI3(C=1=nl1Z?d_WjH;ZaZztOE7uYDR?!EF{@MP}L$BRj5apMf7Ii+Cu3xVt*rKAjO(Msttz_f*l` z7V{fJoB6QjPn%a|DL?LB>D9OLBHE#M;z-s&*K?2kUpr{{}Glk25<5 zfO)C45gD+}lcW~_6q<|$>Q|sBY5lT3a^=o0?!y`=P4IYOBYK_0L|OEDfi^bGcZ>7l zS`W#q$fWbC9ZcZHE6k8pDL^K)W8vB;8{9Dxn%ZWh&R>nCV zuqcO-i}(T&&~p{NIpIDnh%lPyinkW&XYm)lvhutEIEDujI8;8QxT)HdZDK(4v1+@v zHsuIcct^QKZJ}Iyr_;$V2TNZD(B0|qEo1ux{#1|h>2%kY=VD%3+Vlk5b4++K=LlS3 zE)awEF0SuWFtNVREQXpDsA*Pv6xt6~JDWe*_M`D5@RX;9)R&QohNn8>ncKv7@ET#J zc#Xw-@EW7ZYv*J50C($*%<-DyHNvvImH_JJHKu^qc6Ng5<~8EmgVz{MbPXbI%i_Nj zuO)EEYf{`)ZOSgeYtk0Vscv2|ye8=f;WbG=2(L-{L3mBlJ9v#TUW(TkUd(G!ZV6r! z2wl9UP#5#sV*nkz_E`R8+vngX#cRhYuQ9QM*GxQf_u@6eOz|3v_uw@~lh-cpWRNai zBP`2n37~FXV+wffqE1lVyheO`@EW6uu0h0YS^SscwFC}%O^TbUP1z-QP1V1=8yTk4c|`Ve%__8*Zi0xhmoJ5J~!X|L7ac3 z$qJKh{w>y|t8-Mx+)QK)4`-ccLBBjo@VVl`>?F?P8PBS73E@aE*Jat=m|s~&9Epqm zS}4VMRSniL*LYT49@pjvyC!++q05GHzv)dw#z~(e@@nn-J%2*WTk1cA_@Fbr&uk-RJ zZoFu@8Mh$0&PmQvIt}R1NHBhpP?I!?xx4uGdLT>*x0_3Bt z^H`8b_kml?;qh)*S3U&?c!2HFRq@0;tftH|!l#ctdZVG})Wkftwlo@sPR~Y8By&R6 zp%G~Vc>`Df@IH%+`IHt>z=eSWc=!+}NZ`{P%|SG2d~SYvdcgHuTsfV@RZ$hPJGmNN z2;c^V?aZ6eu>@2P0SOzHnT0G2G~R;8z&tVsHJEFxx9IakK4)cb1SmPq+<8Po@vlgG zbuBkHmBdSQI&DWf4Wvk?O{dei1HomNfqAZ`NxSPSG?IPbIk@uI!E;OEmk9d640sl< zPvFU}Q71pV6Zg>V=tHwci)aYBgpQB!-Y$YAxI>B|z-y3ss_THEpScV*k6RYyT7mis zvwC}jj^nKJ5FmytH$!K&aKvb3ZaeXtUl^^*R~271`KsY-P`(E7H6&j{_*x}jtL7JQ z1abT-lC#pM_Ch~DU(WbA=rj*hO%I`~%b6qq!IUF%HTw90i?)J7eEPYz@poSj6_4{zN*Vv;Qdc%v;$r7z1fHnm4e3q)LGddKO!o>7Ko_ zvu9`9KrZ9C(X)tT7D#4Aj(dV5(6l1#z|Ho&^&ZMHGuMqCc)$>-%467jD1t>KtIRv_ zsW^obK|1BkIE7O|I_1-G3MYbe$`9h|ISp)B??x|VS2`OuU~+qrehO{>1vsny&ucyp z4A~ybasq5VAKz;xaL8v9!!7>Z2=#}*^~1!}hK?xV9_5c;$@(l{5p4?f-Hxr zEsS`|$fGfkO~L_wF3|mG2)ZT2AB|qoa(s{B(%@(XJ}_os4aO^d|ElIu&}=nFsM2hW ze##uV4fUvv#fwH5ug#)~jPL*D%r9IItU<=zE z)Z;ow+xFz8-QbD&DMFJj-T4dY>eg>AvmnY$Q~(0-ZL9A-fu zf=|K>}<93{MZ(Yz8LefePaMC8c@v*Y-g{QwR`#z(@17P#lmIfih(=CR1Z#|}La zefM|#8ZQ2A9D@Nf+sNS}N<4A&T>MhOj^2t#6?y+O1tli~Oez5`1%5uDIgNjvyUBwO zj@R4*h@~7MQlA}g=01k_9Iga^3gEzjq`4Ux`tlg(#sk)CZeom+7YNO#u{s)bo5$e` z=#=;hNSMh)uYkFbimM`0QbhPTdfx&zA? zD$d}9zzwe49sNDXuwQqKFs5WP@>^hf%E%ZY*@PNcBqOQ&v6=O zK#9)GZUhjVJd=)iS-_c`82aeCjq@bkVBAa)jDHw0PB8aWPyv^tH=hWw&6Dv5{D*stmkEoVh*@XwTrv}m{4tV80*-QO zVR0KYjlLl4)AkB>ML5OwP0U>?0Ixi^3^#(gOB6caBk6BE5DH4ze=j~goA6c!G-$P=};pLgk9@2X5L;PYFNIyhZaUimbF?2}q(-knJw?B{9npUC zT>K59*CMKv^Jo8>A%Au!enejOH5>>M(gFv$o%7_)5+jcajZMzn(@>2oe??w-LX@J4 zNR^OKVzN%qN1=4U%A|h4Qkev|k3w0d8o~8-W)lu?NQsaj*S!Z7}DU zQ)Bu>*C8W#9z+_Lc_AjJnV($;ElV^bYzNK}O|N~K{6z0S-gb-MnfBlEC);l0hwXHo z(=hmMkv-h1Db{=psA0-BAIonk>op(8Zvo&nC-_Y$P(RM$_uuim#TvzSum$%|XaJis zo8ci7r|>o<%-w?dPl)*wuCuy$D%Y_q+!m`Hc@^3$!yBB9xwtsXeNqDElo*2uy%{QYD8ot|n3x195D{!6!E5QB8zt*|S{1(k`$^2sLnB=QY z3N^OVg2nLgb~R{WO-s}+Juf~JZft0?F4ur+a z9q(kE=D_go5TNb-Gj`8^g|qlpU7Y??7p0@7$cP^f;(!@xhE|qd=d_CJxDG%U<6C154hB?!U zpn`KkFcyUa)d_gvZ=1v)HJCVzqEzRqmco4O153d`8G(@z2$NwJKoO-ug@(AU7UK0N zZ4~qrJh3QqWAiMwvL6xsDkrJpsGfuO3`DGGM=I$sbwEm=5JK^eiNY5MaFX2(my=fP zz2>#(n(|6Uge(29GYDjh%*4*&y+DyZ2dTe{`en$f7e~%VIt?x z1|7%AcV2>5rg;LeD|m_IFE%!+><_X=_WPblFPyHWipHlH$o|~p?`#KO zAFpzmj0us<`$vYiLFeX}F69j8#(W*bJYAg(&V^w{3MhB`<2iscyqh;GgM8>KS5`w` z=q?RW@J8i~g!*M(rVW$3Gw8)2I*3yNVj#TsSkuVFb{p;1(#%6)u) zVgf~11QX>I0znios0Cwt!#>kYl?JI|R6ufRu3L_XPaUC^@toXcy11XY- z643(HDc99oLevQC%=#EaIoNKP(tI1aaWEXD@p~v7+PH>^;b5K*YBIy@#W8!XYGD3y znQl1wtt`7*3amzf6eq93nH0;(@<_;!AE7-R&ZjcpZqB>)lQ6Z?%}0p9We0EJG&>abwj7Lq*WufR zdN+lZ4P;(1&OS;)(Sf*@xW9~JUi4hx4N5+|gl{dnesC4^aC)Y=a81Q(k!wjV5TOQs z8QRRu_&(>!(YrZ|7(bQB;B7UVSjF3)n1{URa;g%0z&F6tcaFede1OQQORvFf_o|-B?9V`Ud_RNVe~)ix{ASdJ^&ib5lu#o-L2&b0eB6MKO~*su&5Yc^&*S8i z$(xRCJPNU#|2J)x*ggCllg~T|y=g;Z^V}6HAiWyL&MmCuZ)0w+gb$y)Qhry>y;9=K zbFY%$;>@o&0S^b*#L7kQ2Qm8GoT8g=er=KxJLK=3_&fWwxGhkx#M1Lj zHnPRPTtL&14_~a=CjoSuk$TVU573YYs@x?ZnwJ3#gs-lrOL%)jzZH(G^NT@>9k(nG z{AR+K){PlU2~}{pf5e(~`Sy0V`93tsZAn#6M^!=dS+Ep9sIx~X5V+RE+m$VLC!yjXw8=)vr}kqc&^>sUhUKUpwvc7xa;o{b8y z0(cI8vTabxth+q%GkK8mjbv&`o))t#wn0d&u|dpUjfy&LOxVD89!yx?rC2bU`##|Z zkHSx)J3J=8iy%iw^S*)bkL< znJ{IPz)~jPgaImk96zP{Nx<*H5Stjzpd!RB)R#-~Q{A#WpX*|GTDRQB%Dh^ds3}4K z8-D*FUd{tR987M0g1=yHY#*su2P;d(A3_2dpBAt&uxBcI_Ew}}5XAXr{|yn^NySDj z41(FuFh?*8Lvb9Br?Ry3o{u)7^IpK8Z2N`y5qnn_Z?0huBpu|6K_)c+22x?f+2c6d zv61OjwiLV(nNDOA1hdW9Z8(|bwz~3GdBa|&vSk2L5X9P?%ha~Zd{U(rKKAL1uIURS z?>fVA^t)IUO9HHZo<{7i%H5)PmA5~$fPF}=86NInaZsI*gmNKY!L1aC(AhLBz)1BZ zRM*E?B-sRzy*hzESJt*K$QlENL0M`rt{$oh5Gvc)e(q!n78FfkW@hjmu+$FBj-rQ| zHp%yAOXI&q?_=%aUs)g64joHRc3~>llKr_#*k3`=VAW?pmKcj9n*g;B4+Q3@q2bTI zpt%#Z_+kwbF4}|4yDMfBM z6h-KNQ2V7AbjPvJ=PIyW?b|PU4BKE7Tr?NkGW$fQ370QU0O&pgnyS5^$rVtg`78v> zG&BuhS)}TbD4zq)_+HQnkrp-^$TfrvMpglxpXMcK%I|?X#%y6Ffv{i55ONiU#}29S zXc{M#u@Oxa*xiX@6R3!WiIv1kU`4C4LD?DSE4^s!4pJQR60MmIqi(x}e1Yh8cKaFD^Gf3lDY=Tps@b5m%`^uW_A;#9E?O`p95OB$L1s>{zvYDsFLX-3{>zJ(owRU z)7c~u`Ish+$mheE5c$PKV3&)Ito@;@ghg#MYz`vr1s23T%~BBeKcl!0lahTZ&BJ`R zm|rIe7F>6-5%e@`72)WfhxiWmHwJ-IBJhC|kLry-3ss7Ieq_v7hbo`RS@%Xhle=!| zK9?TWTmFjC#%%zh3Uh!6^JhZ%p!-VpBYH!{eS(3L{F2!3T|BHFc zbDoCreJW*E$`)FHxrXDXh@0L#84Nnl%klwRVBFc(mBTUEM6zoLSYEJY5IMO(&7@qB zrLtmKz{NB6tl@Ik$YAUIHKCl#f&Kv@a~g5z;5@fQZNG};KDhb#D}ZNO-QXrbtf}z0 zIadf=u83J^6V{#lL^YcZYpjLe9BfdMBBF0S-W8Xq=;PpDr%{}_FQ$9lRe_)^VZRx7 ztOn67NbSo7dFGw{9M>f`;ZM0R{=yVCPsehD2XzG-31HnL*g*0m*x)n921n8jHXJL0 z4Wpt@q_L6xl%Cii@9gIjY|zxghUZwr5*}ds1ukxGzX76BeMnX_zqm<{hm1C-~F+HE)P^8fc^> z;h6Y05Un|)e?wzT4kUaN3GFM0Q>Fb6{Bc{vN^IQi7vsy|_iW&II`LDGnN&qInE}(d zwgf;b6SQYj)Jw-2XuKA``5$_(bzD7`&C;++^FNWYUfZUY5v3Uy1;5a9o`Skmyq%Z+ z$P6o5BoKq&_ZP@U;y(BP>zre~cW;r9%sDUrg}V01xNH1O=7>|y}=RNu3=O+vJ#ygM? zwBQw5M`?I~AG|b;$u3P2WADr2)p=URHn|nNJ1+R*yBdGbBmqcUI(tm5QtubJwdPeZ}_W21*G}_NhO=G-X+X~M*^F_B!|C*P`b|Iu@>nL`fMH# zS@&=mf5zV*G7|t3cYn71!n{4}*nSmb;+sM9_B^lzt$k-31nXJK-;5JW8dy}mX(qb;{y7h?ThVE6n7>mCc*c^_ScMLaT-dTg*zRx3Ep*n;%9}jdbA# z)d3qWS6DWihvA^BEOx~!C<~K<=0!=^6UJ`k45QF}aIws}ll9G$+#{|*(x8XG3LG&L zb_Da4-Pm8n!C)z>`(IFPXqTgYZXyQ8KLLiOZoM0>I`x_b1}h!5VVN;eYpJwjBhC6T z(Q_s{{sNS4Jk&`_;^lg%%Wp*6#TMZKd31KpsY_Zv{MHRf`Y^!-r$S(ddn9~@Ur zP?R$;Qfx%7)nO^@(>%0-@*KkIa5Yot#IuFg5Ssy8g(XFwyUS*WP`3M|e0c>)G#)^M zcA~e?k#0?;TyN}xF|3~SO?f0-5srw?Q(oIR!IBEDgi3arqt;?wkXUpq!t26y*og?& zgykk~VJWO<8*gyJI{LUC)=eLaXTag%;bYHN9xGSMM>HPBQb(k47|nMC*Q3r+P;0%e zbF^}46A+QTU2LBofqISzkBE8c$neOqH&n{Qm2%X$KTK&M&Y?$19cfTXH0i^m!lSUn zsg{Rf7Y!qTjKU}exgp#z_O5Wa+z1<72VGB20^C~j64JYyCgqLcMrNZMG_!?;CF&dt z$Jn1wkxa!UGHnVsG1HlnDYrzXqr;<_=}5_xUn0}yaIkscrfgOeV+3yx=*p9}^bR;st0XS-y{jGjPr$Lk7(zsu>&{X)^eT0 zoUsSv5B||t>wfrsq|~j|!s8K=ZthCRLhJOX+^L?AuGv!<`--|g?yO%RM(EK4XT?6+ zEDPD{Ic>nkX|u3?l1xdX2Yw%WYrhP6M)n|GQuh2Kf-}qCwd~1zUXCwbA+f@lV>Q?f<_IjeHwT{@Id~&sX2XW+*Fb)0=QHv9D7LfyfZ0_b z3vN(7qWMUCtoP?wXY*S5jw3Vm!j}AUH@XNEZVb$<`nL0Az4j89wmF6F++Oq@h**t9 z2S?9F2>!;YSYO^bQ_YZi)dAphw$PoMlJo^hd;3#e6~(EyQ@`vE)@BX^!LUs&uGNB; zs*fG+{oElRm^m3aQwKNj@F-afZmjjwjt=lsooKlA)1)to2-5ZELue*k#<7X7vw7+q z1{AXBo1FGi2Q2btqkR?D36F%H@@VDfVL+)rK%I2Bgd3S@0u@}fiFkDhe+9zo60W*$ zrTGY!IpWw=?x6h~a95j8fkbOCW;$LH#diG$e~kNHwbpzfN^6gvf-g=CN`mm+9a$?F zU_+Wa`W-SBoZCm>**fz$WQ!AyKtc+J~y-PeXZ6D3o=?b3zZ%qq^j z2Pt|k!v%khfunGtkBU89tf$eT=5iyHYSEWaDkEQ!U^O z$25WCy>(c>kgEM379l+vpc-PTlem>>_Hn?BFI&s0npwD~_+ zjQQFwT;I4?&l#Jjp`AEFw`)gte3+^24700yBxIAUuqO_hLp2#{9b?Z3nmLd)`Y>nd zz#l8Z#77pZPJ*v_=Lx*qazf&AA4u89z3;4Z0ciJF<&N&N{K=Gwww7hI{6{gEgTcBFhk3S}dzYqFD23u_!kYe>AyLSts)XBf)xEeDnI^2Tl> zE5qe4-CI(z3FqsHm+tMeff@o(Per1J%Lf_C2D#eK{LuM3ZZ+MKXOGm9aF|(*p0LT- zbHhYRj##u@@-K%QzRR41+t8D_{OyCRgZI%oaE-&;Prdx)z%stZBf=R zA{%W%>a3LO^a0JftgXG~Kck7sx;i6%u8(6o;fgxo;?(UAFyae*d@niYj+56d@QI{TRAAkM6k89muX6dNTBB&;ADP#|8KBM3``qF~L(R z{1rHm5KYR38bW*YWBWF#3bL_?^;|B*I+76VFK_Qdoo2Z6rYEVBvg}r;k#{Ou8g-Dd zS-&v2sh@%*sb5*Ycl~g;>_`1Lo}m!zuc_Z`nZz#0G;OEq?{k0|64k%2oWb~pi=Ukl zFw`@euA@dV5X8$_(1pAp^x(&KnmPHQ=|QzTFun!y7cC_Jq(+iPpd#E^WnJ(j58YAa zlL(XSBvLKn$^Zq_!Nuu3X7QwK$cHjNoxZE+VDkje)csXVJKz(yKn?@1#(g30 zU1pXhGbiISrGmQAe|AhNiHy%UlNN5$rkx)JxDoNJqdHh)0VIZ*P5qwvW^)6cs_<)9?sq5VrUnq#@kU0?eO*Jp_ZhTQD=94Mh_YkbBi%K{s%8s*ulN z!!2^zX(8^3l#47NqOn@UZ80o?se9}-d9$Db&h+U%*!YX(j@8pVz`h51nq;?}We3P1 z=xJTm#0;N|tsZ(>M`cpUHYnJs^X~N#Ij1dswoHsbXgm5WT1WL1&$p3qR*e+7%ah8O zE070^B7GBGxHGTn79 zIRw1+)|W?pY>~Sr`K%XH-^-Klp}m5IDKOj-s+ZD1=(Mi9O`vq~9zO-OOo;M^c!+OU zXHL~ye0Q^j93S4LZ^H%zBmhc8@W*F}{`h6gnU~;pN4Nbtj0HrjKt%iX_;wnD^Z`!N z)OTHy+!k{;{{^R%Ax4Wc-utYOkv?{v7V6!hh3ZG~Ky@^`W*Mmbb~0Ke)Y* zN8uqCBzZl6K+@oqqUK8Q1aQL<9lTGZA=rpu(v?GIW3Wxr!Yh>E5nw%B_HfwK)oYbf zM-qM2_2`h(PZy`4c_z#HjkP!*_g1*P%YiwbVd{qiwynyS6Wq^~{N}`fIFu3uHg^ID zD;(oSVD3$9mYnU+he0ZYSBGF5=MD&L1$pd<(BT3x+!%ooA{&;PkKiYk34&)%MW3E+ zei+V8<>gek9Iq?rCy&JWT515M61Xft6~)R3!1{TYEP%<8gisP*%YInFyQE71`9aZZoI z)VL=e&I;%rTyHi+5y!<$M(+9{%W^mS&Kz!9`WQ>N0jeg@a&UVUjxsQj;-RMiN7!@w zqhTriRh|dY{eh};&P7g@^r7y)8Na)T<18K#_GhUM6?_->5{S*l&kS!9(}q3>pm+3_ zcrauY*8M+4*$bq7^^t9`u1Q0R=C|Zauup%=nat$@dZe6%sKeUN*EJ6Y0+ees4VPIo z--B+wgqil^xJE9YjaF&HaZML(ywpgj4;(O_>v>#p1|6V2FgcIc$uRLl!3Yccu&j($ zvtTC>@sJPm1VZ2Vj{yhQGgvscZv+lB?%*Uh@JFN=~%*$?c zHYy#n&J*$Rc+!IQQ{d!P@TiU$n<}_vf;QFjOSS&Ywmx9(xwtYwa2(EfQ4Ys%a10o~6ZyD3|7sW~cKj!WM;67{}~JcxLnLtBA6wq1W79-g@9 zYXO5QK7NKxm2c`;<{3Ag+jN?On69|ZFM|AfnG#HOfUW20p1?NgO&QR!_LXpwZ;f<| zT-py~%9ihm9jgMEdgmQ)V%mkP~lL5B^Q9*;QY) zZCY|NAKP@7oDm;65&x!YI}7f}4fr=z41($|+~*b4c1;JXc1;T_3LkR~t7QtlKOBt! zN9K#x@}mI%sdXlXWR}$FLV6ARaEsgATQI;~H9_swfW4P*FP@dtnD_?2z4d`Ou4b<9 z+gq>2%@*9AlXaZGCLOVvgMF!iEqq{UbIxBw#RAi*oThKZGdlzT6o%Ck?e`Ls7XRYV z1qTMKO}IWBVj(jmg9`^K%w=_&P3Hkl&R^j);}1=qjH(^}{}1qkpzW2vzk$tc{Dt@c z+sU)CWh}`taB$t3zI9s8AzTe}3+DCRavtGYh&#y4d#B|BA_l|4LKT|!dGIk)ibqF) z$a8N4!mxZz?w!Vv3c}Jfz=uVFj|nH326O}o9+O*c8o&`GbnO1;rvVy4!j8>n^@27G z^WE4>$8U$5Z;UvOrvPw&jQDave0hxcfFM4QAPyTgfQN_}(5A1*RRLiIB35cd84=a6 zjHay&%c*vSE2lA!udMDwe1CY@bh#fHYp5GDXa970IYNWs@&y=$mQR-lay395Sb&}} zFkKE2s-jZtd56>G6$sT(BMeh3rpsl722tH$xiU^Q8C&BAuQb#a+gcHhVbcS&+u-4jIdENNc(%toRcdwm>zsXwg z*xIlbj!c(pxo{ntT3ZMQ!`gItkilv=xDXD7gVW_925aHaLbxg%nl7(ma4=kjpo~O- zT1_CU5ik9|dI5eVtEbCrG@=@=SqO*2HPhu`ji`mg3t>GRo-WrlVlb?uZ`R??AULzs z`_VUWRoQwPoop7PZ4j>acOZ;l8es&}2qQ>@8*p>GK3=fUq(aw~jc3AEFxt2;1m5Vr z^7=~oNE&t5hez`N`RH&68(?=N)C2go@VZX;ri|V0grkTV4M&Yk%#`87GWG!{SKff- z$_AO+GR}6;{zA&+O!96eY&Mmd?*WZWbUl<=c^%tarve|opTTd!i$+mt`+XG5Ui(Ax zGZxHYEs$wsWonT75!(NP2+p&ZPEa|{Z^l}&m2dN7}4@LL|M3W2qN5q_@F^Y> zu~{Nqz=$^Svpygb?60|tCmh^#P9gyJb$T?1MiaVdAdIX>7v~ATFGo#-0jc z;Wo-?IGPd+uB60Vgp+3DKfw&>cwvs5lG|69yAG-50k3%pBvS?NgnQ0iieO9+1(va#ry%bs8jkBfS*l z++v(TtFmu^r9lV1A!BRUwz`8H`Nfch^j#Fkr2_Q+nNq@p+1{1lh)?fYmLPgj@i)(6 z8Q9ovG<9|K=aN*%Gj@wQlsu)d)oaP(y##RpVhOyni(!*Vd(b_^+qOON&MpPpUkqDF zkNr=hN=`yh!os@scfY&quC5OGzacP9aq%Y}0+3fSRao}dRYt=8SZ3h=$ZJ8$wRQr&k3C0YcqC&##DYyxvD_n4SJDzXS^MkVeJ)9)$Sm~H6CS|U8dwQ;5 zAdE?oh;+vHnk*RKL+EI|>?O1?S4d(Sa*z2Oj%d zH0T}^95eNrE40c*I45&OLUB7-=A|u5kvuhEk_lQ+OxQ3zK^GNTJXc88m<2n#b4jYB z(nU>>xk8}DbA_U@Se|R0_l)p;h6-uAhw(t~!aEs0T{KAsd`uHNSMUNeP7)p*qP;3K zBw`s)4}$U%%=v#@Zxu#T=^k@EwOLtDScb=Az%muYv7U`y(HkM-z*g}4B1URvM+8s87#DkpP4Iu`)xl<&r% z$RGbd+D^A%=_j_+WBEbb>3vKL7$cI@rEI4kMw4ROsRUANuwzbQVoAr|vT;^`k_W8G z_`hX4{R}Z_@$VtnPMPh0(soLkM#tgL+>OBGFUNKox9iVoJ3UyXe>&Ug!E61Wv7L6| z^p|NnO&a+}vz>Az{;6%JU1?VoprHfh)!xbS zdAs0Y`P3p%0VI0syq4!m8|8JS%JN}H17ejL+1Y@UvaaQ6$3*#LJ*w7XffU;=1(n2h zY1)#g<_4D(F^Y2nAzpO~gjlmR$SkIY*d&!4C4~^LEqjt9ZGbc#!nJ`Cq)#Dq&?9AS zG_6QfYugI00xU_yrYI_wwJCmz%f-a3&SrMh@V|~_xSFHZ8?WXx6tj!0jwD0EFuInL zNDhEx6(@ql05HoU4aK~ZfJ??g3LF>w$>L1}lL62HE*=*NxURLEK_Ui6qn-#hO)!1F zS3|KqB>|W4RSG+@mSV@XS}Yf{&U<4yrW!qMdG|n=nPmWMN#lu3Q_IrF(+v6v_EX$; zF#Iiu=n!h3M1+wkYO!PaSf;Ujck#|q%<@L2s7zz|Sf;UjdVsL{q#J<`i(4_GGL7XE znMMF-q_A0;;|AT zwzEg`bFuC0n<$sEoqbD#)^_%74aT;!?;yO`c19S9?TjGOwll&=+s+81hwbd$*$&$o zVH(>R0UFyGVHw*Q!6ddboaO7VopGX$)ky~8b)G1vj7gRds!TFY7JEjirKeAHDyU{0 z3k8Z*cm+U8U6>YiA+_8}U{c*(1X5R{0woPHSq;Z%c5CE%hg0C4PE<;S?j?z$)C*-<#!9kT#u}jU5;CSjPs*lz z22)6bv?YVc-HdTtaD6I&?)IlS6{s=Ln6a^VI3E%lQ);$FoGZ`{ zj!Nv%$$;x#YYWl3*qHLS9nT3_=bf<(*VPQ|hW9{_nF~K&m{KJjJw!N>*+;@ zF7{HOBF`0(4xpXpCdtrkZZb9XpoGYCP3{2NIrB({?tx%x>H$>9%X_bkFW>#GJ(ES^ z0jIStBJ=-o@6;i2uh>Sl4?23T$LKv2#!X3Z0UAqitzuC(^%Myyhg3DYCK6o0#1dSq zSPb+~7&j%s1xzPH-Al$zBsguRIQJy~)MPmA(6KJDnQ{h5rzAF0;?u)sO8XFB6JHOZ z8{JUn+JtAcT)8WW6~(u|&;1lx<%Dhf=lF6{;a_xxf7uoOm4ttWzgqs+_|mnS>+p=R zoV(UDXE=O~gKjv^RhenxIM?DsXI}d^gqD%R_j3NM{aZ%3E&fE)TtY2g2Yv#u3UUVl z&z~(mXO?w#0S|MgjDYN#?<=V@Wy76E%7)V?%38z<3q9WM!Fvy)okYaJReL6UzJ!P6 z?3l$t-c%j7cx9Z200%t_-Xe){W^&iO+ah&wGS@6n=5db{>FZezoyQ3X64=wBHa}tE zWt|rQ-Uglr!#Q{yxNkfar|erKK2)NCWw<$MGZ&W86j0On-2C+PfQw5L({a@a#^NMi zZ31tZ{20aMmf?@W97(Z?AQrP_) z#B1*RM8=iYR)nGS82{W4G@ecGi2tF+lK>s@Khk*8p(Fl#8ZT|0BLgaYo;k1JnE+g3 zTH(b^xNjjpyweMC^sTseM;{U9aZ6s_i;J0yIBIB)l=DC(@0mDY==I_YH~`PcPd~<7 z!^}F62UjzUz1FRuX{@<8ej?gdUPH4oOB5CC|)65$rwE7Y0ieo?#Y;+y0alNd~yI5{EMXd(PT&=Ry1YWnQUpGMCPRGqM4k*YFRy@Cl5|RWN1#+nBlSZm zMGcQgr_}L?bQ+pSsnR5rj-(Bp%xvg{zaIU^_Ebuy#5sr*-MpZ`QI#B%Kw2(NAoWy= zOae4s94%F4Gnh!06-VErwvB0)GLJ^JlzKF(QR^eqERB3Lnvb=e)7~^%`AW(%x}4$L zR@OMVfW&%?`@FVp;L>^=;QS9U4I0H$&ct&vboLVk5w zxBxaI1c!&0OF6-UH8WBpKtxnDYKWMqwPeVznQ17STUglYkHw*Eqjfo^9ztu&!dS;e z+t{-7)p5~QiKzh<)i@N>CNlmhW;l2*jW*_vYU>JCVXJR3>1e4g?_{kEKINq`f!X@& z7_Kcl3@9h>-G;^ARqU&V$nLy4je)nu%RM-p(my45w&jAQIeKah?h#asHW@YtCnt<7s$kQT!7@eff%&U@{oTA3PdH>Sp%*+E`I}Q@~^zE<2t90*~wh|?XjCb}bB^1!*3)-$;xqA%(i@?=df!uQ%TR#Mh0 zH5XfSNc~;SRM$*?mo=kL%X2?0Ckpgkb?%eUB{**R6{0HGFRtik6?!`JSqp0Ra|}DG zmFC(2tFvDseZBQG64Pv00J=;eNRq4Qwt$=>yHW-axcjCDt_SYIR!k<> zh>byjNnuc-TDDc2C&kU$oQm7Ec|w1~g2Rcy@txQz9Jv(X5DH_aXvU0ruaoRg?@o7QWy~~`{Zo7);oRSjJLVYKeb#aJ zsOfGQ0K+-g@M-fzmua)hRM&>Kqh@UYK$0691oZL$i4L;SVzInudAeZ%mOT|`LpzY@ zn>p=3`OdQgHAxc=@WJ2rbqHEohSGrN*ey3yv+)?q#$znYG1kbMG3JJT44E+Fz-rWAU6OM6o#GNoI1%5sj+L5f0LCsbS>+rll&xV97Q;D|fH4m#Hf4U5IK z*hYgT?gTR+w1sPNCyd2?P>H*s+TR0)>kSi}8uvi+w73hJo8vxc&JJ|KlqJY@%cz04 zPNux{v@>38MLez>N6= z*5OzmV1B>1PX}44uTPDf9Ks?SlU;8HV`~U(a}xHyibcR9zV~3vqx^?8>3?vXHg~Fy znM1WvgEIz@lb)nLY)z2+Fx`e@A zmEs5eo4pEotUh*_-g%gRvy8V3G#Fhp>!b?t!s6RWfOxOIJO5^~M20pRUd&V*eKlw- z(y5sSpCv(ftkpX2M|u2bnrQma?>h|?SL;a))J-mi+tg&t51ej_o8M&2Yg``gT9Yw% zxIEn5Vt;n8zRGB%L`xHE*6!6;86D%j`l?@BU!`NL%6B>-N2tbaq_uSqtEdt=xE}IA z^~OsjjLp=6YU_GP4M{;A*{b--WPDoQS&;ma-A^6X{0B@CC?oByV9h3avs7g{oq^uW z4-U6}o3bhEQ)kxtEquejFoV>5wO)iU9b`b2MxtnoaG0mLJBz96a=Mz~IfBH5hYyr; zK6Ph;4>%YU9K=Z+0ziI63LK?eqt!)Z32L;W`OYqspr^VHP{2}lc7z>(q|8FGma?lS zq+@PCYRl;wN%?iEGq#)_`|qxfUElRp$1d(%b&QVF>E}{5g?1XWYo^*3o%93x1Nu4F zVp5ru=;vI6Nh6`L90t+Ped#x+p9{$%)X(ilzo>przo?(nFVWBG=P~K$jtvv_bDC20 zbNV@`pCfffKlkfkrG8HHi+)Z%u@(~S$DyC|!=)k!tF(RxZFbBGI+Lrex%@6mKZ1rX zN9?Lg;-}Hj@zZGN_?ghqWf82mo=<92Lq`Di#tKnYl6?DJi7^Tq`A%r)@RYDaBU@}q zP%~&^$dp19nbFWOsnO8!(`e}Unb6QN*sxS_Yt0fXF#vj`B$-Cz#au}ZorKq$T%t!3 z$V6*N8bCC3Y#`GjPD3ZKxK)jYj!>ha<7YxcXR!7Lnst3kA=<3+ZJKp8z0zh{NzLRM zv0<<{Kt%xtmC?`%2}VOF-$p|x-w6$!glm>C+p_f-fR;^Cx|#t*Lnmm8CYNj3dg}%K z4QqM{8oG<_frie{%BX25|M#ir*zm{5@1h+NI!8@^i*{%@>l#K?6`f?->@q<;M2Hx7Ew1P}9i;2j>&&lNz1 z)z9gq)fJG_&#})|>*st)WjM!7H%XYCf|4*ZEMb4c60BtYT@HK)lPVO4AjDKIQ(=F~ z^#ee*alJJJWo;m#lru35IAwrBq+MzHU142Ov5|PY*i^Wx>Ik=MFNLeBj&QqHQ@Ezz8~_Nkvs?18$&Dumm^oN&cIRyzr9I*It3~B>}}`;hUrI7So|r}lYZwW;9s2n zh%?=N0FD@NGhTk!NJ5PEH0ZbF4f-s3NhBU(v&z!WEkIjxy3@{UBq)#c4!7eC zyz}uoR7dP5@$6Lr$GChuyM%ZCsz5Dmid&x2@O&WbO0+qi@Yj zQ`sdh1Y9*eo4{JD0M2uH`4*R|B-j z&kgc9;-C$D6|+I5^#-7a35H+@DvT$Bpk`ABRemvhFlN8PW*(oVTu?XJbDDjU2_*Xj zzgT=QZZidSekq|jeA40uuT*LIp&}5xilNCgilSL?I7qgsA%Qg64bTpP#P5=mtBMH; zSK$%zq$WZhNs)TuXqh={F%2fGlsl{zu8t<_n8}K!Hd&=BB&%z+M4L+GOy0W5i@q^= zUEd|zUV27om;PKq&$081=mP#Np(TYGpd>SFfw%G$v-E&aEDaz;NngZGAutv};~nsv zw5Re!=y)P@JP|sc2>WYCLuhcSWLKUD9Z!UgCql;)q2mduD&MvPe=AF5gnDH)X_zo( zi7;k~(6NN@CoPCLG7=myu82UXqKT`K92(ML!kt8D`es72qPm(@+JcQ0Hf1QW1;eKF z7aLedpvgO_c~O7O8&_W_)~t@nr6EnuhUP>oX-;V*EtTWWjAb_{q={GVl@u7wFWD0pfh!#* z(t-lejN9gjX5}nq^12yhQ09raAU>OSt;uVr5Hp+0uy;Z>A%a;En|IXYwNr=@Ns>1f z)ouzgV(MOraZe-$m(0hpw!ncKdWo5jXL%9lKCTr;oc*{K8O(m~I>S!5N0l7x;Nw|m z#65IeON}`DajZ7t%*V6fVD5V*$UT)H$G7H)d+PX>9f|zMvGPddKAyz~v)?O4j#-Kv z&-x?LL&viONn}5sRY)THaVp`rxI$EW}vO1?&=uv-FmF}wt>D6rf5gw<4%~^(ge*ZV@#7@8o?Y8yUSQ!S}S39 zk$YijlmK^+dwwZm*k0o<%y@X7UhHHN<-k$qJuPQ`pqzGJISa$f!3*j4w4C-pISYN| z%)4?j-ru0zo+bU7PZv_fbg5cS&%FmgFPqO5!eW%>?yNe0A+FnbI9KqR`0xDV{GNGo zfLp!P=R~+sC@ZfheXzBHPF^U@Y#AE)T8*3>8u>bnj4y@zU8+gd-zU^1TkeOafHRdG z?!#tRX4I}U?}uLEkwY(=mS@+R5BkKB$Rc-{q&OZ5x8=mY=HGAS}E5)R+yKSCVL-_C4U?Kh=g) zuRVQe#A(AhG?Ou#TnqSS=>)$vijHsZSt{MxGdlCH^Fa zjivNPezy)%0D^J*b@8Y5>Eg4%C;ls%qsAsM^xl{DyhV=dsaHMk`fd5C*Z=gJR~4G& zVl#r1h0M$&U{4gt%w@qGkkkg?m=^?IAAn=-&@pJ>6ksv-NnYr)Ad7lD3AA|Sj-X9x zk>V1dJ6CHKAq8;7a?4%+b=O_8)(X5ALKN&9zUCAUsq}(URNtulEa^>>a+)hqh?>?P zQ+7fU#j8>Hj!7;@BQ?Ij9Vl6yMi`Xl{*#28qmYykb0A0TDt=vh{^U1I&%@Su-ZgBW zN`7uXX!LNyu7CCG$WtDsnNm*p3zOBBJ)mwRQ%S9iWU6WW)H3+NosJdGv4M9d7ggY0Um;7!4D;?+Q+rV4)wvaa)yNDHmB{)@Fq!Q75C)Elka z=qm{pCWffem_jz)io#htg~MAIzFQxq7|`!jrS(~6-Lwh5zkX$!2sHX$+(w^2N*krT zGmfD>*4rj1xyIV6d!fLqA-}HiO?%oZRHpMQ0rvqJk;BRMxZf5Ib0c+ z%;4%vWpHJ(SnC&~5s+Z$8j14JNE?grAj&&jflFp^^`$bnf?O1~OVL`8U~sLC3enm& z9D%@q#^DNGGJ~rxmBAGTsAE1_8@Jb5&;?w1)G?+jGlfjjKSCVTg!sC@pmi-{>I;W zlm?UIV?4@$(eW`61z>i3OhzFX9v_V;3#P|M6ZQg*C2a)(=I_VfaQ8NPJjs@t7%R~ z8Y$5D9^3>cMGKgs$^mYy;WkBtNQ*WKG|wr>BW@=BE{o_%SmvCh9o>sp2JPtjeNSe* z_o9uS!!}YpYCu<5{3$DGtmcm5|5EA1HlFPOCut1!Kz>!DHud!6zzJ6)he zrjks+#k`#ou@IjHi~t~)(hXsZyKzrLCo1SpHjgg$fN}AKkN2+L2j^z_>jrHtlRT2~ zo`*Jkp7I0hNV=eI0oKJgkT7A1jBqEsL!w6vUk0r&ps5RBR1AT(#1{ix@o=0QR<{s>7< z_M&`_ay*Z;+6<5&vtQSqxp7Z~=1~I6*rKqxDp3ZDDQ!5V4*R&sL}~^D&a`evEz9U- zcI?ur_>q1sL(@z;s!`YxGU?%mnkWJ>2^9ICrLG9-AjmkVl{`B8`DzrDN3j1J0V~Vi z;3MdV>*9W}olyO_?F6hR*HELyuDOuVr(tn-ofawWn$HB%sx(5adW&783F4KnP2OLT zg66N7YG_9nX{2gvlfss~os9~%HidxmT*0+9tyRC4m3As6M@9}zId8fyXPUdx(00u= z(BP85FvswLV`xjV13OcZW-8^9BNEI|!aQEGM3z7#S~-G0Ty1hp8EA3@Elq)uxLDIb z+@kjxWqVyixP)iu_0gSS>o%|ghX>{y_QAVdAD}Bo(UqgJo_#R-v&8kk-#rb?kg8z$ z+1biS(cPXy>>Cr$+x*zy8*hT?l=;1fG+EaExj(ycu{gq87e9C)WA{!3Dx zX&JgdT<76L!^haHw&xGrq7D!dlq=;wRu_oZ`}^`ILbi}dzqwu-wMR0H8Th8BDsj_? z9_jSbJvle;C>eyGJ_J`piX-Ks(DS?1U`Vg zK-1FK^Wa=ZpVMEBX|%qcp8!IRVXpJLq(mKQ$kf&_-6G?47K`vM$7^#+)b07^+zmHk z4lkI$#Y$=BWN+zgpvWC4r^6i7)?>R5ES(8Jl%Cx2${pA-++y?xbI?y=Vwn936z6m2 zKoWR91={93HRHR=S#PG`VXYI)OF;bQ<={jwh;ncnUUummQnl{D0WK&vSFm}>zJh!5=|?V|B{2tg!m+YR)vUFV z5KB%;m|LCDi`JnWY_{ZZU_-QF_BHMV0jsxkxe`^jeCW=*?y8ilGm9v!dazu>FO)jv zG5n2cQ=a!rZ^y(ge0^fA=j~|bckPVE6xz)1=C{Bn;O$m2GRx0WNLWOk<^y-ou>dm= zR%d#^c0%D;t+mV5sA~56<$6@#@_cA6g7P>7#JG-~wD)rG&hyDTc&Ta7?{a;2xG=RA z|8^9^ESxN7>$`9kjFU8g@45@L8ZanW$cMGv!NSy;__w1NWD(Bdp`-%bApm-pcNY>X zv_WWfSJ-Us-dPBM>23IDBT-0oSHP%zr8M_=avwT$SBQGSAp?|b2l0r{1JF%bR1zCl zn3tc=P-8d4I|Z;sqDK>uIf2wHBqSnqzyc0^mmX-5Y3BP6VmogYwsZTjVOPsWnb;LL zBB9ay4Uid-Oehb3Gh~J!v!Fwq=TOuTz8-9eZrBx8hxY`c0z~CuF2D|#K2$zHALfG^ zq1xXHMSth%?}8mJ+@T##?kJ!K0ajj8FnH-`{;p@(_xRVi;rBT>4{dakpHiz?6G1n9 z=*gaW_;kfi zojQW0<4$gc#;%{Xh(JwC;{!j@I=t%+dNIN7uBY^%|G1_c+p8H|;v*fkO=g zUEQ3E|61q+;;V(E!R<2M(K#7dy=1aI}F}mX3qnJ6hbOHWs?_I=z-{qehUgyCO z;2{d&AE+}f*tYZ_d~KIz>pl7?agRY9*03q>ER^2k{N#4T`QY6DM3cd~N@z|B z*#AiZ+i;>z8icBCrL3t_*3=1q6LpepFlzM+SF4<)H@o5q&nD+GhSgvAq^-UO#U@BG z`&6c68|T1(40CkbBe$8aMZAOF@9$1 z{?a2{pyV$-(gi%YiO{Zj7+~lcrpIf-Imm|Ih4{8x7k)>jMAzNwMI|h4uw?VQjO3D? zeqd)00}GL92R{^FXm$l@dut!-X2)z$Ug4UI?gf~q^;O-6I99=NrpDkv^IOtt{sR_KEsNDxR#Sj_QE?`Pn}CEd5X4(hL~2R!RegXbycq%L>F2_%amq6YXYBu(1x2<0di7WNZY z*bn&yh%Ib>I*&sMyvy(-zh&bj_3Coc-ey}L=nBTrsH{?8W- z=3)4r3seMTgKQ-X=35=UfSzEiF&Mq@H17Y?lKiXar#z8s&zF{ zft}EwcU%93VfAM|oR)k0Rj!elQ#VtuWE(Ivr3c|nKp^jH*apNS8{g8h1MlU)@j~L* zfVF|}5}UwGc#Un+66G{H=CN@9rwFz~g{coRLHAp27x607Oan3zRyVK~qC~i~v8|m8 zLi{?-mcSt?p-`Xws`jU~Bz!Y8jizjw{Lq%aVY-x@Bz4D0SK2!>(Z^UW_3^5TkJQaW zS@x^kha7AE`PE(i)lCoJ)X#lE>mP-sCCs(A3CmpfGSGLu@`UTnat8gk$E)lurzZV;yP3-pewmjBv6EJkt_ZM#m|tv|u(OgW9?F$S_Jm5mgh@L!&srx`7WCIWcs6NeG*f38ApMonUk@s5qO1txJ%FzOgAx$GEWc zfH{T$%b*mTY|MTvTV9VzV!e@Z-vD3!cFdP@rdwEi&QPY*v+x8{X0~bB+bv59!@wl@ zzl|639Kr$i^ zxIXOafOY0kvYA6RawE>IwtVkyxv{L=SWe))J8mq4G%%rZBaY8zKUOJ+P7uwPH{e(} zf+5+413M3wLoeEZ^f)}@NxmGJ&Hex<-ViA`zk+yt6S-7O48({@+hM*1Q5%%0AFBzE zC+DHhB1b$AeG)A2JLG+5gabWh%NXGl{7|fLu6Y&hU9iee13+_}-aNiN?laPfII+*s zD5#mXF}dGmuFjk4UeI|vf9{t>?(Kl3pdFfqlx6(2x2V+(W(2GSF?W3334IT5!J0&` zc8SEo2gxq{jGY_IJ}M=D%~>)DKxOdcZIqA=yx%Oeph7&YXUt0YEW2wKPeNV9KTCCX0v|hSCH8=*kLIa5&%;WSnY9bTUh)z z<~Rky{JOz5gYkznlBvJwWcPX*&Qn#GeFXb9p-s!7e79{749`s0FcZvC!f@%cDRjhh zkQ9^FpRp_W9d@2bNVc;}0*}To=c>+i_$YdF{{`;wfHHrExSWHNv2d^rIZD%VI>;wnyu3+%vD&)S@y$QP}~! zY`KCVRMGVdbS{*a_$QkZK|FovWA>JsNFdWFcG6>L~w>HNJZrQpj%RQp1`enZX*? z(Ek4Mz+Do#m+Czg$#{h2Zcjiof9a2Gvo_T32K#-OJ7v>Z-2E&8+lubp)glsaJ^u*H zaSS$WOHiMThmQBwN`Iz!9hF@UZ(TbM6reh1pg9`UF9V=`puP*&J`8XwXeh9e0GEm34)u2UB$4uVK)?qP?IF; z^B~BMmq>jwQvG~7gO|A25D@QdKrrKTa8outb3goMpiB#jevpbX2U`Usf`iE@SjcA! z?#8Xvoc$%*3@Ze%=@`}r)V6$l68CK(6^nQbJQd{>f#%Is=V_ZrTXF74zU|HZF4`Fd z7UB$rWCpW5XJND;{5JO)kMbt5-a8#TirSfBG=hOdBW#{#K}mm#DRv}@Wdy}Sz#DxL zcLtww`w>#jCEDBgc6q8|vK4}n^hl;PLbeO}iN=zE9q;gCYWB~#Zq7GH_D%r;JW48l-_w0T$kKm#EvPY^QRJma^teeZtAxqEN-P1(*t~O1mC$Ov}FuNXx%2Z94HzObWL`ag+aY{DC104fLp+TyM+u8NXZO zcg6A4)0?|Od%?A-DKx9M0~hinstwT=zH6;f0a77e%puz}%q9B<|dl*6`5lp{e`j)dZJB$zCx zY|GJvww$VzBQTZ&I#^dI3~Gqz@jDbpENCa{+TRGmU#4wxCF0!u3NU_Q@t2P8;o$jd zMB@)JOnFdOh(%By;(a5;d+jpYTwS8c9%y98c5EZ3(Q*(61zB4DLEL{82Y2ZWJIFltp3LqM0ekf=_*c-ICx*I^6Vy4Ca zYxB#k2sOv&<4SYGvdAZCpd3TuseRu+QYP_|eHx<}=Cd`WpxLtu=Qbm@uJ;r&#wQtc?6h;CT zGkTSw^DmfHdhA!fHGvvo-811WUWD=!W(J8H4S0m_DkPS3F`mKRp!`J!!lVJJa4Aum z#_x6jYkdm4AGRg~ewWD(?ztl5WmIIvF?!n3QBxqY) zNIrG(;I!gGnKW{{{R%fdZ{ps${q)76s&YC2a_4X&=L!iUt= zM69l?lx4&=d$`)3x+}yC*JB_ohgev`85QOBPPE%AlrOG999Q9|Mt;|PyE}3s#&5<* zHCvtTwVD{R6C=E^ct;}2;<0*z1iZw=?AT;IIJ(xM#l<`Q|08ym^XmGy0ydCh@R%R00G!r~8coSUN3q(+yphLn*Pm9U7!G*!@Ps=#T=tjwpd zKgQS>>$3xxj=&Demza(q72Gr>f|YEQgk#lCNBXUe7~Us4?fsND3Y4nB|DkEmfjMW> z7w-9-!*)B;oFhGWlsSj}<+r9mrp`HYDF29a&a;ttaLyrX#B&bo>vx|6n45DL@ViVV za}Gab&f&)q<{Xye=A4s(^4FbnTEH=M&XJ0*o^v$4opbJP?cO&hfi-kaq6osAbPlz3~?S@agJm|FO}O~Oyw>e zT?5;&ZEd9;?ly4v&sql1ZDnRo%cZs#bE!*9Vc^p6MvfXva|`x?YB;ZXlm3`|k85zz zdsb2=-pa#__eJ#CLG810+VmUjpfEsUp4}qjBo3d4a3K-Ta4`{Pdfs8hanf`-om+9A z+4wVzKZBJjhS&=G)|HWWUj>)DFUvr2`9%1*$x9TFpp=`^fkCwuo$UzxZz1(y>mD~^ zl)+Mr>?gXmjcCnf;Xepes5a8AbJ=UOcs1Xx^9A6Ao1P^1t@cxxPSJ3CKc(-ckHrQu zy&eF5y0^qXncfTJPiFxGR(E7CWO`W2&hR9H7b}h-y+4xf?PtDMGQ;&mneM$vF!z3o ze@4>Ryb=5B-fuIJtmEGfUcHHRTAyEEp!+UHb^aO~?tTA2U9JKAExxhCBC*-dCEPD# z8$z0eVk0>UiE+fB;nV*iK>Rb2e6DOASyJr$EBbu zq@fZOD~yn=oqxpH0P->dlW^xh5QNtplhI%|O@IquI4aOuhn*d40}U|aWpNOj6kbD5 zg8VLfv(nj(R41o1Z8|&yCIaDnKo8BaH&KXO;KrmaH**V%SGy*49sxKnyc+%X2S@3* z3VKVrl08SVZTnOB?PmK&Y1aW^vbWTzDWAb4ot5s$qC2wa4mh0A?l9^k(;d+3qdP*u zXIgCTofJH)x+IS-$v3tq3dR`(>8eJB3S(CFNv8A9=#f%Rw}GYy(cb98&i_S>UWFkF z+8cHL6CiUv#_^`9PE;x(6K?XCbbiEk$dEFmmrZl@^>R?jCA*Y<0W$r)9OSfv6aA$2 z)zBrw&Oz#cBPEWZl#U?{$W?;QW5^qNvws}tP}DK~A^X?w%E0e(7kbmt5} zfRvEVeeoT%Z~~4Y;deRwXEBAOGhyq&7-ln&=lp&MzKeH^c-zW7ow=J36cUjKrTz9{Zmk3xaYPT~o`XY_G5 zfI#p$kkzplyqKw=b$bb*t#_d&y&Lg`dhn0mW#R)g)kPA1Q!|mGW`Y5;QR29GJMjM- z+uQH{9%9VK!0$W)=lC*~DHiyeFdetNz+C3P}Sib_5ur0{?-GOocD&dP%k8ytY#rUOQrE+5(9+&%FgmsU_7}S6*$^;zw z{RtQYqiFGy!Nk~{5){B|0Osv*MNO&&qb|v2zv25nV|y=0x+vt=%jB!~QvAUNj?INd zDE>dTLx)}|1uICmE=6h7I!iIN%W%u#^XO_6RL6A}xcopdlqcU^`W@hrTF3=}wKT?> z`rz}@{0KOqO~9qJOUOe?bRCgYUjHrZuU`qC;6(wPa~5Yd169_j<$~%N zkSVM=wg<}?AVL?v+ve0j=m07nLVnH_0W|b$XEFjGoQcXIgH28sE_ZmL1i9~Ep8yNa zBDXvj>l`JKi&&gqZdu@V!tj5!N3NAU9DH}6uWy#V_PcCluo9b{ry0`z*|s!3Zsq?w zYp4X}mh(^$admtlHrLe4$Qj{%@%Q2QZ|14MB7G&l&C;#~>AIPV`rs404fwP^Fs_qp z>RKNdTSWus2v+QD9KE!Ok&1$MEVq?Mq}g&xEH11&Ehe*J2(hB==>nX)l1FmDC(R5! zl}Q=2r;AeWtl7@k*2MtW@(aCtmG-Vc+sVI_bxI76WH=>X*qXBLlj*8#Ysxy(rK7UG zP;EETTJOwsXSOwEy(rU}Szid3@3*F`^Jm56N`b$#M451Mi^kfTvW}${l`955(GrD@ zFT?W$5?d$9^qrO{2Y%D~LUkf`)fH5(7`RqT6gs&q6uY_$CRd8IOCr?F5wWYhpmN2q zVT4~(Vw=G>ht&-G41d^#5DLN(73nmD$iqfbsI;o>(j~7*&-E(SDl!nv@^{mt8~Zun zWju}V+Rx!6WhT#~eq!Y&DUeFi3LFsH++>!CEn>|{|^=QQTWMii(Xz)uVuMRjww zlR|?3~mN=O^gDTcrPl2+Ut{UJ%@F^=cWv z^8|?dYWq%K?5Q5h7-Pq1x=>UElh~<9N>rLtB+Mz^!lbfGiERua`U;LOP8Sf`S z5wuPRe`^!LO;)jk(Uj-xwE@crb@H=#CvuwX%@HDai4n#Bf zIMy&TS? zWibXe-&}?=AqU%6Iv-4id`icn6i%jJ` zzcDXNWfLQjw#EfrsHF^NVgU|Ii1f^ppeE}R-A>@5^C5d5gRBt4IL(uu2a#)EVUGH$4C|B!|D90|6 zyct1lgXBDT3)|EpaQ0`{KKSVFqeb30#JN%tUu$ zl47$};NqJ8v#^$Au$rnTgSAv6861NrSq($iobfh7qJL2Lk?f6%am58x48k-W+IxeW zfSP+0z@!+9-v(I0{^ZFZN${AR$I?y66f7^$PK$7*uyq9+&45}@O9n1a2Aid3K%^bZ8tx zmzMFP%|#|g^D2EBYufRsEq)Bmi^s3jk-+Qk0ruZ`>*{)F5o1W~7~>7g*zy(FYFx1+ zx#+JgW2ZvM7+i~wVTZEOinfhev=PgDBE;1f+Ja5df*(h2VSB zo4r&OX12>!DIT?i3GVW^35?-AsAVN=Wz(OTl+9)`X|peFQ>!CyF+eNg+FRZ~OU3WG z(PH&R70&y~h0RFx6w`+ey2}k5+%(#%_HN-~wBK3|H)ngEmR?Cp4UsXcaCQS$1w{Or8G0XCVwdVD>s*g=RTJ>%JCG+S*Ei|WwUe$zT8-CER72ER1g)yT2$C}P=4W}5GMYy84Oic z;?jl+qOay)r49pgos%=(Z=nTml|D=LUXQA$uYEUmk$OesByU`dEK({nyx*%!8{P4+l#m=4-Wq7~sL1j>})_ zZq(;uofAnR_GCNV`2HFL_Q%_Fv*h`?Y;eVnb{N3Gzsn}Ui-PTH>v^aL+!}>B#09xH4$RZ8 zNo>)_fiq%r**F#+D%)ccTkwNih}dix$HM7kdt73MUv!k(1bwxE z?w8x{W=m@W`S9!2W;6Ce!)lW~N^PLMJxXn|N3Bh^uQplK27;@30R$MfL0k5rV<35R zhi}1ewVi8RCSSF7R{oB)vj$RchXNUIhXyjy4g@mU#`Pjt_Hdo`um6Afym>xUTi0XU zLnYEI2>+2a2RU;-@8j`!i6&nUvh_R;W1Axq%|S6ZCgx$y(_Aaj98dkjX&!sZbY0$= zY;M-8pXB!|(X2@>p3f&ae7=z6{`q2ZWXzYEEx1uWYNdohk6bC??ju)9hQ^UAg;B*y z1*jC+e!cT%^XpY=w46P9rG!t9Tq$AlBUegB$dN0B!Np2tQ7Lf0xp77Qf97wF|F4>& zHI%4BrVribuB>uZfw7VD)*|+eX1;whfd0PcLlWXa zz%0sF8Fa43txl+bRUFPW#5W3-Iq*7;+b)eu=iB&@&VWaz%;8&bfuU-ie}JYZ1IGyx ziOa9_8bCMW4Qzr*c2+5dV>6g6!f;JhSRNerUC)^lxv{L$!$WvRr`5Mp-n@ACWsZmkbME~Q?bv_Y}S3MU_$U^YB7AsuO6a9BHoqr37K#OK-uCzDxllS5vR`tk?R! zdTlWE%0(Mc%m!Pp^;ov!+C6V70YAK`&weh-!G}8hnq&M0-ZFUU%`q=g5U^eE?u`mq zTex0wFI1eMFH|I=L^Ca~w5i&8uxh4el|U<|Hbq$4fjPAaxt`wywP6CMyz|P!;Zy|w zw-vR{Vfq;eb>_M5N5Ox}*>pcrf%BUY`WKDhX+(O#cpL!;8KAhI{cdvLqHoL_6YvgX zc)&a(k!`@|N&L}*%9a7#?UPZTw&U`D&Xf0hh8tjxTa{Kdw+05 z;%y8tI7Y2mSEB_d^*O1{o4v&^V_(4m&=)UUu=wfI;m7j!_>2M=v<0BH#iJ_~>YB~C z3E|iT&P?o{?7>*dh&_(qeJlFC@BIw|{O;TEJNW*Fz+9b<^!^5=SK|E*`-Fy|wNGde zlhyYQc|wB&6=TWwE&`qXHtyJK$!$9B0`*4RJBiEh@=xn!DBGKir8Sm97Yom-?zx&5PM%x;IcJvrP0q@`+i8`eeM5EscJcFn4P4 z2Pn>+THJ(yRsmx)@Giz0_N}Y~nsTgN-+lvCQF+*oW9q_gp}zeU1WZ2?rqZUr8h~CZ zSDj(BWN#7kP)+nwZ2QmoHNVUHR@>VIU++&@`7VDeOMix6Sc_+&C{qxZAB@7a;rWA0 z@5UDuUdHHCqhxNQq1Kn=W*k!kWFMs&18^Ixa!cNrO^#qiPaAPzniKI3TNnk5l$Ji2 zZRel?`9n0wbh)?^6>)nl=%Wh-xFjxrsp;R82gGFs< z(PZFk@gshKU4QGqgu~oDsNW$1-&j~r$;j*Pb1`325;8y`{ zfV(cHE+lV06e#Yn;G7e#RH5RDxj8%aRrHy_gR0l`Zn`+;t_&JaN zod1T5_?PHQx0@<+lP=-M;k+21;om+L+s+i8VKxzTYMRi@(S@lDlvnb`lezCiy$CNG zK_w_(WB963SMsE(%O3ZG_wOfji{0RU@^Qc1c|Rfja_2>Na|cX)KS(`mOYcMeZD#0V z?E2o5QMb1ZlRxMJ=sh7aZW$&rR4}2>dmjcyn4XAyB6Ze+_KoBp<&}g?VQME+-i#zp zro0J(giP55neuicQ-td3d|Uo*zX7I^DqYT`bWz|d2%Nq+mN0uEVk8P;27Y+q6MLwb z`6$H<$)=bgj@}1Yhc16BOCQAVYps|eh+;pUCdi++pco^64E!d@A3~2Hf0(LrlgJ-KqE@sj zu)Co(pd9jk&hrOQ_+Fr@&hOo^ha8!b;NBQIPq2|rtml#Q?jD}kh#KZii=Uo9W`9=p z=7mUF!d0OK*_EP^_mnJ__d*?#@J@|W%{%lZJ>p1t8$mnlROo{m{;1LcmWxoCG;qaI zmw|#;JhcCC)2HBcm-UlcHMZ}kpgG|goBr{oyC~8)kWSd}{71fk=Fs~&Zgg*xT;Cr! zb~#pG`Y2HJ$+3rk)?v0FmBpV8lV1>Ap9YEn`;T{%2UTY60zS13=)4n9Y!W_>^jNh* zC>9nk_)2_)Iq+&hkT}BhyDY@XyY~W-lXvey!1?D0ydLD;pICXv+EL!|FMOqP7m78} z<}@B<;2KNd?drV7%j&2AFisA$xV;}nS&eWXIQ~oF9*p+6u8RgVp0l_4wc66hP~5h5 zt*z@V)>ms?S^5ONvEItddW#Y8z9J10<+pne?8weceKSnGXgzUlJFN;HC7uYr&MGzQkJ z?L?%mvTW&CYH=1o(U;QOuz8mzYjhs3RGtjH9q5a9T3Pr3>3xh|c1F9!AdPn><5asuiHe=ORb8VuaoCUE}1Z2i-d_OVp_Wt^9 zy^7TN;;IVG=cOVz82TLyYivZb&X;O%uhI~aGz(x=eEL%JjZ4{V|62QF;2 z6W))uDN3JM0@zJBzF_w;GB3T!u8_kaUFlNixMdGE(~eW-WB$S6#&5dWWp3fy8)ogh z^bxY>ye^a_khY-2f*I*KCk@Ys8Hq^x^110q<|Ejh^Q?n&iLeQ$BRrbfHyy2-jlQR| z(J{?MWJWU=eWN+GpX3Nln2Q+IT)&^eoyR2!5%n-Vn`TBh4*?7JJ;}4IGLAaAT*y!N@R;QcBWk_gw zkQ!2%<~iS_9wAOk-;OqIfV3D{nwCm~Z-&;SSa|iLXrDig+lT1bJh8L#zP6|ZXbIwD znh&uF^-{3b+BnBesOIUl9I9_s*(xSzxTT?aYL=C=3vF}A;Y1ZekZP+Cq6!FV6(9#t z1$+bT{4paptyl>winN~;b6`RzmnLD9gF(A3KZo+66VdYJl5%Jj+kn;Qp&v0vYu|D$ z;!;Sffqav9B#}9Z9E*BLKEbuK9`!w&EYI<;rHTyNFjH(v;E-+ioOytH#hgS;A3DR@s`b7Iwuwh;?+Xa(-0geZ8~m9WtG5H59IJzOXq>H* z8u;j9uy-4Bc{AIS=cgA#p~llx7&7tkdNQax2_;jFE}jp%liu9m%1MaKb>heE6*116 zlvWBuH`ZAN8Rqfc9Peg)El?4K*o1Gx zOsOz)WaM{=OI~I;2Z&C_l(-Gv1oajX6ingaa?a(6vh&tGehx1)M0f|7e%^J*EeD}w z+S_p~YY%U-4Jp+W=63you6THb=n0r=oxXR%nZj*31MtvV!*QBumq}NfrgIA9xmrynkeTwBF~P%Q^|P48>Wbq zAF!QB$<5WAa<@*$-D{|}@mg~9(0SZ5}3c|iXjuhBsVr60sGH`ymtIkxm={BfRb4-{rHyk_g^ z9j>&jZ<6`OG+*^7*)Z4WUfJg3NJWvj+rc8IK95dFwG$;V{RsdLq#rRPKD{q7(%lXI ze;S6Ld-nnSmY(mePM>x@7K&8ZzVt|Gmv|q-%0LZL91pPgYQ_mDl2``gfF?2FkB|;#Uu3p%{ zC1|BlOpd>7*P?0h74B%0#%g_;lxcGrauuX4W{6c#AE^pTwA%w9bKcK(tL&XFO&6yN zI7dm({gTCL$H2#Af@*qJWElfcY(H4c02I|>NdwRrVkkOhfG|93H*qrt!gArR4nq*m%EVCf)A(Pl(-4>*+aIa@cf0AoFR=gE1-I!(w)J^_XqNuI)GT4kWXakrnPFM9Uo}hC zX35wraEY+G6zyZplCfC=n0{uQe$K;cCf2XdSSzpi3jE}>E#6*6kJPEH4IQ%UvuKNqD(d4Br z%&>n2!qlJ=iy7__gNb(UF9GzRc7^z(oNR2jFzknT7&(QZ5f$o};=k?I2i1YrBC6_6 z6M3MjZXmvjHw3Y=c?wo-BQqCZ@na-gWBc}-qY-m>0(^LLsD)K$-mnWEG1Ss86`_bT z6k{kvPZcy1daqHU@wv>X6r5H8UJ}l8PNf=qDmt8|AN%X)#WFes1u3w7DKS6>%h=d4U$7QLs?D-US3@-0s+;>$2>eGL-F?xj-Rr5tV0o7in3)_gi_tAUQ%b8%HkAg4Zc4o_1f@CkJ1 zdB24p#(bZFx0wKk?sfA|zw}l7R&MTnPXb@l!1wWIj<>Y^ zW=oTwfJG~I8hCd;&Q(q3LO^nH&+0c%Pv%0lM6Oyg7Xr*Rv)6CV^<}v$nPn`Q1p&!& zj^Dh%RAp}heLa~L0ZCg}-0fr(PD?1Gu(Xr4=q30&NgdUo?TMOu!8L`m_i7zRFZI5O z%)oI6$*wHE4tQ5z_7U94^PvAkGTjaHynD58Q(qiDi4IeRO>Mh7KTdl$0-w3}!_w`& zpW9DvChasVca$N?DFc8!86xIv99O#86w(zb6^ zKP*1E${!Z53s_zC4~r)qeamMW^%S#Po`%sNb}f73`eP|hGcLA)QY>q7s1OZ^vVi|ifTRy-XxXqIm^$e<73|DHjNJ zH-WzpSC?m-fp;au8~@=YRIZ6|a?54XRN|t-Gpwp@KX=RWf`%w9rVriVVq|Zd$nz{0 z!`4h<`-Z#rz&bY76nFa2ip#(`eEfzC7G~2Gb?!fXsAFT{G-L>@HUu_iVSi%_ymh*6 zVV`jL_EUTh7B}Ide%>UWv!+7EzSTp}&y&ix`e zPodWkO08Pw3~E)OKcgQGsG-h1$V7l|CS0H6ixRK$`CV42^%}S(;xe7fc=06^h@%Sx z#9;+i)~q6w-Tw!a;GS$2G2#>heiY&EhORYCT6i~cNIGvp??Ph9L3LsAdRH@#QeIF7 zg0X;=!yrWC!_LoHqF$_hw7>6P5$cf^vpO+-0R(#1v)IoM3xI!^ZR|JzQ%==f{((a$ zVSx9d?eG>!4q*NCyFW$=si1Qb8cjI}bMD`=RE72aTE90UzV|oyR+-e-=R|Qdo{;!K zo_G-GeK_BQG9m>p%4bb zJOzF5$Mzkoo$Nc`qkRbU_lZ8j;%D^%1BW7*8tjB-z|#?Arg7-NuEQcphUwoCbE^0E z{Nr~S5~kO;KYxOt@QUxXP@eHe!n7!iZ*?+(zSRk@ObpQHm1r|r?<42YWG0Uy@IuI_ zwAcfFOxw!hlb1JfvWT~hNWPpbxOXn8Ba5llH!00YMKV1+on!Hi%CL+_p)Mb187X;S z5;B5SLId3ww*<&sMVQ6HDg(!o4KFJbPZ{spLQvee2Ql^u%5bMQ1 zB=n*66_i{P_sa?PudKuU?oUxOv&J>zh7g6@`9$U*o;ex$&lE=+>k{8T)&tQKKb(Bu zS7x95k4v`Yt2_{)DTCeV+cVz%Ej_S?ov&}lQ-4eU1iFId6}}Ci-__*IVYgJ3#^l)4{hRQeyZew5|9$VFef#1+0s+JT+f#Z{ z+5s&C&)SQpUg2G>QBq;KLWT1Kx1UN$Uw=x*eXD?ikq;g9E1=x>G8{1CjbL(s>_IkH zxKCqGcS0et<4c7VrU|XbUS_Jcq4*L8QtiL)Bkl{{dT~m|0NJTwT*N>J7H-9vB+q{6 zYL#)#oQvFQ&V2*#Bgp@8U-Fx7K@Qs~_vkGyKhr8|jSGtp`ns(!+=x99<(pcA3y)Ci zk#tr(01M|!@&l=?^8nmmf3@7j#UHZf?CUo@mCn4F#Bb%bB{Tekv4>3+>Sx|Bl=iVr zQJK!K1mdeE<9z~Y{*rPeCB8+@eFMU@ZETL7O64sc2jZ>~szXdXwrRfpkv=w))Q}mN z$XQH9ghjXvXI2c3Ymli4S4|;~?Wb96IW2W$t5L_3)YA34?v#z_Rl?%y1S8 zg{Ou3HMwI7-6tmD>PM{vf?FeaFIq0ZgHREUgGz9<3eR}s%jHaJVi~j7GWMQmR?PGfS!F$Z~lk)m*z=Uh9|3bK-xO56KtXldT-8 zvVcCvt0FO95Q-*gPm7`-im61&Zi*FHvDwI1%J>qeYQES!#yf z-O(nt%?fB>Kw`S_vH(FbiX77?8XXIZBA@(rDBxb6kQhaY3Vw8}tpje6BYm>v;k3G3 zo9CTZcoC!id&|$EdrepH+U#r z1z#BtNkhB3tqkrWxc-e!>)h49ZWO{*z1ji35MKDnD`d zKz?nn$ePvpy^?oWcR^p9N*FGRr1}MiXr=e>`sY9JN9OI6w-w{^(=vDXT_&Os@A1P3 z^0PT%Fq=g1gAou)f(Eb0+VCfqs(f*$yxaoSny|Jc*HtJK}uE*f-;p(xh+mq|i58sWg{u(cfddqz8 z{54`hfHl%*wJnI$>JCl=EmkLcbVrKN!;XO@UiW~DKYl{?lWfd!7vcyb4P{3b};@-V#xxF zF=C0mhv2 zT>m+KNbM1I6W8d}e+ZA@+TCRemVMj^;Cg2U=E2Rm#GROw==@C_ZtKnMGVZjHFYTR< zdybNT=JG$zZ<0%VW5jr+Qz!rBw)Le<(8N zLQDJ7f1$1I)6Pr3WT2r&B|DZEmVU)B?)m9~Dgbv1pymLv?k(`n0?yBqA2QM&nLV)m z#%-NegRP#`?@4^OOS!$xsa@HN)qb9g;E6bTMp{WXv~Q44Wqz^FtTIb~1am=|fu_ zn2e3>-o7TNZGA$wdoq@ukoUYV$XFWHv4j)vB2E|9!x9&j-d4Im6xys!=qs2f+o zP&v-t5!Ph{aA$PlKf)@-hUL3BQZ6()Q9 z2fX}4#QaOl{F^|XParn;adHrFyomEbNPr6RSMgsB|BW4Noec_r9IIN~5J|5f&hKXR z3l}4E`h^?Od43^#9ofe5-vs`fJlHx@v)5gAc;+_QCtUW)IC}%xnmPXD`BOO9y02n@ zF{B}&3AL?3(ZrU}kkEvnw=^`1%v<8m2!GZdY@Mc9ny_fKXrSD(Xhvc*@P*^hj52e? zpLP5xA8g&-hizbTEtc%f<6KK{m^9KH~ZJX7Dt@8{TIH<8`;GM=&gSNJnLSs8> z*dfg^{;-Xk;|E*k8Z_t#iv~Sm(V)#O8Z^2?!;WcA@<-abi6{CD8gz(7gC4PH(C`*b zGl6D`7*62NiTpXqaY}P4Msq@p=ENAyNeMI?nR%K&C-dhN$1%-~F`DTZ&B-yEQxa%e z%zPjIY~s(1W1D6xMsuGS&88U5OajejW}fBGsr)%D=9|qin%Nl5sWF<<5@=3m=KJ#J z4E~%M^Udion)}9R&WO>RnLu+EGoQ_$`|;H`EwC}9v1V>Lt``-#%L~z(L5}H=Hblz2>v{hKaYy}=HW4# zN5p6z8KZer0?ozDd$uZw-jnOM$<{4xtf`u#h*p~?2GvZdQsa`&x+A3#%T5>&|JgJ*YfAt z{CQ5yH`l~yu8q+=J4W-I1e)hE^Yi#~9e=tp-#j-)^Sl_%bupT50?qT8xyPR+{=6XO zo9D-9dNG=%7|jb}G*kPr07L$%7n;AV2r}=2u5tX<138@=O!a`Y}y9OtR+c$JFS@gf&_pQCP0^QH7P8 zB}#HHwYW>(o2C%Jl*knCAfNgXDTQq=e-2k?-!zN3g0c`6Bux%K?#@vB#3w*kuXUz>=;XThn2amFobu zsR3*!3}8EP0NY6pn=GdXux%W`Ha&ptR)HjLlSAHa710c;N#!1h3gZ5Y2@Fo5kr1K1usfbAg;+c186=m5402e4f;s1H-PQ&1K6J6unpt4 ztpnJeIDqX*1K6JIunpt4_5il|0c_NaCgt09hiw?YJ!Jsfr32WWI)H75!#0fHb`D@$ z7{In`0NZ5_+c19HJ%H`<0c=+cV0)UwHjLk%K7eh{0JgmY*q-6A4db^f2e3VJ0NYgq z*g6i|Fn+sw0Nb+$uq_T?+vl(in{r}i|6L`sr>VEvr?e5#_ zTbei1{q}wg3^el?LvrE>@c;Y&f4}@b^FA}TZ=G9p&Z$$UPHm^E z@C}_o_p9_qO$EVM^bOsw(nmGj0eodwQ9fgSIpdu?Z2Oyr(i+11Oy6@+JD)BOVMlaP zd!pu>a1i!N7gtzUP3KYiy1;0=sEaG6k18Eo>31mW%3}QyrsJuf*>kNue_zOnbbm!& z=+%cj2swqW0&1uW9fiICPzl!0jGd#H2{=7u$*CkSK_Dg+RJN2s* zsb7;w{n|w8f7mbet?ksWOr-vtMCyAIsbAGE^;6raKRc27<%!g{xNTj})NPQ`h`i_37C)D?+CsMyS zk@_>IwDz z+(hb6Nu+*WBK7n8rJhjV&q}2JW@jJ{@6t7kL#CuLVZ6ok@_DbQh#J3^+)wfJ)yooJdyh8iPRsFNd1g{sVCI;t%=l6 zOQgOnk@~~>rJhjVPfnzMN+R`B6RAJ6U+M|<{lrA-4^E_hQX=(-^h-UVz8{}ReM=(s z6B4OEs9)*{^}U`*{kTNxn-i(e_DemXz8{@PeN!U!V-l$!+b{Km`aY9L{m4Y>8xyG? z)i3pg`aYRReJYXqbRzXyztj`z`)DHdu|(?QiPR_hrJhjV*C$fnkVw6fNWI!G^@RF9 zoJhT#Nd1UJ>LdM9PpI#uMCt>H)CUu(5A{pEy}nbCWK5~UXdSp>0V1heS4bpY?3Z|Z zb*CP+5vLkS57Ul+IoxF3XdAz>YV{{f<}P$Y`q^$YzT@TrrT-SZ)I;ZtYti4A@JR()Ww@Ql|4k7mC< zQR`kNIQ|Q7ZF?dlaeUvtf}BnJO>)lNH9XQB@>zZ)W#WZbcP>9l!jeumlhB8-0zOWl ztP*{RRi5!UJFUNQ%op)&;2EMnS_*D>*g>~gOlNUaFGBM<)tOW}m|w(|o0rlx73hi*=>!i>PF@Vj2%YmRopfp!@{kG^aB&0hDup!2f+}`i5XRec;S-=);5!mdEoyPWdu~Xhne!gMqEeQ2$3O_&j3*I z6`WI8zzk1XBOsJoIb$3V@(aj>)Jp7pByBAHF(}ed5!-tAEYSQ+n7?3GF_l3nfmAxr zBE|*^rJl+zj6gv_ZUh?}f`ySR4h)8rC1<-vP=aEjgxbOgPtGc%l*MKsRc@ZaD6eVn z3QHHtQAlOxi{O8u1PY4-K@OB5MG(~dk@Yl+i~AR_(F28)od-pDEgDfu=9GhZ(#GMT zhBmUi09Rj-CZncIuZ(CfU^5@pe!i4~W@b=ENP%L^pco-p<_RwgBT!W#P5)%0Tg<-A zH!=viBqVfKu+E`C=8GAqQ#!XWfZJ&`d3u*@B_$V75+i?`Jsh@; z^0zX;4h{%GiW(UxqqzBQs*x?@=UAE$?*euz&r3Z=9n%b>x>%J>L0ik%C&Y4_hr05d zXw8v;D2Xg$OU6yrv1Ncg?r@f2La=O0T5Z9#p}f@=(AakG zgC69{$^``r=25$tIVo5INYdCyOSYWeMUh*@rfw~{G-*CSG7~HeK%<#QsmmmW7m8TO z0Xgfks&z~N$YfN*sHh+p6)fppZOavP2+c<*)J0GP)-;VNbeQ=PO8_IGc@0u9F0KL5 z9E#+%Dv9-wA}#0O07b?^)us-}`U7Pw?N=t1o?j>o;#7)-dHACnvox6ARf5z9(2_8H zj)(jDxN6;)22^$`oN#1{5(>s3RERXN`I+hF!%Q>JF9*%fvHoft>{6nGv~dC+lK|X+ zi6vNs_!UKVF&JB7J6e?pY8LZT8j!q2lo?!{&`;#ThlU7Du}&>5)++jy;t@Z8hbO}D z9e08OV>}snB)$pr(PUKOfMfnn$tUp4Z&e9^XXFFSs};y2Cq{h1m_#tm4CFwX+H!8J z4X?51r1mExdq|Gp*$Zyp4!xero?oIb)^^O2(~sljJ!N1*_eC7oR|ed`pc@!+1H%Yl zhv`m~5>w=Y-1zod;bL=y(Jg+HNd=1Cvo4%i1U?#v6QRJzT)1vH#XeAM?%DDhl!e>R z{BqCzM_K5S^y9+)#u;xXV5W~r9?gFFJ?GpN?LX>z7d)lqb|}w6sT|{UD9@H~bQe6^ zLhaw!9U%prr32u6akT_o&^}5qwQuo8T;m`hRAaJ65NelzP{k-Yg4nGR7~2twjX>BR zv@6p~*!P2z(s6pO=Q6%Mi#W~~8xpFGMeJ7K_NwswWp1Q^k=ydw z3Jw=$!a{BU#zf+lqV(lLm{5-v&NCr5FMKvUvUwB`9v1vuY%zjmmwU$Xi(~4|E#>wu z@-cHe`FMC=`GmQ_d@{V#e5!#<2B+<*&)TL&<))=oNZaxY%gqYkDK}e4PPy5ljFp=$ zaw)eA$}R1d+X?^Qlv}MPmrI2OmqRb7gl%OwX}|tt6dW$5FojV>k>GNQP6e04?%EP= zcanm0(w7Ti!v75gcZF^udX2{|Nk6xzKdrHnZGNOZ%>nyA#|c0m!nGwo_&sciFK3t} z-8X~_(_RgG(q?#JY$re*XCjaXHN&_UMDJ&8pad{l=Qw2-%)^~B{%kU$4%9IYJ`Yj$ zw2gzink&)^?;hHY^x@q@a|p;89N)w+w^IKb`ma{VU20qdRS8UMU{nINl7_|*l73&> zdlh*7g4!7Q2Fn5m2x8;js{!n$%*lQyTtt%{U-FwI(a7c+i`j{tev>pBi;Y4y;5QO! zU=#OZz;7giZ$-WR(;NmMCl96W8Ag@+(`ABCIf} z>5Eo26W}-bgAne=WQac+AIH_Ed50b$xCuvrCm_HBIC(nU2^Ai%$uk8`*d%Xhyq!Gz zBw%4Qze$Q$oq7sX@IiQ+Jw5*6wD7~x@edCVKNR=e!xsEqJU>DDu73cscTg|W*St^9 zU!v;ZCgSwf4D(Es<;UTGAE|r=1Rjq7u07cr_Mx~R_;_4-79Dz0SdR#(+%NrVLgijx zT0ao*>@qZe$3M%%8AU2EJ>CJ$9%%3R4pJ&u&N11u^=@pz{&Y0e774Y)Hjp^muR^ zdPaa`>I(v~{nIxf?H9#HP$<+Ad$vm`5(1UW>*69ga^v`K-}beMFHRKD-^Bi7QJ7pR zxBnnI;8dR6{zcvy+Tg`kf|`BByR2dn5**YJHr=VV5y;bt`Kz}qsNKB|e9BxU&ixn_ z7LmhAZ_g{i(x`Ix);M>nxfL9g4;obBD$d9^uc#1&RQ8)M`xngzY~a%mCX8Ktl63z; zv8gHYV9td52aq%MZo4ob_sE+qywZlTkJ~!GS^`Y^y_!^_vt4;F;D=Za9G9^&H*ib& zeLgaY9j$+U0QE=C^|Bu!1v#!CA0PdC`w^uuhEiaa&yDTCeH9I(nz?By0-}}f`qxlZ z#W2XTz6%<040q?(OloXB-Lap8a$KnPOi`EUn0H0OI=bbH%BktqvTv61UW!>46S%`_jZ&J^3ssPU4Zqh8_46T!4a4>z$%c%|I z6oDw3=zOz`_hIn(CDHlmhEG8Peb&pfJ2ONz6bBh#PlW?78qxoJW3n@ zgA_jpCf?FQc;1-X?;HMFv{n&#PbnnqA4e@1$311v9&&bWxQBeMh+{ycCE4;F9ta{0 zM!0)iyHvLv-aXD8 z5APn2OlR%z?r~_u;oajntfh8%_xS&$-Qyg$1YT_axJZct`y6XcF$u2h*IHzbqN;r-)QA~^CVCNP}-6O$MY0Je!zXDJ-sKW;VT@c!{dJp!*qLk{mB zw;J+4fB$&PKJU6LSZd!*P9L((C?>?QeCmFEAtp8PReE>$ioT)ybxpsrXK4Mu<+H4T zwe24lF0g-`y-DM7)-RJ-mNh zA`woPXq$#}Lc{jYsd0z*kM~jI684iG-ap=2;|}j1Z>@2M_m7K29BXrU|9BtP=HYZ3 ziub4w?;mfqHi!3*bBN(I@Bh>Hk4IKQ_k7#=fGCT)OFWuKkO8|{Co=oT%^X5B7S+Az zTxyEu53XG2d0&PPn=ekhxCN`|uCnvlaOs;77kRuh=|M-G?Oj4n*0 z^6>Qb5p3%m#y-e${bk6>Em;kqHcAj)%0gkTJUoXT*2DYoeP6xFm`IK7Qn(0Eqksoo z_P6Ejm64Iz-MEr%#>d}wY_SjO*C9GL)y}NLUn8qws1G-Q)kb$>vn%$SVk;Q3!%X2i zx9w%R;kCf34LB0yvH7T0-AR2M0eRf|R$C9!xb|(!E1|L2jb7b1lFg0o8_DIy_F+5l z40axPDzS@zyfU(3>*f@+qP$_#$iSwN(x#E(2=+oUmt*rIm2%}Vi0|Ej{~7%MC~V3T z@qg>R*bU$}iJ`n<6c-DyG8z+5a7+L;$<|+p>@My@g|xBhyv@pK;ul-uzo<37Y&}34 zR#;;$N-b&rs4dMpFo-m)#3s!^OPUvJnyp78ril_~J+G{f6cQQD*M-rMqWKzUDPI?s zMoNjq^K~K4J!^@Sb1}-*a$H2Yu9R~z%9V0F+qsBxR3L8gncT!BkyUtFmdqX4GVsRRlF`LwSR>_|MH+tGBk6sO#Zs=iGgqrEEtK-rrF^ZnbD^9WEeG4% zB4P)##h5o3M%4GsvA#)cb2*w{2tsChOvmxF?9qk>o! zO{;OjDqGa3WLsjWfx&`g)Q03*qNvqCl&Hzbw?t7>fYTUq1VvZsYJua_GYJht zQhBJX;@o8tnu4^#_Qgs{3C9JNNwEBBg)wndhDte}zf6LmPb+L6N*6ouu}2!u0@h)D z?=eutpYe|KbOE;!4$=lcAJ(hj;lfPZLwH}hl-u&-AhlS)ep%-$_WBLv@m2P`{tzY` z2s7Ge*E?(FoQxDYd}fO}Yxv9>h|Oy>NnK>ok7*W--0MSJR>y?8#B7J z2s^v9n44b0*%RTNwN=ECJ!Glsj+9OKZYI>-XWWOiF^n_1BQ!{TE58kg>985eN!s!)l%wt^ z3cPunPCGiIDNRd%74}4{qbW;kdxJVdpma4yaowjOO7)p6Z($=T1!FDbmV>yg#u{W-`XY<$XNGp9cKNW)ILF~!B z=B;5g?8PhYxh{;R-(`C)4y9QhK;)H0(D$2s9*?^Y`Fq1<)sxEhb;e71-hKY;x~l93 zF7Eksh|SN+R^XK-V(^>tBM6rNm^}^Ev%q^6>eNPQt12rCjH+`Xiyrn(&m)XI+1wq- z*8pcx=$>oS-^0bR|APIK*Ky>^2!2yA$a_xZy|0 z=0H0ve?a%hssO~KY`X@Xs>(=a>x)n%Ni3B!mM07xA;(0f!bmvHO4zc1b{_U7@Kp{D zglBqK-q7*e_H1_eDl5-GKDqx78~q{ouTt(f$Im(RZ!kTW$?SvMCWDyDboA4Zz}=#wE)VwI;o9cNQ8F8=rxY;6Z_V-E1j*P~-KCIC zmO?66JS5XV*BV{$*GnZsNNSGGE4J91Wyjt?Z(wx4cDTMm!L%f7_1ycvzP_R--r1H! z_O0B}z?E$z%rdDhc|bO<3?o;@NdP=!$l4Mdkr1;bI2QF!#GJ?5sNru!`+%K$%4?(2 z*m3XtDX>3Z7yE-LPoAyiFMB|=XCqS9j}A|8fbBLXm7q3kT`UVIbFHb4Lp+pvtWRFei?$=_PTwFKXU4L(mb`o;%9&TUg!1fCO1{# zqUF4vgQ7-gn_}nnklpaSp4U@B9@u$3q!*so^G2i(&+EArfp8Cd;5`R6{>dq{hm}pm zf*i>}k>aX&aqiT!UUxMB-&|EF$z1tR0yMI$L4Qp+>+G;dSJXM`|w+>xI;c` z7sedI_5m#mJzw-2+8ztV*ttJAmWHS2;E12aEarhoGIx_X<_Bl{EONSuv4zz2v5{UCypB6fLo=*!$b38d@u9U0X$3nxoAs_2b{uxlnJ>Wak z&(z8?f+`c=n*d*D$Qdb3f|rj&rQUO^t^BtCz0NBk-Vq!R`V!CBn3T5&_&-yo>1%L| z0sF=lY zYUN7&SbmQMz4ti$&H@3Nbw&ZG&})ZZ@k!UWzCRuc9ZUkRK2 zO=7hj`l9P0<8{a*abxhELBEZkY6Feh@I^S;F2I3RBm_siiPI{o$Lh_gFrf} zSP-hs?>ICMR3Ur~@;C5>L+5$3<499E5L9hCe#eLENXBS2CV|06IWxDs1u7CAuE+Vl zpQBvv(Q;uufrKSap$Zcel}4!=Ty-2YcObv|EW}zq8}F;n=G$A*+)}hSP$iF3>Snir zBo#fs{D+9ckzG;>)NslVL&$GX`7Q-l*C9*G*C9G2&9Im@jgw zf1K`@x~hPKSJv0xiTdw(n@@se2m_}g06Xz6{ls%(E(CSjBgc$i3p{>im6}#V#01W`;?bvR{k8JlpxVHN} zG28tF*obd2{~5pjxA=0OzvoAk(kMl)Ahb>)w+%JyYL7E>88ybNTba4)TonUvDI&~K z@R#R4>95A~n-pXSdnRNF5m%tgKw!ah_4k1fG#Hw4V0PLI^2Yq-Fkn&e++J8ejB3b@OC^jW)LY);FROJg@ctEY{kGa(RTE=-HPteURYX|~Dp}3{91y9P5RN2XZD8J-hbL>6@Xfx? z*%uKQ8r2-KkS*s-7V_nsX2A^AY;4T}EHttJpPvN0iqC$*1p7vyEre*%th;4UEI)@)BOZA8H`*m?G3X~E;aUQOj^_otSB58$|YbyBWZDK1en<^{|Lk* znMfcbL$gPLpP{|5$>oetou@a)@sRcqnngT;3br+5h*t7*619r{1{Uu2Rs}td!#Cxd z&Mol#aQJ~7zuv<^eJ}Q*{d>yaw5<|Qp@o$KlSA9f*$OSN78lI!2#S6LbujDw5_SJd z_BjXBT2=feja_8w;10t+1kS}YU&QFmo{cruT>ZV!d`OHb*jkI-(_pTGvj|;4*4RPl zdmgN8582^zhL^{=@Hbp`ky+Gulf)RrfpOI3Ag7FXJmN?ne$TOxa{V0;c%gdz4eVW2(B};H>;QQAvFL$d68XRy z5pDh_f5XZP@q*c@7wOL*@y8BgQ!6VHd_RP^vWC~q-+X`x{IuZLI_!IAf=B*6a4f3Y)HA`GaUvR$c%YMlP%T(HN1LS`kS%DgDZWai$hCxCPxvV#P$w?7E69 z8oYuv=3QX?IxE8?!S{7?R-DjWHfLjH?Ks#|AqOk;0(jc-qFQ{0**^eRU31~YH9Xp&(G~0$mgp&7VsRE=Qy50zB*r> zTQCQIW{o*H6!<3XUYuSSAQ7HOgeMZg{{(4p0S8P%26Y{6A!vV(wEZTf$V}1<75Cgr zfy)5FYGl|-Qo*2Da@OAz5>oS|D2&o&RiqrCt2P$#%SsP{Im#==ffdtW7M%d_IGXGs=nhKxYz%BWTM;o=T7+i3i3 zM)q8Ck1d-l+hzCDOTtf(5(X_&F7RE1LuO06Xl0T1Een|w z9x}8I>%Y!d<~X0{N46Dhm8Y=f2cec?l=JB#PAvXD#_P*J#6x1<;H|zKa`mz7;T4YY z>wkw9YuHXluD+Ckv<5<4FL7`wViN<#lw$+j z73TerGSuYD9|h3@&O+uqd2m$?Cg!>>xPp*L;`$&KX!%$FYvf~%xzIQApl@VR-^h9W zuNaRK@b=t}@?SlF62LD)le|42WBB#!;lKG*0uKpr_Spd5K;Q)t@C*X4C-A}ucs_w| zAn<7s@KOQ~5ZH)-O#2)r@^ zRtfww0-qBBkE7_mTmf)T1U#KU3Z#CgXyFqWW@b$I0*1+*2`@5C9!&UhhDphUpT{tZ z!h~PKFePTfdl{w(O!!Y3W=2i;Z45IzCj7SyQ-e+T!wgeTP55&RQyWeAZicCdCj32y zse>BUdEYwf@sGqVh&2+^B*x+D*QM#-aeNNOY%_X9>()zGi+1v;Fb(Uu-z_?9kItv; zr(InYE9KC54rzowKo#JXe!bW`gLi?G!4d_y)`_3cs^FqMx#~$U)AE($r{mCO^3R{X z9z(f_O_gbBT{hkEV>?B4+or089cSmKZre0!VIPcOV-|Kp1RJ-o_eQV@3;Rt(W75LD z9mSinuwRGqR^CAAjT>HP*y0<0pB$yDy6~q)@KG0@kKki2{KOExa)7kL(N6vA)Nt)* zr+H?yo*V6_nl~ce3LkiX4d3~|`#!$&f%lvE&IjK2{d=q)nd;nd3aU%xJ3heFJ$%wI0@`vHU(s#a>CHZbY3ko%Y)nnEsvtQAz@obn z-rW#I#(0fiiO{_AwD~O`>O_?!kmK)|I-2noz$f~o90w6mX0A5C>p?IhjM*(hwo8_= z>Im;t0hlnxc@;a=nvp`nL@W85-o2f3ueH)#{d1hK)dfV3xzZh(HnKg0pZTciJI1Agr)86^u8|^OZGc^b* zLJh+FM?>fbDb!MF^+ZQxm{z4CiMpvG!O?*+2xWb)8dIZlHfI9A`koYKPx7FK6J9EN zGvvUIKrnvs%?$0us-XC{TeXKt`l>d|C@a{Xk3-+}o~EBt-)p+&SK2TDX7P2i=MfJZXZuk70%eJy5_5QmdV^Zl~ zsQuSP#uO4AMX>UmO)VZOdT8z^&di!7Y||8B43^36o$-b$(j%r8Omu&M((T-IE~w1 zBU3{j(7=8M5KPD&=Z=10jjpLiSecPkVag^=9}U$ppg{2lH(O7Epf$Adl%4^5-6O-fbIJczUjqVDZ#fz5dH+s$>S|OkA6LVfzVwA*?^+jWR&IeX zHs2URQ%wTUGls^llaJUu@$ckq^VdB6h-QRwDmJPyeyQd`Kv(!cANW?j^Py#Yft8!4 zg)Lw_u_JsDJ0d9!`N)z8spbC^=~M(eEeSExk|+i0eAfF4Xk5muqa)FPk`JdUSjQt) zv|F%=4G*ntjQ#)?k_2TQ-4FDs3h+PB6yv7ijgnY93$vI!gA27(y?1z-V6OJt`Jhpp zg`EVZhO+AgH=vGSFl3!4_ zbWF(3!!Vrm;DSk=xy{{*^h0~`59|4_!8`xxtSQ=c8#%CnH@Sg7a|3T?ppIpeVC5|? z{LdM(ETtuUdi}OutIh*l)fSS|j$5FJce*;y3x3(+(I!p>M3=`Y@@QK&4)i zP-TS)2z?uVX&m`0?M=q}5a_*${Wu-T?X3q)g8|C0Z^w^J9UDK+F2N~L3BoieAI8>q zW+UX7m~ASICk+?8Y&Y*Q=0M`NIw8 zG+*_yly#HVt2U&t%8mM4y%8G+8EMqMjM#5cazq#vW)pzjDIAC-=xhnAaunrgVUtpM5mr{19USP zA>d$IMMsBi$nGwVQyH_K0|S1OMj47nGL?FPJXK3u-$Q929#Pfv0CI50!K*;93Rq5q z0NaTihUr4Xj>AbtTI@q0q)Z3~d8`Q2=tOTa?3N9`Wy>&L$gv&D3O2UXUr1m(H;rRR z$T(h3n#K0A6o5B(nGRcyIm4n_81=fSf7lyqC*MOohV_!kR!S5F;a6)Qh&$u1cP6vDN zN7{0aBC(~UxUJI=Ob>J@<(-Y+UsH$FGGRi816{WF_0O__oQ398)F2@W%@F!)(1#x( z7mQ^MoZn4nuQsV z9*`lgKek(Bs)7DQKx$l-Gk*FK|1f4hjNKf4kj!YFA|Q=nWNd|t)pwIk!8>}hsaCKJ zDeno$$bRYX(hg$UQ{jvKE2HvlMm4D=~>1m_sBgNX8I+=(d)7v2RE#u{&2T)GT{haAHnRt$M zg0o;GoUND!zIJAy?n`LqzpLMBXJ9G-odzbVooOn=@w{4AcoDdXiNt{x1I@N%qAA%I zBK4!i0Qmw6VD~qfun0w?9AiLCyZS*qG+3vIJCqBB=1!!e*dsY9WTy{6LCRGOl*&O7L#_ z;ZoeH2i3VkAd#dWPBFoW2OaRox0XB8goQ*^kmahDl9xzY@8WLB~2gqoqb|(7l&@S}iJp^R_57zy~v4tRq z)v$w(JaL?Rd)D)QL!Fqu{#FdV3zgl)?COWe^UbN+R?~d!Uo^lffG4&BM**z20>=QH zX$6i0INA!F0C2b!IC*nwx)nBcbE*=-;H!Qx#_Va)H_ZW=eQ+y~%pTVYB(q1h0?F)H zE0D~VTY+Gxh=E; z!L3s;!DtJ&4{ME2ZXePLB)7AzKyrIjE0Ekyv;xWPNGp)s+Rag+8iHG=WP-64ZXe!? zgxsFo3M9A3w*txS(XBvoJJ|{(x9eMh1#i56}j(HfuJp4ti|w1#sqDd^ zvcH&`%GP-4d1^9SlZ((NvNgFJeH>G@gpXx$Fc5x6acC2Nt68~gy^_V2!z$9(h75w* zputcZFeqvzgQHe7NNNRxrIuGT(?l~$G*yeHV$p1{Xx3XaBNojO7EM{vV8RA?#)zk8 z@l0Dh$f4w@hAc{!YRIGHsfJ8SrfOpb&nWSX6VI_0&oLIyCX452i{~hdXQRb)q`@;o zJQKw8AdBY&i)V|)bG*efYw>Khc#bo8>clfiJP);aPPKSWv3O3lcphT$oMiDl*x)&l zc&3Qw42$Ox7SHJx&%-UAhgm$^ES}R0o~^*6eIkyj?f7p4#%^X;l+4(iXJ%~BBS3dR z=i_d%@l&lmHhP_Gl>Ta}ek6Y}qCA~_DE8}CKY$08=rn@DG?tGpK4Zkw8p=hX{9YGH zt=Joj%ok+nH?4oPIQ_rt5980yhCj39T2~%mga<>Mgbsf zdPvo*ZA(w@(A~a`V0s5XKLVd?rx)Q6fO$*(q+hb!ETJo`Ck61jphpizEEphj+|Tj3 z(5w_{XB4rl6sAsFG=_qMM|yC;aY)M;Lq)^4dVgRiDz#OxXb=oEAgibOam?fnN??3O9{~z>A}p<00_gDCR^69FAg6hQP}r z;8Y0wMwEOy1imPWS<8pebq=%;LTe7R7((v|(XLT-4SbEmxasTj;>kH9-jTPW$Gho{ zdW6JyM=JcP2tMk@|40Nk-jN#rq6j|j#$Suz6E1u%f={~e7f0|Z7k*R-Ut?gTsYZr40xe4J$YIMr$Z zaT)uv7kT_|j(cjOI`FB|4{aHKXqDXuaVF!1UKOXU&M#pHJx+U{Hx5;DKEwt@dbJe! zS=HS*AK{GorNs-p?93WaO2hz%-5x5I139lC=Vfcpq1%XV&6>i5Ecd(Ks`JdXQ8R!1 z(g5?v*qX1h$#~BIvfm1SV|su&PYtM)gImZawtSt0`R#lIv;odeTs)DRxOjU5pYc1A z9?fna%WZGq6^A|)%bAkWu8n~hXTm=M)<7(`d7D2o1A|dNjVj@7{=C2XF^C99W-xmz zAIG~t^C57e(@CFT*siLk>W^lk2bktzk_H$#7j!LtfIF`M~>U`Ob&vfghdUvgZrXL0{7S@w1Wp`YGJe z68e%4f>E8nmMCL8F#8Eg>whY0V+O^KzW?AUv%`DtfsFT@@g2LhQOY3YT@A$8_k^~&^5AkxQavb-MwyjK{fUcv&S#=P zwiTtcyj`7vLYRdB(GufkS5alCXxUe!*bP&2)g7W8GQaaZ(ElClnlCCeMY^(u^m!3c zQ6h2iD(?A|1E#t`h`uP|*bY?At$ze`Ua+N@%Ve>|8xvCWWaB17=l}{X*Qh^{;>cwi zB`=I4t|#B}W*-lKsJTpTuKoe2-$<6xRrRr-&CD#9vyB3F1vW}>Sy?AG<_MOx=3G!$ z3g93|zZW`iUCDD5gRv!%21E{hOncYi7xRHQcc^+&kj5E35Hu#vhW8A77e(|KJnZgM z=1@ce&z$0(R*{IDB7szSj0}t>1VVmPpkq5y!8}~6HI!~xMp!Q%3$?i~lD*3DzI6S+ zbe+;gV!F3gTS}yK2d75gaUlT8rp~9C z+2iqzb_nM$+zLCe=`76(E*m+7MX<#S;3o`k;n0^j2PxBS=u>dM)ANH)@T$A>Y!#}z z=Xg*xk=X_#hO3;LN5i2Jl;`T)H_rabqQ@%ByKBO4+B*~cNqL zpJrfyk0bb~?q3}6$M^fSJVS$gjPNnKe~~?z`jf$WIlYL>04heZ<;>y*{)8K-6=I>G zSZKWy$|=5p=&BCfpL7GYVk|Tq3vF;hc}15cx={!2Pq~3wDHbZnLT;wuPaxUN5#N{_ zZQ2dg24bNjVj(wIfuhS3-FPfkJ{B5`g+^i_H(Q&bE3|>fTAi#G=(mD(-2JN`g#rir zg#Cj?(a?K?qTQq8LhSrCdRE;JrGd^I^e0*92l1eC;J3o^$L}Cj3%~23MF;&+DiK1s z1ZRN115^yGfAcRyK_`3o6cF>=uY9cfY6+Y-sKn)N2V^l!E zj-Ym z_@cpG{+L2h83Zc9UH-U2Q5OU%!Cgc)&x#;01a>K^c~k;?3l2&!3uz!i4$R{xkKE#? zoIVKSJ|Rc#NRJuTecLm50PlHle=vo)`Vo{*YX9N|T86Q4$2Qb3sqg55rLI07D{Xb{ z_O8}X#iunUtv{4+EaaI_BJXSLc5gmp_CtLR0l#*xcEZ2LfbDb}XUWeKw)}LU@HYQ@ z&qS#v<6BQ*Nt>!SB(dt>rzw8^X-xFB83}H~n$B4ARPzgfuJD0=^c{TX1MgqtJ0EyI z#CJaMekb4g!26f@&IjJV%y&NU{uRFSf%m)k&IjJV%6C5SemCFwNHr-9@FzbSa>fE* zXFNVoDD2}nzRZ$qUveP6d(4Hb8A^6cMk8Nl$$$M~$_PCM#$gYO*`>Q4f3@6G9@pHR zwZXmhIVOtv>oIxUUk_(;qB#@v=pw0<)eTSI)eTRiYrYz)bi>mq+%dN0AFLZ*E753` z&-(RvS++^_XGoSLCv-`cqAMEDWI>`nKJtpzk*uRLjOnN!`9ZcmFRAMb{1F+ayr&`m zx-JVp9pMY=x7dR22HLcKXhS=Ak9> zyyTEshkm8JE%-G!Nx3#C$RfhZZf!7q(7X+$4r#sE6PIzN|%r zeJnXalmn(-c(5lX)4+@f7$-kO7+6G@E6EC?Y%bpmPa4^86ohlZ1B77BWG#*B+9)CB zw!3&Bn7qg+t?Z~s70m#~c!EYU+Z_)i!vjdcH@Q)XDwY!DtXL$g-O)fWS+sj#n`lIy zilqo4D;CXYcQlYofFTl!h-fHH#ZtihmT`c@DK9+9W!qo=4r5bQ&7h&}hH7ZGp)H3h zYObMehw5v-p{<9iEeb*#5Y=9kueKqo#84Y;MpT!fjM9?CjZSUY?4;0o%{da&hoAR% zrO^+;w1%;F+^-XU!>3gAS=yYV!tb@Cm;Bn~&IP|VjhBr(7tjeG!`rcVQ-rijPW+Sb zaggy(z{?R5zlyixV(}*;{AVorxWmuKrYL`!v8Q%AcqgNHTYzK)5lQ@XMw~PeIsaQi zJTtGwZig_oWcnVP?${H~+p>b=471vaIu&>ig6RHf;M;ECyA0U=O8purfVcTO4>Vn> zex)ST{t4$Qqfy|Ps^xgO(eK)?awa2{GQK2{zWTPCbFBj+iWBs*jDZW^Ljc8l@Yn*Ro zUMrzAI~GNzHY_e#!|IYXEIqXk*q&M|xu~b6y8cA)XXZj!ptYgBoD6xekzUr!fvtWI z->?K2Eb3|`T*J>(VP^LluVLP!hko0~MRzma0pLxstbvU)Tr5>|l^R?}w4oV>OhBB? zMFkC_&tMbB!0fpgucgI>nFz{hmmj*_ZyL#*SI%Ji7(SlfJPbZ0%ekf6iDsJYV_3D2 z`QwWVW>Mk@eBq+Ro6%2;jiZ)PGNwN1KFKusPhEWheHXD$Qcc7af=vw3raRsr+A9iZ z^R+ZloXlVO34(t8XWUhX3HM*g?z+|Z*Hr!I`Z-m90d<0X&y2T(e8`{OU5W9?4}ffi z54``7?|k6>M||f4??2`{AE_p3!^X&uh8!F7uZ+h>n~nKt4;vGByTF+Cy#+by2oXsg z;Y*PEeXe@K1rtnc>J>V(x))LV`)LoWBDT*f(ZW8jiKh9i4W>3+F@G6wG1s*r_yX>{ z?3T?p;-HDtp#y0g!+>kF_%hnywOM={!y7$9jK0o+j9~GkIZY~K1e)i!PLmAdZEBu*tM?L0JE!~+{y!~_cYT?e@_l@_y zPRn-Y+NYj0EJX|RMj05h$(#liy@dfiX9gX!iEK&#pknidbyUn>Lon$%yqFn6JXNhx(2E50MMM;Zr*L4E(;wb4kqi#Z1^A2)y@l;#X|F$Pq0L<%e+qrG{|; zWi^1QC-&A}4hdsSAqu;%F;;&WD#xSOGgxm^l+?AXd&!9B5AuR#4hK zSYhe(%|KyM-N`0%)NMl>h>5CJGWz?M)R>xkFUd&Ks;>>8Pj4`%!hqO__5L-G#+O}Zm zE?pvRVlZ@POJiG3GcaIFgMk6Aqc`2fSo0YU3|jh!t8A7yGH1KTb}`WY;f1DusJ%Gp z175;D;C&>V)CY{dI(@)D0roC^z~2Db3Log}{WstF!256c&IjIq$9FzbP0~gmP<}Mz z^a1Z@JU-g`fbZDYeVm#0oViiSUz2#yOZo)nMsGoZ>KleJd`OH)0rpC;3|7`bN zjaB#xrR%T77x(LmGxkIsisOiN`_S`$*`2Qm#M=Dvmp!gKUz3P6^4JsK z+MTZ{#9DXLV}IA3uW7{k>g(1n>&_Q$%LDtre)OxlGlqNn8Z+;@=>Ge=b5<)N+6V4> z`YXD#Rx2Ue#`2#$s|Rlbi1wQ2ybc-dR+zOxM7!Zp&wEP`-i8qE$lSZ1kigsPBQ>J} zEp3|qRbw@63*D-j6N?3P=HHz8p~h;)#pOcgCck&R_p%zXxX&#tXmy#; zePj>TSWaKbKJ+8qS!1nx*}#|oqdRBR?w_vT{+J$|QG+r+`tIAhb4GLUpKrSNx7`_I zwY%G2zO*}IqT8=LYxDI9oZTF$8B6n#r~L-?DQC;vs+kjuxqRWTp7XNCYTm}OYUace zHQTuOr)-Fr8E!>|Ha`EhT6fl{vzJ`>j*lj=_J&B!D2zvMJPwtq zWQ*LYnG=h}^xFG3KdP}hU}IS|b7F~|{qv*ty}hwIXroy*bD~kRPrLOss7ymPmen#R zmI&h`a~ECGoii5Gjh`*Ox(8=epq2l)7qzJyXVmO3Ui{*hbmxq9?wr-PE_Y{4O6gnQ zKmNY%oKb<+KWg2Zx-%x4{l;?c?CzYg&b?^${9pIrjBW5K|Gw=XyK_eUdEcSCHuvC+ zs=fElm;NNq8T#++xM6rD{Z;M1VR$87R_(@NcqP47?ag6$<#b$i&M`Kp{%YuKY|NC^ zG1Jq`n8}QKIM=w&yBvK{{!Oj1D_AS7v3pP}udy>%tE{oNHnGO$yOv*L`&=7bWBXfM zzs3f3e2pfzR$QY^tqrfyG}WqWw26~ztR}U>8tXxAXpP!b+ptDOR-W}tc=}e@rNk7j zmViHRanCt)O@`+(?w3fd3`+{~%JJVB^k?>)1TLS8A%tWUaQj`y8v32r{mFMYX$d5? zd_G4Vn;&b#_RcGgRZ`vv@Hpvla1C$%6AZkHQfSKUS!N6u&eNK2=h@hXAI{SXzk4o0 zhLltCnYDB<>foX?VZ2Ag&@MA?^T_>WA@c;KmOUO8D$Gk5%s-tT)EFD5yiG`7q=@{c zq|YI40jmS{?47@YQg}GJS@sP)(!{FlUd{;4v;C{! z>I|y?nv}p(^18|haINrxvGaPq^MUsbeCGr26~6P4Y7#ld)bgVtXG}fHczm>tsejdD zOdVTSkqr1vB9e6#zWmb zl@YZCP^vPdwg3^WjHwm!0LIi(ayq7#g3~dzl$(yJi5p{T=Fg0&nG0u3&0vQywdjAx zHIq*39;s-*OWRtCANf9DpuJ!gOITk9ZGFQ6OFH9@!2_;+nYxI`76IbV5V<{5j|D%mBlWx7^f5687#``B;9p{Mn|JU&Ti$`2} zc{^_UvBdHk@_zIepZxSb;)lF{|5dl0+ZsRXJqwO1IbFY^p5X#?)#gnDn8=`xVda?) zY}Bz$BRFK)hs#)+XTwpcD*Lb+^+6VoUk>;|!PR}WK>;H=BL~>6!RVv=aMB*51EXLu zXvX%{N&+v%u#fMXNI*WZZ#oJ0?SkjZWw{S?rAs7>zUph;+p*g?jgN(}I4&vJ>YXI+nyd1gsKkl?}>I zh0uZ?8lwEf(IZpE`iI*jPnit}ycPc-%7pP-(2s*1g5%h!e}hTrhnQJG6W1GXX~?z} z?N9=K2qy{s6!aqjIf^6^`J~BG3-1G{uEf%!@ept+3HyYRK#O2daTHA)J9M>J|EG5B z5Lijzt#Sw1LH!Vy3`=TAKEw$ivl>6nJ_M|>Tk)4zB4ntA|8dBY;5c?vK@&ZW9_nPc zjF;;agphz7)?hLT`=B8jM?PU9x3E5$j2pV4l7weL9-h3|?nj$VbNg}Rr|6fngez3- z72zXU?EBy+{UG*M;2B@A7&OvS5IzvYt_HUqzqAwy=+)dN;AdNrfS%^I9Xs2KB;>TU z3Am-PXh$xsTsv}YDiY93E0=&?nu>PxVs1ayE_pFngttgu%&oxVl4nyva9r?WZWFMx zsYpOB#x?=DwiWH@#oQ*KXH$`YUW{!LdbSnq*xAk{AeWXR0lTzw3D~8nXvdC9hPwLE zHp$aq5!xbmU>{O=T<+3RFn(O{w6*QHA+O0K1i3If0$`Ky72GUR@pl2hOfE~tgLf~=9h^hTZ8*-W}LR-X6J1gM0WTc%SJdRuJ zY&&ksYcL7B7}^B%(n_?Wr=?B6E^UNhiHluKZ31>}CEC%mxJwBH*h(az*Cs9rKidgG z&)p{4(dU*Cj9}T-hfhBy!DNi79sZz!i7y#w`b~}wat-bRkl|)It1}8_*okv5=!wh* zqs--MdmoX4tS2%L=zu3O=U(U^Z|?1Q7fMTpch=t^uXAVH&D@zzZbUw(H4sVkHxQ3h z`RYuKd=}V^zrhutDSwX7={S(B@PRpy3BL1z_es9@zFLZ(?{d84|{p1tAbsY*bs{@q!-H@2kZh8*NJef(7Z=j=-vC4v*)$=lX zag(6uX42TA#a6$(pErpHFl<7yY~D>npFkmFlVsQkXH624L@Fe5)1cy+G^!KW-$;He zZ=fjSuyTwLb;6`l&A^^fptgxXvt0&s2vz1xW$Z@?bcBp0>MaENuSycFm*`palmRtG z(`c3JO9pgJ6*`)x4+)_2XOi@<26Wg}0ci1HLu4;4ptGwcF($Gf3D6hUP1KhN=*g;y z)MEA{1G<_^8dH(mw7^*VuSB&cbfE5T5SVK4cK?E$G=sIvEmU?FhRM8L;IuLQoUhj}W5097b@h zGBEAPSEI^9)sZC~D}xRO#7QEoX&S>?Ckx^vqV8xKEuPK>#7V@OEs46@P$vadN68oo zwAqh#5lGdRM8@v+76CO!$(Vjs9}no=`#xGSnWRBF4) zLPi^%42Y9P)Ibv{Z=J2En=0JJqLS-mL7XI%wa_sJzEgMGNg|?F-ntK;+%(ZHk{)9W zClS@{0n31es)12|#MK zW=CsvCj;v8#_orv>CuoniCC*Ojj_5N8WAUnD2}A*F&uN!uu{9(=}!pkSG&yhAq3WI zH%Z5a)M1WRSJIfe(}xIHt0hSX5!hL%miA4Yf_nBsokXGsno7&GlL2+pP!BYXX%RYE zP&W}}t%5-E}GTBLvoKNn;v?4(*7OpBk;Mk}+1dA4TA}LK3Nt zwh19z)NrP&sn=)!?)G5hXkZZHIeCs^&tb6sH8Ds>q7*zIxd;ct%#E$ z+8sATeaL`zSCjPUOgLo3RB0kproClAQ!PofbUL;pE*Z9ol19bWmk4C$ND?JCq~Y3# zvyw^GQMNjn4mUEmGR4@b@o;0q0+?p7lhJfyqZaoXc{#D6A_jGviAc&N>aOzLM<$^a zcD1&TOrpA~u=~g&^uTC9CsXL;5Eax+)AyA_mVNhT(80~_Q~%`%V`*2UJD7b3HL9Uu zyW>)p6Pp&&j2ZgNCHns+eoINJD-YN7jVljV_0h*e7{2p?_hb3a2j1&^=L7G@@tu!UlkC7> zNPaZr_zTT49v|W_6!QU+Z1_!n6dxeI{N6r5Ox%YLkVI?u0U|4r50Hdfe1P5vk+%2% zQKIkx`WH$cK0p+z_yAb|B`ZEa7C`Z;50HgW$bi5H$U-P;K-NbP3LKEp2qI!n*Cs8* zcn+x&flvAl@vKfg>o4XzBwC=pL!t!gJ0v=wzC)q{Gs7o6^;*?{nb*Dd8~3RK%-s9A zx4%Nmf9BH19JNl0AI?RTsc|l%`n@P5Ge>e@^B_x%8&5K!&&f%7~1hm`6ZxNAtc~u2_~SY z5ZbY`1e1_c0tvXK2-}g1?zJP=0!%)oWnVoX1AhBbgKSS2rgc{ z+)O}di{7KurxhO8d+<6S@VMTS*J1*8*~O8Bo;x7~9!HO?4JD!HMu>Lap$jF&(xRHO z6(Rw>?BgIj&OMYQiFxRzVX_6i>_JIDkMdQ1qCG?uya?gnLA6Eo1r6aXsxLwicwF_l zm4)EA=8F&#u(JRYkc$WskZTFHqZc70pl1OlpcfG&p=SxUW2g2dAeZt>z%JUCfL#hu zu;)f{`BFKDGiM#mhd_(mx&q32GT1msYMMC9B`lfXOoq7d978K`C{2|G6d3DG#`usn(; zuK1X!MHBIJppR=lu@Ks#_mY2s$Ms%{kMOwSQvmI_p|6uk$eI5H+*)|;$k{%W63|Q8 z37&X!B@#%$FNK$YUR00pxMZaC63|og60pNcPY8UVoW_-n*s5O6q2J@`K7?AV-wQ%5 zB@Cr43A|PJk?}$O&{D==c}PCQ)gLTt{5Sy!N@KU;mt8?*sI78MCtybop+fEaLnjQE z@w&x5K?%sAiIYj#xg)3@IrlROk~nT|#Y(`9B34Ppm0tw#v$hf@5<**apZmE499MlQ zJ;LLvFS&2WO{E=7!Y$yySX@2!0ARZiq#PV&NGsMtPUJ_w~GvBb^L(YBAwIFVFc!h zWL85*6PQMlc?}&@a08f3ZRpqnbAPenEiPN)J}|ZwZH=8z=RGKcgr z2)kttiIT<~(tRuy=r@Heb4V6IiOU?41yJldhh!lXzRn?82#Y}HkSv4+p>s$U!r}k~ zb4V7#LIGqZf=JP%Ye!p%nP*Z3L|!=0gu79a=9xr;be>5RNavYEe{`Nn)JONIiT3D} zlPHf)If?G*l#{5APC1F@%nVI$dAKMJW}jFZX7-6PcV?d$jLkm%Pubh{?HSJ-)VUGL z5pyGyA?8LXKhBL%cxZj4^6|!CiVbrl6dC47C@#*CP*$*-Qq8bu!)^%kH_EmkN{8zJ z#riq`BIj?0K*Mf&b7FIaW>8~?D`bovZF+MebFpJcBZupQjEug7b+mC}bB&=Sv7==% zVZ_<==0wNJ(uBkgmjoqpwCT->i-n?T?faC zt?W>kcEeWyiDAa&TbUf^iB2%>C`WO>Mo8Fu>T;A7B zNG3_R6v!kP1=vk*P8xbEXd2atXsJwib2hy>iKr7Mm1;(~U?z#8O>a&bIt3^pQyKda z0$uWAiFylx9vhNG>t(c3*jWbD6iuU5t}hvI;a%uxnm!~TK1GtGe>I>RfeOG_$KC>< zhl3_DCbADLV6}}U>PrN4i%?2xG5e8$v+0cm68Q&-=467A0%jEp&{ebfErm#?7E!&; z<zeRDkyVCaIJb^c7A1|%0t!BEkE6x z6DNtVX15kejq7AdoJ7iIYaEwj?t4w}UNp zl2CJ$Opg}TNh38|6ZL9R-BfJvB~{-tkgDw@X|<){UV4WNHAi_fa_cPvsn{-=KD2;_ zSCXjV?Mn%yW-D*1I-QymCp$E}n#5F|KGc9UThk;qskxB?X7>x|U}0vC=Vzp&N<`(> z9Y!W;Cu8cQ5p~c+%4271>ZYPPNGg?JCu`~?q0A+PDo{r|;v^A~D{tM0Q*Ii14{Dko z*3?NvwbL{YKn5&aO{DtJhYVP@vHWxzgE+j=_(&RK6T;;i{z@7x z&;FEv{ZdKPeT?al5u2^N^=MO_M6_~}#%NA&35ZQ_IBS!D@!fZbh_%u!Mm=n)lZc#| zEkc}mNrkf0jaWfHYH9X(FwbG zh*hbRF?G|hYpQ8X>(I%Xx``-vO{CSYQ~%saL%GN3bZSUlphUW!pQz3D>)tky1_eq=zsai~Na zA1K6V($i&(by~^v=vO$2s5zQOTf6>5z-sMM>O%%%cU?;T2!Zul(wGLKL!08{M+O;6 z##r5c6oF$5Nu>3PUh4}L!B_& zm82?l=$<+$MCwYW$3V?VM5#-fUOjXtjdW)uk&3WWd*URa>M3ic)6|Cqq7Df< z1D39&Fv_Wo$`j7!_uqNrzv2e(U+0sO&Onb|KW?Pb&hN}+| z$S_6H^lDUH-e?&lQF5aiZX0t}1F1U7Rwpy!Muzn@#n@?R;>PA8oKchxw!?{yT5MMj zI~ffpHdMr*ZZ#Lt@rX`z)LrGfk4!=-Mg#iDAu6bu#_ubK zoK@`JBsz?+E7gBF!dTjs>)yqPYG~N*xa8$BqMPGrPy5Ry7izWMwU(scq-y~Do5a&X zJp|wjCC(P=D1g44I_#*w06K%}v!iYUXc5(IN4*E&?j*h!>O_EV;(npN1ayrO7YubN zplg)4VW?*TX1rpq7$ZgTl;Q$xxkyi`A~w}w51p>bT2HA`xkOJX-5-aoAok4c-?aKl z4XLlx#l}}k-IuUY?%eC;7Va}ZCc*j1{pvVBl_2;oXJ&5$vK2nyoAfZg^MUt=^PLa8 zpU!ta@cszC^O0(j5BM+1kA@uor860i5Ak1G=S4nV$2~IH$IG6X9lNhv^4cUGcntjw z?uX-j-3-co-F)eAU-wCnFYm^K0~=$R`?~X9bT2ni!*@yU+SXjuhHweD@SFB_A$`nm zsYxM$iQ9Pto-eWzuO$gefj~7UAq`0}z?Xwl@XDkG>YaBHTu&e|~KLnv{+uHC*Fncy6MERD3vALV<>-5}Bi}t-X=mv%npx2HjDQBxoIM=qe za{)CeKurp8#`C%N(I+^!m0d7K+0sMfN|B-ZMBvTp5Z!N6@)8%w9 zu@uxMb}sO;>=D!kEbMd)xQ#yZ`>mNHIx5>ysoT6R=$*)Fn|T33W-*MM7Otb&^n*B(8*v z$)<#0sEvdMk|eYtNkTF^&_zOB5_OVLmn2;z)Fo9X33W;0N@xJpWuQDj2@RG9jf94h zB$O!fuY7pv)7aJCv6gj7)JZ~Jl5~+!msFi3)Fp{4p&>|Us60do4VQ;SLTIjNztIs9 zGp=R}y$P}8YQ4~z5M!=J4E+$X=W5H?p=r12wP9n;+xikk=w{6Cx~zSPXPCZ(_6E?G zI8*x)XM?wdzJ&YL=}SxiyXi|L?YVy}kgf26e!}DU&IjHf&v!oX{sg}Bf%hl!oe#V} ziSK;i{Vcxof%hl#osU$LyrRD$KN@oS8|N?{A8q}OU*4YF-=j{SAsV*59C90l+qU(*dDy z0l+SM1E7Qfz$W`xkHpF)<*jIM1m`N){>WEv$$VH#cqaSh=bx$tJX8JWD^Jw&ojGl8 z@Yh9)=zcBTnev9lGqrGM{`}SdwNuM>=FiUg%?G4t(P5#?OwsC3*kJ(=>|flF z^1LHV{~|wo7Wx;IAkOeNzoTc@a8c3@}9LH#H)uzD`ym2)9)c*9Zod5kXx%Gsd4331rtIGSfuV#*jy>8xO4r>Zle zH2s7N!nPoS9Kf8(9ppfs@_`^?wmTw%a4>j;oYI;zm8jwwP&7Fp7HKor9T7n~m}&~Z zH2G11DjMvwBsW=@lhOYAWc4~3~{ zu-}>7gd@pm(=B<+@9w`JO$s#>O^VoBRa7)7Vr^Al(WHpIRkcNvA{JM*mraToT~%U^ zbj9wfE_28%rdL&(17E6kyo$!!AH54W92@LP&o7E))x8oe$JBKHAT~o z?)1@LUGQrIco|t*SoCWZycO^k;!Ar+hVduyah&msc-bKF$9DQtQFOsS8OEPNv@ym% z0xyG%KekgblaJ{zUagGpLyS0rmjOXsFfrTO+i{dyti2u4_IBR1x7uPZndWxW9i!u3 zy8cUCX==`(Ig(H9cED4VZQWkhZ!rO9VY6i9hQ*O4!<5e#M@yCGHQn@O1B-R zINf%bB8|1flxwUVrf_5JFeU7^!y;<{uum!0Fsq>cI&6(qOHebJQBxlJ<20VUhiyCZ zB!B+QrQgr*R@In!$zNUiKGlqwJ-@i(;i?!j+kSb@n^iAnUU1&vQ&cTx{`i@hH>g(3 zy#4M!s;N@UjD7A~7l}?tSqEOFt&OI1*+%Ox+vsi3TpQLlTE9sfeHuQZ)i#i>Z8S>- zZ8VDmZ8S>(Z8U|CHku-58%;^Gji!LvMpJ#mHu_64Ie<1=nz@I9^6Jy^UE5~iAl^2^ z)NdtwPNOXCTE~=8YYgkINuySnEm_Bu{||Rx9w%2(wOw;>_w8+FGM%3EOlC4mfP~9* z1_BWbk$p$mHxnX+1Z0WGh3-TlO}8V9C=xayDzYewh$x!~D&PVtf{2JHixL-5(HF(# zbw%NOo^$Fh-7^FDexL6j-~4{lx9Ze(>eQ)oPMxY-H&(yYyIM3>yU-ESmW=hSC|WHV z=~;APx{|Si6>>C3P2{0640M`EMCBXkN|A}mKG2mS6_tyqD@8CWGf`KHY*e12t`za8tVLZ( z7Hgf6ExIzr*HEp#n_ho8uDIn^E=}k?$fQ@-lPn1RN*$Xl`ybYU$zz z<$CF;tM2-CgUC2@xn>&M;)+!bV&lx^y6MP{WtTLFj5C*Orzf7@YF2}&ICHsvI${2z z6BP=YPQJX<=IlvAh- zIv4Q9zH0DH$Ep6dFmJOrSQomHK6NEnPKB6bKLw~=&H*0V(_`4tw=1H5gk>_RR=}wim z$#kcNUUDiOeVy3_J=M>m^6E4AQ9RRq-Kmk06|4G|t?1X#F?p~2QVNSi|L^DsYUp2D z$iONGq${^z*f@RbSEASR%HE?_mizp@h(Ts}S-~4VHcwQ%M>GDe0G3h}xTGh2H+A25 ze3E=WYZ|`aCF1)lqJI1TTYO(9%fUWb7*2#bnGS%(A;8WI#Zt#{^4!QiaQC0Y9MQS) zhU*_ZM@$l(8}O2@2p>bR?HKf8zU$0R1p(J=f>Oa+4V&+ zQ*>^eF}GO~Q)QaDabQe)GQBZnog2qao*U{D`8aqe6k6`60qYAN4A@2xW#uqx|3BH5BEQNboZI_zho80kI(th9e1C&=SzZ!GjgcE zjI85~>=Ood4Flt0VB0XTbr{$t3~Z$VcjUO2pfeUMfy5g*ZaE~xqfx?9Jskk%TYz~5 zM%hed2V{B4!F-v=DqbyjH#5bh9V-GI(ftjM9VQS*tiiEEm?PHU*dfdjYjErk=7=>o zb_jFC8XP->Ibsct9l{*32FDKbD{U5mQDn^0W$E%3pxx+kZ^svV{i8WA(gV^Bj45CP zOVb0(6b_vSUQ3&;Q2s?$F_8AZ42_bn^qS$>-m)VL&=pJZ{m_vW$31$b@%om{%d6t) z%#J@jNpHM4DZA(k=u_EsoX9Sj&Yt|f)B#Nex^|lC4G;*m8yw@Ub39)ZzvC&R3&lKT zbfK81j4l-Ol+lG^o-(>n%u_}eih0WDLNQMnT_~nHfb09nu9!f?+77fLT5X3v0L3Y7 z2bS`WC4tp;Sczb0JG9vgoBm>Ydm&|d*}Tj-H{}F7g873JVp^t5eE;@e;j5E#7Q2}YPPpe6_vf7;(yN);+5g97wr$F@q?cDg$itPYzO{`eT` z?&nx`r)jICr?*wQQ+?fOYpjgS&|tf@k{iJpXHD5YV^ zq^Gboj|)3O`)v>OgY(4kE3})8+iR&*J&@Mc&9n+rZg4QHbeS;V&#f?UwOg6sxQ&xI z`BIJ5;k<(_sCsQ+J*tJh<IG3~*P|NFS^QLyXS3itl0>vGz z;(TO|$lYIk@6ic|l`vEdzq^8txp+q^3 zn*0HYa~vg(alA|*tlu@InBJNkT#i)5faAO^gcJY#+Z^LfyaNpyS-^}=064JzqvXLy zeieFk{dco!&48pRLvgAMKTTwKZmJAidWB6qHrqOm!zN&L3J${-hi|plzzoD8% zG7yI_!{$?Em;er8h9{@WK=U`u@N_GZW9v+l6my1`!=Uxg0&QeIrh?K9Qu!G(zhp_Lmc*w3f4gj;*dD5lCg z8HNt$GdLEI+AZ4x+(dNjJ&qeF_qxJ;Ft$0p^11TR&64{Po|1b{i6R>kR?(SHTRa4Y3;# z8sMCERH&v+Z=te{yP(Ux@Fd5cI@ASjr$K!E&cL;&!#HKPj2tSD+(<9A%za7^I~I=F z9qkON>^Mrhww;!_9u1Vv zM9x*m91A>d5S`tt6z)~h^(v`)8zc=Bj0@HnH*T=gAnu~cTzC@hH%noe1=X_hm$7OI zc0{s&0eV7*&3Znak%j)n43NIAc^2)>k$wlb#w;JeCdlXgo6wZUv)vra8tAPG4N4vJBrOW zm7?KxViJV3FCq<|=gjzpPA2#oA~KlLZ=9PWr<8+PJm9AhKWj|IIN3y2(gxRN@eyTZ zM6-g&Q|7Pe?-2W|vsOmg@hOqxxvQPap>t4lWZZGj1H~&HWiE1IF!=8RePnn{Wq;i7 zCbbMN7b&HqCdE*OD_=09R^wkpx*KOe*=hL5)wOFt6#t|Av1!sz6okWNS5t;3#kbup zrmo;CjOpN74BFG3`VrqI!VTaY5gAMSmU+tyJKln<@AC=M3v%v9r*uGt#4xvn8^JM$VOp-O7Fs zBjHxI9&=V3bWg4Be^g&$^ZN>!T&Roo*}3DglW*;=OD4c zAEAHJ|GMk1I!;v$L|YU>Ro9Foqmj-^*vlUVUKZ|{*~mMW{O7JY$@&rhDD3C?3H)8z zw~#J`XRH+e(V#q0yIMQbH~PifdiS-F{?W&G+pNz{jO)BXzt(YRrlOl(aZC#T zIwMqX@x2b4-cqhRhOcmsj|-I+X3X}kF`IC1;J9360OXHqyZ=&4exwUYIHo+bs@OF$8!6pk3I@++!O4Os zoWr{Z#m<%fCop@9-FQJk^UMJlc-XIFjqCwDaI$wv{be4U@2SiOCX{o<9$TO%tg&Zc zsg&%2qQW6y5vj#uar|K`nJx#HlH>a>$GHUt`Y#9W49vb9XBQY4xSXdK7#h5s=NA~7 zb2(2iFf?>I&oInfd^IR+ypc}4+|Y||mWn0pR*Q%)&b)kSskhh*67&iQW))`@ODjud zxO1}pb?9hrX|arh7SaP|?t^hE8~@jn3Yn$YY_$DiYJavX18&QZ+d92Mu`iDoc5y@y zr?l|Xg~oBrj|N!3|8bNrrA%=qdOx!`Q^s$0arTl!K{pKHKs(lh#lZ;c0W>wII0snI z5v+%bL&d?BrD4JPlZy3lh&3~hgjj#dVm%aM&D7C0tVgE9dNjg%09X$c2V~6V7Uv4q zO7!wYZ{g+S^-GZ4w|Z%VPq8apQ%Bt&r;e$V=}*1HzlE8B zb&r$oTh;?JL8@NhaZdp&s=PP;cx5wY)oP(^k#iV1(H!d?w)LCzFrBC4k4;xGE5!c6 z&)G-M{04Z)AF8<+)wnAgd?0oq9?kbLED0y+U~OogAAv@Cjt!wJo9~aoqY3Z@F?eAN zUe;jkXyhV1nsJ`tC`+=w{s_7<*}9(q$9Rq`j=@VCtlu`1I#OcRu1@xwxS-!jl(arV z!XDa|37Vqc0-oG&0k`zqB19V7elyRceoMj0{TA@#ehavz-*yc7K)?BzqTj>?{Z68! z{U)TX-vmw3Zvjv4w}4yvZ4n}-w%^P%sozp?a=!&Ux!(eA={M`Qyo-J_CjCyE2jRO^ zK9`AKzKC*i-hL_uhBnN-&i<`jcDTa&T5^;(thDg{7I@!=r4~NB1>V2G*0SMvXvV10 zftF0Oqe=%`-~&;mb6Vhow$cGq+IL)3=}=3iIZ>tUeGD;e?^#HL7EIf_8Fs(Dn_;Ex zJ=042TQP0#W>{%^H^WNXdp4I}VC1J4(RUeF*9<$xY)bo41r`h{G6l>jGF&HEf!e3M zVQ{s78wIQd^bzp61fZXQ+Y^An9+I z-|Y4x1MNiy+l$O;FESJtX+viu*V$QmD%(A3_!U0W@B;^LJ2smJ%Ze@sb<<-}y2Swx5#`L$sBQySE;guBEbo!S{4=r_} zC?35sm7aspLJ18bqlu(SZ!W)gDjzy!rOw>*esBX^Mr%KnJ1aBLNt#93@|6ZFxK1qTLMsX5(v=(kiBn#!7E#+?aU_BkR%pJ7zu_d{#lKMl#Ue)cyhq*@?ukuMjV4nDqZC?C$&{am+hh|oppq${ zh|17D0t=(vytxU@%>z9&C$}2rJ#uW6^NN-_CO*;{y|OiWRcrL>*61~@(T}!9Kh_$( z7SWN>^&bE_6Q4lXH2FI+GJI7zzxcPLQ3uc$F9E}nzm|erxK$Kv??4lR8 zhng&yUG*Y7G8qeIm%SK23)X2Ng99%CoYPAjtae5IcxG#i-HWjK@tTq@(>{(m_+HOS z(5>-Fi6{{ppJK!==59!YKb;8QmB%VX}-{*(6;v14}oIvZ_;%i4@HY z3gBh48UWHVGlu{aA%IlO3<1C@0I+g}2frXCI^a zhG-=M;y7deHOSAu|IIOT{qIx8L!Ttq;kTSUwf{L>bEm}zs(tgn%L=efK#v;v$J>CT zWZa5)kO|7AII%1u+rOVM$NvT%w%@L~QoAiH;_Fd?QzuJ8R`LNMDL05Xbuul0e8fOD z2p}IZkemx3A2EC!ptEz(S(buxj0mB>{sZV! zq^q>B^!f*m|841YxuLzAq9fu9rvAakJov@E;dF!zAuPAo?!<)(xSa}P@Hp4j~` zDL2Jmn0pR$$Ln7%g<45M(HLePV&-r~zVdLqH309VY&OEzT1+ol%h#KvJmyI2Oq0z; z3ycEQ;qp7*49nC1Wj;7|Gb~K~hI+~h$y3vd>>u74`Nuy~mHo_be zli`%)XtGEw_+&J7onv(*Z$esf@;|v1k*h4Q;=Y)RhFY4;VQO=V7cuB$AN%!2HpqJp z9?(6a-7uf+xdVzrr%ur*2Mid%=9G%cSYUFIh4VFZpMHzd6wmMQY1dl^qP`83on%`75a>fzU1H#%8=3ZouGjZl1NzJ$@=qGQ>3vN*Qc1hP($e;?5)f>I8iplA^A-P{2+6ygbyzV1S@bZ@E zRJ@aJd|h+BjcYDXjYzc_fhwg(h^HrrTm0=KOvAc~WDvITlJ*1gSu;ZV>WRJqu+?y| zX$f(LEY^OoX_S}%CLUqip71-;$oBRTrzIv8(ijWVlwOW`7ijQv4>Whz-s1339beqp z6g&8gb>cMDOq>{N+=`OfpoHL>OFKX*gOmGC?c|J2axK(b`#!BhR=zxZb~rXw?D<4* z4HFwTp(=Q%_y{%`Km|7=q`ZDGaM^<6QTxykh6zHN?K*Yls0|@+umNy9K8QyFhr;fe z34~Z{u!J?;f_$0aZUWCIa903zXIS^npGW;;GTu091YRywuOoVT9vdJsF@T?qfUaPu z2n3(P=@rY#$aGKKF~Kj`5{>0uX%iIOJk$J!iyrQfHC}n^*%?ox??hB#GR<*nP)@`Z zszc9(bON`tA6{@c@^)sm9NVVIM8hkY)5Ed1b)bw;k$ukY zc{BQrJ?+F8LzvC5V=SYJ6OwLX?9hSMv2%6oZsTw`bv|_LK8Fy;&XGNO_2b0JLX%)S zATzXdc)3hF;SNxR~P_E<^U8t9rWyi%`N5Z0A%fW zyoLdQ14lYYvSwryx^k~D3OP$?^oewsiRT`qb)VzUO5xD$7U;fqUDErIemFLZp+bHP zS>(!Z%_s9vED3#}niUC8$ULz3@7W?{6+ zkmma~qa@D6LkzL|6W_s4wKjyZ4>R3?PdIX^+6PkoI8TB`k#NR`x`fX-; zl%a>`A@qHQzPANJk0I1#LX)s2qgw0-2vv6KJ(-d;c zao521avHy6DV>8OC}(96p}~2W1i|V2Spb(uQWiO;hP>mV6V`kX)j;Afw^NS`TDgyt zyM^j^w{xuU^@6M7e3!9qw}77)&_E#*{1FdPFq^+VERYGF1u!@hKk@s}4o%3{-p5}} z*+)WOv5%LK9+Uc5fToFyhT2V4;QJD2*QKA5Q~F62lL^+b%hWTSN{MXT|E`?$Uygtm zs?S7Kbi8)NllsZ=e*wOW-j^y=ul=w|sAp)ULUr%OAgE|;yeRb?dX5*R zeywB?d3Y@9+Dhc1>pzRyU;s0hkN3)8GDx`gn=NQmdj9iBuMKUAJ~(yOkq!3eTS*z5 z++GRu6DN}h&6RT(o)jF2l=*!*5$DPA+Z63xAbSl7mLaeC@P@)5@O&Ifw;m1Zhu1pZ zpC(WLMmxrG^ygWgCN%gf=|2r)({J)2OV z87Jo9QMiIfxB9Q(X|4oEVtJWW!wF}sK_RqUf;~r;FXqLrN=YQx3MtmaDio8m8ds>= z8gLZP*3j()oIk}v(lVQYyI#7BGZG-&n>WKBplIm9#OSedES?vC`1j_;e}O|VFP>NS znKUn6(0RdJ;k;ltniv0_m=~;L^1LAQmFI;Y&x?rhVt$=GIhqFZ`M0PRc>j)%bmMP) zbf+4B$8+pxqz8Lq0pbRG;1_SS{e?7vp70FU-(qvYHkCqkR>ap(XJB$S{>XZ82R8CI zUXXBITBu7z@`{<)_&pQr{0(ifwAnvVx76wvS?3?Lp13tF=hT_tcQebMB#ZwdoBeNw z>-@E*po|G+hvJ<;+p);8*M1Kw3UP4_-^aR#YqexIHNW4*oK9UDt+U6%U5@loSQf%h zdoARMd+phb?3@a8?L;=9t?Xz<3VH|v$-{MtuDD5i2ujK{;zYtNz^hRt!2&eL?!vam zA_r<4>xsGBL#S*f?^(2VK{0kELx+>gy7v}+f9qva7NNU?b{1F0BaHey+TS%n20$?w!9kJKO&MEFQ+lx&R-)=}rLU1PM) z7uM(Me0do`%+4fA0+PZyUmRBE_-P{NO2z!0X1*jV5^B{+q_+8jxfRYYA!S{fi2LKz ziNoa1w{=@kAZ-)8$ATPx_MN;(RCWB7_jY+hH2%|cTFVHlxAR^Km9_F-%RCF)X13P0 zb)I$X5VbuO#aYZYPR4JfCC=Y?p0)5g`^LV8?J?`Lyq+8w7W9SJJ%pS(f8#b@+gf>3 zp8I$F958j|x3)XPe<%|jvmRs2zv@lswJh8GJn~ND&{p-gx$Vt3v32qTyIwI z+|xN#%g!W>Ys&;|7GYdRCSd)9am`r0Cn`G#nA)`|uu;f=F3z)*fmVojOB(c4YufQB zw~g9GiC65?8T#wCdzH4QZ8C1A%gKd}w69yz=5=V}^=!lOKY{_wgGXHM7%!M( zT&0dz&boju!@s)fv#?KvM6|^kbHM0ORYQEF8^dJ#BimF{FaYXXy)=&YtX^VXr_S=B zi3Y=k^*|dDD!N8kb2}UZPxt!6tj3I85gqn$8zZbE)fnX?-I&Vis2EZhR$Tl2HFso<<#;JYOd*%UyX?~d6XeOxT#w&n~y!xfAG^~Pq%<9NX+ z!}Byem*M#u-h|=Jqk0raM{OKdZ*j@UnW*ih{tHh^FH2!lOW(4t9(5CZ!tw@ddNpXt zLc#_GZ!V6N;3%9ixZZ^CUc(Gq&&;=CHm>tBtC#kzUY1$C{3NV^qf)x~?c*m!GK&XU zSQDK(5yn0OA0dnPuiqiXRhd&~FR>oOd!C<#jaT~@7TMR<=8S>0vwb#GF?(&T;RAx} zQQ2YaHt>xmTzrI`I-92tRWVH}sO^RF*9J|L!Pvxk`kgun8MlY)!)@&lg#- z-dpmxY-S1(y~>ADD}Oi*sTse%S&ULVg+3u<#4c8d_e{ zdjl+wu)g2`&|DY=bu1JZP%pyX5K^yW z55TMI;R5SuY>OB=Bo7F+{V)fNlMc4${9DYN>0k-N+iUm@3@>3AqGdaIrW>#4vx(i4 zRAYDiU>sXy3SoA>W{r=z^9GTzb;6tD_>p}dEHcW~y@4n`yakvK=T2VTEwGWL^*Y<} z-$V>{K&TbGAHh2+Sn#e3mUZUz4`AX>lM|U=6L)4}T?=YsT3iZAC5jfl`z1LAl|xW1 zSYmQ1txd3z&P*y*aHQixuCQWlibcIlZ6{PMdWGk9o(5m+kf7O?$P?4-k|}BC20OFU zZy>gAunWVxXn0qKcSYC@c0&;UoZaz&y-u=gF@Gr_kZ{c9AEx2Sy<~k@A+jCqpnt@4 zSy@qLimXj`MVSVDEG^8M7x3IM(buhzLHa6kyE_36lsXHXINP7HM-67+ehWW{`v45;lRW zbm^(7v#B827wxsOjzENU!g=ya{Xw@VYu(_Dtmr8G;3$Sl@!p0=*j^QBy&}z=CcB^v z_Ve-twb4j^g6d_YcY^a{WO#yeaKxV=2aRkqL86cBFhN3%>@~sCV`5yF{l#od?|bTk zzS;|W)3HvDb#JQruk%CIo33shg|Pso=H31)ps{hAhofe39I7L!c^Kn%ZvkX1RBLYv z)pJ^Qs^v7qtS!swL|K9LiRTb(QmEb;mjQ|Bf7Etty|U5vOq9nR=?(Tm9-h_E-K^q% zVVj^<$aRP~AF88Z^Frq#m^h{Kt^ zkHa=QEjC#*xklcu2X68BCvCD%zcsYa($(9dFl@3f#gTON=TQXYd?V@xIp4%by0IT0 z^j56@DcWf4k7zd-U!RdZ)(tO*W;lQua20?)!wiC}(tT&0(`;oby0h7-;KakiUD=Pj zUF#ttwrvPg#vmRQsJ3EwFq!r%&@i?f@r%nbhH?s=T#jpd{!LBe(=LqXSpN8s-k{`x zs1=kvh>wUs2O|dh@KFwYTC>!xEwo{|sc688rlJAsiu=MC`l7&OUycsZ2Wp2P6Hq%8 zkI7@h#Hre6?x_7y&|_EX5)l`W=aCdCco|n5OwoD$I4?83QeMZDQLoHd|4$%}6X2bS zd~H4^oV2X#knS)KuO+2uiPH2w8!7LqlQ^xeV)1L)Y@oLzzN=(D^?Yd#@=DYOMys_A z&m4vJcZ>U;kb>xYcSbvpOU$HPS1On8PIr6$p^yuuRKLsghnIa%qkE`DEu>o;RZ zD{}9>4s5ILJz3*UoA1J8zO>x`v^(hlg>pq6_q$$ENO^H*JJYI4c$}+m(H@{9L$ekw zNyE<=YXkzv=ch6XOIxxfhAljOhs)dgpf}(SIroGFzApFJm1pRMRC*qVN|l~kEjE~W z2BLi|UD=~on!v~eufe>)ZH?bY15S0v6EU0NWX(skNtxXu8ft!B!){{+*B^uB>b!FG zQ53@1y13l6I{zewXFJ!<8>oKAHMrPyJ`Mre+H`zjSm4;%9S}1zpEKn)SHVCfiyeVdXe`9xiLPLYYnZuBi+4 z(VfP~5Pz}#yzXqmyuff?j9M&Fc7jG1=ca!QYvomRA_&}IF2=zE>9gd`km?F%cr6JQtcd;;9kAa)fx*Cum=Z zKYoJZa4hMWJc0nx2jmMaUnkJVebg%E@EMYg#7I9w@)Hei$-6gxs$qVr;(eRJB(28r z^AmBEp>VF4J;7HArEnD5af5l=py)5Rrt}DYjYk1qt>56;I2y@b@H~PzG9kIH_rZOi z!B6e?XbNjhX35pQiTeVvqU2`78z|Gx#0bDt7vJQl{V}OqOyh2QqdR^CBbYKNWXxm)W?m z)NQKoUhSM(?5>ds*Og|N>aC2=u<;&K{Tbsu8u!yUOsrmIIHK#S2ET z6C2CL;@a&Xr%SkLYC*O*E5OmSy!ml6)sGW1wN1hLxP35>NH5$U<8VlOy~T8IuDA9K zMp)C~k*{%PmCA68l*c;Ykwk^&oO4aj*I^<`_;SA@ZYM(d}LhaDDLA-wrL|12fp@UH58#TbaPtqq)!V*hl5eTLIU(JOZus9-u!z?D9WI2};5SGl8Y~5SeA0 zKwr}4GSs!d;&VLG$Kj46spSTx1*f5uknis#7w#%xQU<#%SWX{i;u+Ib*#vV!2BegZ zc2{sLjsp=+icIi0keOGK-5PN0_(M)k_*q0xgRO%n>U>%UUmJcWAcgpygl8LmFIxPV z^dG{HtrI^!Eq?RC@Qu}ok4fll3=P63`2c8o0BNdXFpo)Lg`g)guoEIMJJS^jSW3lY zETvI@EOC9q1dAafV%LSqg#o307v2*T$WD=&62$9z=O9OOmX>YvQ&DN%{gW3@e z!h`$Coy?g3jydAr!+|VQbX!JXBbm1*SG`0u-+iSdO>)BbmeLs!*Cxfw2OA$Mf(%mMIY0Vr=_iykc{!s!1*x2 zc?yGQj*j(+jCI1m>C6N^U;)N1pH*vz<6b)(l$H|>J+Lkv(1}9 zAbvfkiJE}*6W~t1Bf1e!H90p285=Z2&Bi&9>$$f_RxYIa?uc1cJErqw6Ek;r)2;S4 z!Uvn~oj}?pn4oMyIV+y)H|mH}Ac_FAanRc}JWKZG1l~Y$0##V~x2q2P9vpZt*b|RP z=Di!avcXmWwJePZ&ea}lTN=L$Pzb}lkh^gf!m%&du5DQ?nqLW(2lhn8h(FV?Axa2n^;mZ)5jf<43tNGN?-ktSBCVg%R~YHS#Gwb+F{l|za>i3KS{ zTx@d}r!fm>TC;GbH8`+7mG!7ypWIepJzVx7Oi zeuyX6#R}aYPztw2%zZBMVM+Wtgx5@35;HL?vLap*pA8ttD%8JLJ}_%E#}o2_@G0d( zVofZ0UgMgW&D(Zb*0Jvaoa;oACSE5B6%LU8mW68np>-l#=Q@#3tKg5u9{hU|#p8W^ zga+`cHn{6sb66DZ`N*mZ%l9*6={y(D<>X_h&ML=o>V$QUyX8tpKQ>pmkP6rL|9`AS z@zD+c>y!=uqqXQRko|9wc^?@d6hl)QAdY`8+DV!kSca1L|Jh~eG|NwmV`3djj%Zzn zK1&sab!Z=?ahryMj}W$~sHP0Q1|!SSd;jOl(Qqxg6#U1vXcPbKYtc^7nrA=S*P?{; zqBz2nYf-|-E&PA97QK&RI`o&l_O)nKY>D1I5>C7G9r-j>gDx0MO{%ldM1-kD`o^}< zQ91{iM`VypS;oXRcDR3Lj%J?PS72cC&77~|Y4y1MUX{*ieb=Ei@7I{u)3eLLy^{+b zKv!$Jx3{(&0?mJzTEe!=v%o8)-Rq>?bnr>33vZ=qox$~!t3w&;mjm%UhGpI0SE$kr zevRK+10NX5*B(cyLZwyd9DS2XR`?ts)JQ>%X(XVomX86=Q>b{>o z%Rc{RZX0=UyeWfgHr z>y{Ru8Ge;J;$;h*r0CnLNJPK z?cyxc-u5#~kTqnnY_N#mBE#v4;Ul|pqjd7v1NvR2c>yxyF2!1{k~TR!a3yE$T8@vY z;2svOz{hcI0L;cT=IKVt2iR2dj=b6#t~u#slcukTv|fz*`6ms@g{1Qyc`~|VmF+eE z3uCSxj`fT_A4S=V=JS!$;u1#x6h$v(^dC|51B^ZvMK5FY2T}BLMt>MZH!!-S9Jc#G zMrTE-A7b={DEeVW{}M&7VDw*6^dpQu9!0NY^ob~X6{Al^(W@DKL)7jyjD83w-L?B4 zW%Pi`xjc;b^$=z4@qlkp~LIQmtT(C^*di#cFZNWamE zsZvPFsmqY6GIYt>*qXFc{T9x@2ik-H*+ljDt6PDreG-rrCxCJWV>95kAKxcwemCTS z=zs#;%tNO*rxq$HeH)8BzXM#eo&>N!!?U3d_jmPs#xlxoaG&;5 zk8Zqss%mUTAgG@}R7FO9+5>eRPh3SE@%A#@)R_ss4YA|@2m-&;%i_Kt%1gb$%n2Sw zlHA{od!irnYX5*VvxjV1ANP1pkiG{SQ9SRh{WNwORG#(Wvx93GP1U}EQYw>8R=ljZp2EM_1eReL(FWNa^- zv_Ay`4=*o1BR#^|0}Jt=Rlpsw5)SSJwbtMq)L`RN7&A1+GYE|v7*01njYp_c*P_oS zqR(MjU3rN9N*wekS3icKu}=MMQMbPFkqWp35jpSIDPDn6TgzVXZX{^SUT_w|!Jb(F zLLBH@+ypr2AMS4hZrDoT14ljNO!daBgZrAe*K2v!fw1qNZL%!GH5C{=JU75{wHJ_C zjEzLPJ&!;NOnDwb(|zjmXiY}H3w-`uLlE5v9)H8;1yDs>A|5gP4% z-=)nKTgot-U&fuNe+~s2{K0qrZfBT32;asqe-QpW!~DVfY2j|ZI4<)d1?1%|yU8!$ ztb+NHm!1g9B>>4Bkq6XPl#l}2wnfJg)O4TYkC1MH@K`eU7m4XB<`!OY%yD?aZjWRJ z#!-4aWfP8&C-^&>l*S=WA?!Ej7c)q*I6<~rV!x{(uXj}sqCGngrO01d*Q2lUA&q^tiRQQrwBYcLP$=H4(>K4llt8z3lYpot3yv=`(v&C2=yj|+6Ip_f7qKr}OpDx6~PAnc5l56Dblvmj& zJi_ozo}J3TV6i8sWRP$ute2V3M78#uNc@s-CYX=3@c0PoAp?!y33@>`1F{jZ>8-!lDJirfVpmr7Y&;Uyo%EcPRDi%b8_^fkuKza+bh(SaDV*K!}Kd}gTpDvt33vl&C z8af=Cd>K>y1_~E5x(m?T39I3vs2piYOOoX{HBl}LUP8INsTNN~xxAKB+ID%l;BV+r zPGnssn+qs`YJb9y2;tY%YuzIoG4uB{J=<}L zLy0nPpQ=oCQae0V?2kyf3zKcZ`EV7W-Ck{5a5VC0qtjF{H&KCY_}{BwQ>j3@6!w;< z{lmUa)9k!Nsi@hw)E$r}O6U4W4@g@dmEXDYy9s`KYu|-?G4}c7#P$OF(jw84cuz-; z;^VaV!!3FB-G*&x^1_Pn$AF5JXM=dZbx&|bz&Q|$nS30C`uiouI_Ra_1Wo;d5s^N5 zNT0lJl!^2yVCII>hwOnfr0vot5>H5Lkv{oY`s7u4@m2pUj-~2xO)e{O;eS@0KRCz7 zJv;VVQR!NIKIl;FQf&5t9f_4@4C8kDkC=!$UQKmeE_O}TrCtirXW01HAb2Sh@SW5J z{7w;pDr!xVMGjtVITVXm4Jhz&)(R$x3V)G3rED_|4?k=W$(F+W41@{vio9<~Pb zR!D}_!;;yqqx^*m+0yBC!!YXSo+LjuaT?me68Uh2*erXyO9%`=QQ9%vywGIX1OC-y&(E`;U6x5Q_!Lb%A7g%*>6K7ny za?C~5wKMEsIqt$EDLFmvayAje8+oJx?Oom&(rKJxUg*L*=OHc5LnabSvn`mZ&){5u z#jT5zh*ELm%cunhKzOomTe53sur+3hc!i4glplF**Vo|(f6MWI4F2!JKTKrtw;LR4gmG6=ma06&FfKb zRrsxbul5@++0F(K$Aw?dzKRAd$l!w*GCTnoJ}+{st1=d?A+kkqgN$BEE&fm98clh_ zMhDPZ_~Q>p<~`qx&0<7VLZU@wCJ$YKQ+g@h;a7H&rAbyn0E*T^y> zk2eUMI!A!VFWQ$HU^+c%%pG2i^7!SiGEk0Pd5}WDl8+L2yx27+XWbmEG`4%Yt~(4) zVKzHD=IA)3tEM0s4ra0-2ZCz$V!B{ zP!Au|)bp)ZsORfQ)71!bp&mZMdgyDVzqF=&^9>|nVdYfzgcE@g&JJP96h_kD0bJBz z|3YXwg0dB}vAbZZhhmCYqZ2gcMxg063-{1-QQ_Leu4_21!ou{Sy&E~#C?0m+!hw-C zy`7bl?bLh^+Nby+YX);6N-XEjR?b~RHifXlU9G*fy>L<|A2RAsreV~?l-J{N;obkb z2Ho1sJ0f0#(zm*n_|Feq`A@`81lg952swce6qk2nQg+LS`sP!>?;Vrz z%LLo7*lsM=f@Jr=wVo4S;TItcOG`WQE50J)MklJr5r1qa4Da}7kyIM}$O)Nre zyPz@eeAx=mGlW0zvZzoMXxgPk?T0Xwq2$RB*ki6e7OyjoM{m^Nk6ys@4;MV8UR{Hz zuNG^NgOOqtX=vBkG%@T_J}0ndpr5%Hb+n|X{lmfxOsB}R>AZ?AN*l!9_(!0Q*Relb zM2Pu+X~ryapcY!KZK zbCAOqGH4=CbqI!*5!W$#x|ZvhjFa=1qAQv^UUxyJI(1GqUEy?Awt)@w1)#L%7}_vh z5J%x^3$NvIOFVIDSm;;j)Y+@0~UvU2_!x4_EzwsTy!v)^HvYffGzNS%(tLRB^;Kdj1aYfR~3&WEbA1r z@?Fc?6X2cjB5j?QUp71cOV|;b~WyvMF;?tZA?_vGfA5fT+*#-i+)}Zf%>Et4l75nvt?#dz2;0klpr>L&0>XJ-Z?cH$RY{a&A3%wZU>_>^YP>%Xq_ok>$h4x$K z2eivnW?ATLKxxCLO<%qO{}!4N(RwkMDLvJK7NdzbL>F|MK{+N@>R$X+L6!?uqBNs8 zV*%_QUAZduJ(W>=))q@@yr>ysKeITK?H0IbuqS69N3-_iY^!U)WMtu7h?=eJmn(6R zTrdL`k;;X?&|r^#`P^waCDexhrnfLTO$hwKvIwUC)Ds|^qu3+l`n{j-d_l4|z8MGX*m;BHh|?tWGQRy56(~SRk~&{#a6K!a~qtI6OVA%B=kLm zOq22E1vp~Te1WGX?nRd^@cgNOml1d=PoyMr{um{jKWhU%N#Mpd;8O(tqz(8Z0)N^D ze1yQ?;V0S9_Xupq^HBnS-A^#5N%Lq`Jj! z=G0`51o-Eh0ZfoifE&92O!P>A>01Cy^hkiS2u$=yfcQ-P%5f>Fe-!nf zOM9eA9PELnwgNmm5FUHA`z3$0t0C%a8>B|GL24npoT8gOJ|57ZUmEK**X)IM&tkts z?B!kPQuL??2G9lPLb~Dm*~$JJwA&598sAUn}QO$r!V>P%@>dY$A~KS z-!WqKf}WAS5d+G&AL^I{ypzC09h{kJq)@sD3)^-jMJyFbAs;7GBEcxkoJ(D-Sgz8DN~S~-x=KqbnQ|~jNk^9E zR5B%!`Bj>EiInOuNX!I~!cEw&Z~ZY)x3~#wq1(oZ`DFidHIBg(E;w zw^DNgC`wnVPXI;rN*f8FC}3$wfNIyygU-60-`5cZ*LIMereK<8YRV1wQD_U}Jga%L zyi35oyE4q;G{agQZ^+0?|M0H3`jLTn&Cd6m-b4GO$+5F-&47)Ea$TOD(q^>cm1V%g zJuS8w<4M8s>Uh#NgZ?(>scq)}4%;yKjoZN01n++h$`J0a%3wBk1ze%re9`oo^ZDA1 zesdmQaM|W3nRR$6LC-mj8sL+LA@9%z%oofy42Sz)+mRl)D37l;&`#(67vC*;FWc95 z0qCbHWVZhZpg1-mM?E_$rzS4K>EfwR9(toYE^=4VMYA1HRA(EuY{c0{w;JxMS%A0N zi@2-tPLz_ff3=Hg9_z7BIsSz^g-UC%$8GNv!fur~W!}4Smc3r5^&lrutFA3O5r z%C6ZHIYFRSdcZU0;NppOv`_F?J@9EWx$#ah&Dpdy&9h>g!$t>&k6^D=@H0hi8l(?==4!s&{wPOu&13j!Z3{cS^MY@LDdkMV?Z( z@!zP@!G7o&ke;=T*q>?q84&PsC`0WTYUUFe8p3t&tGLIQy)4Knu(Oi(PKtG!uATLKb?stIPXGPrP`q~5d!#kpe=m}1 z7qw-gzS#i-wx0Y7-rT_SQ5?|9ZybZv~3my$&M;=hnrG!{hndk6-aCWv zu--d^5i~OvsH_WVW8V>a0FW@ia8RGhe=msSmQ^O-kCaKPQ~-mfai1oxSE_G>WV6>R@g(#9j9Y>f z)0Ab0p%%jowd>^CGut%NmF9_LSH;c1OM@-_2ZDtUrpG-79i z>+FQ&9H)Qg1Cq!80H>-Kybl@hIczc~&)U_Fz~qxklW&>*MPyLpuOfKDdQxJ`(r4q; znL$oA@}g8`^Zy9TQR=}lb}P%o_tN+qD`6ct>(}z`5uK}ArAI>GAG^O`SX$s8WPgw$Gu%b>;Os@ur)3wKJMY^?%{*B(SGJktMd zJaeJTwuzVGqDn;D?Py%}+-fyxhy> z$1%7<2B7vBGEYgUzmrht=WC)BGbd;zQA;bxBC|nhMR4s|Xcp}5dHyv(z_v}A{ulCn zkoiKQ-N%d`-qy#Ze*Xi)rdkP$S~}V(I}S?$F#q#tsWu0G)dVHeJQ*vLOj}B(T8D3vxEqB?>1buQ)vGog?Ae;Wj<1% z0$7HYA5wVD0aIWP+y_mf#w+F_uP7`m#=#$;aM$N73S$0Y;mrFDYz}I2r+V{kVGf=! zIxUGNY{L*u9-Tmwyh;Iwo`Gf|M3d$oQh2KZQ|2SZqRA5#NZ|zwOaYpIh|%n{i+n)0 zcxQ-wW^Bvmbr_=wj<=n&y8z28Fg6f{Ct=J|{_i|g=2reBMz~q~o{@ zBVMoq5qa@4_%9Z~dOFRs(&i%^XRsD!{ciReOlksl{nzf73U0jbo ztAsWE{-Am>>u*bWGl;&flQ%wyfUG8(AHxvnLIw+m?LUYXNj0YXvyfeGZC~?2*!-#B z0)F&iOU^v3Dz?Its|vwFn(eLaun3L61oco#Wo7+=WFi)ZiLlgF`wOb-G#kfwvi>8) zurq-n@6daJz^()^@oh@d4Da>He6?Q<#XGM=8MA_)t1Nl3u>>O$U!!JsxfO`xKzm_w z;piC;E3Ki?iq~wgR%tUJNZH$rJ1N@1ZGGH zpTC}pzH^FmaLYomBowfZ+CM-D+#|0g@TF}cN*}KOG!zvN5aE!X+(@`k=-yi_1>2DF zvox>YhcOynj%)a470W&xZn#}fQ;L25B932w6V?@EVpOxp)6(qX?7m`uQkoWL$Ktd! zP#h4ES{lTsOT!l?XBG!*52B}`bqOlcMYQB5e9aW+qPq1s)=+T>>-{0S-pA+sigXYoq}4Fihr?sLo+<2RM)9DFW+DFR5ZazbF#b-!|J(5YDE_B{|H{I@j$uU5 zEJZ1v2@3G!+D82g#_WOkGW_G~(|T|UY19YX;CYqk1Agm+w&B}p6;e3F%D@W(0$0%L zxfZyK!Kn|Q$d`}BEzC4C0fVZo#pPa{gLG}#V4D-p) z$Lp_$zN7avUIF2~4h`X`VI;jha$ia$H*W992*GH3H9(hZNUv1zVHBaq!G->W?F&2Y zi@+1BgQIE>BTz^M8<0Z|*vm=!O$`oH$237?5=m%weGr98xDpMHFb<$4M#le=Rt}<3 zzLF34{HVxR|9ZNAz2FL*%}52;qXr%Lx1okY#$SaQCC-3tOm)E-5Dokc$~v*n`OeSB zgqLCslTQ`Wo%$|7Le5g*zZo;0lnKsY6C5mRdtEl~3@KX5Iea~N7X+0U`HYHO6;;T-^q3w*MvUnNDFZ_=rx@LU{`<)!uEt$Vb|mY^Tk zYCkwwf?Hm%;(?k>shUhE$WB$6S*fUtmKNs&-c3V2A7?%2si<5z_;Lq&sxM~y&tXET zL(9RtGeV5hK@9&39CC->^12J5P6uBUy&Hip+^za5x|jZg`!Oov+FNz8_?Fjz_IA1one z<9j)Lio}w9s;PEe7iy~T-J7hLHDtOdOU33WNR{B#l(`i(UMKxjyW6R=JrRC|W){Ir zY#@oc=*&W^u+^l($j15t2ZV_`r54?xTVc$lFVvVe*rqih+-eVVf?^HFg_FVkUU+;)nYfk8|gSq6+DV3*2C|juHbjwUM4t31M$bUV@&8f3s%(zNZ& zwwktf&?3{e3-1}fhG|u-$J0vOa*SJ-R&K20bwCWg89N}HV+bD|&M|~fF+Epe!bqN` z>A4YM_MbZaQ_>&TzaL2BW`CJ0(&6Mnv>UyZg(m}eFD8)hUdhr_Ai*jKIo`M8m^Y!$ z8>CKubErSRil4mWZ-NI8)KkY4VBrThK%cFIC(WOY6xA*CNg^#9ra=?KOo7vp^{zm@ zpJu(TBX^6X%AJ*iu-kyMZ{jUSy#(#(NV8rbjh}$J7vN(EY~2g^>wgvPE+}cUUckov zE%AeQIz+K-;`p72nz1iMP9(idu>nUfFRbk0qt1vMc(68AosZ!|T)qDHKtt@YT^$wG zlXF@WyD)kW1di89E!r>ITsJCDu~PpM8HYNX!HZe)6c|e3BZIY%faL_y`-Pa{Q?uub_*PrVW1HEM4Znxz9x9r7&< zLVkU6pD{z9G`ZobPRXp)~}@2P0{Lw8wE45&UWxB zPyt)jrF6Ehh(qrdCnS32d31w0SJfTcDckDSz?jJdIrU&2DxWqf z(GhOx!@APF+z#`(+e5jJ@YhxDC+__Fxr(Lu&cA0Aunk=M(T#xeB|&=`Ao*)o@YgM* zT@BYMK!WJCdj6FV^iKT-I4$&EyWkQ^e$N#GxxrK5yx>Cst@#vO7NSQIi2SM@k>?cf z3hiC}Z?^}$L*CFmw|XCVBfhs!oIP@*A>pF4-i$J;votStmg*5vUn~D#=&vf;xK-w> z)n9#`m1EttUvAT12RVX*r-+FD+W!AirJbLcH?d}F&|bm9aDYUxG#kS6Hsa{i2@YPy zXkw;B&N>-Sn-}LM%;z*O%`&^EsozsOSLY;Kh~V5Sviru7rKHObov<9UVdSyjZIe8l zqOiv%eYcJJU>tdGk8yQ_4)7AK%a?$3?JPv}+X4@WjFztxX4p@)1G~+PA>FrSU9|BJ z5^(~-^LG@L7scgMJ^78Cc)vy^8FhxC4%|)}+V~x2R@szjgYq<}j-aAmQ-If|chHxO^?9e0j z2U#b_SHVzpa{Ljk!Kh~5tnMPgNW?2L&ZJ9M?p(S1Kv6XH_@hi)cK3Sn2D8m zV=f`RjZN?{m0sh>%knMImg^u}tCParDJhL>JXx=L--j7eA5b@Nx=VSbu^Ah)gGPLl zY4ctoZGKCdYq%`Bn{}oFT$vAt5-!8{YLC#9_+}`3eeZ()u5Qq#fNRz>q)|rfYx>CG zmoWE8d0h_6dl*svkS9~-WaRs@;9e){pc(FbbNgx}d7*NsQzz2=iUbkF8VK*2V)}0l z7G?rwq&nV|rUaq1rfHFyCl%%KW_e0Nmm^Fx6Nn z4>Z!)mNnx=p+%U9UQocpuEIMJ3|HYSWsjMu$4*w^lEbdTnWJ?Tu8^r$;p1n9ei6u4 z-f7twBSJV`#xVBY8SZCzT*G|~S2SEkSPZMiRs^IQTk-);+8WPL23O1}9}d^_s(;Aa zATIkWTtvA+eYHX1q(}>VYl;o0&Td5TLFBh`hBR$^TUVJgtk>#0b}TBN(07E#N>q!A zEKBG+$uph4;~e094Erel+n_$xE!e$TN%~?TiqC1)nV_e0d163?W*d$q>{K`s{%SZ% zo>#*0^~6!<0S9&gIDQeHz*RpH1BK_*nWA4KWg5uNM~EwL0gCD%L$Hq5;n`XTQ?w4I zp$@o_9MP3xcYN2TS6Z~$&_VjEVrbVQj1>#I;sr3rbDmx zk8pT`7r@E~GSjmCi#-9^&AJp9Z_E4l!9&PI>tB}IefYEhx01O<0uUG6So17}ds#}! zl3T9Dl6?uer>P*9GGh0x?Go72phQcZnPQ>0w+P4Y|KaXU;N+~T{O_lqTDz;elS(Dk z-APD=C80>ALs*0ck$n>o0TmNe2tiRYN?}!kPTGpN&Wr*>6qzv-H&n)b8+B%!(Ghn? z2NfM1{bNMj7{`4ZSLXlyopYb3p6c!ZI)2{w{k-|4`gxwao_p@O=bn4+x#yZ|vs(zu zI)SBJo48-amQZj3t6k+X-spTeo}A%7{&e?C7mo1{CUR#@L20UWMjSmOdeU9Vx%U&J z4-fgdchTm7v@GD;`W=T}dUk&M2+j>$OM8-!u(WZf|<6R_q6`dnNK70c(y+(-+-hc z*B|n8Q0X*!Np?ExLrMBwUz8zbl2Z1YmCkM1lxfM$@3S7F!%OWCD|6~j49kF0`y&HE zciPQo?&j2X{yR%{C6#x-)nK<1mt5T~Q~UcGbZnt;bC z;c+|k(0nLOsx7i$c15oh*?@BfiWsNV#EYwo(dIB570`Yi33}olQHxtoX2oTdh^MeGQ3%zlzoh?_owI+pbHP?mFL2A;$~Pk3oT#C$PB&?TOC@>{@U(7@KiV=R<@w z4+Ugxv#KPyUpS2F#J4qDiiT{qth2vb2jO>-BlK+R@{q7LS)C;6jn^en)ulURc11?@ zDf_I%KIJ+6*zJm~;S@2R)kKi?DO;|j{9&3>=rX&W&gIWd09{dCAwad0j0@xhz?!yP zE1hSPEP?KVsJdduX?-vn)rOFC-t&?q)fMKly0*%>c6F6ab4@My1orCcYD)Zcnq0s% zR|r=JRu5cXuO8TEM(yV@!0PuQCf92RR}WS-=R7~DCN}0)JE(e)`ty+LA?xu`Q9US= z+xXa;*2e0Z3=>-$Ro5C5OBvXq)k6X3LutVg>5a{N95%DYcb=QoCTymeuo)`Kqx^nq z4Vfyz)lluQ>S613us9*ab=7s8jernEemUo9&4bm_)>m&Zl1->_eRaJ^)~FLL(~%-} zcW4>4ra(_anWouZo32-y?%NpaJ9EBw`Iok0wo?K(UX{D?Docy3N!mkSm=J{Ji5JZSDM6z^v!#jA{3{ZXC+G>WQop&pp zW-XH#8HRb>Bu>)5%>%&Zs97!DK^mu_viS#yu$Lb>EE+q<`m<>J+@Hwcb!kPG$PCkQ zdf0CBlzDaqAhlL2niPn_+TOK1Dz>#SDs>m}*JrUXXPX@8MgWp=e*x^D%+wRN)m^p? zXLy&MNY!CAIF_+*AI-dv0a4%8e4%w{BJ7&8XAELe>!jkKFX!MV>a$D_LBJf`6iPk1 z+g#)qmYR8V;@|y#+wKnN_k#fLt+`Nqc0jiZ$iw}G3)0vg9zTCJm||HG0sT8$I;`rF}+llC%B&?PV* z{hQz%&(~SZl1~D~HjvugBF#gg@i3UKEKiQ{x^lZ${|_y?Y{Ux6hp)6wY2<- zEgt>K$y#wnQ~P+{N)U%QIVmB@Td^_c`_|-!aN>Z`rPh$`7L}r zzk6)FP@h}S#9%>`Twb|#I03UBe7&+qHqktu!5Z|al21*KI?+3UzKW-AKodCBdziiV zPSm5ji{!nN^jhzotj9#}6g`&qPW8ak{BgQJ&d|dY4!tuyX$nAyM36gQijC=`mLOM_8Y3G@ zrN)@ap;}g`!*Rqn+FHq^6weBT_L~{!Ygjfz5!Ut7AB@VHuaA?X?WptRHxFIYZAc_5 z)obNC_HK#!trb(7@UI@ZVHHPz0AVLL&Jv277?H*iz5dgV1UN6`e>d>6MIHt6Fm`JxmIV6 ztV1jbe+oKNr3w6LK$m*<-0-lMr_w|ELWF)P`i#+>;m-h_2rLT%LQpz0(}ao5HwfAh z&iAk6G?d2-Pi*p?A4T2j2mCqA;W`rNaQfeaGcL)tpd?}uYCJzBO4con)gqW-qhFZi z*F%<69^Ox$DtR`Hs_znVn;`d>Jh$rm8ufkF+t;s7=_eqJqZY-p8moQkU=@daNGCeZ zqnYQBKb{r-MYYpLLP&jQWxE;jB7%WQ&(@PJGww3c(~yl?15|PbHriroYUL%b|>79=4!0Uanf$$%3Jn-<+IEqhoE}%tc2Wo$Q^KqI+N) zcRFsxI43t^EFylXrEu}M+r(7j=E>Aw8DLMN<>R>LPjRPs95YdJhCGfv#{z$6#iN@u zWN|h&>qi<@wcBt zHBP`n2&JFdFWvZPtu*sZ+5l4oXQZeF|7cA3Y(m2_!)6rdSFZfo=tzTVN@JyYZ}GVxTm6)zrv{$joYv!smj*WQHS|xD-PKCTb)pAt!F0P8#HL zp}g3BwlbiGfS~j2mF1(iQs3vDzEt1(V!?H0RLsSn3smgWX}>atoy=uUqhN~N>cfH+ z=|+H1)w+&Dbz|>tl~;?56LbARx7B^5RErua)dGm8o2Ngju`=vqMW@1Y)!}5UB*%io zSUD#;^CllF7Xy))k9(nyn=g}KV0^q7eTz1J!Nx3YYyJwJALWdJfN|RSKPP%OOUNAnf`HUQy5%o-&|45!QH}VI$(~~aWYDtTejfd?mPVuMJ;f(6d zWBvGH#JZ5ivJ6j#ESCCorN#_?^5$BhpQoCilc}1Y+*&QHOiG%vlBxwOw*~961BZ`S z!xA|MiOc>a!q<5;3|{vLJzV%Y-$Nd$$3*W!|GLN@kJ6)m;PPBc)BHP>OTEYGeO7;W zJzRe-;g5SXvbEz2sMTb@AoTt3>-96mbL&kG7bELU()A0$lj1^lEH;m8yNnDPT*{DZ za~TQZ3wtObAS_wQDOvG!@^O|WNp9_Rn~^P=pgoV@{iI_e44DN$@w3OaUicK{{k!Op zq)-+$8;H_z>B!IV{0<6Fy(?ZSF>SZEX3UY)Nb5}Vh&9qW(fnVHw2m=vS0k+r=BsO@ zwbuM^jkH#oM=Ndu=)4bhm%IKhR;a$xdmAP1bSY@pW57c55CWQy5@U!vlP_jPXu%$L zVn1%8XT&klGvcWCE+DVW73vl)x|1#VTWQS~ou4Q&~MC0BmAbDpL5ouZ;zj(O8`nVqeq#g{Kk88w(XzXR1sldj}qlWzf&$05+Z# z>1%>J?#Y@lbB&WP3zyf~oP$Fsh8f1?xZBp-k2>=j3^7~1sn{{HPW;X(dak2v#)TPx${g$CPF>)nKTHg6464!k2DeVM%P z@OfO7G4Vj}l2Syq^V=C3(76d>$PP$rh)GJY8zHA&Y%IPa!0jOu#Z`j=llY6F_RC(G zt!ygbGlQpi*Cq-KBj1TGeC*oXkH}^);M>2XxBWuH&NGgQu9-)q@VdM)E!+FfH9y9* z0rYD4;6x=Jdnu6WU*~38ex1m;ak9ZFW-@>sZPypaTH@}-^s8+W zTnbxz0y*Pms$qD%6{K?3Q_knTZk+@-PO6~@H=8_Hs3f~%9^1_baC}{0B#II3kRhB#loGrYESh-l#8W6xPtn6dABj&$xNj z*6P?MD`OKkM?8*T4NF*->svB;8k4M>(h^ujZOMGv8Y+$4LQ#u#8^T0&q|vyH|69ip z51thjr!K24QUfNh7_Ban(&mgj)k(Oh@Pm&16co&3~Cck&Y&_4_!#ukyQ>9}AjVMYP(y-tMnYOK~pGE(eb zL1~pz+}_TUUA8h@!8Sced|?z%;M40coL{AErywM15QHD#7V_cL?VXs;%A*@n5v08pXvn%z=U|gFIs-E@Yj>vHa8W_mi;bpo5dBJb^%-s zKwWSEX9ebsSB(In0L2oyIPpYgws=;b2t0b|f*VFEH!OYK!yBvaiVH|ybaEm+%xdU&~aZm;tQ z?fZWhFEOOse;K%JF(zP1HYdc3&ra&J(k-IUJVO?WoQSgC^Bk~_CtaGa=b+@hYbJ7c?rp!> z7D{i6V%NQ`spmw%iWKecT{G!vr}}9Hd(qCD2*FXjDk-!v6Ebe}jE$zAQ@O@!J(q`q zSA>FBdcg zbKJHx5oA{>u{U$%y%MMmBVoxT{I4eOJp9k+H0y3fUGogpnJvNJld0U-o0rgal5@aH z&P24{lOP_}V7^cFHJh(z6&BV3_cQNzR8D5zKPYbgA8YqT@#;JBe;@UprlA+S2s%&D zn&zjrhab->7EEuw+|t!YT1>GXI~KW_{3t7uHs4D7|t4L>HzfV=M7ar5$kpYEr5>0PZxajE)Su2oPZFGy3>4${pFqKK0TO zc7u|$8wg&QIidI)x+BUhzk!Qc<2A4aLC#s?cvh9)x@Iz-Rn51qnTlss>#gk_YN+)+ z#3}uy@TD~EJ5f*SvVEfcR&?=N1J-Cw+_?#Ex8L7JhvL-e|AsA0)M11wsf{BQAe zA_I9=g}U%M7Y7zIhy%a(aG3dk5%dZn4nw3jn;>l5rBb@_Dil;EF(HSYKo|Ofl3c0% zI3-M#JhGP%3ALodz0wiL~m>#^_lyX;rW;wk!qDz?q!|(g(a~ z9Y10B$jvIx0L|a+<65;2gn!+`Rj7skK&<^%Rh^r1jt-twTKb_Pf)GHIGKMd37~9#? zY+c1wn z<(a2m#X!H_;$vB5hVX)&t9_q^ z2fAG^SJ41qJN#&mknB&tF;#m^ZgRSgOOufH1-<$ShVBvpC#)O^k%)HME@N8=1JC-_dYD*nhxTXFh z(SrE)93HD``#dt#lWC(sxxaXU*N=Y_gE^fPRJ2VBD#IoPB~IpodHwk;BIoy~h3>CE z=d?v>`>@cK-*-;4{$m3ZMdd|W9>IyUNryRLIq z$>*GDyF{~s6=|^(?XK#<&AZDr@W$SYy%M!ib$rw7P-v)wyQm2N4dZN{q;);1!kiHo zZE*E&APAXID`LH3xUDIL?QItelNI>gL0CiA<|(9W^EY&D{<7uj)%T*x+;&OtMoOA5 z2dVZH4}$$C&LfmM4Hu2s-0JW&KQ3kb962E1Pw@8rLA;lpOFS3EgDq!^-`8dSg4gb}I}C0vorOim3eBtO+|!>lFvlD1(N2|lPQ-z0Utgar8==!r})UVcQAROGDkjM z+<61x9gAc;iH+M_FO=o<8s-ayS&LpNiq}{B7z%kxyDfrGf_4%V7B$yuxsXZ1S0+|C z$Va~dR{cxx9%#1r5{ggWUz&NpIrIK9y~ne+@NoQWYs_rj($n{x;Ef9hHx~|Gy>Kw< zn1#w_P%RM52%8^zbqI54dw&I>>wb{7d@3}$XYI}Rtf_^bwGtW5nl;Y7-xF9rdS39B z@RYDVQPy-^YP^2Sd5sDg2oLg>>KF(Q<6D)5@IrJo<$PP^4C-)`m32I;&eGaCo>l!? zUB|O3SjR&^(fVJ;+B(e0;;WcUyY62Wk}uL=jp_QBNcW4i@uB0eW$`#(}zhFt%e zVqE_s|EJ#p))cD&*B>JVMDcMRSz6KeoM6$)0>Pq{1%gE@3j~W+76=xt%nuf=%nOB9 zEG)qP2?08*zazzo%@fBQ2!CxXcH@9m;OGi|;wO6QyLEXyaf5genh#rswzUepwf9L% zzdEA(=VW27)T%YQ$0g_&Rdf2 zStANJUS-u8C@kRF#+emV#X@n9O%1pD+MIM^Pt$j&a%-S*mAMej3S9%?f%Xk)nvRmO za<7jGRT|RgqiccvKj+hUJgeFQg+i~YBPCuH9HQ`Gw@mb`GRu3M|M`&s4^vxEpxsq+ z#Y%2sKCS1Y9|Oa87ogpLrO?0&?|&}ueM%{3m43>!is(>L3p)v|+Un0Oy-yRLg!cZ; zvgof2h9*T=r7U4B2B`J?j^}5Dg;S~S522;r9pq`9#@F-GuZQsUmh|gTzFv}kP4TrS z{TiU2kENq^dCwY)eJD1uE}A^fTa|N23s$Y@Z9re6TnqKR+BFa!XhvT#-DzI!34L!Nx)DTux>31TwXdQ1RMPJsX8Xk=8-Ww%QGE*P zeqPnLUFwss@`X) zCwc!Y@9VNDY+++5!otQ<`23SuV<>b$ZdX5L;#I=D_&^Rt=SZ0}{?5$%=QHnL(0e?qq}GObRw?au*GF@_Jwvk3pYW&m@AHzXpaqkD z(UYd}nNr)2R9Rml0lX_8y$Q&_Z~VdKI&|PCkicvcP$4189bkud&5q;Lzl1rzQ_ML( zT38&H7ehcf*B)A1LpNGm!}`?PN};ONQ(B92`2|~-E6feHmK5?CsD*Ra1qT^2MOZwW zHn_c2jhM4u2WPGsMGGIJ4KHPAVGVN+Q9Qn(N1}fUQp4927T)jH`>aA5PqHNCyW-VF>hkpc2*tiyayBBp+rt6l{9D2-KL+opx(%HEK`+W9#6c@m%ZS z$sykI!aG_;gzaOnX7Xd8Aiuj1@LfCaU7)6Ko6DvQSp zJ*%Lw~0kg%}7*&FC7T_*bfQO(+5ZbQ#(U?zKkMFk4V3( zNzg4+ut+JbUu_eYIDxmG2idzvk>msIAE{<(NrP2Cm%&WHhCdYeL8FYK7hot`a87&Uq5=` zs$4(qwVd^H!m*Q~^aG{$VYMw?fNbk)6St-6#H+U?>ck%^Pdxi09!XB=X7oKLSnKTt zg0JK=b0DnOMmQKmt`R@QsR)^s?m$`)qqXy9EViqa?Fwn1+=Mf# z$x-VtQXLyo>F^onA4#Q<_GP59#aK^03IbGBb);Ik6&qD-@j!(oVRZsHFl+jLsAf=y{%qqX0*b8vWW+katgU)(xNxfW;Ij@5tKcAfvl z4xn0{+jedYn^dQ8!S+IKcg&o zy&m4gcvjRPFIy8EFlVYRo!YQQk7R{?J~Sj17lL~9LVo(5c?*AhO~zeE6F1yLN3P+P zqg#7FrL37n&|QcPsvYh=A-z6<~> zLi&~cDpn}{%8>LqRN;+mJn=|oWHq;e@gwUIF+aKII!(510^QVy+aH>&*9zBNm)tFn`*JXSx-mP#GE{ z@p!2x(u&8+Mi%k-upwbwW0<*I=PWlkV2O+vWINR{F!zOURXPwJbhR48Av_;l33dEL zbK+9QrLlNh7@iufu+c}L#&OWBj24mZRqUO6ixXutkSb1=%|NO+RhBVTak)+y&)~c@ za_#TfaNJxC*rE6MI&k3Ykb$o?{V(r)RwzxvY6VW~qcLN|miNHjjwTEN79Scq4^@@w zFL5R`{T1Rx3bo>Jl^yQXSkb-`Fu31ck-qso?CDE$K(#5~MO6F&-gs5tqR~H7n@0Q0 z)I-{&9xIu>e|RnY&*;SUP(jxyN*L&)uwD>l421tweH71XSXj9HsAw$x%)>?Y&7=%_? z-5vRHmr25rh;Sz2jA-nlXqnp`csqaY@QK0)+7rS>@dM$3Mn!ZX9A5=c(=SxcKr@h~ zM6UtUfp`by6VS0WDkau_D{RNX$u|}BGSnUPZIr7K6128SX6IDCX`#+ZHYhme;8iop zBjPRFCeC07QLv;+zLwz4RRQHxCok?98@e{45Pd8s-RkwuwrJB(3#d8NAdjcem`Je zj~aVPsk~>5ZOJeu&8-as;K+M}%o1%k2 zW^N)MD((;R*OV!E`%0K<)Y?%ryLOvKK_QpESi;R%`6LJNEFiIF&t#Pe{2vHYz?)Iq zB*k0@Z1Jp6oS0JUToCe&f|7>tDa0^596!#2W&YqBcJ$|OiHB8!&qDMAr08FJ-znG@ zB!0L`XQ;|cYr`|2CW&0;B*?J?s2tU=MCPZim^m4xQ&X!Gb-cWB{z$vKZ)k5c8)Z08(lWV?p7GbLhyC)NNR7m%uOjsj?t>4|x zTj^}!%Ud825QsU1yaIUGB#aK_$ARAHN&Nna-%NOFEa|%&o_bGyOjhZ;!rsbH>9T2e zhcwUQ`6_-h@8wUmSjOAv6Ig;k7Vk*|PW6D-r2&_Fz)RDB%^vXFG~g%;Xl?frPxP-V z{p%|K+N2v}RNsaEeYSs{>0ihD*JJz(r;AGYB>!6FUk~@M#Ys7bt1sk2QJ3+_-eV)+ zoGo5bz(Wh7u6E}-H-qf)eCJK-frn}xXrz;?=bJCWjHaT4PRGX$O#BN?6^KgU5`EUC z6=)t$ND}PhOMcYGRL3N|%8l_DUNQ0=2I-vaRj^zAd)eaSZebc}tpedCxQTEIl6g zm9)^aRLNQ)=;M?kozJ8{3wkwW83+&hGnFwA9@ZABFoYNEY~+2y)u4RV7oC*aMJLst zh)zf%s@8>0oC@tVYh`pTNQIx%ITauOK^W`!yt3&-BMcKk(X6{#xIdi|ZO95RmiB8V)<)fWEqjDd% zT=#L%?}({wMseRz?%(0^cp}zR5Z~DN|4v+Xb5$Ms$Y6!V+`rkCOCKP4`^<|JdGuk59VR6ipu0eiN}R&_ z1yK7_Z5QK@lW>!@TnIQEHKmGotpbwQfV8yBrKODniJ-Orhr}i%AT=)$@f>*MA#X#F zheX%3Im!ti$(=K}^_$7&HC|rPO4Wvh3M$%Pb5f38#ZSzt%(ax6&)|4T zbYES1I=jfxv-(9^Hj`wfvKdNMKjCK=8MokNC@>?F>A*WOS!t$Dk^z}a(%Ql@nH&HQ z$Yg1m3&~{iy>ucSo+dJhtp8;aS^8-bS^Bl5GJ*SCWU^07V6pX6rXZKeBq3HhGcQRb znygHwf`Uw@B`^}4xi@rA1;biqNu-9rDNcYu_I&% zhs-Qbz;^;A4#daN(@9q}nrL1@O(VsD zlm1wro5$AH(Q)&ML{~WSZ!Z&FoLTXCtbcY-x39y(*QG}*ZbfGg-4R>4*MAnkU6*$~ zu`7R}OZhd*;iaU?rFL(qD;xJHoWGRm) z!q_+PaEQJ3r8vaSsBYg0hIg_+?mY|)!N5*T@t2D(q=jW46DJYuI=f2eQi=#CbTCAu zp25S@tGZ8=CC$kyuenW)V6#K{yN5$O{d4YlYt!)WSw2v>eQ@7LN1R)g?>_l{>P+-G zqPM@KO@Ss1!dbODuq}MY@sa6f*?p-4PUqKp49!rMp4!rSMEJtd9G?^2Z{vZ%V~!e# zsb^xQLQMCYY2sp+gVAm~7@Oacs>Xuj%kh0~`0~n=uEoZ{aO$RXQZ5TBPty+P83nAL zh$LDc(Ym#9^Tke9lHx>dG|)~5-Qe$8=6DKO%w7Ii*?zQqEtl=ykFjBFD<$vXab%JkAjH*N1RsXaU4<+iI2PKLxAE0G zhZ2)f#W*-upWUb8yuWuIuR7VX-(>mTS#wfzK+UaQ-cuHO zXDj6fM(||wPt}JU5kN+1mKkdk`R23IpozhtBb6$Nr+;c2OLq3#WamO-3qFr1xVe;K z(DfLOW`!E8U+lqwvQgr?Kcp*shfedT--~FpkZb?K`s#030JSTzfVCNy8e_j3&PwjF2=E*l@H@(Lc5?V2C8t~%->|Am5qJ+ZMW0_-3R z+&W}1j5`bt0=G$doz+qF_lPVRB)SGkyQF&pCYpJ0;P*YqWg6soo4Ut1kMOL~X6}qJ zMD5&3l(_~&*EP=fkNV%x#f1JTuhhKeNY~#9SF_4pHra;fWs7IU z54ulEaxrh6l+>o1idI`~1)nY#D3-a0Vl(kVPuftq7z(EwYslp4rz$O4(!LgUiDRH@ z?Z&H?Z}#Wp=1FI}OnRzlsh86|3Z}iLHr3Nes!r7iHtg&Aqjk|_Gp46%+;i0Y0f?@x zjJcYry0UwwWjdhuaAi6GfA`g;s+j7+QP1j9lP+qjAlgRMS@|-Ew&4U*T_qln+==p4 z-ZfwSn4hM1q&UR-D8e(Bh40{*4gVtFpXGNOJRk{|9I=QzJ}2h#OPkj*I$W|;oYIB3 z`nG&OQhs3NTWNHFm*BebO$35xwT>~4M0IxfYSbD_w;2s^CCM+1Jz1)O_p?EcPklH! zr-bP_CY$P z{62~E=aY@~I;W_tgpzTK9lvn_11>zBL}cT)D<0p3<$$jURJ1;2xqO#qFn<_l6P zQGQ>a1l?0w&D{0L{^Mh#*C2PL`K3}#&Ur{~+vW14;=AW2#{7gQIyAZx*qUp=kmZ}V zs`@|bhDVZ}lij&|`=6KKFSz}F{uY`qp*_ft-|b6Jcx&o@htS@|WB{vrw0}lGc+G*} zLicW^c&r!M-yyLqc@OX7C+wZ31!eIgUEjFlU-4+JZckomtl8vjO=){wvmBUbxXzbP0y+n2AY+zmJ z#!(mg4Z#<-o*W<|JWlQg4er%e~9(Io#W-=d6kxY}EL0_hBjSjHX7pecJye zb~T~>2Jfpg@E$lP9gQk_>#S|#mF82E}avcZ@%8bk)MYn?OJi`1mg$CI^=1;jJWnM z`7_yl8%1;H0EZVB7x zc-H!RR=tgO$vS&hU0d(Yq`8^q zKDAHVbW0a(AMEh|TMb+r-M1X^R}F+)ff>7tD75d^*Y?|Y>)(3&l6h*G+UNM~{s}1S z^Wl8-653x^y!8>wMGY6bYpPN*pT%oSe!1f+F{NU;{fHFjt<$*!>>o63TAW99{|msz zhKG$rhTA{nYk0P&GXE3S)BV1LTYVOX17q`A#EhojQS7dy^k7yzZ#MfH+^_d!@~U5x zwuL!X!R-%Gc)x8vN1J{!p0)UoED#^`_!j@sIq}+KIn(E0i~lh3{Zn;)7=nJq(hTZX z+~&yRo9_S@23}TC^R%=*#pq({vpJKaV3$LmYwEU3g*92SMU^YK*oRL%b9?Z(5j-Dx zQZwGbqR0$4IKga7=`~X9$SFw{he{t?-453PpI(BVQ^u-%Xn(qUqbE{M7!&&t?DKu=vr+0a(J4 z=fPGD?G&Tc;2~K96xuyRs6u;}{e3ono9{{bO7r+e(gs;gb$~PUA_p>}^p$Ar?A^uu zr9FM%{yC9b60!JhQSjBo$+<{kUebIFWYudc6k~a}C~p3f@FxAG)*Z*gwI;pKl*}ga z5nU0%YNNDtbY>;-j5*xp>qJ+6NF?jeWxT(U_s{YB81MIl=bLy(sgFn4VRH!k7QScR z!yjh@Z0%`WF?p)K?u*kQA7P4D43bc|6zy#ifxtxy8Df((8q*(OOYn9gZ#WRn;Rcf{ z%wQ4=zp`r%6vJj=Vm29s^}Jb#e*w>}AEn~anTH9kP($}>1$}iLK~ivhL?YQp#+Eif ze1K&XCPKhg@Hsl8CWnAGTY&Hp0-kRHLR7#(#c+U1!*K9Hq65bQ2h20YTd3M^@bs;l zP>}Tw#&_~y3=S%egJr_OXuY6vfapCJJ(+rz8@<j<4Pfn|tC8Vq2iC>1 ztoBrP5X+j7l#G&FiPvewsm8{b-&GjCM*Pd_&)a_Omwf)}!@Y)mP^{o$)UW}3+dfC< zYO7?KB1ElPC_Z!Rt*rsP%oWay`ehz!*F5D%t=w`_uA5$lwfFS5qLzdZLlb9o{cc39 zEApn_{hi^d{W=CNLWokiAACy}vbEnxtX;ipo586J5Z0MSB430q=E?v;MzDC%+T8fN z&925tOmsCjKG;U5B-oFS&4>Seg58Zg;$rg-b+B6=7?>Ba{M$;YfpAUrIWRS#Fdo^? z@^M9PySnzubk>--LCgW$k6S%PG&K%Qt#te=b#6}pMse6pg}7Yvb3oCDbI9@qJSZQ2 zko~~2#=FW~I4(AQSfG8&*Vj=LY-{ZR!P01&5Q1xEOtq3N8?^MiZ@#m_Us;wE%cXG3 zBryq9{HLt_bkCAx6Rp)(S=-1mv3d6hkK*Q0nVFP#`!!f5nS7JM8x+7sV^;KEjR-laU2IoFEuQshphAlg+{=c%gLV zeI>Xlyk&h_FL9_U)pnbP+ppfPj+E{0ZJo2iY|aa)Rwk+ybwKl&5~_FnC^x@Gg=540 zB5EiqOQ;wtE1+~!ki()=ybUikO|c6$+6(l!WN*=|6lTQK71zC&4U3+(27>|_lLc2G zkCQ^-)$ygKMD8g$DAFU@9MqZaVEe%A$=*%#ub>SxLG*;S4OznpuyXkamuRuI&WVfr zbVHmb+JSt!>{R)OU8gO#9S|xb>6ADK=5e~Hg(ceK1;o?9 z*-o#wwq#$uRzu0Y6ZN+%xR?6mQ(XeDKILeLgMX59?&8l^`7u>SK2P_bTgb4^4Ymy z*M)1e>&EcUt{u9j^Tu~3W(o|PYpD>;%ro>T^q$E>yxiA2fgdZ0ahW7MoQ+kUf$&HA z9Hl}mTr%%I;5pFRW(&uWxcx17sC$Kh^e;dg_FvM5MRu2y5lp2t-2MrPn%@HR5g$KJ zKO!`E`Ka>`AONZK2vE>Ggg;QQ?~S#tV(i(8+giackqQN_emP*YAEg~2y4?@&^uO** zW4NdqwY}|Rt13iftE!l(Dv?P_rtVMgvvb*Fb#&Onqm}B{D7q>-_uc-kxp5f)*c#P+ zkKv5m?lH5fB$tS9euP{HIUS@c?GXl#KAPVI8NFHF{5yk2Ru3Bk8b>kj6YARMmPx%+ zsY8I=pY@(aKs3Xs0!#6%7pA`;Wb^K;aauMQcz^;o%J@8+bfrQ$6+0NZLZKXr9SmKr zP|m~-hE6He463r_GE%QLyQ*v;1C|4^YDjU1=!7*JQwR4@I@x$*Gi{UEc5%n&J*DmV zE>~IwwEseg>8EX7Qrz+7kWi)&mQVrhcg#t6L~+NLLP8m$9i$Q!(0-i=^L=dnw7%Tsy|N2~e^>LfGaZA@O?mS}@xpV$E_18&hcseh3ze$AYtLArru#TkuZ800|x3kxMDw(TcubaW?djhu( zRo*(ZSZB~!4_P<*pYK~nAH#8UA-K}NKcvrL#~SLe<6U|bde1Y0FvybfyI%YsSiZ56 zg(}I}5O@BPo7H%8?va}n&oIWJc_A0+rqy4-=l`(wW$Mq(YCPCo@I4zDxmk@053uo( zo7LFx02?K_S@o4I#G7xI*^oZ*+@@PY_3H6OUym~v4_V%@+BZMznG#IW#I4(hbF)IT zkEaV+PuXXt62)>qvDSBb_4r|{Boxhs#bd*ne0?GIQz}pV>;W+A>r5su`}c?8c22h% zPT6EJRI<5X801W_5EZCBp{YL(&00l;`Q;DnvD&;Q2_P(6(zV~2E<0HKy#w)a^k}eh zNM>FfkRb3yVpP@s4!Oo!({b}B3`owJWUeGp|1IU3tP6*tZI8REGEr)7LOEzAiCS+- zA9A+WuYrf+6k&PUQ%g2BX0gT z1tIpF839p?J6Cr7Da8-p-25rwV$ncthtD-3Va>tqYNz@I*p@I^AIT2yL%L)A2v_S9LwfLRH}s$l$sMD0dcKprn7c48HaonQ??zA^bj@eUKg=E}C>bg2xheFBrwTwIxR7Q@FVVs~_Crr*CU zTAk+!6Gg5`{@G_MkKLRMDI&kSE;jp>uqJmF=w9iN08_ktHQFkv8 zxs|iV+Ey^MPG$Oj97SIzMxvosX|4ACHg-C9YylV-YALK7CKUGL{*i>!|FLgb$*G%B z26g8X>NYcypa-D<7L&3>S%0$A`0rEyTJZ75u3vJ(pV0o6+MhbgJ@jixuy3bXI~fDV z==iQM;?_j%HxLeALci52}Nc{ypN1e*d_2nuIXo%%hSIkP&X5+WR2&HbH%Vo;9NLpK)$SsPvz;C(Z zOpZ##%mk@*;aF>OxIYb=B_2k40)T1ChUMM+mJR!`)HIEokT5Kn8fSjxrHM*eQ+*sd zO@_Elk!z_b6SsW}eNij3Wa?fDLk#w`t;6P|(jcu37pueVUjaw=!hX`&WaLm2;VmYn>-73-4avIQ5NZ@VtnRe%!%3xq5&GET@TdBy43%GBor{l05g%Q7KU-iH}Lo>~?kN zjECvV+h;22pdUm6?n>0o5%`?bahQKN8kq7g&b#TB=ut)`0ih-b}tbkXQ@Y4Rb`OST$OJ|Lp$lBQ(OBeb_U+HdXy z#O0!A(B7jm?bYGH)>#X;w?$tjcsLYRLi4pMD!0RjpbH-hpdoJ^{`%51Mv6lzKb+Se zi~7JnP~5YC{ph){pSLjVX!z##mEg&@KLv}al&n`OEEw|b1JpA9&Fja!2I%ywlLnN) zeu+JkIFi!rAqGcV>k}B}DqQbr;%Y#=Ov`9z7QY;Q$~&oRr##1mSRW$9KC>SiJKYrn zi*=tdRiGEm2ddD1XwimK5|H9k`^GoIlF`#Kw`I$kE_;?%(aWlE-^f9 zU=MeQ>R#50K|=dH94d%tQg4;npYa6t{odYv|kmlO`AkN@t!mJf>C`QIfVl9Llj=b38y9_^6-^d~^^7czhqq(S@L7 z9aF19DOJYl5F8?A$#BGNc5I#ZM@QQ~k-V=MI^w*9|Nc7Kezm_}y8MQxl5@>xFItW+ z2kZ2a>$K!ucV>3??)eJwHLCUwk5%7G`ql*li*40{e-Ws0>4rtE<(=>EWc%Y=MF@4@ zLpoo9^1?^6Gr9-+iHut|J6sa%33VJH*b{2~m8=OKeoo)s?&0Sr_I5ex1ENRdY|dcW zhN(6C?B>trvcW@7erMYB*ZkbmZdq#`HRdOuc88s&pl5JBNZ3Xh|4m?FTHvWu1C& zk@sFE%j5=JbfyJhPLymzWBd=Y@V`@?tXA#%xznh4ZPem6FmD<9gIEM-yBW5VVLMZX zNAOo8e{(qiv0Yg!PK0*=F12-Ls5TB<>_8v%H^7zbK#vDK$Du<@jvHFco(+1Aj}28m zHx%?7MZ1^9^qjUYp1ThYt2>?ZQ+!WtZU-3GM>)5;$WNBA47IeI?Qb|sX0{k1b;i_D zwtDD1FpB*v@JIEz-U}Eq(7MjGeh}av3LU1gz7eJrIWsUo*P=rWmD0)$Bc;Z8s%;cI zS{-$^($rFIc*$_*i@Y@tVdA%~U$@yS`k9gclp3mNM?uDlc60)=T~b(5TvBT85m520 zDlBsfSwvYab-$;sem8@9t(}lkY_Yk9mIUe6ff6`cSxw(%^3nut31?oEAsoV74r_64 zE*-&RNW-NFriW7^6F){;tBXFZD{&>_>MYl+B4ZVz(%8O3s5sI56n#1#T#W}!2lJQd ze8!{o$0zG>pI>&l9$Qt~dOJJ6pzn(AQ+#6M)ILakHfLQOn-1k+f<4vU^lgX(3avSn z7Ro`BrPLhe*<9Ne>WTX5o_$MPHe#*8Hogl+ntKiQ1EYgZi4YQb>}u$&YmxhmmZLrkGjK$h7ru zZH5$u9m~M99MVTOqOz@{E1j=EYcBN`;R{WZtYrd~h^??5vvg;cu2zgTo%mXE-<)SxH=PA^g z7S(*0cI2!$AKEGstV--2X>E17hrjMvDOxFO&p>USKoWUBIXh?X)vzY9?*W(FtEkR! z#N4Z5hp&GLq*HExNTA2FD&B+Ap=u-NmVL{@$dO3YSI(q#w>G-^=D{(u!N-hBG<5gJ z%)s8&g7J0m5XPK2p*kLe+2!W5X_2U*fH2&`{ZqVroZ-)y1Z5_m|lvdW6=smeV(`7 zng$`c=08%`van49-6w}Vq87XT5bv4PZ9^p+hotCCY&Xk}ymK+_;+Ih)g~d_Wz&SU& zfisvSXdThIR!8YNlhy3k>fBu^Hqj2>&(wrt-WzjOyIwbI0;RNE#wHu&J z)F(3%+*Pn6!KCBheqle9vox4CraX7!iT!$COueVu*fS!{8IiU>3|^RArD+ybgwT%= zy4@gYZO(!@+B$Tg>tJI7Q{y91xD=w{3bTXbZTfSmu2#~0nFXxll^x3n;nMl*!=j_E zN$5Ol|CwuUq;Lv0BGmeS-n`H}niTWr1&OR@sI5WY8b)E53#NT8c)dpHXlQuZ(UCTM z41caR=Ok0ar}m=&xAV=~w>$3qqzyUTn?})@R)3#4Aj=BF#XjEYSTqv1z)qZVdxGY> zp=9hXHHd9;87+C9T)QT=UJfOgEWjz!wblVp9|DYU^z;W+x2Yji{Q<9dkkz-RvbCG; zX0Y}wv;K2{hgtsx4~>ZxD8Fk+d1rx>ln;9}$IW5c^KVkq@>P%k zDZ6;GAu6|zvcE_3xBK4=k&)IDLaLic#q4zjB6s%&i#aXCn7FRlS;BhvZ!PZ75N84} z9J&22#l6SkDxJQS4rkdPD`o;gn^z8TrQkOj@;1NQ<#F`nwq|&&ItN!7)#2t#=+;`f zpp~vv8|NaJ*-kP3IpSF%%C-awcrYk;b#p~eIE-3Ykj;ypN~5Eh+rSGntOD9UAbh!R z%S*{Jg$Yw(QdeP&mzIn!8EbA4G~*E$2ojMAzs$qOi_<039JC6nk-nnZB0!XZ>A{0A zaA;(dmCAT`Q3^-v!2Kjyo+iO$sa|8bzGNqcsh!tBcGa3MRMw^TsJBz=Lzyss%MZak zU1KKUF*KB{8Sn25@$ocBhnepG4DmxlD#>+~Xf^feUpSAOoFSe_&b2mmf|o+)mpNWY z&+aCPD5u6*&$U(}W#;{qDK1DkwA(zDk_`Rwwm&k_)TvT|OP>2b7kpAksB{MABzuKlIGOV4cL>Z@HNxyJ2(w{AUhZr^Y zxNfv>isLU|q`ymjkZ}o6LpXJd%oN(@ipcKwo6|L z9W7vBJDl#N*C(PW<_#$7kx}Dnw{sQDH!KA6c)^e0{=Wq@FeUoFiOB@+3!+9lvCkcu z*YDkzFvR>^d|ijf>Gy>Ep{EhMEQ4Ybx-MkWd-CzoG=t`kV@VtAMvSS5J>x!Z<0$So zCedw9ZCHYdQlq+oDZJRIq4|-e(W`G^01?H;bka6IyrZkmy!4Irl$dIZf#R^3>129)HkD-4k zPxDv$p%w=bxCmnD=B7_=x>txRcpj9oe+ocjF{0&qT{_fHiQsxbtX+ zt1d$sF{gsupwhX{LZ+0>!j6jz~>cC2e&verPnGORviEkYJ4RH=}vf({)e~dAK8o6PilP#Wu%Z&T3*|AOzN` zt*fK|iK5FKE?4Dmsf}}#vtC=)!Y+9cd6y*$O|*X1Wo&6Lt1hdKp&PDO>(h5t7p-O^ zJG#scc)EtFCihVrqRxxJ_mc6xZmM&y0v7cH?7T*Tf7oojMwOF0Yg19@mn5xD`J^ou z-RZo281K)7Mqk5^87G~$lkmSKJejw3*5WMEoMZDv9K3DiY(;H~`VkIHBA99$BzPSt z;`KVCfDdzL`)m}9Zcn3igjoFKRDWM&DIxCHC2?@qd<;Y$#;>2B3h~MLse$^9G)OqRPk75!pDGvki6KV$O(%~j#XDpMb#=xfW=O#-B@57zBQskPfD zsgxCxDbHE|M*5!7>N+U9b+Q0~GvED%N?>fZf5{8lXq`Oa>sS8xwLgC2kKg*^cmBAK zNB0P%Wmz=V3Nvq`icq?Y;}A~s-Rnt%a5`cZay(=r$0N0o!@RxH-mSpV?pA5E3$1N# zABWe(i^WO`t<7#f*AF;5)FNv+22Z~GZq>pTg_+FpNNwgI+wu0_tN2CTcY5)ajQL#L zJclY6^yV9A6bfa}XYtNjHR`N;6%<-^3dMRSIp?&BHeLl5|4f+V-EHgqdS->+z%QXs z>8Tz6_4d5y$Mc>RbSk=80K$G)L+Ru=|;v=jK*4HR*vZs7-rs!vP z{A|wXzDIDZXbZ51eZL5s4c$#sWmT7}7ItsaHdeTM#y#PSdZxdgcx~YB0^AtFS8?Bv zz~Ez|6gAc+V`8E8^JXwPcm2%RV7#6$*!%WMHk|}}CCzskqa~~}!V+b`a>-I@FC7gU z8#f(rtnp#NedW1Ndp#4s}yB>*CQhF`DRN7 zudFXZ;Zk&HR$HC6Iukj^fXVX8SR>@kSTT)aRTOs4&5B9x3{$J3u-7fCqOjLJs3L@8 zBvwpTh1%}=SDRyWqujU5l0caL``g5xsc3TEBW(->9*pMDe2wZVh9^LJK_HTU42{u{ z*7L+8mv7Oi9MNhWw9KeuNZ`Pavf9?IiXiXHho18nxt- zXq;(H=eMc1rh2hAR@Ekju}EHo{NNkUMO~|6qF7KqC$iYe1Cn{i&y)`E0h|p#N#lqv2)0)<7;defQv}? zQOrWg#)dl=B*|E3+)`w`qHJGH|cT?z*U#+%is#8GA#H&9Bx%QZ%B&~K}n{O zJe=UpnQ-%}qzmT6C-U$>yyW3De;T8{D@K=q`->kO?(rS@z_@4rUVq_&xGyItQ@4(m zJ71)o&3}?=Rm`{+g%Bo_k@kK3LBIb8^^a7v570l2TJt^BP;S0+9iszIX+5%6ouNaV ztiiqJeh11AfI6?ZQ0LL5_rg}a3oCj)U zo4`++#W#2@o4+dS95ap;8-_~<*aRe7X-)T7ahy#HAJB^92drd9xm4VZI_Nwz3~4-! zxmz|E-?@JS4?$Hfx3#tyH1jYL@V#PJ?|ZqxXd=O7p}y_94<7H>3)aspp45+0!!1n4 z<5|^-@_y86MPD)A)n0q1!icjd!A9k~Dt@uIp~j}Gw&!aY=m~|o{xyV82AL zFKpM6Hm7gbVh#}_>{@I=muy-tXx9Qh1e`Ah@+=0>w!_EVWJO!;iE&J_JHBsUE$oiZ zF^>s*-F^F*80E#tX#oiJ?6F5)5qQ8gyA>e#MAI|;Q83|)% zXCyMt1zCDwJEOByp(NY~ZD(XTG?n~5c1GFeA&g>eBpD&b6C9hk3$-U>Z=}|+V>{3m zmPilM-e{ENhz&bKty>*sH>IzK>X|*zMQ1IDo&{Q%J_ap_dLEeA4_yY_>Atnw4_RS8 zr>MY%?1vh(W&!)5e`abKupequSz45k1t!4q?f+-? zLzfFzNVX|j`u0P@Nk#TU9nkT|v>&>O@w-*^=Fpmm0y35?D8OYwlnFIM8XEwu$7cZ@ zYpn}s78PmM`3|ahmQ-tEQ1T}*y6=$W6yqJ~DMqaekQx&sB2#rb?>s3wW=Fz12W^O+ z4<7E{hUm{p0sRb|*^Hwn(%vhqz2;0$GnS1DpB?7f5UJ@|8zQw%HbgeRCsV@jZA0`# ztG}Hxi20az8={e0`$`i*lGqRl;0I$vv=a;@wquD6(F50wj>@Zl`Gc)~VH=`M?WqIL zA0d1;uUE&|l~YTba+c4#&n0txhoxdt^R*!2?eK}67(uQQ>tBuNfbouTsK9)`6HR+tQ2_D}I{+91iTfB;#8-I5uUiHk4 z_x4xBcmRwh zj#<#>sPL5WIr=gy-F%L!_{1}4=!-`I+iQiJtk2O~Jj;O3Q2{>abJSD0&(Unj^qmr$ z&ryZ^S{z46q{rL-x zo3EoThM`go_zP7)+p;M{pjrN@5v^-wvgQ&qrk9gT} zX?ZzsFBr9UKj>1N=g4lCNf+GP7;UWHuqeE7^b}Tz@_^BZ2Je~TK}9qZ@Sq1>6OuCa zun8~8@|pt|;1xeHIGh(9G$&s6DrY*JuN8?%#j0{8zj?UlTc_?hPF~hs37gdI^yO*P zg$W-LE)Pj@>G4hCr#V_=Oz$v0m}qq|kJstz_$M2!g*3|0d_w}3tqXKUWgv~p8Avl^ zhc7HmZhbk|{W|$uLrVi-+H1vhl{@q=PlCQZ#iZmUyg5=+qA$hdF@*!bp zIFz~(z!DO-H7F;)qlY{tq49)gwX44mYjuQuSWRR!66wqQM(8s* zW`G$=u3k<43v7DIxxnTowHfd!u-uzrIPY{lgo#>NDSatv&48E<5z|?{9g~l^scJmPy8i=vGu_2FLYfxQ@+@Dg`mZ@BTx_%V*}p4io!*Z@;c`5#bFM& zVdHnh1&8PwC>~&4yfO$LW!atB9yOv2W_m8vOzF*pn&rHiP_u%UJNMEQ4aoZ|*;BOJ zj7b?as$TbCTS(1aINK|07moGrmC>TGF|~mmdcB0xtt=I%b%!hV%teeA^G*D)*j<)R zSZUvRCa1I_#*J9tA3$Gqwf5-y6IcvkM$d`f{Sf!7DLG{=Ay0LF)ci1sqX9YPLl)9} zp9m|V(VRIjds;TnA1ZrU@nIqwkiD$NIde}|zKSF1;2rKH_ z`4KKx^xmwftV4d8=$J!(ive%yoAI=7W)(coCx6m!AMcZ&$(G6&WJ~4SpHKcdaanze z)rS*!cK~=X^T1mKK)!nk!^?H_>oTE7FBm%054|KUq0rsd56%>E+Jd257Yr3M4?u9o zn1R+<25=WG5MJ3&czrND1IbzaQmh~RJgdnBVJ%+iJP{@u6c7n!uIy*iyepg7!91P0 zdFotk)X!vf6{5%UJPb`Hli-`wt&(atuhzMS`_M8=0@T@f#$MbHWiAhGVXLEiPCp{sc_%S|1L}2Stx?75>wp>4-Q)UknHn@{ zh8)7nBS_o!`CFMyKkXwMFMQZmmb}p5a8E=2*2L3Zn%-`9{zB1K2xb|4e(+GM6hR!- zx&Ia#BBa(_@2!L*tZ7VX-Fc1b#~ zjZU58oa%^BK(!CAnY=BDN@W~|aow@NB=%N#ZfZFgK(|A*)9+7>kJJ~(17FAbqOr93 z%|LB890e)(;?bHyrPp11@ zaq9Nf()V#TIR|HcSNL`-%i|J9g0h*>0JBL(Gl`E-;?uKVKN7Xwb8A9-MgA1PpAex$S0&$2d8H2>R%H0Q0hKa~DVC{(!d`!t3u-K+`=Jj>6^ z^%S0q9aV^FyK*~ZI&DLdt`!;lNzt-#6;F8jLPxu}g^2ib)vePwRa4>B!X8h?OZyEl zWi8OO17t~8XF4>~F0r=h4^VsJpVRNl+vT`|V3byTs#YrRk^9j08!7p6PENxL%hF?h zC)w-}Elh)#?0meqa|i6C6Tcpw@($Zcn0-41A{DeDf-qr`Cz-RJ?YL4JpR?|hG@8y? z3J-IZBGNf4O`ptJzo1VB<}9U1<}B)yP3Kmg*Qq{~kgoum?Pq~~JXE#+Ssz!cE6Nl7 z4^&m-94x5QlyI9!xEL& z`JHdQJ-VjSI@9i4skBb)j2x`*V>%x=NY4$OPup{C=PUMH)w$Q6_09#fIllfb8tZrU z+3diIz{me{c|OiPLETApixm#*G2h>@2%Ex&~*xodfK-!5l&( zESR6@k=CltM?XA7e7*A)tNc5ImFG3_obbm0br$dF^BIIe}3mmd!8AdCx+)Soo9YU={Iy<{!eU9+%+4n9_tSqqpX|I>uaD~L>gww1>T3Rvzn7<%mgdW&qDq3+GrofF zptUHzq;*Ra?Bq|{avl4A!9(1j^N1C)QwAnlE)e;Bdwf4fzo#*Z@;(mTBm(qjb-mRcTd{$ANEX$@61Ero=e`X-G=_fy2?w*4Y?_~Avaaw4Y`#& z@Tri>%;3r@n2hnrSPZ_br(5S`u5{&2&BhZMnhAArOfJRm2W7le-h+hsl#Y4$;CmSa zAjfhW4e>RE+%b5W)mD7P#S-TQFTh1cJ_e2ahzzm*2+$|@Sdey0E9TE}OULtR&HNc| zX&#>z&o8>A@@SV^nmgJC1O8|R#(VLR)p?WqSSMjfen@e`q0dko>a5<2Zms?We~d~} zL1e`|L=By(3mFlP#}##44@1fz03p7^zb3nA3X04GogkMreix(fwZ%{Xkmxs{MQIly zKwEEnZ+9wN%sh2P`QTViI>fig`FZ5bl=6&(hZ{$YjhqLU+8rDo!s4?#g_2|q%bR}@ zhfr{yRnSnlWFHESOD)Pd9B-oSdl;8~80^Z24GCu5X~afMoUI0bzl^Auw5TK4<2s-M zB24O@?Bd+$5@}iNY-m?kWj?5-Vfe5TP@bGUY1RRgeC~N+f}J$$P|K5u(v9LiEPa6~ z0q1lvVfdv29vInm`fV7h=gTy*UG=NcOR?HjY!Wl}O{s zbblV}9ZJd38(hHV)zV~Q&RD;U882?7f|zRDCO@%FwL1t%Y^vQ3h}~4{m61bzGP$Sr zdCAqd6F<;oH@~OG@;0-lMg+n=wY%^F5wN8_HP##3Q|l*|X7_7Qo>>NINR?;Yp4xyW zPwc6&;^dy1rb?6w8;~HVdumb>_tfM;_SD$aa8Hd5vwLckA2G>(-@s0hnDh))CvMi|T0Jr_*{`?$b#v(LSBj5$)5Fripzw*5THL zr|QCBbuvcfM_|D5`)=LXcl#Y^u%7%HEP*q@40B7o^>uNDFx(?D*Twgl>*D+My7&QH z7mtk_BB`R*>^2ci1qdlLh3pBzn#GSYv$fkDp`2_8<+vXN?1{JR2l2t|2f@8?B%9Uk zAU~_SL4LoY=SFSR%t`>$m=!ps>DPup0NoVIU{W(W?r~`Q`6{o&ShNTadI@AtAv3gm z9}nNDb73ZtwM4nEx)k!Etz53YMSi!dUMRnV)w}VlIb*AqTak4Qj27hk{ZPgQp*(6) z^xEG|#k#jVd+lH3cWCXu}2TL<> z;9#QS$g2>r&ITzfn1vCE2`VHDZlxhvpi)cd+wJh#4`$h0UwyTKqu`HN8~Q@$I# zh@Niub%#Xu;_#%$-Q!1E&F=~aG4E7&FYgE*Ehki$)U3xvd#&J8dzm7OV7?LM;1|End2|P;kmgk|m_@(>` zZy8@;&7*QKt8-FuLEbAZv6C|{l6x*jb5E9%7fYXc!47CZ-d~U9`y?7rI$`M5VxGJ* zw4O*o(1U)GsbT2nEm;H~E>rIic^H;;Jj=oY>M=~zvoqnESL2pnqP#MKY7>XmaF?iH zAMjilw(#|34qk$@(W&;#Wgi02{T-M2irIwpn1T9Xv%&l-IpDaWzFDyB6{;Tr1$Fip zoo#&D9i(Z^X&L|hW+0D|>^1Ho?cq&P=R@UqaEdc$iCdb1Qy{@yzELOjXisv`SG1F` z{dpIK;+R&k_X?0cZFqj6I}ppZKi<&i3)n_elJ;>I%F=y=`pcc*)(z0}RAc1#lM^R{p_!MFk7v6_938`D^b*qk<(!5S8ybeaZU0AP1qK+M6V!4o;iz zr7|9%f1$0N)kA;ooLPOG6i0vXEH`o2yx6Ig7mnSFEc-t9_hDRYK;*Rf?XW>U`nz*TfG)hdCF zTUrG7OTQP2I)D4zQo!GS^ecY{T=8k}2VL=K@Ta--XYi-H_*0-x21<7(Dcwm*?;58x z`^s~!K;3n*1DL+l=sv6DLR+@W#wlN=x7iZZXU?s!(yMF<>JLFPcw;R=10hH*u_b6Q z1a;a}(=14?uVtd?8_p0MRvou8Z*3we@wpNj4JiMTMs!vsjp)?@8VL>h<21-6X^eYFoiq1Vh4!vjgH4vOYS=evEC`xzl$? zydnZQt^?T2gvHjsJ#AvQ@+#Y4q!wWC5QYf8gtvD20`GY|w}BMV7eq12g-%9(&Q7Qj zh{jZdU^I3LF6PWsjTKzVJgU!=p46ip68o3x(j2SqG=goU`Sas4XBehOWCwW~ z+^{S^WbAJOKuFF%5NX{cVBWov_p*udYAMqgDMGSO->|GO6x>vz>zEAIGn9mxK3T_P`mv5t?Pj6dmq4SBXdInDL*{~|sOQRve~KG$ z{kZl(?*_edoW0QpmNX*1f5XZ%@^(!kp4&3}uwOB?>72IJ@_L~g@0b1Y1}s;`vE+R9 z-;>q2-5oe9pI4wZ=4D`z6LA9*SiSNFz(RJH6qXHtXgR(#Ekh+#dt!ts1oE9f$U&5~ELz`)+4M`9A6vz2FQKD7t3ac{|GDKerbqpErsQ>V|s6&57ujh-ZRcVf)NnRO)P+dhFuNHSo1xW7+c8F2sB}+Y_HGgxyiT?ok{1u@#1H2{@aR zfa`vZU@!26r8eQYb*$Q~r!dbsS8+@lylc0jQH6|K!Tr2g)X9_;tyf*yu>1tmd)0p) z-xVV%we<4#t!B`5K{26t(E$3W0NFXx_?Qp7N3x19(1qE+Mz4=YpL+QzH!ubum z7YqMRc_jVZR<4b{b~g@@*)3I#HPgHBDrGwm!#nV)2t0d{oCwFaxiS_?}A9GEYe1M@si zft6^lIaiV0SXqm7FcWKNvFBRdwP82pQ9j$s5m4S;@7$;w7p`xhnOFi{LE$a)?yZWQ>`7>3w~nydKcvRl+cHsS^h9Kpgk^nw-c{{9Cyj+w7^@t zSx$JNKKT18DJC{v7T7Dml z>X*)tn&XZo-$YJnw~mpIb8YI@36-S8@gU%M4e8;Iod@KVC}{m^zEv&)V_+xP9or5) zgl|~6_2V1g+H)1y!SXrTlUROgp`1nV(O1us(F*b41?$n`-~!=+IXn|(R@14*MKGY50)2Tin<6{YkAgDJ{YeTv!wFgc)CQMme?fcNRo1O6PCj% z+4`&gjnp`lPIxeF@$_hDQ;@SZL0v-W@g#Wb!k)V1povOS|j(8>in>LQpYKiI`_wrpTa1K9l5=l-SxHj510E8ufZ=`y#k)!Jv5-_N-CY;*a8uug9^z0RZVI)?0ON z0xi<94fUJBglp(Mn1P#_HkHgkM0xb5P+f`~22orMm&GlKU6>rmU|ne>V&tZWX`&KV zDO9UWE``GHP9j2*I||hYLpX=M3|WlXl&lLstL>!Fgue;*%|U3$CQg==Ozq_|4m}ib zORbI*C=kA0NjIxIy|F8e%}?B)hJ?6kOV^v8a~THA%~CFXmL|jSG;MSQf3f-6gLyp_ ze4PCJE@Wz3bSBbT$om9xYz*?UKn^5Cu*qXvyKnhEG+Kgr#98Ac{8EYg%mn|TLbv?J zL$asiKb6wU@P7~dKNtU5HjUNTxRVY0v+&EZsl+V04uAaMWWh=XVr`W?-$;1v6Y_kO zJl`zOACc$#eqIc zhkbE>k38(|*WM@(3vsW9JdF6YRq`;?uT|w?P-M8)A$2{jsXoVk#DPPZ>fr8h{;4%icGx4K7)JyxZtwdtt;(tgW3*76@fpjA zybP#)wo^Sigur%Sb;RA5I_nZQY=bXIYWyIdR6AwW~Ixh0{JQ8KxDrF28+*oF)a2Q^zSsEM!-LV6;Sd6-EcQs!stWpZ+ zF4nKnepfE^(pWsVQfy#bPxMKsHDYtO9U8`$82&8!01Ab~mw192i|nH>MEcu+lT8o$ z=z`$wsItLy&Za*2Q|*N8eq|c+$0|jgO8=}gb-L3>Uj)*M^Rm&?Sb*UbCAjUM&kG&2 z7YJ)Z9_anl?U+YCSRKHu6+S~ERAFL|`p%X9xt(QsV^vVfy4KU5x5uq8i!XnJQ;;#V zsk!10syx05Ez?Sa4p>d3c~Zk1D12N6VN@t>PXLY(1E@>mS3uSUh!KSZ<%7JjJ+;@s z2}rP-Z*Jvk)Q_)oy)kOls(cplm2Wa*hDk7yoxvUwan12q!Z-+Rs z#v}IcojXE)qC+ie;30M#RRBK`P*_CcsynuCSbZ!lwn%4%{*7vM2x}b}q84 z=Bv2sYNAbN@aXu}z!7%P`AI%-ZS!P8orBC_13A}?8PqsY4Hq!4Dr&gny80IqKjP); ztP#iTyMUpUw+?rDPH_e-Z(WS$+$n9AL6PUlX`Di-`~sBLnW|7-cryqoqe5$HFQ2Fh zM6=rtooQrAjmtwU(E)An>??GFrQ$j%-xjnQv zM6&o^!BHc6$;z7c3-D~#O!O%gO1nYsX+L7T=4VIoG(<+}w_p#5r+8m*{C`3Eg7e9K z%G1&KC%}&X{q-ZJ6pnws>G*$$eYd6YFNt*gufx##_s73MEgJuV+P^*iX~%(gpmU${ zpU%Ue<*dz&f7aB#=v$yvOax$0qE_Ze*VU6Hop1@ht=3G`0+WK^%-CwSJEKCO8_0kS zKu5&D-mc4p2xC{n4H@dWu_blo?SdCc$TTC*AW(g-)y<8#*10w+a%l77#@L%KaprwZ zT<@H5^5?0R@`upP$)B&IEy8A;%X>kDC)7s6d|Q+=kJ-$~XXToizaO`stUOeBUGRy^ z8LmZkLjEsmKQo_Dkp?oD5ou#*HTFPCg$d*=%1Wsghc+m|GN?G-CGo8*_^1GZp$ z|G&$xOVPeB6F*P5FCo9yy3!zWW*8YqGsBUo28!KN)W^N;vfrK5~uGGd1 z{zSUzMtiz6EK}F>BVW$=H4mYHgZEQa;vv%kQ)CxzUcosubA54mnlxSjG?bAi=TI6G zYOWxL`WMdOMjrEPB#$Fo;dAJSP+!~w`MBn=wqLITpJTd4LqY4TegmSk>h)WF2QE5K zqfmIoKEoetTl_X&lD5UL3gG0)l{;S*KFY)L*9OC135xd6XlHo=&3=P;fn8^Md8R97 znnL+CuGn{I5f#Hup*+hKi%y|Dt(yOwd*l$ycNyr)8V6ACx)w!2ZpstQXZ7- zgKn`Yv$AJRzr6>9eu_L#G>6&RiZH^9J(g?m+UrCppWy~Cph+;|#t9&*CB9eQi*GP; z6miG-G-g_eKjn^Igj}o8elG9r>L)2m#G0r|ojNLjJEM}j?pjiBVkU{N}YH5nwC!zK7jYnv-nHipmp&hhS?Vz1Qqx+N(@9G3kO$SeP zV!X^M?}huJXlIwff|}lkGAxM93EgzHeJ9uA{UrNNdnn$I5R*%$rO743(=`L&-2yU^ zIguV?4efL59P$Cp>D_4MR-25v|_hRyF}AYp8!tr&^H-`=OkNgf~aJRUIEG z=(MKmQOJZ84!v&giDko1b+Saq#abxTR|Ch7@EGk;PLi`~56jp@Gq9f{sl*_{O9n3B zNKV*3*d9smQXe)}6xD}mUm*alz?)gZW#(M!_BNj7ATjnZ`|35mLujh;UHr^>+=6W? zScB4I?^jWX3blxo=1FTF;70jLT0J6diikn_z+SPVTW2M{{M~UIw@yTS`MYDc8&KUf zg!&4kG8P>Xt@Io*)JoV--pxXSH)HaHh$6b^1k?bqOG%y7(WGjl`>76Pc#5cm zaN5@dj(8Ka4O(5{>%s%JPVF;!6V;?pPMN#2nV##&M@`=jjE-`e>Xb`5G5Xx{2s~FG zMtdty;7_5v7hdn;>lfs8C%j(E*PG;Z7BviXuuzBwvTuPiyvVK|d=_hQoxjv~L+0>- z^;qiiV#mW5JG|IYi7&Z$x#MqOh}bv_UiPHmM!DHh8Y@PagD}7`hT;*r|BPf{kH6pt zV@ucjk10I}ld+@JQa*qsP3@a*U9#3C6(^S3AMhutYlYTDJJ3U*GTS=uqwCMXG{eTY>OxU6x`IVPWH{O+`r z8S9Wq-7G*;PvWruS$Mq8y3v|tkZr73Qm({l3?ie8+)Qc4%HUOEk5kSI>9&TOATd^{L4LO9UIaf})$<{U5l;dMxVvChJna6x5|I7uy(@ z3mR?PoUGVr+v7(Utaa$wiL66$FHE&VyEvjfvWv#jCIP9mfp=HnF^fm@4n_N)BnDHw zqA748i-;)u4xFuA9B-4>crK6Y*k(y;3y+Zn|X6+o)61ZJ73U&)G`h@ z7gHX7E9w)hbYBnNrYRgJg5_w^GVyCg7zlN6f+r@wX5_So`eOPy*(=gO501$NA0Sf< z)<@j=yq>xSRA}AP`5@|jg7r?oS8v9UnW>DWo(P7?TtPqL8SO{hf6*c0#CXiKOT@@KHW`jkE1?R2hF43#xPIPsMV zik8}%X2_=TdKYxKUX-TnyFpJfEq!3LJg=6*%2GNl?xXTAbcDzSmHTGzgV5UUQBgAX zIF6qry}>Sh_!fK}LZy~tD!FYueQVQg<9DEmYa&0Yo~cg1wT1te_alx6DrP@IX~sG0 zDdBrvrlXbX*hVhJLtdQMk{2yB&LFP}gEZ*{1UBgf8tZruo#W)Y zXapp(P&ev_XPWw9So;A3#_DM<=O-tTE{BV!Mw$|0&Y2T+4XvW+C1^RtfHp{dPT6Oj zKendN=C|xKv0Rml33t2yOP|f%OrOnRpOGGkKAYdN&nz_FXOoy!WH$Fij4nrDQ=h4g z)byErXP*^?(9&rjCQex>rVB)DacK|A?g@Wb899LgpdPOEVYqU>J@J@WOpgf1n{hS% zs@7V8k-!IJ9Uw|~H~1xypgm^sG$z;81OT|t_GP>SK+V?fLW}ugZwov^HAbWW48sku@a^c+dJ><)I_>BC>lI2 z)u8SGGdu2Fk9JgGX7_OYt&V$ZT<0yYEsg68+3#u5CJW3~hF8t6nUD5u;;p_(vvmkMwSEl|5aU#;e#AzJv0g71>nJ0H&K=2LW$p0N&8N zvkd4$*G9L_Y=ZRay}=rK;}A{VlH@!lDQZpG$}Pa9!6F&ukRhY_?4|r=X@7a;81e;p z5e|H^$pj-tmyaliY1qeP+m2qkyF2B@TpqhkU+71Wl;*1mAU%FxeD)HPMQg_B%Qjc#qhOukCbx_aC=Vs z(cor!ZaqGvwKP$>VMrma;5Okjc(JK2{hvWNvwT*!ulQ18i`0$bYyId_&If?jfvOu2 zUwY?pa|oSQsJ;uNsojcUz)LLn)u1e=mzU3Klk(w8NK?@Nk<6y!IX9-{{(|o%Xow23 zYqP+ht&GF7L`4tCB=GVLUfs%7I1?+5C;u7Dw1*M0_;~1Y>xc?PvpTpzG#5ynRHKbQ z=|($0FThNk3TRY@7+)agQ4Z7>uFc*8x_=*Sv}L4au?R1>cR(f;T+a_^xr~=fZ*F=* zO6d;wv@*fLD6k!86m#}GF!!_c7Se6eZw^oW5*cTXy#x9ASe?LI5bl*~bTN%Z;(SD@ z&B(@rAcOb~8r_E0=n0{eDDUbP!S&!55x|DQ)RhuyTi(W*zMGAm z=Smz8m$CD_-VHd$wGQNvjh?jA*H+$5{9G}3=c|h=H+LX~DaHF7^>NjqszIaVc9E`B z-!g>WMD8#yWo%w#|0L!`vj!(|5^ytLk}e^fy4oHxMuI~?aB*OgkAPF|9fsc@kY7Ex z6;m9sr>Z~T=($-&j~sBxvs2%M`~@GU+r()fEyU(V@dEPHtk=W1^weR9F?1z5-dI0a zzMf~hh4mx$n_Fj7Fdh(X2N|HJzyvG3SZ7-*dCE^Sr_e6EN$?sw0aIbzj}3NVmgCD` z+J#w!FMnYdmZE(5D?V;bc44@3Isa6dA#|PM1V^K@wUEM;Nn$8IUP}?@y5qG|csBk9 zAJ1p_ceuG#HzA`eU*JHt-TQl}5G z7sVHH32^z5;9~sM=rl-&S^%&+mzAMq(>$spwUKl6*u7+$c3?rJm# zLom`ftSdlcdnR8$fOh;C?Fj3)Gb_&0sG!yCMajO1F7ICOnk@85iRD))X6EKH5Ddr$ z1cJX);^~p%woLDG+&GcO>5wdLaDD0uZ|KBM7*b3`+zh5#vcr!(Jq(BzXzpwVX`w{< z8lubV&4EWx;JE;5N+Z9>4ZV`mlx|jW%W2bS?W5$j_H>L}7e*z=*;mI2+mBjgTHWV% z%f)If7eW;nIsxf9H|&XDiI)-kj?txMFnGqc*tKC02qQS85&E6zK6M<#h|X6mFYcEo zWf-}ZcIv3-C*-4Ien6|jF{3YmiahuQbys284MSN*3pfG7#)MR2Z0i>cLi5{U3}i1; zbKp3`s2!f+VDE$YG9Q&E-1R+#K9O=xJ`U_@4?~a-&ITSY3P0O6f=-NBFU(^K?_Iv3 zkSG)f^N!8a9j$jPjNF_7e89Z) z8)jipH$O&wf?CtgVffa~Avl z=R$MPNBn6ztG9wNtG^+4%HVd38}e>1yzwRU4rZKXXFMARZ5%IsA=eJpukG8#wblF*1PNMeM@l*Rg?E^SN@? z>m|XD`>rQ7%Uc4tEw@>}b;`+KNEtCX85L#ZUgUrL8*P6iG0vllV&2_Jix;RPquMMA`y_pDbM%IK&I`}H?cHv9F>&HYNi z7W#FPY{vXn${5M4g)>76#^N5^aL|tY!@mEWq>1%?RGsPj%J?}_jttqp_Z;dv+83(p zqoWZ*4HE)71j|~En5)kZM~qk8(3k>Dc%6w|8))E>S5c0BQv4>Hav@`wfpY`*y-$Wd z97ZmZFIO1iAwAo*J$`@Bc6ma)c%On_R--+Bg@2)hN+T%$dywa8nTI3+EJR&@l)A_#CpYs60bAe`<$*sn^FUOT;ek4E zXwsA9kQm7azbxC0tAh7H^QgQFe;QMXX3R4-1|^-&0Pd<+#drql_wXBF7u+z?fhCXC zOgUo$59qenfrzR)A&ro3$9O`cVkHuC7h04o!AIwMu2uF{orBQYY~U+h_&TgkphOU8 zIf}Sa=lCDxCsHQPPmmEz?aSZfSr^@tGHWF!l3CHP3iwp#^gk=F=wJb#JV`#u+!>A* z;UcvD0H}K#+OlhlD2S&6F|)kJk+<(0T-Ou zR8D4$!R3h-l^sb)K%;MbLgO(+4U)@OT(y>I^fxE-WciFLbOp_cv$HxGgsScuQY&Mf zkBl;k6bCe=5O1V5H(PlL6K=2p4T5wTKxM@RaAV*@pJ?)8(koPd&9Y@Rg)H<0Y78O? zL>G2JJ5o{ze%7$8b6J)%=f{>}V7v>Y_*8I-{HBBT@{5=|T5pFMG=hr=7QHGZ>*Q5D zYj5I7xOGxC_$ZS=*(CMC7t+YQ47qh8R^xVuf?z5iQUgO`y?YvXd6V)!Gl)|XSe}){ z{FV4>{gt#*e8lQSoSBG2^pQy5BbY%x^3{H{D|C*bD(d~K@VZ__LC3Tcy|Gik5;C5U zpT1a!C@Q|T`YV`ohhcOTp3$}oXtrAy{*b?cfS@|EJ-+;{T#t;98sU7c^S|0BB$Et7 z_`!I>XhM5UbE(pX1c=h`EtbZNX)=qXVf%JP`#1--<|fFs!Ro+WJn+U`k&l$U^|e7T z<&0g67+l$=2oJu+@c5h1Q|J<~M%o`*k1i}lo$MLsr* zEXpS+*t#}j0C?n^iqpSpdeb>KJi|B!NGdQMcFnd2@;<;git4-%`M zL;sx}QO?UKCmP|6>1Z3|={3kZTMukr2&&>b7?38Ii9b4BS>MsgPGP|5!`w3|nl<6~ zeIN1!^Pz4?dGT2@c#sAH))MP?qsJ0z_|JECg}nZ!@&n;+oqr_=5`vz-0f>}Vh(0z4 z49ZW4$`elk_RUu}5e*_;kZAiRr4%x_91gO~kd?yPbET2dOs-UxXyhW{4{-+9ujER_ zl#GDrEEFDo)jy(K`1Y9s`VG9l`iY(C>xX5v6x_e8@(MEqvqkTETfF-I%~sDzW7xJ! ztCcz}#w@n_4>oQ$HV!LWlh_S5qT{s5p=}}MaG(8Oq-Cj$^(FhZ5S#;~GL;YDZ`%}i z?Ya03K8Qa&^v~+sozh5tiW}gDgnXNWhY#bS9lz({w>xD?V@Lsc5*&dKAWAOy6v~Ik zqooG!ofL?W!CC-xJb(q917*#PF!0=)_japt2%i3FB&*J5UJTBB z-YI7t;a!Pm-{`h|DT=^Ni|FPDUsc+ylg5 zk+3LqXAJ^bMPN9Iz;1X20_CN)9rUH2W7-ifCU1(#OEJ>#+Jw`z1UG{?&)1R?pk5b_ z7%SajrF32;{c1O|(J=qx>b%m)YF$v{KH@wevfeM$h9HNbkcayTkdeHuoc5zsM08B0 zDEx_IFkS*^!TIWk*rHFM)t@FT?`%T&cFfao&ZYS}6|6^(`oa0^*Yt>&DQ93oz5s7h zmD)eMouT4xZd+$(7(%nuXNCJIMm`g0EgHWc64P-u zul|@bE3!8--O2{)Ls`KqHdZ3^%viY>lxi9)5QSnyRV zQ&6YX3ysW??_8UQG6x<81V%C^Av+{}t2h)n;aeea(>P%kU&>6b&DD0A5Buiy=Ds0d zt7J~0nT}CWhK~1-r{jYH0v&OHQDjarc!+#y901L;*s>r>As9Dn=S&S3yx<$ik5#Xl zN;<1IVm?vRtD333#&+x>?Sq(%BD9r^B0MRhif-@->X@K!n0}mG=QwE7z9Chb`i5Ej zx@1hu7uq-N%!fRfY^Nh2KQ&mmt5Y^XVbK%0-8%L9qOL6XUK9j?^B?DwjvE0Vs6ub9P`GLvIoWr@nB zfOi?n_OdYlk#;L}HuAc`<&f@N*Wzf0TPMgM$F@vHTSTw&#ww_r3*%6q%HW&W2Br!O zM?iR#WE~?*g?9a}kSEX7>=92AutlDv?4BZJ#AJ6=l#w}`P%mY7i~(N|P(tSX7$7Ti z%=5n`bAFEeo0U1+v*qJt4xz1N4&h0egZ0yks3YPH?fY)+d$zi%?^%Rj=if*#QXbq7 zbc@N9d2yLCuRB|sFcC@9aT}t{qcnMjR>-gQ1Gf^@}^fY!r)5nR8o_jFNMQmUT zU;7MvQmoDa+^a6ZUs=u74oCA5ZL<-e5S2x`&qaQRZ)3b{+)4O1EeV>~pp=xV9%f6b zp3NG~%v1R_5>|1B>&%o?qs3c0m(dkirQr#UeX8yCYQIXf)pd3OEv5>+1D2cjqz)3aYm$%4A38OMw{`_K`c`zvoH_!al(ts)LVJ^1VPAibS0q zifJ4(^fa}tx4XIEk3_=FsUIFwV9^cAXZ+v`%=WxyvyNtZJ_<2bUn`;d;Dh2#bAvyj z3@f3c@oH?uq+v_FsGm4`vX#;#!aqTafWf3&auxRQNIP_K7eNYdz)JTVb!7 z#&V6lWmTaEcMQ^deP?{3!{&zWbY`1%h#8E3j2hp+0{7+5ikQ@(MdBA!VZ<@8B0!iUZ!*iKQN*KV&<0S>jx%ZUf_L~z}$ikA*jgg zqY8r1xex+$Htwf)xNM$&LIK==mcx)-5*RcGzeVnkLXTAxb+`2W1jTV>u+UwBD`PKA zi>k~5H_h=5=15eXt$Yz=pWV|YmBR;VdgX0W6C}6X#o3jDkBaV`Ay~tbyI*C9A=;~st3GG{6U?}p!GXA*lj%BEE$7&-4@6nvk+vK3 z5yKC*V;;sd!*8J@_ajws{TcSt;%AD6SqkP#9Yf}vAb~RHP;Sga+n=P352At}G~5MG zvQBV5P&|9bpARH{8m&6As|=B*-UN1)lm5ThRdDLG$*yuUWT`#%P5-ZDfk|TyGU)|l zvc)rJZ7eNzFHJ&jfa-V9jy`$k;kU%L!U`nzX`IdVQr1r7lyQ0l-oN%;C&yRlr;7t1 z_U0F-d;m5Qj>mk<+hf|ZIZUhVbYkUn%853D*hvr7nTWq5&*L+)<;)Zd<@Ow+5Xd<# z7tJ)d#~TOhw>iNLAte{U>AdgC-RWFY{g>iSUQ8wFW{g{e&=*~DCdXgv`fzwkc9~rh z+EUgNrHRwSXdEV$vbi3fA!D1isIlg?2LW5P_Si5t z+K+s(t&C+MVAH(KBK$i4Cg*L}`7-it$9!VXSadaB4Qgo8Ujc+5b#qpX0xf_b736N_h%?cO3;a@Vh&Lf4H3V zQ{}08?}1F|yB~oGHeB(L1}yb@*-Mf=BL6`P#B~)X0_Hrgd$YW0ciTl`s*tmwJbN;WeP;YH4r1=fI*fbBV@L z7_IR*_d3!P)>c8HF&8f&*XkGc8vFIaTD>L zmb^LMqZ?Na`w3E`$QR28Tg8iC2crKuUYtKMFY=`NI+8u)#RYg7&x;C8@*-iI-Hxeks;r4Hj8|;O0?er&UF@f1w;Y=GmVE1kSxAWr;Y?C*}mNd96Q)nYk@O`ipB$>bi4L&NzeZSGY0|gDuADYk)gA{zw!@7qfy> zrHh$H3P`w^nZ4d^ox+IvnB8a#cHv|8D2=l}1;vApK)+O16f8LMQvP_CGuEm+?ujo6 zaK*TDgXKV@`Xb9(h9@galWC4(8am}PrJ)wuOFJr7WOQf=F2Wyr+S8LI^jGqoRj~5R z6Z+PPhV>?z3vVKMx86i1wigv1!qpgA5Zh_Vz>1~3xSLfw?gct*Z`-1FF(OHpVyR6( zhpumJ65G<`HZ|*YLR91!EhB~k)~)i|oq`+*QRrU|gOB(p!}wC2Z7W6?{~Y|bG@iig zLT@?PXbp~Zl^aHCc!j}_B0tVg4#4(4b)FOFur^rvtYaBV(Wb;4?vSCaRVkB`r5O1U zUnd3ZLg`$NnPK$XeCZGAe%Png%D3}^Omz_u#wm#1@Kb=rg)yMi2{0i8VZFQX4|obrLTXOvq{-IJ=Zip_ zaq~HWVOu$tcUIaGyC&K)sbA;cXl_0OT7bRHR=#Wl+-!G+{w)hb`kmcOKLR%I-y$jg zJN_-NY3`E0i+oS`w;(_aftHB2JhN9I z>09}?EYf~s3!3_kS$ruon*UT6cqjUMao9KSZSETa3gu%YP4OV}07nab7+#x(E zcLs2kCTflPK`mpIc`5ej}Mzh@o8EAUcATO9X--B8k zuO&2Ci^thIzPTP2n;&L+$x`QEY^riuDCzXhNZLJ23{IAzy6;@1VX?SlSdM4l_tQt?PG-D`G=xOdYgI{9UYHq=%=BFe4% zHhbCVEWOLpa56uJQWr{jc$HtqsU44reT@fibk_US6>%!yB#$|sA$?EZde~^7V+bCI z-YKnDe%pQ;pj|YmAODO4bc8P#CA#231W7uL^c3N_r{Lj9=Ea6AD>s@ z@56WT_c3Ak&<6PX@TGP+%Avo{IS|kj-n^xCoPs(&B{rNo_yYkwu!D>lp-?^d7YGg} z>q5FRKt30$^FK7nfYR#SP^kVZ1fdW1B5hKQz4?=F?8BdqRO5B>n{K=wzd8>+f;#s` zyUg`_5OEyu{R;~EFen@LXwHo4SI__jM#tEyGZq1jTR{9Zo><89t{+^17K})k}#2oV4KL7JsW#Y#g5O{3yxm!IJN+SYsT~a zzVe-Xe?b%9^IiDfxWX#m^QHD_!}l+3neU^uP7~jsex7A=aP+=tN2LFmej_kJ?>$tP zh{06`X+M~;O@5JF(b(QEY-97-zRM&rzm?U%zghGY9c z6c?I-_CpIXkoT9?6JO6c24zi;mnCDiPerT0<)MmTvvNP3gh6UZ1zxX0=)oMTOUDR& zD5;+@VS?7C4~Uw9r)1qKeb5*3HuDK@GvUS>0~0Ip$$zJ!E&B`Yg9rG*T-Qb|xPKJy z4gp{*0#?tp0JDAa;)n%^;~3K%x>E?E;fA1|c>+qFsbjqdXuS_L)jO@Z-gh+D`}6Vj z9x=Y&-ihixQ0x6#Q@w-D^}fBi-k*)H_we!c7F*SOB-(qB*85;ny#vkl{xqz{(D|^a z5+3R&QKyp4dr%sMpAy&pV`ngT?(#}W2mI%=`c??l7w^Gm4AKEDz5*ylb} zV4lT92qi|P14O|AU?hx*1My?^jHRfXI+#smrX$^in~jircVm*$kOj=$1m6o|T#MuU zL7nJQ<$0z}@ci2q&Z;-Z^UNna&xA3aM_k0P6$jxHT5&Lc(v3IZ2aVyF_%P~!1L$be zwr-1P7k7ff4Hi^B1Z!Jq<66qAjD#qFs)eD$X;jwkvdowIobn7!0il6DmYI}M4m1T( zfvbW{o*Y;s*Fh!l zaEWvfPG|Nb4im73_(z@UWaW3Sv-S{tb%Q&xaphI+2PZgd4+8|gGWv2TUsC$Qw(9*) z=msaa4SCivyFM|cKCu9&dJ<&y+VkKXzsAn>sWcp-ro68Mb>crAe& z2>fOQypO<-5cqfme2Tz}2>ezAe2Kt|349^~zCz%;2z)XE_S^^H8Umk+fO80}6Zmul zTuR`(34A639!X$>z;8#u(+FHk;CCY6*#w?N;Ik3%V+5W};CCb7%>=%ez~>_1g9N^h z!0$!C?-BTZ0>2*te^21K1U?@D{VxLeK>~je0jCl8Ap$o=zy$<;n7|)Kzb8xH= zBE86(7>jBqxfzE3 z>T{Q%4ve(uED8YyEWPaQ$`BuL=9Al%YmWigPuLgP1HiZNK)<%!z=!RN}m^9Vhfj-G3W0U%Ux7QKEFNMPaUrP*3}-7ud5?^ zuB{453EIgb9eawn)ecuoxhaFpiR`=MsKb-n)Hg)=JnP9gAw!0IPCK@-movGrseA;S zHsU++E9=zQeRa*8GlI=o;ia%kAxyyF2SziuTW776rNF=T2hc&rwVA@h>D?sSqg5hs z4e`^pErQ$HSzp1mqtM<^BZx0>DPMO+8{R1LZtSBV4$6Qa&O>VP4R#qqblAzY>$PWr zV03euuD4!B8Ary)n=*?8x*DEg7E=+Mt^Jy3xEuNxsDa`!jCbMKypuIt1UA{SfHnbmx4EJq5bjNW(aOq|gn`D;0%4?SU?l4GC<>Qa(Oeugrg0Q&nX`l&0zEy!_mLA45F0s+gVhr} z-}G+2^R}ScFYpbCI?^^3V;p}Uw0u*HmJpIe9(piwh8`>^!c@h2-Hx=PDPj{HHys#O zcF%){3iwm|3u-<{d1g5pw zb1T%mB{Xy9q*y}&{A_Cd3@7f!D|!STln{aA?DuB1n!8s%O;mLx%c*euOs zty^pmm>V6J7~BMF!pd5)hsIQT*%Md_e2x-4oAz0bkpj8)>A>iy{G1&}7z7D_+7oBJ za^@UL+8NzZ_aHFW7lU6S6FB`UJIR9aewRl%D^UQryYf%G$n{^1V*#0SPL!^39FwRx zjitbu|CENB{*@LD8JqBpVmX>1+&otKvkTh!2jv;ou9ld=I1$ft76PLp&ax_gpiB3>tn(Cpk3l_A zX3@l$*-klL?OWt_)ZoQ!A=KX3grPzMjT$eVYCD5YIf@1QCpH{WL@LdSxZ8;7+zvs z2Hw(c$b2GKm@sBTL0`EJmkqjaRau*NB<6X@FR^c!>f_(i&dJDkoV2U525gGBm5i#1 zUMx9!DP0@GhvO{Ka=Fnx1Unj)a6yu zg6lJ|rtn|&C343vLHTuWMw8a^PqnS!oLTt|VJ8#DKQS2B2ntJm*){3Nl(I&sW<%Ji zA*?fmQ6biJeIbmzr1j1SVW$(uKe2kx2-8LNo=F)0#L~TuFv&YJEU!u!|HRVOLReJZ z>JS#?9SdO*es3pCXceV<2VwjpfzXtG?<9e`*F9_Qv zCJ=!Qhp@F_-gzNR3?Pzjrx3O-Ot&b6y(fh262i_7VS9$K_lB^2Lzq}eq>eA{V|hc2 zBmz4)Om|M0_lOYofe^MLgq<70R)#P!rAT=vhcL0E2#ijEN_#P+2#g+q3KKhu^ijm) z>sbf?#QI3AX9A1*NQ`F!i~2}xX9A1*NK9t}i~2|`X9A1*=%TRRsE;lt8mFOIIwUXQ z>%$je^)4gyQoddoe*Gv5;Gb%QF!t z1M!V-BS?~z!ma*c<}7|n%vnpsr>4#_HaBN6pUhcIn4GgbX9n6LHoWS|K-#S{u|~;w zVBRDXS&`Pfwbe`6C}G2Ek*0cI_<9{)h353DfGrQUFSDnK`Nl3J?EKx3@2W0xrk?4J zeM0*OQ#a;vzC`nPmvo7fNf_I1WPLH4oFLT@Xq=J+U)I(b9CeTt=IY$Xs~6d z6oW1O3UpzW>`crfnhc6OvKc4(-wLZ7b zd`9bwnID*IW92MpKhS@uZCU-tb#6l$C+L{CIvf-58(+=0!lFy?*&TZ}>yvNCgua=gj9?in-kHVV(J237cg*Zo%Sx7|KaI?$gu&`& zhn?u+v<;o8dJ;E=f+DgDf#M6D&!GKSh44q!$Is$v&iRqD*^m@P?A`F8_BxQLA!(!z zu4xVZ`8m;FMn_~~19zP_A^k~8(@%mPBR;jz$aYPbxUNPU^(39_lMM;!w$N~n8;+|t zOC4rhO|uPGzFvm!Gu#=v~epS z3HnKrl)^3jj2z&nkbdO#w{8gRvp%6WD-hcgbH)g7$F$;S#xxsg3g-7iQSMu{U#LfOOL7P65a^hr%9-8KC&20EhlK&1gGi3i4*+q8>#MqN5 zt{Zm=L~Y1{bmQFuQM0gm*4-lzwfY8>b&Y!kGEEgHuIw9M0AzXr77H&U(6;OtHyYF) zU4#arV09nTG@jZg`PINWe|`Bt-(Q^FW;hNx;w0dP$Z9-0(Chkbobo zHaE7^z|+nrfxqmnOb`8}*goN9Hb{7xEfC`=Q5NGVaojiy;R%V<##uNwNi0Io30AF^ z)PxHl!J%EKPCSqZq9&1uV4Fy_8L&)_%Aa-Y4Q_`oMB__Hr#=!#pbZt_Ynwu2Gko4A zLp-V3xP(zI83?xHfN|^0o~g{nOGf=Iu%CmQgEg#!h$=)(dlWjZ=d>uFj?=-o@*g8~ zOXV|bynMBhpQ(LGtUTR!=QJnXB>YF2^tLEX?M2vw^sCMd{Em%n&J8R>NECfnJ6cup zk6o(+L1jK)THDcHPdXXfYf60mo<;dd*@0WhP)wov29wSFstZoltQo;z($UbY{9s{8KgZ*y7Q;Cb+>^$&x!O6@62cu0P&U#nLJLLP=bzxs| z9^jjtnrfk0z5!(v%DcE@KhP{t*m+=zZ$TS<+gJ%5z&EdR^Blm1pxHZ7zwHg|V%-C# z&6kfiu3bEZRX}|EmjG?c?&BdnTme8t#Q4Gg@`#%$2G`Uk*3xyCm~UMC8HZTBr8tiNU=Sd=26>Q*k54SFfG>H4HOj{M}p&n=f8}u z!$ODK-8z3|e*}wK;YvII%~JWoT0=PVoBcpGjQRO1jvG<_jB_Q@tsze*_V8Ji&J(zf z&#rR0OydVxrrDXmt+QI4F5+pi-Nz42X^8^Tf_vg=;ho11iL^Sy*a(ZNC(Qt^#y$eh zj1iRZ4+Dg`D&Nh~|{3Fd3+5eh(6=Md8RE zX7TwDkxYukFbLmSy#~aK9n1)|#3;8pV@%((#99`3!9*eV1#0EkxwDQ}5fqHhO|S+L z!MIgkW;q5A@*?q(yY{e=*otSFm+AQ1#ItGVc;F?vQG#c+iQ~>d5F9Zp%WI+A5Ns30 zbQ{z|xpM}78^SAsj~dLjajGwn3xng>+XyInG2H2t5nl^NY%521r!yTDw?tAXaMjNH z`2o@G!)9&_=1FFpM`Ybt}_UGzIH6BYAi?EBZ{JJ!iJ&2?~5I2EDjG@8+6GJ5LkyiHRx z67)@Ca%8)FtIjy8&m82u^J^M&EpEvs0#F=S4`iF~(9d(cEMh91Ka(EngvXuGArV=U zN~Bm)%$|fNk~YgFwX5u-8vN(7Y^(Hn71c3S}Pce3!TY$IaAt+h&S6t8B4JO2tz_ke< zeJl?-4F;p={*87m$mHCW$J#{7)HTNk1V729YYr?jCRlT@=%zJ?=d43n*OH#q3nBE( zJ{s$bFY2UCH0nb`&W0qBem($cKBRp@pmy?Yz=pSX3_#I$>x3KY&=o+%EIt)3>FtXA zN#ihKb>2Oc@0s85x96OO`aaD1l556$(V59LqZ_;rm2t^9Gr3yC0&;@oqToSkH1f^F zx{;v*=r*K%75C2zo(4D^dqv=;y6bmHmWeB?SThvgfzJkA*U}mIFNS~a7GWf4lSichP^s|c9 z;sc_cR7d5vue!hd_E%4m-+}6f6x0I_EA7nwLe03K- ztRp%R|E?FjjqJDpjhA+7yAB0D=gar8TfiNVhL}CLuIAfBoVx*KY)Q$E1b3?OEYN{7 z>30Py*6TTkq2BSjPqzhU zHlZx&$@`>`i1vYD{HIS8Lc}}eMQ*D0HSk~Khe#!FCvjI!-sa$2Eqt4Xx3`8VJMb2z zq-(j*cvt);X^dL(as0eEev=%xPw>McA}lR2kq{B18#<$T!^5<6G^c!XOLW zv0L>URzl<{zHNzb1b5W~jhtbva>~W9E!w8vWlXzuey`L)n&`Xg?ia@So+8d9pbRDd zZIJKO*C-gl`q3JcfI=A!Xkk^lQW{sRUJVY7`A4XR!%3U`-9Y&tLHSljV_IEFbF0j! z)U(Vnz$Q}>%n1&v&GZJJMlFpO$OqfeHnbd_UE7Ch*pCRC9GZ`Q%vYQUR70&y&fHVN zrEnJ}cBWVqlqcrK&J=UW`jGm{MM8%4+TCiCV2G7fMRP z<0&)M-{4OABsLkl@=Y~Ahbj0G#XstDyiwcwE2~*OU-l2{Mt137qQ~SPz&E@ z`Bk~0V@G+SH~2C2ziX3YhdR$C;n?|n^VlIkW)7M}m4Flse5>6gV`uXQ*J$SO8ZUx2 z;M$+yXU?cw^n&Yz=+TGUwC6bkp`w-{C> zY5SAv?8dy<^Q2O{F)t9QI-I|ZjhGoLp~5PCr1P8k&SEzAorN}iZ)wM1J)+OBK(S*m zXF{jZvH$US|J|MJzte%=W%7OO4(&XnFY>KWKD_0Od5`oQ0@qEn55r0%tYho0MV+*N z)bM+y=vzGa-S{Q2x6>;$t6$+Y+?83NyE532u_sS4v@x;@)omZL8!K*|C1f&{ZdecP znfj53T5hu#yTrE6ZYv$^rs*6HJ<_=xv~cCnc@sW%Nv3Gwe&=#uCVLs9ld{%a&eWPk z$hB++TVg+!AZYi25M0iny?UnSiq_@FtgmP@1QBAj&W#K?^uocVRA&1+XUwZjRU2E( z*F#$j&zWVhX?G%u!#ztncM4r?JhR!(YmZmEjI~Qpzcg*~Di0u|NIud>?E(*_!|!_N z`GxUm9*)Y8G{G(C-dH)b`58G++Eu<96(RLdhcUV$sVzC9NhH9 z)eJZ3J%zKKUq<;?NQc~Dewh!wov$TZ@O$1?2PomH^2>47hv@kV_Ro+Be=JE*b*Dq36be^V@or` z_Vzduc#+wy+V(Km9R?pG5+&R{s{h~U&ODB_JMWy&o$FV{9kl4{&b~sMTzKDdyoQP z(a$aH0cyJn!vagw#bE4^Y7bi0m5Q3G^8kwM4d#HJwfm*Wi*5G1FngOK*I8IpWVs@^ zaDP@4m5&v`FG57h2Z01=8Ltc!tL3&N0Rh34$R%#fg-yY1r#g=$zm+7fuEAq$s)}6^ z%yojEuit4>&%Tq|7vt5ADfMSIx)3kL2wmm&Qp*uQF* zL9{hyt3VCLHh%RT3$3E5@B%Iu+Xn(jmZn^u?u7r`isCQd%L`BfD+ulfWi%AO=#FJr zzVt&G#21A{^_y~!`4ESh6mlMnvLfZwz+zVuPcK-Hcz7dOFSr1|GOiZih?)_saIV}~ z&%m0zQ+k$D>XhB=b{KG;l#znr0ET)3&$y~9y=Vr?bV@TMQMZrTIwK2lO`LJNGB{bM zsXg4UQh5b5;bml{B~lOe0_8R`98>JdnmjyC%C~Q^x(pssM5$BD=)#qEi$Dvs;5^fU z4`~Z{ciH0e<89#GV`v4=#c^*XWn%vbfpoKYQwn5&%$-J*#(Fr>(>mfQO2F;>1CdO z@z9A+UBMTGOXVw2(S@|RmdYk##yJ;kt59 zzut!lOeA(Uwvs&wf{tjcpbt}dy_PsjlrEJ^pn!nl+SInG?TfAjwiqLKBg5*Ilne-6 zE~P+=VFU)8oz1joGazE2c$HIr7q1H%HC&sL3-x*({oLix;J^)DMNvq3Fj9uqk81VZ zIg>P3yi7V|=!C9ZuRgB4%6{vMzV+L0f+Qlu=E>np4#2%c8F=@oxfUEg{90UTo&_Y6 zTfQ9s^$1?ByRF=g>-O4!c~@KSG7bWhMswnhy^$X}+3pVXUWf97p3lHsLS2Ib43nom zsL+Y8xztzsQ|v3b3&c3rNqCfgJFWI+Sc)Vwdo#=t?#*z1*f`Go1IGQ1*mr3AzD8(KXSS%` z*qqXhG{zr{X`1$C)F15AEF)>#{|d%|%J`T+7z_Bn`-6E7RgP;>XGAiy_s#Y;{*GF7 zwU);Ps^V-#r6Z63Z^8dXf9Idc6#sTXmN2;uXAyL`ceJZK6uMpg10|N{gs(62bx?LP z)upRh≻BzNz?d=hT>Zs?UQ!t@lA)OjF|R#cC-oBfB8QhL|O=!^+XlOADq|2Ofd4 zqwr=-+^)1Kj7U4cy4B9FDkPL;dS5Subd0t_P#UMOn8RFQ7R`bjLYUI815mSkmRfi- z3_?ykkIsQR(RIRWIwor0w_}1bUE_URFW=RT1EFLK8gN0k~N&6K(ph@K^m;(rX_?*pD#nv?whb!?gTu@^#5LoU&zq z*)F8qI_nHQdZi-7j}I%VjAeNR4(!N9IkgpUSt*Tjo$F?Izq?qz-Dwrkc@EKZcdB!wTlI zzv89wPc#J1jnfb+Hrr2&Xb(Hp#kCSy26 zYfn!I00X9^v3fdbhk1-J;YrE+tMPe>lFb`0lepP>ZJ9R-FVsozkk2_*bdIXCs092o znw~`&c*glL(tlRr#0>%{?=QXrz?g#~yu?|D<=TuL8su<(NN}wy^&+iU>Z7!<>Jy=+ zw8RBzMXM@-+{SuQgo`3SB~oYPNFNl~1z{Z`DW^Eac;QIUmB7rZykcKD4->@A!f%*7 z$`UuCk?IC*r#903G46Fm+ykQSfX1MWu??ll0L=kE;UN#Xs6R4jnCzfqKNBmJzA&+z z^lOC4%zlvFWP-Q{p%Ade4($>@^8e+!j z>-L@U5`cNR2nma|&2Yx)CwM!6s|L&~morW;!KnMbux__bDsY*?yO$xFyL_PwR7m|4 zDSF74|9Uv4>m;J>zOJ-&?gPHm6_@M{J#ka9E2R!VTmnHEv<^V(|8tx3z}O_JE|3el z7iIXEq)YIz8B4^}z*7z{6Z)L+aquTfBspQVA4VMUl4B6-_o9@LD*KEc{uksFPSCmP91fJkT*WQYKI=25#(wpg+qx58 z;x_JsE}{Q{SoSl3*!hZqXXqIm_r%QNdva!wGExm@#3HAO&-u~tv+}<=2gTG0xbd-M z@dlojGyl@ZkuL+w6Wc!v2o)IS(r!^5MOJ;9^y`LB}22ONZ!C8GPI8jKzjo$>DpMV>`2{tVO-$V62(%rz* z&Tio4+c{p6{s`Bgoz45htOtw)mW=x&5GtnCAdm5b{;IRRqHuAa_<0nhpzhR^lsL+V z2}uCqIo!;Lq}fNARDk1>vMpp{u12-?d6Js&WbLGqC?HzsA(Bjh;|e9AMJdsw=SWfk zHYJ^STe~}l$<4-cItXm}-|~rg5M}e<+Rw7ZzXpp}uL8ch16=^+*LC4T^%}rx@;ZgD zkA$z?eEoI!+QZk*$86%MeBCL0E%J3)_}a_YcZaWie7!n+?dR)*;p+fjUkYCb`C9yj zt!Nrv#eW3zhI5C=>9H@VkT&Z_zF{vh+^Yq59csu1#%y$l`f|zZ_IwR@qVH|J6Ag24C&hB7v;PX+i^lpf74!gW5S;7i*8s1C&V!MQ z-o;WMJ0(+*PU^K&Kfx&lvwqWOd!mfHNk31vTi4Sn!%cyya2>{xRczVj#ZnUen`xwZk@%c zxQwU8>X082Y2(Hf?z?lzdk=Aq=?aM5tGn#S{Xgd3JWkG{_#c1r%(Z8d$!>OYkpyxu z?CgdRAZ)@N5(vm4H{lHTA+TXK3z%Vsh$zSnD)$+|0}(}31mqAwIpjuEj(~EBpdhz^ z@O!_jy8C(hnb~Ch`2FLT*DE_uS9e!;S65e8S66qtUG{+&(G3)eP_nV((y)|aaW`oV ziqjhgxIw{a-dBp~>ll{PS%}6vY)^w=%bYr3_vmqgl#8UEOWdwJMQ(IL0^3fIc)2d+ zf%f1_C+mJZ4+9s*qHhc1l@S2wzYw}vx-dZjrI@-@0105_lS>HK!MExN`=Q;O8*M_j zhQ-1Z{4;can2S+vMar<|SGlV|OQNo;XRmJ)ei*o02PaCvNeBk&pS@lK&9G;bRVTh( z`H2M?zDbL1>Q@S9aq9QZ3!)>xcfyU|J5_h*_wLfmq70lI`MuY@uZ87`PR)!lHyS5@ z?vQ#={`^{-7_EH>7)<_5lZLKF{#adH?KnmkUkf>f5=vvtg|Sak7yoamWNM6s$yqmBSLKa6l?T{VPu5(hIv88) z!M~<(BKF{BeMRI3o(T>GEo6OVmknW=<+x=Pk*k#QmQ@5>W#8RE8kSk4uo24`WG$Tv zjzgKAOc%1%-q|%Y`U`c}LwQPloK;2Fami|^FT-^f;seiXggHFxCIMJqF{S9;A??D! zU5@X0stA;b_@02sxLoB-amH*Y*SRxqe{cI{iSf>j#m6Vzh|6 z$E=Se;*YffYA72V<8cQq>K5FMw%IWdpB_?u_d#r%IbxyC5wdmL5~LdXpgrnFZse3@ z*X9l46$A!o)DQ2XSTh;?#7zdAYHD4yq`Fowm>lf3)cR=YSTO4jrV`p!OS@1ZoQ<|E z-w?pk@h&)<4UgNJHv#}X+)MZ=w&7uw*(ws3(i01k0Q8~$u@`>-pUfk|rdo^<>dzl@9kW?mi{UjE;PKjH>O0IP8F*d!&wMg)nJ_8;OQ69$TEE}A z`f+=Up}|hKZy{A&#p(9VCBgXB_!Ut%<=c(FiSerQj9gepH^ux8H6MEtSejo>!8->n z3W^hS>l3;KOQD@DYFod?gmcu20oY` z$gDcDqF=$4Ah?Q-cI@^I^P`z zUrdaHboaD$-viK%Cagap-S;3qOU7;V|5_!y6g(WQNmvU6zL@g1|Z?JJq)2Lg1 zb|Z~7#g<<~XW@RTfvhnMH|srY8&iKH?dq7_2Bs$Nj}ei_A7X|m=I%Y-MW zD#?Tn-$1(il<$Za8_-~grl8~O#o*IcSg)kGzCWSLT%QUUkC&v2^YLm*`clD5O@6?f zb`ncSdyvcHMboGkR|Ifv5ttZ7K>U0frg@AE;KW7>Tz7hYY@aqoy>bDHS6w1DnP^?= z@;B@5^Q_fDI>FJTKs+{Pyro>e7G?dGG$V?!A-!6r0=h&Nb_9}^?4*6ip)g zC7K1hc1_FDv3SVUk)=mb2hA_>80=f43ozKX!4HOo@b5wRUB#Tbs_k*RQz@6q$w2`v zz$$xO1S!}QXy?cIIu2PIH{Q6XY~W07;A!jYn-8pB6Bc#{jb%B^NwTnq3yFqfx>5R( z=ZPM0{rF(A9|;(2t+Yt`aW!itzWco|%6JfEI2A_TL98r98{E{mmOC^cx8~#AIinlo z_Oia8k*)2d_jFy;jLvuCgBjbZU4|!%_dx|AreoLiig&vdtbLo7I}RU`_Dg|ka9M#? zM{8DA#8_Pz;nu8#OL{TAJXK?Q0e$r>Nmcuj>AiQy>^OT|be@#lP*pepm5z6JS;SnlA6@Bx0w$bOk9-fz*ew&N9H<=yX~YA z2RyM$6xsq_x4HhssHE<&(ylreI3FR-+6%tI)m`vqCn4Maxbzrvu934xqL^6!(|7h! z?SIqJs%tY)s|Ot|J!kZw$mo>r-;bK*7eF*fxa~;(c;r6GNR-JrYd`#YeQffc4RFsC{Sb08HrmyaRPGYbYj{J8Q)0-_c0(8e0L=n7nn@4a6<$1}03d z8+Jxnk14Gm)`4Tj8bcxlw^y(kYYg?5gygG{f=bWbfd6sew{oza@0QWrwnz2g5(&R1 zQRH@DaJ(G5&`e23M3@S2A>jgSX%<)^SvI?|WOO$oadhPvGjNt=;Hh9ez#nK39guJc z56}QNenY=!STvmG;z(*d#Am{RyDx<_d_rmXh(|+)2AfGv90CpFCW0MNvgoX7xd;DA zDX&bZ+8iH6S&{rE+}Io|D9Figm)^>6bFHU6Xw*NRNB*TOyzA9}GV&IdS>oDx+VCb* z85-)nxlbt#SQDioWi~^D(V+TY(qJb`gH_#0qKPQ4=->PYr4xZlC-QYfC&CS#j*HXD zrH|7o(SD|J?Wdo@1#&O6k!fEAI*C=?jxz0OrO#uIK3Ll^P%G0;6~aVoyL4~_mRo;B zemjmjnjqD_h#FX5v8rOlFr5Iost#o0E7qx=zdIvsP#hVIZVEf}&NhLBDHuG}(n-Cn zvI~*{HYRTU+*M&?4Xnu1W4OLCoyv|=khqIAW4*43zK7aZaIIq+JN7Zi9*Sms9L=5z zn_ys^2r7FKwRBc?!d{Cy7qu1-hrhsty&6qnY$<1O@wwz0$#`UkAThgPE&RuZVm__= z{*^_*hwXhA-kaeO2p8ni;e8kkuufRi+Q{=P*#GD`SN1Hi0b|cTkyhfbD_6C^-{UO3-0)c6E53=?Xywgjmin6QvU_u(iLiwQ3DlCGJh~j4CroQur|ti z&MS+$e^7lYGKm!R+GAuAnbpC$rqcHJ$$KX3e2D~{b$~pCG8oOZ z?oH*pZ?)^Z)POMC@YDd=46Lv0fq~OpTEx}hO*Fk=iar7bt4vDC-J;LO#@>iwrK5id zYuGDDTeyH%iiQkMMG#kgjnl)UpCZ(pn|x(12xc|qCJ$@iWlvyZj5VCP%=TZwS(~NE z?XcM~ayGDkSE_LW6`e5*mY_{5g|4(+MWcb#4VN<9T--U7R_Q<<9xi1Q`>z9WdZ!F<_!ry$m2dH$mCk^PFZ_W|eFqC>jGoKvGoSKB#navCV*3MBg=Nok&&MRQ3R# z7ubf?A=;COR(4zDg6UdfS~&)G?(=R5mo)UPN1~I|{aH|cS#&;nSg`RX!5G+_a6a1G z&tlyj4{_dCJ83Z4fJ&)z3PNH@xhPKhf_ zM5c=1vlcY*cOdGZ_j2H{o2s-7?q=^2mbKD4SR9={$|bd#S2^Ps0#1J=AqjGNFwS8lK>=9`C*e+*jFso#ej0?7o)q3pCFL6QN7Jq%b0Q(%inM9F|E6At*Bm&52d+kY+JLT$XG6 z51eb4ma1j;Pl{*~OTgmeXDPxm+gFF_3ARihmf3V967?yDjbNKdM@C_N6dUu$Q@!_P zp_S2l`NEl*bU8q)uonb5i9~DKd%Em;<^|0{5sOXAj91=o!U3xx48ma(&_GbGupk(X z;~$W)hX?DNr{7$^Zid*uvHf=9NkK$f5opei<3SNSKe)qy=7dV&IU%O>)z{E4@O?Iz zjZ$7$J|+iHPP6|hr`fY{Ior-UZzIG=|x z?>T*iWm1BD&I6nAlRg^bAIOtwL(C24ECdvwF*0|n0(2U1`J?J|Ky*}n!+o8>uV{Ro z=_2GSia5(fL|)kY7B7F`8>p8E}>p^A$a2rfl?bH8hcL^Cwfe(6nI)Z*|N9mU{P9bKgO++SQ^M*Q5aNgs3e`*SNZOQD$}A z{EmgTwSN=d_qB+OvL<7^v9U`0X?5a_{Ym1#Q77Kmp(Or{)x@7!Cq9nS;*qK9qc%>)KBH)Ff_q-7 zdWVhbSvytzjSGxRRUdW%VE>~H0K13;A{ix?o<_YzTm}|>SpvL-HKG`d;k>_ASlAY= zg>_WN>`eUXJ_7b?nqc$5XaZp%PJa;_PI?yfA{2=+buoVETdWx{*5Yuh?;0JAQLdla z|Ho@T6Nd*^UtM|4&A}%j{W7s{6&g_Iz8|25O<{qPN>4g_SaDcPc2Ix$C;K`j&L~YV z?o&`?0$dKTb}0F?eS(GE(>+qrWMziZzQk2RAPVha(A9Zw5!f=+EH^;SQ%8Z7!<&QB z{h&;){{i4xmL(mP#>0a4(ZTR>2vSd_tW?{nS(ni;EiF^JpNROkL{?%di@o0o+H-ez zrHIVE+?E75jUG9&B{2e+*&O&kaLrcV$tlJAgeN`?z_`!Ed7u=HAm=*}e8D zD%GcN1IW5n_5KD`HcrQzuzEP+B=5S>0*#wm+MSOy|Ef+g642kJEe&aN>VPg*<}pumn&9!3qxA6|FhKN>psV{Ag7vHF zzcwDaIQi|J`t^<1sKZjrRH<0EO1i-#8ggy59sBN$A=BU(*w6V^fTN z|2KMG1SIl!jXMJgM3Yy}p#yqWWtb4xPJ>poIttQYZfm}7%)->BoA`U7;F;61ighoUU} zQbHPC1DZF#`3!8IO>-X_DTHq+_BQCfJ{-=lP^f4UDkzdh`4)A7rYSB0fNJH`pg~V$ z+`V#igPzEs#@~Q7>A{p{&vlyZaC0tWb})ZgbS{HD@V?fWeO#CXx<)(@2CXi>qcCyM zxK1yQb7C3!K9GJF`-s=&#W}0#Z|&ZcX=D>F{xq`Ko|3)G9gOmunw9#u;c?tNW?GdY z?ZJXYw!JBNU>UYg8L7VD#X}O!n=(sG%+?k&3?hH!rcLz&SrE7t)@E``P*|ILP z62>Tr7sVM!XJWQP(NuJu-HtjM+{`45&DW@5f&?$CkDl3=XS`zTr*a}mV33!4^%Ddz z3Om|E9Fzl6M)d`t=r~_;b_E&=FGo3eD;ay@{8zfik(i5<(i1LtCxb7$;9U%U;DUEE z*zgD2m%nCkj0@hwV8I2s(kb=2;Jpkkbiw-=+{*=j%is|%_&Wxdx#0Z_p5=lMFnFa4 zKFHutT<{?V?{UH3Gx(GXa>-SC)de46@FN%GDy}r)Y1_cZ7~H}IA7}6o7kq-j(_QdM z25)e|rx?871^>X{GcNcvg4Or%XZaub^*+D;#IMiV@x@hV^>cnb!>`O}d_BuAMl630 ze@bsUR9uyo*7~EZ^GXCe&proCzMPEE|5tGA@)zCLU)iFYP|!jDfRfWnn8CxGm=(#HuPJGHddpL`+<7tc=sgkV0F#v$ zV6yT8{B@%80!&t3fXT`W@E&H5u{Q^J>2lClZBaV31$Z@qtd|+@0=$+$j_)||`vkJG zao~*vva)gD?Pm^KQe|c1z@ITCD;o#iMj*#`9QYK0Y(X6OR{|;c;=oS{WS_)=E8h-k zQ-;qVB|9pfvWY+r`Z#bLfgJR4;0yve=;OdG2;`uT1NR`1gFX(d639Ux2VPAe2YnoP z4}oG8jP=p|1ai>FQ$9x^2Ynp)5rG`^ap1^j0py^M1LqRRK_3S$CXjFQ~rWL4*EFoPXuz%D^PSG+Sk-ZZR~4wYBdWT>NkiBK9Y3-?Q1V$ zRe4d?uX1yPJfCA@HN*|#-?}?A=jUM?j>R>)!jXqzKPd(`&Z?T+@ zwZ^|u_K1Tuw-LkHE*tN2OP1**xrtMyI8@ zzgar!N6>d~=X(jfhjwI8T8M)2#0Fgf+ZwQ5B*k!ns_v2F(O88@J}hmy{aqLi_YKKl zQiWyG7N-YNXHi2jP(69v_Xu+6owjq|{_OM5(GK2YF!x@3JG&kqFKECWtGaNe?!P7W z!9)CV4|6M!xs3m#@y&m7?kNo>D6ES=>Q6{J!0m|p_`mAUOyw2r&oQV{Q}IC4nOvM= z!yqRM|CR=rsA0OpieY<@Dpxukf4vn0yDO)SR!Vfl$e`r2^fZ?^T;y6#YeICvh+RAP z2FF~d&5hc+o@*<0{%g?IKVp3}bl%mr>h)sg468AWU=!hf$9*u8Y=%B(o6Nmqwq;}t zw3FsU3u3p&8*A?x_%+hV$)TTj?GhH&M$N07f>MRq+6WxajezMwuR_sQNtU+Bwzhzb zO#%p3W778~6X-yCoQ~g5C`VF-Ux2wwW1cr`j?IOUL28`31=C{CQaljeNV2~)bJj@v zIp;H;AIG?n9Uyh9!&w7V`R70Y|FJm3StFb6{r%mZlu7nlHoK}ux8Ifh&eQGO75=wr&+cWn^5IZTp*)szP+$9h#AGD0$PIq!?7dn=i$IbL8`kwrKrq^=XMCva)*|)CVXFt zQzBQ4hW;LG*BUc+tXSMyZtUOIk0qaxy>8Aa`3znVS_ncLPvE{Pra{cct?q`BcrOcI zVGz#U7-n$ih2j+)s`rN~AW9f}87uWDdWwBcn(<9l$UHvMwHbHQnX!mTduK6SM8 z{+Yqh$go^zOYi-TY|<%B*;I`Eq++!7GV7H{+0mBmJr%!}(%BfLbD9$kkEoB`It*Vj z4~Gut`80NV_cVQCQZ8nnG^Vtl;;^QCW4@`dIoiS8yt-m z>y(4~oD2HMDj0pzY}u@6V6_(kEG?H^MBKmMyA2?*Zm83AdW1Dfqp@KVWW@jjCnFBA z4r!$}S-+*3qEW?+bE(g>A!b`!z6~A` zK-zhEXB&>3KyVBPMIm5G(e`|M&)Ix1Z5X9dcb4rhPULO)>AmEL73Bh7lGGpfWaMg{40K@U0Hm1o|j=9|lS%bNEr_vyVsDa__l zTB`2`AZ<>$*Q+JmG90E`PvmEV+?c(ZgJP98S6vF?OzNJoll@$4#(ev^?~FP2vp8dh z{oHiM6#Kc!j4}3evl*@Sb7N{}>Os?q68IFGEM5A(grcVNSy!1~f?R`JRmrp|cJyq} zi{YD*{#Z%QX>Z2z>^#s0n_5psIE+M&im$D1%PeLGW{K;2ShK)(?;K5=T58 zMnq%K4poAe4QM>hE_C4ClCaEbKxyNT@PFSGWV>F`N)$;}hc9|;(pr$5T-A364HTlB zZyEzUqd5%217{Wl3$#~ZuMT)y>7>w*TPz;P6{rc5rmR0v)5Xe!BaMu!O?83K^}EG3 zXeGwgFuZLIrrH#;3Z>&Cf&Q4)J<4(wnxBt@^gaA0vS&FE;_n`7gE)^-tu8ZE3y5 zV6^e{HiOZ|)4v#uHoV?pFxv2Xm%;nFSdu+s?$DH;aY1g=lzM(;H;F%B@J$!{A%oeK zHt$CaPIbY5GuZ2bA0t@hpVDrC=|-g#`H73z+mHB^5&Tm+$dCAsi%6jQj1l~^{BwRW z-SPmtN@8#82Mrs9ziCf<88e@=r_o=H0C}y9bD~<+;ICG=5M!=?XZ(rZRD$8)eA#x9 zxK$r@jo;QXOzV>h&Om)IsV2@7;fyCn1AORKb&r}kGh`=o4j-J$FC76g+2cfsd#ctm6oY_|9Ku&(G{P#9fUW=P!cnv0X|S|u#A-m+d{rF5C15}MV2 zK6)j|M+C%qCGPjQH|V-Lw??tqP$rlr1*m-MPcKG!BJ!2^W zLo-_fk9Zc#hjxe?6CNuS4$oGI8@Gl_HDvuypWRmFJLdHGbiUdJnAd}w`(Igv2RHoA zCVFt4`^&6~2RG?iCj)N?#-VSAvp&&+8Bd40GefMSJ6^$xfmzY(SQ*$fd`6BDa-(75 z%miz!!Ygs|jS-2oYz5Lnn8ng|;w%Ou5^32oq!kTtTC6HKjKQeR{xS>En2K`>55n)b{ zp3BjfM`fI7m-8K?1Y+)`p_6e1_BnHn5}ceN2zmN$tlq_O4+eRq9q~cerBMNjHC+)@ z8OhHf#&kTVZLbKcm#ke=q0V;B7^!2C74^o-*K{nh3=eMn?OACLo>x4qgn?(|zHhk? zf2o=t5#}AeBiOoaDsLJaN*F9fTllZ^Q^%L1k-Ex1N!I9a z5eXHh(?$H==gToJBEhg@5g~dEjIF^a$78Q2d5nPO;<4dCbn^}#HIj>w@GS5X6yggS zxWvz=`;QZzn->lYC>9y2xWlF}0;8FFx=8Q-(ok3v{hO92kK??Vn*3TS2xewen7Xh= z1+Q%pj6WM%4<2MMJ%N^^XF5grqi0GJUm#$t!^@KK{G*juMc%DglGZkrRi~Sz-$` z?X}}qbqsxm5FItS?&Hn%&Xp~p+?j}GIJxsMrN|_K7`Y>m$$)gNu;pPUmrQBxPf4E9 zZ%Jt7MZ1o3rgeP*4zhRuGM|t*qMzFQ&D>60iTJwbv4~&f1QCjyV9wZiEUWvCcKz~3 zvR?=otY1zZYQJoh=ohEDbEmtqCMspMLCS6@vF0>iWi3ScuVgT>r^OQhU5P23ZgipY zA)_39sWa($rZUqScqZ5y@Wgu~%;%&j6W5WZ1lN(KI_~BHC;yeI7^ynXPeJ-B|0Lz< zR2Pwur_&G-n}cx(1Y?WqyniJ7h=9TR==7oWQ99txKqtzuyli`fuQX!w@oKi@CWx$M z`b@4>$W`-h&e`X2p?a-@#|#S6v(wQ8qxN!P1FNR!=`f6>@j5wdGgg<{Imn61(3ZtJ zxVnt`1sYXZ8wlXsfMeizSqk6SU&!J_5KkBt_*OlRfn%SEHW!l(_AFTOdmi&wdaMU{ zgc!UhR|xk2l0xMk`Ni-NlX-k}t?pMbwd13skbVsND5eAB=`19v!#xCB?$MSZ5eOaA zDHUv9`?6`hyB(C*zJYSbI^Otak~avz;l?4&o#zR!Y#Q3Wl)1AFb0<5Kb7%kgL*XW^ z*Jh}fH*a=x%A{ErLmaj#Gv{@I5&_O=mtF;frIM4H*EvjDn>mf~HFFyGQpXAH2e|4-AEIrX%@`7@pQK=P?Uq3}P(i3?is~jk z<3sV`>1hk)4e1_?>_ap)Xk^SW%-(;o5FPiiynL5;UAN~AC3Eal)Mq^F!yDRA6&$~Q z(GFX443WkXS@_2dI7L!6c8hxdA=D%U>gZtBg9OG^1Q&1UB=J0fD4oIj;C#{yjP(hu zSK8jug}2ZDgUBE(-E(-Lx4<=LLbYP22ljGQ8yRFu$D<7z6BLW-f#Wq26k_CgvB=>F zUmt}tRV)M2CTCiXX_^4bDdc)1PLtlAMz(k#(-L@R z%s~fu4A3^xwm4I2`it#z4|jU$wm{JL0PB-4?wZfXdT|syFzBws?M~Knq^;**U59#( zOyx%<`Yx}1cP;uZuLr%7eRpsJTk>Vo66~MWwq$hFl5wkVNe5ce5o<|jkndzm;0z)y z89juSj85e{6D{e8TGCO!C70yb5=uQz#AEYgySEB5-#8gjCUj8XI zg!zeu6&T%ZlQI*`Vo!=JX_5Jf=NxI4cVkNz3T#|{5-x%>B#M_hRZ1RNuOmzz@8tW)Y*^-H}GmeBOT!KTzH`6+Ww;qXf@C8%v`eyY44+cqs;_%tni zdS+t0$#h`81B zs_QsaFn-n4u`AzIgK?(C$V5Y^;}bAQq^IwxzcfPv@ z;~^F!6Ac0548eG`!Pt}Uslm9+Vq~HrV0;dC{q(>o2IGwUj2es=TZ~LJ1dL}0#^na% zy7_f$F#ghFWTL)B(2`c&*S&)ANP}@^er65E2Q5Y>k{e)Gjqz2O+S3C&8I0@Y*Xy2) zseAgx!4f#jE+xEhCFGP9akohFgG};S`B{?u(;YN9;a>97CHY|{`TF_wySIUeV7P4q zObjtu`=-`Azd_$}jCj^rtXghTh)cX#g7t8Nb;JCIb8z7%nz59iw%M7m)bbJz6Hr@| z$Fj8YG1ahbqx|f?b5IVsu{Yn_JstD=My1KfWg=v1QVdvlSP75FZ<$P!l#v0TW?X#mkH{w8(G7S#k+bVwOar^N`3+1V%nZlu$eu#PHx9 zuM94v;2wFh`Etg!z}>6UgQMP&4J>@`7%sjsq}dMNV^WJxOvyKOZ1|uCYf#5lAEZp* zPAI22H|I_!4l$*i7HfQ3J-6{?S80TW1o(z9m$! z*5W#iF|`FpB_eGe>wQs2;8i6`aic0DkFFfuSnv3JuyRCO7EVvuzB@pR>A_0VIavGe zYGtjK_~?1s$O*AEcQ%ZDvlovZdHox(&4nB~-wwtjWGBq-T6}E!9!D z2Bfj;B$mk?%1ddx(ms?@Qem8q%CeDfO(saA-?5s2Z73rC$UwMBAD!!H7O&4BbJnlPAoMZ*7#s$SCaU6m?hDO4zSRG|cFM|>$ zkN7+pS2tSgdtS`?#VMLWN`#lzWcU;#jq#OQ2ivH|3r=_0Xak0?e=s>32dU;_0rsf# zTi|FntEpj9)pPx~K6%DnIhEc^{mEFj2MlW6f}c^v`JeQ1$|$u#^rD--Q5AYXJwfHuk)fE8GGvbTMjv2*v;trYh?SR<%3P z=0Lj%EM5fn-Hb#LkEk6u9zTplCu|n+_)qHOe58EKpn>`095$=rp*=pLohFE;x z4{apw71cT-$G%d52tS;rQ9s}hgY$qNbau8*c{|kYBX!Pdk3C5sTQ_nEz1~g+Tj<}x z(P|6LbWh7fn<2;;3war_8HbF$FWZdh^qHU~jFRi|CsUb)AK0%`;=8yO_{!R0JDPes zI9u8m8o0IrD*+)M=rBMra0$Yo_vKhxV_#@#nDYpr7KK;{uyH2l0or9DoN&-=#;$U| zdf2Fb5n8b_s~2w}cE^2C)J!oKqLp8Ftt>8b*x0_X%)be2J}8EbK6SwMbc7A(=3cP` zR4+91eg)(K7U^^U1m`o^Po)3w6d9Yem%pnNi}sob80_uJTQG3>G~V_osov9gV(+4D z*xUukUX*+k~r}WgnXTc}9ADwT;S0rZ(_&098zF!I4iD^U3}i z6Uwb2iM=(pZJMLq`$^gnFc|IbHMDzgaN1>pNe~RvW3obN2j{a;eWrDzL^dktpo$*! z4ir$C3uvyT_hHmCz)R}fSFz?G*jFiF6sX%d8zXhlds!^45k}%e(-EbX5;tM$;u4G2 z+Jxvj6HCfVm|I%inz^7mR?7c5FCjT zRz*dLCvOOj60u%5XH@2|z4Q+(;^kmml!G;9FLH*7?Q2m+F{+;2QB_O#k2rSLabxF$ z5}WM1EzJPYw#Al~0&WDYPB zBiuf8m+}Uqygr4Ml=>ah8hG7(Xy$WW$;5TKl3+{om{$+?T|)84Ejk*0n4}>A&BdeY z-e>ug&~V523$wUdG>lnC(XVo1rtl<_uAG8fT33MJsu-2t8I1ONZ_~nHjYET0U2CO+ zC6Hs-H;c^yw?Y!xEoSTUDNR^cx$7C^>?W6}RJfipSNJ6*+}6m6NGnRIAxWeNQC1g`RwQ%RLL#NP3mJ*ok^52< zoO25ljMRnqW&`mrDI-Z}XsM(t*qUU7j3m`4BZW$kk*p9sR9SX7JXc{c;qZnETO1B= ztgxxIGL)#j@nB>q3-RDahO!PG+{jSY#)ISB562a2<-v{bD{Jk+jm%~3J-ETo)_8F9 zo+?}C!HtY&YYjXnbF=uwMmL+Y-6EseAo0gxi(xy%d+_oBH&WKojd?bt&X_0Ij`^_6 z+EX&~*GgvarYD&h7v*5PfHo<<362u6k#)p3--%_EC%(fno6gh;$5<+vjPg<&CDWZF z92Q{HC}>Er?}U7}1=TMgQz(b~Q+gk0bq7FT3%Q4@y6W}}q%|P?l?t}zA_@QGnziN3 zuU|~6U&IiU4#BXi?u*arD-#g&SB$HmbSi=S5%_8Zyq3WI34ARA-b>&C1pX}ozD(d^ z0$-1S>AwMZAc236fbSkXY)SPX0^f*$Qu1drd0;RdjhkXClioLY z7sEg&Y@&KR?+K|=N0KysYhsn3xI;BfyFUU3`K5xJp))VQ{v4@ zv}d<8!}uv)n%a10V+n(sVbjJc4Or|f&`vJmV?W}HE+YN9mt$ua zG2D;Xg%SLd^cCOLMI>BrcXJU5*W2A0A=Mq@m$3&U_$TS7wx^3o_^IvXP_5;oTEqzc zNut`D5&V;k*oP7PlZ=q@DiMjoWz0%MqUADfB_h#s8M_iO)32_KUx}FQN5~kKh)w(m z8OIVa&ySF?ED;O+2pP{3v7;X$V_G8i@FQegOT_+ugp6&8ILwcb@huU@`Vk!CU3*j; zc@yDLr1VUFeTh);GRGVJnR=YQ_(@Vi9TRocC22C?NgEV@-MNJy& z#n6I+b&1E^3celGpE664ZH?yQ7`-~T1%}*z1AnW#rrcce{i3@Wmy4U|MxUT~sD}y1 zw`RdP2#zjI*xkTuLB!SuhoM~G$N17C{9MN3{vp7AhIG>*$}+lFavxk!GP+rkD2Dx| z`xl+T)QxrjA`A`+Hor#qiL5OOa*z5DTjul?$V&NF9mn238d25p{5pnT6Zmy3zdq(y zAHUw^*Ajlc$*<$^Rl0D6JwI7u@J}w-&*1UkJC%w{ne7eySw6t8H~Dou{&X!1t7O4c z-!L5H*H?Dc!Mttu-*Vc zV(SdKZ3J#|=ds2=2Ko7lDN!1=3ktMuWBGVs9|~}F3200E;(wCkgn(u|aA2L?ppCh+ zl^>$tn~Tk*>sjJWEHU=xqtSO+0oPx&Q<;8bTMWGJdXf2@?#RS-bVq`%lIN`#$usj% z7XK-4oQR~#8(-#^@WwKH#rn6*2Y!B-cr(^-xWd%!EzKc1WAdNE4Zorzd$ z#*pW !XKNTuugRi*cnI{WPR)Skjh2+aY{BOin zvmRNn{Q4Etp8Fb^VE$m~M~}gH)%2Fu`UE9(pj6+o28=;In5Lwx2twjJ0{A|~lN5Gs z2!_&!ej<1mx)`2v@=0|fWszVKCuSpfih9*9ih8m8G&iQqAWV}@g2MZ>xc#2Mc z-C|xwf7z} zt7c?x&3aYz4vbT?hV6rDk%fQzgUu-XRag`I{)Ruc&6ZvmtNEZalnXP2nvwuZ-&0VM zzw|v75V!RGDg)8dSIYi_S&!&Cmk9KWY4wXJf)Xs@OR8t$v-&QVdYxq6(q;snMc{i8 z@V*zYQoMw~_aopgOnE7RA4I?+SG4C4_+bRxoWQdQ{3rtMO5kM#{yPF5PT=JPejEYI z1YSqrClT;m04e*ni23|0xu+RY6Luiz>5f6I|80b;Kc-XMZl{FJe|Ov2zWDr z=My+H0{)J`3kcjW0zOONH3ZI$fNv4Fg1}89V2VWk4uM-lz)k|MC2)ZQsxCMzh}j~> zgKyOqF%DnOvY@htbEeuN$o>C~Eg~9ttF}dOEUnHK!8G-35n)h-BP9Qo4&yW_*M)qI zE#{x(vR8ORA`;79;SY&OEPJKvBqFiw71ouA#Ije|S0WP2UXc?Lky!SMtdNMrvR4MY zL?o8IA|50nvFw#WDiO;-jhNL$cwHh+@gsx{CE^S}LRe8EF7P8{C`!boeuNB1iCE!B z$e5Cd>-`8BR}%44KSIWqMBL^_$oP_od;AEItrGE|A0hHpBA)OgL~=^RGk%0fPl@=e zA0fh0BL412h`^MHcl-zug%a_xA0gsUBEmPkj*`JH5lw!C40wqc3;IF1VWIR3TNPrXbh9 zCL}~Fc3aj$SuuZ(*x9K@;!g!T0Kcbe>)UDe?wY~<5M=x5d#I=LL*R|jmG86W@#|(J zNm}73%dXMQnvbzgzu=nh1l=Pf8Us(udO-9js~m=9=94`ICXBfs0Dn4wT_b=Z?)1@6 zw=~ag00ApMK!%Pcc%X)5erAm?QDI9^Yz6e>y_#^v6Jy|S#|wO#b3IRW9c5Kppt=Pr z{!*A<#|tVer)i^^t-2#KN2!bg#CFpkY^k21WEyzRO~UHKu6zCmpAhMb>w(hs1s@w1 zZLsn~fV~cpbZLdx^amro{xEBBVlnWHynCJK59ULEV3&j`^+i{CfY>x2{i5r_jg*(O zx)#KAhP5CA`X;O1fUf4US?G}FqIv&)y6pg%P@-EZZa`VsrTY9f5oEj#o;|Bq2btOtI=V7hV>e=?Py z;wMws0!VPTE?(GXVwj4`jK-Q!UD4p&wl}1bT7jg$Za^7xQOB@u8G0v*`ua)fwr`5C zDOIEbwr`HaRu)2lKU(FmOl0-z4Pl$Cx2}`S zo+&Hl`jT>NfvgJ!qX)-3ZnRC3A|BkxJ=Vs+a{>7{aR&;^kv?ZtrO%1US-+SavjYqT z3D*-wcTs?M=706xR#~DB|tSpJ`k`W(`d9P!D%^E@YP{AFL0InpSTHsp38` zbO$r004}^$s{Ra#d`B2&!$@F+ofF6hW}aiL*WZuno;{NrcsAG`=@WM{FrVvPCf45d zA8;qUe?uCw)X)gC)?|d-JvX)YP{@T-m7gPDsFzPweu3`{9ydVO!}@D(@3;j(<2$?` z>b5DzsFA+@bqK~+MF%O-`o1a(XAufVf8l(+F?G;$qhd;z$%xcZ(%V}wY6 za~_Sw6K734jyTx-#7i#${z^J5n+&}(;xjMwj`RwaC*zBV9pRZ<3GcZV5FC+w4On`k z^A0zxYh=%Icbmz4#V%eAVt(4(Q6wZZ_ONM zZWENAh+L7Ia1xqxE@azQZ(5n`*nJ!J%rDW%t_N)~p}metY}O(MAcZ<$RGdxz6NN^z zNIms^I5P%_$p~|Qzq=D@&0NVe#^H>PuG;II$7UnV=0eXh(}-C}WQeuP_0K%5Z>v{dh6bze;-S{}f8aaOh;BzuIKC4vxL*O{@tq_wf?p!z3pS0c z2wdfDOrK$-;}^n>{=?J;UYAdpPxyohWAyC875;f;lZf}XQreF2Xv@%Gv^{d@v^^Yk zj<0tuZx+r)Eh=}Qc9wRL&u8UMfUQa?H@ZS4Fye-@m&nt~T}TuZ@wjgFz7*UjCD?Ua zY_tnp#Axzn z_|B;67SUWs+|nmRW;ViP*C;GAt29H@Iavim&boUmHGwD*gUx??qP+Rqk0a4@J=xGL z05}U0Hdt>i8A@;dPqquWJMnI`(e|}ms#p0nAYEUNdQ50ik#y#2Gf5$RM44jxf(a6` z($i6xNm#^m(_pfcc%(m=AvQ)t=1|{VAoK(sBYigyI@Z&7PXG;N=8KQ)dw>@z>TmD^ zxto?ZrMCu7+hS#LJ%h3e9YWm@s2o6jki!$z*MU-41-is!i~xqSW*#r2D*cD!Ple?N zd?r2Hf0zr~E)cAReF>KeqP>=%w~=<2nca;A%ASP^XL19tD|?tv=*omiy6z4<+X^1~ zG>if{)w-sZ35J`kg$)sC-tbU$wUbcOA?j+cp^WWn={&1h2|iAa*#UKp(q@H|h@#4U zsJ^9^YSh04q#gJCTiFz1gRng?qN&L&dvWd9Cbnl~+pxRGCUIWVx`Ajj25_D?-?+g@ zPM;f}>#UahJCqxUz0tW_i^_99;k6@3DsDy)s|<4#w1Wx=hy|uuY7iyf(Zb7Dg{nrt z-iLkl~Hk7-SKv8iOo0F$Rapd)-D>vUsi&_$%q6bwU`diSjsSK+$B4x<~16 z^puE<8vTmtdvcPp2)iPKnv#A7ynl3S%K1npvmL^#tgu^uuvT@} z9|T+Z8x~Fl*&wOGN8TcZMcPEV=toyI!XfToh^S73wYi^q+Hy8V=ATq>6zcVbIKReB zFiJ$dc~mWGkQ7)x99Oe^5Q}Q%0id<)$-41|T62@+5vXwGLB#tDY36{GVnl2{++N2z zBRv_ggTk5G!0W8*#;S7-^tmz-IJz=d9l8=6k<2ZnYi5SuBOTVyk7DIhc?jRy|Nn#j zCi9YDwOX?1ZxL=?8|)};9%xr#1xdvjm7&3A)N?@TA;~Il-eR#eV3*zbaGGI)s#{*%GGT<|RhUva^=8Ek&bVy5IOt>=R8 zFu11+zRO_61>a-vIv0GO!G~S&Lk2%|!H*bR^KDzuzZv|33x3StfD3-Y;8ia8DT5EV z;AafJ>w=#%xW>OMW*9QlrEOer7=y>TV94NQE|_BQJ{P2!we*$?@`?4**mo@EEQ4FQ zV2;5)7i?hgG8d#%bm@04*u>zwF4)ZAq<1am76!lIf~|gV1cPN4JCea4y5J}TtAain zt8IkwPbnIg?G6@=%h3)Njmr)Pi^gE5gGFO-jDtnvXe?pU@)n$RP+3B+V1-5Uh5o?` zi|R~oP;JLkZoI7lSm{~U)JY7Ec+XO8GJ{*W;F=7c;DT#0_#+pb!r)6TIE}&1_bsaF z41U1{*Jki!7c4M%vkR`n;A<|}#o+i4EUIn>zuVQ@FExNW$@&~7ZgsG& z9PBO!o9|%vIoJXRd&t4ICXB>cz74-fm*orjMUpJvmS1fC^6l`a^f-nNMtR z2L|W3;1?O}bHSY%yv_x8VenZO+?B!nrxw+23~u9syE9mE!95xLkqhp{;PWoHh{4wX zSX6s6xTy>7!{9M4xG#dLN2!11OH@fV~nCryCMCIcM@Gl_pFScafj+f zP&To*%s}L4e2FMRL9Pofx9Rr6#R$R%`3t)Mh8O()C_hY>cvV>6@hDSm0Q(V|sT`n{ zqwV2Zl>J4NZL|9OA+fCu(V&`ha#g7j1c{+4GIBiX8GcB_i(ew1BKwapJ$3DzBn+7JZ%h@$6 zTX7otHTETLI@5;(_1rT;&Gy{0+MmsSCo5>`QfI$2W}j!JWxtcPaSA-Ms{)_c?_|WF z`<>*Sxv2Zjsz=k30VL3)-EoEQ2%oHaBPM=vFulkt2ck@G@hc01#eiaw5T&49V=!M2 z?2@7yyeGmexwb;x1aVND9zkWxOc2|h$tay!GsX76n2>8*{wCJ8!{p$Mv176R+Rw}A zxvu@pbt>;9kbN@mj&Gu?vv?xdEuQQ-h_FoL1{~jd7Tea&z`u+3#Tai*!_Z)Bn(K$q zMc3QW8CDNP`IUq4C#)XE&x7UjaDEW?6_|04A}R)eI7Qc-k2xydT^HF#^vp(-!j@My#6OjA#2P=92Yh!ar+p!euA&cV5)*)r@6F|<1^3nC~~ACwK3+LXlGe#XPs^wVy!J+ zspoY&vD8xe)c7P=+LD@(1WVIWYb3$a($vHxSQ~D~g0c0n)*jCrIEh*hPAb=fv*PvO zta&{+t6mSzy4QoV@&=v`&P2b-d_1YqJctxcj)k9rZFDzg+L*BL^C&bHCn}=QxUg_b z6dE5Eei?-(goRt9&>CUkwkR|)EZpuwF|R(3Dem*^E<8^AIj%O2?B}#f5ipnpzZ*DL zXO()|@@ZIw&t|HS`}r?9kC1b8 z9^seH7G%{)?P4Qd&I;@K!{w}nr*oVL00jG&`O{umwyNliMyno4|L}VI+3L$CSgnr8 zYZ29ZjiorFJQU8zC@&8U2!8SVQXRth?+}^C8)kh#Y#!X`_H2ZKX9DiCC48-j4|ZYj z1u+<(VY30vymgdIf}L_H=ckQ(kIa|cBi+N!x8OeG6F31fsNNpwV~{_R{TU}@Qk61F zKtG(spG>8~ABc;p{AMaA%Wt-_9KY&6|4)>;C(5)a{B@vRl8M4j)c!I~sm-!{xNe=W zaP`783%hxuLE7gtFi;i+tGM!>ZPUv(EM4te%1Af@{zhvY%$1)WS0BC3_F7 zh^!x3vRgm0xVq~{MtD*nEVBwo>&qwJ^uq`*ZOl)C^>fP}?j*_P8|q0p!gUXxl!kp{ zU=5u(&0Y>egUy=H3}M#%*m5Hb8ec&Tz|g1gCsX+cmav5i$6PVKp0R{&4~mV%D4%W(Wq6$J^muS@>ANyX>%k2#v*sS$%)M;C2R~l- zmRUm&ZqlyG>ld45h`Ba5 zYXfFW#Mj;HBp#s;Gx&R*!-Ag!AODrE;i5|RI?q6|((NvICWC))!Lt~A%LUJ7FuG;r z90nUdx2Vo#aEc3_$Ka+ecs_&C`|lSpxX8tRlfeNO{1$`fyWqDGRNYc-vik_%n>Ftn z80x}>D$}?g*jM7Y9+<3RExLo4fWai&Ka6C1`L4mvtmQn-{z6m>lI!%&xcx=~^Fx?nfSZh1ollVGyT*@J0$BT}mY5IMt=oSY%r8aYF)j}di*gKBh~A8B9NI*i%>|6R*#`#WA+Gs$ZN4907p{Fl6T zDe4MdyNo}X%H{k4uU&y(>GxD{T!Pn>YsRhq9Hnrcptrmz)0LEDJ!J$Uh1%DhMY@^d z9p4##Au_KY&HO@?_25M8!OeU}^ah>|HbnbG-yi4RV`e$h??f#9PE2yIBeTY&-?2^~ z>8MJDS+3aj7IcrSP=EQ4fyo!|^)<^QOa`63eP2)z7A^7+E<0>`J^i z0fzO$mK^;oyI6=-1RC*=A@MYCa#u#}ag=QbIDT6z$!`P*zfpV9>5v-=4E3i`CT$(7 zl5MUZ*)I5+ky2j2m@`AHx`C&HF{qRD3kH;sw#;Z5R+45sXmvHxoEWoP2WF8{JTA6l z#M?$zX`B8H=jf|RwmCFhh-u;)2D=!%oUtny9AA0~bW~(XI>Py0PJ5lUa#U8X_<}B$ zYwUw_a#QeJm!9()8C1@eq3`Hn-Unyd9z6`7vJxKL+ zHicytQ={Z`LjPw(A}xzX+FGjwBfPY}m0IUerziaCZacYOi+rWlAZ65s>kzC8EOA4^ zcU?r{hJ^3Ah{O#E-**v-8xnrtA`&+wT<;QV`}^5P}eWhll?-#VEr=gf9{tZ;{9?X8iRiMF@DS(3q8i`PuDMH2%r8*Bs(*$ zvU6rI6>*|-tiE=b_5t&HeRH_NnR-=y!+fr9n7D4=Fk%ROb40vv)~xNDBVFIX`0Cr* z2^g$zru@%+^QCy-`~rH^T8R~2mre9^Z$PM8{7audK`<0p5>lbtHG?TBY zUzpGJ3lrDv7e=h6U(N^L9p&i0PLl2fG#8Hx2h8J^un=+HXQ;m*bl*LU-Qb0%g8Uo2 zu<0*1c;)#VO`!{?+WXg$Y!eygIYxs9hnac8%fxb*P-W?q#JF&BZtWM`{dcL#FVRrd zWB$AJx=vmsdbpU63u{Mgi7^xgJt%*n>MSf|fX)b@wHlVo1Vv}5+>H*V?gjkrBR)Qo zFqSuix6*NbTfow8bMIP8&VoLm_Z%k5!_{Kg3MNpxw7EEv6Lc&rM6+uP9p7etS~qGG zrF=q&U;hoV#^+4G>`ID*K#UHHm?v~$7<=6P_+A*x&j$fQq8J;d| z1pIPoBmHEaMLUi`J?)yLqsi>9dj`&}0<~|Nr>J-<0&ne^5QLqTU$G#(pCHQh9SHC~ z8a-6VGAjgOBaw#;qcHCJorYwx_bp>ns~>|dJrW~QTN8)M`EIsNMRWEuya|qr8))Rn z>P|Y>E}i;(1KS>(GmY-e3VHmXa-vKEdT^tYlcFBn*cey~4{l^UOEvIZa0BQo_I+>P zku>WW9hO-Yp^DwzgVm{a3zDgPaUX3Ku+qY$tfeeySuJPfWL+TE{0#ug7e@FvBP-`D z-KJm8?y~Zl{C=$Pv*Gu7wfx@a_#L-A`SUyhgYo-bGAD<= z?c@+P67E3@Ff@Ln4WXVqm_DZL#`MZqdPOnr#WoVg*v?L()^;X6o`^HXTZUJNz~hM} zLX$F6JD#YcD>I*)_nElvyw8X_otD&?Z;S>!%%t+E3dLrJrt& z_tU*-82afx{GemmPn#tA*Xhl2UYzOU{lv{+UC+poOhFX+kS@@9o|(M9F?+!*)xhiC z)y#aZZ|^uSDdS zfVt`pP(}b^}m*Y<#K|GnkZZ9o=G6DC-gwx3%2`Z_w^d+~rhE*U}&+ zIH&}$9Ki(GVC-r{7!f`Gxs#J)oq6K)-C z)@vlB;~)B+pCDzI*+U-O$axaA9-OWA;6^84;|)9~esQ7`MAJCS7d~TwGL5qY$8bbj zm*E)UFv+8S2&!6n6n`Le9^+5C@;HAol_&6{VSOc$_qywoL~3u(N$TT2RD34brn@6^*AgnvqE*bkr7_nmr_})5g2Oi(v0vihze`Gr>zppeiNNySg;THh5t$~a8i@K?57Z0Y8z&Qe_(JM7krw* zvJ3u^!5_QepBQ|}1^cD??&N2GkjGPeud$yUD)(b?B3|(DS6}#s{wp@_eSg5 zewoOj!Z^FT$~lF17+grzCe{b5z8{*@UfuoBOjG}U=vz|Sho#QYGSG8KT;-oqbSCq8 z!uTh4HhiUnMd@B}u&MAS&_jAJI#_fz{4Wj`ok9JpgGFahUvjYM4C>1c7M%@$#lfO; zsjoU%bT0KZ2aC>z|INXov*E83CN$V>rFQ}G-xFlF&sYP^DZ%f=kkfP+!=cF@(z^O9nPjg$81W zrvMllOq)5$XfqWwNpGqyJ&dPO3mcO~WU-X%dctZYP+>AC&MEG4;cHeP=C+}GxDTC^ zDmlH>tWBBIo43EMYgy*^;AX#>SPVSm9(!<-wrxYNZ43?e>d`6Ew&v1nXq#dy7Z|zLl2$SHCyCDoAkJb)q;QD`x7R-kCoptaIj1)67u%Fsq#Rk%K`(5#p(9 z=OsSTy_qR#=Oqm*N<%zV7D5p*{K3#*G(6qVaLZIg!1#)K&h8&223X7R_y~4i?RA!yPP|+eSE8G-r);uxQT8J6JUDjB>E(PLejj zN;kXewlfL;l%54lr`XXB_L75jIM^Ew*6CpHJJ=Wp``p3CI#^@cmN5>nQXawO;~C38 zr411*Om&mW1j4pqk~Nrwe@aLCNhT5&z2`QG!2u-Eu9(bh{1fYnH3{RN(nUz8?On^k zu5z#`4)#3|F<2$HD&NU|oO-Z>MB` zt}5fM?*NF$rcy4GT9WNJfAZ&Gzyq2`4J$o;8I+5uIHfH_6dUMfxaxi`-=@0{S?s%1 zvA0P}>j6oqNl1Ao7vgCS95l`8!u{a?^N~a;us&PCKc$-hQvz?`V7EKih7NY0gUxoZ zM;&Y<2m7;w^*Y!~4mJm{u4?Hm0JI`=0Vs{m+Tg~F=a~JAS!a|kg)XK^Hz7X$Nlvhv zGJ=1S5u3Rji3xUdM(|HE#}+OkF;{QtA`+g@ zUu1Fd>Fg3-YA;ZomuNq0lsc3Nb$SZzvPQ2VJaMP3?q4sLeDuTKT&o}XVG}TzMs~Gn z!^^Ai!v=j)K_AA$S5Ss+k27q7AmdAS-$rjr-b$VH0`$*F86QO6EFbNY!a{LEp!=j^ z5|u4d^TvD!{5CbpJT$*E2vFR>!R|!;E4vUjx%9(zgC#LE$(ophBJnEVE%~@HYCo?Q zxCXIvMp$hBe^nM$1^Sh$9T9-E7sE8Xvj(~{KY8CE)g+nJdQHRxsV;cJZh?q|& zG-Hwh#yz$?%;0g636S1`S@~Jl`o^}!w2qg^W2Y#OF|)wOL%%x|@UJSI6_ma_djUA7 zsiPVGsRFwd)o&?|Z;;ns<=MK{Ae+N}baP|jQFO!#JQg4>pU?)Ggy0JFd9MdSdMp=)YWu_A3LS_(-opt9vbW}5EfKN|0USzzmYQ|@p;5Go37R$&+sU7 z8y-#5zbN>c@*=Y_hk3#gBB zD|%~=mpy<)+nNpzM44YlnYItoeG{SRjQI@vG`JbzaLySrB5|m<4SAbrS8WC&zWIt< zSI4<~J*#cFW)sUI^U^2=Pe*4iR$g>TZ-;qSHC7Lm<)=A*+cL>-1PH$wxrN#}zw@6A zjo-qc7j5;|O>_oFTd_nNFJiR5XFTMNkj(a-nUe@}@`ZEN>DqUMi$Ir1z&X#Zhu?1` z)bN5e$cyD{eIvK>fSC|)zEcge*_tMPY}+HeK{_&mq5(r zs{&aBNc@U&BiK`L8rQ@)9N+ek%?*%UlR3kEQu?bwo=^Ud80y^>qaE zzEyCx)Wg|QgA)SY$}8F92+O3P^q_?sottFw;D+Z(O@S}7oeV)pBv8N@huu|XrLL9@ z&OtZU?gcV+ojH?WJ7&S2I>R?cL~j!b^8YhcIq>zY~p@0w2IL z?i8(!or~OkTOCM4-MP3Qohe2_QtI&7AMGw4LfA#*$^#hOy+Qn)IoP~40l7C_5DjZF z(urpV03T50I#2*QW2!eta?N2m8f%HUJMuDx3u7$AYJi1UJdU9gJ2;6r2ThgHRPCC| z@wMSo;`8{|@HGqY;6~?Si5~oidN!0*Fz|-pUeK?WpIMah^R(!t2)aiyLT46F+YZaD zgfe$ri-!X@BNAy@G3D+xW7we}Fv3e)j3Yw=R^3bBjRHGoobULY3mlXbt(6HFjL#n% zDxZ&rz4w9|J|8c-Ps;}R5t@maw536vmmSG0nn&U z5x9y$mkr0ecupHN6BE|$bi@GFWQM@3V)C7Ue3+PW0|O=+(*-A{T!A`@j=U2k&Fq|Y z{cqzmA}Hk8>z5_kOiZ~NQEpbvoK%j8PYJ8tjtTivs4V8$4Sd`ldISjM*7!nYI=zvU;qZ*qU*@=6 z@C0zy-ql33iYGo;aD-fTm#oo&K0>w`pKP;d4kSOr3q zlq5$|QEWVnjIhbf$h8IoJ69jCdMHzRvdh>s*d_zlb>z2Xte4pyT}QqJ?u^!vgqw9F zHIx;BSx36`@pUBk!MINRw&GN>@W@6}&~Y}kwU**GN-Zr)UOww+<&w2g;f=av$^r`&KTS@?bguZZe2zT+!~s*k!%N7P9kwo26YFXfk2z1 zwVqz}*<31}Xb)^buIU-BTWK+}$BqSe>k{Pr>sU9n@UvdJ!9JH(}koOmD0!yeznaocPG^kMx%!z15rTeGlCe zpn=ouQ$VN5!Ab3}lhN+tx<0H*m|j&-->}sc-=?V`HHJe<$tPFU71+FJUvwSR=`x{V znTbIrG=yd zxwb=#*%dPe%V;j*gN-!>=-t~Rf)NvgwmC4blV5j7c~@w8rdp`y=m1kcgL=*F0@^Q& zGZmLsd~^Uso~Yv~a5$4~l`(GH#4>m<`;}70z_!XvCWo7b+uD!MXkE{(`pORQR2bfiNy8DH7~QS~>W+(;Ko7>lsJ|9r>3 z2{-pWg5R^B#S~uo3Swo>4$J&(%r^Etgh&|zZq8;5-i%Mng#8Cx1grrh%~dLz*q8C%zxA)740f7>MgBggJ6PoJ^9=`!{C&=Fu*jG7Ob3g6S%#l=#@?ULvla=62z9b91IX%t#~&xXjPz zMR2oM%H32vIL{2y?a?Ea5R=fkedM{B7>gGmEmowWZWlgBgKXez@_FTaM0das9;Xt@ z{LZIySWfc}>%zN8yn=`J|3Buw1WvA^TL0$uHcKX?(@A%dNiq{4p_$G=AS@y5`@SP2 z?2CxVGSHK-wReb50XJkx0NKLo0tm<=2#5%Z2q=rFxDoWRDDu?jbA2x1|9$6F)vbHG zdouXm^Y;(*+*_x%Q|FvIb?Ve|7qic63F!ZDz7BqO;7!~AeF`LCnTYtq+rwf*=nk!2 z*LQcIP~l%9hrI_}FOiL;R+Ef?u_a)puG;fGJj0?@f}fp-NSxlY!$Y~^dntszD49nsFr}=s&EqC!1ep2pNZ3t z@6dauWA8s}mtM$f;QfcX;$5*|Hp{^%1qM&WRLxyaMX;SX7W~r;{tnDZ(0kDeq{I$P zd0&Zlwe7~BzkUz$)%zF1(EFm;DrR?~I5)IZJEq8zOkB2(k)M_JF5B1dXACs=vpfXV zEk!w{y@FoTybitb$e8UBAVX)F=OTLxCJzelK3^rWwvkczpf}dmX=Pvkp2B&n} zqHbewPZzwM!N>*gVDKIn`~rh-xZs@(P8)BFx{JYmUGQ!O&vwBtGWZ!6ya&M%{_zHg zdlA%rF)k=T4m$7+0XR)yaI3!Jnf6^cXQ_nMDOt=6HtaBKVh;x+_aSrg7|)jgvB!8u z?q?u7^aT2lIn$U4_M))ipPuAl0s6+Y`owCZVGQ^$mF>=KBO5 zdFNuvNDD34k*`j{TjE?y81RmixAJI@U}w&?e42hD<`{Ytdc)R?M8?5hrTqJur=U}rkm*BmTzu*V(jV-EI&gI(cZUw5#Z9PAqo zcBg|q>0l2z*f$;QNe6q%!CrK*Z#md24)(Nzz2#ufIM^Q@>{$mJH^K7g+YZ*_VBc}D zX%69c*6*`>ul>;b1R0*eMS7JqH_hFzH+(YYhkcflGIh zgT3rvD;(^H4t9fsNe^a(r*eMGbOMWQ;h#8I{QbS3I@sN=yjL9Tr|$gMY6pAJrF+%E z9&@mtIoMMU_Hze&-ogIe!CrQ-*BtCs2YcPYe&JwmIN0wT>`lUirhjv=UpQE19V;)t zbg*?C>@5fDb+BJK*ai;vHevkZovHf|mu_R1?$-{srGx#(!M1m>-#Xat4)&i8w!ee@ z&cP0Iu>W$fV;t=F4tA1*{lUS89PEz{cD9542{7>waSzDn#I~Z3@gOy?;`KZN+W8n~ zh@sV6KOd#GJBIoOE7&o4@1MU4`HN$O^S7Zb#c{r^*EZDe+GVT zLMzuU{RNPq79UHg#?Zt*Jf_2PFbimgXB7^7tnctj^&K)-!tTCJ?Q0g}>~8v>n$NQ^ ziK3raiy_#W)ZS)ER%F1sLgV)HWn@3j?T!}*r+Gnu@WR{~X7;WzG`ybS#ml4c!gtdB zH_#Zsu?2BaRhb*^IZG2W*JqjpO^mPFgDcK=IGhhj<4iz1`KcP5x0<*X`8gAGhu=M%S!2A(KhvU;ldqAUVM>@ZcX?b;)8@!U(TN~Tf(d2pqQF6 zkI;}lCgXc%263#a^%u*X*(<<2PQJLNnYzo8`Q2>{Ox!}!2zHVtlQ$<*VZiTvd_nl5 zo^|t`kN1Ett-kZIF?b@mc}EwF%m6O<6y34S1O)4ENosF`=PpICYt<^QBkus)=jC-6GsF>@$ zG%heXleIBuFYVJU@l33V=sE?Q^*;9a_(4V+0^SoL>^@;_>Z|nT`fQEsN1kjjPu2T; zpwmf4HdvUG4Sv(A`93ceEjZbGyug`+7GeS?8}WRfRZG_wa+w5SgEd0Hz^Ozb1iM1w z>$-Lt;c4>W37FR`Cs*Bga;MV=ho1F7<)&KL`P= zh=O|Y_av*LD1u6A*tvu|mjvqc2k3<_idy$YEPLaaci?b4>~TrtQk#3=td?NN5Oe7~ z5yyIi!{jc>1}jXUimBBE{iu>Kpu1KIB~g|54PA~u>YS!LQ?Fo8IM>Kpl>^*kxPSX( zqR17l$h4diVJD|8bQtS&I*f^1=rDqlBIb0Mjxl#RnK~>jQv|e=shx~W{d{dQ^}jpD z$U&75ZE`Y_9AhLtgZSha!_Dv!vyuPVU~lm4ZfSReK;0C<9u)7tAl&S~*a}T``!8I2 zxl|up`Cl|&(_y*CpxiHNxx_&S23#RJzP4A`AVh0=f-`ux{ep0_{bD1mX1b*umtJa; z1)b;34h)VVE#!f?IeAb7noa`~JgPk0UF`cAX}E7RX`oGz3C>3yW3fTkY8TnH z)Ywpo@@Skd81Z1@B`P3M3+Z59^)-gjv*~kgb~Bu&;#jaT(j@oI`Du)5#)dh!k521# z`sjX@KNhG`A(o^&S46mxzm0tPbLm^jANMF2eZ<;gLlx?XfL7v1cq{R9>6^t5ZD^^F zh?|o?MW9Lk2yP>Px=-LsPW}#0$sfaQmvQfr-ssbw_h4>uAc$_IbkJd1^pv=X0E4X4fxO(-Z!m=%}%>lNv z`=$iU*$y;wz?>~yFPOWh{kDYOd-?#{*i?T5xZ907-38rysl|ZaVZb{Y6a7YQ>F#=* zFY^L74pd>$byc^8I~={2`%@9+SjMw%52{SERuvVN7wbgA zjZBgVZj5y4lY10(J*Cu6eCy_0m2czuwjtko_%^_| z33wBKy2{Cyotzw*k`sp8$jQ-0PTm<^PN=6Y4^ph!CD zds?S!F{A7BIA7+4_k%>uI{iMBT$g0cI$dg@PUn42kEl*3Om#ZTqfW;re4JAzTy?sR zZlr`$>@Jfi_UFCth$eJ9lNlLOx&Dgd_c1AcGu(#Xb;Iw>l>d8vUoaMaPk#6OJ`K31 z`K`r_&hI#1=7r;1^7{gmT$g0c{FWLlzaLe86Q=xTc`?5U_xVjqIDWfKqw|}|68!$E zYZ>- z=O~x{CnD%rZZu#KEk*-^TZ{&z3CDuRoU9y|k`;#A$jWjfE8By1ql|g{?%W-y<7=p+$-Zu~ z+hk(%?#(sMexs>qB&f~DklsczJ#iaJr)twr0`Ix@GLqG8E+esH%1|)(3VR31DD#9% zJo&Nn1ma+=)vVwnt;WqMfp^=~8u1$Wz;2z-c_0i?W z%@0pC^Fz5t9c+FZwCK?Txb)w-^S={OCT{Tv_&xOM`M@QbhUV4gA#^Q6(;1qD(4!3X zGBmNiV+GuZ_xafw=O)H3jC6rJ=h zol92lrU1=A%l&ys+6{I#6U{^-Gnc#sVKf5p+4+R}rt)Ql>d~=f9E7 z={T5$)FWH)t&eY8@~xk53;8yiZ(H$gUA`^i+j@N4ns4j#Z5zJL;oG)+o6EQD__hJx zw&z=wZ#(d9L%!|Ew*kD>UnSLKhkgw~&wufZlerU9GRJTmnY+@++?1(nmAUhRHugt) z9Mpp=?|K~6k3P*qqpZCo9MRA4490D3BTxC^8*%gFd2p3U5!vBYw02xRl_&FEC#G=n zn*J#;JbNhI3K@ripVWekaJ80HuAg&ER&jM@L6b-Z|AiWdyG;l*`^7ek}-;$LTz zY=qXqCgEc=o8%_o{l9IKJPsOI-C%7J;$h^ytxXc=%e-(BNZo9cyn>SJlC0S#ks7Q` z@@>^I(t5E;SYB+C5boO~q=K_aT&B@&5+-YDlYGa?4=eS@4~E;w&&@`DHlMcEzWguq zMOLo>Qqjg}=V;@H3^MbP$c!JiBGcN(kIT?bD5iH(qc&JvqfwhP!JU zhIRvsu5HSWz#zhihcDyyl7P&_4B|qyGm|^k=wDpL$Rz-dkUQ_O8Xw{y(>Qp`1ip0Bpv)oj@DdDa}5J7U%P?_Sq;!>xMGFylwwy<=LWy*WP|Q*5>*o?J6S! zY>CfqmDJgz4+=ky@HT=GF?fhQWjxPU8Hm)wsZHd+;_#G_- z1gr*KLiuicOI~Mst!{+6(z_Veb0FBgQmm>hTcDkfo3%KmaQq?POn+nb2Huh{%qM(d z!d85F$?@gX6kix_!!3rER9;NJ2 z*WCn#=J|++#iAhl0=NAoCN%I-O|0(<^y@dV4O&3f+l-<3>O9t4yJNYn*6s-R=QN46 zJC~_xPLmCeMf=S@Ayygh6WS+i5TKRWZHrha#1$We>pmf|vZ{%_i!PJ7iQ+r)-uK;5 zSIW;r)SQb)5op>cL~x5$1l75NDDwxdubiIhD-81^?s^ICOVT}HuptlEiZ2=$1TVLe ztMr&L#_jpW89aXBIw;tz0ni`Z6Lgx396R+gd7RJ}hj0#v9FN~)_$}nuL5o@0-BH59 zPh1rM^QqKPn_2Xh6H2%a(JUyu7n_IY28fj1M?YR&#vP~JepKRJbRESm;|vaq`Dj~E zu=YV)cp)fa%MuIkM&aG@zNXUnpg3Mx`Zm7BhQhn!!n<1+UWm41;eEW3^6Q{)v^|3p z>-SN%J(snjx#-O`@4VyIK9YzI1Uv3SpEd4>!H+z83coUb{73j-@gp1`3Q54}Kb#HN znfOh?JO6P!-T}{)-r%h`Pzz35kTNodNT~}p3JY)28nM+^qO6pjU|EZT%nP@rJGbn# z`aKD-_e|HhGhXNRYo&VVhnP02ha-@={$N~!uO3qP>H7W;r5`j{x^`P)7W+L2_jLpX z$oV~7rWQJa`sYVlHtW^0iE~^w;eOeaA6K@^)Ks?m_I|8oQ*z9hSqN@Moy}_q#8M}G zse1z%ky<`rtvU|)X|a63h*VlujkL`x2aJ#&k;sr(IZ#=n@9-zm4z3*xrSuTPZN}`M zh*IjUKMh8&#g@7ab==ZwE|Jz(|AVz}X{;K%JD}|eqe`Z|(T)J?P_C=sTvE_gaLp@= zqB|jxT?&82A8$#gpMp+J{xCFq3-&D4g_0Fu*pj8Tp8E?n(OJ*QD5sr+3fe+ zSDfmrdac*HuVYb=dtta`?>r62)n6ipI(X;2{%x>H*@|pI!d84m<(>p}w&D@MeYL__ zN<1Fp7DocK^AV-^7y;pC-|nA4Yj=#mr8h&dy~UAxc6oj@wZ2dM#3m&|!b>+YD=HkB z6N@iW0cZIwhiBo%2T;$eu3wyy>K6=m*YpEyHg}znC8`+Yw4k`)0@R>!!2( z4RmkUS>hv^lcSx{65WH*)^~DBpOrfZnN6>H>1WCZ0v+G_(ViVSr4Ji~)2G6xkgJv( znS&24n6#m+YyI4{{mfL`8Sbua;$Lgm84kZ?T6hW2YS%)pBc2RA{vBnzek6uNSKfSI zZUjW@E|{x$$APRsxKOFe$JloPzCmpxjm4MgXp17YI)L#Y+EpTpLH%tY;BA^tTt~+e z5&-6k*O1LVQKoWq*lb-3IUzE4-P304#v(hvKrz0C(vM&5 zXp-`H?$g-~_0(;7-4|R&0GIwM)?DBFcJVoXxX?D56x#HHu9QsE8pwh{}1opDh(Tjk=h3KfU4l zK;7>H{4ys2v4Q?u5q>eyt?o2u#)(NnmJFO|B;ZE&h=YL_#GY)nC0L}k+P4oNWQ<4* z_hEz8AT9clpB4hgh*Vlut#t9zViy7<5@}Orgy>6-k8e79QO~0+x37iaHg?3Hjp8^F zlGILdpls@nWq7vqQ#IKU|Kz?XUNRi*iRLEEhiETA{FC0AM5Rh2iJ$6T4NWL@L3l;iNRmE z;QJZOtZVB%nZY?O_yGoYcfnH_JlO?LW$+U&cp8Iuy5Q*yKJS7<4F1jq&tR~$o~`#x z1~+%XI)jI~;4p*dy5LdPN0`Uc2-4zuEWtHFFHKAonW{AKb-(x4!j_Z&>zYU>ThsP)U7LPtU(u#>H!$FOxw^JC-DguYw~73+H65^_tLfMF z6*YZ)z}B=ut#wVkZ{UO+$zESzQ#98^X8&tyqR^R|Mkp)w7l4&;PnoB{{5$~Jd>^jaV|KJYFA*(L*|07@NFn-7#O!P1Ta(+phK}cfCk&FKGYT!)P8uCNf;;P@JdP{5<^IfWrP0)wq_=AAwubgdjwr|_e z79^m%wy8fM;$7bKCk%I?r0!a|{wq+>vu@O6rbCyuCifQcpPdt7!TkkpC5u2g+^;F` zBYZa->KlBYU?M&!0rRD?^CghiEXxr9oif1{C_AxUZw%^jdTsc``k~(leW#~AmaLb^ z3KsT43%Oxfa7mmX5R5X@^m2VcB*BlCwkb0Ry_haZ zi)_$qY!Mw9Ka3Rm_7S}GV{i=W>ke8)e#yr6ZQgwIHr$H_FTcPgzIs!eB)_?RyT!g~ z;tO5k2@7qK#v=PRb!+pci7!IpV1&qw&^8%iO-9WLkQT}aOZ0)XL`Im?0NJYg1=~XN zvJ4;iAb~8y2fjrh%TS>DbErFiO_>m6jLtd_lHl}>uRB@e(34Pp!+YZ}v`Hd5gSzuK zQV!F!)}3sb(VeWJNq4GVOy`gF9_3qb#r5m-z*MI<%lB`ce6tES=c8UEpq+fr7+t=9 z5UaxIqimm1b|2%r(Sjf6yVZi9KtOa|12{M9y6G|@DpV4n*?oww1gmo!B#{yG&Dxv3C{Als4EES&(7NK65Yfg81j`hox@6vf$t0+4b zFUpSP_}y9Li@g6&;jQ8QddX*>(2<0$0=U_p-Wln3c=VS~lBg0mO{&&fB`Q+{riCoE(E&c)4KYAq%1=_1%V z8$D;@&2h&v9#`>sT!PegEQl^eKX ze}h0>LOLInbNyDoT}`;I-&VIn)n@57kMD`lxW!#pKXP|nsVo^k9P=4EWr8zM&!16G zlRWH(BBPZ^TIs6o5@hmXyW$IZbhHoRd5Ka5Zcbg+D^wq5jw_HOsNn#t`I_IA48z~Q zxGS$}WKFiGbMS7VF~1w}7o{;~9Z<({{N84KsUdMQDl#9Rq9JA?{jA~U zq4QzWm~&ThK_2Hy?ZyVx1Xm%S(+&HP*PjNY_1I8-KjW`Pyp9d}?SeHzi)G7wUNg|l z>s^uEeY;>c=uCcWJ)5iU0XRlR|6rt`l@(kt&aq0!mdd-)3rvyV)jP@)qMv{V-J(ZW zhJkzZjVa0Ugpw@45;`V7vp3V1>sWhWo^TF$75BC18YFhhS>qAkdO52LT;|3jY7Txi ziZ>$eg&%K>It{-M;>VjYufcEOt@slb^aJS8wWwg>y*}hRLT)q=_!IKc^@My%AeHI> zKV`cLklOhyL~P%WlbbgXb_&Z8!d- z?L_@DPI$WPL%z&0&@6NN`Z6c>4CgDxjwKmm3t6Ni9+!-qk+2DQx`3uz*dTcm@Ld&7 zA}8Qjz+`$7IsrH7N$~_6z73`)=@alh6;2+sf|D5uIQl)yAy*Rc9TiR)HSjPffhHNj zQ#)n!8N_wUy@+Q^ZFmOa**Y7Z zi7;Da!?O@(D{Q#069A&F05y=SROs>d*a~u{g!6=80xfKe%e_Iy>bP7MQ_tP7mTryg z#J+;NQMAroXhY|;|9#l+e+;y-p-vJsMz^6wmfG7;wtlst^4g~e^oLt(LlJIlC>?I) zyRCM(ZEr&{pX(D>p`H9!U$`2Z0Ay|Qi-;fLpL+aVt$PULAMbkw_Y%fG9_&5`i@#xT zzk|i!^ZJs5#ozOKfJL22^G48k5JBYybzwnyae>bZ2AXx@P)Zl7o#@X)?YyyiC3X!) zUq(G@3E&!W2+Q^m7BLv@rS^K49WNDDxK1}7LN@slx`9Rl2x_?BY_h&5uC8Y-CZZXh zl?-m|e@*8{%;Na84rm}U9X41I zXK465i9@h@KHf|);2hL`6D$)w46G7>M+g8uq=`o_f)n&w7il`RZ`nA`j~figHzirJ z`z~Nc?%RA?=V@_z;3gSlBT9E|B2^{xiE^>`HfI8CrwK0i?51+p!VdvtCnZ7;vvCSr ze`qJsDxg=rAHR+9+YUc$S%du{2G3VeM{OGye3ZdKXRLgc!C5Z$F$ULR@UyU)qpvY2 z6B=8;#bN-Bm&BKg_&4NkH=I}$`YzIH|%?5-MEN0eLHns}0CS=~gSylpWYz!8jfSdHJ zECD}DZ3$MMfSYniCIim}=YUSqr;_7n*dTV*kAf~7M#Bb?vO(9@X?mmue~p3VzB#R@%^McTQOc_jC-0ts#?MA zMPfMKy7e)UFlYqiv2yTloJ)ocB9!2hffFwSF9bu#*L)X0vw~*Wnda}MLeFMIf^cDj z#UX9;9xX;B(kgp!fU`5UEqb&seM}pveTf0FEvO{5Xxwtl!0;u~+_l;ky4Q+!zvZR< zRNzModJ0Hm(vvZoLW1~&aJhOWHGu^C>#w~N;_I^9rsz$2 z9%A>EJ;@1W%q;%LH>zjYf}H>4W$jl?xhx($_|0I*yg=ixr0^@k*{N2qCdM?TG~ro{Wt4Koed(A@ZS)i2IZx|Aokx7Zu~b-p#HV^Z(90n ziG%nTSeECfY^Iu=XMP5$9MxpZc@_{m=IoC)OjNpk!lxSpZRmFG*yyJIx1yA7{BPGG zr%>R} z<`cRxp+`69wv3!j@%uD7F8g5gBGQHp{_V;qOb2T=@E{Gg3!@i{W8=F>Sv!Kk=g=2p zmq7KKXk#R?+a?p^e%x~PdKcTrAZ<5IJhA>1`o6bD0LGCX^gT=x+Ny$i4ag4PV(A-G zvZ5`>NNFaoxBey#qmgTAY;0H}YG|1WrdnE}Z!0|*Ej`?%$pxQAniBA_IuW0>QJ1i_ zexUCUf<-h3o?fy1Mdyy!+tkXk<#={b{|DNtAW!+lC(c5>gROcmsr3?YzkZ&XR%$0x}xo0s3u4AsOjrq2b6xlT9(wb&n$#K+9;==~(v&K&h zWo;H3U&|$Z=%Z*$#ghT^>6os(Cj)y0`IemDar-fG{wc_6^aG$EYY6!&HA?g{!%oGW zOoQo%06CsdRi1y!=Q#sycz(|qcpi7KjGzOiN|ipGXj!=9v00;H6B4{sJ=tKM1l;)W zSh(ZyFzDROV-~4Ao*kc`AdeZ5;BhUn8pz=LNLo>jQxJ!uBpSqRiZ=aLGB$4Q;5bY--! zb2Gsf$??a>RkC5;`uE*UALXCG^DWtAyOJL(58<(J_Z`P zb{m;zg{FNi{USuT*)PIe&3=&qY`fu_j~pIm8#sgSl{VlsOsRk)-1l`3nDOX!ocaZ(&I$U+RfrH#pa zVkp*Ila&pw9darPllj%m8SGE?Phg)dhOB>WlQr1A2c5Gh{2&B_}0EXm(s zsYA~p*~KJtyv9v&&O@=#*(_JPgm2K-Y)fjf8Zc{3XH_A{y-2Dxy}T&z<<*X;=WU4=6gQ#o)>&1HbEqJcaxP*NaSBISoraCnGVEDwPz9E>vT|KqgoqDkX z>n&l^p|y&NcBI6m5IoyA`10y0ovjY`1+{fS&rB&_%=@1XEJy>~AY3ZcaGis_H+r*R z@HjmK$onl$1^!>ApR^1Iuy927j|+m`JOKJ-)Q^wZ*jB*dJ1NL_Xe%B^+~TgFhLwGY z2pXr@KI85j=E22|V%A(UkuT+dNNzySB2Ebw?QhQ_>R!C3RmYHc(swMKY0uKTdZzk{ z7(e_vsxsC&h>61}%i?3oM)4bQnD1F=tBI+Pc7+$x1noEjd*R<`!9`5axUz z*J@;yJLE$LuH`rZIfI`DzG2jn$ZJTo=nOfuX>Mpv=FVHT1>=>#2VJrhMz%bNIJS*kfW~cZ<$B( zXNIQnV2q|_S`yV?tC^4;EYMeM&Lqyln%+DCjKkoDc^mx4mtfG;jrmlRzZ0yf?SBE@ z;*9k#`N&1T;sdVaxB1LQZ%Hs0{f9jB(XZuMh<+o_j_9{|vR`ta$|mE2po%tIyQ|#g zPwkeT&XJFmdGkH9*$8-}tM+3{gG?+im*(V|82M?r;fR_~k@8}6)=11fU|cl%k5{y; z4zP88S{B{UI@wM?LN`OPzq4O?#XLnsNDV(Vi;>OeB##R=1l-sn6q5wp%y-F?R&dfk0pDHAC;1a_Q$7iufSa`j z(m4S)=}A`uF9iLROYR4iHA2!%7 z6=u&dPG>12l10VHu+gprwiG2mX8jW2US&kP5=aJD0^5!fL}2|guwKHbWEsQ#PyuF) z;Mf#`RyC0^b%hqn;}`xXqt&<*GzLr+8Sduj*hFp3crdf3d*M9#P1Wl02ZfE525 zZm%vCiiLUkpn`F0ih)i8w4>NDFBeSfs$m>6qweS3sM}fWgkJBodOaMv(bit-s%?#X zlw_y?s@<;s@x}4zqQ!2lzo*zE^<(l-noyjeHFZO6cIg=M6^tQWI))_cvU~4z4Co7v zY^dH3gH^#EZ|Zn(VQf%F{|TzXGJ6t)Q6={~0MMyz-!XfK2sJX92|fav&J#LUqTe%r zMGE(2WQP>v4y(j0N^ty_%w))uH|EmzWN7fj=82-H6z=jw{$Pm z)MaYYjj1e~KK6~Y?6EXbyW+aGDJ`(4PuyXzy7NfXvGLgJ5JGB2>zRs#FlPAS7~v@9 zYGPXsL_PDzUXNCRkADmMlAIXcz-I!=rQL8eo|}xle6JmIOeGF)6@sD>03I{|0@vo=OpmVKkqA0V_aV*bcS zHu@7Ex#-V)z?S)oJaf^1%QGMS6;J7(dai2$Xkg2u&)fO8bP{W|UD|&b%Vcne zmX=9Mhmr@0@!r@aBy|FA>;Muu0pCL9osyA&oAe}O0&eUK5-$Na=}932FJSUv?naA; zcH-;o3?iw5?+?qcGZ>K^mg5yKwm|F*qU^?a;)$Xlbbe8=GZ>L9Dn^Ela3v6Pl+bKv zFd|uk+6dSYQ_K$dk5EISQkH|{ae zX54d8P2(P8#xU*?op{{qLO0~N$IRZi*AhK9?lEyZ?s2TxQsvE*0-vnt*OsNIXmG4x zYByFe&@sHp=wroL%1@0I%)+rk%6~Uwg{jMq6)oGsv4ZLHYZ)s{S!19J#|ow%3(C)p zz+lTRe+S7&#_5f=QRi5g#XWvgodZYMMzJ-!gVyJXp zvG1ZXpv^jwB_wb+ZDJV-_#)LGEXCnQx^M01etnAW47Z{Cx`ytlH4N(ousl~f8lF=m zq-M2GZ$;fpF_*UDWp)JHk2>lHmeHNZ{82|;BB`K#rl>WzAaCBzc5|^9~g^6qnqK!V1tg7~%FwnDrG#C1`H;PcW^4=YxIFZdtF5 zhg0TrV>=V80{3pd!_ZFn@aB*#Gw{Os#~HU6&UdASOU|lJLk>Hta)uX82Oy0z6B*nx zvQ2Fpl@q4b!IX_BNxrYgSK8q?(1l^CaJ8FTy~4M z2tEr?=7Ig-JzZUT^Qf6l$);MCuWOZ*-))`z-jI@ChTF(*&B*T?qw5XBS0b9=tLbAz zHvu;`9uYL~g3MWk-?1ge@Es@5p`EG+cd|7knHxEV$=Ae6aUS=x%8#>XO4NNiCt;8@|r-jEGuQ^-p|%R(3Ed0%i!6$r^ES@(+`|N&aPq zMpP;P2|p_fOYq6ePgrCEZsr>-#K2q1D9aNWWdTk`nX6ewF0SZW6;pD=W+&vu%!}E?1l-6GTbO_wxnmm> zaFd>`GVnt1Y2Yn;!sD@!^*eE6rOo07mB@(X)H2qt#7HEUD7aZF>qSw`^IS$Gi;{5_ z<5A}T{n*@JwWH8>FwYXy6_E?DHTo#5k<*DizBXTP@W*!msy_i`=`kPrDPH0&pV-wX zUTtPvy}tcS@VDGm`N`!&?8qi>bggwpu+3ui8~bzS4S}~E-Nmak06?>SNT{KAa?Xq; zXUv(g$caXAN03Y>S*XsL8G(rsA8yXfK$|(Ui)xxPGiD5PW}*|%nfC_mIA>;NZ_eBj zJvV1&;+At}Q_84~R59b6nW^2JnSs`G<|U8|Z`EyM9oO?>qqfD3m-8F+iLwK7B z=AhohI44UJARU^ABU0Eeyl?^he$3(41Gz75C)E$P`uc%^rhRc$**$!KD2U$rpYCkG zOUdbuou%vs>vXb)Rl&fV;UXOL1%h&Di$Upe?$AEx3-ghF7byn}hvCla>t=_`J_8iH zxEu{VnMF^t3hX_=Pi)_&ty21N_l;1A+bSjfV`D%Pm(xlTb6=7~`unIfG7`9J=dPUp z;j5b{DWTiUx(pK=c*}iM%qNXMBIdrT(l`3YERz|8hz2T zP3#`OrSefS=F(xMD_>dS&YxtFX=nUuC)Lg{*7mZK(YICN<5QOUHCNUd)Z&YKs<(mA zf`S}iQEMemYVGql8LqcJffm<2w3I|<)#rPStjn75>u3}zl#1v7y9)0)|NpFtsPp+U z+{Q{gQlzw8zofO5Xva2Vmygkc=}LS0<9C<#8s5CGnKyel-h3{_8;0BP=DmhDkB!b7(|6dA1P@eR8YD{sZss3s zR03{z%%&N5HrO0(6Q50d#~14n?yz9-*{~$J-iukiUWvTckFlpupVN}`xd`d@a`gFp ziarc?*WT}6c?k`62#Od!UFc)Z>*C^gnc`Yyj#&y6UVMJ{4dxh<9KH2FCMoKj2T7jS z-4YE-91&YcfV4~J4topU4W>)bavy~=xq&CnaahIz)x?KBnl ztq=`yU&Kc?+M17Cv<)9H`nSbXbVg2YC-HS%D;r(QikI1hgq7+F&`Bz2K6NsSn`hjz zoJlWU1!9tj)V)B0nV&_ze&X;{-L|hUA7`ONgG|b&!TQm!c;b&$szq(T z_Q1+?xba*Y6-*l$ku<(zJD!+GPi57{j`uETW8d5lvYfPq_^lGVi-Yz?5KdLG+YW`u zF%dKSmoVgTd%z)wJMfWNL^~l0)ZdwpT(k=x&;q;S3I9fpwoU+#i}S@;d#5@?D~Xva_NK6ni?*|W zNNpS4$1*k9rH{jw6{#&S7mUT(PIK8XM@(gVg4Gc_n~nF9r4zk?^=Cm{eUqG%A0)J1 zc84+-@(7<71Bw0aJi9u4p)fVx@16^|=R0**1RHGajd&G;#1qOBL7_b9*KBy8JnD=h zp6oNw+$?WsDcUBCHSs(Tc$?mN#gY@UP*gZ8O2BphYJ>F(+@HGa2H*hBIS(I)qgd5T z(9Xo+&T=^;3Luhnu?1eP_;A53l)2Brq-jRyJJ^f*7J7l&nxUS3Tq%^q$Yb(+9?wHu zKl_5;&&G#K8SY+qA=2nn16m5~$Cd)lJBBZovQ7z?J*&b2rXz}hVK$_@c0jo7E-g_u z$sv-#;Y%fQfxC)BX8wrej)>vQC9+)Kedkg2x>-9QSq!c98`SU7{!6$_j^crsAi+B^ zucGOHsF#O0aO0PxX23H!AfYfh;;3@sh?kda#8K9kaQf zTZJgG{HvUb?WXvMg&~#2GLngQN0XsH_P|5=oe91UJeB|tt7YtrNajO1M0Vl#Ui=nb z#y`A{$6C~+hPxVMUI(@$RW>T>Ev^rcNs*+pi%)V8UQ)+4zsk6w`DdDGeuSgB(EyI-3^&nSKTvv$q4@^8jN13j zSWFxfG&g5_iK&6N^fNG@j0jBVjl5!ayaxh*q{IF0l)Nz9=G@xtf_ra0wdR|cecT*# z!oM|lZ{T6ArDz`n5=Yh~Hmh(Qqc{d#sbdr)6ErY-k)@1A1LhMNFrh~SUwiC}C}@xU z@EB;qTyJ`pBt}d$q3x4L2@Q>W+?$k-`N02ZiBI^lz6j#B@@0Jyxy6@dZF1ALF_Z%zn%kEL(QoDzNX1nJ> z5h`Erd%PzCt=dmqMr%LwN&A`5Yk%x#Gn0S=5f7blFdy0I5IhEA_e?U)L7GOA<}@i~ zH505vd;K|xQ~Ba_WDSOd-n3)~Sf$33#xciSG$mCeW)M0 z7hj;HgAJ|o)8l-8J)Yzj=OM>SJjaiFm1RzsG2Eof^ot#j3G2%B6Gqo%W`0USBzS3b z92?yV&L$<`W*)+Z8F)d?zoqt4upYO5#KK#SJd8+=Ch@$JHH-AHs^)oTv%i@Rq3AtG zY?-1?wnG7txuo*o1fK^_CwYJaY{7dS5AO4M!1Fi+bl0}@ok(!JC>Nd*F7(!KNpc~f zm3^HjcxEF-&gvWWZ#5X#isnpg;4Q}+<`arBq1WI1X~1EK^0dA)`vp!p<$Vz+IvU*X z(*Uz3hP!Jgw=&Y76AJ7XE;Dx*sgcgW@beM{JA5aEAPCk-XK?rhi7eM&OHxj4uY&ZQ z$)<0^CMKS)2kUwLFj$EAPQf`DuVyr}7z2+UCN928GI9UO0-v3a89SF5VmsHT-r^MX z?Bpm7pK2yeY524@@aaBWZJ$%nruR8Md@02ThP!L~_@an;jeNo9$3jnh?vyGG#8y5q zFsxDKwCP|;Ep`bF@spI6#NL*I!D9&ICrD`N>~pMeaAhNXd0%Y{nCHuY%Fx;P(^K0O zyVhT2@FWQ`_G=72A;Aq)$@kP|)%(`qI?g=KMxLj&RnKR#<&w`75$#tpuxPSwjSQ@5xl0g##+{{t?n1!ekLRP-l``e zoAhM0v*-&jvd8wsvgdE^T7npij)(J+i;lo!0AHS%Jh}QB3d3AJ9#zfiRf`O$hhydK zc*3XS=4N)R)T55fXJ>2w^!gRiY+k=2)=leI(jq(F$}$&|Vf|{suJII1WRq(o>JvBi z-kUxh^~}@BuFpJ>>N5_tO&P#EMGpDCGdHl1ZINqKZ&6jWjbY4#|avT~_ny~OLpvjv) zOY0QZnTIuqoT5Cj)?b{cC>Mib(Moe^QgIS1>&D?!#G5N2%EgH->nfB=#nQYkTUTw@ z&eG)KWCD(r%4?f-3|2<6c+U*Mwb?bV3rwi~5p06ZUYb&z!lcJ&($0~i^(81y7|=7Q z{lU_e_8x+lfgtW zSI!c{>~S{L5PMw(J+`z1E>ogL^|yPi%FC9x4ZiECw}e%$-px$I~o(G=mZ z(|GGB{VSdn)d%T58;U;{RVmKt9%q(+Z^^+fORVb8Jm!q8K^=s?^nk>20Qb|>_a z@xQU%3AoWyY>Y1^pdxFE%h|hhReL#mobKmX&VJgf38*i0Y|(F5p3eT|Y-fy_CAFQ09^o1g zhE*5?Frax*8Ew;r2nI}4xqe^DPJkxrIR-)60OW1Jfqf-fJ@UPoc$Uu5i zAt*BkTy;@>{@LShjP;BuxX<)Sy&OHxka`=eRu_o6>%XQgCu9mM(dmfLV%0AvdmfY6 znQGghr^^>$3^ymXMz6=9*9nD}n{2h7j^l>_$1`Ib;c#gXCE%(Km+t!DZVp{3e{Fcm z=11`z`qRZB6xwRCEpXsq=i7C`g?^uh)vR!SABNk^w+kYsE$7=E64hqD-6@gStA!@E zv~?5r>JwEvf*LthyVK0K6Y)CVCMYrA#trj?>0a8@T$>T`e8U`v)VLo7QEtO|3S|-nY zbQYdg$Iy?&fA6wv-5uYi0*%yKIEVW?%3lIY#?~>)Sj~2%#^f$ERT`Fp%bE;ZYT(B7 za0k`Vm{sh~bm0jJV`4r*5jsc;M?m`NBrK^?PF6B}>7 zGa;|(v6=03x|9?73-k^eGB5!*V=&Q5z>P1I?N7kXypOC-z)gBKDFHX-6G;Ov1h)ep z*<&A%*~C}IY$7OQHfwfcHqp~DJ2eh7A~}DFXN|-~$|SO8&IL`O2eD2%&|NERj6 z$BO4d#~b=4mP%jLb^V!;9BCBb)L+~mfi$rkLRDhi=&pb5AvkjMoX)c47(53jWbA%d zQMA0?q`SW4Ii$LW!zX&$*}z8oP$oDX<-X#5KVqG6^;5qbo>6@RX{(pRKU5DHTpz)% ze0loNwuGZobafZ{R~2v%MpvPKTt^VB3873Ow%CG{AHJT;k*q~r6Zxq_Ymj01VD3f{ zsEo0pd|z*w(?4HH=^uu>YX^qXDrX*c5Q_n#==(D{IYIkS*xdF zYsaMzhPeNE6VjK|R_C1T>)^QvT>KX-+B%rJ3tp^kV|-b}Uqr2AcgK>k5-%KS;vgz)BN+c|`Xn zvoZs3c~2_ySsza9O<=BO*G;?^Qw`YYJS2noH~7d#ALJt!MSNhO8NpNJG8a4!YPZ~n zCFj^!O2ysqZT3;2leOAJ#j1Ew_J zXB)WlOK-qEkhx8BM0e1Cb++>Dt3KZtXy#kBCEv_mC^jg;w{xW229Zs`jV>o<3HZ61 zp6EF~b1t6R`$ZyKKF6AzwTsqeb)v~xzU6!@4=g<~ld(2Y7+j0G&I1nd+0p1DNNuJN z`ZdS%0nlry-=?N(BzbGnqaPtlXVh6<&U*IqfdWf2uB|UCLne zZ%Ag&!12DGhVslv3i?`N{p$dUn9z^ulfCpf#&|T zWmEs+eDr*!DN!DJ5bA#^fW5AcadPH(sp?3k>B-zY z#kE}m+TFFdtq`VM|5581liEqNH+8R4gKbU7tI;_`*T4$_=O3vxbLMl_9}_oOfAn56 zqJ_yOlg~9yYOUA)9N->(6j?0&ssj0#Ky;^qLOu?N+Ft7C{x_AICw#eKpv}x{XQ9zr zzsaEe{lh9#L@Plj11EB=;6%~DTiyf0@0MWwC(Pkn16NvKL`w?yL*ZuY~(5Ah6 zj;*~}Ir4RZwwG1v=V!i!g5&$L2{+#}JPpN;`MzxCGxW#=_d%Zgdpul!I+POdNhGzl zl=@`0!sLZM=EtCbU|+#b*v($iAtw*rS3u}o#w^Z!<%3_Pi!MfKK@DCT1H6jBPZ1c@ z=DVIM#mHyuB!fGm#)YJ+mxcO3W$r@d!8d#!Fwlkv`;LJJxWU48DaNL$tf>56r2J%}gq(g<;mnnQe@x*l#=r}~xxgcJ=9=ZX z{?9^M_J2ks`hVD9!8#G~rguEo!H7g!Z?`7uCp|dN!UQ3nzuA4r7}mjd`>8An(IqG? zsO_vD;eiVdG83l|!MIdX;F~f0O7LhO%+k8Kp7wF&`IA1+84#YEEez^`l`RbK83WIy zUF)H2e|&L#p0N42n9ppI%3s^`oBMLX1~Pp@kFk&hzl|I)v4Lkq?#ww{rU$z~VEr@~ z!@?z8@ItOJp9y0W6+Y#HJ@E9`>~XK5^j(aP;6uyvRQwEdbQuZ*8;uDrALzOqAn6OF z|0k6G-}LFvK$|{yyz4#*d%qx@^CV~%T9nQ)@Oiu{9P}?&3C;x>aF#=Ufer>vDU$wwaBNWNSI4Oz7RGD zH@f-+DYE^yXWOkyEBdM1iOF|HBztQ-b6~x0<}ec$mW=nnm%hN;@cb0;ZW{e%Ubq5T z-RR%B8DwH5ASyl6)))`{sb(m^Vj@_wWnlJWjPLNabAeGEx<%wl6d+4y9o79nh3E=~ zbw8xBDI7R7`zF1NiSzK6sQi)2+9xn?XP}Mz9X|&7+X5GyU|-CMND8GdGz#Uur-Yuf z@_3-@-$tmq>nA!8h5{j9R%nKyfGy>$oD@j=ADJ?t2L|+<4#}N>U#c?3vJBiiXB7ML zSf1E3EWl1W<7j4=XyRh$n&Q5*J|N1*erUh12c2CY6ZET))yalP%clXcRsrvR@{XX3 z>|BlbfGb^g+M`G1r66;NpGEkanOmm-Fdh2TVCr#4Udf z%AzKB$7Z!lT???&@50pU0CD>La;53hK1~^DL(}@Zp{enI6ER04-p3&{^7i6*Yq?Bo z2@;cuZLr!chO!+N8q2jmRbPb^5Fpwy^HHxa=b53u;LH@LsVk5Z>%-{O^+(vVL3VLB zU(ejkyA*j>D4jTfIN4*M8y^l_W;`8YhgAQ7a)-|rI_==^vYcv;j=xR&b^spA;j_j- zOxC}S!5yvv;>7x8!PnXu7?4;4KVZ?}E27__zyx zhQT*n@Uskd?rAIf9D{={_<05ocEQ^iJl6$pXYd9Wyo13fUGNJGzU_i{GFaTpR&*DG zTe{%g3?AcxUu5ti7rckTyIt^J248l;`xt!31@C8YgS~ArYCKv|)lT&c49ZC_RyXw#?9AA=Z*jYa$ChbmL7Pwk)EpmgH7D&fZdp%Z@0 zb5-VZGI}EFxdLs72NAPfP)3-CkrZ3Pwz58E>=NRZBS^9?;}p~x`UsNg_MPhEXkhde zhUFVN=1egU2M<2%k1tm$-M-_~je$0F`|ud(rt`}Sk#cSG%Nxk+yN&8$8!^9R8!!$M zb;VQrwHbSuDAC`|SjAik_*K%b28%K9mitUuo*km%5sanD2*&JIHMdr`k0OOn&rd5o zpY!R-KpT2~Vhr>YU0#8Fyx&{<3o%#H34vn3`2c10YHc@xDyuJ`@>o_0H?n#qsvfhf zGM~`VA8NjuYWp?X_UHY!Gtj2(m;TS&t{9}+PGGCH6aLS%o%xImWr8h1V}DF_w&O3k zj`|pqx;ZE;Mc#U)KHBJOh%)O1)K}Lkt;iiWwldI$R#%LHR{mKUB7$88tTf?s7I;?S z&JMg%$5O^6`j9!#$U(>jW)GfWASH ze%3sFWZJuYH?2$;oy-l9sMC%^*C}6L^!ds_8@^sQ2EIBz868N1B=}@}#B8U5Cwv2J zY{EA{fOe3iZ-DT3;~O{>?Y>_14XKx?g8;3A-pbhjK)9)c^WnAnA2?S_tv9m$R^IaP z{^s;Y$f(AV&0h)sF|5~)N);}PeDov|2Q}yl z05+rF_?rX-h02odLRq{K+(0^bpD$-OsGNP*moo<1$l0y$M$XI}hG-?^>mqtg5(pXLm-q517&p!xB*eT4VwLEQM6SnQX-lOziU{HtgL`)njA z=OV!q?iR()&WFrgo=FotGrVNp1l-t7EGz*x=~=jex4ct_^@xSUf@NKaCCQyS%<3&L zdAji?rQi2_`Y|B%YxZm3KL+~UYx^R+^1q~S_ZO%g3*3AdKm7wJCi*49182pFHC-lK zjbl}ZKZyC>&4MSs4b6?kIsD)x>v`~s z2k(~mjW=Q%?tsr!XTh1-z3}()zOKCgLf*B^pUAtG`Md}Jy1ZX6bzwytL=x8 zk4*J4dD%Ww{fNA5k*V$_FN2xtG%08OOtmC0z4h1L!MUOM)I$At-iMLhShfmF@?hZJH>@#wi2O7dE&AW2(LH^)sQiB4mtO|DYxBcpJG%K;$M7S9`&w3hDR1L~ zZcuMW;wm5Rmg)e{1nU6~X($HuM=(hWhmM1G=$aJNe{d~#_+hV~Y&^4m3SH~hIgeTE z=LArTLwWj5uUi%WmmU6G^jUHXKIcC2szQSv+ zzk>G(vsUb)`#Gn7_i*}WkLX~dM_$ez`5QgpaL!JnCe}NLCkC7BsQW$eO=RbB?S=o} zBon%_%NiMAW-&z!ImQql2Apr1yQY{wqj%-71(ru)(Bsl%s^5&sE#-6XgYY$MFu!CX zU-vq5)7JPU7 zXs=OS(YNZ z-P>=M*!7>dpI|qP&m5Sux$3u(90Rj|{#e+RRUYLcG6r^{`YX)%$`pq83OC=FCtF*= zSw;eG&e4)N3HSx7-^ii_+}HtRR4X_+)(TG6wStp}t>9#40&e^*gw45A3YthPXMnVlKJtIdI|dbZ9uaKzjI_Pz=j+ zsHUH#N>TuS0Fv+PKL>KS#}m|H-najV=Fc?eb3_TmCoNG7FS{>Mw(20gH+7gprr}jyzK!~M%E4rO z)=d02+j^g#$64swG~797zc1B!jdkWo?+jh<{7HvMd6)a%E`4)2Q4rk5vg3YAag=^a zfs}qqk@RQv6vpcB&^n#fQ~qoaU6tZwgXpW24jV*gC9`c1y_LMPL3CHL!UoY_Nqrkc zhb6&GaI*G@$&m>EI_72e(%YN*SvkWxvpZzasyxrVPeM4L10r(N(_Glxrf;m(Z(V1WrBCwp0 z?JlUFThJQdMuyzv>K{-r24l0W!G!GC`vt+TLE;$sR=K}Z;UrN4zNe0*tl7Y`!NI`O z?5$zNv2P1Q7XhvOXN0%*pCyJa=-sS*drkaW@u~yyl|DfPy&;QuRsYTgbI4*PCgcw& z?{+-#{rKynNZ-$Km-6=~K7Sc#V@Lf%n7o$R4tY;|wDlT>VqpFFcPpO=R5DYz;x!Dy zjUWH_sCvw67|bX9<(02A>Z%#cC?Q2YEjCNh;)_a)SA1G9Ahd|r;BeCr1H&w_8^`NM zvngeM!1>88DtD|>t}YPd0Jm~%<`0Z_^12`5`L8@2qN?SCh^y%9MtGg7uN&ian!e7* z>vVnH1h2jNx+z{~=<5Q!g8AeR#})N4n>i%c9t~2AKM?WvC_Pp?dTcMPubJuWx<(`j<`^e$e(vojv}Jwf4@VdOQ0~hh)LomBA3NPLg^7V z-9zcg1xsxy7sl3R!A>qX-!yuRg&BA*I0f+3o?4b`N7@DpX|Y~IupQ!YkG>|ttUa-) zL$FQc@1i9yDW`Cmwc+JLZE-Af&e?bO)wNw`_r;6|WoFUoFK#NV^uJjw=J zfgWFxGcj5mwIz$2!s3iJryw*JvRVs4{*+!M4nl8Ve{Ykb(F01OpZhdopbd>?j+I7S zYkyE_#45E>+(Z_SQ-qtA4ZoXliusz_wQZ_hU)Fa0yWcJb+O%u-yJ?s5slh6f%+me7 zgpbOx9~q9N_{DtEuI76x#hBd=@lGj-F}pn=W^7`ge@NT>n%`yy+O&Dj7~1TwnM?iI zNGr9t8(Wfbrf(-~NhUV%miJFGpY(Yq^jAfwBkO2WOC6a7=Ftww;mEOo%Yr)!#P|ZQ z<-oI(K+KwzKz0U1_2_i@PAT>1bY0V$Fo+zxAl}!b4=YVy_i4&N8=BU}KvUOGAJP87 zh9qcb))Cp91l;(#*r--;HZ1|i7{fh)Y?6WJf`dR)(Yx_?by&affECJIlQqa%6^m@v z#4NB`6TjJHmh4BS?25!#eBzm*$|e)+X>8IO{*Y)l#JW9dUr}1W;nSLdHnd(a23pI< zMz=shm?gd}3szaJ-tprdUB6{qD>@QaN5?HK9peFt`I?EvT+PHnof)|Ux8>Yb_F(Le zjM&q*gPp1Rn>zeSsZ>Z( zY=G)V+P|^hC*0^q8qm!nTC5*+pT=Wa9@`ktGjWE40IeXB3apEia5K-OURdiM3i|!O zrge~Pi8=_-I&@Q`t%Gn=hi+LmG-)Fz5YT@GUU5IhS!{aTOTbB02~DJ&bXTh?pN{ z#eSGYn)CaKdG@}5`?l;igeS{>>GxL#+Vt1m#@1g)^EoI6wogB)GC`nr2P)>cPZMtX z^k!@6(`p}>xjXY2of-x=V(pLr>i1B#WH0%Ch#%pf`XQ^au#3$FT^g}JBlssBae#~X z&tE2T9Oxqcnv6KeMP%Pf;sTl^?T)IRDX$@#=}czAij(?(%SZ=Zk95S;lzS|; zvS<>}X`Ec1IpWd`&Bktp;k`jGNwQPDgvP0mvxNhv_w%Ogi%&%vb6z-gI-2`O;JW-Y z#;qGvkFage1l(@(d+vz{%h6egF4KAl8_V#TzYIDM*Kjq?MgVs>5%l8qVdEUWXc$3# zsVtV<#(L-v&@0#Ac;(>zs*f_VEeBP>op%o^kCw7XNp|t4fMmq_O!zW}rAm#LFzXEa z584fllJL2y@Og25HadzJp3xrykLoe3a3l>lKMhze0HIm*A-frg@kW;bM=huJ$Opbdd~;-gC1 zgJ`=Fho=RH>ZyqC3gywA@7rmku0r48Vkh8pQM!?3XG-*4ATKrtBvZeC!T3VoCYu%t zeOs;Jty^#}LVT+yvqrFq&8tlc3w`sKRL>JwIl2@u?Q6dV4$m~>pmmJbM~^;A;4f<~ zFDQ2Q26==K3#1iSn7N5wE99LQn$_CD(Btjp>&%^=K15B~|EO7S&uuf_uc5cN7oWav-GthHPrN;w}IQ zRUd@DXV+s?5UkG4#UJTk_P(&W8w9x`y2a64tY<28>0y1;@xcAm*DjEDezOv+)E|W8}L~=s*YPhi)1kpBO@TmmdpfBz~ z)4c%S7FnJp;_;#zFERmna31e>!`Ihl9Up3fW5@RHk9pjWwUNk7M(QwC$e2XGuEteQ z1Cb<(^MQ4tb-zQr%3Tw3xa|gnt<4N3WII+Abee-pt8@8|Rr$)|E?5MW#p63B6hItY zhCKK~Y|&oaU6_zx6LL<3E;aZyxHP+9DwbDiTweug3&q0V+lZ)eWwWrNviK4i?DncG zKE#y3646-(SK}(~GP0WlS!@AcX%k6NxJi8QRjDJBtOJ*cqmCZ7VMfr2jEh%h3oDl_ z?#UFOCs%b=j_*lgi+jcge=s4321tz=R#jPCIi9%;^0r~PbA0fp;A?4qM{p;!?Q^7; z8L*BeG5aRU$XMzGW^>WsodVz$=P*_}3zh4F8g8EKER?U~#&%GxZz9@EB%Vhm?0uJE zoY4~7ucLB_RlkM=yEE@)a@qNoWKp7)3B?Iqw9yj!CLZ3g7}Y7Sq!!$TK8W3}akUeR z69?}Kt4Fc7s7)|+aVZ~86TG2H`_|F79BLk5b$KbxZ&|Te9Q;+-;8OhTKU`N+Ag%!mPAU&%%3!)(563k|SQ|$YS zeGZP%T$og39sR}r!N;ItXbp8<6EGZZW^2)DMFR-TSu_yv-?*o|!1MhtG3OY8>msDNN%SSU_3 z<3b7IJI{>_#fhbL+}KcDXRU(+bsDAo5>zH5hzuDO9UYD-^_X#?qT@nP9A7!U*mG0*5ZvzH zDOX<0mj$+Z6KXt|QmRx+Q-e;DbXsv5Opjuvh@M@+ox4md5>FsH$l(MRr%pW_8I%bW z#8H`mokYTf-j$^pVR42sVWwfi3@~AaVZ!Vr6K1EFFxxU=-Qv0)6K0qCVmd)r@#Q0X5Lz9f6j#(EUVMAsg0xFiTM39q9cYMb*;66|s7<{HS!R5n%ff%-`R;&&F zGG8uMq5h?}&o9m&UC`zkL7TU-G#C~KRnRtC$de^OaS&98v02+2y?xW9plzBGv`tH! z#1gg1m?UaJalzncTX*Y?(-O52Bx>VhOB)5njf_OiyQVluiQ25V*`kBuZVfO}h(t*W zN>mNs=Gc7U`hVx?$#Fci8T>Su^c%Gov4Rs$8V<#F#0)4q>8Dv^M`C>kBJhIfa2}qK z87S^LF0aBQ;|d5uZ3DV<`DWS9cbGP-C^z!HSQ2VL%?w&^nEyX%%Ybi0qm8VXklJFS z7lY&VPrz~)R2G4bD(nodz>WHxapwywweVGWYv$1oY*nmw1szp*0Pt??&D270dpwF- z8C{9LsP1xoT*ikqDO$0q zRZ!^4Z}nsH2`I4iXa%dVEhHiM+9Qiwn?k);OzP8Sv2UD)bglR|}AS$z!>IALtTYB)yTC9B~Y z8I9Faq0j0Uk9#o^U^%*)$V}JPsfQJopLn(E535iU#Mh6&K|6iq%si8HEoazCM!e9w#B>vrUX8!a{U+4TOFezx6&xcjW zXJ4l{(V#}49N;G*EF;Q$UM8sZi!GlyyerJB<5eh=S1&15ujK_+Spqmfiop~v@Zg?6 z@u76(r-;4@Ym+mD?Be`)%~TX~I%xGD7yR#~j087Vpf%i8KM z_h4{Vj|OX1UNbD|1OEcrWPIRv;MMuS??fPMFjjovckxBT;sa*{q?nI(KJY?tH*D+| zWt`30akkXap9S58o~2Ijy^CManuQrUK1{VZQ_QZMm*-!o<5|bA;@7GcbG?`|Ue5Pl zUbr91hFiDXUF^WfUF_tau5#a+Rrp+2ZE;ZSDrTpw;zY36Q7C5NjDQ;e-#lAc>cQpy zeB-Zj!pc?r%V|Ytv1cXzD0C(2!Gvn?`;xK;PO}&T@zc;9a803~?NTEX?f_bi7s@!W z@GZbmOJyahsQ`nOKxIictgT|XG^t!FRWNz#C>B?iO11alTWXc#ITtFx>fy)GAclt` zv~gL`nFKG4A~tCy(1O2MK7)p-HeyPXha0zrk#p#SC+LP{FtZfZ24# zOyWzJ;9JaC$24Fz4Kt@oX_jC%wK#p1Y{n>dbricg^K(jltBUx)GhgiNSowke0LI|y z#}qp|-TUIxDvVO2lo9$ie|-F2>xxq>J{BU9cT$mG1%C9GOS21b6Lb{&SC(e0Xh=vz zqaUKtPYTc0b|B1_mN4lO(daMEhG-OUS7-^-s6}0v(d0#@RVFYgie&6&2b2-$2nGL_Qhnam^7%{;a{JhQ! zs>Ld4yfv#@S9;URStpcom11t{5vT-B$rf|z9)%gt;7cfZVBzhwrE&LCUuX5>YSD3R zo2SJ&?wGZ#+tKOOMAWq`>J1a-qD&;JBX*BO)E)j>*4?S_7bVQ4D^;@(GCU=El#g=s zRee0hN8bcVG3SM&?Gj(~4Z`DPse2fl9Nnvr`}FZ8JTiSd4Z$CX%j5eF*B2~XT_L7g z-=@)*kwQiWjN$p9uXADu^|l7bMo4i4u*>>0EUWq%HSR9e$7OtQoh1`ojShb|$s`TW zESASn@VT%V7!=fUg)>b6c^M^O+=mUe51Le(DS`eqC~8dzQ-;>$C#9wYH863DWBwm? z?*S)8mHms~uBxu?>Fx6fg^h#u_k#;`RsFr^o^x(E=jK~gGN#MfB}3$U zF>7c^eF*HKh4;OJ)^x3wt0+Y+kKr%%T}C7k0+dUWm8`lPEgQNOEnMIXy`nn0Ji{h+ z=QX=`Xr8O@Z77W`lTIsQN!5{HCJsa#G9l3DV~qI%4tZ4luGF&pu}k=X_b ze1?*#vX4r$Yg5(b8xryV9vZ3jD~oDX4ZAQ@%T-NO^~e%~ky%c^n~X*(x`VR*vPG=3Jk?6^_=&J-TSFYeRt44vrSP*vU4dSYj; zuIL}p;sW=Nu(&|WI4;{ad5F4CEj9m3oX2DE`6TTq&ufs6fCA-C(rKBI zp1jORFABF>i0B~J(8^sU^&hGevaNn;(k~n9m(lt~2T4x3OPNK>wcv`VF;c_C8<@R@^h5uREDlNp1oT#06URq4xu(&T~8Z1 zC3{?|9s#Lnjr42{gkuZ~*W62_3*ln#ky7$Q`lG+%3>W=F5!6KM;#&b5F683;bpy^gV9~YXr)OG z0%&RLH2~3}RbF?mVvy%`uNsu{D!lGZ)d%vb2D-LhuYq6~uxi3mnMR~atQOWNqiNOP5hBAf9xXXVk&tW?tqgRh`D$7Y zzzW4$U5d0NDeZNa!@f@4=gflz(7I-#eirpQP^2jGPI0Vw^Xj-q>$=nj{wgSJ3}&E` zT2=N)2b$_vh0PJD8~hro3N5c8fB!%S0DB2!mdg$~^^URj^94e%A7zt9$_Wp{S}IaW zL6iTqD}oT2PpleNA~8=-3->IEChEWPD!QXWVP<~B4OEhuzUiTT(?j~E2lq`6>YJ`h z5A>p?wb+W$atC;oT$tX(8|Y>hdYjBUvhhd+*11*sN1Zpwt=2yVd4t_9`o~~zh}%{F z7~&0ev6><+GiJTkuK?sEK1>E z7ua0rm7sJs_co`+GyF`K#Iaf%;#Kd}*S(2_46mdS`x-iV@$h;IjSf7F+A-|mMM+W? z)ryK=XJtTMtk4K=1cqf?9Wk02S^w9cYu7@lDsmJQ-%DjHb2F*U2`RIMw?*A548Bl_ zvC{zamFX?LEk{m7)XKD1neJ4H1;z^LOw(I=TLs?3OV)_#LJY=y1aH*iX{Gem-qrz$ zUcn!Qb#zQIj4CO?TCU7Ps^Ne0{#N%Tg7!mMP_j$rrMJN}h&Re}=B2ko`==%ywo7lT zFnV~~Vi9N?Z#y1Sq__9BuY1cImGQR2IzEl0Fv2rJk`U71HPkIBvct+uif`?qMfTE6 zx(pg%kv+b!WS&O03u)nu|-9s>g zlc+2+^U{r0H?Ps~9xaG*b+rV%MwkI+&lBaj6WHTn zwOoywm|I9y*vefiAD7XC`g^o5>=(2%uTx*fv75+Rs*$0zXA)_AA3;>8m@Gq|F-;vt zn#sV7C;3j=?DZJ}n$k}FmDG%x(3Bl-Ow>;!%tddPcSnNVQ~*{BO?O~IDT>s&X`*N&CYu^_S0fqZ4(skw@x3VTUSpYXc$5TM zJN=JkVlUP@WtMuS?aHLxEs!~f^Wr~DC+2F`DU)_`wMwVeaxZetYPk=8hsLdz`|+gy z5p8)vmi0mn=~RC*ru(S)P)Z)U`m{L7n^E?V_lY@lcbgnjVgNZz<&`}jb3&8=TRxom zi`9#}*sf}f)ogi{f5X|@V8gjg=a zw!uWS!g3LrXfSe$3Y&sa)u1Z(v18&vOwqhad}_YH+ni;nztn3=)nYa|>7|-KMRTx} zw%nk%?WLFqm6D3)1N5yx5?g2&_QjzBesv1_>DOpse|p92P&!t>8%+dxF%_LMhYHcm zk<0B#%%O#Np(+#O7Gjnzk?+I})ey7tP1(v#Fe{u*$X1q$6lRZU+Y&F4Tg0~4L6OnK zJZjDh=x5g7i$53*$;l@w1TQ|{OTg#ND*{W}10kvr)4!5Dw}cD?(fg*LUf z+7q!~3s#BAe5xk-FjrSa^_(VJPFIy>AU2Dp;iy!V)^8Gs>$(y5Di>4llSa8TM@d06yCLeLWQI8N z#vhBeI*z=Scf82)ayN8l-(p*)-L7(g<9YGt&4)eTJr-GuSKK#jz~YCJAUQ>K?^9ZVgzlKs9htzvNyZjup~?HbuTHHK>vrV1=IZ)2${Alx&QU zXmcmAHCuq1_K`-W;Q6hx)uGm@?zUEigU#~Hy=q<~CRx_WPiFaInZ=H)+4GE!%wjBG z)_p?GNObWsV_-U%eaLVPl;O1N_!B@~#?stOqV`lYO6ak4MvtX0Ua?Xe^D@*`!QUkQ z=&lO6DtMI!m63|9scQMg+Ry8i9JLYmm9z$af zh?Si_%;AjuJ0Y1w{gpINLCU5w$@*LIF5)-?(O4>_Vd+tb8Zn;#%E)kpBhDZ?L$P-4 z2W!Wtu`iM`8U17|R}unO1DEIZfO@ojbSpG#J-nXPxhtg0q98b-#x(A=Y`;^2nILN6 zDoI1dTvaqyXTm;e;wF?<+SN>ZW<6|8yxf%mysSCmi9lr}P^p;iE%~AiGMLx9DcvWN z?n_-*d^#(Q^6TUErNbRHf5GOE8k(P>efK*W0=C1bXhN4?GghzTD{b!P=-4hXNvTn28B`7c{@s9Sx;6k)8*~b$+WU zq)=`Q^aj?wrc!9qm#jSyngm^i*nC(c=G$TyP}5!K)eWrI>56)^A5XTS1F_9SzEw5V zDj&Jn14U@kLe8VL%~GUokT*yY$7mYdS+)^e%E0balamlVq z@=P6R5z(6p zB0lyXM5H06QI)28H&h}W`Y{pr{0}11;M7E{Y86rTaA@qW+0t@j7}{(jnRN z;q1vXIrGyr%O(p0-4x9F&`&CjYeBuCNt6dRR52d29x*iF3B-*055&;;$E3zxj~E)? z24dcZt!-#(Xvky4EJ4I|Wg7Y+7^Njvn* zje8DepA#jr@>8FGHS)J)5l$&YXtDscM{Q@SzaPBSP!&cZzl+Z6T+vz|c=driA5em# zD61OO7av#Rg%Z!jfez$8MrOSJr4NG8IS}+hD5DTuL{fF0ISPrL3*d|tsyUxB{A#Km zi``XK>5AG}7$8KEUdaT>IdYC%D z-UBwKmiQ@UHxd4h0;kDpA@FdSG8!YxyHrA99E9k$iq3YonNF*WkELz<$D4fY}J0~4!F;x+Ae$rw%CXEH9ew*Z|H$9_Gm#_Np|6T3aBjn&>ANII0ZvBq}}3gI=oLl$7&&19y^cw{kId7leJqJA-U*c^e;sthgk#)aRZ3Kt4R1y84epjx2dk+J`a;&3uudhT4sEH4P@9-` zA!Ia{fpNIpHb$Hs+ljL&w5WwYC1vxq_@N?^9Ex)T-)+LdM$Ts8IM}Bz<4g)NEO#dE zM$R9CQ(J`}DQ|)bXGzJ`U>#X|V*=ua%U?w#8>yoT^l9 zKYQvg@J9(3jRN|Q4i;%J0Z7qZ$>azy!B;fm112HcegdAaq%DkA%g^RrmZ6m2O`h9e zLNrQ=K)wv$QsyOxKZ)`S!et#;#rpC6Gnk|%8Lqs(Wdhp0WK3!qt;Ae1PM68xE>a(2 z8Dm-uf8-AiiHGK$E&lG|2kVuATIE!h)|P8V7?CDQ>CPzBRe2|DXDVNN9eUEWRJ3C& zq>0KjT&$B0RK{gG{EKb0Z6493Gn_}bl7lYWDG)#PO37E1r>Lq->!$5W@*5@doZ$Qx zX;mk%E5I(C3J7Q3@E2-qi6FIZwGo#cGseU_6EC z(338OgG^+6b7U}bYX&e;JIW}a0Z@elcMZ%r^@>ZNx%Fv zn4`n7NFrwQH~rv^+#vei*ck$dM*)?ej?9oUg@}A7;RTD{ z*`e)V<@Sej!@RYXI|a95lLH`~hC?Sl7i8tfBfNT2Q^L(1P6SqFQr;&2di`o(!!)c2#P0Sz+>*Yj%;3<1mN5iMLNSs43La)^j|X#1+d z{R_xZidBTG`cG^aAAo`?r;=0iaT_78aZVO-^OLBVkwrZ*X}g(NeqY>Z9WGI0i`SD@ zdqW<*WZ=BZocz%s-WdMQ5@&G`TarhHNst8;pp)_yQur|a?p%0;9+ibh<>N8= zcw9c7kdG(nq5LPxB_`+;#8q5RtQKM;=Og?r_OK`CQkzmyV~cixj}GG`2yLfd2tei` zW4wy})FiEi6=`8TT3C%1(xSOXMz=gvKgdUZ!g*!OD6&(I@Uc$Si-{grC>DTs5N@~Rv3Q2vTzwor^7 zjXlTajzo`17L1Os{2)T6Hhh`1g@VABDO)I7^BL=NlopQBLIjY)^eq&-`E4yl+CV?#FXuZpZCKV{ z>6UjvRMq%bxv{&vFcJPpM2)%cU38)NeK;O!ckM?$BZ7{&M_wYGfl z2wUF&3Q{cTVG5@1IoP%%4qk_hmj2im78ZmHzdI7dwCj*Yo6*Q;oCJAaQ<GhOZ;^kr~D#^uI|MW8M@3Ann>+7QhCvC1(Mh^N+e!3u1Vsb0w}@ zy&zUa?^t_xyC59rs1x-MMW7gV1mZF?Yyq5)wTEc7j1D(9_Dwsvi8bicVbMKXK`Zuv zTnWL-q%mr1P z1}ZL215$~!nN)R^sX`wd3B&qPH6OOfc7o@{+R(^hSXFT{p0mWkLG>k0wdXEzx_GfA z>}#T8#{Um>FYBRFz0{^sskG7--zZWRlo#y}EKVz(C5nM2NGq=2Lw!S*<|a{nME&++ z%n6t)F)+afMa1L+(inshT`Y?d(s99@B~Wo|%$rv=Dv!ntKhz!_SMlTOsgtLx zr%qfrxiWF8dUDE8`!zG82&%spY7~JfY0M}BTheh&!eE#hGyGtgIDDqU8;1MSX^du8*}Rh{&i2Jk7D+$}3DITGUYBJjm5s6AgOnN2o*w{WDM8w^j*#T`m5YBEfFBOse z`cOn9C$1#oC|R}-A`&m<*GaE_P=X{X?@xLSL`2d{MT~+9`w*B)MI^m8Lqy`GB9dP9 zP=X{XC8)9T%C!^3u@StoM<^%1CtX1~tc4soHX)b8E69@Z%Da)%uOR10rQ?-%=ijms zpfd8xd%#_mQ6oSa_iI}!J=>PbMr})_x^1bHwk?%S+Lj8ergf>{`tR0_W|y|5(xYvu zkoK)grM69}^lV!wz1tQ_ecM9Gv{xuW+a$|E77LdJJ26=nvRF_Sx>&-+APWY?fP#|k zm@Jr{vS7F!g99i-JBDpM+>X)ifE%zeyFJI@boJs(oNivp5~sVDSmN~XlDcg>=zqwU zpuH=rKfH|-ph}JWQw;*;pK1%JE~^%f@{bw-s@BNACU!XCYTTqMc94JMiK$`-`PW2s z8|AJ&IjoY2vM6|o!QFXDQUuq}YwwP&`X24t=cX~PJw6PRl%W2S!lG0+35#V>Cp8^h z2FWNPlad&jKKMaU7PV5#h0`Dz(JahGVy2l+W??Uy4(^N-pM}9_eqc{BVp&*>#Na7( zvv1_$1|Z$U! z_g(&q3Grh)eV2a4eV1Oc??QWybT1|7yU^A2f=pT9B@=v!x5to}DdQknUt>%NO9F!hh1$kqv2gcyjVG+{N)yZcqG9d8IC7Hlq7i z=0YsF>v9*8amv%Ha3Q=AJs;17d^z6qyiP9EkOR(696_lVPDkX5!Hip?4k^@o+qK;NC=taDO zj#gLl=RiXJtYPFR0GWOkx#3oQwlq9s1#7Bwz}~!Uf9OC-R60-+w}1|mM5RMH@`f^% z@b#g5JqI@Sdc1vJkwd=$(uN@1@ius-~_h z847?h21q~LMF?{NRE|DUhB~ilWJv$E210Fkv4Nltx3Q3H8w<%|Al2GL2Ddelfo)Bs zXIm4gXlo)HL9bROQs34@sCpKgNY}O&vT0ij8PL{3`nR=^Y#R$f>)Xae2DdelL2XS0 z*H*MP5mKU+i41IOB3;^;2oI4c)gc=h0=-(~PhO`nk4ep*w(~wpoO@rDGRB1L1WhQJI%1qca zl$pRZjG2V3LKzCI0+u7k63S32q@nO&B8^jL7))S`Iv<3>Ikl1J|7*hs6Aqe>CAh%Q zE5+Z0SBAeyuN;4IArSte1;F1juM_^l&+Dqv>8qg% zIY!k1rqWkK6)Jtz0jAPdeP42ns?$rQPaR(JkyQFk+?Be8P1;GK z^qaJk3`)OAyUC#Ro3xt@O23KDWd=QJ^nJWEb?eK~=%`+2IT;(J$;0?a^)NlMHqyNm zZLR8w;!;lFqeKae!S|L)EJhYbiA$pWtI)kzG)t7Q zB;vO1@xwQ1ex}C{=cM_W9zVR3#LNgHjUI`T!G4M}4|6|CXBZ8otrPM94ob!?Cr`zN zg4R;$Ot;7&z4(JhRq0nsuATDFLoY$;N39q5Armo{RJxRtbEo`EXW`VPj5K+7%D*JM zx`dJtfh<7YWZ~8&hS3vcRRyxts9XY-k)_CMGPD?=8bIh1rBbVe4SO~|4>lvo-% zBe|VqZ$k|wrBRvQhPI?&C@GCf`cXD2)7#LN#71R$8(e0_sDj=GDX4oJ#*o;kTJ<)J z8HFvYxVOPJWG19TCWNk>Ol!!5(3jJBVoV5~If;c#2)#Lpg-i(DIf>!!BW*(H&q*v~ zLUff6&-y2+)siNJ{;$ULpcx%t&CXbmsg0pAGrGW%E@VOI14}GqLFfcaEM!6G1xqYs zLFficEM!3#HfYRP5XKFfpRph_+Yz!Lj2t9gU_mr=kXXosFm{kw$b^ii3Yic_50Wlq zLKtjm%*>vc85%yCOLdioTaqkfK^SjIEU+N7m=X#Zkja&h0b$4`=|TpCF_*-&0a5GS zM6I_Pz+0QNvg= zZyv_NL^gD?;6Lq7Y;5Jezz0v{-o~h?$3Xcfnq#O;H1E_&xVe|H{FRLPn`8A`e)RTh zP~$vnEWaJLvc~d%!(X=58FYJUFKdnpcyW?Xt<7@x1< z=Jhe&ju`JljKPz>MfVV%KTBQxs=e*W*^1`A*lg}k4Bo5ftj3p}Y)@}-96;1CF!a1?(*5azE4-fLC_<*_JS9*M>c zFONMaVU6vT$19pkqWSGmp7m}DGhdf+>_x1bI>@uHz(&{M1ICzllOHby80A@ftRV^V zZ2J%hns5|^&0AFNX5$T@A0-HV-7$2bw$!+x>?J8Quxp5vj{# z*ufiG9utW7xOREpcZlJ=Lx^|k&<*8%2=N}@F7Mul8{W5tcu&>vdh_IP;ys~V-al(5 ziRR}*yc>?#P`xJ-?}OUq{kUe5XwH-e`Q7=*4ds0_@jkd+-dAfTiRM8e-oI&hy?K%+ z-iL&Ehui;?LoCmnxS{I$#PU#LS=^QlpJd8!UWoBo8eXriQ;G3mAzg#M#imCY-ZzAJ zpRM8b@;;GxAKotS&5ky_{~6*vQ^V`!-9o&NXqWf?#~9w_6+zv&Uc>9Z*-j!V*IFv*UR_}Vmzq>T^|Xtyl3);>UuV@JWA^t zPJ5XbWarJtZ79EUh~LqgUr@i^^iA6Pg&60WHSg({QHy*WqCfaJhrW_ zzfCo|&JHo&>G%z0JdYUXJJ9u=5XZ=Jf77$4Vx zuF25&<>ga0RM*Rir7v~0#W?hh=%1CX;qC5)W`yV+;`l5&er2+wFPCps*`3r|b#`0z z)+IYky>-PmML0sY%;nhoPf>g3j>K?5o*k5DB-B|B3QXVtZP78hDJ0q{OvMAXS#+j? zf|y?8iVx8;?pxJ!uE0L!!b!wL?QqA{w@9oQumC3mS~!6J=BCquY5r}uoDBK`{UIt2 z&SWMnk#AM>mf=u*^m{q;LSE5%r3{|PVly~4UE9ZEl~ZxU zK433uqWooJX2+$^!c=ihp_v9MS6P4mARTlb80bwsO}4O>`2u`Ph`dv~L&x3l8XN)$!fkDA%zx5 zGd5rsPNAQUH17hvFzf22KO4$ z{YQw%qLjvbCbAD-m^Z(V|SDjNO#OR7xUgJ1%Y%m8l}8u^dji z(j*TKe@enwqf8icjphGABEXJrD<0{iddM?Xmq4wxd_J~?vbN=fGB^NysFL1K!n;cA zO^BTzNB$27*YSB$&L*6?CI#G{V{%6zXoqcZK9R_5c@xio9Uz^5<9y-)l+~1fmcS`V zeWs5>)mNBWh(&&Oj_O1UNy+u66Mj|;iEx|$#0?Aib7UwXnvxVz@42OX&@p^F%9#k| zwgiTz?|31sC10)#5;)l^wjSY|&B(7xHq%XnzXrzE{6TLV*2Q@{lM81dGIHT;dPEB| z>499Bg(s(;g2Soj-zN2+A!UT<6jL;v4q~O>iF`&>@USZU+o(e4vdF%EmHwClwN}JIYeKSGu0~$Ti+AW+Ndxh{Bl$dXC>hItFcin) z2BM5`$qK2Gsfsu6fJswXWQazf=1Mvjr!Rck=RAZWeHY+C^+o#8Gi6<-Fy%)j&Si#M z1T@|a^=m%T^_xr=(aTGL=*}OU5Oi}JqgEA&9!k-}&X1>~vpBgoASwJAldQ?H=G9c} zI5u`Ge#PZ4oRFF@jZR2$82KeqF#i`QC7cM2LS<-q68riov;)`veyZ6^KxQmFSzHlM#3GC&T1wBb7-z6&qL7I0_|7X#sIe*v3#EVnswHzjKE!S4XhQ{Gd1JZ%nYQho<`g1YXW<1bh$Cd*$q zHsQamf8h=~YH@K{OS~sHTFpru3d4mS_~0`%#NlGTkw&Z@P$h<|eS|Ethk!RdG}G=w@^LG|ai}N>*T3TA$Ycpc^HTuv(eEVA-d;rI z5ObPmA=!lm^dnlhm>w|mOZXWrT*^o~j!Dg}MUF+9_h% zd=O+i`H3)sDN9hgx$*cN*o>4I3J(QIB^;$hR4L(VCCJy)`E6A{N%iKhP!;4YI~7#L zXb50z{6HMPLJ3ilit4e#DTxYq#kR1P-`U110Qr2pr^36{|=97Wsr{bmgI&}BaxXTKTh4O+# zV3Y2MbGR&-o$Z$74E%4!kqi&}Sm( zGR$5G%&!DSyE`NWUy0?Vn_nlif((V!2H9aG1{=3Fow}{0K^1tdcG$ry``}&@NrNFq>qUv|x#{diI$%?wF3rEK;{&Q6w)T z6NqjW>s2N7ii>#eEO?xBi7J08Xs%;kN!};T(SIP*f#%p!5#wG2yg~Ue1Xb7KBf>=k z&_$qxb6t#ww4tK@2 zXA7r|52rGv1VhxjD&iiRm?~vJKJ_*52$AD-^!{gAlU1ZVURkT=Q&A)&m{h33NZ@lM zuDKlEEPpiW0*{Zn;qHK^kZ1qmwrB%V8ckKgmQ-r73no6|ENKsv&2;e!+XF5lClZuC z^-FLzjqHK!8upNYJtW%L12(IWJtU+(z?8%GP%7;qLH0m$Kt}dZTH>$Sow5RLBO1FQ zZSt7xbzn8VeA0YAJRIHl8IGWGCZ37Uoha|^kXe<_lchM7G|;44L6$;Sw|ILKpIL^8cKRqO}bL} zyHB;)i z??Qd+We^YZyN(`F)~#?oy~B8x^D|nwfuC;SMm)KfOT^(`F8?;Y-0jeuz0V^WH8#MV z4{T&*2cyIpr&A@&r7lY@{N4}tCAq_K` zc=Kjx=yEGbwx;?d6dOj^Ka6wiG+HB$j#H`O_?qwqVnCNC;!4*M@VWOulWXvCSbRN0 zle`F$PHt`xi0~MU#}r&kVR2KWnjA#D7ZK|oT9xslQ*ob7gpL9a#D=*1A;87^IW%>( z%>~qLuJ@e6=SXxlg41#N4XijzpRzL~r*Y+BN&XEamAoyJlNwylypk4jo9w>ieT~$P z(kC;Sj#^+v;w3{>*{zzhCAuPg@tOG+cFHYO5#Yg-dAlz@0F<9b13}@%IVmHL#n2q7 ziMN*;)H@~YQ~L+B*$?hg{K@7Rrt&Z+vx zK!6D*V&~R8f*-6v8AgJ4!bvRzO;@}CPz@A0FCMb5*G!e<=T;<}E7xXz@8G`8}T-QpMz0H!hX>JV1 zz#qk?yP;5V#&cyE0H>M9=}TC4{xEuQ{_KZz(R`9sL*rCAmv{&ALRT?N_|s3!;nHL7 zL|F^nth}YzZ9a%Aja|5%;$#YU(gUGQg}d;Ewu9E<&Vr2BWL+k-<}0)l^!az(KAWsP z79X83U?lf1a#i>iYFmipb5x~KHY2C`kgY7770hOsgtcT9v`);CCsRo$2cvNKD||)- zvRG#hXQgn7I%j|kNaB8EPF3uJ6t1AneF+ngb=2vcs$B;yiiFZmcN{JY(k_`cC7fjK z-yoU=u>y9?HOV1`TqV_QOk&!z0(W_lmYmWiwpx@bZB|ZboOYyzF%&D_4L66$9XXzJn^T8oO{0G==xMj~>y& zy?998at^15Tt^|;jPDvD^WUL%04*>20G8h0PV{ZOx;7;?5t{@piJ^xsKFdn!}_dzUOPFY|H zt2CZ}fZi|0JN189H&Q?%@YDH4h+dMPPfYA2{(PT+4j3CVDT&8E;6A7x&A4+L15G!- z08(?EfY30Z%EL?wk3CK!4eZ=olsevji{1rV)6*$Q33RzwP$s_y?3???@#jVG$&be$ z8bQpRh>!gw=1y$n+J-&tN%ROZgi9O3mTSBd#jBTl34{evG(p-!p?XwzqT(qO;a{!l z1$+ofzE`clF+5rDok4{Qw*;A4kyd)jE2KjNZ4(!tQ0osZKMu!M4U{dCLSk(oStGA#g#_}LbunotW=THU33=le@RHrdQ=#0;E(RhLEb0Cnlp*;Ep)T-FY zjBxQLS?Wp@P++NiZS=%k6yd0%(ZYjlt#XbZQ;6#B+7^P@*Z83U`y&7?JO40hPT^4# z&*6J`1-_AtD*qUfv{0bDDZMgPI~Lbn5-I~r@$swzQI+H$0H1_Abw@d4$|LDAcMAQ? z-;bbFZ7+A~&MJ`RI}u1f^D8*ek+-Ys`R{FI+dz`q=>0f}xAQNN-cR6N`qm=7pCpnN z3JmMb5v>*qWWDL7B>(*X0li6*^6j>`l1iHL)8<*Vgu{;{y0%!k<)u1W+^vJvUyycU z_`~N?q|cZKQKLhOZwZ%S-WjMt!?i-BXeinmoGItCQu%a~3`uT1PSP zkU>1EU0g-^j|FGj!3V`EEPQB-`pMKW!Ki|l-f-RB zhgIBjcr`SpeFh0f%l8yLGKHt1zFV3LS5rHRtv?U4{35_ z*TxfELN$WUdB6^1G7!6-ItsV7f`!-x;7c@-ZdjBx~SsMOAfA z|J@+SA99`{gY=`6^_>N@Ncw66grxT%>94SKI$JZw$lm09!!$9iSoX{y$X^w_hhz`G zpjb9Oi~z68gQr2wH6-#?nc!lXa}lkB^nMZq`6DkhWFeX70}ZFQNM>)6`C1_JAd}9o z0%nPtW7i5XDK`V|Ey+iGs;aZK{x%d8y%>sM+bSpnO*#D^R|p{cfKMt(AXQKpiUIJ`2|&c@vWScBp)V^j?T~ zI=v>3zo!!J}^T*N+a9l`8Ju?e;}SN-|TKWuaAJ>?Dqbx*O);6$ZO4eD6g~2 z)**I#61%ExUcZY-T4v4UP+m`#>D|}A;5tL$?|Hp>52d$!`8oveNP<5IrFXokTQ4D= zkv*YbV81t0l27!nxxs|{({D8Ip(Ky}$2uhMLXuaLu!H=YWVerHMB=o-7%_askrjB#&LyYjK_dF9p;mX99BH@L9V$oP4X{-YOs74?_H{Z!=W>6~TLJ z9jx0s)?r`L;q(7OhiAcD)h@sG4)fkxhdBu9C?6V0hcDXIVV^q<$5#39R1o6V-({%$ z<-vPv9lGD$u?}NNhcEvN9qfAo9i|5Ft#$YuK^^78IMU&(c6E5^Uc;FQB4<9gc{X-u#@2z$C96=rFa46~UO}jdL_mJV(DjzO* z*o64Q9|_*y3f^1maPp%a>u?0=@a=!0!=sM{Ivo1Ad2g*l?1_$bm_#~!*RBqGJZU(# z$_MW$6XL%fdcXK-gSXb9@tKZwIEHli{=d-SgJ+Fgf9Z4Py|oU9J>RholSzjk+STEk z7YxT%`SAUVCdB{grQrS7m(6=?9e!WYu@23o!;k-k4r^aEa((M{^WIvA=o=mDa6IYo zQ%Hvvw3{~1Go{`_w9Fv1s{Ri8HR(^+uPOgNdhP6B2^nezb^ncT@DSya2 zMyJ#0mGn(=TN((0FX^Q!l+w2;Jkb>J`RHR&(Wuc_d|jZ*(ZjjkuJ ziZA2nFt1J}t$uAMuR=O)@~+B?q(4Q!ru@6;RhD1;y$#K)U5Il1C3qTX^_$77xcC8O z=y1JS`Mb`mX;0AXNe|gw#+Et%HJyznYyRi&62aGQLRA^dcb%z9VHZ-XYelerNB0Z` zm6^U?T{2)$^O=+t|D>#-x*XV7?|P(A%P5I`+ky8Ifjhc)JE0r_$ReTvq zhjnHqsr0+4Gl5P)+4vu8^^*Rky2Mhxxu~SnKU<^g(W&?nlMZz{mvs7<(kWbD*8WT9 zldLaYg8H&Z2N@Oo|M9y{I<7Cp*Pe7(U*=Lq{L!|){Q7U55B|%4nEEnQqbc89h*Ij$ z)2PXq_UlXWWhot&%>|^=zuPIBE&kLx$+GDdl+BZCRFF}@{~y0orQ@(l%>P6xtLV?vz@Xz1)E1@o7Be7 z{wvm|Z2rgZZt1veqD9xZbXYbEDI@-BTQ)mc5#2UFEYxe#-!7tFQ@*+2rPO~?qw6V~ z;>%w;ESp87(pptEVc&mR)aW$AHae}*uPNVL3{&bq>?nfu=u~`ZOouvMK{{bs5-WSf z?a}KcMyK0dqtin%^@{%9A*R3ZY<$CXD!y!{L!GW7ogzvnR~&=BLX`Uow)_|BV-bh(jqiMOlEcr7a7U!z}>zPSYlK2M`To^+r~ z@f|rG>2fpaQX0}_oUSK4=1_~Vl_~$?^0t{kOLSej_h^*~#W(46B=|NG+(`o1wDdGRELJ3X!=60Qwf2l@8dCwNiXvY=T4Vef2_gWyjZAU44 zP5BMphUQ4|H9Z}vaSy4{ozx&ZnXGm2Bb}6-gnxv7P5S26o|ONhMnn1WD57V}TbXR} zl|CKmaX;zNtF0cx(ngO<^=r~MH~gghwHjTY9>v%Hbfm{aq(>jE$ALOOxZw@z<@1%g z6!d`9srix;ze}sc7he$6k0kruC!7F(GzpmnMC%6@8hEj6&WEwIPAx?48Us_cuePwGhSn7lg<(%yj<#dj@rq{Ta=MT02=oZCnG<(%CSy&%gQLUVSjvg$SI zA5^1WX^!O+{iFTvWCbEauaZ>bFRCj(txp_wA7%dq#=Ytp|+zmhKh z)IZjvOVdi#lC67!?gP?gbbGqgtOA2QaFQh9U!`A@{>C3DlytdX|7c&A-4U7dW#H-! z(&Z!4WgpTdyoA}v%F#Yq4`rtI1`^08w|Mz-Bz6HZay?F=(0P^!pG#MFM{o$8rOVw# zTQV;ks24rA8@r3M*idXxhIR0c?8>*}qW3f*rsKK&jh5&= zdWt{s*dv;W;)yeoV)%!)=)Lb~@%v%rylubtj{EMsJ;LILmy2yKj)>md9i2azi1E)7 z(a8P}FCA5q#E(BB!)Q^Kq~DDHU%+-|C@Q|(42o_e1g-=UNR9Xz7ngLxljv|Rf^1ea z*g`xMhd(O8SEPZ#JVh1$pN0Q>D_S~MK=}LkpJ;@*b{m~mSGcJfL)xi7v>OX{#x{ zL-0m_KYB2GOpJAyt=O=?DG~LP)jjg##(+yarQ+`p6rW=TomYlaUZ&%OP zI89s1j?QhQeDzJA-n#9eOQ?ofH^iW5!E8Edp(xJ>gq z*u*#vDU#_OF%TMX-p`#X#Db-y!Qy&Ly**>Fn+)~_%16@Ou(hW95E@AAxiZ)XTg8&3 zF0K7xtg`0x_?M=ehqT&zQOUfHJdmMv%XPj~f2{TUXtu_#Gn_x~uCay3YMa@$Nn>Z$ z>$e4aOZ(^~{zSR;e~hGUt*pWo+jS9KMhS77v4zJD(^fGZXF8;%%)3C_OvB$acJ24t zX7*EDa2v}h+Gd`gszZ;PAk$VRj#ai$Cel%9Gi9Q8FKr*^{w`D=EZ^QzZ_|)}(o#k# zOL4`WSy@_$o6>KmJSNL6BgP+ZiRH+LjHqmg@LNI*Aq!xCum!A%>SRXLBOQ`%6Qo1F zeP`mn47n0J>rhR%(;}hxJ*Lu@5C!N=obQiZj`F5|36X#;$Xpu=Y4UByE3^h{jUC;M zdPd%{Oq^>hbU12>w3+3m%yaN-vX;~$CuQhtl%sq*9*2MBTXGxywiP~zF0r$qi+sBV zmM!b#m7812gM6cODHHRMyVAcbHZi*38WI`zGlNb3Qpt+C}OEh*#Zx3pH( zlOjsLBT-tUDgC?lP=4SKw{-wlW9Hz?TX1)QL3X@YBMD&iU+E1R>8FqzZ_~&Ch4e=U zLh>1+kTJOCMIyr#@|mI8Od)w3|C2OZDP%{(c{?BxNFRQ$rrA*;jTdR;A|NwxbZVPd zBFv{jEF?bYY5dg360fd~hz7A#Tnem0>oMpZHiH`Mz_?r2Am4xSI&d-SNkoF4E<(dHbiD`cLRL6Qo{K`lHEh5GGq2dMc z7bE1)37HLT9AsgI*yURt>s66sWCtVtbupNcO2heWF@ljP$7??C;2tO96GJ;9Ij;gP^P!j!nE{%f{j{vl#8FH$bq#t9tl?+Ek5E3JX;S)wm;wZK%pgCClQ`Cozi2+c zptMN(4<=o|i@A*S`&HBYTU^J;q~A0mBKI(oGBnZ13y~`!s|J@B-qMT2CL$j*@-}{H ztYS;i|Uyilu#u4#8>e=O; z21gnhsZz+m^x(*WjO3sM(NL@j7M0hVdt2hl1l9S$k;53dXjp(;W=#jp82ETeGbFOa zqC9*JttlZw42fLLu`V&OhD5GqS-ajKY5oP8>zU8(=SZXh$a0SLM^DXplgJ~Su5Bs; z=@`8adG# z#>f>d8adVa8zYYznwi!Zmj2|4I$h^mQ<$bxgC(v(@47+UY|XT(yw-rv+2}pb0CFKC zR~9sKi?xJfU2w8SZnbX0XsAN`Q_<`hxy^czX>3Ka50FP}s$*B9yomFs;&$r^*5{AD z79$Nnp5|DuDe1dK?yy!cQZStF!iFK@lUW`Sv!68BhdGfn;}i8KItkCDyyx0t3u z+-H4gQ;k~tZ%HG>gVyJa%!WrIK7@S1v6dS?4_aR`VxfObG!5br>s!|O**c6AQ5PG; z6V@+GGZw9bM*d=CCxbkVi{_{VeSoyv^9rk{ zL#ddkXoPsh>chx&iiVJW9P3V_;VV`xBaJH7`H@$xVJ!W@{VehC0hF#+t>H}53=b)h z*R0JQstKcD%hS-WX%MelTXL-5VU-&B8zZxS(#RXu4vZ|jLC1R2+Lbx?7^9K5tle4X zmr>)0j}UKL2Qp0@-bQkM+dAB#8g-oE{H}EZ>(j;1yl*zR+YUo5ZJ^7P1D8R zn`zE7e7f1=S)X~(nPRQBy4wdc%{PZhK8-*QV|^Yp`t-1mWSSmEdJp?p=Cji9>0wW1 zn$Cyobk*1=F!C5`uhhA>U0~$Tq(=JNmoYNTaPDs}Va{t5=ZRvN{WjB#+eXJ4X1~M8 zG5->Z^Uk)5d7}!^a*R&PXG=4GU_2A)s^GyLpj!iD=|L?WVUsPJ=LW$J?vT?>kxYy z)4b3tqWBzYpUKE}C>_Z;Z!czK71~>g`1VySeQP7#x36WITNLN{mTxb2uY^7;S6~(j z?FznUW8cCw6{ydIGyu8PrMh}5>LDSYiWBU+L4%RrQxZ8Na)N!YD*$yvdC6EO+D|bb z^1X!2jGSmc&&YE41Wof2bKVi<^*F})pNiA%HyC++S%AESR0#36Qj2LCK=TeG(;$mt zHHb6p)r?FsG-ugga@vO(WTyQybGC1koF|Hzc05L$KQw%1+Q}HD^Z~SS#Q6v7T)QhH zk1Guc=^+tCvl>VZ^BIY{A@w=e?#(o_kz<6cwr1P4Omnl5HQOG<$o?kQTzhLE6(Wby zk$f()_hqCigp7|-&D?R8(l51VFtXSn zm)YlXtP2tAolchMV_$Bc&qzTbtF6oJd5j#2($O>v7`Y>aT*}B3AwHKgvI}y9ViBJu zoQmJ!`3m@dHV(HfW#qlzCDI@k+jlY&pDmcCL0oA+8Y8>-crQyKSJ^Kz=QB|{#Al+o z+J2d19r38?d|*R zG$ZdR4QGo7>}p1ODCyhV58Byyq(+EEuSG;xcmO?(amoswY7)^tIRSEHlp-q>3zO)B1GQOKezOqL% zavK&5B+b|Msf_ghyGFjTmoYLARwrq`wcldoN6gr3WHlofj17>F8F?Jj^P1)xMwS@P z-`d}oP};9|EO9aBUmC=>_U|PE$N^sqg?w+XVdP!R1xlJ9Z6|RhN^lcJgPTw65=P2H zNRp8+R4k$?Wn{Y$O?iT3IY!n`c1429{qBC2=rV)!`PuHAAPsjM6*0&FMq0L!$ZFem z{?4&ZSI8$o_GX$5WXPO-q@{JvLj%1oGj?uEpoKu+QScUvzmpKFTSHIFJga*>-9`)0=5_R!9YCYLk@D z-`uY_i>$L*l5*^sd0Kkb*_>njQ_(bteohM`?gKi?w_aHf)u(Xq3bX>JYCNTe}@T){LWjm|@yt2j3YlQO%Ba;lxNat}zwhkdrvW9P-gFF9kjiBU4I!`kaJvTs} zFmhJLZi=22cL9A ztbRtHbDc4a+;8}t?;OL(6Gop4omq^$W%Rkw!ABIq=WC89vuKkur*Pz2S4MgHIy@+05{{-l=5d z6~pHyXJbZQGkk7wwqhi0_}t>)Gl<|*V))$d?8(S^hR>bO1V*+peC~EmU}T1gb+=z(Qf@SS)cK8(jf||v9DK?Ue0DRko^bjwVjEdcIQS$XXzGltr<^Srxy+>N zDQ5>pjxgzZ))~Xda#c6Jv7dAB9YXMVUDd-1=LKgLBgYthUU2Y9LC{=m^m)m-l966U zpO+kb8W1$Q8hutc_cC&)(PxG8I3wp7eO`6mV&q&S>oo_T0R*2rjjT7EXayldjI1{t ze9jNZ7$fT~rw1c*jjXqvevFJZvfgpFVB|8B_IDk8!w-C(G--d|nZ(FAqtE*eKF0@| znMR*g&S{K%U}UXwW;61Vk+s^nf{|a1tPh<>7|9wwA3HBIa-HGxvGWciEr!o$&UcL5 zYxsQb;M;r9=VPPumrf5xPBA)v>EJVZpt;t_`r6r)k;jazubokhTxDc^>x^dPGb8Ie z2j9*Ep9;h02j?_K-ZZj)aPS#C&22!#ug<-U6pXCj9DMr@ ze3qGX{qB6h$WSBecL$%b1I<{Y59W+I5%MW$rd>zv;2HP3oG9zB`@y7rmO10(y*+rd#yBPSm?N_q&Mr?p|u&dqnT= zGy}+PpKBx=eTZqcc~c^dZcX%YMm&S`ioU|g6od4Mu4F#Ppyw$$=c3;*&C_pbKK-Kt z`!OoS83q{`O{OXBvnJ_SbLZ2PBI4y`Jkx`Ed!)Je{`SG^^8Ouoe>45V%M*6)F(2VEYn014s zq1-r}X=0c)(i%==-2FN;_)3wVoNprM2EP4(jJyp3+1~Mm2wf9A= zDNrh~auhwE`P}xVMmCEsP1CAS1a<5I%&awt`sj5W>xABxxC!e?B32)LgJT_nR1iWm zZ!yi!M@l3Gns?IEA?xCEHO)5BpP1&3jWn`T)T$(X4!~{?$$6)!!$=%+&XV&^QJ0aI zuofVZU87Zu^!`R7so1X3EF%wpsA&$2ZpFyI4d-#uofxV3ho%`9-IbA^%^E30_oyU` zo4j0WcxrSnrg`ZsO*139Khty@p^;h9Mn-NrNg^}E+~{E(t8-6Hb6)gBril;M$OX}p z8R?06QJJoJ(bE~B*&c~3h|Xfx#g$V=a7{-MmDO^v0iW=uOuJ!D)tUhZeX3reS%YQv8snZ zxUaa+GIENlhrhUQxGylD=tLRocOaiKO+nQJC-#Q>9n);8>Q6=NZTCl}sa7?!8i?pj z{_F%;t}Kg{ZWPz-R)}*wE=dZFHzk=~wQSoyjihRICQ^mAe(k`s)K7>uYy=Mm|)jXb|7IJ2P@3 zX8WadJ2sw?`nkGBmByM`pE9G57dwHGPgFi*g(WtNrN3cHIUPHXksnPdcaB}a$R(IV zld`H~7cz3Tv6ODHd5moDYkh{r<})(XaNaVufRQPWXqqvxOBh+xO(WxD3mJLr42>Kc zyNq={_7aUujV)nhmC(rXv8y=NtA@`>v1=JA!8(Z4xg~ZTBd4FHV-;e{8M$VLMi#_w zVC1JmHL^H%BO|NO@0EO(#%^L{E0aHu#BODMo*Sq0=h4{hjKogY$m6klIM(FTHJ>MA z4|b;c@MV{28(hkhl>fonXly0Z?6sYi^>yqw zM!IgSkw0+zIn~t{%C)S2$6}0ZgSAMRu0LaC8LEeeT%l?Hilv$6Ps8W0SSCX{f4!xS zWyO1NtP+#1l6XIk)!CF_X*`!9YdY1~PI-JV)9m@0mQ@}f%E)IX?UnIO8Oa#St%{Fg zS+g(?BX#Z?--&V_5m9eq$mpImYsug}9J~sXq z)9h$sjg7y@G;b=-FT@XsJ5`jf2}ag|@gyUkE6)Fmxc2~$s%jp%&n6*eH)Tu8Zpa2$ z2pxnF2t}$8q{~u5?N<9r23qFdKhFYIShDZd?- z1$C;LJ=-bpQwzzC%TzZ`g}oEzN6!b%UR|lSVRex>%o&I#jnS$KtQ*L4+pzXX4x6Dj zvUCdTiloj-icgyA6xI#N5y|JSVZG4vi6f)~=O|%)G0r}-Ow)iEXccRweOB1~u$^et z)0~qiH9u@OlIWxCXMWgTw8|AsBVf&DLD!KYu*a;-TX6eMdvOeqrhMrGKXMNap z^jz9(UrMbHyMd&S)Ts4gPvBGnZdvrAupWnMqD$~`4H0g9uGSq$ib#CAT6e)MK4=$jvQBsFUepO1$({#V4`+O#MTs?Yi8T|F z-{3_$O~P!;t>H+T>-(8NVt_;->0ge>JlhIuEcq!z`z&$rf2ND4r2LpgTH+7rooiO(^sf${l3 z;&a0KA^9;q*R%a#9gpOqsZ-B(#yTBI8Cc_M&!t{%kg#2XPfMklq@RD^4#;}vb@QQUO>KuiTDP7mBdytef{q(WjuzrVR zk7?D%cGG$UiCyyNmh~7CLt^-w^(>N+W^GARe_Agi$!e1Ewg=YhNE(aPL+dX{-V^f3 zdJ{?eYjATIVwt8MTW=#7Cpu58caank^3?h#k}Xp17TY5vO(ma$ZBLN=Dfyhq76fxe zhuUtEb+#~DD3a#e;FlRNbek<4Nh@f%L?Uct;>LBTSf~@L= z7P2)!Qc-jY+gc#0oq@cCBv%H~9!XCj$+pgL2ZQd$kEp22J=xYBh(rC=JVSppZ?r+DJAC*=}oy3*xp5Q^+zV(*gAU+h))#E$4KW} zTQ{$+V{J_j`OSGF-Tkz=aS(*Bt^w@ zneco_diR4}|CRb~e3kGNBz5{TsTE!s$&)@z{NW9dd?;4+!rLLa`3UaiV%upD-ZxSA z8>jlf{az$Z!Uv$vg~z0GA-q%ga3rBmh_nms6#fyC;}6+Sr|@x!x-8bf+>iWp4xflR zGexIM_*5h_{$ic3;WN-`k63jNpM^S~idFCM`AAlaRp0PWkPH_cBYZuQTS7hz--_h2 zSPc!|fuytOj0oS2q@d`G4Bvw!NXY2$gGfF%bL?37gz%$CPG=y;knELQoe+K;NhTqa z!+!t*d!LfeQ^PNkl^NFM&>7*^k-Q~jX83PNstTDG{t(GPA@jpk7G0yhFw3i5=)!O- zl138x;&3~XU6S@s!d*ztOMF&^yOI1JZ&7RE9$uPS6`l=A?aWMeg%?4RBII;R*Ijfh)GCRyV*}v#ANh*#3UUf zvP3LForfm58Idz$HIjU0Sek4=GRY(#0@;q_J4tEYh_8@55t1Bn5XmSBy?n$eB*R6g zUc@~lRv`@|{sIDblEtcNge9vkom)cMM>vpd5z;Lp2}z9PPv3}Fk-Q@LGa#ZIl9r+~ zETS@!x)StCg|BIo|7ZrMRHDbk|VpKpN>MB zM~*@Q-{ip<#zeM>oPZ?VBsU}4L{3JMRjk@XPDgSR=2|0QrkAGPja-1FWgR9xB3A){ z_i2Unjob?Hfp1PE1gRo}_1XG|kq6N#=Ro-F;o92I$jBcsH?kQ_W=GyZoh1X9%#Tz) zont$NtdDg2bUwdr`Y9i|D>5&VW2R2|$lZ~Jk%WlnFC$aY&+S3%`Cw!^>O2(B=OQ~J zsbG385qULo0FvrL9!8EuQcCc)Q)Tsm5$_9Go>{m+efuRa?JFTrrJk!MBgyav;r#SE>Q-O zV2Pm-H4UwriPeax<=HJ@R#M2+s2!+t1op#M!+$V>L>)sC2X_yMtc^N_q!Qvg zc_da>qkckiPRO;Wt4NBQezrzlkJ9g%I@DP4{7cj=Bz}|Zi@Xta7s=kXLCU&A&tPvw z{fXqlFBX$Lih72mAjF4sUa?zqXwSden0W1xNKziMmDe7Rq${lB(%;aYv)U7pG`VLn zNe+7sB#ngRvFApz9#$OH;cPEW6|m<=vS6phB$e#Nk+gyMkj@+S(n!XiR3@orFNm>kZcfA$6h7JU`WMVu#ZH3>e;L3(0%4CSOHzhsY@r_-XVu28{Affdj*=j71hAr zF^4YG^H+&fPz~%|a?FRiG3E~>0lp$WWQI3^)BqJ}e=MU^( zAX#C0ZW=Yhz8%Tu5}(obuOSuizQa!()?)kd96IM;g>wg;8|~Fn`;S;&%|3=R5X{x3 z_KTSFF*edsYK8q*^t^N;>#VTfLDCgY&B$t{{SPER^=Go${t*2%3u8Z@*`MZ^2l26G zAkWZh#cnRs&+I`-x|BDWX`ddo+3rE|#wGGoC2Fg^Ad<0W+NVeDx0eN?)Srhr^uzY% zs54A*<9mDSBv4UfBsZ?xyCmt{=xEl%E9!UqAhgQem;L;19|BemWrzJf4=0SYgn|@%2+`b5P#y{ZD|FSPe zKd}pmz(9fMYYBjRl`!sQ5? z50G>h@}6Tf5|2rm+Pga@BFQJDmt!V|6(&}_9J5iUjgUT$B}i%s>FZdDWQvgY9qW+H zGvi#zKESaV)3rp>HOR3&=X}W3XR|5JN__-Gr|WY`=|_$oNTN*A$3EJz3yHlMSyi%+ zbL>S@MZy~I*oS1uQOd)j_6d$}k+cwI60cRz; z1S^c9^rXIa$AwwnBWWslbcbh3#~yt5+e{3JCzt4Y?I@#$mF z>a2uTS0q=nIn&VUuB4)nNm3>4Db5|NnJzd#b$*Otos>AYaV|xj zv^|{CHqI4D8cLkoIoBe&b)G$Uc5cG3dN$zrba8G*olv-ML-Fb2+=ApG^zB5tI(H%& zCTZ{CJOrf!cdbuQ=xM5_^91UwH}lZr=;=I-WW_A@+{<|Z$+hWB`Z_Noxgk~`I-_&z zw$seajiQdB&IBa-tv!m*FlR0#o9D5g5zgXBj*8VN=etNsiPdOlKP0myU1Od4t6i{$ zg%N~2&v&ju(o<5p!np^@>#*}iIxC&uB3b^F$*0bXNX`mb<-CWa$0OER?R=bD=U83X zMJGRNoX=2asf7NSGZsE<1a~uFRYE!&o!OB5Ay%85dGhEu&*?{=>sdBA3n96X1I9Nv z8~)0^*_n*w6PQ&pDT2i23KEivqzjZF>1=V9LGmPqt+qHTAlV7Emvz#RB*Ec^K`(YM9q5FC&Ia^j7eC)S_n^+#jVSam z=l9ONsIwA!QEdfZIC7rEu=bl)X+Tb)RedwgVa^lIi)htCtWG+^8aYM=8j=PO7mK<}rmsyLrGT}a-OR6KFIkt7Wyox{$j&df-9nK^a}h!@Ep&>xbY zXU-f*vWuT*&YVa}!KkNoE<2Sg59vUACo7AqFp_;{{-i03s|b?bW*$Cp2DyqM=_NWr zu9A86eDyfAQ|+gQC6lWh60ceAgBPM50-l5Q8dw#2&nBe~m^b= z{fK1K8Meyfx{hS3nHv$#0WW8V{e!|<=`7^RMt;O|VOLHhb7?Et>R0verg^0_3C_XHEL&)Ac!3YVT{V_c5$~ zW)G>HWn4p0XR@@xGOl4rYDxPl>l&TU06#lTs~VPau8HU;{uYG}voF^aB;`uOmx|xg z{c1(mbR@;5F{$EOh{T$oNmbWUB$q-hXqBd_yH+Dv@EMUij_R)UNY<=lQq#3LpPmU1 zO&~uoLv!s!ohNV$gF>(C+J~fEIku|jI*jB{3D#-gI)UZh`7npx%ykuY`oeo{mK^?{>*;fay>wAA^t#1(=h z9NG?%<*o=MBY$DC(iMkf6TI0$I;&h>B;{H$S>wuqByT~sTIs>{V?16mN ze$v!-S2-l>D+QUJcepAeS$vMIcDiaJc~XOQzH~K4@&nAZC_Z~!ZIE<;nm}Zqs~eKC zR@OP->W$|JP`ubkhw1|g~1i*>$n8Aw|1AwL_P-@1k)`F<6V=|Dyy`R)r2>!fQe zk|(3s&uP~bBoE+A5fq;bu8)y)cd*qZ*J31#uQIvjT8-o!d@+)&esO()q;M4L+;r_m zV%XX91J_X`AN<8u4_#-F41*d)ejd9nBT0a-x)D*)zaeSSg>^!s?;#l}akfT3&97&b z2ceE>tFN4n=Or=q^Tdop@;Z#v zDUd679Qk9WqMtL{;p@M!-h*?Zm{~~93n>({7_Ib|FtyHLRVd~YBtK1t@5RAs*BwXU zm<>nOkx?x#Q>?tJS*DUJOF}jpT#9qQUH%bjc zlBPz*UPqk|^1_$Mu@y{>{RPP~m^l!c8T$Z<{$3@KIkA>Py4H;v!#eX~t%YNcO>;maKNiRzPy|Hj}Snt0I{Ly*laajrAkREiv35+XTsR zNyT@uZ(~XeK^~?L*X4dJwu}C(w#wuUQthx$_#w6%5cp07=ny#@+ZX+u3bCj&J9RtF z6xScg$8cwRKGfhlj<7fbNv+-RLYBlGbsDkd#`&q+i@=Bn4Yo)TAA{U+o|FBN9CmATl8CG7@7boR+T9I!4@0 zBp)`1lQkqm;(o`pH;4Su1aAApJw%!oEPKgUg zQVH@fY_!hjnQ@VYb={Z(z46;ibv}O{XGfi>U`1p@Tzp~Onm&U$zaQ2HcO3WQ5|HFS z3*WFu@-Qwtl8MkNi9CwSjigz2CXeIvx3b|qAkk6ol1S>qs6kdi?g~g63kh+*f#kg` z>?hP+6UnvA@Xe5_I>*A?^)b#5PQ!OafTSs_y9w%4noH!4!|rZ|WX~xkPWM|#zJPW? zexlv)BDpFg#@!7`iyzo3*4>+|AQfcgaSuZB!yBvipbIx=dTTpJH9@0`Vcz z$E}iejXDP-ktWc-+^--h0i!38!ESr9uHjkW%_*|_z#WY`=f!G-J08jG*Vt;bJ3A65 z*(jOmn9p=?6JLWTv|& zlKT6Iq^ZU3#z;cpb_waMcDGH|Z8;foLz6VM#@!Kh8p9YzIvd@ck$gLotv0*+AURQz z!`kW|h{UFQHjMLb_edn`bf1ajEB9FPqkA?a``lBJv==`I+#e%pJD;t-buUD+em0Y% z?qx_0j$m@a{TY%(XqDvow0jehKA$l;@7{$(Z|7*8jn0eiJxFF0hwqC*j@)rva_>Vj z23CkfuDHKLqIWYiNmEzdN0BUqSsdwHb6-NT1@_QL=Z^a>lDwkxhx;*-Zld#-JFJM# z`Br9F@C_xm1Ib}13-S}&8=k-)YG79zq$f}^{O(c50O5{~f zJtXCzuOm{}(*(&+>zSl@+8_ys_D(v*JspvJD>@}T-I0WDV4bp_0Z1$`8zigOJwuU1 z!Py^?%APSuBE`=eo{y2toxwU)JqwUDmYPuAvkb}aVpY?#8p*r$+3HQt1|%Cq$M4yO zS~-H5ON7!#t&t-0lkRt8LT0=m<|mBxi+uH8 zEl!g(HPL|Ewq!gIW#e8~QIzeI38CXeO;wOUFTzUovkh8VqC?l)L^L z?Yy0NGZMXq)qiQ~cIGW;rDqpJe#^WIb*kCe&)v*>iw46#;@>1vLH&{WJ0xph?@Rwx zP|r;A{V>)ENg$o4qLarYANg6QxJhOVXVTClYsF7bO&}Hbe| zDfHTw@d-DIz5>5}&OJ&yduB@s#{*OVB@| z;bpPfn-Ezn1jyO}q*LDVb%LXqu0QRbp%JA0>jW2Cx$YBzI+hTJB&U!A37L_s`I^Hz zn2-g@Tp>pivLQJnFga(M0C1%Cm|^-I$ga}kvtXB%{v3hA+dVTI}2-Xm; z-t9iBb=PBOrkW@EYL7JNFJ%%JV%=Gjh z%yzsdkQ|b*KJlJHQokSR)U$l*{SiqWQ>O-y3rLojWTShH_cD@gCMj=Oo$JHz*Qyt7v5WFHI+&HX76nz9ffT1{*Gj>na}I&+q@64Bc5BI`qc_*yZ0~D zdD@fHwbLZAlF~1|Pf;g3%wQ?)d%c!a-Dlo3Q(D`y*Bg?md&uJlNvEajfHw?D*F#Lc z@rEPWBjj6e6p}nr=MQ?FNEV9DcitEz4}=`@x{=(Munv1OBe^Q%h&K_*V6pn%n+?ec zAxFJAkaU#Lk9l(;`AYm8_vS^?Laa`B3m{o1Q4oA z(OVNs@W?{af!_xKqDyd!SY7eHiKM*b##L_}B-y`Z&)2;5k#rQD>)wV)ri;$c-X=(f zh|VwG=14A!&JAxXB&$T{ruQu*gCst;yls)>6P;hZ9gu7nKexS|kW3eyJKnBHB1Gpm zZ+9f=qI1{V3&~>%>vwNoBz7sCKfLcFv5D26-a$y-6rFqCAxO?ke|X@+b|71hGLa3@hc=&Y1Eq64+S6zd(Gh!8<X@d65);^F>lT z5HUo<`>DKzj>Zf`$e79zvbb(f6K9V;I^Lr3#8&?!xzcp@-Grgp%=-q zJTH>#_*+yNJ!gq~QK$dkaeLQ?TyW+Pu?X_-7-4y8zXd*-v`gtTau(Q~Z{ zNU^Jpofm+{k;a-x@gBFz_Ry(wk17#N{c zELyw)u_7rMPBTfeZ6hh8Mb<^I%YzmhK4YnmNKTPTi&S_!>%BLOrH@2vG=bT^5iAW} z!_ucB^_{}Z_XSI}B#hrgYAT+4Lmi@+&XA`*dHUl>etJ)&??kVygcd)X^NlKBYB_x$f;*vw+(pAD;vW0Eq9W0&B%2KD?EPY*) zrFY7*bi58rH5;kq@^sQv_Htu9OCO2F z7a~m;+h_@+j6AhU4AzNWGkMxym=k(div51^GC`!JGx+JCFIbwtl%-NqBSwkd4AJW| zoAt_?`I50M)L*VtBDRHEBCS}=Y>`M|&?ov(FHxlX^O&7q#?qsW&|l@!z0aS}W=I+f zHG-t?Ay2jBH_mM!3%{`v!quMr#!geRsAuqRt!Gg)&ncAz|FWp-7g;)O2~xR{4bL5< z3ZryG*c4#Jk)53$q{^c-cos`nRFLU8XCI3x6@r@=X{c8`TB)ii<$E9QO`>$p1#v^^ z=WHxBk*8nhW>!L2nn>1C{B%FmV)9Z`o(9!r_IoUcHVkUE)^nM(kaDPru%FQer7uQVR6CG-YGVxL8c05tb_v^MvSbx})uK9q1$@o-Yo)rO^iA&| z9NFOut*}Gi3;lI~JnfItwxjU7wkSox-RGewdEx(~;6L~hNMrb=QIsma2IXYYajAYs zsj;Z{c|JG^11VYk1ShfoI^2vg(BV!*FCRuyY57z)xPvzg>V{9- zRiwKx#L~>@n{lkSNTfRp_~|86@~K}fq?fGr^?;jN5L&YOEnkpYf>If%#U%X!>0JTL zqAHJpuW+K2Fbck7jZ&6lN^M5T`vK=r$@hcQ4q!et-3Mn&t7|cH%{asL*?yL#1wE;y!1>xaW>3ug^BZ;GMvBgZ zWOeH^iwcJrq^QbnszXjSw}VA3s|r zo%M!_)FdE{;HO~{13!$C6h?EAZb{lcpU+Qw!Q71W+NW`@&8WjHFO(iV9o?9v5J_*8 zNRvL~r%RYL!yJTIteK8rwRIHyzA=<YwlN-LlylIsF2ZeHrlAirGatg(r&w@38IkCM?agvh)h{ zaHMx!EUG}b#F~q3Ns$(cmtx)7%NTR~2v!~BX-|>%{>AC|M5G9j#=|I?3sc!$q;Vp7 z`*3d5*lJPvQSaGU4tGD~AH~#Y%jLEhN|4wC$*Y`gSZ}mEjWNf;V6|TSeG#vC9}3Cs|}F%I#$VQ;}Mel#{aIZE}F(MNRYM==*`AV<)@oql|?b# zAyRc|3-_e078ieI%vKhx@;xG3NUzkUl{U`PU&eC|4TLv{s62-6SEkhW82n|S0U&=!8a#ZP-mP0WF6v2C39} zWl@XFQn0A+Pm@3RTCrKjE$YW6l;ajP4sQPIe72~v(EI3K%A#_LbU^$q6n`s(O*5I_ z2#ldTzST8&1gmTC2v*nN5v;DU)=XPnBQSzBk&)zo*FN5uz`5IfHcRe31NLGcQr_p0Yp!fM-*73scQC$4SU9$})t6{JbmNgQp8usAJP%7ZcpjE+@H{MCYH_;M;&iFS=~9c+r52}4 z-=1#pJS^Sdd04u^^RRS-=V9pv&%I(GtG|Q+3GYXye!D?r2u8GZI#Yc6w zzc~Z&8~=Sw{RYp&0&%Wu@Qkdk!L!4<2G0(m2Wd>@o1*eVtI+XFQCUSQF48A3{_6Ho z*WlS^UE|&|ww?44ZZpBt6g5nwY>*=I_kmesgH;wY*Mij?(4&-3GxI7$m0KBvGsX~g zU)o394AKixt6`>~!+>AIc2Z~|D$7n>@ zT~3Ctwqc990n(c&>Gc9x*e~$>B?_c^@D$e4QZg(hsjGDQ>M+z@ z+9Tug2r!G<=cHI!Q~{{Fw2v7A>spd(rv#bn{poPaR;SW$>`$kse&dh&B>B|7y%yC7 zV(K^AwWf6VlpCVd9GFinXhV!*+6GvXDhBtUw7(EF!%r)vBo%M6V72{wdK#=6Rw3J9 zwfheIk_p%bs}29~6vmk&@JkBMg%R)!qm>y(K+mT}H44K0rc_lERwsJrDOCmi0XuEr zg`{2}`P6W@@2Z(kwTD|uddDk=n$?1(AE7+--iS~2>;ij{AX(JnWU2=~^%jhc+QO$k zgYlB|bP3Yl&5g-H%0P>#-4-hYdT=uV58 zj8FT(I%Nh*dJQ`VrJvvn4hvB_u$IeX!+ncdimYfJF6qqhWey!bSOpj06b%P|p91r# zBkSOc<|tVCJeHtOsjR!xl)c!}3;4H!1dw@2RpZC`uEVZcPn6~QDqP9aG=+IKs zMkrq$nor%1<`N88yxr2GPNS{rP_W4X3`|hg}nljV&G(%q!O!G znkg0!#bUi!+N;&)6K7Q7&&5D`XPp;KOt5W zgVPfGi$Oe2*Mb$Fj&q3W+m=!Z^NldF2vMD&&(Wn7qAo(8t-XY(V$g5sk_k}_V2w@b z=ndteb0|es0qHJSyu4IjR+e?mvh=B;@NSE)5k3_i!DB$dZnXdGQ(wUD5w+hR;Y~T+ z%fm_&W=r=WG#Hu8c3xCY5Q-{3K`5$Do2Lpz)vOR|DMb~ZD!>^5_@iD__qLDG-?m_8 zSKefn6(rI-B2tYJ7VJfRs>g7a2G!wwY5xiAT|d(!SfxUgL$K>?&Z^+6qo%DzY%Pjy zeJapj)oD+=5Ek_@Sm?aBsN&G`>oE^@zehp|LKr@E>oDwMgOmzm5BDH@;NF9_NL9ID zPllv;k@|_=22(Gi=RjynNo1cDq5$*Z`ZZOrb zbmN`d%o4A%RP8*E21{T}A&dXsHjoE_JWZAsMd^4A;+I46B?qRrJhDui;GHRybULbm zl%giq4pMKTbiFdKz?;C?yPoCxjm99=gQv-=4U8Xp9hI!=LMzj~K(g8nbN&YKG*w*$ z&-!dERYk%%4oNvSvveM8iABN8Lrcl3qB(Q(8=JCGzW9xvEm^7pIji%^ZyYQ~QnLCg zJ9$Y~Nt0N*3>M@sXfjJMn40V{>=e<{*UPh1Uu;j_gE1b{wgLJkoi@MGyabh--!R_c zexrve!EDjY1B-HvCq0XL#oVEXx!POI-YrT}sv2YN*TGD|%ojL&GV>)_alZJCQP7Tb zKKqUS1v$q#etshvMoxPApGqm}>#RyO1J5a{U2c+KwtkZ(TNn5O2|P_wrD{+fB&pfo zQ(mPTq0=bu(~XEtETuqPs1`5W!P1YzSh_ovrKi(b>N1j~B$dq!H$)BD3BOJU;fAQ* z`&n88GkslJA#kq9((d2LHbmw82-X2;F&p;Mx`70{R_obwsa<4|q^dzn)?Sj-qNT8+ z0zHe0fqq=qQ@?TEwD76YaK}NX!>7J=kr$sjm5rqhkXQOCdFc zO7B`}Dcz`V?smhjkVuV8$)aX2;<~}%!b}Nv{dBE^{ax^4Ko~JHHNt@jq&@TM(C$Wss{ARI^2L1qBg<4#bjV1YH>@h?N`8`9s`op3^Vpg zDi+FZCfcqu%Q8tVkx~tKDO-#Ez5lyXbHO52vA<+h7G{i;ju4Qj_c;T-53%n+(s4-< z3yR+&43~2Lf`Y#ZtePq~3!*N7tMrb==8M7eFl` zz5Zs~PnEjiH=eA^Saa5aZHh`EBEFo##^i?Y|M)?J}IA1z{}xyPKYtI zU4z5;SLyiXInTfRAD%O|>4s9*em2YKUxjhxxxBjlTo`_1c{ys+FZ1FzhPLMU!Mu7T zQ4ak9Ui?O}=VJc=S-wAg6?9cg&K-;#@#o38$(sN{ z!2I;N7?eadSaO`xkue6tp7T-`E#jWbjf%+F)^Gg2l;ZdDSe<;XFRp^N!Oz92Ca@IM z^?jx4ptNfXNg2noLeIsZ0qXsIy!>xk?Vjg6H+{~tUwQ#J(=^9qzw!4m?`6HHPql#+ zfgYWGI5X1o#AFpF^ZP6^zyHBp_av(>=8Q4jnA_5#T0vaWje(|=s_up=^%k&H^+#ok z>VVQ+Sg#U$X0lvLpO)%ybK$8f#b7tAG->bVkw_)rOHF!z$fv5EvZyZLkE9+TS!6ff zl3_QVPqi}c(05ryGs|G~(ibd?s?WZswVzKl&umcx(I4xP=MR8UXd^(%B)cS;R5f#- z%c6`6(4#>7;O65yJTK;54Oo|&dLb(OE}yVHfNwbHSzm}6X6}ek7&=xy^-FO+eWRN{lzub!!b8*p_-=@vF@opH?C(MvOViBTCn0LyuW+XqYy-O$K6PmX z?NRttG1>R24fDyFpa(Z3;mmq2O4VkuR19Y3i;#WQAP8@>B&ia?l->{(h?S1%GSCZA z&&PfhGWHyzvck?H#lBZ2j`KGKY3~Nk0)M1Dg%d!KbnHXaW?_NQEazG8pL2uL5u%>Y z7k$4ZL{*V+IriyBj|Fu5B;7b;p);U#WBoz8EthUoKgUuJSkGuL>BgiStT$Ms(uJ7C zh?FGKInnL~^@Z3x zND)Z`;3@Sb`V{YT&`&phfL&OMbFY>Z=Ty}ec0@M9(exNx6nn z7_c+u;20b*TUnBFK%e*}#xF>u8QZ9*NmAoXDc$IDgu`gLgmZFB8J1S{U@4ohp(535 z$4^@aSXX9M+q1N%J4+?sV`+js{Y#$a6e&rbE)(Vv+jr&ZkMcBFq^AnQBLur{68VueU$ zMH(uSN2J3dY!CZ;0NG*O^6DWNDhP z%OZ6ashH?3lU%zf(rA&s6sfaFPes}*Wxhjd$rvdazvSsM(VH!L9YwFO=yejk2BMco z^lnONHJ18vzb&WtEvajzrA8>RC@mHz#Gj4&{)iugcSBB3+Ss`mA;vJ}b)7 zAYqe)?GtuZSoa!iF}xT{(}b-MwprMB!n#WAyA)>I>B6Q7+aYYbFstOjWnngnUlxg9 z5n+{uH4@fI*g|1n2&*e`ZYyyvB&?#aaA8@6otOCaPUf_omAtVjC6}Ch4jtc80 zdRAc{h~6||quOz3eWi9*m6{mYk)KWxe+9+%#~%E2o_Jm-PuFkbr-h~FWG%$3nXnqd zMhfdA?3}QL!v3hrUcypX>MLwa5oX^CyC7_QHGaBCY&QuzDD0xJKZX4%skDl}>=H(* zuv)@e3tJ#;gRplcj6o8{>%!87#S1Ga?1+p))ucWz73LFGPuM}pzX8JT3ETGx=gVs% ztq>`TNI6=t-st8mg$U~;?5S9E6X~Kz^+akWwtL04tgugnjS`C|OE}z%^0b;r3#Hc8 zs=#`gMKVNsUB=%F!d$}E2)osfy|_i%C(_-%{B*vsZ-h1M&rgTQ(_+F}2y+N4CG5;V zUI#qw$ddCU`wR2)%sl%Ap1sDvZ4sI)KOV*R}|0jIem`5wyBM9LwsfEzt}<>gcFG=is3^@^{^ ze2SId=p@oXXft%uzYE@D(UMP{h8(|v;c{-kjZiq7y@Tv}30eih{WGXxe_~uJo?~ea ztcm|Z*8F3Z)@FjQv>=-Ur{TdCod@M0MOKuaHfHIhNI!{G3if@XQ14Z-ShBi0pbmJ)97_f?^*SoUx zYY0m*J4s4a)x>tJlS(?>sAld!rW>w4%=W$*moqU5bSD@bS)pVaEK`}-LH|fcs{e<**PxV;q0BB?v&7$illE~ z)6=gc_B!R7rK(f%^zug5yV;zd?vXg(k*6&@Tqm1lW@#Lh5%tRJ3b2%%z)}y$D|*@y z?gf$5LL~j(JF!_%MkKWqiw&8XwUYhBHKLaa^?)qmp|nVPzYd4CP`q5-$9g(#q<2X? ze+DBHv1BJpEAq3nsuoLUQ(5ZZCMij+eZW#+ziB`8L$uFzyfx?P1c^&rK91?STkLPY zNP#xJuP2vpmn|&S-N;fuVRJ;UnXo3JH&WPA(d#H|2ecHb8`FeMhaQgDWRXUR)Jwc{ z5NU}>vqah^p2w_Wf2}1}t3_|3cn<7n>hho%oZQLMbYTx+_CQZtLCKIb4oZfk0#Gs} z<#~&9*9SG7%6DiOOMjRpm~NDFu|-4-OKqW#B`-yV^%s_3EFMI&-a=t@Mam|&xGfgf$gur#$sbFXapdThuiYh1C?Ps3}=go(mQQKmHE!S~P;+!m+`rAibBh0?u*ZCoIo* z$Oar^>554C*TB6}v`rPM3B**NlEF;SoT2zsxvP*TsHbO8bdscJP$aDYrsozGrDsq& zMHW?3q>H8$tRhy>(_mG#DCJeKYB!WhFjx(M*{ikS930Br`p$kh#I3#sy!830CEu_~VZAq%Mmuu70DBkfe z2d4#e5B|{#y7LsGPF3goe%{8SY<$*k)7NBS5T1r-ZCdeH$s6*OclA5p+&S5c? zRUg7FTa>OszElG#M728&Z-${1INJ%FZk9d@Z-(Jhj%kP*Q5t?R4OqJ2&BT4gXV4aO z3BtRj!e$D4b16T~V@mL?tLc>lUj zWRbc&_`AP4W(<gUrl&Z(+TWFoz?(Y{FI*V76au^CvLNXQ#J+Le$G*|Ig>i zFH2Dbq-YAJC@-XFCP+Tz`;=N)K+0H~0(J5#^fbC{C8>e0a}BEl^Dx~$lGMRg%mOv> zkkkXeDb+LTL22nete&xcB}1l4!yDqj*g?YrH z-ww9;W*AE$P+!Q)Mq!u7GwT8~1$t^gKS|Oy(~Cu|EWxYt2Q1?{zCN6H(@OmYylX_#nzOvN&-oB~c(j-RZD03#A*w8lgZhpG+%tmy zY8i&Xw<1EMFaB3|7Xr5ldMDGE5~6m&Xs<_-5S8}`wet}5?R;i?p*7OebeN5hRJkrc z9i9@TR$*Kg!dOev-)9OL+uJ|a-Kh6y)Cf_09uFz{TWbtaf3MFWDp2opLYw{^W2IZq zMwCjLeeA!l7Y_Ry+rTzh^@g5nH+s>xN~pimp1(%My;O)A1Ea34FCl7gGujc!p;FAg z4!%(#lT*Hz9t@{L|2u7UV)ORMSEHHD^dg(?ls2emt z7#v0Zl2pxhyoVPUR~;AO_gBG-MRhgnDclD74Q@bTUg@{!uAs#CppsSJR+N7)>izPZ zo(12)(=6~tS|E&t+z(g;m{0vZ&gAd*bD_a|6VRXj0nDd-9)wse4cA+u@y#!8B`uJ7Z8I z=yn_DAKdXU>l)0O$FN1O3oMna#xrTXkFMiPd$c4~HP`X*e&btgQ35n{ZL+9}P*+H= zLoK#_{au!d_GQm+wj$gAZ&LoBrp==My%ePzL(G{>x=~)rElJAF9?m86V-1!{$FX#` z7)yPYu=Hs@mbQvixF)e=brNPHdVid9O}8zda>mjL0=%ILyI}fM!KZc(;yLTfNZY>%v?`aD{cY+a;9X9$bz4-RZs^?Aak0p|9)b4eQ|TV6fABuyG5RWI zpdAI;RC0P1=0Pwku;@PGpK3|QyN!q5p&at5`)@+82ev*HU@PG!s%Czp z3e2ErFMI$@y+~>;QlN$2gpr-v%<0qINAP=}7RBEMgFBXes62dX*VmB$FNAvndUXBH z9=yMGA7&##Iz_S22E#z|sa|pt@)p=e;?o=OeG3ZrvAO<$nfrOFYt%PUsp>n&q^G~* zpqbxTw4L| zRO+<3o=clW1=3dLDWxr0ePhNiS)CE7wi&-<^^U|e5Whg2511_g+E#1ouY4+ySJ&ro ztN44IEowRJ*XeeYtfp+F6eX+fFq+bPXcb}RtMe4zbd*?ikXU_~pY(jHs=+Ne5I>GV zAXXL?h(V4IUd+Fjh2c}XWjtcrK+W+fABTic${WSAklm(*dIajMHu` z4_?>8{Y2OY(KRC7IAuzH`D;{Wh`Ymj-&~fph1xx8h%43Rs zy3xXvGKQhYbF%fV;I_)6u1}2|$1ISJKTrfAI&>GX%SLjV@{pDAmyxs3pIuD-Lqi?-X{^@k+Fi5Yk)7?ZUGEoB7tB|i1!Cbemw;t|oO^qb?kbCm&5$ym}X>Lvn`Sv7OW-OBBQho@}5$Z2I~rn%bRddpQPS! zOIeSyyJ0LN+nJE}T1qz> z@8C8)Vm3=TU?)MxFWsmlPus$}huDvkS^9MfOUKOKn^LZOdFWrv`F+Oz>N@mNlpEY* zW}GeQ6Us`Mf1JDj?w81uRL`H_-UOD`Yh!q(#ox>DDgEXPy$!>jeQG_7p=6=&&d|5B z0xaM~ml4?pp1#b2^(<=MHXem8isXfnj%xeouXC%=^HV)Pu&9xZXbq99mYGj8zQ^K` zHALW@8XkKr>L#2>kY^ryEUGlj>!|MP(Td)^(O<-%^MyeCPD=bDBz_zhpW>Kij0-bb zTh)Rbhn?D0yaEb5<$XAdnhv8W#jh>w&5;yHQ6SD;B$fO%Fqn~Dp*|;&O26^49GZLH zqUvH?9_@tpmtKg~kPGZ35L!_fu_-Pu%gJT)Ii@8;Sqj825c|zAo|6|FoXnFH>*M}U zkEX+sjJJ zqK0hal9>SBW5^AX-Y_Nj=38d2 zyMa6n)Pq2s)b)V!AdqW;9IqY0Px)JLa8_o{jNls@X8!rq%W820^GrBnd;5F7Kpsfx zJLDZPuBU;T?Kje9P%3?@E}Y%bynQR&tD+VfNLwJifmHql=Nj>;fq#O`?8l8)X8pb!$i_6NT5NN;p%P7sTKX@7A_Zu^|%RsLj7>@#F9*E!H`_4cf1kwxj zSy}*p(eTC4+F<2zkx$uPGw_Be*=eDIT^RM!FdIZ zE}6yl2RNA`y`^INx!68{QAj^c!djwj;kL+K>VZR)j)Cs$;A{tCKvD%^vtZYc*c8Y$ zlHP-KkfhhYBuzK_&JY!9_WbZ0P&FxxbYoW>OL69IBkh2{kENj33$z2I=dmRHeJ{wO z9>dI+>T^9AlXa~l_7Gx9w%U%laV-Tao=?IzQDMXx3^9PO5yR|IOYloe zQp5JhXmI2d&1sUvHVIBEX}=^%l{a_5Gd_)leuz#+TZ+WtCaI4v(rg&c@_!-;dU@Hg z4(!+QS}m}COI8c!QV(3$xCG-7%@l^1y)t}j2u3>HKPRhBQ7qNW!qTc-B*FJ?U>8i= z`i)u8x07_voR|2G37|);>`sz=*rv5-xYrCT8!go}HbL*G_39c+%r!|}W3@Td%D zzU@V!jmIzoIjQ?%3Zo^gKL4-K;LZrN8QPQPosPiH1k6s%oe8)n-k851%WE78cM694 zPbnh3nJ?&7kbQwuBk3kN>}A6axIWQ=FCWUDd4@dzX$#83{XrnTyrK`ByCf^U+NSj)%q ztmur2_WF1y8s^1Wsa?V^!9g!YZB?&VX{VfXH(5Ep;4e*`lv(pI*zeR~6qPT#6;)3< z(`vh(asN$<3w+%Z%54#*mq(^#mC%k;zF-1N>7m?G%0mCA>$u-|X!gqRRVlM)1qQW5 z_osftVfN#G<49Rz@P%TtZ9(2c-?R)%IzM=({#maBNYd*7lAJoX!Cznw7nqp`=E})3 zuKugoUzfJuQri9|2!nbCP8-}!fgY3C80axc>HwzbWg=u_{RW$9Cm&9a1}F)T%gT1=)}=>Nmsn+MuhegEV8JkK#kWLDyy?v;7C=#W{HA#tzany1V|h6Y2Z zW4eZ9h!6^eR7537h;R{=%#})!A(Tp`DBsuGYp?a3-n{$tnZAGge&74o>%R8hYp*@6 zz4q|z!#$$;Bhojf89_T;FG)7l3ki2VQF@N7?&8;j9i0aMm3+(Q;(5Qa)&}0lbG1=f zYooF$0SiJpS2jP_64bt#ps!mAs^3x2A~#kmoAD0C*HE4J-kQv!RcD%Zx*2r7Jc^N!LKEoyZOk8tam2)4W-0=3!{hqz6k!)sEIn~p?xx^HOhs+6OUGR86@r2`3f6DZG9lgn`FZA1|2c`nWUoWYcJ*v{uq!X|1P52>O1spn0fq*Q%PLh^81+ zM84#r9dPckbSA=Ra!-D`nsvDzui|Zn=uOHVDRGNsK%`hqyrzwe)VJNH!;yO5e?< zr!x7SWeu4|IHllPqmv}|0G`|>h*tE>1#ii($L=}T>9wqUpcQ#gA43D=fi^k_gcoe< z@mNSU{c&c^<8rfVAodIld+m?M!Fd>*<^xc;M%B~U3}%biULb> zEuT6HPns-Yve|%@l5brh5RtrpRbj0@JRhcASS@_SKqQ^~wW)&9{ z)W%EBnxQ5fikKl0{91vPcl8S6+M#k%7_=MPHC~+rxrtTA-j&NEYMxS$;uY;LO`R`Q z#bn*gy%;YEV$DSTG;HLo62Epkjr*x@dohhh+!94E=5ZNV0U3k%t(eSWEsDZhV!N>q zBZW}>2yKdZJoX3aDj^l|n0p<1Fv^Nr*+H`v)Tze7Ni#^+nt>=cCHv=MElLCdv2MWu9T^< zBzXGF-K6EMjNF-fGOM7=1qJQW6oWOzjVL9jxHp@ihR)ii#y-;&epv~HBjZwhq$xho z6jwAwM@@111xc~n^|jR4I(VR*?*$E&HG6z3hzFkl1I?hqaxWPOyTxd5m}0)4VfQs|Alt~E8=vR(JI}CYu`t7DT%KexNPm}%G>X=Px3EQ zC7TrG?#v~jC9w}j=a;FmuG(K@J(C)fli<|Y<2v3x)G@P5xro}0nacg>;)TpbH{-;w zD_$=nbt={|WZJ?0ah-Mr;@LSkg$mA7#9NP;$J`nxVrU&eDNkC?9|w(MG`MK9}G^(==6|v3C>p^9V1%(JIO7qg$vGm@-@J|* zr#ZzpFDMfK#W&^L`0(}Syl-Z1~PcN+bh|gdeCY%S@VrY%i+P3MaP~X#td18WE1$nwMmK)X;dVh?-L1*6+2{5*@OnQG#e;8lzo2Wi!g=_0?2-K#VdR_p zbMOr2o6V>-Y9rr_NA8RY+%D)0<}&75HWPFhdjQPc){zl@l>n`90aEb$Wv;F&+x8_c zHC9XSdbu+?_{B1p0yU^TY^ZWn<5VxW3F)|CpEZz-K7e?Lrp9`^ zl}&2wmSP+)HMYm~V%%48y*R%0|MU4$?Xm_`yNsy3|4u8mLo{ao@8+9q?cZPX4KzrN zJy(-$C+>MT>j)c;{T#BaxZ$VhyrK(=E-JdL$h45OVMV>%$b(1gzU%m>Xa0X555IW@ zJ48J!H6}M@Q)6-iHZ>+UU||o|$Zvoy>V%mNvm{Qc-C79uOsC1-@EvX*jNg?UP#xYO zQiRM{ha#qEuaLQ7rO4fnz-tNCrueOR%tve|`(~C^xmZk|tvIw4dMqKH#ksX)HpO}i z`~199R1B+GMisD{WmFMoi-dw!Wlx6ZTG}UMMEit{#M27t@44d4y@AZ#w0}VIf*CRJ z-0&N;s7bEzU@atGX|nOq9_(9`fjwpY=p>U7c}9%rB$HA8YJzUYm}ahhs-R?yE#lxo zL3#Hws?-Zl19D~k7;c_^Pq;9MMSPH97C^%9m6GDnvRI*0WyhklOM zXGHrx^!@>lS#>0~}?%HJrVEi~=3nzm1hg#Mvv zn`r1%%&@HUQVqSLl5=2JjY6X)mn&P;yr|`9tSR1gDUwZSvuL%_7s=mhys|FeWRp+h zUB=plHK?cB57&4lG~Ph$u&^#SsV=KkmpLwN)I6?r6?6GU&D~lW%Aw|J`kl?f+lc`j~Ghv^sPjC-j&Jyra!*c!>Ago^#g-y~B;i7{D z4IC+m#wvX?5Vkie7|}X~(fc_CB^4F)1T^JPxo?5raC3J_uC2ia>^pLbAYPERr0UmC zwOTwva+6=d!0#LUBdzdl)hqHVmDg)eoQt-s8zO&gr-pXW&_);^9C}himuqM{v^j@9 zsiAwd7e~0u2HKJkeuLX-g zH@P(J;jQ@X)_+MW@zBypn_*{IlEUc1K{*TjQBmbP#mgA(zUscVen)@6p1#d((={{= z@)ez*%ijF8cDt<# zR-I=S;M$Fk*LVwl$<~(bl*XHZcwB4YLsDx+-sE?;LWV-=H#Y)ZLPqMZvgv@kIQ&Y+ z^B=PIQ8Uk>wAhUwNr_fysOPw-xly^DihfX(P0?CKNt$-Tda3d4iXKq3OwpT)+9{f) z=nF+7aHh^JIKiPrGw@E{15Gq?E{Q(*3;Zb5AKwy<0wtSe?yf+!4*M&?C$cvZ*%ALe_BGl5jfBO};OtSg->yW8y6S8l<*6U$Xd#EZ4I1#bYysE?wItnw9hAi3SmT=F0{j9TQ;!pgf; zOy+!%G0C&rrR``D3 zSSghD z0gFDF>zN1tMaq%kc+bs-)<-CP_lfsVKF4csn)b5gNXiIs@walaxZEOUwre-shJBel+62$dD^01CPO!iE;xi2GBC6A=~5*{5)ZoF8 z#VeVZg?I)Vmp zSX~NyCpM>AWl6C)gZn+c7SYi6@bxX%wf;XJnR+r)pXRZE;|k-vu6@I@H~B?@$DQc&7A9Fg44qvw$2!q*(olu_e{gnLK1 zR>}o;@>5U;WEn!HwzC3w3km1@T;3idMVBv7lRUpw(LI#kyNZ|g=2<~|I&(R2chzyc zc6k+bAMcfx`^p&N(qbz%;MS={ z^Y(qX^#^$ov#c@q`}mT7S&Q>ci=BhLCk@hKOE3#D+77>+QN<#HnqvQex!*KiTg(g0 zO~Aass5s_4Mh{~CAQZt%4Y+Lx1RL(&9}k(0Ib`&7EhF#y{Q4zx!5SiB%04JNS@KRV z_BLx!aD^Lxk#g0D9b(I#QH3@SO z%p{C1!!j`XbfIt$z_v5DZIPhSTSVS4#rT zpxZUHi^|)NR^_x6(1#dZ##)lm7-+@lb7;kAL~TK5a3aB6*VcljbQ07CComj}173%o z%E}0yC0dJZQ_#}1&p;_K7wweO^&sAI{N@4gChx|r4Ne=Rp#9T>NXsuyxKVqLj9>bu zkU81|U_^TWjA+k@(TP`i^^P;}m4b3(HlP)KYHXp$`KHBQhu=;bq{Z%cy)!NL_*dLd z@lE0Lf}X@(4UXrXXU;cdZHdE6%M-ZY`}ztBtN_}VLw8*iDRXX=+?GEfXfRrf;^B3y z4xahUmb?;tTb?=7E=y?k(f9(_*6EVo*n_r6Zc@g#LYE>eIb@#CC-oe(OfW9@=vbwB z`Wq{6Gb|kE`y|#2XDs)GqI%859#F}DKxo8F>M!$juC9#yI6qNl;`kBpG_<0$SYPH9 z^kQ~FbKnng=uc>0MlWOLWK>X7Jh?|Wzoh3vr@=;WyaBK|jFPqs%2`@M2PygqCo3E; z1v3+)>aYTgHVzSP6V@)w84XQXDWTcnU32JOtdtlXP2^B6Io+2^i#>zOWxv>x*RO?H z2Pi)D4#>M?L)RTP4y`&WsN9!=emKP_QAb{U?S74UpLz-A56l{jhM<&;Zmc8R8=WNH zv5y6f)OfAhO1##XXE^OGO$EK8Y1d)R#G!X;yf-lm5f|SlukO1MBYhk%FJYvxzx#82 z4;#`r`?6yzGf>17>B{{o=|AXK_uq#4v?=mnzlr6M^|{V+G(yRbz#D@LWPH2`%g_GH zYBwMGra5|hZlv(d4e;S8)HgQ)EcC_&ZGf*GD$#bu~E;9^;wR&f~*DJ3$GwtZf7IX zV&%IE_t+O~HzH;%e8*B&UJ9&Zd7zN_0%xw7?ViG;@NURE44I&f0?Tk6yhFB4O-qV@ z5QDwqvUS7!TiME+jobd!EP7gzlnv*w@X~4_G%Z#UUL>QwosB~;!veDgRPwqu-akzt z?S?%SSL0l3cSB0NpYtayW+SU#U>)W4ANHm*nf$b0cxM+ z{h?&j_y)Nv8Q9psik|Pm_2-*+paI!--)seH3(3AYhTNzXe6s|*8jKcWM}*N44c+e$ z&cLBnC##jTV8qx$k_m3V6vJ%#?ll3Og2(EAnDRMZ>y*C<}Ze22Q~ZOb9;hTF%k z{;;CNTtP2B1ud9t*4M|cTA`jp=2|lyowe}@2-3>F1%9txXHHsgQI9}zo!_hIIY*dl_Cc*UOrHf_AhP^o$~!S2^CE&jkHEP|(9)Nv*B@ zSx|QPtej#yyaGnum0Q_TLKE%wP;#jTmSec%)ypmy-Hd|Oo0>lmdEzzGYDnNA41Pzl;mnRYTsRW4DnK9tGY|t zo%djW$XcZQPD<2_dj&V>5HDi>%1!tShrKZ9$9XK=!tyW+J1IfhkU5N*ljG%a`zqKq zy;1thaP6I+Hy5o&I?3^+9Nd6Y;0^|S(XP-r_!W#KvkjqK8`KkNwu+c+@ZrctM9t-r zAv4vY{NM-$X9V~fHB-nuY3naH`UdZ4UJo?Ga-EH5=2%4UEK(jJ^8!u=hzm-I{l5Y{ zdax>T8idT>wFlnSMeDN{Bq;)|xV4_O`R*z#brr-r{<+M_4Q6p@YHap8o(H)^&s+WI zy^&=WNm_2-6_%R|--q9-lXm0K*Z)muP`02InB#I>T?f}HC0=e;YdhXZAF6`BOHyzy z=1`LEafgi9jgX<;9`;7$`zZD(sI~azLq@dbWJE8uGOAFKP8kF>zSaTKpgrd`ZJ^J5+t{K%LpotwF`$f#||2!^92O8 zsUuQ)))iDQzl7GjMNos1g5K271Vy)Myh<9ca&<|OP)E=vP0>eDeNEe3)7I9sWi;&q zP4Tj#n4(>ZX6KdMd@WHK4NcbEYH4ndXlOGH?WmzGHT15{BKalP9#Qkb4N_~z6nU7- zxSnrSv<|(5x$iK_7?nqFXLQG234J9dp>3x~=yP~Cfa9fU`*zdN8LIPK)pRU+C#P8R zF3XFUyS`^B5tFnCD{PtmPb39+~zX7BwG8-+~CZ7=9*}N`stv%VdWV&3VWxY-=M0`MTP8D`bk=w6Y_d7VGT%tF&0{6Vj@;V26Np>HQME zKe9ci7e>zuXiI#v{F8*zsBk@YfYe{UQ!?vjcP)c4jniE66C)Z=hRpXyUFAgM9rsIJ&{KjHHUhlf84LH9n@0%R5@VET>K4Phw@8s_mZHtcP9_>TF-|n! zARc=`bB>55{0XZ&&Mm0tpK$M=>-l`LXDUHn)ZB@dCWM#6aVEzWxET5_jVS!$QG{)5 z$h?1&QCh72SJH?6J67dtTM{wfF5{jUG5cM=$1ZOQpDN&{+yF)qLpGLIsdDBYF=BHf zb{B_h<35Z_9z6#)395*l1g;lBzK(d`?)lOv^VRbEMrH%w&{&`m>YH!M;AS0a%{T27 zEpF|(&|&a4>E45HWQOp~7&lk=I#DtF0XGsC@XUmdHOt??x~M^^|tlTPx5S^*ifa{*onp|w9e6@+b+2Jf9@03%mVKr4;ZdpiM;;hHj8rHwA)dI@fAI21K|r?3YVG3SQ!ZJTR(1-_mY;g>{fvA+>D zBT#NVU!m=lTmBuhv9y4P6_oD{ek(HI^B5%&qlH%*T1np5Y!uf(uBh)h2x_3t6$dd%jKeJ;SGZ5 z)l&|=<0V16uxrKKD_bRB`jVQtjhbQuW_ISXppP@UF(PTt!(U^r^rwP0E|$>Ge-(Lo zVbNVY?8q@%hIy6IBt_5e5$?4Og7RJvDZ4aYOU#^{wi7Hhqjp;abyb~*YP`A{ualE!&R1>zHLL)}nC}KLpJG>Vh<}vs* z+-@`A{U^`=CNPzWWTO??1)=yG>@HfT(D#9n-5`CdLa+rjK#Sr&$aa1 zA%yU4!2y;RG3D2=j}$eTxTgxcHb8k{AUV@Q&OA z&>-2|Q;_R9H8vb)cU0rJTTzcwB-xk$`3~tVnMA*@uy@0no`#1RsNZoo{8D@C5>+0{iR<-;C#1Ye6WWn`TqTGUepX6 zCA}mVZ#~;cyWNZ%$=t72j+S_xbzDX@-XD!6-qTYhUWSh3M>WNpk4R{+yY(f!FV5qu zoFZl1^@2i*mMFSG(VL2r6&+CYvC4Zyxrm}|ihj^|Pb=39ehzDurGe--2cwa>t}jUF zLClEE(RT@q=vxIw^!`>HPE8q2+@83(A2}{lL zWM4F5C6hlHQBVIr>Lo#I-G)18tf`kz&@;*%&nsN>h@dsfHB_#;7ctk`rL*_Kt&LbUmFq8J2E&fi>LhHIt;Tzu2o0N}`*{}(U;5x}Ia=MtuhoK; zSEJWt*eut7c+QW+&+Hc~0 zn%P@rHP-F*kQon6@eNFO-UY+TW{9j;iQ}}yaUK=-88g|IyiJ~vnGSS=DRQ0c^&P^w z)xW0rvAgJZqM@u}=!=$FNQ<*FjMaHoUT5q(avpSljijW--bX9Y{88C#{YLs}<5y*z z?^A!HkaFb|Ez!_|>a$i;?{KHKejV&K@<dA=6oNPmlpfHws7^-mef~U(o(s0%9T~Fl5#EG>>M@ExLxeD*!Xlg&A8e&;cnS@ z38g#2T*?{M1kwFs=HAjdpj{c^Zfhc_YgCXa$S5r~y|t8xzPMp2ud3axy+yd+l*@!O ze~$O73r&m7=q6GI!6W0)+tnAnDM9MK@Z%CX7Beiz`zlG$@gGETRHdvdAStRXmw3HL z3wN*18vFB0=pprYuXnaMY8pBX(qdC@kUgl|%Sws|$}vid-Kn7uyEPbEzlp@V&`!|F z^@4^f3O^v+pBgU~6YlTlloDgOL}{^0Z%a+?(t4hUQO0%ER@)=Dq64mF(qaX1O2Iw$ zooSL{1-wX38(S=BCH!aR3Oy+3u|k20l zg}8RpV%4>;m1->UiYUsY==i-7dP&h4htgs%!TaYn52-ykQ&n1Kyjq{$iYBNX8sHH9 z;;7jBU>{Rvu=tryEP6=2b^M~@IGGJP!)K+lBE0u7R!|%4lrz`Bg+_Ew6~79rd#X`I z@4=$eJ#PHE53D1j6PQ03or3qkXkAa)nU$48ye=oZ@oa^*IK$rhwY56n;zi9jE?&ee z#oib7CcJxz6Fc6i%%k&pu!h)CTIP6}2eCrKekafS?-Uo*DVb6HPN3O}UqZ7p=QCrZ z{_cmZ<1aD4);i6G@kVoK$aHq0*YX~srr&01^C60Y+4L~H2Ob}R_xcsSyp7JW%6i8r;6 zpz~_Oj(;y@JBoQ`iOsid65hzPsC}wuR$5e}kY`o{rNtJ(b2}BH)6JX>1EGvaZ%y8I^61M&tV}-$IxOBIIOCBpCx+Ik5y2AINxn%XZ0Aq&Fyn;Tt zcZxA}t-QN&+QK_0ALWr&n5}#81@pl zlGn`I4{GL_jaCZnXLG)^pUtR^%Qs&8KxYp#Hm{=uF&3(M*Tp*IRP4CTiY>SH*qf67GC5%F{&pOI`JrJ})3#HT9}KD=l18U9Yeh>{$_Y*TfTF_A%Z-}*wEjwH$y;g-{pe~4Urui3Jwc4F zUc92hy(RQVwgSOQMCK#xU%9nL)SSX?W^T*01VOc6L700^QM#h`idHMyoJ&%a>Mt#G zy?RvxW=LoSc)l#TdPm__Ckl6Pn{b)e37Yw^_y@mxBKg+wGK=q=De)eOiIgI{1httU zp|1=RuBFD?KU}!q6m{0R-{ec^X07{UTK9u=Mes4^RkmDbz7@-L5Z*O&!u9Rb&*4p|`!i`toae|)D+@fP)ulBXZs5P$plocYm z{4qg?;7N1neNT$y!ixn}SRlyjCQ_cqO$1J{0ydG+j0+;A0z4V!uAtS{x@tu0#>@mh*BW=1cT;nmHpTf-g6CZ++K`+!G__WvrN)yB}#; zs~_rz?2V78=`&r*kq^5IT(;zMQZH3Bv?XRg4jorX(EgKxe2w=qyk?GfmvR#{UQ6YQ zqN8!Vh;pCq74ACawkbDMxroy=VuIQoQbKC7ept`~j9RXjxo?PvavxfsYa{SvYQvM^ zed^nBXM%1-MNAnW<}TrTL_+aiUk=P~8^GW<(UAx5k|fsPJTMerlX5itQEKv>_Q^YO zzRx9pbey0A&kE`|R#1*sfJyd<5=7HDWAMXNO4K8^RbhIUib z9y@5P!CtKC7zO*b_jO?|-t)Nnc5l?A<&hGVQ^_^=h`hq;DSWGY|9Ldt5-sn~8k(Uf z73(P0>e)_$Zq&4AG_BD*KGw8tHSJPOo1|%f*0eb_?H8K1yQY0j)Bb?{MAl_UOv>9| z(I(un;n0g}+dn-dI^U-G?!oRG$Lp;3JHMJL@}|MgacFLQXU!<8@xHiSxGRcI;j3wm z7g3$(sfY5M&XT)zmTc>0$*B2Sd-gm%W0|d?S(=LEMXK|=vqXc_s`C}Mvlzu!h!T2H zwfa!eAw{`V(@Cn|J(}-$)qbt&{Gn<(RyBQGQ+)5FM9go?@qQ&nJicH|;F{#~XO_gY*;<3%(cud!)H zjG8U#k-e$=ToZJk>#aS~BN84Il)i`&EU+8DczF(|%{;^2@Tr8-9W-9~SBICzp|@a_ zz^DW4Deu8A!1(>z)>^-9V$o^k&+(qdoO05JE&@7h(QUAVKUfrowf)7S2axY2Ab7|J zrROXyCOUgg=cuU>l3r5Q?Kefu{Tn6TLER4v>w2ccO_Cy_$k!B&6jf5RzgWd*o*+*lPiL*UpFq zZ{SgZFH02Btpje~4D3CS1&Nr0TAn_h5aj^34IL@%&1 zq8DQb(KpMo&wAXIJl;Q`6JyFP*=&cV`Oqhm&5fuHMiU(u{~oB^Dd*R4I1kYUo}9}g zWL7BZ?NG#igU@}J?(6Y>6YT)8ryuOd(Wxc(cDiLz*p8^VZ{wD?MeSb~+u0vufi)Ok z5w&AObHNgpv`FqeMNF{o6XcQ7ls(Xh-f@kX61a_9&Zd>~Rs6!%T+iNYjhIqT$Q|$$ zMRErt-nW%JaFfdAfv*;v^$uwsc(n@NHCc4r8F6`pG!LY8c?35z`81d6C2HECrFkUp z+90+#3-$z=yG>6$-u+&rhK|LRry@HO4=w&yGhx-w$I37j{&a$}V z6DD}3o-J=Nw@$$;OU0!e2QkNUkDUaIbdQZEEr?fm(j~Xv?+Uv49YNV0x^}*UzmxvF zVIk)cHDfUA-iti&wbQ$};Rl45aEfwUhD`AFkDQ&Lm*Cuh#&mq2lvn2PzFV^F_`g0% z)?jk4K4c!n9WT1Kg!Z{h;?WDI?1#w??D*>|Me5-sCfb7gL9*op%|4?bXrfZzv?CV zeyyhfr#3Mc-$uR0Nqh8vOIm@xfF}!wZy+`F0ff@auYuRhmVy1_8`+R4^#z*S6_ zJQ@#_Q=am!*6^yHhTe-%N*ixGDnmxKG{$%TGK0m~r4!_qHhlt;WK_{p;J1@~R_VwHOdG z{cVX#Vu$LXe@RR4{tmU=t_hM`@WN!5=Hj^pxzQ_(BW;Qxp5%u4>1+P#jo(J2bq{X9 z+{8P~*m2%$%xIfd&SH3V!l!e=$=>&4W!^e6hwX023_QU7FJ$fy@qM3&*>E%WFuaor zf0ymrxR%`SVOe4CnG@|X54s+P7hcjO578d)F`~xDLqB{84BN?dFPh@zNX*XM|AMzL zuWp%$S%q5%d@qttmk1>rlb5YtvdN13FVx$UP2TE)_G2~6b9|ubUr#|<-rt>q;wBb) z9iLlmbqIdNzv+qmy7A-M6CY9}<&7V;^s*(rlo>Mr*;7^i2A@_Ps8y_m*zWq6#h?1) zuh#nmSP(jgz?(X-DwAz5q0!B)&=ezOy5*#XuxIvfQp~dPf)w-?1CPdL@SEn@&ksRHS5JG%{CzvxFAk zAZUC^L61%nR2!!roT4~1Vl+Tk*45Ond+&RR_qF!ToL>?#xoe7j30klL>X}=AcoS*!?XU;j z<~>o9w09FRc@7%$uFa!VfA+a>%K~dA?(Nd5__E2}EW~eu!b737X|eVz#nXCwg`g42 zZC9?3a<$P~r{D>u#a_|STQ#(oa?dGuTDbbcxleJ4H(XM7ww$K7_o?Y4)6dni%RaP)hM=i|2#xc^1XXS0m;>Z2yP zD@(>(yM__09_BZmg#zz?Zf`j`yAD1k-#U0(d+~m>AX}PMiiTr%i@8oH5u-widQFnC zwZyG(Lz*vs4}A}>2tr2k#jl>bd@&!neDNDWE;ra*MUrpGNWPeDT)r5mE?@dRYq7xe zR`FIl2C3)lv?yt*tbnGw@r(UR%tADN<6jKyjh1=tPwH!FnLLN?UJ`O>Xd6L!TL|i~ zK#=FSs2Kz)A0pqV=>aK>nnDVr7^E;Njuea@h7?8vTxi6Q^`Uk{ttqP68kPo<@r5tS z%WKnM{#c5&DYx{!D>+`U?!Gp!!D3MwF5Mk`?xpZ{YL<;vI}xc<vv{sT>9u9z1UR89Blhm{fTn4T(R z*R!XemAhHFyEL~IA4%Fj72U6)yOb;9xcGgkYn@v)cDrS1u|{{uNG|$}Sb?xw(Kgt3 zWGhe@dv1&p)(R@8DQYQqx1#fFI9}AWz}q|gzISva+a}x*F@n;tS3r{Sa{5tO>*j1I zTHg^3Q1{%y*@^dz@uQ)P0R7-qx}9PM)q0Jc^ot#T~cGc=5WbVW5pCzQPfaT z5k<+0?r{jGxye$tw%8%%Qs!3FThT3wmM2KOVnd~NYoi>T_QfDnYy4~M0C8w`o!_2P zZl$K6-yx!}8e7ErF5x^{#JVV&vtGC-6!l*yTo*-ETz`Qj!mP&cg8kDTaT4vun*Q(g zjX(QIFUja3y~Ky#$^FFx;@_hmt^MWBXQjq7q4hc5tUsjPrrs!MOjprf7K>O0W-IYVH3{ueTyi@NuBuIY0PV}IH3*t=+KG_DX*)m)_ofc0 zN$!97Zk6&bLR)f)UWCr9{q??}O~`}GRw1k8;Wrb>e-4!rz1mtN*MfemK>_qIuA#5f zBy=lUhI`lvv<&A~rHF(+rK2KSs)R1anBkt&7Num#-*}?ICDg8~N%R~>PZpN6+nyE; zI%pmv$BDeR#z>uxfn?U@Q_c4!mHZg$g*7OxZT?1B>*YH9{-tdN(yg9F7vYWYsJ&1_ z@|cuK^c&n%%DV*eIN$Rz(eyQFz^%FzBbh@7%olD^P2oBr9`~1vXjLBj-Rg=~OOXfH z#z;uvHZPSZBR&gigY|2K+GT689U5?MMbJ;VPd-yzxCzLOrQDQ5(vGYnp*_*QtjkLD zHMS}Rpfk5tYt#^@y&kp3d1OPcn&+9yC$F7Kxu1Qkc`=)&=8(^DPD&#;6s>AZu`4lH~j35UGuH)G5bnh`M5VWspa2o5#koqF=4js6flL zLHlyNxyXaj9B9DvbXnLn=BlDL`r8z6^qmGz-6VE0g0gYELa;B4rYZUo`f+airc1qC zgjU>w?-duVI%(hVJBpMkfki^ybL|dA`*I#tS_#)2c7sFfp=BPjn*Iz6%<)!Xj^Yw+ zt}b<-0vpCwWjQ2sywyS)(^f&Mg>2dobFf_16)(aoTfg zcR$hgtpvNlwNVZ2%V~3><&DQU;@oCKGD{hP_GQa;2CczKiok&~Adl6lnr2#<&Jn5?lpe=>zh`IUB6^bRc{w zby{A|SdN`VI(LrPUjrZ%zbmw)jWM&3A}v+}HO?qI+(Sm+LO(|Ltr64!_JFy*u(6E% zB7!!e6_}fWzCkEHw+S(P8*XzuKU~mu^f2b~k6;v^B0ut7Xj8n6HfJ5MzP4qNoE#=Nb#@58K4t;+F;OR}D5QqLOpGBC5e$l$^PC zun~+3YrZ>FXB^zR&^OWrRend%l@|m(thyYzPq<|T1Z9DR<2)YI@($M;x^A?DPQ{4l zcn>*w@%2otu*BB$9kT^dYcZF1nILL6<{o@qQ2(`pW^EMIMN?eR6b~t)mS!nCl?y>r z;^MWMyucXxRhYC`aY$y=Lb=R}3Mq;z`uRCYu`ZXO1rYF7!+J^YDS{#P(P&3e!ltmS*e%A=LLO{%6nSA z>Dy7zSk%q~Hn-^uaZYT}&xkj~qU6z@8DUY=M9*vo!tD{YNp6y`~bKz&{ zr)SdSn}N&D&xx4GZv0lVmGbxT4j#m>RzUZNdA}jI`QJ+p8G4J~hhz*4Y}oy5OD^|q z*&fiZJ>ackjN~2G9=xEE3ESVX+IdJ^6IF(S5@AvD(|26m#0)-W0m)g z%B!sM{%OBjpz_+Nyd5g9u9L^V7XAS&(*HyMl{yHSH8;xqChzm}d`a_LYOKO6yi9q8 zP`0Il)~;uSxve+ebw+5&Y+EYc7jb*h9(Z9Ar*k7PH-=1|ems}qy>QI1G|q7k3bPHR zjhHOM_^dbn*T=t~95RQjl-&3_ol#*$j|}k45rpENDsI1jWl>!h3XjjF#k~hv`GR{j_CeTx5qVsv^m1v)ybdXJ`z~aH+BI6wL0!==W%F+; zPa4SmAY_(zVc#b;R;!+%Hx&(X=d}^D9d`)$oz&Wg*!KyU?&_&-aGq+|EPsRhP*{Jf zF>L79atqoXCcg^nn{n`7OWBnJy$MLapcXODW7nSizj#mPUX=Wbtv@O`-(2}{iuBIl z_m3!)Uo5&h6njXx_dp{hWWH*^rNkF~Q}8AtdJ5jj$C-LIp#Oi^rucOuy)k_~N{-)0 z+{6gKmOB+S`6qoX=3Ox6|Jm$+QU|HAny_Z4tk+zuKck@j{(0!`JmPO0P7t)l`Eb{k z_y3g?|D9U<-%I;{qjvv0+W*h$7jGHXpg-remSNqCcyZezdh4E0e7vj`Fn`<7E9C{1 zD#s}3vDZSrIrlJ+6r3C2>*`Y&J$NttF!y`B;C&DL4cH<2iWv{t3%Dm#@V3QSpF*7}3 z513YnliQ3IQh)-1mb3yLSQHkHWu+mbr=HE6HFmxCe90) z0bp?O<>K4~=ApkZRUCt@R2S!u_qe1*m3e%zF(Z%)OHUW)RWK94Bspe!!pS~(XBSLq zvp<2zS>}5%&w(lH;>=2T3Z5s`Gh6}uk^qE=Q&pKm zxQ)IJaD~Iyvo>Y3<~6R^~DbFz5~-+nIF+ji0P+HMdbb~ zm;uTxK<*^xA!WXEa)v0=0J)Q#N0nLVIm)CvIrEh{?Bpy|=6UFo2sulXnE`z&fO%P&bEqF; zUR9_B&a_a3=V1WN2w+{IdJ_QbC;9znKI8gIbSIA9rPhNUn%o3>L&)~ z8)e=?xt;`bMwuHRhnVxq+zUC+fWf9K{z#uMP(Lq%xui@9=<_-lEF@fLH z2RZA(T&K(jC>OoDhMXN>a3tZFA0USqER!8m1NHMU7)&jWdDh9n=OB*h;N+B4 z<}D|utTLIL92}jvRJ%~FBanQXGPxk=2RX#RU3E-f$Vmo+2X-9O+}YKU%4}}URx4oMKx5v4RF7$#;`mOl zF_=-x-1{AV69vq8WzL?%D8cB)GS%gk8*zx4qRfj}uXaZ&O#Cj+^YAtv1~c0+(-WRP zi+KmkGoc(2iZ#m+GX~6DjZ-uUCrDuCg&Mdx#LNe?SmWGLoF%Vt%&dfadSi?t&Prv{ zQTBJh;B!Ey&lY^iw++nODyQmxV|IgiCp0s{`Veyn4BfD$-a9?vA;>ufW=rU>i$lzJ zV76d5_fFuOuUa4&+&MNAl7_alw78h%SoFndEaU7WYTqK#hI0G40Tu#%>Gb& z7l)VxFo!hG?B@9T8_Xxl)WB-JBACxYi(M*Ws)PAL<6P*+l8=UtyEw#<857l)V;U@mE1eQ`cA7Yq*P@JALPHW{r4CaW^5 z@SOnlpKQuZ0P`~9WLGBJOV}v^lT(??IO`|odSz}!oOi(FQf3|EWPrh=$S(ICjw$3l zT%5RBW<6?tFXG(n(H&l5s@;#b=fD*8)>>w|*@~}qz6KNV!dTN$oI7CBz6F!$eNd8^ z^gYstr|DA9)bS}!w^GE7GUYKuDAldrahy*RGX|#m2S~ovD_NGA z504si5ll(1y<^s63|;|K+Phee;-s6i5tdWhOQ^)DUhjk5KpUs5V>ZOl4|Bk0^VU1& z-H>Ol15@66*g8e&=Jz_D$qlB0x79IY=HVBlAhL>=66L)1e-En#$yK}tRXMM{M^Rfy zRmF>0r)ZX0jnlQ_U~cn{SSHP|4X zd#B=<`@q!j8r(~zV9CwF)bzT=F>S%r@@6uVwNx>DkB!*%yd91i4KqwtUeCMCj5!d) zH*KiZdS2PaR&v&9PoR`GPJ7FYGTksBxnmIEs)&tq!7?X8pQGJ-qnYpV zidZK$-E?b*)r5_+jEZM6%o*gh8?{>ByWp6Qf5lBagf;N;(Tzv!W>YGP)4;258Lq?m zkkioX5XVrhHu7SY8D*$kFMzq%Yu}9Iq}y_l&i8tkEi=kUZQSdPXwG?w&i8o>EfeT` zpVt64xZ-tg;>~o7=-kv>ZJ9vlrq=!-Rn7-7xly@Nl#v<>m=QFV(TV}{+R1-qZrp=! zo>7V*&dSqx^&+0hG@u}Sq^p>_VJ?sgHS?dL|C=U7WVhduA`<1WdtC@GUvwz`VLR*M&Xv3E~9I_x`^! zt83tws{ay)m=j=HdZ%p7^Qg=XnQ30@mLz(VxuIale2+M-yu+3mV-j0=<`*!nz4d7n zXO{VMAnYobHeR?DGx-NG)7ES37>bi6XUMd>%JR2&7HO1Pr1suSm+Bt8v5_08z}RKl zbaSq-XMcCHgSX!@qs+>3m`@O=v)8#j+Z zdY3tsWgfP1s&pZJGO`^*9~%y)pV!zi(tG=P{g??!@9pO;c8v7i2fWpB4E5dzyt4PR zWErRZy~d7_aoXP-=$QVnqN9*|e{Y&&)+)2gF*26>d;1+DW4XU~k(tmuv@(r?{$7!; zHusQ>o&H`;X0r7`K2(SOy>5;fd4g-Tzel%>Q5&HyxAI)j-`nHj6u{^nZ#BH&nD)vP z>c**Z|G^fZzt_Mq8JDq+v#IC?HA()xF?>HD}yt0u;vT*c z%p+d6I3@$k5N|y*MsyzP4Sm3-%39|KL*KBWymIcYMIHF*&51O7O#SW8SX8%OuFd}=36i$yseI@ zlb5Z;Nbh)D9Fp^xS8b3jg`qfPB_6-ZO2oVeY@EPK#JregMwyQ1;CUid%v)DMy$J~P2s19a^chNFi zL;Vq_u4QtMrc~)>Dwu{~W_lGJQ?EFWi>JMmxHy#8EN{;kPDOEOT+H?|jU^@+gL6Fk zA8nCIEbSbxkd3o7lmyQz6>{cyn=F$N63^-x?}%f>`+CN^Xqgis@wJ}u3XLPl8I~bm zYpxrW!Aw2RYh&YZyN3{ap4X34>HI$5n{1gG=9}uCX$^hmd#fFD8dC2E^PD#@o${J) zzCbB^gIREu1z70K8gJw1ifo~`_$p>MW;>FTvxH{`Le4_(vSntNMkkGV6wLEp-6tu| z43mM7QD9#1mN}+1=C3EfEb(?bW)D2Z>6ZD|RsYLg^(iEW%bpqNWv?kSW)4n9nCa}8 z-dm9mjND)IHpMZogL&OM6~}A(_1q^SLi8{oRLjdK%6=QxI1XM?w!nQU`L<7^b=+UT8ial~S8^s>!l$>ODK z^pfHjnu*@^>RKk4i8guRr#Y2azs+8fWdaMi*`qI|Xq?LGZ?m^Jj-l1xX0O*Q8%Hhw zd){)#h~?kn?X*nLpSO6YnbH2d#q(#AoOCm04{n8_q+7f~j(Hq5`~sM*UM0s!pWo)y zcZ~G#46nUoq=#?!9(IiM-W}c%$2^C7<-bGnPVX1TT-XOCa^dX>&$ov@>E^qqVEMu9 z@@|Y{a)J5KqjyY5XBq_s!F=qc#4*Ld?DdAmF{Q!m_Xa*=Q)!<+;EiWS=Zgd0i_B>K z9Pl=m5LIulb1%x7NpIObk3 zUwW+_GaGYCYcOAXx#w{zsl#L5P{&C99QUTiF`ba=q_-%Jp&I+v+Yra}0dvmV?-;7X zhryip&c`t$!TjJAn$NjYoQYt5^5`2#vLr9SlX(iv1@EY1$hOR}Ord9ODy`>Vy$Z}| zJ^$)8Wk&1ySFfLAq>ugTt#FLg{6%krW2D#p=IwQi^t#`@la3L)ddd6MF=AIQd-O#X z^&hF#KfIxi8Ax*rO7W*R#W6J;bH!V1nNem5-kVyAIL1#}z;dK5LVk@nhT0(PmMf|(sm>F1C-t4Eu zF*JJ?^9NdncUN{oaxwq1WrBUS1b_cx(kIw;jQD3Qlb-buPJC!DCE|ydP@MFvr@`!j zoQR*>F-uS3<7$-s7QdupwtzW^IJfv!9FyYWBx;=gE>5D~*u{~#Dar5VnBsfbLMHhG z9V4?M^0<)3xT7B_d7_UYa+_2=!ISWao5z8V#VzH9+$OkCr zceczZGYpc?Ag^-%Wy?%AJ+7c!V9NWvV;{^Z75ri^QeNDqe;`f;KgBZXSsy)z5rDE) z^m{pGJeX{jdDt=KAvqVAWPiG2?f{eDG7BBE&&8?aZ*a^>7pIcH+cH7_sqBwfM*0N( zr;0z*GJ(!j{AFaXhOewp%0&)NnIohelHi#X<1^h4^s)%+@ssR4$1Z#BQJ zW9DBrc3pY9-@!4jfhmGg-0t^t4E0P}e^vL#I)-{Cd8gI=X^z?D_FHQBYaKHha%d;H zhJU~@Q^Alutl=Mb%!Qe}s;%jVUg1()0Ykah^m9Ary3<^WT7F5#6az!0sO492jEsxg zeq+bTxTx*7c1%0?qEw1H{y@j{1Vg2$km>*#ID}uSh&#|0KdL7mfQOgvvOopCl-02TpMR8`B4mjhe zg*bQl^DQ&o9G`);9+-RlO^#XD&NEHG)c21%<_F~73Jku4eU0QyH=oSF4FWI?{o0mc zAG>ExV;cJ{EOR0x_W3^lxMjG9Q=BG#q1Q=Hx_Na8)?e9-Y3f(AOt4;VdevBN>QClW z*3S1q?oIuYZ;+f|T%`DQEt8&gdo%9ODSm6md1F`M%6&Pl32!ZCZmP)|tp zCpcyo_J~NsX8sb#90Eh7Xy&hWOs#EvCe_^E?U*KD$ci@i4?E_17pH}P-Z8~ooEH9N z$6SZgcA7z2`uSGd`pKFAhGvkKeu86~eP-wxG{&L5h219wZ@z*+LA6A-l9@p02Hw)5w|Wy_^Ab$fql9FrS??fuu{7@Da&xSkN4dUWzP**LRILPhMhq9=6n zFRUfW(@pbY*dqed#qafYkk>dcUHzD4rkiQyuww+Kn}63jPW8=mo|y@zyFb%1+*hf$ z^zawQF|_jS>93AsNOCWKx0CY;Hb|ZY)7wvYC&-;r_3M z1k=xd*fF&GP0R!S9Lr3%XEJYr>F@vR&cFb_{RYZwmiZWa%bO5qfIl;i*#TydzdMfE z1Lh$=ypdD&x&eI*%p-n+V_t(CVutwr97B>1gBj*8j$@938SWpk%ycsha|-1?(l7fi zNoIy}f7~At$B^Vv{_Z%2B#-fnYzk75|nkFGtuuC$NU0jvcEQtxeVq>Km1;hDva_^^HbuO>|mz*^W&I2U}pN4sO0oYJ+*sZy(3p z4Q7GA%rWzD>d^$uBL8R{(-O=JexYqFnc}nuv&2sk26wFKD~}ibp^h1H4_0+3#Y_IO zIHnKcyy72@V;%&v!q1w)k}1`rU{?Co;+WB3Uh{i7<|f<`ngZqxe_ zd;AfOSyr0+#$JDS978=}pBu};4(EQKehZiKdi*KR973G^ew8@pOE3rgnT{!e`Z)#W z&{c9i^&j3%a%Py3ur|LU&ZquG$K=4-Xj9BzNBoK(aGbd{F}N`EeeU;jOb8bkvx52J zD#>5^l!jJh!(PDeiXl$G&^}~-%Z#;hW|{I`@ck6p>!`ojG1DCL^;MFO`&(@sw!JhL z9QXHFX1ckvAbEMleB+<8%nY-*1is%xoNxRbACf*Z%yrqY-{Rp-Bfq9&VlU!%KB3Pk zzlCF(;E3iHFsJ=~aZE|ejE!R|fce&+AIDS!bH=A%tfss=WrueL=B!^Rj;U{%ig8R6 zFz5URj#=D;zIKD1@_RXEhGV|>$2o>>D78YW^ZwL0rX!di{P~U8X+V|x8`Nhw=hjni5n2UZ{$9#@?sW0UGepOps@*CPX!Os6Bzne>yA9)Q#s!RSt z%gi#z(O37Q3;p3Abxccml|vBcPrt~=l>010%>Em2ugmZ3m`yH~36FKmJ}{Ij6kZ(1 zP%1CH)iE7hDnES6F#}wxa5(E;&WjjIl_|_~WiY-nhfBIRx$@&25_x5Iaf0<%=J0(s zPEhvD;ntQJV{R^t7rL&QDtmase#$*al|6j)05R+vX9mh19(d3)W(HnSW+vqjGxL-= z>XF;S*wJm|3_N_Y{~M;ntQJWAa@xHcsyF+D|!EW-uv$ zdBQC|W2P8(PP*hFX1`-D|IVrMhns!QaVAy6Xu^mq7#!dYa@6Sc~khf zV~UQTFDbF!3zz(Y<&5~vnEBA~=5TArv}uH2B7@{&;iNA)&Y`JX(nxrYV>UgHTUAIE z2^aZ_<9vkLcnM5mxc%46%uV1_#ly!Plex1ntB-M<#7)Aa9B1Y<~bs?y;Jj(OKH<-$8oa-4=!xJ@gD3w_H>k&$>E268Hf zm!D&1EaDK89M170Gn23)Bc@V##|373peL+_hLyvo;+V}~qT%q*9Or|GF+0Ij3s3%q znW3<~2f)-0C&3d!uQM;6<#w+Vp6Qr7Ze__}E^?e&i}4*cQr!{0fOeu(QOtUj*WKaW ze^|!)>L$gk<2;AFz6aANe96n3o`PN6XaC^sG?8Lb@3m3+m6+fC7sr$FbcPL8WH7b=&^sHtUOO66Rb}# z4$e?{>IWZMpQ}8LOiqB&IT|!qdwxhhw5(a41A;72?&n^ejq zO2@We@5wlxH0N_4-r(tgI}L366z=C6JxwPQISp!veu_Ohs8REF360<_o=Ji@8R=F} zp&(9fxz$r4NV#$~)aN8<#jT!>)5yI+0zFDJKJ&?`b*%$r9z<9~I>~ zAP;&v1SwZuZ=so6H-PZETpN`|Yds$b4UN~G zP*$y{|1dxGo{BM4pZg&CZa59D6Q1>gEKm|5C(H+{$2{ZDM9l(aA4C+A22bnRWYzD5 z^P)f=_vB>}Sp!#3TyHc+)#qtXwa_@Nc-nK>IcP;K#b=05dkS4-?|emh##7=Vk3d<^ zdfEkP(_evHj^~Y=Jl#x=yphf)GFa@< zBs6KHQT_!#ICoy~WSl4bD1)J_6v)QS9N}%s1XvrR)e27zYy5B}IR?l|&(%zRh53co zl+~V_n2dzc#;m^DQ!PlP@;}zR>?z6?{iFO0F@{zzdzuAlQ>H>c6Y-Bbv=3kQB)G_v z&|_;n&4M^Rw$`(OiR`hpo(?9m$JTnbGm$;E*3-{K_Sjn4_DGLKNTkR9(=0;DWAUh(FxyiGh ziR|Z1o^~d(pEr5B1#!l76Ss7SBHO;n6F))phJn`&Y}Y1FDwF4c;J=~?6=I67Z?8eIfO=WEZ%iC8*W;plwh$#fAMoz0$R zL7dUq>e;|Vj?Pw32NO9uTRpvkIHR-G6Mr$5RjyocBF(|Ao>D>DV&pvC>S<>p=kiw1 zr<15x<(O{ubQ6h;=~hoa6FH_^WsgP1^t%X=W9kq&rV$bu({5=M8NnYSM2_H(9#8I} zBe=tp%tVgh4o^0b$n4(Xxo$GGOU}w&o(e%K6}&EEtnT(Kb&+*27P~zgTm)BNdpun( z@&;&nJ^m@^xl+NaIck3PWHG@t0DAt#Q^o|Z=0sL8!7Khd;O7@lHxpdfp`U%811^GP z{pv}$gvvrq8<0Lvx{I^}`Q0;{39iu4&!3(~CUT|sm#32nuJq8)UmiV=JmX3a>vO=9 zDaZn41+*A*_(4y}RMad`7QtM^>%~FOkW0x5S8=F`QO_h2Srx>nd4kj{c>eipu!>Pj znJl~!pMk(#o7%`^(iqYlp>_*Wt6a#$qgG#rWz{R4Y^ADOnCxMqscHGBsa39l-Hb1w z6<)PMka{I_33)cuO{_7PnCjs>r9L%j8v1eOpij+YBIlq_&1E9zpijL<5N8hhRJu|- z8Pca7p8XsmXNp7QO!28D>{(_%zw{HCDWM3FGbJ1$GLPA6xA5cK=MGSNxfODiGC)<} zP6OL6TRK3EXChlVKpiQF)6xOl(zeL8V1O(=k`o*vTj~(m(g=yeYMv1$)lMXr@YRs7NfuFz!v3{_K@ z$o?6sj%Om*BtzBNOk~@Ks`oRIZ6B&WN+hysI!;~5L}ugT)D2AJy6!l2GZWbx!_;0T zGFpyT{a1=QN3NA8s3$OyJ$8aRmWk}2)X11hG9p5x)ye8b!istfGr%coo{QjW`4n|F zdzM$~Q`IIWvWBOsy+mSegS9Bu^)z+pRrueI=hM|x7qQ^qPFK%x5qt)8hDuNNoo7I! z)oh`G=P5O`V>VhXVG@SD+;1RDj8PkzWdEQj+klK!TbX7xvttP_? z7&B55_&EsVJhgzyCE!Pohr46-JtnWNfww<_j8{JvgxWP2$OQEtL7dr?qb3#5c**|B zQKvJJeK<+27sT;1No`||TxU*Jdzi@anyeadUxBM!Ii`8);m_Kps)s*oo2nlEtnE_u zc;Sai9|#`v)hzOC#Q5nAh-qp*ldIu=?hMdOQ;WHDd5l426B};oru0~AeA*kEnyNG6)WB%nW0uQ>A0DmY0gla z1lbXT=aDkN&kPlchQBs7nrwx$VP^@=dh#Q#apQo@RD0O-BW77J3YWPzV4f>ad>jqr0hkV3VSh`xI#ynO}aTD6ym@-p0YT_?zvYsvF&@N*-O z>(mX`QICBG`+u10W~pb+BC;O#-f^bPR&k#fd-W?O*GJ8iIck~E)GK{?__nvA%uyR$ zqy_H&Zcx`T`33I8@k!QAYKM#9vzwdMJ{Kv08s4fV&c@Q=Yb{`PFOU*-Jd^j>PpLZF zMQ~U4E_I%ZRDspqYO^2}N{pA*BxP!!AQT&zf6COX>#?jIF<4d&Se2>%8>sCs9t%&} zAz0_B8G`JH!O~Gvt~M2sX2ElGFMPk+DaekPgRts(5;Rq6;Z3BO2mkUskO$QEn;omw zKps|=VkA_bSAjgDW)o57WWZe=kUDi0lWutPZX=M#)TOr^YSpN2ClaxGTFtptXcTGn zY}5!YQ?qVEO}#SkavH&9>U0;u5nQg$VPxC34)kbl?5Hn!*Ho1IOZhwSq~AHJj81CfHKc zY>HYjeym=27kYNu^>HMV$T)O}jJnSv8d<|HBShBl>j;rGbcn1W{;C}QwW+d(Thu~P zADVGEPq(QpE`nqFy}F%=9Kr2s*4@~OdIbq;epCxx1jlrzy1_+oOnahwW4HRP&^W!Z zTiqduGf#J`!|uVdh~RnS-D(CA9j_Po-titaR}km4&z`85-=h`_O+CD23a2QcK6}(w zCi!u2&kdwk?PF2`nz=SSYg4VVL&xhUHCd2)#g2vNnPBykTE-+e7+MMB7j-+6Z(&t{ z&+PW82VCS=(EO^#-%EWcG!~pUR#TbayGwtArjL8fS%>eBYS(^sm9W|oGx1m0seqo^ zuf8vc)2shKs}8n$W)Zz%v|rwX#K^Zl_NzaT#wdg9Aifd5U)>w!`G6oaI(TApznVH1 z+vU{fclAO+oH6}fEpQRE`d!^5NL$PuaBX@Ro+bUEZeenC34Fl`H2rG&edxI@X6Ad8 z)&Eqpnc!&zeAoU@btaRoYv>C-f2pNJjNka_zyY;^HL}MJs2f-_c_sD60d)(Li_W1P z*8}PSCY>;*xKDdPO`Ip{W8D8E?c5$vM-z#ebtdF^XvG0Fhshb-ihtB5wtA$Ldi7vr zR?4sIu)55|FKk!K8?qfNX_BWGf;>m34NAtaGgPuBfv!f=6iE zxLsK1^I%1Ng!V5JSwmGzET{33HB_}sCUSH%t(iz0iK;e_HF7ouw53eu!}f~-nt;~9q^KUsg3$|TJw#&U zJPl}B71XP8o(8lWA_nF|vMLdzTvwl!e&~M3$s_@db{J^JVVxZ!M=&JgClX^0kt1kH zO+d~sTk8;|J0oaIjVedbj+8D(FrtaXYMj=??UExHC;bHE2s%WLphM&cIz*0OoOXac z%Mpx|^)ciK#&cP%>S>uY%13Gg?#G^|Sx^CMiKDa>LE01<;R)LLOl1EYt>qKZW&aG) zN?9X&W02Os8X3KVwDnA6O9yFPOk_(3Y5h!OO9yEQl_EBD+0sE;h9IqqY{ek$@JL9M zZ5O$>A2N+YWF!ohJs*h#hsc%=k(x*(BuOI19j{Fe!80dVR#K$&E8*#X6FfLSR$4_O z;W#ay+GWT{I4+`*{c~KzkBlgXyqrhp3X&sMvJZ!8MeG?PVGqoLVbYI?1gy{TY(C`!Vp8L?a{N6xoN7NN|X3>8Vl^ ziG*}XB9Rawk*k$MWJ}YvW@=Yt+#QWC({MLSJBwVbKF zNmgQqAsIB8T9=F9Ucs4KkBi`b-C0_{Ahd^e5?GzB6+S?v%P$XPY1K@+cF@;9vb6O? zl$3JXUCGk6uqOXe_?{JHi7d@}ko;_h^C@^5JWI=Fa`U^i9?Q~7i6}RYgs<#E=~-Gs zwXlkO-QqlLy&wzp?XW(??|7W2bqUgDtmHTA&(r#d#MCuF3&78LTGB)4r%k+p{t#GY zYgvLgZ>?r)`GQm`*Fl|e=OkO3#iSZ)2x&tZr`^Hi=SN_@3M<(2wJI0E_v0?q-WLR( zwSflTq07;}bP;@GZjweHDx^0+$3qRLXo-udrMUYv8AzVCPLMXSLvg4_X`=~}Lf;J9C@UF#w^?pJALg48NI-hopgV0E?DO&Z;Xk1*kW zU4f?8Pz_V_X`ih?t77u@TKHxvSQTjPMDz=xUe$tZXAO?&BZ3q_zu^9ue1mv~b}tc8 z=f^=aLwnFgo(FP`_PC3z0dk$zAxOEB2=&47nxkQl<4#xI9@~I9}^mV*t!_y zA0T&X=}h)6hSl_uNb;C84uJKcASFz`kB~Yd$|rGfdRA!GFWj!s3z6#C{;(c6=R>#i@Xlk?yNnmFHcNl84 zMkZf_<_e){WrFXBVb-eAdYH(!y=pZ7GgMX$)NqEdN@XH5Ta8x0trHFr$*~ztL3l5J0+ql|57a7*$1f64nMyN?Rp&~+&_4cuF($P)vwVG z-_@_xGM+uu^Aatg2}!+ToC>?mQ2G+B<^>{~QX$@f)MeSemb{$&;P*g~Jg((4!Ec6C19^g5O5=|0dQy8p zXoz42cv5S0kw?L*QCmYqf9Vf;?(np>i3xt21>aSCTI*)g2n65ldRpscBD3E!nx`3S zSg8+&e2D++87)Xe%pI)HQv472Yg0$0(mRF@Su_WBlA%5h!8bcr0BMRE!6q$5cy5ci z98M9e5t`N&SZ29`|dcEc1l-krA$TxLHpHO6Oow4i>akAYpqOP0)nfrm$g1YT9v`W;TKoH z^BOJdWl=-%Rtw(MzM>T~k>B=tMe7#CiSSpnzTot_R{W~) zBgnnr@pUa9<|leS88RfUF4k+Mf|QGI&inzTuh-TwIRLvW{{neK+e=oFQT{)z^bPdW zDv0+e_!>#n2)?a#zlj=W7QC(Pb`hKfZ)^Kq1fPw*qj@$sRs+EEyIKYjJ+lB#Is@6L zuNoL|N~|Cv@LNM)oq zKGT*mx%gpP|9qycXR`P&I8Oq8KGQmwwEYavdj-Ka8!=1Z`?>f{xz99Zqf_ULgeH$j zWEOO4^8|5vzEjiN&}xbD6?o1Et4^)r10p|#;7h7NzS8=cjDW0F1f)w#*+iPr@C500 zAm3<3Opb(e>t#T`)oPe@d<&;%fo#?~m{h~M_dy_AH2iH-Ed4{c+B^c}e_Ep;waVqt zz9)cur**OBa(EZ`Ss>k7*+*nG9iAYp0J2TnE=aBN$%*i$36Skt!GB4!*ay#3fb7tU zKPIwikfL+~*`w8bLgX6QuloVWFPguD$YW2%D*J%^rX_twrQ!~_Zvditw+OOC zLC+I_Xx?>SlhvEx`BEUdx2cQB5wl?x48-(~|AxqEKyC&S^lo8t1>~{0Kx}Ubi~;sD ze&K2nka+Lm=aG)|E)^OlA0Fw=-i%glF>|5LbzpU*w`z++o(FQYw@Z+61vM`N85HGt zu(#@eXys&*!QM_mYL(&eKFFJ3HP}08tI#M@UsRM#SXCb5EnqT^Ns_ljkaD5f2v)~> zdzhdG$#LGS@6b=V@&%AjfeiD;cN4h|$YvnJy{$~}2_$Mx@D^?(%_1N>ft=*+WODUt z@-xC)@jYqMfb0X!NbdnAeKByB4ah0ptRF}d6H8>2SKm(Li5p=&kA`nVd$X84ngnZX zAZK_tFj)joj*bR0+B^G4vbr7WGaSg7-YraKGCA9uzJoN!Kz&An<{WPmlMs{hya$+A zuwKmo%{Xt>PO>@$NEVO_ys14z=GVY|Fpvwqo?S#fg7qDiev!9^$s0^2di$8vL4D2# z%_Q%tUb6B%2j4#iGR0f?3z6V@>cgqt^u0(blr7)~`}s0&k09mBX7+QrxA#}F>Uow* zpYF~6jmVkc8OQ4??{+3w7Wygh=Jh!mEPbXo|92vPvY%_c?M#xm?X$c|f1svT`M+hb zBMVpa>%CoqR4V_#RR-@1=6IX>QB$d8enaF2Z}Fc*CP4IJtQL6>{Dq`kS#cTk1eAWG zH|cNE6oLl-*G=9ACT9S-6f`$`OAp|`)G8Yn$BH*Vi@h6|41}@3cS3LVD*uq?`86@h zm0(rk&17=kd!)I;TPjGU()kCiJWIVbf;is}E%hcJL_g)qLodLI5Aaj!trNugGUr|1 zhJQ)Z23frbG>sQgL&3GQ(io*M^1>R&P zEkIDSz?;To*Y~8U@Q!B^3uB6!3U3~h2G-o~En@O25Y*i7EoD->jr>%4YnZG7f|^Qi zBa=bA!e8iJ$0V6o_zS%)L}GmB(F(T8+s$MU5Nvyuw@MT3ig|P*3lPU1i0pe?!-eh>^1oQK?K+w+v-ex9Go(_IsXW&6^viRwNwwQ%LaK%{dZD6tj zGGz^TuJ*PvkzaIq$lEJOYm8h`KjcjjKTptRr0{nb7JIXpoXy{1SnSPVauZxDbD?Gr zdkdM&1A?*ju(y~<%$_jSu*RF~D{RFQZxxem z5zXP}AVe zfOQzg{LQndS0DH0GCAjA_9w-gQid z!Fucr&^+O7XOa(|aeh7F?Pc;YLCF^`)&NaF8of=Vi8%}IG*R=scLS3Pm^69YiA26!`hvHYHFzKQ0X)xr!Mgz> z0B3=W-eulSCiqr3)@PY_o{buMqKa|2%vSt+?{X=4#*mB61**sq^(v_eg(4DTLEhbB;~NmML+Ak z9mf)R9yH#8aA)W38A{~hrxYa)$Xni$VMM-q2A)R&dEa}0$)nH0Z(jh}=&d^*HMPpy zcfhIu$Oqok6Ohy?OF?@jkPdI_N#tiD+??J5EGjJgh|*0NL!VJB7%8h~7tm zeCMq@mB@8apJhOP@U}3~prvbp?DS@*ljd4Ktm}aMcc<1volE33s-#f{I|D-$pBnK0y*fNKAJSAts<)!y_rb| zkWWB!gq}HuG?#D(JuQt+!{9=BNdV;u{3(06iCS6ZS^QbBdAxcRJ@Td5k@_k@mMD+q!)a)+8mZT1Q&|`Zn4btg}6V)DC>o=xQG8<>1rPj}*ZdZ!@e%IOp7D@J*GQZ9Ku1_*xr zeyW}&h_gnTs#}wtI^$P*rs~JL$ZDwJrH7F9K=Snr(&%{V1NQ-@>A8Y9>$+)r6%)DF zbcKHS3HB@WW}&H97O#&{-UH89=p8Qd1&{*0&qclma;;u61?%iY%N%{f<$^@MLOe&` zBZzZ)q)6W{2#pRtCo0m-X-?a5MSY__z(sJM?Iu0dMfO4IH|y;#5}OEXW4#de2ynfM zZ($?3OW!U?r6Rw*KUdeMi?S5_8ZBn^xq6C=3;?US`gj*f1ahBVLyhM@Tc3z-23*vm+xkCTsD%3c=alhUrh|?SQ>p!>%_C}@tvx{JFEY$yW z5$ugB-G8-cm)Ipvhx$CEXBP;ftb?mLMqRBwgUOZiDKcyIVi!3VtRB(J1i4@M!ILUW z^yxFm&*szM?hrI}dWDNj0rIHc%;d34;0;G;VZGi?M90$+XjQNGxd>W4rYFo4p7r@) zg)5l`JyVcc<@6f(vKMF?^yz}owRfgA?ji71Ndj)BY3FN>N1RziA z>mVj@&ocqYJRnQ;Zb2%Q2ftPnv})2lH&9C(m%=&|$TB^X$;M@{+JS#uu2(R*dpVJ2 zeZ3&%aQ6s(16D8UON*#oGhw}e?RrsfC8B&BOI9!H{Y>yT4xRw36?(;uRC+ULo&~Z} zUv(3aOKM;}0%VomRZOG{>hm&?m-K>Lh};kLc^$~hdit$IdO?GGm235)+lY)F3|D*5 z{6}wR5pBdR6a$?-XE!SGB{h#Q|Bb$InGltBh!c zJ8>Xy>k9;-c*d30`}!&(;+evJ(7dmAF}Y?TT!97YV}d6jkhJR7eN_65Q{dZ}Q16X; zsvz~sZ8PaBMs50Z7x97SgQ#o4hf%riL%nJqdahSiL9UAjs}J>c6%H8;zVh9`iQ8*=boSHQ(Pn+G#!VKGl6`r7m`Mo-?Z%1%LH-qbEm$JiOkPm>QFuSYf}gO z3g-cf;R%ZVxvMNZ9r~sIgNvLGWqqalE3t;P$|;w@*YAORtEW^sBp=9Ty>$_hzn_HP z+ywHSu0M#xc|T>Fe)v03+w{ZVf%;yjw+@}mzg;g8erVkBjg{^CJQukc%KA~SBchyk zDV;6csjqqnONVbqJQl0m1)81ub|#-Q>CrulNrS)ZF&{L$^js$Rn*t92*{$Pm(4wEE z<#2@svPa*}WY`GE2S9pt&%>m72v#ypKz`D5ne;+$;CnYe>y1lLQ>$DsHdc8FG{5NG zL?SDqy?S~bX_?K;rx)ei`=MCmSt?{5J4O)r4!G5WdmY`6;m(jOI>f9n&Wg>sdG z@8^yEdbz6Rnk4l?!g$RHp` z8rDmPmVT6xAxN!K2hoR5t`m$>CQHA9uP=ku(NXmoXk@;Oew;cFG~(ACTEl@xF_B0O z2N~6@`4w{BN#J>qvC2j8DS4ui`ud?Y9BkwBoWQY9PamG$vbrg3|~V+)f> zk3rr5l42Zik@-MQFlN6&o@0N8oiHFL8dWYLeskSO_&?G-0DhhVO{$UMBFlh`FlIA( z9{juv8J3eWET0CI+L_(_Zm^1uQ()d1v7L;rv@uQNH@$YIicfHdbA?Sd>(65xt| z6v)pr`k4G$NhI4y+=PDWl_URwnGK%D8JR9}6p-@`&xfQL_ZLJZkPD1t7a0y@ypjA7 zYL+Nv*)Uc>E;O=T1ZUg?qeYNf<$BN{xya}j#96oG7_t9FKSV&HDc@4P=FeX5OW7x@{;!$t=a4SKa7$RoyH7txa7F4C}i$unvO z0D0WVbde+=Pa3mbBo)ZhMum%H0D0C(`;GjpPJk=|^DwLsPy8G^uX4}n!9kab2rYmNc39LQ@%nTxy*0WX6zYU?xPj z4R>TlJ`w#^cw)RAG#?nntVx>&D|bQK1*uoA8W=0)#fQdTCU}1ASJ3>|@W-NOI#Ko~ zkalApllAaqHU^#^ePTQ%h?B!VHP*Ta?lpaCeCi@zu<9_j3(^+zAovLa`OJtp0?TTP zX#s*(pBrHp!7rPAVI&h#RxYA*JDoe7(rL822z~?SOXDn$@T|;$mZImcjf;uI zAi?jdbr}V$`O1V z>iM6edj6NFvi3!lwJ)lyU!$!0qOAI&toBD){SjsLN0e26RJ;C)YS&*;?fTp3a`n%6 z=;wcoej-XS>^0$j=0PLUgTb&=p!`jDY7gKy0%QlNX$>!Bh9|02yG$r#R$OAV-@yE`nA= z%rYX8-)1`2tRo_J=e`Hcv1Y4_>;f{>gr5Ww(efaV*Dy1Mi1P1r+94li<}kVCYDtRO zN}kLgX4bK0)^7T3_hDuS6Z~c8-=M7H%^pFVu{hpLKk?A97;feZQm@2T!`tUzHQa0z zq*l4{Vc4O8(+?+@ho8DnHPi6&|&Ar8tKXSsACN16FdzJn80_%6dJa~=_8 zSY@m-5K13qcC%*S$utK?nfeIy+gt=AVZ7NTh!Y7H znyKlc^vIiB6U;m!N;~iOPB6Qf$UdB4!jD72C_6J{f|<=k?uTDw779XH;wGr!MLaK@ zE9^wmb2|EQo~%ubnmZFsOK6-m$waev3|cwAkvh>#8%so9%`Y~KnBcFb-T|dgGMk9# zr-kTOQ*)#0lWT4i8mi%aV3lij5mA=G?5+ed**ri*Pve-MY$j%6=}yc~Hq!+mKh?r& zJdwy%Z;Dw$M8WUA<5h2p*}xik)th2&V9k4c)th3*pNVBv>hh{L#Y`8(DSe8WLmCk+ zOQ7^A=9Mmj@qCF{;v#qj$uql&h_@1+0IR8HzaY*iPc<{o!qS~<)1~I+f>2ABg4Lzw z92Z#*twvIR&klySK^0B=)yC+B7GbGey9Br+D$ z%p4|o8XVslnPxT-(dF-4Pct_$k-u|2%~Z0e53_mYFwIO7#OcFnW(H{@Gj5uhEr=6` z)6Dz}&`+)M*i85xgwwF}5E>1Aop#}>@@lilMex0( z0`t*}91YIpnP!uV;2p;`W={@kYL(OAjf0Kg`8uIYL&1KPe$O3Yl)dZnKbx4ke|Tn4s(kjb2sdQqNddBy@bevrLltCW%~03(f_=Y?vm~{YXqrRE`j?d?A5!??Sj-Q zcNW6R3;f(;mQE$B>w#dj%r#pDfzw$J(OAqi(=J6#xl%lbV(dOMUyw=#&*kE`2<|gW z1*sK8I}V;Po9#?Kw_xQ7q{7U+jOvV57LY2lL6CA~(I0RE8OS0tXBugcU`rn~l`DuO z!n+7bps6 z;q5(`xizM8l_*QU0`A|jH)_oBL=+!H(<$J&#w-+Mfgq;?sWsaLDOdX8%xNZ&CFatr zsm`~+6XR?k_2vda7AQzi(_j|Ppt25*p?laT%?={sL^Rg#6ym}!DkDnG$f%IknEGgGf4&0Nsj3Z&WWokgS=NI8&|X3K0M zXRL%Z5|Ee8k{gI*!TJY(qvtubQivoDUftXUgkl=Z&Pf5KcBe4}RV- zn{Gl>Hk=-!Lp8@&E z>=L9>!LqPdKQX&+M-6<180v%3@~Jud4kE*0O+sWTlR@BzNaCHOSq$@(NG22iVmMO@ zWqoQUmZGL!IR>n{fpnM|g20^u#QZW?Z+vc62?8fWfM9QYVYb{&o{?Y;zcjbsgQQ%k z9UrUg0zY4wv&)F=QmL%3&2}b!jYyZ7dM|2fmC-Y3EWR=QbBR0z&)-;}6`99LLg64N1Tg`qZ&jL9JWSf~e4>graBX~xuAI!3HLG%a4(s*q*>jbG))=Z66 z)MVJrFf-@V*Q@!M4Ej z9y9-b^y8d5>orRRsT3z{e}zj(ui0BgWo@1cPcOmhCo_2wk-_J~y%&(Z=29l9K!yR? zXYLiGUOAP?uV(54XjQ2^JCm~UZ)UzA<;pt{^EjrznZ2xe1vHpj`pl9C$qL_Yz_#x< zw^tK+?`I;vo3j@aSpinqtACiCOlq0*o7oSOW)YJ=&832rD_1c2%S^06O}#P}qAnF$ z@wZvWWGdvS3?K*1)<;OQ8csou0}|uwVX^~qT@H{~Unh1q_?bE!RwzJJ-|RXhwMyQ| z7-a?!uWu=n73|0GEq#nMW5Mcr(3rl|1|pNWJ|UmyNg~6JhHDpSY~RI9>f!!$9*{WS zY$iHft*U_>r7V$bQcNN%S3lUpd&fu~C#2+4~yo+bhTtBD> zJ%d*D$_-_)%A24`_H9{8tRufr`hbz7x$OXQ97eT8Dz9uFuph3?U`+8g?9;~MLGG8D+_d!`h zfn4rubdi&QTaT1+jWbt z#6_@OxBFU{EaZ0G?dx+9Y}dWM;mza+&*4u7t8!n4i%bJj;VWQ*zn(c0NTsio$^YQG zJR8VDUk#JB9dHg5NR_Y4MQ#W3fG_<;Dk}l%JQv7AzA6`~1XAPM!sK8JtcHNp`4U%< zRrMFJ9s%;0ubRmdkR_f4^0=>?$se$~K&vNx=_|Akrk5Hfh_ZtFo}iJ*)2d;_%<;4;te9Je4dxcst%sMeE^!(zHAry9LQQ<1CxB1 z7u`VK@bxjN*b8R{fVBA1SCbzk{XklMWlS!E5k&HluboLU)X;N0T!npkFO$^`&>KM@ zU;64?c~`Ndc4 zA`^i0`8t?XLo2X8fBQUZ$!adw@SrctMX;)Q$ zMtLoe$^Mk}WQF8SAXEKyOtwSr-3Vlwe~XKt)s_B~H^}O&2Vj-}nc**T5iILke+!cm z@cc25B7f5Vkrk4!fE4>{nCRfA8_4bcEiQsqrT)}6$?6ZN56<^8f02vyfaX5`IwlWr zyDI$sE`sf<@@H=#KLemFY}Z5nQWwE?)%aI2c@lEMZ$Rq&p0~(q8_dcBK%r>UCjay{BDcZl;COxF&-=h3)j&S;7j7aFf>C}P$k+bl4~d)uy}BI8R(~gx zRM4yi@`JzlBhnlLX>;K#hxFtj-Oj?Iw+k)%k(>Ok`v(h>FaLKqG5pWL5++_K+VLnF|AbOk`v}5UA-T z4HAsZ>OjshI6Pd#w z4|Fh*@%(ro{ue4;#`80QTqZJyKO3lKA|w3yKpzvC!zjeo^#an@O{Y2!vct6nkClNU>J_@Y+i-?>Tp9Tv4CL-s>7lG|ej9@5BJ@N*ztB_e0RzCeeI z;4JtpP_2#Z2V2pdq-5iHz_kf~`#Cwcv^17A7+0 zp9uCdk=KGJg4QWimYfAo1oN24S+F!%!$e*So(r}!k@KP{n0_kxk=KG3f{je%Oj#D} zWg=%vb1-uhSs}rhvLaZ+M9!4e!7e89TJUl(Ii0NJ+*uRMXCki!uLNtD$l0_u*nT=$ zA;H=7YA|;+5jmUQ4EBt12#(;}!RAaNayGRF^|Oe`+4SGw1}1VgeH?5!n>2DZbp%&s z5s|a$%V7RFMC5GxCb)%(oK61==ATO%Ih(cx8=1)2^kcB(0@BFYv@_V4LqyJ|J;B0> z4#C;MC5Gh3+7KEB4^Vd!K7S=;B5Lc7(bbaoK61(XETx4i-W;8naKI|Z`Ax! zLR(oQ<5>wQQ^>Q7-q=tA6B(!rP4r4>bOk~t~LS0N`w5XxvOUSc~4J|aCiLA3X zba)2PLu*(g<3|q_=8+%S^S&snKxhYRWV-^P_^F4sD-=p)BHI-Tjb|d;6$(`_k?jhH zdYQ;}*`bU}4{cXmsF;atSA0|r2ZUN#Bil6~RC?K=?MjHU8W{SEHL_g;L+Sa4wkt7| z%S5&-F;v7vwkt8z%tW?pNXWXJ{K$446PnIMj#pBsj)`p7u~9V~8tP$9*&g^N7+leY zh6<*U=NKR(fgBfQl^ps~Xq;0P$)P_5p?AqMz$!Tue+Bw!Gai7wTzootd?=mCC$;p1 z?)XpvlN306a4uLKA1YCA5W!e6oK+2;9S8TR_&?A=0x$ zWZNAg+wPDkD^=FV(a5%+5c*TphuZag5Y91%{8t{@&nJeGnaHwE3}q0B^w^1^GA6QJ zCxsdXsaMjoV6O>!RC*neS=F)19?)DKDxBqL4gi@RDxOV#&?;~OeodZorgOe-W~k+Q z)YL1_42LfmfM#as2SMn>-LZmz0RGwn_}ldu;n&DGRBY&74rHi=d{6OK(*NLL}q@xtYmE^->tY zOQXm&KyD573O}teSAGYllYrb2O1^<=cxpMFfw?1;$>hp)@TM1N?hG|BDFRXf?C9p#b>DqY6dL!m4|S`}H=;!ukq z6ydwTPfe)9MScgeB$RQRm37F4QeZnSJtp znXWR=hmwfsa+IGBWiXL*=lM`R5k=0O=R;+JY*b|QHia5o1fzF(XgyoWs9PDzza2}j zSKfyDj)ebP6)F>?R{0$wYAleKLqqRyS~?EMe?nP;v?;O=Uk{Zq!5N41YkjCs5T{q) z40YX!e#(^(njk-cpSMDdrAXdCB4IY1=mhe1$bT0S_?F-*`U20}q3MFqSX?PIWiE0( zkoQ83E^-f$O`#1gvIxj0p@zGiRy+mdtB~g&B+lq;4dn>pjLz0j32Wqh|1PwYG`bv% z??UU@N{+>Mp&mh;vFHwY%CIaVI2J#Ik_BmtjPlMN-Q{~L!?i%w9SxbIQN9&@1+<=Z(6{W{~%Vqr@${-TShrfsN zS%W$A3$XelRL2^bA^St?n8>fz_lG*!N}iwZk6QQkhYkqM66MJZ_y!Dk?hnnq59>qo z>jxlzhH3<%6&hy0zeBx(!0(Z9Y#a=E=80D5GByr|5}C+(aWIrANTn__+rdyCX%rbP z2Se3NWVHMn+QLLe%fF%ca#5BzZHTd8= zX%TARt5Yy{@VuyH6)<_-hX+~fh=^ zR4z|8=kr0rfR*xWbIz0i%Fe_m(TD9qNR;E}POysOgvGSS7S(##$5>e#bNwFH3 z$jD5w*0Yt2%oMAGiHyt?t4EM}C6ogvrl3A4R>i}jK9R^g(Q0QRBl9Hd023LRCs_$K zWF_-hs#U;5M&<~sjERiQG%KT)tYl=4vhtb8$V|72n8?UXx0;#A$V|6dnaIdI-70*9 zJj-m8VKp<6u{zq?&P2xQXe)UMT2<-~z;zj~Afv5JCh|%&+R9@huREiyVkYvsGumok zBCk86trkI?h#GD66A=-W3Ozr@%B`b1%ZM6l%@d>!e)lU@83mfLR?4HOp;g?OKr*c} z1)&^u5s)maM3DQH|H29ubNDz5OyI9o-3sj@vQB8=gmww7pT}99g0vZv&ZfHn$LbY$ zdm7i+MBN2eIo9kaNh2d_qSe7fUMnYBMU6re`9+n994&1sUOn+dv?Ln?HIOs0h8IUP zc>Th=HiuwNKr$(!!MTj_lWSFTSQaMb5ZcR>Lzi7P5b4S*?Q5^`Zv+%(gmR z1nYc*WiCZ4XLjFgB?{82$XQupWeL)z$azs>l`@f|bGvom1u9+k^BvaS7m3JT1+tQe z?A1H1c`p%><8`N1u?9(N%yIumcP^#YQYPQQE+1as@3LB$+#Ew!{JX7gCU?OJf7IM# zDX);9$HVYNDQIb#l`2S^BBN!V)y$d;-&Vw`a-NmGmaGbaU?!Pw6*0;GR#9FCKl7u; zYeCd_EwqaMBm6{0r`pPV6-k>SXI!)hYCu6*joR( zu!=F@t&I(WG^|JBjB<_D>>@bIODz2j)HtL3n02%uWc5C18m$yToN<53$`PbZml^UY zt5*;w4xh4e|BqTBBjG8l^BpEU;c08$Mj~=7o{7xLb2mUMq355mUT;GU z)eu&q%2MlN7x@V4{H)dOA{{`Uv(i3rtZ*0N1*>F}APPS1!rZdVYG;DawutyYB+ZF4 z>AJkkN@bGz0KNIL%v#0d3*K#BZuJXNt{lsnSD5*O(Ovf64Dq*B2(Qa_M&R?^341#eixFIgNE zq(P8cB@O(b)$7(?COcmy@|KnJ36(wqu1(%lIHzYd2~sQ8V<8|Ltu7ZC2;?Kn|0&gQ z)+{*l1>`epJd<1Dji(eKT~@UqmHM<9)QA7Gnpv}KFPxAB&Ht?U4k}%)Dz{nLg48Pb z?#WotY_m$3;5#Gd0oiUfG5H+)Tm)pNmGl|;`LG6FZUxe7b$&r40kS%hU#zsRh^&O~ z%Od&JD)@#7uFPiw*>BY`!EB70Kdj!(q$vT-4M6^~GPWS8RaU|Z|5hLetO6$Y!5c>R z0f`Bh{Esy2VITJaAX<10lgZEuB);$gCJmr@6o?hB*-BPdK)ap=a%8xZ$#T{thEu*H z%>xJF8V8!8;dz2oDkI_E99xkR*1J(tsd!ewuf+j5FUoYnH>;W8p(ZPNvsXXm<>^gqFKQMii9J+RNOjDT;Ihc_^J=?pkI3*;v5 z4aZM$__v=99i8H^@-q_B#DP_Dc)TD^kKG#Xc4@H3O2WM^(g@d-lCb9&(La%Xz9ZaD zBxV@Yc`$e`4X5orRC9M!AC`qz9i}OZ(##E~?K{-Z+$hbw@S4Lk^P)8K!|jJ@=7)2C z6P{x}JYBFgIi@NA)RM*05mJSK9K?+;fqNxGOKp)%aWWF!!bgv#(5CbM~+urR!d z$*n-}smH?b=YlvRSQXwYNWJnJJdYa=y;>DM(1&%dS2hC~31m^Y;CCXP32;^m$b;d% ze-K##ny=w4wui#i{X{+l@*R-H;Z1)MSq^K+^T4Vmtp7#i42ZD_Kx)HjE^-NwN5X|n zu*dL?<|W|@7nu&4y6^@j@53y(21tFl9Y{d@;&X;anHN zcaxt9monL}!Fm>~o{gIC&xevZC7s4Ha)G7%; z9tW}_YTRE69~T2J*t_n4UJ9oPLXof>tX>L_XM&NiT9Ct^V6G1535`>q)lp@w3AY@k zSresME3;N$0IV2agR&el6bP>CB1ElyFGjqxzcxHN7F$6PwE?XD6P_(dTa47a8csL@ zHEo9U{8~7TiS+zhI9rg`m>1zmUmN&&Exc3^^85vmH^SX)b^3?2^WPHgXHwfDiRGcP z_5@)i1J|dPa0-)ILnO&!k^@g7@OeQ?IG@Q%coIRRn8}my&UG%-z9n2Gh%+BH0pd)X8&K0=%USqr5eo zVi3W#7HYb~IZV8;9{UY6--jES;GG?o{$se6Nfnpg6F$HM@1W7oo^Ym#o@Mcec>7=IHq_}o-r zUL9n245A*By_#sZ4<;geHPOx(LPYlJV7r8g?A5{c20@%&9c*VGgH}#{9&Aq+#Oc++ zb{UaKuMV;6h(vmIh`ox5?A0OmCiWwHb%@<9h|{ab*aut$dv&ONbQ0Fb>DA-yG(nvF ze7s%4MCRuc>@7@WeonQMjzvH9;sgce=acOMCNe*dw3jlG`S}!k6BC)A)9tjOQR%)Jxs9wsvPUTh}~7iEcW zC}B39WEV1#xi{CYVIp&HuDyYY%)PmGFB6%2bM2%P$g|A7xptO|VD6o47Z4G-*MQtR z#cpJc%)OV`ZGt$XbBX=AAWoLJ#O`(x%o3MIWr=Ba!iiWPCreyyXA0tEiL32-BdE?Y zOBC3fMiP-(qQFj1BOCri}WSxjV>sId!(M6yJUUBN_Vi5k0!t>kn38hZm1 z85=cr7hA~{T8(XGV13%ejx?^UYVAxWGE3CjB}`oVCOYc8MTPmUzLgBNE9H%j{J|B3WXY-O5Bp!ZN#? z{m3k_%D~WR`fv?qede#5y};9C~)L z#A|jb6PYDmx7Ra~S>g@5n~BU48|?AtlOLHS-m%M=$Sm=$-NQs?iTCaF3&=`liH&wX z6PYDGu$!64Eb)=u#YAR_kL{H4lZttgIQv0 zRF?SO&Jr3YOYF1@1#z;(PP=(B)mdhV9=quhA~H+#*j649nI(4FIZR}h*k#uV;zY|X zJ8>#nIay+toi2!zC3e|)L?T&Yw_QXek|lQA6-;C#?6#M(ADJa~+v^2!vcw*{(?u{# z{A}+N#Oc*vZT(WLp_3(kwZ}7&Sz^DvhKbA){q|laSUTQu{AH(IMt)?L_}eaKBD2Il zb^{ZcC6qWNpR8n-I3g~ciOdpe+=k0ZBeR4zu3#DwnI(+43MMj3_~JU5$Se_zJHSL{ ziEv!b734=|iTJo`L7W|-Bjffmkvl?1#T|ZEk`R|S9sM}Hnh@74h?7YY;{I_FTyGp5 zXJ3g{P9`}zE?E#KlMIZ@W+F4mz_>ypkxVi$u8N7wBm?7`*-B=TfpINNWc&<_+rm~d zlMIZDzY6Q)WRgK~SxjUm85CE_L}rr2xHU{y^qL?#&mnItK$n>8|%92;lOKtImt92<9}AWkMZ zHZIvkFq0(59lm#w5;t9FoJ=wzZk`}cCK(aeT1a)4ndIa+|12Uhlbjq^%0y<8k#Xyo z$V@Ua?tmapCK(x5JRAKunPg;Kl^{+g85!41B$7$e;#!DAGD%uo7ZVu?X>on*M`n_= zIREun*8gMe{p0JJvj6{c({v=7jR=AD`E6Gveq|1fp)pAWM&R~xT=MiBg z$qrW$VI?^(+(CquGb_pT@CqWVBqxW5h_I5J63#8fQmiDWg-eOB zlAIoHCc;XRAMPWXqn+mE^o(Dp44&kTz<>3d3EJD3vG-A2?U|QE|T@e7qz| zB`yf(OQKX_R(JssR*6~RY9xV5%nCOVVU?H_?xIqx60^enM0jq@3a88y?ZFu?&Kzci zbBOTS#f9NABCHY@hU?k5h_tK zOeIRg-O@&>#8qK!ff_?`ZhTcZ=UO84X7=iE_H{^DC9V!P5Mh;=AMPc>DltDi`Fc@G z&6fG$CP|b^%nx@;qEupjxF1QN5(~mfH^|xpl~@oSM}%j>g78!%!LPIyg!3g)DsfG? zERG13SQx%T5;dxe!s{hbDzPZMg9xj{l5pN4(H^A|H-)Q+uu4>fJBYAKEDxvLh^1I1 zZV6`+VU@ToTuX#i;*M}95mt%2!Yh`bA6AK#;oNd0tP-ojr9@aI?g=*&VU?%}?;ye| zu`Zms6#cMD+#g;biCS;eh5Lx`dgH-iO7c*+_$J{;jp{?;CP|c%JQN|!N zjDA>2>ccbRh)|Np!(~XMl4O9AJP~dn8(wcb8Sau~rIrKlE5(=ko($*QB0R6ueuQ7c z9SWry!YxGZd>U@|1Nm2YY9-ptY{IYpHiavRjE3LcoC!9~;mNm3o8Zmk#_&{0ltyg~ z=fx4BQLhfusJ3v0v{4$hC0s9wTFGn)_f_F&@Jgm5oOu@#)~Jqf9TC>3H^SXSSfkzu zr>zjB)I5A6TqB9ns5inJBvBgmMz|A6piyszdyxbh^=4RGDcckLdhyM$ha}LbH^Z5d zD2;k6JTs06jd~}1r6lTUdM{idiPEU|!tF#@qqc=7-z{oa8r2FtBJ5ieIMRIgf(hs zSicATutxn9E+)bnH8@OvehW898#Q9Tg|*efkJ6vt!e_-1vETVUe7Ph_e|`@yl0@mx zP`H)|>(5ZQ8A+f&L*X7GtUp6xZH=g1y@eSH+eBD@hQgUhg10b3;Zh>JlKCTCLxlC` zk8mdu)}KGaNj0*r;4REw;XER&KbpRf20Tu>NRz^;-1I`lIQMaYX1( zNZ*P?>dytB2?=`YIxNNdGeSR75*3{h`ZP(DN{rC+WOEz4Q%| zD3#btAGjZDXO&3R`|FUfN~G$A4kqTWt~RU%#2A3;B?5(ntHL|7#b z)O#L98&-*f^c{~OVU;*oPpU`4DsiY@K!jD|aJ`%etHcp{BN0}KsrrB3l4*MG(^!g?WSU+QM}(4` zq*o%5N>U6;lB>6p4J*lX{X0q2oS&}$CW%s#>3Y&LqAnytN%Dp%$xJ<4+9)MCOD~p0 zDal!S{XenItR!da{f$UiNzT>_pF_e*a*kd@gq7qRy+;zIBPJhWMzu)KmqaN^ zkzPZDm1K^tH3`pZy>W@2Lxk5GCHe{?tR$D|TZyoeT%ivUVcnRkXTFG@SvSh`qW>Ua z-MCtx+>C^EV}V{kgmvQ|dIJ&GjqCI-BCH#W^z@g|59`Jfy;KsV8%y;eBCH!X4bzQf zdezIqj~c^edXFSZHQM-0=ZdlBEq_Hi{4L!b)!&99=eTyiiX3JWAgCt5f*6Qt&DBW1A_aX^&W1X&b$l3$lSf|@W zcqXjVGm!-Qly!QZBuY1G^^!OubmIYixg=^-AJ%InQM&Q4uDu~@S1R$SUPOddqF%2h z!Yc8&-cE#7;z_-q2&=@?ditB_nN?zg-bkcpf+p|E{!<_K7TT~%{7cUz!Yc8cUQ2{k zqDkLDgf-zmy51@LRBMORUE-JYJR(QX9pIK>n((T=SlX!Zc~!5GL}|jS`nPdJtR*(- ziEoR#lqPJ_ZAp|SwCY(zSQA?H0wjSZwCan9uqL$XwN#2Vp;d1r!ZV>&@1#<^mT1+J z-VyClry{TESwvV9Uen8nuqL$W^+Z?`Uf27HuqL$YsMiezX%h` zKh4M^!Z~ibQA|X{LgcuUjY=Y%I*9P|HP_fdrFbnm*YHM& z7OJ)AJR_F~=fQbKF%iy#WkxL#&VyGOO++{kE-*3@(KD}CuQl?Ba2{M}6cOP(xX`E~ z!g+9^QBQ>P;PpnzNc7BkaFLNig!AByMi~*#gEtzrNP;|gqp^VqtNM*bI}z4|8;x!v ztO++7{X|$3ZZs1AhV9|?^NmJY91(eNv5|vB=E3J+9xgG;$%gY_xlu2Pnl0r<<{rYc z($#V!PZE^}%Z*Ybfvzq!Du{60mm0NHigk6V(I|=1)tijYI3jd)xzSI4SXXZ~5|d<4 z16{q<@QARk-fB!H!ee-=kwb*X@K&RM2#?{d#ubt%UA@&<6i0-vRt?kD6-J}9QM!7M z(S@D^UA@Q1O%`odx_XaMDT&h6dyGXX7(v$6)kf=RB&@5ejrP5eu&%B#vQh<6@mgcF zN}}Sm#^{zr#cPc*gd|v<))@L2^vuzzF)}1k(Ye>ijUysDwMGe+3gTX8loR22)fv@D zf_T*#4MaFzbw&#jj#r(rl?cbH&gdn=@v1X^mqf*@&PW-nMnlBw;bHN5%*c^8Dqamn zi6rX#NDW4pBr0AFh8@Q7;oV<@kzx{|-QQD2zJ-M2^^{TIAmMmDJuDACZL~=nl?R_4 zmIoV+q=@jN_Il478ALb_zF;J|Xv2B%MPo7%&V$WH0TIrF8;u+fOYJ=y^WZB+B@xbp zn~WqMZ8#6UW@HfIJovhiPlWT}e~tA-I1hFht&*rb_=Yh#Dm<$^_@@t!ji2tJU;5H+j2irr&V$>G^+Z??w;9b;iu2$$V}JXkz4}N8M`^px|JlG6*@N1(0NpMf^8>3tjrK{f<{gNnM{l-X2$DZ>3;u|Afl2(ns zecfkdqfMZYeMSKho(X+M8Tn!D?K3JRQQG^hu|AFn?d>;O$qy^-fYF5{P}%{bp9m}M zfRVVLY;&;79x!YoJgNgm1`!_B0pnOnl+q3uGvkO*+Fyn#?e9jVv{6c{nGNVU$c&ol z?JwG+lvXnfB~h7CGqVrGapuezGD{~RVWkb3GbbZqrA;tfBvBDeF!K%;HY$P%X0aqH zGbWf7NP>8cFl&i$yhfOfREpy@!t9Vl#VgV5jUysndzeXw$QA}W`cbBbB#752Gm{9% zYm}Kwgr9;@W+4%d*C?}$2*+!bxl9rjuTf@o91-#QySe+0eyrIcZB)E0vmZSN@v_XK zLq#uCyezX$5*07YtUerL!SS-q?kPw(UbfkD1QL#yW6nHM5EU=S?36^s%Q1T;QSoxj zq@$#tAYKu391)IJ#LPkxya$PxGbK^+a?R2>BH|S_tH=*OU*pX>Btg8!n@vPGUgOOU zA{?*rW)BgL*LZV)$l87IYxCpHJ*KL@i}zOJO*@W=cugD@ul>xK(niH=lDR+dVE1ZI+{XA_~7%t2=MaY#5`2bmcsAmMmTHu;QN$w!Yi4h%(N4+6t85CG4qJ>Ss-ojxezOv^UcTOh$vrZ zzATAa$rPHMlBku;1!g}HUddcwrsj##>Z>mon3+U)C3At9k0ki=zy)S05q`cdFe|7O zuVgMTn~CsBW|rAYgm?6_%*0c$c3#O`Xig={zY5#hL(nNyJjx>{!DOQLl3Dzhw(2wh!Z zt{^|Gs|(HbNCI75Xf_jJU0rB)65%miXzn1wW4O>9B*J63&>VG!=!MFI3r#PM2wlBl zn654{^QDc_)e3W=BuZB+%w9>9u2z`oXX4274za@Y&L%>-y4);22MO!ya`q zM7(Y{$4R2zMBHU&A_?MkmzhU|<8_x=M1n^h) zj)-{OJuF_U%^lK4#cQ3JR47L^ShuV*7fPbywa#opn;;LaGaD|HrGhsRwdOz(5{_4` zIXD{$$LqdfdGJ27WR9>=d9ZF+9(>qrCmRt9akBl0*++!);G^c&V)Vm#u-+UZ!g=sX zGwouu;XL@Xsa=9Z+?NnpFZ8#4$n%zV=4?b@umY@yi!6q}G2-u-&{T zj)?#EU-Jn`R37}V*({05gPYB6BAf>|n?p!~9sOo=+?B$g`s*#5&1@t=9^7me5aH)* zvsp%^I1g?%>xpn4++uDe!g+9u*-wP?V27DL7i;G{_=cH7g!5ph*+hi%;Q!1nBAf@e znten#4{kN>dFYw*;8rt}25|tT$FuNpCO8bLpFTnBP%=m*j_zxnK8F!kw3z4wW z?ljY{N5V?`qgf+~ir|l?cZ0A|5&Y52ltg95AI*Fu!8i|?r9}A29WX1X6i0Bttd&GX z@F%k=j)({jnqB0F<27XVAqnC&WF{_>y-4PG4Vg9(j@OWxL4@NqWM>yANi@A@fX0 zRJ?}F;y5DW_1Ca?jj(E^jfz*2)qo(oSStTa%#6O(PlPjL%qp)$8_tY-TkDB%W}IMk5aG-?(eiG^Qk)sn ztsF^IX57!(N`!Za`&(JJiBjtHJHu+d9SLW~gRHJ9B%B!!wRYbj9%iN8A#8ANh|GAH zbxj-*|Lt(=Hc3=wJlv|4L}kV)Rx=UKj8m*`Btd4JVrh2@e=0LhvBn_@GUF60iwHko zQ>>X(iZkOBtC9$3#w@Fm2xrDDtCI+4#v`nxyRdf7j7M5&L^v}ZZPgIr%$RL85#h{u zoYg^uGvjgAAQ8@t$65Lctcx?_3D!a)oEcBFHW1;=IL+!N!kKZJm9$d&2{Pj}%Ok>> zahjD$gf(HBl}Cg%VVYG$gf(HBwE#(w8K+s*aYSUsldMK0GBdsnnK9SuCmYU;(=GdM z(L$xG)2(Vrl&(&<8YEG=I^F6Z8_tX~tQ}|*DD4buhzQSw8J4~ZN0pU!hLs_SQreTP z+&ChX_Ef6`O9f}AXIP7n1WJ2`RZWDI_6)0@2#@L+Rtpgx)ibQEM0ixsu)dT;DeW27 zU>p%jdzQ8P+3C5~WPAIaVJLK8w4=O05-sl+u=1nM7D=FS91!hc>LV zS6Br^SZU{4#Cc;X4t+j&)EA4ewN*$JBrMp@XU?Lo?|CL+8CxyhTZbv_?bbGFquw*# zZVgDHwD)%F#7Bi6^)yvk=SiZpx5_G&L}~9GRuvJ}-aD)YB!TwcVRaJW)44mWek#T9 z8Sk)?9uu{zd#86;DD8c~swNxO-a4xRZ36ABvs#I;_SRY5?B~dp~->`a#xCp!G)_5#@ii#=b88S7pXutu#qgX8g^{A;OvQH>(&) zkQsloDv5Ar{LQMTQk)rovs#Go^Yxq6MWuLG@|%^~F507RqW*48CBm8UcdLL1XT~9G z1rg4Se^?DfI5TSYxc{PO-j$57vx#tKOtkZfaAr)j%ZYGiOtfo>aAy3Qt!+lnoEeks zEFzp4lkH+6oEekt6-a{2m~5{n!kIDIZYIK-kZgAnVNFQ3cMxGsNVW%&1er0}wzpsl z`IlUK+F3|sX8a0f)F^ua*>Gk|v1=t!x|(9^9m0>&)f78J5~Zstb{^SqW*lu7qfMZ+ zqwPgRcqWXttH}>%#?f|zBuZ)jZnwt~p|oS{Uh>0AYuH0b0;M%<{SDdo;QYt1(~0n? z8unBoJgSC0lL(KhVb767Wk$nZ5J!a4+V<|d63=dsHcDytwmZ>tkQw*3v)>dgR7$(I zT`q|_|JmCvdK)9iH#)}K8{R>}N;}?Ou@wm`?F3tUR}dA!33i1fDuNU2T1iv{C)mwM zf_SCbTZwSI((FDe#qmnB6WX zyfW-+A{?&_yPgQgE5rVeBr0ARc1Ii$@j7T&ybiS!-xs}5@yfE(B~h6%%dU|`#VgD1 zLYrVElV!JmfU)3s9bpfAh=k*Hgx&oS5{}oAcHYN=sLXhzy-*VTo09$ToE~jA5NUzG zWh2N5b}yCU>^a@mKS4jd)6BDTh;a5i)h;2z+4D5Jq6bTH_B`EgAi~)*-`+}uv*$T> z=XNah9Q@Tn@wV$+TmKXZXV3HPCL)|YFR;6baQ3{=PW%i@arV5(&L_gzv)EoFi8`;l z*dE*=N>yu|8B1*a3nZKwOYPmy>*m_WOB=O|oNE_Kg0n^B%DMJaaYT5WXTK_m%9Zo% zt&*r*S!NFq;api}>tBk}>W)X5okfImWtm-oBsjq!W+&XtSo4MaFsF1CA#aIRcp>tCa1&Xr5-Y$QRhTw>=F;as`IE+xV$vBWMX!YZ-E zt|r1NvBa)N66DGyc6%HVyU2387m3W3f4~f1YNvgJE#zEzlbt7tQresBR!Nl7-eh-E zDSo$glRZQ>oGX{vdY|+hXzwyRg9y)rWp)mdU{|utE|f%RZ-u=ujtK3&#jYVgoGWj) z8;}Ird%N9Agthl}yNd{q>g{$P5gygsZS7mx=42k#+ihJErMmko@14W6_inpT z+9>T^W0#}nAXl!j`z2A@yT+dU9maxpC2Q=|ABfPdq{c4ViG;Pc#?Br_xD)dC2yNaJ(L}Clld#J!Iz);dnh{7f7P?@FBZW5*5LR?3y?t zBKXL#2tICiN*fiyr|khrRQ7z@F8)QdSw-+^d%YxTwez%H`5Q)uv*$B*!|zBqg3s71 z{y@SJ++b^e3Zf#o!LF1%Cy9#S2D=4G@MVu@?JguiOrN#;iEvDxwNw7W+Bv4r z+G&!gnEunwjw2$b&)FA9qQ?0}dx0dF@x|Y>d(mzrBC@$4&9Na06)Bj_W$ znFxO)=;LA8{1f}izsXX;x5YlOYbC*%AhP)<_78DHM6SpF+a976W^?g(`g&|z67@Zh z?RFLs{yM>Sy8ubB^WAPQBEs2xyIo7Ac;~y_ZY09}=r8t{!x08}Yd(_VNQ#+Fg zXY)_(QX-tqKeN{p;Y_{5?j^#R`g2=PM$eq7Kew}qaL)bQE+fJ@_j5aG6qe%OGk$KT z#}Sbkzp!(W$jq2{5d1xHyMk;uGxpj~OQPm{ul;XHl(zKR?QukC%QyD!Un%_F)>1@! zl(r1mX_6@27_dwB!Zx#R{A6z!gM@YCC)*o~gue&!vt2-hmE>o;P7 z)X#Q~BuYtswu_MjO7e@n2uYwMzu478cqaT}Zy-OcB){10k|-q^w0Fc2p(MZCAzidb zjp|>vE{Rf-zw8_$tRxA}LLy?tD4w{HPCXG;l0BRqL|93ZoHRq!wOV5(+0)4*!b&pQ zDJQ~8lIk=PVI>*sOf}KZzs|(J_^CVViLjEGPCF4+65FvYEX7LVI@v^6Nuo|E5mu7D zomxp&YBOP%GzwJ0PA-x_ZT53YiLl!2=TuQC zR-65t^+b4%?dP;mDOQ{PoIxVIci7)ab7gyiU%Kt@6cS;zIl!qV!fKP@bP-{-InYV; z&=0H4fzD(itTqQaMMPL_4s^yvu@tM#flhWD5o$BZDMBLEW(>siAg7jWSZyXdZIYo`8h)=NPA!2WB* zNwj@MsnuFLO#$aH6Nx~S`BdE#*{kQq)f5z&j;Ku&h5h=?awlsegIh$Es@p3_4_%rRke ziZgCM^el+5In~J{B4(YiIn7xSM}*BxrzEg`N>HMis5A-?TX(saLk?@z(;jd%oJKaP~ z7%{XNkfcq^KPRM3k)`r7MD1^!JcQTR(rolQL$Q-BTU?hLso}fJq-612@gE_22milttwO3=0fDRpXz*d_4YEFg28vP`rQ z>Ps86*KN86DVXA(M(I}lB74^*0j3Oa97`HC$jV45Ro29D&!MqfXCaN0kYZa5d3OTm6I}6 z)TQP|l`~b63OQR0FQnb!6p{_kmOGtAl3)u@gZA9%G@wn=S+M36v+gdZgGwzePSDN< zo4cIEqp_~y<8iL8bkc~dJ0YY!ngFW`Cx^&0MDBKqiCmr)(q7U-+A60aj?4njtDPN0 zdYlBU7|0r@bkd7E1}6jp2~?kTZ`+O;Lg- z^67eKu_V~{E1}eSXN4rov@c-(h-dH-ryffMqw$E-PJX!Wk2t+VxTlXeN!eICkH({p zON7VpF{glt7!A?)$DMj2-1jG(amT4%h@L*>6vq+K)2EzDBHXVH&MT7OY!N-(;B-iW zJzW5$HaPn6(sR(SXPrzW8n^ISXCV>p>A##BBHXWkIjuyv?~P6m5svb6PSFY23+`!? z(?W!M`l6GQgEk!HW~cVVUHkrulQK;a(f3!J`Zyw@-0I|>gf=`HZ4L|o{A(M{^En_R zxu=S7PuscFNbZ*+-1q+mHr%hx&H}7G#C_l5v=9;fib8gHGbqJ)MvTwLPGcMqb@ez~I{rKkLq_$1rZ*xADremBF5(j=VKz=(*dVn670q8U^C#1J6U=TdhwH! zjU?#BPtHOj+>2kFDk9vAUz|E3+>1e{kqGzVSEoCU2!;I3vGaEA*B{QzI3nVuMXHE! zPe(=?;)v+!$Vd+n?rBn_Uy@bYgBQW?vA`xNl5&cu3rP)-JtLEelw2Ir1o?Yp_r1*6 z$m!AsM@*>A*hsM?%Vf5K_5rCwo1~6QP*=l|CM0qU9|X_gNUtQVq4Ocj2%<-lP8IFB zS$lF_g4B5--Wb#AbSTy z*gU-px%xO9)$xJNbC)M*&w))q0`;2^*s%I3!n1cG+l=m7nV{VOc_$zvMVns+&x-Jj z+K)?(>@L7~?Mj6H1SDwB0YNElk0RWj0|Og=niS!uX;NUrPt!rW5b-ok4hXC9p}PCr*^}Yq3&j|d8 z(GdMQDJyha{|Jnaq%$yxpv0ML#Hh{FB8S8gkv&&Lj*cTDd#;Qm%n;dAtsz%M z@}x~$NQ}n*(85)bIwZ-P;e1TYmer9K^rIO&nRJoOzo8V`43f^&p- zabzoKW?iJ5$TJq&JQ&#!M}*Bokscy5$?NH^K=bMbh@J45*SLhdibbMZuEE)jk%o}qZ*DW6y)JrlW6+N{$4 zQLSm`L#byXRdHlCkY^)xM7}##(=G?n7-@+kWk8;b^bjcoKi2|zAu{4j(VkVBAU6VO zij0pV6+r$S$&DjbKwgTJ#gSD&UXH9MauDoct_S6MCDIv3YQg5!h?b9a37dz3v_>+C zTn4o_0C_!fP8|6skoHJf9C;DQ=15f>c?HNDk;XXE4&=>9FOk`kH0^C5Z%6dAuy#S- z2l7rNJC1w|WNYLqBCoB+aehBi9!JDDZ;MnD`JKkOJJJ|O#5jKx*-GR|@FT|glgKY| zM2vG!#5^0@BW%Pte;Sz@N5nXP9x09^Vw}H-)DW3Usnq5fO{uA_H+m#Nv;LSAca1KOz=? zMrOv5-+_eO3L^6;I)8IF#1RplJ>2d%BBGP*rk;zQMXA5R>062mQy2cVjckWi_ZT2! z+~cK<(z>zk$&$2%+P8)@2W-Z=yYHk7_bh3nc2b6097ocil;JLvq&2keo{)9`5Yw$A zavhLEfY|OG}@dUw~#t-FzbFL3=7jYg){0BC_^1P20jrq!-FIYu~;P=iHKT zn_FikXr+>rNSl>fWGZ~AcP#9`+zLr>FFYS?#=G7HIL_04fsKNwFuX$)nL5qQ zBXY#?3EDDgLt{9)_Zy5wnp;dZ9IrHYktCZ&%!LSwkxz3g$tH`UJkhNqo69LW6Ws=~ z`3*{mxv`JiN;Z4l59ia8bdt@Z=iqv5U$>XYb3pDIt7-eX14u$+VU@B1N~ODlvqVqT z8PNee@}s9`Kz0S21L!GGPfB1jvgJZNF*{(`)0E*RUMM_csRzJMhU-bv8rli(WF7-D z$t{!wpMniQ4&vHJ&L58_z?0qLA{mR&B)F0H0@zG;mlL@aY+eR(uv>#9dE*Ei`9s_W zvMB{3Rv?GCTZudlMC8gt+yNpV0r?Bg!w(5+e_<({V}s{IgE>EH0=6eJu-O}ks68{V z5ns3zEj%o+nFRA$cs@MPmMe%%32gR;mAPnPmTO;xJzWORgxJw%xfw*ZKM1-4ZO#fx z@ti**AUx-f2-=g`18*>)J&L@$L(|>`a&%yG6#PFi8pjTc^0Ds8vUa6)$GYdm5utU* zx}}n|CV$hR$u?)ZuG>W9KcI(SLwmsHVzjxM zMkCivyaY)T=%G-y+#se~V1|DuOW9=e?CA;GfF$4^{En46>QKJ)|8DYEt58@we(bY|151< zFBAP*t-XI+f+R)5>bl5Hyc}(~)J5)8B3x?ruu^l}8>9_BgJ(lsbKLvl$i8s;baC)3 z$F4?=x-=k@fr#0AsoNq;wS_94K(#4xyNDcdB`Rdeu-Z%9erdB>`}2+j?TW+TG{fER z3egLt375H9aYU>EE_1JpBjWVwap!+bJ3=$Rg)`_Yu&0iB1$cE>*L5=AdB2i zBIBX&Lj4xIr_I~7UyI#hN!pURg^S$^BuUS{hsw6tts!E9AEDTb-3B60z%zk_Rv_BW z3%RbtXUKI_(s>u*y@JJV3ziCv0YBG33m3a=^CZ0G6n77n1f&Vb0g?<-DKS2xRJm)H ziC(nH5ff()OWm17-kO5rT)}=cAL>en6`CS5iqZ4U?g}gwYI_Oa6yM^$O5`u-mzYtN z?tA1}5E12D-CiOG!P$;j`&GG#SBdtl)<%2arzc1azsGH7 zGMY&bk`TA&9=G5c)t)E8^J+KsAA(?AF94}=^Cf9Z{x%9bHW=%*ZYhz3{oq~(Oy9L` z1(MJ`Kwg4UYuy$iT-RDR^;%VzSg)^h3nZ!5ieqs97f7vJC5fv2ez#K+RePP=OJo+T zkwoovuC`EkZVM$YOVHi{KXvX@B3yf&TQ13JO^kdO*gWVqOQLFjXxQ9XPXyZ|p40Vi zzbu7hJNQ}e=3ggkPyQi-BGL}lUqjQ8&JPv zfxPbiM-nxAHxC=t&2ERZS*h>_%iYF(Z zx#bn2RBOlqvJm`y;WiS@At6gk93v9MZ&#j>o;Jw55(xwkdFk+*<)Z1m7HQw2c_Uef67>@R4R_!{5qrC-0 zcntsU)ezw^+{!{k^0wfyml5DSs zY z6+}48Oz`@NaF&_i<=>5dILl1%HX{kLOd69AXBkB}%cOZ-ks%=G1DWEjxF36(^iYC!DUc()CL&oc z!hR9RQQm?&v=L`&tc@JW#8aQte`=+zJ)OzVB$+$1DWOJJ}zpn*1F-e`8^=By)q(Kz-W97 zWR6!uMC>5H08;EVOM-px19FKsh$N{N+9GyIC0^Dg z`xChnh&bn;?;Vb0L@AtS3bMebrrGO! zgKCGoBgo6%5D{@2FG!1*{wCTqhhVP*87ujBtW(kJUu>%;#q&x6Bkk~&2%R11ff zdSh4%-|*6@6rZ%e;nfl0llC{g9wK2-5|LNl8s?|dOL|+>jx$`WnmWB4N!pSx8N|0a zZ+nGEg4NF3Ua2Iw+W8$K_>NZ>=O+=)VgKi)zk|^c=VK{A-t%fD!BQrWE^plbcJ2GN zVJ-Z?%ihiAgJCuw{+~$EZhnTB>h{XxY{aQix7SGI(qkd(0r_ZHT_1bhaizpKe>}|Q z6K|)q!Eug3-#_tEw#xBIuDdEho_=rl(ukY@Pp-)3+r6nsf|1|u6-t6*xDWXG)LSMA zdOirqXI?G&`5&y}#Jjf7y+$IDNeS9oNji`OoVoU{fqzBr}%%G*GsAJ%n9I*5esW70>YWg=?kS6<5d!t>2Zi(pkC-YIR{eowvAJMIJ7FS*t# z0-K%Q>2c&zAU}G=lBhF>pS(&UykGu_cI#~#-xc}EYnL{yp)s(=7N-zDdD@4nuB*WF z&t7UASqS8pVAs!k{9nB^X`^=Zzj{-V1Uvd)y&_54f*t*@UIP(s;jdmF`Qi5b>Sc6` z_Mpz+1hxO>^+>X51iw-J!yEUJu-P<1oIi`%@~4+Ygx8{fdL>ALmFHhxIT2oY{^i|9 zrFiA3`PJ+PW{b$eA^(0N7r@4(t+PzTMNI!Es5(CyhVl|lLFZmP+uk=#bw^Auy`=$8(L=L7C&J;iQGxW^w<5K(rNtSB2<)OBu_?42Z)Lw&C z%)`(^sEf$CbKuPYkiYvK~D zX$nZv=b{&CT{p(Bj3XPM?_>NXN!pT+TLZr-1~S&~L=tG`Sl|9a_(3&(32efCfh6cz zyxY?KT1ncH_lEcLV%KK+jYLB5HeS44GW`xDp(c3SJ_S6Qe$tn6oP)YdzgQBis}1V1 z{ANki+a=rYmjr7Ur%w@oTrbA!iM=ovxPBIrz_aW3N`junJ5PJ-sw*AYmg-6(tMueZy>_+d6M5wgy-rczlX@H2jY#gN&X-ao`;kC z)IM2z63@d)emWAZF9Yu}P8v3bll&sIkr_nXYntSDNz#^lBp=NRqyl zqZ(wr$$kM5&T$9(*CPqW@L<125*))+7>z^xjgl+mqg{$6Z|?Nd|&hgzk>+h*gU~c>co=R$i<^vmN&5s+!*N1eUr287SmbNxE>9OT?wf0HC_8sEjr^}C7i z&8z8t_7B)*K53usR}v(F2c-@6LY$P&@UwPG&%x>L$^L~%w;$l~umqEeW>yO*pU1_Xp5Vvg=|_IonSez+P;91$E=>VSPW_Pm?z2=PIb{Y(Gm9 zT(^`1Ip1&k30uf-$uIJ|iSS$U+5Vzm(1zcVU+U|>3ep!TvEeiQ#P`^wXBy1nwt2BXPD_$) zz8td06X0i=-%sRRScf+Psr2m-+RQy4?+n})w3)}}_JD9*RRQ7gSs4(%i@rJ_VtpuX zjNcm&zA?U*$!NYYt_a^iR)lYi2PC+SsR-Z3RD@MR5xzsN2;UE1$L$%(_rq%g!uP}P z3ka*t{Q=?o;SU6apWM2D@S0x{z8|g#-~F!h^JR2!_KKU{5Bf!tv?cMK?T7vOlHhD< zhL}F=Z-^spKpyeGizDKstKQE@5OK%%7ykpB$Nhsx$eEyRq_y!Aei4$S*>G3n1F(6* zUnt3@J-=HK(t0FWK{gxThFzv4_2efHPWk#I`C(6-WBGKev%$|8g=7?*BMpGfQ+@%F z^Wn@|kf;3xd!fw|u=yRxGkz_RYrsaV-Z%J7W6)+Vs0#^T_}4b_^%LROc}Kt*S}^jR zM4n|bns3YhGa!6hUJ<@6uLzI4B0N_W;k)sQ@J)C{_};rBeD6IVBl+I@zk(L>t%m3Q z&t%^*?xOF{``^V8aq|DXpFUQMPg{sb;{`vL2#-dSf2kzsXB3Rsi~b_C(fGc4v)@dF zZ>PWHSBIr%jqjqrn;@k3VejO5x+tcRv5#jc<`PmlM#dqUh_v?u8P55?yhzQ?%|F55AV=2BHzu7M& z!Z+c!_%%fMCVYoKAW3WTi0QbK>hMz>;iok;4&JR#gwg2mb0k@*O}i^Wn*`(yznI7~ zPixv?K;HCMO0rs;c`vMwfV|~DN#rkB5uFI+ZNHt!17LFskpKAuL{41|Z@PeN^~Xg- z?eNV#u=#ov+}rUBiA)5WLa=$yUqEC(vU%UHBhm$R%?6t;zlq4{EpQqSWSg(M=y^8W zJf8>T13!<*53tG;r)nSixjx#gh2KS912)}$J(1CuCumE6eC&4->44dC8;~A9F^Z*f z;rw|ukWc*_A~(YdO_0z13L;`u9|6+q_Y*k~c6Lt#`O43Wp`QxaWxoLAYyWa0)j(Q+ zd^2q2@U6c{+Nc%mw|?q4;ipaG+u+~&r9}Adcfa3Egl~Ee_+3Q!UiZ)bfF!MsB1^$0bR_)tEjn`o)_yP9>=~_K0_U_7 zVP8Ee+CbzbAW2XvCF-SNsn^{EZ7(3Bqgh1upqV*3T1KRRX6E0c-b5@l0Di(yYOm;2 zBFpGZcucgI$fzFp!U61;$3~lp*zlI>6CirDo5+d<37QXn%xK0w=s5)Qa9<#HG>^z+ zD0MK9NVJ^DgHY;7AYL?kUo2%psgr=jq7_7bxD0;R24sA+iO3W1q+AFjExLnX!|7L2j_f0l$sIkk)$oiai>Mc9VBepf}Aol+Dn9U%FJlhWVGR&a(Z+t5zZ-R zM29444RIbkGn#ksuC<>X?U1BReyK*>-91059fF=Y4;Dt#iEth)jE*~0+5~yn zL7Oj#t|!86z92e8gxfqTT9}D-ahorUHWA@GSQOO`LmSS67e&*Ea2}i;EhEBta89&? z2rJT@Xs;x#fg%-0Qw|rNTLVS9c$gwx90ddT*B1O<@8akbI1}Uuir@ZU5*;V~tk%xy zf#-BAer+^)is<`lZC@yr3Z<@# z#)$OX3km_`hUj5L_MsNu7|kQH4m^vDzc{*p$aCOXWc(%3S|V3Ko72Egd9;tIxeUnaXg!f$XrWl4t%Z{NcO4bsyN-%*?GFcjSbNt8gm*xS zuo^$YHlul0@+gy$yem$4)P&yNLu_&2=u0b#{fg!TFHz=k#aiGZ+TKN%2K z?1pH{(PFk>lq(^o4bdS<+L9ym?&jI3evGhbOMW98&*GkqW*`YY31?Q~cO}n8JBXYP zXHBcY&-2luV@0Xf&~ew|$lw{za-H{2OOQ_&3h)2Br8n&hJMLk}bsch_jvdqf_IEINRA4oqB@k7utxk zoo@2eI-1XIJ|ePdFFvyZ|RA4lg&}^zEZrI?THqih<*;Khj{_<+8(VUaxuKo5GNHoxP>G6jA%!+i)_T* zOJVaxGjEB78#iWwejT=X7TEWi;y~EL9hfrd&amYvQh&cvt&nv~{{5 zOSO@ppf5rTzoC9D)n0`W6}9(8J7%EG(O`o_KN-mh&>r#o!M^BvNnQ&bk&Ms9_t91& zqhE)*z~=jCX`U$68Zz4O{qoM}Adye{aSVTqww{7EW2l8cM)OY<mYPJRM#l1p{6(ck#wsMiJ8xnP zlVV*&dSU*EQ@*6w#61fnFcz?QAY>>z!?V6UF1}m`Gsb^s?_>S3_*twFt7UH+!)9H9~cn+HMb)CYwk&b4gZ>3k)PoXmAE0Gh_Dg)Vp1$8uJ!| z%o1%@JG&{dJR+Qzvtl_Hq77&Btk@8eU~hFqEWHSAI8z@HdxZ#R>LX+PR+01aQLzrP z;Ve8grp-n_oQ02$rOrXZS@@XP0!dm!xe)ii!&>y1m{%-pT0>=UGH^Wf^w`)8NiY^- zK4%B*;l3XiE0s2?@5jX&h;UDjkL6yBwR0~{h^-*Py~v3@PlS7MVr(lB?!~m2eaWu9 zI4L$$64mCDV&!DRXK1;x79xCxc5-Zh2%n*y78`dddge2<(_>SK@V@fQSg|DP3@tx4 zt^`MHJDixE3?o($!xJ+cF`+*Nv8mE#wRRJX^XbxN2a#qV7Xmpyw)=U)tYEH+6{Gk@ zha&uqjtc`D{zgYpK=>OS7X^gB(J?z9{9brYK=>OS#R1_r#ftDZIuzk=bST2#=um{; zFDt^|=um{;TPecd=um{e(V+-`qvPVB&HVk1OJcjf$+{#qc$tiH@FuGyHtKRgl-iWU za^r|lo6BQ2#}TpGxiZ!&3H~Ol6e2h`cKa1_CIoM?=EWM31aGqD#X2NWZ?fjac90FP zh~~wH$Pcel=Ec&kLeIP+x+=B-Nr?M?b!_U@(kAreUzp?O$BKy5!pcfyy#=ua^U0A?%0J0 zn>z!-sVHk~uu$Y+|Cea_^ zcg}OpbMI$uub02oQ&1o8J^ zpG%pt0JW&@uRz^jNXZwZW!TkC@FWVPKBbU}yalvArIN|9U()Ze)Th)5vP{_yYd?HL zSD(_%Wb{My9^{pjJ|?k1a9``yl%$1N`Z8q;Xd!7x$ztOCL~p59r^vTdCj!B@RIjDX zkuquYW^K)&xoK_6Lo9P5l+_HiSesJE94`PmMP6qWGu+^rt~s7ZX(J2oRYAZ z+7t=OY)wgJGA&Fp+fuTl2+H)O%wtk~C~5tYQqAP6i;4W2(!^xhkwkt=>1OgIc!=+O z`%{!9R63Fru>5<9$|QLr$!t$ak0L1ZM@lY}H1H7Z>`0jxMNsC?lqx1yfrm)`N@-xy z1Rf&UnbN_e5IjV(E2Wo7(L8vv0kS(K{$BDB7w9gKJt^TRf---nWHQUG9s}gxl&UClA`nGg!6XEA$G24bsdTIDG6l&gATvaLjb%=Ox}!|I`ehVB znFG`vOm2p{p8;fqs+UnMkemzTAayE}k0BZ;Gg4h1MNlS5?O?J5;)62(Qzza>c95XV zp=uSA&o5Jyi-07nuQ1s#fyfc+hfEFwpHW6tyP2ds7%PaT?ua5YK*mt5`>Cwd%i$|q zAVGCX6hRqBEnxCr1>AcHB&=3Ok(+@WskSotBo9_QK#o>-L=luZRy7`=vg)CAaEJUj zwSY-KXyMpQ0n#v>*d`6iQ)f^@-fE|3heUe(j!ZlsKu%U$nH&u5UIt`>x;Kg}1u{`pE2wk_qKY!7sQFO@WhSdtOmd;!mjjui z_C}GFKu%S|50ahLkO?R=Rn3heD08}6&g9v1;S?BM?*O?-EoXAIS-TNktHyKg3K(noXJC=^$(D1)K(_v! zsNGDGf22`sj=Fyp**Ol*R2&R4H>fI;+khMfKwVp{G z)FKSz7PagVviu2<JD;Ml%2Hg*&~0l&fo)RL_PtlRzF+ z6CWoT2S)z;fmEuUOg6zYeie|1)yx$nGXZ3le1vW-wEU?b^H^g zbr-bzH$a|N>jYT}-z39|0LU|H$&=)v8G<`Dfjq0mtseP9HR49)uidFst@`BpTWaA+)3&9zV7t~(Xdg2JkuW^dAm&k(bojbwrAw zl~JZ%&3~216U9VcR%_Q1`2c!T0$6@U&3S{!EbtEJ_gB@qOk#OW+n|;+!F$C}X0=+! zWC`?(QDEmawP+pL*;ozP3uKMDiphB(vposM4)r4&0w48T0PED8M%41pfvi(o1))_O z-bJ}i%~+2zEyKp$N?+@&S96&h3|WWIx$D)rM7(b+)~oG;(6<#j`19tV(wo$*H_9XP$GwlUfEJDi1p(!W>L_eo3o+^tR)#Lv|p zHCqth!ya`u5zoUOHSvRi9`>qf9}e{JXSJk_%98%{ajyFD=~JtPj9*rt+CaoBt541Q zXkb~ts#PBkEbF&Hmba@-pP&qtbtBY$yV@y;U)Bya+)j3Ie-(dkVu$($6PeF{sUI+r z`Mguz%tYq%9(DYuzCSy`&K|W(63*wp)!zgmf3Sc3t;T;Qw7mZHkD5-ztNTA{8x!fz zf9hr?(jO(z&qVsOU!Zp5K!5fNq<1i3f8qj}M7+}D0{JW>qY)Q~|D3eYGWLu813Q?= zelavaqo3cV2Ly69p%xMR4(NbDtspJKZuyMfWDO6jBO+>A2+PXienh}$eY^kR5;AWXz-!NUV}-;mF*#lSafhr%1N!2aJ7 z`Q;jVGaCpb3DOdi#QUOJAgxPSj*;!I2g;eqb~gfhnaD4mf`Rfaq$M*U7)b3VB1hU_ zpt^^M{8b}6&>%>$Qt={;pc>pM6WGY43JBga5DFyygj&VQuu+QgGSodBP z7lb0V4rEdTRZ#@{;IV;PLHs^AF3?WIi`ck8;m=f-jM(vmB6dPR-Ac8P5j!zp_Ysj1 zJ1H=aiHul!pp%J=*n~jtFQg?SHX%^(8xa|?2?6^LB*n^KaNjxh?umgML0V#D3?~KV z2vVW6tb?^Etkow4X750)WlDY*+?N7%pA@KMas}*Be+1-|L49X(V6BkxN8`zXR@S=w zdw5a+t;vBMQKSpVl)(S~#Ih*z80RwrP87jh%?z9rMScfzcHrD7@(+-612dz@@QLu0 z6u2vjj0JL0;K3+j0l73#D+qldI}XT3)u@w0wE?chIa?jnaGHh25Okdh?NGqW5|w-^Wwk` zL1;aOZx9v-!m%jh_xB}%GC_O~?+d&WC4-rHU!a|2Jf9yJlnE7qqxKtEiw6S}n8;cz z4V=S7dbli*$3)g^Szxmu#mbp5(&GAXS)e11>jiINurDtQ)DQ7%aS6ov;Xtb(Ju&k4 z^&ScIMaiI@<$=9XNfgC|7KB)Cr;HoHcEoeO!kiWX}@bxqoJU)Qn z?d2;1^Mn@MYXm1=@Z?NQpfrl$shE`kWvE{ZoO4$NvIOagk(Qqd)I|}r{B$5bo_v;; zp9zeKB51ibuu70(CHG5ui}!q>mr3Agit6)$>|to9See#K_o6=^Sioc(yrDy%>jKM| zd@_f~3xQfemMQmw<+%`z7rF2FUz*f=Gc~rwe30>ptk=t)3=*u@D;|;cdUXK7dNl-g ziPEWc7J=p01DOY4En2*YtqoL15w!e9ppS{Pye{x}6hX_4f%xGRjdP*BkZcIl3qo%+ z?uWA84s;6AqBKF>F+MGU)C5twAXwIWfl?;2tk!@%f@F}O<@W&U38PU4)(IK0%1%KtnS2M|o?t8g8YmN_ zLWv&&XTK-GZ9jqM1fkO7f&3n56U5Jr9RcGIv`hr+^=F`viLBROf&M6h_1YO2^FPv( zxv?j3k|2I2{2e$mieM)E9k?!vU?%(%C?%qt^)IZQ!NY$8tC(EarznR3`7e+>2FoJL zHjr4YQ;=e1Q7MeHU?*P7Ih5j43}XV4;hH*@$ZU|o_#CJeFuC*v zqqKG=Pr+>)xKEO#B_2k0UOWxfN1&CYbtV&erwDcefgGaEJ)Fq2rPO!EYSn`D42wC1 z-q{_ltsxSF?LHl}4%b$upjMC9n^dh%kYeTeCPm2unSj>KM1y{D6%b8JRjI5Y@XO9P zR~lLolLwZ=*NY%yY8M4i#$OdUTGb#@prOoC1uf$m($UJJ$ZcRJq_r_As8*CBAg;Do zCoP#{M{4^%qor!e#=z23wImY>wcx#ACsj+dkofT#r==3{;xkU`3ZhK0BHLoTrrJbq zf%d}tH^ysag7`5!Q42dHv+S}M5ucN^3z=MaDQTr^g-jy%Q=9&uHZg=+e0 zuS^a834bjkWd3+$h|C|KNXutyCkZ=Li+b=dOFKP^yaD7qZH^!>9muY2!EK{C)9NuVvoh!8FD1zhIm0EWc!LLZJ(v(!R3_H@$3s9y&3o|(j z>V@QLt$;}mli6B_Aih7>Y0A;Qhv?7sTB;!A58Am=TN6dF^toCGlb2wRx&vfx*5ZyK ze~^3$okQVO-o(0+*K}rM}4t5r5 zH7q0V=xbwn-0FrNU*#_J0XgwKQ>i<4aN|oyp=SB*|v-SFIv) zeuXxh$v00+Qo>~N$+60GD1C)iEr=hn6)LNGy)H-*7)-zh-_5P%gCC(tknxb zWjzEkFKhiolr^xn!TI!6E$KvRuTx+>kE6}2T38T2s;_GKf>2r2V5dQ=Vi{T1YOR^< zh&9`jAhTNQCL(hF1t70$d&!QFc~y|alc;p;UnsLyvjy=>U#sN_LZz<*nK!g@mXW2e z)7~RH!t&c7vrgL-McROD(Bji6sxqURHI)h88-{gn*2Xir9qvyclEq{coUtcTz(oE& zb+c9^2*nxuSF=_gMK(d{?`eC9#LJ%Yp_X(q)m`?B54A88*>^tFGMHe_{{(hE)N%#! z!cW=Ob;*|B13he0G4$M_MKkFT+34@&)lNf1*_jLYDspt#+-A zWu)a#wSGY;!-q_UX9uld!oadNYBfaSWj=qdtr5g8>vOGN5Gw0nu=9ncP899s_1sNb zh9G`EZ_=`(2+kK@YSp9_BQt!n)`kbX_cpjtFu6f5Sher=2(G!I@cWD26lJRpB)&8#JV!0(e`y(lP_`6<)=q6M%gD^!rBw;CP)Yee_{B7k*`;*|vQ+v0 zKscQgt0=oQ^;ERHR9Oo$6(F-mTOo+QD)?L5EC|JCImrC2^+%CaK>pF}(?m2x|9TO~ ze_C!7SqmgqFDDZJ5KPuMR}Rr@1@YT!h~6a#)vFn__SX}qQr%^}hU#g8P>*}fh8r;S zM+6}cKLo9Ky)KG;4&(s6H;Q}*BtchC_kG?9_vIfD2ej?`-fArJoq ztx%SaEC^u1(9L}M?=BHmXdRUx$c2JX{)__hKYjK-T8HW- zg82R%syC9B=(&f1)>yrdWu!lc>H3*|O>sqZn4TI%G|)O+FCyZN&#GR6WN!K)GGz45It_Dkoipz9yfp-rN^8tYAW*QRv<^~svwIz%g5^D znMljW>RE#LmXFn+CmCS}=jAlLF^b#;mXFu%EG%o0*X}3j6Pd_)`6NAu$sxB;&pk<> z!vyE$2f)rrdZ{3OCY+=<2|`hQ2xQXrgmVT)^<+Im5Q=Iw$egU#MiCraCg=(0l816F zI!QN(h3xE<#JmVQOSq=Z))USbaUS*_obtl+ z;n})DBxWewI7%`ZOqQ&cT9*q#rH5d@J6kUzqU?rK)2KCFuVT{Uk$NKW2Ka*UnXb1+ z*?Ax6biIpZu-Br@#rm!&8GI7ISWmb>w1qdD=jsL#(K@)hlB=h)j16bZ(4R~7Y$kWG zKbPvWqqM{`zFr$e#52BbPp7h~Ysk(O`WZw-S*Ue|eqj_rtr>a|Ysr<>O#O){nT=4l znR!`i0CIL8vYM62!QW?7RryDx%D_ zdO8!Sb*-K)2x%!(Q0A#9asZGU^adjFay@^G-o|8BBCYUm(Yu-4cM*MGaErb(%Fbx8 zbBjLaA`!!QIXm30r!v_Nza)sQe7ioC$wv5H51jFD*Yk*oI0wMaKynO_yYwQ~I;f6D zn-aZ>$%WwIWRNM**D!hDZn~wpL~oC>e7cb7iX!I%S)`|4OzkeSWr?0mM2xGKfXoto zHWA_B3_(^$5xmE>OmAg7^^0M@6MD*hdKcS~&qVj>yO`j*4lUoOC+3RMg=O^cK3$C> z=-~r;77<1E)1`U=5zoV=dQp@X+F7bsvDR~N;urhHLwfx_S`X>1QCgVc59vQg5zO#q zdi*86hxokwh(0!o;O{0ss;3f(H_o7JS)osjl0mH%dJ)TnhLFrky(&uPTJU+L-p(?3 zTllR&p459K`G>v(dQw*|_5GPIWRi)*Z-ra1Fr%K))0oJ7en!s}#2zM)qW@kXRZy@82*ifq)|qO{gRy&CmCmXZ6^3N@BLnHK^xAbITna+KoowxN=BEzJecl4<&BkjDS zmobrc-qrVg$I+tGyLI1ki{8AC<@fZ>`&fQYPo9Z2?TL|=-ydZ81O0j-L+$=HMC=27 zMHHC}<6)a#FG!2{!V%9FexxT}g_c{CmtZaSG(2g3qR(dXD3f-*jtSmZy&ld9f2t=G zkXF~BvC6wZI`lEKh{(IIzZ_K4ul2mEMJ>D-Zr0}!iIFkftk*G-HT`x_O~2EVuNi3P zJ1(n5oZrCq`c6+1GA*9vF1?zGwEX=b%RlIw$+BnX2fcTnvbuF;wkX}R+^y#_k(PS~ zS^i0{BpI*nKMjh{PkP-xmV5Qh`&iyO$nrLQ%(du`KWc5$Gj9|``4)117VIEw)92oV zWU2BqjKo&}>C;o^lFW!;tTG44FM6IJOO-QVpZ|6szv-)(w3NZ>7f8RJa5LG-f!|!X z7s&QO{%qGHLWc4X@73R~|DPcK@7n+25&31}U;0#*kzXDDrC-lPes#E8FCyZ7ak)pY zWFo(>+@serk>6nM(HoiIZ_Ni`)Y>CUkC$Il`b2(BxkqM{BEQP~TWWdVPWnWCJNb{^ zF3O_1w?QBLSMQ1<9YEj%uv;*OJ;O#B^b73!8RLn>9Qr%FsexX(pHU^qviMUt&iffJ z2|{n=F{=9+ZEQ#0Zxd&9vz?RRBr5*;Mw}6IE0*PJ#TiM0^u%n2U+Tm$e29@2MQ}VE zV&nNWtPHkQ{wrk5k_GY83F6M1C192A)h~kEI-(2Vwv}zg5RnGnUO{}$%v?a2H88x z*c+vVBjhL}=Qi|kkuu?Pm`l@ON645X2#we{W+oZo+o=|EZ}1Q!n@K0E>+m`55Tk%d z48FI)HTEG!DU(sNVO|0|hZt`#k*CGR8hZsPR%WuySflI?EUQ?_WO9U&S|~ge^C|kQ z8MT76#7LiYqlt+;HLV+s^HIw`1!o%FL_7~oBj!#a6Z0mVuEiU!OygiCJ+KLhD^JTX zn8>-nF*2CQxgc!JWg_Q-qm5UY$eJE&bTK*mBYI*z)`+`{N|*D_vBnrCa&Ag9@|h%G z0^dnN-NzZNQ3PkA@y413Xa~+hw83v}L9U)`be0gg`ATYwNk+omL}KARHMZ9zBPfVJ zicT_81)+@k1MEyPN{M*6G1;gQ#Ltb%hP?|RWNu6`<`D5BKgB3zB6DMk z(J06wFB48TR^5Y^7kQa*ma(K%l;!=p#5u+qLC9y!jdKijG0L=JOTCR3PHB4mPXBoXrWZkbb@|TijnZ0w2Dkd_{bBtalGR`*`sg+bOJd1_vs2h#( z4-t77dcoh2V>cV~1o5MKt5Fg~Vo!w=zecYhew=SN5|^Q!9xu+f8@3=VUXI;vq%)Cm zzTK#LWMC}{jW#CI=RzZCImyU+%{TIx$f(|Fv@(%Vy~~*TDAh~0-~yvhkd_!3=LJSa zHCdK%zT4;&q*y73u@0Y4ml(N^p-fMVjC`4KU=3->cE8_97Q}D&`;EkvRC+9&u*Lnc z2aJ3s`E%g?29O7hMkZ(0!0%}TdD!@a$@jyEPeWAqAAtXv6CH#omPV;u7g)$3(Av6%oF^{fF!!(Yn?IiuA{GDOZP zK9Tw36WNzv^t5Dd_(bN$OP-9(gjYNwGhwwyWV^rN5!vG!Jt8yHCo+52donUx-ZXN! z?l-(oHwV6Hlndgw*9N0Hir~oKWX!F_h|%)}t^wXQ>Yo+F8|RyiP9k3GG#k5^$QU*o ziO-Q88J}iDWg_GAu8}54v2sia?3=>VXsgjsM_MvsZAJ$Z8L>}{xED}nk%BX$cp@{@ zmyr}Jm>Zb$UmA5xa1_Pa{97aK6|yYjyv3NyM8^3Cqmqe?^AAQX6B*}jqnU|}^N(JR z)x#4a=Gc!$)~n>t3unO^3P`VUMgtOm&fRLv7Q}Chtwt*mukUO#x&-n2&NicHHQMp} z&M!tS6WMouF&c?@t@DeqnMo$BrvHI9{l(bD1fz-(`_(9T4K0@_0ham0NO)b86(f7x z4r4A8S@&H=qaejfM>d=&1N~hFJ@pqWOW^DZ&R@HYxHV{pYC0C8vD?@yh`);a+eliA zGX6OKw~$Tt1gC}1L6@L!{ziEQQn zjJ-@`t}5olH_5Wh)flsyiOkG6vyX|)%%NuP2GWu_mSBGU77-b-1I=DRnq%u}HW zKr`WOlxdDB{E*I&A7svBQq12?B$^FO-UEX3MWVUp9nwO}xCR($mNpZaSVL#pN15G% zR4Q8zpt~%ROygaYsZ_rIMG-e4j5f2F99IW-@4N7Z*DPmp!sW0_3}4KRG25BE{VVJ( zLko^I<66)TwJDAp$!0DQFME$L=L+Iy?-6Fkd#L4SuWHU?BC}UD%ZPYws+y~q$UIcd z2U>+4Z{#=3MnU}EWSC>#7an^4m}aUVe(9!}!$g*DnzM;`rJH6M6Ir@xzR5(ksblst zk@JOPHhzGm7b|x{Zwf=iTyrxM`MeV`=YB*o@_FZIQ*9SMd(S)L%tAr@o^qU7$wZcQ zoLTrOYWaOoOn?4hEyr`y|&kI5=h`E|>HZnOB&fwvf zi6@);?)yzJQ#PUOh&_=`N43WTkwsc*~&zY0GFGoUy=-xJgCjoHEy( zD75_fbgl^){%AiObId0)S8pC9bE`*WX3jG+g=If`Z!=dhk#=r3PE$oO{Vo9W-6R!@v9>&`)1cbRKg275Qw;x03(YoJ!qAgyBaXCdQ{e#Pd0 zQ3Q9$7nq~BpdEk2E-{TLG8fuwky#>$KSC}xR}vAkFurG8Y&J5HzZbd0>|i3ld0b+q zeNR5iuLbWl<9;9_XU6-@pP0x|wA@VU9_V4YIa?5lA+ALqG?gEP9d9jKX{IreV_l^= zm54XiRhoHB2`mkQHXyPXm2^(maQV7u6@t*-T_qSD7VDWK>s~-ArUupE4VJsTMM-wdP$v53JX7 z=5vDhx$&IY6h(0Ee%>tKI?%%x%z8m86uAa?!Q8>*SNKgpycg>wGh-W-g}I8kQEzrJ zk+pc)+{HxJ;$<_ZkF;bhUNP-oh{#&3Hn%a6t@FA$=GTE9zHS~R2-OSw;Ok}<$#_v+ zWA-wU{;V~X-v*Yx*1Uv?^svz^WFq}pZ|-Fx{n=nn?MFMs%Hv~{;0g4 z@SeGb367$bkcaP^{et*A3?G|yJ4ET;jNfh^_NVW24QRESZWMV2$fst8Abu@2nyZL- zy|Tk>XBk9~`2=!oyP3sAMq|5K_pi|M za_kSYnTc$jKg1OLC9y^r`>Cw z6Gd#GiS+p(Dwng*Q3OY=|5>$y_&Ii{wS$P~^PyIJB9_(SwZ)-UAro1P zu~sV+S&PH0T?dmE`W%F^j<9M*`UH3Ijh#Y>)y}8aN^f05QJ)q_0p}oqR2*whG|s`;^&xU?I7aS%d$#Fqvam2?m=rM z6X{{ls%IkW9<-X6$hzBB2NT&|uC+su7H64^o?@hW-|86(5$sZZ9ODvU%jMydC z1ST?Kmsw{ELJ=DQ@yWC1kW7rd1@`lR%&9Oh{PvdgayDcqTGpS6k;ZkrBJvx{`<&v1_b5 zn8=7-W0f(H5xd5Eo{5auwbnX8C}Jwa=Q^u{WW-$13M-j8R;DXF9QFkF(;KXOA~BbY zpu z7}fFlbe@%T6v@mxpGL^rto&3W?eIi44(!}!)f`Ra4*1@D0+9Ju+ObHMiMuuMmeeAv zQxJbIWubL@8p=@JvGj#ji6C@R1!vfWR=FU}%EeIDN{B{@l{*f#nw6*ER5^~=cUvzC z;@i2~S|f;W=WeT+wWOUzR`|GqcJ8sR5`GxTu zk4MX-bvanR&&p?#auR*FUOq^x+-eXq70Sn_#wu5XR=L$L$WrB0IA?wnkP55+M6|qA z8MzmpEe?jKyFqpyw$e{R8NU_}TXO{I5!s6|eAudCB5P4)?IkVc6!;3@E-0(Ynwl=` zC}+V}05|He<1whL$E+(zW=!utu)>XldzP&01o7MbF>8Jl!6%o;ta3s8_&jcPN0ED> z^p)25|DzaU#PCbxC#*a{nq%-6HHdUhM49H8n}9qBT2ENxClRrOB=eM2GnvSic-TV% znWwBqCToGL1X62NW}r-k^4LtejrIkrNsvkfZ^?KSWL~s7S;m2VQM?QHWlNcYT9wK= zctXTG4PLR*1@Y_ts+Ac<5<&V^t4I*PEgG!)Q_)UOjBJb5R_$rz^UdGUZKA8KCP9`e zeQ;{=P4H*6)yHHGw9b1#Ub8Z%k{w(PVk^IHYwAVOx5I4g^}y2k2df|1`p z1HRoJq_xgUJAGhT>#S-fvaH5IT8-9{Gf>MftI=8|NU?GNe96@grEjo$&q5ivXR=9A zz6SD+m3j`5!a|4=koT<8^N8fXuPFUMKCrsaC-Mz^Cp8mt^&_j`0wjwRtOb7i_Q@cB zKC$Yj3mLJ?hne|_)gcIFCXVy%*4!Mj{0V%!v(6wlaYHZ0%+8&+m#70n%p` zTuDBk*sLh<(4qWlt(r;XGqBSEYslZM(FI8Svihx%AT1*2@l=dQM11gR{SRxrkSSKS z!=4`A?)9e?Hw*2wD94=`s~ihje_3i2IT6TCYiblZ1;}ozD2ki`0xuXG~DJ0qqovb=1iapF@NFOk{f<5v;q>FAF_P3ARQN z^iU1%x5A!3+W@KtYc-}TRt z!NglcExi7IWH6VB?C(bf`)@^==9n4K-%p1a9yQ3$(ZT9@DC4gsjt<7%hJ6sU+AUQtR%4AWpB5vb9IT&}lu%rB44x=&1ObjO8K}3PG#It~81WTFVuJtWI zP7gLR!SfO=H!8|m!EPqg=fZEBgUqx+KA#;-EF{ZQVgF|_$ebNaV{#0 zlkblpa&EAk$sb@DWzGw>GdU0Tnvi4%!}HN{u`&a8n;!tn=Lh#4$EF9H7N88xAo$*D zdeB}dh_{n-VQ?Z7`QGZnU^Wr&z14-m0w(gk)rCQMU!~k@x+K^yWQvt)J{fXJFtvm{ ze4NQ;!6GJj_Mi%UzC2j7gku zHYPHLR|OLuBs(&O1;GMA{20y}6vJzRdmlzEKZe%?GphvgVt8#ZpNWj&wZVBryck{^ zEMp>Lckx`u=TqTGf)jJ18wJ13Ld9>q4 zwJ2Ch#Ea^JU=0%))dj%@){>_m7X(|G$fzzD6xBt+tU4^qkLsdeITIPx(qI=88Pz4h zRj-hijOx9?{57KP-pZjY*eHlULY4*F29dP2s70$L?1N>&aw1+$?+?~8ku|+P*vMM4 zUiWjodc3{U2ZP}^$g+&agTaY{&`g9+^bZEhnaC&lr9pcg)eGMR;Pd;kU~3~0tUKOG z_;4_1JrS%sl1GERg7_J=B3St*%2X(AFfZZAwj#KO37%v@vNE`t$)va7Yi0}Pm0-yR z()vFpwZU)`k^jcPH&7t+La>X;UM8;uE8ilS@8CRbHCTT=*vh0D-gcD$SsUENqz1Oq``7eTLpOKb~{MW(FOl0J{g5?`YMn?X}U`7WK8TqZjc}!&F z`+~KC6f586DdLRTZ^1SuA8PQv65{-Ou#ZWRO=Np8;d8WHtlWGekw1c|Ot1wTKx;>E z^A{w8Er?`iFk=%D*@An5$=?x?Ex0$hw~L5uLB&q}0g2y&adwd)etX5)RZL`i#o2X4 zy!MK-o0#BJE%xO&JFXiow|Hk$_qX?*84s{;6f%Ab9$-Hui0{tWarW|W0hvGW7`=_Cc&5WZ9rVROb|b+5qsWV)bgVmu{#85iI->WBQhG|ixu2a zjM#l7qsVAPY~>%c^G>XcM#OH887_#7#*ub*ED;%vW9)80ibcIPf``Z14-71LhPpezcRB$Ppmd zE+FFhe5qZ;M2-NL+Lf#&^Z8P{mWhnmr7~jPTH*>jE(uGo6i*Z1K(1b4Pdo(4Qe`Zh z9{CYSzP<00-7LFv49fU@aF(4o7Kxuxv+S;9B!1+tw$&6Q#mXmdz>V2pdA6OP61nRE zm@9x>XUA(qZttXb>vQZ}LHv<+j=h;>;%}q7l;_$RI%)k1Pk*>>nP=BAiHCFMPrw<@ zLc5zu`mbbpzP*=8*ds{>*}=E=s5Rf7%LLD%A-U78V=|U4-(`0*2|h}1|BGzfBsVtvL9#pw z-tQ=l+xC${%j=b8cEZsEeSW|;h<@9Sv_BHW z@9)d(K0*9mu*_~cZlKRqb|(`V)hfG>h!^=PTREP5mVLQuP~@xaTp?2|&Y_I}f2!?9 zCevUX!xLqX+hya?PO;L$C(3H<%_mST@S8O}QTCL*?}@T!Z2Lr%f%}%BrnsN^oIP8R z3b6*jeTnDoN+!4lKvHKn3Ib;;V4W};{CUCdW%3fpAgQ;LPNLGW$KkWXt9BZbaweF?kE@AX#HKv(~r}mA=;QVzL^3Q5XGr!`{o}sZv;>KWFk2BVozCbZ~i|de!p06?;zsk*m}Ec0%_ec9!CCS;0=P^B}hw*{Jv>} zef~sY#~XW_?K~#(tEgtXP!K+@lMHfA~RrY*&Bhk1J14- zBz{H>b1t|Li660H&TK*a8DyAKB8Z=3!yJAh8@3Q`Y{M_qhC2-xp`Df(ITs{2dzr|& zAi>GFm}KN!kl>_WLIl?vH$e;!a%z}dr@|-!YrjON=u(oYeGg6%Ccs+;XU=6vDwLx> zg%f3<-8BPb2On4J|57g9jW?xA% zTVSrhHVrzCya=&hZv+r7cvXgr~%J@;8?93Cy z?G}aGtrq&9~1dZl<5q=1!er4pXP)G z@%@?RWC-H>GtH?Y;`x*1)U%8nk+PheTge|eBAw%;&m$t|uM3<^LFoK5jz1R+iqCXs z>}{y!`!n6K1o3^I?u-}2@0HV?EGDu|r#tyXyk0rona4!t>U1amcJffR@`Z!)=MpDf z$oM{A;#A&&TK-KnmpZA1MC2~S6;2xyTt{KH%yf1z!I>IKfs;I+wB*cqwKIc>oEc|3 zrGog;xZZhO5I-8%JN1J2(YW4eWg??-y|bB!7me$kT})&&u6J_p92kuo21Vm$r(DSR z(YV=BiUvmG7N?GhjK=LwPBF<~G#-PVd#6*$1fzkZ$Z2PS(RdQb0w-w!X<;;;15)B- z2;xWMoxrc+ly;hltFLWsY4+MCL}7lgC8n#&V~IiOh{^r(F;~8Y`Ur7o#1@ z4g9uZg_A6Z-l!~3C?T$C1LHri%bZVH$(!X*#n8YUseVS-@go17(?GZcA7Q}z1-sYs$QCV_L((hyn(i|iA z@cW%POyn+lzmxs~S(bbF+noYImMZzYi~fhxSdTJGl{;Qh#LmfI&bNXTD}VOVn6S&) z#pEg2O~t#{b~!mOqZa(G8IT_#V!NDo1@ZgNZYTB?@>#}bw__0T+VpQHorxR){&uoh zOO614JNZno1@X<%--AYg|D3t6l0WCd7==&S|2cULM6`nxWh)RRG?&RGupxsaCRE0x zC=bro0f`OOGAU!SU#OYMPZ!3B`8_VAtR~C%!2G@gwDu3BGKsB$-)@2@`eC6GCU`b} zFUTAaYGzUd&ocYL*Fhsf{Y=tSA_s@|U3HHR8LwekepE+?>ILyLb9AUlkY;5v*L`$I zeG9dk#Z7d$k9|m}{6iu*)*%@iYX2IEZ|8^*Jtg_K6C4rREM)u<;D}KAX4LZYSq)_~ zku9i(3W#{C6g5;NNRRhcQ4Q_;meUBue}k6kOSfS|;nK}eSP28NM;X{ z+)z1_TXIMyFO=9#GB+~G50x<43vWhn*Rdcp=0}qG(<6Z4uX%{fmIB!6BqE;&XL&?s z%eA38VaLzI8$xRY@pI#b(5fCR%g>FQLXAvhZrl`VC*tMCO`&ckvUlG!C^v2mW&ebh zifwg!rv`Y}G1!JWHgqCT8VhkSU#wx%R^l(BcriARJ)!0 zL6QXiJRZvY1IbbapC&fJDV>^7@(v>SG_e-Q6QOEBDwH>Wh2412dMeb!WRDUnNNuQB z5dW?8^C9I=wBwJN&xi8@XxfUYr|3 zyNGzR-fN-6WFa$5M(nkaLBty&Ukg<+ku&}qp=Ks>W_%;mDTx0Z_eQ8FfR^bQAIJH1 zp}iUrS&I#!c?OY1W8mvyh}b)!oFI{JcT?YaH&n;u-6FbU{Jl_uO)`@Xq&coNl*+_C zg2?-!JSHRHY%0!!AA|~-9MeSP!%z*AgJ8r)nYK_PlS~+&k$e>DWO9^BbCik0K8A@X;q zU_8|;#N^*l!HG!xJdAN01)U^GU!IZR|tN4RBz_%%&*yH6fi(^2le-}oHj zZk|9g>L~aY4QesQ?V5;WS^R-t!}l3*7fQ0bn~4SFVE8&O*^QfoGJeDkchd#&BX+oZ zZ4?Q?Sa*b58%2%*qPjbXc=6HPgj3M6A0N$4BjUwJbNiUc_!w^TWTE9{i{WN6k?}Fy zLP7la1l_qAq87@(=fKym@ZLP+_6q`c?k%Ql3A?>`L=Jj^%$B3v9j6kx__kQ(B&fwP zF0J1E?{m}K+|$VNsqlNFN1gz`Q05jgF(EHb0j+UvIg|6@&EuIsj&s*CIS^!~0~zmj zF*)QX_zhR#+=hfb_jEV^T+}KNH?rb=m6>kI zdBTo&yTvp&@q8k3oX>KrnA`-v$AM!)mRrx{;VUF*Wg>5`$a3uq&`z;}r)%&8&N=Q} zCi}rDWhCdiiPK3&p2<1SEnI@fD z;P0KGjs5T|Owe9FIWQkieZtAKCWVj_FW9d7=Wq_zD)vV4czC`g5}vM^S8 z6iP32m6<40p{#>7+mk@5QdHbH2|10!E7 zThO~zdx0cFq~!(foC37t-*28x8b%vDv>qSz{q~T+sot? z(88Wl;pW~QMc+gtVM;Qz}hd_f$v=0*xQl#r9bK(97S*@ zdeof~Mb?5p)o!66#bSg+@|dgKA>!k$U>|pFB3^%g+&zVf%$CR9940bbR=5RBWK^GU zs|0Bl^H&p;waWd5Wn^a7y8TS#xLWHb6rw-HVy^&eQR|j4`6mumra+!`()6Dir*N<$b7EgFA=Gsc@d;CD^-o%`I6-G6$@Mdmn+k?yg}n zx`4rx!!#@ zihKe-uXp1XVOca+B6-u@EQmi>Zg3~wgEBqdx~0kO7Q~+`-*G3FqKrRRzT>VEWT7Hw z#&_IaL5h_lrcqSib<-E4)5G99`lkH&ZI7D4=IeCPfbMY^Hx-?{2iv`o=J z(&d&5;?E9S+*%^u*t^AT6y%*)nVDPM)JnATPOMzB{ovjpNU?Gotm|;!rrWI&q(zYt z`^i-vLai3>+nk@>If4|6+w*YW_-D703BH%v1|Dv6>zTyX5c$<@XY%YyBEP%6g1i$e zd%+I3zM9ICG2G#{GLbRd;r=LyAF)5({T@RtBHN+#KV3r*iWri=+)6?Gi0yRih->0&kl^(0pYz&WW){#CqF0r@y5*I;VMBWVt8A^ z@NlajEnfdh2=@~4`d31D$n&Bs@1D|x@MtEor;G^OOl1BfhEHQ6<1;dx!$kJek>PoQ z`0MbI;c_D0GswvBDkgGmGcx=(6WMb|hCgE>{TUVRW+MGLBs{tfYvF&fJ0@%i;%C&D z@QH&+P83njguRsTJV7YOkQ^HB6~xc6v0>!}Y8~nG*l>~{evXX|mokyPGC90&uRJ{5 z#&%>a)NtC1WLZX43$GFczJYogdMorwE!@gv3W#E_G{Rj>@GAf$!SG%t_$45cP&nx& zv8$XIVIf3B!lft4Ueg(vZ~q6 zwD43WbJ>Uy-(qR4S0FFc-!>;-w@^9Au+`SS2hQRHB- ze0jK15NcB-SA-Ma6qdb}@Qkoc#2YtegwqA_+jK^_o{4PJD+jgd%2Jn!rg-SZF)^OzKJ3x+w|J7%0#y5oNzi5*`_yzvzf>?y(K({N$<(j%D06}1@WU= z7~b18Fsg;&q%FRO_-s`eP9x&QXMQ-7Wn|9J59bNuM}B_z&L}bl;ygcGBM3zv$(`Ye z-(y*RRPPEmFp*I$9u(CD;ax(;AD{0I*Z$!9ygyjHC!EoZ#EJ!M09svv%wz8kjxKpDTMyc?d#MD~<-!+Au!Hf;&dV;R|| zE#Wdj{5EX~KNm$(z~`25n;_JtNZt#V?7-6fHf;^>Vj|o0gF$WjVL1Iy@>%wjkHd+7 z5s^KmJ=`RS-=^*1ZYEPe6vwg8!h4y>HvK$2W+&Q#9ZnwoI>V_hgF_>6|+pKvY{d`83X+LTBc6MRNP5))};qOeSCq?^gf@Qj8s`$ZCMEX(hwaS@w| zjA2}4iXi^e#E{6Pg7{G#5-E%#X%NF9k!nFGsz~;aq&uQ4FUN*PvWa+69U3VR#E?m>) zL~L|q9@+6Cc1Wb0h!?R#BCD9lXdDu;QwK(4Ok@oc>EW12dz1{$uwx?qf>bDX=f{X! zB@c~c9gTK;564C>iz2vdG&XX56gdTaJ}gowh~IaTBddsb&w9y`RzaEt!CkB)B00wl zjG;CtKH7lzoDOAakvXL0#Yc~nvK={t=#gqBGCq1FUz7~S$BZPT z`O(0-TakyNNEY}Lj5G-1*WHeE5%Jo~j_hJ0{jnpx;|BT@isT)Kq*$rL_r~ylp-9qr zBo)f6N=2CtWx0`TCb>ZJfE*Pm7sT(&$3|+I$UHnYGW7(qBU?EwQYMJs%HtxBMiDH1 z+<;b|1!WxMnp+R%l=;6 znUN$WvUR3KE@mRfmaNEZCi1y5E3#M+@&|WHvm&)oWC3`1ZlpQN4rbJOkv=9e>#`$p zCkubPr{nBME)lO5*^xpfvh?i8BZ4dvySs~_tnA3MEF*nBKeC32to!+qRwnWp_JYV} zCbI4qM)nHgk6IT;PM&}sRw(0OpSB#zx;T={WXsp^E9EfLTpF1xh#!r-$oEmC3bd|> z#7#syG&>-f5vdZSLiuJad_e*vKhi6R{|0krM43eGCG&Y^BukJ*@n!t3_Nqt$lNi{0 z&Vn+oij)%Z;&WAGmmtMTFbMZYfyshM? z-0Iis_4~cPueWnP=g&R&+;h*p&)rUbt8+qd9!b9Nj>UxFD?Y(p^!tMArFh38D_C_c zmmY$1=S}FJ2ZLGHp{S$taIl3$oy!jg`(ID3py!pVA=ksfB_!PQD3gQDBFO=`Yhf9!w)q ztAfJdQ-d&<>chg|hd%ibdaN+mM51P!`9U!lbE)UK^MjqFc<1T-U{8{~=pO$3;C`9L z8wm@7{nI#(cUBe!HVE-H!0q8{AYvXNYr!TXM;6TyxHdYV8#fH zqt4vtgIQ9%(eivSFcQo?%HgT^m4>pq& zi-907!23VTg9Vvf!!t`_#SoA;gKJ6h1U_wtp(s`cw~wLvM0Yq>1{3e%$ouZ&_3B%} z0ups?dMj8h(|FJ5R|T{0=3H-%;cxG+3RaV-XW6TQ^-{bucU7=aigzql1)IiV9KM3! zmtEfpW{+d}@|K8!>xOH1C}d=l!62FXk#1-n&ol2Q#F+^Sls^PI}k z0`k!bk=F$qI8AhqdR=hV{m0gMU9d)qSLfPblN7JcwI@XWBsgy3v2i{LmP_&C)CKFM zcya1Zi1TT1LKep1(fbdy;?rO?NuBU=eHQHb0H(ovj$JXbY;6@TvpUuJK>|^V*C3yUA_P-5g zQyQ+}1yI(v!G%5vf_xubF6Gzm@RwCVb_4^HFmhdtds{61*6gR?7?RqUH{iX(qV}+x z5nM=;CtiJ*$Lg+N&xbkJYWRH|rzw;249I2hRrX!MPLny!HP6RVn%yVVd3SJ%2d>kVMt_K(LlX)%ifM(^Ss2Mb_{@ut-Xd zY{kK#n09QP4+h7Os59kYaF&!6aHfoh8Xh{~nEo1E%4wo!!LPxT=@_|GtcGVm4?wP8 zgPBs|KM*1pgadUQ9IBSG7d~8rkq3u1N~!MdNt2W-&w%&7 zF2gk4=5w51;QV6AAmOqeg0cpOYGfL(tRbNWDd)i7zreDFg!W6B6$8JLfXG8a-Jih7 z9A^f^84^k&scYxONe`t<8Jx;TCp|QQq*NGCL;QO#>7gmM9v5` zNm&KIh{wPAG9nbW081|wpO1xWAIPXsqLj%{LrjwyN|kaIv;x!I85$=AzrM2oB99F< zkQ9qWAj?4}hPoAT%=_*-mAAWK5u`s6y0=R*5^G6^&8a{p$bkDy%Mbm zy+^|DS>YQmD?;@odt!de<-h1u8QMp};}BQWm7(8#(t+e(pOmzNRd)y&{?)aa2ybXV z2sL~=bjm{P4UU6lRfW#?$$#*>q*b9rpBy?Hu4`&k0z^MzA=9)=i52bOZy~G>6-c=xD%DcX z{mv_WGfVWHQL<>sv*fjkoQB~%19^<_QnSx(6%c7#oYF^OW^N=oCe>)3nj5c+rB20F2(D^HKB4TUfb7%lAq=p zdTn15I=-cAPH5?x&`z1FM?c;>T^ssE%0_te6TblVQRpy9o=Ac(jy?x%|2TB`87ylS z$?G7Wgesop(lN~kAfJVH`s7oPFG6QOM`@xx|7GYxpJ2~_8M@3T*sEWKdiw->bz>;i zCpgBwK4B%ZDYTW+s4K{((ACeY(lPR;&|sfnyqke1bLnE|ktf_1O-& zww(}pTWF(9;~mp&q3u$gpokO83ScG@nn?wDic<1u3p)``bz=Kc2H~FAlzlCyHqGvbAYgiVa?|60}32Doz zbV`F~_n)B&KEbp5@6Zb@(X;#CP^C|>hW~~dSOQ-hfjbf?{lCzDDF;BhkhHLfk>g|G z=TNXu98P$HOGoJrX=1`7r3?VM9OR^MmQO5@w&CScEJ%|K(k>i$ljBST=?`*h*pzYv z=DM3fI)vAfd=j&9Ta361w*u4{|}cK+23WI9Jzjla$eLPqg|jAubG? zZ)2_!@dfOu&xc&y!m~(ROc?TpIp5l`=AX>PUq*nBSzY~t5*9a%AqR4^If8{H_ z5gsMwJ=i_Kdp#qZ!y-<;%aesNP3C0&{izXNE(Px*@h-p!*Gjn*-k)dLF5`H!gb{{> z@NeD8DC?nyp47F$zle(Gazv)7YlAcYc&M})KE!dNGk_Tu?_ewHVy5LlE1}L-xT_Q| zjum#Lcya9TFcR+7ub^~0e3wtQfH>h?nahiOMR>UsFY*=PjZ(bGy~9nuIM|BbVX^wy z8ukfaD8-A@C!8Y1i<1-{MN%8ny_KKBBt?6}t4~x;!=A@goRZAp++$H`Gd=)oerQ)x zxQZh4FE{^ytHYJygCuHIc~v;BT8+BBkn8Gj7oRkPToX?8$)6zo!dLnP+kS0$pifRp zgZtC)bf26C(m%Z1CwR3Q5RQMBM<&jYcqe{iIE6(FhPCLqkn6_qsP`z1SalZsS`b#A zH-^ild?_V0+$iO>9-L-ixaa#Exre;!4GO18`T0WL0~r*~ma=_fthfNm8Wb*+;;k+Q zg)3O1tBXP5T9Q(69n4V|Q?BF>u&h#XCzKurNed@`h@$4G^l&N(_dK4J>EYXbf-`n{ zcruGf{Rw&<;tUHH`6M3No)LcCCpSWxQQ=yj3{G(4YLGBE<`s7lGGcMe14fiUR zl?7?;4`1n%T#$#txBH|RWNP?PpS%F_Xn2uN-U68wuJXypAdiPPNI9bg{@w)0f^aKI zo)`e7Zv!a`_gu^M!BxQ_kVWAXpR|CKg_}QCX->Kc-XsinSjRFJj>Typ&xU)GsGff= zd>yBW&Lq!;hx_Cl$n|`9yiagEzYw0{lM5lui(&T@DvPe>I94mdnNr5a!QZNbt7k7tqAx0l*JppFNd?Fc%%1~a5YJu=y*Lpb9pt~b3K>tjow$o$t>a^ zj9y%wz8c<1!XvX6)cMtL?q`^bN2Uw%TG;#?rC8LCfGa-8ituoj=zVTw_)ZcvRx87c zeS%}PGQ5!`y8c-i-X4X*DH`K@r1Pa4mFyV`Kd7uhJ`g;OKon zJjW+Ede??4e1aphF8q;CaAbZF{>~?OrhFaV?-M*z8p1L4sy=uYYz@cz1jq9a;VXQC z<9Sy&og`0O1*3Nqw6rO_fMi{4+k4A0UCE%-)AArPZ9X6rB&NlpImRgWD+7v1CAAw&@ft;)@k@7IecOU`n zTbAhfIYnzcLE3+dk@LlY1MpQh$aRV~!6yenPSuWIN43|=D2>{aX|KKN6C8)_wMLRp zVp`$vjUItGr)ln1EbEh)KVgKQGz8X}+ASpcA`Pw=E{va!T9%XnFk_>fsTD|BBGa6u zC49$q?gMj6dx+CXE0Pk15xy`U)~gzSZEW31-f=%$tE4m~Vi>%0au(z|N89L=E+FS> z%_M4$>a4YH!?KFSckSSs0%REG?!?df5tRoXG0_hpc#uQo+WEBqa#RUp@COQh^w2YXE**Pn27`fFcM8r~PZ zv=glKv_=xOFFHUw>j0Lej^F^Tr%yhC$OE)7B(*V5w}tPfg50RZAH-aBG2Xsts+L5e z;tbT%eS&cYYDFZqF{>fYW{^QzHA$W*1K9yGSgSmAY~-7?jU?O({6*Lh?I%tn!thr! zE{6A#hibn{!Sy`84VA7z^{|F*ydB`-8b8-lzs4P|oz#qF%?$K`^Rx*{AFiDy<#NdkP4@fgoTS`(azJRNJ>`=J&X!dUyS3jh32DY^f3QSnwsBhAQA|@p_tarXGfr#YLiM3FTN22< znn{u;4wuD>RFH|c|wRWAP;GAe`1_GaRB=HK9Fp!UdsI-(?BL` zo&KV-#0-#GAXByVB&x@zozP>`wea7RD{y2w@0?86MoH10juo3=HJGDSNV)Kb7%>}q z^%1R-MD@?3+I_7UM;*ajEr*1U;C!f0uIB#3ttf>%zeOOAY2!#{ia7X6*mEE=HTPdk zqv||M8$rTxUWGKXwR>b5Z}jGCIa0h4{)vnSJ*ZqGAX zAD`fE&$C*8pWtp!xt30{F4o&!c~N`8mj)xhq`mDEjQq+8k(Ztj`E{-KxX5p4o!U^H z1G~2K`v7lhx|G8pxX=HlmP}G7yz#R_tB~T2pA{#JpUUVg>dkePTKBeC7We9Q=+(Eh z{w(5i=ux~bS83TK`GMpG@J1h`snQCiY?#lx-&IF{QnmPw-e`F*Wgir3HY zpU}@W(K=&4p8;`dw2Mzs{d@t)8cp-br63<^bA4if)N0i%VnHHYZ{d7jFV8qNCw!*W zQkr~mA)J+cA=hWxPALnHz!$JUKG#~MESK_y*7;O!`-uHQ41qNDT82+<1^H6TCCL*r zAlEpMjamx{kCtqZO(vd$99ds?wY8zsei zTCqhdkh0`#ehRZitCzAXDjm+?9=jg;8TWFxXr`32;4T37(6(r~9XQQO$i-*lz6UT|6MS;AhgL}0l zGR=G_3(vv5T8&RWhg^HLW)dEC=fN7WNsGGxBiBV&jQh0yQoL*KFIpi9*AUmM2efid z6J6yV)T&8TyAElYT`_W=_!y4GH&FT^ZNi1r3Yu;HgS(r<+7zEW1O0eJ>(q^Nb&0@} zeHa@@wdC%UOT07JlME>zPUSP@sFo!q;ar|+k7@-{dP1BZp!B0!3rU{X@f)ubj%tY) zb6E$YGET}PBRSze`Rx2tCh0B;T_<=w5m%mO`Z5EDhZdewEq^K$w02Z zv}P&Z)6##mKu=6lEDk~c?1CEpqqUN7KV$z0J-ZjCVc8F9V)VdeB%+`WzFZFf?Ib-} zNi=?~?b^Zf#wb933E^~oknznj2i8}6W_2dwysS{oePu6ot;CFxUz7pm- zS-(AuY4Sv`S7WJkNF!yn0s9v4-`eRFBx)p_qIb|RSBb#CPVx`b=M?>F65i*>mY%9- zkf=UvuNO)2`mnv;LXs~!X7jvphTcKvc6|=#GTz;sp_@Lz>-(8{iWGAov|2}!^@w(V!>-B@D0r$T4x&;F|9nzem@ApX}NM}9ErgqVp;)2BM%YD)hL}p_kLzyJxPl9er8{Nl$6A^{AOcceJV?|hJEz~K6we&zWwy2 zB&vof`dSiI!xX()idVxFT_kgTPKI}+@h!@0^=>TDvaZ$V`{WtujqCKaBz5if!P~0% zmqQ2WTcvzD6aK0yq#2+$OW8UH{#p@9;2JEej%H&#y9ekgB=8HPSv5%LGCNwI8}*k-_e_KKTe_kp2M)j~_gyY5GB*V6L0=j(xE{oCb3Z)e}in z9}d$~NK_vV)3c>`eK<_7WNG(RHosASv%X%+^?P8)u>-s>s_!IODE_(~?lhsSn{~Gz z^?bBl!}UQv!DE`Ck0DX@8KLKpsQQf1mrL>LGeWOnY3Ci&k@|Ne++)}qBlVM0RO$FG z@h!SbqRJYrr;(_#M(eqpEAYyjJX%KUgcHOQ|AW=2EU0))_E9-WBISJ25-#}S+==Czr^{ITd8lyL| zh$X4K5+0+sy$)-r#_AYvjylbo0q)W-pfsvi@6t6EfzRlFfU@q^`;(~o@NT_<(*!UM z&PZeR{Ze+o>g-auI*irhuBZM9JPv0h-qnuP6IjFw5L~N|)vsZRj-RpmL=si!ar!J0 zRr+{+y)PGDyYJEC`cqlL+pD}+zl21^xmQo(G|{pq=nH*<$Ll_QCkxHAIFsD3w;UJe ze!bfbSXK$m0K1`oChEx~s)i5f*AAfiP+12c&4c)v?E6K1N zqFV8Yo;pai0!x2XzhST{{ana3L(d_pYv1;!VuM~IA_k+6NYl>URgzYx|Htl{2fa#(zB(!`zFtsMfyT1pRDkt zO3FXcH1$%>uJqD0N_lmx7rB*0wW~<)l#caL?JCk!qe~H!KA)9k`hF?i8lX&%yP4_}GaY`Dg|k+fo zN+-wCSy`qhahi7cMj4)`W%>ju)h&D%S*FioiH@i;z2|U@tVYygy?=&k#g$OQr}bBT zG6>{(y^$rb56&-Klf10AO1S~vv%)d|vfgO~#SvbeU)D{Qz+>a#x&(1v)>Eb2a%-%( zn`Dg4b>Dh!>C1YK6z{xvS-*ZH^+vQ6FY6;nR4ZQ5$B^)OfvtE|pX3v4#d5vixHxa= zOOA{4wqAIf>WvAIt4go*Nj^x8zTGEJgVgH%GbvYej@qDSO7Z624f+%*-mJAjFJcjC zJNeqQL65tG<9PG)20h*rIX`dEO%{PWRI8x$4SK4SbK$Rk<7nBS@0a4j8!t7KChks( zEK;Kq&l0$#6JI?cGKrcYH|Q^o!Cb}SyjpnY5aN8P*GPE;;?#p|)LTjN#FG#QSDs(% zsdr&6UU_bYG+*o4B>919uv@qjWV2q#BC_x2eUi<3g_PJkJ*koM@uxgCHtRd3;8}_1 z;ATC3EVYZyL6j}J#vgo|A$1K7YFrD6IAJ#=8!(f zCpJWG*0WinXZP=Vp%m}T{avqM5ef1<{avq-X}l}r?|K7?8b815>GvI5`eFTPpWwac z5xts444lF}_J_WWM8)|-Z}#QFRvgtIzF$S|3$19;3s}Tn7?}e={?yA!RGdHcLnJ&h zZ-O*`>8(B)3DT;^PsGS|?QpD)0r^iiSz^3#_@ACC#T$qJ>4{mCOL)%;kPzNvDW@f8W51#_XSGmM=i>TTx^hIp9kbMr3#TbUhIocTy4K z_+JV{jN^YP5HXJbrGRNv%g8&I!tWj7FB{p$MwVzRY~%RdRLA(AFU_gYF2^`2SGBz} zNN?jRpY#N|%E({|cx!-UV~Uh(7R3q!(j*&2QdYxnXnzA|(M3k46mMQ#WE}qmgGI&^PDAy<9r8s+ zAxWN~U36$^nb9oc;CVU{WQmbez`cPo9^?h1#V1oiUNI6L$2989U1nsG@Jx$Whh?%p zYSg`EO!uY1>(^^Wu}^SUN6kV-!iA_}Ael2$jbBQo6#I((&9` zX>9l9!aA=sv?o*?e9G{aF-rMkNc)tII&%HR@#?oL5oaGn!-? zZ(e=hh%4e6dh_c0MmH(my!yU8?)>}|ZWKz{C#A;tgM^P@ zC6xYw5h%v8>Y`(QjnR`NU*MR357MkL`b$a7g!eK))*9oabcerT^fAas#w?PV;sE6O z9OPr8rUWDBiN)W-FCai_jle=`7xmb7kWY*>mgwkA`mv65DhFO32c?w^xJ z!r##_ntaj$WRo%OY0SlGaD;C*YM)VZ0i@YtBrQ=A0oiUWA<2*4d;VzDNWnWhoPT~a zwoCDLsD3n(o~0U!pXI&Pk4Bc1E%5sb+)wz?NO%s@z~3+$1lJ`f>qjH;dCC>-)t`(M z7UA9R{A7%iX`XwYuhc&oRZ{xH`*pao`pMWR#k+6%$!L~Rb2qO6elh~(T*D=h3y;oE zM$!vhpF81rT?h5~$tWVp7n@GvHNY;T!;73N`CLzmqzs1D@<7P7%Lu&0X`Z*?cS0b$ zjR{hEz+3RQf;1Y@xyOF;}seF)dc)g6ucel9Y<|kZV53A!EBw z7K8k1w8&iT;JwP1Kz=uJmSG&ug=HNv%6x)lwHQ?-#R79-S$`WzuW>G{;Ts_T8ue1J zbQBR;vYcudeG@e{Qboe!`CUj88(Gh3M9;18_iRDpB57}6t~@acR;Nedd1RYN1xbE% zjJ1u_vWPXX`&19P+D00s;7qa^Oa32(FDIku0C!+PF`o%qO@uPKng|1lPucBKt|WtPv1-c%<7J6&Y8{w@3Q> z1Xs)VMyB`#SIZAa%1JoRgAgY-(m+xy4#S<1#2-f%kv;bk>rn5S#N`sMzVbJ z4af_Ta+W~tvpgHW5owg-&ChQ{;y$K0fl2ai>y3yeWqdyG0KXAQlj7aWyb;Ng;_V5) z5h;@5?IXPrsg&Z~@4OLNFQrb-;crBmqy*(0{zfFQ4(pRAM#JvYVQ2-^u#Ve47^D?s zMPwXFzBmiob^0jyeoLf4%E(MOk3m*PmP)x5Ru|`hR7Yw_W{QrGt1HO6k&5+P7G7m8 z1$jTxL{cmcz#OH6d=Sa`jQS_Kid!40km8NZwUPZ_V46~KF}%Um8*+UV>0Hm!40rS> zb&(V)zrh{-K#(sYV@OKGMUX2KWMf2p$+UkS1|a+su4OcSx94&-2@^G1$*74#3vuaP7veW8CEKn_PTNJ_*M z$h8aPXk^OQoD1Xp3i5ZPObW(9`6p5>1>>}W{1<5;;W#JX3h$kmN#Agthg|{l97vp* z(14<5CnfwC__A~Zj53^cI zBh1FPgIr>c*}-YNdHzx}SBlrGJQf;B`?5$kK#$TXW_ zS0C>k`kMP?8hp036iV-FcG$yp#%EhBCP|*C`xo{JC{4OdVEDC|_^FdtYWf=c1LvT1a!9*|Uiwe+)Y?pM&%_U7u_M z8DLgR@kYWxb3ch134_e*_F)_~5(b;MNa^JA{>ET)3W*vUX=Z^>aBSRU{vzc`=${{; z^mOy2U$};^NEv3vOS$}6xch-LH=7w!@YfCh0~v0v-_N<0z?%P8l2)Jm4Kl*aJ)qK@ z48I}0#a!x>vp{Y&*ORDT9c{)Pv;85e4;>u~;@oXs>XR!$#+oTCw3m_sGS19o5xAFvGTzLQX}rCZd(1K^ z-Yj~LStZ5WOS#9~DC4|(GW`A$;@o5Iky3FA%LKDkO3lUaZXKk#-#oLK`|yG}v0^w# zmf1_nUvTb>26@Q5TFU2ACYi&ej0YJ5X(pTZN;&1SSTO-)syS1N=*cqOd`8OsGR-6A z+fqKb0KPd4xn`L4QvPXxZ@q)$nc`QjA<9zti-a>xSIQ62iW!h*wplL4f%|T3`yBHf zDHp+-WDdyV=2ucKSOHfmn33k2d!)>NK2|J%G(~3YZ(LTlBKVsFASGsJDL69me1FP( zfQ61S&f!m)vq|_`uo!YZWtPcY@i3xZ04X(_q?`fr8pt9u?sqN=pCPUUDKjgiTzqn@ zcpqf3xnIfz`F_-5GyX8=a-ipNj#_NGQqn+h2WGLEEoB7=?yf90%ccArm5ovk^@`9UjXLhXk z3L-ykPLVRug4HX?GiEvGqB!{U_8GI9q%QhI^%*n01tY6pX)Q5}SYmF2I6END60=?k zj*Yz_&zU{`q;^He#&ag`w5uJ?=gcHZQz~Y|Ucmv%RU@TX%JXKUl;=CZFNh&cxjE}E zj9e=A!TU=8fV^OK`kQ4Sth`RX4SsuLHc7#+V4V(9VP>^*n(6R-=WLLd%_1q^J{K#x zfxK$gl9Y&ZU=$41VK?49EYtJ?NrW`7o1OpRIDt$-@}`+2r5&ugdqbL)W(G-#xD;~r z2dOeUi8H9qp-~IYl4EVdLNtdF&yXaX>gAM zzYJPuE{#Pgp>KjsgIu*{tCSnyEvA_upP1cF;xr}jMo=Nhr)FOgUen^$^K&-%+;MMa>vwa-KQGZ$EYcrWdT|GCMPfPLEQQw#=qN~T(EygJoyW!gz+A&|7pWS9ErxD-Y z4m;?OYqwcMQX)3OO8Ik;pUv%3{($>#{5HZ~GjIwA{T_1dH|t2$?{^NGn|*2Ut(b#mBT2F7QxYqFhFrgzr=5zWa~w?b zo7u%DcuhHCYAj+dTu*UkJ8Gtp6pR0!j1{Bc-twq9!Iul;w3yRpWqcO z&T3^*d!AOsX&8B-m@ebAwYHI{I44{Ce1dUKvBc@rV}VRKGI*6~Z;c`;7T&jc+gs~6 z4b6wx8>d;De1cc}4px(lvp`-`&b0J1jy)DvMU4 zdo|ulVi8?nhQw=AyfsD2=02XRm-19+ej_N}>ednCa4Y_TV;XObB;nq`cg!xZ#``2L z6ZROb92OCPYd2mi6RhG;!M?29AiDLPAtN^dR}IkBxf#o?)3@A30b)^&H`8s;#k$JauPnur$e1JtI?MWU1t2uXf*YoFP_!l0DJi^$)SeN%7tv z8)89L_*d6P+{|BB9%>!`7RpeohH}9Qq#c~^(5|7D*_q0s{?S0vt#lUgF#PodlwnqZ zls#E6;y`Y;HnPwikP9;0IxN%R9S}-})!{roI^G@72uqXVtp-O}X(W4M2L1;1f!dF- zj{nxs2pqIZzc9jmtx;AkOW?^lvGg9=t1@|jFC*=i-c+kNxt|H-qOKyIp50WH0`i|)%-V~$nN67c4Y0;^Hx^5%^KEACRPkLuL|t5Ay9s|A+U6Vv30g|J6d2W35O-9|E7 zcr(CUD~m*p=Xued$Fu1x$TiO@qBPt;n@MK%QvI_Xq|mCk?AZQ!!m1%r{jrQo_WT~G zVX;+9qIwMCBw|^$!t1eOtC>Xg*ppVbAhk;r!!M(8M3qjCTZ|wU!ttdE%~nVATo#>sf0f$xLzRAD(-kvpPpGO^KMe3*MN9d!Fa4 zED}EMr-GDQ`nHYy90pw*Xg+%r9QfrA6Z%$ZdZ6(>$u45&y zC6-yuB>CbGXeqA!mRSJ{Bj<}@@)_$gD_%;c44zk)S*av@VwU_2PcxwOWmYYTIy$d= zN9Q!Jtf;i{a=k8B4r(TO!wT3`I$aAai2R1tiG=6OD?wIRi6ncXJ-^aQmEz6(E3Ir_ zoTvK2o`aR^6Fly3Tl0K^vrUy%>JyxeS6LM#>tekt$UD{n614_cZT;uV^(5S%R$G@i z*owO74Dh~{B*j|;)L7|Kyfr|LHJT((RDR6Af3LA}NoI+u@O1*L;Rn`VQX-|X^h=Wu zt@bXB1hEIcrGw|r8tX0+)vIf)i6p$UgmKnbIV7rGYprS$wTAr2T2E3c#vg$%Mncbj zWSLiBS;b-#X;Ef=~KttxZ0;8FGDM{ooVq=Q^vIq)vEOv`?)- zZ!Al#**>*WNYu>ssWpluPuwiu*!RfNN_ypeo++cM~!pJ-_$3U7dtppNv?f%M2k>ZWauTHqaeq|L=8g+%;Xo)K^ za;caBE3|td^4C^R5_L>BS%y!r4>ws?`UKa{-&p;9k_~YhtaK99Kbx&q5_R0SSb?jK z?XfLZyic&lzO@Vz)%I;x3W+)^zqiIn@!I~qRY1b+nhy2(-l`-ip_a}9*=~JDqFTDc z+U*l;=??3lPq1A-T7QvneVzc>X$7vvR;ZTlvMNbbOLto}Bx-Ezwl?|%TiR&tAyF;e zYqgN5mNr?Pld-HlaLd9oWRum0gd^jO-DF+w6P&SsvC@5lXXOEF9Eqy)L92aVjLfB% zLaswrf=`|Y`OQip$q(EM*A$$?k65Ef)I5L0%4Uhq*hj2dDPEnATJ8I(vT!^fwGv3` zg!es}7Auf~Y1B7o{&k-8t26A;}XdF!xT1zIOj`q?UF%GXK z)_|O4o2g3bKswnuB-~QGGM-~M`viNwv)$?w9GU0YUks$SQ$OQ5c)q=zMBRgQu{#aI zG<7k5!PNneR~LH>OS^aBJ_Vlvb+L1#+>*ro)5VS(jJZ_XyVwg!)EYA0UMt00L&n>I zG%8En0PoS@9pVM{6p|8=2xV=AmR?~0N1{ecSG)5~n2Y;oE2QaakMhZnAQ##dB-}sP z8yDG~hF~rhyu0acr;yY|OTXA2MWT+^#r8rH)vg4)nS@K<2W9oJ&7rD3%^;W989q4* za;aTTqUzJj{+@)d=D5zh%x>W{fivLF7)R#i_F3r|S(Sddt&yl2CfZ}9cq1xk&mvK) zxS+k9q(n@HevY{VR(tk;B&t_KcIRQL740BR$R6dB4j^IsMG|fWjws#!&?orC3Bzvi z3HE%%PP>_UKKcy`)4q>Hwac_~NmRQmyIP9ZF5BKp!mT(T>SNn?568%=6^@-v!ZpNe zier~%Q0X-0yF)J5Ug;A9B+1@SqUv*vojL+@snOflu9f1A-oAFqNN$%V_RKaa5vfmA`i8b zN%F;LSP|fJ^K?5mlXGRkQ>x!!Qb@OJq~t}nEj=_?=;?X!R-degT+{5du~?R>bB;ZZBtKf`9D6p2s&kHAMxyHch+Qqkn|~g$n@LJV z4;Z~y!^nKpHpi(x{1Qr^VNdbNW{_O_YZ7h+&MlAG%|5|7e5Rc+9^Uon>ld8TLSMo%y1@ghchmi*_Z68b2@D8>M(>!Ao}F0jgniKfJ>3Mp7)Uf$#Tz1G83z zT_&aaJ3dohv74p*4o`s_;52yE9`_K&;nhVisPj_$Fo_y1%j`DUm`06+Wp)Rj;EMV+ zy92SZR-u;@#P;v@1!tbbOYy(yk%NquChG z<+p5S68GwlFdO6C`?fv8C;gzTRrYM3Y=$(|_EIUOsqmH)9E%z|`C%33M#%M{eFw=b z@n$x^$^4N$g`_UVd#3P_-Q*MOjgRfllQ9mb!BxsSJB5VLxSIS=TDn{lVk1ob_M=-MLv7hW&B&x@D*+nGkOxb0>;uGw#-S&qhs>k-&4N|-w+iUNa z;`P{G`=m#)bk$>f?M@`B$C_+Yiq~UJHa{EXl@<0zlMVk5{?)bd?tGi<49cahgH3i8 ziJJYI>>?6AcXFYho9qUk%mLYFpFczOJg%SrXD9ju&z=4DC=zvTI$&p$s9rr_7jUlV z)#{+Vlti5=2kjl4hVB$_Pv(&Qi%)P*=2!cuPjHSpYzK0WJ%UH)r!CD^_(VJ=fCV~P$1t)QKdp8u3D@UED81D# z^2sugf9$O!JjSqB|Fe^3sv6?GjBv)1@Mytf5#!`?n&>@9tWzQ7S{RjhR}$;2C&?3d z5ArsY73(x}nt*o)6z7baO=Sgg&g6TdI44)iczKr;=TwvAMSCO8*-WB(BhG0eQN7W| z>6VX?)u?OhB$KF-+1AM*;r@9aYS`9U;**a-PIh*YaQ|T2+c~X1!5%xsNt}aasUvu* zlR~2EbE-3qMAf;yQ%1t2*F#ySIa&e6VfhB+bmw6bReA@fkVKW$(OJ%EqW#m+`HV!B z)zR5bqI%;@r&Wr#0y)z$A6KRS0HvShRQse6q?5CmMAhdUr^zSS8|ONm=N{V|ogIxt zUB5az14&d3J3E;qs>jZA%A|Pf-t+Mm8UEF^@t$%j@#ZKc-i&mjaPHxKKaCvLof_pB~(MvkLYi}l`b>FyLr@!oH_*m;>mopA|HHA$Yh6TVD|b8ipFoKO86eIKcZlg=W% zH;XQDvSk|Yx%nl|LK4;UmpCmXs;o<$_D^uTys~;a1tfLRvU)m8S)yh2a@NZYMpnn-GG`3Qx|22z}NaflPJYv zDXjU=90SpvOp<*1QZepOxy}?R_@!c&A}KX1JXtE`@fST=E2Rsxq6*I7@h`I6u_?={|Pm-gNsK`l9e-iE=1L7n(<9w0? za+Oohai}-?fn4o$ehMS=elPaVHO?%O{J>Cnb8il;i26E9q|`UTFFT?1zD^a1D!s4M zNKz^`z~12-7hsxErQFhzs~d)Em@_fzXQUoJ5~sEBZTASm--%_*Ly2oFXZGp%ud+*A32664i>)v#fzDDXJyvq$fzDbf`BB+QqRJZR9RG`qfllhv z7`a%So(#VR8-S5>SfbyTNOKC8aF2QYoaR(X@%r#4r%{U6&qJK{&vGvBSPXSEmS{hx zJLxhF-oIx-yV9K&5*~+>L54Y}KSyn+p2uC{n~xE^lN#=H<1~S-SM%JP;Ur6GH-V4%Xk z+BT>6@#Oe7b+eru&P7M?U1~*vPc}iENlv9t@R&|^Hu+>5$W*71Md07J#66kmPT*Cp zPgQm-_0M!CP0G1H@fe%#6p*M^On1sT4b|tzL>QgUN}n`BSvk%IpBw~v)M;j+J;t}8 z6*HZ{QY>9Xp6Ogg!lQ-uDxKSWf_oRUoGhPQ3s?PoXV5Z?qvqbZP7Vpr;eSHu^PC!z z{J=8UBf@#C&}oq3ojZljeiBumLMQ$;j9e-f!PP^+FKr4P*C&5M+vhv!QcB>7>cOrt z;t4s^s{6sB|3}tSE_GK@Ku3{&Hg!|`oNb{tV#S%F45I=!h z=oCol_yYX$^&HqgbjnFoyB0bdrFie|E_7N+RDBjY@heq*Izw3tog|-h2Pt)?lW=`- z9$VxT`UKY`WzLH}=>@qKJ2fP{+QB*D8Ap2y%c^TPGmnqX5~shE%NB6EmN=PG@OVWa z&Jt$|OLSGR#Hk_S<9-FD$$49~A{pdaXE6!ac>u`s&ig*O38dWF$r4zx55DFC@`BSs zqWbU!r$d#BoIz=_eR3Pfi_St4H8Lxl77{LfJfwNq>97jp&`|JF1?7-oUvM!wFqRnqmiiktZp4&`cyjoNw_|*QRHzxsRDV+Sx=(s^R^TB z9``(cg&5akRZhH=^Ebk886j7dV@ko1@DWL>l&>!4I#)Skq`bb)i<2W|&LJT_rCbZ8 zTmgSWZ3D@2Dd)i7U&fYJIki$6Vcq*Q$#xRe(kkci_fbnRp7k_XP5;Qz1pG;J>o{u2W0G{oG7x;y%F0s#o80 z?jzw5eiYKY@67QD&RR828H?B*juroceCX7WsFr@{Y?tEAQ6D;KA7WWtdYij3SC&uC z09oralkl@7oLfF}maI{2?*(K2W2f0C=RmG?&hWJ=&BY*f&TOCH{>FM|nNNa{<}+tI zix~I=Ur+0uxQ{4KV9_t|SC}A8y%R5GYAruUt9MdJR7>lfW+`4vA=k&MrB_p&B%j;> z@};wuMD_evPUbq*3cN$y=*;m6T*1WG&QcZ;C)bdhoQ*7jeh>2BIN0R0kf<7Na>mtS zWVJ`M$!R3vW03~++2q81qUt;nq`^rcQ8nD`RFdQes^BkQKY0dxkH}fiA~Mg46}LmK zEl!h^%9kK2%n4hZKpnL!;LQ?SoNiL^9K>^Hi{r9HXNfINhD_sqV|lzk~g!_30#M$Od@JT+%_s(3-MP(I%{NPmhWD&>?r_UcbC!~D+c!Y2ea?EHd<*hF zr^lC=i)*+8WWSS4qI%E=hj$S=(W!+?VSJmN~ z#>lE&N1bIP-1fHc%gh#MJxgFB%*1Db{O#ge(!k{c{>TWv^&UuPODE6L1Nt78ZZ~v5T9|xx|4l^>%%yA7E7Q{ zH{OeD<1UdB16LSaAGUF;e7PbJxs4mQ`Pe$Qb$d$j>fF|?A<2u@xvkrI3+CcF_l7v9 zxUNr9K-#;dBwT0wn>eSrwIr(NJGjZ;QoEvmHLRnXDWzrw-{*F8bESBHN35e;PNMp` zqq~)a>vJQN-qCIG$uN+!-0ZDbmMXoI8}}WRPBYRdNOQJ3+$Uo|&T+^11b>5Yt{bq)qO9)mdD-HabF4a?&o7rRqP z@&n$lYg~HPh1Xn>-byX9`42;S(5LA?{E)>H&NYAJ6Ue& zEl7H~nNmhUni42I(XEtn?~SoyF-XvDmeOS?yb%GSxmmj~j_NVpT|&aGcoEX*uGo!f zSeAhpZdVc>hd;m(G+oyxZ$lc(O(#)f!*-W)8u8v4@Kqd0=4a)=0^XN+XG?^VM$dUe!N4A@bF3D+$*S=Y(W8z3JFiT;q1yr|P^H()4w^ z`Q#u-Ki6f6ex>_%G;~q{d!8%K%!cDgIoKHsxuyo8{7%|Ndm)`#nQTWfICad?s%Rv2e?aEL@L}@ zz67}jxYY+Rmx?^VO*n|c$EzchKEN&TNoSB7-K8XIL=AL%A5!({4rvCt=`3{rj_dF= zcY>6D6Zsx3&7CEsZ4=*rrMXK;RDIIi780&cB1BGeJ2$Hu+8{&R91=dtSAq<6D}Ti_ zs)i%n^53Y2fy)N-bD5EDwUjFcd9qPThsnI(JJM~EQXfqte&;wtCdJa#bEMl@$_4W3 zInvcgR4Ych{iS$k(@1yWVX9&Dx--({bsg6kR}Q1yW=f-0JGZ%Ok6T`hm7jb6ZJNA5L?#{=vwqtZD8660Q&K4NiCe z^~ncNdXC%qU)8QpK^}F}N%8|%Zs#4U8SVrrFGTp5&TwausM2S+TR2U0{LFCo`UH1H za^1r|!JU&lcj{}5aSGgW5>?jYt{aPK z@&h>+@&4glH%-dQy`GFCQEi`l!nr(Gp3B@)JeTLWjg*T^-wvf0x(O#yS=95pLFT); zKEbQ-0=Lj7n7YVaN}}pq>}JGqowqLKE69^>mXuH7T7mo6Pr3yxqI5Vv%YM?Wl=2(M z59yeue;bUW+V!McCB>Wlo^;2w#WdWC15oED-B~_43bOG3hgD79tRqlM#r%Z7 znMj_`{Ssxdze5uD%b3Ofa9`(miv44Wu=l^gSFyj6h_d{oKPD8l*gMXapYosUA$Z#S z)BdqURHh~V3YPKV8Y8Zpl=$n3u&>^?B5C!IV}Ly4&+V&x;Y!!D{?|O@A?UfK{`Wit z*U+BxH!}&WeLe5*Afn=V-XD1+T3({P4}JLr@b$buPLk!4yx`9zvWV_;2Z2nPzh27V zbCA=3yy$QBkh6g-^A8VGG5dj(`;$Bb@3LR^XAn`PTH$YGnZRB43V$mTI_>#R7}-|% z!;d1%J`2tU$FXjOKZc0PYlT0R2$$+8@V>%dO@w{nOmC$>@@N&|7?4@zk0nwUx^_Lc z=hg7>XOyW6#c>x~_-g+|CV~FG+FwG1eO(E5R{IYSQF*=U4?BkJ1XaKr*4Kc{YyLDM z+VOSu5b{b$=-l_LT)PulxTZqI|9Khli`Y(9T+aJdwJfQ!WbDrU9w; z=Q9aduJ)G_VapGY%z6*W2lA$0I~Fagr$TS}v-^>+z`VD{Uo6SJn|KyiGhoNU5U8^n zf2t(z8h(vGOOlClRlmlcFNwRVU*j(&qFPjqznWzN*RL9XTm;9{_e{=ooj*yE`7*+F z{xnHk%j^7=M3m)q{>?<4-!ibIGswH=oeC8*C`3?Rk zN!)VY;E$KYE$0pXv68s!s~i03lDO-u8~ihw1Xh4I`1eZUt^k9tNcQe#3ciS_Ou-is z&a@Qr+ThP*Eh<&oo$jyo5ZuFA>rd#9mRaj%(Awm$A(9t(`>f6%GJw1Xc6HYIbBHMK zb^bz0+^bBTznrzm`)aUU=U?w3ZvoltZ}bqnlX~C3{zMheyCCy{UyDLg7rOBx_#H^S zKT?ui55w0S;0jXjk7E+(arOSCM0f<~1N!y;H<)O*!jlNx4OQ=dSCW)dzz^&*`_TWP zBoD&M8?JAB)APxRDNs^_^7XKd}f-;}@LkDshJ_)@EEr04i zPLfH`oA8>_=#Q2p7ux(z(E7~(B@-$`%;GbD&`E4(ZUemcPclbJ@=QGJnt^`0)gSL6 z--FCH|D}?+xqsoGAc>p%cK;+vF!vIO@Js*gl3?!p!A_I^9!W4$Bs=^MN@7BP$2rnY z|9nZ-odM@?!VGMezetjSukv%xX8-y@s+JFcoo0WthxED)zBJ??6it~@?s$*?jX%~y z`hrZ0U-ys*AiMn+ddNvY_WCo3s4@I|fBImu?0Xz$XLxtq>YpizyE4$~FOtMv2Wa(I z5K(Qu)j#fJ6(QD6t3REI=9X%!|4vEV7WIQaN0Lv@f-@>0_aFW9Bsn6E$xr?gj|{fD zHvdZ=86-dZDLxw}{zxaRmkn@22=JySum^IWI3FLs^H&l_!fc)jZ zLK3$IHGQHaweq=Dkp9dmopTS;-((W#UqO1UByMR0>mNztmPRjqnYILQj#zeHIy^XG-Eei;U27nFO9iM(AZkRNslvnm@XzC^nO&HyX`UnlCRlHknzaUfB8j)y!8#ar^#`d%i1y{TvFpPk2cis5Z{99PfO+a&q%F<5nj zQTt5Ye?H3~xedtKdJz+!`vrk`y-Ld9S<|?mBwqiVNuZ6z>m5Xv_-33AJrefZ#OufU z(ee`Cqd<-gfiH&WQAAYl9-&t!kPMxpxE-<>p>Ok$d;SIY=lZabD5G}4`SlbJ!4cc9 zhmWQ#C?0GHx<1rHT7a1PK@Y*UVe8?EO6zBkNzm7M2>v!&|HMQ72AM>CuZQ5-vlr?I zJfzRfh6nENu;F>$>nEKDSCn=ec*b5 zPpMM$i5_w$Xr<__L{zIAuSZ|ZcCgi*4>IHR*h>^~fK1TK$0AvzwVebl6aFhz*Dht! z{{nc125(Yaqo+wy2~R>V1g&fJN=XX)1e44}-9HYsW@}eKonHzv*XaqDu`is#UIS#3 zo|}wBt=!(EmlMg=PKG_eH-gMfdV?f0`oees-fz}H1+{v+Bim$oy-+P7L*GkUJo2ND z4EMWEzR6c&6&#O;GWafXv-`bSe>FIC!rFGF|seayhIY;&ZF% zda@*CuqJUgjH1)^3`z2UV1(24S&}>nGirR5Xu4kP+PNTD%2X0jF;CaK?z*3@Z@U`f zQ6)cJFSrH?=e34>wGmNy-KS5yR^_!0WM=4dJ>)|m59$?6e5Y;HwCzCV=(UpI*K%>c z#2mdzlF<|Ssy9b(mt+N88JbBeY$EznSaC%ljPAw5HqOMqZGKcp8((i=!Jkt!l8!iV%mBJBMK@cxkQzX3g{ zGR)IoBf{;u9c1R|O-y_n9uL<30`jolF3Bl5yvyrhJtB=__U*XSCGkX*_lNaNBJ90a zCfaErqP#z%A2*5YP*1^i{sMidhu{kN0$nii?fQ(@x)cHImtpjlZf)Zuv;5j zsIMm(RXYpy@Eg%PN7xr4T&QOg;nKjXOrf51lZxKfuOgyieq4`DSMfxFugCRTA{-C4mL>YpH>-GP*R&qZ#Fw~} zTT8K?AW8Cx{QR_7&yZxtw_JwBdOi{5y;v_N!lf|;ycg^K$ts@Hfjp^a5aAk(2lBK& zod`#W(j|H!k=;S=+k#8=N+QbF(r&f0RBs@eMOttwT(`mUQayeu+FPVmZPBy~fjp<@ z-p%p64Of}l`@!n2-sB<4AoG&m;UN=%EYoAN+0KKYbpw#)y10kQIyg6DJ)AcGiv9$X zz&vVYw+L72WhApi8&?R=55dk#eJ>Ht9p6J-r5_|x=UWZm=)rgBD)p#)(N~@CggbbS zU8xI6UOvYq6D7F@c8;7zS~DeiYu;Uu%1iRQk6zFL1rlKt=vgg)SPwca4f zK=2*|nXcABG{XH z8WApyOemkX^n*lHe}7v~n2x@~3txr;nGf{!lBB}e zi!1vd=-VXu5}s4DR+}VKHbCnpE#Cv=%jd3eexOGaQ89m@hdhWf9P*T;I&EamHMu=BCrMnw5)&@<<# z^4SD3Tl7XIf%4g|w@Tuc&vrdzE@#>fCq`oVY}cbCaqr)^>+zDj4>IH7$;ftntV`ru z65I83N#?`dGnV0YeWoOCId9jCBq`jW(G!;KdW9rzId9i%iKyJS>utFh;Ueu6czee+n$eWUOzJ(fw} zjl!?>WGRDMEs*Kg-Bw^)x{Y-$dMRnCYh_Ef*-ndo!^4zUAd40~hX}W^R`AuLAMpsv zaErq0>9=|$6D_?joV*P(yLBN+IYfweH+%FnBD1xZfE)ywy?SB++EL}aPoGFcMYvDj zO@w{*f$?si?px5=`}caPhv4j@RWBvNF&_n5KkDr)j{$l@fX}vromoWJ(Wq| zzPnw&%R{2TPP@LqLxuqPRbTEQ_#E~(eKQfx^mLHXo5Jl_cZg3&@v1KkaKY zOLF1DU|1u8y|TvNlDIwhC?l>2eW_XwHzJ-uqIzz)AtZ5o?y*LuByP{`XB0`|_T1x) zY9@i68)0;Pmovg>A{pg9!iad9z2mCdtx&2FMm7;O(jISoNQCisk${JGBYoMy}n$ZGV?%r@B!}METNqvP2;Q8CB{S|D#A;QdLmpt$B>=4iq7RT)|gL(z2oWJml_pJ0=_OY z>Y4alUzZuJM3k?~jHneV(-XkgWkxCywmc9>vXSK>*qg2}B35#yA)mtjD3H0*h?Qg{ z+)tlDB$0^nb)}I_g!4L=WVW$ZU<^+&K3GMTiC|vijUPM&?-?f;y(^WB0d}r226)H? zK(069m;_2=l99|LP#TkrEJ@yk){SeGlZ;|XJ{!aL)RT+ohFD^gjK4kPGKla-Bl1-)!`*+vcgBFE8*!2x2WyNs5J@7Ue5D&NuuPzQ z(v8hTRLh)f41EnPb2;A(c5X3piRAf4oW-p!!zg2-&46#4;{9ocQAw?lLN+%-W}2vR4xK`gNC~y-k(_GrhZvOd?!j4?{e68LtxI zm~ltqRAaM;;JKG~8?8iC%=Z{$-$BcHzGF(bMcr#;GYORQy+$z+RnGSs9YomsBJh5% zF@8PSp<3<(7N;4rJfs+8rWvIkf^FxpQ1nOhm;q z!${kRc2q6TFe-^~gfD{k8AgMLtO9bs5&o`mc^Zc}AHeYhmSyNsT1;M!Td@l5G(#X_aLAV3&k!V((Af;#!U(qH>>S zR1x7!*FawLjDOXsys$3vjY~ab9mwPx*&c$K78ptYW?ybyEHKg}aqD7%ks}G7)Pid= z3yeZZ8o%dNngvEV5fvej&1hNG&H|&I2)9+7_bxDwdr!suAw;;)i1!eT@G+x^iLV59 zV&GhBu~8w(E_fb?bK}KEtt9xs4(EQ0jV2;0p2bGO`{;{HY&-Z`Y|JFW@q7iO$fzQs zddgEqH1Xqm2m1{5x5`^g~r*e*-Bo3Ooc$>;hqlZOuSwaQ45GVZ|9VONpDU!6xXNYT!Oi6Bl)p)!w zSZm};;;vP$HA;x62-g}rSSD}C_s%i({Hmx>dJp}iVziE^b;aa{K zvUtk~`J7{R-z2Ruq9no9UEJGKW5g3t@zfZpEJN{N%d9aXwy~Wl)A-rwIwMvR`w<=w z*BObDtdT3O>x_v+l;w5Z+Uh#P_XS#3ZFQYdPlU6`ge=w>tsZhOkavva?W#2H2eRJC zC!*?Wqp^);eDBVIl_ijQ*JzU@aVU(tM0{VO9TnlbMmiDpzL;ckJ!C16O~zg#+*-{5h)|0yuW93J!jxOqw6^X?;F|<^u-ar z33fg(qCKP*$cIKQ5svT!ARieuL{x+gM%Yd&L*JAcuqrzkR^yGKlEj_K=gDj_1Q8YC z7NeL5d;bh9Z!!G4$PTp@Ty^}!$nX%_yK58^VXY?6YBZ{e)CCnnPr*6uR->IssC$RF z)re_E%gXy!Ba;Z**$sBK8U-HG24tJjMuc<6QwqN@#8+rX<^H8nOeD`YC5qQBnv6Z8A0!QQn)34kGORcktC@M1GBynFM9QZeC*s5%%r_vdehcLrw(JVyq{k;@NAI ze?w&$cngk2>?Oik42KB8&bKPB5kS5-ZYRQd;ZEjOBgaDo$oybb5>a{mWQ6SIctRq0 zKS`SrB}vmtxKjtMHY1*him=TnB*O8GC7DVOxeCaBUX1oh>GWTW9VL08n=Mu-;G2MxeLevV;K=HpBx~6 z7*!rJ2gpGq(}Yp;P!sM#tB zzO{k7hCFqWNs=gAW~doYM8zCx))V1+e}gT1$h$y}G%x!><@G+0Fmomm zRjS9BnLo03cfJ~K=1Q{b7`VTO=Y!#9i6qD8ao-6yt0Wm9N562ho`{Mt++6w-T2_50 z-0ZqyA8uB3lj-_wBHTQ#jqGSO!NJ;X@FXJK^fL)OS?gzx{TXG{Q-*$Kwj}OThU3fv zN!+Il5oVPn?o)>2&23BqPZ>@yyT)^Zd5~mOUMHCAe`W9Zl;LwI=M&6+x?^uTVGOi=_H^Y8MU#d<|G&6|g z1@6tG%mOApToFnJ=_s?3h>9o5Y$n3Kz6D=V<{2F-3tTH0XeJU-zD_b{vP{6&AhV2! zvOK6;y$>>5Nk*07AhYY+?t@Hz+nvi0-~Na;Q~$(x)Sk(~<{~02(+V*UHp{xmoZL<3 zWOH*DnIYXG9AdVTjEeA3GP4e1JpWmyw3|%f->Ajq{0qc9#QdHJmn!a=9BLjU!g-iC z4u|t4u)hyCb0q12C$q_dK3RL@?S>wLIJ`C&J#NNG7Zo$|&!#=6oWY z*AS37!z?4B?3`tWgplPxJZG6vOoD!b(dG=$I?K!=!gg@q*I8zvhu{w6IP)(L!K?5& zW@K-)%n`Ia^!rn)cosc6sm(O|TeMC5~B#=4ZtRPYsin|SQXQN@(OXBV} zG|W~>+}(zT8RnyS0&T-E6N#|*%fPZ>mV3xmKumKp5mjH7nbnu`dajVyQfxC{lF&zZ z|Eg`4O0pU5cQ8WRtR}))q=9AI+{QA2ct)C2k3`F=?~F7HiExCsgVsp1orsEOl=){E zYO&?1AT!z=e3T;h1G&&lB2pLnGSmgeGsaAlWHHR6a9{2iGe?puR`E4%j9Dnjw->?H z9(J{kG0T|*Vg{|F(HBRU55C5jO+-|L7n|C#DxQTPbBUQkM75}7Grk|n)P?50#`EW7 zbF3t8k4rYwnFOVu2Jaz4%*kf8BqQV-5XolDacn1l6PJ9lnLtF9D##qKVtyXtNjB#a z;h1r>x!f!w!ljC%%oSz@k-E^cCvb^fY1T3cl*W~23lT1j^&Q1u-BR|c*q9OnrPNAq2B#Ikn7EMCfXRd_r!RvH`Dv0Wfjl$=4K)sPXlTB z1}N`%#lOMaLWI4~IyXp5Guw&Og}QH7O)?`-q|(rSgSX4`L1vQaC$dQU2i|V@94t>V zQ;8_=H=2b+*!$NYbEDZnM3wwa=CCNTO!I{AKqlQxV&Z!hT1ztIGuh0PB+TS?IN8i4 zqI^y6c4eGwR*{TqW1uwJz+!>MKo z$*3|sluXpg=*uh9buK#9EFVHLf!%ad%^FGET{?H0+a+;#>13N>LpxiZW~LKS^XF-1 zfh6wyImfJ##GOA+H(Mle=g;?{AZzOH~B1RyiZ%qF5*!Ys3q2-mV8 zne$_nFI=UWZ6{^~J6*2-a5DIM%sfbhTLPBhVsqu$DhrIc$lT;17~vALg^4c=MhSf0{iGRt4rv7< zeA1l7Bv7hPn#Dv^gio5SL^z&1!19x3^0~@8#`Bc3NzNrX%O8IXC-jPR>?UIg;I>GzNoKwdDjnNU1$0C~}@m&DEe zMbodN9Tm@uW&sh7XFX}P5mE8HWM&!4J6>UzndKhR0_zv$rq3i9?IU=yhF93-=0qaO z*Ya*-)N(VMWK=s`ZdMWDc>WFXEH@*C@{aZXvbn}XaEyAzto0B)m8-%Gu}I5TEzbm7 zX+}x10p2Xbdxw=~JP{S)N;8jT=xUCZSDHm0g1eYjnN1#o@vJs;Z1lx3e*`hVYBmwc z^R<7$Yq_tP?ULZRSom!8H8adXE#>_+GmQw_`3&s5X4Vo>bx~y|CaBVA0-4v%nI3|5 zvBqp-qMZ&aIV~Ww*7T3;>}#!=OoV-XPcl_Rl&@+tew6aHA7tJzGd%=-y=m4n(T*D! zto;EpZ<#TpJNtUeOd!I(g6>9{G9t=Xjd^jR^5p}Wb!MuE^aJvaS;54IXX@fg=|;0w zk_G)>r4VX*quCpmRJM%}gR3&mge8(QF{1;(6CBzEH(;D#+BD4IYBI zZ!+U9A{p&vcy@dy$kdqyL{y#DnH5CX*9ejcPeLu_>)&QG5joO=%w|&?LzaC9f`YX% zKt3=dB?*B#y^KhlBr&jacs!9LBFg&*rgkyfVei+HOga(ez1|GIgnUt(zY%0UG{ZgQ zRv;glNlbhlaPM$8kOnhNl51gpIGsoi5#_z1TYqmb8%aj>_Xab2tcvhKva^kdig1gW zcBzUm4`eT>041;}hSlRcyg z$d_h56W_V;2H)F2c9^A-q`?&y>tcslO+IgyF4FU*M0*VksYB<}3uYqNle^8U5Cmk8(n8EJ_W0Mm z>qVPcF3D~pzHAV+(qkx2n$VnW}9w1|gWHa#{1d>dofQX7GM2H(vi{rV9WJ-ys zczTQRH!1JeflMEf?jg4T@rlhIau1LrMM^qp`7)chwHz%nC2^pi&Hv)lJtIB;HkVsKTB+qxmv3w8PUzAHSBtX_na`^=uPk*tE zh|0ac$h}Qjt_92e#a<$+-UoLf zZ=l#qGU^I@D4C8s(7RWr>x#!fkv65POx9G+3s))@!OGD*wT<;Um8Z6R0qzT9nv7QLG%x{1U717yfN6wm{mQNS8 zOagn=hKm+SYF6cf(T;vep*84m78ZL@GB^m7TLh*HS%8TF;SRSkBJBRo}5Nl zcuE*PRlHPa50K?hcX!{VB9cj9guGN-L`3+yI8jA}GkpNaWnvrK3HoGl zu$BiTS;RcpIg4bGKtx$i7BxiJ@&eGhTpaX}A|O|Ys99)-eLVvtMPw4G3&pp~D}YQ8 zxsoh;1MaYilrRap{8iX{NJN|6Ii3k(ED;sY1W`_e<9P?PQpFx3?7a@i)#8AMYymP+ zM9$$-ErdG`+-rS;tVd zF_DPp`GuGziCd?WM6o32LM-%NiKvvsJuhyO*euCU@PzJXuslgLOX9w-H%W9zGV+OF zIuCY|2!Dt(JsR$!a3Aa>5hKaD0g@nz`v&?Xk;){H=_HZGBxn?@;r~wF3njr5EdK^_ zqo{CYAd4gJg|nE%W=ZgL!EhkyqD7Ju;VF54AU6vwk0K1ha{^IjvWSvo2)wa-GLTz@ zUy>+@c{q>^ks`?`Np2NclHfUk@gQ@XD3IjpR*mZPc9A*{ea+T(XTfL$GPlcXF1MCG z@Y@veFw4*#G|o4sh!P@Pr(-}XOLP!ntz;l~iKu+eVlMP1Y`s%OCX+xJPVIJmpDJ=m zMqNRsikSImhkd1j<*6crh-zbZixwj6{RWW976(0KGLU;Zkt`t7M8v}sVJN-}b03iD zB36b0Y*{uK2zjK;*P5`MLCmzubHBSh$@YlqM|^R*yCXNe$h&Vy_W!aKqM~U z-2WQK{VP{Ylw^wRak(N}l6BAUd*ZpGK$0&4GG&tNyo>kh=ZYFho`Ec|f8~lsCV`l9 zMe3vIom<_j5KpeiXA)>*^F;VUmBl)c$rodZ)P>@i`FJAqe332*o|(^NCX;}#`J%&P zrxxtY7b%70oqXXF-iO6!M7VrD0GUTR5xjpd5W77x$3yfB#6co_9mFT0j|#DfOVzEf zM@0&gKs=9%H;AbEdQ|Ks!mZ^K@V-zaKE`&=eUW#17mA5Yf_{c?hg5JS(0p7 z%f+IDNg$qL5mVH;oQuUaBAn@;;Oj~82NCw(8+Lv?Eg~N0+;Mh+rCK6lC2>o&L?ki^ z_$m<@L{#o2B5aAuJq#=_6&W6K9FS*39uf9F5J;&gCsG%hlOL>|4&()~UXmHG5{S9K zAht>3zBloLXk!wH=LM1ZgvuSq%ol`Ktm26S%VpwPBJBNqATNr$J!B-1WukycU1(VY z&wrMSGD)U?sA-pg%yLm9iF=J(E*hBx;#n?Io>cK*n_n)PiEv$94t8D^=2Ixc@!-h+ zikRRbsUY);nBpNf0I3l9L{u+WDM}@Yyo%p;>Snf>l9M?C6@W`OAw?wsv zU_3SAsAnk)isxbQwN4BrGF!v*x)%X?TU4-&uYMNvejx9Nb|&<7S|sa5cq!S@(%_!* zIUpNE1Czja-!_WW=UB%5UhPJaBZ>P>+l``F68CJDjiTsz){2JGco{5j6jhSkyAA4` z$X-cqu^=ZPwIbpLmDeU9n?yMg)#^SJd&^LUOa3d6`AGO)ROEXg4I+a`Uf@lEEn=1= zzgIzBT?ubwh+;`@hnZ@)G!I;^{HrN zqV;{9^ZHbzFDEVS0my4NoRjmZSTD)*GOtg?(3e?e$vn>VQ&AwvW004YgIcYUghI@0 zC-oK9x(voK%H%WG9g6 z4iPDdTZ219oFr}y?hr|mY=SJ#06RNGnj~)R><~GUxV5uG6iVXO&JIydMAZ(+tWtSl zUF;B5Oac+^6!lC3b+J=StR$^KUF;Oql6(yjo(mD~6p^c0#x3WaB3BZ(oOg-_N!)VY z*=-)aQ;c{O?Wi&HP%@d_WFlTudFd37-$QU*Z5BC1xV}b%%vYk=LoNmKjc8}BKxwpy zuqv|bTOqH)En=u7iEFv8W|=^nZxNfNmiwNrYdL^3_(S|Gbc0TIB}X^G0XOzla1$T+6?RR3_T_U>URc zMdT3S2&Y4Y?cyVrAWZh3wr2g!UF{ z!5(Qj_8t(COak+b1L8g+e9c`1z7B|L4|xvAU&2>InNoyU&Ouf+5zb;Y$OK#4Jmf7P zAy(u%E+4mL_O{|AamT3MR+1#{7}eWKlf=!Ux0NG_n?-M{kcg_C-d6nE=xd3FSBH(@ zy|-0Mg!95S=Ck%P3G~5GOM8bR42(#jR-q*B)gjbsmE>R0cW^`swZ^Vzt*ub1IP!;D ztC>*wd`vR6M7X|icG}nKAi^cK6=aUIQZ}HSy3lFunzjQ-n3c&SP&;8(2@%%%hGe!8 zQS-W^tUenl9`cSS=NxSf@en*YC)^TD0w?G6vr;5+SE%|~nM72n_OqV$*x3i(`&sKf z1Y5%KR?fTVog@4WWKOV(Jw%%hPim}oB6+^A;rSO{8T(sdwG^}O#NqsISAT1$B=fex z$`WYxw*(OtPk$?)Whm35NT$j|FrFwYVv~wz0LToq;yq+2kU>@<5jFpbw#p^BZvm`6 zflRcuUXokoC=qRKljK!cv%)N*tu`Vm!e}eLPI*6@?4)>z3FKsJ4-u|GJcVzF)!`v{ z3g1vG?B85Ic+S8m&^pB$DoL+GO-mvoh$!!;SkqXB%4ZzORCoxM&oC=xvx@L~kU8DT z_K*x9u~q{SRX%4}dnMWOGpv?@%o&#U9!FR|h3oVTD^e1-#LlqdB)RZPe)@KXl|)3v ze1_G)G8FSYWI6VIvP=YHjL51 z6(@;XgXdUDL{vQISo2wiye}j>l|uYw=t6dkC)N=+*)cc?se%tQS3G z1rW279sDkpkVK79mbIR=xSXp%%eLA*x#v%KJsumn=ixanH#`R)>e6_c2z?C(3&(_`29i z@{r$vjJ3*$i@0VI3pDN3Lft^dOn~A8Af1LHGhv0nd zGOL`4??!p%`Q_GnNv?vOX;@#ETib{zUzb})G*bCcrfBDKYmkRvrdL`?M7V8)+y_s5 ztPBr18pu^v8Iiis)pDoG1gl1pOHE!|o?taH30&hQSiL^$?0tfDA`#W&uC@}1u=nG^ z*ELqUhYSKT(JCWS7dmk~KUKWWs*xmhHG99#YGe}dex228tMZQfh_16v^N>@)@(oss zhhS;kXtfjJc+Lfxo2-b>Ref1NZnmQZkD0eg4eH1E7wDCM7pDs430K;S|udI5#9{GrdV;?+51lTt_MCH$g+|p zamSV{tB8p5o@K3O8SF$YWM96N(4RaIsa{LUsbRTx4yQ#67F3$ZD3vy<0D` zIwWzgGDTMSw`}Jc*aM7fXhl|xB<@*NMOFe4RjNhSCA(2etyC0QGl_7fK{L=!6A>;| zyt{ea()M(Yd5IOtM0*X+*TVahC6^ro>S@$lWi3ReUmH0hn5vb*5*4S1efm$xN(j{qwJp-datK6C? ziF>+Nxm6^IyXIMLRY>BV?p1EpO5&dGRc&hv5y|uIfZ6i>AhX8Gk;FYyca2pj$*FLcJ(pz4 z*-jvyHCDtgDpTxDYpfa~?0r6Ht+m41QAT;MwuVaLdat&GB)~-R04V1s%H|& z^lj^VBJ6!F$%Oo-a>vncy_G_QbKd|m8?0;(`2fhfRwI!-->PDsz1Lc;lDrP5cj7gr z)(ZKZN-W^L*1C>}%B$8YCBnWw0n3}LgRB*L?*e!(45ZGA=-`sS|2s{RSV;;4GKowA zzUr)*M3k>OtB?r$+69*XZMCvi&;NkXvP0cSp-GER|`!bTdiVA*1+|B6p_75 z0=~9d$^Ufrwbk-zun}37{20*s+`5Sf`$`6~&C2$WYk+LG>WS2ax;w#kS}l^eUnkjV z9hBshA7Ne$T05h9x@%sS5`!@iuoZREmjs0 zc)kqpgJ4hj*2$ z6)VX=B%rm=N|dAwPKU$2-}|hIOak8bSzUKT@3V?YM$LcrS;LR$oasJG5aD>9f_T2S ziiy+(&4a#-ZvnJgdzl1$wOX35vz=Ben+V%^4($A3eN2Swv>eEfR+ERU0`ij;70S7r zvUc`c@sbSe;N6D%t+A5mLxZ&%(AsaMGYQ1A->M{{YH+_*ON8Uu2wJ~b(S6Yu$MYVL zb}NxcT~H~E^IL%YY85dFSpL2mbZb{Z&uWioh|=vB@j`TJFG$`0m~g$ zIT2;K!)hhMmUn^W1J*@h$}+x{`G<9bhu{jspH>c$y3old@t)hitU^iJO}<38ejpNg4A}{I|HsNEqIP-xW0f%p%qoNJ*l-n3JJ{)E=M$+5y;klq3$aTj!LL;O z2{IveHIsm^5Ig)>w4;25*a=JmzK*ag_ro&|`%fa=T6{o4?TCJ8hsp6kjPh^o+2`wQOw2rsO9*z`@S4#2ZoB?(M5%y()uK{+N zhg<|C%3e=|z2nSkpzZ&cs*7_kc4n9utq zhS?J(c_KivB}s)lGQ3s}vkN3S`!|=AN%ALr>5OG+BpLlMkG;d}MkYb?UAG`;Te$oFneee%BU+*tbHL7RbsJrDiKv;XW2PK>VghJ?s;J6 z9J@%8a>#ulkaO)yN&XF)76Xa58$F~H$OyYlk}@fCo*gleVh%#G9AwV7<0QEa$_MTE z?Gz6|JGz}ENivie${2Q$hoFpUS4z@X$_TsBLr})D+a#F?rTQum+YUR4<5>cw`W6t! zj`fgQAPM$Z5BUhlNIQebB5nT$n85)VWzX`EW+0>OCaHz{y7vJ|wD%4|Uurx|v?HU5 z1jfUQ>~bR9!rMSA$=*wZ>+5$QW9-<$sKvzh0IaLqhKC#vB-u_PQWx5{4(2SNb%mWK z$pJWRY!Jv?VdqE^^b+q1zQQhK5;Rv{Q?9Vvm;}bCE9}IR(YtD6SJ>G^R6iYW=M&*9 zP61z6*)2pk=2##TY~K*HQx{~w7rojh!Ngw$4GKyD(sYl-hH#3AjxWInfQd| zW;>OL8X<4C8;GcqzuAsG4J~sPcYv?Sc0Lhx?{JGlQnX2>Z$gUm11*k-DI8SS_3Z>?tn$4#{>ByoG(RJ)c*pj4;Y?L<_} zQ|;_n_ZE_4FiJK&p2 z)9oBd<^y>O+Vga~kV(M%bi0v=@;==jdzLDVkHGSMb~%x{po`($-Oqr`usbBFffIO| zh)j&5(g?y8V7!x>VXtQr@HN8@I~!%xXgtFfMCyWY|LQkj=K(vzLt246Xg5mo1gt=G z0GVxT=ddpv=Yt-EXA|}+B3wQ=XPaa1C8F}0V;>~KrFsNt&9zg{MLVo@G>}|-CXu?J z3!tr@0OTRNo=G5!hwQHRo)6hAB%?;QhwQ=;Xjy#$@FBZQ689vrJbR-g?nz?v?4Owg zPU3yojyVtQsFTDVwv#1sPZE2?o+XLN#JeMM`aeO#2&S~zQ_8g z{R3&Kybh)HcQ=_O194Pdr2QBJ_YEQNK8QWwd@haQOEpP`5}B=az|#S&uSe|yA{-BX z-S|PQE2;>wXi|jBRW$HBd+rf+NLL#%ZQ!jv3Yt*+R43wFz zjmUIKxXENNoY%-QIg-pg$0cse|6aveEDmIm2G@7YOOdfZxn#Yx^CLWaXUk!NeZ2=y zjWDmp_E1Ttzp8030V%SZCCS(bdt@N5$L)iXd?@GhkK2hB+qv`&)_UAdljQRL{7v>H zc8(;Yjtyl@UfjNW!zrSV9#U{=mnqJg_5|v;8VLy z61Nw8YFA6*_JU9CdP&?~@Tu!P&{|uONcDis;+~bK2U>O?X9ducYl+Bd@fgV z_&bkixykN*A9*JkJOgltJa;DtbBTRrmq_wG z%rooZ+VqvZlSrO+BlI0C=dbO9M0N*Vx*xv0N+fC~$I}Ayx?4k0MlgY$K=4EZ%I9ml zRLbBw5|VH17D+w>(g)&cu@mlRJ5A75(avuBIwn+x=zX_6(?h0!o!xdJk=>!=Wf|_V zS1<{h4Qq^7#lbTLd$T0J)WAF9K)$oJ2hi8KoGKz5A=Z1CvzdvusFLSD zVUBMO+F_ZP5ioOd`V*-OT+xnphDqX%TE{qoh#E=yIiGp#;K<+4X=53mJ)KuUBOKpc zF4ZI;*t;W~2uU7*dj}kCj(1`u$-}z|BIgm|2uI%pyVIRiDYFb#pHQp6lO+khpS$lI z*m>^cOM>^F*iZXAr5-zIxxZ7vMEe-(wEa9-0d}@~WOhKQp6Gl}WOvYkHck5s+F_KV z(TJMGfWECEl$ zK;{(Zf`>Z$I@P(Z8!2X@;r&-%KdkpU(Rrk$8S(Hw4cIx=5t3Z?5S$AE<ul>HbGZ}#FxS_+Fkf8=|9ORzNF+~t z1V*jT!Pk{ev6PuF$#^H@5!6yGe1bE#8!7e>eDimLbI?QPUjl2MPG$kw(f)mHur>}N zyxM7(qzV6f_lU`v@GcsVn*(I5B)2%1vK<-|Q07)= zB9V84U9H=lZH4IT-C$Si4ynbh4z;E@8H-uQ)w;{6dZM$|-Q9fM;|wk7tToMvE9pjq_?WXnUs>A11LNeY6zw3ckM>nmFm52A$Kr&um16LnjE0$!u zTEF!`E9BL#C4V`Q|6KBE-LzKpK&z&kR_JSo&nuE-ym{T+1Fh_CS{r(x)zD3AVAbIx zj3pUwgwuPVmETRPz6V;{x@n#A`r#vtCmC;qvwNUb*iCCk542jlY3XYYA7K*7cq1(6 zfmU%ht#5mv)!t3ZzxMDECX$Rd!u%d+6?N14ss~za-L&GX4qZ zp4;<)GgcCOHi}vgIO!fOyfQxE%x0n$!`wIvW(5y8%RB^S9&{R{9khJ%73_OPpCmc89ue-aX-zN|H7K);FLso^W1c5_GE%R)a2sHy51s z9y?WFr`Xv;M8#9${4R+b&r&CJL+5x(ozXlG)HNg%IRoP>8f+o^C;i6}cOoh(UQJ1d=hCILGu zo%UK~=PQV3m6N?mkpn>1Ivq@W``~?Q+%2}wiLN6VUkRK8d_0u%I>#@`*8!5uMB7yb z&(>l6Vx6;ev$A{=ko8VA6QBG3#YU&uBXcUqY;+>tN3GpKtDqeolL9-mov3;wTo)$D z)H|s}RGog}WJu!H#i!1FlDKVbt5ZN^wsz6!ycW0BiTfBWFVZ&s4)0%r<*iO-_A!C_ z!skTWoK%ug>%Ct%IYhWluLi9qr&!9k&%bs#VGU?mY3*`KiOklrChs@%gtKUZy?Xnd#x7dFI2}Z0Yj;6BIpFJ8 zC;W5H^m-t3fc);XNOD64?9mH@HAW|X8)xeJI^bjyVP6k})*ntT%lL55_ey9Z8P4J<(CU>C^Cf5M zj#0f6@+EQmMW2MECYEvASZG4mJH*h0B9c+p<{8m@1}L**M~2SERyj?_<0YsTDoan^3CCWrIL)-*QOq5HFnc7TMq9l ziDbOKR`o!urkmE#Zx8P)j%2*Pmi9oaqMKI#-G}!TLo!}pg+0(J>82IB=kUHFNyh7I zZa1xkM0kY6?_Y!_loC---}-hN{rV=VXf<}z8nf^4zEVlX>+8cFXf<`yy8QdY`${7judmN~pw-e%>+06S`^q30 zudf|F&}!|bHR*@L`^q92udi==pw-?@>((C+?<VZ~GH?0ePKD@6KlJWXV-hX(li6rCI`lbh3ZQZn{{c?C;xg_KDHLLyb zS_LHI)jICi!)ry8j8`k_x5I12kc?MrRS&dkx@lGaet2KCB;)mUNyp)}Qc1?EwW|kO zt=+WlK5%$nvq;A4>p%~*e1D*2uhwiLYOZytYf51^t)u=te1uUX>auT2w5_czwOt1FfoVS_6Z6;EQCuzFz2oR%JJ>6N3-$D~4pe zzMkuWR%JJ>GkYE0mmnFhuQz+3wYi(tg&|#ib-l;$n{Wlm@C^0^xX16CkWOTG(6jS- zZTZNA*^=N|F0Kq5nNY|ibS9i-fh(m)Cg7f$ebKnm8?3zuU)X~611)Pm{Lw-s0#k~eEGNHME-XftU2TFcP2DUID38#l6D_wT_?9A`f4 zP{4TR7IHbBDC7GL*1#~1Yd3cO8zJL52JMH09!k!e?|<+2-re#)lpXAM|F7c-wXlB# zYj40_T^t9v9ds|B|0IXy^FRBY%Ln^A+QAn5pW->Z+~Mr}=ih^&90V5RLnZx(>MQvTHpbO1`IddoIW0<)P~RQ2uduKgQd0 z`R?uE&~|$!hcl9{^~v^n$#U)7zr5|}&~mEX{C9r$w&$;8dp@)s9)B>N|19@E``sH) z*ZE2;yyb=0gU2t%`s=Ng)89VYTlDt`?IZf@(=yVrSB7d&%|!XWa=vn8px*y??RKA6 z{m!uNe4B6qKfR(q7C5&UT~uUN7xqcqahcu{M~;ZyXPB#)$J@Y+pW@=fc|u+GVgC z9LJ0Opx0F%uZJ7q{BW=Ql~TSOo=>8@JI=U&FW!b6cID1SKfSakFK2!B-&-4Y2mZT{ z_9gg(b4s-f$evI8mi`U<(CPPJ`W++wl=6Yo1jn(z!`biH4CcZ9lcaY9>BBiY(oZP) z!MOi#?V$gzb}&AUE13MC-LIlK|5dWQueg=-FT&@!P~P{!d>!MvN|s+&`7-$8B9?dW z3pro!?_KTVydUl1_482nyuTmH9{!I0Q2*bDh{yZ;f2Hr{cc|a7{`q&vDC%EN z|L&vZ!hKyZwD)oJZ=bf5?!QB|x%BV8+C4#N{YdRK`gfQ%2;vUbj?!*|@eAHFk^Qi{ zKlT%%-AML(YYRR=KYgVABcxrQv==Jv_3dVl{kZ)dPWXb|_n2Sn*%$|$QJ9Z^;oWa2 zcg%AeaQq$b&%6FbIlMnbIley)q5D%;4u9wSpziZ+9-r85PvoAG?do(`pTNwAz_^Bf zm%;mR=)^FW` z2H|wjU+^!yvqs}=FYPHg-kw4Jduwx!W%=-493QSbpx(r*`7h7^;cXzgAAyrik3kOK zFO};qI=tXXefRG)S`UGDIOOmDhrRC(xT`4oo>T69p3p-_5Ry;= zqL5HTn)KcRf`TATswf?#cNH*F-WL@q(h)Qu%|bOG0wO3?Km-Mm-W6ZK_Ra2ZerI#$ z-jjQuB&hi1k8|g4o1LAV-JP9ngk>D3GFj>{#3y8V35!DzPB}T&>?`x`6zDHx!wWcF$E&<)I=naQ~o)2$^{86qXr)!!VFQ;d*0zb%q=1bTl zZ{!>6?|))Hr>{#|yJoqFhmiDNv;xZU!KlZuKJ<3ZN+3)9R&(-f89EtK7rBi1Lk%a#{%M zo%PYgmnJ#;-|>(SLg<-8udk^sKjqWop?@#FG_?oH@4PA#p&dMH{QzJZw->zua>DrR z$NPnM+4xMzaq{Vj!0Y`P{_H0}7xQn*k975l*OY#0{h5Ez7eo6B`eNWGAvEC)ruv5-k;aAd4@5hA`Kzd(>+~c@DDP@Z1Agfn@b_-UV>luE zJIXWRM`M4eJEk39-=A)-ZxE{fvq9ij5%uf9Kj`m-?|t|MrXSbyW&R%K!uaI>;8m#a zUheO27~-XN!S$L;cSZVX<=*#X@N<6auZVYQ{gFNw;$?Z+zK80*$mUl=P1ij>+lN|G ztUfUR(f-@qe?1NS|K%y6T^5zTG*eus)?5FrpM_iRy|DFbwr`H}3q^fJ@7{~^F};J= zxsTTQcaURG=cr-uulkqopnqWhM)<7x?{zW4NtcJDYa6{UCdd{0?cN!+bjM=@)+m{lP9VsT=iH z$SP4!E#;Wq>*3$lb?y*&kGAzP`m+}5K5p>LOScsqc8;(b3MY%}h75vri z8R=6ytlkk6^5MMtR6Tna+*d!KK|@&^FVIvWN0^d8chzjqh1`D=mxQs#^H?3Uy)eOtbE;iTzP zy5$W2_*!@_kk>*M-K90B-DH_-ks*1Os-jNkNUJrn_KNmF8`t81-`)wKg&^v+K+fX z#BqY^x`C1QCB>+eeI&sxT}w%MNs1pUUKwX0$B-J1h{W{`Pe|2U)EJRW?f z{C_3t9fcek^|{jGx2kfzZhFwCUj@IBu8i+mhIuaPp>6drVEi96Ji{tHP5ecDrTj{> zqy5qLyKHLfF%w6lp0^(z=x@p4X8%GvRlVN&cS80%=pPDM;1HDijo7ci-WTL=!HEGc zA={UCYrhlu$aTzAFJ8ZaJxOm^jr>mWZ_(3rL2hYpTFB_(`1;H(paW3*`>D*2`nRW# z`4K+WWHo9d~F z-lp<-KC>SHOmyFD{Q>${wUb-_TG1W*;}jqMxv>AQyHmN?FEgC|z0Zf^5c^%O$Ao=w zfzSQI>-G-ub>+g^uTMvL7%G38;!kUQ$cODZ^(V}yss5YjYw{;P%12W?_G3-qOke4n z(XNrp0=6&mPOXbje|4zgdQV^SS38->AL7xiauoHLq{lJ*$r@hbD}?@(C$zWJPu%D9 zCf_fyeKOvZmK$~!wTnhQLHDOd{XNwu=lN&u2R_g}ZrR{2g#Ju-m+5s}XPD=C^wSJq z=xcCOZ)QBg`n*%yapWuZjfQ&YFI;b!I2`$KzE{Uny6{fC{idg$)?YsQMndFoArH$?zW1C1a(Y}2H|#9A++MtI-y(RViVrqm$M=iLhV^XoON=YIW< zjr%G)*PG~%{R!L`rtj7~r`fAKbD!9KdP`%V$H%L?3t_zWM9@vh@)KTlJj(Y&z2zm2 zJBxR77c#f;p&qZ04@AC|@_`Q{-6~rnzp&pX&c>TxY;KZ*J?rh5RJ0cbD>WTlb!PxbDA;^3j&jCMU0%9r4CRQO?<0 zfDh=s_@SJ?(N`h@yi#xF3Gnt?L1$ArvmYa#*Jml`FJFgnmWS*09#URC^muQMcGWaL zr`$eh>*~Ai81gG*g9uBxVjRk|ZnQt>{z8j4SKL=q2>eUgJI2@hKO@Y|UvFZybW5%k z@aVaoO@NR2-m)p&+?Vjj&EO`VxxWEW&*^LdeozmkoBW|a^97xxr>N-keBu0o^gsJ5 z_;5wE$LRh-+oyp2C)`(%SNvhRab|z^_}};t=!U=UpNsCo_*GWp6!KNPG2f!f7v;+Z zd`$VXoG^c6Z$e6!+8Q z^44&aV^pLgmme;Sa$wz6_bHk@G8}v=)`Rg8Zp}Bk3;EwmwRp;3?x*tkEoAu- zKlBdOYmAQ<#QwXKRcsvc;oHXjU8SsS;jHfpU(}ECYCZV@D=+v#`t?oYn!k>J=6=NZ zvg4A0A9_B;=B04!jlj`g*N2`7<;*MhhH)QFayNy)WczLy{$}L6?i;rBFGhP#!rxj3 z^~CUpBmXkFZg%89aYTTfZp6#wdvV`$XZTKWA5|_tjd%(fJu=`ae zW~b_fFEc%y@t)fQ_=)Fv8@GJ8&!2dhj(7l5`4^4tSlF?nL?ef03{H7N6lOqda87`lK9keUtqw$ESYbb2h)>{*FVUKBRZ( ztpGXsUm=@C zJ4ezRIA8PemNa@XZnUglZOi4Rk2d9pd~-oK`|qR=ZWr~LQr`Y{C{N4!`?d@>J%s6> zv~`vhqTZKR=bV`@#|iY?rHyMX0sgk(AFy$4Q1*>{8&>6m^ocHvi>1sS`;nHMd}g38 z(dGGrai$dVXJ^wt{WwPYSRcK@eLldi=Yx#zRk)3lsK3(aZOO&626=8hTKc?%$dIhB&_|Wumn=kEeq#J<3D*MLO1hXTD8% zK}RW|Ym#(UA7@9skNRb5H>k$}LA%Q2Al{~dSrZ$kL?`(s&_{I zrgjdx+Sa}YtbGqw^!+IA&&Xv1oBwAICoBZ5ba~Bq`l%HH5@TB!D-0P9a=wX7WN zYTap{D}jgm$q|p`ZB_BWM?F6j`KtGp8$WlR5%d7&vUS{l!*-~*tH<`1%fzb@k8bd@ zsQk$vz})1X^YY|od#=M=&~8(G;T%R<|3m!dc#rD5E1VlU(fI4_7PO0SJrFRLSMEc( z*7y|aaY`ZQ3FplWIu_Xs=g~f7c83M^HLTDdqW??f4Dmz%wT0Q`QGdCF^r@fI^J>q7 z&VKoJzy&A|Aok36?Vc)_horuGZetG#=og^&3O==N@&YdFyM zlh^sKFH|@9V}D%QZ$bP`{KmeFU~fY?N6ixG(fxWh-|}wqh2i8IVH5wG!hv7w$DO}m zyBey0ulk%j+EMh}y4CBm_oAKvQ++q(>-pjN$8yeU>k%i$b!L4}(8e9Q>*0m%|0=6} zruF!p;Y<(xL~m}g@tEnn|H^s~f2ddXe~d>rU@qs{zI5+qJz*Uot+ODX()1?1Un1&F z`rewgN94ouH^VO&zc@Y-59##&jL&gy+)9vN?~n1M6o!)zNT;v28DEHp<2m!CKht}E zk01FHZz?a_1^ANAlWcM)C4nzMz_spLJA4n(sr(Un!v4KwN ztCYvV2_b*o4{UbYD`rD~a(T3KX0qi;aG$gr=mwqSQ!b3h@W(9OVt+?`@6YhlZN2c! zcz#gzC3ABh6Zao+p9S}!H?{L7f6BG*XHd?}?qgtiIDRF_@=_jXR|8Dv&YJR{R{l-- zwkLwmTrcE2fcn7$r$Aomf7PkMomcA-b$21#*m|e;pKDCWr)&)W{n7|WyjB(On}(0` z80f==tg|KL{?d3JQ}6YQ^CIfYr2tv%LVh=qB_qD zchWDP*cb6GyFI{6c8~g3XF6Z6T;Jq+JR$pukK1~Jucz66t=VWkfVphE6!?-Foj&?C*8ob&qi7kM!ElSvt}~$ovp5%_~q|efc()Th}q4 zLb>P$ABqP5l+MQ^U4%Gyq;I%d`y%8%BEm`e9qtDi{}sp)=|=m_D?Ho}4u76+()Gy5 zPsS_c#<;Ft%Bb+Apa~U!qsjN>rK~bBY#>JPw$5thx~ke#49bH-iK!Km>=n=$K$yxeO1TCBg#GH z9q|+YC{H{eL|ETnpZLXa(y_y(pr8KO_n!KL?*8fA;hi=QC!c;9-Kl*r{g~LV&v#24cB$Fl_sStuhu)kANDW0&oSP6!uEiBhl1UL``FRm5`9M-eLSbgaLnfl zJO82M{TR^8aOjDJ@O%y2Jcmv>>IKs|u}9WN`B)yFGi3ddf*Lopw=?_BQQ8U2IjJJZp>seZga>GE&UT|5PicJcx3gW6 z@7x#9a?_vn;ls&K_^1Ar=^0LbBVKd)m>=Y@w0lodeKVZ&AYQ8@9`mi^VZI3;?hzABm6U`d9Ity_zx^&1FpRs96g zsXaW7<3*)s&>!`ncJvs|cG5gfv3-M|oqS`xBHsIF{Qhq(SFd_PcyoOtym@?PINDWb z|4q4VqNASP%TsbQJ>?el)hW+S{yshBzMg+e);46W;FpAs=}^3f-Qs zz5V;kck0`7lbj>}qz6;Zy0_P9-A)s~n&bg=ls12!-Y(zkcHLAD@0WJz+f$ui|2gf^ z(>ZnRlkJG*^Ke?X+fMxCbCdi`Z^x6`XIWnyhiK0uUwel)@%jDIPBG5(KYmVG`yhW4 zUx$jPshz@~^)`Kc=6nG1_n)UX`+8)5)#Q)zblMT>`Vr-ea**V#j(^&Rzu((`6W_i6 zP}^&r@2Nh9il>PV__IEzzTG$F!qi2++evqoUR9eug&&6wr^iAO>#y5>HS4m zziN_C_LG#ywC+ZJvwhav7vm@B>&3fKA1OZdjP8)_rPD6t``7>Ud{){R>xbt)fOYld z<2hj6ceoGqPVQr3Jh~a5Zmyf~9vJU_e3_7sp64Hd{66^okY8@=|Aj0W-%H~9T_z02 zeMc#r_YMKS-uG<#YW^6{?WX&*u+Ei9cmGm0ZliqMZ@_z%h_6@vLk)i^mba|#yL#eE zl>hz+3;9KarMwm6>HeY!+wxe1dalaxukJ2nF59P0|5a}a zKs~U&CNJk~7fJ4K{dTu`Nx$**KIyLM3#+fP3cvl0z^6j3i^0na8=tcPJa4$2v2g){XyOR_1@?E z1D{nMY~MKJ;eO||f5zkK9^Nv1y3ftsJG>Wtp3iHX+r2Jmmfq?yuy1vz`8RIrIHSCa0f*{)z34?T>QCc0jqHn{rS8X+_2G*c9LUdp`A&8|KG&lz;D!@jA6*?u#Wq zCJ#I79r2s|JLLfMus>>+i*KzC{sMaZX*_8Phn~=?#vR^I@}0O3F_T}~{^kemJTvtN z!VdmFh5GgU;duz}-$WP3$)<2m_bQez<*g~*Q1O!9?)Wn4?my*xXMTj_8|AYJ*5y;* zX^8uhOS#DQCvP$_)Qg_0GWVgkpq{1`{gekn($D^^dp^^Sf56XvH$nEBcgOv-napSU z5un$PbYJvt=zsBUj=m3P_iA$=`pbrg?UVB`>`N}?6FVWj4@du)>>!BWuHvJg*Z$G& z#l!xf)Gsg}%-7QTp2y?!?G>N-exco+?(XS((}nVKemhX@+xGO$Fn5r{Qs#>5^DTKk zjt^~_Ke{{9?Gg7u7cx^EPxPMR7{68F_vZw$PgL)nv-=BtIQP{z`TKTtr0vV*{d=H8Hcw2TJ zrQH~xcu|kN(2OI4!xY0r-X5}UA@QP`3<>A=YGgvACLLG73C(KlVE&?vwb)9 z6W`ep<9vVd**-ng^BPfJXo8yfy z7v1C^9o9Sf#c+?8ZbHh%p=+W&&>v9mbBO%a za}-}iIOg|>zH@9G{JM>Uj|>lVx8>py0S;9C7v%>12iq6t7ya9%*#DrvWIvM0{WeeF ze!I!rgH!&TH#Xt*{!Mt9zsJ|hjeb0p!{^8J#NVrYj86!BEN{|FsULgj`!|gLO?q;Z z|Ip_jo{niHFO+ZaA=yW|`~Te*fumUN7JOe{${Xi|xJNexlC5 z>GJX4*6&T1kD#w~t`oDJ)a8GA|3SV???0gDk{^WAFeanba{ciOqY-8@-eyb zhV6xLTFDFXd_3BvbD47>%)1MjC&E%LiSzN6++p+b2O{Kq&Y3VB;uRK8@BOfJocHq{ z6s!m7xy1Osr=HI=y8!WU9hm;z=UM;x^G5J>dVkk652V}?`uV$ePuH)}KXz~b|9$f> zmXnZjLg?kgyQj;`w2>F`pL!bIsE1Cu^WoF&lUP^q@;R;SldOj(dtALfXvgiWw_fRe z{nzn!!FN?CcW=8i>G$|Zj~_qkZkFf$Gyi6JSw5DV{Ox6*M|zgK3*Y1YOwD{J|Ck^1 z2h6Mckw_=Qo7}|5@b2wB(aUmoq^r@*b={P%9-scb>fP@rWBew6;-%i!>E?c*rtxK3 zwd?n*-uthnyOO(_{QT?J^ZwQCsoowaubuWvwl}on>Fw%YEuZh#{$P5$s@tQQ+S~MY z1^sq+4cX=Mc%LmRk^x6;epKr&V-p+#D^WK*C zZhq*;S3mEh9_!=LfBHB)eH;$`$h**U(>e-hVT_y#~JYo-a+S ze#Xlu$G3lVyCfYxf4Y5mle_zRw;vb#Uyo$|gvgiu9QDm+*t9PFewB0bo&6d4GF@Jv zZ;~JE=e_&=B0s#h$Im00?tQ^~t@^&O-3N$!Pm+7WecG*6^RrCWvUnc3vZD zZY<7M^L%qAbn~3`&369!#de@Cmru+VU}5nxJLjL?-~4C1A26NY#{CTK>U}Qa$9Zp_ zE2mvOlMN0I_!DG&oX=K!ncbs9f8G;={vwm3<9z|S;VG*7&Fbgn(>)S6udes>#d{rF zR<1;E)4B3G{kec&iGMuLj`Q@T{3Pi(tSX*oQ(Fy43V{+{Je0$%1vdWoOV(?4Z&WkUQOAM+t(c|qU5j~|}SM~!cUo)1$> zZ})VmzQC8JdTo{uU%!**Yw!HF|3G(nCO-&0UnqCJe!YK_d=M|8$KN0Sn)uYjSI>`3 zF1Qr!_~>{aMJ7%6`Sct9``y4#_6vm1X7C5hWq}Ekx-;?qUQTz4=VB85Z12QR_@!@P z{O^^1cROdpe&WoFzz4kZo{3M-dLrzvzMASM`S(}PP4$`Zc)6R_?S%ZT<1M5v|NYam z?u^G+BqGx^5vFpe?4=ReEOdy?yPQoab2{CPT>@UonjEeg3M^l~!!^quuM z*6wxP#_r!8wn4z3_`3Kakmn<}tn&-`r1n7in*8hhDCGXG<7M*4d+xbxX!rm4`Wajo zeDMBk*DJ((*>agRzI$KDWnV-&PFWl2&OQ<4p&L-&BVVgqxW0dG{)`X&ne+#9`H9_+ z+|(Zrwceob=EC>R>+V8Ok69Itc)XV|y-#0HM}Oi?cuuueT)>$0Z5g0H0<72WCHLdIje<~#S(ntsZ~X-3ZvV*4&l{#tT!^lz3& zPbcMs{zy;xDFyko1o>n#&$rON?~dnIb2~-yZn4JPG)Bv3s}v_gthSzR~Bw z&HKDo+#m6?RRc`@?nOHQ-w7qcKe`0m>?cU)4od;wg`?`>V~>M-vxNa)v3Tf*IZkHs z*9(w-i35<&$SVRYOdl%cjSqDT*L&8CpL4}~?{oR+y2yugvE0jj4(T_Y6X93e{d~ig zf_tRZ1LkDVLBbJ;7-!!u!j4gW&U*#UT8oEP!FcvgT#M|^}Ag7C6R2Rt5cX7Q3g z(j|Z93qEDi1ZRlvgX+0$yC2ZIzq~)nztEm2$Fp`1a(DeV6O7ZjKtC+R>lqw>nZ6#c zlm~A{K8(kF8K34V3-wi+ev#;S_TCV#_MuZz&vYX`^@y?xXMQXn(`~RE((|4H^5wo0 z;7>??113F`c-*<`qRqt_# z^*%1@p=o@Yyg$dKT$pZ&H9)sdH?{s8FNxQ?nZNg^n~>uJ#;;78AoBqqi;9mN|E3mC zcl@O+ZSuta{E_$`OeRlH1Ydc-C;K1o-ZrMs<*d(4S`V2}J_&~^r%VTVP2&*fd+eWB zF5-vYk;#ZXgS_VQ<`IzFm&Zar-*`E|q8hL2{+ZCd@`d$uz{hY8^Xa1>XB(emake`itI&AN9ww;w$7> z?boK)KyOrhQLoD6(Gj4F<8a;G*}u*j?|pB}re@bdz3TgMv7ayG$@rd)%5%i4`lyW` z9A}R>8+4C-7;s&?cfNan*1NxBIRJG%Bm>@F`eU#BK!0xIOXqmO`g{3j$dB?*IVT?} ze{g4Vnf2eR>QL*KSr9ZqTc zWc$m7`aRp-TbtM0E$1T$PwA*7K~}Z*7gmEm;kpaJ{fqqq zzjOJs&HFsQx1)ZT%XpjT_;9Rysl919@Lg~H7$MiY2;Y4*#LH#%*ATz%E@XjtPjV&~ zeiw3paWk*n9DkR15a}6CH^bNeJ@Nrxii)pjZ_WM7N1g!R{`766|HC85XURJNSs%p9 zc1C~bw}t$3$3VZnCuRLD!`bhk-&Ff)?8nl0#(A3OGwLhxxmWmRHox%kW$!z|b z3-tl+EAjYgw?_NP<-2iyO#LR8?cPDY(9<)){FE@S?3$DlgclwD|MM8|AiS)?F)k*( zZyzUjbkhz%`TNwdkl!h_vqN9gd*lxRp7mn8*8bAQbB-Hj91jb5^Pxb0X?k@_y#74- zcx~C|ZPf33HE(O0C(+*J<*=!I7akq>(UQ|5Y+HFVd9Ubh8t<=N6Y@^EdfAo84KLY&;=Z<>2jyoff4*W~@MY;*8 zr?cG?QqO3zD=r`Hd}+L7I<&uJH+f)Xv>$I*y#FcC2YXy0v~xD4CtoS29B4IQPxq8^ibiTA-&8 zgqOl_>R(JxH~9~HF!`SB!mI~E#-rVs^*~5{i?CO{Fdp#fy5UyfC-+Hlza7K*PAT0> zu33+N{ubZ|!?EwG5bwYFXz+>tP4cmXlMmo61pZu?&4h9S{uE|cPvMjkmW%S@-Sn^9 z=ZnhjNq_Q7`UQ`>L(_Cb3V=977~uEO@f_5=HMYCjL!e4`#Og&%w7r2Sp8QxM;T zo$BF}$Da%JU#6eW?A+b+Cmqucl0KH3<)i(D0KaP8BFKoZSqxOoZ7i;^C<3uSxw{_k;&Py`0=cn}o$XQx1puNfKlilOB<(r=k zax)-z-=#qHp-6h=FUP=BCPU-sPQ1!FAeJic|EpPMQN^KGOrY~3iWzYwoazmeHL7+zl& zO!k#q9svDJPx%_EKk^|zX-`c2tMirXEy=$6)=S_M=8=Qw^vk-tkk7>RU+USaFPc4=__wlku72f^>&2X> zdwm;rpHg7YX$kcAwqSf4u<>)SWBlyZFR`7m-226TLFK^oRqjjh{hS|CH>Z?W8{r~ll28MGJI+exQh>Frg%J;AP3nq90_ z*|mH;;?6+{6R>u;2f|eT8XX3dV)beIJm=&iGtsWxMlsx9;|<0om&>pzpo17kPbY zg$+ad(0vn!hIY}CQ(g}Fx8>u}e?UGK^|C=ZF7AKh`3%4BLeCS~zMuaT$o9?khbA}Z zP4hLnQLof9SibjvJjyG_uU_tXHw|);%1yWD5B-Uk?)N$#@Kb+Gkmuz3L40lks+n;h6w3UYggUoVw2<&Ii)|9_}B)d|%&Vw*9C_8ovNL{b?V7o|X&s1mLIL zE0dee?nB6RKF%Aa6ms41b$bt)ZthQh+x!C?VF&L6q1$#o&FW3s({><#4O@%nul{`?Nl88F_pj|REbb>Rqg zJ~@r>?r<#1kMpjX_cA+<(YiqJd*9s+b`KZX@}W) zcjyf~-?>6Ohn!1y|IGB61b_GeqzBY__+i1F=E3CKg;CGRdq6hj>CcW@4_V<8a^_{hl57QC$O5ar8XX1Q37tpEqQrsEvmvV^lnfM8r z5A|qYUo7VtrZ=$s#CLeapUM26LOE8n^P}C#EZ6q42mC6BaoFdSsCO(7iOjr)saT8zZPrjl)N-Jl}>Zxsf&E%?!P)_ps;ZLF-L9fn7 zqMcdarL=P@lmqCaofDWwN74pa}!ClJnaa`y5luU4sOzKy^vk&N4 z$o8-LdZ&DY&y=Uq_}r@a+(bY4l*{KLeR{61rk``3pXRgdSKo~7M)$K@JL#1_%8?0R zE+?-N%9Z54iLXs`S9C`C$Zg+VQI!{R}1quzu~MeuCpQ?>ovD^*h1>z>6{+t zHO#NFGeo)*p1MENH-#tv?)3TeS=E2A{Zo#7f6M(RoG%c5a2d#NcXuIQFnxgYRPI|I zc{J*o_y3%0_k7gdy8rdIZt>_}%GFUX<~>SjpDogr)^1uo<82x3t}Qv>g30HHc1V0} zLArq|oi8Wt>f}$|-OL}{pOy>vkI_v$b$2r!_Ll?Jjy-+8UVVM~_CQ$0O(es=Se|9r004d_MGNe4me( zd#3Lt|CC!VudH|WM?Sxy%BfH9>7|?HBlPss&2U1NgM5NMnflSXe>vp-jrsWYMmNLP zj_;Q1eQ)tS^Gu$(1pUh&Vn34P^0pH(&fxrcVe@0PA779Dn&G_H#rxOYnY?u|@WFmq z$g*n#Pj`Qw14#3!lb-~gJQv+-{6{~+^quRRkDrZx=?igRK_+##zSDjt`pw(EiFkBV z4sah%>W`0_4e=)*uJ`fTxXbl>$}#(?w%uz1f4wI)_G^W}zm!vBJ}sFyo^#2pAMYIx z?Jcj)nb+NgTp#scy_e9|OBs&xWL1Agf7)s4?n1s{cxWGD_|0}Ms#m>HKU-%b@RRPk zepQMO-^}i_;J)9z;=DSOIrc&Qp&W(XW2F07ZC?=E{Tp!|CKI+_xC>b~rcdnx{<-1R zeZeuj6twS_=}&E$aAlC!0l6*ilOL3`Y~IBD*gxUinckye?GgOSY`o_v{TNj{5@CHs|iUD<_rFQL(<9nRk)uz-RH=82Jd5|{1NYw zHcx|l>dV;+|EQBgJ?i}wW>*^>VJ_R6z2+~ofInM48{*|cH`ZS=@%!+29;(Tob~BzI z!F(j`-yokk9{ckI+`q+g{UF*QG9mQ$+Yyi7r$sl@5z=l4nEF-H#dN%{tVwR_^~v?m zvhiNeS)zTV|M1D@tNlW>+a-DAIY`ol{F40o__%kl6vRvN3wK_XgLnyvA97p>?=S4` z-`PHR|ICuH9TajyLeLiS!{qxnQ_w_=)QyvJJZd&yV%*U5+ z{&@dM>IZ$j`FiM8&xk+tdgl2@kDvFkV7{;G%hvC6{hW3uUoO&32!8gK<6it``4BJ3 zG2F?1K{xwl@)`Di+NDx^sqA+f1UaM~zEhr8nTUQ9{9-({zt#M`yYpUxCV8OTvAv-j zN#5)7q35>aebTwL>r@_JAN}&**MB`fmUrm#b)cQ2g`GFqf$85wujdEl>FJZ8C#`P% z%E{KRpnqX|>a1svkNu*TCm*j#?)r_lU$h_Uz73<7#^SNP#@KO12(QAytMZfS~Ax5KX^KPy>%~FGaVk^>gQuTWI48-BlL4z zhtA}?@t!~KlP!$CPW{rCkK;e`OXDE*)vc}Elt=Qnj)!_%XFK3N6Vg4@^smNyl6Ze( zTG#OWWqW12qkPug)2dx3`ycIb*eAgHBmJ&zS3`9avp7oImeDc*Zi$lOuy zd++Q;%r)sFRFFu=i|K)`W{i-*WVfL*S~0=Bwnn4rTiJ6 z>m#It{cBS`#K-hpSHnK^&h<9>b6pkb(tZc5BejJ09P=Fn#z((F`z6=o(|Mk=PelEa zuFt%HdOX1DoBqAZ!|+WOhJ2HM_4T|$R*CyJ(m9VQ3(ur`I?q4egO>VjtPACW^+DfH zr*V_@=pp&x_hUD;E5^sZvLtsOeg%9!Q`<^tFLcxX?%$y{ebKvqxP2$Ys~K&#RD?<9_Z^E{yI>dWC}@d=E0&jd)(|!g&8= zE?e&r+NqvbitR(~?QtJVOJ0g@wfp~@;<0?(ce=8@mjphfbE+s$E>A|iLHC2ibrpTb zD!wC`%VW-;^;Pv}wS5BASJFC&pZ{RIP2t4Hey>;j|6l5b_Xk6MD1V)h_4IzJzoFJQ z<&5$?rS19t)5CbA`zx%yo*Q9!A9`s1tF#e+%?JzOxt&W_ga4HgCjZ^;fIr7Qwnw=2 z9$VXYGp)+G_!p5M#^pi|J3hEeD`%^sx8Hc){($zI3HL=!K0MjcIKB+E{-^d`I`S1z z_tC_4*z``-Q0Y0z^mXDrKK75PoUmtiuDimH+C?w1^q1Ma{iL&U_vl}bI1PFt@-5_^ zxPF=XSGbd%Xn7aT{XjR^c@0APf6Dd^dU%}eyJLUMbrzO$YU{06y>S1>?X#i$+y~ez zUDNnOyKs{|7;_TzOvHmw(R`g6Y`)7RZi`OrVDFZJSE(>gT9 z>n?Kb4&y|sJnmJ@y_#Rs|UP#KkteGmh#Qjkk3yZ2>p3#&)gTm^}sqGxDTwX)-gX2 z=c9RbzPx+Ur#6>g^`kHPNqSa>eW@?=>R=i)FE`{pjT^nf zr?!9R_{s5(<8t?Mb;=$3|7N-CjwiJnUyl_%uD*xL7td$!rXIV2%@5g6abEUq^Pf&X z`pthA|GEE-a!&i4@2|Mew#nb)VgKjb7x6Ut)9%_Y9BXz(Z>PHXIP|0RzuWXULbii% z+PdaY<*=6>jdT$bKl$7A4tu}x_>TN8b{>Z5$oD4voX3Ixo#S6qx;Nv!$+^9+R>;*m zVw~pu$mdV|US6mldA(z(^DE!qaG!^#!bPqV_|v%V`?F)Coh_G3 zVn3$)Y2!Kj6#s*EPV9-eUa$MiGw^F!^GA3gcg`8)RL`Tvc$xGHr`-DX)6vhn{@sUj zen)xfg^&EM>)mObre47LKlWpn_Fg6RgWS$<>pck3ZaF=i`!?S1{F_#C>DzBFx#W8f zXW2TwkMGCTp~m<0`2Nh}Cm(vn>lJ=%!?;9xkWV2z&&GV|?uEZ>V_vaHgq`a^)YmZ1 z@w@>0H?D^ka-hylLchuW0qdm6pLF?p@%>S+aF)B@{)+js-=0!?D$DiuyrG}g``xYo zz9-JtSng>LX*b1wicFg9tDY}@9QAzV_zV80c`V{(;?sM#&##x9u^xKG>lM!Zdp`eX z)`$H0a?)<*{d?)3%!m5`{e50=>wWr*A>VquLdM2>Cd(?E^iuEh~r_4oTbdfksk z{lu5=D%%IZa%}fG=s~2rslD~$?{e{euw00LsP(}2CV1|F?`GltiL~#L?E~k4bNQe9 zKtJ8sFH|)6>-|dhZYB2>c{lfm5H4f=vM)~)Kf3$-eLbA_r*}vB-YNSZ+VSYm_e^Q8 z?(R2uJPX_*Ke|r>ibAG%>s}m2yo65ua$HKOMqQ35w$#3kQ z2%b;GeJbf*8u~LG_E~2_H`ck*dOqwZiEdvXq?h%zO}uX}6T)8Q@c8O(y*D}T`z_@H zYY)ul+A%hdis$RNuO#hT<9Q&?BZ$|Zw_-f_YkQC9|MO}d1-_6!O)!^@ZC!`_pj;9* z@u5ln$H)53}OV`N4A`q|-wmuU9!JUxbtA2m67nx^Is9AoSg| z&fw{&_;D5FU}38_)StdHZhHDq{fA2LzlyG=a**CVY@c{j{jlHg^wR$2^#aC6J#_ZJ zloRAP?dq|r*U6sq@^a2~x8DAfpa1GRK+%5Jw*5N2>G8w7op#2l?-%}CjfX?^A1a?c9Zlt%ynnM^_V1?0=kLqQaO&ZN z)c1Y-y1P@KXa8T1m*yM9-xQDGum|RX^YOGJmeo7yy~3xqT=$!Oqh1a@$KK%Y=QZ8a zl{WurRr4R{d49hM=c&}g(!P&6-p+HDv^TK)w8QYcWxskM?t9SlAa?GX_Ji-u3;XX4 z5$b!CaUPe;b~c~mdM+X7V;97Ifk_TX7a{F7v^T+>$x!LO=B?0g`+HgkM#B-0NH; zzPL5`{m(4|)N_*`53rOsRt&Hu=Zp@pEn`OnI3P#H^~ymR9_`_j^Gt>x1G}ithxfHT zG6vyd?-P7Go`=!%yPt-CFMg0-%G(L?eiXj9n$FRE=^MaDyWwnhuIQiV1^P3oy9-(T zs=7b#MP)w3=iNL9hW&4uFdo-?eSElc`NvHmKRt(F_qOK|wq)rD+p?_Lp?cxRIVIk6 zSlBxj>3(Crw}}2Eoj2tI_HuI^VtQjz7`K^77ssAHSY& z%g(8F=FfO{$MQDEqy5q6gZ;UsWFrH=S~APx;M?TmrT2r_f3Q3}2aNQYu)gSSk_XBk z&IzV@e0Tp+_P!c+AL8Y@N8MhL?1BBpyZ_-({=AaYy1TIQ=sAa4Jol)91p9dKn zy)Wp#Ji2qC+nUh!O%Kd)TKxY&+MxyI-u zUY-+2zNNf7NNH^B|Q-9WPeBR5*_;eFL z-NaA*knNxAZd|t;wDZ6mKOemv{3ks1N8mTlrJuQ9khfflXG6R~_BQ>V{wF<$^c(-Q z4w-&AyN~vWZ3CW6o>W}j@X>#!c#mx%pNsp|OF3<9JstC7e7KA1oI3M;^G?u1$a0-- zbUtc&AN?1w^D`{hVOB22CuDi{Jv{I!m!<6Gb)~|K{<5Z=L*SIQd_9ck-WdxZ)A0Kj?3{eD>F2k-EM>1)|N35* z-N(Uu?;)>+{KVR|_dg{1mmT37oEGx!Oh^BwboKm7St5=bEg5a&$K>;GS^RcKeCCUC zG~;EwI(^M}J-y4s@t`GRY+UF?FXFd5;*$>2+k}_#JiQ+8VsE4VNzdmV4{m*zt5$z4 zsizx|-P%ZpepdCGg@QX5xC=SM*5TO?)6IL;o8+Hz>*d?aFWpZ>y_s^X?+YspVf>_j zcX@7A@oxAd%0c<&IB;?aJcQ&A>y_^|dVlnPW%aJ34@bIYIV1i$p5Agsyyv|e%F~i_ zBh>eJ?Vi0RyolfKh)?C-jHBCpqu#UsmbJM?%J*WkkSBJdEG6c9hA_Y#iUg^t&y`1-VT3WpJMK zaNNhA%iSY2SmmGZ9UM9{=%#!x9rMd&F4G^mzwmR`kFFZ;r^@7WHZH7Z?u8AKZ;&Ug zchg5Oj&t5n$ca}X-`wb*GwK1lALe6dSFage)DJM9&x8=|JD2}8eYnZJnAz?A7{{p; z|He3e<-%~jtIGXd9JiYE{-q8B{VZ2^cTtV|9PbG~J|5|r4p8+Q)1N(`zp*a(a)CkK zH?e5k$D(@HXG3@??4QVg!k0D+`RRL_cCYwD)<1LpLfG9umo49f+%Vn+n}UAs1F74M zll_GHtB2Rb^SbFiINEE#f4yfe-rth+J^Fh*-tF=7y^1D%k@@Tt?`8llm|9V)BKM z_g^;E2kVRP)O_M_$kl-9ae%peGqw+XFXsoSXVT?iFFHwAzj}4Q@u+|I8^7Op#LIG$ zPrjT_M)^~@9>cL+3#K+=VOID6YufNq#gTVZ6}uif8AZk%!{Ia z=-+xexC{A9>|aXxv-LBpEsc2h%mq9M&#G{w)BCtB9`aMWm-XKaM?R^2g6_h`BYi*8 z+6l|Q=ncph?}8<}4Z?LEX7qDig8kK(qkfso;WHuq_zMHncbVn}{d6C-0^BcOhj<(Z zJ)il$4duV7eVjQD@Ufp;dLZG!`P zzV?4M-=$t%hq+w83Gma-1UJ{2OIdv@@Tq%vvU4#V^L^LmN$}5Q|Mdc%LQanQeklx} zE1rYoJ%5SszC3L2O?=?}iXOtwn^`$?SwF7p6;-*iPoaFQpDnCCl5eah`Zw8)xxb$2 z7@ziY?@zttpo75|$c5gA6YWK*-iW6jKNGrte<0}ZH=d`1>6++ddAT0YZ#h}-#NU)} zQ#kFqJ{{N9=nts(i|!9OCcYCs7~J}9d2DZmz}{BM;n6PFk{|ye^bd*8#K-iAmzzGT z=Wq|9rep{w?^Ig7__q->%~SyYks-0muXDHOT|y zqa|OvEzsSTuSPf^x5jokSdD+zpNsUsQXmkv# z=pg@o75nuxUwC{O^aGq{ogB}h>${tk$B9zss_ zJbjc?O>go^elh;?Z-;WG_Co)+;`o&O$w#((y5HOx^wFREq@GB=67OMg-jeX{9nTx3 zc{1DM@bdy*j;DlrFVX|>e>R&Gs$M$*?oUK{&8(dg=5l{*zsXJe0r`aRqOuFqAMw)o zc*Nq!2QZg+?L2~aZx-XFaJpBE{za9Jdgp{|ftTf{KlKdkKPam5*Zn*BL%#B!aKa|O zv3{8Um9GYR3PC^4`pIoSPNDAs2RSdRaPAu#7tg0;!u%(NVP)l#GW-^DvD$sYI?HcA z81Q5=;{hSRTy{Ah?FVwA`%Pkh+Y<1%ExSay9FUzO9IWcA-}J}KrrBtJ1U!R=XIS5O zo*y0PY#TiT0(^spZKSUi?-pJa=O^xf=^RV7xAII16JNaqjQ**cLpo(jD44v zcv0@&bV3d@0i^zt+^EOG=xFjUt9eF~{8LW7et&7y_Y0Xn&g=AD_Bqf_+5Q-gd5gY_ zuv-Xk^^6BRt&a9gd|Z!XyX3rw>;0tnA7=OEe3be*A>#w4^Mjx>lar%efc-}%FIju! z{FD6#A^RzuN7nVvIIie@+t%+w{xXvnz3Yo@NFqhkH++%srpXRc7)DsGM$jV8+`E-AX;i|W3e--L8^jD$Xv%g|| zgcp_nB~NHH?Z==OvER&uf^WV(Q$$Iu~ zwxe|y4E3w?|NFsr;wN6tKi0Q>N`Sf#J?yeIlLkL&Ka96b*C zdiUpd1YHLpG1I35ml-0p>MO2_S9c>5i<`z<%|fuH^B7oJY&0j)|8Xv)7H zuU+W{jE{b)Fg>@l_SP~zw{89Nfa#@!HqQ0dho%%S+R+TAZ_Q}so2k;b{J6?_%Wj*8 z{)G0IWT!ws+?JoOAHoMDKL!0xzvDK?U+N{GFBj++w3DX(jpNOr&3pEaQ0<+^hJ0I9 zIffeV|6>1I$Y*-s^YI{OEz7@M<^N3VA9LaQ+fk<1fS-l+uX-PD%n$qY)k+ZO*SYeM z_9UMU?Ypyo4(}y}bYXt3yS}RQtUvIB_JvaLzPi4P679%s+wYt5#W}XMFmjyk&I`qmIwxPj005Zr$%5`PbxM%38LL{-llTfVsS4@4NVM*^l@0#Bns2 znQT1$l-;}DOa4kr_v2^}&&0bo`#0+cZ#n&dZt5@J*e>V^nE>XpX4I$C`5EfZguUhk zx84!jr`oyfJR9Uu_h(1_HNATY{UNzAf2V$u@;_|^=;OK&^)c$f-2aL8k_qkA%(w1N z=WbY@$-^}7;e8Jn2lU#`u}$g&a?DFC6{TJ`;?~x$L{6W~c3&@oCrPxZSTm`(+;={v6-Z zeNFSmbppL-#`XvE9Ae$Stn3)vKMZ?(+E4VOZBbvGPhp(XaUj}DQhC9*Tt4u{AaALi zdp_3t1K(eybd&EFxX#+yKd?WT&+O(ae+~R6gn!z%#(2N7`6kw_b)QqzuS((iJlEUF zkN({0JSgqyV#b-Z1RQ_X}RQq9r+|i%?{yB4n_LIxkN1+`tyh$$nxW)A)tT&}~KHm>} zH~VAu+qC1b{+2SmgphVl!X|q$^%&x1yJY`HJ(>F>8P0tG+y_ZJ?E1FP!b9$xM7s38 z8u4x%)2V)M`)hz#*BPUKQTda9Tn~RZ+Cej!`IC@GmIF}NX5#)#p2yR3u-4Bo9@F{t zz9xP#9r15*5%PWZJAmXjA@Q@m>gh?Bj=xigr)eK6<>jrFFkX#+8gfhid-q48y;tXO zkzY!W*{yv!>CgJ18}#Qwd7wYbPkCW|csKDKcR$({!{>e$^rPN$;k~YugO}}|SLR1~ zpj>m`7U^RCj8A?Lu6;Q2`;65G@hy5A{C{ryfGI}@yZnil>3Y$@^GV;2@3CgW@_Kn> zJ12g+3H!~D_?Zqcmox1Cj_&wV_)zmCf^| zURb~MZ`xPJec$Z2!2eGDiS=@1t^E|jdS|}g&GNE6Azo3nEAoZ%PI;dHD##i6!1l9$ z+|S2%*4S?lrhaay?S%MAKj{Wccq#9MOh-DIj^n#ePd$O*Oh-KQC!VJC#KU>N$8(#l ztBh3H3G za#Q~yWVz|)zE+N}TzB1fzwUC>ln?8b(3iJYKgM-rwkP(xlzY<6_Chz)F&@YDCOSE; zdHR~-vpjXE=Q@|}&L75W!sqLoSgqQi&;n3-%9`TGj|FgNx`v~`ncI$M0 z_S~ZaKhzRz`hs_#ZF-h3C-CWh!o$$sm@oOl_Q-Ov{KNy8?C#jF&HV?NJRa%FgySLQ z%gYhnk9|4NQJ5V+?GFY$eD^ou$GnPqOD1)9!b7?z51ac-l)raB(98G#d6+h~)o%#8En&Pv6 zC8Rw6B#s}s+#6xamvlGbqx=&xKIv&n*KdEvc2E3-#LxVw_i)~IqPCVW4mRmYobPcy z=;w9ZKg02j`8E0b{P+Jp`eB}{0v}SnkuQF~I_{MzWy@I4dOubiS2LlWUY~Du;^Thz zru-hWcM5*{Jm@1{o=YUX-c5Vtzzg+szx^@#*X6Dbu#j&=nCRts5#aUj67XC==eq>t z&z13=%uHTb4f)ca?;-%|d*-oR`ku#EL%nNzvUv^T)6MwR`2f>PyZh^YvS^>rWa`3O z6@8P(lj1=x()~TFJQd2t`yBFWe+}N1N_NhhZN5dh;`tohgPsfCaVg}{5dmK*KeTg4 zjCcE$!9SCFeDC(@Q+<=)t+=nA^d`H=Lvdd=_4|~L=R=mgVA6U{_5 zpCpqauD51_b*u!N(qkQh=hKs%)872TS5a=l%Ql{r51sPJ^0B^7nk|$^^{z1?o$j-E z5#{52f5V%DyRdpJ(|IG)AAEU97x_iVe5VvI`=R=MX^9_A{9`%49`C2g#KY&}dwNNq zdnfXP<48IuNd1}R@$Oe_-Hhd2*74`z$j40n{sr*+CvjY%zO8yv49~^;BYq~M<9XE- z&U-(Jm-%`=kY4sz^6|VqTO|S6oZA>l)%&x!KB>|uA7;^4+ z?3@$B>1IC6w+>VPwYuGNb7`!fLU5kDls_JW{(^W2&-^XQ1(?g9j2_}=yvO2xnM?@D zpU3Td_(G2XPiFKp9q|y-AN`QtGZpKJ{Z}S0UKZ%gLX405bq{-ug29&0lzOd%lX4uffq2h{!r~n(O>l(>-XqJf2rfF>kmCW zzh4@7=Nbd(-6L$BZNa5NcrM?Md?_k@V`%=R{KNR_)3N-7z4+Iwp8nVPO2~R6{w6-Z z67LDgKGt-L2~aHedJUs=HIXM@;?!^+r>1MpL%CFAPT+X{6{33t-{ZpJ5ah}9}iF(1K zi-dNsdU8D9n)G4Pi||Yqv;C;B*QRxK))VW6^wIy_H$WfdaJlhtQ{L$QS=6U;8E$-L ze8yWOrpsmbM?-o&PZRAArF=8Omi+3z;NOYIa-^rd8 z<$+uGeVLo_KR-XxzxhXvu6il`0h7MOdM7+>chI{;oF~%0S_ zzIc8=7vQJ8p_E@oyGu)6iti<~1^wE9q741eUD_wfeGTM0?U1xv^1TE0`$Me{UrujlWBGB9 zS(2x#P7QLA%fU9j63<&vKTG$cP(LFc#)JNu%Q4pke(F6`b{>@R=w^KS^S-U>e$t7k z589dez6Rqrr9b=2mhXObdBS~y$?nVaD_D6cXC6P}(VzA4O=s7moAEFoO!DLL>=OB- z=MQ!bbf)`{eLTLi!26LIJ}TO8)NXI~1?J0ex_$b(yO1|`4gAWC4!!T)_9eq#_n~jl zJ)Hi`2lsyGve0dcZW4SuE?ut&(g)Z%U*$Xy_n>A{cX!HDh0pF~7<~@phUb+?ALFr~ zp7l$RlO2yk`Reh~c*u11d2}HkjpKGHx5fMZTXO7(P;Py1GT!SsAkU8s?m@XBj-RQ0 z5uc~yx!C`d^3F>kU5Zcri0SI?LS}dEi}8LO?N7Pf8P7H7J?63fmh$Qxp+59|kwpV+ z%l2-3V|w0yBT>!^`Bt>Um$LKRNdI)?Ut5O7`#}a|$LOEvrri?lH~9m9XT2XE&l%`F zCuZ+Q|Dtx9&AQ1?XL|B;_-9bB$L$bcSh{Y{z8$jw_%OoO z0qS@=<5MmkI3@6_kae~U#LVzb!&}3xPeN6xb(PvQ3}mWIg%ygnTyC z%W}4FWxT6*jzj1VsJC&R-07yAknhwp(NE^pIM6*jwO`tM2{}(7WIp@ZdJ!T0iGR(@ z1K;!HU%E zqrdxNsFy-U*6bvSKcFX%wY3n;rSr-O9%(=c!#WU)*P|_xwaXt26xTW+%NM!a|le z{nh7RTKfRZc-xuZb#Z*ogwUs7H@3%20QEekmR(E_{h&~KN$F*%gRG3))|}piErg-?@9Gb|C8rJxpy>3zRhFy(&Zv7I_#cI&-i!P z`eobNS1+w=PoSIY!iU;D znS^K9K25|=`+30!z29X|9$_K(d^^ZRDbGZAOJ0ulrnY>~())5W(NBNsUwEf0llfOcd*0##Kwoa}2A-t1 zKCu|&_E@8bb`-kn`KEMyud5gSZET$d^_}jG_vwCpANa<4f9BpGAGy%Ya+98!_Xhvj zPX5qPezqS%rf2@%-buS7<&p8ZKah~&TxXy^`wR9z9x}frR{{NS^SuULABppuLasSB zgqOAtMc--NH`G&GR#-d00l|9_gR*>dCwT_Fsh&vx=UuzT`w%I=f5dg8((vnhm68AL zzVVZvdqjIrE_=Im`WIvW(%J7a9qIJ+Gn{%g?Y{KKKC`5Ek1@OM#*ts1FUiex%y;6| zs1LwgURz8#Q$#^ZdS`whIC`$)0x zMBni?y_xBo=sO{v|IzhG<1gM@N&IX|M}Lk}q?hv>uDjr!7M-V`80w+0d`j8r6ZLu^ zKF>eA1JjGXOcs7R@KNtio(cI3pC9e)Z?^`2U!HVdCGBOsAm&3!&N)Bge202|FMjhJ z0QWuhich{W-o9~NIG3F>@b6~Rdp~V@G~+e#^GjQWbZYms@zKZk^$EGqb%wK$AKqo` zRUe5@o_^Bh^8x=;K27yOzSEA|FJwAGyrYtfZ!dgbr74{JYU=lVd1+U@>Ui*-ZpOPS z+UIk@`iZ{(8|TNR%^O?7_fzn$SZ;R6!oo}0*5*Tmq>tsKyB9x6&#qA~%gx@e_YOz9 zzP^ta`~Q~N``eYhf2i?E59NUEy=mXv$Xh}??rgvJ#{C$2zVNotzSDa*n^}Ka&nKOq zXF0bpJ@?9k>-f(c+&@= z_v^h{d!l}t{F~-UP4S!j*?(~UIm+gtO>j?}e-dIpj=t9v_vLg#o-=vc^zAupy<+rA zkef@)zis|ao2Q z-TL01o0ky3FF)Ocz2Y(4m%mr~-L0Ph%;nsMexs@0e7R>gJ6v%H%J1_(%J5ICb%_U$ zLO$Eh5yrb*vXKF1;@v#I$ak@>+W_qk=X!J5F!qau9CUKP$Mfzjx!mqu{ZoVk^1IcM z-!5i%Y1%h8)ctpyuj8J|TxO2za)srm=S5@wnfUvQwq6tTENcDw8}Eej=XSrIp6iI| zn7&ofU*|_IoZn-=mChRsANZu)>xkn90*|-$*VKMuhmy=d7oczuQS>XU4bkJ~y+9j5&ixaVH?|Ji`z~JaRv_e=iUBY~=F7D79`7o3VVE#p~R+ zJMs#|+h93B*pV_>bw~6|?|uaS7k(G+XAGY85x6gi<6$mGJ%@Od<6ivWJ)WzXoIkJ* z@XfFQ@Bp&^&~?|?elywOAcSvuQh>VeHtyfj^`3R$zd~$Jo&H#7)qUepf6(_-J{97Z zvSQqKuIF9CUeqf8MwFkI$nVi?l(HclR6r z<*}gWy^g<~jhCJ;&+m!+$tMqIw0YcP*JOLf-S*ynp_nxL=X)u%vfO*N^EF-hT11U&DPfDgEw4q>J{j zg9gE0zT4a6&wL@Lh2Z^oJ)aTZr)|lc5w>Mqw2uwQrV$RxZf)Ra`U&xTMoN$PEsNi- z;@9od>E7KnHbA}bU2@_b8ePf0?cW(DKJxe4Sguk~UoFWZpWA)c{|%df-re3rKf(K3 zn#L2nf1u~B_6_Ou9U|-RoAkiC+~%_U0Z2FO<^c8GZS9i+Y|0Ps)Teur`Az`ufo8wt z(!?I%yj{_?OKpzuI>C_7MZDmqaA zAEfXgg$K)1`rWJF6Y@nFnSD{?9-@ASsNW&#cbMF--@W=hAxCKXBlQ0f`hSAvbG3f2 z%R|NMa+iMh6mQ6V#hVJ>QukX5|DxYuHg7phzZtSIlKz z|0f&Y{zi6U`^xOP_7Ac%+c#tr+c#xL4BnJoHh6P3e(;v;H2q}QPqK>#C#v7A*+cqW zHh5e1^59R^|MqMV{bbnBvQ>uNk*%)ZWrIJ@W*YWzcH-dU+4K6H*?u-#d)RaO|2h5t zT6V<1pY$7^A2T>lzW%WJ^UK-`<|hs=lwUSDQlU=ahAo<3Jh)hXhJF_hE}5S{xV(m~ zl%LuDxQ4H$ZXGU$ZKz=z<%K@HoUJwdGx>Gx?elZmJLtEgemm*6v-*8j zzg_hIuKAh6cF%v@-d){$DBMHg=k(i4{Xehp3;OMyU)n z5A?fUzZ>v%Hrr%HXyCc7y!U*xy9@5%3J z-(D&asB@xg-fdchxPwQ^jk{5r8Vvt^&hMMm(g!o{gzX|<@Nih{$D}k ze@wrX^jlfut)hOb>9@LmYv{M8erxNuj)twTa089Ep?(|bw@GoPes9aB3O7}_nZnH! zj#D^J;U^S+LgAJQw^X>5!mSi;t#BLtb}b&#@67gY`t2USw`C6v|D68+oWi{n?xpYx z#S!g&^xIdz{q;MvIHP@-^6hZ_jxTPS<*Z_S`<&wQvz${LG0V9M&sF$sh2K{AJq@2w z%sa~!`dwB0ZI)~FyH39w^!vH`Jy;w#>qGiIqTi$XJ*MAp^m|Fam-Q>l!Py4%8?N6f z<-D`6T0S9bm9q_BOaHH}-+Jm^U*QG{H&nQBx!mxL6>g&6xNi0wa?$z%>{hrb91^r&t@3r_XF#D+1oU<>X-x~U@uiu{f?W^CH^*c$w@%o*r-^Kb} zrr!kpuG8-a`rV-4P5S*zzq|E&NWZsQPsra}_qB($uNs)WeSUim{pM`nGi)yX=GJem z_A#@ptKWM1ZP=b^)=#!a4F6<%-q}CZUVQkc6mH%ALbiYV3Av~Ju%7M{8Kd*nFv0|L zL-^lTIG_EWLE#eie>R0&f#ff>~#iH+8-} zN!q}Zlk{6z=Xl}&>H3BE8a4WFsdKp%^#41G=OxwW*V6x4A@XU}iN@)F#t-<1tN)D` zh>oH7|E|uzj@17_eK_=@TrSrCA?+%94)O;3Kdah^Cffh=^#2|De?EZr( z(7lKHKj3*%ZBCiO5a*7Y5$AplV;MtP$hVm$`9J3*{}-6#zmi+U53~h(0`CLP74$r7 zDEnCT-|CcHg8621{r~OP)Rv?Fx6%J6>f9n6+hN*ZS`2Zv-&M=5{{sy>tNkJHHqgNT zfd>BHQ{xY=E~4Xmh38)VAN>EUnLcFxTWpibZzhTJd;K5qAN;8DTkB^(jepZgd89ee zbNPv=yO1yAgnaowr2Uhg%?E5G5Thy{om-il$YgdtKTq-Ka>6sau&)vkNuzN5s`)LKg%29gtjnR{R3@_@0!Vy_J4=N zGZ~}*0}WTG+=hIw*8kfYuR{DEE}`p)3g6K({7lOgi651A)lcvV|LW@f(kF!@7!^@tY-fM57*ZJ0ngk@TcA_3tax&@y04!R{0#rcKA-;o zKd$ZuE{d{k*!avW7%C~_QUk+vmsj*el zmorxC99PTl!RYM#^l_gpr5hdsRukKJvz^@E}3F+F5Gzp|(Q%DMR+{SRK@9Cts~upisap8qKK z_n<%F=SUmup2PQuPtj`J5{9*Hi^cc;|77}2%&)EkE%rPuYdNmyq4qM>wy4K`TF+1D zF-`Sz9RKd^8p7DB?NZx&pFPgQnQvSwtIUS{|1jr<$}eSm?yjN|QkyFXrS z83Sl8ZF(QwN^`h7`*#BW{VIRAA&OgdZCBT&D!UJyGycEVAhoa6`M7^j+iO$%*C};v z>FLRFWiMat$0;mJ9UH1gb4;pMufOhA)7AN_rdRP;wfs$d|4SXit7tujOkYSJNN@cZ5!HsJ-pDaU6*j3 zVVq=)<+#1QT%MOx(1%6)%1z2$Hu1eIdJ4;bk@qBD((1X?c2(Ka9}eU1 zi_@1eeR!N{)Z4Az%Qe~^JYL@8Eo7Oa0xbQSvW@X6UCQ;ms~n%7^L{Cpoo6zSTD}@9 z)$aEUdze3g>%Y1_9I(gMJ!9}OakU&;ZTru5tM@{G(i7}?I$tKsAHe$e zvir(uvK;liAFP$vKGmhPdW}}yoq2-n`9~zk^aJ+(V)4$opw_J$^Q-rw>h;S_(O1)Ies`<+-CfG^)tIaIa^-fPQ19z#wM;cW-016u`~9{WTQyy+r@JToPtMtI zIUn8Uvim*c3g&meH{M0xH&nJ=bq&{8HJ)mom${azR@0xn!!+JtnQHnH{w9yQF0G>7 z%REUB;T*|f9yQ%P|8RSJ)H)onTWzmeruuwQX0K=6)p9*ik5&7wh3lkh_qwTlr?&S? z=0CvWi`Sb*A>U(G`&wO3e&UU*ntvnTH|9q7V;nODyzr=F`=EVYJ!~I8YW$D4YjxdF zuNPyupsQu7^F>`Z)cPkam+e*k_-%51p2w58uhnYIopqzt`>~py^4@g<+oj&CsO5L( zI;O5m>ivw`UuwGQLto1KmMQd*2!40%dR{B(y@w5Bf!!Cm=JS7gdiRZO({C(pYb(F4 z!^_)x(5KRK?B(aN%z5-l-utQLtG$+k~B$!iSHrKUgK)inO0SJ?Bk(rVrMvF)xta_v>e)u158kjEaIW*I4cWjx)- z|36GutzLiC`LeeYf9s2R)a#u$*OO1_9`^FpzE!w=1dhCplwoawhJbzo3@zkyC7ux+ELtPK|@Fw?JmZMr-56f9-H+5|A zTw6!;zM$Q@xw`}N_psMT^)}{Fk5$KsIwsY5v30Us$K21Q&O0@|?g_@W-8#6($A{&t zW4d}?wM?}Rv%cZ=n&q*Z4RwypoFdybyc_S^X!p6Mu2<@LFXKAaDVfg#tXs+&`E0J9 zw~#UXVg~02^Qq;l_spuleAF^ZW=k)BgntXr?nQiWbQi70O}!@>@to}I#jL}G=ebU@ zeD`a5M|-U9P3L{4JtoaB$vRJ-AlE>(Zt6XTI+oPAuda3Kd{@gcd9SY4e-C5m{>-JO z&$yg%;BTC|_k|i;HO~&-r~R-*#!wv_vzN-csj+>YKEOO`8`XOlwe4!1mn`G@z%o~J zZ3)ShE{L~`f%I|aKfaCk7LVgOIFCSeW`tIQS+-~HSVpp$Hvp@_;ertYW>|`+hO+@?)P%4 z-S6=_+O6L6sOj$agz9KIVRm1_5UNHveT{y)A(KKH4yRi7&-uwCl4PkkPo z((ag?!t@E>8ODGuOsD6ppilC=YMyzt z`mLX8G(W0Vm-;%0Q~-5EPYZO4i-^6v z5b8&LZz%PPt}v=eS2%TAR|NI9u1M;Wu8AE13$?l|uE?l}g>LD~%eYE1e40l|c>Fl}X*BD~q~MS2h)+ zD~EbeS1vVHS3dQ)t^z7SR}nQuS26Xpt`cgdE(XF#)m28lpsRwCy;Vuc=vF(^YMg0x z&a`@GS_36}p^=ik&_u~zXr^Q@v{3RKt&}{6dJ`d!^`PXjTvF`$d?=aE*O|}HnJ>VZ zFVLAU$eAzLnJXfb`s##Ytbyimi^{=i{>Y}bP zN{+R1N{+P(N{+QkN{+QE%HtDt=2cT2b=6Q^bk$Oq>#C#tbk$RGj5ko-^|VH+r>-Wd zkFI7aSl1cqCS5JmKwYiW?Ya!EQ4zX4sJnG}Q6qGDQ=@eGP_epvsYi6FKa(_Gmp?U0 zR{)i$i|@=D({u$jXKgL@n4VTg$=O&>$+I<3GHQ*K zJVz5H&)eeM+v?oQ52CuSQj}b!yeQcsZ%UTpkgC>f!6 zO4cBOk~K)AWDSy>dy}1eQ=EHKDcQeiPNh?F{mY=z^|NJCvgKKnoQ>Jk%lh6NO7>eW zwMb9Pqu$V!Pvz(;pycc>q*mx@MbtaGik*9Nc~i1R9zn^r6;iToMU-q?F(sp0Ldocs zQZl+_l#FgUC8JwG$>>&6vg9gCmRwEAl4~g0-dalbbR8wHNA;AvLusJo9ZDl5`=g1H zBRhi6N%9<#lsrciCC?E}$=b(Ivi7l*tbH6MYd?;XwU4J{?Gq?jav~*5PNHPV$&{>p z3MFfwO3B)%QL^^wl&pOQC2OBa$=X*?vR5l9IeV%odERPDp0|dQ=dGpWdFv>7-g?SD zlPP&@BPEY*qU5p7l#Iq1N=BoFlF?|TWHh*B*`wh>$!K^{vSe>cmh3~xl6@&zD?dus z%Ab(Dv6S{N~UD3 zQYhKpR7$otjgsw6r(}CGDB1g&lx%MnC2N&U$#xV`YHxKhDyc$!_Eb^!-lFWiMag4p zDOrO$=iYis)~|uG_m)#l&V0?zd}k;b-4;qlx0RB|^73OpuLmVd_M+r@y(!spA4;~| zmy#{_qh!ndDcSM>N{-1uO0F+Klw5OyDY?FcP;$))rQ}KzM#=t7pkyhDlq@BQlBFb5 zvXm4`mXb=zQqm~7UZqp^*+a=AGAX&9W>In#&8FlkTHxGUNXfgFYU*RXw;G*lb?yz| zI|4Fa1SRVn=~NUY;~Y)N{*9qzoMS23GjWvcnQ@ft{dh_qn?T896DfIY5+(a6nUZ~! zLdiZ#rDPwaQL>NHDcMI=lv?L5#u=)VZR=vRQ2X^(8hp<}-ep92yU(L&O3tGyO4h2H zlC>(~tAju4$CgsR=;eiVVcT?tQ|EO>P@VXY)WwLTuF{o3T~B!#1(Yngkdh@AQL??o zl#EpgC1+GAC0B+rN*-HI$zv-hd2A&mkFBEQvDK7%Y$v0Y8p;~5*?eVRm6s7j$x?!y z3Zdjk45j24il^i{lt9T9IFVBOva^v*jnGTZp~mRSqvYB0ohopu(5WJ)itX|;swjKx zDOtZ7O183=lC7+x2s?P$b1l|UWU%S&+O^e^_yNwAf?8jqY>uZ8*Ue0 z^KkBsckWGaDv|nAFD2EPFVndcYL9jaKR^J)alfeUSNl?CNazQ2}~Bf2yyZFUXlM#Hld5IvWwx z&H53Mlv)=?!iN>BhxB|I&b?XGMEw*(p5s`=_;k((N#v}>nf*K z>#Cp%bX8JobyZP?x~i%5x@xE*UA5E(U3FBku6pVtT@6%;u10E$t|qEfS2OjAt}|4b zt`=%1An(rQF6WVrsR6%L&=rUmy#=?A0<~pe@f1P07|Zefs}d$^EARK*+&tS zJa3{?NzT2=&a@Ott(B*dYftks@+i4d=TowN1(d8`AtmcqM9KOUQ?h;~l&oJVCF@s4 z$?HrxCGQU^D0#nINy+=&DoS3bt0{TETSLj$(rPJrhf+t$D_A`x?}8dAc^A}3$tztG zrC!gyjAp7_kNp|yb6qXeSGrm$`C7Aa74IYTG!Lpqmlt(dmp64(mk)J9moL?*%a8g^ zmp}EVt^n$su0X0)R}f|HRBIJXbZ>c7 z>aQz?x@M+R_Q9G*6J#wKG0Q873->?HtVXSKG9W0$=3<1sZaH^8mdB9Ewx8i9kowaJ#|o5 z168Z5kvgKQiTY7jGxdwEGgOnV7V5OFR_bqEh975-E)UA!d&qq6g!0toO?A@cLv_{V zOZn>Zqq^zxr>@l%K=slUNCoK%qWb9yrf$|1LaFaqdl{irxUMj2sIGA89$gXCeYzs4 z7+q1S^jCkQDfx~>j4FL^EHzeF9QC-aaa4k?cxsBS1nOyBiPTJ8NmQz?Wa~7=x{PkDLAg2(JgAPkyr?d^ys67| z`A~kke5vlb{HUI~{MEg@qwq2Us6KjHASK^j3ZjDbv|#EcT_My!U7^(Ny27XkUE$Q- zx+16%x+1Ajx}vC9UD4Ddx?-sDx?-tGy5gurUE`=}y5gxBx)P{obtO`1x{|1Qx{|2{ zx>BfDb){0-y3(j+y3(n)bY)QQ>dK_lSJb_XEUG|H%U08LVLW#sjGA~QU1D`sUEt{P}l2fp>EXGN`>fBKU#9DE)Qz3 zE-&g%UEWlrE+1;RE????U4GOUUH(*@t^n#WU4hg@T|v~7x`L@BT_MynxWZg6)RjPeq$`oysw;^q z)0Ir^(v?Dep(~a8T2~rXtt*}SR#yh~y{=5^n650UL02|)QdbW3yRKa7FI{<5i>`d? zg02F}`b_QpLh2G-MU=O$V(KzoCDfI=N~vpfl~Dn@%BkMEDySQDRZ;_VRZ*e3s;S#_ z)lhp%)$`U;@?Nx#Qtw4Qje1Jn?>12Kez%d5ceG8;v}R}88EObi_B2{3^%=+0Xr&_b zG~*iH`{?qZ}7p3lojqGWrMDcMIUlzd)DrR4KM z8YNqlPRZwm3`#yPWK!~ZA&ZjF3)$2WJq9_HCtJjK6e;<&F&T@_C_zlFtjJlzd(&qvZ2KIVGPLDkyoUP)VtG3SEpU>RCpzi&0H2*HuGp z)>TVY>#Czp>8hu$+^rtbK;5aUks3$w>4cK;J44C%wNNsCt(1(P(cL|M9+Zrq7bWB8 zP09HAP%?hLl#HJrCFAGsQ~)I-8A!=U22nDS!IX?-2qhyKO36ruQ8JR@l#FBqB_kP0 z$w)>~GLq4heDaE+WgkP797C~`e0qnIuLdP>H*fs%1 zYJ;u@YLl);szg^4wN+O$^@*-C)DB%ORJpEJYPT+K9p(@5zh z@0PrbCTjFfHR8?G9`5DZMD5enLLJoAO4aHz0vQ)w9@LMzyr^Gv#Za=mSW1=`N6GTW zQL?;vN|u*E$?_5@SzZz)%gdu=dHIwquYi)}6;iUiB1)E5Ov&;}C|O=9CCe+Ln)I5M zQ>S%RP=8aNMiq5lPYdkre%>HTo;R41=MACcc|$3A-Y`m@H=L5^jiBUtBPsQ~os1Of zg03p6Lxq}FO?9Qbj2cRQR;`xu)6)vC=Q;HIt0GFSKE;$=H!7$p`hAo7Z2>uU)i0;Z zk)095+Uv(=QgVgMqGT!Alw759C|O=EC0Cj}O1^%YPsvwja{IdH^S^NdRwxs+UO3n+O+Athr~L=DmN6;s1> zCH8lZa}s4=n<%-$Wl>Sg$M#a{9g3GxOpRb#N27`wrK_5X)m1~Ot8z!9mU=`_tE0wK zUVQ9w#*~uBhEnp_FiIX9PRU~lY(6EUQAWu= zYI3IehPdyIr{rGsn;&vCr8)OjIQJ&s za35-t9-&}L9uei-8*NYPXvEm_bu?nBME!_l%KqsNN{)zBN{*p4O13Q zS=4cT=4IQ}*~p=$>F21VWQ(dOIR~qqs&VeEb*j#}x8A7+=iWxAnw)!^ooQ#BYH{vu zb&5aeWUqmTQ(ly;pSM#!&b_|QG(T##-XeeMk#coR22juIX@OL_t{_TAE!e3Lr$Q+i z@i0n8Bb<`6EP|3f7)i-b*hf(>>m^51a(#)RcJL8I-J5${_brQk}|m zs)UmFou!n#e<`Eny<<5g@A@j7`6?-S?^8v|7*td8&a%dtuhzM@j*{ioQ}S-Jfs$>D z3UgNiCD;25O4h!ZlD*Ji-`mmfxQ+Lij2hpcruOUdrfPKgP>1!H`cm@FGLo`KgOXR0 zR7#CsXCsX|svl8A$+1yP$=O&!$=O)u+*|J4TjAVWNy*VvMaj`rP06#>Q1ZHE40f-J z2PI<=K*_!grR+~9&a`n(#Zz(|Bv5kXZt2tG*TWds+yb%AHr+0o)$qpLGijp$fI(+G{9zwpvP_tN}jiYlIuYuC7(2#DE0n@PYKl9dJmqVR_kh^37U+HlNETvw%T}BqQnQe0!*;J{n9BMn&#mJ?0>S_7Tdhf?6192vRC6NwO752 z1WI0~6DfJkOQPget(=l8NE0RN(oD&^oS|fdS|}NzR!Y{-xYzw09+bS#@uK7r-jpoG z$1Yy;sQr4>f~i9k>qp7+Cff7yeF(}ve<@jB3MEHLDkVor8YOF$PRS9GLCN}MI+aDq zNM<{gL&=!tQZlA_l$?Y4l$?VFl$?Wwl$?V_l#G2bC1YPg$vId`$vId?$vId~$(dI{ z$#Ggq$v�WPemsGLlV{`mLx=Mqw1ky&kpf;rv8^u42mkM;(72=gxu#ou0kmp z(=bZ*LO3O38bQgJMp81SQIw2nG-aO)l$>v|l#FfyWnXP6d5$DXo+Fu(=SZRM)N7SP z$s=+pc|@@@t;CsDO36~nC|OE5C2Lwi$(mMDvZhs(TqCL}S!eYN!15d(lq}DSQp@XN zL{O1>tx_l%=TtR~apwDUl7XkBNhXLNfVZO2)K`lH;$MlB2GMlB2FD&b{A?DcNr& zl#Ep=CHt+6lKoar*+(%Y&rwOq^M;L;M|3gLALHk*^!oWc?p{A%O6K#Uny`j#% zVa~nbl&pOOCC{5c$@V5vvb-cpmX}P)BSI#*=L@Cm^`m6IaLQgXB}?;UmUqL82 zFJmYfgIG$gC2^EoOU6<1+8s~HH8Fvb*X~40-UBC5^4T<*lF?0}7$#p!7lIwUjCD-vBO0MI%lw8LPC^lC3PIWL(N9 z8MSgsMzVsEYeXd_-xH~#p49uinv$>T)=)`$S}i4?aO)`f)LT!SbLmlwXB916rv?dYX~IsOj>ca&&o7D|C5N@94^<`Q?k!}pKw3ckCOHCr)2#CD0yrkCF>VN$#Vo#a_lBiGLp&Ehx$2EC^-^SDOuAr zN}e~JvfqPH@*B-HPr2u-rDTihC|Rp|O4h1@lC^52WUZPgS*vDB*6Iu;$65;|XO#N0 zF|sZmlstzQCC}ka$#eKR^Z7aR`8)FkIP(QkvMxcCtV=K@>k>lAx`a})E@70cOE@KC z5JAb=9ZAXA9Yx969ZkvE9Ye{O#!_-d#Zhv0kE7)5j;G}8PM~DO6Dc{nlPEd6lPNix zQYbmQQz<#S(^3+GP-4yjBYt4qgz4A=vGoPx>b~nZZ##NTSLj{)>1OM z^^~kj110OyNXfc1QL--0l&s4cO4g-?l67gNWL=DD?sf5?WL>-{Sr>0g*2RaCb@8QS zUHmB7)Bcp~=>SUhbRZ>rI*5`z9Zbod4xwaEhf=bq!zkI);gsy@2uk*JBqe(~ijqAY zP05~)p=3|TQnIJxDB08FDB05ql#E{@CF7Sw$@nExGJYwPj9)4x1#%cf-fawr+UTuR0-kCO4rr)2yJC>g&(O2)5wRRtyIex*}YlsvYY3ewL}L&@0JQu4fYlssEK zB_r8D$+k68^4A-hDA||Il>9Er8A_JiLdjnkYNcZIvl+?mqsfCZ^*Vb|@*61Llsv+R zl4IPLlIxWpCHvf;l4C7^l2_P3N{-GTO4cfvlJN_n97M zBqeJVMah^(Q?dpzl&nE4C6A4xj_TuJoHH$+l66U-WGRW1jB^qte~l@blD&{Z$#$et z@;f?dl#FgVCFe{ACC5-EB}Z5mCHpO#lH)mtlHUl*rR+15k}=JvhUz_2K*{ek6jJsX zO35)lF_K8lnNEpMe{G>m85zYFC-$x-Y@$y#|+vIahsJew~i zYv4!8+2c>i-U^^(DS?zcB8Zah4W?u(Lns-wP)d%lFiQ4YIAy;sP_hP*l#ELhrN+Lq zQA>Tq`#OG;mD;YWo~qFA^~z_skFW|#-g{S4d%2gNG^W(`iuVjN-Pgn{O0J3CDTe)b zSbQj1XFq3}zcVe6lD~EoM9Eb&n3Ah#2qou2m@{9vGhc)=U!*f%G$p@*664$(OUZRN zj*{1-cxS!@XTC&dz9eV96lcCvXTCINzI124Ov?VvFiKvda-3Z{bu>$Mv*IO3tGyO17w)l4HEqnXk^7uilxj!I`g#`dKfpnL4Gb z#hKRXO!Jt<_vG}wUX<)3Z%Wp{hmz}ypEIAoGhcu+U!XHzFeR^{A(R|1p_D8+oKinW z=4C`U^F`Y8^<`sMA~A=5xs=<^2zW*Ma=NeG*U(XR_o7GJeIq@=?pxaR?d^J4yZP^< zpS0&6({7$e+ch5}jk)$bd>}E@zc8lOjZ?wcLi5E*XPtXl{M0W0y?qIPIhcNxR@<+7 zsolf=PpkP`nSWgeJ~z_OuMlGF^SnvBy0-POcD=^8 zZMtzKpZ1tvt(Yrs(%7SJ$4`+VD~e0M7yrPwQZjCfzoQ8{B|7>);3SM-D;ltcAY-B-8}4QJ%(zY zc0G)*FRSUN*hXWd^xMo6Pk+F4bdM62iWVXWp) zln$bMrMB&hz&U&`iFwq%$e7#Ku6b?q^rh8u-e7F^*u9S4{ZiXJlQPtXN6^h@91uf?yDZe;$BtEDf{4Xm(xyLPXa z>BHFe6YY9Wu}sfc$g#9ZI+%aqVg5&L>$Z+o+pgwW#{yN4WS(^;ZPWX1Y3nIl+j>vC zRzDHwUQWH;r`WE(d{xFhePO#kLA%eXg}nBud6Icv7w#`u);_XrsEV1MGgB=>Z32y4v3OZ`+o$=ZH-IoaLXi`z(FDQKtJZ zX8zx#*YenWyMLt9&&u>m7IB_hTt`?pzc)FTFO^o$HG#kAuBJz@oO$hfRlDBRu8+5C zGobCUJ=*oqc0I3W+dQk<^{#e(yj`2U+UD=ku7|ek3GF(g4}aC!9`lNJ?Ge;AJ+fW* z=-amZq3wD?yPnssSGDV1?fQ7THu(#;?lJ7qt|Non)*+)^2k;kz)%+9KFY)a=x^22K zMtT|ZluwpEKp%gbf7!v_Uh|!{?(x0M^Emr)RlDx-L)-LSS6cdc-&Om1r1Vz$xZU5; z@iS!l8J;WO?#uYs4C?K^fex4{^Qg|Z`yn+?yI!?Q<~gsHUnuR*Yn;hn>s8x+7v00| zr|6+}=g|3{E9b5Pk9Rp^5-?Gw2V`;l^G}?p=Thrg-mU}E zJoI$6&Jpd}ctNHQ<+1g&dz|B6Y-?j~Tc@{cBd=|l0qr`!U6;3Oqgdvj$a4kklFp!w z{n8uha{fT1T7Pxjh(9QON=^Sx`o`B-|L@!83HU`in&}lMJ)H9*;*3nsVYFNKAz5a8n?I2 zpFXs0p85&Wx3C<8KicRX|8!cd^8}{HKif9FoL1B4F+JkdcGH*1^c8CU)os($+jV}s zE~nLUN}0d@W9bIfCDQ8kE?}qhP`bWcdMa(~l3qwhwCnhG9q~om{Pp{!^|~FB{*lL) zACc~y%`%Tl-%3Z=J(140djTE!x2LmzJ^FNTI-Y+f#yxHkw|CInwU+tI?N(!0f3Hke z>z_YDTCGp{Xz42E4|qWO0v#XQHox&u+x!6&+osp2N~_}`V?o>ccr0q`jP-3@(5@@m zb;2iY^LTvU)&)PbYwHqcdmH$pj_&J!!R)pUe73DK_;Zi$c`BZ3*DtoU$K1A#oY&S3 z3)?#I^|sE~+13s1`>VF;8T?sD_wx?-*vY#I-bZkp6?WiXi|2M7x8B^Y=hlbY54gRY z+ahjx+irZwtsl1=xb^3DBe&ObTg+_$x0|>Pe+hA@>xDDZUGq+*fZs9hZ z+pXM2a9hf4B)8kRtr&%gcoH16#%?s?6nd~0A&9|BY{5h9 z3ibDX{aK?sFbt#d2;%W1rehW|uoQ*h!fkBDb{xQA903Sc4C+ z8K2@y9K>NX;Q~xP{auEu&>us=iE50*7{p;b5|E5nu^1b%8QZZN-{Fc&_(^eu;%K8NLa7whp6O7RVj z;U8RtC!bm`M=#uj;TVNSF$vT0Jk(!|d<*YF{e8%fu?=6K2F>^f-8%7=F5Hg0FbWf) z{yyXTD8pyii-S0fpw2uuhG94|u?j`_40}r(zg1^f_%D8yj`p2myVf=}@c{=na`_)35` z{)gVU4MQ*-58-i4#w^T3Hr_)yzQZy6gx~QGx^?CF!E`J{DSm|ddxoBzv0ZR2?#Eb6 zMh4!&2iS=1sKD1ah$fuF<(F|BAp`@V{(fO3qA>=K;Rz&R2427ta@ z|2RHzE!5u;yahur95IN4`Wt~W@FEuCE#yP}CBUut3|06Rzu-6gg-%?OuS8Gu#Q@xk z2M~ujScnhtF}C4Te2xbEii^0DOZwfo52Nug;*p7Ecnhmgh>bXftFK^N5RPFOfzg@utaBQO^6 zNW&s5!P{7iWB3V8_!H-0-pKm{1VH^}>8%)vahQx}unrrs4Hejndi;XZI0yAMu_LZP zcRYXzn2ou311s?!w%{B5fO?$58T^Od{kT5iKEz@?)Nh`q;w3Cb3Ci#V4x<@o@h`6E z&+95iBN^}FV|<1KP`?M-fD5>K0M`Z#!Z3`&Bs_&Iyp2M9gwIih@1cHI^DkTy!fOPs z$DMc)S;)aVcpvJwH230L97ETeIDRk~Bk(XXu^4aT18hVIO0feqsK?Lv6aU~pc;3wG z6s|-M^u;Z>9g&E}gLn*+Fcr_>1!Q0$mf>Bj!xrquUVMu>oW=!ozJ+Tk0uhe;Fcwc> z9u{L2HlPYe@H<-3J(P9B%?QUmP`^d`03JmGreOizL_XG|4Eyjc{>8PovRz2V0u*5% zTJRsd26C>#551v&^HBY!;r)ok7M zf58mnJVYoW5RJ)r8tOOyUc*~hg$>w@UD$`iXo1IV>`VCJ2E^fUTsN38!69_MopTe9 z;3>>O5gO4YoOv+__hT%4?%?@Rh2P;Zg!yn4dg2D$iWoeCNl3y>%t1O9;0;vbJO39JPk&Wf}40~}1b!f!j@QmO%!i~5Yx8YID#8RxpCRE@Yx(?->#yyC` z)0l&~Sb$>ugl1fF7v}>8V<=*gfOIUt60E>GSc?zv5!CO0?ZD?yzp>SS80QV9q7=vR z3z~6hBK{XDc0e|2eI*#C6Mo$dHP`rcvxZ*ypXBdFt z7=`Ds0|#&dU88v{f{}I0{z`KM9Xs7=Swvg;+d_Ntg=t z^Zqa5Rjj}&6k-#$;cM)N`icJUaRMjt2QI*4G@qaFKlmXSw_zBf@gNc~6E7eWuOkO5 zu?lOk5#^}Fel()v1FSzHa4$w84v!%L(~yQG*nl$Z$9MPF5VI|h07&}mbYMjQXSk?_Gn2#*vq5@yxAdccB{y+;Z z;;ILEy}?*aK`Q29A(mhrHlYk(;TQagR#*>ljKCkg(I5BXHN1~ve2c$fJ24M)IF$UxC4AQX> z%aD)t*oqqbiGOhIL>`0jn2hPj#ZH_;mr0xt=#M)PhZM}m61;~pe2YJD0Uik)Gw6v> z#9=(1!gF{XtMLIo#%HKRHNL|M{DHq=PUalJ|KNvf5s3a6g1a#iV=xvIF%2{EI#ysk zK0+C)aRh(jUwA&j`GITE54T|m?nNxdViMHvNzB5Fcm=OvIr8uxHef5tu?PEc2u(N- zk0;q@xDx*8js6&f2;76wco^|`64Q{17m>d=5Dw7_dB z>wxPq0Jq^D#Ni1fVJ4o(eB|Lh?84WmK^;!uH~a(RDXt;79M_;X`e6_vFdUCyGG-zj z*~rIwlwudYzC2&`!wyXb+Dh{s#_ z2-~2368#7Kggxb?Vkl-|9cs~p4%68mxC%Yd7X$Go)X#u_jP2Ni@9{gjCNnnZ zh5i_W$1oK$F&9g*5+C9hsGo?np5d6q_2`e=kc63-hfKVI6gU;*C6=lCAKq2nyBTL{EW7=qz=8jF#K_puG-_y*tOIL^YF&EpY-P(^{( z#2mbW*RdS=_!!kVhV$q!hh?EV24EOQ;sHF0iI{~fD1g7ITq+=o8z%r~xA+}-%zQzF@$1gY!^Lh3?u0nV8LSKa7Hr$CQ zjKXxJAq%-!jY90jxA*}+;|%_TM;iMWff$To7>&tDK_+(Kb9{p%Xu>~my})*(2ZAsN z!|*7c#4MyE3#+jaW!Q%re2?Sk^CH)9+=crPj|JF*Pq7a_;sUzP<@wMb5y(Ui)?hup zM?HQ<6VBoSE=lLL3fH1HZb1Yd!gxH7myn4MP=(9q@p%M;@F*r?78W8OYf+3XIF4U& z8on>_92kT3EjrI5xd(nW?==d_%a$JWXgyMe0Vmh+10;{nO8?ha`aR_zz3BThUE}-KA zmWgW+gi-haTktK8-~?LH;T6Uh18^7a!)T1dvzUihk&E^C1Qqxizv48`!#|T_2>o#@ z?!*Yh;314d0;VDvvoRO1Vlnct2J5gHJ5hnJPz(QsEEnMzgRz*3=db`-Sci?+jGd@N zHICtDG~p~-;k$_Q7`@RC0}+J`WMethw(Gc!Q(aFci}b+MH2F{6Z`N3nqj=o z`HE{X7$Y$O&tNV#;!~W&8T5UFamFxA!E`La3KXFPhTLs;~yAHI8V_PJ#ZsJaR)}=K}%h-57&-Ou=-d;U%oZ8f?br*pI{b34h{0ba<0xqC5KF z7Tke*F$!ami0PPvd02=gSb=x34x6wI<@gHU-~|3cE390udAJCZ1n$LXJcZdvLk3>OGQ5rVu?gGo87fhYTKs}P@E4+^!*QI%U$_X*JdPh+27mNMe+(vYnV5rl z$V4`l;~lKSMr_6o?8Y7(z!Cg{ztIZMw>huik0A8NAl!jrxDTTdhw*pn8V7M0$MGwg@h_}*_zVXh_~Bag!9d)D7>vhcq+=0QVFNa!0yX#^KjIY5 z;ylcE*;giClb$&Df4gRO1ki;1vEsD>~&fUI@eh+=@GJHy*%5 zBw;pQ!Xhj|F7ojqHsdpVg<2fLulNh*Dn65=3$8*B^u+)S#9fF&3?9P_%t1DCu@0M1 zh6?OO15V>VT(z3dUg(ENjKag1fplb{1fStBe#fP2IQDTJZp5v)7x&`{Ovfx_A{%dG z4K`sLKE>zw7DsRbr|=hC1&k+p;zrzzg?JZhu?gEziEnWPKjAmD!g`N=jjPZdK^Tl- zh{i-r#SFZNSMUxtp%mr#0{d_Xr|>r}z;i9j##OiueJ}una2G}(1`lC8rePMI$2=^= zV&q{BKENhy!!A_e2b@3?{zMCm_qpbv3$BDe0&xREFc3o!i4llF942ELX5l4dA{)z* zhXNE~Gqz(l_TT`H;V1ltv$z0{Lf)Uj7roFILvRnqU_72c5@sR|FXJ^V!v<`@7ubiN z@jK3=<2tT)=!Tx?ivbvfp%{+QcodWH6jCu4FJn30!CHKXkFg!Qu@8rE6sPbH%=L^X zu0$`~h+7bWD8wKRlQ9j?;Uz3WF5bh3*og{!g=*B|C>qd&GcZ43`_L6v;X3re01U#N zh{7n$L^@u>Qmn*#_yF7R87fhYA8;JaIERbqQpEKW*W!8vBNT%XiD*24v6zUdNJc7N zMiz4L7S>=LHev@p$JaQ3!#IYY@H_s7>qB0*;EQX}3n3VUJ8>@_#ABF*DVTxhkd6gd zj1^dgb=ZV$*oA#Kf}e02|KK8gH*maQ0KzZ~!!a7ukc#L41!N z@hkqszc7j!TU>^2xDI{L54Yk@L}3iZ;|V;C*?1W_$irHEgila`Dtv<RQK3>HNti?ub#SVOqy*PxU_yvF9EH0qaN4yT; zYV<@12IDS_zyo*$6EFqOU@l%p4&KIEY(NPnNuB@Utv^=L-767~-s!|PZM&&`Z20x<&f@G5e!0hQQ? z?{Ex1<225}+QNFn2Unv9`rs~%LjtB@CSJv2ti`9O$M3j^PFp#L&flunBN*b&BI17^Lr!E{K4pL9x;NgAre)4DJg9ovcUA|5=ZjzSelNyY;x) z+ln{)SQE?v)vO<`nB`^C@e( zIn#Q^oMp{0U$kbL3#?gYrZwAKY&~nPuu{#H)*N$<^}P9>m1b_RUNE;3u~-1K*SW_EW~nAf_# zFnhYbHha0M%s|&Z^9I*`GuTya4sabXZ*tX`x43>VZ*|q116?P~L9U<7FxM~UVAo0W zcGoHM4%hGIP}d*kU9M&`()Fi#x9fs=kE?@quj>+PxT~XepUc}C?Yh*8b#<{GcXhSm zT|U-C*Z-_ZuFI__T~}DsTz=Mc*ELqM%ins&)x(s8lnR+j5_>or%n^}1`QmF>FQTIRaXTJDOr-gJ$$ z-g4b<<+)<4cU)tvcU`eozUyIYjccq`=o)9OcRgkmxyD-`x*oSSxZlook78#I@8q=E|{7xRzNzxt3dvt~afdu3YO^*9z;D>n*FvwbJ^-m1i}(-nLG= z-m(62y=$FyoSi`*5w`_S-u|skG(sOj-u%M1>VzLH8WXfCj0b|jm%`5Ei;pd7$Qq#2iZ3f z0TB@p5h1cYED;e95fB0bvWaX00%Al&gn)>E2q7RKM3#ui5)c6aA#%UnJw0__@4Oy8 z*ZZ9Np7Z>X&-tC|?&|95>gwukvWbr+AMtUdl#eGL^JcP{w~$ZxMDi)0Mz-=c@)@5& zw(*(db3Tjg;Il~?Zznr>2ie6t$!^|7zT|ym51&W&@(+=Hd>!&N|1deg*CpTZ`Q#v9 zkCgL|lEZv`Qo%PMNBBnMC|^jv`Of4D--T53UCC9x8@a|mL4M}Dlk5DGUp2_#W?l_UwTkz`>KNf9QK zRACCKElee8!ZczP-Xu0*I!PC1k__Q3k}1q0*+L1i3v-A=c$+wd`NSo>L)^k5k|Qi8 z9$^Xb3hxr1@E*w(R**blC3#3#Md}FelZS;hgfB^JVGns+_=>a<_L8>3 zKGIIuPudG#lMccG(oy(^bP^7d&cY$mMJOj-g~OzqP(hv$j*#xcQSzklE$JZ~BTos( zNl)Pf=_PzedJ8AX)50mzN2nyv2;Y;w!fEoXaE9~~&XVVZbELoU0~sKkCj*5a$w=V> z86{jKqlHW4U&3WFMz})83D?MY;U*~-Zj(vET{1(BkXZspO9X+=5wvu!pri8z zJzXM1(4~TbE)!ztY9XG!FPP~DL8KoFiS#2Om3}H%=~f|welBFv9YPi@6P)x*!AocaFqmEyhSHyf;q(of5(O5Er#*x|7Ox~s(edOmeVtsTQ_0VC8u^93Np8^TL#TEx(Q4l&5!!hqQahg*wF`(zyNE<<7n4}+5|W@@O3d1K ziAB4NBx>IyDcY4JOS_8LwX2Ck`#$k$KOlM94dfy1hop{n6M01Y5vivwCH1u*lLp#P zNF(hQ(pdW`X|CN$T53Ndk88J+j@lihv$l+M(e5POwYy0V?U$sd_AAm`yO;FQ?jwD* zUz2CG2gq~ULu7!qoV=_(Oh#&tkn!4MZmi7lSTYH|& z(Ow|$XfKi_+Dl}a_A*(attP9qSIKJaFJ!Iu2HB{+Nj}ovBBk12$yV)cvQ2x3?9tW` zd^<|_X$87pOX&fvmLAmVXt`ETk7`5cF>NUQP8&umwc+%8Z3I27HPEwKBdyY!=nvW` z`lB|QUedP(beOI$eOcF!j?g_v zN9p?0f9VF$F}i_ttnPU_UiSihMK_pE(7i|}>W0wQbT84#x}kKc?qxbnH=Mqy8%byC zM$xx)qv;&ozvw*O7`i|=jxN-Vr;ByP^j+OVx>olZ-JqL9Kh#a8pXjF0Pj#=;&vaAi zHr*R^yKWjS)4fT*&`qa%bTjB)-CJ~@ZZ`c|S3Q>VGx>c0Zuco~IeX7&1 zp<(*9)SzESWAq=;IQ@E>px;16{YF|#{~=A%Z=$vJA5p8ml&0%Hrdj&U)S>@`y7XIU zuKrV+r{7BJ=s%;6>bKDb`p;=2{dU?!Uq+kjchZ*nFX-d?-L##45AC4;igwoTrQP)V z=o9(_w1@r>?WHfLPwNlUXY>{HS^W_@K!1!ruRl%)>%XI;^p$js{(CxBf0`EStLUrx zALwiP^K`2I5}l^6rf=%6(pmZ&^lkl3I!}L#&ezw_g?diANUzZ@)oZoy>2=x_`Y7#c zeYAFs{!#5ZeSPf*`Uct!`a5G3<*YW5Zc%~sQJ2Vg#{)`%t(^h3`{1IC(Tia2$x<#Qm8t$gNM6h+l4A=O# zjn&H%ySnUpr@G}$3_SOnoC{kUTOwGk1=~tilOYpO@2^O8&vFhHRgdC1tvufz)V;DD zF9o7t>t&^SyIRAADeJ(;`bIgr9Eg@zYPdK#t)><4Z$o<2no_$51M8@~k2_ZKd{T>0 z_T|AY>fVa3!94?c>ZTIjKVRBKwWO>p?{ww;%bp7?n-(a+&3QbRF6UyHhWm|jRMlQB z%aJH`51wqqb6$CB``v2GP76d<{F07RSA$OC?xMW6ehoxZig^F_R-aO*UI`o@rQfP) z;vls}eBf21TYd5S3i5iRaj~XE|MU_o?%-~-T;^bFd-e@=y`N9w|56G5>HLC~>YuKI zVC(2(Qrp@`_0*^&MU9&Ic&?tjXJ!mh_wOfPYPd#nnh`$>(M*n{WtF~e?qHsKTuzG{ zp|<-@Yt-YsO+$5`AAeU(n{r-l8*{LPvh1HP!E*kq`R(YSw(Q;(HM%@r!?l-7%F6uS zN}lT?r%hd|mPOh&rBoq-w12t;!SV}MFTu7W*s_0KyV92T_`^P8H5qKZY#o2TXa4@O z!IluI+H$^2R-b5G0L%g#7O?bZDH z;}?6Llc#2Vq~TtWBk8@MVRBR+%X6dTh{LabDba@S)fRhhHqVWhr+yQy9swtj_L`g~ z_1S+MDJ&?%6C8OeE9uTx)w31bqBWZ}+*|T|8*i&UmvrV-&QYxN1%1?!$BrcR9C|id zJ!+rqrQzO|bE(j%$23cuJVUL6cYnjEN1pGys~YY-Ig-vA@5|BpKrjErX?4rBRcf^5 zoEm*}R*m!ywWNiCv%&tC)RI0CNE_8pP3t*b;~xPGdqLfA=g|8o=f;NuHTfjwQ_eki z^y<_X(B~+nZ<3?-DuWSikW0S?=Xm9;Ywo9xmVOIUYolV0x|M0I)gDed_LVJ{j+Bq( zT%>5b9L+~xqKs80MyU}yKG-?FDSpA}OL+;`FL;V0NArfOHGV3a=gQ@@VA1%C8t&L1 zrm}WF^$4D_$x|Qc$ou=<-6%_yoc5|iZSCCxqrO3bBZZBErU%m4ID)O?ra|Lxr=tQ# z56k7FN_9`O{8*dpj?vsDxh%PXWm(Rw%&esP81?A6^?|y7Q`W0(BiLxOSzs$`0(JV~ zGwKpO(Pt}Xdp=)1v%iT*Nqh6K+D9D5uj(mjjw^TqB$v4Y$AXe}2QBf}KcoelFIaxT zatStH5zdIp+7_(hx%=|k#6VdxhvONNG?wLF9HT}{%hj>jks39696g?riycn|mHvHq$+Z@#D2!C&2ui48QIUas9*f%>bnU9IPOJJhJlbu}suL<0j+Ng#SI5WN+M zdTDtsQeMYA>|dql3Jvs=v(dLJX)I#-u{3GqrtF!GpKG{SIlsl|+y9v6dt9CR@(sLg zBey1LiCXd!-p}ycxpI__NLg>Nv`6-;d$k00pzL3Z0Z;JdWp^d1QCqYUW$Jpg5+$nF zLha$$zGN+owGGw|SljsX77;9$f5$rhnUek|7rZGG=;8k9cJM#3c3Hb;r4M!l{QZ6{ zSUt0zpY@Jg10$_J@9%^4NdJy?{Lii-*2Y;~{nLBle|8PAdSP|-PuI}DV;%q53%Gg= zj1GhK7XR;Rh_xKHr~lK2{`dXC>V?(SKV3ur@AmJ%qxAodb^ND>{`WTd@9iW09sBp+ zv5xN6Qnd6XzR@Vw`zNcCR9-;WMGtF9y1vZrRM*Vt@o z+hU%}k*{1?8jD)>QZ}iO2qC7viwTl!7q)=>zKGujj{%)*X#!tsA(;3<5`S6AG_Pw4o~r#$!S+Et4pw4 zN&-1Y;lExyF3-2Si@KH4-OG-0+Acv|_S)C#J&IrVtI?T230PTTaTogudD$5uYE81} z??208_dM7$hXj*aYvwHV9{0)!HHya5`d)GgzRXge*|4;(6V$Dgo^L7hWlU6;Wp&T$ zAXvn-PPKt_a@H`kkeZ2QtwKxPE^Zs{0Viw{qxoR zd+13G_oBSSgtlrs?Q$3Ib<1g=;F+BAwDkN_YQ6k~tyG@avHP|Qu(y;uMK`hcm58EU zDbW`;HRtgo)P4R(u#J z#O6!tsqX2RKo9)qTgiIh^Jml^iRJfK>*_H)<5ODL2k5VqyP?6-*b&dxacT$tQ-fUN ztRJ6yLcJUR_xrl5!__llGLCqqRIfzx+o{{dvxRK3@Uu zXD^n^ytPwXQ#!gp{g?PN?$#ZQCEGmd{k{ zKq{${vozn{KpiL%+ak6dtX_iEsg%pXKa?d{8q1m0mGtyW*+)`c9sO_XYSaXEe+<;B zQ5^QUa&A0>?}C+Re<$^r=lYUtN$wNw{z7FV_?8f{34CSchM@;YV(Mk7)URm*9tHLo)nV7Y6)2BS*Z#FQ`vmM_DnB))2WnR`qEN~CcUBN%(k4hPIjE1>#z1^ z_X5wS|8FAJ+p;&x*jr}OC{o$`?A-`;$Wz&TM*{PG93+=uQx^tuk=|r8$oXBrg|}_wNV>15yy?lV z2ibi+sh*Xoi!lOKA}LMTj%NaQ-`G2HS%Fer#62x#A6>`T%<_lrU`vc8>f4ZPiQ2f& zrL66t(dr$W3Va5eD(6!FI}K-(qy3B3Yq0NLSGVIWM9O+Q2cp?+)OV)`U)6ASdD*+8 z)we5iG1^q_^h#eIc;u^tNy-c^!8q;SF{-vZFO8F_W zHC7wJ>aPUv(JE^ji+U2lo$rM`$TQ*p&eTCZiV}2t8-^vVnO>HGC zmtgIM)$UP2eILCrUX6mSmu)YrNmje8#@TvVy_{&OmRYL%m4Bh`gO#9ax!O~+b!>`N z+wQJJwJ&k&)%n;|_RYZafiH~M7R_m|9)nW(KKO6TcW)B!e~K50rx~U4d{VSkj{bbv zKc6b)QYPn;v_UNkiv|b2mSAZW9n|?u=vkE>s%0 ztAklDs#EV{sxoRR>a30mE@8}|v_F<#`6FsiJr;ejGJ0T3jE_>69Tdog)duSif~CD^ zSJx(;ag?%1XB;Jx?)oXw`?!OvM9ElUk6e?|`AA7Sa6FPt{jzH=>_lgy;l}VrT_2m!rouOa~1M> zix8cVqZNow%aN4xc{%F&vijb?<*d41X@4m1{eO#*k+MasEOoA_dpdTh`jrOTa@TZq zsSEkq5~$dU9MM;XICjka+S=Pu>U zr0fsr8(Bdb<#EzFLgYw#BBm@MeOaQ+Hx*?z$Wy1GZ;F*8_60KgLTdqXvB*=$U|Ho1 z+w>*%Tze9CNK@shtW?t4SgDkwhkZ*ceLIpNFCl%YtVGgR&dS%-(pSz(bbhzGwwr;` z;ZUQ7bIQxIuZcPY%2z){JyxY>kV@^cu@t+D%|=!1_+ZCATXu1Vx-Vaxs+Q%|K*V~u z@A3V)PcBtstXHY4&A0-pE2ni^jq3n8x)2y?NwuM*y);5AGKSpHP)V`R;O$SYilR%Y76TSh}f6e&!8VtzQShh zo_%@Gj(|v)x;E*1Kc&U8sliGWtSrIWJ-DFJ)3avgUyl$M?IvD&g{o>Y&3W`S=@I|kky zIEyc&l_g65_ILEsx3o$REPYF>MAEmkO2oEO+N(<1IGm4)6{MRpNm7{xkM|B-+y$j0J?`GM0*|~et47G;X zS&~f+c79vU&XQ`0b+73F-%?l?$a%K!0fz|H~E(^92Huq7s8 zq_4C!X<4P+voyZ5ItG!>6;<;2R}7q27aqVbB+GR#U1=&gvq)co->H?SHpa+p)*t5k zsjqr`oM^6&ea<0L%5v!*&hzpT@i;0L%TXt{x{geYw3PW+e=1$wDK*LJCHft89jvYW z9yqqzNd5JH+h?<@@~tMd)<&hM(Ww|U`aV^SJ_uZu2V2{zXVf-+<+9qIm%O32oGOfN zl+u&HUS+NL<7{)*izEivX^#gxaD&FWyb}kPExo0?pSr7 zw+Xa^CV~0bh=R4Dp9t ziqh9L!Wcw30zM6l9gn_(_bB8NG_z{B&2rSb9o}bcg6A-Cep*VOW{x9?a##6|!=5Vdxt zV^BG3^j)T&ncNt|Df!*U=;o|k7M3R6Wx61zeT*}mvh1fT)%CJ7opcsb&P>71Ldyd^ zX2ewW?DsYHxw6DALNxD$_RAwCUw8DlD@H9%_Xmkx-4snF0@4D zPOr2b)$(>oHK}aJ$5>X0jQMKL(p05iyNo;5N^fDrdT+?fvf5?+>5psi>{y=4#t}US zt7T?oVQEIZcc|pd(mo4}S$AU`p|rX?7>g=rFlkh(^cK<;fzm6_L?63X?w_B=b|_`8 z!PATfa#{2|&r#_J=Nx!bB213%qc%)()DznlFGnB#mv*n@R|n&RM0x5nD5fa77mFLprb-Z{=U7`@{$dc2taD2GsXhf{q)>RWABM?cWDy7yo2FCJtQIkrovHiw+ICjm%o(8e`*fXj>UxK~!v?%cQQ|CY= zwK`=FN^L{w>!jX7Y1yn#l*T#v^0t+1(QpmrXg2nY(i4tCf6!D;)1v2ZEk~>svs@at zQQH;kk&2B4roUh~4dG>!`C_Jy+xfuA)Z- zatXG?zb5lsPkD>Nutmx-$VOjZVT`WqnK2mW^p)phb;a`Qh*qp@`Nk#c62V4&(tW9c zaxUyzob}@or5bLSJheD*7GEwM&vM_+u3VqSxLtYP7>;}E%Gq8Thk2xN4VM*2V>z=Z z*gDQ5zftmf|9*ZO1AXF?7?&ueVryelS?|ckr!0*{F;Y3??R^CI4wWqmHkGYI#Cny| zpD0vogG~*#y??&MXxynBFV_YeDX=3-dQzyAO8Si%<(#|{y~=Cy5^TL=(f*XDn}Y&d z^fit$Wm#!N_J+KK4(GwQ{;=%P>-g0iIql+Lb!{w{7Wn-arC(!fi$;&RNM3@?$JQ1d zxaTW9>rnbhokbl1TrI9vD4RW*?zs#dV!A79coj_#| zN=J%v{5~7F=6nL@BV`?>fpb8+e6`=0)=9lWJN=28#804VvHaLnwl?Ztoy`i4Vk8x^rSzWR8g8eY^X|ai1r4sZzLL|}_28p8D!%#C`IKiE z(%Y#@+t`A3ptSZ;(|GQPylgRkJ5Y&c2h!S);<@kSsnXfyj2u;CeD$LoN#DRIOH9Rl z%2ak9WLN%KS2f%fC6~Yz2Ai)pdRFBQ!R8if>+~W&rETOQ^52ie^@1{@Xd74}70*qT zvu=Tv=YEmbF(7cqS{pcvv$7N*7p2TS17|hqdjF2Rtn`M4QZKA5(iO9^4yhkkjvjV) zVLfKBXIauY<###fNf;?8xv=xrjQ;9a{sBgZN`JK`P^x`X)U(FQKr{$#O(|ao+;vf+ zh(Od6_v@58nEIuLqtaC*S2zdbNjWmFP|w)XIawKjO7)^d?yegDvSlBt^Ra!j0B3fk z^pCAq=L@zDDL<3EHddz{16OE+anDlO%9=Fwcc{8!zbT`oX^50xVq@dFzkg5b?=Qhd z_0m%<<@$sDmY%c+Q=KZcFy;FhX%8yP{_w1NRLpryoiAA098q0@wNq)Ivumqb@)jM&6{&KR z9eYtNGdn}DcaQ#R8hdv}dJ{%@`$_s`JSAddB=+8e`s<23_aXlK2+wWeD5t^y{GfF;^9fo3{T-dn4m|(|1aS= zjV2jtHK|aiNrPb;8w}TEzz9tijMUhnLF0r*jT=U5JTOM%gK?TX7_X@V?V7sKp~;7h zH3hJVrao+{X$YHX3gP3L#;}d1DeRrZ?QI=>zv``oeRXe(;K>KWeNR^4wL;K*ZM|&;6_!g!no{ zpP(6x_y**;o0=hrZ$X~>RWlUvZHRw=z!xE=5Ou{5N34T9r{_l^4uPm2el%hu#8J+V zK^z59SNu4{F%bKjFGd^(QDgiB#0ik+%=|>eBE&NpeiE$3PeDo|ys#Mu!0h@Xep0eLQ;Ux2tCv0No@?-n5jTK5*N|U|xDn*JLVg+I#~}7E{v93O*@D=={7S^lAkQ`DS0io#d9EeD z25~EhYdwA);>RKOKEEDuTZobi8=+0u1k;65m?3P2nZg##lLc{R6Sl&Kgl({nupK@u zl)<{fF3j@?#CnC@u!XP(wiNcl$A$fv+6MAmTj2m~Cmcjddx$$XLOJXzRKQ-sQP^8J z2A>vAz~_XMn6p2`m#0D{94MSd%JUF!83||M5TOdbC7g$|gbQ%Ca1qWGF2lElYRo?m z^4wzK8eAe=hf9SU@IB!cTrS+kJS!m2trzaX4Z=ORQK*3*3J>5WL8HM@4{_uQ0<07$ ztP*ta2O$KW7sB8rAp%|%3^0$FU~>`;JCaz~nZ&~`#0m61z#j~ID|OiOT-O_5)T|ke6Wb*p@c6(o*O~xz>%ab97Xcs7*YVolKSvf z(hyE2g>VXK3|}Wr;Z)KbzCl{TX{0rLle9se(;;e=w1aa<2RN5>f^U;9a31Lf=acSm zDd_>1lb&z|=?zzsKJb0g7p@`wklR{_x+VSLM`R!@C4=C{WH9`k41qhyP*_Ha;7&3e z?jj@M7i2WtN5;Uf$vAj`6vJ=G1bC24gym!sJWQs*3NjUbN2bA(WIC)QGvW7S7CcQ# z;5jlER*`w|SF!-!B@3aBE{1x#6o$}cFqAHbwdhKiNLRxox&|iGbufjlhpBWUtW7t; zG+GL+bThQkEijXAg^$o}FrRKmZPbG}>S-C`MSD zXAz%=xMxkP5dQ-49Tq*0_$I{jOnL!owHKjIdl~Ar)tDLrQA^ruFid+LhHG!Y2<v(Y%H`q>Y8;+IV$@bRK*$ zbO9U|x)2tHE{4NHm%hgzkq&Ll3~yp$FmF z&~kV#v;tOz9)&-I9)ssYPrx5TPr?hKmGDyNX?QvGEW8q01%C-W4{wBCfHk2PVMN$v zm=jhFJz>{io3QI}a@Y;D$te)q5_SvmRLFD7!fqpe52780-9@|tq8*0aL%a%Ni^6IU zmqCmz!ydq|!ZdhW^6M}G9tflGP?!#uhlRkyVPUW$ECL=0Gr*%^CirbwH2f|s7M=`? zho{2K@OGF5-U&;D_rj9l{jgLRAD#vi!fntTo&mGNv!FfP4jti6*f`t`n}mB{^Kc(* z5uOM8hS!15hS!Dt!t>$y@B&yIULU?1-VjaH}jOYt}5&d9pM1NQ( zVjz4tVi4>QF&K7?7y>&*423U76u}`8!{M-qk+3LYG%Sf21Ls7HgL5N_;f9C_aAU+o z_))|pSQ;?}9*UR>%Oj@2!x7VAb;L|~HDVUL9#H~+iI@u`BIm)#$OX_4xe#VWE{55W zOQADz8FWQ1hs`5b!WNOMVav!huutSV_)O$_*e`M;d@gbmEQu_Ib0Rmxd68S-{K&0v zb>ueqe&lwzCbA5!joby-Mec^Bk$d3Bk$d5%k^AA+$OG`R$b)cOWI6mivI1_8JPN;v zJO+11o`44;Pr`2^E8*eD)374)EIblf1&>Cahu=nCfX5;)!c&o#VP#}Byc>B9{uX&1 z)NsXAraO!B*RAxsW9J=1{)Y`u%SVEm#2pz3qEDA z!`=obeA?iKLku4HlEDXu8uH*ULmgOTs0+s$^5Hl`0i0l{4_`GjgcA*g@HInYILXiy zPBt`$(+n-)n}*hKj-d^lYiI`-7&^dr44vRYLl?Nn&YUfPq@O+8-8Hu z1J@h+!cB&L@FPQiSZWvuKQ;`4n+=2ECx#(#n_(#Y+)xC+GYp3(4I|_4@KNJNSl_q_HZqpNLgQxG z-na#JFm8n%joV-+<968DSO$9SVW2}T@ji=!_<5@V~SOtrX=izI{3viP0B3x#?4BsEMh(SC*eJmLMhd?+>fixm2>iwv z1}lsa@QBd>uNzJ97h^QMWsHTt8si}~nW5HXfjUzn)SHrFh$$6DnbKgi$p+(188E?= z1F}^=Caf^cf=5gxu+lUaes7uw z&zTm$D$_#vgK055Z(0g}G%bS{Ov~XF(@I!vS`BZR*1%s)>)>yu_3)l)BfM|g1ZzyC z@ORT@_`tLU(x|Oa8?_BaMs0_Ns4{4b+6C=VyP+d$4|GTEg*j3CVauokuvOGS*gC2l z4v4CN1EY?@7ov{A!BHpRqNtN_aa1K-5_KAW7IhYGi>iX#qt3%GqAtLSsEhD))Ma=j zsv2sdufg!>>o6($2F!}S1%1)C;X~1PVSe;I_;_>;Y#aRmc8S(#(JG<^*dv<4UeP+( zKRN^sj1GfE(GhTXv;mHdHo@ZPXgE1K7EXzdhi^rj;p}J&oD-c0--}L$r=wHhndmfl zHrfWOqBG#l=qz|E+75q>cEa1yZg?l!1AmM5!TZs9@b~CCTD<28(eK67h2b&zFg2zC z){dzU(_{$Jf<=15z`bt8`B*2i)jg;i)jt}$FzY1W7@$%F&&We3lJ?lrV|_+ z(*?d7(+y6H=?-6u=>cDl=?SOC^oBEI`oOnh`oj4!{osO_{%}joK)5ev5WE&M81k`0 zAc-9cV`7V7O6+i$8aom`96K7;jU59Yi5&;?V~b(q*a@&@>_pfqb`nb18saP&I|Yu2 zor;u^5G^Ej8vH1BIxLNy3Ae<~f}h5g!0oYf;f~mOuq<`~+!?zN?uuOuzldE5&&Do8 zZs#D*N3qM{wb+&LcI;|+Cw2|I8@mqv7P}tai`@wC$8Lf(v8C|$*v;@k>=wwyZH1b+ zZIHxmhx)iO7!tP&8sc`t__#eVA#N`;$L)t=+yR&pcMzt=mBZR`6)-LCD73~MgSNO6 zFe~mP%#N#s567K`E#uC@PH|PRbKH5@JMIE}I_@HTG43)P5?2jhin|7j;&=A&7D1;3X z8pAdTO<~)F=CEBtOV}}?HSCno23yw|;)!uWJ9sIf1H6{d3I3eW1^$xI4b~)dht%8y zMw)xV7;|qZn)|@o=Dsk?+z-0V{b8Y=5df0i=j@O0QKTTm?TbuwZ$ngO`Hl{;xy zEQNi<&9J|?1->Y5g+s(`aD=!Wjugw_C~+4YE$)V|hFNhjFT7@XU+aiT`L>;^iR#*0D5(k6EPe zRvKHH!={#&u$iSbY+-2wAGfrF9V{JSFH0x*jHL@4VCe>5uylvxEj?hdr6+vF(i={& z^ntHh`sy{@M2NG7r5~JT=?|w{2EsX(L2#aBFkE680^hR?h085P@B_dUi50L{;!)T;@fdtM@dW1S12K+DJPBV+tb{`nPs5iI z&%&XJRhVZO#L<^{9+oFwfX5Oq!px-0Fe|AVK9Y0|<|kc;t&?uR$CGZsCz5W%?n!sy zu%vsiD5(a%k@NsgOVWg3&nDqtxpQ-qC|sGOgBy}U;Krmd_(@U(+@55ByOT`tU{W+Z zloSiEC&j}XNoIIE$pY^sB|@5<47JIrFflm|rYGBAPI3nHBxk|q$#&Q_*%^YmN_HcD zGT8%rB>Ui?29~6ZgY!~~ z;rx^da9PSkxG7~4{48Y(>SPRgzUIuF)M zT>zg;T?mJyE{5Y%m%^E;%iz+~<#1K%O1LR?H9U~I23Dr7gSS)H!-(1&VXfMmpu2V{ zY*2eMY*Bj)Y+HLP>{@#p>|1*~98|juj;Os0PN}^czFvC|Tu^&2Tw8lT{G#>&n4ESH zrlgfaTUrIoN;?W&X~$sQv=i`=w39GDtrFHxI}ID8orMk4s$iqE^RO`O0&JXi5jIJ? z44bA^!{%w%V2iZta9G+6Sd?}P4o|xci_`AHSJLjm328O(owNsVZJH(&Z6-~C>(eOQ zlBR>7riH+*X<=|@S_IsiW(d`A`yg6Qnh9P=i-s4|V&SEcbjWSo7dYYaO`CS{JUj=EDuv z0=UsyAAV?U2zOWuVVSit+-YqJk6W9=6V{gSJ8Ns?`MtFbyku>Ml*vVL!iYr z6xOm8LAPx<9Az5`i*2LfMB5lR*)|SNu@%GDZ4=;B+eG-LZ4#Vmn*wLsros~2G&sjL z9WJrWgv)HR;Cr?bxXLycuCdL7AJ`Va4Yq}Fqir$#(6$tQY+D95+m^$vww3U6+iJMe zwg&F9t%G0K*28aX8)1cQ6Fg!og-30h;kULe@O#@F1#_{Q@+lUxd-=mtjnLHB3pr22<0o!`kULpf&v#w58vM+39y-PWnBVpI!s& zr9Xg8(=}ljQKSp7MLLC@({->1l9(x($Avo&n3#vtUKK9Ue({!lUVKcsAVw&!zidReB!0 znqCK9ORo!mPS1xo(+l9Q>Gk35^oHlUB5am9 z3AW0d0{di6g#$CE!RIrl!y%b7;Y*pb;P}iE_)6wnI3aT$oRYZ!uE|^ow`MMepJgtE zpJy(E+cTHL{h2G_fy~wLo6I%vQ06-LQ|5YjHFG1(&)Nj*WtGChtj(}p))v?+Yb)%X zwG9r-+78EOmBBZ%c7mWRwRSqk%D&Uo@qp(}{G5AFG3D`aRB%GXG3181X4d2W@3uk0k!8zII;lk_-a8dR} zxH$VVT#{W4mu6psE3&V{wb?h|y6jtUQ}%7RIr}dBB>NuxEV~A7%YFbq&(?%vKV}Q? z>ud@SWb5EJ*&(nZI}BE4N5Jp14e)ff37*N0hUcg z;V<@C@P@qv{$`&G@7d?U`}PHpcPxa0V=*L-rI0$7L9Jss)HzndILB%j?^pwq9qVAa zV?E4pY=oJPO)$$*3f+#)Fvqb4)^luy1&(d7p<_F2Fy5I4txg-vaAx3lb~7RB%9#Z_JMHjErxW&Yy5Un!5A5mm!CuZh*xOkL_IK8W z1DyGAptArz@2n4pIvc`a&O%t^Yz#*^o5In~=I~$6mhcs4YdFE#2EO5J2j6mbfU}&P z;B03XxXRfLu6A~Z?>l?IHO`)Jt+O}EybfX{>FfhPb@qi@o&DerXMgymb0FN~90b2| z4u*T3L*PE=P`KY&1P?if!*b_H_^op^Jmwq&k2}Y~6V77zopS;_>6{2pIVZtN=M?z8 zb1FRToCbe#PKUoaXTp2VSuoL60@GY`q181HI$R5&)3p%hx)#Gc*HW18S_bR6mcs(q zO8BU2HGIsq1~zuBgUwy*VGGwr*wVELwsn=lcCO8^y=x2X;@S#(xVFJQuI=y{R~a1W z+64!>cEh2rJ#d6;FC6LG4_|Q|fD>E?;j6B4IMG!BUw0jaQ(ed44A%)b-*pl$a8<&E zuG4Ul>nwcFRR!0$&cn5?3viw5BK*j88J4=L;m59PaI@<={KRzwZgJg$pSo_tt**PU z%ykd$bk)FJt_Sc7mj=Iazt1JW{Voc>cIjZbD+C^Pg~19}1U%w0z@sh`{MHo>Pr72^ zDOWtKbeZAzE(<*EN`z-z$?&Wz6`psc!5>{Vc+Hgoue-9~4VNAM>T<&SE;p=kdEoCZ zAAI1-gIaeTsB_naq3(Pb<}QHY?)oss-4MpQ3!%l`7}jz(g;sZSXmhuO4tHzlb+>^& zcRToqy93O3cY^iYU0{K`8+_E=9X4_IfKA;!;p6V!u#LM9?CkCfySV$oZtniDr+Xmm z_fXj1T?7ZXhr@yHk??u299-)gX7%A@KyH&xX?WjzU!U@ zm$|3F_uW(Bhwf=`lY2V+$UPI5x@W;H?h^Q^doJASo(Ffh7r-+2Lb%ht818c~h5Oyh z;MeZu@PK zLm{UOCgkjb$vL}WO3of=%h?MZIs0L5&H?yP&Oum^Qx5CrRKVUjN8!^s$KZ20Ct&}a zlW=rSCHz;;X*ee5ES#KE1*hbkhp*>cfHQI~!kIaj;oCXYa9++exIE`NT#<7FuFbgx z*X7)Xn{w{LPjl|U9XU0yEaw6IGDl-T50)dq<2e+b&e6d$IU(@JoG^GLCjwUI7~n5C zCU_$!8s5x_g?Dq};cq!+D0nO|%##SiJ;^Y_lM3TJX)w`agGrtYnC!`dDIPn_@HkKO&k*>AXDFQIDT1>-!{OVWk#LD;G+gQ#16O#)!Ihq3 zxXv>He&Cr1*Lx_?!b_fI@Umw)yy962t39jXRnHoD&9e^P@T`ZNcO%qzH$mQ83I*?GNW5Dh z^=^e)?=~3X-3}AHWzg*11x4>}nCRUDle~MO)w>_sya!;W_aJn7%c09#0o~rC(Ca-0 zecltWuJ zy}Y+zZ|`l`&wCd>=e-B}du!kT?*sUvSA*Yj9^w_?a4&@;ygE428v;jp!{BId1RU=* zz+$fnzT%CB6TGo-iZ>pLk;HTcYaH}^T?(`PGUEcce3vWZX+gk|tdmF>Ay-nd^ zZ*y4TZ3$0#Tf<6k8~DAq9lYS}0Dtm!f)~AA;5BbI__Mb=yzT7)?|6H{yWZaLH*X(! z&)XN?_x6JtUw;_p8wkUF(*K@_@(qU3z9BHiHx$PDieQ{?IE?p=gbBXUFv&LtCi})g ztFIW^d=p@{Zz8n&CP9a93UvCWLXU46^!lblpKm5?;F|>-`buD9-(1+lHxD-TEr9KO z3t@ZTV%WjA6n671gHQOD!)JXfVL#t$_?&MIe8IO44)(2wFZwpZVZKdpq^}f?@@
    RFZd?(;;-%0qTuM!^cord4|&ccJfDtO3u9+vwqz{9?au)=p49`RMfqrPkK zTi zE;j?N&CP=Aa_#VgTqj(g>&84AAkI^{9=I#l2fxbAgZpypVCsH|cAi@o9?Z>$mAM7* z``r5QbZ$dkwzL+?I%MK-?qEZ4H0TZ3A!TwuA9`9iTa{ z6SU-Yfr)wD;F7%V@ZG!~a9LhYxH7Ld@>vCO1(7FxEB-#j*5&m@ycXh^&Fcq0%j*yK zLO0@P7q!bUsb0_>I;}gvc{5kPANXv0s zLOHHpILAGPzgGC`h`)rk97o!7+}i^C)7A?i9X?l_E2De!3D_xMyZ4Q6jg-pO(z+_D5-4 zf`4iTr}0Nw+>`}Mes<2{kDOetKXP+5JC&&(ZrppEyfz>Afj`RQt__f;YK6MoTfL<9 zYK45RS}v(pDB!N(%U~(3KKGqJYREaeEAtg{)4C~9W3KQEC6}h$uU;i;&Mm{&kkYa( zxoLZpTv~JU{ZSh(6u%58O>M^=D^YUkz-7O$M4h-ef7FG0N3LfBB|ycK>|Sx%vM5W^xz(^UdN4{rQz}3;grV z<+cn`>U17A*1z5b+;RVW3pp!Vx>S>kxheknmU55z=Uc`t^3S)NyXwzxC0Fh*-)e5N zf4yrslYhQ-Tuc9a>v1Ml>Te^L;m>aqSL~m!l&kR1x0yTOU+)&YudbA3D|g*L-!?Aa zU%u_!LjQbaTo31=H~NC6t9^$SIOC; zneUI1H3OSVX`GO%8UKbfA19<~Hh7fCrkU)IGBhEprLu5BmgfE{C9-SM{b^3kr~Wjz z<|{dROjDp~vjU@UZWXa|d(1oFSLQ=-ulW$Qa{J6@;C}NNt(E)Qd?wV&9WdkJB=?Ou z1s*gvfQQWEVYzt+JZ%0MR+tmQt=tjw!|7*vv~)+ zZr+h+#d}yg>R7oO=C9yQ^Kp2~{1g1uj0dgUZL=QUG3)DDxx3~B_?tNe-ZL+O_su(C zjhQR3a=)8Lzz62ZkP~M>jd%$1;u$E2XBt{LBI+AiIVw(uT5$%{iHD$G{27LbKNniL zQ1R!+RxV7`H?eZzVgig1Ghw8d*}}>h#8uEJ{sc{;zNM9m67{XDT(oF}F=7IY6%$%p zxi~SQjg^ZRGhu?5+1ARL#fPCNHiH(iSywApOKb}h#ThV3JOqc_8BBsDpF%#An zGoP^H9kk4+t(;YS7}~^UFkS2lGsL%Hrug;%E0-lMf!X4c7p$CJOc-qC9Aa1K6h}ap zI2pRduV9Y&)r(fVzjhpY#WT<+>W5hI{#pXe6C1#X#I~@G*b6=^&VY5r8AVpS-F67( zi-%sea`nW7;a09dd>B3|_JZ}r7hwbOC)iND0~?8VMp(H*F=3>YdrZuPjm3vy6LCCj zDo%#Y#L1(qTyybl*g{+aTZ$WCD{;eEE7w}wFwTm%=b9B;xi(^3*jDTX+lep2_TqTh zL7V|QiZfoZ;@!GKu(Nm^b`jf7u;SgiuCSZfb*hznLVON(7oVGD#d~%?!5(7fY%AWg z>jis?z23HRy~JMgtXyxg*L*AYv^XC25yvmGa?gm9VPEk$d{#XEu9fR2wq0iBo)ce$ z{lyJ%fVcw=6nDI5<(?OJthI83#2p)~+zbDUvNwTpZA%aG&YQ}HFgS4njtJ0B-VG3k z7oAxGWBZI%dbg^iC#ml6GMrYGbZ^PGs#Gnh-o5uRwau`CW55Pun;~GpF}4}p44xR< z*kBXeVTj4jz(gZ^C{d=ELQq_H~Rr_d9XP< zgYT1EKhgT+pL^R_wv6w8+gP=Xzw)-RZhbM=o7R_c{h;-T>+{y5A9))szwhAsvh^vh zAGSXAqi>_-_o*Ly+xQKwpWyl%Tc6?jn_8da`kPyy`>D5$PqseyGjAJT*ZMryuWz;g z{@Z8*4!Hi-*5Dt!ZTz;@$GQIY*2n+p+h_%T{GYvzR^T^r{T;3E;Q9@%PjUUvT0g<{ z8(W{@`a4^n`R8vNzpM3GuD`qW1+L%J`r?1_w(-raFXQ@qTECL(?`=Ke`Yo;R;QISo zpXU0ltxp^GjBjgw8ZQao-ugRSe}C(n7pvv1uq{$T6#T>nt(^FQYvdWfI@`S*-J z-1?GVaL@Q7t&eg2j#h{3A8mDh;XU*dKhE`!x30N6^;xceqJ<)Z z@!c&H8I12~p~zr-Z|h6A{>j$Ixc;eDo9mx$eGS(?)4JyReXZ+Xa?kiw>yupnZ0nQ1 z^d1_H-_G^Vx4!I`-823|tHbsCTL)Z!p!MBcf3WovTz{zbcews=>)@B)GyY<0!1XV+ zKF;+ow?6){d+0@8bN#EW&vX52tuJu>bj$eid&ZBnzKrW%Z?(DpXsi9J?ioMU`Wmi( zqxChv`kwJOTLZ2?-Wr(q(4G7yu79ibCDuK3Cl9#(Wa|;vpK3kw?ioMb`V80qs`Z&) zbI!399dP|0TaUPYwsp?+AGWT! z{-f6Qd-sh0sdYWMXZ+8tPjdZVTHns~e+BZ~Lv!rH41JU&1)RDYlN zN9>LKy;)@$Klnq2@ufdmWo(vx^;f{D%KtXY=3l4Vlj6;?qc7iG_GzB?y^pIhxmQx} zqkC!?6spt*D)oQ7m0(Z(^;lE?7Hp}%%lM~+|Ld*qGyZSF7vB1Q>j#W~ z@z#$U|1aTRzV)|_|L-kOlD&UuyheC^?+eBodq4Bqn|q&o?XA6k{Mz2$KY8to_CEjG z7ZZLC;pguCpRfHZd;jvapSSn(UjO-oUw~coFWmb@uYbwjSG@kO?gg*^YkOC(f9c-h z^?!Zu`Ro4%;TI8p@!pHqzijV^U;j7v{_g9oz3`1+Lio1`zm)LH_730p<%EwBzMSxH z6aF2-+k|_Bf0ytp2)~l>s|f!d;VTILKH*mr-XZ)4gf_t>SOlBk5L|*s@ChA4m+)%{ zzn1WogkMMas=f0!zMAkggn$t4eZw2k-Z#Dx?|t(d$=2I3r96Gr|+XQ^Gl6PWW2FGr|Sol5j;> z5UvTI*!$@>mwSKj&DGu)-dq!I2p@Oucqm+&ow-$(dX z!nYB=o$&h!e}M1@34e(2pA-Ht;g1l$gYZWQe{3&!>yPgpy!D-XgSY+*!guZcWKJhY5d? z@RtaGnebN#f0gjp2%jeW2;r|2ew6TIgug-fn}i=H`~=}|5&lcUPZEA=Z@G75aBPFo zSJ#ocew(^}^J`xU7vq~>`?=&pk1W|NZs(uQ!Y@!b6Dqi;f1F)o!;9%M9$K z9mQ71@e?aGtt3fo-*>t}H?i8D({%#ZHL2KNK7A)#++3Z#j3%q~#q6D6b!EQu$dxv{ zj%x>2WLs7k2C*B4ai`-&UOTYK2%|Ki@sx^#jLT@YP8Lu4S46W}9vOxGM`mW4X4{Al zv*U5FpIO9{tFz_H>-Btbl|=iC)!KF%nPpZG*pZW@VLNdA!0dQ&6t&%`YkF-nwJo<3 znu$ZQZFIb_op#(HGVRdqq@7Njq-oqqV=qbCUDvTYVYib~@p|#x%J>~7gZDFAVgtD( zFRo|H`Q_|tJ-Lwd+4;@YGk)X4(fsMvY$?(4;phW?my_xI1;1G~T2I#VvtYTLyzE`g z*W;Jhv(fy+*{?G#+V2gLqu3^PJXy=n?bRt91&5=6U(+|e(2M+_orY=KkK;IO+ezY? zaU6tg)3Up5KA4KG8%9y&*k;GE+fF--1(CNCNmBx=|pL_-FDK%i^5LF?^t|{7urnpuI;uB+qdYP z)ah6O(>I7yx09sp$TkBn=!A*Q*QT9-in^DGjE6z*Fd1fg_?TzL!R6#^IKQ49#gZDX zCNd!=>zn25;e35wl_ZfAH1o#G$^2rrtSZIxr?b_%N-v+Bxu)qb<18+;Kc8l&7n5f* z>r_&!OKU}=*>j$hEib2e-b}BaM)twvgUN+^Jz1@!5_3*|yf_K{)OR{&$Mqf0vBGxP zv7E3QwL78hc~RH10-K7rPfiMb(+RpxYIoXh!s-jWsNGJx0qu3V%(@^*uJE@(fQ75(on`P)1T~5ShF2^0q^c>d;%)m_SDD(r?t`i3d zS2GRmHV-%aC{2AvD`I_jJ7&9U`du@MLjVeMR;qeTVJeP><3V90gG}Ita|H z$PSW`X?3#bs96?uUEB3MvmLu`$L{*9!fxC2!zA|GPA3Un7M~e*+XgE$2*Zx)+aW8( z=S6~U8d#nmw(_9D#I{o3wOEpV5Ls#Hd#2gxILuuuwYwcZ>;jD22=zLS zl~|r@r(WbHuG@9Hp_>qG)3-qywaqSlK-aq6Gz|i)O9w!YB@1C5Kx<>_?7fLvUk^TXo1%}gcq?Nh}5QZrf`m8xC3LGl>-N0g7@~LD6u^)80Kycp-+djJ}FstpSE_25; zjtK0eX7yxazdstwD;OGb6DO7p*oe%;ZCj=l2SDA}asw(32qQvoHNIFqAi{2b)Jub5lARm^ zG!J|G2jeVxAbWkj$I7>mXzr|JCNI`xtIgCjSUU-C8gxTD_Bt$h6Evk0w7WnT$7J#G z@)j>+L{4aVUgC9FZ0)!m)7dfL8=!8RNf?64m>pi0-i}-VMZ!|CT)+b0E&y~n9gr7+ zCEdjJlPIO)h;ZvyP{xL78f`EPpS78=z%9q^!~zR!FK_^#z$E%P^%CFaLxLm?x^2om zKM8}R?R7(kt(<`d2zER_GzI3$Y>2_kV&+4ew$jw&gZv z3x@<@IGf&_%{)!^l!?w+YM4aH{`oxmJQ(4 zbCTF;gZ!o`Yu$HwPP^M_)01gCp*xMia&b0Wt)k_HO3bb&%h@r2Gny^euKcYIKpu1PF*88?r$!5+je<0OG?Mt(b?VoF!E z&4|eeR>YFA>@?_fx?uX2Z3AU&c55I%pAZE6hTy`H+XiGM9lx8pVV6CM3Cs;_fKHUq zVhRM>Hx-cQXRvI1#KBfhkC8h_qWi4%D7&9L&f?L2MoKmbejZFNZf4=d;_TUQHkoF@ z{Ug&joL|i*%PL*f>0OOxXX{0+OxH~p%gf0+nk@4csyiMo=j&O$*;`PJRU z^L7@-v$N$)hyvaG_FZ>Wc*UJPaJX92(d6Rn=3=s*(K%-qa~?@#G%$@26!PkNvA7sO zL=5X`)>|X(npPuicAII-avJ3T#YWn4J<^Bih-+;iNe!Nzt=tj6L7WZlN5lj}Fu@Rb zM?&Kr$MrPt*huq^jWqArNb`=3H1F6*^NyqiBhl0A0nl-Nwp^?hPt*z<&n~Z}7s>BU z-#c3kp3Psp7mZ#**1aI_?4emAF}%9arpEpZ@{U`GstJ3wcz!XPKAo|U7f+aVnXQP)~-CWWerx&x2%OYK^`O%1$sR$vV z(&$bqJMhRqo+^!m>Vva*;77{c{rz-08|^WvYzo$v$Ja*BX8{brp{aI zn5x&cih3$0_1GBldO9X~rdQrEs4Pml5?jeotC(umv~{TrrY>FU zm@4&(JO;C<*D3NC%skKR7I`|xy)wYMy=xtlJist{)w}8RiZ{|Rb)V}s>Hw;Xc2rF2 zKzWl#Os0n}UF%qO4sHOO&B&fC7Hf&f`rxY-Wu_MhlVNei&L}Xvh@HM%&mx$YWagMx zuwE|(*)omkip$yJYRx?wVB`Y+m+l)fV43u2vy01`~(-(y5(EX^C-N#B5L|x5e2U=qP8bdA^Vbx z(bM<cgMc`64qds;eyEX#q!zw>goO2OF)HOpd~FKadNh+btlzm)sbZ;pTS;Y zXA)8HUPtu?RP8lV931YeJx1ckp}HeH>__)Uz4sH9l07HM!pB_7yz#*>Nz&fvK-IXP zKycjGmG38z_o}U-`Wg05j)Ah}i%4YmrlPCVHWJCGb`43D`-UWnEkokfrXi`#Z6nXy z+&Cn=V%Tlnm^1Qr-CQf0Os7YSsZ@HgSjrE)JNdbtB}XAVtb!D`a&p@ea$9oM!l{3e znO)0Ts%J5Ui%iYdrb)0NxHQn!P{z_2mx72RI$chltg|Oirsp%L>bqW#LU{AW5doYP zy<{4cu!AXAWbb0iQ3myE8PW2LtEPR4@O`pwiP3Als}F$pl6Xd#f~_wurk_|42Ubk3 z;Fqo?5lmsi@;k|Y;Xo|mW04ak*?5ti^sXdvSWk=>Ix}4D&(=CBf8au1b~^9{y8)zikV4WyT|4v*VRE&aXD_-L(L09T zbom@=K7w;=M2H3)znw;5(oJFu_CLJH#P_10V}`IkQm+fQn~JLKN8OC5aGW6^;o$o! zVY`;66UV*LxXgyL+SQ}2D%M6{rEh;jT8-g(Koi?AM;#}y-Pq=Jx@pwq^F0^VZrk^} zZikAI6?Sa+6;bSVgBTJwactXyixUOyI11nxm@tAZwBX^0!UaHr6D6=$63cS^4x)?5 zvf!@RFn|M?BGuP*0Osg$R`^-U_L_Dw3yB+TTtXmUBbxR_5QK89bvlt?gJ$&c{W zB}FZ`R&nCM5Q^XkcYH5}Gth1$he9+F`$>>OuEVo3g23Xen{bG`emiV4 z0&&}gIR&?tiZ#xGBpO6F#fj(m$diyla0`MvkH^3*==gEeh06}7#)GhrSSke1u~Wn& z!n})_XTq0^O-7<)!{9UFlQ=N-nKH%^fj&2V8KuyKN1vF!pT;q~@W5_&Qxlesa9_NH zijm_m3<=_+wjFoiQDdM4r!nx63Apq@1S1Z99n9FPrx&vx`#1u!#nm9ZAE!VC!dc$A zM1|Vg-}=&nt(+d6E$juF1w>^dB8pJ6c5oJ0#0}0uy-q>t7hH#;Zj-Z6zoX;{6jf^( zATe+$HaQFRyNl=5ZmJjv4aUK)yY8q^V;t0EFY*w~7zn;vPcE-j8=G`GuQ5!bK7#B){~=R`P!j1fi!N_29_4dji!f&=*pYX!SUkJA z9xR@7-(yxtMYz`zW>!mB^@LqdIQ4`}qU_+3+{n`2V1%@q!s5jTlO;2s1+l6XmhT}o z%Y-ktrRpNvG*X`XBzDp7+>{*!qx;!m{~=ZC#F8YVio%wmYNSpXSpp<3_(MUn5ngGNg{)cx9{3&K8%~OZdXGX?Au# zp#&1<0?xoXPv-Owd%vcCXigBCC&J7U-2&amjIg4B)a`k!q<{o)D&BKJ0nxyU8ygf5 z%l?KbE99t9L2^${1xapB`s5XaxXCN%XaZlGW!{U)J}V-SIlL^I5I3uAIs3#73tMvL z1R;EwW1o;qiL9{-r33(=Vn;U@$kX&@AispAC|J4IxT)X12x)=)RBak-R)P1`nn z1Ve!r!o?2kAa&UN5OuQS!V&LUu@m_gd~jI&h}di)i)`5;gD$e_E^>{o<01_~qKm}U ziV^nsUF5E*9U(ud9z(p-u{xq=V1{tgBhznN2xc9`FJa(=$k?5zV$20ceY2A$cEFpkVX_O`Ao8~GEaoES59jOAdI>DeVEoBz%0;AQRI?<_MdQJe zqJSUS5^bL9IFDl~@ev=PdnSq1k0%V64 zN78EBijW4`h&CeBa$E-~zXD2ZLPY~j z0*29RcVn;kb|RqTv*pEX^1%$qY_1n%c@|=nHlKr}j{6h7*ou&dBN}n(Z9lS+1j6{Z z1GlyfbO;isYcs^58H&6fM2>!8tRiMshXLoe6Hw7?qm<;?UFL}I`F;QvY9U!cb{WIR z0kiVDNtcQbjt1IBdKyCBp)^O@;vATLFUz(miWi~QC~5wH1ZY58Dk$gg}O@zn!{Rd6;vLBZKXVojPDymzdcdCR-;*NdU7ACgr-nCmA3199{x$N4L`HZ?M z8I$#tZzQnQ+Qu2bvuR@nV~z{;+PKTsyPKVJC@$>{hJ?;&awEu_U(xGAeuB~Fd{En1 zGB!~EGD3~b!8YC-EtYHUDE0!WlJ5nQo9_jA1=#@d3OYI(9g-mso=*}O&X^JeXxlZQ zEuW%*HXk{AX&aUU>EJ`(#XwLmwNT=7LUg!nAaNHVK7bgSx$P*xhW3|3^mbxXN|Ur> z+JFg&7Zw!LocZlq$bs1g5YHm{b^-_4wt#)d=(uh4;*i-grx6vWA}og%^DNXgkTP3- zoFFeX9fKBui?(gIQG0@#McOLb11wWE67&m28_G$jI3fV5?|Mx@p;HpxMFK55z^-%PV5-3IXyS5McjY@#+A?D`h+eZZ8X8__+x@)6q!Y1LPtOS5GQ8oow zB5rmqH$}ZkD%Pa)@S5vM7+~<9=v*XRMO?8Vi-clMN{yU3DbYfi4xPV_x_gsbDU}Lt zrNnc#W7&*EcC!|Bl^SbNGD>EmBq|1?q&69dd0unLo=+qjmV*3Prh_I2>WfTZ50x#E z#3uo2TwoR54oVIv-m$0M)%O&R2;d2f0a!eP49BW}Jpm~rq3F;uRWP$Cs4=sOYQn%G zUNWCJ}U5s8a8g#B3vo$76Hrsb#semn^ zRG2ccVuy#^{tgr#5k`a#>NFr9peos&qnXDuRcXP2?%}+00<{1^59TCMWSMvlBigwBx>`Bl$vfbkBFD^ zi1=m67E*E>a!}vUe4-*le=H(4h$#!0ZG_gO#G^E^3+n zT|>0=;DJ!uE@t9_QnTU6dWaohrJ*Za$6LQ1-R5I|7_|eN;?11niT>4D{E>g z{{2^1)Soqg8}Q0D<@-NU#g9~Jt3QR2`VqSFj%u}DyrWjt)wfh?^xZ9WHoEPWT8$pN zrB2ydx0E;DMrkK+%(L2{Y!)}3zgbv5c(Y(@WEwMlA06n8H@J1C@2FcFqq~}wH{U(c zceMG@YQ_g2t=>m^Y-3bj^&w?X-&OG=Rg!LrQO?<3s~g?I$9~j$ldHwms~g;!6vcGi zc(Bx~&xbpz)kgT1T8&w7OC9yVa?Eb2R3H0Ws=TU+#)#k2Mq|C*Ql}i}Tgn?ld~2O* zbZ@Ux4eYKuxy4Gpl;tOr-780oCAx_ROJ0EoOFYMetGmeCjR)&0H9S}{DiOP+N~~BC zg@|3^6^1OS^~EZ?UOo{uElF-7%z54>!YtX9#9dOL&+>yJG5jTThds^KP`Y?&Mc zpfH<~E_7uZ7Fj?=gombwO$r^`UTiX8=dZ3B0 zR{S`H=Or5AA?!6_)4)veVH2U6EBrHXP#-oKYQ>~1JF&zv10fm4NkT)Sz-)>FJBD0F zFyt}_69EW}VQ`F^ao8Jg<)T7UWS=Svq|x~VH9RWM*Q#Y~vqXynaFWVJnm4}T03@51=A;yN_hLG=K z9OJ?u0$q1}Hwgu0#@q*97i?JYVnXb==zYVDMfU}32sFTb_@XGBqlO-nfl57=Xo-Wx z7B%B8Bs@$o3x;Y6C$B9QLofz;SO76knu;bSa^UfSjV^S;kU^p%{Y+7bhki99jBH@m zQ4yNKIN)`K9mRA3n;i&wpmqx+L{WruZ$E~;ir5EVR^ zntUL7#_DTfKpqwTj$_DLZ79)h5c8Sg>{9En8;^L*wK1U)`&j_)j@>!}8Y7-&T0QH0p67RsX z5Sqg$!sH4a0vb%2$?XJbdb}|(Mp4W#Yj~ojN4XnFd4CmUgWtpB%jCGZ;fiX(4 zJ>`33x3D$-F7iV|?5qlBig$!%j8;bR^P$&2kkf~g}S z2-mRC^$(C)_`=9{X(YkIG=-xL5P~n0C|kgUiWS+2&aw^J=o$e`FcX~&bXmkM0}e5a z2^0#tm=KwKJ)C~bJbm{L(p(zBr78Tg0Ha)4x&a;Mp_qV~qQ&F8u-Lnn8^H&64Ms1d zE7An>KF0zeDXJZ)-A3Pm|F#38&x~A5Don`q!1GNp`AI{B9%vIszksuHK3aO(-L zp72TR0#9y(g-xa2DKAL4Jes;15kO;HHu}b>sAqh z0g4k0$>7=BfJyGUol8d{_P%h2ZJ(uyr9P@(NJN1pSa`AEyT}AEgR&gQ!|f(!lR#e> z^;lBE_Tk3_W3XND80@b^<`;%ky!~-Z3qx;AyBR>6yOq$zyY4BM=hptVeMf`j`3Uu; z?UJPU2=z4`_p`a9LDYPNC%n3C>CNVM?qH=!N9u~VknK6kt*BRZ@|}&{Mn7+~2Dsf# zKX2Eo$gBo=zg2Muxw}=T`qYAC+o)20fd&2GkP;qyUi_i^i1Nq#gCMI zYvY+xxy}|SyXuy@wa&V$>h4)|OPf{a-reL!t5=T1U5zzYXE8BvdA}MX@2)nR>+y~@ ztA%(+rN)H0`>{J##Evg%AS!n?xHW%dp6zIGbL!kttu||JsnwV;x71M&EQj}&N_^(4 zs(h64a*S?yjP9gY)oM(MTUz=kZImGImNqsa$Bxlz4F4_7lpRxWp6f8Ye9z6ojjq@% zZuG%s;VT-Y>776<=WQ0RrzXbFqHb+EHWtE0vyC}Z$gPzV@~+nEv+@=7cI?$Mhc^a9`ne(ME9UWzdi721j%u~3a7(SmEV!jk za{}B_sXq3%R4Ir3j`DJhZmH84>|5%5ls3vCzNL-&=-ytX8rWTRDqgoN<%3AB+EtT^ zt#&zQk`hflYrjj92EV_bNTjBMqEt(CnbtWWUg@0Z0`v`wTpexdoKU8D?J_Qf(2id>jkP!wk5Yx^^sJi)FY`vd4=dmsrN``uGJ$^=|1^YpCFOl9DQA-#?hCI zilZ;7lA|w)f}=0-ilZ;78b@D}n;iW-uR;97{Fm&);zr^XcVANK+I zqQz1&8xPUC>8m`y@t|4}mON5J)Nc5>oo1vkMduQ}G%i9c_(y(<#%gM#1c@0=x1Gl5 zOyLO%-ywzz3G117+YuKYn8(0cPf(1Fgd>J&BdTO@-(6olRen7Dbl}@0=|+hMyFJ2# zi?F~Q6GIw!>{u4XF^aEuy&i=Tik>E|*hn;RW7b7m7QI}n>vbGl$l(?bt0MULR7A}- zMt=fsKD4^BNW=dJHp(78O^|iqoCardRJ^@6P)Vy;0!2cx1d2qZ+M{x6sy!-wd($+W z&(*9Sg*Z6aKTMAEOo8c*%r?%;@XTTg7cvYSx-CG<6~{oB8{qc`rzUVZ@i=CnXNXd* zxY&YG;8~1H(oS5IwQ=NvZ5$fRh&iP)A0%ff9EY2U`f77*+>QKWGW#I|r3|q&WzYU`%N|7Z9sfe;U{-O}fpm*rIcz;2E*AtcTZt7Vm38NR*#*&PR%r899pz?^j9n1-F z8ickUJX^GrZM+&W5rQ`N8mON89X$LnJp*2dHp3utn8N7t(nT@sWaa`D13d9ymxVXA z2-9)cIjBs+3&#iy7fI|;XrG}>nF414F#`gf1)EWzOer9#CCsdrK;@~bW=kSLd90r4 z)Dx&iRn@(E!Y8qd-Ke-?l{5rUampJKl#>8&OMU?W$>kTGffZcaf~Sr;eA{6VQP#%K zQ;H@xewo@GAH8mIH0cYg)$|KlfN#KOc4TZ|{iouk2v)i6VFrTkIhx_9#=~t!&gY{% zYKx5?4w2AshuP2E@{t?FxHCclJc)5sg@pkXj|jO+Kh3w>F1h&D>moc$uo-lbCSq&= zn+=~)jsyD(F1T-?n%QY15<>+QH+g7!Gh)CI8@@bF;aptU;mZfZhP-Ja;zkS=SBF=N zk&0RJVj=2O_#Q)WigFy{GCV+f;>HP~3J}Zi5JDhSz%DcPBlKdU7^?@w4G0MFF^A(a zWUWj`zJY*iPzU)Orh^vj`2^Nyh#UrkRG5J=tUGk+5zo0)CID~51OP>Iu?@xZ02YZr zbO0Z&j*yOeDByM5o^P<4S(=DQF=Pa~Av8eA3*!SUCW8Q(fhi87P-QnTSHRg9&j0X{ ziGQdV=b$V(2a;LPa1+2brdDGI896yEi|gTM><-KFDWa#~>5L z=h5`1csJ{i1m<89iqIIJPZmvDjChEit=*wwgxLn~Xwz)~DcKiLigp8m4uOJp;`s}U zQv(-%HjWi7Z0C{u;Nlfg5h8EYnMD9%if=digo?~oJUjtoFvDe4)BOMeGUPrdBw0W?l5mN=h&9FyNY7XsSW~!Oh}$n%yHXLO-VWXlOm;0E892=S z2wmhDp%Z32C?(@34x0=EfaGG|fgdskLY$og@t$vlNEopKNQC5!-*vqgnXK zq!8UZxOsFE7p^`aL^MeeGU0?3-F8{BhK+p>Q&Rk0!q{d3Bilke4tL!5F~AA&5obrp zFAen!yp*OmAWM({;`uJZvP9+#??Wc8V3`HJao_`jeI@K+Sy%A4mN2tg!m20idcvtE z+f7nzDy7Ezn;8ZnDecOOW}9D_Hzu;(k#o9smwH zCC;DwcqQi+udY%Te=L;;S2F69gfylo35nEw*f!Hj{>PvxKNeDyQ#O?@uw)iUu*3_e zLlQ0B4ypXy@sNsp$_G(ieSwdnvU-saKSgESE2244E!7)HHEFFp>^b9wlxCQ0^l%)( z8)N>SXUtVh4B;i?Rv*X|Di_Np{;+Hs@USHlKgJzwod5^e6k)!f29emsfv$ic1M8@W zp8!x1EaX9GS!7hipJpO10@)gol;fY6U51Kie?;i)pec_U4bTkRd!)ZuRslKK;{-=T zbDoNrHn9$oceC2j85Zfe_>Tm@;XD?9%iu&I@bJ!$K}cT;#KgRy6o{#W@|;j)S9q{4 zo2+q$dq+o6Sjgyz)?{>~N*NvTQbtGILH8)Zy8 zYbrYvygjS;7c-MQuB=QXe)||w2>g#hFKq{yhei#^4K`;n=%c8_$GGN3nV(;?BCfm4pFu;@z@YlgT zWII6%2zy+#i7@2pumQ6o);=&nmYi!~Tu^WPE;Yk;04Z@CFP5d8%a?oX6`~wRN zz_>`~7NNPy+zWfAj0gecfGBIktg!|!?* zuN`=h;tKYt{5F?v0?$QMZ zx4l-gXzR7Mi_15zigs<43Y=CXN(t6$Kwa`QNY_w6o9A%j)!AY?D^fMB03a#;f@bUU z#q?zTgei`Bgm_Ooo;@Gn`x|R%oqvQ6ag^G`&O`DC=SvJs)E&wPg^JnIi5`} zRn9<2B&^q$GqJOln@8*jOI5~(ElzW=5&QtvFN#&}jl6`?Q|K5M7XXM-U?1MuVcnmfThQGu5_bgKx$2;U z-fF%&TCe56gRUW_^K+cR%~UFxT9D>lBf7zDhK}A2EUAZ0Im(CdZ&=9KNu!hiX^EX7 zyAD7Matay>h}nhcM+dAc0Gmb0QZ!ApoZ!bmHwI`ohMZ&2MkA_=5)_(VP?mr-FmzPl zoFI%)mvY6iJsbx-d9$9WnBq4aP1lZCwBv*vtX$kri*g(a70^2ve5WW>b{Pk8A}md# z`i3hS;FUPlMF9@t777MZIDwADUoaY@kR`<(M9|lSwghDlWossdMi^$|fK-ejA;iR` zwHQ`G5mFg6nl>TxFeMg6Hmtod4~J+Ayf}me!D%jPuyii4j$)POm7(2s}gYp5}2C^G+UIv5{5oklswt%U`-qZ#)5#}HCE_)m%-{3Cbr>Mzw z4fZ9tet2*~LzkDt!V$U@o!8V)AVJXM zOq@_`X0GyFp#ZuH;pa=mQn+h;C1!0m7qhQ2zA}Gs54Ww#8?N#f6yt_-ezE#0Blj>K zoQw~W!Xa3#=FW_bw(4fl(k8ixjG37J;Fjt+^BmLumBuSrd1 z^W`LT(9=dG9CiuJGaP)wPGlalu+UeAVGA+MYT$zTrBZH$7sIc?0VF~rqk#nD59XN1 zDA=f1vWlchIJwaCtXu;e1x`v=p{e-&LUkIS)gk`0%+!HM#M!!#<{ppc%mMMk;J_8+ zlz;@p0L~tan6!%yB&v@%3=8ma4vzt%2DNggkl;sOfI2DOuQ6nV zCPu5Yi)JR)%{)hJ;=s2dUq#CtOxOX92@DH}g#RWq-&w}=8h)_RsRg$YvqyAJg@5hQ zcW9UaHCSerxZi?JfGY^RgRAGG0uPG>4RSgvfK$%}C2w?Cc^oVdmU0Z&8Ei)MZ($^g zUuz4SV0svr1h}&TT*7IC4~y!o5BG#|1BT$oAQlwJ^Ey-<;@fcw-$~>GT*dJdKchVn+fDzDjF$-ELTD;F=x0_X@ojgu@`)wtgRPh@e5aV_{Fs-g@l zFd?RQBG^oT5daDdK~zp*bcp&MnyMZKxj3r8D;Z;B^e{9q9*wy`-FKjHIt(cth$0&b zwRp_{lEA3I%mAW^tHRNF;_k2~Yk5);2)T^4R4PhxGSLm@eT&;hd!c%XpR1WE_ zHHxphyPdjR_l~A&dT6)S8Vv`cNV!20)IMw{=D+#%YJzYnG(k$DrPfgKq_PusRnkwp zvq~}BN|Ipb%e(UpqaAA%Za*K>D4tFUwmsj_0PVmQuSfC)+)xKoQa$7 ztY-q(`nuRvslJIwM{m|Co>X?iu1fl8cUIY2JDU$ugZ_#ps=?az7I)q(g^j7b>-if? zW3$TE+S#md=L3qKY^_dR(m%$S>u>s`18p;&LsP$*r~O>ttu8;$h`? z?yRLBcz2z~Qn|I2s;hTasYAA%74CiqDJ^I7&inP3++C-!V0N~0_x(kmmP=-58;$vM zOO0v{?W`alQ`=B>*7+zkYO6!0+YTgD&Be{Kax69r8lSdZSbf!wvT9+}3v)fRl89(% zOcn~bWodoZZxz-)cB`zKosFXML$`9viO?w7m}HHz#^h?0+}>7gjLSQUP1YC(C-|)2 zKY|cFIaWj{=dbVvBRC9|ZmEjr+0@RW-r#^UBz3(~Auzv#@747sBC}cjR(DBqypU^z zB49FnKue>O!Qe1Cf(H^DW^pi9Wzk`ej2&g_iCVNb<(SG$lg)4kM%d|+O7h>U*>jQb zk#l`>8W?9anv<09Jh?L{4dHRqiD$G(&TU;F&wX@uUN6I8Riosrk!l{DSJu3x0iIsm zO;nwRL|4t$H`m9DA#UAaQ?K)kD*13ZxxTp;|D-`7ZY~lHSK53nEbPEAkwA(Ft(~TD z4RJgtVt*Ho5j+BTi+DRkXo3WiGgGlYhYRa)EF{dklvChPRzNs|#vNQsxQ}vDr5SE= zt3pu&GHqf0I;h==)(FS8nb^}K;*2@o4s{=Nu~18Z;Q;3bu91(!M>v2S_JtozVKc!B zfRlvNZPeXjDh3$$qV5;L+7TOMbSYfesSavP32`)X&~Jcg!Arv|#@RfgELbThq2M=C z_*@hr2tqp$*&U@06|o0KnkIULqN#{t6ucp{<}m2PT_wCMbbru`pdw;9jtb)}OFRW2 z%XQG6fn|YjQP__d?4kA;AuS7Gh2X6nwk4HNqu^-P097<$=fs!~BQNWs-U9cEim<<7 z*|yQ{;S&zpKlXALS$xIbez3!8tyrk8dtdXG>C?jWoHMf2cV0lZz8M@Hzx4 zt7E5zW=89xeb&N}f?{DSW>^gh95E5M7L7f01wD$Q`wh@O|idigJq$KbwI= zY=$B&XMUo^2}>6jDM$!VaEJ_KRh$9B-XRAfhp_D7yW2Qh<{s3@fQ)FT;3zXPkYR*) zdqhzYE;4c>PIyG9#mVbFG6fXI**-Xd!HV$bAg2V&VZa>L3hYE^2wxp&idX>UO!NwI zq2g1K13Zy`0Fwc8xVr%QxFNdWD5FIP-Egdjy9hjCM+Sn2K#qz=>yw#<005bW72)Z@ zgn5rx0(DqCayXHJ5)BHOD1YEw8W@iHJGZkt*(fX{-4pK+c*}4j#Cs^UqV13X_Hgcq z90Dy!UaW&wHSiymNz}7Y>;WW;0uNFYwD@8)Zvl&N98`E>S?mR8*oiM^Zkhor! zH$zw?E-29rWN+Z>LL?%nC*iD!!HV>*fk;=JDQgZja>%AP!csXN%AqP0z#|z2jFNak znrm5!pq~esB3p#!kP1qMg3d)Vx1f>1v{t$VugQ6Tt?Jo=~DwIv*LLiVY5f4BE_Ro{0Oiy%h@pEG=PJz5qoWq)zM^q z{!X%^Kx3y;1kgsu7*qw>9q<{&crYMv3eMgZ!LRtz#u*D0k=?T91Vcdtgeoc;Xh@^c zQ$<}=1i~ijOMrY?UwE2As}b>$I5R*6R8#}dX=~$(Mmu0PIX{>A&_NqjJX%>y-VREz zNQ2Q=0=OXU#P)y#jztAJGLF+I8(ZUSKRHf@y~r35j)F(`BjtM>$NY=sYzlNgkY7;F4`%E3Yh<(+1{~i}`9MwNI|6=yOO+x1`K(>dllH;4Wv+qy)8+{fouvXj6 z#m3%IFQ~PkzM@Whs@N4@(5Q!K}rMLlizhoJENNxv2{n!x2166Tn}T!eWH~w&=Qv?m41m**s_- z6C!jA#4#2avd!7TotOiQg@6GPBYg(egX}_ZaO|>p%Q9IUV7?-RjEhyuY%*|FX0Xvf zBH-?sQv&c`f(|*#Z_ISQM7-*QxFZe5Uy#8e%S=M3A9gO0@ZuAUv%10A(WZu`;0|!- zgo;O;=XTid-wzHXg)$)94|ox06n8nP%0b?aBM~21E7DNGzR_f(VsF5uFBe41v8)_` zJ&wTG$*_(RXY?L=g+O)LUBodGtI`f*1FdUNbX2xQHVzIBVZbUyagjZmLmt4rATof% z;^7-Z3S1+}fkx~{sIq{m(Vc9E;>iS^6y*9;YpIHY$nZ4hD%myE~g3+dQtF@n{k=I9S-At&YtAZ!L#@Bl|`NRj3zn z2Nh#S#ye3F_bTYciUtrTXQ4ZScVs-E*>X4&00#pHR0mP0WY}=lO_z7=M2={JPVL}Z z4%&^wA3TmE2TH7KssU)Z zC6`$^Oq3|J)}U0E6QO&@aq_5o*85qQaM;*rz@rV>e`>srw1+zFfzHZV9934oKa8_? zgQy?&0+v}n?xj7djvo)8YJv=2iOvvpJf1tsPLAa$LaLNGwe%6^86WpKw*EK>5A!;L zcV{@a&*I0&!BH>D4trsi2EC%3bBT^{&R5SGGOy`QVrpo@Y#4VYJ1@ zbhWyrL)TY8ZxaKdStGL3nbnh>gY>-n-4%fbvx*glWth#C2r za-`jA9bBkHaV!ysw5cj`V*BhR+NZ*Q%QM-vxAI^cHY@Rr+AR~*C~NHnf;P)B>XOH; zjWkCisS{eIEYmM1(e-MAlfe1e%UV0tBYB~`t*tzIymyrJIMh*hdvCS6nJpznzgLNQ znXP*MMrjh|wMJEHRYj#9tqf;RalthMt0ECCFA8Ufl6=%n=d%lmJ;{INrvCbTw$!Rh zQcq~``C9rZuf|snZkE>z+%D>G2`6A>pwsz5Yvi78<-}+lf3Q(Yy}JJ3 zt2w6uaN~a28AVRjJw;C5M@3RvDY~Y}zBkixw z&gE5$2osH_Mc0~KD5m#6z@tLu8+Vk6C|X=Qy45#GCjJYj(qEr|Y~O6iBOz} zIMT&xmFID_zVmo_XqrK1=6Sqm9y`-FGg-v3A5W3j%%eiikdq&>sJ}f=C+ihoU1mvR zWkP)d(}t=_^)^@^F3u(wI;ULZI=Rw6`a|-CoR{b|q7(88av&v}LX{D$US3`{a-XS( z%JZYi_2hJZF<;ADoYfOj3Y(Er&Vn1P7~p$Lm8-2BG=vL#l*8C~KO2qN){j8d6s{;g zb(BJ(m;DoPuQUtA&`y=^#N`AnNXshRm}W=dt-*exPzhahl#CDhP+Odx-3P}R>h|jK zhtPTZ*&rB=9)gp~iIr*ZQI*C=^N1ZdQ-$))aZan21Q$aN6y8O#R#g~Q=oI*WFc9Gi zV=4z>)y1R<<5BU1fKE7?=vW~ks7i9rjYK$V7m^A(5Q}1tBZC~l6RKFPa-0zgyXYaq zj)SZ;FkDC0fz2iI5ZENx5((o9SGyK=zWQ{x6jv9Cf%gDR7m&H2$`3UOp=M)Qga$hL z?U1mX=Y&c$+O-%jWA7Db6tVQDW9dk-H-jVOqsSk&QCx>4<}f)- z7tq~DWXStd5ue4L=DphR0xY~gh?@?mI%JYvIGIqOqRP(8Vj6&cHk!mJ;CRvxumG_k z$9txO<-BlDVGecjm*p25Wh}u^M`r%Ga1vsyq@mm~^?-Cn%mC>L3EHJ1qAt9bU?YL+ zZ45xL@5iPNC*RmULyg0C;wdl=4Dl$+kv1Hd9qNSV)DotbC)6xr)L@89m{%YLqBMSJOtuAQ%DzG%7FNrVaSz@Dy?DjJFdM z@!>zC=FX|td^21|vA{>C+l!gN(9~_l5?>uKpItcGn6VRug^s}_7Bu*4f$&a*5eqq7 z9BwBpk*F`}LuB#M$q>e4~aPs#Y9u^iMyF``mSyJV*rK6O9l1`_TRZ`PFn&1FrUpljD*U-6+1jL{Y{1 z+oktq{<5ocNr!4?x9Ms@ZYZ2Y?DTmV%>LTIO+3!SPK9?#MK)rDIGiev z9Ts2;@h2~Vln>b^0y;c`$SJcJ!63A8aNLe)k9P%g!GMdcJEA#^gwU|SWrztk+(``% zmc`u&YAyH`v2d?}IXE&)%(>bAFjNvu09Q3sgw2b|poM%5RDp)OIA20g#0O)&1PBik z_IFMoG(dikd16$}My>V@Sk}mGkf-1&0;6)Q65*;+F%{7(LL71BC1>{H4hIG*oN*63 zAaZaK1mCrr8XSd+lM_6GffeA3K>X7vD?mB77JVCWd;v}A{uyaHhfK&<5V~W{ihdIQXAf4s-04&gPu0ls*--VwM%qH

    @h+qhZz>KWGp1x_=&;R60{V- zEyj^xSqTjbwgPU%9tZ-}i8!(YtQ3P)Z0-h6q?eXT{1Chi#=<`+jOn7ll0QFcp=D z{77zX0iEB2IvS_OX#U}hWWEHK7imrYU*&_J^J#~{ezn?1583wi>pL@y&a}60 z^n+v|nx5FVm_Xs9{nP}A#l7Q3QFcceYEyUIcxNf&eaEeLmNL8Vxb^l@jw-nQKJMI}IZSA+XXJD^ku$nz-F z>*F989T-p5wg2SFYPMFyUQ=#F!y^N`C~lV9c4Vc)U|$q-i)wLiUqoAZJ3{#%)P|2C z$(?M_)nU&V9Q5d&U=;OwnpLP`IX)O2!d+ml@G?CiK=N#rJd<;tlNVZt{!G9$-6FU)-&cWYlR@y29*xAsZJmzwuw4a7H>moG=w{aS?_HO`U;W_C*f z2L{*g7%9cJ1wr!KoHc$qSx1wlYC+e7FDzaGv=0w; zj+C@swWkWI2bRh0yPNkF?@``RH7R^ZC1Tor$F0S8-qk~>RW^FkI|@b&05tMY#YV|k z{i0l@ew8Q=F2Q>`DZ~r9qPf<;#71Es;W@v3fmFr`1e}Uwv|4CG-Zw7qZ?2U4#xeSa z_Z5J6)IKy`5EApyKyZ8leZ$<4Q?`!#M*vkLIouC`%Es6f=u1SgW2xMG_c#ucLjbri zJdc1-P`i4EC{t?d8T1G6JP&~EU@-{DfzHZRv5E*4qzG|kw4zCJsZjV)et6Iu9uE5b zLt{F-SWlwip;9=yn28e6p^?q6rgLPTYe~%48CC{M810hE{mUG{5tUu>gsgEiU=uuK zRwDo(>rbJ*LqwS$&Um{fK%xFCTo$PcTdKm!Ry8_Og)(UB%Yt0#8IMBcT@B6O`dzmc zXq{uO^=6goUai^2GwX%77VOkgF5a~9GDUL@r9zyaV|X$iWC2Jx7p>kcxn(uEZ@XHN zyIb#Z|7d%|$d&BgiEdCIyL^W#C0VQqUu=*1L$Kl_qYjDkRI$z(0#Wc#i1e^X!1gF} zWR4#pnVle3iY}0s7K#4#?CNN9q8y3vQy^Avn!Mnn8%iZcbgcK%Vsnl2bh)>Zf%5a> zieGuI7Acb`MJvQNw_LKec3kr49yan7F=;86zmTG-Dxn-J%C0O0*a<28Md|2>C6Hhm zoMi~gA&g0tk_u&_cRWBW!m=Dw4+%*v#j1lDv44!WHWWFeKUGR&d`Bn&DM-bShEzoK zFa%1a=VTy?C|Ph^WYb!i7$y(;`My==sV7M4xS!ll`g}b|mP`lHu*tPK%DnVpnf1Ps z!Ss*d`hgB{pHf5#P7dXh>$ys&sGikyACqsSb<%8r4oM#%*&C@n7B5P{Sa`fzu_*t5 zI2j8Yi3e+Zhlsp2R32RG`^Wu<@-PV$*v^lk; zhv=b}loPjVNpVbFONxs@l1~Yj^2;ouUl-HSCvGOona&uT&zXI4QRlcTe_Y411ag7; z@#gwC7Bb@42(GV}ix=}tM4a*bgSm*5!}DVr$HNG*u!Bk$a(hl9DrIqIgBh-vA9_!MDMJ2 zyNYt3`qd*H4H)v=KNxZ8-FTn~dA$;3-Q>#vUza+Mt@sc&ZJrV`u1wSxMVY5I+cKqi zsAWnmm?|~wqg~g`lNS*Bh1DaGf$WrMIPs3aJ*-FY%vK{4dV>urfeZ!7_}v6pWNiT~ z@=91l9IgpcT=WGbUr_@0CBlWb2v3gq9g?wL^hX2ZF#kah^hEdMz?cpc{X62E(L8I3 zTOS^*f1Y1Wo=9RQjGE)w(=sk^dp!_Gc*;9aw76QWCs*rQ8#t@Naz(P3$%B&S%7^g1 z9ix}$<)fFU8UvQ+{+_oQFmGh_oeJ~;}Lp{6%-S)3A^ zYb81(KpgV;s4uh>R0I{r(6_@n43*Ep^59s65P3sse;7(u79-Ax*nQaHMKMl9XwW5D zjx1_iK&y@7HXv7N)7pU>HANv)%R7wot0~~uxFN6+$PNgw=<{NNBIqdUr6*|~7f>zV z0=H!&2kcwEv{@jp+RPE>V`aOA7J_=>`wEZNkCewm2lq!Os3_!xg@R&LLH7gsT3#cV zdsWz^_Nx54ULTsLy@9A(Hg8p8QFbW^!RkIGty1J7!vPbhRx}*LfJ*8)a9yAY`alug z0E&yW6{(FL$`m9aVBm~L1o_f28g`;>L1iNv4~@&A5w3csM)t?gFF}I}7B?v7_7m@&S^codsjOO71S;*wLK@(pNhR##j{Z zE}#>47to2j3+Tk%1-Sa(Ss=Z;y8!m`?gGfK-38DnI}2nyb`%_01Db-Xw4>W)JgglB zs@r!L(22VX=&RiYbjemhRQem;e7ZMx}l<5+kwFJvqjKRYI)8 z3>>yVIgAj03#&Cxgok-V*s$;*MK6J>k1-5TG2wNSp_Z`h00MnS#`ri9EFIMWr30;H zz$3+EC^V&%)RvmnI|^@?6&`@kiwHEY(BPxydBNz|ROAn@nrE?nWrF^U4*H1rbyLaF zVEj0bV`2~quQ}0r(<24Ga?%sqM=&ZSKvqDuf>kxyZWf)4`)QhgY7VV(Uj8UQpvgF7 ze;Wpey7ijWUV26W=UPc!99&Yrqb8;nACERrHOWy7U5RWWYm&Extx0Cd(3J$8HZqR0 zeW354`8nEOg%rwn=<(7D2Yph)ZNS?Kzv@R^R!CCVB+*#)S@uvmQ4O<>RlTkXKnII* z=2aChGNqeTu9hc2=QHb$X;F{lppPm_kxqt{z2&4XG4OpV{^j(pnudC<2Y~_ zMQBv&5^8#qE4n?*a$>SM$^Mon!xdB#DDMLXdNsJoqr?8gk@n_~RYJ(SGn+Y(fkyHa zcn>@kHNjP>{)+cUn#ebvXS_(k?;9DxK%V3wL{s+ zRlGMP<1!x0SLV7QBTX^0Ut$-bk*>FvUggqPpn<%Yz#+j>nPNut7)CE35Ty>) zpQ7%fR)R3)w2MYr5RFvb6=c3zYE_l*o%~LPEi%J-SB!iVek#0R)KCgchph@_ocG8` zIdTd2>;)J*ppy|WbG9c!*Ps~Iy^ zIh`dn)k@REuoV#XX=1{qPT{U|Di^zSG}1X5NDTR~{XWuBh2i&()4r~8_T=<|!ATwu zjI+}-dAT)40gEYb^}v`vFfLV=viwl)8F=u5s!vY)H*0mD`sG#;Bs?&N!9(M4|DkdJ zq1q1hid5TZitN@H$)$u)?@rDZr}N1bTqRMupFWhQZ)ctr5bdFHK7RUDJhGBw2zFV z7a3{ZZ1za}S1XploH2b=ecdA?O)qaQ9zp1`Rri5dkL&Yoa1xRwWKcamP7yeP}(@aU=!LeQ%NGy z$Uq80L_EXC_<(t=Mlv@cOu)kWM-agyovkpE+$v87J5!TQb<$($q{q6G_{MDXK3f}@ z)cZ2Z?;9UXE^cO7W*nbp%=Ia<=FEWEvYwF?odoS)Y9g||xfqJ?PvApNz*L@HEuLRx zXA||1!^!38R7x&%q=$n5B*m+-{ED{#5S97*AsVaaGr+-&h3M$QX^5*IsC9yn#tnSH7#s)70s`7XdU5X7$kYFYuRaDlPip=#7PeE!wyAsim$`=W2a(TT5 zX|HD=Ojc~aNHAx+O7(o$ahnWP)%IXgSTU+com{aWjkJAY{_Hbm(6X5|nF?(sORacC z05MjMReGlJve`60i9+n#uAVGZlj10lMOx1SohgfDR_k{GSTEN)E`Ym;OLv?weyWn1 z6=fk6q4m4Dz}#)MODQVQaZJ$z_7|0Kt)nFqz?;H)t8g!McK3b zVVA|oKfo^eiGBe+;`NLId93A4MGH)|N|!FP%gOaM=x#QZKB~`Fox^v|uXL1(#fa;S zsqO}ynB@~O->^>>z3@y@jp-nlH{ zEo&utig&Imbgh1)QArhz)=Fr!ETNfNNuHun$$bBCe!7iERZ`~naja;(tFD(TmX{xw%b4_L;OM&Dl75Vo}!a@Y7DL!VZ!~{+1cb-aJpJ7=~G5}zCKm{f2cNF zAELG){_RBM*nV+pWM|tCP-ts1IWuy#Wz4s2@H08QME%CA^^I6KNS=!0*i+(SE2_@$ zl|-a+fuEg(zcmqlcmXIxKK z>U6PivYM$H)AKS~(ux8uma4SO0=tUB%f|DyPpUHKLh$tp*aLUx0mdA;5prOjp&`9DHG?EkpB)Gf~HsFP5O4Krs zI3{yD&u!#A*Ef@g!RdV6Y=BlNVChyR0?DQ`Tb>f(Hp`Vr^|}I7R0gk`$Me_CQ>y3G zGHBi?FsHaNj~Cxrl;D+4)fmn2enzbMbS)-Is-%*~Q3`=aK%E&bPo@I0 z^wu~6+0+7*qAWU}Ts@uDN&#^CuC0;+v);S|hdgTqm};$@sY=Qz79u%0;cxctI2)C^uH~`-K zH&@$=78l|X1Z;Tqjv`>>rf2gP;&uXfPAWct^oBakHx{@rphS7Hw+e(Eqcap|re4Oe zZDLh$g(Hi+K7A|rA}^w{=&gDZLQnPpuI3uhisD8?(*>tulQ}~mrrA})}U9bhVH5Y463omq^_okvUUH1eu z6>~ejsBi`}6|QQP0MpO?8fi~EQ{jHm3f%^7K?JW#IzqmV2xmseCaMOOG1u2@c6ceG zK8`&o%pKHB4XG^sC0$8rFfC=PmjsXv$5m zF6#ZaGq1Pq=ONqZ?Rq{Yel1{45O zhx|(!3qc=AF%Wr-m&r?!60iW~h^-{2AUK-2tO~r?H1ptSulbnm%&IZzM_HbV4?*Lf zIIE|mRER_hLO`L8$rzDQ`qLt=S}8s&_Zy=+U4LkqQ;to351&nJr6@@v^2N%jl+LFs z$jl`F3S!+5{uDot7JSi^H3p26NM*Aj@LIh~G`Ui7(OOiI$`GYiy|DgJHRQlaI8iik zb0rk83<7k$%E>0R#6;>yc5p7SqsfaL@ar_+aJX1J(~19|v2*QiT{*TVJvMn!&E+6C?S==}=(cC+}P#i$|wb4g@Ub5neAIsP#hzmQH2NiP$L zV|zXMI<7X!eXiXvXuIXTKP61X^ zy9h_oUXb&Ixyx|E$SCmqTb1_3Yc$L%1&!eKDvDF8UND{D!c4WFK-5Z~JL@96bIb+< zdto1uynx@&7~Sx%cWmhw@}rePRcA>Uf*-LAsNclyTtY@o+5E_QfXMun1K&h@>HG~Pb&&41$4;{GIMa_!YWPEoAGTQp}^!66tYMba>meDt% zF`G0Y%Mf*!Qw6{o)p+>PZNgm}Sa70JgtS89FG~qDX7n3ef16FZeXHN0bY_#8Z4gZ3 zJbkja)eok_!FZy8&`g9&VIws9{TSu4MI`KrQuP4UT#OY@qn_nSrfbNL~dk{OF2BJGNS($ z>1H$j!51reNCQ9s9D#dj4)Sct6oZ$$nbib4>wyz<u<)#cwlukh_B;3ffnpHCYkMiMR>{S}*#oXQ|A zD^+N7GMRb&&1QV3V441DXAUdNSfK5gD^M1CLG_@4NX8~ao3cK$wh^edH7QRGo+ue! zTyRvzYW)K(1|w2RAcNc?nHn7=MM+rl`C~Iznv;kNTe(p0)=x00_pv-weWhpMb=i{8 zBem-oJ{BV}H^-cxq$Za18H$j%}}qHKB%f(;<4QAqZMi9f{vq2?9xWyzSJX?IQ7-&5pE-l`jHnVD_VJsVP_ z{?nTN!q(V^U5)1u(Gm@1O%&g&;%_<4i5ohD4z7mn@B2yix?S^>d>TzsaL+K&F(5>2 z&%EY{yR&+{M-tfjEhQQh?1~_cX8(^5jj*;v0k~6K#*&CpbhI zZf&t<3o!H5X;vjk8#dVJ!1c6N$<*ZEV|miDC37v$0kz4K)-`RO11f6wH%J3>AB;jn z*9=gJruQ$Y7i4tBLS&sg*3`%^#+FN7}HX!R{M5km#&S!j)*t41CI!(eRO$i{vv`{-{^v(m1UD4m1o^)%J<6STfAv8Y;B%W z*e(PiJ%Pg`*9TK6C9H1FibmrmOe0T)#)rXtR1wPuQ|MG#vwk6{${&2WfP$HghZey+ zYUK-vDAL#KfsDN>>~uwtu?Lc^Bh`*XuH+JdsLc&d`!#qjw`8I8f~47lI;*(y1j5kH z;$tFctsgB8*?}H0a@iHjxF9-IT^Km^Rs^PKOU5G$gHFn zuL5fo2F3R)wEG*ULMktN4Ya9BE`jy6*2Zke!rriguvg0w>)f2BM+n*6R_vd1M9uAxnYSH$>zdrov7sj5Z6KyR3VQ$MWD#JV z0Rl&$__0JD9nbeTVK4ay{`NKD#y7?L$xCE$tRS3X+=&o!oEx zn+|bH=m#GAdPM*lg3>Ts@=#YDWcRzV{7E*tMt#?Ek_2?fNpenbSd5_vpvhP?b6Iz& zA6U?@zM;t7t~f_65tpm&0fW;hN1cQgsebvOtmzB{ezyHbGq$iI9=ISmytNtfq4V{ zBXUn>*rFt3SdiRhOC2b~=c_XmSrSo@R5Ep)lDai%tFAqqj8`8vfIa_~!0buSzavL> z;k!Z*ip>@U5ZaF0@uZ7BGF)EHg;@u9-`#FMExU$hF=%R{g{wJCk|^k5tU$f`p=rCW z=xw@P!vDBun(vLsv8qJf1ZE=C$Soc?S3g^^d} z6xZb3f|ji|s8}|SVyIJ?O~hV}LyHlscFUBFa2k%V&7fIEZr2P0z}v_Rry&{=BZkp1 z<0Q&3ljRuqvyA&>Ps7mM zCdykgt})9jb6zX3-)4MU!PT1l^7qf$24c7KhA+5^@MbPF$r1ZBrIQh4gJ966Jft#% z?WNO_Iu^Ypv%1Qa6zysTz5rCn`3+^dw|Yi33}*yUB*XD`D$4uu-*QIDDczqF5Xqb$BajxPM7hGF!YtsO<`tT0+DF_QmA$)#abt0OdG$B&gxZ5JcKq!beNw=2mANzTXB_kvdWlqj&U?1NFU4WZ#ZKlyI%~n#@TFE8^gK`k)HEQRqU`| zae(tLEW7lPqMC=sdsGBu4w`&9V(+j>D#!qPJqGoV&~UA6yQNXIuO_E{!yeiDoUmY* z-6E%<8^wbdY2Bhqdn&Mn~iG zjI|-sXlSXkWzq<~C~|%CM>T`Kqzcu?!Q>5Nq%-jNrKVB;lGx~yCR{CrSg9&=c5(}U6JoZNb$TO&-M4eb#w0!QoU(0q1xzjg4T z`{BT7sXRJ8_rv%O>4#{-^nnYe<9Q(<$6v1s`tNR2VfcbXzAJNwyT%_88~&|b^$^}b zhMHQX!q;ZqFxIWIjqmiUOy^i20BuKOz#nGVWaM(wCC9t1U|Wou7bG(=jZhJBzB3Hb zcIgmqk`74zVH49wWLrzZBjS%@!ITq877vU`lP%(@E7T7-wrA;p?S3Egl)8^w@aZB_ zjHY%!Rm35dzg|ga&okShEsxmPpCkcW6NzdFbvHq)o4z&!r4eu0;C_0isX}`)HQs5t zFcw9&J!X`=NZqbdJ9)4503N+&~lmwL3r)&WqWnD96sQbj2Y3WkP#JW zDixe}GEpfGh;L(KS)CAz&Otg~2Un%pS_`{dE}oJy{E(_h;92yxckCSxm9h_Ld^Tzz z36(O;)SLZMx+}WaKk?iF$A=*~(xiM^mCVtnv`)y0OC>eNv#%nmaNl6Msq|QNikNcu z$ubKfSh=4;Dy?kTWpdSau5u&pd_Y4~XcOuFsjSy5TQc%xsZ~ry<;=U21zJKf%9#)> zQ`WDne|5OvF<#E=xXY)62SS89jJ(1Jx4>`FtQc}BRLLy&6d4-oeB_DL6c)iVp_Q!aGK|XVs zuu3A_q3832YP?AB-lHUP+}B^AJ!ImPR&L1Y0c|5{!;xgmnl9yMEJiuwU*BG1X;Rr` zW|`Eh)U0D;)93XJud!_^DQ^E1oAJ3f89ZlTq~4=cEtyK)tDhV7sXfXI zZ}})HnQkhLPRrgcyR>(45s$yK0V`s7A|o?;(<+2ej^I5ooDGpJ{^haOpJD z(q7J%K1zkkQxUAIPiKIEcApdrp8aHPzPMpO-Ybk42{px&aff>i;puCRySB8rZA+wj zds#i%W&f~O-X3L9vpvt%W?d60dXG{ZJT;`%X%pun9Ww17O`YTlm#IVQ9kXHh0m)lnshl1SVT*UEh_#qDApHXTUxf0uf7{lb_%)Nz~?$@ld_FesR*pn2da; z2O7aff$ih;U}A$qOWRl%Ra4LvUBx9`v+t%uST5ANeFmr+SMSFg z2|Ubqh$`4~&c=91a2%uy7nBtjH$4>J<@<-lg=%f@H<^y+8k$<4ms2bO!( zCo-e0pmG{__e_~2wZgylZ>f(&^W7)wcySG!M*!nwQ^#ONA zvxO9spQk|yVeyip46UFtkEL#f;pF$;mT#VPJ@e~gwAM0xv38U%>6F)v4#e^J8XO_I zt^>)xSFJargUGX2Fzd~NNRrQyN3aH?0+0-93E3<653F`&aFBDaEEY3$(fYuK{kz@5 zcVF1;W_$R3!=*C0VmyC_d3j!2DJ*PpYK589Qc#2spUn$th#wzEj;KYl%o8KeYC{C1 z%c~c^z8bw8*+gjH)<38FBC{uY5i5}z(sVOSd0MG_9dDfcm;gQh=_4u^OU?410mi(V zwdyYncYQ4Q$5q%}3rR{*r0zms&Xs+)pgfjhTi;iU7A=8FezfeXt!M5Y;o8% z28)!%%AxQyRC4JbE7X>v6+XnG!@=>Ejn@{v({Ch~hGQHA92C2R|RIN`MSfoV(CdyBM@?HFHXo`9_SkF`!bS)nKX~2dK zivwlnp9CoLr&)JHH#ZMgsWf(q*Ozn|Sa-PF?Ci5kjH^!RK66yK5 zqx-r=Hq%%f5E%o!@B>bg<(r3UOFYOEhMJacbHR_6Hr}t?TVDIp>z*OngaO$`c;hT< zgo%Bz@*H@1U9ZwpX189~=@{9ft{KFqsyb?G#U|z8L$!k`*r~S;s@l(cr6u|n@g&VH z&nWJpXW++fi`=#Dhz8|#38)?CkXy6LV|u^s!)CM#6nxb=>f_I-IQ0E1)2V=#xNjklh}jOIqX=b4?R z`(EuBu_%Wbx%NlUC*-!J~ zug9v4Cc8g>8hE12elhC38e&V_k@4Znc48n_JG+YK3klW*N+W`{tf`|rg{@K*Mj0;c znGbc&g8U`NE5kK&)cCaGsrb;XSXw@X8Vx0hvG`CCIp{F?CJY6yJ6v3x!dOsY+T5!3 zP^U0?o`4?z{R3;tOi)E~VebiKV$!ZrqO)qo;6)kft=s$)dcC4NMAd#g&t=e12Gc~D zM(YHeu4Z@3mOo=+_Gt-fm$Kc^(v&@gxoi{Vm~f1M6qhHsh7lFFtx*kw#(pwKlaM#q z;1gC0GEUlk>*DPN6;^$NJr=pr3vJRL5NT;Cb%d)BYPkR2uF+=k&ERXCKqUEoJD`)(y;EU!`PEH&Xk*&wO-+0{ay5l$#} zz2m(iUyIUz_>AmzBiY?4XI7hrq?iYF62<;)DL&zEqX_>LS)yN~55&M8w?aB?DLB%w z>#9x@rLtj2l^df0`17|{Cp2Z+T*cB^oG$jS1-cbYJpgT{I>gErLmd&(cQ-f(=^z_j zzS=1N>DJ+mk_yB_%>2S+hyU?$*o&qXa>%TOB59HOp845*Mh)VYr<(=p6Ik8GNXm$! zII$CmD#S>CvgxNEpFF?dyd#x)_Vde=3@1oow0`f$FN2Z7c;$42@yc+5ECNzc-<{!e zol_)8DH5C`faM$n-3b__7=OR~{PMRTTzBJuhD1sU@Xu`qJwwW^kFrZKqk@QTHXsJ7 zfQAZR6|f$-BsI$r0Uo`Hv~@i|_lqbA&lq$AvwWqzsEnZn z`&OY+sQw==h>`YU{&vjfoWMTM{tvZNm(Y($w!vW$ZST~=ga!O@)jf1845!BVh(D-Q zhF4lp1g#SC5``ni5cvX2FTWxw%gf(>swk~nD^80-UqB1c z4L-1yZ){{Vg#n4q^zGz*Bd({-Y-V>)r%bqO%eKpzn@ z4Y64xV~Y$)`pl{GG;fq1sm7#%%xBa_=iYk;x>`Zl#w$;*s;^ikTH-ikax{6R7|Zv> z&cE{;#s(3D1jPf14gij4VNs+7!{rPC)S1*ai+ zusDDc(E&R4T=OoXmQvH)E#_YRN<@Kd#Hzn#7GKQ6b8iyrmLt^NkJTPf#wP|UzvA$qDol&hayBm4I z2gQ9&>quURa;K*_2TR*9+b%Q&s^U`UAws5|m_9^SI3hHw*_N*kj1i=wMg;YmguSBV zie*VnlC<00)pp32I?+=MNu#Y=*a*alNd`H?>Hq8jaSNRh9=acPH&FKDHBgY@Ux2r=D_vp z174r<9LW9Z3(st8hwlSEad;@YgNVfrs0*-8cEn|Y<`Yo)bxYO>v;ED97Bb6hY>sme z{vv2gosU&&7Nr&DAw3Rf-A%A8pBB-_BtTF{->{>UELE9zY$AwT&Nhq0MO6O;C&zjZYSX zH}0()2jV8|K25t8G)AdqdGv)4Pn@Y*-umwU{tdFX5<*JgZIEnGp?PwG3uGb1(^6A9 z(NxR@O{=)-l@w-#`E%2LA=`XYP~G&CZN47Q3w3osVfa)anv!HuKsC`ff=DpB6rxNl zx!&s<(JeKsqOt3=ku9E00VVcGc@*2H->p9_T_;v$cO79VkS5+Ix#F-Si8d+{g5FDE zU&~jzpsBgBVicmQsE?3Jl0H}RlIT==`zW2X4Ix=yd{QXGV_~SR>bIM7yk*|Gu}CN} zq?SCP`b9y)Vi1)k+dVghs~KLZ_#aR3S()YGzT{$0THX{_s7iZ;Y?Wrkt|#sF00AQ} znqz&!ts^YWMvLGWi7>b>dlZ>`KWvX!B3BKTewi7fOh^U#f~vKPQBW~bHXx9t#v<6U2yl7El2&G9x{YjXz0qkbMXz#L?$!O! zCIFdNV=gcd0c8Fphfj-uo5{-(Ukdog$0+h4VN>+*ghbTj_;X+Et8 z?8vP!j4muJD#AG)+z)cG(r8`LEk<^QQ*Mi)8L0^9M=ESx>VqN;m7{oTui)prdGHSw za%g3=m(Vpk6#>@^!?Z_-A=82a4bEzWD%ULbIC*h&tmPY8)o0vEyJ$; z&S?IMWA(z+gQp!hb%G4*)6R%* zYt_85N%uz7+RTX7->(bph5+K4ypky8a&F=0FlB zgJvED>X*31>*TZC*wSQs!=L+BHC87^(wDwRV#Tb@Y$*l77U(FJ7+EY%yJkLF7pWwxTc(e)rm5OrPqH*yvrJ?@%2C~qGPFF?9L+FWmt-sOBlN3jKdaNJ zTsAb-B#o~%ezsWGsB$nx)g(3iB@qE?+G3wTx7;Twia?!5x+=Sb{XWHa@ zs}r(v$-eqEo&0+#b(>b|$b;trc~3mC1w!?Hqc#V+Aq7vOHivXyEY|hQVoFWi8yyuK zF~!}gM@%t8eD}<|$om?Qptdl(CWBBYZ}k#6}xAkS4^u zhyt^(&bC^x7L33oo^G*EU~l4|o5@?YPOdzK`6k-~#vt!xPlx9);XREzXS@7od8Q!L zNlBkzr5N=_pZWy{3#HOK3W>WoM<#-p7W-Tgj_^QDbmEEPggnrZGZLo^@vkhmXQuNI zQqc`>Gv&(-Aw=6;(%fenmJ$L^-7p=@=L^EC%@PK@L)4jv$`BggvQ!ktWUnnd3UoT znzlB-+ho}=so_v|n39}E+M{>@GQ^iudxKD6@JwH4y}Vot4fzNI*PJckIDZ!MCr+5s zXIUuJ=Joil;5p-l&d=Ef4~6AETm;Bnbh5w|M#>{i=vSm}MAJiNQgoT*ddS8oIpM4u ziM53pQoh^j3RyxEho0o-ws#)d9R(`8fmcnZctzN>B0EsSy^rm z8QT4118QNNy}z;{iw)LQ29`JDg+)^?Deo9YO$elO6>7St3L&^?VT2d5(YM4nm8V(Z zj&p0!PbcIhvL2@v6CNi8QaI%#H=*Y&GXtDCrAIQI6YUQsR#3afb|HhO1o;UEOcw-# zS|Qn=#aK388pL`|)1JYzrCkVW#H!jrk1;)9ecrR**+?O+8LY0UI>lFLFpo955%Fer zXV-jZR=2b1jsc`nmYic5_}7kUBey~8kMF!`PNm~}h?3)E^XxXspeZ6xWlmMC93tv0 zmcqzu`y`uu73D9h5|4LogOp7m4qg6^Lr@`RWRa-wOkQ-6w4|hs96>C~0K?AI5$_FA?WYRN-yp)EVatux=S@>j;%QMBIxp{fH-(923MxW$V_BnpKl}f##S{Ii?Ki;)D zDKCkYuV+(j^hulMIZA3#X|9~XuRXtGY4{BR#ECxpHKeuc4xO*t5%U6h>@f-zg+b8S zHwoY%gpxs_APc5`^_J*mY^mz+ovco@N1_D_AN^XS)ZIR9W}XcNsRKA)jr)fnhEm)y zijncv5oK0eIkuPupao%8L6&SO3awL+*FDg7PJmEgL!J|s4W>KkT{`a;l~uuzY|g(klrT)|3tYu*+@WXkQw9B8%qt#I-v2tmLHVdPIzqeStl8 zfH!!(aA6$LCUDbl{7z(%)48y-`B=+hJlWLuvaea{jO0>$!~r7eC9yAme}O}bqt^uQ ztWXc%S-1qlthm>N!>myPVpiy-#rn*7FYykmxYxwUtWlz3R;X(Axzy^?B7x?j6mGQQ zs?HUvI#;NodDbY8P@_CTjq(UJN>tAZ)f3gIg&fVb(gW69eA_Bi&zsQ{fwbhc2&5Uc z2Rx}z9-&65bB$8TK>z&BGlf@)FH-E?Ud)MEM*t7!TkI&@flt%fZgQQOI*%~ZNxe`} z>Hfk#-BvVHEL1pYO!`3V+ekX9Sl*E%F{zTMb7OOHWWcyW+I@{5#f*+s*&$O*DMg zfx2zOT*#)TJs*C(!lB+;-+fEn}^2v@nETo%U@OtMpWJ!s->4zV! z`hB+8VOXZ^KJM&DLtJ|emGLP+juSAF`U%F&l_BjKehNraQybx-1tB zo^UiQd&qS+9?TP?+cE%W{Q$U&E1!(6Ha4#z!@LO$)T{7^P3ipowX_ObS<6`B85=aH z1ZDq0gq0P>Ww37rOl>j#Zk%!~BL|}x#imnR#u%!)uz1NZpFu+T5)!CXt^`OFU-~DE z>Ld_%Pc+wN%Sj}-dz6Q`0gZ3`ip|Y%`@9{b134h+n6FU1$O(6TF`313$z{m^ z>*@}ym~qfm zeOl`3%HJ<0ePuLZtTJSm{UUsEDcVOZyXe!V1@fiDb9 z`vX2Vn8fct8cK_a->?mNsxy{Q5bVDiC@>07ti4#k+G7<6ABIh9Ik|#OD3uL@@x_h6 zANW^~mI`n}5P(~35(&bU%8kgLM8dZcNc7fKngYEI8eTqzwnF5?lqziS;{~T64SsL} zJGa!&nSQhm()C6^?0}o-irBj{fCEm2f2W^YBEO9B6cPFwFGnM5>=v-l&uppR?P6^# z9lbPI+OLLAVQ8-H()pF~PUucQvq$}Y(+?errs(j+rPB8M_uqogXZ(y-{LJ*T(oZs_ zpKb_KPAn$|f2d^E<))|hw{r4(H=f@f`r6qZo3qX0HV#)|*`&iR5C{a>{DF9Jv7$}? zXvm0^t?XWim>MY zpikP#3c3sp9be-vEp&t~5tR@Zh3xWV--dtQX zyF*Yvp_DN@cIH14tPzRm=6QT%PBqfpe%1e!Ku`JU8)fppxt;v{;>Ay+7tc@ldG&mB zXQbyp|1^5}{Ff6)U;cbTP>78FEbgx?S}JZqjcdhOQ70@TymT*FH#>R$)2}0zCe_Ve z5$>`ouApAr&o5t9+!q(_U`Tvpu&- zoi}Cka1Dcj)_u8$OXXJ2s&tGZ75@tcOyZ)7CY{BlyKRGI{T4oR;mi%SQB*e^#L%{2 zDkVbY;qacwBc=p4ZHnn}-polt{p?Ds47U6qe9|E%U2c|l&(1eDG#u@Fb@?j+91N4t zpD_%v1sNLno2Oe?>Z!7*NthGV-q?Um>rtUO#*KLYv*zcZO0OsDyJxf!V-Sm%J4vV) z+F5H)rLB&dL5*+zo#G2a1!HcLI=&`6X$NT3?l3(|{!!1+VbwYomEB$jDy%J$HLOMd0HDHm0g(}z%mn+hXM zVyN`!xOOCV&Pxyn!3yS}E0P#(!-@jWKzeFQ#v~EJKt$m#En(fTzp<4}$$T}Ditz5P z*-ex&|9}35CTB_O>1VyW`OHJ`QYUr=$0I+Hh-_jYHn{v%86gQ`Ej3)Pl2gB>+>e~1 zm)qv@TT;)IK7riT$EQR{cWtSD*Os;)n8mtO9jQeRT;jHbKlU@XJ*qtvz4-ZylUGv? z=&%qOG}{SBaySh4mtSAJn*Njs8YX{9$o0)6foizOgRCxHdO|gu%es*8p~-c=kV>?5 z%Blc@s@1I`B9CHr#OlG0uZ)2a+vKa{>H z;D9Jic#~>jFHkoePJie8)TxF#jRS^D3{Uv&%G}k(@|hqD^b3A zi?W#OiQncXb=s#w z^qB*7_V24qz6kW4``SD=PcJ$`s5l-w;rjo=-@N*9`< zWK?9cU7~cWDiNbhDL2Qy2-00RTYE@>AinO{d>t@xbP&~8dG#h`1Qn;qAbVJvAk){5 zGjb_Say7{>7oe>{6!+Pim%kVb^m(-5@y zK*S~i%+P7D#Zn028*xK))kJ5(yMUMM66~)Cg(pV$-9xV>G3A^s7NVnW?oU&2Kr{q- zzsI0Qk7qkSB7_C@?SULBFh9xGjVHd&YTi0xPi$nZY796K;m=(8s#Qg(1PzpdRDMC{ zxPh#mko*Tkgc=}KYV=_Tvu(M>0Y%{7BP3q7Y1$lZUQsTOqqo4t3OQfDSGxs=@}MZP zpMG@DFu!GE<={12e7LC3U#wRFY4CFlcaIF(V$#WcxG2cw?H9=|UAS^gTHc1RaJpi( zMtWRaw6}=OxIw^_B@cYZ6urfv&g$e}Bj$g0gt<*yi34Lr z@ED*DftYh7OrUhLPK6L-gUEpxn?}=n6lI+2n~-iY%{<^bsiC$8y69mTbS3Eiey})a zd1x&vJ)~AHgGGk=OuD;uo|@hg3CMvCG>jRwIcC-89M#gWHQf){5W9wXe3>(t8cuSA2WC3uU$DTh@v3Lh%Is5yaI zL5-o@l_+VnN{lqzhdKk%tU8JJio!3DO~+K1FuvM{1XGddN{O;gd8BGdg02_oK43oH z7zNkW4uuMzqoV#Bi4L?!;TG`6b7R}nY#e51ZlhkaNb4ptcT%A83m zK&2tU`xzycj3%it@x6l~W~X9Wf_J!zoj~(q8EkceiNe+lFrnL(wT8v98RW-C!Dl)t zExt(@oq=O1tvl%0Mpr>>>XV%SKm&|DsN>uq$Qg}=yC!WeUs^4?t+M`UyxB> zyfRaz>>`eO1ZJP{{waY=2TJj4Q^K!NK)J+i>K53C z9~I(7n-wzHPLXCb2<%WbT}_~&N(qcb=cJRM6Zo*NkXemrMvg>!nOMrzd4r;N+ESRO zE55BzBdsmc177zJ0oj={8ju6u;-r^g9j_7OWdg#UgFAyf9D>U?5)iwO0{Sbi_ft;5 z(z#ND2y^HS6*OiCbKtcFbkI;S>YUENQb-K6ij#_ytfUxhXa zwptJ&Juq1VDoj&cL6-%z1%E*&n2if|lZ#W~lK7+aXsL>#H9#PH9YdEeJ=GDMnCD zxQ&KQG={^+1hY!wZH{J{K(i+vZ!+$ur;>zg-8N2UKkvtx#G_DP!8HqD)PYoLW+ zriSQAE_Gt*r`y-F4P1IcLBwTV$V}c_hAR=rGy|L{uKZF%`X)H7^9^+mBtzpfM{GEK zF-s2gnyt@4e}^(No%w9AyP2UQE=epyK|ROJp6bKHjAgEV`0ttE2fr`KoW}Z?Vm_>M z?uw!pObo1*xWt3V@b4Qhn};8N3D^%?OcW0WkuVy@(ha9^SSxvK`}=@bHMk@?RA^>S zanwCDRhdB?7QEr~Y)jtVOe@gmAIATO#ZyPaqO+CdO_!vi&G04O3D8&k+kk(CN6?Gs z&mUONn>&`lABJyEKVOW_-k)Aw4bMg|9<1>=IL)`o3vm4x8ZqDxKlIxRYBT=yAoC68 zn#+d)0X_OHSM`(YZ{7G|z=k^q=+F*qjV|GIk}?1YM;oBXnKU})SjOe~jVOv|nh_Pu z@$!i`E1(=tZhsWc5^XLnR2-eK?Fd~Hg;9&=&uu~+{A-76kHkJlF~r5(d{ zrh0dJ^$tN=AUkj!daEye;xM9=1ANU6xU`dq5=0$ljB~&je`-gwhd9x7l*F8H6#oSW zXn6c19iE+02*M8o93bdCeE&OswQY`#qP@P-tu9DWeK)*({7HK}SZQqt?97WX z%yLHYLu8DZPSXal)10&xhBlE+4@T$<$Sw`-jz%LyUUe9UzWF5z zQ>~&vOIOIRYV!NhDFN(Qz4PoV^p!jl|IEl5VHhG<0U&JKU38u6hn}MgLX{>R)|)+@ zfUa}KY^tLI28#@-DT&mS7=4QpuqkmS2^jHGDB=Sx%SlaxZldruvtFi8Vl@)u1)`VA zw;gy+B+aWQdHd#sh4_!ah83*LCPk0u6%|PulWIeub=6W9d`60mD)qV)t>Tz#Rju<* zhkXa)b(A(K2)@z}r1u=duPmz_WbDbX24osO<9Z7jslN+U!I`cbvP9F#Vl~-^jw6f@ z|N4qJzn>iM3{=m1Wgs@yMZ(Q@wKKJxFAb$Xi;b_b&b1LX!L~L?2+1e+30eDk1b-TN zymOQ-!--yqc`6b-erO}Bzk1VSnc~xGy`I?@m^emOfFas*=XD78285FcD(HiZzJ1!UVk@2a7svc_fLg;pi#)Fo^J28UEqx2`4irN$wjID}<1PtXhpTs zgCkc`0%h_e!CWD@UA<=z_CLGwHQSXU>?#vE39T>Cd5}*HpK$KqQj8^^)ADijfpT?9 zB!e-!C_4FeC5kLPdn6Jy?2N$hB~_*<_a14TN_Ov}OAMK~w$a|*=8yZ?X1*4IGY=65 zmnbXVJ$_U`-qcG92rjjpjU<^oxQR#@DZ>SnJ`Ta8j zFd0;2RJNI-vDdtu!v_c%tdwUVe&j^)onQytGPjIsl!&uZ84De?@zH=aC}BnjFR~pA zlnAOTy-%0yNMf?Ze6UT9C4t+wmGUW)k`O%) zG!GlKbPP-#i^Z8j1tAc!1wz^tadi-wzGOOt6YN!Kp_d5m>lj=gTvFbd4q^+$yu-R_ zXhd*w@ZxUdp`sftG@d#5nt{z!fsh$@dfuMG;UqT_rA}|HayAi}%GIf~^HgivDECfZ ztj4iSA$?1jG;9|^BR6SrchHH?L0}_9K<_c>Yy2IC&xxvX_WIwm^+`?nca7L7Bpus! z+)G6{%tO2-U3UbiDk<6%2WyUotp>+cyT*uGOKJ$b6|MbS+U%~uX@drr6MjRGP}C6c zamB61`!0?`4Nu>T?=;<~Ifr!G zT%_oJIDlvUXl<#fQb0(Bcgl})sq5KnbT$c?s0A4&WPxCBDjyR^Bp(%`f`-|2yT?74 zUc*UCtE&Fl+jKK-oMCR9VQwtAxp6w{WmGu(cR!M(s@K!`^i1ORi~gt4Bms9;OGMM( zyTzfrP@=I8KRrXX8=Swh!^LG*;nW@u>Cj$~lQq}RSMqdr*=-A8N+tm|S4#7NPVQkS zN?r&uarzq7WwI4>GpYi#?mrM@ysR^YAmEJemXo5eA2KvA>?P)C@HY2#$GIx#>#wt; zjorV+7+ea09@^lDDh)GlZYtDMZ7s2LLJRGVdF;aWz_@>ptP%~*lwMNX>MuNj^u^q0 zBTQseNtag^g}V^rBRZh3_Y>mS(^ZA>bbQb(k8#x^a9VQ{jpU|EFXY^OZYJ7iyAMSU zr*WhJ?stSL(c$oB{UK@E-ImH&Lu@Jng-eg0Q{do*H&;d_X*4)4UWG}M|E>*1(aKZX zY!rxUBGEo`m3Up@s!DTfmxc2KxCdRyUn1|bl4>(j$alq}^3jHpV!3QW9)PQ z%rTy_x&ZMMS6}*(8uCEL$lZ~olkP!lg7O+-<6FGb*Sq)j!~#opcp6wDH;n_nyt{dySHQ^@ful06#OG@ z;RRD6JWNZ-Geg6PF*3~%4KL3d4ONAgbzZp#57wl6s4HL{aXz~t)Ng9j9O{_$F7}LL z96yhX^#jJOlJR`DKx@Vi?J|7u$(a$bn|=YA@jn)_6GG43Oje%6t)+v7Mbinywz;CF z*lprOO4}0I5cIeWLEmCSaL18Uz>qak!|vfxKq&-KR~^ z{PxnR1p)D;AhbZ0&b5s}nAmA(foS12+W1{iQ@?zvRXolNH3-T28cM_l$Bq)I$HS#mLHweWP*iY!Z%m88wm;dD!SyuPa%}`w*cUFc#dGu~0GKqor}*Qgus(F4y)SU8GIGPj7IeA8g(7+Vw~(0v30-axyiG zyRK6?jH<)vvewU19-0cSs!O;wYUmTnnpqc9rwG^?CPzX^{JPN1bh#l$x31Jlm%sIM z&A;BZz9{r*U{^D2rCdjM{7AUcwP=f_HNMs+V}H#_J?|uzzNc471kI{^=VeWPpy(V_ zihNQWGG9nP0B#P$9MikijXVYi7(h|f1ZdtMqK>JSac6gSHIEI0m`SuMUl_vk76g;s zI#cm^Fqo68?8>9EcUqo_*!rZj##ptnt1CARRQJY3Zazh4h}%PgM5a$=e3BS9a=9Mi zY@(yCwD}eb1;g~kBba@bw@ZdEHQON8IIPm`%q*1cY_)*?7U_TT`bmHh9rS<`(*qCvR6FNv^ZOyuNETFHroIha7AIi8^7kV zb4C5#wMu(E`P%T&D<k3nqS=TzU8o zlQFU9U+*UOtX^o0CDp@+lltCn`$S6N>WN`tNvr^-X!K1L0U4%;h~dYH=>PAx{doC} zW2l#S`$?mmFlNUO?3Y;0cMBSxQGI;Zp=KJQSsozH=vndS#Q6x(bu-nunHq^$FzD+Y zb?QOdmt)U|u;j5|4^=8Mygg%94!#|DQc!j3Y{}4Ot-@kfdxGN{q$iks08emquaNn# zQM>Nn>?xMt?I|v|dy1ur=X5#cIm$y}`Np)Qu*ij`dbt5ulVG8f@fg|bbBx1BaEzQj zu(Q9%ccpaQHMT4iBDXxC`TY*a-0Xn%LB2JmG~EI>=GM=>u({bkaQ(Lbkl+Guiyb}s zACiQ)@((F^ihtnZfilPG=*cIz!1%rEw=}T6gz{weMmIRrq+YLAS>y2zYm#1GjjIeK z->c2GE$4vdWgUBE7T!lqTNee@doz z`=8QSozi5J*SmZ5`6qtV<)4zM9{sOTuy!-P*TjCguH7j_^t( z>W9yr^e>5mL{+0C(49JT)0-*bZF0KIc*E+xX5=M!Dsf@H9|@zb4X#B%UFi9Io|3AO z51_OSt$5=-LRFNYrYNVu@U*P$l}Zd>{_xGEw*>dBlV%%jYxVUWGSkqMLP7 z(rqFrp-(1>f>KO+s)SOVmcY}u1h#?WXx!2erSmy*sieLsS2y;LP7D0-s(C;DQSKam z?yd*6gOC_GQ(?-^cAh-~KI1tB6@NeNQ~G%US-E!-`H79IgGy5ho-2W+Zi%w+swR}Q zEy16+rAxAZBh@Gstx?{0jZVU2L(3_?IypacibEd{S!sB*fb<6>JMOqr`b%#j z-$6gb6K}@k%xCX8kvGT5%wuKUtlOs!*HWpC9Wv2U-66N7aX|2HJa1_qS1r!gjJ#IY zJ;Tt}66uRNPq9fjX)sCW>G2koD~*cuFI;h6c{h7J8h?)>1spAz3hU{mXa~(YX3JYT zbjI=3$S|$PA1$N6PecYI7zV25%uc!}ywp=^BB4Hz6jo97S)7{7VNR%JBAcR9zIg(g z1}X1aikJ#R=guO%BA92oKhT~E!=_|485Rph$K4d+T_~ICQtJ{4hM|stkv<=cmLcOS zSu#s7PPyRkMfr$o7LSG#W{QSJWawQ_AnCdUPlu+jCUW*=OHjK>Nh%pt_ietE^j_)& z-tIM}w>ME!T#+-Dw{cbU6|U^+A-L(5`}q-OHARE;H%uBRUS{hVeX3^ij?8-Z1oPnu z`VVZ_OJu1dCDN7M9k;#>+k|k?ttqpr&N{ElhIK|@E4VxkUOcFYyeX&MWX^X;JCf>=}RWCX?|4_gL(La1EucS>D^DgP@PxrV?NfO>U)`WD^+<0v&fs8$jVB1J8c{`0Ezr%t z&zPspwO2@Oy2((q3?G!vWwb8>{a%7`QDY`!P#qF2GE-TE+*c^}BRTX}6k4{zCM9S2 z7O|_MFpR@S?Mafu60Tu+dy8V_dad*{yx@dN(RhL4bzadl*raEe4%v$LVY@xOMoutk zT#tqdg9)Dzp^#!CVaXNTfTpn=TM_fAWwn~xoQKex$|$PC_gJ4;?krN5fX88t|@Xu#WM*Np}oFO1wKV` zzsJLhu9o@ersST@`h0?MTS~>0v&<7{6bXIY@HUDFMbAcN!ljL_Uvr@sWyP`bNbtY0 zU#i?M4Samfnglv~Hw$T%6or$N+2&Gi2b&MP%sOmCTb z7mfmi6-*m+^h))5EDl`9hRu{u?{moTR*|Asyn0mjEKy71x}<0ej%Ubai7hoh<1FJA zW+vZwC~>1CLS`)pjaLv27*dC&s>umi4a&eM1y&-b-cl%0VZ`$)St6RZl48P?^xkPc zAt~IV5iaz|!iz36Eq_)7t?M3=&l6(-+R&54@wW)b7y4Mu-7|o=N zb2XWHWuK&!w&Sx-XZt>D!nA6I{$}+ZhZj{LIo=Jf?#DmBIMMkK=J0bBXRFv8l6XJc z4*bsz?=w3sKb&)hg=Oo<<&#p8FOE{V(INfA`4J*Tq#ErP&8d3F3OP#r`7otQj^}Ag z&TUgY$Or+qLS54_x;VYe;ZK>(^%}I0W&l+v)!BAuZMQun=>VM(AptxO{Rn|l*7AT< zP+50XMC7ak`db&QeWe*`ky;PZZSvwh5@|=R-FV{{t3I1Jr!E5%z^}lsEp`dPRW{86 zi9v{uNDE<1)?173jjgy?p55TwWEoB-J;rHi5Q*tMa2GO02zH{OwwOJ#zwEBl%R(al zwzL2*_p@7>g3$d{Tb;WRVJ)N&9Be*buimb_^~ZM~SMsjsTnc~@5pTGdGM3$<0`0~Q z_eMcpd-?Kur5jyxVGEx;$iN(V{i8vh&ae5Lc{U{gqI;l{brPC30BL8?z5>}@(-ncv zQ^^C(p-c4M0WmfL$?VJJV6%k8h-bsec%@~kE(a+vpWZ*aIOB-1skaH!3x_gmC8wAl z3DnCzJu_g-1igg!70mFS4vn<5In=6` zDDNvuRzGD?Xs|XH8lXx<>lv;IgRyyO3NM<}h|Gf8y}k?djIA&U4jG`!0z)NfSza7w zChXpbn8rrpc|Uh-Bco3E2H6##3cJc5Bc&nKih*mtkSnGkqw?X^=pCwujU31*RL`XP zrh+njn~1iz(spq~hNWFw2c%pUx-A)u4KI3MLv3juEc$9_H;vWpX;Y0D78O?&8bvE- z&^l)fe>F*uMENAXt@4f!D4~S3l9h+vlGH+ew};t2sq)lXA9B}w1^5Get`$A`X1V!{ z!u!(sY(#!h|1#1aoYl5RB2}G&w_2lc-zb`d*&J)ex+-qV_{N%pEeN(#^z>L<(ORsU;(kij=9y+4hvSqWJbsO~*)K-}_uqND3b40O~pVyY9 zR+GQj8%@o%X3TXB*(%qx#_#B*bolYQw>VCy{Y~hyw0uHG>9oTIVZ@H)h|;vffgSx- zQDSKJjBl%DQr?q1DVv|lbd*k|kKdlu<8@spdyGArq@06Pb*8kv!WszW@b$HhOpH;l zh6yx>M&{i11XuzbRa*l0FQYXBT-bjtF&~q*BpbYqE0ZW5=iOtz9mBf83=#=cJ0p|n zPCn2iMvQ#NSbX$Hv!v-V*{AGYUQTZLvgx4W?h$EHQBqCT75orSFkxpaYO$HmNtG7c zN#lueKHskf536i+ajS*d7?Z1YO-fUvo9>!qHK})F-MvheDY8N!tZ?BjL%MhbSnEe^ ztTIp16EVQ=6yZx|P0gJ=C}z_RwRI4?=AkLLGD zL?afP6d803%4}8qW+D%s|HE}9NPbxl=Bw2Mmn%t@Tn`T8TMv*vZwV-UJH78tetLN_ zvP9)PK0|-`?Zt1N#LnnzG6jW_Et4J7x0fks)tySJa(Z8>T|T|9)a8{<@7pUjXjQQ# zmDR;g@!Kz!Q~XM?c5L5Xu|cbfEvd?BetVg$%0|m4{H^7Ly&iDf_J{F0_VHpuK=R{A zy)_{rGl;Z0UJzw&ja#uzwF0m3I`95$(f`e;_d)a_N-9L&G5FL^WJSrTIQ&g#H7U*d zFOD2u;>xq;6i7^=Tp7Jkt#AnXm_5kavjxR>LMLQ?hdKpk1H)Ni6TkLl@KRPSEOXX^ zBsRO43%ej6nRYQqO5KJgHl?uJz2rVdu${=?RQ8vpU04GN``UlwcfxawW>bL8oL|IT z#uDumV-+xF9i)fBJDb?q9B(zans@y6{J&lG+ml~k{PYWv&=e~J(%m76+1-UsOJFer z4LVqa*x7mVGDmebxL*$l4#ARUhgE=6PS02={*5Q^J;W>GsauE8wb#%1VSV_u`{1#l zkU57l>4nGudeKj^aEI47HtpqIA#9URe@Y%Frz!;kO({mR4Qua1x=+-FZekc#3evkh zq8sTZUfATC=<+@Yx)kV|{(#?R36l2{Vj_V8*VZSs+C_|xseNvQErLDDH~iD@9JiK$)y(%XXL7hn=rVm49E;6uXj zJL++99Zd0%aEQ$$YaI^2i8Iq3-P_h-1O#E+2MrTXV44gpjp9bRCe}1#?=H;s)ZVE> zZ?rj$vnslIc1#^GK{#^}7h2n)|G6AL5Mq+rf7+muaH0k!xA;2F@~K8KNI!T zvN9X>lgBknW$XZJ*{lW^e;rO*g_LKCeG;SmUv$8~P?2!(#C-bK;Rx~9pla{G2Hw(t zStIB}K^hyJ@7${2B?6*S0%PfHABocHc~Q4;Z~}pfxGvr!h7*j+cbLhk2U=_#FjyOD zknuatI2MlAUiTM^A;1qbXSKMt)Z1IaTm8ij4izJ_FrjkEz_&*xeCGheo=G6xzZeOK zuRIv(|Mv~Om~c!R+G7Kw8=vU}#LeLCa`$;W1+bvAgV$`3+J0dN$OiCo7vS~EC|H-V zOmXNQTr{bC!04|vMS;H`onz(%K%dR8ses;1H-kq!&e%|m z;UAIB+V10SaRW#U5R*3prAlUC2s9dbhe+9#6zol)jcOu09pwU|hONoCUo^O46|C=x zei&sjVUM???H*N&JE_^cf=n%n{9Op9dvl&wPrCI;+*_xp2ugtnN5oNo^pcb(J>WVQw(~702IW7PVfwJ`wU4%I;E!U*dI-o8_w@4b#AG%k=o$M3XiPR+M_se4H zi94%g8Dj~YQ;2G-1L9&om1X6ysa%$2s|hG-3pegm2yvG};0^_uf!x~NH0uWrgrAr z#U>eKS;qoguI{}KB%}w1AdF#!#nB_@v~7qDbLulW-ABQB3*+P4tqViyG(A~PJ#_U` z#wBQ|>qwdQ2HzH9DrMgADTc2;&DbB-T8o1yIZi&EiN?D`9!Z$w7HO6B;a7HE3(mMt zJJ_YR3Slq~zA6M>xD9A0)qtx3tic(e8k_;C!5M%m+`gd-w{NDx*DvV&6>is*$c4U)R>_4XLN2rrqR>Rhg(iY|$e#TC^NZi2 zP?HCJnv+-?)MKXLV7WCyE065Qou}JK^5<{pAhUKLh!Xw$K9^ei+&iq>lU*X5z$*v$ z9Oi@C_pC@Fsa^U=o$O?298}OcuA#Vy3a9u)<-G2c3^$5t#{;ps0(G8BAdJHj_pU;S z@Z~wStd_4zNbqGXKwkZXF~bN*l@6pRvFQOOZx5IU+jEkK1ZG4nUz&U|#wefnK%2+O5{u(dXSXXg4f* z9}-_hjOT$VSxO}TS3hM~n=gXuiwN7I6_mHh9alzNO#2oGHh9UVh2LdR7Vd=^m_?EZ zcywcj*Hw`lkn19J!$IH%>qcn1QcM|i9BMXV)Yv)g97r%;8cmINNaawJ{e%m2RQohe zuW(Z*r5s_SKitppf!Ih}oOL#SQ2p#Kp*rq5BR2&+SA%(ucZ)H)TjkYRgD=ZZc@{1fsgy`ZDm?OEz0$;zXyV{c|h(A|q*qZZca?_x06F9qVsBb^D zIGVUR)77j&hvi+>sZvuP=MMKG!sc;rpI+W!UAUrDq#=c?#*}D>`jsBiYlE z?DXn-#7yU<8pagnn7%zZRiC4`V!^*twE2w%m1-%|hOb=amm&l6_38qPy`xeF;KuBT z`6$>po_&4{!w0F_fLVBGl8@4LH)fuau&s+@>}e zXg_v9jQ<5ObzMe70?``{J4a^S$zGAM$5fi?>{ExdGsNUIhxUpBc|NUhHn-z#%Mj}` zUd2&SZIe~Zw#_OA<)J>T2$Blr#%I%~RqCO^>^7Tu#YX{JVdCe_4i){a9DqtJ;))X$ z$M9zxZ=c9~jI5kbihGK0g)!w=zVV@OXzyS4oT_57zEvns5Q0r<8w;?-%v~s|6NdFY zO4;04QucYnW1%4hxD!y7pZgxrzPiU}l}h(TCW}3hr9{5(y)BW2CsT29R4P=J6nh>E zQBQ7Bx(+x>4)=i0*LOf$`^L#qtdEB|oRnPRsc`jJF<>6hb=NkfcicL!)y%z@4wHua z(jMbj>bDjUwWJf+_m-^tXJbgqQe~fD$$L!><3HLQ4^6Xx%}OgC*shbGGY;F^ z8TLqqmb8etIID<+C+nuTcYZ#3Us3;U-F(WIHQTlvd569~`TRuMmQ%by8I^9TEaxk% zbsaN8Ma$dRDq6UnR+J$!K!uv_z9re-r~cJX568&A?orEeqVFZaY^tJp=M}~auQ2bD zX(wc9VW(?-=*~2SLnP8F|6;T#ESe!{#w~UfZ%SJ9W3;4MPw8-f<0Nj<->o@SQ4pcz zbkT`b$m4`JSkTbeamQ@!V--=(yzEUj7s)Ji45 z^A&F;;AsWR#vbH2zsKtwW0WJd;D}VV;0V}avr`oui0WL_IVC7y`c?~No0CC1$DePn zwJtL$UKMwmxQk9CO-=6eWe{nu2B*auoWh8P!!b90I|Rpo{E<1?BkXAArd%LUu27f91=De&ZkFwVHIhD0O}Nhx#qIW1}!^)u<52yHJ0axs_6Bzwq)I1 z5>HbM$yE|IL`BMISS;+8FYtd$djrz$k*F3n*Qc4vn%o#l`aKFQvPZEK-Aq!q+C)wj zmQGe;DNxEgBubhg2AHVr(noxr%hCC#VSwKGfBH$_99hx{FcZzKNyq zIjf`~`b?VL&V{wMI0RMNIH|RyxV%{uM3rQ%RtP?P*Oa0%VT>vXeFSVs(yZQ%=YCX> zhAsDQVzI~iJ~g<_-ly!@liHaH+`&8KL0q96;gx52w9M3PhfmK9JHm*7%|=3nwDosr zb*49)79kK`e?ao92=JQ}U{R|kkgd66qVg3Nw}vP;ju9XDlpsk(UaBy){FELq(1^>B zP+UG0^vRRjGbTh&X(kGW`b6V|5u5-k0&lRvEz@1eu&!X$19v&Ul_7R=TB1yX<31>F z?DSTIjnK0)MCjG7!d7Q0wRqUrOGBM^HCZ8OX zt)^z|jZA8h&mG<#cpKuM?G26ihWxl8g4{k&4=S1^)W@8W)IE(eNl6&^Y(l*_v#EqTa%wJC+i;Y6zSMWG`HZ*YE>^WnteQ4AK^l$Q-t!lsy>{}^5RmI~vs+I?I!F*eG61NCVB?pGu2+1Yype z;vTHlN=<0#uP^hb($J4kv+4y&-%i#p86?4feNpxAJ=V*oStq&PN7HMXW3Z ze|`BB$48lxQhV6;TDxVk8OM5ku1aC+%m1>(c}Kzey6KS=nt}g0#qJ;T`(*wZ4NbW# zovG5?6uM&bU>z(3Yxolu2Za;^XCX8nwU4R|GxvLaR7d#j2Yw_$(@BpN!v4nzE8=q3 zq0bnF@O81C?9(Q>NP4p#A=*wGTR%f?l>vMP=)%nXL)6$dAT{d;KY(%*|D`QjYezb~GUozUP z|3tZ;&aN)?wU-PgVfe`Ml?@= zLP@H1o<$;YVPqk`kg^nCk+RfYXhn7}wDWiN?1y)mza3*)IiPWy0US!LQ+Y*s9WI#)55hrD7{If?K~dT5gtD%_RJB|UFbGghk| zFYG*ov5i$hM+)cbNz97xaRn;m?t6tGj?$D`N-;2gD~a$I`0?W9^PlNC?$b8@ZRIo*m6Yn( zC*aYa5)X)3>iLqJPzUTfKAXvAhJfR(aEwj|I7s`Q^yhADV}Az*557Hhge#W(Qiz;x zux|0+Gx+Q{SrPxu!OiaWl8ctJx_&{UqO1BBVxDZ}{L<`1WEHfU_ysdG7{(?GVkFoC ze@p<-8=*de@b_B3{2w^SSo{q&a&zow3WT9i&uxF4B5J9KrRacO0S{%whq#Va&KtbX z2j5W@gO=u#}mggO1{2{xc?@KKZnq&&GF4oL4xe;4r;L z-e-~+4p~O^+F<)JY_=q!AcTk;JTPhdoBz{A8azBIy{+v%0n<_m)Qin>3<_;yvQ9bU ziLrbTuR4q;iT5PqASK;2f)!d`R-HBKN-8M{uUE!bO?=5?=qQ3r)FjViZ0ts=?8<)V zn7X3UMW6CUPOjD~Tq2M<1;d(Xx&?2OaPjt-rmsx6c$lp@{m?a1dhM2w8HwtpUlC;>Xo&of!D;+WlF`u>{wQPLHE*d-&p$w%y1s>RKoC z(H}aT`ACZ8L;lWB@>frC-pasvP#(glm3wZRnG|HTADI7ok7dKr+0w6hSCgZZ=Kw}X z2edl$D6$^U)f!q>6Ltgr`wSI0Ws@s`)?(vt37sv!SqePwb(%YRAm$GuQ9Tla<}a3R zgE9Y%!!sg2y1M)dR|{yq0Q+?7QK<75M%>#iQ}#1Uy-M2c1Gd^kPGzC}?gtFag1e2| zsyd>5ShZ_(ZDy>@;-w&5t(KbMKB<2=hYoYMv5*SouHkOYz?1yYp2fkq&*-YQ`Kadc z9pRm%n7_|x0%unVCq&|TIi-FqqU9ym58mCJ;{1GvRb1GUBav~>yPMq|>fbv$A&K3m z_M^c_vq(MQ7{aTVHk#C7=~e#+y%qsuGWdPB&%y`y%b5wY@KM4vZ~rs zAb5BsvBgvIC3SF3p;c%!8jZnXFBWq#A7HRpEaqY_28+dFu@{5=6nnkjWB&t4nUSZ+%*e>dh{$|QKGQBDF@~o`p~kc>H@?E?BlRa83!OMHy{wt zTT%m4fAf-PK;kl85Zp|wrpeNLKu;W{0jjDdydS9Zp@`)pagfGQRK!PI@AOq5%_FV| zbXGyr2P}Sr3AKV|%`FR}O1OnLfj(xCON$vtFn^0;?8fJXjg3ZJrWtl9o`i47(IluF zt&DmD(}ipjdlYPYqd!tVn0`!B-iAvK-!w}c)lG@rd$@7=^30V2Krk;c{3pL^MWxdy zac%Y`qP!Z864yRmBKCq+iH1B>Ahg?@p$ixv>JsB!j}jB^Gt*yOfB<YYQ*P)r|g1P4_dIkTktQM|-mq%QI7 zjadMV@}mM(PSA~!vLrW$_ySt~_5MML3BwYR0=h())R2%W@cf>>$$40^H7~>!Q1NIl zFqd^ooJFNqW(weum}|vQP*v-=W20yud?EW*@QuQM>g?6GnFII z;I8Q`ie)~egq%)e^wOA*`xMRMvnDl_e3Y7$d`22d>cQstgp`-0cHI^#k!JBWP>pgG zcAp3*#ceMp%0e1#!L%u3G4u>*D}8-b?U>x+akbC{{OvoBYO|@M{uG`kX(Q18MN-W- z@+1=P?Wn7s?jm?ot0+__BaiOdVE+2*^UtT3r731)?Q$#XJqFo($W?Rm<;mhWZv0i; zEZ+KzeFHSNyBc7Q|G9(?cbn!@p5yzt`weUund>j;ds@1iAD;`jvv*5}SCJnN;2Mg4 z386sb*h2!7SuH!9!9&z-o;+ay&vgeQpBZufq4vwX~@k*~tg(kt) zN_1TlyqeJRTFiuotoD_Nk)Oni1Bf&&LffiieC)EFCs*ivXD9u0Wp-3o_Gl=HX0X$FZU6C$bEc>(EVf50t{`dE zr>SYhHCxiV@o9z@Sh}|!45y`5Ce_s_0$K@>faxowA?PNw;+pbSynb{Q?S}Nxo6^p( zXk2rGOlS9a?Yp^J2XPRsf$bw|of3!B8WvUS8}zNJ)rnSoqb|hAH(fLm&`Nl`wJsIF z=ImURq8?62(IzrfK+WD6@lgi3rF3f=PSCgX2C_ebtYZ>dlu?=9HO5XpEf_`h0OOpdB(j*SmfsinY>n5F^ z-``!Eka{#RMI9OPMUZx7$O%C!m2*YaZa!|9gr?(YMdwwfED+Y^7RC>&42+IAc?DT- z#bhOEPcpi-3Pdm3kfV0A_GvLft_o-IV_u&G#FUVgkXqEzg|u6hcGSRh`qGjv?4e4L zLiOZ)ggJ(3Y6$e$1N-L!|VoJPG zYI$;qBw_GPB5F^;A4+OQZBdd1*jXJc7c~!T?fS1CG9S-O>lGFoGS{g_OuOHr#@~}r zjz!o{oMnbQM`zj`i0Bl>c)lgV=(F^eOGNzH{X9p{#P z<~@>SPLF7iJzy$54{A)C#M!5EVnxdK*LiFZRHgynwefGt@m`PR+1%sp;ij4r*?Q_g zUR|}EE)aS6$>@a#{CyuwKT>C>*Da`5tyeu{1K>fNiEpo5HxglKIk6SUBdzV6SdnIv zz3ia{g!f^N<=4^Kz2zq>K`z6ol{K8BEYwoIU6xiezK-u!#n%qB z=^kjaT$P3l?U_FLq<5O9S0zn7RgZY$Umr-_i10RVh zl@g_!uo=LV-AbDQEF!#+zNb5`-^m_zC^1OenC+rCO-VeKy+;@R%ut7!?v}2pSlrsu zflS62i$h%3x5+8fo4#h}VQEy>s|kC5EiCCXDnx%vlDg_QiL7)>FGQe|EqUVjwbnl+fQcJ$Vt9^r+u>JeM-jQS-mEBw7#oX74#kH$!C9Q>P!M! z91{}ZX#tDz+Tyiefmp;A=J;p7Y*y=2fyk$aeyy7s{iTqyS86?*-|f?7XqJkUhe z|CoNNZd{MzV`{5G5LO?WMbv(R#OY2272v5S ztDl|b{IXtE$3_pb)2N5*TB|M$rkCL#Oy069kkX5}M&C%jipjfV+nl?2zDg@urY_l< z7CgpVmI5+7S|$1ryhXLkMUWIRcy!N?cLKQ91(3_GGer)&&J+==T`W4{u^=H0 zl)WP$zE5yzUB0mHjY>PLyX=N4IghV;Sf+49$??sRL=SnYcq;hFGA8=T0HG}oQsQDB zB|`4P`r2?wHj|P)P>5*n4vZe>z<$2Kuld^JvAhi4#rKS^co$)^9@h$`Cu81r z@N^zgAjD>ngOX;S=HTdgz+{8UK@*GpVn4#MoUfQ%agq48C;nJGvD%8aytS}SyQdaK zrCK%D3a)L9TwTdILWAWi)M=oKj>_9Bq6z#wXMv9|s+rhnn{Z9ZJbB`c*nnNt{C&3y%4DpKd3fu)=~kp6u5#m2GA;%m0zF zri4zC?pA;ppYug=AU3nM+{7^B}#&8aOF{?uUkw~Ih>`@8*Z$H?l!7+C%i?19d2qx6&I=h9*w7(Waj8%E3B|dX&r?0WCR6*-j=&rF7fDn) z***J|-@G;*scmH+fn~Ie_1>;HN@QTis-kvz$o+mtH9S^%l~q+Y%c24^P|IS!+vODn zb*c*>R~Txl!Xmo?Xy_KJjD}|wm*;WYiP5C}Dns{y2-A8x%dc|nI9JIJIaCR@sfbJ1 zHdw)JNA5whoLl8<3A7cQLG0G4LFmE8-AoLi$fv4G#j2Q|WkYzaAT8Oof(wOSUYA^} zOg>+BXQKo4xz6`Fsx+VSK76MSvRUueec(4lsv0HYm;hLTMum`jo<`sJ)qZX4Egz)O zxJjVr67e)ljCH1b}JSkKV{bg`ht=twJrr&VIA1(n7o)vnhaKv zt$%sCFPJsnAbJb0xnmtB?YpLr22ThSWT6BPFjl8YPi-t@GB1=$y znAO_b@>X+ccM^03kv=>qRS|k13u!@VlFe~BL&U%9=#J-;EBoQxJ|&-wq$?B8)W0qL zQ)e4t!<;%e!i>}XYxDAXwa1IKtawc4P*!8zf61WvuR4JEkfUZRXBql{qqXO5Dp7a1 zt>n1-twbxX1kSNW`dWP?e`_HbpLEtoo*zD36$X*Okn>eRYYww@eArKA+A+K1nYU=| zk76YHD1u~3e-O&b&mQdT9YkDo89{Ad@$oXzYcAZ=XO@-i8;%;#M@s!=8;w=<2?SJ! zkFpWSF>=-B*E-D02MpAFvU*@iIX&1;53+Ah>sGa)7swSOIrxRZ@`^3?i9YPwTpxy0 z;+2`JUk@bN)rkSPXl}7z(T&@ESYrn1CoSsB4Snd%t?>Xh-v^?(>_f3B_Mtl2_kqq4_8#_LhnClzOh5es`D3&F zggb`=x%H{fe$KmF&-y@rMtWyQd+A~I{<0A?`VlnxCSO71Vre}XdZbpS{knvf1(rEV z)wT3s*z8)FHvEBHo%6?gI_z*=U`T6XzCq`l!P`a|!R$;CQB*|Mmq@`8q54-ZVk$|QM6ta7`tN?)ys-iOfJmz&1Aj1 zD93|VBle~13O3$)1plZYnhlgLwi38Dbk3EyzoqRCL5?>7z!S^X6*g7Rw zx&1~iZi^KVN-7fbawk=sgoS8&lB$p$$H43ipB8zG)o~WjYgF$Jz88bub`W*{d5}XUHwn`R!WsQ z`q!vRsx)a(lw1L%+AC^QuYdll9tiU90W1Bh7hHZa%KBK3@1T{h8$;KBu-}Dh%DSNK zPC=c-?NC=Eu9wHS+uVisKK|M8&X(RM7;8sG6ks|$oPW&K=b}@J0yRg-6QCnmg>THe zW_&Q+UJDsau}4FOQ|#@K!6ebqq?UX^OiInvH7U9KtjJ*Fi^fAj?G{5Mlt$ybYoqes zuJmE!I_6)UuLh07i5(Cs7#Cdfw_7XdqU%^INX9HXs8$J!qcN8_dj(dWjnyb8v@%3jfR113t2Yh6>9wjM z>TURBm1cMUwMmLdE2uVX+d4Z?4e|gunCL)K)3Waf?dsI@5Lj&wg4OsCJX#-0Ypt;3 zO1BYf6>BGHY;!$x2mYu}Gwe@VBM8?EH=KB&XRW-NG1~c<4tA zVp==ah`$qR=Z{w08f+3@sPP?%9D6D`XU}s^7S1z!A!|#&Q^9-s0zV|4lLwCUhm^!6 zOG-4{{J25m&%(HVpyNkvUFpF(Ue#U_r*4i%R-{B2O84n*66@%ZIdyvyXQ`|=(e34d zG2qN`Zeff;B%EX*G65Dh8^&hJu|`IdbG(vuoN$rNqk43Fgw>#b(h|RcMH? z6jcy)xQdNSYd1%F`t3>fb(8n%y~lgH@+0=iI|(FJ0J|%w)okxQ8um@&8N@*93@JOw zC_^LwA4Qni;v*m2;If~`M-LS-zwed3nQ0vE(=DBP?^uXlSU@J9gEb4uZEEjey-CHf zkTN>act9;gP{SC({hVrU%~n8LnLR_$)Fcy*KHTbG81O3B^yMF2HK2MeW_eyj?6Ic3 ziP(BU13nxpDs6{CTiAQSVW!^b&dzW?)k&%6qY-PeOVYRes(EyzSH=-Cmyo$_>~Rt%{6 z?N^Fwee!o^dfgCYrdBOzFGpBNIb{d=Zsc%=&qF)@BNGSyL;k{qgRJ)#R@cmGRe>({ zLDMZz=88fB6<#aJ$GHV+=N`Axo_VuIdaIjN=eDcxx<{TFNIX{`>q4lYvzv?yKEQT` z#3CEI?QH>Dx1Rp@Tl>>8NQ%P9-dl{kCeux}r)CP!UYsdWk-Z-5a}z^jTC%lT#kAFE z8XM2TD#g^M_Q=kHT$iwjrmyE@;gPIk5jGcl#2YV#2(4*5=G!6iEYYm1h?b#a0P<#6 zO-oz*dc0?wN5dWPm0qsm5vvBELT(MIAx(HA%4Nt`TQubU*%sVcwI65|=jILN(^epZ zp|Xjc^?|h4&A8qLP@OWO|LRoO1;JeEEGp%jRSnea^nt#m)Y(c|G}%>0O8HKL8+q!i zHj}nXkM%J9HXmQr16N1p-ojpOvorv;ja)C(SeDt%e~^$3gEoD(?5OD3)V51}*oM`n zy}30v>u|FVcY*3qq(9P#dd`hC|5c(LWIbjpu1fI7W*ngI$LlkZxlX3)8YKi&x@@;Z zq*BLn9hh~}Buzf@DmTvut%45;%*Abmo_rxfVizg)H+W-$+l;=ekFf%ufcANjd?n4P26fl z4{{EO?D_2BURGx4h@kKc*^aM1TJd<3r-^Uo1m;7Y7kbVrJAn8~?122?+>*s4HJ$_& z#?S3XU*h1bC!*XHhuPbfrksb$L^P^!XZ-mpft6=6?k;T~Ic4g>qa(uho&aBOd=ZeH zoT4Mt-m}@=z1F3o9^nrT9LA~k2t&@H5Mh^oiYI4KIH*)y?E-w)7=9qf8VfXG!yp9U7 zoWSVNXpUx#bBwmDU>=Cov5)xL{^pT?`=WsyKGm5_cUpOP?B3op&C267U9}P~@~Jiz z>-^e_ae9if)k1nf5`Z3&)B)?T&}a);Ev?hauSVXv3e&30emzmAXB!nzicW9xF;w`#fd>cjyV_A)w;}|RB$AD=p4|_M3gZHkw35?f(Y)SJ z)So+R8i7^)(e|Lj3tk)thwCGSH1qt>Ek7sg!zK1P#~jmXE{EdWEnP&0PzXgtj>c7^ ze4VsPiJOEKsC72a51aCOrAA3o&BkGt6^&38qbcsMM0^R~m4)YIBncgi_g@{-zEh(9 z3UE$aD{x9>Xz;DS+sN(|R!2_cv9KJ}Tt-Os)ZaI>0xf`K)K*+ZfL7d;_PI7)D9KBIoNi)QTA&1R>G>3WEH3!#A&>co+XGPhEdvdeQIT*3#oovZc zqK8q5@5c+;(2kTUe&JWoUYh>GM&Gy74B$R=qv^1LQQvb~u3M@Kxwbyl^N5kaY#>&b>Vv=_3Ye$TZC7^wijKZlWYBH!E8Br$zqU-<6P~ zjn(cTDBgR}gG>|(`ItE8a#Pk2(FJCHq(gelFISEDU7TOV;9-6rt6yBz{V~37p>bH9 zb&m%!JrZ%|y)LYpfJcq?SA)DJwWLr`UH9~H=Znv;e%@5oq*9NIlnuxQ%O*;WW)p6p z`zXSto0&7{!3QOZwO>zHpb0leN z@-?FYoKu%_HXYEHq|0w`%3$NgRSOLzW|-7qIV20CP7rM7dMwj1H&;nIyC%IKpW;pa z6h#Zv(1m*482&ADGaeG1dWrsd^jxh78@K5kV;gXPYu(l7Jd)uieC4ocPqpSqhdizE ziZ~sa5a@ClM_Y_fa$E+v%-050Qwk@0#3_u8;#_*Kik4;k~?jCuiU#g~Xk zxJ2}YFVm(c*fn~hhYTDIz(Tf=Yj`_z9{V0#IQ3xu9#s## z+pROZd#oNhvW&{;;M$R44y%*CSgQCHdz#q!m`pxC{3dV8k(m1+h~VV`_a;4CJh(!h zVGNAF36}xdGtB|31&kpOEy7Oae*RE+nrz|;) zjUTt_-)Y6fQd;pqPc7`!SV>pj21MudVMUO~Ld8JsAB;K>rAYqvTcbKeE0R^f9$}qv z3!em?p!HXCe*bX8%@VGR&tZuh?AO<@m}QW7J@4w~SThVab`INRBD)^l(qfTZV@8kk z@L=r`%w~1Z_=V;LiTG9AB-%bkykgR&tK;dsqbb`lbze!Ag0JZ^VTId1RM^L9fM{JSA$Ag>} z%&XnPd9hpg{`!{v-r&7OeJMeogwTl`Rla@?5Byg&beNuK@b@-D)Ygloe&iL|!4d36 z$}*9>Z`hl&cy2kcap-J7JC;C30cDbm7wH0eOTB>#EkYyuSCmM5Ne|0OroE*iP=TF`&NPx2a+*Hg zl0$UYkvZ_6Czn5;+m&Ff@73zZWIRbCX?=^^EM^N^*|QK&dg;aZfaV~_OF(+oPA7h) zK3zN5l3h#yI6wvP8%1z>5i>b-CfgJNiYUeMHvO}s!cDvf;3VG~eY#YPS5mY+yMJy` zC%W%ln3*1~U~912{eh-7gsb?5$j#LTd!vW4rE{kRId>^k-<=NUQGcdC3W;#|bPXPzT`&pZc} zqeSFHAa1pBSRi?s6~JLra>FpS@o!FP92_~-h;eVWfc3`<$)vNu3VgAXX~6Od@36Oy zOV)!h`y@TwlHaVFNXm^ZSNGUUm~U{-nUS-=8j*;^Nol>5#ZFEN!%OAN-b;~#{BY7v zC#(A0fh^3aa0j-d!xl=}(Lf&xD8$qPX*#MZ3v~XmCZ$BjJ6CnmT6?6EGh(0a9Br&z zoVi$AzzufkN)NVl@#^%=K6HBe^C9S^%LCAhmoMDw*Kle2;s8{w4M5e}0CeVyA?Wm_ z%L92YPJhvb-kx4k-f#Mtf$wy0Y%X4$>A|LF`ml?a`>^RR`ml>v`>@Y1Ty3=>5%%e5 z`qHI~Z7|a}J=2E$x*dfpF3hzm^OptMFmW>Nt8(P%v|>ek=O- zD{DvD&mx)b&312&bWV*0wkWL>4u8XGlk>}flj~}XBDF(@Z_9pMv_I9j(F%3QD7TQs!yh5dC#0DvWY*^rre6SdZhtnzTbhmj;6^( zB~k%D6$ffyvQf9v>pw>FQ_+BsTy=A-25LK7&U4lT{jU`gGd*~ z1NYrrySK-WqKv&3R>iGi2_*U`gI+jtlo>39lo}>-X~pHCxuSN11 zezLk{Z!8|ZaERF5lD3!vD%hbnbNazhmb=PJ6QowJUr3w2aosH5sa9n~&bMd?u;H3^`> ziVoJPw&ypg^tVZky}wDd{!TYh>tG#K7wV{RuA@RSN6U`wb=gf_9MOCa%JyzebhGbz zzSf58AR{;{nso`wFLvD_-Q;vJCS0mLuXs|4i0pYxCi4jp{?ElVAu1jGsJKPodK|L4Tz0oXJKZ~Bw>f+V(O`jxVrWhQz8hKp$G_HT;p|oZrf|2~*+B1*ZbKNVJ zZLF#C%K|ne`P#24lI}xnO$LLtN27=~BD~aTdJ*08s4I2!VU=`EU$&OEQBuWN#$*E4 z^0da!_u=c}s@AS~hUkS4?Q;5xpuINZAqseCJpIH2SVm1S^Jw!3jYrj@TPdq78;_56 zbKys#hUPh-TyYRjZVC7n>dy^u0Yr4)ujz{cvq(U&7$#+~L;3;aEz(y@z)nYHJ?p1*4=rUv25@ zgK}_8JXw5gym@U7Q6w$<&+Y3bnLxk>*1e-FzNCD;E~4c^ynF|*ihEdoHHbfe*oKr& zm^5xLOHZ0{wGe`f!*p)CSzs6ujvKUxXah?MIlt=gr2$N&Zg0V3N z!sEVOw1p{aJ(oX?zzlOK!_w3&QA7e#CX(7m;-@n}|8Eu^HCUxgUb zw#W3sx?qcDGuG?(Ix`c~X$HRq|CKms@#QU9Wkz^4%e zb)!ZWHZtXBpky)9L*u4rV>jY+)6(axNo^#}n?t0|D>2EZ8O~8k1>EEHcM7c>yjbRU zYs@XAuu-l)B$7o9k6;i=oBB6zT77I%X`u@07MQ*&yLtPbXnh?w933F_u@AD{Thr3# zZT8WD#pSmopl(Opo}Zb%;9E(KOVZ5oe9ib`jxIl5i{OpB%PY9htWICJI32lb*y^PQ zu3{x}dp@!+-<~P;RzZoB89qNgJi2n}azs^+(~ zqT9oqmC19lCj*Qvw;<|yE52t^QqHc#9Ma||_FTZ4KlCOUApTUvR4QYYh0~l%cl>hb z8=YJpzQ~bH?-sabAIkLA;o<&+(RxJXMjSzHf)Tu}kJIap?x+Dk;c(yVCm;FZXflu# zn(%?7`kq15Bo2j>(?D)@c>uc6MNvaqb z^+?zDp3_03RKukwm>l89WNTvHP!nxj&npPo#T7(e4Ny31CtlJs246|O=Nm6gnDId6 zB=-mzP3MvSG1j*MqWxBeMaw3~f6o9U$pux4Z@7CY=Fa=b)CQK8yo!Kilwk_E$Dau34bA#75SrW6X7Gbmc$?V z!XNOPPm2Ui4?@5&J31qrS3={F1E;^m3rz$7gn>76+FHm$uN zCaxkgPL9ZpgT1Rsk}KA(q;;3iJxC8c1omjirEj)O`&D>tGqhTs=8vPMn}>V)ejqi< zSr2y*tK3f!9-%^}Sv?YSblC2mUTxJ|V`RR4@2*|RPs=Mg0Ab`H-fd)>XCRwaa#&<2 zHg}j~d!AuQmWsF>r9GUOF91S*13=)Fy`1fEYk&Ji1CSUY(}i4sHn?rZ{VN?zJgjqx zBq7{kL?HU+GyxI1{pMQ%*wCB;2ymV=hznWTsN|U-DcN9hRM_(nURAQC={UBh@4-l$ zVd-LW9f;cMK&*~ZWYg6sxdNv0x(w)6o2)QR*ce}iKa31m4dmKLLTQOE%CRFdZ5DM95e_oB(EeM_X%ye?yK z-Rthb#HSc`p6l1oE`PLbqBjoTyVQ8$*({l4sa$TFBB0~4Z=I3kJ7>f~^QvqCD()-+ z@smLlLta(YC}}tIOJ)Wr4u7I;U5*&tI)a>TA0?Te^`Oa7+BurQ+4Qn&dU2H2pE_5{ zpT|mj5!iSvyW>+7Vo!~Y6Wn^r5#J9&ru5e{o%VRq@{ztKoIUvTz8T;p=>)9muL)>v z@S`mJ{Ej~?F@C?}&%v&IqxV$VczI*|G;JNKxxHu8&*;s{vwjzD%LH{!N@yy+J<^jw zn?%_1@K2HQrg7pCm3F?z0*zE0N zd@8>ziaQ{ukhk~Qny0$}9_Sxrd3Sp=qrsCf5hO*JMO12~2tFL>q3u_CX*WH2W<#u@ z^UCEfeP_>u*)M^pZ#Qv;NdQ>N%CkM~LC^v}?sKdFh{&3$<>C7~B4icAE3^f8D3!*l zYmZflDwzLDBHi_E3w`xs{a|Y|;?hfrKdp+j9XupmdNO+fWK2Xen)b)f(xHv~oL(AV z6lb+T*RH0$N0G)ZaN~K}S$(d#d(M^3eL0#d=bp4lFXXcMT=SkE_;2E6V_~auy{qR% zgx7oNypND`FOClFOTjt1{v0V=X3FR3x$coYPugJgS4!UJ399*O^xOtbP=$;ouj!q6 ziyUltU|#;%8*+&S$N<|TG#))N!-u8ZuoLQ*2%mgXGkE~I%j$gPu$ON^L0Q@<*H`9s z4Gc5dwZZg>X{I_KEJBqs#Ki{#j;r_d*`k&sO!?lC!%eyTTBo_ol*8LqSSR@mJ>1R# z*sp?hO#5?=+KgF^(z;RcWBprtsL_9(mi1AUWL6sj%ldb)wyD47#`#bIu{D0gZjR)L zsX6tZo^Xd>t%N`Ok!y#(7iB?xlwqHg9sX^O#f=U;Bwkh`qFIBBM=k3s2m^<69^1K3RKVlyYCzu#1;XNOwhR z4SH zaG=xiP0B!ru;YPjq&M0WH6=S@fa8}BCU}@eN^BYRh1A+BdqQ9R;Um>iMt&?<*7aS! zfPjQ+R07i69V?ZqmPjRkR&sG*bg&EB9$w=yhqQF>`s()R(b~p~q#bB=|KMRn;is|_ z+BYwZ{B?q)rwvTcNtHyuQE6;C2j%gfLwf4a?2UK{NOJVWWE!^|=M&Lek@&O#o7lY_WPSCH&#ULeg}6_A@%OI-NO?TJWD`>2CeN#Pn)3*d)Y#NU#M0a)07Ece(0 z-3M-v8}&gj{gOc%#}W|^%XZzSfaFOj*{a0%_0`=H+tI{`P9(1u*g+qZ-`XsB!1k`& zQ{=l_;I1VYN)c*JHhM6WCtGM*HPVt66K^dv<&C-ZfONi>u?witKnvEcQ|r@B#|12r zz6)~WZ^@#wPl@c8soS+>y=GD%9yu)X{WWgl5;E6(3-OgaAaqqE?Z!F)4LU8T_+iPi zW!f7rAL>+XVtjLf8gyQh!iA8A#@^Q>EdJDlf2~_j@_(^BSTZgx%ZY4fG_8+hkhKOO z;AAjDi)YYh5y4unCFO&KTTh-SV}fSEBA zfN_Qrb-qy5(k$_kM_;<|RbN1M-mOXnS{2Bqs9BPwXj!HO#+#eb4XGO>#dxiN_{aL1H5dP_thJAl@ps)!hK+TssnRZIEq%aaZ&wkt0{r&b2sx zAb|#4&0!wx6L%EVk926r`)nXmi8#p;pRE$UCoiPCqE?5 zI4a_IalH0KpBGzuvaN_~i8*VUU0DO@vUhb1%PINT-A~vkC$^k*J{!MnfHSPhm2KE* z1Bb0uKEU@7`QAL^2+Cto3b@fD7M*Bk=bZXw4@#YzW7+M=t84$U&z9^Hqn-6_mC-G6 znXMFJJg&<>C1{a2uYuB4GYnWn6Ivn<^@@`oBQ_679tYL_tIO*;foXFtm(5kP%uSl- zQC41SC}q59BCgA6qH(BGC7VY(JJv(>H4~K%bgpyaP~KNrdq>Z8ZYGPmu|QHnE8l+Y z5GKh%{mD0W#2&68qUbu6t95vVemMD>UAoe9PJUCG61TQ?^;lm8s7?J9Scm^oC@XHY zKr3MQ-PYdo8+7uVQwwA<;1Gd-&xZv1@veB19#H@?4 z4eT}biI=*=R5Z{?>J6ajX+W4#*?)BmkuRErF9nQO&*LH%@eOHhTs*!w4GH@U*(J!u z`2z6Jvc9VBuTIPTOp1zAkSPwQ&)$A%I7 zr55vi8xgPt_mz0c=pd)4Ne}tpyP3oxv*UQ7Nu=SRqurgg11+%zu*h!bX<9%{_(=fE zlJZQ3F+TV)h~jm#(zLqczJO-#*Y6mX=bp!FGB4{h8A&|C15{!v2%siMHL-ZxssRYA zCj1o52W9s5S9Kj-F%K{9O1tDSMorDEZ&_OV3(PNgN{&S*8M(>?S~)+6X$`R>2Lo@S zya$p~gwtIv-}B%Vd!`gMIr2akQRQ2ZAHFh1fF-Cg=IZ7`9izRDxi@u8z2c%MRpVPD zR%K&RD&Vy+G8GV&yB@E=TwPbgaw|dM7R(+GOZehbGP=5KTli)X{O3 zGEwzWGu~(aGhsPL*#j!a) zXlNZq2;=NT4uF>_$_{n$?{50kay_$tJ`wbpMnTVjDm0&N z>F;tL6(4uX9H^$T>YBRwSUKf9rg1&5|1PGhY1+p0a{9u4&*}FIrEDp`o^7}BYsb#1 z^ke-?pKL4FdirD{BBo_00Ok6#qHMY01{eT0>O(8ezte_WKz5Y)!rVe}8xf{*)seMD~3;mu?KL z8HnuFh%deUz$S86)5`9cX0B`hIwKzVx&58f-^*fl{Jmm-uiD=k56hu0^$LO3yOcP&=)EFM9c4X zz1Y~+zcaqLC(g*u#deCQ%u?RahJ0Wg`;7J?M65OO@{w^;HsE_dYHbp?eni~Xe$?95 zbwv2_#_fg<1xFfPiTv-Ml|1PGL76u)+nahjpl3}$ntBcPpWZFd1+m9@&B4?g>}%T+ zcBL88Y(COIq=@ZCL}usngTvn_KLYr!W^SYzJ<`6orMw|sq@OOQuS98Zw96*)LJ!cw zylR_G=~Gt3Ju%`%(bl5ivkEV$)_eNnrC_2aY(loz3#dTKc8NXk9aMq*{?tkRN}gIc2t) z>#5&!VC3-WN6WLC363rMg0gmF=Ggp(Yvr)Be=` zZrdxujv1o0VfpmD@Iu;!N1V0sacOtQYP4F{y0!k09{o-uhxq>@<7_SL{9Z8^jNw=@ zMt>!||0>I$9OWtVH~M!ZJgH+{PlfzNFk{`Om;dJ-MW1Q1eyyc- zN!>ykn^Xy8g|-34L>|t@4;AAW%Auy5mN~H_q0v|f*$ftOKk6)r5!_auAh9?S>7!S9 zJBf{E7#p4D#x>4!s`rJqj1 zCbOkW^!b#6-%;6=;u|=Pra}c zMo(k(>FH`tZy*Gi?EPN1#G)`t->&3se-dVoZJuFOBmIZoYcid{6v5OrJL#=uqbR4R z^!B=9XlEETvGPmHV#YU2(x1&68tn6~Z77qrkMtod1eU26e?*(aVAO0n=`~n+dTU!4 zgY7o0eALcgP8Da^HmkhTDV@D*3;vPHbF%o(M%xeH%pm7%;2hCa_A_!%%6mWOG`v29 z&6UmhjJBUWi*K|rm`UEd9nleE#D?t*+}itqoqJaJ+a1OGdZJe&bKMp z1zJx(Gj01=U8P6eGUrrBDf8cJWX~#B;Cjx|rm8WM{;R6DJEE5~`b(lN`obD%>q|9) zAC}ZR8r#sNTA$uS6h{EQZ2uwTUTBThWv$s2(F(M)ERF=-tf-YZJ*xh9*o>ZQzOD&} z=TO6Ew>1+R>IYjWVlQ*KY@-HWSXO>m{=-&FIzv2bbG!}pijjU~{gUlT*dr82+iO-c zb+KA}P54Q5G6x`?oaAtgrdIje4^_vG_^F?E(|e)js&%00R}QUV=Y$KrgnK#nWEGy% z81d`)vf{@Qsfu7Z^>GQ;BI&Q29c1dGk|V^>DpjHnbQR(Ve1K8$9l;ebYl6T>HVg|F zZ=7SKi@sL3tyE}>eFoXgeSax?k#zYprzruyT9*jtJ5+j|ZTv+_%Z$*LacAh{jBW4i zc5qpCK*#>9L8t*9zER}^Gsf429(Km5_YhBSWI+%?)Ts8C*dU-Z`aY*t5v7=GpQGUe z7VRIV^yQq|b$rOjoa%z1@jS+sQF5NfJ`;28iel4>yaQb=t0u-6Zjvr_A!h_d5CTJ2 zHG5uGe<+=&eu22pdRx?Ly06fJ^=0Ttklsb-eo6m0GGo!Wn$iuZde`u!9cG`s6TFZ* zfL*hGGRDkmq&ns6DzSL3tTny5#bvIXT=z}&UdAcavSzE+>N-DZ&-0l@ed#pd+&EpG zls{;--sydhLg?;eJ)?tq`j**ZKH(BRv%Vq`?%n?6w9jf`k7K@_cG-!dC#)uT9Jwe7 zuKiI`d%cm9QsDd<)%mSB>u>ej{qGyq$!_3v`iOP&6rRbtuetc7{87WAYG!59#=J@% zmmm6tCqgCj3enr+@?WI6%N_i{X{+E9d>B0a@O{Rl&__1c$PbUT z;!6G)k@~k^$MN~=vL&28D`7$lJxcLaCH2B=JLgF;_E0~9vi7zmfv49#Qw!-`)cio0 z*)uwN3ijq-OCtCG(hl_0wP}*SJvy8@kbsZ{mh~Ge&p94+0R3~gg{!i6v!_89tft7F zM(vr3)x&CI?_iwhLEurt55hhorsZ2WJg`PLi0)jNwl@@hGDG5#A2GafVK2WX!s13_7 zqOiF+IiMlyZuzR)80MtKaXN+x=9n+(7p;bUYVrc-C=ZK2ZT`s%J-z3fEX&46$y${Q z#B*CTh$YVMi>)%qHW;?YU30_sjmem$=jE0(XXKFRGSeNW(6+>!wU?G*(ktV5JXNhQ znrNl93AD<@(r?!txI=H&&RNF|HnuIc2)>AA!wfQgHjHtt7|Hd%?xUJM3a15*q_e`D zE&R4b!|NPF-i_2soB8@}ZEX@}-f*p^a_RW&8rf+Hk|l| zjm-d?L>G3M!&EDu>sZq}ZQ<3AOxU>|sLmDPDPBJ7|RODxTh>2i=?;x#-tv z%Xf38U&MHvqK5Z}^QQClNS>me4=3j@bukaGQdd8J)aA2y`nrblM_o<>r>|=$fBIy2 z99>P*Q1NGzM`=>d{um7B9O~h4&LR9eIWM)>1GImN@%i|qQmIof>+IF*?U!oT>+AAW z>m4eUdaEN_cHZ~jXd~u64X%P*rb(-3w4K(T!**JG*4k+on^CN|NTd@YKwta&0(RHD%s%G5D_bdWo)IBT6F)AnSD%eO=`ON|4%yg-qt+B;qAv^Fc}< z)HT+}%5-r^*lr)6%P|?{&D1Q)*eCjj1D`9f`$rJ0JScNq-f-IzQYg}3`lK)P&-SF+ z^fgi%@<%O2ad1c3QN;gY3B?tKp$ze3W4etbRfOy_ss$N{5v)}wamXb1BoY5(*@XVX zX~py7D)On~>{7(?)11ZH0vTSn{lV&=l_m`q7&;Dn5H0^DIq*nZi`~7p*i!3xQ{7^zQ(e^#? z@sk>4n{`(ol-X*Ze$(qdg6T?qZg-8Ed*ZrI5NiRW>W(4^v}cSVOubpkrS}+D>}{?U z_14o|Xo%74byLypxXoxugxz*CaqYynxIcV^z&=#F_4y~t@sr<5c#dV9-kXz9dQ1Po zDjN~?liIS#67rVmQ!M{a)6~bGs;$uJVYT!Vb)4{}=l!g&4V`d;{^>A$Nr!?(3DD`v zoN5oBXGR^Y&}I~>j#GT#NROw!9$r7peCW!9>V|0;X2M$WzR3>oX+7s{`VEF^El*gv z-@j#>!H+qZy2b(xZF>{39IyS2py~B9>A&OmBID%8Dz}#4z0CS@1GsBN={f7#nD|e2 zrG@@fIwQt~8Ah3azCUK#>HLw#4^25M2wf8E+^L&@T2XN|Zxt zp{n#wpi{w(~YA@0AUs z%Ks@N0DpX_|7aV}N{+yc2~Iey3gPep2Yd4PNK`d^Mh&dS9c^~r<8V$7T~uECpOCZO z!pO&A9?$-u=ybK4iyryfgeK}T^(>2OZ;+3@h`HId`K)t<<(x4Nih(NFKy}4LHN%lq z&rBDCb(LU5+O;twhzayLUFnuVBkXj8AauS{mhplX(=WQ^`q(vjFCp&K!b^-gn81&N z!!vWxDs3d2;d<0jI6y&&K=j>R|I%5Y)Ck2m&&Ic&{(-6MQi(HPshRaUccC!UayjQ+ ztW=bT%23m}zL*upd~Ry&-L~x(wV|>0od&ElVmAU$=#3d+l)pzk3&-Pi{QUVE6E?pZ z#^#izuO5#>pB9>SFAleROo>@mGvX+GZgRd_6jIS#PbD!i>0TzhD zcQdWg0`#5Uf@*?-(`&z$oHF%Z;q%CitSYUO8??Yt1IKMfDC%@)Eoy;=V+Zyfg8864 z`z5%jp0}O}7HdDfW~1^gy|34xdkw_y?5m^5gw*J~!`BFiTc10B|0tD{5xt$H)_d;J=PC`%qVk>XAOH|IUYuBHHChh zrtbf+vG8&JN-aKD%RvF@!H`tXF6o?^Qb;NHvwegU5c_0z9DQf@+(s3H^|C^KV7>Q! zJ>Utor8N&GPJ3>L84$vG1Z_dN@Cy3L z-01-Sx?eX)pVD&IBZT!?j@ULX3vHOo`qb<8e>ax2cS7oITMg5fuU-p%g>!F+v!w5V zMgO#wzGMcFpcxP7AI^(n18OMa49|eCK}R)BC-WESmg@JGecb&|{A_KUXwUF3*M)Aw??ZtYrIG>`53d-c?6!IJ^kpoQ1!i6Qa@swjV$g>YFRaOvX-~oNEZ28}Gqt{uP%ctfR z#LvLJR^z`42I}ELE!(1FiPrHn!>CV7u_M(|6f^86dTAMjNoaD;nEc?fmFID}A=bd8 zbw71}s5kI5Rx@&m*TXN=maY!vcMTX^F7nSAh3o4u!q@dQ=}T5-=tzC1XXg9_#Xf-q zv|Guij0-a4rk^5jEGiYO+S-L$a-wzDQBB_0)3^7PtJavriXEDL)@oOVavoCnOW9%A zYx|NEICED9`U;Bk-KF$iXT+@-vo5zN92QLD6hu#%3*Uh_A#BQ{zwO29d#~qUeX?VT z`d2_cOoi8pnbyxL3m@GnGw{T<6@g0eQLrh>n_=Xzf%{0Y!=On0Fm)ncH zy+ps?;H9~?sNQE6^sigpUUv&*`Jl1|g2>d=kRK3<`mb|V3z)+=K6@?U}oH-#z^saMIu zY~O8U+4xT6Ovo2hEG|mB06{JER17r4-P;8+xr8t(q_MBp>TnFFt7BggmlwWVxn?_07p$!SK~ zr9D_icb^T$R&anukUm3m15BN25|TDrLN*u`&mFeJBQcuOrI;Sn=Q z_ie8~a-`SYQ8c}|BK^n}w_QyB7Waj3U21TLin>?BO9pW{I7VEbt4kqm?dM6J zS{%Z+#<7(2o=$2reLPfC>G`g9iUo}V;{b674~$ydvc@o{)52PHwlSPuvly2z-QRzx z4HyEHS4&o^|K&f&6x5RT@m#3AKAohU@cnk$>Guw|GlRyzdOxAhdh248{>+=#J2BSH z>bS9N49$(HEd5126cED}x!Nq~o-r+d*@CrVZaL;hALWLIJLicaycd0e zmaw_e9e6){l+oodP`AlC>F&tB!~I;n9?8?LupUO0Rq-EYHOy_Z4buc4Wi9(Kv*m>$ zk$ni+*IfnT3fK2X&DFP#%zs?5`3WgvXs%(!FrQ(j+2<<#4YC}B+Q%_xU(RL9(NJTw z_KgOk+`K$vx}ss+imY4v>aiA_iv4aJkM)GU-rmXl`i|1kEwGtEH^^JA35o%pJhu!W zG=cU8ZG|5pVxdpc*0pUrFm7@d+nf3=uT1)VXwr_$FWeu*x60q}fcn__z!ieQV*9b( zF*MEHxSjHEmFjvnUm4IUJq~*}aj(xI-PX_LWAj|bs^$R5Z+MbU%^_M8W>vE)XH>NY z-PZ5tchsV=P-* zD@Hx|1$4z2wtG#yoS#`KPzQpRYr%^!Q+nFwC7S&$+U;}kwm=ZJiI}VQoDB0}YG8dK zbsMeT?DDx`7Bi&iDdJwP>ut^~c#HUpv+1*2vJ%W{L<_$-uZ`7jQPyYF^s6CZD})7K zi^JZkb{_q@J!e?ceZ~>WoPDxN;O}5k&!JOcuP1kh>AYU0)Lb}D(8PrLZniNDY~te`q~~9#;f2vyo%M*%YO<|K-7b!wij-9sgx=?Pq^R^t^u)} z_Jumg!K6>Mv|j$NlaQbnXv*N^acF*36oOyFE8I(C2yIq(Anp9ittn20%nTiZ9_Ey@ zD{+SO_NN#`wR!1|;qIg4Gg~BwIHb4R{wv)^&_BK1QuAGxxLBS2muzZ!@s`x`lb9Lz zE{D$|7JEI6N!Wat>i)PmUv9VRQem0Jrmf#EW)cj_J{^e-;o`bD_dA=6SGCG-&!2*v zod-?oWmVhD|I*#wCyOJ)%h$yjmOm5a!lOHdgvJ9wvtF^2>Y3bq-=s9jw`1UaawpeR zlafy@b##mt@3)`cnbD0s+;`Lat_ACwI@5PP{5J}DTAl3Fram#U)0B@CFp1Lkg+S}?y9c7v(Ka_`Mwgau!r%ys)6d2AJ1Q0c;YX_l#x3 zj5Cr@k8g^>I5gLHhia*3F>2wrZQcl0P((=8chsfyShQXbDs@~{e9;%T5TM0WU6=uy zTc58s(`O#(DdQ`;*!dx?)~(S;7zox(-lKIqPil=hc5$8~1iCfwa&`I->zPJWmzz$i z{Z)IQTIJfnf#3&Y_hntr_rPP3hmDqh3`}O*HGL0UW^tWfY;gG=H7vGkh~r3I(`o2g z^Ya=X3rRoW-`|K=_Sb;v@Za!fp>$||(|d2w>H$QHzv)#mY4s{CD2-r7;@*NDq_2cs$Old%2wfG&xV~? zW8hs-i55;X{2Gdv|NDaGhyB)zdkDdm!*ILmkhsYE>W79d#WKqrA6&)idyMa|lf=$) z91-Fh*HjWgdqcQ*T~4V*W&5fkd5^k&;|kh28ynVd3@(_vCsex^?BA~Bbt5xl8oF~% zeMlarCc3?#8fpqXu13dVn53+>)hG>JmoXhnYU=tGMPI;_OP21{g>)GEAfpPG35%@8 zdORc_`O1xBQxLLC332fsX~vB#eq85p#B4!9^>Mu|TUejIUDikz>838lq0DJ2SCnaiKqvve_+; z|2k>YaXmYvG;go{GT3bn0G%Q8j37$XP+VMPE9X$%{qMp-W_Jh~%%m1sr6qv!#we!ni z`*_rUJT+9b69YJz!MfP5LHq4uiztQ{OX)$W`BZAEpDr4m$42Ofns6*q>;G8WQRDTI zIOfE3I=N25tWCy~d(4VJwb8O>zxieW!AJPY1=Zh$Tg>va3_PW(}E~Hna7%=c@SBYP?4bE`_L&Cuw zGGsnhAVh;9zPT8-=*OG7H$hH8xc)UNrpno4sh1pX#upaN%dbp#EuSJS4|@T|qGbO< z-Wgi=CMS;Od;NAv<;QDBJ$Mv7|5Na&*hAIM%m3L2J?za4C`0B$5J>brq1(dQkWj|- zhQDpp^L;xbMEBYYvD7_j-3Q4;+sChb2#OpKwQbOsP$+U>x^4e){3Q03{`*^zGVgY? zS@Ly_Gg>tMU;5>o%J+|8uEgm+UW?$wmnWQmrT6|uHTl%It=Rl79!#o{!zTy4u*&vD zr7|nthQD}}`#13x(&@yf$)njj)OI`+So%IUzOe_3c!e4};`R^q0_b7<<-#eI{FH37 zKw}ZVzi#vBDtA}J1r-i$3a9OPy`qMxUhCw^pT2GH3(VtxaOS~vMEs%q!+~pj`^Dz& zxz35y*^ldF%F=$7t_YoP`};>BX7;tPT)4R6yG5-hfbp?MF-h#p2*`Q4EYGPQ-Lpv9 zsa(?nQygCYv7h^bWswWt*&kA;F$YNnr@^Z1k}eDlV=0W@ubJ!}u^0AiJ?Z~Tp7ig_ zE=4lOzrWUiRApx<>+QxUg#0}bkIn*Tfv{^cet}56 z(6?LS;bX%k;K}}+7V}VgF*mr%(#_k-je~7*NXMp)&Ba}FcQdAwA57%yvWSA|<$taj z%wz=pICautYRlxWzTnRALdkuG)jn*+p{>o9M8T_bhA?cCgBAw@1~}e)_+f_#)!&hb zCao^u-7RO*;@5TA+I4qQmFzslmdHBALxC=0lWEscE0taW71;q1m8q{jN=%}~LRCde z?*eg0$NJkp<)oxo>G8ET+R3}G(tif-1jW&lSE-NP z3vuRqs*PU$lXue5g1$He<4ifEFb#FDTNBW4g>?%3B3dqLKoyLG=_D-~0y|XbLar$E zl{(xfAY4HAs-uDPK?bEwly<~^@hXGcU#0EVaZf<45RR{Y=VL<4H(sUXU_5?kD2j2_bzDO2&idq2$%bMFd%&!H5u-`2a@ zj`vMbhn!2^B3CHXc!{&bpdH^)f@_6>nO&ysUh4}2MMj#zwREM06GlzcE^V@K3~Xn( zG`Y;8dR7=)U}~j4om?tbjOF``d{GiyhE$-I^H=vZR^|Ewy=3gzTk1;+jAQ${y|=?_ zGh7bg1A@Ho&bQWQbldUs{LN+{34Jb~=UFX!emI6=H)e2pisT}~K^?;Jgx3M`}ADG4cHGWQx=>}LrP4)acRn%`i z_P?pi?v8rMl^p4f<`aLv?6-{M)}<(nDKI|XL~6>;&I;1qe0+RRKz2vMc}{#0#Ax)r zKBw2~84E-8`WEFqI91&{UUzVYcu>d-S%Z^@( z+ib1^Vs?E7VvF-bhI{8gsD5SHFw=*dYr%(cCpY>OXr!<^%l%GVa}ST6q|b#dX-pQ= zH=@K9d$;SR{{BWRYDphGxMn{4bE+#tuiUNbWHH4}lfV@w+kSz|T7I|BOwv0senHjg zE#C6tB{6=}2Oc|{<1<Y!g_RcmQex97;$x;ne>NjoL|Lix4Hk-Nx6ehUQtcGwtja}1#n%^Cu%A4qjyC2SAzcnz3yBm zy#rUgt5wL#LwH5Rgl`4^Vn2|OCjoR0!TK#Pm%q^6#I9Cp`K#QyhtZ$(i$1+f+jdhYn~zi?o8r#cms)MV{_> z_Huq4InN7IMscZIS6*E_(}Wa}syKZtac`@{eGJkYE1JCp)t%n+_3rDm)aUEHiJ#{< zJEMP>^^Y(|Sbi_+F#d&puQYKxfWL$Ki~5@y&h`()et4g;dMST7*RHo8-bD&v*S}P1 zFdn2MyCf#CQ|N6EUDqgagE@UNsSQ^UfWJ!Vxmu*>IBW-h@Gr1CXS*iKUWr!D4&{Hf z+!xiGI~oy=|E;=zF}dzu-k%NSjhZvp9;~mOr;$95tuOQYW9#!gO?|V+;fKWQayR43 z9dkZ&>sU86d^uEukKC!sUplV*q}J1CL#5hd=9s2qdpP|Adw8nySB}HAOS{yVPZ`II z%&V4)k!jOs)z-`qjzjccmHE|BnP{oT(D#(+*IDC!Q@%btMwiRI^p=KHKh`jU2#Q_kDqT7IP(PKCt@ zb8reQPN?A&Se!VXCt`784R3_XI=vgAX~_i_wd3h=_V)tD90hdhQa}qVq=h0yUFk|b zZ?WrK5@+L`s40^PBr(n)FWlCSf)u`}@F{Bg1=<-n`zi98L10M!nMoIf$JH$T=!En^ z_e2%7r+1O)T}Q}g^v0&g*TVwXFYcrKyGX zN^tYV$twW)_q4T4roYqIavc41YI%E3W3!(%xH^UW_O{M~oIzcW>+Z7XXxwv?6D}!n zJ}UP1V$LX9R7`HAc4?9q+vnmRP}2v$HY%7FU3ShEe?0p@=<bX@7l!)h!t$IZkT!jL)a%5H za}vFm1>spVSN_K2)@Fs6UdnMWY-4IJ6Sq0|GE!}F0asUGy8=H<4X#8Vu1`non}x`R z4&hq32*ccCz9<$brV*J0@$#~9&0_q+u$d@4vD zjS7;-BSR4J9p9)Kh-1YOxc)9%`Vs|OU&TM9U>l+s-pQ|(jWf>3**CVe69;Ohpp^jSSCbs_yhbm6PyfsRnT*PK4X8h+7^&BZ1TX3!UhUYZ-hX> zdd5KEo9v3pE~|D{)!!-aoWkjKOdPXP+^tA)hoNJ^REeyI5M-wY(=x?>G*pgxcmA;= zJW(4_v&4(HSETMh^^=vnZ+xTGy(CQ1yAk4ePEVwIe&g5Tz=qwM7-eoKd{481Dk(%Z z#IMhd&Za)uS=JnBYv+S}RC{V+Gp;hB5E>Gtukl}ick(CLDiBg`&An$sr ztDSP)xh98IHGS02Tcye{Ks&7ayIMh4>|d@imkdQ{J5ONc?HN`r3@U7|))uy z@?92R`&>MyR^m^6S(hv|p1Sx++5qc5wG%m5U^fp+n1;F zjItkNlB`O~7Z1pAxl65bZdQmj>MDg^xn>tC3W|*P+p%lr_&X7Yf3d?O!NaxqZZaGS zX}gZIL$V&GK58G}gIhUQOFum>RXfdxA?2ZHad{6pZ(4jM>8p9QnFC`9oPhlh4BOID z1C<{g7jDJhWz_5Y%nd&e>V|WS`?wl#mRpwmfgI{*FZK=2t{CNUtw@!z8jLWXqP$U$ zl=4LFkF^Jk^@~#$B|XK>kC&_$QATp&gfdF$sPS!|XID6Lcu{~*gT$*(Khp)zn@8x`sPwc~~>Nuevr>Nt^zFZvcOVDcF4`x`rIG2bO)1_B0 zQJZi1@+myFJ6_QSCNdxG+`^#gxzKvsq$Z564y_lOzYk5+?PbhuDsFl(u zkJ==P>8=;*%*N%x@h()|T{l(9Y|ft4W_$hg%S{@s_ByJ{{cQ4j3aK;PLnh%A`I_Dj zx=8pM?d9#rBhFzwZ%0Fu4fd0;Xy=;xA- zUGF@}K{(y-U*5nLik%T>+pq|7od#=dT-Yf(&NiNYtss3%-r71z96YfcVSe`OIDQW< zY7QNDXu`p{e>Erl=1+mKxs1PoeZU-ef7zdbxG)iUhU{Wi%RB5C&*d%+p4?_jpZLAj z&JMQ>vCZOZ>m3V@fVXX#7G_Y4@pvRVQz|#tvpb^Lm|5 z+Bu``^hvwz;aoL_eY%;9VV{a7Vc5?(gyG~|1;ZigoP^;Jtqx;2l(UcFak&bHLu+6X zhC?f27{j5QeGHGwHT7{@jzl(X(_-r6Kz=+fhf5lr9PeW{_e*@Z%VWo8b$0K>M=tE@ zvszm@m;6CWEUz$Ku_&<4+W#o(X;XGC`N?o&cUQ^&ve23cbNqg4uIKm53g(LCKI8MZoyah*MLpav(8b{zUH^<@V+@Rp-@zdex zc>_m}^>J*&3yuyy4UWza3XUE>9gdziaP(Lo$2Pp+=i`Y_T0yE?6e zqh#bReJlHY$sO3Uf(o=yY8yWFQOOhSl=W8nR%C&aKUQJTen}}3f~WQSHzoUNEg{sn zPUWkK{nhBTrH@NXU7S6~R3o8yJaUzC1$SQ)C8frlwBvE_mOc)5@*a;nIcnUAPsTmg z$`J0Jb{y{g(vxxbyvO10ISTF`pNxB~p&{Ho?Ks@~r6=R=d5^>0a}?Y?K7jjA+tLKG zLQS{nlYV-?7wMDI=V+r}Zm6!vUCMi};{06uh{gFo=)Apt?@0CtF4A8i?bI#})~Wqj zu2cKtXsKD=FBrKTbiU=AgO`l1HP~tNQnLn*$$6q6)th;IAl3V-|MS(n!zQaE%mus2rUaa@a-1YlDhq9B6H9MU3c|#G; z+>!PR^aX1vU3HDZr;7Q@i)WP@4^!aj9*;D%pJe$sP01S-EJCwGJ$NC=w{51blh$~r zXkT@OzkHNj76jk$QJT8cfBeEVO?ckBo&wFpBh`Xe?<0MAMV=IcrTUKx(EI8|qq)3cj6)ArH`JY(eKmGN1fyNvHZ&R?OUi9W`?h9M0RdAh##X|7$G841l8 zbFyt(zw$=ZU>&cavrE6|QdWOd(HYuUTL8UKHalF4Cs|uZF{VYg2?^GB%uYwa)4aSVV-yL9N(i7;gU2@(svv0n|QLodQd;+kLl zffz^nP;(2*In$kGG`sBwZ0hm%+G|eGo`E{A9-%tl?Nb+r&g`xZ)6OH|1SjK;2sPm8 z@6_@vUwmTrp$UJg-Djt~U%Mu5iC#3F{d@goefv!tI1k*5PbENciz*N0(jIo0yNdg3 zsPTR!vp#K)z;g?iM{$En0JPajV9!vcc>9<1g&8YazqwY%au|BIjZ7ucGhwi^| zOYkzf|JM4I&T^xKr>C}{Gy3)avv+sDdR2Lz*w+y%A%YM>2$f0* zVK*wd2yKipU90OI8F6-!=^E`X6z1HvjZN2ObdAp+@eco;> z*h+Fxh;1CH721zHonyV^X?wEwkxhg~%?!iZTm#v`%XWv^2k*&hKO091UH_~-R}j_g z+Fg3+a?+m$^Wfax=lSkiYX49jXqO5i|HgWhmj85fyn#>mp#omN#YyM>R}e-Dip!_t>K*3 zr6!al-S$_leRaN`!~gf|30^jKHPS_^U}Uz5ucCqaJW}h*Uo84OUNo3$G5N?*Py9_@ z0tLtD2R_xoefRRIiEv2@Yt%k|wc0O7+tj%=n_-WnUi|H^gN!u*Y4_Ev3aM;AyI6R# z#&%(%Rp$$-0sqvRvumh$rOto+dm!t?qn)W1=pu~ATt!MO0w_i4XE^o2mg2$D^uBTi zT|yguy4Txx6?AQ?U|Y3Za)fFrj4=v5nD?&Jh{rgk-0nYLV@zGhh-JI&%SsXUzAxn< z$X^eRE`c92($0Vym8SjnDQhoL%vo=Uzef+ZBYYX0b4!dmJ-RYasYfi~nowcHaqG?r zPIWYKr&mFG0zaov;vO*p+h!ovE<|7{8ce66A7L8dii(aLSVGk-ih-Z{wNi7)x5l z(X|IYDJQfkgMU`n%DA8Sq!xv2-t}gqBtV}Gf$4LD*z`R1dv1XGIyHZDsh-ehKixFv`{t?rXak;vdeIQ_H?>kA?e-#^8^bTJ zG~J88Yj~1`Q3AA>Lpyq{sod<+^wcsL1?kcwvE)3m5Ucoba;jOK+L2G+gedsmt#3VX zuD6n`!uyN%m(>@Go#bOL>oObnb|(ea>5I2jIQuNPH@Au&sGps46+R{5Oqj#RY;t)@ ztxX!o8+C8B=?B+jWYoHLmz1z4*X`QBHrQVk5bsxvIwfxm*Ly{_{;rjNnB^RKEE)qT zLa>)Y^WIM&-Y3_702pt>+g|552I5L zjYt`x-8nw#wd^+%w{i#1j7mMnI*=q^UJG1|)%$Nxj)r-RvXhxl1HxpmkGKDk7M^z5$-SCn~wFhgx4L%MMA5T&(zPUYVmmenjv_y ze$R3u3mDGT^Yb6QJBQ%0YJak7HqX>2GcIR_(Q2puqKCs`QD*4UsLnC+Q+M5ibvgT$ z$}F=+`Stog8ux{>snrX6w{34Y31N=oUfpgfzgVBWS>uI*;&hGubbWei;EX-&PggsCPuAThhF|--J)sS# zpQ!(b!<+D2H+YURzjo=t5hC8Qfyu(tAE?y|u4??lcw%-?@5&m^d%WAz#iXSfs9~-2Q z%#(bUP|kCU@269uhR5pnbkRsO5$nba@jvdID$dbB$0a^lKOi#J&Ev?! z=wCdU7>ZwtPZX6pq*F}tWXX}=$E&q?_2x(HR9s5%{@=@<9Li@!5)P(|Yi$oZ8ZI7G zMmO8mo1!{d`u{mO4jKrLPxXEd_P-p$wcm+owhIrk#jl|!Tax7aV|9hhoEkp!-#)QX@*6#oY7!=5Ap19@0++P^PX-V?0RC+K#^iBt zjG@qqgJKj3vj78N)DZAD1mVYK#9@6-?8ianoaD{hwrl^eKSh7+yPM{9l;QPHbBIXp zKaflj0fr`KVIdP)pDVUUO4&FRkf(|DW!!S*XX-aO8Nqm}?uu=4;Id5J>PWq_>7+eT zKkJ>GK3bz^_L&E!J8WutC*$!0qAOSB8e%5bjrM!sf|Lh5et!=r%o)G@_I(BEu$q_EtaEMJD=S)S+kSV4 zaBqpmAK&-VV5I1I2#>+b5Hory7LftShF`4z1det^SXEa%pb~4#Ml&pUlbv+FY*-H z&);!AvVDrDXVG2qrPL5SUp0yUP^99_03_GW$Uy{(3@pYlq6%Sb04YXL$pkWbQVEnW$d0B@2n$f}1d&;b2}8uZ62< z^i;KGh}4mCK7?MFll^{3geWgIUxuDaqj7ka%66+4UI}kw$oL3Zda5hV@nF~EWnd4N z)LP;X@FK7ME%YgnjH=&c253ClV}nm7vV-TPOJ+l${1WEeK2QOnR4}tUaTdmnVCQlIs|taHvQ8d*D69ue8qvoI`)xW z(~sDwq`Z1PIJd|m3oSkH7r)SrRFgR}O!5vZY3$TNByHZVeL#+AT>M0;(=>{_OHssJ zv_h1Jn&^OLFh&oRXSNClbRK53oRtNaG4YERWCQrrj1qknwI<*b<$^8t zM?B33(Hs^F-N+hhz(()97hgw9jY|?zuN)+GpjiAH?cuROg5E4E|BiN^qlI*gwz7yI zO2o|;()Y%? z=#>hL|B*6QOH_uJbdA=&sxY-{vnsp-dj0W;YxEZg*lE9DcF$S8`eY$g4{3Lk? z!EfHKUHi8fco6q?qc#bMnE~R*r3s2KRd_^9nPQ^Duq8bwv|=v$;G8aOss&B+rkeNW74P~5u%Pjm#RSIu;R~6PQ`kWP+k}RWxICm z|3bwd|A#ll%h;gUZq)BF4gJYX77NtZRmHO)PrOZHe$t{J(IR4|Z?>ad`@gA~VB7<7 zm70;=1RbvG2J=a9L_wgDBq%~fq!=h%p*>jyM#0n0HN0fdIXNQ%GaQb<5^z@;S$z>g z=02%}5SW7#24^ZVqUk9D%GDv+fYQxd;KNxqv?P!O5n740p`R=TaG^H9Axx>o4SaK~ zJ25BVA_sXMen!*y7+&pgmJhj*`$m?1*{=QWXu|Nrk>JN{jjz&0{ALr$7ShBpkxEvB z?3$)XkU$<2^e~ZHa*s)~6Qa5n>w`B}Sqj#_au27DQA- z>KMdi*3^SvkOe@VC-t40qyWmNBP#SoLh{1oWh72-2!ceEj|?WZ<)>K^>gm3ii440c zULoPTQiKP1mN1w$4cZApz7x`32V#mTAj| zuqNTPmV&{g$?+A4knoREN@euJrbTt32d=nLlU;F!kp&}1)hTX56PO?}QY1~1HU{cI z>vOQCZmipxvQUfZ@ihHD60uam{reiG$647}dDQcX5THK0Dk8!B+@onUgBRvEc>+cb zhms@`6RmNIKhHdzr&0iv2SskDzz+N0~k`w10DDQ zKv)v`aEvH#b--mH7YpE5>zAzls=(jVyw@V+z1tST5n&$d$Nyo2z}Zx`$R&D^>l<5??#W zoWypm=l^=x2!>cxY@d+z!TnpeQ+bY8MbqDtj6(e7;^YP-+JCI_>4+60@>K} zVSTp8$&SIkHDPafvWG02OxkHjf&8Li!=LP$Lb3U_^$5V@)iTs9MSa9Bs~p>7-IbKXR(r`G?uDnrCY0lQ^@aab!3Z`V4X;l20S>m|{HCb*VfB<4cBU?-SH_t zBUGLs$vM`5q~US9)AdUOj_nY{ zS%FRcj>L_JeB@|_(Rj88qaE+=ZhhJ*jO@*XzaHDUwO38{ot-0xY>KnxZ4av4vxL+O zd(pc%{_OMx*mGJ>?~I&3I_x+0(zdp9Fs}FgxZQ5PS~!k}jlEE&ob+D}_um>fyNz~j z&MV)R$Eo)Xb8JOyKz9l`#-rrwew*=ZOLKh1H?_%d!iP&V0#x(@6|;41dW=^;9;f?> zz7et8Grh8egC3pRYkz2L#E}7p99MzYtOtI4G(6vZN_%H>yWu;9dGwCe$dP03tUSwx zcKOirc=*vM*A+=zt{YeD?A)%(UzedJfW#81rl*E<_u026PhCOZ9Xbv=2OV3^mU3Sn z-ZgB0qBs0KQm1)b89<}H@9YAc^T^uIkuXH%sIl$+YBM*3t@evL0q30oY7BOmg;rce zdk7v*5c#fH(;b)HrQYL8jLKv@2;cF^FNTQa>uM8{wMWv&{D_4J!`M?8(H*l6~ViMy=zX}&}EPI$JVchUcW6!2xL)V&vxN} zx8CmGZoZMbJ%qj}>Yd#?fO5S$dpsK1iNX`gE*MGcYKhb?3$hi zVb1oP_CxZ%9CDlXkZ`TLMqxP_Ob?NX+L`{~3%k-twx;1(oK&lw>j}b1bwa(-8F$Ae zNa=7I#laNquIcFQ#4B}OXo||5{zpT&vlq5)fz{Z1dti>QJI;SfVASelF_!aT z6|B5uba0?q9Caiu2Wxcb`_A}Sbz|gk9;IYbx3jm z&vvy#>+Qi;k?{^sZx^k*aX_|vV9f*U-=~#2@_@fA9`SVIb#m7-h`4F5;%{WUdTq<5fR0*Dl-)$=o6LlTj+Vers=tdO)++aTka(X2#&? zCW~Ng-8ts&tqyNn6YBQhNZ7=xF;hLCY!7#F-7BacM1p zW7-dz_@u5d8kAbw8O$R~6^CEUy-{7QM0SS8?3^|4}ACxXdd+2RD5&VrEnIP8*TEd07p0%GPJM2aoEtBiC z+l}#6IhiR&tqywb;R|=JV#8UX7`(Z+1oJ4}>PSrvv5ficpH_*==|`$s+F{m9DmnUE?^{w20AN z>xopz$H~X42|h7e3V6j?qC9%0@{r?PcMpxZTdGb1Y4>~X z{rZUpygV79-JaB~-Enp|iEFnzrK}F1tOM7*-0(fsNnvxMTBFdZk{a`Dv|HM}J=ORM zKzJjTHsQ)>y{G;$BgH3n-SZS(-1^&pSWf6Hzne6)E+fkgOgKJXgkrM>YA1H`sV9pYR$k@1A z6{J}{W2sJ7PFvY!GR=1qKsqv6Zf1&<;WX?_?^;J>uF5p9@1B64**bJYQBvwJo@zxG zU<&@spz0I#vo137tQ~5gAiXdno26PbAv3b1#?)}u4f{)1%-cpU^lAD%t6{83@Hw>B zTh;}eU$Z#Fbx#<@s$+A(Fyf-%L{3d#XAL~q$RN(*Y39{XB`Zy>(FuoezziQcplR<< z@1P*FG$SiZEmR|+q%Dg|z~@tz`QZWHq9@#QA_@3GnP*6)F>x;I^UxmE$QX#1_GtON z{mZT8rRDcqChV38yJf;|nXuod31iN(QNqfMtk2`(Iel(`MsmTHh;W09byh_)?E<7M zLQA0Jey$5svfNQXW~q;GB4#w3p%QE{)Epf5C{)OXDI;6W#k6y@+3J`eAX`ZV1;Q&% z+%gX#hakX6)#g`-3eThb8vOC z&+HuR8D#bqa;!3EPjN~zIJtzSmh#iA`<92rg>j7>WR^Y4V>m=v6E`GZ>UpEgQLb%t z858Fww*iIxGPx;kbBoExK+WxEIlml7-o%x1mvTw@Px5^Ewpxm8O7_g1%A!;);KbE} zGYdPj+*k;}IcqITlLuRN?MIfK49enUIk|DW8%HN@SDht`cVP_zRFnT2owK*a04&L& zWtv7vhOM1oM)d{FWXZm#+L7hbD52M6r$PwT9z2mD3LoIe$!8U_)*wP#l@ggMexcjc z-LHLa|K?T*Fff+*-UAK#9 zgf<-}xJ-#(n3*!X;MnIB;4?jEat7q6haT`%{}CggA~>^OG{Kj^HNm8C)&zy=1i@~q zJfPLT9|0`Pl>IZYWnx0`hz6O?$TR|s1mp>u1(rS3!!4MD8#EnnRV*~lM3CNmR~5g?tIqv#%DcAR-q=v47GyLR{3z zL=V}JD&P$6nnqGNQ?tT3{ehB{kxe6l6g5!Qv==Ci1uN7RPJ;$_@GF&jp)ty!EiNb3 zFnx+n`m!%E^5of6=+FY(IE=EOPr8%cVMgyT(*#K0VHO(Qh-0c6hMM2eUVD}>1!L!5=aK6 zbv{d(q!LmQsl9myDVEey0*i7|b_tA>QYzDDFr;0Q9m$GBP`c)DB#De9S;8c-lENj4 z_D!M`znVgTBt_aQVUj9I(|h4T3MHijOJig4!4ocF;-TQWTM*DJo?4M=~oBmVPGHG=fq{(nx=$m2i|yqA48F*peA5c+phC zno@+sP`W9$3eHmQr0Q9dY4%7$pZOoufp2(`wWMf-^4jBv^c~Jtv?>!Q>%cX|h0Ocq z`6QWmtzUG`yd8M(EM*CJ;B8XS2 z*2rmV`T&!W{JM&k`Z20e0%hbbaDXEC;Gyx1!`9-tIXHc$q(;V2Lb*n{0e*@RN+e{8 z_9$&d$~^1I%p{T``jDAVW0P9toM!u#lV$y+^;GRTt&I?iYhSNktIZFSb}YuSU9L^rk>BMQ zxi){+wPzNvuqvC+x;B4SDQEd?uFcy;Q|9>Q+O*x5g*!_%ZP%}@wfnkcsMAF|g}CLj zuFaoi)t*?i%e7@Y#k~17*6WGIHFoS|uGPMM8=Pzsv6agH@mK5a^?p|GPx@TF&qD6v z@Wm_Dr;S%mB_K=l(-N}zE!zyUo7aYryxiPID%(b~C6cV$7dvh==?7bkeb<(uhvu76 zR@;2CT^NsB1L=|NLtwG<+IBV@RrF#Lb+oCp}!{FGVmus8MI&|%y-~3p1jf3IS z>KlK?V`J8~t!4av)`hKS?>p+`kr!vMvMAGC({M*sr%$xwYi+-+dwo0Lto46B$86f} zpmdya?!;lJ`uzE#ifu$WrJ-}KTiKmmE>5?*^(}70#?zyLaPRi*+J8Ss&z>kExKk{N zzHt#(>P$>5uAFv5yTd=g_ycfg=>2t(;lXCXAb$r?f>x!F= z>{CH;q`;LD>QRCF!5cY+${mNSjXP~&8alUY|LZ#0UMfJosd&JaM;g~pl^BUQKknyn zsGq6fH|<={hwco81aB7(6 z5|Q18G?odq3vx82{g4GaQs+B=kvu#1gS2lTC| zJN0DWTHekaD-F&WJWRn&Y(yO*)*K1Q)7$>uJ{UJ4@3o1UxP8;Ut-o-w9hgTVTs9X! zUVrB&qA*Bk$G|4mX+Mpz-6?Ds{%#xE?KyR&J+m3-@6@x-xe=-49H-5r0_q@v3pa-U z!y1*y2lB)SzbLqE%YL%19v|*J+_tX$`-2Sn=zu%|j{Av^)E?sH?&CON9>6YnM3Hzn z6+l|EL~gIs!Zwqwb}m6@KU2fb^SN0c&wt1c=ie5ajF}znyT>NoKRxrz4)e+JMECEr z!+$vDXqs64vYxd+dy_rwej>HUy)!+)nV%3cP2Z+F^eNQhM2eqL!VlNRT^vbtq=NoE zTArJZ*VDoyCG3JiX9spp;onE~oh3#s=cO?<=rR6%5w}_Vyg@ z($3vj37#9y2ebl1gyA%iBZUW})%{4T^9b?l9nx%?TO(oSQB^qY*n& zQWTdUG3`lM!Ts(JHD-=S+r+<}&j{iBly=<`kcN@U%=;3L@T0vp_B5s6jr-XXwwJ7& z`2iri)cg5?;JQP9uhfYv?R2*k2j%%Lt)BJ2pHs^D^fPq69wcF;aUZFlSX(mj>_NvI z>H1yCBfV?)2;PJqbm2;!inFOzbAHn*`o1X{`)k!&FPqe_KE9Yk^rLIkuYZW~M#|31 zChf0ZsyxuPev7XDs%J`Vn(kuwL7E5Ene&_q2G)5DW@FFDy;Rn zDG7(@@x-N)NSKb6ap{59{>yI%Nr;!VSk{hVIMw z+qrL>?Z$di`|3BpZ_Ms}vv@Az`Lsq(@w#25#D*u}^ZJZ>mQ=BiH9x=-V3{ zv@^RE5O!yIVJw)A6H^`9~ToU53B?Z0MJ#`82Y48~2* z`$dElw7UuIhPDS*n@%LD$(X8hu47QtQ;81?Y*mgPz_)Av?#Bjbv_&M-yC2jNWFuWd zx@}-32ku>Yr6`EkWCiVWKy0k(NZrwH+?afw)7Oule&^s^Og7nzX6&$-WRu%h2Ux!@ zEK35f{VqFbg;>&8^W|nVGy83gK;A}W(}48@HV0TsV5Zz`xK$q38u&3Um~|s6Kjt>A zS;#J6t1_%T$d(hc?`F}>-M7;(6p4X5Rl(8Rn#bQMP)SM;-iLXZyTXu{2lBUVYDXay zUoj<0;T&{DB6ql4pB<&S)@yt2X8PzbwG&-HxD4ZwYtAFEP|+N;r%G2r;%#LfpQM@& zl!X7LA>pV6p6(`j7*3+TxM`lIPct;5hB1@$6aH@(j}$1rtY2l0$J?*l*7jHRsT)zo zMjn)sOq94vC1R+4QT=#@OV##ntAj1ir~xKKbB68|qV(gq#u&Fbr_s2Y|7c%fy)l+vkYYF4%Ye#F^wwJw-mi>BJk+9o8F1uR# zyK9v%)$<>=b~ND|KWbj)+Hyn>5=N>;}PFiCrZ6bxO&0ECgDcL?6$i0 zFAhVt@$ny&Xs@vynMU0i2rQurmvJ3qme!75yEZ>=Jf5P$>5mTIW9+B+W|VC?yX zS`Z=$p4(59>)Oui74s;oe^Tw~#@v4;k?G+-+n@|R#vN-VdVNa&*2Szx3iBg*yGEkT znzd-hdY@UZ;%TW#x0xRdqW^iNp!56f{9ey>5jNs96^?@8-P~)ndrYXYloAQ{bbO0~ zKBnGkeav>U2i1GE-x%S^-qVyO=N52m(BN-wv&hwAG|N_nwwATpqiiv&YnH#-` zfvknwS(=p<BuM5f*S>UEJFUJ7ydYxD0vdB2R9bGsMq>iTQL^+o$TzN!#L$krane-4ic zTC_WQBNb@(rJ|bD%kpwH)vaT~oaB9dot9iy$o_R10%_5Z-QSz1Q55Ho7d^IKvTTXR zVaCR%c|tu*SF|KJ;@23@9?0y@d)JBS_}1?H^P;oYU7e~r@IS4V!rWfJQTH8BTyNhR zMHruS$vj{De8MaKdQ3f*jzZ;@8S+dF(%d-1YL3(O{QZ-81#13gGUjWFofOI_@ySN) zb-Ywvm}EF6|AvwFaTt~C-EpF*GEioCO%J&Xt#9yd!VB|S1gA2eE$C2)h}QA!=~_Dj zs;LRy42#jqRjE^oK1l>@rnuPJ8=M=uz<=b#7*)+_KQ0Y9UG38on+qZw6@ZtM9cVN3 zfBby)eqh=>kV-hb^*v9p+lj!utmX(qrn07zGc0z!(A&e`8b{ELJ=2fnoFa*l6oeiL zPQH@bpS(2i_n?^66ZN(Oqk@(^8^7yWhikfUI5cA?t$jqr7p`mVc0n{&uX=ETZ`nFv z91y2WVqWxxp(v2lK2kcTTJh-OcEQ(|XN~+u`(@2GaCh9J9WU2-y-0YpZJo>2-e&r8 zsFC8+fP>_+IMerLw%3dtDNWKw`nnZM2r}1*a7bT$Q{R)uOX2uasbp zQ;Hob1mA;YyJJ6jzFyQlHEf+j48c^mPS*E6;oHhYQw^q3J0?2o@lspq=CZ?{vDW$9 zE+lQ+gkiJx)y)Gz9SvHp`o5n@=`hSp%DFT36zQ8+P~+CRY>n#4U}drN7%-Hfc%%0{ zcU*HCg{~u|1TCFDOUFy@y%Ls#n46`T9-6~##l58GIZgV)q4aXOmYZ-u-5mCD?a{(j zw40laDJF&Cosm`jv}^y%EA_~cp)}|52sp$NHHk>f`b51`kGHz#a;<0VCo@F}4H_c( z&c9CM5d;c?BjDDm#b!TUpP;ObIZfmk-~1gIdM#lfX9@aT$-4LH3PrV+#n!f=n(Ohy z%9BO13&p^}$Di`vUvOS7EWP_E`1iT!QNYGxd3(f2W5hTXEjK5a+B1QwN0U=lqDxoP zl_!sODolOwOhs;&+tj;yhX1vh?RMXMPbBXDaR20zzMGVq$6165g$AKIP!t4KWt4Vb z%=}-})1%*SPp(C0H;fSP(<@1u_4U=U;ugO;ALCe2lL;W3$I57IKB>hBN2Gc)Uf(SE zZk0Q@R4`O@^F54u?_u4jlLOGvAle2l*jUEASV6gu3(Ob`7dSva#AZK*2R-_{a>SSF zSGHSNRWyau-jQ^^t_6-vaDirw@JZ~e1=qZIef9d<54g2A4%1tx5$yLWQVs6(Zkp3y z#aV&FpVPgXeYqnt!#6BmnbSL#}dZDee;-I>|X96lcR!s674WrCt8 z|I^W9sGdBr+jD!kPn_P+x*Q$t9_=2(h3l?ya)}CY|+-*f$q&Z)_t5zG;S3R zYwg+vma<3VOIyKS?Zx|P(6Kuo|J+MO8OH`J*T5Y}i|#yL8k*;~zUpBZ+39&peC!yS zK3e1Sc0Cg@(v*ku4IF*a6&Jg#9BqEK-bSyn?|6r~*3UggALpf#DwHLEIax7qCX6x3 zyY;ipHsKPl^UGbF+xcmjvnl)FOZB4%w9)RfgLa)8sH9D;DfsDhy`Sy%CiG5Ku=IDE zLWN+PY-fh|8Zac^G>SbK+Pt$cmlr$JmgCOVJ1ZJ`uL@EreVoEsx5{8>|lMOQVi`lcb&|GOWwOMG-Y&+cJg4Obt6?zJh%D8C&hR( zBTJfQH+UEJt1{5%H=o{gdTSJeYdwGO^7-R!>z?JccKT-W(CYo3oszsSuW!<*zHh7F zmzH=XR5+}RwnsMm>5^d!aFjN*+`4aPa0|vbzN@4K$=m1a`^^}Nv9}|;y=@qZm)6>> z^QQBAQ=^N9Z~m%A5bSig$!XlqnqiyU0QhEqTLPj`8t=D$;C{PAZ(ZDkcN1$le@r`9 z7hBN7BUZxF;sMH?3sv>;I_6EZBvNbGxL5%JeSYU?RAB8&&{9gkZq1U zmc5@SdOSK{*N&~NINN---O)Wx`{`&kM}JfFJ(`}n^se+VEJat?-n=)$X5tKO&|lJO z>TXQv*k2S`3%iA&Ti^bw!dvsp>+|=Lz4@-zG`7b=w{Z{#n!yi+84cGG$t0k^0-qT>`d{NUUh8ds|MLwQ&caO)q1s(F_bbH zY$|cxc5U6`B&GZcVb9gdDOKg^cGd0|I#wmGcQ}p8%F=dEK4rzJwWRILrJ{yq$XDCZ z8g=>fkxIoQr9I8+QWRfVy}$Fz3c_#B-u|-2d%vjj!gYJLVtKEQ{m*Ndb81G{Kshfa zkd2fR`lKo!5DxybxU8u1ay=uK>ojX$jAN1nan;D-Nc$M)b?)|&{^M%B?0IUjGxk&l z+s?&GeQw5M<++pfGz?}Q>nD#Fgm7T6YExsRrp`wJ* zAM8}07JWsgr~Yo}_W>(KV;`2|R$s$X`KkBYukX+sUxrn@KYMQi#}tZo?#+TIS;CQ$ zu_?6KHi6&ngAKLTJYaj|U=$g!Jf$aA+)CS#a=z{5VcSC&3ySHik*LM@?pcdIN0%^c z(D!_BFm{*6uFG9>MGpPmCBYzqV67MfUiO zQCd*STBQ^)=_fgw%0o)=((z1Nf87Rp-`Am;@%`EDYS*Vq=bFJb;Iqg!OB6FP&}p^x zvuUg{^ZGBz4Z4Q)eG(wgy1GqIzbw14@5RfF{9!83BZs~&D8H=UtyS-%#d0h&t!}le z@9nuw4Cm*ZK;58vZ74urQ0C?N}uC+Iq5IPpQdWa?+vi zt;fYN`fP9AEEFkqep|Xo?;XO>N7#kuo@I-6a(U&3(4FfN-F+IqD`UfK^kuvQemqfs z=cTfNE456Z&(i6qFGA{Nw^xTA=c~Gx_N1ip9{Ok!Ohko>?fK=E%*K8+P~rfzKfpxT zx&*X)HmH5y_Av2~zm}^xov>Y`y_<8fIK_`-nFB~i3&1w?QTbOVu%KyC;E|<0#ErQY zT-U$5rtq{gYfsKIBm6Y-9{oMLw#6-b9!wp9WSMzgU#I%U&C2*Z*ILN;nWb!QLXfDX zDHn%ugJ4wU5phT+qe|9w*&$=JL7fZ}bqIQ#bF2mlI;6 zR_=2D`OOxGl7m{9EY2OL=GxDfS7a#c$P~Bs=HAnaxCD^bwkMQgV zT<&qaTe}0!txcwG-McxB+RkiVJ0u0K{U6NQw1fu87j}VEoaG3Upc6eoUq4Ch>X3&1 zNtM5*r2CU04gQlN9Re!Pe$%Gc&dk2OF#EPW`*!yFw~%+`Pu5V}X-z}!wfkQwGi43EzhF}SVfsIB?fl;N z4rv(PoKk5&)4Ck-_ynGLz|7EY{q+lFMRJPsoHv_W!c*jgBaLf?Do+t&hm?;`#euuBS#UW7M-PX3F>Y{~ z4^N$F67}gRE)t+5Q|)e{*9S%859)tO>06|G>KHfe!(O4@yr&I2aYs+!+Ufr3kaB<1 zNt8{xj~CBK)kJe^duXm7%5FW}c|*#w%pHxAMvc?ozxW>IKyWE7Ea1Iq>!rWE8~2Cq zGo|+hoZpL2CIc4z4SaI_P<;B?i7F@CxvSJ=$yQHk+QWM#1{>+dgCObtsPjGL8Od{d zWPBn?PfsNk-xei+C--XGEdsq-CLyiXi~p*w&uvPFe{;QRO+;Vni$i)4$JfDJak8S#z+Vbqrf^r%wi-_aP*voha95l)B zar?_^jXEDxtD8^MmpyGr?mf#E?fK=ELrV4aE$xTWg}3{}%KWJ@sWL^fmIj_E@0b(& zXo5unT8U{g-Br^K53u_@XqIF3k)jFh`85q1mluuELVs@Rxr(o^9V ztaaYg-I+@Tnzb=)+iZig!p2HDweQE&Nn$fUfn?8CtL+LZk;d#=D%|a(!}KAP8|Ujn zR!p-`jgj`d$2e!SL%D=_%#W%-oO)8&>3xo6et+xeyoVdN*c@Z)^iGAW4re%|Y1r=0 zXXJ9Q-_O_!GdhN~lIrQqwKFIKtgIJXBb50euIX#Qgi{d-hP2Cwr7O@<|+;9aG=z zn(4mVsmob=cI_!;Zw8$c8J}FnaqUuHZhaV62Kx17;XhP=y?WWsjqq(o4hLNZ-tPJH zs#usTyY3_}vH3tomhfb8i zou9*fa@boqPPAvFCxUL&0~ci(SJc=XZgp~eK$?N*eDn= zjauaGRLo(w;E7Tc{;Y4+XV$_Jx?Xs)dg-YuG#hiOL@5yoCj(RWa)FL%=?Ov`4qll) z%V3)I1&ilrtt+v-RDR%Gk?7T8<4B}-OxvC=j>%U~9E}H-cHekUVzqnq*-Q2Lqbiy! z@k?jCpv8I=!5_tYw8s0Su3jySA1!)irJ6vz-Qn|a6w&=Bs+A4HJJo6d-w8BCQ|^W; zZVItkKhckaecHn}!l$csyHm@T2OhQGI3rE+``r+RQ+EamzoZVY6=X>(}Z`y2%?$t+rgY%eA!ota|@)S5bdkZQGqMRE$Z&PqnS#bKYFqKYJ5tKId(t z`Rp*UI)eSq3zKJk?$73Pp7psu>vMnh)!|v|;#M%X zc%*9QcjqF>!=cXxsUUFzALZINN>)Vv-B=}{$tc~1^pywQF*$0hADsZQCu(h1pMT41 zB8rj^^*OwL1x~i@i{dld*1l~r>ek&HT#Edk)RSB9EW-{m4TGeDkrxsi3g#0i^U2$R zeF}y?1>=lXVaUC4twD;LkCT*_{n2-Q;C@aD|DXymATHZ?dPyzU$0?lHpX7d1huZGA9$?(p z*ZofSPP8g7zfl&b_JEumZN=P)CbaJMqwj;DKlywLHz&s(Q^mgfFp1u=1eV z&zPMcf#gK(Wt_fjVk&R3s99IWU*(j?E^(odB2ZSs9*zSS%9FNT4h)|^UgIyVnC^|~ z6rGlmNUc^mY(2D`OTb*V+g;jTboF#*+Ec6m?t(S` zy3^g&l-mTd?!|t$ojDcfr%0ub9uJL$^e*{ggRHZja=YEWQ@ciMm(ZP;Yox@K?UFOC zr*x2njk^TVQHxj0+m0_*N@^l1VrLSMh=eK$yItJ&-f#kHQk-{(k=i?~OkR|r()G(4 z#VW*1{@~!a?q{UE3Kj^)=x&|YwLoI~X8I2u`cj|%j zTc57>&(vQhqI%Bxt5!2OZB#2yIB(P$rp{Uwkhx+6uQkxSjb!@tS_3U|_NW&XoT{tt z`_&u#o~TbwEp_7P3-xPr96Vh;UBB>lPHd>)Ojjqr!r@H)YKe0D|FoZgul>!|{>^SN z;^r8EO_)jm9C!O-G0(w6VVq-q9U`lZYAqk@ibH%HnCs|XN8dVnSFY$Yv5+Yc;U}t{ zgMQD|Qx2Y`0z`xW5f9f***d!8M*MC6;+6;ur2L_E@eeHmtOz^ADzXT+MH4}mFexE{ zb8<54#?G=h><23(b!E|FS-fV2eIb(0oOa4H>qD%aLhY$M!8#j}C2~xqH?!%FRdOyf zYX=&(O~S_lI}@7qi_La6_G80yo{epE#a#T8H7bR41~U)A>N~}mS~z{#D`fZx9)p!N zh2j+F{eRlu-co@g(GTyAZmGZ@QU&b07dBCQiXb3LU_k|W9SY;WAc(39FPxnqjG|gO z#@!zKghh__rq-UOY7SxId*Zjc(O^{K=Uma-Go{|=>Jz2S;qO8xN2-I)SVnM-Hv_Mr z%y-An=P-8WNMOdC@Q+3np7D9=Fv29TXw67vQKi4a#{CUI9ohabZ<&BwCZI&@AD0)r zWdf|a_WlT*&08jzoV;jGgcKv@?GubfViK>E^JWKe1%t(eh&yu1rdFa3=Idgz{L1T;B#fDA>43gv#S9^{DXwBfli|Y8`#fZt@vLjDbV7@yDDa07V~q|RO^@s3;+zM%fFT&icQ{(CZbwtX36QX=7^I2=_tZq7@iykIIt1ujr_q7ch%rB6&m*^`n^UV0VR&)ssv;D?FA zN_VreLO6jA7P3Lu!%l7m_mrJE))xni^pKJa$pR~94;Enos<|S|Ot7V}B$N^m2|bjP z1R07xf*e5)%5m6U_m%7qHv}chO)2ezi5pitbp`B#jFf$FLeQqbuG*?M1$%`nA(ATU z{y**C+zJ7TM7KhKTOq)$5a3o8_>UzEycGfnDgKy40D(~^N>lXCOqNhXg+$0CoDt#) ztb}C3iv)eSE~pcV2`kig)NO<~YBK^RvrVZPrPwS06MCe^p^jlifN)75rlO%%Ay_f* zC@f-cyc;!7X>V36s~Chk0>@NWKmclO6Q-#?392%WmnVg7_->toijA;p3^rj3Zgmt_ zg`ElA1Xo$7AcPb^S~H>2q?G_sttO$NFb>uU|J2z8Xu?34!3kYb&C*hROVvrRtj3d> zLH(M33MsQr0^hV2ZVLa^vcQn(0njBZ zM0>d7Ebe3)Bz*4SH9EivWI|;ekUaEB6n$HTlA2T`NNAh6$GkfhtwTffR^K9DAR+_q zWXeKc!9@RP24gW98Nf&UfFs#WH4!da3x};%Nez;;sn_8@NNGW&OJAVE^&|}HqvRQf z)HlIGwliCd4nk)Vj8@VY@Nm0a@WYvfuW1W&V`A>dB zgUmU@UtJPDkvLfO@^-`q+82KL-q4ngexu`Gw+ z8j_9wvCakGssb{ff2PadjrOIRyScy1k_>?pCn>gG9u-%Ue37MW+ug0NxYNbO2(6f z!8=8Oto@TbS>mC{A)Zv;Hn&e@=2<*a2Qq=&7dO6p{I6INxf$VC~3L`ICRisiXoEma3G6c&_vpa zW7cTfuCp40qv}U#1qMKiXzf($#0*bbUj57ZNN;PA~&M_>4XKHBmHLC*A}jR7XDub?IN#TP`sO>SrES^9g17oo zVnShjA(=_*QHNa6AJ@>BMWcVdk-jXsO3??md;%r?^Zbo|+TUy;u})PXbc}_DA@GQg zAxPyvA&`?wX4xx}5@df~&xN^8m(3Rnq!wGTv!5~+t}`73g( ztza)U2<|g(>Tck`ysS#Y4m~q=3{w``s@Q;tGN}?#GbTy0sDR9jir!F(*hleEHT5N?fnufVgi?M~pO|WQ-C;PW4s#S3vbTYdgD%1j z7f+x9S}@fhNL>qt`HYjE$>cdhkSY~Q5qTn1BH#;RhYTTm)LaHg=k=HNJG6P`Nv-!*~AqE0s0J0z?%NLy?Op1Uh+aV@q=pjq_ zlutu8Vu8g3ipXJI3XkBSb##p&unHItqX&^-5IP$9S>`Pxlt_%pe1A_(EdhpV&}1SdUOUQ2(}sibxRv z;Yb+Zb}Ru>LK-^_+D&Dgd_o2l-wYLVbfIp0hMQF^bCu9Wt?wTBgX56|TfM;T8zGa7Q)Rs<4?_5ZY`}pn<6# z>nj>e1U$tOp&Q1!N9d`7Kq$o5W3Is({-7hEu+c9J^~4r(3lut{sBMBRPqN^IDfR&+ zU`B}J2YkY4lp>w0n5IH-n- zBosA33ty&rFac35WHneUcGv+t-2(xNY(7zs62x~T3ZsaIHgJ3nMzD?8jF}PDI6zf?*~B0UIHUPYukm=urjgK)5|ajiauVPY*l#QEfP3+7CzJ~QUrT2;wP%3S*JtPfK)|X!JN#Ap+pfX zA(9~-Xc!eiN&WG)uA>ash34dwOo&KGABBmFO5VyV!&+2elmw!o0a=47o}v)d0tdMC z9F9`482%VXGQ*_1&V=NCq6*YbG=qZ-B2F=xQEL#2Rg6MI!!?SJBN?AV4i3IEYH*8& zkZv4j6rzYd;F@LEIq2o0o zz63J$@rh;*b>Cz%SB}ZLK{RN>;yGyC5(zB6q5-e z8dR7iMqn7C3apWpdJsgSBnm(kK|YMaLOr+wU!tiGY+#HS5r!1W14(=egPbVDGm=;E z!IVx|juAM2!eB1&icporsv^ za1Y{B0*_bPfEdh#J%$PFadi3yf&0NX>ccQ6nu_`GB-f;UoF*6H8muC>l#OvD6DW<} zOd0Cy9i;AuOHohv@R}Y(?Pvp|m?&EbD#piCG2}5bBrd$94XBe;3deAXd@|}FW*lfS z_|ZC%3aN%S-us+vpR{^j1V)DHq{YA8LK}iWF1{u)C^(`Z1wylpl!<6k z;#he9F)GOd!6#4k2spZ99O9LJJn?@kDj6)aZ~6mS_MD+m}ZFwmDeAL8Gct#Aigfp z^km#Zb&91ms^UW2l}H%nXpPiMUp=OhV#ILi4Yv5KEzD39#^l=wctJK8Z7ox^iE|{6 zTq0Qx7k!T|(Jcm$JJmDJaZQYB95Wg*J)UP2>5Z|Hz@ZQ$(60TCxEo4%0Eq-H@hYr@ zhcl>e+C*h|#pF-?5ykF+62Dl#s5dcOBxastF)O(()}76G7S z7u^|cmIpN=M^Hm^!zYo1sE~xLKslujl0xOk|z4kvp5CG&^s~+xx`rE zDA{22qj!lA108$9J(CaC0wgeGpt)SXFv25k$O{*NYzYTQIo@iIxY`+;geTE;2UA3W zv6l2Y0ayYA62k_N1G1-2Fefm>C{$ygP>a1I>6orhnA3KFPwWI~#GB9&R(waai>}96 z8;3@-+N@TBEz-&I#X7_zX&D`Y2`q7&G}9oK0ll@sTNwt}K%6iXmS~Lf^de;05#>y5ThJ5}eXQ_6q)#jYb-Q z9QYR7`Z zQc47g&Tp%Qqb8BZv8E1#%n_YP=jty?W&X6(!F+`bNfgG1@nR{<$E)yHB3vGY|K)plC@~3d#wR5o(-#W;MvJ`#Pt}QL1u~&3Hy*1GX%K8L1B>uR`5+^ks&Z71P3qZQUN672?>)(CX5VQ1V`y7 zf)}V^q=%&SNiQWFn3`ZSg%41;Dx^gzB1MoR)|ibsQU<~&rAf$al%xqNcfw{#5A3Az z6asBP01|@M!(-42SUrt@Q6+RtVjDpLkEBH~jzbhUsz~TimiQ2JaG@XtkY^@!6KD#c z@lGESCV06*XcMwaAy9>&F$(%Y^Mui^CGjR>_={tbl?0;A|e}sxSCL<+q$>rHZLtsqE zi4hPd_5>B1SwINOZm{C7j9;C(=BNK0<$!{sPK9Ln2{ZG|Q z-%-@QHZSr9~-U65g!E`0^?e;S$M&UA!2#q?`ipUayxlE z;lXQ$2pvJ7RvO!lH}O~SFe*Gz8&;|WsIC&*rD9 zX?#5}59&sE7}W>|;XxhI0Ul8T|M?$%;S9R#+2_bGvw+5U0~*}HKS~TjREiIxz)UL@ z1xqRe`lED=3Eq*)WXq__G{j$#8PZAWNHeMDNH_|-zyo(tBehz5=J8O2UQs~L#qh;p z&<@K_6_%eOyjvhQcEMr__f>8;+@pFt=JU6bP5-9voe7(Zj807`)cJnh2RYinTW-G^+UMAl@7A{~_00=EyaM-$`t>CDf3mt3HgKWt zX)l<1tiA~oKd8SSR{xJxI~jrAg>_uB@a+AewGrL>uv$raPu2CO>sKJ`4b$({-z)VE zv|jCFhROI>>f1BJGs1)`^@Om5yM1pM6HcP_r>gabyCVx&!2HzkEIc2p9-pjVxy^^e z?+3%vf`Ip`Hv!J$)w|#wgdlik80*8rPhVH6Hv4vM?7^r9sk zKnORqLNlWYOavh?0husM?jmgR42pkP-@JYN@fy$QaDRNb5?sM7;1c44_Wk-KC=_~L zskZI4B>hPh&{@V~Z1nMRviItn)B=r#TkqB{eC5B|zy*i&hck^(LHuMj6~kdKz~8G* z0RTbdW5N&#y4av4QYQf>8t+zzT4H|CL`KMCn27Sq0D^uK851jHfkfIoJpe0`A!>TX zF0HUMe*quiB(_ML`^Z2DjFWj6B*t1yg*YK~2cg1Xcw=Sy052Q~krwX{tv{$IJ4P6e zxTr%wKpzN1Tp~{6ga*=Bq9Dh?DAe)!bhXU%tY|iDBgop&c~GE<=v?gUJHeya;3Zri z4C5LLui&I_${IDm8RD4wTBd{1#dvx_540m7mGmlzNybt!k%h~xg~kbyx9dTnepVX^ zyM@b=9^fQFO=+;FQhETkv;N~J|<52x|W6{$9iRmAk0iFheAtV}erb1@gV znnD1I`X#h5l2GBW)YyNtkf<6PrZAK!lcgkJDWu>=d=1*-m|oc}7{gS`8JJRM%0xDs zscmX?c%6i_C$CXD9F44zUy_(AnbL>e*?N)=0+59>6c8*pmZTGur~n@H2Pfs0p5mEL z@t&xw-X#r12NZ%Y$&8e^OSYxt;0e{p0cau-c!tgl4*HVaq~FY_EAB|SMF$E1s17T4 z$u=1ZuObstd3>rw_bXBX7EeX{NHnUe(3!9%#nS1FfXa#^V8M0LmQ)@z#@D;CL50sF zPw{7{w7Eq|Fa&80K=2s|iknAti-lA(mS1gxcp(oW5P~ksy`Dl%Q!fF0R&6MAh6y|e z_C_hA5DW>{1VQXUP708kdult>0<=g8A~iZ{fsC#a7??!ZFaR-fjTyuW*kCNu#>PkV zm<#Gc^aw(PkC-7aMa=92>M#~rg|V>C<&kfEd0^Kq_H`H)^Ff zCJ%jZAfHj*v)xxS3WSzGpi?5tJ+nUR@p{i3a>{GzU&nF6#0 z74z$=(U}fUc#ffnPxSVoE%3q`d35_d zs`-Y7#EUA$>-Z)PBxpu9HYyS?Ohs=!B$6^B)#Fe6cqYoj^YS-|mGCG~;&$kSE{Qn9 z8RjSkN&mboI)RrYM8)H0VU0F0B+d*m=#7BVFg3d8^xCncPJA1;Lj}Nw=I97+rUFFa zAH3s=Vsvg^s1(B(&g)7CAgb@agoa1~f z72XQ7(hnQq9@Jxr$Oo;!DV8j*K4BR2NM14#nvN7&C!>izkfGqjg7}1UMn_~i6w7geYvrFM|Y&#hy|7hVJ3P;Yh#S1b|sz?FpNu(eSNz91i z?j=H_Um#+a;6}1YXO>6c2r1Dkor(b=HQEPLxEc}E(Kj}cjH3=(!k6*#1g*!11mvIt zJ*v~}#A$(ruVdg)CV4XsYt2ZJVYuT+{5I&>V)2LZNTk1HjIC!sVsS`8syR66b98_N zq6JQertpRX4(NgOkv87QXEqD>60e}YuwD!UzIZLZgS63BS4f9GwWdpnU`Pjv(i8iG z>ntG3qCD7RF?fD$JfHYUY)N+TmDNBAKdzt+LotesXxJEiWKg>Pt-CbH;uHh`ozA~&X|GfTxP~clk{bBvJ*g9+Ytv&y;em*FI z_UY2TSUV{7h1rN|w&CmRy*ys1FcA><`F}gGbxe z#eX{V`9;kOZZg44p1H+9ePfbuef&bT1##9hd|jXCD?QMl<7XbPJU5j0&O~}2{i0OPRltyE+S_0#NJ?) z4DGyLPhqv`(<}_pe!c(%L9Mulx;6Y?*N>;Ls`vhRUBT!=^nCCZ^&#R6k{Xr=v;V%NumNy#j)1p^-qJ(1?W7)Td+G!wKx zL+#;+-u3lES&HDPV%G`ek4gBv9UB-hE_#Xfeq2NkKBX%s`kD!>8>tai5+7rcUrVzw(5U0$MXEn*x7Az@OJv^^3 z&!9AFd~zKQHVFRT4e&&6Li4J4`)s>3q9Xg1^a~gN?sIl~cUK$S1yOgm9r5=5S; z(HNEYFZnqLgo zA~q!JZq643)>M8|&x|rJuAqhDiOADeA79pW z)-+Df`bNBcZx}h25XWgWo%b|aTy0wyruKyPdv?^`^{1vA&**aeM0<9>zP8)z?d2MA zk7pm;)c3Ks()dGJPO|V((GQkrH(2viV}H{%q#f7QXO7+Y8No?=IM9U7p51 zs^tT&9w~^Hwrh~FXA`eQb_5ymBV(L}!}xfjc=&aVW4j=pRcL+RcJ(Z1irvWQ?Oq;o zE`9CPrjCDGz46bicV96!wbJcqw|19?{x)U0{qya5_VfA?L0W0~LGeIPr&r#JU-`EF z&*Otj6_KBn5~WaE&K7^eEisW(*Dt|46H-&1B`s{PVE{_ zC}wq@^m%J`P4f0s+d4B!0?zW{_{m;$DI~Fb=`J3}s-pAz6?eTL(t;OTL@tfPGqqS1;%tq_&>Sfc8 zooMaUbmZs+yFYG>{qw>`X=11PjJ?{rBQ~j?et7yc$z8&omIc$vP2CAk!qM(aCO&s( z+P4k7(%-WM$C>*7ZG9)}DD!#w0iU}p#Cjj8mZa-s>3lvt-nKqo>yxKFe8225k1Orw zho;(D{^1HA+A~WYYcm$?@pJs(PW8n0(#eEI<;aCOGh5Lv6fwLdmPp*ri_|3UB(i6KT^~`SF~@Z57v5npyvle z&mY(4_K*~Ge;Rhp>DH5fU-gDx)Z<6ZET2aH8U_TRlyJOk7;8U;`|d2E%#$Lb0BwyG5`p@i{u4bS@T44=u@r|p%x^VtwVl8W@W zGss5IA_BPTOTY};dfPg&E?b>lbAnU^bACw#(gXGQe1#V5<<|oJcLkd^@oQJ=YWi+7 z%eZ7?A0K|p`oa9zgTw-9e=r7K9>h*=a9{>L)bp8rGMQ(W_CX}Y$A3~I_3R{qgdWKg zc54kMEZ`<+)MLz!y5McJKfaeIT#W)B=$>x%ZpGeXO<|b>6vwyOuQ4u6;i^Zb)E-VT z1==Ml#ck2#XTzBg?bKY3Xu?#nMz8VpbroutA~g!X@d$k6X3oSI#ENS*jUuP#QxqPb zg@-$(J7>znzgqueD3;m6w3K+YI1(k#DHm(<7+TB?+19ncJNR&G9U##-H2c!+5Z5@Z zIx0ddXsEWTgrH-OWYvUBBn2v*l?|Akuu`Rw)OUO-ayC~ zQ_JKWDHX@=gD`!K3tN9ZrXbz(CHR;pdn0!u+Vk}DNQs+Dw7^t|1+o-Br@_wDW8rWW z*?v9sbn}#fkbXQER+N|)jDo))hXPW}HJGaRpUs1;?f<+yLnTfl%O$BKqYTdfey3=5=53?a;rlAzC_u7?N!E9)AL<#M;x|VpZ9c9(x`yGV9~r zLgs&adv{hV=#bu?l=eq7O_Xr8O4+}zA$khhTL9}!U5y*-r4>L)GP_KUXune7E%ZB$ z`yo;0B>J@wV}GKSAvsL*UgytrM;Ff0O1F(GjT(!Gg zpI)rrbEQJZ+SXS$55<0Ue6^7665z1J-^*PHADDYR9K~OJ|AvTm4(-?M#$q)k#mK$= zg|~)&-ce+QyFfK&D%xXbAwb;&DV>$uT(--%>C={H~#(% zj)PuqnN5^UOt-$33KOqUGrQJ}dbw_JMvirT3+HHA?_)26(yslNKg7UYFGdCDcDO5U z*=N$tYHga2Usan=3+<}&zSSe%uCsg14|Vsp8MW*YTV7a;y_ODYnzXD(okM1Ma)fSP zE66i?nY*KQLL#)x?&Fk47L9CfKi!P5hLO*W)Bf`;D(nsJqUbo;&it|G%)qJNNdBgC zdUMCBC-bG7Jq&O>x7GufP7eC4#-2~#(fw+B>#zbX_N5>lu06&2C#1T)eWU)z5UVQ- zyvgnQlcU16YyU$>V`t)WH^rN!3uF2aanECrKMfSR27BVlpccrQVEofkB$K%TPYbHW z;$o(8;^MkbX!orl(SFv67bf$(iJ`Wx?saFapLOdC$7${0SlQV0E|H%`cZoE%j`cA| zA&qAc&%tyzdD_8t3G#fBPxLUx!J?3nI-vf#o)(eWB=WKnuSpO42zf_<4bI04(8RmfP{zaby zU?A@LWwn=&4d0HwT7mEjHT8AA!ki;D33{%*RsUVNR97xkdGOW26aT8*1Mj@rrlu3Z z4{hG4_UCFsa?X`@+jDj8R|Sd12D^2q2S;A5ae3?h@xG7`ue$_n9kmkAwwx36U*Ld|J^Q6+0=Lf)+Ew2 zOv9EuUa31Dm9BhVw2myc6Tcd$BgoR*k}8%4pf^t-6>WF-UNY6$-daj%*O0aP^g4ak zWv`tuK}Bv@IfrAc$=bM-u{{EkwcsZybl3VprZ@D$-DS|%L(WaiI=e3bO>VgaJ9*(;=F~X(jQI-U5 zVwGHz4RJ5i@8SHq9&9}e;;D~8rGq`+P9OAHbf!I@CT@71HKsR_sMu=obqnT`ETV*|nMXV(;{j)W;KjWok*$dGduW)A*~~if)bL?_$~dqQkC1X?wK1 z`zr-q_x;OOtT)doZDN@>>)q`PyRl5ymSc7+Fz01pXpekeI%IkP*T?0ctD`+|q9PsZ z?N3xJ^hL!!)2W#D$ceH)p>#aJK5d63HcPn0rz{uy5SXVBwdbc&JGPYpt=aBr&6h3S zss&D)w3=d|A67Ax8SM9&{l+8{AXdWY+}{}WwY__wQ=sqCbWl8&8Z#ZU%ltH(sbu%L zDHP-u%vk_(BigBh5-et8)D8lvdFt8i-S!%iX?(gJOWIgH_skc*z@!PS#?c%|#Dm z-mz+TstJZ}oSy|#qndq-m1>yW@doXI+Z4$Inj?V~kG8}kp(qU&_# zE=4ynDT*Z08o5CCep^qVNRKIs=kMP9IMIJwMH02Fk6@A0r!gVs>~LwWQj@^6?Mt;=FE@i9wR77V%Mek5>n;^=V;!rRpUl z<@M_nK;dastX=y%={wUZpxPXq3NmP^)(bm;-34&E9BhrH2)W#CgikBYF(-h-aQPD&YIJ&*a$~U~)dSo-dI9}sX z6!8|1*S*o!?V!6-OOAt;`NFSakFs!~-Ma~WJGFVu5{JIfYox-Y&mpf+O?&k*yuszi~Ni(q@y zhUP~qS_kLZffn-6Z>oav|B-k1A(meEo#3CUR;fxYspY=1BFpNwTI*;OVJlMW#gfMH zWLm8kH?}Ovk`rg_A=Bz^+rmlQw&WyQ61KV>dpF)B>sH4}mN4uFChYzbn1KW`Fw1Tr z16deDyx3qv@<(9Jl4Te2#{_0z0{i=%?>%*2tLj!;$;_}_U3Kq$o^yWZ_wxO{ob#OL zx!I7|^6Inmv==M!NgWu9i@5pw!*HX$be=Nu(OO}er+I*i|2?TNvqCqW+a9XSKfAGD z?VkB@+sCuo*zlEuz3l8ac(^{}+Ms7;xFvIWyF3bL|8|}o;>i_bdhMpuX-@aX z+2X2PGnCF3L(_=R$3jmO!_OqTO{&DoFSVH`*OaFF^{uJ%TA#P<@Bteo zX>Rr!N#Av0O!yO@AE{rD;HQ_YrI|-8j-9#J#D>$9hZk4Vqgk~ZnkLworZQbUuYF=Q zin%`C=UcCoHF-x??RTYJw*&W^m?k-WdUTO-a?9s5`i2k9u0YTV+)b`b&7&1|CK{fp zmrh?Bt!YdTKWgSd(te}ZG`D@Gl^lGgI7x+`y-6+BZHC%VGr@lSG+w-T3+OE6*89-A ztM-~b-YdORHP+8me1E$B(vaFInQHjh^x7FLs%NyBUDHgBljoy^V>WV)moInBexmk7 zH(q}9W7U5;d(83`JM5u}GxP0pEkBQ$QE7<;@wBY?h;jYMB&O6X^g{=c4~;#fYMc6| z*OBI9TC|sa6x~O6H2w5^t~f|UrBy3$^{hbU#1LDO%5Do2)84p!+ z2YFfRiM>;d@jACA8j}Y(4Yx~~HgU|Rjp04>0e#sBB0m4@kY%OFaF#azRtub(NcR9Q#PSCy=uZOLH|#z(i6gOp zdi2$7B{HgFg&2`=S6|3-i;4aDx+E?P*Co5>-8t%>k*>>o>r)mV`qcT2_AID-OLNmb zwVUVR!C~#Q%ctEqVL8_PnN~Wdm~@QgGUX3qJ15ft{>fS#c)8k6-{!FP{$-e2)^bS+ zd$UBXcxzgCcH*;>a#G5een_3tFQxg(;$+ezny1gr_>^p(3+T z4@sF0M#51p|U0R?L`679}b_lxTW75d)2%#l!l6rip>(6?o_ z>Dc5J`{9<^@rT=|)1!Gy9)dGGFnzqcJ&L`BFp^M>!{O-kC%5el@0rHUgj$~^JU>-X z3^(9W2pI0z4GF`2yPa9E(CrYi1T*z@qlKIsCue>2=o5ttD>uWbWjf_sE3cQ-!`Ehg z&3f8XTmUV_ij9xy616U z!@b&s7f+qWlSh7auK8%YYiCz^YRt_{$n#pfFYI1kh9m1RYA(gz8;NIUT>VhGo2bmL z+Qv@yIZrS$sc`0(K!yiS6>Yeb;h$=+_AuDVD}NaS;`1n}dfx6mT?_qTXpffEejlq} zPe^YML0h3!S?1w+ZnFQ$zKK4~%w%dZ^%)*JRoFDGq76m<8_mPAbRZ{nuBYXyD{FOK zX|@JQEj)Z+k=|tYMKC+5G-#rqeah2^-#=}KMQP$~-47>k9!^}u~?;wMIt|HI9r{l9EM7>3voYeH%c>v=_iziy@ zI2>+Qe=c4#8}5u<=)*Eo)>nrxiEID(}shSapog|oG=XB|}PuOeXcH2wEt<}rq z2G=|4XwwI;ne=tQM!dplQrMrPExzdA$mVEmL>Wa?s=g; ztH1G_y7*J@sMt}x?n(9Brctl{MTBTiqiM#DmSIKi zFBJAB3z}yN5A*S>U$dK3BQk^Pd9sAq=feAOP;<|!++V2vr)nhFOAhJFRXl#mpJ(nM zh=2C1Gdq9IO2q6k@Y?1$THmSin0Si1ZD*aN*kevBHvqxqeoSrczJKj#cK!XeYRFw=6big z92a%i?cSqO^PI=58(APc)1>`W**bTjxr0?iM}N9j#_gwvwOV4!+%E{op210_OE0n_ z|4t;@i~extxoT&e)Hcg#PAZ%|DLua&KVA0j!QpEEs4-LwOq^M@2Ygg~sda>SZt^!h zqVQU+uEfUA5U~1&l)_b+7>U>{1RV(k?rt15B+f?r|;5q%kkreN_#vn*2%me``M`D|9+poTM${xaSrdqi9vKJCP04xuz!^5*> zR8J1wxj#DQbvkqnH}|mI0{5-CJl>}Sj;(Eeq^_o(s_UO;iswl}^WeKA^vN?~qxhGK z-`QpIM!Vgrnd>Wk0-UAC{;ZzaZQ>Uy;JI~P0ugA356q9RD4nGHJ}p^H`fcb00=2V+Y;Ze5=ok-Tx_Wb&IDBg?~4(_GD>;~a3_Wz zE3mo++(Tp)0E-ijES&Vj8LIUtsXil2wQ?;3KU4$n9_up8vzNtM1!c>^OPP59+n}#X zSAkcC2B9jUL;;Ub}=>S68J0D5vIOzzKYacxHf zzWK~nlHt~_lN@O)SqsN1Yt0>NR{$1{)w;{VvC6Is$10mH9ILFiaICW2!m&l3t=-PI zliwDPmBr`iS#4W9R+)UE-J%ZcW}R>6YiIV(-pQwXuXUwONwDWyS6Y=!d*)TGR%x?e z6@<>B-CR>x)WM?ud{x?T|K71`QhT?^bUd@iM7;Ck)NVG|R!DB?xaG^m!w#~uqFSTP z9Vuc^Ol#2)<>()sk#ndZR`5} znJRW{`Peyj)bl`XoC*DxYGu*$-aG{^8$xV$D_-t3OU=61^ll5!$DLkj8SdV#T`y{f zyOqTK+xeEQ2$88qy!C}vrhT#K%TMksAMUhnhYMM3Zsgnh2C;*QjG|@DBy;j)zbZdbVx*4xU?~1KC4tB-X&WNo=$5ywRaZ>)5y-JGG zN!{g1AG6ppwdvTJ8~OG=g4Lc^ieAT-+6m%KuimKlpDG#I@SHZ8O+#ELlcHBdhF zy9~P(*Pg$(#)gmAss=W1qaU-GEDxAOL-p*oH@uoW-aDQdDfdQF^4LkdM`N$<~ioEijg%&R4bZq2<>fyUzNCNi(PHBI8jf+L(RzpSE>1 zv?vw=eqt|*;-L8Lnt*t_j4l*dS?-==nF8(>*V(48bGLm3PvgnVZ?XuZXE=PRM$FPk z#(k}F{?c!*nR$+&Cvrs3{r)sMm(Q}IEAo-z<%)lhGaZF4!`l7F8QK?_8 z?O%47YY?Jg<(fPCy%i*wo=XpR^t-VZ&KzAhvP0$N((kA1Cw}J2+QO0B+_U&xNuFo8 zW@GViURKIf0VTt0eoeyroqmc;I@RjZwwKYN#P z=-8SRM9tAWN&-*9&yr!uboaB(BB?~6FF9(e#g49?Er(=o!bbobt2!&jyc&*5>h0?2Q(TP3k*vYfg+7K+AZPkw4|*-~m&rBo}^ zi?b_HtFHon>v*e(y_DXya#!^3ndZ-Ks6?~bE2=~Ls@mzyJ!=v6R%>L>kXl=f^+u~# zX6r4OSo?|n>W)x*uJB=Ykt_CR%Brq=8|(GmD1U4<%H4B#p6cmhL;vS@qx$3D4^?|@ z)NM=j@ci=1VYoY(S9W-_iE3Vc zc%kBCxBL0r^}joRIlotbdmeW` zpXVX8^S3S2?{KJQB}Zp#$f^!+*r|EP@2WN(zsuRwy^f_m9&YaM+82gbMObS>^|w|U z>u;^L)!)>nwMtkuZ`%{vUQ+|NeWC4h(QmJ6*v?mO$Lp1NQLArrk`ra$>=zTq+x3SB zpn5ufztkeQS&fy2`98zR`8m)(Xgl_DiO#%8yHm8pH65TIU+u_!UyzJht>Nj1KF57Eqv%QuE>a|^AZm-c9q~>_q zKScZOd~aVCXrE()b{(KTx3&NFT0FGZ(6joN&!J~MF`q-vGdc3P=sh;?0CFT;8a#25bB@PcyPp0P2_ho_?syO|4wSS>5ynU?FFZh5> z-v$kWw&YK~7rC76zWrN`oqL6rCSt46%w@z?M%S_cxZ>yq$@lCpQTQyquH3eyTDfg; zyK>udv3=}B`{iIOwA!B*G_2ODTz#Jr(W*eOLaY6`4@y^|RiUMA_TL@X&a`y0QoGgA zY6Jc1Ela~IpcT#4aGmY@tI{l+tT=l4$_g!A`dLl(TqIhR=4!H|Sy)_=&(&l{b9LDZ zy(^Ah>2JlBh2j+=L^QuzG)ddi)XH>AS1Y$&Evn+7EuyYS_aV4?VE1*g!nmBN;N7O|JvJtte&w)p3 z+q$ly*R|=rP;?DrU7K8$v#w#RgT^9yZ<*o1W3?P{4ZW@fPd2z5TpMkgeGMF53pUym z{u;(AY-~K-mR;H;eWPvc*>KDCP=C!Y50Y8Nv%CZMS2^Ws^sbTW+?V(k?KyTfqAzJ(n+BRJLT;A4IU6%5eJ^i^}vRjVy2vr&n3UncQ>W zg2X(B!@?thmoA>~vQ%2u-Q`T#ahEe?v0cuTu6H?8S!I_ql{t1cLCh}Wwp;#pIros* zwd=W}xw91`G|iY3MVbffdiRNi+R28bT%a6pq*%C6*!4WUA*i9G&H2n87B_XM)~2?9 z)K}Em=0Cd*IUIMP)TJD&eO3i?>BxheUaJf0&VIfYt8w>w>2eCEQ-!bdg(U0J)9c!c7yNShd2QkAKbMWdvnnq`*bwEVl^Y1?6Z+c&k0(xLZ642l&x+;$>oVkwOq~yWxt%96_}lxE5RHoGH-vVb8NVw; z-uIDa44jWuA1kbkzXGzpxE6As8qv(fv-$ zXb;h8uZ57iY(tYr`qr4#KOZc*wucUnW`x`j<)UWaJiFV?ShTe~RDz1ucT^EL9d3z0uLU0e0GeTzf3pr5UWwApIo zfgxSuN!Amk(C$~^RD!k)u|;wD+#*NIN93HAijCIv$df)l+zSHr()A7F3@qU_)s)0@%uZn5sedXPo`*E++ zpGtF?3fmqx2ido4-YYe~^wOM>=V z+_%@_yuGS@W3A$1{I2uS$IJPQJszX+;eGM3X>C!TN2gx#;j{Bz@#7UgUh(4Z=vARpzcToLg?nCCypIREjf(|Y<0YKhq-mc=h%9RduIle;Ca2c-_XhA!C$IK6VhDB-*%PD60VH+m`7ix_R*+ z{Lb2G7oVs(e^wy-mrC{3^~9@XHXByFwIh9Zmu)ulH~rlb{q;40Rj%e`zm=+3tz(sc zRsOnu4uGK*_1`J4fS5Z!H|0&!*B%N(KfW4<`e?j&mO@ABT*UaqYAD*D?h*^uCj3N) zWm+9xT6N@Qv2zy$mj>rs@8IXw$+?|l7Y@op?|G^`<!^o!+owexB&( z+Un58<&C|1D?NN-H9vcysvlK`o8DASSzpX8@{_u0&ex8*nwVam_g16TGxGL|xY02$ zn$%+x46Pm&mRBu3A}z@+d`wF+jajRF06)=@HoxaVujlAvqU#bI9=>tIQZOZ z-n+lX=5?@(2Hzdccx=ONx*t}|ES)Fwr&C2OH+SdZ)faZN;2pW$ck=a@sZ{EUz)$iq zS3b=G+zT}Qn3(As{O4z5Dtz;MJ4(cB*BRbdzi9Q_*-O(aR@eu%`;zQ=r>jm@t@_m` zD}3J98cf~DmzABi;xzT?;hA%_s?+voXzPoLvnH3mwUX5KXDmC{*28u^+g5$rbk=LS zyKwLONuFq*%2nQK_6$ZiSDCSm1?<|lig}M~bN=yS=F!F?*2ALJ*vIR~XKl*@Z#8>w zrS>cxvtYe$|8`ft9j|1wGmHl8C9|q*;KxfM?HErRX0jq}|ApP<%tHDYhYou`?e%kY z$ql=HtWrN#N0>Qgr)_Wn8+-s);e7kIp#km?bP>o2r_ zLLl8uigD~jz`W*?jiVj$VGcfnQSD%nm~Sa_grG4{H$e0kltup-?I@!Nf@posU!EplzSu{_WUTd}4cA%e5aKs)Gj?=#JSq2bLW37h{QG*?U7wJz`=s z38I~MP#IycM!)H8lrS6tlL|_6Zyj@V0Mfz&^Msj%D%zkK!qX-wBqUJ+boiwExUL1#GpIHE;hqshK2nHpz#0@JQ3WlI#Ql>&=>gn>O+ZhEWvHMCqM$KO zWCVQ@-06-n=?oB{A0;S8cX;&KaVh`Nq7ew)U*`blWIbumlA`AV*#Q1Rz5iStJ2k9b zL$4>Vsn_XY?fnPm@Z&W({tP~^xo>g1@J&L`)`Z*BRlA-Rw|koS4wpY06DImoGr)J# z`^@+Z#1u@=G>jhaW^CCYz)!kNymN%n8CY+h0|9@;N!JM;7pFup!zX7OvLmF z_pwIOf}Wx^DdK7@5~w7yCY$xMxTiCEkxtly&R90~@Y+)hezi=br{g$%#TL!5NC5;z zgc7C4Fhled7$F~ZGA|*J1<$07fL1?DNUWV=3`^vwCP2`_NC6t9;s%u}S$G0@X_Jk} z+nej8p&*2b1T&V)nP4fQKbaqXqcw~ZE-cZpPgsesu_!v7x%iclZ~`%tYB*j8O=w3I z{`P=tRQ>p5yoCC4mg;~Y-BM-Oh`NZaIPeS-&RhlF?| z4~hXP-5G!L!=%okLc8LGQT!$fP95@+A zRLK!=G$y(Aj`2A!VDzy9m~gG1k@LzP_@o0ramVxx=zxO-QR}j@7>xm?A6CF83b6o+ zWYUKtkO0Wzih$O&9-KJmop!7WH3``)jYf2k=m6+OGA6%g4p2g!SLZC=5(tePa0`HBHByXA z;(#Xn#+2y9rHsrjIK+7Rz^BIL2gJ~|!GmT*kcA^wicX?Ec)@V&12;&8y{^rK zHNDx#u>6PM=^2!=g(HwfEIOkizG74=3x49Cuo;(*_QSK0iSCTP;U=m^FFuItSdNm7 z8*b1D%>*7i;}=DI=@;yiK}%W*0<_SYkzfk4P>rlw`Rs4B8W7-*K~bX(pW{LCW~~x5 z6ZA+x3p5q)q|y!iU}Nkoxg58*)iWbq)154lyi`YC zuWMAU!~bl%Zfy76?Ec!ed{Vn2vdh=LjL)z1e2K}9G*?BTcsS}B`?=}8KsV>=bsqY@ z_@xQ6yYTEKaE;rNmnRYAdklxu^E&`~yMBG$9==cSd>OmP_xi%={`lu6-~ID6&bBt6 z+1cST)B3J27RBj3)zO{Zl#SYjX>Dh}l)DK%s`WFqbJ(?cyQjS73+nsTf7jrDx{k5Z z^m8lu?b9A~Wu>!(X6zBXuC|HUsnXdJvWzZ+|M|5m?iHU73Y{V9zffac4^ zF`vk@DE5%~AD?dRazC&y4d@Ts&ts6?liZQ?eDgS8f0VsCJaE}=Ozk4s+OzW-Jvfbc z*gUH7aH1Bf#ejK^rZjf{UM)!GvEzB@bA5&7g17C}yYcn@RpeWIPDAUv@SV1@h+RYd z>BGy=HYM9a|Hbx;9vQo|@$1U~X7>v&L+B#SWfpJr7NW^w-;BPD!fwhb@1LCX zKq1T>^SzB7{|6r7%qq6(*_jl}bR1dd_59rMV$}~aq<*mw@A`CoWr-bmj^@kMTK_wH z-NHA5udcV@&gghHe?+H4-6fHC?E3k}U%rqnyZ&AqhG!@DFwH;H>EWjH^q;-sOn$dJ zPlo-uqU=j_e!eP5mF>?~b@@U`w8LM!JKUZrHFoxJsdm-NvaqbHwv~%(S%2l$D*U~_ z6w=PSs@C@W8d7a)eRtnB#o4}XYS-AlZEDBBzHO=k*|$yA>FwzmyVWs~y)?8!tJ2X5 ztx8KPv?@KV(5f`GLaWl%3av_83r|W=&Gm}T>v%uoO6^L{mD-i0E43?GS87+%uGDT- zc?%)?(&Lq7{gv94UhceDmEx;2&(RXs+LJf#d7+(qrs9H~z1hv(&x&E~c{LZr9nme% zF-a|ux-5~@l?};j=Z3X3K{s-}7*yp6~RJN^9tuk9mI7 zXG;fWY}pfip^nwpo<7n0kX8kn%;PCRY29Ztp3LHj1}b^EYWTpaJyi({y+70|UwDwk z)V%$!)e|+A`T&xAX(_JHwNH*~+ds=&L*312hLL+TU#fQGsN?sUe@)Nba&O1tY<9SV zhUi7cd#V1Kli^@^;-mHIJ0Wqw#v1PvUZ#M*0TTnSs-@n#r7;m%g{K zX+C3zf2yFOe)K2mtMB|g zS3ghH&v2+{-u+}rqK7Zdd!S|?xg$iBLAm-}+OXjEP)!;C?th-DajgoUs@DhW@6+Xw zPt@zla=ypw)zaJh>ir{ihO<811be8$kmWy%l~2{tN9wbs!H4V9BlY`OwR>NCJzcM8 zW!d}bYIS-%nl`5!J-uoP`$bE<57vvzCN^d#2ud-dt8L z9Y0mao~~Cl9~RJ|LP}tHYI>}W=rO$bL_GoTY;p2<`J{J`mgPMY@0Du*N{RGJ;XpO% zbJj;6toIL9%ZIAvgZ0ZO4;2Qj9-pndw$D}TCyK)R>Q}#q>!@|)^EIk<-II;hxq5%H z&YY~C{o>}?qV{ODi?ScCGZoqIv!csKe0}eQ>VQ1AJREuF9}_tilHg&lk5P z<@WD_!^34Zc+FK02($pr^P*%}qQEEW4BX{P==;jxk2D}KZ^!tPMT_WrH8BZ6~hj6B&iO`j~q z-s~Xa#kSA1BL;l1j&L0eJXN1*A7&EOxV`}3^_ijuLE3mv!C2M%nQA4LJ=5q=nNXrH z^*~~J4`*K~x1&U=H!AmY#OHH$1nfD_r|Jl7rZf{S1P>QT1d~VVyfebVqxC)))VSnu z_Ti$z#Gk59f(C<7>*IC&v2kB*7{_#$iL}ZkHV74F1d{|3TsVg_$A^<7))(gqA@qnB zy&tb*=j#(A;;ni-e1AJD=vqB|OMfE?9vAAI_qZVM zg&JRA4ZLZjruI)9l(SH){P6_NR_9NcIal%vHUApgpDM@+8h|CS$rSue8kB080w}?O zVi@wt`UH-Nu(HadbyfO?Eb1^5orn0)ttfOy$=-?tT`uW8If9u&m^!z1ZGeNiMSDn zZ%SN(R9fXCe(*MY9`+<=UJ1Fp4*o=4S%b)wd#=v#B^c$Kk||G*XCy7ZQau!^Qu$-` z*HNg4-d_6*pXd2J;(XD-JFNMIchq3tG}41$_`IS*e{GY{C0u5|(D)He_$tpvO;nKL z1#fyDo=9xL4+=r|*?PwlwV+wYpJ?OIgOFdI{eGVPc=KSMPAZ@9N7i`z6GhiCqw-j- zYC`dT_G52_iZX^4STiw+w0feb6oMNuhb@Lv*Tyj#j}@)*+f&!Zx1x?d0sMQE2{hSk z@njJvur!d2<{g!TB%jxo2(lV;iw@F0g;KVxorJ^(L5IVDEN~h{G!PeWShdp08dBa99JPTX z84i{bTEo5|nATbugZ1GLrm<@zJt<2}K!?$&pI|7)Fc5Ei{)+}xFtr>>wF)T)(}KEX zhD)G!p-#Q8Ub!ioa(j(9D>n%#A;%g=+*Wt}xC@sQGO$6=1QO>sXB5P>2%b=gjg!^C z++_QbVvWRdtQcZ&9l=suljS8RSvH9&K^Hi)QS=fAEt0tqyROuj42iPeeo!gawDw_qXG*h1w#OQDQQ<>rX8#BhsMc zOB+OPGCy347f|9oc~uZhqf((znZKJxJNzcru`v^_J#+y0H z)1^`n6GPM)+GlRcd8BN8O>hz+xskLk8gg$y(~1jmLH?qaiW@1qrF_gw>5{d$VgiL} zj_bI%=A3rwBC!Sqfr7&t8=SHfA>@dx_*FvURN&!b{thpSV)~kmQ=-ot-P}K=f=Z6c z@k_~MjuwD2a~@@gm|gSUOJ7d9Pzh!6fj^{36Oef-k0R2^)=9;ZIH>v&gn11CMKbKe zzThu>h>>DY!n{d)5``+7*$Ch~{8Omo0zPrY0Aif3HiABrP##W+0$aj4LBtAXmAEp^ zq#)psY|vx`yr4~eekBR-0Eh9(AR?21Qh6t>=t*gm4IYWoG5~N;I92;hN6`fs1jlp) zhI)H{x~R!9AP1(;lwp|-hkOM+T%lzIHi#ZbBb<_$AK{a{e$4c6Ay=KMJ&(6BEK)il z!iaE{6z81!SlirAdrIX$oqvWYp9!jF(hP9{3J#F)6BkshL@+HYprO49BBldVRr~k(o0_ z1TbYfuqF8dP~r_rNvPmND?(Z39?=plGfl5@yeA92MyCvqLwwSy{xm^~c)d!5D{vb; zD*`x~+?)aw81R(z6~D)&2$)dIdBrb1KwGplKDt@l$@rWKVA)AaP7Ge;U>W0yJbBMT z^vqUJLVAui{9?x$7wN9Z>BOl-)Qm!gv_KorlA5ZN`@j+VfIfuKP2wqtlYw373#u{| zt7~~}u_{s4D2b}k4TqpzAtzeiU(T9yj^#<6$(q5637SxZQ`GRAI+KgiFpaY>dEk`Y zSUj^-J`(*Z>3E1w@iBJbA!fX*SR)}drK3^w=KLur1saxtv`WU?zuFCiO-;o=>||w# z(m@J*oMD!@IYOyRxeY*a8G#^0I8HN(^jJc%dOaAn5n#hC!C%9U={@h;cA!wxMicQ>tP2v`n;w25E(_@r?Lih4Ss+ zi@psnsL@H!qlTkj?0`~gcTORiCwqZ~3SRi?@Bv`#B`>i9TO~hp2P}gmTP7R}f5{|a z8%6Cbhk^>*5oCA~<5B{9$@K|`yO2qJVfxAR#=#TIOs86+{J zF}jX;kR%|f2hc%Dfr>sGYbT*$UP2_6Vjw{ZPPDGok`_XfXcPeIx%~qr^Dz~=Mj!)I z2;jr^H{t@UkeUIrvH{rAe5zxA4TW8GgOG$srrRm$V25p}gW^(fp~kt0?JV_B9IqFs zw9eeXlD7;jB5Ebh8dYA43yA=+uG$BdQu2uo95)Jzi>#uWSvQJQ-9^=PbcyrV-QF6|Cdj974a-sk_5qHC*eMmBqC1sTpRG{?rqqyz zCzc_3w$u}k_a3d(c6>A#Aq20NhNw321nzjP<&vmY>=0w%DMrAX+K>w`Ep~phO~qL=pwn1j3Skd6^UJzA#%zspTq)$Wf4Gv z3QYT~NaJ9XBUo}c=UFgiGv*;8b2$d#B3w>SZP=SbaRMb2wNoMt247UCzxFBE6q_jv z_3uK5|LC3Dqe~uGK&PGgp74y3(FiyD}Ch|E`x?+%wrU0U@-KInGrJQVwU6$ z)~+eqrF-HwDN$n4BtNGKkrag?TI_`;$4LQ$-zo<$I4tflaIe%pc z;W*Q<tP2AUKInqvS38W;x^0$dq!a(@sR{{amAQgs zDye76 zT{3v0ORPZa-~)sT8nUI_#bZ(IhR2T67=ROT4+HQ-4V;)qC`5t83|QDfj>>}DOly++ zp^st>o2V*X2p^&7ok-6YvN%UEB0R64M9OBi1UT(vWbiX4Q5ll?lNKpPK0y<2y-nf*FyV&uVGH6}(0D z1j!tQp{P|DN^#q#gkW9Fm(f_y|40tC}WL9Yh)BHqC=WUTu%UCFZ5uC^^HbDctMW?rHtAE zW^x+8me5KPiDljPx?`N&)%u^K*}%Q1}fCF z%~)t|8Yhjq9a8tn?h>{i)BRROJC~@H%AZagYB3v2=j5tU@KyG|7X3~HxpZXaL8BG`< z19>gkpLF75PT z-sbvtJKL@AZJW4l1-Avf9Xr==`*wSqP2-c>w@e9EeHm_U4Gg8v)$!cSkXzb5-Of&Kalcrj+8{suwcEAj{QhZ5HoMyi(CN(H z@?EVz;Z}b)IpnrG?@!ckZl3>KX=nC^4E($8v=PMU?!+N^w# zANXgbPZjpyQt-Exh(z@n*jU{_N0rtlmFS zudmcQT1igDtvwsBRBPJgKj(^8bQw(!7f7Zq(&p@#?ki1Rl@a<;w5!zVk5NA z)lqTzZ2jOK%CZ**I-`4ban?>a7QImI(1lXAr*+or>Dc}m);?FiaBO^57l%Y|dw0mf zuJ!`cJ*mZYW6`Me$WCx|zTWd0x={$&FCEisc0a)`+_Q{}yyqGZ-m@mZwDX$} zp=p=vBlR9-QjrmVsGqI(iCSdl-Rw8KVNcdUex}~LP*tYd^aDPEj zFR-9PNsq38Kgo)tmpj*0elCm~Gz1=7o56>6!;#RX90bv%5ZjyuF(yToW3i$!q)VTK z8WOvy!e=1Oy;dAfXdhk_^qc{F77-wf!f|lumuARH4sL;eEz+LtphdE(((J&1p0*X8 zC;gGbIME;17e;XdqZ#j9lb7~rjSaas3S2OJ#py_$4Ud9Gf+UBb`viU3;`THsF>qty zDdU|hy21jd7wi)763h!d&4&1*)3{j5Z2Fhf%{uTYq=ola>KIK54g7=U&z2OiJ3tCWk;D=r50p>&sf9Ys=L*&p-YnBu^Ng>tpJ!wrs#539WB*d_4TJkWT zgnucDeR&cug;0f(L?9`^3D2lNTs9P`#4vVD0^qZd!)mbU7bbWdjL;e$B^i|Y1+9w~ zv`Ok9&+%}tC;rF>0r+rf;e3q^?R16*5#d4|5oc%-Eir+1oF}(Poj4T#j>hz?z0H#V zmv{34asK@LXLlG70#VfnHB%wbas&XS8t|fY>fwknp^M8)zetE(ARFqFRlJi2$PN+F zEDQ(z$xhfOHPp~bQk(dv1o4?JX`dY(>p6;5Azy-aUOVjVqoLFf^IF^M^SlQ4{#=2> z2J{qSWK^zFHGffNDiV2*@*?Fvwmosz*sZ8Gu>Wtex&$m>w*MN*=KGT_Sr zKF3PZ5`0vxV68X+Ff+G~2SE~HwJ{?l%}_D;5<=fz6=|o9x{65{H=+_F>9AK;QfSHx z4r}{As@%*`L4+x#pwzb7gO1c=R3SZcr&_J}Si<05_Uh*>k5NdL?~-1uj{u~FFf$hC z3N%GE^&H;=<7)V-6QEj;@f+Im4gr8}xtQk3$9$6Bk-I`AoRjZf*rVD=pp0!@* zE#z6IvSK93gfEL^r_BAQGOg9*%KL ziP?x2G*$X?8SsAkmMRJ_c1RW=I(FqPf*ZaD}R~m2~V3i+h zREi+uzyT_*{o#_SyXG z+oKvJS|YSw&MI`AD|a+^y54Ke){zT}tb^x@KoYfnq+!W!t&}8CO=BoR8EzpWD|nG! zQZf!t!LL3dG)-jLmOX3R&;fKyYMgo{0e+)RmSM$&)k0TMg{-9S({%=NEa8g(r`liZ zl#tEp%8p!$5>Kp8=E{O-5KkgQ=at_ZD=|_4ong}SykuZBFV3jWU z2pMpm9R#Q9xYc3NBKs9s5R!*~jAE?M>U>>aWdoi%x*(U%Svwd05^-n?7DPac=@$I6 z4o%KbcR^KbBOO%naJa%N3H1^2;1?pygi+yTB7|t6g}x++=azRA@4>Y)=5*^9Z=pT$ zifpXLpB!PY@E9bEIpn2ll%0+CYD?o;s65z@{;ZFCQI@{wk^T94;v1bA$65tG=$SQf z48IV-J~B}*T0pZ_kj7t}#hnzJwRf3I4D5a5p+;a^S0&Nlvvk2vj0`cxbwpgk8A`m0 zkM#%+&8$dAE<$C3$tGD1!Kv89${p1-8??cLcobx@D3tMjXY@7krvYtfiXIamcy+dj z`z$BW9Dn0Yt3-UdM3+ynedyE7!EBpCnx5n()}%euWpQ>PtutbYl_(bCv0CtJ+fD&MhLb>Ay8V^s`zJ?o zRCKCHcQ(Ei)QUNDkr;10F(w|$6WK~EvhV;!e4Xd+QTG8&pIr zxT9r0t}28AaawzF!V|vY?XUyIXp7qgbQ-bPy*7v7cVFA=;tmuhz7gWd_n|7aPMHX-Q3kIK>fL z(}zCE-uf5~4z*MR$v+}Yu7!%qj*^r;M77jkYAz_FLs>r2mq!|1W`_S%bD|kpPql@G zgGH9v)~RDfI9jCvlIQ9vyap5Ep!^;y(nQsuZzOK8UncL+p4x+^=#mvhm_#b=dWM4h zR84fP9Tf3k@}fh&_?dU!(~uZu83!E^Pi@3-vpejZbj^8+Fe|E-{$jpo8n=8L=LI zMG4Xb86*<}!!_yI!x-#HK2#FB(F)%cW831V_K70!mP(5j#BG*RE#qG0fHE}mBbtF` zHIDYEitZ2)oEaT{aH$14kmyrYYi~Gmtv@`4AM*iRq@E^6B=rso=K#y6Tg!QYL40#N!i0#tgNDuArr}IQ+!GW=Se(< zwOKYfF}jtzSeiGe7HAJ=JR=o|Oob1l$aOWduv8_C8lH0y0C|m=MrU0xz?fkYjF13g zP!vS`GBG+yahwzg8C)ry5*(usk1$Mn)43677~S}tOb$`nlufpO843JynyAX8N2t`-4L#M=&Y=sj+8k+##G$T?a*Woyfz=6z68_8RIHy$ODK_3%3 zA7wKigd{TtU0S4%I6?r?i0;)E`AZeFEaD8?Uk_d!BBQW~Bt1l(x%Q;NyOc&@5Vt9_^ zBZ<*4L>e+4Bw%X;c}Y5K0kB9;MC$yM~n2w7IP~b0Tir&r$9m#`wgf-?*70)KJMZ#~~MSpH3+^}KhdT7O=#7^TRT(#J1mM~tRBDOuz-S#WDISLpbcMxcwR+~ zRc~*98#X!6-_>7^$3EDg2EmfoU>(%>M#^^4MPzbLgyT~*AKS25GAoG5Lc9=SB>L|< zkOZ4LN;mifG~R-Z%(iGJ`i@orK;KmCY@lsQLj%AvN95+bg`*3*Y%MJGY$~Z6DWx}X zf+(*f40^bcarlSKArnPteu*nFjGt4$`k_Zbfs$%QR$yf;go)Gz$yj0< zujW_$5Qg}b*ar(diA{2a0RZF6#-Q5Z0T)!vODj;nhyq&7#``Er8-}9xfE&M=Wl}BP zjS@N0>bj}xlpCa6ovsiHtGLM36ER9`5vh~*QMV7*c%)AhkuezzTm(U=bcQBOH$cU4 z_Tt90OFoV+J9)f=w8hEeTgJ?Kkvvb=#uN~Y75%ZLb_wuc%7URYe(WDW(xl-{-reMja491vA@nkj`z!3upSI&cUrVfm{qe^bgvDre@O7_X5COBbP zX_3ug0d~bNp1?QEKN3iIS0b(gU08w!zeb4%@m#?~2!aKPmPaVH;8C2F&m{e-6wU@s z@p`#6E3OQl_!tr4h}l!=Bp)&q!NG+Ag(kqjJ8w)XIoJr0jRWaO;3Fa0JRWoaLC%Hu zz_4OKT^C9KRp{_B?P#2oS_2c06j8uY+)03DHc5}>1#j&g1HkwvOSuX-dxXw;FB$1d zq=|;J!qtl$R^bX-v9pMo)hi*JU5!>zCy#f=AUuJC=2>}&-wCS_2_TsaKr5dTUZ_n_ zz_eh;1WC7y4@60aU`7M8_v zk8vdRUt&6Y8V*yizyxq3C}P%os1}(SATeD#!cZ*sGK+#|3Qs8qJ!lb%A$T@s@s^yE zoC;^MS3}h2vox0+kPHA;{F?Z@M;JEsGLi~PrU52#iuYMv3Vs6{v4>KF`4lcx#<$A& z*Epi6!+^>1DDmJ-;u2<=2dGKR5~O5&&-TuAk=bdI-clXJuLDj2ISZ7Ia-xLn)GTyB z7b*1U7cfYNmgA_zw!`OX3cZentU-gDhxiP5B9%&t)?ta`f}FFoEy9aw+>fKC zpySqJ5iZA%cTRQM18mCW000Bbsslj`i+zlw0HQF1r#2M;g-NQQHbIG5L756M&%Y>^ z5OzaG?MkjDt4Q$caFVAN~bMoG6OyRfPG65Ka9g((msYJeBi5k3R+>FAy_f zDtLgD*2u|}Tw9R{THGR)0Gn_jnxK2s7&3EQuu`))3 zZeHyu(2 z!3@GufD1_!P2!lG>3NrOFlCD2d2|XCSX47pK65KMpgExpqDu=0?E=0`AQzF{Od+d= zskRKw01%lto9YHz%!c*EXAV?X_VfH}z5!+_a7BZjzA_N4L<)*U1mO5x^dXLjQM}R6 zF-?F=r-C~Tq&^}$m(VIE6N~i3oXErmiB+_wJ#7;-DB~jDWw8mrMusu-090`UvkdMi z@j-+G2;+SLMC|)d0FSOTT;g#wO)~n16*347^e510!-Ld#bOcQ)rx_F=_%5SEp7d&S>r7h0tODvZIMw;QC+gAAu_ZoC>b=y%{o4_Fs%y9`@kkag0nCa z3fidp`}`YZ2%FND@t8%HO~RxKMkWIELwH{U3>1JX?ny;vaUiTUkfkmI5z!V9)NPp+ zrSzm8N!Zb0`**Semnn@vqCALBi4lxbjk3t(9MXHl%al-o#!IL|5h#=k#e6LIObstx zpqB{`+pvi8FX|Cn59q?jv-F0&nT7g%Q^08wIU3qVZB7r-b>H1c?obh2AeFXoEv zj*0g)oAzApcXG8LtO(W!3pg=0Bnn+hiWr4{2$IqvnLl|MgZeXALS=%SP?j(ylk1r< zh@R@b3zZo;y>@L9aJcleyu$$!_@RS?$+-Mqz+z#+r|_)IOu`(-^9 zD1GKKh)*Inou@^X7nSO*6>r4#iQ`}ibx zK`s{~AszPRmu}mvOVGONF1c7_lEYOoY8AT7d;x}7Cb?HO&SFvWi~x|SF1zu-+Ta^7 zCYgwoDIx(2QG+0=M&T6r4qvrBG*6d?qpKMHzfjAIiW9#U?Ot9sEhVnPyQth-yhDE+V7=G`C|A zy-+2Sm??sAUG6|D+$P24u>D6$FpYGR;xNnFA|OwuDo7?WAGILPkA+(SDhq|qQ6OJT zZ380&NjN5`UM9(5Mw+7(d5L=XKGW$%p$S&(4IAP!Z1E&U6rqh!+w}gnMVRE3OyN=h zVp94`%^{w~##u#xF_s{pT9?&(#;0DYqD+ajz`XrOiU<<30PrTB@*nzkMr@&hcn%-Q z;;*c(h14fLv6*Utp?OW>6sWT?jR6`^`Yf@=88Uhff{AKD5ET3{1O0ZjvhJOxR&$K9Wer zs(L^-tg|7uL4{x}7kxS-I0-d;58hb_HE?2E+E47IdZXw~ObS$-rleqF3Rbr(Efd9g z6<=~hzGRlnfN&_xWGRc9!Ia`)K}6@lVl|CWFE6c|v z28H$i?7i9LobqNdlcs=G*kCcQ!HimoF z;DIQLNkK(=cuyfB8Prg(a4B;@6|+R;nf>?-`7%5#2TwQ_jpQ~*se(k2OF9tG7$<^< zzA}yS{-dh^PAQlPAW4ZMs}Pw*;Wg-mi+o}V;-*j%@Q4n{vK$N&6^%Y!VrC_EN*cwE zU~LAb)LoOd*d(3`@Rup4cPWq)|G5vx=ipQzF5*8~6yH=WYd|o3;ipva zpBu|O9oRXKNJ1$hfx=1@$?`!K!BSAc3v6-8peHp_BI|IuHk)JtS*PTH*pueLQyyWR zEQhJkdZYj~7Dd*;S_{-zVbdUi*QSI@S!EPKRfx^>!e@}=(fX?(V8et0Z_wdA##5yj zlZ81^k^^4SPJEyeyx~e8c#%eM-(5|ARZpr}GF!<>9N{q3mBk)tPk{(uBo>JAsjo;0 zb?8QVDNUAy&}3A#v>#q0BzM>C^^2;AY4Kn}nclP%&FTZOGBjUPkMT=9vK!qv&jWD8 zlhm2g8BO37b$M7dpcguzB|7vH`3F zzwFEhP-9J2hCNn*S!iZS0iGi(3Njhd2bx$?WY*ibv7@;FUxXyMNYFQS;rDQ`^jK;0RiQ;ry|>azp`gMhn&PJ)(yu+H`5EshhX25XaVY|BxpxfGw+OCG~8 z@THUl@Dv>>FFAM01Zl^FCs_;)wN#cyDTM=5bkTJK9^0Q3_w7^fQlE;5xSB% z9V4f|{rY~UWqL zs1Ra>y5jal?x51;a*k)ABB;pn5MH4d25CLmQx6+OCWLQ@5w7=^0xe_2O{JYsh4A5v z=t%?ucQPznLQs;Ck|ZdEDSjkeCk^r%M|d5qg@RH=DHRvxm!yU91d@terMvhjYH5$U zWX3~b9X*^Tkr@$&hbQQQW|de8Q*57PE{!Ue1SwRL8tJ|Y=%#gg6G$@S5rp>FI?sY* zoEV4Ir1{~AEK1-l{E7sboESwQl;V_yS%6R=@Q!HRyUZYA7Ug(oe9?#^hcu6W7IY+u zP<#=Z8J z+aybMhQG|?aLb~>7|zh(&Fm^x#R{uv9X|Agmo1IUg(6gs}~D`2iB6{1I}58;}8ji32XqLfXJPMsPVQ^YV4&tc<>fo_+rjL zXd(bMsgSveu5~hQ&hrOn2`L+a3&1c3czCa8)Xd1dE6bV;L2V2Tt>Ou_F%JZT9saLb5Bvg zufIamTcCv~7m6&SC)}_x$B?<18KVSA{AM1QjAM^Ckt80lQ=$gs^C@-~$x`Bpby`R! z0y=GJk)pW6i)V{7Da$}G35$-v6&OV=IFrON2urA?AP_-CHv!p5JRChEct`glVB#9o z1?u8JbPlr+Ys}1ZB7v|jrezMo?~Pw+clf{mr(1vYpZ#Ck&wlx(|Kq=W|3^Om-wxNE zSX$i$Sz;o5+vd^Z8(Uj9+;9UL z`ByyLHu~7w=*k~&cs-I&S6{yspEqo5Y;GLc>TNel3&)R@q@!1F97O1sa`e*g z9KH0rCHMOJZJS3*XiT;CN8dYowca!>{NDA$+S=&S?~&x#vHLggsfHV+jv9Qk25A4P z^-kYLpmkqgFV%0B{x*-SZxts;t{)C*-dNcv`yDB54c9da>(_7Hv-$QTTcbDs-RSD} zkO#v1+NX!}z8|K%g2?O(3nUmbmMy$;mxl_T}%>(k0AJ&!K^ zQE8{3_rJq+f7!m&uzu|Di9>5;v~L`}^v%tBYlM0&R<}6F;TnJKaC3x9*Ofc`;-O(U zQhK8HV)@J7uN8G(^Mjjru;OU@zh6Jn71Sl(VX0`YZ}Nbnm;SuOsyB#V`imldeB;n& zJaB8PdElkL%*+3a(_`-l_kUfY9KG~6IrBF+o!D4Aa?{bv8%HnSu+bV^E}vdsyXmIZ z;PTCRxy>M#?`RD!{mUFX-acKvyChm8MFF$4^WqJghf0UPSO2$2_?Jg7-`6_d&u5N| zF5kaVXy5)9F#ka$z=+*MU(bem=@=|{9Q%P8D-~6-sczpEccM6Q(p^YP( zhqsO&+bUP8|HqHLee=fpbiAnaL-n=@tUFZn)<<93F7+IH+vefu@+-epHY)X&f!2?0 zR*d>^9j_K!Kd^aojn;-Lim0~%Dn1oApIl$p_JwMDcyn{BqF4Ppa&+@>LC)Lt(UqSsn*AFTiN;i=JAe`NHvzp8gXH2Ug^ z9Q(7pd~$vCOGB|=|0_Iw{r?%g`3vi#H(wrIxv9PT>W9nIs^2dWXMB1Kmms(<`d&F! z!@Yb%1-g=F^m3iU;^<{Ic=`G=OR1q*Xh#ewxg`?2-o>+jsWp^@DFCcf+M_O~m%j<&yx_@Oe;@y)~3 zaizfVXJcMFR_bFL=jZ+X$_H8RV#zpu-MW4#*La(lxOVKG%^xVEl@hQ1JP_3=rKdk0 zU46ZnV%PTXNHc9h%CU0X3QO(C`c0*iul?2NEB}hm-k1+%Pyu^={a68StF%!6Q7L+_ z(*8wkyj};c-@LBqZ|zv?Vz<`CZmo;6wka86n~P(4Z)WI$e%}0_N3SFP`YoF+Esa=n z^m>}VK5kCc&EK#>HJASIoyFm$Z;iJ997;>WSDzYf{}Lr%`qn$@)a>!nj&tShb$Y#i z%Rffj+a=0_oA2yeba+;gJ8Goekf>x)j(znh9!kfDVXI(RdEsac3s6_L3uWc{>+5%J zmZKdh15H~eM2~C**4x{MsRHJ=D*}i{+gl{u-oB%9Uj3tx(p76vf4=m{=+&DV_ha4M zQE)TDr9T}5tq>4BG(~;O-zzuWTzqQf!V-)Oy!U($8O%dalH*@z!Id= z;V(@8Zz1^@O27V@7M`yBae3FVibTb5Ie25ZB79X)-vFks{61J6-@s^v6et^A6ja{) zmC^S1%91U*Hc)+-@n0ydj;{Pl^*CPf>v*I0<}bkLSN;|FZGUf_09TG3AN>>`{;B4? zoXdd`l(sXNQk#vo|HnEsDxz;z`Y$4*ul?JK5H;}I)`lvKHV&_q{I}Nmf&=3;<9@Hy z2AEf?4#4qtLh;oP-lSTCjndVx2r0iN^~w zKf?7#S0Cv)VeaG6a8t}28{4lWZ;Jhs3f|4{ilhTqAN2RiAAe-?!4@5aeE$Ln!3Kd+ zNsZvJSW^INa$fC6uD+w+vJU5AlGp)VGxnz4@J%N$9w7K6P-%W$NH45ydA(u%_zhkUuOC0`^~Uw%H@0S4i-py?Xq9UmKXm+%m#yRK zg5!seA3j_!l41RpyR@!&f--oB#Lwe+~S<6w)|;wua8bua#=qlcOELQKXT~M)^Mow z`jAPi#cJeQB@-Hf_Ry9>0 z%KHCes|wGWL0tZcdQ(Msy=ejDFWcY0Df=8hvQAa>JEx9afr&5>5UWnSO8`HrcBc-{H; z1DkKxz5UzBkSEeF3w6 z+JCM3zjPUYGRDro*1r1WK+}ZxDP6a2sG6m4a`f`qAKrX#A13{$XzUQ1yt!}l?-kM6 zf0MKA-Izc#!Qo?@?<9F0TS9m2-Rm*b*5OiFXg#ob|LhQR{pV>hZ1rr1gAFQMf7j+6 z$FHxSPK!0B{@uEHi_`6F`d+Wns%hj+n>QT4zD1t(>s9oCi(vaF#9ex-{#TT7EH>Y& zWO!rEhU-9^oR=4DRiU@ORddIR9!Ja)j%-16O`02}a--IAvns%v{?)Xnp`^snVM~X# zjhgZtK791j%}twiLJ(AZZ~v-!dW)VF(`s=;oqqlCjq^U@8YOl z8(&)+Llxjh-nLmv*!fqo7WPcd9iqRjqno#sj!ScO(ClF&-H?zZ*@Azx#c&h936nGIu@iv@xst!mu<_oGYq9Ssa=Z=CKC zyZU+~`5%5jDf-8wD&nsGX_b8~WsffXhsraftKX^KqwRlxV=XC{Vrd3qS9_r`^}#p{YDj)mv3ry+UW8R zI&!%(`u7M{@2`HR&ieeWP1(BXV)Sc2MXN=9^!0x-`uh3x(XXAaMS&Fem*0+)|E{U$ zH(v05`}g0q`L=>%E36e7aggd%`Rl~!OK;QY*M8~k3YWhq+>XBf0_NMPAFT?1qKkhs zy7KFzD}U(7)jz9}q2Bo)AxFRV-&EgU`z6v8?P7Vf{T-yQ{u_TU{X2i(%#lBngpNp2 z_g0l(_WO+&8kTF=6d}LyIx3gnUTn8a_>G%NIxDe7`*=ha5ErnG-jrQ>#$t2NYC9c_m%qFk(3%W{Zf=7(!ec)8ZR9&w0F zqsu=sy8Q7fgR0|~9vo9M8&eytzoVuOHPp-FRu>D-HDYxTcP>9({~J&3r9K=h?>C`2 zX$GX`tEsJ-b}>{WtBNRoG8yZP)%uk)>n9QgO5Zi-i_d@Uui)hp0ZPyOVe8oKg{We< z(WOOR;Sia4}7a-&X_Tijwz@E}JmanfjBrmp@)1|42>B+GrQs-|c%gk5WsGXPvSU z{GNU_1fM91)qT5gR>~;teY3i^DeoT&RLzuEYr0u6;6b6GG*li{?tj~O=25%{x^Vwp zaJ^hws^6`$z;%sg$+rF7hc@3a{$Oxzs%I;{+q-J>>gXzvc3Cb~DRN6GpjdAN>uqVS z-s@jTynOMULPM$Xm&ihlE5Ah?fIMFIyGY=#KDAyiV3q}_YV~RrQ#Z6$)#IPl36q9P z_gMglFx$UxR7}&?H*Twymr_fn=YWCkZVquF6LWS5y`cG)dK8rYV>}b=YF1h?z!ild+x{cJdMJbSjviMTM+Ij!>k(xl+$(wS03Q8 zIPSio{Js+v0m~b=S^7n0FU9!Fsm~Y~T|K8O22+9v3X?rK6AM-mY*43N;i4YMuu3*? zOqJU2hfzT!T%#6N9K!T~De1HENuoNi@9WHTu<3P@;Q8~)Dx}R9${je%NR~rdx@{~8 zVCac4F0Ul)zjTL-I7ZIK(?pBYOEt+P?7zg|KPO>F>z!31wLGcf(toLQUNQpd%}jcl z-=>2}2W`i{14FnO+TF%NR?~~hz-q}_X^OBbV+Cl24V8lFt2`H2=afO#kw9_V-DCnTp);k!>Z9*&wuf)XSotG>F*@Fux zNbM7hpeWwx@G?Ch29?6)$2mM*L=dtP1U0q7W<0JM**i$D7q`7(|E?8fj#$-5Brmb! z5=IdcP125Kp=u&4x-)v~{@pPK?J4$$Ni(rxbK^6`I7=?9H=W@BGWe_R<8WXN?9g^? zh{qZFMuR09C&F!|=-)rvxLaCxYk#6}%9Y4B3}g7)X~%l415CQ<6=p7;6~^ks{+%Dq zAs>Cil7yWi%q?t+@VB;pzwxsr{xSvKfqG@9V1WYdsMV&(qV6ps0Xmkmpj{$r4aF{ahp?_sd#|-@k{zpK07%j!(3otr#O2 zY*5Llvp3L^ngkA@`!`B8dYA&W>*#bV`AFkl)sfXU3X=LH zg8XE{O@!EDbtzCsYprX*fXk*vxTqE-%P`*&BPPbxvj z3ux{JSL!%~_l%VI1v8G^B#ipP_KMf%Jg5B`F8AVvxER`Hb5(RAkZl!;2 z%Kf{$8@D6IQB|aQ3>qAb`B^E3$+D8sA#KFc#)-DvzgikT-?$Ilm0VSMQ?eASKnLQR z1q)6v(Lj-dCa&tLXt!lC@@MUk`!`L2W=0!t(GK6g^^43#utOCr>}&ge81`~arp$U| z5SkF7rt57K4Mr#S{k#rDj(I&Oc$nQsgsh>(PM=fOV*fx+(kEBn1(Ab8O7tMRUO73! zl;&81MP058l%k-5FvQy=b0bZ*znR<+7ai)FfTBKvT9{fjk5kFzrKIc*v$ARCwc&kgp*rf6B3p| z84PD&Ap9JA#f-1HZwNw~04Z>9#ClO{n?b73#}jlC0`W{P6K$D78~nz&W_BGV`H?9i zvYA%VSQH9n_DOLVzcq=|YW=7UJwFkn&9QBpb3(z(Y#x-)p%C5Yq!|V}7Ely038uu^maH z;%gdG!aHPz`N3jPiCHUPoH=H0mur%;q1L~bF+)3*94j!;)GiY%$*V!da3oV4QoZg! zoL5#Gp8cDRPuZ@0Z)(rw8XEf%Sg1)U?Z%HWFBnp-d=%*zUQg|6!I)>>?wTN{s&oIRyMCd7M+!SfxY zB!2jv;`uFhUAaCu{^!I>1;{)ZyTM)o$k`X7%i)M2Kq>tm|Q*5JkkteBc)c%#EX6&J~$h~yyy z2&tkvxG|Ex;Zh@>TwMJk!qL@F;{GS3uKx*s)pian6>a~Qi~gT4`oHM$h5g@cT^MKE z2zC2~)Eo_S4aY?*FDu$TO2Uz@_So7T+{qLo<{ic0&M0zl?`@4m(GCiE&QECdSeP3; zb${c&SkXoK4W5eln?P`g9v-zhA$pP&!zXeiqWe3Aq8EXba7ORJ!(H8ZC+5x2eZI9VAD$b;x^;ZLWZ+?c&8bi}5JeTz_p7u z_hR9Z<9G~wR538GU<(MrT9H|_hlWom&5|&D?pGS0s`~Wg4!b%E$nM2S0Zz%_+lvqJ zJ*)1s!;Qbfe=FU}u1EV1ZSBBYc~J&z>=k2-wUqll#iLZmcN7D)SqjEj&JBeKDFZe7Lz9#U_3(oRK`0NRT&AXNY& zZUdX@9717yQ~#saX{v$TK98M%X03Kct#-Qc(4mcp**{yUAfWHnoIOw%>!X^aH?qj4 zbqE{J*cqOEtZ`RV;yeMxWog zH|}FU%nk4mUgg?g)_6LW7=k-pI@ms2;`UhwmR@c&qG6m-$98feb{o`O*xn5PxNc|n z7f0^g;)ja%cK1f1gtZrH(ub#$Z9oIuqow%BGfBF}*&P=eq6#>MO)+o<3$5`k=% zlLfJ^*1p*2pxfwhz!Xl>HrUMcBwm%rSnK4Kf0xF3nSuO#9%$TMmLRQ}GPZMZ274tw z=)BKu$H+ZPQl<}#pKaVvbTlW3l6hHuG_sh)lgtwdTf-G|xJpSkbMz%}Yzc=^DlakJ z)vk3MIdNR#h`}Nfl4g11&UUtqm+&Ezp}L50Qyhl@RfNgfmxvm1Swc+fqB}gEN)bW7 zfIn-ZicJKm>MLg5!6r?zG2;|vnrkub)!x(K_?5+$HL|M837?d+P7c1}7g>rdmR^)h zD8~uQ0*lz!B?vSEa9C#~`?ip_ELho-btV93q%|4dJ3tU}9#k8pDFM6Ov$jjQeOlHc zlfXfQl732IZAom|GuF_YaY8$)VOiu*IYtd|bIe3kn)%Ubm^^UKo&9RyVkst%h4{B` z=!k*Oo)-r3xDWOP|0qDnl~p_VEuHhQEBWSpFAr+B!Dp|D6wEXY z>2_GAMT!HLaM|j`fj9tA!dGG#JdeDF<3ivq z`yeW3p!RWg8&M&}z;=GkB+aClU<0*JL>e6Lo9dHj$D%4v^ke|FI7=ABc@l}+jOeYX zLW)ET3rA0qeS*bmoH4KtEH`70vXL+FiR)u(^x4dnE(w+rO_B#1cNr?<_=P&=LP0V* zDoHB@Qq9SkIF*w*^(VJ!m13aRX@oI-Zx#bvHObQxI$F2qD`|&1cV;a*S-tiTOf)&=+cpY%p=mhB#^+uk{HAwh~by?YYRDE%q8YiND(Gvh7gT%qxP1w@C@Ta(A@gCZe7mx_3dK1&Es~J=#;$md-3CC|YJ_q?YvZ4?^ zuPSA7F7N*fobQvQB&Z_ME!TS@dA1Pb+*s`UA!}`2%dUzvmDxW~=GG@Txz(&|;)kFR z8xhRPX#$cd5@pdH@k`Xz=vC8A&9u|G#-R#+@Tt7C3f?Qn~UcL_xq)*XqK1**M6=kc)_Jx z6?y~io4wZSW92~i)203+teeCE;GFAW)@yOQUcp4w0RnS7W`W#PLl7a=YD1jx3Db#j z{vHgT#bH&T8yy*9l{#=bDR8#CI3}!%sgSp2laT^q{;5r{0AF|(hldP~vYv@w*Z4GY z6+?uDG3R6M%}pRuMX*HT4pJ*(xI*Qc#>x+x(fbrc^!di;=4KHeA1oRQBgMSp@Iz&k zBu`k`BM~WFhJ`f7s-U`g>jcRyLf$s4I)5fyt&2T0C4R9lrn@*22a}Q??W_tj2VVRc z>^M@CoWKPmnh*?NHad!Mg)3;1tmJg;K@4!Vi25(;KdoEZW!0Lb=pYlJ{IF^m4(ESQ#NRKf_0s%q^yteFMk8e4X=4V$S&rO z>3R@lop42bE|Fcv#9UlO6J-i>7p?`)W-@3^<6c5$ZFr-D{GiEt%@Ku)Q#&Y+WDtj!q5=RTH@m=Q!(jQ0}}0`A}rvoBNNC8~U!Kq9I(al*g|9Jx(2 zusxZ%{Q(Dq%hVw#6iTaqiIu##0M@cs9x0RIl&(?@z7dUaY zZLd2T^%a8~ETY4)X>bDp-I)5FAGdL@5;VX80+OTpNyXiT)H;eGB&DL$rN>|^P^NHk zr6ht%|Gmm#RNE3~1wvO$5SE8Qr{zgV+IW4gbU526Z!e=Kp)r^rqcNC`+M5;=jg#7P z<}&Ts`B2^Z^Nmjw@@w>lUzoq;)HaHko3)u13K>D=Ykoe-(LTcMhhshK5-K%uy#6H7Bp?3o$N#Xsww%dAtyz`S1* zdr)^1iDlXwNvxPvM$bngv&x8)SuPeW;t1>Qvozi4lEw;a$-|qmmJub^it87PfqB3A z`EIIGnfAsiRa`Hln@Frp8J6YFS;b)yITzg!A?nCrz%(aoHkaqG7X$NtP29KUd71V` z0xRy6(esf=Wf@U&XC?MPGtJE|>1%DRSa_uvnD=XDyfuYo+8ZgXSXf3kkw{z_mc+4~ zwz&C$cMGve+T8YFwWyrF(s6^rSTBqfLneS$L*?wIQS+;^uIlk_F);7fOmypdlxc6Q zN5$zfdOi{>Q%01WzMorknrUu!&5?xX+Kc(WX0}_>SEap?zLL*XbQ1}rRbfdQx572q zTscq|!Rd-;&n++J|C;D-O;eftMw&{VRjB48k+3pf$uowQxtyBIqgBOo^M3PD1yQqE zn`wUB;(b1*sSS;_3m?awXZe_8M?uf|_)in|2D)r7tA%rr z&&JKok?!Qq)9&}&f|{Gt-yBl%mtyCwKtf;4i-MPTH||WHmaI*WFbtXAPp2VQapTqm zXF*T8#PNTJ)LA;&$+OKc%h*?0f{RaAb3cKoFjGI1rosoIi4z3PErcq&vqKRtS@MO( zqbVZk{cAy{gP9lRHj79MtScJjjk}Avl#=SqDdN4qsy!08g|X!B#z#nmJZp@`)4IwF zD=u(DW{5$acq@CQ(W+}X2n_ZV^MCXE{*4NxN_%6^Efrc7Js$~Ow~8p6j6N#GVFhT; zGM1H>_OEh03TYVZz2P?>kI6hMCpaqxfX>J@28QFIVCsC z47AM{_&K;%F&|v#6b;|HSlDF_5spF6S>3I$_3`7;6>Rf*!kV*3wuZ~cgC6Dyg<_KY zh0$*q`Kwy(NH@Is<0egxS2#DT0;|L~gqi@=9h~{7 z`xec4QOSc1i2>3#cs!p8TYEKOWAf#xU?*r!*7$jEC{3L+wRY;Idd0iak%b8^=_-1d zp~;Y_qkQYGQ<3iOnCl^%PBfkJ5l$m>CMxd#iY+7;!Skjsx>hWT#{o;v1a!CMwyNRY z3eHZAx5d{@=Hf^(d_Grt*zt!!nrHm9gnf1l?pfT%=<~@IvL_C@(beIV)DrF!1hWt> zi+eap#C`Cfp~2c5q8l+pFHx!+T3QhQf9Z*gBt>_hb(ZP2tt-qBMu5%d-)=%BtO#LQ|BIkkjZ2tV%9vd zD{fkT74e(k$v=4)F?S1cJnr5&Xcaf>bK;IiR}}}>5y5>SJmA29yFIoA>Q_0v;SD{J z3ukwmn@Re-@yY9vXnwO62c?z6lN?BIg;mHy+X}AKM6zvpc)$W+o#5i&MphY$8SdwK ztvIw3npohGyGax&5A6iw7M=@*fKWM(kH!g7QiKcgY(5W_=9i@)d?d|pN(a0kkh?Uh zY{5oOM<=ThLl}*|ilbBU*n+C*hXx{Ph`~@CUmSYZkVD&raoCxo)8Rf(%{T_jA?J{s zH~~EraJZ)oJH@)3ZR^K_fRHn|D+<^eLik!Sd_{iq38aoBc+ z2v%3|4$k;6vB4QDhzyd6d&y?V8vGrc@u5pYTj>>uB{!2Jx5dn|;@~-?p2CZv%|yIh z3|)@%>c7%hV}gU{A!ud=tjJa!x*`)(V0A^tl@v(eLAF|}Pn3e>=r0a!h;mJGGK0FY zf4J3Lxu1#tW4esu0=>k>wrwObf`*RJVu)3sc$x$x9bESrtRu)o*pLtIEXh7A!(NlE zRKCQDN3N1E(e%Blacb#wPCA&{##)%@;04>=M|QZ}ia;#9i|2rdZe}^{384E%t3BL! z0K)Jgh6hhC2ARbX6%{83jySaF(zhRYOE)JFUY`!qJO>G~=%rjcSOjCuJa|lcsU5n) z4{@O#NSRk}XuZv%36vD$0=wxBzGRiSi+bcsa-_5FQ)#x@~B|1$RIk;}6H7N4Pg2qJ40D4J%(PN9l{&BN+&$F{g?~c?lY@x2mJ5S zHZ&bnvho1qk8t`tlGk(@hY+zpbQ1XC^U4+o9P1~DYy=8vcMrvAcKY6Zz_?Dg$zMFdJ31K zbL4XI{OMw78)_=Vjf{u3#1Kv|jN>ae>vhP4&C6N%b88Affy2=cIRxF^c4LH{Dk6fO zcUUkqPcih4zv1SP;q6n0ZE=J*khOo@M3_%v!mtrOqYg>e_=&?%HalqHy_ zQb|_+J_A{^dN5=pvivk{IJ40Wj!;^~%*IFxp?>Va2T#yi1tUlrIQFFOHjie|_lBPF zxg$fU;FBCsr*4cuXZU#@B03s0ax}f~UlA38kXn6c9e&vZS7KBe?ok|4AcuQgm1tW? z1owpW*x`P}90xNUtKcs9qr98D@uJV<}wGLFi+@^mlumT?%vQaixC zAKUWrdPmMR2|rw$L-;oCp5uW67%iJatjH|+&q&VjwwzTUBJE#nte~?bU*tgL#CZ1x zlMt*7n;)kL7SE~)q?N;WSd%_ff#K<<*6eOGyxEw;n?aS$8Ai2&OQj6fVQx-Yc#u+K+I9VyQvS)T*ZzI(wPZaKe5F926H+aI3Q@9 za;u5$9fI-UT)IxAMLKCid}!yOK%S#LB5C%=HzXx{Fddk3=_}cH={wdvdQTv(dJ#{Z z<*aORWHo4t!PDJsJegU}gl0do8acN~S2aG`7Mjd4-~0~oet4Fk>MNX~$Fye`vX#2@ z{l;#dlpcyJ1ctnclRDTqJTQ$5s?brgigQFd1bc=y+c>yVJ>XCkG4`+b8JKjrp-pra z(#_X>-EGeDo4sXdlQjtCN2SAJAKax9h~An3!`kLF7qnRxpg6?+Pqv^(7HpJ5ySWh} zWPI+(#E_Juk`3wJKS_hy7+RROGC-hwB3#}QqM3%6J0#^u#t8^#xjZ`4gUlq#5m*dP zd2JI?VsR+NajXB4^2t)%V8k)&I*?32wQtPo+)yDq9&#BLCNx7kyvljFWmrumIuwHD zLf@;@IWk~SFe&yiCv3eC4%f8|aA`5|37aF5&~K{tMdXqJp@pOX{T7r&WhhU5_dJ4^ zp*~2mfvv^;w|l%<$`Kb)h*>&`eL{mmoKFJ}=DIGCDLP0{xn&xX;lL5&n|WYqdj^hO zpktLih5IWJ2grXmrt}(4TkY4*ylC_F9;NggFV)}@(x#b*aoP8_kBkUjz=f=S0dXds5w&cJ8+q(U=9~n)BSsKh7zk}L zTtoktbg%MBb)vkX=z(6uwJbPF=0tQRoLhVrY}tJwRotNFYNMqw@IE5~e%KM=ph$*j z25#uHGHk)6FVoLKW{UX4Di+e=?~dq(W>gyeh7?p(X$IY+1|~rqhwI4J=F*uOExEuexJi8!Wcgl?D7}4KB5_qtTXM0PyBBHzPZced4Z`Es} zYLSBl6o!w8Q}NI|7UeA&RT>x3L)(;PIH+-!7`p^YW319h{%9i4TuF=w!k>X*@}5#= ztGYM?&azGD0E)q1AvH4@-Ovc~0$V7(uvK^}LMU3;;}a3e8*$8x!qmiO4X=(ntHh18 zC{gdC6@zo2;9lA7i$j;RF1$GOYDpe?o#N?;UIX7DZsEsde_j3Spb7$TwRv-f7_*8% zRuRz8iQ{US^&PlM&%O%cV07r|WJ$hARLa@IDqy7v#qM4R^x~)>mz(^<=qrs zrlg5sL*>|5IW|=e?D@p7Ie0(JBHaS+qh8Y4!rAfrYP?p&7r*cbFQk#Qtpii-4iPw2%1cVndniuwo|xRlb-V zFp)R8h)Iuko1o}lhTHH2AH&Qjq8PZfMxj`i+ z!C|qIQEkA*BBR(9Jo+&zTZT{u@ns}@<>{dKcsC2ri|3idY%8;{&yuh6(2ufumn1{) ze4^vFI~1DO{6i(Cqj-79UKA0;O9^rx$KudD6mFAxo1Is-cD%)|St)2IL((TIwn}IH z%(fsZr1hLN494OBjYpT*Q?bW;hhPjG-HW)_l#R{!(1w)7K$Dxdi`}$E{5dq?Rwp?S z*Vvd*o~Y0wwAAgCfP<`J4)=m?ut!3I?rki~P{QV?fW+E?UPf!%2hj9(bC$~M#W6HQ-NQw__QOc2~YPtF(#~gup zyvqQny)hT1Oss{=xnNYb+}wj=rp2FpjGG575><&L2S=sFhw$5AoY3LJ<_-68#)GDZ z-y#x)4c?F_p%(A(IZF;HCR;?&9JD+++n6R|pag1L z`CQz@$(`C8#qge(uOC?2G;wDM&r%-tK(aiR;q;>9K3!8z>&c&-5AtpEzkZ&@t)Fcy zo5j{dTLxtd*z8p)a}OCrxn$u{w)0T1A;YZ%)C?hJ1U?LD+HBOC{X@mXruDpgF?=%g zUD?%J+qXB?z=x$y@0z5{GNu`11J3;gdEj(nTuDGvlq5Yrv|Y^Goi=h0fKOD589CE) zb4u)&F@t#+P{@YQc4_5t@4iQYU_4As!j>lW5jx=_Uk<0*>hQT4uG;#vcXrLq9-ZHA z$P>o97lf^>tP+qj{z0r3*Obt0gNNx*RcDBzm1OC*tpyZoe-6W!1{S^za>09jHv9Ep539-g(z{VP47BXyL~>5#nbqPv6H4HQDrotl=^AMIQr}Pp%Dp zpovOZnx_durr~h`zsc1m%O0TcDRV`O7tp&p^4O5sBn6x44%dw)mSL znG>pxq#;Qs7#h8+KR>QN zi|&NgH2V#_(B9p4f5W?2c<&B01v9x?D}Dex4#C`SE+@Hrf*e%CGYNi78{Nip+wExz`Dx3(O`TM=IbA_eYFUSX;I1j?)m%p^T%WMDaYkTqBt+*(s6B0Z*_ z!6Ii|2|FA)!{3cXY5cvmxhi1zc*)l&APSlrM`U8Pl6V|~WQ>b*J_ZOE1WIFk%Jy!@ zAYV#X9cI&+<0skYy|%V~qH#wch~&g(nlg#0i4ghhUDwH80)5Gvl`}Xv~p<%Ha%MH4#ye?~Nt+m!_-BiJP@r_dRk_05h6w$r7Q6|qeB9&<8qP)Q! z69L#1eH7l%4zP%|wz`5(>qHM=euVMieS!XN_sKueh%&%;Ur{B@lR}Npht66yP;*v7 zsMA0{bDDErH&+CVpYtY|lC!C2TX`At$NSb1eqNYs)v1M8_|MBoM)A4a$ zMj;3e=7P1i7JOn(yCl|=`r>rjk+sw#umhY@OQxx~ETfz`!y0bBP8cKqk@YSE9pShK z_XI3)En$hAwiLLqM4nhMpU{D!Vu&F@tOG_wE5|IEh#JUx2K}4H#XDzKOK!eSoc)&C z&4!G^w^l-&-dGSj!h9vFoMlJ4olGIan;=u~nkQZv#x|VG)y+?a^2X+_uy&Y}1|8B8 zi1*G;xHX^3&{)Mg(ibV>RN#?#LhF&ysEI6MV1#$aF={aoXRe1jK5_zejBQvxBt9jx z!P};N-L!92oVm`RA2tnJ&DY@)XJJ95+p=Sg2Lr}H+aFT-M?oi7Htw&?HB#!d9vRfU zhU!P@N0w9Npe{NYMI%{1eoVMaDT{=sJ$&&z&un$y#O=9CV=4zKNMFCf$&9(dcuM6t z90$nQWpUa`uoEwQxxZ6}#c5?M`6F+k7Rw~3-LT0?soB;xcXEmYmpz0$`>V<&)x6(8 zEoUeP*cyu+r;MdLgbKjN966l!G`x)Cr58^eJfM%b$x2JU#eo@wj?uve8GD_FFGh!R zV8M$K9H+0HKeiS}d|8yv@aBEa`0^KFyt1k0R%@Ar1}NwL!6P+~)=hD=K6^?=KF?b| zC^I{GuW)0{I(KqQlrWb|rg(YqO5QP59NkwO4S^krlk8J_Vnm$U@-)wz$B`gxRF$+0$5|bX1%R!{{}00bX_oT zw>25-ERLQe(2yh~Y3b{Su_LybwkR?8Up-KA< z%#}&S(ajZu*^zBBxGxz@Ln4u9e+rL=#CK!ct_tMfe(HiVhCeBft7}s2NhFTO(S(CKBn~(FO)1Md2Y8aAJ12( zckTbZSWh{+*KKN_`p%P5S3=^7V(O~T^tM%gT#T#;0qu(eTSs@@␎}2N}lKbN% z>1)Nva#BOo(E%TGPLhnAx=gFA1o`XL<>sHc%jD@MZyno zheVHhE)F#!6`}7(R`}GYu~iCkiU&N3rIn*6N%}T+W>l8=S--bk z6!eYs%2#=ATOE0Hv^aX0Koa}9`hFi?H7_h^ic_9rD{UwrF`w@acwv<{?1Y#`P371Q zP~tiN&Yj{1hf3v5I~6M9x=4 zPmDDh2$wJ(S<632^py@g_rGpUeG`a}zLoN9MP+g73Uv5lAb_VgKzN|jXKsI#){R3Y z(cP6wUgeQb_T>?}{SO3I51r_dfqTUpiYJrB%b)0M5$FSXnR3R`m{r2cdqz)(udbIX zp*RqUx9Qa&ywh=8?B)BgT-WOjG%!F_#EbHdja&&m+Eo@Lqi9QuG@svHeAu|Y2{ zJ)WBMoxPqALm;O%Df&~J@EeWjOl{H8{~$kK)m5cxrt~f?SoBILFJ4O3DWhY2x)7B@ zE$9fovN-Q11Bp@f$Xe*~Uv#J5qtTo@ntDkzjBKS2ewz-y*Fhg1kT_}{Bo|XI_3`j{ zh8PA!@eRJhHC|5fW0XKtuD6&vdml2JJeYd9IQp&`rzTNouLrB%ww0#N7DwNRP)+TL z)ye};_m2bHc4+t#XQGx4?G~ZSrq0B%5Q~r+YS(1@)FrFzV6*}nOpytq+^mvh99{<{QS!T#Y`;bMgd%@e zG92mAC2zaU6|enM!O+EOHbF>hykTUdCN2cI>G1Vs^=SUpig>0X?sYj6O(L0U6Os14>#EU8dEZ)1F!9?aRSEPX@ub0Ed zlGhcNW2lwNn0shv-{bzcm0-U&F6f`~>b9dQFlO1AhH1PxWx(6{a#q~=Gm~osCTu22 zE8Z+fNJrNQ2M*aKjStJfBQq!#-#Fv*^EmpSyn8!6R$i`NQn45hjzs-2pK(Y`&49@XY`zC)`Y% zsHK>Zz^;+wq{(DVVQuAziX|@SJ02PLXiY~rI1y23#Db2f=yf9}y&EPIC^b(tK1Ovc z{$lij3%D_(MnZAswOMc$KNm`!tCFr7qv9}+k5J7EIb)X_Jce*&CB<(0 zMPX_7jLXRNVk9(yER@oB%{GcYp!b(5MekklsBX%`Lutk!8K$F5Oyqw05e^rvyxli! z2~yy2n*01kxa$ed=zm{m^q{m-yo(n$5%t1mpJU%%ys**jC|rbjKMM$+zYwo>1qC7b zcznu7%<_FFqtTT{cS3bBxZk`AUD0nwH**0~cQJ}Z%KbZ}UYY)_=~rJ^ z(q>6<9iJEDVc4*O9CuTWZVl46+RNQ~2@@=^ z3B}+=Woz~Mcv@+cioP1`9Np>BL)sZ17tgncN8|>SvE;+^NscL1S;33G)HK#8wh$yi z@90h>OkNBQm5oDN(vY8S+!s*eo-H1O4?;{>1^4|}5=Yh%v^Zk8 zX|WBFW7L=7#~AW!u~RmjN8&lut3)GWpY*=h9*06V!9$SM}v0Z@-p)?C<^Y%-IY49P!fpNe^t1t|z zl0va*GXxUW9Y+T|Goi6ST_#hdVjLhMoUkF3-oZ~NliK+g%E~(Z7sn^qikF9& z?Qy>dvQD>i+stC)s7oZLu#Jed2j=>oQwK1p<66-uyva3{f!f&*t!E4Hf+34$9tKzJ zk7qdaUvBx>jwgpr4h3!xs2*%hM);76sCwQCz?Ob`r3 zi)r1`WFK2r9(IJLF(#RIB9~-YFaR~JJb(FOlm};H$B({4b21mQ=IM6$mdSlbLgkGy z?uvk^3dRC-} z$FiLrTI^eCB~|d%cMwz7m>f?RoZ^%aOA?mY_jZ)a`>=_<=mM6BS<50OXwX=a@Cb}7 zV?8m?FGu=zSKpLRED_%bP2xyzaV&N6Pn0WXQTk%qL`k4*DD%f!HT(${1|x&ERZ+sq zn@YfvHYIj}WAZz&V`;uxjUz@y|8LT)tX?nooB{J*9#X(rQriv+SqW|D*zg^}Y2%8D z(ZoR#{Uuk;AkA3bCPl0Heq5InK+qfP!k=CjZ7nOh@5?|g`~b3T@1xfi?E6es>xOE8$iQIQ4i#5KZ6J|6Kwcg#yhFZ>!aDW0~y#5m8Zr zla)B0Y7%rRB2G!T>;|pffh%oF(<5wSFU@VNmm>X36{0guL}w!6OdP_9s%6#BY8qx& zJ{u{{R$0$Cv!0I#7N59M-UWEa+$@xq3lX-PO+UWYla{QUG3H%Rl(|JTa^hjG(kegs zpv853gelIKJtJzZs!vB-PYa<8M2L@A%0HK=f9(6Bq7k}ERxUNkycC5ojw7Q{!&Xjo z#sYlwsI)W+M}%fCqgk5nQueMj@m&ji*D8KoZ$?~?i0fs*AWilTH_nSm~#x!M!j##%mRhdWC#Eo;)>Pw-z++IB1(aaXh*#K`}BF;b==_~ ze4d<9_F}|aWuJ?oBcky}@ap-&cs+%H)r@$HEFN#hMOBf!36hD~ps19qh>>(Xh#_%( z$_4M0bfochuza}M4BEV!9Xpv}Lx>zJ zRI%eop2L|0(lH;bLKTNHvCE5Wpk$Vr#5cZ|@ppVLH_wWj&TYGY zxx+9r?#*UCPPHfnO<4AUv0hXP_vB;Ahv8;>*w`>Oj(dz_l$zs&)X;$wO<9wZLCwUb zsL#YkiJI7)M4fVR!f|ay=wQl-PBMNv_%BCjQpx5QlBpyN7aO+Ud+&o_7hcq9ts)9oL?AkJ*Ou`wwKAq1|d)Bi)^oCXui{P zoSh!)i#}nQAk36v{2C180Xd}s$x4AkwF4m^!~r=c$Lp}H7p2BIByV-%jz{_=;=&Lt zq)&vG!|D#$F@$1*-42U9Nk(zt%0%{e5We9<%En(0R*k>jY)#}HAKZ;9%3c3algpX$ za;YfZQk!UFHCb`hWE1ruxN2oovQ}x>Ac(zn!u{iWxLFEaycD8WbhG7RC$mjh+R9R{ zW|{A#?;W}ri&07rAI@(j$Muw4e^;)z&YES+fs5_6dPI%QgnUhuwjxN-ziCeu6U&kz6U(J6)SGreGrGqkOtLz+ zC!+6#Q4^aLAtVzkv#^y}`H59!|3SL3pk44G|4>yEO)@wBs60K(_Q&I5e)h2#ABpcR zk*&1`T`ye7BGzRWm{>2iiBz@|>&w8k5x6!}hUTSpIe%A-G4o6g#G9ukHi3T=)%NBs zK2#fI8^yS>OxX7mM~wm%`TaVXOC8#d$pwyv6q|?yFw+RkE{qmJ_(_u zdaw71Q(jolv_zN=OKn*Mg$oAxh4e(C@c722kTT;Y_E;QAKu-@Vd%*=mqTh{OU^Td0 z*ooxE*camU0%I3+CY61xEVK5Ql&rK>f?|3!IV!2U5NoV*vNUp9KgIiPCWf#OIt+pv ztf=ClrpZO1szM#3GuF2HUWJh{?l=QuH)ZUC#dsPiOtEN-3xR0N25Y?oU|pNBh5Tq3poV! zWy%Y=8qHB`;v6$6gzuc~V2{zAjGIJ$T!2-LL1c*5sMW3HAf_yE=6J@PHO1JO7+xk$ zk_&B6j9p4(r!q~BPZOuh4t54r!{aFPq(_LJYZu}#hss2DwnB#0X`eV(nrRc~eyQ<= z zc}*F#0>famM~vFfl?Gn+yXg9*kv`$jrc!*Ryk0{4R)<)le+GMBk>kl;8ZdLb9-Ny- zd#JkJunNB6!!9I$Q7?RwFIRQ2)!N37bCU3bCY?ZWvqT=QvhZtp<*ns$pu8+Gth%LG zaC3UDB{+^D9nn`NS!bZDOfGc@oa~9NIN1|~PUd8NQiF&TE3yn41H~gHF_iGIx~0+a zwCpC4NB-&{q%5ve>mzY+pv^4)Wyb^bM3q)3BVJ%+Sd!_=L6_*%6P0Rnqlhtoyz=u|#x`xpNFTgSu`@mg*q{@|i*Mpw*a7H%$E~XDYuW9NZHoR{t<2Rka&w7yOZ0$aTOoF98T3qf)f%B)jy+?2kFjf| z-4k_ZY)LHJ%OqPO$(9VolBolW9qFoueyF|CAyzVVAoCplrDUR(c z1BW6o1@>6J^|?4UpjoDx3Z)e`3p5{&q`~##*pLSkBgI%RJW@Xf`(i?QY$n{dAOV-3Gr}Gt+C^|AYRRIi&tA*eYZ?1)*#@C8j$Lgrk0kagF!r*qnsB_ zF)xa?ESDsvR+uH)FzuVd(hM-8k;x^lQ=`!zgnfxxtTGx6g``|Kg-WC zZfaZl=H!k}HMJ|*w=1Lfrf*NS^!W1h?kjmZkcm=3O%283O;m`Zq>4bM9*tDfJRg+9 zrIT=_)Gt$M6->n#K9%ZaD%HzWt{+XED0voZ{8O(7|8fkRI+_O}*sc7NRJ6m4QWkKhI{PQF@p8*##`GxeQ zo|w9rzLzuZWyd&jyh8b*g_S{<@MdH!|CAmD2c*wC?n(kEvht1 zU$?30j8#KV*I+VZ_0%zR8xO{D2nQQ&l`U8Z~NlGCXvraPnb>19#+ zihyPEWhIj3sY9k$nQN6du~Xjkia>&;WDh_?WDzS8TW9)u%1{of*$7}L19}a}UYaRW z=}c!|nJyPsrcqdwv>}s}3TL`hIMW+TvUnjxG2Q8LRX5_XY0EN7MKoQSBhyh{b|KDUdV7#RTh`7@zCAK+$pUtjjM^EM*qMQQ z%F^~i42)Y*diRyrK8L+-%sytzae>q23flBQiEm}#TbcNV%8ZB0YuWerWb9-aS{fG9 zdn4=K9ICES(PLCAeB&qaIr2vhd`L0Pb=)rK1hkmWdBwD|2OEDf5KR)_?W!msoZi~$ zjW?b)M)&-wv^i(8p?Ji!# zbmSu!%Bz=08xNT(Xl&Na2x~g`N}^_nYfZVEOez;BO?fw~R11R3nQa#G`Y9X5ND?;N z3%45*JY5V?npQ7EdPm2KR_?K?v+%V-mCTmU9+n{$y_p!b4qP@2tB$woaqDhGtP7pX zsgap=Ob$6&5<3#ZD7@CL{;zQg#qHmJ8ausTW80Tq;IGBK(?Jh%*~XJNI0W@)9B^rA zr!~=~)XCC$es6T#neCp`rG)PiKwB@$8*+;NLlQ9j7VCELq9_>Y6U1bmC$WpUfwK`k zJdnmmf|RM_nPVl$oOuh)fy>4C4tBIW9>saf0jiw=EG&8Rv(FQWnsex%yFA<@$y-DE zxFKvGRC)~4b$QMp9fr?0#PVDkEEZ4U@sK^v7=Z&Ph{!U&&!d7=zt8)9;#zqa{&>J@ zWV<25oV4!jWL}a(2{%G~is>;5!)d04#4-Ogvx*m1QlJx4Z&|>C=Je@M-r+iO^&yWv z^6cZd>BobX+@+fbc=On4?9DK+4-VytNDmj%**N5y5B)g#!M&xKlR_)gQr@yo9m+oGB z`B3{yKl`iS?|N)FKV7XwCphdt_CTjHs0u$De<63>8pdnZ+SRz;|=n;HO zaKGT=f|Y_#2tFzJlwg(M0l}vQpAoDUJSgZBY!`e@a6<40g1;yD`+`3b+$QJ{+%D)8 zbP09~z9sm!;5&jng6|4`OYqx*y@Kxven;@Tf_;L&BiJJN_XS@S{DNSs;1>nIBseMf zL%}}~{6oPhLBC+X;DBI2@SI>&P-_9S2wDXT1aiCXGd=1pf>uF|D%D#Awe7kDt%3yt zSyXQmEEF^Z?Se&uT5WNy{@#1&rmdv8DDKwXfH{ zQ+uTL3ovG$cTH_+6${I19bc*KrtaS);diL(J(m73|A&GBy4J-1(ONq-v1w}UzsRTQ z(9_o^OaI^eDvf>hBglOHzokpnC+-2fY8$;rOpyK_uF~-yLzWfblOgoSa2Q&q`F^dP zobkz!Sv>DGGUWTs#P8j1NZ`~F8QcG--~Ee!_J06c=n^fQ18rH>@{yK1TkdOF)$%~g zr&~VLvbyELme00)uBEr-p_Vl*54Wsu`BKZzwQOnm<(3^S-)#BYExTL3)$;9@@3j09 z50+@HBWAVwor1drcMGUxt$wfIbAn#MLxMGehXrc|j|d(WJSJEtcwF##!4rZf1y2b! z3Z52xNiZllC^#he&jkOu;GE!}3I4g@zYv@k{0qT!BN48U`#MBm=H_~jtN@M16lp16D$-o1nq)Fg2jR*f~A7n1Ra9g z1)YK}K_R$9uuSj~!JUG;1j_|?3qD%|+@tGW!3sgQ;6A}e1wDd~3GNqsp$1ql_@dxv z1V1bIb-_--vx5If@Ed|%g5MMz7yO>!_XU4f@bUA2m4Z(QJ}LN=V3ptj!KVeE5v&$G zDEO@4bAn#MLxMGeAJzbWEI2Lrk>F1R|48tX;2#VA6Tv?boDuv}!G9|FQ^8rmp9vm5 z4_GUBMDVEKF~K^)fq{(;~h3Qh@rDEK469}7+kekAx4!9NnzehF~u zWxx*weqqf2X#S zupPDgz7qrQZw0(L`kvpceT}qx%4idRopJgbgxvERT)qd&Z!l=@CfPSh_$)*DH*24s zU*^-bCu&TwJd2_+HzYQ}`Yx z#kxrIB~q-z_Y~IB)3_cb^f9cSN3ns{;d+elFY$et6up5_{A=)QBRv)P){y2={*M7I z<1u13lE>@g_|377^c$n(b-*WyG34QrrZr$PU2pt1f@>r3PgBk#WvT1P^K|4AK2G>k zfl+$b;olfFeJFB1MadiaTZ;8~gsXHt$^R*^i1|x|$s0NHWTe>`c-KXlk3{Gipje(F zwcJ=2r9MK6#|g2{`ITyG|8&$s?DAYb%QIu-=TqTZLrzP2iWJgd3CW=+aNBa$Ue4Gm z()w_uSj+Vh@>sIGlAGePgr^Db4J;391+A$aAlXKOv)M#y#)tW@0oh{|W0kGc8r(Me zLlL?b_+)&oz!O1;4Jnxt_f!zB;Mf=`YBsQ+oLF<&u)WYNExqLH1=~7O${cA>=wwO?`WkY|u#I4rYB{lvoR*qR^H_w6 zCxtJmehQx$9^-F`)<&U_p2x|VwM{AvRcPguVrBEBXxre@B3~6i=TJ`*D<7UD##|f0 zr=UI*^|Mr)`(e_p!7caJ@lVlGh^&KLHMi|2U5}Dh@qUtP3X7Q6L@Cx(niNaLPQjD2 zijbl%U2;%<)hap;w$d#rCD}LrP7*uMrp8T+8Scc zdOBFxYf^8hcdUnlgxr#QsWWomkawzKd#mkd`8jksoIDmG%FaXJQ+8}?d#+M%Uww*H zmM7<|lf1MZmTEoagtc0OU#^?V9-_R9RrxU18kxejmrpsQs2h#3_bTs?60gF}AyW)$ zhqXY<&7P4hXg%zW^1*s!AMom+CoWq?zKdCR%CLP%xwLJh#@4a@?88zhmvR`gx2jo_ z8bjrX`0R7)65B3ywZn(pRWsy}rOYUuN}bZI)Y~I%FWbU4Fjj7)Ua*}V^yG$ZsH~eW z^`1J-vc>7(Wqng8Szk4ue3u^%_SQ0Wt9?{0rslC9+TYY+Ie6P@a!D%uDrsW1)|T;b zZ7^J^eQphvN3qy*ln=F)_|-;gnH=rx2g+GWj{Qz{FlRW&Ay;qsYg?)rBZI# z()KJR)c&aMwzkTvEv?kZXX|QjP{ZZ;tv*su*y@&QJ1D6SMTn)_m&NXAksK7OJX05> zUb7wLom`fBX_m7or%I>2!Fn2688Y_90AA?hW2d)h5>-?2nlb@Y@v%d!N+Y)9M3UZ7vy zq#jCR-JW3EC>fTTBaUO7@%DWCMaoW&KK9Eslx{oZcqkupoN(k-!x(OxW^1Ua)S_}! zYL#R;p4!z^@>|-~VA{?0DJ7~JYotWUkqfq2T42`Dvekc5sFj=Jktr-wNfL{#CvGJ` z+8p;xX}FqF4Wcfv2g(h(E5~d@r80SBjcsLnhq%>2_CR^2M9IO_C)Q7mYroDh!cwiV zt)KO`9o3vltNgd!90jsh$tQV{J=6MIBWaTlX-lR=tND~1`6>;{qLQJ^dR3C8N?Fd9 zwEw1-k|*|OwYxm958C$Tbo@}-Q`g!e@-BH`U%0hapABUy^hj;!uT1vgF!13p@Zm7< z;V|&wF!2AMVZedQK|&+J!Cf;!134$lIaza%beMH`aZQo0Ljy3COa<4TUpyjn%MM6NZYRq4{ZOMm*-tLCcgbak=oM{p~W3Hle(A0aV*o zYI8F~3ow_Dv>>%3wH<9Y?T@rLrQPMDYWZ5*)J4=>n6^Dlt+lE3?{bzj*O+MwsU1&%LnUZ-L;f$0cR4`BC5Du_RnRhlpyV9Icc49$xpl7y2@{txN>P< zDYT|8>DeCQ%9@B@o>^lT*OUR<#WdDY+06w->tbrHVYdgIotVN|gSNVqNxOVdy2K?_ zwtCJNlpEz)YI93cIkH4k%Li+c=LfWULS4+Im^o)XaCKG{|~o<><#u$`;fXW7o$Ji3i@y>$T3t6otpc@ zt)TxWwt_xf1N?V=4e-Mmz=tz{4`%@XuFe3Q|2TJccIRwCd(0W9)~YiK=OfPjJV=l; z6pt`C!*RCcK7#WNk8U`_$(f#W3g@JGgwQn3pT(@Mb&l(7)14q^@$O*cJm2!2Q90jo zR^<%KBMmv*)@IBjR(VXu^$M{%w|0i)jL3P1n5}~|K@W{Mz!)=&cCG3-5zVH-yIic@$yaDTs@IaYvPP2ztusMoJ-3ux#4Wkd8@T>UBWq{ zWjcFwokjYD;>~px=kfB*xv8^Z`IkI&-e>DrE9cO1QO-%P>6}T5J@|wT!WheRU6jn6)yo~F(f(tYJa$dP^`l$~ zlE2DXuKC#Jx}?(nXa2wH%Wa`_UGJyyeqP(gdyLf{dHC+}@O>7%hCT}P-rse#&sH}C z8>HL&qP@B-M>G|w{Gwj{(@JoKEfXt?X6dcf|NHu%*6ROy^I%K;8{Q%Gw*=o5{98av zUrSHxuhm-j)LOq=>-<$}{}pa@{srJ>YQ9kM`D$&Uefg{0fL7jk7WXgDuc0lf^xk(f zX;qZ9df(_ZwfaR!iZs@vV#Xu5{mX=h-#>ayZLxHjdTp)#zi>}gdk^=S`CWN4Wj8j< zLmwp3!yhEkBekCQFYe*LD#4l$Qp{r?B+=uwPrpAc#ww9&<`0~d2Kr!FQ_e~I*GW#( z|82r`cK%EGck*Axe>wjZ{CoJXsDfwiMwhh+C%G)=FrKNq|z_&04l<#qZ3v~=L@-`Kja4fjIb zy*S!+tY}@h!Ygd*UaVueV6|YGphwUtxLdG@WD9hh7Mud~{Y3DZ-q!&WFAFXS_5#Kx zbs4dLDK(pxA*0vyiu33IV8jylTiCRD$4xx71<-c}F!2U8d=|(4^#VD#UnKiwO5aPm z_5jAO1Ew$O73Tp8EB2oT9D1d7;cZ+e%{ghv0kcm=s*SoP1v7#Zf|COAPM)jB)2S9N zk&Oq;e?S5cydt;;7}zW56A3C;nAt^f{MsY5dVP~9-`%}7kY)fkqTVbdMC3>Z8GIJ8l)NnnzpcLbvX z=^MH#=mQ+wAdtvIx`ulIL((_AQt*smn_<0xL*d$t>!9A@H;lMsgozKW)@$KMUJ($% z!Xk?|5pHqUIq-F01R8f!IOqrqu~e>^YD6sH5%S5*eTd2 z7y=9)*7c6AGl1ufecssT_tHMyA*Iic;y)q@ht2Z*CP3f2hFQpsCpDe_kxZ=kzMX!#ezF@V7PZ@X(eRFgft`Wng_6VL4oDu95SlOeJdQ<}YRrN=Y3w8mfE(1nZ=(5P8 zCw0vTOftApmtkW|0TUbaTJF?Ez|nUFeSkqLJS8Va+I3w896hIZ6ZDOkZDdH-ZUO0d zJFH>7x-4j9oj~eGENvv%!E3mw@yG=ey)3vScq0NSn%6#?biH6N;023$p47$j7Y(y| zqdNsV1e8^b(o0qBBl`qWK5|%eqg!=K^~gJd6N0mX^ASCObF>{Wwpy@RuwAgr=&>1{ zCLfD5=OR!-#>_bOy5KFqxD<{Z*0o8nORz(*4KQ|6*Qh|s#v^YiTHXzW{|&&zCUH+# z%=iky%LZm5iy6PFzpm?=-~u4Xo9HxRv!G_!yMX=&^$sxfd|AgifyGap1&p21B}rql zWa1UTwB3V;@#CC~($DK!C+HPK#Clz81raN*$>V}kfN=|%90D9$3K%on*d?(ZTV(@-zFhA(P6$ka9cX93ezX?mI7aCPe4 z1~_Jt>Ft6of;|FC>UxoET`z*L>j#kE_2MaAD|AKd1znc~mjo9DR{%etjIJL*Z`Ti2 z3fciLo)KIXKxNm9*90#M-W9w7_`y&5GaE!Xvy;3d7Q1rXl#;(5V4dV6%e zqH7g|AKN0>ig#Kp(_)^!ED+1I^i4~~GN5Qu5b)7SUN-JU^tkF-d3J?X~ujAGT3j zTSu)i*WWom+Nx709u3KBHYHLAFR^VbNl&;t%p(mM6|IXiWv9^yxuOMYi<+rAMbR}k zz=upW=9Z956lY3=RfqKkbW(aaJ9WJY@TS&15Wx-~&-0rrI);a=7##AZ1=C?aqBh$`<5g#Q*+K_ar0cM+o zMv-H8N4@UGSBj|4jHFm{^EB4ZMbRbW0iAH$>q4Hlx}x~aynL(9J3Ck7=Fz1c^_~{q zt<=-jQmkiA%df42N4%OxmeAjLo$`;s(!#tJ%}{Le0kFl`ig<$SL?82=HUoA?@I+sG zPrZe=H}PmtUT8V~22)uQ@;aS9JOuG3H70J0aAeTJo|>+v%W}($#Q$H^eScup(;NS}+uH7awAL-Pbj!uqXw|A!i(=KP z#njX!46W_frnSv>SBv4^nzgO9pLchQFbqQoA%qY@QG`$wA%rl5@O{0W^M2p0&&T)k z{rg*Y@AK<9&w0*sp65BwIq&m+zX9vngFJX!ktCrJ-_hBIG(Iijku+Xx?+H=(2Atbg zWYwV?dkM(kC*i?B^qub?4MF7$TO(fCrfeBH;r0+QzWdCid#CQBdnXVg--4AsK7WaZ z{9%{$uHh(&YP1SWb3PNsRl40+%N+M^qIU1ZcR*2G#%rbKbmb1ISh*c#%|&qly-gi##{Lk5xDEL>Z!XeSWMDudnSmGn zBi2iy_xt-Q2pp5>HWuYXKoa#Z6d^Or0nyNfY!lIq5spBF&B;In#Y9)!`#FwHwdQ~{ z32U3mML^T!3ONE=41&diFM^??c&jhRixJHwyed~3V+cyv7@`}6DXZL&G;42&I4ENj zf1tuhVcdjhw_AYum5hd?p)5w!5EeJEhNCOsrJy$$T)C0-H>dVSmr&H4Dt%(x_!5jB>YyjzkZ4?`qRKyj`GxBxd z*&_rc2yAl#6QV}!iwGjrr`e6c91;LNDrv&ACj=3wQ4x$5I!t+_>Vb+q9B=m~DB)(r zH0@tY5k5YJO89n(C?mqkRHB308WFs9UO>=Y0YS(NyyF}HB@7%AC?O!%6Cw@`<} zH32y1qktiJ7dZpGq8*|9}AYD zItISj^0Zp+MmbCq$YB79Gb8&&YY$5CL0xRlmOyG1n<`O456E(BUbQQ znm{%bHH-oNbS6IZ?lGI>w1)W%pGF65P~F|y%6e$!>^2EN;vfo-XAts`Mb`mgsN{tr z0X7gEdF7-;Xd)#X9W)h!JkHEvj_xeoZDqtD-}@orrsPtjfquUxYA*=w>p4RbG6lna?GUmXH%n$SeF>N& zC1zf}>Pdw_XYt)kd_WAQ+;bc(3WwpA2y~58mFGB0hxDR7H=-!e826Ht=Do&T+B%=S zS{Wf_p5wy%l~HIz8k86keK_Tq38Y!4wJZ|YR|c^GnT>iTF|9+YQHq^(s~#1fOWLTb zkOuqnS`QIY*h5DFtuqsK6&MT5;iyVf{{Q-@~$C=B8j*w!ycCQ0&2+X^ae=9!Q%tlFese7oR`(PNG;DPlm5dwXIA7 zBN)lR+_EwWjNn|la=t+46A?03<_i-!=jrKjWxkPFOjx9v?W|yStR9dJx)dyyrPrU2@Y{*y_F;jLWu}F-t4x6 z3vgvfEF2&>c}#NZr0b}GR=MpgMh_b8eH2Ipnj&s(B0vjpfh8KLdcja44tYL^;ljIG zR~8u=D~o!oAZgd_w%b<5K@m8n5M9hDnjCfnvyk`^+fmX76>Lq2!LQf@N{}WAP224n zo^y$3k5SjnxgT}iCWfuRfJT5}6Y7E%C_A#C1*n9irc@`%B~IrUEk-dS^HD(Y<)E=` zv=Z(hTXd3fO_nsmuf^bJ4s)a3fCac`Pj_4(hyw(OPBKPoM#P**F|-UM3)3k7!?!bH zOo`l}w#WeMAVW{V2=SF#+Qmp9g95i0XoCw8q#_al_&7K+{3~7bIGeT;03{R`@v~Rv1A?PVv2mkFMw$`i*j1>=3V@0z z5xPbkXhEfZ3RdHU68CQS_eS%E@LK!g{jES|$Wsy8h!TP8k%4u)&`z-lbFQT;%gTo4D+F=F2NKa5pf^n zj9>@H(K2njr_3Hf5iT?GLd6HGOpS_^j(Y~-Ml)OINS1{l0%T>(pn6GUWvx+?VPyDR zh!A&EW+VkQG73Ay_}hnVNc0SZ2f~(6NGofH1ftBaSr7*qpjB}B(I6Mv#8O!<3vWqd z4S?~*=WE237tbD_fHC0kIc|cxu?sDcHWUCJ+eKVWaq_HeGrHFXW&_qU3cDI8Vx)*6 zIyXw{rr11Vb)>In0wXnMPECrDQ;D2OCd_1k*=OX`?Ca~19KuXvk!KQagqjf{4>{f( zVqc*r{Vi3`=ATuhF*%AiQ7H*dYLc zjs8roNpvPU-^bV$GL4$(v){xS7@HG70bK&Ju_lge#FDoWeirr=BPiw7_&7XZkP@Ls z5CA6(v;}iMt=H!Hq=% zJ51QGL>3xYg^e4Sj#bIFRVm^vN(`QFA6h|4a5iWz6Ps+Nb(SD#7Egaw66`f_q5u_b ztCF}^rqif+Vj2dCEqg2U(ya&_Az9uEiW6JF&rM(!me)r2RTgg2M< zWs_-St~3f>N$BKPWFY17x?v*g}BEC0ox301oZ8tq?ebG_kS?5+V_9lW@g61bPu9 zTL9SKp{oW1;V`~f7Yd2cbx;E0u^Vj(;CdS$y8>D)saJ3j&Jc1R7Dg}K+-HeGj4K^{ z$&CGW>)(kxF>ZK2{vsWryKMp^g17z4UJ$nuWRrmO;_i@aM=>)LiizC>#2633Cr$Vd zOjxCzLJ24svCbfdtbYjB7p4;_~r8kkV-F@kQgpKugA)@c5k|iMQIvPeCcy)wi>lllSq0$juge+h-aTqGWOAEtB;kT?1?!dV+J~O3Rw9cSPlFD0Ckd$Dn=&g19g-v3By4bP*B{65Udd-Qo08g zf>1ly9S7AKG0d4T1G3q}IISJ-C&)%Q^!O1Lz)1!o73xGx(ZDwdt5>rng!o*zk;47uKr=4wmUn01P$lW2 zX$Ca*<0}^M038O`8qDc))ef0Dx&XuOwuwO(N|3{e&x~VRmc1~uP@yXz3KJ&FnP6`O zrXm3xv{huF1X~iYwg{1AGt#jTauQLlj~HShyQ+)GaU7IQbO~Kx7V7G9WRT&4R*8Wn zv@9>k2av=8Hhx_5`4bY+E{HBCr6)PCb~iwn)^Sb&FyGk27KtWf@Gk^JGBlY4;$)n| zC12O<3w-Q^NddeL$uaZ#Ijn-CCq#E%HwD}r5?1P~%&fYUEI}qm42(MVPu#imPRG&R+{BhqVMnN!=(zLJx@Uh0)dF?IKQhVaQ?} z-#24`l|V2f5*Jajv%Bb`v7?R%jj{p4c|=E90mfEv0gZx0A}0)1H-Hg@Is+gEek{d- zmY88O*l9+BVKNY4Rz{i?k)T=bj_MZRF3~Cy01##zbenN0!T=F1a$(B^8iofR7-m|0 z%vK9Qg&i#7;2Df3@7*#eU_6&{s}6`INrL8Km~9n^D65tiSfX<35{LHy`Uty5`M|U+ z@)3rJ@i|kC2}NM#0wORX88D)x5BpEZWdT}L6MNaXLs6D{tO3rEer; z(LKNn6pA!PHJt8)P#LakrO51LBrhRwe+*hSTg6lgcD86h==RTOvV8l9VTjBBQ)Ai5e|{ zQk})vn?tW5QEvFq$+EUjLX5zYNY-(D`xR$^*@XVVrJ>XXv66@ug#t2%MZyssbV2Te zpax>xg0L>pjUb1H3TTeNY%?a38%6ZVOkvvcuLfUz>+ zd46huE)Nnx#FE}PsIn%VyaAtTF?P6B2rDBy5eBO`VBigHEfx~=^_i~KOTEgi&|eD= zTtTVfvgw6&rQATOOwl!K$y@ZRvNqHKH%9LL=@PFnyA9>+n(U%>t0@Ph9pZ%1+ycT- z5ah7n)R+UpOXsi`hLn4Sa!VE)o_0OL5mE)K99mX`Tr|z`=MIPwVvwMNOk2Tzz+pEN z9pN!Hs2c*V01zP4NMK)=5Lg2d0)Z8yiHe4PN*eAc$f3TXlXMx;C04>GmstscQ3>h- zAf^F?06jAq zIw{1#1w1y?F?g#xuz93$XjxfJtpa7860F7zx*&`v?#%K2Ar41?UaX0GY0Poh)seG7 zRh@!5S*{bMagrpR7B>m8DxUelUX;j#L^0I|AlrZx)>=u5?KL7 zWHp(Ehg=Ydd_np^7a;N3cJzP`v50}!hqRjWF-GVv?rM54k#ab2=R)6tSv?UWf_&*A zZXjVNr%iy9nTe%GFUhQu9hTK8$Rr1efSSEJUDt-lqjQvHEBs6DL{@GMz!?m{A|KhH zRx)uK5Utm=OJ6AI=ys=-yWI#`9U4PSR`!LR1ljq*hr{&!%!NG$2K@ya#89APhImzo zc(FB+G!eNn$pfIRN{S_RjF~L1ULeJ6qEcjQO}fOllEK)RU{G}gy@Fo@MoCiysFvZb z+QWE_LwsGc7=wpe*qA+xrWlwpF~FLAm2J{DG(Z+m41}E>Y=eUY*6zSVKDO26Akt!M z>yIaha0^GWB@re9#%PB>TGgO+t*yTxZ|g6}+xqLfkiCF~5(peg5*6M7LsblEvVvvo z%<640H{kk~U~GZ}4(F-0fM-svss)yGi8Zc-r>Mm-v70f9E^!wOYALP|!-GzE!`!C>GjMpi;S zeN{(j)U|k=Od79_@@GVetX2mBlZn5o9fKQ6&60yV96X*W9Ha36(Hb zkWi1c2cZ1mIG%5#fKt6d zB(3aN)zN-NZlxP)4!x#oL&&s1-cw!!w3pD!l5o^J4PI9Ft-OY znhY{g!O&`^*j9HLL&%{an`~9dW^8o|xxO0s$ue?IbOcH!5l*rPgRoO%j6PAZ<*H;I zuI8Er%tH!DbXb*aq@gLn4$jYcq>FkWo8Q*n4mgQ=f+nX$$5@6R7x?sXf@QLehtN{g z@S})<^tBiu-s-O2B^?0DDlB?nONhPdu(oBa06>7lu~@5n>H!WcPLanLr9ek_b2L!d zI)FPgtWh0-Ct@Lununqs`*6FJN>=IWZMIdjPmh~!xn`ef6111NI@yYjvn&mCL({CX zSp@VP7a9rOl-Lq(f-wp3>U6q9oTcgCvq{X`#+X&hS*mKBAUUXcUtL75SK~N^aH~3~ zKbOYj@>cnYUBM#{R*U8}Cpx8A%Wb&xBFoL4*o2-9qXBWK7&$5(g0jy#^c_kStmgExcG1 zfI-jzeJ8mMy&x4x<4>1Rdy&9GyA1;;48=W0@&k{^CEz2l$6y0D+9 zbX6CsN{o;ZBGX2l5C`WNIxgfC;j96inv6J>yuwJV-~5@pr_D|yVE;M9)twrir-RHm zQ30)q%9ydG2^NW`V5UxJU-VJq6CC}hMkXY4pozL$JRV}kn#x1SCG=lH&y~1Q3Jc}A z(kf$%wYZoL%vJ3IP`wLw4}HcASlMo?-l4%OJIIh~Z9WjfPGA|Z7p=m|arMGD=c53# zpcC<62gJw9ED#E20wb~rC042(-j(Pi$DRlIG&9k1^7Id=H zOoDu12b1@t{}O(bD4g|<_dAS zS~PME{^n|^9M)r#7=E3T>*t>Vg3SvKn{l`W166KfhVkVLT`ryCc@G1(SO%Qb+4djf zR3+e58lQm$oh|1YD=bXwoG2R&eT}R-LdY+~v}XBb9e!oad>K87!KoC~^X000UPD)t z)yQ?4Q{EF}3}zz;9nyW~c}XK`^Kb>#GXvA3z9Z;?#&bphA*50wSgp|`sugD743!}b z@QZYvnth_eYzD28%|@Gp;gIMi|NBa30=YbLjP|%QqtSy)N6B2CztJO&{aB+#IbDv9 z!f0@nPB7XcXc^6gS$_=%MSC*fHrDfIK8%;5>7kVgzyeNEvTKQ4*=pq8zs%(Tk|(2( zYt+FZ4Q&*82gx+KB2gd!BvTDYi+Fz$L1s8u4#MOIQLx~BAwu(-RDhvKmzd51dnBl_ z!GT>*Ir)MrTV(Lv9=u%yKN*QCe-<4-f1(r1St;-IXJKn^lVojT!!W^ZK@OZjA%l27 zTx5+QVsK7C0nM?D9xNNDbAOz>+;T^eiY=Sc)^M174565;Zp&kwk*Z0O8=O=(`9;9U zFaqCSa?l#44Dd`J?t}0*WkQcc!MNap^g)6JKcdhXiE`G^xs2&djIXh?2ZTWGr-wct zTg~xe|x&*d^(;f1r>eIv~LxZn3Z$E8-u=pS#Yu?dQKogf1`_`Eu?6 zd~yGRu?qzp=2A+N%>9U=X$=TrHFoR?WM=Ysf}C2x{yF!UuwTx(t`|m$;{+kZ=`f59 z+cuW8;8A>(34E}Fc=^~GuGlx`O(E9Tf!udNRC)AGhwUD z;Pi|7iohHMT8;m{0ZaMc0)M3xz`RaAtKp|++4l+{ScC!#vbIP$kP zQF@HpqTp-wPX5}7TB4ARA1i=)c(@TEL`p+)X13VYrs@FmsF*e0_Xq&7IyYS?59fVC zfO2~m!F+U=0;yA(0O1(xRBkAq9@PJI2B$RCDbj&U2W2`a*MVCH6*{QW0e4$auYqDO zH((f%yDhrFYwlukJjqAdvPO;dQeJb2rVQLRNNuEB+f!)RQLjpWh78OI+@^Cmgn29LOh;5`;{+p!xaqKDaZ_s0sS zhk<0=JVwD7T9TPe$cAdr9fNeq)GIL&WN1GgN`S25H1gW6KCmDxE=vHCC1V~yAs=tc+Vfki0rrNo|Qz(Qp$m=f0q84IjaP?$7;PY=F01pKgp^Os7 znBEcP)TE0#0i=sMjiOHIHCTp62(e)WM%D-M>T_Y{wbj}27A;T>WehM9%*GV%_Ar~L zVI;wW$}q4ET?Ev{a4C!!%s*-;5tWQoM|V-Aw361d6-f}HPGaJ*HEx!Q(RzrZwY^KF zqs4Kf%Y_OO!^^!yi|cYDxqk;DQ~AU5l08y*l><+JHI=h2&XnVXM=fyj)VLm&c6xToS|HpwA^^V;4T;ld8H3{_5>iMICoGT5V6ZGQlB%S6qMsWz(kRkt2_P6GLwHah zCF@cU=7Z7EsL+5g1bxYuF|R;DJ|C=>KIP;2Bn$dztJh;**I{yrJ3q8rTKWLt_R#9+ zq{#>*ITd2?8smCl78nxABX8_`HwBusXtpSov4LS=Wk$E8Vo%bLbu1RqHkpV(YSrbF z%*M^IV?c*2xwT7leE$eZ5Y!wsgFv|%1f9`R0zvG}Ru9Uwj2C7Ix)?A=Q)dqW3g2P< z?2hj+$|;F>Dl?LEik#Yq?4pN5BDLJM>0nc&bPKO`XpGTK4f>-=QSR#(1VL^VMEh_ZKmOf zXgZiBee<=EBgY{;+M$I*t8Y9Mlp2`VRb7rB~%PM`vvbeqf)gN{z!A8H;| z)3-_YN)m3JXws`@-*zAoXbf1L+$pa+X7sA2U3;K3Ly&jOW>Nz2sXIo=@EtKFL(_x# zUcdANLQ%O9J7Ga0A9!TYR5x3Ff2}+Hkrjr1)x*eb#M?j2s9qlFT;E}hL0YNH$Eyv| z3z|bvWoz21H?w?4&^9)+DRPt2@r4)k%YN80(QhI$kvB(BNVTT6p$oNXkkdn zf`~ifkW}DU&qt5y^f?as}*w7}Oi5>juEEQ#=zOnNUY+ecwUz#%t#ZH(nH zO$}5DY-&&jn;KY;bsCh=04Thqsy>+$Gy?4U7*^U?-qe?AfWsQ#u)OtyEpc~K+Qcf` zj3NfLqXPhjN(3Zg7mllQ^hz&Y8gkJFX~(%1*ga#q0goXjq6{9s3&qwDEz4Rk0ym-c zgJmEP3EDHHDO7j?C|>``el+CDHAj@>C?t&$I4e*l1?y0s5QUWar|%m!Bt(J+K0D~; zZ&k!VjxXLMsdE zMp4TKQ6vzEic|;0G+xn5Gl4>3MY&vI@!0(&2vQg(ZOz}nNWPH-Zi|^jO5a_eE%M-9 z2TrM+Ce7B<)}sd%TCN&0G%*bDW>pwB3i}bfq?P6pW-ZVN>De)jojVj%R)N`~)lf%_ zV2FZDAZqBf9#g@r^9WUc6oaOFnyVA?41ig}@s*!|AXgIHqL7ncST2em;NFj|Nl>=m z*1*{o5p4Zn)FC>#cq3W`{U}MG97%tf9SPcXvnS!&49GKElNilO+(HS;4y(;?ibkM}Tu z)-wFC5P<=riR#Ycs$H_A0|F&2N}e#EdFa{z(jdUV3KUV8H=>60!qU{pMu$%*>2DAX zYetG$g^%|`sLDhgfU`SAZbrg!)MeE0+%QU$2JMbwhtNcT`-r?WVpNf))DLbq$i z*&?-v`J6bg`&7RTQ)zFAj4@;D#^Js+=&dgakg&oOU{aMU_UbUf@&*X9u-}L)j9xIq zAv#lEWm!Nf_yiGOq{7JyQx|4qbdWBRxWGaJ839Vb0)r-*a2s|oK)x_&3u&)EX3Vw? zM>r|s1-II#Y-od~qiz+f01oMbWw0y=$UL2K7y&fvFa@KgU6h$aDN(SKa;4+&b^=dG z;Vr2=M@yNfC&XuVAva>%BRC`KC}subdz?sHX?7}ip@x+{0tK12uznM$VS*IFDif*^ zBS4zOg2Nr`O#uZMqRqvR<_Q0q{t1{{|evO>k!L0Ul&) zrqf+AUK_`e5|XUo4;mu>h_s;#wlGA7MPAAXmmN-bAiQ+^6ZUtB=yc&t-HbHuH6w=* z(eyV~(78lEQ3;tyNC!!z2y5dm4l_z=^s%UF#P>JIfe6`)XpEAC-7ckgzgpIPA41oF>O(yu8Ot4dKp-D%@3uHvs z)Nf`(x=RBz#!Da4ZH-(y({$)}iph&UInugk8fpQmNxGp+YUOhqi+yE8ACy4I7QrCY zr9OaD@#3*!wAlyn4lRRqBFMJJTHVuHk`4-xVH7mzf(Cz|ymn!YH$a;7`YU*i3OLG3 zT5yWPz=S1@xeVcs11LErPCu3&l17Hnz0FdST;bS3;@5&<(prZ`+Cik~55y}{zlEW( zQ9a4ZV@jf_Rh8z*`wO!r02z*_(AX$Ti@$>Wr=ajBPpt zeLy!+k*iE$tOQ^H%&SnN4?M$7(>t_$hX-$6*&26&`$orMyD(Uo!z47vWRGrQ51WvI z-b>D~8;8shXGBxnrGcS12F1s9#&I*FNl8W%Zs`lf!b9?)DM%Lt`5~=30|TRRHAUzQ z(It*iQttc97V{4gsk0qiu|l>=?k!i`aBX3T1<*sX|a_-g<@$A&oIKjZIY$X%-@v-8PQrH^Di<3c9IG zP_OrQcD-&M?{CFxn~hr=62tP5_D$l_?mns6?yuRdJB(f$!q)+6&_r_z!JFl%XA`uZ zL(`nk$6iRz23>1|)FKy~Vc$6WH$%l(TV?~iPR_)-$*#+rw(AZcK&{3$p=PTeY^&YM zhWJuoJvba~Ta(s)ynV|=x7}d(4t)Fpos*vJ;H@^i0t2%nb!LYjc!%b1V}j)G^5^f; zoe+hWX7-pwYJ2Y?4Zvhf8qIR+ho)SB_v+eviH=*Vc*`Yu4Qryy_v!L|EI0bTSNDCd z7L~nPO@yceexeTO9v{*)Hysh(XgUJ+k}vzT1#1qH9v_h*3KDXT=;n?Pkqj1w9O_L@ z9Q7kVilbuK?rFk43mAtr5}A8Uw+I8qCU9VeCu1-+d*MQhWq}jH4=zv!0<`}aB z%`qAxPCAQsm7xh~Gu}>0kPNXr)UFcREOz_0);+yi7m5L+NXY9U`A$2qQizh;wq`ym4L?J+GMX#2AU4BYg`0&}+UW?I zk$V~N3J~S4FLnbC>SC!Y{s9_y)95qgs5V-0e~~r=u%LiT8{V)vh>&Hn;E4>B@o&)j z*t|t}(7Xi#EXubkG`)iuc1z;Sgs-ki(dgq+L4Lqur5a7**&r zJQ6R)SGuu_*G8`Z!&H*Q)-v2Ol8k-!q1Z}f9o9rO@M;GuBi^(ZC_oHKgSB!WLHETl z87C}7RzxS7j|sXiJEZ~@v~~1x`HUML!VRyILU;`N<_bop;izjI`IGl>ogJGw+SoD&oa7gdvrQU%TvHyP-UI**eTn46uPj2EZlU z^Tufi^apjdS@Oo~q68giBPB|)S!zxMDqrFKsuiQ!SCUF$J z2?CP}LBSa=?!fSt6a4}m1M9pFn|GqXI^;T0YNU$<@uiR2xOwMmf`wYMFPXaO1^yzG z0zU@Oo8zyTqk(d@{0oGP`(`a*dfWV9Z3ftSo3~Q{*2}e1u(kWa;CfMPy%n^H6pIesUI!rrw$l#_4~(R2@MmoB zF9f`R$IlKd;)3@`OP!7WI#`a0o^;?lRHUeBivVo$18mX&w87%Qc`*n^*Ej1T3|(Wb z44TB)Ebnxq58f&v1DY(eh*#Skc591Wx?d%YZS`Z^YDmmpO}lVFn-%XKEiQYt(bdM# zdrW5@hYv#y*lTNvz-P1i6L$;t&ESBv^e2)QWspk5T4|396}wQku7L8pA!{2&on=PF#<$aurPXooRKO4D>{x}Ah@ad1SkGwfU}*yyX7S@Sg{RGbF2Wxj4{zJM<< zGShWtx@1Dn1u`Q4R=4#AEI&kTr%x+X`*P!hJT5jgT58@!} z@pGG^iiNevV>3VM0W&UjD$F{yx{hXYm6o`c3Vc+}*0MnuRw36mxo(iUwMHL0gn2C; zwia2dwR8xK#%~&e4zwwi+RO&m>ju|L?s@|ic7dVjEnb^}#4DwS{-XtB1TftT_d2B* zD$iQfGc5ue?2^Ax2b(Zl!rON8RzUf({QUy6*^V>GV0=>tW-hm_Wuvf2%8?Kfn>r-$ z>dtMHYH%6YBqpSmPLVN*f#*9+JKfTWCWH~4x}!U!;#PxlF)J-wByXFjeUo7=f*^y` zM=I!c9qf>xCQa6BE&He%QoK*QQJ9gJv0gH|+PKZ^9C~YDJE|${(puZ)uXW5Gq6Pc7?)`CT`?v->PB3Ac4<|h) zf^A31DW8(-L|x-3YxtDd6f3^chi~-h<~Qqvz>2o|WYm3PwQN4PAE<|ITL~~j84;c= zV*z{wBjS_2Rpum^z;bMaIc0Jn0^3^H!Pk_S{!NQc_SXaHoiE(M)ZY~3kL@LGUeSIZ ztQ$qu2c2Xf?DE<5)D4NH(DH4x5M4yXqM}i=P3`{pVhkM7!jd?opx(Y@NyQ6GeeqxmOoGA>kG@Bx@i5fPM`NB(Ik|scSnItethBCpq)HjKNT7MeH7cT%44Pp|t z)%7JvuJ)^ZDKbm=Qgt_BKZVj%O@v;#`BH`1sgNK>u=B3>Z+vM`QyhRn65SUV#^r$# zA7%B70- zf2ApDA>R*{ulwcFd;}o|A3?GVp|GM{163G&Dwk1_rp4>%LCT3~Uz)U5i%)x^R_iVz%{1s#6i4h^jBr*Bseest=RU4j5h7n-+C_%5b&1g4q-+8nP%L>xpP z8qv1Nw^8ag#|sI@9xO&sk39HdfNj#$_?U>@vn0rk+ZU34_6U9c3I` zj1KM9^zSp8b3y8*`T@h4#gRrxA31>^4-az{fL<9nXc5aoSqbr2yvhar+K9u}q?_0y(JzOPG$rl~^@D+Y7}MZ?!1bRN@VE}nytb=)2T zuJE&`njdm&s8yM0TNQXnv(}~c1^toHXhq*NQ(A+h3$0ec-5SS+S|fC=R)?gb^f!9I9c_Q4`26TWNOWgerJoc5+0xwLrR(YsZOn;9p>CO~*ut(m2gnBSX)T zOh~14sg!TBI9Ib60gke@7D=JD_N^EgLk{VEbHUM?$@!Y0tyL!bR&DxQ-2lKzLyROy zWB@V+RfRE3qM5B#IhDjGaZ}n<+`?OC1=SMGmTiXl-dTX$yOPI3W)(Uqez}CtL zz8P#}Hi;kJ+9oZxgCuHSE4F+nL|$wh;d5Q`rja3d?2Rvm59AlaurJU5e4Ge7Up$GA z81F3^nOF?+AD+Vw#Xi1%xhNmPvhyw@4=d^CWs>n4cv?36^gfq&3;FGB=L_rG6vt3r zu}x0$;X2u@kte(KGbRV{I)O4c$^LACtjn~m+2+p@35L5-S3Z!3v+D4`XU}u^aG}JQGk>EEhF(rG zBbN_f`i^j#z{zBO^AW_=M?}iA1a)}auO|}Oo<$}O=6AQNP@&sBJ=W)@#S_n5 z9}vMw5fDg@NgI3)vB$AmytXyKYR4SN#S_k6NUw1_){6JnJS5jggAh**j8j(pMfQqQ z5Dr|y<{-q=cu7Y|088+NQC?XNRcBEVqn^#YV)cb9KG}e41}`qj-Hs?W6p;4pVN@eZ zUC_inHL;Mxe%X2BTJ%K)i8X86nsHyyAmnxcbt0#izn> z#izn>#izoUvya!66Xh!Ou9OboQ(P>yTjS&&HP%-W(JY7{se!$$B#&1-a}QvAjRDy< ze2swx(qFu-ngzRf#p{$A?~>~Q4ca9EUJ=WR6;T2ft&21jZOp>48eH+VLtOC^L&g&& zF4xsbl9K_B2qW>fHbATv?o}OT953-=ouhK?;1%zw!WC~~W9eb`#wywElA*5-iO0)T z*i(}#@ie*S%C%gsRdSs#*GyhLLI_^UN%Z@8t*pYgZe(!r#1GPq(jK0FLcA_ouK9qF zTwj~iND;UQDLcktkmm=G#A#-^7RmLnTv-L@t8nEha$YydmA&PWEnfHV+5lc-M5C?f zG+y6`3r@W8nj`rcRtYL}a8y$%43w~@YG2bm$p|EA6#HE!M!HiGp0tVX=yb6Ur!RBLI z*kRz+J740`BVRnF#m6PBWNwmcIj^l6iJdZ_LbyH_6;`^acz8+P;sR%}QoSU1phelH z78b22&Rd-8a=diE!!bHx)Oe-NvZ$DZoH2>xva=J0CymJ-J3MjJsPV%Wj&_b4K00g6 zm~lzt7LHkzouE_%8W=TV{D_1RNX)dTlSj;&mNC6JYpHX2VeyjqdCuYzP%~*+;)rpe zGqS(GC?&6?C_ih(EI`^=$Kfw=0CucJC0tVCbS%^L9j>e;c?F9dS&kHE@$7}yII~?d zbDRaPyhVA=Vn<#}eJ?gs`!bi=ET1EzQc0bu4wdatqO- zNy*t3bp}Cj*oao)mGm-9mBijr7IQE_3Bv)Bce zoN7^a0h(G^THxv~=|*#|MU9)9m7nkD+FUR`?kq=P0Y+-BGaC$^lU0yYxKyfS6=e75 znMuM7r)wtq#=?|~>k{DNE_b@pi znE5#lXTEbO#I!^yQ)bM%GYb~w6_Choew%_2n~r`$dvdy2u2i%|^^?Jvo0Z>VEV>2P z)D)51*sT1;g~gEerNEIzZFEuT<1FfQA~9hNv5d{m%__bEV&WIyWQ#hNfIY>|RKWs= zv#cmTFFViWh+SM-{@ zi;J{%gcAA(bB0AtVFRw*|M!6YuZB$NiJe;P6n13fE&W%<{pa9!OU~qyf>F~7vI}!W zB_S@|RGQs@J(yMiDFVj}i+gtC6ihDc25f~ZFWX@n4Tm;$N)5NDIF_5zW48KlQ-)F| zw%Clqlss)SidXc|0M3lW77KbN=jUHil7(@LmHBoM^Lv=Bozb zBc|u&Lr&+qFgQ!Qk(2(ZSw&e34an(*#UQCiN8vz7hX`o$v`6uLi<--}ds>3!xp~>S zhIq%qPC1LGgyJnKmXQA0eX?l<{ao(`KHZ{*o&fwWFs6`9#e`V$FXd-g zl!G{8jp?>9FXvw-+XRamMyUT1%-Ff5GEHOR?e=DR$k@`tVu*W@GaKeL+pMmXNqKBZ zX;D#OvCElrwb)@y-hQ3;kLt{l!i-|ff$*bx6w~HRE6ao1#5uWe5vJ?d+`JsPRF1i` zrq7LaEX>MYl2Zt0BRi|003H>m!P0z8w6Mn`l=5rGw5chnJ@A?gi_Ocq+L?`U$XHPX z6X7SzPddtrN*7`lLErxa#xw-;$0kf5`{8Dm0%r&@rys+i@A3X8!qzsE6~CiCAs4wK~AsfCMVVe)T4 z6D%rGy1WP;q;vjMXlYKo1FAX;t$@<&oS2Z{bvw)=KNC-^dD;KHrdi~#Imn{=&k;BH z9QfJGvsRQi7G>p^IJ^DY*tuvsKfM?(K}i}6OOLS|Y*7Qu%H6JeDHdc(^|z=#m;R@p zZ7zCZMHO?V7Ger9)%HKFK8%qm)iVpAxBdmN-(2^g5mTIuC6*?I1vxzpqQA+>IoFgz zcXR05Ks_*e|277G6Xc&^{tarRMV-x&iUnJi!Gyuq{ZDvvjerF}af!3LQV(AG7kIO= zWY5DIwy-$ew4>c5D76V9{ni^lJkM2rBmVOL%OaWPXAU&VSsd?JS^{0o&s!Mpm}jin z4YLvNm|B|8weq9_XQ`_=D?i@hZ!)8BiL+qR!tvv?#%7NlH)_I|L}x#FRgW;4FA$6r|?Ib|9_>M-LO1<>QxNcHLT@SZD5S5{o-^rXKu>e8E^c0*A+*- z7qw3qKIhY0A9HhDrk;}t=_oGAys)rfk+T?6ao#mqnK0=~T!lrMX|pezoR)E!WA4lu zv!>0-#NN%-+SX^n*~ly#mk3C#idbN5>WnDLS;+SPfBKhOR6Ki1L6$SWFxNR33;C24 z#o4ZfrG?|SDm4~=kD)US`1`Qz_icmrKk;4M*MF_JpndOcuiiL*)v#rA>lUWvRHdx> z^R9unT=vWA$7lD;nznRpsON^!&($Y?Tlv)W;YV9eJuP#|td$w>JDcBH@R+@1-q!y2 z)&988R{F*%=RSXE_moL{67HV(zJgHw zfWKcTT>KYgkqtaZoeDx6_w+0XRge^-h!N%!4)GuW5C*vjB~2KX;g9fAgbV8kEUOWg z^#m*O*%sr3Guo9Taj-!D5l-4dQq#nC_|tSSPt(jQMtf+-#4mIcn2iWd9q6_hw{+c? ze(_}I+#3gWynJ%(Rlai`T=M3*w@v%;lt1P_xZ(4_<_i=4xWut+>8}s%Sk_n-kaor| zUwm+U_StWK@XFW}_n8atu7Bdu%V&P_%;3dmd=uF=?eDDzuN+w#@N(Kwn`e6K-D}_d z{naJ)SAP}Qw7%t}rPqD?!ko)KYI%Ou@I9_m-<^LT@2r`xZ%?Uvsrs7Ix)o(z^Uqtd z?&)jy#~z&hi7Z;CN&^q^~X$y0fA9!@h!xhhZ z+UDI>E z2XB34wtJuBuB_!3=3Q<(d4Rq7nXu2=&;DZTX$PiG96WG{Ewp!d-InU{Y?x0y4!N*9lsU-vL$oTxv!-Bd1K-gQ_otq=JZ$hz4_ho z+$RtHn7w(_zBfL|zBy`2>uJgTUhV6sxFF_+o1dL@?4937_kH-RJD0w8`^XE2JeKhD zzREdAdcXMjuH}yp$RAep^t$`KseknSI_I<*$7{EB9zFl$_8a2&&KuM4!)Y^Ty|y}O z_lqCCao69qd&0-H{o;B1-s?VzyXUF8Ge3Ihg^u&jx$RJVSyS)yt9RUb&5hF+W~}Y^ z(yx0rA8wfN+f^f8e&m;xSGu3SV^?!|-h0FEFFeEc_}d%Sox45yhWnz{XBQkk_u1<| zKC>)z=Vj4d1-Cq9IWqf}&Q&c1&M*J@^2P_Yylp-8q{CnS@YSs!K2tdEtqbl5-Sf@H z^7qf`c)2Ua#=BO&aqsblT^kSFxA&wmL2VcOc;utsChts- zys7cmkpnM!f9wzn-o>bWX)0B@Z%O3gJ z^G5Er^PY}Lj8D2d`RbR3yj(osvoj*LOq{tUu6N7ie>yGKPKbE?6YHi!>-Wxku_5Qp zimdBLKUwr%ex@sR^QBXE1-$dZm@&Km*muFg)u(k1_Pl(2{w19s{POV7w39xqqdd|O zng3{a{{Bb*!|UDDaU*U9CLBZ7WB&NMuNMC}VAM13^mA_vn)&E;J3A(h-ty^?<;NVh zJqf4YaqE@tA8w0o+)??}kd6nc4#v&-qif)MA3ipCUFw#m3w|8@fn)NNsVUQ@&q$ql z!G&oT&6=Hl@tnCCm(06#{$-bEEzHhwE?S(Mcg>Rgr3HmW*A|z!N|!A!TX9{&sL^8* z$BrAHG-23C(qPiXxJf_b|LfmhMxhCB^1+-oW^PK|wV?C1<74*TcgKuHZ;b3yF>g`z z%jZ6x_tD|M9A9T#^NVZWhGB1wd@XFk@wjUyRg4Y(@v5umtUqPVPv4aGfAp;DuYdQm zK8G5{-u~!|ub(r1!NQM2UwX1@YUOnwk6Jg>_ekbL*;o}WMX zv;6Z3D{me7&+5dwsVUn&`TEU_>%F7zed+W`->0>NPx<5JS=JGEE{gjw=CNg0+%6hNO_O^^ph(;(gz={`B@+M>l<0;@jXl?W>2z-u&6` z;}6?QKP{N?IE0ybpN0yF6ce{i|g)aetrE9?FY`i=;5<}*|`1NXD6t8wZ)^}YI2wWyQT-|8*Z zsS?%ws-HTl?p5cjy(&VLsTlQ$f-kFHREyO>^@~~rzw9e@ScRy~YJo~sU#g*MuKHOu zsSZ`FYH@q=Bvqg)A;cBx57nh^QZ;Id8l-+zAFG|Jzgnx(l}$aPCaPdHOC3>X2T#Z*tRG?a+s?|dEs`@}} zRqv>Bb&Xo1PE&WQD^xFaB|Py`^`6R7pQ~t9uP#v+tB2GnDqLNqZdPBYm(-;yTfLzs zseG(EUQs(#5&X?Ybs64dGDA7kb~RhgR|jAdK2rl!lG>&U)w!yVa;oX-d3B>2uC7-r z)$b}{tIkxfsnx1gouM++qbg24pxV@J>K>J&ma6O29u=iLDnDyHB#ND?CNzDs`At=YL$9houwwIr`6XgP5q;$st1)dDBKd*ON9nRhDG!a z4(X%t{+giPy&^(G0{h_g(vgu7Dl9ahcX&uIYoEYiOHfEJ)jK@c5)c>`(I+S}6z>L! z=o8v2EF8{U?_g_WpcUT%4eA{k9$^XT6Q)9Y;ngtVp_Yiikf7cwxQ{hb1%*di14Arf z0inTt(9S)tW@lF%D=%O7{qp5&f4%#P5`;f9lb_~Van zAG_?b*Xw4?2>|ygYy0xXCx3e}2F(zx_6Q)s7vRxrvEg7vFPF;_ffLu>Stz zkIkQ5du_>sd-u*=IBL}SXPi?6Et(DJ>mr3k|(}$f{MY`SI~1 z5>GyP__)D?AKO<@@cpLCFaPt3_V!;p=FGWh*}3OtJ@x+kZ{6_t#XzkfByNk zSB)Im+OMMGmwV^V&3$_JZrb$t7r*;%L9)Yf%IC+AZ(s4~qu)Jw#TC!*x#pVbYu|kH z!^O`(e_`>237>c`xL{9PTH4`_^XFf1^V@GPd3M*XvtRk)hc9M7@W6oY{`~Wm%BfR7 zxaFdYE?G2YjJNO2H@{soZCcdVzyBT_6cFI~`=*1o z@x^~%dH3C0-O0%{z3S^9I=`uD%c-~BmRgjQ6!haSzkHg#Wy_1ppM0|Pk&iygo^tA` z367|!lfU@qpUA&{{(0#O@4S=d*}1cSbVS71GyC-$`SOt?2cN(C>bu6aw(h7(NtrNW z;J{0pw{83BlKbvkdHlv3XIwXF(uVChIbS_<<(0!m4;s|+Wl2f<)&&dN26;TYZ=XH; zrn~p;Taj+b64c<$YI zf0(*q!@b)UF6^Ap*w`_urDgoPhYqdzX~l}s?|t>v)HU0;Usf=F{8Jw-U0Q2dyEf<1 z_uhMF{j6CBX5N4QroH+3e{7gHFXZR0t~1{L=9@>}a60R{uDkB*84o`k9c8t?SNO~` zRY%Lp3NJY0jN;4@BVv;5_8%|3_ukh^Hf_4N_0?BTfAjF+@;mqMUw_!;I`zC$PTB9f z@WOpr&plV!d(E1g`_$Al94IQ9Qhwff+pc}$i3fHpTC}$zHMLi8V4&r2Yz_ z-Sg?E^?|ju$1c0`PIqW^^}v&R_x{NF!V9B5`0~qFE2d1@yel{N<&~2sZ#-+=y5*M- zAKrIppFVG1zj5R7&Ww!rmp=RKIq?Gq+GakKpS1LT>(8sVKWEK5Fj3=+`dilNk(n?RyZLO+( z=N=>3Y^;i{t5bE4J*FO;IaAI22Dzj(1)e99^6l;~&`T~MG39(hDPGIFFE`Ppacvzu>LH}~$X zde5D!<{mw&j;>#?);pcb`OP=#o4fB;cR&2FdieI+)$K=)s3UH-at|M_hA&y7mUMQi z&SAsUuyNzmxO?wa_rCIqdZn^bRbF(Fx@gQ8HRi9s)L)AhsYUbWtNA{k@||;zIwv$# zg|@V)mZ&HdRaU0T_U=`Cr%X{(cI;3)e)vKCaORon%rCxBUu0#etdmbxC!c@5I{(~r z)wwHIs+CVZsh<4!WA*W#J!(%|n`%3JSRG!oMy&}5Pyye5tG*2jQ(^J(Dt^ciHDu#P zwXv{J6|P;Y)>c)iD!e;Ca?l_(X!UBfde$s8D?D6<-+#ZlA1@AzSg}H_=-XHIz3C=( z(`l!v)4uvjeRbJo>av3e)xnQGQXfs4q$X|OuD083%7*oSkjtf985t@gAwebFc%!;; z(I~N z^LUh}q(qf0U8i4(aQg6NRf_mZ8Pt~W_UaPJ>>nwHF&Yfy! ze!j}@*H87!$x%7C-l}fR&Q{sC-KK8ax>aqx@IrOrQ%|Xav^QdG*t7pse3eO0}B!wu?&2@}+WRjbshef!kD2Odxll$WdW z<;&IbdGpjfyhfqd;K6EeM~CV-=_GYhVxmeMI#dm{+m-#;F?DRt95u(`P>%lnRsXNQ zR$o8&oO*8mezpJ5A$91^JJp>B4yXe)HLB*vAJvcVzpviE?mBhdv(Kt$KmS~Po}8?b zXU|r%mtrn5*EIjR{^6L;oilF^LkxQn#55j5@iO2LuJ;${M-W3`V(rh5#sEE8V`f&AB9L&KpZ}WxV{M%CBlp?gQzWq zs@xB8+zs&$0*m@XmCu36`2=dy7veh_CSyI!$6T1XpD?60CU$4w%!SGUkFvoz)%bYiw{8La$p*w$S0VdyI~?r!S))6@|Q3jp%{|= zP~p`W=2Z~YoiK|HP=^wj#$O?#w?Uj=z);SCS=kGf-44-s6)NL_DJXBV|c%Y z3B3=ha|gtA3&j2`sKf6tha;iNn_!mkSWR#+%)nPri)&$S_P}I62s2UzbFvm@ycnwV zG{oi@#C8MB-#DoD*%04}5RV@r4#`k~cOf3n!X!_HxSa&Ge+Z(u9OlyvQ??SO^axCN zEKJ=OFuylL+{eNcMPT}v3^Vuxrj2Hpt3eR+Q(?LyVX|hyBs(FN&p{nF!=%^4{tszy0an%1_W#nI z5{fiP2+|EIEg&Euol=5?Al)e-AP7iENlUAsgwi1;DP7W%A|L_+3jcedzvp?+bI!Tm z>zrrS_1$aDthwjDXZB`ht-U{c1Jg$YOaaeeDlmj4ArYp+Q&{Q-VaogfQYs0kr4VD}{SbmjY+P??OzbH&Ed9W0)!xZZSOL!Md z#mz89EW*_I1D50tSVl9_b|-gudNO|mJ^k+3J`$iPSvdX68Y_3zqVLz>qH@}mmfGWZ zExSRO^Q)4e&o*7bh7(7)(n$m*XL^-IdSc)vX^^L!$*iif2yags#fbg zRCH4^qtT4pR};$p);<`tREvh4yt(OzdFeO;Z7nI3%#F8n)0ypjpb!@=VXNJfmKc`} zR#^;-m@O^628quG{I`uVm~R;I_iGl%S`R!I)KDF4zLcMl|E*txLCv2#43C(J%u;a< zBSB28uliTmgS;yrCVE!TBbf&c?oI9Rl)MSC#QN&hxb?vJ`H9vA#q`hb$qZlOQf#^n zZ&PR_cMxIqZs7l{7QYZ@9W}D_ZTGgi?}bmN!MDCVB{lBKu`hkElKm~r*w0$CydhMO zLn(^hla}i9;YLV7jTO$mYt%rFgk_8dlP}J^&f4wp=vO2kqPy=ETzvAik<|l3v{+uE zw?fn-pK6BiD~%21OKk2Nf$@C9?V?oq`1c>ZXpAW zP#pD7S@p}`kG2(FyL>lOUN()_-ldFJ8Z!Us5rrrI0EELm4_EorA`Qc+lftG z5zJ+gz5NFDt-1e7q=A{XRc3}`EAEw{r(6c|p`oq{N<}jr-)k~*1)3}REzGs*9D1b6 z9+t7b{oSdRAQ3fo`Y6M8Pp6&pM+#v=3m2CIt{v{|L2~2madEo2d@B5k;i>NQA{qU* zHTl=cDKEnKCa_l%&4pbKvX7`QDB98Dc~dOtex)C|$gpoKXMMwMyR84?2F0=`_T_tO z^tu_XNGbsQ9{~*?>lt)@1#<-siFtxQ2{<&vDdwW~Pu7;`1EqPSx_Fp*M+RgXbo% z#UX_)w)YC*^0$Gs$5}VODRbV6c-L_~U&r>xiC~RB**Uad=pyVtQyNt|d0!IR%r{S-65BS|bS6;4lenrA5jN);t%T_n$n67>D+^36d zc}HzTt<*NMPW(Nj7MD)3_`mQz5tiXg%DpnjM}WS>&s{FMaZGMcr+m znpPeBI5SMneRG2juVG@jvc3dW*6ZMbKgVw=Otwg_A2ZEND!ENhuu&gbH2=7$G4lma zAhrIsc&)#XrC+hGr;P`{$}4orhqqA9EqcCWAjw(z&QM`XP$2z$S($PzHQr{~HHO!VRvF`6=0u?T4e>tBinxo^c&@h+9Rbp+D#;(fu zyEZ1BGfeI-8ToUJPTz|7jyO(X>MOzHvt-BGH_C7M6fKZr*L2g7-nf~kdOnN)YA0|-6(v;bYB({uPUAsp1@;%2a_sFXd&#b0%d#2o7B<72` zVb|*VG{h*=p0f%aRrU^WIQS6==mv~GGhfwTDT|I^{Ql&!fANb?mr+o(<*BhM=OddQ zi$8d3&q>qTBD2Nv+D^YGK?g&NY08BbFZKL~iNmZa4AZOEUgf<0z4aj}p~4Wm^I&n9 zhL*geEnQIi38N@wy{GLZ^`G}BcHUgBLrXlWJKChiWS;!~#oo(TGk&^^eZKhBW#w;K z*ObJ^67NZ0v74ll^<1a8?tDGJPOUY zx*%9j6%>3~s{89zV@Ja**N@ldWhl@{s!A91c|Lg^607$dF0oCDnEHk65E?vtYI4H7 zJQO>Be^fD0$LHNBzq$jXP;g(haOzFv{Y%~)Y=H-qHc^i^x8k)a`c!^2eimV=Pf<3W zN>py*39`xlJ@m8+-zqls=EdVT@AGchP!YJ?n^X!Yj#vn~lU4qZIMvGX@ejEqztgvD zZ{4b*jm+$N5*s$^-ZQ9K2kYN;3ufkX#O#;9?i9XcpiA1Km6B=JxVBy>W%{9Jy|=mP z`<9uZ-t zv?EY2Le(_cjNDWs`wi4CcFQ5{`nfO+dS=K+Lq)A|X3pM?kk@Wj|OIr(~ zE4>qbHQ_Ff>*gK!D^sc8g`z*J7)3=7Z!c&Dy|YTr#_3#NxES$Tg`GM0X|ZO5V0efVW?9W&CnF4e3q*`&){b#WY6Y_gZd=2y8(lYU6*`#Vk2HkVK z{H9Mlq)Ag-IN~I7xsjzV(!8RPo2g&Xv6SUed{NQesd~+oW5*TG-_~muLPhw^oPtl* zsIylIT?3VV`Qdb?G%iJFp^|31c?|_Lu^LROrO>ZN^s*;zW(xdn6!d&|UmoL5au^Gf zMCXUD2AyWE;%IZVHj_Qw20W&PMu)h;M8l3-O|9QAr5Jyb$qFFsJ!Nz7*^Znp#A=pz z;bErx5yng@#2T@_oKPkp@V(ui;+e)yt0y^JhhZd%GKzW0&kbWmc{botqvw+GDgPPYf z`&HuU3gRr2XqvYE*X}Asvudq-BV<8dYh(6 zhHcNNQ@*Z~>BnE*ss4?66#WEeZ@(%vvr$E&WYPGh5H04i_V|3(j*8vT#-`lfC84#l z`k2~=e)F*$EuJnVzTHYutvq%o%*$em?`RG4>z~nt^7Oln62d($%**ik5DJP0e1;YT zAN-=?LI(ah5ImyfLfH$@YY>t&04VVXpyVO|CE@^-NB~em4?syN042%*lrR8L@)CfO zZ~#j704Pxdprj3e5>^08Dgh{&0ic8hfD(BCN{j(0X$7Dp2!N7k07~otC_x9HgaUw) zMgU3@0Vo*;phORV5+wjio&Zqd20+OV07_B-C}9Jjqyd1EZ2(HT04VVTpu_@zk}m+1 zJOiM_9DtH?07_~BC^-S3W#03|s9 zlwbl-k_SKuJ^&?B0F;;jP*M*-$#noqk^m_A3_yu003~q%lsExUf&oB@DF7u@0F;aZ zP!a(^i8TNvWdM|515mO8K#3OsCD{O!_ySP!6Mz!r`M?FBgdczsIsi)S0Vw$mKnXDb zCD#Bb5eA?H4}g+;0F127rG5{s{0F=A{pkxw&5=j6`t^iP? z4nT=503})gli6a0d{Q#770#HH%K*=fqB~t*D^a4=g z06@uC07@PLP_hg_NihH=i~y8u0Z>u{K*>!2O4b1=xeP!F9{?pB0F<-?P$HCL)#M65 z$u9s(<^U)W0H9qeh0Vqia zphO#hk_!NoxByV12|&pm07_;7DDecKaN!#1eoK9{@^504Pxepkx4m5_NdZVSKjrWan#SK_ z#76(0asW-V{~k-j-uRz#DL`ER9wYpT-aq94WoZ39W`w=bKjjQ4@HzXRc#tW};Gc5% z#;?xb;~>~K{ZnrG@Ajd|f5jj4KjNo?@_)sD;otFNL;1hr$NG2tW>EgG_)Y)aKEl%c zD}LzAKk@TH`M=`l{dfGxJp8Zt3H}{_Gn6-h&c@sn#vK)Yjsy!EL!?hkynpX#NW`P1 zgqo|(Aj7)MNJb=AO^Pjes3EN`<@poR5egULMt>TvQJ)Ve9d^`F)$*~~j1A=uZz>#w zZFx!*b-f%C>IU6&+dEs7?tc48tm!useS;RyWu#qoKxL{{?6Ufenxa+K#8Qk!lZNe) zqwG`-F588uEeob^VX5z0BAWKOFUc08)4j+W_?}*4*7Q)-b}dbv;!Dh^p=Hfs4lDb- zxOhQWVv+Kix%Sr37Ej0I!R-SZM+`}Qydw{aqNPC8u(C%lmvPhLzg(9v_#M0UY)mj? zqI&y^#$!%2@zRkbzkEN`(d+%6*tz_C`&lyS)82i5>0B{tpt2Wk;8c2fZute(-0#vd zg|wsi&FBw9t3A3B?3b-ZezJ3udBvgL@zgeT+ms_pI*2kES{%NQNl|nEM>vaFHhTTG zB_>72Mr)34?A5Oq*`9G=ix;Kcm!#ffw4gh-O5dZ}on~d95OCZ3tz8~0sDoa6wI-6( zLxcV21YV1^Mo-C|r!RXn&abLIndTKW*LyA!cgPUm66?L*=X3qovX4=Nzd_Bzf3d3Y z#Hkvbvfy-o;Bsi~fF1@+``8QXnjTIv{F5ZpQx1XEjE&FHe^u=BUg`7D2`FD{2CbbX|^qOP!S-MKcz^61q$t7rwstBn>*X@eQYJX+Kq zEw3I}+}e*OBy!ayGhA_^bpC1Vr}-METS}^Dq2iY9jX}YX*A%Gi7-jRc;>n2>neVU^ zvmE+@B_th#OBjTdX)mJwWOHUKH>EI}mW*HF^b)VFXOS127Yol)_UhB9?&9a^s-e&F z@1&XA|I|^}N{ZUwQM{V1^eFaXYQ5TU_sryg=p^0jLbomLkD@@NCIesluIQ@zvW}!$(GmHOnw2@xbr*B!<@~N=qoC$Vw6@e}0 z;$8JY5}7>oZX$=Ta}ra@lnq(QDwb=W{QQaZnX^xa<~RkjhUmUKMM%5iQAY{pDl<4W zw2kw-w?=0Q&2sakq$xP!FVpTU5^GJWe2E*Mr0e%G?{oCO-fLBUffAGU%I~(pn2;2v z<9*#-<~?S2{(L^6!g#da9v$|#eyrDxs21oZ+5HNaKWQ*aW+PG*|}95nIDlk0hw>%b2gZd z;Q={5d;Ih8|Md9}Ovz_9=l<41ejEXr+mQJarZu33{2kfgkBSNc*xAthB(n!vt@*&={~hMqEvpXmP2c>m|;R>(1O?mzeclp*ssaxNE$CR`waegavw5A@Vq z6h`2wJb{WT2M+5H$SW=&xgvqpQUQXA8`g_Npu6aRq!IJ<=Cd%%rR0z;Jp^idViO~gQZ#RIWK z4Rlxquwm;!n#BRF^bXd!_dt<_0v#p|bk-cq@p>qMz>--3T{RA5m=JJRO+YmX!06uv zs!1ODl>n>Pec++efO&cb1lJoNu*!fpn?hkgnFn@i6iBbnKwjMhno0&JuMFVFlz5S1!QNeE@z=0@$x(Ak<2LV!ICO|fjIh%MQmhjAw0dCf#Nic)39B&&@MTCsUK7ac7;5f}}vwAVrW82!;~{6@&xA1xbOVL5d(H5WECXP(e5#T#yt<8l(tP z0>Qwbpn`BfxF9KzG)NJo1o{X5$ARYoe#;C+3M36u1Sx?~(BNADARG`bND3qkQUoc1 zP)OiB2nU1j{w!B^#A_3I8yKLWt0QcAc+@kE2;iPAfP38l?ll0oCkEi&O#t^)0Nm39aIYW0y#WCCwgB8K25|2fz&%+2 z_f!Gg698~86u>=s0QU|7+yfdDEdanhbpZFS0=Sn6;9ensdl~@lj_W{7Y0s!~?0o=O=;GQLbd&U6nQ31H;0^pu0fO|mz?x_K|Hx1w( z6M%ah0Pe*CxEBuK-VFfvz5%%R4!}Kf0QY79+%o}i4%b$0^nXJfO{eU?%fA) zFB-tT5dimY0k~HL;GR8zdpZE_{Qz)p9l*W20PcAMxc3UcJsbe{Y5?5x1aOZ9z&&mN z_hHg?0QXh_-1`jRo-2TR^Z@QD1GrZY;ND{Z_aXt@djR0xbpZD&0o=0! za8D7yJ#+x~_5s`@0&vd^z&#-V_jCc=dk^4V7=U}t0PfKOxR(Lo-aLSNKLOlJ25^rQ zz&#rP_a*?`djjBI0)TsI0PfKNxc3Oay)^*$`T*S125^rZz`a=j_o4vY%LZ^S0>C{& z0QVXJ+*<~4PX@rfdjRf91Gtw0;2sx%d&B_ll>xY?1>jySfP0hx?lr?A(go^8786Kk zH(7AAg^Ps_zn6%LjfX)*On^d&iH;4BFdi`qCK?t2J_aEw5e60-J~|-|0Wth%Ic)g7 zNSJI0QPFWx(C{&caWJv)F;Q`G2#HaMFwoEmu<@|a@dycEJp%q17Xycw2n&@E4Ht@0 za0oCkiP7n9d>GSM54`$r6 z>q_KW5VY)15V;OSuKh?rul0mMQNkH(`{C}WGTa$oD{~Du010*2QzYU>6V>+HR2hu zMm8ikuutx?BF@!T9Kp&=JRAjJyQE z{!b9dNF$?#^cV>U@r+m_8*~mCeq_jzVFr5$2ZRhGGIU7LV2BI}G7M)OK%z!GBi6`< zbO8w)2^9$s2?+@U+@5t3ae*|8G=+2+F+r*!o{=n)kQV?*3U>cW$b9;rb1L-dEYU-P ze}zRf2Wbb=$=`%}@@J!;qn{(%A=*KmgKYZnlt%s^J<7V;M1KYw2Tg!BJ-uPax(^hNLg+CQp-Kl3}%e*8pg zWipfeuNvD~w9IJ@{hQ}GTM~ZM=9(`#4fj5voL9QqG;WmkGE_6$yOV3~lXL!+4~y=e z)fKoBMA9lVZ(>bP;`?;#*16|?-9jWIY8k3U+U)~A7oH6XFDvQ<#d!3jzh5YQ z$3v0lJ1I(sk2y;2VDE4ByZnpkYZHM-UE9X@CBvgT4rtfDZU$av>rW|ECl2!7VGb!E$t zV7oo9M$|iQ7Sznw?s42*joUvZ)7w$N3ur4?F*CrrAt!^8H6<3NRU9SA`1mJ*t2NvV zp<`fRVq!tUh6F#me3o$kCcOVh`2Udz{+C4fza-?f_1`4o|1u$ekLS*jkfJFH> zo&TFI{70htk96^WN!0&KqWLcq?SGlzPe0&4uceT`3vIaYF$P&67eJ6C;6CyiNa64O zSf&?)e0B?|qHcYARzA(tlDHz;jC%%5W5H8psTTR)lF#^Fau4i(xEu6K`{l>-kyl)$+4rl5bJPja zn!igig^Q{=5R5f0eMM}o0M_l=G^NGVz)$ud@i2I3|a!eWVkWJoU*NSh1uCH|np#E{S}jy4Xw zIe_v|>naC7%51M?d8cvaRH|e3*>Tdka1$+1gaV3pfcC6(1oMT-oCBePva(BNU zAMCb;mLyDRQ(syfE|#p%>tD!S=R#9u$S7s0?|iF0yPlj;Kk|m}+@k%<5ssP5vWe{S z4KHnooyLi~G>Z4_Jd5chHJH*0G>UuVhB&sR4SZf6`wn3yVo}E}eU)D3Z><=<$AsR4 zXWDh&U$oD@+^*5{_Soi8k={s;9xbIw@*U!M-tC5p zd-}Y6`>tWfxYX2ymj}_;;dMC$SALrEjP6UH>$Pb759LU=%ZV-x{(kG0q%BgK`ay`3ume6TW7`kBAMkt zQRlgi$?1T_CPDuj3*UKp{0BSg>m$zWMWF@t^sgT%G7s4heL>ghfRP& zjD|ymiiHW)(6O;F@No&y@KAA3h=>W%F|o1GFbHvpQSeYP@!=njq7xEfpkkw7;-M43 z9Sj;Se2Eng7ZbUK#KI;bL_s5XrS|F-t@zM{V_vI-H?LR|m(_H9EC93&*Mn9o>`izG3O-kZcm{OwP!(%I49w!r?Z?w@l=UF7Jjt+V#eERed0Ka_v9^Vc6z7b%C00gj*^5)0IY6o@<^ zu_2FtZIS%nHW>aM!#St`De!OIKjla}Py*)|E}T{Pi^aL4ph8_#~)C?EjoYf%eaQA?0Vsu!DAx zHvjlU%AxMxSP>(clc@P7L5d;Yh{G%~|z&{%JM+5(8;2#bAqoD*s9>f3w|7hSJ4g8~le>Ct9 z<3$4YBw$Yh_9S2rc@X#qd&mbu9t8fu9`YfO2Z4XEhdc_36!@0{|5D%|d0Sly{7Zp< zDex}^{-wab6!@0{|5D&z3j9lfe<|=U1^&UF1nfz`o&@Y64+8&S5BWgIgTO!7Lp}uZ zAn*_Nkca0D{L6rU8SpOy{$;?w4EUD;|1#iT2K>u_e;M#E1O8>ezYO@70sk`KAM8oM zo&@Ykz#j4-@DKKo4}?4j{DVE@Lm&?V|6ordgNp&5@qws7NJ{33l!=oQaq2&As(dk3 zxn|g+Bep}jqn{Tn`Eq}WalJWRRAw|8e&~K%<9hP_cD}++HuSQN0R6^Y{JD08 zxPlQ4i;q~=moJlt;#ISWGE#H@x_?ELj8Ifl%LVUlEuO7AcUMbL=oROu*{h8?%2pQ( zA3RoW$ z3?xy;Y)pfO{N-fdpA|2dvMXb4@W~@guj-5#(~EI;-%t@usP3A2$v?68nu1~J!8*=P zl)`oE{JUc*(QGCDZpR;;=oh;bvfj%Q6cU1)dd>rn&6)?(}b&<4^7nNd(UG}4Wp!fx_}zA`(m>{ zOYr;0N8uX&EBL}1AKr?R3(_6-M8y7hraMPYtN;DE|gVedzSG`M84R`l1Xw>3ATeGB^71&UAa5jHN zbr~B);z0rL)*j_J-;IWR42sIiz<2h_nr+;4h^ZUF4*?Bm0dCi4!;<<6h79D?CFqHk}r|w)ogxWR4wt&GcrHYyzVG-z-dV-5*W=?%+VFaUO+oc7BPs!5 zqCdUD%Lh8}^W94K49sMPU+#G)z7I^9dvr^C@s;{)c0Y&C2+wbE*5vWg7=m%tr$0Ky z&);;r_A#aZYGd5%QXhpAuIAX$eJ9P$ga`Lb*o`he%*(qs??74<>#bMV{)n8X(Z?u7C!J&5Jp}RDX{62jj-ygJR!Yx;R~acOMT$f zV>5hJ-N&Ofm;DS+mRYWw)doq%Vb_tQ(_la2D#i8MXz0)#Ym*R){?fW?7PI@*6LsTa z3r$-3@z!w3LBbDKKj#$m>voAb7IV40=~*{ZAK!dlL5zzsQf({Q6v?Wa^}Q+mlT70# z*Yj`JoQq7oI+ch8q^V^dp*g>4PZvh((XpA5}9yK7P5; z6M10qG})r$gvV3f+xXsGF~uz2V|`V#^d2Cpy}Y&0AA`>80sA_hkA=boM{L|GbN}tvFvv zJDB&xQK^?_`BxbO-?uV7<~ZsrIJtWl-kpE=rhhO${Q_NjVdqq_t?mUog2khhb4BaM zRV!>H0m@#S#~X$cashlx82JNY`utp>%D(~_j=$Nx8gU)!2znEo#OqeknvjjVSc92a zLFRMV8f7hZ`6rJ|QL^u;J4qR(@}+Oq*Q{uC8-HdKE`HOqCZw-^KjS??TGf@KYwr_2 z^16CnE!i&QRjm2%7tN(JDzgcv;)-pb3?nf`uGYvj+f!OdIUc-mxcx5r)_p=p^gx_> zT0YumUCfvnaihLHm)O6`cLg&q>pwKqO-u>@Kq!@QbdSPWzWaLcCmtNEV2R}4lih`3 z%s7|*io@OBq09AVvd(>~XFu4Bquz%PwZ$^6mS%2lM=|=+diQ-vAG>_j{BAjZQ&Ozl zJ?0wp7tbH{7&J$)dyJ_%-{WZ!*|pkl3HG@xI03Q zM)}~js{q+IToZQ5{%b^unz)_swb0`A?@#hZNTqz2ctmESDVd;M6!NIM=;Mq@cGeoF z5E~=;n}G&~A%k*ES~+H9KK;HZpTF-3!IB9xSU2d@`Kt zloV7OKOZ?%sr?S)arVH1xXm4bk(Xa96pcP+Qz}tOxc>f-+#nc)>cR3dPwVRHBd?YB z^8%CPB=hWKIkrq0Z3JwlcP`#{yQAdfvGv;YSaUV4@tWL0L0HGj;M6xRX7U)gCiVO+ zR^D}bZ#u=TqqMPhIXt?m+Qs&zCxs?6*S796QY`z>bP!mQvS}OXBnW?q7xVPEVg3Yt z-R9DDgTCF8!@+Yy#L@0_uI;x+`yRfNL%kg;nQLf(-}2l*wpAc$`Qq2#Q8;-~InNk= zB+*^XyA*z-;G07}kC})8QUBrHauvIq$0b=Sj*e`B{&h! zuW?6C>kF2)WtTDDk{@4;^o+Xx!e^U{Z=*!R@Pf4k3oE$RE;@zK6_La`Jya^M-ab(E za(dQO!p$*CWE5Tetm%je1wKPXt^>+(3@7P6POfcq^8_{B^`+;rb(iIqAE0!)^)A{i z^usS@-?_M_);6d)G8{O0rb85%?ykZ;uByzR1Mlj8&zHw`%&m+pdd_oEZSnaH;s=#u zyC>_;c+8y1W+NuVl$EG_sg>vL&W)z%8C9CKOyL!L)c%}9J=Wc;v+RZOfU!KS+NU>T zV5>9Ym=~?R*TUc=Vf@IhcB2H_i~%)}kvzo8E0We}YhCgE$E})PT0aGcvoR!R8XIpof;xx@oj6|zCcwgr0e$j0Ety;D) zDkaT#OxEZOt)3Gms_N0lez7k^6L3V*htc((yQ5PaJbDlJf(t4GbtQe4Hn}6G zuM@8{UwhsIy*>80}q6MoatA^87HM>S_X>)EDMkaW1DL&QGXBNAs(z?6PQgl%5WcAm{!{M-q1;+GPR$2sPGv3&5cKv z{V%(t^_hG5Lnk}74HNU|DsMcemXgh0d&l^-cH+g;-_%d=iM*o7I?Z4B+)u@y-gg*>>DcUQjr^XZ|X3!-&9x)PqF8Up*{CFLP-8ccPSr#(|Ad}Z`k{f zaojcHtWUPCHJEyBkMfv$6p<3J33XAvoLBFT_&nGMP*xj@e=?m1S zvVKERPVUg zr5S>pwegM4oXk}!0=DGc{@NQqw3kAdu4}%Py`i4)q?eFqoMF}e%{fObjr%ffcCU5C zRLm<{Mfn62w>-IxolXQf~c| z)GJ z5$&sUIaFf)B(+)6=|Ps;K`q(M|7{ z|Ncma5$+4$rkie$?E}b<4@*DCm9TC!y2RyKw{0ce6EO0no99dYSVSRE9wxn1yVRI^ zPr_@8@Cn0F0cTdl1C2v$7awu&C8m410potoj#vXMw4yypt;1RpoiQmKOseK8o zZVd9rbu65Xzm({$I6qi_*5`Nr#c)aKYHiDf;rp`aac`Y}o|ku^zeoStrp_WXt17Ja zTTR~eVRD;F9F>8OsL5S{xZNKUN-af2QeDPdwOT&ba5c4^uwIuSZ15Z_no)oMje*OW z7(+hxjgQEB*%womif-X@yxrp~=R~m6QO&b?*vSau?N*gVzHn=8(DdMlQ|Cku#%MO< zrH_j`p&#y1@qZDCR-*-1O~F z3Y@AxzY4be_Q|-jexdi8o~Os9;t>it-+Z62ln5Jx=g;ODI+5Bn z+i3e%z77w#;rO(p`5E_h;*%uRyHrFU3P*$wDH31p6y3g3@NSxFim}*FqbT9qg(D27 zLA}67FTX2hU(o-cyFYoE^0U#A{jsG+vup5oow@cYvg1#-nWp_D6OMkW#YGeKqLNkU zO{{xIE1B13Qpg`+b=10Y+?fl1E%rb;cNe*L1 zh25f|8+w-e(^kqOo*m@VxIzu-{&-S1JT^qE0tN7gM_>|A6P6t+FeGKTGP}qcAGo* z|zVh4Ve+xzIz>WTZ}O*=<}C}1*Xx=!Q!7DCr+M1 z4}rEN7SCHb17%+L&X*UhPo^jUib1xe!{!_`QOB)C9JIL>=r3fZ0_6;U%$RB^%AFS zu9cmOrreP3CML(dTXF-2>}J(%m=u?d3@=7E&bz9hwtAa2eb;ZL`LwgTSG^@)AgQd< zZDBVXk$xlO;`3|AoXWwx!izauM9cfGKSnOx;yQk47qv$!IE!~@$^Ax6HZ!doy(hyb z|KcElH1qm0>H{iG5878Dsoc4Qou5t~Xaql%#KF}jD$v!oKrOwDLHkfc-lnSnuVxs7 z_1@hlO4S_UKQ;DABd>YwJ9PPt^>Sfw?xnD8b@4v(F5CX5_|!#Fkqtis)v0wRq!QBzt?`>Y+AF?WYcumnY(_Sb$C5pNHYn^ZO zgAaVAXa&NfvvoWJg;g0Muik#qIHG!t?{_Xzs0z3cI$vKjkd zCA%(&2WAd65kGvnyT^)$`Yqp!O8Up@772;?njb-Sukn>N#dEaZsBen7gfLEhZ`8!S zmXqI4uvgKWtT3KlS8?Z1hX(sGSLABCt($?3lSe=uT}_q~_ja4}GKEaZp+&xD?VTB> zjB;-BngkZ&zW0P7s#eb|h;9cbuj8QE(xLNg+cjj%F$Ne-nOl6K=@#*}q~TNMd@}ct zpD3v$P2oX5-O9}Sup+zAHTym9M^OruzemmPgv*?~>l8Il(n0-9&0X~K`cqv-^Plc= zq%x<^er;Tl*TE6;d#-b?V6LnyR>dB*`c$X zHq?8iVRvq*l!_BPf3%8Op1$3!7g}j=3#-i7!f}wyEvx^k7lg#97O(ud_VR>Rj_kA=*L@UsxNIbSL-2I&M>P0NA z7aE@N&GZQC!SI&5?0B*KToK4z-FC)#jHe6liP2zAWw1uBv6u>Hh|M zF40^bL(@JoRzq_Q>xY4(8FRCp1P^`t7wy~AxIV3N_fEJld_YpzuakR%923aIGG`{l(@AbAatdzGj5Qfa( z$Dutc!j) zM$Z>7Wfbk`yUbxV^}0rl-twH3k?0tq;&5n{e?UW7aqiK5#`w*pU<#36`(jGcv5Td? z5=>!?J8k~Ql%<>)31v-<{!pJ}=Z8T)*~ z(A&ikXZ|0`xN&2}c`wfGrxE{l9F(1`?NJ}JO}I)wBWO2ol5$VWP%XhDX5I01<}4@f z=LdT0imcYY6HfQPbTlfBFshxtS^kV}x+;Fdj_oRaN7!pMANRPd_rpS-*R$^pXA+>_ zA&sg+WzeJS8l)vJy`=fsFXmdZ*6s5>k`Ib4Su4<6zrK6b#(2T#_cMyr9)Wh6JgRpY9Y39=LlTQZ+~ceHwWjs@V=sv} z3n%Drb@K0$aRwTxZTgD6lKBuEU9z|}PIL50^0I1T>6h<*)ZVeH%;UCIvfEdGDlw^E z+dcFef8LGm$~rF0#=|u;yFeE~pC`*9PG(R2JSExjNchLK-WxB6n^=-r)n|ojL+@V? zDxOwL`tah5zh;^Ah5`=dW49V9%-3?YD-uf=^PZiz9=QDB-QxR(%x|^vDM5@{&%S<& zPJPAa;2-z-itcXT&({l+WAPTEn$sfZ7;+SZzM*%`$TH_H$E6m2(D~&xr=dHo82AR& zXR3P1axdxJId6T9hZhdq1i1U^ZztZLis5yoWv+crH^DUYJKmY_w#N-#0y8m%}$n=3D0OeeVohU?c0r3t;)3!O`Zv+^MRYTKtatOMw`6 z?!;B%>)K&j{ytBOUn!pIJmPxtlI5;jgLLQA>7hN5U&=>y^4uOe38~eGYrG9)HZ%ne ziMS*hFK-D|aMe^*mSbkI-1=B=BRB6v{4wbEYl`ojMA6;J@~+hug&cfolKK|E@-90> zzTJ9$lS?Hl*Vb;4uW^}ZBk|fuqZUO{Yh2D=ciPsIbjk}i*l#_ryJt+w;M#w5;m)I) z`s)i-?|yB5dS$t|^IaIb?4&Bs}N8j`4)# z3jVrHARg((a=SK{0j06iB{3@RlE|%6Q6hW;++M{!FMVOt<1Qw_fYE2m^-s;}$T8;y zB06qXcDcQuXr2%3rS3O1V;yt~`|Y{;R4z6C*~M^k^jeX8+2?oi=hQp)q zuRYGb=$k;oKyO%pzvbV*XcH(aDdyd8cH+&@_AMbjTw4R{m$TPa!Al`$+FN}V1|v1X z7&BYEA5s#q3GVn!O<&mE8qN0Msm#I@Ue!-1qxgn9ak>_UA~&rsm$3D==V8rpZ|hu; z^yH^<4qS=moo9zW{mU<=2xU+Ww^o*+&rs=)nqe3_8sJYOCG6?oi*($t4QoLpt zv!ZtGYZ7=vNKA@ESWX-rf6z;uX4@V|F}Oy_$FSwhO$ds2+_F&%|24a+dOaM4Xe-)M zUnojcKGI4ykoI>PEqq@#?1g{@%j&t{TOrAT(dQ~8hfe14*!y0j&9mKZ$seiLdbadg zd$i5+fz^g8euxKZVO4e!>r@E2b>&>O>^7sR-oTd--fb=CAC6d>*%x!Q6{aT}jm;~U zsderp*nNB`G3dZGh1&nMW?(4a=vrVEZh^;ZmD~z}(M}(+M9u{h3{9dtW{#Udma;1h zo@6E!X%-h|n6hcYKe1ZBUoB7y^qH(?V&T#@5gBy8O_Mn2r4m8dj#d$+Xn2xGZI@Y= z*H2MMgUL&fV=?O#-pw=feyyvWK=bq){&{)EMIm;rimR6`GB2-4fAi&{bqKqSp}rex zMc0lhxSMz-hgTh^fRBtg-t>IPp^JVpYqp$`<<}yQ&fEC{r@hkWIkR#mYJA}hc}AS{ z33W3?$?m&jb}c3Qxt8v%f`L9J1uVZlEiWyTbT9-~ZTCv3hMZUZ`HgSs5|00dQumct z61E}Xo(D1erpDh~bPl|yj6U-;^HFBYI_~poeLZ@6G!{V7;}yE4H*@=w$#0%1sy_Z0 z??YSOpVzn1MpF4wh>v7i$~G1Yu#}#(6EIJ{W9JPH?A)E1b}GL!)JYwQW7^i#u-cVt zrn*;HcLd)XPvH(`s(8>A9C2%6yiSnj@iHYHuh*IcTmJfKS^K*QGaJP>D3X1r)e`K} zI0pNZvdPcp4|uAn-1E|CVzNZSrpt#4D68XJGdCQ_3a+=;wabWTT&!ciw>5ef{dS3m zEtm2pn-Jw7eK5C!5$^H#r&HaR*G=}G>X8Si>BafjJk;tbv}RQ_r3zgyRgM}q6@7R( z$4nUMFKVwexQs_&8uEtLMQB{1y?lCIN2T;_Q2q6?5+deDb)uF><(1oSb4+4nZd~}~ zZHJCmA5o?j@#49qiL`t!^Fwr__Y%g}ofF4oeFyIQ)6LFeZGEt}7kgpq^q`^91=Ib} z!=10p^2qvzycLVwR-l8BcSDiyW*~1iBj3qD-q=LGIKcqo1xbNSL4lwq5Mmto|Dyp; zFlGkff_Ok|ATm%6${!#6u+R8Eq@8tKR?QdS>F)0C?(S}o5)qXKX^>QrMwC=k5Reol zLX}86->?138M6PuN|+FB z{X#bBj*`XI0V)M&pDVkXDxZHovc&m9CpS1dT`l89^keT=?6UDl411s0Q&Ec78(lg> zB6$y0D`?sTeEl>iPo*2Lm1M?^mEOxbwq0qkC*XKdwC2L{{Wj0!tIHC1NVab!JLF5ysTt*MS#5eApTKx>-dvd`bmVjpfQ_LmzVPi`zgnk93QCf<32OVewsPbqy{L|&7 z96cwtE)^S4hdrq4zDPe~R{$qQF;Ib=Adp`Cop5kkMF{@=KZ*q>@_+x2>|PXp*s+p; zG_r#s6~EV@r-O0h{~Q;@wg}_O|B0IdyZlcQg!L%{>VK~nc}IpF-~=G&1|bO^H3|kA zJrO1aE)^L*IxRLa79BYODvvl5hmaH_x0nEnFuw?wG^>OluP8eMGc1Bq%h-(JB_E0V zjZ2+yA`pYz-MyW<(lC||(?px8ZXJhjhz^11X8M3xx_} zNWqnf(3`h%e0rU)`p?v`r(Z0c%SuYjdmx))`&glgJ3fALG1>H_F!INuW31I>{>DwM zm3k@L;@XH%*Q#hi;WBZNjp7xmvgcRuJ#te##fG_kcKgpP%O`d9eZLvdOLd-L9k#Nu zy#4Z6G2jzVxZF<8vy%g@_jM=RFG9}u4wPoqSI>WB^fvqy>j?*#!p)%#v%^40sO&kyu5L;G=XKJ|7J zV3(!^m)BU{zMewqJC!&b@O?7X-J{9WyLyq-9_^&x`J-0ORh-LLtp`FGFFM;!m^p}K z8V(Cu>k{JAYSdGWsibujzGC_ASoG_ZyU=K6F;Bld@8j<>+xMLD>@^Rc%vB2Wm)%d7 z@<>u85so?_+_<}YrTD3aitDpy&ipBSw^kl4F}|HKK?zv6$0fC_B!9Rr?_R!}5a@eo zVIp=sXSjQIZL6W<=Xz+1Xpd4~?8tdfRBYW>iOi6J^$&6rFwt~uV}{`RrPE%|@b5{s z(jCT*Voz{x#>98uu_?QMW3^mA$dVAlc$TDHUq&icE16$g?fxwk8%5`4s|A%v3$rWg z7qaCUIeEDzShrAe1hg5i@~9coO6{ABi3tQ|DrdS|%X5uTqCe;v#@1O+!#m%yBs$I| zB{BTaPw^--m6ko$l#$3%c>A6H#=fm*+0m$v$L~QF{y8VbmBj}7;#GVs*Ug&u+@q*3 z7Kg^d3#YuFIgY#avbRn4&oyBjmq+IHVbRQk}Ja{i8_rs3_&($Mn!6S>!vizg+Y zo9bTPnhYuEu$9X64L!^$y8QMbvsS^%vcM>@91)K;3%DX$rC#mit#*=He;tY2CfXnUF-64!Q9D?C_7K9ASr)?Md({P%`f)CRcbfi)A?<~_$~Nx|B6)gTb09#cOlZ*H+H=g78fUj zKli@hewrCHFD|{=;o>!w*f-HYpA8NQ;1CQB+u$${4jtf-2oCh%fXWh%62SuRF$2O; z03;6@Dgp}_kOVe_2!uZd#P@HXKjp|D#2>LD>91wOS)g7-M=YTKDMcj9|EdeIp#uL| zKP>Xc_Rn(v)PwqGS*Vu<>H(JsBo7i<2MP-!p+1n|f9(J0D3B069R4B+{<6Sd$j7-U za}41W#0cG|CD*v&gU%*{`@CN?hd2FL2 znP2md{Euli|CRlZX*d6s{eMiuq5FSL!zs@t(&MJzXbWBtF2kZx7k)WO$ODoapa78eVGhb)?Lv2u$n#$oK-!1T z0Hlqm2q5i5I7R+yE6VV&fQqzZL8`EzsDQ2l5_F_(`?n5R6c*6IqVmU=1aSl#7{CsH zAt5%tHF&G4g>VDDvvbk5mA~*R3!Q$cTW7nGFPqDKG^Y%r4ZZ66Q z8a7|y+=^wHG~inGiSAgAbh!GN2~FAE6}Nk{UWtMxO(D<6%{^K&%r$l{*A&w%t5zD@ zq=X?FTgm42RM?tEXj0t{)kW!XxpG1RlPwHphOP4|6g0Yhg4dP))e2TOqc}gX;!gY` ze=u+$Tzvb6w%8+7?R~b0A3x+K##^K%0;{`TPVQ!C*=ZCLq4yIjb#|?(G6g(;+AA|B zOtd1O_dZ-qv`UFaCf?i#=bfi9I-#2PM-04!6tX&jklSe-e&r#SZ|=QmU=GTdBEd=h zM)o?sN=UhHg4vJEg2UHcXmOIx0>Pg2#laHt#RkzHtW;zL7uWHPxRN1lB&?Q3BqN-`4kDk77X z^xC$iB!+uu!Kge9sRC{x$EEef zVYPBXOD}aLF8s0~|5*5YS?DHTw6ND@o*Gt4A3JQ`0PV>&63QGqk)qG!Pd?bKGM!1F z_c@@Kq}bf3md*Duz|YS9N-3Zher)vTtx=gzv|8v^@v3^wMTE>2biO6?h&Fg`?yOp^ zoOejrt@E7SP`JJEjY99re68b8iYp{)GvrDvHFF!9E2Sj`l*S(4`;B{!)%MgntKYkA zGRhk}VY2qBW`{71bsEORx@qe#nAk@s?&R6`X>lc9&W(!uT~O26+{!^2_RzoQI{y7= z?U>4kmM9-D<37`&E%UFir$8Z!Wamp%vs&4=AW+&XW3=;8W`DTlC$4%YHF10G+Q@f# zHjhivQ@3sXH+o*~#He_Q1$~JQ$9|D*aztw}w)s;s?VDZ6%j?B0SOo3AOEIh`KH-N8 z-PFjAme6d)boqMPoy|lv^!>*7-Z%@Aknw9SD(WutP7-bHV=_v<*+)EzEa#rvORP$i zdWz-A{5kWBhhn0jjr*K?P#r`u5AO~_2zskgqStkPtG@!OgV zBIb{jv$}(+9S{Ao?FJlWPNUTu%37{W zfA4%X`nue+(IFofmFlT0A`dEpNl|~GxTfc}qrLDK#Lo|`YW(uy_40jDhPCadk4g@> zgg1XCNTLsionSU!O<_@tJY2yeymMqi*M@zuPQiY@>y@b^N&h!;0y5qU@A^h=Bu1Dw zts7~)3D5%c04E?0NCUC}1X4lK2QC1Yfh&L=@bCEv zw;&$|!~p+}k68fuf8OQ$?{R+3VE^acC;x6IErER%*aiOm9KwfZ5hK73Aiskn37S)X z_wh4W%54uGi)yV-0lf*LOdNmmUvf zx*AbEez0NSkaYR80&QM|?yYa$(zc(L_;pU7X#Q3uBMkX*FJYcVWTMtXuUa{6*j^Cp zd12HwzVU99JNXtLNxx?G5#cFb2u-CwYtzP!#ZP|bhW)NQokq-8e^cHkcR}U6wRkc3 zSG-m@lgw;g(F_55AR{LS=C;=(o{Z?91;#-`F>|InktR2V{mrWE-pEQ$^)f$wRpuu! z*?+h3>Weju4s?l=@0V&?P`9ktUpljf-RJIX;vLOPAwtQAlN)yV|1n)X`tLrNf7;!M z{L`xaKP-vVhkzU|1Y~z3AcqA3xuy`1_WeI?eB>HK`WX>${{{~v0&?vkAbpSs$aRSD z_i)isPq!H@*W&W~a#dUU_&+<FC!2J=g7#nzLS$u0Nk1t1#CEI-QMeC4z`faA| zSD*-WVe3;ZwVZqtW=eWRtxKK!E0|xi)Ahq9`mCKL4%OIs%}y%pL{wvmaGF><{coK< zq3TVI)vu89eJIL(m)}W1Unz84+TzQDQ^*bK5#tVu#k} zL;CvsW`AN8v?{UfC4gNm$;J5bEuccO~KlDBH9(YAh zdOG7G*!lfsz24BVZrK%g)vEX+3f)Sof(D9TYxl8C1}Ig2GtI9u-kxL6U(XCkSTGJ2 zFr}wBow&o`%5{6&$Hb^%m(r^F)04%Q5pU)7UkpkfoQ9t9o)d(ZKd=AVdi;%P;ORb7 zu>+Tfs=A8A1KMVEbIhIV>xN~Ar6cq;x=)_1`9@tejQMKk;F^O*26`Y?l~A6!oQ7;fh)BO3lg;d_tV(YHJI;)f`I1fX>^ zoNTcw3u-?uNQ$lXdL)P|^oTW)L!mxOcIu<16x&h-{Q}y%Gsp9b-$)1@RD-%d8zok= zQTMdU6THsyUAvioLYeUVLeJS#esONk$X8Ajs2{J6-o*GY+ipwy=#BVcNI+YGsz5J8{7Kyv_0jK?&jx?{;u`z73*9|E)-=*>tvu+($;kPbS zn&R7KH(KuKBuP|g$lXe3BCJ%Mf8SSNQEKatw-cy|&a)VO!|vui&w;!2R;E`LHbdu# zYa10m)h+f$(ULOu-*IFoh-QcH1AJ09NtEwx@2W7@O!#7G3|t%zsFU2p z*NODSL_b$)_mE3wA~h$`Mw|^kf690@pUllAZ_%@{Z+>lAT=#m4j3e;=TbaNg}*-- z=qJDb!jGND;km2VcuP0b;(Bf7@*9QX>X(=wvX9BWyGLCv(Qo>R86y8Gnc{{TYx4!3 zi0G)4({c+Blc9@0>=ccA+@7BMp-;>?CJ~G)E$hBpw2X?~`b~`go^Nyo!_CL#5_$D= z>M*IV7~Zp8^8^>)B%+BJABnNaefZs_MT7I;)4?H2#N`)CD{G?p-ou>O5@!C748?T^ z@3%P1s#xu_=48Cw9cdJNa#k4i_Oq+C=dw16!!uthxq>W& z;FkF(@tR~#1wKdXX}OslKP)`IaP=@+V8coO#v775y$!KuUdo?(mZE>ZMg4j$#mVNz z&%VW$J>v0?Tc;8+A{RIh&7Q&y>DszmCvtOUTZJG z!5@k8Lmdng+jh9R8=US$ z4@o8X?DfkoXFYl1SwX6fS&unh$tC>ht2U2ha_Bq-UM+=|jOD(6J<7A$j!TgHk?*7M zp@MOT!B|zWRfXXJI?GYFSJQMS$IHmra93rq9IQtS{TF)Oct5wcH`%=AzlvFd>cH4C z=VRYQ%O=CZ9WBpM=N3(rvNbrUNqv*s`?o1^yy0?!!s8C5fX53)vmDWoyoWqIx__}(f-tu!w)1Y#OOuxa=`Alw>{cPErg~yx*XbufkdpIuBpH|I7 z*@^8x+D4KxkUUdM9Uq=d=r<0<-CVO3x|k`P!2Gt2ChYcopYx&R>F3`?s{zsrxr1Q7w=T)$uCzW2sz?UXsR=|-Hn zyM{?)RyPZ@2UHqs7@ka#)g5wPt15XWrs1PvL>ZWhbREbJf+ zq4><}uVNIRy}QHv@AfWog0qNa3UuA7$27iLbL6B|C_22S9dLM|rXte$`K=hjt2n=26F(Jvv8SCceKn8CpZiL0XiQ)O3k_a4e*4ke{6o~r38%&-u1DVK z^q$T-i*05fS-TC?K7E59&{Q99KELHy^0}AAmj>^itxASke3e+{!E+;mAp^-NL8ioWhrMxN%W=lK0(shyWk+-{> z!NT)}X=dZgPcO)1H~6l9O1Nl`C&1WL&L8(p-b8`)%ClP!I@AM;NSRvmzcfEBVDENV zmn*ks~w<(zsME5V6|q$s-pU8{ir$J|))qx6N2Xmmk7rr5P$ z6S0Xy<%=P|i$qpx2rxg1uo$uuv{Hrhi)}gG_2HnOeA0Nm&Tcm1>Bi&lN0^_!QPBJz z;9Vm8{CX-Nbg(fmrTY?$7ei^7-b<7Yzedl0F34%{B)N$m%m2-?&|{Pv+S& z%`Dt3UAoE*B8hkOaly7j~U%pGmFcO?s_BJSK?{+`eWQvEGeakycs&HGYOpUpd->SbxGn$f# zJQwtfzl{uXlbJ+IIWRMidvcykJN-yIFSOvG5etL6_xu z38%<6TOOuojHZ-w*qX--^WG--w;cJmEwX4X72SEAu@;Vcm4pCOC4TKThU%|)+8-wD zqlBL=B!=#9J`8j5oNauGopybR@Ezy;kDCr&`41?uthM4ziQm1eZVb(dZlvZxvTYxOpbXJ1-^+U5u84J18u zz7Ueowo*A(T}j}$VgGUCtzj<Ea0<|dON{s4v*l@VtAKjIrjD-MFPHxh(Ifw z@Aog`Uzulb-uEZEzbx~8D)$9t$Aoz*Ng3^Divw!9WqjR=4|QkPCKK23?!Dm=`SH>1 zX4%{Q7neuwu%+?FZCQr=GOZG`aQ;amd-i2~+Rlu~4z)W6W4H5*(6ulZyK4LMt-G9q zTzxia4sYbmV~IB}B=7W)Y^pK|$LYO$FUjR+YPh8#zEq$1I^#6XdFVQ}s`I<|5>t;# zt1?Tr6CYBOhnp*qwr}M+7E(LIWbE}Hzzv5Y1BNeWmlIy)Qh^iB}aCa4|nDTLy zYBRejJ&+?AaA_AUr0|nnNXCyy(=<7ZEV3vr9iOn%;NGn3|DIp zGVkKK5OJocNpJsB@$q8wBS&i8a~szvfx@GFzHXJ`cTSBl#^nEJR>hV040uu*??LV%H4W6f!TJ ztu#MPMveA-CHtLWp)TFO_VR63->a8q-ZYsgaLYaC^O84LUQ@^4_c6X<&#IIZWp$3N z`TgOeCYOzt>7131e!0iJS$+3iN#9AOyN#tp&^_*??2!M~bMsTUEsvalc&AC|Porf` ziP)H_k^XCLPYxKyzdkXJC|mwopp;!BobRLJ$ZwT+a2+o!V56lwNv%#`JMq=LuAVJ> z4+#POuh`2QyJ*R)mEUGHI0uIwk<0RyjP%=t<;`@JdF3A#b|h4{pe3{8oTNrX_yvCZ`6w+tEzV>nx#|u9t6IL-y?>1A7No&qQHBo2~qKJ(DAX*F$jo>(69+{ z;H^ivsHg<^DDXO5Ogusi9C%w28Y(6c0UkCAA-r7|0~ehb2ZaC!mk)-p>$-%Bazu!Mvdl|>(h$ml zLaQ{uK7z%7cb$xyuo%y#%Z#vmdsN<|0~MEAA~VoQ{=;*r=bzGohO38mg){ z$}nyyJW$Sh`LNMB4QH=xqrR^(mW;M%r3R(NmTTdIQ@~AT4#(mNok-`hs@7Ora-O2; zG5j3{Pszr6K_p+6E31-A&@h=KoACMe-Kiqa$yQ0P>&#OH7!IAw-7=zgQNJcVbC4DF zDnj>*vzmCVYHC80`B;CPhg=UYPlL8}J*PJRpxX;3=8>Dn^)>|9+tM2LPnT+_#s<~m z$e!SNH5JafWc!oT;r#YHlpUzhl(zb1HBH-RdDz-0Qt#EoLC=cK8`q*4CVI7-v^}X| zS*t;Y;&`z`&+2ErR)bMlyh*awHFe%#c^Z!GoO;H{J>r8mo<;&Ijt}Rl;`PiQwi;)m ztS7uE4fgKN$fzyE^74wQEQZJ~aj{X2%NRIBmW|sM@=`yRuI%Jh#k`+7R6swo6Sw!L z;xRy1@F(yb_h>H(DVtqTKG2@*vLGVSf_qV=vC>6g5 z^0J9{>gg0Q9gbHS;ICC`vJFnedbejTT@czOvWG_gvP&$%^IhZ8@T%am_(rUgkPsX* zwxyuHfcWQ$o1|7tTwU{GO44(W^$BeTh2GU%RDLjh1*m;n}tH z73(TazniaLOuSa(_~!M)#jl-mxR^!Rp{V>jKFScRjf!dV*XRu8-MR{suf{q2k@eR0 z_93WlS@cap#rJh6RhFnm1*|bu*fIuFGd>E=ztg;n$uwam;l=xO#QWSsH&!=?0egLJ zdO*#u?)9B1S~^Q5%mnW;N(K*mXM+}VUp{`E6eoBNRws}0vkff!Or6i7 z(jze2gj&sH1BI@SpyD*=4iQl;<-M5RS%?`_x}L6;;y+2mZ(tc1U>qzid&QVtEbj_~ znBt?^{Z`aeE`4FNoX$IUo+@BGHop4d@aXI)tT4(3$tRQCR2w*Y4uR;FaE$7HE6NYt&~c>;4@Sa9rb0MczitZZf8jT&QJQ8NBZ8rDFyfSANxcK ztW|M0{aA>(D7ixLT9tj%JynyokaeBN*oe{T;fGk519*Ft`HPas#I>vK_;fF3Wj}q@ zzM}XI)q3QDrH5fWVTSX`=W;=RGJck=is+})20bkjcLFgzYl}q(s4+(2dxG5*Jt>12 zaTb*s%?{g{Mqg!X_00zyI6sSQe_uB#>CX+#yJw$fewpd<%(>$rNgIkz!C}Dn`{;|~ zxXP1{?%G75_3EXF-*7qDeHQj{&NOq3t4q2=KH`bDK6#^q&~nJjgdDGiB;NgBHNvNF zF9oM#xh-k=)(>-*s>S6e9{XXxvpCv#g(s!U=c*vH{al4-=+^sg^=8WXvb~_r@N9US z7<4$JAzjGOj|>v+Pj@oB$qWiW|Jwi(v4a785gX_@f0hONpM{Y+{;KP*vOndBKT_?V zf_`&R(DfIAQad;qQh$Zt7&Ko6hqOC9nt(0nC6sFbos{Pk>)QJHQEC z0-^ywKo&3nt^&b;43Gc}0ENIDU(lOaS=6 zGr$871^j^nKnr*U+yf|pS%35_!XW6r^UmK(VA`1|lQcy9#d(-p-M-ZjqsFsIjW8-v>f`MboX@2D zODOc1gDCaZH^$g%`FbK8WaKywUfn!xydJiczu3#txkaU;+ZNuu|5=49Mn z3m=cJVKw8W7p9fGlWli93o&#!+}%+Lf8%PIO|TyS_$_Ii_3CW-BJN#F-uXS_y& zKb##GCOk&v=z%WU>#ab;pYk{v3~D@B zk90KZ47_fT@ZvUiTqb(&j8ZyZ{qk6&MJ z)$ZUGuMpc*mcsB%&F^!zji{n6#Wtdat2=5&Y<`qB3is-8AU1PB7*yRZ%mt(zB>Ek$WN18z zoV_C-na*7WG%Nxdv2wOEoMwJ8>b~2c!A6y+`y}$7@{H|g6z;`1U3;Pci#zt?MdyK6 zwKUBtaHh09hnJS&(SQlhWK4MWU_u)M6YjN`aL~N&DJ`SFvXwIdIKo zvpYH$Ki=&g(pD0uy_wpL`>?cKFj7DoOZ$2hj~*t5B(l1Pl$H1NggI=ar#9NNNI{p%gKo8iI>zl?6& zU?<`Gn5@LJ9AsOOnv$vGNl%i$e~{|`@`&7Ka9c$yO2&EeROBO8ynPktTsm9a1Cl#l zI;{mYOlorOJm$wSiuL>NefAF?D9a=Yh9sKfhP9KC!Kcl{d}vD6!yumR5N;#jbJU zcf;epUTNja17@<(3aa^@+7x`*S1fmiN;OCyeq(15y7%^W9aqrP`9c@H^{IBzGa5pN zgz%_&pnC#JfG(6JfgA_Mko5p>0V-e%aDZh7!6zB?BJi03DGqrrun&Na z%r7d2yc5U*D0cwfArkVUAg_Xa1M&oXk#SFRKm_=6gWVYH$aZ-HPr$YTAngKVoYO0? z{W%{%BK1dsybiJixCT1XE`JVnjDnm1|7wuMAYViIUC@!wbrV27FB#=J0c$t2Yn1M1Uo9Q3BJsb&x0}> z$Txyc2@+}dra)OFfb0`1un~d019@}Mvq2*5APmrhKraFL17tGzP=K_DGG4G1fV78v z2Iz%QRs^~QfULtA^7BxR9K-KmL)wYRxHDuw&;qXkWW6(B{|a`borDbQLOyRJ=mB8k z0;C|%1AGBn9q&NRK^lSmBIs{Gh6Bd{a-KrxCCX=j9LknJhQV^kd4l-c zf<)TF$QZc>z!~z$HIHoHZLrURM9w|r{WHk<_Y6QjJJPnS0o@(^XJ9#AUUV99agr&X98tIc9?(Rl%+T`gH&~RtJ#31NN7o@4`Ck zAdehRZ?LsMUIFxQ0J(1>+bIJ!sU%>W~mw?dv8q!5%waDBmK%jAcrB3+^3>I7Xh0tfSf;eh#ll6*tbE- z0i#fNAV}oe%mos_2f03x`x|nN4})z6sT<@J@r^80^Tk(+^Ao4&$U%^m0CFEeo^LUrBkM^6 zzq^np0Er3Q0vl3>oEMH@N6xQCup{4vkHDS|dO7IL0CEl>*E25Idmt|cWPuGi{>XZ! zpbS~Q9r9=3;{+hry(!qO0pwT}fxH7gA~-TKGhIACSqTLN@?*K4xAqZ#9{j>IQ57X# zULGe?SCB0H%2tKN_JSs*d21(jn~Da8hJ&%Nhl4)9tC>E%RckAHlf4?7tvI^4NJWg~ zTUK0Np4@Pj+_@IEnS#6A&xcyc`yWJ*rXWGN(6F#DNC+4h$`ceC#IU3!)b;Uo=KF-# z!sBq_Yz+iFa^rZ4$g!y@n%Xeh$grp=w%R22T3XPWR5dX*W}8`O20N&R#fg;_Lb~>c?#E6s>@?tojZ+FWcp%M}j4D~Tj^moyWvE%de*lTe) z`sv99vtx5}uoDXlY&VN;`KgKdsHvf;^tVwAtE!@^G&P|#-B1_zanR;=%uNt@6%~&k zx7#VbmzOB`Dm)w|oSc}Mq2&`^7Yl)aK>mHcA`uJ;iNO}Kesp|%oVhPTYqQp<|Cntjf^WfNs zgaj(@%hlN%33;R@GiRCV(OK=Zh;2QLBum+C72i_T#ntiAkqK`4Oz@c$lagY$NB+o1 zMa0KfQ_}y2vGQ$EOi2lNX(|aiIy#E228W}ap`b@g2UeSphJ^n>JLPbBw8Y!FPkcX7 zadC0{w50q=acOCGz9{`xQGxKnXk;WaO)N7NiHZ%Vn3xzlpX81p2pY;(lgJhu9v_dX z5tB{cJ>DWyEh=+$b##@87|duA3<`>fd$@6_@$~8C;UeX;?VJlLIygGMy0XEkcc~w3 zeOCBQM#RJr8HpCoipt6oo4 zacpUc`A+Ty77PxK+-Q#Htv&c%X6oc7Xn1%yQFpPU2fAs;R163VqN32lqmqdeTD}l{ z7RQ&DQPacIsk$ru7H$RqGyUg#5#aXlKhwX5k>{K`U2i@9n z_ih(Kb>Tl7Ee-q>*&TX(NqehoIR8!7bHAqA(^M`g<-^Ysg+I1^$3!VHI@w!ko?vER zlZDT%a#sf6MhVc-ds*k2%8yj>&I?DI4WO*E{I0m{*3&4fXJFOWzgcpkZYUn3`3o(~ zL?Nf>LV-&1!)G%44K?GeBy#(ZI*U~ho+g{#Lbi6`)!#2Wrf{iaFPHUr%V(KbB z1m%^()5YSjX&HKD|KRaL$WoWIXX00*Vh_u`6{nl8aq5FPg&1DE?f5zA&#eC;{=Sb= zwX+WT0g;{L#dopIjM=kC>7>`cB|XYyy1V?vf@eA*?;hdDMKxE|r-H=g=I^Q4Uh|A1 zu{C;~HrbK*8p861Ye<$vKw}MFg4rSJpbR>qy0?}q8633$@xkwR-<-z$9FBOUB;T?%S zgT(ak@gl-Q;(GiR9@Ii&dvJAg*&y*f*7@43kr*G-Rga$`aXzLT-ozuZK8h-X6p(ly zi?7$Uk(eLyl93ch+z&_eZ386s2dao#0}}t^LE2G25(7k}(Hskj143iEIfBFjAt`pU zK;nV$vG`s@VuI8Syca{_f^_u{)*-P$%t}=+An`$-t|m<*F+z%TGG~!EAr98v?MSSU zp8KlvNW736^A15s%#eb*$`K@P$nVO{D@g1RTVZN-Bz}lr=~f;RLu5_Xkq(I?!o%di zj>HmK{t!8Z#1o+m>8M0vitwBH%_DI|vh284z9?~j!ft`d19hdX1V=PvdaA0pA^`-&wq2m)4F)m|@?cuZL+ zCtwzlcF|&0KM{Sq@1*YKGg9%y_)uy{y(gaOSxmIz@#mQPrPimvAGbXH*!hdtL4PXm zD|5c5X1sjhW>s%Y>*4LAOUmI24@9pu-nd=Ks#7lR{Axa(=BSR#z{T!kmq>HlPT1q0i)vt=}qLRaWtJp_e+_i1xL|UK*OOQ`8wG-ucBNN5>tQ{Wjos!yOyT)y~wN zAO6qdwT-j)CumH2%8HHmya;SN$I}HPo^}vD)AE|YiVrqgV+~k2a{6t7pOnpdSSaFt ztFXaId5!;S?RNcj-TujoE05;C8>BovP+3_VK&_;h)Z#oLYv)Sp#(LGfpZ)Us#`zr=TSs2NV<(rd%b*Q5=r|k)cvE!&*v7$ z48vLNYAfCApMHcidlNB8dKBFISn55s5OHCc+K@)1ee3+86-G4Ws_HX4*-;)7Q$hx} zm?8q2wczbu(xW6)U(AfpoBK+)^B<@T!n?TGDc{hhykq*cY2q(&DQGYeTaSKLl-&0B z4@S#(O{v9#*37~W=xFmV*G!mGtv+?Xk2@u(bT%JJ%rxqJe-y|1Yi-$ugs^kfd&ED) zHPPCZ3Jn3PQ_i~gRTEbm z9t37mIi2aG*sXMm@7#=Fe&Ilp`T|$NRpzU<$hxON`j-|5#%~cGW79c&kDU3?vE-R< zMV)>-S-ofLe2XRE#$wVXylc9@@hCDhuqDJU)%X?`37oXN*SznY&fMZxWs>`xPDbtx z^H^B{ySc~v*m!&eZtDE%>s^VQQD@uX-2)%dLU`Ut%ear|7w?nRf2s_@3y(7(l*b`a zH?gSPc!y2&NNT#hGR5V~%K?mux18JOaQ~CkyZ5YY~B^8BU7Vse5zn0p`@@ltMVm1Pb?*&yX5`X7U$ZChTeboyjijR`qRDNX|HC#(=sVk zea3a9*|2Y0*}d0McDF>g&nIZ);G)x~JMESkCmx>TijUE6&sb{2B|el&w9R=eoxIA# zUR+|7MLi;F&(-u}RPL3xCB;*-7daT}8+E2l&zy%!`SDs_nl+=n!ER!g_CoJb5co8k zqS(@%IyCAfe6>TqHJigKP2BR_;Dy^2F-N223OqHxN0Oei(!t91jdn2jgE$O~Tc_JXI>oqDYwei_)z@Y*(sFMYp*Y9Q+;^)e@dp*5CN%%X4o zr6wUAk>8lry=ldpPm|?^_)pe5Lw?JBA=*@rrG36EEogM>pcnTV#1v2GTpP=)=cf$#6U{l2`YHyqe#R-02TCoZ_T zCyXBWC%6X$`9S*0odBe73`q|@kk9bZ)$t@BeyDb(+HN89EQAz({x1OUqI23l=z8!rO6!diC)~&>YogKn+ zclQq?-rf~c?d|3dL_|z%QBl#+TwIF3@biaSo}JMyjgHz^mzFLX1_oxVefp%C92xnH zxw~8CUTEmu%}bY7E48(|leV_-Ps+;HRELLMs`B$suf2J*qM4QTk^TAeLo+|W zCkstYmosZ?TLMl`8D>*cUn_EPxfw`FS$iletKK<0MBD%T**Ho{`eN*Sg#%`2~ikjI|QY!OdU=ZMRcA7qBXLr(SZN2)8hK5Jv$&);3OiW_DjErhw zY#7K&Mkd7(9-c`*H>Wtgy2{nd&3)adva&ZUARuQ27nhzaDk_^%K)~OMj!sB|o?cMO z%d2w2+Ir({ZtlrtQ`3Xz^74j(BO`XTRaIX?d3kS{&d)1N3Jd#QjgC$uH#6IRF)-kY z3}--DUl(X*VX;;D{hN8dqM|G0^5yj!H@C*&o*u2l#>Q_hva{;yvo%V=m=7-3-% zXC@|Fxe5vz!8tkgoJB?R`WG(j<`)#4T~SeK3jZJEeR(vM(f{r%Q)Hg!dCm|r%bbw0 z3}u!nWeOR~JP(-?QbHu8h>&>-8Oj)uDf18+Q<1wj&b{aUerw&ezU%&R|G1ykr}LbB z9{cQf+h_Yc?|IL2;^U*Slah+%pFXW+m6TL--Pys~sI8r}uBd488Xdj+hLzP?iG<`F z%i$s2+}0M+L4UtfLr;%p5CH)N4LP|O*XpWJi-pB>eQIisn2JhwBsH~^U~8*Ua(@1% zfxmz7{)G#dd~IxAb(ongRMXO)6>)b@nYXmeY77cWqt(&r%l!5&;5i$coeCeHzkWhO zkxXP{$Qf1D&e*jz-u9}hf!h=mvOE(LKKbV6-)qmDVWb)x^DLg4k{J^bF|?7E*7m^1 zXQEJ7A4|f)!6)G0a8xrjovmtaHhVTO;9U3W)w=SH8!uWD6JJWDq~r?E&PojU_{3~3 zEQkzsbSTG2NL+Vza;hASi;Kk=8nP+X*6x2&P%x$L=vY2tX!z&V_BQU;@-pXVTiZ9C zzP=B(U%y_ubow+6Np;SKaKh;5Fk)BNgef^WrF-w*wcfF_E9_QN8%e;##Kzg( z#rQ=;M8;rc^}Jb3%;J`j(eKyq-}gF%hbK}uHC;<*WaO64%zV#1JuUflZ;yN>Ev@V< zDXA!%gF{XK*RQSx4<1C}K75!jnvqcu2m^z|LLMG(-N{Mc zyx7=y%rqjGc!Y%1bPWxow)6AC!%9kRp*L?<^(rd11gEE$@Cpcc850weGL@8c z`RVKLzpSbG;zUIy&Hvxu`uz`EPR{Kc_U>tPgRYUP#Z8u-#2QH^Qdfn=H^eyMs^K1{k*g8 z#7*1UvAvF$XBEEv6Upr)Vf{H^MvS;T6<5+QZ<@Nh)wVt6_qRi1VE*>S`-_*qh>RRa z+}W5uN4!TL@droVy!y3CG*bK2si~AG(5!zbD-@UFT>}5}x9*zyNgm>Qk|lM<`<6Ez zIV$}kxyQpDOP=ziokLZ|wR0w{i?lbn>O~04;WMw6ZcLZc4GIfqzxxmr1}jQ0zn^`a zo9aL6OKtZsoAJWWiLx_p`3&oQSLNbGxhz&a`P73V*H~NWR=$3aO7AHaj=`W|A7|DU z_^qb1Y5Tz2^crp4T$+)60JhB=>xzFnm9lxCmTsy{X(>DK3cjMe{t`da`O@Thv0Ihlk<<_(%w77@?MC% zi6cd-Nt9)%kVIKq_RVFFtGd2U_;1UCDPU@bU~ENO%_5lTeG> zmZsde?(tk#=yFGIe9xe4I2j}R`u0^?vH1Y=FFtx~6u+1>lrj|E1)5A>gJ;>3I)Cj#dh}xs$$X=*_Ivjib}L_T zt4>VH3}>D_Gemy(r(4BSdJK7$xrhVYjiQG%%lp#77TEe@NX(2HL8o^V{-K;n(Au5v zqx@Cxx}9I%F1Bntjdf~qM<;iy@slzq1FI~L z!hmPyj^7i6?-{}OpO5Z?|C~U=_u$~Q0p9Sn={?_h16@C6yWedI;Y+$LVpHmREfH%?E>d-V74r`E%&TS7tItnY zIVgU(*E$iGsK1~|uub@FaytkAPrX(?jY}oTt)f0-_KNPd!|y^ytX6L1Oi52^U1HVf zI&qQF?cX0Sw<}&*+@0Uys!9on?X7)ffU z!pj<;2*_OholEYSLg^TCHDSX~Y(M(5)0h#lgs<;%J&j$$d)-dzJD6e`N*<~BWw$ao zIA=}?Ep1PCGT`8jNqJ%O<*q&{-x_fjlGKy0H>~5SDN(-mcHL z&(B-9(r~pS55zvOrw|e*BWE9L-;J{t8+xj$@OeK>K~wsBOuuhwtKcoUTl+uXcJ|0W zyiJ#C$)k!jL-yTy;=*fN>M6c0wj2LWhg^Dh#=wj(=SNmt!FoYHVQV;5zFte{z3?Ya z*RV;i^5h(ZtsQ>zTsPiye|(Vr02^>DNL?$$4rto*Tm*-f!g~Q^!Myv z9r)4SOA|hI0sC?*yW@n`7x1BZb%twqD7hr9wJwd{=yjiMQN37bxo7b3{HOS&uMdkl z!F6D2H(iLl&T%AKGuX79n$PQSK0AJ2l#-Jtg5LEqrqb8;Z(5RhQw%ger=d zsT8{BoG%L+F@E{;(TiHgA)a@(tGgT;SGE%b^`;4o2XG9Y4nNiQN&VFJ2Rn*WG=oIW zgqN13TR+P^=2F34iNE6c-zz8`&>;vW{rZrX$0yQ}ald{rYjrv;Ot|>h4Xu@B)AftbS5`lT zKB_f;`)P;u#;;0(@1nc2$-zZ9ll;$f`PcIJS&Y+4(Ru6DB;x$5CFQe(HO3_35*SqENnJdpNf9M7~{INg@1$6l!3mqTep^l&3S^v=cm z)NGm+Elg;wN>PHLtqsab-8N5m>#B zt~4AVc{%lnIATGFS@N;*IRovbA2*7JxGCbq7w0(pg;n3QyZWWt>I_Rwyp7sRSMHnE zZ#XB%iSdk6->izolc~svl{nqv6qYi>mnb?At=kc2_bjUKg9h-k*KK3OA$p zs*G-*skbsV{<{8nbJJmotWIe0+2KEO*MSTiZ>%0#S_QiOQ^l~2ukWuMh;o2%p+`H$}E zJl)G144JlM9KG})ojSB7;%zuh89muIxqs_j1Zmx}|JpGRGH4Rsxy*hu(tNCXAR=K~ zym2oJ`Q?8-lJWUXmA31QG{1XuvV4RsK$~@GJLQ$& z)rN6CJdC<>JgL_ry5}F1NbG2Z#JRC3y?n~@=NJ3G%nU|{%z(Jpt&#nzSSH>M(;Oc( z{ldsQ#V`U!So5O&$cYtdKGi?My=He-kb9z}nNyLAO#JO%rsBF&Uf4^Q_g+1ysUGxe zqqmU~zLv-_B_22>@Ga)Y&1c(&L9&*ldh27q#QT2*GWADaZ{URmmp?_heC@;*qz$4gf?_NSyZcKn-8X>WVq8@lr4 zxL)0>JL*L$8fj}j6=3Pg#F9{a?i*};lGSmWI>BUSqE+J{T*CTb6S`hyPZk>^J}43QcM#67^QP2^FeV^*`93uavS{-sjHOI_L# z)1zp|%KEE+MO4nI<&BY)ABPtPZ79CToLyj1`*wz!_}mNMeD5EY5lt(!`1~0hPdDX+ zZtPXCSx+zd2Hd@*kS=Z@dd4qz$WZHUrCuNNp{n)jz}~N|Ela~X{R`+ z5soQr`lravnxl}y<3qLfJ3>q6t>>6n9=4aH*yr!m{-kWiyZAF=>C*dad?R&U|%xg^UfU#u@r5iW>?(J>#gVLdGTGGSij@LN89 z^EEDubHG2zf*_e2z0&#F#lA6X9Cm(|h8^RJ!4>EDn0Q=1#OB9k{kiDNnbBT$?ySv} zhoXu8sn`C8G1eBR_pk|`y!m+fwQ9`o=yTUUMYb4p7sP#tFC}uaZ+~)7>nyx!EED^+~hCY#17U<`jJ~fnGyg%YV75dD*!rVL5D*7ywM~P$g8Kp~~ znwBk11U48PLdbrJz4Eje`}FT?=s`b;%!j3}kS~$0dz=1-;Xozs7`~|5j>XMnHKD=D)-?j>8KJ)x7 zxObsJi8rT!^OT$_CinNdV~)M=j0vW>%H{=Lqy#^Bw4hY%Y+bhH{(g?2g;tW$X!1kX zFt1yN{+epvciRKLbTS*B62k=T^}U$y=M>19uqy5GhDQ0u1sieAmZG;c&L)Rm`qt+6 zcizR0YS*Ch)noQAxK(vOF4HMsTfd1KcxkS7p|rf1rI|jLbdxu=N<`)^FN;XoJXSkNh=mTl*@Ymvr!@ANt zvjbtYvN`xtgpO#{uKA~ zQ`V-me~(Oj9&#%wz`}O)eM?IeBR_psSLSko&@Dgt>YJzX`TaYNd%o78 zSFY=5Y}T^GEKzKYM%caAXu8R5RMR1N^WIn_$&FjSSAXAijm&92wRKI^S5WJ8@Z1~qWCXTW6G|~o_*Q06sbYJeA`2w z`|&|_eK$`I*1cF9?XSy4y8dk5rB|YW@e1T z=cBL0dj8$lN?NCUciu2bkd?uXAl&Ei2UFVQa=C;)*2j9IPXtWs-(d$m6iE}b7>xa- zK|A(@Ofp9^PI*x3UwvnRONL_XnRPtNw?UK-@)CDf`X-pw<}8kbi#QQlh^z z{SkxFd_;Xl8;?PctK&_v{o37g&(n65-)gN22DcmE9ZhfIxi=V>w8$_f5waWge4O>( z2Z>KTmin@~6RFr&lYhzU7j7!uDxkmN?(genw(;~L?$rp9?_RT$&BU46hWFW?^pp=U zw$Y!zm4+D*G52G;jWYLb=0k;K9?OTMI5$d2wHJ*S0@W*lIENI2p79;_4(@=#-+dU3eKEGQxd+$r-U1K zaUVUE?WdaFIdz7>R`>61wUMozyQf>Z4;gM~3|RcR)1`3#MncXgm0h9J_s~^#buo)) zWi7ZLF5C-U#r`gfbyM8<6z!Q;T8^0wFCW&_FMW>*{PSF=-RsJe_wTy>q<*Hij&&Of!0))iF zuPxF?_lR%A%Pa1h&Q#Xq5t9y(YIRc#tqI}3rwi!$L2_;}Xh_Lo&TJvOf>ox;Kx1Mp zkV5;n#nqinCeKJ3r}8EOnM7XOF^lQi=Ab*qsf(Nf`gz0O83KatTqe6}+V$azAS2I{ z_4*gTemn1MvfdYT%bd^u7L-9q{fYizIRkcZ29fBny6g?1J51kx{Z{&8I?HNFTpbhO z`=Cp;f*6A?B<%saNz?)a(Y<gyO$aM8fCaDu1Bk_I}Sl`3sBc)H51A2L_H8=J(z#caw|V{iChf@horC z#@OPS8q?YP9BP`EifD#y#uV_mH?#A%eO|9*@P&-JQ@SzSxakv~dLE1YTu#5FnqJth z+ku4bo1fJxx25Gy;V`<7JAZ1446{Fc<=Xu#`K8@t!H;*m+Wmu$x0YQgL<}WEG>nO2 z6KY2-gceE|LT3Z*RdRnSVo1Q%6JWD?stc$8Z)a*+Qb@JRLeEI>liT&JyMtZ zrs%ibSa|)UCT>oXCo42YJbT`GDRPOcxF*d0Nhkq@_SKQCN=AdjA;Mf!vp&_%ESK~D zBHCFjdyM|JP=0o*4E;3An!TTOFmXWuf+-OR%nI^@8`Sr3AbP$3sm2;EjMPIkA_GW)HdEzl*m0O?7ddrNlqYJw;wvP0#6! zs6mxt*I9k~f_Xk4EUGs0Sz+re(t*IB2k{Ehx|}UmdRyy5t|@iD+3b4N<1Q2CeD#cs zA&@o_6TX_q+L}0NGjMY{UI>3@0grxLAiIf!IHQED^}_W6{%-Zrh8IS1hUZP0gJTR| zitF_0KUUmTo|?S(rgl&HV;I-1<+F@S!{rU%=2)=bzI7^^|MFT^<@Uuz`rVI- zul=m`Uf+9lvq~;kWQOf(MLTJ4Qo;K~3fcb7c2Z2iw0H3%gCD1OY+kv3*f$`4)NB$p zydJljAgAPM@0K~?ulv(wxjEMN=f%$#N==y`>RV=MJUN&sG5Je!ExGM+?M(JR^A*g% zZyJ}!o%;z(7xzxnc(6SVUg)^&eY%QMhjr>%s8&%Jw=L3H~EUuyVEJN#L% zbnGvJK^lDLbU811VdiJWMUVSs5T*L=QGW3LKxbL7%zo}g@n3i8!kNm{xk4u4^orw? zwqXC&o$vT-C@^;9&V3`bCA@@Gx~T-Dd>aoRs!u07v6&2K3Ex$LfW-mq@?g2JauA6a;VH^RrC?R1QffsW)a9oI8~dR{e9ME?YhC%)HSyEwXU_-(YDvy)wT? z$gMBUA#bRpKQk;PsAIjHE3~M4uIb6h&Gnn)n!ILZYhqiD;@-txr+YfW*8gY^=mM6W zq{Xot{qA_MhI7>n7cZaak6Pg={e6S-diDfa!#`@C@>e>G>L+d2rfWyo?ngMzT$~Eq zlF{mxbEmW_bEv83Q9fX?FJ30$`!;unsPt1s<&=c|x=MFlTnSn314{WTR-Y;aK6pGy zTQqxkHvRfahNg=bUgtW0bSU_f8F#zx`MD^wuF?yaRy?vaGMaP#w%n%v#7RlR^JG@C zwRe+L^d@snhL@UC16P2@eTYI*&=YeEi26TypW zBC@LvkzYLSVG&5*R3Ghc!)J2PyRHQYQ6S*<2o((_1-*RvtR#hE7uTTDU!!!NeO8WE}tvwD0+M9 zjCF+DqXtUn{R-SK_9o~a=3sdvmLOrxfSkOa2d^#Gh4(=~OafB>1jFlv;b%i2A6{Dw z19DuC&@n!Dg5mYajUZuPkPoj_h5`AO5P*P~1p*L|p9KL3*p3Q_15fTitZ;%Me+ne3 ze|T*)49K~5gpTpiMbzLvwSG81j2T!a54_NkPJZ{F_JU z81tN9$S*-_hddbYHu4A^W3>|u`9DGGf`t9UYrJ7VKAdkD5L1AJ{t*zv>$6eghu3t& zfbAYf=op_r!La`hkf`yaE|7wJn-dPi948p^U!t|6k0%tZT?LK52rz2=urC z6QJQ(G^}}o;qmT)M2#O4jRT((2J8ov&Hr=$p974Ve|CUjK#toHI>sU=81~-^5;gzu zI(- zaeUFR^a+OiL6C4RVBh2*VZi=x9id~)cY-0m9IYMw^&XAZu7Sqi1{gJd`1uAHuz$lN zbd0G0ZUhP2VW8$;^!V;kyC)hJKf!Q3-5^o(kNSfS`>{LWK+JW5A^#OxJNkYSj@GV< z#$N>(HGcT>FkqkNN9Y(conZL*6OgF+w?^Z@&yT`@KPz{Hj@R=yfKl@gKhFUJa-5IQ zF%~?*u>V@Lb|N(V01a!OV94JGX$kUZ?V#=daL!=B=OP7(+J8a-MvVu3|Gxv;VL-m{ z5jq}!Gr*|%L0=D6CmhIUMdRn7wVw>Q zug5U7_KRrzWq?uRhke0-xA61ZFd$|;LdWBI3@~c_!{dMfIq>t?Fd&AX|AYbOXB6ZW zkZ}Id_kVcZ1PsU*I6}w#>Jtpx(T_I{tz8R^{|8{y_%YEq=wl-X?eO;j`)mP;ntyhH zVZe6xBXo>KPcR&R8%WgrqwoLLXna&ZkpBX$9TN?Qpkd_`4EggQQR6>)4TJk|JSHGv zK#bZqApa3a)cm9RfgC@OFd#;~E+GF4NYwnpd4K^qw~x>wtF2ta?Fu9!La{NAW`#=zW>{!@ww6XuhH7k z=Q9GW{Sq2~4Peyx;q$?OzF`08`@bc)4+HX9AOHc!pM8Xm+fU#TClIY&;RHkeG)PqcI4A9}&ueIy z<^)52B1qKwL9KJh_del3EO~+N9Y(coM3po=^){;!Sw)-0|w;ZJ3_};_5?%zSCFXn z2KNCNknebejxqlUhWz(v?F48z77c5jV95Us5;cBIG!A@D81T8sK%(aVIl!p-X9pMt zj>q_f12NqR zhT};AiJE`qlXl4QMZ?l381jce!nuHblY@i-`L~YHG3GnLkpB*?9sTtljn=M##@_)L zHGcH{-w=&Y1#lxs_`EPs^DlaQ_o&?y4U3;(IG!GmsQE|V5AD$STxk4aw089UBpj_> z6^;J`VAS~G^TB}QG(SSenCS$=$De{k&A&Ao#~%&LonXix2Z@@0^!?u%jW3ACuS07m zLcx*w82-M>(AwdB7?2-zgpRTL35JhvfkcfTeZPhC4FmoxB}mAD z_&=@xyTH$&#*e=L+k$o&uusk-bo~1&I>E3V{q-1z)_xIKU~l7F}NPsLBfFJcRxbMSo8$L@wbCS%|H77Z;i%B^#l3&XziG2I0OwV zpJ2#e0Erqu91{#U9+M+@u>lB1PPxP25SCM^99XF=mbN416n&V8jeT9Iwu(N4?(hEl|7wUs$gFCtIto%aql1V z)6p=BEw)j{(hKV&I`!w!m&f0_f_Oe#%mR;PW5q}LDfU5WWvY!ev(46|1`~%x00mD^ zRgR7VqWqDCt%cy+nSlcxiM+;sn(jkUMI0;!r`5N7PJBuHrRCk{*e=O zo~A#|ia`yGEUyOsGnZT3+kX5CgL@&sVy&v*N@)@&IwP}&b2-^<@-XxhM&z9xtjk|6 z$Z)yjAfbc)^DF-PS(;8NJ72aOCyUg%cG|OEH^qvIC;Q9mTCsQyOiNafViM`P)x0Iz z6V#n5n(&HS4Pr_)QnlBaM)XBL#tXAJq}MQ>&ckXs#HJC`nlZf)&}P^1qM+NvY}sXX zG|?sLnGl=mv-_%vQV*OO@^o62Nl%5OD6eR<_Ev?koFbs9kY`HXqnW=(#Utme#^oA4 z9Md%G<#BHc=N%`$z}Bf4JfEPNGJ#}D3Fe5 zCM-+^QoR1z>vcnheKSLzi#iI=6NM%g{S5MFmyy-xIf558oK!XU)N{q(21to^|-G_vQ@eai8EqaBBd}og+7$_2-lb6@OY1W&wWlN zGI!sl!vEkJvc%Ned|1r!fjE8pLm_EuiXS7=zc3fP>z+pP=$sY8nj+A0$eLYD8JfTw zkXjQkR+jmO@5e`8+uZM_{9EVp7v&3k6B|vV7x*&=3-o6R!h7()(9&99U?$>v?Mi1& zm>a(Io-~}9s5kw|8ZmP>Mi1vh*?LP}Re#0Wh*v%P9PdTS=E-#jp})TKZ{D`LZkw!3 zZF#13e<4tvm68k_WflsFptW~LI`>o(3o?0c^QJTlsTbATB{?|TzZ)GN$PmKzpJZ_5 z99z>fr=RDzy6ZTze+#Rd3R8|%CA|0gw@PMSTOZ|vFWo*;!HT;*XOp#Bj4FcrC$$N9 z=X`HpeJ}fug(=M6Ks2r7=PJ2d+2KIbhcNkm|8;y+orTgHsQV~CqJ#hPu|N|*Kz*k% z+)DZ|kG<`n_ZtkhM)2MsNLG+cAXz{%g6shW&S#KAs6q!5o0wG8;E+zx?NRm~xtPVY zq}qskO75>yIQUF#c7=22O=l&puW;R}|LU4hG%tL02aAA0R;62~?`GA2^V=THLHmL! z8LiD581q0=kpJK zT080cASy7UqUqWqyX~80PM6XS*pk=4~zq^ztA;pXN> z8XFstxw$!Hc6JsC3kySxjEoR5F)?I$c^P`VA+KM*Midnl5q5TVWPN=dxqbUKlAN53 zT)cP@p{1oo^78T!R#sN<;qxB|5fKrhqoadpYilEnjEsn_tu2z2l!VmP)gj^G;Yd|g z74qiI8zeqH9=Uh#9UU4d9H8jgc>3z94#f zdWfN+A>!!hh-hhPAu%yA2q7UM^7!#%#LmtR`TO@T(%s#Sl$4Yp0s;bvhldA3Mn;C5 zJ$n{mVPQdj{``rQmX;!+p`l26dO9*WIf-a$Y9d`-T}X3tGjjg?dBoq}AMy0`M6j{3 z5ho`nq_VOSDJUpFgoTBXzP>($nwlDV_#wl?!w3Zh1#<1$HAGrk8nLpnLMA3A5PEug zgp`yNVPIfDL_|aoVq#+C$&)7t6%`e7_3BlGhK2^&+}uRi*w~PN|NbE=Dk{k5&!3UE zZ{H##1(}+ff{O~Vv9Uq= z`}=`S9|_Xh+IqCu)YR0F=g*%bzkdBf?%utNjE#*U(b3TeH1eCDpGQVVM-e?Wn~dbNl9d5V*|;} z%|#Rx6c8RB9%Nu(0P*wlLuzVjkdGffBFf6jNK;c2LP<%9%*@On#l^+Q_Vza7<>iI6 zx3?pKfq_V7W@ZiljevKBgM>l<-UfGNWuKpa-88W&cttU5DhDoefGzpe5}Rrd`u+i8Y%bo^xF8fQXosoRXTBo`LWj)%X3w@tV5PmHd=I z8?nm0C@*@lrg?;lgXrBNKX%FI0#Z_;lsWwLg;kHf@MMN$B|g%i8BghTfzti)af#B2 z#}oW51o*tJwDk&jS)s(z95tUM`pSR$XqO-S$iy{~eXn$hTLPOz}=>iA1CGtt6> zMP(Q2LDj!^*b>Mj2OmHDRP1o6>c)u4BZJ8$5 z5%yj^ASN-t!d7_%lpoK_Z%a{DR33_Hz?L7>bc)687k&# zWTkiflAW(!O>)ApA72TkqMTe)dRcB+eQ?(=VS^ZRh9$FkghR$&YPw4P#k&5vh&wW$ zH!GBEM4ol$Qg&foq$`QLKf5tUuMzrfa-rIFv`Y#9_5B`SlSQLlWBH+2t!k~Ih{D;XOkx-qJlYETUNGSRqj$6jeDP8cd@eHob6I;G7q|vP(-X~Zp#r} zo*OVKIIG~d7@GB9X?iK@+J3^oy2$|U_(MarvA1)>k{B3nMzs?}?&QKYCOZC!537Y_ zb%V)VY&81W@1{KRnu_;r`pwE};`^v7qEAbji+7Shulm`&?Vumlq{X(^{g$2G5W1vu z3Z!06qlncwfd-~3b8*R}iKR`;kIa|zD{RsI3!k#Y7qZ^Jura_B2_pf%RqdVF3j)MO zdQoSC@g^PV9O^b_$qI=XE=Ks~>`u|DjY{iyZfKrm@FFxU?XeFHArvG2BYAx*Q%VWf zFJ1fsUMP{3T!Dt)h-C;tOaU{$q&jIHr{_{-9|g{34o;#=A)W-mahccpuCov_)!5|* z1;#{&z?kR@FeaJ+#zcw0n8*?s6P*IaM4x~$ks&Z9S^&mG?|?Cp7BD7S1;#}2 zz?g^`7!ySSW1>I6m}ngs6TJn-L=S*5(O+OpqzH_O%78JE1u!PM2#kr?ficllU`#X% zjEORUG0|OMOf(IQi7o(RB28dSIzL zc>-giN?=TM9~cu|0mek*z?jG!7!#2LW1<(pnCLw)CW3R>1dNFkfHBbwFedT=#zYms zm}n3f6U6~zB70y=%E zB0FGAL<)?FqJc5d5-=vh0>(uDfH6@PFedT_#zdUJnCLPvCdvWEL}tL4C=eJEVFP0# zd0gaM3+N`W!a6JSiF4vdLLfHBc4U`(_HjEO!2 zW1>!AOtcM*i7o+SA`)OsKsf=+ zbSPnpC`F(YgmM{5 z1}Gt+^no%8N^K}#q0EA^8Om-bMW6(N5)n!!D4U^Vfbs}RSSVYeM1*n&$`L48p;Uvi z7s^m5o1mnEvJlECDASApp&Wzq9ZEGQeW6^3k{ZfQC{Lk$ zhB6qQLV(f;%2p`5pp=7>5z1sJ|KRBcD6ydohNl#uB!)5!o{oU06QC@F(iO@eC?%m3 zgHjsGdU$F9%2p_Ap*(}9IG_ZAG78EbD0`vYgOU=;A$ZyXo`!%D6v`|pkD%m*(hy29 zcv=FULV%|efIc`)!lDpJFYY)}r1ea)IY37kfxLdACrT=u z#*Y6baj2jCgQdjV3U<=`$PX{1;#(Kp*_2y?xqE2zZV3D`C6YPl%pfH8i6znWV8DNH z?;&oxIYlp0dlMu5)SoV2`r_b7oBkN1 zEUfhR^=65sj;tR#Q8%52xDq3-)qPC+cDK=U$Nske%9XA@lV@kf6q4xvyqcZ9!)zOu znwgSdR@wAM|L>_Ou^MTuV*U$;r|C74ZxvPfZr&f2|0h?!T&U94E3W4H$cy9Zle z$VH~yfgDxmC*#(GPc2+F4$b!d`}dln&P`?Gg7=fbJjH;?N(T89P8tXUSrM)-2vLnpElj#B1KmzWBXh*noHJx?ZPk^Bb{Gp7>+f7cY<&__r?y5#qn9h~9f}<#5LD z`qiAwEW;kPS7nog$}Y2}+rBT#TFraE{~h`KN&BZ*dKrn!j$9kexOnTs} z9#AX%APIZWz2}(U=`7vA(eXvyHHhxo1rDnm>!zBDS20*3-75E+qo02*BH1o9IUEnT z9E|nSSly}k;j>r)o%|QmGm8^qWMRJslSdS6BLglUj5g%*VX@rfxF^y_{UO^KFU*ck zyxh)V=sq?pSxer1?q8p!bCc7C9tN>B_Aq?-X)_jOb=X=fdST<%ye3T-_SAC5dq&0{ z(?jAkrGNSQRVB|Z$KAPgYtS$DAdjv4C2^l{-R#+vP>O*|k{n$YseiyXcBo!s`Vp>% zb*7TZXRL=OK+%2Y`ezi8t1k@5L49;FX!#35B;9Y?WR$qb9+r`e7t#;pain; znP$4Sc!9S*e_S|p!gNh#PA+0Yk)GZ=df{h(mbd1|JRaN%FCIZfDgGB9-)xz4Wq-io zyhY&ETub(8`rD9Gg|vi;y+&`k{ybHGL(usv@%N*)C|CDwT!=f!O=7I-*F6~JxG5@w zzrCV--JTv3Om+|~dS*PqQ+ut&D+Z0Lk5A^MGx;;qF@Z2VT z;EJieD$s;^Vf63Ye~%-T*ZM!5d9AGTcZEHwi_J;umn;UMxC7hNVE-v`^Ds?s=H6;- zNnF*PE0W~C)1s0U?a|mCYLgn-(e_W?CRO(o|8Z=8wn%V3Q}i^R_EU@Z?AMujm)>kx zaA^?l2A+3j2+erQC*81CT%H*JQj+$2%Rt-3z4b|>%|ia&Gq({T@3p%w>pt5z3aFwO z295JbuMYkTP3Y&{oJUHi{F*nEJQ~^4JUp4tT3+>Ne!l8?xh|3Fz4dll?5+9Y4cU*i z6saK>o#a@9m%4bb*LsEZe~F@_wA@ z1ckHMM%1sSQ9bQ9H|1`ACB7W@ROjW#zTa6_)z>2C!)I}OOmWj z@YeRUvEa?0v&{Q{4KpUqNoLIAmVIe_*h>$J?mY2ZsGolNUXcCbXVK-xRo3iwY?>>> zx!2w9y*6Cgc_jJmZhYy5c zw)(^$TuQ)DjrZQ*?$dtK`^n>P0?1~QoZ5WoOAF}#ku{$snRun73)VhC#|628< z*e%SrW+MT0b$y*7uY)a{l*(&L9*^eTUbJ{GUvNjl9!v1;$Q5DrkJqk-GU=D6hO6<_ z+c`WK5crmpayCph=@lt|qu0)L`IR$-gLuRyNh)_)lVXXp4&9l_T5U28Mb?5{++c*wqyd{PiQ>D6YHjcuqR%w^# zuQ^x8h974Q);DR$6rYP5yPn1+=u)vv)45BbwLrx4l1TZhVUMk@#ns_N&ZbA}_--5Q zA|1?m*6uD+SuOCp!0178f;^5uaH9Z{1tbYbc-09k7GU)NNP*x+0VE5^|NP;j_s_ul zWDTgg1m41@h6y7#r{IJ3N6fGO#Qnt!1KcJv*^Be{_zVcbrH13G$Xs}OqFoK$emCg2 zFa0v2dZpX=wDQs&%T^C%N9JU&Z=YCV(=Ajmc9_Y(M<@St)VvCcf>1ii4JQ zZ_Vz^bAq*J^yyyIa0RM86uF--|C;TBUEwZbR;Mu~Q%)W8%(H~!F{ky|im#k$St;*k z=QZb%mqK?ZDgKhHN4{O1JumR6P5MU)(OlSV1=b8a+Ot+_d?u)n4% zd`w7-|3)Uvf9Y2G>yCimI%bbtw#%egN1udc%KU6t$61@RU?J(2)z`T4kf@Po*U&O& zhIsWUM~MH>y%n0_o^kKPv246v&(OOyjC4XJ|Gu2J7VGD`?xf|l@WATxvrpVRf#K~h z{_aH--H@MDLnt2CnP4TI;2*NveN$2UrSIS2`czHRgQdm^k{d2L5b*mn;di@bgM68ryJPsc3q8M<$WhyV532DtWs067IT8Ya+wM*+@7{BHrY%(UU%0#=RVK5&wWm3p8J~fOqUni zo9)YnvMHC1^T^{Wb5*$NTn(;>E9N?Kow#0HZ>}%b54&dbxH!YgJQbcgPlG4oiFuAZ zC!QD2o9D~(LtwTtSDA;83{;fWl{J(_%3@_lWhZ4XWp8C)Wj`DiTZOB_Q&9$yRaena z5vhn(995iDyi~kZd{z8#&}?MFDah-Th%1$ay>P{L?A}6tvBM7;dled$vlOIkr+l%YP^HTOw@lyBF@Dh26 zy&S!qK(W2Oe7*c|8Q9)jZ=ScZw~DvAw}!XKTkP%V?d0u+4_AD>{cw@kzFc3Pud=U- zuez^>ugF*I>*(v`>*ebW3h#$Y$oAv<@%)tiRQ%NaH2g$pAo<5mt8=7q`*Q%Y9T<) z#{e>K75~=$Gv3f!)7$=8NBaHKdj)yF__L60L8<>sk4*)y$(-5VFfs?)6&emi%Ykf1 z;*;BpyhV|DucRNDkEsYF{m7hkU6?sc3=4!M!OCGIrz98~J7HrdZ0v-Mi-I%4V&h9M zY>dHdO_&g71{1*oFlsXsZq}h6(d;aMk!6s{n5(<)C9>^?`xd-!msShf&-+q#B`#~z zx*_*V-IHtkZ=GcOtEr{eY=>ygmAzl8Ui7HC^I*qg*Zi)p+2>6^EYhgHSblvMq-#1G2^f5c(viIc8yEE1fK0NVYwdWb@TO0N)J++{F z?z3(2+)qy1W2S`6%MhkdyAk?oXdy={z~IQy;zy2+^LeHu7-0+v|)+5-7+>vt;FE6fuR4k3W8{v;zLZ zrKA;P*gSzEANx^aNy&4#@^UO04qH)5n$MF}5GX0ibJ9xb`E`i#&ga5p@p4?I}*Z% zv>gk-wB+fP#V$pr->MX*FRR`rsbAn;{$g#;J(bzNKiKKt-@GKqd)28Ym3zkxh`cm( zpoY%Y+>@n2ZoId%JX_}+oG|sqv%W6u`i3r_{EJuBgI|^L!#*e*7HVAY^?S^>nDBh_ zwcP8)?sXd@R+hdlJA0ygSZku?7s-{x$)6vGdY!irKlad_@MK*_?wA>$)_-cbH9g3N zpHVbxRaakIb8)H4aqo7y*fnu`KQ=9MSUT3=;`47G-A9>>sgr+al@OF%qyIYL(Q~P7 zKbEH7Uum(>=yUOyXHI=isz2NK?t7-dZPLiRJzF;YJe8TA*6UhWdsUydpDIPNAs@Z= z9P%i;-TTYZ1Jxy)d=n=w&enABlysdxC4c?$s2f8nY}FRp9DF-`OoOqS<$JBertPa; z8r%0jls4$!xAODc>96j76?W?MI(~M>PC-{*jvc9_mBB>)$roH{V}!Wd*YPr=DyzNrkS^_Mm?)%&^^($_yt#fR$dguuAeh5 z_&~4WBYw=N=(9#GXNUdUspCI5eO+RG&TE4!r&Z5nviybDBSHe7`LwLq>G!I8wGr?6 zgd>t+o86udn0h%<_DDnDuPu;ZOrNqZfoD^FEYU@FUf|sgoB$2ok=O1#yLoiy!j~Fv z*r%Hp&au}mK5}SZ!P%(Ol1*E0IHv2b-Z_2pz*(1vJI(m@>%!r!zt2{Gs#>)9qB!{a z+Xa3ies8_~ZKHj&@4cTV<88;)nSIUsT*acvMe`0PH^~jZ`oN#NIN|q)E!=F&BJ1M= zKgPOVjYz+c%SpQMZr}7kmEOjy8h)*}cq?})E`V#*>Cl}sf6zMFFIER`EFFF9sP>SQ zOcfWI0q6W*xo0@kx9RtN@TOSj&LkyUtF1rooV$4<*~xZ=_LBK!8`q8$ol*22GA{7p zr}9k;{7bT4-PU9)j=oXipO)<+xO3m~+84$C8;;&p%2z++mp!t4#fTsysooB2gYvfB zj9iuSZse#BOWS6ya5W$2@#@UA8_kuWrXkDRr5^-Obss!>h}~EP-2feqknO)*^N;(mtFe_{WJG%b&9acTx`ud+wRm=tx+EYkPrL_w&`-Kl2lKbr<7S7%(E zce(4U~Cg#`Wi$SD!n!+T!9kjf1ON->-YKHL!p0(`v0dE_{|f zp*`Km?I1h;W9@o#^_(=_GdDM>r6yIntjPRvywU4)_t~e~t2fUnw3+H0_d+2%Q>RzP z#sw)8Hz!;Y5BPX@@C}Yf!KV`^)vlzyp6xW`Y4n<&`MjH_%{YA%_inA7QPaIi;fVB( z2g2{KcUyNHJHN|3U{1iTyUX(8M{nHHQ>JM%tHW47dv@5D{a!P#H@WU9Nx5&8adNHS ze66A|t+$aT96Q_Pb9Gdmrp@d=6hF*w(9k#Y6z@rSMk;^(^`yE_*3Kn`TKw}#vWIsU zEPMEKXzy7^RBO*)8N_GL8WXc<+svLN3kR+v!!osK+?Bq%XMz5^=qJ`PrcL8xXP$aw z9r|&?>D{Bg+NGEFjCeJv{A73P&+LO63=HG^-@UP^8fI|mfxMQ`WBlL@$Bplwnkb&b+pz26BD3c=x5#9C__Wo5KSh6b^d6-7L25 z>*ScP%jZrBDr?%b^R|uD5xx4(@tm<6?`u!-U7{&<@N({|_J)a-%WnmLyB&3M*qR-a z?`bc-)9AgyY?w*h!0WoRf2bZF-q+DiJL^{Xa+#38yuq$+-ZP_{$Eidxt zh9nnkbJ#P-bi+gEl8p}xAAh^sl<}d?*>>-U>6&K-@4GhbX$XfB%TuR$iZa zPix)oko_IXiAnNPZkbxz#7iRk?wTl2Y+H0bKkns#{>|(275p_`jA+WM_B4)IW5FBn zZTxWM*$xpYSDsirifSv}Y+*l8YJ2pOmvgRn&YIHe*|Z@?hh;7A%vF6>al%~6Yt1D? z;e~Y*wG{Pom7K$k8v7iLHrz4Dbj&Uv+pM+04Lh{nbpB3``7Zh}+IUfP=|i8#w?^C+ zxd$Dun0fS4>wLLi;=Q-Z4vY^`{bk$IljHGxe{}fz7s7!NIS0=0JKCRC+~4;|FyP?L z9HZ)++m#!xq}|Sl_iR|Sa+mzP-CHN+Ifr?s{7hUfwtgw&CHHX8*najQa?YQ&LX$<`yZWu`EdEhY`(~<1-B|qFjpTEkqOk3hWwF&lEz8IW;Mb*939z28f0GLQGj3Ldu6Bz^xB4Wq$~2 ziy+jj2|;abh%kFW%(@$b%ry|=4uBA~5d^?NTDU?XOSlap*eyi-8RFwL5T;g#nD`zD zf@eYam^|1_fRObW2rDZ?gu4O4-R~jV9RuO%EC@Q=LRh>I0_0{8SZ;=Bb_WE-;~_Zx z9%9&e5NPH@$3QrI69mce=vcW9!q)8&yuJtV zWn+kizkon<48+DI5MkZ~k?97AdZ#9*OV>aIIv_wK^n$>1K18`&ArP$q;qnrQKyQPn zwmXEROCZub83Ni>5Wr4=X!ah6v@1j8`Y?pqn;?cA5Gd9yg9v*GM6to`*j^BtPK2O% z76iQccxtW<(eh0Y1}ASOnh?t7;;FG01fn}2Y~BJ<^=^nz$3sNh7^3L<5JxYD0CpyX z&lMm%T?moze29KWK*&26V$<#r{0@WgbRvYQ`9yphBGaW134ad}_jU+-S3%%BH6=qv z9fI235abSlcy}|zgz&in zo(va5d_ECE*$ogVPk?B~|gp!^<0yE`H1o(FOF$q-hTKn%PJLiODcaCd>Axitj3 zLm(Va<_pwS-ViiFu>DMNrnLgZ)w3X0FLH3;2qBuDyCz8`0%G^~AlkkMg56dSk#C0> zy$b}#%OG|i5$tJ71n!M>6^D}f6QvMyw}r5MX>pcq8ARd>Av}Ku;_B`Yz4!HY(y)e@ zcQb_D!ypKs2=R0x#C{K=_bw3l_JzoKJOs+~^CiOf5F&SUaF#APmNv|2fc%gU2#$9` z9K8jC?`I%HUktJNZ4hhshd_Ggr>izEARu21QFAkh(zilvJpv-^{t!HW0dewnh^f~> z#6DA!$yZmE?qv<(_sI}BZ)&Jg4+wJ5Gt!kE#Dy@unWdCvYfFuhCdAV584NE0g6g>t zq7Q?(y%EINH$jYE9z3rfYyiXeyu3U1`z#ZOR`%_^XTwOt8P`S~n)^v-yVIe=KPRtq zdoJZCH2eAO$b!fczH;2VJzw6vdwK9R$-rTbIVXd5yFNZPb+*AdtxZmEm7Y%j zUB;<2ov)hY-oAUa^Tz7AjXz#X<;+~Kv3A?LOOcBote-GtXw$`%#>w%zgIrs}9kZ|2 z%$Z-YBB3LD(cI0GM?W$=JMYxRr=GprGmp%=Dm+}Ww0@*!@RM=LFZ-GYZ1lEt3i4Ur zax7$F>iM}xwSOn&=l$RhnH=L1)+fj5S4Q6Bh|?36bPhNa*Z3^fjWg-FPR`(2eurd^ zzcZ3DJz23O{qmB%jU)J<&5SaR54g1V97k%7|A$`5Lss6&jlXg&#s3) z=(sJ-yQp*1DrjZZzTexeOnmZpeetv4t$aFv&$o9r@+t2RiUQiCXUyB_eIZKu$7tP^ zb{if^AAK~M=RE$^g_CQ1SM%moO^@bEH}wQ~Y3TRa)V1->g*SC8L}M1tzQ5x_ajQe7 z%!*akulr1UxTxmi*n&j4H;E2{tDULTzXnK=m882^4Eb=lzem( z?T+3y96r=0L{4yDH_U(E&8^dXN9qqZIi?^tTd;1@>suusH|)^by2evdc6nD|voL(> zLbqPps(t02tvmO!EPwDATfLTks#?AA!HeRN&#SJS9eS#;M!o-mv`L@(xEIZrIsb9< zqhGt12kiXL9$4xh`}MNptWj3ex|S_iHD*xrwE@*(r#^HCpLy}A_O5xevO{p1NNuB@ zFtu7`Y1%mb&Rgg0RF3|zh`chWz^&g7(=W}(&E6}fPiRcUJAL;hUP|Z|wV;WVCnjb&grfe9T^Q#9G{x126a@!S&nYJJqQgFUbKx}`T>wQ028 zKlgfT{kZ7iO>cL~-WgP!SY*EExcOlF0cO>E^U8+pnl&QcqjX<)a&2)-Zi9y9{(Iv- zaW{Pzzki^#{JNKE?=|06FBpGk{Ft_4-@1e2pS;+>eZJ%7NiFv|nPnMo6NUW)#*q_ps0d*2K7v77og=IWlv?Y-5^Uy^6zH}eb*+7h z&n@OOy?v+IH~C;{z2>yKT|+lHZ#O!W98Oow|MPErG(|nT`Ge$b=Wior$=^mk1N+;^ z=V5;vn$-UniXktsSeqFMQLC_Q%m?ZAQITbjv>2?{S5=NP%5unn(Zfv!_V1-6Z8vPF zK|c*eo~@O!zP7poS4&M^N{GJmVV7WJ*(Yy)^YF z7`?K8arr`xyM}J&7ao`vB?R~f_q2scwzc_ zqfIV3ql(VD&DCnXRJBgmXjYxT|K1~zAEg}zG~ zy<))S!y6jEL`Mp296C~x9pz29!qh$E+H1mRY}MJ}5LT_bCF0Guz-{(`1Z87_BoS$b_vEj7vn#r~2r|<50ny=D+W|Q4dyDuF6d&jbd5}i*& z#y@zte$$%Vqw}(lyv@J8Zf?WP?1mPDD@CT$Y_m`2&Cl+7_AMu5i0Wt6Gntv%?TWei zGmdy_SLTGR`E=vvk@CV5ntGi2suJ%P9=SDZ*UVnLh3h5iadqn!s`u3m6&`t&{`2I*uMWOfZVcPrrBHPJ zUH*#EOB%JrcU+hCKRQ&&fHmX9JmGm(m|juKnMqrRhv@e|E8E_0O|aj=eNU#W7*n3G z+-K_jUDK8dFQ0wMSs*nq<-m>gL1BGrRK(-rJZguIJu&Wp`jQDOZ!L{MK3nW33GTe8 z-deg~PrwjX{Hvss(dYO&Z?q=OeZS$e#(l-Xx}lK2{c-lS3D2r0WMbOo=|hWs3UYQH z*gW_|Amf~}GEUv6TPD(~WQCf*D zFD1=l^AzRy@*G(iY{KO$%CopUHb+)UK}lL5C!-)M&*tN~g^ZLmPmU!}l*7{vMI{bP zAO#^ve3UGMCtY$Jfs%qWTV7FCiXS%B?#*{mQl9oe_it8%!t=fhHN@YWI15bXc9e#( zb~Vk@=Qqvi5L%vYIz6T+kmY6a&8EMzlm5ndPhE9U=Bi8my4Q~{T61zkmr=(cuFr#XW4W%#Q*VOQ zo5NV)E_e5oDTRGpU0}HDx4mc9k&IU9maLPf?sP0p>|cNI{mc=Kn|CMFI}DyH8n)xN z@NC+b`-kq@d|c(BI_mq+tNkWwM!K2L+CA|2#^-P2e@2b87&GnB_t)aEE@48g$5*+o zjVFHJJ3LY3WVqht+{lqWei^G%gr^V8{q44XLqqB8LchsdGzx+T9jLQ>_;mBcafA2$ zFfg~*Ue+-q(R@%Yr?vA}jHw~lU*o*wxv>$?MWcMZUS#zPd$n?x=5)c8k5_-l2z0pO zJ&VSQdPikWf9E~Z;%3>_+d1W>pF@VJh^-Qq7zAt^9I(5!^NChOuuesZs?rXNr<|Lf zvx+p5Zq~M}A29dn+R>Il^7^Cn&R+bewCi}G1+`5DthFIU!5HR&8mf+kKPryKh@f- zI5+B{vfq;G5yrD4M>T~Sa$6gkuP6@sw7Z8@w^m?tQvQP=yldx@S=*LAte3yBCV%$~ zjr*CVYUlNjO!L09C~wKTJEInyFtHi2Xo^bR#%BX1L(NS(_8)Nw8#QE3b)EZsRqanE z2_qa-=e+h_d-~P+0%@<{E;mi(xqW|rs8zXl!NBfn<t?Zz^*8QOr-gOh!|z(o zbx4_asDFEgSW-N52Fv#1r2K{YM_Vs!c5wC!G?{!Ur(?3mu3wKnTern`R9sk*QTbz* zPki=?8o$r;OU~Z!b`Bi)ZgJ|9eybKK%}IT>e&(9&DN)WblS+hZ{BCEtKjvJ0dRYE! z126f!OHiT8jsx-YPxV=TTDJK>OM&drS(eTgRUDnEtyve_WexH-k5m2~)vur3*}hNq z?3EXMPA>@m6lRq2;B@nEX`4w~>z@@&Sbp7;JwwIoXNvUxs*{|2!-iLihFP6k#Od}6 zrQHK6Pf8aC8ZGYK-je>c?BL`8R?yOBv%5Q9sRX~Z9+3B_!pEvtMa9IA*UmpaRhnC{ zwENwHepBjYU+|(c*@K+hwcf9r60g?dU3xrxWWh4IVzCruvbU#g@CO$-!&0e=5yx zVFifxgNTKKi0uIpn*ky=7evenL~JsMm=uWEPY|(45U~XyV(uVfcR|FifrvSRi0uXu z!}s})X@Q6-fryoXh|LEPYX=eA2qN|aL~JIA*ftQc#UNr+K*Ul&#B@Q#!a>ApK*Uyn zh%EvU8x0~h4@ArpMC=HN*kKT{ksxB@K*Y>J#4JI?mV<~b1Q9z5B9;##HUva03`Fb~ zh*$)OSSN^BBZwFWL@WnH>=1~U5r|j?h}aSkF+PY`28h^R5V1KRV#y$4+8|;jAYz|E z#GZkOb%2On1Q81Y5&I1y<^v+;2O{y5$ggGdjldi21INJh?oP2*eVdQX&_=BLB!-h!~`H>{XxV?J(vz6 z_5nmJ21G0tM63ry%o;@OHi(!Fh}eA)v3($7z93>IAY!vY#9o7lZ2%El10r@AL`(=G z<_03x7ewqFh}d8du@(@q-XLO%AYxZQ#0o*g4uFXD0TGh{5qkt8762kP5Jc=Nh}b9) zv1K4)gFwWpLBzU2#6E$DHG_zyfr#mWh^c^x>4S*bfrwdvh!uc{nSzL!frw225ql0I z)(b@JEQpv3h*$`SSQdzwJ&2ewh*&O&m;{NfD~Q-u5V7GPVzMA&i6COfLBs}th~ofC1re(S5o-Vu zy9Xk+2}JAxh?p0M*f$WdJ0N1kAY$V|#JC`0CqcwALBw=G#JoYo-hzk?0}+b{5fg)m z^#c*R1tK;PL~JaGSRja)0*IJ8h?p&im?4PRRS>b4AY#Wr#GZhN#es;`gNTg)5xWi| zb`V4?8bs_Nh}ahpu__QTD-baeh*%|vm;s2GD~Q;75HU80*a;A^7a(HgAY!Q?Vy8gF z{6WMffrz~ZL3#)KLWmNUaI*@|K>TwFrb(}4em|)FpXVQh|5Jy*dVl!)q49sdwpYM> zzATtKtPW-jI}D3}y@zSTw!!>i%`jV7DJ&7z4dcL)VGghgm>z5wEC}`t1~qK_-)%nr zj}@PF3uXa34vU3-hRMNJ!p6aBVS`}@VRK+_VSQm+U{hfaU?XAYV2fctVR%r^N{2ba zs$m0R`(U$RuVB4k8(H|!?N9Ci#g5B3Qr3tItmg>+Y1YYy@YAN*2DZ@w_(FzCt>qp zUtx-{)v)of>#(7)Bd|!=2UtJYcGz^-BbXiR0&FSl7fcNqsIg^P>wxQkK0qH}Bd`%@ z3A6;B0G-UZ$TjsT7To(7%Se0eB`sEKXaz!@%qo4sXueARtzdENaLj@RrhMTRjJm{ z=&0`NrPxnfCCm75KF>g3cYHs8?=e!MF?>x;Wu^Yws$vx{?>gJ=_FB1`iZKHMg84>9 zLQL2bv4le5>VDhS;AvM&gcH%2gU}rc0+LUzM#X7YPFbM9N-XDFgC%UmMc;Tv1Vh zoj$zecy|A7Ydr<-V=_jRoEX=4@`P&XstOnDgqZY!dv__1?oZCc<6{M;#(3JLKR{wuT)av?Get>BfwO8z;qGL;{9PU<5kV;fe-Jc!xLjvmi zH{Vh+G1haFcNrtsS5sA5n#*D93U%Fvgatbf3<=_JSe(nlIzA<<=B`~Smzhky2bp47 ze8OXNVr-dmL&La{39(~k9LJ>h%3FKc;Kftvf%eI@&V~_w07!If~sC+(k)jNz&Cptxr?AsgjJ| zdFyz?tjw>;*HqRk)m13i+M0>YW9G3jI~89Pt6U+QndCGqe%`fFonLDE-n&&}-PxY1 zo|o&|XR>!PN0MB{ttz`=-~Gi^)7 zDJ$85BXW=$ARLgSlDo#;I3nPh*1g75{XO|yD=V{d^Y%|Jd>2s#r>w%$G$L5h4o|#> z8taN!B2o6}(&I{a;+17vT3pU9D_=PnPrOE+Iqsq4?%<^1>n%UZ+Okf&xxvLKEWpz~ zF)mAcTW*c!y@qjeE)LGUd?$<@5g#WJ=I37@`u?f2w4+1Xu##i)LyQJE8H5DZj_mwg zIiThF3Y#-{+EsikM`znQkN*A>uG(~dsvh{_S+Yg(akjacdF|lVXXA%P1bXWD`&8+_ zXel#mZ@;csSDwkwlt}kdSCt!SZQ-Ih*{e#uslh=nAV_wQkuE+!k&?1Bv#c>{ZIRc~ zRO9iuY*(9vc@lh8V%*@cAUQnoTG@BgTJpX@-Yfoo|Mq=ZZCEYcdXXQ%B`(Gdg;fpi*IYYK6>@J(Rx(oiMMp7(pneZ zk@l3;woh*>$E@ACR9WTh(h!-Z7tfE+F!Hn$78adtNq+ou)xg>LCW~T|%Z}Uo4SBZ3 zC2wO}Q>pz7)sNjhy1%rhC4ac=w^p=kk}4;quSd`FmUFM2lP4&tPs+aZJ}ly+&V(DUzsFPBt;yG_$HQF_u#zkV|e`E;#aQL)Ov3#?xK5yvaV3 z`M@i`!!R{>(&7HDCDDsCnkOW0U3#Hy>6F-g_e6z9xK3Z4q~fRlt!Ask-DLI(9-6{iH08& zb61IO>70C?SoXT0WY)_Wfp03e3p;I}-^>dT@7{J@$$5eQs7-HKNeOqFj3L*^&dE3S>>0K0`_BRCu8}`W zZTmRQ4>DZb;h&tp>O$a6hyFJ^xJT;O?p~&PdbNXc?19+i!m60H@-LUF))Y)L^6Ut* z-TSs|nE5SUYuBI^4#`itOMK>>@|;$_ROyfoU+1W1x^g7{SN95|o*yc8ZsAA$=L{HM z`&jjImc8-sp$)e-Om6FZFyY3F+0!)EXSs}XRVX}lwlq1%-)U~+iV=AMBM)3xTL%_x?i{mWgY zO|Q=Ol5lrfT2Ii?t;0)_m5a&dl>acCZ~* z^z03BXyF8>4Y~g?He74t$H%6-qJ|vh&x{OQTr@l5>dRa2bZ%7Cv<1#HIQ*%?Cb{m6 zyYB3pDKC!&jcz_&e?fVqy@KmvX~N{Z_siV%@uBrT)dILcxO# zMFy!(VJ}CeY+mZ57~r+e)F|kLRfRk+s=L8 z_Q64{;%~m^@@R{c;m&PO*q1E}w0#=iq>LE$ac0~6k(a8!?cVb<^;g}G-^ITb7TV2v zv~c@_UtuL*u5G#->Zr7G*1jq&nRv-dtERil?l``0I$WOP+nG}^$G3OXK=Qu=x5IYB z_QS~g(VwLYFUWfhS-SC>)HHGUwGg(7G{|CRgjwA5LbfHV$vklZjLiGBhb@Qo5W@y! zCq3Ap2OIQYgC1N!$2m6G<8= z8it>%D1#I+yx+i3R)gV69;JdaN`Y}GQDji62ry)pqog9ksso0dDwIBA483J2!^U73 z9*goZ3uVkIlsQ*WDy&AyAVDc4K-pM}l1zaNqZoR*C<7}{+R397tVdaJ73Jo54DqQb zH~ARuYf$oyMOl%JQi_lA<}yl0DGYtrQNE>P*j$0({|3sf@fe!RF;ucq%3MYnvl2tx zI1H&tDD}!wnzB$1TtTTr$`TG2la4T4yP(t%W0;gdDR2#?>uQu~D^SjfG2~}s_^n2n z;fhl9I!azKhD`~E`8o`lD^V(@pfp>B@~8~uOcF{A0ZOE?D6ix&oL8b`twZ^@8l_nd z%BFOby>2L5-BHRVqg+Zt**pfNh!o1X@hFpPP-ZJXu%jzhcuL%T$E}nP+G4-`6@w~cp2rC3(5^wlz17S3w59l zN+{WqQF^jb?q{JSkw-b>iSlSHD2F3Ton+7sMFUK-L)q;~?lF{0&M2F%qqK2BS?z%G z{2Izq50rwnDBZ83biPjhmkQ`X8pOH zdcomhvK7i`SCrH#C|hMf53Ybla8VAXq7=P`@_YuRrX+(V5&miK{eg+Yr_A^LglW({pK7|qn z5ua)!KJ90aB_*X~YgNyMfN1poD2BF-Y>K`_oAB zr~A{0_)LEq5uf%mNb;xqGk&Ix^G~fuNNPd`n?VVKh)++{5Yb3oe~cX@e-@Cs{y>sH zX;asq_?b3!{fS@1_!%Vm)BS107Rq#g8YN6Si9wP-B_*X+#)h z%Fm#L!6XJr{&asDN&a+y8cF_ie;P^tl%GM8Ki!}4Gi~bnGx-x1#KwUTM0^SnpF)y9 zVzrtg2!pKjClKl~!b&mhU4?oT5cxF4zb6iS$O5`&0O`x!)hs*U&* zB0lYB5b?-;?sTxN&a+y8cF`7P4Xv5 z@~8X^lKd$@gDe&c_aU7>K?&1NVi56ZKZA%*wMqVDdy+rhpGJ~DX(K-EN1l|QL6Se^ zXAnEU{m5K@poD27KD8e4X+MLAPqnG*kL^kRbblI2{-jM^f8rN0eg;YYl%GKsi-r4; zx&A;2(@tU#@o7JUh)=bt>reL2!u6#3(@64X;!}wDw4XteKNFw!V-I{fK81)+A>vbr z__Uuv#HalXlKkoZG?M&Do4Wqw_(Y7KL6Se^XOM+FnfMe+n069_h)??&M0~1EU4OEF ziSb}n?kD1X35f+AF22hN|<&MgNRT28AN=lOiPo_pY}6|__Uuvl0V&_Mv_0>pGFq)r2Gs@7))Z2pSJrxEd) z{xl*!?PrkWPxoj1Oq;s?)bX=$KQh-Ji1<_+@hK$vQ+@_X{-jM^f2zNb_Ooat`BQ!d zN&a+y#?Q3L-#=N8Ft`utzkh-frk%tf$)D~|Bgvn%$=^Rg7V@P03?e@5XOQGi_oor( zpY}6|_*n2Cb{Ui~i1=7I%>56)h;Ebo$$IMg6F*BxwdwnxgX5>$^!-ozGkyjo43hk* z{Uc8%K7|sdox~u?pYk(E@@L{xNb;xq(@65C{0t&K?Pn12X+MKF2;7f!{sa-9Y9l^{ zh)??&B>9u=sO!(q-8UpFxs8w8?PrkW zPx%={e5OB*5~fXEf2uzV_a~h{K?(Av`_oABr~C|({3$7W*1`(g>&-j@(egBjGEZmRG z^{3-g?IdPB$)EBwNb;xl&mhU4?oT7hpYk(^_)LGs&$OxQk9dDRqa;Y4zmE9$&;LV` z*3;j*C9dKl`L&(8o?d zChRXDcKinEJ}OVOlU670KWLY^Sg>JDhaz9OqI_D(%SYeqe)`17 zj8yBdckgCi+x+ISO+Zo`n@McY}ri6Sr z?ga$=wcwLIw5tPoG74`NA8BwQ=wVVva>Pyiv?fin&?%<7eZT;;~gY*3bTjJ%v%* z;7gs%j}>NXnPCro(UXmt8qt{j6N%VS*h?I0S6vqTxCcwzzg4tWly|ABX%)6P7^Bn(I=KtIuyT!a5a*qGK-+w>T|NT5$Q+>q9B96)_2uHjK zXW)P9SC?YIdQ1P=lhCZT^OtPx6Cxvo3qoV#!lR??^vq4n^n{^N!O&NeVEE;KSIVv!KLh>Ek*n;#oBGA=kQG%_%5 zXk>VBY;;`otoWh9(UBtq<04HKnCl561Ea!cg~r8C{5u|YCKUeH&Rj!6qvFHk7ya8Y znV6B|iVBRx0gPWHj){o~4-SmS5t{_Y#ORsQdx(#n9~bW$H7ol6@^~!tsD6kY7aBZ2 z7BQJN*2IR+n~&oR4e^Q%Ul1M Nh*(os{r~OP{{awnC|Lji diff --git a/bin/x64/Debug/ufr-signer.exe.config b/bin/x64/Debug/ufr-signer.exe.config deleted file mode 100644 index 8324aa6..0000000 --- a/bin/x64/Debug/ufr-signer.exe.config +++ /dev/null @@ -1,6 +0,0 @@ - - - - - - \ No newline at end of file diff --git a/bin/x64/Release/DL CHAIN CARD INITIALIZER.exe b/bin/x64/Release/DL CHAIN CARD INITIALIZER.exe deleted file mode 100644 index 2766b7fa8e93a3ac56e2ad8fd49c1db7314f9043..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 2178048 zcmeEv3!EH9wRdlKPxnmEW4CuUJ^M&@mcTB}%zjw2d*P1c&pcVv&U=lny?cfKf~dA%X^XYAzEsnWK1|cB2#V*BgjaU(!LY9AX0(a64S4|P zpRTQYb+aWa1%#h26&Q-*O-KvC(7MC4PbbTt-28ap$#-j!;i%?_P4Ux=ooN6LDHaW3GEvfbZRTF>C!q7 z{}+^+`LCjODI*8@mtSgVqykyoMYRD2gFqY{Gm4!hy;eln@cV&LLb1 z?>WmV>Grj2K;c>XnYRBD!6qFk4U)z&;Od5%$eFoBcSp|7CH*T@UMpuYbIuBL=d37u zeyORkEf_m)!aK+8ISVD6neeZajH5kf;+bKEF)%W;=R3QZZ>E{=lz2V`E**=)&F!0R z@wbum3Eh7Mp2Dz*pJSi}EO!mz&JaekHck%tLu62Z?r|J_)bPq31$tjo2! zja=f)ZWI09olvO$wL;;F94ekmWJ+kwTe*a5DzbByo0!vp{TB*Sp1EjhaCPsh!qhEe z){wbQ(@Mz@c*|HWxp2%$_C^V*CUz6oHJh+l32vfUL{BpuOOKL6ilZ`A)U~|CnO<0c zzZhcVT45|_wkJ@WWNc%6X-V`+6$9&1N5*|x_g@LVrEQ7%hohWIuDSr}wvXw+amr)* z(9M{H)(+jg(a|Q8)nVo>_XR&>fXR`LwhPK|=~O znBKX%w_|71<& zAt_}a%C2mA0mhmFf;S=15TNKUQ+qy;9hM;(91M}HWe*po(mRSv$I{ggpv5)t+1YB@ zezS;fquccV5&RvEW4LBMVY}v3IxL{KEx(<4{1U?4J4T;o*@dZ)i=$6M#$6l)sls&D zH47;Amo2iA*HO<7pHi6Kdp3kW7PC`_f|QkUQYIr(6dB_kP44WU468J#`(>~YeWq(? zpwIZHS6__Gjdw$%>$M6}8~-H1Q3l`Fg1%pZ(0)z>ePOCut?^+7{Uw0v{y&2?C2e47 zLMx)rA)Kz~RDX@a^9e6+74mkqplg@936a)(0)aiqG2-`-rC#2iO^vu#VJdIUYOY;L zxK`i9HxWozQC!sbd(+n7d3!TfvFp5BvUag|L$cVlVO?sSV+}zl5-0rwTeRp}Oq?CV zUiHh!c;j$k;PvYfzj3&?`f`JSJ}(6Hhk${;5U{ZNYGU}9935fFp(#oUE{B6v@$~8q zs6$GxzRHYR*4=?Qz$1c7@wP_dX{KM8Kc&e5*CY!tA0$o!Q#DmYixC5fgJi^_$7RGF zPrRs`tca(I5qhEV9>`5e>kzYaSW7R}Qm|w?24GtZQYi7K`)@;=XBPzH=!MWK~s@jU-UWT0MWB^68YqQtWE=z)yLrI%L8qZz$U z(GPoQ62<#RvqBdY`U^}Ak|qi*<6neAVO3=;A3|m|Tf$0*VOJ#mi|0WoR8M9>ubwB# z_Ai?U>SbrEdDDtd35Qpohcc|@brv!fkm{*FB$}IJ>Ok`@{*QqK3 zXn#kqQ&j}ZBuG^eLa8c(<$%r_=r#{p;zrfzj*^!iqT!rPapu1zZ}#L91yK`TKGm0T zE!SMQs&DF+sax_^^+RZF-l;B4;*qZY8y}hKu_-*V)tmUpRd06i=yV-11AAAy=GYOj zNMQ=f`b$7j{Z`1QsA^EOYf1M~9eHkQx0`O|PglFsQ3f|H!r-|H7juI$2RKRGlDFMV zJj=RPmdyUMWaC*r+{%*Of0kS`3#}xy=1;9`xp+1vHwhGrN~m<=IBu$if-sqEyPf_D zbW}dcHe%u>C^@)s?`~;xa_??`|Dz+{^?1X>?Rui)BWZgnRBideJi|oyA#c{m?4^14 ziH{X`KV#)!MvCr3<}JP8L%CR^9VOlWU=;We0wwLFXK}>H{3pHwgr9zv#xX@W)iWkV z?K;enr-yI^1%4s|cjEtI#QBH$`kgG4zSCyJa~OZsvoqSIW_2@u{U@WpU?~~?aR_9} z<4KVbd%C!C!Yr;VC!=`QO4_La-iK4&+RR6*#8wy+U$&~-TE(8gVrkTJE*}LwP}8n1 zgMH@Hc?{?ife^+&J12hgocQ-!aWN+9AE8EAi2{O?`12GgN+o@C|4AR;f6^!COQH&z z+1;v}ddMs2^-n~|wf`tXiGPnjj~;~|YgDs>r-B$yjOBI3mFsG`3N*f6m$G)XmsOaX zO|e6%!P-(3magsuM{A`LmK9VP!P8j$_(*cbUI42}%GK+ntk#VTwK7m^i^o96_k8&M zm6TqGY?;}z>&<-0KzsO8D-UQ^)=njBTP@AXn^6391`St zqcEt@kAj-KT~50RMDCDCHIs!9oeZj~3lR#Qj!m4zKI5z4YsK4>2q5o@I)o4CmI+=W=Zc+ zPc`>!M0qgjXituiDZByT)pqxz2YRx)o=jPi z!^h;;G%VUCOd1xEUGeN^E4yM~siT2tty}6pc)MXFG#p0k?nJlMZFeWTQ{7ItE-uS< zP_U0Jf!@o(;E<`+%co~o%)?>}@PnAo-E=9M&o2rz;Xmi|SH3oy&r{k}7}t4eQvs_H zUbaVOU>NGK#H&vSV-5dT6s*)frcmAyWzV^@l7)V5nM1JgX$rZH==ymOyp}nXw_5WF z>$kw5w0|ANci)0NH%TkOHzVJX^Y!*kZfg6cam!8R6Xo;W6eef<+rCLne#yZ#l{3A3 z4s+O=z4=Zr-&J0Y>7;81e?sSM(CwUtbGvcx*)gD-TZecjo!-63-UW}O%k5&p6QASn zW?5s}e8QI?6cSVh1XdWfZ<6?QJ}=LFw|cmwtH*O)A+7pL}_Qd~{oFLXfcYmTnV7 zy*NUfQzn+-@);-qGMKy0vGcT&Mb6NNHM^byo;b zc~R1~Y?%QAOsr0D27k`P&q%5;l}+grcO_*Vg+8jO{Q+fT8OE)Cmm1|P;&MWAhO{9~ zlXk?01s2wN@^()?Y58XZY0F_yX!%sJ$A|W|@{XITK8R9+bC8Dc?-0fqID%!KE1*K~ z9C`ZBCG2_lsZHT0pLWx=X$CTGrh0Ua*;+HS=v=^009>i+Rm{B_KY(Hf;?fX9)Usgo z6>86Cadz2p)3%okuq5HQw(Z&5Hw7<1csMiq3)c?TB8UbZpwh0+X7SZ(EF2PfH$Y;3 z#7S^dFrU|<=wLmoO$8h9$Y4Co!N|=t=Nd1hsYhkB^f|FpJ<%PE6iOfr}Ag1XLAPZiU>lYA{Tl;p$c-1(!YU+1 zfU)gVKR^HmsR{`pl`y;oP&X+U9GOlzUHv++BmX2f`}}#-KlIt`(_9lwG=nQxKmx&p z;-iJ2q78$~4m;URR`MYSDyWWI1L*kV9d1s>8^$MwfwrMT*{c`hnL#}I8$*C&a2Njf zBFuT5_=LX-fq%vSryMd!l>0mzB zTopxIWkiCtmmru;1utdc*;FCeia-tPq5!H0B?_xZ=60+Nu10-|v#H=p-~&n}Yv~BgBi}vhwQz&86Wxpkcx%cYl!yRCfEyJ*9=z|G0RoWcps{unx)a z@>U%j!HOq0&ncQI)wi{Z7R-HlLU7RuOQ#ZuC}z000HnmmI$_mMwaOHn^V`W4SUOf< z^{Xv%sapK)9M;##0A$;xR?p6l{{R<4#kjaENU0S z)kjbsw6u9rq0g)BAU)R$4NUak$oS4?90PbbPLLEZyr4NI7#})=I;TxX5M0cL1WBGr z=8{W(YXxDf-c0qm4k`M`HPuHrj2WU#nE>6AV^ z^I23lI#_)eMSsWT?hPg#CwMo}-h-cQOc$h5|IFtQ#$Mz$dG^m>urbPI8K?Bz8W?2x zSY&m!bfcVYl6tz@xWr`tGpyJ(KF=K2hcEyUx6ImixQ_P+uISy{6A( z@E-!cGn*Czrgnp^SzC48l2VKy(}4o!FDhIcvb0pEmhOiwd_g-2wfmd(emEjHVb<;^ zT{$G>OnH5$&H`m<+y#fM3RHrxBch--=nt&bqQUgnjn34O4gWn_h_v zh-w|KSL++s4Dy=({~DB!FxCO#?&povuCQPedpX#Yhm&uhfO{<2|E2q$H_JyFt{LGi zu#?!>$OxoK$&J`TpQ5wCynAg_4IY?sj$(lQVMt?q%rOKNaYP~P3jmfoJm*g6EiFuyW)308!>t^I`9!YR1?Ntv ztO%Kdp%V1qEDh9%i%Z{$|NgRvM@GOo-~3Y2C)Ad0E5fXHY}BU zSS1Y3&4Y#oMlgibyb1r=qkAP_+y6BR)P1NU%YPvT=%|U3Q>p^pD_P-M>KnA&9xXvx z1Z6xon)nJRp-^S&6z(FJ7*zK1@leUtr0{b6XZ^t9rf zet1EwAHejz=!wdc)U!1><3p+!+9wN%4RK^N-NHJ&5>jvy4=LfxQNz-!lP>41VsUEE z%DC?dl<}-49sfW&ZivcIbYMMbUOMvFOI~4U+7WCEn!Big=E6*Mw(7y>x-k&Cs>1*& zIP6)#FW;?0d7Y?l;S=NK-Pp-X&+NqJsU3U(VLSLBerrGFmMQ14S{KHk6?}p~vEVj? zw32@L4i43Xr189oP?>+1ahZE|6lA!6qWa zi@ln~p001+GqvpNrc8r{RB%rM&H6`-k$kZ z5A5b6K!;F)Rox2qfAJW_qjnDYFD(yS`W9qbK8pEC-@+hQzk}DHhU!bfT3J+Ij#VQK z(ANQqUbv3%4?)zo0(Jvn!Nb@+9S(km-{4C8X&BNC2JGPLDAchoXAPBMOKJ-41*~_n zpkkh?w^e~ELX{VM3#b$Cq}wC&9(@_McjiA)xDosk#HpS4R`#CK3f=H({{{y8ecM^a`1iNCZhD5F9pPu^$K){$IPQ(TI; zOvD!bZfW}b&yr#rfR)8ML9unw{5d;&*%im3_HO_cRw>e|<%iyGfT z6*#U@K2onU$ODtEHMn}m&^Azv&>Eg>SnEA%>{h3$fsmNIwQNIhh(C+{-|EAl1t)xt zK}Rb3qH~~G?Z~6GZrTr;c8Ye*Uaf~=$SqqBcKKMPaRT^>R%usfhaPkyZHjJDUfWT^VQ z7XBmc_`8VD{w3kT@2Tz~K@#}`F~uE@lK;r$DDvkxu9W(|I7H}bgZvN6<7umA5gl0K zD8bW~>KxLDRlqCCu-SWA^|X2gYOh2~lO6<03r@LmAYHP=6fFQX@aO3BgRcFBxF*)7iqA0zS47 zuM|Qu_#_fW@0#sNUVb!$M)qO3VSOIJci8#FY$r~jy&ILeR&5Wv$4yY@(DB92^6)u4 z;=#Xy_M8`Kos_$W^g0JrWn4XjwdBhYVPqX5qt?)4k3IIXQVbNWmQCQmazECJ7g6pI z!C~<*qGa$2)P(sI>pXMY9ya|}lpi*ot6Ds1a#Aw2D{l&rh9BC-1ui+At#}|Xy1=4X z6^tA8qA_KmD!F~r#7#C=eVT&VN6#dTOAo#w-lvZu;%}hjL;@knil z-X+5dgeuNbmAnrffOGJ=oTFL7HpBI{@WSAykf7J$i<_gpn2&{`_XF1W4nR1q&y-om zu2`1;X?CJsXM*xIc&@B8##eXfYnxgZZ2YAtTl_O;1}mFp+NvH!u78--1Zi|cfJGa} zRz8wdoo*#^^)csgzX?2KJgqKl%Qn3fp;F{B1fx@W- ztNMdxCg}9UKDk`8*dr^J6rwN8m6&X5`Bl)`sh|Mu6JSZ1M_w!$lz4fenpzk(cLc!Z z5YF2vI2FCfAwEMAf#pk33Jhw7#aI@1HIGA-lTi^!wV8S|Dyd=-OLg&xYtQWAaaqb+ z1(l~{P88maEQ8C3*L!B=p=WB_mqb|Q7om)7JIcjG zc|!~3nLz282j%(}$_QO48WE8w)}uy%=(n?Jl-ZHlBlnM3y)Mdv7aU-0NrsT$EB^7( z#~xEUprmZ7M>=l(mVP94+Jg^U=%%TTUbQ^2`itXNu>2cJO>jH$Q}57Y{- zK+2YnbZEMg=-^7kQFLk%iXM=;74&eu>$!N2lP;O#47CHn4i+^ewc>SLR-U$c9__I4 ze=>=;*gg-Gl2z$c{@Udyp%Z%^HLyZMTdWy!Q;HGWheyoXW*|i$#_NlEivpE=e;F6P4>oqX8qxG7LF4A(LjYR@rg-YS_uHJIc zISD$W^<~)NP5n+}OK28WV(UQiS@Ns6>qYh!>^yllbOE$I^Hp+KwqigQ`PKs}?aEt4 zca?)AX&onm_3}D^^z(~Q#^1_+{4Pk*eM}ixwXuZp!2~0;@6STL%6}wQ<&-j}LBZGS z-vdDWM+TbyBbU`G*|u^Ns>-MQ#7{N-M68)BKN0JiEkCh6e@|)95Fv_rh{uq?mcw`~ zqnu-ZhVqVPpFtW9#$WtCsuh2c0odr$Hm|`Z(O)D~`HTCe!(SAhz+WVKtbOzs$Qx=s8=S#ym1#beO^dHhAP zEbwwWKV*C8=`jG+{T$}|5yG?GPW72! zxutx*w<`^M4|cA5HgKc4?ok%4<~rycp@fW~9WIfJ8F_jbxr8hdw-EcVk{kd+C$1Th zA}-MNLsA8OnD^qxo&}G)9dU`yY@V!XR(OA z202r~G_gYmZ14OI82gTWqGOkE;!Ndh@r=Y3pkW2&Zf@<4)SfOcx0Sib+A~R2zoqIo zlEE9<7j&kT)t5-&y#JAkAlUMs!~hxn+-#4nJVN+Pa&B2X!k&^G{#P{hYA3HzG*O52 zfTkzQSa>EHhUFY=NZ}1Cos6UW4Iw=ye4WdZ2J0e%Na-M?3d7PY2wlJQtPxhD}b2<}g!Z!UFj)b@$Gh*$} zlS!19D^Dg7dNNkblR-8(#n!&QOoF})1cJWI&0!Zb^$dKOy>omSo@}Q$Rl2R}{ZXqT zvpW<~E=uH+DYz%%(WLN>fp|20bvX>nvPRyCJ2R>Iotfm!+nUbI;TEs{KRqHb{FeQNM9UFMF@b`mScy0n{bS^ZsLVswvN)j`z-k z`0}}k&jI3x4hFGefm!oALQcyO3fVk+4BVmpptszi2pL9x=oG1rTk%{tMS5@=OGqnCa{KH8H?34jHvURU=xR03m%j`B zy#W7j(q)aOdA__8;}2_I+LQ5IfG7W`Z!jjc6VQX97`_nf#L8|(?Z|TldB95UYNI;ra^EAG>oqMQz)@<7d6+7?MY_iPGTe)vvUzi7j&++Qrbu?uJP$J@1}?d zh1RI8*O{-m^2g<`=y*uEXrujK1*Ctni$N}N$#E{6;!+z;;K7gNJXa4+aVfofn0DM6 zb%qP7RtSbpWg~(&DN|yOEg?zssquYm2~4_z+?;$k4GUzamB#+vEAo08y!Nf zXZ(%)-0yLp6ukyN_dHhDRyS?llR;xj#wW3ObnB#xGURsJdi@HC`No{&L*l~Coc?wbyORoVuB zbxzypuaYg<*^AnX?8(kf&*P0{XP-L9U&X6z$UUmp+3BN6war&t*)F>R zlviH?zRC_@Da>&hPIRdG_b|)n_LMrhARAJ?WO@6XETW&Jt^Wa<_&4(~s?}8~xFG@f zrI{VPn;`;yT0nQlL0=ZoopI221vDE6{X{@_#X-Lk&>8U>9~IE)aZvYS5^-i6G$NpN zI4shnYXw2NYS5S*586h?)4$+a8O|4D*A}vh7c{MHze0)%{hED6A9LG(AvD8;>a$SP z%(qcr@I}l*3UT)Q-1u9@z5EX=7C*6 z*g5TZyXS#@mauc%@qRlG%o_pTn>c`4Z5x{h_H@GVMsFN%17RKQuo=SicGxb$jCR<^ z3A?zx-o5j{9wMyTj+Z+Uuv$B8j4-?=5~uHU!Y*%zT|(Fe7(lW1{=+=5uMqaacD&!s z0~_<(@MJJav$zT~BT=Eg6&1o;QK7jN6>?iq>6unkI-nI5-nXK{_EuCl-ik`2TTyA7 zM5*Rl=L($}s)j0M-oiHJR%l$sDyqH~T3VrT7}&*yF*K^f7FtH3abzTmLoqa}$QD{w zp>eRJaJ5^jQmV}s8qQ$~aU4L{`CQpT#7Ux=??KviIU8xzz6}euAiuTGVfH9}9LH3k z0J}8NYI^V`D7cCnMlc7c(+jvumouT#ord--nHexQup9MY9eT84>+=3i$x!8W2tkG_ zub_u9DUe5vgc^8N%~PADr%0W_mr-TyG!z)==~GeHGdMS50doUnN}Y!_{Hw4m>m({& zR>4fvI=NW-B5b>rlZZ2~#Gy!vTEb?J& zktH!#F72vbiVCY=V67hkUD(qiwjpOxgOAd4IyM9aA7|{;2;n`51)ta#bW>ZNPccT@ z2WO|$dbTQGy_xZ8q|O$c>K&+FIqm9n&%ctA)|xTa>k72#xjso=@elU=@7ObjUx$=7 zev9y|J5tRZh1Q&jpRhH0ohgQYC6Qp;!h&Y|^g6@A$4Fh|JJ?!of#$LvoY(I0uSSm2 z*)XkHjbYZV2LJtQ2$Z??643BW_L*u=unBD6@-}q46sn-XXHY(NJ2xW@MxJc_*|N!+ z^svq)o2)7>o2)u4t!6Q{+H!pdwp@ed$nU?NRiBP~eQT@fq5U_CR(nwWenY5IHYR-= z@Cf?`dteO7=}Tuew>4e80!*=M|4GhDo5jw>U1B+{1A7v1IuY(vXT@O^`rA>azk>z0 zHnpyc)pHK;v9{6LpZFiL)d)uEL9O7=Vf=X)Xl?vqZqiUQ>Gw#Q%{tYufI3T27xjBq zTXwRd=L)^f(pA~VFt4mI^F6r26c=n;smr6((ktTNV+rO?a_k+awtP^NkCC3}*3Z!V2DTLxEI>ZqQa&EpxNg~^niijL!@VyE$< z<3E$LNf^}8vAA7iu^gp)GdtiD=&tZ6-CLURxku@CGY|b*(#Suai)*2e52$l=0+Iy_ zwZPOoLf5Kk$$&aS7Z4OfZJwT!wvVCNH2Ed6lo1|cXeNb+7$CXfzD_eGkbNCVkoE63 zf>!8RjG-n%*-Z7F zC?Hwe#*MDF(+qn+X0*c-Kh2=ltd7>kHfY%=VSGgGWnEleYSn%`IUqU#>wMa?TkR3r zo{Ut`!h_Y<4nS>j`7kdBPGPGP98XAA3C>}&3@)Jt z9cYW8u5U~6q}|8B26gF?B4F~Hwrrgg)VnWVK(f$;7bFwq0v6_ZHVsFPoh_ua`DUWZ zglm)3SkU?I2Ja1S?tA#aj?S5pFP7p?wC^FTdOwQAYiqR;xRQ-O0x6oIJ_|+Gc!VSE z1$wO+(d)zs4g)r)9Htxf&lB`H>g*RpAhf}hcdmjj5gwtc>FWz^pgmAU!GG)v`Z7U~ zM?=UD;LFG`7R^Gb&EN<_72A~^{i ze4eOd)jvQw)%zD`tClOb+{DWyMJIh*R0Bi6&7 zh0B&>Q`wEd43blYFf}=6W|R3W#HlUff^+joJ~j_K^NA{E65JQ9j>>S8P>s!(Ys+p@ z=RzZ~dW?-yt9`Zap%o2GYa&+7h+Zd-5-Zp>OgDnt*awgtiPgle`Qg5x9}#pxgvD2N zOud6a%N40?ymi2y_+erHpG3`vpA-p?AD{bp$#beBbZ~>s3Uyo^0DFG z)?pA+yu8Uelfi0qxH_f86_DT#l*+>y*pbHJ40#hP+F=4AdFfT~IkPf79-=YG1=3$2;_OLc_tK6IsaA>kJ3q zmnMgOC^naz6@iGeYue@hgb)~w1F%1iB(KRdM~I}rJmPyr3MeDwKcf*svZE356&WGX z`zUA2_)x;oG{A&Vyn+kNLuJB!jkSI@l)-2uvf2gT&a3Dv38AC_lXQTuJMnJ(Y z7{h>32r^*q-4}F!Tb>8v2+I0@h#=}+*j4fey_+QUp-pcgJlj1|{RG6=h&cujFeZfp zW;2J7qSqM?e$Ha!@+I#toF3vB{%z=m;Fm<21ACA#+IqBYhdCCvZ{pij@_Ltpd3&*u z+)?SXl7p+SgN4C6{ukj^NnRbfVJ|L=l$|f$9&kH;2G`&KplykAD_Mi~bZr&nlA4^% z-$%>^7!&h2QcR+w>}_IxLb!-)Cj2`^u6ecqYt(Fqn=qmsJ+Jy_GP0VlV6MTm5WeaG zAzBCTIE^o?*!~ZYe>MkwKaTXII+h>tadGqj}TT>#co zS%B?a7@xXSt;}pmBymjqkt8w}OC+^Syh9QhizTv&NYtgl!7*q+@MGYq_YX+9I=8bF z_C6b?VkaO0i)A0@CglAHrS0V~tu$Nhj=vbapTP$qaNWk8_W+y>UJ6K77nX#_fY!r$ z`h-z0FHiCdQ>hP{E)>Q+%liwd!u+e6R*d*aNZ`q z6}=&anT^cdGL#wKDP@SBT#?{GYxMzNwmixJuqU|`S*X~o|E8R))75So{O2!L7 z0syer1Rwzb*i!XC@vq^BJyyacv07RC^9&S%#EjRL;hZ6ZB8IJf@7DO!D%NV`Zh1!loBj zEz6#j+yc9Ephc#@LnG&Fv#vT|hPS)nBb|q$?ht!e?T2+~D^8WqZ)s20D;Yh=p;=od zFl^w4H}C5SOg6R)bYe}zV%SyTB*S>ALly{_E?krV8b&0)11S7rl>{Uo+sr(3lB5{4 zoqC1qNt5%8=S8vc%vv~}`HYWe)>>JhYPW(icpi*`1|_W3#>^?5AeK%(N$C;*fXotr1OOn%1Rw#_ z&!?)Np=SN$<{T~f9qDMA7O2#2YIBmfzq9k&;|<QPw!fYW?xpu;k2QCT(E3chB+nmt4?-dM&dmyJct}kL3pwEZq?Jv zuLnb|nSY9oV{!Tt%#@lH>Ez`dg)5U_VMzubIgyw5$umq(i1G!^Ylb(y5)LE9 z2IuLPV47-9OzBx%g7HbV9*2eJYpt7Bt)hrk)><>TYEvB)<6I_`Wff&7qF5!8(jocW zaPSn?#AV=oXK+$8+|`}KhekeuI=!VCgu7H&^*9BWDvM7`ZeojB85CLaoli^dzKQdl z0&C6uW4o|XXjvYgmOl<5jFm?LuApQ13=^ROS{Rs(Tkoa5OJX`SBm?2k2yi1)(IXg%A}&!b!C^oK$gI`=^l33SWko zmBMiPynEj1Q_Y=+X-Ax_=FZosse;QDFv+4TTnt6lVv+^5#iydhP|s051tc!rNqVSGTvY7DFJ zNeqvu@KYH+QiY$%a7l$vVfZK&K7-*=6+W3^UxlB|Fs4t|g-hwJ2Ig6rWR@dB9Z5Pw zM@j$y5+eW!fE}brv4hi)bRa>@OacX00sxRo0Z0GMvH&681%%L7k=AZ77&5NbQKTTg`> z7Yne+EG~00vPa6%}HhIxuFUsCr9yu0vU*@Kpo${loZZUr_CeT)Tzu>>2||Va9k3* zq~k)elp`q&sTAs~p0uS-dP~_b=kYa+v{HvGIX!E^eaXyTYLDXfOiEpa*LL}oxr!7_ zj#oTe&XTK+h*!%F!c5XSKAea9!)_e4aOSxe^G8;We1_dkEkTV8wUwbAr{1T(Ov7!b za1Hr4)G@TO!%{wlk0WjlyWIz_qg>%{F@*7!&`k9ID$z;lDsD-L2D$8h7p}dIOCVlx z$qm7`kz;uKrrsqXnrz<=7j{*RQ4H(Dky`PpeF*E-6A5`TAhlnhC$<_}j)r6f$AW0b z+l8-Vu4g*V$vLA(*;T$2rXpi@^_phNq+Q*L6H_W>S@{{(cj)x`??NvBc_^v;EbBW9 z+aW8g@6eEr;rP~fhT0+fA zV3WkD?ZprFo5H!(wZxK;TMCt|sb3eC(OtGDK&HpH{$AYwuJ zr)XYEtqQg7htafpy>-V}1$4rn1D(Ht4O2U_tq_NIp&T>TybDF%roz37UC4w#+*KxP zb<~d2;DImAXKYn7*5nUwbn@3@rdIRcIP$-sRqqB);j-aNJZH9$uC8IdGMlKrkqcj& zeqmU@oHJmJFJO&Q{Dj^*QjLjy=7z}l@izj8klpPNSJtc9A6M@9rW{+3)GLM|Hmu>}OBTF#WiI&Q`N5YEOa&?C7yV+BXUDa5l(p@f91Cl` zW6-y_VP1uO0!GWr@_Es z$6IoLxWC?(M~=>?%U!J;hBej7bFbt%n0j{p1@*M@9DF@*`U~o5<%#N90lsaZoVD@o zFx`4{rpbxqruFGoq&RdQ;vp+<<0Z-De_J^rFAvwj!hH#* zp-$xjal`2)j*=nfwNTo#-IkZXT0hO^lr1|mlY--Cx`X4{f=C(X+%YO1) zZ|Kv*-jap7+yPbn5%icLLABo|cCn0^gq(+Dn{no|Al*0Y8M{mDX-Ja*(z=KCt5#da zZqY$1-$hZr9Uve1ZfNEspgrFWv3%s0)JIk!-=1bZ#k+WYd%}FjgWnjE$Y-mS(~^OA z1H-Y1zS+J>Q7gSm;gf->`Ynu!jYWT=hO%D7vT$W4hdFP2ma|7g@bPx>dLo>4m5;r< zI26SX9<^?rMxKcuB!w~R)@d78@4EIbZr&PniS=JApXxu0cU5W^OPiri z@!{p|o6@#$F;jMum>F?Zx3gon4b_tNmOPY{{cq;Megyaw%R|P*^6cEx$}_0TWvIxT z&{iUEfV_r)9Q2_+-c`ljyq8uNEQwau37y32`??Zz%d@fl2H-UQhr^un%1)GZDd{l8 zA$D+qvkPxLUF~B@GMaR}{&FmQbVGi7SC9A2;F?R*(1RBPYWg>zm-S!?!nDwiRA{(s z5&&FYp#1EKOj1?gE!C4HF*SznHDF5K5*8z67p7GJs;{o9c)dPUvueHnS?zn!YoUx9@exfE~n+D%sQ10b%!dGX+f2&lr* zdD!Z8@Pe$tgABTHJ|5?-598;l_=fdj1Jj)?_50ZUb+Ah)>j3I3y!hhqkvsT}V67_k z-w7-Sx99gbxDc!9{`MK^{(+{)lSqO^nV-xu`2zMuyQf@}FpJY~V4v{_N`5CGd)h5vqZ;5M){ zJcF!jhoQu_YaOH5wJ{8*mwg5}IdkY= z7Ce4iO=s|P+#9i2 zkgP14pR-BKVwusOT0_5PC$4eqFp$of-tkXHPP^E(!CD8IwY6uW*Z5a-uEnw%tfA^V zp|^3wuKGoJ_Ev#_cwhAg67R1*EYE>zYAN9ht3`P(s-7ax!RmT>7E>zYw&NgUDE!w6 ze7xw%2+#1xlfT+cN8{AD01Ey6gZ+gVptpaZ*fki3^z|<+4i$&up#J{;Vpp-NHmrl~_uSe>x`u+Vlq;(B5w}ElDsM*-Q5BLFsuiFRwAi-A?>@{Aa9_q zaUW+LU1+eGB(q0xaN|rKWF}$kNSHgK zS9l6yM{*Uo4*Ugaqi{XFn??CVf8I)sIzv|@DWB-eTL!*P)w`-NwE*(E>`Q>AG6sZ| zpzHCW?ZVVBJf6f7e8v08HzJjnfG>gAhupo6BW?H@u6g0qh3AxCkgSX*?J=BCYfmm9 zQNfBsVGe@IV|d@vS&9vGq8As(lW;GE0FQ_P(ST$+HJWJ=U+zw(CX)-LA!SRoPDYw} z!ZEn8S@A8Q!B$c0o=O6gG}p0OYWlaKlW^8l2D%7!3|to(4i-Y+6uX^r*yQx{Rl2oK3@N$*WnNxpw~az>UC^- zk}Cf$)Ckd-hG>l5U%oV1!S`>*^7`E5Jaus_3-)XKrhBCs-EdW8uyfTQnzfx2giRPLl7bp(oCgW>@ugvXTSw2VyH2J!BbnOH1qt_EA0J}rIH8F0|G2vRVL4|pQp-H0MtA^ zC3>G1&CFkWh#8`RZp!m2Jo%^hDk0H_Xl2Zt&Vfvs)cv31x1iTKnM@U(sfd8olEDM# z(HF@CBz>FEo`O=ZzoyOS4|nQUa7aG6sC+OW9n~h=9w}9RoNj$EXClP zQXIZ0FQ(thrvr^M5YYI*;O^>Bh%*sNnCAO~Ma)ywgqSw3-#oB+=6qC|+_`yb)ut&&&7y-7cUXNJ zk(2a=ELpt-SFrW2Uc%ilVUk|ojnu+4_Ndrz361j*=26$f5h9Yb9R5Bo=}`lcEJTG< zI|erlX|S)?&P^yxh2GCP)T{E4xycBeCTSK9L0}<~Qc%7~xMlCi>ZyofDrM$8G$^%` zJDnAL`v@C$h)t(;yss20S15DgBeE)y5*|cZtQlosJ`yV#@8_f0lq-B+lI(VonNomWyB;mzV*jFv2g)uCfF>AwA^?j?J#o)`Ii!UX z_vlHxcjHo{fbSsgZPZX`q|g2Zb;`V>#&_4`86gwrYPN$P*=?p9`kabmaN^mIS8k*m zB2~bFuiV-QA_Yw=%|QM5iZ5mx799P~FV?i0iis82LX7~>;MP@)8nZqgaJY0zOWQ8pFGIoBs!W;sR-=-qBKJW2 z0-+3R3W^Y%Hx#8{Pn5$v_H;w=>@b&quhc_Q>+iv6kS)HrB2g~UkOdt&ed6;uEWEjS zR-6nlKQY+-&YD)8IGs(6E>yu$*yK#% zAx?U%*=0QEkXkUAN)@KF%P43HQ6;P2sjw68mQ+f2l*%xsFqRaVQm<_$Pd6kSFK=22 zPc#geZ#tCu8H6470v%;pXbJ5WNTh(E4T--5B7l7b2~S@Le;Rw1qhD2V$zR_$zkm*y zAL7o!r{JiIL}R_(9PNNkV@!?cs2ybAR4RBih9^E_E!?!G)YyQ>~j-W1NO&>;N24(1a@kHS7Y zt_u{XO(9&5TnfK$;>rV3)*DT+b0}lKs1}8Nh5E_sh*d9PE28BPHvIY<;xUDWKHOZv zVN&wSnpS43>J24!OCey_BCU5U%dclYj6tDRF6yrYwC}{rA;6$snJ|<%NWG*?`#%A0 z8fl`q1Q;qY3F~z(wH%KViV+)5{5-=ddtqADqDqD(CKVj0|Nh2YYSNWS3T4R^>!?)Q z=v($S)d0l|a-pf@83FPklgsjxu(-Z&acw*Y4~6w@G}_Cb_vd*hgOvauU^1B0dvUHc znhZqeUtwrm4}5}h|Lgx-U&^#KwmFWq06lh566%5nQmS-jtrB;I>C zv4{~M9pNVJ>FKPSl*n`%=VHdocu9|{3twWu3(`wY2us>eN6|bmTzhS3FbsEfxQTHr ztHFv}F%65xMK`j;mKu0RSq1s3t2vk$^!)$Ad|nzutk~)QieWH_{vrE~zOCmNJ&k|D z;4l|V8VkFyhw3e{3r@~Fzst-e3KK`=@O8_jhbIOni#Zdo!}Z~}b7|i6COQ#a>f~?$ zB$2avaf0H}lA$-=hoW?=Q3X9HtMOt!v8u!;jkgBH7Xy?J3{Xm~o=Ys6YP^ggAo3}Q zG;V>&2M}r8A;#1`NORxn2F<~+px#xozul0DT9vJ~oy4$GWhj7HUxi#^;gr;|Tb02_ ze^`brlBiXf{#6Y+ji`hOy{j8sZqfTxbXDW6jF}BOPI}I2(B9G$dmCH$H2mK*d2PwJ zZ(a^w8-}-e*lD~MEV3H!#Ba!Yqqp$^vdxoqQamnY8Flgyoq@P;QvpWJVhJA_y{vID zQVpa2A!PJ6_jq3LE!5cfpehFj9(IIo1w{Av;#Zx4#CaF_)9cJ!EREq6I|*Gj1~ZwV zpOyi#*)W5njR{D*kwFCje`jt@)g$N1oSQv&Nv zW(DdpWSNM$V!Kf%w@ok6Vm-DqcoIBri;u&-Z0T$#VNIt^=xNGoc#;sqMO3?`+`2IB zAbg-gh|}g`U~y~>M0P%(DY-v$n|%wd|2V!!@yG5gWqGsmIg{#~Mfs6N!HNC;mP!XLq6M??9P z6l<*1H$=R{9$C2)l82Y&s9^@D`!`GtZopK^QCWazgtWDVjhSTMxZanslM6Sji&kqA zc5!H3+AbFHZ_P9oal$dB+x{%ajm)I@j-2Xc96i~j;3_UY7mjZUY(K+Lwn!?tb&JbV zVcU+vd;6pwR=MIzuW2ofF(cOK7`J*Aa%CURgoU8_oB&2WbNP4C;uxc!%&Bxiwr${W zu*n-Ma0R%bEAMD{c$OFHrhgwApDlMI^h*gP5qgNBRPUIX>YGgKq9jEBq$*~rchU{p zW;ffGDombX7ABLr|6}AVFSij%^)cXf1cr*hMsGDL4rLD zev`rQ+{4|l|5d&(6Pi$S(0@v}@fAMI#@G4q8lU0=_m}mi&)Be+5$#GLjaXIK4 zz<8TpCt^Qt+Lyq<$cPFooP;4pDvZDY6;Xj+<4Y{pYy1Zv*n@W(Uqi@he3kJ!>#h_H zFsglyz*z>?X3JcGy>3T)Uslsz#rdiJ4h-0=5-J*^EEwa3)qnyP&d&ki)8`0HAc3uP z6Vqh`2|}| zHj5wdBjI)F<)`VkYF1Jj3CpHIC1MQA6p>PtPH&!4(`c$e!f{|(7{I%O9wn!_&zd)F zrH4{D43-TQW|Fi2x^!}I3YuZ!8hg=N>`D~YHogeDt-?kj9h7P~5G{vwufp>N{9kq$ zj5@n-V>$^hE{R;Wg_01p;M5hQo0mNbi%iK=J{dl7%^uo3kaxmo8h6{IT*pltemD9P zz0A(VndzNw3jguerRS#cV+0*Yj_T7FstRu4p{bAty-&feio=R20UFh7aQaE<)<1XY zhlZj5+r3j9nz-7&AUgQB)>dm>W2^D0^{|m2In<5R!%7;TMyGhg8LoygIGWSz6c8?` zn~TaFy^8fY_>?%QcxVLHTEYE34lxd`NvuI|T=AlcgBW+Nwc=CAJ$D$O>koS9{>3#P zn)YMlD_%R;BOJ$|$J4?Sw~dJ{0mVrD>L%0?{**O^V>TAXI3S!vEQGoI&+f8t#KM+7 zbnO+J9+73gsQWq=slGcK;QxJ%Q_M|VO(8oGwh46hXGkp6NO93p#~RouA?!3a1^j_S zE#Tsavc@S@-4v|b&r!^v#`(mt|0OxyQga&t<$k;@&pDeBH{c{}Zy z_kd_?=h~@0oTb}|M(i)OcWP(8)9oyFEy2Z(t+`lr!#ut3cJ5jB6Rw$b7Q4r6{N|?1 z9gA>f4&z22JnM8m_jh53o1L0?U91gmPI1A_f(`kc?PgW;+$@Hg5^LEzo=NW<+nTKQ)Dr2q-hMeo+&?+l-yPKiBw^NyQp*i>0R4FyV+6{CxYq(1< zz;lRfUzti6AoPfezOjoG2h9A&1A9TH0lr%gy;;n4JH@etY1 z#YYbfJuiryNepXoIC~ltGq{#mlSybpcycX{CpVewMTa&MZ7w1&4;CiTv&Pj0$ZKm@ zXwhEHy!Cg(r3xK8ep8sD_;8Ak{gZz*q>Rw}HuralUL<0>pTJp#Y_g8&X=1>o$YrgcD2Ps9IZJ1DVgljOwjF_TqvPW%P}MoLx! zxCB62aEM-(0!+0O;D(e(YXNWtWHA66CaUB0y0EA&45|x%>cXA6@TN}AKxvv#pk{@5tp7;kpP8mUCeQPSqe^);6t)SLk)pl$!Y#ew9I% zh8IRT;%gf;Nr2q~z!wW6J2Od~pb8@}(;D|64<EqS0wUrS)S?pZfxR+@$ z+@CVut8hOcxGUGs!1=A)+)fB;ntb>?Bko&V#{GkeuG*=h)Sq^p<`ipBGJydGeP)k+3IwKD@ z&<=CC2Axms*p2IDF;hmIgRz9e8EOz?t6OxRjOY~~J-pWc&sNNYZJgEX zoLBaSERC4;;{V~o-lFkt%w$|1#G3%P$|M1aO_YC3S1ScqXHWCS6MpI zFu|7mp)2aqLspcWIk&VkuoLoHXog%;8JrdZVsY9zTTITpiGUcL2?S)k<2o4xzX~Qz zWDuZ6ag)`y1G z5(p$thv!qvz6*PIzd2Kwsg@rPt2hNCD64Yf)9$pjQe5@PxMqqb7OP94rYGE>PH9kj zt&>BGaJx#YMKBEZ(;Ok{*HGd@)Dx{THSz6z+kwj3+JW7#448v$uEu!W|+4EtjuG5Ei?LqWjtgU;j$@8MBPkSjhm5r z_{d>(e^~|SDH=mZTB`r>>Qqb=ow(>MyBVf+E?I3FL*W>P2MC5F`Zl_m3G5S;A+>!Q z0kK(&?ON<~Xkj3LxKu|M%hlG6uo}O1M|dbg%-*nI0x?>?lVeI>Qli zon!%#gFb`Pz%tmAJBBljEbbkw{A ztpPzexVCl_3$!dkiRH4VH|gwsqI9wpB@O$sT~S-?-LQEG0`S-+Ya88y%{+a7NkzkT zRltFmgZqG3-D9}&X)0D<|KF;iB?=DcUWJQ!!P#!!k2M;j&w?E}|fVe+jGp5|P6yj8eh}JqXF1ze47U&fluS`Gu~S zKJ@j?kvi4c>|pQBo5Jp;2yWU(tv+vF1$4(BqHZrLK`8JDI3y7Yf^*$&JlA2a@!&%l z6;IVr$%Qqs`xeUia&;=PusJ$Dt&Y_q>Cc#$=bTuS;b9lTGN``kxJ?x1LJHIAggqTi zVH9W+*DC%AgFn1qY(E!dMwdfpxn#;>3I?YRNByL#)K1(Mm55GOH5tNdf^Nm-O<oDibcNxCIFvziWbs^eL6wE{4z?ON z*>93sS}92pfl5;GVH|yt`g^|$PP3zWP9B=_Yx1!rLnd7OYJnuyvw^lpOtqbi;Tkk` z&5kNAc}ppI*W_P&O;6jJp4Dp_spF0G`PkZPK*;P3(sG84)t2IDzbS|Zj~i`)8cRkG zkUoiw70HJY28~T2ek%1&I1UYJFT~dmK4-!zQs_pgx02N|Z6F9nir$MWDK47JCgwTOAGNG4KGJ|7R>6wX@JId0EihT^gEHG{1P|7IB8^S88~!OvPS zL8^82_F`Q#t-5#_W@r#R(T_SNcEb<)0E)y}svblHs@a{AS3aK#<}5eDTD9c%{B@`m zLF>aHsorj?Fz&?46CUf>opmJg@!9J@<50(;3e>VyVO{SJ3$6~Jy~_)z>ya=Bbu}PJ z?GYXL0s_hd=h-|;<&?X3p#H_EdS|>m(Z{b@H^wb)!*kuJO&&Zlyc;37SA+E9>;amM zBr_l9P`2l&n`CSEw5o@rC`v^pq+JL5-b=D}Q%P#~k!8B&9b&%68U7_~6&i+|D8s@v z?A-RW!K{Clp{ylY-oeQgC;5M=+ywV2SYa7g9v9L~t*{sb3is=2lR%xH9E%!1{`Fc| zB%9+Fmqw>Bh?kxXCivOt6b8}M(_@1DC^ac13ce=_ChhdhH>q!lg4yR$@Ci{csbHWh zI1=48@R{&cwejN-3N^qh_=%5W2`;BRPLOYW94{($X3?YHgPVz;tHYiM(@{C@RNU>Nx*(4;9K zMigBaC(Xq!q5Nnm5D*|UpgegK*d!?68XT`m`v76-DPh%3HpMWr7TnZu5~|7+jzFd) z-_=E`KR!S((@^B5)~r(-hlyG@!mpQbXh@}Ujg>GX+lVFBRmVW1fma_}^j=G{>gqOP z2*TC1Uxv;Qnzd&i9|l#{n7~e0k2Ha?rgVi2^yPRct-SPuY;yH=VaBWRjPtq>QB*Di zTiC-j2v`kyOMy-f4TUXCo*RaqyH;FRp9?c+YSU4ZD-tn-06Bv@&30&V@NGPs z7jJt}x**|aJFuBo9)Az}SP(SMjxOh_`?)Dt1*<_Omj3S(Yoq8-gVwWymJ`(GDw*st>BWu4#+@;d_Z8dUkZ!(*BN9$+r?f_ zK-AWL4tsg67*KTtxX$5s@c1N2$^@L4tHPFO%Kr{zZ%(nP%939tc`A!ds$2tkT^v)u zWCKwh5rSjxJ79`bvWIzih|3^^h?0%5gy0Ma0XB9O2T@8$Sg?vc0a{!;J8G!G;x^Op z*f#GEV7Zkw4_~K9l?;_N1^4W}ViMyM83l5)71snM;qKhGOVoC|f+cLr4lHoG!I`j| zpmgfZgHL(7Yn_Ur{dUlgv1W`Lyp=3$vnLZYl63W&%Eq(%GRCxR>#}D-F~hbHz}1j< zaBr0!fNcf`*A}$6N}1oAk6O-FGI5sO7tSH`Q6EpQm0@SBvL2@PDyOx zA86WW*WZi;P4w#nE90B#_WsCO+8Muqo-roJS+#Lw?H@>&2h!N~ zD4(mij$3#nLH^=mYKm!{@#`D;WSOjG#6``lZhMTCj(<2xSk@DmQkj4zXH>()0n*78 z^jdfDDon&0K1MSM`cB;^0q_i?_WLWId%k5$w6wg)0}C+GH0 z&au5^Oe7fdJ`ZMz^u*qiwzr=6leadREt#|&*o6(k&jV0o^ir%-@XS0KeoNV-7=|3@97wR5z8FYKJcmQH%W; zSA&3zb_}i39W%5_cihk^-9kizufkn_cm`pcl7Y>2;F2{$VBL=4(vd!vS7|dYq9V#m zaX&)y5+-a!vB0nmuZP=zJz53QWq1vDRQ|#xn_KGv`E&=q3=k=8#sCq>aHV!RE{{nH z_J5qYr}$lWba&7M*5gs4wHyZoU+Lrs^=KDs*Iteh!EPv5q*Zt*rURu)h&kXfutFG6 zpRK*Zr&P<{!R+r9yeDxWT;3t{qR+{Ab zVZBFawJ)Jw(3BKg8JFUewpk<$Vc<8UZB#IJCH(s2r#MNn-sz~(Oc32mZL1d6>z|2; z$wmE>y&!95w0-PwV|rm_;q*fHlLLIinSayfm0pJZS)q_gjqufQbDUu5xIO^uC7f7q>o zOeN)PWXh~6?KG1qLBJznQn1|YS({0emtmwxR|tf7FQt7yJwOY(ksDG!?lsF}d$FOxED1gvjxz5~8?_gxC-5n+J1`l+b%x9q&Rq zW!#JFBD78y*qrbY8s7&I-E-| zE_H1}E|7NP%j|d>=MEtG;f(=8qQ`(tF|^P#xEN8N5a>QGzq+pbAQLxCY}vAd3M={u zc4ATEB$XZ)LMdb!t~puc;)GU7#jKKYP&IgmKvsrF^XlI~cZ$bsY#w5JmxKEFsOCFJ zg%vz%>%HBCT%jRoAK%t1;)^4!c-!x72v1KY`zM|LNekj}W9@%ZXGnwbtJcsXT04r>UnXTs#fkQTqPfDg-N1o%swpgZtQasmb)^iD~&>7+s?rz2D)c&~YpY9Ltci>T;Y5j2n zBsbF^co;P{0_<7teD(@XH4mMFZDe$Wc1|&F@LyTGd>;0bhxAR!Wradq5s6IfrRu@W zxn#BBy}*8jqK*B^*CDar*;5`!RfgK4GGAzcAOn;n*TbULKqbpvV!l=aCAH~xYYj%cgglY4uG=B zj-i|*50WOK(Mt?JJDKWtW6SLqy6}KxY%ORUY8^<5R_{V9#q~9;=~J7->OR?29o=Dd zLO)%|wSo1;*Q8_I;BgY$d^9>O8$9mtFCnkWtJ13O;PC@U7JMQ1I*7V(rqPUW0sbkJ zPWhH!ACK%QgF+VmXbDTaf zb;80c8C-fq;1H+Hkh!p)Mi6H{-0Rm2$uNUbzpgimpmI0Hy1_l+S%1oj%jK@@PY&|~wjJ|=n z8`8r1STl^(l!KRTRkUh=i+6UH{)BujW`R#z@0^;ad~T-N>m=4D&s~xUen^bn323$? zlIO0;V4pHMqqJ;!=|c(P&OeP9JHhsLAOqGc|H=N0jeiy&9vh}t>1&KZhSaWQQw5eq zfJNs}rVNP*{Bap*fH}~9sa(?A(R)T(vJ7A{Q*4?svHP%$FPHF;!T`_b5Da*3#)t6G zYv5s!foCV-F|mY!G;5DBLFl94#k`JGVB*Bhx}deAa`*E{fVytM2jn$IFTdiy08=&t zyr)rDPY-+y7T>xx#D#6G1TL;Yzc_fLxH8~u1{8P-8DBY*|0~^GP#6MsYFN;9^0`kG?Ax5w}ek-a2drfgZY*4 zw2fuBw9^^P1b-)md&SK$}#6z>s5%7|ZNyqvw%6=Eh4z{8!N9L@wv@lcu50sUy zo|WoZAq7!@=vdyGO!@n>lAG|;Up+ik#@w+V0~pGUk07^a2o+9^bP6<>^q>XY8KU@?`G#?Z8|E->+k)5Z_;A)CAf6oIBna}vR8re@7~(ZRTIVRfUsa3OQO2bHZ0+~N^Q zhQYcae%);@1U){SrGDV+>4D#K=mB2rG(Hq=4~{dn-Lu~~z`{1kR+O*Xds3EieeVTg z1Te;}D_Sh;y}&_y&dF*68FwQuK^~`>QnqoY8wOId~###kdk`pi6e1-m_}G3W`x! z*Tz)W=^JK*r#d$lVsmGSfR&4|j6!OT+*^+&)~pIBDDl9l}cyS_F}S8Ng>&F8k>fdL9$b- zOuUpT**66vP*159rZc+MxizN?%ZN1tr#L-nm|@0I=Zw>n8giYUUMvr23J86cvX-IG zwxiFm>VcS!Q-LMh!Djf{ZC(pru&?pJChqaU0?X2$z+y}RuW;f80$6J-Bs>QRitY$l zD9)0SA`r|ojqbK>5C)o(OpnFArx%IEVX+s9&AEvU$qlIuLX5+i;L>P1$>W8CjR~Mq zWuSa4(X}zz+3>gY{;)g^y{@8{ggO<0 zl0QPRCYvoqh~{0V2vNQ36uULL?+*l$i$gKB{+A0y%rAG&uIC?qx% zlC#wU!E9r}ZPWwzMjW#WsT&3l=59nzCH*-AL4!D3L7WYW8+;a~s3IZw9=6xUEm2J#7@m!Xi~@5To!vNhv$Byf5`LNprF^kSIj zVnRt?4ui3{7(jJt+>B&4k#lI1><*Mq-9#K$C4-MdfP~dib;|U-{ju!zT>1(S5|;3w zT;g0dOLaKSs};fks@90xBd`ILz{t(Rpln+_j-FvzSDth7+N>$Wi6xsd#*@sEM2>iE z;nb=_qiX_3TruG`A^3h2{GtfH7YQIgOvNt)f#3V^5&Y62_@x7O^zf_rW%23N7%yk=aR zWJIx6RI8#`0WJ@NnEMJMyD>mzk{-|%brU$!R&Rw|m7aKjNaLz{F%pG3h(k1(nH`B3 zSQ#das~_c1#_2QVAtBzGJ+Zk=W_JC)rcx!3zDrIRR0ljgo9p*CW!cMAD}e(;^*M;! zN|22V`9YMaGTws-oG#-r4AwI7+brYJPZ`f1V|>s4=6mWk3|R>|zju8dv*0REJ{z7Z8z&^qa-_g(4wC-jKLh6t4dmK~bbx2r$FnhUwm@#_+L$n`n}^&{-|*X#(%*3lD@p^aiV?YLiQp=C`6Nmy2; zQg27hR#rVA`X1u?M8N9!)a0bAt*$7i@F=&c;at@@{dBV6iq0vUthq^5I2pZ5!s=eA zdKaF9Vf#M7wwv-wraUL%KZFVfac6aMo+z?C z8}Pl!eDCI$ct9rWdej%3NZesI#s+~@ol&JyZ3V9HegVOv3N%{E`EKx?A?tkg&5Sqd zsK?!&ll_+=D<*NEJ3Y`f@onO5sD2=7-})_a2kTj{Y<~>Z4`H~ZY0~9h$ONHo@jJ|f zJs^GsOzaVPpMhjC{#}G9RmpzlL8f13#D*P}Z*w_EV?THLUo=wi9cE z^^u~`CHrl;sqbGX-slk%R@VY8AMIoLeu<^;Wh(O_fv0f=SflQO2kV9orU;W$SBg#Y zMgm39N)sZgRHzohVUIWb?>O}Sg|jiG2ixI3&e2XUC8g5rX@ac8a8Ae;hkT8 z``b|%JBQ7aeGkyFW1WCH)(9_TxD@MQBbVnMC4gKfQ|;0*%JmUzPf8;cMP@Kg&Y~OU ze4+5qv-%HI_(5)pIHFi zz`q^YAA^hxJ?sP`xGH2qsnZpx>$vnL+EvDDo|V9X%G6SW=7`WSj2$Sf#u!DFsX!4H z8zp*yXWA4((o9sRf*}>dq_Y%K9`00!Nfwnc?ACh#8#aL@JHs`he-Ckm&c2KwbI;JwaRmv-~I`NS5Sh!|eXkeA7Ma`ZNR*4ZqEeYV|z~k zX+r*kZNYy62fbSnS09bzoIwmmvc0DeUz-mOM@N|OPfW<>YeL)m0aKkAudPw1UtxtL z(KK#{>&E5lVwMd(nKUFUXLOY1SX)gwX4ZLdmRUyu^@ahL?LCRwt~_Tb8@v(uyA%c^ z|D9&-_13~P?QV^!eV%Ufdy-|^#bD4@mexoe+WRs>Km>|69G^Yv*m96P9&&*m-S)? zQo0u}IMR!Ts5h=)g#r(eV9W7XnSPTJm)Z^%g@n;YL?qr7h z?@)*L8&K4Z^B=MK>uSH!l0kg6`-FHBFgrD&r~J-R)#Xc z#ZjE&b6_U?ekAnHfw+d8k3_KvzYpP#FAV1pEqBj-!g5_dh1iLu9l+>g%eXQT|FY1Z z?HkM|QQmu_95p-H@A$%=R_Hh3_o576%HA#bMU>LOoH8&k$8nE+!+JT=r6+_<@VV+z z$$J6Kkf*ET#{FRin4<5bXhmT(H>&5YqX?+|lVEkG5Vdr9u-^vyHg7e|{ zVEuIT>P~-x{AeYn*q!@`#C1Y*%TR}6L!qqHk1Skuu?}4^^4)92rcy8s}_}&PZ z;+P=b1ibZHcF6Y~823kccuqooi3R^@2||L%bFg3C=E={k*t41hVC%-M?1A_=n!G^(e7~~2TY1FAy2VQ0 zZnZL;GQ@s}!(k?HBn2QQRmW=yJ3g~stu!;4%Sx4orSKTBtUd4wiIp1CIw`QE*?bo* zK?1IS&IKemQ-g786h_Yrg8AzgkanVntEaE?ieEK>MO`#8XTuE;7wy}_@M zNPQxS1-q|A&)knlofdSmHrkJVsBx(L*mRd;+2g-#RNan(7**|2Qpih$Vh0EOC_G$hh9GTy&iYz74?h4wAG|r z5ee-4eVx7X&NjG5#B* z$LF{D`EP#0LHYW5GG)<+FkOpZ3ZIj6bHRSdYj|xj7QBhbiz$X}xBhJ; z9sdhz5AT(nXzlYZE2nsY`$JYMae+1V_}`d{ju%1)n=2t~usGOcar`cH{GJYsiInwe z;1=6Y&?{3)5TUsts;YP)@@kqwD2pyHg|Nz^%S%)C7>h11dsT_286oB$VxfFC1jH2VT~=Gr{Li#J@SN$@UX;3n4gP&3WJg=3Yn?~XvB#cAgoPBoMDn@6(ajq4%lC8>4qJ^2X`?UgUM@JvJ&C zmn&hPEArxcW^CeRkr#I|V-p)HVZFFciKlF@I0+rnSDv5`3ZDrA2ZhfBp@NEMg5d1z z>zW`OJNvpP2*A$1xf85;XWzUDR=Klp{simV+1HbrU@bdkxwsW~Ib+0Y|se|KZE@p$GXLE^7_%}VQ)2lwq}u73h`Fao1^zLSfgysM=qH2i%rnmKy6Q( zh)be_*Qf~1J*DYU5z2e!PLGPv-_tuiD(Z@!rPHILZs}P)Ju2#=nGit=!x zb>oyMK}ket!Dkm>|BI@J35kes5qxQCM1+apuBj0b9)fRAjfk)i{9tNCgoEH$QzIS@ z$#8n*Pec*ZDt|PJm{$2?QN*;$ACDrYRUV-~cws735%Pofg;Q`9p+4xJ8WABrSP@3Z zULH+AVgs-sM2qc7N|~9&=yPBLiHYSLuuouO_AkN2kRACPLd^w%tK*g}GPZv&qH@)L zOQ|r=6(x_2_**D>bD1Sd6_L8A01&~LOLT7;er$gp>Jw2Ef^zeU{&V2SDtP1It&YCQ z&i>$UQE-2-_P{VnN;ZO5@XW)IF)snzmP?(ZH@FAPK8cl{ON_nLCd(POs#;tox{tP4Vq14r@X&x<6`eeg$LQP znF4@T9E{RsMl|8v?D)vp$bk7uy3u0u9I9@(_c)52MlkH}Qj6CU{t4<~;QFX)#^FBxAgO zF8NMFp<66>6SF)1pWyS}i61Q2bHVdSma3o56bV^91J8#X0z6BmQZ^xKZ5(QP0)2(i zBn#yZ6a;B4i}{4-rTr(VReK0O#e_^j#UxA|S4Z%)D8$M1cE1k^VT=(gG^zYb)aIXp zK7o!R6Wog03K<2V0E2dX(X@aS*6>#gNuN7CI23#Ep&>-V9{8e>!j**)>8t`Zmq6vP z6fW>igLg10!T!EI*^2}?z?B~S?qo+Ht78&&l`$ssW=tZ{A~cPOR?OkZ>?p)$OE);j z9_v8g)e6CV07yLwc#?)}7zgw%JuC#4=f`v`pKO(0XXQA4E$bm`;cu)~9m~sGhE8n( zIsrRQQa}Gzb(1E}K+69F%JZ;w^#CBNL6;i$k4CFvGCWvi#k}s8Ro2FRhAcx` z<^!8d_m|T3!w{B%7U~&%y>a~1_Rq)auYe<)NXGp`;mDycV!f=S>ZMD5y#&}D|*!n7v3 zHltk&{YTag&N>41W~JV7_7QGW58`Zb%;&DWI{?KPn$xnHjaqMI&egu*Et=F$s};Bh z|GmX(yC>|k|F-ty-4 zvFYQPT8#dfcQm*d4$pZ<;frk>Ul6uhoEKXB0W~_Y`zj`s4aFj@rx^OQjvn=HVV}O&YaSY z<|e2P`XrPsa}e(`re(LHFZd#$b)}DVTcXeQfO&I&voH8LqQeLoaQ>GO+u!E~zpF9h zK2cgd6ZNogt-hf9DCCnt*%wrs+{+`kO6#x%EbAZYMz04SxS4Gi?%cTq6QkWk3_fna zx#>!#f}^r4sab@cA}wT6jFUCv`WhCy`(Zw-bxeuYjMW&H7j2^LLSDOu=~xxelEZA2!|MZ5!|+$|<{O_1gf{qgAbI(_G`!53!}EBb zv<9EFgr9E=^;{}P91pr3pTmBI0$d2eJAtDF^FIVt^fAsj8vQ`byBWw%yPAq_+2g5= z>#m>d?e%Rw6xlG@tODuOui>~78p~{Axc>!8$<-kvB2yF&Vn>7aEj%g*GOO)$- zqsLO-p7`}WG}zpny>IfkS#Qn;LZ!0XlyjAQ>8TZ^9LL)W@Y zJZJ?1L6RIvs@;$%JK;5u13rXk8?x_;x2Rl8y~j76wB}G|9Gc+Bs2>TTK+ZLu16sUA z_=4V5e+Sut+P)E{nQ`R=H4>$gsj&_zn zO2Uh6D{BqxrF;9`xSO*TGy(~wV2I~GKo+$V8hdb1pp&|EEUeAo7(%pHrZI^I@p~r& z4BZfe9b?!QTkRlgrIS&_V`+C{6`#0I290^>h`sL*10GX#%-y*!WO%^nmeE>|p9gF@@uIGVt3 z#B_#GvR?7m2wlhYwCsCgi>${mjj<|SC;(a1_szrii|i}aPjlInp3G%}=TUs3el^S2 zbzU11;t%`nA{&Nzza;$}jabP$a?Gyt>YiQ9S_B%wOoVzlX=5ERi~%ut(2R8igJ)ew z*xr|c38<@PEFWZYhR$gd^Ufm2$AWbL5S?X~5=OY&fxvJnAq*-Uba4#2cw>Tq3LDFV zl)r%kM5Xq)P7jY^dWg@ql7^o$PX?DBi_S2jwhH9XG9ZBn z9V2?fF2PZR{RAtuK9sx9w=!d)`$jAEpP>wXuhsTg*jMqE-G@RM z{1EH!2kThG$)zL)7uVljijIC9aPZP}U4%QrSU79}$UGs`_A=1rr@$L1j>5pXTu+cM z^{E#VB>Wj^a3K;KaW6PGblcvUD9Z8m2OmI!l2fkNk!efJ{~116oH$`DE-^*yx`{+{lU>D1p`yEz6(>xqC8SW~V^U;? z24Et<4b&^Z8Cr^Nx!4KG$t`rsaNk+z1mo{4bQY+sel{Y-iQ|BC|6~xCB*VK5pPt zp$%KEZ7Q&~!hr+7ZZTi&Ncpcsz4c)T%f;4|e*%HXPZo-Eg1wK!aGK+o_F_@)U4*jx z5!V&Gk8xdLT%w5HA@?n|7usu!3hm7+H-8Y^71;BRpVA?}VDe(2sG@VMipSKIGrkkN zw(OsSXoO($PY?dMRK#Tw?K!-yvA~9Q6b~s;(vSMFSi%cdc-;w)RJD0a&89!Slq6*t{g;lHP$0H`dxi@Fn)S4GgeQs?8~sM4MPy-WuE{aAO%Ml!UC_LQ^Q! zJ2|f!6_fIYO-$MwWoVie<-8SiLqCJJiM@U3hB1mbs>J2nD9y5_G|R&@-X3r;R2}Vu`jy|-J_ry*sGJ3B>fZHsjn3E=INk11pNE-fR9ZNxM_O8ho=X8 zXnMeZOb^&GJ>a_O0Uw0fClFx zi}p-NpP}7|^1hGo5vX*bgMB3X=d?DI83LT?&5p5lcHu$Hbtz$acIwq!} ztz%*u+Bzntp{-+L8rnK0rlGB4Vj9{yCZ?gSV`3`W0O<|0;;}=US}b&UE74e7dX}b> zUNhb*HXkpHmGQ({xz?5{lz|FzgF5GlfuIhwmLjZzy@_7_Kx@J2Ru^?XmbI#7$$2e> z!^FL{C4G5I;aZGY%leyB$j930UIC@?d@wsRHPPCfc+Cv8ZmJ*WA?9*6qHe;r)^QTT z-_$fXnU;rnx=iqSfTxof{KM_>T2~&kGPOm*Az+x}4@@zD`2)rTq+lGhm`7l6(1K7% zJuTKk)DfWHp+pChftf74S89(D5N`hSD>DK1j-k|HetsoCzP-lZW4;Uc{eiB2Db+kRvI!b47Ufv|wi00*=qO5RUo<8$V zotLX8n3P)Xv|0NlO~lm2Orrj;0#D}tR|#h%N;y@7W1V7qTZwuqyPtX&QbK$?67^zG zifCufg%%p~naGzCdigV8ubpfMuSThAeC_~y zo>+Nnvmy(z(ByYWipZ!d&w%t-vl=Kmlm1|gMSKGEvV|+wkHDwea{#F@CassR)xE-t zrXh#tOMe{2yb$5 z6%eEpQRW)j1CynMuGlatunY)ouNhnJy;gC#o&~k7c5CDa)$?$CV;yT@PY)SdLC6H8 zG~f<)LPeQ%5-LxM)lwQ4dmd4^mWFf?@!taU+S;GTqYO-9JW1~&a=R`ya5fO0+P;pT zz}HY`(NO1gzz6Q~N-2i?ejKW1ny-i&z05+ZXa9y?<|@nrccZ>?+OfAw!I|n(gESTl zZD9sg##Dz_uB4OknC^6LW;f&!S4|qk-Q%t}2*pJOjeu=hO=abT-cnMalsAeqhE}N< zD;2T0k*V2x4^ZLV42^>v0Zs>dt^o^5n>8L*+>CLnYfE^8Oq=fwp*L{|suhQzE@fif zDcK@*VIyS;J6i;&LpWr65VRCQ-esr=n+u)AT<}e1%P9?@R5F-BymAT)S}Kp>p}1PH zkZh72c<-y2NJ&2zQ(9G1yK1YYx9w(B6|iXmTU)v|$itWS+kreFE7aUVug9ua+=s^- z%vtBHR>!sBTJkei+wGzIr&imatX9s?9<6=a}&vXS9? z#0Exr$<0+UJZxHazMLB{gKNsU0o}ubKFPM)tasm_V~TA9SGMj&+e$c1w?D?bY~qWS z*gGA&_VrZ=gMuj+46cpl0Bk8;3c&m$5SK~7sCrDMwk+s$ErOJN4z?#9|B%Q#icJcV zV!}TKVYNkxiR&SdDLIbeRDs!tx)im9Gorb_4=b_AQFPl~xxv3=HJHY}z{6JLD*Klt zfh=HAycP9QU(47|_2MyJ@y-`-Z7K4X@Q9d%`J0j7Uy0UK6Y;V*a4Cxw%F%y+U&I)` z1if8PxJP@wRk}oJh5YfOXxe?sQ$QxVy&`fVRBYR9+DCN<+)Z?0WU^p)lDNMP&T$C{z6Ypy(N;Wff z9`LQgRx87Knso4Hv;ha;F;D*%RaS;za{Y~LJC2e@&dS=sqev$dA@Ocq1M-PgWz2It zJL0_$cu#ZYdF{Gz=7HUDJ;s=s?9T@GBHU=6W+};s{U3J#LWb(!7FvCWTG_(@qtOB7 z=qApwwP#`P)yzpMab>FO&1l3;GjLYh{}D=)v6|!ZT@EKu9DucM^gq=LMtA?i=r|6P z(3q0qMl;1r68oJ9l5~|r8bD18+6Nh)8bO-ReF_=Vi(+ z&jWVIt%dps(xgQ)$T&El30bQv;iwF8EwRsYALZ?W>}odQs1Qul+X*-By#u7gYax#T zxR5GTV#~XZifsF$0vOcMva<*k;q4HFg3}y^&%{DVSuW;+_o1*pJvZ=5XET%4cGu*& z;OLWqoo10QxELXN=L1c|>O*%$W0Dd`;Ku3nG!ZUbYt_M_P98S6L7m@-a3Q_Pqh*-W ziGa_c^nN0m*c7epn^AMfx2?4S;M~^h|VHyDp-CB(i%E&6SZ7o;tmR-OTg!FThTv=cuV?6Df*7#C*i*gAH||$ z3l^n6b24(ELhA{&yS*Gc*oF0Qs*ZM;FxRsu!>!s!ccI`-5pS|KcCDViaLurn)q6rX z-=1Z4U!-o^dc>+Zs=Hlh>(R4@K7ew8%5fb3AgzCX{F6lgj~M?p->a~`i8k1ym%)Ww zr~V}vsibyP#30Gqg97zS0a??P8a>x5K6X`HtIE=2glfYpHjvz>>IH-c{N;cRE5 z*c_x5qd{XY)mADErA%0)%e7OKa49evJuXx(u}D-ihmtA-BFGy>#kKO*MMBp1Q()LI z1qKllRh(97dcXe(2vZ<Wv}q+E5W5q>Ba3G;(7b)tc%EGt>;Q^bS!0I_CL zf*Q!kMfXH<5oabmnXHXU4#sf?D8XH7mD75ycGyMQ3#Hpw`tEzQ$~b>Er@uUOyK(N` za1Jz_)rPZ1r(S`Fe#fz3HOA;jZo|^FvV>0!_;lLx%Qtt_Us;>3c4I5*ON`TxUI|4C z7m;px$@eR`jfPj~QHA4u2s9&JLg#oNrWbWlXT>@n0UjMJZ5&x|4T6oaQVHN8#B>!h zt-IL3^Jvt^+P|4OD{^$Aim;F4zdz&&A8i z(u`D?5L-=24N6XvnC~*8@MXXnarRok^%!xc?aRjoZD#<3n)NvYI?6*SJ+ySsTC-sV zQJuZX2nx+!%^Pqqzpyw{^R1@8^!=vCXW-`z=HZG5GCM|&g0f1z;%|wm3BMViS^WsQ%;m! zZz1?Xten6FWxBxlnf`R7|DL9Y^-EXN>nGdD=D0~yfJWu?1AFh~R9G?wpmBEL;I7r( zS5Dy2e-g+1Q@BW0i0u@-Z9{!ehwx3QZCc6HJ{^Nu4EtBxASG^F4;!0JJ_en+;o<9W z+Y*!Jw!BF~fwJM3P^Jo{Nq6`Yy8;eyk)I!i@AnB`6DzG47Rd3DvB66}2b?!}>G$;w zk-?PV#VrHD0}*#*nfr!iPUo!)W-S;uMNXT>Tpt1M92wJ)OJ;?Q7#G++I}Nrgo8h`D zDma8o%G(uOQwz-mk4D)I(r}Mwhhd*$G<2TGQ;OQ3c=;%#Jq^g3eukyl>Oyca z42W&ev9o`9th?b0PxZRPk74j|Nb3CO$a{D{Vtr1}YI&x{yfTxH89z26965!mXHiw! z-m3y-k=U!vw72vOc{S|m4R%1;jFOwv5MZyB%8eQ9NY_83e>1;ZLR}280HH*B_JZTW;|VMIyn2 zGs(E~^pFl^Y#h8RI-b3<6h?}i^UMSrqk;_KJQ()nBWQAxeHnJ$K9{4G7wOqvuvjTI ziDOutZU@X4t2XiCM!Xa5QZ0yjl8d_8QlqC$X|u;WjnYPM0Avjk8;*rAhYus#P#+1| zycE#(S!i+GDAFK zKAXavQOL$Hq)~ZqEOZ+-Y533HQPKv7g)O^~;dDlAG6RRFZiRuXoc7XXs{i6do(VoY zeF~!N^1rh-1Kqmb*HG>M%G&H!6x_Tv`+xKX86c#wj-mf0dV5Lh0wJ|Xpqgb}@JvL6 zYZ8EDY7o+_H zU3-ctD#*lZ4^AKmOiOf$oFZ_N%Ho$x`7`lPtH?{JQgcN4;e85-VAv3qUZNywYz%mx zmq-oP9Y*Soybqc@!0608w=>d|6saXLs9_mWC%n%vn)v(|VHYK#f&J444(bqRz1a zIZ8E8awqy5?`*11^cP}bsyTWS)IK-@K)!2O&W$cF1>t4!5v;&?)QPK%j~t3#F2>vA z-Vox%qye`IP5;M{un+$q!vDeMdj`Ij;(vsD%(fu{XF}&43HSnfSZ^vF@^yWLq&9x;#Lpg ze3VHTBS}P2ZZdzBF$|CxlB{NKXa~I;nS?RaMLAYKpi7}mcx$rDcJYwn-*KZIkN2o! z8EtCFgOgbNKJ5Sz|2Pk?8#m{{bs1IeVJ!_Ob#Ar^s0?(3xLpi5E&v>Oi%B$8+)iwD z6Lw-79v_D`N%sB_Is9{86W806gykaS;~(%#jCkK<@%9)IDDE`|@sWp3k32+GY0Ad_TnLXyaru!uxY^UoZEpNJ?BO}m!dUY-AgqtxZJ~y z6If=fR`dchwDnNpc;5zE#13Q9+*JO4ip3d)$nBMZA55!9yQeFr-*!iODW-iT>M(3y zd<<2|9B?@>_#9vr6%q+{J}fGjw@8KEtCW2|(x<~isGTPcKMqMio|eRMsr?w|276I_ zzz|5Mq1)~}G0T#YyC_Na<$0X-$rR_Z^@q zSV0(|k_W6xgHISJmr-=_1# z1GlyJK!DtD(sM?yL)&rI4Lm**;PAh>P-AvE+k$@wS!npD(TiJ5lUPQ`wz`d?_hHekogR6dTQ3w;8LW*4) zXFO(Jji@2JhOqxywKZCj#mR2)ZVr%UfwE34zryaypPHoln2Au=| zwLwhqQW~V~>9BU&H#{G&_d|Zgy5!iLP>WMLAgs$6O4!7kj<9h`T1xn@1)Z5wb;`UV zLkUw(N^5$`!(t_XD+2k!zkw%Hp$9(m!VOQVUpi_(f4!Otv>Vq&pL;X z1`t@MsSw^V;l14YWB3W}YXtTa}AII?~IWJXn-&SXN;p? z142GP&}0mY17nzQOMo~q$$?kB1{nPf`WXiw3~3RjNSLVUsN4({fj!t0d>6wQFBdeM zJ&+l%{xCs zH283YpJfI=*AqXBgN0`TKXf|kb-7`A)`{!RRYel<(TrWG zSwyriZj2I2 z+!$qXyvoW_@RIa6!Lsx2I3cq02?h5A9C>cT*;NHF9G0+O&$9G(7@*ai;|`=l$MF2( z4S?mh;4k`q2~My;(~o1`+Faua?f_XD_XOtOn7R!rxQfYC7n@1vIy4QFjuYI6Ji>c? z)}}ek{PXSE=AW?U;M=oSW*$i~V{VnT6xTk8N35$WYz^&3Ou+x&;hd;_+|)g#rvB9C zX^+cID+m$9lbJz#ni?a;XOpfV7qclZW0`i~9X-9H)MVI*c-8T++N!= zz^NMyv9k2~LAcj8a6s?hx8jO1^KNA|LJx6k*s-kN0f(h@)A4-o@6ZRzdG1HiIpOKe z(G=3UzKhaEFSFs4Wa7`6%LC?&H;(5`JL3)e8Hp-vNbqRVc5`6^%T1nJ6%!gi)|{2q zI4xm$Sn%l+EJaw2k;@1)p{;gWsoK@+ekqu5NrrZsLd%N0(5W_{LL-V#;CewiIPNSQ z6AkYRM!6JDlOA@J)LInpr_}G_X~fTQaNxv|UPc++2Lg{ebGT?|8rwdju_mUn8nZCc z%k`Mnrt2}qOx3GgaWl^@;!;9c@0Lh~I{|Apcne`Q*A-#oZ3O*h6*7ff^BtN78uCr( zY6VJKBb4NI`P_t(yje9j5>3GX>L|2M!@-+rAddSz&@ou)6g%`Rvt_-xymAS|XWP#eHKuPQ`=I90&4D9&XjW zi(`UxfIElLuoWPHtFa7GP;(1}ifV2rAWb5uy&7o}VH(`8b;SgQ;*D1_a38Nw zOa^aZx@4FRS}Kl-iAQORVjte#;v@irru&4$j`B<~UBL*ulZ9kJ8UCG8dB(p>E6)ah zW}%q#j5QCl3;HFTKsQECVU!SuwR0+>;zHYoQZbM7>U`KlEY`FJTV8`ATB9QJ#kO*> zP+bawD{L>e#|rJH*7mU0V(>F&DMnceprr!-+CWS9;2bywHoOYddX!b*8F$M%#cDs_ zDr{%RVoR#@o-q6gtNj-mZo@LbVX4qgQ(sGFX^YAG@|O0~S|l&~8D~)%`4Hl488l zzsnKgtSbX$K{EGNr zjN@zw$3RlqWRq=3-3pXz;IydA3*Rup46{6n0V*=I#U_B~>jqcy26?LKDtHD^WP_DH zpomBpR(4@^CgWWT%Eke8<9io;xIS?!idnIVH<~*N#^U4@x;84TTudrgqsMJAe?7p# zAyql)Ts=wKhKuGh(2~`8C>W~qbg>l;Xw^)(Dh?-`VQL+Ge3w;f>3JzVAIEzu$;7_z zBU=$JGkO)A5gs?dW2)Q4xuXe>ZHlnAX}9M`v14q(l279TeIXx9;=)z2y<9AgV7tZw z_bxW>T@_2PNRy)&Bkk)LxsORYw29?HS?x<^3T3e`S**bJVR~s<@x5{INkh0PZJ({3%z0jVz5wfk*rs4-ph5&LZJs0 z_Y`^x^QGe9I}7tzTwz{$$xW^rFyO7Bg9?f11`HOkEyac9;-YGIVPRoWqrSodKZRZ^ zEJD$X3X2L0wdltSe1OH;pWBM~>%o5!|HJsF(5`&d;+uuI#V@u^CHz`+511@Cu4O@a zMg5juF2a}LD?nA`FQ?<%fiM3Uj!h102;Xb*Z4Un^($(<~!+CKr5CJ7fi zA#SbJNU$-^?REt_G?A={Z5kuEjWr8yV*B6#9wra(HZM_6bZtdu=w!HeNNb0#+;9$W zVuvTr3pfuwd~*uMaUf`H2X|31BsI7o=sQ33DL^V88f!RqMcz&Oc$9{62$5>N((2vZ zc<1iR2>CPGjN6%wYqz0Xp9}J@i>{-&HSAC&h=L)K5#y9-lTrNI% z%vmxH<~0MJCyp`imo(D5Hcr&0|R6> z7a`q){o> z6kz8_OBa~g$X_;>;Ji$$q)t0VSD+AaAk%LD<+GYhg9ZdG3e@+o6L3aGh}w;(fR z0roq=<;^79>%)NOEmYX@ng{1#{3($VVzGP-7GLs7ub&BU92Z6acB7Mzu{r*)QFg5z z1`cE1HaKxD$zvp9ehY79s1}oJs>O7BTA%~U?3NM0`-uy%(N z@vGs2wZ|ClV|n|F8(_KK0dVGBe?L?-e|akJ_GH9NN}e}hsXRelVpS0Xr?v`~2dK&8 zD4uTDFE!n+UrP5NGr=Dt&~S71C`{@9!}4CSIqaB9X41)qw^?fy(~O?X@+>-_8^DjQ zh2W4Fw3AyvkoyZgV7^4pU4riW3jQ$#%Dl_>_-OJHG8pI)oLLMC>bm1i;L$YH5D#ue z&7oxn3wBek0n%jZT6h5>4DHufAv7ymDK1J9H6JhWCFJgZF(J&8xBo-t3DM%%GM0!- z?FNT~_?;-EwinWPI~FoVDj)ZDM`K{*f6~EFfF=Dk>;XQLvZOsJU57T~#SS*Pc5@UG zXvpBX5Y`>N#~v+=JuZvI?o%$fpU@jNSMI`VEO(&A_3!ZK2Kaj5bDomJOP&vUI#a9Rr0Jv@CmplUI{j-S+~m}0yEc3 zvtVy1YG|@2D>Q0CvUub8zmQ*(W374=I@O9<#Y)KkcC%7TL-#AJ^eLhHVyo-@%A0sY zd(QJ=_`}v&qbO=!0RQ82>HXD|5> zk4!R995DlCWj!az2MxmHAz8(B+3Hg&H%9W4BX>ZE3|BiR0UgC$K2~1&7={eyz!;R3 zvO;OCj$o}NOz}E0McOT;{WB;lxNNL-RWQTRK5(u9f*L_fA)m}Hw-xd$UWLjUWsYn_ zEmMju==!SASgwq&M4D2uy;LkVt&atb#Ui?*5_G>F)K&=>$XI2`a=5el>O!Xi%r#tb zP6-R4IZaEsE@bWwE@kHKFtgU)HEneVdyZXAOS|^TWiZY92s6$NGomVKD2WU z78;mB=cz8IO!L0N9btSGHq)Bzt9qOq&X<)K5Db^fUC)sCv;$UL4VF3b9R#3*_xn1&NGRJc+QpqC?_y$uH0fomo~HEj z>*1#fKYVB$4W}xLz135&>}oD&LA4*tqz0)h#41TlqqU}Dg@v*}g9y(DoE9k3z6qo) zm<4HtUY1|zEiZY$!S9MwRIM-@io+G{IHd{CyST@vfb@7cG{QGLV&N@JMCk zRJ_TA5X|ANrf7~SBM=KhF@5~kyvGDnnPLp-<=~MCW5x%M1Bv9&18rtpBnMGk$W*oW z8$fu*_Gsr7n*nKG8JCGG?oMOxtZ2<$VwLwMXR|h1ZN?5h;pQ6Cj^NfhMzRty$P9X;I`+3wAY4Lde$F&M*y%X_vyuQ?sJLhHb|sC@~n~ZDAEm{ zW=_azTDIf!m`82YiR#G5X$D^ZN!6o!~O96W+EJoz_)#!7G>#2EG>n$X8+_-4l z&zg5%=w4^d!+}T*zc3s>S6Lk&u@+O_CoOG939$&j({;Nv{5(asn+t9MEUA!RCTg^h zKtUx|Jv=-u@BNSgH1+Z<9D{gBqU=2g&8|F0>mQutasAkmc(UkD_D;?P`%VO%n^sKV60@O-&efo)5$}2e%@k{yN}cOYoz}Y2JNq)OovZ zgf$H!eHX6`BaZptpsh{J4dxpaZo>IWz=_vv%syIEcC2&UY5Re*!HHG*1~dV?`E4l~ zUt;}k30AAK>dD$V=*pDe9g3kP z($P_rOG9=?o%LW13x(-CkNYo);HN09!RWB?rOg9v{il?UXYji9R>!8s_@Rz@cD#p& zKo(EIdtC93O}R}MH50ei`R#a!@dpswH1!&NrQqD?qGA@_c(-7q+Tc!5|Xn zD;jiza?bElAWC3gTu?5e^az)#!UD#F~!rHX4{J?ISR9dXWu#rVv4=QrXA#&Q3 zrtb|=+$kvT++LhhE_MOMbFlmqHL#!<8)D5U?hZ@o0u^)>xW*JJxEC+vtmO+iiej}7 z=uxQpkTw5nx;(zOToY@pw_avU?Tw*%X~Gxsnu!DSdV=4?_- z)(fNeB9rb0G@EdSk~wxss6{Ddr|*aGq)0qC4=KWB1+43R4U~+0&ZSYloHKD_IP>YY z&P|96bz`s)Z8ze@D0Ct?{4z2vqc}!slklr92U2?`7>%)>C@@?TxK?pa zxDGhZDxML_3YS~?_k`{nt=2D?H34=MWbKr7YGA*3toCgf0t3gzLnTvFAo==A(t5<3 zrq7{#Or{|}$sEf4_=a3D=#<)QGT`ZQ1n0^(qip`EJx4C^)Se@mQ1@2Ol5@9m2jPF; zfFl)fTo=Wy>j4jJHG>!b1OipsowylI)B^z=8?|0rLbTBrLeT5y3wL|IrSWP)Qw~14 z6Zc~w`^;8LW=DueS%LijkG3~~ldGuO#yhw7WhT?;MVf`c4!wjzv%V>XsaFh zK^Mt+k52Z3L=P<%TNKN_!{r~1SnguieR=GlAGm9ff5ir-jC1hch@Eq$?irCkgI#ft z0sYT#yML}$Q|)$9+JG&Q#x``tdf9pwWTXRn_fksda>939h4;W6n0O=BKFtmzD`^gu zt$jX(%Ku-aNja8lNxnb2%RZ{7Ys5~8?Q*TUd2Y8Oa3+v9#Kneu<5iHqZBov95P7Ba z8Hl`ioCj3gG!aeSy8ITCryI6SxqrZVx)^?JRHL5WLLV;Y93g)rs?`x!X<$`!Mr zd}|+e^Nq`)KNziZEK#T(iUST2;@D?P&TC8%Zz1kdZ-CD_zloX`l>(m1XCwvD3dn(B zby=?<@nVJUa%HL&wfMy_REV zI^1LDgnR59?@T7#V`sSa*jc459y=%9V`si)$YbZ|(XJ<$6|lCGquqZ8j&>cnYMkCM0U z@RFfW`lRPWYLaMtog@>N`@8ET<%H&wbW&!zTwn8_pYF3>O5t>I`$0wB*NAYZ(l3vG zX+}=sam~sh!pRDEY)BLD+K?!INf5s*dG$x}q4A)5DctxRPY^g0_IPu0JzfLidXb2=-Z!8Qu^g0} zpF-N^>Fi3SP{0`+Dq63hJcdX^t~N^2d7#B8`mQDLRiY~f*_i)kHI6_+GdH^FHrVv1 zQXT70@?0l-u2bNW*=PN!a5af+9XuVEqGx;rz4BMwc7GI&paBf zGiSEK77_Mr7;jk{*p+Qy_qBojtPSj5R%g3fTQ-Qyj|yjgV;fi}VMm7X_H6_E8evC= z@&4QfR-OfdzSpK1hqo87KLVODK1AeqxYGz57lt(nGs3VN2#bed_YijOgiw0FBg_iJ zI(Gof4#S2CTOEcSO4yn(?CCantRmjBN+{nyp(3KNCy2K^jQ7_zuwgTV#{uiNw8c@O z6~+J=1{OPi0LCtFv7-lI?A{hTbpXb$Y_S6eU@V8l5(QwS*&_8m%pb`XM|>c_VhHkrl73&7Z9R%eI|X)HaAJv=>5X1w|uU%k&Qf(6)upIuwnZF55pRfc9btt&~taa=#+X8TyEjddxYT{tm)| z^<$VH)$-N|L3}D+91OcD9EN#6MLSmVPm`cHdH9a5I7xYJ2o0#hB_F%p-S;&fnt;Vo zmvsa{3crIQTql&P5P-+qFJ{1389@RJ2*vj0lX1BPvH|4db0{iM_DG2>RubXU@I5b| z|DS0HWzN0H^O0{aWs-Pf1*D4AAID+Ty3e6IC*{G^oRNTTw!Hv#x$d)o#v3bv1ydgM z=&M!f#u|V!Wf<*loQNt=zj-g0s_DiBO!O8=I*kQz*~demSoe9vg_NXe?2e?((;&%I z=NpE3E~TgjtA>}#Z$fpM=h1hl5jVz2R%1PqG0&IE<31*3Dy+_7Q^BJs7jIkwq(Pwz z=8zn^)Gu@?Rd;|YV~oT!PNJOiE<}=r``=Le8GAiwTC4l@*f-$6gAUR?$lDV2!Ni)q zP*Xg+IvdffJvT$`@c|SWyG`$)TV8OL_BCRMBkul?$BafdHy=~=g(;0aVl*ZIqQZgf zY7C^z2T>u7uk#PX%+)BWb?G!DNj*wD+)Aj(ov>?V#IPKff6d>c9ENUBt0UkOS^HZY^umI1h|Z1kP9tr1qKRY>)pir6m1lb1A851jiE*QQb=|RdU8(z$CmCZ(t=!u5>JL2Mf%_nE7NT+= zO}81zYdnZry%^E=pzYJJ_?2;Vln$eqVSi^QG~Ve*Ko^ng&Y)AFXZp}(zH_-aohm(x zp2WHp{3O?{#0Mlc7i07^kH?>~`F?iWJq+_Qe9@Q94@oyhKaR(6eJ3^*?GrZ_gZHSl z(v*Dy5acED#DYJ7$VB5w(H|In7#{4_$mSSd;%R#c_8Y`a;lKjN+uwz|yvOB?hKE<5 zVn~|1F;b(_L8p0M)+P>a$&-dASu?IiGk+28wJrj}D5V#Z%^XUlY-dU_y&5M$hP+Y- zJ6WtlJSqDW>Jw@~$!6ZegjUy>n2ErSt)F5YyRXrLch+_T z%0Jyq>%)n9&A~DcVIt$pINLu0F0}Rd#*uJnzxWs`i1(@%;BY<$T?bDDR85<%(G7$< zx&Rz0_LEEw`@W5D!O=Xz>zBAZR#b)Q+6ivx;a=!e1F)wM!#oy$;Qlr~xXT@w6Kaf+`#9}J z?xXECM(!idtfTiZ`WoxsDemMXcFl3?R_GSF*sg+@#t{AlI$gKD3pRa=-R3-eN)z?+ zLb4xe;Nea5)*Q`Z#D+`)DdN)Cnx5I*_IQQ^{1wjkm;Xm(YoT(1~p|bjv00Wxt z`-KDbDF>Py;6NS*blZgmO$o4|u413hf=WHLN^wen?PL*3wo|HrXlZ~wwE-r#Yk-OJ z1hoBi43tuDabmG-e~uk(k}<~G7i|z6Xu*IE2TpxYLtEkzu!^B&(EfN7@swrtYY=WA zPZAF0urGiaQ~Bdg#Y%lD^inJoLB=+tYS|cjE{Yw*aHwbpWBVbqkG^yqg^+u z?uEND2CDp<=oB~O%R9pp@#R0l2jVfljUM|YzCk!%{fYe@alQav=)x~0LmarqWr$i1 z7<>jPt8YPa)%&6dBv%pYT|xA2*!3w_*GADfV<>tzY)r|Vcr$4PFV@-683a!tN9O>s z$2mZxbOQTJRvqL?Ej!v;FeKJut4Jwn1X6LWI58D{T$bH$r~{1Gnpz2`*w%`Z=qVVu zi#T&v_e}M~*qjaO-rq1kjIJXBiHaYWYC*KDLy@Y9SMhQYW&2Z5_G!*M6s&f?R#)GS zYR6{vuFA^eDy*^;uyF^&Ph<{h1qxh zzu%D{hQ7WHZym}o4&=~X%~Vk?J@1|rTeQ?|n~P%m+#j2OAXz`W8~uDnYdy!!jVPB` z>x`Qpfiss{uo$Q^N#;i}_|c{;I%c;-RP3{wA$Sd12uvKv`BU^p$XJgy-SB2>?aJJ#Z$z@O=o?BzzecS|>+90upKP z&t&>wOv0y}yI^c5&L={!Ow3FbVjNSfm$R5@A@Zc;LPRkS#jP2$co9)gOK$^rX=j=S zYA~1raKV_SwsP!U*BiBbM87gg@^`$}e66jj%-;p)tsJ zg-v4v0%k3>ik?JPvx3Y>`XHEx=>i=L_N8=$js`Z4kl2YW%m+Fw=;M^iz$B zWUzw^WFlJ9w&|ybx>GnL`yCrm56PrL*;mLT_r;h05?k4;WVLCIAjLX#^UMvXwrXN4 z=cYhN86h0m^*kIL*PLu%0G`_qH!ubkhr+KPL2qF`ygNLU!6OY$-A=gH<&SLS0ng_f zAVYyzzy1_c>Kw&(6Qolep)${m@9!4#`6Vdkb~PY*Ik6zzdQ&P)#SK-Olqq5Ot0?_T z&J|0g+KeVe(-Js3*PMxB*FX$&wTpBr3Q{Wh6v@rP_X4O=;>6nVj+q&?EK`OwTyDIF zkt)TqN>rYGq@mfxZr7Mv&jzmQ2cbF_Sx8rYfZ7Ja@?h$aA<#{I9?jg?~msDNP2H8of3@+_qL>o zHwm4xP^oz>>F&0NPzd`8NXJe|)Kc8SeN@EiY*Uz&8j8CR@$<66N!wW#VIL$?aGJOS z)|uGAf%ZsbrM>J8K!ahuG42>(&LA1GDdgQ9Zqt=6jdrC;MsbqVNNIAj6TJfRt*{J8 zPAU6MsZeG!C6NDA;B3D?^ufMQpY{hB&S~urQ{B4r`a_@BANpHr`v2G;T9Whn!=&x> zhslBdu*fYgXE5yv12FRAw605`*AoU>=}WlCvKYjYM0&&2mfnzdbK>C%2D2<8tnK%W zsJsd`aC)@urYRC`!OEy78!JuMMt5KfAqmB_U8lEg*BOC!or!CL9IA{ za32EGMuXbavk)r#IezHu;!L-0+=?s?dQCm6wJO!*)6nJH8~QEDc}+cSJ53#FoEh3U zGut$dQ#--N+4OdeBg<%Sn-GlyO?!_=ixh=fN~EYA{JE=SLJ~8z9k}DW@W+@Uv~?V4 zWYp~#Xq_rz23zO2Q0vr+wP@?iFIHRXzvk7yS*%IRZMPY2-d;0ADs@M#)M`tmI(?in z9g=Ft|8Ti?Dww8828auPLlcDw!u*BD1tFWxuM|_Vnxy(3nbVN${S=3k z1(JJ~vOOCzkY)8^b1}Qc-T_c!jJv8sX=@l0Z!Kvh4#C;T1#i=VHYD&KiHjT zA)^ip8k!WZE87+`Nk;6Fwn@fStbAjK)jJ=<2rJVmsCbpHb)!Ec{oE%N1=n+@ z!(!(>6ziP?ZwYd-h5orC>j9E5cS@Xn1NRX8EF`XQJp^C#Q6py5_cm7Zn`>@{tdeTn zIthjPEdDso&%tTG%9480P^xh!fmwJaA*B=GmV7| z45o|IaAU!z(Pup7&lMVvBK>e#IvZO7Ypi7jKJXMb~aKZ0*i_*-20;qT3#1O%$7FuqKLr7lOvRi0#rA)_oX7hWQ{4egZ4t zSq3a-^Y}{Mx8l9{D#l@=aU4pROPNPRxvZm4;B#3VKbnUCD?eCPo|tNFom0BeZE^XvxZDZElIya#utUEZ^16DFd1(OAuI<3VWSm|tc!8EZ}g zN%gd`nqPQNrng|M=C|>SxS)Uy8uejoZeQ%YoS_E)D9+_ycnbwASjKfw4T#b|QTgaD2$ouSoUEek1N*#fDjj zvfTrD;sy-Jd|IacLPn-L8A=OyxEU8c!z0ovHhl@~v_t1bnc%QF-MAaDBEDbd1b7VD zR&t87J}%qe!>o!e5)GAU3l?Oujk|#B_BmCDxS%k_tqBhyuAKyT)vo^9CMQ%tnZX{=t^mWgEKNK6w zV(5L5JK(zN74nJlf~i2qT~CuHuy@xUC0}wCaLojFkBp)6kH7 z+WZRkTMLB=k)5?ZQah{6>SyK?CBXu z`KKA-)w-|4{dnQp($DH^j4=*%Oi@2W$?Rv@WD07032w2`lDCfis2i3M{_ZDL*?{L; zV3Di8{;|gQkk=p%by%8Gx}pwqB6XQEWm@vXv7SsL`B++CvB;-{X=<0>KP9|fJPWZh z1AigARR1W3cgp$_=urO#`WHORza}ek!L4wPehGhY@b?gybAJ|>SRW(Z(hXs{{|@j~ z*bu>v#a(dWb2mQH)gjr3fbiX;DEI2;EBg7We(uxH{rK2(F;Yso(L?-z%nBvK%1ss5i|ZLGrP0F z8bp5?yIdz1bFx-4@1M$iYKH|n%^-S{-(!$Fm59tGU?ZjOZAZaRiCeSk-nNf*0xCNS@@(_Nj@ax9U z{Ric**f1oxy)iD~jH$gqxzjB0eE{zVT-W>?;ry!XAa_<^Wi%Es6$i7h}~Bq!jC zz4=X`ruV}Z9fjyvF7T~&S&NWlq1J0Hm2Xk9Nb2MzS#&0#s$$kq0C0=Pzi9*mR3RzaKPgt2OJ zwVr-6FSV4bbuhj{AsgDi1WOn+%o|ZM*d~DodsNqP2b0R~zr~crer?2{M$Gpfu+M7W zf$A~;fRJrdAphg=Ik$$RvtCfoYI@ePr|G_&*j|`|natQwaA?P>yn74~|Hu$Ou( zYs*Hffj-{5zyue=GhmRv8Fy%^F~+21v67dW9M?cF z;pmFd*?`CSHWMAn8}>Qidy<2KQqJ+W&@sjgvCYryoMcZ!Neb3WsN#&DEUgbEtinya z52TWO)~$G;#PhDDcd6$c zqnFCuiu^8k$>-wI`b0e|04fb{?ph@@gY-3Ip8Hn76YEpeN__A;7-&;V(F++M&N+Y9)O7qB#( z)StE&@Q>{U{MHL-hLig9_5%L7od9bK3;nfFD%LBlFx~2qp&dqU{*Zd?5>U7$R6`rQ zEQiAZANB(F2nSr@1soa<*yshE6b`u33*e09H;=Unc(T*w!5@2m6^0&gs-n148u-+o_Znp(fwl0D<3i}FSe+}b}e5w^@5%wkg z@hP=_(*{=mH1N*Dp8(#Sg#9%P8~qGm@4}w|-q#3wA`JU!E3A1M4qtSv{xOVf-i`$3 zqZd-mfGM0#xOS-H<5DQ>$j zz=2lGuqM#YyR{1_@E9_7HLEWBM}3HQ3lqf@{W)u<>!~j{`m=7%96?NrBZOw! zIRdyuVh^XKcJ^v)t4mMbGC0MWk5sk{PPN`8-#+UReqD-ZMJV>Roo4H{liV7FZhE?W zLn$d;1WT*OAylc(Ctv!*A!sQX^97q?QkTAzXkcHxGRw+*u8jm$Ozk%VRlsE!@1jn@ zZwLHF@N<`9yij=(ek<@>jo*6wuE6hF{I)p1FW}3q?#J-MK3VKJ{9eP4_ZJe@N%k2u{!>i!$( zwuc4fH*_8^&X?(QD0+r&cAkPf_h@evC-?R3kBO7pQ}*Y?`58KYAkLfUd=1WyQCP%| z+5dtQ<-3gTe(c2*YM0o9^1aYLOuh~K2>C7_;40TXK|D(bxJ}@A4pALc4OwJ21Y^`b zPrh^PEAfR=!4CFS>gcntlaTUudPSn%izkaJFm2X@UZa}tSexZJuJQ17rIhI|WxGo` zAoc9=1JDE$^Lgt64>t{CyEt&S5aKWsyrw+9wm(1*14+kqs=p7gk=RyGj>ero+1w$Z zG=BS?cKm(=s4RBc7xC)|{CeT$Z_xS8#g{*J=0ly|$@ubjuJaqim%q!MA3HXGH%ESK z!aMQ17r%$`8)a`VfM( zeNh0L1Rx6{1*{i9FF37Y)U2#s_kCw%?LB~7_fGtd!*3aWHh$~zW6RutA1nMj z_{nisMrMSOpvwFw{?sykna0lOy-Q2bdMVit0lP4I zkHkD3(^g^hcDPYJZlWKRpzmp-8^!aAdfqLbe=>pEMH##f2P0i6dp;6@CB@}$pLcf# zis^?lzuN8@d$BlnQo{PX@HE_W-T=zjLRM`%ZL|HMk*n{DhsyF+_6r!dvUbN)ZUY>r zb0=X`YWslY=YVsRkCU?>#cp&pQy)QW)WVY}Ulm5tv$&0IA19tn9VTt(qYfFqO|W&Y zhUxUI{e1%3a}(%J9*j!Ezt_>$*nf`Y!MG~;9*E{A{I-O`AI3KbhsBWC*}!-{?ZcNk zA`-Z0Ae&&iL&b@b3lp0r(w)A1BQv_z{mk@|!d9I~%|A@w*Ve zOYz%)-*xzLPH=HQ3HRu&_#=~GRpz{^Om|h8>8dixRb_sw%G6essjMoqRaGXcs?1AO znUbn98&zc@s>&Qxm3gKrvrJXyn5xV$Reyeg)16)5M7zjDQo+o>0*C8&R{BrhT-skPZyr26p|3s|7IRd@14?~BugTffi-+C*x-y#bY z;w9jBUcg_%0koo`BKcj@f-$TI;I-!N6@-bpup);8tZxwc&2Y*ud8>eMfb~Nn@81zh znKoH8<#2%Y3Xwa$7(%AC7DWyRSbre$)G#vbxF~Wsz#0OcwNDuNWe+(VU>#57^TWum zc*x-Z>vAH~K1`qiXgfy92nSdnCo(O^1dwS}Mv=n-*4;#=O_=~P?ae51IKX;}$S>nh z0QnSe<+m`L%Bx;s{t}MyGcO?hrBG6@c>%rQfS-E-wQ#^Mynx-q0l)MD4)X%o?=ALX z?bIc(r>4Nzft%8weHi<$7zEOy3Ld+t_E;Z}J+Ubr(}%IcHKqUgF!rmabTc2u?$eas zY7rM zK8$^>DP7Npu}d|jhxst}95GxJs6Td)rt}x${U>X3a+)@4a<)czO-@L7P5wJ)O&*WU z0z2K4YjS6gpNR%0Fx}&i`5ZB=A`>}bA+sMBW|We+NE^U!4t|U9I~>1L@H-nnT0na@ ze!<1r=i!I7*w~}^eHXu<;P*59{)`_bFWeob#U*OM$DkDw+Z(^b@Z-!lx)guxaS&5G zURVj|z)Of^FAzV2bh1$YLG%ycj}wlQuh_tP-_H#Iolz8D)?ce6DOrE56DOC6A{TeO z@CNhxl0bh)=eNZ9DxEKilb3buH^fPiP_`gCUU-B~%FP`w+)F2g=8hLWM<*rbju&pB zlj3s63)jG@Wja>;@25XT62!mlVhucyf!of}5cQm_MN`j_S}yhMH?W==oGx)jHI8~} z_U!_kVLvS2$$H#;DtdQ1dfbBJFYgUp%EZ3~QIwhDa8qVl+SD!?k%3M!O!l|IcsUMJ zX-7j;Ghdhf$1^QTGw4CEU3LTl|Wk;F~2T_qn&ULaaBQBl&xHm@u40U# zr{wG%Gq59VjA7aCxp#BjDSIhU^9aV4mIkM7>VE(N!NP@5KctWmr3z3}R%-qs#g}vE z<3Z0}|4-?WO281$ng7ykk#A1yROgBJDV%h1QAN*bQuG{%6cV7Re6 z;<@(?xc3XVvFYLA9N@Y|Zzot8Le*QOs#y*a5~M@b;$AVLA|bUIjG_lE(cY>+LwcRVC~C6)vz$NZaJte77p>tk(4)i8p3;c(IN*!j`4Y1 zlHohI%lale(i>h!iVJVbr^@L#5SHL)PREiWUA@yj5G5Y8;&)(`0iD|16jR$aa=1j5rsBT6If&G^n4RcmqG&S3 zh3`!GU`0+$vEkd~86`G+5f1!bB;~=MWV(v~ zDx5t|dF6P7<^7SL-amukJSAcHvwnE#&Om$~mN5Lses~SxUcN8g;^n&w;3k&(H6??( zN|RhNc*@FTc&N%^^9+^6=8>sGHjhSo-DcVcX#rmjNQuuAR2L8Fdd1^mDbwxt!+F5u zrNbj9ro&?a?cEV&xhA5BoA1fSYu%{>Jxdy@PL-YO!SH2k*ganN3SG? z=c`U~Jk0X4;qjIO|4=xa>%-n#!rm{3y^q4{=Gk0`GcD4@vn?m>?}X7`2z!4Y_WmvG zEqyuE#kKy~-VcNDKl<=jg7822aIWONbpGtaxo8iN$z^%K%Vk!;%N16@%f(f| z%XL-2%cWAl%TTv)P~iT7MaPG!T!8O?g2+Z^bq0bu*e|b z=#*n^IL2EX&2V&C9LI1JEe=UICRiLJaFi?#B{;e*4kD)zH)DqM&PYEdS)*3@m68uU zjPO3Uj8r>i89BGHjGPl#M(R+qj894Y$rd>c%SfKVGIE4F>Ae)p??orSzxesZu-fS_ zxEXR1WQLrym?0+_X2?l{8Io(WQptvyVd-vur&>G8x6dL&M2WK&Ss@%bi<}9LyhS$S zHYD=&8u$Q4)v|LF)T^5lCCQ3KUgm~lchieUrlxR54xNRPVjWbB=gRq7Zz_F5p-F)w zV_b0-B$oyj<+*faaXt+hXXIrk&IsZ_QY zME;Oli&az0ZC?Skhib~dYzPyBG6p<^ z4-g@3PsQ@u)6ggfXnqW|TSD^$m*$_erP){egxcnHnyql(<>)>D-KrqDOhRRgdOBs_ zqcGuz4%*igM4spzzuJ!}h-}aWO~mne)vFs4^q9Sf)9Ao`z=Szn3FW>>2RBvlPge#XMCWeG9|{M${ro0s zLA$;LaMIL(@%MxRC@yHgP&k0osRry74xpgXHU=dO4LB|wgCd3oG{OOtF*M+^Z~%o2 z4fuE{K)SPaZy5GCyw@Yglrv0m>q^~BJ2}k z*!_h4B@Em7E3L50+Q5E5*st-&Z#*meRlp9zp8$;Wx%J^N>{G;hGz{ZpY`qqS{e^hh z`$Fkaw6|u2VRPZN_6fr%!du6OVJnC?7KU+#v#tumIFDPO55pd0+z9M@guNKX`x{{s z?+?+uGrT^`V_38NadH=CLag?^{cDbemi_Crbp#R;ov(V)@n8cpCnxdHVCS5op`&S; zL-bZQRKq!SXh<$SSKGP18}Q^5>s?x!*f;c9s~A+;Y=IQy~-7j?3aE1dl~ z1iw?^?9&SGkh9eOMfNQka(*BO(I#_pV8?b-61bBCJ9h}~) z2%*x5y+sM&$dF)a&9e);sY|)uR3vs|g*)nVlEPaW$o}j`It=8OlXBB%Uk||@eD-&RL*r13#IEgvMmTk) zrDwaKZi1}K&~z>P=}U#Bx7-t0YnbfdgK;r+G?*yk;#A{wZkzAu_j`Ze{M69C`5EDT zb4D}#c*)qgkPQ8KTH+@rhEjxAM>(r#Z;-zu9q;`2WR@lf?focAO-Bn;j>C zx7l$L_}lC_N%-6BI7#^1>^Mnyn;j>C`#VnJ{a@@j2|lMkcZbSqyW@l%D&1L9{6KSy znm#VjvAO?)9Vfx_cbvrQ?>LFK&5o16{T(OqzRix4gul&>lZ3a~aT2({<0M{x$4R{Y zj+1!(9VhX=&5o0V`#VnJ^>>`a>+d*;*WYmxufO9YUVq0)yj+j!R)Ki^9VhW}dJTm7 zJ5Cbn?>N!hH_2T}=(@imk`9c0 zon3?}&Psc#vjFaMw*<1f+?V8aJro!9U0Fkt?X<1|34Pl&V4HO-+17T}txKDdO?08Q zzjJ4d$BO2B6dqEAoJ^``4<{J*U?h;T`1`>yWla>(TOUDeS=DU-v|QV*T5YQsW!Af?b7CKU zNZ%^*t^_XB%3=H64m?@&{qNdOY6h$FVNhZ2%H)E@oe=LccLQ)>JyN&djgldlJWtEj z;RM^4X^7vXUdSyd@^%V_$H^pdG14WvAk?tnIk_G~;fP#rw5G7q&T5LL7B{#B*H*SCawOZ_xx+`Tv@+%&4IKX<7$U8h3B(3?Xha3*DjsTuD7DoP=ha3*jYg@O5kgXpufe4Hj zxT3H(TJf6xm9Izwa^-7>uLX->9Rsfwf${QJ6gJk1*YvN8MH2W7k?##<)Lh)_F1sHO z2Q2Xdk`Dz*YcBNy_6r9b?*+Us9B_gc@MJjPL@%J@;b0ze-Of5943i6b5!icx62S{x z+KV9n6+6+^-Qh&#B3}gd8WRn}{F~d60BhpcfqWSL=t5nF25wY4? z7)~JhjTV?{pZ}?+ zaeB8N48u5!NAWmWM`4_kqcBdrQ5a{*D2x+Y6vhcHFslj8IeHXE-Wi3FeMMnp zOHmlPN)$$>5QQZ%IHNEQ;wX#*HVWh5jKVk&qc9G{D2#(H3geiG!Z-|~F!t;yj2$=% zV?T|;*d3!VcE>1;-O>6^xDT;AMq%uZ0oYaSlk96v5g_HLPhjk8O_39Q82g%vgFcLX zttnEU4`W|b0nLZ8uc<8M!`QD>!0=)0S1KR)F!n2*qJ0?qmClkrjQvU{IUmM;rE`=I zW4i@(>7~4Ew}39az}Rj9U3!7B-2yu30%N-cbkGIHb_?jB3ykAjrFzmL`mz^c%>ezj zqM_q(f2;`W*|_}%b~SUgV-4jB0?pVl>?P-Fdl}mFF6!%oS~Ij!9n@b6ux!16*4ES9 zfEhA*!n&~uTbHToJ+dTG?R5VXwhNYJi%rrT)O7F0{d2+^-vE_Z7<1h-7xZ)O-ZmNB z7cUF3O|lU^HV~_!c&rEU{$rji{Cs}hos)9HJd6=tKXy{Yzbx>ybiAx@RksO2i}Dp~ z4XI*l#z{`vBN=-Fi{N*lKelhrZd^$(cchf!=}EEhKiJp=@(PVB@mC&2?Z8RvE$CeN z+72lx%TRyPY#?;7VF{+~V~RbkJnpzF=7N8K41Gk$Tq7|qmcM*Lpp+EC#jYRTV7-Wm zup|O7$KZvD^JG)3p5V@IuHJ=Pn%>?=DO2l&|5MOxci(AEH{Oj%1=t$Dlxgh;9o3Gw z5(LD;hAwRX4 zlj8;1E|EWt8zleHU*M!WrLuGw^I_C=2=hU~3kgwvYR?MVUob6bDJ#g7X#J*-^JT%2jRi@HI6N)rU*zL_Sa4)dfH(^-f!|Fk zfOeLkP4(LKX3*TyuDq|}wJYq0Qh0IOAite<9WM#XdP8WOT68cUMh>CYdJWB&(p891 z`V9Ooa!b>GMUZ#(=>26odN<+%jz@1Hr8`DWO%+;d>P$&e_JceesqsKHL609aicIa4 zrm&rIR|Hce?J#Cbxw&VXQu&*h3toV~=p@@xZpKEJcFSEqwWX1GZ^zZvs1e1CJ4)b5Gir(NRZ~`wx8qiPR-@$yVMya00IMlS3M4-UwzGoZ7B@>Fu*1{tv6nLp$G zkCdq?@!oYDEdf>g?aURy;!TehFE1zmX|aYWr?J@F_3C~I9%l$uyXh9|IAD|k`0y=0{Fwm!q5%BY0rw_gXe|eY5Ltz zX5&^>%TY7y+lVa%ow%t08P6jFkDyy#-a|&b8ej88JXcZgkFVyJ`_G*?m5??}H9Dvx zK=Yc_`07t1xbZp;DhAC-_-p^3XBK#&R^BP~Y|s*N6XrVKDy_(Cnb-l~rMNJG`(QLk z54)6{TJve&=KIhN>E_={5b`*O4oylopXH9OcskN*7ENZ?y$!MHE(VD4(hBdVWaLgt zM$8On8oZ5?Y48S0rop=<-OjH4O`A8}9^! z?<~}_uoBJbx;Cy{!pnT`06g0`2!Fd_*}jSjfqd{ZCt+N%TEO~A%S$zCuzpcXPCsM1 z=|EN*Io)^-0hsuIj*tBrR`wlEVl?k4wQxirmZmE%%#*-H#8= z^5a8`{%Y$utJ!76)-gz>J!46I!DrdQeIdtwiqE0&5!i3Tfj8Lmjqk#-nx>)5`yla` z3bm38JODuZSw<*0Ek$$5jZT&o7MnGRUNJ_E2d@Gt*;lcUuonFSBIC17KQHR%CH+8c zHDzB2M7|4O?6j}cis6GWO8N)Fq>E*2dlnx{A-mcE4%46y7DaGs^iK>o`%ZMYwMr{( zimYLy*Qddr2VaYk$7+g2=?PL_`pV3NS{7DD#1QlZdBFznud|3w9$J>PJkO#Hwojlw z14NaacC?UZsk>6_*2jOZ16z?>ig;j>G~3@}Ij!a2a;d0Hv!{14o@Jr zrBBA7=Q|dZiOFaTPnaz$ggr-tmh$gnewNUL1Y9E5L$yDsUiC7G`pD?D+ z1?qn>ru&V?DrQFG`Gs;ujOS+p#`Dw7k9vKRSBj%`iQy{oKZ)MaxQ%}}3h{o0c{(bj zo=f8i3-b)tP1d{~!SY_x$2>gB&Nq2J8hZb@=cDBz0B#1L-sw0rbs8iB;1+~%Y}D)M z%%5XCn)im0Gd!8>rGl5;iXFl_?ETnz@feF*a2Lzmb%5+W*}_52G&@?#Ql}PE`eJE( z+A&-XD@IbZ|A5zY1rpG~-=(~!E5K{+Q9?GmH4dGy=0|W-$YVULYN0_1EET)?#w-|* zzC)yp2iDG&@syPDlmd)rg62IzuGNMZ&%@!yRmRheQQeF(Tp9piD&B{Btz4Rh@TtXV2;Z|fjp5S}J`I2=3@`Qu*k50< zk1vnltyVseRVhxyp-I)IyyWvmyEu;L_IF)S^VmAFyq@S=UKY$lfXuxyTnY1f0!2C7^ zhLj2n8Icz{;#tF9!~zXpvKfM$i6nB>NzJR_R+~W!K=)y!TLg1xrSQEN`?_8v9nZ%PQS98>ay1^WEIE0oVgzF5QY+&t zm-hFcz5<=bPcWB?pO{ajmmtF8^2lpWUB{&_Fporh4u10>Wm~T^0~z6o_!7JxFgF*6 zsEy0$xy4SB`E-2bFX_bW*VBF(KE*QZ;gl$mYar|;3Q zjVHP07F3s{ys7WBRAtjC_}e3YdpDheC)%VStNI5{b6lrXpEI9=+_9b=(f$aslEz%m zzBmK5#(#?($Ki|2Ba!`jX0QG9Z=H&v+9%fmuCD9hYSL?6FdY@W`?uYLDuEr`3TuAP z)8vRCABDKqif{s#w8ENOy#yl2_b|85gcG=;71sQ|mp}yh??iqmoWQqRVa=z#1R}^k zA-NG4>hwJ8PvJznT4BxSy+k9(#qYExa0L^XjQ~9bmC8P$71sQ*muLj}5GERd{g?@y z9ZvMqt+3`#yhJ0&mow1_Z01bBJ{3;%&rCE7Yd+^C8V;}?XQC0B`4eV!3@3Z0bo+Vxc7XN-LY=<_m8wY`R z2m%7-UDgU~9_96%2=cx}ZiEx)Y=t$C^b&|5|Cz{}!U=q>71li3OCW;$WfqGU;sQl@ zstxSbHn7(TOFkWnI}P3_Y|l2ZGYMN4j(c?**yr28cp1>TKOA>>Rx9io#*N_pz76c( zZD7S8w8kyB$z!k;uX!~WE;6PgneR#D4W{~Lb-1Wo;6D{R*`up`>QP9s5)^j5UuHOF}bMUXEe@+a^oK+xCQz+P+v`%4>G zlLST5>v*OG)-*hVBFHr&AAmmrg3fFMdruqK^=)7`kf2CLTOEN!he#Fee*|DpFwroqx!gXF=XH|by*6TdWTtz5u2AW!IX9BGQxw}a@t+6zlfvqZu??xlcaR7 zK?3qN&(Q4)70zL(5%M+-fx2*6>^t}y18`ZdJMi3eA77T?4qR;KJL$`+*@08R!cAWm zz7AaM={xwcc6H!~2JmII;=pN|)J;bgArAao0l2I!95{`Zy7;n25O|lo10mWx=80Mv zvhIxr+9zwEENr(ID67<9pwxjAQeK&cHUP!@y1K&cWZP?juC;6Hm% zL^innI$UUP5%+_E(pXNQh~B|Kq1Fi$F*q0~)H;D8k_H2XS|?D%!(gCL>ja9N=mf@5 zqakWV)HW(;<%PGoXm=AT#blE*D zN|4$W(ZC?Jmqi1E)ZQ8m3{v}OG%!f5%;65TLnLS%d%`sBw=x$yfu(5R%U-fYe>ha^ zgEVT#^KL<%P;vq&Oc|7ooaUey+z&1?F>87^N5^)>pyO3YqfUeKYDO#^R1N z&OX6hbE<@sNN3Zs-=5WNcHJnDVs!}RIBa+?skYvSBwOyOE_E0tm%_e=t-Dt|11BU$ zf!FFT?G2c5w*D(@9iLtp{CulSM+3(zxmiu(iOES_VAGU<3P=(_Tas-9Xe6?20IfZ0 z0PR8slA@W%wgI&7*fxOo-!*_Y}Yu<;6-?P&vobF98Wb-#iSR4XNpZ=t;8U^~9LSb;V~ zd#I4%%NpO^i5=+4b{(k5319Ew_QkHfI~G3>-lbC77KJ0&J-Uk3L%TPxosVJ>v>R>w!e==@bEow z0`Jv!@Qm*?C&EJBLFS3S9JN&zLtjBt+7$tI2hQp|$ZkaaBv5r6Bx1WE-DB968e?~a zYphmNgc&w@5c97j@K`MbKpT-LHH{WaO}1+-S{d9F4Xpc z#uLWr>fLa%+>sKi*;&!)5UbgZyE%rp_2Kc`sXvv+Z>4HWN%bbRrlBqcw4uAVb!XP> zgi7Y4^>w^A-#7!{pK3dpASPCg_3jfJuV<}r9~m3}Br43nqh5!dtxtvXJP{|fwC)aB z@e3$Es`e2ivjN;hsunNcplY80Xf;7vtBN!7GdWLV{}@6Vi;;$P9LSD~?w%%R?~KYY zk7bRpznqWYcKxNVPw$ZP{b5*?j=>r{=(!#An3O&T%kjoJ&|`F3kw(aKgJ9sW&a#SN z^YcJzoCjxqTd82(id-^s@|@8c6FS|#IXW6EO+vM~ZOF%rwXYemnaFzy@{SukevYq! zb^wI)A)Y@=d#1Eiso>@Hf!pa>hT@`->psQ-WYz$}X!r_4>Nq>E0+r(l@J8TvY38kS2FCEqxV?8yxP$fzGCJcPo$b<5SF-A)5 zQHMH@6OU~z64hvF=N%RU}Sc5Ew` z@>cN$P?eXCQOrAB%ltRGPASn{N+#;75*zC){nD2Tz>hz#{A|paPw6 z+#+=XK07v%&{*u&*xtX0!IlMeCnk^E<;Zc)*oOPmapN&Y4JejT zd92&~8q<4!9LwC#BWp*2F3#@oK`4t-zw7~GoJNda2QiWwFv*1eE~Xvr%fy4Bc zKZm}=NkJfQwLtz&2xk;rlkpRaJ8p(bevV%TY@d4Eu|5pC@ou0u*0%=6x@1Zn&6K81 zr)XDs6bVFz{&O!bsvfgCWNe#r!-$NS-tWBqc zKVa>ik2m@;H=BP#0F-Gxttpd%9Y$KTr?T=lAvr)If$FQZGnxxmRKVP!0_SwRMAhYi zM;)d8XrVXre}XNF?qgqxqMFZ;O8Pc>K9K_;U&Kz5wpM|maSg+Z7^CZ$z_#I>^`X(& zd8r02f8}Hvu)he`+Pr|%QE*jtf>JRo0V+rv{Tl8$u?pt=ahzACBfkek?qKqbZe%1? zBa_LgC}LnTam!XJ#YFbFz!>u*tzgWc0D>;)hpt4Z`AzJPxP5vr+G8yS z76_)idm-pO1@yYIhZIecS^^{pAji7`2ws=_KMNq^BLavcaXjWp9LZu53_R&c9NLbv zW4#Bud}~^4(W$f${-${@>-hsq#AZ{E6|+;1yVUJHflpW+*lOZ>h>aUv|7ya4q7gK(lWb;ou; z!jnxTMUhR8G{!!O-XHI_pYfaO#k|}q(MF044 zP%OYD9*PAimmB$FK|;lXG@lxTFyV*=Bqrs^0;I=Y&c57DX<)%j5M_)J15?uuFM5p= zmk}e4Q|L_8ihxq@L`fQ9~Vgf)gP7D7x_w;{<%|r_l$|p5qQi!^g~6 z&mwo6_QdvH>dP0kt*(6WKe3q|;~ZIIpK-gab!82>FIQP(*yzST^M9D~Fy)SJ^EY&J z{BVq(hCUM(Kw@$8O<>>(i)gqrW`5g*S=RT_47zAgK_%_XQ{!V3XT~OQUO31RqB#y! zB!Mw5SIqttfd16=N7CR;UE&aPDUkc4#Df^q8yjX8E z0>!zhH`YV>3v8Wn8j}&bu^v*0tZVt!wh=o4n5UCJDasU}I7*?75xAS5NUv=weMr`ULk6#Eq(Y4GOYy)R4^Gra#A#zIT zbJsEw|8|rY#g%fLg)i>s6%#`f;&vbC?6!OH*Zw^#I3Y`;`l7^YT_QE^1XQFDm=f!- z#y~lq00nHVls9e9LDYh#lL@3_-3m-)tXju2W1S<)k1$96lUY$G^r{4i!9U##y9?B- z>u$L0LlRJlya%o(1FVCg?x*K^kD@dRqh@0ib_HRgNa*8H|1b*sHesSK=;Kk%Fbbna zpq~Hvc#GP=sN|<-f<7LV0i!VL?ddt8kN4v?FskC|*`bd|mAxp8dQ*Ca=i^boDhi{5 zmY)ClcvR$y!l*{2=YKvP)vcm1Y6a<;ppQpwq$rHaI;x4|<56Emm0^4sl`8Z+(T7nX zBMPHRgPt+^c%3*P)-y&QHcXhD+WW9W36q0!AGV4xIimJq*M(v1j?&FUl~&C8HwDIS zX0dYxVC+&BJ5m5f4N{ApCIF)XsKpKvfKh+bVrK}zsD5d&;R7)0#aV3R0F26Z78^7G zqxzf0#tXoxrDd`40x&8{S!}2PjJiq|8!7;!LW{+Q3c#p3VzE&IFlujDY?J_uO<}Q7 z0x&j(#YPFh*c28UMPb4KM3Lr1@Pnp!MO(%9imr(7l{WXi(%in6#c%jtQ4#aKqM$`@ z^&anJm)u9q0m4FtdL9P{l1q41L)OLBYotGTSnM2u17|3j^DF?S1xdcqI0YHh(}vy2 zrHSDS7uCHbeK~=)-$^R`h1|V}$yF-9jhSTFvgE{Wmp}#q;qoJal}aGiR~QSswfr{P z?bb>_Xt!1%f!$i}1z_Fg?A1!>|LtC_M0WRT^A4rXrrK9Y>7nlAZ|{imtP>dL-h+_; zGS0m+$H!&WoRd2XsmRhf?<}2d(@lUohg>y>X57HsKWDzqwb(|G{HRaB{leveIrgW4 zIhIH%LDiiDv;aX3nPbsj-@)VtN&7yQXRYg%4X}j$K{U9%FDa8?G$+4}{Q=RvaV%N{ zasVJ)wA>f)Ln3~LvucXBB?9n(pyGFz`Mejg!!6fYi$Yj|AI0u`73TXI02K9a!wE zQ<)gPtTF0Xq+-8H#bPT!SO207a7`X8_icc zAJ#j`!Fvlv5}mk{T-bacZ?X$p=fkGBu)}=VR2TLW9|n`aO5czV>(9EteFMN;uYBwA@Y(=yrVAVl z00&(lu3LL$pXCCd3{>3?F7QtQpy>i12t?n}1gr`TZgs%S%1Nf)XSWbez z3um7b_C1F2j}x{P&iwSHIy+D4g{#FB~lClBvQs0Q89P(<2=RcMs#Dr-=8xFNg?Hkc>&M(T2vjXwX1t+4*G%Ezo$$txfdJ$t8M*CnWlY2Wm^v5W_Xp?(l-zp;L2}ytHAV z$>!^*9Uu_4T%pNE>!|HKHP>ItOM4ZXY^jdg^nn-%$n|&SrJ)K|{Z=LRCSuQ1v zij+QHZX8DBp?R~Ew9337Z72e(jqL|hI@)lGH@i2EolwRtr6;6K=%2uL&Rg)-pT#9p zDdkAJT9=Lwg9nN9Vjkry=I&oWvm(8;s2i1FBP?Y?3nB+w2U!^xCDu?LH6&GYQ0teglqJIXdrlgPy+ zOq0x3CvB~yg4FJDB<}CJg`9mh>)}n-1FSA6*-CPum>gr}L8}VH&jazZ(XR7gn+3KQ zs9@D|nwxXEi1See%Bb?GC^%Hq62(F(X&_1VMD4Ebg91Bf*ArP0N+Pkdx6}8Mp>7vX zY+7F4?MmP~jhsj>&L#4-gubaaI~`ANT0U|3^>k{aXf(-x0$JmhaUmmI65G6q+5}jl z8D#H>r}4>eTK4pf7~muSQ%fSCd?Wr;mJF5>n+E=k?1q00|A)zZ2M?$$e)>owTh3x= znJ9%jFk#Ej^BT_J8;X}}9N(`%a@p4x^Y>f=@mL)^#dNI?*g^(u&GRJPvz6GHj)ulCh5?uXDH4CvfLHZym?H?nIAV z8z!lJ&Ui@CJz9G}>$Rj6nn$2jI|JA_r+|3Ryje!FNA9rK3r)_8(qC)2Cg;mQ-wo5Rga_#D zs7%c)0p+JXT}mXia9**pD2(SRCQgAbRaxTpWq4ak>P!LUb=yEhqB3$Y+O1+9hzcCq zs{$sqqxSA%^24%ZIw;w|$zkr)qdm0xxGH$sV(E}lh>a^MOGcg?Jrz6%ckh+M%uXBT z8SG&Onq2q*?MpORk3`Sm4U)=|e0gP|)|W9-n^$p|F3E3RwRmyCNWq!Qthg!DKX3*b zaQ3!Ly*E`JnWzB{S(U{d*`u@dUpVO-u_KW_|0w~q+@-F#5HvibUugSR)m5I|0aZKF zXkJJ{<4SNtJVsnfX3k-V&Y@#S`#jR`lo=(MosZ)zj_faA%c=vzeqsTNQ84#5FO^A` zH!mrq%9}H9C1DApBU`T^sIu4@;heu3COUboBh~l{zN@*IrX-R!hmkR+M4=seDk8$^ z{e}|yBToN82U$6+lgf7}CDWKwX0QcikS1pgp|Ivi4mqdvb0)-vg$g%!FtpInI+95O zrBlaS35*D*P$rIkb3%UySR_ib1V)6UxJ$^d(zWA@U^cVC8PhP(RZJ||jJXp>)dB%e zDkcFzU1<)Ri!tZ zJ0WPXz6tBL`^d|NVjE*jP|imdArFgfl1rs3XAB&Je<#C;#lSrLJ2};JhB_cerzV}T zcwjvKoeX#18HDtA@zcL2Ad(gY7@;=~#ytYfw?usNP&!^&+%>NDoBja+<4Y<_mgWG4 zWesx|AK9ODpm;Egs+Y9vATDJb4GoZ_m@9$}H^^xARxJv2;)a8Tv2+8$%0CA)?RgZP@ zn~O2SnybJzOqp%A`X!87lNMvD_tlaHiW)O8x`qpJV{`ovC;=egK7b^X2|#$*Y3@pN z^5@+_-)hi@7(iKKB$lA&>$AWxph7qi!y5B{S8Q`WNqL~l*jz|whBN8RE)vRoMt~;9Tpv7-@wx`|c?$tDj%1t* z0rWMMZ8%3K6KSpu;^~Bx4Xczr#t^jvKbxkMsHEcRf+T=}RZ5jh8JwaQ6A<%YFJ-ux zntZy;TQJhfm13%Y;6%i zEEfyrbnv7iIGK)jL`{x#rs74MZwra#krN!>1xR}qMyjx_S+xRWkwLQfc}BL%lK#Gb z0KODEF1*@lIe!!rb9(uAHt<3v{{SkF`Jt2$Z040|1#ENW3`C}$-+Tf^Snrt)%d{ZJ z1_8x_)t`L585LG_Th?3h}{}a4WSQcKDfp>H~CNr&~j?B>1 ztS@b95##?Kd+!5h*HzVv-<<#V-^`pjGw0sHY)66|*|6O~nwbx#It+n?FWIS@CXIbSk_km9*AIj`nsII;-*9$bs zh-kOF3lMd-JFNx$x?TR2tCJcl-Rtpe#IEw!wh-|cNQBc_IW1o(FpW5mwZA=1U|8@W zD6R65aDo2-*Ut@xt9i?v;C0i^!gye806{}-0lQA2s)6=#J#gae8lesa-kKA(eg<## z0JDG)8OWnZAa8GoU_;O}Be+ksAKgC~taaGG$U4;G2oT4DJ#JxqP&q{CXKi8eGzlE1 z-uL|sj??(tWoRaLnC%48+D>R2tsg`Oa?v^E+aoYY?%%cZtqK^VtiS@90}+g=+tl>n zxTXiknJ)W!TVd&=4ag&nkNWu>-_V1IDo~F=K#~i+=N;}3D!|}lkr`I1p=N(xW!mKi zCfhbhB-{PYyxspFzuKl9Z0xWLmMz{`k!*GdDTtF_Pcb@7uY7~fz)h3^4NJ(lHc(*p zX8=0GOobhnRf}YO=m6GzvcAdyfffsffe_2kajR1-IpKVGEzdrrtsf>@C?mZR2_W_CK$sVP~GRD$U-d;eObLY3bMv;kOHn)W4tc)SDlAXM_bPX{+-sv1b)TXa9V!` zVaC<{agLgJj<*gXzb4t?N!c`BfNkJ$1_t|A;(9BoKRdDrX6Kcru`lbDwK-4|d7o}f zmtHF?(&YpJrWY@5$s^$4*m#Zzg51DU!BtqzE3hN=I}Zysl@M34IE7!BM;1r$i?Y~~ zFSVoDk+wI}-Y}Vj?(BiZY8-|#0PsvWyR=e;d|$3QwP^O9?sL&?Ju1soOgy38?54aid#eFhKU8iDnk&bdhTFRK^)cHeIB_F`+Ri-zoUY~-#tQCEIA<3v z{|O!%*wlSI7v64**sG}gNEaiBY--i>!f$Q~W&`Ej0ddu=F0~8ek++jMO3v zC;hUNsScF6$-RyJP;i@0um@`EX}_YwF*fXGEq`cv@{p-<$W~eZ!N`xtqy91AMG#t% z)eE!3t(S!+>5e6gZZ`&ky$T0#vX03RR%|ZpU)ZUnCuNv2;A;DCz2L_q#MPzPuF5J8 zIQUW)aKS-Vlwr82$8o5L1P7Rr$g4z4!@lohixlc_bYh64S| zP4n@_-i2y_11nEvQLG`Z*N_QW=|lnSpG;M`8qh~ux>4X&YjH&ogk@_=4SiL8pVl|8 z`%qNIXC#!BU`6xF*k;GxjdUiIk8l4{qfB*@n%gaRLUW*UmO7`L?lq|Ag;DD#@tcGV zgjsHey$PRnh=&?0ClOLg*0KdoAyL9Bp-z5Km(y}CyCbb3*i2P)scvbcqapktc{7j^7zh|q)9xey%sBf85fkMu*Td}dJmKuwRlUV_+9A9_oQM9s>lpt~XA=F32?PWn~0P?Ya^Vll_LlepO+= z@j>m4qsVwX9@m%d^6_02+gs}@47WWOb+)AOP^!(hEBeOm+bv0z`qIk?iz z3eSexk8^`lX)*_|N6MzV%=wXi&mnbQs!76@JH+xr(Sowe(Ou>O5FRi~+UF z5l2LY34O)hvOF#?<3JN$$_LlVfR27qGY%-a&^gm3I5LnKq}zYn!Fs6QwcaPX8jZ;a zl{?B`qp#U*0G6z45p&-9anO3MDrRRM2&HcP9KilOzz(FX#2dgGZLC3}{u;n8%6)VYj!e&06n5OV$ z+X&_fT7iXU@edt{7&GRBH8x(}^)}!X7WJg!#^vLODbolej5}<-0*GKhQE+*}!GJrA zZv_k!Tx6oFxF-D#3($48JJSBKxa!3tgtdlx`owC|F6%m6TZI~RJOcVUAUnM^ltOdy zNV@pCxK7&EF$i1qAfzp_p#r3r{QxF}lSXSp{z3{$`30)^EuoszaMM7nREB;&*0|?q zb75x!>ebz}TqX$(`IK&(9OtZ2q-;bcDuX-rfDpBKm;)FQ3PRtrO_d8x#li{ki134wC~iM4uDfx}Mn>73JSAu@ zVRNH`4=09tWE+f&4USS$#))Y#2At5L(#6-rHL^qv=&{2nvcyO4F)ZN;OLzsA@CL91 zWQ<$lInx(_C!E9XVeCJy^P%({u0@y>^`MMF!}h-E0OcK?qKmyCg8BG5;U~BB7S#Pk z$|q+h>^RhNA=_x?Q0;whrp&8J4`z*`HLvwFRIpBz?FB<#OALTp;c+V3{#d$Zbh_=K z8qemVZ1ZbXDP4Xm#t@{bt)D_&n67fru5Mgy4L2AA@o)`(;n6dGBMZ5su#CYMQh-Gu z&w9p!tg<{k4s-tkxe~rsw6&pXcHgZl*ncBTRgXZ_tJ;FF7Rl4KroK@#MD{-k@Nh3> zMvOi85c?zt-23jB#(Vq$=lOt5y~Irw5tCw-eW5WL;M!%{xA~3 zQ2&a90gQxcM(dPTVE2C*7M*ATK4^hQcK)(| z@=NalzF$QCQQkg-ec#yL8asFE>`aeCciOQOHg;MkZK$@#sAKHn))^D6nHi+cTodJ0 zbS|YthA}Iped2~j_(~h`@!aee`~=oBaESRj-Fjq$U)qbY-NLbDQ7G>0Cd9kVZo0w> z8kj-Ef@&tdcA|etxzH@c!PI_4UEtm(s3%5Y9haz!y-$SF$JlXx<4om{u}Qd$i(z0Q zthpNM1_K`RQZ(wW2umr{R=x<|<7oY9?GQIAn6w2{525anDf?RB+zCprMjN+s+*1cC z+`Dk6QwtZ;C{QU|MI!%-|yW=|cr`)tb_gjOG zowb6!rR<2>*sfqfq?6l}3qx+1Xh~&z`_{18g!>y!z!n0gUHV&;q>13Tlv^{tCJd%p}x zx}c0KR3y4G_jQX1G>R8}+bq@}%J_7CJ2T-zC8axs3F zCJpK=+sneCOO=*z5$&@)b&XwQ-KlG8rqijh5&=QP zQqX<~#GR(cK4NMT|2XY;2Y|P9X$pB}g4!a-btk{?iLlFv<27CU)81(V*+Qa=&6e>t zw{e`n5%x<}m<k>OL{{#Z{@uk|&90lfsx?O4ll4ZLD^ zV3(zNCPa7>xK5!6v(CZ-6k!pH5TPUj#cM4T5T$-+LOHJ;o0bBGZ6Z#Fa#k#J7k#Rb zgH@)cuafst-l>MT=VK&=>U?i-N~PoEAp|tL&23Ze%(g}wlD@KS#6>`Jb@lJ4%Ke1I z?g=&)g4Kz;OFwH_Em%E|Z&0m<6wcuI!f>zG_tR#EL76e7k6=})7$4O5&T=@r(1m}Z zvK2to0mKY|xN_GxAOjqiE`mz{%B75w-97ur4R3V3)-Wiy1T9lJ?E8}coSbPCxKMB0J@HTrLnwsM!Wa}c7fSHW4wr1 zjbPxQzOVmaFy9aJ{HPFl4f6U9)>_a zn#QCfPSBa%uFND%=q-H#DxeUAx|QDD276%aU^{!T;vB5vlwYGM8qr)Dtj#q-t6+wm zEe)%6+QgcMkcCl0mhfm^wX%0P>7m7~&St>E|8Ck@cb?L^3AmD2yLsnYeNmY#f#&ni zL6xO3#~vD4EX$Mg4=1s;Voe(+y5Nk@JL9eAGKqUs?g>wb%v6TPZph3#v1Gb?YtVLt z8+56ug-}zgQRlO`SY!sVqBD3=3x4MdylVtWaJ5G;1Aj&Cpkp6bpbx<*1|?n zRTeLfXi%Ulu?PHo88qR763mD^g}_d_#!9eq9EBKZbxmV0K6<8p>=-ziX2|Kv+37uS6%~MO(Ab}C;n(x>J)D73|b$=^-S~lnj(p}P`&Zv zQ0Q78lC+9*XRB}9=Wk{_L6LZ%35Mwv8<5#pDjU{atgXHgExOvI(N%ECY-t~uXVddHJ*EzSpB~SY z_(oA5t6}rX&O$hGWv3NRUD-J=+<0YYCY-Ha*=dHe^(#B0;cR?m2P=AVWhV${8&@s> z#!a7l-;M6T#%56+6=$X5oK(C(Dz>%a?A7l%Z*av$sd$l8yi_VaL@GX9E572k0Aw5h z{_GD+l^>NVkCQ4tp;i87-yVN(l@+OSwN$xQs{FK8x%w+#D-W*nRH<^ERC$_IdA3%$ z@(mA42Ugic^Ujr>sc_RT$-`*4iNVNMcFN(V6MPU%{@mxDzIAZ*U$@nN(^lt(PpbcJ zR{b}Rym$BD>aVrc-)O5tIo9g17@FQ+GTGWYxcb{{bvoxc_D%1!)&JgBXMn!d-ChFz zAM$WJ3#C^jC`gPlqSq+5I$)f%+Nia$*{F9a-URgaj}^r!AH7V-qZKm^vWHNY`41drl_!QmB<@d%x9AW<93t=rLqAPsq<3dj`Y z3q30kI+BJ|M$N}S z$Yq6OMB2c(t5i{ZlJIc=0>$O!rD}mjajnVSW!;|Jt?#-UOA`3llX%nr5B!x@CSk(W z$X?u|KH=aEG+Mb0uF07Q-_wPy5-}*?&2Z_i04Hb=kbnyjpNOjvaUiDqB>Zm0)Q~nW z!S73Rp7jvi6^aQ7kvh1cJy@waZWIc;y2`E$?kjsscQ+#We6*QkS?nfl%kX>#x8dj! zP8YoYrS1$}S?P{QHec!DU9x98jDCNU{Z3sp>@>HPor!I}Glh*4Rv2u&D$c}J9VA@E zC2i)Gt6?CRd*7SwH3it;QCv)cSL6vWs3QpnJb`?>}a2LrqA@YcbH@V;NdRnMiD5pUpq z7?a+Osofb_UHKGLsHfqN>O08z8)j79)U)9yNc$6{;k5l*@B{x>V=cwUN=`6V7qMQ^ zsM~raGH_r|s#ctG*eHVB8}gI{!i~vGoqr z?CgRLAGW@V$E{_^?MNPR%t@lS!u~GbT=&_Azwwip zo@F_!T~5Q+n;^{O?6Qc6M@M^~7$D|?BVBm6jTf5$uas%u68hj2;H!v;a^UC~GFf<9 zxqr>d{Q;h~&OZ~I)H+)6P?K$Jo%d2-V!gLOfe;_iQS|lmrY|_1b@E?qaBQ)()&y-k|*EJ%jkpcN@K6+sy zk#c=h`jDAR5FUb8_b_Ku4~1mTK>hBSGh73SFO~;-wMvl+W>%n{nH9PZ+LYG=rqNH1 zWzK$>u70`}$ItG-;hE0X2?N_*1vg5`Cg`^32DwYXFAF4tyBdL9NaKo4WDT4w z1{dhnQhnj$#x~{R%Oh$}aiJ4)A(@BO6CLANKh`a}Av9nmI3b}8$VYju7u4T*9^N6` zpu!2@^aKvQUx+GUbTRa2tkN98-8`@A3V#@yHFBCk=YC?yow0g5mp;ki3e6}BP5JXk zv*ny-oxvpgpsAbp1)AN9zT6W1UxsEAMVj?PcNco#*f*j)*GeqR4blp?nITg9L}46X zGO+L~Oj%jx4=kGC{tu3qZTb#&Unih*ybsh}L-7=+0hS#y2A*2)XR1NgrxaIZxjTV% zDcV`qJArA=m)75zMmF;;SeDFS*=7gJJ?(v1+w)}&_-)V@>$`in>L13|E(pEy2?WUx z$&aij<$OIUXOap^#a!K4%GZ;v7}xJ)ZQ*{8(2LLz1YBgL8+M*>E-!u3tU-Q>XMOwX z_z`+TEsiV7dNVaYCUVi2Z(I$mr?qtX8`QuDq-)UDFI|hiUzx!RXsTK;noWyP5!(LV@RLiA5KLTy)~te8Ol z^Ggo`jO168Psy*Sfxn0tLUfnZ(WsYn@e@qYI{kh4j4(PwACwEGkEZrPBo6H5PVI&B zHW1on^>i!@ygJ}}*NUA1BeKxlY0@Acf)dYWntB@xV?xt=4-9#JR+(YJM8}71BAAx- zt-JtE5cG4R3Q~bYgFF71?HGNsF7-dt_pBMKOqX!o-anZ2&h@2%`ka608>dN5xPiBp zk?jlkzy@h%@sBktwKU!j01=EQG)7psv-Bw@^wJpRWgW3J-Vd0h4zMV7NMlo{zYo&* zOnq1yqmSuc8lTn+X^dWoFJIP--{l-J^==2Yl{Zjt_kn#c6B-M2sJGkH%XvfU<-D<9 z$Gr>6P}W9-LVB&w zU_F8NhUcF4xBd_>Tdn)ZS-K;@-t`2UYJHR$26s1~-oGaRKs*ux$U}i)xd=p-*aOEq z2*(x|og=^XSp@};0?Z%v0`oy`bg>W;oI4CS!n->Fk69xe_rzg*-U<7Eu1MHet0d=x zmDsYtxJw_&*N2A}>r&&b2^Iyu*tWPpj9~0o?7XFSvqj1d?j8Pz zt~XHI^1bv5YMZ^oH6|(_d+CEhQ;s38b6)S>0Tsz1cJq)`{-BNJ*S$FCV)o)I*7LF2f%

    q(B|*??Pc+BsHe=l~3-5vOog zg0_ylZYNNBpuTLzSAZh!#nH$>LcLE2MHn7h91A#V0HwG`71UbggE%pElO9@eFJ7dT zX>K63vPREJFWrl0^wLIqDP|ix1I@S>&uDfI;~Ye{{`o|53EjXp>&++b#dCUXq39ri z47o(NJ8e3BNams^`@;-&nE*L|lMdKZ_t1fBXps)5&6#{Jo-rin#U@+t^m(Cs@xmO~ zY|Dy0s)uXfDB)f_Yg%}ny4S0?Mi`qZH;@xR8oo?C6b0Dfg)7bdt>2^N6#KByS-Ptc z6n!}{>Qn#08W*`iYWFAq#<7x*ufi|w57Mj@2DF zR=0nwe(7ljuR|V=b8|Hla}dyyTe2LSP-nW?rQ|Z5NO!qM@nB+A6yPBT5}se?@h{PX zhb)h%23`Hq3yXBkyT@kry0!ITAV^ZcimcN?A!JfyeTWh^ndw#7MEk9zjHBeZqe8y6 zI^?&u;vFV@-*Kt$npeSvTWaE$b6|o&+}s27S#darZ5iz9QRa3xxV_iX!@2UqXoq$l z4TedV>KY8Q=_aIGTTd$jAO$OrqgEb-y|Y@4q>Tbt$nHXn^9UgqGI zXdcypFR|FBD_=_Ahw zfEwIhZ<*7YkvYQ{_16Fglz}+43H^~0u10}YPY>aM4bl-352ZHPgA-mJZWW*+j%A*) z9JoSAQgI%?CpD7PW?yPqQYQ+j-XvcdNwDiA#)JMsINZ=7FHenvJ%~BrbjMYVjI~D( za6%nmbRS~%n5j}kvT+SUZ-IyfRFp^o9K-G{P-X#@CsJUdSO8g*`i@Q*Sva}-D!2o6 zFZ_6eGm1BeB0>R9U|%(rP>MN7paSMNMGGU(aL07s;czf-Lp9H%U*Naa%>PQpD*v}o1mz9Nwnv4~}n0hnd7MXf#;T46#za(|4- zr40WFV1Mly_>qyH2xld)z;BC@fE~aaiBL^IWLnV{De*}XBjbxnvX2yAD9^z=< zZbyq9FX?E;ODt-Ke9HSXBW9u7ir5A_GRvWJ5G-6%!rBd7oBPCk-pglguz)oP32g=`S^%xd zY`E7_L0#7ji+n=Gd;^_473&ik<{PNwDa)5Vx?k!7p5M!HhaHOG?lf(STOEV8!5UY2 zu(D;;tkbkC&d;CBaRFOAY!$Fn2p^(!24^_9JJTCV<^%~kl}Yqxy>YT8@vMrmc`LpL zb-}?Q-7o_mvhMF)KVIpF(9i30Jc0wcteiF)(}_s>tPcUZ;4r6N!@Zuh<)|ITRo{Zw z?<1H*T${=P#L<_2A24v8t)#Vyq&9=AVd5GOuGYjPHRSRduDPVn^SAMkn#F7y?m9UD zSvPbYE=ozazY~`zCBrOt7VsW>V1XKhNP&tXeh?zm;4AyW=X;f+!D`7gJ7KE+0hwC-Z z9!o3u1$$yyXESAY>cnBa)CV!{y!QvUpid*IB4u$PjY+tBIWDsstn=t*qS%c#i=$`K zO@ynCc|{NpII~+s-e*lks5)7!T0z28F`_tS(l2`B0Cnq&gmuFC#+v0 zv7yq4VD6(Dn=4j6E8S$@g}br+DU7p^cAh`Y#4}KjuoSyHC;D*!#mb-{!6+tyh6JLJ zxk=^$*H8&91eLqv1Dgj{Dvip9fn!PYmc|i%~ zb%7;&r15vO-3Bjy>9Q5Lw-Ae!XL`;rv_9$H= zHSd+3Nv}xFJ7ho7AyWJM^5s6bY^)IBG(Qlk9NQ|!)c_$m1zhVaQ;bVq0n>_O?(a>D zr{S6R=+a&_JEDiz8SmhTxvCZg6TQZ&NyHRbV-;z{y10L>ukP(Ib)jwpU(A7D!y3Ap zdEG}jX}ab#@UMw~6X_b*4t(d8uE+0b_9ozApuNXZnidb>oOr)Cwk-#%0apZ;oy=B5 zjjOw5Q2+OXy(@#s8vxjuabx+BSO7m7yPxI9UffuIWGeWPJP9mVeq?Hn8@CrXe#yos z-_Q0j$EAj@%YoR=CUaHEaVghTx+5?5E4{WzMl*}L!Fe21fdOw^&)nut zf-YLcD40wW-mt@na%9Ne)|@0TVGqp zX68za#l9ZJVIq05 zknBzIrICcYcw7`7VSwl@Km!CW zP|ONoE8bgx28dAigb6#qM!dHG;6<|8in9c45P1o_Pw6|rpkh6>`!X?SiLQdPpn~)D zZ4pM7RNO-v6mU-%n5_45P`;AWB$v`xjxdk5OMD) zkGZ)Jvso>$Q@gj)e&p-Ed6U7%z2jNp_f4>WtI!BBxYLc<(A25Xpt$RLU&!z@_= zUztD0)o1}%@4(341ey8(wY9k(IU~U_A#CGecf&xHRm3J&Sm0sD&TMk8z?gb$MBgo& z9Bg`omNq*BwLBHH5|ObyS98DH>^hYxNbVln+IPTyhd%BX`(0l@->&@*&3()EyQ$26 zx63J&{s42!*zYEj;n_+u;_w#xm1I~oT}UqCtPHM(?)jgxA*+U-nU z!DjdE*hh=j1kr!-*^cPmuv`;iBjtewxo_MNh=vU`C87OsB! zy{L$r`_0~}`%tAG5rcV`aSLOS)t)N0*s%e&*vVd7>{M<~eR97&)tSs~sxQP?zdJTn z2M#kj&1klpDyo#i1OI&xT;E+=YX-140BX`_9bDcIHrNa_aC1K{{nGz1xP0K+X1Ol( zuz>6<-dE&-?+rU`pUs)C7+2r$Za=dr*PQ}6*XAEvjG|oxl7D`jnN^PO7P=9`ykehaabZv_oAyYQZKu?wrMc~C56Pn%ctw|VAR zN}lK2H_+BReO6mDaCA<#W|Y6rY|YaJTk~0CDJRYzOId8M*LI!9QkrIDE+Y1$^yV|# zt|`lL*9l|SXu&q2TnswH2OY4@E5@ub6(5G{Nu~WXfCalZmA2CW7VO?sv6}|4VD}~a zQhKV8>`n8fkwkLQFrX{r!hV1!Ux}t+8!y-o;qy(fbOIiJHbyQ0uF$ZJ6GT}y48FYu zXxNU7VVm_~_w6k}!**osrYr!nX>S3s9Y$(e5fETI>?`534PzN&8?d70CGbA2?*NpW z!s*?UYWfzM-C<~Ub~~av$qe;q1J9{Pt+jwpjX4BOm_8ub(Buq=w=+3FLLbrSjgaOr z`o1ior?Cg-SxmsV4PC#28LbvVp)S4+0Ge6)vZzv!PX*K=t_Bolq9w6D_Z8_ekC$0w z0F{|+$*j+Pt$@xO?gXnkhiQa(TNX}(>I(fpor z^KgD5u2H-_LQy(`j87r+Mj?JRWZVvBG_!%P%$330%f&r3z1ySx*uXZH9n!qi4%{~9zQCU)G;?sXpc|C9zSO7 z@tTHD)zTh627COdvB&dEP6((SxAypPKZt#;~ zn%NJF)stVm9->QN2%j85ntsPIjz^d_0we7(-2}L78;1Jc$Y2R+jfd4ukhukh)lFdC z0>~FP0lsV@-Qm4Px4{TL>1ey^k1;;GmjGX+tYZiTJ1%@fNU0Q3+}Y}hIJTaIsQ1k3-fnE;Sv@Fk4F7ohB}z63J|^3>j0Aijj2S%8u~v*7!_1iFumuj>Bw zC7k0Nk$AskSe*m?^8~3Ca7f0!17^x;-iiBiuJpxn-#b4CXH3Dnq3#gO85vAr*5JJg ze~6hk@@8g^wM*XoUGaxlyCm(|#x9xpApFvspeJQ;J;3}VMMIwPqF8Ou_<6h%ZPXV2 z2Z#@arfDJ_AJkCyN)hY*ym0^eRtS-RmfNTcywHQo2ZYZ>Z6eAC;*U9v{#k5%bAUf) zs@ESgo%>_3mK9>-d+M6l_-1cx{6t>&DT91D&Q$Ktc{zCUf#lC|a0ZI!py=h9E^I8g zo->*+gEhDBbDx=&?7LKfdDc(Li1fla67;}ad%8h#X_e744kp*0Z;)KtW7O+ra;?Wr za=9Z?9x%C<{*ud0v7Qk!xzoK44APkUz-)Z5iE_RzKVW@W8Kt}d zxsZ2#vMJHBLhI2_sh1U7kB}^;);6K{dK6_b6SSs}1(qt1mU(9HtB-|Z1sXF??I6-= zFR@AMb>`i7&G(m46VkSS-tn^>q~rI9KhSXtgrH-*7yG(5pcVKu-h5!6=_slg5F&$o zg?&TkEBLby1FyR`?nHMQ9D!3J8|^8Pq2ei#Tl*Y_FYk32>MLYG?hBk=*I&5)8Ie0d zqs$lhf_}fN(>%W1+$O@*MqetuZ6UmES(LSurME4Fx2-o-ylo-8ZGFk~&V)EQ z(wD4YOc#>9jeNl;#dei2JOEvBVpuY`t&FR5!r=whg$f>Eu~?IB7mXKjl}j)LTHDaAo70VF|dQ`byC4P}WsKfP~wjuY?Rj z7YHc<&qH1Ul{e};hC=7!#@%0qsa)>Ln1fA^^uG802h}|6W0nSi| zg7AlnZ|~$B!lKFpd@7(;d4!3UN%Xm|NRJ!OsEK_=dQQ0*&7!XeM$gtQtLSronI1Qu zv@?iXSl6vg+1sY zH%`*bk&i<+5hGuXmmi4D9O#%I>NnrG`xEqCg?j$x83w=K+MFb=w^>~OXZ1!K%oo^L zoa3kAURha@Z`eA=zE1a?2Jb4+fZY1OAQ!*K&-L6}|Do$q8YB_?jL{zW65)qa@gRQ2 zg2IdF2IFV+O1DBD^!OREzr?-mg*^wp7N<%1<%c0p!n0H}+v$Wn>dmD5+C#Y&g-Q82 z?~n!@CglN!AtelxiaQL-D6jPUeXw!cyGJ&_(BSg}`%p}njz7?V3rF^$nlK%Im|g&t zS2OG}N7L=K4A_uEJ7GHhuzUe%8pQSxa;6s`=O%a0Aj5=_v3K>s|6RKm>1=1P&gR2K zJ~@d#Uc*uHlo9{C>*L*cKlpgj$Nl2t?d#`Ue7qYoAMc;T$MwgMd*;m5bTU3Wl%!5P zP9N{Mc(@vFoYKdeijTKpeY~0$H^j%=fRA_F_;{P@<84|WZxb4J^ZP#D`{B&hIr^_4 zrS2CWZ;y{TclD~L`81EOx|s`(U-g{Pz?6*AU3*ykPRmIW$MinO?kq0%iW6|yaxxYt zOiOU;ZIrtJd^#E)-{RF&_F&p5_ZIoVw0KlK(wPT(R6Wwx1C4y~NXId{MOSzqX8j~a zm!|8p9$ULN4(T|di`qD%)d4rglv=_4=FZkn#ABRNxL<3wZk^WD)kDwBXYAB){>{#3 z*Gy~2UpY`{B)|?He$9LQ}b6+g7$*8)W z`{zGWYvAi_8V-;Ev|$wH&v#Y^oc%cAy>+uw78IQ8nKY0Q7siA4I^6L_BFI}V6Vz95 z^8?5qZ+!*yavDwE__)Ea_v3}xq6qK`snQV9{4_d?pjE#74BRxs2+03 zzU$@Kx7hJK5d8ZDR3OfGiGqEujek*qmA01q=UzMY_zpg2c_yE~a*}#vi2BS8WyVuD zpE*4s9$>mR9$;hc(|`JUK7D68_v^nIxXS!n)|U(@@~w2?ez(F#`rE(z&c^WcZlJBq zU~0bmcW{dVBPW@jIXY0)Of^Dxb-|y4=91HWkVCpN(_ky)AV+Kg~)93rg4bT54h%@M+9)*7&$wa=< zW}V4s%lH2kVi5YU!&l7kJ|w;4-iIl;8^Ks>^YVom`yClQ0nIPW;2iW8Tt|Dgd{kzp zc<%X+`@$IB+Z)E9ubf|b9K*(S;~4TX`kk3``-Ti1-C3-|>(3?DVf}N@J#GGef177M z_k027;=Z19&zru9q%(a+26)Q9BLh60Qw#;l-)AutGldw6vz~o6ADubVcVvp~^~Pl6 zXP@(L*Wi1i@X_O*^fTPsNe4sXQ`g0<@>my>P)-J7owqk=@<3vmpGGuSXEL?XmrB2U zgvgBSoSl@VPd-9qMsKS4<0C|7^d-|5A0aZMFPRp&2q&WZk{KfqAx0xl_Gb9fNGiLw zfR8bjsuSawNm7Fy4;N5*e4%*(4>0Jh$<Wo7UIb$J%c0(VFte_aax zQa`Y8nH%$vhUGIBRYv1e0sYEpOth?~&wWLD!an4~xdXV3H7&d8b6+b!4AU*c>2rUX zp0E$;Y7oz{u4OuX?r%rWq+7OQnI67lLOpj=*T31#LMFlb-~j;baZ%qEi+ks%d6oJ|I<9aWn$eTj!i#pwDpH0RYo^n{c(aT91k1-%;%$*%VS}M%Zh*PGeaKn#tJ69iYm4jRn z9FKF8$m^)hwGiVPq>}~ZjBAii7L+rtK{_@l2lXXLXDkL7=o;^%Y%h%gf&r!fYU%qb zMkh`gwPRv))N|ip%22^?@6HaNh#LSz;&_I0pS@rDnw4AFl_QSF$}QIjF04R^3An@fJx>RZh|q| z)9CD#=tH+-ec;AI5q=p+ZlDlqalZMbI}2m@-j0z{zEoE+>6N+AGv3VZQ`s~ierjWH z{M1YyKP7gY>|3Kfb{R|JvFT&O$=V~&4D6b z3*Q_7O~TSC@a~^+ukU)TLl}lL?M{2MwboPd?8(zla&WjH+M7;WPsa0dHSlIfQ6|*a zN{d&9*W_>AnRe1BZC!;FciK(M`gqTV^qvig*ZL_WCw_!GVx=#9t$Sf;7GL~E+pVwR z^ONnGeS0(BmMgPOcGdbrylln6+GKkm-xPkUz}vbWtpQvBdxLg|Ck56`-5gkV7AGM3 zfGvQzRiLUzWoa+KnE_N5XrzDCHvP*L4(l@+Z-hrKu5cj3ZL|zGWEid(&!G1*oEyJk z%z3QB-576$U-=EfxyEwU>7FUB;9l^Xx!mAP{FdK;P~f*+1NaRwltq3k#895bZ*L_5 zXWSWYcBJ(-JbUu=S`Lotp2*2^s^4lBm zZ1|0RDZh=7-)1bonK#34o4{|)_4w`GXae8@*!SQG-Qh`r1;6FMy0cB>^a5J|b8CxG zk>A)}FgpT%Q)s|%n*!7}{oir=w*@q^Mul3D-x!Mn-kWh|B<`kcnQv4dio7>-mhS@$ zly&fxXK^xL1k~rid$W))W$2<#dVAy0HYc5LRN7T1$OYMKdFhLddGLl)N=?~xa1oU8 zO50IJzE}Mt19)$ym-o>0-S%VGtozsumgAj~)f+xl`q|Y_|2${L!w0iN%dhmv^aD!{)XioY)q%Ytrugjh{p7^UjeGG(Uf9^HA$% zl#;ib*zZI!L5e=vX|(~q;~x7w;qs1sfekDVvYGwnrG^*hDD%5@JnosF(F~T( zQkf`CU_7MBgYo+|k+(aY#=Lt2^m3;XEP#+&Ina*q`I1U!RI3Ks8k6SJ`5R5|uOgJ1 z!$-`WS30HO>iNgo0kocl_hVlq_?J6J`Ky0#JqU^rMkYxipj==(AHQ!e!1kpAY%CmT zl|yJZtA9OTF0p+c`x3jukmZ--Wt)FqX!G9-ZL&}xMY}RMz{I33$Ab>KyMfhKN|diT zU1GbjW7-iK-1wI)CrGL|H~b&8Id+c=a){0={8QbCfNs4s$utI zc&r7tAXd$(m(%c6Bk|i~Se5ZXVgF=n8o8%pL~Za}#=+93qwZsna>Fc2CtmDzhRbg3 zwYDOywF!Ub%Wi8fdm-G==SzP{xTPb=a%pnJ32yigj2xeq-yC&+8Z|l-jw^tAzWj9W z$(jlBKC5A;)f8CgQs>lM!#mZyz>@4VO=LpMwggaIgJb)m!=$lB<5F#sVjO&B9an`6yFsZ*j4luT+=oPWfcw zIdJNpjI<2CU@H%`Fx~zk$Bj-Qmc*gFDgBkezMwLPbnQMAf2x6qp<0yg*dCVQ9``nDZhJBuhJ@7bzJ2f{Mo|>ED`>DBU7CAMyk+n|E&9I?U2>J6{uR+Nq z2>Hp3TMs5tdl8?=h;EykZSJ3)z9uQpPRnm)5?2rHLF@<(njyXp>jyWiO7-N2y;9dm%Jz!z;P;t8?$H)d>e_eRbTp>s64QQ!1u^6*(Exr_!G!~P@ zD0Ew|V{SR}^`U~{B8Gr?i7T!1K@T10yD`qcImdCDL2-=zL&nIw)|=3?(|SGrLW{%S zItCY+!9_X_PX^LEUKY}!X<>Y^_w>=)fkmMi7;q$mlHuvVs0;if#`SKD%e(d9kbmnz zAqa${NCDyBN>EK}jg|VYm!f1D#g^Q(?Rn+feme2WtipGE_LvDi`tbKH1h}cD)_y8D z4N~%a$jB>z0Wgo3F1b#7gNs|Bh~BVq%}JRW{EB&J4x1q<2lzKGlp?;w2t#|3TnZdmFwo zbTX;nexmNhY`zK*FVrh@bX}^2|sxBT^$2Y9LpLGGLDJ>q(#} z!>!5wylfXTo z(8)z`0?aOqq;nadmswK9ZA~W;ds<2F0sBR_Z7at$l?ovqM7Y%<$Z%zUHhHoeq{1cO zIob)v1$1BKQ9U7D?XXVQCm(Set-!Pfx-gns~ zG*W1Ym4Zh3f2mPE#c_^)6A#YOlE=Rr@b}2w7lI2{p+t0-fQ30-Q>&}TGeu+m>C{lV zJJ-pj{*g-V{2m9I(*nw2apjNSy$FAymWWQX5x;*&zLefYajOKK$O(?T7z3R@a*BUb z7dDys(iHTFOHuy)Ebn$7iDq1E?}E_{tv|-V+@l)-I#jly$m`-x(#rMYm_qFhWA!^K zVJ8S$e}c4+l;=wuMxX*=K|X)6R6%oS*DXB^zkh$`b{B@+$<`a8lh4(Tv8M>*Parjm zt$%Bt%C-@IAQ|sC3xbtrJ%XsQQpCOmw^$YkJ*?~tT2zx8s*D^KklAM&t+{3~ihm4C6? z(7dmDpfB73F-`G$kqarf3;_#Kf8LOXwb<`|9t|y|5TJhA{bxL%3L}V}8Vj!3iRUl9 zBU;!nAEXGG6rGbIaUO^Ggn$f4U19sYu*5vO0>6A^DD}QxA^--L z?;p|T7)%QtG_Y}b=8CGD-d2lXM<|uBoR|2qD}FkW{|=k?*W#D|cKOHzaT>t-=ZW>p zK4aNdr%Pqm*H8>4uv0;q#~`~eWS&|9wk8moj|LQ#p!*U0T=EvwmCb?f zNYP9)+#?OG^){3@;`4FYv>0IH37uv;n`|E`RR6d2s)xnuIDMm=oM_`c8vy-7KidPn z!%H?zg=L||BQn-_cTB&9@3 zfya9M#mo!%FSxYUqN$a}MTN!dKjg!gp^pz0=G+)eA=2QGnPxJ>+CQyxQ4B98gLaypxyklxPSm;@HL2z#Y$fNDp0Vtaj4IiI(nom+Y#VEr&)brnLWFwTv*TTUlrP4Nd?P-_c! zK%AF}7ggQFZ$K5;20en(1RDwYg@{uVk)j0}f;>R)FuFk*n-^a?T5!f-*l*eMowc3qj?CLm zOXqU;m(X)(N_7AOBc|Kaf~e`3;T4id14zqP8(7kJXUt^~^+nVHmpN zd|@ieJj&Sk)7gid zqk@W~f{CMoh@*mr^fXV$A@q)E={-Gva zt#}*Is4G(#>OW_4_hv%UpGXmbHAN;9_H}u|zBDNZnmMHgX!cRgE&9+Pn>YAcqpqJVD1?3>8jG0vVyC4dM&!w z^&fO`OS=HqGeqXGjEt+hh>^hSr|nX?TL?rxgUl_pZ^#Pi+dB8Uf8j*v?gvoyNPeJ|7oZXiopkEHF>jdbwrbmz_Fzkt z*2{thwoV*&9n{>W%%#K)0|)?!+%fT zFu(Vs9qoCt)}OgOL(W zhoE#BeE)Y654t!@7F@xxB`01%f8 z{fW1>2zRk{p1y{~m<)p(7c@s{6juvvXhuVTt0**fmT+`AAk@Y*AFYMm*OANlr)J7f z2pJ-3C9;>DL&6QBAHpOG#Yq@IwxNr6I5CohQ=^ob@DK{ zvoD{W<@tnD*Y8h=oT8>PH#@sLbxmbXTWtLWDpXzhsRgaK;H^%V#&6*vD7Wsx4>Tr> zki-)PQ2x9M{COAKl%;PWam@sKEQ*b6*!6=nsaYot4eZwOYl?9-tQN)hj;n;7Ltzfg zRxYUd)Ty@@-B9F3;<-`xsi>X!Q_IK=pcdvxtg4x-< zGzFU)RK;A_jEyqK2Jp6Al$g?JsBkfh8lHZwMj?QuSz$qU@QxVNo8=#;Ky|em+0Y)c z*fB*65>y!76?9TX72;S#O1ZWvFdF%6Q_g3~OQwsA!<74=vpS_ol)alg>4-jj!#&_z z6O$Bl-wg6YRn|^aAc~ZWU_5y-^HLgtL{L&yc3QuN#H-P+FR`#_y5xv%I^=i8uoaX2 zz!Hw#3$k6<)URw}8xyCkkqP@WY zz`10e$7co0cu6_Wpb2~+_gdSbs?30`)H{iM|2lGIF zp%dJZkMeqERb2V021kjiQ2uVKu0Hks0`~FfH&(Ul+mT#%aN$yI?`5ffr!zPWh|)sU6QszqpFcvq>}h)iZP%gK_-EoOQG`ylT_0GrYoyvM_C4IE5C5p%1dh#!B~Bhz*C+gseWlRXHy` zj=i|>8$2Y75=2QBZxoUz^5o`m^0>;o&yYSw-pN$b7|fvikCw-r(!+sw{-;2=0?N*v z3V|zd?8J)54qf>xbBa-$oI0-j?LHmjfQY=&3`<0$G<3DrY%zfHYF!_H0eyXzbcSzP zOt|e0Db_(RnA#cK*x;}oUEXNBtiq-K$bit9e|7wB!oLg6dwa!R&-oW>z&*BAi9Dr?8C$g1fz+KZ2}mW4<`8IADiS4YmQrO zFQ%#BdK-Sl4xo`h4@Wx~(#E2~jzGrNEYihaL}OEfMkP9%yLYl%(475|(){gUrRT3; z2&lDX>6Ff1KFt>xe?Es_NBq_Ko8+NULeItt{`?^~T^hrZ%Q4(~a1oQ8Pwq)rUPRtt z;H7_+IjAMDK4Nz9c|H(CLNno88m2*O3l_qVO-ue09Q9CFSD!-c2K0}KoTo0RwxW*% zOrT{lnA(;)tuNzkVaRFyD}E8^VGOs5&r488ctlDe2oWYXQ=5FkcT*2>sbUOfQYey0 zoZBKl-O`iL&gVEDQ@g-SRb<(J4Cf?+wKv23)cq0wLL2~XY_PA1R6}fCr0J`_k&W(E z8Yk+s=(W*uPV2LHR+FC7qDMv@Zck7;(AG#gjEQptm=hj4rMT$852Y=3#+>d)QCD2o zt&fDbQPqE^bCWb-&6+bS?T25cGNCvS?5I z81i9e;!iceuxcUx)D=!Bq{8g*CNR*ggHX)a-`g3E%KH}ZIV^Rb(^T)^YDI);mG>?@ zA?hH8Qf3AAC66fMEzq~1eX*%RtP~@A5!WS=wx{roEhv_k0TeiPu^UAI79yt50Ot$} zNjwLYxy~38IX{rdA2pQ1Wq>*0mL839enEIf28Upc{*6V1DrH}rqrG}V;ySnZ~g{a>Zi!!8me1q!*RyY--?S^){zbA;ul5YFv*p0#Q7}07r*ho!m7f3$S?!)j1=cV-VgLtlq zq=8eA0*(0EiA!lIn~GN*rrPo zg84Koyw<)vYXe^_)i!K7fHpySsc75!7C-dyAVKt5Y9-PKp>Z2)+dUj7ou(lAJWx_-hMR@ z4X#;rSu07j72xz{_8O6xd=iqFcFW3Cyd_knxke{s#D<*KwH7g}6(KusR6jg;G@hcpipiy}kLtD&=N98?Eq%S8P>rR4p+VMDg9@pZy zj|Pv#6~2cxgwnrE1UB$-DXpJ01Ke5Duv%o?#B$7q+k{dWH6xkGkT)4mD9)zFlG%9b zlDC8G@kBf+-2UJ<;f?1mgiM{KlTLxodv(CKpqWC-o{Cq5z=5a1QKc16@ z%9^(|-l8}-Uq_~y$u!DMYswZy&Q|SyW4t+;iKjZ{_`GCx*Mq>M@eGC`_?(ds^dhqY z>*a%DKWVi$BTtd9stl5~Foq*_S{N?XuH=IFf=(1A^W~)7o<*Y6QaO{%xf+v05~D!nh_ab6#{#|w&xMG-qryuH8$)A4qTj)izJ zZY$|G#vS4UOqZh|zCd0TUgXZiot<91Etw4`cW!dl_U!B@LUu*ctQDG;P4Q%>B_fhm%vcl{!`#W2Ta z2eOFFkxa#DryftC<7czusrHlbNakC3OkZ~j>J~u8zz3A#&*B*BGL0BiUYTl-N}5Uw z(<~ruXc?i{bUY=^IhdQd#NNnxBaI+iNz&|Y1eDtF3^sQx42hd!s?J*JJ{w@R&1Bf0 z?Ztkhy9IUT3lk7%psndSm^lB3bI|3Q@3W9mLvxiNTa-n4GvQ7hhFhubCb~h`sfCl5 zPNTV9bNFLa1=SItDo{m$D@m3B1VYF!-CQ!mM%WO9c|LmAd&aez5#BV_2?wk8U`m^r0JfI4dF8u4@{-=X zZv`W%MVNprXfy;fHfXT~1U^LU0c8~x_0CC!5N5-mN|t$1dh7=7{=HWw_F~-%N!7>{ z>t6vecYPgytb(S)s%Jtl5*!W`gw(SQs)1k528#wW5=x^1xP`q`xLr_-Ls>?rw(BC5 zUJ}qI8_i5k)hN2?1?Fs%W{j>Zy0suvbt(gbp(<}gAAn3fe+g!!#%f+f$9)kj8UH_U zIcPuU!seElRG=~>t_HymKf2Duq|7{_D1zeL?-2yJHaqT-oj7f7~~_N z3X6%QgWugG9R9T*k`Y1tQ^aiIQSapwK1@I-E!W+88)DZVGtU5;sy&Y0guC8>X8IOP zLjrN=tDGxa;gKyV{OW;cSXbo=HDQ^0b-R)zLuMJ9h~e@T35l2hBnks?0_AH@O&Zae zgCk(zf7Jk`tXXQHUds|7+OAGTNb(BsWW1^F?j`tm^A-MK7~9kF@Ade18~*Krseo>8 z;k{wAG*Q{M3mmq8p3#y+qc#^Ar+{N%R@q+w#Gz1ZgEJxO_XyFmWMvAG4~3}QQ?np; zx4^7M400PMsLEc=yCfplzH+62wbIkMLc*vbJ*0TmeYP*>O1|1FH}oJ0G24U6oDn?+#(K3sBo$3b{BUkL9A;*|M|Xgx0L z2+-l08R*J63_Fpq5woi82+E$Yd?@==zch=!{;!OSGYjYRaRg>zIA}PqlXZMBvi~7vIWdi`0h?BxlMo^@S&WGw(+riP?Zf~(7{fu}(5{fNcoG^l5#lgktZ^7n zCkumQBpn(XWg&%_RL+(WcflQNQynYJ8>}8W6L98F@qmfoCwB3`Rx;zNI@Ro24_k5l zK8E$;>lrOnB-xSAi9S`ElQTSZSukiTnSR)x0Z|q$j9yTM3|gzm`La+7?#E9&CR5mQ`(naV#6c5r#Q2|DCLplyG zGEX?ksQc=AuU$t+p`(;4b{rx_#3c@NlKn$0 zOR7ZHs;+}~B{E+-G&~T(fZ~*hRE}<{tPrkdYu%Pg}fboxSbk$<1!$x1qx zGX3S?F?ad(vLU$m;vRwim_3r3g%W@*BqXKF_E2$>qTr;33FHp2r^k?INnQv-@}Nl%)928K_lpf%HY8=Ez(zC*A- zjH8s`8x{z>Gz_XLb z4JFvOPY>F+%Lxs$tAzlqI1+qWixT;>K((y@c&j3N0;A3X}q6OINzE zuPsY2w7qTNKF{-hXB*AfN{LJO5hb4U?aTYU-}1cgw`l0fHj5iV()CNc5S__OKr5(t ztj$CJgdE2fqcd)hqKK65@>wh4W(yceJYMk+OC!^HF(%dHp~R_9V8ikDHnTB2$)N+>LTbb-cC3qF{WQbiivKW$9df!LO6K zF}I1+#NyKk!ivmq!uVuEpi#98Y33NlDH}(vMZ3}(h+{2iIIU_!LmJR;3@O$^o-!(9uJMBYda`$yeB9Uu;6P3Wq5xmYyqN&}o1Iu?N7Yq8d zs7M$F3vo@Bu{hsBOH9;G6i4lYMhPrT$Sq)XTH^`a1ZQA+UzBS(9tZb|GWo!~imPfI z-lRf8=>i?OZek5gA&Oe5gWezmkcsFKuO^%`c(6H$2b;#dZmu3d_cMJ%oGFzJ!z!W$ z;*IWONua{{@uI9fE5+y6Sc-aLl66Mpl=Ygn!+UZmA?{%4f zSHS!<{5$tI@ME338Tjrja-R{)3H*o`0*q<~uM!4KWJVf`<3SDqt*!c`7bJWE>4$^| zY{ewO7?~aH9o&NaX$1^at zL!ZX2F{E#)@Ey>iB>K+55qF%po%+}r^DOK|IPgYpNYKt0^Vr_R&h4}u-pVtv5x$1o z;&6|P-+tM4Ug%fvGy^c!fBim4FPwxhEbsaUD|T4ot4a_69G$y}@p&^dm?3NSx}TP(QsXl?%ccr;};v6X1^+GqWf z&U$--kk3uh;^k#_-zam%F4CFW8m^J~hCjI!M3$1B!5^2K#$lU5bpd$IFU%kx(#I3$VE3R{)^EqO^z2?haxh5>nwAS6!q*oMUx;d= zaCZC@+nOCE*6P#RN!4ic_Npmd3$QJi#&bX2i}x;n3WBlHc8Eyk8y(ymz>CdrG1jZ% zgGlWicT9tpS5<8<7Oz~Z%nd`D%nd0odsTepS#{Spai;}X@;;VnSY2z?rdsv6acqK7 zlC|luZW+D`cW&+BN~XQz^SF8pvBD~DOzec^gZD;fvVEy%p-utn)ZJa)Q)}->@4}U( zUS(me$=_-jMPCZ`9j*GTL!B4uRZ6@5E&vV7+Usv|hmy!$i(D!r@=(9nIDPS1$yZB- zOOUtruNwbu53R?~v^)Ec9z2)4+$lyRwQd81axJSIIoRhCT0#@-nQ4GqTsjw^Jp0JU zD~=~|M^y=@*R2XSUAwc1Q;edUMrw1$=5k|qqXXM=E7D{cd&=NKH`<+)cYyHm)sg8qaoEyvD&rQA?O zDi#)DSkJA;3+pnippYD|9)z%@NfG(Y*Kvl)YnRk|xF`GGa_pL;FD}M_JPdoOhfc-L z^2|tK`=6P9V;B&us_~4ck2pRTu{)b)(244J9QgEuofWT9#J7e4nEeW~t9{FUu%MA0 z(`c!4_W2b@5$p^Z?(9FiSe*@hjjqt74Oiuf@oc0WU4b0%4SmS_o&fVKW^qe0=#J>P z7EioQELmjiav>z^gtc2Okv4@#xTTY0^H?jKdjRzEAqD;mGp*XKVc6Nb9dD}P8TDla z#NDkAL?+wj7>`$~BIF+XL=R_4Ld@w%pgXebcX-vIpA-oqivCPkAtWsMY=2!_wZw4l;gqv^1C6A9_ z-mS5P7T{i3+V$SB35rZd4`5ltP1AcIz1q~?@ml22p1Z2u>dc*s96D=wjVZ}t%yJk< z4jrXGX6cV7>35JmrBtO|?+@F!T``wQ8<{}X)!uQNoa5F2Zw9;*6o>J^Z_z!xac6jA z+;OeAqYdVGELv^T8X9>M@%(IzYR_9`vn59ACG!31I54GYlgg|(|7fWe;W zt6D>lP~%+fl8qENkIV4|lHgk*%xx~v(t%}6q!}UI-~xKUzXRg2HwbGtmxmt7c+?#DErMIHtN?rP z>A*L7B*`_36-sNgbJn{UgwFB6!gU4)?LvxaqQf}71~3G4g7Bn zf!?L#(7AVhjyGlYd?bEpL1bThu+PJiLoVC` z(b+kN@na8kQFxs7t*|n=grUygIl_=WL+(Y$5NojV z&N`kfpv#ls;?F*RZZpC}m%}m-A65EiVX+j;J3g;IQ!4C4o%eCAh`^7fKhPO#Q=bE< z8!81i`wMc12xSJ~@Ef3+?1pjt!V=;Wn*c!7<^bqQ3k3Lp1tpdm9}tXd_h?^|xqsGQ z3ToLZm%|cp)K=QuI<{JYBi7eNuUt*yx^+5tuCctOp%My;tK93@*W&p@<>2Opa`b3q z;z|k~vTqJp6ITj6%gA`;$)z;rXwgF+3#hXt5G|$gznJ>T*^M#WHTN8(;|-z43nQlp zyp7;4d0Y=`R5rK>u?T72-3{m$Jp{>u+g$a0B1Ep6P@V$Ru2?rYJcczj?qI4LGea;i zx80CKwX?jI$N@^%MhB7JQ70BCQTSml)nM13Rq%utj#0T0(%740>0^=CwQT21Uc$at z<7#zcWSl7#&Wq2K&b0#$#!n_i+BlsBvpP+D0_}4M=z0%jc8@#G*l?%780Lh)4o z;_t}b;+2@9Wx==(sQ!(AZTV)xm5Z?2hf zYMGY0b01p1c|YEx?#?a+`fgs@=hLw7_~rkFzU9A)WyT*1js0?aqw5f?*ln_aiCtx$ z$T^|R#qPawPUCdCPtIuqH8cFnwE$^)_|&v+GETYLoW7J)VsIO*^r=Hhr~Fihv<(iQ z#%xdrEGhP`?K5k)%EHM7HF9p75;s)Ixot_@P$%bhM&gD_Ik)YJ+m^)beu>*8E6=)s zjxj&s^t<9Gi)+_Kn5B|+P!W-Lz3)E5IAF^2vs98pscw$$xVD!j1saej- zIiU(81+R0~o4xkVcF}s4B(55Ckj4nMGbwM%N!3PMNxZGdr$82zZQ3={*0h-rr&M@E z9A`R>^NPc=OfOp!ujq~}?W>s^#JbMW*~gaUEk@3#?H8^=Qw?RYi+`}o1M%3aM?G}J zn}GkPjNT5(u!7BExxt*Ej>fK=S2|Z{ zZF0)LLq**7;U?c zb57>0x=lYOf%N&N90c}bHuVH+CTa}U=x!PgJOXFDbq>;^yw=TM9SWb%uy~cVCNSPr z^`Lq!j(MAjGs2>Yp#5Ec8O&a0L4_eQa$rxFtwXjIrwcj#fz!W;6X6!#G!|pgRbZQg zT}V0VbN6*VYvzhgw9{~J0*~(46dZVarSQ~h^q+89xg9^-u)|niCDh*WM}Zvyw=wP2 zs1yIT;*fvg#@i^U{={42XDN=b4{SXGZ)3Jkd}rJ}SaF2IyT!o>$JW#m%cUm~K{c ztKCs!_oiGbE%rQi7?P0KJgDs&3wVZbez^GbA#`s%(Q%01*@G`ZElIC(;d`LhCiWrQ zYuNE9HNYJ~hiAzP=ONALCK3jl?@5{Jd=-+?;DYxenlIvdAe9GFdG^Q;@DW~%<4xJn zRDn+ThZotvLZ={l@?eIy>+?LI#hWGq#nYVxJbZNw>poEV0z?e(AdeHOP^HzX&27P$ zO1UnF%!;543LP8XNq?GAr8$ldF+6EA#%o%f*0fC>Qz}epI)

    r(qnwG&RD2 zQqKr@1FR03 zk+VBXB?*>~Ooz&~JQyUFom`tp#>jaHjdXiGjDlCl$}0yLDKb!I)&)(K{rTD&M3yv2 zD~ZyYD5Hs@n2>a|>48q>TLP!+!7`6B`yv=%>5}t+6VY2=!uuGBDA-0K785=Xxb1R5 z@obSgmY-9wv*GGsl%L{+@a(DXT3$`@DZy9h#Y=qwgz;4wX9>W}e4Q2vNN5mp8yM)A z@mQMga6n!?hphQFgm^A6aYcvyL!h3q4MsY2A{%}Vi`=oQT>ll)Q{EYvDopfiFw&sj z&*dnH_j(F>%zpitcYR1*Okxy9mzIiwu|~%`ZDg;=0a8Ma(j|UB7Uu#iZ_2?8%&T&P z*MUNpK1V@(7P^YSJou`3{0DQA;v@Z8j8XK4___M`W)NViHm0aHD}wO(z<7UmpTrjLGinNkV?M9p4A#F-BvTaIIR9fLiMd$-;0F$H)TwROI zeS(HWN+*6-Bx?FPntrMW?T$^uLS0vz%#Pq<2|$3p{VB-y%8~@<Q^=y9FU#Kc~d<_%-I<67>Ny*o77)}K)fEq zSvxmz7vCbuq4|X}T_2J);f16yjM}1M39JoM(0-%gPb+vnTm=vy^2|^6cV!?H++`o3 z0a~I;6!NIQ8984-GJviU$o6*I8f_7-?WkISf@Gzm5W1YKAt^`kKWHDk`G@hcG_||S z*L(5OBp!7uvO|%M^+5`Zf$3GC%Isujb-LJHTkd6{2mw5>g$&6nv)e!C&MkMMUKwxV zr&-8i)}0~%=FkqQ?*clMmqWxJ8!snw!NmO_D6{S1^YF;6q8L!s4xfZ529K~EDaZs-C#KVSg`|_Xd$~IoeVCA&8^I|hx1P{$N`07+ zpX+tJ_G=m2Z(l_td@VC5wcj9)t60bPIKgXS;-LKqdJeQVs&S+mo76Z82Iq1XN|P0p zF*=?45*7(xm;U@lc-A+#vPW#O2t500H#&LqF>9_!Q!-AArLV`0`#EJU~r#l-Kyq zK={u@P&(L&jePrRR3R;ju<%+Q>xK!2rctek&C;9Ta$15h4Wafcv^3EZwn+wp#+Lp{ zTB^W``TdcA-_DEW6X86?5 z(LX|CD>4?XjG9&|Ik*z50k)b*(tzf*eMqv4S7M%)AZoib_#RFo;Q@dyQYEIDsi+cN z4Wbj_2Uw9xPGaMkz!rPW7>Gvl6Q1qk9778X3aPNNI|~u$IEJIbBJV{`HRF%B)tGNq zlvsug!JF9%QFs;GsM2LzFGrY;%a8=5Lo*g(5p9m}SAZT6$>=0eatURXnn-dOn=1#? zinBFnwtit&^;e#qRn?UkaR>%vkv@h2iIdM5xQhs^3-0c11s}vq&*+s9n_5D&X=f z?Hf{VP1g^OaO_f_pc{xHLDvkR91@KtL6v7b8$JCS5>IsfVd*2vTH@ngGCOdp3xB{K z*QuIJaT>k>736XQG;}K>0R{G`SW+U(9}=74<$w*A=o3gJIt5iTJNAm@7<(w*zjEy#|Y<=rA1J|~(5O-Vu|YFG8Rk&Z$2 zj1&#>Y{yBxV&2hTn8)Qa*0fHl1oNBddzJak1#7X8hTP9mbQF-@LOAuj{X>{Oza{HB zU2hVC@Dkuq`;@M6sMHphd*ok5$2G?j+TXx7gYIVT(6wiPzl%LY`UIy;RY)4ekrEon z5y%j`XsTs5u^!tH*cO7{Ro|%1T3@F^TorS@_ z0;d@A^)A181=#P~$0Kj2#ourn+$$XQK0&xM6(zq~(1cd6M&y5VzFOjT5;ZmHy< zs&~1vFhB>lG~()VCNH;WvRY_A2}wzNnG~*|Q{NWaI}v_yDtSmH52QXB4+e!in{ir< z;RUymGM)yjhB+-}CaaFo;H%sWnKV59!6{pdTdSfP=6VR8WEFxZ4dV&n;3c2{U!L{A z;K5vTx;{Yz%j%><@w4==bn0@L-x2r)P!^hRuEH-aPMUWBb%94XaG2?%{!|zDWXX60 zWqIMd5C+xmn4?z02Hk=p?G|2w?gUgANjIzq(+Ca7{nI{)6-O>Kh1)3nD7}fA>b)*- z@)QQF03Jp&T6Hy0%ZrgKJf-St7*Czg-PH3@7yfb2>;YPL(bRFccTI7xHj1yyn7p2( zJ89OIVR6l>;l4&6QW8hmJfI|wu13BZZJ{#?a|4rBmXslQ;rPd>`eqVtrdubV`SA=_ zw6h_s)Pwa|nBNt=Ym7Bf4D+I7wo=t&Ay)+rF?LbZunVep&c%sBn|Rur@2=F0P?i=v zb~JFyplvud0u%jXpnPw>r!t;1QeDHr7l8KK3eCy1#DVZaQ;sVvP%sF%B_8U{9>Mx3 zzuoFo?~!=K1kP0I>8X`FQ~AR=KVu9h{`LNwb#)c~#z-lJDVap38>a z$d$|@%GtEf9u&zuyQxh`|2^VU)5q8p`sMk{{?Q=eCC~n@&bF}%gu}}L9S>@TJbyQI z{D4QWCtKNs_B9J1kzT=d)x_P^du{8ZZS8URr4=-b2szNwekxk3I(@*QQcMOwe;b;j zbNFzBTiK)>K4R*MX-Ch2$hWRMee7j*@SzGT9+048P|S=c-H|-gEDs8%#5A4rEEI%2 z1dC#bbX;)-pJ#}z(x7mA<9$lu6b#p8(HFvxAO;RSPcRf5e1R#}m7HK9lvFkkLLA#? zDK#gs2LFjTqor^g0`oggMyZI1>pMLAy5m_G=3c|qo*R4;vGh@zPXA9u{yL|S=5Tsa z(8RJN#JLj=t3ORp2873I&N!c8oP|)5S?_be5eRiEySB>27%NwEg4d&G;D9N(h9*R& zu7=sk1<26d4E>EGDit~2Wbq{>25ZARo{qX!cRWLWPm|wg$?p_@2Y@KjBAt);9 zbG&PUn*kzK%BXfC(A&?7Qm0R%_wmmeA*as~U!}Ej+^Q3t%9>RNICu+i=$L;&6sIzF z7>~D|%EVOZm@8mgf4Ml6nj*<8$h`9>)52h|f!Il3*^OospgDV3nMa ztHiNxM{Nhnyd61DIwRMr-$l;ITWC9uEl2rIeu4S+*R8pZ598Q<7@l?TPsR}*xpY??)-C<0arWMzheVaKg3Z+T=|vv+v>}ma22{reb7~Nfx6XYpLi=) z&y`n(N8Rw-OW8@ki(h@?_uS@gyy^|LvdtyrGk7f=;Z^v7E=f1I1(Y@#esV#|lQ~8B zg44-uRuN-1Ume?8lG75w^$c6Uk z0pC;S3*l71_?-S%v~LMErR|EvNi83Lk?E&MBmlHYMmp9 zisUEfrARaU+i{DVO7G-w)!2#i^_{1{wu3*xji~re_U*_ubGQwO;xYqY(9(FFsvf+#8&#;sC``T$<70i;g&b^ONOSy#^9YV*o@ ztg`hjy_(;=;Q*dXc42z|2BQ1TUvm)7@X{*06CUC72@;0k6S!2tOpEP`L)Po#^|7<& zIPNx^f8iL7NZ&*XJOE$Go4Mw0<{%HC!L!SF-V=GsxXg{J%rlUj;kkoOGCyEW9J;5) z=}N@8SL2-P)IClzG26KlTuXo&4tSZ1x)Y>@oXmY#)5*Le`EEr1ceA~rXY1sx(S486 z?yf2xx_qd3@RKSYe5>KXs3QP}qfA|kUN4Ku0ZQSLn~ zH~1mKDM2()^@4BUk!0|ecYDDNRk6X>5ATBA5BJLN-ST^n{QdyH%@?8*RyFfoMYM{+ z*YvsWev~rXT=xpZ=btn3rkgNcZ*oQsqgjT`G|Z_=dEJH1$TDL+vv#I4(x79>x>KBy zSE%iHXXHBCO6v}<9qx?$JI8$pW517ni`E6s$h+Z#P#Lw~XGU#`Xd@J(_CR9PUgtn! z&DGJi2;>!^q+0N{Ypa##PANSshxr3(H?SRJLhpAxTwRg}*>|}jj^_0Hi{L$6GC6z( zo_9p+Tl}m+`g_@j!n^ape-Y~YOR&_T^)2`raMe}Ak$tnv<}Qed)|eG2EI5v1q(v-u;;hL{@frQwA4!N`X{#IJeu z{@mtAIYqiob0@M6Z{!sDF;0<4&;3gc=8p(RI`|DBFcan*Fx>FSiYU(nILtCr;kBGI zB^?(cKSsKR7@9LsAYEI5yXnPl_L`nt@B!?x>)ko&h2R&+gTnwf+gUWw#NL4}Op16q z={{-ix~u0rJfNxPD<$K-&=qw8ddh??k$NZOKfs!nPy3nRQRGtd0pdJ>=+Ni4@Uiqk z^M1hS1`op*8&NLuD4sIr!TJdd}pQON8-^SGdY_M9$+?{OLc7a-6brC`~o-$s+O`SvSf2xWfKOM_(Vdn;dNf);?k)&z zzhOFSJ_8if@8Ol6oRA2aJiusz^Z4dvXq^7+UA~mYz8z?3Q~?0}dPXV6Ytb0k2pcLb z!2cm;pI_MDwXnZ?w7g~@@`F}%6WUE1Aq9JbwSnE7$mpMM0PHhnp*-FXg{OINLG(fs zTA{fW5Z9;!HBZgzk@xdhkp*sHL1Dhuq#xFPNuf2_yD6=z2k`z{a6<>!4t!WS7$ltj z?B1x~^)IZfEG#sfj@hc!d5*S7y$YD&*9|-O_oq8huIdU^#Tcn>a4rg726AwNN02o} zn(+02R3%~%=mtNBcUq1n5op#^eEAD=ipzy?>ZhbJ>Bf08qAe+@#t$z%5_yGP_(@Cl z>#st5Gsv|ybldN_TAt5%z4+-WYf>KFmZq*56%7!oBm_Q-)+{ht`=x8r!Jh$IZ4>;5 z)-1Q_tiNA25&T6qX0h=+PPf>1(~Y~2MBniRWzWe>J!yw0sN)WDnJPSDvPf?6OPehW9XuJmr#w& zN-@igW5it4c$S!hjpvCu)Oe|wiyN;Kb4lZRF^3!fC1xep_^Mj+jUTF|tMLc5bT_)5 z$1*BCjfz@&8*9`uzj1-)Vg5RN$+UJS~k7%40GkM}qahdBrPjT7y+-Cm_Fq_k&nP<2-m5gD}27d(X zJy{)v$fnAZU9bmYIgZkBL8)iEdEgIkM`Dndvt6(a&U(132mu>d@GE2+{GNC@5BUJ0 zTr=>!VVTzDWp+uP4`VIryXT$tsK)zG{Q+QubG+)8sC05gfk5BK8$c((K3^49qLmv?x{ z^WRE=dN=y1)F{%4ya92pe$4aVn2HlU(3}G6I_wza^KAl7n+D0lb!>{ zvjZOMnS@8daf2hH)F(MZCh?}o??h)%{DPw*FVb0jj?kYtBRB?eW;;hn#yOU87V7+! z%x8WgpA$Or82}x~nMElP%XtK*I?c@aU0XlfOf^qNhKa_9ZkrY z-!j1cOO64vof(Y=ZwKi5N-8SK_?*9G?Cyw*o;&W z>yp&AZ2g+_7h zUlgIfv_C8lSB&NGet1rv`GG76wn*hEdAUO2(q}4EP@HfI)>M#OBLoNGvN{Z<?wjRPz;k0tA9Qs zU=8>JH7ziMoOz z4Uy%75RZ}bLKxnKf{Za`#v}~yESen1zLSm1a#i4JKKSSbOs_3qg1cUvzB+Xb|*wC4@21BqExED`F<;XwKdYZopNzu?vy? zq7eq-D}4+S$sixN^MxL;K1be!b7tQ36>#!MnUtgPrX=gh7!u7w08t5_Zk3P02yKL8 z1aKpbLNN;PiHH~l>c@Q)>&ZW-*xZZ}rTuc0?UdDiIqk;(pJ?aPXRi@U`^_|T>;PFe z??R_)zk+_5_7yN>?e#*<`tQlRs0B68Cv0zF{%ZYKS}_ucSBtI$2(E%~oian?&#b#t+WD2PvImkwss+q>Y->x>Y?Z`ym}9@_ISdbK6v9@4dDSCXp>zIp4ZYSw#kGEgQdYBlc^Qv zz*Em~RsYjzk^bt-!Gv$xB+1`+9Z@Kv1mK^>H4M+p4>o5-oU_PT?X*bU;d4M&PK(5C ztb*8|5L9LK71>sB3|h*!jlD#ggfwGd!Mlykld$Y*zf$~Oi{C>(fJRUb#|>CFLEoXf zmceE?C1fepIX|!Pcq3 zG#3$0La4l;Cckln#Jfh~(IdE4tlD1BM$;8ngK3qm z7e`lj@H)n%Z}SYq!*WJ^JbCbthxdtelm3)1AjMlZ_MuGbHbDJb)NB1mVHuRA0xmX+ zgGG4@(drL`LO?!G);*Y=>~SUk+>tz~#ppyrtMrZgc(&t_d9`_^a2KHR>!-lIVujKd z&g!uys%y6yTaE)K9%Y4Wee$QmeJ$J|!0-m7ZL>e2BMOy1h&Z|MEL6`O49}qf4a_k3 z?hm*VUxWAx&*0%lLbamu3vg}A`>Yxez#dR8hUX#8XmNMGv>SKIe)tNcGrfZ-F0cHi zu5Dd;Yn)>WR>Ehxkg62@iF|6&+?(kD0qtPgx1@nqK~JP~FKwb!OtNR6s&H5QNH{oRLcsfS<~gR&Fc`<#61r*GWSh93k)bAcoxL4LqZc2&=1c z#tSS5BT|JrIz)NbZ-kI=Py=-#~zUS*mb|IpOX- zI928y1Yy9MBmqPCGt!B(_w1;)(FC^l$nAe0WI72oFF}2_L*LoK0%B^}vedjoajZet zvgI+n%MOjkc%w%L-srIpye(J|!?EDN7>)(&6%O|0 z4+D-ZTyvTE;?Ot4qp=nl$K=ALP5s%7aV2bdPj2VfVOZOKd^KztO0qF77Q;6IF}0QQ z;Qds7GALZu_5Z zaU$)OR}VEl1ZZ77NLdRKZ~U6ji#{-Uu$w^3+WeUSbqng68H^b$uKQk+KH9itY zGpNTQoG#qL3oyRm9<_-}&qRlfNLXo)W3iKZ6Y{)F*32^VcQvw?M8(^DyBe3%Q@g(` z4c+ik6j3{UNC$5%792A0Tw&C*4o!mjoXbdo#$QSGRR4mewIhYi94CEdI4?$foH*Uk z$~_h}7=?Zo!xp}QdA&VC$MydZferLK5-dazzL62X6h%Cs5k&+DvN-K({3|`Rer&uw zOtK?Nva}f`ktMOzh|iuIlzn_!II}nl?O*+-t_ygYDY7`jm~yZjquoeNA%yD%dDsad zv}=1Gj&_lAHCgw?2SYlcQTaSI$>ZGlqkvUCJu6LQc;)5I4h}Dpk1RmS1g(t}Wofw4 zVtLPK$=#DzB9%9dbrj)?%vI%a7)~u%6~B+naW&45?=g4eS2Fo&R_w|$$LJjQd#+{1 ze3A9+n`iDI4mW~doQ}sO)ZE#$LI0o6)d^A^)JPtpBT(u1J#SrJy}5 zvs98t*BRuEA*}Ix*LkR7Rh?G^&2-HlqZH}iZ&TRm z6_ueGb%RecQw4#0K%VzM#Cc7mmQZtfg{+p5_rk!V;qUks+Pjw7@ogAgqXryGLi)kS zkrkzKzJgYUXnsj|O_;o8H2DodUSY>vwh8+(;lBdqrGs&#&V#Ar08h6gxMNoltUes> zGjQC`7%u$kE(K4ImZCAjsXV9A0>%~3XE~xK(+Rhr-to>^+E#TB5YLqnyOvWuA7GI# z1~;Gr!V&j6)NRCAWSY)sHe8m5Qw1qFsZWzT{6N5KzH zB=e%jHDBA15O&1joL1--gl|K040Wfo;GCPcX26$oX5W!lQ1E8O6@c7GJbv1~pNe-L zu}DTK`R~g(;eey#_*3oMsc!0Ql>aA`uLs$#0MJzne37=?wiqj&(eN}>Q+X-${nzkx zc$kMfRKW6%y#@bL3}N%|8Z|V_N^!QfuLM+eS>EIM*1rY` z+>sC5j(R;+tjlg<9Z>7k2tF>Z{#KKt*7T1zs@5-Qw|@Uy%)b?9Pjous)8ctHljS{; zpR2s7i`NxvYh9Hj7+Qyp)AuN-YG~~N!ZK_5)!-;c+6%h8REW*M<^ z96T8i^DpL`;F}$NZlydvjRWGXm<*|j_-$fl+HV)rYyX>=e)}C_X4~(C8C_4$k9ix& zr?VF0OJdE`DRs%f_6L|6@Nf@vBTTt}b6PAkycI)g`&}%i#a}!{FkO&L{d;7~q61b9 zOc{)P zB=O$?0KlRlLZCu0*a=CR@)|6eV&o~eMwfDH;ABxS3K{2^KjFQ|rn=NBUQzn^9bm!) z3ET=fKp>Vh8s3cRN|HGDk?sR3pwo=3GqQTpoOTsrf%D)MMwp53JkL{xf$(c ziJpzkPNOS9Y>vJNq2vB^Evt~@0MBW$aa2QHJM+Hg5z?JD3j|TVju`ntUOri` z$>w~l9r4(fX(+Z|(jJ}8OF;Yv?a?q*c<%p3p1=#x%F1cUatyiu2dsLQy9#yG{vH!k zPKhaB^W$DXym(4Ul6bq*q8WE-bz@&I!5^4img+~S?`SMKrIJ(I5f`#j5|)&VGJ;VT zi(u3Yu`EWnf>L5X)xDG>bsbL?av;a*-oAIX9d&$^?Kqe0)O?klDp|29Xw(u3seG;E zj%Ax41ohd`64i6b=7*D@W%klYc8VG=QRZdsr>4A z^G6lL`V2&UKwLb7y%aE|TM|-WXDFWH`o(?h*?J|yZn;tNHi5p`#f^P z&Jn#fybacFvnlLJ$4~Oqpm$U{F!>cvu>$L)Z>6szQ&sRAzIR^A8N%A&)AR>SI8oxv zQ|vOpb!(|v0WKR*&3BK0m2G|&1&*W5WZhdvOXqDFE#n(JZ%gUy($oe0>0*DTHUwQ#_`kc5zToVvm}hT+cFPPE z5f(C)RTFpTP&uvJ@>K0)J>v4>FzxH0kxV!eRx13viY;-vCF za6Vx50)7N};e_rsdRe`I^qZj5OLIldI8m=7~V&FD9ZkJMausElVuFFZ&c%BYJ36)Ib4`0O_m^g_k5b`RrC?j z(6~ZdOeJ*!diZ;wC8?S%Qf0-8g%1x)cTe?W3_oj|$_lk$94OV#|D z63<3Bjv9O?7xpty)sbo0^=%g7KN4bT%@%*_XP6_c7c+@?g;Xkrp)O`_v9(}=P!y4w zn7xwd74%l6WD+A%O6I64GACTXc(d!st4`A`W?OZ5&7juXDDnFfk!LjLMT*Fx$lz&) zmY+8OkVyH9en_rF~rNbV9OqKP`fDCFoMx1Z}Q95eVC23Ua-7IN< zne$Cux>w@C45m-OW|eLlHJhprk}pySdH)5q3j0_ zfJ&aTVvj<$7q@cInr9{tQK5WK$ncP4Q(|d5Yf~n0HNE*bCvoq55lsG><}u>UMmuNR zB(Cs)n1xwK8!mHj^BVQh;2WsC4*t@u-SB+Up9a3MQTb#Wsjl9<#9NiFdFJgRn{Gi6{u(m3lb}kb}88PQ0VODNU8whzc9gUxT`GD!ViIHnM=gB})j0VTWw~0Z5k1hD+fBg_)a? zy*=Ce)0H()Wkj}5+`?jhq`XGzfYh!VQuFk#81@gQL=QjP;A)J*Y0d=!_4eg;mQkf( zks>f7&u10unQdmLB0bfE*PVqVbv7wU?PSZ4%zZcV78V}WbJvqg2*x^Cf?m(?Yfx8^ z-X{RMGWZCBj7qGv^nI8!rKtZ?b!6JMUib?Hs(rd9uJD%a4pv#Ls8FbH6x=B!v9d53-y`jJX*o0rZbT0DzRI$O2?aVWGA1Ro-_@6xs;xwl z6&C#0Gt#f%Bea@M*>#By>uz`|m~h?E>3OI0YR z#)PubeW(gGDl5&%gEdA%CtXi;lXXS%CaWV(F^Y5L^f(8Ada3seYjb;zIvB*GoBwu^`V7b6*`+>jO45Z^fAWa zWDYb?iOxM!zO;$j_oa+cbtiYwpT1$oJ+@*0s`O%O*8(_2uzkH0rlXs-i0N+AV5!PV8ISvTqpLq)oJC@v~cE^GYOA|hRD8cX1> zfrjlvHgxU(LcQ^>#3y0seCLQR6OZ#9RV6H#7yK7)z?>FiP)|0^umU2j%^T?6oA>Lu z&iW+p$f(L)_FxVkvpQfjl_y-3(PO{$XXM9%=T2W(7^kQHhU|>=0uN4%1Rle6KzkA- zdv}Jm2;%&fBfs3N`C;`u4J7UM4G-i(c43rE0y5-Y(7Q(Hcm`Ly`?XjVSPQr<=NDq09KdaAp!v+7<}P{ z4O8#!&~pi4fyIQ;uODeeqB;CBCJIuK=)*x^U{VDms)$5Go%5_B(YbIDa>|8e{5FpP z`jlK-(jgSTRpbN$GYaysQyxTIp_!@W zX2bpgeFlWBXGrf)4SzY+{U)4`Jz`U_L7kTLuNHe|_%IUKw@f2^X$&1%$mTunQs3#jZFKi zFlK!n?Ei;Xz>=?Z)eq!5U3UF0%HUTj$AmUvgjD7N?VNPQqwnXcw38Fx2M1Qu| zuMZFF*qwu_ot(bw1%>O@3YE~z9j_dQFQU9fi+I4(hT;+x%>+e-(KtsFug`%AzHbZw zL?NDyF?qP*xu6ZcTNkB?Ue{wGSgk;StQc;Wf*1z`KtFj&3A-3Z5@|+cBC*I{m`h!N z@?Owcob&$dpVaYwII9Q5c3wO<6z{&~168+jBQE@Ec@ z?1_L!69JE!0H_YXSfX!q4geE5{-Wd}2P-VA)#G=3QBGiP!O~WC&?r`4Hnd3TDB>!?}X?n2%w@|+QT0TMEN4;bYqnHrYzq;uyU z-1j<_a+GjidF)~yh^l#*+>nXpwn%b=+Qmu`=Qa{s_pgk-ECU&sGLT*YHRYlZQ|_QG zcSy1$9UE~};exMsKzbAwbrU-pc|vjYkGs}Rq} zQY6F~XMVJZm9WTl+*w`VxVvq79$yP@mBiAx-~hLghtKu4VAb>D}xA^&K1Cj;v{IkUsH(mV2q*?$cDcT!hEm@FTZFU%8<4O>YwGFg9Fs6k zaF%x7;C5sOim*5ajfr|dndk9p_P+sC`f*j;;YWpctcFN{*!E}t7q}%VwaWK+U{!eo zBJL5*LC(a37FNdX<$ChU=VDVA#brTniQ_{1*=}NgckpFQW65&%L1#b`BTqz>1~L=; z><@i%j3Kw{e8Ofm&jLfu*9MqJuf-3rA4x?fS>xlL>_aXmct2_~+DJbwbxC*`QaSPx zQJhlil9sbP)+N{gP4Xi@!S(w^XKck@06d8p-&uE1r`XDq9_Kw$j)z(FV$9Gtp`LbD z7ETQ_HJ^oBh}Y>yXt;gWmHNKfN@2*nj7Js*N|!+@^BZ)Cqm<%RX(H37itv(fW#1r0rTV-UM^KIBBf+FM^kE00+{$354wq$xBVS> zA#c$s2c-;ek@BI{PqLV)CNZN|#maTIrcaTi3D!7!ml@Rj_bjNf%hQyBXXHg21)5h?oBfg94s5>~cLHC)&4=`m(|Q z!01g&59@LLTyPuQWXX~~$$6i9P}k&_Hu-tbn=9!hUM95z<~@jq;jlDWJ|k~dENXN+ zMIWTO6qMs2f;W{lF5NWtsL`J;38S8$Rv7f0FN-cLAd#1>3`Vl(1zPZu;SpNPNS2xS zA%W)F>L9=({S^z=ctyka<&8QPx5$YNVFHqwJF=;FAl(3QD(Z>yP_6tRw9SPNL03^4 z7^Fg)ZfKCtPL`&!XY_dC9}pmD>j#@Vp1=I2fCX;h$hxQAmS3w}^2l z6n|y8(mYB(b^X|=m&Z6C)d&5choNU5gd?Nf?%8B9GB4a{8)xJUa-q-?i3DO|)I!jOH+W!p zA>Z1PMz_q0IUoGWUn1=|exvw8h-ia2=;RpwPQX+|UfPs-ZA0WG$n)bPZg4#65>l81 ziLvu`dMA9-7V`i<)L!G`YuDrs1Qd!{IlS}gZR2_dxvkN$sd&GALqg5;LGCc#W#R&5Z?&C z+VbWuyk$^r=9lt!k^I)>ccc8C#NWnAKxSh*epJ?-IGiVM=BW&6=+zH14*uXzya#?l!!G=`;t`zJ>NNwVy-# zk!nAW_LFI!4(sU-IE~1H4EfEkfkI?l!%f{-x4R9zluq+QahMz2K^nT(5w!!v*#dmT zS8bqiEphPe2nU1Jp=#qdoqoj2{!ee|O_%s}qo2mHQvrNTCel(w|uhaQ=BM7UsE(7IvDjIaFQyMQh<#8WA znI42w zOKZJyl`?gfok!{LeeC%7b4G5s3BsR0MYY%sZ-Ljv*uY$ZuZ{0Ad@nL~y6v~=Z?rSN z+48V{kJlue_B$H(*}hZYKify~UdCrwG991Ro$Y(PuszZ7Ev(79SidK_ESul?z{PAI zX@WFh%YQ8QcEp|SI}!d<`2Jqg!ofDhqni<2bGc`0U;52fSNfUfTaLQ{{o~#EK8Wu{ z_}HCaiSLQ_W8U^-8TMmY_OoTrW&R`L?#4HlIlT@xAJ*kP_{a+R(f_628&Iz|$uCJ4Q7~9lW34GQ{K8ZN4Qi z`PC*cb1mUKwun>Ikjz||-7uqJUc; zlS<)9461BRCGB+E&xX_ec-R*L zW%HX07f+Nwp1Vsu5g+mJE7O+yYg*jxkC~jumZSUqzwq&hGQc;NIfAf#ebeh;^P#`B z^XUJ7<7ewPm$@&zJ&|E^m2dr@$g-GMEwG!fb@r)kD9CcGf~n_5>=TnQD7^i|*RNu3?Y39aouE*RV&Z!>~uF!>~t)qg3@(mI*nea=BFY5M1e==md8I za5s#3Fr{80;tcVOeas6!j0kv%hin;Ol}a#N=v8x9t!~s6@)BMyzM+v*qp@H-e{Ebi zZOO0jRb}DrR%KyALn7`?^p1IXYW503E#UH8IF#f--d7S9aL~9Z~gS%W>Sl@@^JMcgqQ$1 z*c8+zH8 z-Ey;Sm0K}jEL&9e$12niQT7tj>Ga1dEHrS%_-r;m`j4A>7GPe?y9UucHHzDBs2??g z)&Yb8JWAmRo0IT8l*Sj-h78Bakd0RvP;I$giPwPr=19L&1cJ?{7L4YgV#gHQ0f(VVbMzMgMyHFiqXD2;0QqNC+dK=BKAA&;L zAhPa2Ur|~uZXFk{R00I%iVqXUAv~tD9h@cV3+9FgB3~zb7|79*@yy30%EmLR0+<^< zgRYIn1;Gbi921Y})KdY|685bYK|(nb+fj~cgV9>?mRg7%vSF+ynCRsWS&Q<*DTG5e zSn)c)bY1XAHV}0ToQ`~lqkIAByY@R@H~15B0ZTrS2-W~*9BxJ_-Fq{59eHnx{3`65 zytQ0%aw@~I10o*M2B))TyUJG{o`$y4qT9R!SNwPdHLaHB;wqZth2SsaL{Gj5G!GX5 zpw&0SciRa_mM>p<55~DsFh_)+r02!(4DZy8ywY?(aCz$6FU?D#EvbDkfToB_4egGG z7Uy7N^mVCAgcsoDD6ay%3_$hL5rzT=lmbS>1t5XE5JI1mzVs?k1sWvVvJLN~x6!Zt zLljY~q~)p*5l&4;fc8?2;5cp_V#6#yJQ#psmVnqW81M+>eFRe4p9cpc(oW1Z1Tz_# z9nOS-Hg&^!hz3mK|P$ z5YS&& z9BHTi`GOzOXnGorTCzX`OWZd`gqkLyX5Mabf7rZKYH4R(rKWi;q%^Tab0|#=pqmJ# zu7o6y+9p7=4%SG-2>jSzAdE}0RD$Y8KZ#vHQG`#arokbbM_#2DvD#cPh`LhsSoj-Q z>L>!%yXgnks`@t2>M?YH2dREx!Qb&CVpMz3q=Ud?5r_m`#BR2btses!u2;ivYy*6M z%#^v>vVsTRM@Gzs|41VjUJZjfXi-Ua^gd*j4#(j+_B8>ZvnjNCwx_Vqb3?ccctk%L z-i*#6@5^^-m+@B4_kkt$o~dw~AgMaoyaFv;eaOY(56`u@l+7o;lJTQ|Z6Wy6egask z#ti?7j)CgBVSVO&Cy`JcY`nN6or?Pgo{xbu0X!C`n2~*nj_g!^%CWuuGo%3nEUZ|D zbUD&}#WQ{BoW1O)EN35`Ou}U@yAS0r2R^U}(h0i=S-k-u+y%dHX{wN&+P$X$mI<~I zeAfJ^^kz)taTV>F|Z{?(l?EVuWDR3kADzFT{jcKo^pJC_@nY zTHG1^ctp~2Og9*89R8AdW=vNeFVY{D9Y06Q%uR;BMCc4Mq~|`!@D~W)7a2;p&R@R; z9j=h^jbLDAI37USH6`OIS@GFo9rrw;r>>GKEs&!g~zPXb*-U#pTWBB3N6@C({XL<8lM!O^$IppY=!o`Ks*?V&`u~2?B z{1j70a}C-@2~}Fxq{~EP8IACqzrTh09~jjiYu`^yuRj|e(_4fAjNq(tx4}SxC8#%(2r)&lKXT>uW|~-nV4zPYNR4=k#{Ifn;^IS z0FaKY(t|MU+_njI=iktkXJS=8T5LRox?}otT8tbXg!X&;Xt}ZO{1kklQIKh6m)I};3en7%x}W={Y}+oIll!G(BVQ*R!C0nXVZT)6z5)9s!V~Y8 z#MQB1ItF#a{Q>q%1PQeLO6F+xOH!HSeu*COeu)@R6**%p4QCsf)Qgc{Ahg2#Kr0VF zzWkK?m-%&pIT)k*$|d-b;lJB2X0yAt!g~sza7$;qpg?IWcHlkSO7-kb2~WG-OKobT za6}<{DXEFuF>Lk;dbe~YC@)_ zG6J6KsSxXvJoueAp%K*K_ow$3WSO-ZK~P(=llyt$FSc!P>}Alegf<|Y7Xr>|1n0Cp z^giJ%xs{R1h-?)wsuqp4dv8xq%2XNO&`bK}<4V;B28Y4MCHIOb_%9iodS9zncxeh*}VC_$v#f#HozEX|w4n)Ls!X>yYWs>n{oi8$}A?yeK?)sR`?ZkX7(5}zp z9j*;YY;)1_tn7|kIDK%OH^8!<@w!Ivq4l+SCs#OeFjhyz7TzO{(Z$WMAct)jevQG1 z7GaaK5%vhgmhojl1`JxwLgx{CprWs2KLm6`^8<}o$fW)7tiFGMZ*{!!2@;fy(?Uag zf%7{1mfQX#leL(*B#gyQi%C>5yzU^DOb(x+E9$i9nSqq82f|8@tkWWPJDFe&#-<(| ziwG%AWML!PdUBEl*BmlDbN4dE9~q#vP6|ORX=8l}BMw|?;J}qKG8$40ACBxg!Ng&z zL_2ny+NofT&6pM5|Kbz^Bb#HhmGE-lLhAMzk5z|` z3bWzyLZCK+oXcRdB(?V-D7F*>yPuoHJiBY_#PxU}i&TKY=2A3$adiPIPXq=XUYu<8 zv5HPM?GxQ}>r&|MqdJJDysvV;c_ z)4>!1G}1V<3uKDHq41~zMrN%GkwL@{aHVVRA)tdkHI8;Si;m^G8OK^%j@oa;fP_QX z7eUxT_U371Q@bdA>4)H7f0{ei*VusU8n1dfgc=2g^fm^eElWJ9m*mi#UF5z#gS1YI zzkE`j6&oLE>>~6c^{KBUpfJ1TXIV~*sBt}6dg6efj*Nsh+gXM>EgBJ>wsA>@Bt(*+ z3(w>_E&8!Q!2s7Rpi34$1zC(K8L--UIBV5?$1Nw~I^oeotI)(jXqJ`IZ@Q2RN*c#( zQljj6uj}tl`@7-Ji|{$Z*8Bp`7|3cgcp4Y*NK1V^UqBmR8Hn|=)K+BGxLVDlf5cT> zi8psTs@o66H8?eeydUCC;nUI43pN6}LMG4Qw=`wc>C92ar38srm)DvXH2Uau2#eC- zDUJ_}m-Gpqgq(Yd{eG?F6?`MG3B5=nuL&e_!;e+tntQ#X39P*I>^o1TBzHHa)KLm< z?=FqwHDlyD@k=#)3^2q9)HanKaoRm7(?KSMv?T;30`^Yiq1_Y{2;CN?;&57|lVZpf zD`v#`%*Si@(SVAl0!_cY0EXOQkUg2_(@u*K$1sMGJ~R((K%g(3xq;^BoyS6~O^fI5 zK}@3Gtj$3mY0)Kz?4UkS@;a#2kIub2+=NPrA{6^lERJ`Rg-m=0ugBs!Wy#Ji?m7NE zkD1|5gF-G{@nCwK6vK^zr+Aav;~hf9iTVw+i65jAbP8PcLA*d9SaDj!ij7D+`-+!( z8V(It3!O)uQCAEKh}}S_TBa_8o8iqD`N0WnKdFdH!SZfS-KJHv=5l9eGXn`2H^-cM zPRE{ZJOMBL-_j?C8GY?S6Y5$ZE+8R#su8RJX_?Emc&u?tblcH}$eiMy#!x$`tu)n- zGcHDeOzEBoZsUQ+c$h}Ia2Dj(={Fk(*q3$80L4P|JSJHzV!3uT z#3*slR|K|cqs_kP7q6tVHcG`nkxrzNf^V}k%mSgI7-rNJxrLnK?qgi%IgXu*s6q`K6(Df#Cm4;RV4X%vP95ktiOzOp&dI?ig-`qW* zvo)YEqwoN<713Fj@~%Lqgd$c4RJ`VOd^BoNkzzcgOdn!=+Ym($Ey#SaVxu9Q5Qrb` z=|#iS=ZuMW*(kl~m8Up=Unv*~Y;IFhmaJ2k5ucnVo`gE{FIuNAMhMoaLohPYnsf=H zKh~O5B2_VM6@wFj6)s7ci!Mp`qPv+TsjR84Mwtf#*JerRv{>$Ji@;&{gQjT2i@*v! zTP#o)fqZe0eq4D-nX(A9>$wqx)DD<6$|AGmV-zQR2EpcfP4%;Z*Bf*D0Ssy}!mh2W z(Wli$2X7#aGf!2lj0u0P4q@a=6xr={v%Aw-t`NIaNO#Qx;P}%0*uP^`S}Wt3R6emL z#6wCqA=25EP3Pda>k$rB7h;^;ZkBPC`Da(UJ42w+8!i1eECo?FVr-VBpbbeb1=BN^ zg2irBbH10|O{ntc)bm1ZzGTdbfW(nv{QLZTECg+w`@a7OW&T@f}l~9auEWjLi~s z>O_2a2E%5ZC)p@K!O1d0u`aUaqecA&+EPJ-#}-i}>pQ`f(;}{HMA})0OzKOZ*>ys* zQHx?DR0K~#+#5FxV=~q5=wV5OFveA{tYwzC_aUekA2ugeB`*q%%_u zxpPmk2MbA}WO8`3KM5^|GMY@u(bMX24Jyd!g5_IfOAlTmW65jGiEb{)FhcUG9 z9K)CmNe*MP>}dBnh?(9MU5E6@sK(0;5)sF6G;R2l3q0>G?5q#*y2>2^z-?HbO;Ub@PtZsInugF;TDgP9Ex1PfdD% z9#th5{dh15Gm2LnfAdn@E*rnaSE{Q_3EdNL&cG4ZxEAD@3jx3wZ-3h-s$z)N5F>XL5*f> zaXQ1j8B8tANtLv;H!=~FoNxL++`W06oJF-a-aJqD)7wlkLnhrblcakbGdJRn5*ZZ47=y;;BJN&SE^erZyXLy!0tzZB3NPYv zyeQ)Ir%vrvaM>GXg4!Ft3@WC*Vb1-~R;*!P zST{nO%~EE5w$HH>v&SGh`jg@0Dg92Hc{A(w>75_vob7`2MRc2w!bGaA6; zWJ#F7AS;O%3R*ujFw~;*)c+qc#$}@D5|O9;oLsgaV^6M+?BK%a&fwJQuXbfV498S< zXKvNZJXTfBsH;_46HguOlCJGcK(sa{q-0eyp>!m^(>`?F=&WI)T(*v?-h^p!c2p~u z0pVK4Cn$Tkf>pzKGb4r>>X8CY7Ph&X)jR=g>8<|s!D5s-F3F~T0vno~yP*}A>K~uG z5fjWoQvIo%S7}1Y)hul9K1N4M7_wKVSpxw9O+XFOx$; zA9ci1v(q+cOM@pNA+%&Cz+t}iT@vp7b=nM)b+ZDpL%U+S( zC>MjVQzZAx#bE3c$!&8n7`sGr_goBiFX`QzO!v=(-Is)Y3@xqPYA11P7dx)x#f|zw z7hQ;BEj}Oo#*Ni(diK$WLv($0oR7JLuxp&?#qQwA5KY*tIFX)o@Dw;~-RafVed6WG zxvtpWuakiE$o76c^!~kFqQqn^wttV@L~XP9Y}<@-*S7(1o)CINmaq|N9hkPGILS&l z*ugv~0bwKQ`7c9?7^gEyU8~_FzV74u19a&LqK~AD$*Ye&Y`Q`(wvP`37$($%^P8pK z+xLJlXR*;b=CV22yjN2{jO;AF*s2U-JO&K&iC0QZ^Exu+?;+=61!<4dW>i&5J < zviY=i!B5ZyU5gHXO{Z)xqq6JV=QC&!@P{2~>^cU|LL{fns5tCMk1o}l?`XaL*~D|& zbfV7Ua|mp{mekQ@BtMZ_iqEPgx{SiDNDDfekvC_!7sK&ihv?WkEAnWQBAP`yrq3eV zrEz_*!2DMM875E|C3BE5EMW6A{6LjMaJc`)^Y>!hCwbRB%P*CBAJt*lz$K$jX6P26WC8mwfE*wL+#3quczF=<_ zGi98Bra!0iOqhJaWzN4>SQc#DhyvZKb@a{nJdSnL6l&N}3rIkB#J&XLrcXudHBW@} zWZHRk+AG#aV{%mSVi$K3g_Gk_Zb}EUz#?YMs|lAOS0P z>+N&F5h_Fj4vckMylwj2nbJ|BVKbYt>7wjkNqyU`rkYoBmtFzu_F-uIrD#N_l*)QT zMZ9hL+?iognRJAT|3(stjxcT@K6IF_+uWj?JE*76ggm(yI$c`X*Qy|;);Ua0Hp^hM zP&&i$)OLboJOxl@HBPPNuts?elh7-!c{qk%4^QXlY@^Ok=sR#oA{x(5g9AhkEp)Jn zfb#a>oX&uaCg5zia_2kdB~njh*<;o=d;`?=-;RV)8l;o>eh1)*hc{U^d^hv4`1)y>G6~-ZF34xn}5IAXR%xYo#+2eQ%;%!2myj4M)I%nRu!b2V3fc0_OR1Mww zC}*2bQi!&y0>N;BIIdZbR9-Ww3D6q_Jy%D}*xOWfn$H7Cw1RF{FBB)?$sWM>e%%YI&uv+&XP$ z4lNWNv{2WB6jVrkk}JG=Ms37w5rGJk_*1=k3C+*#&1EKUNMzUC!H`aEeZJ=R8fU=Y zfnD-nUS4xUdZ6P!y2vs>rEg@AeI@i_Q?QU~8oo6)c$B(B?h5oje-#O$D{>y;xT z89y9a7d|Xn>C}#{d~E|?<7Eg%a?)nDn(u-L0|q#4{<>IHVg8yf_EDEsjwp1XnTEFu z#`2Dg*?diJv2{I@8Uin@PmwLgu1Vai5!zxHezJnw7^oSLtG@p^U#<^_f8jL2mF4NE zW0j|)^-yHV|0I*U#Tmi%7OCI@ia5Zb6^l%V7DV&iL?nHIZ?55ba}D#Y#OC9mXQwoxcosscCN{cmQA!HSa>baD z$|i{e0e#psh_@zoZ##Y(Ta?lHaQ%-%^v#`C{ox%J^>GM+&fQxM8%{5O^ngKT-83o{mFe~yzv8a)D9NQ_h%HG=hHp0b-zWZEUS zZWTn*r4Hp&zq~i9*XJS6{A2IvrI1QkWiF;C6TFy?+dK+V72OG50sxISUE|n&d2zH$ zI^$gmfap~wbtkH-jv)xd2J+R%Ic+8`SF&thh0F2X5%i)`{x?u`V;fq>p_Lp-!P?5A zjcl}ST^_ZZCT?n1%EsMg<5o>v^vJr#WiPYcM$+S}AWCLd8ufr64dBEnWg#M1QEXky zbY(RcYUi{y2OA1#=PpsiP&5=lsd)?}w;Z&I=(I&FlA!-J?xc)S+(Pz&rg&>b{-?h3(Jt*KDywicF!Z0sZ~QR zL9#TkHjy|g!%@vy+U*Vg^jztfDO6KBLNdZzET(SCuI@>HQ-ay>J{ zQEnV4X3xYLFg6?TA-%g{E5@>X*5)4$t~tIq>O0J`)Y8Gf(8&Y=Ig0uWPoCFjAUgXD zbRSut;h|_fygq{~_w>xCMgB22LH?Uxfzp&#LcRnxZ>1K>XFNRFBd~4n6Q2~>jfdZ0LQ}H~j6hT9m?rvV_{5``+I$ZLg5U-MWfOcEBXEA!ONIA4 zwFw+QGGVI-k_X@%2}Ngt?Q$6xjKI|dk!zvWCUG@jmG#no&)fnoGc(^LuWS#~a&bHR zK+0D}`WZNS{XJR)T?s^MdpBcYJbUh|EObG-c{b7`@NXfIUC>uE8*cC#I_coGbTYx~ z#Ai8a1eeo~cI{W78@z!Y{|k`nGyad1J>ie{pK%RwNFKz%twy}i2&bqs`~5fa zHZ2EvCOIEhiE)0C35!|dUUw!R%}TwV3FXw{U%_w8jti_!pZ{YJU{&1>56dAVYqU>6 z+Nf(fLW+?Wfb4+^Q^Yn=ewT4x=hvX6XUbSA^|d$=cRR@oLI#gtsR_k6E0z znMT3Q;`u?ZvK1#~rbdgUmA|cFev&F8Ez&3(8|ntj2%2=xt8Fu+^52a%^+f60gfbTD z>B@$lO16RL4)OAqx53lLk$Rmx9v{7vV$SD=<-;xID{9o?Hb!=VM|3%;6_pL<#Zp`i zAVrBoH|lbZ*y1Q8H+v;w;B9XFvs)3LhWlFZD3vCMX=J?2mG^&+w7Da^KZ|F&yoqA? zT|dmjPMHk0i!-RdAmtWLIj`sHE}8Nw>l>5rF?{5?y*!pAw*rB5zSNHmH$osis0TCo zVis6d-RsYFD&GkjBr%QNg^YDFStOP+S?pkvaV9@z-h=YwUgVQH%0@XaatnvIp+|iO ztrVSgfrot_jUrrt%~jrd(Q-w}ht!pN_RMb_@xEJ0l(XRx~@?f(Sn4B+Oou}3@TQiT=`J3-*>sHND1A{e5c zz%V%zFD9;45j0kZGGL0Q0kQFbCNy;Swh3Mx2;HFpB&g0)dXs#g5s+c)x+{ zc!z=DzS0{^i-Fs}My^LyUhP(2RI_+C<``ZkTP$r`M(*C0woS_z*JT?K;l00-{~KBg zcbQi)U)2S8JypK(-k0oO!KIngbg7Kz$FM9LfHKb8!}U$4 zmYA@m2m^2sVM`IVi(yMm*fN9xSl%q0Rs1EGDXINs1Sq?9?4qI{flqkwkD4okkzG{# zkraj&yQr|O&%z}8i?Nq%7j2-()lG3(fq%MwJcoc;{9qG-S(MG6purk>Pn8-?{l~&>(Ka+ULMsb`i}_W# zxTU!jQ$)=tLPuj8>Li|*`V-uz!X`$24ms&5bM_mGWjs(9&feoNWV$}<71%l+luK_0z|K=iH(^esMC$!=|IH{n<*t$L&X(q3Hd292_z$qDXM{ zclE8uJCT3>>8s+SrSjfgS3%5?n!ORe5mBx;;Y-!$YJAP|N7d(3No9}#QJ-!BqCVXM zq|Cboh?aB<5QXFGQZY@G#6{tf0ov!u$l0N%u?>_yJ*EkN2a}TMJZGeroKE(V-QXHz z7v17F(@6){(h(8Fb|}bB&EPEz^8W;~c=8ygYzZ#rLz`RdLAb2Zdqcgl0E|$XtL9`cU8+F7> zZ9_SojJ%5_FL<*o&{d|X<9FAl&S{h0EY*OGthRiA0mIVrO^0kXz_YR}`}GIWX(PYr znuI9Y1Byc!N%MoQ^M8UU4#a6ZX#St!H$Kn*FM5)qfeN!6eb1X^wi5)7f+wg;bc;yffs*sjqHKF*~(U&QJNaB>{K^=CTR<}b;^3S+2%vRE&do=o({0CjYGVXk4TOE`-uNd4x8 zvC?bc|4fw-eOnuenSn>;E^a8tlls0OUsSlK*!=+%c?!m*rD!X*%^DybU5hsgRyIq`tw36CX_51XpMoZ8NN_Zv zJkT7X9I~nB!5%(6W)Js)y0wS=K8QV}TxQ=!+|V9A2my&b%wkwT`B|l-_StkdU_!2& zps;8488+l#!b)VtczDEEbA+*|euypAY4^$ZW75_HW7pM6tbS_Zk0^-*jmV>09Zg=L zQ4|R+Al>*dk9`bB<|L$!i?W9E8c9Wit)xOnwvt*t-&UR%^-Nd@i;z&guOtf>2l9Lnj?vPX{wz?`8x{Ju;Lo;dCvW=v=qq*#@P^KIS&)I`d)2Bp9}? z$fDI)F^r8inC8JygwsFxtoBvp6Hhu2KB%50ttY+auouPE>Js>M|B2`08Z{65@Lo-j z%;I^qlgtK-9t8P|nK3!1;YWVxu_J4uobz!pFOAK3WfH>}98O)3qJo ziEp^O{vduKp|6J$s$rK97XI&NXj=1~2nIj4ZJlKsLm5=ivCF^K${17m<2)8wA9iwX zV{Z2SD0ocipvhgq>sfL#l~xaehg zD}M*&x6I%2G^Xt~9Z=hk{e~$sKZmk%yg7de-0Kc9nT~-&A&Yz8aen z3*I<)n0fvviCyfp8OxPl{|n%jt&0Bz(8qcQX>h*`^X>RI1BjUs;*TvrYr>D_4Tu7f zB75WB$lHNibHtH*t;7Tjl>8c#GM6sNH-*8P{1^n_5Ym7@PK*;2x*%f#XzOqYid0Jr z(wNg0EcjT)N1?6YpBff!RlD*xxM=Ca;OA0q%RQDVB|a?vyaJo>a39kX0aG;DVwTo> z>-2iHfwUW4W2aZH;dO@@#t>2xBQsXXNZIIZZFn~03q;6VZmk9;IV2n*c>r6dMj@H8 zi3OQ3^bCf6F&2ug?|rSWbU?i^OsK@T1j;e5L&OX5WA3$bgO8vbpbQ_SlL`Kf4lL@& z#mxkt5Z4PnCT=$PBwQ*9W6@|2XCab%f}y{3_$DBT|1#+)c?)N#F68Bf=)J zK>_&ZAMdK%$>I`SbYg`$IfOMS*7h!XcL_^bqKV$Q%?aR*p$f@|Mw8nl^>%3r82bJ0 zWGn}^qGW}Ei$Xvm_%uaw4!~9|cb2d`WO4qCl7bom`&ewCRmPsfH3_`8zYl-|OQ1olO2NS8P|}tcI?U znk&C@mrbN=9P_BIk$mCslz%QJs5FA#!lKWnS_`H~ADrN2b~r0#toTjj6nu$`&VV(| zpD}Q8Ex*r-@q0y_-)9(k65DO__u<)MVoDX@M_2{WyP$Pl>_3ZSKN@zuJ`W@a_X~6~ z!Oe7FD849eCioIu=7d;uiALALiBCWAZQpJ^6HuGLz6SrIB2L<4v5`^-G70O9O8I3_ z1Yft%$pl}a1HNu$I!KS9bQw&S;dCWDvPWmdWc!A=Y&Vie*dx+$oSx zD`^M_I&zgpRYg{0Y4ns66*~GousWw9B{oDC-fbHqWbUhmU2!2Fs|(ML@q1;Q-*d?? z>J}ro@*CAH(G#&b3^jG@nTVh^=h;#MsT3}5PZ*kGU^n1t3qhfst|!XB^VL!&yDepwcn8U<_wdEePKLTeraDw z*OlLc+80KM>)7IzHf#X{ zdt(+i_!d%j((+J1@Ev|^vNrJ~hV&WP z?`*_mhfM~N>}EAXtOut_Zjc|L@5*oUX?)ZJr$v~QE5FUZ5`_K(Q+4H6RRuC91FrlE z2=(=Dr6x*K9mPnTgtVH9mqcP-5>PKr?4$R_$19`@rxxA~{sRc?z5BZnlJULf#xX*ROJuPLGax8<5Ksbcy|_ zmz2&p?$?xUa_ylb|p?! zmX|Y3+7X7DvV0wYY)72vZZmKgwcC!q@zB@$BIO*7c^ok#eYiN`PX!rf{kkJOCZ@MC z;r%KmG$&R}u|!<|THpjfrmU{QbW0?w7*cv3k`>rNkRUao7}@q;asQtg7vr3MB)99x zBI*F~UHMh}!#;l`H-;wU#v!f$PQ~Srj_=Ie@-f4&vRX;7-GVxMBL|#L~wx%Sb;zE$QRAMMQJuw_ExQHTtRP z%K+vph%34m4PfqK>Y}`#L!kff_(75W!tf-aC`0jsH#fBoGMWZ&o%VRK+T*@f?-dCv z>@_P0@tRfn9l`I+mzjf@*8h@;aaK{Mwfrw3JRlH^{K_yQIABEl|4cq)T57<*g*>tB zAK5tO5@a?!9(lL2{A)Uy;5T&8pZcxI0Yh0G7)+PpbR|5}yN$7Ozb;RI zzgq6-7m=hZzY0RXh}2#A6_Ac&7}Zn}M$w9|xcZHbCS`jH%9wu~)O;Svy5=f`BXs&o z_P0(9xM=g}&~lNx zXj%o_{f^v8>^MV@C^mQyDt2448~h$bp}Y5zb_Bgoq5p?a#F0?AM5f=ui6-)LQYWGe zHc=mT?iWoMJJyqE8hLfylgLV9^)gRLD52F0y|$z$zhWY9c3#RPb!y|KOjSNNIWJ|( z{`r{kz&9i5x8Y&4XhM9gg~Qa`1h*PQZzJ7Yde0|WYrfd-S3I20KZ`qMDt$_Slp9=!;62`Xhh@C;J=BE`j_c=1A$Fe6eV4n^tkm8%hL;45YI=sU79IP=5SU? z!Lo)WU`G$-31yx-V+!a{aZQZlV0xqUAxPa0`bQSP=#5ce2V%hg z3*$>W_6Fz<#~QJ$hq}Yw?eU?{m8ZN|OUN$69a zlN|43sM+!#;7|mUJ`4`ipqH-r?_+n7bBGJlgJ+jl7h8|I(#Bknu5wLmX9xh_4oN{D zUD7~7$?D1fP|zUAK)Mo$6*$|QOfym@$e6gEK_i&x*3WP>zh&yZgKHm{PEO)vf~>(6 z7nO_fnLDXJAV7~yRFtrh!0$m+48C;>1q5|F`8Pw}ATRXH5#|CsX`E=Ji-ny~AL);2 z6H;I_oTC()tOn6Annf}4=BOS8MW901J&b|L6L}faUr3%Rj?ecw$gzaNC33|1VupUu zD7?ADI_M=mH&_6NywV%;3JUa-BEw@gej&WzqR)g{mtd}qqJqj2;RN^jR@T=uBiJOG z@|TeTcF-~z4bEhuzzPG|TjH84X!nzrS}Crxva|#QX2iY9pfaroq0BH8zlc;R9UN|W z6L-IntvnKrrQBoYtQI2gi-3s)2TTNdnPu^BcAzaX2kr)oi3c`H27!Jeil2R|6<}kt zv}2e9usvA`_T-n7XN=^@ukEmCpD3D}C%I_ujQFP0@;67W&?rx14&ZgjKOR6`jDgWwd^bqEfnM=xFRt1O-b9(nh-yHjo^l$Bh4$=&h!%KPe3 zy{k|oiyX%e_nPCNu5=>NimiJL=v~3JT}e!&Y4C1972l*pDROMgDQv2p()uJgulCK1 zLY%uOSdm>iwa?0~>}LErQcJgPdXo`=|9JQpq-EK)^YyFK;Qde7y zZ0m4*w+2H%u2m!8aTWm8#H+)ic}v921WU#Bf@R`ngNnGhpbD3=BtBi@(@|-P!7{Q4_Sjbd7vn2|l9ZOfg{B02mV<)MG3DgT9Y8XC zJk@KimWbp{vDSFa#|emRDhLHUDIn%VK`7v31Vp9A6}L(Qe6ZW&b$DtVNwE zAAD2j;+~^!Np}!`8EPmCgIKbZ@Jc6qv%;%A2Mg#sSinGMK-7vlKlVrb2n`%}j?x5m zZwmJa__xCZK`zTPB0aprojf4^D8fs@qv1#ky#;FEKbN{dUOCpOvajd{qrey_nA_e4 z^wF(Rd1I?!p1yXP|HHJ}Ov7uQ3>r?G$zqL`X9ZQhP73$_rZzJFxOf|(*nNeI>hZCA z+u4{fUW}{S;TbE2&_)gSYxB~5MQT_&l;gqaMDeE>TjZEYoowQi3Yxejx_YUys(uW3 zAI1Vkl!#%~-aZr$U34WAlG3 z+ip5*a#K|5_3bv{M|P1D1DW zHQG;c$E2RE{$^_QffQCrQmNtA>ZkLec-9rJuf^>K>asV#F1x7{fVY)xm)eX1^rAfJ zvG18M8iPIcA)?@UcP~-1WwTv&)i1IzD+{iP?AB93*PNe+T}hW#EyjVZsk!nrE>uUK zmc7mc#rlXzwgU`ivmMM@TXk-XS7EtWPvg)lwK?bF1MJ-oIO-Tqy#*`Ppq7*|(qMg$ z%LP-%L>k9t#L`||5ddAMzl(MKfm+w$){&$}T0@`}+0L%!Qp&>iPr+BAjuQdk(q11h z@dp558iAKi-IK<-Ce&NGCUe&W*wCXptHQ5Ie9fH3V`8iEHOqk3(|Jqiw|O(?7ts_d z?BXu4*Aw>LB;F^wz`jA)fh68vyTJM$1-zdm@z!;LJ&&;4l6bH00=u5DA0_c_>jL`| zVLwjdJ^In}Ve1I{VG{4WF0d=Rz;5gU`(+o{f>ES#W-^VZbb*~m*t3#&d%M6sOW0XS zygzk;m6ikVYFwroEAtgyU?&llDkbnX6Lwe z^{1=rB1Gv2IVp7E^mu}t=I)>wuT&H3tbVn~c5JpU6u z`fSac@T(UsOO&@G7yABzMp3rV_vYq`zLYc&PV-A>E5`bbN5)XRs=4OO+@qOb`}TBO zF02qZq>H+Nn{H+nfV-NjVIi9r9w z2q4j;$$C0ChE66}LkFi4UV_lzD0ny!6PN8T`$D&4tc45w5#+xX11$8+8E0&mSL6y2 z@y~G9u=zspQSY@O;`L^BlcQn(5<1a9@K`47&a|2C<4wBaV#1VRGjqg`2E0!o4#Ma* zo6IkG&@eR8L76Z04=WEUqIC%9JkdJBsCT#N^T3 z7l>N~(l(C?^hjJ!BCS*0i>`yt;VO2fb~RJe@oKn-%nr*>0s^)*@?x^!M1JEIZa8}2 z?u1UjlRE)V0f4z987&ttbs2a*k7LvJQvs#s(M|9C5axo$o{+wX?r5_YOcimmOVdL~ z`ULbPb##`6Y?*Wk!BU*f1wh8F6aMvZ(|A8t(o_0o42w}IQvsbDLpr=Jos8*C56j<- zq1~fVzo<+CW~Om}l0?K_6I~{_fxh8bK$PM*|f7{e9Y3ZnxUpJFz|*GMVy z-0}+{5B81GpQdQdy3+*M(XkE=@eC_*d$AS=gYxzfujSKNlegPU3m4e1ETc5IAzutI ze8CQ6c&BXY0-WnPSi0=s8}`YUNLmvSNeF#j$hHKDgik_gYSA+yhP$6CoGZi3Rn~fo{k`V<3%SgI8DEC zv$|K=5S$KQwwZ;eP(R72@M=|IoOl-{*4P6Y(P@)iyos$*bE3Hz>9lTOaSMNJIK1Et zCevoZV=$+5cW+xZiAe|jtoCBe`TH=A)BHG95&F!WsXm`@ZA_m9Ecy&HLdm*Kj4KOR z2~i&!j)6PoN=62{fl$>Om4!*Y) z9j}zdtig?7(J;ElFv?1x9F(>PH$sCWS6V?sYcM!1Pf_ zn5{G(MVCx1XSO#y@WQSJ{mn+%zyt-mh78m|c z7F)N5xRGl2y^#53j#@5E#ETs%{g-;GgYOx)&_NjLDap_miA@{7x(>=jUX%#QVYv0$Xi zi7>urB?^Gny0B&xN7W8hJo7W?;vhRn#8ruuY~D z`ce4^!Q~>qe3()|vPKNwiHV^=F%)>IRVF=U+tSl==0>n{ovH#hGo-3n-9c;s@O`XijG$aptlH90QA^~NV#Wv%DuS!0qu8w zDyO%%9@v|!Y?0Hkxzfb1JblnZ&dUos$NmO7?D#i04llt7zj>{Vi93(XQeGHKV?VYSLgEL^5S{RpKh3CExYG7j%higB z@nf|M!?rET;+f4-e^#yrV3{_meP{Cyk+GrvH14(Og%KeS_VOAWz`YkUY#G7FQlFmh zuf5996ia6qgSk_N>W7sY=;e!aO1N9|$ZFp%HjvuKJq42EU)X{^7eNkgj|iT_4{bZO zEj_an@T^Y2SpcvFB@MB~Ug})X7W?l8&j!@Ag2%@@a^RGtJ}i&5Hf{jp!H6TeCVovEqTM&XyEaL{b$#%u0qbrTNuw zS=cd{-Ilf34;g~J57)Hrj&eP3O=~e$v>Ln`F`?DnR<_o@8+l2tIOT<{gD-ALZeR&z zNyc0o;|cq*1+UYRG!<<=&2S}5$t9`AR>!=F4VqA_ANHVdad>%(C5bToMGk zq$^}=t_J^_Biu|S@g5d2+%%-UB@Zu4SJ0dByeV8a3MLKba&a`?m}a*S3^3p1mbvoK zsWmm2e3Bj0lgz|8(>S_*2Qw{o@cD50XWKEIl-R)9>&|=zy_w*7T9XOV_H0@Kgvag) zI;Si2Y(ib>RtHn~#wNZt-R4%1*7oKbC`+9pKoJQJrV0e-`M^;=)2U_9s~6~)ay{ak zG36>9Q}*U%NLg_5I-K0fRP#+UoZJXsUWSv!`U$2XU72i12Lg%Ww8KncEXjD%ZWb|= z`~fx27`k!v$V5VIqBQC#j7U10n0DlcQj=y@I)kW$M8pf?7<>?%gBd2oTyaE@KJcP< z8qtqOV(=T@X+*)4@k9oJIx;yIQgWI<(54qkQTt>!Q zL=|QCw#om%N@>~uVT^yiVWs?w8f<3V3Z*b(QPOgy)5)`j2SYGj zP~0Qpe~)GaeNzADB+BtKb$z4Etul-^;?xI;g1759Jnd2ibg~l}@AaD&B1n`*K{&ga?f{uv2N_ z&T7?F|NCTLg-zS1(bODn}4EsX{rXmIm-l}z)l;Olcr%V;0Ms(v*(=c~T zDRYWuojrx});*`}BV+Fmi_FHAnHDJ=8&hUl2;oc%?RF;hW2-At z%urM*bTkf9IXoBI9o3TE+t$4w_?(eoO=vCL8c79N&Z6uL@eLPV% zG4s%!LR{;{kqT8(BbhRcNfdct7KQ(8n9s+Wd`fNLpivA9y8iN@qgDltIC+=6*SOqq z2mD{KNd556{`AN$2f*U5`RQm*3 z8n}zDN56&>rmqEQC5Nr-RrGpDuTcjwCSJAmzYvh@n1@-0GHUeKqX=WCIPD7%ICg@% zS-D|g>~XAghrP|x#Unw)fyn53%|Bq4R}m9f*?^=xyhouZfnbke?vj!&>wFy8Ql6TC zX$YQ_!8agu71yiMMB!@R(fL-n5 zBQW^T_FxO>Zw%>Uq4@UWWAer_7YLAAN-KivnSh zhxY|)cpybAxh$<3N7h6wBx{Jk%=>?(Snzxbz7?{gVPX-41hB_cC_8Oxn@xay5z6;C zxN-Ti`r`#3{EB?}A@b!1#Lr-ixQaY_aX(UqMdaE*hW!(LH%ZC~o6azs4g0}m5W66U z?#>BH!6ZN%PvL4JJvmWW^r1~6{W58bUJ(;QO15J(d863=OllL-{Tg&SO=_bt4E@zWbn8*+KV!Q?apYOlq=q2_-D%ph$Kxx$w zVn_8Lp)8^+Pz(&I6@%*GzlMfWL^HWm^|PGE)6%(`Zr0mpU`o0#D4Vf{fXn zli0-JY;E%@@sc_$ULYPZb&{YYWhkQ)!VDluJi_rw_Wmsk+0bw@Chl&A1WY7YDQUIU zRNG-S6o;5X-Rnj6S(e&<(57)HMmJH&st(Id2&X})7U=ATdVuu~em8pS$HgdewwfBl zS?UP3{acPYlcU`=# zqSjh9K+H5NnCTB=uTzp94A5(#Se`C+**dFQ##Tv5;-IK8kffDCt%=cm6liXQ?dM(r zOo)N8&tV``#E8txN;EM#US{&H+L@?>T0_{^aGP&J(zSCiy2IH)vVo^KBRK8h4WPY4 z=E>L?Ll?eEUC^;4o(}`8JSFXPxq!%QxT_2C(2o5y&+XWt1yRs~j-cKssJA1iCkpC8 zP*ml#_At@#O_pqJA6|YWtLVB(tB%9H`z*_?bHh(54<{AQE0u$nBbJ?B3NE9^%n`qg z-);U@u!ZD(Bw=P)WEM*6=4=!}0sqno*aZNWCrDb_n)gArP0H4!T?$^oIHll~a7?H8 z#o8&x)7H_R7$${VkJoZ5j3g_+*vyT~)$OhrY|X$GLJZB7_R8jS^(ofmFYAz)LX2Zp zW4v$$#(_G>3Jm$RD=-*Y(5oYhKR^=U$b#Y#nR=<0W1P>n*a)rbnhMby^Vd{Z24hc! z2&6D1Exd6CAh@Lb%+#X;vnXEQ1(zx|0~%HkMFqnkcLJ^?GwLBvG?nyl?;}+p+O#A-%>KxxCFlwJw1eo=;+|OUs)*4* z4|M{>)m)?V7ZRsfw}v53n*srgENVFPvDQ&fv6(?@3s-_!@+E&c4S;@YlzA~`Ujsx_ z$wYmGGEW;iFfx>){}>Q~kjPP(E>+K3IB*-K7H8eCH8F#62nJn5!X!0WZI~q^opi#k z4bER@CVzsqV42e<@tncXXz`7Dp=2h%Z~RUj1hRpzPUY(6W)LH>hmeuoztitc-kM3TeI*pAv?w2n zEUGLbvb=~4)nyU3z^ND?N@Rt4RYX>>A}e5OxxXNfU-lP3snCx;H{~$-Ll&S&q%Tui zBsN0Itr*r=VWKEZ6cM%95AA&Da%1{R7!nrKq&{mMOJT54M`J(cm6|Xotq7lq6iRry zGEPiNx<6}&pI@V)*5PNo#HVaMoq@Pf0XhDGbz)}iUTMu2o=iV*rc7Uj`Mm8A`dO?G zGp|`A>a3Z>57z_3sxx_;&V{|uqz|LE1x9&T6*k+=8prf(GUQ>tp-tMa4(0Po6K}!z zA-?xkY>F{Dk$o|HZ~Y3bgGi3M+gTnuF}fTJI$CvT@6xFYkq`cv_DDw0rhv>hwWMUe zh3hz+Z9WqZck|Nxg`Pw829PG_@V*VV1$#S#fl;C0;#S4h=L>jm5%)$Eme+f{)}wxD zeVEaiC}KD^h>sOV)Srz7h!uXiI-W$a6ZL4X^{2?^d#%4mzG1JG zen*IjM0!G>wyNc+L4OLnlZ)81I8&va7e4$K0M=Xze=*yvz!{$WIc`W5UOj;i`Y!~^ zf!d|RyVxD5>|#%Cgm13zVt=o?ZWnucW*j>2?8Vy=me`)RCjtc5Mc>*Tduu0PF97U8 zk&LY;*cYUG^~%B905(0tr^T0DU__XX*{i1>R857+4n0m3(HrjHGXq9+6$c!aY3f1z8D7+M)9~HUKfE=m=mgdz3k+#RUVlX-c8Xt5|f9o|7v#I9kAuLLpmoW&rQ@g$#~+;ISQ zQk-#~a{LwGATjNXq4I)QKqLb+?267QoC#r{k!wG2+AQQTSR)EIEK13bU2qby%RYR| z4DCQ2e8`#fLVbzyD-tyJ%s%YSyBbIgP1lcg+;%fFfIr7PA{4xj3EPRk_s2aSr$>*V zVNPimi%)I`iY^p8UQQY^Uxi1Se22;=AwMixuw#StvMH%PQjbx+@PEw=6= z4ZACFKUu;9WN=t<#D&7rRfRokzg1Y|k@mNZsyqXGg*T#r#IsCvG1>S@IA)-Co(}Z5 zZCUpI^f>sCvn1~U627_lha07;>#&0A*%eeTT0!-6b1Ow)cCd19kKU&-^;(XD)S6yqzrJBn4b$#@oAIbs>XnZN@fzK<28)PZ!}D=*Z_ma+(|XS#WZ_F+XGheEiua z9gI|@Ty4n_BitOwWeQ5t<_ROmA%#@?@{L@6E{Favd;2nKtW4r!jLYyc4pYN$h^}3{ zCEuci=<_7jZYgQbG_%sl+O6m;7pM3kYq$L9x^^3nD{HsJG;6mKDZX}V@9}ZkQbXD- zX<1d|hpZ~{1L-mtrX8KFr?PN3f4&Za+^BuiV-oT0imcMWiY!0SA5PLRi>_Y=EjM*E zXvrF9o7K^2GZVrGKZFl{fDZ;ehh005HqK|N^>PyKuu$4*gH{FS{IG0 zLRLG@ie=EXmKnof7-S|e7?c`y6sD0hYHaP-MB)sShDk(=S7aS$65-0>U2GxD%3b$}DE_F_a;q zpsf6odfW(8>LU9!FN5x5^#E^b0UOUcV#@`;JpVK>*F1?oqCslUb$oZ1i5IQU>w!oS z6IvD(c%(HS6RVd27I;?)rAFO+j$7?%f~bb@1R@xTg_MOesX)l`X=OD&WHUw zKeRutw&PQsfKPVdZ z**1j+9w{ngv17}Fgw9(YBsne*inxV8{RS0+xKKe9yF4hAEp`Gy@kB2A$+dDLGs9L) zbVf9?Jjl8gdt=Dz%IA@+U3&Whzwy)=995UkbOJux3HTfUR2P!r+yGrIilr!uaBe`r z_Bw_y0w+Avw;5$>&-88L_l@X)-wX_=&D0?vrfD406*kG3Y)QXmkI_*K;7I-us!FO> zRV9CtPPdhJhDNHY@u<*NRS5xO8qlGt=O8P}rqxqS+fi6)nPULYxfF^cwUhNqMc!2p zSr%Q^*i}FbT>DPsT!o}$2B&!5&`o1Lp5cR2{zmXJTG-2_Dk(pKmx)%!yRBRlR#dE# z#ZW~ttnkUXQT4$hUK190R+2(5LKdswi=vxj7i3`az?!FE^}}hC=kbjyl(1A|gt5eh z^$BvA18X^w#XGmTh^W~DAw+)wJ&lCW5RF;$QxQc3UiWnY94seBP9;fUZ%iCzg(x%V z92gBW;ye;v7e*DZ6|z2|eDKT-_FAdsMQV9wFW;DhFUp``|u@@x9!81`HlA<;b{ACODEtfoq$^bVEaHaw!gx;ju%sR<;EZ^?e?`E zhsHv$vzLiJ?8N6*DVaV9NJ10EE0_3&@g8YiCJj9~(K}*pV{3!zZsymJBEtqZm~C|8 zv(cxrtB!2_CM1xZ>PkYp9b<wwsuFqE7sZxSXw*Sc`wDa zt(PFbijSu|5ew}GWo5e$7Lf|+F6{$Mg$VG-9t?4_TZ~@ zHN43Q1V6w$UeRS&H;b)`vk1(no+g9FgkFj1Djw2e zpZRHUFGZU2z|Iw$QmMn(cV1cQS%xhP*|JRLO^+?ijR5b?Wjd#~2{%wo_2x?}f97R# z`=l9?=#yW?gW9I!KU&fbeQoWqP=y~9cI~U3K6u4-NM*Ei1pNHlbscoq|1g&5YuMjZ z@;|~a@aCotM=1A{Mq`PR|7nC8M1I0fgL&ZXN55ZF!o9|x|1pDBa^+L$5$|-&yC?^O zcT-OiaUX(8_D%8*KheWqvDLG%>j8$!HC@xNK!oi?SRz7e@I42)oe>N{4S>SK3 zY*_@6Z_VLzV{fj!HOr4441YX+U{tfUzh?x@+&R4o>)X1@jgv-iw9Dg%!3hW7J zkDCGKnH(6Lh8|#AcY0HAwt75y%n3)w8;)|efQ2iJ*UaqwC+z|4!O3?xrQCH+Ie#7H zo=$O`*AltE0-9Xef)aWIHFES+&*bi`aNH(%uK!9!bmt?27U%J>;;1w${;Pl+k(~V| zDuh=Z+_!6^1Yj@@ z7y@7@0!Z3PdYG4v({nrNxt;XfPI{Tt2Jjac-K>tdxc9l_xtx&S=Rtd>H}@D$1(pM| z2CD3KLY3zvlx5Z>ophIUaKI}Ww+B_FfV;Fip-3k^)B#o9I1BmVcoL(3Yl(3)ybRPa zxBb5bVS0A*L$!->+d#&S{;@1dvKh=2^tq*#cN^V!N|-(-jxqFN_c^>+ zW7X9yLHnGt(Q>y;-=Osk(l=y%L)6pvpk*mt%~<==Wt1Re>`M^G1-C2fR4zqEoX z)cw_Uh5DF9^t{F%eR+uS!SgPNB@E2&_sUz)16lcb5Z3w+NfD&UFk7yaw z%QF5h+<9e8pvJ(uoGoC+C?~z8P(q4bp69QavLBYB7ZQ68QuHP;Dtb$^9FufU&L|48 zOM5E0{lmTWm4??nDBl<^4;&}3p%DA? zVnPhbTII3;6mg?Jx8E-BVo%?vQ0$(z^L>-=;r_(YMVaadR1Dv%uC%n0G6Zc~X)4$Y zc$CE&gpMUN9bFrvW0r$_e_=m*Qd_t`urzVYnmUvW`b9naY*Npv3yW)D05L;zHU$5IAM;)2o+ks6jFl-{HZo4~u@2XFI)&We|FGHbU>!V@^7kK?u`2;HA(} zvFjiNcb$KhfcfhnBCR$B0S1|UJCPCHn@8xpbr6!{I*5p{O`m>)3PF?)fw~SNldOuF z2vi(1Z$WgtC1^xRypp+ORm34Bj+vSm!>-{KcEYX1P1wh2!jizWFF?G-n$8U9H|>X; z+9KLx^(QmWhQ&@5-VUA+f93{|4}MM$9tXUWZU$!UE`H$QY&gvi0z)U(?jW=j{0t6l zn}oh!+4FCLt0366_Ynx&Ml$nl8{^}>aQv!mlhnlzfs?ON^Ftu8+$5!_;D+(Uw(-N* zHZO&3S#qv^o^1=6$NUUfW2C8`Om5ZlSy?430?SE}VWYu8*l6&*AV$vQXy0RE6cZNiC&_d|3n#Q1Dn; zT`XVLavdaF%Wa0qfAb?!dXg1#&2lrQOv_aY5~hrdppdle^xkn5j?o5M09@@9wzvLg z2@u_UKk~@G?(Hki&(N}0)~{ODnnkN?y`5VW4SdC7{lMPLV(UxuTIt_{O);DI@Iz5m zh41bJ{JInHD*{TvZ{SeLNlF`V@XmhHC|s_YJDBi%$VGFBlSv&97x5TJ*uePP|2!m9 z1OQn`SC`;LrdI>0#{;Bnx6tJ}7X3w6b^(ol?oQrWGj@)$XgUOkt`@2 zMMseBJE+h90yqhNPgJ~84Mzd@;;X*M9qVhA-kqEV_rJnIMfIk1F)qwV-%0x|6dT?; z$FJ6HDGBi-Z3^F}trAvLq|10xxB2nV{T3+|+izi%sNW(5D)el>y?@3pjT<6AWZvb0f5R$@fWdx zgqqFN?D@KE{Ae9{#0329wup(?A!f}7GsMC&b(-a8N)L6~#G(^*Pspd?TpFw4)@En{ z-oG^~^fNylfzsSZEEny?|G|g!HPW=jvY*B1=jpE8tt8hRLG7((KERl$1>dFa{Q(|S zC9qB~ChYYLaCA`~!N};(u)FwDuwlC7ZArc@vGLBh;56?5U(`+Ei1qbkRu=s6tX=HR zd7_V(9RF4@(0Uh$%B}!=mmMi1f>48Y-VbjEx8l%+3?yN<`70!40Hr%B4) zreq|(eeaM7``?kG(Tp+IMkd&m%Zxdt?UIb)AlBVW{AZwJuhS>Ldtj>l>CnKFbbx_t^+(y8SfJb8bi*M>F zqxh(VOnwneX0?r?Ech2{`E3=b=btDHYWbh}!BO8I`GGg-;b^n+mrlTcb^`v|3HUDn z;(a5gYw8T{m}8n{Q+0j>CKTedNd`J0PV;sIEU&e0f%dxoXE3*@IxOc7hFiWm)(? zl8Plo*(Lx&6a*tg)&(#1C?g+ioWd=}p6lVra0a)f%YJgsT_Z;7-K zHEXXT3iB;WWxiD%c*~7yUh_|fR6?UOTuYT2=HCu+hmRY%!GD7%9D(^e9INvuf}hJU z&*2a4x0!Yc!Iz*5wqkX!{PuYW@mv9cr5yAX8KLKJhu8bRM=9uXb7l4K!4=1d zS0Mh&8Q*_^RU(#(yYr*$Q9jYVh%PRM8A4W^HrdnBtJfR`WbB#P2*Ho2VfXI_slWwd z&6u#V6KnTl!L5`2wTrRB)1~_XuN8*1@AN+Kh<-$WS{`2^12{o4J*T`>`@G>T@HXa# zH)Cr8L#rcL{1i|n1WkC=9)(qVLf|^ACmCR02z&+}>@&cD5V#R5od!4<0`aupQUhGN zxiMNTZZ1|AZ|%wEHmW_~9&_H2j)U_QJx&Y`H{^>wxhhVoEJDF}ZvIXFJqX@ZD4H`W zzm-j7gOj(z*5F+Dy$HA#2rp4_umL!_M8$EVOH_FM3XaX; z#uVPWf(0A-!uBX$q5?~bOH`<EZL)>YzdW_|v=ltNkl!E58iR9l$S;C@I z!8ip)V9Ea-pr&FdIxv{DjF9<(7nu!j+(*T}Mn_wP#*uhag^ahB(+F%>q`C>%-ukN< z5%zI{LHOdK@<+x#pQs}HHfDnTsCmPpA9x5e-91*O!ik6qA8xKpd^^c>*cvipXbtJ8 zZobo$59drJlbzDyoGH;OoC=F&`k!8Al0PfJ!41PxZhF{^OlXpZ`5K3a*|K3L8pxe7 zrE1I0K%V$#`)ffKBF1?Cnds65IsHD9-+6vJZ8~aUdm@0-CT2t7z4+uFDiUfw15sNy z!7yn<0(BwS)Rz@lCzJZ3xX%G@%;Xg?(kY_NVv5|9#E7_lqj?t4)aSIxL#g>}K+r^y z2Uam?mcZ@cl^#PUJEek91gA}2fzBjMdoQ^XK=o+<@2nq!q&U^*84!8diLRhCwi+^_ z?;`q|@8aro5niXw-;3UZRxOdreD0N5j839_Ddp09$_3D5f0Q|8Q_O_j=ChD}HpSvY zQ%pkA&K=OAMSq1s@r+oJk;$>g$8w;2H{UJ2md;p;C#oTd)G;=Sa3DvDGm#TKA;7|k zC#~F@Vqk{&j2fwk1f4cPlD;W&QSILss_J75_(s&n2=E<2pU87O@A4{PY@uI`tsWSuA0``OHL#4E z537A*&dd!6EP^!lrds>J8-*o z)guFG?fSG{321Gz)261C5jmHmab%+{N_i+1XnPWv&y!{(x1$M0j&mI4CM&*ec; zeopBYc+Rlkg&+VFti2vDiyevv&@eG4-e=m3*SM+FtJr3kG*(W;3Gk{Q(#Pi6ygXWj zZ)|nhi%l9@P;*L|5P_8JHV1(A;sU8 z9;cB24<~DE0E-tliqNp(0uiS_YXg{ae-1Z_FaT-fY=AJJ+3C+A^nxYp6I!i7j20Me zX3k>_ioO0fCzX0N?KSFr>&-9~=JG?<#L_BQb}<50Ye?Y`6itm$Y{4@%g$$UK4KFHC z1`D2eRmlyWiK${{u;7_Y({J!hOf6Lg11}~CLJX#fD-4Jh2*vKQQQ3P#^U=UeEVQK;i zRfjik#6&FHpdC~{$>!3nnyu=91hPFsAa+SInQ9M0NxQm0LfJSW6w9LmJRG4+q#}WA zr*<@;(^wSXnvLl52=y82j46bMLi5mLLb1aUP&9jj3k$oo0Y6(k0<^P%>q{`k%BDD{ zD(54#o#HhPPHD6tIm98=fZWg}&vcnvPXt;Uc6PWs*5e?~;IO}#ZQ*mm$%t`aVbXgA zoZ4N(SKu%W4)L_Ujq0(VeMAP!_J;kVgRMISim4f5E7YIBxJ>6co(ujm7z1igY7|G) zeg*v4(KKCN#he3rM18IC_ay>x@27u&oq?5P$g8Mlf}Z9wvJ4rdqdQ=n_E89`Y;|{3 z*KFPx&;wOE8jjoq!w;{5mc3cgmYo1IC-O`1iS`*|)lBuT(@TzZSJW*E+pCOcv7e%r-r4QVE59gHz2?KGX!yW44LFb4Pe1aPIDIb zIqhSBHUx%=-q;?=S^0I^s{xmLu(xjt_>Bap7|p7*>#GQ9PvUozqQZHc__RFNI?W|O zL_OgGY(;e_9Pc}A>cJ5^&z*VExfe8NHU&b?X;UGNxS+Xp$EH?u>!yI@k*wfuYMr~| z-19GaVaSZ&&YXMEC7ZXNd(ozViE|NJ%C;nuLzj=4)U=atSqqt~#mf;J#M+fW&}7C9_aBiVEhEROK|*^VpNjyRYwF+$YmQnULJR3RQoOJVuP9ks<){Zc0~X^_I!Xlc^z)55+<`M zubh@vUL>ORY7uzd$9*6;eL*etTvgBlclG(4d*L>`mmi7x`2_HdPPPHI>798+7$AAi zq)vj%ztEsep|*=bA%636;G6B03A-YJuZ;y7^CI%(J)@Vi{oeU$t^i@0g>Iq#1T*il zYz7zQ#iuv@G5DL4_$ky&ttL2_w*c)m*J4ftqrR^r)XX4Bmb~Wczy|kLg*=6x-3&Qe zL)_*Y>BHP0@wgk~P4r{JPyNlS=@t8Z2F3)h1OMgXnjd562*p~9C{Fu$`PJ_y;#;ql zpKBO5kZ_B9k|3Xm-$pjX5TM0inA3hr5<`F%gJDkl$w>?WS`3CMW3f~exK4tO!!OR8 zIqifOYhOgd%1b<;+~~j*0C1UP2ku}et^k0`40PZQb>a#DxD*F*oi^DVCfb33pEi3j zDWf8GO5Q>!cT)z)PgGV4%aJ|_l}#}m29yVr}I;3O!zA&cIh=xONe59VTdDqW{|^jl|u`dTkY z;+qro!IO{$r_EpPSfYzvkdruTq@N<{Reh~5cEr}%qu>O_7N)g*@KPti2wcJTp`=xO zL=I|kUL~NkFh#LICFSu!7npe7C`#k=rQT}kj%WJA*k02Wu!6JoS+F~#m-FLTYHb=|5f@~!BfEqZXLy_ z>}mMI{P-zwGI+-;6P%1ME>ALmuK1A_`}tgF);&QC#Vt{75^7>gd!gpENn;H2ny125 z-|lUb1;<|l9>$%;1_Sy<1X;M@hd0N*ONRFbnl%rh4Wmce?CzXH^2pQ1gCvpDB*vbC zc~zUPCSqn+6{sMNmcmVUOh4NQgbnnNA*8+D|Hs~&07i0DcjL3&Gu?A))jRUcNGr|A zhn7at9-alf2Fxz^X-*qPyBMw33&aLIMp_5(WW;g?2p9w_5*8!C+^2yg9N|6;<~AEH za~OkeZ{NSJ&iKPUm5OPvf0Q zw0wp+PIxNHAWYK0&6v1Laj(_y(C=N9NIQ!Nh1c>q`1vcZrnCa;B>$s{}1OU(|rU!ly-Xg6~D-Q)Xtm^Q$+HJd>D0l z1KwXmMbHh&k_B}ci#w@1fqrc(Oebw5N`!;WP4JP4yd$#m@1bosIQNwf>d~l znTW(rx6?g|GxWs_eM`2?7(x@>}wZ_${7@-{Oh* zEuM(q;)(c8Pt0%n`uHueBYsQlnBSUM_#K-$9}67d_v7%B@Y?@E_Y9M{7rd46Ho6D+<+AXNHr|j%nGfC*nGsNnCNuV*_s3ZO z<;?4%b22k&+y(taM!XaFdtv5WXdXtDT|WiycnoT9Li7}Fm|wQ&JpbHQ_1qc%+&$-j z^)|W;PfH{6;eeXO#FA@xsni^Oc(U%Mn`Y&*pB=o}RuelN77uIp{Mh|OM2plTMzOKf zoazvahvV^!1pM?Q$eG1K3vJLw}f&` z6uhQWDMWV3k>)jqGv+Rw+}s(m!?>}b`I%_EHUha=0^U(`+t}i6(y+WTQ59Deu9~=N za1D!V7_Jd5F}3C+6f(SF#1?GOKdkk!A*WRKZviycedS zv+%PZmnUW}+MHEoI_Ns#L9oJHXoJn*;oqT#fJ-D1r^!5soL}`IZhp;!Ncy;~Yk9@V zgwG)dm1?h237-dVqGGk38a`^Qi_WRdKrOMD5uiG=ED7aAnn(mT*zkTYi0`>k9u>#} z6NS%?b8HM6Owb{km4>F3tYb(b_QULUDBI@(y~tVOjVzeVKk+vy^K1=Ic{~W*d@{Ky zVBsd-Qkj2e2;ROAW7rG1O^WM&mok!oB~lu70aG$k|FpL*7P`nbjcRzlW)C@cQ?I7N z!=KRySA0G?pK_3j!E^ugZsA{%SU%$PQlXk-xJ#7e6tjYhi2ZX8Jq)kOxT@fcEb5qhHLkrMFs&Q%wvj#65;dZzRO|k3Y+WZqN-EM$m`br*Z4M$Nh zVZj(3)K9Km4+3Mx0X4-%+h!JH+p|tRS+e?;(fOx?xW+CifDjsf8P%Df(~*1ONv9qT zT9d@EO8Tyo>oX6$5Tmy4Q&~?shvhlLA3#4WJ`FIZ!;p3z@o^`l@v*wvuR=vaL$?p% z>n-d=1m9cOfzQH6H`wy=T*<50|FyRhgExJWS34UWKzd;+i)6Uo_b>6~ty$rv1?&pQ zG_MW3$;HcDtO&a8CejqM(*uj2gFlN)&z_FRfNul5l-umP?JeSx`0Zy96UJ%nyTO56 zd>^ldhOfh%nwtz1zu&we$WA`oZEru=vZfwhJBPj;l=kt^4KAjnWM;r^^1K&g7mD7-V+YFqA93;f;a;IepC zNhy`Q(1!)t*5Uz4e(0=nW^q9=@xsyE)XCUOl{GWyMBxJncWWmP z`fhC|g8c>yT`JVMo&N%NP3mHz;$gMdzeM@&%HEY{aeX-!;k-C;86YKB+>S_S!B_sj z1MPkD_x;Jwj4G23vXF}(Lkl@b#w>oEE^HFJ@8Vt{AVzX zx`^i;|61gap!UNcP*@ClJU&iGAQbWNO~6<1+Is-@+GpX{58n)sxA13ldkg#UQ4K(x zw2PcboTgFc7ylf%9r=|8>q;?kA0V5**Sy-F+=Q*wrb$YH4>AR8Knr=S7>931URXue ziH_TSCc}^i_Z8e5U;eq_`w4D-pWA=5(0d_!~eHPL3`xk{q9nB4tyl?Gq-_)r=IS z;3N_$-mxkLD6nWvq@N`sk-0MYuJ2Z~n4h2ceq`&Rx4V!Bt;m+M;&Mz!q2UPK~xm$Q_O5Ogno7Mi+@jR&v@ z3`{-7)HSY|?905oJ}Bk39~Z0_Dlop`C`hYseUJ~<2LlRW$BYUsL3~QVfZr+)Al=Dt zH#HpbAdcH73aIzELR1tWg-KC3KL96VQGf}Ex~rfyBkG(6yu}$nN|)MW}@zo`uVZJ zp5||a#t4r~qsQVSv1l%>YOAJ)MT-M`m5^X*F@7a$qNwh`8MEP;fecPr$3jx#wX}Cr zwc=)TDj}*8Je)Qp`_ZIThVKbqrHL8&WHihePeH{tKRq;gt|P{@<{-W>)NRW;ja_(= zd>xjT9*Y~{F&|VrV|2U}JIyqrCt7k+CR!*w+foB%=bNk;>){2bsSUWRnGdnz>5Gf~ z&3H9RUUj+wz32R{*QCx5KL}P&zEFElnT5tvRX2PYd#h)oo&>j-f^9nWTDH>*4$;1Q zl6!z(+JT?Pn9o5>xSvb+LAZCwA#9nx;nLlogRpHQIhk#3na+)04L`qxZ<(HYNKQ(z zWimH@ki8SWIdmCYCa1P7zH9>z({5jU-4MT1i?0y>iHon2@5aRyftMFwFW@E=gXA`S`)aoP3{CsSUweU<$FNPe%D-yh?5;TaL-(FF9lEK!HQn+wjuQ-QHd zkIGqE?!UiSbPbE!z7WZwaCEX!REMUPxebPEoW-?Jw|$5>uVovi{T6 z1J7Uh27~>DuUR13{2~wxHouskO!p;Zg3f3E9u4}9C=)M)Ah`WZw5aja!BlDwAMt4Z z)E%cv-1g(C<5oqe;(i45EdPYkGRlwe?8@}_(mLVEkN^EcQz>;9sxP}5BlKdn;ws>h zs@$W3=Q;+`EAldhKlNaY?W!$-m$SJ_kgWh9YCeFP*Z2e?#K3dB5{S9R_BlZ03W4Zm_TLl{_z=^n(n|6{8TRR4mAe%l=IAqq?QZW zN>HdoIr04pEdqfEF%)n}usItHR9pBt?6>y;wI@?qQ7etX_LBjTQNSgPh0cB;$Tz>L zgNkCMynbpdC}xB8hZ}>z`rUD_kD=vyL|>0_L%#XLY$Y4y4__iZCrLG<8w^chuSbRFF-M7CQut&s~jX(4quYNkgj_8l5FL$*dXjc zHAwG#6iBh~l*;gjBN@g<6Dz~D-RH_HG|d~`;}MVT5h9AtHyNecI+r4RZu6(pZp?7NVTD*QagID_lF%He{-(4b;i zv2kxzihMR9(%|UTMNi-{p}d&)pdz6l@`urbF#t0lHt#j`VDuKyuI3k24`Qx`YdSHj zz{5jSgoUIcgq;wI5YwKgJd|aDm7Mryp%su zf4Nwh;V7FQf@$>VmrMS9zfnHNw&#Je|u_a?ooqDh9cP_RCGZ zP<7aUMD>5W>aboR5T!*Kuo^8X17BD}1}v=DI6ff*#zK88BG98lA`uv0TLi|BCIaJ; z2#o)469F01b5GBYFy>F#T=JN+QhKqT!V#%BE_)@x9SQgyc}YMOJz?(ucekyXqlpiH4-Q5hhIWqDT@&sQZIayBi7I32a_tv z_E{K;^7uvU!R+GZXnxF;AEl=IQLeVh= zm20nF3OCq^I!nvm;x~hz?gekc^aA$mXQQBrW25c?!ZBm|F)&ZV*h@rS`)cO%bNsY_ z1?*Ee)+iZx?VkXq!Qt0IwFF}Ve+|Ihmyw1__vQRJ9a14?vF=51Mf7lAPe#^1i7*}K z;ckvHiBra*xcEpYaAS}H(!8Fo{cE}C%I1h!j})WQ{tW^)X-RZlYZ3YD-c%t|^4b$0 z|0vA=h=L${$D9tML_BdiECx0OFc*`d@T9|H1I~{nMY2EA{x6|Rqe*fl2&NPvu>Bth zCtaD;<)DlEoitM%=;jtF&1^UJsy*g!d#Tcpvo>R=?-i(q3`!iA=PXz*No5ag#*_Ot zV0sP4ATg?p`Kcmw$f=b1)%yXR4zm-n%r5@CdspUl?(U68MsoeuLs zCG!)R)+A58)mZl`6AR3_a-AEGQ^A%=WV^BZjbGunydY(A+0%SY6eY9u@waP^cxG1f zHZN9)0p;CbT=x(t5nb!0-i5))Tfrx%L!cPlAV=b+c?41f^YIMo$i1-_JW ze)vOvMa!4fY|4$0<*CsioeRqPw%FAWVjZ@mgE9t6<)EBve+G40+td7RnEv-Q`lF79qhn3>I+?6yu>4M|oMZV*Rx^Y93MZZCOygftK|CR2Z*CslJ3E zBqI}V`#u&q)1LY)4&(~3l}jKyQ*Y-JlQ2wq6Snne%qL4OOi~V5)bPFBsc>AST%CG! zE~v%~E!Tn|s7YU49yZ0ry1%k)L$Dzj#)O*PvX)nh^WEUMV1vE^7gSLZ)u5^svHi_j z>l-TNk*NnF)<`0wjkzB0C~$8?xkq&fteHq5ks;SV${T_aARh@vOf6qpDOW1xF)Vp) z2*9qf7D9l;>_DA3-x}F49TkVI#Tk>G%!_raSZ~p_lo4Bab>gWS~lz_%CuUSpRi<%uhPYj=GuBi8sqgiFZ5SHnAB z{kwJNAN*^$a42eUksw^Df+%`~QvleNaXrW?i)WEY{3ZX09x4JCp;V=f19bVuN!u&VaO5mFqsEDi zi=QRgH{r)@v#8eEry+&b1TH+tW9T~k_dRj&tm%lx3jZ4s@>kV2&Ceo=g`Nax0;h+~ zka%$R;Xi>lB{%1V z*TR9>2-*%wW!u!d!Jm^FTuNcv8yXkt8K)*v?JoaDWkjOe*jZ=Y<0AQ)CAUBwr$~y2?XDSyjU`Zs;CuLx}^`@SNd!d#} z_`%K4qz+rDmte`4Mv$xR$5j+da;n5YM)n2ik^Ou7z(KmUFUX9phT~~tlRof<^*BNE zBEOBz()sYy?1g+>{Q%1cg`zqGp~Jq302>yv!aMSaJedYhFb;wKIu8l+uz#<|my+42 zfH#i-JK)y3dT}3buyJb_I@DKj1484%Z5!~rrCG%9sVAR+-+ONzoqq?C1S*r#TIT;7 z02Q%lcLC5hKZ4ETFDG-c_X9>8fRwq?aQGl~Vd{yhZGyt9mWq+H+IrPeDe~0d!8k~C zQcxJCFXLxx`*I^^?>(Y?&XL76>kZPQV66!Z3fN?g5k}xQmz9grJ%BLi^Z$sZEKa2@ zTy#9fzJCKP<%F-mP;HV6+SPE0PUY(x!QXe2uN}sUm!I>lHhmt$l=Ph@Hi=?n%a0w| zYRGmC;io4g8soa)(>B+g;7y3?sD=%!A_wu?ar=Q(bq-gI#Zd3ZO>wsj6SVdCIHj=^;r(M`8BD#qP%Pa>|q zStz30R5?qhHYM@meKTx9$K}|4=)H7C6Fpi`V?QmkHyCkgukaeHRTq=-X8Q6vb;}*o zD{veBpN;(Xq8u6Q&Z*9rTO6?IfV&4GFZL1SBM@&PsPE4syf#yqx|5eNFW}7bJ;mrQ zcSiSHCaS)Dx%FG*iJ#gB%f@@8zDb1Cab7_lpK z`VmftX^rRa+d&43`b^8ye{E8+}(PB0tVsSPq zacgIT-7NX3QH+%}RrKYp2Ny@LwR5wT&8CD*0nlw3W=p+ScZ4fm_%!VaB^v(jVfbvpDT6P|$3triOL%>=NDO9W;A^<1H%!|VcKxxsc4MQ@FCnFN{SNe) z8r%L|?yA~80j=x9OpS_U!FB^{!lx6&DQuhViNw5B2O9f!;N9!LFjVy?AFFKxllp&4 zG!ELDFzQUS-D+AQBpNT{a4#p@ccSeYOis-th*~gq|7r_nx-Cf8j`V`I-&GknwTxtm z^CPAm8(N2ZX~oV@Dor%x*MlFbQ=Sj}e-8Xkhp>dcRDgF+$hF*O< zhq_Fn921lPYCpR+(nt@+nw4~7z#P}P)C<(=YTN+c9B!-Ntp@(32nbI7^%vZ|89b4u zj`sPk!)468`ax@34W(~jojDzT+H;TsY3JQH!YgC(Poq40DQ6f6J{in4MkikGz$Ch} zN{>p@pQ)fxnxoT#xkF5q_I_aAZGKd&a$wZhYso>z|9jp z%7+O$%r^eXAJ%&s`ulnpQ4{I{{hGeD*rzYp*GtsZ5~()tqxAK?=&hvLzMkQc1Yr+d z;yh7fTo2IP%?VEcD<;AM1xx0`&jEk=$6-3(;z`_79i7I-t29R*?Ti_2sjpG!^{(&n zju_wgZ-JSK>-~U6u@9p4?WCS4)T~Vp9`6oIpxha=u0|ntuD8ySCCOPM*OQ(`G2z2N z)P2${p1Qi!HWaiWC-nr-fOn&?=I}mP9H%$A2l%DQwu}+k0bEewbl(ig0$>9G-M7F! z#pi+7$m>#(Z$?9-eFS63B8o{ljV#O-yXp)d zT@&-53wlSkYOKFHE=rxqREcLU9&v-nPYR91A8 zR%8Fd1Pdj>l*e4^v~{V}`-DaU)y|5xP}_rZI5S0Wcu$EZjZjhv-h|X>d)UC+9ztbd zJVI-wII%GtRw6O^ZHB!{H^4N11nZja?O`(%ptq$Yz=zSk=1qM(I=PhIT1p_EdW%Go z&4pXJyzQ4UYYV)^caTgu359j%gilSKG+bh)lEW5nv6`tp6I+5ZuwFibf!M4gWMuD^ zqXn}B`x+1Ia4#{epW<9EMUmKpnA~7_Z3^Y4193nJHX^ML1{Y2SP%U4mXYO(1x$O6Y zmwG^J@$H~=+lIxr;**xWIN|d!^_*H)$-B5;RrpC$wmE^67K5V}NGkbz5C@5LC*)&H zyPwDQpmd_tYN!>Kh%CI7$AX0x-gnNwjmE%rqcvTT9wAD8I0HCz@NIp#TgAS5@ zv1A@(2IK3n4M>9zQm$}D1@i-W5UM5`hc>@->KVxM1K>eMtYdf;(H%&8yTf5b!EOo+ z+;H|PCr2`iwCP+928e*+cDgBY821H?ATC&)mUF$i<_%dKlD-V_93PKQ5mDK@YN+-y zoF>DCwLVT8WiJWq0Aq_oWEZTY9Mf`=ETPXLeCA$$VQP_;P?#RK0mt&3j>n*{Bd z)Hgx<-;(ym_-@Sh^}Mh77CrHn^ixi!U*@C0+yj7dw!XzwK?igK2&b9y!)TcY7~_&4 zjk#wg+{i-77Q4VtH?K5X=(1DO=zki6Gt0R17#k_jp#{0a7`KO`jGst~wHdacbo1-T z&v7-!tHK~d1A`QQ#Bd}?%K@y3TK1BO;hbU3q}ofTQ_p@^Dx_S{z5$bsyaz@L4QOyH zxP6q9)?Ig5*%W(p`nE1#>*U|Zt0 zZ)7SChaQ3}>g&glR}Nzrz`2imFylGiGWO8mp!tf~#r@BC7zQe=;>5pwpK{g{&) zM%urlj^aVTqURqD$3Tk=E-+cdRcv@-24|%A<4m7B!^6^hC!gSqKO29u)qQx?4u7*_ z`x_f~&*^x29QfoutM$9c{Db9t|}f6m*ue@@1_n-OYCV?2QzBH!XtI%ykre zTy3w=Glc=i--8#hv*O7nZ9QD@llW*`xX6_H{95Sco(`d%#`x8vxcRURMS05$d43;vwVji-RohhrXt)qQ~HgJ2GOVynQNU%^y2 zKZkv>RghX(!9kG1T)CL70c&vuT}pATT!OC}lvdESl;)6Q4e16}c=TniydJ(`WH(&i zu;VwVlUvF&*Z{F?L|%@Ihw2IXMmTp4}An2;F^1?9Q&5WUr4Xa(z?Lv!Wh z=&c3Etpt_exVbX6K#vKDK}8xJP*sVf3b<5vbtR|;)wyy_0o9<6P}b zu=E$a6GZNM#hH-G{J$cDbpOM|c=cOut9Qc*Antyc`qS-xTt1uq#rMK7l@X0C$KJZ1 z001}9p7%Q3M9X}hgnantbeI%l{(FBU8uQEZ6Wjh8Mv-9*LNIi~YZR~C1n&q3H(1Wv zj2xW~^THjFiXhwy*iS2HctgrHy`I$IsBKxIuP;O5Y2Qg!FE9zucG0W3P;_bl<41*Dd9@J}KM%i#opP0?1 zwu%{Do5heM`e>N5t7!(S%AP4vlIWvg#^q5qM>7CXvQ}dj&i8RVNGJ0MGHa8MeZy<# zaulW)lzwxmv|$Za5KLaTj_Y_>W>tk!q!hQVteXlw8ry;5D0F95hQAtjrUyf?`#WL>tSxqJ^M$MTJMiXwxy|T3ryMjU`>s zYF@FFD^~EgD?Ne18eIx*yjIc^T!^JSfj5?L#S8K7N{<4i+S4znz#n7h5VewIA2B0+ z#QT$d1U+jte8Si2BnV$a-)bKrfsrbt$Fex?eF$E&k6=Jc#4AE8;U!W{PzF~_5}vb?A{uGWVFU#pLhfLIEX9dkjk**-#| zS_!d4GqvM}sYL>6pcxqgNT&N0Po2>BorO356Joxhh0X2w*Ub z#PH^Og|!r|=Dc>d5R3OMbPGyFl3Y_Dt5uS{O)S}c{eq!IWjo@6748HVV!=-0jiq|6 ze!)#0ME}6QaULj@watku&bJ#cX(UUAe9Ky_S-OT^_BL_F>uds=jx@m>O~F^-S^#tR z9|z{ikbknMC?GOV8wVY?%?8-S)JtrD+v%VU@Gb^|N(?1*EgRsckh8S`iYHNBdlv=L zQ(F-%DO$J526zQ??(p~KY=8{^liC2usqk+2S^NyL{vU1ww1xQ-+5m4Z&p)0G@aA*< z6Waj$i22`W1B{D!yV(HQ=>BLnz&?8aBsRdiqCjig0IAii4G=4a$7lmQ1&F)f01nsy zzm1RD5@Q=5gO1I{w-Xqh4snT%j|jqh112^;@!f|pXye-jM~{u~2qGtJeE+E4$j0|g z^;#R>x8SFZkEyJUk7*J%KBh_7_?V>6#`k`#`@}Xr;xaZqVlp;9Vlg&8Vu)>gW4$)M z&mzzcXg>!}JQtcr^XtlILTV6X!<#3wgbb3<%u%8sI9uy(XH*^xA$nF`@hR~b@L3_biv zSj!9z@klW$1qZbeOK205fyvCyZ}!^6$e|w8|G$$J&Pq5cw6hZRSve8ok3@(iMdu^} zq~yo55m6lmff?Sb&k9Y9E^Y(~bR65qlMqoo20;%x+aO|e@dP`8j$#x~K16jXI#cIM z>azxc7+ow-33QaHc+Mf354xVVs7oXLrGiFV)G;WrNIGGQvbszyBVS0$=jGDcqVYTg z{fhwfD6=mCV04LEoS5F~GN!kjGs$~fFVh=cqPmRftuABwWcy(DaV-KNlSk@9bs5vg zx{L^t%9IFtbQuvCT^j4Mm=lqVE-$Xhii9yWBF5+uFr%<2v{*}!V6YW`RBnjvC(>nt z!Rj)>VB1NAA(q3422&uh>a6BRV4FsSAr`#|16xI`%c`e+KeF8romF3J^5lQFc!*8q z(_lg*8B2@evr;Y%T0s5UOMtO{poLwvmj*=YMtoLGVsx?Gt9~$fMEU`(r>oja1A5R| znTgTGQjsH84SGAX*v)W6MM;akU7mH8=U94Ntwz{glxSwzoW)l7-ts=3#gjzls z65C6d`5N{TPP3C%k=S0s&NdnHJ!>!Fupk-opEiUejAY24Tk8u4Zpo0?`odO`48esZ z#$v-Jk_^EOd?tjdC>io)O96G#G1_vR6i)o^|4y({J}-(6QNl9u166hq%PU& zfQj8ld}lHS?LLozqsQ*^6GTqfeXdb&WcRsNz1Hq?9sIQWFqO6YFipbl!!!xI50muS zecqEv+I@)2*nNn}*nNn_*nNm0w)^m6+{FGC_GflvM30@T$iRq@cr>izBEn?CV#a6O zY!N;Xj4_+K1WPn_69kD~bxwNK!~`nF$&uSClscmlEJ>8Hb;y$0Ke!Y!)O={R@IkG*jDp4Ha^9a_K&wERo}8|g1xjy z$$)8Q=RJGvQA~J;4BuWdOxxD&C%>`_OO)j8D8JNkT~W2Sqx@1^c12+;(jJMrt@2B~ z+ZC;kxeaYz?}~J{3Nvk9$DqKY766-<)#GaExiZ-X=;_mt1obO&!s2aLsu|dA8$B+; zkN{TwB9qU`N$B$J*A*W9AXrdQPnO4Z{Up2TU5Wuj^r9-GTl zeQ7>xpp5l+%+=URqFMEHW&-NBk_fP0J4TExXo;*Im&m=g63u5VKJ;tHh_yvUYW28M zu$t0-i;2l;4Niz2*We^?W5b(eE_T@T_L7pSZ@)<>lnQ$>t32(#ku8pKZ9~)SR#AP2 z*v{T6u@$?XGQX$F)@Zi3Mq(41Taex^5}VN6g7kKg*o5X*5$Y*^?-)soaw{Y@p}A@A zdl-#<_)~KiFVsrzk79qB42kW1%x?{QAI&Sc&2?cD)NS~wMs(khlX{$HgL_PI;|Y4= zpCh82ZteanTuJ{g`~3gb=l^%{{{p|7{y*U2T**n@*W{t+ZE)J=88`>C`m~MP{S{H9 z*B zz=9pW3qFh76db<`o`A_S$mU(}#h)Q@^GmSd5sUa3d^7KZU!-*47Qoaia4u)@r_5ao zR*_nkBe{z=D42yzf^SqXOPU1#vw~UPB>4X*SPHmE2@u>omb&^Ga2)a}@G0=s&ww*| zw(l8m!Pfkw!zYUw9_}U23>TP_Jen*#p${)6YZ0S(tVb!W#Irt$$1+Fp=#JxApTr{* zqIh)2@vKkckt-5U&-|(ke28bF(&69YR2448!jUYx@Wyr|4S75gKh0;j6BQr5!kqx= zBi!;tyo$nCa3g>en}Wg6f=>ay6xey33>ncG%i_(_VdW_=u3JaZ44(zh)@E>McH0$( z8ZO}-jSe^UI->{Hc%hjR)MMGVHh;=(G9-SXnWCEv`KnDr=}m^jFEmqt8-oYQG>LGK z`c4X6YaOHntvWy6GLU`IiSqqu;T&6gsn?qFfZuL<+2Lt(x0-G(H^vS1~B~u+p zw*;o4wcb!1sc*T2Y3Oio=rBVG)6jGRuV|~~6=Iew-~^fs@xh5S875v{Vf`oQl>ClD zspLlL*Q69BJSv@1#-q|{Xd11kw|Ah-z9D{5`Jl@lQJ8U<&!`=)o<2rJ&Q{O*`J4kSQ z(@66M)h~EoE%jmOIj4eK9G2(ui|dN803KP!(+VzK_5DX+`pGUj^k68YzLfZC;&ZCY zQsdYFK(K#g8Luu73&xU&4G$5~)TBOQqWO+Kr)K($Y;JDu3}-m@W$WP+(OnQ)TNWX@ zO|%U!OTFAC+A1+MprRW4V%n64dnow$vvHJ}v(@lPEW#O1gh^XQb$KsKW$>xo3=1qO zzqZ%fvcFW?Jd0S@jJARLM zgSs8O8Wv9k{~DSScU@M(r+_%z*^wSGu3EZoT*K)`(KtuEjozp?R+%W{=7vo2cV!3e z^u=vfw;B_OGDtV3aRq~BKkAJvKWW7q^ETpxhaE`W)H#1JRutW2FqX#Qe90@qUYI}b zAEFzcc!lk8xPby!hArdY2s&e2P=T||^fa&c7jFVRmGEg`6|aTC^@YBvH{1fVJa>u=B89N*86<~4(2T01}?>AAtMwJ1u4`C7BCu~!(!vMNadBX zVbXYF9&U_zI2!YCte1zV{Xgqv;*bKAi3~GLTuq~8Vnvf!p4I#O8gB5QAQ2B6C&o-{ zjK^GT9N)`ENUIPjOwn44{HW*zjjJm<=3`NDSU!$~=k~Bs>t>Qywc=t4J}nKA&#K6q zYl$H8SrPfVh_QR>(~nhlH(Oa9)LIl_UQ-ZN?iwf96w^@(JV8vcGvdGAgFhi$b^4Q{ ze1Zj>WH3acWW=)``Hie8y1Ld4F*kBrH{#B-ZZt{**L*@&Pqyhp$w0Hmg&|QroTM0HhO1yJH)}D&hhu(MVs=-1xvc_h>UvAe?Z(!a-Hqv( z-;K?E3?Dbt*cupAfMs|^8IFF8W9|1q*v*(}tJC>CDg^hCdLz4ArvFfo(f?Xw9{KmZDUa?74Y*!9mR1_XY6~TNFw!vt3g9OAfg%xSD~u)L=se^ zt3l%lP&7s{(uuMvA<;NR;TtVH8s{i{)WV~&lfuU=ytd4F?^A67hv~=kH-=OQ!3uc{ zsS?6Pa)PkDZtCv8?x;Hq^b&Pvblhq&IH@O+h(Wj-G@StbPY{FaoyK0ZU9v=u4w1W5 zs!pS*0c;kI4wJjm!o+Mk`9WjaEX?n*!$O!8V@qa;=LI|roc{~yVZ?kRV(GY__Y(8Z z=`aX3%)cc9xfk^2?+B97;dId$F3$&gc`P1n;pud9{&r9>r&5Oai7W6lw%JL^A!*V= zvTQ>*|4N2jZTDDmK9&r@Bi#lYr(?;GAKEmWwt<#}4dM=4iJ9foTGVILxz%%cFJmO79eI(d%k7)Rk*k#hG z*P)-Hy~V98r!%m(INp))1xR1aI<&Qf&xad#NzzM;N%%bYd66VcFwBmNx<|PBzPIRB zm($e@t;Z7LA6Y8p9NJt2A8^nsIEa%t1c3C46gWz`de}iAE|Q!p8h3WC1pCH?fCA=5 zsvqmB5;F^fj2m_Th{x1`)RxmVlJbWXXLvb1{Kqa%G(hPoPBc2P#nCZECKcIr+$e@t z8muy=*bzFZ2h<1bI+kNn7+35%mSMsqFw0_4yUrQ6i(SW~c+eVi5Otz<9d*&Jqb{-Q zsPk6Yb#5Id+I2Lh*mcy|Z`UDp#;)^+V5MD0(~Dh4oUrQ%_G7T?IR0V*1XaQpf>*a> z*fEhuB(l?CUOkqbEHSB7f=*-Eq0?A)=uB94e0WE~zd+7v*`Xifd;zFYf=;I+a5Lc- zcfzuhi*d;OPQq)7BL<8MKrtE14kH@N4xPrbLubOWLvP&>#Hk%~t5`oQ5(xs0)r3is zmL2gAX&SLe2w*f^WUmtXIX@`8hmBK5Q2BBwAt5GZsYf7RDo|<+f#dMScrUn9x z{EKNPAzfl=kOW4S#nK>vlMDv(kpLr~Vrh^FDr_pO#MrJjcJEYW7?r}IJPuMV$*!Zv?G8~6@9TZh;R$`W0Ull;iFpN35NGdE!2kq#I(cw zD^UW&??!0Ej;0+J-^h8)aMN}y!|Mh^#P7yQiXmpWO17dirX6B7rX4zsX@|~)X@~Tw z1e<1MOgq9iW7-k7G3|&uVcHS@xS@uo9RUm~z%sm|4Cnmi!#%cvJhG4MI@*791Z3?x ztgarrjw2C_WN0st1euN@3DP!(y$-}2>CeBULW)2_b8$5?^rh^RdgBfC!pP5&a5cJG zZ#2nbbPd?J!i2bJfM-;&m}W?HG{#f7ns^A0hCB*a6A$6h5J}-`;vrm3JkJqbEO?EH zCx%2Oo)}_HJOshS!#eb_loH$Ki0O_xOo$0ZqP~VmoU}&uhiky5|A&bL?6pp6m$8vp z(+?#+GX1a>ThkBO6PbP}J7&jRrJI50R#<>uMER|1Y~7n3+kS}RSZqHWKU&+*i-9<@ z{k(+kFRfwl;ZRjgG`g2?)*5d(CFIt?c_h`Xfgf-hfjkw`ts#t_xm0RhcbJ~V*%Jgc-LSm^$(n5<2j7N)`GKGK@ur99s%K_wtN(XUp!mrPYq#B*A1el z5b+)XR(}b)=p3x+R>C&}t3M*2GPX3RBjcmTWeDzg4uITmln&u8feqqZPiI-2MLLJX zIbfl6xV%dECL|9slH98>kg2^|6wRyB#kAgV4tvL%uP26Cxrfw8$a#CvwMqnxDq3FcmbSP9+MT1zYkO)~)03nMc zNb#_?#+0>~0FzWQU5k2KHj{MNBn5j-QenR&waiMeQc7mhj+nHl50lo`SAykIAwqkD zb-051Vs(S@{1m}N@fs;8DNfq0^r92;Ku^sTLBO`l*iS2Bw(ZB0hPkf zL=l8_M*O9ML<)(|)WxVKMNu`W@PRDy8`50JH@_kEL$+!wGik?c;Wcesb|F}kT8S1W znv``-2^MKe;gIIa=4A-BEx;##SMJaRo)rX@j($zhP=TV92w#)!&+0)>6{YBcWUFlC zrBW!Pn%Ihh7mI=yivpBTEJlrjCPqbRVk-+uv$kU^3rQu^C~DG37*tzIE7gXfX{|7L zM16-gKw~_LHfX3Wq}I^Zl~5|8sH9;^1&KDGax?9+F`x~Tj5ld*kI=8sL>)-O)Xt=_ z-lUDX1k)o+v$hH}p_>v~s4-~LMqPqYIg&P3!y=KYR;bMG&@oUo>5V1?e6aY9@pw`r&lC%+A&g*fqT889&Q z9b<-D(h#?8%n;YiZ5uWu(%*)WLn8HU89Xrg9a`e3TH>~h9}+ckTZRycMXBp0JU8ly-|%XU=N6$KUb%Z1_gb{KRM~$HcG|Qa8=<%vc@vk6Vl9l3T>X zx7K*KzU%P4Z_v5VYmA!>5c$Ot2Z8olkLASy@khtIF)&z9Ky*TTd1i5tem!o>la^|G ziu1swYsZ?$OkWr+T zBAd?@{9=I9jrWIDDg`Tcs)2v3>f7R;I@7~(J(^Df94L~3Qjk6ruAnaGN>e-541B!? zZd^0)4H5|Y_;@;&DrgBz>snfNnDW|bbP16ko(IckmaeBr- zg*X~`eC(I-6X-YlIZvcJJOr7AdHEEYm&@Dy)FIpr{Bg9s@z*@-xx4e@Z@lr!^9qe} zu@RK`8ud<|@xgv>;=#>Iy92L|;E|6M-Vs8X^!^rlzjLes5>Yf4)bKhht4`NBz zCRFs9gj#hrxDLCjO|a-L3AU=w!i-)i;1SJERin}t9siyH$%isqm z&N=i#|LLXfYWcR~IRG^Z-pv1P?mbhuXUNHdod3%_e8y3ESa-tT^3I&y^E>jXQl$ zE;o;F!IE}r91G`fLLyz#{s8j1&_SrCt%Uy#dR**VVs3bC`-^C(yxv7JFAa--^3_VI zLUC;kqJ|$wBUC3IIlm04CQoqO@ON6eudh`)%8#3(938!U8={Q|En~fG_~ET&!-y2y6&y2~QC(q{H3Kzejm$?b!l>$#)TxrG zx9}Y@8He9Nf$=!Cv!)C4jgLh~y|H;ak3HH2?7uEzUv|kIS;lB?<8nFUjxLuycWk-r zyY=OA)@|gL%Q?4^UoPj}Mq#;Ja2v(ta?x#+mdho#F|b@7a2xBF%j=!;;EpF@8V9x8 z$_GVn4!gHZWpHJ(80!{;0gzzm8VK^iK&zY&ydZCJc{ZBC)f3C$@^XRSDh2C7g2A;u zCZFY^ldbQt0z`eM)cg^*Fem#0n{US z4|t*;(>9vH)f3C$N(Y0rnet#TSUK&LxC{^bbs@{G73`^mJmXu-LZCMKfnif3g06|a*`OtgXU4x|hwa~c61!@rSEvt#L~ca~|6m~FBk z)7vyL&J|a}Z;3t^;;;qVc$uwN;aHEsQ|NFAIeL838pp3sqQCn#5=M50pM&NG>H>_M zMoeenvj|*x<3=zpgg<@3`<#?BT}dC{ccNWJz@XFKfKPtPTX?FEuU6yq1I>1??wyIJ zLu{uW0(Q*Jxh<_b1pvAye%jmD;XXR2qcI6tC@{xKxF*vVT*@pT?}C9_KOSjkASYO& zASGkAOH9Mm5nuoSIhSc@VAw_H)VB=IzW|8lU;L=l`3vu7N1*33AAoVwr&x9&7TLXv z*-3q6gl6381=guJdEw>YOaWp732RAk(ZfD)03?E6$!eHJ?~r@#w}PM&BreCU<~obr zk?KnIX~z!&+cd#5B(`?MGQDaw#c~XyNr4!}y%xTcs`>%GJR+3D*i; zTUre@iJD}UD8@{ZcTno=pd;RaEb=ZRyu)uqg{O@L8w@iQoH1d9`i!YD_26ub66l~V z{P2sYMey~bmanJ@>Y{sCU9<&N=T&CLeZzUj8XY zaB2@Q-J(v`*m`dy)hyRdywv58?ax5A8{=Y$%r|zt?4{6b1@kRdN>e8--UWo`mar8x z2TS1a{-wnx06}_e_LZ}h-@6xM?pMk+b~L{O)8mf+AYs#4*b(=^SeR?94>B`!${y1! zsu%aK;AW-VN|0Nrl=D+tg8brLi7vAwHxM;Ox8}1!9%GlKi>C_eYK)>1f;=pf=&c*0 z&95{@%LSw?^rqawlm(lTE=^fLN_6fZ@hg>baq7X@#k(=b;?mOe5GZ;%r$!SGS==tb zLwnDN!W*@gM#-*<5)^?GqXgJV-*0WEgF79}$tva2)cIaeI#eFOFXqMN_4oz@O(4pE zkrkeYuI=~c#<$~dw&-Qy&*CM60*>1PdQ<8qL{?~>(CR+F(b&JY-~rP+@fQUmlPcEG z5R|W!c03Z|<~K(7`Jf-?eRCtb58;yi)4=#F3WLc>kY2n8ef9nH?-jtQ5Ah zG`;%Hcl`dQo522kes%2{K#+%^JeDR|(NcF>|ERmXS0hyGS)r)sJkL?HqD3mSqA3*x zR2{%7Lkflr9px5Hor_PQ()m|^*%BMt6(?HFNIlZ1iRPKO;w=`;h6n|uJO96E!Bj)o z#jfDLv0!QsEUYN_6boh(#|p-rWcek#$V1Vw;K0VF3|R193#RB<@ZBw#GGxI+7EH;t z;0IbTMbLt;vtUZS1s`w0lwXeJ{M3iIT8cmP?wM3-<3uIuT7DXp=8}nO1PdbsmrT?m z*e7Dxa0Gi<3>%4HABkZbBiOIwJVqnf)p5MB2=*%*ulop4zKYg^aT-hO<6@Ylbv%Yy zT0a!SEUjn9FiUGWhFMyFV(FT&v@Y0q-A9tv5yRK<6eQFL(8Fw;iE0x5m>6D5!m}}a zI0@fs;oV0aEw8uPIK6pY7{hz=dV37-$?FXk-hDLll9Mj(_(90dmW{4ZwWW+NZ9Q7=g=4FsOQv|!;5Lz!w{Yr=Ws48sCQ#1%-n^Z-M%S-Z%Tl#mf$8^f(ePTy{tjo z3-jlEDk|KBq+$^H&=VwhqD0_GoXBLk!DLxAS&mLkIExPiVcmz~XR78bKFE4-*5<*H z2gl}>lMes{oMdb~V249|8@u;|8>1=Akm$m)sAcmdqQw=CLFQFR$n;tT_k|1WQIPUQ zYXNlswJj{~lVi;AA7wmjQ5S)W@ND=!4Ee0*`}BlA!0*&>8q<`UfM}Jm!qk(_E58ID zo{l?M6J%q0Z}TYtwe_gjbSO2Ims5@=9;TsMh*q_AZtKh>WP8Q+P{t6K$md<3)(*O+ zPIO@+(0DRkz!C@Z;OSg`bq?c&S4&}j%wIpeF81_<2sM}^NJ3&a_TINcATN`-on?7% zx#D7BEbL;g!FWPnrJSCkx%2pSP#^s7_3@SxX4AX|`AG|kb9J&xuD~%Zwd4SCe^mdd zB{Lx=g^1JP1TK}k+&#XII#YTz@E)%O0LwTfP;o8zbZq32R3);9|9>czTc#5fd6id} zGhWrB1){2RL<&ZACdj;g$9plzk+qA{SPab9s(J2lVDY``3>YA;9!5m4@ER1?t6_0N zdDFaHZAF>XEO7Bpn+fJpGoOy zeAR_Kb4a?mw#Leq##+JsG2u^{tmK3u#9nwkyjZfEfFx3bG_SWIjHroeE&DnM5IJ_` zJmV_dnw%NjU^4g#(?=Q1Oyn!uZgfHeWSli{r)7Rj+*ree_9Eq;Y1Xdy>eiXExTq4= zyn6ECPWW>o3jaxdZ^SQQ|17@$Bfq~O47}j{^AY%d9__D&$vno!d3;34sgB!SaKo>m zkVQ}W9NgLCNz=<>H=ys$gl*W|a+NHco@j$?#TBM1zmGTk2Hk^hL~?bX5{!(RH@M;X zz@W6;LOJL9$|>}xQ(N$T7xoLPq`8M_J1|W04U;_o)pKX62|?OBn51QYI?{dtWk0TH z5&sm$(TtP)1qd^)=WKEPa;Qga2=a$oBg{f02rLp4F#+(ymvK|@j`iHYi z;lBXe+>uhY%4Y?({y0eI&ObeiJPro{Y3pci2X37?%U!QC$Zxvm3KjiyFvxYd0}2G{8rChsoZ8&uB$kglG6WY7_*lBUx9oSp;bTua;P zjw;7m%2ubtF=z$4QMmkSOaW7=b7x<&be@J(;}FaZ5mMieFmB_MgtbI4!q0^zg5k7B zXoTTpgw##v&0^0WBjCQR{;b(3nFq`o;}T~)iW3tdaTsZ~5lWmeiW5_!aS&;?u}$J^ zi{iw@m^i7MW*a*s&W?S1lXbB3hwM^B4;_tf98a&!H-^L{kCWUa-xwTIJI*rq@{JK< zQW2q_Z@pQs&9`16*5+F;C2RAomzZ0}w~_hRpsz$*>O2HRQH4GE!N#tG90J!5a;h*s zwl0-ANSSTq4|4q67&yq0b7R9nj+rMfGM5s#3*SXU>Yf3ZGt_+yKW=?b_pyvKGXE}S zb3KNmXTon*W*X7Tj707*C5DIew6A0fpZ^B?ahc^v{oV&Nhc8O|CKB}Xcm7P&&toNl z8F4w|F$7AYTGfE}w07q)ycosS9gSz!N!)ZcT1JuNHJuifvbY6YBi8mvpA^0qmgaIA zYa9`Hh6@|avbG1?G#?PTRpDc$6(-4E6x?aq{(B5sH*wiRQvykV?pi&xoMtwEkXtW* z13^NU*pHynz8vWf(2h{SLy?*+`szqpn25#1O8bZ4AQoq;t?<*-gE`u1kB2EXir;#< z7+W3)Ykz)e?#QDf(`m_H6sTWev{6g0B-Oq(QeaXrb zMCaMJAWxayn!}z*nxwk12kws}Mp=r{Dk;Dk(ybDs+>YNujQaWAhYmcBm==A7d47KQmf(VYO-XKrGarz{1Ra2^=>P`VwL2;%}h6qa3XOy2-W>kO8 z&sl;oAUbMv%*MHp zN(K-QdkqlY{Au7rxZXqIk|jo2?APMWgfHP5*2w%<5vpT4N8b2(KIZ9Wk$aOaa$^c0 z%iITE!}aFJLG=K@1@CSPZVXt{i4a)2AQ>>6!*! za4|4%K5_nsR)ZS&YYE39>1QL&I{93uL#)$~3Zkga)b~sR3*BR_`kvi3La7Iuhz;4~ zI@qhxxqMmLAjv}}pJXPo)~#7=&N}ViL6_m7YLgW+z|!o=h56qx?wz3CF6=KI=pw!g zNcr^RGqpXXs+-O&Orp$mwA6{csuJx0qm?uMBCK5L_A?ME$h1E|CeiJ;&m<(>-Y1@i zK^^f=2C#x`;);()=E{S!pgb7@zL_hU_x6SSCNk$9oa+m@ z(uVBo3;Bx0c6MLL9via1FC?bziG3jhHqDa|5`F+}@8FZ+nt$Nu)}6n|l7tSnCC)#N zUXrigC(=ur)%!GhNvL`+pqJFCw@WWcQtu1sB^~O06}^%1DJ$89sa!xGZ3$PBB#{h!s&g7=Amhwmh&T^^<(pK(LS?2ZP!iB@cfa9;l(j9{iUX>H?QMCqOD`t z;(~ioYumBEWtvCzfG-=z#-y5?gDP8p5ZzBT+{812*a&Fi6ug1-Kqedjr9NFK5#5t- zO*D-5Wzn#A0z$O&vZ%U6uqPkujD^P`iPP91-#KS^|J>vgaD|uwmkk)}^K+BuVxyq= zGmWakasM2Xw=`%7P6qKihai4ixFp-rguTQ>Dykc9=Y zS)B`n5&~JKdz=d_cX^WL6NS$5^i9*&p=z$h(!ag0Bm5m zzM5>C|fXZl9gnd_fGKq+Sw6rI!x{_)&1ew-K^%lXNbmV3^uQX z6?4KrnaYVzCKkn%8m{D@!vu=|*9bUvq?` zdT5lbDd}eoUCR1gSlGS?R zi%ua&O3y?}C^_gSD8mRIJQdfu^EC4K{9xP87H}{=i66?Iq0gW=awJ?8u0&G*>6T1W{ZWuEVhMnmVD$yws zv@zHV_PdPjMCix2KEU9C5HL%zR%zY_k3ypqGEdfUT@!S&U3#Hro}nKV>%3LcB`E1! zLP<0K+)_PfwXJB##(48eD!e;mg4Uy)i9ARzVYjSJ5Gg^V`9@<9D)0%I=Rp^j@r+`I zI=IXe9@uagNF#uwtgQhqj2#e0bshL)8th}hA&n*QG2&p8c(4- zr@RJ=8da!b1VxRe8|iP4UD?2H z7b0+WkT*zRk;H-CF0Ub8O~Ns(1t1`Yz^A%DKH}yD_1LMWOt!;JO z$!cCjY>yGOvr1E2-Q1p{n>%Z89oE2ix0DtfblmQElR0-!G3TCD@;w`Z`Rn$tR{a@` zH#u2xBd6LCKL%O+N8wvJZFq;ZUkGMg;diH$CH(h*ztHE$+h$fk7{7%60M^ZkavGc6 zBWE^t`mxhnsY0|bX8Vdzp zp#qQ2GoX!q!rsC^;|GHz0sIr(7>kq6Z2NT3hhZzJ6ZR*YM?W4ouT2YE#JTi4!bf z!Tk2D%+Ba$va_v^=f5zPO+cIu>#5S-k2sssnHKL$02%^unoJf-)F0}jp#CQKEqCn9QMIs9~_2DIBZ%JIqV4%<--md z7*}yQ3od8tdlGqJ|0qeQ203tgHJdZ-pM%MzoXBt)6FU6WpG_V30YllM(&dJhDW;-wZsEpIQ^A?csZ>ynx-%=NT)X8 z3%f;-7Ro_5<=qu|SGVj9Y(Ika%tRZp4seJ=bfhhJ*x1_JL|PQUX4h^40DOeB zPlnqIv7|!tC!6SId6?1wcTFAt z*i-@8f@UXm3ckOPH8&c+H*cJOC4_73QLh@sxg19uM)*)FC@J^-hzx&D=cOd4>VywN z7)HG>f;W60=o=YB5de)Nb=Sq3g07rz`Jj*A}*e8)I0e)KI+ zGm!QMGMJ1fY4Xx7%J*7?8B51IF{Hg79FkpF7lAs%2Jpd4EutNMhjr<88RT^SlH?CM zi!a1i$J>M`UwYx>6pSn*ng;rY01s!)GU#aWI2?9=3Knj#b_nkN6(R%~x?Uo#?u+rk zJc(Sy7zzIm&uTL$x!Beb4V#b&3}Ax2b~bh-egU_yQysQf2pE2@BTa zA9>a(D~1GyHg5!uqJxWWPDiZ>X(P>F0CoWO#r+tQO$O<#F-LgSCb|F?8l%x=2&d#s zck2uptVw>&uSM998rNHx_&~F)LpqIhy)R#mYRS;%A<4Vee36m2YM0_7V}6{AL|uHB zb>Vc#AAHC#-rypf%eI7VIMwyYD?&(>2BzxrR>Cx8mBI8A3vsr9o8yk0zEYFN2%a#lt7}?mkJ;MMA zdA|oX$VdVdA%WR<2oORbfv}q07F*a1Cc*4`LIN+C-}ie?)xEdxv~1;(yg%O4e5Bh| zr>f35b?Ve!b?OQDU%MJeM9A{3c5j;&nb#iI1|QsEz^mK9xRs=_i)~;`H548|g_Ds5 z5JbJecXEG2i&n&frjrqH>nT{2AxqF>=CU!G$4Wa3Hw%0sMoi#MOt&%GC7I6X8mkC# z(@7W;+4k#N$c%qUYr+fW3a}Xyc|nqP46X>DS1iYTl{ALX=A)FZNLn*&iYg!jg9#C$1N(6`5s|G)F~t?ofl-AB)xrH0A`Y@E zr~)#uyAUBdv|l*3CbwvwAwosu63~Rvt1J;)gKIS55FtasjP2BBp}b9pYSIkpWc!lg z1=cfB_JM5+)OEBvzhm_L=Ueb1n8RgciFt-hrrIM$d+P7pc0lGmqyUJy09C#7Dy? z@!LZeBjNds!>9}2kbap-FzD*}v|X!6J2Ov3%U5dPBu0Z!a}t9>UcJnOVo>`ohRL8d zI4gk$kg;&&-ko_GaO5{`1RXhLhjub38i<=kgC-c4l6fc&Lk-H2OSWO5h%B?Aj_Dc^l}?T`uZ|XOHUF zF3(_d2fKF|y<|`m!F8VtP!|qZB{K-fG%Zj(u)E`q_pyRztAZeD3s?Z5GUInNys+Ei9|I(K&6e!$#Rat`!<|_Vp)uR#y&-M0JY1y zUmkJ4f^KQNF#vldJZP_92Qi3#I*G?4Uu|RT_adzG7#l;!gG5#mG_eu)wm??lTgOg| z^f*So8lj8F$kpC(QxDf};Ei1WAt{|b;6lz0V(07u?(KB{-f1zDMHnxmokNT)=q)8H zQExdp9QF3Y@{syX-RwpCrek>uuV}9I0~ft$7qK>IkP}c23@n-${h^)3!x&;-rs-^l zJ-;7m`1B)2J5n~np}!N{8;E~h#C>hVeLdVVe#Bn&TaF*AkO@sYnruYOJ1Rt8Q8XqV z6%se|$hvy&f1PYhQ8_KDB6hY|Ql?>mBnX_}hmVM++DkzyTNSA@_vj+3F(Jjxqggf595mF;c$#rWcV~f z`DFTWVbXRho%nOmKZ-dtaDpmq65wfge;1Vvr=7$xJ&hG!J0~Iwp&OH?rAg2DQy!FA z4q;Sq!K<{N+#Ca)tpoC$dx&oA?j#!Q(*BarMfPCYdjEj&^ux0Ce&y)!*gG_0wHl3C zZHrpfY#biD0M!r&M3R9y`LR3I>gfWt$~;;)dhg4EV}`7lIK)$$`%5}1vpt_fYe=2H z5VF$tfFT%Hl@Vh1fJ$v`RVi$$Q1zFfT{6cH^w>eE{C%f{P_< zoU&$5Rb2Z`7+Ii&7g>oLfU!QWT<|9L$rnaLa4s)c-^ToX!~I#Sle`mlKgX}hxmP1s zshi(}A^-SD>L&ie)|W2gxHDA@iTqjU>f8~Ql)a%6IRJ@sNE~YnPeh{4UW!tS^kBLT zSeZQ>*!kg@jDJpxcu~%;j+FB;ZLc{kG8^1Ty$yT?H&R>h4CAnxTJ^w|oKeYMdEsEY zoE1zb{tnaj7WZFJJVvI&*e)Ej9^BGQ4OkCDD%R7;)3AIb4Gie$)VYD14#6fP(^xo4 zB~`oK$!6T0lMTmfAbg`qIO(io7?TmhVOt)kj{K276dVSuDvT;JQ*=*B`eeOd8!VY)>ht<>ym zu8{eV8nu z>wlOm;I{R{WWkMQ0ZV7BsnyM5pcrjb_UIveOO5RCc5#&(8TsvRWDKOz@B}i@@C;F|i2T!$0Fm*Ssx=rjuS9>Iw ziXYeeCU&u_OC*?eroGBEvD#RX7aywQ=h8rMR8yO|s1`T#Q4Mc)MYX@#UG*_-ez=^7 z5*|AzqQS?`iKzdvbAp$cc-b zurE57Hl+WH6#T{!Y-U=kHTMLUAlU!PydjzRJ`|C6fzW@w9#Ch`?PyN-h#kz=z;D*P zhQcdCawF&s2-4d^y$(7Ky$wX5IknxSB5k+deWCN@JvYGRW#wa<1Fzk*D@!#=x3T<9|+_Aj{uFuZjf z_qXxWghy8cykh$3p(Ji=r*#qF&Rwurrxp~uGIx$+KY=V{ggVv?pt^Rw0QN?n&mIb0 zJ4Oz=Q-FyxHYWpD`N(TCkF`mn9bLj-wasnHnHE4cN0ZFz88&hU>mf`Z5HE#^R4TFM|c z?@Smj`XIhSkvYv!h8HVK*w)3-mja-?Hc7L6=Jp*y^#`053vd37_^4@4v^tUzTwKyj zbR!ekY>i~1$7BN6{6LpPEIfzj7tp{4G~^`|`fxoG|Ew)fjFPct2iZiT zZmEC5N)={6bG2o(f=G#?;39?)DbVjn>k8D;*xbY|WK)X6!cJxwmo)>ko2aIps*rMk zgn>#yskLlVRO7&QFmH8^asN1yIV`=>hs90U;KSWoweM=LceZQtmikAj+txm4T1|;j z;kmk{L8@H9$9QNtH6O6PP;mVhpw6LYN9=<_89a5$kxqRdk;l@?jbB3Ys4@* zaH~h++xg=3QR&0H1Z@~Sz;%Jt!=0?(_&P-Uld}Ph4*9a~#o6!<>ArW8TirHVm@ojv zGGq?=Z@QA(FEl_BmKB)i*$1wZKcMqXDbAvnL~)Loln{5k-vXbg>l}$OZDQ5n0xCO~ue?*}V^#{&=?BF#9LlnCWlTWnCd&fBV=P8GI~| z5H2+7vTe0%?w#~kX8pGq9di=5B2V8#p6-1w=FC2dDVLhL7vJ#}shbGmQHT{B9Wbdq z7O@`+Ts!Yxo~DQwnI6!)C~%i=K4=KF2>FNUy_Um7uLM#4(@lxd5N$9EoXs{yb(9Zf&gqr zy%H!~oclGblbxm~P@Lx#qdujzpRu9Eea(;s<-a7LfR}4zJ;ko_;kSwZxbhdkcX0L3 zz;X5O8%eti(zZA<#TWUEp3%lmWKD$@b;j<*32k#en^Rq$noi>KC|&(4s~{QarSkc>YA;|$+^D; z7F(f7z*gwjLC&m-3=gW}8wfO2@%41`{14ajzpwRBcq%m;^1I~@>};JRHF7;_q{3c8 z*yu%Jt=x@jDM6^3u));0GFmn7Vbvs8teQ+Y_kOb2;v3|2#es>x_~?rN)=3PRP~-BsKjshrmsq^z8RJ#|1T=WhRvkN|4ukwVtiP6=V{ z41-MVRP4v7ov)HL;uoQAqV1Ks`DUP2a>WBuH$_AZKZKVKMC&K%X?#=&rjYvC1}!y^ zLOL52sjZ)HVN%vlLxTQ5xwv*6=Zp0;!Vc;xOUTq!=2PnG0o2tu0hOt%27Ul_mC#sS zWoYq$)Kz6i^HLH}2fp3_4&IA2rRMI*T~wQ-cz1`;Cc&u3@t8Y0$3zvC{@h0yyczdw zi@S3|7UsZe%UvvfdKfs2$XIK4BWJ9H{eb$PObj6n*Y>emk7v8myn%t+7&z!I$Jba( z>pvX(D2yzTW8rgn%L2hGZW#O7|J=qpPfcF2{Prh3mxs<4sJW=;uatUTng0;Hww|92 zT9G}~;_Sb7s@>>GKZ-=Lebo0r?sjZ^rQz9`c_*M44E{ahV}SmIFNE6??N$`sa9hG@ z5qr=mypMQIqwwBy?G{fKMj-(%EuWU@l&IFfd-A zo5nB@6FbJCiB2Lb7g8J>z@W}_7fwH?B@ia#gFp@ux?C@p$!EJH-(1O;(mVflUHB9< zTAo~t&e_BY;tF(^jw(I?y4q@~1jL_VD@H#>AdswuPzHpA)k)SKXx#o!lj$N3n_X5M zK|Y!}ahio@6?Hb#?RB|%SnLl)KK~Eky@S{za9sR}iW94t6!iO%vo4XlrOl$i0x64# zfjKEL-btazOR}gLs6aDR3@n<;pzTi;?_E&64^qFH+!I9eOiutZW32W_Xqgv9VzVsm zGS8S#NgFHW%Vv35d$Sz0%0FZy_sH!s)dcPGSF0lnBrCMhE)!f`w!juehhuC(bU4P= zVqk$qMC+(E%!r(%F3o<7FwoR-m|4I51b}9}b~LtL`$+_0oW)m+^f{rA6G0N@m2~M= z!p%!V5(Jx%q%m_hQp{|?sg&7yG}Q8LpPqlZAM&{fV=$*hvS`R(5j5nQ6w8jpBuifg z8D9m;VK2%pPpr-3BNNnoZGa%GT=EA;rQC^H5>5@2bypAPSN85addS1E73>evh4U&H z{=$Xjw2CgLIW6YGLsG2Fq??uI%(L-I6Q;h)l)RV0NlRIB;&Cf3r_~?C)Ypb)J+t1H zb@5V(gzC9BH*p*4?1MpG+w8ct<*e)?U$Y;jAoPxn=E2xU3K#xp&n;LU7CB=v(3@ zERJ=X#j&}2nAq%GoU63}#|8Py7L6Y98Lh{Gm#Do6PpP{z;mccsr0%rHiPRXaC+nd* zKNQ^|J8ktO4Krgf6Pv~b`)4z+a=aBw&diuyY0nS0`>}+|V7XPV@kFxFEgR2P2J(SA zNVaB9M+L?a{8vLZ=zBN57{7S73xys*;o&Cx1loE9nWa?8jhK5p3n*5(*$KSfr-zPD zE2LqDE=W*to7QfhM{AGi;T=#>j7Xs~>D6Dto`_kV%?t}ACBTIQ_7Cp)Pe*qwhXMyT zH{oQ}lm7CCpzcwAZFMgqzfT6b639&#iZHInrLGfL0WGEO^=>>VqP-IyFNN?>Vm*yYJ$y+;B^J_Si6CBX#%<`v!b z3W-Gfc@QlE{7wLbgKM6T#xMUc-2FQFDIS=fqXYhL&|iX|4*0)Ge;Ix{;Qto={qWPF zI+aRr&V_U5STE+3Er-RH^=WtcjgvVZTK+O3;-m|vcvDX6EAULpTzNAYz#py!8KQgr z&taTn2wTbqsMIZa0~8iGzdZwZ%$yIW(oS|$Ngfi}F0(yMFYUCCz-?1GZx}amlrJpv z**sh<+$cXH6#on4M#W-SRFF!>FsPt5_7oJA58qY(5!$Tc?$PeiuF*VJR8n$0UgeLo zFcEHP8HFTbPz(!6B?d)4NGJx)V5Fb+KLP$R;`cv^-|2!kjh98u{8yq=5)9U8o{5&3 z7UL=q#^i1j4M!I6KAc9&m}u!~OcC0#;VeTTW1^)^G@;ub4YP(}X`-|QHvJB#;~gVs zPYXYz%9d@@v9EWMAul`pcgYZ~Y;t*Rnbb-c29cEmqe*OtBY|#vAX=74pw}Mg6*7^) zOnab~+hI)7EkjM>`6fxmCP{ZnqUEVcGB!!tCc(|R#ZQ<8W&UwK^R>?O{?mC7Hpu5@8BVR)juGXFU!_?~C+=0$4$vvA{WmkjQp za^c;p6|gz!Rb*xHZad&HvFiVv9eFhrdEL^i9A8{>iu%`#)YfE2K7x=nmF&oO`CH7& z*2seM30CIh@1QfXclXPKb$W^eJBh4|UA41{-rBX4hHuG(Ek@Qm96-{#a`au>*KgDZei=9J~CMUCbo<4GUnynay}m;P>X8I!9vcg zv;s}8ko93aE@#Rf*6ualR%y|$w5Fgd^}j2i&+p6fByJ(=o_iGa11QNRHyD)5iTYg| zKY#%4D6a?de9^xNxJNIX|03cMP-;}RqAQM&jM@#Z)IWnw;~>#}NF*mr8OI%5_m~on zBy8Y&d?y1}ccIH*SC7HUUf3KasMP<_9#?Sd_iTJ8%A*9+yuh$TFf1wbgc#t7U|52@ z;!R*;FxGo3^?Qnay|o&M^;Tlp>g|tbs2Az++Hs|R??7LH6qgFcrG-LB5uOOerAV=~ zu#^-Fa25(U&jE^kEWl;)0$dgr;Icwrg!t}71-J~zmKBz<0Q=zVlLG8>*DmW&dixi{ zHmyVL!rhd*Bbx4i8CBTKp{*@g9oZ+fMl3h)RBcfInu(3H8K0C&an1rtASw0YoHvP+ zN1o2X{$XO{zv1IlN9L$V&hi`Q*quA`NAWEloV#BI2cYW+BmJkB1Xhq>roWR+&>~2Qh%GNXWs;b9gZS9_u<6( zDy^*LEf_1MWIvZQoE8ya&a(`0?Adc0v+W3a01Pk9V9oKH;K6B;`gji-Eh6*34H#}k z8{hqm!40=>NmQ1z@ZctX4Ej@8ze!=ugw}j=c2uQ9q!>)bNHLfUl439pUWW4<|BRV4 zgV8qRI%I1boOTM24puvb>-bCuubsllMr2sH`I*pEsXuAv+2k8T%S)Ag>PkBoFq zzzH2L*c`>BIYX8EjZa5|!aqDr!44f8E9~Q?3zli+=)Jq`s>A{(Ok#o5guFNi;fyMp z=9xhV`>|-qSAv6@%vIGceY`42z&>oiyi2IY9Y^oI(T3uNX$M%j1FYY|zHbTMJzBA_ z4+r=b*kH!V4FtgA03Zio==*cCxLrcr5e=2wV~?JUN)`ENk{?6)A5`fsAYD>GBaN>X?B?B^pOGcyhk zMuxNmkF5y)h!J?FMTY!W;kGxI_OiH8$xE|(YZabLc)Jp{PCrUahk?D-e`&XJ<_#;Af)9#`P^ zr;v*&g1*Rw_?zB`Eaz%oN*zw?pO6~Hz)wc5rP$D&JV=BJn)_#UpMv1I@59YPV3MFj z#3Lo5YXN71Hf$kb-B~b)1wgFh*njYU!UCyf;QA?D8qw7}DUS0493+|JgMH*?l&gF{%fan7P84&M__HFj8}7SW?1(|%FY2@Et{Jfi8}vuWEJoDhS>qm7TW1y;Qw8{Bs_ z<%I)3&B_*-ai9Mg2)X+Y(_EvvOAY$U##a_!zw!0M2kz#7f<*owP$XLKox~G?mwzza zs8)7<%}iO(Z^W}%%5Cmn=#ed}WO02uS(?Pk?c=B}GAo6`{t^)sZ%XXW|6JM=8hg&U zs|TE!#0d7B4j_f>IYrjq?ZW&x*XEs>KZ3tC8!N`df~G?cIQtPKg+T?4pwhJqh_X;Ihk;jfQ*~?Hr*`7rnCQwm{5PpLZrQ>HYFOa?H>@pB@ZG``3L$9Ki{yxYtcM{|c=dyes~CZEZ(X*CN= zA=TbBL;M+8W6S;9AGA6nO*7Ff1v)L(Pd_6XK_{#Yd;*xX9Mg$a$wcDAsDqj_chA?L zcDG?03fVLsr_9?W)eqT9j9b{aY`s5^d(U0C?%WLvKxk73_V=Y>v!~C6EuKCvIlR9w zldNX<_hs=e!v4NovYOxDmxu9!{e4}@YWM!W?qs!Re_v0sx@3Rf5~r_s<3kv1%kxc* zAs@?J?lks?uuteVs#)Xb?GZp4xE`kwa2O7d2FxXkAFEGTnF^9;v8V$;m>vdL0SS`h z)(ZeZYK*>muz=+T>3evmBo`!yJq`eZ)YzCovAK#I+0>9I;zz0S z?hnKkpvXhOfP^SAwCRUz1t{>U8$luCIg|mGy8;wlTuX~)y&GZ#C`8f2_)*C(DfE_` zT;VF7_xnHm@sFt@p7GeO!D;NCe*SRGCc6w**UI0j*) z5(c9Vr-ool5yqenr-lm|C?OnGyn94Vq%&85BId*i8;8_MLc0o3$u4o?0WNAMp?G79 zDoQ8T?x?2?+|xJjbyP=^=4itwqb$8hS}d(=)%wGUH%mlY2g>}j?JSlPjn;SZL3Gi zP;uw}$neVS$HX!p~A_Km}_-{lJK&9Bjsj6N6b&9bb?0 z9jiR9G!P}vW(O{u{qp=lwjg;N)5eJpSRnaIZEbZ)cQi#dNWnvAVTx?2*_|z}{VG?N zJih`obPYFLaaVh7|MwB(>6ge8tkq*_;v}$GGz`LE3z^2{bH9k+Zu~CCFRoE!1b~gR zj6$&d?$w^{(&B)_mTLYXl#!wOz`D~3y+Uq(z^dWeyN zp~H+{LJ&@E#fjSO2Z-g*+_9eIuCWSEo^RhZwknCUk9Z7qiY}Z+$AhRkZeNMKhWnPC zPN`z2a%eqHsj^>9N6)D)V+Wlca+~t-Emo7HUmnJJDB$FrU^9OCH~)L&-M(`(|G(%N z)}7JG{nPXRK|hYM>&5~Ae-J=90HBVzi5l?m&Ow^l$)$H;^8?3e{b9-h^Fq3Z;BM@$ zj%>^9#>Vdyti(aLrcuJv(;`@SRKgg@BZNzgOwu07!~p-v!~&VepRVIfLls8v{kUDz zSYW22Ax{rNn8RquSAr1cH5&3j5W-BGQTOP*X9r+v4aV(zs$kUrNHA`9(UT_Yc_toGOb~mwuz$@In z^^dvOgfeFthHM0P(|xzIjD9qX*WMT{4Ck$uN5R!90jsiu!>`` z;GUPovLu3~muU<9Eaj(fpMRcW!805d3)V0!77X|;mc9s@^iA)km^W?WkrZ(Wr*eE2$oZrc9fr0{G4hvrFu$; z1uG+#msKH_QzKY>rag_HF@9=RU8ye@^e<8FQ#J<=ha?GyQV z5YR|WcVMTq6f5X;j-ELTOaG?JSUAQQA6vO^9VOf@O+nr}^2&&-OrHra~;! zA(m|+mhBNNJDB!bes=P6U7#;JLM+#YSayb3u8Ux~o@saSvzwnA0)4qY#Ih^IvOC0b zLj=pynf4j{+{n*Npf67ku{m&av#^t#%ndyI)MU()cOvQy!qc^p@ad zV&g5t%f!ap4=>YB%jm`NH=(aKcq;992HNoqw&NKJ@Ng*AhG)1P4+dUs3}Fn`#u0{N zmL(4B+E8K8)s{DmzuIy2#BePMaB+ayj;l9@s}RGrG={4$z{LSgJFaChT+3s)SSAsv zV}xe&$RSocE|w4r-;@wWWbJumxkPcXV6+H1=xfKtQi|eYF-4RCL$r2W)c_ZVq3yUv zVz^esaIK8tIyu0_fpI&oQ)0MAW4KnuaGe_9TBKf8KZfhH7_PAxu3CU=v3`xmaIKEv zS`)*yHo&!5zt+WYt&icV$8c>3a4pua(_^^Kh~YXjhU=^V*JAzJ7{hgT4A-M#xXuZ1 zE!MAdW4O+X;W|HtYg2%0v3_li;d*oo*JEP19vk3VtY43d;d*=w*99?L7Y4W%>(>)v zxSklp^`scCCkMC|>(@mwTo=c1T@u6flmORa{kk-U>#`WG%VW5n8sJ*2UsuF%T^Ymm zv>2|d0$hvrs}aN1jN#(KUbOw%65v{_UsuO)ZH?i&CWdP=z_nPvree6JW4N}(aBUB8 zE!M9cFz%}x?BWdFc%4wF{G&r2*l7X5-0;p)3GCv13iXf z9W|Z!idB(hmla({nP4G+{zM7*S5^kkW(+^>BDOJ!i(3GANZ1 zgz~Kn`scHQR|zPB>h1diMuetF3d8V#1-1Yt?mVF4Rcr?OTtJ1Yzd4Fsv1w`s`{zbO zIpD3{+L88iI?}$aBkk64(tgw;+BbEieRD_J&+bV3mgA(oaS`ojcBK8RjYN7}nO(%#*X_6^5LyS|9_j*hgi?MQoPN7~mN zC+&5MXis&dJ>8M^wvM#7A1Cd__513Mw6}JoeN9K&lgCMWas7t1aNEd5+7@g**yb(L zwoG)Sz2!J*FRtHLbfkS{N7_&8Nc*beq`kO)U)quOWgTf>-jViGkCXP|`h8JH+81}E zeMv{!PdQH7i|h9jI?{e(N7_&7Nc+jhNqceqeq2Y|kMBtPf{wH=JWkq+>-Xl4v>)A( z_G3EIe(Z75UR=M=?MVB)jPY*X% zpV^W2S;t9xas6J`k@otIwCf#dZ#Yici|hAzN7}19(q7Y%_S)m5y|{k+9ciD|k@i?e z+O^}Py|{j#(vkLPN7}18(mwS#X)mtdBOPh4=tz5IN7^SJC+)@cd$1$zp^mhNJJPNm zC+)@cyWEj>e@EJtj zcUMQ+-5qK7bfmrHIB74c-&7x&H|jjtOz*NCN#{C}&L1b~Mb(?yvxqd6$IOGnfgr}1>H0Cr;%Kvz(FKk|YSN%fW+u&{AkdW}(&Y-= z=$bZU$p2-AMk=`z{3qQhSf~X~#hwC5P{isG3m;^&UIzGy&C8Igq71UY>tYC}3fnwf z1N<$X#HM^i7PwUg2_YAP2YI4+L?&5SZ*pJ;+T=jiZFbTw2nlAVacvFfja^ekU_Gt? z=0pmn{C9vBR*4G9ojH=rr`<`Mngk&-gtF-dDmuYA?#xXBGfqhw;h@9{X|tK0okAu= z-Erldw6V2CuSi3g6P?}-daty3b9d&GX_OAgq_Qkp94%MMNpGqT)dHmOLL+#_W1l!$ zt#q?H`%rRH=Y`T#AI*srP`XkNkt#DuZzP|o#4gb750XOk6;F($ZFnl1HIF2{v#<4zd!u$m$fH3IJJV-d1BgxMFcL$|3mQm)T5^dQqI-0GW@I*t0& zorV&oP(7@QCZU}LEDMrVkO67rlk6x63f1Q!Hp(DltBTP^W*p}`m=Nrm(q(;omd&fw zdA2H0?8Jk+)V1lyS0<4zf<-)W$v!r!_;GWX55E zXHi4KDl6x8CqeH%-WS=)yn^O*-ks7m4prV}hlrtHB6%40RFce>Y8yW)5r<+6r5^W^30EIBr22F&t5K@$d z3{L5&${95#L(Fel?$xtzN+(m3Q>Zw})YK%-Fq@q8q;__pbi2_@Fnxx$^BlatXPN-$ zI`vFAG7^Pe(F@ff4P0Afx=E|Odj9$^kmu)srpCcF51!36M^gL6gF~sr;!Z>Sio%75?XAQ64oL=)@Kw&`k7L$xGWr$U|xLpWX(07gNj%pe(f zB)$O?Xfi5sz%hS^BnUh+tRx=rjC_E3t@T;t#E8%Bmk6dCfgDIvd&ZU3-US)8u#E15 zyq?WIMD7E^>iHiqtXX6pBVthlHv{H+!2s-$$Z_epuBfLw>gkDkmcWC<+S{BK6L_vy znW*Nr8fzAZofcCH6gT>!a3T?SxgAb?0`HH)X}|?HLh7%?0PWknu)#cDjy&>DiQvA* zRbLJ7Ydp-`g3Kl?cF3{$nTsI5Rj}BhzDww%L4KAm`$P8oDSN^{2h$0FP3GtG(Xp)gn$*Fx@Wb4&^3f-(up!U{A}7FO_) zvarR|Ru=ZvWQ9a%sy@so#S#NhUr7KKSPh+;IeC=f)A&sA_U}%iL-7IxYUdH>N)RXzUsR zxb{H^uHPweH9SeF3Tu|)*MY&imH18Jw_bY!urY$uBBecNo&iN#1J_tP{On`E&kf+S zKVWC}SG?xTzV3I(!*8Hlshd9t8wBH()J^;yow*REBBYAsW}X0NzP83#5AKcj?aT7D z;_RJY>rm^KbuH_5$FG733zfo}k=Y+3o_h49vCaR88~y#v#D+(HbT5=Z^pwsh%pkEjp#h_uKFq+vk*in(4L zFLUn2Kk!vvGcbD>SSTwu?`r2pm8J*-vcOFJDZzHEaY73TDIPE(2c}H`t|DoG@go5wMxc%F)2-DC~bBA$*SW(r#3%!?GBwv3gN^2EFjoc9G^>06b;epriuSbBf z;6)bd-!UAr4qN#}#e4w6y{{s3=6Y^W;!*a{))+mAX2xkzjmB~NjP(-MPEJRiqoE<= zJp*1%rsJ`6;&qS@+p^?v!+`{hy@4b;Co$Z1qYMgnPsY5%Fwol`f$t#2L3j%(4jNeu z@)v{FEe7!-EXPXEF#O^u6-&$-OTdx?`E>#tYr{JNXSFxtE=SxW5w{<4uZy@h!i^UI zlC+))8-TcS&X;CV(<;AIVmbJsJ!1zGahI`n;GJZN1%@lL<*&<|@NVKE2swTa6d9=C zZG-SGDEm{~1#RZN;<_K>-nh91s(tq16SqL^-5WFmoOj|5DQ+clW(gOr9&)A%*N{#< zd52W4C!V+k3ZYcdm}My+NTqt>7HFU>)l(yKIdKa#l*?HWxtzEK8p`Fuh+IzG0uAMI zRYWc)Zh?k!xh^7?6SqJ^x!e+w%l|XCKslFl6VZF1vKqsV8S6A=MMc-Y<%=|K_PfC+?t#+eM|&MQaSyb;4xP9MN;@I8A3AXl z6eAZ{3Tbaw|Bv4Tja}LFxjUspF|qz(t2EYqF_?=4J`c-;mUjf=9%v+RK?7wVhd>VW z7%F>$@q3`=)~1XE%?XMq{a_GjPA!=*As>t=&2bA8Ce*{>r8&2vby20Q?UZVwe?Ato zG5VB2sNVRzz0(QY6Zb%^)HqIujhvuBWU#N2yX80!A8%YF^Aq<#Wul`h48ux+N^`zr zpeOEu%5=|2WBYOH+T!|sHBy>6r%XjvcTd~{mASQ%?$aP6Q9W%X4fLwxl=!d?7mI5Uca<)wW{f^Z;ePtS}aytofZh+oqa4b$6`oFd6h58+8%IWL$@ zJQc#=UvQq=#|f@Z=ee%{{^&j1xvL3qTKvIl)LZ7Zgns`PNDQaJ7I+#=&vRNjng9p> zUW%~ed5@z-!uFc2e=88%YqtJ#;KAz{FwIOR#`#h!9ZDT}>RXpdJOf90{}nn_QEkwl zy#91KRbRENN#0w`L1}G%_9J9XPU|YHf`gL34PeE-9=^Z)*h0_nMBfs(fXgR^CH`N4 zm&2ZVPz}V38zh3VS?Fov+GEc?gzxiPjAl*FL_u�bJah| z*Pb5_@h0xY|1|!81oig`_`mT-I7jWYh@em?PpIyj8kdXIINT=npNDKt?}Pr^*gSK~ zx?tkxWAUFKk1vO|k%sld)XuJ0niniea}pRt8rB(;raPAA&os@(VZ=01+F8#k>wUS7 zjAngdv@dT$+gZx`!ct#XN8(vui1&4Oq?>7@TPm~*DD$v%Gi`K>h4xHmEZwj$qD5zN z(k=y0xrqty5en7htDSRCIgepFj^Z|awM*F3oW`&nhawo>+9l(uWMbHiirClAwP`*2 zAJVkSxrb@g1>Rf5VFqasw5FotYH7;&V2oA)pn@#0vyfw#!KYVW3t@pd$=5Rf_8 zvB28D|38>t+^Zu9RxETQL4ZaKuwtPb2m-`CJ;sC;3$t-RsGd!B6Wcn<8-y0g8j6*!mRO##f?qaFWsrK*~~w zAz7(?kfzj|ZXDZzH3jrEX*`XC`_kxXJX}N!`VqXACjH3Eq0#I|Zb3Qn-sHyXKp@%# zxotHtrEL$knZo|Ui^b6P0|$b_?jaM4qKyKgguOvF7Da11E~{_+3fR&nqMaAh4w}xO zoeR^lnXaInylJOQN6=2!v^u66Xs2g7PNi3Br{`)*+L4~C?V{2vw$pR9mBZ}`j#af; z)o(lPbcZ&-Q(35-+IdTNXysE1+t*e~O1NEE=?;y0N?}YKmY-5?&t1Ah8=g|wK9p=B z!}~o>Vjc7k_uUF9ULxv3`+7SX7`--BssGYVPUr9nTmYB1-UyfbX-_d}lNg`r`~j`x zHg{wJ@X6K5Vl6##G4yBJTs&qAS~BoAAPO(L<2kep2JF*lEw@c)hPUCa_}G(@rR{jt zRuR0H5yzgLEN@SiqaYK(sZLCf;kDqTKM%f{7S1_30}$@F{gDhI+OT1BYz-bdi?}WO zGIn z*O3E5$L34u%$B8>-t(-J61mZPpA$T1#@Qg|E6;cjpMi%SBohaa-xtdrJ-!o+`AYp8 zc2bbKNuLg$>A@vEy^^1weSQ$E@BGS(y)dLO(~U@TQ^4=E_#MYx4*uS`t5nCeC3TJ@ zl8FQ+8Ak&ojwcrZ=cbv^X~~a7o_Vo$csy5m0hH+ujxUOHlZ>a+BcioGogEF3VkNfAY5(i~b0 z%N&y1caquq0xqxK)`5qt_nQ;P$V;@nnX zF*^7V%Kf*HDQ*#m)}MM(J?ZppVEU<;+xR6`hbTqsCMuhS#p1KELdlyr=BH#u4s#M3 zCxXw&+-Zd{8;fOVP;|(1<`7tAB8&d0zw(dJAD*2{ub7F)}?QtF8$kyy7VX3rD9)t<3i`E zQAisFZNM7Pv6`145)37Y4p_kPm36^AWNlVx{k|zuzhP_*<+zO_A&vpW}vQ@DsL@0sh9*y_Oz`DwJrx#}|Y zyXIAFd0*Qt?pJ7We-kSpgq7U^0~-in{Vv`Q)?hen%!-TWfemy?0IlZTK?5BOfnDy9 z0S<-0Zg__Y(mXf58*^fBFQe?R`QGWb$TBO3ldnJNq|1umX=WWSyULj~u~We3Ox;TT`w{^c$tVsNQ&mRv`X}*dD%Msi5d9R(aURPw^+ou#in8?z$Gk)Nr__R z3Zx6^=FDmo8RvH%-;_@LPGn3?gVZD}S3=DUCEHbU_nZce>CVpYMy#1j;GVyMt~bMU z#&|jlQyJ@3v$8X{AP}Z~Qk|k=-tf;C3{x zBgzT(B$b8nu|j(F0Aw12=NSzOn4f)fkb^>|+~ic+D8bs7Ld#G<)V^j}m6+ZG)46ZP;q>ZvT0Z;sOh1(70JN zcyL;D?%sb1j2TgZ1Mo?~WRC)cjicnA+{%Qz%zqbaAe(*TTmvVn=)1LIvORt>^ooDh z*38_^z~H3kZsJdB<}wtn(4N}^Kx*b`@b_TL3Z@8)J($GITmb;)Dhw^oTnW!AHVZ_; zhLFG75Pl7Ulu-vV%{l0Kp!sKFYf0L_<=Xzyj?z-LZ_h?T?1k-lx@SC!%eI2axm!p9 zIEZT$zuMLbJ=4}P#`qGvZCzIO?%XxeM5EU^jcNBJjkJ4hsnEblh&FJ46EtuiuyS-0 zKI-1@QTNi0|2{w;a%O+U9G4*xg`mw1_-JU`r>$4InU3F7Niy0+=~WGCX7hA;eM~^ z!az)vQoukIa}Y%+(6CMkR&^}$LW)T3j;xKl0p@5}G;R@?w87%o~0!PqWuVauEW&p)^a4hf=U}Yl$JuI`KNK$q$)DpOUGSyh6q>n?<`oW{oW} z8yC!Cr`#lrA`_Wn1yNDp07Uu?Ux$#`Fs#rRh1}kN*Fvtb zcTKW{Cf2kO7RiP$A!T1W%w%7_HsBTVdy5ZYih;0)PMRD~74qm^@}QJ2*gjy}nN1Yzc9{^i6tFUt&G>%{*(;Dm%mzb!nIdd2Mf{#= zK%j_}+l1vnR20T{?%cJd{!R($Nv(a-pMn``BzSZf;f}4GzYUow?j2jD4(AZ^oKDn` z=UH^hvuhzK|80<2u5`zX+4&dU@osna27qTSK(ARlsdQ+8D8`=eET3C|BWO-<7te_} zHFQ@O33c%gTE+Hz!;focYX01r4OokHi{(S5E{x}}Da2gQ+=?a}Bb?0M@t?{p#-{t3 z?E#91+It3NBhq++Z}LBl-{*k;BCJ>y_m-!paxnXpEH#>W&|B$b_I78prR`JrmgQT) z*UgqDOU)@vX&PM_ul^0(|Isvir!aU!YD5ySNkQ^1r|1?So z?F-$4Q-;^IQ63Dz-Y{Ad4Qn>`W_M1q3CvDnENPcbG_ZbOM%zC;yOCSa_sj& zBUY!V5$F=!;zOy)aVL}WlISDEr)y&>`6-=Tqh;Cfd5^Vj`PepRW^E4bc5=^W^04Fg z;OY4M5TCIZ&i@7S>dd?k)n%3A|25jk-o*S12usd<3_#^2nRq;S;a@cV{0k8;=}5f! zKc_n-?f}o9g?JRFhFhFx0^e((|C)9N%eT3lyV~7Tg@)aBY$UE_jBVmeusgv&|F6LM z0vT5qNvn&Dsf+CT?_fM;diMP&j`_<60lN<+Is18fU$G3ki%%u&C}A6J0PGIJt_WZk z682)kt_)yX2s=pF(*oEGVSh>3RRQb;guRZiMgV&`VTTB72C%mh_A0_A0@$kV#53pb zBy39n`!M6Zp0KL}*p~=9OxV@{_5;F>5Oz%fdw}`hzHh^74*gnE`2Cy3l+fUea0qnVi z9U$!b0QNG%UQXDq0QN@0{(`XG0qlc>y_B#U0@xP`+e_Hf1K2+i_G-eO5y1Y9u-6cF zV*txjrgsxI6Tqs3y_T?N2C(&%)t8HaJu84co-oS5{}R>gGJ2T>^=_q?T&Z^#y(F&Q zo9QJD^*)bYie0^T&`Sxa_m%WA)9QUaz08|>-%T&Gpx(cum)fb`Pt!{!RPR^lrLL*> z0eY!s>irqL)G+aCAHR|nGllvs?TIulQps<6MGC_ccicluG=@fK85#txWewT*tg_BA zqE5_9s}jNXEMObEKpG>H=xU7d#@0wvwdctxP#}IUu?q7Q{yD>Uq!WpO(c-Z5LZkQo z$WF`e9xYjzZ|CH9kCrX$??YI>h20UtDi-#E5H?_8zYA#$TG)5PctaNU+aTWDL5iVb zcpXWAd&BQVVY*Tj{?rg&j>0n`ygv$G8^GuOlC*STJn4TEN+~i+CAj%7bMs_tFQUxx z<0M;m(ajIsFQc0uxcAY`58V6l=G0JcxG%w ziGO!Plo4yW3*!3GZdSY3_F|QQo(W++hZ8*FRUc*& zMYFz?7WraziF^$2p5Sz&+ST+wkLeAoEAr_kzK7qF(B_6^kqe!$4_+&}8EtCr_N+tZ z5>~MF@8I;q1zZ=}fOVmR7!6b4bnV6C8p9LWMyi2jmqQq}9?XW2Lv|djg;@WX%=(Ax ze~n{GKZPK12=r(8!J2PvGxr8+2CsXtkT&Z%SdfKhFP=r=&or0ktx_UUu7mutd|2pE5SFF?9S~EskapynXyDMmu(1EH;F1B&A%ktu*{ac6e_lLB}{8c$y8Kr12!OkQ!?MK zjX@jwliopOpFN*j*?N$^y?b>jz?8`S(h&{Uk21Z!({TuU@n+q=Yk4;$^)z>A0}e}3 z)YaY%>1w{amZI*1!19cjZD`O|!QO`adx+6RaK>w=`V&L-4JwahVl()D0Bh~VJm{UC z!km6X+DlF!&7lf<(jmmC>FotOq7RoZ^E*D=`c;W}VCaT5|GQD0Q4 zu>;dpy9Tq*VIQaeazpvr>8SZb-L)!|ESW)_cUl~UcyReYgtkl{#k)VHCZ?flzm3I8 zoLItk2uviey$7syBL(-h_Ud_^;rcI3%OZOCO3+UwP6d6IEu!})-Gg@b40mNFQc~rG zT`PaeUC;QXSjV-0ID!_AlGyCIz~JA9=I;nza&Zr=_{}fn51a0!=wdNvH}+&EQoESoMfGAlseg1x{gaf2w$wl& zGV|}uby4v;f|oVWphh0O#M_a_+gbi;zX6TwO%}0*Ol;#9)HW-xh9K?*Gz3!yeIN~r zV=GRhRyGt7XA#9(%1zflly;ld|Cn?ec^oiA!iMnVR$wXKtN)y9_>nwyA^{xV1a|VA zZsXlau>E+R^xX{Y-E?jkzy8WORdyQ7}h zMm?{i$4{(4FZuc?{0;Q%Nmc=Wa}@qodbH7)dz%FG-m#ZD_x7mg9nmE3jC$S`^}IXk z`73&K<}v%Sk7K=i35maj&=y%J;dl~#d&<~YoH-qp*YTHtZ*7x*q1pexBmYUA${b(b zoy6z<@5=jf7HVa7j$`(o>WG$a6M59ONHo)Fy%DM)Z4n*P7SZ9f7>vmxZYhe>?*%sF zF8W>c6z3$S(|Qx4vR&e@_Oa>2>y0dB{Jz(BkpSbWUdPN2m~wnO=LfZ|97K^CnpP#M zqp4%j4R|9qn}m}NWyC^mRDOaO>t4~36*HAUTdHTwrlc=L6Y&J6#X2f2WfCKbsCU?t zwlfT`_AY{y36aKSxc**Etg>+v=a@1;pNl-R_M_w7o5b@QoCuil#e>P=WU*RSSxBTJ z4$=>cKRI^5)aB%!UsP-@mfFqZ%h**s3)Om+EsGgb7MPc@b@2-SN zC^M`8k?1cdQ?N1xI%KCjN;$;Bxsy$a`4Nd1Jfsv99<$98UUGF0Jo8{cI};c?@UTzy zy!sC{k(IFGGUFf_@96lNDyJ0^Gi#^Cj?@1flv4V2wg%erpkLQO)228rcBJaThNa&v zG086WLPSfXuVQP)`FSeweiFhT#{+DCY^$W@A8^O4=dMGoz-M()`5E|-xh|85bO=doDauUZQ%Xt0@FA9z%{)mYUy$0RX^{>)VH%^Xh zsedItm#8EqrQ_Z;yq%BD;AXdbm#K3&A&n&WW0tumiQ-YZr=y-{WUT!Z9c#-N<2Z&L zZnUI|>VpthqD62;ZBPu<9t80x2$IIc6rU?KAP9;S2U4kg48mB+A~+~wrARMICnzS3 zP-a<&5h6NZFo-f}gh;_7FxsQJ(%EXS=}NDuUFJ43yd1svJ$3VNlm$oEGs~H-!g%BGsbBB^fr0Hj3|!z?GHyb1CbOD>6qi zNo|t3N<(vFak)y&&R3|B zPYblv%()Ur#*!4x>c^t6NW~T+V_T`SSVy=}-d>CnMT*hLSL;GL!TB!#qU*v{6pR^H z8kL&CubbR?XPv6rTmUr`t zyL0aRhsoW+WObuymho(z0!sj{iv!C5`f*@CfFp5W1;BC~H~?U895{F|IUI)#9ZVKO z7*2N`X=C>6Ff3$teH=(;Pm2S|?20&$%=X8DWVR3og4t>|4g|OMSTw{pT8eS|sCaye zwjKwP+p##1+^&oR$!#SLB)3cBKysUl1Ho;iU`ER^ZqJFwC$}5oKyq7)1Ig{laUi)J zhy%%OUmQqo^Kl@!jg-u2e~jC62V;r9ghRa?J02}xgCrH$?dW@klc2~f#5b$ zGNY9kx97#Hc~R912JyTkH;ssXU2i# zc1;{eZdb*D+&tJSMn}l+5Umdt|hDAeS6+t9gM_n?fB#l6E_(fd~pMOC5M$se+7Q9v~dvmTiyYlNEu=AbOhE_3G z-ITAb2vViOxv(G()35!ercKFt=_$-bFiDk#epumadQC3i$s&te|GCar{|WO|{#Coo zc_1^l8ohVW&cSeaDF6$YygmdD1;B5H z$%g~r^TL?bYyeF}pt%4#9D(Ko=obUD3)DdaU*L>s_zoyMPIQgPDJd+U;nd5iArf;+ zO5w91+?}4SE`isb z`H!$Vm8jE~L_DaH!$!~3i4o`o&yyHoVAHVZR}hMZaRh^XUA)Bd6Ba*eOtdYKrfbPA zkPN84$58!;DAmAYsRB`*h|aX)XAGTJ?*uP7%n7Ud&^9hEVt4s6H&fhw1nZZZOE4-m zxeXWdU@3AE_h80h5$q)*;)_bVaex}H`c7Zz>6SKvVY};SejFQL&%#c(EOHLjKO`H< z)pGqUsOB=S<^8ujY4+c7eFFDUu^#E-EcId1E_K(&3+ZeFm;v<$whm+lwoWtCe z*_-IkOf&|z7E*ch)_i~ci!KB|GJ@LXpUrH3)S3S{GKlN0wkN$puz(c=$m z#*!o7MaUW$4`S_KQ>pn$DZxc&+j^am%`VcHwl)37leyU+Am_6eK4345kWMnO%hD;X z?@3CEwepR-+j*VjtBGi=dHyPLf7&D!jBNLolw zPG70P%2ug4xZT8CVbpK|G5m|jqyJ=nHKHn#;kqQ+rF!Hh{u~K!6+L2IUyXE6K)Up9 zoLDIC&eyJYr1GyW9}}yD?{>YWe=}5l7uNB$TvXxNXf#ngFdwmfS0mHE-7b7GAk!4a zyv*)K-gE2wY~9@mo~DE+A{pGy!Olp#TrkE{X~NcIFRob&f^R94ybNX#9FR@cSV&Dnr;0{R3Tf!aK-5#swfUB` z`Ibd|8O7%kT`2;02BV&8zRlO$=35@|Wfh%Abma)#8H#$UU2VQXn=hIvR4B=AhWPrU z(T1a*YImD&X`3&aD_7BFiLTNXE8FJlY4i29`J&mvTuaAa)VUJ(#<72OVE$v!Z+D+? zenhpYzy5uhm%Ru2d6>F`sku{vo*Z!oS6FK7yOo}f%shl%{k&!s4egz)pGtWhmIX_hN+J5^+IirI0I0hr;tA2lwj2Pz)q*kpGj5#I@G(< z=~pQ9U!daM=~NU7^%tmkcM{nobzflc>{L{f(0hcrN5tzv7>JMo@A%0gv-l~bjug@Z z4cw(pSNk{ZR3l+lljc8)@<<+-zLG=WN1^tNo#`ZRdMY+8d>MYt`)2~Uz*zoSbg}$K z?m_kzIPe?$q&e~aIe47vr8*4!Iz2kxgh{`_lpso- z`V@Zorx7vWV;r2|(`4G(CR<+saE>1g=DtWbKXBhmH$QOSM>jukAElcgxW7a<)@P zB?vKKRcY#>9ChoV91)`lHH6TCYm9XtHivTBX_!qD_79H+FXz$*oqrAa7JhkBP>LmQ z4h%B294w$iMZp7uo<&sN(AdN*tjHfG-kpvj%5`GABrM> zQ$G4*MyOgQv?r=%BKq87X+b_8M3;I5B}A``n&`k{(+11h?=@R1P|^5TT|bW4!jxpU zdftwP@)(OZsik&6QCEA`8-&VQwI_ANxRxZ*;;=5biCdG2L^sEJBF}0sPQX7&W6@#* z`7UJ3%>({Uk)-;Eng=kfRd;m>0ijnmt&j;A%FygJ zyg0j(EqE9;dal165nV6iZ({-;YQboncyQ9ckbWdIu&Rxd76n*556l5RsAZ`Dk%q0P4{Xr`eJxaw)P zp-s4|D@s6Han)KBtTyDTywDeI%Th2Hy71jJ(Il3NlrRDQAdWK|pYlup|LlqR`kAP-(jzaRmhgAu1{=uDGD$F1Udku51Es zQ4~=`#SK(Y_}=%NTUEEat9x4i@Bg3YpXZsXyPR|Gx#ymH&RwgA5ZaB|8=T_)TO9o8 zgM)MV&IB{ZPv1O!ic?$(kO8EV(leR96zMorNAHWZD|Nq9x4$@CyJGj6zSAkL()E}f zh+>SRkzd-8UooOC+dm(|pT6h6LvsD|h(-T=0c;ch+zN|>1C*D>A_w>j1_D`W&< z^3qrYc0a-Ra4TdHVDi#f1omr!@qvZ9Ki(jp0+z7??{mCBzI{OIyy!z(>+gg$V?fTe zFemNlg0gaf4_W;VI>rqDrKnaAewl{JfiGdHnp2T#;C_oaSwi{Y$4%((wxWEV1%vhw zNc|Dz5&0v=aNvvnh%D(@8{x^EwF!6<5Y`dP7%;r#B2##WxkJJjslYLCE$ASWtG

    F~rljf<=ObKprjVr;7b@ z;G$m+T=bi}fmitTw8ODOO6s&p#z?GevF{2_lJ`(Sq|Ne1?Ez$Ad%!cFK*LeU;|#dr+LWee&`0MOskUO)7|)hG7kr{QE;b#F%#jTN||(nz#RpCO8h{q+8V^* zJ4sSJkF!nAX4Q6W7*#_%m>21W0((wA7Ypfx56^fDdnZHs8c>nFh0;JAJtCDG0Q0^ zPjyomb}9rB-DJRXlV(TCg@&0Reig}04hJ#*dXk$Q38VTeOGK7Ym|iLQtkRWXl%yz= z#a?&Gxu>3et%>#Fu+8abUpswSGUeX+jwHS$g)gErFg(jIpffar5O-X~wjC|fg1r1k zDK1CEg+bw~AyLFAEBSp86Q{i7w?Rx?WG250A_*n75-f$TotzlR#b>fJxoGD@&eWEe zy!a#Ee?%K%^2wil@vYhplNUU1O}{h)Ob2VP)`dd#3i5GN48s@`yRaON$vq==>Za*6 z3?YzY1Ye)roZ5`Kd5Iga_FI+y#pZ{FWNk3sViW1AqCH3m^o`-*YZiBj55L5<%Fv<{^0t?Itmjp@J{O z47GOwW~ea>FhhMX}g&i8+;wDb%T8N+qKT^(~mH$+$vY45n)IG=WRQ z-V#1zPDhhZ7Q){`4E@>z96i;b58^|0{M0AorxVTiNya)dM%v6V(tk+1X^a$Qg=3^Q z2~o~xn#V~00+A{o7z;hlFdqm%!7v{P|C?bx+zQLY7)f3li^fP#5{wUwkv_f5{Dw&~ zy!WA4PK6K{W_$~4PuF6c!Kkb~F`#QtI_lxrKe`jhTnvElojM8i?Fpw&E{c7HYxU-> z=Ey1;GlFqLv3Jd%3}~-=4hBn##lg}!*Fw}X$2hWnEL5RDz~imp(Gju8NJyg;iVTD_ zDsqu=kiceeHv zV*Xo@lb+3C=#%j+s3Aa|__=TWZnl=_HBjDc55_=g8)_I(KRs`9m)Y8)01A807=C#+ z)Ci#d^n)*bZMNnFP#JvEo})CY#8E(fyzk|Yw&!aMP}ARh-C^zdS_-IvLsxyMJzwL1 zT6FcH|7p+H1fcGF>-^d6`N9tyfc<|Q{D$_7;U^YmCqKFIsi)d=R_p@Um+w94;`Xc+ zy8*US{!K4jfVUoiz4^s&MMc{+X0aDwmmT!74=li2AHbGnK7B+CZ*Pm#j0&`6YT~ik znj18Fpk@{n8|r{h9q`rJS~7qN)XahsaU8qhl;yLvQ~(y}nFU78{_wXx`_OF73!nl$ zv!JL!C-?7hPkY9sp^hIs*ja!x3geXzzURL7oKd&G{ls0rZO@tL(1YK7{`O3#${JPm%CV&dm%z_d%+iCMV&zY@d z1F%5NY%t2dd+l$~opJ$Kpl22sJHWxe|ML6Vb4Ja${)an`YR?%(w&|#w(3#pYM&okc z&0qO)d&Y`v%x~7-?ziWRz3K5?-}C$SoKeeOv+9w%+jGWlo*I9BaskF@L-)D;?jN^j zOf=&+Z~N(k?K#5_*gzX!eqFIWYt-2nocPhN$FTPHNX;mWgLm2uovABm@<7cjC^pku zo|-;rw$>d$1!`tNiJkr6&R2b8w$>AX1!`u2QM31X_nXm~dIP9H%Pc4n#;xl&zMws4 zY^E!}*M0c{oKb^n|=^=sO5#y)pU?L(#Zj7cl~^1&5Pw&#orG$MNpbB1v; z2X2^p$ly`OZ_)&*(n0m+%Qb%)`dRU`K&MYp6l7{QD{W7n3zL{49^Mgf+bIdq+ ze4b;zV)s190mb}0M{UKzJcngt^Yqij>^vQDv3H)1wm3LXPdYkJ+gj|Jr|~TI&(j7K zhvsSgmd>+36m#=b_+sBY)uy;)o*K)`^fNf4=;AZg&*zE4PawiWmwn7!<5c)AJ(s7y zf(U=>0*5;!$1NSt*nTEvzFR-NE{MxdU4)qY)_oW`juHIcA_^t7ewMQdg`XY7+|pBs zk~Z`BZE0LK$nk`lz-Dk{ZYsR}e**-3+1V_ZnT4&T6tbs}bmnG(Q)Qag(^};&NMh_N zw`7GgxEtAcGM0~)cI*taCS!vCiE{5_31!L+5VfIhc#8&}Hs6f$7>N ztX40_@^v!BncEgztC1i5x(UqB;x`d{J^zbrck~6#xY=arN>)?$mx63rwP?!za*+MA zo5wD1L;P?1op(-ic1V1eJDzh=b9PAl!8cs@+%Ow+>vZDOZk*xeIhhKDhaWG~cA4tI z#FK)X8c6Zb1qC-Xkj8lnoO6(mh){BctFW^E6>y$&@*Xo(ghN*qdnFm*1m+j}2|j!k zKKDX!P!uYdzB7H~s$#dK<2Q3H>Z4bU#SkC6Y9fyI(yPYfNRMBI)j$?mPkJJraV+8% zd*Y~LJuj$IJ?mImH+8Bn0LzF=g;2d@iai0F^^z&}27ES%rr2kyTTgx*WWL%Y_feF| z)CRGm&PyLD9Qi)OOatp^)xJ3L-LbqwmAYf8qe+xZ1NpIl zoqFz}V{yzwz$&pu*`WPY2o2<+A<9oZc~q*)|5}seDYG6)Z=~OgHX(ci`BAXL?3~g~1&BVpaH4|4?5kp?QTnu?}70u+u+azh@*%hPbU{c9ma4>((5H7ruNn*;xt!G zZ4f){tR&YuHOfZKh3m^~O;bLmNY0yhJm3TG|-u;v$rGWg{R`(*KoQ#3)#*`TFUd9IIS+qU{PU1AYgJ0N_7)t>>z-?$APV1I@9Gz$3 z0V60yCf4~n;yB$hCeZxiV?H3wQkv_C^Bxn*M+a5JNtJO0Ubu!l-j-G14r+)qI~dnf zcpcRchHw^h62f;-N7%uzX*#GSoI%()3)d5_b9QOR^@L?NBJ8Z5JXfbu?4+JJ3)7-8 z(>e(Ee+-Ek?dC}zSq3sF*;zRARG?WY2iJKx&bLu8Ix#pw)8Yqy@Dyo>n=uIVu9xn@&U^CP$Hs{a9EA;R)hEY#qoT zJPW*_kF+Wz#@Z5g2Qr}NGeS@k+KCXNv)4v&jWRHPr7 zYh^(!BIhcHGLWuqq2xP|0X0W?Gjdy42GX(ZVmgok4X>c6;q6EXq-QH{syeOQ zh$S@|UPUn)+JOkzvlXX>D>YMxd!x=nr49~7%WR{S0kLpI4HQXvYi&hstnk#iO0Ja! zu}~;$DaRQ2R>N%zMMSNTR0I5 zMHEMH7MPA%IPBDRbvhFQ$JI7-9SDK_+D2*VNG;}Qbp^-toeo66UM(msL=db(HTX9< zl(OI`)It(HP%LfJRtD6@p&lrX@d&LfsEtHfE0T6OtYXKm!dWUr)Hl1B z)<)DSNHk8d+OOtVIBZlwF@3ue8L(CDVmgok&5oiNS$7}^cWblHN`elTH4 zKx~zubS?rKYpawF1VHO%Ri>pMwHTu@5R_J{vf-kZH6NqmJaoZ17Y1vKtu2U!MCJrZ zCEdz?SQu0r!7wswJcEF@}<;;1$3Oa$!Kc1az`KaqxT#?+S5vQ#{?GB(FSH(Rp->ML#qie3gjzV% z1HmyOXyHUG43V@JW4cc(3u+-z(t@+lNZi5^g%czdTPsg$p-|nFH8VKsKmyXFieyG% z9ms$!DmX@L9f*Kd$1bL|7qKctyJJ_V0~yfnD#`+b39A?}Rf=TVbYU6LR11o>PD?*x z7ek*YI4ZV|L?A0if)wva!@Ut}CzGn9Y_&2SHZZs{&DhF$*wC;5#tpVInie#A@j^2% z3mPh7NH>{?xLTs`D&HMc5?T@L)^<=ybXOI22UUa~7!7D;3auKVgPLXfj%vuZZ|?>z z+8jQ0-i|Pq!H#qbvu}|`H#BUw+{&_`X(7#=p|e_I{BPhJT2haza8KVHSK+Qc#&~dU zdaA>blN?yK#sL;NTHweQzZ_tZ^94?YM+5W#3y(1H0E?VVFsBU$ay-Do-T!^l`^$r%?0{^v6;M6N&MA}Q7x7Zw+tagmsP#^p*CS@f+W zN(*OP9)MVJ#)a~dGcG1hnaLR!6Q|ttjEhO2@Q{ErE+&BzM8aU0Krtd=I7|>(CW}i= zf*yELv~&yO^Jgul$#!$p^Tz~GmOc>neZ0N@3^q6w^)8la%|zWXl3vQ})9_woH?nvP0ss1ksco5|^d%rtFZo?AZp{kS*`Ad@j7lLc!t|3x$e1 zEEFit&PWfzLaFo)d|H7micj0I9r-O$HXpX;gWD&Rmz-Gs1L_kUs%EmB`eibR1$SGR zE+>{HJvwjBbUF3Q^yol1lX+gbnK%zy$I#|^b8u9pm)lwq@8GVn+6{c-ep-df2AC(bDv3gK@MSaimesY-?EXs6)B zIWt5Gk{+D|WxBK<)1#B1LPx~VOkdhBhP(k5=SrnH?*9=&t8ZE!xMpgD&ZEUAG`(Ku!Do-8*Xum_ z?24f-C*9-7^R&36*ON!J`r^p*uy`}?(1UKJ(x8@dTs(%noONefcFo2gU#Vu(xo#ZVXRi=i$JDAY6AZhT+R(s~H9%l{LkRcb?T}a)V@`mfdmGc}YSFt>+vTN6FMHJr?=k8vX+E^;%CVOl{D4slTMx z>%24{)9aO<0%)cUU0oVSob`{Pt&P`AoPMD@hP?6K-ICs@_o#HQW;C=f*zJ>ydesNJ z3SVCUgrv}o^yS6`8EWcS6EW0LJE%`H|Ii1+WqrTmeTf+2(88s0)OlN?nKc^0mwreKO z`o~b0mJ=%VdM^Tqp{{M$OrHI%JEj1(T?~1e=swM;7Y@3)3ay9Vy&s@RoeHN0_)3RN zy>y0v?{diOOD78aUc1b|biRNU2Ax#vv;k`iGOgCx1C}0SVy%-1UW}2swaz85UQ{i@vqSus0~QSYwc^aE;*! zAunqT{LOg&MQaQzK&8qD)&^EG%m>1|Gt39Vdoaug!mAkO1L4&S^MUXhhWS8vPlowG z_-PFDf$&}o^Wj#=A=Vz`rLk!3;pqh9qjBv)s^wIeC2J21{LgC-M6O?ZkQ8g}fyG5@ z4-&K29zLz2jMg3~MXWvG^Bi1zpd4lG!Ne&`S$i;X%2U@KOag_fYY!%YlGU{blR)w6 z+Ji};jFEt~2a`ZSBVjU35NRiiyO;!Bo$#@i#Q z@9c;c=rV;Ufi6>s4(Kw4sDLh0hz3mdO|0Bk6aXt0l(w!|P_ogA1!J;e!F8u^OeW0z z9x{fxJ(?BtsSRmIz zyZl8+hz`IqhBAVSKNd7sse2VV+$A7%bn(Xm=7MjZ0*8Af1cqM>4jWj|TxabT=xA#| z7_lz?Sm0P)9~0&fMctOHSKW)Ubu!>D~B^Ct!N8`vG^Kt z9bQG zMPmk+UOY$)7k{YT+~Sm#GlLTDf3Plc(MB)+SSWC!!L16@wBa5Bk)n$~77n*K^&*Br z3AaOtg3)Yn@yEj9j;-RTPDI-U!kcyR$3mh`7%bI{aMM7LqKiKk4mU=%Ak!H;5dx1T z)gdh`1nyc3iuTKBx1_ZUs40r0U9KY;aPv{hQJfAWAm=IsrE@jlR;miXSjUA0z+GNN zF($GDEnv5;L+VHb+#1%B)M9ob1MA`s8zed-A)14qD8{N-VDVi5m>xvcHa9B-t%b3$ zFsKKDv4F*}P(%*|M;oZM-LQ}-Zoyf=NLnZ&ZN*u@=UGV9H^niXdtniX!U>LXC9V9Q zRSeryi_vb{kql^<6-x_hWk9WRXm_+6)t#1Z-@*~IV>1_>HKS5Q-rvHZ=~a{kJfwv~ zQ>8cy`AG{&47Ol(ECYH!Q;?d`PJ}>C6JhXQu7K*SIT&<8E z*UE}mNYow0QQc{6L@XrsY(Z*oM=cDhjuvAi(8`loIMTHR$=Kc&cGN-=>R5``@FJ!=mRV3Ag4rIV~ zt*cL~xrfCY4Uga$i_mCCvB=0zNLUy&Ja%nb&bBNZ+FrrY_UudvI35+G_H#?C7_ryN z+XDX7LZXEe9HTi4OF-;_#aWXC%(-Q&5V2Hxyois{#_Oo)X;wGo{5j>N){k%6F?p=c{3YT;0AER>D}AiY|vqrJM75w*$@y-}P6 zoT-JxUadIB^0sg!7K$j2;4CmLvvAm{?do(U1kPk^<~k4p`?ZbI(wSP!(dr70={p^W zfW2B!Vnq<{5{0W$4ZcpVKd7R%HX|02=tFR6g59WQhBvl;a8CqFV8;LSkB<*^w z#^n|cWnNcKE0=2FQ19$wI+FtDCW@u@rvoXlaRtTn@lIsG*0qc2Kn65FiehBlfedJV z1V@#qGZD~r3sU<*g(YgSS%T8J2xzpeQaTU-t(;YvCT|j~&svPpC`MCQ!Z4C1u1BNhhL#$2)>MoTkdq0nh5XR!m)@bf+v3bjU2jMlVrCl-#F zc^j#l(}4)st?hC;kpcC_DkVDbO(8}Loi=0a(^|{|V+sq2nxi=C={geu zyR}_X2Qm=5YnRlC5ZJE;$2f-;{=}+}Ofa+vR5QU?-{rd1>}D(gT7Y+1oE8q~^}SiI5t*u}K=CKeLyk6ob-WI+3?C<_cK ztYXAuDUxZ^g=IjKEhxrmbsz$no(RrD4%Oz3RzZ;B9cp-0#@hX(>L^>SOo$B(%WImk z)s)1B=BArbloocwf<`Y6b_-h>3=0}6Vn{cdis+MY7C8E@^4&otp%uX{ZU>b_cU57x z@(&gl&;z3Z9n=sV)GXb1R70*Lws(gXBOFF`-i|Pq!A|wU&4_Mj*lxMSWiz4|f@n`W zt0gyPwcj#4Z9vVQNoL|th13cOzXBhMd0gv{`IR-sRfR(PgvkZEXi2JSe7m3V)2Kf^1<9ZYa zXL0mfxPx-m=VWu%M-J-X647%nl^+Y;52P9o_}E$D0iSM&m1kw*zJekYXmOeQwepS`KDf+*+XD94d%%E=pz zvXXM}Mx(4Jj>zDjTbtgn%zz97lx@MnnD@TWqPr{cHf@k=wj&*CKxP9+jcpclpd0dMBn3ZC~y)?Xb2 zC)QuRIS3bf?MOc&Jm^B%aVRyk1)sw#p1$eYyf=i81>wuE&s}qaBhtcI8ZwW=GGrV_ zYRELs%#h)MWMLpx7|5*6EyA~Tlit`CuQ+!4CjQ>%08|ZoqEbL=3Pe-*T`buT!gp%Z z#fdHH;nO#DW%J3gE%2@gHAUpx;Kthq3u`L;5 zp-8VCR#z5CS>WLJRL8cYiIM?MJCs}oC>fx12cNYb-TzNdKJ`>#AR8l@!8pmtT4fu_ zv_WbmnKmeGB+~|~m1NqWSdz&?2eSEWAemf@WR}E9Mkdj1B+~||m1NqWw2@33tX7g~ zgJMa>+$0So(-k9`SP|dzwJqPlW!ILysSQ#q$+SUfBbhc>tt8V1#ga@HbfzocrILYL zph1O`7Q3ou37%F=t6C>GTCuKbq~N2)z^bjHvu`%C#eOxf_*4@7R2A4V*IW6 zP59db)Zab_Y&7~?J1g|JVdewuPY95-<_PT3%i zi@28G*7~}Mh>yo6F(jD0@7mPYv{fe4KYIDz+9;DlKR<7kw#no^>wEv9O)|N<>#I*` zi%jO1%$}tUGWo&F|8=^y$K?BtdHl=L9B}NEj%f~k1&&>P`ODlyVn}^?cIHThz-P9l z{qou2^;i2obSa3BufH0;l_JHbulta>t6ENz0`ES1ZQdB%;{K~Y;Z!JJcydY>o}3be zC#NLg$tggdk)_~x3YG%nSy?L5KpO77Fpyh&qyrC+pM>z2qbTkHV_>OpMI=G2~X*)+KLI?!Y0VN#3g>}f} zQyHNoKDsrbR2pOSF5#LSk)jt+N*PMYv{2&cr8S`>&#vZ#Z6O3XfH_k;$bmfJN6{%I zR=Xu32nQ1!$SJ8cQ;8~_9wn0jVUad#-I5TbgXItpOp_lKsFE?Gku+LL$Vi=A(t&U= znM;9Z(h+egnJ(qVLqiD}t#L~_kPQ|C zDkyBa*h1A)*mSXms;;oeoY173ds`7FgCRR~(nDaR?jH=3`l7}&CDvr{Y}ltTzV7`ha}QRa3butai4PItzcd5SZRv=L@5Mxd9OBd2ek zKEo;I5$|Kh00KRNl|v4^%_xK;Hdp6&!{TpFHU38Y#unplrfwe^O(gxt@FS%2>}$N) zVZ6*_-{uX3mR2E;6ILIm=A=HXP6I!pT{sC2%o?(9|)hw zFdqm%pJ6@_o@JO1w?Y=-hvcQP$PaBG7$5LMhxWwG4W)h+LRdbCQSm_xH25GU**=H_ zA|E8N$Om20;DacH&<9ZpmJgyJEFVN!*glBzuze6^V*4P<#qvQSAjEMW!}3X!)7P2l zqckS;l+`h^(^u#;I8Ip~@IQIxgW0XxhLf+k;mn(~2`9^cJ9l4g!O3-x9`k-}z{yt} z*L$qC-{c$5O1)j1Z}KBQepOLhZ*t`OzuYK|2lbSB=As7QL^0Ag>6^Z39n>p`t8dag z@lE?66W+?C#P}x49lnVYhi{^!;hQL7_$CULzKH^*Z=xXSo2Xo&Z@QDSPxvM=?@vc@ zwT;MDpCrZB`y`mSwdBciMqI-~?SSnQ;_z1C8sy*}(Vy;w)=p)2psV>n+h|yA&qK}|z z)%U%?M{IB71-LwOM)K6nv(q1F=Sg%GXERoD00}p+5{jt(O#Q%!_<>Ev4~W^0^8?gx zp!+9snQ$ju(tADwqvamG{kICXJ{kSqmA{cU%_?``7r|lQJ|}BmcS>Yp)-dX8ox*5zKNGkLJ7rHoa;D=R|Iy+XR5P|W9pONdDC~RWWZU*arN|W z*KDbh1!oz@)*BYBzoJSOoMjwe-}i?-mQ=}svy5ZxGnemqW|a&$%Q(({-I1TZtjhA8 zWgKhw?B4y;>b(->czgWt&m3004^c{Yf01r5ryCX7ZZ@)=rNo5a!vcOM6EGyJ7CV!_ zM9S`?j>LCgJcE>Zay(idrxKw|>d+hT=AZNbz7AE`h;WLl0v%&3 zBEGgx#}0_svCM5Z|4qE0>ew?r_?=gaCsZAq`R7$niZ@gp`^(L7S>}AVp1L7eA9XqB@$Hqj*PHWIHH*vO#5pragbw!WX z^q1XVqa7pFaVJh*(O;fwNEGGUv%h?DeY)dLY^d@x#L!xAl0$2v>BasaBQz@} zV>rkN?Tg8n3^GDPV>0|8Bh(g?u`0+2)y8D3H5nooO;a5@GpwK3DW|fDf)WLCDw`P= z?Qtqw7#7uWDyK0ldgD}1XIPZRsl0$;(HN(42E(E*PUTF7MOPqGH*pE<2>+aAAA8Zr ziMJf|(H|PCc&$@fHraK{gt3a3oxFPEy(fP6ZN@4-@6Dfo{9VueeZpA9ZMza$U=DnABuQu;B=Dml!-Qwx1_j2&uh<jh@zg1=1K+)MERkjVnY>_J424S{Hm2HDCTcpaiL6|L4W!oUk7OApr5N3;1**4Qx zrV6Wz4tI~-WXeAUYMmNg-RmGWI-43@FDcZQRALJ4wh4B4H06Hw&veY{Thd8>CZu^4z_v{7H1jx$B*T zccJ6?bWDz?$|$w=R2ik#o+_i%+EZneT6?ODQfp6@QEKg}GD@vIRYs}xXW`PolDIUe zq~+571zuuY8lnBuSR=Z$%?PMV+fbf)AjXsJ2iM}1o{6fI&Lq;2h^IaOzBA&j{j zndZ3Fv#4vy>e*DY-;Z9J7ccBom|S`;;IEq+Dt~K_Mdw{NHSAOfHL*dA@pV%p%)JUysGb8_&Y)kRM79KZ6{gO;I>?u`^bzngE_#2a z>OEmRfh@hA*pTb_d;^Ys>`=V<7f7r89tae2aunqffQCXEF5mxQW{#N5i>*wR9O}UG zO3Yz}BtjaLB_nR>4R+RLby;s_3}O~Qi1{kU*9Gy?)r^wo8DrD^8=ZtVe?G{{z)?Eb z=%w#stKa@$u!Q5k5@?$LZmFl{_s8V_(#rpBOg=}e0sXs1%o35Ik725mKVi!MRs%ls zS$>dzeoQ{g5Av7C}8mAS-dV z@-j*0Q%Sw}4dX)h;_1yQA0!C$Ts9pOC(Imh?rR)%K+Fd-ggN3e1xyJW~2M zmPZmnzzPw9-6#~Jj-!qh$v`%PTJ=G#)1cO2uu7iY6+647{l*gBWoH-r_vk90P5Q=8 zmY#`p|BYbA@h|1GxXOQ%vJIQyCcX*!Me!ImkMmf%o^hW$(;G2>(`Kvo#v7~v}bWLN;DEs}}bP^U@MN&A7c zgyYjpMZH05fDf;Xp&)9>%DlIt7XyS>pz0#&nP)kUpiXR*Zm!}N*cCkvR$WEQE(cX- zR9kOi!`8WXq1yht`H&o`&x+j(T{A_kPx_i})aE(>WJ>Q1z|uo-pPGN!*=z1WU!s;P zD^%?1D;-gI6v_ z873X4N$|j*3bhDcs6yLNaNhymBsAoU!G`O)GAt5<5UW6G3oii|o>+#qP(bt^^k%C1 zEcEnImar>a;DySawkpKcO>s#>U(@4cMO@iPT-XNcHX0z}l2$@9N*|jYTJLS_DhwoN zW*`YBVasI0dKpymBOA%BuB70n)cx&XJ&)z?0i>kY-0t{vQHlin=q0WK?>m9_3H9=> zSMbl`My9j^tOC7Dms8x|61!JGCrqovMYib@#oC*k0Amvyy9+%t2Tb%Pvl9VJD0*Vg z{&aSGGKIuhDPU#>81>Q~himELq_>`f=uOw+3{nmY`)htu?C+l0EmNF4xo7f{cfRhzfutbdtBhG< z;CRnu)}V;MiwCT^Q`*!?9Ds89=S=99{VP$BQ|#BsMG`q!Bd?Z-*-&{6BlhRGId*@R zlKP)$g*!0UP_=c8bC99uR>&2)iuDRicZED6%X$T!$*sH!c~w5JSaZaKi_W8+e_KG` zNfbbT7s%Y*cD7lE_$yVy^Ftoo#05c}^t_s~Fj*?h&t0qh3{8IF#=#>@WO(x4XYDd% zA|oJn$xlpVbn@m^rRz;(Z1TfvR~JlV>Ev_%bm^~6WPI}I-X}hBEtXYosPQzi~bvTmc`YmRj* zX1BP-AsnxBi+P0la5&HPHm5g>&f0K&$juAf5JK5HxO5`rCK6N7J)9bt!K8+r3tveQ z9JV1W{TS0=IE%qR*JKsINCEr~fK@PTs zGzUU6AlOw3!&#hd%y(_}-$&Egg9DHXvlPkEp@@UmytXjVJF|;ZVVBQi_#;rg0h!*> zS%UY%^7iI?VOZ`l-SlcSKQ(CRYB0#a@YUF@VqoNIFvh^>)!eaSXzXh4SuwQqYVKMw zG=4Srt@_sTt7=}c8z&|QQK$ZVKQ=1Fyyg3@o*l^N^QdoL>bp3b=54q$i;+3NWqE1aIqFGil!hJ*$)J!!OUnr++db>;H-%prcueP9b7Jt!F7 zg+6D{e=o4%W%^L#zI{((UJyE3;9CG=@Jw$lpg}8L&E8BemGy)JTM}h zen2@L2{;9C!0Cq!r^5lKBsAI?r=tOx2sTSfjYY{{#TRW51IcTHo&~y%oEr3ajp)!5Spae=~oA`4h}nk`snxYGTz-W9b0@ zAt}#GJfy`XfO#L-WLN3Fr7Qsw}AU3_>Fm%d=}S6$+K0`H^n43NG#AhtKQ@V^|o13dQ1sw zXi8>MOuZ$!x!#goS8u}*Wo+tAn5KFQVspJExw+nwTvu%Jwthp+cggbwDE_ z(XqPp(U9oUy7VzabQDB~P7jHW*8wdJi8j_T;Iy%3feh+6ZLDTc{l;nrL>p_SM2G7+ zZLDTMw6U52(Z-rB<4?ixH(*eAZC5w(PqgcDjMLO$VN64%z=(zl*9}#m`7Uf9+v?w_ zCYSLc#y=IshZ+BL6d!4TA8mjiYk*(c06!kW`=5!Z7PgPql`_P*#nmw57FQz;@S_dz zV-4_28{o%7_-)K?YRCVJX{9R8jUO zmK}BgbymyxgGusBNhIeid)@sv-umhHZ~t?h^m2jpJV;L#BqHgV(F~T%FyiOPBwcui zSs*h*mftyrtvWox)chmhJ+P;*1y8%m+G>Z5P3kG`Wm`p)|3 zwe`_=)koi5AAJv^#mP&r06X*VMYzUCu{iP0LT>HDkW!6|c~^De&YXV>TDCi50zKLE zW~?=v*gy*BsW%UJH8Sp{(^<^A@<|+L_rC_Dchy({977K?OfoCNVJWw*ptf&|AkxrXrR@jU9Gs&Xz(lYz!FcH)?^AgL^W}Dcjid{OL zxenMobS(3n_e(^DSN$L(X43N^D}22b{;(DPh!y@Q!#YW-u!I6S;ZSbvdm;Y`Y_V^E zr(&{7H@$rs()st)sUlbO#USaa#HpKW6l!`nNW-iMX_RPs#H7hYX>*O@OpnfPpCqYs z0YpKj$0XsY#8xCwgz2SB016W*y!1E{NCF9JDvG)NPN2|kab)(jwYX}_=H%9*zh!f3 zYjJYR=3YdG@j|R0FK_Dvp6RVvY@yBM`kl;=a^6;HfvsyY-sCtWzd0A|LPaXfetYc7}X4ZB7dy&){ z^>(i~*XRxA=#Gmybr{Da-ElGL4ihj-cU;WM!vsvz9T(H~Fah&)$HlxpOu$6laWU}^ z5-?MDT&xQO@!%fuR8-HUa+amI7ByU7-2c?m40}A+f+hKhHNR9lkWTyn>wG@f`EoP9 zN)ECS5pCB-KvZ>Ms_R{8(=8^}+&$F2b^}lgJ!{W`K5N@>d}2aoOfE)K>14-G-EL1# zF>hddW&=ptQ3E-&p0L*ZsS%cTz`za*tTi`kgr$8jupX*Ue)sK8oNu|`;$ z6azaZu>H}*yAhVw#=tHmY&7rV6rfHFv_l4ToS?xxbn^)^@|)QI3ZA4E9B6udXW0px zHYP2c6VbY6Fekz;)!K`~mcl3B1UH}DZdxp#3>t!dPBkH)jBm3DRvV4o276l~h2~a^ zptac)x>dVH(Asbc-KymxXl*)$Zq;@Xv^JhXw`#ozTANRyTeM#UtPQBZ4J{b#|4rMGVc9!}(>Q+jSJ~5T}1Mqi~`N0c0 zKk#()qoW;^%x-Cl^=#K@m@8-Dn zZw3Rd)q`nIqc1^J)7EsAr+yn$A9|-eo`C%BjKZ>@6*z!HC=Wxd3sGMY4C~~T2%0Hv z!P6@pji>0P6Q0X6?bD;}BQ4Uu$c>S_tCIgD<>^%TQpw+l5NJ$WXW0qUkyNHy$PY(U{GXu*yYig#sRcL_ z86_n(V>f2dPL82&FJ;{%J?GWFfhP5aO4}d92tM3PS?-Re~^DV@Tn?#@zBh0e1^S0(UDx7_Bj+a9?Nc z`3dK|`EM{JaNi^dqcw&U?pw@#X*b}$&5*#|Mi5483@O}q7^QILzsnG-KmR>E%9W+S z{XRpr350&Y&?_eq`XNF!X4IHgW7OY45#Nqb`7VOo!O%UsAao}~KlTy23!xe_YD}v! zs%Up3R6c4qfc%J|qgNty4@1YUM(AFIYRsrHt;VRL-Nz_-p8qjJXgZ77rf6iP!CI>Kd)7%}*J@gRd{(`xDOdb;E{*t*zJO{b=GnbFa zmxQ^$V(zooBlp+L7AfrAg&@ow+oL)Ky|A0S3F_n_SicFegG+@m*cSj zvkw|(`Hp3lykgxdF(ZCD;xz|eA|%7@6(Iv&sUqwOh_I_x_Cj(_Q`;r=NypUU;gCov zs>L@Q|2H%{FpeL7Yr^s{$2=W%7Jq{?=)XlRa0dN%tQ2^r{n?233h<7@cn^R822TX? zhv84LuEOx#?{~u`F)Ydc0r_*|JHvZ86_Uu5o`bV+X`DCY=mx8wOw1Otmz`ZY1{uqT zvU9tM)1XhEKsi~C(Hh#_$7&LMn&&5G+BL?9sW}gU{&dZ$@Ll=`B^9easF#pVCSa{1<|XWVsqh7&o3-PU{ z(XrfP;AeNrxx^;UdE(@TW`{R+i6=>yUJOxnJJJ_=MlQwbt20%|rbG+;rBGCyd(Yzb z1GU`5hqJwQK9(Ev7z_Y3pDbL1dBQaq$tQ=e8So-zGNM}$016vOyCrH~J}n+TDUs41 z$WaZ%=QLVjW*t%AygfF+ft^%7o6lLp1>E<|`J?P)P|v?Cte(F|yFxu5W-~YF<|C?` zga~w#;ZQgKZs{iRn{<=Qsy@M2Z>sulc_*v?!5d#Jsn=N;nFJ^q{VGAW zGCr*k*r^D?3h9})c1lT>`xJB0PAtMSB|)Xh9D#Q#0wWYenMEIzqJUKseJp`bmAj?e zq~)q^Kgp7uI(8&U5LLGqk&xr3$e1HU`J`?)R>G-J7OLA%D)&xB&?7#b3h6gjs-ZfK zxAH@SDx@&z;mtdzxK3{5!6OuUv8bVm z!A(0yZaD;LSn~;jdJ%8P(*YC5lutuBJHy7xo{uY|h2f2Q)l>!y*!YqmgR2u!8p*D7 z%73Q=o-cD9=}?%A*KXws0f#pj|9%&>R5R$}<__xBoAj5kk|>L9{tUeL;Fu|#f#>jf z%ppKv?WK?o*o|u5?PSay!l6t!)=MT{06M>bjAH1dlwNnQA&j3Qj|gW9nV<}H)gsZT zIR36KF44%P#UWhL(b1*yel*HN721{AqNs>I?rsFsgQ2U~e;>4A2Qf!~JH(qqySaOe zxYG7rULoxwVLkq30WghSxeYM9W6&cQ-lcq{s^iqEwTz$fH9Cx+y;2dyRd+@{!jlZ|qTyu>Pic53hL@8DNE=$|1SgMcNb9n* zQ|ptsNb`b^VZBK%(xkScf&`RS=<=3fr}Qa+CvbiCYC_4iFfYAzc4+JR^wy1MV^|P^ z>%3z~K0LdY=M^*$zrGHFSXboBDAe$!`zAS}#_zTx5o2lGPx%=7>)d}Zxw&o*UjXz5 zydeXWM@rS_2pK=!4)7H_;iI@FZwMrqCWv!~0`Iy~4X_r(Fn$dl5E1=4u(@&I_%9)O zI0e=PKk=Rq6<<;UHB6;f7qYmWn-tj=~P&PSE6j@{(zZ@%r7+$wUtRFuH3rG+To!eEifJ*i01Wc9I zF}zm8&tP~ThS4+kl6R`QH{Z1xJgd*bgFQ#yv}>8fQmFOQAX`nWtpLQDLireQgs+Vw z;_reYbKE=OuCf(Zy~QAG99bNhib+B==N1FdbzX(h5D zr?XSc&GjNR zjPqHFR>?oH1tiH}9^MF9Bmb%ns2BC%$9V4*>A~*ENBvTV#_56RkC4~{suB;POsg!V z@>-)~z$coD`s_akVN_k4nT?e8pNk||;Hbv-nqrO0b^<^*s8pSWzfjTEj?le66QjIuu1$4+I&vbQpqR zOCN%WX=$nnW=Kp}kB8@v@#YRk zI(=DI?uCOr3<0FzHOkusN5l%w=IvMUAll)N0R1{OkOZnhpyBPfM~Plr&<&C}o)2j^)IiWBqfJVk$=YEfJ>&-N+qJ5Q+; z51l8r4h;+bT9ie(xQSm;DEJHfVCeCZ<^3gheK2LAN!rk!UFEMtz>ox2ZIrg5^>CQ&76(g*A{!2O zdNFm?{O2$qR}}Sa@+n4A<(p*rCSA4HZUV!P#2K=#PqKy->=9$=B$_DWA|01S@GK^R zXAJO~Xu*fylh7~i*yFgDT^j1|;ujb(K?X;I5@c`;Ut!&zix{fLSD}RYmV8KukgN|u zo9jc^h(E@_pC%gqP7DUt)nk#1GLIu65M-2ZiBtdF1iyVl+bjRCj+o@_1L9Y zV8Z7a%Rd1KMC{^oQ03jvVtB;4ZfdmrN;iQ|LE+?efV;c1GVSUPU!cS2kFrM9%eFiT zqR#cE=l-@7JE7j(Bb-+~hA_U@@M^4POqE{>>i!D=HRb5b)mPF#orx)ZVW~)>y&Cs- z!v>)?UCou|b{+o|z`NzwlHREdO8ZV<nD2|USL0c&KyFNtw^#oq)7 zt`}0x-O@5VHR)(azGfp!X09?XpC1#X)0&Ya=`x2Oz&R7Sg;8B>YeVFWW+IXllzbYr zIw%?6Tjlz}^og>$nJPv`hJDBvUzc1u%hfc4;NG__ZH2(K)ntY=8HEt5 zbUs+12;W2rQG{18fbZg947d?<<+YGas2{vDp2NTp>0$7?A&b-``q0w@^UV=H2(x(Y-N59%~#5>>t#`)?tE5z z0hf?^cB~xeDqnoIb6&n{j%|72KzI2IjCPx7Px&E6do=1}4S7Zvnc$J%!bcCNs^nD&MPU7ao z`X!5&5N`|%w)^0{584b{251VNnqU>Z(gd61b$FDDc%X-PeidTv+R@Wp{t{}K(F&$% z^A`1!8qV%bCwj;e)`$vopQ7QI2a1k^IsRM6e&hNdM4~fPJrm_%ZRF*675huOK?K_l z#~R_>U#Zwzm|5Yo^eEz`3%O|bP3T?@D3bgb!A^_7{)zagk~tV;N}pgK`xjZpcR~S{ zmOj?)V8$$cY%|i>7nsN1!nf61239RfKqGk84r@P>If$;5^H!w64LiXgv4zSv@%2$) zuN-&$*P_7X0gI25bLq3pRv_)A9BZT!yf^X;%B1oFqHnx?hNsBH?53aHdElK^9UH%!S{Il%xpD^V! z@&7{kECZio#glfUdUg=l$^djRoxpd)5?CfS_JeyL#(Jpn=!WgcEOy0o3?w6Q@UtFK z55}*r!PtOQPJ1w}UWGk49ovI5+JlWo4`j6mXH5?_Ums%+_Ou7%%P8o8p#K-N#oP}Ok?gc&!+B74D>Iq7)#x5GUS@6;O(8}_uLd@LhprGv zf{X9+J1~NdRIy6;M|H~NGpJKW>y$0M5%_6k1=a~f`N=CWR!ShL{9(a^&FEhVgQ%Uy zpQ1s>3HFp2^n5BZ<@pq@!6oND3r{zYg}KhDxy~8G*`?+>vfg5@jrGoF#m>NhI*HlD z&J~p*CH?55ksW+AxhS-Qj}9ynJIH-CHpzaFa|br=jci8Z@JvcGPO8Bq3OKysw}?h> z_-zKlVZ>EIOokB>;~b+3+WWKL2V;mAL5OAy@sxBrue1pEuzC*Cy^@1q7tYh+)s2tA z?arKYk>kvLv2N7xLZ*48B=bueP9dxo=sZpEnE7Ia)dnn*^JicuQTy`}=pF|O^JQe$ z{t-s!7=1E~Ze#S3FnT_tkA=|-82wKeeF>tGINnw#4v9qrwU-i<#ZyuXQGGx z(LuOyKqAf5|E5fub9HW}WY@n`iiTgbinjdXszh#`mI;3$wZvFTDkftoDc_Yn+XGQ& z9Re+xI|bFk=M!b{N11`o-g8eKFGN23J!~cFGX3=Q81(f7z&}gcqsdt>Ws4N?n6i9tuH-Wr631v* z{4g77?p1-DUKKTwB`5gWLsd?64;88d2L5VvsFz9q17rxiuz&K*CzK$vovdk`?JQVk zvwRmymNRQ2M$49pk?YQ=j3qr|OfbH)2v)?zX{+GFPjg>J$D_}3L^c?2n7+*OpXnE& zjNrs)6}ax)eNY;1;qJg&2RXY!Kvha}$7okM4~(=nUU&H@M2ssEng0?1# zhb4OUMH51gNME!g>SZ6HlxTv)=txXt<|fX;`;d@V2>BJ{PW#t^UsFkY}Vhu{_3 znt4EFN_!wFnz&%Yfyvpq@6enl9sU@Z46ABLMNJO{boG@8bC5(x4zc*QhFHiUG$F_c zXCB1RnFmAR%!AoF^N?{u1%C5T)MGIBU(7UqgS8IMG=}&IwChN{52s*C`-anwLCib$ z#0G7{WFR@n(b9WS{T2A29pCby z%=j8EIju`6PLcf#y zFYR$YH@!&a5XUEWz95=I{QKX54a2?1u4oSN@6rEh4sk1+vhz8FfUnUjlsbPn!;x=k zSLrdrIRXX3u1%XQokIc`3psL!?MUds+*dHd!iGlat9Yx!G2hhI^G3U(|JT8N4RD?w zr7GRhgmWm*_6!crZA2gUe_-^J)eMrcaKG;M_?2aqnIC?hq zwe(w1b4w55Ial2sJkQ+=oUU~3cY`n^a%QP?A5t&{{Rv;#OZg*UOFs@N<1@(^T`p(6 zyu>)@U+*OHL;lCHLWmudq~?-;oF?+`2zhs9zv4OIAzAv$Vr)9}m#@Hht9%p3Y@Y2o)rY{*tdkEM?z0?HcsghZ01Px75g&fNsUr5h1xXaX6x?ham$ zM)|1~gDF`@!lnrq*Vba*eC$k44s9VRd90SC!Z7oq4ZuAHxPv*jb}7_AH#MHF-?fBQ zq>8|EV1X1HXA>K`Gm~5g+#^?e12QsK_TaA4jEjl z&vO#TpOA35mPa4A7F75rFn{1j6NJj$!G21a6|^y)J&Yp8;sYo*+hS!yUzk1 z|2Q){hP_#4W>Q~QKk9!H3Y=P5C_f*$t{mr6Krsj97b8^?r|*%Hl3?%1%9%0~zgG%SpoTU6;(}rS^K;!-cjNTA9rxI2-bK80`H?4jUx&hMM zX{&yS;Z*f{ywC@n#JQ-)@zeuZ_tJr>n0(!iER?T@OwBstUZALFK9eO5P{mgI6`C$E z(NLaOdL=TnJg;;S!lgqpNRX1bzT?XMM--3qN#qcN55BN9$&*?;(he?)V>`y^9yd}7 z1zj7$9Gj4He?~rc+E^!D!^g58-57nclrviX2iV6qnbPOt6)kLi7#Nt3SNPVIqv;K> zy%NpoU$SJ`s-fm!YZ>RJhfa2Q+j9qBQ6kBrw8l}g{5c?$c`gv?m z=(M+Zk$)2^fv+5Z3U=!IAO&+ScBsm<9l7)hoZh=x1%otR-F4=(HGZZ?bxisXjtB|;!n zY%R~Q;0QaqT=G|RL}4=O1l7-zx3;jTC;P!hRv3Rlm9>Vk0c;L3SKdVsU?LI zCFxoy*Cl03Sy<*;ia`B?h<9R2FC9YcF}@>Ui5%B`4pB8t2I=2Kx(x)oX13`p z!0+9Y3qn@Oy8s4@8m#lmA^bu)z72uk;9TDnaAj;ZvsSY+r6oX)W}#|zvHyx6g8?Ep zJhwulEKD=Uc=e7!GsVE108@;VPB9#BZY2tl=GPjaT4MX1#7>F%>k@;ACT?&lpCNBc zo!TexMu!u5JkF}U1PV}PuEL-RE1zuz`%=O(S78YIxfs|dNcUxgWv;@6jUcT@fyoeo z^YW+#naqw!>G4fvr=8*3EP26xd5MEC20M{$Hs_!exKOEov6INvDO8S`@Cpd}KiDNGc_Tsz*ynW*NkZ%g6s|3^K ze+(A$LL=?LE(|*$A^%Nya4Srl^a^bKarr$}{yq>eLzU(C!S1Agc?gTIN(QiAH(=A{ zkrH6dYOji^$IF)f2~M-pr_-5ii5+n6Z+M7_S)ex1eOV(ON{p>Z^zBWvnm8yic8Z2~ zul*L9G|xW3Lp?XpFMkmc$KL`bc{e3Wa{beowgHy1_65MWsZtdQDSwQ~TWCOE#CUIV z?j3j!4*I(?qZxiYgg+++erqFr9#8U%#Cfe%2Bufq?^0E-w6!_mD z?@VM?BB&it+nKt>7dI7RgvEszH#!xOuUnbuhX^Z0c}~i68J>f4Kg7~SFnxtT$Xa6) z#l$I5IYNh1V?T&sG2kuu(=2%mXTh<7m6(OTM%_La1u+-=4cf0Xh>?I(d4NGN23Z(` ztS;+_F~E2J&9y3NZ|rF|7=zGQAj>iaSzQF8G05s7P*=VS7P?C<~l^BF~`xVQ)1%NA12S&sI^bFF# z{W{D8AS1>&V1YfgVzq4J4djz6Mw0owY~rEwFD?(92ObtHOGppTG7Y3Mupe>^$b);s zZhqdw%?xvVgO*?*T}xth50*oqGPt!iCnFa~bI~k2{qBilUlFWneLb=Fjl>3OTd#!V7cc5bE7`svJ&Tt0Z(m48} zj57+7Sn6huF*39n9A}xa*B;E`Z;zVzD#n+Ch%X_I%ae)2;n&vFuO;OGh=h^Y=wz+qS8CcwdyycnGD zCtyei23lrx%Y&!_d8P9KRKhoV(1TbA&`w5yx=^AgY`Rvy*%a+^c$BfWKzp()R%dh@ zlzW$1-3H|jC@(d#iu@V8v{ZHmC*n%4Ll$byoE3}pU3v}DWQhq!JA_vCOUT|aHjpVl zlZuont%h#;yWjzB5bra6AU8bl_k8>xkN*$jAK&;yYqQN0GO6LY6RsU|PR+e=3>HOz zi#Se;28$Slu;O!AuAQpF3Zud2eJJG~)a%#X^c`c-zQz_>xDVxJ8!4Q;U zP+?5d2eS{ZIz`8y_$8;r+=GcR$`>x-8-V2bFiOi2ela4w1&KNsWwruM1NfUQfn_wx zYy~3lx8i_rMWPNznXN#&U(Mr#8>J1uj+_;Xrg0LFA?Th+I0=dR`-00VxeHQLVJa!_ z=*g8gLIFLabGq)*pV)oB@SFoBEN2H^i1JR7@n(6u*U; zK>y9p?Z+0FqixDfxuvu5_DcKUiBncjy4_PaZ?hIL8L4MV$0OL2S<#&qcC#{p@8Coh3kShHNt-nV0v7^$xi<)x z7VSRbFr%^I>`K!=Fr&iT5HWW4I}EDz{caTeo&;qidFOwHV}_bM>G1>5kn<+2y{s#& zg^V7N^)8NDax?gXlAPx|34IBBqyCAkmfDNo>@cVDx-%O<}nPJu6|MUChlj&P^YCE-^I(5#eDq#+91Ns4@ER3vV zcO+89*-7sZ77|C~HPaD!?eifbac3?~(nx7)`DcG?>QauPM-mBGDnY%6z~u8m;12nSm!6Io_tWF?Lrs@LtQ zS+~9qF48PqZRVkBLE+KTtAvZssQE1B%Eg=!`6(o{uv8sua@gsvK`as)AaRC>p0tGi zg|7G*)Pn2_C!$Z<2|N2Y5|#o>!N&#?jeF6VW*&UN+U=Lh7k(GZ@Q^72cO`|HN*d*-z#T{$ zTptUxDYqeQuHw5!%HT|sQG++)hti!%S6F8wzQj1PtqR7`35Z*U%(0B;QI#(r!qbJq ztjjhhQQHr#$6lm1dBbZUfEXGrCfCz}H}+iraY_QgN0&{sN|w7A9^9{}Y;S4mlOvOz=cX!!S=`QO2Xaw;WnQ_J%7}5N3^vZ4En1(xO57v1M%R3r*4LZY+ z=ZgzZj`I*nu(omR>X>t^-;ycDKh?tB$@aV%OXH@y;F_R!;u2{5CZ3{ZOB8Sdd*=+W zs|edn^7C9wSqfJOBX zSm85(MfDKae8Qr72<&Uy02Z~Cz-}dMN*O;PY)Tmq5jLfaX9$~8#vfVkZ^CgUWu$Hb z?BRA;FJX_g!)k;*+72t$?K37GYljUG_INvN`L;+KwX>A_B-<|<&jR}+VbORN*e$F_ zG@b?a9AQzP3#^M}M13x>g@lEDuJhiOd)07G4fKz^&BV_+CO!eWG*kl11Bmx^Y7f6f zJ!7q32!Y1bRqjlzAQ20ItENt$U|B|!+#U)kzTSx=Le(b>d(2hJI4LwTPSSJ3T~lxu zDuyWZ(sda7Nb5q-ZJ|s^Nh)*D1~%GFCM>@=&#_h(o=CJTl7t{6Jz%#F}`*-sa&-OL`2wEF0ytpfD49b8uq zhW{ku6zMw9VX?&wD6v(Ip%4`AZ^GJOaJY8{98jpPFL`TdnXWGofUq~bTd**oH@&No zLnDQikzLDEhmABn;9{VBaN zfyMhXdSxDn_viG=loIc~^vaA7?=R?;$spce(kt^oyuYINM;!Lzy^mg!YW3bvFINZk zPSPuLL?S;x?};Rt;(d_blS1#W;T2n#ezXJ5h2xGsM$1k-g#heJWqEv(ZY8;hi@U2_ zwi=`*6KLE`)K$caf1F;fOIqG<>E)87-Y4kgYNX!Z(aVKMy}yT7mvk1XE+V3?r{NL- z;-+Up*dO4U;0jeI>8%f3g*&KxU^T%Ns!q}ygK>qblk~=5T%qbDy)oF8Acl34_ZW;^ zM4jZWK0hpj+{RSc#e|Ur#^RCN(EOsbccM4zB&o4@5qB1S9vNZ4kl8y=WUmFpeiJV>#AHZBzEDmJz|&wOU35WB+Oy5saOzWkfIz;i>KX zMhwlV$b zi(nkA6IY`$GKyu;L=z{Px6;$GfWz4AEG-86ODV`@N&u&EokhkXhqJo=*yq}E3FmkH z>`FYKz8M)zg?)ptC&vMOC0 z3kV6U^lvO6B(>7Xv4D{1N>9fELIPVS2NDYiNo}2MNGu>Ex^?m*v4D_t*U2130re-@ zei4jRN(NUYxR!#<=vGZ2fgH(UAi2_bAcu4qNcJ=y$gv#;l245Xa*&6CWLQlgiRA>> z2+@U1h?hh<<|UDic}b*WUJ~h;mqc2B6^5SXl!l4%5!#Zq#PV6tLL_7O~$ zO(}ygu|WgxB5RW@N-+yS9PGBSbsW4hpbWmvjDeSz<5&R z^0xqfD#}sSO=4&wVJv=*irM|=(_(g4$fyLPmQfK34In5&=^5?iUH9G>;TBt!1|Fg? zs%^20nA?Ds%GgC15&jLKQ4a($5T&>(O0nu|5m(JGq3{R8+fbhM#EK1 z4eA-|1=j9wv}TbXw5{3J35`JSa*@@y)tYr6;I#W&j(V<*)iZ75AmK)|r&T}dK5Kf3 za-C1u?w0q8+6KEGj<9sYp`#DCWP`u z8h%HOkJSLx3(ka^#{Y8I_-z(d7&hU!*?zB}O$*km$Fxn^j*z`uZz5i+<9Ln4@p2%5 z7er2u5CLQVV>E|h>XhiJ4Z`9z0Ct>m1=%IDiw!CHQR;&8fd&xV7I+xA!@<)8rO zEa%oD@ZX$Uu#MjU9fv)%owJ@_HS^Ea{{bx2o^*mNZ&vQBbv9gqD7#*by5Xr9(jwX= z59Nf!WtZJAa1tPe&lc`bNJDnnHzkmiCDRjr;y2?I6I7vty=Z{9p|AR3eR1x(tgGK8`W?iLx!7J^!5!o! zL}h>5y9nRLyFv)*B=^IoVLaOYdkF7`g+O+4hbd=i58DvV<3gPtGY&y0m4;YWXQ%2c zk)72!SI^ao+taxYE8p)^ga}QQcRL*jWclad`{t0Y*h8 z^@IZCd2yl>+76|S)sTwp@0+PnEzMPW^wVJQ1}_FON1cjS@KGq(2A0 z7~y^~Z13|iK7b=>8sF?WgJayg3KIaQv)_p@Ji5aXL^F-Xkr?$c)9^pa+-&`c6R|FK ze|D2FF=fG{6mWXaf~%k*U=1Y1NSyx6_!lb(f+dKQ?#DskmVo0?fRkfg0h}P`f(;16 zMKpqoOP<3{#s`a$9bW9HTq=^6xKs6p=3xE(ojKKuaRw92L?{uw4-=BVgO6VpVv zAfXwRwuCvra2PBI^T3CiBsuWzUrRFa6F{d_@Gmo0P{5{w;%5EIs9#;`M^NJt)G2G@ zd87{@Z|xVyf;oxRK%AhetoYC#xFjR2$n;joN~jyP0`B*d8mKA^f(L3br3rTsxAz6) z+L#9cQY`k2;M#HfMejRyJ0a{-5;Vy8# z3?Qcv|G{Vzi2pY@pqctRKTUeP8mNRBK zsL}erseT?Z%hl$({genIoTtokSap8@TBr<2O7|0X{W~`YSmoqESpfgyX9IYwM4aX` zCGwzJp;k)=CGwWste(1nZ;R@MhM> zjNu<~*6h&eJnx~a^zH!;LC}32i#8oR@^KS}M9T@l2|9o~?G>)TiuBfKjM_~G%KM@i za^mI#r1_M03vg>(fhrazyRlU{0!>^@dvbhfE;d^m#aNUj3y(GNLAD6F%w2hN0N%Pm zh&Klj2U7CVUc$eWH$;x0`u-yP(Dq%5m4dn(yN{x{=Ro{RiL|`uhhSn7xa9@Z_k!VT z{0aHwCq0<4eTX<^V>sceygw6`i@^c|eLPA7lwh7ObHqH&fCJe?6iYkb6DYaSs!Vf6 zHlW&1}8po@k3lyhdv5vwwkFV~hacUU;o$z-eVlkZmNKKr65Dwq_LKbF?k>6F+Jn-hz09*fYkaj{+WzS>uUco zhVht`?;*@~(kcHAfD(-_Vg|=mRLjqzRd~0#?X68rAtyNQ!^lO)+>S}S(b#?Ft;??s z?7DG*w97GABq&OJqn)V>yfdhb66YY`k--i^CBH?{9*ZVS1 z8*Katzqy3}9t6P5t(rbu;eT6w)h)bO?4g71N-c0x( zLp1HAHzA_82IG8iq`u=@F)w*9>PGZ;!nzK4ox}c)NOvNe%neMTWq8f;2Yeqp!+AXs?UdrUM=W?cevZGIf#PsoaomD z?UXF8gEwL^S*Ik?c++)q;e$$wZ@O*DRlC`dGt_=C<4 zNPKWMJ7tyntUPHI*W;{ahrUb79qi|_KFSl?O_n9ZB{z|R6K{`mBTC`FA-#5!CC*5G zaaw~&4|xW8E-%J8Wr_I_r%Da+iA&>7`ZBoROO(4U_!>XOPe8wjhte;{dKc=xiDL!4 z3!;QGJdZeS{LQK0{SpWQniGOMt;fkcUb|B&jxPg5Q8RK#9SzsU85@=R4c^ zx@qma&^qQkZD&24Z%oJB`X3Q>P^H_n2Txk>L_OXnW1g7%=c8zyIOzD0S@Uk?SV;-H zmQS~_Yw2i8$y6%fV9tw;`reJvsK<%8Bj`0J;=+3#@%ozOy*ii&a6{Jn6AGV-fGSIB;1@6*w$Omz(xXN`M-cLZd}vB9c^j~s3W&A{K7)j=Z(_bB zUOVD@9^1v+0jq^q#}D?)+v0&2`XJq4+8rdKj{eP-`{3mM}Gh-B>g%-$Qp51y%nEGkde&1UPE@;`uRSlE0$5h-`I;Ho*E zGtOf-qby^%@{$2P|WY*a0rQ-X!srVA`qWD74D(y@<+QkN^qZBy0=@7d5dGx`B9EWDFT||i8 zWVrteEb_St0#ZU!Q*s}OY;}imC3CGqFP5Ru0jdRT-k5#5k;Aol1)ScUk@5=VEG44N z1WOXjY3wMJt_E9*i8A)7;f}&?vKHWY6OI4GIBDF=F=hBhqBwXSDD8Iv3@Pm#Kx32^ zLgOYu{&$#CXdC4;?~w5)0Zi@jSeO`k$+={cA8fg~wJo{W+op7HYv>?$lCrlAlwLxY zRJUhYAO3Ja7vcV#(nZJ=gR43o;$(+`zPYO7H}nqDAYU)>06|FT{T+`sAY#O`19HQK zw*}Ns@3+tkE&R;@I8uGb|0TwXe+>ZZKaRa6?frw&9&0b{aeCV`zW!xoj7}`06Fs@9 zpF4E9NQ58|Ceq~<=u@G~8jo~2MxsfOUpkFmg}g4}+yITPfJXmkM585lSIZC@z3i2f z?ek)zG$fK-Td@=9WzBH@j$i+uY~+y5p)Q3i0KbgQdjrB1Sr{Ru)$#lMBz)R^e&p8} z_nk5qSQO4(pr62&JclA1=fN%d$-6;$rs+Kkq8B00#(c=4evLe~n8O8vV>RW=+h8wY(4;6X24IFaA ze~Z!VCVzEcAU*kY@-7#%PGZy5n#WkO2nELN`;eeo;`0AIy;=1d@V3>}5c zaJK>Kf;vzTnKIra0P)N&G&X~`gge4ErDY&Qnu|=?#;h+j{fC~a>k7!S_ji=5ePyGL zdRLj2Xp8`e23AJcbo#fU$o0e*CYqQG%vMey2ObewAv3n)wl9!Z%GH>%keK-Y4xZ)` zGhfKld^?&i!X>>Do`!^}>?LukSZyTsL!J09oG3g$kBP#=^w=_Q%TJTPL$kp1^wZnj z+6JFNTTXbjfueg{+H;X)e4LfZ%aW&@~_~?$w8Y-=%1WgkQiS zpYZeeZQMm^$5B{F#6lEXMAz#?tp*Z)ij`wJ%26bp?k{LO8phM{k+2SBrJ}r{ zOv0%&q;>G9DFDN`yq1Uz?O^;lQ*8$FmJ`8OqBLBVi(^s=eyPL%E%Log=8I^5oR)_~ zxZ(ogtsUr0v=+$+C#PCF!Uf}E;^_K0e7Jkb;~VT=m?EVLf65rRdy!zXdtq?f?nMF9 zcP~3NgIywM3a^T3y^2Uc-%oc<-92;%&s`jhE71hJ;QlW2@a{Gx1#4QkGT3-i-i#_kkb{7(_(2AtR0k z5ed+U1Ze;fVSC0i@rN)fXEatf)G5G5w&*_0cE&ICa%C2`KJ8yADx zp4>_B9>8LE2$?G?J~r8HZm4LJ_K99PeM#sN(}hlAtbyKpp^8#+XlF&GLozJwSqDlk5s9W1yjGemjbX|A>z6c zp@E3Yt$+ONjx$Vi^s+hDqu1mmE}Y_LE8%F}SpXG4|2TtjEuA|24+GlbOsXxno1Ekb zl5eVU1A^q7U=1L41nT`%h!f5W^O-YAE5>A}O#mUo<=CQ?t=|riw*&B@wq-fuWBg2|0vB?yq%9=LQx#I58~fx}P2c(yl}HOd$BL)BtFHZ9Mm zNE7dSAAWw2rR{M-Q&lrGUM$3-$~z*Rwe5rJ%EJk)^A}Hv-yUXyI1tcehkp!(hI#8~ zR&f>-8naZPVd2ee|FjY}8PZAUN9p1Unu!&`17@7a-gZP~_T<^7n<2wvcV`+)0oQJx zV|!Ib!mUunac)RPLWoUQoc86{a zD$eG-rvL|5C?Cf?D%6SKb>ohsF422YZ0no$l0Vo+ErNGv&vJ}x3huW%=KUqOuXg5Q z4{Gn}Y*@)&OgdOt2P=cWbjq8ni!pQl0Sp?SL8EQNBZTM`?_HSs1G1*#jr+^jBFdt- z2c4vQ+S$P5iioC!lPK$|`8QRILvNK`n_R-_{~R1X#oxT>KItETUml^~7VQV?&MUba zCP|n^I@0A*;{Fe#3Gm{G#3EJlwn4IC2_o;E_OAkvQuwtPd@xyh3oibo4Z0w)L%nqm z^w_jGW%=y+0e$?9y_M8{N=)ukUxg~V^|#cV%py92&ss7g-T?>XqwzT!@P< z>j&UBR%M;AI7E$0GB9|U0A0i+a@|E`BvIS5doW%0HvzOhoQh^G9VypukX%33o@-fd z8WnBYVBL8K%l#;RW94Em<>2NL%esm!uCp(vF%)+mdPM!OD zt02d}YfU2WcSm{KJ}DPPvMD*;maoMx!i&_@h1fZ3)Ny498A_iS-1 zV_CQQ#wEY29-pg~BqWup9zR~~8@p$V+(um8xa9Hb;=Bn=r>l#{t2-hvT^Y-#tGh0F zToP4l)jhYUYf*KtEf}9k>z63{Y~X-*VZkNT(IT`Q$NlQnJw_KvTxWCtKM`qFR(uKL z%XKDu+@3Y5z7tk!@bx`|oe3n`-6RU4=ft1fobOCl+7lp$RNtC(Pnbhx@cGgTyfd-6 z(3vbx&7{(v335%(TayW}DpNX8@s?v6$XY@DJ^$fylHJh4cJF1UqTO4&i@UW4KaB}Q zZtY2DrL}?|*)p~E6X*2~mz36WdJ+6nz83i-tIHDZE2M=%!#~mJu2bdRO z#ItJd3*gW^+-~8y)!|XxSdmRtvm?n=wIFw1bW!)na{NzWVhm) zXEb10k}Y8MFY~1sX0_`Ugk`G3K4cTwh0897k6ESNYIfAA;EE0Cga8;JV7K!T3P92Y zU?YD}c41@*;|^uyNhrC2V;8A!;WG@+Vxv8PVFY$9(kD7 zK7>|Ud*hSl9HXD#1I(8(RnKw|>is^U1>EcP4CRG9uarTP#wvrh=^uI8t!74^(6L83;0we-BR<0BluSuOY11)1eqm%5 zdkNc+{ec(~WlYU$tL-LRU}$d+r#;#+86K@*beeXOkzZ+X&`_ryHa}m8VGgx2@jzWn z2`K}&-4-Ekc~J^wvT>#Uq>+n&>$Pat1TG;T%hkGVZ*Q(V={X|>2lk<3*)-@_YU$&X znSz@bwKE&>j6q^Nus5)+{%x&{%AHes2a&WT=VQ-eOoP4P*cGZe$QxH6Um127S%npU zMY*=OQek_nxSC#DBhB#JmQ3)uO zpd4%aIfL-9^Vtz|25lP}7B)`X@3a~VrL(2tIgDe;GW zZcPn>(^xD`6al4sObUs-Cn6V|o~vOrAEwAmNs;MUQ%uYYa_N;^iV4ZnRs#>LZ|1%x zM=%6_R3?k0aH4&=``e&jf7u(nYr$A2#; zZ#{-EHE%VhpEGl58xzB@V;~-m-;3pD(0B|-{7@{F9!4O2R-oLfJ2X9CoJ;8x&Y z2c2=yvst)VH*7-1K5aR^q}TlNkKtYT>%(7dnH=`b*7ldv%GuhUayU6#+gZ*cXKN#J zggRSWCs6_AR-r5s( zQzowfy#t9|xy1% zcuay0?15}+|BlyO*+J7}3%U_D>o6`M^$ug%-O@85{n#p0lss=j-Yig_h1rsalYuuK zf5ESQ4f-!O<^@w(L@_Q|V=yAKPcWD%q~b1U2lU`PB9L5leY~VzZKPNuOdN&mbY^LF z)IBj4f@6^dXCJ&pmKRRe&)o^qiS zh+V#j7`-IfBWuhtaD&YvR7y zWH`e>VLwCP>in_`ki1f;6qD8JD*RuQuWfL9SCvvkv*(0dF|}U;F-Ti;_?wSE_HS)J ztwFwafI1ee(eLVfZ6|dR4QU;)z^j8u#(`L~a2X@G-LRq3<>xvwtA>&`wt%zj474{m zc`W0wlt}GIVnP~U!Cw`Bv`t=wKk)t5UibrX6`3T*!Ycfofj8yr&j-eBb32W&7*# zE7#9+djH5wZ+t0qx{iBmn&9$Ru93sMBt;xt)82K^k=WztL}5>lW{1!pCQWBb5kdK=ryseXPZBDH-Hk=HQ zN4#o_O+!D3MB3Q_g3?!E3XW+>5tOX!KIxXOSIkm}{wP>zZBuDtg9je(7?TO$I$Lz# z@#7at3t^tjCP8(4@pfELWi|;Q>1~Tu*5sVjdc8?j{Ix{Xbp}My}Efx;GLUyhv+daw| zl^qPCEdv$jo-O_-$zOid)~)$K+2QzM5Xa7zfgX+78^*+#cddia#{6fiaWqpcGpQD9 zs;b9tuT$;kx6kA{*W@}+bDi%5kb&$>Gu`sp#O$Rxa~6(=t2ME_ZH+Di>gkuVhHDrXVg3{dQfyyP~18Z zxl;Hk-}dFCj%d1^;Eckri0;95|Bn)1v|6We6pK+N$7sT$T3yDs-DD72WzF#tshq7X z#rPwzvPP4MrymJAR^dQ|hV}pLH5Ybh3Q=DySb95gVlvb`Dsyns_Kp|i8+YK-dNc8G z)O~u)?Z@0_Fq4PEbUzH!B^u(EbV+qfI^3Er0g|whfKNXenAAaFFAw*fVQ|5OViIp1ChtOl{(zSw9+aAZ^;*sv}R({mre0IC?g>*3;o#!wBB{ zSnp5Mi2Zu{D;hnikzx5aEiQ%!bL22#hWs+l;Lm{9R%GGyssKWx1#U*w)d96+e6uv6 zPL!ed;(NWwK^QUXE*S6GIaj|ptdH_O8t(%Vk9lO>`4aD;C>{-j**erGX_eIV0m8l# z^pW=wc-2OP#}Hc^keM0I9vi%M763RSphWeV&l`0raJg zSMbx=-z4P>@CT(%%v8)(vW{CppH{|oNox`vnHxDLrNaZQE;!;Vs7N~|E$n;AkB57u zp|ozhM|1VpTo&$=dd6hfz;dN0b@|$!ai9CURCyk>lrB`2v9TT-6>y^)ASab==OTthe{uAwLr_hr!z%s6Hi&UfY(dYGMh zwmQ8biD7&pF^nrDhVcw#iCRorv5AnWttc>*%dh5+{(Gt8hxCp#LlScbf(J~!7QPsW z=O9C@dE*?*Ef$P%LKsa^>5rMB9*!&|x&&1G26KWqg6j@)y4a+audF!@;J8}pP<%bR z1QC@cff3a0#iamYU4;&eE*Rl(;WN5$cl5VrCB)`cL%4ZW7k19-Sbci`;|@62H?}S_ zc(54OM*L_x=Is3!ggT^{;*rBHH$vhKR;6R$u4e<;P3v+*)fPgP=@A+^xHrV4>Nk}K znP4+=vvw^fjYv%FYPVMET}X)Z{AhY?l7i^@P0;vibn~h%2=?3-{}_ZqYvlym)4?H#4|@W-vBXGv$pDIRhBO zb2{{N15<2U?*XENkD7Y-wzSGx+eAw$nrulOvBpZJI`L3RrPfi_l;{Mu3`aU+@ykT~ zGIk&fSc|s30c(dyBXD+u4jfAX`g=&5zukB;uG&r`lo=|pEH2j zpEH2jpEH2jpEH2jpVPtY&uLKfr@%~q{udE#@)tYB@ygCsh`d!dLOI=P{2gq*^w*BF zE0=NZV@D%vnoquUYwI?oA5=(AKY47WG-68Q;9zGwa+HtUoM*DAKf}iV40=NEm4L0F z?gO;Vdt1`nj@BU266BMYua%Mn3G5GWOpEBaN%vYg2ewsq0Eo5pQ4TZaz%LttU*^HD zRDpAwWA8)L#-1kBv4erc)WM))4jNF-*SZkMtkTyCArTWOg#dxyq-5vhRNBTK%44~c z_jL+=Xb0ZcLjqd5pv;8NKg&`$m)qex8IZgX8omdh(+agW0bA~@c zz5!==C)~Izt!>*S;f5QOa4-e@hI||&7*6Zu@L70=AY}TOg)n{0*zkHBm!C#E@?VJ2 z9jH<3E<_42zB}f=C+7Y!-FA~v1vk6NnBtuHt^?OwxZb`AKdqlki^_~(n)Ls*#el9t0e$7(bA6@N@ZE(cA@|K!K+Tdq?qroR-1DabXGh@P+N4 zAO`V*JZmOA%PmE*MeK0L%}jAB@i?%&Byxkd&KR|KhNw7lC@7+DSQh(83PVRSCq1vc z!1lA$-qfqG&ti0_(#O=*cf!0eY6I3WrBsFOZ(AEo`=iyEuhJ=an7Mj10Igk97i{dc zOj({3);l^1AWPIVgHH7T6>wA!G2bHsfd>mWu~0T~;JU?shOlpVntGy6%%$IxPCSbE zu<~;nB#Gh+dgO70*iHV5gntBdBFt4^z3gL%W2qXnAQ`Tm&R*JNRzOk`L=w0 z7qO}*jY1?8atWkM3RJo9p3Yp`E3?~l=g75GG^MzxLf_Z) zIuWW*Wbz$Nyka?vfIS^Nn;T1rI+ADK1B&O5PUES5k3#Jxe|tw@&qqhkiXPevDFq3} z-jj@{uyrBxwJzGuuM79{r>_q7^G`92-FzCKASL&A^iKhEKQIHB`+*t2+z-qE=6+xX zF!uw~!Q2l_gJM4*Ff-qtiR#??1Ki7QM!RSm^{u#sZWA%qIIXFPG)l;Pwr%BIedoKe z6S^%YrtSG!I-OCo?v%eXzypQhr*NR`+o0x`{Q=aZ^*=xahUT?nc|+fA0Iw&QCgK~g z$lF8RcF|o=m%qXTonU=x{RrHJffWYQ<*!1Z@S82^r6#j2CX4RYViG1yFr>g8@ztmjX}kz3mFTjI=_!@K z#mqzzk5g}@trRV$6a*B%T$@|p2nI&`=F(Fk6jGx;kSZJ=S4CFqzmXm^jUT0HP4*QJ zuvSLAVy1UwyJ9BT@a>ODQ^ns6_}hp-`j>6NkM8J7S?t*!Lc0%?i`lKMXOWND@|Db< zuf$ECiID>fQOvhTE0~Nr&36`rStfdc(L2Fy6lb-knQh`0qpW8$ZqY=ur9#ycm+om? zr!U?SN@Zdv!h=#*EnDm=mXt(kw+@s_ZMV)SEsx$53{a|Cmkd^%sqGOUMwd(E;qu8CU3_G!PK9Z5}FI-22Bqdrh zsggP&LH=c4VXfdqWO|NHyEE0|sIWWJ(z|wNMrzyX4ngfPLS#VhnIFH*kY7#-!xQg@ zN&GR;#BN9jg$9nUn5#3?ZgO6j%@_=jH91cJr9|oJ_M}AV>Gr0m9(DUt_iS1A6sjRD zolo0dKZ@6uhG(0&XZyHkAoNJe0!~!|!owt~S`kKzscSR-j(`M%zQ{TGSVp=_uIa?( z%EsaV6yfr?@G94h}wyl%UARp(N)8xRy9X0ZeNv7L`TAGs2w(KC!w(v1~E}*z3I9Y!JW6~UL zZOF6^-*Ne|QKX`*4$&3vY-Lwi-PFAR8IBVo#c{$fyH(Cx(J1y4!JasjtLZqRL$O=piX1)(*!U zWqWL6mF>k6p#WCT8^-wXhVWxZVgvwT%)e^}!YE=T#1>+x3<-N}Xf|MU;214cr?ou% z>^k8~oSrsW&A~PfT&rvV3!#_>kOy9fez-AgR~tvIYK2t#T31G~$bg`bTKZ(zX-u;# z(tJ|J3F|{e{SHvn=hMNem7ZzQ8VptVKOVd?y#40S$N-y?zwnc6{goe3kN?G&z0Xj7 z8O$%kDYj>LY*=!?{14zH`(+7)rfv*Gg7IOl9nBrb4JQtq!K`s$8mnW-F*E>XfMRO2 z2x5EFL$qi{S1R??HKcchl_c^yTyE~c~|^m404r~#zF>oka7(}R@2lqRT&rBj?ERz z$#_2iBaSOOq-kgyUrJWbT?I}mk-PY<$1DXfm|0JgWdY zC+gmF@a@MRzj^aL(0mCC{&tMH3B!>J*`~$g9%tgb0bejmR&8T3na(th1wS|_uDwIo z@u6!xbd83tJww-8alxt<`5YEP_YYl1gszi9*FoaaG>g!FgI6XKBbE9VG)8Blelr_r zH*%HIb51$oU99@QYMv&{lHzb1p0YfEzMKS5fV$V&78Rp@tp@{H72z17HWqIf5y6t3 zU@^0z4S_d`#O2L_tFl>mgQUDA!aOv>0F~&<8uW-!xkOl#)5N#KhOKvk0t=x)V)|;z7CiT2RFFg@unQk5y7M0$8wxStM?iEi6{JXqJ~S-Q^}-UrUp;BsQ*$V#H)i z;((YEN}@_IzX6TPrMv)oVAZYUF%3w=) z8+UpP+bVpI27nX1pCsB?1TZe!UA}??cp#~})*8!dmxiXW9FL)3SwX|Re&bYerZ|mJ zW|Y-~I2(}gjzC0OH=BiEN0fpEb|-$4t({GogtBb$OWD{In)Q<~SwGF<03?`tI9dwd zWR^n6r6lD4L{DlOk9Tn%A6sL0K}4i=tS6B6CP_=s%Uol_ zB-7VeyBP+`3LE)kg$=#3!iK)pIh>5gMM+$!gmH{zBWvu6&A}2DTVt7A*H|p4fwY>3 zv?`;JaWqbs1t0;Jj4xQy7}6wUXE|FUn1kN`pvfE`4VrC9z&e58{3v3f>-Yh~@+`us zUBdcKh?$JYx)+ZyOF(-r)D1L5XLE}WUMQbnS;H?8<5ZN(NV-Y(J`H;pP z`cm`b4P(*KB->e#Xq@r_*)#8pkhipdQ*daqE;?y(;2Z8(k5EnP;g8j;9R@_1qD5?R z7TY9e8&n#P^8LN(0p;ldjfcai4cuCk-N=5~9|iEAX+InjVqRLr2oA^7rv|~@Qi_K7 zYB)@!#Kssh8M;9(y-V2RT(mg|)Qs^mx+1=N1!H1(^6Sg++*3Up{)!RQ{hXtH;fk*Q zW*M(%A_uhhN7=VBxNt!OQm=m&7ZHQ>&@CjTyy#inQ$XMEQCD0tbijP9MX7R+JXR%_ zz=7?N1u&oLNtf|xs_+_VxxI>eu1|x2wGKiK;p%WOJ&n_Fg;nd-aMG0Tc_JlR`%j4r zW6bA`E16yYyb+R88iqRa6n5pIw)_5Attis*FYaRbj+D#9!n{>iT zQm66XQ8bJ-&IP_9vl{$kIa|r$?gA&Zc`PeyH+JAX<4d1%PTu8fFP!VQ0l-O%V(w3t)YS~@_b;ONkx%#Ksv@(6s zU>w#%ovHdS0hCj^If!QJe+hlKpzaYDb8bIrZ~ppw;ASM5yCul42&uS5y=YzW)OVfa zlDpv(ObI*MPPGdi7G|(+tY_U=W!+e{yl$*aN`T2G)@YV z)OIvQ%x4ivrT)|Mn#H`@0z*tnxbe{#HS;1zwsbKE>AQaxXiYI!%w4{=Z(P4U<2^#B zK>Jw&jG&lHW0cgbRA_NX7Yh*3YpZVGh55_eYXK*pWLD7PuU)uA+X$|7Hh%e>O3=iP% zfFJL4SleO#1#l3aM7OsIgLe=*{_?tnx-m}^)(4RG^Wi+*^(uJnCUG8Gso!d;+PzLX zPFEfYj5`lRMTOFXaIs;c1Jmj^akZzUGxo>0lI@nZt}Jeoow(o(o7QZq@n87eh!u{R z;lqT%ncr2`cIR20tSf2ScY&Ft? zh*{df#1tDkjipofojAK=Fcym7g3Xsj{q5{Dtli8|qVgq`(1R1YL15$6YP01HaEm{M zW&IUvcnGrKfhT=YFCj13CA}+Iz(c{}i&LGA#{g*^fyh9cAOC*ainG! z?CB&yLZQGnOvoJ_J^V@%uq@=Jfui(7H9x`|o0PTwJMfhC!?9kEzWoBmr7XkQ+BPP} zGl+p_q^>~@c^8icUB)JrJFGOjo{^v74&1pQ*<+ki2^msC?m)g}VBxhJmGQ$SZ)a<6 z1}#m#>>`x+MU>}AfrlmZlhjY`7%e{QZs3=m`V8F7p5}}Q5eCwG7imZapVf{+A$rO(SMbVj%*8(>e`%>^VdM# z=*Y^{;ZsT0nencZSj>mEru=90Xf8}3$f#(%&a8KREWfvERO}mMP94Q@5cKiU^dwrx z@sn(g@dLs5xO|hXW8~|$j+Jk!wMxF})@u1?TF3L-WQOh4>C80t2-^wu&dWKU7`{nU z@6HTx{a_4Ns#oLjP$5@qhWdAAJ9FL*rVaAec|qKlSufYrD`o1HHucJwdS$g`jFXO<3_YqUixr;N_CxQEyghsRJ{dXhC{|kP4 z8lOhCxQGf;9tn95Lp}o-F3A5PKS}>f_(+v=DNN!py`#B&9ie9WXwUe}LIb-~jVIu- zo6^Beb}x3y(z{LeWx25|Og-7TF<-w1GtTfTm}B#_!MAL&IylGZ+j5=0G0!^D4sxbC zfdKtqQ>obtpX-}at*~C#U1vE#y{`M9)(dox!@Kb&v`fG{za91ba!AKCg1p;_!#1t$9S_ow#_!N0g-k}eKjS|QU#58u2gPqeI2uplr$w(DT7a;O z;V-z2dBkbTvhVwB(T(A3g6vTS zda*xIjUo3pN$btX|0^;_-h?vS_8UBg5XmJ#{AeVdO^P5r2X-;nnE;ClG5ET%zI8AW zB+|-uGApct{3LKW=`EZN>W#@T^ljyrR<;^wx0P*p)fX%3bP{jBg~dJTPss1N`1L-| z_P$neqTwF1F~S0I;s%o}cqqE3_WpzH{WmiJk~5XedPksRTc;BS6EU^Q@xIC;gjc*D zeC1cAjTuGOs;oO_lozew)~y_R;4b`;>*V)7{BiWdjMQ3>lsM8P-(%n==jO_7AIHJB z>?Hgsk*e)rK_1WS8<&JLVX~_r%XubdMxv1fhn|riq=YxRY#UA@URhbe!=%*x3o}LN zRtOEpC_2=bOCLx#z9+NP6m~j1rR4p82VNz&eg}C6bDQjEgd0_q<}-;&v4+iJ+@FlO zFQ8j01M`bPi#A45oo@oJq!z{qnR@5DQN;69sBh#pZ1cE3zHAO~FX8g6X5Ud7RZX@^#L)@6}UuUl5pGfY%7ScItN6fk+QK+8a`E(;f{SAhm_bn#HVML=8 z@X_Z8|1n44861I>BRFz*%-1>Q%B?zM;2<_W{!b9iIDblFs89~7AY;atUavm!>j`6r;RN?F@n??Vz%!R zZOu?`A0B)N0%HVu-$O`kJ6@;Og=5V~fZNq@ccy@`RU`_U0%BDL58^Eg0;>hN#n^bV z;z670+p20mpvCuKgHpgFH=6|s*+f88Gx}tJP8mMA&KPYMq+g9~Vt{@huJg>|VRYn? z(md4uVf5)B2ap(EhiuZn3VlkskK=zB13#+>>h_MYf+~FifpW7vR}Sf&pP@@a4|_E9 zu(LuBJCWm!8MUb=#`&g*b@L4!BmfRd=%!4e0W<*cD6Q<=jsRK1pj7-~Yt8t9r5w;pQ2re*>NG zv@s1etreUbhf9Jh#58Q+}6#~sht=Gf`Yyj1k}7<($3 z(KAg*`G`c3(sFh=rkBN*FX8#X7~^I=>xh@&jHuC@WJTaNl1BAIC|OpQ%Hlo`^7>8U z(qwY~0HopB9q}9pj}b0HCL*AN0K)5<zc4$cC7c|IpaYg3i{FD@5qp7{ zjGI?7GrkDCdGi-^CPf^LjYo%-9dhUy-&{=IGdf#+==Gv|&vP9(tyxSCr;tS4rPT1O zBBgUDvamO!9Y9`~ep`n9w$#co^xPA`WfX|M0&;_-WDmROFn_#)A!1*B(nj7M=dEW0yIVb! zLs`}l)_&JobLnQAmr$b8OrCLuRJ;tTAh|1DxD+YAEpsts+c`$*@g7EPTN~k0ziFO9 zZ64giAZ_Bm8u_-)W-J5X$?8^Jajv7K7p{7Z->q!6vp!H(7A-d zR=yqDM`+JfXfL6n1CFDBDRH`}g5yBU4A{xD3hoB>JdDb%YxqOBtwZyn9Q17T%Xio>Dj%3& z`>ONY$hj$UzD=CuT@u0LCYN%8d_R2LB(dR((3TA?NUY}<+r1$?;+pb@@!NO?sAQM@ z5Mw2=VKZYbNv!7=Mw5r&9d=O0qw&f3$H?!o_)Yt3@!PmS5?(C{-^+xrPRN7qu%@qe zjrM@$y$I3pxelKN^BY$&e(e<8Au!69QDcFP_e;=g>VL<4(xoV|VGFYyNv!9WCj93k7AfZ>Yb_|jD&cE zTBaB2oXX{n??|uJH-Eq{N*CzQlSsxnWLt+IF8{s!z5>zWOasws@sn(wC*4SlfB^G8 zQ?q_WdCM%GsQ^c&rA}?9$$_sE*lBXw>L5h9)UV?jBhk~nlDfspcbXi*^6*AW#WJk^ILwIV*%Cv8^#q6JrAkQ&lvJa*GUz2VAN!8>7X0^0+HOj>Nt;2qDNP08p0p6o z3`8T?jF*4MSd>DN@w~xE%ksbllI*g09;b)(T#h<^f_ErJkziJ1c1%GuZF!`wMQc0U3)}G z50=--y|EuhncqX1bJk_&tjmGv#jT>Q2+Q)dhI!7AoB4t>)S2;bK%nhWIWc-<#{VdM z+}{r!3^MlwJ;}BxJ7oM15$bli-XB4=Q%km)0?8GV*;*ctSb*-iOC0#jJ6QApV7DFNNZQ1CjS++mDHP@0v=y&=M`N4Lnz#PKWtU}L%=rR zf-Q~G*aB2!?D7SHG4R^5R$;5mIjwTuT1Dl!IE!!$aKdF`67E|)lmAp7+ z#+It{kSEtf8@JVOx06+b7kzBYTL3Rw)6T^)UKQX%mXIM!$pS&2+un$K?O-$dPSBz2R->Q_~M#2PVDg zhxtaHE>gm@|3QQ}cu}XlH-7a3y%F@qt9Fa}VjSgtU&as@HduEaXh%yg#(}JflpTKL1xgLZz_wO(rIyS0X{pou1Z|RqD)3#{c)4z%4i-wI zZ9RjGC5a|5G8W3(E&}bi9d%K03q=G%?J024RYDFKbKwvh6fJuBT%^*nO*?}?ei@Zo z&vpjmh%!tq9}8*;=>nSlL`1r;Tv!GnEi&NXP$OlXCfmkA=6ZfGwvFRJJk-`^pe+W+ zdnrlg^sgwfaaa(|7CuLFhT=BvT_4)*Xg?VnX)-sjq$(_pfH+v#kxQzU2 z|EOJomC#DG2$>z>wU*vlTcW)>V-io3bRr1{yGfE#qr(hZU3el#-iZGJ=Y*)M@D?Es za1A=Hba7hnP;$}b%JfjsdNzAbq+uFUxxd@^l2$?qW^E^#)w#g0@yt_uuJm)aVMrz8 zz(QU`e)$N$)o80bBK&yhsJ7<}_${pD0;G2U*Q6z+eRXqUt9vTWOK*|qB#klVtf*Wb zocZCDa(ADh-0i2eOCgi+?;sHY{{iQGU^A`MFPKu5*I0$Je#EkT;m+nb+UwqEf4%1# z?ALBaZW|4-9~VDv3W28ATF1hxIMUw5{^ONpdEDRuwMDgi zWLB-O{>QT+6MV!)yG|~tKZG%2Jlog1-v>=n>~Oc(8E(vp_|oj@iG09=?Y(!zgYCVK z>R8BM?258i3*CZU>TKGj%E`!8aqHC4$JIJ@GgZH%d9_d7OxY^K5K19sHP$W^VqDgZBG@r!ILQ|WRMXR~J(eWzc! z=sN>x;NGZE5#nDSKwGTv0yIaP|-?AA=3)ZA7!Jy(*n1zh!SW1aB#AW4- zw=L#II@2?@S;5J4PiCw#W=_9LsK^UJH^}-s{%=s~`u9*kMuFJX*Z}xW4nI#L6!b{2 zDyF>cAy{ub&7Dfxe-E(sx&Xjs4{85A$fJY9^%ubH-HRN-CxjLBx-mkrdDgN-tpa&j zrv3yQ*vPwM(R)U4MNgQxGFn0POIc`&dx}}PxOX2Evaq(ZK^?moTjY8o(-Uzjo28UX z6>&?!wO$_zr?a9?E9KK(vy=x4g*t2v&L|d4ALqmQ{hT$c&@l^i75ml;JF-`3U()Vl zC3=eTa8ZvqOJ>=LUO0QleL-r_QSDly$Ay?&;*86$w7U_WYs|8^Br5-x9htVNt8`yFO|FZ~hH>S~y42EV+ z77QI<_ZG6$g74Rr80-u70>bx`J}X{**8E+9eNDpJ1o%(Gx{Hhv9Br9bIxK-G0DFb3 z6fhtS;Ak`8OoN+o#0Xc}9lMejZroKS^48R_=V(Yz8n!_Xp|_O-axuv~bUU=T0Z*f* zQfw3M>3=o@F13Xq;2|b)L^41m&J;@VOYc_BOfyEFT=%xY_vg$z8f0oAnpM-#9Ny&q zE$ITT4>uMPZ%3a&a(y8_G4mV`{Y1-(2JLjbZ}8_;1R;O&X79)MUY4V|csKLBjpU@$ zgSiFIO&_I0ESK6a4}&b99xkW6uOoi_(D!q8py`du+F!uo%n^u_a?C7qDfS*6X?a!9 zZZc1W1Vdhi!3~q$h9RSzj^;ULBA}w3-Wt$Mo>{7L=TBDEyE!6hO#Q4ud zatPB~GAbn!LwK6p@xF{)=Pa3r?*2R)W?`)hKp&^OvXRgwqnzgFC%ZGsh(fZ6dMCBs zx+z}10h`3hZj}I0Dn|5z^>h3x>W z%IF2lI0G&AOPLGo4M+Oh|1PTwp-&9-J%HA;Ovr`925-lPI|1VJlCaUSv9mQ`_P{v6 z;4MaC9$TAk);9|Plv!qICjDPu@-5qSXc{J=%A5b+!e?# zViY!_VHv_vB z?Q#UDH_E-S9c=qrQp*uHuJ8-fN4KtBg%Z9vB8?ff8E`Ioy>vOf|J!whJ48d2%Cay zXHrf7|9?j|z;(`?0M~=81*ZfyJ=tmf+u)%o9baYBzcRFW)@B>2bvR~|vA7zwGw((7 zz?OH4RVPSVBD69Kn<(f7N4juGt+Uq2^FVm~u{2)UNfd$LjwCAOdTI}W)lBwSc9X=% zpM!v`JCwqXs`6Z7utE`u1k7fNAUV0WFr*mwl<0w4Q7C&5ovcxqma;LS`6=r_?D!ra z&5w$}Iv3)RbBCb-2C)kfFisX?><+Q?N@y2A;3vi14Y$}o_3iaZ)Xo*LOFE-gk%wUb zQZOSiiMmk2=O8Bp;lnO$7}nq1_}0YgtJ*!T1l;9?c(3OcZL?bF@zT2SVrp#j$S!@C zL8^{Z3H4(zqi4BSFTWlUpiDW-eIO6joTpxJqk6^9v*xVHro zbRbeO*E_;%EwNOMXUbf#Brpf#aGYxG8-4rCC9uo|Yx=E!;)PBvR7G#AOBooPmrI2j z4#y&CA&{QH)VzQ^3&lb)z4YN?w*Q|@DhBA8k>UE4XsE7Cw3V(uLqIkHh;gB5xJ0Rw zi_WaNbvoC}+V~UF zij~%1-~b(_nI!dJ`uSh|{7pZ9*Uvxn^Bg{nCE%&@%dU^|r6#|Gednc&2IOt)`)2P0<}571(&myED+DThr=*cgnPGOBYh`e8Nx;^QWO9}i$KZpb%d zE?d8j=$Fu)$PggW_$aWVxaE`h8lC@Dzz}ltr1b`*eTZp?yvXWw02dxbw_ju@cf|c{ zz|}0bBFM<5oy_Jjl~5!`pAAk#rFr=R9`?Y+3&B`)thoyUS^0DsjW^DAk?WR#k7M14 zy8Q-AZfI@^MZ;*u((QBqEk)x@6qc@c9C*-fhu>y zhEvHx?PWC-)=<^)9&XL|b?=BMoWb!97sby>YoM98v-unJb<%H}P#!?Cp2 zUYi=$OC58#9Yy(orE@^5d%&_MyPPgtw@3**1l*YjVX{L?a9K&~UM9RbgY!VI((fvw z2B{1uw3I{vv z4@CQGmg<;XD4!-Be*|scne0BS)9pUY=}aDqtNwVg3(toL+n}P(7LJMFvdgKgLL!w$ zz?Kx?61F8XJjZcua0*47+{fYPNqB1wD&ro?u_m?YOrdtJ%@Z>? zk)Dzw^$g)L$Rk>(BW>D@Yc;YQp4|x&M{OAjDzPA3!3el4;n*?E!XhRb5|`IFwy)zo zJxV*{SM!|2J_W$cm4qh%iWH4g>gZZrZXe}5@rF^TtdA{cw8WuVLFyWkEkwG@W9gU`ro8K| zLnU)bpSLxXySpnXd6ZJbA@XRH2r7~~FzYvk8N}F~wQQx>u_EycyCW{sMi87^kG)tM z{r$z-X#eRIZf_&EJ_#JXuR`>KwM#u<1GD}=@bj;=ATNH6TCiI3zJM%U@3Vs-u%^|v zVBr^=_Pq90*uaG}+cq;(+ol_jqbH{|Fy{{JF099AZnGy)OO+t+9`rKD8}1jCG2{)w zgR>%X4#{Kx!_Y^%JO<(|d(VYEIzQNA73SBMeh|lIpljw8T(XZ4HgrJpZu=e30;Fi; zW?_R^O+={foyNfdIiS(My%SUpa=?r6VVuS$YSDO}7V?g?wFYD4w^Cn;u1W_)ppWlD$rjB zZ5T)kHHPy?k1)DGzQ$6@Ja2I&j2+(V!Rv)sMiGbLq!jF+)V6cCBgl&!r)3&#BJUHB%LJ%pBrY*H_wfV; z3cx^z@C5rwLZ;{(nHia2u5qKUOoxCXS)ZUttRpkC z12dBTd3BD8!jzQMr@jPjC3yh81Rm%rZE*kd&s3g`y!V@c>+hoW`!?u^oT30T6{3qf z$&J#9=;ocYG^pr83T`^%9S8KamyN>V?oct*rZIEP4HK#xnQx6A8t8&t>n*_J_cP+* zpULc%onIWsBdx4pHd1A|X^~`lZ=8zIZ8K;vRtQ9z!$gbS31)b-HaR%Gjfwu89yZKh~!TLgvr+9!ox)-Z%@)z?ZsN-vq$bbW1=<0;bDeixKeBp}LB zqcz6Q}M$NdK{CnoWAS%o;dWX%qFf7obwl ztGB%ffic=YO>ZkBOsUrty)Ek!*W0o#uFtjPU((x#b7qDX%+<%{cW zHv%^_QoG*v1>==cZqEdRpco@+1Vlwd zKwO?r5fD*8F(PglmxqY@7N5JI@c(|#sk--eXC~nL`TqH2x^A7?PF0;cb?VfqD#-I) zJ}*$SN4;s=vuHQ!bvszk7MNDO7q!9GBAp7~pQ-O6AYOkT99)rVLgpjHd=B9=au>%9 zjE9+DG8jZy;9;7;!&LD29{?`?$F*%Zr!E5>{hGWmSARbXo@9Q*IP|q0aiCtJxA9Vs zj9ltruKh6j+*}NYP3%1$tbpF*aUILiJeuzDco#x~dpuaM-s2%)>{YPT;2sYK^E4fS z!95=0G52_kVr7YIIsEIjTIh4V*JC|wshmkgr}176A{M!qLyDXJUJl1M_i`{!^j;47 z9seW9NblwNgQIT}$tCndd1zbY1)?FoVjyo24bdo1)Q`RR*t5%jH`3w&9v$v6c`+ z=r&qX*hCrqPiOF(NTfW$--$$fTU)Egf*WkxCJkZirS~`4Hxg*r7+nTKS&O ze;EXv!Ml*TzNR3VTWa18WKc(=(;K*F_^Shnh66= zbARD%?U3S_3`Wrb^x#UK4*^43P064uvTfu!Uz>*YE8@xt3Fbpl!?TU&V0g%$^AJuV z;r=bmFaR-@f=1nP(yjf3pTpU8c=)mU_5>eLdr+|wSKI{{Rysi_x7|@??r0`T0N=4K`14gG-G{1Y;0Wn zdD`^_&mx&QhT$|oxruY6Trb1(PLiYQ%gN*9yc0j(O>^W4?vX$Priqxe#BhL;IF z1H|l>x}E91;e!NF_aLMqbxIAZnlBmA^Be;=eLUf(TFc*|`4 zCIYab6yAGuBOoGQb@{imOHek)9rq}HE90*IAxTre8BScRm?3Vp>X+)#Fwrp=yr+E$ z^leR7Bsr5TvvL+fz>hzSZ`0;&u?0(%zh3A}GIQmxcMu7X^j&nnZmvkW6Q0t5xgv>q zfVIwcd;up-WXwB~`zoi_#LqBa!N-+bJTL~7%ib+DCy!l;daoBAt0*<{ zSRxnUv68Fdv06`Fwsr>h1kZC^*br8JPs9^p2TccO9~N)cHgG1T%O<7&CfV|ppMX%^ z+8(NtzJyP75N)Pfv5)yX88hs6^Z;|oV*JtD?calPhdW^iEt;v?c^C)&mjHtvNMaP) zHOj&8Go|(SICvH&EVp)~O_=R%5#FnpieWQ6vlIJpOMsBQObo+y>}kOGiU)7;*?w{V zn%Zo5hEjTYKF-~-O#=_>7WM3c8dDhE&ZY^AIf2`Y$z|g*0>lDdFr&*!!JCfwQHysUox%r;bYG(tbW+lGv}+} zl?sZWfdMIAt~TyW*iAa9&3B+oym7f>S0^|IE8oM5`}vXQ4L|u|8j69rc(gz8vB3jd zE=v^wC1?UA6PVj`J9Qp9p(c_UXqWPH3|fV2pO4MvyfuYM=RS0N!@PAb0siOkEBk+| zk;2TejQTgvvCOV{j@8^PKH)ri7DlV!W6;ugFw$43O(tu+|1HlXk7in)KgRjs4%gdR zS%gN4;~b)1D!}W{evu=uBTwyt`+M?pOgL-gtyA295Z~>Z8|uB{-!2DziY*-X>Fgs1 zeG$MHl!GJ#Pcshv-vhbLfys|vD0%3JLyspi(UM^W%9OfQkepU#C!dCkU8&|cH zLU^PDjs&%v7TjcF4{imPFkx9928Fqk&71g$#d+{(xPOrOg=L9~Mn?wjVCm*-j|4|v z(A_Q5qJky%==VL9@lG<=sxX1dC(vnGIptOW#U6VE<(ct{>qrSUgVr6xBLeEzv8z4| z;O}SV7>>nSb znRmo(iuPn`2n&k<9NY(Lu^4@X@22TH8GmAX6}tQ<4Haw~!$9OJWp)zR1?=2R?`~PA zp!Y|AW%fm#7$4sIv!rd8+CcbiiM*uDYfeU-?x3PqneQP`=XO%3Z2yJtR7!io4oUOu ziDZcjY+?G0zGjx}=V;mKNW{gAc&v@cctL)JxsiBF81Lnb$BP*n<7HoDyxfb7*B6O5 z%5qN-{ProgKN1fs7^iYkGk(uVTWiB?J_J$3>alWmm|tApw0TzPsHFtO7s(~Hv$7bY zrz~V7{b;FRY_GTNw@{E|h3pI!f$SuDS5i*JYg|K%H#AV;*w+m$xMIJnv@l@m!OM0$ z$;qpXqIj<|hTqzu#1@QP>6mtx{E7^%kJBrC(m1vV$JjaxnaJ2uza3lj>Dbc#>;fI} zEixzX|53;q_Mw~q0d0mJN10Lx=TNQ}{(^Y+%`#f!=$mDpM8egV#vQ@ULSQ2E6rS9v z@Z?T8+dqsz!$~YAd7)?8HUCxmL*sK;b>MN=Rvhm7DAZ0H^k6#`0Kf2xH^hhAtB+%B zR5LeXfP7N)Qj@o#ZkQSH>`ch)EU$Zxb(9#&>*UQf%j=lX@H%-2&tOP!!0Y~i*1>95 zwe1WsybgHN&hRX_&$A5weJFnO@o1i*T;=opzLZUs55Kc}TU)9Fz}qZX?Q7m%We--m zwMVcLz;ZVk@nH<8+!u>s@htj^wf2?pyrVnKl1%C04Zwx}aBf>}UvA?!{@B-}_)8g= z--GyL+n4c29#C2&CTqp&f8G|mtSDD67OQg(;P(T#K(SbTOn!eVzrU8>HK>a7_9v)6 zJOmw~?20tQJ*O(yTKSO!ot}{bm%7J6Srj_}e;NGE!5<5yzvNfvy)$-MrnIy=B<_gZ z0)%_U#BMNC8mK;U?<|Dps&`3&;rrpjA6;1mS8sX!tjj!k;8WY;W@OEO&T+OCSa2MF z6r^eWhYdVIfUACvq$T)UfxngbTZO-q@mD&nt5|&$Pox#AuepQ2CHej4XJ_I2FF>aV zb6~C0Wdn!lAKIGuDpO|y6l&M^4F6&0wFjvzP^P&@I z2>vtTyOj*{%+4GQuL^;qL0VX|X&koT8`ZyQAr1{P=d9ikD#wPJGLeK#gcI4gp`IyV zTxSyGHX$>dMhq_*)mRc8cfVa%qUtk)w$Hx^#F%E#hcBJI|KcEgKBXt!wQ zasvEaY;1c1+^&vkMTQEd#us;pU739Q815NlN<*{I%#2@ZW=1XVk%i};f1YZnaweX` zgyo+?LQ5*4somX3EW6y^8L)ZQ=*{8Ta`Li`;Kj8&(EK1gxgI|**W<@4ydJ;8>+v&j zZ;(vDpG}&hE_-PDbWD+`+^tDy7AFZ1mvhTfxU)#7l`9b~6IWxsQrb=CQliQ5WC>6? z4|N`D$u0W1E3f!@@>_h|DI7JLa0+V|AM6x1@N3Iru*pUITE2L$Qz(tJJB5YNBS0bM zLE(j~E%KsM{S(S{q+BdSGMEkTMf+Eu!;hH_D-Q8d6Cm7pyA|=*mDAV&a{+gXNxvP{ z9&WRM+Hy=g#lm5NKQ2zm;~s=ua?h^P!s%ls3z?DjB(TcDWD+7Y?9TV>5}~JX7|<14 zA-;Y4B~w7UcVW`eLI$La&IInaNZ>yjlmyX{@bP#OuG~;maT5&GC>>sH1@P)j?rqsp zS&UeE0>1-#U9#=iS7U>}h|QuNM81C+%VIi#E`J{E=F?6g3kRnaszaZ|b#mLu(W+k! zKXW%v!-2`~I5P;pYhZJv5m$^C7&Z_Wt3xn9x0V2Dgl{F)Z>Mk&uYXdUh;H^S0vdF) zcLHK`vw0FB%5Bok-XUq~pMo=^ZkD;sq?=`#RyTV$zNgd8GIQ0<_7Djyx%%i@-E1#B zfo_(0sBTuk)Xg$7bhDDX=w<}~-K^wtp)*PRtZtV07~QOnpQBM{nd>GMjqomeBBK|G zLSE%v_L5I%vYOvY~Q zPO>*D`|4|H&-PQ4>ta0mD{y<;pn0pr?yhNG)Jd90OS;XYB|Z9RNiQBPfvS+`D7VmS z^ofxASwRgK9VFJP3=R<2nr1Y;s^6Z`G>ENl}x6S7}c5 z1Pr%g^)mUrUViVvucnDek9S~{Z+QkIc$z$>{%bBsc0rQ^lxL7{o@BzmOi(f%6KNLad9v3ZHSxo|nt-@^Ip3#OVzpAB}Ic z{V0)?)X4Xlb`Zpl95!f2?341&E|xJ6Bm-L>V7jG|bW@)NKK=?o@Xn89;`->clHS55 zG+hTy7qK59UW`8#yR7;+>una>ELKxMnJzcC#m8n9M)C zNGEfiO#SKwuTOdy9-bZzagv&LAitHEYC9!j#{eh(Qz2p~=M=ja* z^zM9uy3M)BO?q)YK|KLTZp|mCHvq|%`2_U^Ah|D}pneOI%kl}Cx8qXT*xIyieQ~>e z3(M3pZ)(}Cwd^sqOh;>(W-X5jYDwBVafUi}Z`4|cbqw$d>KNeF6Tu7lk@p-4cQZsL z#gfy!AYwNGbs4^1mT-MSP}X z|3Q~DZ8}ZRALKP}$C~Vbw?-?bfhpV)ExFluZ&KvL)8H^uUP++_Y|gSTQ+NnQxJ4Sg zDIOaHZkH1`b3TgQj=PbZqC&b74DhQ8H;km0M$ z1T>c$AyGoQA()3Sb)k*+$G1VYJppNf1NV?@&xjQL0_jJbc|r1{@r~4L!qjY2EQn%P zvJK?rIxBQqo-p(Kc-(D>WZliI&keGEN~@gPfww&LGrvP0@L)@HqsP}PxM#=uOSRCo zYDzTXgcUv--^g}-kS%cizvDG=xi3NJp~53Tx^M$Y%qB@xUIvgQ3ke^4T84gq&<(UvBoM1W{*ci-J>+4^}{OJVKQvCt( z+9|3274cGk&v-gR*B`_u)&-Jsk{(!%&@qd3TCKN%$%Fbn@Er%8X`GjKqmHEbAh+Wl9J579NA^|CKhyM_Nt6#_3yCTN>JZ0 z>QuHMPUS|eKI-p?_Bah5XZJ|n6zq{`WE|_?0t|4y?MMn&+Uv`HATcV33ciz4e@!zd}?Ou?x)(#zSa4 zyG!dcBSdB$po)RE3w0nv1^?TLwI<`*+tBlC@L()9VSZ-fQ)@2q%kw1(4;VL(}fauGhotbdZ9$D4RIb9{3va!HKsc zzjBMSnQrBsXzQXgff~&!=bX)Su^L;C{5(;PjbB{EO%=~yL1K3OZNR|4nrKw94iVWs zUVntGRA}FZPU)+Eokg#LMVXwCqw%gpSH5;TaLBUV3WMt)i)XNqcDNmXG`4iIZeiuR zGET)NE5~z(=S2JzU89m~OV+-NQoXqULl*9p*Tn}GW#YXfbK(OdrP5NEZjE%sao0<} zR0Jz~CnD7{%mAKinF8*0#+AS~F|hg+MD@66cB`>luta+Z)z&3T9CI40;_qZC@)61h zExi!g66zJ1^Sp1zw60UmIa_!CV(PW<6~~P#%HKBzwWX9wDvi++kRL#8OCoUXVH( zt@Z|#swryULkb)@m$rw+RqZ$M`@h2vA3i}Y>&mn9gs(t@`A4wTl4$uPT0S{2a!6?< zE+rf3N}}caOG^+f&uBf22G0;Z2N};OJxh$|dbq+Giq(4p6mjq%nf7-Op#-$$UiCQy zLAm*6K(@%^n#y0EjkTs`%{~E?%DM6!Ah{lN?Lu0{D!MTCvRt6hEnKl~7>74MVw=!Q z0s+o_%v^BDM@ClF@UVy;H?V#p_?m|u{Aet$4U}JiX*~cAyLW3V(@v?FU`$t{^9Xc+sJ_xhddq@timwb%pjZx3D;*o+fPWSk6^Uz3CR55oT^JjoB2mE;aor=Fr_#49Cx%i{P8DdN9HTa`a<4pW9Z>+~-rOQ44LgM1pHmUP| zb#7DV^XlBM&Nt~y&7T8K<<)+yu)nI)!SU$Tj#THR>YS<0`Rc%Egi)$=go8NKau67k z-^5`=UG++!IGeJwazz+RZ@;)kzE~lvMs%YrKYQ`z^*ZJ1$(>243w+51qSWNg!P2Y~;4kjM=Y_RCnTbCvcB+vyVE9;L%_FOY%EQ9~fZ zOq?f`^lAe-r2AyN8e~l5{UC$)yg6CjF|uIVk~LV(W!ui-~1stXSxi^f_9I`z*YK9%2~A#MkL!Oh`gA zCaeywOWKVwWDUm^7PmN(6(%+Ywvqu&+%N{8;}}GHlh=h~is>RWAHRCMkO<}lPmV>XsVct<&4`q(&G-`zEI!Aa%Qe83(0<`#$`&;kwpz0E@$9y zAp>i_+nmd0&x%~nI3I}B-UM8?=p6r6W{!W(Br%(K3t1K{zZ%wLasLOboLfE+OWAHN zVq36?9XrXXE#=5Wk?L?&RYa6QMrmi1gQ{zQfR$Tc$I$wEI-ng!#cE|QI`_8JglfHR8Oe4 zAr@D>nqe4A^5>X!W4!mVTj-VTWENL*$9Vr^&i@gz)bjUP^-6zFvb*i7cj4L1OWrV! zS@JS^bjh2xOWt6$n+aCCSivSM(m#qpTGSMHC5>z4*|>Bx5m8hGi)F$^S0O9rVyb-c ze%8w-rgX1OCS7hlLI&0&)F>+sT~IdbERwxrFcs5&j{yy5lJxIWgVCvP2FrpvX%^Jr znksX>Y}T9&x}Khj_BA*N+ix=|*R9k^5!8dw`m+c970yT*sKD&Zla%S$C_^fHQ8bhx zKOuvrJjdl=FZ+79-Ia-LIOR^re1|hht}GLjiQ?W%B=vNy@DqF%H@Q$*iChfQ&Yt{^4LXx7+mqih+{8!uz*O@~U?6ysiR}blqV_&-U|Ro` z;Gh_WL=6fu{V-x6r$EV?F0;m7yGDd!hzVq#;lTvv%Ox}af#1z1r<(&#H+B$q;lBbj zDvz?A;rTQ@|7tup)AKQU@alx(TdaNuZSTIF8$e3$3X~zJJx(**WN%^Kmjl8N z5X2vdSEBw$Mek2U50>t4B^td*p+e4i0UbG10!t$$|Q zQC>R^xb%^i+y(*)mOxz%s(h<-H*<)NI`{qgA zo&p14n7Os?08|^d024z!<7QH1q3G5uM(<=XB1cojHh^-PI&|DE%$FWjwY+>ff?uZ8 zXt?FeNk}wIY!#(=0{r{eIQFAj^D)qbVMxyZLKBS#KY0CvK<4oy?AyU<`*zVjeJhL1uy45_ zVBc~B@o(ze0WE%?z8$H}Lk+e{1;Tz_v~NEfP}pbBnLeYdv%@N9Qamy*NW(;1sw^$_ zJX4)#8!!b@7!KiR!J=(1S&Cy`$@#KGmKjFAUZ@Qh@7so4{{0==aN&$?SY#VY)xtJh zyl)#CP}qhrrxUuTt8I9aGbtXnVNTmds(u{H#vsMGTgA^6*kTv5Q?JPJyuSY>Azfv4 zo?V^=*d6=;h+oBl3NEsHq(a;_-7xV<^bT$gB$>6 zlK9!)dHXy-j>o;3kwn{<(Vf5+v~$(BVujx*pTnI1x}%5vQ0{g5+;PJ;tL0L&&`S`D z96E`*%f5riM<`u_i;u_gu8x4P%zRJ4F`P-p)*jYxjpSCIKsn0u-Pl2BcG0y;Y>lD$ zR=DSy*_+j~1$V(iPG|XCZ*MG1K6e&Gqy)-w{2SDyGftFr-r`#L0P@mF55QscC}Z-N zqch29g4^a}(Yn~GA~dI2B`de1v^o=EQ%@4(hTb&^Z(NRw;F-$BnAFx}yu=vR7|nUL zriar`m!w8uI?SsCC4$Jq+&((+Md4+1I|eT=%uBJ7Wh)+?9L0Mb&1m3iL5s%RqJ!J} zZIw#*Jx*2qHK2!hZee@X{Umf6Uw$&sX~gR(R2+Sth7-q`v3%uP(hj_9q`N8l^iraU~5%MV8ZB9}AYKrTO1ppb@{UZMI(hirm63eS&clY&PwzymZu zeZoJX4c`zcKUc)UlUa!@f?gvs=r!pvykxcT?}ATqe5gh6Nd@>ofG0lKqcyTLk-$zU zw$!df70pJ4;%2ZCBk1v=jO65%{~s|k-GlOp#}r(#wUWkw;yVd+&^N?NEw4<|DlTe} zJwBAxR{s0oLXlg|fTVD12Kx#MNw>}PA31+@w*mvna^<| zTO$b(U|}EfT2OM99w4!U0@}qJ)uV1+jU7fCR`)iAsA;v{o8hZ#QtavAnmZrR` z5bIqY-gmVOWuyEKH@_pJ+MF?`TXypgoOw52t{zKvuPJtORI*j+O2y$4dkB{PX=ni1 zMI*1J?(uNA6_!;fU_bw7q)yq(Q&X!9oAhj?!HcpxxWsEq=B|dx*Q}xAu>#z)IvL3; z9_R{il2tJ%Lqj#VK7$+N1p!5;f^8@2Z=4u)6bsPC?!-pUp?G45T$reP@=F~B5%=U5 zItr0pBdOn(id!uxx+e(sv%w9~b6Tm9jyth34X13jX z?~Qd1$MQUP$NhD-U36cQ`|Db~=daVLA~K8ZEo7I*t_TO7}}{*@5XmtkSBga02|^u8&KDgD zc^7Cib~5|cl+)!X8_^^=P2&28ru3k5Momlb>hU-)9BE6Y(Z=q;`R%jBXx$tAuOt*8 zyRg9!=Y5?*Jz2(y^$Qo z6OqN+5-D2dZ(MJUbe^)s9fY+sqrj-TAKEYG%ZT~$Rxdq(HykC|g|Jdm-1VN86zR|4 zi!&zD9wwLk_>N3NKCs>2A`jqQ zE2?i|4jj8wF>0=MureNXz0mW5SCBd_uV5NaFeY~(!k+wE?!bPD$4*DugOOGYB5DP+ zB92tajDf}+Nv3wRdQ+`Po9?}!FnirQE6{;u7AOdTAxN$m!R#^iu$pt&wxcfd)!-vA zrO88h`YdRq`g;JZ!0}BU}+spk)WQLZ-DMRU-mejg(3OiW8 z2jLar${^T?9i*$taUU)BLX!CdaN9~`i@SwYTwquQ-Qx5EA8j!GIM=kE|0)^hVhE#4 z7cpF7+j+5+eju~FL6vV`%9NlY0_~7X2 zO?Ic&dZ~Bfkj5^4=GVXjM$G$45p(RvZebv)RI5$=O4G!2XK3Oh97t7jSgEN_{t}nz z+gvmA{7N%#70b4rD%PN3^COVL?*bv+vMnGaH@BnS!R$9$!w@~z@;vIS0hm4+frrb^ zbMwLRG6C+=Iw7tdcV%f)Vr1IX-wdqqZYq9x7=?A1jriN7{|U8oE3P4vxWiucr9iS+ zJ)6JGm$C~ElF3*=6*jO6uMW&>I2OF}TzwO01Ztxyn?c)5+wZ(wtp?auHfCNwrA4(X zE;L<1cZRNz`c2>Vn%eUxS!i@#6GK8+TC26qCjUyzCY9IYr{2Zp4r~n~FxHiO{QMVo z+Twpe9}VXqxEV1ZTm1xDKqor{3Ev+J!!e_T;dU~VGNA;dTU!7uibvq4P4zeQA;-nA z^dW0z#|4vll32N*$w`>0u1n5Fx)F|%?byEl9(!o^rvf4a>5VOxewvz#oVH)Q@Id*X z?PeKkO7%E0yVb5hOVW(981ak2KM~r>^vWaM*bh+VLY66woP$j0zYB@+M)_;lr`=9+ zGe7D%Vvk$F!thINI6vz7eZslRhO0G`_3ox1SLAJE20F~6g4N@KS|(+K54C@J6I}M} zTCg;J8a&wF0SukV9^?zjPCvRAXRE(sJ|YStBDc-zy@-NQ39S^~E@DzRqFR3oN$mkk zS^m|`Fz#PRC*g0SgR@RjOq;G{{C6^i^0JfBX4hcs>3Rd0uyOo%BLcqJ5cZoj*Ke>* z;!>lUOd!zY4Cs0zl)J+{9>$gJJCGMMmpwgxm_0o$MxZP&fU-b=^20z?re6n~AqwGa zFfVs>CoV$oSjv>X)k=H`(^z?#X76cT1cWBm!fPCy!-L1Q*y?O?+ zt6qyAGvT|sCL{rXC&uMs8rZdTxUioTsS<~tbC_ymho=ZF=pF@XgF-F^6A#GG;Fc}R2c{P&XFBD}CB*2=mjq0F^77_&gIABf?yawJ(m z!`ACjW!!{@uJq^QrzRpjXjj*?t+8}2mOmO^%UNNhazB#zi!munULj}o@8>dr`Lid* zCGK8q&Mep%69)n6uN(=(sr;9r(8AiW`3l8}C#JK3SlDK&Pq8@ShKVrRN}!6B}p+RFUhIud>Z&45#sOoyV3YsBjph=@rjM0eF`PWwCtIz|0a~4 zth^b&Epwcyx4`w^iXYha7lt!)9RF<^;{OZWR`}lzw=-_*Zt4me_s>88YMu5!gnY4I zZmWyia0R0E+yWE*g&oxcp)FMNbJ>V5&W`zziD_bregv7KAD0CE2stcS&9HKxN57Yk za{LdYi1J8MdM{ZRsXT^Ck9Uu^R@)HEN&7b;ygI@Z|A3H;T(Kn7lv(yc6rrtF7?yN6 zuVVZq^)G&@5M_}&`rpAK zgZd~QK{y2M2kk_p;pRVzeb`z4jmV>V4RL)x>T?renZ51;9EB^iL;Vu>x1lFIe>;A& z2|nZurO4IVIXYHn$NEb!#X!1~Ov`Bx6xtvMf+LZ<{RfaYMG@@7--3#$C}QRFrNGUd zxH!V?Wk~3#gYm5#5R)PJQF>II+ho`n-F?`YvXhzQXie(*x3Wp2{7a5mVEHZ_#s36@ zXIf~?GweoO)RJyc%Ra~dWKc`eu&zT6m3p#tJF793CuwyZayiO2b{Yc+f>N_UCte?f zBlE#a(U;UyyEvb7cs}E1OCs_l2hN9u((fHr`K?zo4N&L6T3oH@xYSgbljf;`acnp& z{1x`WG!~6Rj9CXHHveuQ?#Mk{I>pEsbh(a;Et4@w#LC#RB1$5u(zb(WmKQ4!YCDBz zMfhmJLsI^ynX8yx;4maLm;zDL4^{MOD2~Q4Dr7=2H!(grfy%9G4W!QNLg2HU_)zC{ ziJ=9$R_C=aV)nn80hzsr?xXXHOn1%e-$)S0ozlAKzxwy5|58*u|8uNGl(yvT4pswP zwpwZZCG1rY4_*ID93s|3%@)TCR38k~@nQq@G)G8RD}=73jz$m4G@fQF=Q(u9yxKGq z-5G|AtlP+UoAr8{*7NUeuGjqppo3)07pxwxn@-C$(p9REQi4BCT%B0~~qJI?+=+JhL|amHw#-1gn}!ug3)_RJ>k-$Pvs5Ek<|nwC%XGi(){I?UTS|-xu8+6p6rvkV9|KJM{RCXOB*SuFIWZ{cYbck|*ixn$zdqsG^vLkY`l3Lx|=0 z@1DO|wP{3ho8Z{O(b7`DKE3U0_EKbS(GK5m#r8`r%%}Do}*z@-`_mmvC z3+eu+3>UhWubJuo=ZH8h-7i3mNcZBRndt^}4^it$B-9#PIzLS4oEX}+WExLWM(G?< zcI2_k%Q}c4cULkoPlXN6DLbWTSm%RSdY^+~~wA}w0(4x??>;IYUldFybqmHc)W1MrggZEu_r$7{C1os&SO7SU^1<4TEAzPPQ05I?sajxH=Wc=#za22 z0Qnt(zK&OxVodh0nRgCoBV`TL;#u9}z|{idt))ULova*(XxNj|85>&7d6mt8;GUjw z9_jsI3Nh`j-4)nsa6|h-DQ^eLJCd{|4OqJlvm3Tl-wh|5^q)mT75ud=79dSkn6qdO zB$7=@xq54j|7)~P=>*43*5;$&l=3`(A-?_pVbE}M>e+}ZX*DVA<20#6$5~XAJ^T=9 zgmS`4xGN3qdk|g!6(~8A?114O6;GU${~MG8b&Tw+GH7omi95Oc&m-;=8rhshi^oa} zEk3b)_!e~WYhvm*iNRAk5Jjg-?wM`gz+<9O0i(ea5@N$e=#$P?eBt!!xl4hnHH zYAGyAElQ^f%NND-nNoYIFfx{wDIQN@$SeiQa2M_|^g4=sj%HmYm!8oqOf6(e8<7({ zIq~3dIj$V_3ZtCnaQi&R3>u63xh+^{9fR~{U9kxdzvo+V5@s1D$(Yj--_e;!zGN$| zQNX|0qJM;KJ_u*inrufxsAt{q>U4Q|vfyu8h~3adx*#bnNES}pw6Mb~EH*0?gpc#G zmcpn7oCZJ+YnTxQU`V|KqkTbcQ?_(*a^A*l>3o<+Bt^5@f};T}RMo8i3?gX>NdQE2IpW&dP~&XMFFVhB~$X27IV9vAZJyXeLz# zyAUetAXB4^>BQ#74m(|G?C3#WUcHT+b}LJx0?EI{M}P6-Bm7w5LV-ZTS0zKeKdyp} zVajCI=BmWBU~%H2E)8~}0@WiRw5pxnE>sK=NG3)O2E7=&P-4OhG#JLUI@c#BVb67+ z^~nW)r}aq!b&IY~b_S~#+*+7l<7>DY_3BNAusO)!!fLz7fznjtP~R$HRbq8khobwVU<)Um~Ume3)7By+^DEmesYTlOxrMN@a;yf9dK4~@I_C8n8X4=HbS&`XzyG}r?k>)TpFo>zIWLllsGQBQ?2{sJ15!z9 z0+dKeitY@O)J$t`P3rlxNt#iKSFS1u<)}`EiyS3iGs{ukh&ZhrRW{TvF61b>fgIK8 z_;Zo4QI5hr_2ARQ(DG@f@g!xGPrn209>`H|h{#c7r73?0g{Tdw!iqyqgIG0w97c1j z6Mr2u{4vb_F^>I?y2uUZ`7$XyXP!(IjwBz~YsrMgANe{ksyy$d3~Z^zM0#qNZEyfi zo_&T);s`wWzz+=7`{?KVG=u_qmyd(}LJ5=`eQ<>qE&)nOG<*Ho=&v}o$umfMw7G_T z1IyE7l{ezE$uJn!QY>gc#?@v%?Ti&h)ozq$=+-0uRmk7$S=7K2VVEV>+pVR!>F@+L zE}({hL-WvCE!k-iH<}W6I0~^RPTwT-oGsqdkbzTO=-U?pY4jhTg65fFAb3yU;Vbse8!{E#0n zWbc47=?1!b@rbTox-in6zGh%U zUo%?R*N*=flVJqr)o2`P+4nqu6774*W`@3Jj{E8Rcp0i7DFu0IU%V(fpauHhg$@?a zNC&i>-zp7l>0mKhy_pUa7NG+In&^Na(gAd0{G65!Mi~cmKv(GiG$kIjT$ldEIrA0l zf2^J8s)VWRxNg`n-5J>NjO$uW>-mQ>?5oEpku@za)r21R&_c4 zF+>ra@;*jQ=>KqH<@{Xy4OqOf^Rw+zRSjk8>bVgMN=s*qS?=ackEH z5JiJk3!&+?@vktAPj`mKpJ^`Cq@I6bbKAdkf31B8TU%tT(}C6t*(5DN>?WHeg7$Bd zw91)eDV5KFU&xA{D#(5VlwJ+`@dW8d*2MNBQ+kqK^*GZR9}xwkOxtSOkM7^tewx(t zPnY%!Z47I2!;$iyWPB6c)IbM&8vk+sb3e~*)gb-89i6X$Tnm( z_gNH7yo)xVMFXOnpOFH1Ul>lC2tZ@*E$-7Tt)=8;ilr*h;%cn6!m+ zZ*&RbV3!aNOzg8SiuWeEb+1&n3M1(i$H?Alvd}V3`q>TX2ehqqoucwjRd@$G1@+RE z@*&vVTM48}iRvmiX1f$Tnw1Nr$h_m9i&VD1S&3K^uH;xBQ>iMuuZsg^1)z?}_uO^l&H-AHty@2s%V(NzyC7>p5Shtg;ZY;^x zjS)PFrhNNCw_tAsW{})>tSvWa&Qg)ei_q3OkS%s`b;iOMf3ct2L`dH330DXvywxAmf zj9!@jBe5A6cFsRV>Py5e?J$uiNtJd?J~}RVwZT6i0_6anDgu|h5>9;uVg3|87eEen zHO?esVohq`u-IX=;R7`dY~)VHFgC{$=4uvtz$Fis$Edi^UU`DPpCIimnGVMj`9(Oy z06A|b6&xn|LaNQoX`uX?1cU{shcZLCMP6+K`1BSRx5F^sJ-ecK=hqb9PmM6saHYJ>W?rIrcP^TWB&Bh0i-E2vOg%ogbsFDsA3`yaLbL>A^yS>lw7rVaN%U zxM>bW^w*cn@P zn9+wi{+p#xpYP!DZ87osyn-wAeUU!kwMZiWiXs|rW>g<7cC8SW_Ux9X06gt=WSZ&hfFQS>vN&PI;-#N z4RtU%1X^1&0(#GO!Xj5)Q|vxKm0=dSwsf1jdQpf)cJrS2EdB zXYwexbDx`q=a^K^q&=S6*Gq_8W;4mig%OQh`3p!t8ja+?2Mu87=c70f@lSZ)b}~EYo#=x1@dzw${-s-cFB4U_W0X&S zDVv>ieWC4O)jt$veG*N!1$WG$8ThKn zE>uc3hqdr1K+uQ+h>-eWWZRdNy;bO-lbW7r2B96;RuI$Dk05`=9D0V&p=>@(3QY^X z^qyuA5vxsNVu5s74qfI*S1ZnS7;aFBeFU;pkGZZ|)5;M|CKls2rrvGtx|S?p$!%}j z(LBvfnGl*<@bMXCVG7!EZ=>*EuR#629gBp zmlJ>uX!1lNC2NMzo?NgOlItFML6XCHDY@cN&TG{rS681eRq~Mn(Af-Or;C3}chJ#< zOGh(ccTH|;06w!~+|xRg=UV*xP+`pbn4)_|?APXn_Up-E`*r#f`_;9GU#yqrqjLHK zK|cLKKCcb(`FW7f89_ezrhIM`dH>5nK7Bzxmk0Sg73A~sAfH?$pT$AF?ho?m4f6R} zka~5Hdag-L9^uAt-?RLayJCj?uOJg2=kdKEe;#r%pRWTt=JRRfXg<$Gmgch?dCDg* z95NQbC!q&G5-(*>DL*;_CA~btkA%CZVr~HrlFDf3=2D$Wo8XiyH81o!!`b_icck|T zm)>W9>3uVPz&B3@5D1+@Cs98Yj=>8$o7fpIfS2(0yU{w5P3b6u?iA3%<6KW;gwk$b zZ_*N6Sq#qSNKp3}IUP+6L_U_XjY9I%tOqfp%QSQY+`JfNZt}8_H!*U+xtOBd7jQ0E z`w}81^M*y)gs_ESw$UKvULT!$8Q_k8H$-i>avxak)ad}Yj((rU@3?&HTY3Hw?AyPmMC3417j-A33u2zxky z-A~vK!X61=-zV%E!oD8Beofdr3HwF>^ZpgE*Aez;0P830^@M#hfQ=Hig|IyV>;%Fl z3Hw$6JCCq85cXIA+e}!Uux|&jw-Gi)*y9201B6{k*mnZh-Gp65*mnci!-V}4Vc!d2 zKPBvqgnd7N{fV$Q6ZV4u*7kY8-a^O z(E_Qw1dEv3ON0Asxo$s`W0iK6*C8e4FuIsmkER#%D&5*cEY4iHT#DFUNfAKgakzE97^W%a{C{oy$41iv(yila*(IpycgL zvIHqhPOg;Cb1Q#ApolT@V0Z=>Zs=3v8VI+Ifu+kDEs z>F#M0CQ2{2A-U-b$O#AZJ(G zQ;XUI0G2|PZ^5mfjdpZLo!>K=h)Yl*kclA1xjFglKzxE$Y!~nnFdQehu4d>hSMEye81}G-AgHx!~ z^(f6JKf*1cGC1-$k4n@v_%lH;Xh1R`9tQ%CwBSLI{~VHMG+3r7&xh55wioXnm8Q~Z zcLSosN|)49-$-;uP-qUezeIp_OvUa--lQ*^PNrt2vy9KJeS^fNgp(K^k()*C4`|-A z>sy(`K$CHeFH}@ooro{S08cE+R;Np{3FRP()rFX(L-~Z}G1T2=K(bg?zKg33sMyf@ z+-505Ij9&**R|Fc0CbqA+@ui?~mi;n1Vl!5-44T2_TQo52LvUnq0#v237;%&sK zOl9;o6trulY`@vA39;=P=a{K%LBHdeH4b?9>E)DJUQvP@DaPduYk9jdS!9I8CPE9| z`NZ`#fQ;i$BBYAwFw(+fada5|Re#Mc_$9h#>jl7Ria*tRGI-hTKM8v!Vf=}}D2XYo zLX0$UQmWQiuQWdTfp4tFR-wWWJxcuu#aR(FR-wWWJxcuu#aR(FR-wW zt_jKw`-n^W>Sk0+hvc>Ne&ZS}kYt2jNALAP=)0H!f2tvp?+#!glGg{YuwmcBWcLJF z?PL`GRG$di^t}P>$pE&CF#bf^>U{w$MB|147NYU~02a2@2Lf2wRv!#tVO#AEU}0N* zD1e3Zd?R4RXPk)}42P!MynB(rELW`l2kJEa?!|LD8K{ifjXMD6f6+?Lf$Em0Y3d(F zVVIXifc3wET6_)tA45#kEPY(Ot(1&I}z6$qDEfdOV#xU_mHO4T%ae&(Ttv-Dg} zajJR)F%puv2}!E=2i}`mM4%~eWlgWr32Nf~rb+1HtmoYn7CIOq6g57=)WPas3aAS# ztP;Htqd&@+)U9&AivOZ*mbd#a-HZFC-G8Zx#M{`IlCf!Xq}Nt0&Fa#k&}xDRTq#=S zM(Twrb662W;}{Vmvf^Tj-IXg);XoXfIdCfx$3JJ{1Ey{0f?U2sFVUxw`6?Od}kREm&Yz}PZXY=S7AQJmQHXtsXKo?oU zjp4kD{EN~+_sEOtdR}Ky|2VJ>#*sj7BmN=LNrZS^pr{qSteyBHM+`9Ih_X&l zck0u2v(Hd>y3KW;{{nSKElKnL5A_wk@d=<8)R(VJ)o*8w!um>txI$4+dbt>6tjaeK zpOu#+k;*fYRGtB*@(@)&WU5OyqEslerd>2hGQ{*rq{6tqgHED;Cmh}5+AvMu_Pn^h z9YYy)$=C8o@*^$6svUS`p_Ya!F)ph{B1aI4@}8v|&4}{&~dVJx|y^VU0&W&JJQ#=&}NI zi8fs#OP46pC1P}m4qX;Vmzm1?F%f$^=#0F4Ua-x{%%y{wyL2$K7lj1#7li~1*gb@! z$t+>_5X@#-M6h$javHX^2{6k)DZC+&*fi+mFcZRzALdB@UDyPw{~N+(&f|XKIYJ8> ztS2+>v~h4w@IbWPRy31;Ao?ZiOfqS*vH+f>>@t~_2opD(0YbN7NqanymOj#Z8AX2}OhXAFj~8fv z8Ig~KI<`^ls(%6bqb;y0$1l&4QydxYj*`-kU|FVYC@%?za_(+P49Nt_JrD8y6Nm*A zGR#R$rRPAWBzVn=wV^-GWq(L;#xq;uGVk#m;VTfP=PReMyA8Y9>cBl%5Zs1#Sbz=@ zSJUFmVrfAty%WzGSHE^47Qq?^2VcGrjVyPQVr4!0m^rZ+@S9VKC+8gA*~Wj)#D`7G z(rsovFJp9P;)jd^!$P`#3wNI-pZ)P9+H<`P`JWfzNwU{mT4%OxDV&&X+m_UEE^)zM z2mS`}SHiV2IiFAT)W3)}EgeknV?d{V552wg(%z%~C3>^fv(REHwwX=c_t>X7aQYHQ zf}m^7Ks{@8bgi*}e4U;#q7LI2lvfFKL$%BS*m|#=-ic@Wa1?MBcxVNZlPL4EL!!&5 zoPj`?2cHQCyXLB*BbuC()MoJSlOJY0R@X_WZi{s-T3t|=G>m<7g@T;MRrRK{ODK$m zD8h12vh30r_u3gY62sgz7iJkP9>$2QDa224MX86G8r+iE(pHgJGMKJx&gkA`Qtn44 z4{g}%kj(l6X_)dNK_V|&R>+*okvLEY6Vwn#N{z(9uqG%H#|YP0xqwz8*jHuc@({UB zFiy^~<0RM*q-=Hz#{pzBy3Ir7+?j@oWVOGcBJ($F`{iF$M$Ik0$ZVNRypknjS~U8< z3Mv0yRIh|-(7WzhVpA5(?m-eO+qrmiNp8=S%tI|}C-M;x zw5(K<)>#hwngy`0>B>EyP!R*nV1nreBp_phcM$GF1CmSB_KN`9`I1*Okbs7HkY|i3 z2g<#oQs(eL^=WppzYe{U!7+(zc_JfRp$6{;Fcv5AhKQKVtKDB>0Bjh8Dwub@0us4^ z9gdmlBZesGMkLr*GPq0T&L%rUnSy$7iR1|=qoG?&PhJmpQ@_HV zn6(je(I@+?Z$4_8i*EB6s{KF*P2_kA?6D3Gb`kITC~A0*#JByUm6PXt$k!B5y-k8|fos z8$YP?Pq?UJdEocVUgQQZwr0Aq!f1`wMubF6ikwMi5s3nBNk}A$;e?Wrf@7{3A; zYy=(9B!fY?ViXmwUnmr`9WMsw>%44P#*9I`-X2gK}37 zBQ?yBluWbgQIL56xSB-^~spp!sYTk#CgJF!J@uNL_(2*=^B(KehxTa=#q zHY)Dz#Nn<#Am?n=yB8Kodj5^=b`jF@UmpKjh$08wW>VR~IQwCj zmbb*~k0WnbFMWqasE+7FtyY6xv>S8MdBA15IZ0+9rVr+%4`UFE^e4HKiAeTvSz2+s z-7r=vs?w|@kL>BIG+#KX;;b8pD#$P}F zN=ux0?aLs5`d*d~&js8+wVqnk^N-U@*m`(XG9kz2r=M(sU%<{dF4VV`d`;bezWNsZ0X-kTy6zi@yGz(zoe(GqQg7M zy=vxuu04pJTxRFrh*mV%N%)9_6SZhK(a`iqNI3mrcv2pqZ7fqCanZeW%G_1XgH#z{ zi(X^83FFE&yyiP@TpP!_xE4oL4KP3v7sQzNe+mxZ-%KiF-!$p5?=+N27nCVm5f~D5 zYabKJoOy@KGA_6N@2DsU} z>lj9tIf_wb9m8nN>iW;HMTFK@YjvPM`;=)xy3H;4S;n7EeYvz(iY97ZD8yi zky&WqU;hP=u|!_~B|LTwbC9lK%)19Lqbz>eD#Dyerb;F&Fxtiad!Iw+4S#dGMTwr9 zEX2lETb-CIds64i+^|piR=gB6_yWq@WNK%tmX=OSY4&BC(VxlT)Xz(^p+Eg`!=^Lm{WCEuP)@ViGq$l5)F8;%@&~s}*usPSG6@0M{H+MA7XPz$mvwG{(F! zAC`mGA79zU;kJpfvgV~C-Q^9PozG&+A4Y*8y&QiV@K?bfC;4S>!VfGD zMDl}ukc&z0twfC$Vi%s{L0STFkjmFR!h--g5R!&%qA8t(EpqA<6xP_D}7 zj)B~GY;GPw8n8EJIdn)yvD1r z!d$@L;&dcTR6JCG?{6SGO;%`^ywfmhwB*)!bewxijgw9o$Pm z`i^9AK!JEaIoF{Gb)+=V?FbM_ccjgW0=dPlPDi>U)hp>sS>t(xnWd=qMmr_sz3uhr zM^`RC<%)Y=JUMVqVvV^(HJ==K1z+si!xs?oQee^>`w@~#+U0OJGi|rN+LbGeyl*I9 zSoprmH$Vr>E6@Ac;y4nqrrk|R3AnLUa=`}BzuSDqkPjYa=or|BleyT_kced7eO{{2 ze$Lf|4xNPO>)HjC^=Bvx=i{@|*Ia2~=;A)o(m>qnUYl6sde`#FD|&F}0lj;6shp2T zuejBMbY83s8o7`(QoR?WL+-&XXEBBU71+1WDh(L8JloLW=3Kcf1{WwCF5zz8)_R3j zxN;rlGSphD(K5Gn85yS8QR0!M&Nw#1xO^LKNw%is;l6Nl6(BTavD^jG1F!sw7?xmEG-uv7v{m@}+<Jnh}N~DV*j_CH7fy7bW z9%Bc(Ju03inN!_J6x? zN*Z=!oabJ}dCttqMorI()c=IsRiT-|t;n*C`D;*Q0)KcmBev{O{8))KvZ{uCy$79j zd#OLz$ow;MDh9r1=-ZEyIhtpSJ}*`7t3HYPtEYJ;bjZdiCa@SQFcYEHw9L$T*vuU8 z6+AF2zI{@I8B1zKYq~oNbPg=uVH-(WhMPcUS-^4=@S2r@WQ5DyaE9gy5}zf-+7IZn zHi4f39Z|hO*Xp7r0wzkfd~uUA$&9(zL|6BkrtZVBB5p&m5C+i=x1rFdNs&W80=l(Q zrREn{W=N*E(IUvSGLga@64_tG+L3_~<$x(K5(k=h79EKbC=e*?g=>hhu>5MD=VfNSADBA@!RKoJ}2cA@+idb8E_AO`JIJX!u6 zV7iX`5b_LlMoRfT`?W3t3%KBg^-6=tSNHrwoWebS!AbV~52S|augxgxyrX*RcjBrb z!57DG^8V9osZb7QU7=5qaL`Z~?^liSSfGs;re?V|ccf-!6x|q^E`xR6OU6Ei`jEb~ zjQrSCWPPJ4n}~^-MF>T6jm7~nv7m-HEHN4f8Y_Y#aSXwk?AmhCT#DRm56a~oJdjnu z>n;{v2NqV6(=c_n6V;wukJAwri0Af{2dY|!q$E2BqTMn276-A}Ev16lmmAC3Xkv9* zw-F3&sC8Gi`u2eCOn_YJ(mqQUyxG!bT@;Fbv?Zml{l&XmO9!SVuH-0+_q3Mssfnt5 z=UYL^_Xj!R{d!=PTZsFNq&9eij{ulZ&v`JQ_DNRPvIVo)H0#SZ?(ItIm9mgBaHVWK zFe{1a8v6R!*6vxDAY(C*11m_fU=h$O#baLqe3P{8Z$WMOu|pjxOU$#j9Rq}e%^0GP z6bmgmyQrHnI3qLmQ?G@OBQkyW*x}LiJZZ~|*-QQD4xCV94#1B_Uh*u%ZU{JQC>-H2 z-LW60nMOEzRSRSCib+m4^CX#xmGsplL(4%BS{;tGXV*OUb@yVv4JDk5J$r$KM8kL z7+W+}j2=u}Ow(XBNI*l=295DN8)Kh#{=8{ty3Or83(R+a?JT$^W6v5~15qFa9C(Vg zMO?4mN;gr@(23X60*%+Ra3f^omh%Cbr!~-4UhGvOp@}HvbvK9NSYLOLZLS9g z?^a=NMH{HCA!+YENxf*!ea*pE(bR@&D2;sw?GVnD*t}v;F0+hh5vQLK?fRWoa6|ax z>W{Z9Z@^!v7VNsPJxdkJim!o4Cw4c|iluWJVQk>i@q~rDGi>G3SYtf)OR3NZV;_Ne zo*OX6$Q--!2rO+#sq8wsEQl^MqRYf|i6~tbO4qhcB9_EF^N-+#je94zqO@imJM)O{ zozSm3_6*2TaVYmu)BYq`&{@arl3s^Jl(LZOXr?TY-@t*0~uN$|iR$i$>hqj)3Z|fT_2G z-bVxP9D08jc=60byxRRW8@Y?#!vgPIde;Zu9KCN0ym@+W3B29(J{)*^=>2uz?WK3% zAzM%%yv04v#1{;Qq6-eSuW@QC*_0#KSJh_o8;9`4eABJ0$9VDO9dxt^=Va*E<&6iu ztbxbm^J6cmu0)|Y^eoRSuglJvRo%Oj?FHR~S_WtYyvqDMlCK-s7{pyaP2_#&vM-t% z&~4_ibBOSM<}wt>{eko0?rU4SY&zT8vX{z_bm&Tx>d*QR8d5iC#k&ArvpsN+-5zK# znpN4RHFoUjsxyaR9rwG4=M851EVp8B-k%GQWFDtKu72hYp_pyW^Yxct%)6C)p>)~C zMI9xcPCWFUtYE)CBkMdBb~MiDlaP1RTpHYic$15mERkn2xSJ_5acIP-SPU_jX(Oy& zGl|B5V9b0Yae}oP<>ESUe>HHAmSeUlPE?5$!sw47Pn6qIo9W7CSZk?2H9^%Hpf}MK z>&e!VSHs+Z%WbTfnbrx&h?$?5Ud)8#f*jhBcWh4V%!~A$0-B)vJ!p8pj~xPU?OmAH z<9#4e?LJjvv0qr{740I?3BS*|zBqXLYTY3A) zJ6|#w(rq4#Lqu{vV=)k=4q(K+wy|rpN2-@msM|e81&Hj=48sqhXM_&K4&Ja*UkDFn zg}ChdMAzz6qxCK__eAzAd{KwhCT+1;pGoWWa?NGVf6B=&;=p+vP;ZSIdx>F>Amw&j zn8>Pv8+wTKU{5hEUB;zraZkuu0?MYAnl()zk}_d~NJ@YaNkeg#*-B?I-v)tI=#&x= z|3&Hae|3&?5wh3T$uEXUkl;#@SiLruqV$_CqBA}rq!dC$~=xGhuk?oa~P%e5Utsjx=DGaN+b9z=~Wnn?n@T_^U(=Sz? zg=Ud}sp?uz?n_aHtxHg$>Qvx8g!Ky*FH7M?+aF5k7BkGIn4~TtuG)P`u(b6|XCPlZ zUz6dYnJbBC;b3WBHoZ=_fu*f5UC&e;Ad0PROI+*@xKKC)tOXqT(b>S6|D1^jOx|>x znbAsSKb^R9Bm?%d`6%)N?Fphb(|Q(X`M&bPFf5&O{w}hTWx%tPvlh@|(IxQZfE$6~ zi&kKW8aZ2e;W%SYfVN;(Y!fEMnsbJEo3WyEGUjc9B6G6l5RHR*o0&%9n0Xsr^`L1^ zx)Ia-lh|O`oMYRcAT4kCO1wN2uY46#TK`yoyz(`Chz+0E-&L_x1uhuL0zh^M$0(< zDd?o?BtG?((E?a!#*~M5E`s`PA8zxiS0kF)EI-EaPen?+Y;lfQlqX?IF8k~G7Fbw^ zrsOb|QFve^^HZ~9x)`@MF=4z+s5G)=I-YZt>79Au}YHStQ>tT@TtkzWJ$W%+KuW3axhBy&kJo^PCR59k}ewZVR~WkNw>C<@y!DjfKk_7 z+n}(0m+z8!HU9|5ViPr+`v7l>sZX{7gZ9?QWtAXfURyq3y?rgk)n+$v_X~j`nFD;~U->AuNpOdA|{!f;M zyQ2QZ%nmb}v?@eSx{(>}5(ak#%e{E*6`a3MLhUd;bm7rO8M1zE%|G%ySWf{Se z0+Cu45iEzpRB*sHKmBs<%zq!~h#?XqvS?#Wk&+l-q$HTsKSFXs#p!~QPNvtI6IWUL z{VdZsUr~#S=c|lt+^`qQO?d1S$`tuh;v4u*rcW%(G(q#WxSan!4*FwXP(W=Y1zgGJ z8gPEMj1-J}~uP9d`BOI=4#$oMBr*U{fV-of}M z*sP=L$ls3tAU4K-IGSoWY30==cZ~nq6-eN3Ay%lSKv4tc&fcNhT!X0>U4v7l1{^bd z@pk$%O<^3Z=jBpQLbaZxkD#6en|i(`QqLeZ>xo)Op21rFpNKDp+M}jUbR$FUjSS|w z&Uoxp2zIXxXbLYiyY-i$M7uXS#SFNw9`23i)r#UY#45GT%{VzdO-nznvw)!+?;6$X zGfr1ncXXM)T46l~MsvOT%K>w}UIocsX%_OIX7pj;TE|)SI7Gk*1jp7{TwgSsvlP~E zVB|OTvzfItD;^CW&yTm1&U5jVGG(!T#(IPsi^lqeriR?U7{p(x=)iDp+fQJ18PuRxY8EB6@?G?Ti?a>wOQY{h!|955yT{; z3nCfKw~CfRtS((vkS?o4mlz4}IT3yQ zdf|O6m+P-@0xzt;=v7uo09oNY9`7XButL#OU4!0NzR#uB52-4aIK$r5xA2CO$*6Y9 zQVsqp9TJtP~Ckw*G(2y$6_`MfC@KbL+N*Y<9Do zN~$oX@VQyO+d2TO91JFF1-ejA|RlEfC7S|U?GZ%A_PT>G*Lhh z5&V9?b7syv?|biNgU{dZ`}TSE&U?bnjJW&SyL;F{keDaSZ;TNrw8gl<}%2!8{@H!bgMjxN0yd*1tIQdn!?r@x2=szt>v z+F$rLd$zt&iE<-zlwKt#{?!M?%|lpAer*GUPY3KY;C^>9?#??2v!LWH5z1#VG zGj{wwMF5}q__IB)*!af3;}IX)rV5=xr3%NlN%uqU12*n3?q0~%*I-zn?r z-wE&z8mYwqrTU%74{MT6B7_|ly}9=8qHCs3_N3y;x+a)YvjeBVr?=VJ$OtGZrKAH9T61iq|OjN9dpgyTUdqR+k20ap1Xb;P$qB^ecpJ%?H7Y zVq-%E&*h7y{!xgk{70r(G+e$i!zLi%nU2h~jWeUxhou~^0%q1cF4N9$_BrdgGWV@# z4sC$1&oLUx_iISI){kQ5L-4A|n1V&dc84X#c8A4*c4yR6zTFvT z?Kulu+8u_Gc87ta-C-zOrDQ=S^pFUzhb+*Z-Ly#6?#QVI7XZeT5Iwyc)b2>Un)(B3 z%*TCmUK-vQtTtu`n7?rQonpc*rP8$NtOlL!80kW^vpp4I13f+spvdfW|8WLCOrg*8 zX!$VoSsra4XM4F-#r%7$%2(3{%q!A(IQsnn^%epK4|8 zRZD|PSu?D5z)f)vL~)5PV-`(d)S?ND8$FPFCIO~wM%vR^@};H-)rRhNLsxsTDP6IK z(*%0Op#*y-m?yWX6BRU0*#QbSq(PpEO3+Zoc<|Dv2lsao6R1f^)kKCH^P*2E9J#0Z z0+7X>*?X*3=*<2AEu~$HZesBGJ_%U9TcN!87q6|1Tn3(ZVmQ8t;-72~-w>T;5cJ_f zM2QaWB07c2*O>qva}Rc3*oFvQ?`{@atdyG{gUggz7$>$LOC0EI7&Ff?)9pKjS@FPW zA#g?roEZXVg}~V%u!I1jVB~ZqN^qxJb4M=Y7fmCzXd20!(O37m{T#C03FpQ2P+!m5 zc)|%=&YLE!jyXuav%D2+(et;0Xj*hC#FLZljXE2GG*Jd}7_g_^hdW?)BVNOj(}&qy z^><7ahHy>2!*kW=JkV3pi)6ZT)n9}-PB4M{p2zjBnX5i(z_?uXX9j@XZ#_VEqc{iD z8)^8$1sZ*sqqSv5td{9yAAq^pw#W+}elPRVR!*lM3Y10n_+AW_(3nf$a1uvC=uwD; z#0gUJLIt+Guao1|VVSXrw^8QW4Z!t5YFOATv-#=G6%W;PQK#1i9owv&?5%X~bC(&W z*e4+=v7S{lsJ35t9j2p;^Vul~`yk^`N_nk@rv9eo!<(aJ$dP;EjY9DA)V8+FaK7t? zrdA*QrLhbCOiSYa#pSL#(oLJQR$-WWPn`?16-?ZzXZZ{?BD0w7t=>!UT}oPy`{{Dt z{Xn?oygAh|iap83&Vbgz!=XK2;(pqx%b-me!OlKUHCIpy&7W?uFg>4GF9 zhEXpULz)=bh1Ar&h7%xnpwSuSTC*kb-jgAq=WjC&1{xgyHD3f z$74?R72r>-TaH0WV5%3vxE)btwt~kn*sM=Gq z9pzQ^qfaC;NF!DG>rHZ3339AOazw?M9oI^|a_^0?Sun{v@N>P=%~ zW)#OQTnpZg2>juOe{k08gnBxnkGnJTbJ1sFV8zT^C^Y5I}95*cRQ*c>Y+{EMD6F>y>AJ!|0i3BGCI zLj*rD@L_@@f9=cT5rUHq`~ktW4dehh+T6g$2<~Fw4+(zGz#kEuZ{XtuPcrbw1TQl1 zCj`G?;1dMDYv7XvpEU5N1fMgIBlYO72L7C2<~Ke^9Q8+Q82A*yZ46vS@F)X+N$@-a ze?{;+20l%2nSsA1_@aTo0a$$(KZ}3MulM-%48J~Z$Jg)p^$EXz&#(Mwd_BuAdMy3} zexmn`6=yF|*Kd6mo(I^uqUH3Ng^|x=s@u5y9~{x z;zT75PU1un4o%`jSB^~LL__8$aiR!)cMc2V5N$XnNhkVqd=kg}M;9k?lK;z-I0_-U zHi;AUyg7*zwYxWo6Wx0}i4z5UHi;80d^3q-Aw}6|67pjaMqNpqsO%0&oM`5klQ>b& z1xcJ}(&XzRn(kzNUE{T)6u}%^vm1~D2PU_#mNgS0t z`kLXWglSz9TuRpjm(nZ2Jwkr5UI{LxSAt9FmEcl(Ah?tc2`;5WtS;#^3oeyr!KKnH zxJQy{7F;ULf=i`Ya6e$!Sa(@rqZ=SjHAzTa72M6lF+o~?1$P^9tgr#@PU4uz0Cz8O zOk{w2?95^Ft4w5o`yT0-$N={!ajdWb?m6O^@BsHZacsW=T>kgKu>bbuD{+83kT_Q20Cy^Jti%ECX5v_h1Kg9ui6JO1 zk7dNM5(jiI5ywg#;4;qw$4VUF#t_F!9N^{=$4VUF4kwP4IKUl494m2vJC8UqYsKli znK)MBfbJpUScwDNABkfn7F=vDWFpa$m9^Ps*454eRHjjfnmM7-? zE`!Sk8~XTuQEbk^<~G_|_{8FLq}+`J2bf&jE!LNs)Ik~^E-z9RLELEkSxzu5#Besrq0;d`G1HXvL+1{+W@wgJt>S{1kPVfdTD z-JzLn@ZXMa{>d(pJW8`XLq@}#quvJmX`iB83YC|nT*e^nP2Ky3vsGsTYH8^0i1vUy zO3``vO^lr>{!*Cbjv&7(ri8((_nJEMTG=C$MGn7sxy~8me9e@6ah!ZU@}>6Dl~Pj} z@ikvO-K^X0p*hP;b8v2FV_Z1QtQTbw%x8injRRG*HF*?^GR&7dsYA}Q9>i7mFy)M%#S5F0NPY{4?TWMX)> zAzxk}Azw}0crjt znb<~QZ)z`Z1R1!wEDYC~GoU+?1@3m-F4xnZ(*Sy@fEc=ZW@ysfJp(+e*3uANWZK=( zpo>B+W_IEYni@uuH~VI;_cdicKzwIXR|nX)Z1^%|S@1VyHN~IJ?YMJr&PDLnv^46n zH){h;^~|3`F)g@jvS+r6NwF&R$!1P0_4k@JF^I$#I{n&itFEW99cpFou?-~Uc3#O# z^{x39c^obf{O0?!U+@;rFd~17mpRq^vcBdrmm^naK?YoI&XqT1VdQ#YiOgkZXFFk! zv@*qOj4?o4CCcZ(ux#XNDy4BHBR2R3HBO3gladNbEhnN25W^eGo3ToOSZ_U@b#14v3rkFYvcL7+h`Q6p?);AmRg%My0tXF-djR9w>GpkOQw68 zz@ziZPF^O8kA2#3Gi`C!O|2pgT;!GChwWJ7<_DvMAr!8s@hlR|KNv%84yoZDSUSzP zEfWjbO}%4_<#|Mx#4$8vt1``IHb?j+)PHT_=OR>7F&M^7Etcn!V@ZcT9i@1{6NZqr z!s*~OiM+J#l}B?xql<-Onxo56IfKourT(v>k-_d(R2Nx0#h9c$Ge-B%=v|8EfS29} zn$=a`O|sfeF(bPmrPFW}b8@ypx~}1+Nt0(68YfMj-hk%;#ka9phD#cF)-(R9W9b)v ziL|~6x#bJmt+6DqeZyW;=pK&u6yD@Yot*j1p(hfaxxU*GadXZdP!PCf1Poc$_#9gr zvrlvPSFrW$a%6E*&-5Mr=alL5{O1AF*Y}^@(|i2qCev5*pBqo_@SmGbZ}y)X%^sbT zTX1D~+4m(xFpasCy3#QFEQk~ND`px{SI(vUUSNr~H>2_T8oX-Sq@Hz4=rAQ~*%Dd> z)|EhaYg)GQXP^z;bEH^sFlA*!puk>afu$R(&AtRx&f)IVzAKOu;o4H{yAt0WGq-Gj zeV>a?a){QQy+uu3ynhuI=#l1@{fa zYTC7Gt~`bd``G9;si(|w18&5TL{;8EI9s9r3xUy<*XZOcufu^!dO*Md`iZuFGOPou z=xkr7pe)W~y-1VH&bFg@WjGw5=)k-sJHU8wx{Qu!R^L@D;W-aT*^zfqwY_oDl-a8_ z^fr|cN%Ndb#G8Sf>SGFYGH?y0&-EPCh|Lu}$}(V#6=%`TO=e?18ADDwK!w^p5rd}L z*o?z`P3oSGPCfKi$fD_<)HvyY*?CmN4h(@9WIEKAYJX^5S1$lYR@-fqDC{1Y;xg+XQ1H^xp`^#_zuqjE&##5M0Kwq-+$TwKjUu zK$>i$bszL=BL5)xp838{aK!UI><0vU4E!g-%?=jCq(m+Ylljo6t)8jOmGEv za^g%;c-KpoiQwM8%iv#@48_MHggjpn8tkNz1j8ko?IqWYD68|Oj*?1}zT|DB3e^%f ze-gzTHd?yd8~U(axoLP&8sSEf-_izM4}NKRdqbV;M8)2rYp#An5K*Rd)8)6{5akChEHmycy@2_a%`v*8xpRfr z6FK{fS|0FPuE?Xj3yUR(#Ll?}937IIuHz?xF{~Cd1ebETM8_?%+u*-@PhN1r>!{`Q zR3#5C-3QpMB?W>z;>2V562?&^xG8-{qN$c=4=N?%aM!jYX&^ZCi;f%ag_a1bp}H+7 zC#lDrpYic>OEN|4&eUW_6f0zkd!8hIZpUI?>C&GrgVAOB=rTB6hLd)!f#;&q`@n6S zt_=P5NiywO%{+OpFHv$4LSla;V@+)WCn`b16a_S$XxfQN&@i<rk6t}Y?wrE8ROgY1 z)><;z=GiJ3cTAL9!78JG(V97yS6q$N6Ah1|!c^Lr>I*z$<(97qi-Lrs$_f$A;?VXA zBdSE1Bx+Y0s4G3Gwq!w@g?8 zZLpDTH9D7BKq28TdcbrAQ-XYzKk4EcZ62wvvco)noz#_1^GGSt7gD+SEvEmg$qfHHgpx=B=tu_s0M9wymNw%R|*@jVB^3z$u5ad`?$FceEH4qA4I*4_-dlIpKs zr;(~q)8R`f9nSJ_+KnT!Nf#78_Qc7JRsnivc4cf=Q;bcZPEwdAbkl8~%`L4y0 zOVB1GHrLPNn5`Q`RaOHwxGRrD!MRd`=nI7inH68S0&APF0m_AKg10*EY4n!x%M>-O6&$;#BPG))itTGiT)Dcuqqa*3gwl|l0HYrKhf;W|P3@R_L zOanDu+eOFCuSVRgC1={?E(NE4{J?zZRts{S`$PypE=&7f)-1Xw&QfT}cvKLbQ8?7u2?U zf~K{T6`z1Mg3PP6SqnL%U;{`OSvj8II@yI4xV@9L8|fXB)y2h;S$O~fHra)TkPZje zN#B2|WO?vQtd8VagIO|%4v%e@vd?`rPe+HErBzFpjm*U+$VE?G?}I0IcFI{HQIJ(7SSlkO2k+=;jit5aoFm*2bZm6B;KsEM$3*}x?}>=y{gy;TBf^MAXhf?dBf7ywG@?#Ks|*s+ z7nq~t^9$&%_z=Qt421euxgmApSZ|cgUEg}J%b`12QIv5-eq>Y%j|^K zQA?*zte4rNnTC|M{6*R47tm9hR~F5}2@*j)ZQ(O5X(pd|CiGkxCNeQerKICePH$~E zKSWASu9K2Eo(VlyCMD8`rBbq&XF|`FVZx3wEt8`>6MC);lcVY|Imt7j=gKfSsScBC zJrjDa3=>{Xlg`c~o(Vns_QjlRh|)Qt4wGMbCiIm1X@+33GntGlMAI+H%*Qs81%%62 zqwZTvaj>Jv@2C`nlN5)NVs3r`-L|%5!}OjesI{$cF)9)h^V1o_Shea^pTodlgICab zaW6?L{ypI4~#+c|FN%h!5->z|@$H@cq^%_`=2{1Tl>0U$4;0rh$ z8=i{?fLMQGr;24?=#Dds|GK_eeEIOULJ{MZhmiGY%bo1;V5@d#L!|EkN%irDX0Es`GhEl1_0B4jGm?XFf9tVkgglS58lrs$Bd+H0N1Z70q0Natm~MWJWZh zA8hzE>Kql@{I0j!TNHlk*ZqZngK!O) z2;9;=vKYOI9BKerLdVkj8>tvHZ2d@(H0-tk#b#T;#O|{z_M4f=%%!HMx#n(MXMKK4 z!=%ZxhBr*AuFYd&vKTGv*}42av;XLVPnVa47PAR}n8jAm1NSn@4iCCsje%DGIZ(Z( z?&ebYTI9Wa4N%3ti-DWk-1|ncd>{6(aSHTL$Q5SL>EwhN4&A=*0A~OSF9xv9GzLBw zl4a?$o-)Yw_c*e_%fEqvxY5)jD@ zj4hWZBf?gZdK&Tg&DL{dFN0e((liV(C1DP57BWt z>tsC0eL|#8*k*|Ewi&VrY%^R>A}Uz4QT8DX*b3! z+-*^~{ByP$w@y4VI`Faj_hHDg$a+YNw^o+9ETXqUuMc!!^%5#PEI}+pMv$(+=fuma z#ET7<9&%96*Y^h}qcjUorK`WoyyV|o3RP*76AnRV>DWqD(6vBQZQtaj_Wab%D@CJg)#-v!= zQ|!PjPjQgE`{}NN?H$fbUWYSrn;?XA2gS_}qJqDu1?aDr(i}+^&@eEGXc(9du0b(2 zuBws;ON7L9nPIvlr%QUeq^B$NkOuG2!OknOF~{XdE>ezUW5#CkN>l|Rd{tls2~Q%t zCu8lw{uR118Bb6W>nWM8u(qH^5j9wCdEaRi-LyviLNsc(m+Q0wwm9t!_>JqJ7&b*b z-hdy!cr$qxyf%YZP#Z{zq7W=(NsuxXSY%r74I5IKC`p=-0TC(#Z_TA$Fq=6N{H~Zhy_(x~t>Y(5vI6Cd)>_^3(8bT0Ui3bSuQ6JyZ0rdXkCv4NlLD*(%eb zyZNPY98!QEiK4FY3t18%01I=C&t@zGYV4E8X1 zNo}kxSZVk!EA5sDP*T$qaZ>e}ppu%|iIaS64V=nj!#!EKML)9XwQF~i9EFE50A&UJ zqG(XnDG63}$vLVzW9H5Y#+DsXsxXG^h=vMtlpWDnVOFS)WJZ^4=#nd4@}o;Wbjg=4 z`Ozgmy5vV!__3Y9zD{W;;w!Kig|rjoEo*L!4AW4JMJ{0^d((Tynb3P8eBEaP*hT7^MwPA*%i?f?Yl z9Xxzq-Jaih`PMz(>!Y6VPY%*AW?20qp?)!VbQJWgx<9_EFHL~Qi_oa(Y~l_e?q$Q> zM%-tKd&O`+Bkn-rUNzjC#2rN3UkumsDsZ18?lr@G^d+27{5)~58?J|R2NU;(;dUVI z3&g!?xTAxJCwM$4Yv{L4kPYwhP#b)hZFaAkE0BSW!fOW z8#s3?zrtn=_Sm+|G_BAQ46;~oN$epdGxUy3GCDEnT4X$O@11qBzMu<6=Liq8e2 z(Yb4$VER_WR6#FJdB>X{qMsp!RPVFT2O-p(#?BXk!&^l>CQ5V5BTX_-p&q&=h} ziAO4OsZHXM%DGf2@kr%d>XmrRNhVh+mw0TN^pF}R9$O?mq?(Dxc1aJZYvQp>(nBho zcWRmpNe`)i;_>CAhg3rGI40@An%K2hwSl)M96?FX;MbAFLYKMT z`bD_>ld;H0ZY)AKJr?;JD{FS)Qj$!_E}+|oTiCGeoCimBjwUoKwGZ|fCV}&tk%;?h zj6rnoJ*K!zdS%1DM_Tw1pY=pZ8;c~rr37*`<*w)nD?zU5Y2rkY3tfcnU zy)P|4K(GD^9&Aelo)QEeo@?y;7ntZ-lm-~<_gGGOKGXRBl;&+sR6V>msl?2_;nP&#`EiFetpQVFZ1gie)aL|4SvnXS9JAte&6+1 z2>#K)h+q|ZpsiFtgT0QQ#S8fL2EP{Krz^@%qVbifWfEPB&{n2IKAKmqeo36MW z#$wl#wYy41!pJ>r@f(ujU#XJq9d4$Ih4o9Bh&$1YF2eYS;qq9R*R_77)nn5iJFTOe z*18XOWkObjfDNRP|eN6pLVpO(w9pwe>rD!-&$ zj>A_V+eP#c*$(haWP3cmy1twpI03HT;FFVgWHidIdy{^Cf+m;V%08*^%o^@QOmIq2 zCkP=CM#=kr>`Y#T7g8L7$*qV$|aPit_sYi8ZLfVy5x^*mGhh)L3=I=S|1W=%aIeiyEMnA7hH3S=G=| z<}mCbPH#KoZKE+K4Bpm5z!@W>7oj*&`)kmiyQqe_iTkX&f4+Pr#(hoMn&@g{!r2zw z&E3rWaI8$5A@^<7OMMNuMB*!GBAW_5owjMXv!f721cv(724z?OW~az`MO$afMCJQX((0S7(@)tll!~ic0zz z+W7aT+y}O{BNzEDD^3rH=GQFpEsPu?{MDW$Ba5hU|9Vkp?)!VGzBZal;Jv58}=sE^oNT7l6BfxRT)}5_chSEruI^Bygt? z*J`*K#GOi9hv7a$+_}V!H{9ODT}0eu!+nXkuM@Yr;Z7j#V&bM5?n2@&A#N?h-9+4J z#Pt~NLE_FMZieBWBJOq%g%JHDwTKi$`k8ASxyvsVRf#nRuk83{ru`BQ<4^S}Y!^DT7o;@kmV> zr0$AGYRVuLNjy%1G=dqYXr_3ane-6V5swR!9-=?uae2~1Dvfw7O?pVp5szDw9#RFw zV&j#Z~10$ zvAx!f#jx9s+}Plsg}n1G)P=Fr2VaYv1J26LA3v4VNnxD0n_uEUb{I3WMGCrt$F>8yH5cfU zSd@d*Vy7mV(-LI2!Uul{@JaDtEytls8A% z9N!cnCEuB#FQy&`qYml(RO}WUmtRjEaj*J?e06b3m-7YhMbnL$u14xba|E6fkoZ-( z$Icw*jVVA5BdO30RxQ^q8w%dF5PA1Uwn?eX~R8Uu;U z8A@c%U^dfc*w6wGJtQiaH`qd$UkAH^a_Yt7>9Ui$se5jENMD`|p<_$K>Ts$#m_O7Y zGq%*X1~78FS0}ETdc%sqjqvZQXQA<9`{vA!`>0)pb(-Ut8zmhwr)498!46-I)T4{@ z5K-D9qQ;QBkvqSaT@-BBILGw!E~PRF zlQj7h3^D!da*8Yyvts{bHb@V6J(gpzmG4Nz`h5?+3oyjELs|C%l=9AUj+WV-a?q)} zPO?;-{_L_UF4@(?leOY;z|R#V7u+in2`VxJ$`j|@KSXK;a8iU6Jm5`Nk$h*iAT}Aw zBW~l!Lv)bgO)wIEw9TTGkrxS#TU~gnx5+gLbkmlmomj{#>J7CGw0i=ajP#Pcnl{kc z%~EGydYYr{-|$U^sms=s(0#~E*Q2h~e1#L6kW6e**E(P_SWiqL>~b^!_E0gPYgFV! zjYGNf{%mk*Ln4))|Kn{Hg!KHLG$kGKusKHc*7a(`B~m8sQtjpboAH3O_}>K&pIzCH zQn?=(dzU*`5dz&@qFyMhW>;8r(}lIi5QT+GMV8bu#w3g8aqiSpaz|g+WlV#0r96`I zI?`XDpjR|GQSQe$k**e(F1qP-?LS1i@Oo%FVvr&Y($hBzNTx@8U3w7Ja2FNbbX1=k zA}VQ5KK=Mjx}gUk6)P`U@qUofJkmER6(P_g_7(Aphj!|vSQG<6wsAsb`lWa&0eZL` z<1MdpD+>TwU&UpeZaV8n43Tx}DV71{&nMY!3ON_-E8h#U7oX;+d>?4n)uNKPUO2A7 zm4}#>Z1smZY*Uc$yFGK|=mv|hN{$y^*}{?K6Jgj=V#t8;a$w1bbYMwZN=MkC{V&KE zE7{&Llt_xfoH11Fi5g7OBYk4;xS;tXM``a9Z6MpQ;GFTok&te0F53$WEE1emU>m#O5mB2?}uvG}7#6Q?yA0FioZI8ZK9h{)*cluOd8ef>A$ zzP=T?PW1K1GRv_x{{RfoV?PRq^QwI2RPdQ*^A1&)F|}jh#JUL^cs$`NThyw50V^HC zteO>|=-QV7#N2-vekzO<&&L$|5A~22lr$XW1BjL+L3Kz>6%sg*0r4UOdW13v%Afm> zMnM9!;L}Z)|M7@uCHh2ey2f5*8#hRw=-&<>H?yX5wC43Q?D>9(^!fbh@Zv|nwBsHw zKkgmn>SB`{|2B88sbt zR6rBZDO4Z^KU^XcY+c62<8qZ~?BNkc^I}3pKsU+F6qW2$Q8C&f7mjx5DzcqxM&yK% zlepE#=!d4D3HQ(Kr8qoLO>CD!GCn#8vQM@bj8zJrG1~Y@VhqPeL}=TPEq@I;=?y)Z zkVM0=SM_f|Ro8%#p`U%^Vo8V8sq~#4^@l!VF-AYGX6z%A^2$%Z+Bdw|q~~rHI2?(p zJOQtuI+7CAQLxZ?g4BJ1*|yb=7su+78v0hDHhC~eVo{I?pJf?Br&^+)O4NFh!IO+v z$Ah2NJ|b0gB-y1jN+8|kKN<2ew>ifSV?j%-w)05F!Ckq?og9VB(l0{evF zIO5B{=yn#8*jaxLiYk9(LrmXW7Jx!+}eiwmEqPg z+|!1eW4K=%Zezp!#&DY(?ze{9!f?+RZac&M&TzXJ?)QfK(H1^$&l+woqx*y54lvwv zhCA4B&jS}dZQ^`^;Kv63iQt-VdSSmva90EWOmM)!mk8cy;L8MmY2YgaKQ{1Hf@{6y zIkUrw_B8Nyf&&J=LGU^Q-y-;91OH0!Ed$>s*!EY?nN32pfq{P~c#whb5In`ecM0BZ z;ClprW8nJ)|6||>1lM}oNAypEyBqi+!HR+ZB6yR59})befgcn6$iPnsPW_wb{2zil z8<>H8Av(^$VFa%?FiY^~2GST2ePAG;D2Z14yXRaWxV?czg2x(IB6z)l+@KRZWnd%0 zj|^-gxaK>ab2Gu+4Qxq*BM6>szN--Ywt=kxtHM66tD}hHPZZb7Hp9jBvfXfTy&P@0 zxDIw0F0O-}hKuXb7~&-7+;FFD33tROE^c4AH%4)BnzNMy!4nKzjo>{7P9gY)fol+)^qyxmmEi6MP9u1lfol?c(7-amw+&p2;OhVI zthx#AZeS0=(+un-_@IH)3I5$c?&XTseBZNLo8V^+oJsIP17{KZv4OJ*er(`61ZRKX zS*=U(2m{w6c#VPU6a0;Va|ky7(}&%F;9LVYBzUZW8xg$Sz>Nw1*}zQ*j{VTH+LYkV z25v_16azO0SQYs_2%M_VT*LjqaPtiJW5a#Ma6dQP7KVG;a9a{b;Vj;YUzE$@t@%Zf zEZ&A+%>LqS@e}Fn3k<6Xp9Q0AKH^d6zGGmn)_L6l#1<+CG8T;6a+ymrnaoXt*d7B* zq6}_e4c-#->Ynk@jYzKoa)h|NE{4l$h)`>sU(o0hjsi{7R%i`at9i<|wu&5ezE{sR1j zFZUJghOivNd$V6)ePf(rXJ@1~cxA|xot>y!JNrYai%PF&*{s0G8Q*flO;?rAfoWGf z4t|QbgMiCAQ=RzhICyL1fqy!E*U^0E?6%}oPv{LLmSJJ%4d*f+6e7%#=)*Y@T|Y;H z^y#hAU&J%29P@JwPWi z0prT&@sq87k)H?4=b`-k0)G7dI8+cJas&nSM1EK&E`xip)rss-JhA3^h(8BP^|f=L zTXGKt_pi6&e=`2@f&%XUY@scTv3IX!Ad|^s#?F^X?QV|N{1}=n`!9ooo3k(E)QjQi zG9X>a9HO9JUkSISTo^!dqBg4uX0zg|B|QTzR<8fqB5=^0SF zl_<`AK7(}fuX;Yi$8%hkVO3@s{L*#4T2i61P-2THJ=pm*L9#FG8b9a8vQX1}aJN%aE+VN-asmBPl$D8Bj}#bK}!!$v|#G z8ZG(BO-!RDd%0E9Xvr-Ujp$XaY{V_B#TYeyhR?U_lG)PzKRVU{9 zGNg@eoYNn==@#h`1Yc2;{tMqC^&{hzKKx{>3-~!-J{R)yEAn{^KO_7Em!t~4qb(>M zG*O6{&Rpg`q%&-zRz4OqSI5?GuJYg+HdiwMEdQ}m(P^pSrtegPX*%_BXK0}<Gr+_j){SE89?*=DPgWOCB3J! zV3=aMOd(ySh%WilC1biG4c5oAAPbhCA1^Blv1*csjF-v8#>?cC8ZQ$S)C-Lzq(Qx8 z!~u($5ajNWbG%zp@x{LNQLHQ>dIo2a0jBxP{8s#4T1% z5w}!16|T;oUZ+fKteCu4)z4{Uz|9C!dTdF$Jn98hgkA8pZ^L9Q11iTupP7)ShfB-qC&O4m`s)T`&6Q8wcLzLA5w}n za$n8Koo-t0AFZ_9FGJLj`{i^Bl`H5#?pMNfaz8vFca`9{+Vy;Iv`|BmaPjKvPj>gY@z2VbO&(*Ld<~-O-hguunPpr{P##selD^jw93Q=b{Fmwug|v_B zJ;U!&4X#y2LiPOF@XWyJc6ONYF?)=NE@MEQDal#lnz;$7Q+1H2pbjdhkOsXGnI~u% zOGty+2T=h{Vm@L0zz-kxjra8+k4FE;gEs)I3NCd*=SK5LozVG)d8AJ0++-f96FN7W zN9u&mE#{Frp>r!d;(nl&%2wMCOm+H6H{Bk!4WXasXpQ1w*v%*lJ@1O0_J|m*(`}6Z zbzkdT%YP{A6bZCV8pADV!T#dT@~$M1pwI^rQZEFiUThA1r(VRSPLfzFO}emTQDKOx zEm>=&$B0;JG6d<5pfSdxmnk9Z7*)?ts(vNlGpQs9^n*n0HbQCYO>P7LsoHS zFw)w3)8*trH?0>l8Ds_bXgnTg_GHrw9z?liW^mO0yGR+drdw@X(9z^}vH8jFdWi$&z2mZ-l?TZb zH;>5xfbnu|1gFk~yCkH$IRJ2d37(K{5;L|aq9!uHF5m^!n&uEI#{-xHt6t9O(#lC0EN7138PmaxvpmKeq> zh0lm((8`$o6qvDx%?D}>Q6Vdx0?$$t{9=|=+%?Zr<*Ct~9;Z8W)4H?e5W0hH|Lx^1 zNEGzaS6QvXYRnIi2I$nIOiHRZ(jp^)7Eb5PiK$-tcy?E3aivYdqXbCJk`Q>1zKAr| z=8`ZJ8stw@t#Td4dDE`-3fBn*pnypWWEjA(?3?}iGHxbpKh5NSHe zTBR~>=FF50MCN4@r(dQF8c#`sljqE}L*t1XhV+ieV&q{wx(LZQNGQ(Sel1ZvSi3$o- zBM52GY%|V)#?1pw5}du%+H_E#Wh_iLEr-L0ki*rkkFWk5F;{+pAJnI(=;SNQ=oBiy zgroK8zv<6^MJB#KCx73cTZHV-4RC$18Y(7)y}Prz{e+FaB(SD8XL?oL5C&Z_&b1Ii>kkeleqHpSs>iiJ(7-W=6y|uyXTVu^p+k{MqBdsm~*l5qZ~m~qg@GJ zV&G>9o^Rk01g|r2A;IenJdxlj1}-6Zv4NKnJkP)z30`a9T?CgJ_RjeE#5%hKu((|H*Li zKIaz=7w>cav*F_N2QL{e-uwKr;o`l|uNW>qfAFf|;`0Z8Ax>nFdeZkbdhjQG;mzyj zkus;fVIC=S+MDK)GN-*|9w~F$U(F+BPJ7!tQs%V3na7qW-?Hq z?wonoJW_Ygyk{P%J7@l39;rKL-ZziboiiVp$BxP5{?k16OnQ819-mEm{L4JPnDqF_ zJdRF!{M$ShCOtkjk4nA=G^x#igOEMkaBc&z7%p=7rYaS^r$-#rCbJuYl zIo)(ee!O(#ry$jOtxR-cE;C6TRqZnaeLcpxcI!+DBz+8ExBzZ;ZO8u;IwOL zH{2VB8*R9E4cB3~j}6ypxKhsZ8)LXu!;J+l8VhjoIQsG@+616Hp`?-=Pu$KVnLrZ$ zL|;jgOe8M8Cw5hW6_6-{NesrHpeQC2$DimL&}n{GGu%yvn_{?c8E$pM-DkKp$m(H$ z8s$`y@F#l1NTwO?UBj(uxQ`51He4a^leQLcGH%Ib@cdT>b06%#KL{3=rf3xq6+6zK z{2$;CY92K#T7Efh=vo82@%0%h%v9vnx$=)d-nCV<0qFG|I`!WwIwFP9vCHXHX#7Q& z!CP}Riz(wzbU$z^wAqGx%y8=%?&pSE*Kp4mZau^O$#Cl%?hV7u0j{eWeE@_eWCI|g zi3JaCNPpTp{^ahjkCr~~$JZN?AAi!F#m4mDPugP>3z6z9Hl+uD(jhi8k5s?2xp|~m z%{7lyzcbG~Qlpd4m`7@KvW0o1MkiaEN9sDht;{2J9pBdGk-Cm=8}m32_sj+Zoo&q{ zb%XbI=8?L=dwcUp-Qc~0d7PBIdu~T~MB7_o?*x!N^QNx1po`w(G%j-B0cbvH+<%4i z7N6WU*mjlpJ?EXtE$&P%{~-pRYE2Syz&4yE~_MbeG*OHur+a zF342(I)-})iLLBP+~f!w_CpTo=-qa9#h0e2+{OOCSWNteD|*guia?1%8Tv0Mfi ztrWzPEm6#Tw@Fd@=;7G#(Zga1OCQaR<)tb&HJLzsq&W zKEzuy4q@^_qXR4&L)|QePiiMKQT!n|d4cxhdDvSd=^1 z5xKW;%X>o@Z@at2o3kCAr62+?vJQ9oxkg)S+nww5fiCocR%P3_bmtKI;HE;lM{3N> z@zTcB-!TPar{o(l78eaLU1`ivWh7l31AR+mZeC5rUMM`l4q2!SW*(zuY%r-_7_7Sc zKwM4m_x;wT9TU^iKJIA~b!MKE5#6}X=;eC%4Iv}RTQ2i?xcmzzGh?T(s6VhevkF_Z zy&wXsGqM?WZ^5|BMg+4DFkQB8p{k<+-7HapxO?-27^OhQGLq!-3JFBS1W2L4)v-06 z0mODlr&UV#SFTIjJ&3TS z!Lx3tVcp=Bt&y37Gx<}Wx1LvQq|#A0DW zh*(F9_4_eWC)!&gv}sk&!Ih7S=*|$}wqrguX9uGJi_x+!jvf z=%#h<$3y5G>L|x=&%?bdrDvV~PN=bH>V_Q1&A9+9+)#%1;@WZ6&VB7bYX?ZC;=g+* zZp9plimuxBS!AqxPvS1&(DguqTa{!J5DHq_=n*Jr=}ix!=URZ?XW#lcLfR0oXzS*N zU*NlMZpQ%HW=4qeW<)rjK$a+W@*0Gupfv4D1N|Wb>Jd56B@4R3137G4yCJg_Zp|2o z0ehy{7>1jWh|<<8809GIa3q8!8pf8OVYEG~#@uj%jHrO7J2%A+c;M*-xqZ9!oDYma;{S0c1z{SBYKu#uC$>6|k25cVI0W z@G2|8I&3V#TEY(x!)s$%(~P_JWfSObV%|Y1W_f|OOgJdC0%T(|5K4#J1Skr=g~}A_ zIH#1kxn4aWzfij|7a%Is&3Nd_=zQbJm=cXA5#E#0CmLTOv~GD4rYsSjh(zOyYAnfz z%Ou(O_}em8V_I~4{5CYf#>Ygv@i8awetc}y93M-&ke9t9-w|F+dT*&?iQEK>7pIIh z5yqNm$C_LGJZqySYowJ~l`-OTsCWFUvcE|8A)g0MJyKSlgUusl<@thnq^vxLm`BRW z^F{MWS$PgMkCc_?F!M-Rc@8&^l$GZQ^GI2Fjx>*ymFG+5k+Sj}WgaOj&(Y?QvhsY{ zJW^JkKJz#;Y5tjS9v37%zG5DCVHy+|r6TjVKk3mA51Nj)axFAnw9pCD(X-M*uZ-#F zIC4vwjsypd5*H(5x@tO-F=?Wo*xIFnZn~d%VdeUXJycy2bA>T0H&>ATR*R54n=7#C zl?9Q?0CVa<^#e{i{ltPI8yg>wC*@AKOGq!**b?1hSyGN= zD*E+gN8<)e^6SZV;BriPA8K=??R&JTD9L1X`xY{Z%gfEtpHMs{tqpP|k7EEsgd_}y zeHm-9OYiAv$Y5b<)cP<*QRd{$KNn^cx)uhClZWImc+V&dzW9;wVUktZ@hHKzuEgjD zj}p8^5#v=Ij`Q+-CpB{~<*b`vD<^=1Q@fr9owA{vI*Z=Qp(twjp1>)THc#4YSZ2E9 z=r_~xeGWV(AUEkR`2+fi%3}D^OoIcq_$n1k^2DR4mG3L)an2F5p6{yGCK8uM{T=xc zHq>=S7T6t7{~20nxHDfK-e~4U$jm!O^BgC5D~$%13c*kqFZ4hkT$O-8w{rre8wm70 zFVO#DO;=Croru^HjX>ojV9X??2C0fr<<$#WB^YEC6GJzuy3KN%434crDwFg8mI^zC+m}eXiMCpME@w%@yZ3@fc+WreIb*u zqPqMM@~1CN%1e*d+==l|IQjNYFv1Udx}(!mx`Cb+QSxYyAs7ZV^BzMf5Y%W=NRH{7 z=&Kj7LgO#mw&d&dMWCtjCq0b*x_P9A(HEOXY8ZWqd8CHXm%>BF?G-m}kB+eTFN0rn zzJZq$yx+hp2)=CKl>|pO__SX|a1#TsCU}^E*AV==f!7jz*ud)uzGdK2f|D9O=j#dX zYTyk7Pd4yIg7+Bs4T7&3coV^iO`g@w1a~#?7J{c3cq_sC4g4m-w+y_E;A+jD)$IiL zH1H0BCm8rGg0~xZC%`Iyg2wPJfL*s%?}n4udHNk7{G*ZI=C^w^lKSoM(bJu$460wG z(=UdOo%?&%z@8ZP7SiBwX)z0ODm zf5$J*M`G6})05owNlduwll|LBJaxdo=q(f3JxnTpqTwxm-^9I!8*8}x3^&zq-!Ra6dBK&kgsu;eKzp9~dC{hWprXPa3XqxG$rh8g8`V zerCAU4EJ-x^&0LMhTFh!PZ@4&!!0x1o`(CS;l5zFUm337a8Da+;5ET zT*Lj=a90@a8N=OVIH`K{2&((V7M0z_p0IkY`C`#_mbg0G~CO?iA-}Nyl%W=xMst>YPe3r z{l##r8}2p3%`n{S#PKKC7ygFPt#5R18g4Vgy=Azq4fj{W?QFQW4Y#-9{${v?4EJ}# z9cH+94A*D4cMW%};odXc35NRza5APz*gtl2BNDptoL<-aCa}?tP6LPfTWit2vJcr2 z?)@C2$#BYT9l%MZMHp2rJdx(+N!eog^BiNnk2KgUN6!0xz*O1rDMtDA@LYuySma<( zyJN&*^NPioQP{v0DoNKM_q38AVLm0onNMSbE!ib(s?29XZg{v%))(kPZelve`Et7b ztBc%T7*uYt?ctxy6qZe8249wN$b?{3wuw0RaBuzhus*;W@cfnSTr-T!`I{ z!^N|i4LvIAKHKrAjC{Jy2D#ou!b(_Bltkn!j0-D?!VRTBEN3M|m*xIrAjOmAvJf(= zSs!E&$+Vv14tH(StEQ%rwP?TONWC?VM42+uM48U3@@!832rQy5ri@W=HFb0^S6}F+ z>&u2xUoIS~zAQl=`S)Mc7uOI61kA_QeL_4n2VYT;Mjas9uUUAOEQtCk(V>XaSPb;{1D zS5S70*~*Rq5@kokkY%^8D?7UBvfD|@?!lqTZa(yse}lB8Lw2sd^^E(zN&!jtrD)A% z;9rD)x+ob&>{X+YmT-@N-y9$W@S`08Z|@CClg9=E+fg7fF^uj-eMt0!oU|lmu;KTj z675Se&<~@os~?O&^@Cq^^n+;6HK^N0y#oDU%%&daD(R%aNDx<#*ndm(A=2S-%tSQ^uN8d40d+>2}+9cLaOrw4Ay6I880-y)XI;?(pI~ zmXQvD&G|VDZc4}iDzEPI9-o=AiGPbZn@R3Z=X&JHNTy#{^%|iJs1Ms9jr?;uoS@Gw z<8oFR%V|yJP4al+Ze(;7m?=kRCN3Y3A)A~`*Hn3Zd06y?@o34CleH&AyOL#YeXDKM zZUcp+^8M->7#A&WK#=NGel_xI8o!$OwI;us`Bmmu3%}Ol*KmC4p3TIZ0~JK(Ids$I zdZ3hRY19hJmHl@$qkpl?!gA%=ieLuv=~@BZ2RZ^tuipyDJhrk5vnChse2yu;JWj|$ zq}>;Gg>3TJGnUr?7|RgDF^w=7WK2UEt2-o2)Ey!cbw`r%MJD5pI2o6O$ryZ4#xqjOTq?9pOz6jFoqo_w>&Ky@A5RRbACN4gq=Yq>wFPd9`45be__3Snj2r|XbR zud=>+gr~Lg0(LOy0W|2_Twok&8?bAHS^ATyEh|>0noY+21GFxBe45+;C*^a>(B;$iY076Il9?_aWl+C-V*1>& zgVW`+1k56#s4X91>dWT`Qa(g!`H+*957A-yFw4GtEQl)~;aaDBKIh7ZZn}KFD&_Ns z6_pR$FTQ2Wzqs8?_XA_%9osA256DG{m3Cy&42!#Rwlx|UZOq2dKouUm=zy2AkSt=- zm&YlZJvuHuWt#8b!?P=(RW9ho=)wZ+7UQLbgt7JQ4Z<$$8lopi#nlrTZm&&2*4t<^ ziT9h3gH#(?)FmHl>4Z;cK_Md9($%zcpLgX%H(gGPrJS}#7S*0xcN~_JyXprYhe>}u zeWi;>vZmc|CsLms;BTL7tf(`XI~yrnQDZ6lrLvjNWu~08qA}bhK`Ht+lJV;JrgjV$ z)903b0fI}kk=KD)BowuEP?-8U_^8xD$sdKZgq*An5*^k-=G50g3&J`GWg;xc$Lfs7 zSh2aUoo>2(PnGihV8!K|&0K>z_!!fw_WHWx>_go+n`alM%D%j2caYT%LyQC)9D&R5 zBI@!9h`KTc>F&lm4dp8cjU}`ypzjkJM`&cUZ3l!Y)n0_@#_bpQaeLxoYCm3&mS|Z= znqUm*84-qQi~%MtvgR0qSh_^h6+9Bi^PIHf)z~T-pl7xC^Z~3~M2X4<8@ZKZNQixR zjHH&3QHF%rsY6tn(2gzCj#H>KEML0m@?9e3TY(4%t-t@{@pk!JEX(o8k{>6gX5Giq ze**kT$V2%Sn`um36WIT0TXI$|~gf{;RR|zalg! zW8&D-5$?MIKHLt>*oj$*3XeC+d;bN@?9$ByUCa#^#6ZocPM`yNvKRm`UhzTrJbC? zqL2yy4NS4sjppbwq}>;sut7U0)TkTe%63rT`t2Y|lIIWNt}=~ z5w&uDQqD^p;bcn}vQ6v}xQi*pHa$4~ck}zypqW0-n?2pmfXXbU)s25>q$~#%HJ)pR znV!v%)$9OW&PnL@J-`Tq6+qlkpYVTB5;wqDbwwU`)F%iQp=-sup(Lxe?>f@un{HaC z?j!4HBP4N!W0?Oz-z8^l)jeBIX`|PNK(bLg!Wmos$-ueIvkUQ z_E`(UF`4q)0do4DjPV$Wt~v5cIs5$tV)-RH%QdZ7N6lgk7JAgtcpt z^r~NW+DVr^D7vElr&%(z(SLSWCi9~~Z5te}uEZ`bx7aublLL1ngxs-R#}2|>=3KVC z75{U-jh~X3x`sE($iJ=7-Pu~`yB`aJ3wSe_j1$U-V57`5pdSFb_m9g*w-y#cGl#Vm zTZ=uV)}mXrY^-dI>~}}Xur1%JlZpB)`Ig|&EL-!HO~{irna3co%BF-yMh{ZW(l(h5 zbGUJ0d3&)=+Mp(xxlj^bw|N@=*TDZb@z3>i{t^Ey{)ztt{~>-0zHu!JHH~&~S z*M=L^O{}b2g`^x36_S~N*@vl@dc8=vm|eMNc5c}%>8kV*^SJv2t4g_`Drp3$fRmw7 zi3<1y1c)AvLxmMEOhsG|AD4PVj#^uo5Stqj9o80Vf}a~%khmUl-Q~x^k8vqKCeip2 z9rB|Zczzay{LmMOw3yCP=49}#v4t`I)O`j-CCp&t8PdQEMpS}^@uVzZM2YGLgt1*F zH6Q77wVQ6b@A(63dGt$^#|r!DuP60^!{uNf0o#E8W}QKDpo5#ukfB6}EyMWA=0Izg zG-f8uV!Gm>!FUx%WiI^PvcvPt3H6?39OymLI&-4$li1hqYY_T+i8n9tBrdNI##)bR z$0#eyZ+2l>e_H<+BKGJHOoDbmg`n0*q);p-iVDWu)9#R$HIAQ%-jYW94}PfzGZJdB z+{#9@YH;~|h{P+eQOm6p>^s;eCD%?!uYB$}98budlzJG|Q~^N^Ns=GKoeHuD!x$WGiN z)#W6Ouw@W*xa86GRil*ce@)VI$)IULndIag<@IsDD7}=smzl4eC*B>A z7hOKXblan7*uUR}#;US~Q(}nax!sPz(w+vL|S`0#i?m_Reb=J!rQa*=$m} zo{476g*l!f^?7u$=5~)aPqaN`7kK(6Mc&;+pPP9i&aWEc=9~g-u&`lQJlUE?D+ngz zzkByAE^|7V3x8W8mhPPm+=}4lrM}moO}LMyQD3{=8rbXre|y$YSCoCi%#LXIBoz4F z=<63ndp+W>I?#2G4d;h_EV_8~|9S2I*~jYo$MDQ0H~4!gvvMCMywFb#AOVG*_JWJ3 zIfy8Scjj`UKYHqdS;zyYI;A+~qX1kXXrP$>E*)e=PS@!ALDt(;G!!G*(IpGI5)5f# z-@aTcch1~8a6q> zYA1T|C(UYSdhjRhv5SRB#jz_r_>&H?8$BfQRg#hKP7nU1L+n8h{-izjG>=r|dznY- zWc1$VkvbW@4?QIE6svvd!Jl;G`ci*Y7j0nR=Lzm@;K2kJ8u$f*ml${m!Fvq+BEhE(Je1(u1|CMRc{LyJ;RJgP zJc8iP1|CW9D+Ydv;DrVrMerU2k0$txfnO&0p@Dq_$4~L`&L_BufnOnbkbx1w6AkPq zc)fuOlD-R*zQ+KR`E()kI_lk%=!^6`^|A2KudmwIaSZz-a$chWC#w%x-F-Dhxivg; zssAd<6%zfsH}Q_bk{k%tV7GdTzFF`q_AeZlDYjG@OO^R-=xf7@-2XHhO2|dC^;Dnm zm;6^#bmBCRTy;(NHE3=g^c1zZVKKRA_9=Ug|L|W;(FJRH0g*dk2|l*c*9frI$v264G=a=w@Nl$ z0J%J_*wZRZihB58n6!g2*@Vacw@QbMpYLp#iSddKosV_BKizci-$b(L9V9;J{dL5q zY1~blNjK)glFTwLWgpLkGG{0F>kM+j z^pVklk7Yxnu!KggsTkdnKn5X9liWH?W=p5y0#7npI&~Z_u9A=O zxNwOda<5BVbR*-U`>HECy6K{8T~X1=yodHC{<)tdwH56H@LB>6;O z!YvAk7IV!zdcS&=)MJO6X=<4 z6Uf4~3BrPHLW(X{qj9ksk(lFu36xzZccc38|AfKS=ohLuFut6|#JFmGI=@|gKZD=C zzMlyIW2;;yQngFy-MAI#9cx~Elb1%8sNE7}qIOHfiP|l(V@|-NveGh)Ra%l8KuQIE zJI-n?gUP-3qS*{ARhI#!>M~HeqOKlGc)&@RZn~mQ8(hMAQh6!~f=6vz&-P2;w1Ta* z3AET>c6b(&fo1%&=@cqU;J9{ltAxybbE$JI3FHK-7>4)OI@=$tUcwV{WFXG5NJ`h@ zDu~@KX^$eY2#(Zdieiw&q6QHOE7av)!<;!rZZ1uiL7mlV3`q|6y2DLN(? z?ChY#06k=1urA!6iXD_#wSJy}7|r@gw6lJ0idfb9Sv=>6*)K{SV_vz;0pRsBvuAnT zE^mckl?%b9v#EPMcQt@}f2OygwD4T!lNUNaK)Q=S*WCh07D&Gih)>QIwGzzw0q@ac z^4Ln!4elq~gfeN5+f}Ak+v?gi)g!{X%A}#LGUkNEnvt{k=uejfXgBkj&5+NZi_A!( zwqt&&^r-nJJ))iTdXS!k^dSF2W<&5|9gX*oGCEf^i}4P8MlL!-j!XMafMG4LBjqyn z+Z9#rixI@seJ4u!5@2fDmGa^Ax)ffN@?s}tx`C9pq*U9xHpK{&uaD#l?W_ zd5HlnpKychh@}h}F?mii2tMUe?0!r!vE#?pMxntCR@@sLn@bp{Tx_KW6TxA zTCifnQDBmuR~cl4}SaK$638jIweq!5s8<>l?`2~LhCJf5AOzNo);?evXLuy)$2Yp01V?U}g~kS!#eYo8M! zI+$T}b30&Y#)(cd=mwgxqiP0j{G@E+aRQ5*vY|_f(4`#cGVgSmX}ZiUU1pOm^GBB% zqsv0=+R*7<KtE(A~mOxdVaO?Vaq3ly17OIgAXW z!F%l$_cam&Wa#@EZ8wRn(^?WeSZj&Wk9lP?mw+e#qRs97zHcFPl|NB@N9&!$@h7;G z>@MQ?6X5PPTzpU2w++{0_m6$YaPi%+_mI_b>`}yAeJ?;Zpr<&Q(haIfpH>r&zxUBB z*qq(HXLa%a!`+*}$yHQ+!=2mRx3}4DdZv43l1xv4gl2k@$;r;sSG2DAdqou9JDu&Tg=|Bu9>4nT_e8}JKplX z;Y~(PbkX*BnP+saBZpZEYPi-y3!)JlGa&Qp*9D|iWwSS($`9bU#7{p#)q5OV~9R3#(q+w(V7pWaw z!%m%jd#OCd;o?h3#iNK6eP##GUcJ2Fg4o?lhb8-x=c@(>FEl6(w;clw(D8NRDKKSgql@+CWL)8Vl^Qw z+7P!1VdaJ;NGRBh)zX@#HS3b2#Xw6I63M8N1UWr@4-Fz!6402-$bcvca zZc6rCTjeLoqWhI-&CD5LQ&B|IK+41#Nn`9x3=?lPB+<296&;dYwtgi^+vP9;I^*)K zrwqD<4ng|tebx>3wrO(gg}=&DYz{w88|jt6>)%a2F`>}LAB0}cHZGxAAJMPf$rdc9 zLPB*Q$xpN+VEN(z1wqZfXHM5V4+t;XLL(na2>d&SU7) zk@+g159Toho00i06wx$~iOg(?TWoix-^mPIj=0~8_<%c6RbK;y+`Y|kN4J%`_w0td zU^(68v#;aXkL;5iYc3G3OsZN@>^kp&5oIbNO!2>Iad{Nw+q| zae&m6wQr%dM^;mgb+iNVJ7M+rMVT)uopH?vrb#fFml97zBUU~b)TT`PEg5?&i2qig z3-OGgKJ%wT_6czpA2iL%8og))GZu~x*OG_fI};+H@Cyu)`3PQ*m!5tb8G8_AMjsl~ z=Li2sp}GMe&E?x98O`N#(_HAbHkVt-^e$9V&|GengjOdg4GCWgP5M$2ghR?GB!cM* zTy*bh$mJI3w5D@HOdipzv?K_M>Q!r>D^4>qg+Lb2G+eRWU4pXi59%Oz$5iX!D7QuO z$M2cs#gP0Cio?o_TW06+zl%`NK`-Q}_7EVH_!UOtbXz6<@!d!~?0zf__Jkk}p;D@W zLc~l&Q4>s8QnM|lVryoTInzhJ)JB;T6p?u)`ceVWwn?33G)bN1>AN=V{ryKs>@@g` z{*H|kG5NaSVg@aL_?EJqj`JTz8tLgDq;!MOjX_9e?TRbXOTrNhl9!b-SOjz-d9jr3 z@cZfANd7$2x(mM093jd|zo;>BCC)WT+#KQhx98O?Se z+AKIt2Cw$$V(cSC2<|xE(B7fj+OF>04R@eN(5RkjpPR7w_PGhOG|f%+!e?5zsx|T% zXNkM<$0W=tPP!X^LSO9?bS5WKHy4d!e_pJMvkLXEfWl48QB<#FK_h58<8_T;lWr@U z_X?Z8+39z{TMPx=2>2-qwLNwH@i4{wpOM_K0wqC0p%4^8R-a@k&Y2Iut=*VGwLSs&fxAHdz>; z)|OwvHXLf{lMc%N1!;ned8gu3xDSe6)D+d%(|G)ZO%|`d0pTnT^oBPb$}A^`rRML! zH3s^RXEV^%J|BwhbClZWtW&;?`9IO}?rSO!6T^NCk6$OSsTf_%X5z_5MozFNASti% zcPTIG8tS%h19!aob%3%?gN*8aVlK6$%Y@^)VVT+>Evmo#5%9{7tNa%vv>2a661UQw zT0enPnjIEkGV56msT(J@6y;q{n_LQt%VCDByMg&e=em-=P`w9e*Gr>y)nRA(K1qiB zld;zU$9F(;(-=s)6&=?51>JERljm zDqE3>c1o|pd}oK35^5qVrjURwGanl>Z3H`;cT8{{je+nDY7%@_ctTc|{3Z z*G$+6hAs-PvoeJHJMiQ|p4lDs64KUG5E&)-2Rru5sQ8jz5=VEFI_V7Zq$61jkC*M} zRUY%rSw`l_y6{1-z=+O?Xmtf1gh+6 zBWt43rp*oD*cau5_9KgP(+n+iTZfjXWN10y@Y#nJ%8HtSf}l&D>9RKHl6JZzldh1!wvvi{ z7WL6QmJnGmmJnl9FJtaYP*g96rx;kQj3q4BYIc?##elJdpeTlLEFpn5BZ-V=ME4^o zno);@P-XrD@l7i8p8$|yaiwoWbmmh`-S`)NrH3)I>P&((BG8!xHS5d((yB8V(W*09 z6m@16jSf1KNp@PM)tO90eY?xVR7y->6*m3#aif%)bCzz9fBrr_ZJDAM~Z@`zL*A`i6)zL*FocS^5^zm!oel`a0mN zU4*`>o8z5~;7{b+Rb2rr+*9uc%)T~cKlj-K7?i9>C*jX!ioZ0kHL14LbVXe(mfZ%) zV$Y?D$t<}8#ZzP>QJeNXM)A;XRXlx6R=aX1iigFrf3YySQpC3KE1--QjlcwQXq72$ zsF!HU$=DL?DH*dTV(;XU)bwU;PQq7j2$e=JL$KcmC<$O5x=ck^;L7Dz!zJBTF82~H zTNa^oz7+_JGE^IeZ&nTlW0*OyU|-1X-~Gpk>?uKA%PN3WgJb+4dlHt$EAIaCGV5qs zZ~Kn+)b2zzL^ly!*+lS*WHwy;B0@A4fkFffQWO$~%w0Ll*R1oICeZmzI2vB)g~}(S zegNuBb+fB__x;vX)jE^&vHeJCH89nOKL7wrX9Op~4C}5NePEa7X5=W{AfOQjKk59siiM4c_3`&iH>rRHbM0RTc!Q!He7E6LAO;9%S8~CBWAHbmIH!L~YiVyEZ`4c8AyYuswJv#`Z8h3#x@07UcXE#^~t!eFGD2aXl8d;rSvN9oP@O~&txj}Tf}%!g*yCA>vb<2+>QliasPX>EbbRZQs%wx z?%3!dy1pM8(PdC$Rk*A>><0jaBra{rhz(s~;>HMm#hztewV?^ph`@#>sM&@NAgwku zBU)`}7DXHSxnLGHG?VPKOlw0k5pC#QCZ-L|1lES8zsZIU=hM5!1KX7eU;+!e+05tg zOwK4tvoA-=0uny{hcgn(CowOTNbC>ZXc{(MsARMIS(f7sC$VkUp8k*%U2TkYe+gN&_KGx=rDSQX z9ie?mU@m4!RA{1TlrK=w$sk*pgd^K?gi8lvgxQ`m&vDuZIL8nJ#kh=4(jSMT_Co7f z6?2J49+hMs)iPPPI4$R}&O!>TAj@37gvHvjw+6JX&fX z3T9Gz+7s1Y%5m{FY++m)UfMW|B34`E{ieR@whqB(NPWL^wjmgzBTp2ekOx;K!LfC= z`xZ=XbXsIBn0ZCq%-pm|e1oafK^>GP5RXA=l1{?kpH9+00FKH&c)Q0Oxi+$wHlkV0 zSWM0pixria_=3<}pp%apD(*n-pBD=3W+O1VtpYn&1oqXP2#kbKU}S%HE6Ur2ZDdpZBlbTi;&~_0EMI++6*#&U+d(n49G)tcH-kYz-*n1~-&Sot zW>wTPkwQTvPHlf7C<4`QTnKqVExm%0)Gl|6sTaCoz3BTh*b;@nk3Vu2s~1uv6O=0D zL6_vvB>{A$NZJ(ZAdlv`0JEY|@$4jX>)>x+TOyu_g;0crKv2{|2yF}&Ce4$j+3DE= z>^(|dw4QO+$A@$r>2mtDS`S4|9D*_yIzy=B!{{XZ!|5dbBjD`5Z);Z5w;y0#3YMn6 zEeM&qB>iX8L0dl>u4(HtO>I4xcT{1F`OI9j_xQ&4v5i{3yj_SkYJK^Mg_ui! zVd9H81T`nVi?~UOP23!PKbDG>LRiKhG!ms7IRyVE3N!fjP5bv8NVy#!!qprSD8ggm zB0LJBX`sNaKl4`CgGS1qS?DqcU6EXz&V07z3jI-e* zCLP`SRhrJ2VX~f3zlN~d3yzvyM+ouj@T?XXwPi{`3Pu&&XW|6sJ{l0jb^y@Sj4qVV zf|QVF$SJ>@r9K$VyQnp95r@vAnQvs4UY^S!F{ET_c;F+&f^Zh}NdD zO;AK@D~4zqXm%ovq%rpnLL>S(#N%~?)7j^bhri7h7mGGNCG2uO%@3JHgaU=S3eBrS04lSP4ladF(F7JF1k`$ghaxHL`Jlccp`ux z@deC0D~Xc8k|@an5u^Zmhq&d{K2eZ^GCx`@flMN!J zG}$0Rna!+bq$V;e$1-h{M1lD3qS)T zDY=#1ydK3o!Fm)kMl}kw4na|k655KyE)_=fO}1j|1fR1Q|5T*1GSO++X@G?D)_chs z$JwTS{s|)tx~;)48^7@r~I}8oKF%?k4--KGNOtose%S>?mV1(5>Gu{5{^xpN>g~ISm#p?UXk% zKN1P!>Ze4SR?7_v9LiyGnI3Y;WP}VEg9{Er7 z_kS7r&~2^PAE+#v>>`2HT6DU~g1FxRyg#B|Y>+hVzUOH`#9$u2&84tFV=ozWBM&bb z?1#U~QnygX*;TiCi4^XZA7S8p1`zWl2JT`&^~^|Z->2}#t1F+rk|N8mVUkTug1QNa zVBL_um(N1q)Nbg@BF|j>4U)cLL*EE)myk3|72S_BJUc}r2gc*F?N@#Y6QSx!npVA8 zErddy0t^aunoiPR35V}j_x6^5#!OZT$LmkgY?vjn>ekuU$n=CHGg+(e-(DjlT`g;5 zLSvv!WQ|Oyw~AR7(j-yskfYlTxkt&DYTMgQL!{f<5PvR$eH9SQb^?<;QHuz9aHTlZ z)$D6zOl{{tp$=tU(KyW9H1)wydWRv6Ze%F^4XKj#*0>nWDAJ5)#>my?UkPT9T;DC0 z7b2T~I*PGk)03}f05XC#W{oiyPGo~$Vir5S@$wTa(Q3Z9CQbMf55Ad`a*(j_pNc&f zF2|Xsv+PV58C|$sK~Qvb3D52jThpL|_3KX=fzWNOtG`HHjr@9N>({IoSMCLb@^bK0 z@;=Cy>`HVc%YUMP&PK855o_oq{B!6e{d4JHqW%(blm2-c-f%j!G0n4uJ9-5%v&h5oi2Oi04f^ zD_tgp1EHURNY{~xi zzDZopIX}!XLe>$@!#29Fwb(J2TEq}!8)$*cr64wnX1I1Cwi0=y#vtL~ZTBzN>5=x1 zwA80uc_=O&uB>p<8_qJVht0)Fn@K5~TIHBXth6l~%LZ84xAuArK8i5BOQmBWPBIFq zY@tf(!RO;i19nexMVDOACDn9UB3t>*bqrzJrdLC zQBH#lwcH_ORAiI7629)unXSYgi&aLut4UgjiOfeaVTQ}7onW%DA*SGthO%Y#i5&gD zy(sIIo7hTqMS2sPt?o%|Vhf+A38eQx797Wey*qtb(9@U2tDi-~t;f(*p_O=^m&-nM z6;}If%LwvO^p{J+Ez%27R?`;gS^!uT;vVZXm_Sd($WdNAzY#*D7&$l0brvq7@E^`_ zzl>NTDgBoc(BQA`p~4toAhL&w9mfFDbW#uF10y)<=vco&N63}@r6=UD_ynm*k+sNQ=c_7(`_9>J)vb+L#Xrtj_v$sS5c}tJmjgS|r6IKXa7D1OZ(`8lAWpQ+kz&HkQKcaaIATk*Ph)u=-q6x+T z;*QvO)b0dDZM@L>Wr2c=6j?S zx`n|iZmwp_|HMx&HM}hqi%q0c!*kNH*m$So*0*w!B)A>7zxotX)lb3Drl6*F&UJ#% znf^!@{gL!iU(l`3BV&#p8vu;69EG*cgClDmUvL^MTM=P8%z$94p3Yr710bsE_1she z-?YJa9`aI|KZm*V(cCXa?(B}H{5K+hc1JN+d)MuJEDu-4vmzp$7Q1pL2xw!Ild$8EPIT{a|d8yA{3{@%p)|>!YX^1L)8oGu@grX_&rCNNgJarvn~Xt$Nz-KElo|2U6+E{(jn^T(WFD+G zvLhCs9$S+dVx%UCm@ID~hOBM|=|;*e^{7h05Hmk_5_m zkw>`oRDlf4=JbbT4ahy5^ymW7orYq%trpXvOji5JY}OlUl|-?21vT|SO71H*_YEcr zMo*@UjD1`oA*g-q`%4RtuLL3fn~~JARu;%x1Y!=C3FNJS@Triy3|Dkpxq7y6we#mH z!4iuiYb=1SppD$rV7&BgCXl|(6m3iDmoYo2`LdygZYwp%?}i%4Ro`HKMA`>YY74&y z$bz>q2sW>8T?B-!Z(|4{Xk(m1T?2P8(qGKD^dgG*Z9rqjrHPB}0A;UP$U#c`iM6>< zB=RN`-&geCPDU-{orGL25YrGPr@X`{DTDKXT)8WU$swu#Hj<*-Dyir1MpC+_dlFOK zs_lmd9u^*p*^-z`7|_Tc`Vq;+fF?Aeb_r!I3m0$&F727~q2~6?v_X4jhL-kBP^3L8 zvS=FEd&D0}V|KBr_xY9}{~7Y_sRsMd9joXHWX8E>UeM;51rsH;a3!PUl^~4|S5G4E z+(F1+F+!#bAvbMAoVFVw+cUV3Y+--eZk{ z^}7d=SWn2`5&_#slgm4Pw zL#k;_3t{LJjHMEyAm|ELZ2R`SSvap`QW<@i)*7B+G;>NcQ8!unpgHmmK(iSkQrdzX zLA{6-|4u;6KrkMBU!p8k_AW$?V407faI^=^1%Wxm&aB}%3*B97jfWrv4Qhtt8Eb}a zYt5|PP0c`F#7wzKsc;1?<##aJA$52tASM+7F|Czf*qoWOS!|G7QucS-bv8Z4Ub&Gw$54P4{u^S;^;?DB89gV7&qTvdum#K?k1_KKrIHF z%;4cc@FNVK9|S+j;FUq}V+`IA1V7H;BSG*s22&?k%%5OzEC_y*!50U?|6=epLGX44 z!}rneKrk`~{1k)eCAeTG&4+H-eDqA*Yj)E>P_=fv#K4b*BO=xD@)pc=gAtctGhT+D zH4ndKBBTf|{TA`cb~{>B|XAm#nFu4GGhB}@uo36l`$U{b)ILnvK>=?Yx<4fSZKC79Z( z&rrKEuV`0hZqlQn68RkQgUS00lXP2|eA{lAq;Ba0Z8C2*gOHgy`+`4G=RcJ?CsgbF zev}u~Il-pRx1h`>D+@9ZTp{V7H>BgZue3(Gt)ySI8`9AhcTT$$&_+9FY8@CWv%^v^E=Nincm9Aw`hmSu)Jk-u`R1<8kq?jmTi3G`)xhUMY$)??d|cL^dr|L`g| zv(Yc`4yMSTZmayS+l~AoOR`6ql1z-j(K!dn)Hw%z+M=4~90Z#dHT#@{^Ov7Ved5u74oAy7Q6Qep-P zMQlGZ)Z9xr7nuF-q0X_siX2uk=ziTj0x`>NGLGFVkb%fUDqjPHyyN9lX~A?`dB1fx zystE~3Dh9p+Qqq>4>QL#R*(5YTEZ84lD-gunUoX_c`=r9V>DgH)0Ozh?Ixy^fr<%b z5sxY5b`z7D)jaTmmsW)ry5Oa0z2uX-;l+%t_Tf&Uo7BkKbG zBvm|74&%^nIcB`T*r?7i^8n$sk`Bh;ZxDYA@keDfhCg1-u4W>RheP8`L>LodM04 zrz3he`a1L9gV&kSI4E*95~+z3F;$Q{kf2T&e(G%aj%f#U(GHHJN$1u-%c6GihWwzs zq^hag1GA!}cTE#_3u<`(1JSZ&9(+#_pRujsYAPJoU}_l}@RqRz;-W3q^IqQwUkJXN3_$V*E!ufJb~M`gnm|tnW4Gv> z6c7e_N#3PT3&iLpfn)#~$S&v8pJsd)4IYl~s08Ug_Oouw5q=K-UWC7w;BP(t*e#ax z^&$t~X}JzniQTR9zoR4!!}33f6l-)@s&7lZhAn~Cja5Z`Vy z!5#+j?Y3h1OAw0hF^F%s73ErzKbOIO%bbWAa{^BYiUOnC+J5ep_OtWdkjQuZz9C5i zEhQC^@J0GbpCV^95=xg~x)x5^F-(ckrJU$eKy)b?x)cdr%7QM15ZEwk$5Rk$chEPB zRZQ?~R`CSBNGW#5^{6ra3wLWtwhRWOTLuFXu9gVD1x@nHKY#!hK{t>G4ZsQ^BO1Un ztmH-mgUXTy@O^0VrGfd%oCff6Cppvr*d^%_&_f{W5~D@O&bW$rC^z^(5XEt_Vw%A|T*umLiAG5LZW{drmjh!#Cq+o&gxS{z3BCEe; z3WlBxLQFLzsfKW_gr`F|hPpDp_&Ib-Z`K)|2n{KmU#=8VR@6@VTD6wa#i@?8bH#-d zKTk=GWQj)F(C^@Ko)Wep3RT(=#VT!xf{j|UlyCX>AW^JY%GiX^jwn+TLPMeqO$aTC zGBY7GCCbQz(3U6@6GCI6Tucb9iTrD*SL?Rdmx}Gx8tnC@s(O8?lU`qh-|LH%dsW1} zB11K>%U`3Esh?}$9TVTywSC6>C6pQH=T8ta3`l>ra{{{xAWdjpPGK+$ypB`P75puMvcJQm)K^>@2sz>-F| zz@O|b|B0B)V!!wyNpeMXL|*6;h3b-UKZiI}FVQ#4+=}4Y=2p~8e+gGmSeCRS78a@? z7FqrmXrl@uDha5b2-hd}Mg(mJT%#17Pq$U)KSc(2VX~lo?|gki3NU@(0Jy(kJ7^H9 z9J5-286d%i<3FO%8&buoTq;~o6I|%FV&|9RG}A&(CJiSK8&2qg6In^ac`>?m$+8Ph zV1N*f9IzO6!#iKS z6Yz$%8`l|F4>+14^+30^9RGZ_&Dvm=rZph~RDUa;rbr@go(iLk zo$iZ?oS%g(fj|Ya91tt(a9>QsbP%Fg^Ej{}HBYy-=I2Vy@7(GF|16VDmL<^@v_>B7 zds<8_I)llLU?S6hX5PtK?7_qja=w|_U}a*c^JJu13@7*!X*yq-s0u)xK) zGzm7#DLmU(o(H6%LU>rm=R^z^N^BkRC<=CSqR0b<(Il*ZFymt~dk`){-EoLv3Y+7? z6x~*)7VL&8k+trzKPG$;sS?GFxqvo^ zbt{1!1&H?NLGE)8>XKF$Kgs=UM6rXwXcXq@wlZJY4f9}+bdgO`LzgtrWyy4<81O`W z$Mee6cj3cY%q_xTcCjs)Ulyx~puNWvT~m+W(IPDQ%=^(uWsXc1$GhxtEwT-J-#-Si z|8r4M0jwD0*I`@4&IGebPhrL>6fBg zNR{?s8VZ4KA=va`8Wf?{<4jg@(Ej|D;2_Ovf6}Me{3tep4K{X+W^8t!K=((_S2#*W!swI(^`Bfyr-hKNu?W;OpTyqyA&Z31yKo@4%z z4A-qCiG0Zm@0K97c$emCFL*B2vdsPU*|11ri`rNN4h|YOo;zES;3pO1N)Y)8r;K&;~5~{6=N+oFT1e;d1 ze`|Y(h6r&vvG-z)kpF6*W?jp9jprlxM*h^!z&GE^C@rfICo+ORtr0H>BL4PRQ;w5@ z25Yd9_j3A-~)tQJGxpm`NaGdh(`1)MD`eoF~#?=7C z9rdrGKOz2+`^vW=(I%!>A0ySrEVaz@;umi`8@`RFEI`By*euaE=ft=Ja-+4xsO%t14x zyWnp?9KH#7Fz&0t=UzQJiu*+H;d&Uu4{UWBm(ZhO1l3cVlAJO&4ad+WCcYr+Tyfs_ zl7CM9<0#Ls6PKj89IuDZ@mY!qU&*kPrSTGGVb1W$*rB~#!mn%zzbed6HvLyKJb%~$ z3FTER&~F87Yz4eV03s!S6a9Vu>**Bzx6vv84Kl;*w!uKJe<_`Kc`a}|(dnk*Qi2Y4&cu_^w7-$GxP2kB6iG{FThco6uFz`MQ{#1@V$|uw zfiset#o=){^6p9sWe=M_9v#RU|6I7-ovREvU`wvvrr9Zdsry9u{*FoU31Ym0`5J<^LI2WZ z`2yy|8FPe+Yt${3&Rs2nF>strN9@@utJ@tz-Q|Kyf0^6jYLYdY5@b6JQScwGJ|Q7* zGt({K0qusCO#hDf;vKQz4&nUyvABnZhn;VU1;;fcg7b1X{C;L4_FCYZKz&u7SI8;8 z>W9z_9?0!TFD{<}rgp?q!_Pc}I!H<|l?6ASY3)WoC3T%|XWG7&toF=HZ;^)cd#H{t3e zA%httoSI3bW~Qe)dRwNrrqhz}lddF|Hi9&7l5h&wDO)`gKS7dC9Uv@pSakm5h!{iCt49|> zUh@MiT_$mYlgkLdBGZuKRBnw5}XW{Y^~ zADjjUfK>W{t%A!-PW*7b3>5inA>V;lT(Vw=*Rj>>C{8_)htEq){05i~H~BULh7_Cg zSlE%I2o$F`GySxrFD(0|mo0cX40{}TQt;V=K3C|hJlmP4= zxYPO0fZ9jg%(W@6)6(ir{327F>db(qPXX73rQv+4kWT~CK1{gTOOL0-lTT|nHDm-V#J+rYG2fF} zlJUB|o~e8{zIBOV$LsF*dR8Ln_4KdI_v~6&un0t0-b{Y3l-T8eG>_;FyL; zy9>*{r^&p;;cJ1rd>&f$^40LQW|xeKiKL`(p>H?mF(DQ+Qw(FTxH(kq(bAMqL~li= zj>?FecGJ`?{B_g);_HWRKzsx64Z???j`YB?2P+*mJ(72%3(J1z7QEutT{i=4-%2y+ zpUDq6p3$L$%U{PnGXUWYRE{p>u{#@S1`8t1U_pL0BU-6%qwU_W>HAi;aO9oN# z^H%2vJ!~LL#rI$94a^++(y*5RfHG|Uv z8S7)QU&nj?5f?w#V)jE%`W^My9C*ak#v>AiZLr>EKul#3Mi+W))zOauavO*h@029d zfT+Up`)t;-$!enXp(}L+cv?_W|&NzK)9(HEoz%<$A1_GvtiR#I{q0P z6VR-9cLoS%{CD6NWn8V!Rdj@Ie>1%eTB@UcNU%i{ypv9OJzDvQQ^o^kG;?Hq?6(v# z{y7c7A${l2dkMfLFl6$tVNS~gOWmwRSaJw56HzEEsYl{bBbr%Vo4`33Au(wnXe7#d`%2r;ROfUQo@otdL&U@J3o!D{UoohXX__F?ZDYJ}b0WG~{FjVN4GK+a+iQf2< zIU`~V##d$?SJz*JYgZRbsLA9U&R)Q|8aVs7fLd_G!pORPOS|K##FYD>P8^aGkEUd9 z)wJI9LEzB!rd#3D^`;NO=QJ22>rEe~N5it-#0b>6#A6!f>fA%un^Li#W6|UH90wA1 z9LT4K695X$`Ao!*DMA9zKEePmPQ|^%%&5y>sG6ZQ+X&0!tKx}?M-t%5OJgkYGW^LF zN>6VqBIolkV@UML)XGbzyu`Lt9_hT?3??3P>EU1ToSAL>MO4P?n8A+%XC@w&BpqQ% z;~z~4(TBeWl$YOxZnFGp_`Gy+rUO4HV+Msy=V100@?8a5jh(>JIRk^Hv$!VT<#nZ& z9fqH=K`EvS^F%GMYi4H5^$@n z6=`~4XL>y-)AKx*>De;9piEE7L>Or@u=Io^0HsXg@KC0g?~yWlyty)^_OfX&n{gNA z^V>Z9&$wPDJ+pS02T0eg@-msgKXp-&QEH)oy)biA z`CbsxJCpB|3X_0TST8E97Zmp?*$9GgR#>k`B!^xAL(!F%1jCRug*gzL!~q37Gn&Y| zl}@w`cLpzvVmb~G1BJ229ki-xFZsY$FPR*V7cuFvt!(^mye2wE6vHSsF*9^dK3VjV z{iicG0A8}GP5yBC`A@+&(SG$32f2*XWC_E|I38i)zgnL(CdF(o!iv;B%FBZ zs4A9)vhmVNaj~}g4lv}DCj2`P4Sh6@zaA%19E%rw@RqE9BQuw8Vxsa@@_V&NKy`b= z=r`djJ|)hX&~2o$Z|RBZaVM8SgMS_%C=xmv7=9X=#}9YPZzo#ASwRxOY7$^kle@w- zmNb?7CR|zI!Xn6}rX9qfX;`lTaFLVI0jq z+CB~L&5DF+o$BA26DQh;Oar&W&VE1R3jSy5lrAX0i#bZmoCZ78lm-j_mk`joL0sOn zlzky-pt{)IC#?+47HcmuWEZZB?D{d5 z!?<7!0QwJ|O4=zF6kfg#u}ZtcH$>#0Qz{zFHRB#*+~vkSNnP29P_J^Og_pM|QrdlE zz=)eqULlvvR`$l~=3J~WyOZg7IwfX>t}rJjew8Y&$%&M^664<+c?Ik<)-3As1M1wY z4l9`S&I9g~;Ii&2M>`Ehm-^3v7GyT}K~c0j=3ENS88x)V7X(g&=!T{htJ5GlNJW~B zL=~2O!t51v#JcCj=5WoOYlv3o{wK>C8vBGHFHss+%BE#QV9n|%wecyTcEs!jgmhsq zATHGifpA`Rq|_eT-cTH(P;)`68GxP^z)(v#lAIS05(Y8P@t=V$zCX0Ar5CVNDE2GX zvO7?%{V7@1H7a~8IS-KdeAsC{SjZFP`2y^cE2#nap{oP9Soy>q7UFwSp1UmPBFFT#slwJu)_5Z__#PwkeL_MKr1ekdL0{p}7s1|( z?BV9U`D(n+oqstl2hPdo3;FEwzhf+gY++lb3)@7PUeClIth7BWxZ1U7&q^B!eulc? zf;FFmSK+L<9Eh+RI59=)J*WrP#{@bHUEzqOU}1i1P>Rm zfjeje3%ntBo(&A?;=Mb*-GiJ4wtA?@LHzc6^YA<1&ByPcw*bHMyrHd?gGkF*Knr(I z`oYGP6yc)d&>X#C(shdE>Sq@HH-?|N_u519nLhB`QRzdTYrM=DMQ}|%lg_7YhDWi( zkePxNi`hw#*-EBUpYOENc|nOY*p8-cjl; zzXcl8miZV~-KV(ZK6v;uFoApXUT=PGFP4>ihKwoh<%VOM&<`^3@Z7+-b}X|kv=BQj zS#Mz`^8l7*xfRkg@q2)dcN(NRvpK&PCWYQYFR?kl55xuihu}W>y$y(txA#_WFK?g8 zpLz=m-agnFqFoFd-D1p5+!k%TyrG#al$f@4c^&1Mh-ltpx9}E$p)qe!rf?l6xVWjqaXN#| zH!m@D^=J|?#p~?MgWGUYB0S$fzWIo~8ebVOV`DfP+C+~a(V>!PlGw{F*k{QZDe6Is zh4X6*oAZmEdER1+XNA+> zFMe+^DsZv4SY$i#E8y-Quo2Ti#Ij#CBkq{^rfqLGV4fXO7GoFeQd6*{PdZQ`(gnIV z2MvC+*V_)95lWO7cl;is24$C{as@Vna@gAEja8Jyp+f@X)C@D% zB%U3>NjHYDDJM=E%jKyw-W5Rl;xyj(4B^Qs%xI^|H-exgUo&7YDN}kN#yKaH_Mb<* ztoonFiYIx%GM=Ep?_rN|KdA8;cn|s!ydx?-FHu)um7Mqt#tw2D zS0{m81_>wJZSmq%&m1U~9tR_EPdr&z_Vtlh#1rFgJkc`;licLEn@ILJJ#oO|aR5-i zsn`hSeShSd)-U0?{AM@ia1iUL^gzpY)PHdx&d_40hOL3UO(wzV0cho%m%29YpNb=D z;>Cx#tT*Yuh+ga>=Tpn?fnnjLG@rIN-HMe=4Q9`CEh}|xgZcANtMn5A)G(H_rc1pO zu9q!k$Ma<*jUnuws^hlRB>u^6EHIy5a_3{7Ng0_ z+ffX(b9zw+2wBvbb5qNvqc~iX&`V5nxL-1kWizb_G;r%vK-$(3*22V?ptW83h=&To zCo$oDUn}xdJ96wzN=LzhobjoXvBoYt7m3GxY7yhLsq4=BULO8Sb$W?BzU z4oHV$j^!RKq)d8jTq?s$hqdfw!fNJF8LjCZXsT&cn46x)0j=~j4pShMPommj;$dN` zybTh?3fgogg%tRyBpAYZ3_v{>$_3{MBu(0#N>4+TU~vk`5CO}H?V^d4WR#Q$A(|2^ zV-d1pI!04B5w7X+Z96tvDW!?YDCSh*&}Cd1qs{Ne9*2eeC-xhjPEivw5%DM0&$Tg_ ztyzv`;o6Bi)jy?SH02x6Op8-zqK$5qX&9RP|L7E$3tDbLHJzp_^-hgHra7^)6Cz}0 zO)>o5ZrCSBDFUf#H;Q2V*O=H*={OGT%dAgT=SZ;!3y%txW62pDgA(2E2}yMuD=ej6dmh44h7Vnyp;uaXidnJS=)R z0EGV?90>87!w&|+!?b7>I z!3){t3#pt@en%m<9PKog9$J%{f`TA6EPBUc!?9KJyY!*}_{=kpJhO^gL=s^^9;Z71 zL2tzlf!8^{)S>a%Uw*H2c7o7zSW`9?BB_B@6~Mgi={z?TV5aCUL67J0yx;KCXvE8SatNoiWPIpOO<}(w zrO|nu5n-ppqyswyb4$Hru&flIb&Qb&F?vF(XX10%rkFN}c`DHu)WAOIC2i{)T9dX? z(u`UWJ6hSuRZg}oP!&BIH)hAFtCt*TNKJa&+1E&XVZ!)|(>Pr#9e10D6yfYgsB9O_ z#JfQs&S_9&=#fE(Y!m+Y54Fd!+aLCAQG8tM*o>gAE8%NsJ6owk#04pQT#S45>6r&| zV(||1!1$z7=-?=0`Yg^aa(iIW@u_04vwKQwoJefd1Ay!5HuWB8+l*$xJv!xn{7SW% zJ^=bwqhZ4g;2OV1t`tQF)u)Qi=OP_eMMV*ouWzv^#<935?GwwVH!u#WGAB7xil(Uf zjUv_jeLhWS@QnjJqIPGNWUzuyV5Kuk=8x6b?!ysQvA?-icOC@uXN)DvIP5r{f-0$5zhZN(ZJrP zl*YS_XS!!j99I4u)4<2Ojc1y>S@>}W@#dRqUD!Kp_HJRtdoZ&oi2V|eU4nkXxkYqM z9Xs*GDcBgg9WUmE%ism*qPo3icIVl`o#8nc&NPn7L~9Rkxk&Bcb_!9*#F!I=Ln?~ z3|9L1MY5y`E5H9tOi^&S5{E>WF5-eTS@GP$R+(Ny5s}V9sDdjCZ4#WWgJ@ywN|Iuj z1V|^c_?hlMJ)f*#Q3Wf9iWLN2(3A^+FrU%xY!ipkU?-hx|KFq266vLyX^aj)j_3MZ z=G40GH|-57vKx;PVzo$i3Pd#~Cw_}pCCc(}Pnp*qaB#lQ{|fW&g~tKmp2y3x1`yX6 z;Ny72eGax`jmGkO{A?V~8%qz<)^exV37Bta&Bp(Rs+*ujTQRUR=+A0k*%~vxhgM@vqEkEmVg9oA{YKa$E2*n_mGV zwv&HNC+R;<2haEYM%<+TTe!R{Y+fpQg5X~N$z~{nfHD$YR%i_AaZ%uGuB*7^CYb=Z9H@YC{9K3?<|Bn3NtpLNj1W~u*V&J7)uHh1i<#`|Q z{#WRTxHIV#N8%eW=fa(~B~AgPFtMvy&S#dhoW}1-T`%65a~glJUhY;392!fuE+ud` z_c1BgxV%4~MjMLD4L+0A)eCaG4wp;mJz-*Ws{?|aI8u^Ck*5T%Z3n!?_5@#ugZcJ^ z4%&U1OQ{fw;?;aW67Cr?5U{+Efmb+k!_a3=<7Gyzgh*xh^H4Vs7TxM0c}Vm{*bdx? zkivj`1)-PWL@j`L{r@$*s%0)AGZ!8gsvZ|fGMcM>dS^*a;8R5PZD@+Uc>nS{?DlH{ zP**}?x{?~9^>i8J`ZwB1w)MOQMJASXI`uhYXj+>Ps+^YC@Cda3Xx{0UR|)I!AnM@6 z`iBvP@4FPz{N7*0>P zABXYbR_{r1Rf+`Q1ho80vIY~?PY0GrcYg!p6aE|Fu*EWH@)K0wi>dc2^wxhQim>Qd zkAZ}G<4ua_%|wJQWL<(sPR4hK;9|91;Jr^{*>(gUFEQQjEt>VMbdvsM%mEC9(j}O# z!0{%j$@Dg+#;0ZI;L|d6Adf4Un8*4AEh-_6&Gqe&IElc4yc@qVBQZi6!)(LJ`73?y7B5MY}1FC5Zd^u z+BvLb-iJgyJ;Xea8-u+2<%ECR!6G}7$(-k=1k?dw?h739G zmEgXD<6dU$q6NmwZ=}Wz<@H&jN2{aT_-RU2frv@z<$D*em2vv>NHLm< z*H0|Q+)HtYh()VYT#M`(JoCX6g{Sd< zPVL#x$KCXf10Vt%%m~4!N5EeK7++GTy)l3Z0!{xQj#RLq#+~wem;8QNe*YW4^#uhm z&IT`3iBAX1CLy!<(c2I?q{nw2PL zWNmy&p|&05CTia&(T5k7v$e`? zWJaf434aH8WP(ebivfn>E#QcWf?8WLLB!pGag5#lk~sN zyhy~LjPKf(akLFKA|r|FavTZAWTU~XFiaq4K`ePgh4&4_0`WKLB>ns7K;eB0E{!LN zZ7_s6nM5|2vi|!4P#Ge*pV<=r19X!9gLHu8f8Y{{#5NcL5{YauW&IySa$BH!zs+n3 z|2uS&{&(pB$wT5M{qMmY+2S-LRYMXr2m?w<(qM-A_lR<1Wv=5qoo{>}kmA(Sd7mBv zegJp$=e&ojXNUfdakhLt1XI0%`bE6`)%U^A7PJ@*CAXtPpsqlFgag?6?Z8~DuuvXt zmOFr4Sv(*P*%xeK^suzJRze|{Sdxqnt*p$6cQ{YG`v7zOMif)N2|tUmaeGt@Z^yzf z_lYg-sinWN-W;@vn@K%*U8OfObULPVSk&|qR~Of$imO&Xc%AHlrYG)pil$uqUDFk@ z^wF_6?yb)`!5Bq9q$~pcl8|rB{6p*wKHA`i(eWy+$13JD*=%J${eJIFoF!x3hN)8W zU9z}3VkFAz59ZO~Z&@9FI%G3D{zf^AVK7q2(w!C}Nq17x*VL}G_aA7n{S(?lpFoa} z4#Wq?aX9wyv1Gio3a8n@}1u5aqumw4FIU#L>mMa zCR2Y3RpJb(l9Y0DJ32dR3y?8ge*uTLl269_x8&XUz!sj`b_-j0E+pv|x1`|ZA#K;~-;yfQ zj|E|O0P#2xo?iYr%y6;GhD)s2DxJZOX|mMC_=!+g!aOO<-KiVTpeAY6tm z?T=IhnN&DYRXT_#vBFeX>?mPNq7_%U4cEMOREt_sp*v;_PrP2cCFNx;UtXqP!hjm? zyv)GV7B9UHLDDtQPQ=1CB1%i!spx2>B3U}P9ao_p*Kj+o;Z|Jah$KrrHS@sQ5+1-M zcni21RIXs+kg;_C6!xmprMZV6f;G7WUYOXPz{$Do2^@6Wo*3{_+f_#-V`u+o+gAxE zt(JeIwc!|kaC`&pF3JygVVn8kIkptig#6%YHQE%!R$j|ChbHW$1QTGc!hi&uz{n|; zU|}eX=~5-sg3Sx$QUa^g!UBA#Q=2!yhX!I{0Y0=4o7dozCTQ8SP0%tIHbKjrX@bHT zTDV0P5P~Ld3k?WCcd@X55cC(DH((5%&%y$H=zTVCfDc{S!UBBg%QmmUhs(ZfNW~SS zXh)(vluK0}%AqO`*d@9h|ghfb@|aal9I;dr##QK z;p7Ec7?nYb4&0};n`cUSo+p9AORHMM(Ua05+@;9@lvNOxflJgiO=>Y$num-`WisOK z6|^o6iG&&P7D5TDm`WutcN5N!KVc zk}i`miB#AIkyIul={gV@iOXapUCTiPOEg4qyzx4%BE!=X@Jf&Gr0&wL-ih8IItwY$ z>$PIM&UsYaT~u(a9Itb}gjJEVioDJRPRW21(pD=&?Uk~3d!;OIuav@Ul@g9GS{GU^QWxm^wk|M~ zz>B)D)e@}+tr%1TDoV#9t(YOL7#WLj$_rx=P9tC}`UEb<&!!s^gI;=jVxE`To|x}t zwkEuo9m~&c?dWW{kdaa9l#$WrY_CRN-9ljN-9lj$|@OKPhsnpDnLCMB_owYwWuZYTBNBZ2+mRy)DjeOVHX1%TZBiEd_>2q?RzA*mOZHVL-9?f?C3eqOeFU z1x8Y&mN3@YbU`g)u(SArTEb|ju%MPYU`s#|6j#hZ4>Z{l){fB15*tDWX=zhtkk%^F zL0T(k0s3C<-_<8S!6S1|x7#0!o9&N<|4;0X_|TSo2X41+$#=#}*)935cqz9f-yJV? zY{~b;OPyQtUcA(`B|kS_>fVCm|NoA;qNCw_sAH-TF;lz_cL?DQuhT`Dc)ZE$a#1WV zOn18|S>EAsQTP<@)p#z-*Lk1k&2>SBPW*5p$ptl2`Ft_oyL^>PtB041GyE+;0pLDC ztJT9{vT5d*8A8+MFcvX-#@I(gOCkr&ho`JM0qIaPsMG6)h5)Sqbt$MDhn@KKo$=H4P?>KfLrwb*~Q%56z3WtY~S7^6m>Q#J;N*1 zvDz=ZzEXyMb`AKm^s{%spQ9fSRngx;Kl=#$owRCXeT4l4fGz=$KD(mPupk*=Y=M7oCdlF(q+t|2Cl zb`3Fcv}t z(@}b~qsW8+x85)z==FL_y@$W+?|VKWNMPL9j^`A-PW)!QF8t=aZv1w5J@|#{$8VQ6 z7r#*O!Te!i`v11^zLduZyS;UUr4|&+HK<`T-JtR_Ml5UCOgC7=Y8`p3VPn5i`5D8N zHB6(GdXP0t)63Q{9(Ghkh#Ka}YEgu!VLmS>iV!u71J0@l!y2B(*dwYitl?>^3d0(n z<~w=pMr!@Ryz%lh&ATzM7|XGn9f~}8nBy2L(PNJy?VT7;jWsDx#E?ra7SC0DN%kog zn<=3$S*sHR4;f5Bzji4MQ&L*l7}7Du^(ZXIZbim&$lGqUL;qNOfz=KLWbp-7J2a5O zf>}TwR);A=bdd-TYcz&th>g6>g$$sCG;cSxkyHvsL_;%b1qa$eb0-E)LtiJ=H|6KS z5-{|!Vt@}q#C*`u(oF?U`Q=Mc+*(GS8eHZ~(A)~jp$LcovME7zD=bAFPLeYr$+((K zkwVrO*bK=@YH^Y*gPrD$ObjsES$x670K=Wa_;!$)zG1vmSTHf@|rm#pCg2|>ZtZv#a1e;A^kuJm=ud@0c=|Zq^EzC}QVdPqLK@SRAV`Sb7 zGgs3^dJybfg++Q03|)mqdJrsKg++Q0<_`*s^dL+PEG+0jm>XDpK@SR6EFwJ!vja^R z_8?9V6c*`1m>(!C(uD#|73o5lA!xct7s7zUw6Rl%K&m zL2tHx++2Jk^jp|_%B5Nb-k*Xer!(^%Iv+?WJe?$yR>xX0icGJo8 zv7IZpRv28hV^1=8q7q7{9pGQ(uI`g|(N5 z{{G8AO099sDBH5badkXh}9&>zS&@uDD}GCeR74AQKP0Ffq|rM4}Mt9>u@ z58ofkeQQ+ib6>nCazBymytrNN-?zE5_3uSwRGEq*-C2WwA(2kaBBMVbyKS52P6z&g z|L=w{%BW{$kmQCS&GRBaq={y!y(NsReJ%74|1OkKUuUFkcAOq%XJ>8mRI)SOE~7u% z+}Zj`z-rs(F=s@P?o386CeoF&$Y}J;fa%&tLw~^k#92W+WwbsL4AOim0z{fIa-k#8TA#tv5!})caIa@Duhw@x-{+{4`8F8N7hVw%=M;$iRuEPYOb40)&=yfk08C*f_I7Z4Mck3EcAUTg6d1v zJ)!T-M71`cFT!h=7mDqUi}wWAWyJN;09VjvcDy{`b>9fmWwkv)dO4B4Y!+VY5mYa( z?+L1_i0Yzt`kr1N(D(KT(vvpq3DV6(x^5Qwz8^vL*H`Qbsx3rSZKvJPUofh>ibHV^8S2j;LO4=+p0I!sduMrC~XD?AH)w&Q~|+FO*KX4qq35 zuUINy@+O`=mT5Xrwq| zRblPZ@sScA@Z6Ph$54E24)1*7A(Hf#DLkW? z+K!Wq=jwX}IJY~2$5xoOfWx>*T^e44)4A}hwlcSK_4WFVfclrBkl;!|gMozhg;&#$&sV^?;zHbx zkaoEdAw56-JP4Qn&@LsV{FWPRmlBRQe5CdHgCxv{3xfF7rmJC=9dGcrdJ|~j-3JM< z#j7`7{Q&(1!6S9N31zN^EO2M|65K!(yh`KbJluaMe=^8hsItMEyh#^tqG&qJHC_H9 z#E^?8Ts*s@91vNmycfW3N-hZtU`lxq%2L%217*@(_C}%QGD8a<=SSAYE4ri?iT{=G z8*V;=EY-813_vov3RwqtEYclXSw0^TXpr(|1*6cwei*^0>EqS&kZduo8yDj#)6Fy{ zwdL&7Fv8Gk0{&*L$EZ&dF;lLL8>Ly9x6_E{pTb?s>SYp1fJw*V)my%Smy>YI%v@r717dhXm2P8QHv&s*2_Lr> z9@!h0$#Ch$u=7U5gPk|gN&0W519sj5muxULWJ5xhjr%m#(9R5oCgLz&VvUj)O7X3T zL9v(7N&0W2gJRz&kep@q2(0W7BRK5#!eiOZTc zAa{JLRS2T`$T$|jMj=}Wnxz+tu6&Evh?*dSiZn)f2`@cdff(>|6&#LP4AQ-lF6iSo z0N)DN5gp7}y?4&5<#GxcW4bDT4aF`+%qWS<|WVvmmLC$}tgO zl|t;yY|IwYeA8&ehN6`hMUu1wN%$a zYKy8H@LT@??32!3eCkj58-1zfj=SmVxhw?=ihO%nQC#_4d`ZR2jqdB^Ha=YhqVGeI zjShIZ>cj9XQW#%8sDB$_zJyIu5d9M3N@VH~9Pa*AyWmu^xEGkn{4e6(JI;wB{{NpO zo1VLrE6H&=IH^ZRn)D_SP*6na9UCBU5I~woQv?L*D7{E8f+8Yadau$21nD5sM0)wX z=QTT%yW{wLzrW8v-+PGJJo9>&DLXsa?9L)}JI2t|&v;|fJ&nfHva}Urj^zuo@ais9 zEmKXhj#k0r zU6rz3nbG1(wpkVO#93KsWfIsEOi|esGYG7uROkP1^Od(2+qA0 z(a2WbAFb3Mtr_~GHS7LJYaMZC)a1NB((b9%;RT~ZfTLjU7ploet6z+weLtN_l+F@Q zUp;WUws@bKN(FSqQitOWSg1;-l#(O32TP;^x;_1Z)!Xu&=N&=x zR890$v#}5FNVIgI*@k{mae{Fyz*8Lpp72M}l10aU==F|P2h{H;s8_436Ds^a)7 z#@EKw9{iu1-tyzDpn|p4ISoI?OKRRWmjcrcFps~OkyYA!zD=Ea0bb2%3-M}6TSTvX zHpR7(*%aQ%*;Hv`$|*kE6|+cw{I;>GG$XKJ&cdbo+=~0sCqz6044e8YGI)QE`daEH z8sy?%rFK*(WfX5_T9%G%;^VDdOVeRHH!lzPburJs(jrU63;Z7cq-^?6i5f5|}Hyd}W#a9ESoBL9aP?`7$rov+n^I9=N zVZacJy`Q<06raZLTaB5%5jP^fX zgmPi}O8qA-;-5t^^e7i1xfi5M-%(xNw$aEPjm&Qtzt|8bwhtLzr9~_FHXpO8dimpZyr$IdsQJ`k z^dk0je1ED$>!;Cr3^Wj>?4e06U#n#rz0%;mm_pJ%@dJM`r!AouF^|z$b?%)0X!&oV zh4LHwa4jB@mM6ZbGklhRGipWsgFlUfOK2fn*wf-@+`w*3IZrJcUvzyO&OLlYzFP4) zneg|fcr_Q(L40xQ0^Gi!!AxC;$D*&)sV%6X=m|nu#j}cd)&iLWPUXwcp4tQ=aR zGSz@m;(0L&L%2`6@3dL-|5Iba?`Q)(&4t zgPO1XXqbqk#Esf2#ybmCJ3M8i$mJ!8X+~yXj(q=D)lZu+7cnM&`_P2 zSx@rY3jL1fEgUs=XwHJ=bl-4ovRY);Jd#Dkv055A>4cAm)+*uA@;LlOHLKRR0G+tm zl+oIp-rB5Nn;Vgq=a7SP;QMEec(e)iZ?p;`TjKQ!Lo=t*P{Mc58x)Rq&tG}UTG}f9 zVoqC0FMJY@S3Za5ZDPgoh6__P+UvuAjHNkEZrW{9F4BaW)}yLO2Y7^~C-DedE56U^ z6CA$imeFF0r}I96##mn~Z3U0Rzsn?(f1C18i_7yo`tXmtzLA%ln=Gkeo-mz5(Gy`GpC$hsow@ZCMK6CiWFD6S`B~=o-j@9XJ z>@S^6S8jS5ho~NzhyL+3gy{Ig^6T#l77zc|i;B)mO%K_w9zHiA@~(8aLSGuLhEssv z;hvGr*ok~Ds6q|DOk;Zro%M1Ess7O;GNX$t?S8K#U8Q;LrqmjIcBrdN`DnU$m8zrL z5%S^)@0muwq{q{|GLI#7Hes#nfNZ2FLMEw2>3?}r*U|3|-M%$4qce3a-~5g?>ClaI zcuauQsbpnM9mj1=biGaLO$U8{PZ!gklAGGSD=o7}-%>28-%_X)ACWwC)3~1QKniC{ zImU}YM{ByHho*pE5R0++ZSWtT`h>i8&2OXs?Ij1PE$M&!=scnwUpsw7yGH0i{7yo; zpOlWSGxS-XD2 zyBi;z`Pw!7FE*A1_*|9mAAHPqM(X4)Y4t|sy8*3rMg70)X=(hAyFd2l~s{OLqxj-oP~aQ?xe;l)WkmG@nK%HBoG|75q= zN5^PZ`X8=kE<$&c(i5O)Ey%b6v<63%-B#jHVex9T(PB$6(i1BR)2HzT1T7kEv`QLB zG`>KSf-aMmhd(D{bRjxAYW!^a4S#`M>PyIWN{~kMt^6fEZ5w}~C8_8obtn}U=NQs< z&|9=yEh>XJCPGhZR?#Oo3i1t$iGD1Ehd%t{5$#IkpyjJ*ix%mk|I=}vf0#l&jsJMT zw|SrA$D@h5Uo6c|U&(~I(2L(Q_{!J1Q;%>;voW|T_^wG0AoS|EiIf_NB4tRcI6bQG ze@u%GxAa^Qew;POSL{f$a;h(Qpl98^%u>{uk-ik^-@tgeXtv0D8JIVGiFQT($}>mb zEwrGYGhDMD9RPCM=m@!X1Bpd0VYFDoR}|1M@w8Dt=)Y4` zXok4u1}Jy`bKEHrp^E#AScbSC4wOKT>*R5FWf6A;DgUp^8~8#ARovdhGQ>TrfF3uR z$K9Pp+~QvT35j~HJV<>QUKQC^aZ7xaDeg}S=yAO~?w%~-ng%P^|8v~5h)~77 zPb@=uyAP2-j~mP5?#&|Zc2Z`l=d8*{Q!0wp4$U`&So-3HZz!PGX?`B`uwG8_T?8?!j91=h2}iw*derYDpM|w= zl}<(dm{|I#s!|K_U`Kc``Mn3R_C$O*f|+6!`A+!{kBV%oSa*nJ8LKFdbyUQ%G1Y#J zCMbW7P(M6KGd(8QNSEY2eyi?kpAUWf8cA`97msxEKx z7R()vouobskBDrm^4TW8Bw8sR?f46I`4#D9ELE3!EH*`b7VaI{Rt_C0T>*I$b9n1LM5aGvj#BD^KC ztzv#K>m@O(@|dS&Obb)>YMiY+I&##O_4)|~%uzkOD)M2t^Bg5q^_p+)OTty>;ZA2& zujj}__L=0)>FTw!C}aKb#Cb{)ZZuzQt1|i*yd-E19`w&h85_yIbCfJp%vQA2tt{qJ zUd*219~P?5!$TISZB@(<7QZCon>^wf9x-xF$a((u4PzhvinG{VFOf>lqua=ws{Nqi zIKty1Z=B&tkvHM%>9#8^Q5KXLpLnMHRhZ8{N6`oAJ6hKh;t=)@&+dY(4>SA!8T+-R zDqeVKWIJQ*lk`DWvFq{J7qf^x@JHn}Q@JlhJ_*0^lTwA}N47J@b}Y*}c6}cE(*HX4 zL2|42mT-xm)po|%^zMMtuX3LeQOy%Ae`6OKB7o`d>i)?3%oqI*rv77SP zSN_+roxet6r$x3i#=c1(WL54KJoeQrVjo?pyk;tQ<5lXD@Tqj$Emtd^G4?t7AgkD| zdF*Td>)2P3v^EE;u&MN z+Madnjy(2_|8?xkJ5;>z!kub6W9*K*vX0%E$G(|G?7O>_r%dI(zejx%ezZ5T{dAw& z&KR2=$U1gc9{bk+I=1z96))^Kq_#80jyjxm?9X`Y+mYDq={Ocm=gPvdN68?*2%RK( zTW&eRL*%A2yoqn}J78Vm*kigh3MW|T)U%b=eGo^oSn`l3{5Dsp+hzHgXA;=tSF&C_ zhdYrRI=q;}78$}3ekM1a;WEcn4qx+4o^F&rInE-BEmDqq12SjvInUx>o&`UTqw1mH zU4HJK*TYBu>RXQRJh|zN+{^0~G;~Ct|q8=hSlslmp(-Hn$ZaTy3 z`KD+K&maHidZ@=WFKvy1Jd6KCJ=oX@Ui5*4NFSKsMx2mYVm7yXhxkn#TL7y7^mUiybG^ns_3 zWFI)DY9U-!LT6arH|+{fmh`3dpYd+$%=JH-XYeSC`hWdN#`;f;)c@YcFVz44^Lwse zQvVt6y?&wo$MMoXexd$*J(KmH>#3}T@OZiD46A#xU16(~zO?=`-l?6r{=efHJjtT| z={$ls7C2rQ1Anl-Q2+nW@8^C={b#(d`-S?S#7qD5h5D~+FzCm@?ayT`gx_R3bcWUa z-mdUoNncw38SetmT>n#f2G3;ur#lvZt;rm!8ucwlSTm^{)cxVE@ODXGnnT9B#xv(I zgXi!(iyThbWDaZ0Du- zMSdtZondv?xhwpdQ$`MmAtFZ0(Ip2x#gfm<#97^pH=}0`J(q_zh|n2hcbBdm;h*Iu zJ?`TpH3PXVY1B(&XS``WbL<5?wx(j+7{6W&bJFoHRqm5=(-~HGvAe>rM7>b%)~w=xBHcT}KgdmISl#jN3jZrl#3}p@9mqDCib(6g-T*vc&Rq~AY-)9cJl7~*@ zq4~Z=m#m6DX7}p89pO~D=?ts8@o9!9X}WT6B_e};F2YsKn?afa26|E}<6Nz+yDi;*)f36MGR79Kf2BFo>1`1pZ? zcBG86;$&q;%E*6rNS;RjOJB^4iw0y4ww(tnB0WE(xlfYLNn0xOz4jSsiwgUyPh_`GU-m5Anzq zRQ>Ybp|fbqv_u&x(r?Ne=^&GsgYNR>M_6%`$+*5j=2%C0tja1@YZ*)I8=I3<8P!4u zuJDYYj2tOrR*^F0$?k2stUA0%ZaKn5{?s9l{gZr?MeI6cm?vEF%>NYo9FP4Tj~)3zsUd$$HyQI+ z+=iguETBuU`Hfllgx{EvvVva`Hl~pHy{X!JZ&u?EMdyDm`uADMBE^c7C|2UtvYeP1 zKYy08!Nzj+Wo#V1)?934x!&s*ZrAA(e#bK^L;of8>{b{iJ_G>0d5g%dhF>{1pA;8ph^U zk!7{8Rau07}$cLJkwvPJp5A! z`}S)Ct6Y$?+H@6Y!tXS?u+PsKSfeoiv=jYk$v<_l?W2wQR&Dx3Sojvp7$tK^e+6hu ze0p%G_%xci^BdTt#yrO1z6REYE}*us9&`Z#-->1*3^3}SZd0HBcUgWqB$+BNhT9IK z^75RcSpwBT-?O}I#b}GyvxV)VPem)-{N2E6QLWR#bs04v)p#^xuZj{yvq5CR%NEW0 z=c97a(-tjkiA|QH72QB4YHcU!#MY~+E zt;UiKDkHbPtta}uk3FT9$-jw5tEBgK3#*pE&>jx%1x%K%b(QfgqI3}G!5p+N zh?;zrqKT~=`WYVyquDUEhnA$CBlekvsvo4#7$$m7L8@Kx>2PXWvGo~U z3@^5vRpeI1PI52%igFR3&Y?Y9^wXKI8TAq5y2@pm(k0B77MB!TR7vg&ov+Fme^DEW zJz&!xv|0js_ETliU1e2TF@A&+xvW&U#V_ zHBR+sVNbV9wvgIQ#OQELW))~}(DQ3c?Zz|Ze{=blPW<5rNAN6tfxh}9-QCJ0sqvj8 z4r2Vjs6~?G)5+pxlF+kpp~=5el43e(@~b2zbaF{)O6w$bh168kNe$(>8W96IFG-lCC|lXuxHHkI`! ztH%8V39_g>Bv%;Mj%dpqH=kdgN}Hd{K7WSKkld40jmAhG`CknW#x>DTr?PxJ*+;B5nOYetcXxPt8_mhB3D3$D&jF1j9fEIkr;!E z1|tujD~X3$AV!vSdeB^z}z$M67TKJClGY99@N z+)pKCb<1D@`RbAM95A{~yjG)jOY$l`_L*DtQJNaY0LagZG%{v0@m8)*b6XxOjdd}; z0`k%4lJqc^0GZK8lD@{*K{hJQU}Fl4y)0$V1&^8Xk0?yfjsQKuBmJI$+!+0ldgH6$OaSdW3#EfxYcR4 z%(w;lJj!DP2@#>+H^|Q+J$h}!&&C5FY0C32#>4OvztF&j_NQYK`_*_Hn$&HAgovC3 zd95L>vP7B?TV?#q#Cz29$3jDQxfw5m45tx^YdE>4jcJ6*%r0b_2E`MQRae6adOWq80?5TucAHOg?%SOU@4H88Tr1$g}&G?s*> zD~*tX{BC?r<2|7=?aO^>h7)3kj1^$@fc8pBUI!U|N0P(FH$WCIl2%8IZ^3g?6G@I5 z>mcX-)Z@4x#*P`ALlZ@#jqrTT__4-&R2Sv>gs}(m$*wdfjs0MCS&wzraMCy$ntWeM zKc|dSpgE{(t{6@kmq2q^j~-&DjVqy9t7~oHZ7x_PiXdG@e_XAC-tGgX16$Bqc84q~D{CamI3H9-EP*()a7=qEH?7=_t$ojwxW_Ex1y}de@W;%|S&PnBIWqj~mjefvGM?Q=0$ur!x}cjLl3< zEPRwGM>8}|Lae!|6=@jjP5qFQKx}iAwlQ_L@HTBfS6a0(^@V27D+b-q z2c|(F)u?rZ=T4?+Ab-;FR*){HS&06+ir&RE7n)ym&*O|;ObabDDWB5^=-d+>S7>D= z(~r=2s6TTOBJz`k_tk#X4>>u_J~RDF8v4$+O^`1QpP5$C$r1YDfZ9t~^)S(|&r}LN z_Hr`B(8IJFWFd_SQnL@9YfyXbptAs{*+A0~ki+vL*P zAtyHn2xlx@>;DiRCw;r#+g1stZRBc?brlUACUI*W%LQAzKAtKMW0|A05VOHNv2`2 z8bekmd`6brG}$x?Buyu0jgw7dK|Z9`k(zHomZu{VLAIpxGX>;Lsts<%{Y*zG9?-~_ zM*oJh$)@i?PCgJM#HN~l0kI9ISqy1HY=&v0mG2kl-!r8bhGF)zY0zb1<^j}Rz8*i@;+eImcvz4^?8z)0Y$a1YRMS-N~<*II4ZHfUosb@Hx ztuX~alJw}+O>0d#Y=&gUrXDh|Y&2?z*jiJvjn~g?ni~sp#x%^8?%mik7WTrw>LY1>3`eQ>x7@{reh$t={&t8XF*2OErODq2iZ&~`j%Cd96r9@rU?W`8rC+%P=>`Gd|B3e7E(=9oz>SX|dIcH3kJai=3rkSn?s*F=F- zOQ&%=cq~oDx^40}cq{*!&&U!6@O5x@lt3+oK9Y@JUX!v@jz3xdqk59np!&XkfxxM*You?x@VSMEA8Ypws)+I zo?WA>gNWSMH6fN)>jPq0D{CyDmWEg{e;U}$)4b28X#Jp>suNmaMjMD&i8`U*jc!97tZJDXL8XX{yvrrpT=m;WmF0S#jd>*z{S-qyM0eMqd zmC-hUv{#z4+GdbS>Bv@Oc=T%nv;JhDmMg1m2Qd$eke#sFsB1!`*#)weehc7MAyz@7 z=Pyw{+bhxdbAYi6rq?xkvJ{c`uhG6tB*fm({sMXWDUClw?wa1x?t~V5fecqUf2`5-kSOQ9DxY@RJdoE^KB?MD zkQJ(2U9|lmRa8D*G;>mCs;}o;E~Q`BXk%YfV7bC_f{$jv!l9KBKjvAjecb zqcwWY5Bd39AN5>uB zGq0Q0X!N8W(p1pDDM?bPT|JLKoE-VZ(6Zfz(?N0rZR zjh>uCn(tITd$pM$uc&w7mJj4T73;WG9%QmA`w5L6WkY_ps}guKU^*kXKc#`x-s@g)~i7K94nnkCTg}={uhv2On$nNEad>P)Runv1eKw zNDP&fle;FPIR(T`IdfvuG;?K;`mGszbvO5;nd$M5+gXF$zsK^J*WTT@1TnU^iCr<9pD& z#y5aS?aPv6H?N1L%27cYS#p>+gLoB5HXj7(rbsUHY53_#Gf&|;pZPj8+mA^>av0~<2AP)LA$~7G<#msqQ z`0Vu25kVMf@`L1h6d^@G^0ha@iff92^iOA10%Sj(4db4s%u z(s^z~BglYsn!3=8?HjQYr1D0l{4|8-_Pq#c3KFwD;<*J#zC965OVq~DMMA@C<6~%C zbk;~_*bZdZ*@&M{L8j8VT&W3zRKFe3bO-rNZ!caOJwWoGh-f|sS(7eSU!mC%(ewv7 zdoDr-fHbTXA%oEF?erQ8QLMoz*PHW%rh}!p`D>8udb@Wf@=Xlyy?g051zrmJ<;Xk= zewH1Tq?Gyl7)Ix04AjTg(wVgod(Au_Ry}eV*%JCaiCJGWAAwa{Dg`H8a}1h)+X~_$ z&54-)6l=;bsi|zf1I_ZBlGHF8V|hN!=n4?wxrSK-vC%na;kky{0O3lQW@vmYea zbwOO#H_bUfe)~&mnwcwtJXW5Yn`?r2evq2x=C?qyca`LG^V_j}kL$irX4u#KE;ReT zlA8YJhR`IIm1Kyy5y+BWf~2u;%pbujF1yr>F!zMUR#cKv=H4KFIxi~9HOBk}2tV5+ z$awQmkPAxlop}^IKT)11n!kf)b5MGoWS#(0r-vj{%@aX>EJxQ0qP?b@r@_yg2PK(f zUItV|cXiDk*$74NaxeZM~@0kH2ERK(7J!sDrHFnBkj^pL}T9xZhixXt@ z??N+_owp>B70m(Y%(k#PZ^;2tySvaVw_dd5hE?vS((^@2>9`pbE9Zx@q*pB!;`n}1 zShotXtCotedUi%yU9(gN`AaWFi2Y-!1=5qw_KWC7YfF%dBV>iXqAu0+5_aY zUeELki*+cXA5pFBvyKG0ty($OIvQjGokJ6`{MIobgVmmr%{msOdRXRD+&T{ARpq(7 z^;?i`8>FVObpptfL`hm$CxLAGQj(6=$;i3W1WCGCr-S^-Bq3w@10)%5T?BIHLrJDu7lZss^IqX+rgaHOMO8n)S${%4yIRQl z*v~x2)5p~Zmi^ZKAkY358jtmW^$1$I zy*~cXZ==@J(7ans#=2&`2a+wXBoD2oc-~j{xMi$IRx3zZ`YlqF>xnfwp7+BKW=PFb zYYa3`m7k~9_;{Z4-xZ{l!IlIoyDFE>mJe2Oss&xPlz6^3^;7#!w5=#Kbq~o{(Y9AX zE~&D|*h+!Kt35Z~RvEE|(s>w>bAqiFG;3(yCrA$4n;@g66Av?^h14b2IiFjn5y9%P6 zoOA;DQ9o94(jWEn{%6AT6ALH2y~=eLM6;K-4TRN&X@W3T%{Cfjw(?WWHWp;9KC*Gm zRQUNqw+a!N2J)P)PT}>l+*Z@}J;-34*sQf|^H5`nPFaWV*j9ktJ1eYWtxatEV0BVI z3a_;_u^oe^hO%m6I|Q=8`JRGaIiDtynyijf#(YP{>7*-{0)+(dem~;Q~FhcuCn+{#Cl@kgty?6Zh~m` z<+kUrs;qkE8e3d|TisM8U1LiK@HXA9=fl`KTXv8fs;{oIrGWI+kHTD20Hm=h`#M{} z0FO>r3ZZpu)^)Z*AQRPyw9{5G!23okm+TvRY*j&i$Q>cIkl}B1{SR;DG`7d~HvB9; zCP;|wwKa#8QT4Gywhy40srR1{`@?nxn&C;(>XhvtXu8ucVxs??w%q_pIcH#rbOmmR zow3~pc}VRp$T{0%kZX!uw3!lkNvA1t)fNqMN|C>9u^`!~R)wD%wgiwE73;R`6_6Rq z>aHz6$mv_s>YlAg0&ktYI-&21wvy0XQJx>!%7Cm^eq!vkK-^R&5k0TH5y)+2Rovbj zhM#WdmHTpHTH0SPJ6*gg`Z<$bAXY99mA zQ;}x&2?@L>^rjXRe%jc-Pnbc`N9%qVYh#~{vcIBRaWV&frazIM+t?R?+!`W?%k+_b zDab7P9w$7vx32){{I4Xb_TNB?t9(-J8|f-O+ArRbny`HvG{&LQbDDiG$XeyOzx@!% z<2nYmj{ed00QTeLhptbceOZvv_G_e}tM-&;jQtj@&L}d~{s<+ty)FFECDe9fHr~hf zm!+#H(KF}R%^_CXrYoE|5Nz1)1SkXpa+qDhhJk@`F7IWNZ~d zYFd`qlR@54v3|7Y1L;~-Xo8NF_A(&%b*rFbmAw*3A>DI`t+t0iuBupT?Qdn{tvpM` zT4%2VO*dt=-d+!+jf%e2-WcR-J$gyUPJ0`WC`ESJKLKf`{Oq=O1Sv$Lji|AG_U<6R zsC*9D`y-z(R6a-SUkX3E=l2~a?4v;b(lzfp{;*E~sYu`Px##1SllGY)XLYNZmQ(iG zAZPT}p=-nJ3qZctH6J?8+J6Gct;k>Y6(HkPhUe^SkYPua;RX8!Xbw?iQLan&tss?k zKRq4S?E65r>Q+4+f7=g&xK;gJw;u-SuQI%4KLs*W?=2yA*M0#chfYR0?%S_`G*MO$ z?AJiTiafMm2WfYit{kQ;L+r8rCdf#od1AiPyf+$>i%p&Lada7o+3$_0=MbPELfFwi~w2rk<^rTjE2=bnyU*<1;;pO8YrtujtL-^ zkEN!HV=}CwXnYn{RUOknP8~6@-{^X4nqxa=f^4PQ5TvGK5y(2Fspt3&#D7d^-nTSz z>;%cHlMrj{*bj18`T59k4rGt=)7SAB?NwCQFgCQAvmnPE3!%xaG^ZWQK(5fYNTE6JSO>CSksFR3Ae$BW*YP{ZKZ-ndoB}zi z$WzBfkeqZzT6i`){{>mBG||qdAS>y7ozTQPZ8V?su+Lk_oC`Z+L3}FbGR{{(N-ED4 zoCQF7^ro}^i}|(jHJl|t>h+PNj`IzWr#&U9>ud<}rLua@*%svbBf2gZ`%VLAuOvQh z9Pdfj_kuKWra^P|iO`&Nc5n^`u{;%|t)+u=7|4-_(oYBH$RyqtKhoS!`03~z1I;9* z>E!$tWa49~Np((y)mCK{c20rj2W9n{b0)}AW!2L;4`i^?^mG0K@{b~4IM;$)P*z_$ ze*@{HG=rU+Kng3(5a(79qawqcdqIBIYwWOdl=BeCiFD*J$Tn50qnt-T%!-V4{y~JX zgQ}j#JO2_^daMhU3C=4ZA1X4@c^jmbBGa7@LHa5(!^yJq9`&oJ;KiwXCr7TD)PYj5l9Z@M|1TCS*-j-xyFJl^-Didu5s{uP$wN+Nv^rjJk-f` zS8mr*kOF!vPF8@7)ybDc)`RR*B~5W{0ePxOG1p#@uT}KQuHztsmF7LyJrKJh4PB3k z&^5`*s;SG6gSXBGVo{ypr-LHRqrL{|qn9E!s!h~rkOn%r z?rIY?4kU-NY7;d9jx0_cJ8w57b6Ne@Ui9-GXL%nj|x#*ekroRw=SP%Kr+l=N7u3Dp4Dv z@`LQvHC3WEMim2j+E4n~6jd62t|+o6ssS{2l;=}Xoj}Uzp36jCj7kHkuE>L^5g;X$ zA9wT&kbJ5Xp6K}?UnnbYG{5`M!$#_{%0vaCcY(aEG|ADYLHa38!RY%SOB5*+?a0af zc$HQ4=me0@6sa3s2&Ax1>P9t-t^{JyN$sfS(QklU)IHZF@;1m+y%cq$T0}Ph$)}gJ zc2wKw)*yRzKOxpOx&z3Ys_gBfyAh!)C221Zt=uWPKgbhRihj}G!K#6>8XUbar-96h zD>6R%H)syh`S7LmkB%VGhe6`$+5=m4e8VA0qB{zt#6xM7=uQCXOyA=g)Zm`8yOThg-ZSVVr#lx&V@2}0^MU+A-#Ff) z-}XYRpt~T*_Ztj4dENaQ$On{<(7fTU05a+r(@8CNC6HN)yzQT=S%yd6Z-JL;_>HHY?Qz*K%yAR09^MceQ(huZ1)rQcta}NR8sarLR z{?t7R8Rk`5J%u3VCJq={Wc^SR8dj`mEJ$i`scFzKN zenDtL>~r@#kn+lNU-tr#19ya`S@b~nGLWI?rRRa}UqKe>o|{DvcCQEdS>-d#y`4%y z_dA@Ev1YrE&Tpvl6xF5n#bDQ+@qx)H|8I+GB9eEC`MVn-s{^&O5=B>O+FZ+b( zRqg;tjq}1!&FD4m!XP8`vQLQK;jTo4vHuRp==`G%XFtd^JywW$Jcr@`>}D1}UTWv9{6ip0gltr6U(Xs;lVno@=O|Wx8itVajteHy>L{>7@t} zxdp2OIc1F{dLDt?9U)6W*N^7m_5A3*UOz0!W6Hz(m`~-L=j!gyJ*!c!xvE@!J?rz#q*~Q3veE>+uS0WA_3-RE`9;sCr#rj1I;<|LTFv1N!Rn4GMG>8pR%I{ltqsjUr77X9 z3-Umfw50cakgBSruX&pyRwI>R8EvEAcl~%j&dZNPbLdFKNp4RSZ-=}CsJ(XTRv}i!n+mH+bVL(YuY0?KSm}Bj z;kmZ=OZfSeuHEIN9edk544QFW1gY(L+dC4T=OhWM5PQcv3Yu1Qm9p?$-#Z$bZ|X{` zhTiX>DXf=^en0h2Myz8h=QiH?(1fukj8dFQoS2M`l+&a_3o$Ep=+&=is&KM&3hD@U-UW*c)EE{fc!W` zdhYH$3vzveBt5+sK>k)%UwC8k@qMScUK=GnUwRWk_+5JEya~-B?;ena&m>vw z{R`xjB0qTVfpmK$HA}ot^6?sbkIteCKTEyOp_#9u|LBdQg^lRi4Ek0gG{1V2LGCK6 zmEM#Tp7XTc!t?uvmENKtXLHf6of0Y7f#=b(2hG}{}C=r->`?>1-_(tt zmDO?Y4Oo3l?auv#*m3VIkgw7?|N^8+&M2|(eJ|EJ0L6dvJdy(^Zo~7qVLq) z>WSx`_mR-(b-331&}+)i`}1JkYKQlc*9uaVMn7&<)BD8h0|~2AJn{NLa`zRQ1Ky|J zY#^WMHFlgx5ace6hr-V@Z!VCW%Fi=z9*}Z$)Z>~9-sj#Fp`rag`_4XZ2Ns)l|J!ZC;137RXk; zHg0*Ne2qZD4TYauUXQOW$h_f#*t}j}DoB^VWN(S}^#QrlS!&{aUx7@~%YMs~=$ioY zgHLLLzR4h?8pv2lzQy_Z-sDj&nBBJ=nql>&<`v&+kbojNeVagjrgQ}6lImy_b14zlhP`m?+VDbdTqG81$|FJ2CEh<=ra`H{imef6W%uz@@XJW zRfCNZv?%CeF-4;yCT+NZxLUz@S{8z_2mJnr}vHA-eSHKkm7pZSnPe(_bSK{ z)$YZ8r3;|OXlxf{FX1Z-&93(ax#cb4s|Ye!??1)7C4C`~nJVX!zFHvdRO^)Xy$e!9 z)!1vk)*!_iOV4F|Z9!@&KV^NL3-IyhkiMTXR?gQ8#Qv}7Eu8cQS>_OaBIKB!Gbeot z@cvv{_1<#6&k?J)K0-2Y1>Znu#;JXH_rTI(4lZSA`UKf$Zg&j-F|AbCm(s}TFZXDrD3 z{DH*=_IE2@KXZHcNtXMHgKVXG=6*tKov$*;FV&5@=k>lfK<1p5R=@e`fIO`&HJf}*Kn~GdOXRb~ z_W?+I>Is5u_jLiOWS5$qz8)a==-dU@Z1L{$^#iH(nbhp^^#^IQRrp!y-R&C;^7|4& zCJ^}=WZ$nc)=}RG5F=eZE21CwjR$!^D@6!$#y1(Ht4CU$^UVR7b4ij*zNH|iX~jrk zb=CJPNU>Dfn za}Q*w%Gnn4tRSCN?xjA)t+sgGG0sA~|HM2MWVkmN69rPXj`W--#tX9WuFNN2OajQS zs>bril#VF_(n$5pGBK4w zCejRqYleHv#Z(75Mt8>utJh=R0I5&kAOs1;ybF@%mzo+ejX-j#epoZ61;~dhrB$t% zwjd{Ij1qp{is=Hf^LweO6Vn4ErH0hJ9g_y~Jdf186EhGbI8SPt#*6`3r+RqHnD0RN z-6bN{Co!`@%Ft*mNZXjjAaDIAH1xY(%+DZ4>8u*p&>8ZW^&sDTE&Y5RvkRmT9h-!v zU(6AZkCdOUV$Oqn7b`Lhu`w~XL3XK9jE(sh!rYmk&|0RkA3zhLbKRZ(;8vd4kKnm2 zX*db7*w{|cRDK{e39+3)7FRInR!OlvK>qD0tZsRdWBVdj9pxuy>>y~CQ*RNm^281X zDX607iyaA4jgHhMs8()y3dDX3KPT7I>c8}TkA5eLodR-3ks`5kV8vI$QYz z$H9AF@qFHl{R{alq>>6!C-!gD;lg;j5{!Cqh_#FT2Y%{NcAVVud>VTbWL;^xri;iB zUys;(AkF7XO^?|7Adcrk6Jq^hpMm^aQd;$oH5K8#?o-;kR~+Cq)<4!#gdeF_Qihy_ z*nrrWBD_agN=fo%Y<5_EOV^HlME`Di=Ef$29HwzqkomEBLCm!cI$01~0HpswX|*V} zD99Uk#~^;{QNqvK*tQ_QtLVSQrh;UnIf>A0jO`8*l~=2ORO0z5W8`SD*s#WeM#P-CFg=U#5MYFi^f~e>%<7R+-S4nzq9XAhT z0JWgV=aaY}LFQDJn$);;AgA7vnjUf6L6)eJ_Kw>J@)sR1grEL#$3dKz>1vH{cqn0gKVQC zqww=UX*{4deH|`^pv?$f#JA-+%Ip;&U%EwQDpF1>{ z2)5=Kz7szQ#7pbN3Q{+II>BgTLQ6&Kej3NG1Bs?N zoABH`ejCWtpA9-`9lsx>++0a|#h(Bv+|t0t{>I1E-tm8e@R@)hpT}PS={1OcE&Y*e z`o&)d`LYH5vIa6B{$G^61=SBHbhS_XLuhI>l2+fuKL&}Se1z4Qcylq{=eJTF#-a|# z#XCW&QyoSP=k+`>KB^e+8{=s-{%Ah0=VkG3Xuc&YL4Ju(D8~1upJ>kiE`2w+<+&H1 z2vYDAtzi%HAU-F^7}_fZc^ID$q?>wvgtk`rFkA-7NkBMHH4MHUlpW@A|`(g zkZ^YC$Ly~Iayc8V8B&YanAKk&IX^f->xvKwF`K_BG}WgIa?2C#Zw|8cxFjC`hakVw zej)t${GWncQY6OT1*GL4(kj;9Ls(HMgq7dl59E&;QWNkG0!gL0y3i#0harhw~^UnwQiF%75#r;b`DwdO^q<;lS z5t@e!O=EUOu@*Z`XjzpZ${^hrVl%b=iApQOBS9uT5PIpcTtAYL)XwE3B!Tto0spX~BFn>-E zFV$fXeQbokAc&L7F32cAV6Xa-F z8EcKdFNm9Fal&e&e<;XuK4zj6oBbm|_VAGnWV`=ckao(?PXA<(4l||IZvQNh)l((; z-M;{2+Ym{P_eo)yOT+IsXoj zZ|EDMAQ$}mK=|1VPD1RW{}9M5n#BptCI5MlHFOS5Xm0xNfaF)2fBjEDx+u*fzpXg0 z`PO0^fi{DL-!nCWFkLC^a<$--9$!J>kv30+4@|Rqeo1kWcGNtG5FyKvpPC-M~7K z9ki#2=aYy`fM4GL5Mx!IZSS6jzN(ZPY&K~5?1b)XhV{u}gM4`_x3>VVYi zEv-fb>VwQ>QZp*h421uVAgsm&+JNx6x**>M+Jju6nWrEV17VOEbR-gFO5n2+d>RFS*;6<0x3k}yoj|vFdihk(rgG! z0eMD8SfSYxm<2c#Dri9|lR5}uaeM?I@v&sACO1Y=3w$0pmP z=R!KEOZ$beDw$w|rl>0WYY9G(&We;v2!Q;o%2hrg38abAR7iLQByTU7PsM~hAReWu zoKO&?Yi_Bjo=^g$w$i+jP!1$vr!0G|gsLF@l%{sV8zp()C`&Vkj{W$|p-#eEq+#qF z%@ZEC<-MgvLY`=ze}YD)9u!O+|(zo&|~2*s#P4sExlW!-$@dIWqAoJpa*4M6YWY znfP}}D|!B#=261)sKgu4lrl;(EAb}$9OAnI{e{?^#JeCL{4U5)Hb3zJNO}79Cp7aD zAHnlc<#|Ek6KE{TYE9x(#2TmaS(Er2q&6K-g`c&F{1HkXmX~_3AnOxNrFb1)P*z(L zqe^K+mZb?z6~nefPbuDi+CGO7m3>>H4_3bWf>0kzj0ef1$j-!UAU|%GvGycp2br$O zfy88x{fZn;%n8!-UuktBF*ofa>2p4rm{N-Oy07X8O;vU(u|%maNYmnov^q<~L?yKx z7Nl+9Tw-aE{f8vElUNqyoFcwp1(ei&KxkU|>IExNd%HDNrgWy{rZ!1m1;M*Y4%5$UOyC5T!rg89nkWNa|B-jvSn$k24HW5}z(=6B= zq^}~)gRMaRR8}p5AAn?6nwG(jL4H#?w+glcxuL9D2Rnc)Rhl-zRFF{nJ@f>Y3Y-x~4XfvmkSIveLgacmZUcPO2D|1}`DQkUk>SCUOOPcmEp* z&Z@gt1pk56w~{2R3f=_ipvdarzaZ1~dS32c8+?d?czS&?u2yC1f{&qj)?JqCH=V?( zl5Pq32xO7+d_On@=?cAv4+K&rDkB^ZAHXtJaw{lSHU=p3fD`tVwN> znbZ^qnRHg|0+}`6RLM-}#1j4@`CO)ZeE464OlX>!6niH#c}>eqS`^MqN;Jz%KFOAu z?0>=Y#JZU^rC+GSPhY69kLhYX{ue35u|}E6lPZ~sp=f4uI3+W=f@e{s_nbXGv!>4r zwc3ZSnB{+we70icwDhFH3-w&-g|dH;p>_DIz;j0wp6;!nerU10vw<=C%Fi0~@41Mv zk+b<$XPT3Ut=CMF4J|LX7N}1bQY#AG)|qn4OJ(6Kz2~<_Gd32UJFb>n?QC+Zs9kPt z8z{H_&iVf__wMmFR$JWoc=lT8o=Yhbp7xedvD&Oq>7s~`WwV4tx+oRtf}(odA|;gy z-CRP7A{EgEU6iCErIcGF9VzKvs`oqQm}5L^XCJ3?-gDmH@1OPge#X3wIp&ySjydLh z=2G+^q#$L>LvDiFS;!sZ72_CT+BB=?nS%CvNl3hB zMFR|#Gjy_{dM|6fYi?C^yP-~ZEA7pZiU!Y7^rWF1?o(PgUr`%t<6A@LTh0BUL&E6< zOARe`{cW21qoH>!Ur%eT(g@90#?U2qD{bk$ie?%5b&=A-xr#2uj2B+sgmwxlwA6;y zON3N>YQFJuwY59_1x>9~R?)}R6kSzQ(Ho5vUD`y^2kjKKK2OnrZi<>-tmwrBijK8j zo@bIQZ9La9u0FGI>tU&5@7G$k-=*kwD>2{Dcq?1M+Bn5h_caclwR~MIb)eD8!Lo`> zmsu@$8=5geQ*W8CXz~n2jZGs)S-uIDZ@|NvuZfpS?p)~b1isF7bD@o)nbVXu)zCh$ zi7&W(M;iKRlF~LjuISh2iEcTJ*M%Q2X9V2|jS#d7GG&yB*3FX=nP?W;<(f0mVvhp) z6L)SoUqBD6BYGLB0d3o)=;I)dmN?pontAk=L)(pZA80EbZPWNXTI^eP)6}6at1Ieasc+O&T0^6qWoX~Vnz{_SE48$?)Vw04 zeRrs~b}RIm^Od6q@4!FRIW*_!fWCKVHTHVH0Oiv?h+_Qi(EL#Wgxqb9^%kT?;{%S&_THIT-Bi} z7@2$^y#LWT&yP&glLA*uNayS%s_F7QQ#)`dMW5mP^)UZT1ex=fVw)g z9FaOf_w2?kH&^0l)YsFYz1J6)U=FVQw@dVOCE9QO=R61W8%{U-xqNqQ!~ZEe#5#V9 zL(gCYhdT89Yxuu~qRBh(m8VP1{u$6+4*h26#dU$xoPb!1d9?5aO zfHqpYU+*R_ac)<1DAx8x_i1Z|Un-|DS5u*rQlg=?w%-GJbf4p;2JVo^xQ*=%iw0Uq zFHQ?+qD%d$o$*pW@G{tZMxM(TP`B5$=k*LVCw)nMi;^}9iiLm2bA`{h{u4oG^wa^B^ z-U~X)Qs-cO6WS`Q_JYpzwWKJ2zknV`yD7S{Gg<@6MEr7<L`N5iU0i8Wa51#Pz0UZ173uJCCjb;le6&{rzYs0 zmNFX?bdBdZK|hbs)Hygam3)hqDte?kZYjB1GT-1{yF&+e*VHepmcwz@EM-?*rKv@@ zm&&U~f zu&<&ruyB&^11oVh+7;RbR<@C$N3E6y*J>^I`1K<}y)5;5LrZ_temrLA07G|Sm0aX{ zd99%_hN=uuX|#F~U&Xt8f8MF>z61FQr%_KGw`mwbq5W*Ks&SF#yTeis@#|oMp0oNM z+eh=wFxn$1!Tw)@n!>Vj&6#Mk*Y*_6gY22B6g|IEP$v4{&DE*nl!GH|F2vSs^!=K; z0DCLpbdjNRY%ct0bM-{4?-W1F5>)$FDU1G^HqF{kW%|usDxsV4-H?pOh-LU5&5g_r z%N6YpNxlhMKy`1@5{F}Tk&)?(e1dL5=uXPUbK%P!ntHuyVyQwcI~wD*!nHP`m#hW} zdK%jFo*M-nkN@Q;bbLXjd!Vf|TVGV#KtnqWZ8M3FU8woaHw*WLS@gDkv;rH2fbzYb z;@%f}$+E)w6wHqm#ceJ9e zRTX`Xn2gMnqSA``%vV&&%8s(KA6C)S{)p^I*}cyrUKd2$x98>22Tpf++}M*z&`%pw zv-f>T(V4bZ+*Uo0K6aX27nX+CirD)6FLk`$HNs0K+U4h9if$dCw(hiDqKPRQ?X5tH zPQP7dGV(#|SWi>b*wZr61Kz(1=&-w_mVjQtN+yksUMb&)DOe1&HG&0Nd2&E6#HSZcN6AAZ4`}U3i78~FW17mylvH2LK{AJfRcA@rByB`3TwjvD-l)5= z|4z-v-}cvBV+R|WAiOz^DSfZEq71%zgjg)Q&U(Z9=Fo;hF|kaQv=X= z^h?vRKy0Z?)8UYxO9Dy0Ti~s8bTC0%QUPstGip1~Hivk>ASDjosQ$}A zKs($>$0MVtfVLKibdehx#${tY2yIkDdJnqG;~SEWM@$Ro&2qw3K*vINC3=~}zE)7% zLVWw;I2ez+wcN{0v@9#BndtitfFB4tXLwE`4ux$bTwDPzPOFJW~@TK zjW}OOqdMiecvG5MV|T)lr!?h#kM~tki=cynLK=Zvu1pK*a@B%SV?0<^ zAzj}Gu}I_#Xj)42Af$`2HgbuOp2m79`FI4+1P!PBD=+I|)x8Y=m-kPi9G4Ch5sOV_* zkI|8?ysx2SwMQdRUo+$jY2~wc>DZy*dA!u+(3~+u9b7HtOQ~nMs+yv;UIvKZf>Vis zzP5y@vn#P|l*Y`znyk@ojtSOueOqLywcr7Cb0umTs@n!{9y{9M__{|Bb9K3+eTXXw zGL{=okv7t_qpYH9>L}{mM$yQ$q8iXlo&jm<*-6o~grXyHJ}9Xh$|!35InE%#b2)ki zem0M4IqHb@gJ~(c1k&KqO3{I31>t|bev%a;8~wai(dFv}A>QU=512D`G`{xp47@_% z`gV@ZsFxuFZmp1>$M|wHaOCtzQS!-{pG}9>5@n zI3~y^5-AD}$fLoa6;dPYU04Q%bQ~f|f*N>FtB{U0bU{7XKX8S3AXZ(`_Rr@lnuu6| z&`fDSE(4{9+}Zvl7QxiF163Z1e_f7+b<@^sGk#)oH4;jK5EnXzgr#>&mhU z=+#ej%^Lu{7Y^2KP}&iQ=849x`b^Qgn-uMjQ<+y#aHOq&C>`G0#c5p{Mi`{>DC1B1u=l=J04GX%lQV*OH{h zup2xwN$Q9_w)CSv#)BnPNM{4xjuIu0YDr^Rg6JNBjMub%109^x)>nri+kme(L zB=dJYzK>%okDVsGrMu7?PD1=VuWu&^^+`_<>eI*mRG~gSl$4oLpY&7#X9TE^=TS&( zZSQmSy_8Ve=jSS|8j$2$X{go6z**6dt{b7~mUb$a-j5-6jruatnRP`%h&p?(3U7`2 zvVoOFuYK8&Vtdu@a*09&^dL&G>;pOxmY>(WfY#lH5p+E7cn?u*pfuJVwIHwKwgZ<) z)6s~@2&!c0M$0$P=gX}*Zf%C03k@)Ps_o{U*~F(eD(BqPn6|o>NHRs63{A$D&@A2D z5^;S4d}=1@fL%2ABNLs9owcCE;fk)qI>@x#TE06{R@0P?emN@hrT9ZB8Ue)eE1;u) zN3;VdMb%4VT>&aIZ7Q^~am^u>UL4TV$QM#-8PPn4Mtl1l&^WAgvevG;6Z;;dW}}gQ ztqAGHFNqd|mZo>HXMY_Cr!rWl-*PCfC9iDYSG7BA?dEphb@fd~e|hGi=E0(2+33=5 zly>A+MJ-`{B;WMU75(RBV;RIUP1%f+eyj$6`6icq*WZsFt<(aNKMlw)XZmNX*v++ID+yQ zD%yauLOTea2cr}<^`2WMT2Ni&l8LVGuIOw?mZg@7R-7s*MXwztwWO$EtfDO_A@$|m zs|bs!r|m|hNK(%@O;HCcyXHr%@vd+4V4JvandpLsGH#hDx>W7Pbsh!O*UKQF@^?u- zoay=qeL(kKth6iY3rf>yAFqR_;N^m|Coh*2sa!JAD9j_4b0!*ioJw5z%S0)xoRa$Q zqC$G38qtraxsWcaDF~kQSBm!QgY!?M7Et3>B7*{Yc$LU18vd=~bEKpPkUPPZC zU8HFJt%`Qtujr5Qiu&9psDP^bc9S$@G2z-3uVww0DVhUMpGPZ6>tGKAz4EP;O;U~9 zu@7)19!4x}KOjV{p3|BeFOd=j)Dkn9%NEe%Gw=!@@&$AV>^SRbCfeXjgmg0QIB-8g zdb_;T64FQ270s)uHFGV8pq7wM@ik*d0H2lH2#KRsjIvP&AMHj|$WSMb0(y9=>V~!( z&`d=ASnC2;OC_{%2;B=gR|Tp;<4(hS*A6Yc6HA0cAEPxvo3UO>zD1A7npcWCV@8P` zZ-h~(g%T+`2S{dZS3`Xa4F=*!CH8sq#EutIXZW_V#xH|LaB2ayf>q{rW0a%?h+7;7 zT9T%9S8e|s_3;`|KodOo1#~FJtl^eP{<9b*(xmmJsL6co zM-oV^&nK`x(zkbjn3qB;A^e@<+EqywP=EMqO&#qdoHL#6(5cWr(U*sylY(wPRP0&- zT?3oLno~d@l+)BH&=Scv(9iv}=|(2{{n=d2Y3;Z=ayC&rhZ@|L=TM5K-XSOxO*UFv z&bB$oGo|}~*jlpS@AZ6Vv7TS@H(L7!yG4=ilzkNa-PWoU8_Qn*QEUH7e(j5mR-eDo zMyGb#kN5Hw?b)LgErplHnp3h4%`Miq>;9v5|5e|vD%Q6f{ze<0cGMnaPExdI-%9S$ zmSR1+`Jc2_6lohpk+$)#`mwxN%|ri5&AD^>Jkzx={TThLHdYps)yQIPWTGd$7gSO$ znP_+q^$#Ys7bFrIjao8MgJRs@?Pxa^o3-~lT6J(LUPjV&U7*TUGt#9L5ipKfdCrO(0HSYAHY#gl!Y4b>lQH0PJ zjr+8PKUs);xFLx%>xK@sd`M9Pc;=@#+G`#2+-;TuYM7AzCMo8MIXwgUl2n}g=8mQ{ zC#f1Di^6@sQp)r4<0N*2vp~d}C9?Ph5ObfTg+_~83pQxJy-P#;k)+~s;rk^?I@{V+ z?z7PiQ{?tZHu@xxGoWnr+zPoZmyOQBJy0%-eAv$j8k?{A1{*rLuF?)MRA6Y!TCJrL z`XROaI9p5f`$EyJSZ5^l5i4=sH=25vp=Q&SHW?!*B}zS^{0+8z4UGGSQ#4=d0YwY< zRdjVZML*V3wDe>}iJ4k+8{BG=)>_~cMbMpyxH3x8GvGk9y}rK>l8wH&PBbSQeGhM4 zcHm8`D>`ByjX_N;qi92(rruFnX>%bLE}MxyL4=eM_Mvv7-4FUAv`OfZpqr2?wuJ3Q zE9g}=T8k*G@Z1kJj1f*&5E02BwSZ;~!@qDkbQmJ#+>Zj&cI^EQl-XE7<*P~A0y-bE z;@e)iwAMpp&SaxE7pa8KzEDTC49*CIgFZOTU{pZ-pW1?|4VN|$87r$Cyz6IK0hNVK zJm2w`XK2DpVrdF!j7Qn1&q{5hJ9dC9jcoM7DT!pi^~L#eZe_2q)b*B{F!YCUb%)X3@2l;eYMee|Xr9$~nDw`p zmEFIOmfdM+dvB$^YqS|gD>NCrdxhqE_DV&wjW*V3R~qdnqg`~BmY8X%iJ{?!4mb3k zp_;w4Y#&2;hFTc<)Ovoe(dwS1Wvew)RK{pO8hZ9jO>J)Z7M-EA1Dh%uXS6MbdK+qB z`5rf^Z8CI+p;ry{HuQ&~r8ee^OiM=F$Ye~Wk6XTnE#H-vub$<*%JOxze8*V6uWYnB zo4)+iQ~P_d>DtMr5o9G!wh|v&i6&O!Fe~wijmKCkkv6V=uoBCx#As`yzm+)5O3bzr z!>vRMD^dG;<$i;eXl65@tjT$`N$3zO@vF7=nxQJz+HHo`nIwNSJ?(D1JYmvZXgx15 z{(4)xz0OunGtCuEGabse)Z;DnPeY%Zo_=X1h8TL?&;^E?S$zkXwr@X2+x@e?qFanM z)@W}U?Ng&&+e%A}XrO4E(PkQLq0!zk+SSH=pL$w$ywS!PZIRJlHrl=>gDpne&-klq z{GDL5W=88|w5yEvsL|#dt;l%pX*}08T2rI#Z?tMg+hF|lPifyiHQDbp+6$Ji$Y_f! z-}^@EYx(vy+EB|k&S;}9)7EYME_P(OMbpHlqzN+B%~>YP9cLXf68`D!RdFqfb!U+eX`Hw7Xhr>QpPcz-TLsw#jHe z80`n^<-S(mQPxJ%k=?{ku&nTGfbLQ?a)DZ1kVMMu4Mm2|u=RJN(aIZbj?s49sI?qs=uJbrZqU@p zMq6&Q^9E|_5KC=fv~ET#YqZ8j`{ZWb2mEoRqH=4rzI`(4nIE-Lz1Kr2-D4D$ zg10WTg}5Up=nX?PZqu@-8tP=|TdU=BE3w)m*>}rsc5D-(3uo|t=7X|=WEUf?9fI>g zK^J|c{iuGq?o(plyCZIoNxlP0E2oKNTDD>b_5Q~mr~426&bolE?3G8Cf`bB@0>rzR z0v8ux{tBq161tl$IrXQZ0bL;fvZ~((?lP21shYsX$^GA=Sk``9_oo=}1VI=SN7-uE8w}SIarC$~_94=H909 zh#5zUghDzBH+p#I71E`hkc!qa(Fv1QFx z&EDo{+ZxI)Frbg2VRt%Snyypy2=>JHI@$#fDw&O+Q#P+ded1btCkY5Rjyp|M>P zG;Old`X8mdT#K`JNnLEM%`n6_uqE|1BS}&+gFrmKloY^qbe~`1W~0QPJ~?ZZz5>manVPx>&y3j5fpa zU1_vMm?@$gQ{Sw-}hDI6cXSMV)G~LichF-FoM?a1Sd(>z}hN@fHF-CjJXbGduvRb}@{z^@C zK1h!S+GsuQM=MR2AA`F+u>NVn;_T7m7$cz-97u6 zL!^8j>Pym}h)%x%l!@jq6qy!9ov~tbiK6I8qqR0v-y?j3u`!^%;s}+52sLmYRD|M-9LtVfrpOV4r@E%G?r*6f)Qb%JC zilq?{dr*RAg2ui@K2He#}&i5?Zu;gEsM0QSrorD(w2V((M*33Q0- zE1C%=y`!(6Iznxv5@=g}_EvQd>% zY9pS;T;LJJx1~mVz-Z?px1=895ni|&FMZ2IUwBkVZw(Wk3+Y{tLTWo0{}P8%A?@_K zf!B7tObh6gBSc>csN+&8i!W{8)Yfh|Urjo?~Rbg$7mR#sa77c}2(@Zlt1b)!9XtkRZQ**Zrkt@gq4^-q#Y;(qVv z$tCru9C~!T>(TM(5#KBhDST39S&VYEDb~rYurxfk3h3rDRKwb>QGHqAwK%uzyQT*j zkJ?A=FoHbT}_2fp} zP5>=;AKwAz-Lg~PiEoVr&G}UK_BDPXzk9#?O`R!CunzJaha|0ny*k6Sp|>KEW{dyT z-G%rzLI0GjDM?y_)t+Z}l4`Bg8w+nwR@zd`MoG=W8xhp3NK;1?=23IU%cEFp1?}l6 z+V6<$f}VfJ&#Y)p0hDYd+KwNV!f}8Io--}#j_{lP$O?+|9-yx5#Pw7Y=Q>C za&>XF@U0TDS6p*d={s-bYyk5o@BzNV^_fG@AVY7fxZps z1}7{2itc8I^d3}-Zn#k7_t$(wi{%U47kEsIzetPQC@EF$Zt-2Pn7_D0ObcmGo~6E# z#ahF66R@YFK?`Xuq$oYle_0ULcX+-$`nVU=L-z)ECUoU&Yw@d3Y@gT6b`IqrMe%8_ zODnqeda?I`c`djz294kz<;vhyuWRs{M{9|G&?c@AzGF-Eq&bexJWGsLPz%4059y1G zwM0YYU~LMh=^xs+UTw7O8CNK(e}mS1?uAnJ|4q;T-M(Q>_**^7Mnk+OlZ{TZaVxNK zJ9vK`nf0v{om^4Tt_F$*Ojq)k7&&#|tB zls#PZ58orMhHf~X)u)clH9wE?_Mer3hAeF1G>k} z?wIy8ZlW?R6P*nYN@C$RZPTcD4@0pGzQW2bbL-=e)kf%dpGd)3hoqJrAmb6zk~i=r z=U>|W5Eh-k*~9l+KfxPuJvtO~aI(wS&rU)vM%n2ubvxd-keYY<{Rh_14Wesen`Bh^ z&avd-UAml~%re=*N*`5Az@WmYei z)s9DWWcK7apeGQo<9U>#`<|B`rRZ9$raXUfYkZv2HW*jEjH_XFBwt8pL^_jW{*;55 ztAJt-@`wIae)yVlk2XSj1$?laLn|9=4t5w=w|EZ`lD3AMyfz-yMoG`{z6!KXYT}tlf*nzJ&B} zXGLmrLTZ1x()3G0d4q&G2ak zJ{xuOD7Ot>&!z0qGj*=2*Amj5W0V&6Bj!Ht5p%le-{MqjPT1Fl3DO=VoUHh(!G!r6 z3Hq+5%Ib@w;hVYER&|!wSL91-e#;`Xulr?WiszHJUPOM}4{k&9Ei5xaTW!j%BZYCteHqT6!MR;j>g~V^D(Qjw11o zocxs2T$*ZjVA2TO{N)n4=#{&5o}Yz%h46AN?&%8}gj>qI{)TkL@2Zm(`slpWew3rC zos{-1&XYy!npwVmnrYdRG-B3M+P7D*mPy%(kUgVp)ETh?<^}H+Jgg`mkp!WgX{kN2 z?-APidlh|spQ6>?dP~pQ%7-@Ja_!YNSScA_wV1iy5}#16bMjN^{@s_z3+VdK0{YBJ z@}$wwCdYxkmk|#UR5b-xPy7mP0IZh;`W?g#%IvIYQ=q|5T ze5xQXV#xVI%-!rR129NA>u{m)sGf_zrnz#WwP{+%!SS7#x3s*xnYAtbVjj&=1FC|Ix@yW_*qtc3E z{$lPIVm+5y_QT1%phH8of4rIsZ87%t{IzlXZB;An|>>?KBtG6U%_p4D2r@ zbzjscC?2;@ZQKs=<5tpW1vKO(-J4E6TIOm%)f)-QMBn%wS|&ir^W&iK% zP+a04KK6yTc)SN6%P-cyfU5buT0knblJbS_%^#LaNFU(*LnIWp#$F45r;hLIpmmHg z(dp0^`D&lvQ{-8ZqKR1FBwxj9Ituap<(Ersx!=KGT zwVkmH;{M{THJbtYqTyd#+wJ(DzeFSo12 zk3!@`XgsF_Xiq?KiH_L2i1m38>!9S@ZYa*jWlOuVI=Arl9Xv}Zao5YLo$Zz>ZBL#> zYWt%Wcw~O}nTfQ%Ocb{kuMlx9u{2_ODu4bm;<(TN%snmpwo@^5TbrUyAM(m zbPf6;i1)vO#(UeDq|)B<l}Nkv5!(GqhY5%5FZNb`O{B0#)f5VU73D4^Z& zd_~9Gn>}Ey6WTA}RLZ^sP6Z7Gr-BAR;*1ic{v_T+#fnoI9N;x#c!!Me+L&qB>$V!K z{78J70xOI21s^Xdphklwa*~^RDD04&jCMDq?H163o5UN&S^j5&VC5}h9mnf*uNLp$ zQZ!|vSm2^)Gu9*V6oz=KjJJlc(y@I`(Nza2YF$;)Q%4KJdpC%JaoJ4t5M&}~o%c&J z(cQ==v?hxMg>FuB&A17ToeiU+XaTGv=PQb)`#nifG~3X9J{5Ba9&$BEx6r)-Tj1oZ zG`uK<9TnFSknX|aeM*WB!pg+ErtmLh#64RLDR<>a@4;*Y4hWB>4*elJ9hj3w(5&+$6_I z6(Zn#qJx(YEoPn*1F*S3hpRn^`>Q+p_}nE$yxSK0%(8C?4pLOJ4ETXpkfQw!O~9!y z-|UJlbv8<0En}38qCSdl_bAR6y4Mj{x`<_9*DFZ5k~1oa^=Tv;elh$Ao|pLlH&`i| ztGr*8NV!TkMP=vfOH*siYrYlnPHv;Vz3f(>e(x>%(mwj>T;Tw(dm_ejitDegOes17 z1*PXx?pBm7tuv)b8J#J=c&m(8rMzX$M87~w*q&yhvfhqoqLoe50_)rg=uz0FGu%km zLCs>Hc^@E%_W^>+9j!=xICwJNGmm}cl&!1(iu-Lg_q*HNUw}5mGHBm$Hw6|`Xro~< z1@(c&WQ1P+f70{6+u#2`@b~Z9-4v;A@9P;y{ruRu?};c$LenPre_c z6n*W-C`IS_F~Z52AEOjC^kbBwk#~!g&yA9N1>V^52Xrpo&^nn?aVkCEW|Ef z^6kPI8l!UbKqo0%j{fxiX*pWu{ZpKJ+gWtIJ$Ba6XRNi{OMEG2=t_7fd^ZLE#b>DV zQ`nC?T9YRg#bXrj-*jXGi~q^(j;!NeSHE~~A5crbXNq?$@o44di&wf{{!ATbfj8-B z74*~5x@VB0Z-yv(5E7TMY-lB_Sc$$>^h+*|fQ!cRnTVh}ddi!H(hreUtckHjig#`4 zG3vkkck9cY$+|a9(QvOhc*}O2=s`#?{Yvf|#gJZZ9#9v^K6H@;@l|*)+1=6V+1?)^_CT5iBk%Z8lNPIFEDz!BHqz^pW!Z*(2Izk zi%d(h@-bKJLG^Mv)DmOV2M90No-T7CMZIxm&F!XWiE*Iz9yc#AdxWb6hOV`hq&GBM zZf)pT#+sO-cHWCDN%pyGRBXA}Hxv2o&2k0w5aFx{(!?vs-i8Hc!*J&1ZCHxlnxvM2 z50J=%LMcn9ro@sgriFKfH;n8z|@{gX8ywlBx-&|4dvPvWexMT+z3TusqUenm`C zDOd)P#)uY8)J*wU2bQ>V+w&Ak-8hlq&S#Bq^we=X$1@dNy?hi?t{P0RxG7+vqQ zcupzJcP#v8DRJo$itewWD3-?K-kQO(dK6Os5dT)->f3XNQF5xD6vpEwc1?CCacgRo z@lOxFjWpe39>q-4mvg-@RiE}*A~v=@mBvnq^)yL(R*8Rp_A@>~YAq7>3T;5K6&Pak zvQufb7FFRbiQRY~Glfy^3_Tb5WbXI1T|x%=gf{nRMf*T%Vg*LRmK66q>f6a#kwp@) z^PeoEnzR!(d_m#MCg}>a%Q}>#OTnL@YS{Y;T7h;M#dae_^`K#VOB6m1bVxYZ2kW$; ztw$+(&^#kOP0K_o$xQU{Sz`4vQ73O>GtqR!>P13B7ptrWm<1kV7I^T7n!2a`%SP{b z?;#uA3a*%Y{6kqS?Z=FHijs!Z-^fJjZy?SJ?U$abFN!zV^EBT6+(l}U+7v0;48KWy zvr`~7Mj^cgZ-i?J=?8B?@I4bEhU^c8^ey7gg4oj+#H-pZZZ4=6r(9%b7-*TOKPgvB zAba8OK;O$uQ~*z3Xh&Fo3(>mJM(?9&H?&%4%dJE|D^VG}l+<(fRn)>;TfB{CB@)MK zDjXSK;$17T!b<#UB`&ZMUp}fO-uAkdi59{Gm3F_kRJA^tC>{m%;4{(F&ufWtkdBnC zYUnbo8ba%5=+7sWHvB0?A50gNyAGa(St0t|6SGlJbIe9TGyM4CwaRun2k*yPCaJA( zJCNIrcYH~A4}fDRNjH{aRrD@hk~C_H|1X1O<12I5ycABf*uI^vAm)^XGMyt z-zoPaawB)ofO~EYyNTMee#G~mb1iFZMYo)-ebYM_0d>O7d9DTPJ|bhhcaf9Pzuq}k zea8O}&Xn)eGtmxzzJNXUC;Gqjv3JcYqST^ganB9+U&PO;htpv}b1V*belO+a7<}Cz zed}_X+?h?$xG&_NsZ!L|XiX2+)MF5bM?(ZbrQ zSN9rim(Lf_&wjH&P0PJYrgo*Fg_*YlS1JoK3~0YsB-nsYUcB@+!H{(1B4e@ zA!DhJy=z7ZnhS~Znv$SL4XOW4T@man`uz!1d@dCk^hAAnuVM z?vWsFSM0O4n~Bc174ZwS#Q8GOoP0&s)KXMuUqxrxs5IdNV!jua-SmQK1IrXij;et&v>p+SfFSh?5J3h1=PX5LAVz;8~D~$?zp8(OTK?Kf+dYx zEWf{7%ii_i|E4~kDWYLKQv~r$5%k~Ye($aEyp(nixLDENIbeJ6cl3|j{b!n(i7xj$ zn@n^RygAO7iQe;CjQc8Hi*rZ+-*18CPP5c+UL4Z8zoYU-5Qh4l>ar zCyVXG+UTt#zJ5nMhpjF4u!eRT`rgpbhISjG_F6V+=t4j9;L-Z;I{xmN|K9Uu?51qS zZpvmNy#bqv^ad>K!94vB(8=Af(qWavNwwb#As%~|#)i-E>tJqFvQJ}tKZ6nh4f80Z zs!;3kt`@!f5qmB1-W2~8kM&6GrkOthyX06r`S3VE^Ze|NS{z*KUr2aeeWM7<+E`4_Zi) z=XCBFhI*wb%JZultUT#3z}84sEFDNX%)Wou5&Z!rWpSJScE4sXZ5B zmbw1+o1j+ZCGTD1jH;e`ucZgbi3HBYG3H!0pl9(bXe0Dn&<^Z>1+ByA3*xvBf4?8l zYJ82rU*6-(*2c19iEkZ!PWBt>#VeuK8p>O~+T()b>{PVJq9Kt)~8NW!qTl7_6}J=D>7I z{nKhb08uqgP1C`?Z)tkW`q9ctEb=8%6f9A$W+$}fe^|a_eY+_-#PaQ~t@%zj?gv`F znwIZsL|BBEBaD}4jhFGhY?^K{Sw+6xG@WGk|y{mzCjlV06tEq#uHT@Ti zzsnWAt(vL-QhAVR;sY2%yN&Ui7XIW|&jJc$aw$xRo#UVytQa`fP zJFRS2=z*jzwA52AbqF*bo0`wzYZz8u1Nh3ro1TM5;xy_ZPSpxeZXrm50MMJq=rs%x|_jdrQg&N38u z6wt~KWCU~nB~`f(P1o=p-(vkjCjL@NzX(F?+G^qZdaQo|@qIl(-xzJN(FPr(seKzO z;?++|@D7*Pt-ZIKrVpWOQ!qo*bUidj&`B6eM)(hI&lUdZ*>ez*au8Antm1sjETla6 zor2;L@mF9E2XY%Nx4sdrL>eXiKd0QB;_)qA`dq|cxF6Z*sOkYd2ClMEi@|t#)1gOd zC~f;%K?y3Gk2gncc_6Oy)&DjgRSgGui?L2|58@- zVWd&E8+wlaAvW~=hkC1Im!U#`Djm>3|5bO%{B8Uek$2bH;u1KG+f|;^G!SQ5vgTc6 zsE?uV4Si~8n@6!+veCA;^c71*@QggqNhiO>;410X5%UtuuaLUpE{?pCG36cMK1~mLl#MFCt37(s zQu915O_hzd%+R-n_BHgpp#m#A@$WLyGz6+G18UC(8iXJ#vZXM*?zdz^O*MRw?|Ir-MJRB?VjLJky zPglz@bbt7Js1M&h7;PiI6Op&&T5OV$NzuyB@Dh*9M_1?3dLZ0oe+4&r9g1h!pGRRY z3Q55W-Z#-;p+RXnyvwV_QBg@j#kuG?_1oK z)PFPo!#KDH^G)V?jn0aG*r>X8qVZDJ(B&S*9N=!5=PIOrzKxKY`gTK_?fU_HvsP=? z*^{DCD8XMLrYP$X{?++S)z~k}D!Q_cqV{bR4M{7ihA|T@`55~JkIE>zu#=*R@G&Lz zFnEW8hAdIk(okJPSDY!Q0BL%WG#|EPu55y~oGaszpoKLQjXzP5%D%w#RJ4<|Bt>`o zzNP4N-#0{Iecw{l!uJigKq^XWh#^;1S)F9)mhwu|e`Qb6`|u}OrkUs%Z>8|Q#g|e` zNX@aYm2W7w<6Q`r0q%1x)A;kO{p6$}q!>+xMdA|^8FQXn0d1Nn-_Zy3^(d)1pw?Jj zesZb9Zq=29?;P)T{bendvQtoky_{sCwwP%a0b z4#XUEsjZO8-+kg<@;cl=v9kBMHn^5ULCd|BQ^vOz(l|eExD5%*%BxFm8_x{ae(c#_ z`KG$EYwdls%XT9{7eda}KugeiZ^sin?ZI(gMQmUDvmUEP}CIYFf$ zt6Hv>(yNJ%cj!l)2e5@p(DxqU+zBhYoGzVUNb?1jFP^KoSp@zH9WN}Gh7LVGLVNk3 zA2-Mf-!Zdg2x*H)h;8&$yEX%@iDy~2y4swlu{xjP>iYp-H%RJGtU|Ja4fZIccM62( zkoJ^8?zg_<50lj|MU~2EYq8zk??ydg>k02#V&*e&%ZI%n*iys=&Tza`{90{J!$K{w zWU1&qzALcQH}LhXNb*m7OCjj8;WCpE3mPi^6(R{Y2={3U9+Fyc@5b|o9u1Vag;UkN za@7H+TEc0+2y`zUBa@f?8dxv=@xl(P%k$@*xAZ3;{Lq zRsjE^jPrfz@1@wQ30LbONm<|OTMXsbi!>JW+*gX;>n{C3+{e>o@6sHy&-F@=+eE~) zZ1m(yxRK!y`%;3+gn}|r=3=d{!lNo79!us*eDqc*i?76A!5t-scyAzxZ)Y)*yDp4y z4!cFa3TTgclyS7PfU+)MSIh;rLkYURpX_GivI(~nk@~cagnNmjcpG@twlz*dQC~^uZde9E8zw33 z8rXKBy){|UkXN<78_=$#?nI9So&CDfDuEZFosJ!vpt)Ad?6j6heWt0~ep2*qc}1U8 zSG1s}qTg^@!1d+!GTT?=l8t^ujFBajjUF1Kv;gx`XziDfM_&(CRBMu=MwWV^)wdd> zDrM_JhXn1$UQ*Cda3yFRxDqs|iK6W|kr3KN=PA0go1#t^E5ZS<&v(y0g5X(Vw8S37 zBh7IJt`Fy-@EPRHKh8G`|9K!9_BL*9NZGgq$4~p9th_kE^9ZP!&R_nfP-q+j5ERdI zju{DU>r=9O#~Ju+MP;!X@QywcP0EvYv(a4m?aVfyCB8{M)=^c3F|PEm9Z?rKQB zyq!Wz5L;WOC0tyE^*&**px}KPjIX3F|5|KOLmRfzbrtSytT2fbGrzB`2c5RHL=X_r(8%@CFvN5jb%})s&%1u23 z_1)`I7k)$@&Dp5vxDATF-6kmCW?rszKf}7uT9S>XVbu`SAH5V*`BbGn(@pbjUa9CN z%h$29<~tATjFdg_Y6BB(h(d{Rq4b(mq6LHfjJbQqUFM$)hJ=frSI^`NuBb-z}lz7LZC@ zq_!Tl(z+!H8{KeK$U;lyMzFhpjkhWug|L*d|qaT;pfmK)Xox4X_e0__rTSdcq8G6&!t+JC;|91L$ zl#M<$G}q8u8O`^+p>fa`sk!}RP3>XmWJ8zZ{u<{C>1)U;4<}n8>A1m0c=_Q4JggP` z;!`|=DSELv{?!UShi@=aeUMn6`K(Q5KwMVi7KmQh%BdQG$O58KQr|v?SWC))t9aIi z^s{eQ5ZkagH4{}_qpSFTgDc$moMRU5PVDc&OPZRXO<89q;oh~#x$9DCHyiE7nkTdh zW-SWMS`3+_C5C#tk&RyKp|p;M=6V$W<8nZs!aj4&cvZnX!HMt`gx1d6;%xN6D>Bcs z(Mpf-5(g|2Ya-r9^089bd%wF2X%P0I>^s7j3Ur02fwH2z*J4*GD2`PfQ9{`obA%W8 zX0Suzp|oSYLc7`M33$ySmwE3idh)|UQb}FWUQuBuMKvwomF1N-$IzXY+RADfYiO#W>pN=MORU5#pDCx! zZS=Q%EHu~>>{pqqkScD)w>(bUw)+~?qbEjH| z`dZTPig1Gt`9dmA3yab4o)-9%HYU9)^&vv%Yl+KZ-NDK!`O5pa3ZkZ!RbK|0cCIT@ zu5R)*=k~JS*-`>`FyM>shHk|Ff>A)PBUPlqn#ikFNc+Nv3S$`K560)5)(abVDMV2LT=HXx%A~QV#Jui`)jj>Bq?c)8bwt{#Q|E5B5TygMjun z9(Y$5qc2{SmWa8M(Mr2^mse6*#rd|Z(>1yE{gRrA#x0a}P~#cE3j{nwQY{eJ?w$;yeDQLjOX_)>M6&a2jIBk1>tg6{)@TvBq9U-cHob zwW0a&Pe_Q2UF>N3jwZa5o*LuPTI5}l%UwTMPlZ4Be7QBum&Nj8D&B}{2^Dr6uxBZ^ z6Zrc}*5{&VOC^zRnkrV7)HDq{LikHla=X%=F|?zayn>RZ-wplXQ8v2bNYT?Y^#|hC zaDEB@luj-wBqlu(6h?jvbn`yVy$fGSuA47FpRQR<@3nooFSVFccYDZfINu zZ7pFvs$;1sYwZ+k?RraXXQ>xhY6nX_bBWgcxF3%+tth8b+iWNgYnk--XhRF3B|`fe zvrN$O&~`y*tkTq(k*0RTyW*1i2;L14l(q4_+)~FH&kq=^g{GqtwR;PT~%v7{RllVNh}EHT9>a1 z_Ji`mY2U_yvlg-YyesHSTjbE^X9O3e9g1zTColmpT#%M>o0sM&#JE?uLnQsz_P1M(5vr)qQ zp|0j5rHoe3JgC>tkoxk8&$74;+z4oe8+oor`y*~P#i0T9aG%DZX|U}gN&X)@(HD&v zqUQ%Gr)NRpQXgAU8FO7-@|}GaTEEhA=9*8j{4PFNYx&sXm}Sch9-926Gyxx$Gx~lxd?Vf%NsVPR9QAnTQOpa^D`?1hno>8zUq1afQdVe7(8#UjgI`n^IRra(cxVbk&G%=*r zUhnZbaa%c62q=E(n{BM@P4&z_B(*uAi{gkhT4P?y?D-ILUr;?n5=1VF5;o%#F6PU# zEJ14d6Qrv_!mSWILlg9Qoq*nR`MMaIdS0HJzX`el-X`CBNKorLWTqr&s3Bb|a@(zX zyv!~9lb+T0$nmnKe*@DOSi(ES zg9>TKK)G#Gl2?$hvm*SH=qciFr0FI|QoOHx_#lER{H{LSdEO7h{o(^PHDTy?tiMvC z$LpF}9%pSr%QN&1MnPy#exv9%Jb>U^gPa95YOS=-4K>+UX>TD`D*2`vr*Bxkbyyc9 zwN`(v@8SEj#AjzJde6`x?-QnJ?$cW0DC^M=PiTpq*J|prDT+42R@#dbw zO2Rfrbc1O)0ra%A`|4Nt+W*ZrjRRe(kJ`4Ev4Gz06Zpizb%eotvnzoe+b_gc$x z%hv%brpyI{T=90NUwtfLFLdRSrH46y33{Z{7An5cot(W z`>k<6QsP}`2}>=ci!hcdHvWxs>9M|1I25Azq& zG{mz7l{-khdfbYrp+4qF?{~%=NJOqQI7m^m!$i)RXy7u@KisW2UCI`?_eJ>xHKe0T zDSw*~yAe*mgonqdeKZy{_AJ{+^9((URH41>5&oaaB)$|YgzV&W?Z!7S@bvcwSNK00 zZ+B7RM~Sn-zh9z}SzXoeKFD)8;dLbj+$mo-AR_#*?qVu^s1k~6Ru3Sg4{evf^WHqF zN+*+Vp6cbk`K%lCUL&3E4z z&9~HM@{LyFx$8AGj&5y$_a(Z!=|HVz_(6&SL(>eEGxVIHl%Wp{t+e{CH(F@ubwl4; zzWa>U4t|bsRpxBvZ#-tB&@OvaQ$NItC^Y^qK@fkdAc((T@H9jGb%W3zF&cjlAvFFT zf)UPd!2#Q$G?moui`MSmYq=MeTI$odXy|HYe=;;r|6gfIJX#HK2TeH5J4De0qiw06 zw4zYaJfpQR+9gK&+#+awt(LBquZ7VnT5F@N?5UQowx#wpT4-gzwh|9mzTuXyj-dms zL{~#itVBCQH&}hcE#Fj2{l$7T#qzypsGrXlQb|!dcQ5=&9+^2~M1J^w0d|~sCrO&| zEY1#)nxv|$B?^Wweekv%@9uK?^n&95=O$k{MVA&{blDW{{SXsnI>)2 zd!ML=>v^a00o4X7M^*OMSl=3)Tm7}fu1l1^tu172#4RW6aq6NhZc$^d)_3)FN8C}` z;QMP_OE!87qrfY6A-(pw>S?Q|be_L&{>I@(JI>HFOFhhd)`sRCF0;`;712hSDTB^b z8*zr!LWW+j`nDNrXQ;PF+2|0&y?wNzm(-Vy*5OX2&`vj7(%fuG2cvZ{+ObAE!Dt=) z>YSztK8l@qwWsMMq{BR#<6m z6MPUsTfWtr(^kvEidv%KEX~(rh|PE!ldK{gswPGeAwj@1%Z z9VaLoHMP|1{2nY#JKJc!@4G1a;zdOR3?;8p+8>rLij=nZHKqDc)v(_ds3e!0oFBw2 z6A5*;@hEHP13xm^=rEj8h<3hkmzH=EUZj*AK2_0d_|HN+{2E0!PZpGoZn#uASYdPZ zkG@*=RU5(TKj>&BY{hQkC7Gt)rsFj~)i%z*Q_*H`ZPPRnkwxLLi^oN7P~B=RW`KSY(!HlTgOn=bfbdp{CgVhXruK`Yt8Q)&vzKl+l=Q! zJg2w?_ll0f2XJwPt7EZ(DaFK2{YHYeztCi-fVyKj%E$3+JZ-%yel#L#T_b+1} zm_68jqK?c6vp$y_8fkW@k4K?+#lOO0XTx{4LrNQZ1r}XsgJB&7ZN>T_XdAo-K?{3oWVR$; z_#eM{6$dz|_hvH9!+hhB38=eIEy;UG)0Inf%=;UP zSJRK+J%}d8-s>iOdn2?v3=RBAX>nX&rmZR6t>*O@UoMN+{9vW#Io~!u=j7P1M8H2k zSEJoJM!2EdRrk|Fx+#ixUV5KPZs4%D6w-}|x$(X`q!zcU5AurNp%q0J!8el`uxOFa zl=`c*ANklLN-uYrMW0qn^Ns1HXs6k*E#GM0KE^uJ#Q8Lx3-EvO4xOLLqq7}4>F_*i z4U~;0!*jz_2O5bpNI{pP7C}dDRn!o-yoEOXb3q{ugxy%|0&L!5?;r##K_Y@s_vik;bG$ z`VHK(-s8JPubm0f(`%eQ*r>ACEZp~Pmq#64Ega95b~&CcsFQCum;0FKJgnHVi#`sw zy~Ojq!%G7vSY4!-Y5K-2R~bX|3_W8jaVJCfdX&50(wjADS^%#~bmKSN`4m*Xjq1y3 z<}IzOsI-RWRegeQsHDWXtrdN1v`dV(pViXdYANWfCEm5xt}U$`yliuo%x1q~GxQom zuUjv7-J<=t!O$qH<#3bGSS#Da&=pq8S}S{@p{Z8O8&=DcR`xtY)2)`RR`x1GmAsdm zrq(9En%46UCZSzkLO9W1A~8YSq{oEevnaC+&5bWm+Ozpe`|x$8m0qam-s{vq z_%%;!t~Nqf@n!dFzUw2crOI+eoknWv%o~)}!SbyhsI*@UbvM~BPH5^9ll^9seP7!V zti-x1R%-h{)N*|Y?^hg2JZYh|9<4Q3nyRSoL`8WQYb}rACW4fB z5;jrL*zdKLy6|L#_9uESXol?}J~&XzE-}A&o%L-oV%Jil(-cLcS_{HExQ}XNyE!-z zOIQx*d}mMV!g~;#7^jx0tF);od!ft6k>g7p(#SEs9>5C0UJy=*e2+q!@4eiRHbC2X z<;0Bue7Pa9_4ghVO$_M??3jht17(G)Z<`11#z&fZ-L3sN1Q7@6TWW{OrM{(h!0IQd z!%tAO`U^z~%l8DlX32M^(MDRn4o0iGP4k6DTf0hW`y1_bqYW@x=sATCV$$tjQzh9v zsc0f*t;pqpXVgP!jnVfKg6|_I15Mz`NSwM6?o9BFsF3Oa3GFw0kH{$3>nnxzEjxqr zEkzp=CCNWY+Q3wNTKmyrmr8P%>10!!?~8=49j<8Y!-_f%Q*=N_MW0~Rl@bdvlNn{B z>bUX2bF~;(I3wU5;chZC_6q0_ZtSDyeI2U)aNzU`EAfMZuqU3ZHLtYTLl^TCUw&Wv z(avm6K4L+_%S#irZ?kMRRyj*kJDDDE%tK1>*U*AEO5$nIY(a0?8g+o#i1%$}y4leE zmao9pvWb@3($E~s_rB#@V5t`yIv)`<;b0Z^bb{izZR-n#mg{-!dAm1F+49<>5c%tyqKhpm8HnbS~K}r4DZ2Q_Z%5wv2_dP`4Bwu&C-??dw)^`{D z14%85@2mx-E#LY^O8e8$wwhXBXgoh?9?B!OO1^EYWM{uhrs*@&><8_PWt^p!Iah0* zY&^eqzjE-U@%*QcET-`lqNe_AT)ksxjiG~$(^1A>Gi!H*asRyW{El%t%s6H1CKCF_ z*Amh%v+$*rTR${nE$7p+`%GhX7IbAFSp#xU>^N1do~GiTxUh>Bt5OB2a-U06@elES z4}pJr-dF5yNwm=Ng_ckD*m6?ys(ED3S)6OM#kuCcry5cH8b!BG76c3I=PzEK!)ddu zu;tcjD&IkqoquC^X_9&rb_s&I!k$VDej?`YKqs{;&7$+pU-I3DH6?PXlYxdi)EJg< zltW2a+c6GZg?8@+f`|N}j?DCG%5$FQIZY>7Wb9ZUZ%R{-mo?vq77t6>ex~aYs#l?* zgq3J%=mbL(z4wKG;JkCsz2vjDmu!YrV}j%U>I<|VJkru59ckPqJzv+*7m)7}S0auE zH1(@rNL`Lp*`EaNMfRJGc3`M9)tp?7*ic<1{+%H%@u+KU*r!@^2K)&JE9`z^5&WhZ z$cHbw50zRFYXLgXt%!$}lUac;Hw^Ku0~z0?h&}K;3aPZ$moyFeNk{OKsftdVq$uCe z$MBG44jyl`BO|39ZnRQHOZL;$d#+cs{$NFeTPrGMEAjJ2yTD3(XC)3aYcbyP9cp%? zTScia8@)Y7BP>hHXd92MP_*eCMaOkkUF&?J($2RMEsfU7XoIZ89P3-+CM|pFP(`!v zR@BGxy*Ef{zYkF~&QkwjsYhEaMV9)krKT@Yo zNDnN)EpLa;pR2aBH|BzHFrprAIJ?w?VF{Nwq<5Zj?_k7jv^`gS>No~8q<1iKeOqk<|M2G9$h~{1ZQ!5V;9bjoOlMWlG@@jhzSaV_X2*w!;X8d1 zz3k(UI9X9gPs@$RHkqb-m)~*2UUVZqHyG^O$VSgW2c^D~14TV=(OAI+hWKSS&WHOE zb0in(HZccpFpSSQOpl%jbDZm zRLjtpc6z-DiYBR_*(t!b#X`#+qsxZtc=VpHqrhLli)HO;saGMDUw*~AAHKiwJrCTC z@U+0){rK5QH>TCYZdN?xR#)pO&+%5GuBD!XR4$uqJL{rd9<7l6(NuM4@8hc_f}9eS zu-g{RiTieCLM4V4s z!_D5$mb&^(;nqCvrL$pX_}zOxLYV3nM)k(bY;$;<*au4qT60Z*aVw$}5!nNS# zNUY9`a^J$-b7bH@^y2?SuO-tnDeP&{)xG>}F++k2x)V3M%#O z?GzL@v7mKwZuOc+_=@nKXrjDse2Zz~wT9x6QC{#O2*#XW%EZp(-#k^7Z}5575m1P| zkl5V>R`EK2vED0SLHINhZ|cCR)NoqDK9bCUb1_qDJ6g=uKPyq!<%>)3TMRNA+re+D z?^2gTuNphF)a!jnqef#*0WG9E&|g7QjTZZB-EYKezb+rYXd^zu@9;cYI2yk+DrF}i zpQKjBZ30=(StA6+e%%8&$5V9WrH3rjQ6B=NOJL&T(`cL!x9#kyI-A z5)MhFQYk`(5JgeS(C>Y(d#$y1PS`)_hw%AftlBJ!_yO6sklsg zFbw@9v!5{M=gSSR=e)pPmJ0*8t zuV-3sW9&e)0UK}FZo>u{b}vecsMH(=g{plbZE!(Iz%ft{OeyEbm+LzsAJ+CujDXGQ*&F~k&Kl<>Yp(` zeNfMfCl1n~5h;4^JrZk69EXQe;80bJ8XQW*&H#rt?bg5ML(j$RlnEXDM*lh+eJB6= zF`lhBwDot*M)_Lz_Gk64SLSJ!YJR=XX!JxaW-H(PpsjpSMzbHW$H%{BozTBtc|x-% zO6t%!)O(V%@ofaIe>KISOg>j%Q&j28y0~jsa0tB~#y1{?g4zF~fqLgG7v`9J>fmit ziw~d#xu@A+LgVIW))Oh>UkjN~@0q%7y`-LSBPL$FpR=Ez2qHqqi(XL0i&>+Hd&A zz=0^4T4+_Bk~=w;3f+(AH)dnH=+Lc6I`r`KI%FwUQ#=kUk0RchqCc!~s12-eC>d5b zR2mu_8VM^L8m4~5ssY9io<9endY#eJz%t(OMSA(!G#Ect;@Ol-`hoQ<7w!{-zAgy; zTV7FYbbayApYjQuM-k!`jOPp^E8IKoQES(UB3S9AU-^tb{mLQw zl|$M;d}+w+?F=+~e70HBf9yd$RxGZmL$%FX{n)!S`@!rg#LeE*CBupt*2Kj2$|qX) zx(W3$zkX;~QN_aRQvbGZ)k>|FbxLm8NVnuW7V35$HN9vTtUGcqa68uAIFztihbkJ4 z`i9+aLg(LPxtbygckl51-jybB--I(F*i#~VI3t3!0uIeNrk{25w9u@4eH}`|ivJK< z*M31SMep|ED-5c?iikTf1ErgxBH~B%NE|AJI5<=a^A`?H!l?uHWqdE8*u)R?H#_Nm zvr}kq5zz+g{2UsE83l*>nRLAI6lO*;ww-6S&r{(6rK4T)fGkdVyX4{~RNaJHm{3s@ zs$xP-RS3JeRdmX`Vuh4*D4z)pG@%kEv@Su*6(6H>w=vSex~qa;O^$z$6(IgKZpOEH zhOIXm^c^C4t1&5gFj7q#Ny)uUC~J#mvrK5{GR=CMP<2&bBBCZnHF}1?GxmR3BaWfm z*wg=Wb>sRFT}!h2>sn%C-pTdFLWsXdKgraW#?R>-cToB)mw8Q>+uXuBG`X+#ekV$X zQ@-?=*3~r!y=Y&p@iTs9xu;C|)-<77s@3A2MN<=3VD?WQ)D-Pq_Qe)0(Pk*uszp9t zB*f!rJ=G#-mI(2r4E>%Y#5fr`-d%`f89LThv(Fm}L0>Pg7CG$T)?FDI@U#$fW$4Ki z9eM|2{CvsQJ)%Q<>j|+?vQK&ou~dfI`dXukkt^Rv$My~^zbNJI9IJgvi3+h=vMn93 zjxIwpOKGn@tgB-iG)0G6!z=c={Alg-;t4trKAEb2U5m7Bl=iR?DDS(j7Wq0u|C;L| zomUSdUe3Qs#;fYagTdGdc}rSZHcnfqV62>s<2Dlc>xjkLms`6Dv0bv8@GIxq+ZY!( z1fu12 ztUCi%SodLA;o9^ta+2#`{xUkf%Tbn`qE+yjy}!xUp>2qR(^kpTaoFv(_I`)FwUXxJLz9{qGY&+okYoSY}JeEU+0-t;kVPju0WgNn$s1jWXmTk?ZFk~ zuF6T&91cBmyVl+HtoGnx6UT(9+TL4}b)HU!W%lJ86Ym;h`Dx?}dr;n#`Rh@WFS+pj zOIZr1P_w_0q05+!aI3voSI05a(f&QzMyK~B*yDK5Cu>h%g9luyE76kq*I`RETV7AI zo{;1Eav7z{ZNDE{8JE^d#KE~S0am!o%aznEK8D<2|5_q-1>sHa>f7nas+ zI$~ohMRIH12@UkGkD`3pm-VP?+^ZCX&sHgvOh{_dk60p;<+Oj7(GRh18uEqH(F0}4{w+soacpnH9(y|3#F4wA_U~vv zT^`l&>(A2XMrE|_e3Zg(l6`=bvz0Hpa45}$j>12V?elbZLwRt#EntO1mob)6FONI0`}4fr7A~HY$QN7W zH*7?j{*~U_reCq5G#9%Mh!IQ|vu}w#hSzX3qjczUeI4qFzK-R{XAa#5pE(p+sYAD+Eik(S zdBCA_t#oK8`X**8*6Pp!d@aW>d;8z%i-3VtuClTG4yb3`Dv5haVCdyP13*4Ev-XOD0|_2rc$_9=5wP3Iz*+# z?AFyfMCHb8#6}$&x><)Zx9SjmA&})R8jUARh)SA&{lKsYJS7(PYWDL&G?reKhGh;V z8RnW$Arq=;LYJ0mjd$|u&~d~1zM@&C(U@d@UG$v(^$iosZGJ6hLQ72OZ4+u{Lj6qW zQ)A_46Y71Fj^isM_iKI4ni;Q-KBQSc!yY%GLCAZ~m-2>9o zLALRrqKS93iT4xKY}RdT}Wmy32$vt<%584Es*8M9~uG9{77P6R;Le>o2xkb#9M1@D3$biRmp#Ti*Id zyA-(V6uT%K(r3%U8k!}FT-Efh`Esle@jK8%3+m9wuXWG=@+lrGqT>0}d|!A}?7YCE zMpWF1H)x$zbf?MlN3nyA5Wdj!tB~LJv_%4TQLds5+hRN32#TzsP|Kybb6v7)I2A@W z$f3YLh=_+|iXP0*Yeu$s4LbvL1|0YQ;oVIdacr@uq7Eg_VgGFL>2o??O1_{&N80h4 zmMsSN(4i?f&+p3E(wAX(MTRaxE}smQpJa&wGSsG|C3+!*T*MiA9veS6%jr!NA7U++ z7|x6p;~V{PUln#y__X>03aH8C+z5;z9fpPYMzrQ68GU-$ue#KW4SNC#8)e%+};*k=Ko{MI9Y_eS|Zac zuwXYwhV*$`?hoi|54fusZL+uQ57sQ#p{FKusFb*Xy73I!OewJs=PfAIE_tZSb*)|U zki0rH&aknD%{465uqB3N7`Dc+Wrn?J*eizZFl?t``wjcluz&NfbaCzJ=Vf&0-+ZoW zP-+=E8$-}34m zBiGHy{kQqolh`e&uN$Z2xg@mI)U+=L;r0)w=?!~-K%v+7<<1Od;e{D^f2}c z8G93ry}ymU|F+x)8+)aVz1hZI?#|lh|F(R`7<*NXz2(NHhU*;Kmt&F{QjlF8d-hW%Ko;UWo7<+q+y@tvje=WTKdaMA+Z}9y8AtC-}@*pDK zEUd>jeLp|H*G6McyW~olLY!MkAs_$e(B>^1!mjN=-0QrGM#)_(_3Vq-V3Y^WWMOx% zz*_pX!4MwHa9=n^SZe1u2Nhx6L=hXyd%fYWkN+|oCq<=|e0V#ZL${mIs9}~EgZp3IT#rQT++M{o6(YFineKiwDeOWFKQ<(b2|9z?{t-aPkdmt6lo9eTrr9#{LdiDEa-5b!;z z_kP85ADmM)Gu8LhOf@Rjz0P$gYQEJN74)^-4RVI3zY2?cwlRC9FFx{@Sm_IDiQ2@MR%s z`6KM9zktyH9eq>yxsmReUWJt7`-s~(gmbxb@kE7Q(lD}7T%IAn;3V=t$*3GMi;6_V*ZboW;xAdGCwu{N9y0mFm;_>(VlT*L5Of&$Bbl5^)~U!tY_};=1cWTtHDozzco)djGbH;=U5%h#^_fng%k^ zkY7_VaU(Q&S*oLBX+X$lp)KMoe73~34aztCdH5~u(J{* z)sTX)Lj;p#{88z&g`Eu`a}4bMe$e)HFR}8rm{yYE@k;4PY zq`(dlJf117&taz{NG?M@Lb^x>(_kgD0CswVU`s-g3$Q~3kI9PEMg9x|!O)_}bIJ~0 z2T|luw28Cys$G3q@f`LVTTAFX_VG`NLLmJwrUhf zK<2#+($kR7k~127V>;0%jX|&`cI6 zlAiGFS&Ta%3nTjzNGekhDGIX4$lOs1J4hfH#u8bENDYt`My63|w)~1BnF&n?Mnp5n ztT!YTX-@*d>wx&9I<^CE^7R0D+t{gf0KFr~yODZ{92b${Aauf(w9*rvfSvImJ0c^M z43TLdyNyg8#GV22VPvh6A@Ur^Cq`xy<}E8hK8tKtGH-#r4Dz{>$xQeGdAI@OKxB`S zA@VlJS4L(*2fY0a^0gs#t%&#lS}{bC4rO=Hd{xd@NF1$q*sSKPZ{>gqaI0 zaR}r@WTcWIavJ1}k$E2E63Ds8HYG!(!0Tw;Ca%HQAE^d{%{iHenF-0Wv7ZOx8L|QI z2~hp<4Vezo7&37~{54o90m)+s?GqBY$&fOTNdn1h$UBhf3396;dlV^TC6(g**@B!O z44GoqK}Bl!!QFEpcUY}TlT5nUiMMsefh1aKl4OcT=+Y*Gl(a6FA(_-dm9JsH5Fxy< zgXg{*2>wm=Cut?@z?V{1cPW!1?nV4*Y^%3o_MFv~1_IW4Mn+l1*}Ql_@r1cWo<3 z4GYKl@s}zdK{t%#i<(xFoJysNpJ0d5UenqnCr&#>xAIugl;nUUDPq}Bj=h#ur!m<{ z7Z0KpRL2%@EtT_=P0rV{+DVxV@2AfqVh3WcWlc~ds|?;y_lQhUWCh3vQf9U!nO=`a zEU_P?wv{1CP^Pu5#ge2KI)zfE*lSy_Ny4#zA+>gev<`#ZW1S6=lOT1i=1nLSZ22rm zJ*!WM{036rN@L=cD~^?2NZ)5|Q)CjlVJd|Ctn*C7$H~|WMXugw6}?|t_R?ly%#||t zOOhh`p+Q`Q<@>B8MP6Nl7P(1?M%E@p-hoVBkS10_Q?ipHc4J?=5Xk-3d`VKp?fEQG z0;H++rXr)z88G>liTCmj+*>1M>}F)=WaL|v`^YG16_q4a^y`MF2`SU6Imu*;pAgq` z$kk?6iXxx>!87IN)*MMrMo5cfnp-O+;XJGXJ1wktLWFX)rFBq}6hY~#2bl+~@hvE> zRGBXF`2p*!Bq>7Y#sgL>Iq?pBZf*6FB=EVlbzYLd=LfCQ4{$29&uy%#k_0}tk^K)+ znr8$CH!9P%hUgp%$au8n7Hz^Zul;x6WAC z@2*IS>5;lyBb8QD+_A9=THUQJZOKl$ICneN)n*(cR+es!`qQeig@Mj zh$<6IaCRJo(K=~M?kCmXvSX8$!K>AvhLo%e*&#K&kwMgb$kVkT) zqQBKe$^?B~e`}B=oU13G)!%xW?Z}j#1$oqZE<`SZ47BK-CwS<6ae{lK!Pb5zqE!*} zNRSz9-JC=+*;G)%euKyzl1wpqIM^yH3AcA&%GB;CwfrAY$MS&;u^MWkYVQ!MHIs<0 zy+f>#is;(=m^CFtsP;Z)T~Ky(I~{6WS46kdp;o?59Q#o8q6Oc;Jlra#$Yw*zE27)- zP^+FIx-Ad29%K?(j8djnFx2X$h;BPWt;dwspgi3354EN!GT|iW>QHO3(&}A?$AY0& zwvs708#8L@;Xy^Z8*)Zz<-5i`z);J3NTw^2eN~7OQfq@Ef3?CnD*QOqI;+SPOuLGp z3m9tssmOPRc%8}4&PYM@y=A4HnM}lIc>lB#$S`Z2B-xQ7i*WCmBwH2HeZnwn9}_b= z4708(qI=rmR_89#XOZ*}=g)9!N_R;jy0;l_Jr^Q%5!d6^W=VENYLtqIMj#`swhxn5 zx>$ks-U8$aYojDw>pFmpvi5{XH;~a*vJE@FKO*Gbu86tB1v{cmrklRUJ+e4QmvUGLUm)BwSw)Kx-s3lryp6)_H~~y!)mIC z?g3_49TeGt=Uf`QXIPIYav5Y1EYGlJOOhgP#bXVPaWkxZk4Vdru_&EoQf7rBy^!-H zGt=6s$fr}eb#U`FiJ4X&Ccf?^W?BUl(Y?e>tAf(fy~Iqb9uw2PW?DlO(e-ea zHC_?jzGhkZ2XX8le}kt4csR@ICCN@d-)NrU&$c#6!fj^_(ly)qBt$lVJY!v!Bt`7P zyoGwvG;7RYvYaaNVOGf`S(2bk)2uWlqsuhS+QY=mJkzXi6q#`smqnU&R?Af6xlNjN zRg!GeZ=_j=ACs}0aVO0>5h4ZfW14kQ63mUCjEHyPbGnrxCD|Dn3YpI&xgbfZm#8K_;s{2)D88N^|V>)&@n~$(SP{jty2Jxgeh^)>n>*dWiist3-%20oiEP4v{t>o2-qJq==H3 zp*;lhhLz1SUL)jBKakDVeo4|reyoNKlBCc$nJ(Fy>Z4Y^ZIua;jUew>wI$(Mx=)_g^No)-}dKt8nA zgvc_GkFBkWP%Bss@~O2aL^gnYW*rNWcR>#1sPkV~dr}1cg8ccyI?2T3&llEpMRe=_ z!pc2KYKhMABnp4QQ; za{*a`1^#x3y@-8@Et?W7YF`Tx8k>sR?sT%lt*M@i)p$E!hyaMS{ z60EZ&*z0DJonQqo(cUCUs`nLkd}u8t(cYrSX^`HqlW6Z!WaTN$YtZ+Wus>2{2gsw4 zDPd&VDw&c-W~h=WX@9A-^w?C&KB7oz)kBuDe^f+|R;BG<6nO_TVd^tW+m{v5qh1+X z%%XIqdRwr*N;8Ktw$DT~$cHzN;NhM2Z6QJgRfQzS_dV_|tb;;Lv1)PA%G(f@Cx3*>J5 z##vJ(`xYs~WjY5kmF#;ZN%fw>Gvl)$mF=dAOaoaYNgGA(hUH}-Rcu<Q8k$E=kbOSGS9X2*p+1J|aoBS?jK0pJW*? z^;=%ssbT-7$Z`?J%w6! zZAHqcnpxX!s7PH^Gi%!|6j^c=s~u2jc@5+hq~adCpCVK<>G`XUJwy?znKV1C zV~)W3zqT9v2_8~=dySUdru1Gh`MJW{x?6ZnI3PP!9U|&+?h)P96 zJNI0U-Bsn)(7s)f;;OtF+IK3lZ=oeN!Jqr=N{W03@{T066}f<#wH>69-B6KSDF5A( zw2~y->}WK$o6n=zGsMH#IxTmN*E~)E=V9JKZdC6r`CwR*~Nk`zes- z_H;$Q&WMQfAT8|ICE+=CPfv(e_8v)2Ms)w&+OC%&(=PjGl6lakJ19^V;?~-FQCP3ED+l`vFN(z1{7(KDV_yC~_2p>T_GWyCU0e z;gyqic0Wb-gHTOqXFsOMhgc&b58K;MDe@HvrJ}t(U6J~`cu%T>ouR?uoo(F zlafiYmn%|S$t2lp70HF&b{auC+8Y%~0HG12qy4TT?GNGf5n6XAdxs(eK?)!jI@$Xa z`9jG&WFJuES0(e1{jDMcM)7J-XZwsIQ$eWT=xkqBWY=MitBWn3rF>5HPJ>WfU2I>G z&+(*5`*B_En-w{wo;|zTMI{O9VK-YWkao;S-QD&=ghuM__RS$eBlW|oCIq`4J?)}W zCQ~F}erRpR9=u&4i!7&$4#jas5u~?0UlQ(D3xf2uS1XyciV;x^q@Ue(A#0skYKhVy zkJwp~uol&p{`Sfcp(o!*?M)#7aj+gC&6MUeS+ljj4=Ye1g0XDUK_ z&~#cO%U%*9uR&&^{eFnN1G3mYAW4QGt?eL7?2{pxJs{87mqX+ekfnBf8OKgqUxGYu zS5{;(c0G=QEVq+FfKz7)tLWF$YWhcDImY1R5pwiiG z4^gBna^oS$d|;mq$@B!-Yu8@ES}&=%_SwTjgyQFJR9)~1^iNGpN^j0-`IEX|IAw@D2`Nb}+2%S(m z1+DXT#Sr-!@8ArceOQuAaT;}%PMBV^^JBf3dWo)>RmLE5-EI;h zgX2Q{ZPSVg$?Q^EB05`z<^F-6vn=cmXb(NdVIzRNPNDy{O-0gC)b zk&4j)TUh47Ib5cdqy4rrDS(@s$xh{H_w7t(K!!+_=&_wlX5xvANY!Yw-AwwUCNzg9 z)uJ6kq#a1jXg@_hO2ix-q;_=w9@ZLzzV{K3d!wB{V6y5gmwSWgCPf;RVapAoQ}(h< zqZO7I0KK0Q)I$n{>JvsLF(ThjOPSBc?R67k?Q&O}P z%85#FDROKs;!2A4Q-u6k3eqk5^=X#T{`80*R-^<MH4oV(Ar1JT(Xur!$YQRIXGdwyN zErevYj^q-2Jenm*&?AkAu9GD2a71*UBq^dN{CO94Mntb(V>^@3zCHt)5FK!x$>~q= zrUl5P=)k{;WQay5g!mm~R&=@~DdMed+;Y=$^oQxuAp#XNlt1ZFH$o&+&^Lf+Tu%QN ztvphO%PWRflOCn7VPbaZct=Gf6~ zAyNWyEsy5)NGscW?Mr?-USUYV$M}50is&s$W^GkX3MkUGH+EqV*NUhnFR#>u>uR>Q z8DxNzDau;nZ`h%>^ODvQ#Sm9M^v0`I4bK)WF*hcywb~z%`ztyRh}nD8!rTZxi(k>c zXxw=GZGl2q}nl35@9MUkIT$4F~^v=HVrWTzwYnaL1If;?Ow9TOtu zkz*T7Zs;7_s6F&_js-;L*hZaFPv=-bbdGJ*X*W4$h{>_nwH=dVZ)z=*W1FMrRl0PJ zy&a9`{%4MDFl^?veyKwl&&6 zL@3Ap6CD#GwL!K=Z^HAxuB%itcSMVZ2-VD8(Z!OSG&OUN%IA|Np97-vc~5ku)C$UU zk4ouDQ(N{#KVTVuK6~_kDxEK)$st0e^Hua*h*0T#9labPR62)DS?E@9#1P#Ijzk~KM`=Il>C!n8?IKA~ zI!B_zB}oy@R2w`J-N`Z$-A<20qgd0C>!PYHABmo0V#@SL^e-l+Opin@tbRhv*JXM{ z=a^}OM-9;nXjvwvb)Sq@xs_{+ zZk4B_EhR}6G%izJJrhj|k^4{pURH$Wb!6v4)Xq;nrwSqz*RRpMA<_ZlVzh9GbOHH2T2B$0 zp^=?Gqn#AdGrhl}qZFZ;9@+UTnx={J=W2AFB$LJ3cHD}qw3O@7 zq=M`r&6=p6k2oWkm}i-YGgXpIL1$OSK`Y`cP-NO;SVsb}oOOz{slzh1b4rqQ(L#}^ z(;d(DG?zG_v>a!JB0nkOI_D)x7k#ms(F^H{IrR#$R^AS5*>}cBk}iBj;?9k`fw`P6 zx06=TL*{aLG!J^nfao@u%jqYzf;O1T;gLG%A#*u5_I?4;EhQkjrQ~u(D$Ba}%dPF0 zmXg;H-BNBgME7I2INPM1;5oN|NtfAaX#theVCGOj$8P$B zfasJ4M5ojc(xs8d?JwQT^+(>lp zk}^TBp6JwJEi+b@aGEKi^QVN9q=?R+5>9VL^cYvd8LEg*dkJTpB0B9QoEc2atf{24 zL=in7E9tCJM9=F=I-3>Ixl!85Rz%m9GR~KZ=&`b#^MfKf$I3asDWdbIf+$3P@ciFYXzo z-sTgmFpL7J?-UJ@2_Oxe=87c1&NPt5&Ui&Sz|LHd`<=atys-gqN`f?ZK9_`ZY&l3v z=d>h2ztPI^ipkn*T0twPwjw$Y+ch>*(CL*Vf7TBoupLFS(Qq~|@FTvD;?(|ui?{8&MzCk6fH zU00`vBq@Sq?yZYwb7!z5oYFPOvF^@OA+iCahqHu_J_#t@Nk54F+{F|jC2Z>B%d?I`^wH3r*w$W zs_a;&a)@|XJ$uSYl4OdA;Axxsgz?U^l5id}IUvc&2zi(nTH~F^N^}0KLC&qqi}yjC z>5`m`Q0yd=;_NEJGLv86XW^;NF-cBFu6M*&nISXXX;_wJl7~b@0?16KPq{#=Jjh&U zq9p836_9z(1}0(+u=WK{j3BKVJt;qh643*%UPI*a!)s@XoZApSM-Rzu@Bq-C(PEovTM5m#2nQnG^ zOOh^LK$%wcu=nSTS2DUx-*d`VVl7>Q+nt{kDcOjhyLUJj6(P%17CRhXlQ|j5t7P^# z&Cxqh>|~i__T-o`e&pj)J-Z9e!4Me=nO~h_AwuV)esfMKLhmk(hRj8kieMgoDMz|4Ii0I>t!w>j zMBIrSzvT3kB=Gs)wA6D-Bx?r0VRT79gGBTxWy352vysw~xe4HITXNBrDSA zeeTu&be>U!PAt&7_J2By6*;m2XP;p4FK0ay|2MTeaMjtOWVDA@osX4Fr2uI3 zZFjCp7x|nI@!0Omif9iVcZVX{L&rU!h%O!1tyfFtm?<64Z6V2bk-JrW_S|+XBWu)` z$W_nnqKNj{bJZ%kuT$z9qEi|WU0%NXgo<64h3}42}*x22NNttpS&S&?a|PE#S1$DORm2^ zn0A`S{ZbR`B~bzAagQo3>JO=%=5ha!B*lv_*LH5)xz6MA3In$|@;M;71oM)4`~`I^ zAi4xeQ_AGg?duk|Cj7uiVoLB9E#pv&qY}Ku#I8%w$e6l%tE+ZBd|iUKYCCy!2?j)$ zU_f*U21J+Ot?s?j!)#xd;H}ypQ-b+bTsxf_^|+J^y3M2(w}K}ym$=RC#CC+P;f36O zis<~g-FCW= z1oEeh(&CyxGG*NpQj2Q>eSx{0dy(y!no!=g>c~Dp=={0My_t!r2^HNtl#CvUD!O+m zqVuPsdymr6b>nWgsUkYp^D0l zpic;hPH9ywV`@TmO-xNN#Eez}(J8H-quc`-o%Vp}v{yGi>zWV{J)+fchsyln5~TC| zHQfoEho%H;xw90}>8kB6Vq!|Lj=M_9=n|~sZc;LO6t3fLS45|)j{C79Iu&)?LyG8B z)NxNq!XC~;9joL1!Nl7e<(-JSZoDqlu~ct5KI=#O1$EtGima)kNo7e=#N45lSO`0H z-6oO*v*mj3Qr42smCGPg&wV>YXsw{WyE{Z^z3yK3pd`G8whCGe+=l2Y$sc|5KtuN- zMGl_i+dmq*PcRXQDZIMU(4DGe9>%*Bv?kNgU8%^SOK4k|^EY&ND>7_5&&L|Nr<9$? z@MQKXVsGf~$E=HrK<;<%RpjS+{B~zkw{3{f z`*AJY8Ioj2NQT~_YvnEs5qe{;jk`^0(OT0^c-Y?E7a|{lB)N?nu+Jp(HOND5`w%$} z(#7o~3D+oUklo$n5cw4{-QCq8LgoIj`)-I(x%Y7QOOh^5{wE^-gjP?tazifnTW|>z z)x%zHb0(rfXI^LP<*rp^>qeZhe~)CoP+BeK;AUV+jwu-`)0-su1M}~2nf7+0c-{t) zb+rIwdb{~Tq&P@lw`hn|0O{|xlO#nHg+EkYgWSgyng0{7BoB6z6>0qj-ZzKV5I548 zW2angBuV}dX$LaQE!u=-nqmE>7sv>A3=`?$V31Mn^bi>V@}!#&;~%w@(wlJR7G$(r zNRjh+*Jq+6r4?CH0P{mhsw(omAq|*_k8%ITEGg4kk+r3njB&du@`jQb>kd(b@|oUB zc*?EboKvypeXK>n&N#Q8BDyt=b6YTx>B^EaokQeBkcn=?7HsDT;@Si<)or23M)*S{ z)oriH-{{9kdYao!k!|S5h)j3;DY6Is7?Bz7V~S)Zar>I-KB-97cC0U=51-{GD?;V< zF5;T)4tRjHxwh;Dnd@$0;;qApFnW$lb3az(llhkT6f$YZiFkuIi_`H?HcZyL(zwN(0Lo z?(DWiGKF6iw{9Z#40nG!CVML2MplsdZgP7f8S<8lSqMJsu27`TBRJdaL*M;ak>kJN zi62@E+(U}cT_1mgWVyd9Lid3XS?J!}fi2UWAs$XkE>bBC`ntt#1u4UXdVs}ly%4z> zT1(tkOuSeA;QjZdZjvH&Hw(RKyVUKj$Py5Gw`-~Uh$6c8d)|Fakz(i%$+PF(Cz;5$ zLw)ZuGb5^4f!{F<$c#Y|aU1*z2)(0G24qE!5?tXX4dL~4M% zlp{CRxNRRInd}Jl0QW;?O%9ot-30WNRHl1S7VRMOvfDrs&cm)C>)hUwWczpa<(1M` z-GPeS148<*x+zQ|OCIEuu6O4s@(KvezSg^|CD|#8;pP)M@4CS~#WM1(7J90E&5d@E zKASsmUUP>?64b-j+!aj3#x|Cqb+*^sUfoEGeWv&9Ho9X&ghsU2-RU7R7_o11H+7eB z`D^chKWLS2y4#qT9jG_m8V|ESdY9@gw+Rz--^E+*x)A9CKi+bi_hid=qlcu~#b&p& zBq{RFnGuM6vpZjrt5{um3gm5fKWmv%e#b4^o9yhAWD;cF%~66|-2;6{CTIm)-NPY5 ztzfHrB1C9!^gr$|A(95m+ueL9OW5)1^}_qhAiLZ`k_2pu(`tgbAfINqN zPwIQKjf`#u0ijl~5^-g_t2i$6w(=f#gCe^2?#Yq%z3za4|4jQ{cXWtQ+V{HCLWI)( zp}Qj`G8ABvpOo8lH5GS@o61Kbx#EtbD%UbWk@~0qPEca7P>;bq<3nU&(Q=|sS8IYS| z`NpwKH}qqFg4`0zQiN`}if+RV7_l4ABNdEomNG$qSTNRoJlV;PJPn`oLaShGz=VL@ z0djk6gCr?}WXgjS$zi!ztjW`)74#&X`h#==xihv}k$oszk|`G} zn!++OK>C2(6&s>RPrMUDG8JRz6{!p|1f)`|`6Sl57{Q(kNR`-lMIsiHYO(y2S!NOH zbqZu^#F{AbY=R|bg4Bv_Qe*~pj^=~h6HA)HTBG343n2Als}<>^NQ2mUMT*0pwUD_l z)^I9oA*;ic|r47o=HiNGfYhO2fPtq(#h|#$+!>SBm|C*lKSEc8nFBO=OBV3_Fz155=-1NfC#X zoi4Gf&#>01ccXXMUU8KMJO(^(<|o94P+?xKCvN457mu7m7Pao+Z0Jq zX@4|!Rg!e^&PqH1Kzv{s>*lbB~mojANx1q7Ciqr!66f(nN`=6y>(#766mV5(rcr2R9q%i!VcS1+R zYAW*LhKM)_t&y?LiZp(oWuA;pmn2mj_=9JjV`6ENWXtm{4G_neSi%DK@R^q);u!3V zi4B(|I2AKC)+>u;ve7U82$`p1pDS{_q$MtZjF07B$TEXb$Nm6$I<`WQ(Xf0CWMZt) zB9aM4ndI1w&jrb`d`n1%`vjWBrNq)C$@Vi2@%TO|mZiwcAO#>jDYjgZ7mu>c_B3VjiYV1Qr-T)z)sj&l!q<_bDQe%e|*#JT^ zsj(A^6v4bBdG#p&9kQ zHYoBcNOU`%VPpFhX^&3_$lEewmlb&ggzU_W^;^o87uUq|J7%!6Vh0qN20}B&*|B=h zv&`C~c-sP&XU94yLQe`bTYe@sK$4viJ)?dmmW2@-W$Kqb%(*cqwoH)*Ae0+(Vrvu` zim{Sv-Q3t~iX?-O{@mCWCXt_RW)IV1O_sAiKO{!vGk$uklOoMZFqsz{pvXpOQ7STG zqZIkhkV#DZPRhfK*i0oeT6vfe%TS~Xa`hIZeSU1cB12U^&yRhi$h=0J&(FpVE3y)V z^7+}=kQdnJ3;9_lGd5n4I969kCNp+kk(EkjK}@{JTH8QKW#&Io* zHB+QK=3}%9u_)F?kHA?Hd_*I@5Mou#7?tJ>O=WrOi zfiK05DWYrd%GfDI=&f+_XJu^4O0vT{suWro%Low{WL0bl6LCvrD3*9e4i zV|8q=lKBI->)ZpG)v=!y83>t1AZuc|S5XY9o(s|fWNqwrNrIWx+E@iiGQ_(@Fmg(n zWot<*L(ERbsYZ}jV$;_#xpg$o=z(mArMk75N#dpd9-xc3>yVEPjDyevdWW z#bnn@oQHqLHYsuzBR*Na5<8_x0h&XCT#t3nX000QSS#W!QDi?z3&_}B(cLW5L3tQ6 zWTWyhZpfH2Y&nm2uhRPKNz8peXRkrH^@f}Shu zd8IyQnZjk6-0SsIgZi#8D9BEPutPE`Rl;va`3Rz zKS(u@&R!zRcy#K6)&aVD6(kAfbzQwqis-ebZYsxu6YSl*eo`h=%-M`D7Qu2iZ(N8x z2-3?-3z3IG9`Pn4sD2cQ4%g4%AX-#?7JYPG^2jZ z%NHWF&NkF56(U0r`!H{Hh)e((>6QAP?4-!Iu!)TImP?W<^xgYUd#@`(x6!VI<)^*v zA(95Ir@c=?WC6%T?|6tT1xfb0|G;t4-Oew8qh~%W(V0PRtX$ zQHtzERiTH)Ro)6kCaz+#+S@5f3Z5RZ^9Zdq-t1pEU43rhbgl80G7%qHthL75rU-rG zAV0L$dKJ!d?5iPD1mtC}>;)zr5OpHRI`6=*OumIbtmfCS|Ha+D??1*hr8=Q zHha@0Nf#CIuU`0Xt9MEguFo{H+Tpo>b6m8iFcdO7yyA-VorWh4Ny;fwZ#t8mUNuD? zYmcvRLS~m&Uy@AmL?6DzDBJ5EB2yrlO$bKdB_rbLB8?Exa2dFPeBfO zTVhOb6}>nDa@0GFc|4swr+rU)i{v}+#&@8;^KN_x>U)phIt+UL<6c8Nh3fpFH&%{& zEkooK;yU4VXCi8J;A9+qG5^N85%X`X8(t2Xcn+Cd zKF>UZ8Au*~_ziL8@jsI!Q;Z*EiM~ih9{*T~3<0^xpIVSS#P>9tMZ^;zdHwkzG6Cdf zzvyi&^Y%^rg@s%F>XHQM%AdoZ{QkaTto6|$+~SC_DZgJ3`*}2u?Yt9bDqy*QUxJA^ zhZ)~2Nh*iPe2{{EK1h>?I`-TAvXZ2Wg>!Mj-^bIh-&v7mn71y5*6lg`DeP}4OLhXE z3;Vq){?o(4{#qu+!y^8hO6I3zeEkrXi}*W3gm%e``uXvs8uqZ5f0rU-C*m0&T6g$O z6!~I!M7#l#;6EB7?|~%d@VTV_l#;21mb)7=CH-k3vLB?BKVOlOkU0oa+Fz;2k#kt9 z1S#Wh3X#(wcly<)gPpi|3-+^0jcc2A0mxGs`&dASyvlxk$_b7 zD_7&#iF5?1=3fqx9w62IZPiI8UAP!M9|fu5$7?Y8Bs(I8gVgeGJc&`;zj4L2wtwSE zjC*pFS6#n0TQ=>zuD_Y4n~41{^xR_+S6%Yk1ccmhblyLL?2OslQW^`~SkZIFM%k zfe={+(%fIsknCiL@lEg@I*=CrrVybP*V4b^KK6MaWQaWAH;^Qlx3uz`g$T`~TKR25 zg!X(}=g?}CL#s^=t+xJ+d+Y7}8~4`R`#0{bcgRs*9sTZ{3R7Mk{ZUOg58Hf%(-TO0 zM}JC)yam$9Z_7FAMJ#wU?M~+nV z%#n)T{w8TT=-GPvm0NM?+%}2pPj7#?BF9xd?CZZE2}TF>>Qtj1@!wXY?~m9Ug@^t9 z4@2Z6$N>Lfi2MRF$UhY#S3!pQPqpU!p|Lx*8@n+6><}pkGRn_-kY$Qvo=_5GjK4ZW zDuF!Z_h`eZ=-U}@WrB?NhbYnz{cdBBr~T=Qyw{NHVRDZAN%7aQj49<5|2X!-sa5`f znSLwSN%04CXMgl)mFj0QF=N3re}$5X6ykd-ruoMeS$#8;>3*q)+0LU0OlJ7~6d5sw zZ_=3QuTZ2EN@pCzXZhbK@;7p$8~mB=pAL~nLFW3m^kB;_a`kbLd47oynF#W%Uo}ML zfGqS|g~&pX#eV+~c?o2xKQcsK16l4j@5gbyS_n_RATRlyLu41oN`G01>;qZluYZKK zVrrhS+TSBdy4b!N>spXmlcRKA_V4b`S{aKiaR@Rm`wc_n2at7sQi%Kn@`}G|AZy*e z+!7Z-UiIGyk-tGU_&Y+x--G8k|5HiQ1!>(1vdKTHWJ-bD0rIAQAw=#5c{hj8+k6`{ zD(Y#q&)fV0AwoWH_sfPzJ=l5QKQNTE(#5Y&<9QHdhhKddlkY)Vf$a3hC{nl{o`vxi zKP^_jmd zLPK?) z>PK?)>PK_bvG4rqBPi{GKi~PaQ;1{=-A8@rPhw*FsPFwbO6Cd7h~^^g-}_5KBn#vR zKLKl1R1bSVhRAV$pd^{%3RVQ42RY%736a$xC;h$CICkB-f6U?YDgU^X34A`~--^;D zpYvcPZ$0ds@)JU2GstN_VJ6Gy@$`&eOOl`-{^U0Z5t>W<*R;;7RyXw{n5sQ>nxKf_x36t{?XmLynN z67lJZ=#`~N{8`qLYo|vMS0uhZL})$1ihs;R6e))j{*bZbr$gjCh!c;_;n+#$8i*H9 z43Rt^;H}koT}4ums|g@C$D2rkoe^l=335xkXd2t0)u);u1>)sHq$$Yl@m3*1T6e@B zVPd|@mlz+yM5e0?WD?`EL!=i-iTDnsHA|IO>G(HH#NXX{g}ik9tRj#1)a1I-(%)ez z9nY7}K0kVfzwKT+evcybW#>VNt4zF!Btcn}i9fA~E{i+kX_90LYc}p)h1Q+%osy)B z$L3m{BPLbtf;@#Bi<7FQ#FL6HdlVToxaFZJKi}&=#1Gt@!pDzM%t;R)QJy~Bt_ImuC4*88=s!VmgV~?APwU4Lu9)o z%R=O1kVZLLO4Im7mNC00P2(|~A=WF3N1)X-UNA(cCNzte3K6Oa&EwT232H)%_!O4$ z^t%i#<4c%`eVur{w`Dy4B2I;w zl#~ftO6weLr*-_ilnKW7*73Q|lRv>XQd`I0Q$&yE55|8`BpdDY9Aa-1k1ms1UX8r` z)zr2*{An96AZ6IY-=WnuUW$oWiPn7$q+Prw6R)zW^X=k|B?;<$yZ8ekJN91E>Z-K# zo09G0PcRYF)u`7#K2^!+QLlYGOUb-{3y*s3lbOi35^jc8$M|$ff>Q1n->ir(*Z3bSV_IC-I6k}!zk+($ zHU9e=NyLIa_|8aivh%kj8DiWDOH_o<-Qu~|k_@-F>LA_YFG|97jAoTR;~PSR-b?Bg zFZzni9~nEfHeD#@ga8hGQN9xV5d|3?zGd_Ty*`2G-S1u{6^aD8C8 zBgnA$*%0Xt@_77?*QAX2-NJq)>c+@;bxG32&DeM9`8JXHN`~$O=?ASR;}<1K5lQgp zF_6*m@#H$r$z+QEhpclCu&Mgu z_?ht<_j&GlpG)$rq4B6xl!`*5REU}ip;7Xin4(fm8LvSGBN~G#Z%vX%Nh(DdlaN#@ zq8dd;lt*Mj`mMe9T4&#xGynNmYwff5+WWiqKKI;n?}2j@8`b9meL0z-Jd+7;h5@hV z1MhK?m+}}8Hd|f{9ODF@&YCK6@nWF;yDZKaC3~otW1|CibCRd9=W=g_*)lrNkCPdk zya17N1Nlh4R+AM*#s~H!cufQ{DUh~KM4o&Wp3VX?Ibf_8{bGdmYf4}RlKSwJ&1@j~ zfm!b}8@ZaM26k{VM!6M6Y$4c83)KHW#5oV2ZnHSk0|PjbPX!kQ)^jpO`S5GlYe04i z0-+DNSIUEMerKam5a=w3613nqWFbyLpa&=8IC%@mj6g9bW0XoWNqGmz%s_(;qV=IK zBr6{RDGa1>GEQNH*%Sr(ek9tuc)d8o&I_y&gg+6@u6bTy6B71BG$X}dWNuc4Uf;ulO5!W!y+D4Mu(=ELBMx!i z52Sp?$QWf{Tam8~fpku0C_`cXGy|Irfjvmlq4ickHU^457jfDE=>TL)V8wPpeupfl z1KAd+;3Q9BZLyKx8Cbi6+2kqgdf06FGSK7;K`w{7EJ$Z0^&pNQOOZ^2bt=eOB(Z79 zN)Kr3%fPKWS)4-UQt-MD$gV&SPT-^fbDrHx`8tr#2|O7Bgz3gNfzw}#))`?}_-$a< zE=I;EGt!fl0TAcAK!>jcIZ{is^?hJGl2C0y_5`+aGDB%UP~>87AopwLHA9&SpT9o> zarOmPbCSnx*fswc==hDWDFvIyf&3IGN3syeQ$P*`>hESYc}g)vW?sJrE(ntH5_}Vf zt*?WDn%{~ztNXxjiGt0+Kqe=73L~sv6@e3IbHfPH_ag!AI}w@vx(%D`M+5bc`~^E$ zL7H+hhW`T2M2LJeQ2agfl24r-3zTq@$G;bOye`~@2n_i_T+hBf@N@)t{Shcaa!FVC zl~N!l0wx6Bzi73jiAp0aR|P~*P>8Jvt!*2A1fu{ReoIHhnyMgunOrZ0Rf_(a?Ab$r&{Upe8@M5ESHn0Q93?!9-hCd6N$w>YQ z4B%vp@*t9Pff7y%l^bBzErvMf11aUqt5CV?1^AX0kc)x04+ygI)?{S^kfh*NB)@^y zZ3dDY9QBK^>2o=}nG;B@;Bii7D7{<5XPQ9j1dU&r%?xEZ#;F?|bx4pKz^fc=0>N@5 zJ@I;?!HyNerkM+43^rQuc_f8!K0OOW56(i80@bPpe12mG_akAd9t9E)hK`6h2SEKS zAoYXQ&y|-1^MsA}DZ?ef)tt;!zJ-Ze54)Zl9>ZfUxQ84V9h_67yOdoWbw;%mj_27 zVf%y*V3QhLfP}3SM$&>?IGLgB9}K@Q1EfvxAd-RL6Q#pgmFM_3zj4h z=5>4U1d>f)!y?}mOgkasFfs*5ui!`|qapGfAomA1C6Glx`URbn!Yc>7Rsb0k?3+NC z*Wh3YlBdCDEs)28`xD4VK(d0)DG_HD_UnmYdIDkndMcQUWFo|2{dz9AB7v}ey%5}s zgguA9708%iMFRN>$oOELzeHQ?*E9D5$qPo2{0MdVXCM=U4wAQb!JS2p&XoaTB})5I!HB6%3sgt>=G}q(p(t4rU^m3o79NnG-BV zau#+M%xhk72NJfvE(P*h@InG%qq-p2?u>}spf@~61U8Ffe|hAl-nx9UO%u17_xZK;93QA{l=Iat>ruurh%R z2T~erb5_K;4>HKew%|x4P2rlK2eK%UI5J>A#XC!QA#a7C-q0$6$5^UOsdjBiD zu7@mN0CH1kRsyND6TSf&I*23}DuW87Ysk4MycnqmCDE zBRL4#+X2V}p|<~tIE*l_exV#BH@yVk>;N(_v_65bw%E5fYH$r732k)-k`?NnK<)&R z9a@4U1>)QX@eKDhLfhG7mIiD3Dp95+ny;RgM5s7^+@9i$Yt`hE<2>z@{kFwuWen zX*eVELTiyQ?Hv!~wNS&F!iJH2APYhZkj&TvXFVWGL)X?4HcUkq0(m3U1Ibsd;9o%A z4E0CCRCEoHw?dB~VJf_;Pp|c zEfS`XzXSOsGyut4(619fJ`Lp~VVcQoHiuRt`3-GKL%WeM6=l1NEuoaUqAf=L2CuE5 z%zz*xFkd@E-Gh?U_!2%B4s{O+5``?QK)w%EBDo$$wE>WyLX*P6CJk(w1Nk*nGa|^P zK&}FEI5Y%FI@%l!?LsmPZH|W;MuivC@EgGEuTXC!OeNS%I2)=|g$*NJz~-OOCQT5w z-tPwTZzxTdrAz`63s+w$T6hWC&`Qz5O)U|bR*D(kgoIX#6YgjW8(Jyx@G&H`QZ5ZI zb%YJAlqTUVNN8O&3x9!xRzb7ycSvZ?Hw)KvMI4&*SAI5}MC# z!sQ8s&F8DaMqEUu`Fw4-BNCdu*M&2Y&|Ga7-cwI_(OkVDoO6jFG*>%?^BYLQ=4$8g z`b!0&xq5pzzo8&BS9^v#G!lg7>b>DoBs5na2&Xm{HZ)iJhYOIm=Y&5%LbG>Hcry~x@Hye_NN7IK30ESa`8+>d zzqPm?((r}hj!0;RFAmQ_LK?m#T!Dn<{L*m!HX;tq`PakU69}90Z-jG^(42oOyaEYn z_{#7eB(w@vg)bl>4PPB@c%^8I*2S9e?yDqW8ooBXsjVQiEuxLhIt2aLV<Y)TF&({d{}YNF zOCW6RL?WBI2^(5FdSv76g3#KrBS(?YN^v89A)$5QMlK+sRp3Ta?+|fl6P5hN4F`4u3yMbvu*VP`$I zOSwIw+$RXl@Vg_EkkAajCvpr4&G7poy)%Rt&F}{!laSC1e<+gCSJ==D9~j9RAPCLy z!4YSmBy5HciBuw?89pqsb&#;38U93MF!udQU()%$<*nFNE={!^rn$Iss z9{HajG@lD2MM$U?6h&ySPBVONg!bxG3+6`NMlYK4b0Z%jp;|CEvKa}jg1M0sNN5!- zh!|PodZ-pGinK#Q>tabH9|_fhrIB(Zv{IHuoX15RS}7%w^aR3c!SYBB5?U!MBPB?v z7OaZwMnY?6b)*sr)q*vV`olz9w3^=RX?vs+39Y6tBD+Qj8(K}fBIVBtLaXW9$dKm*q1CiEvI7aNrXM41pBFZ? znhr#UAfeTCDAF)j*wAV^97&xZ2(6~0kz)yjt)@RC6?wvjR@3Ro?umlXYC0P!nj{HZ zP5(s3PZoq$)4!2TNT^<1jGRY8>+3(?`ck5oyd>h#d{&}2BB9xv9PNUH=4x`Z2NIfx z$ZMWY9iP`_f)c2h;`)GsZXiG=#4M<*enei^er>w zawOERhS8b@qAluIBi|J^j&?+woTG5p1m@p(0kp5`|4DT}62X9jCa ze3yI`cr}f-;-swZOK>ljeL8tr^adn5XNXVeE{pa?l6nm8t%BEO(Y{DF!>8@+Q@qQf zk0CidEJ@kOZAJ>>z4P<3==(_MiI>ZxdpQx;vjw~^kN$yiC~|64d6`{vS<=ek$;x)H zNsX$4c#%`19g$Gv=238AUSYasNhq=;)OSg!?~?euYSHyb8|r)W=$-s}M8B?q?@l(4 z_7zv?jdP1A{Xz$|)gqc%tzRvov#Ry$is(X43YE4U;a(Gr#ud?(NG^w&@I8>U=yyn- zK%17)Uy*D>n^w^iNY>Sb??HoC>uAYLF%Qdt90PJ?^qN_MY#R!99f4dE?TzHdr<0Y7 zK-x#gA^9F`0=wW&O|&3^7(i}{s;`JR&EXDSBOtd#bCA@33ZCr&(m7hh$xKDPU9{CD znqSDgW-2eiC#tOVZqbpmCAk*7?u>RXVq^xlNe9w1+GdWhc^mt6U$hiS7Cb>b2yE_; z7R;44BY^acPMRm;Ft71I9>UcmpRXGf%`av)h06TPla-lZGblQr6Y<1d5hq{(e`Vp! zPGapm97R%#?Iq@ejU=}}4)-(R6W+||N*<>y>A@!OgbCOTj&4Q5#%CobhZ4vKKpu_O zU_aUf>!JnP42?z-2(!t;)=O)}VJ3VAWH^#7weE!se&HiO0C_T+%HxzK_4_$VISSmPVDJQ|^ndoXHSwPMMc{Un)OrAddr?8GVTp z5jht~QM5RL6aXoXp5mlbp*glFddU*ecbYAWqAdieyJ3~6GK-^E36ertUL3t139X&Q z(c3T%t)0cu2RYfI(Cl3jeI$Xf+538QBzn=Tdoy~GlS1X=7Vz{MT=R;kv6Nlm4CQZ_ zQEvlT6`jh7=;;O^??mTwBFFH(=q4m=#j*9ZKH78{iz7$%!{{zf#wedHfw#UuoR6YI zUS~F&YdAxalrMmM9Nol8S>2W^#2a`%j$YtIi5p5`Udk7y)b}$7k!QsnVp}aYd9%WC_6tzKSmo`?>|R(3!4$p3yDB5_=Dfy0X1d{aM)9uo+0tA z7D=e@9;wAn$1JCk?0_d#nEq5yoLcNj3}zzb&s6yKBG{aX9!By5w)J=Pj3AyK{vECHCYvo~ zTr+P6ud~rcf_QIjt&Fxp!rpdx6u7`+zb&}_LF z?TdtF%YV@YNNBeF7u|w{W{aX8Lqgd}QaisTu8^`*Q~eDI&8RwRY^AWF8I_`TMnW?x zMa@D&IZaVFAfcQF)LyGZ9GZ0@btDp+bs=@b8fG&_xd1bh&F7H13(1l*u&;q}4yz;I zVK(sADOfw~c~Mm@L9#g@o@dk4ACMT`1ku%VNRB6qCjbq#{#p^|L(p*cT%4&6K++1H zbYhV$H5tW3?V9;_3A1K$@xPoRoP_R;Q|ckkG13RR-)UyHQ13xPGxG}d2_!T#uTY;u zLNhZ>U4?{ZW=nMg5}KK9)QtBkjtmnk$e+o~hbhGu44^;IM^Gux^qNN8qW ztG4+-L?*Rqrw&9ybG5xX1qsd7_Ue0_b(vL=_Bdj)617)1q7BuZ_Uh+IsP42^ z%aKssX|GmtB4<>4wc&^S3i*s$3?qNNI$RJ>*=|q^IGF{%`<1LL2b&wzMjM!ysNHLU zbWq!JA~fn#ARX0AP9`YZVF$}Jyo(Ah@K;*vC+L?TuW_3^<&TkK|J+4=lasQ#ci${d z0n%#?e0#bntlTc@JKUzUu7f+_F6uV)sYmBu{!o6(p$`2&*7n)HEbLVSIK2>8gr26H+qKtE(#FOh}pLk%zh0gp|IX*Z(*v zO&W3tK7oOe>Z;~q!hBDoUY1;<9Ct9pTx%{3U=$6N3BG3!NX(nT26gFtRm zCvlROG8fJ%EKWD|RV1|!h{)a4rGh9m;E8%+vy+puBn?KDMee57*eGVpbug-o+^)70 z#H*EesOf0K&KD=Zrn}l^6Zi6F)Sc=iBvdQ!RHL7W$W$xu#Mx3-ixKujG?6Xg0?*|{oXERa_o&ZtBHqx*R?0o<#00`t%6)2)h{J!+j`g&!+V)d1 zV$^y+HJuZ=;`*z75(tYkNX_JAOA3w8qv}XbN)=jhkE-K0i^w!SkE+F-i0V-18~A)j zElD8kn*XP6<3z6R;p$#aN)=j_Bh^1RDN|@&j8sFVqAkkKQ)Dm#-8u_^i4B$?zmm@t;#yA$b;_ z@Mkv9s~;no6H8VM=zEU3pA(_{Y$oKY>0gVsy1_TJ*sd~HU5kYMei7T#j#bN%Wc&d4 z7a`7AU%tlq@-R3YfH|1q%iW8nt|j=_{P(GAbZqVoaCiEFi?!)kLm)nS#|>Y4K_cjXN8To zt303@M@3}z-IKS$=78D}3H#2-2S5(0SxCNyIG+MJtZw2YPx-t6e%}emF?IhREKZ(s z38*?F$JO=61$h%*%)-biwe2ZE*v@<}kTYr~5~jw?=B(P`w6GZoHopKlr{;1pLwOT+ z_(y8o0;0y!{}x^k zLcbg!RxB6E>u6IywiU@s@IKe3VAD8eoE2Bt8qVgd7pbvaBsEvSH!Z-XMXVeN+tV_e zma)#2qOEms&DVoX>)3cCm)U9GKAM{vEl^6yt>CaoEKhG^Tie385@#7 zxo`1j%C7L<*ho&qHxt=t+!s6aFSC)m<@;l&1>w8pyTR*$ zSjUUPhR$CP#>R1yr?6)R*cyB=R)jXR+j%f%{Ks4OzOnLP>?2Nuj@=89AB^qbq%4WF zu5avzYBv31N2=NMk5wXJbG0ADc_;>5fWOjO_d*6485pbn8SBHb&I)`j7VZs_&BL+9 zoQUgTd(pudr>qu59voXy&Fj%v-y|L<=?L7zKL>LBm@m%I*kjzLtZw1QNy=kzJwszp zAXx;2-L)PXdk)E@0YWAI7aNP@WgtxF{}-FWiM+zBSTQGs%D>QhHbl;feTw9HxX=F# zkjG>Dk-T+Xl9CH#7>Q&auG-evSob>On!mhNWO=;LYeK9yw~<+%5bKMCvOFO+7)iss#7xMGJ&vR` z5H=I?VoxI(@|W0|PmH~Y7dE9F-s*_@UQv}%uWEqgj zvCO)H)Vv+u76oKVtSBJJa`Mm@Cs90tKVc$)jADe{aOzkA)FYsFETknfwD};@wKZ|1*IFSmlIF_rjw#Fze zZc9@BgE&iLrJT%A93bkqumkbs{jJ#E7{5X<@>{V(oQRpw0KDFc{egtdgl3!wMUrc0 zWvr6h$m?0@Yio6^hsN5HHmiL$Z_HKN|WAzPx@|zIO}2+oQTM`19?Bz z%n)(d8vzat)HB5!lJVoZl3?5y_(sh;%{H9X^Q=aqdL&CVUbhNFOBg z(#7|DH^l~UB1e8x>^Dy2r!bphe+Vz{QnY>@#=Q5wf zVuC32xy&aqmlOH9%%`!Y350zvvn6&VCsK_+kEL@WzTL^bA@X@_7?Mtt#WzxS#1^dKO+~^^CCuxG z*a{?UH^|8TSPxr7-s8Zh=#b@~Vr!AGy%w`6kL^KH2lit_!RD8k<_Ir#HfOCLiZw+t z23xO)bwR?;O)SpQSQaNUl-=-TBl{l5AF)kHGU3F*$e%uiJRUP#)|MRACJ?pP)u{0!fzxPb6HxjyYdnT5Pgzns)i9J^(9sf>NbiO3GSOH&!EewXHatomJ=|6<>8FL_$8sa0TGbWf(H zw)#?W&2$p4rIj=igihkMw9`oFo=k1cZ7fHO-6yH7_25J*Np0;@PNb65)~YK>ZS8Xr z$NRLsjPf6-%dyvrQ1$DH8f_O?&M?1!eRFV|!Yyx3Q64YuoVb?52HL9tc$We`I z)kjs+s*kFr)#qMvRO@MNIFa`^>S>kDs*Y-XZSCb%N436hR4>t#)T*O;iPn}AIjWav zA8;Z^^%CExUZQ;>;&`LlK-(&aH>wS^T}WtD8)*9l@kX_Qc90V}s+VfV69^mC#@Yo= zCIU$q&{D!bwon?++3T9g!DO0+k}Mlxs`Sr3F&idEvg%=;bMHJnK8y+iBFiPYZiT2CaTz1_9`f_U27 zT^o*sw70vKgI=V)-L-K@Xl``Z3ebz`22;`Q+9o8Vy?1IANJx9{)SOnV7iIjtG|cNR zEgcDI@7>yXBrIR-ZfXy01rpNU9@=gsq`f^frL~Am+S@}5wGo80w<=-U+f$1R8?L>% zpuN4ccIZXgdym$O6PcZRwEmn(mAJ>J68HL4;sI?a_mV2{kd}*Wk@h~MrC%+snY4F+ z*6|uaNP7qPRAQi(k2Z8)bfC706FFN3YF)2oaimHN^r^%^?M`k}=BdOWt+ybaN(|Ea zBB7Zu$fv!7v?1I^s>H+Ehy=n^;t?&E6FI6wwb`6Vl^Cj(A|aJ{T(hrZy(r}OGudt@ zTkDL3RN_f(6cSR25!z}bq!LeQyOEGejMAF56OlVzjmu38};w z?HCeLiE-Lx?L}l#i9GFQB%~6PwI`5}O62=gVw$#q+sF}{rk&tKs>C#{)%C0`nfK{h zCr+eFOxJpFB2}V5>xYC?qCgueh^G<-+Vegj8atR)B<5VwScZ38};^tsDud#4Ih;K}05%n5DgS zqadUbRS8pxSF{g>4OfYYpb~}JUi2cBn63TAiOkMy?LSVWO3e1D#9W_Byrur$63es;oJf^;U8~cXU7;XMC6;RjCvsF*YFBU~ zRbr)((E5>koxwIN7IB{pd9BO#U8sO>>Q zD)EWdtgDDjDzRDXi-c5SiI>pMhqha5f`sPAZmkV^kxJ~=1|T7o_*R>QgjC{NZ9Nh?$9<<&AR(3bUTfM-To0+l z9<4hPQi(mAqc5Ng-<1pXqjk3 zDseq)~`a|I=druPD@8Zdx`T} zE)r6Sf3+n@NF@~g3=&d_8oF_hh)gO`OV92t2&qIJy#fiTL|r}9N7#@`1of^+NF^eA z1`<+{AL+ae()xj~L_-hJc#dIuz=5)bK_NJu3f(q|zdl^CFxA|aI+s4IhcTi$)+ zL3%0@Qi(x&4kngdcGi@N{rNJaUxaX zDSdtdVJb07U%`nS)f{~@CsHMH^a>=T5~KAShOu7AdlzH%0Z2$C#_O|?kV;I@cOW5^ zn5dsXLMri+-f6gqOe!%|AAp2ZV!D1XTiB3F%+Rx*5QJ1>re1)ARN@tV8xm59B7Hv+ zQi*wb${J|$VCUl2Cleq)h-=Li;AD#;>!N&;a@vRHqO z6R9MN^|v^YO0q=%00}9{68$qlJSAD8??FOJvP3_GUZf;T^kYb9{w&ce(TnyQOZ3!{ z?3&B?9V&MBa;e?}2`R}^Jr@Zn$ufO45>k@a^c5S z4qhwt6G*15gg2K1c}MT{42v^E>9JnC^>@9VkEAwy|7#oAY|yPy+{VlMM!hj7QlmEd zH0o2IMwRKUxR=zZ?RsZU9%w@v^@Tp36RA;O z=znt}HR=nWMt!0GE8=)NnVovg7kTTRM(xx?NNA4j)Ez-QjoPU<}Mt!H>&56{g@AMobq)~hIFOkqrX1{&`32D?%dYjSgn&q97pYvF6ik5pQRA|d@zj9wE&WYV9igy~O`F+kXG{n-tgkZin&UZg)Y zj3Q2Cc4`<)IFTw*!>E4Vsclq0?*xq1+)JuN)F{QaXeSdj@+XOFCY4Z)^p^x7l~9f9 z=be}_3vEaxV#ZcZq)Nn$yQZ)>QYB(W_47{5=)-N~PDV5O3gW4RW@I9vnV=cjf_N&S z8KXFnDxn+W5(rZX%P8PPj%wU^ofD}NabpJ(Qi)59|B#SMG&Gv#vwq1tCyk8^B(#%h zViX`Dm1t(Xjf7Mp)%X<&sl*jV&8Z?XsYFX7f0`hq60MDl>4K0-TxsMWA(gn=ScimE z;#y-X5>kow#z7>c5*>_C0gEhmGB+73kkC%%W~2I@la5CB8QjaOXdR8`Igv`z(Re?B zFeT|^?BGNyNhf0;Cvqoqi&24ul;jrUj3Azp++x&znYAwO!QNu%f_V2}Z!zLXX#U({ zq@ouo$t^|(5>k>|ja($8B)1x?k&u#fHp-FEPNs`df2Oz|Qj)GlXC$N~U5zXxq$FL9 zA|#|FU5);;L>y9*s)Q-YZAO-`;YzX(lqB7F3B5>3x*1D2k#oMAv6>U9B;9;U(%q*d zJ&X<9ODahpV;8nXO47$Dnk}xGl;mEcV2&W9B=`E1!KC3(y+ibWh!lK&a)kdST+Gx{PS z-N-gZy(YX!H=Z<{`GSycj5InRA>DY|7=?s%<5?pg3F$_T@i7w8jnPI0CsH@Y7?}%L zTk?+USf6f;Gs=aHryJvps}?dZsT<>r>;%GeW4tke6R8{Hjai&X-I!o3MnbwV!FXE` zPd6qQn~~5CWPBdZ>8TXR9QDk)BM4nTMjMNfw&7>Q1jI`x~ zkZ#QJ>Bd}R6xxt(%r#bUB6VY~an+kFj?|60KHZpWwC6TbH|7}~1@Uxao{^4(X2Lw9 zw;-Nw%rp9OB6XwKcr<}9-I#BTknk#z7>c6042gZ;8m|P2gJs@T~0H##$t#67Lv$kdR8eYZxnq7pcU0 zqc;-Lgb$7JoXk>gz-Ng+GBzM-kIw*a@@c}S#xZUq$LCX{)+*MP)PzrsTN4P=gv~|< zCsGqO8;^1#HKEja8VPAasWCwiPZLUwLL{UKrN&b9B26eYRv@97P-?74FVcik;}{a! zOKdTW)vOm~{CBe0lVDqnbR?t+WkwDX(uB{94M<26wi*YKkS1(3LTf~1(uA!>J0zqD zTa6+lqzP3C(}d5BWx|GQ!V%DfZAKY-ktS?64sar~v)%ZE6R8Q?eVVY-rwLyh|8Os< z3Evy)+oBh=m-ybOT#E#r^kz@k?lF}21R+h>)G|dFL1#OXK@Z1Ymp4Z$cK$R zNZ5*FUcVdZ?+dT=8{iXH@H%FUN5b;OZ2mNMBVk!)j+IHs_7n8w6pil12W{wA zFyBK$Yp{m70ljDq)-aDDp*2|3tp2`~nx^p)>$`mNs+L*(eJQog&S*pLOQ~xvLqh8` zWLAG)O4wYBHndK|X7%@_gw6eEL+?w8nr%K7*F*11iJ5(o(CXIA@knTOYv!Nu%Wcq$ zy7ayjjmD=gy}3&>-w3u1h8BGyh^u82H=zS@g`4+ZCx>1!d-O$Ysg$>t@OCj%u zxfi`iH%#*cC$cV^<}({vPi0*;%@;Y5?>aNhiGp}l*rI-U--)oy>FCAQDSKz5WzObA zR$<#*lt5S&j#J-L=&f!ID6%(V4NUqr(|h=?vj)B~Y(R19(iloYW7xo4#aovO*}(iT zfv`6ZG%~Bdd7zp3Be#(X*}^={iG0sM3$yzsHiq&&11-#4PUOz2g<0{bm{GK|y24B; z6@*mu3Ul=qK}a*x%upF4GGA%tOipCJ(tP{TKe+U(p<#7WWHLN zZzT|xuPbSsy?k9mk-dCfR^^}FPX1S z=6+6OzB-w0KVzdR^VP{5!imgRCv(^5A{UgeTg(&N1fhK0VixTXgz|N(`4=a$#@%Y_ zUoabS_GHT6)w~S})wphEet(uHry%VP>s9G?2LqJTu*Zd5~^{%&6-~d zul?{Vovg;)YxY1wH7>*4frM(@1Lg@NRO9-Z#x4J2rk-`C1AH**`g+sQKbaU$jh`<_CU>3qxL z$d&TAc?Bo34nA&P&xx#q!_3=|P#qj*_7=pegTu_hNT?1DGoM5+s)NJKXOU1H9A@UC z7uCUG=4vEV2Z#IW;Ba#f+R$D!+gAslFjKx`JuOqH4vzHI!DoDRaFm&aUQ`E1`Rd>( za~9fA9emELKtgpe$27hdty3L*!R&y9>fj6JKta4Z_yUcOrxGuCwUX+f^db#^!OX-s zqzNyWk78R?2dffR2VXRw5;nXJrolWMZO%k5s)M;^2`6&4rrzaXTmg=UAJ1R-6WZ5DAN^EKOS^fR-O`I_y^*K8U?FFQrP>=c=)JdVuH z9P{b~!m?9rcH~6neF5dd%hv*G%gdK%~i`b#Q~Z2MN`|jb`a#;nir6 zsDq!FH7f+6I=I=)MM8COi@5{|)xpoqtw^X2er_fo5pk#v?l28bWF7p%%tbs{_huh%BkSPz=Hr}*xxwn-_vZ2h!p?(x%#S#cb#RZlgA-W? z_nLc=P#xTB{w9c52ltw1kx(7nYu5aeU2~cD`OaQ5h=l6kUegf7d**Gg*%=Ad!5@5e z@CP#sZKw|J^VPxqW-;1O9sJo>2Y>O^!Cy_~IKO88d-Ux2mS25!@K-YxZKw_&GINkn z9XxE7AfY-~VeUdgb+E!)-Eb+E!bk8M#MtV&oN zJYv>8!F$T<;MGtEe>X1|#C!kYQL_UlQdf_f%Q=y{deo<@N6j^8L+`#mX08{Jy%XXw z>Zzx_$IMN_#;c6S%&nYA?ft|2CV?>RJwc}lPiaq6WN!>llNx(Ud)ga$8r9RjQ9bP& z)zfA7PNwF?SX%#Dj6REU{l`m{OrB$qhe~Fn%Cypem z;MOT~RXtxdtRdV> z=BuVPB7v}c)v@qyhL^7(MfUO)BpWYZL5p^bl&_#weH8?)>Z>4V7b4YL}<5+9Y3qtvFtiJyW zLiuv7^_<9jxz@E8nT^bs>&usG-Nr^ zU#+arf0!N2S1T(!sTQkN3azi!*2rW*C||9unl%NXe6_LY9yQy+vNLQOYXG;AJDIDk zcaYGD{#t7n657eMv&xasPNuyzs}^fZ?qqJT)+3>v%uUvQB(#(1WKF6qy!JO0JDFRp z9Y|;=)5YptN7&F#<~C~-657dhvxPUa4)`d#b0tUcUD?qu$^vQk*&S<0zn;x2j* zYZnsQ+w`*9287L6m|yJ9b|0&8P!QVN+;3Gs<3DKK!EMCcU^|%ytw{-l?PU5|^Ei<^ znZDL?PUKFepYTv4~ z5y#uNWK+L9UCp-EU|V!&JKK7n6RE3DSfvSs>FP-8yQiz8D6%(Vqpa$8wnzEKa1_Py zc7u}87=jmXUFzy6pRPXd)78<|kK9Y@>UirkCsJ3(Tiv5fs)&hP zkgiU!QglH`S0`Aj4M9j(^Q@4`h|E`>Rmh3VSDr6ldDg4kM%KZJG^$>{Ci?O<(OSyA zWWFX@s}l&z*AyCOFJIFsvX`&vzI;vh$l&@mzv?~bZtJo^8CkW;1RbL%^)vDw+ zvJNir)xpJ9pZYA0cwT~idb`xhL_&3Nnbr0ZVMBMeORNkeR0rR*a*$9RTxs=gAiUV~ z670_QYO5Ft)xo!|6PF4bs)K7SqoE*F2iIBckWd|5Z#{{GPV^sI<2jLaaD!zuVsT_0 z{Ky)GgzDf%Yky;5Lv`>|tE7n_R0qp^b#SY7oZE=G!Rp{vE3GN>k}KtN>t;@59sJz7 zixXJ~w^tH9SgZr$d=tXsKzqNrAIa~HyS6$BfC3SVbPgnO_)lc+4QolT1{n2XAM89ZYRel#&&E4(9P*9oA>XJpp2^wm^a>#8cMzD+D2>J!OSj z3PMWzmoCADJLBM8f2 zC5^L}uL~5}%hv_Ush6({zI)A!u3a{Sxh{|}0U5|!KT8JpSPA)(5cY9Hf7R>tObPJ0$vR>l@~ITEUjX?Euugbh{3 z)^=(KL8vlbZC5`bUSkjEHeznD%6N^vB7v|I;@2jQ%Glnn zenPz7E=C(VA>L?LKOuIstDg`%*~(4)n!S77o$Tr-#7=f9+E8V@)y_dem9dLmf`lq# zS9=!{s*GLj>LAc6*bE>?!T-)KgDsZ@0H%>vU$k z-QLBCRN6c2eF=mq?OisW2R)_jMUlNR>_s-7()RL=YA@fYNzGp+xK*3UgF#C>?z7e?5B~C(hjjFAt9xG%+9(^c#+cn z&n`ehN;}M6i-eT+3Hx-q@QU;nN;|@C+f5Ks+NbPeNJwd)vDMp!4Jqxjc3UK*w9nhw zNJwd4v~xL;N;}$acL$3jl{VL2kA#$Vtetk3u%V|+C)mo}f{@Zq_9^WY`$}#jKWCg` zcjH8A?-V;PfiUgOx94yowKv}`;Y4chRQp{dq`gz^PX+O`cdGpj64KtOb~$>{sbs2s z7zt_bRQm*a(Wzvr-LMDisk}Qk&8NN7>~ypt?Vaw^-U53R+K~3n^l5LQPkU$E`_YR| zC9{3nJKL_=Q(Pfw?;JY=32E;_TCNJ``ap zdB5&G8dWb}@A>leo_#O(lKEP14@@8|UmsE~ynJn>$X>oSl8sj@H~R9m(U-4{zI<)8 zhw;{BzBc;u^{FpkW%hI2OXh34UBHRV*LJ%?^vgSyY`5z_fZ4&%t+v~_eUacPa)&*> zpCFX49k%h1Ae65!>}*ctlc-#i@QOso_*V zmDF_79^*arP9-&+>Zg*LPH(iK%2?YeK|+-=#o3L7Dq~&e0uri>b)D*`lDZC#kEarK zokm0X^>~%Bu2cO~A_-N-x=u6U<^A4hRl+J`z`0u3@X9ynDWiC$D0L(ULRq^^dX zpE!}a8gif2O5QHgh%&C4V zF)6Y)h9=o~N^AN?)%1<3Bs8j~6XvZ;r8S-ErxM4hek!T&xZF!BZ6l`*CsJt}Ig>=c zJf&^qY!Eiysicvk4ihtzDq~}(&2T|TX&XE1vjrigZQ>YDFd{S9#F@#7%wQ8=2Aeo@ zxs9xhO=(oUd^PputEsbyd&zt?bKXiIEMKWK&R%6qqsU&q(tP-0t^G>Uo6P&UDD*)Vde(~%Q-((LAB zBBAQp-IJDiBw!fNF(=R^WwwQ{&qV>F8_Yvpi9<3!fVZ0AxW zbc)P&(gg8pWwvu85~`Ki&h6+$wKCi3iG*rpwv&NgR4cQcNl2(xKH*fqgZG598f~an zKIv4ygEzt{M;oe@Py1@+v%XsSoYOg%jYgSQE1&b#%IBOcw4qv=<7`4gwem&h7!s=)yiDw z4q?M<%eYJ9&^RI~P)yi?yQ%`%xIkm=$ z@u6Bd&IxlOwRgPZBoL;(6G>M+?VUoAy)m5P=_;Kfr}##7if>e>_(pY#(~P$+wReh7 zd#Cxd_hsiw?j^N%wv*0@)ZW?70?{w8R?c>I3mdOi&UR8Ki18uqEppQH1R?D$a&}D= zgtT{#lQxMFnZY^ETux*L=lC)>$63g2WUZV_qw3{rt}kD6oj16b%-1|;Z31EWdW~}7 zovYiAu2di%$>&Q>I2u=PF8K_o28EY3bBG>b)+?+E(QS%HM!E%uYIn*Z!{e}#K_ z?+E(Yd7cw76IeC>*?B*KuxeiJ?BGOH^AT{(<<34%|%Q-OruPH@0EBZybc4>+|8 zS?luMVh0>u5bwJu2b?$(nm-4eRP>^1e!$5`kzdGee=sg1m zo%*xI^{||>Z;>2wIwPU`y@#AEBvf+`IYmgQ<{onXEfR64GFBz5GXCZS=WrWd8J~yB zc-Uz!i1*o6g>x$>a?V#ccXJ}OrNXKHmcpY>^|urrcOK+kQd>?t+1M5vL-ySJX{TMW zxMtFgGftb=1R>ox<5Yi3;onXU+K`g`?X2cRD#_nYyZJ1RRFc1)n>ms1BKX@$7sPv) z=~?G)K|Ccn>)eNgX2MzLVT?o7{H*goPNb4lI!`AMrX=T`ah%9e{m+@jiByvRoOh6r zk|ev|Az^cjt+-llB@$ASI&SI$)>HW|(-gNi5>k?Y`!o_#lCV1)2`P!{u17*jqPeLH zMdWwj(|`7hpN2aM2`P!?79$}gaoq2akdoAMk02o>Y2aQ&LQ2xeZMcZF1#j7fQ_@(N znN8dwNVXwq>XswrBp4wdQ?&L(O&E;-r z35z4=PpW$K+WQk#};5fW0HmhL7bq&6+x zV@ODCTDp(FF4`issY;mIv~r&pHe78cK~7t{bI^*?TzO2jpj{@m!EUXBFshu`G3c~cP5pPSqlkkIdh z-s~<$Li%&FyN8p~q;4N8%5>=I&2HxvEKX@sCXl&6I=MMWGJa5$1)OBAWHyD$R%rco zAh)<9I1znc1EjNC#K{<^&A&;?`#`$7>jhEL;J2_Dxy}7Xcq!Kb*#sorOVcNoM?sPv(Ak5}2w;TzZ zb1wVcdS z*1TW_Cnl01ZeIgEzTn5)O&8-wRDSaYh)=hV7ZDhSDQ^vqV{Q_*JyUmeg-XiAe4EI_j z^KMO2&cO?xX1JY^tU~g#+Y8Cic1cS64T>_;%}gNQLgYesHIi~SS=k3873}1IMkg(BUeSgC( zMnZjG?*5B}dis{z@>9_|Bdn)yxi=%Beyw&hIT5pk^>nqH#fj+YQSe&rE)-r~zt*^` zF%Dhf8uthi>ghXfB@*h_J8pclxE|{JTDK_@%JRGJtOUY(y522ELOp%o?O0kh%NyLj zTVzjJmOpV6Pu!+u(uQTZ)Ln~&Mx)Gy0f4`3i=e%1+OV`u?TcB*Eqs^y_Q4Z31C){#(zBX2K8d zNVH*uMgF0R4I7_*?)U^7Hak|lTtK8k1Kv-M9dU0qBD^Tm?jH+<|;$BkgDqLkN z>#3My=OJ>1o61R04b@!NPDdCgAz?gYZToOnh8VP0;WwUnqN^@w;%BFQwYjF)&e z3w%V+5*jXT*ovo$djGKs5bU&-W{5(q=Ah`JoRhh+0g8j zgl2CuvI+kkC3+9T!k<-u1Z+sj#X^f zXxv(bu(rBXA*`)*kI*>Z=@B+!H$yHw5}x;BveFgEU7k%pCt2wW8T5!Z@;yD95wJsJ zyB$ep52{YwHc3h_kZAKBybZKBMDFFqVWYwN)yE@r&G!-UTK9;zb|h)i6yiWH?kBHW zMa`0wK0qEI5>9_q%*=j7YAuJ;A5%Y%gimx9z3@n_!uykzfe=R$T21{aj(3F*5vkPx z*Ow$T8j{dx4Dh^YG#>T{jmBV~{tWi%&tRYaJVJ58dedZOB)tA%2$5Ru$s}b6^vfe& zFFfLnvn14up{yztPV`I4!49+;#|sk3HfViG zd^aaz-@?vu%i@i`U?cV$A47IFe?8ttkh*lCw%}nL#S#U;y>sb}womhfq&1vjPHu-2Vtiu)(ZS}^ zczFVe11XJ%z7(xL2CX*%@>#rj0%;CpYy9Q}(gw)3ct!$g2jq)*P6D|Z$j*2Pl0mJY zk^}iFz9WI$1?21a=>*aT$nJQ9UE+GS6pC^FKAx69*f{TvcR+F;$9aD|J%O-s{xP0` z+kmK>91o9Y=)A1ch*26WkT%3&`Ngym2mGS=)2+PH}xbwBR9_Gbz z@o&6C0%5th7$1^Ao&=IqZx)i_n4Q}7)+Z2_ojUc(69~&r-Fl&KL|e@31t6h%Fm>Ut ztkzc8bx#5kt9Ko@ky@wKyP1=+q^-M?lmf8P>Qz5Unf21SjXaf@_4*``dEjN%%jBdq zY2GVI$|4|Ey-`S>1@Za7%{?wVq#@0_eda_6f= z=sDqLLq#>OS8o%>Iny#(iIlQ9_wHt+QC9c8dF0hkkfiAlxs*rd!vo{N8+zHfv}TgB9j>R5M@BD5QoiDZ#-~mhoSEPrY@>R|L>wjg z|E#@xfKJu-_3W*D~`*XNw)InTL0M4D>KwTzHSl2E8|m*f_?R+3>zLMGEBmk>%J zgmRgfGCky8^o|<0XmX8^kjr2rSPIOV7y?SxF0QVrJm%R*mZ1iK1CbK#R9V+8k*orK5!4Ja3ZSi#?z z+y#4x*i&1nwm7+F$wUHo z!YHLAXjKmu{{_?X)`)7#$d`G%RzN8aGBx=t@V*pRrbJ#BS~06x$(1<9EQC?@X#YaAA{XFAP>7T4Pb8qqtU2HDK`qv7O8t}U8CUV zK7wssqadBk&rdi7=ZtU_B9(KIpKu=fb|Se#D?e~Qw@9h%bH3Z!q;hMMsmRtQHF$uu z5(>E0O67Je-)+ZIgU8tNJ*DE5ry*ad!RUUfEjV872;|XVGLtv?i)#|B$D|RonHbfk z!H!H)p!NG6TEAw&!A!EC^}`v^W5JP34sbixJgELkX?5f;H!YaSWC^r~IHpYtCjCY- z>!CgD3jU-8)0w=&(MWS!{x#oI%a-Pr={Bh0J%yHR{Z>33r}Pm7%)?)-glscCJ4s{W zlz~D+0h{t3Y_@wxTV9X-s5|Y7rbwB(NM>(P3b@MQ{oej5B_@ zErK5~83=RFkwBhsbAe<$kSBv5v&=XkIG1bf${_g&NZa5SEHmIpKv@E$y(@!cHINR$ zH7s-eG|4>Y${<0R=UtLGJx;-$wN6E9cxP8805fP@5$YWLjw~na9~)4<1v_1ev}|31 zyM;`SQoVdY*(_w{9K;yrCmJvB2A(Q)|;Z*quqe{?tPDE|PlhU>_lq zqZFGGr_>L_+C^}hFLi7;UJB0j5gY@&6x`q=xcby5c#McL0s)^gX4V! zwMGQz`p7XLBZGNN49Gj?VpQ;+qh6eeqzV#CkRFcWwk{TrCoHgK8zo!p_)1`hh`g!v zIq&(7l4YTs?;_LswG4V1i+`>gohuj>Y)xqeDuA6+;NhsClvxbBobZV$Z@Od+kluo1 zuolJ#wMGZ05)l!@HHVDgMkc%JP@FTR9Yuq*%EPF@BQ1K8CgMYet&xY=wLY~cwG>RMol2ogSC!}$S0f$1w;=rBbdS@ zt_G~3!5ZU?U_&B-_kr98S~G$@naH$e1eXXxd9MR9GlPYKWGg+x5JMpF;@$}_r%|L5zupbkd`rP0WK`8YnKxSUBKoBqWkBiie z1x&mV$b#TCp+%%E*jW&K`Xt5Y?`jmEPl6qpB#xuVe-i9T#EtwX!M%dyC@(=xcpmJ0 z8f<#X%RBaHp9Nc;7M25F^nejQe6pVh+c9|(&eHS(t;NAyCciLQ9&C9AwekZG!}{1D zkXaoZ!Q_vB;L8TGHn@sOR!*EU9?1IOaVA4y9Q7`c++fOIWan$B;j@8!8*Im9Gpr~s z1hOfZ$>bEYe#?Pu4#ouWYVXz}QQaEcD`aw%wQ!PW4QLgW*;YjB|3*#-%QTb1R&-l1 z;VkBY$TyJIwqRpHyfOdwAm7goJaZ7@1~NN>Em)>sCbc9xWGfn|cQ^HMJA==%%(^x( zlL9S|jO-K;J1jecomu7-5IoheGuVfSyYjXxIEiKCe#)-kXH4Xt%dX&eOyp|(u3!NZ zxf;Jac#VnNQ`i%H`5e_BxnB2kaDpKDf!fe!ZUvuzE)wVc|0e<=g}+#dZcsC^_1hm5 z07#1>V*%uTF<~&faP^KcuaUm-`63~IviZ^x5!1joDcpUTtY;V zYbn16FH6EJCr5*iU!dAs703y&QyA>WB!$U|;JZvdtPiV7AagqS0h4iW29)bS&IFe- zX)v0|x!@)yhkk%HB#^lf{FTWK*18lt$7D666<+}N--AgP$)CosGH@r5|AKcjxdeAB zR3O)bt(au9mZHAGg7<<-JTMxM>|`(iQUcfJp04CLLUvi%dQl6{pk_GEe@4(eT>UV(K$R zNGBh`xn41~mmo1kt`QYiM>3Ifkm9O#iQ+ssE}*1BTE*2`OinT>p*CRBg2^4~^Gr4} zDXG5BWI7OB5sFtQ2tqzL2g~tl_+Lyb=GM&8YLti~*Ck4;se*VpO;po-1oM@s(z;)M zU|S?kX$O|exMW2Uk_zOxTV#&9GEWQ3`GF>|@6c7qbRgnJtc==EkeDK8c4gG#Ok@np zsBd4sHHKx>*-T^%%c?7w$QYJWe`F$KSYG{`iHujGQG^RWk+g`kkt3>Hj>-*tS$vtM~}cMysmT1&IYd83FT3NWGdm zNs#=&r9lDZ4In`^mr03N0?J!JG}5=~D-+qvm}))|x0kUb3CLc?BeIvV)ZJ`H z_A-{*^aiCRdl}ocBYTSawZ=`KZqmqyVVndj8*!* z8K-;*5v!^GD~R`{)KYKy$Xt-ArJACbh$W28pxJS4wI-8YCe0#is}B%y$6B@34ua6w z?=!G-ubL?crIr3Ytl+6rS?d^_OIZan_p7@DSZg*F`?my~P6v{r9%gb4$TlE#)CDC` zCO=T-<2dCPAobLICUw^al;43gP^%}946enU0rIf=BohddYDS!L4M-z( zFO%u8-h!mDnpleLG#U$YkOOcsMD539I;@JIOfz*l6I`n-2QtmoV@z!D2W1{tFP9-Z zxax@H2~{skWClb6$&+dtlh2fT>->Y&3Pg(agY`@#LsXSX;`0IJbx3Qdn#N>0oU#}L zWSF|1$zPBbS{$w(6eJdqW53~Q=_LG@SU`^bhO2d%$g$sWwRmNckz>Et)f^^r>^Dl? zD9EN_O(A8J9;FsAX+D_RjZvyq1^;DJv7yTX%G)6KrkX5BhLSsyM&=o6CX+{i;QDih zn#&{tb0Qpzj#GzJMLQYFUr?jo1v_u6k5)sHrG%l@O$RbrZ7m3u@<%}4RX-x441zKh z(&`E#@k`Qa7LcW`WtqKQB-zWP9h_!a1a`92M}nw5Rw)VdFPs-lQ`4Coy$O5fAd{_D zQAy?i*unqGRy#5oJ(_Zwt@aWmLwPZc)=9F}5lnvQMl$cK`Pkf!{6%GFP3-JTPx zLW^A!$d_t1lM2v2KLlizdaMT7!4>jHfUH*2?%3&YGdlLfc)OKs0*0L?|qxPLJ)6tZktN`-QG^$_W$2Vo=D3ZAO3$?-d;qe z;5HA7YV9cE;STjQYsr=N9cs&aF&f_b{7&_CCU-$gf-94|irCq$z9(d;hU2Jdx4Kr4 zSVFJMw43vz`YjQ6wDY67i!I|CV_zu2pVZSnJA;AjQM)En>EQa<>p=deZWn~cNSQ$P z6)BzlMLhhqh|I4=WPbZUk^AqX_{eqIqFM!NW1kGJ8WpHLn7r5scBO$FD3aDe^%b8M z#`$0onM3LbAwzMV1bIKCP7x%QFn18_e?j|mM9pE+1ioDC&5x)b5pg4bL|r2Y#c&$f z`CZ*72w9#9Wx#($_=1R=`{!A@b3T>Pm% z_5f{iW}Z;9n2dx`0q!!K zP-imPs!N$qh$zqT2;_vig-QL#0?JD8=Y*P=f*y`n+A%q)rU~NRM?0nVVi~-ji(02S z7cuvy{~2|pkjYW-r0zP9Iips3P(;kV1$kE01<6v*Lf*dvnX_s?BJO?a^XlJ%Q0Z&~ zne*yRANdK$1-0BmWLd5`{G(b-ERW%d>zb%=g$>2RS;_D z&p_%|)s=#5DkgVSud8R7;QBMxmK*B7OypSfhHBMC%bQBek>^dd785!0ys17tAm z+9OQzptfKy9MGCG=>+!~FM~gET6-qX|45_3;#xM7i@PP+%VY}l%jidOExDfXr&!e( z?GqK(mM}RAqYJFPCA5C^N#^>zI3?~7lEel?D#G{&M}zTNjfO2Roreo@DZ#OP*m8>MUhCG3mg&z!kI? zn0(`s{({h#g88YSP4|&1koOAOYSwz}gE%D&`iQoUR}2$ofCvLIPXZScAIT3CZS4jVS)XfbcRY$|jgOagwYFB4$#?hAiL%;SB_^^S*49EyWIe2{ zIYgAxwdfpU?IJO(tu-YXF$MYBS#Z zdqO+TMBYnksr|!5uI{$fiZvJh1mx=OlUfoJxw_k0%Vr|y-EFj=1j$k|;S|aah+!M; z2oZN=)lR!92>IL$*6Z4771Kmo3Be%sGS6xnlfBIy>R zmZLzP*QPv9xsbc$-L$z(?uA|ic$RV!$HtIwmfk!{H5 zK5#y>%wbp`(W>r!hSuPh)ySwh|tZXUIJw&xg;H{*;jC!)Lif zo)4ex64}~(p*)`;p-ks%!+oSWkcHY9AHkKbMcO1mVgcO0cmQNR(_U^T>V~qB$Ht#)Gl;~$ z2xmp=gN!7bO8qqz<|%@F%rYB)g!OPimav_cH(~8vkTK6ut!u~eS)%1KDGlpL?LcO! zc8tmMux5?q3$1Hs(s~nQo(Hl_%VaVXWbogXYfZb7OgTu42w?b&mDt=2*31v1i~vA( zGg%=?8F^a%OP9#g@*a_=dqkdu_lP|A?h$$J-6bXDx%ZW>hw@az zS6V-jcPe+x`&ZgfAHkLXue2qC!~!xJUu)}`$Y`w5w)(VQf{3lvekK`3o>$M+lx~

    }^X*Q}mGD_)+Kk7;Q{Tz_KP1SZm-n6{URJR84R3%@|A%aib1v<^(VB}!`s+>6`;G6mXlCT04>DF=WY)P7*H9cs&QAcwWz znWVw`^F<)PYo+^;o$*k|ko=*gFu|zC9f9{iv`I|vhnZbzASbi}CYdnHP6BdLJIN#) zhzjIXk&(k0?Xr;ZMzCkJNqsT(m?BSupV9U)k!QcpX%+jCj6CUmQHwB<=ejRx_Xv_7 zh);z#79jP@S~8PoVH|!hkgNQ4=a-p2hQ|CiBq_0HD12Wab3H@+B~Ogs z)Yg+_MQSM_`Zb6AcxgEh+971Tb|Vn_S&$s%6Q~w5?H6* z09vI(7nytmqz7mvh8`P0{%j7y{Q@9mLhYE8aD`9`lhRP*4#Cd#ouQsgs=zMQK$x{Ag@!PhIwVdR0d^{dRx-H*>fsn5RYLhp zl0j<{kZPgROy+^s`#{vt=z-)<5VSr95)S1t`TM0fWf>47behTM@TIH+Vuj)dkrsX_ zF(6JTRgh^4ekuP0a(9T%DCQ{VVaM#7g}Rry4?Khmf5eV7UU2dLfNTamafWAPqt_ zeIx?p;ZS`hgZZmW4W%);1HSH>AoFOb?NG8j79#c#kY=IoOwNKom{wY-$P6enLCARD za*I&*FtkH;zA{Hr= z`U;XCko{oW&;mic)SnG$uaX_v4?Z8N&qVfv>7mw4WIvc5vR)HfZa>&5lt#qu2RntP zGLb%a3LR!5eeN8(=XFY5`rIYdi;3(9yN0GSk^Nw|&=MxHAM74FBkgcM*duiJNU|(j zq#mIM1<7|?q@E#qGv8~GUMSKcy%2)1W8~fYdM|`NfO()SL0rh}6>2Ul=P2zD!*>c_ zW$#d1CWB!M7<5hjPB z7w!w>_0WS%9QN>yP#Tk&U>SS-QK5cJR)b~i@!t$hWzrXX9tw6whgLCp2Yg1EjL=>t z-$Ux7KxRznGLt9R^4O3%iadOQEoX*OnREcHaiBFW)RjqPSdE_oWPE5elkMO$?%KZ< zTEHY8@`YqVXbY20Ec13qj#6&GyDQi`Obp3UN)Ll)RoCq$i)&M zQ{B{4IrXg2J3=N)83i7$0-3Ck99jLw`FbxTM^^uwq>*x`A*3l#KtfNO{>hoPYvh7{q5;+6%h-{4)N|`cpR`Q7? zC1elc5qXE#BeH$=h-{xfb?wMIyo+2STWpWW_W3hcMz-OfyF|9wi(Mk`@Gc4E`^sxS zlL+Q{Syc;yLiFK!6^Du_20-5C1QNAMi%#!&IGXqjaG0n2%zTtQ;)J(o?P zV@%`oPTt+PVLYRNm!zl1i3T#!Gww)0D9yN}@7&i+vKabA3IZKr_k1_HV2q& zDks-%B*`x$*KH1j77IK1fmX2If_oDOLO(Gn4(l!WEguTe>jZH7>^iNt91fjhnFg?5 zi9550Lr;%Kf8h4?A~^eW6iz;b`Z0OIq;;EP(!&yRjp$ft0n6aoOVlq6U13rh_H)s4 zVJPt}vMg7q{tS&{@&~V3{TW)tWUfofzl~bs6g;bjd$oUtjti2Zl&A+ISn%)^=PN_` zt}dm1I+QyRwK9~4K?eWpbm%gZCg4xII3zE{BCpVIm_^vV>HsdI(yjb07S zWzqxIzR;ilLdv@+6HAb9Ufl?(L;~p(=v3Z~&=4kH0Kt2aH{ihwp%tiHjn*!1h8|+l z24pZ7H$z>RB*9HCOe-$@9+TRvRU-T)lgq4CBK)%;bmk4yhz}=bQ7(={{b_d?NjoN^ z;QTz+mW1#ECUx4;iOs}t0h4UVDZZ#sHr)C>vhzCE!*b!#O!m5D9g{9Va8ntZ-TmY4sl)PzC{U!m$sLc0cSosWdu%|V&`z))BjmX}CYj$XqlFPhcW*@mM&YiOfawB0e_{A7vT2hL#pC zH;+=6YiLh|Ycr8+XitS(Fp+C$PlumnBIlKD!~F!w56CsNcH#3(j=+l9hY+z2VOlZs zdh-rp21ZAeUM7CN}T@tXUN6V6=%zo%|@%@(f zBq<^97zR+E?JbXeBipEXI`_k|o zUkj~-K6x;^IR-n$;j&ERE1=86m6$xRpMHmBc{n5ptgFM=Z^mKNN?}qFcFk~g?#u8q zOyYpxy4K2YZze}T3(2am+@-4VC+$+L4$EDt`ap1(>Z|YvtW_h0cGlJu>6_MuKVg~r zkX8lA#oBN#lNW#lfvgW7X3`3X1td4Dufe>-ZXl3aK)xwrc|&-(kfAR(1!Oja#|z@U zC$llk@0hvo$!v6G?6ojWTsq+ntEPxyfuM;Fk+0zxi z$j&fh4R8067eVHD_#l&qQc31S_?(ZR%*k+EE|qetS|oESoa7@Yb2{uW$*2miE&(|c zuFK@t=ZX9kZowp{Hj%U8bSCq`L)`N{7w+vN{lL!O;h{`a@DOFrhckQxWiEuLFi8Oq zQRZTJhL51kKjBZAya*m5xfEW`Bo919@-MePIm$@z5Xt3m9?Og#0dpB3SHe4(bcGvi zBY<2DAMz2D`7eB$$*IaDb1i(sM^NT^xb!y^)h&?sH-X#;C;7;DAn?>ale;1BxJy+` zr&n!r6eLqXri5ObWgdmRqfEU1q>rFXDg8wzLm}@uK+5P@J~A6fIej&goe&L_xl{kg zM^Gk7Pu@U2PlWiOOl3XWM^L7!eu~M@UEstJ5LJ)cNLm{k5eey4m;}LRl+pFtOsx0d zjTaz>-q1&u07qr%aRy}SN^-Lz8wFxMH0eM2t zWwHzI1|oSrcdd`Hc?vZA!5DO!)$UeXO99rOi0Qt}VDm#yz)Qg?Ekg3)+hFYpnJSSP)BK6&^z z{H9wu(CVzWVDe^rB3<->Og^m$x81kHjW~TNlb2@(l**vhUH`#HbRa$TBTNR?fEz|@ zp#{{n?d(MU(lj6gblGaD@PF8{4b-D7^AMb=XbW_Z-jK@FlGTV zRo};CR=AafnaT)p;A(i#AyWFhpsdQ&FdfRqI?U+>1` zNf`520kTk^#pF#WcMZrVy0YsI5uXKcYr_KaslJGbeK-6r9+1!U#N8;9qx4@CC+>tU z)>S48U|vucWR~cy1<6w08xO0yK$hy0nCz((P?`xci?u!u!7B%0ID4sEKa%Auumg@@+68SiT$O?V$F(O;xYid~tBVoPIA4FbyfJU$@^`T7Scuc!WAI+p9 zlhyhpCKKViXbX0}(pwjjojtSQEGUpQdQT>8L1qA~LaftoU$jXZ2(HGA8n@{$@RoiTw4At$LM{!g4_V`o>m$k|bSeEq9y#p&%K`=_`sd8vNO& z=P~&d2>znV4!z_lv_me6y=lBTvvtR#05YL}q^)*CX ze}2`|{=&3k0qIYHo^qCm{OyJ!Yg%WESU#`+D`Y6G6@@Sh(92)CHLZ(!IuSRmi~5gDWPQG* zA7Ucw^S}BzCg=}-r&smVe?5QjS68m;`y}D|{Ga}ZAmk5zU;pX$-lK?8xuy zy8b>B>Ca7lJ`?GW5?RGW`co{De&tqwibW1f!u}MGoFU?-UOaM}ict`vz^N`jrjfc#~jN|Ew{P%id^R;9=YANd1FwMeEQ-nXnpW)X2~lolxnpydqZ zs{oA9@?b|SQX!7W8Q72e5~2}_=z_!oNxUvPDGZw6`9IJ-gt^e z;!BW>tO?Ob&yqxBOB;=JO&}tF)u?);w;&lx))z3k-wJQtN5(Um4g}vBxI2>1B;hWY zb3@*1MV6OBJ6^<+BWnbqh+PGloFp^Bfjo5>c-GX=#t5YOm z^&%;WlnWWL`jHc5h{%XFh*)Kb$cQzJj9?-o)+lnEiHumINM3o;k`ZeZ$-WCohH|Mo z{Z>?JWQ8EHfQ(_|NUk7RN^E^V`3c7AjUx+_P%B62c{rey_!CJklkTuaoe1R7BHvDv z$d5wCYmJ*k4zO0Y-vi2Bpw%RD*+;@anng-iEO|?uTSS6Bf_1fJq^6G~gVs}#R3B*w zq)nuakF)^tY~&>$=?LVx$ZJ0G0+7y;NrKP~*&#rBMC?i>!5^=b`$QTNaZ9;RkuvQU z`G;j>3HFZ^t1Rre_x=V%?qVWKa8N{NB1>>kq@W6E$r2n?q=vr|868BK3`N%GArbk@ z2(l#^5qVK1JJ=p#OETh?RtsB_*CHcWMz$nx6e-g;B5Q<B3vO6A| z5UHXw;r`<7h%E?>$8b;l?MPEWyzhNtWIAcN9!`#I^vPfgFgdcFWL%%$Em9M*BGn_5 zy3ECUk%ySbTuh5R#zfYHoJcz+GG957ErMhyPe4n12Shw4vc$MGr#X?XCKAfUtUqCn z78xc;VL<-A-iMKiJ{hz#BQo7b7J$}_NbYS~vm(2FGN?5>a==HHfY$7Y{MD5YUZ%d_ zqgzOC=pE)nP75t~*9cC$V1F?;a?MBZRLs0cy5;2p``iVQMS>Itq~(Q?Yd(UOKZ&%q zQLE6k{Ar}CkD%p6k-dUsDCzrY7jJPS$w93QC2}7{b#Y`MlUB#+UG&9~nM_W>4juZu zB(jvru7O0BM)Cy7QQiT|Dl@tVs6CNMlyW_Ew77gXCf`HkL>pmw456`CP)VSmL#27+87y9 z9WB$2#tum9yT~j-VoDz59pe*=9QP4SYjY%}hVVy`X>Ez*`3R=Nz5v=n&BiTOk8<5?RJR(Y5dw3rb$d8e&Ov=6(P)-8* zDYBPI-$StK4`ff|Ad?SZ4*NHdy^-=YOJeHE93@V<4&;|eQzn&RC9KqOxVIG<#sqUw z3CO`Bt?1!MCdr5w3@{gmBdY}Q%Ik3CrCOL45scxH$Z#eyhQCKLeFS58G&21j)S}YS zAoapXVr@Z`Wy!Gn2INHK%DqG|s+jtzNJ_FG@yfq2(gB%Mk%of6IH4)r84+X%lS6PD z1eGGCV>yL|-n z^>5@KCbDi^jl|!NcD$PKU!;YUIY?n^n3u*%238nfb(NO;*G;hGN4UBQrei6LNfh82IEuKILxH;mvHU?WXc(d z50cD`d}IySx!Wk;kYsw#f-}oN zY8q6>rnz;jwsHF$E!iml@U5vQ8_FX{sBUZpJITgrLA>}pXj~)W#^*s}P%3I=D6%Z- z8q=8!gYv@nH|iSa1o2{6-9y4wT;^iXENNkE)g>Ej=j3Ld4$Tsr{W40h(zFHdj zf_UZC(f}jy7b_#{k4s9(`r{F4`6=U|utRY^3m&#MPWs3dAZ?9ukD))Ygh4s*f-d|b zNPD9)lRFzzU2SiKi3G|_q*IISjVO~bm*|{Kd*fa~C@r+y-e@RDmNFS$lnSqf9SviJ zPX@oi&c-Gm!Iq?pu~(2BW!Xn?*A@KfZd~yZY{yO+inOja$5Q|`OqzaH>#v&gH0U2)W7Q`#%*NoGGkUtK{yk^8bj%kgLZwt2tyTVv&q)|$cY0C0m z0VNq^MjDPFG?J+USO{3*)cE%X(nAG?a?yP?eyA?*dAl|!kV~jCmN4&|? z0_==6=CX`@lPA;ICP)?}LM!B%#t}g%7tg`BG0r&SBVFNS`CG;nA9)%qPc+K45IGfn zQx_mp4BbZt0GVdg^^pu9(~Vc3p!j?Os|Ph!K`UuwFp;k_%`x6)lDkaGWHEXBV@W<_ za%mClKtaUk81tAM_(YP=m^6W>0CFJpImRkMyok*)eiZ~>P=Pn5W`WFHqe@Hk(0i$G zp3zPaiqCwInPo>5o z%E)9HnbvA!G1(FI=Xa1ja_H@%zd*w)jXTNPV+mv=)(%mtV>@<8CJMyVz#j&qRJZ+l=~5 zu+BSRXPePf5HCL4j6Q-;d}@Krc4HyS$kN$iY$ZD)@(+N_4&ww7w}$UBF0z)a;k%4# zPkWJn7_@d9bp`Pv|D(}T5USx#LFPwesUQ>$Olyzv6Os5@T%Uh73fPWJ>t`dbjh9wy z(E6XD3*x2qi;*ITSD$||8uEl zFg6H6ElGRu=YVmHWn@$j8l~HcG8Iwn3^E6eppWzga>S_RBd-Jb!}yd){8MnZeKYLc zoHUj(!E(2t{+u+vW+Gp-J85iW^6orp6HXeNiMZeLNn@`dUfnopToZ(HF&R=nWjxak zefFYy+IUwGifT5fSArt?M zC{q!iuYp`J+6yv1UjD}SC8G-y>|xRJCF4aV(()x^pdenpE*Uw3P@T^Mt$&SGEF(+j zvav;wu}b(6`29hUxon&gWSa7O*?{s+0M2U}`m^ZaG-WNw>;{>uMy4R%sNg^2TR|v3 z`$6VEW4DhS1#;cE=p$!<+%%Hfdv)V7kT^4iNc{WISz}*W!fYsrm#-3LcR?s$#ZJNe z(;Uq*GG8UlY(eOYy9eq|N%OcMGsSD!yQ`LNow8WSD9LQ8Nd$Nr5CuqJ)c7#7TA_|%_e54y_ zY33dxZu_j8zcG=mv2Gq^B6|?sJS~Xlk8a-ioXCanryp33m@NeHzBt3|BM6n(V30A) zw~4r|v1MknmTVy{bDba*`8PnzHutfN%&B9ZCOaahXxTAKKQGGNZF{SmNrHGjS2ybm zLY6Z@tA^QuWu)c1&3{NLE*B(Ad~pkf z%r!x{-2ig0nV9a?gs*_yXI2-4Y64n*z)WT$Ek9t^6~wdrfSE}$!e{K4Q_QJ8vH|SW zF;B7`*)KOR&ohzzas%@!lS;$r%WYuBb)u+Zzq}LdG%ynd@uJ$myk8KC>Rym(X!d6r z8P$i)Y_cOf{0(FtHc$Hqwk?g!M>|tmaxB`|Y(d1;YHUvM5!7m8##pNs_qol?oj#dO z&@(nOkNLLnETc&A2X<`irm>hU1^d%~DM6gpoOHmjJnwNdfHM5>W;5 zqVc%dpNY(S3v;d@w3l=WQg30F?JCj|`NCDBR%SIp;8*z?!C5|#dD^s@1XCetSd(gN zCJO>LwP9rmd;E6h!$cA`!znM^gKlRwW0{gK&m=!B0n1c}GiK;dXY&}7*V&)W=4qdnnB$vC-MpxZIleiPh%#?3+39Xh@yVc8cXOtX zpjHoa18d2VRWEb5Pv%a@X)m+DM^qra&EefK^;p6-SQ)4Rq_6oVljmkh@)na-)8Vyw zAv0AFDvJjNImI$7;jSXe^fxcurq$p4&!^Q$$kgfK<^6FWgUqHx;^laLnAwuaOXX>V zKg^{4!SV5vpQ9T_!_0O*JMF;EFmo_#$==~L^K~ZY;g~sY?w~|3X-ZVdDt#V7KwaGM>G3f{%jsclWGndJPar8=arkU@vJVD6(<&D`SCLOavUgRHd-PW<9`@xEDjo7Vg0 zUp_6Y;qRMeUhwJ$*6ruih1c&i1~mO17#ei_i3W4^{Rcb6cU zdFB|O%o6Z|VU7CKEMOw*^QY!9 zLAPyU8 zf_P~yF-J0y?fg=6nIPVXda0RDc0?W918FTa2lS@2WWH9L!kD-OrnUbHs=cB`Mlapf9clvd}VGCBuklCKcJii55F?c3PSP0 zU7@w+H9@HV!e1;}YnJXKa-r;k-l}XqtW=nHF_A6pIqZE-CYG89LFr(Up1rX*ib)r(QjBeOR3MCGKy{L&7qh`$9Y4 zndgZlNIRR%Yb+z}Y%(9{i%~5MNITz~x9@SpOxj!bEXT~Yq~%)PY^JjvX?e3b^)|~t z6tTS3+%9CO+yl_EZ#A#_$SF7(yWNcMNA*XZrrTkrGg;PzegkWlxq!(`CcDjjO!~lk zAoX%#<-|me(P3m5_HJ>A@=>$Cknu|AsM&;w>+>aFS{9C(OBloHa)C~eIZ#PhkdwVt)4&xzJ1){;Ia zTDx!4O0*8K4Bk-3lgwqTb3T#@q^zaBhPfc0`@(pmf>l$H!oc>0@Zu=Q+{sZLFQVEL zYVTcEs!t1B$h)i$i71VJreAGNvKFu%*=8nL_rES8=AJ04WYIXhFyR1<>#){UvK}Xy zKu_MsuVg*TBTbDtXd;6tqi3llaQ4w2;~%gHmvGz zpiC?veKxIRCemlqiW?LDiPO1+j5v}s6#JY*;WdZ!pd|$!Lgb$k$pi8t1T1R z7u2$bFp+)1eb!e}Q*Tnpl4japT;~qBhE_8_leQahO)28~J8d1tzj?G_z6!8SmDF z$F1VyQER+g6P~nw6r?a9qx!UUjby}F3+u+yR)@DxE2hY(wy~;hDj|rBYFld(%g8cq zXBD47TCz;rTeaRMBFi-0DwrtzantH-wSGs)xOwkl^&{fe%r4dtCi1)JVr4Rsb+wDN zd=lEpQ2zae&hmA$5+@VEGQ}}%H>;;0a2KX4-OcG{4P+T46@|=QQ-nVOS)aRGDNJO2 z?qRiOBJdi#v{UvKI6Pfn`*6DZ2vaG!WEp;jp8Rvmk2PQJkgRE>p=qwhFqh7H_ zW>LOAfUlrF)Ulz~3PHTDd$^VBBaK03gjMD}k(L|h*DOnrLO0H@S+z*Utz)lQ$xLLN zU$gFb|JGcLw5l_aK996|GLiXu!$L zD0La3^GL)&%*5RynqE&r5$`l4<UVH|AL{euQ=k-7=kDq}`ZrjUpMhOy^q@ zn8vfS6XM1FC(E|E3UBeM2>V$+u20k@5N7x+X}5a(^bwt6;>l#nKm2>M~;6t$Ufsi0!gk3o>58o>9!mtjmi~ zD?`D$fpvbrHR3ZO*oxvh(n0H-ATjs*I$}jXr?h08k6QAjP#Nc=Rtn3=I3Kf8naDW* z;nuO`Fhj&T_J@@xWHOYcPr@y1Ajhqli!m*)&pm173gVT;Nvq-#lo{`SJEtsN5bxVL zWi2G)mc^MO-_98;m$hVFJ!AdAq$SL1hd_MJSbLdZR54|7lMp)kINR#`r$VU;p__bUstTrLWXkM5u$O$YPAgQc%!)g ztY?Y1`TEZq$TIR9{Li|)0=3{}yh||8gW7VvNXvi2+Vmw^mSuXwI>tnn;0;S(NiwpO zZ(1Fg$hxZ7*-T_z4cLd7$eLN)wpNiHSu;!8qnXHWInn<7E0U45rL4VDko*AtdL6EL zmbLSljNC?N$jjOK*Qk{r$l!Yup?QcoTtz&kP)NOkoTbAFBZU4bUrf%DJd~<8+HSD@fWL>Rc z9~2}*83kWcUx-gl`!o|d-?_)Go`-h4`Obaz=gtFNpW0JY*kZBGY=vUbYFf zyxU%NIbSh%j#k%>k&GMFy7pcsGGBG=w)w)28`XyPTY^vtVqI-$PiInfBi&4V*uH(; zuaSM^HmyeXStj$~oDAAYEuz)fPW&EI&rR3@i46yw7AGXcdF=Mvd*+J~9Z(;!%5%kJJU3rgqFnUIm$E_HHKMLRuL> zn%if5WCD;h`!bUVq&^i$3%gKE3)w+}GVSfAOlHBiJm!Cj($UWL zkxYS`WuM z<`G#}hZd0;?h;uuN7zZivRCI{wRH>Qf6B*TocGq7h7c#1g>{9z~&DZDl{epOP<8!;Ik6=w$Y+oZSx7?T7 ziTlw`mLkUhOYKx97v7=Y>{w<`5`=0v){W(Mm0u}!nTr*+&P3*7g*}3a%*B^>%5S&k zVzqsciL4u6+jkTQ8P~(F?J|N;zVI9T+O9=1ZdBLUtC&cC*4nvDWa?|}3I`~4>0z#& z%tS`@8~bA>(w~iXfgl;mN6@C?D0idX?jYL9Q1FHk-p}1=9~Xo?#IrqlcGp9c7S?Bs z*mw5VMBIFBvNy1d^m&uLg^BcVlbv*!?8sc?+p7i1P;_2T*lZtXg01KtDCHmQDo035 z=4+>&&qU^Hw|&p=C__FU0k2|1V&s3dCkc|JygnOVtv`ZfJ8Q`}|7O2%OxSTf zEU^0#2}lnM?16%0DBZq+SsSb#6xh}OK&=er0_^4f1$jScX9|)fRv7R_vZM9}Cb+_Y zZ}y^L7#w8IALHtCJ)n^M1j8mWlN6g58se^zfoRgo*U< zU%SmIvLijbVviIAUY&yPqWE7h*RwwsgnY(z+H3YIAHi1ix*hWoY>{r-dwm4^rhxO* zX%P*#1dBTzh`8T-ai_@{A>)>538y6!nXeMg0wywFcR0QOA}yJ(1ZVJBA~Ij4otc7o zwXU?Y$wx3>r5)uQX~{SzIs*mCP!`RN6SwNhIE8-;88;W@99q3BbbT)8ls->(q|fCX zi;48PyfaAxXd*Q^d^SmIG zQ_Pp?4D^vZAsV(bNf2*->NtmqxcPFN4mZ%US6)%)1t!wNsPhUFnfItOnu#pI>dsUq zvb<_Ka|Q8MsP1w83&0T;-^}h_CoWD9H}dy7@l0f`yVqGRNQM#zcMS22VzN`bIB7`_ z?{`KrksjXfOuB<)q=yeUx6kYzayAJWieXiV*h9`4BJl(E1{51eJ?9@LKf6RJDJ&~; z2fUt>&P2Z7ThBQmNQTn71?^=wbgX#P%1{!aN5l2!hRzZ}Vv5{1Z|GcPBKOT3IS(a> zwBlDl`-8iasZMJqa^F1Fx&7_pREJ(6E_C^)2bsu-r8|!@kr7LG zo?;>+mhPl8kr7LG`Ves=*2#H;iHuk$XCf0Bu};p1Ok~8mIG+ka5qlis)78l*nLu@T zG4dH8J)G@KUU$h}wj(3f!$~Z2YaQ$5G-4tn*2{T`iHz7w&O1chI@ZUT&O}D6kF$`8 zj94G%OC~a6eVmOyOPQ?Hj>YQWp;eE7cVMm$3;^Ih1OW*21GRzqA|g#R240cRrbS8l&L@_ zI(G}=MPrilkRV>_lbohZWa^WPq(0f1;?tT1mM1%ln1mb9z4fU@w5B@egiMyQ^D%f; z8?>f6RyFi+n(`Q&GyeiemNP3z2ON>maS^&Ppb2rpGBKw!(@>k+fzz-;hj|<8Veg1#V%_c771VEBD#X z|9k{zF0-BEf>2a3J|8)CHS~~349GkuJwyZ}hPRbJc7_O&AHZMKATm`)nf$j3$6J2ui)gKPS_>I3t@X|VCNizuB3ijlm+H5smFtWUBtt1R3}#V~i;Ygh znkWPBOya4m;?FMU{RdEs$_s1eE@zD(R1dM8-|eKOkmX%)cj-Y$>qln`lgV(Z3R}oMPMZf& zCg%19dz`LB0-(aYex>4LLd z$iV3=SkoJ~1>SvfIz5VZV#-7Hyp#kM^*s&*O}xaYk^#G@_gi5Apbe%nT)DO zc5XN&n|K~#J-q283zDJi8y}~<3^`SzbD5w&$H2p4(Xx-->Q9NN~COmlHvAkM3ZC z=Oq?2hF__O9%j;hNI=O2nN~%7ekxj`4Ovcu^`Cr@c`90&$^9GQt~tyJpN=Lo`8`CW zO*Ea!1+a`VZKKnfw1u@MB<-T71<6o)!)o(Zu>4Gs)Z0g`4wyRiAb5tVeRLcVcipdJ zRK9mA&rx@b-hPg;V{{VRk^5F1qw>8^O)%*a9l-?8 z9_#_1yG5sVAsIYtjih^Y(F-DCZYlRD62l%vV)#NdrI*lBWDI*nyE2h6d@(wUiHu?I z=s7{W7`{{_hJB;e`=MnohJA~~uz!&l_Ae5{{?UPKN5-&!kr)n&{w`#^7!Hbt`%`>m z3_x$bQB~pNLN5nQE4hoL_rAwr7KOPca$cAgeL!)Gjnzq?myr6zW3gbnK^Uj%&B{J zZ`IdGM#ZpS>h69r8g2~x$HlOJTnq=MiUCr~jp3lw5R*%shl5kwGf`0;k~)!zit5nR z6OwpQeIqWaS*a;+U|C*Nv*MyUEH0|U;-We%wFlc#Q5_Z+)lsRxOBpY!qf#rqNfA>~ z9h2IIiHho5sbxo!jEd^psq5d8@o}R%E;Z$CB;M>WF4c-76D6V54)(!usfUTUeefNw zsdr!fozzpTrRwz#*UP)}_HHVjetUP?-%V{cj(k=-`gc>uFi|`DywtMeNd}(<;QoD5 z>bQ4^VBHs-fE`(Cg$YEk?ntJm&XC00$IVQACb2LwH=cmn9NRniAlpB z;47e;;62vV3b~~90F$|?E1BF#hUZ8iGe5QWyCids$ycd0^N8$+`?TfZp3Jh;7EETq z)2^#96Md7~m&q&`=YI!(R;DhWNLsBD;8%NqtV&IJ4+%U+gSsCE@?&b&3?h*Z@MZ(p z$xm(Y0g>NZ5m}#_J`0K0${SM$N#bSi#?-k)+&0}Dm%W?gvUhXpBDSMid2?L${*szB z8%y^h|4Urte~F9y_S7k)B~;{hrlx-=?Fbe5KT=OHQIS88I^!dfQIS8InlXoniu|9c z1DL4DpGuu6Nw(OR32*SjGqSU(UozQH1HM-TasE5?2PRn>k@KnBn7n=;k$+N;Fu@i) z3tAUab3Vb+vjw&wl1r(DOjHYANo~J?WK;`YORc(yh-yKhSzjUXTCk{gYkL*dZk-2< zYPZgVMYSQ)j@Rx*wRucb3l`UIof%7MiC<&sUJI7e>PzDJQ%Y+VM+QjZl~qdng@~JD zNpU_WX?s{p`I8jqPgzYpHB)yB%WBOQqlasXs4=0eCe{+cF#-F<9a=LcI3^&esO3nK zCmu?I`?kKoB*_(D2kEx+)7lbAJbyZBJ4nV|OLWvuOHvSc2iEf&w!rO2?III=qKfh9 zsD<`Pe_WqC#f<=+RK(m{XPq>MwA}miom9l!8@A7BSyE=A+)X4yu0E%=Ie=y5iOO($ zBn3!U?be-LPwmJdl=1ptPp#?^Bwj}K)D9ezKFi%7*5UV#^BnE)-aPNy|D( zW0aQg4_fweW0Y1~67QbFXw4+zX3J=;2NTsR$7;(jqMc&_)howoO$%@Kd4iTf z#I-X)yTs%jemgi+drDEmO`@gJ6+EeiNX*(~kW8)YABx85lGRBL|&wcxx3YKrHXpKHS;$(3sWJeT-F zo5BRw07&L(izI?z-A2NRHZ{o*_A1Q9pKzSCYVLR$Um1w}hUI|?>DW|$`qA$+_5)b ztHeaT6_u~mki^TMwOV^gvW4<+t(IB*W)IhD{St5XaIKa_#Px8kR;=XB9KZE?L|TU;;Lrdg!r z_JVD3y5$f+NiLJa+6X3**$JWtXdTg7lp!rVuftw>RO=>*H;*E%wa?Rjm?9Yk=wisWCdYbL1bDwBt5E=bbnF;R0tlD>zDnhTQjF;z)Rt~VftW%MIVUP*y> zb5_Gs27TgPBr|s%j8Aa;x}2U-4N0zuY=hs72Cee?t?Q_Y`Y9>n)wH5sy}GpHMzx}T z>;AN&e(V0UqOOsa+utkdLzt-jU?mj|cl@cMAC@v+>r~NereNvWq7U!&s_N-?6M2eB ziaw?Wk=uWO-|~g_s;MX5L!`w|aIyk5t))+8a_|n4N!5R3@}O+UkA0`$S3K}**~ zO|;{+vJn?CL$4`iyjC`JlZYEJQ&+z>s7|(B;;v*&-C;W_K4x5eY<-NBq4UhG;GwP0 zsD&PSrN`p5()0?orHt!OT3idJ>9_90)AXvO<&JD=`T$9?MRk}5aqhlXpU6a=*VWfE zbu5eC;KOzAgK-gStUnOCIjW8Ij*@t_XdLJBLwbfuHC3xGAQ2*J_0>$DYg6fJPxPpM zmWkREwb1{Q#LMtjdbQ}y{F~M~dW=l8yBokamA?cw9>XDY3 z8DG%rF;O$)OL|91ylC{&Uz5a(MlXGsBwjRn#YLl+K9*$M9@k5s$VAODz4Wt8R5V_V zi^l7E*?Y-n)q=07(nD3`S!&^xQY}FPUI8kYwq5m|!&a!GDJ7 zWgCzdM&l@u5&FH7c+nUgmp`NR7o?0AjnQ$@7_GlbGHx_R>qD5RXpGkLnW$)tjf=*3 zUAzD0XpGkfJaBU~-qANcNJK^BU0rKPMCHaLy(JTs8&mYYOjK@6)8{f#xiLfECW#k~ znRY-$9tESCz!;%d_)^eI?5%%U|f%n%-=Af!?PXl5F_h3-}HJwDOmF4wKh4B46qAn9S@-NrNix$wC-gkO$CS!Bye&+Z3;zvnlluKr`B!Vl?8(`;q zeQyR5uP?9CPx%O*1g_FsJdQG6oLB2JiMVn8F)qV@)IVV@b(;F4zKDs+=O5$pxj=WG zAP?2E;{rX@hKPDXw_cyZ1V_ITaOdV{J*h3pV1^^vpl3)M{|EK7a|<0$0nM^+D~?ju*piab<1ObEJ$H!)^LGCaSDo_3KPj zS-GyMLAK7+~2Om^v8B=P*&tsh}KYHZo9H|ju^Rq4O$ zotdc8f7i2^d@}~VQwmZ2UEj(i1@4$Ffc)93S9sd<5dGN~Hy-Yfi^hI^Icq6@_Upeh zQT`m%k26vJ9MmuP%EHJWj4SJiZgoU|hKtLq;XV%dd_*50i5HFI`WPR<3_q?Pki=`9 z6Fhh4msDr(f9hMGku`Pm=TAMc6V+XpObN|GN?C**(WGgwBgN&eCwd6u-)n&h0G zDM@}nouZ%9M=(*R=;!qMnW&W?P-pn(^{$fSiLQK#{*OMX3(Dk)!C!$SoSgit&y^%w zT;!(%h5BkHAH!)XzKv3-Cv`=wY=I;NB37t(k;Lmem-Shac=5TcuO{L~<7(Upa5ZjM za#df?cGL)PHEsmBq0e}p{AmYc6z;Nb=smg-sZj=Y65yc-zQp7iIFLaS2=-x;l?ne0 zBq2DI$v7rOf@7E*e<~nwelHqa&SW&q?-9@{9z4P%VHWI+AvsD0t?pDhK1r_&GNppu znPlA|!~;M|2eX+tDMaoF#_jBabEJ$H)rvu@2U_+rvtlq^l6=vO>s~R~;x&}XmtUg8 z_57W|0Yix3Scjx?ug^Oqwupf(MuwDI`-bm@$F0QkgUeu4ghSm1NR`={Y3xE|Vs~ z9>GE;7hM7v{_=~dZ0QkHMC}KAxdo~U9!#8u#Oq(fgOw!l z>NPyBUc=++H9VL?TJAbwcBxR__M8zK=3qd*uatet=}Syp7rPZ}@6`aEv6hXT+yeQ-Ucosr3Eu zy>28^gYQe?MPpiAG^PcYl8n1gnHE>mX~ESjqoOe_m^q95LDCxh`5<^el010^*$VFM z%nIhrMwvW;y9o=(hryB`BFPos!%fR}p!IPug~=6>Aj#ZdLrJ`+(q9CdN#c!}Uj*CC zLp$D>IWL&Cl!)pDi{i%2#lay3DC1?z;^4V;NRGMfzBt%=y(I3Kxs)U3-Pc+gY)>+7 zFIXB}#zc*fD}w3`Yc;N}2yT@!-X4ENu*D`Ui@rvSOpIzoehRK)SCQiyC07T-=DPJ^)*wYCH+Fc|{_9g?lVAxuu! zCbBK4PAY~sqwgsG5>zJ@Rrm~ld+?Cd@H1xY6^1=}#$ z4CFx|g~5)jg*C+;M`3V?B-x@4++;>_HF)3v)ilWDzu=TZNW44@7^ftmR>pb-jH^EK zV8pRKLb+?Yg>eQ&<)!&q0%SmYxw14%Is5^>{G!#F947oQr2 zI7xL^d(Rri940D0HI0o-)ZVkE@edOfpPEM5KdGiF6H<+>lH`j29t#Nk5=+oX|BGba zfM3ADYzZ03r--O*i5TaYJUuW$^n+SN4ca?+Z;3iaq#F#4Ff%?1zc)JW0Q^FkvA7!M zY_6!49uPx8E6sS|G+NFT9pK61C?Iu=c1&&unRkKIGlnp^6S8RkdO@4`60vk7m3%VO^pVU zc;E48YUE2YLVgViBmam|^Ac)}khjIQpM)pDMukFY$Nm0lDI|j4UQa;FdCy$BjZJ>Q2rRMw6?gg?D>U zrmd0Borx@#fi1!#3JW-u{82FcULE=i6B-hdlHv%Z1* zW5xj{Skq4=xhe_02aVbGj8Wz~S|+j*N`J<%B^e=Jf!0CN$><@;v4E=kvqnA>_0^6{ zBkMo3GfM1*w^q?|7h{zq-k!0GaYT}10TtCQ1_;96ni4Ca2H0L6xxFjg4u!Le=Uo}> zm1wye6YpEfE-9v3&?D+QCmvDp>7nctQ}O9xoRA*oic7#LM0njk81o%EK3p3rtj0Uo<)18CCOfCX3Jywt)i}Xq;dnY*?q_r@N_NzDy80XKixWA*?KRMt zBZ>DV@PS4?6V+1&8)Hh4)}?pJ@?c}TB)MYRkOZ+4N*`jBO+=Yo@hz;`_5pdrt-EUX zETgfM@p3iGXu(9aMV2wHq_pFXQQ5{^N$A7_BcH8W(EY0RFhz=~Rvu%X|M~gfY%Xus4k`(vwI=wcto&F%#7$;leq;8go@7;qr(5B9ijTy6eFF9iu^RA znIvB6(~Qm}GbYed}s{(&)siOQA_j2tE^TV@*5nW(6KXnZ3{zMQ|VLRoW+qb#F(R&sJ3Z&((Dt8(a znW$d5+eiva%kHXax6zS_%7ovH1Ck6EE8uMcoE`QURs^+%%M~n=y~avOyt#6pk=L{B;M$^-?%D?7mfYKofcXqQXT5P-*6y*y%cm88I(FOD0lnW%`JG}PTNbz|YAQ6q|$Y4)rQ z9{y#7m?X@CQ3A*r<6b78%_j1J7+30{odS2hxL_2$mxzkt1*5toUc@dM z_xXqkWnDDdOF|Jt@~^Rm?6@=9rMQS)GB!#XFJhOB#QScJ*kz-)Bwl>380(p+_*^sS znMxcw_BRE3B;GbV*JCTeC(3e{nv zdP?a~QzmMZC>v_aM8&6E=s6~;pOy>tlEhnwmkZJJFK>)07wShcu0Q2MBbX?E%7xx# zqWmcz`jCn8=g!b7Cd!}W&}K=zj7kn2j3d{4q&~Dxa;WOV7%|E*B>xMImc;9ol|y_N z)LoBN4&_K0FUKl}t}s!(vTEqoUU^qYYeucCYLOBe!9>-fMo9I_pFg3~<{BZ@pOQ?dB@!GUY=nW>S zO`nfz({7=8WZ4~QdxnzRQ!P}Rz8Kf0FUGa$%W-YmJFZRp#I4D#QpOvfM~1Ayp3lWWe{@__N5@5VY+O{w#YJ^O zTvXo;eJ{((mhatQ&c7Gh#YFX#>7jp_sGc%ARB;G;2w&^v4FA-%qk78xki#;nr+giH zf{E%W--KRcqI$}z&_qeRHeDNPHm1`TB{&5N)oS4 z3qrGfqyyBwAhcQ%YEvZZLVe$&7F27J^`U)CR8RRiu1z zx=J}2w^1np2XkX#6TA&ED`UJQLj#2t+MdM=V0uvRDOQDpdUAaL-=ksOuY~-2G$hwUOIDy(uE0GSzGo-QUzy+@4N1T}$3(D9f|>X&Y26Qd zG?Xb~){w+o2^Td(OjHbunh%qfySFN4W=i5kwU{~BM|y#W#mp&^P*jl=H)AVhG~663 zVct51moOVh8850O%mGYPR7;w3$c~$1rOf-jla}50`jgDAl4OgA;TZ>x#!2QzNxV2G znZK>3Xv~DYFh(`Wyusvd*b5^m6BomBaWO1!>OWBFYOJeZI!sgyE10b%@z%x_%^s3? zF|26z_K|*2dPQ>}*>NLwr&BHs*5lmE$-DzH9qH-+R9R1_X9wwVPOq7So<~&Jq z#mKG!`BlmPnKvZyJgjUctwB3P@EobKS=mR1g3ndVdnEDtPF3?hB5r$CHCsrMFA1Jv zRWp~ejEZ56xcJn#DLx~htQzL`x0H2{NzW9#Rlz;x`ddoB$IQ&9XsGzqGXG+tO0Q*J z@X6o`q?TEB?ag(sZI1Mjx51xObG9U2-8FLs5x2cGGoOiSFU_1&aI-%_GkG17Y%veM zj*D>)nhVw=$rU{(!fhZZ%P_Yy=?G*xkce6AC$ghz5i`p&QLP*^=SbqUvSa=tiPy?$ z=6)Z+($j8g?_G zlF;mcq>I^k3t8S<8J?sA>1w_uiFeY~&78(RYAU>Kng};7&6I6KB2X`!FM666B^l+;DLu`~zmUxH(SUg9XOwx6 z$s6#VIQEnm&6Z3GdXt@(%uFUt574d7m(15C86{L(ykx%PBY2AbvN?~5YKz`xk6+nm z=sPE&7O$C!+mU#!)6dM3#Ourb%#A*B9<=(IRdzxkph-l#PoZeAW>zD6=` z9~@u~VWQe%fH})YFopxonme&9Z8w9D@nF^5RBk^{co6C znQSgiu)`h>bI!l*Ait#+!6s>zF&*jOUriJ6RfUW=gGW_Y8l$S#=MVpmg_2NIcVuHR2&&25y2Q_WciiKv=RHRl{= zEr=Gr={D88%0#WTW|)abNJc%!f8T5@iT7OieRBj8HQLNHOCLooujkG*lbNV&nQ6|G z#LM1UX3b-$n1xIh zz?u!eg}cP9mzo`xnBl+4j+$kbnDv;bwpe0X=TU}c5d5<1QgbeowKw3MZ1}S4GE@9R zGD}{7ukb-smzlS|@9>SeRm#v!OSJQiS>pm~6$D=6?^&%d)0v>15Xh{Ev-7Qa>)oes z&2v&KS1g?=M0F^ArCH=6TFw=V;Vwifknhc^OvcrN+r>bBh_k%LY(g^bUS^GX;Sza> zcf-){5Z>N&DkuY?5s8OZ?RKg9=OF$L7bg+X7|fjI%RJ?sKq*S zh9m_-mHv}i^a{#kix1&W1-_H@vl*7ei~I)jF(xYV8_m887x?10Z$)+w`|xJ}kV`FzS8 zCyD3tY4Zz7JfBaSr&wzzdwAMx6CgW7xE5#3#Y~jXXX1Lw8M8zJYUPTB&{O7shiBvJ z^|x7-WZYixx4A@;Nn#m11DXd~f19hBRQ(R_p#!;KZe)_W3Ni&qq3IOCvL=Zs&=&iF zTsQkNdFx*I<|mLqcnXu{Fn3=EQp6?Ysu4*H&t;kS;VUaxdg<^vNpeLZv^#2*4R>xfk4{~;Ho7WI^J7huO4zO5L=8C$tJkZR!+Ch5Ng zWFDr3+ekvaQU{rP!kIo215!IYl1Sq4?11=T8SL7^EmIiMZe14~0c>s)hQ}ekeS=1QPNY?L@*; zB=PK6;jKhmJ9hX0%P2c`I3v-s^B~mJ2|w#2O@Y)2_w|tsAoqr&C8a+lm%|?RLGa^& za04QNcJKr^6J#C;cP&Le-vjexH%Xe@Mg)H$`DGvvhC@k2+JQ_TNfJvFSqw8i_PF%$ zdM0m!)*z5c4|lztWZnj?;XoRO>y$y_tu7jedr3m^$=n7z&F~N(84p@b!!MMTc1nH% zw=uD-=Hb_vtb}=o$RH+Lp~n%qH4mGIM@Sj3^ycA|JJ2$fJ{`(x9{xd+f|6NqOC<{b z);jzXlj9Z1a_jImCd+FmvWLn2WuR9=En0_@%8}21LjNMtKoTlz0hHA`Je6fsS&xTj zGr6-LS$;e`kI9Gte1Q-wKOWxWv$F#1JRUxOi=8&%D@27#^<0Bv*VgDM362BsZLJCt2^}C#Y^y8Z2f`E2-o$IY#<+moBPOE zAhW`qnCye~7;1eOe#u8rYfku0A3?28!XGi24QIyh0+}2B(nn?h`8=HOBXfYv3-4yq z4pzbg*27AeM`Q0D)rH{$B;(FR3&a0PLieoj#>>KRu}WC?V}ZZ2=og(9h094o`HU;- zMd8XmQdW|Ce53&geHjJ}e+9*Q!42*C;NjO{()HJtc}BkOrAbQeR)~9R5I3Llz792`-f2avT!*fi4QD=o7Iw3 zW|@*r;Fmt2tYu-FNo|)jV^ZliReD<@?w#ai;b(lLBi!C!7VaSl>>^<_{t?Pr9$hYCXM5G;z#&_WnK7!HsK3uJe)N*UODqNe1s_Ck5Jti5o6GV|E@HL5WMBqB@n1G8cgS6n1>%8jua)E=1hOZw|lcBN+M3 z;l4hCQQZGLW!5rHbw{H0*Tr~y#@n(=;!oww@UVxT=3FrCz3GMG`t{)O*UgtZ#d zvYS!6!*zWGJ^U@4PDJ`s2DE;Uv;2E_G0Uhn{XP606V*C@gtz-hMX<9s-0>bPokklh z>p*yqB%|ElF+3PPNyPQ=VEB@cpw^*qVok3W7{kNiY$AzYbALY)9?N7J_xB^==|tR| zKN9|kWmJDZ68?f^2Hi>h{YdynCMwQH;&SXrT#g+HZIsOjKX~JG?=X?8Mim1w=a3>wNeG5w~}r5AW8|L+bC? zyDx^D7!)6sKbOM;d<1*<)$pf8+}{0Pc(IRQ@BS~mnMmS>iviITO1}}_$>cPU7Lptw zB0BU;5XZg-MnpZi4s}$p0egVbt=*mMW1Eky}X@3rV*4 zyfpk)T`AZ%MY1Fr4!>+15R1T0)kr>*lZW8@*g)=zTx0TP8Pcj2X>OyP;i41li5{pA zr#X=-rOa?Q)v%y-CL?6L5K&{9fK7wn2 z+L8OCSUQcFyTGy*Y3U>Tff$jFK5`t085!dv=YUv|qA|3SFX}%;CxOvOx+J3#@tqr7 zy+^pcwulD)!|V%M=vDalUU+*vCZ%kY#uDb0VW9DF_T25)g0{DbgbE zF;RBXBJ-FiJ9Q%8`0R*Fupf-9^N|uj>PGgmma=?rq>zcSd~YPl!KfAll;!&(6(phd z!dl!Hxrb$xo%#`*iLz5al5vZj29frXoc8YyJ5q7Rj`X3?Y(Oi)X!7kvt|xtJ4`stH{Sp_Vh{+EupMdk@-y2 zJlHC-govBZts?o7OcG6DjCw+9)w~z|nIyVE>CXbmh=}`;c%xRENRlKJdFbwzviNS2Q@1+AHp93R1ao*kLtBdtN^!${3^S-P96b0YPbbT679URw57RT3Pa}OL8I`EA_tVG_ zBH|2WFRo5MjTCK+T9ldX!RJpSBux@8 zR~JQk`UvLgqR0nCgj)Z68Tph+&5Q)`CRqL|vdBkXUk1C{NYRHV8Y;sVM=JUVX85v* z<|CNB-$okx2xjlE|PhfLx4>@R4tT6h@MoVOj8u^*F4d;D23 z2d)1i8(F61^nlm~q==Q&oa_hD1IxMAnpa3WNQWyw^vrNlAc1D;bNa!Ohu10`fGFyR8aLYQVbpIUqHxYfLWR zO{AvP=4sOEz%sS1d6Hy{YaJ5AOQ5A$O**1Xwm8isXswrIxHvJ6G9hFgVNwca>VBYQ z#$`gp8dU|)OS};&V!h)dnDY^9vX9`3+On#5!qQ0#NA;*x*GJxfvSLc!;l!L;(MXZ0r{X6MivyPlOJNnYaiISFDs*r{hNAtGAA8CtF+Kl;d2 zAop6^CCQaCvw_@ar9X>4PZHt01knw?NLJr!<|8iyX<)Ts(gz~{IcPm#70o2AaZDbx z7BhKZWP>LBq%F2)=TTB6R7D#LB?yjiiS$@olNJ6#1 zXHt(_50H$Az^`W92K&kv<*{;R&y}0_!?!B$J(Q(Ww5El_SZq0IqgQfJ_IgP?B7+p;bVX2h!21)D3IljU=6{ znvziIcY#bNtG6TtA_m!;3M4bm!_HP>ceFD+@f|3A-7ltkN%`OtzQ^mU{wu)rv5={*Dl@1LT)zooq_%Mv4iya!~UwOtY~VuRu$HrPsiMQSBp984!CgRM49(x$<0(7t^}PXc=W=)oW6hDoi_aU@L%qRaKJV zqU5Xuu@J~`>x3kp&m*j&uSySP43~qb^yi0W5>7<()usEUgb(E(qXinaFM?D`3<@J2`Rfm17-{GQ$(6jD*u3DRYvE>Vvt~ zc_yk4zH42R#A~lS>$|>Ky4POsSwBfaJ|70l?^%CJQc!Xzl!d$X$yOl|w+~LXPQ32L z2TyyZScN`(xGwFqkYtoR`7eGIp0!yyOw?1MrLNCvTwQAICK=h|aD-fD zWet=qn7A=3AZ`ac%dK%l#27diMe>ccl4bsZ-;l)~x5D~~Wsbv1X%(2{R#>}zq!MVY zuo4GRR8^e6wVE+easD(ilj-r4Ocv zO$fmZ3;lgP_c(7%_{oY&nNgxT^vWkd>nE!LlL>JC+yThXR#PVPm~5~zm^^g~W*Cs! zXpQlaSAcA`=1Gz*-UO|IK(<`4@*{!#VwD|AkzZCbAipfV(@JK7>pHvxv(rjp zat`K;H(`w0X=zOG#2(vXr}ZF{KRKgzS`Rb%n=@*s)se}UoKZWiEFvNyn@&@AS|78F zdM>lmn$JW%t=MU;W}==}?6i(BnNg9R!tAt4zd`jn#KRD0Jj>l_HDgj9b^&;X z1|GgCwZxa8MKS{<$rg`)m>_c2pv;KjC4by#Bi52k;$j9W|;wGx3!T;W2jf& z@9>PwDm#)aKg)LZSoM4)0`uTrt2>kZi{TgQ!OlLbwS4gsvNn6;F6#zM8tsjkA-e`Qp+Aay@A@0PFST)B;58YmQ)Y?cyG&>X! zzkr=%)-@uDst+EwN{*#^jfb+Z4<5IYedG_&I&L+Ug!;~q{csLowU?y8T```trZ7=+ z?w{6fvLpS$_3CNsILWxH+%wiWNxXWUwfeqA@%a%njzH;WtqyN{^}^lF1*@x%1iyvT z18b`!*`i7ezN-c@m#jy}Q@y@@OOYp-d_RzS$|dV*CN(S3NPEfZ%0vS@XQ1>;)=Ej> zx0TP+I^mLafXNw`lzoSMo(5%MZvrhQZvw%$Y%W=e6G&!LUFvaHtgIX)1!9X!_Ap7> z1#4c=x?=UnC7HJH{U~T0aorjsNv>So{{tRgw=&*E8Oj8VkFe+Y$Tg4&*p>36j2Kf8 z5S2lsh+T(CW2h-wE@t;;G7o$%250oe>_!twYdjE?DQ>rr#B2BB_KZn4dsxEGmjvGX zW1madQzxTLwg`WkAWJV{FJ`g~_7`R0-%8rMCGj$$l-+0wYUK(14Ur`9rhb>mxY7m$R=iaasmM z1t`6|-FqrU!-S@(EXlvqZ?1cJyW|W>0=P=SvdY^~1^6o{hP$y8sYT~M-f2$-`);X4 zHBAMX3U)n7yf&?9xAl<-$lPgX`A9t=$@W_!3=3__tJh9+Td^X@{uUCwv5BsN3si$-28^LdZVK zM2!iiU1B!MtSK^KNP>6{%ChXcnRMtz@9)@l3nqKv{Q~^nVAP&1$tckeBHtafV)o~f z4432;AdbD7W&V5;ZaM*}Yj0#SxG9{|0;y-8m!v?Phk9W?-)rAs8TD?(y>_J!sTQio z-D}sEghs#7VCP;tLy}SQmgze{?z7tyai5;t7uW9h*}bKV*Y5T00i-2c2mPsUk7GOd zRsx;`)who@NozpkMgv6>pN0FqINCI@PqB=8OQL~&*=HGjZeZIVVZA7$CIY$NenFCB zCDk*{hIU^`3fx*Wv}Z9<+1t?mh3q7%o0g62{Y=#T%trPpChC4>Bl|Lw&}zEb*vKwE z$MXk0Y-CsVk+h}o^exWACblJIJP(`L9hoQ(o7gXqox~EWsH}(V0Y1xE)B$Pj>m0_Ru5!8CjzWo!d z1<9b+6LB$YYuA)AUJTpX8BA0R+uCD^l-$ynZqz?%=Q4Tt7_5|GRr#bnLz0Q&O6P#s z4rM)QACrV?fgZNAulNYIY5O>Tp0dk+DkJY^-BWf0Cd!|u?B+yDsy6Llx0A#xtAjn< zNANE3({W{WvKO&sH9mK;_mEbi%HB@)NhT`8JK6s-QQ6zcE;5&VRvvb;Ly~y@JZq=> z2-ZC_&Y#Y98h#HN~;mzdHV!uxtaOAeTnVhGx}p-xtlFM!@7IpVK@6tNk%229UPIm z+oPH6gHR}(1#4Ek0UEy=| zha!)2_X~D?B0`;2zG%0U#Iy6Fo$1rUTz$!2;3L>xFWX0m$dMLrmA_)2y2Z{b_8nhf z>3Pz_Q(&i;9g@WJ@Krl9&-3tKka^ASNhGm#RT{(l+pjWN2ctxh>u_FY4^)K5pZ<0> zlc#n<3qwu&+v6nh>eb&4%=cOcN2CF&m5bp$tCC=Opi9&oH_*QInbbf##b*cOGti#6 zz^g?WurtU$LBxGhJk&nNM0q&WE@Xl?IIyxDr=biIg{@nr_3B?e?=rvr(!@n(i+Yf?E;p06>fT) zV0oCmm1Wv;-x+2%_!3L^JRD}Xki_$FxZPF~%0u*Ugq?Yd)@b`xpA1HIjGgNv9e#mZ z1ooFi690UK#@@H>@0t7x&*Lx;-;Nte-nKVN8E;g7+b(3H#*Me_<^iIvw&vU9D5;?wF?zl$>h2#lh35$A|#Q zLz04$e^;hnImPbHM6Cg)*aL_J27gB@{3-TGvLhz-hr0(*`V@OSYvGMDBA+u^4m))m zA*a}jiMS)%6uaJ1^w7(wsdmj}p3hCe!)f*aA87|#FNm!a82^Dy@JUj@c*!^ zkL@3c2<7v~_7;{I247j}33fiVcQJYTnFP^GlKrgpGTcYT@%dx>1QXRSKDNg!zqu_w zwx>wq)#4L-wj|URSc^~XMLvSHm}mcRi=D6R?YG$Z+D`e-i^l7qwb*XrBNKqEv|sX( zkAURcn~At%)Fyi;6E*g3viC7jqt+(-1QC&Ofaa!6c4U<-JyDI%o9w!Z@c6vRevk;A zP(kUN>}E_V!LNQ}3^&;unbdZ2brHCs+Ir zp3iRtJDcqWOooD;9YD6)y(P&O?}8m%d2X|pNJ1;meIT>V{#}w$iG$#@@Fb8O_8}so z?<;gpvcvw9NkSJz&NKOO9p%OjyXcQHJ~E%N5ALu_ukqRo$xgc}5rI4CvryJ9yZ>60 z$rcBp78fO%Aqi#64IqEmpZQ1$cn@=*y;_o7@eycM0CLDaBS}HYF-;Q0-9V1og-q03 zaMUhZfMpc~zJl{-Y>T6ISQ4+Sqjr5CNd-G6>w;Z;y;nN!JulkTiHMd1C}RKGwj`dNf9)ndEv)G! zdy$Vk3biP-SFxSrkeN>axooe$#m;5>wx6(c%FGTRbH%>XN4fyHX2&EcD2cg>zq@(E zu1_SO^6-Y;gbB`im~}VoqCd-acc06MXcH#tnL;4?sw9*Ns1=B2kxT${wGWh)5bd|Y zix1W`A^Mh&;3-y-=to4vpdIuSrfBqgNxX;^#fLNSS5Qo?zKTV+`0SwNV$l;s+!Kc4 z(TmD5ti$nEaPer-jnW@+7Jj##NIxR7O$UO{#iLn1k_DthbT@0^Y7p;hm5gee$PSV* zAX6$jLK65k3lJPPlA_6*QRY}c`J5DeK@y4>$-L$x7>%UpU?0JoDy5?%C81uB3uTpw zPL#yE?OZlGo3zA}hv>I5%SIP7!LxTf-7Oo{w|H$a1?-fKw(^mgK<c$#C%&*!c}ejc7NPLCc4M)QaXvk}Wd$Thq0p8=18DIw1Z8nbfG*hGo%v6BmK# z(VXp6I=0shAff1VAHfz3N9Ri7wU-s`y2FbY=9m?Ac1j|j*_F5f$HviziHJ#XqpT0K zS2UWzGMmzAMHF+1dV&y(KEpCkenG7hi@wZuy1>a>SJ+9#qPM;&5R2aWra&xu$7HA| z@8d9Aoai97d|)n|1cI}5qQi)|qgI{ht*5DVqtksdw?n<^M!)otDnRaw{^=tIkO!h- z7ezy@0n($TnKYf8Aksi4Jz9~;N_a=Uz9e@^LivonAU#@3k~|T7CP6fmGU-hAk4g~D zfi#RRVp1&u#zP>DqD^*ttJy3eDFd@?wH zeICvC5j++7BD$T3c(q*u+yMxPdC?OGsPs^KdbeU;^c<5h&~s}nft7hQ`5?-8>y~*@ z!$-z~o%zvbl8h2h!}yFN+k)s;ChF@t3!`Tx$rk^?(=NPYwkWC{Ld)>$3GdVUAYVqC zNJ3xbLZ82kj_?tD%J5Y*pNV`93#BiKUM7;LdhXI_@x!uS?&-?XXn7`TAGb7`q6nY2 zER9-3+;hmK(F`VPEwMD(g@|m6$x!;T=nx;731oS6A`v;Regfp1=m%^E$5kXNqMx#i z8dtw{i5geGjef~8YFz!6+nt_&VIF=PT`grMiQfyLjo^O5w^4Bf>pn@GWU?}vAqlnM zd?@`pHRlSI^Q)qnQf8D~ODqGKRngu|LYXiR0$Cl+Vv;%@R)au(h>j!6;xw#4)&lu4 zI^r0$>C{~Tu?a|iv_KMCC+q~WHhPta+g|IVMUGQ@slDg==xt2!OePKTaDB9bB$LGZ zuzEiTcGgD=CGpHZumSuaL1g#CxW`B9)Um%;K9VMaoTnDlx zy4*)f1>o6vwB9MyA{or^9nrq0JyHo|c1BP5hzVp*w9y$^mb>@dA8pM9cXl}b?2mS2 zqE4vxM?WMYj`H4We{?mIoki(9VSm&)ix1g;3(LzZ^xluhB73XB>LhW}B zMk^3W{0L6oa2<6p+LlR6xL-#klZo0l9gM!rWMwy6100MFAR=ai7Pij8=$yaFpB~U& z>EO@7=s8J7iC>D)8sJd0<9YHYy^uNNMwa~*)f&3Re<+FoC#70~}%igo~gxCy8 zD4)LunS|Ipk`dZ&7$JZZjcHd=D_eAg)#)p{VOJ7+SrRYDipK^K5v#J{9yMqckBwo1 zv*#8dC1MS(lbtItBJBc_7)!h%{SkfO7lQT!DH&@k35^ms@+ZZ*N*& z@hn(A2X^j=jxDs>Gi45$sJ>VlVhe8StlSY=Dnc z0#YsZQc+o!z!+l0?v8C`@(QfkQb49gtYa~fnQp)x;Jt7|Al8G4ieb&z7$z!)HDjVU zYE2R~z)mXIsTJ$Z%>Hj z&+}t1F&V_Wt@*JWCOt>d3Gn>b`%Kh|XnyQ-ChAOhery>Nb&fPYmd`}(cjm`7GAZCO ze17aVCMJ*J^J6C@$rhd9^yxIzVt%Z58LE40AQyowjIEbslt_kpl_(MrOJlp4bjXA= z2_Va2Czw13tBW!~md7qgGF;pVT9tr&6PtSnTFw?Y%cKDLHg-gkTyYx4s34H-zRA#P@wW)wIlf*r6gDVDFKg3>Pa_(6o1+g(qF2RnzDadSyO_3x|+znb! z0ofWmRgvu61!Ka?Kz7C|+=(PttgH=B%z*5U?O|fw3r|jf?2jc^BAK6Ie*YZE@mP)| zlf)pAAXWi66PwNC0f-Nhzhhr9c^Kle5y*wuYDw~7-;f}F19B<0ESda4JI8@sjjdyX zc92|;?P7v<{swX*c0>}ga}`LyNv=#DwuKue#f!pR;Ovyd8;uj4Ba+ZqcL&InbgoF^ zjdiy;qBdx0V5f{Tpc>ktOmKkQ;UrZj@*DW`FpxW)Sxgo( zNp@~X;*Il_or)>aA2~+h{8iPd=_6S8yPSGHg5!KO=Nu7toUiT@HO^Oeu9J*A&R2KJ z+)Z`IksrtT>P}@J!Ervt(R>8Q`5I2u8l;7B#u(OevX~r!(fA1}S1=Sv@X8A!xA zCP}u)g;g%D=WXZqTGB&zMQuA(n5gG6wxcOBobK(|P8tz-jewqC*iI8BYR76jQ<$h7 zYt&gLiML~oIp>(D9joIc)uxD{7Ph`eGU|y~Bj-bw*#W2exLR)H{J=8!Y-<{n-pJX`1fOjY zIW9@IDEKcRW=WX~ETisqH+DwoR11}Ljh#76RMs_ic1w~ij>4S#IoN69R0yKhB-zT# z|A5FkDU$Gr1TsyXK}5ulaNe>KNHb@QkK_Ys?i4annb6WHXP{*-6IwYK%aI$;^bK@~*Ba?R_K3kylHqH?ypD=0bTw`Lq4>JtNJn3j5iVwcs zuop->r%jm14A=!6mZYzboCflgbHqn319{rH;v>b11;jH>QiN)%qT0!6#^gtM`hPpf zJnQsjqIZJ#j)8P`rZQ3a+{M|=MCJ4IPO^oTy*)@brK#U;@lIPN@51RpHpt{Sy_uxs zz->ezdCnLnn3>q$-*a{nkuxKX;qN&oCE>LMXuanYvQ|~ds5~H(oM?xTX+!9HXW>sZ26};0erBrx}xlK=8K4 zRHrwSqb`}km}-tof2@q@vS6LBJRpzs-uX?`Ke9=DKlKWGLdc?Om&(Nk!^ub zW~VxB*fK``2e3TN$zjqm4ZiyXWV*A+X9u6&PIs0|Qs6#Oo$e&pMGw8V;bu6^i3FYn zJ6pld45u#>%#GiGeBk^j35@`l8y`4y((avbe&FnuGLyteJS&h|E$U%elSD3)nNC+G zGs_0V36PoPoMLhk?iQW}GTZ5WFKM+b1MemS`N*kx9})ZtmM9Ky>^L7W$%5xQC4hYF zEM~Ijg9K3y$fwSJN%F*<8pH=qMLu(`vWyO-8pwR%B-JO&iJ7p<1G2!mi^=V<>J9<< z($OTz6RDteACSdP*ZWB;4BvZr1juq{hL1b}=!)))TbyojFV%`3`O)0$J;~Ma?o3BJqukkZqf^sIaQ58nOk|>F&uz{ENxa$f7v~TYHGBT*TwtPR&tILg4XG@( zvfA!s`UuXRJDhn;)Xccs+08`FjK9TY)NjuEMre7GxDQVL$3RVgbApYDJnKxfFF+Y z=dg2xwRUxeya27kPKAfiPM+A>7P0`yQKtoye_`K^-$pp@^k(uFwAU(-Iq7`Iq;g7v zIPnd9UC`Oiq!^RGoWCTYHeCl=r<|*j6u94GJmVxb#nMRzZ{VD9k|oI%>3Q&U8?^p* z>f9o8-f83`IHz26o**LLg839jwo6VX+bIfmRvbX`l1~fEDs%?=2+p}zowtc3?*EwV zTz94r5%XY1+X?<$cjifwEj|PC2ax}qw1;I|xRDoW>5@zob^ixX5I{zxO_0Q^X&`Ne zkKl|}G;I+P_guYr+GEYo@Op={VH=e`%eY z%d!%UM2c$Fw7x_{6&N9LZmOC#kI9buiWD+=FPUxxRZVO5sEo6$Mcad@)mIXV2Hr8d zD=phc&O+&Tr%fax5@GJfxw2;3R<@&ZtY+F7pBC1uR@zk`!5q`lRF0|HGniJk1^J`w z1k=Kjc&%fk-RC1{C+ymp0INaFRV%H9l%ZC>3_e?FV|`lakDd0OkKnq_N&AF|P`8Wg z#AQpJv;#gZv{N_jl#gJx+?OU=QtPN}X^_@ll3bxf*1ZVNPaCAYLo#wUM?3eYP4^L8 z4W_3pBI4dhYLxaj+rg|0Ky4eP6=@~Qa_uxpE8`=$%6&NPZX$`jy3;eD=4m#Q`v=h4 zrg>UJpBC!HA3%5ppynEe`rPX0_$KzD` zV`&c%2|NTh0KbQ_9!qN~iMPLaEUk?s|Hs#x$LU!8kN?+9=pIQ!Lt~evWQpWj&vl2$ z60&DWwj^8j>}4BclI)3$LJHZ&mQlzuhB7j;WG7ihDN7^!yYFi`*L@B?zn{N6p7T1d z?JU>1&UMbY6C*2uP0d~!X#+NznzJN{Il_9HnHfaRN6z&(GmlFWoHuV~LQ(jap3``p zZ&z+^KDY~|xf$OCqk!+QF;PZ-h^x7oK!n?25g;whc}$E!Fpoge(#(|Pd|z0<2lBd^ zqbaupJXv2FNGtOxCiDh`q_tU6$^>sfZ6YL?4Yn~Wk<9t1M%Q3I51zF#AG~X*jrrhR zLv73l?;2`rdZdR>7=u@Z>ueq-GTQhQte1!Uyk*X4hB+K- z#KM}xi$J=XKN8vgNLe5*kwcPcNUXrlp;Ze})-M8lNz-rcO&0yR%J zMsMe5cXxA!B*D|Xr&*;X%e?ms)H&#R*X%3F$E{!%2c(a=>vi%l@|M)!T=IE=+DbD+%g_D6B$WFW`{ zBrWF=xaVXzkoTlaTFyN;c*po4vkPe+YaEm^gUoj&`BBOYHs2$n&NB`+M@fHn{R5{c zK=WX8twtsS8EQtgR*_1Y65+voDeJQIE)bs7A=R5<~v)@RkXBMwlOvOnOwW zdi*3BVI~quGlD2am@^~^A{}9F=2DTYz8`6afvxw=gCwI`-TUTgSqjgV;?F{UU{+~^ zQLqfYxr{U&jo|Lbk!DSe;C{AIWCYdQjRDLF#n~13VOg4A0OiYlC$>w1x6J%qG z`5Ti+Hl~^vWvL(=Q_Y)9qVmE!^<8MIQ_V{4(I0M^nc(46(;=cVHq~4#NszIrW_$-M zr7||n^ofi!Ccw#PY*EwAKP3rrINiKWMCEYCLphvbKH8D|p^*f~%o%1ujo_I1iP=;m z*atr~yAT;`+^P#RYKUT%nI_54ouiEtKxUimI-%yVMpvk>b3o>pmx!cC1vNO=9Pt*% z^>z4+CNdWG`}5fQxp|n#bfeE1_+kipJ~yB0f~B}$Tn94Gtg4a!fGjXO5|N_~ z%vrxQ6Eu<+$X8}65!Esmo5tIyS=Gf7vkH;(G5Jz>F0sUPh$I^SLZmqNTVg%|+VDNM zt^CHi#H=A@;#%{#y2NbFdZLogMHx?l{1S5m5mh@&gW7pKuoWRWgHlW7%t4JL%gw*o z7S&)0(7fEdL4;S#o&~bfe7q~hbv}~$Rc2vHf{}lfS(ONDJ^=SOt}=a%V7;#~U(pE0 zyw-e8BRCqbGg}ea9vwVEzBR`YQFDOx<|M6DDR@6kHJ1@dkBk7{n?Fbr%mFrAAlTBvBcQEz@!wx*FMbn(;(N8?VE& z0C#NeG)ECpaqTo?dr+y!n6S%yS|eCrKbqB;81Km$T83FiBXz;&46}nqa0lQXvl|g^ znThu@0 zx<)XEznJwjg7fG7W>by433?8g?TD!S95gQxQT2Yvys4GKHg?F2>7{ar8T-{NN<_te z)T}^6^~z(WBS{eZG4oX-99I|c=a|`v$aISIT_DHJp+r=qC(Y3s!AMV<6EuQxoib+- zVSfe#Ic?4(q9Q$GR(ThrP?7#_`b5|kM*6$iNFx~OS+gS%73l@D4-pk*PM)(DQ+f0zq3g1z!Db1f0&^WWyp-sm%19|@%{n|b>vG9Jh^vjUOCP|q{G zihkXEk%$`SubYBNWW>I14wNMD`G%QFL`8bT%p{U-1oz3@G`sah>*~&#JLV-KTneAC zcg#}#$ivWw&G{*F&#Xv9mAYpxlO)i5&-D9KDWfaA3*$&)SZR{rd;{Neqpa5kpp2@) zDC-R(Y<&u3Bgz^=gzFT)FXynvY6R;dmo-HrSQjDdrbh6&^O!YoAle#j)P}M5PuLUr zxRpvIk)GZ7tjud|ktDchAg{HHN$7F7IS0RbViAxht_`O#SB3`>K&wrRZ)`L@N~fXDq{6v60-r`Q!pDvtRa%T zA#ZdkVr3Cgu@|vA4n@ss-cr;`k|dZz7PZodq#N~H^BZC@tIRMgHQlHPwo)O|V%9h! zsms&u(|)1-7Uctk4H4&v@fRRja5*Fwz&T5lkX?P*k%%B%I9;Afo)KX&oSB%p!L3N%^{K)s$%erx|a2&B=vyc9I2MIOcMN^L%egQwzXE0pMl{0y|t}Pk_2mm zuUI=IDGsZJnCDllJCY3V%eLxRkBp(XLX&}@tvXg7NzQ;~{0*bJR-7a^fmDD<>srN# zOf`nWoTMs{dRA>oCV~zh$g5UYE=6-KoDns&-eW?mM);oF$QnZ=J+eyE$eKZf+fN

    OA^ao3T5-KM$q%s3=djh^r}x_J%C)FYB;w3jERT3D?Uxl~{HN_9B~?ufRM zBpC&^T7l0kt!yTt^KfzjpBJsIN5^xiV3yn3iX)=hPiw0T5!IgCSg%PEwCA?g8$>u` z9l=&xD?uag0C~guj))pJ-n4dU1asKlI!8o}V;!u&SSB(L?_k{~qCD(iOf^303_CHv!?&%aM5Y^;UO_>!BdoeC z6Y+V3)q;rfd4$!4i1PV;YoH{7&+l9Fh|Dy~LhFSi7{&+I&ywI;+-k5s(z>aU4M0X& z{zT;=jxA%X*END;_*iR*Mz9YiScjQJ#_)00IZ5_-{0pt)tbd58D8^aQAEPZ5MWPie zNf1S%UlB28b^fd zeLLi5f|a6?pMZR1ohPE|{bTF8MzG!|S^sGS>wU6iPr}$$y-&5O6G@EJ`&6qT5f#N$ zs~r*5E2mjWL}nVxWi3y)c1eP@d;o0CunJ5@TO7qPAfH&Jh_KJ-;ipzdB0R311DRRY z3YH1|u%CDGd}e)1Bt0s%ZItmB$b4pPkz~R|*sl#_jukxxZK?4&*(yV1v{Cd=cy9oi zxz<39M8mi9FRZhYJoX{nS9uzKwZ}@BN_vb}U=0N4nG3AbL{v5wSeJ>Y_VcB6SCXLp zd?}+)?PsA?ZW?NyYSe^#fIGsdwb1G-N$L^qDPLPDlKcZ-fm=W~SY+**j-_~Z@fi5L z*s48)^hCbDFR@w@Q7vJK)m|ewqyENvhlq+|sWpfQ->>x~XkKQGA;LK<4kX2zN<^(W ztg@0N3Eu2hSy@EbI=<(wva*ScrqLMt@@lKWC!Ez&FdF07yT6BREUh zZtW$)ZPf(LY1U1R_&|18&wq;6Ri1ZRVU1vW-euL*2==%it&v1jkK1jHXPHQk+ilGt zqH1TiwUCJFaT!)7k(owum;>Ory2t7@3;p30k2>Jt&(>HX>>-X(d##BY!Pxg&$r{0x zoJ=cIBRD(VXH}Vvnw3AlSj&j0F>1e+N<`KBek(&G_*_0QzisU#qHNu^4iiyP+_9p+ zKwGN)+_j1jVe1KC{jOD8BOd{|XN@4j{$N)Bvkqtk-(?K@9uf7djI#61wx67(}^hSvG!3S%2q!6 z0?S15lh4j3qHN`}b1b|+8~N=xNrD+je!B({_U8w%{-pi2M$&=A*=vX>e+t@LHGXPJnH@%BGNl!x(lj<49mz@I|)^O6Mf-oiGhhkxlggRh*51Y?vU!H87Y z7Nmz;FRlp}wmUE}Mu0Y4vnpy2CNkP+P@mVVirFbd)M|4vJO9_{p;|XCX*)zl8`tE$ z@g?oXL{xrC+O0K$vz@2yPDHjx2m4z}*}WwR_P3O_hZ9jfu8cjA2%Jd9Ev%3&cby40P#xjp&%Jun*_81~*QIECZU#PEWFCfBM#Wq&S zUd1HT3(i5~YR2>S7AD5zNjz>mZ&z4?{&0KFgx34K?Q7&HkSg{>BCPp0ATQWgi12#m z!8Ne(Z!i7^^-MM9!<;`GWNiBfB8hZUF|JTK_D)IgreY?0CBd7wnfxlrhYJF7N|GWF z#XZpM*jYr>dX!_gTdJaX<8}%s$+K}8IGbdL{Y~cr4g*huwj^Vc%ItB-9wJ@63c9lJ+Ct z5;0QcPSiK;SR%^SoAyQ`Jhlt~J#X5lxfIPIvEJL;yVomQ?f-y1llEba41-dg?eiMx z2{K*nY>f;D(!&m=Dm@dRR3Cd6lZej)?Mz8<{3!#s2M@GQNbe8=xV`lw5Ya|oM2X@@|oH6`Wi1HA{ zSi2|@rFpE~fMrNCtyS7RG=ggv3HA_;Yy>@twzm;AtFd>2-IWNp!((9mBYQlN#LyC0 zBf@cPqCHuXpzlnyKP964nP`72^?VBJ;b%b4M0=Y?`af-b$v}p>0Um=Zj!#id~n8ifgJpo(PZFS3qW(J(o!+KkQz|xMtX2Ns@0q zymN0tvYd#DYlfX6N$@s0!_Fe2{Fz~gwkv;bgRL2ML5<{qb89ngn+W@Z+zdJlnxBVUB%_NP5iJ(Of&p5mJ6K$CYgVE@iO33V@zu`x2ALSE^*Y zVw&=~2+5>sq!f_3_6{QKb44Iu*yl9zB9M9ZqdQPfVrb<>*d+*LzWoFdmBaaVJQ1!h zk7VA~NKGIM?14m74KB3z5@G8NK;|p^9FtI4ctdOnWRd-sB=H3Ta-E2>zQ~SCSCPI! zrMeJNwieqz5Mf)LL1u}4kV)tV*oBR)WvP9FiE*ni?-yNa{~=|n7J=UmhEhxIYebaw zrFOoZ%6fm2sY--x4F$5yZbC%)v(nzgGNJ15G*1MX6nlpxv&O*q1hbSBdygdT;kyIQ zno{h8Obj9SQK#5vh$w$j?A*JQKNCrFyhdgMS#7r_qWoE7_x_P<8E+xR`Pf=}kR*jO zp`}2nwe|;+U`zOtNTMWrOS8{w?Mad>g*_guXQm|Mp;s=UQlCrW!f&YIZI5g1uO%rs zk>`hN?G=)og?Vpfh<&Y{N<>Av)^73>`Aj3^0J#12ezFcUud};oGPut6t(~fojUcn$ z&a<2J&>4;GKvL}zlJtQYcLtCRc120dh5Req8*G;dxA|X4rX3NL)$i;LT#7tA0y5v* z`!s^1)<*j@6XW;F(Z*?z*=%PMQIT%8V>8f0wJx#Q9!7+%U!YP+8o3H&i+za*e@nu# zWve}7kILA0(B`+ukI185(&4WPY@FFfkgP;OA+E zeVj??(?8&J49H~IXC)b$#^2F0?7Ku%q#1VN-uolXuon>FNS`J>DH^E&v8Q0kD~Q<9V~ z;T$5235V<dhEES9rhwM+JOmN5eA$x%&*p~}Zsg;s!uM9gQ z$ofV}ZbrzDL{xnpva^YB>`kat?fv)H#jkeU0g9A*K`W3sY*!?r^c=OPuuQ1>6}TT7 z{5fjRlB7?0I7vxl9ucGpSFJ^!fgzn@2BlQh_HuApyxOHrbea#`Q3iy(Ea&2 zYquc6dS-*nIeQ2b<4&V!V?L1c_EsV)W9RJ*NdkY)+f{#6dBz#zd0Q|E{SG^{@z+2u z*tLkLk>rBiQY(f1;)2~?Ba6X$mOb!+QWxzMB5ICw(Jp-$t#j-vq0~kD1&wR~@~7RG z2uHdF$R#_8h^mXf?Gr2$nj(MO^s;@9N#qxTF57<*QQ5d`#~o3zFFy&tL}}002-eP3 z`&W(p2-dIJ=ZUb-nLz%r%N|8NN^`bdl}KV_=U%p5od}ou6-s5>jWqHbkbmuoL{wZi z?9eggVHU{Tw97IH^?}ul>pyg;Iy=T0aO@f%09Q(YrCKg{9OXA%-6dB12* zr>P`S@OPXa=5*RAUx&FU}F5bAJ%L@ zCf->fNuN-(G3FBNadp;8(isSzCMe{jGl{I_7IO9zQBf3fjca;|Em9grf< zqi2*q*b<64B{hQmtAz8tMlL~~pLQ~caDKXgo>ESpv#5tjPavh8!bB27!6}=vPAN%( z_EXlWNJNcMWt|Knqm2siw%!IbmUXhvq2|#>jd!DrUtzxbj8o-2lQ%rr?+@fTXNV;2 zK;}KLUeQUFq-O&-O$nrub48LO%?*;N;*`rmJt|`_IJJpz6bVr31!t;8J_1tJ`GN@7 za&M@?YR-C%d;&72lSxF436@jnBHBtczIy`hl?55wsYpawx1D;D1U(lX(S8 zDb24s6|W-U9R35=Uv-9RHI&BFdj8P9hQZCogDj;>^%UJdkG2S=K}Cumq6i&ZU3QALU^iXKyxn z7%JbGzst0BewD<1Eg+{Pi5<-Ay=|Qfl4L|=E=$tvy=Z!RwsmeuQcONQ+dBUdQBkyY zLf6r{8e7^rMgJuaBhSjV4$te@XPh~-cLtJ-n(cIOYTv+8oQ+BlX$R-Q(|H}8p(Mk4 zHo>o%cXFl>QPw*3<-c8C+XyQW_QJ>8uax0OGwfb?+Q(nvP6 z-d;|BjdTE+-p&*vs^0rLSBP-Nx`RwVC*K{^oE}r)E7$`Iq`y;?NmN$VXk!qOx0yud z;r*QiBCO|qlG&$`1Rw*PQ$%>QnFQoLC;l$lQvM8e)(}YyJy!zO;Xr1X^SvZfU`)Uj zp<&K;Nyd!l^^IZ9Zb_Doil(=%Va@>}Du=@y=idFchB;pmVSjLKaJaKpBVT~^5zbFU zIIbl?K5#CwOelPuSExohS0$PMBG>6i=PnUteWX+Kf2zK4L>lQd(Fm@JjB?s(1XoT* zJE8xmE+Tmz^H47sIGw+DnvLgT+bZq)X@m`opDY#A}aHV&UPXkX$nL--Z@Jo zJ?2wbMaIl0IhQ0^bC_q9NlrGCh=)l|obh<153UD2NzM==%GQU@O(Kb*5l{2_;RMHs z!cvK$RTlyhBBF9Q;i0}fLH1>i6#Mc=PH!s3QEUe56P+onnR@OHARjwtHG)s!$GBl&SUz zYF2Sgb7n{q%q6Bd&*e}#+zUQWb8L+q0W!lGNQ7g@U%mXqIZH(O{HaqvCucSICCXV& zQ%Qnf#+>D}A)@@5h+Bd(kzJ6nmctqWi)*~!$%RUn@`FF&em;Y!yRP6v$?Ooe+NoBkifg&!65*_t0qe`1Aw<{~&h%C|`&bXvU6~UgG3&Q*dtT*aNm2#=jxBtZ zbA?Hyzpru%6AZwkyTqZ=G^PSTpKb?=&Qm9#yt(w9y7gs`Ckxh~`vhE)mw;kz|%? zqz91ioD3rBtI+q(Gmlg4MCQF49Z!-$J9rki(Ro>tVC{XQ^Qt7l`us+xnIyrw-$tjc zBtKQ)b-#^HXGv;DNDoQgfEyKXwQ!@;Uy@3&V__}yf{o5FNeWKn*0RwVBT2gmnIK89 zs=v{hMntu!jZQMlMCLymok#O>?75%kNH;l8Nb;fdaFg?tB!T8lPD3I}^CqVS5zc%+ z$nz$ri$;b6`N2scqB6h5$rF2j=C?W}B?&UW)hQ=Qkms#V6-k0TZ*?3=g7wv{P7O(d z_0_FTJtmPA;H}PFNrDyNtxl>e6-2t#*+N7`y4Bf5gd-gTacy-Daw*Cx?M`=M^HE$x za1UpiGlB@0nh2$KI44*pa{4UYiOo-?A}7nzogqY&^>k;HB*9ZA-AUq7WNSKTPIo@n z$Xp=1oD_}VyyYjS|C4Bo{rL)Hc01FFq{nQl3t!cMWH@sqIXfYm=8zfALMD+Om*Lzc z!u>QCXv}a5#&Hzg;Y$SWhRSeCNYbJ#oaw&}JK>#jl8l6vH(cNN*?B>d!_ewhgY~_R zr;!anGM##oG?6msMigJE}UirBD;7-EF-6_RTM!h9H?#?H|FQF(J;KBuVgHFV3AKNiYY9a~DezJc;7m zb&>>6{5W@;B*7Cu&fP0X@WhXEk4q9f@#EZ!k_6u(f`BZ#QmunW5jB?<13EbN{pGSg@PcL4SVTSeTGPosxir-OkM zb*pG(G?3!%EF!7~OSo%GskrdHyQI5CBS}!|X}4o(C4*}_rQItU!T0yF?p=*cgHq49 z$z@b2Tq7#yRxC@zm;$G{p9NpbyDpQ^iAVUIsJvT8%FLJrdlTSIs=V8dh^n0mZk1

    gyypxh8U$c?e1+!V*l&G2Qp1y13gP*V6; z;M-u4+!m+G?Qxpi0jJBIaF*N!*UDXSm)s4H%RTT%xhE}l78U87+>7#gRHUEe-jpw( zBK<7)p?nb)>5|-+@?}({U*vw2uOR>YfzqF{j)Zv_91WLDWkBQGKL{3s7U3NagDku{vXP_cwDw8P(kat*>DVVJkF(d~SDOZ_BIS*M!%5=*4s7Te7nUwEDeoH8` zDAz69UQRY#ugNjsFnNRs{Wc?}&Dc^&vUu7}ndr^@ZC`%~chlc!s34B>SiBr^5_=SS~RrM_2pN@(&M?H^o z)eAUJy@(6c%eYXz!gm&-BCS-f;#=x9T&3Q?x7C}tT9swCdSuI0RXn2VctUmJw`v(Y zsYc=tYBZix-B?-kVgoG>TWSf|T1&zl{(kfwptui%y8hJ)ZtAYcysyIlijzhE>I8>{JFKD%Kv{o0# zX!UTcRv*V{4e%wcA&%D?;{>fK)0~L3s@4prYAtY@)(T(M+Te7pEzZ!|<2{8Sr;yS3r?nKlCVXd|&$8--tJW3WUUhX=Lscu1RwN3_ZKwKfHhYDIWln}#Q} z>G+E_6R&Es(5cTsmp%{6=<_i`Ux?-O#h9Wm!Sec2Ox2fTn!Xa#^;K9wUyT|18qCz! zVnAPqIr@66rfOY&H5;%8ihIqHn_o^&Qw<--%D@yRg5$8=uzq z-~hcCpV3QjpuP_e>ie0(A*8SB2PhvwmRdhV`6zPS(T`9*hO~fwl=2CrC+o*3pF~Bv zpr4@pGje>?Pg1^wJg2LlLWkotIvr=w4&yFjU zJ;*-RaTUuuu3-zu4Q%PSiLD$mzjazWRD8gpV+V&5pLdkO5spZF!4Zv<9B!Q9@Zxeu zoWgmZBLRyYN%(~$nc*iKe*Dpqf_0p!*xi|qFE}%Bfir*$o!Pj^nTv~^L43nmfNwer zajCN+ZgN(_tMn2ZlZOu@DhMc6K48uo~oj!#6)#HS)=VgHCZI3Qvk zJ`*t?2SzN!K@p2_aKsWE60sDAMl8qC5i4;_#3~#cu^MMatijhJ*5a&)b+|raJ$?|e z0XIZ!#7z;KadX60ERNWQUqtM{l8BwSH)0p=i`b1vBlh62h+;e*QGzET_Tje?`|)JN z0sJoF5T1%SfMqa?tkr(Nc zV~}Nuyi9of`HC4RC!_L;N7BF>Z`%ikqUE;i0G&csQyR9*Js$zecsi zt5NOodQ=Cz5!DIHMt8yF=&tCC?uM13d*E%+J+Vr3FT5kVH@1lGgDs=`VyozW_(XJn z>>E7*pNbxc{i6qCQS=a;8a)iBMGwcfqDSDW=#ltN^e9{tJqACI9*4!z~OIn0Z(bGao}S3$a1WV!SVA2{w#bid|!t zaT_n9aB>W-Bg_*@kOkcHp}) zJMsOPUAR7GH+~Sa2RFnNNw;%6tr(jig zDpqr+V|8~1-sKKpZMX3(PX~7{c60}^i@N|Hau;G>cSU^CT?zZSE8|n{D%js$6^FX3 z<1lv(9O15oFSu*tNOxU)(OnNmx$EO-cLN;nZio}yjd7~GDNb`Y!VX zy8Gin_W(TP9*AGN2jfxq5IpA|hUeYG@hA5Pyx<;*Kf6caZ|*U8%{>lpy2qpBnTWDy zGAf=asCtS}^Gw4sp6M9jnTfHUSs3S;gGruwSk^NilRXR3=UI$?&k`)>S&HeNa~2nS&f^=N3%J&E5#RG%#&w=6_`c^VuJ>HSk32VUo98C(^vF7A!X6cO zd35~Ls85!1buu!6TT=6S1N&|4J?z18s+Zw;*It%bLG zYhxvEUA)a(5372OH~*`78(?d1Lu})1jP1NlvAwq$KI(0Oy}YgPF>f2}?QM&Xd)wmx zZwGwF+X?310Rt#b3P3@i*^Eyyjhn z*S)LphIbAA?p=#Fz3WhqU5}2~4Hy%<5#6zy(G$BBgR$E%KXwNe#_q&hVs~M~*xlGD zb`Lg=EyhP3qu5he5_=kt z#-70+W6z=-cOIkSE@1h%ibXu9v6qB;}UR8ToS$4@r|)(d{gWd-wb=lw_wVTBRxF6 z6%LJWgD=Fl#gXyt@x}NKI5xf$j*IVtljFPM%kkZCMtl#P8Q&Av#rMKb;(O!y_&%s4 z^hGV9AI2y2$Fzh2n4T~Y??@PoRTG9_wS-|;hl7=zCw zjAO_^q=zJo$9EDY;+llXxGrG|zMoKp8xyACriAIZIbkMlNtlIO6XxJY3G?t+!hEK7 z9625(EX4B(i}6ar68tq`DPB!jj=v?W#A^ww@Or{(ypga5e@|G8Hxt&Ol(-({#0{t= zZbVn&W-ODq72S#3Fez~dmQCD=$%(trm$)0#68B(wVlh@oEWwP#eVCcJ9|MU8FgNiK z<|Q7%I}(p#!^C6QD)9uiPCSWS5>MeniKp?2#5348@hm=>cpir*Ucga_7jbmrWgL@u z1*arl#a9xqVNv1@oSJwOrzOfx_E(AgBfZk}L>*@&I-RmK6FGB8EQ3oEBk`TYXxy9V z#si67bSK53FDU``8t0(uyM#+7!M{-~6o7@ivCHKb>$pdg_@<2SEJQ#mY z9)dTLhoRydj!xeQbooYNdEY3k;2VP(zHu1xjmJXYM7+f}87umx;H|zQtmK=9xA~@H zHQ!9E?VE-5eRHspZyq-B&BvC$h1kls7+d?6U>o03e89IH+xu4HgT7VR!M7Sa`qp4q z-&*YHTZd2h)?;7a27Jc15eND<;~?Kw9PHbM&--@Z2;WY8(YFgn`F7)I-yVF$SB$fK zCHT5;A1?Im$ECglxXgD5m-~+3+rFc?)^`jy_)g%5zLU7ccM7-qPU8;W8T{CH7I*s2 z<0rlg__^;QmiR8?m%b~w-**+i@?FCNz8iSVcN0(f_(#H}(>@ii_;mc$=ftbNGI-4w ziPwG6c+=-bPH0f}$D!&^K+T_ox<46Rem|D+r(lFX6=VGA80*i#IDY_>{MqR9=VGcq zi0S?U%-!txz5d2{pT8+K@i)U3{ubET-wGf0x4}pKZSiq`dwkB{0f+lL;q(43IKtl* zU+{Nx@m3^q)bRJf@&2AT(ccTF`g`Mae;=Id?~4ok{cxebKd$f(z%BlPxYa)xKlcy8 zZ~epYcmHs_=^uf5xsjMyZWQL18-oSq#^D|1#$$_e6R~Bv$=I&k6l`Cv2)mb?hCRwn z$NA-E;<9qHaCx~o_-?s*xUt-P{J7jg+*@uj9xb;7zc05GFO^%4a>`1KN?C=8DXTFf zWeo;X*5Yj`>#%aldb~4b1J+2{h&59-W37~}cvs3cTB$a2UX-!}o22Z-rYXDd{*>L= zEM*VhX^w1VDaF_+r35>t?87c8`|+Wa1AM0|avqg(2%ktff_+nt;*%-IuwTjvzVj5a z^`)G|;*?XkKjk#$ls|*H<3hJq;=txb+l++B&N)6yGso7XDH5VJC2J!yXf-h}NtK+cL8aOJo7EVm9jgwOA;_TFVI489}E>CTMD^eTchSbKmCABGj znc58Zr?$XvQd{A7scrCbYFoUS+8(8}4(Lwngr2l6n3L8ObJM!vJ!w6#ep*j#p4JOn zr1i!wX?^gaw7%FYtsg#_)*t(&4ZyK!195WNV0hvYJJAEl0Nnegv(pO@1g;iLt!fGt6umCt~%Gi%p zGY(+2j6+yG;|SKuIEr^=9K+ffC$LV&NvxZ33hQN@#(Of(VEv4<*dXIP-j{I!pUSw1 z{WC7(fQ&0RJmV@ppK%RGWZb~lGH&9s3^{^6lcD0u3?0{HIPv|AGPph?61QYT6nb}w|GZ$~o z4B{P`1voOZ5MRu!h@&$rF~>!jm2q)q6?`MJDz40|j&Ehwz*U*G@a@dnxGA$PZqBTS zTQck8SD6j)KxRWcnAwdckTb{`OJ)nanAr+1Wwyb~nQie}W_!Gm*#SL) zPUsDE!Pr1oj0<$b_&^U#2=v6nKrbvC=#9yNKIjYdMSq|lmJ9U9!oUC=6c~uZ1A}p7 zU=eL;)K8`oE#W~uLQOFa;L`itvrVG+Y{( zjw=E)@vXotTossuZwKb#yMg(*Hn0%a2NvUpfhD*luoSljmg7f(mH1g;6_x~6&{mWfkJFtcrL%s}i2bs*LBds^Iyos`yh@b-a{S1Aob?g;%m_TWplw9vf$Oz$V$9 zuxWM|9Gcw~hh=xeiP=4HQg%ba}&&fGOvH+L;I%Uy?^bJt^++zt3t?nZnrcQd|}yERgl#v^?rcN^u2NGs*;pgbA5 z7LmJ?@)V@!ZGc`0~4FBLE4rQ@}{47{EfKxZ%;UBO(84F)kTSb*`tLi7bIVp^~grUxry zRgWZE|v1hP7J{s(Rj|Dqn?_d{vJlGZc1iNAXU=Msc*b_$wd*RE$-Z&@N z2j>R+;=Eu#ToUY$Zw3e8>fk_pCpZ|_1c%_J;4s`79FCs^N8mTXk$5aP3XccJ;OXEv zJR2O3=YkXQd~h=U9Grp|gGKmTa2j3Kx$E^I7n4P~0bMjYXZvGl9%wLPQCG zZP+S*2e!`Ni5>EHVekCi*e8DvK9ygL{qsw3Wd1&UF@Haf%0Gak^AF*e{3AFv|0s^j zKZY;mpTP0?CviglDV&&p8YktS!72G?@s<4ZSd@POXXIbRnfaITwfrkMEB`9a&cB9p z@^9el`8V;ce3^f*U{$_~#rZmZk?+Kk{4#hYKN5e{n15pDL(}{R`^hpo021xS#<(ThI`nFKCP- z3Yy|e1yf zg%041&>@@|I)bx8M{#!O7%m8%z@?#+xGZ!EmxoT{JE1eUCUh3x4V}lep$qt4=pwEQ zUB>rAS8#pkDsB#4!!4m3xHWVWKMKkGjr&hRD((vD_-V+A#i26zMJN(WLeaQ4p= zFMb({!$YA2JRC~GBcWvcI^@Trp%nZkl#0hf>3A}ff!~D!cs`Vk7ecvsF%-mKLIrp| zRERf174i2_CA=A`jE=%8=q#*?5rx$;vakk571qM|!rGWnSQq_;^{`xFeatLufPun> zm|xf!Z!K(!l?t0-wZaxyy|5MDS=a_^6t=~hh3)a4!VXx!uoE^Z?1D`TyJG9YZrG-< z2evKjiJc02Vdui$*rl)!K2+EjyB7Ato`wDK(ZT`Pt8gGbRyY`+DI9`B3y0yb!r}Nr z;Ru{nI1*nk9EI}>$KacVGa7%|3(F+}i)cw_v3e^u4p)iXTZ`u1+;H`V#4!mveb-*v}eJAktz3&2kW$z8ZJNCW@_|3iV z1OCU}_XF?R`$6FM_udHn$=(kEf4cW0K&5{axI_OKaHsxp;P2|61fH&c3OJ;H2KZS0 zAAo1+w*YPZHlVA29(ca~1>jTkF993+mw^ZMuKE8st zQ2!S2Mf$gaFV?>Ue7SxX@D=)Zfv?f;0lrrMKJe}O4}tH{e+0Z<|1t0e{ine9>pus6 zSpOyP@AY2+Kd%28_-TE|$;@E-PT;@jyMf=(PXzwE{vhCg>JJ9qtv>{KkA5=nfAog} zf25xRyjOo1@aOs?fWOcOfjf;y0v~Lg20Y0)9rzGq5Afl}V}Pd_j|D#3cs%fQKgH)enbjQzltaWQbskaNS=ji&-HH|oG=8V%r; z#w_qEqX~SjaTxeKV;=Z?<0$Y2#v<@fjAh_UjLU#m8!g}~jdkEP#udQV7{`HcGM)*1 zv+*q8JB()ouQRR!-e5cr_-^9`!1ow`3jCn)BH-T`F9F_YycGC%#>;>oGhPAwr147N zEyk;Ww;Hboe${v_@DAhk!0#Au0RETpM&Mn>n}PprycPIeZv#HT{5x?*LQtF5m^`cY#ypJ-`Fz_kkCiKLpmz9|50c{utOWe+oQo z{v3G3{3USS{1x!&=C6S(<_>&0UuNzEUSaMA9y3n_9ycEZe1`d8;4{sK0H0%?47|#G zDDb)FDZuBM4+Fl)d<5{t<{uQ4ABe69I-;2X^+ z0^ekw34DinHt;%gFYtQP0N!9)!1tRD@B^j?{IKZ*KVqH>{DgTv@RR0KfH#`~@Ka_4 zyv0m_x0=JiFPc^0m&|>@JIpcQ*UbswznK>Tzhl;b|7Feq?=trTzi(a){DJw0z@M5= z1^&#e1AlHdfWI(jfxk4H!28U@z#Y~+@WIwm;7OL8J@Gr%GVm1ZGT^CJ3-~Z=9r$qT z3g9EGxNN-#xMIBzxMsZ{c-;CR@EO*Pz-L+?0{*G>5#S50j{;w0eGK?o>*K)J zS)T;{rS&P`8?Da(-(md&@H*=j;JdBcfbX$B4}7on1>pOvF9C0~z6|_Z>np&Ut*-(< zWql3!Y3u92+pKQ@|Izv;@blKUfd6ED8~6q5JHRhmcLBd-eHVDUbr0~%*7t$`Z2b`U z73)X9pISc#{>=I*@aNXgfxGQr0)NZ?74T&H*TCPlcRZBuW$y$&%-#)rxP2n<3HF14 zPqZHlJllQ<@ErSO;9mQoK;1qCXxI+}diEoL6?+gkV?Pr39Q!ojRrcw?=h}OK&$Ax` ze7^lyJTtri$X?EVJn(w^iNG7|GlB26&j!B7-V4rqfvi)u0sN$G0Y7Uyz|YwprMCd- z=e7_0ynQb4>-PD;f3u$g{DvI>ziCIn|F9F_x9nly59}(}{t(D2X73~ZBOp9ddkpv! zdjj}V`$FI&oEmV@nE^i1*$+I;xfu8+=MRBzah?i%t5XMF=QOD2uYgbxj@XL-HITP+ zn#8XMGG?8_z?+X`b?2N~*hJ3lwQ%^XVUc+$jStIj0O%$T?-; z$>dzMhTMsO^9yX%l==_Cv0Y02YCx$^oT${N2%ja~LYOiXGrm#>&R6Q@NU5KV;J4`l z?7}CMI;F-bKl_z>CE*^zzh9!1_Ee<~64cI}%6-`mtZ&rL-Rg!vV{RaJqMCS8p7$Vi z4VJQ!_h8k$K98NOUXE3wd&7h_Z`@IuDU0C(t(}ltGlrbmb|B^e=TBxI{OcEyhy$D;yjk9 z=;pkZVf7O;k5$!Mv4)gu_opV829$Ccp zt2bvYKCts*^=a%%<%&O4*PWEdo{FS2kJZ)r*&7Y)Y^aYFPcW(v0|nk;bzM=* zyn0PhdQ|<-qw-o7m0r}c%nFu2{blNV1zt;y6t%3YHx+nSsDCc%JB}`RUduC)+2*ll zsmTKG+3H(GeOIZo9+HT>kw-oigNWHSC?4af%i%k74^MJy}rPEwffLv-lnfre_Y)6_3B>=yf>&bIJrsM^o{C81>T!gT;RP` z{bhmocJ;lYzU$N%isyT$y0N(LyVOGqyc^WM0`EPn#CiL@Pd&b<@BQkk0`G(BO9kGI z>bBy(A3|R}f0mD^9~O8YRp%DZ_c8T`0`KGMsRiCA)r|$-r_}BO?=$QY^85aSI=R5R zMa>s@x2ca7_x-#Y`ayoTFQ_jS@9`y=JbB)i)zJd)E2>uX`>(2x;{iq5>TBx#cng%+ z*VU7-=a<+w)IO~9CH75q_dR*+Tk5xqyl<=PUY_TD2l_9M-KAc2cV5dq>d|N9c|TO) zWAoULR63u>eyskaxbIKZC$Zv}d;DB^OnDOfm1-5GJ9a#|xMKH?8?$+60E@qG759C} zj#t<6`cB?)?g@G9lpXgjY65z|Rj} z4g9CUTY+B~ybt)r!87hVU43aV2HrmSeBhS{pZ}}V)jtp33jE689l(DXyyMrWtFI1T zs)p3R4qm!zNPTVaTHqancL2XWc*k!Hsec>15BQD2T@M;k|30|uAw%k$gS#F!gwE7S zz;6wnG&rR096ST~?ZLBv|2cRb@H>O&oi?QYYw)H=52?EbZwCJN;LX1`q`o_N2k`E} z`+)Zhjy`5ceQ)q;;P(e_1^!_0*2fO19}eF7_#w2hZU_Eo@J`^pgZBb|Jb2O*hSX06 zPX+#T@YJ)0)XxUb0RDXNEZ{E&uLu5e@K)e`gD0ImgeKSXf&V*r4e-~4*8-Jx2XKdW zH}C}QZevL8)J`>r)GqBB;BM_&;DB}q@I>uC;BRR6SwreU+I`ND`c3UrcSt>0I|F!< zW&t+DSJIsg`ysa7{Y{xUS6sFW2VYH>9r6t_L2|ZUP?HZhHR^x_&o(UF3v35J~CEA_9tF=47JEUH!-3|ORZP(pH>Sfxgz?W-h z0AHcmz(3dKfUnf92VSGy3VfAz>ko$1Uud`fa7evcy94+d?QY;}wYz^jq+X}p2YkJD z-_M8Cwc35Z8bTZKQU5!n{!%*&_(m-TzDbLJJ*3{OEdbx5T?u@vcIAnC)Z4VHfp6FD z2EIc(={NSM>$H;|v`77wcG7R|QSa0q1^jF6Ea1De^MKcDqre-qD}nFUu6*zw^&ahN z;Cr>JAF@ZiPkS5i|7mCZ)*khKEe3u-n+ASR`vCB7wA+C8kEz(&uMeOTeP{y?NPUCcLHzI?tIc7^^e+}=j>6R z*X{-WlXlkLJ?abE0`QC4-PRs-Egxm?QMYU70l%!BSJ{K!<@14G(Vly}++&yUyRE?$AyGeqEae{+l)j{D!s${CDk2;5W4^gFWg$v@0*%qrRnG4ZKr( z8}QrAJbToCYBvMFqumMoFKyRzWc@o)mH#gLj~!WZS1I$tr$KYv(#_ad_LMVE=oD@& zo4+crPY^bijqT}QcFEI}`s<6kWpb^gEkS@+|ek-3j*8&&8VhdDv3FL;aZW zlilx8KPCKZ_XpL_3BMrxa`)e;`*wdu{fh9vyFagfz58~h2EM6w5Kb8Qnc6vU`;J`$ z|FvWHz<=);82H|f69;~<<2MKoBK+pS|Ll11!2j+zY2c(29zysn?4nN|c=!pwJ#gj; z4;=_j_?>~J6HXaeKH=1XD^7SA;o*cw3>-V*cLzRn!r;IcPS6IzosT3uif|g?(F3D9 zPbUl!_7HxL@EF1wgvSydM|eEp34|vSoQSsi%W z&I<_p2%`h<+&MOI>(23kUAra-lLG_0E*v;<*A$^fm>xKD*UZ4VyDl0S-nDkkQ+5}r!Xku zU4-iiHxS-Ucn{&dg!d8tAL0Fk4-h^`_#48Fguf+xi11;;M+i3&K1%pI!p8`IPxv_D z6NFC^ZYF$+@M*$l2%jbV1L1RoTL`xftPYH+_cHz_GFZ#tt26k@9j_jMBeCPN)swi zL7c1uYR$D|`Ow4?(R#Cp)WV4aM%^$BUB#pI@#$c=ZW2$HW>=4|tj#YkCDHJ5Yt6EI zGCNs8U`2M4hI(Lofl+beDAJwCH(cFFEz_xlMq-oHRmBbUwBiJjVTDd5tyJP9P2)-$ zyGf$^j%`&!zmkHuvV4VE=XWZZyrgbPY*IjSY^Aw6zt~(_Yb;25_Q?9uQGVmm+Wg_A z=Bh-eM{Ae!yV{tWKgMspUR!Id&Cdp_tBvE;rTMk#<15YD{4<*88z%KvCzG+*A~xPw zlb@~8DXayfwSZs4Gu+UPyg*OGRQKXI4s|O@TqBNyP&Z7=*Lh(O9Vd*U$hM4%ZRxfi z$A)csQE2;4Xr{64`jH*mF^FTSQH^Ruq+6&YiNh##%*gdzX(K0f(%3h3KdA&JReBXS zFsX5yr=@VR4rsRw(Wq|P+g;*rTT0>N!Dj79!>CV1X1ynAOHy*9Fp}t8vjwz$zNTe( zkzq%vuj_W2xKUWCcombEaYKua?puzoEYGBIQoCXXbl)IOol27Gk!1vKPze)@w@oVn zh4otj^1j>VFiYBi)oG}hKvoBQY2j&w_sND6xMrdJ#D z3(eIoQapdS*;?zSR}alPhGEm=OaS%I&(#kuG>$gSgOX}3nk_1=U%{Q~tBZ3*UNav( zJ=r6T%Nq;MN~6^hB>J5ExN#DCsb^P=isRX?ZH9VSG40Tg^h#*CZsfaWV1c-G=cLdx z?7+8EtD-vzqc3nHT~Gah`YJxXE(nv*bYc+42zu;Mr)^i#Bz2silIU^ZT0vMztu&1) zu@zVhL$BTBL>&5ZTrmyTcFe#CjKqpUFJSE2agYFwG_-VXuDmEsJ-$}N`1UJ??i-$O zL~+Q3LZ1~>mo5xqZEAY5K0Y%#S|1q;qIzv4FzW5>AgLKoR_o6C{?I zdXCAE^n%DtL(esgO2ww{nyKYiywGPd))DGeY%?)k$4cGENgT&_{Lo2=>a=Z;M!MnC z1~jeXr)dzFJ`E5B0h3$E>>H+W;!?StIsvWVL^M>I>Ve_7o|#g)?)eoyfagVg3g&;4 zXQnHVRN$%MVfwhPF3{B|1CbuCtHWb)O;`H}H9}mCrkN1;>#BKdZM8AGM(l8Nt$qO9 ziRoavIx$|?>!pN2B5hh`Ij<*Sl}qe$!YL=*a>64qap+L1xi%J5xuIHUEFPR|@Ie+< zj_||aTjXc@NOO&!>Opb{V|BnBPp+eDppMQHC|F;l$F~H|FEO7p&W_9=y6?sgi=>%42{Q~`DD)U}W)#>U zdVXNCEO{WALF@$;pBdaULfvB(WzN#Q)S>SfYK*{2YIN_ch9_#%@(3!QIf{kR*k-^o zpQto&LL;iM6qprH_bT*a!;cKg+%YlN@j9w zjqGeOH56kf;YkBOv|_iyfH&BtR07>+cCifx9}jQxFey%?Nnl!3oJLVnLe45Xy?>TJc}0zk~Hvj%3UuBgG6`z&}J#;Lo*3hTrV_a&XwK} zvonk74?1IDB*fPrBOl}#Ps>bsT)@;J7kWFeVgXf`AM1VnKP|4F=RGo zYs1isEgC(hZyHX;iELl5L}B1m0#<~C+0vkvr~+bpIhQ3sH5LxDydGgam(iSMF;b1d z)0z2G-Etf|uE=a3hbiNleT44^DX$yy-Z8_5>D0B8*w)$nrYU3HbGVQ0S9Dr3)f1Xi zO|CA_He0P|bsE=PS;k_u zX6EM=f`H$Uy>R5{Oj$|A^HV4ES)=H{T)+ZoM+r5i%s|6NHp%ldx!Us*Bb#!ne7TV% z+Q(Rr>id$5>v3(kPD&ODelBV(tT)4j<=LZC&Bk0k*f(aV(fOrjW3`*^;#8Mv&Dpi( zQdy3hF0U>&)}qF0QA78N{j2k9&2qJ+jJ&R58&=BiUfsT5-@>>#yV?|@Ag_M&Rofuk z&y`j7aHXoF#=`9SLSwB-BBsh|##>L?G0dK{;rFIZ z)9xu}QtU~aj!SwptpQ6PlGNnU*_Kn|H;C(#`yyhpLonDO@Qj3>XPhpldB&bJ&)AdZ z8GF(^V^5lA>`C*Cq-95vcdv_>9p`6Pms`t+vJp1jTwIY>B)>X$;cRR2==`w@quO!E zx?|+c?l(G{7#>|{Q#IU#yyFt0S%+O(zG9&{ceu$wUOq&xBmZchyo;HSyStxKf)%h^ z0;$))#4wgA2{4$sld5@sn?~jEoQxDvg%SeirAP zU@4Ezv>Jyq3Qn!J^52n0>qv%Gru5@hBb#~iN_ta5W_1d?v{Zhl3>Kp}i|4zcESl~A z3?yTv? z(Z!aX$AY+4ADf7ix=|l*t%Jp0wAGZsOjJT+6%N7tN@HoQI!DJH899D%b)Hz2t|^0R z_6UojN)O7SK(AiOKK%N@#YRi6SwFbcT+8F-{wY22U~_>Hya-jzU|wDTvYBT$%x0c? zmRM|>t1Y-nd_3wZhW7Gm3U^DGO*Ccy?1SrTYf{{o7sh>`aa@>UYFQq()BdZS_9rIo z;Fv~{m&fFt4NLMOb9(6@+?pIwK2(k?b<|UcM&MR13Tb0e0q2^kE+2y4*uE{5i;zO`Qyj<{Qy!j^4D;g_&*DM;DlS}Yk zEOOJSNnWCjnMavER`OW(N$JO(@+_L=T8`u{GD)j>f>4!o$jbm(?WSj5QAFY0wWEgT zwxjIp+fmDvsE~chLhW!o0xhT?%bR0ZehF*rF2iLaS1hj{onJbMS zivgXy>5-`zaTb>i7W6P`Z1Mg0Lwr0su z2oI}Gikk(wZ3?+9x!J%ezmZX2k+D?Hq6@b(bG9~BvKxX+16>VeER_M;L>$q%)yAQ< z`k_N}N19O8+dUqI@aEMRfjujF$y6wz4^yt4-H$0p8Pu<-qSaYoPWuw!{bbw{qt&WQ zmowi>;wWK`-TLyv+-1wenJXGg@JrVu5zN7a<+oA%!hu+Yk3~+H)Tfv0Gu0(YjFuDA z%Xwzl8g8!TQ6X1m<}=i43tC{loyus3q9i)foIP5^Az=-}LMmawOoV^nKwefV@CE$< z(mF^X>7cG{+J?|rYR%V=`E{b(e0sy-b-+9T=T=3C25e7HqcHK4*o6HLFEa7mD5w}A ztdG?7;dXE?;?YHhlc4QJKQzjlUL`ubUV>nEhv7@h|- zu?2I~wgbzFEgr{DBcIoI9ay`%=lMUbdDZOg+KKKvWjUpH%F=Yg zx?C1D7MlwT^9_kl!>?bJNYHG_kMPwc1r}VZII&>}MR0^Go}0oM&~@Zch$dn$2~x;) zcvdP1Jm0er=0vba5d@~4yVS2u#Xrj1lP7w#3RDIi|J>=my8X*M8$%^XTT@1Vd~Rm)EI#_H$3@D zp#hIRF+4AgV|d|#rTeJ?OGmgbZUSOt+kA!u@sV!D6?oJbD8XqAJY)h6Z4kkTgI@T!%JpFK3~AMTaNQMlEHqiGfS8k+V>~x_!UWMO_9$596TURoftx7zh2X z?BOg(cW!eQSl61XOqgS|{xXnt0RZ@N`qqMX67I(uaP^5!%%cx$b(xRTYekxu6^rjlp^LH6Xt ze!2{yL!?VDT3lZ^Q1pRKggGlgpS*?T<)iB>lgn3d-NlTMF5zBE81+)ZEGMjT!Y(Hq z5}gL_kQ?>1I$1+nO=0`NCmXBudeA!R#bFxh&0qEYnDN_L1mEzjIN2EU4|P zk523drA#bIGU`&;@~L`K2l=uDNL=<0ZJL$nEYl{Thi>J=7j!FIh)g)yOTOmcB3qWZ zQdVbEp+4Z3xU6kAaW30CAmZWS>I zs_Y5`terf_s3I?mWi>?OlAi1WXf+V*f zeF_92ZVH4vn!wj)m{()6XWJ3T93B=;i1k)|wRzb(16y+D2}1bL$1W4l*{m@NrGyC} zi;b->AWzE|1NkMaih>1o9$W@?i5mIltu?3{#<+kEVWV5hLogJ$AzbXh3R0WZ4^by8 zE*x>+jP1xX;e*5CN5p0cS!Bry8TiPmedHRx?H~<7qKm}Uj1l&DK62O8ijbdlZ$rFN zF)N~GV1#heBg4~81hY2cmoV_y$XJ!AVj<(fHI>oET0F$IXU3^Y^HfP5b;DGKS+f~k$o-q?(gh$9+tXl*aDkOac`*k*5SDRc-D+qd|{p%IF_ zo{b#s!nca(SrtAwzm)()Lq{pewS4-B=XzeiF4RP_g6uMekHgN&^%Eb&i^e8dUu(o% zR0b-#X(6vljTEV`XQPs#2S}~xACc!(VtP(!VdssY5S1T!X{5teXtK@H5k?{Cj~zDD z9{ri_tdN(YL|~w2;3K~^Q^ac?T3Q}EHRM+ws$B^i=!mD~DumIdi}D9*0Wn)_3n8Ul ziI89MIrIcohcsqzOaLmWX-0m6AV{`_2vx%vH82FU++X&Qj1{U&xIg>lBqqX0*|=XF z;j_w~E$^W0*{poeW~p(qCP}fuu-IUbBFM(VYE$)$@VK$oxX4lmENoc23!`2yB@7ao zl0hlYEF&-~x|c%lbQ2DVZPsN=nAoyo5w9> z+K>(&^j*vh>ZT@2e0GQqm&Hu%BgAJShGy37Y+^(E%O<)tu_>iVS}`o935XX46y2Qu z?U=}cSq2c#BKfuh8`-u@`?jh$I(l))Z0Xa8ic=AmLyNg4>KaIyO)pN6mm0RBM&?D! zvUJp*pk|S_iuM4*l!XNSLeYk@6A)_zrt0k;lc~_|5Z>(sT6RqH?Gj%kKScs%IzLaq zPRlZDGvoCOBBTt0(PggXWgEC_S!S2Lmg8hhwJbW0*hgw9*lJmv#X0*899|bf7F_^Q z4@K`Nfl_3>(>=&GcUua_2$O^h36Q9kc?=ae;_zegA4h(oiE;ShzJ z=H-`xl&&r>hVzG|7zP&^)5|@{nuuLyR@jlYDD0+4bXle(x-3%?rG7*z>u%DIhS?7hd74Z+c|$)deUy#GJ@?;O*tzk>f=yqhr>7621HIu1w(RMBa7*84yK3dh z`*-v{bv`i6c;tcMJ)qn6e3koqkxol*hxmYyq*-E=b2g9F4b8&KK2W^I((=;%SGcKD zw7ctu8w*~!KWu|m`odda_4I-*aIzbAzS$N?F z;w^EyUw3Pi?uYG%Q&_ANLs@?6vU(L8V~K9u2TNXiA1v`=AKbl)y#D*(9Hq1mmW-~5 zT~eK0u_W3ec8Pa)$dX!HXw_F%4~d$VBsXrDi@c2+X36eK+$F{KS$Q2Et8D^6lPQ6Ls#ms$N~@%9vUt-F)(E-5Oe{W!j2K49Phg5R=6;3*ms(~-POV0 zr2S8!%Qg|#iWjHwyhKAhguNzg8ki{_Y$8;1g@48#)PqfiS}`fpN=&iLKuCshlF*PS zFdL%4jvT3gsa!XpT~L2!XBc5>7NCSq3981ZbfX5YqnGUnv&zLr0EUww zMu@Q?xFO_yjAI-aL~Pe>&q+erGGp!ouM0LT`(i?DJLrAGjYanbYX~&JJ@}$1oTG*w zlYvS-mS~BM#TJ;c4+#$w%!Hwu!pYOcVhF|{Hwz%Hu+W80_+*f%NIz3l z;-O!S2qPPqbs$1Bs1Y7l*im#BcC(X09%MYHPB(A!oNRTmkj9YIxm8OkVbn_r%+$JQ zRyhIBqFdsW6K*--Ng@~Cj9@xJY8ZQkLfQjG&_`P{+uC=H6dBFUO*=6Tiz1#1P&1820{%@M3Et?%VuVo8F42(&|E4~lw5-dm6Mq%Mj5oznt7&ZkCHHE2{R${xt6vbfi8H3m^!V`uB zg##e(Y`DJbz(BXK9!q>`hYg$9ZffwraF{*ah1;AWzkr_$A`NAuC;=xrN~j8(Tphy* z5A#?^UTg;vOdSzHILbuVKR{;T2_xU3k^~FW6pl8N5PX>=vjt2*?2?V>EL)I`jtXFc z8R%r7%OZ9eaEM_{pitmrLS*pvaQZRx^qg%-bEyQErtr@KjB;h@1~ibsI*X5jmJt7?A0K>ltG5lZFUA&`NNz z4}mn~JEb9(OpyN&;!Z{Y$_5}gFgYIHnAq@<(1Mq+wdl-h{2`Fuo6{25Xm{tWRBe};G_eU;xrQOsa%mPE$K z%Mva|N!UAKS&tno(mfaJRuO_R6(<;y!LzrRCb?>BE**u~`@$KvJccHg`lx;(5oIpH z!ixd#BNM<3%Cv14x0{$vGW)`)$C47Z4?hMw2Fqa|gZ-7r{K62#t#3!SQ2D~tp8>RS zwGz6x-!+}#xoLgdd_@n*^8oOr?hZ-u0Pu46vPeCrT1v*W&1#YRawnOdTi?*n<+qm0T`M~fx zUt+t;dPirwV{Y+$B}U$Mb@qBJQmXDdi50xf_Tyz8W)1F zVMDb&eR4a*?Eam`+YYnbJGaAoK$QtnrvbOCt>+VLhxmYN>vYKNYAg53`@!q8R!bk= z@Ij=VdqjQhe%uGIyr^x1R_Y2{VD(zpmQ;U9S^8mp;=5+r6gzMjVDOyLO%-yzC@gmn$P?T8Bx%wu4! zCn&~7!V$x?5mhp{?~a$DZG4s)uMK9O%-HMG1Io#r5RRkX&MAU3!^e5ovL#t;NY54!ZM%l%u39=5H z)8I@F#I0Kcm9#EPpq)t*fTuqOaB`q7VlM!=uS~ktuU}Po|FZ zGCZ>w!i5Y2n`R5pa>X$a<_7rv!Kn$HPCSk&^bAp|6&G7D3S5(~lIV$pvNn!fu#H25 z8Igw*(m0}Z7-2>Qp8=gjoTb3gl}AR`)#3se8rXV)I2G~XOw^GPZlJ{N<6sMc6Q9+_ z(+^t0_|8G49%&9jBv?ThT44YOyB41}2sskuEokB5RYyltI#Xl`LJ(0l$6pkJ8T1Z4 z2k$TF@4BKg?x(Jak}!HR8c>B8vp(nK-rWcmV#0iJlU%fg#lgy}f!98@OZg<}MUizHSkw9inc zOqpkyVkQYR7HmeDWjX?qQo^X05~w_N(JVhQYFM?_g0KTj!|-1ueED;|2?;%L$nR;%H) zWdWXo&uq)Lf%Tt?mm*l@mWvq(y60$yqZ$vl89ASa@~9;?dN@Qv!yRTneak~`5aZ4W z1@I)sQ56;jAdV3Vm42$%b%$Jh>-h-J5^M$?q=^_Cz-Gf|lx@TQf(z~`R5L3&A~94@ zag&FpH(!i-#DXu6Q#c0~cKGtau%W1$h`13$#ntA~Vx(fGJXnZ26~4z1oT40uxC{@F zuDEeRsKSh;T!at^6|l>Uy$HS7D8}jmaRUNEe9Ymv3|TAPk#`{A8q`KUhv}dRdp?2n z86t(}Jb*BhZ_>!Z_r}326C$77^ty7#)lARr^wWq;*m(XnW+lzhAXp(;p8FF=3CM4u~x;4n7FKEv5R9SWn@@5RTam3 zo(hpLVg;1C=$4{~ZR#PCZzjaZ@iCI1$EOj?f6T2J_{gLX-P^c%v=axeK2wNjk|Jcn z2`jqoGGvv7eGgqy{9VG>W&k7GLOc$4-19KN3GoqUMaVBzb`QLirZ^x=kO1QOF2b@z z`V7xQCaz%V1)du5n1a1b*u${y&cCIEQ76Pn>~g{>C){$vBhhc(^?JoT9`i1b zM(D~6y?hRq>8CL#G8>+|R~kbG+MTo$k`cNd0~dFLi1?XA5eU$6@tnwffcs2_fo@c` z*_g0HP<$`snzDw{EznmmvKSSFrfS#QmZmjxZfmI(z=Y$16Eocy$$A{IPUB zxROz(B&4#8l8{K*hiz{b~+@{j@zLuzi>R1#of#Y zQGvdUkD?BGJ0X6GI&rrhEjHDH-m|GDohuK!_Vlup)-lpNH&3Oq@JJ!ggq|W zL>Tf^Sb$laSnXK>ap8=(H8${u=!fjI@TALZ&4wMfn)p9t%R!U*_y?9b0OKNYJCQ;X zv6x{8%I=vZ#YJlZ1XHs}R*tD+%=f(OoBF%Ur` zgw=&-q-!ULMX3Of>AWFc&>?HUXG%mf#3tWJDw##z%yi1M$TT)t5i_o}`IUv^L~G1^ z{Z!@Kgj$5|aE`Kx+XYo!?-utksCtWprzBVRil#ah_pqFLuiTQY*S+ti$6~hH>alu@ zHa*tn;?5Iyi~22<*>u_^Q99FlX;PQGd`iz}f!sWY3zue>=bG(QNh^Sv6n{a@wIj=O zGi!(F;+RK>_q6fm6_fb>##%bhAH#<@N^N52A^DR>RxvQiuE=~)WHB7uh@mAm$IZrK zmNO|N64vXhO|i3I*Q85!~zjPk&%zUMZk2_2)OT7*3!z+EP`-^i6{LMw;j$m_c zcF;k!HQyRrTayD1d?lvy^EiWRW~pS(gf#b6w2s@1Ji7H{2_81(C?CSVVIX5CjZy-n zC3c3aI!t1aQ_xV%m_9^5I$*v`*bGXBqG6!r1V0A4F+jU9G!?l;cpSfZoC2J4K<==R1fK zVW}F`H(b#$Ux`y)6yP9kpP1PmTcKWS(-_q5r&yKQ!2)g z5MtueS`4e82tj5WO`VW=m=cR38`j>KheNalZX7~_;4~LCSQ?kPj$XgT_O@%@9J%!@017>tdb_dW(tQr9GgOIRC*y zWfX_kXtdH`zQrC9V`n&WP(JLonc1`RG9a9YKpS$l1xzK@CY`N`F#n);S>rJIX79rO z6g4?tu`a>&!-EqVx;!Knj?ks(yry0v2MnO~8>8;VZVb=)GYPZa`SU zvv44zQHX&Rg!+vf?GcE}|I}9_TXp#Ze(p2O@3-nwkn?2F3`+~3rh z5@dT^7bg@OGh0QjPyl|m;pa`oQrK7LVb-?3(ENRMUUB0pZd)^NxS7A87&n~r3$5Q* zg@^HAW_lzUpEd%8^({S}j|3MGt^|6@3@@Re;eN4FRy_+( z{qzKJzMOeurk=hW6I9nIe+~wAsIUs%* zY`B7)5|FSlfU^f9CiT&QMD-DeVF5nQ;W0qepjJ*7lKl~+CcFx`nifh^I45ToK%Ert z*BCNF6Qfn?qnU|yGxrgjIQH9+ucBqnPS|D}6DX4z3I9!KzB7zzHT+ z75=qL+o55`tidod#r+m+0$f4h9Xz`~D)6vK&>*Lw0yy;ml)TYl<#w<@7|JnRXLd89 ze+wf~{92pX1k=K}B*2{&(wpZpQk7S(y`JS|@_d#5BT$0z(j$Qy3khzK5o&i$N}qD)36iw^3CL4b*{Y0Mva23a7#+ zr2$c7L!lP08O$UwDljvEDB2Zofr)csXe`h*=BdA2>y4Oh!= zm+e!xMCyFfEiu|}w|zZjx$ZVqmGscI#HvkAiX!C(lA!creRuvF-#+UgfVL(`hiEBP z)V@=v5&9wJciR@F-P<}OLEneDpDMb;uHRE^d$AODMoPb{^LN-5Mc!dsgl!AkE!iXf z-`EO0J*nSgmOD|u^6Z;-2Yo*js<=Odeq$%2;YvM&YC0|6>8Kl#?jNJ)jkm0){My?g zbzf{ttoC>4^u&$Noc9D^d0g~EDla0^&>L~ucj`1kKcxI_+oEh5I~#A5ef0aOqWiJ> zJ;k;cOJPsf?sxwULt`V#rm?dTVcQ$DTe4^DY^>uv6)#lAd?&Q`*&F?N``+*G;AE7SBcrupaJ{Q`C9UO}U+p&{MLZll7GK zbgrI~t?Md%);Gn12}$rwD4V6+|w(^*+GS|y`TS$4-< zv^U2wmGzu#hC5KhPM1_t{4O=G5D6bSE9(aXHCv)NNeR!BD}#<9JZ?Jij26kct;@)B z56m7Zm*KFgr)0J#)q8Ya2Xl)GxO@9*qSV`Y6s z{F4T4adSJ-<4T*ig@qj`0|}&v(DXEgYl!1H5&JuEjNlQ#Tg2NTLK7sAoSBOKIb2wq zVxH16P9!hMvJDvfX>w<;7hAj1;ouZ`NBXpL}en}Iz&BF>oO?NIkY z7Ynrn7!Gi5;2L>2e1rqYVPE*c6gCsA060lF-A3Il1~I_67j?e~){fX9qf6nyPPI{E zN{FM8gMI@{3mzI~G0x@@Wx+~82?f8A!snt0K@i%3$nGe$LBt*yX`1K}il!opQSgS) zn!}(Eca`w6(EUL#0z|}e92Le{mUs$4mTRLu1Iq&6qOcz^*hB3xLRuEW3c*`DY)g<( zqu^-P097<$=fs!~BQNt&Z-ILSBJ6KiwmRB9yh0-SLP+pAC@#ShfCqmXOKA=p4mk@A zw+TEKEGRj>5AGcf=3&LcP{-4PgC>VabG=YmxMV<$50wI!R^f*Dp@YW)JDyLNiSckm zfM}3YN)eReLY;@k+a}yLS{|MbZ3=rz)IK7NH}L|C@i_kZVLDzqrs z%o%1!7CHKL`HDmHts_hw+&Z(Q-&PEVYUCy~W{zI^xfe;M$ooOrFvH4zQRunN^>ilH z{wViTT$(_;4=nr6-W%m;J&(K@Y13P6M(Oibn~{1JkoHEo_j!8Ws$ByL3ovp;=75$b zTumJB!!VVzi4*i$MAcRtUncYpSl2i!ju2}zZy@UNFk_d4{E)7ryMh@j;~A56H8Git zPYzEq18mz-q*rW4L~_WfIjhGb#BbA*T3lRS8plUDi9`-q z;&<{0KBmXl7Y{a9NpUt(V`=^w8Hc{HFe3+Ehs?^^u~SnHR_ig8}m%u>|U{c;v7ng%S-4nJ9nY zT$(u?^>;33b+S-cM!F~7A@G*rM2PoLYDL>2VcNsFBXS6|AbGF~TGh<|s7#`sg<=m= zvMBH%ML~-%mh&_@9ut8aZY4y|g(KV%L?Bs>n37QuVFlq8IoTe~F(iP<)6nTd%TZ*K zycv%kp<2O*LG=rDA$%gU0wG*L(YqpNNVBe?lE{;=GUKfqX%V`K_~Jx|^qXA;$@M^QkkdxCau~%kpFhi^K&bx`C_>yj_Sy1ob4G z74fm6eAPgtE6$X24mEPfUT=gQ<#;HEZlO#(lF^={B;F>?b6JUOKS$~r*&;NDAY?KW zbS`>x+cYvetyW%wSLY1BAQHBpfT*|8s<)04nzOQ&)#vA$4Y?g-EjtQTh7Vl}!8eLm z`0%9P;eQD6ttG-E+hIqAh9+WS1lLiduth*rgJz4U{)*OU#YW)bd1@m zAiHCJMlqfp5PJ&F-WI{H_|nE13y8>W8FR8jK?H;b(lwgqtqp!r|g0vIc0}ePA z73fHfr%`>{oURWiR@aA04Q`5wnH|MF^cj@kVn=c3F-QxV4jEV2x2%IlQN zX#?|(h51%fuxD20(C3g?UQ=d%Q?90y!QN%|sFa{qGQ6;Su(2Qsrr2(Rl5~D4FDQ=O zu2FG*#9Jpur0=oJQE7pRa!FvZxbViPyKv{uLQG1Pn7V(r4y+HoFiU9J?&uvJ3_XJ6{n(#_dr`Z&J7_Q!F%)2)KLZlmPsf zphJ%G8$F#j5wH4e+>r+3FGz97GMy0Whm}hty!Zs;tZw$~Xj4N|a0Pqk1jI4Ua~qwQ z*cXgQ3S~f+ANEC@QS5V4m5sa|M!!(lE0H6bpi?XOmVQ!K3WayX;5vKb1u;s&iTq&Q}k<^Gjk{<)kzgaZEmly}HF&;=2{lUd8wlF=lR8S^;rP}yaniTBwD=yq1z8svr`J)%YO7IiuE@!|tBr;F+>tsRR~T)v znrpSTC^-b#)O^M>8uhuwRu@0YIwbbD`?(mu-h3*$?{t;VbO|{ZM66^%HO^M6sU`;j z?<2vQ*om*UGextd)?DHY)B>fOXmzrs73l&qoTe$=n0sX%B5U1pzKq3AVI51@32w^~ zGx9UXk#?=MU?EGik0s)ewhTp1Y;PV%`&9UEMJB8Eraah&y-3`nbV&m>%2IuSY@6j6 zb;;w>o-{`zWhb;sSv`L^iLSL8I0>AeJzlD(drKausB2RmEnXc$5v?w?ogqr{fS=Ac7bJG5_?3$$ z){Zn+b5*73<10-{mpA1Ip3va)Ytl{y8gDtdzPhrE+r|7{!UnrCw$sHyYvdl>loO+I zeE9~f?9uZVUYh4L04^NvG)6n8+dS=@qK(=~sioaC?L02pnAL8wHp+TCBG-qF!`V{{ zgy|(el1+CcMkmT6JRC}0d7N&WN8;w81{&&lBAq{$M@kPhxqgriL!%WJb{}_RN&Znc z^fRb+cNVazJY1k1x};j(5|oPKmq+ zwoo_)%?{G0ZoYhP2D+f7;;Ck9rFdWIu~W^4M-sF)x8gI)xLK&>PalOBl4cv}XQUrc8a$9~*J9ahASH`JHzQ~rUtH|TJ(}HA?jJQ)8VBbW=GWvYX3GgFh0Vw*XTdsF4Dh`LWoc6m z8p3URl+jpSQm;+3tdFr(%l3-$Q{GZ!+sla=_Fic{6hphLwC`R{wgqVig$vXA82i>> zILWpWdC^!hJu(5c#o5^t>~W^@`pWVB(0Rl4$)Hx-&z@9HtW2v1x@mkg*I0q;S)sgh zT+pf=f{RbiEZmP`?V|8mp;O@h!9av7jHw)im5)gi#-rj10iAF((Xm28P?Z#(8;Nk# zE+iFnAQr_OM+P~9CseUo^dFj0un z;3B5t_!g(Sh^$~3$>GeM-zCkcG?Z=%G<%*r7AJi5EmU7WTUOmhCDxr_$+pF-m3*Kz{LB5xaokZLni6N z$%FzGRdya0(*X3d(IiFz$CY+~1&9qf-ZO11=Y@L;bEr~0EWg+&V+n>jGX2MalMrJi z4dsrh2c$D%21rjxP#;7@U3f3SMgrH{7=U2kk4+s;zOj9V8i()1U0@t2@hHlXHXN88 z<_Xs>B@DMnWW9*5218t&qr}Dg#I2n;SomS95Jtf&j zH>Zu%WH7}XkZ z^Vxx;jTt*pSm+o`VnKty76|V|7_pGU?ZfSaB@#_YdK6iFG&2QbRFd-O`3x{q6*9D( z(VxDO*6`K|-gKr9@QVZ!~xDjY@&J_cZGCv*hnH*S+b^ylfRFnX}K=Q>PW zA^I7H76ibUR>NW`N|!tlgZrk#<+ z+Q$QDiJSx*4aShG)H$`YI?mf>WLc4r`%4!aKQJj=(wPjQqgpY-(LWRQc!H}&lZz6W z@QKEw6T{H{GV^EME&JfvS}`-;Aw@S7Z(Wj6#reBS>r4M-RR^R~SRN9kHdLRi~x`US05|+hrfH+%M$w z_m+0MMV8+Yi!!*o;u9u1v?ffC6~|KGM1~Cm zvmb6&uxAl3D0t<7KPbl1ctgPK&qx(H7!6?njS2(|UaH0Y35qEdZ22&;gE@`M47}o~ z5L0J7b|5)}8ww{8JAEDovp=1A6OZ$-Q{i2L$U=+|hg0RT!(y63{K-Qg^`5FbHjI9JeFd<5}6cV8F%F9Z?-dLTFgvGQ@xzZl{WaWpOuxS_^(fOx$Z=4vx$c zb8ePD43%UjfU6o1Ve?`#Xd+)@t3bs*&X*7r@xoXyF@=W->pLe9DmFjJJTa*UQ6%Cn2sn|t%CQAL8bxRX;dKaWA*4s>9bw&H z;l*KivwK7C$tr;WlJAQyk2ns)X&3x+IN%ENNI9Dkxf-%AD#CXQNo=UF0!8YHbv+he z*f}B$K&pi3F~w}MLLcHukj`>^02b&tSD_)X@50XrW|Md)5$9nX_86g*Lk|n-1c(pV zexjEn;$!*RYNXLR!jH>R&NdGNNzCR^lQEHO<0l4NOSYv5ZZVEzmz7Yl>{i$tu?Dh% zsze;w!LAg8Rc!7MVsj}S8C5KWc(%f310z11!-!u7Y_(`xc8feQhVJYf5O9OYF2ZJy z#nzV-6?C+>#88Vp3{QxFmF=upnc}dmW7a;Ls=4L1JZm%+m51U;?%V=8nMm2jr)p_z zI#sp#XEaF`LvVE=Ey@48`Rvbmwb5X>JKAgeS@wp@D>IDFv^uONf@D%OJ+W^wn1#oN zQ-et?u8#K<)wd}_ZEBkfw=Ly+Z*%FkrS$G?F5SA6qYAdZ4t=7n3q{*#L#Z5c&}pt} zZ2~(?&P#2#U!LLhWH85>s6v!bvYdJ+=K!*-QYn76IH0ASksYegPEdVzZ96T6UOO=z zM(yY&$<%}_L+$jqtWup1+>Vb0va^7kl`k(`isEN-SPd_&1G5#9jY@s2Hk|Q~=uMq| zI9%$7lHa4+IINB|j}2!6x3OS48p+nXJeG_8MI}IZSCjiP?SPI#K#@mbK0Zc*+K4)w z!HGkMTFtdAx?ghRWRfEj#T6xq+E~EutVm4npGcA1h||jbSwzGfBFho#{o-+!{Lz^# zA^Q(F^=63ZaZ<#Oc`Z4X zYywJ|Q%NL3rDAC>Fy%rtJnHN&+84`ZeX`Q2U|1A$+h}ohSVUVzJwo}9ls+Gyq;Rr9 zQ-@VGIZ~x{f?8Cq=B&ajR_q6(QMe2A6&|K41W1vcC1>TF=j7Pz!uniuZf2^QyN8)< zuEIfv-zPcnU6+?6(k#&6@8Ig8*^<1KHfA{!FAPl_K+LWQ#=+`lor%n0g1AOF2kujq zJ#6;V?VVLl_so=|^0&F5^yU)p>8ux&Ua9@2#y%MX@%rN8@tV1>givga>&Zn%eTxDP z3@%?WNoT90xVS0rKyO~TX1k2sE#R=HazXoHdoqjLZO%K;dvUi`qh2Z3+AT1pKz5HJ z|C$+>oxRApLik_%PynK@)`)bEi&9gyI>(Wxakvjpu+>S#qeL>fV!lCFaLbCAR6DVc zE(gdQfn@3%Q~2p(PEe!hh%{E)scw07sg{}hw@b1aq`>B^@x{hk)L6}G$noF{i&uc$ zhevjfl+@m>FDvNYu#?<;b?dsP*oR;SXL>R3?Y13)8B zWwBZ^o&BO*mHlR-IJg8C=1C!5&=oDT{v}omClH?VJ0UZbnt_1JB6VtQYeVi+i~BZ? zlznO(eZzg(1aUwgRmTX4F{%(8&p_YMH{_J9@rf}eRh5hm2h7T9+K}0oNXCu@xq88P z93-Pm;KJ}6V}^p-%~yy{DqDIcCnn)}jxe*ci$Orn?3}qO<nuWrTQUw33tLg3$J( zynm!RH99#lF{1dKgaFkw+0DL-s73v#Bl=+M%PuDx4fPX(Oi!y{ws=}GAYBZJ=%16uIEGU$o z@hH@}sz>v;eASi(xy~`LTy3VhSE{z>p5?+V3;Jp)x1Y47%T9K)08$$G#h z9FVJbOKt~EuG@^(&h4-FI6Ss_!6=mM&WZj%V`sYE#<8<&-q7)i?TkM)+2*!2M5OE_ zf4C^JC2@;W*rbPC{dryhH8e@*+iOW|05x=VjVJ(x+F?GnctMoBE%uEsXOFIL;fgPN z^-L648s{{D3_OgHzD)>Xk4#Y?zeF=TMy+%vgld-0vutQhsX2>Q67e^3ffm zlHS>succ{mJr6vutq?GNUM+d*y{=LQ$*L9L{UsOD!HNrw>R};ofs|9|U%<$!Am&(6 ztFi((CuIDK+34sbkT?zQGKA%jVA3!}$VmU{2DJ#oa!5QhBo)S}Lm2V)3U6%~a;QEH zbB^y4BOsfpc=${O;LUJiCOvmIGDI1jTqQEOW#sna<8`cCnPzVgc6EL6{^FXihsjcR zkcCZHb7b0^Pnq0quek@~?7k#f-hHYC?flKp|L zv3OBB8A`_MhDGrK=NChXk$AE5I{+#*yF8@U@2{>usYD4nIUkrjc=W^Q$~^A<@Y9bY ze5SmrP&vD;P)yo>tk9oPJyfV}+^SGHrmj%A7zBOff1xM6hIzo5l$@PcwR- ze(WB1^T&0iArK1ntNrnDrESDj?_|B+tiH|`s5sAOpJ!4jpME2gZ&*JpUi7aIM|)V# z9t*nLN*g$9S|uz8+f4dei7g%fYjkmYdv#6s+b|u4IMU1^h``s$x=I!s+zkcsc9l$Zx zqWPT)=cGytpxXGostw>3`?bsQI#YjFz5ISqFI9f2UVc}-{NB?7aCLWidU5OfjnKuJ z+T4xkdMBtu{=B@_UW#1=5r^z=Z|gZ!pTo(6D=8r&qc_*Lry`BcQD>a7`mn;wFit8o z_9dfW7M&Mxvr*gzgh`uQ2kym`L8j|FdQZzK({FFbKMR3YKqiZ83MLl8LCj0<-UO_v zTHk`SWsd^)tuO5csHk0voR8&vlNEx!@h{_}{gryn*}M0HJ4_TJFc~P82wo4+U0);4 zy##i5dxc)x^s&bS*6$rmUO1Avh5@V{Oe1HSlG$hg2=tI;cahm+dFM&FVn=4O^=t zM9fKmW*w=#X$ci{(4*D47W0SqFJ)>PD?Gv(0{ocSkpQLm?bVS0QgExm@c`Uw9}mED z*O36;fr#`w0YCkGB!HK*QXdaMJ8?8XU(PwY!!N%<^K&#{h*!zu0bDzJG(dHAG+@Yy z;^P5S;_(0~@pu50csu}C|3?E6@E<%J37CB2zP(`O!d!#Ik#G4hI%Q zr^9+UY+>gxK>aOIYapi|0+1LM8KmqIi25f70}PU^8-fjCtpJ*R2fg9dg}8J~2h0ZA zb-)7?G9*hW)7lcVlu@!>M)(Q*yi}kOp(95P+R5PRrEPyGYLHmIMq+;k@2*ktdsY{h zH^V;z=7_quN>Y{;)AfYAKmgVacpet-(6o`>u?-AjBPZE zxrB93sIu*$mjh{W()t$YY0EANmiHqK-QMg1yuJQ3aBu#cN;swL^kyz(Ad|r0dyuJE z2e(lFioXWF$?ts`QII6>8}z;~KG%5NuDj;`+FiCGCquZND|RmMR%b(*9cm#rxIcxk zI3MaO!!~5#J7(5v&cF;!kQI6kg1gQNFB#*!cUmwnw>qeqemVYYg2euTz+7s`=iDl*TR6!zn9=e2hPpEEqGC#Obh9VT|)Tgg0EdgnRZhjlH9i zQ7}af*nlah;tG?sSJltioZN|Q95z-~>gF16+O?DbN%syyhI03HK$Xn!fG8o98h{f+ z8o-orAPIN>jJt<=v;oqhgh}#aWMyK2iK}mkczZzyx*E_^5|>$THe7(Esf^=kCic=Z zq{zeG^yOXe_g8nlDgTLk9lRagzPUs6RR-N%@6B#Lf4e2}%a0`Z7;4Y{M-Ftzq#NLE zgH5@EI8}dUrwb9sGvfuK>`iOu06ywYsqx}wzH2STmfv05&|}T%EZEeIrhzysAoFP; zNvYo;UFTLVR_U{WQ+$%R<-^`yqa8I4zkl`S+G9)}?mzap$>U>haz9bwwj2srO)1sK z-t1#OIXqF<*Y_;mqWdj{AJVW%eJvQ`)+BrJvLd zHFq(QWs*8zMYFC~;p%i1YE|Ffyzl>!k6EGC{ll~@Hq-vmyZkx=r)13^@?UKtff;T3 zNBO!xdT-t=cJn{j=(1E_Gh_W(_qUt7Q%Kqd)l{K2fr=f_OeVtKn6q8ppOvhVts^7g zEfG8NW_FEt=U3Ms2k-yHNVNzL(cUl|uCG2Qk9Qo{WbZdJ6hN8WDBu(o&+VW1fceu} zGL8^lz=d63vI!nI**KCom8ZrYS!c6K`cswkr&ki+I2!!L(gr8>ms^Z9rv{;Qpn?((TQ3Q2gx}Ipi2l<$1aKvK&pu_L2|d#r;$va|il3 z2tZTZ4)v6`02r0o_7lVGgyGkF9QV#woaJc-PvhQrzUG&UA`iulrj5Q_{WF`-#|+KM z^KiVo-k_3RkidQ)#|z-&>Wcn&Io`h$6Bi2Yn8jAV<3SiqkW zSkfuZBQnFG(s5dbM>Co7d%QsJX9RIHQAgi2jYvgv&ixFQM+Uh2VVn^=bCM}`>Lg># zQzartjx5n4o>nZ*qFq0n&Q`?S%shO1gvQKeX~#Q%x`~KQfKv-V5a-W!X|qz}=x+Ih zkys$;>K+=k4PFQ=@^E#w&>5D5k7%(34-tJ0w&TS*;)=5ojh>fj+dbT~I$2IHkeJO^ zby6KP=~8+1QDQe%bC6Rp8MAM=d0g*N$as%3$yR2TB;Jf{ayDVScwLYWw?{?CDYPzu z@z^CORXXw34e?`Pk!f^Fr20ikjW^42v{3nyq4ldoS0U}o75Do$?*8^%; z$qdZ*&_O64^PLcPR&U@%BA5Qg6R|^9*#tfMG zgSViyZk?Q11^%lBuam-Z$fPiqT$mw`4sU`1!5|4%?X5J_QW2SmIptXJ#`&^l8aGkseB1J2Wm(EmAcM3f!OrAh^=dB*ll5ln zuqN&Vt2*vzKZ|6&B4g2f7J`|{3Nr{4ysB?1)t)h=6YX~VMW_4{I^3X9H$)?YdCTBO zRvRK3%!i)O+Vy<=&CvDkp6@V_Hy}?<7@Fk-DtVq#EGkDKRjDZg&8j30~u)CwF>ZtCmPT@OeO9zRV zTHFa!uLeh&=!hdei}E;8AAZVu35#;C$M8wN9Mb0Z`CNu9ZqCx{({(D&=ky+5V%w{G zrRxpH_b@*HJZyR1-@`@d(mZV2C-#n&_r04nEzJM>W-=K+pWL^r4RuOO&$jpG|A%PJ_5)@c z@^2@V;}2i&d!xzW3yf{O7*Bd(w#@PE*YIb$yu_a8?RKXV4x$;1V^6_4D{6Q63OO^1 ze$;nQ=IphY5|+kOyc2ob!A^Ix`PAqO`|YQcdVXB2CkfY-C3um5O%T@O)@~O&9k-3e zm_B7N?-ey&Y%DaBU@w&4aV$sT1mZxuk3>cJUw%ytE>cJ`n$RugR{r$bgL z1*jSF+$jRRz`YR&@p(-UOg_Kq-0#bG3$T04FPZG+!smg@#7(*+_7ijfBxa;^nomfiJ{Tq9R^$P39r(rw;9lCx*s>)7iG0 z0l5;u&@CaF$)?R~z2ywISw9IV#nq%@1d1DQ6gM!dIU5Gugqm|w!hq9vrVzZ+S&Tu0 z_cNgGmut2vME~-An!dbC^ACK*syEzlcVcra^!0wIUGK`f?kA)5eKTsQ`q7$OvR=L# zjcv^sO*)}``jPOs8J3uShhQg3ouQKdTZSpTUF^rJbD>iIHJ22wE0>u4zMM>s^iiAp z*aN+|Aap)koWkoj--`#6^8H>O7KMt#tkdA~WU494m&O6irYlfV*xA!~`PfvUOmLp+ zAS7|t`zdh9v$ct-%4K4aMiXChTfO!(|EJBS;yYCuL}$$A$H~koc;q{lpiC-dw)9B` ziOIv9`G*_Wu;?F6zsZ9FT^bLqJ{RG(6$XciH=bd(b+($zBM97Z`@%LbO7uMYDz_8N z=V0gW*m|=&jfDm23oKEf{q{uS7$=xyrViuUHk~S1;>aT6Q@7$5DTtA%tr}&cr!}Cr zSkIWkk>WEuF6C6EEOl>K(t4WoM(4Mu*xQ*m!jVxWL^9y9S{I$bR4g`>*TTN@sYYdF z+Ea{a^Vz_&%byEH(*IX)`+%xkM6^8L;245!F{bBBmO7+xB9nw8cj#jrp*}s zq$=#bLOtMM+IA_{j2ymto%g3QnXWwnO?BLkFG|jUrjn`_1WrHv8o8&Psia@zLbbtL z0N_>00q71$GUL$LVsJ8My=Jk)OA+yL>_K2SsG0T@S@or=Bs6swKzT2bXP2pU7T@Jh zam6y#!dau%k zbo#?$=)y@PQDm@NY6q-FU|(;P(YQj!iX-yLlc3A-*O>Sn=Nmq(R?m)%<{1<;wiMx# zjP0VKR>yv7VfeIBmUl~gARQllSb;xm7MI$L8uFhTJd>K4;>(-yx4FU#>D3|Wbs}+X zuSZ|U(-!$JIH4Y`$%NiD?XC3lF#C#B{+?=|Okt$(3^e!Qm>hQ><1no#4V$wbvl3rQ6232yKqqpl1zs z1?L6)VaDu+eZ6B#e~=!j6rwtd!W8@&&4Bt%oX*8%)Re=I><3sZ5M>6!ET8bz&I_S6(6+=h!msvbIUtB0x;waNJL5oEOW=gGqZw$--KIWMCzp*fp4 z!OP%vmsqsgu6sw^nZR^bX?E%?iGs;8SE{9^q zL#A|e+kXjV2KZjW1$>8ud;?^5=r>BUX=Op)hX|84;YMzFj~f|0r#SlT|0~Yy|Hz|> z_w5)K=qiy=sM9Ro==367lk4tz@#w)RBUqy3P!1U}%&X#!CYyPiVfto5)MuG(9%h>b z(RSDsX@LX82j7D+DrrOqB6n>se^4^--n<&_YKPv7RvLecSPYlhmRBcyxH@GqJlSl< z-x#sthcp2Mz!kVRW+2azOa;)mn^{e;yB@ePS4Q*^$6FhX-Lzq%Ad$NTyxBY?4j4XPG{WM>+b|o?qg{v`bytGbJ>>AJ++uJdI-E=|r&|;w!9FMe^E<@QKd)F#>1iSdrNg z-dTi*lvS@mun8np3eoOZ_>&J1N?sv%OXdVEyKCJ3p1@zys;;nQWwt~297vJ)PkZ_c z+hZFx7|$UhCF)C?sBkZew{lt&H*^MFTurdI_jiNW-91l9r`aSq_Y4&s6GHg*%zKV_ zJG;jxIDxIdQmjG21~_pv{eKKJ+}h#=;8A`VOC)BILt?6AO&mM>7@EPR5y#}%HwV?# zz?l`Pa{9}s83SXl5)J~r3J%Dg;mPuw*WG?*M*_x&ajVl^h^rVKRvgBwI=cxvN|Dv%mhex>2}+AF4c zfTcgSUs(7+o3Bq}G<`re`)iNGJZS_Jcd!BN=)q3lD~d6&XuI79L@^2G#dM7a+pO6J z%xrZ!yOJag>uq%5dfKaGYO?RKG-=zCLoLk#wUZ|8Yr1I;sEFO)zzxiOG71S@XM##J zwZFJx_}QuC^A6+&JsC2yZ)VNsrvG3{0%B1MX_n984HVNcr=?h3!J6%^dM@8fliok% zWi5E6nxAtPU3piC_f3hDo;EA4Od_0i(=-ADA?(iftbv&9#fR?cx09I!EU*FB0O-d~ z^i+Q7*|FCV@xC_T5dpD}9&gQFL=gKMJrK0AZ4#vXtUFB^uYA7wn^u7B%~K3Jg&?HG zad@Pgud$RBpmF^HgXI4A!HHSO!d?Q)I3Bg`gr|`gQ>UGY1dNgL#z7HxQAf z@7Dtvdr>&)3L|45Bwa@;9g$qfB?4ZXJ2>^%!E?SP3Aq;}tsazF*_AI4hIAGi6G3bJ zXmiL3^zf0(saWO((V^6KH+PW5 z1|uT_8uS0mzrqWf+1N<6rRadDn3AoC1+Sfomn7d0l^EuDx+>Ry&Gay^;$FN6>{XZ) zKdg}MZ=4byyzL{|nTG{ODeyjx-qeY6KO23PIioyMTTAlnH*yk>)N-N|MFrvTR!01ATS4s{T7~NLSwZat zSwZdGSV8UVS3&L2RYC2jRY6e--PSqlSXG3kGgBq9os`O`&XN^`^J4|!%veD!f<}N*4$mY7@{G21IZih_0?ciINJ;mMlrdU6Dj%<##rIg)}6SSQySXW6h{1TC17SWG#u3O|bNh?3dVN*fumkzQlMHEiN929D0ue=cY_2Puupsf!z{% z$!8B&IH18P4XY&|HE1Ba-HoMBywMQxT{k3gK!+iT&xsH=V+aDMGB(XT)(zqZHuS46 z2y(Y8?oms`tzBMlrcM@5`WY4I9EN+L{)DDq- zwg=ctS^l)1+RCHtlm}^5JVIs}JwkoE;w@ARCyTw_FZaziKHc_z39eb1>`wHzmCpmBDZ3v$X-H6`*1aiChgPkJE1n+G1JZ zh3kKVSBx7IyCb^QxnZy&0&;8K@MXXs_FYC?HbVA^tyz9 zdSaPxjmWY{P+zKuv!@km3qQpY@We^jhOhrdS9Yg~g(%KO8rYxyzP)4S6*>7eIX9KKT<&MUs)%EGI;(8NdV(-coikPVDMH|8Og6>Kk_w$!od zEs51t1`@QZ8W;hHkaG)Vy4QL}H4SG3RwTpGIu+%^_#YXgQ-*86uDMu{WO|!^x=tl7& zMp}2#yNAt(X8gGs%$sIy5unh346ICX#g7HP!`OFw&tYD}Fx{xIj?&S>`NmoiX*8tN zSu<$_-xRsL`AXHGkyN1?94y`hjI=Iqp90a$@8Dwm)d8jh7sqKeV3Sd8JA$q%#yawX z8Em}7OPA$~gP%(|<}rf>S3MY=&dIA6dNs@h($E&>B5~CIeT)-@N+66j%ShEK5}+EM9My)F>F*pVk)JWsSo?5 zcmulFzlFI0j!#1}q)F+tE14rt=^7!YPztFzo^usZgr^Rsmr9OR$A~3&pDeW?jFsCN zq}EFhKjn4Gwk0EXOYLGZDr4TAG|*y_5zYi-nUa2F|EtRd zkA>x=eroY}(&J&)B$g=+%^rzdiH{b5M1jTF^hnUF}AP@3?DuVg?cikI6|XrIO#6!JNQ1*=5D9C|)a zsOF0V?|n)l$9ug2?ITl2spSqieV`pg?SzQ4WlxvVGZ!PA@zJ+eSz1(fIj}71Rc!XL zap-e6!)k1sa*Ee~FPQncH6A=CV5Z)qR5h7$-7B9AH_+IAC)B%q3QYA;8oV2hppxaL zlIV1UcgrT7U0lTH?`*;fAD-~Y%wBof>fbnl<-q~%``H9qtdM6KBi&y*&7`z9v!%~c zA@Y<5>uTuqP|)s^V#Bi^t(z`h*pBxy!$(3*@o2o^NmFxiDbP;DF&XJ((1S=uoQ)O-Al4F(0c%C>x15c*^Weez0&=EKQ-%KoY2d`gowi$3U2|#vZ;uksoXaP141sIlx zSuN~j#Eu(zR$@M1PLV3_1yBAhP!e;~BYRdCXWSpl2|nq)og%^3KLM)`xG|b-q*(ks z4nhd?mlSzu2bIIv>Q)#=ejjZ6=26!(e=bIAZPOQPM;S>cG&eF3$73`&f_Gg9l6|jg zZ$<}^Wv^iNn*|XkpFNMD4MqeY9@HXoR_K^U_LSVVhIS%(#|#Xq;c@)lb)@id6xV!WN8n%hmlBgIx4s@6wD7*h8 zK&d}XeZod<$E?0^<-Vpu(gtbBA-QgJyvJrv7o zbl(reyXSk5obCv;A(`~7KjCU zzzQ|p0lz`WIM{vzx_y{%YoBJmp0?Wtd`*D*5;y58P@n`O0uhNu%JWSikFWLYCD?2DDB zz{+d5N?)1HdR?YtWb?Xa5JOdE)X|DfO2I(2izzs%w+^c6&wHgs`V#&m%`DF-ZlP!3 zRkMZfS~qwDakkH>sIly+oMOwla*A;hwg(Nu#&@KFoiE#*FouBPs*E&U482V|6{c`p0ndD$u*aBj_6p%5_%s}d98Qgi1WzaIh98@KN;MfuD&KBH;$;7 zF+07%qL<0qX(+}R(CB0>hAa9KMzK-5us%fSq=FTu156w^@}wM6D2PJQDx@%N93tAq zbf%-Zp5|oJ3{0e&#$!>Kx6g}hy(fz^SP=02iqwq{v+N`AC3f{tsd9|t~UE|F8}^q<oki>!*sIVM#nEVo^g3|^Q7pE{6RG1F8YCqJ-O`b=f z$A7(KPniiSNY3m7j!cZ(HA-|=tr#?vk>0w_KcT}F`N68T<9W`5iZYlg$~0;x;Pf=T zTh{zpAZnj3LG@CO8(N%lrZDGitQ-rD5#ZwT0@n$Mg4@xkP5_nt-4vaOv|tCHuv?IF z(%xHVZw*v}>KE(Pjap}^2?xRkam6nN3k@TTQ0)0gyTV_K z(q7)ed)nbkpTSh+t074%5=Djt+PU!IKLL?Ry6ehq?zgvE87e;ctqdbV;rQ5Z1nhOv;6gg z!y82vh=rKhg-H+p?W*63rW$g{w1pyRllp=6*=zHenvIc^5J7PYP9UNX zBmKdlpLYD}hYRjIQl4i&y?&M91j&uo`*!>~0+JiA91k~M8BUOSKnm)+GijAo5M2UFDq#Kw`3<=?NmIsq$1e><^fjvsXzp#tS7*en=6)J)1 ze=$LfxEJ%cV-Dv8c02noVy7mdS8%ow!Y10<)ZByxe6?zxn-z*v3%SA`R3gKHHWWdt zn7l;ciZNKez*6H^Bqe$M+m96`Rd+>FwNK}&DVP(MS%CGKo8mR|Wm zwg8ce^fe0CiB)nH_=X-BQ5&xj22iD?xL(dRC|ngOy;slVlLm>^HNbSkR|?cnLw1LK ziOr*bi57g)lQd`S?xC2R5Mcx$;t%%RoQFe9Eu0-jgG9jDWXn#QLf=3O&o8<~6S3FvAC;TW$hxvIWmiKvO=0h6QAE5TTPCwl&!zc3C! zS%{9QYJr~M*V+j7eHX6CZ(-SkOabyoaX>uMUTC)vm}<$kdGJx#30e#@MyYU&zt70V z!eH(j*$f&&71AqaZ>37etW`Ph5B`mrh})tLZnC898IA1`Lth-++rV8S%9SHy8)n;ura%>30zFvBbQ062$O?yrW;fdnR|iH3Qc=T$dQC!KQBuXWq$Y{m z?Yz}a$d@wFQw&M7t!mf^_=!mhIm7AyoB?qSoe`d!Z}#L9HxB6|G_8)d`sA4L)fav9 zf+suCeF_*I&=)NdYeiVy|JMOH7CKm@A{&QzuLI*y;xKvl2JF1`l$?>xGLZB*dLnCf zZxnWnD1mJN*=L?oJi!Bu#k=&388k@#j4nl*=tn&uZ!4wZDF}9UvBB)QT)jv0Da`@j zufFiYj&}Gt;8za!MRyRk*a39`_Q{SoFVGnR%D=A3I%3wpIni8ZnU2kI-oaluZK>0- zON|ulQypReRIhE#Fj_}bH13IB5vIzHN~j#j;Ys09Qy!uIQBMv&4mu5p*KM=jyFDO4Boi4Zd{0) zu&1=_n$sA?mgdnnLVR(iYJ2Oa|Jyh4-iin*fe%5lNrmdk5ia0`HkMqJXNRFF284b}2-uSaP}7HKJE) zT18^l=pb8sn;c5)k@76IPk&rrFI^^9C3hKN$&f1EC%NFTM2R{o9D>@V1P^5^UC>nB zXfX=WMbt+~B}$tMd4qQgtIft(|t+BnY4T;u22>C2-ynFj$L2c>H`9XUo^w|gj+{g znvNF6F(RRGUA71^89yA4Si)EJmj0L-qC{{78bQ_G#VCjvDH~f#!!&1PhQ}zUyX}^H zt(90u5%$C?xK^@|eQ`_BPtgcAYyzC0v8a_AnQkK;TWfSGOWvy-mU(sCw*^4z)mRG* zgaO-(NB5#4Thi?QWrp6EgQLj!n}5jf=1GCO?ZdA+y>;`n5xNoe0w;1S45bSj zi;8fL1^2T|tTbC!bn}s2;pE%Jkc?CWHTM~2LCdg9zcZRgaqM1L zx_pk*te#`xGT1jajMV}n#Dc?ItTTl+o=tS9G*cLu9Xy@DsUu`qLpvjWtX1pACcPV0 zYcs=Jf4eTUdmM;s@k*?e^SLEFZx;&*>GM5eJeZjW?W=)&RdX0~9iutl9yGHkP`|`1 zUN@iR%9bSCEB@S%sSNU~7b<8dFncale zE)q#ruS|oorm5H;UuAB#4lCYo;49H zc2GDyyHA6yp9BCfwB|NT1{49MPKwdBjXTXLT!&u!DnD>uzUK_X&t|y9G+?VyEaC&D zsfPuVseA;u^rA{61y4y-VHl350G|>NpUQh3N?h|8nA~yj9gff9siLSRbuL&3JCa-J zjBlF9v+ZV%lM34dX8NQ~gz9>{<^m0?9?o;}guick+y3V?q;1Y+f`cm0#tzB7u|wWL zwLqDC(}~_6_J}Cy*}9!>R$t8a&11UQ+TrxZ$YUeDN7#%yiGwyWAWeu_5d~(W&W>8J z7YxTF9&fQv;B4X_o5@>_POdzL*(Tcu#w71#kB8+j?maDZ&T;u$S*F0$Nl2ey#Td0l zpZWs>3&m0!1;<^CBNIV^=KEY8j<7&Ybo_~8gxu4WGh(L<@llrRGt>D9iRk(dnR0iJ z3(;;WN$xWZO$iRC?pY4z^9AlzW{sA6k@J;5rEME;9L5@trVL|C zCzU*sGjOMC8Z`@iN59BRbPomQ>N6TrV;EPhNU1vZ>9CqdVmeztkQ-4QitP9mg>b@4 z>nLe9$WBVk5X6%gwuOJzXq$)hLXuc18FOp)cQ)Kw)g&6Y z&dkB;O~~uQLWG(qL2|lPFjI~fvodxF$oj&|K#7&cJt9-w`sBBqH}^ZdY3uO2EtZ`? zO4yekrbMTb_9&i#6!9h2-Xv54_@EuT!P$&3kSK2MjE&hkkUvJ`Vp=h*7Pti3A&7PJq$)EIpMAwv9%>IxO~^u z6|$HnEF7ENKKwR4i4 zbQR@qD-xe~Zj+QPAP(KU#~`Q>GqOlj!i-;ZmbApAjvRq4$^g^O)Dhlg8|*;U^Q6)< zgS-@nlrjuXC`lNy@a36e-rPLD-0y}6vymq`m2-~Q4-%<&sMf`0(2sR(j!Gl3^YvsZ zjfS*Io+GC&D#?`x@N3`iSekx=0dbX1`qf*!mvN-3eR8ro(H@B!EaAx4BBtJUy_tD31f&jNd^K*LgBU__$H+#?S4Wgs zb>-M%7JxQ{Sp->s2fnRq=+c^SEflYZ%SavYINp0z24~VP^1}7hM?FT}d?h!Q) z<@_CBd2=8;HZ!lsPV?791R>fPc#znAhx8VQq@UIxAAfb=t*ovXc^e!gIt9xuF4#<% zakKKgNus?S+el3kL19 z8DuLiN2FO&&-~TJu1fQTxDG70M^n zC}plu3K{4hzj>mtD)CK=0+Q6-Zqlv}GshvGB+Wg@w+KY$H|7(pke9?fqZo^E- zrY1e_e;i;?Z?$hgYjY_SyK~M+)YYfibo)d#!DrnkT83e)oT!>(bxsiy$T}S)7}S}= z`6eg}@hX3#>y-?@$AfYXFbl89fa6SB~j1vNGQyz2SIw!u3?2uExBS zi4J3{#cTurg<}>YMg)bY9YGBiXhfoPe}^Y8dSV&3~h(Vz?3Mg_w6OOAoad+13RzO&zXL- z57P5qKb(M@=n31qGJp$Cg@2`=TO@ysu@n({ij||0HFpbG=x4Un?{=}aAYHxGTiUOt zPGLx{?a}y?`A+CgKeNyJ{h}W_6jjk+i%X&H_n&_RpU?Oit@xSgXQiK{N@e!2R>1zJCBugj~j) z*qMJzux2E@o9FqFHPuLS`&Iu_1byZ87xLtP^Dz18<;x#OFMoK&&(A-M9*y+FPd|=c z|M1HzM_>Q+3a1bm{Yjy}vT3P83u>X3on`fkZG`9UIqPMwe)#d%5nGe$Wk2KYvdXTY zp50Hcf38AbX4J~=*>UG~DLXH%6BN|4vji5|zO0~D*k6ABm7Es*%Txp52h;dm53}5G z`(12|z|DJsMPN?QQ#X(@2P9CYbH5I_k_Io2iH>mYl9&^zI0ejSa{Op*!ZnljgjEoj zdVZi;nisg_hYXy+7M?~tq|%z0Q2^3(Jv0jP32qTIr(@w_^5}GyTlB2Y?ZnQ9viZ19 z028g-a`%@?t)5lM7)2`f7fhJ=MHNjliyJrF2Fvm-Z05q48)`>T-3fsW?Pg4&M5rtr zKHz!8guo_EF*(kgIZ-H|J*k!6mj8nx9cIp@=O= z-@xBI-oj!}l|)s-nxOhd2W(Q03e7%l6!xDrKLMYheYiW)wB2?^$cBBt!q&^?PZ|c+TwY0X`aBG#JnDX z@@Ap1C)oH^(TCq~_{qrftdo|>YuNQ5&GQFu$2uE^Xg2i*>2mQ;R;h_-zS$>=&+kRDH;M@eeOw{XFG@4s($~ zwY}m>4u=W-<=2-#Pk&4VO_RSQWOzSGpeioXz^hA^o=~mk(k>*tZ+x9^q!MkNlFEUg zO7$R*$fH;t(Ry&=Ya;_(u8^^CCYk4go!_3k8FD!YPS;2G5rdNd_RDWSPhT=7%+-gp zEGmB?sn_Q4wnnxqZv*r3QKHb{O}w8e`nrrU=16~(byo`wLYK^jg@+?H97Ka-KjmCjV_kNn*D^b3<=TQ4# zP3r^MxGH~l+8pQFdNlZEv>4kVH{BSb)2S9s-+!&EU6qE8l3^Cx3?n1+2-ZI80kDqD zoJvEt8vZPMcp?3;jTfv1MpOCEKSrQiV`mgy7}LI;Q|h1m6miI{Ae`xTWj#^Hlxt)3|f3Zg2_Auhk>%w39Va@e{kr#AE= zqx%|}N%$NAxTA>GIVY@iB4H z*&+_(1_4!;EbtwZ_ZEj5E0d2#)c>5w={<5a7b~AY+^IDIB9RRUb(@Y72gZ)zbAY-8 zV$PK?fzr(yWrB|lJO`p|8cm-NlyR?bLYm1mhXL174YfVcMN5D|13^zuy~R1(L#t8A zA+>YqEi%+*(&K}Nsp>6~fb8f%)0j~^*UTD4dr3~u4NG0Z7`4v{rXbOk5@nszNYs)TUC+{OzZ)U*?}R-mzAFdpPQ#o>rO6)HjA2`&LQE+-J%R;{#2jI1~%HQiIA0WCU-7awmI_4 zJ}jfl*<`b7R}VV0{h8xmFz`mNL@JqPAD$vyukJemmU*VI(eP6amKo*BA(NDWa)X2S zJ4!4XRZ?LJ_YMY|owDf?yu($&2{bE~-c~o5$Zbsz6}mmyYnUIKUjA$Zd?u69=9`Go z8Mv0xx`VELG_qUl*EGK}`7pd-LE(p7N2ao#lXH!*5 zFXE_sVD=U7-y%47pcub)a`-heD6cpkZi~nFlQZguk&~J}Kz&kxT9@E?Wjd)|Ud7dT zdeE_~MEtx@n3gbSBHX5t*)+02CRV*B!1egs9Jy}B5~Pwy2!X=IKRN|qd)_3tEg&t= z<~;?BVe-5#)4Q1(#*a;4?kY>OXb@zmA0S*YpT-4~%=q-oZK7M%MjT$IvITbetwKC& z(?UkDQzRJ;0w+{WRugE5QUYVsIcdb`1m15eWL6_ukt32C6HU1~Z&1{xT?*@T6>dA! zh-;hlfY5hX`ei1jOm1fc}o>)07*qbgxt| z+#GsE1&!6g40vq=9W+FYx~DU+#@E3G~+PGl%IXh)8jz4mbnyM(;14JN=hN1hTOag;K!|hR&Uu@nY zj+(nm;mh5OBVxGdH4ta3z4DDObE}OAB`LPxtH}&zU@EJXpku_s#8mLv=LkS&5D=vg zNM&TH2n-|pi>V~v1uqEiE68(>qxmFm9&_$=?gcjXG+@cTQygPn3&Pc8@)1-M9-?9s zjp^`ng4rd}nxk1JQ0*y!eh5zcd_&y=$2^ZtxBjl9>|>bq`fl zrVuBHu>SOHOWNH`JJ264$Nxp+sjFd;*-G=KM-tIy_y+3)=qvth!XID}^zw%vp4rcv zIhMhf{WmAK7o)QeCxb!%Z1nQkDvyiP{FuA|mwzD<1HSyG-&RmJ;g8Q!-=MC!dG6uR zquugUKN)^$#?L(t+&Mspc3^9CF{hK106;j>0C~=&(ox4UFVF8qkw4RnC}XadPhqnH z%JAgjTM1br&BcU@s}r^ju4^JQO7X)FwjlO?-(lJ#w$D)%aj`Zzp3F0@*wV8m^yH6~ zk+xz;A*36UmJ9skf#ant>cCj&17fS1ZHF-7NSAF6WlPk9{dk5u8C_h+l`~cK?qu)| zMp_^za2}cJvjfiUB%&BmhneFX@Xep<(exosbQvW+Cmh9o!2xRCff$S0 z8#v)9Lw8Fxj#E8z&&??^7;Uk!u#bpbE}4&=Ai2LoRQ_)5pl*xVILNnZ%Mb?sP7_Bc zEtN9?PNOx&5jZm5`m+z$<`8qB#2=1OLy{CZGOZEDdI@Q2glN>HOv5~xuagdoNigv? zihGE$7 zqYlr>C>Y`A9tIF}9>)KUUmcs{plGX6y43?Ns%`o=pMTUD4|ZA`96Qr6hFO?F*0~Kr z0Dx%PK&l%M=@1EHrPH#3?=&Z^g&|Gk(1Q`$0&+@2r=yVwkyahXp)dZ3%v7q#(Bc*H z&o%kO=mZCL?B4nI74k~HiGNmP%`i+6>;Pc4?JauF^+V6m1Exxg4*SiPPC(Z=V>Q)P z0lh_rRF!yYN&#&b#bHwlnIvFDqmacVHOoy+y=Ef!HnUc$Pkc4v;{~GU%GeG(N0Q{# zqr83dijDZU!1@)e#KuLB=M@!B8kK5?LhY)i%=wH28&&Le$y(X5)~Z+xNC?phXMhu`jlY=tp2`|ux;W2-%LF~d9xdoB( z3-e_sGw!4{>Cz{1RaN46(n4a{i$Iu|&|>w%uW&*axKYabtX@&0zJYa_bD^_-F<_t( zs7UQmz&ScTf9#)|xve-V^e*lT_hi!~V)APzucc07fckkt)vLY>pLkQZ+3gX@1a1YT z6&T4>OOT8K!t*4H!3u*;bcs6hP66 zm8{Ul^1kAT@MqH-MHAgE$I>G8hV5GZk8HGIXCanQkDD2%KzY*bk{=GCw|1UQP_~D+ zSYp}?5T_x4*3`okF9OE=KQs86`Ri9NrXagFXLOCt|NF|tT|fV5q$`ff5h7Dk9A)w& z##}DAUA$)y`agRzn(avz_LPd8h}IYAJn*N6Pq_DQsemQJY593{Nxr%zlF1lZ6rFs# z5=EMxJra>R!5JaIw^W&;)O)0L%Gs@pZct=m+D3ghn@>-(&3r8acOJqHE)jBa_4b#V z9IVoQ2(Bg2e<5Q~YFfrGlo7zyN1>u)PbFL4z?hH>qtM|!-%wR-vioNSU@@r3h-@=O zbFW!BhYb)sSjo>^{K$ynE6xshWv&^OC=q9+Fy=aHB&tdY>NI zki>Y4d2gExO9HpCmD0(Rl4YTzmYOw$nXRF_isDd%C~1q4lF@?%Zt;Z3Lo<}zLc5no zQRu;Xyn)GiLO+)xp_j@|#bsS0TvJw971hDF*eiVD5*%VEdvXvs@yDW$d3M6+37ys|t-2-YsyUGp6CsJkOZ&2$(uKEfGH zp~9gu+YHEzFI32Z`apL~D}ci#0eM}E=Bvtf-eb7H`R(TBTn_f{xf$#x+JGPs?JfBK zI`56%FM6ZlLJbqrp1&l(8857M156u%M!wffd_?#;z1NgW5ebefAhvq}G2{YbTb*I9 zZPUs3X#}~|QAROVwb?NRhqHl*Y%GsF080K9H0jL)q)5z;<^(+`9UZ1i`XfYQaC1En zxK8>{uO9-Nbud_=pfh+=`WD6rT@aTBXm8=QcEeJrJ%6CFrK6VyK|?7(v#?Q3$HdgI zS)9pL5DXzlAS7K;s4fE2NTx$L!J0}Ny+m+Z#|ZVwC8eF|BDO%xI;@$7L>Ja9~?}o8zNUu;w=Ob*t$}yQzE~=(RXH}4@ z#RUOTS9Wy4>gIs_SBJvKT5qyZzaNq>M%9$CAE;@QHrAD%K4)|yNV3==Fm-hBXqpa< z!eHTmdQa5%nZ{Zt0iSOpZl8z;*?;?yC{?+>pHAPT(00-OIGQBj(Mkzx`o38l@(aZq zYybKMyj}17on0<2wFSD&ki_JiGqBD>Q#k^%2K zLKW+9__FqpG;JPAVXPuH6@knp$Ime^@WPraqvA9=I3`{tkSc$#14U8GQ#))Fh)N>X zK8Gsuy24eI&a0gl&L7|wbR~W9yw6Umn~*}5y4VjaRk9y~37Xlsm3Q!U-JH#ctxMu% z*Rv`0bU^MBqI-3T-r8N-Q(gZ__*TlK(^XYBmRy~6r4S`3?+{e6X%R<2Q^h<=r6V1s z=ezAXc_?#wKkKQO=uVKPu&yvf? z6%wn|JN9Db9Y`leKA&HxHoZx1TS)2?2nGs4g2sZCYAZC}?loCRG$Xr+f?r`4UNB|C z$8-sKW$1*&9GO;#PFP+yI#gv|_Ic$Ud{`&mb6o)Ii1XP!u6|RUW>?4TchP4Y3-SB7 z*gv4$DhbbL3#4ZJP%r&wU!0i%o9P|MjQ_Eaoe+BNX0q}qt}X2?%$rUicFYwq#cmTf zQreNo4nd#WA!sai2yQr%GU&5M>IAoS_QoNaVBJ(nW8IX=@k@WA;(%W>{_c7cG=IHh zYC(W~DF`)C#dB$65GHmTS|HlEjW+%k#MG}}YZs3(!~IPH>?!6r5zeK!Oh|^$8!gyI z=H2j8VF8#T%B;m;q`Nw6)Y$z!_9oOUDb@`_SA!o^49Tx`>{T*BR1?}xqd8slKE7fl zSoA*oLy~3qH5Q}(*$uynB@%`*TLWP5=@RqLlFXdK&#l-5aD1v=;7y~0Qt%E=$L-+c z(ZL`0@CBzcs@xZixD~xeZH1tOQ&|${=|Q(Np(JJ_5<}>-GOpOBcO=ZTjXaGuHlIZ( zm;EW4Bs&Caz2$*B8Gh|fM9WPW8w?4?GM)u=Y&#j2g)W)=9&I9;GWqN!xM`am*C>8- zOgi1`O`#z~?BM88BKEkylqiT_gc9-!&hNcR5jgfIT{5`7W+>A}V7YzaAzeI=fB1KQ z)*s{*WQk;+(QDrJUX7M`hiHw-yc{p3v^z!E%^@Jm53&BAT=at<-XSd^rzbTkzaO*a z9Xf;sfhI#n`_-E+x!sD1T>jjtRue1rbe3E+aS?is5d-KsYG!(1%wtqO@j;^RoK|N- zEncf%gvWYR##o3Lu+h@IZ?T%CT$k(kj~DGN zPZH&Xu{vIIUSc)hEvR^A_3>kan5mCsxd%I=Z^fPy<0Dwt%~bbhY9?aCpwT;O)Pr;` z$G#6{$$h~did3X{d%>z4;dbFkLDi|VCPRm{N)W5scS2l(^qoKkz;{CQuHgBHh+X$z z_Pro~+xJ3w-S>jD@SH5Cd`I~xG~cL}6YqwOeMnd^AYtan`HL2IDDQi61uqLVTYFv51`3^SQ zZaxPz&+C9peg`z;&tP}&m_FCoY@kduKEEocd~AL{_>mPxx}_O@bvEn$#40jQc`(nV zS*Be1;PyWI(Ws37A(nsE{}7Q6{U2g!oaW}R_DTM4J5F<}NNThHD^9fI{}oMb`+vo; zGNr{P?|1jg^Kao%mVb+)a{OC(r(Vn{iuOjVDW&S_S~(tLuTG9fs%zwU43&kmL!0eA z$5%V=KSK3)9tq$*N2pJS`4X|bMDI3CC&()!gA#*k`1c52qJNK*`s8=tqH-MR+r9(u z6y|@3R^byaNlT5}G5!wu0 zpoqShBnmP)zDwX3IEKbu8mx4_M=s^mcJkGWeb8xxA67LV#^1`D!_M91 zz;+Q5GiS<7$vMumN5E!0$DrUJrfrHpFCaVjMl3(RadlB?iotg!u#_!P7GBhZ61Pk6 z@9okiCdW%j*3t5#&(7JP+*CDZRHFi?KyVLsG+$Da8ok-+kdU^SE=?~HRai?aH{K~V z1w5dY%j!}rn%ZAx_BR1z{FumC0b0vOB#ojK)lM)RBDXbSO7S;n0G0 zXl5E&Q^-xm4SS>-rJyxRd)MeBEH<>AV${j_nOhv%_{d7aqYb2gAjvVumC#>u6WI>> zC7xI_CSyKp=S1EdC$o-~eY0MlI$W1ZY3!1TF4YZkyEHBc-i_y7+SRIyb2KCG)%DI$ zv~`K}Mct>^i8$$C;?C3OEh7_^qO*>}WTRL>c zvDL^hwZ|VdBgap82E!Q!qUIc&WKmeDr`$wBd>}5YqH0*2n8{&|sBI#LqEotg0y-5^ z+FF8`3Pa}3CcPqPDrRJIy5{(?^+y5*Ex7RBz-lJyDz&0)tiK*;!*Y9&PYk^Qb+K5 zuPLpyL``u)&REvQRn`Mc+0{cZ(=G4wE6i$&Ch0GzG!VSZ)-(E49Y`CQ_U=1@&)=bc zLx;VDmpYOoUD?fX>(_8h2m{@kGONn0`?_peX9l*6%jaOlgP6#xa@tJhEXY=^yhUB9 zdu^^%1zMU^?}woXMM`kYDT;YUr?xcL4@fd2`S~t@s{NP-={=tPdN=1l_%xyUm3C2W?m5fQXkGIH7WfSsLq3Dlf&|gug*$SJKlw~ZU zS4ChLmyOz&B!eYP!}9SK`O5WD>1$}zqPei~?trYUf=8>6Uxy9)6`T@o9V-+S7->=64WSu^*B1))i>ut&Rijz?j z%*$DX3o%PO3aL{u$7(B_zm^ng61t0g=@nv?%|Vzt%^jbznd<;!Ni%_ck++sYkxJ!* z`JE^VoSTa$X9Sn4fu;c?&g@ zA3PMhQ6j;!7KF+xh$ak)!&1>?gsci>Vw3YAmsutS&)mIE&RD@)B*Bd;Ie|q^!_d}S$&mitru{9)x{bVQb zZ#!YPoV2_==MD=?){e`NQkE}|QhCuK{qp<>kt|Y)_Os?zyz?2Dd_8(lNR?xykNNS zyDB1l)&c#kGuFP-jJR;E2k|y}^B$3OqSju#@rM~L!o z__f!shbz74h6hLZWI+bz$mzEZ>U4h1=FF2R0ubE;k*t%Dv;jyugY*^1-kP2;bRJ6< zXb#;V_YR1;5lCuZ9tVdd#74a6PsS^4Q}sBAf%^36#l;y{j7_~xSYEi4SvxuT{79f0 z`{c~1t$Pf(d2g5k44_|8stuM>q-0tTXh4I{8-y7-wivyHw-wCvo-U2FxY^aJ=P2td za#lZOQ)sXb7aE{KMC}=_1%tVHX#y{*)QGHtI=#LN^o*l02@W2h$qYlqX<1qfW+t58 z2%pAA;(Ko!j*(F&Y=i8HO@%#WkCEcwYQ?~{KS&kJkWm?UHTsC?VIu=FGSxS!yeXp$ zKO~}^t+Z1dkzi@ht^rcc3)z+w#)cQUuc5Xzk0APLNH;C0*^{OkF*GVJDm03A&Y*S5 znEq;#K8gH^{7|JGA5cOFX*nwmy(Ni-{B6&(eNttqwLT18?`7a0a9ay{^2>7d8HM)J z{cL!CQU5a1C+=$7BN3~PL95m%p>O0(!gP*xz`DwH(|Yck=5Kq;HPS&72I<}%m$$I( zpR=(IGA1@fvea`MsR%0aCF@09;ga-Kdz9p$F~m=n$hBg*Rv0`LMc>;YQ0G-}YZ^66 z3p?MaMxBQ=5{YxRd7v7F^`$Gs!g}b4Xv?s4Ej=)~jJ0 z%^{IFw=)420YlX;f%li$nh7rSzZRLnq$9}&Z{x`#ip6>JIlqo+-C!n(1gf6l$@C_l zXi`ATe8++q^hcAV|LHuuK9B4pbFh1Ql+A#lB_HEIlf@R$yUT-GhdS`DYlcw z6AQV0TJ@e+S?S_h3)3+sQ|p?PmPS|Ib)waz)|GWnQdK6;3W2c0C3G3w#bJ;w*U{T*kNV!F@j9Q2Jr|)V%uf^{bIZ zD);dj`pa)GfAc7IM_(sVP{`R5*)@H8iGo(Wsl+O`_m$G++xtpce%9@Md)Wr9%C^L^ zve+$t``L1fU&+?4?c2*XXjQf)R=Le@FOe15X!(Y}wT!UWJ+9ln9IxXXFDe8$Kd#hU z;}SB1aI515Ugp-A728rPaDdf$^G6r`Go#)Ik%uU%5Lw4yQ$LXwCCB3OH{I2wIP1T; za(Ia;&zf5xQHAnk_CmD6CFo<$AnVK)6h8@_kohCx6pRfFXNQgd+Sd`5l4@g_lNKZe zbBehH7vzd%7low6ZAfBM413*c-eUwiiTp)*-!1LI9!S{7_6xrgzGF0-0&M2|!sarU z=%g6CfHC_ZeGJyw_|E2ftKMMV@Z0kLcGYfQ{rd99U+{z`Um1`d4@s=<&U9J?^BHK+ z!6wA+&XbinqO;!9x`%TJwlq7m0^D+X#!m4cEP0MG?M(KhaorTbif6S^q zHnbPGkumKM@@XndKj>EvE6b z<%LC|<<1R&-TZ36O8H@?jxGr?J|ajug>5knL^Lr~1Hip4xPE~^+)B(QN*UphQ2dTs zOk8_YEF>J_Fv(h%190QabVv8LeHacwnD;?L#S@qo1B)ZSQ7(x!$=JIKGd;C7b?A)_ zr*T(BGtY*pJr)QLT*QOgcIZDh<7Zq`iPMA*&&hCUNVx_>hh;9t2n z(*OGny%={)8|q_2Kr=qm4TziG+vVb zBNRz00~q8AG?i*wG1P63&uTl|ceRLcN#j5rl*G5CjN zv%0(5E$#vF0b=}SpcKgz41q=^?_epL5`(h|)KN|3q@zqgRIxP~^NS8HUj^$YydOqh zEZF1iXuC(%=1yWZFCa^cJbxF0$=*E7iznH7L~gB9R0PFSvSc*@L2U_*Hx)v>r4V>SK_)p{B@Dq+RcIzA4t2Ys zMUa^X_DM=BZJ^C=5pBAMCw~5Xd4JB(k5~+2>#ul1w9(*om@wt*#-M&vw2p`}gCLa+ zs+QJ__&Bs?m*m7%q}LA-m1QX))?JfLr+{V=kY&KA4V3N?kjmlx2~RI9TqbsA?4pwl zvb19XE>}-p1|re}gAqot!sh5R_q1*B4RhivIo(Ijc}u|6+v5TK3z=Q4zq#j<9N$*V z<3XO!$$EA?cyXNE9DPk+cQ5Cc>KIm+fQd+lV0Sg=_}uB-37yuN!F8IPEXVG<_$lLJ zG}Lt@OnZZE3qF-{SpRzgzWX#~e`ssX52E-u*>olvZ3#b;F!3#tDr?|ZdR}wRxKBGc zvY#^1WyYqpY_MJ6xL~5^-j@hPAQ&9XYLkLOrdn8*6o4p%$vA{FiOAb-(9peq`Oa=T z!mMdB{OOmMHGac(r^bh`Ucc_(FMsahuYT>|H>m0A_&02OYJA9kv4g*Q-N9A9+p2sw zKfQWc05*o(bdEDjcXaX!Xg@Auf>KO!SDpO@m0Gb33ec4b7qJoy?K84(%T zg4Mn{eh2kq3#Pp-m~&kXtNj`NY&4&$!k^{_-Ct9O6?ih9(;-iDJfbTaT*Gtn*YG(F zY{4|J1=GM9p3|TUecz3#KDmFdf-~nJF1Ab)kDR zR$r~*l8RZ>N>#%p6;q>?stYsM>Ua%ZhD#|7)%oC14PfcX0W3W^fTd*vSXwfGrREuH z1AX=8)n`#DJ1y~zjM!M4pB>Qs8DS|XBO`7v<~3+VGEsB9XQ&XC;@b6+!oIQg(c1H< zg(0q8`LK<+`q7OxV(rSuZN#-31;KzDL0hW`t_WBQhCsDo2vQ4%09CN9p$fJ&Q^E7A zO#TYCY2AXE#x0m>TfuWpqJZ9vTZ*yX66Lv@yoT6MCp_50puSVV6rzBq^!=EK};xlOb_XLG$#R1Q)5o;h(6y*B!|)qd1(< zATC!R&Ql4vaX7=gt00p5^6Xny$5$o9`LYfmH$Fs}VFhD}dL$YvFoWlclBdx{_J~gRW40R40mxMfkvslI zpjWM#yVe>#`pM)l;SMZl1=BR zIFV`T{#+gHW@t6$x$LSUb6h*~>`3G75}HHIQvFy!?D{PkFc5Ub@62k>%!%w zB1j6qqA95#>LKmpYm5s8YRo6N%dKHN&DP*29Exk$KZP!;Mlw%paO1oMZXqbDDtl0c zy)?UW=u?7{D#)WBZG7m}j!|zx(d8|qXKbNFQcNO}O3|j2f>FdaS6y;7Qs|ufj(N7G zkemjkpk&xsR3wNksDhCHm#nDR6R@$qySL9y=cO9N7Uq!Fo{XwDky~-#zmT{2g*laK zV-8#K%4K#bQZVn$w$Ru+C}99*%nq21g3AhLb2Y#l*^4JCR(8s^#XTs~4l>#P;y4z8-Gw7bi=xP7kv?DVfAm z;i_4QVD|9(YCEM*+&Zt-%&nLDNt5|fCt@h|9dn3U)rq4`J6rDeHd^1$%8+)HD!U>| z)@w2tf7#CQwAC#@)6$DQ-F4VGW3YWbMIQ-ii9^KJMuo&Z+2j!O&PQwaD(tUqnjf;V zrswS#S%=dB_idEjeOli5 z@aYix;|{hwCwfmD%%UoqF|Qy7yn=j6#!bl5!;aVa(2Z$I44z1<{HOb;C5mnc$+-EB zVx%NRAHs!XJ4ze?Lv3r?PZvNkN@dQgCy|sHE^=6_$=Yq0{?4Ugt!k9IyjNN@WL* z6gJ=NR0RW~Iu~`01SJ@2wP4P3GH{#N^L2V_C!^9(@ujhw=%l34<-T7gB;D15>9H0} zVR*ygnH&EcjAIIUlX=-A!52r1_m`L3PfP!CkhBmM?B7)nRi(HYALBb-3^Xn0hIYk;H zfH+0LTytq=6D}KoaOtLCMay%eDtz76Hd0snTRV+;1dk$IJ>G_s)zh!WX*Qj`r)0O}>v zvRW>+Ew+c0ngkt;{Nw5qdyAK{GxC`(O25>LZ1Aj4oT{a5p@;SRY6o^OLIV%Iti--< z!c!xZpjyJ7phiG^sH@wQHCT+giBW?65=)8at&#$0nY3;@m#De&< zAsE3HY?+QrhItiMJusK^PZ?k@rv+x5V%!Ghw!Pj8vytSikO&P8?a}fv&#xQ2_omRPc{YTnxi`TtH2sFmo1cC5QGUjc?z#1rZ8<4Ody=si z!e3;kh5V)jdE)n@*iW8KXBU<4r%B2L&FLo}_sUjRLwi#u^~j?M)*e_JV$zrKI`5l( z8AgYAqn#|vM^cChoI=!AA5M_U&!?UWZ#D5E{pO}N2=jfsR3$KgMGQ{2VwHKqE1*pE z#r(#uNqid~noJ?BWfh8?Mw_QD8|QLT5?{1ml1R*-mHj2@=+rk#r-ftA-@d%OH%cc3 zMQV>abbFbAX#~)7h;#J*ac6E4j;q%SzUDDKWhK3GgqThbVStT72^S~OyM$VLjPyd! zDO(mrxJh7*$jlQm0|m2{y<^c{(KgPxwO!2JJAb@~0B9;Z&=UP&5NPOJt7d`Dj`81#`TxCj(rdEk?meLp5%Ovz-n8ae)W9Zk!q_ zoF&v^&Ol60iy21}2%l}JTN}2O@I_wDWwR)7q%a=YGBfemJ0rb0P4G;x?|~&v1yyOb zDzO4_$jOf z&&B?7=6f5WA!K-GW5_H|M>7p7*jz)WIOex5{BlDBFOa^S;im?-N(s6JdsiUXyHBTb zqqlqhl2_?-TrNefBb(b8zsvY=Z2l;kQ(a2-H&z{?eMAq=J9NktJe=&aOvp4%Q3)hY zylR5f@t=(l)nDK%%Ld$@N#1rBgUX%X?cJ9&C>;lgP|ka@QYI`hfdrOXk61tk8YM=K zE)3xLlk6#_C0}S`MQqvrmO98+Zc|LoKZKV&W(y}#dI}zXf=Y!*rj2!}%vFhB+7a7G z5YCotF=Rz!UO`kLBDOWz!wIVr%6hVma!bJuQs+_Q?yJ0M1K@EE>2oQJBS01Xv zHYaB@ESL@Cz7jmOT83$YJBTBk{0LOUiX(WA&F1UnSLfC($%&COgxQ3kYYgp7WD$3*9=alZvRhHT zb9RZP%zU`ip}iGzPb@T!a9VhO2VNI8s%MRh_@ES^lS?fsXvO3vwy>>=mKX`6I209x zofX{_ydbMXeT}rIQN5!xKUuqtVqg+C(E9qSw3tWW=4@4L@3dBGLQj8sEiaW8egKaq9Z&mAR65 zL!0@Gn*rS%PS?BG1u~Xd_3=E9jqxnSp6jus0@|S+?>){TvLrtpoT|D+U(zIbc^jF< z*=@AVIjoNA{AH7A9VugjFW9X2FDQ6KvjixZ5UtY|vBV`JGw}tLx%di| zx%Pr9ynDfI-nF*(zjAVCgl46Oe}IQ$`A9%+w>ay?R)#_?#=LxweZQBBdfhsK4To6x zRg#h%GBPYR{nWHWB_UUrGO;VzPY#c+ny1Zzx_{h5k!r1zO8gY)4)*TT9!jJt3k3AC zn+{$qs~Em4+pFTlo?PFRb4pla`mqyrwfNNU#9ZGUjH=|HRR$Q>p)cr;IO2_3^jT%< z3O1`KNS%wAOCxtVRgRPUB{kZ(g$j1za!JoL>+ad|nb^FYxl}wJX<|b_EIX635@dxshNCl_zn@Nvc*7pU@@#I8TAg z(q9^r?X%i~?TMakf;woNHC4-@F9*@yp9;lo_0tsOESW#KF*|aA`kB)WU9ir`-R$f* zlAYpDCgr$1wo)Wo@Kx6A&BR~BzRnKiwK8Gtrqdvjaqr?!*+I>XQOb-ouY);kCpfbw zEvzOqfte>W;gtFI$rQ6Ei@P{`f{p>tP^M`~$iaD*;>HUp_p4ioqxtAydV)RT)HaR#VveoKi2Y`BaB;N5 zkB+nYeT+m!znWjLdD4~hmu|-+t3tD}|Dc8jLfK?aj1)G$5w%qKQuKg^fJPbeY5E?evJV15A{SahDaNcYHQ@xCF=hbr=x}$*Tc+;v<@P-k5MriBp+ zc@mhuxW8I_VCMV~Fp7Rek<9A0VM~Jl1xIM!?4HNJ}CR7@#DOg@|wQsF6 zW7Hn|**^Tmm`*>$S;|zQ-b8UW|1z7;GHhBlr=#ODj8}N3pr2lp_p&&Kew1OoHt2o~ znx2tRA()5*EHLT&gWu{$5CIoIb&5;x68rY4XZ|6^GiI*AHDHrD3;(>{xgV=HY@d+6qU(3%B59!mEr& zs0k?^Rci{#lH%p=bRH4d?%MY`$Z-VMj?RpuZXNjap|0IXFX~b!sFk~Emzm^bb=jEx`V!5CgVQtr&9|Byq&yFxg!F(;hweqz{kd94 zOKZYypkHqw0;gg*Q<-J~WM-IgPfhVeG_@Mb6N4I9gKj`ojkB=@c z-^J7doFBj*9=R9lyu$E%d(M`9*;3C!y4{ObpU9{zNxzp3gjwOq!gW;>ynR@;YjAFA ztQ^Ilz+BDFw8K5r{O}ki%<;lpDwMA#b884s*r8oc593~Ds@mnFI*xUOb&`DkUZx8? zx=J|46VJ6n>c=5kR&vYc?!h|7&&O!R1+An+7P~n)xHv}qd(0#xvD?%>urM4g%%QM{ z{&R5Rzl`yHC>LIr6)6o34+)=Ou{QzKh~gjogg72#JSfN=-r~@U#s#~KXeI;>Q|#?> z>*f?fDUtluup!U`%z+GF$N`NdPI_bP6-|HK1mTbk3MsHkv|nQvqk8_Drdbrzt;V0R zi@?Un)hI?$LQ1>P#!R{h=zu*AoAWqAymCgV;%Q6DINF<*L`Fenx+qaIR!vTlAJBuM zWF$r9@I0!nhaz?_pdi^$l*uO;KYbO7ag-^78cWdR0o$KSg<4^gu!inu3h0ve*#pd}J1Y07If z1t;;&xz11;KA90LDp-7GiS?s+ft{r;aI(fMh%Ef5P?ZsMR#KMee26co-CxcZ1)_!p zKmc6;4Qg;m6?${Vo1Et*S@sZDP{pFX;GEYfuoe|wW(wjM;#v_DiK;p7STC9dU+}&a zeq88JoxFOx2_6jkUq`YU#hBI3hU)0E*Tj`At!!ItNUp@#gipe8yXd114&!Hr;NuCU z=8-MEBt+uEK5;;ZyO%voW*8jka)X%F-Bm0!b@qq$|Cv(xjXYT5*(pu+cxS1?Xa4f$ix1a!krb>h_#rk@<(S{3~gLcw6zqX-RVwd`aJ#;ojNs-@;hZjFvTz+UMAx8-9u zEt%>;h_0#N^ytH)PxzO$45yl`I-cq$%t; zug#ylyljHHLSlP!#RVj-@)(*H%xEEZ)6)zsG_toIPDV?uM3j{U0j&s40h3oCA?QZ5 zV1~Q}*G^X@-9R3Fh;&Aa#w91>>Fge_y_?HAh=XX2Y#&kUm^hr)xG0)8=vzh8h!#Aq zGpXlu6Kx8x5}r&C5CI&nZ&Wd~a77H8$WR78`(UC+88A!fmNXo}TY3Y@k2S4h5Lz>% zQoYm1K7Cp^WyJ$8)U1pzDSH^DGmfZEM*X+UO^Dw+s-rjs@r0P9k~LPP^sELnbIsG_ zKn#+^p)$lIOyaspr{#~&Mk``3R>shfAzK8bD?>&ItW=#Vs_&-bhH+>dN2_^WB}xoo zoo{P-R3%XFK*=l2K?_1l(jH{V)+&@*(Z*b~!P=(9CUTWIu^*c}2`E)U5<;@5k%hFs zigeV_YV`FTF6>E^fmg@3SXB;A z(=W}^M6w+r5*C{5n4q-|k)s-dz&Tss5Q69;*^%YHqp=?}+emy92a2*n;$nIRPiRsr z9aJ4eDus`j0%xI?M+Zw13g3oF?J=^4Ld?h(1uvkT)zO%!d0=|xzc?~qUR%Qpi*=dH zR0Cr7+ou0LO2V-S`-!uRkf-Pjn&x_IA9)87&*=c2>;V($d5}KMk?YSeVilL|-g&GO$dl0zt^adA`RlPXhco#e z&czg9`pl8?x@sw%A@cCk$x9Eoe;JSb!0`+K)-ifC#1WGk3s z)^>`lre;oF_RxZo^=28cv`VYRTWutFI=^GwI7Xx8w`0Vyh4B zOtIvm$&IxdzH`5Z%zHHwhNT9PgRP&vO!66B)GmdupCK=-5gQjUeWx|%0SfpU zKC7~i7Hql;Hp_h^WRjlo7C`INLc9{HU${TEw?Ga0+5IF8FyU2Kp%Au8^ktdyQqw&V2{!FaN*AsbyCya{Q;(2iZ@#bS<5zrz^yeD+} z!@1M|$xbcIIuzH-6gN4Uou9wF2SMhnDMI>K#2E!t`{Fy#da_IF&*_pscMr6!Y#;$~SIEnT?IVKTQvpH$ z;U5;3mV7^%S|dgI_T9{tEbUV$gV*sUcyVxsR|VdYUVZjQQfC~{_EI4x z9t#-4Ym3)@L1__NSjR^TsIsx5J%*<14I~4S#GX1L-!cyxDsV}j8m3^R!py?7g6g>H z;?!`0B!8Ejaj*d0-;y7{x==n?c{1q4U>?R&XCLg~sbU{rRj(ges@9KN4tyfXe@s4A ze;lXyQnl46O{_jPv8eqB*y&CIRmJOa>6seT=%!ZG=wK7l1-fczeHG}5n>u}}S3kKv z=a==WGR8g3X%-LHrB+QCj4$0k7(KNskjTYcqHj~ag0L<*G2O$AF<&biggN_Ys~Kz6wZDh2{C+4GarK#sZyrLyZxk;1Ms1z@E^q5~GWjxY->f{PMN_1V(( z*@&i6EtrL}`)F@RB6Bv#+Z$_Z*RSoqJUy5>c=e-?ZU%_$Km=1?X7JwZcsjNnd8Ul^ zVZ|*O?Mf-^q+RhOB5M|9 zA|I7^hsl(96pN6ZlLd^fT1ZKh6pC-Z`(r_>{q|Cq99L-4IDhtIgw)={!%*f&0J^W> z&H=WtZjGw%Xx$|S2k(5GBEf6Ic%{RXkSpK{LkuNeHS91t~DZqX0@>NM9Qd zXR|6QWQg&Ni3B3--BF__DKJkL_!+O6oaH6-nQYJ06mO!4ti!BOwPY#Z4jwNj3JPg6 zNI|&SXDK*&5jb>EDQIl5U+foijPaEQ7b+5Od&(Y5E>>G`%UVm?X}8o;Rz$02TA^!O z6Bk$N96@LK3iUZqfs^7pEqyy($z=s#4YFYJm%Pj-w|jty4aMikDo<#}D-`ui%PenB zCOa5Rl6IqR0!@Z|g3+$iO~7=3zj|#F27#Aj!Vqq#5PEt(*G+trpLIV`+VR?C%P%Pd z8wU=~L!b8n9g0aF{VJI#9OqENQpe=pr`w39T46Ccp3ZBCym>?u{~rnKnb3*i-o^N7 z2e&&Jopexj;h_ldL&eZHhEwojR#o|9rbJ%sQHa{#cG$;Z%USFyE2o|cTE=w3m?d{j zA}>^g6}fpAu20f%YRoJGqmOrS&pK(6`oN9RmX~!#Sn`tg1%D+s_5NKbN+i&ZRe^SS$nAb7H9l5(m6W3MvZ&DNs9nhKN%5jUqq+#C3PnwonQ1qG z4cTIq(CS&iSRS{H7>(Pn5_BCznAForewFIfsY-I>P(|3L0+q0Bu)^Dp+`}e5w@TMy zXe+!rv0Emc(8DdeiPV8ipQ)f7(acsCUa=_zjV&L|7bS04vm_Oyr)W(Wid3pN+j`gEU#@2(=s*k8WB%JX$|I zg^{*JBfhVP+!&ozBmz5Smjn8O!jhUxL6(^Vdkta5T;fnzMY8_o={{qYtwHdGm+x4I zO8cS7Xk=(LO^+}Jrg8%???uvPLJEKD(EGYEDGYnj3 zvKMjO{;Y#gqHRpBPa*}}X#^R+2r_dYOr8g{zevU1mul^Jf>7|*#re6uzu4QEA?8D- zuHPpJsZ2s3Ks;OqM&~(rx_zeTpyZg65T8)np@Bh0dSd}|Y%S94y> zvXV2MbF{|Xe@Up#yB$P4JZ{ zbmo!gqoaLl5E1Hfy((y*liE5S_9IUlvOAt>i)Md>knku1yresXvi$3d)7c_m=4Axg zzT)vR=4;B_lV_Hd?Hdjs;E_`IY(rmFPasHic$}0#ULzN6{({3iHejln4^|Him(#e+0}^wJacZlU(lWVeOy+9 z^rNqeWWCp zeXMkfeJm&YKGG?|?5O7*8ml=}Km82pvDtpagY$vZJoVX6`EdHYk90TEr>E?t=av6u zo6wSvNTP52l_ohPt%s8wsg-D6=U`b#GpAg2DLtHYcCAEXcaY0De>vl@qw4}gQWLWc zy6gnrHp&PlV~PMJ3UY^Xfyq+GHrnjpCU(jz%bLw3Ymb&qy5-<*O;=Y6VujKUW`n*= zE^}*C(v3>$RiUMKtUx>~RuCr4_044bE@F7l`iQ-BUE!9~W6_Ta!+;=7=_8Y@pc4W4 z&|C0T{!JcoEZ@YjR}02jvTWsURY}?p3>n8?d750hYe`de_R(AkF#TpLCLI7L^>ys# zv<1<~7JSU6Q&p*TWm}rEDlVo4cWW_A<>G}4*?b%~@CkUmc6FJBa2|jEchBHtsB%@H zp5ds#<>?y77)@Ikt}*9aH0HWin}@MVu#}Wo4!)}Bm`c`TH9pO!RPQQgUU}ct4ZS6= zy4TT*N#giwBonreUH3P?;juX-SE>C*uFMuIq-Ij#n0Gs|P!cUflao}L7&!D`bumc* zSo$XhsLG{o@3;%z~Z;U%5J{WJ_LIz{ZX~=Ml`3@P3Vjivfk}rr=v1xX#itf4< z8T|OR(U1_kMHf+}$@1Z7QvB^A4_nrdzdB!anhqy+K&WuK;F8{Mt+3lJW34c$X30Rc zirAhkb&0c=Vek25^i(olJA?M3nWjD5*z8-YvLTKY#Fr{)+Jfi}PRXH{hy^sABNove zf+`;$uApLVWJt(h70IEcf^;6tN{+O){m@kqH zChtkf@lAn~*PD#+`C63_c`h7%^`Ij+xuTal>F~*5HvyHHt8kJBO#HEJv_3;Z%Jz z+rPkQc86OSOJfiHh#`ozV;^xpp?3ag!S=x%`I3*H!g9>Wxnb@(S2O2{yeMf)zEk0Q z@&Z33Ud93k`Jr;kBnu&$%=~nN#@)iWe4t}TZB6OnI#$)5Q%2o79$A(Gs4Ly3J4e>w zg&B2wl+IE~Zo=*5fj-cgstDOk#JRL<)4?jq) zozm#+&HV(7=b03C&*dIuP8(kpD(OEc0>jn1WUl5QXRG{c-WkfA?lW0PK> zjl>wB&N&(H&js)MXlOFIJrJG&ZDysRcW0e07D#8Y0FWPJ z(NsmyMbZ>i7#dtb%ks5PCb)iknrz*$UVZdr#+4t)r~D)+szTUZK~}T*d$ii;k0+Em zk~1WFl1akA0AEB{qoqeabc4%&o?ILOnBDi@?An?P?wfm@dLLLwt*`(ppT)>Rm`%+V z2RT-Th04Q;#shpIf^=g9=PB0Ank@rcnYkgzC85IM;Z}cPz>6I5@())HR6L6r%Zq@X zFzgwy^_U@7LT3=&L)=hMG08vnx%t)3iL8WW6b{X^Pa4)j^YqxRN|>A)N;eg(*C4VQvl{|G)8%f)x zmpG>AJe0ray;^1BJCjSkgd2X!kx`Hg64l{ISSz{e!W+AT4c3J)k7*TL&@%4y^N1%?-|4dsp$WHJnhvRh>?@k8 zc|AI65h`H^cR6wAOxV&!q7;DII)<;y^WlZFCMmmlscu=gD0?#{`D&rBR1T_|k+1oV32%fOtb7>-c0=j&&) zvzMnlgwu?2NVOKlQ|=O^qjh0BMJNq)-maP_l;06*p{Q(~B05gPlbEEGxAr!WQ0auy zPs<4Ok+^W6HGRA_vX373YJi|7ec0$m3O_!R2g0)i(ZaFayDxAJQn3`F-qA-Bm};CL zeY*;#j@Vy%kB{bu7ykA|#+*OnOvas7IUaj7d(Nml8FAGLTI54*BG%2(%VqOS!d466 zK~e~uNa{!RVZSrOx`iY>1{}i>TVS4k;ff8WzDAF-C`fy{nQ&Ja5>=4CkXLO!>{w}e z^>)zO+Pxm+t#2Sl9fokbld-$Y)Vat`)0WyK6Bs{?NBd9J&dsgeeF-QXI^F+*`$<>N zo4afLyT-o{`FEXvH~9Av|2{s)gVe#bYwPE_p<}^3M7i+A_%r1Q;1%!W-sY+QHR?`0>p57 z!^V*C!jX#wc2}ps+=>7NCz6z~p4<{ddHtwaeop4$5_`@uL7e7ND9+u;A`(WKB#200Ts2D9NvoK+Nm!v;XY=IPRNgD; zCAgaLdEymqq5|nty1x?ej%-)9UMQiWB!ltx(;)Vp0=gIA6gMh(mY(G-?r*AzS`K{ps(UuR~Y&oHx1Db!=xPd2<1^I=lpd3ey)+(D?~7k+VjY4Qu} zecw(KLieGwq{BLfwx_sMHlhklTc6<`F(Nb?Vk}ZR?MoGST7~I@d?;t$Rkeuer@N~I zXvk=wDI+CF`*wm<^%UGcD`D@pdxuM?lZk$-(wVNm<=p5yX$r?Vm}C)csGSRy9w>Od z2rg4btO?yt*}Q6`;Bwzic6tKGTo&uTZVDxZum%Pn9?*s5HarmoS%gid5{AqnzQ}xm zY;4VNH7P$;*pae>njmTEQLnNiMIW>6{eCY-VJmYPQ2na2mAP#lHK=aujRS+E&q^~xGp zQM(Il$520(hFFFe9|7(cKhXo0s&My4UvPQNg7j}Tu~QVQgLs~}Tb?5o5U`Jwlky>F znRPIlsSHV`N1*V%dk%%h2ZLTv6QP3BR$^~1Mh%eiB6MzXt@ z*k!T_Sv^^lFd{A6NnmNzDrfhnnr-m z4Y<8EclC81NqA$vQkc0%sR`&zPy2W^IlVH$(4{XlJKqe%Y5Z!~aKTRRF&`3g zGJp%-0@Ltz;?(y&Jay{f+#gjBeby~AnS1P?du7!tlf|tItGP%W@?u2sd*+(h=@=>> z?|$PqF(lS~5V7FJfqRZm8V_9|PdIgq`-Dpf_DnOtY9XTwn2RE(*k55Ig%CU!Gg%cO zZ+r0R%GJ%o4Pbk>u3gd=rz{M{mQPycpSB=KN(+wa@rBd6R>;cRh-e%SE2{F+P^qKl zi%ADV4E(p>8s!iTkVL=^Xr1X6z9Kk5^OrGyd_H!ygbU+S7 zsgr7d&(;=wIa}g3ThrqwKFK7K;_~r5L--dSS=f)f7SyyK9ep-2fS#wB$ny_$h~(W2 zm1O7kHcCTe&-`}KsH@d&ZS1sFnz|pJ`{KO*gdQcXVex?J>&wx}xhZhiBXksGi{nvD zokx)1a7q(w%}Kh3=6se>rf{&-LT#LI_ELZ*ryt)ncO90y`k*ZpS?5u@?_jihW0%?!^3bm_F%X=#>rz zNrg}8RD>HMX^uO>?T`vwIg3S5hC2Wreb)h`p~d>q-SYhQ`y=iT^W3KJ-0I3<7J8t0 z1a<90u`O_Xa>!}HwAwA47Q2NXA587{j{Gh1QUXsxa3Yr|pWpL^|1yWpo2PXC>@Zku zJeK;AmuV-8U^h~B1*Cn$e9p>p%aPfjGowx|!X8LgHagZ2O9716lk?^1?70=l`iJ>& zAXULQ*R7M?VRfS-}eErJx4+C>79@a&z&F;bMMF9|Oz<{}Nt8^!iv@uAY z5y{QyA%Ih4wP|IsG6k@Cr4SEIU;>$dZKH(&=scCy7So08%`7CBUU-ZTYzpdl zDHLw)IPnwvY_yo77Xu**P$B$AktjWrSt&S^9Wnu#l#skbe|D6*L3@N;Wn073r4U}Y zXmh)Nd7Bg6SI(@F9xh-ySnPb@Q)B81-C(-8*kCp}LYJ;Pok@(qoGGYr6_)Lz-{@?3 z1}ud{3@hoGOy#%Y@?=Wl0*5b2#4%~t>_xsL9rNLh(&^as+E>m~0DJA@ zA?(`q8v|*tu6^9a-e21x?Wg^kslIEyzPWn!S`W8&t&h8UqmNtrxR1Mfvyc1m%FWg{ zU}2w4)~;W_+D2>m)~>a2zifk|id!44!rZe!8wVw0U&WB4lNO`x6*0+wN2}!9Yo~2^ z-U5HUH@Zl67LCc?Z1>iY&Szu6Z6lSE!QXJ)>hvgZQdwCkQX6#mCY`xE-bb?2k0ho^ zb)HcO8kaoWVY+l!7h5en$2(oj&MYj^5=U4wayJC)tOawMo;T#i2v6AOH)msB1ZTnB z!mSMsp8|v==<>06BY08b#UA=V6x=w+`e4G#d*U>Z89ruHZUHV{$*4s4J6M;|4)16Is@1 zmxwxut1z4kbOKUsHF{CL2|2CsAmvS19!sB{xRcJA_M8Ni6~kX>Eh(z zzMJao{_;5Tn76PBwt`_uc$5JTM_y%hmY9?p$8>4ISZK~z2h1<7cFQ@EXN9{Zcr;yb zGINahl`d+XY>(%M>t{$QQ>w*D1)=A!AQH17qXUe@2x9SQkU@5x3Lm1@F?<{VzY z@1i`*k|BCEBF3q9>Liz+-J2dwy+6lVd)G2(4Xi<$P=nOD2B~BM%Z}}3*-c#;qWK<_^xX_}-giA+Yr}PvO*qS% zWC^=3&)gv0_;d)9OsYLCG^qegd$|@I>uFib@8=)$pp-BW7HKammX%}ABh+bASog&} z7^exgdPk^sJ-a%qn2f=6!sl4pGQ~6EzcNzSR|a!&z~KMM6{}r&HBA;8uKpKjIe525 zvsC>gxX|j>E4Pg&$uv^x9M>8-j66-(zfxD)X9JLu{L$#SgXXS#&yp<}D!(jXU6QW- zQV_Ba$QlZR(eWg}%)%p1!y~$D_E~yNSvK}Ke^?Jf}5#o*}3z^dGv*qaob#_R}o>~=?q{iAWV`mS!*|&!e zupG2#rCrBNj-K)dE)yWUslpOW;rDn{nEezj3L3J6J{iE7)-1)3yl8T_{O<+TF?t5gioa7mj-AKlWOp z4Ctuhfn6u^uuq6x9D%@+SS&oGSD#B<78sKyjC^eQFwYsmv}@s1BdHuy5-A%~Fl>pX9V`vO)8_N$sKG5LZ zDe9Ps%$d=v@PM}hc7ih-WgJuaix7J=hq+3FYE6lf|0h&Mco;VUo30gPXekj?muX<*t6GOI<$-<>da6fW%`sAWcwn$iGb!=SvyYY*j(7 zfAO5`;r&NU@&no5aB}384<&mvV$I7b`($A-21_8h7IA;`+S(Q0LlO*&nc#H4_-X=o zpNt}S=i%<2Y-je@u3TM<)HQDZdd8Ej0QWZ|`R@H|rQ9kAFPZS0%kztmuHOida$qb| z-2KfGx}I>}9JtK{w<@_`@Dx-4&je4JGHs_{t(6pXKJ6~*_=M1ePr*eA+C<^%VMHNp za4mQsRAeSIDZiGV>D?2YE@&psBq6Er(@6^RfcAZeg+@1FnAu0up_ps zBq5+r6-2I7tHhP2R9x;$p-(xo9KB4yp*Kr)O~#YW-ShMLXOn{fu^)~gyI%zF^C~@; zb0-<087{J$4CEtSoJj_vLIge#RbMcOlAutsZW>5UlLxTler4i|QDiv!G#j))#)aol zJ=OTD_JFN7(e#w&5)_4BB$6<2SDpw1;nyrYnL3%REuyG)1+mvfMAaC|;$lZckVECQ zk?=uP5-qO8XGSg+7va>2c;`Bq`8ER~RLSDlok=k~*^m z@8G}SE{we%cgbP(hh$CIMW8L+6yq-~eH+2tZzb5aWLP8@y2w6iNOjK?GX^c<%B0lG z<)BW@bPLX4Ctn$Ko8S=ZO7&=|_>5Q~bHo&gu8E-G+1k(Q$9)W0&tgL`+|}3`iaK{u z)ks(pbjzn)3X9~ds0#%Jd`z<#h-TIi*~f{OKu6O+tHTCk(;pQoKyqpT)f45 z-)taFcS9>f>f4pIvEgEQsX;kWYI7?=8>dx}vz%Aq)Hjw@)}uL*dMJM&P2lu_nCS+l zc^pyh_1YkBvt7F}*o;yw)Kk8j9hBS->J6xgNgd$zBz$O2^oLfX!@dSh1{h-^Z2Ye& zM@>-TA=*-#1<{jFJ!0QZgJ@rMbFmQ>%`{5un#?ElPhdf?w!29TOEa0f+*=F)8$g{^&{t+`;~gFo$d|2`V(wn{O79ZI?$v zffcoTfrB`Vnno`LK~>P-Bmnyj?Oizv8>}<9b?47Ls1|rgwU=ldL9->ASK-lNh_gJ- zy`nasoX>bTP$goeCp!=;+)oh>s6Y)fErK{Y?res;R-B9}@%={+?Jj<^yO#o*7%3>T zHYM6rN9M1jFw+n+cb=e`C)hzn5x1h)!v*;QP{>XHLGR5{vh(TuO5 zL|YePiX7X#fg!k6$zksxk~+nVIQqUAC! zM;3nuZE@Q@1B$vOX#0VJWA%)QJh z*~6Gd*~N_Ex!m2uL9;Xj^4ZVNnf|baN_ZRwcuh9Nvk@~clT@ysQh+nFZ=(_AyJ$cm zekEC;icL#k{FIO(@vamtN$p{BXJ&|E^~XHthQ#FFg{Id1iv}GuUQI5V(~A{U4)?Cj z%ZujVnNz6rMpiS6!1xKu$7hm?Ju{N7;Pjb}`+g`g$v?h2&4bbI1y2emGd`T03B7}S zz>5Bb0<07LkVHSf(;qE2{eGc8i!%(QXB4*F9WS3X({nyId%pHut=W6tZ^C`_P?wQJ ztKj<+{01Eg(Do-I6(l&>k_WWBpg};iYYV;eWWg4t^b{`f!miyq5JIyPhR>|)0Fevw z?uZok_97qocbRburKIxaq%HgJ5^}*mP0NQThp8I!3ll-bP_qD$Ek*EXpoO+~;cmBi z`rNvhuJgh%ntm|zU@}e+=vz&7P|ZLU@<)m7~vGOY9BJUI8r>qGIIm66u^i!^X2pA+dHK(9*<`eBx$xD~ zik-)4x|}4W)Z3GDdoDPE2QS2NqpN(;yx=m~i-ygHzesvtG@3PcCoiniz!Ea@Ji^($ z0gJH*HZjT`V;3u=I@mnXICx>&4~w~Dr`0JFU+EAzc|h|n$@EEK?r&8ElC)!P?`?7y zOuDpNgYhflOnyF?MMa{Gi&q0)SMHl9i&8G6&-aF$A7b}wjn;*x6h5iKoaz(y{3HcL zehJnPdvyYB#H>Ula4Pr-|8|b({TIzHFRL`Bx=~=4e~Zx}f6bQjhyY|wKaiUXtT7o= z|LHM$GOmRYv>)s{cr?m_yv#6H%&GnzE}=#X4?)Wcz??NaG-{Wp5SnBA3sK>Cg^b^P zP#TIcx8Ed^P}-&bXqVFOfe_41Es2*t6XjM?yT3K^;nUGen<o*dVHA8F7anc1H)0glAE zc{*@Q_*N3@6YIJ*l?dZsgG6j-woc zLC0vvQ)MGQOIG+4%EUm&uU<{?us%|tU5PRfaqrEjKJC#<)sY8d7OB^HoG&n{giBWf zlP{2!!YL(Ul|Bi)ba-^MGu<8@$)iKF^XT^e$>ex6e%Y`C?avoS0g9fYEVPF&Z2EJW zR7*1spHd~#uT>hEPC?B6QwV>DrgW640Gy*QCX>D;SnotnBl1}lUdAg7RsqH!Wq>O# z07vPB4rVlgJf(8>GQww1rf6mhV%kN_OWk0zuqvaXG|&Tlkf$GEX%=wiHf%4O)AjjW zoQ!6qx9Qf5fQh)Ch5Xe}ENuHdwZG10nw-mE6H6obFaWA#zXvL68nvIaR%!D|YV z#QeNkp9sMPTm6XQ*`-OTmpq|gq|0X+A@g3(*+%fG|18Z4jCYRr(bZ;Um3?Aky}}&ytW$tTIN4Tg5WeG^>!xg{*zCWTdTf@tkw0uhBRcL=@3N#~dM z0#JutyK_@em{Y=A6?o3my9GLBV3;THs|B~{qmskTl18S{H6b>hNbVKTmxK^aP}#{ybRr$ zE$fkSfila{BA<_R9akZ<&$p1C$`eLSWlFo^PKaEc78ZI~l1xpK_i*6ogTR0y zU-boL=iMq-RI5VS5alIVvX*69aB{pE%|P4$lP7ZjMY8<&HEaIiHKoG#FREX%H3U!>E z+`cPZVP({O~Bynl8Eq6Gob!>?Rj!mw@ z#6}jVyk7+(9G2Va&d3dyjs(mG*+v+3mHZ@9q+;5swwIs5(5S9vyb;r$SuD2>0$K7A z)R;VCP0uVslvD}m!b2RvDA+d85oT(5hCwBw9c2m%-SHXWG^L8qdtQa35R=N`V3{vh z5s%NFbKSKJ1I*Q;(Q_^=Uw>%Q1~>5HeSL^ zjv=OzrF>ABrT%Q1n;wPe9R1KM`f*Oe=Y(J>6hrE!qy_Mur@+gcjBZj^oonzWxRh9D zP17;cfzEqZ$FLNWj@|u;aXGQ2q?<_*ZXKL(RjQ=VZpJd++Se<5N8<0zJWfH(77@Tr zjmXpCa)KSRc#p$WF zkhZ2t#evRcPCAtLMb_TX%bn}V%x-BTm4lUUzjg?NbD%xx+79I5mRJ<-RJmA3uIPuO zZ`sW&d^-7cY2~;#J;P&Pg{am36`I3;$&>`QEYJ!WhWRa|=+j}zxW3?QyU=$#cDF)fxXnl>{KTFFR*<V#uN=fMTwVDokJSViWE5# zbzq@IsjQYUh~t=Ch*UkCNdB|B*!1GC7=OfKo^BigTX1)wDU(Ht;gcTn&UZD5W7e19 zrirQHsEf1H(SjwG5!>4BJdOpF!%qWQmXs&58p{wrIuTm8j-=JC_d%NKpWmfOo|_+! zP&M;bMgxuTfC@1Ygs{d(Whfk6Wdya#;b)S3D9>!Z&z*E24{x6#U2;gh#%B(u7T11; z`KA2HY0<$WSBX@ulwK8M4QWRX0-ixR1xYc~>7j1m%j=c)OawIv_>9}A*cl}6S4Ie= z3ChY`t}oP(zSmLrHXT(jR8&IMcyPpu%o?SF9)*&rpj5ca@e0nxbp^IGiz$bBTB5ZC zEpcG)2`30Noe9hqChL3bAtxvXbUH$lI{K}r@986A+w5+m>0EGsaekPS;M+@D4RbXi zzfHE^ik(WjarGz?dg@5m_i)o3tL89IWAv)agj{_sHw$s0ii38v+BJ@^)gT|L!FiSY zG;SZ-VBp#z!}0`?0ZORBWfir4!8FbZxvL{D$NPLEUqZB^MNcqHr`h6PJd_+e!hRcj zfVR}UOG{sEW*!cyBes`j1jVqPKo>nMjs=1tN8I)WX_;d4a4Z@Ic1W&L@WCr0p#fvo{+2g;E$Sr*Zf8G-FKS} zzOVB1)ho@5=I{9XH_b1bzi-}an)UT&w|UT9Zmtr$Nxnz?@(4EdIJ2)_Sjq2F54Gad zaQbR)*T&Z^;r-^)*4HnCQn1UoZS_}QjI7P-p)+cJ&hM<5gFoZnA?;N^{R-R#G3wv5 z=BJkGxwZ2t*yr>Du0RQGHuw0un|j6jU3nIiw4|&{KRF@pp!pA$=M3zO&=UAX^Ko;d z+2`MfP4k`0r2P*~^Xh-zs6MCxR+e|E%I!Q@i{|}S=F6lw;lFmpRYhS-BQ-7FrSt=^ z3gNz#zh9|Qul}!kPPQxeF2$?G3+siKeBv3OTiDFeENxfw>-Mk4O8*{Hz8dvqb-DDd z%T4n`jkw1D2{k?Duj&W>)&KWzHBF)!dsIYS=3_IanrHksVH#?h4%bc-RC7dAo5#|v z+m(96q@LSgsFOu7y!$V``p@+wi@85se0#Khzmw|!=}syU9IXKnm*>_l4e=jhI_=mR z8Rbber-#*t`hLGgK3bPv{l8zo0l&{4j!E`a8rR$zS~HqtZ#Vgx?|)_kdB(76M{BO# zX3u#S8u+38-Qe#Hh@Jj^WPfkk-)p2&x-0BP%?}i=|7*7Ep5JXAl5(fnX7>^W_dV`1 zVJ)wzEfZfZ+Ot#-uZ!)y-`gTh+LvGb<87+))&JXSZZ+%tx5YNG!QUH%Z`06^`MuIy zBlZ^XX0z5@C-!5~Y#Lr$!d3g%eBCO%ZRNMB=5A22+fc=Sth@T(BK&V&g^!x%AHRKt z5&5XO$(U&*H9gf?H*IV+lIx7$b^g=X-k|Gl64t1HOv)?7U$I}|HR>AcTcq-tu|}#* z%W;!9L08Fri@#b7g7oE&ZSGv-3!D7=i2v4zUuPz55Oc%6u9y$Wl2B(itu`+g>D#|sxj2~ZNk{D zH_cBqiyuKex0w&y;MWOn+30OGzkv1HBHbPbj6LSaF8DW0|NRY8KZ5ZR^L^Sh-_4;v z7Be>n?{#|09Bd%Wxklgj8o!_7Fa5o?g*Dc}ht`IVn5j3Z9-@EiaqDZ7zLRBd2k@^mjV2>G0=AyZ0HPDPNx3_jM$39#0$DaOpa@Y5o0e^XH_{ z31LD=-wmivq2u7+6R+=Idfff?9<|fR>1)Hh<_FYEoU7LR`_@B#{5rJ~t<+Js)UVT` z-_dhoc+ZRs%4#=5YQJ?6eKd0V*o_I+erIqKe`FBA*RmMKOa|rx5^nvg`BSp>B z&*)P4J7aEWB)qIYr>~mtYMku5KVH=*zojgVVsmv>idDUK>1QCsFPWm(X_h#vRfT9;>9j8*qcl7x#b-2$PiVa45W=Xtbz&B` zrH=)}tj-eb$Ce!k#C_7l6pP~x4^O47AvTTS+Hf*k)^*;XISL|e$8wo{g~!MiN;I_+B1y#LUa`Z4)+ zKKR1=*~zQMPN!wzbizfb(_dryNt>mZMfKgT^{-aoF6l*Fk6I%E=l#4*TgKF1V{&XQ zK*>Tq#Y)DvM^>`R(!BK9=jXfCYfbS=sT3}|V?BNUh%!#0Tz*DuuDPsl!Ngd>(^VOmA8cDDa_iXAD3{= z=KV5L@=JeOQUq&P#lnJU-UeHs^{75`%Iw085g4uKvDL!a3}3m;RbM$LmMf&DKEB#i zoz9m%0h#u-H_0KoaR7_uJ4N#yZKp4rW>-BlH7e;M7svY%Li>)_{(b5@w-Q84$3T%z zHB zw=w0OozWikt$N8RjOcxgwF_TO((nV#x?M_AA8Xw=*SnZ^!HOYK4PAWeX%AsCLXdmu zuf&dPHEy%k9us;Et^DIP`r+6EswNOB`7QM2eHXnU?*`LsQbTpJQvNdgGeXwfp@sX8C(C2{D&F1E+^wFw%$MwBJ z%x}Ne*Esw(pKG*S1{5RfD^iDD*TeYS*J{yTqw$Wpr}6TZXf=rfDwT4ouKix(d%d3H zp#8zSl=(Sx^f&x=|NE3Oi$vXfted7#RIU4(ny*S9C2Uh$=j|5Iwg*1CR-Z^wel>qZ zF*Qpz38}TOEC06jpzok>l3uN-X~dV+XQxFEd~TKc1RYjALwmJO?;JBW&e%U;#g+7> zoh8&Sy?UY{zX@~Wrpw`|AoN)8)_ZXe#k0m-6MqK;5 z909?7?=Rtu{lDf^bF{15Q~GxAi1!z-BA#HE-&lD?(WLpWL#C*zXruNt%?s_wk-C|* zM=Dm2=&1HStr_JBN~-zgdsiu=d+_PkzuD4S4@w#54si}DFZQ}aYmv08@df{Nl>;2{ zS1d&>31!6u>VBJ=_>o(!a(*M|`KnemKU~4}zP|y*m+sN&wNn|JeksURqX@ULLQ< zGfEYqiLbPXdMi&X{dU<=cg;8Z&ih_Bk+BoVqUtNQY?wec?+w?u7Eq*ezvI2y{Anof zCH-5c=GwyV!y4Y!A?1%Fwvsk}=RR8-%*=OP>PRY%u`V%PgOMzd0Acd{GiRe`hiNiqt7UFkNS9f#QLkHzv4SOjywcz-cbv> zDRm%IyWTW^H)Zoz(I0P6!VibjHXqbI`3B|uXm$Ehmd4?2%Ic?&vV0WZysV-0QI^kv zH!o`_ee;vyespn3p2hF2?xj^J`+YE+a;SyFDTnIcNqN1!9yIsgpnrb+Wx1M8xmss$ zUv58FyIfzFZ(HtAuBNv-lIG=y{u|$jv2O-fLCTZk>Je?nwa2g>*B-TY+|}HR6?Obk z3HR!mHA|wC5nIwXIliuIKfYbxetf&mRs4Hhni+LyrT5$T zl3rhL$5Hx6ZOrRaORMDq+Dq3~tkheb%@z^!HD*L7nB5}FX7Flb%{ow@=r!_E=cYlL8NVw zFvs}~*YSu86*t)Yq|fxP_qf{T7vj=XhnkDh!ClOA;iHB*6c;0gFvO3I&3$oFg~@)G zQp5wP2W!zu95R)96^s94bTj|yP1*C;734#uvrA#i-{dUTX2@iH+V8CXS!q>gsfJ#M zSuNZ9=`P)kt81GEuBOxAPf@7~lIGzrq|W|%U;gB5f49Sjzu$aMQY^RVYqp1my*(jS zs!o3W_PIGjVj8!;?nE`#_8ry7PimUBNp|%oWwhF--{w2sgUv_vx!omdZjtITL2252 zajE5EXx}x0aOry`U-ORoReCR%iY95)Mo5S^24W@Kaox=hrM68sTsrZ&ObY%~4Es>& z*5+@K;#4CFEb$IXRa9Pn%0W{%JM0r9Jc$b)4{# z^S;-YhORh4|Jg8pheN?O40Q9+hV`ZQw0d2&k~E`8tm70PbySNl{bG3iXyijy9% zs-OH=<+>DE1Z#b{BHE>*YPr_65%F)GA%*@aG9&eiMp(iGX_-TM>+}4W{*$C!D@d}W zGTW7R#M)wpeDHt~(m44#(08TBQjT&+EwifmL8RDA^Q`$Z>BgMqXlsxJ+*gZQgLdK_ zwa;rJ?XL2(5xo=IWMM*jtj)5WHpjeEHjFC$Pt^kwc^vVdzAbA-9f8#+GLq4%pbmec zgT2ytPgEtmrxLUpPuc9e#bNLrvZ%E7f1;H27N&GM%*(<(W^{A2n@TP6wW&E#=cz}T zS$jw6v=?b?&TKsE6rsUZAIFT*tk4F^O$$mEy`r3J-5MN_Lp{gJJ# z$mfk1p$|HF)nA&6&0lr%^=p^YUKhJlGcVEWs)^`vP3mwZ?9 zTi2)!^|i!fKC9`mJ5f)~H;ssTSrqIo%h`H;ywGr zxy^51`^~qlS3Xzk>ow>$1+hD8b*W@gUadft==pt(D7W`Ozkbd1>y@o~$DX3Tl}YVz zPc*-3?*TzMN^jOihnhQ4o@%I()R$`d9VIk(YR*R-r5^+}q8e-2xoA%;$HOSCo}oX+ zWbo_th4=GazW9PK2Q_Ox8{+C?thADxqko+ABRTc zeLct`Y08>cO?>XT9&VV|(R_9-l+yc&M)N|)bIsP~2i_m0)aF~CLkGnDD4j+^-_pz# ztx)YXb{ycp<0kygPxa-lMTpjCIbvJCY_)Mk7*QKCT$ z9IYdblXF0-n~OQzs8_sT(x-2$|7z^eIMnqP?=1S&o^O}2u8D8Ds6u&tC7V;8cA+Ixi~@DeNR(H!74q{$@+>kC%Ey{pI|Zbl|bt zSDnyA0kzwNicP)TKD|@s&-P5k>)#E?B-7&TB+?5)k9{FPHoNey@5Gh&n~r9{pvf2P7!{-Rf~O3 zQg4dt7RxE$d3~?nuo&&gTEpA?RWCLh;$-7|=w}o0%FelXKa1jN+`P2ztokwH(&4hz zqxGpjY8s=bow4puoqx5em;)b0Z@2;c&}!4Zt2yVj5+8*W;c1zR&X4Gf?dn{Ok@~5K zZ@sTvVxaZ=TXy$0MT?mj-%>xgaFRMc|N3)ZJ>i_2>N(UGPDu*a#dm+TYIV7VvG~ls zp@5H}8yZCZZ4{Y09f@N!Tj;-!n6_+FeX8CZ7Kgvhw_@Z6`}1_w*Nc7cH}x&#EuZx3 zP}XmMO=xxv*N+iFCU)Pfdip$;@dE2EeR7F{q#tc*)a$9Hm4IcRs8m@&%A?iVr^=T8 zd#?0)A9eYqjVRyZS-=+q%aI5BRC1Z)N%hF6reSJxDRqMCrqMYXyO+v~@O+u3M zuJI4fTX`Di8)6NtTKAVe7;24ZnpSh+V^u@Vw&vzgdYAW#%0=IA*bL{v6jq_jX_}vF zWrmE@cY2MSpP)o*#Q~jF{HgjyJmjIDBJXUcTD7GMHRq(Sf7!m?eEyhJwZtS=?9k|I zt#)}Rry+&D6s}2oZJ(1;PwLK!=2y%(KPi^hb4Hv-pLMB4p|GlHoPyL+jfL+(Iw2f# zv8-*yDjqyiXnp#;X8)Xk?arqlrS7&Dd3%X|wa#lc+N^q?T&R6DY4L$B8?S^#~9QlzeLg-5x| z2aLtrrSNP_uf8Aj%iSoN-Fci7Nl`Ng|<_#MjK<(J-D3@W%mcM!R zPyaSmY0V`JSap#_i`%zDRexx_gctcxUn{(dBo)?3T_&PJQ#V91yQDj2(wlsdGPt?f zuU81CT}dET>n&^c>R)0K9#U1eI2M)D!ff9$)UxrN$cd0Is90Re?VPXf+xU&SRUPU2 z3EyS)E!~?zdG1?!(5ccpQY?fa`|7?5R&LctW8A*H4^^3e_Fnlzf4W}aRO2(RMVV5= z&42wQ@Db9PLsrW+9p9O=rA*n`c5F@RG=p?$CX&(JXM?bnI%tl#wA&}R>Kr5f=2U{# zUBnqygp5~(>?GvesLIh~uBA4?>!`M_pK$Go&%>BD-dg3;q!D>`-b%W3N!l-cu#?(; zEBA<|MCpkrTe*?NeIUK~{Z0*)+G}`^FNsqWWSs8zz5Gbge8&w%oA2$wUFfPja{gEU zO|vn?t-g1OJgV{iBZXG9cD0~AI;OfiEwQ+}Ffo36UlyZVV4hPIH&E}}7`H3uB5IW% zi#Nox!Cq>qy4pCXPidGt6KmcVTN?J=A`o#f?=r#GJ)g;zb%+I42WlEgeO9-iFS_m4 z%?lqCBd*WYxx{VF(;#2k9;$C$$C5L4;$bS({CKFO((*HQ ziYh37ZR@aY3to9hM5FD*De&Sm+pDcxyw@Z922y63Ueh9ME z-~M-8Tx(wa7fk^#vMx{*Qlp_$nfnxQsZm_Mh`6xiklm6Nc#O4A^60vu#>Em0U5kt% zMS1f{jGateWxXe`lihq>hm|tDeno@Jocc}OdD>Z`^9s3mv--w-Z!w$WZpZuKqx7y0 z1NAqxPP#j??{I%Xt0!3671EPf%~$_voo;TcZ8S`xqgu<}&7z2*NYp;mKM;KNs=4^q zS^WRJXX6uG#8BUf6pQ%0DR0x?Aj?6heH?T0xcyOjp2NpB>r@FPSl^i|Tj zwr)p+TPcg~jdo*|>04nbOZNw3_4@47)~C8^!boHLW4mK$lDlO)=D#D>3ohqp z%}C7-Fh>q}g>&DBr3bZ(f$__~Ug z``8tBFO~Iuompfp@;BIfeSnSBJ+uVt^k|_MAF#3dEz0_g+WhShvlYyOuf<_&RXdOV zqCIBPru&GCDRc6vRU-Nx6yi%-@^E;b*Q-<|7mD*G<$cnwVbmsk_y#}rM!o!byR6r@ zHs9+=Q`PcCf^~V1hN3owMe(Y)ohW3!F?EQFgL}ttuC{z1EJifT5&4NX`OOv z_UH>f8+^l)rR9(u_jTXu&BDL)D>Qy6=<*xGExl#bt4Bcec7-)hfTg`3BS3 zY0#=xR;9iA-@DuUYIbCJ`8qqJ<*$Kq=FyEpLgFDtvtF^Q%30lf-=rAi`_b_}xT{O5 zr;-n?%IGL9e%N-sbB!B>&`}=u)t*sh@NTf7sFqrgC_K5sApZtxm&((o1@=9)P<>bOJ*2F@vCk^kcz3C*$V2mewW%n2 zn;&Ts=<McrN~uRNO3`myy%D6Ku#n81i|$O1MeF5Aq%KnxU-ZQ+MA)LL zF2q2RTOY4B(bqVtrRrbi#p&1iYW+2}Q3OQV%!@QXwDw;AHI1>e^EyIEwx)WyIQ{Fj zj2`83)0dV0wk@DkOdE6{_}aDmd0oy|sK>S(8|{7*HCb<$^cCu|F4O7lT$iso7vwKL4s}95MqJ!g7+P6P6bZ4wa zS;q$#vHD)<`|B#Uvm8gL_*fTH#b}SIi1au3x!;cEkEc>o+=AHFry> zb}O`hyO7tF%<9vSo$J&m&cis4`&*Py&(PPE=(QN0QdZi2e>}WTU1kB zvUIC1afh)Fs#is2LL*CGFNgReU%7E?iizx8LOAslH{(hcKd$R=q|wq0s*me!-oo1S z`7S+KxSKkc4rM+Uhx;UWl~Rk2pz(KJc8QmWPGhsM`f9}7+^^LBYtpHI_$FJks|(*V_C_ z{RxLzcCbyx!MWkHj*39riVN_0O4Qc2=p)xMHrnI=_9ei7{e!4Wcl^sO+zoDc2Ulo z)a+}o-B0oL72k;tTuoq|?Wfazv)!5$!;7V~pp^VZVyZve zws{^Kp&x3(u!yh!L#;;*?;~-{iQ)9=x~gXFX}r3{S`iX$w6xi;{^iY@AIfs^VsXuI zi0brLQGLcN{GRyCaxsvOKq*&uXjvVaKE>$q&E%1k_mg&c;y%=Ly-X6dAQg_->#w#` ziF*|nqZ;_IljCP?g>#(1#No&sGI&0%KusDc;`7C@Z9m@Bt%>Or6W3pO(oi{hEafVN ztMREt_WY{huK81O%fnWHu_(2FiQgGo_r@nqHhb-MPUV~X4lOv2mj6CzRP3RA=hgq> zogVsTb*Q?`yC5pjw}fspXG2VxhS$Z&F+Elv;o5s%f8kKkS$iRtvRAG9m@?6Z*ROm{ zD5cP(whj8a1d2K^-M9Z#cR_dg?{ApO^4qP=@?A{k-euAFf6dP}$lpJLxe%x8yjF~p z-lcH*)x7i9l;lI>x?;1t_-s{)I(+JY7h2gqt5inCzu_K_Qu|ikLV7dyX?1V*4z(Q% z1ucCa8{gQ2M7%|b9d`TcS^@NG{PV3h6!I%)n*l+a8;{=Q?kwlOLDKl%@SPO`$rU z_xF!7nYFKl=EB((-z{o6fe4@WC=HVKWiiNUx$JJxj_z5c>{Kpk(NGRA|Jcuc!D^9H z-}SFkrV$6Yf;XvE*(IGB8m=WZ`e99EA3$ETXXDcUXL9M^=UobCF8lu4{H@A+O?myh z(F?(UudGLBfoln9*Vg!bxwNh3ScaAn?d+VV->!V;DC$%78+>sTJrcaao3^GuzAM`F z>R)zj^1V)F=Zmjj-LQkw4p)|+xBzF`-n@h8+*kkX~DNsJlsA`ps9D2Y-3#&3mF{5&$@Ny-sL&wKUew*x*I2ToW%kHk?B=+1+Vr z97-!hOZuy<`Q$#SWnfzj(q$1Lor`4mMSr~7VWM7a6)VVt^EH84T|qxiec54ZYW!E9 zaaZ?hCie+e`>+*rFVw7BV+x|?{iR^ z&%1r$N0MR;9X%&~igN|UL5i3*=Ntwd*zjJg{`)u5SiF1x*|;x@GZwpHs-0xI=M9I8fd-EF>g#KjBB`fL-**gnc> z?|s|h=#~5G|M+GKe*NNHHF9s?1iE5>kA@dl5v$JYZ#VN?uHmYWe_Us3yQtNb6|dt} z)U7Y8LJt^&o{qk)(_y1?_-hS>X^E|PyEmT4dLY8GAgb>1RgeXG0jBSh|42{f- zF&<+K^_rq((J0E*T;(EaMY+sH{-gXp z>${(K9roJq!IM2cq0{|68Nqx(yrxcC$-jPlH32=QGp&NJN)4*vKyvlThf3oQnDsM{j~m) zb)wlqe7|SCp)b@qggWQ?_N-)yHe)#!GAe>3XdFEEw$OJxUh(Pne_o1kTX}SdlbeMa zci#?lDlhP!3itLNM0PptnA17t{Qq8FquYk{_ItM4&BNP4%guX@07pY=GwGff@7w?R zZlRINPz&FNBFgs!_R)mqXcBrig=eTSm8?HZ7^!hmsfI)Muw47?KKivD^UJ>I@T5kK1P+ zx6L>l;st{4cRyEuF4Sqq=hp9R_C$;B>BF_G*APCGmjkxfU#(wgc*y?s>cfYp{r6r( z_QWOx66?VITtRuEpq#&~szEV*UN1DfKeKfAuU|WM9LI(e+}+8suB;{RDN*luX<*sr zcdxXpttowTKrJ(#Z%%E;QrNUQT2V)4#v1_I?Cq&mabr6r?Y}B+GuWQW9J{NaBu!)f zM=Hj5J#M~Jmv>hlN|B>Gw)cv^mo{e>xy>cYVhY2jEV$SA^5uFmcRrzy0_2<$u{rIH zAiaz}1heS~b$iB@rE%k;g2AE2{&mJ~mZ4oJlm)58v>dHsR<@aM!ZOBM;4!~{dVnc6 zqm!$8Ysl^2x2u-Cn{x;kOool(m>cWB*yMxvb)A7p)l>tN=zz(|B@T+8ZNIAjnOdUI z68@Zhs!OIGz(V!nBImJYe!7$G)0G+>*~{c!y;V$Amje}oVE+Jfd|txYK?Deb_Ja@X zPK5EJk=MIE+MM%}tEynue6nh1pYv2%8Wi0VOn&y_>J>v6_(2QiuHIMYiT(P&u5U^q zip456-TklDjZZ(WT`%xN+w7?x3~#OgYJw2n^a5H1-KD^}Ni? zX-v8kjebq4y9eFn5`(N4EIcDZj?ulqPDn6LtUrl1cjtB0TK z{xEQT>O>>{k!3GDd%fpSlzt$y{U;d)2hP=l#nEwQhFu(vr-6`Bu$@4|5CH z_Q+*5VKeQRmLrx%h?c>5STm{fraygqW3Hx;-0-hTy2gc$BaD1Xm-W@b)7- zP433wZT0|8&r9?zk5BEvs@Lb;(&yNV3w5dD9Oh{JQYh1p_(+qyi=}OCi(H>DoFsL# zXZOeIbSGHFo27*`Pw*4hS_wB{eZ|k>muQ6=+bkA(c z%T{|`myNZ&-fQm^bYh2EqOgq%tJAFDPFct|_TH-7Lh|eN^!2(tNQ-@b??<>%cIPMC zM)-l=UgpGJq1%=Eex>O6W*-B+Rq;uiqkEuzD%;$D&fNK&S-R81y0+qC)}{q{aE5zV zchEJ9zGT%ZNiAr$VtnbK@qai9g+nF#V7jNn>$8O$Uv;)*s9m?|RgkaMpKIlru9kmo zEyr!TCzhTb+_RFZg`T8(GUpz2@uTCJXD##xsJSpT1^Wc-Et|I*&~J^??W{AK*T5zcHT#7W*S^yBLP z{Cf1d`{AU52Csi{7@@a8m9kgF1iJckJfB`KDmlU2J-Ka;6bQgyz3RGJ(Q`|-n|;U| z*kjpVEy=#sW;wIe{%Ebw6*g}bMWp|ev7gyK_D0($mfE(F*H(LRylI=g$aCNE*7kni z@zQ2*yvzH+C*n=qjjqm^d(Ca2-W%bSr4d58L-oJ7U;k~hcTX?%n$j$gcKc#@{ySoL zsQ#DsgLN*uMqFnZ`%vbny&7ev@;RF8!V-*2@;~bH@=~8R(-^||l!n)t-ukUxTI#*2 zp^JSNWzH3hhwOg<pGZqV&b` zAcy4JqAnk4ghN4b01plU#Q`H60*V9ac_0)Aj&Q7%thMB9Er zU@88&&^=plyts~jDnoi?o>8^YyOSdN)Cj#s@9VyfCwr)DtIrMApX+*i@kw{AS-I8y zYdd%1Odq+*q;~7io89WlR1>m%aj*u6e-As#cKJK}DErCJY?R|WMVl|y72L`~etx5J zK{;sZxY;hNf|8w^GF-p3{AgHjAC@zQDyk*7Vf3mbUz_H|-(jRj{=Aoh^Cg$F+~W6V z-YaljpO6xobbYskbf<*4AvdfAS_4$J%5HXr>u>r}xgvyTHibi8VbwcuTj5#(EAJ?` z{$U$)JIc^nj8Si8S>^i_qEou@>Z4N?Oe@-?Y(DKZ6wE<3%$aQq<5`tW^0o=ZE}!GZ z^|J1Q)IY3QepC!JXWV1mPJC^rLhs#r;##y6e;aeh%Lwdbo^5fz?aDcO9jq%BERhYSyN;5WKECt6Cr-!Z6kXUsHDK-_p)`bD6nmo_?HT7 zOA^!7J^ABe<9glm-0p&G4H~(rZ{4x>t3r^nmon+MWgVh7%F<`*TB&Edzb?6mmb_Of zl>3^yr>%yc>(l08P27`b>u(ZviF!%eGly+?__og(_r%=sc8|=T>_PkR{FgPa7M^oD z-Ny4ZCm%3QiUZx==aT42DPwQe2i_=Ju4n2$uSYr7N)+931tH5RSL**N-|dAM-msn! zqeeeLe*bBo#^b`9z1Ci?|91--65bta0R?@wKoKWT(tC zZdKvVLdTW9lt>?1AiG-pZ7uPSE%n3q*pFKUr?QceE4(;`Y zC)+3KIZUebeC*H50{758U{U63eg1KALn*0+Y{IYSdO2G?w)qSOc01IYDeJ1aH>;Q6 z46V8ot##`^1dO9GA8D#LGowm!$KUAZv?SEq+R1k|cl>*WkdL`8$ zn=QYwf!&GLFSe{^KG~j(sP|BNmR7NL-DA_IQ@h=5^y%&P);|5Ovp%ty^N})7cdX6c zm0o0txRxRJKG)TPkH)H9EgNJvs3qtu_*Y<7m)+HI%hO85&F5`e)AE~7WDJ3pJ(-JR z?a@#~^jd}Yt352wlkb&NEVg=xLgrhjrWzozW89(z4fo{dI&Y_sj? z*IF1b552!x8g!}uyB=}fvlT+8Z5mXWuZL;^!3f$H#}H^a9r041@;zU6?YXi!<0Ag* zm2uBu#6$OgXWV}ZKWlTfEKo*0^oZ9F9`Vp))e+?})dSImu6u0x`I;+N_WSkFbJwL< zOLHH(f5nnhkF|#G(fRX{teu|!mOi5v$D7Yxk9M+sAGLX;J=^Hr`{na%j`GKrBu71K zFPmJ|l*YY%vwkS`bCGnm(?|j*nuHKqAUgoe^!V>U@Ae=@^drxa0oddUJ z-)m8CbI;uJ^`Kcex43U(mt1bQ;tz3XaxZ>E?rKrq){1VlSPde}r;0a)QT_5+&Hr`z zfUoO+o3ixGFIj%P*kjT9RGhe_PyI40?I#jQc_eziS7KSWZ24_kX2aET%ce==F(ZG6 z8FRVic+87MMN3A@vyb7tSkzS(S#G&B=JM=IW6oNxm%>`hNU0og5rQYD5;(LTW42mc zUKz+k~po&(`voAvkfx6vk7Xk_u{ft zTM|3m%-g7VK<_o@5AMCsGV(rD<8`wTyomP!RMY!Tsdl)Tx8Z$2?*phd^gfts+azYL zFUDLiE-%u1km|YKjC!t@v$xGT)t}9N+o(0wqfx&nw(C=iI@|V;Z7{WVd)O~-k%*3N zw4KExu`p>ntI(_$?6*NNZM_G}q6J$Tf3L^ssRetZqAl^?VEb0<7LC@^2o;xCGpbHo ztScRBPu%dC&$G_TXa0IR(q4`Dfcg45$bs|q+5Um^^{r-HYfw$=5^{tVZ_cs&aaBI7 zIEWRa4Xx#zs?#z1`qC^iZIqjiIc~Y%nCsf-A;w&{+`|2#!qRP#pj+!|`&V`PWh!H+ z&|=oHRhdUbdA-hGmMo5!IvZ`Lqil~S4nN9%5yfnj%B@4e6OhR_|X3A%A&fB z4alL$aOj|I;a!d;h?QaV9nJUziM<^-cYITi^UT>suCyEuTJRr#zjG)XwGl<#I)uX|t*dpzrzC zJ=N$pr+G5fcB*qVYB!xbkK)9p>+aO%hh-CfB58NRJGtd3X=&t|&+SQ}?5+3TK9F8?|kV*}##dHTKQ4a4?4 z|F;?291W9otC5AD_FvVpPZVkWn}%8!&*!t{b$Xhucd(qR^^EnClSAwFY{{3T^{UqS zHfLJrUR(Ukx@WBdZuV>ztnD4jNDYo*@6h!5HlMXWjBG(Sg3>0v1`SUKNu54lJvOvy^9=en;5Nhp zL;I$MP4pI>aAW9r`cCt6eE}1&k&}X9; z_jF*NmKQf^*yy!SuLsX|*{*&;_3BvbVc%lz^2tR6-HCQgbZk?Xr~!_M4~%U`G$e9(0-rlOFe;3_a@>TkQ4 z!cO&eNyGF?mebv;cB6u#Rd$SH7eeiAyD%QpZ0;%gqQ+|bbS86B4Vz1511zR?=NgtOMB2>v+IKtC-Z;`KV|X&ZBWiJsAE?=N&&(xjld5Wl zJuNQH+iqewNa2VNKL;O~$?J~E2i$*BPwfBBYpB9)mj?~Fkm7d#debU3&G8i^-PuTC zt9cDDk!ld5e$Eb{O!pZ%9H1kY!_8~+`>8f*ulDHF$aEA>?b~TssJ+(C&6k%XaFfEV z*MNIZ@9TE5k1xY$?V3C-)ipOE?#FsMr&Ch-wI2u_;V`xqeaj1TF01TLFR&TYKckN= z!IT5zwsi^B**Q*g7-rmke_3`uEts5$aYn=lcKSzJe!D*Sg!^P7SG9*b!~L}%l(keB z?autO`j>v^qz%i%dU;g>iMv+)Nv`>N5Y+?6mn3uCu! zwA$IC-_|Ilb35%+O^&j$^?CWsP&4<;?P6ZVaK8Sg1|Gim6hGn^FD#AmB<#jD_auFf9b7i`Rn4fQS@k5g3RO&z0}gf(^w1IQMy}i z_fm;!JyL^@btO5mL+n#1h*qaMc-4;fC*G=W<63>Y^egg6rqqvUA8bf+JJ$lL+{fKr zJ-oCvIfK`Ryd7&-pLh2aY$Z7;#5NAp3hf7;PO+Zzw7b~G$RR?rW`$vCt%2;|Wp~W# zgZE^0j|?+~u7B3OToBdj+Ji=Da?+h7@wq{7x1RUf^Z3->r+@P;b$MM~XqO5i|HgWh zmOs2XU(ct9Py%$?MFPuIRQ+dRY2OZJLI_mUgFXA_IIMz-6p`LH~8^?y+9St6F^$Lq13lzhJ` z^gJcm_lr|hD1!5={+`ykCX^)I_q%$z(zWV`|G%gnylm`hq>EO;$Z8W`MFWj_s`iz? zUi3L%G#G0!`N&mI{7qg@1IOqGKGns2C;8MwxFm%&>VEllwV%(nsdGy4V__w_d zGS&d3%~!K3q_TVDM&ZdCJB5i>jW47I{9|j*uA$;bb^qhv0ofqBHm2I3i!i!*ij-Ic zP>Ry-aB7py#e<`1W91IIgf_IWoX7wFc{#_SBTMz_3`0JZ)D#&{OHCJ*f%E-*Eo!~p5fiY zk0?Yudi(;fIjO3)0cb4UF{#w z_qoOy%{+cz8ZW<>rM*R7hG&Qi^3+L!iBnRcDdIO^iBH|UGIOr=v;2^%h$K! z&64mPtWL9?AC^`okwH6d2ox!?NKT}%8F?7@N)PoOHGgxndKk0aZkqdj(`!H4fG43| zG=%((trSR`y$I)q@XISrxAAugPm(Z5fEH6|2d_1jn>9@@%#%@&&OH)K&La!4iVx?; zn$@Ts`SeYQg8$9>R*x&Km1Gs(pLhSf#$vIPd~CBWlX>rVQ()b`cwdFHFM)gWsOX`_ z*}YQXQxeXEIeg3}m&erFq;b4a^H!UFa7ji6t?M3?61L>JyZt|!>~{skFDgbIlQ)Lz z!y;RI*Gjw0a*8|_4S^IP*rre|m>JxAGIceMuj(w>hc(Xoy@?4t?~mZ=cHXL1ac|@P ztx`|LvHG|5@2Nr$qf-x!NSUE~VCd<5Wkxq}x6rJiCPNRlrv1uo`l<98Pa!#qUU z$;`(AVKUhB-G5sqyVjiU`>f_4dL~GTus2GML!O_NsS;x9`}4vTWq#3{p>88XI(U>9 zjBz|1K~te$_iIKef_u5#IkjvNcZBZk!r9oup=4hzcow&ZW|{lFJ|Fr`U;X=}b`~cS zx6jx$={>hjwAsID^Ivvh>F~#es7Luzrv@)ysl6nZYX7d2#O_s4G4lEK+C6unYOSx; z@9rRYvHo1B7U%1)6@rWP_ccyr2E&!=KmB8L_Ygc=?ax)s=EeGC#pQB8Tb^M$`p zDB#3qp1oSnUq#1vj>5U6wwG%3;ZO1QopUvdGvam#zh0lcS>x4$;!@51LVbF^=ZrJ# zFH}4Ko~vJ<>;F2}t%o+Cey;vM8s;Qur^nuIZgWOrU`{5i*pa)tjrq~#!3yYMsGa+my$sorU>a%lWq`9u8{f;s_$Go)Qh?*R3oG-{)n6_P$H`{g}G|C_D ze|HZ(Uvrs{t;DO>>xr98P@i1m0KC}E*Se$5a1a~=#c=0B&39Ca(Z%Zp`(Y@y+4j5Q zGr+%$X<4lgNb&iC@Y!Ap$vnwtNuKQ`63tQiNioRaoB$?mmpMlCGjCVeoE=B4Nr%Ow1 zzbk$N{D-5`m7*v~rB|r_LjV6xuQehNy2Nj|2g-eJ@%?m4)bMQmy;L+3O~ktKLi~?k zE)?fzpz9JZ)*ld=>&|iHVT>=HObo>@#V3kNUD7Egxma@K@A+yiUcK`f8x`jgy#M#I zCr9#Gk%YtP;!@kA&W4MJmC?<%^`@vsmiGUY9ES~rhhA-*!~I_l;r8!EG&_X{+2U6( z_q=8|NCb)W|Eu*!^dl}}NnB*l>gy??UI!Uo{xpS%VN|!PcIjWuN8p=dQut=>{9&!Ce;<>y;$QwIqJr_g@>j`NZ2Q#>P!?vgL1hM<4dB>qd0ipxEaTstEN5hyaS z7{iDvgs}mn7(pcy$f&0vAfypAVgX_xxhsQWPY{l$HWI>M2St&X8t1$p7LoIObXT7IIR zn_@H@!ew%fEQKhV6Me1VUY<=cI4)+Ln{<3>f|N?8@rFl&Vt>|!hx3vv+T zu!_P`x~wR0*VMM~J|bt?&BJhZ+OE5T{_Hio7?U9QP)mKjU}7#Bcjy-BVJ*c&tYw8VqN(YQlP;12u9l{zOYAn+AW&h6F#sU!X4TzWD?QJ4^wAheFR0M(`N}k*Wr2l1%ze3&;k$SpMK!GvYCh z;01l)o#-%mAYJSW9RagB5|N=-Dlq$vX^w({|nMe~*EOac>8;NkGgD5I-(WP=u+%BVx)F6CH*v z={ccgV3`8!^{oeqjY*6^&RBH*Q7p~(qYpdCPooyQCT!`_4|K zV8+85Nqrlbq>;qY1bow0ajggG@PWX7lwt@e4>3zFE+t}O1&rJlexMkWMg@rwbp*Op z1tLcke{OOt*0Y3iPyFZYy4(K`Dt`ZecvHNL4T|kX{T9>EpR8oDKy6=DJPY!~+a%^E zEyfWoB4);BJG$HdFEta4>kwC|8QD$H;i+LTp9Dt~1R6<#B2+|*fx;EqlTBb0JncNg zO9q{jGZQew;Rq}N_mq(}79nKrlS&AIIXGc(mLemXdJ#~r4#|3y?%V<&&9b2-fh35~ zN~{h2WGR3PwE+%cN-b{Sn`7OHIRO_r$n)?sn#RZQYDcqt$c5YoS@wCm?)Rq?h98Xt z-)C!ll`i5pn@F~hCWeVrvKnO9GDU&}@|d89iPVyNOq!h#)w5U^?9*RxK%&Vysb{4* zbuBS1;#8IxiSCZsyIU4SR72_*#AMdggI|yZK%OV{otmTo%BLeL^hHAQ!sKNn&S(gN zM3j#VCbs3LSrY2$cQF$g_Efw=!q-xS2Y8k+m^R~{^pEGGG=iK6c*0Okvru%>RT+vT!Qv*qzL{VozQSHk_r>X*k^*;skh^NA3k zKD#O+!TkJ2(`W`S%y04pj2sRnNhBs(;}n0MbvV6J0F($CKT?4YcYz8BN*{$%1cHze zo!D0KJZF_!7O(*fDdvF=+yxNkggzQ0%3B?B8_10U`0e^jR)139Z#D0=33+?lLO3GK zV}1XB*dVz%=2K5XRUmMRqJ;!47<0Fu5CQBb)%202p_y5YDGWihgp-@sr~$4^#{Qai;C?NvOd0l>+V83U*e#Q13nH>wqrf* z=;rjqe;sQXjwq_XIIT3EFz3nI^%3pVp%Y)ubN)q* z;W7-zj2&iiS&SnQo;cg{bzLXy2*>7GKBxa2O>rQ-E>wKip&6GYI5zK`UprYmey)$h zI0O2_agrtIyD#7BTVJn#9SsNZzo_2BF&GEs*}k1R4DRrV7cWYp0ldN)7@!*z-w!cE-tx!FDuZJ3Ki9O?) z!1-z!YL=ot;iPuX-33$KrCiv6QiF1}mojVFUdv1)h6{nZ>qnbsfcCY5fH!cs z=vT$(r|SX=ClWvHpVdjbGh=)PsPrJoxz>QB;c@qX=Qn#CyZ3z_ABrJCpY$!ismrsb zhpslyiVrXvr%`aYA)wpI(WgMm3T*0kByPCmBUdX7#M)*TX|AvMrVbg7 z_;8a(fQnwAVveqjukmWv<1|0f4k9*tW>l82*P|=j&WFZEoa$l7brpEcdf>;WegEcD zy7xDa8@^wdNAFmTTsijsLSHtt$%m1L%Z~=Ru1Mlm{qS|&o!eCTt1`3%kXRzs_|}l- zKHKr+u`6h&Lx)MHpkvExrQEmrcMUtA=na3*)NLLg^`KGT_tyaDKCIqI-hKx-G`lAs_S(VWZ7s*z$hONaVo8ImWS;xqH0fv*q{x_O2;y zLzgY>pIUw%di_;FLLiF@Tib;L-g>)#yXish?g{ioVRtb7s_^yx`k7mOXxax&J}5QC zIZ#va_X{?Xs2WsIKGJyM|M%-}Q`+v){L(l*`R&QEY6kNdM09Ub5x4EgKGWnb8wSD* z6prEOo?#f!J{O=cmeCSQNrp%P<*gv#F>T50SM`4=ForfKVZW+5azYlqYk52!`G^}p zKQPh5JxHHfHZE{x*ub<0^SN#OH->=FwFF?@yN~S&zciirv_8k>(<-g#U-!!XQi>kN zWuWlTXyaS%x{C+(kBj?@o(HJc--Gt_TwcDYQ9r9T&Nw%F)l>gWF#4jTj!{oQ1|CvF z`^hF4KC1rR@pmiWygJ&b^n_R4VR&_?{vU2+ z$}L=i-Lz;y9L)W8rk9|cnjQyX?)DsyL-M{T`KeRqPYBnVYZR7~!Hf`@s5Xzkx|T+= zH4e|>q`Eq}o*hiWFq3#|Z2%A_nW~$|r-P286w*^&b z*k46?>8Z7eYkjZRjNjJfckKd(CIZu#c=d$ft2wbI4zqydW%M5m-E@S3&RfE}D%;GX z)v0(~E(m5(?~Pj}CybS<2b0~5X}f6RvwFg4P?~}6OA&NcULI>wwmDN}Fwe|Y9DXtP zX3fPG>k#SMyTw^EzTVIMS)Z>o*u?NLOyi1&U_cKS_@V>ZC^L3)lPX=+1O{GoCo?xk zzL!%xZuS(^82i*z7$~;_31r73Ed0LZ%E#K~{(#$nggq{X9736oOP8WO^tL-2{LLMi zAlC_6!iA}xb&n)FY(^O^lk0T%o8!xJGGmOoy6CxuFWk9`4QGX7@aEnU%%gNyS88&I zWz6sYb+xTU{mN&skix}Odkw}GnoO~>r;Io6JfLEL)%A;p054p~DeQC^b!FH~h z6nu0~4gI6PFo@+0eRE+<_o#lqs6WwwH%Bvc_a}Ahj=i={;=23YQdSpG)`ja{Zg{Ge zBz{y+y5r*{Z~ncwGx@!!exi+-w6J>2o>ZISb_+e9Dy;K)$tj*HucF@aO$BmkMQ&(Q za9TY!mbunu&q+N&a>#9NH*3^#1-Aa*l+<)*Z*=b##fs zNnvxgTBFc~k{au5v|HM}GuHSDKzJjTHsQ)(y~qABGsP!1-P4OMuKxD#=L$dfPFeD^LY2K*R#q)bTPLta;HgDNzuV*07Thd++Yw-a z)DB&{1FbtNF=uOxb%*q|!eSvjs}WXnvnFeV{LP|dc4t~Cv)>>)+pGp;H-~WOhp;%ah_U`v1P;ZsWB|F zTc69iwJjcj*)prYV75%$c2#CSv3*a*gt;|n>wze2sTOsuIiUcaWuZ2^o`{egGUl=4 z$-Y5rH}FScJFK!=j<@y;YH2fp(XAb2+lpmTbhNN!(Nr6}&5XvdMJBuR%oNJo%i|l` zhdS0JEsuJNA1H`sV9pkV$k?!36{OidW2;VfPTSdKG0k@pKsvHmZe@y;;WX?l@7hOX zt;#a6?|Q(`Y8^VFC@J+Xo@zxGU<&@Mpc)hPvoA98tQ~5gAic06o2^Ld1#MnWDLY}do=&v{p;2I(fs>86L!yp-7{hLOxPdNgfVA1C}C$t_UCc& zoIW=|Be`H(M7Tl5I=iBob^%g0p(RlAd!7qZvfWWYW~+~IB4#v)p%QE{)Epf5C{)OS zDKp#6#k6y@IqH}oAV*0B1;Q&%+%^v(hakXA_CawoLL?XnC2WIB_`td5>JV-zflwR@ zW8MNV&@k%803)ZKoiS*{J#$gqoV{_{W_Q`#rjNgO|K^?xC_*I;ycfk%gL_fzy(sn{ zI*PsL0@$QGcL7`%cPDU3&cW5mK67%gWso^n$g#?t_2QIdaB>M-E#;@#_bm^L3*#C& z$ZUI-$8dW+)bd7|qg>nUGA7PVZUYMWWpY#8<`$EWftuUTc78dIyooF2F6EN) zpXB-SZM78HlcmVZXBJs zU3Hdh-i0*?P)+`8cFx`r1F$5AmT8(H8MbzU8PyjwlO_9}YDcz9ql8hDoeCjTd+9#Bg2@+FE&a#7LE0q`R{1HY9E7U23 zJc7S0YpJUU$pkY3GK(R?I-!qX5=3TK?pG#HpPn0CNa)aEg3FZng_$YC3yytG0Y1xf7H2??dguXP^&c?; zDuOfTMH74pToX(RXDv`zP7v&-$^%;C`y+sbnX-Qtwk%8t9?>An8Cgbvk$^m5v%s>2 zdbkC1aD%4dt%`-lSqL(k@2Wysz%ZZM5grP9VT6z9oH_A5%QWOh5SnE#bvfgqLKaIb zwvaDjdd}5?6-4C1EY44wM~I6$S?D1fQU#pBUCT%+XKGeBXFO1nGO}q#kfH{vTJ{2^ zxnPCb!fDXp4t}L_FEmCOw8iD58kSGd$ym-MMxOLdg$^yijl(Dl`lLHK9cK0hGi^d4 zGLOGnqBbbV2i}l$RZ0*`v`90Vg&R48i%%ewuq6FKWAvtZNv&uFYDq;R3mFxhBnp*M zO@wonLnQ+H|LOkSy%eB`cdrU~Z!P=YTDICyO!mDh;QzlDg6>rT|G2Aw_fmj+DS*W6 zUJCHXmjXy|r7uz`f7;$gs|1okX`RnfCaHu}L~3uHL5d}{l)$2#lwATNrIgCF6%1*Y zWJj_h5tOdE97!T0NtQ54tfX*BqJ5Jn#jmCiAW4z-N|>Zd()3n%kU~l6z>*atyA5+u zn3PPyleAW%DLqtF$gIi-X3DLc#z+|ezMwXTgdKEJxD-XCXo?D1{gKQ{gr%QJHO-(D zk~Gr4(n>f=Ceaj*Xl%=j9lU5NVNEGQVkq4dTLot+cT)B2$+UVTq0jmc>cBU=$X-%3 zLV4}+L;4P9J6e?qly%^m;zHK_(mzQiUKBQdR;%3x*UtNCC;i19;&zDk%AYndG5eq)966 zSEJ$EsbMVvjob>UElyk@WDg#nTM^# zb8B$MOi7K5p@edcas&JnBa}$U6zx&kij?WAXI2tP5q-$Yr@2Y3a!$0Cj-xb=M6OUm zAp!a-3* z%$|L<_^b{;jM}jn^LBYQZbyFSbL82yuV*jLU}04@`+7F*tCTbEn`hH@(Ud8^c{XnM zMd8j;joYQ_Pz_W4)f6J!8ktcGrcYXTNaO$uqA{U}aIpr>5bK zs&1d?&MdY4ZT;4c15R51cT>#9?G8)FG3U-6g{rSyE2=m~lv^4a=bDw>U2}1K+^rpP z>kpou4usp=cenqSDSFOC5y9PJNd)HCYqsQ+>tEJU`QhG~oY~50Pv`1RSKD?9^JXEM zn~bg%Q*%F$`-9G|@Bg6;H|yNiH>2N%BjXX(A9btUW%!)UilR+N&j=LC@2(Hngt42k zwBfuB;=_zN;JryX=i3@S-N(y{n}h6QL2;$PMiSi7V7_IQoqljtaMn2XceSU-i%8yO~YK zFsyJnLR~m;39OEeZr&HO-}M3QDC%zYY)8wx%TJXC=MEmG;0_L=_7Q8Y1mx)*fA2mX z4k2$l#7x}2>3&=P!o_i59*J-{TztO%o!*GTAfX)tn^>oNIL3CjuwnR{ZRqaLtt;J& zn{obb^>xpUNG10;ZC({n7YSTH82(RcRw5tB6C?bv;C3wgVm&?6|MGOVy8RyyGwF|d z1&H8ZvLrysV zRk6vOInlnpHtEsvoo7y%kFFwNYmd%8!7)Rx~aw*Y5)L&!LN z8=ugpP_r8;9-)MvEX_N+lIT}1ca3vR7eqR0IuXp##l6Mk^SrBZ^OpVTM64HvkzG-+v+@x7yaV|@KuMZ$Jo47YSg$Ztx9>3;&uMGTJ>iO?n0+cB-T(E#LQ=x^KkpK4tblsI_ERdwc_N>Dp%Ss_k8)+^Y#6Fx7uAQGQU?N@MpU;l7={{=D;={Jtu||_A z9Aml-Hfu`Vx}fmOcZ*}c==t?=UE3H+@w?%qd=XA2lD_ zJjvIU*nnFZb&$B+u$~wo7!UH%Qnx|&#xhp%TwSo)_$CVKzW#A9r+-lU_QBnnbF2Nn z-xZ?eCtp#7$SqOOpQGFIzE0g3LbWg$Vocs(H^?r0{AA zMdR0)OWjE}EZ!X~O5EMc^i5jsjR?_|e^IT}3Z>sLO65q8={;k$Z1WJVx88iSzTJ(t zs;}E2V>4o(obC;%LshwmT1Vp()$a zu3a^L$^dY#V*c&_iBTEu)66s&H@@!|5mL}@CbSva7FcaMk)$R=s?NC%K~YO3J}IzO zIa&bU-Tn{XH$a0eBAMR(pq3yTX%f>qGA zz+M6?cj?t4F>uE!IG9`O z_`3xvNom1*zYgvs2VIfKFI=wAuF_l@wR`za#%M5gXPba< z8RjF`oJU}xqPb{Km9B!s`^r3Cq?#_2g#V@?;iv_keogYw-$Z?5(>#rPGc<#SF_ZKY z{y!@oDNuY-f0a4TcR%k|J73nPW<(hug_uyU88qCmP~s_-h@tvnjpG$ARolC-F1Ea^ z2AB}d9lB$PGLGvSW89{k&S+m0Me4%MuYcPs9t==!Jf3SosnFnf;ld1V&Si%A>k>BS zhC$tVeP7*e{rR2FyYyC`rP-&{Nlo^{qBTPy_?gpqE)9RSE-`iY{qurYSqz`YA@OTf zTEg4Sq@epbLolXgyXtoc_@@QcG5;e^S?Q%sxmS9C+$E%WF+_J?h0#xpA-G<@d^_4r zLX#^sIJZ62rZLk}WUuY--Rvvsa}P7WYIHnz(@ZoGFyv~?XeM3kA-S*IT|xYL$x(t} zx|=YcZl(ZL)UIOP(5Csfgwn&_m+rH}LFs)Hc{{`BeW{IYI6CAX)T>gi&1B$rHBxgp zO9|uPYX@uE?aW6ZE&GkKAYu3avg~T<@7gNgtp1vLg?6|9)ow8ca||_j<<0I$IUb;ifrv_+F0Ne8e<%gxjqOW9Q_=e`uWW$3jdjTh z?s%rU`FOzh?U7Qi30E(8*d*M*n02e$|MDng8@k_BqP@d*WEpk0C$NMnT*h^bnOi%0 z?b-CY@py^~r$0UVh_RpIn?bhOfN4aVXhDc1c}TX^*qs_UmhXS*<*Z9&edW2cDG#nxjK$kuZwlXJ#Z zkZ&Wc6VTw74%h|`?;PfoGGqfS>e;B9ZP$L!32;=i5!x1O{cIz4V8Rx5&(JF8n$gqP zIlpV0uKBaw*XCPW#e=POwm3^{+8a%A)wW%@RO<2Aej?Kye|t}4`ScSmn(FE)VNUYCwogkg zD`fww41u($&+bpAH;Ur?nWD$)s%=X=4l_3N<_V23-qDiah+ktoTOhMu_pTe$@vVE{ z&x_7pcXgra!2hgT3UgciM%{O~alQMkS%mRPm#p)}&nLX%uZPrQ?kH4lnIU~*kfz2N zR#Tkz^7qfC6{zW($(XM(c2X#_#3!4v)$vkwVUppP{2NBv$6-{mckFCYrKe2)njUf& zS|9Lk!t2vo1gA1xEoe}Ph?ene=~{OgRAUpo85X0Jr&6aBeUb<`OmU;@-sRlT1^xpk zhNx;v`(bOyrD~s%*jy0dr~tg2Y)_kh{4>{T^h49;u~fq0ZR}}+-JK20^J#aTf?QsO%Ff#p^uPKrkNkQn5;N(lG{kfYxe-DdE^{BTUm=(0-+5An<8eHRz z!=V{FY40N{zPhKiI|b2Dy=uV;zUAnEc|e>piFMIe`=UTn`$*}OYQ>`)I|X0co;C0r z?dLVyz};|^ap$_S9^v-i2@hWD!3G{uO$|<~t}ulSjZdm2W0|tu z*Z@K3Y~OPJw3!}E&Hl3(pBBBD=hG6%za*Nq=r>ydw2xp0(L{jRu2Q-5#r?+5 z7Rd!=Efa7xCgw#ZU~HtuRg1>1yi$TWPARsp5PS!gt>?aYtzOhUHf)VU48d5q&eiv} z;MZ;b1n0?yPmXd6Nb&&S2GU;buego>id2srNJ;UDOWC6 zFVZ)ypvJ8=*&5W7!OCXoAz&y&@opP?>bRyf3S9?E30fL`=8l)#dnGIfF*QpuJv4{g zihIe(Q<}7mLmA~(Z8zb7nmKIqI-`ZFXg4(*V@wLe2O_J+>2Ck$x2nsjzBH$M1RP?C znnWa4eWKo}$J^a=tM)Uto0+17CJm8%=U>P12m%Gc0dRZOVzXbUPf*sznkI4#Z~hJp zt(MS}vjlyrWX=0Dg`!&XVr#ddn#=LSLeC=E^L&P`~EjJgKx)%dgizdgcM3<(f3q4OaDvW*bL`CkG+tj;y`v2=N+x@=zo=DvP z{qN`I^xdS?G|nPaDAWtpp`swLDx-7{#mxUj^&b3wcX25?J1|0g$fzV~GS-(*6}R}+ z=^RfLHJJdi`BWK=&7N8ea73y%og9FU2GKTf!NxY` z*$&EmTwvyyxxgO!J~n$89`xuhD@VLqe`ULcRYg-c?Hx(i>RI5(0vBk82%p5hU2si{ z*I)1L{eWBd?ombyHG=)NB318BkJFs?D$WWVjs$aNNxU_W&HB-cM!~&%dG5?NWrhqb z6$0zMR96n}&2eWbDAqFcC3VfFcJB<)^AJ>Q!r^dX39!*ha<%+ntsDtl{HvD=dzkSQaRX@(&LlL-pjj^~l}RZQ=Al>vDRqd$fB97xrA^ z#(U!r8ne;vwW6)P1I?Q?tlK>!%*0&2zP+3T4S(ZdMGO31ckst{&NJ6E5*OZ>(|du8qT-P1y%usvj+&jds7* zYuA;YO4`((f``ZZ{T#2ipm(8yrGK?4R0y`oc4m0ngdzE+QEb7`<}WjId809HKJQe$ zv!kJns!%p4xNLwj*9v}ZVs!5L+ai97!%M{@-l6GJhKc4|G^hM~B+)MlACjo+IZT{L{}CpCj$r@>85<93z|+tdcYH|N_D z5QWlszq-rgHi=%{*o1czYdL>RJ69K5(842D!q(y*%H8W#_3=99P1?Y8I`TO4ZT+tH zPA9A3W~|MJXOC7en^$?JZp@g1-=U-#H$0ZAVf$)J359K}AYC5t&T3o=^pf1-e!28) zHg4zZrNUgtbgj^MQf4m7t}zu6Ylq{pR>xZ3?yBN>TWlCy;ct8TpyFJ!{z;#dTW%Xe z+`Tv*XTWpbe`>EQqmI zsY&m`82wgsh3(DX2G}f|p$+;=S}olT2_5^3B1>Vn5Onq1pHz5jeR+BPUa~hm)jFSn zw+we$61m@;4Z`leH><|@)*8A zcl|8SyscNmuzPR3x!YXh3T)G_SeGnfNT#Qo&ZC>zR~K9JR@Z&r3PwX>(JGI-<-sl& zZ|POTX1Z&TowY>udReWvD;Yy6i@}x>mu=VTgqxJ|R|tEhc221(kB_T1ztFHMc|GPf zDmzQN6Zw=Kr}mO|mv0s|Y(xIKJ6*HRd!MRQJW|@ytR_YAl{NbNZ&VO|XZH4un(r4y zomcnl*@ET$dKiCN!<GnoY%P9X8NzI^?c;9#m?Mg8SHj%RO)jl9xMIMRc{zfJk}4+7v$a9smFjL$>s~@ zey}eKJUx$Y1}i(>fm(b&^J+y2gFo1U&aOppCtKkj38ipD<7=dH2&t@2~zYS6__xYPe<_~*#J}&MV zedxIX!{evclw`jaxcts;jTG7AHwI}zDSMStz@(q#Xe^ff48HZt-s>}OrMiJvs-o;EwdA!EsKuY$(M})ISx|gjhl1n*o^as_%!@Y z-e6-EKijZK?6tbso~P90S8~#zZ>@*TF~;nEdZ$pN)cM=eMSAZNhBm_*o)hyH-MRUb z1EIUpB)a)Dd{@SX+2G4~2mE-h{+*V}dal$qfwoF#oVE$6mEGR%N1X2Jp4*d>$`ka_ zBAAE@6}wmFPqG^OX-|nm(Ebn$VapQGo!FrELp%M#L;kg0&FzHU4cfc87K>B-NVYkE zbg%$yLz|UX|6Ss@5^)9+=L)eOT&xb86v2n=S$P^kEFNn{b)F>t!tzLYqzLSkck!Dk}32LzZ8{_Zw+?Ep# z<#=8z6tPs&ooRDsIb)b(5s%93*x+9kjJyvx7BRaIMv0 zz4fr@mOGcP)Odr3Xq>upKRjO$8?neLnsE zc2ScS+46b4Lcb`-RgedF0cQ8b^ZU& z`v2Fu)q}51TKiV5Z-8!W19t2Ahh^)2w?&TIiMgf4)YZw&Wz_ES=CdPG@b>@3tc^=( zfP8fgq~a_`m;{~Z3HsViYG3zh=$};iYfQR7>C@mpDbgXJ^6WR=_}S&jw^t|Mb|&9m z+xr&sPR9z7|D*!U)l0W}wQ51+Qb0A`A2Fo1-GguR3q^4|tKGTTKCHPmN()Szab6qJ zox?%5nHY|syxzu0pfwL!my+#+Fph)$ZWy6 zn@7S^_9M=I@k-H2`X^CvVb`Rf4ToXMemmKbRP&DcdLC{ z)DnUZ(EX@>y)s)oJXPFkcf`C|Jz2r=rigJ^T6d?sB0SES9J2~)x$C7dBEz%(kG@&G z1}r8)MFmvL6yJ}l(}G6}hgvbNcbQL*ooEvE@hvVApd?e>aiQ18MdOd_|B}+5lJ2o% z+_VqdLcQro8+PJYOW?Xo?b8wE{*IFJ>7Ui%CgNJjgm$U z%illz4&^{_DJ{(4y<_WTyu2ItZjYJL`wY(S#3zdZv+;U9d4425J#x0n$xiMnb=k7j zQkw4RZHd7~y74$jnm=lMPkBc2+&we&NYc|%NyWEW3E<+kw#_2Yt9cUA)qe4x)bpuL zY4C6ESFMHUn{6J838D|n3UgoDo-HlnPdBi1yDZ*a9`l_fEZgvEg@!ELkIVBZ2)Ed# z?Wrx#{t_t1v9gFbzKp$$cfdi548QFDd9_BJkE_+4C+hQ&HYE4NyhZoQ{K*ledhba4 zk#yl_ZDD2FYe=drku0TwXUjY0#y*;0Q-D@tnk;wKa>HZnJ`bAhSZ$_gLifs&1`XSb zhG?Pn8+)$e>pM@C9yPC<7Y!}Rax$ST09l@~=-7(I@pkPlwbj$(Eoaj-JPCR$taeW> zmADlav)GqHY&Tn&OAJ73yI=3O93e(DQ`6-v-Z#HI(8Xem(!o-3)*@r``?ZI5jM%c< z9!NJ`*~Gm4fc;^yKv=d39s-^z5aU?uzNh0^O9h&}G2M>U26u%Gm2zs|uBns6W_<$5 zUaD3*6;vXP)wNW(yHAfYhEQ%;uM1f*%{etj+TShnT-FZd65=sGsseH9Nnyvob1c)} zSEr{V9Nc1aj@6~z3Rzvwa75Fv)11%1x%FAm?JIa z8t-@&a<}Sd_8tAxKHa)r@HOdb)z8fqQ?u4os`YDY8R~##uODW!`C~DiPaO1?oyj=;>a}QK8C?FX9;JFYsJsU$D&!6v7K9*C0hw|b>Cd@jnFo$ zeC;~7$8PnD6NhPCzUQIM`D&Z><;|x@RMg|QN?x3@Ckv%?eLjCDN(USMW{{-`S8AT| z@7>wy_rdpUQIv}EfXuB&>8Yh)UULGPu)wxX<-x3x|c4)x*hgUtL?1Q{A7{c$ezr&i@c0 zPHi451d09^BsP}+vW9P_>4zHyBc@S{yq$_UY!*CGio&1$t;Wn=SVGqdPj)XoUxj9K zj+H1SBH?6UYF;kTF)b}Y==zIS#(fz~tG-~-f6}@V%bVo~t`v#hE;bHC>YmcJrHe!I z)e=YZfu(zB_)TK9e)`hQ`uu4X&6W72GhWbQKZ@Xw;{B-R`>dXRT^RqU=#`yn0`cyc z&;3+Y|#8&-8KQ8v^o<0blrqp% z_F*`6XQ1#)>R@k!Vo9D2tIMsV2e$cY6vx(NqP3eQCSAQTvhg!KYbkhAmG0^Ne;=G{ z_t0=_BZc8wYv0ZKt)t$qseC_v8|F9l%o(rcXLTpt=#8azTh80%S=#-&M*m{1sDD*$ zy9Zva7?Xrw=vMvbyt%Y}_9oJN&f7-w*=1sN1^WZnM}2*6ee*eeeQteyZhhbG``Q<` zdcf!Ghi{+llgsD4wKJdd2GG@)ZI|&t)yD6}MUsa@zwV`i#0h+qYu_zd5&1V`m4GI* zG#k=(9yG_~s;zc)0?3}Lyiv1xL8f7lR50>Ff4Ul!Z)z>fo%c z%6ylXMs8X%J?qh)!h|oeN3imsI?tGsAc5p;on;)qY+@{Lv8dTs#$V-@$0l*1kRnia z!XAwS*UOW3YYz0Ef4Rh8S}{Hw(nU5KucE{{iw6~JAv#$PwOdzx~aK-O=u-`(z%iql)9GDeGshC+Iie6d0H zS&zBh-M?F>M(dQ&1Gj3X#FX7lcUq6>APE~z38JGGZ8#Rkvh*|u>!C~LeKzkJ|5Dd}XGOufc#Lk_JA3C-> z>sS3AbvQ*%k_K2z5X&Wkaeq#CzyJOIudBE6 z;?)4|-?Tc;`3YlQsOQ2Eue|ry{iMY3)%xq@0rqORjg)Zeuj21@0^H=~YI~`E-Kl?t zEZq02^+#DofaDbdHc7u)zi{YoJ#c^P3)TL``qz!9`niAAZU(oFYNdz!M%`iRu2lh< zCuZXTbb-8lMc{dG7Fo}ON+zwmZXY^dN) zS2w@H;d1@e66N;))BON^-QTSCZ+4Fncg6^8!c+p_y4%-_c`hCb<6P_O5?O6jYx!7D zT;k)xTvzwH`qtIEaz&qsg-n46KUeKs^n0axxp*|h!_}l%W$RaovO$1rOq=W>{&B?4AJIms*AFPnnl|_qX@tPI(g-E({+AYtl z53zO&wO;ALI-8Lta!sW-vl)+7axXJ$2O73b!p8!;6Popl&2~5Tvwc5(V;eoO7Jsp3 zrI7Am<{?;pw>VP^w=a8z3?IQ`u(Fm=+~U0dpYCt(sX&qF?z^LVD)0}f0?yqFo2WfS z5D+D>pn|*(h4H^2h^h-O+?^ndqFTAe-5L9YMXvUy)_PMlmoV`?@mtMkFe>qLo*3=L zQtvDEiPGlsccGIj)j?-2GkC_EfmcxGyX)t389Q?%Fk?>mN3#mg_&jwOVG>xhW~8#I z(!avS{S81}+5WHZnSgsHphWB+mlwQe0_?i>{s^4STPB#Cyl75@6eH&C6O2Y;60el= zW(RQvgT;i1J95jWR-z8(>$Un-CMe5ea+oa!jWJ@d7($WDrM@L2XKoP_Bju`-yq`h~ zbBd>oB8D-xI0$TccSfFj&xD*-6qLfV98}DeRAMlbFlMTy1ICsWGla~hxQY=?h6_LM z^N?xE3q?*Bs$bp|68ux1mxxF{V!AKY=fsxigceCr;146l8XY*A7T3weIS+INgSd@z z5V`qZJO?TfU5vRXHhD9eh-#&!c}<{PKRqQy9A2`296`I#Kty<;3-~wpTtE@&UKDuG z1^nZR0`IwiKV}yo1L7d$2pqdCLAjPQ^o`TwAh}qsDKDu~BH^Mq991}O&P$`bU@Aog zE>L!&5X)_4OiqVGlhJTUaex^q?%FRZdMQ$HPbuVb?q>5x!6xpXTlP!J&765YgI_&R z=EY4X&yoMgo|JU*(yO?B?v@({KTH%>nwyms!U=S+kPX5fc5*AYr|itJzTRVGgp_1R z7FaoZum}rK%@bK>f-Qw5p_G6~=%Jh>$WZhVGo4uVjC?At+I9N@*WV+_>7Q zCtw$3r0jzef;I(q)mEb^*ehHKkyKIl|I_{3dm%uP=w1kLF9f(30^G|2|FL9&_d)<6 z#UFDBATY{8X^P%i$r5U)kO-NCGeSIpm5@w$k)SWn1$9C(VTIa`x{VM=ZAQRkwJ9~D z6q^NLLXXrq)G_P`5H1PCR5a8o1S{4Zg+=U*ccZ44_EyERi$S;}a7=Xt1fbS7VVdfb zpepNl=_zc(cl#7nY=l)qunALetD|@->`dq;xXL~SA*2A(o(YvEtptc_H3t8rLFrDr}Y;d=`YFl@O8!3m)-JFqx1O>}p4C zH-+F-NSS>S_@=dRQ~0lz1%@mSfG%Mn+QS`ZaVN_l;d2YG(E&~%6Ds3?D5gG7HmMn}FOpK3aFcy=M0er*{IFj8|6XBw@aM*5@ z)F4TldL90Qlomv~j0GxOPr{%+N}h2@eG@EXJFCU$Aao|dXeE6iKV%jawbW0DpZ5ia zn&hUzKvz&tiXz4&t7Zfl>y)&~|Kv9`$eJ_!)g|E*iGx*39$=7UN1c&G&^=O5M@a-& zQ9QN915$v0cP|C#*>i6@1hMDw9cI zB|<3$u(e`G$(^+zX}mRzB>LvJk|N=fR!OmJXh^y(smqpsNuW{rYz1lQiw&_7P@6@3 zl89x?h?K{EIrD0pl@xO&@lJv(8BY=h?-T*D_fPU$Cq)ZZP)ya%_3VP+Gti2f_iM%3Cl3zs?`00ZVXlEBBo=BEc6p?mIe%lJA=P80{ z17`9Rxe@K>OhD)qx_~bUH_Y%#Qf_?=cX89kqi8~d1Fy(_R!M^uyg){8NKLG()F0e7 zS)nIBYbiO$`L_4dH{VGuZObthyfu~*6AI%C$xK?0I^=@>c!tI-8vXN)^kvIciaxmI z6DaAQ{s;Z({$_>5233VHFczAIz#~3}AeH|ipG~R=ft*w_+g_2BAp19!7eWUWgozld zghlb9w3dvafR)f!`#_{9k$PCRzaqEV3ie`y;6C%F?gkFb%dRx+FfwDuFlD2yiVcV; zlPVE4W0E9Gdc#!hQEvt+wLZcTg8%|1NO%n=Fss&~0x~lyMnffHAH_%2)R&kBij}Gp zO8KMu#8ms$FAN9OVU7Yr&NdKo&_&qcq6aFV1yc=z)U{xk&p4@17S9=iRH;yk$P=Lw z0bdY1WC)=Q$9f@RdtaG$Y%GLHp+97owID=BiA`r+hz8b%G&GG?A%Mc3QCS~4o6r0b zVjv&}APYjWe9;-gqzIU@9b#gJ5wev}`7~rB7FbN6h#c0X@CY7SN7o1ftAOz^iU7pJ z5!i@Y^qUpN8r~qKI!Y3PN5F|fv(1#qj9>*H50kBvAcIG|Es^JG(1INfABY<9A`t3Y@`&e}N$nWkgVAvnN5JI;|87PZ(aT%j3XlRHDj0#*;;Onzx8& z1{rw67ZMZy#D>DbeuO%K`nM%iM2Y|iN5TL<#}XhVq_NYa%~Zz8CuC6Z%~a8;Xe^c) znbQSC3v>_^p~IBug|V}FgcdNysn}*6!xQ8sY~X~T5eTUMoTd4RQCv3YkcoBFGDU{$ za3#hGw?NQ@JF3A}h0WB0(B_B&4NUdeSkYi2pchMoZW!w~LQfS0LLt5p^9N2df=hN%}itlJ;0i~8 zEpTr4>$NPvt|W+DXMl`H2goS1N+u{T=_6eUZ6h%W#TZ1?CNoAMRX7#j z%P^C2bVN~OQf<1&|MGL58^y2YK{Zq)p{M~`_%hAC35aSTtI1-q!w%pX9tcom^ND(t zAig6}7)3O-iQ{uHf^EcR%#5hU2_j_x!dPO+0pIRW-%4wda4Cxb{|KZ zF=Q%mmwWz=>2}DB!vIbK;MIovM4saPc9HnA0{4tJXhDrCF3CZt?Do{Jo3=T4gIK^Z} ztwAVOF$)b1*C;-YWPT1gIQY(}!7Um>x^bLQh*omcOb4j7OJLo7$sEO4#QD%`SdzLx z%n*?%|7uG<&{!M+5Bi6z_=TgPEs4S@P~eWON*!h1|w}^41Q6j zf=CpqiA}N#Z4iO56V&XLFe{Q!OeTnEP+^uBfnkU$utrwuK@f?OC;(Li`7jC#jo=A< ziKa2IfiYr47*Zq;B=IQ>a-tA@B(LCyGsO_PXXgMh#^_{_83*-og;|3=Y|MdzJR!rQ z2XW;hqS_Is(2qbdg&>GeX8;Kw%6d+u!H)*;qS(X>9EtJJ(TwB-Z9#!{;2?}BXzWlu z1_2k0#e9;wm<3!!jR-LXi{xmXh?wMX58_h-k5}4&7|et{h6(I(bjAjO--B<|hha`M z74xAd*Q9-%CKurutRlCRjd3IsD2?At8R{Dyq<#;VqMm-kYkCm1qYaE=qHHCo7$3c2 z$YW+mTzE+vP$#Jrj^PsdWYj^-IM8D7qje$`QVnms_c_@Y|#uy+FH(ISfI{0}=)hqoZmB9Q|S*;+1jrW}KpmppLX?37e>F z90bM3C$lDK=bc)t;@?Di}j1DLyxxt0Ab~q z*e`<97eJ!t+y5meKn&J&A{=KC07`bzozZ4_P$O~#H8eMU5=n>(NyrM6Q|cfoWDjsm zEdInS12ZXUqW|>8DM*IikwM5M#tKKt2BROnON1Ec*c0xVe6SWEfguCU<@yUFJko}| za1qFsaDbHKt@enkow-SP5?#MwiYPGFl3phOOMpOP*Z^`s_KXSU1ZEh8YU~qgv3DdL z(~Svp+Ai>kogj^P6FS0*?}&EM^*C$u&}deh)k?5MI$6G0hj=6{qeC!(C2o^u8pJZ7 zw>Eey!vGtI6NbVPjZvQ7BmiS;QXnxFs>eN|Aew<0E#YNkc7zzy(1eZVWg}1|E^-UoaXb) zk{}p-BnKvBif7~FK$Y?ri<;ojm>Dnj2IcfbYomdf<~3hy6wvWiJdt_XBA-D@DoGeV z?Ej~G4?OPHJId{Mxl#Cox?j$1pG)^1=AOh{g6|eOuOyk?Ip_-O@tvn`=$qeUm*3r1 zI=n)o!Q1_`ecI_^IPA@Rhk*SfcRYTduKX>Ai%9!0!F;3%g*^-Tq&%^;gtxzRlA6dKxk==LGzX5?F72bA@f* zBQRX2ol6j1eo1s(;pw7GqTt$6*Ba)MQX)un{;FEIY7%)|Yw9w{T+xYip8l{@=1)sq z{1!?rs4Za1pBB+Hm{- zJPN?uX#Ni=H2>)+2>b(!$KR}YEOA4;yqHZK%vZ>eL}7dwFP5@=yb6CM!sSu;U%rQj z5|i*|d{Xj39++>ELGXUYlP8FX_;YipfyXb4-gtYSOKf1~_&SkEau6`Z^Cce;`6rqa z4au64(2AM=y&5Y1{S#^Ljgk!U0o;mh>{ZHgi({m5F4 zlGv8-jR*H!geWfbM;r%x9*Qp)-6S7IGrz=_`zH1Zy# z83IE>aPWdI6+l9skT8j4!pN{iaFlT(c!3&5Mo3zp^islssR=ey_yC2cLRyp}QUp0- zjoFwZWgvV~nuN?|Nt&Q?Cv2AVz)l)ZA2#%#9zU~tnfr_Sg8`Ax>i(# zz~c@1@GHgC0`Ji&{)BP#3-u-NY<{Ym<~IWKpl*bRQH^jA9@G&X;1MP8KmTJaoI!UZ z`y3f&7SI@PK!ZE@M~Oj*O7TGym}#Y=U`b`bc$AJY!8=l!Y#DW#hWINoLpn(vX(sg? z2}gk!c;HvmNUav1c|6phR}@gc7``|R+CjVURxi|sFVlza=)u#&GR8F~7?t1~KgWp0 zbK@E+fx;h(Z&X;Dqr6~UuU&hHen6YLvofG@?m5l7hOASdTyH&mG#ReD{_{dhQRz4J znx%U0!X@|5OHSIW$;Nl}w_De9UweCV$G7!nl&-=QW=9cDTh| zQsbNK*;{mclQ#Liz4@a1>?eKOU)Iwh+1c#xx8dy}(=nt|?N!*`(*fTxEPHcJp!O2x zdCNmXef!@ZM1c9LMFxfqM98Zv@`{zbB4Qv@%NEDTErGm;++8N*zH{CFyYC16DUqbZ zDl~^C!KEaKo6_U$1HUR6^k%Su{ClMPc8tvu;&+Rg?QIBqGfyP)!grF${}AMx+~mFU zN%bK=R_rMBGEt5ylS@GFp?8;Ma^Jab|IgnS0p?PfGR{~k_XTX{i+WcFyEK=g_EO-y zyx03~lzaRf98>T<3e?O{kp!I4WD@^A9sJ^|}_Yo$1R6T?x-0g?`oNyAY zKVPjsS3zaRI#1pyz{Xabz`HM-y(gdljapX-yt&sZPT zXea?wa|^G~$ny{C*$4gaX8NT5W)v;q07AH-6`Gk%U?K>C3CM(5au;EfJ}CZ4ee?G5 z^EIE@;eNh<5?sM7;1c44_80X@P$=~LsM>b#Bg))PrE$M8?DlSs;-%FZ95QWQdwku}do~&A)(;a1vW2&hN-T2+Wgp7bM17Oocch z^$S9U!SKe)i~(La5+W^r(YOA%dNzzO9C1;HfPg*_h`2HdTMLa7BJWg3p?-E73A=^Mk{;kBK}~6}rBX%!wzLFUUN2Bn2aqgD zf}}wS+@%p_Gj0;AEQ>-*LW9gnI^^((hFwxGDUNhY(gxjR^jUUIOH~3)kUYRnk}6q{ zkV~hMRG5hslDvQl)Y4jXF`on_`+}s&Nz>qax&CS+)yc|vvjfJLW*8rp(9)Rj@SBtu zld;UK=4aoeO1`VIzzFWr9SLKKeQ+ikMhgs5SxFX+4)B`tkwNOE3^g z2_8=4nI}?h7^{dGHw*DnXjoZjWanZoa5aSh6!n+T!bn1e!%}1aqlHA(+%ScqM42ol z0ZSnTH{xs17RQXrZowF)QqI7XI#U+1*-ULytHbLgq%C=k(&1=ijr@|tRLPV+jLz1R zbP#|noS}eV!LcNrphN}mpg%Y%xAYXxe2Vu(UG*+$C_11Jd`V`c#IIyqN)Db-jU0d` z5`kyv%;2Ce*-iS*jC$f1DYxiA0RYuungU0+uH#ey8dEhDj^p!S0Q4$P6S`!d_27=lYR2-b zO%N~SK?Fk3M7h;dsA=jYfX}WCWzH~x=fK`5WfX!T!I~h5J;+G`QgcsjhgyIZDM6%0 zM=g-iQvw5%2pa|Ojt$G@0m&v2R|qfW}ZTnuFdCmbkAR5XSJ z3bC&sTUsmH?SDXx0J6z z13M~&BcT_`FeXDoqQIp$*+KWTR(UfIzWD>5z>1f!kAsQ3Wem6rFf(`zopzCA0d`~% zHRFVFhr!Nn6_A;k={7Ff>g6x$8ks3TTTn5-o|>KM&_h3lB95cp+~Q-rHSmxHV`CX9 zVk{KV_Ll%M50r`ML!BQ0LPVO)@*5Bk6H~C2kE1jxoMKJH2I5!Xh^)MQoN3D;y{9CW^5QE+f zC=FAy>u1!4C3WK4xE(40HZ(^^a5EJk3jg38R}{0WXN)DdqXZFZCPDcc)KPe{lsFfz zprmXdii^N!y%MXm{!9Z2A^&DFZ?ph!Nguq^I_3uzQVC$1$dvX>BP{SfP6Fp}9fYXH z;D|jq3x)_~!bLQQkt4BDbka?pU`3YApsyLs7)~<~+T6%_pAY*YFcR)xZ1Z89d zrxPNGPtBH=>q@1l74;yBdJvVO=ni_AVGlBB zMLozU$}ocrGVF0iJm&tqS*|ZtiuyT7pas@Qbrg!IA{4pDz;T-g^n2E zGomLF!3VEkDUmFxK4lp3ATKi!o=z27XGRl$fT74Ff_TMpMyF&x6xE6fX^}FAZzfYg z5YJ=5#0_+00HvQOLwCtj%0#%KX1z1#&YIj$|6Qqa%q!g(|Y>u0nL(J^?0%l}j z^0H*?4e8M*9g9n`abi0R!#`d4jD~}AZP^0mp$ZD1CzXOaBsC+A`z#e2|H6^DL^jBR z&K!?m5hy{GPbGjrjrNh0tVYCj{7p=RaoV9v@(Nyh@OpMgL5@4z(>l*iofcl?IsuMm zGH+&KtpzCp9d;EpXu^*xG$ad(%>3HtGGSz<511#R7@4evJ_OaNpNBrHuaK_|n)biGTl>@( zwcYb|ZPb5ROQpB!B=PO`h4Nq5wNHzJUF4r@zg4@U_rf;xUaoDQ;TJZP{zYy6tZsy5 zd)CtW=L@cWT&+$NZ)tz0j(OXf|FZZUzr;OTNM{`*xc47FtIqvw{d8w4+u<4^c)9I8 zZ6=pi*K0V3vTwH26^BP=l+1)aq#0|@5)~{nqSwx;JOj)hF z43GV@^4b02-O|gi>Tlghaqs_qf1&d}{FSD%>-E>3@A3AhW(L8$ZBxSCZac!=z66|} z@v&QcrPw%Vt+YQ;=K8#alkRcL zBz!fTY6ch&y~KMzFQrGG@|83F%mmYo+K4H^$5;?7AQt@(ZkN%(;WtIQpCHMOq22I~ z{W%E(g!lr3e^Yde;{KF_L=JGu9(hiaOk=^S=8D2k(9(ydY2%ASKExpM-);N`WHjW2 zme0P$!DaiLU0b=chevk4NFMayrpvr8VQKU7oOa;F?q=6bzsbdQx(!#5k(R&4)7d#n zk!GsremhL{xO#cGTEJho&UWLkY2}>k@N)esjb5t%lDE=Nx#QiB7ynYwPAR; z^D|uBg_|X7T>7YKdo?tCU9tbaE?p(4%*nJw6u!<6;R3>#lE57;8@N9YnyK>Qg(_}sDcZGKERD_VBc}x$z9qrLW z*TH7AJN-C3+9fz&QdH6N(1#`8&xYYw2jz!%nl`^~(IPP<=WZ?+2hLP}TYW~%t1Eb+ zdg7~!k51;Klu6>^kv03|0Ee!PwS}{!^dyxx@elD=X@jEe$qxxBxG?O&FA%| zi#x;KyVH2W`}G~YcfQy3#xuU0JTbg}6s?2d!{M)L#0`C)UHA8qT6z3VkrNg^EB%p@ z?picIH`1G)A?>ox_BnNYAH~V=Lb!)Yc+1Jaj;E1EwS30a6UEVL>}nW$J@s0!qsT}e z8S5+-X2&yS!*6OFw+pgamDW!j6lFzI;zmXv9+x4P(Kno1_wnzFn*1z!_Y-5&C_S9) z(e7%aw~p!I?+&W(SM{TUbkg#6*+5Z;s%#~%d{_UM>w~LRk-t@~6l_;Gi6{KR-@|7?MQc@BPnksrTScMYc$b2`uTd2i{O$=j>L-u{RLmX*cX zQ@rRXgxF2K%f^YS^n9!8u6HUf)->(3{3I*MPF}yV_-|T1W-y;t+}g4=I(2+%%hqyd zadKrfE}bsv8PNFr1r?9G?*P#~WjRUeZ{axK=b1 zul62JOsd{5OnXD_D&J{YJe^(lo!BH6?YU%bjdfS&z2%Vw<~C95ciF2O%#P^XSTwMa=DmLz&~>65I-wnSnAub?x9`sp z?nRfB_W6Q+O9ac4q-lAuk(FOe;lHY?>s4-ED_)W?e%BP3B4A3pC(`Ahv-dNSOs9s_ z4vqoByCvn_fu(CsOjQ?Y_}>5cUfB#&(`pn$vE->)3!kbU z=G#`SWC=?c-_-D;|F!lSzP=pZt51I2DoCgZ#cK^4eHIbMt-gfKh>hCbnR#q=b1f^R zDwxZwN`M}sC+AyeVP1JH+}|zUv`JpOSyw}QSc;6RX6)mWZ*~1(`LPG71=4;y172^i zGdI}UfY0^$%n>u0*H`0%N=lCZqDJbolK_c6GEZ2nHJovP8_>ANI6LaVTWf!MQzo3P z0-x!bZuZlvy~j0$)j2>}{6PE~>%uHt^~#jnlPRG!|8(u5l*{=-$e*I6NSe-3QmlE%k zMdIXn%EcTWql@K0ws-H3+YdKKfQrVU#g`t3q{iv0qeW;7+H=Wy?~6YN7pn;^rRd&w z-*>F>wv_RqE=hx23rycG*hsB(k!8fQ!`{c!eFG(5LamTd7aBO07MmmZ&PG^xE@usTqwMCCtD3c(JP$aiF(PN_!VgQzhJ~ zrR-nU5Pb^TTVQLyt|pE3r4>w>WOhuBV!v1AE%CdK`$MAaN%U(`#?eZxK(b5ozRsWR zjt<$l3O9JK&D4k&Q=h1n^Q%=d{j;`Ghhg*aOV#dry?VQTFO>_O8uosB|6Clkj&CjG zpa2|`_d{D~0)KJMaKP= zm-7K-kBV9?$UPHI2wH`ixT5Y~8v1^_87ro-` zKD%jusHeB}s%1lM`R-ipwVI%&la~3av&}5ej@&J;6{HU;%jsx1VU8#?O?jCPSA_S52B9XK&wWx!^=iir%STi;kD;)qC~HTlMZr{Z9q` zPQB{=P7izg!hzWRP5ov$1FwCivd+bFp0S+J``Xm!L|-&If+=Zspj3;v;bKauhbw_8 zoYk1W^lG{wchn3@uFnCAAX$FNLfk>)ke;vCH4AnvKs@r7)!uxpy*v4S6~b@U*4O1K zb57JI=%wKo_1~4Nb>-b!9(=!L;-6M}kez4S)OJGbq0L9t{!(p7E?Z@I;ElTW)8fQo zgT=bjv!ku%ti1R1__>mgtvdqtPCAL_-HH1DT>brh+gy096_7u!#q{A3Rj@m|jX9jB zpDF&?(_)5Cm3i3+p!-zctULT<)fTKS5b@+`ZMLC*Tb!8M(ku>&GW#3L-1+{o*mRR@ z`1s9uKT+Sn~JH)1fogM)V5&@k2mX+&&pT6DqRPQ!(lf4naAF6#s(GKh;kl|F^9GBDC6)V zPUecAOrg8iH%zbjg-=(DzFu;!qbIS8M+f75VGlxb{HV29+uE4no}g~ z7+Tt{|8Qa3zVys{zD(Wl6VaI81W}3A`0EycIvyapstdhJO$;l;>m3zi{OsN=dx>`_ zWa^_wKbcx6x(r|RGOfRQtmx4=`7V*IA3E$Fl(r`;yT4c5_1wSOO7xaFO`AmK_4V#y zU))%ouC0#QqrkE)!^806SLH*t2UvYP4mvy9GiR#Oao+w+)k0ra?K9nq8D2b7@h6&2 z1~{T^J7TlSxB67%5+B0zl%wG%Q`C-a&4A`&_jJuyEZ(aFPV2gwN`Q{27|pc!y?@l0 zFo9!B7~T47qkgcN0-wTtN7J@)ta{9J%#Qi#Y^El=Z%ny>TRi6g$Z@)}4$dCa$~DrK zCmd|rmK*02BS*{l>;5;Kn~!%;ETX5vo61w;p2{|AW<%5Y%yg$iyq`nl@KBIBJTZ&o z*QdIQFY!Q@>Q?UYEf!P*+-Xs1?}b&{ICL^s^Q<3w7->5mC%Oz5<`9d!=>ztKYhqQ72p)b8ockZ(2rY5D4R9d4I_}=fU2aWWa zqHKQS{>O>`yHzAr%lrrqIel64J{y{BvBe?YH&!h|p7lAze13JGQTQ2=j#CF9r+6P` zBitA%yLFbL>g$(gq9R?Jw~vuH3wX;JYWc8zqRQA~Uc#lZ>#+WML|z?f%wDU}cDOT# zGxcwmw6DAO1O201)1zhcRI;ie3-tAkmx|lH2Yx;bzfOc0Gra=|ynGW_{p5Nk-Z}pFRKSQQ#H2!FCH}Y%6mNm*yX;{BGI>H z|D1Aws^Q_DI~|elYloY9q2B8dhu&1xJbL=2F@I6-R`FEhJi3g}VOFQ}UcJ!i`8ln` z{&U%7(d*Tc?VzKT=l9=_wDso~cTp7y!~U~@$3T1nSq%)9kk{qJ1De0=D$ zBWR&-ZsUk()k`m=H^(?tTC@>_j~*{_@{O(bUR)B}UA>7@pBgc`- ze&IK5Ml_z7uqJH0vHBWLrnS|RRB+k&p0qfDuC?^^e}G)uS9-7#?5eemJ*& z%@K!w&}-Dfgl3ypSWTU+$7<(cv`Y^<(@5H5N5{f^l%J=vA<7>cbJwwQRLuQX2L*uD zdk_B8#oi6Y$@1++d=DgrTFs_iqU>i)B?x$Wi3{L2Rm z_MTrI$L)7o^|@6lhk1%uN+;)6Db_*V`P=eV_Xb%1c8ztqbeSF5y(j1U4sDftx<=@h zDn~fxtk*cMTP;0d!&eUWva{ddVSmQnpl4;cC3C)A9tCuKJI@aBU>-z(1s@!Sm0 zLm7Y95vc|dmqgM&yYA5k|G6gW43FByyu#+MdgL1!=@v zg&`|Fr;C$JKwQli7>Xy~6w1W3y&LeQnv7TEro0>{GE-E|^@>krY(8q$c;so^7ug`` z+Faev@P|cVd7W)T@4C?{YZzA7=ugB>6-$5S?6~(yUr`=zC=cYX&3)9NB%iLrsarp5 z@^;;e!sCq&V}-SMq3;ci*FsMe!_OGq#wxM$OC9FPp3<~mKbpF#^;OFbZ#XDPbIW@q z{nUjq;ZJ;irG7nvpI)+-W*)IVcIIBA4X2cc54O{zS+yIQMr=%}OsnU;kGG?k{qa8E z`lPJMJF;rOk#^k<+;3tUbNY02k#W4`bBey<-Q^VsT7kQ9XKEF#urq3Ssa`s`KUz~v z4?i*UAZfo*Y|3q)X(b0=E>2RR=WJ4obq|HwP&2{4e;O}dzXf!ea_jxTb5(mSU+I$BhXUqAJ*18hKwS?NG-EgarK@wX)6MA>Ui( zzQrVQ2Z{RiP9gWRb}G@)^1CS%9bY<*14$xlfF=OV9X{Ul?2kBFjzf%##?zqEU9!8_ zG-x&2b!Xo6wvI0Un`O~&<{bX>OKmZ9U5Cr|42ahQK{T`(Gajnu4)U_r#iLV<@jACA z8smeUh9{*=hd7qg#_-~5K%YCvkngY=_NT|rRw?yyO-2^W`2!U6CjlKBb}x)^B=%2_zM8E>Mpdj3BNFcF z3t1jDvAG3FEI#z9^WF9=s8gl6X;1A|d3b5q`(l3DjT4q* z&97SNoMO^7mdlhsi0zzA1N@t{IB>n%PH%JAdwmX5b1i2|*heI4#aq+DJEPBz<)oA` zeMp_sFQxg};$-X*&C}=bBM-a$tKzbbbJof54{K?oUR`;!3d5^)-D6natG?fBj2Gsx z4oymF7-9jMRGhq595`0$*)|TNzEz`VdU&E8NQAd#j~i;)7BYvrm%dM`ahz1$1U$Dw!7N0i60mFYbA&|218{Q$B=o1*tm8oA*yVq8NHt! z@3%w=q?Gbai3DzYO}OdYWZfM{BMoQqw{7cGRk)!dvrrF7nFb@_w1Z||#lr)?uLmEj zjvB|{(n&i$U!<**cWW-<=Suz9-TTY>apKdy{68Q5dKeymr#`tpyjbDjrAl@F4iDwp z@X+G@1J&-?qbSu3>%m6tu~W4|h2E)xk)OTONA+84{mfCVhi6s6+4;F$0Csu}Hk^ZI zz2VYS{$4=A8jVD|%hmn*xcw)|&0liDKnbT-%@4I8s*pF}t1NiodmfPdc?s?t|joY$DNT zcp`gcc&D|O3)l6SotdlkV4s<*=a#N|uIpTiaI?7iO>z23apcLf zo35g}-WJ{IRnO-BuF2-=w+p(Sl=D#t8{&a*|U|BN>mfm#|*Sw1~ojb-Bqz1 z7x;x|>ndj;R(w(b+PC;83jC|rE54+x>#OX2^(U**Pk~6l-*}z<*B*Iu z$H4HkDXWR<_;5(k%oCS~2MR3@dGuCUto`rr3oj46QosId_iFuCIsL$E^(*?Bbo*QV z>TmU`ztz6}R_pp(?dxy#sK3?cxlKHny616U!zpdTi>FTG$s@ly*L<|ywX;#48uOt{ z$n(E=Upu`#ha>ASYA(gz-NduYc0ZKvCMwITwy~3Q&Lc*~3TJf*WH_^5wBb^Qf2;j> zhQUc*`O6p(pGQg6^LC%_TIdf$J6}@!y->fNklr4GwneM5%(+!=a{kG=i9XHDWNMuH z3>Wqbo2FH?p~%16JSBFy2 z?XWIQysi7eSUux?I3qvGgg0AO>Z^vys{KSL-#MsuHP)FI+Qd(cBL81CkCM+;d!88H zC_aa)>-;Qp+wXzu%Pt2+arNxb?HVWkJG?Oe`TNB|UlPgM`|xxghhw*t=W9U|?%x}p z%xCYF75h#@i>Qx^lVeS7aW`mYEN#|s z_V^K}yZJTpWA2+1FZ%W2jG3xBk!|_|NZIFl*(sP_8uRoro;{KfQr0tWL;v~J)_sPY zy~IUF?x!+?Qp61vd?y@ z=rSXqHyV(0V&V0BX6LfO;nUM@{^tn;^U(Mk?BA+V6 z(W9zQygb!%@!k%-Z`4Z5O7C`;t{&4w9wKGm?n>m_eg>xjOtMmBjvUd*-SI0+< zp<-a-%(gw?qvA`gBgAu)zv&T$JGHtZV|`N*#ox9VdTLYKWVOR~&-QlLN>4pf_1syJ z@qGV$bSlHCTs4>)IkojsZK^symQK~m$F`~Z z{@6BE{U6(=>hxpV)Xd@7Hho@kl;gKGeTi|{?+v9yo;M(3p@6~SVe(ir= zE}qAP=D~MK=;JeDqxfsZ@A5Kvqup-R%>GKB0B7m3KdWc?nE34qcy67SKm^+1jn(lL zrDMA9(~|Y1-$wt@7e&WZsTMKU4i+w_Hxmp&Ez2HR#=l+xKu8(dk@&t#Bx#y*v85t7 z6I2PjFGdKoUu8 zmc?2HWy`{|%$&hC=&MrJbJ?^ajp>hWPcb8~GN*lO!AI+VM;88mN+O)Vij-3Ke%in;!6( z-hDEzI*%2mbKLVF94_Qk)ABv;oU1$Ucpn55nBfX&dyi%HM94y+c1P-Kbht<;sd`vD zHh`Y&gvtGxE$$s^z&D>cN-{j&b&@M>C2Q?kWv!KKZ3kfOTCKaRU90T6cCE7M+O^7h zYu75vtzBE^+1l-DJNa$>T3LLBp4GPXYn92@+O6xrY1Y+tzINv5?45ji^jcTilmthv zb){9wbYx!DYMVC4RYB;i+s&TBx(?R$=d03&(?`duvG#6}>6y$P6Y*{>QoGq;TOoP0 z@VI=;WG--33r)X0=w>58du6-A4 z;(eujRa0%{eM#o#jptRkXxR^912wJvI6DDiM~=|-|Jv24=XUK?_DWjPYvioq@W7>N<6DY{hdxTyc_fEle1C2AeDqq; z`mp-!*FJo;t^NJWRqQzOad_=9&jWRECiJh>%A)7Jc?w((ggES0yqq#i&AQk0w1wy6 zPFGrnlbhQ0qINi`B<|nNH@6~0rW*0__gk6vyP_{YxwCwD+PWPsWU-ZzpX?*3ryO2V z#?_8_t%>&iReKfILl5dx+0gU0NM+yaHx)J4TYgwAWWkiM^78OVN_|(pDeJsnoY)Jw z-6&7Stz&Pg+l)B5{=`%UBce2%bPKbQ6q!ohgGKM$19Z1eU0knEOl;iCnj(C#vE|(|ww5qb_viK}>MT#p zSXk|f%Rbo}PG+Y!tH8$PXDU(CIJz4i_~$j{GlP(;*PkKP*BV#HLc>|{y`SX&+_ccT z5G&%$*FbsK?=tLG+`D?J#)gkORRf#1(T~|omIq9tp?dk)8(vKwPc3Ff*(*L(d13G2 zoaXs)MH|s=x{|qBhN+e!arO$MtLgeypTx#fBbifH&(#VV^i9WGpZmo|UG`QZEoHk_ zlP_Iym)7u<%5BV_UL^+(&#Zsq(?!L2SOLqpt`)7rT)e&}XVtD+Jd~YU@2XBX+t+HB zwbx~f$B80z6^WL4s+y`Oy;4%h$7;J|>({ClSV&QySGDo({QhItSwApo=9E)pJnBRn zv(Nt1wsu2{Vjc3Ve|}# z*J{Kpjbz+AmGfu6xn}7(f}Y3`J@@<5=v+R_imu2_t?gfSm^}#5uyV~){oV=^Oy|L4IB=Z%lU6=`;?1Vd)vMRbN6)T~^~^gZv3qOPYByIu zebzX1Y)uNHR%kv(0#Cxvl3~eo@||XpR3gxq95rcisH;n*=N<==H*c}blv2 z+2DEmGrUDMv>eN45~p&~s>P}oSa}-XH@1Aj*vaFucI#g^PVAQ^`mHl#C3UT?8N06= z7B(J&jpBCgDPGeUVOhF+@9?0nOdqb`aa;l9w>hnnSTruD&c{O0*zCzqoh_TCW>reH zGF_bAiduaY@DImZMeJF6_sd<;dw$BF(@=?K%R8z=`>NV$=3cf4d#g2aW=O5A#=6_; zmF0R1CiZ@DT-_0BR|+3y7um7DTvoO3ZLDuMQT}K<%H4B#p6cm04gJ5}MD=IihpMwS z>b4m@T%E5Rru9|Nho04br?_P;pRZGN$Kkeo9!;s)==oJz9T(#YR(amDIpNJFs(Jb0 z{fdWH!rCd(BR>CDCAHymD;G!g_xa}jcJW?0qJKU=s=pP#&7bG4|IPg6^P~DZ^SJr* zJP)CL{=}SqhX-m_^4M|>S=Hgghc)lwRn?}8SNSw`uWPA~he!IW_J!e95!RYe{jHV8 z`dh1Q^*6O?trAwv+s=fx|EYo7xzP5$=(qoB*v?mO$Lp1NQLArrk`ra$oEH?ZjTT=*)}M3ucIFj<&Ayj9H1C`%S9`zpYwn@@YK* zM<)7BNl2z<*|lq>&B--iqWev?9UdR$W%stL-*i#BZ2wD}?SE;Y{Nw)Wrt7Z2@!=vn>C`_QwVnD?RQnH+gv^e(LW_*_(9k6XjN z|MvTCs2wy@^b#{u{4B62LsB+RgVcsiwqNB&m>f)H?AsN7vitg71tTV(pR|tv8t;P3 zGSzf@YB&uT(;{A4%vNHypp=XHxhruvH=Rtae%_Y}-ml{H=hgoG+Iah@(l7XcO+N+= zf{x^m--}$%_QLV47S6pzOB1o}Xl5I6o6)r_0B$*YLGs1pB?_OV*R9)@R9m+#Znth* zE_RHaXulk6i&n?ef`;u{m8%~!B3cy)wrF)c_d)44v?{c;!~UCb?UR;HwraN>S{=-qPk zN`G6nEEI1MA)@*1qDk78rnaVAy4t$!c2N}%Z4q@#x-Y}knd75%=*F*iYhRwYHT^}F zJGUJ_xxpxHhn@SBop$b1m^r^YZ-t(nd$j^^C;qaWy_-z>lzny{rzG0B&#wB$TlvS% zwNv}j(oXG5KT9`YZ(1wKa=(Q^8)f68 z$1OKoPiY%W?H2I9rDyxXrm`i&{vd*RD#Me%D=O11jVy2v2ivUTjQ1SakXYq#SbHS! z?Be-`rP8wQhEK|l8$KzEZTO^gz2TF}DjPnj%yD=KVtE<2-SWTTvzNuLjh_|G!=o6X zX~vu=(mY_}-6s}m#{)^(pj;fJSlcM>986)!!uSF zmmeMe)57)Q`?wDyyN9Oq-0gs8ZhEpU-D7k97p`{hQ;6HSPhoMVKCH4UZ~E-Yn?A+c z^T8Y(jBBnmM02RNR&B|>s^t3rN?p(Y;?dQF>C`5jTkG~1?HqU-j%~*}tigJ$;D1GyhvU`t$>LRg zws^%h@$TWdqq%60eR?duVl^X&>~oMw&k-$Iq0d81%GN&;Rn%KmqpjUu7%I5+An@Y# zp+&va{zFtym;Z&Rwk|`?$kh43m)m(FgTK8m3DKx{{%~m5CyQ5w$QRygHoj9D zoZ4fO_}Ff5JhR$T3|x&>9~D*>UjbQPTnjllG$T$O)WH;+_5HBPcvDV`!Ouq0b;)w0 z=J2rDN0X~wMH1J%B2iwIh8C}AzPBsQAFgrp*U%9S{d5~t-*&So?ajB!8gejDXnHPm zjNgyq`7CHfrN-SKbCYAW4&FH+LG28+IV0{mw3#2q7>SF7fvPU z$Pil;msi#~njf+6#{E@AuWNOiK_X!G@<{6QVGXZ*-0vcuoZ5tE8Q4R$78u^DT_OAk z&mZZLw2;~A?fEFN+P1adiie7tYjslhon@Jd+l{wfueNO7yCvP?U`x7WFD}k*XM?nE zn%J?&?qie;JC0FtsZ~tJ*^?KM+HYZC=RPIN&V5Rno%`%APph$Z9H-rCwsW7|<$0xY z#kPLYGtBXpTvQiZ`bFjVC%&tQ>?^z-Q&I7^2M@Lwm6+hr5`?Q`FIKJ4(Eg)d*A`w5 zUl$GzUza`(Ul;f7^&-X`zV7W^@9n*wwl5A3+gH`mUeiJ!H^?2YcRH?jI$n1=UUxbR zT{W6scYeI?biD3#yzX?op3+e@(246+F&)0Hy!%MM?*H^%$uRk>Mt^kLvf9>T>1f>} z_S*j+<$t8_uW{X97uS#W*J$ZWqt&MUFGUj|@pHborUU;&ryX+o*>*FagH|W0 zg&gbr%fh$+xz%O)=+R=nbK`#K&K+vsIHOwo`rf&D _%bL(4bHS?g26hGRI=c^^T z+keK#*BnXp*Sk`^R@%*1lsGHZS1XpQ%#AYK+-|h*HO6N@+!#MCG;WmTS05G1j+@z@ z+MuCnHM%}RtF`N><6H%Qr`83ov=t)UQYZ94A&V@cAwp9Hp9@_a7tE zlWsxyvTiHBS#sw%Jq-+3wv*^!ruPh{w>*d+YTL#9W|4a6A?`1?h`v~Ty}GUL^z09V znUB|PjE6Hu>ExqbbdqS}hM}wi+-gUrXLR$yF8nUrX@gJHoIfj&{Y$0#>U!eUoXv(U zZ|z9m&9W_L{-(c2qrbi;u+45>&ReO9)jC%Bx8<+vX9o;zssB!S3&cGA^~9T|dk=-7 zpKXVsJ{s>`rqGeP5-~pB4n@b)ov~mY!cTOV)9P?-+mYvD=LQ6q23K1j;^*=4v%_n* zcjck?+%Hf0tX9G0%dtM#z}4e_Q@(5^Z)`bidE?R;`4gj$iOTgz!!G}{eb4X1Q}dsT zQM+m)^dr$+_1=7Vji0pN%ulB`Y?+@&{oG$2+PM5tuii=zA8+Sp?^pGs%5c-0swwM> zxkY}gn^t`7F}sQB<#}&4T0JB0sE8XK^P;gH8!@zfRG6HXf@vI@8SAkgB@Rd1vRdyJryI8*x)-GDmsNZj{OZnBv-c@Hezw+ntsZ@Py}X9^0@<_rsQ%rSoL|v|rS6 zb9WwIeS4DypUUmN1)4r4W_pAF>TFDfZ+`DYiFj?F;nn&@ ztKZIEn%=U)-qr3i+4E_;PFAh@?voWhuWJpaZsg0#PFr!BygRq_S*_}{^BLOuqT;N{ zrEjeyweuNspSAU{ji0tvpSJHg*Vo=&Vi=#(TiV-~Fc_x{wC@5C$FoD8D@XUVK88~C-7NIS;U zhMBBLJAdJHIkS*H#-YRBPka6BF1caXk5%dmb%mK@cG?CPu)zm#70&Pd2^!!IL7PB6 z@Nv4@V!2RP9Lqq~K+F`@um_?35(4RNQjB9K0_K0VY+UV#4|DJtjA{pq#QZ^-BLt0s zx&flUpe*{wXh#`E5JW4?(!bA%$PIsB=6+bsRp`0*CrTDBvhPBj%*3B^ovh^JfBq(r zxT+PSl3k!cBOVH+-7g_DFwqts^9f|r7&D@p{T~_*t;zynE(jnwmO>7`;IGG`1cx|4 zzzn*~2=Yt`iQYk;A)r(s!L-i_lz68_cO?Q6+vjmg9JJ%}_x=?7icf4$YuWqZp*nbQ zf$o@%b709ee=(LAma{j+)FUQFlOWo81(gv7YxJAmMhU|aFsYz4_rozq2OuphFi)6C zsG<#;Av|q@LP8QHPzMcrO^f;T2W8IiKb+<&2-jX9J%d`qAMP1J?RR zO58sglper6*aY-sScVFUAPO4eL`Kjj!JY0HlgUtJlG>_xkP}{=6o~e}m8a?pxfheUs2THR1Mj z)vl-YjhaW^CCYz)!kNymN)o8CY-c0|9@< zJJc9lFFwtwaKrq`=lL(!;33HmZ(yaF)cERkFK1)2QhF)E=FFefm|Roa0Ln1P@k zf+U$y(Nabvua-D4TCxR>T?viw9pHC*iEBm`5Ku#ltSBUmlOQ_50~-h(xJYcJcMcO7 zIZgB&z{hKiz?od5LG@#Fn26~e?qiLl1wBP;QpD9*Bv46YO*ZSF;-1dvMLJ;*I%C<` z!~dRQ@T+AaJsrpCE4FBcMG7D&B9tgSh8d!#zzF%MlX(e&EO;hu1ho2LLSpR{V^|_b zH35PaMheg<6*s6<$-)!JOPg#&-rig%4Fw@gB$%;WJ_(i*`jh$LH(J9u;ldIfdxw?y z8jGUSnTuZ;2`3OUR>Sc+XhJ)x@V5tCqw2>e<0aIWPpLlH6epBP&M1?|p@S!uO|U0D zIzGdR*XY3w9BG@ptZ(oD?T`>}Kp20--Z)A$GKKtfNfL>u`m(g!W*u%4bMqD=mP z&*-$2>Nq7q%`AY;8)8r^g&K|$0){9qqGCb70u;(;&~AiWVH{?QOD6Ps;Nj6FOD+^Jq7II7^r1VoC;2+L=pt|%;=2M&}S;GnH%+T)ukP{FAH5v5U5jO4np z1I0K)B11-q>gj^adV{9`<9*;{98o1#z|olG);q@MynxZi3Sh#uen!rJ_P{3{_=!8F zZ$JkeEQnf{mBnZbDE+VkK2eATP$ZK+9DxKt9#;gkuJz!=XI^Q?s!)@V&C+N@2Z@gG z6VSKXlc_X`mtrDagKmREIiUhY?;{r0;tw$i1p*XW*ase0v_bm?>=;1Yd;$3fG%lQ1lXS85+w)9S4;KOmW6D?^=QjlYr@J!P^*e0H4TqCC?scQLD z(2ZdkpYW6s%*G!A3&4r%Asu$2l&Dz`0(2G(6g($XG8T0Z%YUxep-W}@VU*(HWnc$< z%&MjF@yGyti^7<~JHq)Ncm+g8qOi2dcmQgAl#Pe}7=Fp_T~8zll>s8d1!PnmZj6&L z`8{)h66(AwJ1LzhOP}B zG$Vp69I;Y#679hYhGQSNK`QKZZ6>Vg%|3?ZKLk(Dpp-3Kfh=Ot85Qvrqf%M$6aR$G zxOB81o{da&pXeKIqH6TwgSd|6DA~B-293~6;K4I~QN)*i!9E$Zq?I5*3#}OmrXUN| z$f}k1{zj_-0sa^iHQMk#9u#lZDnT(2;Mg?*zDND z^2cst94@&$<7}&EM%vRImq@PFm2Yd0%0B$>+rF{WcgyE%+ww`BipVKn=Q4h~)$=9B z6KQrup?G-A9{bJdS)fOFeS7u5INe|zx1u4}9`e(6OXE^o1qp86>#Unsk5wfjhQ2S_ zS(}VDp1U5_#@gJr@wWDr-f7R*JT%^&P%{#}JIB%8T44RGbmD7+=K8OH;X&iz+UjYn z>G`dG*J}LjX!;Y4??Cf9 z@W8p#nA%0My?0hMx;u?{*ea^=aH1Bf#eh|gCK@|^R11=M?06pfTwh_i=50syZhXDI zjeP6RX=r`dzSC9~acZbPeRvLS6WP}KueV?K$k?TgUtb2Wd|q%4q3bl~EZ*p?MU(Zu z8GVkzu)nIwU3$0iFRtd0WqA^P`j=SAz2aLe@lL(=<=V-}cj}(-7YY?QX*=F8?oNDE za+iK|cdMfHaAUrIa?+VXm^f& z8Jp^u$X*)SqE+c=i&mwjEn1bHwrEwF+M-qIYKvB-t+gj5sOEY_=l|k7<5ulT&aK*& zq+7KsS+{Ce(r(pmTX_p1$I|1KW&N$%m0q6yO;w7YFFi*~Tx(C>c>ewN+1nKtob1hM z?*6G5)}B{$Tig-d@*I=Y0;$Uq3C$NgDMY;QUkl}Hq^?&L=&MBEsq5loo*CE2lvQq5 z8(+;-^T5w@dN@z|8fPh5{r)g6iDB!{9$B5W7%TUEx>GWI$t?L|igiDY--#*KG%OwU zFZ9T(%ppC0D6dMZi`VAs!((rkobR{3uNJRmo5QE{p_k|x>N#U-Rl<8~8qJpH#_xGJ zQO|e!>(Ux}=3|~8^+oBxj4fxPZ`ZZ@+S7}@4{24P$vmDCl-7MV-}!8eBnVBQ}gz_R!`Je>H|pfrKPyO+1|OXZGSIs4Rtr88Ak5WyjJbVQP*EE z|C-L-a&O1_Y<75xhUi7cyHF`Y+uI(arxe>PB6LZ8pk__oa_aXF=tzCm?n z;Pk9!GAHMye^FTSWFBime^Gy}f5^~c#qjJ=Bh~SgH+ZKJNf(c19UAKxGIr!NpK-!J zRZvlX>=*UbcYdza&s+5~JWw=GzFCs!;Y;(*)a)a7gorXISHC|zXu<8}nlk?5|GZV> zS{2@}|1Z_wOXZLk>;KtuzSru%rMFk>^(*xWXT8(}d%41pb<4GbM@|( z`n^!?UTyym>OWdp_P$iD4i=+nbI|DNRZG|(SmJ%DuDrCMlI2>IED%~;6ecYFWdZ)B z>VHtJ&lR7RQZ47c)!yr2QT&e-oAu4N>swF|u>MFi>zvrq;h&()+BBzErPYu9h!X%a`hxQC=<#T0Oo|cWvLS))$MytM#kjxw>i{`Bsf; zUH5FGb+cZdtxwKY&%U{Nqo|#)c2V}Z`lKTJ3s!Xbh_COxUA<7xo`)6s8*S8!^~vz! z>H5S9EWP4~252+<-)uBQ`t!ryi&-VkTJMc&o!u$Mvz9GFeOf;_AI@&a0luvnS7lf| zw&8<>w~E`6^4`AzhjV2%c+IW{1X_URc~LSfQQ*b;1n#mE`f3^cl?DXn?HGTvXc7Ij z1`@CO7RTGwD(L1t0T|O-^0s_U#h`PpXhQHoqwbr@hYzwv;2I!_3gNPT~zTK`E@TI!KbujQ&y{CPcNmS$d0)YQ-7c~gd#%l`3s@`u`E3xeD zMu*CT5`C!$64QIQ@kzNIB~ranxt}ZE->fTO&v`zrE3lc;Ot=s{Y>)^huhi#05f0AR z>ujiT$>GMiqQS(U);mFiL8$e$x_)8NR~yDLon<1evc(3W!i->&K!OXO;mq~nEQ$5S zc|r(1;zjS*>e{V($B1~V9_LQCPlX&f6_E01!SglpD>agDR2L}YHLmW}!?*M|lHhT> zKJywEiA|>9Z_=Pt z%M?Hf4iv+XZ`M0-OoWwH&ex|>sN}1cT`=ia(v-n~=wzHd=8Wm6$SiUvQ1{?EKI`N!>!jKjX$BNDJC1) zgd?&<3L_kz=gHo@m0eHziY^9?wWx{-k;+ zRHgC@_19IXhu&WM48P_1JmOZ-z&ot@g?H3o-!#&LVEDYELVslfQN^dRJyXTQ#~Uuz!B(@EtW{>U0{zgTo# zGb)eOswNb#vmbjaRFpBaz?z9kq}3Ber4ZbRIczcP-yg?lTqs)QxBK_Ux1x?d0sKEu zCeY-t#hXQ(z|uf6npac~l6+oUBFJjYEjmd16iV5$b`laF1RV|ovcPE+(Lh{a5(!4_ zDXZ?ck@;(q4`+F^KIO@JfTbSXP2}+l{>GQAPWShdpG8dBa9 z9JPTX84i{bTEo5|nATbugZ1GLrm<@zJt<2}K!?$&pI|7)Fc5Ei{)+}xFtr>>wF)T) z(}KEXhChJX?fU4|`p-?-l-p~>S-D9_2|3m{;kuoCq01Hq^!TUny;p|VdslG4?11{1Qm zXS|uCTq>18nY&^~ih&Ld^(Yl4#q$&I9S(U5xsnpRwh3-TAWRNP3>E#+fgN|&s~ z6%!~-b6nTOHJ@pxE)r`{5GXjTvB4=z5kij0ieDupP6Zx5=I`)uEUeBci$(gb9l%A<&MwslgmBo3;61Yur7 zK#>glurK%vA7Z2!lrV47o?J_L0;gGMOhby#SVF665HI`jAh z!y=^VYdj!0mh{S_LA!p0Jjedf>Xd3jt><;TVO*tulN!`V8gq_U$KCe zUGrKk<(<~~&o*?;3RKI^q5xXN6d@@?L`8+D@izV`9}r1;m0XkNsmnXNBXS8(ku8`k zIY5Mp#~Vpj5|1-;6{E92L-_bHpVQtm1r`X<#K&=N1OZAjEOJlwry_{Z)!fc|6%|{s zVP=rTkjCgb;z5#tq#i&AB?T(_Y^H#fLK@U14}9SLHk z738uS8SJs7I8mgrbv)5)0$?8F!2}DZq>5`8QlR74;7B;wq3~3su#u?)6rs&h43G*~ zM33@Q=%BB!sKNw7sl?1FvQ7yrjCN4s{Ksx@4QLbOQ@Dm@sR8={$3pCs3Qy6UN~+J+ zr~y-INW&A$kUU%JiN|}5R%$yw8jKKv*GofGn|K0uyw-9_R4aCfG4K>4;7#qvVf7S^ z7$X525~v{x7Cwg$;wqWkP_?mA`7%giL$7?fFmF3S)(<(7A1 z0m8BfAVCGDy;r1hFv<}uIh@Z~Fl965AtG}*2H_%HPET#vn?rE|B^0$&A`Av!RHwi8 zDcBU7DGT-SE)K3G)5B5F+=C~ThAX3?vJe|CLIeY%GZLaU|CKR7Hc^}v`!rBn3gJMB z*fcHCaT5W}r*Rab5(y%bP4Ig(cT$}?OB4cC~*D9pfM=ovF3 zWX{Db$s4R)Q?x%kAGb+~5{oAJ`Irz%Q5d4dUTAWh6u_875`>9va1MykBvbH4?&7M1ovBHbg#!p=81wLCoVcPfZ~#3%Nmw_Y z3XyXp2Z~%G5qSi56^bhoG&2OZ$*On&juyS*ba&9XfG6>|nuv#Xzqt7!k6#4RgVsQ5Z;k zWPmKCxT-+xv4nV3L#c5w5OOUpi^Cw;3>|$10PcW6)FO}G_;M9;T^auHZ-P(yqif!p z=#nxja|Ov%S|tj%&{AZfZJ4G=Q6{d-l0;2*c~nJN_c=q5;3Z=;1I`gWq!j0sGa0KQDAWG@FNmZ6t9Bn zEJlz|H~|XgP@3=@^k_m_5Ee+7g-f3+XGB6?OD}o=Q3M(h0dU07RFiL(e~=V! z(F{{cL`j!)$>51Du>!4w4-hJ7$d+;!k43Q?9y>n90Gx<>7=R~g;KV#aAqpgBz`_o4 zR2JN3T9e!leH3fhL{;fR_y|R>M0&oE#W{)*;duomQZ}p%8<;Tv`8`X z37U8W5Z)xg>I3!6k*bBUwM|$-NmkL%Rc6p526IKRBudZjgR~xp+sSdoqI_sYk#8hvX&=J_1#6!ad)ha;8p9@ID{{)hq|{K|wk5 zU^Nn6`5=!<1ml}1N%(*z&Sf9#jR|;nOuVl(EL5H8P48(IHJFt|tJn7kaS6`bMK6 zyr9Q{QbrvDGdYdl@p)!Qo)jT?C5HTk{dho18OBfDpJfrf^$-jACo^K%JN>A=XYbT{ zAmx{D0~Ko8W-PQalBE|hg(ActX@@x|iW@Nk6#|hM)V()A6+!R=GH6piS-2lyf<%BU zVhG!*8xk|n%>GXNS{UXi+*B|JqNK&dNDeM4N?iB`NZL!92$#kIBMuS}kQ-l&nKU5F zr+x-QMiU0eKpsv>v)qrKGHXl1PxOq2GpUG+uuhVskysV~Y%4VbN0Om;B!C62gb(3q z1hcVy!WN57Ke&>wn8GWeGompZ)5>*nIdQU-M^v6FE?^y&c@T4{khSuji2y)~5kbTZ ziegNj>2GFIR4)mnG)jFEkLGWnCOQ~Lf?%R#bK(Lke*^^vrC8$`0koJs2?$)1sl@^P zYBl9C2euuZceuXY&i43Uv_ssEf;$4*UbT5o*qI;kHBU%W!jRU?_cE*K;#NZfX0heLCLa{+k-r0r~0IZr73X(^EUWR{rJ_5}5EK*mlp}Jd;H0$x!CMkQ zWLcm2ksElIR=g7K6F|M=%_$t!7(8g$S*~RrkngCUn>7Ni_*Du=hgx{;&Em~@4g5Kw zaiLyctpA_XD_TiT#jP_NpHyqwC0Qj61apB81K ze$wdQSoETyPwNUvoD<3E4(C8VZG6+#QO6H12NJyHDz>TM=mZX3@|h7vci%*?|W6|5y4qYf^ds=6`o{pWLVeOms3&+N1b#X}a zc6Ns>?CLBq-IH2eHx`XbkL(0jx9T;Yp&PXj+OEWx*z{JlMPR-i}cr}%+WM=&1`hT0&TM&u?w?DJdo&Zum~X1CgZ zg+a+sxaY-Wqifox4K_3Pg>IC^61>ue>+ut(t6A)|`lVxf&FLrDg?pB<$$PW$;5BRV zODDhi5SmW8zEZDICKVa+hx(0rov1}--pzi)U1zd(`I)v){79^T0K9Zt!#70mKXnF4 zeI^n+B|F^v?_B~a<^W*-HR6_mH}yxsAedU1V=%jb>L-;KWe|^O;A>cF(lWsuO{I-~ zuKU#jJQJe7pE9OOU?` zkS@IwYDny+3h#k5_gZl{p?&y3(DMo4vxop;6pn*KzcfQua&Qa$YmxSB2Q89Sm1a8w zdTJ{=Px>Q=aiTx2FO1>_Ml;^cCNJ&L8XIzN6u4mciqnxg2Ob5D1W67<_X+y6#qDWO zV&KNYQ^vblbcF>@FW4pEC72g_nho(qr*W~A+4L`|n|0t*NDJ?u)HRwE8u$mx-zX_! zdzSmO-r?RaPNbD2W4Ec0E+qpSCUC(oyhwt$;Fbv{J#f9R)ad}f)*4W_+eLifH{%EUpgA@iX7T$&5{BqDWqDyC#^|{cqSX4gcw#$ zOCIK(@GnKNFHhp75UNm;2qXnK;TaW(%Z4JA7{-oC0DKm5SPeG)!UT_l5n98eB!e=) zpmouLHc1`ixgPHI#2@(}03Ws%Zq?Y(PG@)!5pLHNafTMr5))|0=j0Zt6Nlp8(U_if zws{P2d9@l4S3h5U?+yb(AgUUnW-0_)jsT!k174I)JsdG6w7ER{MMCTX*-)RX;*~r= zc8G{(VL0edcEUcXp@vqH+QdI4i1&0!`|Rji&rz%j`4Y6xwZq;q8cO}JsB5F`;+8#7YU3>AYfA@uE4k#^dstC)mwBPubH4tr%K zg{HjVu#W$u%FSFAM3_=twi{F6qVk2tZm0 zGh^{tfu^XYya81E9Ka}qfuyw*)s|fm90}?m{B~<)&B(R%$dVxK)_kg{TEz@7ZTty% z)_Q$zA*@zb8vL%O}Wj&{aN#pZ3i&9|O3p)PTg4cG_R z=EoY9BFH#!fQr38T++I+tytBAQ;MqBSt86vd3M-vo$J=NArZgyeyLsyDxs}4`c|pm zuB&X1YLIA&(0Vzm&~bL|Xzrk1Yt7b?3yQ3RXGb83T0hdTWVcpI5~!vz6rl{a5RnzU zNG~ZFho|6I9}$`+vTVzqb!=z{-I5xo{*wT|(I(5VV!~>ntEfU&()U4q0y&m&#sB^G z*E%I+v%0b)TT$YP^~vlkhz9W_GIU<~y|Geq(t-YH)0r(RXt(QtD~q)BV0~3vub~Pj zwxsEnjitj^cog z71>ygKe@tQ;W0=SbI42ADElW-GF}sp5?{mx zUKzA%%~pw~RfDv(E6IH|&lSZ*Kvg4kgK?7&Mz2a!&{{P@&$*RofvK4Ps)?XNuF-?@^j zqEkh>8}Y56R?MM`#CYS0G4W8I$W~&Jg$F3&>pYLgiCD>4;w=sF-m-REZ|5aBpdw5RUs6J)7q00p70fKhaD&;w+QT0w&jPo6{U?r5A4gAMF93vjqpA(goZ_1`Cq&v z5f4*Es%)~>34>l|e7w>$iZ#lwgE%pW{q&*@(GER-wWiH1GmuWZ*cjeOOKKX#DUR5h zKJ-cU*2idYsHGZ6{t;oa7b+^dN>cU^)lz?{xuA>=W%)#39%*!$8U9nviDqQoZwm{% zMV95(sbfVrTBQM!XZI9dg9&j^evcJtqH55)i5u*f$vd>C_Mj=cWJM7skxILsp&&n1 z6J2WuMLd|i=#Vdd=9SkpB!*eWK}W<>8?hXlvI`5b8cewkoopc6`$P+vPt?OLoyU@R zW?8m`K77$c;y5d3K@2}=iDWztB52BZq3At?2Op|9ZFzv4d8uS0J8RMdt)|s=8!En8K+FFcE;oc)M0SZMYj7!4Ch9bwnr`o%}G) ziu94FMjmwNB{4+ZA@i_PYG&pH9@DzT`2XK*knjDeTD=3h^`BiH2Xw=B@+~|xA z{m?!gdYxF{H9YgpJ_i=9Gbb{7TD#(N^t{%;zlKS)>A^y`S6T8xS61+e>pa$cQB)!y z3-|dWy(SYtV_NxCbd9ZL7+i{7A`^e&cQQfEQQIOZdl-wARWveWA~|h}Ps!jsiN~-u z%O)pAw{jOt^9I!d?ct1Pqymwt@L?3Wu4WdNs)SL)a}EL^uMyMetP2JhGfaXJ5)^#DG75`G(nHjly(gWwX_FwI(ksJc zQXy>}RNAsX~=R->+CRvDN%6M4Y9v6n)TM`R%SQ%q$63L8Albb;<5hUZ8= zk{As`q#@%$0=71gm!!iMaGRnhDXBArCh>qoKZqq*m5tcrh8Q!rLAbCup+Ta!NXTaZ zlUH(tK9l7F#DgLT67j@i*i+Rou(oWIKCF;%LW`-0=@^|7GpWsOOmB&u@SooNEAoAimyuI_x>&Lk~hE1$FUP*G}V!A z#C>7IP~b0TirzjEI+6$V2y4urDxOVbi-g~}i~ih7xM9Q0_0Wn#iJitt#>1h{v<07H zTlvMOV|YygBWWGX#dzf^*+GG!0}L#R3xX{tL?=^z*G(b>a?s*7t|d8vh^r~ectWPS zTr%k_#a#5Q1d8h>5AlfM-v0{dFsbI_Hgrojh|nW;Q6>ipIicY+%8iyWHiT!g2NE51y(UJB0@YHq$D@d3y$^6 zL@wblaG{!B5~e_vZnM0A1EMNQKrIm^;ZSVi1%fg@ID1XLX&>9kUbLL}U|^U`{ho3q zb2rQ=KJ+mxePs?Rti~3I(<)(9T-+1HQfHWrdWA(%jMd{;92QV;k&K~@5wziJ5YMZq zvFh!6{}*g>pnt5t9FKjlK@EZ>ufaN~@r{)2qKnAnGZBtY(R^&fX34A|CJXUGh>__3 zZx@naQ%C6rpMb_&u#wpo?L^jm_@SD{c=!Z%wY9c!i6lRq`V@C5 zFyxN^C%zWvLQeEUkAeav)r_pb%2)^!sSA>^ z#57*bulOMh@hhp@GufMzyHkLCq$?Og-F_$N!*1zf&D=e(DU zbS2V6!&%|#MGmWQ1+Caw#LViIkj<_}tEiL5J7W-@z(Mn@JjCyWRfq(TOa`EpPYEy7 zCMaN9uw#OxTgC^Xq(d+xiqeXo$z^<9z&6)lP)y2D#LGeh$|-k*3n5leF_OOlI5YjZ zja?Jw+GeC~vU3cEqxzVW$>m)z1r+gy#^T3X;+Y2MhI^#AOq~R5ho&$il3NlPMN3_U zpzblQr2b1xXHUan3Kp0EZUjZldJWYgGXo^1YeyK0#a?Dn@J!(;<)8;GLNNr-#w^~F zbCOfxO!jJs`fZlxk^_<6m=LdSso=GoJm~5Eb{<0iCKb_jPKdrnJzLrP10McgZOp8DIjNo(p65Bke!-^ z4(K9<9{mCa>Ckc=mDqOpElr`0whipMfNJf{6mPQeiG^Tj}4y6`M<>?h)+jDkpQg=tF19Hj;#0$+>>MMPwvcoAAq$h4pVOrn{7-i?Vv-WQ#MV$#$pWuVWTgl-i!#LYsW@L_nsm#-2EIUnI^p5~IURaa0WE5QqW zLZdz?O4l$ilqTO{%=*puWC6(8Cx)jV+H}=Ciq5m1$%0vv$n1qyX}hryKa$V!$H06e z=_A1m!cu?>Nfb@un4IZ(mvS&=is5;53KUpWGgCfuD>P zRl`(UhGqbWOq@-1gDqymdg3z&s-68j|C(=rSqfaypr@}4L@SYkVi5s2eiwa+BVrV9 zG;~Z8;L@q!P6Mfr$j&9Sipj(xJuxRTu|Z-Lt!Yo&1P#i#h*w!`!mp8G%sc>9+`ue@ zyGncz;Q+#TUjPyN{xiU%orXW~IGQFIeZvYFga-N(Xtd!$YCJlErj*kR3J`pk(IHQK z6f}e(9?HG|BaWubhS99?77GCbhvv4(sHUhcS=102S{0NG8slaipIMkzh2?c%lOVxa zmTvHLvI3VWjXP=Urvs6r7alncdtEci?f zFI}LQ2@l(_i1IJ$5nB>Hh|juE|AVtAZ2Oh)>C7u&VlO2^L=CuDF~Z3~M3RRH2QR&3 zFBZXw`V;Y@0l6kKA~`qk0yLzUD~T?%9dj30XCeSmVrmOOOvo3&C`&Z*c#?FoTTn0N zitVn6_cWXKT<#yTTM$+RYlH=y7#k9WE+s{bLO%pa>5$Byyo^Ep87!ePK~5-3n3Bo$ zOc+E@_1=ZbjGSJ(HVHWV;gY<=0TTG3gM-Pq{9oiIH{ipZ6lLh(jqrfo7sGC!{u?Mgc69z`=>xoaz8b^%)lyhuKD* zAa+wEelxL2odHg24DK)V;4%S41`*L*kH4ak7BSn<* zOvGYxVM6SQk`xr2MVO^fpQiXsV$_Q=_@q9RffI^NVBk9VlXf%BqIM9~l1yAgNC9YW z#~^y4N+vN=1mU{efmXOpip$~NzgL23q?;6nS=JT-c`{W&GLiYH1#x~X+zL=xDD)Wx z^2O9PFhY=oV}j~sk{o8FIZBb2sE6+}on920V8!0BAwI(vPhvz7+6Z+_@6Rp5m{&4| zO96;U=`S^hcp4jL6#>Rrf`DpWR__^~dZ~&sCDH=(y??KWATbL7Z{jKcp>LmvEi@3% z;Uii6mDRP7`ot$TQ!OwwuSuK&bvC9kKm$teCDu4YX7HQ>jE$Of19~9iDy(oN$iSz# zi{nZT_x`t|8)V80iwVlfH%TZ!pg5#cGz1u9NcQm`=vtJ{^9 ziQ>G9FS#OLGD~JaI22~Glts;8N^!6tqVr&}nntLX8wkZQ4_^HWg$(L*y7D7nkucKf zmt|50h4ug9z1en7d9#>FQ@|>0u$ceBj9Q80&;Z=5NK5g=%x~2vv?!kPJFXC1@@_U{ zX~>~vvC!wSJpBqe5EBh2hO!TPqshi{sVFQYaUQ{ny%*n@#B97#W)T8-npB|!*O1tg zZIKfRIf+*hl(#2bVHaRAECeyOc7{X;#8P(aOEA!)2>&TEnJjK#6!4=MWnRSOq&PNW z6qXc&bL!#ssiN`DJc`SNI}RXJMjc`~$4k@(ai;Jo*U&2t+*1=hBz+}7GZvX}EB4@r z1K~JmQc#f|UQ>uj1~t?xT*@3!#Vk>IWccnx~tBJY@jxG9tbJfcIgEC+)`MWaubm|01k zl18y3Set<d=k!QkpCYp~lalK)8fH|GQDXjn$-tlWoW*p9^;pIWH-9; zIS;@QPf}+}XEcFV)a7B-fL`c;lBoOt`*>LOm3Szc`C(sHNaUhV&ZTM+C9@tU4YPzS z$p)|z{IWA2K#et78TMEKW}%rS1$d6ED9B_)A82Apky&r!#*XF!d=Zl1B0=BSiO(Xc z_$h)KS-)Ter@S%A19hKxpK`=#Ri7mo7zErEbP}}ugLSSaZ*iPBHCUT`V_S|&&87In zUh)`*fiI;bfT!q4dC9p`CP+IbJjr5csHL(rN+}$eqO;y2L1eW;2uM8y)OhEFQX2J8 zl3;=}yb4Uhk^ZjsIUAD-5DEy+Mul-UON6Nm)ufz9PfLCr$8uv<@wsdYWdH&S22{L& zj?k6F=^8ox?fd(gmgybsnEV7zbOLNN64IWaL+I(j%wA~PZk5C0!~?*nA#bshG-_xA0+w}0@s`w^r-ahF=kkOaw)42h%! z*+>joumfh0n6_bu$uKn?QwdSS%Ep2cC;{rXf4JCPf>`Vy0!xZc-~>*fgie^2X_%I7 z;TG(GE!81rzz)?RTWE%zvMoJfX6Px~&|!bSbG~n};6KSTopC$i+qdVtf6qPloO91T z_kQ2|?w93-oYlojGo|cvGItu)UD8O2HK#^-j{_ZCmv0)9T=8gxelXV^S?aNr*p5D3bC;>1=ogidj~g}DKtgW%{$t{ch~q&h3+9HBWDZBfhNG%x*1(3G4A zwJ(}WwMaXsi{r>vH`zFXQnFibhOa3 zuSjK%ZF`p9ne^p4PHL5C>X?*?!_llHE@^yJ=iG;L zK%^l|!=}QgL3B82qRPigWn<;4s~(OPt2h=jM-5F2AepjIaocrE=Zu^Ajt6t?q_dIg zqQWQ+)x)qglg$d*(Usep3PQFiXth;)BHI*?8m!t$pK2+qjJv79vkP)fUta{NHQAiq zQu>l(C*-mEpa!{+7nzb!9~>%nS4~k~O3qMKN8W0roJnCc)?D8R!vXO*fA<%+q-89Iy z?Je>~wgbj`duz2~@>`%A>+STlddO>aTK!)5jP;K7wuWlG^`iR+ZU5WNR-@DDtu+#M zBHZbW(nPx$t~YKdCMWB+)XGb{XQ1A@X}De=TTg01r-=GnePg}tc7K0=>xSYN>&4QA zUay^utsEL?wflQ}TfLojqZiW0MmN=(Ba;txIwO-yBa;sgwt7dlL)^&r;z0D^xB6=J zdNKK1kk%O;-O?(^?zIE-q8BpxjP(`=U_*;;HaqQ3yRX(`a-i>pf1P%_Rco5mY4o*k zY7G?2Zx$=vV(FD)c5g9tQf7bzR@dv-*JP-yZ*+!Q&E8`99t+Lxy|Fb!%O&fq;or#i zTUs~t^2tae`Pzp0u%OKq9#yQnrPdy(^~j^(cdJ=^vs2vJrX`p^UhiqsJYv12bse;{ z+r_tvqx^LzJ4N>a{^yJCL&ebs+$bjh1${%fzo%Akk?!JXD9Y%-cuyTx{{G11GcAH* z;tC~gwQGQe>VR5tRPe2yTCGEW8y(To6ydr`00*vDS9*Jk?o!p+;s6*LEfs2H@&y~E zpJ18%9=HrP=t(H*hU z6qt&%k*Q5KFg20|zLQxuL~QCNh_6eqdQ>ldu5A~-KQeV|RQZJZ*eRwyVe-_c`Svnu zR=NS3gRSORvHW72|3~=XnTx8M9{-VF}nui#(H5|W7I*n@48m2Sbiz0 zMwP&Jk6Cvy{MyBxK!gf!iaR^4Rzod2unW~+m?#$RFBbL`3%iPwuNMp3iiPoF;iY2X zo?^Po7ZrZ^wPJaHu{2aH>?;;#Y?q`qBUjnk&=NE>M&WP+#zS^bF?mnB*l#oYi|(^f z*&ZDrb!qDuZM3g%wZ(Qouyj0B$`LivRc+c_kmhJ(tZ^fKqDc2yEDNKx=w32>;QCfy zCRdEI38MbTO%VwJG&OrQT=+5ZMo=7oK z_Dx+MzMUnIG{pwiUaaYIgd5k7P3UqeYs!iN5_hT?dufiDC8L7EAr5*?wJv?mNA1= zDo(zEHXZ02uGg^by#p0_FuCOL%kVR(z$(&)LDUCv9?pD=7wz3l*?rJm~ zQ@7_>t3tsjQ9{tA##rxSW4<4K{ew0$c(@Pr zJ9zd-WtYQ>c3;3G6kRPV9Q;n3se+k!>gNdH2oMPE`+mSb)D|(nLi<=xoA!IK`Ah;m zCiI%n+rwNFvzH9+H3zTd_h8V#0Q5I80Qwnyef_PLVLrjUHdFa}tPv&Q?xxmYBt|h% z*9Y3IzD$w(1LLjDRsI+(9gD9i5d&t61O1pPrreRKzqk=&8v{8^p=&=$$iP5B-a9@c zt)a0#{;K3Y2<$f{6Z)`aO#8Y&eJ1rma6@!>AMysijW^ox4bpWlIuUBf31mj876y`; z`zz$tdzrlk21X{)7D%6uNnik8VZ|^RJqTe4Z%&=OlW=E~>{Ht(F^rcw8lf;t5e+v0 zooO*TRju9{qM`mk)sZ&#qOB8S!e9&Uto%TIB+5qvjvd^Pm-}!mD5}9>^f*>EMRyXB zb_^C%gK8J1Yw{*LOZO=EZ;HuV2V>0TL=z+VLTL<_o-%9YMaoc8t9xg0`W^`CDW-;s zsm;Zyy_P@u#z(Nc6gz#mI7N3~E~d5?Q&949Sv|s*={_S%p!n3@;^BLXhwm#++=r)9 z9JsONwC;GvNVG{UrpJrvVXbiYh2r76tPm-m!;-B$U#vV=EUgwxPf7I3OA#RaRB>Vs zlL>7gfQ;^oA7#cxB&Y6*cE77lOv=;XV_cRme+HD@C!}p^FNOsI_ZQuZn8mL17}H!P zGUHuBP@S>PCt8~<&H?fl+6bOCM?VBZzjfI_`Y2s^y+9 zrp_~tF|u@lYs@}ds_Fj>lYr#@IwL zbzhqhoxnebeG+le+=(*(0NJ+|Q~M*jUpI$Nf`#JHLD83~7J7-6JR5`SDLcSST=^AL zK!^(WlGb!;BGgedcH+~m>)>oeh(naq>vtPf^G;jz3b9OV#@uB|F32IO-ylVFYDVgD z)7EGf$stK7T-eht-No6xD)!P@^CoY#5-rhc_er626bFV?T_*OJo1pf)9TP5F@&I}< z@kx}3X!x1dMjKuZK_w6ygj|wG8p`@)``ZD=(5+3S%j>Ph>cxvJ@x}suav!hSA*bcAUf` zrz2GnQun@_u1Oik8FuoFzbb%>zn+NizaDm`6|tlynyQ>8yW^zWz;$5B$X_m;nM;u6 z3luMwuPEt}Nv9ul=|#pwk13-uAn&75Bm6f=!IE3de%L{(tL2x{FCq0(mAa3xc3sI) z$Y`axmt_8(kt~BPrFxY*dPi$>v5aq4ET2Jm)NiDgFl;H(ec2e7&`w5lW*)emS`(-& zek=l5en~yP9{^V@PZs#>gS@+4cwwU&7<+E&J1bIb1j_?jgSiwzq~$b6_{&T38Kw zfPO;d)J{{T_Aor#V-1Ioopa#v?Os|>a9Ajj@zx+3%pxGT*0l*}vaEKStZlRhlbY$?xc%VbUztH*-O%-f{6LLzuvDe>aA}6rk=VX-bZ}dK!#u`;t1)fm^ zlO#z~6Ry`p6NBCk)6wBfgDS}J?hc$zHmE$z^Fj|Wa5D%ORh@uBDjF(Hl= zREjDc9EV}JFTpKrOe!T>!FZ1W>MV9Qnsgh;b8<$#u=_c$2S;OuFL?_yE*4X})jmd1 zYvBD9i}bJ=Gjb5Y&$76Sh1ZTEmw)UG&;#b>PIx9b1Ysp_!uWt$;X&fm47n`tV{N~* zHRiKR`0({&_3r(xTZ`3w%;FBIV)=Zrd;||M>?4UWy)RwBn67TK{^~)n0!g3?FMzdE zoPNHTI=2ydIHSQDOa+XKY4cnsR!~|+6N^bn+>UEvU8XHAX!1GfTz*X5x+eh#lr4lVQaC< z_r7A`N^JYw%`Oj$d!$&cl^Z_`>;ZwDEgvzGGkZLwe~xv#)a#Jmj>YMWuwaP&N)nM8 zDQGtk7pd=JfzoPKfS^h=PPf!LqT&P+})e82{=tJ|ec zg&jG4W#sfLBd1^e4EtoWN6?U2e6&Nw?D-B^2z%l6;=#Mzyrm2)q|>jsYOIf(evR>I z;%mk18tcuG$UY)HwI0eCv=)*9Di*uKtL3pw7 z^iR^$losqnFOZh|fvbmADTqgg%lqAVhE{e1*%<_iJCtSV;;*$nRn}kGs!%Alyi>UT zUD#eM?}pPPkdL_Djhn$XQ!CN4twk>=PdhU;CVrY+x)?oEtV>V1bFfY*3zLCi7UOP^ z7V{UvftkO+8h6tmi{MS0Hfeq7-|`X0EqnCfn_UZ$z0Ul=EH^thavFQ~eC!>uIW>K_ z9SgQ+B^Jel3rt_rTN(M`3SlB9Vr_w=7@VKp`B~;$81ATl9R0JoB^()y#+%yuOZ4Rc zxy&IT8n+Y6M}*V6T`H}(;kvQ|usXy1MNeYUxlYghICQb)vrdmVe~e8k8$8cWT(SC8 zwDwlCR#I@_+E&F2jnn&F%&wj*$H?@4r=;nfTD#SAIaLKI*)#T6G0k)AO83X^#LcZu zYznyJ!`Dl@r!&Z+aUui+k4$0VXF!! zYQP{NL}bC4rKRey{*nM|{3GS<2d znz0!D*5Q+N$_pHU$!H2Ye$dKwtiQkAk8%xm(9p5|F?3r1zng^mxyRCK42Hjm=CO~e zvdVHu2AavHY6G^TFjR{qw-miO5;c@zib;{Mp_L+|G9r#oVjK*NgY54O4)&K7C=_B8 z*&rKZSzbJJp^V(nx_)B?Qmw;=V)Y?bwMx>K){XBdUe@TehN>Diuue3=n_D-%yG~i{ zy4I%kYSz0-CCRt6M&GkyS$DA22Z#BSuSh1sF<8$Byb$n3>|)y)VfxCLmzg86*D-yC zP%-^ll)1vT0$PPt&3_$abj2CtV`>#;spwY}@!v~8{rFgGkX_DV=3c(*nd^nddT(hB zuod^d*_aRtm$ zCyVJf_(o9!+_7N-HGkS$_j&cLX*>Kh0jyhUf=`W7q21 zqK;}utbaGO`so|iAW<0P8;bH~^yaN%`Yi)9cqng47l94mDEWrey)*Hx;M(*XOf|vI zG=BE{Mz}Y9g>QooeB`Talf5!Jq*HSlN>2DRW4&9|&8vJQe3g&u8QsO!7mDdC?~$`! zgaD0Ri|PHM*OXHw-tT)&!HtE!#zui%eHXFsTVrEw!ar2G&#)2u?k3)WDWjiKao$DE zyNlk=GWgwu{{Y5@_FhSoQ}U{xi6F6W4qwaywB>*4eb@b!;M zS8sD|ZEg9$Vo`Ei>th=WiH{HVJP?)WEXm9rSpoDOZS7XvqK(!JQivwZ()vW+w9^YO zm%*j<&rS&(?C#DC}U{Ls}ZA*SUI#kRs`(v_& zRiic;?fF;++B9=-*}mG4T}r)(LUAXZRD9H#VJ5wHla4a&%$Eu7$f>A1$V#_vAaiRVkdU@VKhD z*Y%>>wNI2CE)i@jx1nU!%u~h8HQ%cEdpA=SwV7K>$E-?P@5(yDEl6=abz`V%`&=<| z&9^G^-ffpfH+Hc~x~7$Nq@%4(6~=d8D=xi@e2cDkp`!F+F>}qg!uQ^kmPI#msY+U> zbRFRaSD)1$EBeG;wftf+bItdITP}-k5M_M-XK)bm1`+?0=MK>^FJ!!p}b%g8;TxCQVs+!$WJaEnTgPSdjZs=WA zyQ-Jhb);;UY|N=z-Bvts&9^G^o;pT_1I#N8qvB7+H%I%m~?lRkO9g8rF@xC!PS_YYfdM%oN>R=g++3~8U{WGmCn&@{q zgMUmnD*WE7Xx`T`+FAL%?{4vfQ$Et#oINZ%nvuc5ShxJ3hVRhby;|slTUyV(H7DeX zHSf`8a^7~vgoq>9|)w#BaCd4N79DpI} zYWs%7R%A-g2s6eYW%R(C*)D(O*O_l_Z2>hSD%aqag5b+{_JL5J6quGQfx z8Gn=q-+#Krg7-=>%YC|Qz8~CJS(FhmyTcY;IY<3!9W=XRD=V-KC@XwXWj(_c@a#^U z%5-0N%#qCuzbv$8cdmbbq_wGZch-|O2Ab{}gCns1)f!Ey3XL1>NtrkBV1aL(|v($%0BOh&93qMJ}uAP z9ydbD{JH&hd2TBcofp3Bud&-2o9N|^qz^0hw#S=1Xvb!BJR9;X99TI>Bi=RWUW&~& zAEslMmPenLqQff(&|<7n`yT<9)?+qd%E3AaGs)KD(3IU zSC!et!Wq6&ogp9H%J^6>wv#Yu{R zD8OBxe2`~u|5)!$c+GRS7i*h~V^0_Jw-P9^~u}@J!1#oTaAVULDm!A@;UYt$-{1J23qhw#n=3`ad)hIR;+u;J54fhn+z;j z_j#7q!8#d-WP>@$I60WCJGNUIjBgq1_37@44d%zgW%I@Sb~qV4_5Ll7wegse9JL>m z=i+?@r4_v8%EHvXY`26o&eP`*#IroH4p--k)w3~BRD4=@M1jyHXD>`Cj=H8g8tk#6 zx=AWpGq;P*dh06_o+ZKiZ7jE9xd7v&IE;x-O?N*M%8at|jifSkeYrybg;ZUD zx5a@`?ywLq=3e)EwFP5mg1Z&1E>>fhQP7oGCFSlfe6x~+TcjH4*kS__Ei=I$=$b}FseC*_hq zh~SA19)(q5=5|U4_lR?Yb@oZvUtA3!HKFZ{HS=$2_%RBI6z41IMcJBqM zS7EGdhIvpFiR9yRl+omhtYm87-5ErBM?($-r4`Mv6LRG4lh{PE9%48YvybzXAQaFm z)rXp)4>2~6?GCAK7-|lK9A{~B*Y=kj`DTWVmw7xO!HxA$-Pyf;DYou+6-8_e1=^Tqo<%4o za|;i%>w_A!L9b~f17W(ShkP!8CnCbP*a&^rnuitMkv_A7l<~^-DRa?gzNoc@T^*on zYBrBvh3MajXNG6rrn?_yqpKVmB_65=s9da++AkQ?jc}C{GuxcPPS{)^eTAD z;CBfZG7uIAQoXVlJ`-CKbfm;eE7*>#K$6M>qG&xHb>RnO=Zl3440L`w5c_SGRUX_t z3gJZD1m>YCOpNmDG=()^c!{~udT!zAu^GhWH_7tx7dFT?!<8bL=`)c!9N?FKG25YC zr9()9V|)GrKXqV&zhHJGT;^wB&0?NQ#^aZGQ9bO}{A*Syv2SMoH?=SlGL>ve z0=^jV3WP(WM!n6jX1u5ZjPnJQ?&%wG=jj8_PQj@4-XcMk6X)z(a)wn@21rWX(@KCs z7u#tTTo%|wIk}U54$UE4$M^!j_zH6p?Xm!Q^_G}6wH{NMCk|ek`4YGYCq1EeZ z6SA3MU%`K%R{p__g{MK89VF3&$BKoup%!!pgZrsw_vxW4Tw9by{z{q;=}fZTor;B3 zc`>T&E8}M`%(~vKUTj>dfOYxUr1sMt#BvPKFbTF)7U%LQHZQ`SOV%~HM5=-W^)sy- z%0WnDzHpb1Iq~eDkt6_187=!bSy-z3uR1Rahx8k!hl+*L%#~zpb0rQ;#1vwyaA3vCbKZ9Kb<=G}pEA-$dfZkBr+ct?(A zS}Z)eOm6&G#5p!3%S3veg8;8Wk#=A(k{Z*u_J>xiJrxB;tVS@cR+~BIx=LKZ>L{W- z8PSS}IAfn-k~}Y|;b)YVDP!vtzh{8)r36KM&vNhnIoDjpcR|iOKMI z5kdD4oOUuHpK$ACj=UkQFC#~(2OX68NcE6Zq$;xP%*S)EWD7fB*UB_msu31Nn%L**l{skrVZl( z@XDBFAV|CHGu+pv6O9Q8k`O!tNV?q`tvcX*VY`AHUt~vrLUYUKJk8zGy53>7fgjf6 z<4o&sR*^!?SdQG_qj}{zJIUff95X~3f5=ev!C%v51BgzO&o;xtd0(ZF#mI0l5s94w z=){wZeW&GnaWZ&ZD}M7#U2G(Mv1Fh^4SjyJZA~8oVv?^H58bX;KnVz?a9J{P!WVmJ zw_fa^=~S=!n~2&zoQyCx+{hEXSoa4Ex9p*C(H^=#Qo=2JDBQA#4)Nq(7@Zi6WyQlF zt1MB4EIhY|x`ALOV9YiTos95f0nfxnU-`o%`qAQ5D!xm_-`lV8%oO|J?7_U1O4o%l21fsKJt(&hBV2GT!1PrZ7&*Y(VK06tzA2lBr&h9B^X&nmZ?soCeE3nmp z_&AH3xNl#&9#`B|Ex#Ky74IrWQLOKzF@*cjDdL97ty+CT8Z$ z4VX+~uN!E{?dns!Mqq1k;z)6#>%%5Ikg0uHW2kx=CQ+B|yJh_V|x-Yxon6^>Sx z__ZMPZjV0w8*81KtMG~P$2amshJbVHRi4Zh4_^2|Oko8*9E^aS|P8qj8_aCfz-WkRj2OL&SQ&(rcd#MgbQ--5>JX2CuWomU%2Zxel@VTh1{^TWM{^yD+c&&X~3U= zUuCrmWr36d#r!GxcZ)z#JTflF(Vywf{C2>dlkUs@at>`lRZbl)mWGiZzhek_-NLOj zJwJak10B3?B8$C-zfDEEmp@KCY71hIG%jUAb;Z! zDi^N0w{z zFiOwDb5)P|kqIacSd-scl)u)ebB5iPIxONWXQ9~Noh#E!V7h}MR+9`~ILcV`H~+C2 z4VLof%CrVs`58W&(UIEiMuQ~Z&M)uOnHYL8u4Kr{?r4agoL%6z`LH!#1u*#ulOwH4 z)>9>Eh}Azmx!}JDPOYIyWX$RrD7LT_KiRs`w7o8(Pd(vy#8Q<5|7C2W^iwd%=AA32 z*t0#3MJtU^zEx&rNBrs^1%0kK@up=?trn+VjQ+eFY~VcsFPXTq-Cv%>zMM!-b2n}; zJ3fe!8576sOgUB$RI?}>q-^xW+&L6WL$-tk*_&A z@seF%+N$AD|AW;C*jo;)QB_ZW^#Ao4(7}cqoT^4V=U}v!% ztbR2peKjdn^1crt#q2Ql2Y_E{-JtfWNc@t9WhYXX*=iqO>>}@ApqAUV$}`RS^k!~f zNcHl0e2y^gF}hB@uEJ*(e(@vwz;fz!1E(+>Tirt>K#3gvlD-AhRX4U2i*Tjt#`I=y z0kqk|;9Y3A9{$GLB>+WU_6F$4;#&TI5d(m|@dphgQGRhp%+9RE7jKspBa3qz#fy@)h}~-g{a>$^m9K%UFY(T~ zgAo>M9x|v%)i9#AK*}6Q=I98wXpg@rSU?U8-_*p{9=vL~*j9Ce054<5Wo z@PMuzTcRNqdVRiFeBJJ!ySJIFaL7y_sBB-VFN={!V*Z9e!9rZ;HxcIVQb`E7f5S)mee|rCMhGNAR zrR`QY{vmc_>Qz`JJABM{afgCfJX;FW9{7zJ!tUQ6B=9l=d&l0Z)VjM8{Z{_5u>xf$ zC*T)%#4Cs394&(=&`tAO#87vpI}zDCp@XKw-VG7%8Cs(#I-Yw* zDjlBNO&&=|;N(`Z8qLiP8jkjKm>Y~6FF8^U!=UM=tMVkpov z-CAu9)boZ3b?P|Efp4RU2{R*)<1ehzJUypmJmkB0!2vm==}fzXN*RdzR$2e#b7_fU zhCg{Z79g0a@HOGF&Zl+W^e4Pxd6ShW?(|cByDx9a{ZP!h&w0pUB*l&qBMuFmgp_#c z)g=4Lad!<3z*}ScGj5|)M2DL0$I{ybLgMZjwraoGP941i{5)x()6ZKV^LBuD8dN4J zaoOR77dDp{_AwozuS{MuV%522P3%lWq3sr(yw!obbTPVttLcOpj!uqTC77NtV)0&I ztaYN4;s(J6w<=gdqfrUN$W&`3yiwTxx=U;>?V-wYAi5jin0 zPx{-~b`QHOJy`6K$zNd`fY+x@{dU`*pZ^MJ%|5RDhP=(isfZ%{eBT#*Y0*X|zebs; z@;kovwEKIQ)v5209BrHpc+M3y<6u6Bf1)J*iO730;CbedPMcTIH1+oAfkt!r_6`~k zS1#yePy#}E3<+ZUiaXuHhKAm8-b*>)vqxi54%a!pf%S6fCoDZL14{`+&Km*W;+9SjFNcqYjiFt9IiWjW|6(Y?qSr7vmszEsG_{6-URG}fc<)#h_FR}D> z21KurcJlR@$y_$E2*kc!3d)zBiW?I#?!#TB9UF%Ts;D-164X-IoU7MFITt7q#>gWV z0@2E@WCibW^jQJQ^8aQ?d1Y^w*b^F#BQwcSe>4*8b$YycvI7zv0clWy(e#!rqNw_+I~umnv@!;Z3}^pGPIo%-uy)%6n97q-3O8A@5GbgnR0IaCyg77Dx^JxGGyT=TvA|ae6%IKE18Hj+WQm z<#jmPfK}`QL{CoNuS$$z0-n<7F8O-DvEuaBGWT#^AFfKT$`9Tdkrzx@tFI?Mn_cS= z&kwf`Np0WSy5(w`Ii%&M48(g;+dVh?MvD0GDAqe}!ra#S)CR<5vGTPQeNw`wul(3( z4>pEdm{mcpW5uJ78NDfAh8it|9a=BroiQo$<`v3wtE34${-8S^<1O7P|eURb%l)qmm$B)HC0eR1WF zzcbGlO|n-DqN9vvF6@L+cA57pt+{9GHj~h23e4PCVneq3M@(STo4q5V{om?0-eZMA zYg`}M3Q}q>Zh@DvO(2UGU;DU=#{I62*#w9Ma;zO#Ah^Vig(UMm4mT@GU52<#vUo;L zW9rr)uTU+@nE|5&g|&=FiG7#55OCIo*&@Ed|} z2o4FpDfpX$za=;<_?F;r3;vGah~TK;F2TsL0ix- zsMQ8)&9~ov`!}0!*J`zG9#=8WQ53fa{3_7Ha)e(B_~n4N)doCMWSoD_UHM__T&=S8 zn;`va?XTDFt9`BZ8@12Y4#$Zrzf3c?*FHz;LH^Vxo}m`(hO}m_3wV{p=D&f|<`Xvn zApGs-zZ3kC;4Q(w75v|VM`cc7-M%{D7DLwy#ss&R_NOdzrWY=Jo`!eu|0Q$^R^Iqo z$jU#@UHUV%J8OTQ4i{D8XG#3?oD4D!VKA||8I+y7YQI+d)!H{Wu;UkC%r((3)P|~D zkE-eXY;A(Rf1QHgpsydb_1pOOV37=cfvZQ_wCRbWskMKR&w9W}w<}BkB>&XLZu22@ zzWFRes=4w}z$In$HaS81+l0!%+jZU|ou5o$JVwCOvdnMR+SH6srd-AIb}LhUbG`7} z*O?MH4MfHE|MYkM_3!&h|-tbNz<;jrCjV+v=aLf2RJU_3ib~)<0MOvHFhs z=j&gn-&WsM|C#!qsoz!qOZEHeU$6i5`b7P2)PJM?jruQfQ@znd&1%gX1s@UIB%qhI z=FNg16YLOtUchlhwdQRC&cUiR?+|=Zz;R5qCWr0Snw;QPYyP<4D}tXAd{wYV@Y8~y z5zGpX3FZa=nczPcJT3S=!G9t6F9qiXzc2W&1pl?*g5Vj!DZy#Mn&1(^qk?Y>76cCp zjtd?VoDeJumITX!6~U_DVL|;opdsiHNJ6t$&?jgK+Jb(;fM8HCB-kYA2(A+h3q}Nm z;CjJk!3}~N1s@S?5!@vBTn+G1LpKXX1!IC+1RoQO3vLyBT<{Y$z%Id`68vewPYV8; z;C{gY!G9?DHNio_uL~X%{FdPF3jUtpN6rJb3O*tDq~KG6ZGuk=J|p;1!FIuC1)mfA zm|%zC^MWr3zEcDI6T#zx-xd5*!9No`A^7Kl|5)&!2%Z%D3&DRX_?LpG1pi8K+j+q4 zf;$9X6nsgrQ}AWMj|+Z6@Ed|}2o4FpDfpX$za=;<_?F;r3;vGah~TK;KN9?=pevXZ zObMn1GlB;Mvw~xSIl;VOLGYm9xZokd3BjV^q+m&~ELah&3LX}m5}X#S2_6wVD)_eG zF~M&M{;uHf3C;+9Tk!V<|3Gk7@H>KkDELQ$bAs;({;}Yn2p$*wuHc^v{+XcmOMr9F z0lp*n$AW(%cwF$if`2Ngy$z@f8iF2yvu(3iFf14m6oTson*}!j>OJ+|dS88a{VVmK zs(-}Ons#IS&R?$A{It8@>B)d|gtJ6@cf@P8TYi;UX zZuv$`yni#`yR$#~>$P8@?4dH-!oSKq{WVfP`fFUi1>l8e|RQ~naXRdA2 z14{3Tf?to?-=g@Tvgo!$1P@YkoEcMmlK0n$*>E;{fY8C(=+%P13hgExq=JRNR{P{n z*Y2+Eul+m?eU*t%gg5^VI06 zaR?1Z0C^%!izm)&4c-ttz>5)UjUiq}$&2r5jq7TS;ac;#&m)xQz96_waJ%3R!50Nz z66_RwS%4twPjg~Ze%iHe6(~bZ3hB+&nWh9}f4`k&YTvIPtKZzLA=~E1NNVl{)Zc2} zXSmC!`I~&2=lL{$l27wred|kqw>kc$fBoOIKmO6TzVkoceCg)qfjVXXk`?}(As_Jg z@t=hse+{qVr;ye+Vd1aB_picI1uauQhq%&z(Hr>%Qhx)v{3_Sxm`EP^*3@5W{`UXz zy{|W4div(Y=Kt{ff91bz|4#Xt!W~lJ`hp&>muCxl6r1M_=GmkkcjiHId1PXBRJNzL zdH~uNsp%n=93l_h_^{D$Rq`^3X$1cC`(Udh?jOJo3#W z{PF-u53iIGkCOCELyw9}n(~ZK4|2<6DLqut!`Q@}t$MVZhqL7oZ5|)zQFGSLBfLH3 z(4z^h`Bhr>j9^=_A0FIhNe`^^_&0HQD5f<$VAJFGtmmD-wr&v7hO>TG; zrF=3y4|??UMJezIOwZEuOg*vZ0f)&mbL3|pqMpa4%Q;WmvqiZkhde+~$$6ZjobjkT zY0VRst3woR*;eekxRi>A?d6Hbx9J6ap*9Vw>e$viS5Lut>Yiubd7hqKwo{%xs?e)L zA@iicJUP^}4Q(dLl(?@#aGtfPFjCd>OvgOKFpqkb*(#0aeR`FhcG0%&wv>t4ZrEw- zD%w;%mCMuntmOf=o`~pKik_?J8GarJod?A#PD}k1e^TdR$TCa?kZL*MS);a^qVXu# z#FNUGROh*Y3PSPQwqg;xhjXfs(w9`2TAgR8S}7iJrNHyNQH7#V^9XGD;K7>K@&rQ_ zHP1*@r4_fQ5_ol&73g(sD$8 zSwj_+1J%i#o}K8Kk`4q1s|qR(j|xq-b7kEuBdDp2Jy&qmDF^5lS9Kc?;ub9 z=TVaO$Wn4vE{k880qU~0IWRw}lvc559xXjZErPPr-{z2=d!;?7Z;ZKqbMt!Zbf zQ-YO-n6saGmZzGK=1%(TgU8qAnXqXya^jG8nqf!1^0WP%x~!cCz&pM_4>om2S*Lzk zGtZYz^Q~-h%CaA}YCq+Kz4E+Jxo#;(i25#8^&<~O)dqRut!+we^2M<(bxPO+d-DM4 zoHE6rb@2F9Wtbx)C1^h!jq<^My9|CylCEjv@6@*+`94C_l%r6w0NX zh8(S0R!6AxI?g=d)al3)sgr4|oj&BQmO-9bP7A7hwf}046OkM=UA@ub*{a%+XW`nC z<2&h8*R7X!FXsz2+R>$KttGdea+OwBdtu%c8&w}EH%e*C%3dWjsW>Dhvk}MLA}zB zrdCU(+)&ba%(!D)>*HMIxJ#R$oaD3IbTnw;a{ksHX(yDrtttn3m#13Wx??%dPnIik zP^|JS&)ZJBn2woRC-u^-{-vI(osI_kX=>%jI2w}+YNhtUKA4-%lzo%8j!PwOdEF4L zjAb0>>WV4qt#g7ppcbfG>VaXYQHD8trDviBJKNX`DxuGQFuVd5p<$l^P zThnUEQDti{)iHanzaSU0H_k}*NqW@soJVs8R;R6%HPljD%psPFD^hzMgVL=ID9N-pj#Bl~9y<1tS2>RDsda5%ey5A8 z%`qko=?AE{;?;I*H!3~UmZW`@ziA8QdP=O~m>f+BrvogNIeMj7j@vK$uI*c7_s>yO(N#|T8zolIZ=HkFHWqZ|JBPCKR7nE6gVDiwm)fM$we(9k}I4}JWgu5G)_u62_~kTvdz(%by{-a9)nk}y^Zvg^c!=7MG8!_Y4Yg6udn@ev|e3h@M&m`UYou=w_ zrst+_l^er)kb1^$QoGq?Dg8sYYjR6YFV0@4_vcod{+U}bxxs7S^s4pzEa?`P8&CS* zZu969>WR7mnsbTUX||vTnA=BgH93Oy9hIBDWO|&^?)Fi&eXVcmwsmey%Qs8wZR-8I zoh1$WnregC^a|y@eOIzdC$~XU&Xsp9AMBHq=_xA#R}$4Gs<`v11AW8PApK@JX`ge; zPruy0%5S&0)GsMg2h7P0OL1jS#4pe6v72l9!pc#3*hhJq8;bVD(t5+*9&mMH30Dnz z`|5(U%LlbfTvDafbG@M6sLxWHw(Dil!SRn>@%3cl+-+v_GkF_R1C=0rnu*I&L+p5sp2z-Z831 zNUI#r?ZppX0i29}eoz^E_TdUZ-hX&2NK5kJtsqCQ_E7txrO*y&4f3Is4{rs1cq`~n z`c}|~D}WDI03WUZK3oBOxB~e1a|Ph~$F;MoJ68*?T3m7Jo4BHIJ>uHW2MKb8;v)>M zkXwMdHMdfLc2>sEWAf9x93HeEfs z&mw(7@w)bx3RnAb$G*Bkmh-u$_8w9`Uga8EF3LISwVW$SvFH7tT&27IO+JV*_d;B) zqy+Nu7kT2UQ=SM&YKu=9q%4au6^B85xaHdgS_)0C}rYWIrl`|t8ncr1-bX4?n;Gaq*;AR zz45-Dt6+O-ACoWAm+NhNRz0Nc-7%%BG=20aM?yu1vQqc+9%=TQ8RN@FL%@n$B$|9Sc~TVQSJoE zU-c~ae3ZE%sdW5V{|Ei?vrvYvzo+r{ytz~4uY66;2h@yx4!mB!2=rILJ8Pe-eh_Su zVSg6v)onSl=|~k9^>(w~s|9!1vaq^nl^wO_f8YF^ z*2f!vrPer9Ykadd{LA$IXZfM?F97$^^FGz*=WBhA<)7yVXyp&j;`htfwy)gP-do;H zT9sw5J}~{Y6H?`>Dz0~|CQfVwa59LnSWc~P1!re z^7$X8&}~0Vp*w2hAKct+Kd8VLewb#y^urYTa_uu8OpCc{q?Y-IE{cGDIIOAXl>Orr zNA!Q3;>i4uQ~ZwFCx38p=k^^xT(KNz!XJWt;40Ydr`+t5reue0`j(|n0!0zV% zUZ>FiMq2aF3jVd=X44)K`~{;w!EY;j`bOIP5Ai?D|7QNT@IT7`IR9Ju-^TxT{&zI` z`Wt{q?Ip1M3gG1H z#O@)mL<7Z9lji^{2MwL+=^NvXS;d5rvnKBmbOB3EK=%c}J;lS@VMX{p!+?+ca6RXSb0uxS#TJz zv}(wVsUdoHT85l_!>Bk<%m5Z`amvO{TX)&Qr|trDp9HMDL=O)TnA#^Y2zXdpb*{C?DX{?xf95DZUqi++}Rco%AGHvzMD7DAXs$flUMsQXj-qoj@zSXGF zHz*r9wUw$8IQ_if4ZzG{!484#&1@EoMrpIBufQzM-Sa2{bB+jV5g#@v2{U$nW|e~d z1|Abg48zfcEK*H4jR}e*e|$Ga8PhWU^5RK7d$4ge-At< zcv|qB;3dH;0_lF>Ex_!MV6&hp*ebZa(btsz+1;|n^at-U{g6Ng9X|``&Ko@sn6ufr z)kdE>H+Q>0Jo6E<==?UovF(DLB975>JkTkT*&~3t{ebyhmN_H1VA`A^bLU~`$0mQe z(Gr3_VrurW#|2Lao(9al3YfQ3^D=+FX`1-fBxcfXEJ)0Pr1svNgkjQyM3*&$}>08(;xLa_KX*&S(5!y%Sn9+ro%(!fZh3B^$weg3Z z7m&dVmk7;12AH?q1!-Q`FE|W%@NvN8p99Q42betrSg?b$XHBz53y~(~g_A`;8h}cv8jCpmB%|@#C)m*6wfjl?T`mdx-Pb z#yEI{;3IZ>;hc$YU~f)rCbVeUsY8Oh1y2eN3+(I(Nj)KflfP)_F~LE=sVjiRQA0L) z;;f-HfkkHb7&2{X2(Yr-sO_G*2srVkpbMC_!>8oLV%yMbfD=y}-3xt-R$H7iG$EiI zZ=g19hanqU+$oUyMO#}8b}Y`>xrsBudDV6_;KVyaHI3!lmPe_6iOP?i1VtSUPLyq(I7+qiz`5<-^8b0<7#6 z_lnIdj|!eMF$>wu@@vMMhTafd00em}!)ELg)J%I5F!>3iGfX{q8hBb@^D9pQmYy^u zNlUV1<$1tqhX-$sB)A%_pEtBqutN|TyA0hfh+J{4J|;K^ShkVXIl#k1fF-LfT^8%Z z+f20Ha*$s$IwM#UJT8!$hr5DRfe0UdLLk}9+9^pmC6-e*a%vo~dbc4PJ~b+k z=u_JTdjLxoS>9swh*8Nn9jL^7%GOT3D6q9t&kObm&Ily!)Jee7upK$|hViEWr|r_| z%|;_MZ1f($!xlMxui!4hAptFoJW92ZM?pC9ZO9*a^qiqlLy>#I&=tXD!9~HVfN#^r z$hV<)XZNQ^X3SJXH<;bIN2%ZzXDR>F+?IA;F1$1uY(YH+7V(1mY6GpcSAbjM} z^MconjvIR3&^8Ev_%6YIqNl}jTFj@f2*h$)`c6y6Y3df!y8&xE0msC*b|0bTdjXHs z082(s>;Oz!?!-NUBZ4)+BII%|3)LQ>wPGp2^F}WK9-R{$$NL`Hj$=Nuy?;yp7G9J% zvVFKeF2$W0>*S@EH1BHqstJehtI%iDflVFI4s;oiYo@5uIE0(>{s zaJPp!q>PuJa*OeKR$QeZH)jdK|^wJG22s;x6&^+XKR!e2}Gi zwR@E`Ob{wS%cm?zC`gOMlFZ?DAjo37B8|+J?R(T; znNSf87C+f)Mv@^JmPpvcxng|ErlNS2ST#Xn*{nPrsSTF=wVq83*9NXlDc)IRxc9nR zyX1#5>h0~+S{viT*Jj&w`owD;d40b`8sPMm)?h{=+_8={WL8L*VCqh*6?%mPYyIn` zhD9;5F~L_ywl=nqOcZBogk6XACJfVh1cwb@O@_hi$ycklLMyDt3k|pQ13Ks^omxlT z=!DLW>=I)Nl}suEuFZ!DydWv_veA1y`M z&~&;1W<`Qfp9yw7yB`1QQ}jVAAK-%i-~ zDmTaLjm9R8ZuE%v;%)U!nvB8x~xCi6me5z5HT7flTV-cu+#UyuvULHA+NG-{gz}ihY8+ zC^1$Xl(OO=G}p!&gd41YZMVEgJY^>@lZLm|kpy11&0$I7^-giLWptElEeM}z=e5g5 z0tp^}0sH8=FCVq+{$h#uwbhFKqT62_jSK2XtouxLjbzRpd7byj)5!Yujp!L~R0aVr ziI+ty2aS|4y1aDUlzdj`gPAajr6ie7d(^vWV#kO!rR zH=@gDGe5CUUiR%&kozS4??Y>#GcHRPNH13JC$1tQiH-?$givpdu77W&hISgI&#cBp zV9!$moc^?TfMb`vl4+X+pBNhN;mX-nzM3}Z`d$m{%g0M$EC*YckA!0G3yA)J6#;M{ zVWUkqJHCjv6@e7x{<1BvWm^QF2$oED(XjR=R2#w!@(&SZj17#Sx!aAxzOwz~>-}aE z%z*$0XZH@$lL&ymDhC%PdkF&twUa-H2Pp$ykD zz{|Cx2vwp8R}(lPoWHno&P7~Npt$lv=D2c%ET)pT4m0lp!)J&*V!Vqv@^D#*ajay- z1|#N+nrqM>_L3e_+Kz(G3uml);myw$ieq$fNht0-)EMJ+)?RqAH6tPC36A05HS`p= zS+5?`$_w1wBl4ft;#3El?TJDWu#`uXTrFl@sIr%1Y|Hh*IpXw;IJoUL31YOM=Brb? zdXBc*h7`U6=W)pD5uhi?<@+K3H~SQC_f0s#Sv@f-pCuo&1UX(XO;zA~k^MqszmVA+ z5cmRBIUkQy^r0RHq<5N_fl*n)(GX-nZx3GJ0Mo-j9BAK%9UJRw;}X#)&yF#nJ=Vwh zvb^ZK6}fbkQRJa4NRu^evc5U%yBxrr!ciu?WGsrOLAU>#F5Fdh{Q~bsd_F5 zUV17LS1!k8sTLM}{d^3%$ypqnn}F4xd<*6bVxuF#_;OO3e2d(%UQKryBqK4tC@Cv1 zmb2#RyXDfU@+0?EoZ{1gKDtHj)H|Z=Iaunf}DzDH|S`h zN*>c}mwN*+AX?rPqiq68Ws3*GP3;P%O-)38H^o#|;T@b-w|I;qFiRCWNx*)ubVp$V zK8v*C>EOy4b&}LU%tF)MQM2j5(&%+HNCeGxFjrJ9L@618k3jH zx?N{^>UJv(=fO=QV0eyi7DH&8S>*;)d-8k;vU-sJ+U}wrOQ>T()G? zuw)Xo5vq7PNG0W^(XuSXCof+OM+tF2KnzJknlTYOWg=QHk;H`QA6{G;GL{DCGD`&w z4|Pb$$(Cz}WDH`54D=tb_Qe8dtevO>}ZNExm5hptd)LXF58+n|L?*Vix_ z*W`40&pIcXM)RfewnunDE67THnxKv0P`C{VtjvRU)w&3z49zAw!56nhv#9 z^{QtWai$Z-__X_VbG93ZpF4KN7z-%l!Y}^ zB@f`Iyf#5rRYqyR@UBR{iPywC!YqE$10;^}W;<--Ip$cBr)I`TB#o1%y5Em>K#m`KUCrZ;opsxwWh}dRbUhidu-0oa zbRH||oqEhyC&$3=(cnTGgd?xjyFs|ReGuUrB!LNtPB02TQ3kp%I3J9{Z(7!}PaYl} zQh^VbY5n1F&F&rUM879TxRGq@%JFcE0LTuT;NXhD)bTQBf0^J(>4(L=d{0L;?F_R6 z%>PSlGsZccV?9_BRdn|FSPyxn#X=cEJi7KY=z3Z#vqxfm9dUepq|15U;j%vy<>sn# zoCRj_F1yST;83j#l#i3PTCtdzT`RlCF_IRU{4_fXWEq(7O6NWub@vpLpUuF??uBQkz$!YW!B^!+~}+VK^`fq_mM)$%!+_n2F!wT z9Hdx~Ox{6aALF#`!b7(k$KX6GFWrgR zb0tsCaResZi8@-WT?TojxM9`&8p zge?zSn1ofVQ7W;Z8%^!vG@{w#s(_X&uP!N!Gnk^4y)nA%4`twD6=L;KrqT85%B`Qu zpv7ojH*Y1vl^wLNJ0KGmw#h_}23o?$V#jbu9iP9zv`OpJL!t6qSQjC#Tx-ogkEJ2f zGhW*y$~0vWNIiHmyU6BM#-Fd^&*uek=TtSiOG6;B1Zr8?qYgR zc#09i>Ag-97!hZJmBV3=t9T{_f|YRcr*~qj!AS-ci|L&(d2hz4cx@bWWXr2Fxn7%q zBa*c`qcYh7->#~#%9%+=7^&q-XLU6@aeorNyCQt$@Q6+Bley6-yo`SCqeG;Zqy$}6 zgd$1A8g{yv-rtT9FSGy`qfLHm) zj*mMAbTsyw`nmTL0TcTfmTVdjGTh?45^O;re#ckHW6-a`TMg4%jZB0KnqUotW;cgmC~j_af?+2i9bA;FJdnk3 zh9jWEtJ`3wsADWB;{s0`-f!s_47w9ncUR5GAf_yK+{XGv;@+Eo^o20{bz}WZjFC)a z*eY!^Gm8=iDFms#8IUUx+Ei;~+)|Lp9jBqDX$DFCgGc0(u@j zlx2O{>qwOY_NPRj%rPe_MD3_xQdNPg49$*{I#hBkN>G|TF%GNa9|lLbJxGx_)EvX{SfYqv%m2MUmuHNd**G9I`WHol;a8$Sjh;T;V8(gj=<0KYg_I6oMfNWPqE(^uhZnIY7aU%fT>Pt~eH^pMhx24#TpVvXIaI!3fDi8{2Rkb6(L} zAh^M+F&R_F)W;B31WZ&&Tr*Unqf;RA53D6h3P4>XQ>9FVKB!Z(;yMUjpitdJ2x|gK zxN=Tv8RPD8PZf@Kk6caQkxA*& zG*g;g_nCWH_$%CYpVQ~`b1`+iK^eQd76v^iA;pQW3bO%gFRCOeywMnD!ZhEAy@@h2 zJK$h3v!5KcBe1qyiP}tbtR*K2x;XO6B6j)>k@K*pO}r6w!7S=#J_#~B(AL7hS~?aN z@&S?*aQSt;w;qW=x*(Y^r8kVTZZC@%&#+Sf(+OMEq0usiPYWWwR!oApkn>=qXU!4t z*@=n*ypBkz(ykwG2ab&;uBKh3z>T3`Wx|+QGgp?7sKj8z8=r zLzPDDE?rcDbdrEZxhl0hqA!~+*-YG@=W16W<|Q-$@-1d5dSS(}4RgqRFFZJ>`f zxG*adw;~bE^3`CrfV-qsv;ZZlFmzYp$U;D(B^6s1r7=8sV9d0Qfq_(lnNe7z@JhzZ z`)&vY#=DT4z7m#XCnFCr7c&HE?bH`6(Gkaz;=R&tA@k4=rsdF&0RrVIq=~5;nC=xp z4OSA^j}etV_MS*JgBG^nBt+1vKg@Fx(Cca{lt;#pzcFZIheKf z#Ozc??#Z-6d0EYitA|GMfICoJE{ARenoM{tCfsmBKpknb&Ag09yGirxjsZkJyMr$? zHFk7%2ZairRaZ@Bcf!ydGF-_ZXJ_Q^jDbx4>`q5?6pZR-vsFp2(Wovy^zK;M?<8d5 zi0sZV2fOlwuTA6^m!^%PG_4e>rBa}CED~PJ%Nyu@lVK3Xt;xD18zDtQ1)A3|+lE4O zhef~J7+bE;(u|2UR1a65s+Ag|;*|!niJJtJD-)mAcLZd9GZc{(efcQLgLi38+(1Bf z+#kfs#6CpHDg_2_w6!cG^!1G&&!yh%dB$(u$Eg_9?uTUIxOX(WCnLw@E&ZB3-an2T z6Sw^`XEm6;M!sE(9n`DCRDqm9osj0!5JpCGyv{RW<0!ArVJ{+er!elkve`KrMv>)> zRk&zbOLA#i`E%)%SA@hEG~R~&lw&KCj`)xo!;On804^k!5q3H(!5YXCT-r#Jiskr> zIPNIqI9}yklk;b?qTxAo(#JGL6 z7pH_@L=JUL@`Uc5msTkW& zlHt6z9dwn|bPj@g%E7qBz1^yxl!Kl-?*7!TL9G!azHD^CVchKGWw=K~UbK!wr{$Mx6| zJ2B61onjcx#pT!&QJA}#3?|F!PPGSu2Kn|hI&6j{tc~`M_v+$^685i+@(nC&=~;5o zK1m!GhQJG0+{Qr3pZTrpY}>YxZAKEywvuI}?7AA2`KM#h`@h>L@Qa&udJ7KMBU;mYAi;jvJ86jKwr zx)nJ9!?4CRr>yy*4H zcU!cNVTkLl^2+FsfpiWo#p4p8zVtgbABwrX#nEA0LLZWWKMv>=-`u`HlTWKMhMrWj z=k8$;l&eJs#6wpY?l75Os;QHXEpBndopFQwl+9T7Z|{2l_V(4#`d%L1V3`SHAH0ii z`~RWt%>!zDzWDJe(IVl>9xkE~LI@!WMToLzX}J`s)Q#*RRA}!OLI~Nn>|6GI-}jyD z`@a2N=ghrV@6YG`{rvv@e!0yv&&-*bGiS~@b7r3N%wtj#3|Q#ag!&Zwwv0A)Ml=K) z@By zlmcx)Ye}f@IH*-`OhK&tlt>4&f_U_-hk#5l9AI7I2aXV5fRxPBcu9>s+R#~qL56K|UgjBDG34H6wj0I{Q_#s9^sGxlp z8H@KpJ!lRiKz1o@9w?^WlQ;1`)DI8Vf)oR{^exmQ58Atq?~5KW7@TbM_oz+VMU?RY zgTNT2j!{Fr7gWfMmEs zC0cditi6X^u%=W55njagysZt*3-eD-z(im0qRc}!t0R~%#dtEc1D_Ii;YVBr)Z;)c zdW0Q!jyr%VW3imUEKD`T7C?~!5h?&cL|`;f3F7(a%S1em&@*n19S2=7m*kj~qm35= zk28mk0#`}`vM}7jGgK0(8ESn)@wXHc3*G31-&$hrY@#HWRz<7_NkSZaiZG8*?KCE& z4rEKLHE3%~W;T>^6{5~u*F0cK&!#SQX^*X0dr!i}~fBvHk@pTL3;YmFr8TCBCy?8#J& zs6Yukf(*iJ0BV?!;F03OB#xCKp1mNA&679>9s(T&$rnX31W}L&gKLXEZYV{NBNF;J zYUGEjsFok`V{Kr>g9lt-X;74VZZ7mz9_fvSZ@H)J^o}42`g@}V$Q@^@gfHg3+d4?-ehyc4>6FX0DYkXaZXUb0z0;J6MY=M z#6&Y1EwDHi4}6Warui){km!Y}9|H;Un&Jx0iFTw>!BeMXD@q}CLmUY(=rsD{*hlOO z3RzT*q8uYgbLL`g8Dk~sY_da$Py}aU$di|hW9iCt#5zn#yh#A`Y?}Iv3w58yH!fFZ zk%x~iPF0~=T`BEs%r#IJ+W@+|f3(jMDC^@o%8=mbASng1C%Z*X9=e$JMH2L%sD^jK z@xT-MXi8TT9$KuaSyx~_%4UGLbJD)V6gMMV5qC<0&&VNy#NA@4#TA+XM*TIk3Y|u4 z5sK5CW2no>MZB02+=HDm?ktFj8j(a$td_D(ks%okf<>TAOtc(V0Bq6TTUN4)xR+#H z#Ah3_4T5$+=4>iRD;h1Q0(l-08ZeoJ`m}o#)CUYnG+;NE#EZ2;gn{_-} zJs_sG1$mpRy9N5F9b_hbmyMn2Y`BTAj40JIQPZA}Ne$NRf6w9x<4V5FQ;;IAMTG zy2%nwdVI81IFrC=QP3v2N>De6@I8nv0A!`w8{F$Q?l}|p%%Z^GgByUE!D3IZwIIeA zcz`eHwIEniGNPk`H;aNNp$;8{qFON`TFL4VOFl%S1>YS?)JJty^yOB8i?#q_x&oXi z3vjCJoR6Ncfs9zB@oj~g*Gczf3ENrCb<9S74O!PubN|v72VNAyN<M|FNd<{WP~C{jDmFnGypx@q8QYM5%^H{nS36#QAPAG#Qu?R90^oq^e+?AapcEE zSaJl5Fyzo?Bj=!Qj=>O;W#VtK2vaj?mB_4ZvocH&+2ntRWI-U6+=fvr?X$@0L8Z4u zRPv*dBaMAkZHw$7j*dcU(4w2bNEboMNL}d4&%&Tc;|0{l@?4h=;B3>{np-l08^ZWH;;ni8ulTKOTr!T?!d`x_B5rbWV)=3rf$U&>oRIZQHPBlLjB%$VwWs~Ai_ZU7_ zSAVsRc1arV$PXz=)c9u(1w#>-I-G*m%+OPw`Va@>r}#joSh#3G14(fMSPZtF)E`m)s8)r zo3R4MK!-X+c%TICFoNhhoBcF$NCXMAIV8RGmK#-wm;MMnieQLQJ0MXH39~5`fhQDp zj?EC5$>+S_BXpCW#WKrahyX3!PsmCl5{V+k;f8}&z&nH#*iKDDL|1AK&TMD~JUHzh ze%v35C}LuaiJ*#$l63U!~0{ zLIIOSQhD}!A(KNlQDRoauh7g)`o~<(r3I{vXuZO0M*RIxlaOJ#EHBC>I3rPj##!0u z^_kX%QK#NeV`;2bbP7-Ek^h1*FQhi3EepX@LH_BCOsS7hPf6^bbdwcbZoZ+q6F9~;TJm--RzVJI1*zrS$h4x-A|s1T7K-7}EtcJcKnvQR19EQk z!%L2Z?r_Wk`EI35;1Wr1;hQlVb;2*4wlF|~8L_n2ub6Spf|xnc2rsiJ5-@jyK`|p} zF5!mMH=wm*in9%H&ra-w92ga+AD{*}|1-{0dNEd0dO<^jDJLL!b^WC$jt5@P6=XhrfT`% z?|N$QktOf7FM|^3KL9{O9Djyi;kQLOp->Hl0k{TEU=k#j;)N&>(?HY6s?Y$_1APhR zA&)^uupx5`rQs!L1N0H^luFv<=!k@!p5lUei?Sz@S|a|_k$`r;pi8V3$+ktI^Q%~p zlNxpUZ_^T|3R+G@lUy6^n`wC#dpgY2SPf1zCz?&97?2{IlD9)sp$crx(W{Eo^kLcq zq#an^^CN6f6)ZqHumh09Z6#1O29su799qHkSc3!-6)R(u))dGWYcvJOCw9XNlNK~x zuv0x46y2#}A(=B%Uh*u6Ty(xdvbAIvypCy&ei82jgk}+Ji;;Ltq(=lM+zw0xc_nnw zF5Yq$6d{8rPfI-N8j}Ey_yml@Hh70tlcs&`L5?18Wm9LS)I#rc9E+`Ynr$_ie2LGd zPC#%Vp;+{QVp8}RT9XBNq6!kQ)hj3I8N7q9*^Vygr7j0hJaK6d`%0%oBtTumoMQ>s zY$z1pPPHLD;TGu^2%!WbLeUKgAITLR-jiBcB2MTcfd-Kk}tQX zG%wM%0&nTku`JZpx2*drK={C;f8&XG1dQg9&bkbJNHihCiT+6!VX|c)2(b29YUwcr zQ4OaS8Vi)Pr^l=UCl^vHiD{IjNOa^ZJOPzOkjpA-B1K3zQ6EJ~&2vodCm_iXTmPs5 zr$kUSt^|ry?IJ~y2ve3EF%lhQzCE|>%;YFE_wqf&5`M>tVK`Wkp~5&U;1S_GU5qUP zOu>ovl!Dd}058Yh@&Q@DO+%*33E^z4V4q0)-PL;MGq>BLy+daKRC zx`fgyDNSM5{wp~9uOz~Nh8s&FRyhu7(yHrVxlGz0^yMX2#Zbv?dMvGW6o6}%XJer45|rLL?~=vPYQ1+aw!#)EKY-xLG=WM3Gd1m!}{Bo)pWMyih%ENQ2>?aKKTU zIB1i4kQB&a0BPgIx8O0Yeue-E=z~OiIzB@8Cm;4D*;}A}dW$cOe$&j$)5zk?PMHjm z*QQrcn(5OG`OUz8D}ZN`x&oC76(F9XmkG5+Dl3cY>q6E)s{7Akg=%DhOkxoNf+$FW zfS9b8B~o{TOeVzy4x!_y`;K5CGl&_{xrhZF3j%{r-XP8vA>ZMoRxakj4JMLa2ktSF zmy*0C8g#+wrBGzV;4g6yDkb2BV|k&?2VxyoxiexxV-{mYA|@<1W0D0#wSp{%66H`4 zrx6s!PkYn{hL>;H4PTeT(=P4oFb$B(`wq0jz%E!=?eSb6eI2`sn4_;Nk}?S~oa+Qh zVvY&Kv12i`d?WV3FB7-=JS*Ig0@vl4>f-z^C#PB!%8!v$$OaXN<*2_|XqPxUDS)Po ziSmkGCk2=ajM|J?6KOa@2)Lp!MG}62R2i>Vb! z_(8I06t<(NCGE5(1t3OzT@=0z5XHjG%W3}yPW(q6J!b<#Bny(m;QIQ{1aMh3V&%dT z`5)q>RGR-={$E)@??~?%!j+m;fn1!BA|$#c1>m$Qc_m|??u)Xq8{gN07Tzzr29FEJHSxfBBwF&DGgmKM>sGrYDE>LFi(`KQWOhIZ8AFij~q)a z($HUoF%@A|P1Vu6_ep`wQFKGJECJ(?b4aKInWq>|A1jItCLIJe6;X&ph|E=KXC7y{ zWJybkk_<3Gk%V6u_m<*+3BWy**|Nk0St44IgdbVhV3~Z$Ir$JV#DG>NFvFO@76yi# zLgE2nLYbS#rVj=tjpi~84R?$x0TX~cC`zi0AF10y*it&p5!f_JJcK#31b788`jd^rPDzqGR(!#Y2~+@PPY$s##SBT$ERck4 zLWIzBWZz>yk`rZ!85c`Ml(FN&D zpxtclebr8@NiV^;1~@rZ8jVSr5OI`^h4{lk79_*y<3hxf2?e-7qzcRg+1@P0G?W|# zIZJ>=WE^Hqk$>Fb_)&6XC1xj+$B;G6M4TSet2oVn9K+mC`e#Zn7>=ZDW}E}K30VTf zzQnGHc|e732pyoxFy073Q2HIx^B$l!KWR<7>9*Y z1ok)nG2K5h&wRw$*Az*}9_ejw8 zZabF*jXu)IK~=_qT-;iYtTcxzMSs9s7V_AGoP}6o9x(cI&$%?PK(YPcVxI_)`2wx+b(6Btx4K+n1z8@tp^;wQqyuVIksQaZj6OuS& zLMubgT*OIV#7WlXtWR*ZqA3U5hB{;nL}iDBWVx-M;>H5ZNhxlOw6_)Weu@uMm)tnH zWJ)kZhXH)7nBVZkCk68sZCUHwA$0drg{SZ%_mp53cV2j;`0#MX;0YU{g&LC0Wh@#o ztrG``Ln>8~5=_lO!G7esC~a4;#dVFlJwe~g3HmH~BCcfWlxRr}R1IR2-b%T}msB6F zFh*v_P`0E^jv_gSkWJ2EfLMLC$<~}~&B?Q^*p^O7;;pmU+`A;kNH4@GNvsJ|9&sk` z*rdd86_U17YB3_o)}#_sV!^tUiB#&g)*(Ix#t4?iDN$T?mcFxDvUwbcit~@PParr( z>sjbEj&r-WxMa4zWVY-udZ}f;9AJYcQe6o=mHjVMAn!CZsloU$I%{O9HC&3Qm%sD^OsFB+uatvBqpe7hvX4Wqbk!Zx zlKT|CqJYkE&rZ=3F`PDmNs(mclpgq$q;Il4r=QcOpOc+nf#+r}>5!C)KKd7MKuy}o zf(|Gqv7v{{!0DPSeT}N4ZBm>iNwg*n$oaQq{w>NkX4=qMZZvq;B&%GLV!}w>(<60H z_V|&+Iprm{ner0kCA!>_8Z6a_d;F4z$cUSJDVuvq74cwU$RXZDiMRU7-@=;XGNGIA=TcPC-PJtY{-KS!d_b`Y2U0RpTw0MDqrbtcGcl48Q(>jTz{1IKGJZthI#ZU#!T;+IfTlSs0YbMS2zV6dCvk{BRMPLin@kqMw4tRe23?w%p} z*<*4Z!$TJnTjyF)Z}C|dX{)E^aOxVFnP-JX9?2AG7S7l%Gj>Z(1ghGZE*Zyh;j}&K z8@_lUjG!qIk3|`*CEw!VEL|W^SXMw>1wF{pF$efVE8S40gwi>Axg^bzR47%*G=S1D zzTAy-6eg!JFjOU>m=UGGX|YuLmQ_{k6jB)~iDIDDDJqP3$~9C0WRP1-3inHNpB0nV z36gn*Wg_(}SNGA1xB>;FcGS>v8BZ{n8fk(vVKK<3B^Vi;IY#89F~Za1w&J)PBTYwn%L5mJkn`ODFo;(tNFAFQbf`)4Pi)m;+MvHnw3^~aK<{+kTq%pigZC; zOuaN)34#8gtW-;Bb~4LeUZj$u^Asid)0{v`;7(6bc-@wg&lNgLa92s_G)F}mKO#tT zq)|w-XBamy3VR!ypgF1qRd5WXOH(S+oETQgp%a(zWDcUk6{T`Z>njmvY;}F{kxdWL zXCW8$V*t|v^aTSXP@v?0hTw7EE*XrdsjDx{iuWpsE364GdaO!6#z<|&rxGAD&4Gx9 z910;x){Hl+=QL1Di*U4TFl`Nk%~nXMOcKL#U|EW^Tn5PEFqdn~)`P+HBDPJ7A)QEUkt5s7Aqa-e)x*L9 zBUIMt6V~V#0%?H9&kD7$30~-)%WTk>!D5W%BnKaKB8*aYGeDjmAWs4iyRiY6hC$GF zeY?yeYR~3D;}|td53A9Kv{*(1lFYM6+HQT(-B#TFSZ*v|pPaAdm}?Surhrr{X_q9s zT$4&yD#Ns|GVv#D7?OZ%iga^)f69{TPRBkO=9F|xsw7=#QKgEd(Ej9fBf%-wlbq>Fg2L|IK|eAlp4fBR%b8OJS-_ix~-%D zM-}M~vhTJ`2nR0fARC1(!s8A7A`M0(&h?PFo>qhiEe>9CvbPm278GQw>5}?NNQgKo z)bzfxrM?V4M4RX-6FoT*a?X(6#;i2cy|F8aZl!zEl0X7_Ghm>sIZR&E@)BjGEtV}o zvl(=PE){kV4YC}+XdSC!Va@!QN?*x<8s{=Gx-zq68A;?=$#Lm1_&S*)eGL;VhQmw_ z*Kpa{+CJnk@zQe?>AY4;&tVu@zfKY4piM56scSGxHkie!S=y?w>kC0oPg7_sN#k6t z{G$c!2w=Kr>g94aM4n2KoJkf~W5wwkP+A=5|Nq?PTwp+n<7=%yB!ORt{ zNZ-ID;(XjNiYYmKNt2!1z{OxPP?MOD(sP-|I0l-Z(&_2+Tr|Oi$dw&E#Rc=Vn6p|* z-_2=(QsXEQU|Kpd zjH6bVU|h;)z^Gb&Yer+o08UzD9HiFO*mJ71t2C}WOK99=H=#cnQ#Xl(T)Ao7nAmRM zAc|naUGCp#JRqjz*#_pK{b&%2;`~mB1~acUp^BeIO>rWZHTTk+dno|!O|61e^0>KV zCHE?djU-ut24pT=)JI>`hec2`fs07{mz&}ig7sj*vR`URM2By+Aqk|0M9oFjpy{?wc+M2}pV zbB-&((uLGp9zHP19f7JQ22Hh-EW!q&28~GFq}jk_Q|%Z9?H(*fP>ww4q6N#7*yxQg z&2~8ka%HE{n^Ky533y0f@=#%G9NVcRH^=n3$0YbEeZnaz9U2hHoN>zLUYyg8HB>zb zIVKFcWXa1hdC6zUOIFO;M0=^tz{mPggB_;r&^3wwEp2mZa6K2lr!{8bo(S$EO5jJQ z*3l{ez0#(jMJx+>C7^jEt16I}ms0a+3V486rdX7ulyIuXLk=E>h`U(8M0u;nO{#p& zM;@A#9678Q&^5#wnk2^as~mH-9JEP4t&Bkx`hKXS2R{?a5V~qJ1ZYTV?W2?z^oK_y z1AUW3$uQzBWSDT>8Mf3=hPf=2q2#+#avU-&nYJ00(6{(DDfJ?Q&0mc~OBU5?aBW2u zv{pifExxv{t<;t=!X33_CC37U&XCIojwv!qX;~qolnI#`{E`Zp6zmF~5yfSt9?yUt zr<$O^>0&Q04qBX}B+gMZlo>vZvk${LS{XCpGO*bN0^vfXp@!)q^=^i%7UNQ!=*Hbl z|HwBU;BZ>aVo+%nD~C(UF!m58FpONkLhEWLo(ykh{0zN<%VT|x zE6oZirUDk26;Xt#HH5noXayH?)IUU#;faY5xwew9+5|aA(hV2#w|=nmMXvLR(X%COA{K-6&j@D* zVjo|g<4NyISRJ3FMg`yb1!8z_4965x-|#tgLdXE$G>7jc#1PK7#rc6B-muJ7BttOh#~=yz zESyuE^~p@j1Ruq$L;57VzA<-d-IRFCvljRvSOT^+_r|#G+m);<73juya zFK&X~6)fZ|i{nuZO{_2h(#i?`7Tjq(i#5S(z{@yXX@t025nEw`KZ~Na0-S*mL^eX) zg91{2e%DV6I?_23jjTaogTLOeC4_#q0DnLeq4(-{*ys391xKXp69aQ9Pl zIQ<-_q*0g=MPW)lh1g-I(4IpjhfW+iaJYs;3CVS)WpPR_hm3g|*N+WZswbAhbaRB* zr{r)pr*Li9#G_m;m7d9Qt{hkagF-{R1H(hdL>K_hkl{)i2(!qc;q@behJ~oYg(zx3$>j}%!X-3p zYCn)&%koOK?}(s~VM<@6t17&^-*A<`+C4xO zq7E7wqzYFCg+!=Tz5znCG!RX@g{qYyDpi0gKp8Yt*-3@o`l?mR$Ot5i2~r0teM6M) zUZ8@nIx<|<(br!c8a`HtdIq94HK;G}KVWMZh$;kY(=J@qVN|4Vu#Ix0N*x%A7Im1^ zH4wE3M4PTf|6h<7!pcCDmo2N^d?Nx~LIYHP>uF#h>QJVCC~6LmBxL_rFKi4%4aO{# zX*3`xBtR84&_)?CHbm_k^|xAU15u6P+WQV`r&fmt`9-Q#T~uQuY?NW)p<$|UHAqt3 zKv*%5OK4<>`ftwPYFZhHW-h+L!FsBBf$+9*Bp`Go7x4}8FVr&~ z3Y}DHcl3=i8+xhKRKwo}`hjP9sv^Q%ebv57|6t#U2xU-&G9*+P92znVBOk6B6&Vzc z621{i!eeM;h(B?^Z*Y)$EP?ut_6-X5^$S)JPU=9Ua4kYKF%S(rRpIr+LW4roAn(Yq za8(4cs-6I#Givlxp^=fHqg7xp>MjwagNsXK_-Ivwj^Uvr+XoGE4^gWK8FlF2VN!xI zg9DVRVAV*lX@n3up3#+c4;dO1LP-9lw~i5PJkd``PrzT23sJ#9l;Oef@(nID7JnI6 zCn?OgHon2bLc_uBBTx-?aFBnHT4^&ZJTx*4GR|^nqx20Q7D@dT!off^EZh=f^|#!=qo)%Z9ePwKG!o4O zsQe;_{i7#J15ugk*Rq$6h<|&a1F-ogz5W8|xx2S-aHQ%lssBRg(6Mm`@qCG`{-+=m z?yfq}S4}!g1r97kuZYGYT!V(GBGiQkrLBQz`H!+%RadB-O=N`1E6}%5ArkyWQ`ggO zswlPRurR3|A%yzD>|`L?Qv>S2|NjB~Uk&NF$HpaG#pLh~8u_n;`_IAu%Q@{LLK<}l z@ed7Pkp#Q^#ZuP|=z|U+;37~wG`w&(s$p`WZa`P4gZz~`rJZE&6K!nm=+auCLI#&H}Y4r8yxf|2mKgc9?6}8ztd{~3_(8c~^U3??d!Kwzm)Im^m zL8^!b?%f-73r9vHr0l^(2KpjmBW%o4@UetDB zO)w@f$Ujia-Zs!vs_^zfY7bS&Fm<55q#dclVUf^1(2i6*JRFm@QbmK0nf#v!{%u#z zm$ngw*q3Y(!ob@vf~EpYgesm6bcFoNLUsnih9LE`dpn&L)KmR0a7_bI^&i0h0;6LR z7fgr||B_$JKq#pW8|`!(8Wiv^ldZjhs7Fx$#h5l;kvvUf;{9vQ6ymXwq2XZnFqJ>l ztG}+e5IW3lA|k`WLc`UnfWfSXF?s7{UO%et5ux7Um;+%)70M=^(;+GdW)scHp+hlU z+XMy$z@$=ob?fM5qxAFj9}y4=W5eG!Bm@=}O@ooam}sGo8%Vp6JKn*?)vZvyI)d2* z1q@dCV;sE4hCxN>(bA)i{IEzr%p&Off57MzLEonKEr{^cd9vX2mFTJN9?-5`2XzFR z@eD;(W8GZ~HKo^9S}2#$kt2iDG&}uAd;bYY+@lKj2t}ii-$FIkHW1ah)7l!lL!pKP znvg66=4>FEc#Q>VM>YVzhDL__Lq5GjLxUq4KsaHy1aprAbeZiVgMuMK#tvjdlNAl4 zr%Tr$|M1X=(4p!Ey@MiPVS1?}1A;;ubO;E7RzyWAwHi_s;i`&YZ1o9VNDWp&6{xg^ zY-qSiBYn*}(%SUz9;ptCR7+)12zUMX^>+{Xw|r9rVT9Qb`lYmiFz==UOJiEWN+U#w z<_4m1VK(O}UnlqA;^1Ji;BC75M}(0adqIsyl19}Tf;Qg45iY?&7$DE^P<5z(D9md8 znCsMWJJ|W2I)esgRV4#amKtrRis%qBEGVQ9o9OD*iCs_#>(vGwB8L90S2xG&jo?BY z2g4w!kS$96Yd0DquB4R>^@V##Y)Xq5?K}hnH3U;sIOPuw4F{$4hDLYNl>cUE=rFZ$ z2_4Gok$(efVIUm1r$b>ls`|P>I0NjIkkD>u1(=RgVIG39t<+`dY4^{P{r=A-by@n7 z6%B-CPquzr!n_{iJ2pZ&)HgUn_1B!W@j~0dp5d?rB0Qi^3JqCh15r*__^-ttiFKF| zmIk6^pZ_$kb!#0PmcRg)P|O@UY5h-S4;`dqX7>#LUKHi4{p`NI+pd zsBf}e!0*D4G zEo%OEV^}(Zrn)wvxa58W<0?Gcxzdkt{(lv3>PSvY+d*`tu3;4?GCx!knU|}Ho?fnA zbNzmmZ&>YgyA9Fv?|*C%6iwse($WVE5+32xB{XEHDjbt=&~RTLDDx5O&@i8#9Xz|c zE8BZ?cj@Bd*3P|~PeAZstk8l&2K)Pl2MnfVV-O2`xDV_OpQvUIK0UF}^o>yY{N3Sc z5EkG^DE(jiFEA{;d;1VyRd8sa$_q<)*RkRLYQMaQQr<#yuIa> z?XzEFJ7-^8aAZ>RY4t{XCHQ#+#JbM{ej;zAI7Jw zD|)w1sbRr8k6#o|&fZ^`Yv*6ipl#m=aVtwWI#gcW1D0f1nTiYwm} z4CUdE;5iEcm0?&aMzBMR9`Dw#&Cv2W7}Vg5$PuD{-QB=qK@@G>J16(YA+n zboDdd1Wb)^o$?~vrnte!6`noXsk|nY&pBAhW{{@k>JcYfE$HyB+V{Sz*E}qe+Qt5R zFXiZwpVyumog8cEQR~y=t3SKfJ$dzTQ`hL)eoGU#Z0zrTXJ_SMwVqpKcKDrte_+E% z!-F1g6;nE9ES+=l+mR88gP#^j$x1Ifa@>o3J^S5A-#e}TC3W?SeeVU;aX)^{HQ_+q z@W_O*Q6KxZ88LUqsM|L8yKmhaySDsW<(i?#&$P^&c(-!}|4NOfKJL+ENQT$s4t@b+ z?rj{gE@s!1Y^&cU_0qn%1@;Z=@T+3to#2^iMn*4!mB0rdDv@p-JvgR zjW=yMP^97E@$+UhH(7SkcIJEgeakl0EHZqjVY#V3ug+T4iyxbpvcmZN+Ydnx7I(Yx z@wBSw-pj=t{HmQ_{yY9q1Fr=RA9`gkiND{t=;s%aIn!RYC_d!PD(6v)iVX@W)niZf z_-}1)7i+C)Q*_xz4xWn6J~ITd$(;h13s z?e}bmn-yzZae(8~W3O+HonY2!ar=_bCd5=d{uLu7qGwDqt@p~Uap|x%Rr`l`3%2<4 z*(6|TXT2Rue$P><-3a0 z`$QUhte<;(*Xzkcel0bqz35B$r`ihUXaw{%b*4a*MFKi zFnaHzbEy-8F4tcfT1&C{?3%f)j#ZerqEwcDNI|Pz<8RiEGCkd|!pD$#+YDZIpO-r= zJw)~7&yz{3cAqt=Ubf)Lo2T=y?+k5rrt>1xOV2kW&!lr3?yb01wuw<@=XWn}d}(*u(_(V+=Z59GUYRrc&4#WntGarh(iq)+ zbbiajg~MYjd)QUmzF*a2a>qf>jTX#qI?!OII^uirb`5?EtI~h-%?mwKO7(8?>`JFH zBd_|-p10V1T=TD%3H{1A#l2W*^ZJbM@uu6X9>2QZX`|D)3wQfvy^m9$@%ZMI{VG6kz0An z!JmD52wrQ(u(^+odsM!#85A^Fsdr&V%R#oo8=`Tb-0%hxwmp6j+d zrSrSWSC#GBySR4f*vZYka~F@U-MV}B=;`I%t9PHi{rda*`3INO-Bba+u*hd;&t*S}xdOdY(A4!UW>JY#ZynRL*tLA7f$(b^~Z#VEvC+I_-Cd=f{W{+JI_vfk56m7{6NjtuRYR>xBq^yn@NMkLv62H zZyG&diTlV|=WB(3{TwhOFtgmH9G_DIRa;Yn!`wW7z1neOP}z=sR?JxtlXPvhn7#X= z*_TIsi*DcCq1ZXQs);AsmNeYIeoqmDGVvo?CYNs4eb}w%8Sl@Yd7JknLbFC)A_MN~5aOIUESq)Ea`2EIlUG*U(z!(a$Kw{I9?yD{eXmv5b#*^&IQC+f(=@NSzUAu~P1-r; zO6~hWmj1n}n@^nkAj5)^y&DuaH9QxCj1MO@f-|XGXCaj z2XK$*EuM?_Vu^Ss)`+@dgGd$UMV6>6nuuTGoUq5NxK-Q|6UAN8SacCz#7WUX%omNs zE>T_d7wyC%abH{)okdr%P}~sNB2d_ggTh7(7SW=aXd_;WA0k~;62HY6kt-a;N>N6< z70X3iaZQ+uC}Azui<+XR*e`~O^5T;i3cKv7C=kYCyBH$e#1m0fc!>`pMdXNZF&hsi z%Zd;&156wvzKf4yvWOS$MMd#h+!UvUrI;f;g+lBUPNJCTCSHooqA9*hy;#JG1W`|< ziMe8%7$wx=qIe|siI(Dy&GIWub3q2i}7Nr_$Hji7Ewh+h_B*> zs4b3)nIc2f65e8?uobIBrdS}Bi2yNDj1!kcDKSO3iZ{YtToLO;194l77Cxe(SRt&$ zabYTg#5^%goE3FM3$a5y6CUD^a1pD8iBWNbB1MI%p@o@wiDJej1x~3kDpAzj)VN4V zoc(NJVJ^%}4NDX^E^1P;NHGH=Ghte^D84UeYG7W(*roH^Id>%i(#Gm)?_gon(#6H^!IPS zEmyBT>AHILyqBX#cSt;OVnMa3Q=Q|EAD{Vs;>5CVzJGtQsb9b237t9>|MB+i%XVwm z4%>X`(yzfwmOSsUe*M0hSy^Aaa&k0}!ovs5&(A*)xow-({a?SvSkkEA3rwv_U>KkgHfX*R$sg3<=3cD+qz}TnwuCI z^-Mo{RMoL&%|Qze9<;TuP+@U%ji#ho(V|-#&YNdyVQk#YTA`RB*ZmEqWdqSy^Ffy0FT$Y3jaqb`2aVRjS{ta^+38LPB2W_3!^KW9WY?;rQyRn&N+GV`mnuwyM(uBaVM>F=S!I$9t9iv_U%0V?AZ~!&Yi1! z_|2Qg-B+zD_v*)w!!ul5uFmV)wb#%lP0~tFpMEyJLx)n&zI`iZWN0|$_vFcMvpqds zqnw;})>^daVVB(84@-LV_&spx()?&==lG(DiEG=Yr0lM~V1ZkhqodKgPoM7k@7}$C z%+{@u>u=ofZ(qH-y|PrPN{|2ivH11j!^nLXE_h5iecG~uxp~vtWy&->`10lby@LlY zX_}F7D%RDtMT7F?`=lN^^uE`M6;ppsn$&4r>(*wHN9kfeA2zJu=W$$v^g|t%a&EAh7P@!cs* zczDyM-`4f%b1rDdj^y$)X7ruAf4@!3DphvaEL`Y#{r>$jFTQ@=TrV@TNsZE_cU=ey z3R`*odYo}W!ipwoX)m)OPJQ)R{YXO#k}zOIIyf^5pmp z8-C_`dtVv3YgbFVa^>b%8_>RM>hTpto~|-94{6t~+qSQxvYOqg8kgtVs_V@|^FGGa zJDD=SSW?jWIrYvjJJhh*ngdPy^~k-RGr7d2eTGk~p6QXL{rM(ft1^|52(m_i{G zSpOTT)k5v zRGm7a&gs+Qba1c;E>lL72?!7Y^XH5C{{F&$!2+=$KVRf`=_0yp+a|UxTPBvp#fiAV zgT>&D8^y-*-dO3{OcBDVHyc%hjuk>aMQBwMP%p?wLGl|pH0DJ-8o z6VLYS5qoam7PlWg5|0)y7K`uQ6ZhidMf|&W;@y=i;>x&jV%)A>V%Nim;-Ry%aPHn+ zbRUViNVlf>&-D+DsaMb5J?V;J4+ERpVJJ3(r1@y#5mZ1Qh}(0B+B$T(Cd6w5hPwmE zybMGC3e|T9TUSB%Qy^k9AinF-y$KNMY7p}_=<+R)c@WsTI7D$dNYMghx(u=ngc`aI z688tGdSGaSAu_X|e&&I-en3n%fSuJ4<9ZPNw_vFlu)|%j>q(Hv0cvbCSZyRkWhL10 zJlNj|B(j7kw}i^M1Fxs%I%wWF*KQ4_1Bx)nSSuxeXDXiD8}w zRy_^1m;`Z%fNJ~<7F_^#-iM*=3AJ(!B6|$1aReeW1*#wvEL{ey?2qAn1{JyjqO%C> zx*Kd?2jcJz>aZb1IS*$VlfKp<`Pu)YN(M|sFOKR2$LRbb0K5Qpth>4{KzFCfBapoZ)rhJ&Gg z4?|^Eg4((d^>P9t*9oetHB^BCSoR9Upf^-=SE%|DP|HK1a!)~(*N0kDfc2FSW|5igIaVj}_EeNlba=Ftt>G`m6!5 zbj7r^3DejXOliqbYbKZ~av}CVp&C7*7SBOkCqjM1K?P($6%4?XkPcP&2UFbzsLVr9 zS#FpLzd+sJggPh!HGBh8L0hPhG)!?mQ2B;Xd7UxMG{Mw1465P-)c0geXAhvV=3^SE z4b{^eQ%5UIJsPO3E>OvPp&lDR-H*kzIvdkq2&T{kOp%{3wQR+7^$TjhAEuT}sG8wW zVI84*cS42M!W7jW)A16hukVtTUy|M=I4cnUFO>z z*!3f|%a^t{hVBgeeL=Oj;iXiIjIj@jEFLxJ(S|WEPw&lmG`&T5)x5LiJ--YxTxGWH z-gallx282Ojh!CX^jxK%35Qp2dQd#&h$cL_e{=tK>xcfZ8Fk{;YIXH?f5JO2KjXA{ z*-(3vChnczewt@{^|V>WoIwYUHM&=zN$fOm=I9#vzdzhg@-15G!}yoUmL+$s+pzXi zO6=v5)4zJoFX+0h?=-hacV8>7ukE`5FE!jwn542?5iy_#6m`bV7MGtKlek@jm| zh1-;mZd$)eiGw2&4kSjrsO@6ppZLbR@7`9o`#0|Cv#@4IpT=jsRwWHPx4@xC*9-ft zmoHrY`fLwn_el+An3b$iCcy2UQCf=@XSV&E5td_j==!OrMdE8-=pT6VUBlIzVgic2 z9J}vL*uVw9y(_q7-QH1Vz*^I?uOctKE!!jWs70~UFN%NN*0MtKu-TU%z5dYCb3%pl zf2MYOoKkw=@g>1)c6cm)J!9a+VO|^ePIsv5KD$~}m5R5&y@*+{bEwH@_3U#?S_LHb zs4>Che(z^JW9O_Zb!g7Xz!jAeUhbjD1hgPTa9LFrLc&EfmtDtggjT>}~PHlAQ zh-1a&#YfIucG&q^;<9Srca*EpeT7r`jqw$#8D<^NYA+hV5{26RBwUdF#)V3x~EFW$8R%xE|?-IX8w76;Ku(Xy-&rJrK{U$w) z@9*1d=%R(82TkoRrqu7>Vfu7+C-;?ij=tZyaA}kMd1w9oymyD3a^5g)L+#DKj(MlG zntk=p%!R{0^*&PXo&wBfTt+F#4PlU~DXq)A|hkyL-u(Mwoh2hU4&27KV z-RE)4e!Y3qQPC~N1(tssH*Uqbpr-8?zF4{c-P|d!>)VbVJA2Q#YPXj)FF!E)`$|(M z7q9Nu7f-nBWj^csn3KV=yKh}@tL#*H<%DGC{JXc#e`{}WZeri@j@_&L934|c)#$_F zr(bKfhVZyt-_rPlLIc%?^3gGjaOdcl*on$#-vz{5s(0_OQmIZ*Qry zD|}t4ddp@u|}O)_;mMer%u6tbHTRQoDPN zEF4F@8@<*{<1;6{*|L%Q?LS`mdg1=l%5Bg8Id=bMS21*5RAk2|aca3_4zSsgAYe;-s*bc#GOl)4LZN5YPR?KlP!Bz8@P=9 z5;m#sFXy5*@%2C6*v3dPP?wN zdw1HI(7M8teQS$fa~)D{@Z^z7i#8`tmTr;L_rdP`Dw{f%ZyA2^^wm$^xhIZhRjJ)N zw(*(?c4<3n1{_Ely}f;OC+l91%P(?V(tC8Lz4x-~uO2pNzHQe=zjh^N)tlj}Dr338 z=-7n3)T7DunpL)&dhKqRAH6zm>^6So154wbC#zZxzT>l?gNtw6nzxtV{mAta0|r@L zGkTu!Ve_v`xl^k9nJDV^X?Jn=v-roSTxQfNZJBfLNY3xWuE{0+&Z<=Bnv__aReh1$ zoE-1!$NWdG8Pw*``VwQpTh0n!`DW%_<@j!?S0B%4Q)z3FUJs2fS3LHk`oj~;_YGOI z*>j%a;MPTxo(B#(eRSirw2Dbq8-kmsAGqxFtaX{SJL=wTaCu!!RCd1N(~t(oOZh!q zI-~XOGd)_Ao4=rT)9+hOpQ{@((Y#5Y$=5Rc3i>_WFek41`-D1^RxLYUM~Ge>Di_;w zKR$m}%dnK-dR7Myw0~1;{fK_2(s~rL)X7$Z#5d?)Oy{L^}pU6(xl}L zFh2I>;U%jomPZd~IrK`X?pSV5)NpIhuYqOXZK|`|F#Y@P@2@Hst$E}9F< zd)BKrslCdc@%Xs!cJo?$=5`r)GrdcG!zn?Fe_c%3T6}2Iyv~(=Y}%32F{q+>MBokg z$*bZXOc|WLaazfFLjz`gbk$7!v)N{IDaRoqc0-GuMkc$^C{J z_}k9CKg9gQF{d|C4H{Rxe9rP^$+H)XPkaei=AN5WvE8o?%ZsMocsQcq^u@hur)Bk< zySYyGaK5zV#zBjnBUe;xVRHTT&P5x}-gNgeAJ)wvtF=$N9eV73ghKC|asdi%g@%J!j|i%pI_e^4oIy@zehsVS?x_By2QtKPEJ!!9o6 zinVw?FXUjso9m~OzOEZtBYJ6$^Fh?qACDhUGKPQ?To4fDPoNR;AizCNgoSa{~|Bdc*s};nZwoQMvsL8K=4pG}jb}$;8 zIipsMR>uw<-`jhC{Z(`Px*s0&sn1@s8V~k`Bwt7$aI{kw$fUCC)%BV`il`Ojc5UUeIKy%us=V=Q z>G)vgiqW5!eeiN?ruHwDuACDzx`Xkh?^`{;)$Lca>6d0RLwQ`C7`S&-N=#ihh`szUR-6ZK2PG9>`qtC^Y|N#KyXLLw4WDbVygMTl}Nh z)h_i{f3H>Y#m^5pHIp?DTANR<<-Xo6b+@o=);V-afp~A}=;His=>hL?S$(>P?f&+( z-HnzP`yYtO{^(t_*W`_RCp7JMtn8jws}E;P-g316&h>XbZ*7^?sb#GjhF-%bwN|;$ zsqOuIOiqshm&<#`4!m%6bZ{BhW4T5~)fYeB9-mTadr;q3Lo@>pXH=g1@_Ctlsde6M z`(^NbPJ+p&&s*m$+UL<~^}~Ukn^r0Mq}R3k+3!3?Tzv7$^^A7p`ghR<{IFy9Lq2wVPN`}IrWD^`p z8p5Gu1{_K*!lA?-4kb0=P+|y&l2>pjiHAeU3OJN}fI~?)IFzX1P*MyICFkK#atID3 z4sa-00*8{Ka45-vLrHNslsLnoWDp!m_Q0W}4ID}|a45MAhmx*vC`pDx$tXCK7{Q@r z2pmc(!lC2}97^KgP%;b-B^%&SVho3pr*J443x|@$a44Aohmx;wD53E%g+obWIFwX{ zLrE|kN`Aqiq$C_lTEn5F85~N?;7}3>hm!elD6xh^i8&lfQsGdN2Zxf%a43m}Ly0dO zO8Ud0#0m~258zOe4~G&bIFu;hP+|dxlJ{^ZsSk$|OE{GDfkVl9IF!7GL&;J&lzf3h zi4Pn~T;WhM01hRy;81cB4kiB|X>S5g)%XAZo@1V8A~TsYW)_Z_5DJ+iQ|2i%Wlo}$ z3Xw5{6d`3EGG)w^nUFGMNGOW?-m35S^ZWkqz2C>Zzjb<@z1G_6z25J=&S~#;&Uvow zB>*L_04RA6K#4K{CDZ_vL;+9|4M52N042`=C}{_vgc*R6NdQVn0VweYphN(Gl0pDV zC;=$Z0HEXv03}%flo$h0!T~_ZbpT4n04RwEpd~iPykT!8Gw=r07`lQC~*g% zWEFstNB~L}0VpW~poATOl63$|ssSiD13<|#0400?l!yXQ!Vf@68vrE|IS!3i04Vth zK*=lsC8q!=*#w|O34oGo0F)d9pu`V=5)}YSx&bIz0H7oTfD#=5N}2#DQ3s&p5dbA< z07~`%DA@;~q#S^fy8x6d0Z`%wK*>V@N~8cNF$JJx1%Q%X07|L=DERU`% z0Z>8@K#30kCFcPsxd=eX3;-no0F=B1pyV|GCDH(tGy_mV2S7APP!bG4$uIyVngEpa15lz5?>Sr$ayq#1HxGsLfAW;DHUC==-=G=%$s;zV zf9nA>G5V8Ng01D>dJGDF>;Bz8!k?J@tp_N>@K2r{wibWu*--F1`|tM1Da-6{J*@RL z{*w=fZR6j1>wotTUH&Wn@PEY50QLWhpZ?$R<3s(w;>Y`U{5DYkulTM1-9N(8{40Jq zn7{FhLjAwu7x{Pm$a(l*@ss>J{wAnz1RagJHHaHhX=U`-=*9NoV0= z%?p9<_i6|Ha@#tZwd~ivlb;WrPEcni@)>T^?bn&8k>S%*Rr>XiBu_Pg}SUhK?z{Ub0A-mh@3U&g@s>Qu2H8jIpYX zlLj{huwG?i5)l291#si=L@yX;*PWw-Z?${|6+<8*`VLfSxvrLZBRfAcd> z+p{|fq-0kvP@8}9qVxW48G8OXK^F$oJy&toS$#k}>Nzc%7pL?Cvuw)!ip*Ddnpy6> z5ps$i5yfm0+RVq%-+8=w%B*Q^CKZ!D2?Wa4)N!eae~^jI(hlr3sOl6G?yP3by4t}s zyYsHSwuKVi*Ix8FTkCq_@rQMKLtWG3{nFz^!~88W*p8BS+CoHsB6e@#~#<2lKZ+`#{Hk=EdHWcL!$$#IpujzIxqIxY&geKxU*M%)kE;qj4rTOoxXdSiwGP~lO6Az! zxv<5#&FLqWFDmgQ39F~u_)_@B)5;ZJvt&s+_imqo*t?e=O!sTO4rff%*P$_P^Qvoa zTO^_h62t5Np!P8MYs;_mMV%<}Czs|LxN3F=>LhTTsJu9^a9)J;b-ffw_v>j?pgcb~ zkD;@!E0*3U(cnsFldksbRo`vRe(rB=?aOxdpeuSb;d5N+kD{QfML%>bnl%~XqKOblpzlCd?EpPh zj$#L%DgdacGT^X&0C^<{Bv%};S~@^53BmQ^KG0n(KvGEqUj%o*0S*icl?9~MCdwLE zFDjs^f`Ip00v1aiu4)f}%5p(f15suR#1R9KQ_p~i+6Hcn4j8H&ppRYx-9!$wR}v6Q zj6jD~02{Upq}d&ym0rPh?ln+k(LjeO0i87q=XeuT7_ejxKv#_d872YTRU=SMr(pE$ zfof8NDa5Ll(an@ynDP#=Ju8UfO43dpN7KvO9L<&^>am=^G1 zJwQP50NsTT{M0n?RgOS&-2lE#1X!*FV83nyWz_+s*d!2CmT(mk1p>_zI5Ha`+%n-6 z762kkA4n}jps=`ski$k{fN#?V;>rgYx;Mbj$pQPd4}@AVP;3ftoy-GH3Pje3=K3XxYH84Fb1z3FxyJV7xv9{pJtv$9kaQ z^njde1tw1tIIuq8k(mh0Z6e*;M3}Wxs!!=ATC^u`GGG(67rrv-p9y$ z7z0uQX@ays@Ztgj2KzyTAPh(eqzTdjK@cc3hyX+g!hn=OnjkF@ydmJ`U9cZS2*QAr zK$;*e5WJWuG>8C12*QArK$;*e5DX^@4I%&$f-oQ@kS0hA1aAQp8bkmh1Ytl*AWe`K z2nGg)1`&V=K^Tw{NE4(5`V0RP!0P~aFhgNLN+3;;76^p}s{lX*AVLrZqy*9gX@O7_ zupdMKA_QSTN+3;;76@nqIDXgm4Y(D|q zD+6%P9Kbzi0Qb58+^Yw0PX@rfGXU=C0JvuY;9ehqd;I|Jtpm7M1mNC2fO{$c?&$)! zcM8D0XaM)r0Nncl;2zMJSl0mD(+669DePWM@_kz&%+2_lN-8(*kf0 z55T<>0Pa};xYrEe-XMT`PXXM!1mNBs0Qc?#xVHe{ULb&bp8(wJ0B}zVz&$qr_Ywfy z8wPOiEP#830PeX0xMvLD-ZudEmI2(e2XHS4z`bVx?hydER}J7^0Dya30PYC^xW@$G zUOs?(6#(wF0l4=Wz`ZE|_pSiA#|q${Hh_C|0Pfuca4!zPJx>7l6ad_-1aQv*z&%X> z_pkxn+W~No48T1b0QV#S+`9na-fIB&VgTH00&tHRz`YCr_dWo)_Z`5!6ae=q0o-!} zaBmF2y;}h8-2-qh4ZuAX0Qar~xVHr0UN3-qMgZ>d0=PE=;9fj{d)WZ)-2iZp6u`X( z0QVLF+*1Z{?=paUN&xPq0=Op#;2t@Ed!+#G83MRh1K=JVfO}1F5$Oc=AQuxzM<24_ z!xkYPHryr=jZcI_Moxkv#l^-4NSKHmg^PtpLX1O-Cd0wQBE}{qAR&jpCx;JriG-64 zDH6H?Q6yvpcv#qkXnax}VOWHL%ya&ql92HKZUx2BvBDFaK9A;kaK=5FS0Zyk zWL}6|SCKg(G7m)NeiR@Y5PUR-c>xN=2I2*YfTTef5OPMg26=+QKv|$h&@AY0(tr$d zebxgZ-yNWM*^n+##r4zqVYnXWr1?K;zF64Wx}o%m=`b!}g7xr29OEe)?95M&SkIkK zX$P^mipcq$`zD#P_l{QXWy_U{_WcyK^e+VDc<{$CiAk_=NQvOq@5mt>%@2^ck-0Kb zK<3L7AXt?Duj@ZT`%wOAgocI`AmH(i43N1s1&H#GF&a9c08#$w2o0T4fGGcTiiVCU zK$L$RAlAr(5`;`P&>#vBB?!Tc&>#vB<)0wX5C{c`@=rjBXT%zLpddK7Su5B>=}(|& z2$ljw`6p;J1Wo~>{Br=vAtRmX@XQE z*`ox<5B5+-G9Wm9u!k~I34-GXdng}`6mqmk#E94522cadpo|!T;P}BF%19?5IDW8) z^3fbh&A#+1{!e&#}8&uMx27+_+bNOB!Ht)hL*5Jju?p=@r+m_42rn+6#; z#2Ahr?2$o33}Fuld4-Wz3F#CWE#!!is1XNkYPAF03>R}Gh&TAkV8Pi zMnXlxLqbBr0Jld6iMT+zMY=)`7%@SbA)b*Ul8`q52m_mcCFFeipXXFKrlZ6P3H|^U z*({_@NC$rs`r!A2b(VFOY?EvgJqwRb^d{>8>j4=&(5&zvLzB%O%pPpQ<4x3KaY>0;P?3*=|5@gVPy)3 z+Rtj|8LZ4n1Jg6d1e))CtI55z;5F3aN%ukPbmOQ+T1oWz?4S<8*>~RgC*REb1yofK z%8@DQOutCv%6pGZ35f6A^|MruLc1g=hV?RZ3ys?PgXxn8B^Nb~!*Ba{r@x+i`bwDg zamctd3o-5pjl1hrhhJqMt)E++y56~A>82Q)(7wyOwE88CkEbv7i9Wg130{%=0}AGt z$a1F(toTfEwQMWBw~E(9b9{chl|8;s+H|n@)uZmgl*+l61Y6JQ8E%Mimo97DMMb!5 z2R5KD`r0yb%3tQU|9ofXklJKZgXmgo!6zFtJatuNoU93%7{j7?arT?vNv=4;haqen z99&#HNcfQ8X3Iy3@J}N8k3{?*iR8Z|(*Kf>_tyU=k^e6f^8b;Fikg}R5-lXUKk3+? zME@U&;Xl&x|B@L0OJe$8Cg%TTg8%y0{&Oyc{J$`QiH{}77MTD+l7r8Y@*s^rpC^Yf z`y#}LS((B;t1dzDT#CYq>@0)2sC3LnY-_E~%s!syLk*R6HL-~p>^a{D{VB6qw(bKq zEws!IpPFwS4sm$MUFJ3Izt-3h$ay%Yf6;#s)1qP=BRq5baY(FS-9XOBY-cuurmOgM zw<;T9azl;}V)gtkbcRK;w~RUZl?HPhq|cgf!Bgh74IdFHYJ~_QuRAm zAoZZ|uW=8kM{)8-6DEG~2CeC`X?pt?4U< zBUW0^o#cJP!ej3ob3I{Z9b<;`>8*zITCWeB)Jx-vUzSaoP`9hKM%!8@ky8%GoxhNT zBjY?PCBIm{W5|CoG(fg8%kR?6&wK`FHszq(tPS@6F z1xj5qEY47~i?}JK7|}=XpWmBfDui0YSqwP1p-)(>*t~O53|CP)yrb3DX~e9{uk%Xk zP#-D%+u;a&=^cx`c1qfoIO>c~68(3^HDVIUzhx-R6)0Vj6utkA1s6x|LQ#Tc*qMG* zq~U3PG1N?tUBj*X3)KQrZN5r_&-H!9nhLgw&F&O87`kxN5DUET)G3bWNmsT1y1%>C z8eM#E!ie$2{7{i%-Q&Kw++{&5UABy;Ty-7gMl;JP8Fj-iM5*RoONRNU`Bd)ns@0b` zk$a7jcN!G!xC9ijC>n626&MtCs}AySD47M9?1v2E-p6CSv#_ePDArOjbeRLYo5;G; z?W%OIYne+!z`mz*=NLBWw9L%VxGlx3-8V^%QQkqb2i+RwE#x)6`-}!D65acH&V4s4 zYl&DtoH=N1pjag;Ai5y)R9F>9@qAgVjZl!xY+x79h1*Ii=?NoGnI41;@;~bGMH3!A zYTK|kZy&`>j0O6Wtqv`#YFrUxD$D3PF;!>CboGZS>JwkB@_2is)xB+lDqspII0qK1Ss3e^%>huji`y1^}D?jp4g+<7TnyPC$2 zjI9p)ZNHH8y|4}WphoPuslPnz&0829~q!H&$TlZcga84CQpXU}de1PBRqw?WqR)a0?H6%RLVwe{`g zS1~=Tsv!Ex>d;)@_OijN)mt)APh#&fCP>{b)IG&2!kdPZjVAGnCJ%!1A=T}6k+gT4SAp-4`)CM6dOFVp(w)GpceA5McRNM|GVYC+dw_i7Hnb9 z?{t*=(-+tuwf(&hX^Z5J`a0_W$O37L_(T1xpFjSPwn#lZ*dPb(kXWECq%h15{Cgh~$DgA?fPW15 z$AEtf_{V^M4EV=@e+>A?fPb*30DB6srvQ5>gTO!7Lpcn}An*_NP>zB!2>gRRl;L#) z|H|NB8T>1Qe`WBm4E~kDzcTn&2LH<7Um5%>gMVf4uMGZ`!M`&22YU*zrvQ5ju!k}T z{DVD|!=MZT|6mX0C@6!#KiE?!6XL*cd>{r8l2U}@l<%lYdG+l#R_0AqE}1tQ%WP6^ znm&$DygO{gRGd$mjsKVuAG@HEVUSq{o!}cKq1AgP4r0z4|Zw$HPePI;@LKhI|aiAwr}wq z`S@s}iK=*{*%^g?x}DUeCY3&K=tE>*L*(oy)Y%*!ebW1G_UDEiZHMDeJa1|@=Nh=S zGkm`L?gU=yNVEjmH_t3*3c9Ap3dMOr)694Tqf9z*HCcGw|}3S zz*BtHcmK^@Ja@sEHp&?~xof1GQ7cn8%l7#=J3=1iGqW4yFNEmSuU(uw7^8NjdhtYa+5OYqV}_H@Z{K*=)<89e&A1)OxK~srI#$KM z@POy(=F^pdpYIEDF|D=xL~hi^6wxGZ52rrd2q?M|$REHZF__jEhfioZSJ3~ZZMj@p zsm?QF#jC!7=&r@3X1(qHyqw%bDq@#;!$yImgG+~|Q#+wgpHQkvNJ$J$?s?y_ih4WA z_DIZH;CmFkuw&1MlWl<~?M}Qa$sxSS{b`KBd8w(NM88lw%{jnqOGU?45*v$*W7J{g zj7D%%b5Yvr{Ba*=6RfD&AP4S>;q_dp`svPV z@LaWkRYN@1O6Zx*r)OCwcOTAve%7;qskh&uH>e>_Ub17DIklqg?tLklfe#-g=UE`K zzD+kOs$QRuLt9xH_R3Xz^lD4eF}nw$OFRBw*n@pseh7);+4_Im^7yQItw)O+{4%HZ)iGR@^5zsdsEgwALG%`EoVoQklw$_s!`%; z3^(r9x@=~nJXEqBbpLf&>g@HiM)S|~XR`bFjfaJQ$#SQRj@%|0)xGwej%T~M=$0HwS5l9hr4z`Bb_aBo=yheWQ>#tYTH9r_s zc=dG|J?hG+Fo(Bu8U2{#Sm);6h|rS8os=qY>Q%Yn&|7&xd6xboyMs?%*u+g6V%-Zj zN2>Wk%?}p26l`k374P8JQlvBCCks9$3|y&izwo|QP9ouB%V(S0TXzG{E61Ce($e?W zhl+Raed7-GPQ_Mmxu0V@n=6u@b>`vCGmk3B2~opU&Weq3+!wOGHm1K*ZulbjXieU` z&^oX~i~N)lqw;ku?-y<9lBkfzj8-BpafvRir)Sqk`OxcUPw0PpIsNVJNA>QwUE8}U zw#5g+0ct^(2d_hJOQ_qPwc8yvM|BD|(E0=^GjVgV7rp5}rhm&I$yM{NOv}*woY{k} zii9c4lWZftAvUh&^P~5hCl~~Wr6!zr7*7)9ZqvUy7WtxYAU~a+CH+aqM3M6adKZ%Uy;Q2gWy_bJcqp!E z2MX-3n9HeN6J5Z`@0T$Z6O7jWd5vv<&E?tfmBIG#7ZDFcd@EY+WfRU<<7QS+2mfe^ zca-7#F05Rb5_0HAQA($MV$D(Bf$2iS_iWPnH4{ft)~eUjL1UCJJ993$2FDIRulk^u z;u7^N@zSrnrl-?7GxrWt6&7{Lc-QRd`M zPTY(;BO%=m;f(AF6GyF*OM4d0>03q zSl?IJsy&(9v+wG7cen2_?!b@QGMNqw(`Po~*+ZCvdOxPW=R1ALzKpo>L89tq&T8zu zN7pygif`eXJT6=1tnFsO)Szcf9?H{Pd~*4-XI2L1*HDqzO}$7;yW1u;aBMR+6dPxX2Am>Q}kz)K2FW?->4>B{Cbm8FCLEe=PG$@c>448z)!C~oEoR0 z_`pk@)k5;F+ep)p5VuFrS05EZ{#ag^touoTyrzx=0|2KEvFtV9$){L6{%HLwXv%k=#|`9 zEW|%TW|2^o+_=Yqg5OY)c|aL~`8dnl@uih6;qXTL5LRJlKNTUhembwSuM&Kt-~7}L znZ0w@(FvWS%un#xdXN^^?}}vi6r12#XuZS_Oi69;GT^B^^P0+ zB3Nxbwq^(SM)zE5R*La$*wA6@G*J$Lam-%p%bKs>u2=UkhibT|Oy`)MY4jMibb0%@ zCwxngu?*%nRiK(b^BiQ25VBSX17G070}>9xh#)x%qz;2rA$h2WeNYGcC?F48$io(e zOoo5&LrRFvku~&#^aVD*+a5JKdP3?j|7v^G?-7>*{U7!Fx6j|U(Eo2gN3k5)9ohem z5wQV(N0CFjqd5Pzf!d>EK%64`AP%H|r2TIl9TU(D$&;5ZJBsR z61jOOddER|yQ8(MRCAK)493alH=|k8iw{k6sYfpPDr+1s1eLVD$b35_uOYawsY4WSD23DiP z-hSC z80%caJ?qL$SszJpMbeb;HFmz`bY@sZ_-TqW{v@GTFP%=F59}CzAC@RnfpTzh%?9+6>xdh0RP8`rd-)aHLps48cc_ZHHV`{dgEjzwQpTdMa3FNi|aySUcbE~R4vPW zYhAwHI&fn|*xJ94l7vU1ldj~0e%Fm(7qRaN%`G4AowF2v=fIn|l~$}o&v>XpdJsP? zla#qj9QUS!N8etyw!TvMsN z;Dz17M~vp(@u=hxm1o|AF~>jPW_!zVO6MzS-NA`_Y#%V)$rb&w0xPU9|7rE|RBYW# z{brwJqNG!GRyBuF&1ao&pVXMix+%tVU$@G2onI+Il;1ltQ29lgbi-lKu8%9$N$DR% zI{0STvL}eio#R-OVlSTlIPTFBcmC>wl$&ibi%*WXn;xq2-OW(xo&7n7=@|_?F-?-Q zG`iA}llhr}gePUIuSWfw(Lxl5!ufI)b^Uv{dPs#w**?3zpz^>oa8qt|d456WQ2X8R z!s*2J`uqjFzMWxPzJ9;2#mB8!Ui+SP$Q9%r@TW+ryMcAvn)+MlucpLfg-O3&N*SG= z&0&zaNjRQs%4z7wZ5#0PL{vYz3F*u@W7rYlReg& zFzD;%?{ZnSRJk1^Z69_xEFJ?yQ$tpF7psMrXZ@sadOj ztT065R7s%I{}!Fn8AjOk_TE!FX{m=kqb-KbZ>t3xTMxJuNs`NFZK;n!hAT|n1hR}daRax{HxZ?e z%5vB+X3}t#Tv2V7#CxQ(yEMod^riK3>Zcv{djEJH$*`DC)t6 z6jJ#-_L{oK-S(zrAqDb-2fFqQWN)4fOa7p}|7^4H+{uDhlMEB=MWF_T_txn5aJ&Xg z!mgKm)y$?heRE-FoR4nGV$XHo&Y0lwh8L}cg~sCeH3FJp}IwdV|CJsFR>fB zxA#6}%1@`#T*qs#xx#<$)k|@F+Zm5$q8{uogR(=Mjgf56r}t_;ygkdQOxpOs{k_GL zF6rnMlN0V_Tv%^#EuFEb#cMSldn;427QBBxe@U@BYBwP{yj?Y$<)_>0XB`h{W%^#Q zZ_yFnPdIx^)b`_Dg>K{fy&4puQ)&8U(z(w+Rc7&pO9Tpd+Rk6!T0~=(&Kq0$&Qg8* zahQj_6zog#Iq~G_N~(!BSEFgS@K3P}+K@QEdVc$y40}xY)W@+oj*-lPqVN6(UI7v` zPwKedZe-s+a}54kn!RO;_3Ab1PuFT6HD#!Zob3CiG&O|Dqgx7kHtWnb`NU{^uAk|S zIWx7!kHm{2FRI$k)vf-}7VlS38L)3VX8Ehks&P$^gZ_e@cGTS^(+vEnyvGf~?wAe+XorY%hGHa~Ayt*aF%YU^~_ zy3E{2SC2aWNPb^HJ3>TqK4+b5ap%gnVfwRz`;jj3+mzxnL>CwQ)T^^OnSEIU*xp?& z3O|*0sjif9m*KoW^RuXjLb;?J?+!c-BJL^@5E_vcTrjdlKjp(=jxMS6t9>U?i zY=29uia++d!474deBh3IXXyJLK^%eYRG#%tk?TRF8*7?(eGEyzpX)pa~GP#=G#Gvrs;LoL1Mj-FS&$|v5f7A8g{dB4*YPkJ#QJCaMz6;CV969zLC zHkb+^oGli7vnhxLe`p9K142?AY+FHnf66Dk9W^i6^mnhza29S^WQyN zd?g$FB~GSaAXKgFohiBe%8;-9fuG|N^_5hz_WjgdmNy^zexA(eXZ13-xcYsOZtnzP zn13YKlgC2QS7)_4oSX1&XUC|UyDJ61&sh>9cCZL{d@MCy?B{U#_>%|6cC_!`vGpXL z+}_k)tV-Crq}du>clqHZi^KaD-v7)Gjp(|u@!ILR+n_^fq`c;pOjn8Q)OgOa)!L8* z&o`n^u?i$dW@?4|pS;YFdRG3?V2|M@aVS+Brm`>H>^2)gWdKR-m(^H~sQFVL2QD`G z54Jb=T9I4ozdRPO%6wfivawm`bqNk}SA`{8yzq@IUi0YFeiy_JcLEs`OcatRRWf!~ z6+7u=!!idO$s1#Xj-1;XI*y zPJSQBc12H$#%OwN#l;`SO!zki<36W5`XHhwV-nRCxHTIo zM)sgMO~bQ~<+u?uzea2>#ws7Y>X5$lz!*KnC{*}e;qC?YOW*xe zDU}bCf3BQVGbWG-ePm2kFk9N0sN;(6+85L(;8fGhFWAEl5-fhx)*yY;{af|4|In}R z^>u-1_#G=cPi09SUH^<*mcG$t68DtCd5>qAgc;NH$@&Jblf)U8aF64M58nCU@4rdR zBzj~md|Y4Ufs|s~EM4C2xx3@9%JUbP(&A>NPx_vq)}vjO^Rau9r&z9Kbm7FNKzl2x zD(!^B`@2=j8S{bf3I?yG+8n2y8Rw+oX|xj0ig_$k=oV}+EM0+(q43|Jx1Y*+mY2vJ zh(%<1CjExvKy0%;FVTzxdD6{NLN&IbrL+8e(GGW{jl`6noN8^r=Tq`&(>1&#aPIOkpC5)IBT;e9jnu;FZSkrQTZ`)G7-k}$YM_3}a4sdtVtbCjPp+GS$-a(>t` z>|Rg9FyL!Xw3J9MeOqbyp>dX&L?zZ`&~I4WXcX(_idhzgy1`emi0z&hwohfv^`ucB z+z6QWO7W&YXUUxsCpFZL4!&mow$}0CoHE&z)SEbh{L%0)Dr1G^a&2X~_EvSeUhGcU zYn7kA*f{PK`wVyNik>*`nEN5RjdfVClLBYxG@ca}ru5|P*Rs5cyI)_pHm=-0J(%r5 zsW)=0Xd$C;)6{1cud(M!{K(mWab>yoVFrHp7Bx>Mx(cf6ZtO{479wb+e(uOS`XmmzAMu0zfH z;oe~R{IIv!H*LZ@?~5MiQSGFW|MD168L#QqA8@{Rnsr*-<%3n~WkYkld;YhVJ)URI z2oO$rnk;K_JBEyTxqWPJ&>CjfJAAP?g>C&=R^5f?G;4dzbG=}{J6W%XBmxw&FArss zU|*z+e~D%@q3axArg?he{8Z>|`4q!*$GR0gi|n{7ux{PE(b+uRte!dIXQhA>7HWd+ zaYg^*ruW?l`3bcxV&gQdGbYxTCVwgxm^|D6tW)B8*2*lq`xR@ik$a)``47kK`S0EoXhCzG6wx)Z zIQDbuZo)-jT=i?M_TNu@dy&H^vb7vTI#RP*b-75#7Y8jtemnK(BQ@P5Kf~ z$TmsdGhOcx+oBc-v(WnzBJ)i7O+-TR{Q4-<-aAD;-TO~Jehp;|O8m?@>ikk=vD{#Ntimr#?aKHlHN|63@|%2*ddW~DR|>cOj6_Ye zn?iWeq~3!!c^|KyFI8I6AfUVHTaCeeu3Ga+ZsGXjsJPUtKVXW?uCa%uY^7p z$l&LWohDZ>iZQ$ze7ESC=ArR*!CNI<_P+H>9TSH?T**RH-|ExkcC*M~K1VKz)Kfb# z6}aCgq%bHsD^Vd>{j#zQH;e1++d3!J4_@SN!_PgZ{VG6~(3PTgrONgRzi67GsqN3l zeC~1O>yOR|>SX0QyUdF=ERwCtg?yEe5n zxF1g4Xg^cg>HB)D=|fl#W1qDR_kdT-uYfOiRUalLACKiP?k_{e z`OpabX^*3YzV|5DSj`KF*RS@?JB6tz$^`Y<90akouH8$IH8Q~a=^eOUP$J>Ye74ut zY`9tyXL?=aP3k>-l8d1elk{8bBiX^im07rwpH1(T(ykGX9WKS7R3}YU@2!`2M^^9m zw9JMpjlV17CzNa2O#Ttvx0p9Us*E;Y|FocVn9YUvJ?ujm#T(Y3wX|b}Z9#*NMNAH^ z-JDK2tN7X9>F(XY;LN=f<{i`@B2jOia!KgFzi6|(YbZ){$yVEll%4XjrD=;phfkla ze53eW@Aa#rL+k>M7U4Fm_}4D&%0!8ng;e z$kr3=OeNx_)#4mf!kB-hF~fS$_Bf&N&m+vkqtxdZytE(vybN*X-tkc zSYE1JWHi2f&*g2T+a=LO$#zVS)d1o!p93BOSpq_XXyxaL$umwDI^7 zZm05zEr8mpBF&b5nj@Pj_8qt5>(2#RVZq~799)7%R#F4r=a}vf1nS%%ZNsXF*EBzP z%;=I?`nZqw2@|deNsjG|S8SK?^y{V0Hj?v)YsAOY*ykm94J%Ib*=F*6Qd$cUWOk1^ zhoiq0?ZDE87T>ymGDk$8pg@$GJjwc4)DIui6z*(Q3%k`q|BiF{rw)6RjtOMtj8%ug z7xL@`>0|mfnu=Za?_HXUcXI9gxW&VQtqQn)zFS;aq-bXgd%4jgryF%l_xqaY!U=+_ zD_UJApUF8##Rlx&-m$h^^D*8Hny{D>ZW5)-R`J*oF++4acUx24|tBr(n{1vZAL|Dhx^rTnW#la57I0Ea| z#`@2lxi-4nPipsI-FT`{1V@EuYs8JSW23d=Og9(lSVRJsAsU>s8ow`7wt+q{B%HVh{@8$Io zd+c+?{?3BhUw9`uv4UA_Y+5MO>2he<)_;5 zL)OxfKV~^eyewQoNCDR4f!e-`B;GsLcR?})@C4IHX~~?kS{iog%fNb5fBDs4GIG_f)L}d z{~sL)fH5bC5F`xZ0a1f;P``bM!8QZr2s#By2b~59gODVG5{0##r(pf41gz+kg0&$s zC?&uWR8XoYHCVS<0&U7cm7oR?5+afiE*r@sLh?u*a_mSR`I{Zc82ppnM)o7+%L#9F zeYDT=51r#KH)LU8<-k^#7d&%5k~*$xm@9C*&P13L>x)4K*H9+w^XFjFb*PWJKJkC-LBk!a37u~bo-XKNjrgCf~?mCESfob>WmrTryUf3YYn zcC`3L`kwW2?In^E`A=3I*(O4Gr=FUNU!~X#zHOU@`%uN7y@7|YCG+KbzUGz2$2a4d z_Ya$1Bny4F-|@xA(K@v-_PSrW-8B()%R?XCIp@{I;X;L1pFeouJ)N_`}`%eS+q-` zFJ|PhD>CNQuy|VFyDxRJld#ZqbZwTz$@Eu`TiC=cYpFIpJFy1@LD4rmuUeGE`K**` z`x}$u=zXAQ)s~iwQNJyqp&S>CvXFOZGFiYx7@fCNG02c(=Hla?WZyt#p44Er;#JmV zklfZE6+7vdrkLhpCdWNOi+!hS2w(F{GST6NG1*=gC53KXKh3?gBnHlybIfGM!ke$P z*S4+QO1{7Mbp1KNCNO6&zr0w>ShzxrcX|C~4bOXY{^H zW#RBY(j&1XwU`?5}*MiG(fY3p~BhVK4zdW6bLCp4vmNnDv$(qh{6#aRUmEu zv^m<3JR$9oS|t6p4P%3TkvviZ`J=tamhIntA$4fbfA$Y1M|FSg{`P}DvW0%xpdV-w zj+9}G_&~8CTj&qAVMq0U^C(D2J`A3b1kY^n4CPp7#S?=BxzR##4AiPVp4c4Hgpd10 zGx<{Xga~f9o?TsJ=T-Bk?w9U!FsyeaSrV_}d)hdqAJSPl9Hn@SP@{5enC>p)e&7wH zS0o1H;(%Nda6q`Azw1Ji`{aL(z5So-jQ(B|xFmktL37kcFx~`h|GBOpb^mV(@%c|7 z{{JbYn|}(4>z_hm{HLIJl=`64LC_4+Ig*fdK)86Y{)do|h=`aNS=NIr-9gsoAWLju zLETaMy^4$y*3A4))PEAPe&(MESxfWJ^mkp&-|gS^HGjANvCQWGDE`N?oByNuUzXt< z|8L81O0&q$@G!2u30M#=!J}6ZE_lB$pNi5IAf9Q`3p)`ha0r8n4FgGt3?`%|P%Ee% zGzb!D{5>z^g)I+=287HHGf}_ig)Xo~uKzM1WPbPvgv=4;LC8E2-Xg!}iqgDnkVWRP zu*I;UFp$T<7V^m4_D>#)C^pDL4d$pV1=0}epaSaQ84^+lc{XGh3iCUE)W=a@NT1LK z>S5n+n?HG|Mr?ljgSNkIk@iP@9Qi}?NE@Ur;tz@UC^iffkp7V^^a}+fj-$R1lYj3! zsz)8gcT|1U7TO*8U~_`;z6J_M-pr8BOy!&m{LGHKi$3f;Z142dr9a_fz~VQwRDFUUv7KF7p)#1d+6kP&d&HlMp<(nmLvn84xulG+B8c+ zmVV)3ilL(YBW3fEh1)J8io2=!=>yr@BA?e6r3H1HEV(vf*rs&2S3INImLhDex>>Lk zT`m)Lu2(D2&?leH_H=fMlDKv`W-jX-?)mg8DSZ7RrYL*`i)Yi9AQX`u1*8_#Q5{U1(K5G0LJJ-b;hq}Vsf>P=;I!plWyaq77K z^`59qdJU7HW8(x@Y9D6S#)oPz$*u;i?lDJCIH(ZX4z$?4(V%BqCm5p@laf=JqN{E` zp`x2jW$?zH9}9I)e`-ONI^+9{m(f{KiV^>(;b{z%7dMS1a9rAR-^6maCY~rya2N#Ikyahbzn0CK>_EvmsHfd z?gu3+4y-N9_tk3WBRhig-$`97<2{T=uTP1!dCeQ0#le;fGQ4+e& zA0_N=&ij&`*3$-`&sSq=m4Y_YM&wC1^@BQ_6_x{W>^@uUqC^XyN|_u_9pa3PVVdcp zuG*OHwStqEtcxv*)7_)CUOZ>HY4>)cj^VWvXO@1AnZ20VWlVVm|LNhS4AI?J?2Qb> zhH0r;7q4GU-M#-LRQ}S#SgG&+g7e82lfF=fQ(dOxifqL`t6{7MULlL3#3z}oMc|~j8*1xWpEFZRs+kD|Y@Hri_Hb!&Ca=yy$ zGmRyM@+`Fi+snB%wdLZXTv|QXiGIDVJ>_r8?Ugmo>&$X`_PFdlN*RGHqwTuUG0qy= z3;LJB<-cZM>Qm=VFwcsN{h9l+y{Y8{?X|mCx}1pPqBNpk+%-lum=iwIWGJ~(c8LZ> z7QxA%plq_dZA7B*t%TXeQ<3xThW9C@t4Rr)s~1Nm^ayl((J_!10TY7!}8Pd+|4|qtXgq8Q*#3*$&+{Kd~#&o{=xTEs#0CxLXoA@kHe!o{O)m zsn^W)`^Pp$3Ej4syE=7GJ`bEt{^g;qCZjNwt5@;zAsK4}?FX%aq_(@>88+{1_tw5K z440TZuF0PK8Y!i`5G0n~U3})YI}VS~r#Z6+besas_73E=g&IoYnm?2BuMaCP4D^X6ekKPY@I$|oPEk*8> z1yG_tqAsUowPNL85hTv>E3faZd$trO%Cx$fdar1QTX_9*yae{pwSC+st3)>Wh}~r( z(yQO~kH5jc@apuX`HrXO>?r!js7a{!3|{w*_#}iIHhwv)TEHL8wfHvVrg0c@?ME(2 z_#osSWuzcjBo2Rr5e4_~LctxeP;j>^6p9PP2ND1w-$@|X8#xei{ZRpFfV4n*p!1;r z{M?FMzuZ7xplhH=5Hcyc3AztT1|iq9Tu=e%Kfljtg1UcRFK3`U5BdmN0|5( z_g=pL`XGgaTNKIW0lRg`RIml3+)nEsw!mCbUZVp7_B|-;9lvE#2MS z-QC?tm#8S6(hW*?w^Gt5-7O;B-6GNw0@97}&i415v!3-n=by9A?fQ6KbIt6y_nz5% zm_7IYZhPOvCdd-Aw=$r;?`Et4I)|*y~2&{}z zWmHtUvj3cn=y?6<0KOlN|L({0rf!(y7l)s%Xab^{20B?5@)I$i6oASN4*CD_^ZNRK zj=}t|em7+Q^=khQOG4{|fKC?#bhsg)(*gmtDF~>4|G)b9P#c5B86i;q3shhsptc7A zjX^>{?GWO>ri(5(*sUqrl-5Lx)*nAb+Z~YmMM?NZuYL%*Be8T}p!-CmZUE6r=(MA& z%vQmaFPWM>lex!9Ob2HF=lF}1a$Vb0OnyAcOJQavojkVu1AX|Ig6o72y>w_a?{y^Z6khUz(5cABqL<@)-BS z>OZ=YHypXi4y>_0ZPz7>7jGs+;%#e5E;rzl+_|cMrZHJWt_5bZ9{f&w8N8TaH0}c1 zFPiavt@p;0o2a-aLs2%jK#PiiOhWPb0NZbbxt#Q;0m~CFtoW~F=~#5{YE8Li!ZDFM zX$IWi{(Vn4mJfC-n&yCu9jhJ$95zvfTeG>;EFY@n?{a+MhBbjNOwL z-u$N|&R^3HH-Eljs2I&I<&BQgGO*HEB2gG-rlqJ?!-{-f#rR`h=r;WW2I<&i!?Dc` zuR<7urUeRCp6d$zYoa;PTLQ(pSMT)f&#C>f9`6DrU2e;!-Pk7Nyc^6`s|0@&eVs^l znyMhf`MYM#G4SJao9fK1O699JGW9Vf_$qaTh3)t^2hoUHQv}lYl$-k$?>6WP4zoOB zw=})kb;$7lF8h<)Fupr+*3xJ{BQWe5e!u-Ws6p)Mr)h!9zkUxakLZClMQw9Ex8EtJ zGA<}f%^B@w-hUjk!Ta%h=WEZPmQ0LXwk>3VZ zbBDxm%l23Z2@b`izXct7C>{8FfK|{JTPo`0Oq!}`*#%yH>e;MEi-0p7|B|7C9QA#K zCC;biNyhS_8SAV#A_mMqkw$22iA#;F!oE9BJP(WCU3;?`qee<@6)Ahoxh`Z0z1qv0 zMVxTC!nP><^0N5ox!d|n1|xUJ7myH4s;a3;`-A@^-~=u(M#&dEJ2os5WZo&h|El&h z;mbH1Qa-)InQF&d6+eC3=B&MH@zTc62w!ti>n zB=K*JzP;AWvtOnXnj>}@kFIdb8y4~COOkskt=k46;m7w_XkS~opY54MrI_Tvm$=?S&1x~XJNc_6)sp@qE3;8}l0<`Fg-KgIP+0(SCYwQ`%<_$B63weniWJq|un z_aNQkF|&EI!X&u|>w99o4Z3mUg??t|8*_OK%P1 zf&2hmG1E)2#7|1w8TW}WHUZgjq@P7qOFq2&Eo8EOi2GAx5aTBWgI*ur=9@G>wZ6z# zY*xx9wn^&Attc6zu7Ne$?}qx!p06|x2{n;a!nFh)a0jb?|8P-P^vb}vuM8P&KExGf zI)L}Y{Pmf4PEvZME|rJpd+k;`O)p(kYnnZJWrtY;a*4mK#>z`~siv37LN8%(+?EAi zNR)c%IiJt0#9@pD)nlS|3T_$qqbx>#(Qm8h_@IJK7+aTOFofDn<4G*Tu+ew^JmZ`O zt?~7bIVTjOi|qUb{ao$qo(4tNQUT$w1rf74VOl*OaEV`;>z#@bhbC% z<{l<2e=JN<)*aD9Eqji(`r0T}IG5Ccy<*3&Y%%Xk)dKTT9}0TjH`Z@lSK^xeYK!&W zhPCRKaMagBj-9Im^q+&n18t;ua}iU?C$-1ySVnvLI*qE>UL!QYm{W9bIGc5n&@0b%H#II%i_NA|^h%`jR!oDlIAQxog-TP> z9Zlr#S8!Xd7>w)7KJv;tOKT8#rXW7kX!4ZME`QW3(H3GlIM)cvaJY{_}J>t z^56TrPz9&v&0-&X+lHX|y6M_dv6yG}T*>1~yQwzVs_1PP#%;`(bi4c)_N8G%KKsZw zRahAupU#yEgkI-Ux--2R^9%EArzS=XMC-e5D7b>DTej@jVN7*OCv&h;-tN`?Ml+-) zJNz9yK$A&3Dtc>CHabS_LW~+^BAqE4Q_q`qS)_qJqb9JzA-FVJ%JuSHJKgg8deX2m zn=dFmcx%dnpLtBD>(uXMSo$bnqqm+qH!r;y+jcn&{ch>=x#$Z&(Y%u|uYzm2@SFq3 zZf%2?>2D<(qg`^83Fq?sSC3y?T*m_vD@wd+Km2_)_zWY}>5ZM*R?*ffmFCL~ZQ-1D zm&4)MXJ)AE6rD9}k>AC%#BpAIe4ErS=UIY7*;6pyl~G7HWWKfRS>oRpPI!ef_kPW- zv>^iDQ1qjp0Y>$C|MGJwR`iCSG*fAz*RX=B%7W<k)fI zQFLm#8(O8jM2xj0#xBVzgi~xsN7mDn_$H*?9}368N*R9Ot;M^1CH2hbzJ&XC6FR~$ zH?=wqdJkbB8}G4Ygfl(a&-Wd+EvD;18Gq7#Tq6vB$0xp@V%fnM{W6UiJb;fSr)9EW zjwSjrZ?|SttUyodnYyQR{8um2^)8Pok*8FeZtn^&a2>i=skpj?%1#gdy(+2L?t*|Q<;E1f7lBJY z@10-S;1z%VZj$k5qP?zJcPj#6pow9Y{KnnA%*{e(X9A|f*3;7Q#oOF{WW<hsS;A0-D^JFItnM*3j8 zgVD;c`ODYbu^@>6@r7axH8J54PE&bMX|v?&IZ9`R-)=P07fLF+*G;i-NzEn(HSP*= zGguw*zq??s4z0(8aYNRg8n+pBJdAgH^=?j+sR`ICk7Hny^blIqzlx=IGy6Q1^P6%1 zSMX6i%SSlas?(9+d*)rOiA!R7w+roXMLllVpa7M`+Sn zB;M_2*RtORT<#Jx;NcXp_r<7I7GE?f`AXU(PNjV^mrY354K;UU9Y9_jSs>|otHXp? z^?_xD!Tu6;GjVb(#bS_ESfYodk?M4kMX5Bs&(IJcg*NL;U6n`p9uPw z^-{1aNk;WAiAeX*RBFGrJQ)9sJ4B7DX6F9&&Ca*7;o{TFd4JjuERn|sJ~uk`y!uwV z*dh<(ORJ{3n5Hm8x$tKLZl*f^X;_7Rb~E-w3@L+lCf(2!oQMQUY}KV5|>Pb7pNzW(|4R_QB0Iy`?X`1 z=cMr>{`XmdOF)nQ<)BJfg!I9yV|iPR6aPga?Tck|#o2p#J{^p|6{r8{4FD|&?Th&5 zj_t<0VPz+r{1b$6Mj}5Pz6#dhHuL=4*7U$jO|<9m{k-~xo6S(PVsIzwqr&YN3g#Pe z8q1A=D1@qBn_1%kuNQ7A#98bV1{QyZ*N1Ys;9v=sY(p4R1?jCLL!+w2DDi`Z_MSS^ z^UO77^G(l?I;s9x`1U=8RW9o0Q_Uu3bh(JY$El40g6iQ@T>>mQPjO}v$KJzG^OTK! z3AmdW>YiZn*MIR;Th&5Z`1Ie{aMrFkTL|{*`U*|u3V1v}gY_vMHucH;6|D0?6h0d_ zgi+Z!;IH>swk_TsXCFmeg&*c)E3@3kJZ}wmeLWdIo%+#8zmc{HJXJE>uktt=ZGRcY zRMf%mfMcmgJS9EzylLB*E~S3g-NBzei|XFAcGwDfkWe5q`z(>R-IZ!Vr1EHF6T)76 zpnm@WhyCo*hBNu=JUyEfPG6?HH(MRgJDRD(rZeUF7mXbrl{uVmIA)C-7Bz`(%Y|{@ zZ_R2k4M*?)k=p z-w$$>r>=HP#!4Q4U@oq|CWRlU(~4(3fB4;%kpL6wP$BYze5)nhz4_%k8kg74*Qz_U z#F<2kSRKXmqz>fJE}S*p%xEOzLku606n-S9c3S`GUd{de%{A|KEPEo_2B%dp-EJ{4 zh%{}0pkM6!i0^Qq39~3W-+-3iuEw4Me|Xr+{G_qn`%Chrx%Zkum3woAk~vLW1lHC@YYwAcNdc)zA>*6hWg_E}=_Q*VY7%rl>T8GrmPp%m66&+3?SEb#6l zM0kWJ;62nBFlfkdXozs|=vbJrNEpcAtw$&@Fz9Gc!0T`kP%+?J>I{0;e=cnunozS9pw1;j^aYAD!&^QS+#=#8m0oa3}0tilm z0T35Ppz-1c#=4%vJh{ezf3nAd{-oWH{t1cnTA1|(8{gwM4yzP{{t2gmI9A-Dtnz$h zlNG8ZX6l`GCRjoi3-u>Gx5U9QCt5fob?invymhB(f=^eFBI+*Njq~<`WX8~GwAR0# zXlw-a*wjYtZ2euV@iCJ78$$`BrJ^n)*C9;tM?6U?`*U)K)d%GB%0F!r9pShnBfp!T zbek}4eYN!PrJ}beT~-dZs;ut`H^E~rSzSasC3g_$i1NZ7->a)nD1$|y6zD`_y?8?y z{D`}cW2?ML=%GIIDEd}|%v#P^XzemPq#{UV+)9?OStcd6Q*UuH(q43gg}GfxsEt91 zZQAY=CDpv|ZJQA~(ut6~S;kHi;o`JxB<_1u$Ijw)>l}AHQsjHrE0L*M1tG&5!&QD+S6fk>Md7d+^AZ z1|28*VuHVRUY+LGhkaSO5{G**hB}+efIU2=Sjtp??%*IGhu{BF}ns~<{ww~(=75WWw zpTpvP9^{R6XzkdU-RJli(}8&Bu|IYLEY(=h_{$5BVJL41QLJDig*Pm(f7l&z6D^RWkIRmlxFhJsn z%^}z`bYFvEB2L+AZb(o@V~2Sd)wFw}R7GO7b+c_d&bY~*2!5KtxO=jL%6{H0zsNKb2=sS8^>m= zLIeWkvM#?POUAs@qrFPFN-jCl;l}EetZPe^{|X7Ifh0n#QzZepy_uC-x1I|t8}e@v zmi?6Dnq{J@(^)ovsX62RV zd5RT_(>RqxhXQ3ke|h6f^9|coCqF!yb)&0>L}9W%ObTsdK*{ukb#s-;8)1B6iJo?D zzs@}2Q$)hQS=#13i8CJ!x37Kll;&H=OHKcNIDhW-`=jnNjtRp|gGzIaU2if@MgQwS zOMIW8vvd8Wq%-aUX@P|FscGWPrgp7cDVk$xiK?%iJ!;*CDs_Sh+Rihzp&{dkSW8QB z5d%I2r@LfpsZX6;5(}fBra1?*AJj8-{@MzACh!}*N`~&}O^O0ZG0h>SrUr#&^4Dv={ndg@uW%fbu zC1u*$qs26K?-S+1D~})1aNA2LQa@88j6z_?R1^8!tS`?#27KGl$y#I_6zUfXdhhfU zufv>k&*yV&u48*V%f(F-*WZTc-sy;TJBluCvkc|3kp*$Lu1Kx=*MBNd1yxvW#D!0a zq?u>lei@SMBG{}v_ZkSy0dErn1J1C}5Hc7?1{U_;a58w48OQ+se+7Vr;vfLZLNVYY z|63Ns|1Auy<3H>APu{lv=9IG3tH`e_6<1y_WfT5l=rX9fA$sf|HYwo{@X9Enw|%T<^MTPCW-Ff zp8T7;3tXVi@&u@%JOK(UPk?I7f5z&eXH$ZJPk?E_1pvD5I02FXIsg+uJ0J@X4=4mc zT06PFjKra9eU;vN@1OQ3_tbi|oE`Tmz8Gr`(2(Sn6 z0NeqW07XCrAPRsFSO*XSL;+2H3S+7|u}0fBY#QK*&RMdvb?7igU5^ zgbZQ&N!tszMcQW8ksxznQTodY-@hHU0XqfTW7Gr3gvu(tfn67)(u85c$|W@fBg8S= zk1J(rFsRDLWp%jl_xR}y8%L8eaShTMcTMs159Doeuvw)t@TmHvBbEtmJLlT23`E6g z3kQf@sOiNY%34MG>>hm7&9BZ*r30&N406y9W6~OMB46yU*KDIi7`Uu0e12fj;P_=_ z{-kpX79qZ(*X6=1g;fXv{Zt_A8El6s?NFZVd|(0I>h#M-_s$F&n}c68v%BJVy7h;Z zgF^u&%t0Ax5>IZZj520~AJ85((0?P*Bi3qim3i8>Y9gc!B)Wetsd>!TKk6>X{>8-6 z1jZliwyB<2u3Dk=VYci4T-8ThVaar(O!A1TCL&K7;I&D;jtbm^!8q4f(iswOf~%7s zL@zr&Yu^*Bh+uRV{l&Ie52NCqL+a1*$6~4W#~8NC5KQ1Vo0h+4j2JtIvMHh6#qdo+ z*5-sw7h0QEN~c|d!|^{59PyGuP9B7OBkyLfcIJot?gm!x&AC^iE}E8PSPs&xwirn) z44V6n^e&qX<0fJBl9dBS+PbjxAAhNEBRB0%Hoknpxe&4LXjeXNB}zMX#@2rmhMc1$ zIbwqaV~1`i>c7nmgkA0-@UlTzcw=u-ubwDh zc-&wWZE@0BJ?C$G$+f4VDU`!)C(y+178V#LeVwENTXpQIzAJ{DNiNHbn5rz_qUPv^ z&4SX^Z#)!po*nMzWU7f5hvUV$&PG=6+K^aAv`{SGMn>p|omiP&z@}I|{d_C;xx$PB z-qPv!2)+Iv8aG>KPRb5MzwzFo3=~tC2fG=|pNAL_eX#2vi-hfPcAXfjKbwB#=wp&X zT^yLD@MFWI1BR!&)QG2e|5R3k)|J4BoSn?|^6YV%R708}mTN(S_iwYcbUYp%f_HnN zk>fnpatLj*2hkgKZ^znw!!S)0`3MSSskc=R_nwc9Uf*EpVhudb%UEj^jbWHk*sd;w zB?PHT(4$qWbvk$EtlW{sRtP+Q)PPa1YyMKapJtDaq7 zVmSw7=jD|v>N4B!85JISt_N^eyqRXP5h}$J3}b!RB(na{Oi%r$^dgO6Z2lYNqYb;f zzDEaQ?n$QQ+6{$D>mOny82*-F?k@xnw7VfF&mvXKFg^7B&6Y|YJzpy-=++{yC^^jT z?15VY0=Oq5fO`)D=wl#&Yb^q}W&vp#0672_fD1qckOB|^gaAwcB>+-b!vUZGNC413 z0ssbp0ssfV1E2xO0N~xl;J%IU;8UF`mS zNMLwjN&BA;klFD4S%tHJU&G{&3p!GBK_0xeCGYa`sA89gyL<<6^%fH zwN8(F9IPOavK0S5;m23O$?;S?qv;cA#SmeupMSZ(A;y^1Gi;>OMkZnVJ1X}SHc`ro zzG2q84U=eN^FbxZ%6&boFg`-Es0&qs`F zvP-q|0?;p=hBjpd54@p}9T3KbHb4wjh)WfFj20?Mob%LmeqAU*|r==VjX zAZ-b3A;>oev_cl7d4PQlY&EcVpe!`+X#)@h$}@quCWu4(I1OQ`a^)V1-1-e41B0xUIf;$0PHd--w13euvH*G0{GDP@&!QO7Z;@4fQ9BHH3RHhXEXcvQ!|Q z5Auvax&!zGz(W1rM35H@fR2eFh+zWj57K(T&jA+d2f+j13;1Qg{sJ}ul)(qq4CJwZ zSRt@xAe{;PVvtt?e0>144J(k|1o_Z8`~hN6KM|UD1|0_yKotPm?iz^CfjHDpf~Ivr z-?sz!9w5dD5Cmyvz&MDt0IGpc1_%Us(7ZE9Ln{?<3D%_q;$DCe;LCxscECdW3-ycM zgSagK1ppljZa_2e^FW>~@TUQqz^4Z>6JRsIazh|i0n)L+egbwF@D0Qz0j2<`?&g6! zs2_#{{4n4{b)63I8sx`-_$vT(jLd=M2k}^dDJTaIY$k}|f;@SUhQ1rLeOKUn0=5Bh z08)^D3oKM0p}G$BVRON{a0`IyDHyzb zG77*0c{{)cfaRci0+lxb7U~N_bL83qRv-7Clakbe#AA&92{asknRY7lD&)PejQU=smmfDJ$-$cL7J+8I>$pmR12 ztPF@t1K$<^ovTZb_6PCLz&``qYyoNLd^&+xH%N;EKM(+2H=+F$1~I7KLfh>DK!3YI z^Cr6h6d=C`q=|s#1bMZrN>;YoHhsKq? zfSm`n8LHj@nfc9esq=^At011$;0cA*l9}4Ue zuu#3S193-Sq4h#>ci;;FI}L0d0J@Gq_qQ_C@jo*fz){$-Lz|k5llrh zJ$REzK{$z!C>JauB0M%aIeAU2csnnmAivyGH08|+u7kix=hv~Xpv_FLg)E$92J3qPXh6(2zIAISsHoJr~@)YLNrM6hR zXF>-@M=hg{q1HKwJeV9$nVlF*p3RFYD*Oce4vrR+lf5olw8cz=(>^7EDqBaD)bO;M z_c%EiH}R~8?^s3!McG+d*t>HSeG~_Q0RL=6?AlqH+u21yz}-z#>KzY)06%zXDmEM( z+!GUddJ9u^4*TwY#9n84e)p+9g4vo-{)UZV)?FAB6l7OLL3bP!65`Ww$$M#OATJDy zi@nxKy;d71(GG)v0Dn3xdJRO-o*Z{_AJd|;GV5qi8s$f^l;|iD>dDE$Ne6`?gkr(vGG*5F`JkkcSA(93CJsez{VL{EgSv8f zTCk|7$RQC(p;JR7i_&W7Y9S$TfguT4vEAdCqkL#$!m_HU%JmUK4d7Dnzd!%~_acDH z!~g#L_dMv&G9dU&3}u4L$P;(~0ss*JjUOQcPyna^Xep|=sqV0&;^(S+yEhfLO>5-69D_)cNnD2-+8?~edE-}4P(vruu$$f96aQA`&{X` za<-s4yU4Y(`ELrNpw!hUfAOyqmqi`|_yM{e;`a!dNVtI;`%HBnC?V{mWR5TLbj0TC zSvI*sb*G*jQs39Uv>WLVQB^aXm^>=GlT+slQ@DW*&=Sur(JquuNd72%(cZK~gZ+3m zJ%)~VVEjRzsQ0tKgvBcoHr2bG&b6QLf!Nm5+|G&hKY9F`#64Ov*YLP&d~!^v3z(%*=!+tPqEI5rv{ z=O7&pr>M85kQPVndqOctk3#@=fC19vNM*F0fOI*gRZnstZH`R_O<_o%qj4@a2GZ!T z%&zc)bUHj>*`7mM9U)tv93j1q**lr9kY-1tE=~xf+flx1^#{`Kz~*h>fb=`0XztP> z4Ua9%qYg;NqdTEQ0@Cte_>7tY>3KK>!>vJ@9?p)KsF1G5J=e4%r0u~t#ApQRdmOU% zzJN47R_oI~LOLHS=G8Hf)<;R5mpG*Nv0Zhj1ZjSV2?XOqx*ryBCu)%P2Mo7tJEZ@S z^x=9E(g5M^&_jfDK!|mY<{>Q*>{3g8NDqXS+T|If3DPq4g%{EV8JwJMfwVz%%Vo47 zeUOa(_*Fe*!f9F4~-kT+6JF5kI957WDalQ{eYtwIo++DqCLw8u|q@LK+;dy0cgfKL+XU|LoM)eTUJ;g6&6aB146@G98 z!_7W@|Khw|!b$w7CvVrL-R;qKI{EA82--s!*bP*cgrKn9G5(e2ECkb^pZ~yo*A>Vk z;bpp=9~vKZ-z9aL)4K@aG@|GEow4;c@0C8k^Hs-=LB%xVxUdF7@iSt=zf*$lIz@h% zcBi>3`%fzdZnQCTDw3I8|NN2-F3@em+n@) z>Efy#y$_CxXe`1e-|cJM>Gx_G7Qc^TnlBn8UrR~5Sd$4p{0Vh2L)w|yY>`l&#yY)W z7A0l!%xUm=*Y0m*us@J;`pdm2MoBa0VwqTHq_R}=+!5VmU@4s=D5D?qqoU(7VvM)O z0gcD+Ys-6mwD=sFt77gqZ;RV4r4HC$H=nfGs!aZT_B(a+hgxFBrS$LZDVRF^pQ_9< z!JRc<9w`#OnZuuIwN#9xh}|sg?uNfpif@Wlmx^ah79soDHNrKIf}8*1UDc4lkMeX0 zt_$P8YzDS?)`1)2g7)iO1VmY9*N1if6fh4MHGVUxOH0vco(DZ|Bjl@e*H_a*N9wT~ zn%$HN5LU~1#l7E#;fiVF+Dtk($6Ic1PPd9!>)KeUaA^ zpfpnE(`um*L5%N;cTd)HsDbv3hNi2!ohRpuhu`eVY%imU$vFltQC8xK5jB9cVGXkh{Qk=v3Dv;QjFCL zw?Kbqgva=`V@j2eAOS7~tKK&ATUT!A_u#EtYP}LP-fU~6n`*gWom=EWo4two*&L-> zd3M9U3@u;kmtVIhd1et>J}4)e{vO~v^$nu>WR9Kk35DNAcutA?&_OMIyxW}OdyxI& zYA$Q46)PN~80FiLzu)inqfD&cQhT^<$3I6kR=G#T&y+{v=Y8JfQe47**ZoBy+9{o? z+qGURuZUDww3=$MvXD;C{!4fanm7|tL8I+p97D*%N#M}bH&`F$Y9Zk_^G{1JaNCCK zd{6@;)iA`6vE{V%>;AMNVWtYM_SGd?kAI$mUv6MHdBmeP)x>4*`@nX>Si#KoNt+Hi zeCL-?2A6rt(KeYVi%t!afO9tLvnp=(oizshDj5^QnO?Pz3-#^_D=%#NqyuT&lF6B3 zmy6NSjvZfQU!FwZc7!jl)duk7oN@3UP)p;yQh7Q?EafkqWy?%3XE$3~xJ+*w<#UQp z0d;}?eJK0i=NmUmK3{x;gGT7B!5JSAX;`zP>VPQ88G$!xyuHzjIrHU*gKzCg)o|4P zhl=$dB$VRyqbL@{f6RJ+pGEaoMwF>cID5@sKC>M5?=#4}vv*jMNP~N~W*{FKmn;}( zlA9)!uun->TBearG|ywk*!gQgw8F^%KSTFZF1*~I7M;$IRx{;nsNJ7+yI`x4I_ZQQ z;YP&Shu0G&x`$F`796==_lx!9&>Mc>Gk8?{WcP~KLSwHMRn|3Cz+qj;Tgt4%6ij}> zlOKSE|BkQo^8MiP-xE&dQWV02zN|~Uj^tnX%q)?Zu7238dNCv#WINUSBUqiIlFn?j z@`Ea5b9>Sy>Vy^yRyXHVlG^>$<-6!fQq(f+6$h?Qq!uR3AQ*S_9pzcwi0#6Xx%ze zGW+2Z6l4B5sOJD-_8$z7&Q@B!Oyut-kFY`x0Ri}+Bxgs-aQ8pWD%Fr3ZXpzz zEQWEZ+OusIgV_@STCB~pjhZiuKln(D2kCx8{sqsmHMjUl@qGlh|9v3abe^7DqgPJT zvxdnJffVw#A`{0OXLrNgd_A!pYd^i>HxxBhvKcsQ&4#Cbv^u$te`-^o`qL%5Ayb1@ z=zGou=lM_E1BiS;W960rXlxAnBz?tOV;L-D-#nJb)u;pzLjJbJn|GRgg*Ir&3f8M^0yF5L` zczpBb>%5aw?Mh#tUJ^IAmI(|D9IUl<={OskpTWZe$RwE`HgIfi_f)x{o3RK;n3$RS{rh|&1OzP9%*;kE zBruT`7gvxzFffa3V?$zff1h!TiOE)@u5K*A!z1@M3JMu+NJtI^JG;9fDJdsE85xJ5 zqhsCjix+gZe+iHWIu&d-}R*Vm8xv9P?=+1!-;$;IXJIyCeHp04i2r>Q9$ zXgb4_!$bBiYHAbd`+KU*+S);%moE>S?Cd&bM@AImIy$~vi- znV3)wo1A>}<>-jDudM8s=G`6Pp`2V_xVrj6CLf=^RajUmj)KBO^vwaUlWSS}VB8G@#$I2`-u56eJH%gh^md~xQL6`#+qUvIRdp-~Y2 z_~BW(wkGz2m)F2TR8+$q6_pZSMde2_A|fg}J-xlMk%XfFr-ld|Vk$n2}=lic;mrY}0!ZD(w!?2v46W1gqW#2V6 z_PSVEm5nMZFDAmlAs}8}!dziu;*y)17Iq5=7~4I2c2m{bI%yjoovYI$3DQU$cB9aOA_Na%( z$5kTq^&iWanZ31ESAC0PV-w)=^RJ&rMFpZ@U=Wdh`?h4cz0I>AE88DxW79GzBhwR{ zkx|3K!Qu4+3k!#`re@@=p5A@QmoM`UgoL8(|MSuB|7GOA#tHuW`wpPCP-Me^K>MN*^+wmO;beXLtHQ>4lhtS%oWU$P<-%Q0eB<84x3=G2BGr6D zW-dWKD3$bMH;cdeTGi!2cO##o>=4npZd>9u7}8QzG@H$>V#Y+VY%i9Wvt-)T5*@ zl|LMs31UhS4vO=Vwic}8BV6|%5PT~F=18AnetyA>FU1lmt_It(R70ds747$IAkMwH zH`mplfEL#fDTCipYsJR0{m1oS37hot18>nVHqG(OE379@9|dJqUw5r}ob{joczZXf zIOEuTWDA9KBWM&X>0ze(?~ zZTO&<1kD>dcCoJuJs9z|i>u%T>ByO4*4}qrZzP!`U)cFbr-$`FJETRvcXX~xBCs9sdfrEy7XOM;RW?h;jibxx zQ^6YN4D*+vD!Zu{+=-z#b%qoEeIp;X2<>lc9H?|MFf`zjy45Yba)0)!L}$_qe|{D= z@Xl}Nvblmuab;C(A%_iZ4$tG*wdo@njFkMZh`&fD<*CHK??r=+5%hjMiP=;}ANGzy zeUy9|^v7jmiM^$9)Uo7ErAa?BJnZg;X3<&axEupH4Ifsu(xH`kN*Oi|?h|Ar6hu@Y z4h>YJVKHH#k-7go6NH`_LC>H6rNMs=0O%PUG&kTi`rg&M+A`RK61feyr?M3@_j4GV zFUMR(18y!;vS1uilBlL1y)(u(SOT4g^4&aoLRgdE@LJS58z#a3k&IN_K7eyU*sS<% zq+5vGVk^`4u6HFaNpD9D{TyR?^}GP}wnP0hu~Rd)UHQ}tx~9?o#|^G$G^Vb2l*u1S zoMM$phmoEvo!<;S9gxx4z1+TFY*Kpu`-e|rSaNL6P+u6a=F@PeQcBPG1;4IFomg4H z_%3s9Atsv%TgSeJEQukcrr(X8n4XxyezMB}$Nkwx7HhJ6^xk>G-{Ac?KZ^6eG497i zGue;sKCNiib2VPXwEv~~qbP{>xl8UL*0}AhHOUVJ%hu}@oxf-%pHCO|dBvWK>2J5&z-CmLID9y~`+mLtE0xhK=1QhP#c2QLz ziNYSnbR><)zXE-9X&4wOPuMawJmSm+<~}M)Puzz|tBG#JO#9aMa@tAS-5=Ktk4dGz zA^l*&tO&n}yWzMZQDsTA#(G9;_JACs)QG14inZV{FRt{c^fN|pIN@jQp3ryU*$##X zIJ(RQf5ZMfE_)umW@ntd8-PkP&Cf&Ar6cx%$uJu#-#}ksjr#el-oS(wUzFA^-Kp6?@5|XHKA|J2{mP20GuhZTi z2;^aFkLi5R)snp024rkH2W^ZD5G2UMN8$Ao-qacYD*9I5Fy2;=8WSqR`%1pdt$@Ei zXz@kK@%vBh_H)dQmIs&gsygS1oZ9Q?FJ=(+KQ4UK@cA&_e~S>sz?X$B`I3c%dQ>mZ zEk>#Iy2f9I|K^mQrI*Y>*H0itB<8V+qMNit_#2^#-^pFC(#58==g%@M%J=&*DQ1uD zzC%7;38|HFpD}*nur#MrB_xsJGF8QInIfl$@l;-!sqg&bt_~|e6KqdRXqP`SAbF6ld`*XDE%2cKb2%cf4o+O02DEJZ4s=>(c8aMvw z=5!RzH+qd_+H>LYHkl<*aBIG&JQuH$OL{`B^yC%B;A(M)^7j}?|0}7l&t~$96)xSW z7&xa2g7bo2>*V~kQt`D37*9m!>=XOY*3rJ(ZS0Qns~z0C=j)fYzjz7BHaZ?x`IB2s zEl!lF3s8CI-&Yf|sWRhmP*FtPT5H~)ETJZkyy`x1(`L-?rbRccif%TT!7f>Qj}@`Q zMJ1g1f?Ho>@6fDrjtM_baQ7F(G>>BSfb-iAmYNG9D|J!V8FEwWdf&LE=st*l`aa|F zKC|S8|4dWgSufH+Q`LRMjM|Qj zxU`#wiBs6s5={Dy+7(p}lV()}1I54j3 zpI@53oNcJ#@+9_x&zP)wN${ynOG53nhs|okB5i;M&E9!h1*h(}pR6b_UmH+Fs(7{d z<7+Cj*yaSpRrN+rE5g6@wq2+1Q+peRH!J`Xut-xJ{T2^P z`pbC7dn7|EHcqCMnr;ReMqI(VJIczhuwDpzPp>QDzqHN1?I*Jk;W132UlR;m<5-S4 zw8=d;2og8J(LVZdB{+Q*NI4z-yqD?2f-$P~d*tZ6kxdhdbd_iZdrv}wQUo%O( zKWDaf>g)|l4N~T&wFasBcxh?H9t)czBvcQJdRzONX-PF8d5s=isFcgArvLG20##Qm z78`$JYPK^wZ}1H@S|_4>6vx7#USxhSyPUXDz161msSq2s=})>=3Z~FSAEt7HY6gPG zn)Q&5QWbxiS<82KvpdQTJ8M7QQo&HSID2HYSffkna4#XGo(W9ar48CmHNps&n>5ano89y5{CixOZ$_ z|8S_veG$IpxjC>N@y`Ax#_I|vcIKYVbSG#&uT!RRhg!jBtQE07T97eTy!(ZlgEG)v zMK{qQVh-mSM_fEydlIt@DV4I-uV9LujrnF?FBMUHIQQ}kQ}gfsO;H7~zfTs^4j(0E zE%4{X*mkIum(hr@xIg)R_C7R;=-MYiWzVAjcq++dcHKm4zP{%h;Gra)A*j!X_O@uw zKs{HDDBn)enjyH33whrU;i5&?Sm_+COLuh zP^KjFJdc?pN{Av95kfLXhB6hIGlxhd6*+5Re`kN+IoG+a?>c{+KhE>(`R#kJ{p_{Z zyY{wfpU@7vD*ZpEGuNklBspcmK72z`#I``KrYcq6AIxL)5^x+fA~PWk5FAJUws zk$U)<*zT_+HU19Abrj<$?adLtZSshAzc3+rz*=)D;+xn68}*Rg332&3RRWnl=~7pw zO>(n38*d^u2|Kd-4}?F{jb;1QJnACcBZcLjWpci*dVXHZ=!Tn+Mg5O2?s{xq?XNv8 z+rQmZeLMYu?s+qdwhzT3p8}=aC;o1~=a-AUPAGj7T>tp!9xI1cne0|jvF7iH;d$zr zyG71(asnz3&SrgQAF#cBdBP5-{YI{H#=yeQk51eTS&}$bU$a#=3hl?b*518cc~R6w zknt%*R=-(-lcXJ+<61&}T8ng2Zln5@&UNMiGXp6Gl*kZy(OQ(_!t7|uJ71GT3aLsw zZ1%j#f9dhXCRT6ibSU>Nz2ZxCCv7gUO{*+cRydZ)SSU;P z(sPVTy&3scJILNiBdisLEn@Mf)WeqhDUD}Gz3xj=YuBwu*f^fo&dYEu-fa9%+e)bR zJ^JhUSEi>%Uwc>6PiyD@SlE2>Z7Z8DJ)LUoXtR)zIYoYmP^- z+^|2R^~Ul3~s#Bv*gPA=1ul$$MJ@_%zjV%@b=@4l^N0{(MU$N z15TXur=O-Q>zsZoB>i}X&+Z!hPr4*j_G!lzjI+&U7T zBfZiw|P=pf$KieML)C%^{a$9ez3tUC9t~T`Cq-T#N$NKo5s=aJ*OQOunYW)4b&$TxM!WkvBlPdf6!f@%@sG5D* zYPFwSeO6xjeGhLVj5(y}iwRfH4>kG%hX*>}uUOgB7??(#^c37zd@~jP{M;Hua13k_V&1Q|4TEHFT7QYf{!!8?%Z8cE_b!9 z+Pd{>fuxN=n#E+gqi2NQBgb%EePH(5{;7LZc6=4a$+{c6@w38;)T}tQ4ul`aPEDR^ z#=r74Zd>bgTEzK@xBh<@-R$XhjB3lWxjy07z5aHAQ4!bndF)WJrN+6+>T>p0rb5ae z{F!y4vbXu!MXN5D2Hgv09($iA;>dC*^x?ba8nc7^Ifvlcj}3HvVuL*E;tz^G7Z}P$ zKHJUmwWR3zL-fmqr?BDGy)##QeU!vh9sE`9d=ImadA}2d8uS-$c$E5m)rci=^Xi|G zMply!%KnkhZ*D{syZ5pVxnxf3Gf{IoEnYeyt-!7^`8^?Pt3`Ol1(KMmU6O)_%+ zz9{Bm=d}W;(qTMqy7QCnVRB@zz~<9iYW(VF0>@?EP#F<@n zhy1LmOfi9NA-PyU#Zt({|by z$@9iec&Ui*-E`jdvyHfTSx@UnBYXT;nys;D`&U{mjwekTy3RNTjK@%1z3zAE_igu> zf>x|8Q+2;HIs{=0<8&!DgiE~PsHwo>XjRw3MaGo>zjJ{3UC4v@N_?~le=8EUEndgXyU@;@ zuojUx_vA;lv}&a3f#zb|#RRXvdpfBbv@gYtQ_pZP+ml53W_MUHq*co&4{&4~jNKQs zXnKhonl74k#%eg>y%xjxeJbe!?L?JfnSV{)C2l!N3B((O)-OV7?-Zr%tPV`EX)NaI zJa*BI+o%3;$F0Kf=a+XV7Ryo1IbA|#1KzIZm(qSI7(V@>e7%I}>a8F@k1LxG)bKAwi_Ut_ zPq&ii<{Jlc-tVg(VtLCXemx62IC|mR_FLM*7rE(*X?)h{lz3MwD0P?3mO^aZHv2!- zcr3-ce7O5DB{@}pdL~zXEyH11l*aV5#>w9S)h?~;H1gNGcACo)pY$=@T&*FY=!-?o z|C&z1I@?&DdjI0kVC#vz7dH|u`gco7*`>UH733s65l69cB|W%VJ=aoeE+nViq;_Q? zX8)fN>o3>!t;?seFF8Ivi+|Amwd&g1>O!_m+bM7JC(65-uA$Kvv@~X32$E4wPK}=H z@um_hdbsLaMq==~^JmH_BVP`QBNy+HZmA?QLpl-8oOJE%(KR}&sk4D+nRsHAx#d0^ z)y|L-MuZTl5|6)lU+I53F8eY5eM2(oiPRppQ`R0fss`a)X5;YsAO?^IAU8qggYyk2 z(1@Y}*9IRP1h**$?g=hR1)1ljtrzmRd6&OTn$+)7o4LqvK>5V{Ta?5Nn-8CfS-$>F zQgr1hossf0!xCxU!N2=JZjkQFPb^}RYx;k0XpC~twSCb3I z=uh|;pGSI~-WTt` zdfDqQ^F5>Svky0K`8dgf=vnJzQM^+|3fDJbn&%+)p&ky8#)>h#ilTo)pG#TeZ8jY4=i^rN!X z!j+}`8V=bOBdw|R5E|XzR+oPMVD*Zjcd2e6kxk*hHg5H$u{HFjS>`g2pkdL-EOT(^ z%?nhQEP6UFo?+p;ztQyg*KgOKKR5!pBnWC9ZvoN;;uE{4VC=nY=}= zYx=QioOl+3-q_8oPQ?GVQSm94!@kA69@}klFwa^$tE*jd_f2rvchbr)W4puIC!MaJ zIrum<5gWBMaH)vxG~=02`tH2dPs!zfWynOtU#N62p7ePoF#QXM4(lPkffFo>#wdddKRd1Y?$HHT|HR<}kEhf_8pv=AZS6Z?Cbji1u{JMj~ z&evDmX+({s!?n!F5|rBT`|2f(gg?O`pt#ff=T44|aZknJLFF)M<*%(GMSWpO5*E{|Ops8sTa`Bd?MT6Ep@ z1%r_M=iBzt>D8vq(G1>Fm&0z`sGsvG`$CofUld?lUt)yueRzv18-uNlkM0?- ze{vWS82hPZfKpSb$@@V!u&6V zY1-TD#<~1|maEty6IvH0T?a`kmv;&1Jvp-@`D$A%X;k@7=-+zS$T!scT2~p5=;Y36 zX0h#Wr!u38?TO~S@8Nzr6RLGeSfA&-H};df#JEZS9I{NmUD^(x4o2&e6)xe&<$rIT zeL7d0x$u-#-3_3_O#&Q$!njF+FUk>2HgTo<2NXdx+a zTbhXBG_!zpU)alx0;Rx{yml=UzM?mky&gVI&u_`^pXQYfc|c7kysR|bZt$#S`dYc_ zAL>!+!C|$=AH-#!X*<+YuQzc?e>j&)pfjSmWZ!?10~_~2r>&0V!Bnsiejv9I>QqqS zw>QN?n{Ji&o}bE0kQug7SI$s))YZ^G-Gj$clz#Wg1kX}_V9hFfh4@n!CtFNt&s|k-F`^F^^RTY{;;=g-MLra zei2;~|2JHDk4Z(qGyM9e*6`t>@x;`y`PoHW%9f0&N|+uEBJ&@$o^Qg z+WMEqQO>|<=Q*{R$Sql&Uin+JHdRgyO?)c*><;BC6sIN@Zjx2Luc@7pa@bJqeVtfA zRd|P1;iAp^8o>_F`&r9Z(of&Jyqcr!=1thWArKb<{$wWJc>PE?_DWCXx$~=@d0IKG z1%KOaoOsVeOV4+IUb?;i2c?)JTWv(sNd1siPRO4HvjNvV?|+uglofrFU8aN=&qt*2 z6R2BXe&wEAfNCLmTu(-I$tmWOX8;b#Sx3#W!M8-LP6p>!7dn-;0+u1a6cJ} z?5fn{tUDKktGY^GU=iC!d)$3P>$+Ei|H;7|Q^OqW-iS3wxMo0(zt4l$7VE?NARwjy zX?Tp`^}_JCA+R1^TMPr%xF4b;EPRaN^~ud3VPCKwUaJfP)>}gW0%CRuK*0Ju2tdGg zbU++(dR?{kQbu=Fv8 z_5C2>IttcPf`kF<9S_kF<~zo)z5=5i*1>?cF^A{~YaC-({~e@0NZ3ET#v2B#hw}{s zVj7T8KLTQSeKvah@S1KIu-)?z9bxff4Eyf_i5@@t0x4K;cU%K8_c4a`#Tf0F2sz!hrpNW%GZ`|096W^Unn^ z3|QlFh>o!6F^2uOgGA3iyiOkmtiO7QjxgsjhV_LQ?O@q{7_dGJ11le6SU(REJ$^W+ zFkrpeAv(g0#~9Y9gGA523Pz0|20nX?Vf`>jI2W*QYLGBs|JM)E5k7T{VSP15JLcy- z4x?QQqkbD;^!VZL8(_fxjStZgrUSScBy5L)o`12UyNB&w7+CTc!}0WjM9)9^4?66} z{mfSAXO1!KzY(LI3yJ9oWX#v zMF|pp{0RpbJs!;C|4q;i1J;WiqNDM*0*sy?%>BXUxCYj9VAL02v>y-Wu+LD8b|sAZ zS%A^~W4>RPG3p@~h5@%X6(oB9!94!^!U7O*JTiyqsD2P&I2Uk!;5@*9HBN`<2=gCf z*#8TRc6c8KtdBiJM_BV1!^eMsM2{Z_qXy154ES7Hkgx_~_}d)x_%Vt9_2_BPz6PTmb9>`4+AkbqSib`jJ$}sn%><(!zVFQ-;p@Uc&p&#eVY~O? zBS$q-#~Aki9wd7HF^~Ta81*MH>Yrh>W6ozZM*De;`gMTOju|Cq;rYj7V1tY?P+1RQ_< zAv$V5hKDsF810J37}kFQiS8foxE=Osih=2mF|1DkiQa$E`#G%lIj(_N`WVCd0g&kZ zhw```);MBdzGDpQD>2$(9SnFIbBKrgaNVmAv&7RcL1Zuk9j<_JFbEC+!*yG810zjiNI)A#i;)ZFnav3FBtIF;t(BS z=3@-E_Z~>NZE$~p+W`aC2OOd!EO(4y{b!Kq{S6)mV8D9kLv(}%jxnr%h0#ueffF#W z_A!R_zd@qMkBw0SUlRs=Eh>=c`F{j3dj7cph5>6l4$%=7J;t#A4v^^i$2=Zh#i-}R zs4v23$HKs27+4vjegRMfTjK>&`Cj%sU{#B0KVT~UKK6{K|{YQ{+ zE@0o(AYs7z>xbwFpE|~{{v}2`=I1>Qqg@N5{wKib@natUjWO!!0B!~eUl#^?{>6^& z9=3a7V98?)$I}NAJ^z@;Lwk&RUX1#3jCRc9NfbuAI!66BfYIZJuLlE;)AA4AOx9IU;9{+EGb{Mc;>&kyGQU~^mp>p3v$A7Qi~59hGY zP>gmZjQTl%(fwn-UzaiJ88GV807maWn8$x#jCvW2`XPYfT)_E(^8f>m+364+Vg6$b z->)i+c6c8KtdBiJM_BV1!^gKkqQ{SUyoK`(13s4)B&>n>zq|hL0nb5?AM^Ns4Yb36 zeexWlqxY-y7{hkV&toJ;yBbFQD!}OR!{@+&w^t6)5oS5YaC>t=qW6FJKEQzWfrsb_ zpF75|ejFrvf5SZfyI|A{V$?Tav}0~>B1XFoM*Uxa(c{O)sKFc?HE2ig|8ReXkHP(c z3nUCU{#%FW2#XzKIQ~wM==sMy{@Y^Iqx*sNPcYiCF>p8rRyoG7ehDOc{BTS#;CRdr z(Gg}k#;`sUBzpeQ{lI$v;~I!%k1?zt0g0Y}I1eyj&5c8Jgijx1SYM0Lj=8<@80{A@ z>VE-@9zW*(W`a?F0^nwl@O5FJ=N~=Ku-*Ick)s-^V+_ah0VI0Yrn@ zW6ozZM*De;`VD~536EG2QpiTfG%S$2u zEajJXx3kMoCzpb)*6Rjsl&A6Ha&jAZR?9Vs8G#x$x53fLWvcgp|YyW(O(zNjzvOWqrjTBOTTDJ$0zTq!RsD365lfK?HMqG_mYQ5 za0@G*&^NSUWu8lxich+H%89PqllCf8^mMHvGso{-#v*?y8l)?Z6$e|9l5lYT^6QVr z19Km}mh}`Lr3g(e`x`x(UqRMd7f2pARO=kPHeM=o5}TB$II(t;%LK2Y>-oKuwk~7l z&}%msY-lWR_e8p4HRCsV8;Q2AZ7akIzI$WNBfHjL%NSD2E$foFVcW^RS7hH7!Y6$n zSM)tmoZ-8tog?{cqJJ21%&yY02qdE%4E=8B{PG?a5vkx!8F%ZIRF5a_)VRL*+1G5r zcvbs4)sB_K z&_K_J6A@D_H=6LvM)OsBjLCE2+hSx;-9jCeeIiZOcziyivxSeSL>B_xYJ&Dnk*}=% ztq0}Y9pv}6JDyTzX85xpgG&oxJGZhZ?h4x=92tUb2ORn3v=Pbt!I=%g<5juOPknpG zf30xVLSRey$+E)J{*-2mxFvzy;S$4nlBhnSPYeuJDC`t`@13)GQX3Hz9_Y;Zwyo_|@ z7@JUdG=sw}q9FNFRHOPYPt>yUU-MPj|J3U%6Q;D&cREd{&7>x5a9Wpyf5Gp@rB`zQ*jXck zjKs1kzOPYxR2>YpbVMo)25k_b*I8)3fxeH{BijEjKMOPm1!zxWcqkdbKGL>>+HWv8 zo56R3AUQy?f@BBD04P7R-I9{poD9T=Tjz9w`t?b%m$>%6~o zXLSc%YFn=?i5mZ*RZwcPoIQ8`ono{3Hv!N4Z@@R)^&joZHckbFJ!qWvyAvCdQ`2I) z%ysSg3XfZ5mr94>9vg>k(KbFIlc4v#iXQcDwGUcTzVT5h#dGq?Zwi_f2NAU1*P$*m!0sQ+V0TQk|;MxzpE(r%a zB-A~H+K@0tz%A66ojblS2KGZKkTSPa@6D&B(&S0x~~8 zk3>dBA|@s#h=ha$va+%QHQtbC&z>PlN=gV97ZXCwCZ_Q>DAf05qaUZkR;0udAxL_9q`5h^Mwkq(qpRnGsP@ zQG}eF9Jzo0K0-%Fhg`aJ38AN_M}GYHfpBtiBLDvVLsV5&kq;j}ATM6LK-${cke4rC zB7S~;NJ>fy!p+SMwFi;qV^o z+}SiVG>}J+9wEPe{X%ZvzKx8Jk0Wt$aR?OhTU=a3#>U1FLPA1BK|ukToSa0`)6vFrbe2Ynh;xCTjb1{GsxGkUlCtlU*yS?CrCm<0`l{*Z*Qctvl9sk2|;pm za~lM%2ETkdOd9&{MOaT>J^}qr<7G`OiuNgqqO}mJI;SzA+r0&ZlGrwa`!kccD#_(t zU!I%fXpb5^(~p!Rn%}z5%XR5pc&2*gJv$Nak1U^jURzegaZ2wxo<7wv^sCWr8fPIx zo+s)tandF?*@$A*haf!KY#ruDCiVP1BC-+aw?ud~lf`O4B+aX(=` z@>{6i1A`1-Q(l>UQ*x&z8(xpCKFJ8Nlc?Q|^=6`K zSw!f#$zCoC;8uJnp`;YbSRlH$wB|VwmByT=e2Ox3&g<-kVCCNAq*Ucp_LM*y2@$_L zLz5z5UIh7B?uHLi1J&Psb*uNk<>Fk)rzLh2A=NOOYKT|<_P}0bd98CPBT0dYVcLUK zEabLzCa6Gm!?uX4#lTL!>Fq6fhDYGEGCxEA4HNs;jXDa)POUc#eZs>Br9dxCFjy)P_9N~ z3Lbt?kLj5WPua=?p^Lo)=Lh>v1~Hp+tQO7=ZpumfRWs0g=_$)tM@lSBop`V)v3k;f z=lQ$3pY@V`4()`M6tOM-Z&<$UGWOvSymh~6C}t^Wra3i?*Z0xD@uVbo zWu}kbr>n@D!T8B!>7xiWM6w%&~jLB46wCeP4BdNz9FMZ^N z$C|?#?0+UgWaJ?ax5swVZrz?$_>Y!tmyF7vclW*%?Q2v2t2pPPKf6MeqsQ}u_J`Xo zt^&UH>W99X{XDzWo#N4GMr)XKZp^-FHC zel67njvW!|4=D>BK*VK}n z1>Ja)r_-jTV#B!G+g7*AYIkT&CVj*=+-w|v%=c)tScYCqE+tp8yv7|@T^KxeW?s>M zIU?`Q*DqgVP4|+AHq3|cC)15J#$POqNTX05CXG{Mx2Q$z%=Lm&((8rf^uws!?6d~C zZfD%}o=Ng+`OU#$?svB?dO+taFaI=&LH)yk?a*(wl;zhh`>(iqAdIQPij>|iV~EWp zi59jxTY1H_xwT!}x7^~zRnEA2qVaB ztN3Fw2;!D^Bq%|pvc)Y&W4$$CT;N~GaAMQmGmY8cgaG9NywZXnHjA(3EIAs&3 zS=Y7R&VctGDc2HfNcjtWl;iqJc)^Rr+@J9)YJd-Dg46>E<1G*-+6BTy>p+-j2M7}# z0AZp}K$vI>2ot3MVIpfFOoRo5iQWTYB4Z#-v;>5SUIJkv9Ux4!284-{fG`mo5GINR z!bE?7Fwq7OCVByciS7VlqQ5|xNC^lNRRLilD90(IR0%0P9qN42qAWZZd2ouc$VWLtXOmr0p z6P*IWLlP*U?5Di0)&aEfG`mY5GFDO!bIXgm`D-`6HNeNqG}*aWDbOh3V|?@7Z4_@1;Rvu zK$z$v5GI-g!bFxpn1~t(6FmmPM6ZA_5uD2wAWWnPgo);WFp)11CaM9#M8iOsC=mz~ zIRIfI4)bE1t3hc4}^){0AZp~AWTFLgo${8Fi{&2CTar0 zL=r%lCFi|HECb|KHiTHpp(Gws{)Ch!$=zuU$IS?iq2f{>l zK$yrA2ouo&VWLzZOhf{Ni8O#PQ5_H_dI*GxUISqw6(CI14upwhfH08=5GEP|!bCrS zFwsXKOcW134}^)tfH09D z5GIlX!bG${nCKl4CW;2aL{EV*kvrf_)(m&|b450++!OMXZT zAgzH*NVvR%R0S?AAr*oY2`(2Qjes->E{!35f=hh3oP^6OW`sXE>$6AfbaRFB)HUvGzd}`NUehfz%T&cOgZ9OLa(dAO(SR0xr`b zg@F_iE_ER_gR~6NEl45Z5*bnH}#Mq}q_aLYf6>Go;;+ia-hkDI%mykTyfg0O=8=u#mPwiU{crq$7~BLaGL7 zFQlQ6HbF`SX(6OjkfuSJ0jVdX^N{94DhH`Kq)?FBLplcOJEUrm`a-%6DK(^BiZ)hAEdE&wqjGcTG+}OXRT;1eu?Exg#Tjb?$qeuiT4-Ie{ynWxR;Hp zimd#7xmD_GSKc?hSVxzSyeZM9uis@&+-~;z>2M=x^8)@+ zQ8m`Wp#pW+`;)fA53Jla53cO~ufC?}b5r^F;QM4SPw`-~(m+0dlLo>_PLwy&n#}y? zWu`wRE$WPalC%Tz)n-dZjQGbd8+2c5eJ=6di)b8I?HpxEQ0Gc0DN$KX-0q!=2Xp?H zFBRnG8TV?yUtI#UC+MZ?)s$Z9?EEXj@zcdwxyw_EFMR+S2eIT?$PH`itVT72a~}U z!f=YsG+oNmA0`OuJ$d|PZh1LV3)m9XE^4Ev6g=twI(?dC%`F4JF}AWiiM@m z;($C$`QH=6x{8Mv5^r9=KJ1^cU&Ps4OgNs{7W#VPoFX-kJOs7iCC?r|dosmM8 zKG1(@EMMYpdNL^zF=er?x*#9Dsl>$O6SwqzFwaN(T@fFCjW^#JB^iOo@1Ad2^5%Eo z@mweIZf&G`|7GH%OU+p+a|f;ddxnd2gKt8`FD3=XZqcso*}0K-QJcrxG;MgY$e*OC z4Vx%C@qht)=8fXyuFcGnN$OXrr)J(bPFFAf`E7ho{p?Odyq#--3atX_dsbI&^ur+G z;$CkQZQ)7nUJWspZUG?`Ch9!5he>QKQ=cZEoX^9ux9)tw+-p}VH8?b|$K!D)Eyrt{ z{Ej=e?wVi=_PMdYFaBl6sH_jZCw``)_ji>mwujS2=9e6bRMLraW_S=w(lS!phpoRJ zR~lda=S691zb|6aHJx#|o*L6y`Ed^SU!>OemH%<>e7H;^o-0N`sQbX`71w1p{;$tB zt$4M_cS6KnnIm#uoI3kvy}UXlsaTp}wr%LG+U~}*$&aT3JH$5-A)oczZX3SaS4-$( znTO4aC@&5Fi%1^i|FMWv(D}D+Dtk6_WqEqBowmN@+4^YB>%!|4x>vT_Sqaw{%QxlT zHPU2;tGUQ?M8;5_*E#t;@WdSheg*xPw{og)-1yz*7)nR+tfJdi_U<_{n(=%i;|qI< z7E?5?5}UEVTE+}?pF7GsekQ+=_&~4t-N5g>iwZL-k|B4Zzo@&8TI%2IzemP+Q;s4{ zm*mAY0<$xY-{;x({u<{@TT;wjNnG)x_vNbGFTHu+f2rxqgI8y`)INxZYjPheGE}{pdyL=(~zjtVVRQVM!%+={IiW^YgFBicz z-S98sl=Bvgx{J?f+^Htn^ng2ejQY2u_G6zM!E0k1;%&0QB`3AFPuy5!r@HDz9N3o~ ztKxk(%;DQixB2?ko^KZ-dHbPajZ5lFne2YNm<~UYif7?&9Bk52THT8%9^r=rSH%zP z|H|%9atE+`tj?~@4%O^vO%begHtF2E-yWY`k-1Q&S)Ymj!Tx+g)$LOO9k}P^|2$tqaqIg1P(}r3s>}?RysmOzZC^ zY+=8+G8+8)^+0#{voPxxSJdD2-E1 z_D*+(1SbkIPDje6mQe~c`xpNpy;m8-)g-0I^oJlM0DHkur>ozcZP?^}&{}!2;n}lz zpHIr2M&1+vyO>AMf|{|}zqyEFy^T^VaSG&n5+3LGQ@F>n!$YqYt$9iT21|YJjHpP${w#@ z3+~QuzMVGO_(4yl^hnaoodBPtN7Xt@?>3Fj5*c4HnaXG5zH9ncmqt=}TJCNTd2Dit zcCi)N-g1-4YlB{3Odxqc9z_VaQ3S~jk^&^W>I5zp;OYSsg@7AHknAA;`wt&}e+IrM zdxKt=z+3pzFkuuHlyvC6!~PsZK3Kjqbkck-e|a(Blo3gk%t&G#l^b7QoV&5d?>Bn4 zzWy?yE7Na&P<#HSb-SmEGh3SX#C!IHdseEbpRCcAHUbw|LTR_TKCOIl*bM$RCWn9N zdc^%6tZ;B?#q4FXtfEvq96Smg=1c;S^-|pDzIpWOE_<=Vod@4PD5vZ?5?#Afv){Ji zqurY;e5R4uknwQ?Z-_>^Xy6ltXPoEkpY9-6UTe+BR-cG}=vBd;&0{;h>L+heRmuOO z+thWmSm^dN&0lKGm=|mF;(~YIp8b|Vwh(zkkt2tY;q=8RwMTypT3-$%zuJ;&A+1-U zl=g4x|L7#yb(JYBNo|-|Wz*wZVXO4w&Hb9Q8TzUhW<77PQkuQ39xaMk9s@cjd0zc9jgr*!{>{+3#;Q@YWZs*eQDD47Dz%lQr}07+V+2 zk*_`A4iEYmuu4DDH|cXQo=@2C6>+UuBNG?Sb8X@_AC&Es{?51awat zJBB!Gsntc7O=3=mzRCdY!w;FdBM%5{sh=^T+Dn}ZmGzvaqQd{0S2V!3A6 ze0>}3z)b93<*S$YzI9)iz^=vv@+92lKtMlD=5&_0K)>w_!n4B?fLfVkm+FY+l+lqeb$ElLrk zgi=MRq4ZG(C_@x*HpM}KdBnw`z@fyU!J)-b#8JXg#Zkl2$1%V$#4!S0qi}J+3{&7z z;?m&K;ws`Q;i}@Q;p*cW;2Po@ffq(m;85U#QwEe2G!(QHiWEu|suXGz`V z=+hX`7}6MlO+wM)(Bjfk&{ERUfRh7?v`Vz9v}&~av<9?>v_@cqQHnT9p{k^&q_1S4WT<2WCJO}| z{cu$&R4G+yRB2TeRh7VL5;awQRRdK+RU z)C|>(z(k|;arANZDfB7zY4mCJ74?<$RrS>X#Wv74)Hece1Ihr$0M~%RfYN}*fYw0K zK*>PWK+QlOoLn(9FamE9$`Hp8*O0=H(vZfG)=<$<$xzi$%~0Ra08n@%@D`$saEx$` zD2ynLXpCr$6pfUORE^Y(^o)`9dj~6^d!Rub(^WgQE zq#)t*;5F+UAVokbfwTb`3bF+x+@?^FD9{NCbb07-z>A|~&fi+%xH)ij9;%urtaKCJK zGnzfh{KK_H!D1{XYo79F6|Z)f)oq-_6@$o)&OhRsGP|flH*Wk$e$^ zL(_fRN})OzuTMyIIk%Ml;r`-JK=Qg$%O@rye$IB;_ZBq(y=*p5$xLx_b9UXy_2__8QG zgn*tMjt9Me!F>=j;6B9$k_RL|$kQNU^v?I4EpdFIM)1HeVwpJjxowzwOO;_b&fq_? zu2u=d)F*$ZgMUcruIp@Clcb9I(M2p^uUwR+`ir03uz#tPM2jKLhg^DR<-w^ck|d)w zjh>lb|31BFfAF$qZEKsedwfFiezqaC=``ig`#9t2DTTSVube7WT`hT}E`LlzZxrEA zZhfir%{b|e(|k(VGrsb3dTZ&yL&3E=y_DO6#k*zOK8~k1DxKc=f9dqocrLWlPI4va z?fsDVUfM15sY#=h4*$NLV5y;OL(`nnuDwdlWn=^w~uF4QZKevzn%P1$J)JXZl;5(5=%B`aH z;UML}^E^#+JL}rAXH z7fjBk7iMSusfme-r0a3~-p;V`hw?e0-MW5Zsc!Sf6I+2LZ>zHm1C0Id&@1bO{B5Wq z?(2~KaJp5F+FR!7ilj=v0JYc}Q<>2BM2(^EPsZ_hSQ*=X+_t@UDAkzH^Rxos1RwdiC)Y8_E*`@%{T5qANsiZdv1q?<(&l z-R4gt+!8PO5GY^yjQMnU45bD>SG~oecC_;Q4Q|GcOvvQKbAErSAE*jblZ$2c zzulafdRDQH)Znz1&G=?ZmX}3!!s17I6si1&YKzD_8swioi}h@gvfh0*LY7BUYINsp zORUsYKI{|9saMnQ54gmKub!3t7Pw&*t0|(TyI9xrVWRDtkX?{A-k7bK_9^+(=gyOG zlqhZunTuSu$u}ABthV=9W*HN|TxRa|%a8KfoU5uu1)al?YgdOR3%fbK%UgG;06jK){@V;RpvA!}|%!&7|7t5Hb-Be9z~N64(03sSjAX`I}WQsXHT=9Mn#KaZ5S4jXO{)jKvsGl+$h5wU%ozrbWi!r?1N@{8T)Mk?mG^STTk?@`i3siMWRW+6QM#k>`dI74a6C1uUKE`{H&JAq1OtrT`z zP|!Nd*72G{^24_;3^Vlgdnr6Dp=&H!7j?7)%~f%~Kbvr}9xLXbdm!x5`_t6@XYh^7 zSDS~k9)6U;F6Vr|tAlku^E2~hLw|bgrya@h-}{Z*f(LDPKDxe?NXa!FW%m0tWN=ql z;><1HJ`RW9RArKks^^#!2AzWO?QGIdX`T~shyGG=x@F1az#>C=<7~B?lJ$eF~Rfj((0pszg_RQypI@VN_%AYWSb%&l=$+X zkeG~ThznzZF*)gmZ$sX#1uoW!j64zx+Igwr^tXBf&MBg}Tsu0F6b{PH;hoc>ldc<$ z_e2$Vu^+hkFI?~2wZBX^YkvBfL_+XxGSzHrl?b+e%A1qyuhWc~NI8?q)SdW-7@oPE z%;gtSDYzt;kZRkX%k*{kUzqzZ#c%QgzHW`J!R8Vj zJF0!TnS&(VxhHN;8T0JC&PgS81l!-gw0?d(NzV0jAc^nozypf@&d86^o_hVhaRtOT zALW>&t2^q2{|N|Il3u{qCmJt2&!S*Qq`sN$%uaRwwfL_|zI;KhS`WPQs-bBYDX@B@ zW`3BQj%`d_5TyUhlD1p%JHPv@*_qz++_5)g3)yiZDJOq_lIM=AX}f6;Ff_ zUY>%juA+l1+o|);UNwo2IfC9*XLrW^T6-EoaYpr08_iOf$*Tu?+0YZd6J*cvdZrkd zF-L?(;tm6I?|xtwZV1ejnSqgV88G1H24>0@z))Ke7&X%aLv3bY!mJO>toMK+a~Ck; zwgyJje82!4kQN+vc7**tFu|UI=Fh-WU@#52B{wi$W(KC_?!Y)a3mB4vuZ}5tfwA>>V0b+W%$Eg#S@=9KXm$r? z;~~I=ISZIf_XAV!h_EQUE?@#}ZLP?z4-B63fGPJfFo-4r#^u$(1o}QO)z$_^($&DE z*%TOPw*v!gA7GkY2u#{3fXQ_kFlHYHX4uv?N*v9=guNP=Vgqi6(g#M<0l-i^0T_4_ zfN#y2foXXbFb0PQ6MA5jjRU?l)&~aB+rZd-2AHbv0TXIZV4^JmOwqZ4IeG;!z>WdN z=On;*x)_**=K<4iXJF)=49uprf#J6!FrE$o#?%DRd>fcdHv*IJHDKcY9To`vB8+RbWn@4vfg>fiX8XFu{i3;g$hY_6cC{4h_k{ z*ZacazzDkx7_Ex~V|f~2D$Wj!(xrj9{WdU>F9b&Pfb-&N10(DZV0gX^jM^hYB5=}y zxwkkl8}9<9*}cFRTMig-y8}~o3c%Uhf!TcwFa`GnrsTW8pnMdVcJBg1_jF+HZVHUm zLx350J20x>0|xFIz|dS876V14Y=)A(eTij2R1=L$f4_GEbQ^7P^T_-+8Tdc^}XF-0$(d$MOC9Eyvlpuk~Bk z`mNty*1pbj?`!Xc8@q?&hVUu4c{;ff`#s$B-VHbSo`Rd4C*TIWSMC-20~)EjXV`y4@zxU!BldK5sBEl=?lNNnHngm)VC^ zs}0<{ah%?)YgUKnf7aaLeE7)EY3n>*2>J1ie||f$_`-!g6dW4&_=PG5TFJ+L$9=$xzk zBV|jQ#;JxposjlQ%_MNsBs1q=-{oz`Ll`M=Q2A2G-8u-J+B`a(vhsxe)fr>m-n6L3C#=m zI3R80${QMM43c4sg@4UjG& z$Z|6s`SHjQg;=l1zv6oOWc#PeWm*ieId)rb%qYuHNxA!4;Q{+^ZksV>oX!}-Q2?e0~1-{R)4 z+=ks_Hn&RM*#CE`{=UUehCMiwx7YUQ<(CHIcF6c7t=%?nc4P3AWiD0URx7m^+&eqV z(DM7=Y1Ji{cFh!|L^Q8E7;}5n$s4+gR`o}=9FSLC8r{AE&hXNd5|h0rOh(uaHLlyY zzGC$5Ib##N%J=uCHI%j$G^>~$xHsXm@aFIKA0EgqzwTo+aLu>X3n$*0=-5#@rSZ_j zr!O}Ozu0;6l)C49NcXa&E>;%IeDf_=p&K*2??ZaDUZ{?>d zMcr}D-Fi1@@z^5iyy@M_E8Z(ve`-3YH~LJ_)sN3KURf`8JwAQ=t*5qrU*eNhm76Zd zUm5$(_xtr3v-=JyKedU;N^*Lb+EDU!{JHQN0}CDV*;RY&;sy+^mM(v;yGq~M-M(LD z!vf1Imk~otZ`O8Z z2I{LO+c$JrJUmYW&%@;61EZ3pz<@x%ueyG(*B|yf z6ujBZ-%hzbWS(V%-)Z^7Bg_LD%bMEl6-u(E6s>z3m!hEj>Ewv=n2?#Z2Sy zKA>sHy6kOc=kJsR+|Y?k^)+3*C~JfMX19E+l5-yO)!Q%Etkcq;(n1 zZl;0{m@b*oaXc~eEpO*$*0rm{N@oo z%La#iE?USfu^d0WVNQ;$W7?psPq}5gVw|h@Wh}ikYn9c##F(~ter4t^CpEkM^D3tX zA8PRuU1U2Z?&&Xe8{Retox9Cr-4rF8Ti(e%+*a|~{c4=A*b?$0f!Ra* z+?JU5rak41zu+IRvoJTN!EkD}+QW!}PrnsA+^+6lre9||_ei{-cW$ZPjEMSa4Hsta z>3>$J(0O*V%}@EW=~{h}r+O#MXt_Bm`K9mHFz4>myd+n8a zg4^p}Ha%$IcW^xyjrp~6S#z1@=aCa1JlwE(O~J7Rc}L$B-d;Dq`DR{oo9>koqZ!tD zXVxd?^*sNUA39R;i{jaw9F0zyg2Guxy)~-y!`FPiar0Z(x&FRz#rP#H>h^csmkl{KN>-OM>*NCd1x~njN!wZf zZDT@phMbe=9K0sP@6i6I(^oiFCN1~<>;CQ;OZm0uUhx(R4NE_GV?%KGpn3)S3GrSH zqg+o;IHZzFX;+k*O{pWw!_(kQu%m}S8 z-2V2*xi^L)=KY~lGizs#D)lYO-*s?{>v{2cVwurgC~yfGj-0TFxU8g@s1R^CnJeZH)Lda962G}2oi54i{X8#&tqXL-TjzE0&Cax*aV!bq_!xe(9OB}v zvnjz_OW7`G)#bsx8zz>lIkmCnaaXLfQQ@2q66KdOH(eBJjykejIP;pxNxkziYU#?}ID@$)2dwZ-bQ|g>xd@?(VIS4ga*dNN@KqTkqVX+3lij zxu;Iw=~|pJr0LLy*<)L_>`7{J7%|^&^v+-WbD3Z7AHHk(X_c3v)%TxQ2TxUv@-UgR zXV{5NFWx2mj2>s|IOFm6H}>H@{GX$Bpy#%U+$%KXY*Y zFOLlyo6F}G`%T-bQWP@$V58Z?XIrLD7_t9{u8FP2vaVSvCc_JO?cIH`MtZ^lDi;JV z4D?0ZR4O-UN7cQwRjPD*lqGlN)72kha+<>Sdy`%521e)1d_QTn>CK95xAQB@zl4rf zus2Uyq8qqG4pNpRe}w zV}ruIi@G*ftDileKES~#OG!~O`h)cS5$_J)_L^G~I=eXQLC)LDmwr{h4D}b3@5rk7 z-r2n*DR5$-P@qeC-_24@i*LfmoEJ6rj=5_#-ywa$;US&b_JY#cvpCk5{0kT99BaS0 z#lgid$Z*=_{H|$UyZau0vFJ$Xs=Bx$yZXl*--NuA^?qLx%g){JbqN~wesRXr!K;#G z=Vd(KFndkj^k|n@|1$m>zuUQ_j z95WZw8lL7~?YWmaC3Fk7OpyN-J$SIqIkl&I_esfp$tsHY9Il`K;LM|6qL%*Knw}R; zUVh!1J4?amXS(Qtnp3<&z2?_4db!v=bnU{E)8z$4OMBlh96Y^A;-yGT4mZWaMl#M)CuMEQ z?6?S4rIz=$Qoh>eF4TL2^G4I_3GM(hZT*fI$h|Po%YlRV0ff4J05qk?G<_IIU z6GqGdMr;*~*bEr4PcUMVFk*5rVnblWh#t&>5&H-u77HU52P4)GBW3|3b{j^_5=QJk zjM#n{u_-WOhA?7tVZ`3Rh;4)sTLU9j3nRvd5%Yi%Q-cvZ4!Ml2Ub%oaw>07k3; zM$8LF>?VxZZWu8s7_n3su_rKMc`#y^VZ?U8h^>VYYlIPVfe}-J5jzVb_8ms71V&5% zBeo7kY!r-`B8=D;7_p@=Vj(bM7huGaV8m2m#LmEoZG{nwh7o%WBX$EutQ|&d8;sZ( z7%>SLu@o4w6EI>!VZ_$Mh|Pf!D~AzlfDvnk5xWN?wi!n30gRXrjMz6Au{$tgr7&U> zVZ?-C#7@D8<-mw(!iY_R5qk$CHX24O0Y=OoMr<&Q*ew{bsW4)$Fk(S4V$v{T$}nQq zFk*TzVpn0rUcrbRhY@=UBNh)M)&wIq7DntkjMyO@+#LQvD>|n&I zVZ?M{#N1)THo%B+VZ=_th`odntAr8DfDtG90KM6 z?*KJmEASWa02l|H2NnZA0en!-$pTz}I$#*EAD9EY1_l5dfvLb9U<_~?SO|OrWPv=u z3upoifnz{4@Cg_K>;z^3Pk`~jC14rw3&4l}n42Mvc^cxFpCOKU8{(WIAP9H{C;)4K zNx)6O1UL>X06qf}zzV<}xC#sh4gwLtTVN2d1(*)p2P}beKr-+H5CJj)XP_3)1@-}9 zz$-un*Z}wew}H{XDIgK}8;}830~3Mkz$oA-5Cwb$1_L{QnZRSf2Dk_;1^NIbRG`F_ z;H(3$1N(w~!7bnxuo>74d=h*T91o5Me+7R9V@?kT6Ms0Xz^lL>U=Q#$@HOyA@JR4s z@L}+L@Op3G8|(^p z1z!PQ0qcSFzz4twz;nTK!EeBCzyrYp!JELF!2V!=@Llj-@L2Fz@EPzK@FMUc@OSWc zupC$poDa?idxO2fH^4W*Mqndw3Ah9t1C9ZAfIGmNU`_BY@GkId@NDo?@KdlY*cN;l zd>OnPyd2yQ?gx|EM|J=o2n6H-AHW!h1;hb2KpzMPRDo%L1&{;?15SVr5DF**Qvh=y z0T99-(g8=H8W;-f0YZQmz@INkf4-EF^?%N}`W++h9sQm&C56Yo=S=;cYqer{aZ#p7 zMrz%F)?3v|%`HyKQ+#9wYbfLz94Qph)zO+bIAD^ake#Ers;a!~5Di6p1)oWc*1eq# zlJ!-NLjyy^_4WCfuxH2N^ZBa>Z(oB?yV|O>+n(2p*H?%QR94E=-CL9|mz$2S@dtOjZLo)esr^LOxG7D^Mu$& zgAZ+)D(lxsNr?-&4xHlasS)7gp+3!bwN3ePE*I0ebaeRA8XEGBX0h=(s+$YQmn9pe z8!M_zJHK2Vbnm9LfdT)D-pdybrm=D9LW1;F>YLY9Dm35B63s}vDp6l)#}5p&llSpS zA6mHQ+Q{}7GBVQKtTAOL@`h|*>n-Q$m_4@a8lj}rls@yD+VzY+r-OW>!SIjp$ zvZq$1^`^a6U{JMCMRkUGS*bnO&fY=MXYxdwlm)A0a#Jxel_RIAp|oPqW_%M5bJhl_ zDhT5{l8#C~zE{R}eXZ1Ldv@KX_p{5Ggg7}P1AN-0GgM$)TDnRqCtX%nnzw3X@t!p8 z!rfkmk-_Oo1?witc-p%U4-fLRPKm{*U0g{?abCV{`Nf$P_aj5as9CRJbEB->aeZEbCAZxXwJi`l98qFD6`iJVmD(FqH# zS#^JHP`h`l-lDrRLwS9H`=Du)(s+Wj8sVCX8@9b)-6h=YB`hsWT=hajDmWDtH{=?t zuMBK$$+0+FDkmo`lqZ{;=D@Ra5E{xKnyOH+#?v4&@S6I)mJFS}g~I0M#+4?WpWVdW z?5cPbRo+ICAu=}j#A}p+mL12=E^mDK30ZvNm1|vITFI@bTsZ=tc#S)I!b{fE!C7U> zBq=Kkvqp_a&2IYPf!?+$@wpn?3+h$xHBXRqb8s0jWwPtogm?kJu<-h*56@ggog6Yp zmmQZHsXx?NH#DeWT=$pip=~c#Sf0hFU8TqKHMg(x8WJ%1s%7`*x?wM$rm9}K5KTJpL{>UGqn+uit)JbNk6pWKsl39urJ-W2FJGLPrSEOSFD^OPmiFZ5 zs$p{r4U^;2Do)t?jeNe)^gifil2J>wffX&qfOKZRNB=ugDZ+dt9JRDcuUNkZF})c<@bKO-qmL`D{sxu z+xBXS<7J!DEgp3bPra^K9kOLds-H&vrlROk+zI*CkGLLz3V5a-lw|QrC9{3b?>17o79~t6a7L%;rUuu+5|4Q0C?ev9>ZpX{k9kw>^&@b`cyscyxeyrrtTKsd}GM3RcCig5Fl|;CEZUxVb*ie$V#nvMvh) ztTw;nq$b^IHSl-syZx*XSdv^s}?|WA<+T@lRQ9l@xaKj{Ecqz$ zzTOr3{XY~MJtB?;%o{qf;fZ2xuC2kZQO&nDPV4A?F!{#IxieHY9&#cW^Sh^n) zi?d|?twfH0cg}?$JGl-k`uBx8wDCeRN8W!J7oooC(-WiJ(IbzE&yEUOTrxNN>Z@Dt zHE&eacLXiaJ@UEAGOh8fr`Ft?>939lkAHNg>7x8{ivYf4= z4_^6pq{YCpl{%N6@#P+DEYZzy4u55pzGbPiOrXy?BmLl$=IMNe!S@SSM~yTYGBT9& zm+|(T*X5H}P7_kU-Esc=_Kyzs3IQg2YsZ_Wk8$aE%B?jk((rA0n?82*r`a8e<1W{I z+q3s)MqlHPU!}jK7un2tylBURzVNcI*EZh`bCO*-XMc^lSc2e{dF$O}cbq=79;wWq z(w$#4Z_2>vVdS?0cK~~U0|0qF`n~kv0eP(4VVe>*ajyAx{t%jBs;@$5g)o$0$0d~ zZ&>hCjLZyi3~}OkiLJ+QAp>cUg`wvLhTJ9$q3IZYav&4(iNwHA;fx{e3Z#+~h8S-Q zzeL7(Ksr?8CEEcn)j}8=GV#(af#E^`2~~w*GaHhu8bekphD0ugZc#`bX$(cV7-mH= zq} zH*pMQUXWXLWMT*8S|)~{tB^r57~XGSD67YCB?YPA0x2*75=9JBMGiw|B_tIYRvj?x z)Ij>!W9Y4b40FUV>0Sr|4~VEDfQxit|(b0vmK zE~HE?WXwtoaT744rb6mfLYi_Q2d+Ts5Lv<##-t+**KUv+_82C`AO)^Lx~_&yTLC#| zk0Cz~!*3mAhC8I_bx2-&44VQB^NkoXS3)YLLz=CEJgR`4Nrl9agG6$LypqIlUJc3G z2>G`f(kvgcDGRdK1G3czf_OtxkuLz@8W0kK z1ayLQm?(+~TaeREkgTfO^`cwkhVNX_zKAD)sPG#kSGn1 z*<47D3NlFs^27_4VFjd(3v7WStV1T`rZA-13P|f!kgo#B#9GKHH^>clNW5&=g+^Eh zSxB}tNKY>0el8@56y%IIaO1LXNN z$Wkvz!3Ie8tB}su$#1E^9%MpJIYT~5L%L@{BGr(Ib&$!PkkPV`_jZtn5|FNush`QJ8`DfN6B{Ly|OIbh}`PqpYb}TdJA7clpp95yjKbX`{+RXVUaoT3i zKZ)DXIAu~l+n;4@ASz1YIBk>q$$GMg zgSnIil#!oVkNj+$GO3?z&zygzKcDtznbgn3DU?awl)pY6{wsh^2cCiS!ZX`Hs1^H1w1E{KZ*A&mSCBR|8WekM+t)KA*X`3ECE z(`K)K(w}X!*FWNRG)|e+&-P~-4P1{*euf3Kok|(`**In7XWGcmF!Hl;%E-^gDUu^0RTuq<*$P%cOqNCiN30^)qqGq<$t&nZx1W zI%Ml7ETHXF%E-^gDI-7ACiRo;N&RepmP!4jjr?pJbuw|vq<$t&89TuBNY6i5K-5J*l7V&oZf>w3+iy;&wDnnbgn3DRVd+T!-}hg9WsmN*VdtIA!E# z+RXVU`{&?%GW}U5_0#+eBR?CbOzNlk**Nwf&gN$r`58ujhLN9*Q$~I^PMOrt_Gg*Y zPuk4+C&y<;a}f zhVcj2Ba@$D0d1#JMt(L<8TpwubNSz12OzLO*v&=!AOq{ZSaw=s~Kii*WQa{_D zW#p&*Sw?;~PMOrt_NQ^$W?ui9|36^? zZKqNu^|Sq1CiRmx`TtLtgF2ZwW#nh$lu7+;f0pt5vvJDEj|IQ5OIbh}`LXcm^^dq6 z+a~ps_00JvaSoqpv)4Zl$IrIe>!0+eamoV9q<&`qsFUVrSU}sUlu7+eoHD7O=4Y7H z&-Q1T)X&5zBR?CbjQnhzG7bXQBU?XVe8PK-;O5N&RepmP!3=f0jx8Y=4$X{Y;!Psh{mnyxdYumE+l z{aGgUGjYnKekM+t)X&5zlls~IEF(Yd&oc7U{xr_v;5ww|pUuy-Q|WqAKNF`+>L+dH z{DVpTY=4$X{Y;!P^3(n_PTTDDPx^CkJ<{{f=4aZebUmq`iBl%^GyA7Z>Sz12OzLOi zl#!qIr*Yb5&Oh?~evgtc`TTY4r+@wpNm3_|!x!d>3F}A_>!c1SLA9>8|6Z>V>ll_o|Z1V@>IGBCWeUtqo%Iuff7TYs9 z*u4KbK6+g2asJ*XlY>2WlAGkA$MJh#sul%|pxLAJ&tN1mw@ZE$sH;{}Cd4 z!To-O@Vmi*S{wuL@5MmK91o{rZp&=^b;evKUyeIwYIvdTj=wH=OqPqn9lwZ#5@U{t zykF1m6K};c3;rY0HFO2YiCH(56NDL2E|~QbiJ3d@n0+*d-sMk+LwZd?Gze?s5f8$= ziU>rb=}t<8bMYUZi(^W_RuNb~_aF8Y&TNA(a?*e1n4x8iJ*c547qc^BFyki*xuda{ zc)DlpKVq>={$x}e#B4`5!F(twZ1wxdov?>^P6%@xvHy0QiKr+Jvy0+!gmaN43@x%4 z<0Ai8|EbJ+vd!=MOfVyBEMUxlgM4z>o;*Vd%(l@up2$Cr>Ywr$V#_3eEN+;Q#>H&6 zFdPNxNh*)UY%221&BY9t1Z?x4>-d`il!Gek1~e$GgXJoDuHN&opA{dw$TnCIFD`-#C^n?yX%34c`n&;7Am z%*7$k@xS-`@6Ysqf1WLvKK7_0o~bDqN1Tjj;Q!XIF+_{=j{R>>Qgb>kT(-7Nii+ef z42z48h>5n*HZe5T=7&Xx#DwDBb~f66Q(Q(_X!GL}f}%r%B4eV%Y_yZZ;DFTA~f{Ia56rbRNC@!Fg2)Gb&eGn0sr#|KR)aUjT{@?GZTes@o?wKs&@Ap2x ze}6uG`_!pZbxxf+b!xrU&pqP?r^9ia6u!?q<2ZNWm!AoF&iuFv(Y@u*_Bx-;etnO- zW}Wc$Jx)FUf<|R?;J+w%!NrwxUU11J{+7zw=T(ABFR5H`N#%%>PN`h%pL^bto}S!Z zVb-gUbewZv?KJk==|m!1Loe z8($TbWI|AQ%uzr^ha-$Z5V~ql=X0HLlpT6a=R#-5M(iqFahzkUG)uOeclj2EkA(b) zld^~9Aex_w<7`|KG=g&gi)@fl3VsZJtuk5FXxSP zy8Uasnw!4vN=UfIU7fC8F4UAG>%h|32J&u4sW&`1zZcXE_&DoS^>olc=^2O#s* z^%p!+y^5kQcdM_!uP99Ga|vXD%JUtfoeEmBvy2+5R;VB!)sxG)qaDTitdi$lf5Eou z)yzrNMRjM=s#O2NRII;U=J#67uhTgM{Lp6e#jav^NBv7X{>mMp z##0%sjyQ!Xcdzp*SXDaAtJqU4q>6>k{(=|QCaP~yA-yJ_p6I!-MUA|F}On;BY?%M9pQ$|2twWziqOR=kc5CDwVU zVBRZst}ccdR2RaG@?IF~O~oT+D}RNWK#jPwR` z5udK2JILkgOWevm=!7;@?l~vttjGk5n6^G3G_#$ji(T*+;z|^~J5ut3CTQGi8B+y$ zPQ}nZJ?DJLkcAAX;;C-&#>!O)Zjk4aT&i?x2XLpBYAO7bU$)`Y)baBU=mcf4mO6g^ zetV~mFCMTkb$qT~>gYJ$^==$a9ly<6cSgCq;p~m4dZl$auekJQ^)Nx|_|jTr#Wryu zn6M4H*I!UtC+f?&9i_EZSW3MLXIJ-%KH8c>LN_6@Ly+RXQqFo1=a`2i$f1e!cjNjS(yJdivQ#N0-)ZI~m4rh0@t)LzD?yloeVO zCC0K@k#?pR!>bLu)jCv&-{$+^!E0x$zG;#Hw>rWas%}LA;b@y51kN8Nwd2f(&wnfG z7zURw=89Hi^;Oh|H&P5<0uel8lB%v;i&SwbRpCH$+fVZM#ZQ;T-?Ljme{d_aD<8Ju zS{U%GDmtqin$VwsESBd~mm#=#dslTieyc0+c&z5kLT}5S^~j^0BhV|(asj{gbrjig zuILykxXt&YL?d15*WVAR+>Yx0_+kI)IbVmJ^5ZrR0B-UFREYv_5fC<>o1{|Q#u&j5 z5v;BR=r&0_;2#vhm1~hvd39qP82{i19dx+PW*?nEn51$w$x4kwNp@I-F8BHqQ6MNW z&8jF|@(&l7LY2GYJctYSHavvpiZ}zo^@I#0!Aiq`VVi;bw0AS=xA7dX^p6m})Ie}F zk}Pzbp;g7f%2Oyq<46)56%jzNs$F;{8upKl;)4xFNXC_G{xMNxB?V7VF4|fVn(k0& zD!$|&EA)iRXOw5#%!msvGz^61f^v_Yq2Ri#41adbUdR5{$XUO8#pqT27W7WjpIfTfIA>T4eh+c zc|*!^x}}}F&3~mFEQP-okFNTDX@4DnEyHME-5LK3#-Q2dg0GVOnSe&}nJvJ~^4Bwv zD&@A%Py5dYJbK^ueEL!hT4(iSN4%`GzsJ0ldxM+X_)yL9CMl2G{4`lg;>B*0sHtQ7 zsf>Lb4;rVKK}QElzZdeHlwvjSjFOxfCOIxjqEeu8Hmk0;s57a@GYPX^7RNR})spq` zyPNgViL5`_lJyC@oAvV(S%0D>>*wxn)|V!-{&-8)C+=?6Z%$-=M@!Zx?QYheNMwC` zOV+D*H|vKIS%0i0>ovQZ^^X!+f2JktlXo}kza+B0t0n7Gb~o#MD&87D+miLEyPNgC zv8-$G9dp>j7o3SxWEvgz>mLC}_Ursj_Uj$aZ!+-8_=KJLZ6FH4j|zAe9SI$s+t@&m z@`oU`6oRaa5M+&qAnhsyX}uxHHWGqti6O}L9)k2LAxPg9g7kc$%au_@IJTg`dTc?s z!ueNuU%SU6+8$dlT)r&c@2hMkP(rsU^hZLu;kbff-R)B;rEn-iSh4G~*%2L_!sKcw z!*G(F%0{sh`VEGiic`ZF!WdiQFgQ;#?{nSlxo>4!;mA}ElD>Yb# zJ<4HB(N~qA;EhuMl0(B(2vw{{RD_2rJ=-Uz5N9X2Tv$3u@F&BLVQtYg3eAr2P~}GncEkpAJ0pW; zxO`fio#3(|J4vvD308?h8P@D*ZJHh7p~^!EcEkq98+HtrpC4yO+;GTE=r1(f7}nfq z#hM%8p$hCTrb}XjR~c>$mye5cBW^*+P3YfaxG}7`-660VdJ`V1yeq+t*x(a}8^cLM zk(41fp?}11V_0)ztJ7s8JXCpgf*Y~HFAX<_lXgPf{E(Z__jpmgF|4_kd@GX*|1_*v!XN8tOyU4Yc?yQf*%-G43|%e zD^O)IA#FEE<-z{-tql$BNVmM!x>_NuX2-A9uM`r(TcvcnrmQ&Ld`pZumKzb3z(lV9dbTLm+x!KoCxKC9Ti%6rBEJZcs<$q|gVRbefm#^f{J24Ij5S`Bf?6kMSJv&qEToxeahJgnwYcj{xrX zUnn%Ff)K`XkT<=z)QYh2U5#u&lQ-Y|WI$1-yR{K@u6;)jpr4DP0v5gKgf!T;GFS8=nDb<6|&z z{~Ro&bd12H?nPuFRqsnS%|a@ZPh}gKwBr>z^PPT{0Fo?n^IjF*vscLGJM&pT2Rx!X zkzXMl3_!L*rrwojU_t_(A3*AAgQ9N+MwwAnp&MI(MwaP(ri$^5=U>XOe;J4 zqUZ(&8kZwj$mMhSbTOa4{sRA{2T_a3 z6boJXu920EcQfPee78S|VwYAF;ftA{3(R{ECH}hJr@8zq3aJWFodUhA(ubN7+oofw zz6>!dZ-Ih~-6g0E#{6UCD8^st&G!bUcZWoy2O)G$6xtu5Mig3#&?}=*9icZyp~dz3 z)Praeg`WDtslk!}gHuHX%$X`FAU!o8K)z?{tODB1yX&y+Y-1RUqsqWL$8HrVu_x7+ z>6=}By;gF(zKZz_w=t_Q6Sc*~7Iggu`Rw%C% z@&L9K^2I`5eI?pg-;I2Pdq~6i{5tHxowMy^3z?s@5#c=d=C&buUukWjFW<+Emw%DZ zO|lif=};JjBcQT1VJ+cxg}L%u=vO}l%2h1p3nExLllAflJknpRq8%&aTOTuw{M?Yo z(o}wKy)()s-*2*!Ea(H;SuY3+YYYAPx%mQw$%DRUn<{wNcAsBz<#;Ixe8L|rGMnGWaNn8eP~?4{2piXVD&Yi%6UU81~Beq zS3Wwc=2kH(^TI()&0DadH-Q;gytrofwRR6SG8jA$83!N3W1i$bw8B&AWlV$7u6*34 z=;gIwKXQyxAlCI|7^`CFnf+_#>T1LELiIY5uEGPAQ^0s&A84N+w@G^O zMMeKw#FzJ6(H}fS@t)Ibb^RzzB+Tgfp%h9cNnFL)&GWBA2AX%2uYbK@B{}QZN)?<5 z9+n8wc|iscQGBdx?Lu9c;KqYzl!O=c#q_JX{DNlP+N zrA^bG*HdZuSn3$Te$40M{QWn!lgfY7w4(TLwpejodlBlVPwY{|r46h+6F94o#Y3NC z5K6I8(Ms$5w;&00-LBxJb?xzz#((RyQhH%rqO@Q}BZRAHiD*FyrH{TJq9v%)Av#f) z$eqTEA!AEK3rZ+`%n2eZj5Lx7(L^kgVN4IsH>iPqSjE))WE;J+E-bxUy7S)wR;6_Z z&rlI-XRL^|R%RB9-K~hV(^UlcB(%L76|r`@ia_p(y4lr=SR1Q|1C%P%l#lzhDQ6Yh zTmkK&qk$eJ=iek%%uYagpFI&C@fz>K&lTGT76<3Ruf&IY#TzQY|J<>Ky<_Wl#{Uk{!oD^=qZjHeoB^KmWbBX7ja z#K))-CK>fisxK4KgLjGxG)y@gR4%X-`s!aovMhap#ic5;&4Os`-a0roWouV~n}r)Y zyN=KkQQi*!y>Tfzl-E&-Jb$Z6rHZOtt0Z-sJ73oKCAjRcu;OM#IUQ! z-S{Eu0TaqeWL#Qtk>@{#@W{Dgt$cghT2X{MUkjf9I5M{Spi-@<{C=l{7-w!$mWc;} zRa{m=+i()5GT;q&zcSLX%8(MauZ)%=?nwD|8E4Xak!3|@F}=Uv*89(9&^rltMeiQ~ z{q%ar+%zsrsCRPtXX;%_IGx@TMclF8O&Mp>`vA*&AO_pEy^kRr+54|&&^rltMei#? zKfT@uld^<*CzpSw-lc@o={-@z9qZkcvAy112XidtU!}!{?&?Z78y}UN8=;fs)I$ah zIS)I^=ri!m;fpRwUKPNE;BHvs=n#O<6DRgv9vlctsGUS`md@Vz9)xcVy@jM;L8_mF1oZ=BD0nBYzE=!&4^ix9Ou{b#6^4a1 zhG9Q}E{Z3&Hu@JHUS) z?A4NCB?N{{R8*@l>@U@rL(1be?-4R1*9Sq+{3hEPOKMfx=>AYpJ8J*U=;^myo^trk z!`GoV9PMJat|n%ps}4C|3b8`D#H2>C=1jVh{~>Uy52;X5LJGF0%Is7uX_SdBRK?cC zjBLZdRTmRB%(CfKbgIwFrS$YHRiTT+DK1v4Roy})XFl}W;ork`)rasX`s=V7x+UA` zxNuUp10&0^{)fS9WYY8RAR!k_8^d_`dy)7gXho$<#yl4>SWm2vV-fo}k`mFAElNO+ z-KoLI6&OpYwN;GU73Hy@T%0Mb?arkA=OXFy&vn!|R(wx~G|GH`uD`3lyF=pUt=O+a zMSiIfIuIz$XVY#Z8u{11_QXL_+gfkEpu6inRP#P1l zy3#8jalch`!u|68=+)))FRY3P$w(-_J|UyWDAuTGVY8}rRjuP*j^|ZJG2P(O$zl} zY5p{!0b8iVcxq>a8kkNfOj6ouN;*~})FxGZ--1vhXDKxe+7cy38apG=;4~89{QlZP zDxXpf^{_+!{>(Et%RUEUI-8w&*Ek)Vhq3LlA6x+88`v(vqFeA@%#PHyQc#->@OGf} z))H0)o&K(H1Lh7ybfx`|<41PKtR1C|NN5Fbj|JJhbB#~(F~lY#?utIB+s$;Ost-ar z+skdXS+?iWBVOA76cXZCet0gw=A3)IGZ+03&gIvfm%dNN2r_@I!%T)zE|DYGv9b^0 zV%OMTQG|}PYRZWg-<`3VUr%-_KNmiSK6Vs=xjHb?p9vfMYPysm#OLZ~WT*a{J(p1L zot^rhC@?QO)v1#*pV>NK@_CoZr%&hopAjxQaunQ>S}0sHu2vPY*1Dh9vf7uG#YtIU zv&Wiv;iN0AeDh&{efpVaN?3c&ZRf&rYCERfdTkl{k=G#SL0=VoJ%p95bU4QWE+eRx zlGk+j2cZJRTZWpW3(uvh6)45?U#dNykok84xu(>$JtuVw2VImsGi8%$=fFdq4C|3+ z#a}|+hEEai+X<(i(_a3QJiN+PkVUH zV+-kayJsqKMs><^7~eR`0_!I_kH2Q@9taRp${G9wWpuoL&DdKEr5veGP)4Wa*NkzI zG0gJ>HrE7YbohPE*x`m!4!kEQqqFR5#s&idV(@KX})Ic zK0_&|%M+B*!SOX??=X~dSlm#~p+2K?;A`rQkhL8APLM@sy4TcC2+2-~>ql~n&S$Tw zFAB-zK(@(Enp||&dX4xWPsWCaJ&x`uvSTWq3gA1uPABx#jjz@n=euRc>0>4fc+`&p6w$&?pa zkunUhQ-0Wr%qCObXGP9RMsBkrpGm6k7gi)zK5ZNHg1=dje@mw9Etqo7Nv5n?k=@D2 zEdJ?aN|HWT)@=x z*7gjJ?~x)kQR6o;^_fEQlc(P~HhzXgk^T56qb4NkvR{Ai9Ln&$A3l8sb9wXRS;vgu zjCh3_zlx+dOONnL;}4xZzC{YbRO1g)hQCU#kG|)3FJ|iMUa#Cd{ud!3YWy7l$G#^d z_rLVbFCYJ*Wc;mfEq~28`xdW4#f%?Esyl@0to#+93$?TAj=$ed$v*Wjm%X2PpZol$ z-ZuUlNk!B+x_@V^DXDJm8u{S(y~38M#?NMk8zn0E;^e28`m_u0xnul3Nln!Fc>u=_ z5t99Hd-(2gx@@mP_T!&m)Iy0m=(pKzl;O^eKm96mdE1|^yMO$z4L!M{z1w3 zmRWOtH-3aBVN3W2q&9SHO=m_ZG74mQ*e;`OY zc7pnAnC{zaxRhY5F{PALV85LN|1Ei3i&7Mdb1$uuodzbM4l-~ zI%_AnBMD@@^uB1WAXikhc+;79<_9LcWX0-{H{_&;cvt^+Y}{ zNIG7Hd>N4s2$Bw0Avwq&`-C9rXch7WM7~>)bg&9}GLf$pBps_laz}oQt+FGaLsiKA zh}aNWfJ3?7TKrL{d-clnPpvSg$5bsD_K zUdXHBR2)Z6>G6J$?*8zoEv~)kFQjE*jOY2x(iq@MFdQ9ub@}rxl0fdsTH(vXO2b!sHew)^+IH2n8o0ZSZ+KiscFQ+CaS)d>vtwhV~VI zr2rOP?+VTs($a1}z1>>t;c}S*EH{@=p(;|U3OWI*!r@3cHWm~%JyHl2I0DglNDwxY z<{Is)6VN2kUSAE>cj1?BHFe`xe~tx!8z!8m@tq5p>wlyt{y_i*G^xV@^Rqm-0Ww#= zgWMO_)Ws{Pc6mXYzhW!;;uYSzaz8V~$8DU2B$KcXyo+=I!6yVfkRS@Ev9JscLgN~Q zHE0m^4Dh>5hKd6CJ%T7LKw*K(0JwqJp9m=2whJiSAUg;Ii)=KAYye8W+%OFDl}%Jd zi*8KQ{+j_GGvMO}{E>hn*^dPrqc~3*>`x8$X9oLogZ*~{{z5>J7yT<_kj#E1AVkeg z{s+M(RqL-r*lkh;3Jl*em$=muN41BqKwDVWKr5D&(TZigv|?FBtytDpE0z`4ie(*I z*mAaW1&CIXoX>|6~fTUT?wtw(iHQX63iJBY%7?DOu=mF`OCJoC$;Toe9otG>UVq zI*ATGX*e^SG(+O_i^D?yfZ@!r=1drzKb7FjhFS9AD`9nn%enGWyYR#X-!dX7dU(5# zzQP$&5BTtv$cV5OLVUt)K$rWk%cEObRFw72 zt&2(lXIxts4FsHyZCx}Na8|c<(Y%0jp{eqfI`6O z?N%S|J}eE?7^_K^DtOGOk>Lv3KHIOQH=^|$%yj9IgAo6|TC!&s7dlM~%igXP%Z{%V z%RaCb%kHohi|(ck7Cza=ma~=L(gMaIpntGPNzsOF-%UjD3!?#s+xu?DXlF!N`)sGHVby>JZ7GNjx`!h_&T#qQ_*>(|=>{b9dy!uGafWpRqJ|ZV6Kxhm2V;f> z!%6Qzoc0bvztON@*k*yIf_Xr!t6(igmcW4BRWLkbS3!a{T?Nsxu0k@}YziXjTDuCO zb?wlQL?ta<1!ICMO=b)ywL+Zs)i#eVWeR=DUIOtb%m1PZAKb~i{T}XgdxqpCZxg0E>*>- zUrWQVk_Imu#&pA&;B!VAhLh3=PG6KG3BGTnVOUE;7}8*7AJYwIEs8q`V%!-M{LXM^ zILVzjeUXjO_g12cVOUoTVKB!OF~*$pBzdv4au1lxql!t8){I1p)!@F+m~4y*4koWd z#J(6#$|ks;&}t;XdLtaeS~G+p+$R#k{TOK7z6k5~Mc8Niny=dzUu0(cI!As7+%z>yv0TNkFv8QI(Wil$#A(5FF$eG_Y3_~ru-^S zl^;eKm7lOKKVe;d!czW0UH-}*s{DJ&??6!HZ#XU_wdkSp&P2OoOfUk{(6$*)s)9H@ zvEovJRt4e8+n|cdYZAFKCOF*W%5Zs0TpPscK3M42l75v~0K?iExFQi;gSdqNR+U*6;|1JjuPUL|fKR(?s{917aleY(ueU&9>2 z3wBxj7=qf5A!rpb1Y1W8LF0`f=t^P;Huf0e$4SJKNd&u%SQ3stVh9cZVhHxZF~s9Z z1gAAIiiaaacv*0;4fPnmH|mMVI8YDhnUqylpQ09l`DldsPhw=@tmvN>!Rl@)SvAyX z5#w}H#4a56qAQ0{$I?#qH;37IlG=;bXYdb&!`Hm#_@)CJ;&%QZI~lXL)`*>xL4Zs z?4qN#VRp1JmEBREoVwlhETdDnlBGA&?Rt%O;#KBJF+8=;f#xLp9Q;k}b96XYq@f#p z!i@zqG`(4XwGe=3!JH@mOTY~TrCq393TY?`{IenWivd{y;f@CDHUw!lAxN7KLAC|A zNk*{^0Lr7UnI+ujnpvXlYi1cv-utSunLq*DrqEm0%rdNp`z*7*W|nZ9Yi5bIubE{y z$xdaX*a^LL&8&($Ttp!ZKZnJWSbr>9SS=J{BGRiU-6*WsVGEX(pj@y`%lc@=O5143 zL0Vu7R@!+BR{T{9R$Q9FCNGKoF9;LtwP!SpU|3xei=HmF_R1JNH&^gRQHbPl5OY`+ zDM*has4P9eCER+)DY3z7!=K^uneml0;`G!|=rdYdABE zzX*t3RZE;691HzzhBL$3N?FmGGhxk{aO>Tt#0C!-&J34NiF1~ezA{*$-)=ZFtU1$| zG-tw^GvU^IP>BuxXgD)mzBtaAI6XHK`u@G5x@A~%ron2?gcJ9m5)~ZGq-tKxaQOvs zR>bK!lhCg>tQfXgp;clK6t+q8y#hH4i2n~ekv zYYEumG%Lc1>rsgc?lY_yF8gs-#OVpL(ErM?Vpy|cGuEsKC$2{&D(GGm>6PK~d2v=M z3uQb)zm)W)lSx)d&}~`{A)jgFt@U{3u3SsBIbpN`GX;1D0q?-Rp=on<$QLs z3NP|QRpOt1+~BX^A-M-XuIiHY&BA|}6-kii-!plO?YLC6)IKKCKt4qkV2ISY>fKO* z%EBn(@_lwv5es&xh?TWn&Z=0~I#r6m%~zO_oe2MRUjzjAO$!|XML*s*s ze25_WOn{34y3O@?a#Doe3zH%~-6l?HqMf2w0gTHbA{e)2Y1s8g5gnX`0#?xpj(|M?4~Ot!79L_pGzVMoRTfNT=zPuwJQ(J4 zu7%%d!3_((8n7IoSN^YxT?B9YTy;b$b~WpEyl<-NX~C?_qFM3|>Xh5;K>Cr4zO>J6 zx(s{D?rO_}bE%QlrVdx=CL9xukQ`^51oMo%%n` zSa${Zk-d>dzq9)} z!txS%{5mL=5sr_Yhn&LvI+ZcyQ_We(unJuzFQ*NAp%KUcDkyg*s;Z*G|2)k^wYQ?e zcF;^z@Y>|)%}j;=M`YWMy%^nuUUBG-chK^4Fur_$ z|M&RL1x!Bzvl0Bmz-17~AGPUY-b3i*`IUVTJuJs$>e{%5ATW_YGrQ_gCC`n{CYP=M|cZa6a*7ApQ5^A$Kzz zU%;gcUx=>QPG`}R!t`)r!`mX)YTwP9w~6km_jn~XPj#^>{)zC$(F{((W{1yQ`g1%0 zE-SlUQGx5Yw(RBVJ!vaVR~l(NTp?Uq`U|BjZw6Cl;nLH_Lr5cgBxHBJ2UlD~LgGdB z8%MJl2w9$U=F*?>iNLbFn<<8{k`q_Qu&OdU$L(INlHKP0UBzqw%@x|?Oq0~qllds$SUjkljPyxDd-W?vf${qwFPlogR-G1b0 z&@*)Vk&ob84Sv*y@eV+@AGI;O?a}Suqgz}dtHv&RXwAV7eEz@f?>W;_WVu_rWLQ z?e2`PLnPzv-iNQkB;#%2agRU6$6fx{kN#XahUvYI+hnuPr>5;o(DZdYiabHO{{&%3e^)C-n)eAX5!#;}re+QUYb6&QH z|9OzAqC;z;fc`$f+&OKnzN!sDCSA;);G#22$1xsy@P5r|(0+$6r}Z{)-N?4t-nL+$IgwK`4RJ$n_E?sNM( zs@JxuhX3316!_!eGomSS0drfKNZp3YLY)<0wsV*58_k0I5!TM}CXP2&fldvWvegK& zebql+*{D5T-&pT))}jtC#J3Ds*EjJm0qz=nO?`XL+u@UzOjqA#nkenL$P%~OfUBGI zS7F)VdS5h^vzqkE^T4~*&9ON|`&SS|^BS%CqeIC)c)z0HuE02g^`aGgh zuARrPtvn)vmORGTp%l9@m!*yejE>jJC6@pc|-&)d9=ER z^bY-adUySJ-lHSOOs1t1nAVYJ{wa<;^Q^XQtOq*ZcOB;$d|zUBdKkJRKK%>vH#PoebB@P9ok7oSkY}J#eG46zJ&wP^Z9WI7O8#7N zX@>ag$iaU*AF}?^W}(Hy>PmX)FVb9O>BS-ofpCe%Z61Y8rytdgy&L6f5e@#w7H!gP z9$`eYsJD>NPj%sPsHbOHcq#QG7D5rGLD-7*+G0D2}9hc`6tMspS~$v>R5d_u^McmncdUmY2p^ zPM>{ygCfgCGQ!(Ao)@#2yJfm3??8*I5g%6CC1k=q5g7nXH&KAC>$yTV;8&vUz8+sa zSJ>`0k3p6`F44dkf?$w?YSG*)s|Fe+VEq9TRYR1I<(-`T_st^Y!;jlM5$V*G$h(x? z!8*G*=O-pwI1l@{R5BEBwp+!%Q%>ZFCu}2f(MlMs*8DnFz6oOnxA|O__Y7i{!LS^& zJ5=@xbG%iuV=edu3&w>cQR#`Fow9Ra?Cee(V{3UwWetU)&Udq{@nk#V7mEIWj9;i2 z@*8`v*pk%A*@-%d>5n=N4VKCcL1Oip6rwfE8q_drP{X@Y3zn2|b?(UG&es;ly;JVR zVw5Hyd;EH%lzSAi={AJvSOo8D!AmW89}6C_;Hm|4T&eTq_)x0T5KS+`a4SE??r&uG8*;+PsqH3hy%0Qr z9OCN|JJFvVgt9^r&guB-{!H%gKzJGI#acw5f*MC)k1s5pEY@)F3O#eon)NwM$olNK zvp##)tncI5=)_X4>=-tB0jUkcBe`LClx!HP)X|8y+l7u~7Y^5!xs%vVMrX~Zzfdm; zV+YV)Qk7jp4rVh;f5FW|8O#!h2D4`&`SiL2KiQgm7gxQpJnPrVC^5p?HI_P)_?QX1 zo%T|1v~x+hv4IJ>(?tSGZVdft2-6SK+ODaZ!yRVH3GJTepSGi}m!nSICiNjhF@I0m z6Y4trAJ?v6&I)aZJJ@?Wz zrcr_7d+fiGRU1RuUE3JaYoiZ5pw~t_WiNh(_A^~+vlEmy8$s!CALx4MBi(Kr2!2JT zVBBOeTPZ7X5XQ-veVHw^TeOLAV};F9HEdk<9jc70QvP1z2kJ{;E9(&6f)fO@WHK1G zrn$62kB{$SRx!$L2;M30`Ol{V``Y%odGAszBhBKD0j>i|hxavs%I2~NT$XnQ>!WH_ zk#H~SB#7anr<}ZgX~w3;@qNB?>A&MbCK&B(%sK?x$<`KHwbMn%(lEUuwp zYVEL}AIJA$eCesq zy=5BvJR3%>ZTi+*l}+4ekA6fed|8x0d&B`osjkd#<)?$hB&dA_P*!sm; zE@Y8Uhs&DSg3IS_QiBxb2Zv#a;o@d$Kiyz0f@skUf1@4##V-~&@kg_6ldA(QnVf88 z5)sUh31|K-ncQq;5)sUh38&ccOa{&nWjtkN6cO1OkuEA015`Q67OC7O&gTp*;E7O+VOzY?ff(5>$;8BYRuXYj}ncd&gQjL zUFS$gu|BJ`4K*0)*4RW>@c)|f?XnrWo~Cx9YE(5SV|eMJr>_=WO{k>K(T#3XCWkwn z#%;N#)XUo5dHBAALtq~3(zs}Y)IsybSud$S=tVp=oPZX5^_%A;!os~&#I0ALvER?(w0qj zUBOIULRUVAzion^aKI>^S|9`AXXs;WV%20s|YbqA$|}c zh7^K~R1)?6&)BCUM7c|me86CO6ov;IRHE{1g?V{|DG8$9Q1R+zp!#_#G+)J?u0jh` z=-4o)tO_0!2G!q}*6U%gTgBqvLs{N(uL|N^n*`@b5O1w%Gmz2ge{og2C?=%$5-x)6 zsrR~=&ayPVdy!exa1FWfwe1trVzox|{pr5FcG(NbO8@r%)-gQaJOOG4}M-GuKo z_{Eo&mkTWnhR1uNXjQ+l{7U1v zRY9k2Q~2EYH%z=Th*a9Gy zWGp0&l`6EuSgw^NuuA%ia#`iWeUCrG?pBJ=>u{SdLgb2<$QB5eCbwdoBuD+z!Gi>E zN1cUBlPivNn-_stzyC+Lx;LiV;f=uztCdTC72W0FWEL2=IfQi>fKgo1j`;_J~wKeW9+i zEV@j=%mIcKvLfv&MJuaNdvV)+m?+6YGk}dabMPI;cLd-10ZJdL_rtqdVh~{nSNJgF zFob@R=Bz^ANPo7?zydFC>hl!j^lChKe>YC|%9%*EkIw<-$8F}2+vsvg4^Nd^v5(t) zF@Dw4m{H6InWBD-N?BTQ7?S!-iZUdV?#P&!)Aj>H889ATKBk-$NQK&$QLouveYJDo zJoFp!a&;lKlif(CZ0b6s#m``|aX9a{}G0FTN4$6_r$_ZVKtpEZQK#T$^hekU#U3^+eu zy%ISeW5NQEa7Ou5hhLXm(qS%43)7_C!4^$HH$7r@>Y>uj`;G>|U*&%0E=(k&I# zmA)Ql-N!6P$TyKCzB?0~1-$&j#pnTy1(Q-LtVoe&;u^_YZubu~dG$f)`p6NQG!yNPAUGW~bk`tPg}WuL+G4X3L_D)jHBfuXlIt^U|&ni*zB;tlk{ZQL8voFZeQ_wFNHRtMk zCOyBnPj39YDJr_hy0||I%61LFY*$jUkH47esuo}ie2$_~KflwoACr2T~Yfx2lI02zIMxm4I=LQcW>#pEw zJTr3Iu)BU{kXuRI;dpA?(ZOoLy~)C@2yPMFuPj_S_?zG+4l-$58x}Vd+SVi8XQCbr zDqfEfekbd(Cz}pVhE(cEC5}Dk@NPdkI=q9w8PC#+bF=<3ID*oObcg>DvxA19_f>C4o%f~nc<3@LC88s<{alx*j5oYBouoj8q2%INzAHK_$jI% zoS9^3fIp?`3KSN@m^?#mw-RR|2JYhxP>()B6ZxRl6As6Y8!|RaBct2Im^U0Kqd*%G zP-Za)5-4e!=W1lYTW-}ZYYDRU0qgSnwMlP>Ym;8vwMo8$T1Xe&<`&025oGlndRJ*;dAm(E*O5KlrZ}W4anLr^*HwLe8;xaG{zs&g5!^k>8nNAxgD3v3YrW{GsWFSKiQPl+f;6YGUY?|a96%>b4(0T8p~^0C+92cdiLv#xZ&`2e2)xMV~9Qh*L5 z*na_lUlO+lz<&}rCX8BgSp6h`SCOh80Mz9ySr%fJRO`zDzMZ%|0c26CCG+aT<^IC# z`kv(>JQtKJc$Ugb@ywSe@azg+jP?+oAj{9T)sgSb_uvH960NRmz6UzG2lC{5ig~=4 zkJbQ!b$p0@kG($@*SiktT_{bDx*vZ2%BvAyEMTgn!rKacl1cBnLZQAAITmi@GD+nbb6(77)gHVaqL zGb@p#xapANpLyn)?bUY6PgntA8RS1ALv>PNTzBC}|I=Slb6pqk!#|Ye7H4_bLa^(V zqi%T*&G~Rq6VMa)*i?U&Y+4*5ti*^54x9xs9YE;+vvF5{9WsVq*+l5;jXUc`W6Hvt zrL)~*bVJ!Crq?+;suWN12TE)1ewJEE-dL({sU4AMT*H_JGoJ?;Ar`es!xZR?wM)~`GtXTS?-9DNhFf?shf zRM%qSlrPDoah?t#H7KjXh-y9m2(&H#NIVLuvDZR&ERN#Dk=*8Iy{Gc`NPzS6 zom=ij+5MwIHL}EQUX2`sJtiXm&9K7y$AF~NI2KR;D2U7Xr%)d@Ep^dQLy+T;@}LXh zQE-{X@qnu*;4#A*nqI@Fuh<6~Jq2IAM!-6`6ZpfWPLv|lMB^I}jn1B`QJCj~&1ipc z9>k3IA2s+CL&loIlAu*nX{)B@Tcn9Pfs>DNQ5Cau1yt+zvciT`33CmIiWwq zAWv-!Z-eiDMN}Mk!5sd?+F~kyZ@klGHm4rjuXbPr%GC~YT+Zf1CCM_KQByA#-;701 ztEV2WkjM1|yFU?y8R31DCjn@z#zP0VnuhCeJGpTCMO2;YrLz7S(D*0gK_AQea^nQm z3M6!!Z_(=V_n^e^aU}cqD4*83Zf1vb-AvoLF5WfyfM!;0H_J_DaEU@E96FAh!|`sb zVi~z*U^?tYcc2qziRmULv1_hz5UMosG*xs>tyOSxc-PWDS9(F9;H0}`b&qOQ|@JkzFOeemd2lOR;?Y^G)$AJ4WzS_2UUhFI;!pCh!9(aIr z5^=#eJeBhov8dfk#@%u^|NjpobjC&JOX7rsOA78_E19xmD9AZd>=@g~Z$Kt1x;Ras zRrS>O0q%Oim4Kst_0;DAca7i%LQCtZ&#F0D{~XBVpNj|l+P-sPo6^=Br$~v>+GB)g!AMY_YHl*&{HQ#uto+M_^Yo#! zr0VHY0@MWtHhka7ZN5=-9IuPlx2cQQ{hz9ff7;z==}Z-K;+7ssJMSI!InPE5HuLNW z)YEVAU5dJ}+bZ$c_Hi&wu-a;eLp(nz|Anw{w>ib?=)+Vv-Z9p6{CgPBQ+xLSP#tFp z9VgyHOUXN&M@#*?&07&2ypHa9m5e7omQcHsOC5~Lv_y$!7?o{_5+yMz zpGw3%D@LTx2Ok4_7=@i&imz=$#AC|gya`|J@A(cVdO!zp`6Awu@4_^VTQ=o6(#fjB z*J)0_1?cDOJLyqpXvb=w_rvFQF-Q&7hj!2H$}$ zgU`>iuO_?!g+!BO?y(yQWsph_rz|>Mx#yW@oDG$G&cS*c7E2?3>GEM4uDvQ&-EF4m z>0P^#(6nzC;(Zn0ui=Z`>S&xt{Qi*cz<+w(U~wqEE7hX>k}PEwr>&dFj9csGNmi=- z30<(~;nUU4EU6m`Vd?|_wu-RY_(;}G#P5Gu-C#`nEVmof%_pD+HEqA9O~V+Nwo=4F z)3+omWjE?ExU{A2wqKmAm5AX#rB<{rW4qvb`_J(`9$!5#B7R@!e_5ivJo|M5U-p?9 z>tt}+I+0GaU7hTP-wVFE6Lk_X{9jWiZ*ZIMgZ8X70(swQ)4WYjr*Ju)xQZHxFh2oN zw@dnu zMe$bp2#$3 zzeIP|syA4%$Y5cxg25ZOEezH;xJh7P;F$0-tc^LDn4FDS4Gc!F^Pvef&cqC{iqSdu zYY#)5y6~u5Zrd&NwuJQ>{!{~Zged*i zkq>W82}8(-x1@xjFdtSm);2TF@9>Mh9{y<|jb2_Yqj$iOM(aN}gt@wGY{hO|5Z{kB zRoB_ud6m%NVY8h!so(WfgxY4-s$>f_M%<5YMSoPwcg8xQg zup{>je&nvU#QFf18?Y^4&;HBS>^~nrpCi3+o9Tbv+T}q9%f*nEeP< zh`(}mB1ZN5%OsNbpFa9}IbW0?xUPwwb5Sv<>>+tr`*Pc1cwAX z3l=o_n1B}%i#`(s0&X`12MCBhGdGD26a)tn#IbyUlEVr^u%98|usH3KdZ z@Oz})!+`AU!UB~IxTk=k--iSgZr>JAxP9M%KQQ3;4ES9Gen&vj*`oqVW)B;JZ3g_h z0l#6uZyNAh0!n6&2q;1>5K!`6X9%!?rFF*HPgsTP4Z-sb0p~Lz!74*=k|99vqZPHr zU{5yKQw)}iI-ydZXRuuS39+XeEEkDF#zzZyG41ylLwl^DJj}lOltrSqI`w0X7n*kpbP%MfQ&ai9~hTtGWFm6Eh)gdjq zbqyXWpw#Aj1Qf>i2q@y*VrcIbP~`oR!TzhkascTzB!}A#D67D#@qXOUenLRe1ILMB zU3|!3zienZkPSuuq``8y8*;nTfS)$BcNto)QinO*Dxj1N%U?Q&Ck??@1e9WOgd8UO ztij$bpcM0S2K>CC{eq$WqQQPxKwHMG|l@O1)S!e)A{fIh)@8Svc#N)FcvD2%T+;OhmH9BvR$ za(J5o-zlKvaHFApyCHao0dEpeSiHf2Zxm2eJuIMP78rsn4fs+4MX3z|r2@7HC|=`I z172nbULv6A>~aBx1>6@5W;0dtGei4h0Y%6w4A>MjV)NwT?Lhv~6qm5BTSSL@tSTQP(;oxXj{vB;-RdKNL z6g7eq*6N)lMIi51m*?72N~STxlbp61F&VDB5Zioc)|Oi$T30NcMI@Pc4pn*k0UuVL zh21}n9WI}23q-50!^)_C&>Mjfmja zhCRdOzId$>r)y2Jq#lm@3cKCCheyQD34-?rGLZL!PRVwbnY?%ft!ZHwKfEw=J$vQ78`XlEEZWogN*gvj2R5wiDVOY6_Ue2#z?4jZIpy7-)V6tLkqGAvkyng!v?x5;9qT~MNf&4vZTNmD0Imq_SeZCKDAGz-F&uam_( zn+4IqwT1=5<-vGsB5r=DG@*aLVL{{4EC^TbCySTbEQk(nGb|V`m*XsmTM)7k`uhzF zT58lX7_b{G!!tHm5{R3vycv?&axo@mMv~XJjG&UV)zK1N&V|CV!9>C_U<=3ajKYyX z^#PaKl1Zj9hax%s%7`WjTSX&!IFyWyHj<11TQY`cl#B#Qvgg^75gpT+WRyBK@^q4} zRWPE5Lc!=aBEcB21!H(d!APJ4i;aaO)0oO6ry(PmBy5$8XgzqO@6yIhSd6)4D8raw zxyhK}awTrhg3E>lmINm-ff{Df8EQ6!)tN@ONq9l!?u3~V8|wgx2u?Hn8BTfy!F7fF zCBbIHpKdp*00!&|U|0)8c*e?*oXV9?Cq$NXml+8eu3*nM(fvv4?odd2{YWSVY@ryQ zQ4kU+tB4Jzh>n@7WORd(OwzR)1<`uc$;nhCn9QtH$NY2P!;aa){-`bXhi$Q6Yl~gf z7Q07V?83I#a$D@4aqMt7CsZ?GmLN9BBOCWcGCnzRtcMCw1IiPRAy z4b@*+&JlA=8lscZ5El#`7x^=W%Uj~o5T~7)&@Uyul7?X|4Pi)w<{wV$lr*e%Wvel1 zh)zmFTyU0=Mv~$Tn-dp^Xl<^N$)8zKAPg&+z?@(h<>iYc2l z^HL&CNFHpF_{&u_ZDv51gRm}#G+VyEJE)6M3AfJolHY-#%HL2dQdbtxd&caA=-_H2 z8N=n}amk3&kNmOvN$&TUj^Wwc4ak{k&{TE2D44>{LDmVk07vajC zYEjj$;!GWF!n~ zWTj?r49C{Ph-kka#+adSJxsDW)JRNGqK-u5QXR?nfe%Hrus>*v{a#z_ciUpW(-!+^ z9J`=`1Ann$F=dE#1w;hr8g($Nx`K=CRzS3#%o5h~eMx?WQ3H$1m(cY>3B#2~>3#OK z?UCqmY(Pg$@F63IBy9CPL~Gw8N$!vH#>G<7QW*!|^K`=ZQ16vmi#SBbMiN8>IH9VI zMAEfNL$n@VN|J?4qM8iD+7l9nG=EJBZ)`}xq_odZCPEFj zu~?$x7E4US~DAu11nru7+VP9briK9|`GbVr|?q(J^U=2!3Uxk#w!PB3ip;Nn*KWhP5<=A z#jcEF6GJ;@8vMK(&j3Cwj)grljvcOC z3RT)(khC$YCL*YipBj-eti0g)w)ZDmdjQEJT-}!B2N-cFmbMSV!{wzmd!k}1PDBK! z8ukpA_l}R%iPM!Y^qUMn7C2H51NPbu!!xe!Nb3Fd9=2MqAg<(3$~LKFaJi9A#Z5(V zl|jy(R@sVDBoop_(6}Pu#L`sVJs}hSWr?{57_~ghhvU;?!60W4sTI3#a+utxIX0k*CCo>!6?ifyPtqD#q9!rAr4PP37ZKe#* zXr?5n3{f}?JYv3>F)=MkUY8i*7}kGNC)vCXIm9iQXjrfEH#9@76T(U--%PM&OiU+4 z1Xmlj3@2Cp1*dnWB*8n3PH5;+6Jo$t5W_Pnhy+SO4<#g(d}G6B$?Rq$D#KbslFy2k z!wZs$-mhTe(;6aN;d{uHwW;Vox{~M8l z*trZNon3;+Szx({Kd(+2-8e<@?F@|@mF*4{r z_=dQYl4)Q3s*vQ=!(!DPFl_8eGMRgTL)dK5)8`t^kXFsCkC#a}p&0`Ho>7qucWXux z1=<(>b&+Q1(L>EJ5Z4UDyVVRCR5Sa>rIbt)Jxy|2ABoAZ(Trp=S2Kjo%11^R9Y~J= z91Nr}^jWFsk*VmjQ_<(7qDQ5oM<-Ep3Q2itrP|Blsvwq_WfAa?i!{No-2SM)k$xk# zThAD?sZ838U6R8kQ4>-l74JgnfTaE6WUzxXG!6&PEiA4 z)1%q3j2cKo4Ns33NGzcS0{#o4@+4808i<+Mp73votdD&*t_Fs8s|GSa4Xfi)36@ZU zWb@)kEQXC5NT;ZQuvz@dBv~EXGXMvUEruSNM2)K<2VBiiTsUG0OC{jHDw2)i`iI$P z6StBjU0^&)pCpDO$=}4}YDg5&G?~&1#TAf7^CfO23zkq65&xr+Fv4+q^2#qUv$`W~ zt|Uv^?{`b0yX=g^&eC7QouzFe6!m6=B@F=+*Kmj>ltsXQFp^Iaotu=8n6WS6A9-P@ z9gS0&NJFN-b;-oFkCBPAj_-TM+mLX=><6uB^iGoq>2C zV0gEEfDAgmC$73mris>-oX(8IWY}~A$z<;MPS|vVwV*>O83=aS?kB0cY%%oSRP<-5 z=$)zPL8<8aRCHY`x?d`~e=2%FDtcfNOuJC^;vN(p#t~6>A*E4tRjgs^|^r(qjK!nXeCrLI( z0x@g^A`O8a3H`*O;&^GD_1m$=_g*Q!jA3&-gLK8aD8$W84aF}GalL)A$5p}YlbayG z%}cBPhvhlse^s8t{@wB%@&7E(MSkXZ@-6m<cJ4EigTSm+oy_=Vg$Or0fUb@KVNB3y9{6yW&OPBck z=HAUqN97}RFs_2nZ|;F8`ux@&h?0D<4n&X7kL`izm9N%;=##JQftW8}t^?8U^K*N~ zOeiMIWGp^x6Z1b4DN%U3tb&-?Hzy4(S)nIVtKjevUQJ@asEo8xlZ-J>_)ZqN>x;Q% zow$=l*#BuHFvHzrxgmvxO%7u}fJuA})T)$8a#`_#8={bHvbhrlRjoMQ=() z-F0fnSrnZ2Nj8Tt8+8P%Oyf6jIl;9YhU>3}I_tM# ze2KRpWBlVH0fZB`87(w)Y*T`;8Tlp2rOCp~fiL4=;nmQ>)endob-nX>a0Ggepygv-bTRxc%)W_>w7cl7opp@ zW*KAr18K9}BRPB{(lYgCdIxFjttU25i6xd01pLazu&+p>7bOQ1VrIr7{FCHY8)B1$ zlXC{*O9+N{yM!QvE`m446(yM_mJmcnJ^Y#k_LL>p7epcp_n3D?7+HtI>^i$3kFiYB zu)e)Q>wA^-A)1j<9cifUz_?Jv5~?HMpA*R;iPk1nN6ff2;lC(S9W69e9RqRIF}z#V zkwI0rUtCJbG@&{oMs5)!R9eb78d>~ziMy*;xF2eG4%3x|F zY?rg0hT?Wk*v!@?$vY!`F>GcMq#?*e*oNvs*pZDOq*ai_<^y5>(~$~N`AZjFfyYD@`TNu~*7B4Uh5a_yrCy513PV@wRB7!zSL`y~z4)k4*2Kcp))sv}(+ zluK)I?Gg4zqLPJeL$c=)GXuQvUvY4#EE$<~p!p)$f`KN6ekm3Ga4PzdRP>{%=*Lpg zkEf!aNJVc+qP5bTQHIq>j4}lLLn3W4oIc7h#&|2zW|WZ}j*ED<861_CpV8qNQBmBRO3S@hP*3CfNx*6WBb(2A@`$cgnCDVj;6EW5;x%QtB zTDNc;>t>*inN!y&L)eTmq+#8Ac3C%V$f%AqRF@cKh$U1! z`E`J%d4{TEAg(%wcdI%wq>M6>X+m{GjOrxU6C;s@+o+C#6x9(nqYUX3)v-$%=T5qQ z$(&J!uzVjma7n^8*SQlmql_fk8tIE+DV$jfo5?ql{#lFeW0#m?YN+B9VpL7!w02#zfeRGNhrp(NJ}-lGz^ps8Jp1 zlu?GT|7cXQuyu_x#LOro{8vPy%uR?3mW{t8smsO~`sGygUsKUfrlOxpML(U2-jRxa zCKdf`Dtc=Yl|@eS;yWvs7<&l#V<(1QlwlovzTCCKVT@@r(q`d&Z3)A>m2 z6ffb}3Hv*vLWON^=OY|mJdrfFCyOz?k8v=e@z8{{_p$km36aJeFEI)dOY}Yh{#PTp zB+*o|_YpIrpz!}Xl8KfP_C5yUy^rDD_C7MCjDnJBqW2Loy-#v=H-+sd+@|+2kkb1I zn^BN7RJTW{I_-V5W}`aN-D@pk3Dpts_l)F_L{Cksj+hw*h5sq!SF2%13022HTy+fZ zR&``Z83iTNgzAVG)k&_0Mly`#nNd*q zW24|(5f_YtzapulU=00AD*Dw_^u4L*`%=;Oq@p*cqHjw@-=2!TBZ=aoMdIBr)+{ju z67athDUjjxA&@b~=9E53_Ov92Uq|*wJ(`|JTIZjM9W=uJ=95Ab7q+=Qk8n5yN}6p< zqdt>i)AdNhewv~EXxC%g8T%pKy$~dp=z0YFt0TE2(OJo^N6ZX?!hc&N6U`#*dJM$7 z9>crsdSpl$0wvQ#*CS%Op5*$&NMzwQU5|m3u1DAmfuy0jdZ;?>dNgIDI?~+>L1GEj z5%B*O$sviJnN%GyGXx5M&&gqPvX_LaV<4_NhIgwvGNcTFl4(M9M2zYr*S#r%?hpyL zQ5^#*sv~TMK+-9yW6w6KBc0;42>a`zl7+3yYY{VEOZa16i*CYnG14h(O~UfaJVE7z zZEhDMY(`m0a(dJx44WQC8g-or%|v_H+W;FuNT;kd3HujCbrrU`f)F;NtR#6;BnZPs z5YiB2s7nw!L!)%k-D^!^340~r-x`S}iIykrm6-8(!vD!gCi>aXUKxnnE5p0BS2CoG zvXW`SUWpicm0a(PL>6viuMDKvD`7Lrl7{LQhpKy(tTkr<$IlZPHg64*4u;1IN$T(z zLoZ83uS!LCB+;%@L}u#$G^!oL>4%1l83_&zCDlKoW}%d|Qt)XI5m`4<-v~UAK8C(N z6@5c0x-%8so{GLQ6}>1Gy*L#`)1=7z>QwZSRP;5e=%q=t{>^##iM{x?Bej#5AQ12u zY!1C7!}Ztm6floJ@zW8;7~e?RtdXgEe9KKg*TO*jR97SGn3pAvbP4<8QK<~qx1+$? z3*tpeYV(4Uq&b9XbcVpNInyN#+g}jczWOg3fN>k7Ym4XX<`YhM4g&s6B$}k#Kj}G$ znGsg_FO9^ad4-;Xfw<>j*t|)cIk<%eH=i<;D4% z)&}FMBWxTlZ9D#|HN*9XkYrAAjPY-eG8azq=10UcCyZ{mUM7f==7*627&h%f8tqc< zY8Q4ZbAg1kxj;f%?%9MN^|{~_UV*9lZ$EZ zfwWPBc#_x9BkV6?VLJU0wytj*31(h)qo*jPPz1rs5WZcAw`KLsgGF(5G2E8C|bA-+8Qj*N>6DpF9Qw+K`9?zMu ze{qzvu+5#D5H?eON%EdZV1~`ygftALKQt6|GW5?{cwfA5!u~g-!i8;a;e?G>l_Y

    4BK5k)NF-U#@^r-f!Ai4ILRAu%&C68?S2uU?lUOz7Si zh`Tq2)7_gSJ283FOR$7*lk|s0!ZB>_YLia!bIP(_x-4fa;Ro|&>Y}rQ%Yg^8gBW^6 zDtcuST~a?3mKbkW=8zac3HTc$p&71!l-^bRMeK$WV~h!tHY2Fy(1~iJ zi1H^c31j>lqk<*bE0R|lh?xnZ@P8^4!jIZyY zzGH@@Tx#@6Umd2Xdao6l3aO2Hnbo^bw`mN6I}F520eYH+c5x({7VT z`p$6Bb;>;`tK5suQ|>d}flTNQgYov!%(Xj^_OoY%-9h8f>gW!n^+l0m<9$I{v@a-) z1`F6tUtq<qrDGPd?M~N^8rLHZ8BTwEX;_#ruP2 z*|a=)k}W@cYf~ClUUbC($_dB&1V32@NR}gMoSz z{xK;AVgGB97z|fDWC+zt`Yw@(8LuK~V_t<}<5ftfc$HDW@eL$~%?1+bVCe8k>IPB_ zeMu^MdMdgpiFR!uF;oBlM73r(eFKRx!@&lUr0P90>?o8n>?k6#cJ@~Q52TNwFHc2V zsp!^J^t@E`{8aRURP<#@bhM7?Ok$X&yovWk3HW=k&bsnrSYOC{Vcc;NHY*Rw!&BcP z$q$ZHM%9EbKrmo-gh|(L!;O6`)M8r}!V-TmiGY7WB#)%KiM=cF31Grzr7TI_l9a)i zDdS+Kg{}!A+bR^3fd=f^yj;L=Jws6wGcm#m)e-PN8;L6E=88(#Y_3R>Z%3jsY_>m0 zLsYj*R2q<3_mej3elaYr`xjkR)=x8^_%z-AIKGF^A-^ThVgF)zj`*+RGuRGc>iPt| zMWT*`eP>H(4Gh9BS-@ zHP&@KJE;*z>4lON>DpmQ(TMr2NHpPDkra)X8OuqVSI8ypYa-D!PDLY~A{sq~5sma{ z@>>9e5{rHU{%a%g7_RM=Y#Cx^7ex54k3^ym3cV%+@kKwwyFCq&)Q2TMaVv>#i6mm! ztn`(h5oMFE7cydMu>}xevjNK?CKOJ_8+GZw0Uo&Y82XD;bXzLgPDNjuih8N&IjQKm zNp!T1ACgPBbjq8UF%s}U7O9J2{j8WQx?-APjOk#c&B{q~_;%E!)J~{12^>~CKi->( z`M-&ZWLR6G7#~FlSG}FmSW3S>q-%QyTf|hlu~*X39#P7de8~|1m?p!uL+V#`=}7YV zXCxoP_0QX|l!U{P)O*C_@F&g+Jq{x)9=xi5f0)#)Y(MH5SHj+~k z&Xtp}>1L8-dn6~rW=JLtIrCj|vZt74C*AGPiTR(7q!6Aihpu_7mnKqL9lE5AIdqLv zuSpu>*j?hViyCp1R)p@c&x;6ECP$8hcGNy{f@Jc01XdOtl-*!vlXJ9LJ3>(C{2mqRCJzR4yTR9+nR z0*%vevMH_3owT}?#5dUpo7o6g3ZbB~Y*6Rk0UkK_7-AHd@xzC>G+I;Ip?~18r#8`Gim)@w!|la2>ZW}1QE6=&R!Eg1xnc1 z0%_C7BzfOULTzZA_A$~BYF?L6Gy@|P>DqD0IUF(njm%P)O~TXVjWiGSMoOzUlC&{z zq;V<^=@fBje?}ao)fIX^JCpgJX_(8&E z^yS`2D4cARs2}__@W2no&{I><(^63!5TxXAN-BC%DtdAfO@1zjQYEIc1pIv?MKGN5 zxgf&EoRvOF<^Zg)u?nRz1IF}C={LySlXU$d3;Ila34*Zy!l-0n`wH0-E{Cx3eUjvY z$VM18W=q;k9!~{rR`jIJik`GwXc#gp`c(y8(HHX3%AH*JZbvgdrd3}U7m3;%Z`eb9JJy-AyTi&1eW zW3j3C_4{eP%}&NCJq!;AI~pUwj>e+Ijs|n7zm^S@_(BL_|7DSC81CNDAZA8U(ooIP zF4fS)jcQ1Dedvaee|c02!}V8En8f;mu(4A~^4CZ^>@G$-q>Xl@8&NyqHJADxs-3;% znf&c4a@WxXy0k#p-`5KbgyHV*q!2S6guT>MmvkNTv97Hm!v6E3EE%qKeY%90@u0#V z`*ca2{N{(d7^r{HwyeZUfkgd}?-@!hT;E{j5^v%YHqEE>AEcK{@>82gesCDBt@m(G z1ulS*XlDf6)*pd*e-ijU3Nipel2$~x`-?-w{Fg@xV7U7OW5kRCg#XRtS8*6N?twI< zSrJ;D?ke36I7J%5-O>>Ae-KH-aJMvqnHxNk;IEN53>$GsL!6aKarU&V&#lLw=N{a8 zHk8$P4mDP79K}cdN{mQ#4~moNY2z4z4IOrXR0g=Rup;Yx$Z*reV5J+TP}o@O`3 zX~~VJ-A-yLB97}< z#itC!{41hDg~wb|XFxv2pZs_~VdKtO*Q&QpDo7gnCw@(vnE(7tSSjJzR;$L>$i&Q) zMEKttRf=Kb^r+0Cpe)k$E720k;t2bW9Tq2SuOeHbM8amOB}uAGqF$fjphUaP;u}Y@ zc5th^^sRQAi5f?fPk$2NDik@_&yp+QXPJEhplTBU8(D$j#<9%5(s;f;UciTc3sj|^ zcqH(|pAVI%Hg7lRL&rAT=uy@=od=MivHJsP_oH_EPr&$O+}OX`?f<~D>gi1U|A4Lp z^uNdGzl1#K8t5C2^%msMf12KV5lWpHv)jx-154~SbI?G)-DVaNSc|C^y41VJEVn~h zVmXXARlJ#_7h0KC?{drap0}^%+A6I7jeb;rZh@5 z`y5nEYYs{ww980A@JKyzkH=i&AFF1#{xGUs^W#p5u<^7?p9B@C?Ed${J|;$NygFq! z{YL3G$O@M9VtflbcDhQ)e~8(rvu7Ben@ucTi5V{?{7cRay%fX7FH$*11k#JK@enJD zkbe-9YEcZ=uVsZ3r4cq>Sdz4&(ik?SQR${M(uGECA~O#Mo!3oC=!9;`s?OYn6PPKNwTjWs+VC?VOp{o;z-x~ z;H{FEBnZbxIfiTJC&wJkMk_7+n>Z>SEEUx_tu$%OnD1p}?TijC(g=d5CnacI5EgrzkvE%Zy^LaA*RQpJ`UcF`YH!EWW9{4qx? zSBjP1=73YUHpn>RR;P-E>QryRK?e7`SCx^VROzV9N^)~K zQ=J;flrv0wR}Mu(2N~;3JTVb1+m2MG@jTj0rNk^3y2$dp`!be2o}t(#14{qv+*OR| zsq|I`vdul*ayH=X&lga3FM+M(xVfA~vDtE#seYUvyCi7%HZ(N80CP7n1BM#MqG&YE zwE?z`996@?koTGx+Z*C+l~};Ll&mMIQEUhz@@V+2M?s#};Vgyin6dJ3M%er?wkQQY zGc_meFW#-_NaLgEi0oN$MiK0}0GsnF#d|&ood&T|%{o%xWX`0J%943JS1sN{XBaTE zGmLwKCA;w)#5P`$v)s~bc3Gu3dy3t7HlUvTxSOvouQyja-uuY%O8oI0)U7vHs1&Z= z;{9>}GAwkw+Ym93$(1veawdRtjSG>X-8hN~|7u(AL{MX4$-)}?u|=};Uy z(K!#DUlQ2PR+5e5A<9_j^SpPXH+LSU&pY4vm8kEvrqPi!mUjCl$O4Crwqt_x?xB@p z_0Pao2D}r&UTpRR&>et^u9&!Vm~69>gNd4sl}C3mhMI$+{wgnh3&x$P47kmGb7j}? zRtx0}ES$;(7VBQsIM(MGL}Y&Tsq zUW__Ub+yBZv37vcH_-z=U7u0sjCZLac%Qc*&wxjI6Lx;wvC0@?u9FzHXG6dMinXlb z@MmhH(=i)`9S1f_3N}g$apkXcXWA$sZ&x;YvZ-sv!V*gU1;**G#o3YL&ud|l0XJIg zJc4{|zZc;+`lz61bn!kW=!!00%ZBkwJq|@l8&Hqd&FDL&W}jQ@U0%q!-}OF$l9oB% z+W;>u5_D_DVsoIP)h@>>jNL~$F>!bm-F z5JD7FL#yDfwxQNbixWR-?u{tQs!@9&L>Vu?sl{R%Werj>R#&%C@yicNbczlYLyw`}^3Tk>i60M!U_+)P- zIgl^sy+LsLM{Px4ybw0O_EOjr&I$B2uYb+pM}mf&^L1{ zTe3GMMxVEi7V{6akatmUmqRo5R+0n#<$mvZC@ZO34`=W~<4$FPL7 zj&(Mk@YiL>+ZzfHSA(u~6zJ-zBi)L3B&hQ)fY!$M4?;65VS_rw+t+rh!m;&Oa8w(I zfw{4f{qJP_>DcgqcH>pBiZRUc*-SM|r|7pc))tg|68nCeT;rRXM=FJREOxasB}}9{ zBy!#~GA+92v4ruZu9W1R4{T_4RYMgmH!480(EPj?fpzk2T=vL#!LY zVO`Y|mv3-vo$XXww?e^&v{VI%K>bszBz|2pd2uL0Orui z65D1lSs7^vu|pXkcLHJZ=%r#c)b*oyvR#M0>d?-S(f)dU9p& zVSYf1Dnq#sz}g$XV@+~knq5%x&j4Glu@a6~_ZckPe}5t+RxU5iYr^|bcyB?L;#`hi zy=8Pm!FvGU^gz}wXKRJYOgY=MYlW+Rh9>IZvo|sa-^Xr~EMrkxc1JhvsBeeFpiZdO zHl4Dm@~CrNIhcW$v#YjKXAj8=53Br%sl}G1czG~9o@SLiZzKQ-M z|B@+I)%}McmzL#S#yQ4Q@khPjQrc*;#1(bFd49-$X_CJ|ezq?K_g;<2F<6iUE+MBZ zhfVZr7;OTV$9W~!r^OMGD}lU<`DJNACX1_?04r@N?n*{;U#2kxndZW3%(uq5Zw5Ec zaboF-Xc>cHJ*3=4aoGe}Oys3%9I#F?67T(JqOCXuStOf1oEy%d1x}-V`=>#Pag(0F zL>bbGQ6GwGY0vkb39_d-jE)4W-pY{zYito-9YWs26t6h(^Vz}tc{LafZFw9EZaI&+ zJ2#M>oj>6EFGpczw>8e@DQD?(V0X5)+*x%3r-@@)J4k`hR|RCxQ9@5xdWluxmw7rXqPdz`9a{v!mMm# z>5XquHExGh*zE#TJTZjvSR~@IuTunMS38WEE#}5uxA6hMciU}7=vo7WHMZO;B1_pj z>c<=(W4*4=iZf>+zU2CkQ0rV0+1{Jc5Z(tt=5&qZ`V$v~k=%XtJ`|5UA&TTmI2n0W z6iE+sB{m=DB{}YhIOvm7IQ|rIa6z3+zT{=0XxvvyMjjPKLR-4z3o2!M*uZvsT)$&@ z@|D_P<9dw5QtN=NhE+!M>9s*vLpd|u_%JFykahj{g^A$PvvX3F@%0?pv7`}wq1$45 z3u`fJu?pVXVKE-I(2LxCkxq$ekAIKJdl|s63lHQ9SX8_NDP+y?dJt<@AQw!iNy}te z)}8|e*U!B?PzqvqGWH{o+kcipmz8rfKN>VsMigF!=Y7^1GZZWTerZ^v=*&2T+J7Q^{3@^iMHKu!)VymLv%Dz3$DAKK7XUfH9p@Jv8ro-?I0iPupxd8pj2v zwbx=4hW2-Hoxus3R7Q-xK@&lLm9;K|df>p}(8EzBZUGCCTLbOErHcp2bW#^%_Be!K zpQIQ0>YhSzsplZzRvelx!BErb}9%g+Dyb+W~xg73) zT4zx%8RHy1fuP3`HzcJN9eI@8!AIxi@c-((n`?X&jXvg%&)464nFE&hlX>p zFnFBV_w1D5Q0z>nhYsjIMIFz9`CyDwqV+mdU-%p^V-uQA0~J_ zbt>q74JO-Wzvk?-t-fH6MFDteMI`0idoARAG2}G z7m4b6ac(@;i=q>(7s(#0AJ>aiXV2`0WR_SN9+A3Uoa|aJepXU1HtWSZB-q>Qe;Wo~ zXzj(`kPm#DtQTd^(X1C=iu$Ll7pXF{Ud*=9sbsxKy^p=rk#%XbH_>7%+q|UK7WqJPzotIJML;-6$5>4FO;?r543lJ++LyH3q!Lq)Bf_rd|jHzqUte&+$ zA7Sm|CD+d9r0arJQC&cG)`9yo=Yls}Z!UmL@N9pF9vavnaXYvo4g+Oa-03(E3Br&p z4myLZ4_A65;JSZ>QaTGk&n_tXOQ3RB*QCqYe#Qs&TF;)+H6LcBEY*7uWen-8RKowk zGFPBm!l5j}ne`&bs$-Ev)5Y;vUDP32gVFf6zCP8*(=gE<=V13;wwerfl2~dWgWX+> z=o;%nmOwI*WM4W68DdKQvuQ_CX220@BpmCwZ~a8ax}Sm9jCFT0YaQ$0b3_s>(%IhkAxKGP zaXrmt!J6ww@N9OQ&6#Wc2JyYv#Qphgwjqjnl$u&}J8AOvvE<{d@QvLvuDT|z|BaR==Ngi9r z+|5W%VZ(I{dqR92v&`MqN+#P}t1Fpou#$0OD;XriqS&3gmdSE01B2jN=5s+4gnkBV z8F+)lS|*1XJI!f)f$M+9)XGe|0~6(@#6Z4)<%z6l@X142#jN$YqETA5H3o|D#Y`c6 zF_WM9aky65%f(U0Mq2sF_|sa5iCw%U)^L-!oS(TnOfcd44?xH{sl@%p6}{$Nn)IG9 z=^~UR+w+YpyNYSfpp1J{80U90z7UM}JrTxn7s^Us2oAST3n6 z=`HudmGr7B36@&c!B2rQ@efD7)yFK?NShwj1{$$IdW4*UibO zOb2)VGj_H!)Xhk_u$OINk%u~xi+gt(Kf zlHB5w>s+|Sr3X#W!O!GA*C1|jso&kh+W!Q-!v$9>0>h`W65gIVmFSvFNK~2|pEH-h zpexMb;KN~9kUcmY$uN9itSl}pse>=TCbmHba)%(?quPKr5KFZicv&IQv0eY_DDn@8 zOmVSah&VV5$NfS~gr5A`gHd`u+MU6Qkp67#7+}}`o5>~UG=s~C zA-FQySwwqg{|?u9BR~>synjbm_x=x)aY4xajQ^%}?q;5oE=KWolcL`6liT$5&E+XHeE1 ze?__24|&4t)lrlu>s1n1X-J(aA_mv1M0LG7Hy-O%sT$b{h;T}8R!0QFbzGqu(mBQ<$!MWF|*2VW* z^S;OFF+AnPzfG>;u)a)N&r+vmJ$p1diLPg9W5}5P27B{Xhi&Tp6Ra3gHp)!Dz=8{WIKia5nD}n`^gc%e*7^NnYxOZYmqwrP9z@Awd)iec zxC#qTFT=ipv!F=E1-PS28A`eFTu!_VvPP%U^W08@)q^AFv-K9Zjj=+>6iV>5Tgp-Yj)*vv3C zkwdO)1ggZLn*^%Hq1yx+ibJ0k=u*7&6y|lOK(C2IvjSZfhyGolH{-HMn9#ita@ks; z<#Ih}I~7km=3d#o8Oz#ETV0PW-0fqCQL4$d;u>@NIH(y$_(RBQCQtQ$9MgWq4oShL zh!vB37o}itB34TBeJKUIo7iBIuV?#QtU;`tJx_Bmn$Nxna)U_Gw{ zpO|H&m&p|DMJd=NDcJ2P*iVUFfwqq6zW<`R*d(zllYD2UV3!lSD#`b`6zrG8zReC4 z)$PF)Y{A9gTMHwO@hvB|E{PpUY`-LSIGvY#p&1(Sc(1I5h>^N$jR1-xpG_2a}j|CaD&8VP+&K(nmoNJPL};QBcH< zg3>ZkP#Pc#iteMJs67gb#-pHAItohNBuFV{CMX5nGS4v1jCK^%xsnWW?61Z0szB+R7Lk-Dbpwdzc~|I}lDj*GG)FNi@@k zdf0L|(rKN58EjSlww{C0W9*}L<4`!jeoMTX?R^3cZoC`>K8b(~7Gt)Igz7sTd?iHx zNi*8s18C9loGtI~j5(U$JQ2vz{Hk^kk_>s(NTk84D!jEhc8HYeeF{akeu4~*pFR>r zy^>=i&Ip#j8WRV(59>6l*p@A3$NSxCCfmB6cMc!q>kD~=h3d=5HgCzzRdB1`dl-?f z_Xz%u9T`k|TkA1$cP7xN7^7o>+i*lyz*xDm-`^hv`d72m;Kmxc9l49@9gNiYh(KE) z?->jo8H8G^5%Lb53mu+Fa|A=2`{1=L-Otv{^v#TCA$GP}^xuu*bs@io3LBW2yA8Rv869e2mL8Ua_pg%Y6RW6P$NLmlP+#Sr_w&yr`eJ8w zchqfR)Fh&2dyD=~Naw0_rrmq3HHWD@=i6=Ou6civX=R6*@4;24xM3T`e#OL&T@;7E zM3^VZv3Hyj>AnmGeQg7a77E4vV9E_up}k$cOJluC+B+)jP9(xi_F#Q)u7o}~y1~_} zdU7|9cZ3$_3%P>1j#r4?#xvJ{R?p@!p*GjzFpUnb((TO#h+U;y8iu>C(qaC_vr$`Q zgqRlZ#YOC^7U?}Yfn>u%H<-dJbWuqw7U>l_k5G&?yges%|1_%2DZd0h!vHTagi*mI z26V9CTqlh2(qew1m35*B&v_d_BF&p7GA8rY7e+AZXXWF1ytU!Ze5Axn7M^Y9=tfHdGY%iuSv^G z4^m-SV^|!9d2kDrKcoW}vXT2V1>Urii@9QFD!}S*=H%$4s_(w=6h&mh3zFGp6&v$B zjKR@vaVsSa-%Qj*lRxK`VARvL_Qn(Ix$xX$Ik?R|GwQ`v?c54MLOYRjkMr%;hv2t5 zPXUt|p`K0PsqASd+O05Px5?w(hDZ)MjCb^1x#ti%(Lj7PN#42go)>4;;p>Yueh+ge7z`^;DPbDQESn z3=auaudlS$d_wPq8nark8=~Y7F57Oa#R%xZr%Urf^d%^)rDDnx4pF14w$}OQ9cCnCDSdHw*{; z#=(yi;YX2%bOLyD>sEFZZW`;}uIU5^GQXe`oP!KH2LWIw2m^MTJlY9%w-8{$U?FfW zB|(P~$ZIi#4x^5o7XSQ+slJ^&m4tSi#X=nv+8=1PWmlNY$k8|4-*%z!#|)8Bh5dc z4=2q(pr1*ae?YU$*4-3DN_X0nM*&hgUi=s_-zUCOO}80yXGsdEOc-!ofShVKmAb3fp`=K|@q zMJ2&Cpp!9s-59li4W0v_vM!cy1Sz^(=* zeS?#Fu}Rs)LSj}lHSy)i#N=aQK7$=F?pfd<%eor2EM2bXj34U+cg>dTWTz*8-lws% zGG4%;7k4e26*s@t#r!rBQ}AGtbLVVXFPP!&Zmf}T38Z+p%!jE{+v>O09ch(Oq;i9w}-Q{+q>wO9`sOhp0M)K); z*qw|btEfY32c=zSFYFu*hS1fCOdq9^@GlVweOyl+97T4=yOFdcb-cHdK1T7kk$$ey z?;!m=rQb#RSfy_z{d}e0OZo*$-$okqHs*gjX-wBhe~>gLWTZbr8WSqgA0s`j^e0Gf z0L{9+1p(@wvg*w}HVZ$#B;vCPDf-y?PVLbZ{rOq(Pr0Zs?^9GK5ZUYa@_r4X<{R{fa^L2Z3We@0nrM1OrxO7>3x^n3* zHp`&NQty1a^6i_r-f6Jz%w0)iqtP-yKHbJ=VT7^#Xu#uW7(Ro@2Px*Q7&cfnjK zsW)0HzpZOx+qz=jP&qbEwd>LML3WMSE-qhh!$Id;hy${o|^Aa5@xLt7=J*FI4!Sjh& zFQQm*TYRbNU`%{*9oO$G-!ltVvAV=R-bqPcj~1oi6`^<*nm=4f1zR zKp_|ezE1i?rN2pflhWTNeUj4OC4I8eKO%jq(mx=5iqiLxK11p6k>0HI&q$xH^iN2i z1{%Jx^%Vr@BPoaYNFe}F7y*QUIw+BAON=q64|+BHZqlw+#4+JbZXe zJnJ~7?CxwmxcEJBH*Wt1FA`t^57(Sm*IW)26)qeB1=9JLrP=luLeu5-t?BdF`XapEtk|CGUw8)i{(qt>^Zp!e2AS^ zH_p#?HE46=k})+tUdhQ_a&3rsv1}lWB+>QZ0W5#mj1w;IJP%>~=#?vi^W^={4KCixho~vt$#`W-WZ1x6ti@Fs4JiHdqAhK2l?T<4WIhX!2I%Lqv z<@CFH)hxF_Dzz2Yd$>niTzd7Ep%o=x*lt01+tTW_{&X zdgVi-jo%=r=5yTd?3qN?x!>VLI>ys*zeA&rA-fRKZG9ej${9BIsdiEyVx~phb`>Kn zIXMsSvK1#P{sj=y@$m9rQTMC9Oik!Z*AsWmmR*@i$X5#0R&{U1#u>rnTJ@`3d_8~y z^~(P}a<;^|)#WJr^(RNNPBN8cD5hn#N^IbVsc)|yRZQslQ# z=3Nnf3q{_h!gm$roJ77=CVO@Cj`u?c4XHjuzYRm7ex3!-(0BkNwT^$QQ0^O}a{rA( zxE%PBuQ*#R`TMe58BMfp%c+z(m zZU$SJqgvRelmAIqV%W)`kHG)UmmwSZ00niS!+i6?0FxX0qL3is^dMsERglFiu<2xC z&^*edIG=m#GFjG$rtX zOqdQ*re9pEXDm1l>&>*atG5(g?DZ~(8^=d(``qeuF=x9w9CydbCzafZf6MWkH*<@6 zB)zCd3G>c5=Yn$g+vMMmua6>c&6=el?<#%t?s#A4xUYMnycGF~^6qrpollha^^W`c zBrmPYn_iTRTBN@ff`1 zLml8OOxr_Rm`cOfc=4I1`aBrIh7z0Pm}~%VTtqx2sJq7jOWq6(C~N}TW7L%#i;;lV1O?=@pL&& z7h8Gd=OE}*%sa+Y++}IKSYM4LOXEJ>P|!Ck{B|z7I-Lv54WCJXbv{s$dpJp+Yn}kl z&J-TU8VJgwpK0dt%{^GKa~*E&{RjKL8@_k#=n0iwaVrjZ<@+(BAoxtfcOBZy9QUsB%UMfN&zs1XX)K1;i>}lMCsMfz)#~Vb zq*5cA9O|TL-kL~5nIAvR&51OW|MAnjEs=(G*+rUb9D90cWyNCqN($q@6+@sSq@K6Q zyjc27R_;Tx&baegmFh07IM z$KraTg}mND8Su$Wc5{C5S?(UyvBtZWpC`gy*Bm|`T`J>JR2ko)iM~3GG?PEci(>Sv z(>Z*4x176{hc^{`a=MHQl~T5n{4Np(4Q{>VCVzxCdssf}Li@H^mm>SO)I})dFLj|N zo=9Dq$m=GfPdN=vYrksHeu#^;!{fJKl9g!)_SCUH_|!+714(F zs($|#^aTHB_@g`PL|5bWeOnFPt>ke025=hx2i=_G3f5ZIEtJEN1#uA{a4ustjt{9Y zC+ST#UVq_NPqFC2-=U4GhG!nh;4sSevIX4GX<#aWuP5ArIL^@aQ8s*Q5&%A4pzG|( zp1c-NS!w6TWU5jBt%IrLcY|ys@9MNBvm25dUH_!`iySQ*V5 zYvJo4#ceaYD#mW$%P0J(0LQ0&A`$m>0*i?Cp| zi*Xg7`ko)`Ut$@7ZKvY0VB7L{soR#aMzyV8oE7T&dZdL-Dk%rwl8`4((s@m>@e@3~ zpT-0D<^egpHp=A_?}Ve?Gh49vVmoyRx8B2t61t&#=0dY`p`R1N(sBdxlnsNivs8k6 z5wV>`G}b`9+s^`}W1em8fg<0_z6HnG9N##xGFH^RH=KN`J{(f1GDo?+0&Y!l|A$=HUC0 z_zq6x`dRCP*bgal zwf@cSNf@Vc*0a!R{8uYph3<{nkiP|f8&~Z7%j7xagF$}r`9=wk_#ctyBLCa+Td46GNHqowjV!A5 zkH(SVk;S!otsaL)Mn-D=wf>=4x<#Wvz!t|A1FLUGCFM^%X31!+t}%S`BOVh**odg( zqn?S_S^?=KMx){FgT%&1!5zszyY)V}uMSRPaFt5PZ$%`|WHNTG|EhbT`ObG3s2^bC zKGSxFaY$prbUvN$GprXH>)RlYrn*zI*roxT{UE=iHSi4tIN!@ycR~``rx~)_w*%eK z`7jyVAC z9C%;CUz-Du5ypmh#;$Zer;ktT;|qM)LrY7YFM`T-?ob%#mE`>x9%DMjhdOSHdfU`R z=iLt21em!TWam~1i_+WFPryK6=8A|xnxaje1q=jct_&F}oqGVF{8>ImJ9qQZ*o?MS z9lsnpz8(G(TAXi-B<|3LK#%oN*wEzfIO^CULyl20delZI|A-rvz*%&jxLlvC4NU$~ zv#E2duX??0SC;m6ehQ{S2ghzu5W_f(Ll}oC!PuDLd-dAZZQ4&}XE9UVTxxE_O#<9X z$gJ2KAJb$63f~z}c+#{Qr=l+U15OUku7xQcHBna(%GJ0Va{YD=nFm>~x-N)!Z$R_F z?i?9EKfv+R8QO47(azv6=3J8t+}!G(tg|DV*yj7r+N)nH%kVx zBLi+>qFBG2S!Ra^TnE2SHMF5RwGj5Y=1V{eJr0bO&^5jM<*B7u@nl!z@`e3wMl3%9 zz5-?+X!o`E(#IW9&YU@Q=JT5;=Eo=Ux#hT_mW-|zTJAox4L6gbzSq`_vs?@oVHkD;h@W8x~D1 zni`p!60-`{s2Q2liwutJ9!@W6yp%=5Qv_6YWO_s}So{)X$Lhz+8kR_@U3T*4K~@(9GHudswD7lTw>g+h)rwO_fWnH=-KVja$N(g5o3#!>t{GFQ)}pg!ZbYH^oo7vL*fLerQFL_jZg=<;q@;X-N;a;*C)kEIuHb2yD9LXB z5V6&1oKdmevN8_Ajg%|6LPU|)-i2n2D;EV$?HJu$w=lon)E!Zs3RXWSp`JUOk-wlK!plBdD1zK-#&V$gr-Y2-f0Y+E1bFL5lPjg zLwe+MJGKbn>Xj%h&h@;|kdEby;f=$!JjIGsdkV^d`-Z}qn`{PYa?>5*%LS<#=Sw*h zwS6yogBZ9>Mnff^g%CTx2SZdS$7y<+*NW$9-Y@6H<5Qnc(OY*#%FbG7%zcm zC!9)iUNvy~n6Wm_qmIS5`~}sMJ_X;x)l_8_?&Puq46Vj^;ES-bnvr>&Ept44=ZJXY zbo@m!nYc|YnG(mw6~V9s@N=;%i@9Rc%`BQ)S}JBnrreeDorTMBMuQo|%aFEtcFtYB zr#%$NHx&pd1JcZ8P)_4qavf%mbaBLHpj8Y~;k>gt1z*-UgTko~P=74h=;A1gLv1ld z?cZ7J0qB|QB)hF^P&U@IHsW+|VPdh86PS}ThLhy7{Zv7nM&a@QxHAf5jvjVv>K1;223{{*gRLnMYaML%CgZC%v)fQ z0>K-Se+5hc=L$kkpNaJ}&MYUsreR6{k-6yw+HHE6J2RicLR~ESZd&v__%w#JN1J+3 zeNzQ*0Nt~Q)?v_{(!L>q;mPL!RxPo!1%sBXuMzPv$?#M7E4$$_#&CQ)*=~Ol@tZV> zWGXGN0u!lFx^)BCZwkiMKVXFUh>RyHk8UfNzRblV$jz&y!Zp z>a>=kIb$X!1?;Z<{+qQF%GHw>$@1$?qEk)Cx8_EzfGUGp2%S6wV1Clya^RG*MBxAyo)QU`CSs(pR+x=huzhd`6i^^^sXxeV) zGi;_IX<&E!e7nt^IyKZ4XQ~=g`^a;4*GCquoY3g%@+CpvSiMLy(^9AFJXTwk3kud! zhYxxNdsfg@D8~W3`)1OyVW)K}poK=}GGUIp11W(9EkU*KQK6`T4`>Zz{yzyA=Yvuu{og&BwaBpsZy!qBng^ z<{jK~#sI*^#F$OhVdE$8%N$$-caHHJn|kV@BACBD*yd*T04A>-HwG|XlSxhk@CvQ^ z8m!Q!pt%8z*Ysoz?%=I@mS(rViocUsMx9bD2UFlxNJsr)e-l#+Cc(Fjr*@Q!>(3Qi zHVE=87uKH;VLO5XcC0@l0JEE zRvOzeo{ud@s5ZYbLmCR=`jG9$J=IFl8SMNLog=ewwX?V%XQ-7GxoWX5b6S6xEJDd&% z84Yca^X-ld)SCBI_gXlnl8Ke(p@7W3s(snTQ&PqcH4i>Uf;@tKM}<0EG@=lOhBkI& z$7)!E8#+H=T&BZ?lilZbIN!3fcXe*#(`mdi)U_+Wee-eX+HoppEiHC_0TsEOd+;|< zy))GL4b@hWeNsGbWgczn5RHMbXj6fSOl=H5G>Ic*RbrbC+Y9Osak@T+?zkCBE@2su=8ilz9!R zE(cY|CKcA2wMV#?bga)KU$v*ekYFLbw2*wZGMUM$eI$L9b0YndeDar-77Y4_YmK0PaBZB$ep6-~?lMrBn7OLmX;a&oN;XnG zjx%@@JU$m+h2>@Bvx`}Gx|D&RrmY4y3DI4|wY$2k3*w%@8mJoZB$gQ196JFfo3>`k z?`pcuegd!mIBSpmnR*`R4o|PTo)=npj}_Ym)+eB+%*aZpVuh%uJazA zvU80Wv){-_irswnEsASc)?B#0CD<;yp&XHnR~^}w3hK5m-rJ}2n3bzmhBEHT zm@;COj%jO1naAg7CddTU=KwHK$*lc;*uSMO@5iBZVQ-@2u(QbZ?_@BafrZBX+9Mmlr)~!%oeN3jhI&U{T zq-^4qx=KZMeKNzVYy7Ys+zs7IIa|3NZxYIn%&425yf2}yLYO7&1wBiBAg@+Ep>`3? zBMb4L(j0t~H@J)C$oCykZTwpLRogjSJP45t{SfKa)eyh)u#h*C%)y||y@z`-|JQUD z(X5U^^Mvl$d}KOVJ}RBRG6#IW^fkys`c2M4fz~J4Z^jGU4syYGqunOs2)?v0#G+-( zlvunP6ERBRcsr1T$*|ISl=)UVkMV&s_+lr6Y}}5+Qrj$hyyier$uRe2zfWIN~vv?)w1$ag1E%<-UEdD?r*-F3NJk-u< zwenI)%xpSzBF<77A_^+$^jT9nj21c+92b^F0sM9lE=#!hWDCT}N2Wb18u$mEYy+2t zC`+8u;-)aW{U?MNha2Y;*Zx=Z*{+Ul1ezmwS)OAy1LdB|4dot;**)bRck&OpS|9vh ztq%^c()kDC?Ge@OTWQGu8{S;SocRT1vD*}h{v5l}B+I#-@b))^{!`+y3}PeHilS)fMjkUDpJsH%N(N3*@5HX_?+LR-stw*nc5?(=VL`h zZJK6&GQ6{CfJM>(S|>Cut39X5_rDCIaUlH8V)NYp`Id4guTTwDb}r;ZM?f$!U`*xY4qj{nam+pDm!Dzy+Cnk)xf6( z1^1WBU6f;3c2y3Ep@pe$m*kkmG3s1mc6bTS9?x?)y`dkrQ zkcS(hf@}jQF1Uc}^C^n|@AsU#w|kZ#D(~}t|KH~~pU?EIy-uAvRdwprsZ&r|WyM}! z>?)RbDqCmRxqqfgsR`U}@Mbh?sMoGw=MeF}vXr*>3{M(sFB}l(dh+;V-tW+Px|sem zY=^Qr%BGAwDV!9vO$cD+$?4PTlf*w)AA54(IW^i$Vpz+Dv(zG)VQUGQOwwA6Z-)Ch zY~dJPj+8c&)3%5-9xO=W&Kjl*kT+$$7;>-AG4I5E$Z0lqd{daaKOPN`F{M@x{b}fY z>E?e0c3Jl$1WQ~xQGIl!1Ny^ejX~~siy!zNpbvXCe$DHH{|Tn!YY%B=+~z`3opgx|z%ts#Dst)=`x?!Lc# zlPzDqZtDPkORYutP+ps{He>hwdGvExZ|)`&viC3I%Y8P^eq{3xSpYZxMHu=g{>Vr< zX7}&t?mvayzXo|J?*7pi1g)6$va1~x<@PVK0F4iQki3REhBlOtSYNXU-L;~lwT(#S=iSWdwR zHdTvwSv%p5zQ&#)Oqt0vew881VHZX^;)t`nq~>W&i)5?jDD*_Css2Llq+A?mu1qTZC1o=pZJeGykt9BVwn6jKn*QjOGjG zsAbK#@nWWy^B{~RPq2Sx;aILGJ50@tY|; znz?#$&hkW8p?|pM#*;P8Ix4E7>5L-KKt9Z)47!-vaTUzVVx^2Q2WAP%89In@)Gc$L zjOf*$;F6(h{n)$z8@ty3hgPhF(=cmKa9z30pfp0(%l|;Z-oh1qSji|J#7zL0GD!mK z$$y5bl!}!KN1iM~!B&OSQ3VbAr#PKxnBYkM$t&uyC#@(9Xr3282d6(6++HEA45tgn zJ!pP0RY(cTSxmqoOlJ}f8SgMB1E+&jqj@+uqj>4@8r=+p8y&0jmb0^%6<#H=6Yl}k zA@>`{jFUhmJd5^dTBYbl+)h%s9ZHYE?m)m^E#bL=gqPirP2zfb9$Slf>x(^*673x7 zZmjm8I@M!%9_CRWC<GJ8D*-`5JG__~`!4w1z2?kdrCN0exZ(_$pl;2H zr`^eGWhnK@dx;ELELN96O@DWTdZaIYM!z+? z9jI(tJ8=4y2Xb%>*1Z-FW?;F1R0}UOq`ks;dBt-E#IfS2>4=Sd1){mI^c<~?xrhw$Su;J;5^5`SR3lQ;CL}tZV z_(2T@=4EV5VSL5@aUDVokuQP@Gyzh&yS6lrh#cvRfhi*};kUr8S%j0P;w1~IpdM$K zvjRxwAz#Zk?i@QA8?GoVo1!G@~e}eyq z@IOX}QBZ?CBjt`PR`0p{!uh$N>st zwOhL++!5``G<<&RSR@@=2~`c#7-k(jebGAOB`#OYEaa zH$*kkATbjx6R<^_Qcy-cr9Km&N9F|R6aWOpwG9mjXjz1k<=BxioCAL^oGeADVK&+o z+UmfjEsH?_e?50Y>ljJRJoEmMiiRe%fX71)>;bX5zry6xx{mq=|EKC(#Ok0ZIK8_0 zPkwdh3OeIz3=I$=BH>p50;v}_IHh}I8mA#7QRUI_ve3AwObQ{%gyaTqz_8D{INMq@ zJ-d{pdB)~r4TLp%nuHxuI#ybgA~f5?vjLOLZpP1vsorPG%nO8L-+^32Ll*rbsQO1p z4pJDMgrD#rBy#=0XlH=2_F~!b_)-oS9bd z`D4`WRV9Q9Rlq@sm>{^;U4<|2U6-+ka_VKRpWTE==*?zXgv6+m@5PA`y^bDzC|GHk1JYQ%i8IlQ#Bt37NCp|a zVF4gfxR?3BX)|Iv8b0dO`!%GFjPX38%u(AP{3{TMM{X(?-$x}`l8&mt4u^xH^Exyj z6Wdio^Ypu&O;&nHS^I)3xPkOg%p`d>a5lk!By8QzOShxAp`$D7o`QRv44XQr`bkxpov;>_ zj5MoagwRaTcVN5;=u@mAQGH8; z1CYdS6xiSGrOqs(sLc|JAUvX27~25e&H&}^%#Iz#jUiNLy_}cA%ZO<&$DMk?OD)Gc ziZ$Cy6$=$??Q%eYAaICgH&z^)!tXe226IE`6_$sW~+gdL#8ODm68+@s3emdh3bpczZleS?XGPuKvKT5kXSZi!o|OsMtDXO)s3`0 zVyYcr4ELa!ox5weTF$Yt+ES?Yn}Vo# z+-?iRSTcHm^eJSlNIr}(NNl|1X_Pxb9U9c`B{wvFVZtg>=q8A_(zP;eAP7c_xsGt8 zOm8qt7vlJ%vItJStkXYV+Lcqa(>gd1s>s;g?6@)xTs_ z2S0E9KB{Z+Vsyid>XK!(Ha58tbxfXyAM^nPiE~ulKm@8efSgyMkO}XL>Z+C8>Yqn? z5H$4W`1ldk+Z`1qokV$Z6YDsgb)*W(x$8jVP{&aU)QYuHU8hF{*M`yFl^*K4ItoHl z+Yo%KBNT?0htIXCO68R2??(NnqUt@#^5h17&Au^d@fe=_Ms0HA+0oqy!Mz%!Z?Okx zHgY@H1`cI=p1Mi4cC|-697S;|PD0vsuGEzauF&LvL}wG+r(lI;TzTA=7HwsUL7>cj)m{nI^~vEIr}DSh z!X{aO9lG`USlxnnsctmE`^3RSQ?+V>-ya8)QsQ7d-fmPmNITU&(_|iC- zR4_akdONK1hCdp;s@A#~p%4RH!cVewDL>Hic(Z(yE!+y>f=k_>S4HjNynXTgTw-s{ z#h|VeGv? zl%@b1QFL8snu}dR`9TUkK%7_so&hd-6WAp1a1D-Er9S`=mY*6`-C;TmE34;bM$-^g zW}pI@k$jgGDgL;VU}jNpX5D(VahR&lNBCV54hgALuCWqkc$>wC08?v^gG2+bK6dH7 zmUPY4W5fuA%j%Cr&Ip?Eb54wcD(g((0IWxvz(hwnF9&%!9!e`Oe>@mlo>BhfO zH_5eDptWCoT)H6P=lgM(S8mA7viKYLC#M&r&6i`cQFO@+n zb~|EfG*iB+mSzT$2l<>#dh`pmbM~IsOAd@eUIs2xxD{M7*bN@YkPirq_Df+A|0;tF zNW0kUDX`kw&rvUrivd+ffEyUSlvg}uBYGtuWm7U<% z#W4*`HW1YjAy9MQ4O66&J<3BRE`tyvN)EBzE)Xx+f|BG$xvD6x#tWO(-@z~D3F_@xDF@@_rRJ#5!>wzmZ&YevB3eh zfc2!(ssBOvbWV4z(=fEZ1o|=7jB$gvl80^fbc#ljE?ZaGbk0!Dn6~X%@l#ODs4WC= z8TcLCTcrnJo58`o1ud?U=l4H^TFy~2aaP=-^*Poe)R#ehW!M?3Y=Eh~%IUqZrMM{z zD}=bMUta!GTq;9i-jl|jQ~s(8&4O@2JPUK~ont}ZlpAXTULB|Aq>EshV;;Ko<8d%} zCQP>&KqlttaZEfBo0x5J%zIc=1kZtSFsA-CJg3LO??dn~?q4n_`yV0F;Y=7OTE;d$ z!?e+E_Tw6N3tf}27jNWsNkZGYj(&Y$rS)%g`#+;Gd8hU7^h_{0bk%amx^y^O9?s&} zqr63NowV*UWhced6w^8_ZmCT^*(R$yDPm@I+Y_v`H5Df;s|Kc2CZLIqYLpn=oRBN% z_4(mKEW{c<@dE_wJ9X~`z}rmd{RovJmhFd|-ckcAD@#~Mn(^Qj!i*4R5rmfy*#Khi zNU`cU@bisUmJ)2Eq5Vzv1W|;yN}wPju8I_c^)tyko60LoGybkN4(bhi$N(3)kK4#u ztthYfyPGMN>;y(p2wrszo2~8Jqs@;yGw5NrYhX}<8;2!Cn7s8^i|ER~9)vfwVCmF6 z+y4TbiZTBPI!i)E_t^df@h5L>GFv)rIqN`u7#UVBXU${SQaQiH z1$9rO+mF+4==KwIM|As1dM21W5jYCJh zXqE1Sp;fw*hEC}gB5J$X<8h*Kjst?PbaJ$Mw2QTCFT#jmH?C;gQC-H5#{O@Y_%e-}wcE1JQHJU(MpG6H(r+GVV+B}L;hmk7!lJ&B1Q zBDRrA1h!Cs(*lixWtV6?Ki&Ggcw3+5XF`8jwjmD&L|vzDArGBfZ|{Jy`GjG_geo9Z zv}&D;+to)??B4^-1O{7z?Lp>nRJkST#ArA zePtaGl@`l{@h#rEL}oLm2ptXdArA#Le*Qlb_-w$@;%Rjb?%1n@07h-r#qLnA&gY z)MAh|Gupv#nRJ4cMav7__Y7luFMl)EmBkGFlR_bj8sV$s<~YI9#SL#1sxPHWg~XVp zj&80A3F}^z!*di(YfljWW=&wCh<~A5BQM!(mIl_yyXuS@RMIsywio?Tw+=Fulyi|O zvnsdKNu~q=kAz9VvXGDGQsosGDbf`JAzsW@CPzx(6jnZDwJNcZ23OSDk)5vq7D z=m_Fm@DJd#18q?kb|QB+CfCfsWF3BTh#Zf~A&Sdzh)W@T^Ai9KqoCU3_(?it+>7fq zcJoTmcI!bwiTpw@#(`BJ93+{X z!4=H7Wp)H^FTR~oSm^+6o-o2%S+ytOcPr@JT!`~^c5?$#s)aFGZEXj(ffF@5ab_^d zG61nG!U{2+fcQejfLEUp6TAlD0GPpqYeqD0RsIWe&K>nyMhOjyEnpd^EJ19{(AqR9 z9mXN$n{{O-ka*hE;usPS&3vsm6lS%Nn1S~(6V3laq5mzHJz5I zcjd55uy~l=&AnGR)_G9_gecjz~>xDpb5wIQXB;v+NDpeOk zDV#ER(@?(9&?+gLRni$$4c;M;mEqC6<|*h-@tA|nBW-^G)W=6P7m^Aqc%IfDG$Hdf z1nuM7dPRKkkGJ*aAv`;kUOMG0owC3lxAz`+U(Y!mdk-YV6ET)^2Hc$E&xRkI3Er-U z1R+b@;4#Q>YJclI*=6P+nONoyl3Pw?(wXsK3sU)b94$*ZMH#AhY6E@+5=(y67?B`OJHxS_z?)i$->HV?j@9qztcYJkLf4l^oo9PccjG7p`6sg=r z>=kG=kDQ8QWORgfPBCflUm0Jy5a-Dw`ljRx&r2#Ik%_%jJEAj}>^6KDBhOMC%6{eR zkT~zGmWMNyk>0q>$GX7C043=Su&6a$$@7$$ua!VZZMq$Y-q2Ime#a5sn&)AKa2Gw+ zmEK5J2wa}9LaV{u&>iiO=YtmUR-l~qB(jMl9_lXH!MgxZKHWdk?Z|_qX-M=^qd%R> zEOiqr?Z*c3fMjAEG!C&2I7MsmzE+0&Ygp5#G>6qa)KMMXQFTH;gUChx2DN1qJm7Is zJAy}$Qx16C(MQ0q%B#{U?x6aCh`O-Ofz>6GflXYr0S6;1{4Kx12U$IM2l4!>(*vdU zb_@nV+w&X79H@Dm;J5T0t-j7JO;o5zW>%ZjiQsqBGXI`FOzNzjS28fb+w~BqosrUx zxL!6NZ(8~XbEF*#yJg_Wsmig2ek@`1_K$$IlW>g&H~UORUmHbNlHkdB^P7qAdWt5a z!8BOjKZ;2&ijwBSmx8vN|AlI|*?49VU9v&yBoKcfFxb5L+@z3iNcf+l3yC;)vHz0j zzxGxcGf5e5T}p$?%YTD}l&O@E?q;NG-T*uxiGMOcaD)G5QJhCA)8m~juKz-$SZb0O zBJkG}aPoYMk)Cvelfp7!a@WD2qEwknRYvic3e?tkI}y-qOQpB0%i)|dJ*%{QdHJm= z;x0hTv%@FZejORGXTeT~r+5$JL$zUgmA)nzWJqm4HdSER53uMO%9If?VSZcz8ek5z zUn-aMcKn`^mMjC9lPM0(nAp8d#+OTYNMV5I5d;ICU*SV|=r!;#$iM@nxKS)&AkEqn zOc43VcrmXd6__}2vo1*ODBS%u5}+<@y%Hd=33~Yz|I4ssGr&I=bychIF<5--*AW-C zbtrIg3;M;uBgK_r=X|WEc#R%r6t~g^fSBLaQa%ads)JWzA+8q1ARKy+;&l(?4&F&G zgh2ipto#Z8JT~!lF{s${0aX7`as}8C^2GJ`_z+x1@ylR-B|K|m8!qj18oBT*q>%Ta z0*tBFf17mjCA}Yuc6<%(fC(2w1%E_3*i2aChO07IW}byA>&uLXOo6P-Q0Z*QN`fUi zCChUj8?Q7Tn#J3T?r=%Rq+{KVvTas8vvu>O(lnTF?vce2bSs7B=<>EPYSGk8ip7d}GNiBQBzr337+v;IXW zv?=}bW4n5oJek}2Gcec2_d%C+;QLREn%n|zQuv_OqXz#B2d|N!%>xV17kC3s@KVA{ zB+F}8Ou26T0=zz#b%Kyl{{gVdD_&xJ14x*!jirNeIE3iBaXz;tDkHqIfL5_IJaqA* zC=?HrNV#|eDmVpkjT@#)>GP}P|9I2{E+BXcg73kOLDHe>Ch}ggd0^eVlLy!1g~Akc zeV~cWvuH>+o$d#md{vA42#yIYxr>Q3xhmX`;U!9=Eeeq4BXv zx!R%ncC$1Ij65-w)^?qbcny%&1#N#?oA@VS$UOD@nK_<%*1W-^NCjBfF#lEfiQsxQ z-0}vsZ8fZ;U#@RKbB+gwWsZ0J3y}l|XxZA4Py(5U*&Xk}FM}!*DIn#*zeAs{)R0Ry zue?X=R6hpGpHVlE%k+4;9@a|m81u(5TBVsX=A5vriJqgNBVc>tNEt*kBVj59&m;SP zVM19G#brWY#|DXLnW6skK=W9$5*BT%a;>zbJz1JaKY$- zrv%pM2fpqf{x1$aVZUz8MCX7l#@f|GT95H7e7zp;Nm)AU`)?vf0Atd+7`vZu0SC!> zr>G5N+>LxKU~;^Sk=EzojNfzVh9|aGj4PoAy7a&q)wLUxQH;X|H)RIT*f=XZGqA}^ zESMt#RxYA4yv#hgx1LC?TN{#BKEeS^fRlY;os9pnTkzu`-at7ta5{41EznK;K=Dh_ zSF8@X$lB^ma$f#&u&GZVb=pT9a@1U+reS@ z_zwS4^lP08o4CgZ3oOfj0*f&oUg5+G1hCfVrTiU8P;|$>h?11L5KNs$cgGGe106|b z#^T=7~Uhd-PFeP#>_?`#?f4O1Xl)GP6~M8U{eaHR3501NDXdE5462744pA? zcxV&5s%iDG%C&qH6_!p4P^Lyhci?xP{0_)3k@6O_SlA+LgH{JxeV=rP6YAQ z_=W0dWvu75@#@F|1k?_oMxaxlW}lAU^70>+XP|edqL+j^9f6WRMzJQFD@BCny{Cv! zz4sJ*NB4AWPe*oQZ@AWq1lPXeT2U=c5_Ctd0Yy^>!rG{p`4IU1Ht05@{FMhO3KBq! zOm)c}SXpB-d1p)}&NM24-T}^9IAB*ohnv${Vh0vTI+A!GQ5=QD4!o$E+2|$aDh@+7 z6BC`28N`GX6WzdYR3`P1wNTnlri-OQcqq=~4k)03z1rxdHhSr~Y5`-m$#dKFz`Y4- zRuOf>;K71T$f=}1Z#ZldXAg+8O>vE%!W31^1mhSp0gnC?pfs{(xwl{}eE`eaHans7 zJl-LfvkKQb9%Oh0=Lw*fq2S-U@WGC3U5kzsv=<~qqp?gcfq5<_l;q_o7@Lbvp}H(? zMlzf5IkZXkWt5Ng4%Wi40Xs7WB&v?0Q>N$bj};ei>nlJ=SW1*Vfz~;ygEp^L2m`2E zBW{nt22=_ow*Z5(y~!kchGku{`IPazDa1*nJ2EEI%#lWpWPRW1RYykG1dgO)!tFpX zr0|cAV5k!C{_1r6G7$KMTwn1^hv1hE*wMqU;+Ms%ANbW^;P;aTzfAo^@T(cMzBYaZ z2!SES?;O<$npmOWmo?6XU#&s$%R(ajYQ|akZC4%RS4v*j(k2;J>}pi2tk^r?64nXl z3c|ZFKzS1I;Ub%WN?Y?Wkal*`CDOR7{wNYfGKeEJn3)}k7(O&gm{dQ?A&)a;%0oiD zGkbDpnau14AL}Sp^60zdl#i$kcxE;?_;^Q_15LFOI6TsPAL6zXWWz(g6J;uomqy@B z9*<$LmWkg^9*=(Vc=iP2t4}lE({^CUO32gAcT*hl3=?vC9CEk`IU^1^!i1a|ha71_ z&f0O+@a@zESAKGzNH@7fNbC+iQs6aw{iWjcfd}Ewh4=So8w|p zxc*}pMd4<_z>Iz?Ik0~CRGU1HO`Zp4okm={ljliVyHP%#*u{Ih$k7emVrXCP@IQe1 z>uFKMOf3HeRF7*f;~tosxXiK~u2*T2#?Q2o2q3eQ0J8%v-6xc=b3ytrr?`l38QhdI zQ#X~|QQzplrlr4=d_Tazs%%7etweBjM(+R_3WyY3Ux?&wV0r*#J7wd?(;=6b>Cius z40E?4fdy$sBi6nGOMH4bJD|K~(mKNQE8q969mJ_4wQe$legyk8csl#?Dh;f}!4fEZ z7JHbFNv%Z5iCkIZ>;ws+Bk#)3`iqIKf^8+dOa$Qgtx7`?Sxu+TA-w7INnUc!Xb*p?&u{h3=_#1t~c`0$t(wfP8Ko+O%3EiXQy>uDu5s}>o37is(B-qVIv?_`MYZs=UD^m zAQm{XU4)se{#HFQDY2fD|KWOA1R69S@-2unX0^x6Vo$h^o_=l1f!Y=)n(uDpd`Aoo zKWzIK!=rnzXrnqXUTt93l6|S!yFzlZ;VQd2qMKCRj^fzBh$Nw6DndN@0`4Nt^Lp^T z4*g+IFf`j|`F{nrRR+1n#PwK{IH*qe*CD37tT+4^5Eo|Nib4B+_DqlE{{&x2!vg3T zU)&36^p=ycp4--fs16NWKP~0DCgeKV;SvAC$mZWf%pSe?qbbX(RGQFU%x-7Z!y@k? zu6F`fC!i!JTkCN}IE6>KRSf5<%;}*i&lQt})-|^GiIO zf%+h`^uqbX9adu;5J=TI6)M$Ny^6dARA9S+P+^71|wjFRC>t{aJ+4+5I$N4UQ^4aqPs}V12|UnFt-MoIwYF zNAX6En6d`<(eiP|#qtA(r5|W23qFnR#}#0W`Yb%yHzb%MN={iR4$0dI6hViY5D}$9 zv=AjvcII_EJ*jE+rs?}zZT#uqK;d57m|^KJGric2L}RtXKrs7;wR(Knw?7k^}B6(~^KVjT(|Cyo<_jx*LVDbJ#pN_W&I` zVmD`p%!Le>V*NvaAd_8(YHd)*DECLKJuQt;6q&&|HHU1N>xII<&|3Nog&*Xmh$9+? z-y8Wzd=2ckJ8*BJplr(qoPU0I_X1Cx&<2BErz_aqyQiJA*(J_h>DD1`wO~VS1HpKm_9HAtoYEG+ZS{MrafxLn!iaVu=v?=P~$L{#;YT&oF$GRKg276VMabtWx!!Xx;oy;KQ-~%|M!vf1@{S0td1WZhjS^+Y&I6?Y{`F z`XbD5bVLb1&4g^eCba$YnCj$YeVsakcQ=q&dBb5{YPP;SVcC$ANkgJ?{wU>G+f6xU z)%oTetBwNd-++2-e+zyu**uaD*S^gq4S95HLhg3riAremM zF^97vopns|{5rvV064IS^z{2*MopOGqj-R$Gu*81?V^HhENYi#L-`%qlqq1g zh$*0+P04?yRL*h8J4IMsJ!%HL3V2c(szNe(YSBtGcY_cU&0~O)k^w=c7%DKZV6C>f z8&GDG^>ng%Du9O7H(Ze>0w5-4%iZP)D4=-;>%|GAbT3|Tq!$fQZ&JaE7#4D#2^{-?I0cZ2LcE8aNO&F zUymZQQ%iHSUW>E|W{Y_t8>GF3^xm62TdjLV}qC*Z(L1s}(+k2i8$l8KYa9pUmqv8wPub}!oKjs&cy`3m5ZN_nQy4~zeh>+p&q2p)HCjh~up=33 zYaaE~D21z8E+?(Xywm(5xCeg+5dc`IxAI+l?*~jtED%q-g7dx|&HE0F`=dNOCn3MY zLU1m!;!uNd+u?;s?_bOi|5E&7<{=&&bhLeXl1Sv6GFe51d38^|+Pua_Up*`XLT*nb0dEi^Go~k@|!a3m<~thqx)L%YrV}M*6W7 zVjK!Twtn5Q?A8J8s;@!8%^MJtPY17r+fIu*rFPs#^icByXhUmQaxh=;0YK3n)R5Rf zH+&pDTn@(B+237`p272}iQo>n%DeoJL_S$ppiFPsZT+p4tMDYA8qgGEV z@h+B_giV9sJ}vRHEb&=UiBmk!c7<5*!Q-%5r3K(!<(Y4=zII|)`5kCDrcO456NJEU z4Vn^r*sj=fEj?iGiF_xx3W#a@uAb(*l0MJ?>FHeb@ekR@6Kra5G(dC$2=-imGKH=) z!N(vto=m?Hx7oxVi`Z3{p}-D*@P<0NpM1F!>_Tx7ne2a6gs{%UuV>;j@q;H}VQ1CN z%d$U%Wa3YU&IsbV!%fOK@;J8^3l@xB+RQ&Q2EHOKKQK^s5-E zjC(Y&i>dHNhIWXqJ+saO`A<6r_%eSP^a1}V$6}v%hOa?5^{1fMHZA-FgwIF#EeHpV zu+vEiGV(Z$kqb&B3tUI8L90cc@dc!RkbT|Xfd_@;&VoLbNw{u<~qb8RsZK6N*cmrxAbZu2xGZ9NsWNB2rjwhn%q)vb7e`(0KK zae+N{>ma70V=Qv8xe~$#i-S!T$Fj(QMMmVx8S5j!?T>&bij6K1k%PU?`qBeuXt^i+8hpeDQw?y3rNzDj4G$K{v>rt8;5p-w-Ea|{n zU%L4W%x$?6R4@oL?Je^w+<(5*Z5StPhRHw)myAN#ZPEZ(KT$3P3CXRPK)i93khIBW z9UYTO1AZdH3AmSPZbFU4Wb?fsC|LDL21!hpu;dfG1d;V_4~dEE;CG0phxiVDZ#+Ur z6GBE4LPZnoJ$r%_6nsb$=>oz{sF!U{BB&Dl2Y#DegNnJSMll~wkP7l~k?9 zCFE>`kPBvc!|QGTgT!B6zs*zO!DcVYeI|298*|Bh7DG6da)e9Bi&!4^*y7m&4|nOY zC)$KZC7!|j-1L(flvHuZbTL3XPQ(CFZNiiSdPWn+qOXZD0)1O=(kBlg*mR+`wV)o7>E)d4sSJk z@dP?#s60s@1U{1l4g#M^LIn}eB*ED;G&o5(_6*IRBmjGc7EH3{Jwpp8S>>LgMU$*+ z&rmfp$y)Zvc5(X=aPpY8k#+>f)JEaaUBA z&y0$@rFz)RsJM$}Ll}40YzX77n+-bz0a(?6i3Xc+>0Y-RNfay%&5E=N6e@^Mt^wA zbf{wFhf~udV$_GfnH~`%K6GDYkSJ$)T^Q#-#yA(E#qlJ$%v@^KFE9)jJZYk zzknY*_#o;NRuqhK=Z=0eW@O!NK=D>b-_*d;@FQ{X(y;rQC`m>Rf>%@LVycwU`v))< z2KF+gC%1Y#VfA5>z+6z6mO%LBE*>~TviySgSb6dq;{J%0=iF~wYps91Meicm))MQh zKX2blAZz>+t~0?E;63L-TJbD`rrLy)KPmxsZFeiflSQhY3K z7Q$8&i?U-qlH7A@@_3f^Y`E*VHhCPr6pkGJ&Il7z`K95m*oVnn_Z!DsPr1;_bC1b$ z=>fotHhD6c^5L;rJfM zc(R1zK)|t4fH)4tyVotclnVx4cxHJUX#c0cgA-ijvU|>lAkS_bJKwA=;piUgJghCZ zGT6_f(ZQGTgHrF@8U{e7^?h+bnl0vpd1-QH8$`ez0Bd4)-8g zruiGDNXhOQc>WW@G*c;`60tUvn(jtlVKm9u!hXO8x3&v1FX~GN*uT5MsrV_TWC<#! zVdA(phNnfrPG)xnA45VIW5f!XEE5_}@X3aK3L(Ek*(eFtd%@r~19T zj!D>6#+WRaF^NR`p=nICdLBn+zn7RRU1Od-@f`GB-3uq*O=D&BDBx)tvY{8~dk}F7 zEcM59ET3YPUTSr7{8H0@-``k0I+j;D!$MZ30o*Z3x4Rki}z%`+H^`i{-NLjcx;Cd>3;9Rh4(GoQ_2#AC7W)V{svFQPP6Rxa zcZVSuLvy+gW1}`$xh>i^)PBtDv3hP}*FZMbdvnxhzq6j=Yd=}mv#kGG+f`;?vd=z( z5`HGbgyVQfhw%~_zB9(IPwqZ!0x(r&lCc?V!#K&}n&jQc4dpriE_|`i`WdiZmhzggS4%@%U8gO?#i^GZP0{664-jju@r;1cKj)^mYNTe`b-Je`hzHlplA z@N%ZW+{XmC`_d0>@;|bvAHwX+%bF4nrk}ZFavt8~G}2O1Zx;@BBuvUweK0PEKL=h> z11opV-w8C-mpEJb#g#XyNWpR2g=zt3O>0MI6I2HMLX<6Q5brW(<+Nfb4BpSvQTCA@ zOAOgQjz%I+_zpxz5i;O{k79%_9dg4P-^h&T#A#J0>Nc6RhQe<#pA5>O@V*ZBPhz)n z>n9LzfQz!xYcLOh3BsCA-JXGESQzaNVhFC}f?mm0pelPPC5t?67cwa(IW=E}=t^)4 zMOgjQqBUbJf$c?aB-he9R(>i~XDw2p=%HW(c_{V{cqYvq+YY#FjMR2LDcA-Ef5V#a zyrvG}Y;CcZZO_Y68E%~^AjwKGjcGZnWA_e>-Kizo7K3-lKFg7Ba}*2Yd;$>JR;-sN9a$X{%mcL z(Kkz-KLN1oJ$6d?+5pdW;j|}G?Yt{G`0r5dEP<3{F1D?_HGH6+?a#;Eob8~IU!fjD zJgYz!^^^Sg3=RTxQkRZ}@f?iQ$7f|4lWG&c|8sz$M`o~N4BKMMZiC$OgJAvrUyvpp z>1v-s1JlbZxi>fxP34Z|$ZIj0svJ$2Z~hxuhlP^$ioZtaKBn5W=HxEf zk6{^ORk~3CvMBFci0`l2S1O<8wkbQ+oeTG%_*8Q-%h!EgFB0Mp=k3B9MtOfD{Tz>2 z$@`1P$;+|9c?8x3tlvt#T(q%|7{h>Q96oCw!QeUf5w`zqU;^T*S=$F$oFQ}C%Di*% z@rkhTL5yz04yPjK?gRuzTM3zxPAm_}xpva9 zVm0wRV7|UUzalj?PC4n4O^q<-Og57-SKX#@YhD=fb?>%n-_p68xZDU_{tmcIs&M>UDGUSjlAb~LCQ@ZuaC_|nx40$SeP&Zp0 z40$T}A;PeiThO_h<0%`D+X;4-aN%Ypzq`GXW0eFKo;O^0p8K-y7Q2DGcM8}stT*fu z97EVovN9VYzWY2YHxaq7wK5-zc<}$Udhd+-D%o|wNW_C5Y5nyG9gEOhdK(1**nj(% z(;=1v-cHwRa7P#$hcwwokiwUNpIG1g`GAY;s(dL={TG6SKf?{)j>LxD3m1LZxNZM; zXnyc9OcK?sYQPVL$FyU)cM2Zh4>`29VtqUDx$VTNN`CiAYd#%FQm+vMmu@fKMJ8Cyd1< zrg*yUAkprr!D7X$=&5AIiPCBb85DW36xpu70Arnkq^oq(lCu(?1U1!ECFxQrYKY-2Q z6gFY-_(R9CTP)!PE4=Q6N2+@L&!cSI--bZs-;66qNerGR{s?PLGcN6ayY0qa`*ZN6 z4*mirK(ADv=aod7SXtQ&Oib4QDnqlZsN27p zZpdfwHnIPobi)`$5>;N`k>(2>X>N?t_+NyJX+8f-4D;0e<;d-S1ulR}QD$+zH-FV9 zFn+!HvXi8L@;j7Qig@!kpgIIRFf-r>GXs7yGvMBt0r$)dcyMOG9Ww*IH#6YAX#q7O zL7UI^&G(A_P0}tBtsz()MP&W2i7!H1zt_JC<^e6QU(p8tOtkgSL|gyl47Bx6&OlrL7>`3{|z=DFN~G(#9F!DoAJs( z1!sdM*NNe9|BrOiJEpg%a8-DQwa*#Wpvv;rb}c)%%fo&jgJpYH_M$HDN{m^{`ild> zT_4@6Av9ix$<8cIv^FPRvqG((?uS0aNnDL6o3O3*tPX$E(?Bz=0P}RY@I?Sm7cuxp z`;zs+0#;>8i)4m?VU7|1O|#0ghJ}+vLICw8Hnxk{%N9hc%%UcB-@w$99%8J(InJe$~b@{$1rItHm)qX+?F=a8(CAIzw z{D#N0GLJCeec_l671VwQ7;CixkoCpb3BJ+L-CB9L463(86Xk1mDL0i`iXS-Au!)_f zc*>nhb|VONaUrR@sZ}q6@Fdmf$<*`V=8y3dK)|HZp6WJ~tiGkH4`^B2tl@WC$s2{X zud_1$VI@ibq|xKi(mwzvIBG#9^=InW?1M**GCWxW>@$VeFo(t05{kZ5MfneIlO4Yg z;2Wj*n*avJK$qAp{BJ2gL@d}%9OiLj=88@w)Tqy=OcZn~LN8&qhV8BM5!ODIDDT3Z zI+;FgNuUVR`)=H;{gLJSuLk_VpKy{T`>pQ)B`G5>B`mt{Ywy)UyI!#;PXX!bc^Qr@ zxh&HHy4dyM9^x$ICr{$Kg}yIr~lalWFVtaXl-1%?#vFKMu$lA#%Vv$R3n?&W(Wc zPk>Xnt1Qg@A(hCGa?p%ZR)jJnDpJX5>diosFmF6Tx*QN>6jA0H+SjK_Dc!MQRA3tr z*E~+ zR3dmM(qUUu#s_*ZY|Du#T6hJjOsEX6T*;=BiTI=w zM2Was+92*`clF^YE-q-S246>6-9m2}DNxE=l|_P5F;OaFb0bT$zZ3=fheP5ZD!|$B zA#@Lvo@8u;OQd8F4~>nN@CKPS-~TLn6G~7$P=W&26rGf8le%z_@;P?4Fit0P$W{^b zc?9_-RD{EYfns-fA+vQW4WLxvRPo9wENCe|h9}fd{&~>MV^JT9yjD9>EID-Ge|le@ofh!ZN`&?6l{M7Jx$jinf)YP4_K~e>ub#DY5?>T!?9Y17Vo(y2A(1iDnJJ zkx~(W1>Z+pE(N3N30d0mpi|tjH|tHKFYN^1jlHWr2_%9PQ^79~R^Kl*c_$b$CC3az zd*&Pp$>J5!+}}?HKSz$D+vmy+{$+<@(pUpL6p*VN^ksl7U{Smk^-^BT*a7w8F<$X5 z5^sGu@|W<4n1lrm@&{iBPgF}K%i_SLELJG0|G_PYG4m4ScGc*N_B^ZfTBQ}vDOj^H zxyqap@0Nv6goy2OoAy!NVRtKCSlRCxMDy*`u)}w#Ux>wb?krFq1}d6=Mg7|}FZQRB zcZq(9%0Hki$khG|9}MUHgbUNzUM|X*gNZ9Uiju=jT?Yco+ivB!PLmE^&nB=9!K=}= zl@XX+?}lR-s-&^AGTu0bbV3#q@7A>;pS*w?bJQL24*=e?TzU5Sk7(tA-Emc8%uOxL zhb@E~$?-4#&vT-RCZpR4$T1N7ui#RF8YNnsWIQf-wTG>`$T_5Fxf;!teiL=e-B z5heVX$3h}WL5Q^RLEOOmrZNFaF9%rj57%{>ybI1%tOW6Y6VhabGsrpTlXa*MrX1xV z_9OPG_fg&@$gbs6jxxbSy`6HC{zA|guZ3Lv={8j;$5wD1W!Y{)DKMy`W#~ykx;Xw$|J0Iva>^}5VG$AR0 z1d8Qmripnd*IIi-B$I~?Zp@*{7#Gr;R4q%$^ru)QqKQqB+8&IWBeuVkOH6)0nh81m zL!BAMxiN}@)9}M}Hx*7WgVCQT>wdDci3zU!J z_;>%2@lO){KVtmb*2QQ;3T?1gy$&wiIt}_TRAqZ{`e(VlkU0l)z!@&aJ%=$)0-u)& z4&s15CKHU|>u6#jE=lTU{OCTa%}`*P_?k=@6v4g?T@~*W zGM>^nZU4O-;c39?fPvXXrQ=PY8(F#x7ked0!bs5AOZ7vQhB78BmgU+Ra=2s|jT{#u zmqZY;YDOukGAxX|5mdZY-nvN1{(c$^8>hh_Y@)K$%1s~g&wwxug3IOJ3g$)LkMU$n zZ{|FxhKc~6I&7TCK7x)j%bS&&rP0Qa*8x#}TgMGE_r}k~Gq>J}!x^`Q^WDOr&bN4} z!&-V=)E8>Y|INCGxd5{ikF>Gd@gD{VIQLFilrHeESw~gdIXi~ep^EL?jml)Bdh(~j zJAeBI{4UtO5x>=3q)>PhQj2v0`3{7ClJC5*^m&F4hO6Z}KYXry7lhm7yD;1(-$miI z@~vjVo79mFe?iCg(@+ZtjO)h_03UWIX8ndGgM=cc29QN1OoCodT*X0L<=pFITsCPh~IfTK)5*b;yxB?)kW!5-w4zeWdQ%a>M+PFOta*#?;YV zL3AaLbBbhm3=nG;C5V9xUvzWK7jb36lgZksbR!8JpcGH3l}}r2^}#OE8kBBh>$~Py z<#GOGw7)i?+l}+|w)2d(^USvMEIRcHJmfo$brf);GLmDlHLWb;Qv(5=w*2zV9rahn zv$gp+iaMHc`q8_7NZ}&VEiZeZg4<|#g&tKn{tD2HcnO{3kJ5{}D6?Xn-N2)Rt&Jo5 ztp=tsRw@AlpxkT?Jgv|b6>4&cls`fm?1J1$$l(X!RlsNSECgwq=l>?MG!hd9&r6%q~G8OESyea^59 z)vVUqwsg;0^HBwHor}{k6q>zOFyLT)VR5GB&zSzw_nUfW;pDjJ-foN(|0HyWqGCnV zLO()9#h_vWV++b9z=i8S8|lqRc)-+pt+Y2`9gg;TPq4lHrgvC$-cF<7qfoFZ@P|5Q zpO5nTX0_pkbM~wMRCKAR+-qYFj2hF38neJO#>Hfd@ea+tw7(j4%78a5y2k);RgA}H z0fyoeY?HAz1(jiIK1@!b&sIg{n{ua2x!es|T)U&aTEhQ5=AJsov6JzstTe^NkuPLgHN&^QM#Cf0|_DXh_HsQG7bk<3f%5xng{ePyk0Mr|`nru6AJtYSC-+W{_d#|GHg z?C>$@tc|x_h1-@`G4BHGh{ zyy<6Hnyu}NSquYW2W0H*U#fMteUVnLJ9;Mu4~L|#e~!F|hdr(5IMu`CnHuxTOg3Ts zIEZjW3srSdmD@hB0%4KZtIhRwRY&~!IMZwNL)eV7h|Y8cyn)34;t`Jk32%>gDbU9G zs1r{V>dSj_3X;Yae<=hnS*R=GbPX3Nt0PwjUqndGnHiE#U$PnZLY4zH>KgCv2M$L0 z!cGZ@$gJBHVxxYZLfem262|NNqA^HS&Il*GU-DJ+{(>X#Pt2rQEcCMc$280KG>Y2L zlr&l^idlkh&L-op$Nep16bH0kY?%<11 z%j5LyVob48Y8q--TyBTW7rQp`COZ0OpSUNvshcY`dfJpWcf8XsZPoh#S)0U06A{eO z!-zJ-M?yAF1hh3=E2L90?G_mrY%qL}ThQN3&<1naOfa3O!A}Hz21eME+6#JO^vzwG z(9QqrW6Z%ZqWa1M8p<8Wjc>bu2691$qMA;W!c1Ip!#E1-n5^op_7t#m<`jU_Vx3@CT?aHpL%Xw1 z?2cy7PG*S5lh4*DXB@IA3TaoqI1#zcG->9agW{y^85Xweq6udpZj%`})Vh@kT=}#o z&Ql%Fg*+Foo4Ev$r~04Sn}Kd!|2e4ke`Ig=OcdO?H~W9|1|A@yvHp?&A$og4`vM`g zn4y|uU$84CLe5bQ3_i%)JjXu)eVXkUe~nzkm(1oyN&gA!LgYOfd2QP~)fn->ZulT7 zk%ts>ss53yiw6&)*CAI23&8aDkM!crIAo(o-f_&j^nMj=Yg~#ugSB?eJJ2SxJ_>Cz zD=(L@{v9w~!}f?ND)7YPN2CyhNlRpjTp~vC&o8&~XW^e#kvCJM=7{jaKNN^y*f|t> ziIAv$FyJ2{ks7QgjFcVu%S@gvbLDw1BTY%MSR#iSUWC*s|1d@qpZ_52A|y1huQhN` zhByoMBPDVc?0B_D+Di%JtUSjsaxT~@giQHQV>Dqu9T}< z=7&h#XdM}?;UlSnv(|99d42=hG?-wW|S#xrKy5CQTpLVl^#e=1tnB5Bkn z8BcXik9L*R8NDKwh z9fDg`!g&glFh-Jypxk6Wjxh|77?P}JZc7LKF(zRQWl@f`6wpzYj<+TUZ5IzILh)w< z9`8}d3fk0=2Pd)lz25;M{&pT-H}1@X+uJJK!(JLr%G_)dP#NxzaJvL>K$FwVKh+AW`8qM=)8|vZQ}1=tA|>@L z2tx4YJek~gVky8=IeJ!bD+MoX-w#nJBSy|*) z!}doQQKrLP!-@za=5&gXFqQeJoM|!Ji-+v-8g$*kp#hI`{sY)iJvYj^6s_6Xfhuvq z*`LD1VKOje!d$U13Aqly1mzAvA4NRz-63 zPY0U9hY7PlpH~dZ9A|;yoer^a`u~8-s zl>2Jo=UJ9ithB_WrOu=zv)M^WXiU1eGbsaSCnc>h>GIB`44j>mq*`C%hHE;K8qz(3 zSZV|7hDXL}bQFq6w=uJ!9Hq1C;RF?@pVnH5S%7}%s7n`*IQ_IHb6n3ZpF=oKKds#o zGpl?~1DbwT<7LL2*?5o|<|jM8Utw2TFGUgfyo?`Xurt6oa?Q#cO1M1Ya$ehcLEAY& zr|?8A+^~+Et+sQr?R*uSyivkB#deZ75YUVQ#DRdVQGhrQaDEgZ4g?TjDMK6x2%-RS z;I{U;2vDOVqA&hZw0%F$QH@-<3dE}yYRoBTZ}>uxg@(%wOVcEl5lvh3jiC6wn1ORC zUYKDlbWFkXnYroSIkm~bcGS3HNaC)htQ3BXT7&%&~521{(M9fvkAL7O`|)2XkW*&va8OM_U< z6KRmPr{CItO{5>M_d|wQm#EFPNG(qN=}}$AP{P(Lh&+3Ov8muusGl0GI-R^?LkZKg z@gw~8Tf=MH^&O42;Y1X#!qA?N5&O!Eq~}YYO(}P4kRbwz0Y8qx_Nswc!|1sw>5Z?y3eIMQ1>}> zZ&o)i@dmF@_jz=`RNcIKD)x6!K7r9e>r8A1W?THRorzb|%^$e8(aj&YUx81(Prq#f zgHmCOF-XAiE$Z(Ma9FvfQ6DVVnJ0h3G9H_~A9=0@2XJ5K2hZ^FRzE$fY5rO*%}BMQNc z6Jv>HRbw1-#v|gTVdB8>moC8g<+t4hxOn$6l3eGoXNqA=2=Ya_G3GIuQ{S8OT7;kW zJRIX^g~1PJt;Uk@cH)QbHhz@f;Zi;gNnf24N$o!8TB7qn**fGz#S_4byPfguKklZc z!^b2sd;#eb7x=O|2SYsK@ki~R>v^Jw77Q|nB+-;K?<4!hM3wFhPnDl zhCwtzM*W0i|G1y%{-^p$YM7&+K#~7K1faiOgRdIeLEsx0NTY`0K560 zH%3_;ud=cfyd>QsSa!i}5hA;gQgBa#%JXhcj?$)RSi*ii%hKCnfL2eA--UGO80s(b ztkTE)qVJbLgXKM#DVCxX7H&M@1t3e~o}~RSbsJQ07n7?kF^dj1Zd`Pna1wcB?g?0% z<}mBecjsDvqME}u%vqUvB*l!mwbpW6`yd{%uYM0(L%R`^@E;JZiQ2~<-Bar5Pi>y| zxZJb?6G1$g6|~yX7%4uVb_KauO{w8)+JSfU^o~-8VI$&I$HQS(?L`V>`)#f_q7D#5 z*?%u#J`4MNhM=>EqDLU4+}M&N$7#gmMTnIoxNdn#^L$e z+gQf4NFY|0-uyPCd&5s({MYSJt!3WrtVZY|X^lFN`~ZigY=?Tj|0d)ReeO4*b0Y1{ zRT-ppgSQ}V)$43HC7JlU&E)~3;|=w^89LsupOLD;h6GiUc9{zs*ltp9RZM97NOM*W zyA*xeHpWzh)fnEz(kGe3PAf&bdfhJr^DXJfPE%xA@#)abQyWl`5yiW4y&xO9Uxu1! zbYC#erEr?`u&bojqIf^0`CK$p0fokqUPf7UFc=8xD#+sPQVYi_%=6Xy| z$Mu+EuI5)R{v34|aVep!cT1$gJ%BYIt|6>y*l`{%7rh z@7Q7+m2>dFfQ)bj7I)ToBW=iOUr5W!LX%55<9SzXgVs~&)LNb!yK>K4#(_MOhg)?^ zc*sFIz#T*n7rtH$*gP=cYAizp)I0*Apqj@CNRtZhXPQ)$2KQ@SF+rhtCtBV&Ah$EMF0j(4~~W%`I%z2f)REi3(0{pf)l0kT<|=tJRe@i zLb2ugH_K5QZuYkIvbtY}TPek4rNg7W z{YsSA?rkwb1a!79Jr}}e832;{MUS zsAH_*mnq)3PTz-hqY>j_FZ5pOc4yr5?gk|$!Vmz!2!$b<%&MIzEV=3u{0jSDOlEX7 zNb5A&VH;A90_7SwE$Z^ZH;gdDERSMDodRJkBxKg9h|yCR`PVlg%)-HtyPMm0Eg1N-rew-by;P2KRq3f%E|C zRd0qf#^XkKOm$*zz5|cFim=`px93-(cP&`*XDk?d*AK(_va4c>|4uwF_Wl2?oQ6WMOgA z@Rl%pRLmu?1@J8p9uW=R1*hIc?N=%o=4x5Qgaa#Bn3{M#u=cmO#SgpOhE8_UH#eOm zi!M-DTv$66^tEtTaZ$Ng#Z0%zt9IaVvA0-EKr}qhMY6?m^IooFdR`S3SG}sYNGcxv zinox(c?-+Su5;CZ0dEZ*?xkiLFxZD}DehY??pK@d?d$E=uFu;ixSUkJABx`3+t1rq zi@wX_11#3lcA|6eSH*u3|2)(u)2{QXWxXG6UjO-&3BMBEgGm-Mu4TOi|G&n6KmPg0 z@YSFy&M#-++Zlc~B5@tkdMm!2;qOJdCjRGPa)`nyGq@dTM=<|%aJV=LaqB&XgWZ9d z0V=&Xp^14-9Mc%aZK9KL6Wa$*r!skTw|SX*;%h6iLZ_p%Ls~m@<%V-~6Fbs4_n;3w z`pFE8CWb(~P`Bnn2HV1(bL`jrieY#21Y?f0(*5e(xdtwuBongP!f z$j+jKS14IfBQ1Uy&Yf8xEDS}l`5JC#vHEuLu-+a>4QPY5&5n62xr2v3hFI9#XT*&v z={C8^$Xmx_-{h*NOrH!|*!RRtDp%8Zf6>1MqgjGpM_(L-zDkFGU}kd>GG%UcszKen zlojoC#=ZjJ%wn@Irx`3UdhAxOaJA8S0CuayF?KmpTg^wn?&&2=Jogmrf$BQoY5|C? z??e$pD&h3+K&m3121Ak?Fk{qVC%!E5(OMc035W}8*e@wf7F&&EBC#83SBgD_SW(lu zrxs!Tdj7Y#eko31+2nkByVYxEqUD&Y%!&#&qYT4=$I=!_+sXq*7wiXmJusEhbIIm~ zqgk(K@)B$$cfj)B?@^xc(XheNixnzia_Z_-z-)o12{Jlad;p6aXTnC0M<#pn)`*g$ zaO?={Fe0)|Z9WK(?OKIW#8)3+`Nv0m#=lz^_+33fE@lF_59%_uPgFj?Lg-&bPPyov z`K@p7g2V#KE4QLO>F%jUb_%v=L{K^vn@0f83`W!#_zAxW5RD-PUI{n+PQ}XYYdM_T zY-lGeU8Z*jDFZwSX-0MI8399d>u4z;&BMNkseANq){X0-;qThjmxkp|I`%ubIkK1f zUF*jfA1hJ6Sd_~4IAVXK&yvrIT)6bx5ytHVZdES={gp8w1=Q}bHy|^30Wup~2`+CY z+5X3nh=z_~%j<)1Hj?)Wmyk#l60rDENc$gW0;uD{2*4-k1vmH_M#rL+nSxu*iJ6oFZ@^M`g1Y`plE%RK|7d#?IJt^yfBfe5 z-aT8VCp}A&naMKAWx6LT%S_l3Rtbbng%DOjwtzI;n+PVP37`l<*c26H4I+YqpdyPR zpuDH32#A6r8Dw=qRu>jo{@?F8ckdpa@A?1blb&03>eOC!>eQ)Ir>fh-@&F}y^u+D@ z<>Geza(V_?u)paS4L4`^z>@wSrkDMd*D+m%u|$h^o3+~IR-?bLumv4(0}4NS02qhN zu$cujZ!D4Vfb|kR_i1$B5AnkiDC_Rzc{zh7FE^L*2+Ax51$E!i4ysE-4JrEsoEqnW8ZlYP1zz+DQ-$K)f!&n%gEjTQbvd;Z~uG56RgEvWo!}WnE{0Z z`<*G~E-U8cX~k@=EoI$~oM7aCEP<&2OZv;%1AHcB?nJy$iTqG!yx74iSHI^&Y=sQ3 z1hbydd+dB;P2Z2_wpi>wwc4jW8j!hiFJ5EW7d3Vc=btU`r?bQUCa7^Ky5LR&8Snch?3P=0Etw9mg2wD#DWOccx*tTeYWEP}3ayW8{ zBwN(|RWaDEjBW><&eFurQYo}QmS!xK&=poFkvX-G7Y60GV5Z()nLAZTk)^s8SmYr%k ztqZn;ZnZq1r9##fJGOBWRCm>0Ce!S58?|%IeyVD?jE8239r$lm$7?_^zte2 zU%_7Q7vpHqsw@pu4#Bo7oX)h$ENqj4p)wu2Br%QFo=X;|%LWZBJRfkHrj7Op8f{vW zMk@|5{o+7*?iFtPE;>ZT3eB3>+fmMgNn9`qD%YBdGbm4fb^V0S?|X8pKTYU(({oQV zJLa2W-_h_62T3>mbWK*qJz*Ot_s@bDIs zH$b?6tF`uX$jQA@Zoeb$o;Ex>+G~&e4gnU#3i(bi8R6d-qtC&v=cXF%Kg0lnbkgY9 z)|mRR=U!n&!Yp{_-Ey;b6ZGOPklBYvKRB5;tijn$=BtgIX{YWZu=jU6T9-4Q3aglcjRP#iS@g=*sV5i z8{Vm*OcN|wV?Wd=AAybWu5^8aD;3#kQ>f&ak1X@Y5r6w;@$)HHRxsq5#=R6I2z2{x z>@&tD;ie9am}iAd`ea1sJ8tN|0wxLz!Hba`wQr{wo%4)InCs?Qw7z69UJP0P(KLX_U&?6uY2eJnJ)vegw?kKXNysU_UezT`_iaz~jp zEX6g_Jf6Q~>?@F3KLO4B-U}o8{HR9NCMc^)mR+i#2~XC`82B8mh`OjuB31}kltel!S_iZZ{^lS zH!e%y3(ih5m7+_>N?Dp`l*1*LguMVZ)iu#ekqI{P-Z?FH?dV4I2gP~|&c$}CHP;6D z_VzZ|Rrf{H434nES~e^Jgq+;7aRV^RBa}SCYL-h|s`^n}9E0k_ZaC*CTvlq~>vvUb z^4#a|gkgu2QF-mwHdv0v9()qA>A(veC?XDcuxXScK2R($Dac9Ze!DGI7&!zjtDDSr z94C)JVGxZdC(1m&k_~L^_(~fRPl)&pxgv51m8lGct6Q3+5heu@@XBX9PQ1b`{NOls zj~^k)2G%{tmUiBYJKA>L#&lHXU~d|1KX95RnU=beILKmK4{PI;y~gR#G5vto#NE=w z-ItYm%B5a3aSykD+*eBz<3KFj#FM>LdeOwaMeZ@(ChkTP1{)Il+fpZ4-c3``=@eHG2FZzS8o0OFO!sr8tq^AK1 z*?_p5V!^%xs47M2Y>A(TP*WsjPk$N&#(UBrt8e5L?Arl#xwt?u$~!)hN$SQs33GUe{ki6;&aCbE7(73PdZNgsRIdzHs+v^osXtLMX=Th>@yY zOd3EbQA?%MJrTMH;}DIXu04ds+r8HH+?cBl5Y`^lWu$2D_BdE{@#J!pjWxbmv8f3jDUN%l{|+sfk^l>{&5&0xhFUe}2yki&M71Jx)? zB*2{3Z7Kn7(>V$Wa7%LuaJblf(k)tIl&D=x)b5oC^S8yG{sK50?}Z30;hY^aA-OQb zQz5x+dvqcX56IYBp=JYB;Oz1YDd-6zm3Zafz>cu>OIh_ zgTBG#$giBMJp!tel?QT!MH}WzH&3%cxI{ot!MlI^gXYJTJXF0CC3Xo3@+WOJjW**$ z`{^0w>!xg0s{Q&cUo<>PU0oL;?%=0^I!Aq zele)Al;p!K$#Gf|SmXC$r5s=8L%vxYQsupTahmDt7I<>Xg63Or9}j{344i%Ci@8X? zPx<*KVoZoi0Z-+#l7eUj@WV6#76Q52}Nom8oB{2W{b+2p~VCyzNk!mu4?9RUx@ky9^bLVnC8nI?=+@8;n9bs z6FOE*DDuqRgyp*fKdJm1WsVpR#_k;J!9oOUh~6o*Ym7L00G)t6lh^_DGZ8v4AmGuf7Ddi?A%LKCS08$Etby2sBmv3jDbOSy^Uz!%b=HzC)wk=3O{xIxP=kA7)J zZsG~e$}NPO74F!uOuTEuLh;K2@ynVIJ(d`5N4dWMH$ImT1j_U+ZeG%$TN;p%w_>a- z!N@2I?ny9)mBo!Xubpl}T@J(mllw1uxh+%3$SrmEYKwctMKi8$ld(6UIufQJd5q1w z2V)ms_5)d9!E*yEQ#1Ciey}B!{yQkKp8=~;1yapNT1!wQ1L+*x)Rf~_s|8QPVoZDy zSh&H2_j5yjG?lUXMPLMp*wP6j)tf z_Fb3yuFK$()o1-z;HneZ?mi8dq8~@8oKq-vzXP410XvKru$%!CUTKVR#&`i0AUBQi zWyV<2B&qwy3wRO%^-jDc9x7?e`bL;VSTTyXya{X-VH2ZxUu^=rm#|V4@6{%-meYaP z5ye~31a?pp*jY_rw={tr$L4I-Y75Rl=I8OgLeP!JG=V+AM9+=l;e4$D_Bp~fMDgxz z0(%B9`^+ZY`1W`K6VF7-qkM=cDCr!+7DZu83EMgfJBqMvqOdavyS@}j?=Hf=8HGJT z*iBK`+l1X5h4p?Kux~|SS2oFG5%I3-j^uki8X^w+0`abn;{B)z?CmIw6E^5+o3lb2 zi~%wYY!3bqj6>e$Ko7wu3c*-ro23t6!A!O}<3j;H8L>$` zLIM8RusKwM0O>NDofm?!%WQUD2*xh6*?A!tyUb?ig<$M5o1GVe{eo4EHQmn%irCbw$ux6^)cG*FP_W)*V4BB^8guxT8 zOR-_)-AJ{(bq_&&Dqb86t471H?x&4UVol~hO@i#?l(Rf`lKk55NWz4<0#mav{ z8P+nI|x8*RDnIY1M& zH-QCH9`xv|Rhe3%6C6kxM!Rd+Tkegxr-2_cYa79<;cRqKT4OIT zYgYrJ%)yP6Y7C^UrE^i1J^6=WmWigZ_p2jG%FFO@E1|-7!mgERQ2n0&>K0})9_M8u zY5R~ZjT49JoZLR>Y$P#M=S22F7Ym4!)(2fJAWl#pbhCgs8GX1bUNRIg|Y(>c6+} z)r|e0&tbKVuRL#B^%!~Q3QuL0)4~#Cl(gDUe1>9A=oIJI2nog^ItAx#X2!W3T_lsJ zvW*a}v?y>^`^=2%74=N&BMRA7)FMKCN*tPkEikVfo`R4|$ap-$$Q`fa5&JfOI?B8W zW*Lnz$aJGzZzI}iA8Drwh6zG02enU#y~=#$M3q^JsY*NmAeJiS`WeiJ%zq8$LnzD) z%u=ZI)I+VtBG zG~a~>AW#;f*1nIf5iuiajSo?)7Yp<~Xy+Adeq|ngn3D+qOlQRw=)5bCfNmn!T}h`x zuL_`72hMB6={D&`dXnp|9$r0wAsI?zq(!M=T%G27*_t@GB{>=HwI5N}!V zN_M6cGpkmjAo5Bb>}0VG@uci>v?tVpQuUpDOlY;O+6|bkC_lwY(8E`*3G3(1BgUBrXvOdC(xvx^{#6iw(MGqVnhn0FRu!nEq6Z|XTKZ8VlqeTX%o zv@{XxaKhROEe-pO$y%4!4{786q+vh^D>lQnecfA$L;Qm?3FH}qi7tHjN|(HRfU_@n zM=wVP>Kv@SiM5ToG_?U97NrJjZxMi3$njA{8{8ZC6+F@!QcGz3rG&&o$2XHK7qiw7 z3Wg-6F$pLfSZ_e=IXs#?A1lpnES&U9I8v7v$;A!hb-Ddg`!HHg8?KhXyoHpAjizd= znc5>LQ+=-2U!&_WFyjRcI4$Qptj=xtQ_7c1g^^u>&1=EXO@O$SNtIwG0utLG#VVw) z@rt)qwgJlKUZ&MK$!f*LvYucf?PZ+pkHLk$Zm&HBhmMO18i@C*Mt{no-4+x~HElXZ zHW2RW0&u1{`=O(F`MtJ39QDunS>p0oQ5B{u2YI3A_@Prxz?LJ1^(^v+`vACcpP?K1 zLp{Jv?Q9>v$H$)mL>FJi844rA{%9Tc9V&>1Wd{hNC%W1s1&GR_nNiF`f8=IJLd~_L zK5oB}`e?tcCG`R(DzoQght8m2wMT?A*?Vy9<9pgRYatm(s;f3nz`~ z(j*~0rE+Jfs}rgVC8_A>i)=-8D+!uBavMRD$00#e+d#u{*A4Y;w2-Bl1ij)7t~K%{)$Flxu}z&hCNYGUi^$s_hPuP%iL686W)E6* z)h%dtydS!?lJbOq>1G0K+`;e@i9<$#f?1iUFc(o{i_J)!(;EA`d9e-M0~IAYA3=NP zE1SnSM6pHABx+lub_rzy+FjOB3>LJEo#t|R_j_DkNa;h1;+jjZZ0Yhc!hnjc^l{Qx zBkFGY{VoSFeBT(}I+SS~%As>83)ad#@9s4gukiZj6l2Hl8xs*E`-jsp&X+f~bHbW} zdWp5pgf#$XK0OLFy@OL2DZ!bRs$+Fa=0xjB-cT2n=tWqOWipGgrYEr>pk`<7Svar{ zP!ghEXD^OsVPDyp4oJ8` z7``-1AWTB1+`C|sG}aR-uq@0>6>J<+td?_FX>S5RE<_XyP~4g^ix&~~wDfDBF3n8S zKn+H&7vZhNInaB|SIo{lbZ&TVC)#ftm@5<%+hFRshzqCgHEKdP7Tw#>in-vaEG;K! zUm4JPE458X+zUL@_@Qyg6g^ud|F#l1{1+u1l#)CX8npo-f!f7C5#YZ3atxSF_oz)q zHY`MwkZMyUrELPLpHzO5d-$Zmi|aY8T#fl|_cw30KpqEPT?IqXYc1G&Ge}SNgk^O} zA?yxWgBVXPMfA!b(>jH>)>$Ojc%P}oO5tFi6D%kgAzXUIayyRj7e1!+;(3(ufW~ng z%38=Y1Q0N5sZF#WvYHhpMnX|QJS-3BVsI>FV&$l1S%~Vv4a5gJEEwbD$`gX4Gd&v& za%3>u12PeLLp^@aAsEvaByC8v4H`2iXSY-z~)fsHP>?H!@I-7S;JW2w(Sr79%m>2!uJIR z$WS4+Z?MFa+D2{#y}%5R87k{cdw-{x&o4nSx1%;qnt`#v-1N|hOPvZf_abnZEm#f||3Yqf{;3Pxh76qHDA7EVO%luMjcInXsTqn2gL;D*b! zBErEOm6fBCec^%J0nROUddAecH*i-!2yI%Cgy6bSvCFv=!kdlGjr?0{0SAMmMa$xH z(2YsTTR{UB%x$;J+%_a9IWnuycdQrw~)mBngnQkk?Gic2AWL3TJ9=S!@@!(g#n z+%9f~btZOjs6Uc9=`W`jdBL#WT1pJCX0R9{6!Py5HyKK2#D`L^S?rY-DNU~Lictan zR!GLpAnDGztkNAQO=(If|Ea(ke?0WTzE7Wy2N=$291l~yw)4kBpFbY@8(R8*91ji2 z`QxE?obfO@G#(av)#VDNBVhnWe%#*mO6ZS-fyVMBJ!IJoVoM^UVQRx@$ap#N@C1`t zHWBvtVt&&yuAT0}7Qujxq5V3&X}``0_3KPrvkmv_36Xg| zSRB-b3nuq6m^K>JuAYTZk>>=VbBi;*w(%OWIOuovtj4Bvr~WzPP5p-C{H~rhPFKe| zXNGpp%qE@VwobTnF8ZL(;i48|q1r~Ua`-e_xG1br!bQyv)~=ETPR!DNpu~64Z?QyZ z@3_#|tlKQqJ41*W?w$Q3y;CVx;=QwFaj2pFD}MW1#ftRYxZQB|c-;_d)XlU}hZ-8y z9pmKbkW@4Jhs(X+0EMwg0CC}Oc#;r7n7{C;Ab8U)yNYR%W{I$-swnAVRgs<~aT*rc zPjOgDAgO05*S(<)ysTbqF6K5m-v!iMOR4H`#(n||ZzW~laRbgqlFU4>$>xKcVHYD= z-NRdF!K2O*GAt(}#W_NNQL4Pi*h+H+9LV5{bDcg2-CR894VDNTv{NRsOA&S z#i%{*;A9id*I5d^U-K0J$vZ5$AIt~7++&0Lq`fA8KTY^3e)j|RZVdig1QLI7Y+wFq zz%K!APiSAxbZ&tkT!m3dMblpl_$Pt?y%>B?=m>or_)zGJlxGw023VdDocu5Cj2#I6 zha&68u-4{Hh)>hj@8B$$))+pkZlOLCt~}yA497Ef0E7nM8`>X1+=IwF>4_GRUFD~; zC_lOId1THJCBG&i2W1xSucvXC#{;h4(6E=n@=p5yKoh0nyQwVp~#Vy)wvZ9AwH5rj5U# zP6x9+Vwi&>6ozb=V%^YFPE4HnFFNBEgx7w6Kd$rczabTl*;k!|C3Q^hUpqF(axXL9dvrf5;qnGgt8|w?OYgMZpN(tDo=d=RW=XNIyT; z&;9!OFMOQs(I|K=duwwQvl3YY6RN+90gc{eGU9Ib$Bhh8ig2H9`(Dl>Q|N21qEl=W zOhPiWO;F3iQM(@}c2rE~Wk zG#cTZ2$^#SF1!e|>wx0K11`F}=-F+Ct=)xBy9r7|bUNQ=OBCx@uqBGY5Q4_Ku!({C_)G(j6o{CdhSDzrDvN(RUeh;j| zU|DHuvi3aUigu~RBa65m?Kd!%!g{pg$3|bi$e;Uh>d_uXTECi%EJTyIp{y8b!4oMV z4yo014R+W^;Y{Csf@s}0nZv~qFAh_0B2iAQgD6^_1Nat^c%EIuI`uJ^_PlkrCxtOr ze+dgwwP>#5x3)W032ODt>EtVTdTx37cc5)*2_~%~kZ( z$j%iuy@!gybTfJ)8>f}#>RB4=NrWO6eYJ-q7MJ~2iIr=N^<|cGds8g&$uXg*6v3Q0 z9$MUy9aBu%FC$6m^nB$sJNpl$4_Xg_Wm=SP3YC@S>dDN!)1JLrGRHz~*3dZVLS;{L zHLfQyth*p#^vV6OLS=!u`dYA72>avLC5%2dtZeroqws(`8jZ6iopEYxB-ftCa-(>x z(e+CtX&C1l#jA|2N8#prza{$R@P>Y&Ud{-u!%~|`QOr>PEwJoqnz3rP3$NmxiILD%`T=8hiegcrJJlmF&;~h1B z7NCIQgO5H@npfnF6VZm)DuTbD8aeoh*_e=pj4b;tSy}F6Dvk1RGa-70`(%`D+763c ztFDW(z(F`&+mVbczDu|OK1;ftn&R${%g(`ARUsnLP+7J%4tD2iI{?@9^=JyNuNN1D zxwvf{oQy(?ON2ibmD7i^vcyT@s=0({MebACE-S=dpu??Mp}#)LU(q=GR3_W6;~N@v z_M(4!d_%gn8LBVC6MP8o>+Xzd!yYd5zDON#U3D#Khx*L5LMqmhP{^psk4@HaAq4WE z!wyJ0;~XR7nmnEIHn8WkrO`^8Nni^*t=%}{wgZ`j`VTDltOJuxy#ms?AEJMbl>WgB zJ?I}E6X2C5xb0(*wCaLo&9t>I)6kGY#@ZS3)|Tu*_jg}9WQ*Oh0~gM|aLN{wvjaP% z-kh}cV7L&3A z56t@TsyRDk2k4)(*GO6d`)}T2!<_Eyz!QHz{`{@am-vM*z4z9fokm`OCnID{nTp z5t^e2dsU9i*suDbi!1wOY?4t89j)w|5yGb41(gxB=pJlQe0O)hd%53b?sp&eyQllz zn_v4)E6Y9UUCNMe4ZHPgC3IrUh=o`~JIi%o;~xzi^zS z!?{vU$dr+rP&#kGKjihP%^F5F-q@5rDTqb_%%RzcBoge_$~5=1>jhZBo_wWh?8baul3Zb(?t5vQ;dAv|<8E4hi=2}j5ELaz!X3ml9G6mJP zgIjF06m0WNFDxtcJxHo+!x$1AEcaKhsQn1F7{s9tYg5W}sl$S_7mRe7mi%z6C(B5| z$mlB;g|rY&9rC-Rg|>@l(YMgCX`AFy{Uey(Y5O3QL;V}*AHA1}6R*n}VFkJx*aIuz95yh>l*^Zk>)+z5?jq3)mOUZALZ0hnEcPd5be#7eLi5^X%} zPl~n683Ecf)h;pP{}Prv=S`3X(O-s?>(F9e_Da@neaxq_S7^`-Vl)LK2Dwv-$oeCP zQ|H)+`G^8qPP6J9+tJRxMMDUnOnLji&heH(-nMmi14D}_18Yi?>^a1;_r+hx5oHH| z9AdbgE9a@6{>Ktjc^JPF@ax3S``3v+ngb4Q2h2-2Y4eI7!-MY#ct8BQ-!~1?7F=fs zUvk7W%>MK+tmJNsT^3wL`$QBZe3K2-gYQ=Eia4J@oQH8o+C7My3x4T3dh-*F_sVog z@n=2!UKE91XrsPYrbAKGe#NColjpI??vI%EWyn{jORH($=y|F=i6BSQ8uqgM$k^d# z|8NbaBJiAVdBOH!EKvNFXu%M2GANRX1J~Lt%wr8^kv=k39!ub)-2OpO^&?0w!aT*N zKW!u+%Y(cm#do@l6VMi^i3T(!J_^*#&Pmh-U0~!x-%5x5S0vd|>9Nyq^IMcGQo49a z7HvtWs_g7VVgmeG_+gKSXGit77+>#K*~RWfVot9@u z2FO=-a09qUfF6vS#HoTd%MD}G{2-kh415qj{`4LdK?m|L??bUCr59ZBfrEde(5HdAuvu?y^9O*J(1;H z%ecc+&9zKQHY){L$#D&YGd$36YsNm`^B~H}8h%*_bQ(eS*8nl?pAvoym!Ldv z&ur;lkhYHZ%Y5p;SLVNX8L$9s9H~IHm~g&49i!?trfmxABnIrAxOb=TMjvW#{t&K*VX!5|y_)9e4zx;r=qX9qh1M=@hn(hHVfGbweJ$5hfMA8+& z>N9-gnbA~c`T>g~0rpa+vL*^UkFdL9ZHuSb#l{HjI+>^@_{iS`co6Dmf(j~orKPayIw5oG(-Mp&@W#F1xB zXiQ*l!Y;<2Pzn5{DHdS=ipY60g6uC`u>gB9@a#`Uk^N;Y7GU2<b_gc~FVC zisQQu8rZWpqD;C9XN9lGS4!B5`M|V8&H}|6Nb3rII5=Q+ojw(=2mA5od>-hV_V*Zz zV)s!z$ZMGP59#OK+EFq*rp#TAs>=R4M$L4$@Hm8bWk5VM+#FMvw>J=3B=j?|)PxWZCKSu-o%$YNYX>o>N zk0djITO^KfT59L0hFD!j^2Wg__A^LjFw}+mfS!ef6$c_IHtE17lZA?>qxdz-<`$ zZAczOFhHZw-d2nkDi6W$So~Juw;sRq@S`I2M)!9!z7%!ekKaT1J%Qiz_`QnXJNPBh z|1J1Y7%>GuZk~C#v?G2nu*HjfR4kz&-WY-8)Nt4&Eh7${z36>hlZ0T_a9$8FQ5{G# zfPrhUhBIB9yU@A0IAK`akRjDFf^CB#L!xD5kk0dg&^ppf=S70sPUo#~B98>!-&gk= zD7W(iLHR44e-`J{bh;(_4c#0(E%Mx>Gew+~>pK;3Qat4>5+_dV4CiCwypm1_&ejn= z;NW}?PUQVrx^E&zw%lULH9QwU;a3l_jG@U;>+JB+}~P!`8&t`abWXz zb?nD3{5F2K<99E9BOLAJQg-B5_&QHf=#d-wZ@QmT_g!%3oOx*J))CH-oU@I%Icsvx z6z+ev6#%JFPKl@j)(hZzAERRDoVxMQVlDCaC=qLuBP*Q6MgEuDX= zW4H@%mRruh)YtD|x>LA0&LEJ^D-}2nwxjqNB5!KVS*x+k@VTJ!T$rt{K;xnerT3NC zD)J&`(Bs415BpoFVp02*fXaj}K7GA&8>%<~$@0gZEaKOP-|qPBkKa-FIry!|k3Dl4 zer)gu@ss1OtWeCB5z?5fGs?Q;N1lZTMO%RPx=|_-@%32M9&w`iRw9BJm)Y{<&-R5hx;Vj!?|AqD@T8D-kn(} zrjJR~ZL`h`;@DgZ*584r;m-0WP}Y%Rjn_BhPmO$aYdlm|uy4y_F3R2=Pq__np3d*Z ztknJi$t?ft-F`0;|RYc))# z=bS?cXiiO_JGloM4gX$4UxW8C3Lsov_(H${h+%v!sqlO84Z}}N%Ndgaj5{I(AHm%vR4`7->tXdZx{hf8{MB!0)?cM^Ul<97yr z8}R!weq0kg+^@ntavlE2A~+;#-jFPJL$cBh$s#u->)VhlZ9}q@4asUXBn#D$tV=_( zBn`=GG$aerkgP#Nvd#?2Dl;T&%#f@wL&5q2r?e*TnP$e)MxoSwM&tO z?ldG|wjXd!G{Eu$XhJ23Vbgqyy?;v>ChEevZ-@riG^}DD5k;ou6-AB)*fhCfJ5glX zWKra3fK6j8_L)&+T5D0{Xn;*KE%xW5$h704$k71%1~i0yPqa09edK6>{Wy_diXu<; zk)r{2ss+fj4-+(Jowj4N7|{TGGLgrk$h0b>$k70MK9OltCX_Pm%_wp-z}}U}2jfo& znU-i2nPzB00aN_SoD_{Q)ekr`8qntlToMiF_XDnv1`PNCcSZxI`2j!o132z&j$$3u zJl?Jgj03nX<2itF?217kt&!kyi0X(9@Hi61Bv1&C1FkOPFTmrts>?77U>rVm8BGC< zqogi_CV+7;)Mac0Ft%x3nmB;5IqTB80gNqKmxc{sY{a^>X#ivU)ulND7@MvxEg8T# z)^z9vFb=7@jIaR4kyDp}6u>w@>M~vk`*-%_q%=+T;o}7^Ap8QmIPo6Mlft;@5 zp4^r3GttljrZRpbpoke|nMes+vO9BQMlPuXzXAN_;kOvSz41E?KdvjE#P4+cuSF@iRyl3-!bLwJ|V&KW_LU`qu}33IKFPQGD5dy(3A<{tGV;BNuKHg)eU1^cM5l zPM|N-xm=vj()kH-{+7vN#2L{z>Zv#*5S+A* z&2aXV?_@o0-h|Pei66J{P2?r)a{MDt{1OU9o+$x0d8QS09g;B~=n&K5cpFTV6EKzb z3^+3DG#P(9(;_#65d_<1Pa!}KjA1UPTzeM2Sz>a}k7a5!oKx{CkTZkR1fH8Gc%EHE zLCUPnM2J`#fgW&IZIHgRm?6)3DJoda@xB%#KaXcMDz4L9I~xG!U(n#lcbRMP?nBU3Y>{tX?B$<~d{J6VIISw{o%1|}GW2n&l9tW@ob|wPLmJ^X4W@?gPKVr? zkUQnMMQ&SNv?pj|2xOE8w;kh{M`MmEDo^W6E#VKeLsEkY+MT!%_?eUU>=;5zpGnuLg zJcS{=@{pFsgI>cIkkUFfQe~nSrm@(b5PwSg+<1R*`i#qq89`h^csWBMY z058YJ(lCUVInvT;UOCxO4B`Eb^jfCig|OQg!Yd!q5O(4R)q~nyS|YX+)1abPv>w#! ziq?ZFUeS6`1*~~Js0Y@(9#jpBme#8WwZ)<#K|NB&cIc0<3+>@Wi#!ZDCKhr_hVT3i zdq<2Rd$m815<;5_>2f9kgahysWtPm)x1C{3_d)wKpjuFM%AfZaj>bXExOH<$2(Sap z51O_4_;7!hGHl4f`A<)N@573#t{?fXAHyZ8G+o}?o7W)qjn?HDW};{^#e?5U_+Xcu zm_p!N=NTmgzH+z=fp4A1pAh)gXY;G^shZ-)|GgWZ2dj+FqfEx<88GAXl$7!3@T>8u z%;Lw-v}yi4e`S20crreZiW#4Wsf@n`zZ#$FFMhpv6yd@bA}JrfGt*W4L*eXp>nq12 ztZ#de-pS!`o{})UBM84B9L~cMh8KhI>k;nf%X3CI-|ql!VXI%!Vo+D9*DD53S(ywE zRatGGp|aXMGIgW#Xtc-crhAYU@a2G%_&h=N@Q|)wJsy@a-DN>I519OPc;v)%c+A9f zc(mlE^P6aKpN@K8g4eGk4_Mt;Z$#0kPvjSd2ed5Ao4bS397cU2)TH&kA;)qg2f6EsQ%{Hkx}cE>|OI0XTIydmi( ziN`&^53dApZts0~HGp#`@56@!I5+K~Vscv^@^YIM@^Xh2@^W((@^W7l@^Y&b@^Y8t z7vPbgfk76j?O|)O;-xCHhgPRHl#51{Bo8j9h%Q|8l4QzD zbgChFXm#pLxoEj;Bp2RH^m@sjiV|~DY{9P<>cjp}kW`O=*GFINqMs9>)6Tb-t9`8x z?_b>Io$`?sZM43E3it2r13B&$D9nEUBoCX4i7XN6E@*~LdJ0-)lkV|Mkc5h7f+Qe3 z6MRsLG}YcD-#+^#`S$1Rch!-%NlZ2l_7`kY4>(#x4-t-5n*;)mHaXUYquu6ghNHvg zJcgrab4tQ7(dHb1qhxa`!O>}R61kPQ8Y`rKM%q&(0$P<{srkUY2=DXiNVQXjb8TZC zxhAlV)S+Y@ca`{)ZBiQ6ku-zno}A%sdVdJ#cc7c!NkM+xg7vp}8FCS1hFr9mAr~2D z$VG!0l4`S2Nrsu>1(M)Y`#Smd*(8Xlan2?wgd=a0GQk0p;6a(zBTv7Be;g_cc3pnk z{7#bWvPsL_x)_jd`teBA6z=k&vrtp)J&TEaxlrjzXD(~0li|pk=dB0lB32JGUCRp@ z@Hh*ecH=BSoKJx_u9ICcO%dpX;uEU(7By)6_+)Y#;}iOU@mC`MHOSw71+`Tj@Vt}- zw`W9%!V=hT`GH|*YN8iKp$XVjt@LEFm$ga?dUH~PvR%ttvN)DNy;o>eMJ^JO=&z_t z4dP%=dvYTtC7KL;UQ#6JOUYkaR{;tQ_Oe}MQR4gRv~@kg3z+k!$XCiSN?KHi_2e>>ae8qOJ(LbE8^Xk(%mE*vOoWW{4W5g5W&UcY z%=e@0I153UulCCP(WYe%)IOoMIZLw@>U$a(Uw{@WNG_95*`k_BJ3A>%=%I_Yhk{5G z-Q!nhUj>m2dZ23w^4o?5`ghvKtKZi`^*aRh`+wahnV~aeLYZQgd)S;bP3Q)mSp`VzoJQv=S8 z29RCQfE%I#TuwFM?q~oRjixckVQ9dk(HLYgG~mT(0C@}zNR%SQC6l26lOq8#ob82C z*b;c{4@Y6g5q5GE#+A%ICjtwpA4UW0E11A-5oG&O!d{8OS~~&j$Dg3F?X3tqDGIx_ z2`n+G5pOTTj>ex*dY>We=TR8fbGuNE;LU*7-aZQBVr+jb3Ok8-pNYcA+S^w}VK))) zo+ykgy#06-_B`?4h{CwS+3j7C@^KxvH;ckX;f=#~C+xr|ox)>a8V~4RyfCV1io0|9McMKm9y0T#m-y} zc`1~GXp^})aA12W3Ea(rgF6CubKqe1av*+?1BbMROq3H`givY3nWqKd%#dI<4TrFo zy434jMdC14xT`)VDV(Q)9M4`PDiJwuQ8}g~aJQ%&*B+coPaZzUb_DL?b9{U7d?|tHj~%f$mihN45vrNRXZAZX!=#Atb%wp1>N@ z;s75^h^eE&WEmHyYOhgjetR(P1G)Jt5xM#6QMoyznL)gi@dM3(=F#7W}+2NEZV{~t)4Bz_Z#lfauuoCN*>5+@1&0Ev@?e}KeE!kb8( z1RhA7#QVRHI0-(NKTkqsHAkT^+b zAaN3JAaN3JAaN2e_oJbtxD^a}xx9wFfy7DT1`;QF`+B{tgzo#hgtOvyLihXb-q^Ya zxcwddc@Nv$NvqVL+uc$3$Q4G}fXIe+vMWWH;_kGkx*Om=Pb84j?Y<B{4-WlVuqIEwB>H?4lbhiVQih?hHf_n^Rfj@l zue1n}w5WKIv~?bib2{*+0AubVCGvwx3@S@dPg=x98q|`shH*$!TYx|EIMxibWmca( z%2cz7j9l9tvYR$B>a6!M=NT8=qi+@YR|0>kjl=%C5qPra`(L$7|S zPxXt*{;;=Uw@#?{K zu~-6wlaate{0TMeMZMm(dr36lVn5*YXu#+Ffcv5WU+@DaOo`-ii65|YG~kPVz&Vis zxo&4a7=@MD&N0~gK#9SEJJ+!Qxt3?opBgTjUgV3xJ_eK+UT||e7GPgQyKKuOG!>+XE#IldFHRxNDo>-Ps5WZm-7^ zbCm}{Kl=XUH40Zz(jlzPP^sxZBD`iKgfnGz5 z!Q>iZ495Fa_UVxcVawIT7)-7v#$ddaXx|r&E7uicFuAT6gYh1h9i4BsTw#pCc+bm@ zPCr|&HO64P(P+nJqg-{2!JcNrrlv(YU<-KTu#XXTZWQmnCNRo*?7v0vCQWaEg;bzp z$XgNlK>P`fh|?Qks(mUKsAI_26Zz-S1YT=|sj8|Z5JT>ofdrP|Pf&u8+Ho|%K90zj zM3Dov<7j|=50U>IMGn-CqXBklCXlzlpP(3WtIys)3gZnw`-&)xxBcvAeHeKGS@-SD z2EFtI#^v1}jl#H!$MLvW$6;KP<1jA0aTr(0IE)Kg9L5DLw5mz@xJ<-hr1EhXX=fZp z`WJ_hRK;PWDskA7CS^Ij35=6C9+wj~4&&sE!#EM+FiylcjFT=7BMj9jU(l67Gq<)}|!9Baxa1~87by0C)* zjAN}XTweg=SW^ZqfN`uTFBQNzu9U$DU>sM<9|SOtD_x=k7{`^ak^zk4N*B2R#&M-< zQ~+bYg>>nqzU;S7WaY^IW-lmPPbsPr;sH z9ru+w523D_ht*BzvpA5;SN1cNDhM>|oG-v7rgpuDdYV8hrgo}}N^3=VTq8RG142)8 zLuSb23F}%vj2EScz9(A}mF@?pupO{0TdcFpVNLf=+&?Ewb=`H}Gau#W-o0ruxG!Fo z!q!Pf^w>bGhT^dv#N)o{e~wRD`JcomUHwnub54yH-!xc{52}BAD5}0w6v!7I=bm?? zX+453w&F>7OJ>Nl9`*cr?qC6b52of|$5hVq66K_|i4i?NBq`!Q$`s?WE|R`g-6RA( z%2%v4WC)@eH#zB#l<`w+g6kNM&HJ+xSJKO^X)W>elvwy5to5OoEw!omE03bK;-qyh z-{P*!PD@>e`%~6CsKQ|Fef({y;X0j%DfYAqxZ|#vqi>@a`iPEY0&B3AmcM*Lpp=q= zi(Nmw!J1+stcd`uEW9vro~n!06G$ZT)ehX!^kpBVEUb!$4Epmuwptq^wcy*%v>t^r zdTT-p1Xu@P!#UiizYdKp7Rd<_tiBbcT&P>+1*XmntO@@TsJNm}ZU#@U(K;B+LT5*h z#F;=5R@YrKU+2>(Jk;}VQsU{HE0x<~zsy&4P(nrx(^XzNjf0PQ^-Ri<@k zg>m||T@sf4Mild2-GxX=e*?dl zY(v-HA;`D;<^5B$^70b9U)~n90+@iBl%lKHB68VqOC2dmiaf~2krod%(-OfEp4zQV z%Q*G!5=`N=qnHi#rpz|2{5LU2H^GnMQ35~EP;bUg+Yfs6u70eclX!2*uQa5#B4?8# zbQW9Vm998x6}kz+Q9y{*xUw&b=I6Gv>+w&`<>f7*KMYTV%ieJi~FUMho^kKU873v7k zyyj41)y)X5od)-y^>v(PIO_<;3$^m#jcd(oe8Y>SN93U(sac}3alo;a)Qnxn)8SC;k?-H$7cul@u5Y3 zwRN1+>~do37^(AZ6DjKGH#oopCdWB|Y!DxTT>%H)U@z1Tf@2j;Ls=gJ$6soxlsw=v z0G%Tlp~dYfnoF*I1%FDg*sMwPh%xFS{eDW$G*%MUqK`vle2&-8C-ifIerotQDIoG) z_+p#WrwzjgVYKLHM~kjcF@1-RrI1{G7Y^$J`e0E6r$#4Zy15Un%BZ4Ek=5+<>NME% z@E@xw7G)$zd+94P6DxS~T@67`loxF9{yMAZ=Am`T$nz}P`#Xl(GgPRO+mELp&r)Ys zu~Q%aodvQYw-oWfB+Kj^%zE0-vbe5=%!IWi=%N^Y#!bM4&cnZuRMIDN(D(T!qcJ^k z-iQ-DKJ%&1B6tv*O7$R`*griB)&8UoAUK;$8=p?%2C&TOw}JW}%;|o!_Ah2eUguu?Oe;AeuecK8l;-f;0X)sb+%2;nvGz2 zFR9|=k$0~8J{o!-_IQ^90OlfubE8_tU|z&{H17=~XLvH%Po=fk zQfw8{;XFz*fyY?Xg1cDezKitqL8TV~WttnWWvNZ8DPytJo^cJA!-|nq?cbm^9iaqt z@^>h$=?Kx9opeg^VJsQC&AUygGktKu&*3Omil$7w4 zLWF0c<~>oa)kX-^L>z9e8b} zRZ=`5L_Ka3?#4OaJJvGG9-Zxxp<=HPfYRjt0X4Ec#dAz8mj+PTDaC=}~O+(eDyHyi%HX~NG8CtcO#hKo_SA*r!EWCR)Se#W9 zDBiuA#d6O=xn~i`cdrnxq;R^D!o%3e_9bYtj0L*{uD<*PxxYRy(Y}46WjWLbaDzSB z-kTIRa>jYH&C^j1#ias zJDh1@&aHnEI-5`}pDC6cn&}x#H@mDiNg3UG(2~$+BtNkYowi>=Lo4UGSsGUExlvFU zUHali!ukhNKxJ`J;T@)BzlBJy_)ng0(kt6iLQ@JiwA2&>HeC|cl2}KXVlAf}fXqbg zJ*KyvS++Ju%fPz$!)%!al2Srb!kb_OCTa`Wj=pbm_0`hos)6_4fB&>YA@@ueA4UBx z#oi&&J-3`F&+V|cuppP-6@Q#9ki(ktP$JQFz@fukW+-Mpy)v`-U>&w|>z7Q`wxoZlS<9eK)|M!4{Snk0gH~mlGx22~_j=|QRF|ZD zQQzU|u8R)C-){NabJ1aVqD?AtLjSbmn@F#TiJM{}#KB zy%$?sA^Y{rUdQPhZHl4VC%*z*U5~<5r`O&AhEVJ~(GGf`C9v*BSUu}&a>S4yVoyCE zP2gXRuzJoAkxVI5jFZqeake4vg80=8OR!0*(w-Kg$OgRLOAz#yoY`2__l71_i z=;OqT!QO8I>#sE8Ens>}5D=>QCx{n=UD^b8cN5q_Oz+ufdhJ!D7lUox1a@c>*jY^P zGYANk?^fc)V4Ir2CJZ;?-NN){BOsLChlv-1oz?_)Z4=lrXCS=?qUkMYgw@aUEqld~ zJBa*ZG=V2r$SACSuAe|Oz`mCWw9bjt=yQ#*`UXFN81h`il}DRGO|okf*r82epCIgX z{0YUqq6zH#O<+$G_Et1*ac(1QvnDWJ2DG@geY_a*p+sJb zKcNC$+5~oc6WD`IU~^cYSbEPl;?)=V1&Sdj=A%IU_!BD7woPCMHi4bg1h$j~ilui> zBVK)Lzd$kM>xukh{0SB4=_auEo4_V5XpDOl3lvLlxDl_ujbES`^6o@F8h=6sIlgTBDH>qUW-3eYCsfNL zn!rwL0=udS>@Joxmfn4hc=d1kC5<6JOXPR)Csd&R%^P7`H-R141oi|A6iaViBVPR` zzd$kMtB8Cj{)7tj`zEkAn!viYXpH+d3lvLlv=Og1__m4)r`nUW7#gMzUM1i)#pHP7gZUQ^A5mvv@ADFQOXjQ}Jo$^qkw6GC} zEn?}Tc=fA%o1M`BvFstDj!>dEuvE1F5rTbziAG`dtNlcS0B(6?qoZ3HQU4JbwBjr*G7r;n7l$HcA&R?C* z0gO{fXH)>=DAqw8z&KuX_yjO^xAs0^+yk3pcTCPVak9|ltqtyYo7nZ_&i54L|cp8mqC*_VNf`#rEIYXvkyO#AE8R71H}F1u;f!O=5y+d%wDOtk~xZcLWv) zcNDdL2VI6OmlQVJKT zfD5M~P!BGfeHSj)@?Ct{!@F>KMa+fEmfMBX2B?>g?3!J;SkZU!W#j9@#h$(km%XbC z7t8uCTy`rioTf>=^koy`!fB_}gUjB+h0|!M2bVp9z&qp}2+`)TUhI)Zl6`MH(0NG% zWn(*DpzKn^fzk$UOxbdV1EnF{K-oWr1En?GK-mn21EopaK-sdmf#;x%(&5f&T3V6^ z9S9wc1WISQfx>!+V@he=Kw*Q!fl^vGP*~D%pp@1P6!tJ2D5Z4+g->(?FN&8|Sgvqj zxU|ClgagB+6;>o17%r`_1>wMOX=RBH2Zl>4OKmt%#+F-^pK~F11HZ=nk~Dk5NRxZ2D_nxft#Cv&1hh6`%)klB*`T#5rTsNl zoQD%p>-hA-;OBc~I$Z1c#1oT~y1}L?0cDURfVL!?2GB@k(*Rm~)BxIr3?)S~k4*z; z-?3=`@4ssRZ^#Ep*+n#t+?o$yV);;!XCO2bKr@6Iu+R(eSE?yosdy*%8LWTj1ZO05 zRzB3ko^5TvJzd+{^ta}AhUOCAI*@lCI`QS354-{Gy+^w{+?D;E=c!kb99!c|gLw=% zPI3-V$1%>t0f8Lqd`lhs=^IqLsqaH-rNs3ul9wDD*H;xQ(57e)wPg9S#(`UK0PWmt z02R65>pk2)<4d<0@)q$5scnP85$qmKWAo7N(R4b*?$HdoR+`rPFy)N1o8O?FaHMl8 zmj88+!A*XGZ`ZN~UdOqGxt36|0-Yag1*d{iWt>Bi2p+x%j+O;h#M_Kkp79;-M)(O5 zlp|$1YU^4KeFaVFr&OT%3Jc*u9w6!h%m}7Oerg+hKgYh*7(YWe4)1s{xZyeU6D^8$ zXR=Tqk~6^G+<@`MM1#2Oh)~gfoGFW4D!=+O8;YOJ&Dw?EsLERXgBhxiu|T zvvZ=;Ay%_%-^BUTtg${ketRie7SuzUwvV7mbAFZ$Az4_Ya z06(eyV4*P3K=0YnXxFn=xc4>M@e~)B;VH&m$LUkyY+t@wa-PhUZBR8d?d>SUhUsq8 z;sqQu?cD&aB1l_RaTYu$=V=@t!$<>9)EDhXQS5~1?wJ;obAD{1U7y1r880u5GhX`o z^bR@SA6|yEU~wMjsUt|hBKJ91PSoC}J(bY#8w3G|b(VL;%*xh4s=WtiVXV|*PaDNW zb~$;@YKuuZy|FnmVwAw2Pw@JXj~VM&GYy{4osYZ|CXb&JtAC9u^F$Zt&(fc1?bRF6 z(Eb>>25mER6sn7EU-vjCkX1oAX4CIDgJ4spA;h@?<<;Po=32&qV*E`=r_(tMvt5S) zre!!N6%MkaL3m>OV?n&5yg;ZCwWY!#eEj*hEEIKvFsFK3A=b|5gIW?{tFE7b>ih(8oIj&btz+d?^)!*J-vLr&B$TS|<>iE(roBc%bo*7*##bu1I>8^l7Z=GR~l{hoseB_jR6U^gz5 z`O0CRa85zzg?5}K?i4wP0A{T~iW(D?mnqcFLDglHMIo`B`=9Y$R$R3~38md|*cd zttkm?H8Y|;m6N|o$pMTARA22|(OtNrLiHPrF`bCXA&&-r_`^Dm7WpgxCiW$ zT1T*y^iA=7!Uuc^W&XVMwK5E~nGC-Y67%MTx<7Naq7oy!Fj7KD! zx0uaWKsCsM9K$C5qG{FerOJ?-)kfgdp5-5MBswonXpZ$fuux#~9(+CQ5|r2DJ)~-q z)C)iY19G6pfZ%nx|Cs@4k1-%F$8o>UaioeV5b%`GacDozHF`ee(XDC5;*SM9#`Y+m z@)&+~t>aPg|1Gz{F)@O)$ZG_RVno;uru#u`hmMnifq~viS_c5MeT2Snu# zVcj3-;MhtVKf-GBMUE|>Ey!zulr2btElBE^N|P-}rM=}6 z*yAt$Y|Lz(;PM(fPS|RV$7{fSj`A9F%uf8XPG-t;$ai#FYv|_u;T-)E#!Qp}F%s6f zz`zw2(Qs$X!q~)F_A+#XZW>epFXOIL?Z%{;#zd|QOI;?K^FUb=7~}HT?56zgPBxe@DQbzZu5FB2fEqb%hq@Cq+j z80&4Ze~jWp_A!b-T@z$|{ld?6cE>5n}EmCbUpu&Z~lvu0%21<@6Kml7L_02eU zBWjDLlMSU~PutcbtlGvijkX0!kFZ9b!>lL^`+O3G!9SISy^PYU>lL^hFl*`cufkPl zfK81>J=ep9#k|6(*%*gWuTanR0zB#;#$i++)U&<-k7|Z-7&QX*{4c<3ftp+#MkPNz z6AbXE3>b$|Z%@w&1H7*`fl(Dt&kh5;SDV17H>GEI0Uq_M;xH;`>G@xPM@6nUjA~SR z{ukg;-6{@yhA>h23Gk?m6o*k+M>TN*JnGA+GE4xYQiYx;1~4jQ#9>rv&@;vWk6HzK z#u&hOu&-x~0gPwsdd3*Qcw((*i~;Q9Q5c7#3^P%s6?6V|fl*)8=HLp!sDf&9AcbJm zAhkJYLNF?T+8iJu81*-84u%kn>X$Y#c2o#PT_u|x6@pQr#b!r^U{oEk*(o6ywKr^bN(e>;3Y(o0f>DRTW~YQ;)E2PW zDGCz;Ac{0Ef*#bxE7~f7S9C=JuV`unUeS{XyfR_~uc(LxUQy7Zcj$Zm$u6mnngfJ| z4E4|$pj^TmGG$*p^hFsDJ{AW@=)f6@<~$34X+aj>tRWFd_Dtt;Yz2nQfVmjjLDH8K zXa~|0nx^zbxUV55cd7i=ZY9B%Ehi|vK)wwKw;vaiv<9(WXDmo-`K>jR)=EG`S}Tx{ zv^FZMmC*mItX3j>vf4}ClDa~*zp z#-im9M7_Xi|DE+&<9S5@mUOzow>yupWD<<-pwt^F0Lxe^M>c1&YS)b9$mr-r|TaBSH=kB{7P5m(njNcg@0 zko6FwU&HQlZsK1r*_Q#=Vt>(1=oLV!<&Z~$9lY<69_l1FBE@+XSRAY0U}E^P#i(PE zHvW>v3)v`F|Kbf9a4Uo5z76ZamJL4KIt8r3pHOkUQZd;N{^gG~&|0+Ya6zM}%X{+tKIMQtzR{(O&%d2t9>@PPY< zfGr;Ir4X>y1Ku41wt2u!Az-@){8({41f1>x{}uwy@PH48fHOVdAtB(P2Yes|oaF({ z5OB5!tcHM=2mD6}xS0n$J_H={fIEkP6%TlB2w3%i8$-Zh57-&%qd6Y%*%0Pj5BR4L zaGnQzCj^}D0r57c-$x5P;K?E2LJxRO2)MZi+$#j!!UH}N0&eL6PY40G@_>(qfFm9d zS9Sd&je5Y-L%>BI@b@9$)*kTK5O5n02noKQ=C&U2{t)JN9`N}PaC;AUst;WMPZ0gG z(3|ydi}O?v(e?j=v%k3E1*~Q3-+_C8=M8dUZSdhgdXd+gDQvyohJ<>3J6s<9#nY@> zw)Gu=mg|zNb1Mk<`gf63oqx*f$_R6vU34;+vH&)A;T>1;r_(1`tvQHO(_PE+=@SHY z{;?|;JR`2I%htcg^cb`Ivi0wK?w-rm>M%$Rv*c*B68IAC|?W-^lrg9#?Z?En{v z38Vf#{62)i@pi_ax!fL%Uaz8{B60<;3JNI5%Ry0I!(({J`{h+o@9_QqYwh!>>gr^o zLzq$Wo9Q}dKi6Js?X}llYwdmTIBW8X%;O)ESHfeXWHQUl(CWTw=)l~A+beJlRQF4#SlTbH z$#=X=Gu^ktC^x$lFVEh9#qksoe*BGG4EasdpTinmq`hxK@QNSeR5c*C^Q@@Ub_9h0 zXVG=M)y~&F`l)JGbaH|Pg+?dG@rXOWB*|L{EXSmvsJAS`kOarGPOvD}ZvL20u_hIh zT6k}in!hK@HP&mpaFbOi+(kWN2#mHw&_HSVT`Dbmc*N70-C1(#JI0*Z9dqq{AjFO~ zu)E{(_EWc%;0Y2y=|@l07{L~vJk3r ziX^JG%PSvGyNqg%70c-DsP{4!Uf8`|L5p|iVZ#uJHqsAQ=_ui}+~TASODOBs{4u|I zIY#0&zXDyP^EWtTDx>TU!@4j&ELp*H9zFMKUpQmtXp7naQ_cN9|3@wAiO`p8Yp8hW$loJ4+=y1KhRzJ38M4 z*q%)G7GRxRnz{i|zspnmtHlLtsv5+LCNq%PUUT3@jB1`=^I_n3XAkm54lDE(-~%_| zcAa>+T8ws%$we9NS_mOi^QJI(Hw3=DfV} z0rn-Q!TUiP-ZQ==hryIQA%7Wjb}MG;thdizuK1Cms}MS9G!7iP`v54c7jg{+HqL;7j%Wr@+$B13|&cqObT73 z09V?B8wR)5%m|`IH!R*-D;7~G2#W{Sf)1bY-|DSviAY0N-L<$F3qEQdiop2s_rw)e zZn~Z1rTNE7Hj&AQzmxkctP@mwCw4zE>AYrHO;+u_6@Nr`Yj+}k7A=?|#zK(%PW-N3KO5+o%JUJTE>p_YC|yfJ-dqcH`dxuYO1$phtUChnD6x1 z&mLk*W0XIQy-1O^o@U^+A-KDUd~@v81>cUBMmM#;)R;q}y&Ny^DNi0Pzx4j*N%#9t#-bK5g-N92Pv-WAcfA(<~v!O^7(4Ohuc#^ z)IgDC%UK5IJKG^J5JEVCX^r)Nw6I!ssSk`=s}(=k5%|FmNG|*7e$?D~>=qt}w)jsW zRrc>*nt$6luWy}cGaAKSWaI^*+J{lGXSBop!ACG(v66-9Mu39DwYd=huc>asHQIH2 z?hS0;k+ETyat%K3ScvgX($t*Tv-Js@047$=i)sP9=%E8O5BH_)2)*fB64`>87R900 znA^{FV-2f+^Z&AuVu-R!wQ{=|%OswU;9nRCEv=7=@K4Sh^HKlIeU$ zRku6h*&+Pf0%FwtPv*^m0Nsw6Dq?GUy8>Ngo+5s?RcvvjUv13c%_HODRhgFSN9gRF zl^w13*@msj1r2??ufU5t;UB?nQ?xXF;Udt`XX+o1vr}kKv<5KfeMHld2P=# z2Ls3M40)kvGEEA04<)q0BBj;NH}Q&qWsy|@UiWOqVx}mn1`At?nYO7zv^^P*+~`?U zxy*gwtI3BlyB5kTi#%>3b*RY^AdUrl z+}!w}a){7R+rr{$5;#u1?;G*kslS~J$#%cfO7{P&Hz#R_<6X&ul@yPcC7T^W3gV>Stwx9G zmv7J+xQQ~LVF{Vg26D{qfgcSs<#t?&S|sa32eAGU*FGHq(2{^*AjC4Xn&=c=%WwJ5 z;@O9&`PW1XWu#MJe45ZM+R1Cj1Y@`ZsyBx27b>3U%j(5ZkTrgT6tKk_O6b_ z+IlVUZ#CbBw0POraGI}&g2mPSX_lIJR-6Bb{E9IO$)@oU*aogLFxcIX>#d}IV{{SB z&MQqrSJtb<=0Hv4{kk#jzD8E0zaHs`+-~&|*3CeHj3F#&2|&%aHF&Wvdc2?(2oX zQ8g&aRIE8dyT)8#xOboI=Y!t20h4-MdOChuJid2b5?F{Tf7Hy)a`Mi zEPMcuo<9CL9-Sa+ewNL_5`rSH#u~A3Io2UWRzaZ7*Gk3RAWT>kqOC96kxVqmik)}+ z*oK#*tACv0R_XU7;O$KrKiScdVGMO-;@E+*2iEtM+r0YnD${UV*G&V=b_G8v2Y|s_ z*b~6%YF=Ti;O>NTmM4pZ{{#;)Hg)?m;cYjGy^_k0Xfc4urdHh&ezOaRmEEwe5uO3M zyoXir%eL&XLi3aO6=Ep{%PX%)dmQWuilN~p%(KGpke8ySOpSak+pHlatN9_c-TVap zl<|e*#i}14p?-NVKC*nE?92Up6=dw%Yrv^CuB|!XAR3zNgjIxmpf9&Wxtt34{~)(0 zUiUr9HNZ%q7^wsaob=05rdm+urVhjhq2SgnZy(gwb-$v+@%xy6pyiJ&O&u{cjwDq! zen5wuV?TuYzYDwwLQArGVRqQnqR=zi)y3%EgVABH!U3GAVlw!pBp3EC>{OyNGE5n8 zx&2*2zjQ#rnl;vQg8eGP=*1#}-Z&%F#`h z)8ukcGCMQQkcE~S3iK~G&8zW&g|deOE1zajtRc1&%Y-a-0?+AvjHxPDy~1J0lh+Bn zvV0sa34*X}O{<}=tnV}W=Jei;%J__gvJ$LlP7&Me&^a}Vm87`3^XqYu>LfKc(Hy9p zMb=rX_jS~B{Gj<6{MP&!VU}BAZ^CCC!jX9S3_?oDT1kPkNR;qOsFNSk<+RxR9BV=l zMc5sNMKOLHpmH{Q3skyNyc-{b;El1=@Nls(b+=p2)G9F!i2P`-cv zikmYl{jgQSQS^yiA|Dn_u{zah(sDKzzSg}nYNMSUltkX6{fMqU=0NC8eVA3dHc$aKv-Y$ z<*v?()B7U(bUT|ZUzQF>dvol&q5Bv`X-SD!V;l-7Dp*cI9mkXaKfUFpcpj2 z0$AhPSbG7>(ir~-vq`zLD2CTFxw2nISrk~pO}t~F-+hllhRuL*9&P~#=fPZVI1j7_ z&cmg|M@v)HrNw;VxwUM~C8SIzUsVe(bz<#x;HV$@i!jV2`!*M`>>w3c) z*aexUy|j!#sa==C&1ApLV861k-^8%?CQxJ|oCvGkdtH22CF!mCB@DMcA9S`w;Yg&- zH~$=IQFk<#BKx)&^D$>%dINa(_sP4_D*Pw3FOdFWZ6OFCdH9D|j zkz^&<4r5!0hmEO^y=i+dc*0w(LUTU|svd&Py1mVd7VAL~14A-4YJZ33*HDv|BiM^D z7?>{)Vo!@FEHaI`?wh$Uo390cVfWZz&34HOgVhoZ{&xq(iM610Ba-4i(9+Z#AGu|8r87cW=#+=fIuSUpxP7WY{`OpqnZ_YSXN^L(g;$%(cf zS%gPr_1HdaN-R-WR*yl|2;HOcK^QEv;&9zGV9WvZsD%|}@z2uorj)8X-2gqH`NL~| zuvA7L*z8~Z6HtNdX!RIOLU}MujZw=thEJ)ubiJ{Ax`pQgd>k32oxkM8lrR__hPGUW z-*I`qBx+G5I#LZfm&=GTpms6fh^R23uh3bN$E774Xu?bJ@LCbj(JyMo0Yw)&XVirw z1DVjIe$~QysNc0#-Jix}gvy=ZuhG|%Z2*?6XCdai`Ek&CzAR>E9th>S{nLOQ(VVp1 z0QTi_d%wlqLM3qafgCoUkL?SN8D2O9W~;-@*lxliYKJcJ;C`abn7c1 zVBZDokWta%2ds$cI)cT!A}g}ZOeo2-%mIPN<62pGBjAA;13bIO@p-{9hJCj2ZLc3L7u(c`I-Vi+ZhOhsD)nlxc(! z#vQg^0z@#ND7ZY~V8GpsZv|{7xX46TVMY4eEI?P;?r8f5!?F{O64nap=@Y9-yR2(* zZ53)%@d)UvfNXthD23+2(P;6tVU@J4Vh~Bu!;rSfh6)f}^#hm?Rurs_xC;>|<>sj7 zHic?dY)770sSN#GtZ|6>G;?8h4b-dJQL#u88uBUO%D%63bCqmD)bo+;@xGms%@9z? zOvDB%3&@BAgo8v_Pq^P7Lbz!#pAarA5h@VQKqXWI0YQzL5P78ChVBA#jDQ>#)hR)H z1&=^`1!&i@)V_F*B`ofIpK=4p8&>&Y8dL^%>;oYx;bsnCR4532FKMcnYbq2@2uFn< zltf|sX<^k4LpCzT=H#h{=4xziOz>faP>+%Z!+e8dl$2r3G#CO-=upw(Z-o`ILTh5uj89ZSfvyWl_anyy;S0&ZB9Ny&V?kC~9<9RMzd){puk|)~2g_#n-TXZJkNrsX2t>V#v5RYw zJUz?QH)@8+e%>?Ay_6X-_S}Dw?tm@Xed?|qesQ`>VHLU?okYC}=)NVGm?c&8UQqCm zn1LcO19d*l3nHYnnof26KZE{ok3wiiJ14})>|dMsZDki^K&6AwQl#v#k0eHw3+j_`JW#o(}L$}Qb|T4g&v5bq9P+N0hMdk-$+vGIiseJ{5^K_gM)kbV43$QC}+ z`y2iUuti5`p)$5ctP9wt&m9bIvXAT^@IigdJB+Hpqg%KEV&jilHwiSt^1tXpkmURe zSYP3C5dVVZ+o^wnuEZGc^e!q5MHk ztNIV)J+^`{#Bal%6@?r)3LpugUehBIb)Rb9L~I-X05v)yTm1ug6aN5Sjeh{kYH{ZT z{>ZK=2luWU*@GU!=mZP!K?^*x^OyaTTX+xf{TA|%^7c9G`(}d`@7}AkGg^i2w5#jKyOT-htL-u9 z7`u4lj0x7v3{q#ViSo)jmm(s=n3bXdaYG|~sg3w}Zt!w`g2XfME#~WV>yr&`;Q+?= zR*o%=La`fjh<9tu-H-?xm_fvXY9_vRqJK#_-z>!5^g%>j;NB*vCq`kNkf@6T*F))J z?D&=FOXZN+huVybVPGPxxf<#Q10M4tG-@vkODWWed=b9qy(xq35H~8Av;|c6q3)3> z2U_6V@e03*HgLW+w5Jc1xOd@Br{XU}fu~Zoibx>Y&hDY~z&4{X2d;OqHKMA2;1CTU zojOXJ-EkHBQ*PRz`>jF8PFum=Qg%dbY*(-#(#dVg`98Nyw4}1Vo7S+|g!>y!z!n0g z?YlP7c6fgRY2G$?(FYGi)_7Woun5kiq>TTWu zF(6O&k~o&dX6hAI0T1rN37zRf7DBv;dD)s&JZs0Lp0!*Jut^!k76tzmmsg?GWBx)O zc#B`e(69q2LnK9OiIQ(Ee$DSZUTEWCCx<(8FtNAWz$1eV@C)-f(MxwA(Ve0h0sw)1 zJO3K)JWnuuXie;VI|1MC0Y2_aL}4tqYw}yMf#*YDXtWW){tPr*J3nJv@KncA*DK&a zX5nq*sXS7-wll(nE{X1xL0!W3vT*29r6p`c`z%f0k}R_J^eq)~CnCja>CE8w1j*O! z{f#+@YdGC>I>pNY5JW6_?W-Z~G(B_?Q&V$SX}>!JyhYt<gV@|G)wKEZ{ikwx;V**nr$9x=@i5u9)ZCQ>F^ z^lX@i+YZ)hqi}iqe8HdkO`18k7vzLfhycrfr|y)KsuA3sqH`iPIBFI-Yxt=cd0?F% z$Kv{DoTCc$sJ(y-dl+NbI>iX@md$CHOd<7EaSF+k#Is3Z%r2#C8L>8rcDQS$jRQzb zS2SZ^309wnY5VS1CQq}6vS(;*xtBU#{CFowD?)a)itr<;UcCF2#o0quwZ2~Z#WZox zuVDBL4SQO?(_0~^+z#xrG|%`5ZvxjT6n@&7pM%2BL*XNoM4)(00tG~=+nH3(Ylo&K zk71jLlcAgy%iN`(&E;T~spzZZy^?pTA?~?MQmD@NI;&9lbMg=Zn(g|IX?u1@+=iqt z?HIKY&|F^mL8@{RrmJu)cq^xol(3q&GPkwxT>5`UG~ZiY*xc{+{hXO$P-aZ&u?#T{NlQ3 zMDvliHXr+mg6Vg*#fjFLBvv$p%nxE&!h@D-W$&`0Ba7Rut$>C9Zrfe8Zf%YLR}yR2 zvYw?cDw8G9y!F$l(jB*wLnDhtd9wcM47OIRnS_ZhSQ9O40+>b;_o&_pvwjMid{?@aGqQMbRD%L-i9O)w%b*G8lwd~WDFn%+ieDqBH*dcg6 zi_>I0>flQDfJA9_69WUIG~MSu85rqeZjVit-q97{PzB zk#_UH3TfosCjxi;C-#ebGv2i&9H5ixNZhk0ri(>JAJjR+G=j$#Yeln`%(-*7DdrGW zQ_kP!Td3v!!ys_?xAr(8Qkw?%h@x-FT+b<89^e7*CcF^E4 zJBtZNINs!=u++;1dib*4=*lH{UAdZR2p+|eCzN<{TEe+~VRYpHOGuiOKwwWZfDf{{ zHG$LS8R){hD6dvtjKa-XdBo~ebeDQYao zsc9&5&1Xwm$vQQKHw{LxBuAbres2_=;9eoKQscPCo)JJHMFM=}mR?e5OJ48&AO^hz z+K{YIyBHfO9Z&_pJ!dR}9gr4zHI|qw{x>im;tD2t`E9&JSm1&hynE&LWhhA)vx-`- zvbtQf|Z6jSn8&4!Xs*2}XP;9m^VZ*=9YB$yCUdE*>JWVo6kAXkP9pk}!22A)`|bgFS3aJyUXE#0A?c2;e3N5gk$&bQ+_~boRe*ej z5CskC#L)#?0BOC{>Wo=E8<}ypsPPQ-#mY+i(YP~8n-tir!ZV?~(ib@QlDVf;;qTMq znG)Y9>SNij@9!-5llwbOe|mrC5`WA7&aB@k@9)(8Ms#kN*#-29$PhF4saikC{oE2ZMqQt>fb@mKEfK*k~9 zH=ZC>o+MSCCRKh!tNg`H``qDGmZi$gQsr4v<=I;0=5KzxIK0Ypq{>mL@}H&3i?z!B z*F8KMT4j#ro&B9@fA0U2hcSQd=j5U2&zP({n#Ygj6#L$T<~F3lD2~53b0;=| zIC!4qI&^?&Gs@sA&+RP(3oeY@^hIeCR>)`|q0upc`;-_#GA`Zm#?#1tRObu!C z3jDr5<5>s6UA~x*5UGP3+P&qnWe2{ntF7$H;J%{M{d642=cCaO=U5uMN!v0!pWYof zdW6#jcfZn}r7J7i70Bi*TD({GY{$^=U$WonOE+8f9Yt$$higq^wqEuO`yN#7CiXu zEgstertbZKmq8@9=!QxR+vKK*9u?L#3_?lM`8v4q-5PB#z@?Tf07t$VtnYBoH9GYfM+Xt zW|))oO+kJ)X<`9!=)CZq?;MlrjZxDmVA@KUhQYO!a1DcPD`DfmLHM>3KK{$WXgk(c z9)#n+19u@vb;*hk!ai9ukaNr_!$2^4=#R%@@ z{{Xa77_8};K21BVlFt+g?A_MVw32Twi~4nP66&AB8r}+V@PG;x^gc{ z%RL59+gmTfCbf!I9MohR+gncLN~|}gY)O1TFwYf!$MglK{D^}iD@RyVY)*D`y7OiH zXuA_OPo1o7@>=pK@y6K7{>#hZ{Xfny#a=Z6rT(Z6Bqs(G|@PMDR|{iA9L_O zf)rifJE}2_a%jcsehN`8T#LAFP*ynZX++4t8|NkkaZPNzboy9)1l9SNrgzF%ed-(o|j&Z z+&e5Vl3v@Pr%nH;qvqE*WxvU;AjY=7oIS1mT z7xM1btn50Nh_g6pdI#4tOPtEOHoJuy>VA+iUi7vSqAg7U-UldY{QWYWnzANv{ESQB zfl1qYg-UXU4qxw2WCtd@pXT9c!p3hvnDP&^z0)Y^c>WrF8z?{4E;;bapO$ye>V5;q z{jBcaYF(SUmDF|aS6`~vvM;yPp0XWpX+!8fH6eN}?wQuLhNtL90Egq9)-fRZEn57F z+GL!7tazs-v;p~2Pw&Kpo)TJw8&o(AoSw#^ z_eY|NA6y3g8LKo$@M)e`wS_+n4dRSu(7CVoxieO8XZJH4uF#CK(3HP~G+WAO))`K+ z51G1IU!d9j=nLOqGkt+(lX;pALU%8E;99u_<+)a3VU9^F+-8PI?bEq&eBHppuP~)$ znLo5>ZD$~|pKZDpc3-EVbKHpaX${3AoCa93$QXEP-o#Xctj{X0igI@X>r%9{taBQ( zn=j1+rjf0D^OhvjTS~IMrM~t)qV2h|2K+7O*O8Katn41c*3R>t;%NlQkI0X#C&g?% zDW;MNO2vHD>SpW7c8vc+XES1OXQ$(hWOLIG4MhF>8=p;91{+I&Og8P>bUV z(%wwXkBeM%uD`r{)RR1LFpQ_bqmiz-ycrl1++(x?E^NYE`Af3k%3i^IaD>M z`0y#s#ao@}Os;3ior;Bo$((qWJ`?`45M{-gB+)+zS3>lUKT2&^qO6!e{&Nct2aKE> zC?AnuQ3HPwF@)$YsiRRZ(c-6=pmhfOa2a8Ajy@pV;B3>Z-Y-6u>MSLl0+~q>nHL8I6=_Q z=`u(K5)JS8<4MODBkNNCGkrJASY^8S8}|O8w0EvAG3s;vp>LcfIcCOeBEruaCq5-a`Ld z^1L++aKl^am=oSY-AmT-)==mZ-qNwNzJXop1J?;}ZUDX3C-kJ%3hIB9vI61t2y>|5 zq^E>Wojx{?qbWFfyF6dT(tZ$OIa?1My=hHTU^PB;6!DNp%R#jBy$s6Qf>21O`9iEG z@ZRv;)4}HB@UlH|A6eadJnUUhqp9X|m|<}DQ|tS81OSLfLI8OvFf8SPNE7?ucn9Iw zW}|cDH-ADw!J`24_{#ra?z`C{We4{TAJg>) zYFoCKUPf)RceuqwSZK;IWOXj--#efpIV9OUq?JFE#PaK2oaf+mFTR}a#i95m zdvUaq?ZuIv?8To3T=wn7wH+C=eT+?|BbL_irh9Q|P~H?DY%|@9|B$wt?8T)`*^8q= zv*%!IvKMDVW?#oPWG`-@B0jknztFMip3VS)`fP{mNrvNw$1OPR9LqFx0ETtM$(@y; zts|@3@su8@FPrgYpon{MG%}P>?-xQ5hHLU;0Y?p?6!)lt+C=#vPK@28k5=4^=V@h{ z8%nLT(eu(v_u?tNw9$TwC5@efX55RXG`oOt4x`)Pd?LAoZeW{@<`ehg8NIeqbdW%X zT%yFSn@%5=x#-CLFoj(vK*rys1NPK?bl@7Ar^C8AlkLS*hUC1MOX{tk7rGbE%>nMk zH-bs`;%U>u>%14^91LOb$#f#!<{rg?iB(a6hYUz~ewoL=L=PU)Jfa$O zbqg=e(>3cJo7JOh8^b`5q(CCF)`LRGq{zk)SpZOq^Z|COjU&9L*X$S!wPx4BKx_6S z7-p??8FTKui#d1R)xwt=Xft4EnTZST&0OAqJD6VMLrJQ@rWb*mZ- zGj|)(6I)O7P5_d#@>pu+K{&2jdGJkKM$(9tCu#HJ=WFv92is(%^IaBhiMEgfUt+#Z zTfUUuZ#QbZ_<+sv(15hwXhgdSZE3U_0Y|u}hkKxnEJoxn?ZcFx0aIb03$9ukTIUlq zxa4g!G-f5X8T6IfW~RECZDtnmkY-?v_()dx&a`k{3$xt`Qx-A~4yfVn^_N-KjLaFv zsDA=DpbW&RP3Vu5a1{!)YIFn#Y>AeW`(@ z)(29Hk~*17b*A_d*StMvFdp>h!{LSwd3kE!?L*7~r#r4{WUM`UfD`Hvqx%r6$4r$X zl8tK+`U?asprS+y;23s)fg%g2JdpyE`2xtA(sy*i$ik_;H^LpLd*L54IHPzIwG>!W zu~ktCrI>>R%3+REG&k}TcTDFU4(sv996;TlBRFIZz|C@)0C){9Axa8tbkr4$+PM2N z!zqg@Qu#E16Mr8Q6SV5{K#@R-B#32^A(&-yf?9pfwZeo!jBL^IWLnTvtpNK(%Ml#O7H{(1v4{@}Al8hERUeeKwmsk`! zdVI?IGb3hVGGu)oDAGqqX=BK!S<}!_imV$q3nT;A=d2rnU=$-y#(!CE{A(E1r$A@u zU>0N!44T;Z2B~RNj0#3WVGsqRk>?lp1xwI{by%`l$(C$e44jB3fR}$?k;RM}!IrXR z+lIB1(-OtpeYo@m<#c?~TyE_KuFZX7ZsBJDtFgfXR?jE2DWqrtv?jCRUP}daLo+P$ z2^I4Vbn=w1PiUBLppvIFU-sy3p$B;G&2Wbuir{XYw#BWELECVRt2kWQGHTX3EsOK> zM>AZ&77tqmEEU3sc`eT$-ks?UB{PC}ozfKgOT2NiCh@FFAHIim!NDQjFhidrdH?!x z3XeuVpU&_I4&<`3ZZxJ7k@P7k1niu{oO%uSdWkJZ?J&0b7MwvJ!4%@!R1V-9$A!-T z2ClQEs4`ir%;IX8u)>3@6){PT*t~{ozEow0FODp&VdtzB zO$wQo@^s2l`ziI-b(BKMK1#_(2@032OL=OM9dlr3^pfop)*q4BP-#Rk4^WNG_t(MYh>0! zZZmB1k_Cf;OLhrGMJSOpC$*QV3`tvS%Wy}$2Yr`{_%;J4BzZgx<+c&D?5{3k(zbLexyUB z4)&$@!KGt`2&eghP-WOwF|Gy($;shbXPIJL@^Y9~9CLqfT3mY}uUT3_6 zCFZJ1;7#@$tELcBkQl2-Bi8-wy1IA5)P=e+zL*2QMq=oyXLTQMMbVlS=N z8mnbfuB&uMUglSNO`eWMexbnk%$7DV2)<$v98@}%qpedLncM6s&}FSPJFRB6ZH^4ee?h+ss~tHd33}pA6c!c-#8g1~xNWVl4XY zTN)STc+*3pqVo1Fz|4`0`&Pd_DzjN-W!%E8(6v4Xc{t1-C0eM1ojqkQy)mBMa6aSL5{w%)G(1el}mP}`4ZRs zJv=T7Faq55MYR^%E)-V8kjs8NU@&=r#;BS?{X!-U5O7tb*)Tx#7oY(G7bvC$uodqw zKm&xYd%_w!z(%~k0N_Qk*^09SY!F!qyie;pz@TD1z4t0HXNj)ziw5T#+aioEsknzU z$l;zEO%6#Z_L+`x_G48jz#I&)KS!v*9E_|#M=8N93@OWE0>*>{QsjN0NNV!J(QkYx zAfpV6Dr)(ZLyOXei3xG^d7wz2sRSWs0)B>Ewo(+USVABc8Ac(dCnVD6Tu)3GB+?^< zNYp1C&}bt&Z8k6P>AXF6D|0?rEUBCf!kjRu3K3|`HRiw6oa-Wu3z4z)0u8CH7PDC` zu+w|D(|+XYzIo2z~{nG{9EmJXzpKaznf0&ceq8X z@OjKFW51iKZElomqZV(mU#@Ky(@<#h^5^;5s2GOA#DJ%1xGI$_31PQY_%aq+H zo`(5W4UCOqYL{{gKbG(iG%MH_6CSb+6G6Jbz=-HL!$xXgG<=k$_H&XL82dO0CHpw( zKcsQZx&2!A+(2Owzn%U+OTL@E)EyUO+-NKz% z57YjQeF5dD*XYtIHcqPLYPU0aIh)-WZ{YQbSfry0$5(|MIrc;MHE!S%hhwWa_&L!c&oHo)aY zu)(IFftv?$=@x#&;PN8JF6IT%d2F*>7y4L0_7(5X^T0#HPCH<8<}1cEFuXg@ZOXN$ zLC&?-Q}a=jjIU%Y<&24?oYdIKZHz4YAzWPd8o7sG)H?;X?W$OQm zSjxA6hN)fn?=HkHthVN1v6OvnetxjcbH`HhJl}9z^UQf|&A`zG*_u)Q0kbvF z^`+8&>cN8DpGw=Q2Mcz8s@P3ESg;3@T`4`COLk`X64wH`Xc*8HabZ8eldnY6u#Fe& zhw%9(SULd@KN}+#0GDXk#tEV{8wTJ00yJy~#<0!$u>1BGpkX^Oc2gFB*|fia*bW0V ztq2IP9S)Rm*@m%yGm@@&^w^@xqVC7{KTjE_Ao~CA?4=b{6t)%czcARbOafnLh6k|{Ho8m9n5HE z17E2tgSVH9duV2_L;JCbQG1HP+l9>$Vz7jog29KPL&jiJxlHk8I4(sPy?Zh(6NDNL zObg(w9pkVwynY3j;U#$e3i#`b4}H75?QlZk6PEB&?1POS_HUh`V!zKRt#Hbv_WM7@ z*dG%1d)W6m8rt{GsN@NPRU;@&Oz!u{zCUvj?EC2BqS*Hb`niyJ+L_cI{|(quzm(bI zr)y)4O08yvW3*Tfz_p4j6x4WFu|J$@Ya_%UOT=a-xiP&<*><0p`h zD^0&|kN>XQ<4rv9pjlo`|2gZtnq;}buWhE8{g_xi`NiuIx&%h>$q}UKcO1iTlxd?d z(r%`k0GDmUP~RUJEFrDoW_1&!Zh_6}CP>@@$QL&OzHA}g;k`n)!6-iIm~=H5V|;!u z0lr9C#Sn6KT=<5NQp%;+jq>R*Ogsr?W7Xwe6*`V>_+Nbq3IE$>0zi_%moN@rfU>*# z63iUPQu}9t_!9bN0ZR7Gg75nh=sq&Os*CGOxWG9g@qV?<>KquHCrB-ULsIq~GE>%h zCmzVTG7!ss|NI=BF*)ysxn+t?*j zAB0eV@+rNoL7M-A58un3umBs4vG$dncT*L>p7$OQdl$lKKGev$$?81n3woT8Ihhl zM}i)ho1AWtTv}!HjDyKd&NoOd?J??gGr5V!O>(&-QXVk53H>FPn_@j9WO8Tv9T=oB z_krp7j30XGLF>axDdh|ym*`)cVev@ElhBJe7xHdQHYHkGXe0V5_0nP+5t7B!+9veg zh@vcJg4Xmg$5J`cGSBRN^)Xj0M`Pxx9Yi|qCpKxl!MyvP`TkOBLfQ__JARgfbbN^T z11&p82s+05v9EgrT7lQ`=7al8M_$E%5E`B5z`zY}TN*jd&}tm} zW@+xk<*+vdaDHjqs3jE|Ee1IY@;OfK2k!WVo}Y)?Ur<|QkH zC4<|_uuLZ$USM4);Q%%?MUw}@yqVdkK z0Q^t=1;hzgG`<;@fE#L{1l_HE?agwHve4NP%82M_v{6K8#K*zjM zzxkHEpQ7)|*Yh_oH2D43%}L^VM}q5ruij{b`5YUIb9^1{m6a9whOIN~>vYd(@U9#U z$gN+2TzrV1>$$)FL))P=s0Hvd2K(Skgda}DgZLS93NNA?jGxgd+zxrr=V!zo6Zf{~ z_8jPNI+3aFjfy#Q)y^#KRTaVMHHqBtG6a@$qU} z7>kcLhL3l`_;~B;_RDkEusG@jxSAJknu^ZqXIqH?w{%M3<)P^B!BfKMv`zMi;elM5_aC zoGF!@`^|1tPlw~2Qn+8MQB9oI)YW~*%xCP>a`V|X6B?2kKI<4hXPv(4vo>=&OYNW4 z;#Ufi9Q@8Wr{6}g9e4S3iArgQ#jNJVB?#h7k zA1A!OZg$FooO3;u1~TH@c<^3@JKjhHdCO#i`U(=i@q@u1pZE&sX1E$j`}Z>5tn&HWqcK28^6!>X!T#Q|y*s%a0-PALq|Si)WpNTyrh0<|VR3ax+Y%St7ZaEHSx>ERozymYCc`mPjt`i+aA^B-j zEwov$uB|(GPC(} z&rcc%W7yvx#-Oj9Us)W(mJQ<=vNHOenG5@d3?1ERtiv@I66>(>x#zw%_YSss?sLzN zz+CJ<_dNFL81&ZUYAM?G!U_X6O2!w@Y=j;37hu3f$pmb$0HP223ou}#WCAu=06_@- z1u$qN8!tRdAQoYu1OqloCSZdl;DR40A%jqdhztXs%YhOy65}{#8*m(FCGbA0?-(IN zRc7~oP(1Y9*ZjEQmkakFs}5Bvq$Iof2_bPN-v!2mG~^-GlqWw z-&yDuO5h-Qk(Z=F-Z2~4PqQ)8G@xsC?^_tV5NQ0!uNpf1+vY#1^7Mo%|B=I?43%^) zC>_kaND0AMLAks*A(WXXX@NjxOh&I?%hBr^VEOCck2Qfk1>cj(>>9R1F;pueCZ)I! zaVLlyNcOBKm)ig#R4bHri9vd*FO=$4Vpu9us2qtMNW`;;S8sBolz}&%e zk!0S$1?LZRL=vT6E)FS`e}b0Wpz*#LkxNDf%3C4@GrwdKU-ICMT}u3tjMFfizBJ~? zEieut9fR>tn+PG@HlS?YF>Ue^f3)OgaR??iaYIXP7KdPRlQ;y)&EgPDZW4zexmg^7 z$xY%ABsYsgFuBQoU2?etQX8_#O?K(X)jPx)hmef@Asz3;4KT^P%uO&xyN=FIfj;zP ztPkE;D8erT$qW=iEzUQ$@QK_Q9@;Td%9rXYCcRP@ddi#WeJXQ9;-|Ls$4|{>@l#^Q zNxwDPSJ&L9g71{(zcrfsPU%a|6?Z+`1)FE^2+dv z{Hgw_FV6I(~a92{>!dI*rlh)9~!b)0G??`E538UV&%f zw>rxB`dVr-RHGt)tJbXW+oO?U&kDcsG2yps@oe~weJQ_)p31sYfV%HakaNYfScL}UOA+5Z zx1u}aBRj096_?s&%gY2=quBjg+yZY{g~*hRh8IB@r?3-cKUHS5(H$8Xdz+*N&_xP`GDwJLXxMnSH)$-!y)t#d&$B~iC#Wx_KZ{B{m z`_WU|@i9#6_%8qr$6ty+BA2YfQ_wbJcdXvq@EzTf)w3bAqFs(xUmRWe7#sV?v@36N zaf{XC_jb#EeTU~y?g-iyX}5Li;b^^O9baS1x7Uv}H=`MOyN&%$<`bmoGp%O3P{3Ub zC!2)JIr#`S(6vtRwf9SG=Ad~wgBR-r^LzgdkNaA)n!(a(Difs%jE6M29KZiZ}age@2_*_t`*BQt8)NsbwnNw+REJUin*q$*70v?Xe*wLBZ9c8qr&sKcKj?XlIoqZss?Dvi$v*Nwn+f=Zs#mGM! z*WC6vR%Lup*geyHH42^$5w*c@8GGH&1-%a=<@xg{U2{UGv$<%8PV@ChYrd9k7VYNm zr7wj0rvUf23Ac0vSuRbETHf ztn-m|c0P8_)?bcqsao@qjW_qKp92M2jNAO36qpw%1WEsr``c-*@X#fI^`8K%t*}~N z?}I3?P+s}148L~ook#DqfY04#eVhAKg{Yo{0W#vnvGmQ{|cZ3v#9 zN2$?*SJdRdw*>DvJ-JjZ2HlU_D!RIs-|~C6qipMl)%$7uE{v{x2}oH99+${Wi*nm7 zd=7B@-yFRa1j~_jEBJjmYFDQW4INOecy_)HT22OMYYtZB-n#&Eqi70*&g2>C7zIP8 zo;=q>Cr+LxLkB!g;LgrZ`Df>+`F?hOhDFZKZ(*&o^RsN|Y|XXZ<`oqv0-n!LX54f0gAt?5CA*~I6gC;E*vgr}=2~Y&EaJUubdoTgBi4Gq^y< z;mAPx$IC)GG%buT_O2goGO)lm0|Sm^P%=Cn7N8H;F3qc?pMG6T2 zmb`LQiI=N;UWtN56zkei+i{9_JiF!;S%vTT>@gEu^x@vL;Nhm4O8YtBG)T#ZK}KE+ z41jr@sB2s8O*U?UB6|J!mNPOn_!aZcJT^m84)Pb}+_p91AXw2uv`jH8h>2YCgWfB^ zjQ|U5ER2acy9@z-)qZ>|10{l_gz%_a_*p={31gH6;^pAjO=a)pvlPLQ{e{AGHL5x7 z8z9Wj)LcLrrY!tQJd%fNE?5-LRA~k%S@R&1EL6oOpM_V?DxwwZXE70%xLA1ISNTwN z-(dL3DZGVfCrk;h-;b;kAT0awL6Pf~2;aD=dF`%aV>R-6A4TWAA0@N;z~4OD#b-h= z+p`zU`DD5ByYF;*&md1Zy=UU5Q?!af^Y__3+vkc`b8!0)0=L>b@Rgx6wG!?p>b;G# zybKf+**;P*faJM+Ho5)A@4hE=0$J?jTYq1`SnLG9@xggT@w}oq#qb`QxPXs?Tuuo+ z5PhcRQ@;3#%y=ap1>yWS`I%b4Px}N}W}uk?so@JXkSjzPGROG!Bv6#$R>jzs$yO`l z>Mu-dPB!8#EbAj!4pZJ22>|+ecnS0+rQhC1gSRpgLiRa@Z(%?V#vPR~Ey^HQTL)#P z5kv`wiNX5azoRO`S)5Rti&G^a<3Z2HN711&7Xrl6LM9);9Z+Y0dqAO+i{N;eT^LE{ zDnKu@q>S5|&LH-*6x|2*3+~ua3@a)Xd_0J7t3r_B%Kminq&G%Z){WZcQ7#f#E$}WsB9yF(|Z#Vo;Qst)ZR2+y{F`NJg@n?Nc(89 zRoFC2aat}sY_U*6b7AMFjMQ4vJUsMD_+$5;pFRE*AODy|FSD?Nzy0ud z?=J+4)M&itHq8}oZdY#;$R1PEhxA0)2TMpa#as>g*zaoDPAwN zAqAHpU?J)+8F8={yS<-8#|sezs2lZOfakM*0I^eH!L?-Kx!rdJ3!7SAgpf(mIVlpi zKrXD-e0-liVkS4uY7Zuf%;A1{-@_-EO&_moYiY_e?mtNW?Tt=@Y< z7(?FlQ8TgqdS8~AK1wFGU!eQ*??d~d^S8dDJ2=_S3JXnv>*o7Yi(Nrt5sV z6fl>_JGqHuouCX@s909-?SSYc-!!d~=k zKywquq|)&{5H~LhI(1LQ2c|U&_p%0A}S^8kb*)9=k9(T*`P-|vmF zfQ9X)N_@;u#~mMUev*)}&wc2V|17)tF{HsRbTv86ZqB3P$!qv*jgKE+$-lOVO_e~8QRx= zT+@%&*Uzi169W1P0a}EaiZbhjfOUdE9Tyn7cKtHPo}!e9DDYU1zZ@VfKYSN`3D%}u zqxSKK0}ZmTcaPu2M?vR^bNp3&!MKWrQy7=nFO7&is_Q^~_aR+w7XFiF$m&q?>dW;@ zujAtULbM<UwXk;g{u0lI z$Br7jQy%|%$}`TwHn&q=c}JQssTxacuVLf8)_e&m=h!>TEB}xdaUHxyPfFNsI#E-y+MXy)K=sJ_WnJgl-=a958e*9frYkaR4;??VM!f-02$`ASQF7z>yn{(qZg-C-V zW}3+iYd>4(q8MIG2JJL`bCc~?tf2W#j1ueqBa69-SnQ1;x2lkHqeIwBMFUhjz!TdW zn9A9_1#j8%E$YpH)m8|h!dR#NFAas9gB8UeY(dT6;SPvtH76+BH8+MTumgGor3p3? z@(U5CCL%=(Gz58o-eGiuA~r9sbhKcN!?MH5zLbGnB8C=DW80YOgQLXZiEA-&7CQaw zn51DHYhGQ0q~KeA0n<8(K3FNtwsZ~qg3j8`PD|!(r>S$f7o+FSwCXAfM#a1^r^N{^ z^APH#{G$#WsrdOeFao|R7RCnhctoNpxs*+P`KZZU2(L6>zrD>S3|D^@?Luxo8Y6=} z{W1J;Pd=7EkXVnCU*AZqKqVF>>Kg&>$;Ttt>6?k}!e;1-t=v?Ud6rGP5y$PDcNXNW z3SpJVBT9M|l`|@W0V{RX8?$j^T+M$Y+?4au<%p60rn3)QCj=EI1QRC&5hnx<8_DE< zB4N6A44FKmGWnU78hpLuPvPFfYElQHgl5Zh5e)CaKK^(z0XIJG@i*}?5zueu3+fZ$ zt*2W8)dKtrgi8euG6^sX5oG={lO}iW1avuo$vwgg*4EZFCS9#~o6x8&QyA($XL4^d zdmK!ph`^d6lL`B}tl&VJlmpGILJXRPoLlsvK{jz3mY{Q$eY^X0su}{FYBQpr(zM*8 z{NwI0rw8kHMuzfgdRmfki8JB~ZKg5WE5r1Q?P9Nj7N|37MzcjX2xZU@10Gr51R*7_ zaZ~p(me;s;xo4qfkIub`BfG~=-3Phk^}d5wtLL&!Z_9y&NllIqnv8c-P<;b`TI0Z{ ztxAW}lvP%E)+#(Y;o0WH0Fm3N8KYCT8FI(*H_yuj@bPVi)!RuHT{!Tgu3| zdVh$K!0V^&Qn_33L_UMh1RiPCG;)rf9-a1djzZU_g>-H|8SspW3?|I5DU;G=M}A!S z3nxPFYXGVm$Pcvg98{vAlTN)yWeszEytA)eZMLM%mXmg+J=hYZ^`fAGtrLfx$LO!x zrWP;7qC-2B!4V(hgS#5A3>sKck_d+g=L`Uf7BUc_^JSQY4TWRJJQOb9i-GhqG`&l6 z1(41qef3NmtSmh$nXRGRU|PxA1%4=7$)~jx|NVHH7tEyi@9P`p_d&FyJxA91bGK*6 zSqTK;RfF$q`|#Z@4ng;pVgkVsY@?kVMvFOIzo;+A;DJasvx0c=3Rl7RKTbU8;v87I zVp~>AtE;5Kl6M;>Ve?9e71M64?j`UG`>%^Q$)*)PiP6`+P&)KAt#>c@NT6t54tPvY zb!qVOUjbnZV@S)B(sHh14PMM3M^@THVb>JaQ2;0}J5zlCgvDHc;;qfYoo}6|uVFDJ z!{EjR%~2YKiPxi~Uu<51PUj<7s^T*>?8jkFl0gPqXevKa z&@A=*pf50P3|JQHu@t?O)A=5!h3cx~!*PT@3c5)Q}LQl##@yxjYT|o#pcWK0|P!rNa6_tD1Y7v{)}Y};L^8Hv&{sf zM{0D_o=4H7mN;o>U{4&srWjYla$bDzx>5Mp7v{ihWvh}Rlcm~Tw0)5mHOCHm-$w14 zTU@|bfK3~Oj$2L47m@-Pkm(N!?tI6dmw`?QE@(6k&=hQHP!+RbGd9W`8^GIAUSdk4 zzQV;UYIyp!8ifFsW`zaa!8>A5Z1CqB!ZHvven#*#GBEsE3vR>x?qWJI^uT5u@#g3Ko`gE1=%)i+pp@^PThqqu-3p+P+awZKXuj#1#|J$sfXtY=f{3Zp!xPbqa4%5I(thhdtTeWB_sm4rtA$<_Z4x-a}MCXO@?D z=3m~GfBAU+Ma)i9D^CUN+)fcJp+^rmo8&xsKCH|Z=7Ib|CwOKy%I7hwWXn(4J3&l@c;WQvh3uQ-;BF}F22=%hB?a!gDD)gERjC~jn1zm_kr_{pdAzK%lL%61CR8P-92P64*{!j_?9 z%?-8O2Tt#ss9hO0VsAH=G>)ti6m?+zNEjSgpdkH;9e1HuWf;%_KuBdty>Fx=u+BSL z8eX;O*BV~oL|K?IFPuUPo1qV~`FOdv1@A43(}b+v+OC`ztzs`O{00xnq6ATr#p7J^ zWR_fCB|cT&&5}Mw-pN$b7)-DCEOw+a^fACY|0xi*fUoZz>P*im;J+{`iDes~d+olo`|SY9v=w}62c=41|P39OHpU3_kN zf=Fm4e2e_ZYi`4a$Y;}%|8z?|)a8|Xh+Rb3mR=-sp1Ppgih2MOXqob+cSKh6HoPs2 zSj`vV7l9teaI5&d0(FE(q!fY>VRAFI$tQd_^$?dT#$YD-B8kMgExc_Po`H6@ay+JX zj+x5HO8#d!CmF2073QbjivbYg0BB=_eNChqV(S7;Um1N$GP+l5oT$}&AxdgFt4W8A zn)IyZPvKb|ZckS_(AG#gjEi#vm=hj4tGMXE52Y=3#;x9SP*+^n%_HV1ZryE=W{R!v zSdn5nejAOY*6>OSX96=R&|irzZbm)zUV<#M7JV29+D2UF?TJT`4>J>g${vPQ@$sjs za6%y!W`{R{fo>gyVutR4&gP(a(*iz+rS5Z@>aCh*BTTD!VBzUO2Qic~E3hwlY!Pps zzIpA-Oci1!AK8nzE{U`~i*IZ}v3wVX4aY8aqX@u4#1tCfoIxRp=b$pz8Al@L2NLHE96w!P@tnTw*sz^R+--j_uX7Zg0#qlxlK^@nZ~(g z%RMz`XvS5Z_Ew$=PHG)Li;^&)HhXWxblMI&kehnHht%y}qm!nJBT!Od0iMa_$m~Nf zu;htJSSRG|hr1v08jmmy^k!)7y$mZ2S+4g|^pVIe{yq%jwIiH4ctR64)Emj-5`kfr z+HjoxJW7{r#IlZViWa{n5{F5)gd?`LAvl5YuB~n)BH}iY;l||N{4wSj=kJKC5>|Da zpGUv=MrMK!KbE5z;BCr8c$WmRm*BZ>A zNsI)yJyXrb`ln`7|uN(!MTj179rF zHhusPY-3(qLhzinQ})dhs+Uz1w#zFAQyHi|t4B~f4Ag^&s5nRG)r~3zM2OoGeXV@6 zgG+DJybHayUczTAz`ukSN=Fy}L&aZXKN{qgvCtV-cq&BX3LX^q5}43hvE$vNQ;Nsk zi0Ark7R3II!BQf_{K5-y*T=&%p3B0&xO~{GM8-Dq6+Fn`EzEfmv7$t*s*|3wjWk6F ztdNVOV&LrCK==Ti@OO`m2ZVl#6A0vTi~2;7R7c$oKBTJ;{rzen8eFsLvR0C4E5PYy z_8O3wd=iqFc8khXyd_knxke|X#D<*KwH7g}B_TU+(xipXS;lsjtX{e}q+rw>&gNNzJ zG_y8?ax6u75Cr+>f(rt&i69EdMN~xiKhN`i zXREH7bo`S)`jbwk&bKe`_kPRszTaZRx!AIw4$p7Rgp-Ta@WNL2;3Z(ra0b;7J!kYl zFFb3IUS1NGThYS#@H67uQU=Zz7}Zgn2-W4Xt9767K8uw~YrfiASm?r0v22`a&BM;n zuFMPJe0Yf!XE9s|BQq|Ai!ouA`V(f+2y*9 zo44T*)@;QCpM6 zuwxZ7B269qZ{QZk9OoA?7LhqxlVN+Y8BQYOrmPFs!bs*@dQ4AtR@4hnGH!f8D1P>g zA}-xXLF1LlgCEz8p-K{6?8@#eNW zEpoe+t=+UX2o@W`!~>@|+t1<0Efs8yfTaSL2v8+y3cyAPeW~VB58s8+)Vg|c-HI>| zFL62+3ueF~pjc7OtD>ezgAS#XxCl@J*!895qy`Mk|87soC<%tX<(NDkyeX;^2OG<{ z&~c!erOhkf&B#l7)4Z)1twseMkcDt71Xnk#Vp$OA5P<i^e?oP5i_QG^ug7A(3ia-CWEU9N25Np zg}hYUF4E#qmRnQDq~)TQ4H!GSm6=Y}7`dngW^Yq6Zmq1fwTNkJDpv&8s=N`s4>9fh zC7AK$NX=Qm+d<)_kYp@?mi_RY2bo(UQo(XL;qe{JKsHXHU2j5$m}0at0xa7Pcw_5I z>`Y1}ccL(dyrn1O805pT6qbl(5#OuWaQL_IprjF`pCV;jC9ZpE!ovhq(sJHyE@0R# zk2*67{YE;rTfxD1BblBF(=~w<`Zms0owzSAC&^#hzH6dub_$<^30zs$T3_ zIH!*zFiXRJrwB=@b%VM3S;>`x!siiokHWHJI#~litMy3?BI+zoM3Afujicj^0d{bL z1HVYQLc-#$z%3Io9Hx^s4g*?e;U*cmW5vd?kb{^aySbxP_m;fT1un-j{RXp#^#q*x zGdiFnlw0xS0VtVpRg=r?MvkpGf1km8fhKWnVM9_}^Es`j8gn|s)6|4PS;^F)-vOaw zvT*l;Ey%EH)i}T47G|X?dSvDD-N*q!G$iQ2qpH;^Yr??-)e)c`Ru(ToWf{(m?6CmE z4JdBtC@&m{lj8;(rQ5{RYNC@6__-m)AEZ=R<~F4lLqXy}s#TKk2YkYAXTnKF!`02aT*qo*wN#Y29vVd`MYTQ{6y682 z?i2rQ!Zj+JE{S5Px>erO&V0+z@jw6x2Km=I>AH!slZl5( zBsB(&tixHwIFFM=;7|?OI52BsZp;U^HsS6SrxXe+jiQthkx6%uOqj72 zfxGr`8A!H5%FHsdO1a59zd&Ez{!vm5L|9DdC*_nT_ z+rl%Qh|0HxkFA3o33<}g2;EUP5#CSBHs*4UqNJP zv5m_@9uIGCv4Pw;4ak}i3%`XaL7s^70&l0WM_4I0n^V?M?E@Oe))BDgld~S5<18%w z*sYc-Zk1E4%)^)t0?jG^z*N#1xJ66dUk8tg@|#uH;L^oC4EgCSjhHvVG*H2aDIk_+ zIqXc$E;~YIf^FT6HILzkX_}~;Yt37+th+43yUB4{Y3%xNu|r0|Vk_u8@Rw1VVCsP= zP~qT%kW$Q$V%3MatSQIc*$vknjGP*`<0Wh?QH;f=*p6h~03W8}1_WEhT4I1k z#76Yh;Ni?}1i={3J)3TwAntGlOeWV>!xa@!kG&k7X$a#uTL6NGW^1I1+q{RD+E}7B zY*>?!?husJzdP4#MOUIFF0uh1u89yAe01zBFln#+2 zQ|rX3LGaL;4tG}&psx80@O%PcnF!=+V=kcL(t+ zW)rSI-?hR8Nh@3k5r0@Mn>jQ&DSX(GU4Rx& zDDb3)offzeIS6gXT;#`a6&WucfRGb?dy4GRB?VdcJ=u_+cI zphw??3qHDTbYvR_;I(9j{M-UgLszz0 z+z^tkU*d)6TwVfNLB(Tj9{MNbIJOv_bAuE`qz)0fpiho!dna+zbsU8m{ zPIUr1)|l#)Ba|;#;~>M~a3rB`n4_;N_^zbawJ;{B=ZuD(i(_kEoeBS zYC}UH#|dkNX^1>k`X&azN$0lkD7Z4Gr3b^cqr;$X9F0Rns0k$Dj+EyGsMKy{3^A+H zkJIuotWGCQHJNLwTvt$EcsqFcewn_I%+vAgX=~%2t^rx6(>_$D4jo4liCoi7cHnhZ z5>4%v9az4<91gLdPm79#VXzSA${jaq8F?MF#6;~xanwF&l)%D-+yYjoHJ-pta0aIL zMY)#aad59FlMl?RxT?nCO)4amF3^$dCRPFpQPfHu^adG#OjrTb+hnQE89dk=#Dh)a zUN={dp!=D=AJc1GZw4V2sR8^$zaI&5yVIB`#w)bA)@-(wiA&{h;mO!!^NW zTncdjd$=uFv7E;7us@!Gu^svXZjB**ONGBDK}6pLIO2{Iw^JWGW4?;L2q!OiY`inZ zJeHc+xt*57TMuw5poZJxaF2`Me#H_m^s9Fo0nbq4Om-R+S8zenIrFp%t~|o?m_BYZ zLO0lR64wj)Gpo3xEDT0E6K*T{U)pIQx~KSl|bt#T$4s*Xz#KaX0T;qp~#R&)~CIpV@di@~^yN zc_EO=e?@cQ{L0K43BTCvj>$1B!5^2K#$lU5bs2cgFU%ny(#I3$VE3R{7FR|(T6%Ub zAUW8{W6Fj1AkO9D;rDA~aK}%vt=Umxt3IQhRE;)oubRfS02c={cr8$SI1YLRrmib?z8|) zUS^qw)vZ=-x>a8o$0ishS(^##mf@>$=hk7aWZHW^jjP8HE3D$i#7rm%~dX>`tPXwT0S$q90?oblB zYmrN3L>}rF8>cTmCi!Zq@L=Sv{i{avrO&)R%Z#oGrNsif#;ez`g5k<<5-FQ1g^MQ zqU9PiSavy8SFSalF6(Zt-a22x+8V*)2yxX{uFX;ob^oyH-Y1=*Qe)x50ST=IM_odz zXoACY4RDJ~=L*#Mr^(0bjwf+PRSBoptqQl^u&;?zjG~)HYIDZsa$|R+1KV;I>98$u zGZZdC@#C78%Kq}!%C)))3Z?%m^_^^3-rwLaGsc#Mz0<<_E^L&h3%<&yYjL+$;`IIf zA4mG0?v&=Z!CR`7a=nPVsvK#9m1~R0F}1~I`v^Dnvs$;_pfRwl{idQ#X=)9RCx8_o z>u(l)7q^U7O)UXAedXG6_fT+{yguTU7qPP(_r%sR;ZL|M;AJGlFn*+cOqU01+~r+w zIHMaPOUtoyOer^1k&1;y7}k??92nMRT0tSn+mA$8jlsxov5p;mUc02$!#&yeDblfP zj=s1U1M)EJr5-vJJ8N?zg{41c-wz77>!g4S3$ai117LiP&qeIcrWtgiIvxi;{a|0k zYZURVVE|^o!t83_vL7sKWXCjG>KwSd;wS8Z3>TYODD(Xu~xY7FzDe! z3jCMnTD3dEuybSyZ>r%L^)&^=-L3xznOwZUc)U^-ArIRp`Y1~hVopZ_-I4vj#;Xo3 z*E+^ZjGT0su=rLzZ0vKDYIcWPL*0X|T?ySfx z;ktIKvv3eObhhvsQ$zaqT!?-3%dOFc-^PBZWikdD^yk7R?oRG3jH>nh!}gg`_rDlT?&F5!&eEsz zO^dem3(rNrzv^CSTWrP3_xpCZJL&gr*YDezem~Jdhi_H7hg#Jc^zmx<(0;7TJBJ}> zfCwfC>uy+pUN5X&2LTNBOkdX;f`l69YFBNfz`|j z1O6QlkG)|Si|o%LwERZk2vxsz`_K(yA;hd$t4067PFiY>#UoD$v4xF1o!0om42F#o z{*8qVj6L`b$8D^@i-ybGcNW(6f6SE@>#tpHh-)BH3B!r4u*GiNnruUkQi5Q2@`iBN z5$=y%q#$|%C7!u$8K&v5pf=v}eA12m>A&5dT4R#52jON4O0bWrsw|Mx2A!V}}F@11@_|IC=~-%F+~q42Pqg zwcE^a8&Q+-7uK8dyG;QO?o7&M1N2l^cyhYsHJIm!z2A8dyD_c;os?OHC}FUJRY76`x&dnSv4 zx}=t^F)nKdsZ60<*o`!VAMA(&*{6nOR-BE-y5C2bLm2A-1eT|+ua*2g#nOCfYPH;1 z?Hm@ytHTx?ZYnS>!=c{JUR*DZlZ@3dSj$k2cMmNK zmO#P)#n@r&^RVQQ3%5XY_AOxiI1Jr5E}X6K1jd(9yag-+k_(XAldvqpN9Q{J78Xmfyyw&EGo`{l z)S2sE2L2TNfzDW)`T{`RP${_0UzR&WD02XZUj)r$H;m&KRuP{V2LP(J06#Vb#(rZGp09`aa5oh^arD{1`CrhamE zW6V`Zhi~3_L#Xlc$aw;9Be+W**TWi>4K6|~LYj9E0q#bBie$lUu6jNZBG=SMk=BDX zw>mtAH8t*Fsv9#yFtD&>$f4R<+e+jBr5mF2a2o1PCl)AC_+c*9VE-Ri@PrqRQMnP) z*qdYN6Oh+gwzEL8t>1-xugBHu#K<^PDx4ReDP3p>9E`t4inMV$3ubki_ypRg5YY7= z%Iuze@6_ei8!~zDz5vOHI;*vX3ya1Zq?f7-n9NP!fbN)GF{$^^Hq-d!83XBflqAQ}4*2HxVAGZi}#puyL zB7_6HrTw3`uy)Tjf)|SC^A~@cM~XMhe*4?q!jb5o5aVdEyL&C`&{>7ke9mcX^{BA$ z0}!2kW8*N8ZL#}9M{cW`ae9rGx^o{|yX_d>qwdbH2Kw$^J?hhN^xWnDM&I&Zr$VFr zC}X#PLjMbb6}wFqFtMx56FDc8x!AoV=QK{I%W_T=sF~qkt_4Wbji;n_lX2SB=EBva z5`){|U;EUdq*H#ZMy3rmp2}=c2P`R$Y#lXgx5~oF1vPSRyAn54$+=A?Zm5%UyC`u( zrJUPR;x?JM-7j&QV&z#E&@tvGyuR!B2}A0)v$gpg!+HhY=fS^)$9iLjae+Dt{B1T% z0YgR+LeZ>U&4SS*6GY9jH|K;Zj1;`i-Zy&feeI(4EJ<87=pc;|Y-dv5l#{BBt|Reg zk#B)4DBFx{rrETa5T{glY#e7fjq}P4S!UKOiC1<t$;%#9lq_jEQ(NMcvb6KX>X6K+J|)@_86OIa!)((=F&JX=JEYY3!Cw zN)_8a?t8&Ne+S;$xTT3*U2}Mki5D=n{5VACj#d!+;o%&BYaEd7K)Q;@8*T%PfsElc z9t6ZaR$=w~b_<30;VQH($D{07b(?-n0_pQjISA~>Z0ZTNOw<@`(cLs0 zcm&RP>;6cK@>(~4btrtk$l_JDn!tG1)r0B{IOc68&Il_eg7)|SSupZR5M9^JDmIJp<9scLjF z&W*3Xo`=V=!&qOcqd<0vPocXfp6D#TVjdDK^;$W;fw&%=V%A z#D~MX#ep~CJTUQLSIfq^I`QFHIm?ZUn(XI3G&$v-zu4qRXQ{nNsr_{lhdPstR_`dS z_rtvvG^}fnW~%aAi9Kmpx1E(7kH`a6(6^+^nCzx4?NG(0t>a)$)9_-N)iWvUL+p}% zdoOm^-3nivLbEr;z)!Y@c^J})?;XgbfUf18#a)=Xw+pOs2@d@7<*X&F#Lw$AJLo%n ztP20X%CFkXP-mr}2=;#j8^&;dMl_79jn`g>GCv&oSo(9(Bz#=j{=WLjU!nR@H*4Ss z4u0KFc;K4iQ8J07J5xFcv|jlA$4?#-McVX*n0l&LOOAt?>6cqgLyBCZEg zc_5W%kNf~1;k7v4lnqT4=!AcGkqs>LGO$GQV1~E<(>$QXnT$e*;MO)d<($-mB#&BE<_J0xsBx2*4qCLNZL$gdCJ0LqK zIF1yIY<<;jscav3}f0uC)&i8ohBqd&5dn!Cnz6L+Zb-2$U`AcV> z$p{<=O46);iZc%r?wtb>D|%=TN|3RM=t9(K9#2t{|G_uULLw;Mv+=R@V5#sbG}QMc{Q`@TK8F}sf){UQVA)F1LAW&n@jSL;@&bIm*`!CI9u1zy3n-98ja<*Bv1JEe8{)=N zwk?kxl`In8Yl9G6g8;8lu$F4#u|x2Jy_W*H+#Aq9x?|tQ(?_73{PVQyqNI0aO6%`t zL(HE1CA2~5rJESyPTmD$^ahODCmWB88wNKQB3xZX_~^OZFnQLm(8zr)cu`Pb`U4z!kUq!BBltcF`4|OpNdWKP z!2S`Ag4v<633&&eroo2M(rt4fWUFjsZ24GI;0>|>NB`{|B;GwiqBgn1U=FRY=lyu= zhk30cuSaL|N(SP(XX@yM2QhsRyUZ+@v}-K9eXB(Ij2UvPEMV6NB%jY8yQZ-=3E zelwWA01GKzx5Ru)g)1=4J%+UG@>mXs>h(Qfm-JP=n&%!Qo6~Dhbv+K%z#EhgKrpaV zQceh2Kn4`AbLD4H8I+GzEE`39M-dd!-kk#9Im%!RsEn<4d=5~19&cLz3bttA)CjfT zR2=CZ#?_S$h8%{%Sb#%mGA;9%bJ)P!RQNQLC#oR23F{nhFuov#>+$>}#leoD7aox> z+>k3A4un|YM#3RiIBfbuWJ!r_tYt>i@LXRPOXNMP}gfw zf}QH4VEG1U#Z3(8=Nz;j0(x6lz-Ah-LwRAIm(E(}=q#MKn-8dA=L{JIW5FtJCAuTi zv8{Vo_rE<3G>bk90n^btAcY7^`>Jq{9?qc$YHiht`?0QOoyHE}2|<4WffLpNI3UyB3y~fKfgmRDP%4u^7$r%d z%F#P;J5z`qee5**Zp9c7miJW=NQB_76OL89QQ~n)+gf1B9o^kKwPM`AZA5nGHd(%q zU1AN7SWTm#6&2YzmFdKX507vHU7QA!2V+OLGyyJIo;c75E8|DT4gjk>gS`vEFpVM@ z)UXVO58mWtu)u=Vo&h(!s0S3Xd;p_NX9Z-SgcZSHFT<`eey-(rXAbNJg@f*lXj!i~ zL&LZ2E7ghBu+|+ua`diOa|$_n`Ci}<_r{+8pbL47Qv?hB2en}V)vEg{xHR@*;1Hu( zsqjqj&f`ThUKR?bKQVymJBMq&HtfVqj|W*V!e~ggUhD)A{o+Q2l*jLSwccdqyQ~Bt zXw=TDV}AV$#U{V=r|wUW z{l$&r2pT<@7SND$*%-c6;6m*GpgjM!{TQ6^+&6X{?*EEE#{FC6!UquM8nrPe5Ckjf z)ysMrgCM6@ztU5LX0U!=+n+8vHu zt25oR=nc#0Iv52}non~+-jCR&#ryIlTZ>q2V@awV2#8#B&*EYd(qdGPDSigMZv8UE zbET}hb*JiIF8l@h{1ei;VR4$LCUA164N;KB0ghm(n_gPPkYW1 z^NNd*9FR)%2vxt@IRKSu+fGcJJs7~V!fHdB09QUeJ&MJ_7z1_e_Jp$sKa7Go@?pf| z#Ed0)7+lV)zY)t;K%4=LmiQ13Uj9??_M_Kht?+G*gju0!FCn)Y3yWa` zYZS;{s(a248;+z6G&W@?(5A+X-9%$E6dss{5JoL+jToq<-QF$gugajHr!lBjY)cU; z4VUW+rsIN40bxM3^9F}`BKXCimckU>t!qi2dI<93-^mYQFxn(PO)15>4^1bs0d~Z; z%CgB3v#kJ|Trsr8*_-4n&Ch<}CZu&O^SqHqAD8MUKgsD>H;Q>W%!rNC?3t%=RbLTn zUY-#EhT!INYfa8j&uZeDd%Ri%jIjPSwr&~ifzDRy;&oBF>&$fEZ#)kfYcv6ZjvfU* z)}AQJkDi1w;6a~Y;~F2AJC`>ej}LT66VVljUmq%$Cb}cXqG1f^fge2#ZVeAlEI*n_ zXq{07|35kDYbveVBcCZ|y|h><-FQALdI@&ZJ)Fs$dOW)mCfUmR<6uH3Wg)>zgpdo3 z(rE@?zZzZ*=x%NymB32D!Wc#zFrsmaD0LPSu`Yc_xc#590aRd1zFLA|=;I0k#~ify z!ZqJ7*UWtxnS1?hWO=UCuxDv6&L>u%fkh`)@p`bBGc$Sz;fhNSLm1M+O^$osjM-ox zpV^Jmz+&{$lUF|;9Ky811GP0=fG*qr#Gvz-fqr)qRu{4fJ z)_e@%Y8YJpz$I;MG5fqlZ3)*cxQBzjn%vp@e52M6@>4!@6F<1K_XYZv&%97y|IE$$ z24`M`FU!PO{4yH9jK?qI@ymGpG9JH*hq4n}z7Svj6*tbn*WOR$(_TLf0-pIHI2DVX zlSjd=(Q8Y%R*svRvoCdZPM+=KcR$AKocwIg%bpL@Q9XM>Y|I|^nmF|g|?S36JPCa9adS-eBbSG1PrAuprd*?cHzQf3~#o!wmI(a9eC`ycp(NZ_o$p zAjG_Qerp03G(JfQdzP@5P1v)9LFc0O_x}msT8jQB!qA zIy}4`emnMD)+dT>FIrRPMTPfNvDyT-7p%$|ZOQdr8(-!Z{S>pq3NQLu7*N+AOzQf- z;jr_%KED{f4iOfC6yJgGymCkNe+8C{*@wNtPa@ARvX1TBPt=N?+fUSsW4E7Z6vuBr z(JW5fegdcVC-GY@PT|)tPUDwrL+sHfzJnkU-PB*E{s!87teXMumNjzHMj7-nB#?kW z%T2HCAHO5;p{-c1<4M)ycT}j$UT%0}mE(6{8wAWvZ@daKjK{s`CRSSfzKk+{6lGkv zrg#Ex$=-eeDyro~noLSVK znGEgmU^Hmtdq#S-PqDx|x3`C}=2;jjxj1Hb>iE51fI0>|N{W+fe~6WOaTkqSie5;! z9v*#(TIN+^nd2}ojh=%^*?!#r{5IpY6P;trT;zxb*NZM}P`Ej|z>SRy2S*n=fG%Ul zK$arOVmy&g^YFhh&BM7gABuAFZ{il*DFi*vRHBn%uby$PezN9bFOFSXNm%yh`LEkM z65e9Rot4@@5_CWF62^X%dxav}0(s2|nw^Ue<#-?!0s;^f>r0{&AP`$P9r$&y&jR?k|)%y)MSAILm8ifX(V_ zl57QPwN}MGRr{a??3_5xcrCW7syrmyB{MV^9uDPLGc3y*HjVZb1i zHx%OlZ^Yh={olK|ojcrR*3c&S4(vA5yZfZ$)5KNmZw|wj^0(Bm*&Z&VmVFhcFj`1{ zw^?znK4KR|4x?a2u0C)r2aeW9FQ;)-b8=V{)8T}~uCT58S?$b>h|W>P9ksByFvK~B z9g8AgGb5cKx{=uiu`d@qVQ6v3!urxgIA)Y|jb=70^ib;S$er;`PWO(TZH?>N<#5~` z4gMMAK|T(+{wX{y!^iQFW*koE@o_O+@8t~{ZpMW<8P04PnM?L5+sAjU?q?bz?f7;h zy5rNz+){|E$tsQ)D~jQ`0*J_(z1*rMPE}1G5LH91?phU=sx?{Fn#>2<^<9jb0!@Uq zv3B%aHfv2`CLpwiOei`F$p(Sl3!dPauEZ$J7jP~Tzf${HcA3y9OR<#Rz72+TqzCjQEtz_ z;>Lf)@RZ`cUqU6%{C7ANGw*TR+sMUf6Yd!9bJ*@rayV-+wmZw7F`>)|>6imnHOxDK zboC~JV35aq$G^x(39(j7E|LtfVxeW7NJde;E z&m%O)^9aqEc|_K99+B0Leh&Djxm=g|U5X)P1Q%t+ihsxh1+^cR_szNJ%lB&nNM1#Rr!6dA{iL`t|) zxByHLMTe#-o(t;nToAY2cWy4Yhr_%IkeBKGID5j!A-^h8ruWw<{F#@+i88&#YqEl} zyi9MSkDnX&Ka}$tJnsK02jqzj7J%bEbH!LrYclSCh(T=J|2&QHxc>!OD9U?6wuGBX z>J1cj{3bg7QmZs^`|bl1rHxyVX7pZ;IL*mf^qS35^hnq)HhB-_5BxJR$w9_!m%3F% zJGCxN2M1k7mK$#z>A&7&) zYh^t2FvmlaPSW7+bK71m7Q#sU8 zbH#S@H&(}wa&a?qwOk$Eoo1jq3<~#$J>fF)x3nxV^-TUI>KR?Q#s4VRK_V~YZyaza ze`6a;{>DToe`7wBzp?OIfk^)LKG-OKqiZ198(k=SqYGtk*u)Ug4cj+hqATyvE_FvB zaFe?&k>~*t8-;JPSQ5#Hayg?GP&P0)Pl20{0dmCw62QWyqVk1&@mg6kCN$(g< zY3l7kQ(P!$z9<)nr&coS&>i6^7Bt3FG{<;~<`_@WoWWDFrg%!$dxED}P2njSQanW~ z@D!ON##3@?SSt`uxgcsR>@dmM^LR>W15fFj;wdFCVtF_`C8uG_gLujXQ69ik8LKUp zV?4!Po{`JRx>G#GI$CNmo>F!xo|2V#id}agp5l}TJjFif@DxjHwQF0+iKpbK@{L+p z!&9nRC*x~o;i*4h%EVKO%UKY3O8LZiO0ivwj9D-h+VGTo9W67y$x?hfp85jvNab>? z89wgCQ)IXSc#2*ro}w+rQ%3EweIS>!0*X}TX2Sp*CYH-FNGp}gDTa*=jw>ja6Imsf zGk**coK`SEP%dY!3QN_1SyihPT(T;;oMO}zXfi98W3vLOW#w{e>A+gRq;=tQ3n~0Hk^5C*eda_PHF=$z!pDPt2mAoDA;Ab6$h7*jGR(U@;be zSd6(kxtd`y!(bPpL!v=tF3pnjC!C?&4}AS^lSl0itG{n3@7YN(6EK&(7kwwITOmO6Qux zIbP(*a!xG7Fj*`_`v5Ftytg6V%VVJ&XQf!kan@igG>{nmvCyRnykW!y3ms3K*}gFr zI+VDw82z!(9q>u8(Ee+CvCzMwZ=a!@ss{_nDaAsv0{-xuU?EvzEJRBV3(41Ep%)`x z3>hlRU@XKK-f0RPm5(2NgCn#AZGEv2!~4-U(?H^t%w7bCH@2lq@nDkf4#G=n7nj5C zJ`^t+{$NApitVtF6)zWeJI1j<6i~YYIet&}U1aLuOQxC)w+#!iEHU*A3sJ7^#tlB0 zdA+a@b3GRpqEMAsh=tcm1aEySbDX719dRg4jyP_YIsy@mV+m453Xt={#59D6rU8iL zY=DUF28hN1g5<&dTbY!Ih=zcOk~p8!1rm~v!6W$uJPOmj5-S_|zyhOu zD#S;)>&raw;84xnYrK55i$^HTgV)a2&8Ln9O(kx4yJ=wD0O$fb zKx;yL6M$AX#v(u?>#uj&V9(E<-B)k$tnV=z0GfJ|0W`K{2B1mZMei7(X3_>5jDKBH|AJ|j&q zLUDA=;xpP~d?pr3@tI<{p;H|gBa$Pl@R|8zkm6M5@R`OdptBU8Nk!@KnPS-BmBVKY z(}T|x%_+PLpE0tE@03&8Hz7y0v?-~29Gz;^@R@RN*ifV>W)?nEIx4(#BtAIDcbHKui)_Mcct>d$Lv2Vbada-{qHGs*!jx@MezK-J0t12K+iFGk~)Pu23 z6eeTK6j_ya^i38|O+`%hEtaC?-5oWB$&?7$ynQz_hL*Ye$#gKiyR9%&T^P6_k8Hc{GeUrI<`1fXVn3 zzfeCV%hwQ^`YBr4(ci=7^i%S!lBFh2z7_dm=ulbuU^3`_cW=K)skO6E2tTgVQKE{nViFm*>ML`YDB1hsh=HFd3`kN4dBeOqR*Z zkFH2F=*48Ya98z&%V4s!EHU*AlZkr9Yd0pCj70+`W5=g{ift(U6ceF-iun+evG5Tc ziOJ|lOqMt{E92GZ5L~IEqAL#JX?r-`YL)?U93Rqw%EVtngPj0Vi5o?@7bp6#hb zDaI*ulio4r(!AS)xws@g$J6O$p;iO~w37^xcT#N^bl7NJhe1yKu8CziG6bz<}(=F&IS zi7CQ}<>7Q_vn4Q+zu9z&aH2kcd69WAw3C#LLD zotUiDiE+4aIx(&e+#bVE(>NMkNza;?&gsNhTB}{#N=}`a996zi3u`(t)vS~8HM4YL z4`j;Ji775;Ug*R)zTm2J+pDhFu0_Tymlj!9w#QI~sAZyizU%oPhFS`#ewBMf3#>St(-vDB++0haowTvnS( z>L-YZGFS?yh2MZQ4NLLdCF7C?iC(KehI%6-ISlnCn1P}A$zmvTb{Og>dN5SW%jWCF z`DXQ5IqZ}cvZ07O#!ifQkFnEDq{0rc(>*7Lk$8Dkmkj;vj}M7S<55W;LiR0uqml$sC^S%URZz zH(;$yT-rWXD=uCE9D4hS;t8H~c4vWkMj97t^*bYN;nHK$JIz)&a}XAFY<5m8$}m|h zN_&b$b!J*v6n%G-T>I{B7KG-yW(q=G*EA5i)eA!VQjoYOf8H6#mNRFlL%;7CY8(TuqWI$jI2RgjpRovhEdPPl(!@8XLGz(fPolU zOS%RSGIJwRW)*mb`euB&hm-coL?C-masD$s{@szD0NvT%5Qln0Tp2qkYrydsXa-gd z;!Lu~`cI++JvdX1Z0zZ9rkKreCOtDalgo=uddE0ZYmy$E$rV(JGjGVO&v%3~SNO2~uz?p2$7-!0U2Y)Gd;vXcVmgO2Sz4=I+e%KHDMyuW)WRChRLwdWUo#75KA$NQXDTjdNZ?G4 za0$*-?6PGtX2Dcw!?%!aGOm_R_?w#tP8wDUqgmZJ^%L?a{HC^I}p1bbE2Tf7dXo3Xs?B{VHjjVAPMG z@MnG0Y!y1k*&#@iX$;nH`&3|z`j zf=dy^oMYYIbgJ7^{@%v6{0Hdv#!_>ay-Cwsioz?9zq8E_@wdsMn zy*9n6+v~!BmHw}iqTBK5`S7J~@83)f;L{nTLEYW~eCJga5NHV&t=BXAE!i?fR;3+X z2=AJjin_f^U;`GrJ8DX|r$i7Z+F2a8j!W>A(Z!Dz5FNTbN0vOE%7rn~2~R1G*;72F zvuCXBVl(EwShpvBbGp48XE|7va+V>Hx2TzqL&mxTV&vO0-a^?)kO;Y?JLCXLHBtGI z+Y{XK{3JAs*B`h1HhdD?@+S1hymIeN;Hxw5Wb6dD>;^H+Da9=c0o=l`7>3F{S*8)1 z$~{`z(FANxxhLQK^qn|axK6l5W!a8fm?3m~jNqLn!Zpq~3M{i9taQvR^ zx6Fn6^`3AU+>(|hrk>#zQO|ho16a2_N4SMW18!l*r*4l;DBT_tp>B`)5V5fE0rh%x zpk9v-5kqmWB^|lfGI4}z5ATUaZ-cv?K1+QdGsjs~^TIPGWktd%GaNa?Yxm}kNH8*v z-Tj1XSImRA>dC#Tot7;q_LK*AD+f!<$+r!P`=0ibv&GHGbSgCcN z2>qNA)XK$t>OcUE?kKc$^1&0%Fe!nN|Izx3p!*cX&PdlCAOEj%- z(mNiB%E{QmqQnSKvwRQ2PH;-p-Uu#LYJsd)jqwtMAlvyPlgoZ(dwEd#&~jaZBJdI3nE@1#>?9C7>_>GCF+}E zJVh8WK5!UMPQ%7u#CR@<@&LxmSgkrS#^Xqq!FaNUHlb6OXfyi&T_X9=Qj0O3vP&_Z zti*U6o*c&GYQ*UhhiM#*evO_r@vXynEUne9Z6znhlcUNvYGDoIsb-ywubGAMeuXI$ z<0&p@dSE<`X9>nrY}X=V7EFaUj3-}5%Z%?iFy5ac@l=<1Jj2Jm7>^7$0OQds#dx$e zjm*#`sz^p0b2D9H+7y6pR%|1n=@Lb0-ze>Li3((c;&fJ*$kwowE7;$jy{|;=R5tpV zE|F*nz&8t)FmpBx_SKuN}tgs z(#w^?1z>^$bcu1>eb;cB3Xs<&{w^t;;Iz&V)>Xd;C+ZSsup&x9SYDU-@;-iUUuN+s z*=U1xiJu@RPi(LN#BR(L*p1c%yZsA;70DNuN=mxK40eMq@%NFY zVK<?Yi`mRM)+P2}Hs~ud`Fe4_SzTfdtEGV(inwE} z#)$VAt9^x3$gl5-T(@DhdrF0ESdFF2Vl}UD6V`YqIBrpGSd-SUUhFocPHggy5~vr0 z<<2p@gGVJJ^l^9}2iKNBALv7&i02rjP%Pn1N0^VF(1L4L&r?gISf&RwinyZ~XI`9# zw21N;%X?6ZSX%az#ITNw<4|{4UJeus3%zV|)E@fF6?tI`dDaUWQh&KB9|)i_K2SQL zz`T8#I#52Tm(ee(_=|f&6dYIlZY#eoM24#s-pYt%yzvk>F5^-ItK}lV`b4aCB+?zg zgI?igtc9M7HjvKoYTU~#wIiyUXdUea;=I-oZuy&;=>P&khnw8X%y>I0hVbwp%5;k=JwXJdgNZXI!+M_`(TX!OWMj`?r8T(`XKZH+$^*@L4JCF6hh?Y9@KE}>teL1CAUsk|-ezk-o z)|Vy5`n2S*zI+|lzu!}Z^;MRESf3HR(+|VqNGU_vfU^0g{*}Dc59>2LbU0}s;f?KB ze_Og=OQZC|`rE?)T|Rsd*4K29Ew;n@R=ix??O5LeeL2lQbr=-xt3BbiVSNq$j(Udm zMLnB$o`bZX$9X^j&V}_^9-B<}LU7g4;<4#RAyxrP)zSG%MN|)f_jki-@ymEbQbnr> zvvT`t)tZe+lnuH*%mu{rb0-ExX5%4;M8zJ4MCq9zQPHGScr?BzQGOMtre8cU8I1yS z;91vM$R=p?JGdt6$f_UxUlI$iwXg;Bp6m4fkNMpr&O-tYuIug1LnK`oDwT#T_>f<8 zrm}~}w3)(Cc?kc+lI0{=xvVUQO5RY(Lct40GVV|b!AX^&a?z!s`9CN;33;7jJ6P;& zbx@DXA>U;^N>&}KO>?1Uug#Bwj(AUOuG!x6rJ^60<1RS58oq1(qaJ2|me}*6uj7MU zSc+1)sA84MR?_K`)7_M!zlV2>)i+SK(+Q1TQH<0 zSu`~n!;PfrJ-J((oEgg)XpUtJG{-Uqnlmy6SyLHQ;Py!>Chm$eLY1s0hjKKv_9*{9)tZHdog>83h za|F%E7-Ze4jDdBu)M6QfvP)$QvQoytVQ8R?fm{n21IITfV_<2mc5N#;Wejpu`9>|Q z$rx0#PR7^Fk}-UVDO1LvxLoBx#-M!S{mP2%T4cqb!0s zVAQ8IkwrX^K};6$1R7&K@)K!+EaFddS#2t*HxN_b7qchy$kV1r{vgt{_l=q}v;U7b zNRK>{)guo}k33S^_+v(PGKmkt44DK!iA(}P%sJL0&!l=}Spy!-2sXR>-^M)X91+RQ*b@*!qLJ@VBs0IlsOMYqc)9uHsYk^jxqfNbJ1 zNP~Lh>+zjeRY0Jp!g8_6R3D7>hR%qxWs0myJGutmH8mCW$WMX|s?)opru4{41aY3c zvpC3`xFW&CMi)Q24$+}Uc4Wz8;#?RboiMTDm_5bB(j&9BiwW<=dSvmN(j2u(dQE$!%$usJ=ld{^i@aq<_CFUAg) zWjnTHhR`E3f_M7+Fe%FDNAoC~f9gTx{2aE-g!iMxG>~{DgDo@Ra_QbLjgrHbgTn90 zhflDj!mGpNl6TmW)xj>*Y}^cH%;e=q`_e#;-xED@F5G23;WF4VElW&2!s59+`!Y=tx~M9jQxB9Cb$YzHsFkQM&SsC@<}yTc}HW z=nADUv?aI>+1&Y@TAGF~GR4tM^RtUg70E6#Z9{>q)NJ*WWG(ULB9zGTw1c9lC-uq8 zSklPT^vO!o^vR1*BFo40$?}mtnV0g&qs|kcayM;q2MS$zm^N8Hjj6;D@4i~-2DQly z7&tAl+6$23p(Hd9j5ds$3AxGV>yJa=9>}d;U|oyRp!`*@G008N_DphMl=JB(y<-HX zNw^1rae09LWBBU_GwaqJ>3CVp7=O_m<1d%3G=vfobIsC=aTJ73aa^f#Js(hms*6^2V*2(yqS@>%&QzrgWT+YJ4UmR-^9j{`$ z78$c(DzxD*`8rx=e9wWuo`}R#9q&yUKJLX|WViwNi(V=IqOECUhK^T7GUAw<>3Gwo zfR5LSZ3HwOuPE&srJasffo$-c$?AC78kTYeN9MCSUbR!%=w~`!reWDsEmP`v<*0V* z>lj!9rsGv1YMCfzmX25Hs4<))b-ZcfHsw;st3>MNbr7Y`=y>VnO5p-9!2vqnxb41c z7)k}m>v;c!6izVI%TV|;e+DP&c;AcFN(zwjI^IV=eY>C2@qRGpH5gYt1$hBiu>izX z%oS@RS`%D#6N4D8dO3|Tu6hM6z*XOWBwLD2B_$ni23JAH`{zj0a1{{5X~unDHw950 z!iMg*?mykdLiVE!Dik%;9g(dRahZGZ{7>}YCFpxH>3Wtf*JtTnIysz_25u~PJ8k`w2LprWi)m#OOHGqTIr$%Z!-moeet5_di& zk8yPwH_0`_%Hh^9bh{(rh;+O4!{IPAs3SOkIRgFW2=$xvU^6FP?PUu-WO`$aLCeU!Kd=R zP-*MEU8G$*jPf(cbS}sgw8N+(9>6%kW_9cP-@!N5(>~y*VM$cAnFFHK+6I!44p#o;!QJUom0kLWO&I-qV+4Ns*`($OQ-bmHVdao;X;PFyQCR(&&XbM)X^ zhRNbu+EZLBU9WI0`u>e1-wEsc0<>u-f2cb7RxfnzUu2ZoE8K>1rFz}(kj@p#TG70i z(wxVUk$OsV9<;_52)Lz0=f((A5|irE3FpiA9nw4RynH-G+gm=CS>=024D^Epx^t*W zfPR!Xb3pEo=symh1kryOGeKTk{A{%KnNKiw9?{DwMf9=)#PgdVdRbybPfHHb%hw_L zi;fD>t1LqFhB1@(d%3^|re_rI^kcBllF^TzfztV>UPylIhv^yKkDiqVQXklk>9?i( zyfjKbOusGsv3&R*Os}aYTWp8vt$4Y(+cCWb`hhe9*N=NKy@gxv3AYW?YbtWoGfXe) z8NJ_uwCzkQQyYlswd~}XR^~=z&noat>vQqtnO53)rj>S{X_Y_DwC4PIrZpF!JL??c z6uU=z9iHwSTpo}g#9%luE+7^rf2_Y0S@&RJ*2yytby!&ZW>}b>87#~-&?dcOEc|k& z*Mo(*%uBHF3o{sEM_8D}jIl7yF&3sd#=3)2cL%;t=- zu$&rdIq4!@5VoYwv}WyjEKDC_VSQ69tOz5Phr_~h8n!%$gdm8pno-b&(8`(M2joMKK&#P!}n(N*8JV5Ycfu zaJooqRp}xHs;gS`#kxqvsEPAtvbsn%D^PY;7pa!E(Z!ubg{NI9xVeH|UE zm@ZPeH!@MoEM271QQ@52DEygE!HGEfAy^{}!qMfG?SA)TJizaq*I*p|Q^*TAngt+^X0E`|v?e(E ztqfu~`j2Rgar6gh0gnD3tJzX)Dyg5fYgw{)(eCczI?zueVMEARP``-@XkO3UzciNB zPj;lA94l>nCW&{^#%E!Mev+R=KZzjb?DUgonSb;oEX$YLo-Thy_Fgu7&$8z_XFtlo zHw0!kF%T4^YY?mEE7Ekg;b$TZbsMtzhU!^(w&N1wUr+$1ZQtHGveZDR~U17cgLbfGhb>ePhi;x^87r>b1PDau7l5F6_KM`V48QOKm`dy zF4lUziMPFktGgot)}es)E&=P7fc2;W>)i&daTgGQHE?e$5aHT?w1ZIiNj^+n4&H>|hy~99Wy)eNc88eusgz>D>ot z1LM|-wCTMaW}~cSVC?0PFkfM|BW<6V6U;XhU_02ZU}HA@>+;_Yx3LEs`?H;Q9%@sl z;V+|xCGFE5@n&*JT;h%jd;!#zc(>Z)4?#!;$wSZ(4q1p=PY4J};E#7MO-|9R=lr=7 z+_3&HBz?=UW{mY0uO9&PxglFvypsTLUJeDx2f%oG`B0x-*~IzUsGXwD#X6XE(l(6W zUH>ZlPvGA})6Wbd~&k!0z zO3?^y<3K*|9B#L~iL7^$cYZs!t7gad`v5Ga>Kv*9nuh2_P0|Q-F1(2Ac@Y~u#8(3^$;7s$p59dq1C99)! zjuvaoVg*&pq}rV_hYEI@E7|T9`E)C-aBW2;S>-mW*w+y(T zhZ09@7Kj~Z0;P%Sv0flrCHj8QiYoWOIF(Wc^6>h55nz5Jv&lW~NS-LJc=N}sW0;&l zJqe^Odj)^REigCPabiJ(R+c@2hW9fYv^(|gAIJLUOa`OvNY=o@#Wi><2YAejSe-b!T-v_j@U62~$J zIW?>qsDF1s)K=8LXYF~J1AQoS&^MJiD8h*4;babS8n!$rb8tbF2V@QzYh0mN>cG(? zcH0HPKoe?ra|=UTn2vWFaMKz!7@&$bjxtKc0tn@u3Ls>q0D>cg6F_hwjKp{2ztQMH zU`Bknuz?7Io!yBbSa_>!+bTj4gdADUaMZ$@2tpO@WPHsG5ky7HZipbT5hi*qBT^cn zWVjHAG(uU%(g-Ew+G@;#sRkyEkgub1#`hf3hz}qS`;x=GfbEIq{O}uK10ojBSX`0s?QEtg5=xD=1=)9QJ0NI3b0q4a-829*x zK^C3rl^9v(w;lP2ds{Jj0sPm;@UvL-=B*EU>n~-b55}=#CMrfZ!QDmKCF2YA`@{G> zr2^z-6JH>06WK(07%QwV!ilnp-^2oFkZj^TYuo*tY~rqGWW5HlkKbp-Ok$4q|AvN z;(Uz)l0*Cr8MPFBmNdS#iz7!GCH5WR{_~#YYge=mxXk(zk_rK zpDjqIG9`Pg6U=291J5xP@AMNfy~^lEpCC`1`U-oB@lAr~a&i3VFEasicrF(%m-go~ zQ8X6ppgf=Mjg#OxmyfzYE*ppEST#TDiJ!r9xpMl^XEGV(@LW&0&*j2p@LaY$F*Oa( ziJGL*6Ty3?pJm}{9OpO^0nfpd;5kdE-nDPTpA9fl2GL(5V_+KQkKkEMqx6Ys*pBN( z&KNmN<5dF^!xW zVk7BMT@bRB^r%^T9@Ef=m`2|e(4@moQ5qAVj34jc>vR7tZ{{6Ov4_P(WKJa z4O2K1-W{AVW-=nha7NjtaK=i3*E<6%U`>OALo6(sRi$mkBw~>x#}Q`+=y8rJt_zuW z9JN#p+o-}FOGi=6ENr9VaEpJ|KeX5}q*45`6==+oQ8a@z@^wVc_?`pOXbr}*p5MS? zYBR&<@lv#At5A)j1Mm!aHN`WuHRHyF;Luv292|o44T^Hd%~k7$}2h6vsvg z$2G(=qM-1M`2)|WaqP?|2?Lf%@yx~W|0_1012l?MQ`;k43}`OKu?dEPQ;KLVMsA84 zSbNyfPbOeIQny+W(#TOI>+9&4%pi?Q(8xqFvmlMqQR6yCLYg%3sucu~Mu{}d>kBBj zAPpU>IWHzP0MdvHY)(9cah!kuKVuq|;7O%+vAyNBw^r^fb&8!WuLINk&-QaIjTOhX zyfKCxFOF|{;|%!_kMTRlR_^o|{mywTJnq1hFxQUS9MU;YokiV#SbY9^_$>OThKhyS z3!|TerKVrr;xLBLKE5q}d#vL@Gy!Ld9O)ed3LO-kb=sFV{4I8Os3&}PsyD>Jo)Df= z)EdPrv{Bv{qrA~ivxL+Xg5AC40SWx!;}zcSb->;TSb^3VZGa1&@F7$LB0kE z*9@xN;niw)Y;|R&Ua5BXtyR0x+R6$fi*T>Vy%tp9UXeRM!M?Rt39plcr4!GuS@es&JC=79F-*l`ggdmiz*;5384X0bjJ4YN{-itJT z)Y<{ns?BvDu;x#%t~e@u`@AEy)QFx?M;~Ye2vo@hYQz*rg!WUvs z(KNNX(g<<#j)7KLD;S@_2rH1zcB_ZyTIKfM->4SPFH}Zm4{a9CJK{~RcCWhr$P7Z1 zaNs4S@|~q}2ijWDxC$EIIsYWI7r^kMF`hRj)BNX5SLH3Xymb#=?fo@R5{~Zk_Klo; z5+F%_b83i&IP+Bu!s+Hzjxpwx0wRUL=2U*8*CGIqo65rBiTW*CIH(OnGmGk-eljLxrQ%0JE`!svQ`_V`m2>u*1?>1eH zlX1Ew-6``D^0>0CWr|QQrNt?y#)d{WG(YZZLGDn`@T1`vO^d0QgI!p%9DoMaMY+j0qPTiI0^k4Iw_KTG)m0X1R>qMjP)Sl0UMb9iRO3WRn^~ku8hV{QP*~YK z;wbON`Is)Ye|9^)cOgmFC@SZmaGf;VP`9dkb=kD*SHit#J1Kd_Gd6lP8ReSU=e<4V zg7#PxNWsIlE$c2gWLqe9pVzIn+tHUPI4F*ep1K;zp7|OQk`NJmHb{v0jXr)(h#yd4j4-*|ej>dRf)8lEm z6q^Rh?MNOkp&6GQy%{`F8vWLJW&FFee)5jTocG*QKYt!(_}&e&tR9ABjqCpf-~UFw zkl59&c!A$Gkr<8*JE3hbANcD{I2q?9E8eC%ELN#h*F$(WDsj3zCp49&8z-;nVD_*B!UzG8W(1i0I_8G(5 zWz{T36d<=>g{ga;dAAa%iG#@{(~1QZoHoX4It-TZ@)=y&!Qg}rXhxjavye3$Bd!8v z)({Y9n$5S4`=Xr@H&cgI(F(hd>S4u@tvg7(0WInfk8o%}R z8(ENDC|e6asio8c(Ygg?)OriP_^@dL{rc-41PLtD;c(dUn()J6fBlc?u^SE0xz5gy*KQzk{k=?Ra@vPYzbU^SwiUm z@+@F63|f_nwOiS$g(;EQxvB73bc(0KXVc=Q zLV5HEGg($)k7D6_^PF~n{AZl!#2Noi<~b|Ny*kgSQ~bxB=Zr%4+B|2}`QALI@&7wA z&sl@r3-g?s>fV{>l=Q~Ag{$))Jhy);d@W5BA=sIq81}jzF|0>ft%R{(0T_ia_9mN> z&_BJxYcYSDJoX>qnaE?m081_6FXgc>Lo!@Rl<6&`=C|)TqUtAo+ergOPw_e=)w{toGT3=0LnL;eiZ?$ z3RerN<7-ufs;*QShT>cVX;jA7fc7A;g{-d(IWKNx;m-_YU69;DT6Pd}Qg5s>eT>3e z$^;&SvYG65jI!JDoah!Q1V|u2e3RhDLS3cCZz*wn@e9Y1)@M*pwPh^OWsN1# zt^1JZ;>!Kiqm8*XB)e-tMyPuy*v90(4Aq?LFu=d^EI;~Tww2eft@2?g_>J4DSlEL)P;QeCqTpK7AM=sD2i8mehM;$mvW7qk^N(vEJgaU1&F@@U8q#!yD&IL6F#X>jNBBA7Lw3WRtjZ)Gw~-0DYxHP9izTRYlBn?UXm`eQQs z!3u=dZ;s}+y|0*O**Rh-L0`btUwt6b4pApnb;dkS@c#1&3)E zx>ZQPYjcPW_Z7g!S_hPa*9wIhJShd?_)rMZHBIorc-9&=`y`Ab;ZRtI^Vk*}K@#m1 zyM`FHadV_tdj-M@?8042nU9h%dD`X#? zHKd6@=D}}BipYQxnE@Ts4Be5$G;5|zPDnZoy9+AWE@XoM_=LNdo(xP+2Bs&2(lZm& zgDI09%7z*-y%tO@rY8f_lY!~U!1QELdS+sJEodHwsB;(&LlIXxhmmmCitNv z>?pBfVi7tybjmyDf4rY&!kfV0ay+^ZMz|Aq&Od!zeQWMRf0OL$;&?g#)mVMej@1{~ zhr-QMvp)i2L4&dPSg!`-6exP;8;txYcTPuRxH+X7426Kwg5T&LPzvfOWZ{HP4F)Ya z4TgMc5MMxp@gn3qKcP}!Y|Q8yv;wfm-sz`Ndd+BfE1pC6sh6<1soP6*7@6>XbTSR3 zF>nXzYV8oGTPi#m@l1!oY@x$QiU1u(VlJn~hRqIAVmu$&Ls`I&Xl6ljGStJ8hO48y zrSa)BkZ3%pJ}*ea)yC&*Gtyj;g6n7D)1$dy1wCV*FOhw&nf<3?(Y1Yh+-WX2hn_*6 z{40ue#>Qt-&Ba@g?3r&OA!;tRz+Zzj7a!~6=cF?iJSQ7%uyp2itOBGn%#I3+AEn(C z7QaGcETwrXElx@!j~*!v%PfBWo{Z){t&B!|@$W=NV`aHlWi;v%7~lSb>LQFn_nM5x zsPjD;&38^lV-0pM$Y|75_l}Gv?jz@%@7{;G?a?mTA{ zy4U78qt5r{x$oROXAO2Q%yVk0duN_g(qF&lx`xsu#HAiYb6NGm$83)A3cn6~c(=NR zPaw4438GK(3mw9r;~VtYeQf&9`S;i%SnLVV>)>}Mdqea%_}%Z1LwG90AbrDUSkO}R z7x+l8@9AzH?JG?54Gcql!$%Z|c=_X?#peg<8zgh)X4+{8Rw0dt?6rHLelId*1FRJF z&O!x&K>D4+F7YN66^QfyviBu$a#dB{mG@q~S6eTY>Qwb!O`yZ0x;jgTB_Zqz2rA+N zc7qxcqL3hY*cCu&tBJ~>q6v$nM;Rm<#~t?#aTynM9LEJwaT$n?qvGf&;*8FG^L+!~ z|9{SXuU=JmhwzbhGQTf@u6LJn&pr3tbGLKuf@6t*b|j5cW*WRK0WTH7OambKWttpJ z76UL@AVr!9(gF|T1;7ys^96x%$p&DvDFha9G!;iSs9~kjmAY>3n5OZ9W((0ldMKT2 zJx4#AOdJhg%zgnJ@xA9XUI2*)9L8P|N3k$Ai$yMN78I?=vspxY)wM2N{})IEYlNw8 z(FcWg4L=S;lZ93{VDv8Km`oTvDmG%W5WMPdm@JN`$)bCPHK1G8g`exe&v|WC4SU6L zG)cf-k%nPmIo+^VEJmFU(+yKaAH@Njr;!3uLV+sK*9XTawvtO;-<;D{u^cEDLxt*= zkAsB*%2d@nKXz?meQ2Sed$xsQIdefu+9i%-{!M8ky95)r+9iGt#v8i?opahH81Z;^ z3Bttf65>B7>=MVt?Gj`G>;}~0Gd!|ONO;UHaV(e_vrEu>fb0^60@@{xJrH&YLpe)C zd}3+%v)d(phT0G9a34lHIzV=b9yuqmVt;H9`>;EN=Oh|-2l6bmI~<3$i{`>J9!_Ev zXy@B#bD1E}W5^Zq{s>gIyK#3sy7Ac-i62H53HFBjut;!A04x&6zqHjN@dNO(ZZUDQ zMM8oa776jf2*Gb;kq}R4k)Wr^A|bKHB5^(Pg++o?nDI3_|6sJ_gtoU`Oq&FquKzs{ z=GK1As-8=)uR!-VfPi`~TgNQC955oh@pBb~giRtM0XB)qooqOBGD3(+;>SP*GXOs^ zlLSW8X&5Fvp07L)HsCV-mCS(HB*?+Q?L;MB6}vV|>)2LlGB$~i;Y7HG zH`ye3#*Y6i5uTp@frd?@1hjPrwT7oFqy6LcV?=2)#ZTQRV%`SnYuGF1SHz@9XK(Ep zIeegZA!^zmeuaV={Y*C@Lj6n+J;weZ5iNQd(s$75WuAWMEX3O>PEY16gl+_nP97|Y zPC=Lx0U``fLK$--2z=rPAm$-sLG>`w1kiVRiT?o2JDT^5&$XHVNuGUZKHy-Eqj=b= z-;LeqRd4|Kc^svwBFx5rte#pAOr%q~$zS&?W^jVRZ2DKs*tO5y_1IF+ee~G*j}tuE zaBq7)9d2$HCXfg9MTx}D7!MA%^9{V>O^Omb)L_mFgb}d=3|MZO0}MQR6hFX#0}aaX zQa(HP0R|I{3c+!SSrwAivkN&ryMXOK<`_emUx$Rm&o1cM3!E2{qZOSl_6#*n;&e1s z1mtjG^eLgN$L$83&@_!nE70fHT^W-~lYeR&cbe@6&$v83CTW}*uJ$xV%|Bcn#_@g4qp}JBREB2hMJw6}A9&1F5Qo8Rx<_l1xlubmPA{)?Q~~?5L;aUVD`$|D$OH zYZ~0n*%}}B<{#YFa&W@n#yrg6_A~~CgWFm3n88gVS_U@~s5+v9>x|xcht^;3qDURU z_1D~|&_yT?l95emS^L7^koHp?n@(Y{z`S{W%9{1BG-sJCZ@t1S00XVtWl%l+{HQ=H!0PjKx$><|u zcc7h0DtYE^0||5d@diwE=B^2bHt^>N5PAPLlpXKLHJyXv9cXgqPVJcexECvhgF-lX zhckA#ff??07>aSnKU`xlBjIo!E}hy)3wILHNr?t*lCf>jrZX}F!#E-xi4^=J!u^E(L1${1+8ks?%^3c+{zrkJ`HJG4&MO>4&U{R zyMlpztKRKn?tI(dd(>dc5m4T=2G-C@-v(JI-dok>YW`RQWIlb)%qb zSX%f}} z@!I{Xduw0@Z*B4P-71uf*6a?Lo|n=MYxW>4Vq&s}HG32V<|(jb`54C1q>Zz9Zh4u6 zWqB44XOqgkn^4uTI_|dm;W!E>^9JN(9_xo^O#W#Od4z}<`!+AsvvKZm6|CN<^LS{t zS6&LzP!;jeo>aL2B1e&-+SAX&*m4ub*IvDwO+Reo7oiSpPd+&7<`rjfOKHX{ z%{V3XbkBI*Gfua9dS<+y8K*})eYue?CuPoDI;qmc%!c#un@bf}{tEbjWdm>m(}o5r zoYdL?bU?DfU>RrwmUM_E-Ayd%(nMRjq*!po3z(P=?GEU8gIy9xiK5^R%PB!@4KdjC z>=SOA!3B0&7`9qGy)6_YYzBu1k(yT=;RIvG={7mTJb#|k6M1le5dPlKpHY8b8?ARGCN{_EWGhkW^m`^#93~iC(b(b#MwKXWLT>3Mm&fd%7-iQ zq6kPIFNp+CDtqQJ|JuEBOP<}2K0`X7`Olku5zK;h_phj*jDsU=yFxi>irGS&XqUl01QXgDw%t}*Vx(jxf7*6mfQ(?KqQ~)c>qHbrFq&MDw7uEU4x| zS_S&J|Dk8jltT-qQ&;YAtT=T4oqIs;1=0#z0G+y273=B1>ng%Fl1%Jt%zHn^k9vn0 z^G>*8{xNUQ9C2pMOT8?fZ2mFttsJW`<}o`n*4@dVaIE_PJ!Y(vh?cRAv>qDkc>60R zg#Z8E^(vxqkc@Ro%Yu$|(klMvj&;hR1sm&>JBP-)17|E6G>>>dBJ_!yYk`gy`o zKmSPqqCWH+;LGpk(1*6@=S4>g6&}^9)XP(?iXSMSp(T{ZE1-fdB&o&+1l9Nia0Nj1 z_>31lKH{mzXM9rPMUjtaQRE|*ihRb3Zd*^aAvTvrSRqAKeu^q_JV;y4K;??#XjI~> zLKccw(d9ddwJ29imyfhDWqykuA81sMA4h`pJeT$~puCy3(*1uICDi9bFQ-@OMNg>%wZnJd3tq91T5~-p#Kmi= zTl+7jaup7|#eo~T@wBW_Bfm^`cpl)&i7o!4?rAa!EVdArc2@V7`|66&0Bmi@`~2}9e2 ziZ1GA4%>v_(Iz0aiI~4(n+VU_L8fBo?XCkif3u(MKx`H3XkRFKeXs}MJeHU$GSJzI z2?M5z4$80GCP*tq7iIlOg7M%TZkBY_zR?fIAR7`7S6Tyb9B$rsIUn@w+fMPAr*?{U zn><`SX$%q)2s6d8APZt04~3b+D3y6hA>01Ec8Yt*YtQE=vQvDOp3qJqp3qJqp3qJ~ z&l9p!7*x%63I-lHI|Z>d+bI|l+9||+KWa9Iv#|5%e96P_AV*c}I{c42x z>TDwfM5omVv2K&xYRbz!c^+*Y%Ce91XvQFcZZBi^yO*1jX#;vPt%74}xGQgd8^u2Z zIcyYLu|93KQQQS?))#Xb+H9kcpoWb?yf91f8`&tt6WS=~X|hpBtg%ttjeKFFAQf}k zCln2*j+1Er}5;qiQMpKrjmm(La(1^E{|gzy#{g=DXiWNZ{a-f_68 z`4$_+7Uao)mWWRI?6{5MKY+R3g=)hAwEqepFfj+vVkgp!X6AcyXl8o1_#J3CEl>CS zGbx50;_vuXJH-E@Gt|xer^H)R%sSN32tbRDhV*Gab#U#0Jmb(F$lEDWPi7A!uFy4) z@XR{*C8F>obTS9%_?eQipz0WD2<+p$L;>^o19Sc?_SO#O?bS}*=V;D=xg#Bj=g}l{ zHVU_BM2FAtG*9fTla}A;ys_lL;WOM9E@z(bunr!9YC3#|9YCXeS|@zw2OA`SnHeEa zKKcYt`0S23$kjNS=EaVtMenXCgUFw2z@LNp?Hyh*E#<@tCwyr~p1G0}c&4ACmo zi%dL;QR_gSL{nN8bm)@i0LHR!K6v-*DYp+SudT1&#nT?E+lkHNDiVl&8xHiH$k0f@C=1+NF=KH+j6VY2-nP+~U#kXj4~LuglEk~{+d7_l7y zMyv(^AuJ+@8EOqei2VQ%as~hpfJ8X3rpqguEC{q6z=|MS>_ZE}wdPVg>bqKP2rF7` z2$9a*Ba*lcAw+}z+f7`8x%DjzYD2*L@OV6a6?M)X8!u9OLI>F=8%7IWx0(=&JlbT$#t`#2Yz%zQoX-$J>Ug!^(#AVPeEQ=F*%?kyJ3}uN z`fJqAz!MQi(+M*}j#V!264A`iNi%~O9cX5N(ZS_QK|BWG^4%bh*FLJ5p+CI)?>x}+ zICh2(wKJTs$-~);(4xRV*csMr;t7>_Aj}L$gFtMBkKRI>*UoSh`R)1qM0SP|dO|yc zctSgactSe^Jx|EaU{E#N85nrr>+Rl+<&!U7--oVv4)a6DEc3$&^6*ypw%7vOA07q+VShNO)@pwk0GI1MT(vga zA0((@e-JP15Bx^<2l0gV2YQ<94-#wa4>urR*dIv6oc0I8+S{(C{ee!ra}ToI+DeMR zTsnLO>Tdu6@m%(YS$JiZ65@^99|#HiLqr1X50N|BaK`KpL&zOEe|}>22TnF%e-O&& zwm&HCGRq3Vg!YF0p_P^xDGmF>FfxMuA_5U!YsRLG0jb_Jz#5GYMW z2#@E3JG=qcJ9G!@`B=-ok}M3Kfv6S}gixTuWK0l`e(0r(wDMyn2=FB-@BINEY!DP5 z!5ue4yb##yeW<bcmYfh~@OFIpRfhhMJxA^cc;KM6_sj zNT0~?S)l%PaxR_Ed1sEbv@#-j^Y~08F40yS*S8r+9jKhbxr6J(p19~_Y;2c_YL6;#ix~JhK@ML`c z@(lOOkbt_Nm-36-6>9iW`9nY7MW&zH9*M`h$W8H{B&Tvnz{~j-_!ji#!&}mq&)9c@ zp&ckfOB%eY3zEVzMmnHNSSsG@a5V{b{H+Q^K1BOQn_#E|x>SHT=NN-dCg#)~)>Qz*_{^35i83QhAa}p67*|si4&H zxMk9lM0~JU?sq^UJdofrjVo#JzAkdYX?~=ELI`g{a8=BVTuI|fMmbnfnI8I08?y#DmV1;tpuDa2MN$C^^Utu>D|Qpke>HUh+Kx7Q=jM?&*2W$ z#*@(I#pmWHp?hObLKmFjZhaGa5Ys+ePh_!p6Y-k5|H|t3S}8O zJJruXl_yt!Sc7N^xaT8{ebKv-Erjc2s%}Jvc>kKYYh?C&=8X$29$TaeoVA-MQ=zVg zfl%O#fpA>55)Xw2X9Pu9(j3~0M?+W`J|`2tG`FCNwgtqAMNcWo#v!JE!YcBclwT886+ zZseRtY|$Ca7k3j;xdW*>5md^THWa#@fqeJwd^exh=4~g4>taffC|G+n7gkGOzIVfL zzHdXmXG5VMZ$|g;#!K174TXXH01_-wS_*^t!3~8n9+EDT0ZM}qyM!L83Enm`uE?U>?=d~V?`1$wKmc#cPpy*1ZI)_f#o>;Wr9uP&> zpeVZX;VmC*hrHwijcDyAjuhICoWwB7l*W3dm>KD`+!@;~ZIr7$+|qc)?H&6Udk~Wr zv!Ax|B5h{F_g)sg?ZBRRA3JONFjPacHMp%+v$X|mt(TcN(rj^-qd^VLmOwzW#jn2w z09e_phtnk9{=t|g&6a?^l(D^&TaYg_TckqjFn0fk%&auIy={uREhcpROV~%$rdjJv zx~&+z>u+uVfqxt~qBkRAa7}n+P8Q;I65~jBJ@o>TEp%HE3D9jt?qtK6Gb57R0CG9< zhenAX8HDu)5Kg0@-Fh6_WfG}ChW4l7tM5&d1#wzpq-0J0ya8kq89}=hWl!xEGf#(k z&$|C3&J{C_3}ItBs~D8)Uj~GxB81NQ;I3%EW%?@Z<(%lY$im<@M78L)SVCJR=u*na zbB5l(dc;(Iu`jv;M8>!+$d~^t5um;Sbgd5~jb(Lp)!q-(^}~Q{zZ6^7K@Rs%v2{C1 zhGL7Tsn~iY{i@iylg?1F^#OXqGthLmD7Hu+L>}chxb`d^(rqoMZcAk3zhAedWGtv| zOBw*>`(WH(tL6Xi)om$*4(Yb`Pq(Etwg9@Vn4BJX-Bwt~@%^=ZnCvu`>%Mj4y$O7F&Xru}N5 zxf07f7-+s9j!SmpJILc!uGjsm5f|BKCgI8W{LRX54jRZGAQf-Z{t>^h#@vT5Z_|$Z zd7E~VAGc{Y`FWeR2BZW5lwEkMni$J4{4|5&TJ7e5i&_GPz5wc5!cw;2)iq*lKVpp~ zqHX3uX6E?c!$-#Em~EyBhPIh+2@vb|Xv{wLZ-1@@y`tXT%i9Uej$B+%;FV8;;Q?1y zdEMB-2n8g79E1`G+il@$0LeC9fE8Q|>dS&h!wlf`mXHRRBqLZ-wC5fzI{*_qP6Q>1 z2;{(;SMcz18)0C#iDk$X0BM7MSEFH~iA56_(K)EpdzyCpLXl1-y16ezY%+K^HJ^mY z<;A+PNbdo6633#Z)Hc&Ewwa!|ZKmb!5TJy8reEzdfkLPBHlg( z9Z4e@9*mEJ_akU2&1KxH51p`+I39G*pdJU*_M{)$o*sZi!S=*YF*niy9qEjd^7q1v zyJ~W&fwAA>0e1LACX{dmK9UTHk*4V=6Q zhG*VO?Y2s#gvX!hZc)#WK6F`-%Y#clbI6vkptb~&ktd;*IY9elm5c>d$VdaAd>@Rq1TFu6 zuPs3tbjX&lf3^gzu?4Ut#N_nA>uAC{j@uGA&uJd3e2fM4ijGyYZ3&ZC$H%57Tf*rt zk4MdKOX%fbgF%aVn8E5O28DxFg&s3lNkq$FMFP#5?_fI9ambeNXR;-TOgxEE>pN_GDMijT)xPxpY3TiV z|G^O2hS56|+nx5LI}Y9U_>2QbWFttA{X$@QR?ol=Dy-Q<9!s*}JhdyN#~wtQebca5 zXmAn(25)4BC}l=6HVqZVNRb|UqyiPitFVTI)!_t=VAKKpE7GaW;WdbfY!1`#WPJW+ z-tSFv`HLe@FWvI zN8WFy-WA)8p-0WnWN|>#gR%;T9M^k{f8+cE?l6{J@wswmAvto2l~2xO z?R;`@V$QU?5swYIbEU__p%YN2CCix=ce`1;G*5bLC6CTtM0w*_5$+CICogiQ`2L{- zt!&=mfe%OTARjdMkK>4kc}w&dlviyCgJMHi7q=mJNH6&?HSGt3W1qHC28HYP=3OM(?codX-QM&l=6)&&)V+_fBB^^=0xUe6Vd~oTpGtAC zLvav!XptF(Ar=(}z{KwER+%w)RIEgUFL>48(BR9x8iO;G6Nm`~hle;g=2S3Cz72E@ z-2?(vmx~h+}fa}!p4yV@_ zyxvXtO#yA*y8yfF^QjA<=`Bt8M-#i-Jq}$jBFDZ~?sSTS#V!6MQBt-kr^OZT2kP|5 zbBl${$Vw}pnc>k7gE}jyb3~mL)H$HeC}Ld0g3DYoK>YQ5y11&Xyf}_M4eU5XQe5#K zqyPSAupLu3C`+>$M}t+@?JEgXaa zlP<>#p*%uWUO%%T3k^6rA6yIXz`HJOMK^3reNc4cCDXsd z%`_uEHqGyydiZnyj-T~-!513wykiRoWM@4Ncko7g7NvLWyG}A4s>X5MeBR57e3#QF zzX;;)pht+sst(Ob^n!RZ&dlC(59a-*vay^NmJHw95$&{Rqu9qz`*k=F1I2jvD_Rxf z$DzvW%b7S*jC1VJpoU^xAfOB9*MBtts2CRy2OlcN>1k4oOYC)w?Va3&e4!X86*6{3 z`{8A@(!}<**HSOeWUjPow{{kYleXOho=Dq{!Mpykh&DioZ_`==Mz8e0IpcuYM8*UTQJrXRxt4K431Z0Fd5F^VY7 z*mM(v!m;UQdOly8yk{zoPlmGX%ug~6mOvpSQ=9Ea6OS3o1X0UaM*0uNvFt2NC|{2? zg5~ojrmAIE>_A;s#R@J*SjO^sWmDD;_{n*Cc}XdyU)dH4<~@d%JFdIje8)89!CWmb;_xKKvz?&tiQk7b zHx&yyoJpGjvFxvZkME5!xoVXrBSxY4sMxgL_r>MsXc~8Z@gabbMJX(vozd7E4S0xw zZzhDVBcS(KbzP$6MO$hGxp=4(p4{SX`?EYj)uy7S`BC8@?;S%hvepLSEmr2qR*zEnw5F zdG7){4b2l2im@%vMl^M&1b{7R2 z?Q#Zol^;E>;7qS!A)kh@Dm1?zW#X@wI|;W2imlNSt|lhn0MuR6YYF;11XtV3o#J!+ z>#6>#%nVw#e?Aj**^1bXBeoT>uKAAwZ|~c>HRB3=j~j!}iQDzpBYv3~Tb%^c zEk%E66?c`^k7ft0qU~>z+%18JqLTOqq3qr$!GPyFpL$K^=byr8>cY=~1BHD*3;QJ& z^;`t(Z&9zZ{AU2Xiu;T&#p4yS74ap5C<;`;RlbwqpNr zcGuQ6Z0+5(6&m1j8$Q@s-;NLV;dkHzUFLWy&F2}RJ)^1&8}&ssnD$8pVbX1tK& ztZ42CImSFdYb|I0FWI|N!q^VsQz7BQILq{{^r;L#hk_6 z8~gsGNwTytn*Q(7wz;*mWjuoo_8|+va!XilHCS$e<)tm)xz*sg1)d`*!kUguc56cf4O-iv4D! zux6iJ?li%dM8WKTD}S>5BQUbt)sh|9sGQeKyg#{yRXOTf0l!vg%M<;a&fo4IpU)x_`VCt_kml8c9O^ z_dem@(+tnM${O%G#Kg&70p`158Jg10SBCdBGLSON2ls&%I6E;oo0c$VAw#*R{GPzr za}mcLVQbx^C?YA5d532taAZp(VC{4zJdHU$=JG;Ho=3wJI*IYm zE0^<14W3n#nQdOPhbd|(jKM$%CrL%l4lh%LX!&v z-BZA>QLC$xPbr&u0W`%o_&Ty}(ce>|ZEZ75R(Xjwhqo_E7|AaV`bp8@>vV2ATW+Xb zka=8-c7d}_)%Sk}>-o3Nwe~=jTK4KWS0EyBofko*-}SDqnV znti&k1m2GP67}L%H=kVsa_EBKb5@#Pg8#bwXSs^va^&3Ts})wq)8B8o3h!_ zPf|awsdYD25shv}m)u59Q^TYAJbD`=iz!KAqykfLt@dOg9R;OjxI(Xkiv~@t!jsl2 zOKX*J+3lJX837u^J1a&13XB-&PdIBG%zHgW;IA>r(PW<1Ko6j!5GGW+E={^^$C??i)u3J#C(c^svw{}Y0{2-D@+v%j%qQ@t?-MHPP?)=0bJL= zQnSap{v`CdjdgvlfSJ%K2;#ba1LiOdQ)u(L{^xVVnRWdo+vCY}T|XFq1-Lg{+27B0 zu+;8dZIvoTEb&PTm-r+AlP7wkCH@}?t4sVg5E(7;+vz!N`c%OBoO^8-B-ezC`(=(s z$)etK{6~OhS>=Yts(u+4^G{)FSwA|>-UkIz=o^! zM#9mD+{(M=TC9_9U92w~w2RSVeV=RfUy&8B4%h1Q6=2rdoLM!m&E3SsD93L0KLfim zxPBVTM1Lz<;j(f8kk112O+orhUNIzD0I>qGh*>%+67^&v#!VG)Vv#1@DM{JjKDM=Qhm1ci0Ucjv=3VY#rS zdC`>_uuA^3z{M>Ym+Q450B_&Q6<1@Wd^yJpCvjN}k4P<+^?-}5Fj0*q|M@_+7094* zVQzpJY^*_ZF zX4Xt&Z@YzSN;+Ntry$R*{X2f6JyMOeTnO~D1`uRyt~KH;y#LZjvS0AOXohcDQ%X-5 zC)=zkwG2&ZXRj3%=%GdiQil29e%%5$YfUL#rQx2gDTRB=mn$)6yG+)U%ynODO6J2g zC5iXYhx!b_u0#ot>f&ZB2BzI~BM>Xf9?XM&gYZ1Ak9Q~B3cSwv7{O<`v7E%E+!_N9oD$=4Wm!G}6F5o3Wu{VvsXrd;#oH9s~qvT_;Nj1P33bcmHFKC8DJ%Vg^u|F zyJWu@MLS4y+`kI*C(Iq}Q425OsNl=5;KzDX+KR3>Sy$0|^Lm+EY-e<+aGHvG2a*!5 zLS?GavI^xKsdA28;wrO5H-^fqID-?JOD6sSYty&I=Jb(WY+q|rmML7D(%qQZ(}&fm z%=zgKZOzhD8U|S)8d5o^=5_)JZq-cc6@G_0Klh*TDr zs>FmODqc-XQ^^BMQ~5TQrjnpjMZ?pjsRVT>4lYd%h~UK1H0ITHO}I2=Clp(niuZAr zriwsUr)+%c4_Bv>V`FtHUan5rxy-vd{bxpIM4HX&lmu%5i%L9KrxGY6b}6i`PNi_A zSgg8bb^1$U=IT_^a*l%4DSM*=SEoH#oif5yn|hRqx;PcohMV!&Y`%T{sNFSULf0D{ptzDmMsNTJMjjVHKF3d?9GUI-fB&bBOjM1pUj+meQs zu|>?QmRqU)36+s`M!P(z378AztCjC)pa_CGwJuCBh06>34chefNWZ}?BpJ7Kn`D*s zM!VdSg;@z=rwlao&Y*LIRr+A;q8E((J>(}cPrdrX>pU^(@(@Tp8I5af}e8f8y0 zO5?X!;?bbx*~yzCM3wvOX3VyNuI30P*i67gGf}qR59$nrzy+TJ(VAE(-`SL2lFx#9 zk-`LjXh{oQb1;Mq{6X?yE=)WGs_c zFc9)CsE~nUmd|hST~HHwenbycFd{*m?>dPr`j>aIf04k^oT;6D2q2VJM3K>;Fdr5# zU{z!dsF>zfl!T~QNjwE|#dNo1b&ogwU!Xd89}th`T!9wZ$hZMBL&l_P$6go++q~`| ziyXLhDu6*KgPj8sn@>&@++ra$f;;w7<&|&E5%#S|VYrm@q6m+4t(O_lU;k=OX`iF@HNa9F?23 z9r@-Q{g#3w5gO*erkD=+n~8EbEEd+11J{WgAW!cm--6{#X3NJ#2Xtygi&I+O;VeN= zgFGu30W`K}@{_Z?U@5+Bc1pfjF)0y+q*GdrDJi7_@i^F)6%R?GInIQK(O3Vv?sZx3r&=<#g@~P>wSvBHak#q{#kx~hV-xlZ7 zvN=~H#%x3&Wel_rDP_B_BJ!LUUxKtfOOUn;X`dcP$|yWlt_oGDTRdVO^Ksc#dm0GR zd4-d>6!rNY@VnjV8}GibJqZN~?l+z2o=A=d>^QQvC!#al?ub9<4Eb&QI%S}GDpF+rUucJXT1;7X^wbi{Uh z$9Fu8hMnct$4eD&r)ZS4lpY!nMaUE8;>;yQNc*aSfsvu9kmPlI;6l`E ztsRGE6gArjI1>SKlurtW!-K`VTh#NMdG@oxr*z>M_9yR?cEM?8kdaBC^o^s=lI%#o z=@F$raZ1^d?BriY4aUR4Z?O=J+NF_2OD?G_v#Q1=efU-|@cnbwhg0noc4jOUqAZly zEI>wTH(Sb$40o}$J6_v}=Sj)i(r%3LUM4H|653-w=-%;5%;|@VE@m*^9_i2Q#B-4M zoyZ${{w2VZ>eqZKWh28_KNtOV5Q&WBYX?gxl$ic{!GoyHoKT19uLz}zrYH3*_?-mr zfBb;(?T_HwXm&FFny^o^g1Zrvv1H;d92K$1dj9dq&kDYSSpQ@=b8gSLH_$dXrMI(XK#JG(uHS+>kH%B&T-n9*osaq6WG@NWKU$ zj?jS(HRJX~cGy!oa_Ey%_|N2FMs4xf4%F@ywG@=n6 zOMyIE0oX0Y`a(CsI|V;1vcf(8+ZJKS9#$C{o?Aw8!M{O9+HBXm1h1WC{8KV^La;{)ohI0oi*h!-3MmK2h++3Py z8#$V7%TC|KqEruuu-(Oep~x<6rR|L@vgBy8?3Gq5X{5sG=&z-UtDtIB@MtV}3Hs%a zG4K88m)-JGXM7}yp4l;dGrC(27?^din$S&i@=zTq%_JgkU6yV~)NLv!Ob+#w zhRCFdA?UG3;!w=L8Hyo*N+O%$?P>H$dF&ZrFQ65Y=~y>! zvEPpm1dlw5dlaO9N+zBSc6=N>x2xXtbHT8Y1n{X}q*)ht#)MwDuq%*V8t# z*h`l-p)K4dBC{vmjhhZq$NgFtir8+18OzrplhOMB<)~Bs)6tkDZs*iOXB^_?{9!tQ z-PF<@Y<~v4<~{W795iuCe1;7{C+JcvX*7F=d!`91GZhokC!To7faDts*?un44DQI{ z{gB~ONd~^*V(E5Z>oJ}sw-0wSpf3z4nSg=b21E}awv$nhOCD!V&E&;G40(-^?aw(d zjEMNBRUC8$nl({S4%$`M8C9eN0_CY6E zQ-rhSSKf+Wl;{9_fn$LLW)>&>Q!Om-CN2MsNMd79J&IJpbSr9x3FZe&7Qexp`hj$( zbLA(kgjH>Gw(%Rhy)WT*S_**$#4f^w31;Xy*2D#GZSvhgA1EYd+erp*p`YVUGI1hk z1a9t9juBoswR6+NLjl`(y{n|Pi{-%K;8ZD31+CB+f&0v8i0ty#}y)H5v$%Oa!gz zxTJRN+q;b1oCh5Ir?uO{JxP@u4>7NbW40ZGTY;oLOg>4?rK|FJ&9}JHo8Ex@N4m9W zny{#m!Dm=zVMB%6&Xd8b5wOe({sJH9@}yMNz9@|r(jP+$40$oAbx^r)o(6dl`DO=S z20~@z3mH(XzX%^z4&#F_GCQ^j(NkW;H%+O)=-4n_rl5Co0RrV9b+}i46u;LBL3+kP4#%6{aB}hSkSHrK8Bk zfe$+TPwRRmkVLc)q5?SE2#A#>_>jNu;!A0eZ>I43*#;y0mF60I)ONx>^o zu#D-KvR-jj2fG$e7~;PNaYg9HlvT>ZiMC{V)n$}lkptnht~ygqJd+-ZTpQ0BVM(SZ zI&CLC-f4{t8CV-Lx%OmgT-ZCFOS*(`0TI>D%I`O4l?Yb~aj5Lf2Q3R&>hTKb7R%zz(iOm`)~=VD+qK>7ot#n2{h3orPV*5=Oc@3?bq{ zG{;Y=S0{0FgxB8${h8 zSg5yx-dF1gy|iRVda;p;Zg*Vk8zb^qQF__!?D8vjShX*p(DhA}@@T$v=3m6-OB)H- zJGsZh4jybQt6$9OrO#i7{qHzr$vGSOq4Gg+Oia!ria&A6g?^OSgRdZ;&CuUX5y5EE zEq6^+@G}ku3xFLw3~&s596Na~l>eGXJh2(QhM1*yk_Wo%rj&$0 zHM)e!*f`!PbukQCmYBdp#O;+Ek~&dn3>psls~AK{#|f=-mPO|WNx=pdYc`xmrGU__ zT*LTcC0SgxIEoYzVRRCtOYx=asB8hOtIlY=Hxq!ch-s3)+``dGoyJs7vz>7Z;_4-5 z2lNB@8gQ~yzZ8YnX+QRp#=W??sdMsS)Y|0g>rtDsu7IR%CR;IOlkZg`3LgxoyXa>H zogI9T4FH>If+8}izl3?fzzz4n_~3>0ONc|~4X03`@XwlJ%IYdbT*83$T;?jm8ltWJ zr^l{~IoFl|m*ipvA7)->TT_zD6mk210w9R=Kfc{t9M+w(lm6Lmf%`th$h?(uy{nW_OElR~R(jeSu24f11oQ z5e89z3fw$p%>L+9scF=;Hn92?EU~OO$*abCP^X=x<(-qC0LL^U6u*G%K@Y%hY#K?g zPDej#O%ZRAvp~OgzG>lGOknpzjT{a}h1wHfK1? zYuST=NgBRa-yIr#GyS;J}22$}krE&U~Tg96PH(I5eFZvF5p3!ZW z#_0nMoJZ#kpL`W+WYZ2$tmH&3K9lWhr-V zyvXWCSuV1AZoa63Z37a)f=QI!JuZ=U4@xRLcjU}nmCSR{F{uYJh$ z5g|_o8$3B(=sn-Uy_`6yd;)yd<#w;o3Bn{)sYWme*9h`AEdOA0`Og%5bC!Pwmda3%N|nf0m<{78TSm$tTq1dF z;|>0{$k%fvk2(2E`63B($(NP{vL$lVL$Ol%3X5e?wp7R``;%{4nlN9f1w5DS{p|<3%2bJ~b0bd5fPBz75-A=@0osrNbg8F8#x$Ea5K+lqOt;=u@9jl)fXsI8J z_csGcWoh}`+5;ubZ^o?JlJ^Ah0rEc2B4N3Z_^B5{MCU|<*Cau35{oX5De zWxXiPHG+}9{&o~SI2wW0l=vqww~G0_U^V0H`V^Bm^;hDCc%6ON-8 zJ>mT<*qKjuGf+TD6S@xU^Jfmc%sGwCIG-V9I>mQ`8$gVmcar|Ik+!njCtJ6((qi_I zSHTOGzM7%hw{qS1d6AvhAkg+df(Abvd=S5oBPg*5>iXvrCHQ0|u-7Z`H-xwAl0e!e zj$E*1u6;iuHOcXx7ANz|dZmfed8I$EM`rhLneTjl!tn2G^GCRL^GA1>j`74rKiwlo zSpKOXLyKqmr^Vb)iQJRf*F{W|(pB@5&qk2zNPxe0NSsAZgE1|w)c!JAR>SR@6v z;fv;HddM!U62hRcMVb)wc45ev4UcacY}l!OkO&){>UCNr(pPYdV&4ai>@EaL7dM=# z)6H%OoA(@PgIrUv9owU>Ut=Rj2fx&IZ^dqk6CeyYiSD1sZ_4wpMs$@s2ukA_7Yc>3 z9~Py}`~|aRdphfJ zha}@~b%_!x;@6buGA6oF6G?Y^6Wm7TCqT{@$lu@-jiRzUub!l(M{mgDyVA#3X*HvF zI9tC3AFmR|3U}~6XcSR4g8}e!F83OIzbI{swE8vBo&heQYKrs(pG5vyEBGiryo3Mg zsr0Sb%OK3fhK4*^aCNme3e&xe4Wmcq5lI^SN#Lq>=g~A@MprxbKMWU=^*13dpRC9R zC-f;}9}2}z=s6zre2Mh>imWv8nn zX4tx$$4be{jFsXxVE2Ewf6Vo%&g;X4-3l2(``8T z{_HRC_Z$4Jc^wj3<-v*5xzc(A{*FYz%J^8=dNQat9<^thY6vSU$E|@61ZvI zhvmC<;&c~|UHJPe{JkB2@5Uc@IDHI%Ybbh?N539g+sSj}cboj)BEO%M-}~j)x`8mu zRl#3%<~p=c1` zh^avHNG7&P4p@uq-0VywSDe^qJQU{Il{u;tA%zkBp%f7L%3#TL>D=RS>y{Dg4NrvRlAc*2&TUXfef#`S$>j zdA8c--zKunqKy`;Mhk&DpTdo42%}mAdByVm6yy*K4#@wSy6oCR$h`iyM2vBj-{3bf zdWS(T>ns)pG4Vf+q?j!c92XfD0~VH=b~QEL!~RRld-&}1$)?n>Pz754nOGj9))JJH z=u5@m5g;$#JoFe)tyex;iJ{qe?KoaHAlIqQH$;N!;MXkJNhSp2u=qEce568#q5m$H zG~#%xIF_FHvya}{_S>}g?1vgJbr;BNs!f`@4oJ!v|dDnY!=*2mT8y$H#;!d!98E)6zxw&V2 zT%V=kRPXzq|3}QLaPemj^Do>^0~&GKVlnQ&!hAOarADI9_KS!^$O{oN`is3w^2sZq z99qO}pj8|W3}ErhJWx^F^o5D?HKOj7HuE~rdXLNTHl?W)--UqU> z{s|~SZUj$`9gRSL9exUOVE$F3SVJl0!5;wWiRE=#?U>ww-ccPIrfuuEky>SKFPG;Lj=sBY?U*Lf<~gZ3vH&RunhSIKrxbhlb>Y$ zTO=I)E<^ccFuxLxaCcccDOT9^0j z?Mi7?a#u3%UY4r#{C`!MV3sNqxe;8e9FvG8h%rbWnj1-F5e|D_$T0}AQvgz6^Ri_NIAmiD`3~y_qe+|(s#@LR@#>Gue7>gX#--({dcawB5@>D9@AC0>(xpu=r!0Tow2VZ zJzbC5mC3|SDCZIQ(Q-EUa72s`$4BvK72i=l+-J&9FZm#T@_`OtQfDX6We)h!2@UFTdgk?mp1{ zJbb?4UQ)II1M=?IO_Z2CqPsdfI3o+MD;J(dJTBv_WaHP%K{! z45kkrObo0OlP1b#CpIC!zl*gqEm$NNwtpmW52KF>Ma7<@Z|<}_{~EyIqLVo~Pvg$em8~+v}zCP(#Y$HH?_QxN$o^zS*ia6GP2b909hRz0WClkm#^R; zf>TIad9VH;LGo^WFTNwtj35R#<1s{IJc+TUh^mywW;X`c-U1SXHx97}C*oor9X&BL zA}U3@+&KY$xCzu^;_t~1g9YA z;rh}dJgecsu@J94iJn~M#?fBrS0SHoFdu-80<74mQDiN2B5RV_$a;c%jJ+reWDY$# z($XPTcV&26+W&V;^lM$(o9K=`DxHXz&^X5;H0Pr=$q?w_T-8E!unI^sw$tS*i@50r zI?^$O%G{oN(^desoYRRd&Jp?rN`x5tZshuQ_)N#UdBc6r5%p3zH})&F^SPq*Wj^Io z!nEA96z=yamWM>5U~OLv(J}MNlab#y!K>QL0O&&N`7JCEmg^KTKMIZkRTfzQMyi{k zM@uMz=y3f{ajy&7mm>oj^LMuR6DSs*a+OU}k8nE*+XMS4S+|f+0fXCdYZW%uRy*zK zAAxEh>-j!f^-vGl3kAj^1m(LWhM*g=*R!73W@fHOX;ac5mo1pRkEiD=f4QK znH2UEp*2L(QJYKP%JRuU_KDK(4_dX8S9e<=oL z%$616r>qu@q|-l^<(0uXln5mt7Vc}f$uIaPWQUHO4B~EE@#CK2 zaaaVk6hDvX3FuUrItR48C!!@d9CbZ)6mkuPi-oWqJYg)wvHfcyjaegj5|@nPydum< z0%peDj{`UVS^g%7D;FdsRDmu?>>!6i;bhBtY$eoi9rXY;+7?1Z=Ui4Gp@u8em3TwN zs&-km&4)uwaws!YFKzgY9Oqn#w*w@u7R41cu5a>Lz~lH&NBi{AS~4+|5UC8&IQ1+( z97^d$JFyaM!j670fFc{@5h%bR`g_YXdn!OnbHIYFVyH{aB-L>8Egu}UQ9}W;GKvK$YGxf#VZ$g+W1V(ZkxaSIbU`-^L0lvq?U&53U4>aNtG|Owx25Lpw zTkFM~qO!d90emzFvcD+tOo$@?*{4&7PSdD^zbyV1jis!Q;_gkOvex*_Boj8EG+oZq`Cys6FfOVr+ToHTn1EutSN5AsJ-QJ;%{L*RA)q9+eFD>-}VO3%YT;t zCUB3N$QymMGfy9#1k@{{o;(?zMQrJ#lUHKDf;FmrZgRdpw;g>Z`rHnFlJ!n}*!9xO z(N|)p7`lzfZ2xM~jjH}YSk+>t?wu}nBEdQ3#XGi3jbmo7S9D4lx1xM$sc*51MfHuj zkL-Ir3Ev_7@w*a#nBy#8>X!2pr-$;%Sk@}AB%omrUd0;2!N1_uT7%c==QZ())U{(n z)|&HPFj;%Okb>j0 zq0}*2rA{6L?DB6UAji$=oq89(6mCQ;IH$dAaZDZ*P*OpV?5K%CiI4x=>i z0}`0Yme2KS4}#8X$X+?eL*AZvVj_c^gDm7IIkW9gF#`WYyS2Rt)YI~F8XA+Xz14qu zi~ngY{-?M2&uQ^LyT$*!$dCR=vha6N8nD}h3wf}t1X@%FeJ1Gpw(x{uqOrh+ZC5oG zUqD^)9B=TKNM3bHxxE9fsxJ2K&AXzyXiHb2k~|t{A1GFEKumSVxx}(D)mwbtc9tK7 z1>$$H(01fEcr%gVI_uy*3FEJXLAPE)f9xzz!A$->V1)M;Lvrm-B&zpu3e-L zof~by@m$TC z)a3h%edg;Y%4df8&MGSm2+TJ;uQfZ{&RDjx^fYvbwD4N1fO zI&8(*omYGLF<5K9(1EmL+VTa~i`hWHxz{wyX_8*qDa#5-l!)y*#I{p6=IK=$RT+o}B)Kp3`cE$XM>%Q@4yH3pZF!R_G*;Yaul{uRG% zBNsTqkKr(gt_LS^w{|An-fecQJ6*v)0LZe_!F9)==%0nBfEP-${+H>(>%@P=*TXHL zaop+PH305e{#JE#ul6;sLYrmd4bv|n39e}tsv^vPgFqO2%-&Hi_#J`VDO`H)_}_%v zp86pwW$j17MYvf(!H2qmky?eWd9?l6;3L?!QH8>?sOQ@CNYF5YmQhoLUJ)LO&ukXixnB zFgvS@QAc!j)!q#ll{&2zWmp-vZAFavBC-hU3>O};j9oz*au`;0hHc{k1lv>kD^259 z2aGaEXBrfl z*j$X>FEnCDLgc>#as%478r(3_bhm)AQtYXpkca}D{wCCnq0XdfUyVyLDStbwouQ4V zAt_8B{2VzLzUScNPVs618_MrRWTDe5m-3xbWtvg-nPA?7!ZOMCcc`TLPvP$>pk>if z#idgG$}VW$&^_vj;h#?b+eEt9!#(ti4N^%`2rEDm{sCk}40r?{2*F)U=z3+`D{chn z_YCnsIx8*jsc_b-?9H?TliKmmpe)T6aLIPk7D}%?pDT92$%l6fWtlcQt(Mq+3n#P|87%Y zXe;`MXY^v1W)g6%>d=BUvZC{DrXS+=|+HG3etruuZWE)(2J^Bc{ zcGEG?kOtSIeEu!sd@YOmCUNr2KyWLZkoH{?vXdb*;=Ga0zl77Cx}Os8W;lbJ@gu_m z1V3j}hSq z=;KX%@E8cf+gs=2(=bD7Uc+ASTJ$(j4xa=f@lq*eQ4 zWx#0Y!4g*Hvi<3q8)V~W1aNBf$pYAFC4lQ~N3%;jP%&-%q z>(NE_6amF}BOAK0`-hEkeYFSSL6COW?Se0qP^{ zR6QwuoujWAjhjlQ*=tOYRDyKO9x`pGTO(sF$p0fO%Oi`5bxu$`*^Gd3nlhczqYQ(o zYG2A<3t~nKDXsh9b>O(1WcbS_bbT2< z`Q+MLAcB|?@HCD*J+j1%4m`KfU@BhBtFK}@fPNXE^)Y&s5FSxOC4CE(ROiH$F!vB< zB|H#a3cx5HGU)@*nZQb+V3Q4_aG7uU@K_v&Ma;QSy%c(E|4RXxX_JPyXR=a{WM1W5 z-N%<}iB8%J#ulBnZP5~xN!nr`z8q7cK0)RU*ab?A(j>Lb(vI*zqaFHZ0e?pGcV$*- z`W&9IdN68Zm^Dyf`+WUnUcGh&vAIT+vFOh%6F6 zA&=&Wk!7h#+W=99d%=V=xLqEmb2 zF~BSvKgm{tVSl+q$_~;hZ%LeD3i6WcA?bwD(|6^^a&bU74g6{1hO9r`$H4 z<+1vmo4pmDx#SL#&%##wq=eQK%eJZ=RVXazs!QozZ1BTdKERVpVH+QwZF}%k68@D4Mwis=YHW9;hx`0TlMgN>%07QNGvcoQuYo*FZ5DxR)#QT?V@v*V zjK#!Ams`mPe~Sy0L)oepLl@#@#7jQ-O~eBi8H^8Q5pN6q3qKgL+fd+%;6IT8CQMO= z7X11D%iVjx$$3?G|D)%bzC~K?YGzeuZF%MK&aNb{Ea8F+xDZS;&1h|~jSU7n!H=^m z6YwxXrr0zaL`*ZLgoK^|d0$!*;59XbP>d-_2o{9idmuFX{r=9m&oj@iRxZK+^2tii z+SIa437-XAi?k*d~O{KMXPI0Kk?Sz z|Ni#d8>2&=ExZIYWR23~=*K(HAOxvSVm)+Z2<6j5yvj!Tv$x#(QPQbG%4P=nTB8vX z%0!8F4Hi?jqMuNSH{_!-zF5>H6hwlUr%}R`FUx5Cz=|tJBv*4E`1189PNgnX#k z(8K~L^!ilSTl2<2e4LYN*gP;lO_cDzDIMo{<3(RqVafato>c`I1q0+fPyT@W>K-6K5{y2kDy{hj6}2B;$mxHw~sl+ z7OL9OIKgCmG%^96e5AA+_ngT`jg*FJzRvv+aDPK^gE>t$GpsL)a%i+>*Bn-6JX3)B zvlc2!QlH!;1lTrEe-v1NHXF3r0ctRDK!44^F$kqGXxdt7DCU_61*lds{jU@ht7BaR%49wK}* zi{R^w^T6*n!7qytll6+aDs*N%YX6FoQW&}dD6xf0)IAM53OIK6WU0i(g{yY5&xtHf zSWvPh`Mr{t+rPuuBI#V6h)>#qc}ydPQx-dTrmvI>uK|v48GWjJWcM4P_PUvG|C+>O z^@;DqVm*u6|Amt~z!J};9=J5>3NtpZ4*7gq+g5RHDFCG~l*Cq&uaQPmU}JVOTCzf- zf5WrP{-^yLEYoj5jNzA920Ax-mv8?TSLS)OE}OhhZZ2H>+(PVQVpP}(?B51<=@l~U zRULbsMl@!iN8S6VQk7`onw^F!gDN>d?pkSC%Ncv`@$vXM6Bm4sLpljTYQ3a;>ic5) zov}zH$<7>51?M-WcH$6qPbYNCmOH*2_WkWhp|w4|C*@3({J&$kHxjgbUa*hx$1mT1 z!F@OU=sU~F=Y^cgbcY3rDilF=DpPyTo-8Pq{v1&%MiJKZFkJ2BsdvKKsHze}wCtWb z?#WIi_1?(+nPk2T42}A+qgYwAw`#lFQ*^L_N^5ZUAi9Z9jy<61{zJss;8wM3Wq0kw zuTc?veYwMdXlrb%=^Y>CO00Z}b{2%9`%3F0Rw+z8f;!%P@9POlowH{-kRz2PIMB*v zW)oU+7H*-EqpW`fe~8ASC1UZ*8)T)LfFI=bu}bmXw6Sc%RD$=o%gI^Nw73! zljl{cDEy-CbE`@SgACsL8!RZKQp0j;->&ReG$yCn4jQStw=gZ*(SG(gOxrJdFZl{7 z(CD(BhESI-`xa}MEtYjyQ|018wsD#L7tg0yxSV|61d?Lw!qXSW)^!onvB8oTyL2nb zgEks5wWMvfhp@%TGvvL_hQ~%_gLx_#(FBD%?f03`-R&Y0#;I;+_M-oH*qmoQ{XeKf zYjBR^0%Tai`0wCccL`6bRH}2nz~(}fhnH_7cC{w`&1g&$PMinhd(c{Iu(W&O*#OA% zWCEWHPlMTR!#FOG(5u&=Z1R;HCCjVi20@A#I5((@0e3ZC!r6LwXHUiazWP<3i=+{l z9Mr38NchFbag;vpC} z(tJ0x`{TjMz^!wc_%N33{2>}0v$mOn^YD)#n(gf6WyUl?>y%4p3E|;8Jerr5FKL~8 z{)OjDD-hb-v|hQ6yeok`S`<$~!{PGj;i zi?wm7@K2aOQ2pS#I9m0wlc;5RFdEK-@mwfGJQ&~RSTf_mcs@(G-goeUs+NmKQVjeQa$LzHipE?a2mBPJzpNRUX#O?i z8$vr=_XzQ0$#VeR%gr#ZoBz&zoP1!zfUhHDFp|sQuv``UN)DsgSPqg^#0(j%$`Rlg z-hBe(=|s>xs_O$0#7N+C39JP2avY_s1V$+tuMFhdAiL=`-0>Sf%qY)C^T>EPS&g@6 zIq%o~%IaWF8W^BbPMS*Kr1?1!r>U8h^gNLV+Ve(6l3{X$dtzP2JfR%Jb^r32=XeRy zi+;;A$6>>D?e|n3m$EXGa9t~V-2H9{k(q?+TG?%`UFJT14VVlE+Pb@3dfWc{6l zpGFO{^rgamqe9_FOU4*GI)^>R>hW|ThkoaHUUVCqt{uEl)4La;$!=sScJI&I<}aW~ zrfnJd8~=*k<%eSSQ4FN|0}?NPGnr+Z-b{wlS;E-OWVlib*xrCR``HNT+08JySXP^J;p!Zfke@Lpc-tT9)~^z-S8Tm}sir>u!bp>zLwEm+Jo}?Z zTmx)l`MKdqqzS>%TGmhEf{xt|afgozU>m0F zeG%!W`mxcw2HEt)tba2pGUE*>)44h5my=afy*X5I-ckmQY>KNw{sHo=w3+lj@2B)wR(7qz%kMh%U zd#9qPE5c)Li~vr;LiMEKO0#agry8uA@u;j`#!=IN~fv%kv3{7Jaw~d;+S-^u|!3 z_d~B+QqUEW>;(+FV?Fp@T}&K{yKUh)8~ zzS%;{w8Ngvq5YusjR(^=ehSTaBtO>Eu}}TLaUA<8VZ|54-@>zUrF+3F96L-KWUKX4pJL&`pIIjclH zYL+YU$^c>pKwxyHv!vy(TGcOq)e-&jSIv6)DR#a=?qIHohN$pi6m#mGDJwi@;;R%BZ69=X1u2*}1m1)8F7iNB?1L0A zzv89omXfXB+f+F=Zf5Rs(>1Dye?WS1COvW1-4|xa%V_&ziqv0P$T42X0QoP{_fqHJ zbV776yJ~(;fzQn#KzRpj5wDQv2QyE=dOKioeftg>rQY8PNI#djfb#roUs2GZ2!v5r z@i?57(xuc<^y3J3a>?USj2AKLD#L4a+s~=SVd{y=PIO;~$9hc2MC0o@l=XAbY0$6K zwhCs5h-}OpSa|+UmNikeeJ&TS)k^X_oI|x4I0LGtBdPrhpmOUa9CXj2O$-K-g`=)Lz6(}WK zGVP$O$pf~ogsbytTYgFtE~goa5cn9jp;W1_v#D$nAc0XJ%Vzdd;m+ zWwqalzNnn4xSA=-ss)8>T=7{Rng$z3!x`?`n2xRXD_Jv0g5?a+#APWD!-SnG^(rhW zY168BufVmOQf?=6(?y8lm@O#hV=8zsc}z&^1#Nd*qP;7KhHc6N)?&SqcXrfKqi8BJ z>5Ls^S8bhp2O#RdH)$EhiL&L5j;T0#2)3xL-#PH&Ou@X{R+M@@OruE0;dY>~bJe?& z2k%SWhFUu^(ECeUoADJZ#ZS%wY#~qV~BeFrN558M=C3-85=|S5}=dL)}!m z1~P6{I6vmUnI%nwXfta&?;koh{HV@poyW|6qfHma7t|*-LY6ORt!lH@t2dJ^+-|f_ z<7Q`|T%7+g*;d+5%_mmKuky0gPt}}=wo;!S$;%VFbYI6Zd4H5E&EFegTi7`^X4Bo3SdP^1^+vH!n}*y! zLp&UFn#&})*)j!oL<&?usFei<*bR3=*qtX1=uys&gg)Zax!@sc5dIvAUMNyTUBjk< zAfD(ao_A`t~go&9}+-x7m#B=FH zfh&f~&bN+!>DI03&_b}-g;+NWmD3G~OO_?fu(5M7A<9TttI>X@8c%1>((Da`=LoX+ zBAfO$G^o4qw##+UH(Ld@NG0fW5)YIn zet2UQ$FYz$sQObfK{ptJ{YH+hhpq5-IUWN8mSr#Jm)+R$FS!P@nDIdMlO}Q|_ z&ga*_2VX7;;L3eVLLn}y(Q6e-L47g8C zj6I`s3fFBow2Cd~AlIh-x=V&bXAC8$$vHw$sOMl)Y?A#fW&#)_da#aS_A)3}hDHZWc2Zo0TdG?omDK%48{@Ni811=2o=p2aO>;s`?uma()D+-@?!)x3eGY!*#Kv)y}%ynhJlPBqjfAcV%3}Xj(qH zQVcA`^O30*L$`vNt|yQCe@TU^ViGHsDRBUqk_V7^WH61b9(NjFvcwA4eU?l~jaZ;@(z10 z$gH2iTAxhbhY`2upvmO@nKk&>92*<|)!#^GKzp~5t{JR<o`-6?;1a&~gfRbH9`go-A!k&7;vu7__F!e-A1_Rxswp zcHayy3Vl);q&ib&m(~f-#bUP~0ZC1&clR&QT_QbQmSp(K>rkE9;CrW#G906|AEtF2 zmnD5&vM*7!pB&AgN>;%2m8$kDozr;zdQ~W8;NJzbs=Ar9m-t_viTNAG8sAvixil|# zyoy3h^k%Tr3EGF(u$UgI)RLDH)P5~L@Dye>td)~j;1%=|e`fLnZM5sMbl~dJHyB4l(MZ~<`@%=bJt+GQeF5fRYmK<2Y^5Q zWssjhmOy@Q83FPWWe4(;%nY6?A3Pt{cl>0Xc-)O&sij%vl~TFw>% z+lKjAR$a@Zs~i^ID(FCk63A2%naWP4lF3v;nMx|nluE1v61TbZiJcnzzJ@bH`}4ZS z_HGSB!iVVt^K11&vkT8G@;@pkRI_US+lt!vV)QtJB0<;v0wi(@B6ADB+N*wm_K2@o zPY0RNPIr%N%%Kudj_h~G%5w5vbLrPMp1eAxaGr9EEa(DsXqrzLTFf&XsHq&C4BGf( zXG-bG(!#sRgZ)dqa05#hSF7RUvDgfLuYUc;&03rVHKWO!ak&<`g{x4&3a`XMPx^eG zg@d<*7H(30eLd`FdhH(|qttt#Do?)R^LZ=gZKA`jeD~g;pN9Ri8jz+{_xEQ7`tIb% z1o;7)M?hKZ&+yt3viT#+M!$D48&+#7ANJUgjX*`HFnJ3Vg+Nt-YI)(G=_ONp?Rnz1 zo(A5hBJ6!)cMANe2m7vc;rcbqRK@m3g$ni*=7uTS+^_5JRUbr}vcw$uFo@R8tcsG4Q7YFcVWgt8r;y6# z$H@4`58nT-nH%4!t?wrVZ#u{H_2L_Ezc*gvCnq{FVN+--5j(52yZ(&8jgp)5b%h@DxLKT!kYErs1??YmO{g+IQqZ-;s`6`i@*t zS0%BYkwNbfi=T&>)?5NqgPeDt6EH2?vJ0^O(mhQ*(VZ4>u9ut@fL1UA6cIa9{ru$C zuGaSUSHZzPMQuGgbv+ta?zzJYa5C6FR=y0fa>_I}JyH9U;Zn10szo6S?M2UIuXMZ3 zhaDQg_1pE=CDAZ%j+4tU4{TP3%i~*zI?Z+UXjAVAcy`8GgLQbJ&7Lh~81o-bAiBJJ z7h{eO7tcXi`flFGbWQ1llhxs(DYhQMvb*o(;S6_IVcs`o=_PD~)y!EoXC=q{<7&~5 zWN3Y&iY)dnk%0>IOU*3x{umS0=#|=Nl@srxM=OPBr4X%b(P}W=qC}lGSABfng+BGJ za&C@PHVv1~8L2J&Im_qdC8#dtS$P5)Bh{q=ycEmR@`NGOr<~@bcdlZ(9XKvzyccZR z5BG~!ghBt1$zdjS-W#;ERNPqbFOoIwAR^xgi+8s z?lDJd(mjrR&~C|Yr>STEl|^x2+88bl43`+|RnuznYAVOhU(nS87U&ytPOnv2p;qi% z-4-^TiU9XsOb*|NPDjgQ5T4L*4tKo^*Ml~6C8fwT3`$~4MV7=62us)v6l^bjy0`hg z()|t$j@DrZtoya6F7dCsq)!GW1T0?BLg9CX6YjOb?&*c|N9YDrI7j#ScK|A{SH3IK zNNeNuJh&Nlbp9l=h}I0A!s<&$%Hbl1h&yQzqsJu;;@K{45YKTp?Gn&U^N8L;^W@%J z1>?0l!njjuCBwMf%V1pI2Vs2d4lwTc{!QV8osREx53BLEbx8g18W|3y{~dZ+AXo#| z9+^HqeUdihNS*zQ#wP}sClSVJDBdR(Y?05HW)Rx<@1@CsuTLFwv7JuPa?4UJ%d1}JI zX~@gMG?;~~Vfr2pZ$p%@?asN&=JukeH+acbtI>)B;ErnNm`b(k!C`2uq)u|H24H>A z%$$Q&DM?8A$b6{Wse?gbIjZ%9WJbC`4F)=8JX6#= z9LTHJ$XahhnCI#c*L2u#SG41Ubm(j~c_`z_%#>aKjTGm~=Q34<=!XM7_5P(sLEh^b zsWbbHGVfN9y4cMqOqaHb!C2$toi}p1p#joD?&C}RQ5NS0tZvF-2G&)1!0Xt^fImke ze2xq>z&w0aoXyoScT0R^w8|JIZ^X~tf4D?IsM?I9I;;qi-%!Bl;K-omGcp)X644Wd zl|&K?9aUbFfX^&>%Z-@~Xz}Q8k5os8JL?=UA`RRC%U`VcgnOWR%j1NYQCU8x^Au*Z_8mGPt@nnfn|KnUqfd zU6HKmr)m1RA=;fy!x~>#hs;jYVhJFi@5&sqy|yIbyjiHhZhyBB{~* zMwxL1$(rOpMPZEEreO)zhB>s~c=&@x$`xEA5FmNhcaIK~5DFehAE5y)StUm5)IW@z zzZDsvs|4BJ!L&vf7}s`IEuaut`6xt}vo)mTD2lWXZ~ie}Hs|&aRQz7NxtmAb8tPD@ zV}Fo>F|fEDs;urV9bIe;c8(}lQG@^w>_|!ERoY*9>@64ELcL1m+3!}7#hi{B0IZ=M zsqYawRJlgPp)_92=7QO8Lr`JeGg4&1@4Qsc9fm9k3vUH!U7Oa_z>W?rrd^U0apMKMs- zj!#Y$W6B~}rXD1nm{Ip8^R~Euf=6unFp-;^D7!vPw3|vFCh~K`QMva|ie2e_LPoL? zqTtT+v*y^OI=&@pZ^Y!F{mybE9F z>iuNm+#2F9jdu%iS^5I5sB0MW5NW@nrG=ivv|kw-yZ&owr2?zZ?;ou*1WcvytkaFC za%I;RBv*lEgP>7M1ZdWKqAW(Jj4t4JZuhKOLpu;X{UT`?#j>21w1Htg3k|t6PkEtQ zp_r^!UB>d|Zp)h1D!FbOs{yr| zNzy>`-aaDP4cnNfElAof1HL!qk?=G?H$|19nWdDDa&J|nRkPSU6WCR+nSp35 zKjYaxJqom-pyWqnHCROix*sEQVUgp=sT2IGiIh-ARa0V_C?smt9in8DLRtgCHA0w= z%SZys;TfB-h&M;Fmm-14Mkk9>%PFh$M3%$Mp>hbVxLku)r=L)D{gvleU3DcRj=(?` z$y8UuwKW6RkqURF?{a4)i&H!4b@i1*MOwwwSMvBGtJc4P^bvqX=yiitbud&_q!T3? zL~@;}<-2sNHu#&U9*KyEzspq|6Yo2Djh3UU3zk=hS z=z0Rx?&+AK!kkDF6L#`WCi)7#qg37mn{r@mTnq;N9IYwp=eZHXdsH!52g-6uTf?3< zEnoEBk}OhkU+|dqp{Xx9WyhvTEL!Ur57cgIY8`O-xxNLmP({v-*2_AE8XQU>L2g zn`U*Wv1*!bYg4JY5@{ICbPHNR;Umbj|cS_d=&&co5PH%E<~y0{w7SAfH#JwZ7!f5*=wN zmKDup1sn{$pWJOa`*5S#Zq@eV^@*>C%8B&wKZ z!P;?JAJkm0pcEgjDz_J_6m(h{sheIwchveq8150F3Taz%ADYiO2dscvI}?^C|Uky2YO_r$+S z#|_65-rvfm(>C0pd(VKsOFhK;gr-baNa_+JP_mUECAH}a$~4ugo1`8QfjuMm>!wfg zW}V*UJt;>C-lyn>ikYJc?<8q)p*+)oD-v%SD$u)Y!gy>AZJLq}-sCSpN~IcZp%u4J z&_gw3+#G_wsEqb-jAv-c1#rRdL8kjw&gpjWmO>1Jb|#ByURg|!S2ZoUUY}}svRPno zgyQ|eG~-s&*7G(NyNHyPZ_}z;o!Hfq4Dim4+anATJ!Y@4Q#8EMT(!Te-#VQ!W=aC zvqI|&AApp&I9WIk)U~h2G00)&OQ^rp#XZw9ej8=+jyW)*+MPM-{lr4Iph>$Ww{g?} zDuSdN>%kWjYTQ4)=a5=DQe+ypQF5yAA=FHLEe0pgR=_(MmnKVIbvLNx@5mKTtGXM( z)93TJkm(0x&wM@5#%t$JXAjN`bcMns-#{>RJt=qI>}+Ont*UWf;}0pBV>~>dWR8LP zf#+mf=#s-c&!qKIo2(T@VvIL5X$m`XYLDb6}0C?TxZ@X$`90sT3c&Ds%umG zY{;*(#d8WR@h)0|rrheVpkNTVEgtn&k5GM_-|pzb@X0)4g0oO~XkpvFLY?^*xy8uv z?{~$jYn_K0YUTA?^#rRwuc|v!@jZN8=d#HSCfRNy~1_X>{q6~ zmbN}^n;wT>F-fzSkb^9}t7)mJr2~$XVk!XrZ8XK=;UjK8A{{>Z)YYdQKL--Oz4P>` zmrcWm8W{7!7}RIRv+gLKX_be9DKkUo`~iKIJ%mOog;>WmSNmarkZ~-mGj4C*r!-E% zrDRwoZ_FpohEWC#}X`hwUoWa^YjX0CdB&vbnz0ajoB69M~ zv#)z4k@tdqP*dDKlUOEuy~O_knZM5|>hqkQjCf*O5_0auVf6zA%9!z39Wu^?6lV=e zGN)HXa0H@G1%Wo?vI>3WYEgSLorMFY_Te%SnVP^{%mt{>mO_6PnMy^CH&wp8#9(LB z-se--slC_Q?+fjBzy1EXe#bzRXwv3L>Vu-9RZ;o+_E~@^l`^iK2zvWo!|L=tdY}HH ziMR55;%8)Soxc5kQESKc!y?`STz~2-h!VACPSEjo)S8`Zo_Y?LhM9g#{Ze-{@fM|Pp89o+W53EzG_n6CKsYCw_z14;)6vBL!lalFTA+l%iT+M= zeApdt#5ne^%;#x0S+JJS(ZoJ?s7leqi_EcWZ)Y!Mev+JbM-wk~ze}TuSIc&~T2Atv z`r6^Ut8UMA>n4ufC;o=~w~j@y`3ss|NH486+fGvwr1pLwx$7@-23+r4prSr~ugDp3 z?bqIKn?52+K0sHQUKhK$+THF-pLlCbU1+ZiPsYi`Fj?`|EWiH7?}ZC3o>fJy?7~~g zCfSH1*`$Y7#WwYDC~Y!1lgZcSltg^NMP~?pfIMHwK(<^&WArU1f6g$H^dst=`T^9- z_=T-jb+6Arc|7?%0|S#y*bY@}6i7aSXJdA(Qg&yF@xlH2?*l|W?wv-yD{T%C8?y~M zWG;9I7Ui`T{S{(szM~8^SnZ(i`e3yyGDKzalPe0M8U5|Oy;vyj({MF^73b^wo`-F( ze%hylw|(l{^QXOvfEOr0KOUg&K7YTzB;Yy)=*I&z0?eQJRsvq60R4D?28H`3BTfXKRjPm7Y_gJiX*zW*yh`^!j|HB3JTp{A1{c*ST1|BZ%B4mrtfI=v z@A2|+xl}m1pI4)lrX9A2*we&AxOg->P0p4}>3J5j(JWdDvp0ghE*<1$TceEtV+;ed zgJ>!kwx&uYrpI`-29k-A3xT)qU5)MRt+Qgh&MMpA((6%3-gGX{JJR|oes++4jrvgXqyg~X7$~=2 zUk62KeQQ4jTn%(M68cN|pzOeX;H-Tfam8|+bijK1O5&yYrTDg@>b!KIGpQiC(2RWq z)SRR-uR*zJHK*6-G=dZxz>nI<{^Y2oj=sZlewrvdN5l?UalGE)Fw@{JHtX>8g;5`T zWF%Og9#bbMFF7;hHJ~q3JJTnu0-C}l7p>H**zQrWc;QIw^#eR2yDfbikIFjl5Orwy zK1FlU1nIT@Tv%W>WNN%zMwHBB)RRBuH#~ZO;lin!BI9Ubn5>i2HASAGDU$TszjQFU zsUP94XCDxR3G-D9H#)Ks%1iC*2=J-!M$MU)P79H>q+7$#Ttb0#XA5`J8{+Eqh??J< zad3LDX1x%8fjS%p+-z5ApxFas15AoMoitCL1D)yE&v_VGA%j*kc&~{~oq(S*u_bcv zocsr@Y4u{I)V`KnIu$^CA(lu!S7Ax%L*_bQjN4b^%SKd-{MN)aj#NK~ZJ^RPx?G92 zMU_lE8Zxu9>GsoQ{QfTX;J}zemw(lvb~YU=&wyi@PC%Fudf*$STi~}Ilf~o^Fu3o2pyD7kiy=O z+F&;qGDcSh09OTbWPIx=3Qy~BK@6h_ZDiqBK-`fI)VegQXWqY7MOMcnt4CIPO-8Yf zS_-epfm4dEdVu%W+9xgoJHkhm!w}(&Ru5$TZgfp++sK;0=~$ggb)M4}h3A49eS_Gw zzdt)dxoYgEfmvTgRmG+4l`PKU_6x|GktW&9h~pA51jg;B;$5_(Ndm)qN-uvgr^H$a z7dD8-tQ*(Eh_J%E3Vw=~{jo11ei-C>9=hkZS}ngy@owa2VBC}H=(ag` z{iJDta3vx5tlhCXWL;@qUu-`Y&^o8!zkbINX}Z+EG9DsS)}}EV^M9i0_RV@=W&Y;O zT24M~06vf0%E@OkJ7ZG?8nZFi5fCR;JiIDgUS)Q}lZNJir|H>`n^Y3-b+W8G1U!g+R&EMNC>*pUW z%Ra49gg|FEZ@&UGPTi%`+?OaJxYOE3TScAcE_Z(WGA)9-FXy-1eg?VsZZr=a(L`Nk za?hXQD%U$a#Z}vDo6YJF-orzj;c_b3hrQaq2H1zHJ_?CVRVTZ!2eKTeG%hIpZ1?5F z;_XNVc{|&MZE)GcT}KFPVC}smXg^bUc@_D9P^}sC-muQn4n8?+9{S|$jDwEE>}dD~ zvc0=U!x~$j1PuCvH2hq+wQ9}|WVG;E$tP2*6`33a`}wbsf%@EqH>*bG7~_c8EK3f8 z4Y$bQi83UA@CsGGe=w{hIvAF@(~Btw}a1W~afoW~af*;Si_6uLSD{p9X&{>MCHSz4$a(L>6_`(~>pJAF-|2 zY(&ZqhI7PYbHq;S!hId>pk#I~EDUhLuYt_68K4m5%t7gr?#v;vz|c{!%usYVBvyKb zC|}R5{dBrbc1TREM0W@6ykD&8Yil%(ZX$c{K^yJSu+jb~8DzWf)bnGR=YykG!(z5S zp7(3I-#=x3MeYw`G;d3)^PiPES?#yVi zy`AFyl~gLK_?o}%?ru?hHt8cATJ#Iajx4^*Syoz4m37#m%X-byvK0UDL&x8&t2g7( zGH&RxwiKsw^Afke!~&++ek)D{bzaRFM3uW{rlDhL=xai#nUtsX!N)K+tK3x9=e0x< z$9c)*1$BAYmka$1!ira%6LXEXh8qNu_Wlwt-cRZM6=r8;)H=m|Hkn84Y>us{xbUx3 zxc54xH}M^~kJrFeYpDhaz6x1x3y!*q#2d66UNRobVFK8_*JBG(Mcc8WfF$b5kDdKH zp#lq6)dizWg&DmT3v3GPZQiJ>${EWR8+l2SOwRE1P=^CfqfxH?8z$6OtZcG}D`slE zA6~O(evl<$i!?rGFIPBR{!E1niVIG|nhTP9g!X&5tWJJ!9Y^QC^T2VQ`b}O2gc(Rs zIXh>7hKp{*IFjF~QDNJ68}c`(z)?ZN732Vgcq@#H*vY}hwr^x%`;(std5*iEV=bF} zq;S34)15nYDF-QzqwP_w2NZ;^HV2!M_?>?mdy4kyI{fX6)xUuVtO4KX#+xwcQzcuo z9g)$G9;22zX_j_jV1OuP7--m@F4UJVDNjFy4hi z##l0A7REb^AqTPVRQqMcE^xIHK6(SQ+%quYt~Y1Joj!)??$u-zz`sJLhryUECf>qJ z7DhYe!db+7ldazrIKxwy2xHJBCYr((v3wUb=WvM|a2IYIAabPr~>XP zMh|bWyangMdCS+psgp7d(13XBhNQ{F0fQeC1 zKkcJbPyI!Wh3_z;^xjW)(YV_`AbartKeFrTvyYjj_b)Ph?0~En{#f1oCi#_mAH=Y= z*PnUTe@Na9FKFTCg6&_Gzgz!JRz?Ez>dKV^A$AaMaAs&uPW3=v+(hXf3qGtcwXek} zE_{WKcIA`fnYDUI?4x7?+ETvYM$%MNjg^l~>p`p!E7qBY30Y$_2&8HI56&G+%BV5_ z1G-aUcIT9RI!MZ5bK4`y4u6r(a^=|z2>f13Yw%6ok`-f?k5FF9jxSUv%jO5Hg8BZK z&VTaHMD1?lr!jlHv(1_7;5Th^f#G#q1H0^+@Xlng_#C<9c5j+1vwddw;{-}Ql*~*$ zlpKLq?^&w-n2Bv*h|vzicmT(GpK+JCN0HkQ6DEdA!w{2cD$LR7eG%8xyQ8k?Z~6$B z@I#yA`5W6pp@|Z}KYc(l;c?-Za8{%_OPtkFSJa*S47!TCBJN-{#6DS|I-{@2w!$%( zQhwUl8?8x1GXWOfZCv;=1@}H=e&VD&?rk)Jb2uLVVp$hnv{S{YMVu@2#eMfRl$rc_ z-~BwfuQ#_zro5ydbe)1;+IPQD?w6Tc7))M{HQCRPixuVAIvtpWHwsQc=)9mI!t;d- zmjcnF4+knvpof-QDfO6jQzn-z6T) z8S^RIgNHi2&!yX4nX4E`{jHn&P^s{bK)r=}9s4dU>ujmO#YSUY!`?zn^#`I5P|uSM zuB+}IiY@=z$vUZJbaEE{trec_xNSveMKjp|RF&zoaBtb-^u<{{YoclIHZwOQLj0@MS>8_7>eGuhZ*Z|>(#xsr^LF7yteczoLzeQg`tTjLs2SP4HmMyk?Z zE@eOn_hvpopdHNnmNn3J^h8?s^5)95ven@V>HxpFb@ik{$+oC2&AwI&NJIyQP@9uW zc1Z⋙I0dNe!bMjhoZcq9F~A$osAOC(fwfpfl=>umVZ8ZNoia`^ZDuELB)>-CJ zF^>vr<%37nJTkrV!tIK-Y6XwfaAA$Vfq;E;VPtnW;T}GwFs?fY!H^KI4@2@4(MfdR z{H(Uw1a{!$EB`Rad=gr?O>-pr&W$7pHAav?OE=QR8CMq7|FF zS4E}f+^QJ8*hfNdM*B|!4MuMe3sEZ`wW6pMi+bV{)NS9*6ZFM+{OI-bw*YPI2Pxax zcF(W=XP^(N1DT%$w5`n_0jR2LXwRQ-D z2diA!T`!k-2Jlj!?${Y0qtb)^LCtx-cRrJ{^%rKvf%z}=qoq^z3f9kBxFx?}eBmB- z;S9DM{SKRvu+yH#;;8US^4w-?W}EpD_Wfj5e46jT{OjfE-QP-xlXwlSboP25yuDaB zWGHt_P|Lc0H_Yc5G?i^qPjw_sn~oG|=A86};k=RUar)`jZ@V!?4WrP&r!v@*N#*sr z3>_cu2Z8>`f{h50EsFSwEaH7Xo#g=twm2P_ze%26KQ-QzlI+crocft8i7kl@zk2pO zpzKRa!j;8G#JcfCUl-^!(`0e}8p>pGCVP;YB1G#2d)SE(*}c8*O}p5+nyvf#2SYxg zN%_1q$!BtAn!n1aG*RG{w>LX9yjVWA02vo({pXA)8{;=lHsc%XPNepxv5z8pk$K8_ z95xkJZ|}d4tZ}uUpWb6$lwULC=UJ&M+Z^L_T$?dIo~f9u=c*Oq4&vTH@JrM2%(mdz zf`hkcbfhr7zLId4QlCHj=AdDVA^)hVt^cQ51DPbx5Cq9G%O!byogv;B!P=VdaG@@$ERhy_U3;uuLeyrGjANb>~>e<7}z8&F?-9@lgak#I*t(8*X!k@a%!Skb~ zY>bFnkDI>{j60ssi%d;sWDgSbch1(fLH7W7ZcU_XIoI<6i*%!XA{8)>xWiNv+cO*) z@Ej+<6r5b{W3ZB(BZeuyJuo2lYTxX9In@bTDU7W*u?t%pt8H(wyTETL5ABe=257u* zWO6Jfz+!vNKOsJRPqf9)SjBinX5lJx&dkV;0t2&~-5v~dj&`Ouc+kYVIaI0I43YdD z$@^!O!MB#Y7w<*7L_erAiMVh-%I&D!_A%tLxSV@)JT!o|D}Nv&E2p;bHJUeplc>IB zQI=niQegFhAiRN#au5{Qn%u=5AWsk$0R)6b@JJvhL=Y${Si zzp#F=ScP+L#g4IxoikS=;|So*iZwtUBpyGIzMslFk1UcIUFu)9aUz1FPqE z^C^FZ^8Fw?Hbt@nop!~fE%zMGN@p_pI@NSu3V;7K`34^0;SLwDy!pULg+BerD)IIj?=9#4D}U{3rLKXK~>nAW!v9=Dz_x8YPy z+6wW+jfBjdu3mIGE0P}HA8PI=kLU5-Ra52No$uHekRYCT8%%^JKG3Y2Z&Dqur4AE( zT3r2iO^sShKi#ONetCQ9_dmt_@8ay9PA7b(cwWv_dH3WOJ8$ZSU5(Dp*d+1P-J%nX|3TM=tC9!Ian5n zVJR#~aefVJXC@>Z-?15Ba`IYM`L3#7c6Om}$QmA2)Oi1F>cF@b_#$|XBs&qfi@YA+ zBE!YJ9`Z>Z#4SPY3=pW~z32VlFu6#0`nCXRO&lc0w+evZ{7>chv_4sbkDr~o>|SeF zf_vjGxJQ`QOg+qPsz+?oZfFLRog3bP@R=k?wg2u*;C&qc0854mff~WE6S6epJ6JOH zk>}hR1J13%$)aHt8RtHK!Z*og>hM(Yiqpq0fJy7fKn@7Ribj*Os6JPh=J258p?HPR zhhc@Cy?=2N{2wl){fA)g>bD<(m6;~m9OG5FH)HWa?KdqZ3DHgv;S=rjYkbt=ccZhz{BrA7}ha^!~%^A0!EFizDC~A{0Qh!Jco?WekBu1%jQcfOuP*s9f-$U1- z<>G@}$a%-ei4Up)Q;5cQOs8$s6{H5a1cp_a+Cl9V8hfQ0Tb;&Nf^3c+g^1v2u~T)( zIlzm$>iC@Ey@fH#Yp6Dk?7rq`(VaI7f+!cN0oUpBDfQaDa2snS9@`2HrS{9)v(tGC z@Xo2cF9(16%SMI6qpq4v`$D5$b1fEy%;=Z6!hqtc4c)bvBPOdpNVP_D&AYt%nEV6m zJWFMvVs;KqdJ>!UyEaz-fO0ifYMc>6wZ@sdII4V)q>D!t`7AT4$lFJiCyA=QkMp2W z#rLDF!thMWbN}Du3A~tAc1}x`6UhCCSp6)QL!i*#`@~dpVybs4{azrvl%0|+@s&|m zX1`0jn|-|nzioM0ss-vh*%zI1$*C)ei>#D|Nu-*Je2IzN|&8#reafQ)G`UFdZ!uBR2NQSyItq;aFe8JKibyW z(_|}J5cPq$bOw6`Fzo=Q z*7k6$WV#N@$zdF0aiT+yWlwmrvd&TtRGM*Q(OfX?VdTcnkzSiT66;{t6b=>pPx5ro zJ8B(R{EBC#0_&o0r>~O>Q}7$22PBfdo)6%EjK&2kANiO7+@P0QHQ=hI=6lG%sxCZ) zf+rgXf#us$K{a$h$19cTq4M4cdT}K_=alW8yjo+wNe7?**s{HrS8Jy33nrTvT`)P$ zx9*|~n&&s?E*>p5MoXRb=#t|9{*mIv=U2@<{{pmImZXSqq}19z`;{7%^ST{T=sd*F za_-ABFF&Vnt;b9g;2C|7pb+q+%qOQ8@UOv#{$frlKhOCa8aHzRf6r^(e_c;sXk&F`fg;e$SR;9^Ul61d$N3-AL4%a z5~g3G*@;o*m&2>uQ6EW`=#lJ|S~;e!1JRW{XO_!>D5R#Io6C(k4>ubM4W zWu=NGR}P1Z%a0w7*S66VYMe29&)Femp6RPN ze7R-i3i6i8YW%*>fOHR)o0U=D_OOs|+T1?{`JEGUxMU-cmS|+->nt=b>Lz_=Gz)ZX zelHV9#pIO+nJeo%2r|@mOmJdKlts09g{5(=cgv&!Gmj5-8QjK$8A_jnEmgW1)NHyw zNWDm5xXl-dVNiui?l?hHS@LNV?m|PS=pnA?ImsWpw6ohxBq~^^I=B7FE&iYoReU^1r4aSweYQ#b9tBtSYTE=tiqBK`x zV=8P+e+_ljRCY`IVzNNs(iF-4HN_yC|8^j#Rg-t%g2KYh$bq3NM~kf;s4^1UC%3T7 zkCN9Y99FpQ?S&P7SB(7~1=GW?Hh3|k@Vzt_nBKm+4-l>tEK>v)q)t=CdSRQnSdpIV z!5ge1NnOoLQb*NsBy)GEWj>{LFiF9oT23%FVhOra;h!cP(lhmTpOM`V6jWk;m%#1-CEN#Fca{NSLnlrYuvDgGWoAmP@D7lb(49P+P3HP-rD6xN}JQ z%ED}X&$Qna?a-vnl$zaFrL1ArKclV~lXBYcrZk=Q< zTYqImY4Q%E7V5x!lm z^eNqBPXZFuIj1)qB60g2Al>sl?xi$o+PAHs4-uBr!$=n1{T0aTo=X%k2IxMbMB9l$ z^jk1^V9LN=&oiF)qxxuJcZJR&n33G_+nfs*b6|kVbnY$gBQ`u=4Mnt8fI%(1DpnIUqd1b-^5MR8dDdx24S!E>(|)mCtR{#=mURaHk$z+Pf`=s zP~SRTLpp!XPpciv)MwKj3mGXm7(v)D=2zbsYmwg-!N%<8boLLH~& zr+$0HmlEvkb3Gr+9fYGP=(Gg`q!>dJ1#sCTAXslcP8(AhFF~S)S7q@-=`=C()$4> zxW89V{1s5c`}|)rxD@!cnWf%uWG*}toeI6*WA$?zu|?|d5P4YIg=>}OHqS2kq>A`m zaC}-0YNCRYPsyTK#afOV4LAp-#s488DTR583r&n3bFZ=ps*mFbgHk!TIS zib+8(68#AX3?@|=QB5QobZ%)g^n)Ar*(8Fn{S4`E3Y-49F!&do zkKLB0QiDca>t9{<%;ahkq;HvK`0^M&vTh}o>0CJtyq+w)=0J_@MbjLp^?GYt2I!&l zbNG$p6#Ys~P>yz^3OF6$+AT08=+OPTJrO^ zZ-;_oI0wg<91hA;xtgm!u6s1f{i|#yb`Fs!=`nSeUFC1G*X&vzrgxl5FI{iHP+KmB zyJ>Kv=Hp1>-=U5wNhrh5Bh~EHg{R>_#Y6jhn!)2dH(`A%+gi&kXL9a7S(A z-s<9?wkRj7Y9YS3>Ws}$^(+?F0;llnd}rKNHk!r{*w`MenJPE-=aU($A?q0BnewT{ zHzY1N?{w7# zRINAQuo;L&1Ce)q82ju=!u=R(KJU3uaCoglilkIg*+P*@`#h4(71ZHE=!ZWuBSp+ ztsp?wNUBzl;y?iMvzL_E#VC?VGm?qL5`ST>a53e%d|FnXLFwg1T~+^3@@c~*t3C6L zl2~cg00Hk6>Mf#1CHXO6W4bJz>R1tPuhF8VumCS7<~_{e%5c>{rtkbJvPmQew`o09 zENlvC9q}+TyEG>}pJji!OPHQIBl5?Tvwf$0ehVc1ov3_%caYET5AwO~AfMY0@}YMv z$$7;=KG9;It&v};MD*xcw_gfp{|c_kCT@qr#q0{eo(s4=7jSzBKy~GZ*kpAan!(J!U71N zi>q5F5(oPZF7chsM=@NeuLc<+sQ~0wPrGRokjUiezYQxr0<%A*PxV1yqtz7EUAZX8 zle3ZH6}oW+YyOpv<50#BdV?LW+ z+H@jeEL}&9w5+y#v}SlMbCFfQK3)zI&k+*zn}}CoDU$r9mS+uC!Y0>o%hc*9-k+w| z@wM?*SuBqW2Y4EJ(}m>=Sa!twH(dy4!S2abEB0St?bRmTD>Mh@)42n2zBD;c)R#A1 zctPcYDL4=I>%sbv37)Cd^V>;&|N9X6dA5VqezxNma?MG;WK+H1GQ>H^d_2osL22&! zf-a-d!o5TwtFlUTZFZO8c?ugYwD%xqL8qk;5_fV?Q_Tuib!z`joG2U700XD zM+2(-w5na?Cxv&ahDm^=?XUiCa67bUl^-g@sxnE$8%=XiH2dQeR>i%K)|1!nV^b#$ z^cGhIy}BP4?PvRi{r&AZrm=iEcR*(#Ns(tWN`uS{KX-*bHO7eB^}d2F)jSJ^7B(Km zJbDB_U_X&DX8xc;!0`D)qHaU^icr`V6!=1T6FNW#=fgNp#j$d5~j&rMBOS za^Odp8+5e;ug&aNd768uhC+|o&sJ5|3Y!N$z+P>v?p*lOt6>dd;>oi_Iz9T^SvH2o zVe2UMwdL!kD@B)4Y3glC6Ry@qcqnW@9|$gdBP_Z}$5_I1`_BgnUqN?rY;m;zT)2si z9Iw8Y+Ycr@-C?R9M+KdKD$bHUW}rrrJVZ%s3(5IKRL~*)X`)vqrjPU|rUb5ydXsZ$ zvrH8B!ELo_{x%&mTP!`?m)$; z)d&EIA&P-{a)y^n9gIvV8RuwD4Nd^FpQHKh{PQpV0KDj=e#6y;z+2>eXwwf)F*B9N zj9(Qy*V&F$jwDa8BRa4-pyt!dpeAKz*I3{ zregb{bP!}W+m8T;Tx*+n`Ex)NPa6)z>fY29#$-F3`UI#qX1^|=1n=JPIP`9tBp*>PY#Vs!GC~ zGbvGjUz#R{U zArnnwe|)}JjKT{y-o_<6gZv|-B@qc?V$wn|P)=T8y;pB-S)-@SinR*-%DY87QDy#K zpF>0&;*e8g`0Ih`{^aFNS@$+1FGF6Xf5Z*Pqc0(iNl+NOXzwT|2P35$Mk~B?$II2} z@wo3nbbMZk8#J1oq*rR;d>n-J9}YHKLf4uB(a{I-y|AX6~Ap57>eu?b2%DxoVvm-c- z#Da|c=3}7{8`q?`ZZO{SADsLzoZJtK+vkafz80C<0oWc2tNDbl&e;5Wgo9saI9NBe zerkU7^Nak1m%D@ez3m1k$$Pi1(Jv1x^V_iBru~lVcWHfm&U^tdJ;3_OAmC4PSR5^W zugjn78munipRYQT_sZOhTFs#Yr&jHSis`)f_|Sprs;ST9rN@bVlxK1~ty6|j-re!l z7MxL?lryRpWWd)J9>3Rlp|s}tBhoz(IOFNlT(Gm=naEAbMm8)UI*{;;9ti$Aqh6Sb z|8<$EILMFI3)8!N{yho8YVInb{LV##J{C2%Hly*a6@0c5>k!UK{)kZ0db3uC?w{-F-`YHS>6-T6Z~byCxp>X9#P zY%UPZ+rFoLDb$1xiv}J8xsO0aSoV`rAAR}o)NeVnjBsjmXL)=|Ds5AC9;d^$Wr znt1z7+{}KLd05@>qj+7$2Ig|U9^aGso)YYGryth{|1G=nTP}~(@9vs{GyT}^Y0G!e zcNTujee)r%!t&|P$GzNlcVWAy;|s>6^+^5h>9W%N7+wp@eWD4`KwAEtxvwPdav#%q zVUF()HB&g$rhEAA%)MOu%5S;4$}c?Ma{AlpA1t#A@8Ek1pStsN`0i;x<(+;iBmGoX z`lV$b%6tZK_wyafTv~@TAJye8d}4)s*Zf{+~7vRetKv8BgK) ze5v_#?AP(7X6m1ssefuN^*>gP9tA1wQ$-z-i)q_Dv=a9wzNO~L_}!InX}Z+iIdS9E zrm5D-sn#l((x+Nam}=FgS|d}f)o5OsYCUnPH8|B8ooWqDwZ^7eYnZJ3-}n>);=|d@ zrS;SM4n1!@oqnqC+F+)3xzjK2cV5o_f}H)Loc)Qxes0b$Z%^~RyXMo#Pvgo}e1b`^ z2nLm{GF8SM`73N`_)>S8&)tRXo{ld#maE@AfyYC^dMI27@A+@(c(3-ze}~FP{`yom zeQLY3{nUo4uRhgLUs`5bURp-#pPFfSYNqj0^N!$I4#)X-&^rp`f2=M`u#0_ zOTX9QxAc1-ejnodKYWL>r{$%vr1_?0-dXtD$otN|j}qs9;&*4bc@Op0_uBBi98;gv zv+2_@v%WtM-<{?6PU7j)T&eHx!gnbDv|X0MvDCdZ{Ze-dS85)669tEP>vU~(p2fG9 zZ-MU`zN`2y=X)Msv}8)tG&B*uF-(2O+{JG*@$?ObZzHC@&MY(6M$KbuHAStrnTy$t z8I5_3Y0IXwrcHWlrdn*jum|A*&0~ixp2xmb0_?E=`d(Bh{DALge0jUv>6eDfeRu52 zZ@D~Dzq@Oy?EmifBhoJS9V)-O3)?*%e>qrFzk9l@G`~aP;-2#V4sCExe8R&|LVMm- zGsWFqG4u1-5p=)*KYUw&qs@0HbAqrt`j*xq%}4&JT}S`_6Th^6hcfR7Z}()_p~_GF z@5!>1SErqBzILTgZKEJ7N)=?)8ywY*Go`G{CJPd2zR*z7Z%srn|59 zAM3pHKy^!V;MVK$EU%qAU6<_}!ly}E->xMegNj{HEcHJs#8Vo@QMmGwyK_t&*duNd z|6?53Bis?#Bis?#Bh1m9s<^io3N@%J)Fr%Ke4~-m`7%^6&tC_ZscNja%EC{kDhqQO61g|=JLV$_ z$38l}V~z_K31I#jb{@TNi0iq=wO6R0vWFa>_LKZ`^G++o^IZ1vYo4<&N{#~?qZ|}uM&1X zn8kucze#n#&Nzm!BBxAqpB zk`IATW(mZG%gKwd_cjSgYkwUaJlxtzxh7wx3NSl-Piml|N}Rlq*vKy^%*sxFN(e%; zS+;2zm0Fy9gvcEvSQUs`GZm727{3txqgcfi@_n*^1ugk5X7Y6&kggJ(OJJDOLfK!s}HS<(|~5#8auN4qR7`FttVUE7cZu0uQ2&p>Fu7)}9x- z?R=Q9Hc5G88Kyugkv5%c3@`O&u~A-lFCIK*H9b(|KK(Zg2vbE98_N^n1gOsup*h#h z*QyYq(S5OSH|S80l|yF#kS8=@m|D0Lf>JZ_tXW+T=}!U%rqF9_ob5+|rZ z`bpmfiZXm!H3JUSJoYNRiPhHHZ>n1dEG7G>^fX0Ki6>zdYt{4~X!Wy-01wji6Gkd~ zTf(UKpxqIHw-88zR|vb+k?QoR$Z(C5dgge1_b8iMXY)uI-bY2OCadrosU;H_(>wu7 zCDqYakySByA5msLX8L+7yfwxde@E zAZcpd!Wvq5>X$KxKRVaaQnsG^n!!*0oi*^MJsAL}f|-oUF*dbplRtC5Pe_PBI~~9S-j$qy==3}xr0t-;Wn3j zgYq8*K3D|#gxx?^Zw!RT@cTCBMyhlBZybSTLT!Z4j&C;0j-N>uo z*G7wDbe!b1YT`=G@EUbhorS*x#iKQv(}?~XBZzM6wR1d{=})zEs1JSQT_ZIo*KAxg zQV7u?KF^g2-KXT-m|rsa?%jW2eXX{G#l5!`Q<9#o7pwiQR$3HN%7su*b-tmJPYPA9 zS+QD7N|4(kPoxqv1czQ|*zNa1Cd3iCko7|wg4Eagow3p%k-VJH4c5&+oI%&e73c91 z{juzrq-73GhDQ>55E;tz4#;o|!FNQ47Opi_vG8-~5Jm&megcE3<1v~U!kSX?oUHV0 zv5$LYqo;vpY~%MC;b9+3LF$?^H`eXxKp8U>ZsHcqdbTsQy8Yl+)lqenM2zUTH!Q$!16 z>RsF~wJ7)C{nELaZf-t`49;Nn*o8+DZ)_DAd$$>0auT`9f)(@1?9JwwLO+_B7zr+8qpSd1dCe zyb4~l6FTN|qA+@4pE_1n-~SsO|($n&W4qYdW*i8g#v4(C>_ zd>hK6--as6_q?rB49f$PjT@3GePobbs!U{RS`+YG&n2u+>hL?CLL<1NGFm(^A`P#} zHiA%FGEAqx()f$hHaP9c=vSf*1m_cg^D!BmOZL!r2xl{HO|&L#tH7w*2-d*^Lqqf5 zr>-?GIOudPS4|J3u_-x7z%V?r5GKoo4;rkQ_Wpl=WH`9=|qF$mUNvX&*Bwt zVCVzooqtceXH?uHzus1YnPA@N;ZM(p%g@7Yo%3Pv!UcSOom192rySNfWvz1p|Mrq~ zjtWW60xl+*voXRNvm#WF5h=u1P6k~G&vn##8bba36;ie(EZ7waZ%I>{g(}%|S0IcfSU)LBu zyuNAP`4vt-nAMT6#e2kkbZIke$Wa?6k5w?yGHhx#qB{s%!B+(ZFk}r2o!im_6@Mjr zJLpF9gN(kANpE&p-=p!J+B*MP5tNP7Mnea{`T6Qwac_r`b(OejjKxt`NnA0!?;tkr z-gK_7sEej&1}WPzgq0szmqZ+lO6?CaHVttsVx%-%#U`{3)hr9GIc#{=?qyCtHb8rw z9D=^2P3kKcIdGN1fvaR>Jfx9ao!NbY>4&)z?Y=wI&IN1Ij8);gUYtV^WOLFi4h38D z|3lcA+;qmbhPM8{yuAsWTt&49+_|^=_BNADGeh@e5~c?v@zOn$Wkw(%1PmY$1OY*N z5+P&}O;B2UhziXeM_ivuWKdA@Vt^=$DB!+7MO+@@9u$>TP*FfoaC@S{_y3<$b?@z- z4hepK-~5uUTc@f{ojP^u)T#X}(W9(tY4TBx;w0^hc2|a$0<+@rLZDWH%*$Y~B&GLo zP;5Ua_H?#}es;^o(U0JPEJ^{C4F^ZXr3GAhA~dLaaWa+NWgV~D|8&(YOUPXq(ob`b z29`t$#scL;`rs-v7mY#^%d`rn)J)`SXAe zpXiSCG)^H6hu?rhjdJuec^-pMm)Agx$-4(R+?@R(c!DF4)@kyWPs+1ki-sE4ka{`w zsjnm;Gust1FQ-Y?xSp7vm>~EP5Q%ICD;VlD>4b6`93@G}Bw-hx$#t59F+<@1Z5GHS zGatuUjB!y|!O`$mD^DM{KNi=i|A=fA{&CrFnb^9=01I+jgx;jYv*)wj^mH;k4S!A! zpCfGS_jtxYtWkfI20YU8zMfl92kWHmNonP*8m-kF+DBBx#dve4rMSJgxCXPPIPZse zI$hG)o*FsT(d6>Sv!&}<*REL&~F29gF-ysS)BSKuT;qLjr+nHD%cQ8 z*`iXTeD|zZ7rb{(!4mVAK%lhe=*OZ2g;&jM#f2MvbUB1sY4AAp1LMUZ{_VirUF=O) zOI{&u4s7CHBss4MCUU?Jt8wgpuV@0xZ&SmfydNg-(kL4|;=6F9V)q64AdvQ#`ylX6lNixoZM@xbZHP(s8`~W6kxU#7IpLqv z6kG>Xd(pV3>pwuD90=e3&2k-)caK&koD>fp(*;c&7iI_CRW>k#hB;WV|f&e>! z&}*6UhBt$&Hl_Wavi>BMo`U7tocc|zXvt;GPT|_cYdq?l;jHSOE<6D*?cd5L)r`J& zp$XL%h%$&BJ=F;I0BJwXwn*2wCHk$lAv4E0rZLhEX)BHQVvdUuaHe!yNVfstF&?JT z5h%p36fw47d#O$XOXOJdu8FlW}%fC^|EV|Qjv9y3uX#hP2J zd|(^V+W4h$(J0%hSX7L|`%z*tWpD$om1qemnGg$aX~L@LHG!cF)*F>zizsRYl`NH5 z>QIgYX{+KKCS)sAJ~=B1s(gwtL8SfQB8mFi{XpJm{Q2t1)Llgtqc=AGtO>gyw@xBri)mJz)DOZ zJB=B>Lbf)I9t(;W7a?#4oAJi(bJAJ|n2nXrCXGkjjV>^XB&IB|79+Af%m=(g>j{O>FVqtvAqf{wmP}w>Muzw;ulE`xW4ZDgesPfum5pV86=#m)M_t5Qk zDTB$mE-p6tD?^u=&?OpL_BFUXM0dcXo@Y|e*VOwkHSe4ICFBg7;0xx$1ISh=XL;SF zf;%OYv2{_Xc+Kl4q1NI>ijhibS21Z@5k(I*NW8Gv=tv_3;}>+#M#U4ddi29K%IxIg zlb!!}xj++GY~zxb*r{ibpX?`&v;Bl!sDCj+V5goACl%VHFJbiE*`yMwf^Mtm{~TPQ zNlGkglKutF&6uQOQ(cODadx_3OhTv0d^;I|HNYWLbRr{goWLeCR3nft4iZMoL-G_O z(AsmW5K`T@W0bkZTP@{wyX-L>~U zP*s0{p1i=AapgH{%3ZA?xX~Lm{co6pC>uG}!4$M1aZ@lk(-bUrp_p^L%rvRWtsTy3 zIiW%x<`<}<85q?Hrk2KwOY)7wqf!;8%R_5MM(_s1OUZ0RPS3rz7wV9X=_9LE zsE<933`_1z;`M?xbcB{Rq}pA!?0>4x%&F=IFsB zLKx#JC}THGX%p61p`melxhIyie-Dz<7Gch6i?kxuke%C#-7qA{lG@;^bPcy0iZ&US zsi&ojG^ilj1?F4%tZuwS#++FTkUHW7M096$0j?W>KoVJd6opE(OliEh^c4K!>XJUi zQ1FJnjOyonET9E%7IjONu}<-1o1RZXi1&HhHO@TC@4AD zP9j5n(%x{hOr*>*7^wZ4TDDb_h2Vc%jiH8jp~h@TT#a=Y(LSvbi%Gj^rf$({T-=}# zQJ;k+KyjhW4!s_gZS|Rm3!^O!V;O|fT!nBCw^3!rjRC=u*dd5mYnkdoj9UwtS~y0vS6%!USzoo_4Pt~twTj9m9XpEj*N6>6f)v&G(=W}b^O&)Lj#HOV|%$iZ^V z6>^$+_8DfbEl1uJQ57mW>Mn>$3{hNsJ=IGp*f1JXcFiV}=$)rFV*}-xp#@z@SL8$; z`ws1glL_v*;-7yc_T(;T+&YD^DmrxeKkv-3|>Vi6`V^4?{U<{E5rs3g{fykJgMM3aryLK zu$iAt{toAy*z~9#s_dbb z8Q%EJYH2)ptt93z8Utxw1(yY0RV!y}i}Q_NQLD?WEle54i>&YS;o}|w@-tdr7N4Dh z!i)j^GEBla!%N%%yWt$^U!)eA!W;Re%}xT)ku(2sYaq}we26lA1pSg0myFj(Rh#^D z+7KxQA2XGTRJ1j|rOqWTdUWO;j@21rXQiAbi>ALMOR#ZHL+Ha~GCE$(wL`oxmd+l^ z4AC=w&cMh^5MTyiaqK7^A9 z5=EC>@5C$w=Q)1MjuL-j`%JwN$tL+DM$qKjaSxnaQ>!rAK$CB4g*{H#f3?DB7ReoQ zv9z>`LR#Kx zC-Ew;bzCWn8`(kUy$;7(d_MS%8>`*q2M5ZGdZKev2ew zBhpJiv>nAsQQ}KC1caTW=g&co7^gE!U8{-q@jV7vdX>l{@nZ7oyL*gRixBo2c?@8f zQ5Vi{7Q64>3dEenM(>zOXJqqUMg35+llWq<(vR^NVwg|7Qfj)_{_&lsX6D8`xHyyR zC<6r#3yFnvZ5ktdI%}~uS}?1Sz%qKTY#nE;45FZuX1Ez?6_TS56wJHyS&k*_-nDrr zCNgHNpqsE<}Tby%SC}7rO<%-Oj~Iq^(Yq zNmVHIJRUL1=F`T52SZ4)N|>wYlx+`%UFSYeMp^iW9ceTjgNu>KX)-AeJJO>|_2xTT zuYWh=IZZl|v3LoA^%AkeWF$S2Sc=bzB}_)4R=5QjP05=x+>7D(bCDcdXN4b4Vnnw{ z$Ji{gT^iR13(W6BWHbmNl*EC@(17(jv3moSU6A`y9^dTgw4W(!k0O0WkZ-F-SvYcW%~xm{A)^fciZ!X-B0 zMERU;Y0Q*y0-FAe&NE^1370wlUSVmF@g-E~Hr;FcK78WBMZQ}ml^Qm=fCzL)?CZg9 z`joX^{WfqK>K8pNe=psbtXZPMpXeDFY#u!&=_>7wKhQr@#3{r+}Z_3!N-3?r9u| zoEn>%ootrDW}#$?(zJxaQ#)dObXyqqB|FDbx!`!sTDs z^IQQ6kT}%P!G9A_+7!IMJz%Q|cpqH3^BwaNi8|{({syS)FG9ws4dQ9}UJQ84!<(!d zzMFZ#NFqm?c&F+vaE|=DIPn4lMbfVT0eLVFqhe2s~cZBt&<|b9IuZpB19&N@-0cu(>CJv*ZO=N6gsURCekQApv?pH?0?q zcNKBjtPC2`8SLzHNALD3k4J6n;joP*`_T}dVnaCmKHCt`?zVvvM{V-p1NhdubrQqK z`!#KKi|M=VjNW7-w?2k~cdV~{_KoCl5AZx^cX+Jq9Y#*GXH5C>Ng3q1HeB}E(snSE zhiWIOrNzEd>oi$7^iXurLmdQE5FzzRsqpFG}tv?A| ztvRYa!#oG~i+H>zxSrZ0T*<__9qIZY=o%@3DN>Rqi&Y;53j+o?P5!!ARAKq*(|{Kj z4=J>-eknOUGseQUf>|B5X1$h+I(#l@VS9>n@xD;-FdKz2nS9+7 z`i0UKsw_$`KMHETelpo?R8{>&^vuH?$p4`b z=dqm&_E-mx4zerRz3i4fDP+8WE~X%q(D-kxASSY*#Y}XxL;vK~F09BptW@4G6TzPVgxJsJ!VK$L`CE zNBeYpy3YV0a+ONp7Jq$5tVtj?kdGbaG?}?v$+BrFF2{F=c6G*i3pzCa?lfk4>>e}xG+KkLyZ zmp`XT;K+V0x{4rq08T?;ETD66OSoVJjZ!m2sRdh;$W?(2u9E(H;xtg1npjO**&in5 z;&$3VN>@tk3>>|Fm>NM>0@2%^$5a^4UUzm-p^x{UaSd^i!O*;V7& zC0X-Tot5py^eS!vT7|8~`(dU|RAF`%n)~RNaP5$TZ@u(P3Tu#O-}n<+`s4JrS(pig}r^-)x- zf;~C7x@$09!*hptdCObv>ElSl`c9=%S%UoIiT;$Ci;e|Aw>GGE3 z!|&=W4?AU2*e=eXLQd)}oN`{p)m;+h4X&zf2?bXm1NV?6W_ra5gqqd8x~o) zWZ+2y!F{FInH~eTe+^xWrab1BUtO{BY|3H0Ot!c5Z7I2XTlzMwV_cVQScLcfivDY< zDcpU$LGx9fjn`A<8*hKf{*~_`6aHaSlAD|!dJ>;&c5Z{ORD*w?b$o4ldgz}7m)4&p zA^ivea6ZEN5ysKkntl^D7hwR-L)ct|{gGjFP1pd!031Nr0K$IBumKY`4`Be#Mc6!q z-NdkYCTu>!0PIKDe1uIgY`zKG2Vnq~)(K^U{zp;Z%3p^NW$N513i`hIga`j9xiT1; zqSy~5FtnJWz&3sgmF#~Id&#D#1BI_{g3Aj0)Ai%;B4Cm~4cQtug#eLr*+i!SvOVsm z4gs=7jDrz{WTdJY!=VC}h8X09>r);T^?CA(c6a zi}_W#xTStPrikjBAfvGjb&}3Y{2A`~(20@FAtya$&VF^iga_)v*?Sy@OjakI%uczU z(h>D#KkA`}>?MLe%=!Gl}4w)5E zWH|O?ee3Z)l%Ie4s`!FpY1`EIz~)HIz7OA!2-gqrrQ-8Ld`(bSU1mKvXEkrkkR7dtK3;^|D%V?yV<$=jRjrBnzdLNgS{l(n2qDn zaHhOOhBL)xrr}K6{{*x_JoLi40Z+y;DF~;lT1vZk`g9s6lWH}*_?xMvcWz4$ZonC( z@daJQ#rJtQ(v!x~B?M+#gC10Sd>VLF-bEq@j6_bdk;^q#$(=yHp=6WZG0=7JPhWnp}YB~RH_PjRr#U$Tc5#!vxuu}UsIS<)Q?RAKf)T|-wF zaTZe|6+9K^j4)UP#6E7EUV2@Yv?k?^;%me4J9N+mDCeH&pu4~#D4)COq=Gx?_*;Ohrf`~c3{!$T2x{`zTqcwD{|gwYNA3ZT8^MeII{{&h8hU|)2Ek!XN9x>JuVJxa2B78dSKKgM?+L~bOx>}6YPtE)pWzm8o z^5|AaQ&vb6Swam+H$Kdxjp4|ggtT!H)^J{$3DF61j#I(hg|_WV%~}%|AQ=;oYU|lKjhevHBrv_xR{s5X1r^N2-nnlgIJSF zjy_W4dK4#>$Ndiw2hO;{r{8Dd3#CBQ_IEH0?$vaGHU_5h+w{F4wLkC0)0oF@(4?&>m3>r6Y@SQ_z{dn}TCMnauz1nLs; zCElC8^qS0?%DJG4Z@9buhgqni!v7>glUnYUV9;axRyiX~9t^^;8~Tmq zF{biINNjb$$+)%Y$p=vJn9@O)yNK7bWMnFDaPVAw-!ZifUgL>2cM^GwVLqJ`OK5Te7KZ=JN zM!XvT$KxhPAFP}!V@FZ#3x0ICT}qu|88B%Lj$9Aa{@&bgk_>)pL|oi+o%+`iHiF^J zSK!JPJ3J0f7%WF@uInOTSAqR6pwdnTzXJ-ir3Vcrdf8~iPdQ}Srl?OHzNzeP zz8ISlbKVGdn0fxEiR`sblc`+!^*@JwUhGx;7Xm-lJBWk(Whl#ze=>lW8Dae4+2~F9 zQNJ2Vz)}=%#2dN_aVw5Ea<7%BfWD&t1!iR~U6OAygDv^92*4qvKL5*%!9z)a&Q4hX z`Z^qfBGw|o8Vf$w@qy?o_@|16Th%hhK!{|k8n@-1Opy{F7Jv4_K1STfbQ)k9P48pU zd+YRiwZ5bqU1O(LuHkiucQA#Zk`$@o!IadE-qwa^Gk(qp^B+K75&@GO5{{4|02}L~ zkks&!*{Lw}Y=+(u3&qy=p2j_GP;VF$DlsY%<)q&t;oI?}8Dg2>VblYJ;rDb>!6S5_ zQU4%rD)^(gUht^6>EJQA6cVPQ%Vcz!jxOWTWqP_yPgl}`-&U^h$YCf~TVirm|0b*Q zAa$-mH;EG7L1J{r%F8E_*;cYQ``6x@+ zFaL@3qHQsOE5A|O5;+l_!%)+K7)6^a~Rh{UYNC;k}D%6C3sKQLEUe#7=k z0$d@(w$}#~n+Q#L0Y>6Pq|H>kL=y87fqHRbAJ!WmuMi!t8r}`M5rNjbKOZ4UpHBop zXW>+kFhD}V2=U*80XR)_DuEaO#d4o@A(w!v1>pMgfFi&XCggg7c*u*REH8G2!jIKo z9EH#&cz|v%Ll&{Kegr*Sfrq+hmvuusf^Cw?T=|XKq!|;y-eIV)OveOk*%Fw+FedNl zx)XCy!iqs7k1AkmtA8{EYH|+3ouW7x@}}`lN^xc6-F`Wn zZqpDcxII>B0Um%!V)E22rTo1R&PEvvPsYQUzH>M#Q}Eb+XbYeq?`Agt}yG zSAL_q#FK#>-=QuUYU*+>fb2({=x#Gm81>tZzVXo0xPyF-#ypOwkse%}a8X`{Sx>fw z$JlfLGv1+WLU&@>6wAc*7a~s3M_yfu>6VCBu}H}oku1Y@5eZxqjFE2dkMT`k(=g-W z5t0bLF}^Fms()znM|@*w3*R`T^_L>8wG8)W36QV27~ek^VI1Ed0#_6a#`lDA3dvfH zMUzI{h}Mf^v|bsn;{%xkk0y5oiOTDKipdpx3Yw!xT|td& zSBhMcV76K#8q*kQ%zdreXQRkrhJ7|*s1z5v#$LPE|PUi~Yx!Ys{JTb^zsWxTa zMCwD@mB3}t>K}vzqyX}6DTtd-!8}8OxMBX6#PZ(}&;MA-AI~i!nJd4Y@@J@#Pt9Kj zFmi4FH*q2{8oN8r?vc35grf-Ldu2^i338!|DU8orltD)(?}ER z{+W$qE=>wgPN0&t!u7A*jJ~o zWPj_DJ{R3T0%OlzVAkustbG{(NgoU)u|IO^fcJ&}5xn4^;QuRISDe(4IuUuD;zQ3x z>Y`~CP`7~8N$NO3&nPu$5G;0EvKuS}QpoPJi93S&3O#^Oq>)g#j7-0UGn(+rNgRVZ zcn{@a^R*%g!-sg1OcRe)JxQ!6#`f_9g(4c8<25Be`4ts;vvVP{)TxaNnX7!RbuMJi z{tGbUfo~?#Z$ra6k%ah|WALF!=5>@%K_Zm53MVy;OR7e)xXEr9zAB%wkbwk!7>0B^ z`tETs0)GX~Lqo-fmdI(TO_cMBQ|fak%xAH$Pd_oxU{*TN0Lz#mM;}D4KzN8tJq_)| zP|J$|1A&X_q=F@I$ZX%D>-@MH$Vg%?@|*aZgiq~)PTi}YWO(-BbzZ3N-yz> ze{0mEJ~m;81{i)vb6*ECI&^F*(fS4gyR0ZlvN-B->mQb<7qTL7Z+Py4RB<$evq}n< zH7o%;dMGa-W}Z5u3xf(vBRP(P>5cN|@|rBizmXO24#PWx;UI&7ZVUsxF$^>y`usOD zz4T-6hU{>x5f%M8q3qDQeR1e>&4Zo#hM=e{gikVDmflh$^YoR?q`a?IpN6IBO*|Vp z^|;l!UP@m=yN=VKc+>b{n+#QdFi1q5ETfYO4uQieA(Sq`bOkOn^XxJIBAV+&Cu29# z{O-`FG`CXx*?886GS6i2T$2aA%uD=_(p=;m;_PJq8Ktp&3Y@hjmorf+IKreo(nKSe(XF51=zdF-`%8e5`K*vM zso;4guDEDigirhg)3roEk4#h)v5~;vN@^ZZwvkbPCjDl}8yqG0%n|0J;Ys2|BV8=) zgz`v#Oq!4bli?ht&$p1-45DE)bNJq$qIMJul(pn1e0o*4Lmue}lv$D1X1Y*R!)I?=oPeG8O zD4vK!DH*)L&?fEN=u0lh4;_}4j*7MTNggBLO$$T-5q^)FLQ1W&|T(RI%TzFw~FN@m6~WPZjn6r^PN^JpAY zRyKYB%F8_yp9VXp$XMZBGO?YE!yj}=%KsvAOEzx%qhWx53;eT_vh3P;3{VB6WCEcv z>oE)P8U=heN+BTKIDmk~At2Lu9sws<07UaN&_KyMUEEagVsX9TCE})onz)%@94>ju z_;eYcF5}Z>e7cNJSK=$rZ$P;&BhSqm`d32<_Uhjd#xk)m_K-ItF2?o(B`U3f*O(gc zSq}<2)6|nMcL1^58a~0Re_axiHjTB+tKTdjlBpn6@J#|@Nffk~SO1oPNVI@p>?`eO zfgb)jJ}K4u^+}$sU!h0`%1Vm)CM7lwNwD9{+kP`s{l>P+kuwJb z5A^%hz^V7#BZKc~2E@M*_+=jw_OOoU+@y3ainW@>Tu+q2=wo&r&#t>mHn}Pe((@$j z(iG0{5B~{2f&<5$qdXDQ8^=8Y{y9)VsL!)J;od7y4%oNR0r4{kF9v7AkskUnh=Knb z$^vQSSm#vQif*t5G5T`mwzocgbZddUv6ZV|jrcgNQ-3G(YBCS6{xiUwCbPvFEzb%n zf1L#G{Y_j!{^H_ogktv}JmW^j%!gz07)eg^aK7`gPxL=!>?rWr)#X~;s8c&pd zoT;Vlr4q-RG{u}|Zjp}7S5noF0goI7${EHe6dU+RZyxul3A@rRY99EwNAh;KpFo*X zMc9Zhdk-uiJz-kE5CzXUsrn>bp7NfuHd)^EUdo5tRYF^8w*vIieICa#OY-RxARW+J9M#_$jWrjus6D1cZw-Rce7>6 zo6`xPkMgbGfgE|A8JUB7tMq{7J!wsLS6c7#auVN9EO$cfXWykdBL}%Cje4{_Ta-qBS9LC<;CXkirDe-zyY$ju;pO|rg2yAh zbu93j^YhRv$>P$zabRnFy0iuts>7zG)wwfY9WvRrfkAA#jaaLz-WQ`)NX}Q2IP^+s z&bashd4B{PZ49U0f{m(BN0cz)V0(}A1yje2G=j~D#cjAE0J2Vh2km;hYS)3rA;d;p zbAc<;ogLMs)P=QAL07Jd69J&oULUaJF#w?&5igl|D2cszXt#1r=F}#Tp+|Sl3BO*6 zuZcT(Ozc(onq)wu{|&f>Gs9arao#4UuoWF(HNtYO@h<8Bdp}|M)_C9S0K1E@zSekM zQ!`;cVTIOswGOcJ2-~YQ-iJECZX&F=HQpaPz`EXucs;H0MmxY>+5z^~4zN#jfZajZ zJ9$HE#QUC$X2M1Zdsl0`S9E~AgRqNRGzR<#SPiQM9~9V>3vX=f|QI zTcUMoG`5UPc_lz(!U zu%km3uff}eE0Zi{2zom%M6Sq9$06ua0g?O=bd`WeY6!YPKqM;!eMLaLg*gQAaf*su z!W@ElEptWgU=BgNmANu`1%xaFc~FH|s=c5R*_CfcdENkB?$mc+Cqd2|ZcI|4>)>wW zWlsGnfK@$R$Fbdz=dWChN;`=^4D%h-VIz9Xz@+#X8-}FV*Yl4)05)5FC4TjyWl3@# z=+pNPG>MW0+nbv!dJ@t>ICVZpF*PED6 ziU#~NooFC9!HnIBEb~3j(j|(#3s8u`&*sGMf7Waf?9Gma!#z#I7cBt#r@3 z1~P}M*qPh2n48XVgnP(DHXsyJh+xK@!5jFE8^+=2tnP*FfS?^P2>?q+G+HlS;v&%e zevzFw0!qoFo80_a%mocUH+df21@-@i*yM4tOY?&vJq}w^M`vm9mRT1OEY(@xhR7Jl z`UjyTNxUB``8iF&t7BMT?*$*yF?j?priwSoA&A^&H_FBb0%&=Ed=jC znE8AsKdnT*iJr-e@T)@jW_;O_Lc9L!HvyvT>hLOgiXi zxf^3n_s=$sQ$LEL2zh47RG!BX8p^YPMV_HX$XT45MOT8A5cQ$sIG>__D6SF@LvckL zYPzwWh+y(T(j?5p<+LdDte4=t+hXcj39i2oG7ceU)cWJdVhE+H&PNn5Re&EFLHgrdRRmirzFX{2$FX?hWHcqTQ7#Vwk=U zE_l)OnUZ-+hqXEJ7}(j3GqNnP(`1&Ji7VLGa?UQR-%M7E7Xx_Kye7g%JV08Q_;1z_m}(-WOK)%en)f&hII8w^ z)ibkzE)KE-MO>7K$(GH8Xn8cJ-mWTMIA?-FS8-dR3(v}R70~zy!Q~>q-a{@RTf>GQ z#n_M|8*;qVDwQ0!e1Jb^`H&Mn#KU8$^H`yojnnvryw;W>GcPyUL+H*xwW_@GVl3+U z{{h4PTjY{*qXisXHL-Xf8bvBOb)IN1_lWf89sdM~!SL*~efOz+B;I`teV&}S?;r19 zz0aDt>vqP2%GgS%`U$TRKyDGH0LZZok$O*cmAY~H1N!gmct&q;-MK9@xL!`jW{OLG zsvV?05s0dh-{jl)YY z!f#${W75t*GoKg6QrQph4JPpeYKTsF%AaafG+c4h(uJzUMESAVg<%_e(|BgHSV+s& z0Ibtmx#tYtAu>F-ki@+<-B2Q=!Cqd21GtZ1hAk!WvDByM`zvoXI7QPL!l3Sypz5q* z4OYHzr--{X_bc~Iv4d0_cO^K-zpw|LMv#NsBZ5o#5nohzS3BV1cEA<@*n<*>*o`46q;_Q1EDqDPUE-sUpIq(V}CK(4Eu{Flmy^H zL-e{_0#L(DNx>TwNQEMiHKqx}WSa{miF3^Y^`?!*W)4CNy3uRZS&7xD<$Bm(uCidm95;!!e6%!0pJ| z-!omaqFv84GuEt*Xj$<U?6G^ov{pv+e$bzedfQ3s|~dW)`cUyQGhVDZs_f zLvEtD#n-v4nPlSAevIK`KHYpFhfK+4vflXgHn|T%A+#(!^j^?kj8I6Ldz5im4`Sk> zU3*EIVjugtX1)0~5p?y?ZXwy{5m;XWEoXRUmhBeek|5|MT_Ia`8R*v%;btmHw@1iu z(~w$A9$uCngf-)NkKF;%K}vO|uXLu-v4UrSf3ZnifntNsh53Q!&akjjrG6 zIKxT20>tvq_G3~r!DVc{?!*bOW`fJLB@?7$!z&a(cfk;2#wNZd z-TLETqV_kxLS5>R3RNU=FjXLN{;J&xCKpOsg5bTvofU2IawV} zZfCC9x*1Mxg)b|^$$WK%=|~s1cBFlQBypNyp)i(YI_Wp_7)m}ui8G3B1QwZasL3d` zDk>x5&VMuS$Pb|=&a@bVXoQT27sN66AUFdxOo+MSh#-C7Mej7CACJV~H@wq`j49!X z3<7mz@+XR8eM5{_JRhLrun!>C@GR_94)~>c;*A@8hX_N;X|^hLyoXImiBTv0dP?SG zbzB-Hw6XQxCEPu_AKsxs9#~E$nYaQ*vP@5}_3$5;k?|H$jk0Cq=xtajE%`5t(a$%m zlztI||6>8QX8r`7jwSMKQW$a?{G(%Lf!twmhB*UFC!8FLXblU=_g-fd61bI76o=ux z(Sh*;*yzAUeL1Ow1tfgUHx~a5LSe?D#N~?7$+L#LieOAo+#}+zW3gb9`sWfU$Ion& z?AtVqH{w+L83k|Gad_g@Bx+4>(MdtA8C&ZJw2iC6balfeGVBit7>@`r@s=K`Ss6+Ublfx%N<=3bH4k&gloF@WYoU^4;qt2aGM`!2 zop=V~~d3Zz&2t(TICGPR9PV*xO9A2SrT5cE^ehwR5|KBZMJQBn>U>RMn{sv60 zX~dRT>42y_yhou?0*O70xl3}or1NngOKJKjU>braW$=xLDvq6fV&y5QzAx$(EZ6}^ z6-ye72KqKc^jVzONg7gt+s?Yio~?xfW(L5~5ThCiE6*uys~!U>j#7rP-VAv(h-njQ z+D(I-a9Qu5JnUeS;Re&UAZl2!>q&&A=!UrG#<=G*^b~{7ii5XsjQe@IN{?;<{R9E! zCxcH)gy2&q-lyp{DHYP?@dE{T4CPkRfgV5EpODY{w18i$8`i!Wl3n~Ai z&qR=@&-fwwj2~8?x$;h&(S`A}qDL8XvFcGt1U-uB9_mmx@glTsrgQwalW|R9MU$L> z3d9RF_~3eu@CK>I4ggRXDKVAXhI4oW2C>UMd;|s`+8?Y3e(jTqA0zG4TJqqUQItx0yR94Dwa|fmyV!lA{J6KBw*qF zw~{S*J_X+jIk#p~5rhn|$5b#oO-h^1fVK$vdl=j}f7$%;f)9R$zx)vX@&oK=Fh*Q? z9=(`E&d`Wl8%QNy4m|Sqs?-xUonbZ``h&|Lc0ms2&I-j~GN6tpb2XE$j0h}jXp>1n zCT(FAF(c$;4WrR7iSAD&)*?^-xv130%)moNAd)XGHkCC*hm%eh(We5NL1SX3=&=|` zMMxJcrTl4|*Kdu6JZQfi2EBhJ^}dnCmVBfXwnfmYQUoyrtZJJ_i=|}Zac{I26$0Cx z`5=H$#d{3jq(zaIFZGUER*(L&u8+DFbgB##m(E4%s2#Kji^vKD14C+!LGkd5RGh*( zsIBrFHr4jo&ksbvZwOf|d1ar2wJ|tdZhsMi`M^v3;C|McI zFhW=WWQj*O_ySHyLON8OOo_Xj!2y#9T1t9tRn>M_4Z&ed!R~dV_^eCqKd93<6rAhwLpi{D2fu6G)x%;KIa|%T;VgA5vf{ygzkhSY7X1Xf9czoe5e3M~ zScqTR{*sAXDZu#CBFWTT*dYkZ{(tHnSQ@H-kvM-ZEE>94QZ<%M)M{wqpw&EGU!wNw z3Y1C4c>dc^TD*g&^@7dj_C{2#E^Uz`u8X%-R9mYAh?-^tGxqTF+wnmGl^|H2E_T^A zt5U{ZNm1gUs8Nu_l|rkD;d~Zw>Re-W025*$>@!$R&0|F7r6rjt9WOO{f8|uPL2V(l zHQf4s$hvYSMt3+nNHXvgX9TA{ybidpl6f+A#xOyCNm1*QrsAr>&zsG0Y0L9xvxs7|B+Cv6&l}tJ_^M z*qVVWgczDBZj;UD>eE=GzpjE~3NemZjq$=2m`fnf$b#$< zo_dKlVVuvt*f6c*nhK-WX0EBQ4u+2f3#2k6FT8OEAgCn&%+#X;wJ2VH8dNIV3}`?> zWFa7A=+G?u)l8%&1BQ|UkvI`xF_tL_DlVOkl>EXdRpKZfLx_JVvNRDCG@zheQX5h^$|}kO z^4v?gf8C}b2<21fuGuJW!<2j0!T(fZ4W4enGctqlVd<5=X<1`kQ>$!A;zc7@o)<{s zkt0{0J4)i=BbN^gBvURPJDPL{7G>P|i<0gjUd48U+dxvK(FgI-hJ>;3fWHH5Rr{R# za``HN+5xw=1HRi1__A&LgX)cDlTlhGe<#0*_)AL0^DTHrbLzoBI^Xzi$SAufNs48n ze*@812U2pgONnK)`;t}~J#w(4ibQuMNqW4rZn-mtBynMS^u=P1es?v zWvsF-xCH>kW5>EpmK{&6;2|q~$Uu!BkU%;Zs9j5@K#xe~^32k6kwv&!DWr+2k{<4T zqzFWtmc)nIpYt)@2bCi>Z9i<<&p_v3S4FH`uuzW;>4)(bA}3p$VTjWtLqH;{8V-GI zb(B+VX3*Bcm0;F<(f>WCG(547wNzlhh=&W|oX}(h0jZIDefQy%T-GK2DR!GbV;6i*M8mIWziG zOO#Nf=?qa7T<32vWm_<1xj7aD)e#qf zGm1~TjgPR+e3;7&oSMHuVzbDhC{rhyYD;xjdGR@HJY4*JJ)&YT5V5Dbjd!!-dDVLG zVAGPDSyhlV;tZ<_uZxIxx)xuXBy0;7OKepM8Ag^e09HohEe-TBkIh{W#TM|1=5%atWzb%tyTax3S8!Hq+SS9EveyHD8^| zRL#vGhGVMb9(SRo=WMC6e)Ux0M(zTTL>A_j*= zHL1^P$6^?4#L?)F8MP+FNiV`@A_Wtku8bp-nl7a6@bf+@Y8`&YYn;b}MfXp@HRB&> zCl=Q3mDY0M$@HD4%JfxO&YwSxeCDeIENj}ZI&CKL!}Y+h>5Tqd=fdn>4=ALZ=@+y2*8e!QgK&{zyj8rh?2jrKD)Sh3Yt*eLgb}ck@#Hg`TIg29PJ`@O}vQL(sPq z*qENnxwuuavH!k!Z}A#<7goEx#!%?PjLwoghGYHsShR2TbSywD@{{EyiX|Gxu@AsEuTXP*@K;F1gK7vuk;zYMnu!P2FjL_Plv=Ln{vj=19a>fol`hp74n(5 za=X)HB@aUzk-1@2N_p&pldxU(;ag&;2e_wS&ZOt6^ORoUpwVacVRzouKxF8;?$B}D z%`5=^9P@}!@Ec}qC;lFYd;UO=kBsCls`s(_&ZP8@bu;9VpM50JrO!x0w(OIHQ3S9=9#a-k&Z9A99xDmxzRKZvNp$sq&FnLG^~FfEz2Q zUbKSh>E>1(+%sob@YFL_Q18{`TtdxPJ1(Jiff8nd8j#r05-K+eZANKK*=-H|mXXbZ zD$&b=s_K{D!J8RL>y3k5c=)+I2m1y;AL2+4<0c1k5QA7AK~TQA#?u%48bN%7yX6R0 zC>r-8RFmVmDtx28iDSf6ef}>X*1@kB)jtgLy1{*tN`DEK2=$M%v%u+_TM&D};2GV6 zt9z5#k$$I1VdRt)<RfYw~anbm%6aT*D3gtT?&em>;qLK61Lr2O|}!S6g$85pE9TG6gwl%Y>2RT!oZ- zvb9WhIs^Nc*1n7y2S;%+#zlA;hq+-mMAt6fl5P<~*gP$3x8yWun%U@N?N(%#i&OlN zwOf94T)T~@m9<;OG;6n#D86>fGqc)HNDFDQre#%;AF`^*59G^WsCF1zKV{``{`^R! zHMZ%&8Uc?=F}+=pRUBB6a3L9$;8gitQMk&Bz6rM*G41NCN+)pQ3skjt&epDC!9VjC(QfJhE&Tm0pT#gAL z7_%ZD`^8aef~Gbv=H%ZksiapDGy(|aTr`_$qjs52@ns|;7u;B!Xx&pov3#llhIUdi zvPYCCX{5)HrT|fMN~?5NQUtU#hKAOOMx}Pqw8~`F<7`+ay0$W-7z}|d1O|h`u>&!U zq)B6Iza|l9m^4fh+IV@kab^*&9R8g>gjqSP{|rn{bLCLJDu=qmP*qe>JQ*u?P%?2c zs*HctMR>tbh>d>hpNDQQjn{FeN#8h%X?zT27*V1u{-%1|D5kVU+BIK*>|^x+Z)zbn zo^`~Q3x0Y2ogl9M6aI(s(w3ONeAuB z&NUoXT|tNeXzL*u4L}^rVeOR(lBjm9zG8SiU>~gC zi3w4!a<=1&MYpXA!>YK=g;mir3--d}(wAZIn79*Xu$>XNd}IYDMeryi6@I$30k=zS zS~L7O`;cS;oA(m1VUaht+Vzg_;s>={vHQt=8sjiw|B8~!`LMt6L+x?Z9gnvI{?rcmGXS)miNna! z<)DRYoKLfyNxXJBQ}SpkWae@v;n8wt6w5AW5`y~F0MSg*a^`PPTQV#qadtTq2g>MG z`~HBZc%Y2MZa+{)n3Ts$aBYgbMf)VQNl_u#Dxk*vCD&k*~V^(pz(~VXA-WJ8=e`mVyrW)k>x?Qt=JnwR#u(>4!iXB z4}RmRGdLo9AgTbY)rAlZrN&N6w*)hPa~?tYDHDbC;4<*d1q)Os+x`hZAFz3 z5T*fbqWXIjMai^sifKDCD=BjfpgEI3btFE*cBL%uD2J?z4r}bnAO@6Y2kVS%S5 zD_9Y-SOs5{+#I_g0i!#Y9gWowr%9Se&Qhj?wHiZ=B`&N_kirZ|%MdNzxy?jK%@znj zdOPGaVnR(MX4zfBiU@qc9ayN#K1T(5@^`DACxSU3fMAPpHSX) z;rhER*RsO3EQ^<|O~V%z(5${G*E$qXGeiI2CGa9+;@ba+>_Adrt4D&-KkktiTz@kK zrci7XIcbSl(uj~D6V=EM#B5g_r|gKZ7(|d6$qX{&S^2R?c9aXt&WvPd&8`tcc80VN z8IhW8DeO^*#K-QQ5u88kz}aPgYZsjdo>p|gv~J-@FPG$;Y>N!xl;3UzsFmZ{wx(G~ zJ{=RW__hcuN2%I0_x`cw3aS3_f^ZU0%q`KcBt#2wQubRql-)?xF8YTjf!_8HPw^Y? zKf=-eA<@+anAHw&0AT+>G}d0>T*pT#yK-X?mUep@C!n*?>+EHs4?FR>RZ4e~6NP4q zS1$1l{|*P*-`-)WL-=r_nKYd&Dq1v%n? zjL;d&RRm&=_AX6}t2NbF9K}WiBD3ZprgghAr)Gxlv+?lGoaScMc*s8FYzRMua=$zhK+(0qjoh>fD*Gp%%OE)CRN56vywTiJbH&SYPU*6|(|=i)GxxG?>;k~zeUa>durlr1{Z>;g81; zjA}L%x`sf^eQVZYeOp(#ank5LcDa4vhzp*2>L~}escd&jh17PZzu;|m<`&Z1g?~*X zy+O)xIm&T)zPPEYxQV5xuEIW(%cUsQqYA0=5$iFJn*!yj3pWBYl zZO4~NtOk8I8rdulxw!Ya=((Jb-|j(r)~xF?lnN{ZVhvQuZHFq&tx(okhkTM9^1%VG z*0fz{DmmPx-3~=Q$+>M%m5tL-9*!q5`nQ_c4%9KX{qKS>Jv(}1<+ZqNAZ17YSQh2@ zKZTis9=Evo0V5knhxudT7(-7vyw6F9XXIsmU&D(vR$Sd8q|YfCDR)cs^;=&*eRHjE zF6H#Y=vj)FG1c~D2{p(R+mrp^ri<9ylXIbdT*Tat7aEK27Crj{w|M#5(~*bqmEfx^ z@}ENQI>ja+<#XjNSn52Z?eL&2!f;KceiU_vFoV0&{lDX^1J9rj`iFCMiSaZN9^B)a zlIl?M>u12HeHprx5$V1LowUCIP0Qd-$M8z8hMjm}m-YkOrBTSFkDQo>@bk6MeT$_zx0C2)E(s`bJbxR(er9s_2nU^2hFp= zmM}2A!z-y$8Yu;?u^2N^OXFJ$UYrW_1Ab2|YnaFB9k|F@bn#8oyYVvlUElsnuHy zIi#^mGyH?5?gymm1;y4~RJ{p|s@~!(#W>xSF@hq*Z5_<)80fApHneU<{l?<*z;R1# z2*i$TX?=ILwD|k5Q2J4$r$yL$xa8Z*st_{B7v=1$t#VeLlV5fvK#Dw_u2I^`bJqO(0vBQ`39g|(0{fbQ_5VIX zeRbflRVYI!!zbbWF4?O)xT=43pT7hx4EH_8U`d5>a?b=y`Q5|`aQUa3M|jXY-*^ee zPj(x}#A0*+!5qqYD(IoZY($yfXsDG_WJ7^UEx+nz^n7vqMH#DTud`~3J7e~rUutj5NZMjnEZX2lihF2<) z2)r~xM`{1Oq22IOh;^E*fRTk<6%;xZiM++alxbcs!w+xt9=28a+#@zh#m366uZ}zo z|Ftq$7*?bXTTMkv&2Bf!V@cYVK?u_};3aNG`Pl}*QGz?pKTE*Obr9iJlZ*g?EWVw{i0;iJ zbjCUe(QzF_SSY#bH?R;y{xFKJgUBSS#%u}HIA-30(eaj`VI|`g%_XbC4ykd>)WisO z4Xw}{MY1G$H-OGN2Cz=)n_h z^XR6a*5>mA4`;)vABGq@vDQy$F_;U7x=lh4Rr36ma1{jIb_jvcZA3Fuw=q553&*eO zHpyN5U^wY2)(;1Qg(fSF3Tl{6bQ?d6Zu1hKMVYzpWQJ}FiO2j5NMoY$u2g2}E7(}2 zC<4n!m0_d7F370yy&xt|WvJgW)NlKm=)@EeT+6p;xI0_(2{oMHswo#iJI93E;Zi@x zIF7k!)`sdhp;n6^I*uqr$MJ(Y4$A>jcd>F=&9#eSEwlwD{q-ZH_M|AJn)PN>nbxaR zBvcs*K_zM3>AmC1978!Z0Iqfl`&<771c+?%{vG~x?q6|!hMIkF)zW<$m!a3S-gix5 zIzx78YCmk?i}uzJ?9I$K?wrv}KMQ1v+T5QX8dXJjs2#9xJD^NJG1w0dg`B9g0|)K2 zlNP|`nz@4s&)qJXOPW;T2)Jjmez$BCGBE!3PXcH10H6rT^1Nzlh^zcv9v~&Vg)Y;! z=r6J|g=qY9H}lS#;WL#)V^E-#kbaX*uz+QeA}AbHN07B0)aSntlmrVI6|YpoQNXkD zRqb_$dm1CNoR(>D|8!O=nm4(NabZeqC$(G1HoSF?Uv1k`6XHkSWWLQ?Ijm8UFVjie z=Ev^s7O53$w=hX$w@8HwK5Mt^hK5$Vg^}3=VzjojYO!0QJi=B@B4D@BQM-k0n)l!v z5i)j*6mKl6jLugFCw`6jd&31G+P@zFG)}TVj|C*OZ02Uq*QMh}>qsLe;P19o%!qAl z)^e~wtSr-}S%0SX(56i)I+1xoIt}I0Sq(JKhZI!8*SaS*?F*st8Oud~aR5HV)<`BU zM7g=2#mMJLuH3C8*Bn9Ytz-@}C0fB6%3c*7G$oKuFedEv3~+Q&9>FN+z1Uqm4Kj>L z-jwW{k{a)fOPu;EK^J9HC}Mj(o{a^6JZl%bbDq&hijMzc5YYHCkjkzAdzT$CBY|Lp zbXMR^;Z_{F;DKc9)+dma3B)EW4OAU*wq_}Jo05?D_PwXg*gsRMMhnJL8=hcSE(_)q zH%T^zf@HnU(%#VuuD_Zwg&*9bze^^8M)GGP+^eMTVa$3%60@M1Q~;aK+=#=Dt^x`;ikTuF- zb?kc;dc-j6)tF+Vu!8{r4uq=%#3%93`#(ssaTJ75fexNXFIO`E|TbIh}3n$F8XghHGq(Lg4| zsh@*@g_XwLkY3k60dtEg!*cFmpmDf^28)(JVolpzjyzOPKLlbsAhhMYL$I+1;{tPB6;(y*i|n*@M~62UN$ZNW=C%kT#qr*Mn0=Xy9Y zoWgDCvY(uD*C-Jy9rv9`{0|^L|Fle&pPV^39n3e^d7F$(Q60%$$ek~l3f|lf4nvqDyb+DD z;74QgP))zX{C}{VLAvv8P}RwE2{GS?^1B!u0!M7EG2nb2=Vzf}hhY6a95P|>;wg|t zqqN6MJL!Q{{spK7U2Yy6`@ONlFGl*$GQB^=CK1cU-TVbwl!v?L(Z$6u9}(Mx zNB~ZdteJM2{4Do)1MA_fO%JTY)&v0!VewNygCS^%SME|+xhn)7iS;A{>A+_|;s_$4Zi+Ydl^ ziHd^_z|kctjvHN~!s}OXYz{Z3@ZJ?H*vJ>QNAVIBXi{9FLRn2EMnOC6HprD5K1Sme zX%n*ZgjCJ(XqsUkh&9aEcRWmCr|#Th(>E!qPLpzr@D27$BpZD=;WCj#AvegKCY#4_ z7IMxH-b*RboF*gr7m}CI=oBzcK@nK=&j-{r42_N$%vwgs{J@LMhBoe_x(a1$nvG25OgkXh!|B~NF@!M(AQ4Rb2 z2;ejsv!?K4@yR_@L{z^ANgKC8F=-VAf?25&Qu9%3VpW6v}<)7si>Cl2$mXXNeLt`aSy6a_{Lo(rQ3Q-*Jkr}j<1WyRCa$1p)dQ%N75T8*a7U7`NBuMf%Rck7Q$^CNjY!u~wk zc|OkF{A?HRoZtm9h=1!6*a;{jmcU*>hl8OL`4OLEJFXpYJORaEB^>nh2PDzct9^7Y z^8cLJBA0<|H62EJ)gnaR&qGWz?WdDnS#4q9gj$P{nFwoz7b(jD;-0agOmT2x68^lC z8Pu=fBodJhUI?dpD9;)9kNLZbmMQm`R1!VkxFtr3JSYh{CLc;^LkKs9M(?Dd_BAwI z0GJfoS9-L@pa#iQSnJAhEm#Ptr z;XL>*$dGw(CT^PtXLR;K5y742!J~Y_9!hZ4R4O0`v>~__t@Gd!(N2?+rt{!}MHwKy zJWQr6lpa%TTl%vATetu! zfnp;uIz=!rGL2$kx<0l51@Q0;ONyN6M3Zt#wy;Jf<*+wVd#zIuEj-(O7Ckzg=nGDP zr}Fr2;>G6Diz(aWaArjkQwME8y>P6?^S1;J51TgH)7XRru|3i=M{(F~D~%WJ`R5^W zZO42GldabCuVCT*tEjtZi*7>S`g!E{|FHKZfN>tx{p)Xczi&@jpI6>p$()Ff9ba(Uz8S6DU_xj@0Eo zLLh;b0Ocx2Da8NZ@4cD%zFo;CF@gWT{YQ!Sn|U+y=FOWoZ)V9Pa$%H=nG@w~(wC#8LF{fZNfd$=S~1$s@l$v?mzey=ycn zuyY6t>I2v{S^)6q4UG5%0yFi#J=yv?0=Iu3z;g-A*7g9|+Qe+5#@CoXpyZv1dDG@OV zB^aT5@WCtYI8_PZib4rS=!N)X5t`WrDT_i0M(9Nht?fZpblEa*U1x$u!F1d}s$oJ* zo1)!#4Vf-vd2NcB0KjR}yW)bY#|bv!dg9c6}VLc-LgA_cP|TzCa51(|AsQ(@W$P_B5KMgn}Ctg!*CUfd`` z#fA$+yfCl<%sI^9MiB-ekBkiv0<<_`2BDX3nCX&g4Pvs6k!F@WMxf~Hw|R-gJE^bH z=I7r6RbehaWJ@fc2F)%?z)B4<90#LmF&bOqnU+EVOwNWDWhjFso_JNrO+1rQ+00;x zX9`WfiDy!3tuh$#Vw@nv#58Gz0FeU0xH@l?c^fcHN2F5PbUx5HjE*x=dDcfM9Vlw( z9+C@qfi;060}6*0B6)xpvjWd59Jer&7{I9oQq%HUN_|gdnmb%Cg8Z9m^=Ba}v%BKD zD)eV@ECDb>x8&>3W&~z^g^>$q6QsA{H4a{REGH$z zA=M74;g>Y?%hLM7(D5N}Uvl3J4&qdY8n0zvc&=SM>O2{-VDx?pKI2~>x)O(JaENFA zn`j<~IYwl#Y;QO`R-Mn~6M(`r!`KRK`~Wr$wR1cX^rbSKqdKSBD;m(q;I_ zO)zx$HT3MQH)+pKfU$|(20GsbJy6c2>pz=?Kr?LPBVlsltu&gi;FGj|4J{*>x^-e0 z_)VU?ye7(5mR!PS9{a&UKH;=T@L(aUCV%g}B`lDQD>J%(N`^3Nc|-7zGR7d3zc%Q-Ds+~>8QhG>Hzn9-Yi zBR(s=Ui(tO{LX1qeD;Y?>+=C#>kWvAcESbNn#z!y z?|W^^!AX~2xNzBpm$nw>I)ct?Qy@;dw6$m7+ucaZPfK9Y6emLxgzw601EbeKyvC;xT#8r43u9Pt*xwZMB7yf zv>xF;5EyGHrG8QcG{;?i=Dvf}LU=E<&&xqK2H6JKrgveT3y`v>6A#6ge@>xXg4Qky zh4EWe#5db3yYz|#R$_rhy$C;f&**#De_#H7t^mQz!f$TkOtYFZvher!>oRXP-U)x} z{rJgEl;@uV3RWyY`>l^-YKK|h%?PzSHb{lv8Uz{KTjgkSo?(XEUqh0uljwtOkny-1 z<7E0_@Kb;5Ui6CoehlUW?*;vp{I)M*>IlJl29kK~XUea-pANTPEq}0Sz8wj-kq=1Z zKf-S_a4`gEV=&BXFLuWeppC&Wuifd6AwV00VMqaEqcX^R)*G8$qp=PiVM zH+6vWM0KUG4Dl0D#Z<$Q4t;uHWpI1#j-yAhl(x7^En{Q^NuE83(Korrv$#E#Et%P9 zoY^pQ<6lV$9$#8P9Ztc^s@-S;Lbv_tuqV_9WXhhy0g-KQMEX4#9=#)dJK%zt|n$oT%@#Q3S8e zU+!4q7rP**aMnnj!s^rd=Rez%TCGQ&XEC)9t^I?acqo*>``JH~wTX|)K`q)wT0nQH;wl|RAjg;<7GzY_?T*f zU#b>!yNFy?AAAD#LS$ro=qV{Td2e52-J`N|A!-NaiK zE^X7u@!wdZFmYYGnma;+lSYp90~Y16dI1}LtUkboAFBuOT|e``vIoG3Oj#OLlZC|U zVig@5tlk62m>Vm-dOjq*;%Erk^;(%}9BjRhDvS*~J@wu3*LjWGvC#$=?Po(?aO)^$ zWzT^N*VsN6pETa_N_YMkE-p_pfM4+=FOKscWAfBc+!EC$qSkAHblhtb$0Y2Ue}b?2 zuDWfE&K`+Wx6sc^9M&sf~d`IAW>JKLT1#Wol%UXZ~K(af|Ik&~^; z<}4QWnf*i_@6y8pf^fd|K+r}gYw{*&-2|jm-Qp`}TAzi#n4R>qS8enLidm75Gr&*I zm9+-r{Cp<)sbI4AUz9>r92u^!j!P7+bKZ#>!vh5+_0syDRyxHa+4|(Ma9pI(Th}A@ zBqk`Nn9M5U<~|jkAD9p#(h$v;bEPQX$$Klotxq$jUQ!LJE4cYVur?l&q-_KDQ{*_N z7Aa*YHZ9vG@TbTR^8b8((w#rUhtf_jzv35}x9!YpGli8$+t>}DuQlEmMo~t zSlmn88}#cQQ>K$PViVzD^Az~VME((3`S;N_CC|xqX+g;RnV0S-usKV$JkP|02uUnK zV5rktL5U?#GM&X25Bcmo-;aAfY`7%Re#j8aJS5B3kLY`Z`g(XOv4y9YiAd~J>p!~^ z|Cqjr;V(du!0sftl&4(S$<0*!*9C5 z@9#?*@S9m$e$&moh|p`>oGrg4CipF}1c8a;_$_%_ev8NQTRfKE;<5Y|kL5Q#Nyl&c zdiX7|Ex#pp#BWX9!|yAB1N^>j-^@+SbozJ z@teLLeoJi2Z;2i8TN4YvBQxiVfdl+Lh>!LKUgBKnfE&;kBrkt6?FpmF{ruwiN2`sA zLFXk*;kTYe_e+^9dHI_dZ$olFzg!l6ri(YAQRYv{S~CJ_(PYN{^C1}Pe}H*ib#Zz+ zg}b1i!HDu?LwYYX52MPipS*t(2DL{KJ%JnMuXE`9U~jXscRJX+^J1{xMVH}eamcL3 zdTkaHORkNxX+0Jno~%21bXG3=+4g2&)x=(##lzY?KW;w}(IWMbQEV(Vr#b}V;duNa z0Y6;{vSxP}j%1g!n4xL^Ek~?nm;6MIP~A`wrUuQ0EVyrrm&ZRY3^op6UdYZD%ST*D zQsQyRgxolg+5Sil^0ma=i{xL7WneWvjV4mKr{j7~m|jg1>+96>8hB(}o_6;s<6Tw& z@lM~KC3Q-UShL=vqu=HdX5)-9$_Gl4Tr~%;W}8beS}GXx=%fWUWj$#DG2Vtg97lY) z@$@1L=b1AuxaeO~DNJm_expXA#(E$)votr??Jwly?`Yi!WoYN~hjkBAYc9Umk&_wDO}tuZRbs zz_Fl1@gNjB7IcjUNg?a&1e3O+7aIXvb?qkc)o=-eGgw*y7csVQG1+BCZNtRdH3}8Wh(c zTtng-f@_1gHY_dY%7tyu1-CG9eTJW1Dy4iFNR}XShUciZQmTThGwu(22QJu%YAN(l zNfHqo7~){5Jq!%}s=XZJL$sCH8pK)})}@x24{qqnRjw)$V_&ftXeF%I?Q~Yv$sT3|&$wS%54vlTMq1;9c z8O%~{!4~hX!k~;efQ;+soW!yT0-B4J??$Yb+2ZAsxZZ3TKb5AB%ZiqQxk74i2^MJF zpoju*ZetWKg;<&^@HUbySuYdE9sqYS<7K;Gl4Bu+pqr;9Zp1R1&9R8gs?99(9BgKm zQPk{Q4kd-eAHN1U0j`pT4FIRpfbHA3FSnZNCY<6@P03d?_Qfn8M44cjbfBz zz29Jh4$-VMG^J$Sg(PA>%xs0S?FV|1v)CJ1Fq!ZDal$-X!&4p)2RE-EHw7%*#9J!! z*FVp_ZDZE`KFCM{mPjeo1x(3E{fq9pSjZ#W6slpJW)C?}CU~DV|BODk>F5xO|L>@} z15^yA0~ot$zdg2cfI3T5m@1H)Qo}X@wPrlzxh@SAXFSArX{a~jA@_1=s5UWjYYdWD zKH@YaRC5e>SV>M``)QdAoEOntlx$Vt9%*80>XYej^Otile(URT__kh^kZ}X*BdEU% zRNeGw6WG7$cQ@Fj+cWaA(lUAjvUMxBxWbMrx1$Fl;L!Xf1j-7Fu6#%xClmKWoV3hM zNsC&IvBV9x-#Q6T75I(oaJorF`Y+(x_;oDZz8a3nFYr)np@`5 zTVzlv#YNlZcVuhEtHn!J+cZ4?To6~^Aq5aZV>grvPEYQIC!KmY2&`L4V&kt!-#6s? z%>6IKsIBul)|1X*dCqVxbmrpg0rT1nX}t;YaVMnlvAS9(p(3H7TPNe|FMI+K0)OEn z_$>ThR6d?7`7ryx)(42epFG8{UVsiDweZdilHq#a^;v!BsBv}yy8_Zvw}t-r;?WdV z1e2{BkfxBC>|4A8{tPZXJBmbrzYp+Yc4Lriy+>RUzm+B?jMG{lLM-GG1b8*HF@ZTX zHyJ4YVCwcTGyeN{0s;v!lxF(Yt%yIqX<-xvIlwYwCYe;OTt^>ewTCB!M?4YVo#Dw0 zj970#QVh7?$WOX+Ju?80I2Jw=-;aP-UR&a{B}$ty8WSLGtb8a}IRuX56??)a0W0{K zKng#w@Gg`@*DS|?=cB{}os27oJr2U;Oxe|Y8*9O%!(ybx62a8%6hq{VbHwN;KgKkb zX3OHzB4X*|vc0 z&+a1(S@@6I0hi#r>f-Iwh!KeJWOkfIcQsXMeIA6KzKOn7cwoc(5T2}_)*mFR(-!t~ zEOhxIblL6y0e4mEVyx_AwKq7dd{4^Wl{a&JITGQVIB^*uC0E>@NN7G#{=X51kBwgn z#y>c$Ogg|qF8%~9oKj8RkMCo@bM{+Y=ak(461M!mVHkDM!%x&R5EC$_WPg9;g;iv;%HH`~ zh9M8`D|jHj{7W{rBNEoPUI$e&V`(h+d6Uuko+9{7?PvVtyQnh>_%S=l5leLd5k2-XDy0MBC&PMM7o8MYzj^y zk>WioQh)-7)F@uIVh(3X5A?>BXSsdf|Mz(CG;W8k=8)(^j$xh7S zt7I4cfr<;){&{WIck9zs5Bt#k^g z$)IW#cAnaULWN3W)vDNfKRyHO$~t+f2knZ|lmD$VQI1lPfUpQHyzt+U_l1AQ&$!jJ zqX`_e-u@Hlziki44`d@L_kOdVOGY`TS|0~Bxn!gT^WqHBq8|LDD1<^r2&2H96`arENgb|@3)*L4}WMzs{cUPK~hN*T&V19UI`5}LY%jR&v@^i4e8)HSY| z?8&^eHY{eht`FA=6&T-e6r|O+Hq3=hFKCwfknXhWObuHeL~(mW z0rehLh>8NFFfIz0h2Uf)3NQgtx0R=+JRjofV_r*t>j9LC{;+>?h|sVk=0mJ_`r_JPBVLWd#V_T} zx1;x*{|;uQjR%9(E(xL-#sO{pI_R6 zL&khJV#3`|_q*WUCWo+P`i4t)zX!s$3}t1uwP`XtdJFvg62572;t^RX#isG>=mGXl z_-4^%Y#N`~viQ*w57Ta4{Oo#uCl+rM|GgGJA>R#)pA&d#@$>S{&-eGCOL|j)SAK)W z!%@Hj4hjl!nbuP$5`Lz2iTqwFzx(93h2Mp=rQA+H-@_8M`MWXiE&Lo9JM^fWrR4tm zPl~Q#aa$QAhr-dxMnN5#TIMzwu5lLAQbD*S@YS{XvpUqtOnt&@Jq*-(ZNU}*ThLmE zK@e0Fsh`9Imz9CGL+`>kA}9nC0D+tYh>o;eOrl!2PduhTMqSL(mNg0PX}pAE&c+^G z7lgMm0ty`4iU8!jRvGTelGhr*7h?c= zg-Q$r1mp`PGMQTDK=ZvIPI>7kn#kiOwQ3qk=^_GNq26L+}URCi@bH7B{A9(q0R8# zd6vM;JZs^1fZUCf|3%uxYuPS}m@LxK`2cfJTgKwyDk|a;NRd;6hTnQ5Jgq12hZ0kn zKJ`@WK9wY->8+sYh{zT}Vh_Q@UEEBFx5UrIr%>Nf!YC3A20Q_lVz!k;2UMB*b~auXt^=%%JV7f5zEq0o9F(!%7bDhg60cpnAe}NGttw>7Nd+9P$UQ1}uA?utEH6_8 z6TgSCU8O1TQYKptGi3lo&4*C)8lOOf7ds}k@EHel(5>Q;is0&cxcRNr z>5{S9R_E^v6@*iMZ$klj|M;{_O}D)c6_pMBtLyzcOF8Dm*?1|RDTn#8&57?`WRZSMf9~8H{_i-v`j0l=9vI5}_= zx-jS{mRsu}kCPa9XkRQt62L7!mV!eAX#+%i_BYU_Gc@dvQXG~dhW&&e5~0;Fs?v=k z8Yn1N1ok6i(Yl)P#GjxT(_^TO%@q!k%ZCo9F{G;;I-DsV5*vgYsD`QSe*jV(9PN=d z8Qi6#GK`HTPKK*9d*v0Hsc$DwLOixdh$uSWc$7+WFGYCo)VESmq_3o^dv{KL4n}9N z338nNbb5sxtBvM2FUBXW6ypaRUyMiZelZ@s^I|;u8xZ5s{{>?F1+8Rs3b??O7N#yJ?{^sn*Dhw=(TgNk5<`U6!d^4SEd z!O^RWp1@;5IWg}+MM6R34xtBQ0A@gJ-mBBOu84-Zih=HrSG zc0wpZOnd4(roN2)aq@D9QH7&NvBE1lGYnJ-;y7OflHs_j)JXmDQhuxcvXL^wQMMq= zYKiQ8O46S_0<%F_h+?Yhg1YThc?~J5#nKx*nN63o&}%R%hS`|*%T7E`br^PhX#L-< zI;>j=L}^h5oJNbwz!O%H0S7D8Pm0Nau~6R?5$Mt(Rs=>@7lF}ZiNL58fzkhMA|PXW z?&&FE%{OLq$zje)>BV{qN2J<$$*{7JiTc~}X}4tD)Fp!z7fy4FM!wl0Pu`F<<2^0| zd(8*f^VHyC+f70Sdaj#F`~ zu7DcnLacD9>|;6q6H6$xOu@$*iI)i)O#~J*7_lMs!fuXO&%qBSRg!H0%6a@E@?dsx zJQ`q@F*Hzcg$9BePmIwZX3*H$ZzdqJ{|nDo(t>~IMyf`_^rzT)8NMW zpjv`4fqxpnosW`+a_67;@!F(9%wnC7!DZ>;zMizKe-dFT$|JeaW)h{0LUHktP>_s3 z3P|yKy4Ih9$XJe;^+++wt>+`)R4s|FYb_%GtmH3bN?tpo;~)9?A5sux@0izS6w4E@ z&0=6v0Lx`E6rQwMY{2<(q)7HhTF(=@G@2w=f?!G!0$YEKaMG1dd<=APzmsN)1Kr#r zrJ2oOui8axyQ$KU^EYCr?~_msX_PoB&-t)ilFBaFv@iEoQB3Tf&oZ_t72Sxt;lw6By~nwKMpr};3ZB& zkv|7nz3HtG$wmR|1Gtt3zpycVmgSe`ncUA%8jzktnfqs^#&$qrR2d5rNSSylWq##; zK(Ed0blF|^qR57HrfzWq9Fzznoc3h4{)<4qV)ok12bIi^HLXdWdaJSSRVEggbLBcW z9;bpWlgMVU`;A}Wx4a-_a@jfc3L7Q8`MkR|M?5pDd7Bq2#DMa*U|i>uphR@7&v!Eu zp9i13Hi2SvgB*#Q<`GDdxUU4CAvWT^3hu@w;7c(ZG@i<@X!(+wO}P=WG%*~evSCTz z7UN`9hb^hFgn?2iEM?^(vg*#M&s$e%0BO?MaG*C$IvhZnfp9=$PJNMjSkd_y>`9k1 zUEeZ2Rz(v=h3y4Fr6BIfl=osvi8XvlrHdAr<-#-{2f#Lt>$^+EdetJqI1CnX4iuxI z6-Rj)vts?pC~6K-bFDXWLG^Z8(tA^3yk=9~h#@2+6L0G#hn#6oeEk)`ei#NQ66%BBFCLT`83(`oj@m83{)W zmJf#IGq_|47mwGlGM!0-q} zD1*p;BhL#jMiYzqvthWf1dtlg@Y<{Hi9i#UyNVx=?-$sHrB%uEf;q2Mg+yV_611k_ zC?tIetTbEifVb$w&R4-!qo9Qgp>rF*c=JGTIhFu$;Z%q_wa`>x+su6#{Sxmt_F(B9 zKRYpiY-9|0AAG;a{4^`<3aR>wpMd%Z%*GIv7ug-+ZN1GO-(A1($^*bYcGL6RelEsG z0cf+l4EV6MBdqTbr95`i{amb1A=W68CM4v*P4Lc-_j{Ke_!qcvD5`&vAY7?}D0+lb z0N9oBO^{U*&mxfo2ZJMes8GC!aI5Uc;X4H!i`36r*nlFB)lX@?6W>$E7MVlquh8|J z8Ua)F+*Ee0*Z2{lO!Uu>o|L#uuj!DtNqS=^8~dS*6pA`)l;GogxDixtlLj5>#9x9A z_E)@YG1~XH+6KSs{1z|({n`r;fTj8KlO_9BJW1RiG1 zVdy%E;8+|yYdWN{8s9+)ayQpbou5Y(2R#MJV)1=!hQx!jr)`i}z7o2O1hL(3Wcm?O zfp=|nTF6| z-$aNF3mM@Zc|@K}f+t@QS$Z58orC@R4j`ap*300{Zm(?EQcd2Owpx zG#oxiou9Z+wN03R>A`|^R+=w8ShSuhJQxRwP73pb^reGLb$52?f?Y?H&snm#>bzlU z7_2pcVIG^TF~SIgsU_v2y$28meg1E0%HUMm!Z5Zmb&fzwd5s!|YU5nct~Ba&Dqmj% z{@zT!wizp0e$FMe>GK$-q;Fq>O`;gt^5aIf8gi+I@Y5Ay$GA!GX-hIW!EX`z1FP95 zqq2G1N-{eQ>-OZR$zJcdC01dsEKP6Y0rP-+SzGt9bf*#(&`q6;Z5RC>&T~AIdNYYj z$QvKRQmW43#!MVM$kD$>BPLT#jf!!%+>?l_Zx#-r+f+GAB~Fdw#rtO1f{x3vd(iu- zv?h9-pvHb$W^XX!(q7>;R;xZs#+&KO=hQ8COn)A3!~YAAAN#d5cIQ;4%`FbtbimyM z){A`vISb+~1hqXmgjc8Y6ZiJh<^`NtzNcvKa%c3QX`<@emzzIBo&<^Auxxx)>YGGJ z9q06u=YFLE?#fC=`;<^&Tfd9Ta!|9An4L%sPd>(LGp+GntUgeyj-4}t6pAG~F)X_= zn2NhHR6fo>=x$hqsBZnrL{QcQDq74&L@dfiC2sX>u$v_}F^sXYrm|n&dT_0Mt(}{# zTsB2y3V?3QD5cO~urtFn8LY{rG+5+Qa}?rAX%v?=D8-~>Ck;AuXn0U5<+tfnoRuC) zuh*s@neYUJInpJNz)S!u*tB(T6AM}o{p@P7>^?2rSOjiv{S@}`OsvO}73VDYr{&en zI9RMgfp6uS-XLvP*!9Qin!!e&1CUa;eg}F?jcxrrcU5g2gVqgTrbb1wU^BoP^XUX} z0^4T0A~A2(fyTZa`VaUShN{8%x!N``seg8?ad7`HMxC*?TS-ZTSmR|J?&W0rjvx4VPmvNLMf)YUOXIDpR^Orkrh^r$rb=`tFnIXW$v+r(6E{ScT>_0+>> zJk)8LR3$fYo}x1`Z0NBNVLCHREJ4%kBh>_ahU0NYc9<;&GGD-04>tL!S8KoLCti&5 z+#>ygD=}Im)SbUGuLiI};HzrqnL?FwF|yL2&NMKUd>5tRxwhXO#8EStp|Lk1z*x?1 zYQG*Z@ieg2{%vhC?6*1Fxv#Dy+iM5=js60dnYh*qs26%5THjvcLZN1LdhmF6nvqrAPJ@rD&hkCinA8 zlkICTBHRC7njvq7WC8GM06JfVdxFmeMIpLzjsaeqQCp7&-;q;oz&1%4XL*S^ zNnZXQmWDgE=;(YCXvV$8+wf6Y(M?+QJqvGRp(L2{m`$9$CXx8M&`6-#SHF6z5tgip1{6btXsSVpOoyyX@r=1POK^ClDJ=0 z_(@Z?If0ZCgQFIR^}6wk5C@6$_sGYXc0YpcL8(}&)le%e5m|U0j|B@YGx+jvgE4TO z;!IbhM~IRi&H%1H@HN8tqnmYvK?g{`2;Bi@FuDfYfHe33@d z;_1lqHt--V)-k+_nCwgWGmY0H3U*Uq;D)nTSvitfpiSpoFhB$hx6@6K!?-WtI>ZI5 zQ*y31J9T>ohom3RF;RfWr--QJ-#k#g@;uCm$I1at8)XhR-UKkVI9R)2Iq`^HY8O1T z@GeY87ueg5;TftHr=fV@Tc&l<3t{7+J)QV8X#WOjuaC}Pwy)=X&9~r-x2T^|Ds^QB z1?ClA7bqjWA6EgA{+ra3oC00j#lV2IoGr zhBf1AFP%*M(e;T2<%0GNm{{dKFj{CpL$Zw9M>$C@<3JsaHWw7CeW{t^#6;4=X)RJz zOC=lEjN-1%ayl@PGq|{EI*&3mbJ@x?wk2-)mvq_V&_i&kJo@h4I>5P)yFcxF{u1`k z;Gp@k*~R@GJPZRBR`yySr=4aBHW&6|USbe*ev>+i2mK0uaHw%TXpzAMCX2X=4NuJA zjPxF_KAN27Vd-7tPx40p2!FGc-FVdwf3qWd>KkU}bUZx@d?;t=jc&)^Y!z{Cz~5{R z=Qa1t<^1ZNIe){RIT`D2L|oY0ct0wxCVmU@#cBDV@m4x=SRVgt10g#k6zR3h(ffLf z|AzMB=^YXW)no6Oz^iDx6yk2A;JaxSRyEgA@Nu8G zzct^lWBR`BQUJ^Y7M#ISMwiV)7Ptz$d;bn1c zw(w%f&E*@e!>(8s)@CgL7WP-?ij?ufO3HY7!*x~Sj^_~{I*wO5M+fL$CrSiQno$w4UB-xPCb-hwJA`*aAHwB!*>abU;-h zk_zBb-Ie9A8dl~?RRvVS>N3_`t8=A61ysYq(^>CE`mKuKp zEwUVrqI(<-M~9}q8P?#eh1hmMtvB`0I7!EO*Au|fdqHoeSp# z&p|Fa=9lLu9`>U(`uqfjPI!&trO$=;I?Nxq4)<>4=(U*_?toMTjrRgJQLw)EF$PjL z-UA1o2lyeA$xAvvLMnLd!#e+|Ui+-hkJalQ)%gkhNZe*BV2~#V+DzjfD)8D&<6bE6 z+DsBXP=Kb2IJmF4a2?7Vwq_6$?nIe`9iLcmVagm1{SX6gO@Y!zKd|k) z=v9(oW{l&SL%GG<5om6uT@p{mc9BbHHPW*RIP3b!CEMc)JPdHflXkI7rk^G;So9!f zY;HxJ%qnJi8cDoen1R7w3e}Bz70f6bj_DJ#xztuMqieG?bfG>L=FCc(!K#vPN)#vh z7?^Q+l*`c!K$NVNn1%B_91m0RJi_$qbV?)>3OB!Tq zE<{ou!y8Gs;)Qs3q(^~L?dlg);O}DRU|UJNkC>J|;@j~)f}YhHKH;l%5`?d!Z?%t* zK&uMraV(B{AA(oaRt(6lZ1mbkNMIcED*c*dxQaS4Ij&GA+D--;<#-qON*N0N_{Bs)%pkth@>#yG3OPV>mwwplfXO4bu`iyMUXy1DT?zZYU4e) zqm~o(`jR|q>W*&dBQ&rJw`=D;xTDt7gF9;P4!7weDre`}IaDwtVn%LAq`9un`+LOQ zju6SEyDaV;y~@DeO8P;oA1%9M3NaFMRfwDrz+h;_@c6yLYKm5KUcFn0#QRrt3ra^>V8`)BQoUNgkW3sv|G>Xd9w?Qy&9R%_;Ox>g zlEp*%TnI~7*UR3uBR#Zrcb*N4$R{rxE{b<7Dxe+dDvjK`HR$aRm1=3Yp78Vz+6S4v3inIap_jooyhW}P= zfaFx;L-<+z1z7Vx+y>|h^INn59xu<|oDJ~!x&D@IfIYr=0@@vViQHa@0uHa@0_+4z_yX5(X$ z9vk1^VBIIO@e!A?@ez};@ezx$@exC0;~VL=@%<8d-VJE)fG3&@%`F~qHZ(?=5?O&_10DFP04kY49vOz-ST^^^iG#CeY|}z`=}Oykjbt3P+i9KkuD>GxH2VzE?q_hMwdpqEaHTf(WS*z zSrId)T4IbI0Wq3hDZ)A4W>Y1)mh1p&@~N< zArd`{fvqCaWtFqPWNkM@_y4nah)w0cyR?`1oRmw07ErJD5@4hsXkl0Fr2$smh|h^h zgf5bM)ej~Qs~^yMI;y=ipbMRonFw7ZH8FINZiVc0RC@_Jr@a)p)d&%~NQ7eOBHfC% z)lu!m{e;6XlkhKY6^ZO6)bjC=$X>$CSFx9HnjN=_MD`MPw(*dXvzKsK5D&o>hQ^Y@ z5k@@ZtuBNEw|GcoePOGJha7cj*kt1&fqQv@swf_ka%rfO?xHQnOW?$x?&qpCj$nL^ zjlXkwh>UprxuEf{0Aib%>>23Z`^D&D_mL>H`+V9!YUJM$wO_;T^LZfdYyb|}eMa%=wfivW zuGxKV0Y`ML0QfTY*w%RDvarGO`Xi zGJ6M?LdI$+b&|zkJIOjIM0JmUHM!lR6j2%NCXh+37Cf4FsSQbx8yk`$kJh*y!LgZF zg#MU}%`4-~RLmfC)1V0HYHWz@*NPDh))o}0nVlJ=EBO$!HN`09JYYqA$%JhsZzJPV zL}~AMTT=BbtH#(%dz1{ArnjHfZI5EYdt~_Tl407m?mqdIU09+d??(Bhj_Zi3y&L71 z+Oi`GTak82)QQS3^=?PBKIS&Gd0lUHw+b_DUUxx(+ZF(um($~F=_$qA06je#lAvBi zPFS?!e7EOV>kaqVtg0xqUo19jmRM?AI<=MY$ZE=k28k!_r zDP;GE?d+WrTe0gY^Si2SB}Z3`JS0_*#KttY26rJnL5YoNZb9ls9-76Z_LuRH$lgbSREWCLroaK(*2wEV+9foR5RE=;mGUr6$Xq zPP9>G-jjyF6A+TUa?}C39xhXh$7d!@&XOPXi;EVT0;;9>9!y^{)G59#| zgI}d|TnfAK2XQWE@m|bb3s#m|mLs`~rzn_(jDyD%%#y~zrz)7`je}2CuoQ5S5+JyF zEOq5G;5g)y=TqP-p8;p`OwTjmf^F*k9-k~`c;i3FGs6YuB#$NwPw2yo$y!7kkM$^} zm3Yo4@mOXXkM1a*^GQ51!N#LIisyV1k6e*>+O|{%zQr?9sm23w)Et*$;Yb!;cw^g2 zLk^F`Px2Y=SjF2{xMLuFgj=47S5f#lZUm5GQ!p5s4=BKA1G^6gGNLn*#pBZ99!g=R`nmu27C{3*Bbkm!YGif%k4dZC%p z8xM(IXr=(y`wx(565#;#ofNv-JU|IraelmMAiF(tqI?fpILFq0;+3X6;CC{$RoyIbG>XH3g=j)$ULnsc$9;)6l{0&_RY0rlF}AUeQ)d%fu{MzzH;I z;)4@u(oDRx%=(YfDfu0PQpt_fuSzLOcuYE_jK`$Y&_qg=CZV)1W$0vLODB)I@{jyf zN=D@fzhqtC(alsP$3zg$MG>T&N|A{G=0(9$RINT46*_7vgpHbhwZxL zpg)bvxQ<-w)%Nt`4iennG&FU)>X+X^A9FkKd1c(PA0Tq?V7ty9X+)2U5pNpf+oUJtelSMek zvzWAHRF-zJR0f~Q&7i<+`L(@PmmCJ>lS}+TkVt$Rbybr=T2AkNzztj6Heb+B5f^mv zj%8f>IzUU_rdj-sp7|zFw~bfB;)&p`;6LuVEI0lO#Np14)R1viQ#IonOw|jAKkN@JU9{|v_#5!S!w#fw;^JQ$D~fJ1 z7)jx9zT{=G=jR(`d&3j2uw9QEC~#%i68;ULGsXoKILl1W)Hj30(?L(U@!wz-uZ6+& zg@LIz+yb*ScaFUZW@zdg8h1$IdTo~D^nbli;deNl~>A!apQ@2xFO=vy4c2{M0qm$Kstwj;$RRvMyu70vhF=6hS++>RUy_{%|vY_!?se(n6_eDZv+@t$=}Kt)DJ^~{jLdm#PDIQ?-;{HhMdqM ze*rj#mu&*e&xVmg%Wxy+5yMT>aSX2+430miD29mPD%i@+YQ*rth~MRi-IZ=`s{ot2 z-V|}WzByudeKO*AePa*9M-4Tu2Kp7?7+zL}qaWi~`^^w`GiKWCwYQ-{a1W_JG}AQw zhk}g$*BbND2bclXCp3wX4bu$}i9&405J9w!*;FdvzYuj4#X+61@3E0Y>ibuM2D(5* zHPl#vs@fGvPz|pHjmAKBjAEn{WmQ7#I7Q(b9Ndm`6h7?WcI>3^5eKg>ao+oLSHMB~ zG5w7oWkRq*9ziOEaFLuKEU%lo! zsqK=2?dcG?L#67~3mU*?;ps5BBP~qKrsHonrp^5PJ~u3cNiniyHhxI~t#qc49!AW+ zLo6Nl^Il^9d2I&4hWQa9kb6Ooe@Bpv4kru7aCryN%VY6q3rFeZ{Oy2XP9zNRV>kV? z+b_u>Y1~5cNf*NTS3G3Ug>XI=5BZD>;dCq>g4eOl&QMOapqE z={dZgaCV1#Y$b+~k$va?QCrDF(V$6dEv44MBjXS779WZRk~~;x^w-g7oqt6A50YRn zc|^kxid`m^_zUz?w6`S7OQ|&MEuMd*Q9}Ac#-pvJu?}wBB}p$WCXEn&UL*+<471~w zmm^$#-&IIfmQs~8t;Z4)964CbdbGI+KH#8Na1bYP2mt97DR30CwMG_!xJYuYVBDFx zBJ3L(Kmkiy)sJ;miJ5^xCTY8W#A9kes!ORVN%?h(Gq{u*{7o0f4p6#^V@D^hI69_C zC#+p3X=7-m!75{lZP7_Rpgv&NaU7GvB*m`d7$!^tvm6Gs>zs49*mZVLJZRVHL!GEy zM_sh*s7vfR>bz5SojZq#b{&l=b{%#0+I2{svFrRgSZUYM^kUZ$C+s?c{Vv#bykPMm zAgJ6J0IzC8u_PZwO5yOYI!eb2Y zmRhI}0f=db`Il`1!|!^-h#gHkEWVNRh~cK~IEL2@2FvgIDT*OtxJtI7Go~G4Hl`gq zjcJF@m}!UfsRWy5WlTH5H)Glnw=wOAJ7(Gu|EQscrX2zFE5I?ltPJP;yaLU?f9(fjG!?3~`XQG3<39W~)EfQz2Q9&|FxF41Fp4r0#eF z-7xZVsId}VwL6+*F}wDR}&B6cF3b}HSrK`he!%n6A$5P z;#n)YSnwJXPXw_ho(SShJOshS!#WJGloHwIi0Pg>jEMM zwRApOoCP|6Uz~joT7%0kH%>$HFfGabG6R{~ui9vSg)XM`2dyip=in@4{2@)PnfoIQ zm(;^_F>8N=P2&&Ir9@`o#OoK5b4qg-jGDO4U`<`myX2(S6pX-P)<@Ba!D~~fDvAcN zRv;0wqyRz|Ns!`UZH+0b5dkKtWV#ylu52dhph*h$nxw*hN$QvtW2KbLq#ZJ8Q6DC) ztFIW#r9y=EI_q#5^~LH2p=F60RJBPIxp$RSx|q9hDl^#`u{ z16Tb)cZs;W1Mx}qI1&I_ApQ(#sO^TvwQsDzx6x5};kZ(a<>W6IAR%X(UxWa4N zsO&{>uT{x09634A9ADjmI=psoT%DG|QL+n>{e zzA8%51@Tr{&q<|FMm4b$1wRr6KN1Bfp-7DCc}{lxA(mP8Q-ys9w;dRv1)U zN-Ncdp=q5k_(Xk=Hb7%MhBm0HE~M7b))iAKqNt={N(G5FpmH~CzSg9*U4rS6rCB=#8q-ZNEmZF}X>FHaRF0&L)UZgTsue1;do%(zhk_5W znu==#jy_LdY=A`;NCOj}$nYRaeL^FIDESEu5}5p+al)#affafpda4K;YY$V^M-D1U=v#Rd#_xvE!*vy%q7)|Av7`8&{ra7J&tHJ(p zXYp+Lm3a8p+R3olBt5?O4LWz@kxH`xBDeT34g%e^9!rZ47r(s(1p|ZMBfy^0U7B8e z1pRv4mM1OM_7vrTOV{pd9@9N}G`sTP^>4!0D39s8o=3AMkGZZqrmcPJ2=e+5)?F@@ zPZm%~SKFF9y^yHsA1iLXKk_%|wVXwXJGcGE+hU6*Yu9#JmiQA;p7MhG-+k77Y@+qO1W=kzc~kqu=c3JfH5y$&gu?m)}P7a%oGDxEgl@e-CYM^cBy1 z&P;CfHQ)ZizI?q@sE0+qM!lV9e6XLJcyQ0fOz1bUJtkf>P=tpWzKdUfjE^&RriNh!s5qFZ=+IY-+u7E?(QpNbBHp&2@3K&sjuOz#kTL` z5!*0RovF=~vKoEZEj2Rn2->mGmW4wo%9;j^-PVk-p)2~Zi;k1SHUWgMASt!LMExYBpae6 z8+r(fRvek6;*tzUNrrm}8|f;3*(Di?l8iXQST~jCJ+(vTcJb~1iQ4hnR2DdA(le_zPt3W}o?W41(ThvP_j`r}BeB(^0J189v^JK(_&N?>a z3w4PdXCycP4ABhD`3QQW^AW!$4QJgQG~5UKF#cN4BroDvO&)|Qw*$0LR%l@KOFzzW zn-EcQ66SPVKi2z9sOU2Zb?U5t4R%$VV9{L?>{M4jE#*&IR*iA9uGU^z2eAqHlyOR{F-20O_b63dVA?zzaNng60 zT<%L(QuwK+@q-iR9D1Su^b_}UeB1VHfa-aF`u{ffo*~>bHi{z3@OHv8J&FojBTOGI1|3mGd00J&C}2!DvCs$vHlj_Md`;x-dPy z$;K(moGrS?COLT)mzzg7VM+Tc^qIuJ915Y0Hg2LwFMVmY5q}+kPS% zDzA5u%!`BKAHPN^RVc2lLDa@0(FoOvN6sIQRO2Um$;O{+>At>N=_o(R1m)=11c`Uc=oAN&uarl>iy{V@+RG zSp(YAiK{TG`T=#SWa=;6NG9X(J18(7uX_GuetxQIk9uSCb`E>A^Vok~z`pEaa%c&o zxeZIDbaHs9;srsgzIF3rnR!vR+&&6_fS8rBYwA zzILg!)+_aIy9m=bsNH5REckQSz4bCwN2w5I!UC@M#IP_kht*O6rd+hzDzQdPq##T; z^Iic#ILoW3%GJ9V?JhvLJXVi^i)L_j z#j<5Y&kcU{Mf~bRJ%aau$LcZVq8VIWu?((M*k7G4^@siCvtNSC@UUMOvfNz8o=V6w zzSRt58sEVz}kA_>_w2q(tP5Jo`xkihfMsw&i_0h<@k4@~sRTs+*RbDb^?1n<@JjsP)TSlgw zapC1V)?_rwETTvjTTfO@MU0HH<*bXE)p)xQZycMLh_WM|q4~3Zp0Ib8@eZW4^b?GL zj=>+a9Rmh(T|1Uyca~|6m~FBklUo!!&J~v%7l=L=;;;qVc$uwV=2(xx6XhiaH32(BT+RyJ;>opq^ ze!tgxH9olsf8pl=zFLiw4>Q}nIu{U6o7hgj8rU&6=eD%Yg#e&?;-__zhx_Qfw#Fo6 z;T6Ex*#p;j>T+C1>P?=P1Op#L25SG9+E1`VK}yDKy^?8|+5)ZxK+a_v8W?uf#kEcS z^DhUY`Lo}WxNPA%b_9Ap^Pw0w{g7oBVv*hZTz#d5X58up)~Pu8jdQ`7Jj4VN)|B9a zkA2_(NQ9uA(J+nPCihzR1s{u$xGcMxpE>NFgjP&3PD3QbG4=yqzc8o~a0vrDh}QiO z;nWcJ2Pm2hVs5=f*?85(A&RH8lrSJ>am!&ELj^6kP=c93Xu>qULeq^Vic>;`uo4!Z zj323k63mAry%Gj35>_r{X~iH23Ny=phMp|wfo=#<>a912dasb5coum2Bga#AutTm5 zfWy1!`*A7ZU!gdKL%Fnn{$zRn8ie`L(91^arZ2DQ%1WJ9Q-M4)L?*$oCfH<|<~yc+ zH6ukX#^n($yf$qZpEZ0d*Mvja8aOB6TA`~;tDz=VldKZOn2z%fN}V0F0In(K)r=aSRWsHMb zUkBg4HvL}vV*Hj{w*qpiQ$Paq4SIk43=AGA^Qp#9Jy94O^Nj)TX6iUoN?tS756dz9 z*cdr|@LIWO3cjh^{qaR_;pHczjY^jF0bxsrxtRT>PtvT%ZhDTh5mFGLquNj9_lvHF zsBKuKhrm29b_!dRy(Al&zpp4|@?i()<)2~%r}hDp-9>s#ovg9--bkuhuABIYk3qKo z6S7?&HM>N&UHK(wwtQW`g>rG?l*N4@JbMsZL9?&~4(>U)cnJVuYGn2$v*kOI*JAEh z%+|L}eGaC_Z9gVqlNs0%cf(kit*;H!({#!n(+sK?_pjh)rR;K;T`re$6Pv=^VvFd~ z2jvE$`taslCd^^%a`4)Tyt?YcsDv;F%Ora1`ta1p>%*lyQs%o;Zez;4OG%fe%p)Z_ zcaZq;a;Y%!dzr<{m}BAK!N~zo^r8bO@z^64FBRa`yUwxU^=eb2WL8883&4p{0_>!J z<7}q=+da(5%BAAOWqw$^y3~hX%!^BF@eTV%6Nz6WW`}pfb;H_3Vz!>!y(?U+(0XnU z-2xxRMSPNwNnk^ntrw7{zI~SGS($*aA;t%6*K$~_HcJ?!)JM0zfbArecs7RTKSrId zTvPLh_5^dIYw<;SnJ-hNgFuf6fHV~Oqu!e@9T)DXIu@JYQKD;{s{W$NN9h$is zm+U_sjL)Djn4E;E#mnid?V*2{02U;;KL&Z4K&loJ5D^$XhefBwXINyK_z!!r?O%ay zz8f2+Eab`XZg9&G3Dd{jK&DSJVPm;_$b|iUE-y{5w*3uv96bv5?+z-f*8qZi1m&Y`)A~o<<@_q4TF(kaJ?D6iniVZlp%qQ3$fN22RvA(-Wat>TXzE;i0+r6c+LgDk zq1|+z(~Q(3^{Qx|v72soU^YZ3Al>=zxz!%3A?#vT@V~g&)E-z^QSfCB%qET%jO!)K zqytlQ9QY9qOc`)s4BX5z5=GB}7aW)}49tZciMlWpX~V-*XVi(pj?`)LFlw6KpvuptZkVFcS?VN(%o*un-a z?T5!kENruj*ZDJ0zJk_wy6}kB7e_Eh>vRNjw0=K=Ia)Cu*19=7=4gFX1aq`*h+vM^ zH#u161*CPz@O4xcBvpX^#Kjq_#NjWD;MF+%ff0N#4u6V+cmDiXdEMgTbm#T92;P;~ z*CKdVUSDwV&I_5BoODT!9)Rp@+K?2gHkI&&JYlB!mmDn^16}92jGtV5CO$hme?*Vh z=I6@qCNRHwmIC;}GX;TUAzjD$?DRnUP8>`{>NMQZ_cztI(z_sKD4V-6Bz?P-nsKY?K~205~J zaW;#A`C28%Jq|3sUzr92#MQ+J3u`zrnSj)ISrtx$p zD|!tPV!yE;UM$&-K@zD!roQPy7*P|`T6R9yLv)O_DsD~A44z>!xQyv-2Ge7?@|JIV z4FhDHRdAj(I?whGPYOHwtpsrSR|W3piXV0r&*=danuskjUI zrxKG<{h)wxxw72s6|XPI{PxbIo9?QvFO1(G9Tdl>jW&gkK8^s@M>)I%wESH90cn}6 ziBcN8|AX@0QfeeW@jK<>NMT|_)(g`apNvihhcX8n&jPl&BgIUG&kAh*TA0f2Lp5OP zx*N04pfZgMH#UFRlr2oXD&ACHC%Wvx$oFN)SMD~yZ>lm|*_!r~b4PMIe49Oztn5D0 zzedL}x#VISRL=pBs$6iS-xH~lrZV**JqOIWmbTSx6*x`SUYldkGIXPG`5H_C6N$aE zFF3eQLn=`S=7tEV?Lio~@kzpJEEwT?VToWk?GYMbFdiXsbl)uY3^D@l+v?4ljgoo5 ztT8HaMs1vk2#Lc;v-O6=Y1lXsB^n2jX6sud&K4UdBF4l?9G$IilQ`RU?~2#K_OGx@ z5j}J)zHvOgI^P%)kvvLr<9uUqMC~Zc+|4&eh)6|*UcPl_y*l5ziCCR)-IT1(w{BwY z9N&iK--NyrZK=&kgevUux7T+Z;1IZWfK!Fhku{0L0m^JWcYx#Pdfx$#oa^fjaLhb@ zmARB4xo{C0Qs*kbyn)V@{3L5TJ1=IOq51bQn{Q&;@FMul%1qs^%t+)mQ(|~XPwUBS z;q$k#AD3B<)bE2ZbNFv*-$a6b{;Znq=dqH&jJTX}5rLAZS~1|A&6ymA7sJ@Pqw&l- zNivnO%P5k(s?(xk2DgA~#OhAzlNx6wp-WO&P~Fae5iG+!pBN0Op@Iw zxYM%rCM@!t%4H8t2_zx9YxU4_n%?+!ZoT|D1PNVYFM@LGy-2^`$4sP*haxqZ{pv_s zn25#1a_gz!AQopT&BkM>2eY)(o&-~@jo*Bc%#|MoYk%(G+>ysw(`<;fg{jXu^gWEI z!e)Cv6eVAojuAsZH4dt9y@CT4YYD4Ag^4NT zT8I$=p4$kTt@Dzz#?%WbnEGhO^xe;aJpIDS6GZ1Fze1kUGn&IrD@{_}*aP>Q5u*&n zXoVDD4e3saQFhxeAV$6X?m-70Tc+8sFfRzR(<(UFFPx{~U{-JB)Cx{6%!}Zd>J4)g z9IrXFrIJ3x!(Ib~Pkk#4AY3<4xMYb@7W=h$ z(~T-L3-seH2-Pv2CvW_`1M_sV$bG6Va$^e6dJPwnU&Zz2gHSyHaKXFt61Xv7O~pcF z1zZB4a$m~0UYki;Talo3I)6TtLDH)MOHNib@bbgJyzyT1-*+0+z+Xc+7D?+?vyMN< zYZL1vq=G0a)3u%Bz(V&(v$k`_MJRSbW3eHdTnD=boy#w!4U#-$a)g=4Z7Q0@#*Ekc zbLcWWRBf_i23VRsEkEBsinxETtG3;x16>4MPRb|GOILRmE6G%L;Tti0v(N~l)f8K4ZZEo8}_ zsG#+b7$`=k*LopXr&=n^3Du>%ez1{2YJn#xo9uN7p3pvyi0@*Vr`B(OYtaBmP_JpLZx%$9g^n_gP(k%CcM6|uC zC*)x+&8rd8*nzfp;5Bf~Upk+-Y>_2tyci6dpMhX4l6>_(gU}=Fq(i;e&?}iUqwz;9GJCJ_U{I25;lj7v_#-?ar1NqKm{2np+Da;M2z77= z+DhtjXa{fdiK+ek=KR*{QTutA+$7;u7sIN!jBJd3IA~;mT+sQg>kxCY>3KU>@)hj%x}>iOOI`uaUs&Bf^}&Tnr6-8a4eqZpX}Qq$F@zQKb;n@6z41^1#>w_<{2Nxb?x`ObNRd*;TUge$}hxMaXspPw7wi;aTfPuD97$Nh6m-qfJO za59MBIRx?B#3k8D9wYUV7vi&Lm+|jW|L$GmIDPS2%Iv62im_u}eC`CEtbH_bcogvt zcf}Lm%6KQ^TpurNX8rtTlA%M}fX6sY*b^9L zfMMT42m}b=m~FxmmSG?Eoq03ieZS{a-FtN<2lJTu{qdgrW9!~JRdvp(Q>V_Y_0&~j zG0KCr2QZ60G9o=tG_6zJRB>mi?q_=)u%{MEDLT^~+D+qP(8_Hni<@5A*k5&>a$0S>F9vrht@ z&~Dq%wn(@zd_7W5Jm|Doqib@?veSA4LX{_Ce5U`j5X>AsBy)nv+PAoim8F@O zh}*b{Pdg$}Jv7SJ6b`cnu!PN_c$e+T_u0(m>FHz7(b0vfplP!F+3d>sXH zT6ZAQ9d2m+esq%sAVCYngtP#C)s;{=W8+h3qwfLVX;?l!XYfV46KLUI-=M9-7$}Z% zpUnkQlE}Au60)a|MQ363OrnsHgMA9Y?H%f(%mNqY(C{~XN6JU6LHXEc7f43|IU6HT zzl0JBN{H(OwTL(t8tahXs#)~l%>YZU2g?)Yo%_yT8`!+oKWdV}b=lePhroW$^RY{i>V`f8 zVc3~&QHf2l(DGm>*lRPjW6_VTyVT%;5|E_KRw-?RN1--{jFUB9*94tZn?abFf7XYp zb;dW+{V>w$kdY?+^g=1^TU)V^<+0iWGj2NV`m~oz_1gWb86u zHJWyr$;2-6MfF?nt5Ca4Y_!X72bMp{F24f^B6gXj5xcB$VwX`9YM0qSVVC_d+oiS3 zQUY~6`=Gz^_hp?zF=MUH5z{9@vHdm{bY%8NzE4><7L1D+i7xH;fy}N~AA9ew(_(TR z7kw0{OA|ZdQ1BgNF|M-E=fi?pDD+noNn93x^iTqN7(aRlg62M+i(pRqhZ78Q{{mEr z#^93b8ZaQCI78)lVrqQu?TDNnqz4HsQpFpIcrBiJI=wxV&xv@gfm+cu4g?ZlT8IM zTqGlG^*PwU9M0J9VPbv=D|$11UK+i{Adle1@F~EDONTr1W>YvgWf5c7YbK3rWU$A5 z2Ah@>*y4$PAa^~NHa{MFf}JSKGIIF{cn{I669@?iIG`qANJGF<0xdODLox*G81KCh zO#(74pP^$}EOD0y*R3>LCbRK8x7GmIz<)6!-ry2+O>=I_iNhg)i2JbgLrb-PFZEZS zo?bbHG0L!0hJuPy(CX?Q1G{^@3OTZ~>})i0#Xw$oOv~lTeu4m2r-Hw zfUnF?hBEt{{g3dtSox!cmrG9Uj!&kXMCD^_432rJe1f5CWDD~=4Zs+8Y0cAoO}xXd zJhtC~pp$67laFNkUGixD1QWyBvwja#f8mcw?F=N^?`E!BFxm88;!CvOCurO6=VKtT z?+y%n+8jjC zMUQROsrV4c8bLUsF^FYRaw$>|0A(f$|ISs~%ngZrzaK;FO682!QE_28_ zgh_7vRxZh0d*?tsTg545^0Mzv4&0s#5RO*iWN2w?fEY_GB$vm;4I?CDvn4yF2*)R= z`Bw;Ka1KoKDQZ*5eZ&b7uwY*EN0N>2%=R-s#PeV1%Z4CMi}jRm{v2smCz5sgO8^=I zahgmPN;D+re(>3B`O?yT6VFE-c*m}TJS6Ye0vQyMUJH@t62443YDAZbGf955C}9s0 z_8?)riG)pyqJ&*RqH@^83C1odry%82X={iU_K%W!4E&7j zbD4be&k@7pFbc#e$~g?Y<`vX%uJ(L2il1|Db$_QlD6Dp zV{3i@DJ+1^uK6JVfR9OTeXXAN_%&l|sd(G(VekfP(UawAyb2*N47?lTT zprqUv6B+)T)0zGSM4kHGi!n3PaR<7z--m=`7uLPt&WHhW zaAR|5hiTSjyv-=5br;zmbml&Ur}noAQMq)&DJe{{jA$NIJ^?PynkDg}#pQ6={V7zRP4%=-45lnyy_ToY+D`%7hxx@_=#x$4 z5-Bqs;TCH61hCNPjqZnX3T3|6uaeH1(5rpgVnc4Yw=n5}X1{jnG}U)Jd9qhafz}p< zcCq%?M&Al;s*CjbaV`>dkzrjpEy@QE3XE$2BDqvu#D-H{zZAtK$@KmV2H8BdbqU5p z9J$6u@P7mTKMMb=PX-bZviz3&cg%>)s~2~`SL`z2H637_O48K%4lsrq3iqMH$=Eyy zqFvy3dVgK3R>T6+$pkp{WFnO%=rK!KAJ1Z@ot2vgJ`p1Z@Ft~OAMcYwr*w{0gt&PL z`b5@#Jry$JU);Lzg1Z7N#)NK=q#uK;g6kEFkx+3L(pq0;^mPziuSib^9U&avx+-p6 zrO_Wka8D(jA#{W&rK{rB4V$9!$-rSki0J5k98E-G>rzZ{`E=k^Aw+e>{t+Vfiz}#n zGVr?)BD!+FaBN*}(LFrWEDw0m~8?bzZI(A}gCDiQ1ppe%rGqLE@zKwCx zsrC0tzyLB8w%ohTZvjVk(lnyIJ>tTC!5lzSt$Xqr?M0~KZ-(p7- z74N%{Thl|bEGLRtS5Jh5-XQB6-PLQmViH4T!;m6KB?_mw@;t18-co}-rjx-h`_{?W ztAShlXHs#i@EvuU-vkTmv*?}c>xRkMalaIjfcjw)@D+*@Bq+r9z7z5jmpS$j=}pTv*~H#6ZR^y zBWPXr{r=GVQND}uMhEP(2*6&y9%2yvbYhpFTpfMvcOtHL9~)iA&k0^!Y*QN&>$zE=sQ?6DTV_-i-*z0 ze3Is~AMCl$AP=v8L~lpxMmVhe65Ja|G1yD=u+;U4tMT~`_UsMWEg(shS8Hfj3b(d zgFafG@iU0!mFa#r@8K}1-Acy(0`!v@LjxzM!Y2W)hOhjF%7)!e@-j1n8D2XkA`8Jg z22Cf$JrhoNP-fYLF@ghLh5h8_80c&pkn7w7bQ8D7VXzDP3qlvggKO*kqb4v6&(`~u zqr(&bs0qvEaLRH=(y|ug@WiEPhS(qy_ua`)+@fAj=c!fZ(!%j0_xall*)Xw*r_la9 zUq)tg6<9;+{AG}p+5^U*Up0yty9QL~uvLY?RH5lFgq4uMKt{o)Nj+WxP zA)_W)KEOqR30@RP@6Tp&$lnTrkJ83(DQf&PL_xLT8o*vFM=g_o=b9hCb?+F zUnW01hydK@9@cENquB5}yt7a8=*jC;Lp_SGOgwcO(%L!g=M+MzhI`n&U~`yT9kb-z z6x?d~X>%^7tg*|QU#k4NFT=^gJbGy|6E_NHeO@u=O)bhVoQ7auo}!;! zLdj;YM6HFsV7d%AGJCo2=ZAeV{y8n;MLoYdRL{p=>uZr&|3qpEeEBC*(+HHXSxvoq zU`fuXGyH1*je)(-M{oSJ(hfX(mQ(fH5OBP|wn_d?*hb=;+Y7 zj*|}lA|vxyIBF$PeSwosxx1(9o;!_UI7+Tucm*w2R|=i}ij?WHXeO zP#=a{4AD!?Vm*t#B}1NsGUa915746sQ2%2V0gI~-Qv|F6K1>mk;UZw2ls&U@$N0#`#27Z5K+z^j_8;Z!YK=^)r4Nzxq z2If@#V15~4Gv~E3I3gq`g1(L@JuNio;KQM(fe17kH?QdJ#PX}8;I#PAEu9aB0Nm5r z{t5vtg6Y5V@#4SI?0rd?NU}M3hV^DB7+NH)*{qAr0Fk=bBu)KhyRn}^COLkyTf~KL zX2|~~R{%=eCUJfnj|Kud8{p-WM-RnuT3fwh;yVqGb?QN}FLlc#))UA=N~mMb0IF-} z3*c{LkY6ZdLC--~3NUcS;-v4g70Yu8jn+Xs$}Uu)*fN&qI;J1vv{*0VKN2TH85M#= z-EA@{w(^O<)vIL&%LbSo^KncKVRefkEbDR;LDqO`G>-IgZtaMz4=&3Y{$V31c&y%H z45YPX<{JRA5T;is3a151@nB^E%evV5k^_{-Ch4}%oW3Kd_6?`S%A5NJe$+K5td0}} z2bZ)E{U`($TSJ8yFonSJIA9+zg)nF7xKdsFbdJZ3Wc}#Tu=gkV_5U!wIPXIqwSFx|oj64|GYy!hLv^91N^aLvBK02*)Gw&-(I2FBx-o zkWDD**4jN*s&E6EsV<`zL`oDD7jlG1fqpyOR-l%~=O#`en_4UhJE;;5Ycf_sXr{fI zkaB>GzDhx*{-y z=EC?MwT?t3f7v(^WfrrKyN4rDHk*l`n=@7=a{^v>!+(z%ofaPz_y)rP`1t8PhZmoI z$oK7h0A)IpWpY~IK|U@b12Wxa0I+ZKAu$V1>$?cpc)oW;qcH@D?K@K~914frLzp<$ zgh6uP)_|n94~%YE(dGdwc;ITyE7u}n_vd8|K_>BxI9X0G&M5hBsN8^4pQ68i|^R*1K- zcfhQ6Tf`|);OYfOxSJxJWx0;1x!NYXCnQ;Z_R3z0jy}(i$jpnK7N7nM?Ks@~K!GDQ>5AIMD z#t*y$NKtRY;27N$WAlrRfCc5hARwQYr^tMYo#n%`f&V!2 z=fih#_Rqj^^zTdlG)Twf$adbyXY`Cdc0zM1^r$m&3wCIm{n;Gqa@TYmhe!D~jJG0( zzt@cIe9|}GIZuU?%_s9zu5eTRDZ?YP-cmHxlZ$gdL2$~nS^DJ4_h_?g^0Tk+)z)lF zj<k6C&~_+16&iJUZoTHJ(V*d0kqEBa%tN- zC5Ejth%&8Hu^*##zEb9h{|0sV7SlG*25KdjKOk*WL{zT?@WO#``y@S0j|RaU(mp$& zg*tM`$3{hJ+vg@`W&1QF81|KmbJtP6*iJ+2pslioOj~6+rL7)7TRjV?Oj|YZ18A#+ zM%pT4^9Q7@Dmz-1f`EGP^*V6yW8^6`_Do+-wTVk`PXKKYjCLGNxvO_dG*S7US5OCE z#W~yjo{W%%JFx0<7n7eJIu6>`+EdRMFJa%M{>Ni0ktdCM!)!gS?Mm_l22NvOqq}Th zV=JwFZ{ovnvP6!B&(hX;f>%9#;z$4A4z_t}@~Y)8xcr6ObT&`TMLSQMe|EpK)#+URzktwo{`UuEfzn#e#cD?9&MDqeb(HZ?M#V=lCJ&%B50kXay8gU4l5< zpuysl0=Pd`;)e~O-xMC7`z!|WB#Ey)?*OhoPkJIaCGFueJB8zwx#VbtOb#W}#k9a& z-1J~zJU};tZXgDBOhXr)L{`it*f)SfotZxDeojgxT*mv6>>~8JUM7`I_er@qlP|S* z;R|%)Q_yIAaxyw&Gb@NQ(0$sgxD0gFYN-SyoT3$Dm?98J+CnG;LW1Tba}RWG|EI~c zi^E2r6^CDrMn+!EM6-%Io$B}c+$=oy2O^*QU*Nrm*h6p}{0WN_vzQe0B`8^+$lcOr zRbYaYRm8}Q)ELjCP~-)f)bv%L5hw;GO{LTJr;7JhsNS!rUk$Da!aOtJgG?W*GZ8Fv zS0b8avCFGruU;WGR_d2#d0D4f_O0^wXypE|U8b7AE`OmsHczrb8+MuC^0Ika6zz`D zf@pV))?##?RYdQoRm?>=ah;m|FTz065#Ok0{`U6(n)%xC$b4-K*W{s}CGMT%I-!S% zAP)CRI&~}Y=B6Qug3m|NXs*XqIL*7T6MptZFw}BypYDHp5b~MBnA>TQEDZVI`-WVz zV%m|IWa`TxMjTFR6Yw_9;Kt@a%Z zeQj*oGxKd}7dMqitnPbrV>hAA7SZ3-vUd1!>nK^#MY(40p&;~(jh4aqM+zqX=+Dic z9u_%cLQRClIq;NBdWzg&4B*(@C-xlZtuskPoy$veo=B8ZfrtzY4O!w|CRu;)!d!Q0XBQ9!|1P!PYCtOr=U`#NFdPK(X3Q zPvQ1H-E@3ZS!e)gfW0VBz&>3Ln3)XfcsJg_Hb4E{Bt+=Ug-f zKSj>-WtpNZaU%<)sLjJ&^I6p~T+^3tO0Ce3rHV66*^-!%uJN{1IG@|O?YB68{*w?g z6=#pS1&i3edAfos3c^2 zyviSYVM5%}GYUyWpy(EoN(72>kWd7gLQg+gxf1-N$6vV$&zYPzgPTRo_*ars5{%Yl zo=KLP5$7rp#`GSO3|kg(Kb$5@nPkZs3=ul9VJ|~2Ws)ULGNId<45NmUm?*7*&A-F$ zc*n@u)5=e&vZXt8?15e~N0BrHoP((8=G z{jQc@mzbVhS!c&*QUolM94^b?CX5y z(_`G%vG%0uvXM-6bQE_ktjJV{R$}*NDTAW{D<{#N5Epj%rsTjw4Wq0T_4XiMt2nbH zMy|BgK(Kk4|L_Wm5c`9o>$#LcDM^I?=@KuI>az(7+BU$3=W zH@zDXTv6Ttb^moHvgeh)cUT z?+xldnQ2>G!mv zpURB1oS*ml3%=vqEe*;h`bkBJEr zL8yJU2#91OAfd$W9_Czve(1*6qn_ij-Jr#F2plmxSZSaJaM{v?BWAg>jTPdw*vKkd z`CfSnf8(yEl%)!_^tDeND+_w#{1j*oV;`>bX@(=6xeN&zqHF<5R6ivRvSledm1#24 zI|B!FIAC+sFA>U#dtYEs_=k%r_(8|Q3cvC436^2y_>ouJS&4ZLn8X9AiMhv*;fN}n z=Z$_0zhmK;0Y8SND%+`#FZf`7!$!@$gzDUJ{0MwB+dB^nJz&Kiuwe@;1$jp-?6*E_ zo(3~Y?kYce+$Z;#0Oph16u^9P%dOAt+sA!!*sNjLpQlO2YSe}_Hz85au7K=ijmQ0bK3095zZAu7JdK)qX}xjYtB;wmpgl3jAxq^^=phKDD`m_o+Ze|RKZZ_ zK>WVkpOZvqGvVyxqh%P3UTw6vu@=4wB69!anlRd@r~#udF3KCeKsD zTyK&T0%ld<)UwLrG~jx(@Z%@Qz-|$-D@S6pS~afJpf6N1?+calmeg_n9b>|h+6x8z zKCAJK9uTo%Gu2Rrfp5>253oMk9?cgHt zC3apA1lJ>YYwfJ1fAD@h%!6DlfO`spbZpNFng77OwYj+56o48M{!Vq8tmiC`hp#Jm zI$`JX#sEO{0)do>U2wb{Je8$wvdq%*Cb4M2fHb@D=3S`5%y{#|cx1<$cjM7F-uwt2 z{Y@BUv_Yul?@*OIg^fqtlaRgk0Buk&YS3#LwE9ddgKq$2fD2xgx2jDbdSaXSOQ&@z zcv*uL7HLHcD9G3^YC3_wrb|FH{hKy#hrtOjSUhTc#1>ffhHP-&)zlX@{4_?k!j1df zX&~h8KTLOx`d+9rR5YQYgoaIM7$I;sH;zn|zd@B~yLV!b244QbaieM7n4jd_ywkiH>DF!Y z)>NF;Aqee4ZVy)*cJ_BsY2Ku<5+fJ#S}&=*P_1Tirl2jDv;;V znPx>%(qPd{G)sX_i|w;=Ks17{@HTKIFljv|W2@t_*w46!T1w{b{RH;k-h^c+6w?Hp zB2SmpinbBs6gCc9@6Y1gb03a7_rn7aZ0hL#p(K3v47u>dGvvif`-f8Ta(e$z8uudX zAIikb+5JOVI4{^g)E6)J?;q-qmk0I_4aCb!_YW;~h6Xo1gwD2H-&9{&c^SB!!TJ!^ z3Eg@*ZNfY~0!SUl<1_&_!vRu2<7kD`xrY2l*xLyQ0gCGGe zoIxEzSp~!w zw>&nTe<+T%H;#oK16+D92T|dGxuA^KmAC}lGXk_(PuTH7XaOQx&qw=nY(L?*e)jFK zzm=;n0>N@(9kyYf-Gdj@2G#8ix=@>)b;*H)CM zU4DRA{@k4yh+jW3f}Q6(ub)^Q$KFR=hPs_^*o}@0QMKQW{y}KnvezzEtW>VtfL*Hm zt|r6#RG0Asom}ZQupza~kt3R5<3fehf<( zjv26XBl9e4IA+9;VWCa0d;G|(kBVA@e*4}xgVD<4@uRYJF#~`-ywuS_)lsbB@OtQz zTv-Q+V?7Lw{jfKJ+8g0Hp4xZ3k!@>=ozbb%I(+8}hq1gg%VsNmoH5RX!h`HQ$~%-O zVY|}V`10Uisj-OP(Z(WgH5k?hHo(rv#x|_kmKrlS{Qh1r3BQ|ILEsVY!P?y}7NN{u zh7!)zoJ*DGf1u-o`1mA3K0_GY0H1C;anrTC&}8z+Sit`x{tqu!?gm8woz@lzi>^wX z)+6){`>Ye+B-pT&&zBxpCOn=D$2(SyqASh#f&R{5`pJ*5;!@5}x%6-h*&z}MQEM2U;Uyzis706=2ERMy3b6yt9 z(h!zG=FRcvB>oI7Rz9g%a1DpWg1*1Sf)2mMG8DqHjCq&yhhi-k7AqfDEZ9V6vB3GC z#R4%~EReHbB34Ctm_HP6d33SzF~x!^uvkzB77N5}u|VEF7FJ1lC4WTBW%#>SET{^L z1$AMuK;{-pIfP}52v+guWd59DHKaTiU|AJlIXS>`N(jrT%sbAX)%-clYD)Rk01IYD zEHA4AET@IARG9a4{!H+vYSpET!Kp3L=>e9B082H5Ws-T<@MkT5*7^D}8DLoxU|Abr zSr@{xo_RO$r^cU+zP_vvuxtphU@pT-cVh_48O(bof6n61*}lG<5nwqpz;afAu(m=FjE) zd5o_wj|#9nI>3SfwXLJags?o8c^}80$Mfe2zP>y*!1A~N%i{wqPY7XoBJ)0pKUeVQ zN?%`|7+`r)faQt+%atK4S26F^{JDld*ZTT$RedeazMtO=qTYY`O zmIB+38UdE60L#`8mM1gsHvT+?KhwUxJUPIEW0bZ{KPA929m2Amd1v^ugFiccec2vh znF+A$2(au7VcEsJPvy^U{yfdsmt6strv_Md2UwmK!g3w+UeBLB{CT>sFV_WFt`D&6 z39vjpgyk8``%M1az@MhCFV6_DJTt(8Ia#Z9%@CGnG4HeaGs~a7zP@1Y%hu7e11z%v zmc1b?`mVpFcP8r{(L*^8zf-53t-6U}=T0 zynuPz{F&p=3w?cgL4c(lV3`ZByfDBrhK^JW*~eaFo-a1fKjYK%UL=u^RFe95$C$xK zJ;rPXdrp16kD)KfKlEg!+t;SF5g4g!kot@uhFRFY%W)mzT$jl}cCU##Dk7k2SezC zb#R34m}Tj%C@OTiI?9IrS0}E42(G0*E_N_G*eVZ3aOEPnPKw|f@^P_4(}`gb`_GO~-+iHkMF$~QHH9$9A@SubH+tQf6AcKSMTv6jNPSWO{iKo_kOSJ}tK zZfGa2u?VhJ5nLxnaGm1gV#l}>*QpU);}Kk|Be+iUadoLzxe~#3dIZ-*1XtC^)vaHX z5nO8`xYkB+t@Ckp>(}}St_=}fwFs__KCW*4IwOMX%m}WtBDl`>adqq0rU(|8*T$e;}T^hl4nUAYm zzaACA_2>w$%OkiRIklDBDk*gadqogJ%Xzd!NrNau>IQVlqPT&y3)@A%d&vtaJ3`2 z<|4RW=;IRok`C6`d<=a+^PS~{7tJRZQRvKtB44ceq%9y4UAs`EbS%w> z9g*zlF&6Wv$=FYqA}9V#M@<+RyGu zd$uR-y~j!WBVDwg(UbNwd(yt4C++5O(*AH4?dy8dzP=~zJw0hZ{WxiVsEhWlp0uCZ zllJbOw4ZjIv_H^AdwWmXGd*eV=t+C$ankN?-%svIds|Q1Pw7c}`Z#HKw{Lh0w?-~x zTd?$C&0EN}O!cI_^*CvFx9_WZ(!RPU?Q43{zVI8NH#?fX$ZX+OFr?aO=8e#~*w?rz@~_oRJEPuiFEq`D8gwH^f+mEwQs7Aj2m?vY=(E~o}@E9NoS9fbXW7H_H>b^@|baO z&{1T2=o*8vIULUrRGPNTvuoj?IKezX&_#vjgy#SP;%E@z@xPFi0W;b}c4!O zAkdX6(&-AE=$bKP$p4cJjYNDm_>a5W;h`2d6?+0CK@qb2HZMi0iqbCv zkBcFmDs0Q}6ySd=cVbgMA`6@0oBJduU19Kt;Q~$d_>)ou2-5HY0Cf#Z5ngk&-gu3YmD!zhqoSB;jX6%wQ!a@ zKt*}e{USu6O_ouU*c0c|p0>1=qLfjnPlF9?k%O#+E{eJxR|SA9i*M@^jnmNGo`4%g zD0ViEx}-u5BvPzA?1|Gd<0U9G#Ee=aF+6$IDXHf?(j*a~VN}V+fifA<{i3W_DKB*h zl`x%6f-ETFT2@GkEGBjjC6p%J3L3d9vgsjseMFr@IfbMaQ;Hsk+ZV9IchhX7UY}*? zL8jYrs&87_G}=>t5=xjr^ROx!hj!*LEl5^D2Bc9=vZEj<)R2eNsDqSkDn=VwaP043 zMzCvYm+kS{wye_TX;q-cGkxP83Y$V55G5X+mCbM^c-CF6EBAY}_EGdMG=QXBKMtff4VeS@WG2yX8w#_%c1o^Fo#|{mBg&{iRXZ`Yf$nSo_?(omR zbpl}1*||%|r4~89ICCp3sesVbSYCqA0tAF+z@iewu8qKG+gVNmVIyGcOFM9`!nSX3 ziTxff@RmXU%0b>)2(O}q`4<%OwnAK8NSJ?}A@3=~MTdm>mmk)R1NZ7KUI=ko8mVY^1BiLI=oSHLEZ}g%Dk0zT%w1{U|l>Fa;MEPHIVV^ z#IFl0&`@1i!H4R?R!>J=P;<2|P!9>e9#a1!^-wO$H5aBLQs_VQ;qVP^*s6RP6#>7* zM$B0Vo6dsJjjy?FW0=BG{j+kQE1!i6P>u{W}niwD|^b@y}^76~|&$NfVttieFZ|&zk4qDI+cBn zgdjj`#X>hx$?Yc9i&JvCgbu$)U@nQi?xpH8-smo;Mf~*{_-u9=M*?-6+MID2M*@h; zivQ8_*v5B?N9qfJ*xVw*SJO^f$K+vb?ChU>6t}EYFFrPn1_n{b;;oTU{&CA<0Un6| z03R;^A8EAL@)PB2GCz$n%<%`;am_=4=C?-yGf}_}0C3QH?HrT3ZaKH@uwcMz8m~<6 zx}$hwLf0MMc32K=87j4VQ77@(`@jePoY9+q#IM?Jq&2D_unbM5Wv`rV}V44G{%ycEk0` z=+|OEfO~;|h4yos`Ftec7o+xVZ}LKTLBJX96|+|YOL+YFekYzvSANKLISc!6Jp`GU^qfTHM*t=9maP1kkvdQFH;~ci={J>yVU_uXVL(a$ zMQ34FojmfNZ~W5e{iC>N3WpJ;>b$sj;5PK*SdHF+8C-554o-=q_ElTE47s;y2=@2z7D;YRwTcbU!t~FL)0h@q2BP$ z1Lz)j^~$diVLW(|h1%B)hit=Eeqk{mKzHu}6wY+_{2C9l2U}zGAY2%yMKzkl=`*%V zcsscZZH|tHOz^`9YBueUC1bCFd}zz!rMd$N7=HtCIP($5Z8u1#aL;rkSb~Gz&IG&% zDGI_}NKw#OH>lDLTHg)gL0I;co@w~SRw~w*b(VlB2lDIqKGsUR{MYhe=)D+v9}B%# zLhtKC@0;+B8vx?;o(Ug-IC9RLW)d^DKf4_K(4Vn`fw;?5yKqmkqyobuv!iFqo$zk# zAqY8o4ip6#!QBSISx|mYaTc_Z_44a~fOF&K6sUf)51%*%YR}%l3~=0uGo(0`$dM)9 zaP*KPRlKd#p(oFf%JIY#r$8Z;GK|?plnUnkCicDA7t=RoQ5qq7a2 zI0xFwk;>lfrf3%iF2S2Z(F+0iJdqH8n!Jb&Vhz)%ZYQK zVcT-z9O%Q_mj7qZfy#nS==i1?&2zCuyS#eb)1L#7B^*hw2SokxzpUj*gdQm6B9A}z z-;F)mtFbTAkqw!$wY2?rBoPX~BobbTgl}b7E`urxf{Z@0`rszVO~1zU!`vRE%jXiI zn`isoeEP7LchZ&qRWWmK_2Cr513_5w6(acx$XAHuV>p!0X|W*KTv=H33X9lImMScA z3mG5SHiokmELbj)$}i#{;=R1YyLf0k3yO{9g+*jRJP>u}XTcGlUqlw-*Zf4o{B|d& zNOJQ-xDr?P3&vwtLKyt>&z4lNgRAT6RqWTi1^C0~Y}*G2a9VueHtMbI{Xw{rgv78L z?9aFxO!sqII+_6+{$7eWd%ol0?&D~Yusvp5ae>$#v#odt;C2kSW+oGpys4EhN*!ey zTAzwN6I*#tgHDa8Hs~X(k3OedQ7wBZd2g`~84yUCi_A4}K>HcI}^hvkO`c>nT6 zxq;Hu&{8*t!za0=mF3{&u%`hu0}0{;iJ)xc1{yf_IIxKL#Y&nf?WN3`qV_i4%zRyL zaLmEq6wc7Pl@yZkG~L(|{M9`Tb0eKwMQFq&RAZ6gochiRRCkvzGsJWIeJ^03XAJpGY8CuyEd zC8RV-I$2LE>qD8IjHWBX=upBcU*SC9{CxGfBgtFnm&Z zl8s-;00{31{Ux3`@;2Rp7Ke*RhmZj$M7_!~zTogUj=V#)#U>=MM|dc)SfA-j6?Ub{ zp>BDDP=EQfhZ8ss7DptBgI*AMf2yzpBB!J~#HX>Shh3_R>4*nTX58xI~~f&1P&!UFd_cZ3BVcXxVl0xkVwkZUkhg2kq8U-W?z6R+?5^d=?tiB0H zQq1R|lNVzL&BvgV3uD>Lr=XL(u~X(l&`H-=9rGFJq-Q>yO0UpK&s9s>lb)+~QR(G7 z>A7mbE!k9UzKc(DRx?~R< zo>15#YBrbR`5q^>9y-YTyb?S_)Cc>Tfq~IuLnF1Hy78F|Zh`aRa@QN-az5<|CT|@5 zGd)}kE4jlRn+JS)O*~&sjy(?gGh+@O(}ETZ{B=me!|u2aErkyI46NmjnN(>9&WcZ5 z9xv>~t+t8)=VoIw6VHhkcgBlhkV)W_r)DN_TX4M62fmpXuUWqOAe?WLgU?7-GHgz) z#YJbKcgw!?-QCy}X!1|{1x1seKCjtnD-?Y^Q+3t@fzm5023SKe?0X@`(qPOn=mcp3 zQp$S>9nb9bh9o})pGSH5r0xyEA$P~H#Vj?%=9 zyeAmrl{3$>gM!39y*jvg2#56aNPc$qFZ^h|=T~m*g(HRL-y>1`An-da{!Zd72cNfG zU#Q{OlD>|`(8tCg(NEZ{g9at~Rb723Y{ zh1xef&6Q|7aY*rOOiK-vi#l#d#!f}ue}QL>{VUnmAcb58uhT$aH+1)Qt22_LyG1N$ zCvXr~?ladbu{D4b@^``>XUfYo?3!D#<$i59zh9yG{SC~35LR?Y4Q$kh4ZFBMSflY` zQ;xW}9@s#a`p|OLU16Xr0$`uJ(g0Tmz<#%6fTaL9fb;kkYZ_qO{i!ron2WxTIwMk| z_HE#n{$*Ia_N&5ye_%kSV9}UvM*t%C2F1_IAK^dZ)x=Ve{1N{VYgmgsM<4i)AQe{L zX^8rx{6~}N45u-XeE?vuaXfnUEyYS?h>il?C4oS1W$1E&^7J((&WU*_{$CwihmOJ|bs+>F?_MydS-X?}_SKdUb%C zi5U-rcM?kNH?Ah&Ut)$se^MYYt2Ysk)jstwJ|>P$t6c7@uBCg42wwFo5#az1B?^tc zRDRv3d(*NmMdIx@fV&CI3G&%|=Md`aPTQV%lwG1l?(x`Fc!qzXvoi;thytDqlIQ|3s*Ee-2e-ltkXzl9!}aWq4I{u> zhYP(%!-e~Ybc3(rwV(ssU1U`HoHD=)3k6uwNy7@f% zEjAZp0WM%VOllM}S0J5BHk$86m2rIM#W1ZOtBQ=NX^@)4WeRASfn@s%?%sDoWBSu` zuR*HjSMWafTE5)@cUzOmG+bqDP|Zp=lW9)W=Mue=V%+dus>H8A|E64`nL^r(%3}dy zT(LGg`>ahizC%tb_WMV6&b=OVMXU|uh-+jgq{s@$ONF=v3-{{?AX7;YEwn@`0G^+o zsu^;r?i_$gmZ3B}Jffc9Pf}T!oX92Dj6$Xnc$UeafZ5qM`6bAuiVY5>jS{ST3A79q zMD1%7Rhc>Sld0z6XfT7j#xqlx8-q`*L%9rQDl@rE4lYJ&-*mh}qfMR9d1`~>zHiv_ z;GW7-NO7JOv%4V`h&@28~Uo-8u0E3fk|05rX=GRcULc9HD020k_Av}O3E4U)e4`2|}{3ZYx zt1vd-{5J$v(<~4P4I!Uu2)_hDO0NTjrmu_(K=WPj;hDHm?B8;=e{faNd=>56KOrO5 z!uI}$X99}LTETexpGg5Yh-(~AwRJ+z*gB?|T#CD`i^|?D*H1NI^m^wpc2Dw%-RsB& z11B+R;4bwI++|jdZmfc~H;J~FbSf7C`j9jGOP2U`kcdKHbA3MQYWviBB^yaGUDV`c zqtGZ|lq2FqH<3>|2hpb_b6S**5BfC(g!}6A&@JS*;6~-qU;-9ZGxk?kxM^caQkald zXk!5eOa_d|x$!|S@4`V$n3B&x7_*;5DA2J^0bX@1@?3&Q?TV~TyAkeaST$}QnABjg z@9`?gY>n6}M*8;3s12(`>>mN18ElO4<+E|))GUUeZ}pxraWX8-;`9f z05711*);3|nKi!1Y+5jjm2#6Yj7(&T8AL@nl&+3>IV)96^V$dzYYuW90ucE(J^&%n zFs#xPxy*vkYc5k?SQ{_E#2Oo6k!<`dat33J)#GKeU8iP}SER9LB<%=j2InUvyF&eUlaESnG_u_>zdQ z=`J;y^I*h`s9~n~ZTURf%~R1|8Azz^IxSj=z&>EvnI;N;yG#r%1-wk9Qz5?!80}^Pm}EbxDg>mru32&m-fffVD&GzmL!sWs=_j4=-eT&5+X~PV^uase`f|LB0!4Y}B{qQVL_siFys~ayiq`x$HGy7xm^oAv|%uS{+ zWWs7a%Q`vc<_m`km_v7Ul29lApjEWr8-GweOUvgrS79#J%@+?9`p}=lq7X~nbkXBN z4=1%S`9m4S*nB^-Ux56f&M$+q5i*|OoBYq6ELSs9IH1)oeSNjrnvTL4&?dZHAHGYvAzetTKek9(l-%L05 zanM^Q_L@>a?fnNOCH+6E7pBW;>Ul&fUSx+(s45s`QiTPiCIHA*0SSckM$8uG|J^DK z1=XhylA{7uu0<`uzVKaeO82@t&W#~h8-_K}xJG>;y?dG_Fg=aFq@6a=$lCoWwSTzC z*~pRQLRSc56JlPzRu!f$3L}jv^l3U4yDUQGDr8xQ4*{9ZRvmnpTOz4=p}M4aw9m_< zMp9Bdc#^M7AvHVKu;2JCXC6v~jPtY3wW19S_Dg&iY+){83^qJ9qx|_CoT2FuD5>R2 z#2$%qZ9ut}W4#9&u_i%{z$d}YKa`lBbW#~Fj&Fp7be>ryzg-8{uq+!t<+0T*pV;9v z-=Bfqj_*d^eF zf8q3VA40mgBkATo$af5Kk;ljLfdG%<)Od^YEa3Yh^k4Hf--E0fca6Ju02+4Fv5~lz zG1|nx!|DY8DqFz%JQ>$FlGZmerf+1oaz4|s(6jGBb0%0%rVJ{%;V}!lJhrNWb2MIgq!(Kz!7YX}&ANDT7{*|ypKI}fi?jr1!KJ4p+ zeVDMrKJ1r-eUh--d|0Xu*nNb(%7?8W>;r`TgAZFz*ar!_-G^OF*u8|k+K1H%`xIfX z@nO#(?9+t3)`!g#_8G!n=ff5WJ3`p&eb^fa`w(Go@L}&G?Bj&J(T5!&>=T6D;lsW~ z*aL*!>BD|Y*p~=S|Q|LDVxP|f;_fW5_seTy*4pfV$B#vqHJ z!T)5CTxl?M9)cvU!DS4Rh6cwNq}Vk$$si@9!A%UZ&>Fm$L6%K}Ph^lq(BP99q;_iX zItHnP8r;Vqbxniw3{uTB__qvF!z8HR_><8tYp`G1_QkkJBj0y8f$oVr>AB5)RT!aV zFbJH>T4~d>$vVeKIyEO&C4}v{z&3HI7$cLZg+AWIS}|37A4q@#@q4k=7_acpDc$VG zVx!~vl6-~6kDP4B-?xt!ENmu#6)o&H0c_a9J{rJAEbQk2Y}CSP0c?eZ4X=Q_z6Y~+ z`}j%=Tj!^1e~w}pF}#k&z`f!3FZ?v)g)sbY19&kEe?$Nu4#ThW;qA|pmQIYvE7wCQ zMP`W@7yo5!9&ddTN!t8z;;sAm&L6ygitqfv`=|NNAH07Ck4g&Ww#_#Hj^Kes2g<(9 zcPs+KsVLuEjdTx6`rBp7S!3`K`wFt&k3?<$;Qc7y`Gfb*;-NJ7X6l*C?!xnlde&*D zp7k6TO;|e^ADf3}txX{exoyM_DQuW#HDmhh8Ns%vRm&iwH&lHCn<-SH`EBq6fc`-NkO_XyZY;I5&ncx-v z!K-;UrKaX~&%Vf5!V0$bHSB)4l=DIxF)wrwy|cIcMtxo4`3M6^Yo)Gfv^Qny(Q zQ=}Tv`Ft=C7S3ZNtEXUGV#H+_P96m4V5#z=SS(}N@nv^Ec1*IgEaBPM2#ZmiiqAWk zbNx9s24v<6ixk{_YD)JxTiR0XBbW`KMOBs1D-}}J$vh^lR^ZwdgEVz8m&Ww84nWL= zRjKy1U_y*2YM)4_Ij~}jZp4w5FFF%hc@`^105ZRDy|MNG=S?!dM~!q|?X%X1%vP!3 zaSlQ%Ku2(#X(l&(vI0=0XsbG>E%saTqs~~P7|YfLs~blX5c4mYHZHR@FO`aAU5V3H zQZNlwZNNt0m$lMNbpqNj9QO{Q`26y@Bijx#w6LI40j5SCln+sT~6)qgisU#Iej z$F_j)Wth9mXF>0b1jh6mlU{u0Xcnd$QPW4`g&ju+mq=h^CO)@?74-6HvL z+&ySl&u~^|Dj`i?*tPPf+;xxNS#0C_eV~7RN@9!W0z+jQ=I=J#Y4QiCpi@h0TN7oieo8Gla6f6BTW~@YQjy{-j{S6<^P;^>sf3tM8>-CO}%Lz6|W-IoZLx6QlijmwdY!JG>*KouSH$P-@JG<>f_LT=O%mg#8tz(fn)H z#;p!aBXe2lDErC{YK5&2+kUo)9WH~;Cg_27{rTY=#JO zKW=vs9r!Yd*uYo9fv<)G4>C}>1-!Mt7KVSFfxQc5!2c}_|26|^G}_;hh{2n`PM!O1 zIPkr2mhXoHKL`i@JskKU13L1UJurs(?pKodw+L;Kg#xxGF|_w}SXgX+n9C29S5l_X zr$p>0Qu_Z(${*LE%<+}oiQV^qSJ_|9N*$S9!9M#yc}(lKfikKs63uj4-+(HJE#iyV zBEC2+Mq{vuQ;PChISg#(JzqJ*(@A%C?ghfgYx62SpV{#teBw$bYJ(FX@3SL z;!#eEZB#5}96gF~u;hvD4C2d!U63LnVq8kKw`*pVjT<}9)B(P^C^K6>KD-NYT))AA zfaza+Ctix@%SDxiB+6qWeM!Rci36rB$M?4VRxGWX+n2Gbcn_NOYFiggQx_PQ(YjP_ zW9_wQTgvEZ5tP4GpM_hor=NhLeHped8&%@z0zb*Jo)lc!zi)FE3X0t>YEq) z4*E{#@EeS3qruFV$4p8wtS#EHe6xbizs5T)8Z(7JKIqBPo`GE^bkTicG<*9hC+ws9 zDu*geR5>8!qM3wPi9TO>IY5Q%rrRI^q#};W%K+kaN?3ejIGtjrj5eE{GT@bg7Vv%@ zc$J)Fk)O6Ohq2r#N|HkdBEd4hCYAMmJA_C8%NKia=asN1N&fI69O^e{^AvWla*%Wq z=&}@*SAbPJCMx&UzQK_~EQfp`$3@by@?p zJov6_q_HVZiyu-AV8OET_mYzAVl70pM7~wDW;(Wcr=^Ad0PT;pN?QLuckB-sLi#X$ z1f!Jt@L|-30_R5br2{@};ll@gxbUp3`>;-nM*4F>U)XHl`~CdJa9@J+ars({t7n=j>Ue@ zt={xx}rKBkG<6DIOh4JPx@m-VlGevKM4nZ8V>v{9Qb)S@QZNZm*K##G|>JvpVEuO zSA+D*TV#p`A!arq)_pSe9q`BRW*Gwx=4()ou`W%LUS29-i)CnKB!Dv z-m-Ru(-Nu@HYt$W)$fGTb6QeNL0Ne#jeQYz-mVZbI`>=rXj+>u1ZJKv z*lAH1m49J=dClWc_7-KNawnh|QPA!rWi6T2!YNsil`yFDFiwkj?K_1BeInJo#U%wc zlQxR)^}uzWw4ZC(eq50`vPo`}%~cv&8jH(SVuq%ll68;l^6-JI5CG-j1BJ0p{#@lx z>%|gsT&W-_E$dzH_SC+l)Sp&pp^S} z$XDA!QpUTKdw5>>&8QgDuQV#vM7Qp1)$7^mV1@cc(4dw}Yx)12vt)S-dYw=Y_Cw2C z*4^5ZrEvf9O`hJTRg!!2@_RDw-0#TU!FYL-G0V8NPJsmg*GGXx04q`8Fo0uG;0S=l zC~y?O!6fn;_#3M8|+C=kq+ z(@`L}wcDa0zVSkY+jFDoDcV{TNNy*hKyrI>6i9AIqCj$cQWQvTGf^P84OPr|F~aS6 z(e&hYV-!ekt5G1iJtYbxx1&)YxgClE$!#_Y1h=7@86S>tdww)MxjiEaB)5}MAh|s? z3M98HqCj%HED9vIeNiB|4b{x}NQB!9qUp))nNc9QT@wY8+wmxn+^&oQ$?fteklgl1 zf#5b&GvlKXZZC|cC%0!sf#h~=6i9AYM}g$FtEH3MP*d0DOl}9F*}-k7X2w@UxZNC0 zPj1hS0?F;VD3IKq76p>qaui5zLrp#4c4;&vxDD0J_)7P-@%({Ie5G6FrHAnqZdoou z9CgcbIU)|&$%TnHekYeG7BPR$bOl%LTFhgA;&=i1%S#P{G7irPhH}3_QSLK1a4b)e zlrsiPIjv|)L{lW1f<=?JXqHPYCZ}l1gTymTJY|cgWbvScQlc`7C`Brx zj8djD3Mqvu4;ws1;u#^H(=49V7SFiFbE?I2ip6uX#k0!b86%!i;#p_$thIR7SUi&! zPu1eV?p5XIbc3ftJS&LjY>VeCi|0&>=M0Nyqs3FRcs3Y3>w#w_(QLM8F0^PauxQS= zXwI`}&b4UHF=#dcjf{)9kH(CthT?YFQ6?d-kTFzwOYM8Me{!=)8;^9pxB&i7>{iAr zZ@~jo8)u_e#O~SLZ}5Y47l~DnByrHyW_&oClFQaU63$!B{(;OBza}>w9idKcoOrVG z&%&H0GbEGpWM3~H+lF$nj}M`mwq_2Y<8ph*8EvI(4VHh!dmY!vGx|bAmoLax3;tkM zBRs%$xvPd%`Ssth{@y`dgTM;IaT%@_{(_Xj7KcKJ=UrG~+|B4MDR$H049*se=YS&kRXyI;W~`RrQb!|Boo$?2=OW*GB0hHvGq;^iezg+9-X@ zPQNQkAGgytgz1YMUSkP-KQ4jKIMu(iJKY9F$E62R1YPo7Op|%tBy@uNNsKV?(J<%V zj$9bVNeuRN@e<2VSp4`nkv50YJUl3Nk;S0YlT4}quuBaiL8&1084@}u5I-T5m#yIC z5X=b+`a|0|xQMUICwi&e_MKS2JR*-vr8aKH!93g)xe@1JR^djlYedA)%x}jAYW%A2 z{HaO(q>XIc-L zjhVF^x6IOzB`=McEPTXWhP(^{VHi8=pUWUlmb)V%Zv9(rJe<+!nJpvFHpx33q*vj@1VJCej?Ig4U`C{E zw-;JN7jC76bl*!(8zQH2&xyzl8*}-yq-C^ziP&3ECeMR7(tzU|QQqXCVR_PeNIKt2 zVjB;ig_U9z6#LtAywzi=L~?FT4x&!Y`rk!8Q%M{aLE741Pp?aQbBWZP{~^?&hXATh zURsw6)3cdWdKTwmu&2c+no!7PQi++{9B+8DREPaN9(x}6`)ZHGNlCR>T6Wssgl`1% zr=}-ndx8yc$(j38xwX^z?I~Kc{PsB>`DSlUHbKoMHqM`_*~(UaZtN@rw}Lu|zePa! z-zSg$_xMymRV2f8UbIW~$cw!UNbeOrVqaekya#}n*p3|wx$Rxk=Qz^&R}ZzMD*4;J z%d&xHK73@3Ih$}r>JLloS9 zhyoK#{|8ZUcNF|#81(#y5!Mmw(9EZ&4l_SA?>-mpxMdRxp>2p`>F>wR8wYhu}&m|ZD!D5-9W^oDJ)2|H5gsfq1T6SHgO zDY-PsjnqJ;Yht}Mv4NVHT`kPD60u36b9sIn$M>rp)qkO@d)Eu+J5`&8XMQI0GJG?O z?V|2rYVPErCp(=nHuO$Bs1SJP*yecmQl0P~gy!sYhNw7*;Zo=xzI&(?cn?rt@Xk{M z@$Q4>>~uz`Er_J*sv~0kP}`l(C{%B!GfbsJ+8)$NytC9>yt|;RJDqVV zH)0uYr;hLFpI(nM{}^MfyB1+5o7myxajEl;t-DyyKNdW%0_!cV-i#vp7qgC=4IIRWAt( zG^zSew1>N6{!|Wu??LaGI>>P^n8Qa4Uxr^*{|iW5B$WR}hS+|S_n>-<9QaM$ZFanS zFgs4+1RVwrFrs^w%$}$uQ;Lt0{v%6ZxMczdd-ep;^&cT73Z+hc32*)>AO?Jd!45t} zQ)}y%Q%J1vfx%pwVLlMfFw6(ST@3Sqa5uwzAl$<+9|-p{%m>1K4D*3-Kf`<=oMo5~ zg!f>W54TJ)fIWF>EE5X6z=x4@*~i0xe0!0)m`aLwmTLRIf@I*G zCD)Ofa_o{At&-T?V~RP=rLVYeQ4*P-^doj*;9?r3z$g|Lo9q`8~6mM)G-`Vug+z$WGB1w&p&+Wjl zR>OrpWc~@6QA$6ucLoy+#y!SJK%eMvY0&{{sNM zWXk_N5xA)ZqjA!~PXBCTDKfZK8#^tsxbaBnfL<~nguOT^A(R58rRZQYcVf0n7$-j@ z=mmsu1yWK7B~$68=)_U|*^F>5bRY?^W~vs)j|Z@3tZjSoKrm^MQCzE~B2_XyDNqza zv$E~!Kr*~h3Vf3rm8eqbhMbj(RJA=B2qp;!1GY&<U!ja`A9l99)wO zrKwbKyAad@&qC(#5C04IeyU1(vueCmGn2DwzEwd}vueOqPt&t%!c|?-0&2xoYtgW3 z$W?ivFKWwGhoOaH&TGv@p%^2mzOoi=D#Wo1MbgmQ7A!0)aiZ zY{DRQ7@>U;V)hKez0BSZfjuNUkI)mCz1}GtzS+T#J~-Hy?@Tare9QdQnNDFfKn9Rb zN{2Fi4C&ZZNAHWZD|Nps?|o;ucE#>BwaY22(e;=iL@~zE$cP;oV?e!I6!%6EOLOu$gA+-mdOaf7 z2eVOdrhqXM;igKNbc4WsIbJ3H6s+1B#NeJJDW2O|R}RE+O;pDG7Ewkwp{|*^57t&z z;m*(-N(y_-+{uCWzqIe@8J8o#lY7AibH+uw)p>%XtBm*lIqco6?9_I4Xw+p{Wp6|s zzY1DT@p4iu)n>W=rOb2v9yFiIU?XI}KP2*4492gMAX4E2;S~(?f$*LT^MUYQ4D;cZ zStdHAyfhYd%9RA;1D)~~?UWp|;7%H&o5HYDCWz=J1D+c5-C;C|wywNs2OA=yjK$w{hFeCf0||He0scJau(E;qJOAj+>-# zBRT^^v%CSFp<#sh#Z_$E@ggnA%YP}w<%qa2DBMFW17#(@4`Sk!m;5$}iHpqS$1fy7 zS_zhdeb$Yg7RbeC<2jSd_B!TlZHdWO-tqO{X+uo@`=L8uukA2-;VCoy(hM*iti4(n z3f0TW<)#>hF(!6lA2=p=YhvT3sTqb4h%7OQ3_IP5G)YU7lpwOwxRsME?6*ZqxQV8J1)fx+i@vo z*hot-L*-q98LFmI(QeX2GF0%Tn4$JA!3;HK31+AdOE5#NT8bH}Of56&A~C0uF@-u6 zOsQm4p}qxEH5pf^i@{Wlo+fZ<__l;=%;{*d@m%;@h@oHmDMwG;&2Y^V04~&JL$S@xWAILBt2p_~SA8wgt zVvHm&jYVUmbp+!BW27?=is^4I#=~cIh&H`{|T zP|}7P0@Q=&PwqWi{ht5|-<~o2@@%MKK>hX`pZx4>^^gE6g)8kjO0!BF0n~f@F8ND) zzD5Bxb@vrdZO_*jpazazb9;Nf#sRhLhGYNLp05c&efRZ?+uHMmA2tB{e?9tD?HR*Q zEX+>6f5YRCx96&KW)>71>WB{>@tN7`VF6U2W)_r)c&hyW_kGYg6ubVmRF542}Y8tUZ1qn#x+*zrE#m|7_0~yWRJk;@RyP6WzY@nNwFa;S7sdoZHcwu{Do;^54;)o)WZq zpk@{nYx$DLUU0>1^~eA!P%{fk)NIfBH=R3MJt_bT)XWB>{JYov4BhGI04&fm3ydA$ z=tn>G*7lrHGv4vd-Op&x8AZ0~8J|FBYRedn%lUVG`cv&0E3h%|uD;Q4&l!8u-}k-c z(e|8C%U-tTclWpFjNLpj{)+e#jM0WZ`QH1#*Pb!ajGw*X!AIJ2h99tjHePaTp*?HV z+2@}2t}irU?Fo^ZQ5Z+>`2=*PV}d3R)XainGrjKdsiS7A#|BV=npsd{XWzcp^>@rx zpBjJ#YG#2^v!DFt*P=5$Er1HN%z_eOe12}jbK7&qX1eZc-PbI^85OAV=ii|>wd0JM zecu_EzpOoH>~qhq-d=3an6%QvkF5H4d(NmpgGViUOMAvdvv0|!j&IKy``l&KlmEH| zXY|1b{_)^Xw&#rc^NC&GnOcG~s`j zsiQeeJ*-hAXBOj7Qml>Xyy8fiSDazy6~X*qS?pXh4jy0Rn6J>i$Z+#DP znj4p&x(G3O*L@gyn30iE_hHzB4Qj`+oG;>Z_qHJB7Jmm`NSk@QTlykobBCJ1{tcNc z!_)tVK)_dTW5LYKZ7=?XxW{1=HE=3S(|TH~+$Tt4(^YQC3TJRfu<>Lp-)s)|OpvMY zfw|hV80G`v;~C}y;b$|}LeovTD(g{mdZyp}R(}X+!)^hn;_JV|GY< z@B5y0dSiA-{E=7PdP10uxpgwOu{#z!g8O936dr!OOxtB;4(2t`87J#8Lq(XszR)Yl04FeS>?iop^|^!kZrw8yR=Z$^6jdaMSr$Xe19%^AlcZlR|cb*$$FRjOqjE9<6C zwFO`qaZCu+N~X{guvsgaLT|ulooEVurn^?NgXAf*9!amK--|XOd>#1_u*2k9>eRp9X5{-=Ss_!aH{j9~ z+t9RqP3S{7&B%{KKbjCnlQbnhW~x-jdk?xRsnlsa1l-+>`lyjWonX*$luRvk=xUdL zLL+qutXtCS<&I)|HKSHCY^grUs4W1MRrp%=Az+2Br{B#MAwzZik3g18uBDDHXuxa9 zL!Atlwe30%Av7TlYcSS~dao(8miVXvu48?yIc?~MN)lg5)BNcowaqlQr=UJvPBzJO zO;vlv^noNc1v5)C#NJAJ!VxNljCcyB_ta2VgWE`7JVg`oYHpj*r>|&2p60fZI(kIct>DGn zHla>e(S*1d+a|=-S2U6rbK8VGT}2b}Vr-j{r>|(FPCwU#xOj>t)Wy#=p)RhXkvcjV z`szsylBdC9YMtCcy-(9?LnVp-9ToG};UP#^nIv1lO^Cmry6vskE**^|x=QaG|ZE7Mds1D(>ExfJgG z!^cyO<+CY#JT}T@SAe5kBkz*9DE}rhjyn- zWDaiPl#9&4O`Nj9@%8T606_!OK0d!6-^4B@J zh=20;Kic(qkv^v9tfEfOS)FKl&R8%#PlVr3z1ZoKvDhbNKN$;?IV_8kIV=k@b66In zb69EXl>_O46gGXyjMG00^1#Ok7Lk)pO`DOBP0eCRg@rMnF^u%GKmfcAjr|v}Ap(sp zp0Pl4mu4e#I=_9Vtq01t2*nw!(QB_CVoS$Mz*N|A|mwuU%% zw~PujZ+y%Kq*+R19kJhILiy;RirA?#uE0yzklWkR3fw^rv1bS4dJ3h>dAd|D#cFfiM=o_8Z)VbaQ|#b%xE`v z`p7bnK}pZTnI{6xN;o*q!*RZig3*b=37QsXFw#!iAoai-04bTmnW z!XkkMBpU}E&)}#|;NS`Q33x+^GS|q~6hxgcSgIK~%mdN^63T3p0XJ|dbEY$PA_Q(+ zszF*>2;6TbDB3UKJ(rXLHAQi>%XK6JZY7g)6sH3TV1Q##I#&a3uu}nO^WebBQd+>x zX^LV@WG52f-Z>koBN1@tnIfsh>_i6K8Y(!ZBR6P)vG!Y{-V<(kY;O=PjBpq064t^( z5gm}dvD!GTZH9#uZem@+Kw2m?kY?YdY0*|@(n1Qip9USfg{`zuMA@W1Mry4*gM}0B zJvIKaBN@;rYlXC+R>spRhc-u8GoH4k%eQdE!)K+k7{peD2vAw+wxwZmcdP&@iDeq?LZd8j(_fg+GW3j<=I2y2RCSZifLEF|iV z;%M`gY z4edY#?AeOb!j+n-!*ip~L!}NjMayiXl>xDEL=6;4d24M&ZLDzDxk|2;6}3<(Ybi$+ zr=|U{P(;+qTl?vgjT7zqUSf`6AyM7_V;Qhf6-o7=0~xSQYwFX=nOeNj=m?In2K6?y zQ4MHx?AqXnar1ekRSNB{;AnexrUc<`|MqiAs~EA>%A4uf9Y}!IO>m6nEG+@C1%hHm z)%6lElM$OU>WzFk4?IsR`(YuGGr>{LTH6l`hiaqcv^O6X3j4L97*o*7d{{VC8^LMs zL@W$3?Sf*4p&bZ-YGa{vBmn8vS{?1xtqiEm8;2i?vxFnHkl3pg$5`DKPQ*eH#Sxq( zrehWkJGEV%&V;~mwar`yLSVnPQCd1ui#b|d!7+WO0}-%S3rY(S1glWisDL^xn^Kk> zg<43W2a2U_+RA|1IMf5hF&?3n{jiZJYemv7*Dww>Hq^qQtZT}tw;)ZVKz*}|X>CNU zf<)sKtNm(@g~LV_6w|jmkpWxPE~Wz+(CjFRk#z?$pxF@|Ri4g7K+`Ko?FSQ<1jJSe zO6MY=v9?O-KmfFER%KfHQHwDe13_uEDjP0pS@SU}&Mz-K_u^n}v9$%UkjR`Msia%k z4-128BN#?zt-OeZ!j7$+wHSmNM{1!^YZS$3O)EEI;mEMSM(RicGO-XW)te4Pz;11q z)6#@m%u#QwQd%u(Ss2o%wU{O5V-^xMM{(2|b|wOLYrCWlWFU6eE~yhCuwM&~aSAQ` zh*ck%SZFcE>UN?CoL2~v>S%)y!jBr(ay9k(_7*M5ymq3BE57oq8l2vTYk#28R6Gj?MI!}661dZU)PelU4`HD&2|-j)yEhQ&P{i9 zII@!i%TCz9B3la_`NS_9SY&^JQ|8tH-N3>v4BWsXI}^-qgMkb;u<+}DHiHc;<`y_j z2{y3IVKFW|qjR+EUzs=iS7aZ`Na>H<4-#!-Ig14~Tmi7iZ7h-%ZeuBuGS9jvV%J~~ z1^=RbEE_~SeUtk~m1dC49Z6Q|5%kBf;@Zo0?CBv5!rz#bQqKnWsYFifBrkuVe{h%DoUF_WO% zV)$dD+!u2h_-oh~BQ2`?Vx&QJUyQV;?u(J;oa~=DCsM5rc3)VJ=zH>bVLk|^riipkXIozq0bgMw}98LR*@!k+|qyBXMoO zCger;nvjl5BO{KH1%hIb~{Y7Q-LZ!_|8&_Kx4>JH>%img?A)U2-weN?O&d7d*^=x#z@+D_=yx+#%B6Z+D4O~{MtF}+qY(t1tE zQ}dcohlL)Mbo?q#76*AT*0J>-0`2lED5S1+p|IVOUa$A4bgyRAwJ+H1lZ;x`2fGSi zTL6Tl(Dn4?!~_{?=vWg?sH1jJpGN+n4~EOye#P?=O^8Da$C^>+X^BSSJnJDuYH9PB zN)y^>UX^66;)?*P4XsNeOs&&~Gyo3SiqcAx{(Crx~@vK{r>S_3+;N0gBWqb83KFI%Mjl zGX&hrA+s-?DDb{^nStqi0V@nTsn%%&))r)1t+NL#J;=mbClNdtBXet=OYkmt&MAU9 znVyfKi>N&x!<1lo;XJftbUx-7Szp*}))!=fV5D?LH!d9SE%??N!}%{g=-A2 z6!Nmhz~7ALU$n-s6;vvGU~S-RhWSAF9ESNocpJlfAiSMnJ`jE$!+aq8e1`cz_*{nh zK=?d{`9QeHFduH29AfQ3UK)$m9$r8&KI+#Vq*_jyS+e%Pz<<5=K;+uB2T8Hk9#~wo z_8>8P?E&`~%U^g;Go^^NhgU<~&^XFb)*eipvXr$46Q?|N?ZG5asJixG5-3?+doT$U zudY3q1j-l*SbH!D6f_bh!vv9bys)=P(A5baYgumW_29l?Z9+6b*Cs>}bZtWPK-VTj z4fM>8Xn`(Mh!W^Bh3J4TQ-})aGKFZsWZ%T#e(ZjUz`li z_mDBn?a378_GE~2dvXI$B3g+(sG^aW@mW6S_$(Y&K=cp$)`LSauR%lMXao!7 zT4c6d;NXu1%~k4Ng$}eV*zu)w@-n?4+I2;Uko-ISkPQ&?H1_h z(||By9sIGtvARAg(BWqh0gev-Sg=?upHM!+Z$bjxw2D~M9#`O{YlyXSIAhX^KBY6( zyoOwdS5bFVLwE(QJd<7rb%aw0o2G+W!ZU`AvvfT%ki%Mhr}c!JGa~G)o>;p#QtYIj z_+rzdF@r-d*F$1PyZMPzR?ZAc`2B-*k%KmR@W(=d6AeyPn5GTC5fCXl_+#Pl6Q>@; zFeu^Y5Tal-8yx(xaQMYmaa1Rw&jrGpb@0bRqD~kr)r|0?fgnW(e=Hn+7}bJIXY51> z+?G^>w6qZT)ml)rUq)X`TFZc%qBz>+I+6iDK1w-?(}4u!+oPa#t_J*+ssb?9acKeY zE3cv$6WM_lu-n!kbtD3Q8rG83Vs;_}>);O?B-$e(nuDJx#;RCg@vjAd=|NO&bBsmM zS{MrpgL)tsOIQpGMf5;$w1HaN4GW3l)&nW+jiiMl(pH=$e4d3weN!CMxtA7!D4gIJ zSJKM=S;eqTwHWQD9m#-(S+TUBRtD56hjvHHQQc|j_AMMSJ2rFCUNb61y7Ja>7bu0tv+7?Q^9SzSCTg6awls6-{rDY%;+b*U9Eui5Q6g9jZ zDS`BCU3~-z;#gvqGIdm3WL_lkXksR3W}us zwYH=-7F9v8RC=u}sf9v$3x+CBOB-ULh`5!v_R}aEhr5XtX9-JcAyMTN=Rc4E8&;82 z7dnsu+qI@Xt>zvUZ!|oDV=O|w9mOIeuaK}XXn5?}w47~OIJCWjqwU$55^y{!NbTpA zRxx6)mA57Qsf9!fCpboPmX?6n1Bkec<^CLK_M4gGiItbLM9&jA;ABuoRTTqOdYvE3;2Bnp=D%0Rig7sMog+@V8TCLKC zi(J;+jEWN+nP~4%EF>~#j%E<2l^wA#s5a)11uL;#LU}Bt!=4|MZFO$ZP5-yz;11q(}@hIH&!XphHnZnTIjSHW1rSymKal5NYos~ zQBT*I2-vOdk~)xq*j>A%PK3aIEjY$GwD2cZePn{6#TcvGi6XFH3zC|)dLe{gY{LUV z))FrDTaRe8x1<&d^+8b#kF89pg+qNXM>M1xwXh==hDcnCSz>}_AyMLjv((7k!jWN& zAgTCT`4S6-YNxE3!BPhjkfv26Gb-yq25ecuF&fm$nOMBh`q;&^_9hk*?T=ld4rD<4 zt0+qhDy(9}WGRwq)1_rVlPxI5Z+9R9nVtyFQV!MTjaEUBRCnq{5FVAWzWz~ll&w}K z#0G}tHO<&+N@7FvqnlBb7IwpeMlTM&7Pc}N7Bp1Ekghis(Uou(IQp*g-9aUx6~R~B z4l0T6YQ_~yR}p$(G@yeTqJx_6n;q4VD~avhp(PGZ{W@<)7|Y;G_0n}jH#BUw{KRE5 zq6dO#Pdlq6Kg?>st8YoC%&h>}pCelpbVmU8^2lxl-57vzobFuF{Q=y|BfA!Kn*h9_ z?qAW}0@$u2n-_G`0PLh^OH}Z3!%0!_LzZ1$mLGjr7pq_fSZJ8BB zIfu&cg0hCP^G2hrq-?y=DC>zWGPu`P<5E{S@+0x^T3b24!{0gOpJU%^E7H_GG9paf zBO|iZJu)In-6KQl*zCgk8cFI4lALkyGek4|snGaF{MI~vX@=)nyx7r+SnR3Li$ec^ zH~mZn&w9giHw3|nxf|w#aG}?Z^drKJE|eXIQu)oe4zsXj)6H2gkIRB^Gwca7?{P$0 z*h@p^u~~+UV@nO0#-156JP^+fByt0(b(v+jTQ}~FZuSbJTQ>3cK5v1l;hU%wkXQ+# z3H&aWd=J7swaLQ7=H$?pObaR>*C@|R$r5l7N zKpjXZGBvt6MJyEQwZrO411Sw0{GRIQ<|I*4z-fn)NdYAVlyg8M`|rme&kdxT zNaogNl99E_Hj-(B)JigKP})eQ4OT13v_Y{XlZFnYv*|!GnI@8XOEbyHB)W}c+90)( zOdFIol4*n0N-}LwEXkOYq=96*nn8YiEW2_8lZC`)M1`>|P2Y6+Ylg7a8UQ;g>MX z2f~*z%m>0RWtb0yFK3t!gkQ!m9|*skVLse4d4x}vm&PKW{0f5c0iS#peR6MMOni#{ zTi;U2GNCNL%&7Qf2I~AWlWf0C0+C;qSmc*4R(Bbk$1PJ3pCS+ zf;f)is-LD@5XVVejZ-#=;~=i(x3#`*EaKzx71)hC`Q4inpVd~GOn&>4gS1g5^FKI$ zjkd|;ljnN>s!cMvw(B#GYl}=~m(QM~4Kn%mYyQ_3ZI8*fKKt*VlIDP8r*uqn=qqsS z>dP;3W3i{JFHcV&rx3ViTiP$19-6zs{|Iy`h>y?R0N+ZH;_B-@WPVsJr%8c#pS?M2 z3~u4@weNF8zVPIfEIc_S3QtZ+!jn^g+#^fDaThEF#=Wvsq=6*ddu|}J?l=b?9zO}; ze+WhK8$j0c-_KI3uLM{&6*7bnuCPvH4BV4Vdj1CiL)ZQR!Xm?XNG~mf;8<~wcxyU1 ziGn#RM<_xF1d{ z=fp6oDsxswm9FiKfdjbE8QS7t7`MqO^dK;>dDFa8$RU(L2tOD)hTsTuyAW6|xx-tW zab}+Bj3aHBnR_76%go^|^HW=$LKg8pW(*+EBUl;az}wso;fT%E`Q35iZ=P%Xjrfht z#@(#E_k__{-2VlBjC7HGjVC*dw|OnAqbEE3&y!%OHY;>QcQLd1-4U+>jS3&|AFpPZ z4}`B`m=A=nW|$9zuVI)EgkQrj9|&K|FdqnC$1opmnJmH&$xCCAAG)4ke83MaG@Bbr z{mO)}d=R7JgBYmuK}@oJ5D7#+NMex>y0Xp(Q3#M5!GC%7ZQ6j7m!8ynqPE}UtItWiQJZh_j_$O_V!)6D1DcL`lOpQNr*|6fAuc1xnvU zLDDx-xkBHxi?dJoCNb|{L~+#{kgYyRimmlYFmZR2C(9X$J#UE_c_COeMUA`jRvMt(*djG~7A1yyK;895dahag4{1r=z87&;OWhTugWgzUFM3_S-$ zA$XC?5awGUhOPpF5WEH-u@7d^@DbDy7;~{wswlAKVy9GJ;3LFRsoKCth^TtHX}n+KzKItfMG1v9dN%RW(5^DoS-~;& z8E^W;S1V+|S;2Aj)Dv#pTpIQxp@K6G`3B69XiAqB(W0~}|{dG#XhXe#CK%j5nU z{5*K+kwfsq=eNU0Up%9D{sS!hAhgZ>2>4%Oacrr37+7C=8Ze!*3r2;K5ScpG85;7x zO`)NkzCl3x>@&g58(`sj5UJ~ zb|oifMxFdsmw?xmId9iZxx9Zr$R;P|y1a?AGAPE|mGr;Kk|3_{kmHfkYtya zRmc8t(D+92h^k}vUG~Vk#Ve|g6`p_Cw0K6sBCSu3AR{z1Cc_UhLTxb_Yl4hWZA`{GlOb}^ zG}WQA!}^Jxa>_SSP@+Ii`Hc*V_BiF67#7uW%5P#=^u{UQ%&;hpQ{Kt2XpB>SGsB`T zPWcvwMOVUzQI_< zQ(pVAzwbQZ(U`G{7wmgf>id7aUj2lxzxgm@6~8g`(=&T7+2>AU6(73% z!H?W^&N2TME}X*2{?DNUPT^_h{S@*eyhT^fugfTDr_5s*&-FT4Z>`Z3fl%@wn&9- zgD_j9!nQ$}EmC3IAj}r2ux+NUOXSuT9DY4=;|c%QQ0v6V+Fl2-k=ew^oTN}+60wzN zH`?J5OoU6W-}B_TUsve_bjO7!xiRlz$Mfl!98Z-|YVD~qO07LrMya)@$|$w=R2ik#o+_i% z+EZneT6?ODQtOYvrGX`JX;4YarM(`!G;wK!_W!^d(WU(k0d;BXOJ5ONQs>DIgKKe$ zUqw}le<9Lwh$o7VA-IoIycfv{%vH;AG{EXKrpP0K*Gu@{kxarXK0IFWZzLgY@B*+Q zzA!;wm}ue)d*k`ugmH$2J`KVfCPtR@hRNJo{F+y?mX&~8wC5km#cs!+hQD`Lca3@)oMuqa#;k#S1%SCKq=D{??WG(mhu# zJO9>|Lr$4c6YIqo-@04+m7$S3b8 z$`C+9Aq|x>T`^=1o6NkGsggq-SYDAitdK-VgR*4AEe_jRV>MYT7=xGv5Mthw@q>eS zaW6*6^R%(){t<4>TYN9b%D_=N*vM7CVXNO;7&A*aejm^@|IJcQ&3}5Z#AD?@Y~@cj z!RKf-px<4Gk725mKViy`)!{RrswmThkn^U67TyTmGOV^Qp-acgr7=WIp{gp(XB?KP<_7`hzI9B5}9; z5lQA#lNrJ?(Q0RK%3YOmuioZdy=}h?9#ZdoSQ?c^lF!#i``LdgA+Rl{GT9w z@jU5^KCA6X2h_=mW-DL|gx(W`C@` zXX6X|q4|pM0@yy&eO&Lh61?IWAh`PNPO|t>0ElpBCU!s;PD^%>M>l{&d6v_*-ait@1;WJRT z(Et&bv=W+8`q*rK&fCzH8;DO&LlR8FCzJJaGN|Mw8}aR~q~NF2{k_3@7R%iONJ-Az z>-cn0iUj-U#jXeMr-1hf_42Nl^B;qK(@MfB(7SXwg~KhedpUH%q)J?5n=DeSz3~Y! zHnE{Q*E4;@L~lGj5wL`!Cl2UOrgy{>NSu`driT$Xg?Ty6!0I0d6Zr1flTOXtCH!p% zf2V>!^TlHEGi;;G^oq&hW4?A#SCvsO>2bK0EKGWH97J!r8GDd2SlFNWexbj6`U$DR z=9kW=W_$XyaS zS|gv5i20!MX-4d;vN(1>Qc3++w8AeiK2=-CI7bV$f z@xGg}tSW3%4)NHHArCJlf6BuR;TIT6C6DMx@FAZGLrB1)rGD9G!Y~q|J$g(TVM@3g zfGML)3HJjqWsE7ojsPimoGJC+W5}l~V`?aN7MyW^BD%3CkTipLGt3R^l%JKVX#~29 zb(mM6R%mjm>#OmWJG2BCpQw(osX%76R0MZ=tSyY8H1mA}r4;18Gcx31N90-OLjJ;R zLnbyzvTh^b3sab^TS#wq3wdm>a|>C7`mj0A_2!fFqO&$!A9Aw-mq#dF1DA{?+*s^6 z&^_!Ln8u`roeQ_52oLxkbF=vdoPvOUjBShQ=?e@@8rv2JGT98imf`{W1Namq*y%zK zvbwX~Md))OU~U z9@+l+fdR}-Q~m*{ReCl%fG=voIe_6YPez)lWf~=uPc+q zHHY{u_kqoL^q^pP7y6t*e=V@#W%^L#zHDEi|L~2EKmIt{Xn7r{xoj@vbU6yhXY=4R zFPsi#hqAf(fnnkFiOT74z$t(OP7gAi4h5W&&`4*Tjs%=82dB%k%L_*crz+gsHFt2j z^$c(R6ivvRgk+E~WD-(A!mvq52MHr4AsY`;MuU_@kTMpegawTUDJ;pDxgGF6Tzap3 z7444j4;lVC!!m<${HH?>Q#URF<@(Pc*huO3H1%Rnyx4m~dm{9l@;5+M`aT1=>u`Mb z+R4WOv~hc3-DWpF7Dd-=#wOy?DDE>p62&JOACBTfj1NWee#Y}*99t&bxGC$rO*@qn zr%bkRJ0AvhM}vDvPe@HlwQin;yU##kKxn00fWyP9i_o?<&1j`zCU0el(3WNbLV+{si+Un6D%! z49UdAng^TG0sb$gJTLZ3EiMMsFM|trzQPw`U&5>UIff-;n>NCZ>gU6xLjPGo>U{MJ zQSzjf{KY7FO_V%WA$1gT4_?&>W+DW!=?#Uc^LFXJl^pR|SQjPFR!H9z6JIZ}K<})2 zlNZ$6W=ZKWC8(h(nMqCREy<1bmgJgx8-^%jQ*XjF)LRf6>n+KR^_JwCdYd-n3-#u! zNxjJn>TR>6^=3+4y_wXc-jdu{Z%MAHw_%8!ntBtaq27YnSZ_>hXfB)SL8;?xNm| zX}uG%FPpV3?a;YvXu?)LQ)A;hR@`R(=I2h;w0sRjZpXYyAF4^u@0c~|!!_wcI}DW_ zTj8NXq9Zjx!y(bpn)H#7=vYnqs3AH6qWLW$(eWCfv5;te9Rp75YZl0$hSU0L2Gy^x zWRC7DVYf8y8ZgDll zxW(0Q9sEcg{AeBgSRMR$2w%%ZAzf2Ueg_k*+7C&B#n`YUSe%X2qm0(0jMbxz+bHap zUX8&`&e>)NyI{m#c86E!!=f+rCpKeD)1fBKp z=8TgU=RBQsauQJAy!sDV*E*JsF2jYXzdQa@RRvgSIP7CIMlF>Ipoz1-I@^;38Bi65 zq--}lf+U z?3|Os91dyhoRKhxqZ&Ksp)iMo7L`RNb{mTO0NO_(7h~`&_r5WN{8kN(#rtcc->!{5 zP#gVDZS=df(eKqpzh4`D5YfWqRS$!m#UCJC<)cuTcvCL3?pKghm5h1Ucj3&Oe*#*z zJ7oer>Et}tnoVpVf&J9;174Mkd&y)Pv#x9$+u8kR18HZK6~H$1FvBFXBHV5mq?=?` z2s5=X!z8m}*q0qDVUs2krTHqwnH-tj zF-cPA0f>T3j!MGgvF%8p2$N$>016W*yyQ3%NCF9JDhipyPNmR3=g919dtuGy`S|vN zzj;2fy)e0Xz88@pyb$Zh%iBJIXL36hTWB-6ekb#zjJI7{VEatUn;eJa=QF{#9DWDq zANHgFUup-}pQjxgDSdM{eqn&$J!eq9@adm{9IWc%D=iz^+kqVsTqvGJvgpyo%+DPE zRKy(rWD?PJHLhLr59ah?pgCn~4AwmPg5{c#FDz6kr12G|u@I#36{bnFk$zj&%&G)5yBc ze=n0-qu%bd=NY}h9Nlp-rw-$oq&qGq-C+V|>5hw8d6vK>`mqxL6km;=wuMl~Fy%WG_o$9cnmNIDF$-hCS|U!IJ#M%)@F2lCf`Koo_wY z`7+bKN)ECS5$(`MKvZ>MW!KK6=@t_+_vgFUtp{qZXWco_XKfpfPfW;+$;D_Yo%Hy| z9rolD^9HtOI)J1dHIVr^!dmmEdRW>413M(J*4(HbmiEEG4hyU`U8{$s-7v5t0&7jh z>S1Y84D6`D_D2)%dRST;13O08Xx_&uK#dq^hYaXAL4$ed{HZeXn>hSh?xYqRXnJjD z!P+(^0FoBYiD+F@m=obE)w;{Vmco^90+)^NFfEpi2Ms|#r<#zBH*d2DRvV4o2H&d_X(Asng-Ky;(Xl*=&Zq<4bv^JkYw`jizSQ}7*>sm1Q z{x@;>g?1wnHnLi5MEwYsIqc?t^6YtH8l!Rc!E7RIR-vCj7iCw?CU(rvpPEfz9TkI> ziJAMR9#Q+|lxdIUODY5Sw4wG{pK6M^vUi$T^bNG=oKGABJMuxXmw^q>&vi|&)kyL> zu_YU2IF-C^7RUNh+<`3CKAF^29jEsTstC@5*Da{tN&1!0GQu-5IM`j z*Gl*b={h0@@oDiG?IZcZ2$E%IFh|IF_;6027KmV%P8NVa^HbRXbs{B5pO}dK8u%Mz ze((a$4?G?H=x7Hevs;>CJz>LeV_pGAo>WO%&9l8Kz>ISxy+Up+bp-@tCJVab#Ga3O@5g$-@FPylS+&BwfbTBszj!k?hg2S= z_=>k6c){zJK`z*mzwq~@$#6Bzd*L-e!LERRhPwhB?*gV(ehzdf2VceajR5Tz2#L-< z9p#>mau@cQhwDq1}~S zwP&*W?>H*)l@tbCYX_5_MiXgpDQPoZr7wgepm)mSPXOMXQdkzW3L9{aLP3vVZ_CA~ zuLy>9@`?ma6@QPXS9}Oh(Mu=XmuK3iN83kQq<@*)MDngm{#TTzQ|3!0|7(PBf-y>w z8Wz8RqQ++@HU#o}E9CcXe3w)}2lG0Wz>H@MVvvXR3b~(RvXoJxY*1hJN!3g!&o!{i_kmB2;BYm1$K*6>Sej$@Ag>L*#jJ5RcNr zRX|(LG(IMO6vMvkbID(hxktZg+4+lk=JGK)fT5e_4l(zsZ$a)bbNQG&Cd?gS?s0b@ zca*t&Oui`09b@jZK8oCN=JGN5nlN_)(Wxt&8V1L`;3nGN0zuH}`7UBBs8{s(xHA)W zdfLo+RE2-;1#be`8*xcHvRMV`Xs>PnfxHM8G9xX7E^o z*-67J-%Xh%uVwIghWP1-*9>@xkPNqLt_!&JifLh2K!jbjvMF*-Q`;r=Nj9m)l_8O0 zRExVEe*x`I4|CdIVwQ*bEuqEVU=R8V)B=0Z_hhBOGwsg?yw3#h*o;>Kfs9iokpDLL zQ>?2nyzt^F91_El?8V4mxC0ODaUh9Q@j4lGq z)1XhEKsmBLP}lDMRnzooo_{sotsCQg)SSIQf2!(~`7XYUl4`0xsFxSJ4CQT`9xlT7Lz(yky zBG65SL*2X#`GIZ{zd<*d*h)9|3UxD7l1Q^^6_h7A_5mrdxi4Rd%38j9e;EG=MwwK2$mmUgs7#XxHi3k0#lHpQT^XUSN<)+OM_PU=hiZr|4$mG7->gSa4gpb*gKh}R zsg=DDzm>eN0i;vr6MKo=$^neVD^KJrQ8|#W-bCdfdB-bH!W%c1)aopZ%+;V|^s5No zWPDmCuu~R-WzsWk?G&$Lxld*;+KEM&rX;8|nIrH{Szv^MD6{B;QWUVt!K6{Y$*aik7Y%3iMD{Y@H9vA%IoR?K>=8v8$~G5!w_) zrK}t#aXwj(cytb4_+~u<`h=<1MVmhB>5DENE;RY%wCHsx#+B#7eK3xqUry{Q(|1d! zz7D6KIdu1555UDEfmND)LrvN-Oxti%P1@6##yLmn%r^(P&tMwo7gpNwOygX_N;{Eh zoHvxVgt(_54PUNZd}e+t_+Su5T7n{%)4^|oYfW; z7mFI27@V|oezWKN^S{T}(M@?nGfDd0XWN>vN zN+a2oO!(6-c)r?oq(fmcUi}wW2;QmF{Ozcvnn4#QcTlh1xc?Sb5@oT?{|E1Rj+w$4 zcm~&F-UbM)z2uSsyHU+?HpHAE%%{S!UOe_(&{@uX#Eo#8jBouUuutBoa` zQzmXOG=MWD4OmvDirt*rk8L;Tzl-?S1qUuGv&4;8=J-lf*7Jp7$p*Z6Xq35pGn;Sb z^DX%YheS?iGRN!dQ0KE`{CuhIO(?z_#Z}HgJ{G^;!|<6JelNotHT*t?H<1QN8(PU2 zCy!f5>*{TZxi}8eyf_U-l!G*h?WiCDr4_oo75Gy6IKX2#K6^W%WckZWZlBF>pG$7v zunoh45M1XSdAWFY9rr6}9)5it1hKBjmr+RCI7M{eDC z^)gbr6S~Ge6;CYOiNn~k1nhr;iL{^COCo<-ceivSE&MN#8!v6g1X+TKQtFsx8tjdi z_IfA?CrV%YlL3ie4OjOO+D%=Dbt~tRQ>fKdyD{mloQD_~mlrI+OJHc7MDa`P1}`9B zqIeI(B@KU>;RS}#GmG+0RLs7!*l4Wm5FN$Fg3CP;K(}nS7xp3x{Rlr%XuyA!fd)F_Z9``C?|46;TUQ zbU_j#$`&p=7f4~{VUR@|H)1I@;YKRcfYs$ljYTj4VJ(WNUUK1UAdU7;#_mIFTXH%Z z*^tw^TbjwqEqP0>H9^Pk1dTY8!74UMiMM=RAcm9@N+yo|0j6X)YmDK0-BLPc7s>RzBVJ*0BDoc&$EM9x8s2}y!qdOE;a$x^!d5aZ2G_(S*df_2Gbq-{=2X=d7a{`+jFM~rXXJTMEybW(hCz{tBMb&g zNFBVUmjCAg9sD2k*4F&9ir{~-If&|rbi;DgHn`LuSjs9+YtWAPzXX#Rr^*s7-SHM4 zKstR{TF!-oJq!Uvw$BG7cw2tklDxg7If!=n?|^=d8b|`wAkgr3+@liY-YtHYWPU}g zK{c;~6)}B-YIg?3kk3`}wQ>1=g9!^w(((s%mClTSAqlS9C~ZUQ$}rn43>NQ4HVXJy zn25RuiQf$qF}$vT9SnA>d?hNE;zhs7RKA(ax1{U*;A)WqzMuUKWD5NYA4Ex|f7~90 zpY@I~oL`{)78gOKbiy5Ba_QvvM&U0;VFUgWg5UGO2;{3DkHW{_8HNow$1pH@Y@-_t zZ$TSbW0ey>V}>n>(p(V4SYV(O~-S1=z(6!mTLDMnJ|n`HSWUA5P448xDuPR@;ltRV$^#6r+X_%f7qTo%Ez zm0>kZNGFRC+c1qtcl2^9r@IS z5RM(N8Qih{BluA76n}>2!iTsBdXlS)Qwd$7lBxgH!6s2x0;cvs?RD}f<#@4^_;w6G zR=>@7y-8uHE1p!0?sy89EA@K*kI*T4hD29Z=295cCvh==lqrV7m4a`b+Jyx~&OD%M z{_lX&i-kLV$IUz8|6bDlOYxOS>#)^Sl~w^?>K;UU>PiJJPLAvaat{1#m;-qwVkOjr zYtdM5xe?bK=5OqZdl9?c2{l~Y4v|0LDUbm}%MW-`0!t*3En?#8y@CoSQkrLpQ#Vwg z_*I_^i+>x}Pqg}f1in^ZG4Wl7pYsBdUxra8zO!X;Ma{*)cS=9S(?16(rjEZg0IS!I zUWJc|xSp|e(dXr=BNx{}mA)?FVdvJBBc-RQyw^(G)KvO`ban+iP1lK^Y#!JEXmyyE{B z5L_>$n!Cjnkdh`H@5pU7vSj8e^K$)|ApM~cNs_L1cmd8|keeIP#kMv?{@h4Jl7f=| z0Id#6#(k??KbSgAR@fHl9%UtNk^L64RNb%cR<2370VQ z4G6P#Obco!6mfg0yo+zf{J(fHmON+=NtbW(j8(ESY4i3X4K17nl1wI5O=d`wQ3$b$ zE?A%lCnzC`u)qNB#laYG1Ln%xA)7?;y=bWc55H#Qe@;GRBUGFRAXaqZ$!v0uRB;nx z8T^0&viVCi$>MK-vhW#b+sbTu;W-fd0+tiKfsBh!nwJ0=pE8d@^A&MeF0=4DaM7Jj zYcJpuQqS(y16?Kmi_ZDkt_8N`#RJ`?Sw_1}w5Rk6Mtd~sqkm58A`?9FgRI#Q%Em1O z&&>A91x6Qq5$kR^eIE~2p0a&dj(UiY6>z7kPP-=t`b*y@-F{O{wlsD(qFIfCmfT%* z$L{6X-WL{NS_W`|z^Y_+k0KVBGY?e{8D{Ih4}u>^RF6bt5c9E5phDhYHZhnUTsR+D zlD{B28C&*DC?ftYyfD`H6^tq*{IXczXM*tcvA$W96N`Nuy9pQh(`aT61Cw5nC zZuzq1#2dw$^ONy@9@-3_4A2zZHNh(4Dke6^a`dp`yAeVU@%%1`wQF}zcjmP_jCttY*Ntna|>7h!;~(WB(MidIl(x{8ECwDFS;L;v-51_xC%+!vMT+1zE;D zp#V!tAM187W0pSlMx?PXFps^3Z>zTqtXUR=M#L_av6W=r3LY}vswB8!Cm1BQP`Mko zj{fyHcKNR` zgz7NpPKE70Vob3>=lRc z%;gt8fLB*?(66E`7S4cOknE&n!+B74t5d0kPa|jAOD%i~;5`@>?SVIbhb|XLf{X9+ zJ1~NdRIy4wit3cgrckGp)+t>a0e%uD5wDam$1AVISSf+H@`nWvHlsfYgQ%Uy{~!%I zcCaVJpl1`2DbFTw3@*NK6g=HP8s<8q<~m~xXP27m$a;&pHr6|v7CQr*>BMGZdzDp& zl=NTz64}AO#FvG3@Gk?)#18Vi8k^*N$hiX>H^OEl4)>%q;w0)!qJYC2o=P-&!_ycD zhY@=QF&RckjB^a0g?$10eK3Z28-!@a5U-X_=M}HUyYhCVd&O%I?DC4Q!Hbu{eS$f+ zBga{IYR#zOHl|_U9rNFz;p-4q3-nG+cr7#UKv-?SGTDCyc4E~hi7Ku&vpsrmTf*ke^rbPpeTGAu zGMl9mN|rrqB1QpMTPjAbJEbyKyJt)=?pXvYV&b$_aPiZ^GtlwqvmBAlg_Mo-Wp1#0 z8_NiGe0~(T?!s0m4bLn*A8#Gxd7h?G4J>+Cg$y? z9RKw!1M-T7D819qsGVe_!x75=hdIW(+RZUw13ro-8Hf*ZwDbd1e-$pY<6ACDF8*sT z$m02cShy29in+*PoQtGo_{ba07QVtf&QlgtqjVnP#7Y+g{ukkw24fzCuM6fOUyc=i z5u_vh*I+F4@z`v(b{=vO+Oz{7eIyjTqj?DDH{8e5NVndPHzyg`$dxPW=QYQQC895X z73g2gJ{8VuJ_DgPo7X%5;Z;7#%rc+F?;&o_Yc%!yNaabZ&k*`kfJ=@PKa21MwUZi* z{g|1O{@3H+7yP96-GwyvC+4xo@on`uu>(D6?IdCT2FeJIkFQ->s`4oRIv$ z-eBsGwx-Q;rzwJez(e^B>yd zY-Vbi%pp#W?R8-^hxq3|0~;2L{j)2YL;Q2(znVjw$foRk4k6$(dW2Hv4_h6%OS?jk z5zY}P5O!_aZ0Q^lz*xwUGi;YY4;G$<5f(mZ6pzPS9gewETlX97i~e5&_iVs$(XK3+5X`-d*`#aVdC+7oP>szq-G)<{s=nU5|(P^(INj5C2@k z^tXoT3x}X=$W}&=#X}JRWsMvrk$CZNz7z3m~pFLf*R;YjVI~7mavLckz{cNzD?l6 z*~I$p)Fjsd_s>+nh>X;AJ-8Sh_u?$Jde-eHt{R`(7kgkNEFI*fjm(U~y% zHAcI`=+_zT38UX&v^R`?lhINby_eBvh2`GI=)Pg@E=KnYqu*lmz%Y70qkUoY+l=;y z(FYjKhSBdZx)4Uc%jkXBYNyrz9;4q1qu)nV_QM6g-?Z>NDC6R8B+4SG+qiCu0Mt^dzsz+=-ooi#HqZ&crBfd^#{6pB=Gphnb~jIn`LHJ zWqn<})L%aMt1ww(gtqv<1j4%_mR;6Zb0~R2e&Pv zBD(f{0Ls4{yo*)mEd;|D;LTy2?Voc1=2>0}rJ3ChLpiA&lZ zq9UR~B!CDppu|r>{6NGFQT#xWPf=L~HyA`#K{gd}h5voesk`)KK=Ai}ohxX}OiuonQQ@&JtW8@FfUwA# zJ8iAs(w%HQh!4hqZJmO8e3<<}*2*fF3d`5+$a4J<&{V* zOe)XyI}xDexqcVi{$1!LS~B%Jj+}o)@vu)Kh7dmZ!PX=#wI))whr744_nN-PO_g$4 zbwgNVGiKwrs3CXSSf^m8&Equ2Iaz8rqkaL<$DK@H;3raSJ%kikoj3Va&C$@Y;JxD2 z4{W60#~z04368Uj;Wl5!yH&KB!Lo z(~)q{@o%Ffa5(wRaJtNynSaUopi)^fkpf5FlkGL)V z;5C;g>E;jIPteUDxSyh%KU5K!y(ZDIUP#<%lpF_MKp+j5b#wPqp;wYfC{?ym24Tn6 z@(c>Lprh)N(=ZSP$!HL?{y^MbHZJPPaRBBg|AH!O4X4cB7IOG!pg1YGHi)Gqi4%cT z7fQXPY$*%M)TKzQ)0uE3_YF88(7$J5-|0sv{UdBQq2tnT!mF&wB>E^59fJ&W)iGTK zc%KFci-xG=uRth-QiF9KuHc1o+zkO|Pvhc{dsG)|aN6I>{KAds_+v0g$PLfGK>H9& zY1SC0PxP222KE!M#DJX1L2A2=Z=(=teystjW%|<&)`qQC4~ct~-F%w3ZD)@^jxPqB z;QkS!l4Np*Y8*6S^O={5>oP7wH4fuGJ4M_xnQw}58LDx@Mv&Gc!E_@Y>+*Iwa$u5r z{Iau?5%6nNUT8Dd+8;95nQXJhIq1HaLZ$xECRi?V<{kgLz(hB+-Rc3sCeTl~p`8l1 z423RO&uwMgEPizNFdgcmQvTOMXs~7U)tA^Z(v8MKS`kgT$N^zJBX!fbe^8&@IB3kRj^ zD*Z@vS5Ohvm5ehC0_8mmts_4e?8Uj(SI}oZ3i>9&x;k&coWDC}u=R%8JvoRSpoKRZ zKimqFNxFuuKdRr8^>-ivR;Xfk(34Miv%0wpYnia5Mgg(SI^B zrc>#R&jHxjfFEHo|DrbN`=TSRSTh${U3-wNTKiiwPf+*B`1VCBv4LZNMm>9QUj7q2 zw)YI#AkL;lAjf-_uw%g~$Nz{pPSVezCQ0v$1g|0k{To~`yJ`#p-qYiKed_pM3giEM ziuh|M=TGw_?@FdQBUT2MS5=hK={CO4Pf`n;I`Nmo#HPSkllUu4%t{BfqqUu>+tkH< zHB1o}7pAzzZVG*!<}wi8X)c%FW99ca{Pr}Chw36&zG6Pe#AFjq2`f=Cp@Y@faZy|d zyk+lNmOK--;Ml;jK8F4p4f|~5#9FW)MfnaS0lPVyPO)yufEi>|ts~3;_xzh}qX+W_>t#?_ya6LEz~XSc zlUB-ySQPXAn^9pM)lu2lm%(Koti{SObYhQEq5db1C1cT3>a6$t7~W2^pWIbHn%*ws zomT%Cy~a!jNR{6oxuTug76uZu2DW*GAga)MH7d{1ci zz&RvV8mHD8BDsK?9oW#ctr6?U(*m8=P1de|3-s@BX9ArT+`S!LKNcPV_q>j-Tj93B z{mwf;b@7&UX-D=;s`pxIkLOS^42*BG+r7>1ar`e~EQ*{_7NEbGA%@A2XHd>Eve)$t z;@hLf|6Tg$A`?$sltmKOA(+=b&Ur1Nc0o?-FXT>bc0t}*WQBhwTo%o(ztY+Gbpp`8 z(b;5}{|Us(R#&G~ss3p!8iZAcf(Ldro zIDa~VP-}+Ny7lXqNNe8y0@Du3tMxpBCuWw?^?TWo@Gu-Yv8+zf8)Wtw+Ls$1_;(Ec zcrU{h_`@Ba)-BTJmMm&$cS7AU*VNn#hp;FF+=yDlghfapta#&IR2w`eY4sq@S!}E3 z-vM80!)tp#04-H|l(qruAyuQ-0rS;4X<<2q6of>EWmE!$iVnAuVEr#dPAg0K*+frT zISOW3aFm2{6fD~W!}EY4?ovD&jh06Hidc$~AEJCz@C+r%LYdC7^Ovsho{b*%+$?A}GnA#2Dfn%rUs&1eHH6t6?=Bv1XFKm=az@ zOxlN$TDIT|iS!=;sxZo6jWmSF76#qakwqG1uts9!j;SL5lR1kx%3zJ8`_(ibJX_lE z1;nX!48anQF7!R2@FvjEy9HRbh+P0ZH-s|hi9)viH*`SP^f}5?mNm^9*(;s>&9(!32Q(u+jh|slHfvS{4^9+yMS$Uj zF{R4^88b3g)Wjf=@8((C9|BV0ANR4|kMAddN8=}Kfd+X~cF^&k$Jh1$7r(HwdcnyL z!rta)_(W1q`wzfbNZ0ZyK{q37=|Q)?>rd=c{qHf_pYam_zE8lP@M9v}ME`U6G4>m> zCjdQ;bxwdsRuRd$*zaTH+wqeUZ1QPfQ-JM$DnchC=-`^6S|Kg?V6&8qd#sIIJm-wG z4qT3)fUyIMEEbLoZ^TDxiUhQw?d0AdrnG4H5yp&$hjSOkHvFD?v4tt~CL#&qai-#wS zRbD<_1Cx{^*o9dMkitdn+6lo4yEyT{^O;Bj z!Ld>#dSEq4xoC=A&xA;!YSBX}G-ao~M}V9}jbvp=Z|vJDou;cJm@dN3R?0+{85x<0 zV~6T>d1~gZA3=&V6IYvgs9I2XwDc#Hk)jiYp>pb=!N4mhcba$Cr(RGLbZVp5fj*(yIQo}V< z1nx@uX^^R;QF#i|fuu>voKL+Cc{A+dt@EV}jx^~tcq6`+?o7HOIve#R`jKr_(2qWe zxMk=Z%Xl7Daj0U#gGu8e;R{*tr&9cB?(QU9$3=)-G zl;y)OktK3BSz=RthGw1~o+(yv<}#vAOv+r+d5@yWYpFhsR56ASDu>Ln-r#GS+t%l- z{_h2P4(#iJ)=yxs)R7LK#jCg4-MJo=C7#Gs{%0skg?dBMBR4V2@Z6tH!E?*pxC!{~ zZhI-;Wqa+5@;LuHI5J1FVDqDWhHuP=ARt{jnC0)EVwR`s(&V4921hi19KCWIP%pVd z_E4S2u)N=aBtysoYhg?(=d*iQ(%r9EB`VSU^qjM5efE4RbC39GcjN`&>c!_tJ!#ZN513}KV- z%M#|b$IB5m3BSv*K{*+Q6Cc~)jI$rx;CvNflW@j)pKWlyjj&1OE>(`6}PljyQL zVUx<(gRn_-Icqv#XW}PDmyZ+nk#^YGgnhIf_L*M5F2YYN?PuFz>{7y_{w%N)c17B#KMU*@)-7stflUw=wYk9lKv>x3I__<`R}I(Yg8xyr8K1_nas~KO ztpt&WOUlEzd-!_pGgb#=&}&Sc<=%rCBoYB|)zm5DEX(X9w}(QDuXo~zQuT2o9&?s5 zPAZLzll8GH z^>N2p1?-+)* z2wTJ34-*4g)7ydinDa3+vT1qhu<=QHAj3c?!GHdX?A13=ccz0{j#cF8mGLaz0=+Vn z#oI}*jAHS2(JKR3ywm8FaUk9zy)vZ4+fA>G2=SKamBAq19(rXQh<7@@p~1$6GQDKg zYQ9pTm$QR#g7MH144KCpyhIXQ(<^Zw$s6s!rA$gK>tcll8`6KL&%T zlfB1alp^Y6clCvtpbSbIlVRT{j4Ut~kJ5(b7p0|iP$x@`#iMjEIX_AVlk=l=FgZU; zFG_=`3`#Fbg9t|HMQIShD7`2RA{hIVmXS#Z^<}GS84-+4t7Swmwy%~E!Pv-JMg(IQ zo=oTS&^0HQdp=>(zERpw5+>~%!7d<7+BbrIiZE&42)26p9u4dVCRJKX55P1 zMd??Y!gvvkopt+YlVK+i7G=QkrqjHj!7i#rN`TDu62P$#3kVsVbk?4>=n^Fd0VuJ?RMdl`%lwuZuIM{7t={R(TRLYTYBl?jVZuj7syCFv}Q-qvA z8y?zHUkLeQoXueJff{@!^2xhupGNOcSz3-Vf-UFCIWLZL{7g|c<(gfQ??sery!VS; zZZ!wZO9$pg=sK$9bY?U4L?)~YW|Q)w7;djz^iXO&7s+Z1Fca4(Sk5hG&j>`W`|I*N?2Z|V|Qe0J~SoQR6fjuQQ{E?0K5PnK2 z(P6C|uT#9;rI#$oLje~?~ z(9^2lwYbAraK=iMgGDSacEN$}Z**IIRjcr_`DP^FlcuW4E6tZ@^tJ%s#t$GzXM;xB zd&)+kWewIX*a@M2(Z3NXLgGUpK=pz%p@#V13W?ulQH5?3_M16-2Q)2MuUV!vB^{4P zoQsLqQ*pdT;&?ewzzZUOiV%TdUk5piU~ka4B}4-~DcaEj?NgrYUZD-Zvhr+PdZMKH!JtmI_oY# zlqKh*Zm>HiFM??v?mrS1mtB0Hz{!9VK24-UVGY^EH%K5kQ4mNm(FA@@0?CqsK+20I z@C*qgZ_>cRI0Z)ytiGduYlx|{jt{of_R@!2{2rWFlnK|vCQ`PR9;d*atu7rWpG@ci zm0KiPcX)1nhueetI_ti`T+-td*R$1J{j4y^#pUzk^C7WG;l|#y8=Y9JB?rX(RJey?`W(mjgvc1$_M*EfNRlK1F*h0ZEe=o z??U|!;l^AnuV!-v*+*0kvb{3Cjaeate3I+oOVA%}e-7bS!qO`{F>lgY+GkKxGmZ;& zdQ3kA9?C;3tFu%0ERmhnIaANoirdq%j>G-OaBYm8DsLGb2xR%(Py9^CSM1vB?AYQs zSKZMJj2*ysv5o0pg(0D<;tvc5qtuLsyQfljmJ+yHCRu-R3C6H7EGxP7JLomLuEm7# zLB3Es|3F=@5^t=L#im2tYjrFK_i$tt07g{-#ZmiBMGyBs6ViJc`Uh|%Pn!*#wz7|V+hYLWbaokGuHVBR zMBRMjLG=2VY505@o2>;Lh;_01vzvs8DGMH@fYaLmse*=pRj?4FaazduA5#z%OHe7T zMZPTo$D;rz$2tc%eU3Oa87`_3TwJmnx8TH#W`U!6sYqXzlh9P-Tg3PnIw?jR8ZWk zAK!caFR33vjbA{P$=Y}xX&8BHyExVl5a;uV6I7KIukDFTGQx^%ONFe2x)Bv{zn|1V zx5A)!2oui}w}%(^Z~_7frYH@r0*p~E@o!O%!W*e?D93XKek~*%jxFp?mW`K7NHiQ< z;Mb8i6|l>zKHLS)mjUDy;%@b#S91YY%xIkby8%BFOYuz zX_(To<2y?l#*A6-yloCFD{!QNS(&r?({LS?TjsM3#o+3AX!(c%o(REjs__ge)_4n* zavVQ=aP2a-WqoHHYVr=n1XPkm+JIg#nwB$WIc%d1+@O9QGRswGx&zb*BAlnpa+r13f)}a)lG62rUEjM47ibDr zIXO@kz(+d+c&tR6<})Sopjx3?O$R0Nq*|dmQ&0P$L>^Tupu`Kq5;K}}{q_(tGR`At z8%TN8FYgKLFDI=W|IZ*|!W&2Hq1l#@x{ddx;~*$<+SyK_n!50|Aj$0nc*biCM>I)501InWVIZy8)2vpKuL@cRJt&Oo$1+ zGRRzXg85Nycr){3#>kJBb;J?TdEO&d=-mVCg1e(|>5F^N!6P4gp-Z&(48VKQ0o-Y? za1QKiuZa4n-DIG=FN!WFZazSoPkH+Rx5g}Vxxz#bmMVYZl$SQgm%wY+i?Jw678z@t z2LeUxTf&R~7m5dsvBcJ?)2Q#+)?gUQR7*4nt*{#$$k)K=N{;ps=;4TbK zZ1}X#Y>mI86vTjLfwkQcVZ!7<}{i>UtWdhT-1@e{aD! zU^xGgr?R{+acp}ZK%+n=`CAP=Rrb=tC7J90gTN;t+cf4AX~S(u!hlEIfPDU2##b6K z{DToUTRqL}-%$6U2mX#mU{2T%Z19%BQ^@%LWVhhTar-nTv4_cBE{Cpwo=4~rvjx05 z=vHTB{1+IR*46$P%i%F8AFmmMwWT3O0+eVRh!Gs$qFVZHT7~zR+uqvL6mo*2iJpsw z`5(;B>y6!K-rBfX*QuzMb@kP1dwnjLX$nQarp0j6z1fKp!bx#3avwtv${pwq)|H?~ z!k>#2&?4b|GS@p8s0}ra$8Rp-?}z}Hx%H>gQKjLYROeE{pM!|7w)LN3D@bKi-XYBC z3|vxz-t5oA_9iTA5ltKEFNo+pgOH(-`du8C@5JQ09_^j5E(Ts#vArYKoyaD0gOj*f z?MS=H%K0ucC6#rx^AmVsEsuu~{hz`q6)GiN9kEGeR2;F{lrS^>ZF~q29J!GpoANnW zT^Xy6ygfMkxO`d$DelLTDS~~9xGuu?a&tNODIyge#L za=|;?ZPy$`!FW#eHG+0ZCfA`WFd1@@(b|ta)De!`+MjN_NsvDS9J+NNTp%{rlhl9m zAEs3kjUQnO5{)eWF`%R(kJ<*&`n)v5%9B@dK0ZLRL)#_g4)(9GJ}ML1O_n9hB{#k= zoOpYj3sEZn4ePa=EOAQqi_;oJy58w|+jN4yksV_TWkDqiDmgN}ng@ z{xqPc0|yNs3Txh**jG|=)IOhX6W7v{#I*tr=KQN(e=U#*dOc3W{fS<4A}+k=(ZUUk z-fMz!05^2KH^`g?_Zq8fD|)@ed9T%lBgMFd0jb zzpzmCd80HJIpX)9p$~a5ubuJz8tLMF9kYdpGZe_ryBco1{GNeP^`&6{CjxXCK;X(5 zEN2y@YY*Dlf1Ul=9<|Fu&`H8p1ByAgHAmN%e4j&VoavQ}U7y)|-{5MpTQkO$hXj2G zKX|4Rx~R=`U1OH-df!Rw5L5;aTO7(ylOD%EA9J%#X|&nx@m7EwLl*=}JUPp#$?#&K z9#@2gtmF{Xe<$Go4e1xm(d$PBc9TUwK_FiNAyw9Gc<40H7^+UeX&r`GV#j?R^7y9Y zL6BcVG)!#1o`{sYT5#1I&l%^jno*H4ocXcmAnNUI+=)$wF0O2*{&r&Avlsn5BG zx9Npj2txvpZH^ew=zw;xc3ZCVHhJ2A3SX+s8b5ud_`YE>z6AVBe4%I+I+KsSmISBc zb%EpcbO>MlI@;h`_CvGQehotGCd2)=W0KE}6Oa;?nv(lKWI;NNE19buda(?Z4!l#w zZZi9H<04GX1)ScUlJg4ZEG44F1WOXjX{;!euLets@x!s!4p$U*leK`vn`pcS{iN|$ z_9-Jb62+kpg3}%eV903?2Q$5VXo@ik^nN#8-KGa z4f6F84={v;-rw;^V(@Z{z>R7{#*dYuEIK#_WnU> z>)K0uH@)o{*Iq@&Xv8DXhzb#{dMLGT_P!`0Jv+!w5Lz~I|y%x-!#asgSLV!I25S=pKB#@nKV>9@*a7Ea*X&ESyjzXrS zvF;jQGMt6N7=-$_eDa zBPuIo#=M|kdC9y|uEvy!#Kiwk$TZiR@j{vAhtYTuDe2#lX~>w$-g!bH*6BdhiT}cZ zvYf4&Xf5L>**cz|CVy*Pka>=!x2JU+K0~&g@M;4^_qep@BFXqTE0dQcQ<*=HVLsrG ztv543TqlIC72@Jry$1Zg3pynHPh*l#_?z+DIDy+64?%Jl3sEc)U2h9&HJI=}$;vSu z^(c}qG9C@%Y5z!AN3invhlf&8UM-VwDh;6y9yJAE7?;-)k=i`t&zWj7khh!&z7nNz zKFh^1sdM?|9{%r;@Bhenk=-AswF-%F#RbA!C(@Z{t&tB-PPI;f3#QMQ8Nntl#D}Yw zi#Uav)eBRkbi-lBUXkcCuEVrRyOuQ`U@3m38Hph>-`A8j}vb zFqqho_wpO#&d9s{jR*AtYwJbNXPNE`?uMp%HbH~s~_ZQ-VF@HIN2IW$e%G|jk{uio8 znp-JC@n27NCu9>7<7}#v-ASBt>%qmKwkLNI%mGTVJA}*?6_-u)m>VkE^mw|2So&5` z^qF&eZ4q$u0!Iz{kJzCfX}$R><>%CZZoN(2rx?0}nUmc0YrhC%z62@_-p%>x8k{k@ z5%d~gNy>VkLymfKP5|MFxUk7h>$83H(aD4*HFMq_{*ixBFc>Z1Z|2~=DQe;FBGUjZQ_ z<=C<-TVDf^_jP2$-In2*$|8oBo8~>T{vm{$+=P4Jj-Vrc9e{8J3J-pu(5`zU*cf5T zV**NF5C+?_b6Zc}7Zi&#qr(RI+QId?fNOEZ?7BlW??1+1a^qJC3MA44m#&Dql~O8j zXiNlYZSRY$QNEb3^%wK8VOc~EE#rOfXJb)0pt)63TV5>0qRKlWoz*$Pb>-mz*71v{ z#Mj&(l!rLn(-^)B8ye=Vqpo5XHZ;17i67p~_WxGmB10Mp?I=xL0hw44JYdFw?0to( zOq+P0X=do~*xZ@M4S;JiPq)1*840&S70bmU_JjX{Y%`kPe*tc!UxMpa{tV=T>sCso zy0m=BTnN)sKjJqC?TOv)&|@xUnZ|KX1rDr2F2_A8+!L{^ojZ>CxZaCmTQ}GXpS3xi z;~(CgeYazDQ*eLSG4C(IeZDjE$C%3Za@HNpR!lmWScfV@zjDf(`WIm2Yyk$1FK{0L zj}W3&yjf7h56Ya1H|{sCL6ln=MFzdDX{P~`??pT%97I`T*`d>$|k4=kHmd}imdFbLj2S^)La3|IcH1H>DXiOmV|CmDti}C+Rpy&l;(p#LbNz9N({{mc z>&ZZ2ZhPNA28Y6leIydevuhbhhDk<+yQu8rhadGm36@45H&8zK<8lsG!c`?br+S9M0Ky8p>)~r z1ZXTAie@ey!Arou#r2u>J@6YNWLa(+mEE+V`h^l>_XpczU@hg~<`T>L0dW@Nllqa2 zLXJqCWe-GK?+VmAM{V=T2+}r+?rN=AnE@-0*2DVFwGKyKH#0AxNfx)KwH-c#(vM;# z)G+c(G0*iW)VV&zIhaS_S6QcyeZ5tX{ol1FkoW&adD}iY7ge$;Io+18#xKH)wy6uT zb7D9jJ_j;|Y*EWKSjp&=e=>f}l{x-RhGvd`x5)_MJ#@k_^`yTTIGJ1NUbdEcQ{GEf z)zWq3p4P%sbo4;+V@nz&63Gzg?&Pr{B?943t^t^X*U@c^ktAN zbVXL-c>dv3`AuF+lVVs)GcT;Anb$UJX#xIUtfh$=Sg@f%w3cpPKeLpVSU(d-T|Y}D zd4m_%&-6^ae%>~(_VshLgYYhc8+9Su1IHgpUnJD=|6aoVP~F-3{TLz2pch?M@0{@Y(@Spc0->-t{iNVm>Fc|3A z&_JaAeY4eR<8--h|Gvxb+~QW2W!?T`7e3K{Vy;?}kW{Mw#O3`nmfg8UZX@nrzwojC z1$h&gPWLZZ-oG;f)0JiUbpMitk4d8bYX4qa)HT0{)hjjllHQ@t1QP9G5(Uv=GKHEX zH|0B%mG%V4AvI%Fx;MTw1ROn2WCudS=&jh)qw_BA7uqsnKQ1O0<_LaGU z`}h2Z%SqM&FT3yT4WN7L-QsS&ho44%F67Yn(phP(=SP-It<%I=OK?hQjnR{kV3@|+ z-j7hgT<9p6DfAV5Ul57F9f0-}EFsmh75SHm5_P>RYxr;Z# z$E?zBe|FTV;EE0G2>~!d!0sPHC;&+pfc5-A*@cmXj9bgdlTdO4$Bro3hka|dvgl2C zCmf~VB#5ZnGG+e+T66;A64Q5P+&i>n;8g7nvkZz)Os>ryE3m4=J)YoBVI}8k8KOxm zFQmlDB8|3ORY%sP~VB7cgfj zsIowAyNdkFELGWvcQc5?f`=!M<_yH(Yw6t@X@M1|*GD2DBL%dD`vI zj6AM=k9xqDi31`&Oma%5%#$`9+r}@9bg`AN4A}t0kSJqnUR`N7NrBpa>`r^OV=_Ei zLGLtllAd2_vD0u*JtRM0h+z)ZGVwrNObICix7`*YZh3wRWs7TM%d#bA`F!PV{nJ({pke^CSAo{dtJeVFCByK$z&fxRcreOO2JaAC z1kXm0tkXF(U?dk(og@1Zts)kN!w-k3logeLQwhp3+D{*XhmFsMm_B6N*kK`Y+J3jG zv2Z$DDxO0>mP}LU3vYZ~*x%SeYTMgQa=(bXX%(lTiiXkYKw|_pHg?SKWIHG+T)%*b zVgK+=|FD~q_l#tDAue}s&tJKx$rKt_?1bIHd`+Jk(EQP1N$RxZKe>P1J9Yos)vB%1 z{&koVUhY@3y&b{K$roIUdysF3O~MSBhqF%k{G3}J{}2jF^{(#Ud&QwzlWf-Q@512l;aze&jf7kT>__`0v%^t;Y~1=dI@vrcYhk`ou8o7>I}Cr!n0O z8IO^Oe;Z2`9jsEI+^SpKHea4Y(7AvLJDx>z(6U*$SvM>~#XfB*zU0^Z@{i%&_(OcF zx>yeTW~&FuY2|EnFFBl?t?nvkk+aniIpv?N&Xt4F+3IXLah$D|>&IYpJ7@hCa0#d~>pj3xT>m=ax&qaplf$4&>*I)v_B)H8a_gh`U}K~#VAVh1y#(v0 zGS4w;?HzWL&FlD2V?wu^Ojp~*!88I7Q-dXu$rJ8?Rn5@o{R1XG(?YOdVh2&Xm=e=N zn9^Y4C?UP`>1^DY-Cd%wCfLto?g42c_awQ+4Wh0#~%L#BHK+S89#?VLe7Y0QD>G8R~xXU zXHVIIyx*_^B!%CF?vk(Wqnh#0za7(mp&K`^06IolfQAH;k%v`6w$_U<9IiECupHn$ zaLmmZ!(1C0!?Z0?ZN*mFy{x0Mc?K%cH@cs;gx!?ED?slaVpnc40wkm}@xk5exb3V( zXED{^wE}Oi#d2(Nv^&BtO+L0{#59-zm`^d~7%?7$K-aVfb-ec64w@!g*c%~PhdaRG z?`PRP(lR0c!1QnApoF|xpfU@yr3@z>Z(IBYzxpuRFV^P;Q<+53FIi&n9S%YAB4D*IR^h$Ap8*!;rbv_H zom)%+6+ZoenfzFElH`21aS%qwdaUwA#ppdo6uCy{J;>T`h}G~MbnFnL7E#3GL-ura zaq$-6PGK~t1S68sC;+@?IN_4r1afBDD&fdI-syq<%dysj+1yGVDfP}mn!-Xr4-8=h z)vsiwgh9K?#q=h_C0l{2i&Ao$j&~Oh+yK~oSg+?7Qy>N4etZ^SITKa_%PEbveDT8b zNV_4S(&ZOAGAn9H8%w}0JCkm_6DNtzy=%7lF|A$(#rMo9Ns@O!<%0WZ^poViXy&o5WXEHgbx~D zh>lk>4_Q zBA|a->(l&}TU+oMvT>trIjJRXewi|meGpCY`Ves10d4#8X+o5eT6&W>Y+S=NEwO+~ zqVkq3kfaB*9zVET^l=6B&&EdEIug*V0u2~rNh@dS06IAq836w|GKkmC@3fmFw{xcm zNJGxR{|s2x+6B9q@a5AwOawD?tzDrBmuZ6b)asKd%?MwTcYp8dw%C{!+x)ZJy#^K1 z&#~?XuH>x)8{hzMBw;WCRJ^~ikM#(-5=*%M?>fD!R%Y?GitYBTGF2d!yi}F3=c;^_VId7_YN(B@D#1Jlr)Kb|xIw`E%HJ z6V@tV&wmaqZtN!e+gb@%a%!Ei;ADV2;#FN>2>lx*(#8%Dl*SBGuun^hpk$r*$+vXA zVwT$VMtVtom)r7875TM_J50oL#~jO>)Y&Jm5j;`I?)nb!sfu`#B`0aE02l$;~a-C^%-A;3zUC(B?g$~*0ZqQ~H;!v1K>I`KBh77o>j1vj->g9FXsq9?i0!I7;}<_U%}lSbvx zM%zoG&{$M;ni)eRZ#<*sani#^Cl$r5OOPv-pYm;=PONY`!5M`$tj%Hez^#dITCFc2 zk#0<}k0vZ`t4sg3n+yU~R-Gu3%Gv57^gjYCt2CK-29Tg*1r9`L*udXkdq#(*knM}v zi*6xKOop0AWe!c)-qWBPt^ht3__Qt~9>#rn%>Bif`wC|A+c4d6VY);^+>$P-Zb^q* z(&Zyr3KF>LCChmirhA-uJ+j|mNWG9kyd$N3CHQ2|&olHrr`8#fQW}JN&=G{Sz z7vcyrdArGiwhs2%O_s8C5awDeVXN?sX`A^h8`wT51x676XQz=;L}eA zCUp?ltHXU)*c&pLNE5_MJc5_Z4{r=;0P6-ItKCTTU{G@RL7(|c&WvIchn@A`vANvx zrq+KWPw@Rstt-XRyQy^*9o}4IVteyg@2hCUUZcOF(UTe(mVevCMfYHi>?X{RU&a}_ z2mN~i@#<3rghmV8jHq?LsK z(HsQiZ^HIMLa?#K6uc`$+C0$)eWm?X_2@}C1AM2{iJ6MIO4e~JXw%Aaozj{_N5)3Z z!37tr3aBnP;wz{K9h25x_!(G>meWYY;2oE?J>cMjSH>$2)TiJNR1$6}H9prSANiAQQa~i-Ai#VPOjL&C3Kt$z95CnC3aWg=eSFs017mRQ?@tM7F zcl38=CdA@ZL%4WV7go;dSb568V-6(OV_W}g@L(~ljrc)2=Ik8>r4Bi!czDJICvf{z zLb<&f=x$m+L{y~^s!WgY$f5n9CRM+wJlF)u$i>?H-(k?m8^?Bkk5=kONQm_OXnHJ? zg6KQm+Yv-Juj;yJ&lcm7@{;DupurfyEEuFAu&h+qb-;e0ug-O3F6~$ZmUQ?xf$yE< z|C7iVNE$h)K(!W)7=^&D-$N%C7BS zylQ2O{z>2kQ-i&!!2?r+v7nkNZ}iA1!04XaLQgR;#kO@j5FL8N)Vr^xRo2=jT2j$u zOX`R@Rw~trhe|5dj5RoM6Y?oBDxl|y6+f5cr zAzX8#7_RwHq}H5`;0)y)^Yvdu25=L5GhNS6&4w8pP-IlGv|*Q87j`MIi8~Z2>L=cg z4TYa^J~PZn+x$gDK*M2orma2cp9E%mP61|nP61|nP61|nP61|nZVP66ZUaSo3e2=; z2N7-Z7c0f(m0kOx^47f(>giVE?=bVFzj}gQIh%tVD;k;8e9Em`TQ<@UDI}+#JeE=# zF{N>EurnSx%13U_Gg;I>OybLIE8|IU#SAeHv8V)+w?t6sC@?=iK&B5#T+!CoUe8x zkXfZS3nLK|D1`ul2UD_gaw=_o59P7k34HI_rhhre%kY$!pHNx}#%wZv--78T$?R3y z%qv^TD4&)qG5O0j?~S!N_rtpIw-f$&$1MHTeIc{7Fmbd}NHGLYG45F!_YA~6Ug(K6 z>vzrYnbDG(!5jk1Yn=>_(<(TMUs8)h%P=BahzRq`szBmsvchH>^z zmCKLLZK5)xDWi62)G$1jtA8K!nuZ9NNQnD|z+3qTWe%u$Zb1ZWwJhr4DTw>YY`zG& zWql$!&4zZ$(S^Fy%}`tFW@K-v8!}-j8dGYBcaW#5jgy=V7R-~07?$-I@^&+I~USh?#Br=x!3y|JISi)m1ymXvtbL0EZ~X5A+=TY+NHdcY!C^z|(|% zqj*40%V6QSu!M5>-1bipgLpxoH5H!amZI1qc95{Aic^Wlf#oHU8@hSQsC`pJ#gRin z5pBb=*hW$q8j?BbdF9!*e<7Jgy&v{jjE=4JW$K!-db?%ZSzF7LQWetQw$>T?gKErI z`4l|NTs;~9YFE_-8+$ENrYD8p={#7d5ixH zV_)|i_lY_&me!O14%5#pjId$xbV&ssY#2~sM4TCs+bhK`Ld$iQo!u(&SXn+ z4FqW?o)J2WB!mRbY9MkvrK>5?4_F)a2Sz4KV9r5L5&|%g^ygPA!TlH-DNZpjGNMdl z(lIdcG25UI(LF^g^&uLu&}i@o*|}y{Y;eiFp(mB-iUe(|-J-wzi2Tn|hE=6YZXFxLayg1H{p28#87z|43Xit5~|!oBz!&_!u9W1o-HZ6d~q)0&(} zqlCg|+fv@ucfK3nN3-R`v^`%dboA<1|EP|2=C1v}Um@HOxj6*GM!I~Fs+g6|*bnaqNu9Hv zL?vSelAu6oK{mYK(w<>hQK#FP>P&lAlK+@ETrcroz@B<~!YFp9E8R|PosZUN(L5q7 zDbbQamDB+V_AlcKa|H(?)3bNlov9Xkh25E!*0nn`Qrk|qhHa1U5E-z0=EpBHKr5o^D@?+oSG`)SX)v zKZU9YrSoaqy9&iCrQ!K<+;dIb^VQHJDGNAN2?!69q^d<2Ev7bS{OFWSKtMTu5tVw;d^&!$g!x7qJl$ngXaVFa{7`Q~)BH0whn^ zbAh028h+U{{K{~Ej@!203WEHKb54^T3wPAWH>R1EItNNEP043l=E<`ye9WE`D6R=k z)=xv9G)G$-Xua(E@Ew=Cj9m`O(!Ii6t?WKl5BFYx4EqU@Vn5-R%_`@uXcYVFU`-sL z0G`5rpmj8T0>?T8*gJZBD%caBDGE3Cs7SdM>oB^GMrQ15sv8MXD!Ei)M}nF3)w&ik zWAybYqt*`l9Cdr7vFi3>iBJHm=Y1PQ@~*>=VTlm{jPcT`7^A3_5L=j`3M6c`+BCrE zz%g2GomTVkv*|=GaeCWyHHXx zwdl#P(U@il(%dKgg!SP@{XA^c=hMNgm7Z$S8Va}Y?;1Kcy!~b&GQgr_5kJY+C_msH zJLAjNXDGi6=9l4A+cP}YExBI)CvcMWvIJtMZW)*aWi4c8mE|@~-$FppzSeu_)Of4^lqQ5IIPh zsw@}Yj>Q$r$#}~lh~vr*Aq{QgOUeGzRzQ+UWN?u{z3BEW$QRw-k?C-a98^8J$OB|G z{7xI`sUBiyW)u_k!=HfF^basn3Q!GZW&?6s1evdK&W<3n6!N18lB@p{9z_s^EkAH3 zNCpbavkII_x!wDI{0*3I-h8?IB0T=L^CW*Ae#VQ(J;B6z6TTCp9P=(;g<{UmffFD_WsBA@$1=+8pegQ4q>q3h@3(lpnDenaOb6C;)S!r$Ac zb|&fv;#LM6>SK-8ro>+NN{k-|Ww)h*lY!@&==njIo6#z9N@JU}e-DUjfm2h;BtB2U(;H zUMiTRbc2+OMDExQO*TbZ#^DPKAKg4wP0>k!1xuJU;#S?lT7}Eb^2toMF;rA*l9t5A zl~IhCY)Kq2Q$op93FbF|Gm+ZcQ6AWKFDsfF8B?c5<`qq?%uz%E&6MkAW{!0;<|n#z ze(GzRpHLR(7T(j)%{y+T?kaFp({9SJJt4(lt~~!qTT{2*f&6gTKuJ}RHpdpvom(^j zlLaHhCJQLE!MX@ED|MEeko}_j$tNWvr|~;9OEz5Og;(W0&d!yK7I_J*&RXw8W)Oq0 zlSfwuOF~&BF>I^IJsJQ>@IJC=V-di(q`Q0thuuuwwbqzcyEQb0>G%;8EHh}B*Mm+! z&J_Ozi#fAd4Xr&!-h=EXLo!6_&O6RgiqvURE{lTel|ekmL0>COB}n9QGMasU!c zJseGiC!47ddMOF{e>o*$)+4gvtVirH>nW0I`zZZ}%=9;Czu>M*65rfMEE%}+JBrFM zsVl!8?-atl!|Zq4BmDz1PqMgdxAj8V<;t6P9%~x8Bl*PG9Q!UrL|Vss9BF?mX$g9j zb8MJo+d0;5hJiA}Mn0KgL$A!Rp>JglC*yH(5two?$A)1t$KK75$#X2D=p2jbG|*P_ zkXB_BI*!IaWCBRQCH)JQG=?<^+ZiJzf-&el0+KmC2%2q4z*>Re{3v3f>G*-b@(^Ni zcM0=5A!aZllSAgw%*B5K+KREesY6-E+!x^hEWUo4-8=BSo*v~JZ$leADC7580JCm* za05c2%+8!-sx{mD1JmfI(!hpT;A!CSPw0MPXSnOTJqaa+$NbK^CtO(10D9|T%QoG6 zjybXK$W=)wp(rEDgy=?=^+Xgh=6-I4z@}v~oe|OZVJMJ?maX59)cr(YA19 zul^zFuP>stK=0k3LfcB`!UYXTJ@yw|L=4tLx3HA*{6FBH0{Y&Ey5f?dyJul8N|k%% zu`0O)4q}f?fcaE!x{OCtMb=2m?NwZJ?SUTN`VevmmkFoS)A(Bo@DIaDQ@)polxS_3 z6c@&rFBw-dyW}M!B&9TTb>_*_HZPkI=B*Df9tK^nmm5q1p|5c)@C_N-6wVJtFhZII7XcC$xT|kOuNM5_vU8 zhA+-P#7?QzLh@LO%08QA^pHe)m&m&1F7(ncREj`j1o&8GLM&=)^gMFa-r>JK}DG1P-7pX%;*(bws$V-h#Spv_5Fdh z4qvbvcI#Sas_p|Qr*v~r&D75heYl{mk;0feO)AG<|Hrr)Nycso`YS>zZc#5l1zrD+Q zg-?O^vjiAHF_*@TbJkt-?LU4 zPG=qoj63f^MTOIYagi|5fob)dxY|f7DmWn|sA06CJA$Jq= z(jcbT&}l4TgQFkC*&TziaD+Uvmr1?EM#J3A3?(XGQVBgcp&JA?un9p`y4S-c{v?t0 z0oL$LWWfVZ`l4P!Ua(7g11#XT!Q_imosD&Xv_65zK${=`g8&%kCOGl*A7h-O*#*iy zNsv$|@C_4kMMn?6k_0GHng)u}4*mHN-q@s~wasdC{%|awV|fhyQl{Z-b$b)z&!`EW zk(!Gf@-7|?nu&3z?W@`Kj@*MgaA$&LKgl7Lh}|@r(2j-IZi4ebyY6bu>_U;0%P1@U z4&^yg;E@UaB=u80UW?DV>r#kctGHwQ=A0v7jtOq87~qDfF$dthb41$z4Zw}lL+lbq zDAF1;3Ewz$+$c9Ki;9FXdlk?Ybnmw{|XHw&I zX1uDzVm`Dr{v2PV8xQ_qsdK-J78F3L6v^)|r zhar0ch70l!t2WYY=KWp|*_AEHtnu)p##Fc2gR-$>zmMSz5Qr zwk$VpW^ryxp?J>fjh7`L|rGZ_Kk!w1b?gPGCU)-&AVa z+!tm{s#aL9i!ZjEpk5b$R_g`6$L`(uE9j!*Ghuxg^?V}aV;Vu;?ZkBVW=wZ;&BNMr z$T)Db%&$Y5R`-hsX-MOJ2rgtY()<~}1z)E54R(t6kl!@%)1uc6EkIbt@HgDX6~t-M zwD2&eh0h{7ClP-ABalJpc|+XuMtTl1(T;>ijf8`QvaAGa-;2dWOV2MbbMPtGdIRWi zE%n!ds#dhL*k3j(S|=$IL1(aGp2ZnWY)o_v;?@{FA}o7jIGZ4Al)*l%PjttSd@yOf z6Z!vM#>nSUX4`s$#}J}*1(+X=q_as;q~{m(2$2=Yrl~FHxZxBR|A4PYkwZ0{0Rw|ISwXis@n&Ys9QpiUC`TSyT$E8WVfb zy|`ol%`sdKj=5*iU4IV6DndfK$#<9(ljK_+)P&)tqn^6etvv20R`-O}qwZSA^nE+T zjq&~(=1TdA?Ea~c&vAFe%qtRw+Y>yWZd9nhL)Y^TXHpzSG`quJM4Kc0M3A+01$&^% zfh&;j)9iEQ)_*ew4r1fuuR=8ATuo-QiPIdfJ#T#p!4rjSeWzz}i*Or`2<$Rk#6S6PEnM2wG>T+1^03HAB69c<8rK7$eAg zBSNY>@;bF{9BW1bh;+C+Q@~g%5(P~GwJL*$@RkLE{RO$j*m$zy0ZsL7Rka_`;(M_` zDd3TtO@f3hBA}`neKJ6&44+(Q4B7?hzq~k$N-AWod%<-N9V=|dj{So73a#9j2;hC)~Nz)UIvc7UQM+kP^wkmus4x+OG zHp{YV1sl{SOPb4Jtg=gtxz(qQnIWr)x~`s?DY@CrOD*}-N=e(cf@lK zJVv<)orr*b4iH|~T%O)oJIWPpQlvBz9Z?BZmSvbxMhYT%eNUb{D5lf$-~o*y%bT*A z9`=z%Y~fUvdpD(^n?mcp6L=RgQ3j<%20138d@#^MeRZZsG%q?kQTH5EU)Okn1!0YK zP}a4mi;in!c)bc?#cYpgWLlb>zc4$cC7c|IpaYg3KVYlKE>uj%%`2H1UliWF`3rj{ zMI4QdM~9Uia_C*YshGTTbej6m>P7d?7dmiSvzQ!CA&Iz4so}07wR3-EVSfj$!Cshu zDK{}~eJQWHpuEuq<=7wh~e4r z_{+!@>%pt}Nw&U%4_Enw@=Gwk0vGw=JHY3U?1v()W^KQL+V?Fuz#V%Q6GC1t*c2sN z4o_@vK$zD+H-Y=Kz&-K4Lj5S9nTgi*nSjTOxjh#CXO3H^np_6J{Ve|h@GA5zwQ>wS zcLs3j1+rfOy+Km4hg~#PQKBZrD;Tn*(I;)>?Q!0EHn@k?t2(!%tOGY&GXtGe2_-7e zI4Qd%g2zqH z<^YKvH%Y9!9=m0=*@-cJvD~{3kGQ7%Z{xQy4pg#>e~P}6SobN$T9_E)7e=L z4uMg=j2a7U>?A?2t#873(y1u1ZY#4KNsRGJ6Mlab*>Io1U&3th>>EExA2w!gV|U3Q zSO0dH0d7-r8+CwX5xOn?lxSn<=Fobl>h~id9-%fG1MoCn;A5TGkzS*3{y<)oCeWWI zl5q^#*6SG!|6YAtVFu+$1Jn8@Kgrg2q#22k$UL@%`y}PxzmvC&;;9O7WLWCZcAD(? zI)I%fhpl#Il*;{eTw|p7X1wZtXgjg;ohEy*JiO78zU(yFj};(2+G(;kD?s|S(`56= zvO`{&Ytajd6Jiow8flz#LlPLq_a9RQ^0h~-Kz%!szLB|wAq z1c&COo03tgQCu1H3dqNPL3<1S`*+%IQnLxopxhKvLAfUs!kK}n2b=!#pXiHHNHU%` zWM`QkI6+ce7SFrsVLg|kj#!IhUJoO|(A4G5%8`(BBY1PYvtb9%Tea@D0BMS z?DVxc2)!GTi73nR)rNV_kc;_(Q|p8T0LjJnxH&O;bjIHqKCbU;hk?z#m!4!>lzAC{ zA)#)!>phAMrqsgiCqZ(>WVV{eBNpI$?m`DXbIjQl({vPW!#$F5|cHC}*ud;|EWbt;L1kX$WT@MVrBUoLztK-y`p9 z&1q>~`bCbATW+F|%IzV=#5`>9RHO1=3oP`h!3R{q)mTsDpm` z8GT!hymlYdhpmhbd2!72E#1yTo}3eHtJ~Uf7uoJb z8{6_)!M`jE7e(9umt~PgM*;`xAgDzB($e7KB8>I<*sx$Fbw-f)79q#U91xo%v>s-^ zQ)oi9*68=~yqV5-`TS@qtPGoC9Q-q%<3*Os&j!~dm2ufUZTPv+0hux;Hvdzml`2mu+--muS%e5n zy>9}iu4G=Nx)NfWVK~TG!Y@I%d110GJhSvnP|o&09u^nFMwm>-E@u3*!{8V;S*Ms) zY%-3wxVsE=Ta6fO&o82*;&23x1u->+px=)yK_6DRJ zy!~Ur&4wE&na6d>*VE5AlY6r^+mBb4<#B@twk`U5M!Kpq>gV4LonRvcx=t*tzXyH9 zc;?i<2#*~*+%0Cp>+v!*>~74Op2!C>*nay(GT46m>mCc`izO)gBH>%GOPxl$R5=;B zB5s{J`j}d$ZsOMOXkP78H&M3=xfsGQE8@Qs3?D+W<6Q>2<1iNTr5$P=UCUwJG=OHR zpF;#lGmo;z?*{jJLO-iLrye(1 z?|Lp0N3D!p)!L^D@De7!$hI<-E*Eh&dur8p`rlW5XP^yyKPps&`kcmyttLFGYA&YA zMIQU&J05hj>9S+m?wAvskWhQ4+tuDiah+v_VQ$I_=ZxZ-4_C3@T4>>2P6^r`Za;Y2 z`84Y{D>{r^4)@9qdGmQD?4qg5PO#0iWqq_PBq?d-Q{e9J-sd*t>-eXl@kEt8_G?J( zgOSkgmT~g8Y*cK|ts1Vx$3jlu;F8=jf_yIo>tcoe`8cHE8u2j$~Ch-i90@CxjLBwgP~~vz8^>D$ti@>Zg&wM&BKa-aCRTdcwq&(F&?x%3`Ou zx0scSd+&e(d~S7DgZiaFUG#dQ(-U|5>&QbUgJt|fY1 zsL3VHa`{#3TUDNG%*Y@?cHv=TG6+PW(EBdBHT8lic~d0GexpIEL1VBZTSr*d(Y!8~ z+HPb{s=srjzy2a>lPaaV)Ah!m!P-igi$v$IoBpmEB|gpdtt%#n1y{`W@TyyPvfJ%W zc^*+{vWRqs&qK*TUJsxVSh_XP^}ZUy6bTgn5N$r0)EJQuK!D|Zs%J!8>HiFtDG~es zI^&Ho8ZUSj#YZBQpO|GPy!$82d>30s;^}I(k*p!}*5E>wBf&D6ak$2uYX8;08W@Lb z16%Ikp9h^&yD^PsWH2;yvS8@=y0(z17IMGN#1LPw77)3g{8{muVa?htSl1-14S=V@ zx{Hnx5^b4RIxK`LKnyxaf132-vfkseYmlZ_#dA@ znZ^?QX=o+wv6$q`W$$`c63&EiN_}nX7JPH4ude^`$cW<|fGXhG7VkPD-HTe}7H>c- zvr5&fYK=k(v{2nY6O%s^$r^^YWK>EdY7iV9?_lIQec^U!Zn1!@b_3`ihukBjOGfMc z^@*O03Zl>~qTWfZw=Rm8uEQd6qDM7A+;WK`m_i^s?tGkU~ zL{*IV1?%VdSEBA1eg7W6U>T=^VtE-0Yz;@+TOZ$p(kBMG4y%+gmI=LZNbq)SxDp^f zuLv9M8@pPAW(|x34BmH5sKY zYsJD^xWWgG{^IsPe-Y!b5g#jAJ0BeJu~jIyljTNZ1u_haaAUN~)kmKXSdoT$`=MVc zmcsmUgBstFXX8^Qv2?jq<7=oZ5FkHU`AW)z)O+14EKgqO42t7=)07smqZ?5du%qwc z0~}^9NLxRE+}6cDqP#}K5@M^0=V^I0E^a*1>yVcLU1&E%1-lQv^jA+Y63TZWp+KX| zozk>_qx^mkzl{%55Ujq@#JYfT%(GN4&lLFX22RmT#InXN0^cz%_w2)b_7`}3<5KTj z(razq=r-Cyr<;M@iuW++3=0*ofC02lAvwHXXS&u8`I?m%C0VkkC)40%dM%P=F>M~V z3BD{0KAXXk*ndB=p0TK$N%nRoV7#BAVBtN*@>11OCK&@hDZoy5I3+8jYI1;gJC@Qw zW&5_WU?`}92=DR}e5&oZh7m3gB2a+O)c5^MBww;$?tm?fVYlhqAho|Mka}XM-1ek%b!E|sTPg8PnG^Nbx5&`8LOxbn;;|HW{{Q4JU`-=Wy*>5ZJhR_FQ;A^tSsIg^hFO!VgJ4YaNv zv687gSfgWdh>i_lXCJE+P(#iQxR}u-r$YhEt2>eQJ_!u;jLld64|VSXA6HfFk5A5- zIrB==q)BJ;XflO1<#Z-V+k`?}UIl4^Dz6IC6rm5fAO#tmX%HJGR1_7Z^;ST!6qKr< z__(58-(FuRczse8MWHGJ0*WYJ@AV1)?{}@e&p9(m3tqjy&*z`dC$rC9`@Q$td#}CL z+G`VG>hIWyFrRm9s1S<3&Q7Z*b7HLjeASa7T|%K#LtR@Fs`~%`yt1~gvu4@4o)qi9 z!0Pm5ri^cum!=fIa=es+@fFnOU7LfX)d9{XB5^fpYqLg1Jnmnd4=NMnS|V#@20BrY z3l7i3CAHR4EAIp0@yCv_{1Ooaf;y6@BxhA00=t=? zStJs03j*kohsDSxoAx7^ITd#z^3n0*w^1TP&qW{!$%m>gqPuMQ0v}#5E6vdMol(Oc!vE2Jv3ZBic^Y(4*11vG(NJox_LsYzJ2zmklbv14`2( zV)EK;0KkM|rSDIKbThKT{NDwXa9~mofurwTIv)!m*eQm;kQRA*OOE>6+0td;K<@0{ zgx~yH!;aV>=k8`yCdI(r{K&7>7`xk3U28j1LBp|TH~VZj)Oh6kU{r!1h}53#9;R7K zY*l0F95*Zp%tARFw_1Bfub#dHmf62)PV8B{(5Zzg>up0v8VcvRj+PQG$0BKq<(@#* zyajo-w70aUMjmd@%z2hcMFBlMJXARZ9W^r@9;GW+6Oai3qFks)i1v6#D>t1Pl^YPL zeTLyEv=;52!?hm=v)B^+qgR7H$HET--0nG)dmo87!ow8CohwV6;Z?TOGbLeNDde@8 zg};0sSR6&tn*76>)xy0jqG$UHVtho;R{Wx8D_=_gR8i5HLjT-{=!2qM5nyu$yO_U^ z11QE$g(Crj36$Ztq)8kd9GDLMH0pqZvz*=TfJ^_K8x@H7~s-%$Jh<4xBrC7|9b^J{$`3;RMorh%pNU zC9A&$@zq?~pkn-_|1cWY4C5Ih< zuvV}Y6Uz1-|3}E#OUb>{4#RA`n`jeZHd?&Np*gED4jb?v#TyIX2%yCq(#?wyzaw0~ zWZelB0pis|QL8N2Ez95qQ{DB`0}+Z$0S8ehP}9x%LManX(S_FG>0H1gYDvR}m966)i|U_>`I3-t-* zw}O2tzvXH!NF<^4eiL0|atQ^y+l}b_*%Sdx)+lGX&s7P0$Q%v{Ik?Tr!p>Vffg}Xt=DQBVd zcXbr@P?hnniS?DOjQ60XzN4*-ccQ89M*TkD>imP>Ay!6kH1L0g@h>7owg2Ph5XPuD08Z;m)ymNg2`=lvN6P!Zlhd$Y_1%I@FXS+kwZozXqH1KAC2f{3|c^Bp}2 zJ78g^nw0~86uXq@RdN5O8ZefXN9d&TS>7XPLlq2IqmA(x2Im79`W45UM== zz!*nc2;qTAt!i*st6ydJ0+E$Ie1B~8ftZn3;QK+9W55avDJiGSH3}Cy-p=kcwpduI zYjPofn(KHTeczhsJiXQHJl$-j+^_q{QMLu0n6TVlc`qkG*AO6F?!hHg^_T&)JTv(B$*IbFlC4+4Owdz zrJfa60J|Ft106@2H7UwturJZx>ctBia3rDC8Z^c`jkqSQX-%Sap2Hh6Jk&~&dWZ0( zTo{Od(_Jjd@LE9*!3el);W#nejKx?aBzTVm$CkQ%ysJys z&Zudg-*Zd>FmomD3xF&|^C@lgV%%=Kq@JHep^iS4=zj{|l`mn4h10j}3v7%(CBl<7 z!k|Ajbbd51Fnd3TEV14FA)JO&Go1Zsla@F*!>0Z;lFdiDxqk_!uVjTO@A-d3BeRL} zPB^*F&U{iHr4)9EJQ^j8ii9F&Wo3{-gxvWb_ELo05xrHVTGCxP{Xy-PhH12bii+nIl?2Wj{2Z{~=`Q`N!aXfbF#+)&$XMZ`QF2 zI=CgpzD-Zpx2fu7=)fr*%(?SXbVtwheRd^UsT|}Z?I;u9U|&=)%>N8LxGN&}kbI6m z6n%(2Q4lGo>w*#Ovq!9!zRKNzrXg#l2`)KD2pKvcdDs08XaQ2R`DS57>?Xog_y0`f z03UDwF63`t!72wn;9YPSr}}XWjsI81=>Sh~6L6$g+AGmj=pae-lgS#ybG^fJlYNlR zJ%SoPr*!VWD4i=o9h0{C<{RPKQNvFiP+-UMaZioJUcJ~(hD;gyOW%r-(){{H&or_? zzQ)p#-fwXoz#ZE4pm`yd(T+=SQVPydSrO+%3Md_FGW{(xH4?@SD`JF5mt6y^K`k&Q z^eSX(WhsetS)~K&zwebwvyt|`2zBiX`;S_#a*G1QR8U>m zBsW4QR=3$rNr#Foq{U06{a**8Yy=MX27;kFiJ50COsH(6FE)Cbl?8dRSD_yL)7GQ> zEVEZ~eo?d@DJ2Cnp(x8s2`AHktg%A(Od|mS5iTPu%Yu>V_Qj4I3uPg%N1arr%dVJS zrpq1~kp6HL&7v~hAD|wC)5>%u|wib%eS z=3;658k~s4HpA6)b)CdEOHd%MEy#LV!lZCiUMu-+P`ri zNvDFAXJ+;CTITr=%4?ZLAg^T!Q{=VnY$E6^oL}S<{m*shKjF?nd!==mI(cm?QYgMI z-G*2OWwoj0XV{_#_(P2T|DU{8)>=PkVkjYH``j{wWB-`Eb{su+5c<`{0>tr%N*y7w zjetbf$xp;vX;*+ zw@smL=%jkN?E%Vz-1e})J-_m%k=sgXSZ`F*gcj8N9##PKe5X$XYWAu(b$h z$LEa<{|N0H?x{B^!4u4H2$#NQBM#V0^wt~o$cRx7WA?-Fb8|6VHfi}H zwr^atX9LuZ$6S`9c{JGZn1_(Sjt2`?J01dttb(Nmc03r&+jIm5c09ym?0AgeWC^nz z{(Nl~#$4@syaRNPtxmmN4puB;mqUu1-Y$pZ8@n8g6Sd1hzvG8?IsV(xH;Kdu{Xibv z7PYCwR}AD0q5&%93Hz}JAA5KE1E>Tp;L)Ls$%|1GOg%nK|lFtmSKoCT-PD&9kIiYj#vlum` z)|5=TPqAJfDPz%X1#YNhI7qj2Q+X#!}FTJD7Bw8X?25m7s>1~45tDL-);=~ z<&vZF%eltMeJ6ehmt1t^`;g{o%mck_EjA~FYxNdX%!<_Q{)ecs)>f_0Fx2YDx>bV9 zbw9W_Jo#hfUweo%RzH8iPpk9y6MEvc2gC`j%+`KN00c@q(IT~bv=0!WuR8ssIV32X z^X?3|12XSw4@#Qa&)~#Giy7ori+(8|4I3SE!F$?&2EVPrM3OVXGRqGm1ncq7@ooCN zH8%fHU0=_4CYZUduPayyp!9Kczimt;9ScvX-v&PjjcUInc%sO z3mwApYgzF`I6%|EIfljCv=5vK8L|l(zX|qyxeQ{}t!@CiR!_wz28cRSEs$f*mpQ|6 z#|SW&Eao4*UH&O3cc=qaM1(U{{WZM)srUgONMaP)G|B?_nbP{Z9XtyYmRtRnO_=Rz zmbF)nia{8j*#$Y=mr*NgObpX?^fAEriU+Ou?6`3D+Uhg#45apoy=L6IW1j{dwlVOq z*~Y`9*b+1iJ;7&=KCy!=rL;h`9EQL#gRDeP2U=v=VvtG)Mg1I>*}^Ly$U#;%kQb>n z3#8)DX%H zxT~`0i(=P58=Jv>YZ9Bz>By>X-#U!||3v(X{Ezo|%pS|AfA=2C>>Br2&E3`~+(%!6 z*(&uh)zWxS(pRWWCTG0=?V8ConrV6e825wQU2j+UKhQ~W+(T5O0yKa2c#dlw*VJyf zhhQ!NnqMn#ox%b_e2;4^)O*FhpALEfdpPdXnL-Dh4B&IpL6U)|8I0tlQro!VH(D^8 ziRGa7FatshX1qWv7R&@b-_a>SKtcY(u=}WPx9v z4*0bY_!1j4QT<~G4b$H{9q_l)0l8Y4;@4@Wg;}W8&!&R2(}Q#M;IIxq2(x$-9|mc9 zHaNA|X8uVvcS$ND# zURhpS0kJw3nrkz?mrGW^5au4%{NWG?hOLeh1XtA`h49D#d<)oadT_IeJ!czg2^E&R z!=NyCF7qZnVsRfl4z4fz3(FD~jm`|%VCmv(j|4|v(A^{3qJs7I!jCH~L_qyIch!dp{G(2qrS~sI-SsgN*85`QvjFwR zeP(&ZiYe1N{oT3%t*pqz^*Oy?vZl}0!Myj`FE%tv*b8O%T7lk9?pn+ zZA8Wk@+-`W#9PjIKW97|W~h&seV*}h&of?cB;Hb%d!N*AO1ZNm@s44O+y4XxNmkI#U=h$x zqIV|cR=mbFxOht)7LI<~;DU=YgvEt^(+(Qj@gyg&{6!S+mA{1F>Q`A?EaZyE)Vt(Y zWNQ7AUKx}6xkWhU*2Bm|=9c>H+@eqCmX2p9>hm++Jp`E`=v|$=&`T1e%q^)+8_Z%zjxY&4Jav=8e}PaHg%Eje)~)HyQC^4k+D+Gr@d4H?Fgn&%PhTzpMd^L}jg5c}KSC(xRANELQfx zbYijcR{4FG{C-$|KPSIWqAAX`50QTetvPcSj5tG?6Y>OZ4bOGDhYLLFt^~6vb};@k z_y=(#h0yOEaazD)&A`cUY_d!OocI4Q5LHm7n#)G-WAQIVt8&y<+alDY(*_ zg~>{J;8XkJHe}5|XQk~0797Vvl{%^Y2LYZ`h^Kzeq(kw)9RDluzY6~^!hh+s&SK>X zJdswcJlV>Axm|uAp5@?sC#qAd9QtR5_DuPG?GncMc&_mmcH+?p)Fj$#Iwz|rk$WY_ zuLa*p{8KlPuKnkDT6iAc{EzxeeT5b1L!k=LhjYG&aP*;&E$qW-i>EN(=*fOL33Nvq zuK5MH!sGL=!z7?`vfj>hz4Af00R#c<^_(1+IDd4RtlWF)uuUy5K({zFWSLd1m(?4X+AeMFX|4cJml?!8fUY z^Fmx2WX@T&5GvP(8ZwcDOoSWRuu#twP_8oxa+{GEZX6lt%Xkcn=al7c1$+xJL zAyX=vg=%K}QZ+Mjd5Opz!buSuvDCkYUj zd&^;PM~SE9^AIf)S7p6Y+D+zC!pZRD2vEKY({G?Tx9FFyyyEA{Z}C2-aO_CJDXd$( zz$t9x*Ve^YCKvH*+2UDFp)}m)6c&Py0EU1xEFzkkBq5mt_ z;m7QT<);CMEnOJ@g?SiR2i6a!AprY508TOK--2cjwOT;+Zm5qG3r9-*VK^n<5r-}3 zy}L^br;nK|WQN<4s8tp!lOUm?cfNPG5Iuz>QC%sPZ{L2&6p-#&m~^y|ekr3P0s9te z?Le<3B>Zc@kA`)IZD<-E&29o4rQNIEgL-u&_cd=7)4O^Dza4yC!GW*G<~$y2A|E6c z!}k-hEcP4l^827SpLPmaIJm7)xfRxl{n;rru(A>hxB2`4I%~=b%=L~tgRFOT%N%h8 z%8e$hKQ3B_Sp3}Tb(rPhTS>JiNF2m#zY-_HoBa&|b-dXp0WrMU_Yw(_cLQ(s*OI38 z6rBC?W|_m^)b9zoj=E+&9c``Xf;Ax_N>4rV|{EY529&XL|_cF2Q{C z?*S6edCZN$u4cwc*EBEkB+a8GUFOk}Zhf?*2alG3Rmke-YN2NISt0eaff_D6NSs$0 zCM?Jn%YlShbrg^${}BvDR#^Ct{4o5-R7%;8urVjx#{?cnWG^{k!!)6`+B9PwcAiA_ zgTQgigyb9{y?dCfKXNOAhE`xlV=iK4ll@~W(S9L0NotbtD$T4si0M|WBpm(@$?uu? z)ie?6QFNsLj2S#l9+QXUfx?r+^1Fn;m79>qlu3MFG&R-=S_G{r(!u`p*psboFp z-f=kF<$nygg7q_K9xOGpc~Ex~vn_WLJ^hd4SN4uKA>C4>6Xt3pm9ZIF7D?4WGLOA2 zKPDT)fFqZD4D-8N+2Q)~;ehsv3G$>sZS`8!M(X z_dJxzIqen}jb-qtXd$!CUCVE?EwnYkW{_K0KKh8RsqFI)AwCw9Poh7!@536-vso+n zP_mKSd$UejECj#yst;iUlQSb}URkG2I-Gl&NR5u6I`f4utM3volksd+#|{*(sl^)T z&r-eB{}*iKMu`@@u_QjY>}{yV)&RVq9?Yj1jzl%EFh0$G8F41) zmY?EQG2#^FK#=5ro*uM;`wEXjY>U1MpK%5~FPGo#;l|If(-TBK4&UheFS3%78u=bd zgxHybfOgnEDevrN8T~;rEX(~&cUL6cvZ#d2GGw5b>$?102c!}@?BHGX34rbEnE^2k&=ne$}pS1;E3 zq=)I@>D3S?scHN3+gMZWr$p=ps1yH`h#1H@g{5*k3Pcm#E~ntr?M4@ipvO_sPcP1% z^v`xg?9=DqG8MY0E!stG?4oZ3U8Li3gBAy^5;nowj@m5d^9ivgq&BPVe1f{ny~xdK zIG>>I03=rP3F-+zVltng-T)-_@(G%4LH#tAPe|X+OGL1>dHsgs4*M3CX=UEDvP)ap zZCaU*wld9DekW)paqp!4w6SZG78$lNs8`U&pkCdPdLciqJ;%Vk4J4D+lID6^N_j8s zr2E$u3hOZ(UV7)Clgno+JauT;Cn#}SXNx_o^ao%oy!t0 zfU&Qv(YT}(xM_pFY^-5eOYWDc*cs%#2FzXL4Ys>~eU?pTY@=U;7RRt zWXV5Hn`UTed9;RovjEjpnuwj!!y81>J-vAAxnC=3`peU&?h&8qIDW9@0KVDObPAgt zhe0 z!#0wWyngR)WiVoZpW*;xcrl=|S_&5;;qQwKuEm{WF}7L|GTdf1pji}zL=owhU?0NP zg+4max(&4L4p0j#a5vHRp-9osk$%|e3z8p)Z=`-SOwB%Bj6V1j`#@fo%qv6mqDQ05gNJ-7iSW)LOH*8*hGLc&KMlc_&D=mm_=Y}WVb`ufI&`6IN6 z-~n*M5+}Jv+=vh<4;vz7m8H$G5D(;C>^Z|ubSdLXmhk^ODD!CB^|BtU$4x6K)vmt~ z2jpD;uZT|EOT@@0faRXRU2y0V%(fyTdKh_J-l{Hsx^t1{CmdJ z9lGWKh;xCYoS+9nL#Y8I+Zi zUqi;?el(vcdo^;`o6C?su%?tku!?k9gW_R@W*OdX%%XU%7FIn5oOY*t6By{4`onJJ zQ}2(NdsBH6>8%KkMsh@fO!T*Aq25AEN-{r=>@xcj^E)&9lt#1scj#>;$Zr^N$|=Mt zkKjjX6GynmM_`S!GLmb__=lm3Tu~$AT7L>R$Y9=fI0X~8ioX%n=D7}|8#|J1;DU{t1`j`0paetXo*Ieh{}}ljR@4 zTm2zRaScnZHCa6$elPA{M6frwKHk456Ym+G8Sfu1l@5dI)^KMWwqEk3B9^j)n8A&V z3D3dCooiePgrpX2m;k9BzjhniT)6?C{)f?QJ+j2Hr?Dx%&s1DTNFN-Hx<_yiCU-5O zB^A*ee;(rF!Nx~1P;PZLJpLT!fV+KCEB|&DjJ_0K&i^F6A{*-gckUSEuO}!R7Z$bA z(C)tlrzpNQ!tR2)E^^Fz+K0eA0-Xttfr2c)7IvTB-!Juo3>IF!F zE9cVp(738@gWtajKSj^<{fs=}_YnR~!jtIvBzivCKfI*00!GP(JCo@7*`-4f?Y)e4 zJEOt#F?#;pc)m!_myKsWnk`F1v2teI9usl#Aer_Hh|-Y&x7@2-hafOFX92QR9@o_M zHNI-4w9xqb+jH-i#9LN;W)zD+@t+(_E+ zeTROYq=DWA3DifPv9q!DyuJhF0Dr^rLEMdDTid$AW!AZ@N5@(?g&Z^y|TW%|*YjjU7--&;;%jK%M_3?le-Us`*7ZEN(zAyT0uLPqtPjEN zbqJ#Qh=+WPXJ*uMjd-M>jMFu?k_u;JR54Db{1e+vFL<9`7E zFU3C@&LCUlkts4Y&cr|SPUF9Hndko(TkBQ-sLl{;=2eeWXSF(O)LBnw@?5S|UiA`% zy;+@is`D*%?pNm*>ikZfKdKYs!YM0=GwlijW%5y0g}mw&s3NYo;4X%&ig+Ai$Awj{ zi)Ahsy3p#P3kJ#OgW=8YYo1^EQ{c6F+K~B;#G20m{`cZ73$pmPaqM-qVTKu|TbT@y z#_+SjWNg)R2V?zN$jbFQM+Ht&3^L4ht z-ls`(yp;D(ntnUmEM4pvDkhHF)EH}DK2y0DNxd>U#~3A+tl2(YL%di=cPzga-ou;; zrqPk%rYYrsa#_w6#>l{v{gbG-f_vBa zc5l*Er~vokGeTCyfjf=sgBbpZ&ms9A)xX=}K?_z!5%P;(KA4e@38}9P*slv)FVSc!;GINjr6J?WFLCf_se`Wl`)YIP#L`E z&3Oy*<|wk}GQ>KNS#*We@5qP!Of z{&H9>{<3UO>PU?wQwdM%(p;JgS@LO!pqQ5mzgyCwo|2g99fUyuEJ&H5Z;@1&HH1s_ zmDn#`H3duzMxojqFl?9GUK4AqwuAidV9JDed%VTlQ)Nh@m5PqX=w*Qm1*&o=aes^?a<-Deyr=~e(+XXqj;P2s-IRw)zUpJ-BY|h zJES_Zio#}yW}BDY*u5=DOO2+L8Z~3`K=1@x-9`9huKGEacz^~f9&L>I*XTXehPjb7 zbAxU$H_qZnU``O&I48y!hB@(4x|kD^(98+TgIgv2#u##j;|Yr*4jk_QGD>HX0ae^E z2j9#&i2mkU7tSfB$DCqi{*UL>2{NZRXm(DqY)`7Fb4n`VNnLbKZA1h+r-JW)!kogq zi^txLzBrM681`=0!X}&@g3i`{jRLsLQds_w|3YTw4$j3E2*OYo;>T5RPa@6^6(X^-IeYFVAzb~wlfYH%}oO_f}5ge8Y7hZ*&n2V{w3lDH!HZgfGDufjVgp)L1o@<~p@$=0-hFPe#WYD+v2<3o+L%XL;Nq zA7mK#^FoYQxFco20<$|$Qnq8m3@KlXhJhLKb1u-N=Xe}^5yyI{&6SO9DCLgJeuq0r zt{f9|5ry4LB=z*HP-gdRcEPd|znmh9mBFkf06!t5t(-AH+R{DHp0>lu*V@o7L*^Ne zTbn^xyw(n<__g{tn6-)VHzQx%u)q~HO&-@22~DBxJJPf-+7xGkIeYRuI>(t{*`EB4 z!V(|p1Jle;kT%Srj~%hKjbm-Qa|P4-tFeM&8nS9&km-jZ1GxoC)^wRQWbGOej3Fja zE(_RQ%$G-I{$ahF$CYj-R=UwcAca2@)hM6KeuifyJtrB@q4X@H2d_?OeT$Wg(f4l1 z)bNi0rM&gqff?Z58)7sAtQC`JGzI*nYY2rl4Xd?B>;UUop}r${#HU^avo zq1M50YNv^Nn5zZ)XA4;^IB=|B0QM!Rr;23jzO@d(R4KNrE-aFUEj*un#!kP0A6GSW zamwx0Mk2z?8DS(>eJiTBZIpdSdTk}@ax&MFBY{A{5va3{m2Y|KdcJsgy7P{*dXbmX zt1YoPL)NxbTx15PpbU|2po}gYQy}~{W$-L7$9KFbO6zVSS~-xoKm{j}vV8NlEW1IN zNNe!%HZ)UwAWW99wG6$MeLzNVilO4W%9&s=o=@{{0Z@r(g;|2y-;DsllSFI`<(?Y! z7bs)MvdON1{;kdY`47Gr4IAL5<8UE&UT|9V@(Y2v+C0|k(WzdMLgpO!m@XQel5ld zC+Qd-hn{;Qy1*&S^LMZ-R#RB*UlRqba-{jf;Pl_aNSoaJNQnhQQgTS zLwNn}Fb)t_8oJeQF%oeTl91Tx=mW>U4Iuw4%%JMq@s**4{XJL!BTSHF^#uso8q^<2 zV;vo_F7lVS?jBD7{{Hv;o@cn*i82*btb_yugSYx&R(A4m)*rL+ee6LZns7Y$afgL` zKs%T1;@Ga4c5D|-8CyAIhGWYE0mqgC#J_87Kd8l<`5BJwaP8^Y0ppR)ZWM{(>cIbV**vct$% zI6tQE!^KnkkjKA&LLYv9zkT>A_MtQ_?8C)V`_O>GK3s14kgoROYG*<`?8BV)jWqpx zEE|&)^G+!D6*+t8V?c9EC0afkYqy zv;05glSG2Dkw=wc7{_~y&LAv1GGq%qnbLaWBb!-Pah;*16HF3eK-wh2_9_jUAfY;K zkeuF2Ab6R#vM7b5u@?XAZOU^apBOU04mXgJe0Cd{~r86%xY!2M<7Sg9Y@kh)Q*CKIX^)tU4o1E#qq9=fN;zlZni6i zGr`z8!uqX|-124?f$rux>=3xZYn9j19!NZkK&knen))UKeoqGvL zq+?Ky|_w zD6Pgs5b8-{Sm<4w@W#q_VL!t&m5Z^dt<89eQJgWHhP+zRLusc|QX?=O=2iMQ>ce&U za=2$cuX-8Yj;WUy=B2fgV=Eq=9Km}Xjn#l@L0gSkMF-aVZIeo0xsR;+IXGFxa|_!l zH)6ypM;(i2;#GSzUONsA$C$qWP8@f}^5uhh3d3*{B7GYd{T9_*BX9^3NN3`5e3_GU zZsAb@UA`9u2wl#61G@YPfr1)ldWGsE9U=sE6rLZ;CZ!(9pdP>h@)KT*K2-fTEk9Sp z!IPgti(u4P8H}2Y7+$ja=hP=THqb2fNd@(Rl#=y zL5~e&Bqwk1AM7bJJc3*C*d$!hwUW*N{LiTiNp4jG zlERH-4RiB&R04>#l1`$wiZ#Qe12X;)$caztO8uChI)B%pEid6b5z$CO2w3QcBoHI( zxSr1wdNfa1{efn(WD60(0|;$~{$@()Qdlb!8#1cZoYrVugW|CbDCex89Mn@Pn3t@T zeh1Av2%1)SO;Uc8Zm0Q`wHWGjmEy0hqJ|h3YH9QvxM4+`JX)HrU4>ZBve4euQk2bk z-U z3Xtb-C3XsJr>a&NcIhMRTU_+w5wA6wd&?DAVh2vZ32^V4WF)V6z$?H_R;|GxI8<{s zWMDyFDxlRV-^g8uYaV$NYthH<_{+J6s^*nc-IHJPC|Ge%e!-)V=6Ld}GEU`Dur25_ ztm$la2Fg>%qSG~Pc4m_>EjDUmk)m!CT=HaId>3z_LiLUs8+h{*Ivc0tGVvrX$YqTt zcT1Y88}lmfW7kM0dxWU!MngJpNAhKww_j)ZQmm4iFFLc^1OFP z`8xY9D%YfZU5oepM=|h4PbB9mSN<;obiZ1Ibo_JtyGcc%D!1KjZMVd8Bk_3O;2!1% z(Ih!d;`(1r=|$&^s+Qo@<1rc>X-%fl$8P`2+L}aZ-5dE$(gOqnhBysIxcL-De$)EF zr?E&#B~qFr&&FI+l!r5^{25gJAy!?mKzTJ%efA+~i^Jh21P_^&1OW@#sNCW?v@nw& zGm}U3MKy@!?_IxljclgU0g~57hgi^ z_Iezm53$jhYOjyiB%t&K8(sM^FSQXp-<>XB&*?rbi;HUjZLKK3i8*lYlEtXG+R4gz zMW>F~n1D zXU54ROs-&IAzeJr>t8r0xnpp45}BcAam!G~ra85KFa-(LYl-}DWfE+H1Zf{v-0%KN zFOcdn;J`Lkwzx-@ip^%Jpj(_?iv@i!{XEySp8wx0Pt|Gk=pu?s>^m>^Vzli;#OYw3 zhng^;Xu8f06s-Haq}!ET2Yquo;p1o#J?jS@RkW_HW&=P2*tH|f6FaR0V$TwnV^4jT zm&(|)#&+x(>`5efY(dtgxbX4L;X0}zYsjz0%*j;&Wdhu-Z9-f- z@6MGzWsOXq`gph;>=gd;G78%;gYjkj3AKAG%#cakA+Pc?RI*t4HGi2eX_qC8uTA)G zHengq?crST250G;K*L}gVgCW!Ncv3s@7!D!C41Z0nR)$`P#ubk%}~(Y&rnGFrtf=A z?fEclUB9o1A|W)bRoiB>KO+s+WD-BMQ`p^su0aIGwo=B=zi`kNAAvC%%7Jh*WI(oZ ze4E|u5G3pVXc&$iB@DNlp_BT6v9T48hNVsQ*Nq|P#d;Y-w#?28Ci5h*u7W0~ zKz}SAI}7PHaE|PN`1%smuks#NQjdBVx6#E8)+}%GROGbd!i96?gSwl8I8&;}k=?D@ zf}W%rXEEXzg@0CP8`J9=>BfG7GB>hJ>Es+}LVq3-ezWEJjb)Q{sgg}55O8w( z^}G?%-Jy(!aYcLw^kU{B)8mJc>1irX%3#hfSE>U{Hkax>zRZ!*UN%AiweF36?6O%B$-de)*&?66INX0 z@B!S_Gi^&Oor~q6THRzqh4(6gQrj&IWEqU}b{E@nD3FF$nC%#dh&|k^^+}hlUf$LTU8m-t7~l zv`kJpugpxqrmDOJ`9N@Nl64z+cjXm3DM$u|&dj~;wepnJ9)A`Z7%j1Te`dkDtUsQlvAMza6eqT{NY@Cc_{9DN{ZlA`rsc?F{R>fgvb-6;%`=_Ji{Sbf z;|IF^g`vz$$A5)}_?N(Kfxis5BW~Mn+L{L?z6=3qb=qHyd?7El&4o2wfoMCoLPdXJ zdu7f+F&K8(hW?Z3RGbm>f6t1eeq75OjN|#iID!sKR^G|Rt;VMR?^aO!0E$nh_IAf=!vFx1tE`wZf33!+jOwFR6d=3mtzU z`z8?jp!ob)P+&(~%R>vLz^?}dmX5Cc1Rj_>GdbY#3hcj`XySxPoRGva zN|};ZNp~QflY|wILs18G2-isnL1VkPw&UQCp=M!=S2$l!9>OegN1h4}8RSRt3c>~G zKX4}^9XId0;2Ssj&BT>MP>er>_Pm#{%szKMuEG`CzfkG?jK&(haZ~qMBO;QAM_`}c;B}Ld4(jhNL-Q01mDt5J( zDWS6t7h^Iu8`&+);pI}ZjM1I4j46j;e{{4a_59`R(&+kiBmp?S%ZlP3Mc@7o8fTg1 zMqIR#ZqUkJ$3G@$rH&cfd7-qErQ3Egl_zQS9C8`T&T&D{*VZBkOwBPm@!C2#vLCz< z`H)ZT;(pFi`HY(_3CWY}e;G8C{@^IfZ-c6706Y8F!L*{|l2c)Bny325AaGdtE6Bk# z7L`McS_ddL|9Di~5j$ME#h^U$`o`gImO03Z4MJqaDhZ`Z-40fBaIpfxwo`akh>vDG zB;~JUuA+8<%aG(?3Pe>ul+mZ5xEjZ(pb4pwViIDT!xu%@8c3ek`KZrDtPgo!6@v?O zEzfIVMD2eI12X##pThHsYY><_PiXV!xu7^ zJZUa>LFCXIj1E1)*-^*lD)72oX}=vCM)D+`J#+fBjVg?3Oc=wmU5{9fzkp=%a<|u+ zpkK?uL17#NLbK7CSyaxt0I9dhwKzrl%MeO}m+tcOl+i%5cGZ z`Px6;k0au=c)tNHBHoLOZl)XHJxHwz5^9U>zIln@IcsS9l4(3i8O3wnGb?kgB&{&V z;CXYZaOI+w6kejqr2K=ip$F!A4chn@Wl0{amiRSM7K-EI1*N0&B_U#MSG7at`9yFWi%}= z_LFu~3T`p3z>8Oxj^WXimy}0pam<_yPVR3+YAMIgq)plg^8JrT8I-RU(ke~u2Xj1L zxN`G)m}BgY_r0tQw~6zRrwUBA)y*6B?$(WW^TK^DZuh2>YGh34gY%Hzr5NjY`7X@K z*=zgG25zLRf?7PQG7gv)7;7mNQt4#*dx!>^llm4%<(HH!6%@!bCRhYSGCMc54Nin^()}KW0 zlumTqWc8z{N=nx}|MU3vuVm0rW9k`*D`_<;^y4(CM8{oJls)tf;t1)46>uvC_dSrV zA3>Fz2@b$ew~{AL%HM`^z_$^}DuecAlCa6;--);nXk@v2>crx)(!y8C8$3Dj;Bq-kj(UX= zZga3c&pCt6B8`WmKx`c8&ADPT9)8ca;3mw{N0G799^cuKNFKBeW)$!jTXYe0^MN>< z*Jj(*I@0=~HR-`+$%4OmA*7*;^gvRYpDdiVd11R(SZq!x2p^-dmcobyoCZJ+XP99H zU`kan+vn#tXG<3*`!;1uFN1nSQaG#4xEjDhmCf1#Ol=NIUy>f|335%LRE?Biq-gf3 z^2ac+^E;baKq}Q&eipda9Ng{Map8(KG|+57JU^X_=3mBsmA!1vvo2VtnaT4omOP7M zX(m#M-`mxahE=q5nV2El*E^4GPo!G3{ zk*6z;9XAIE7u(L2b{k701Ia%O3#fb?&X46T7zk-%-t`y-1!dH=#O1}0_N8N^q)6!Ar8*CRBbQIlyj_PpycOzjv9rY^A zZFihCwCgm}c#<-@PX8lz85>Xpdh2=|516eh;60Fanen(y8hWmV(RN*MdnhVEp9apntvcw;AITors?NSE1)E{8~OM`nf+1pg`L4aUd_0K(Xip6Iw6=l#*!H{MpE_IJdcG5cjAr4E+X{r^(7Q z@!6ml3~ebEbO7aQv!8av3M2N8gDZMdmm_~8v#7omZGm}d-Y9P=%}R$iuwj521P;|# z(|Vuc7yCNX;}Fg_btKvogS^vrC?@>_NwvQ%8+$V>l%{mtb)D^u9kj%}OIxMR`8Mga zQ*bj9Noy}h52C-0V|Tu!4hHSv7Z3_=7b8h6gIhBKf`qfMNJEv^v5N7-_4q=L4lt8$ zz^fOJ@akmPcqj0K;2(PKgYTh9cu>GjWwf%W9|5x zm<%&8uS(-)>`!hOd&y=$W6vB9F!u35u!5u%HTvSiE06pyvEG>1c}w z7opc1@jzh_JRqO}4+tV2fG5V!Y4PA<#sMDCRXhMriAOcpWqfhZ{2q=!&Q5frEYR1Q z<(Te%mgD`NYc;Lse}j2P*W+&yKprUhQU15-+aC|~6|6t#3UR@#>U8{jSw$g5&@RIL z)5*yqZJ_7>SIb(<((PKySf0eywHBxs_bWs~Rn@QZQ&jaiL4ENuzl7*_anE*qD&G&C zYV_5qodX)b4Y3D1qDuRoiZN9kQ4c)02NG52_xOaZvDpl(UGD;dYOr!4G`;SHSDVhK zyPwYAA1_Uldj1a^`~Lm|^>!KUQQhFvQLX3FNxB5F8+4KgIM20M-{BNLVw z4+Ra6*BuXT*bR+EM1Y0}TAOW&`3t>+Y_f56Ab+QC6VyY!^I1j4-^pi-qoT8{&risPm=EFqUrx|a5i~1{BB~(q^ux(dJ+gOrq8zXoUP1o)7-Ga3U z%pkFMtUYAqH8tcR@|riAw$imc#5#Em1ODI0YqToRW0by&tR-R}twCN>Vc!55=mzo{ z@mP7yEDa2{KnZM=*Gx)ZN*j&5hS5CDR^&C>@9VG*@K5^e8q;TV(Pt;o3)?|-Rq;|R zxlL!J>=_yEY4y4-Lsp`2)2Awh-^A-V`@@ea`vCYMF8YFQFfn?d`j5nBV%Rxj}aA@o>+R$80 z10A`aV;Y-l39~c{z2K6^lE`-{xptp=-f549XQJX;Y+qw0jU-dm6|s zG?@y+r=Nrn`7N{gG2$xIrW1Juo*sH|(BOFnJ#-oBfyQzE(G=k}&OgWiLOv)X49<5Z z=vLd1xVe;s!UPX*DKY9d&@%KCE}t9vs=UZh}yC70`17?41t<<&$_vqhBSBwr##@N*N4i zo9RZ{%tK3En;BkLq&ch9wYgW@JZ4%cUY`dQwpo2It!wjZr>&2)`SYgDI5M#8=Wg>$ zf=h}-8E6T-8V={CxRZ)WYO)7(0^>xjpkTysFa(0vwldja&cp=VS|qT z*o!i`ZXC;rh(B5TuIFM0z7t)neR3ZbGAFv#1x!?#J8OSd`H%BGPu?3*G9d;LFwf#TV>*RH-C}T>Hxi7QDtZTigI;*^$CynHFE)rsdb+>oO_- z&i$7EwXpo2$87n;(8rM^IKNzl+5jhC%Sr+F^v%`?ehcn(4L>K!;l7lZc$E8EHObZ0 z=SvlRqyP*yLpbQ--`W)nG~qJP4A@h>1Ea$FG{q>>x|sJ`{L|53?EBcFZyUB>O^fW; zD+AcRLoMu92@Ug6I{l0wpZ5o8;z2%J0@%-keBRTL59M)=|KcE@_XTO(AfIXg`&p3B zyCeB54%)RQ$mjMTO(ppHX^?u4NzFCFjh)Cr!k^fR8Su|UCjNhdycqEBKw9&eKoavg z9zq{NmInG>8-WIgj0W)QFakh{t2t7-9vzKxu8yon+>0Tc<$Rxyi=<<4RdJq48{niX zH7|@h!#VnrcVzSlm(gc{8GSQdInpKSzSPM!C{a)j;TDDcdk4Kgo8mW^|c`ZcsNbMw**z zS-3Vaa&5Pcl_f)YP;o6VXvHgGXSom z-*4h~T)uTLbYs85S)YIY3MARa)cVD!`o#=T5|3}ERzV4ozcBY+hM`xIfF0c;6jpCxQo0DB=} zpCc?6z%~;0dBXAm>{W#Q2Vq?SY&&6JBCI=ry_>Kv6V?;JK26wH2ZtsP-)98m>~KD`WB73E`n|v zMKpI-3DTKF6X3%aj}u6_4TqTO{UXt|=k_;nu2RqPCS*=Jj4t-o6Y0giO1C=3;*81V zQbhMs0y6vNW-EU|JL{|seE}8TT3ObGeN9au1L2kDHXQ3XHr9o8zX>OBUEhRosa=bf z@_=L3JnvBH?NNepk~ON z%U2<+oXPTt6MR;GhN?>|m-?uoDUa=t@|JY~Xo|c7`9mE@3nLjN<%{l6M?7sxBwpn@ z61fg9*O8ojx6Nm;C*3t|!bIuCHiY>{pHPovpBRWdryhZO(`O37V0)t7Yfsj7&1=y7 z4m@6Kf}&j{L1}2WXjprsgWA)P&ibS6thmzkqj@~DqwTto9r7f08$lD|8&QXhBBG66 z^Cq4AF5nvXmWa*C#z7vM**FY?CkDHX=3D+YYEr$D14>%HVcRirzB5f6tqyc#>=vbf z>f>Q9xYeKwM^iXOWPgpgK`Q$TkgIK`- z`-2%`sm(VcXIJ}Ei`oDH?mCq>!maH@Kf2wLBX0e@la*`5tv`O$-ik2T>UAaQTFnV6VK1QEtGu9>`{6JYndM%!_b>)viZ4#t}TA&QAYAq`)y*F6wpq zo9lcMb_&9(uL2yJC9MgKL0&!W^xQ18r&+dGQ&2`y!Gu-_CrTFPv?jDty4Ijh9qn?w9>N*g zeSP)yL1^XTyRrDmLR^{EZP#QVGiys^W_8O~AU-jiy+~Jj2rhe)B5`S&_^PthB1mcs zm+5g`XB0 zp@V?=l0_Jy`~XoQEL|d^(%kbP?2-F~k^Dd|ba*=kXFx96HJrq6HyA*9y(lSl4foq! ztor%T4bYlYsrOx-kCypdk6oFJgP~H+j{|}(O|r-ci%o=Pyz>e3HGquaUv1dn{RF|u@5eD<_^VvaA-Ehvv+WktX_7yc zdAJ)`o*?X0m77C?{o{_b$iafgI%o_Jttc7lO234Pajk zVBZK}UkYIN1~57DNq#>JU~=RW7$wQt_j2SD7{$s8lOvyuQHbMTV;TI3jFBAa1s0Bx z9O(rXj*%Sc1s0Bx9O(rXj*%Sc1s0CcH-mD+G2)TF@*tX}Q}WyNzV<1YoCCGQPjVI}tlu&`sl$7BnFtiI1E{Hd%2O#A8w0qo=eb{}EVW_j_SJ&{EX3!1fEEAjjK9aM&~zK67uRu-uAGTB zP5-9QGrAcljoJkpfZN$k@8`ieVBPXIP3`9>4EwSWu>Ki?fIP(FL-wFVh$|Gk0lnN6 zBvxcsAY66@2AEyplFAQRK}nbXDHe%27a!$)z`AgU0-f878 z({-j~Z2BDOwO30`omv!nO)3Icik7{Rd|}cYmc-CFhQx@RxR_#3xdqfwK#s~DxXspm z{5I1!bb&4p(u?!g+9A+Gx3iC&@y{!43*G8%3R^?iOno>Y=bsgcZNv}$24IE8J^;d5 zjez$s*N{kkgk9}S&{6W^QFc16BN`%B!gFAU@E592^@8@E0ko_= z!4`$>l?ZW#qMh{eFvwWta}b}6mn4zKGmI&eR@!*m1P#!>$=;~W6vWy~{R%v~GuU1Xi>8^QfV zs#g@!&u^gvQSa4$gK7q&|4Qx}PYJ{@Vz>y@ek%}VzWCB>zY~ZuR#Z&*v_O=7;&U?A zelL*Ox*r|Sp8YRC`ZA@}t|vh7amY6t?1Y(6jV1m62gE8JoHWm>B*!0S9NZT)ac;u8 zR{L+np`9m)PuSv-4{?Cl6uN8xT~?beD@&JEq|1uYWp(JXK)TG-oO5tzPS*0iK+MU^ zWq_Hx3^217h6M8$h6D@PGk~kfEMd<8)Mi;kAUR?=bz*G-%<)eOuM1>t3};Vya@Yw~ zTf@f-oL=pJ5H5Qj<%!z`7c^LJX5fW;je~oFbJ2IL=qCS8j7!#;VA5pyZ8cuKx~9H(&BO(3(Vjt~Vk7 ze~qk3B5N+KH)2~7Cq``BoLY(dlQ9SXy!12&|0S4}$@zSur}iiGX=wqy8@U?&ncg0H zsqazy3%%LO7lJW1Lfv=Rr#W!@5?6xc?hnR8d2}tYi!RqYM&x0<0Oh?e;0;x8JQ$+) zG6+|_7mYRauP9fT`Pl*CWt2e(dr%Js$>%|8t}HrMlY5ft4E}TS!;Z)1Itk@%v8_eR z3+j}Pv2U)Bkkh!z-jsd`iLtPX(A<+OJ2l3a?G77>VQkHXSw@S8G9p_F@>5)4>S3qG zYRPP=tH@e1n63zCR5qCu`^cn+>tr30+3bKCCcQ|I(2I5{WX^+;IA919R2N4|jl{vU zCMXie5Z5@l09PWlugJ*-%JrG>Wb(M3CxJYWwAqI_4?vsIZJa7k>~E?_RtK6YvVXq{ zILJR84&B6Zi!U%DlW{TgiEYvF|7h*A_E$8ogl*8kWb^(TV466;7s??m-eu+qrmiNvvl|<{_8$WaJ|ta9PPFt+5=AH4ETa(-k|PU=ah%V1nreC?Ip= zMQGy`9FSb1x?cp?!I!+Efdtg;gS=x*IuJ`P)>sA)^;b?un;rj2j0&$wyoxt6!V_xn zZUAF(6R(Si&Ajp&34jh`&;;|YSFn^m%>l>G^lt_!=td~m-!r&V_Ra=9L)n75VMOxI z#$hodIY5Hu88jmpC?T<)6^J3jgfPNYMWIs|mpdli@(@x7o?&`0H<^~Mq(Dr%O0wEy zheVSVqn=XKGe}Q_%w>^61+fI7f|#`-b2%oB=bMk1?xNc`hhkX74oK-zPUFTthJ1HM z_7xI*`QZhM_s>JY&FEB?UZOjZ|4O8{3PdxUWZvI~M%J3pj?$jLS&c?Xph~1B5y-k9qD6Yn{L(pCp=WKJgoQ3Ug!odwifN2GFKR_ zUfYO}h)R(&!7L(Cuv!uliDFhl-~-bVFQnA1qR?@t86dir50mD=1el+oFQkd?K}4a6 zTxJ$>YsAaBc@)|a(q-7OIAGhEtj0J>gYhe%!9I%;8fY*OSB#>>Ri_YF)F}*UD~3jC zD>rr_%H4%Eq0-a`0D6=#2)>zEF@u`uIS2KH-&aB zp|cxkSAQmQB<*@|9oY&(c6z#X^hc2nrBn|n>TjgGs&WFdcl;bORJ)Mu^DKi_1F>51 zAsQ$OlD0dsMR4U_oF9baa@R;J?w~D7PtHKYyfGT!viPzeYH?)`9S%mV4PSR%8(HmXZlkP@c z>PQ8%C&>=P^ueCA1d~{(Kgpeoh-43!r4@HrfvLh}k6?h%nbG~hjlHI>E_z>Z&OHDw zZjI;ULv9DOIcP#2S-2}H9OP+X0sd#;9}iZWhH@wJw$q5AU=Eo+j+af#*-C zd*BJ9-DjyUTHG-;aHBP7a=N4jAcMkG;f$1mF=*R4Xi$QqTOHsiIpd!+14;KlgNFT> z*@yxiw{d#PX%Z8``pfxQd|DQ3PGO=4-A44lb231W_5$b23vu`tq}Fq=;=rZowd;d@ z6wB~S?HM?-BQ~7P2H4Y!xJiy8`&u_@S2~D?v0tJ~t9uFSA*>}hul2$kIZlt>6yfSI zIrcoJ09TJOiARLeC7738y~{Ps#(d^=0ZKE-FhW%?-WDc3~MnM6WU3gmJ|TulbG}*T%6f z%;E^E0SYMM0vYrEr5JMmP+}R!rh$+BX@i+`ftezTz?7g{UB)!eW8rdZeP}2UWHubw zpUAoX5+(&sFo3Rv{Ma61g&xyH5@V>9DmcP6kcjm0L14}B6d;NeAi2meV?RxZUDK)K z`q^p5m8ploi|{H>%DAu)9hW0fPq3B{^6WGr2O2T$%m14(GncB4W+&3t z6*5c<=S;JJSSEx~x|xG^W5E>#oP+pnI0gsfTlw^~&B{N!!jc5+{yXlX$Wc{_vCMjb zNMV*)FAymb>n7utg=T<<(E<-+s3&rcVRYG}7*)}{SR}8_gU6m>4$(7=dG`Qnl-D6o!|a@3 zs${b4;P7h>CHGEuC{dnRAvU_k^2A(`N!=iO11}iVm2b&QsRmy_nUzfKYH_5rbXrQY zFWZbfB9~KFOSj?drh0x*OPboQ2vf*4FBvb;myAW*3DyY>=RIW^18iL?CFPkHE59?% z6Ut!E@q(CiTEPFC8(Xqg+j^MR+bw^ZTxT3In5!zhf4>ppAC0cyo-A=b$zZHN>;}s} z0f90MuhUaoI1Lmpe@CHljq55D4j~{3n%C*nx8e$B6r=w}p`6^eVZpp@@chbxIpG4ck6ud+l`s#BdcR37u zRZx<-u~3NISP=Dz=6#3EuiVN$k#m0KSNM#ORuSvaDY0c0i#-x^C0J4B_${!UmK;@=ZdlXeT-kTg-2@9)22a^^Chg)91qDy~i z1UWEwvCpiAf@JS5m2AML&{eWs>84(qX#yfJa}Wb=#$!Dg|F>iOUB4H1L58xf-v@Wu z>rj|mSSY6PX$+(nFHBv5Cc|W&e=b@J<6)o=&%sx+SePS0u+M4UD3BN(ap>BoHI55f zQJy`Z*{;HJV{pIOX-}A_c$fg+FGY5mtk5QTr=bAd!)m2mzYFf*D{Y-Rymr)TR*#h2 zk#yX4ROf7@Z%-Ec6^QqebM5*(LwiaC-S(g&>GrgFK_Iud#c5Bsr+OrPDQi6Im|2Q! zZuC<^>?pnirHA6Kjpp)O@o49KO)CmoFaTWx%923bQqub{X6cGHsW> z(v>R=-#m~nEWEk=W#9qx%F`ZO99JOLwz(-O0Tx;%7YKY{?MCw%h5JR^wd~)%4MUO9 zs&KLH^-_hlv)@AKz-l~K*CtijaE30~d~8<6nkOqvUDzKj^~b%gb&0jEcRioDq6an( z=-s

    3TeJ^?;V^#Rh>RHxfrGrGsHd<|M3`gIR3Zy#L+SRO&Zyd8VP=&ADP61_l#0 z!Y1ia=XAQ=^L+YWbThHz)+@QCaTx|a7W5wKA*|Ket6f*Dh`L|0`?lYhfCB8r_@2!rT`VkeAgGPqx2sYuN) z(8Q2TVZkEEwCtv_az*5cI4d$R!VECwMdE_4rw?r zR|q@6fm!jE_FTfb>B=}8#A`40^X&UN%lLGqt>7O>IB+P8cX@q07HH#zsadYg9jV!IB;6R9E`xR7OU6Ec_K+{7W#mUE zBj*`S*?>&UEP^PSYcvj!i3QcgVTsW=;7}11iDMAXWY?OD=2E0^Jt&tpcR;IPt-DFq zIxJx&x&2Z*5?R7l%TaV>3B>byx&|s6ho~fy0wMJcf8_|o=CG6sMh-Wcv(ZG$v}Pk1 z+)!<FD-kAU~;Q~@X44-66Tl5ep{LtoC3GCdKA!{*v$!5l8ldGdApI+JQb7E}gI$i~Yct}{aG z=$ZM(*tV{wP7Hkv=)eXNEm#EjNb%U+fbW*R-3DySj~?z!uq;u>+I|u$90*?s)|bEK zuA&NGa3^N;A+MQ_Au@f}=uy%1yje>_?4{Z1cHBr~4yYfMy2O6N9&5WCkLQj)m}V}K z!r60jE4S3gE3PKF>V$1!;2uk+w8IMZ=ug@c$N=l8C%Uv#_^)hvJ^z)E2>&%WylY8v zBCiwSBku+}=S!#sw*tD2OXSs@ya!kg?dIaYmJwx7uX2#^rwDCObadD5<8} z(P&v90}+nXF@TtSaKqB>wIZNjfuP80Bx&O{CLp5FOV|1(HtNVT#Bp%h&!H5Bv4um$ z=)uOtG<8~n1k`nH&>7dVGp6+OmrXy@ZS3bA&(Y6P*JSK3rmg`ga4hP;TdOO@^=hl= zCTcIB6R#a7(0J{5xRF)T9n1%40uvRHHLVV}@}i#-2~9*Xud6W>*Z8`EY;)bXX!m`b z^Ryq|NN$N#&?rjXVjHMIM48^e@q94M&61*S=0&cVeH`23512x81`~$v_2lkrBtYgag4Bdel=Ja zBYW(Mqj9t$rgG@$vLL$5h%OV;Wku<-P`b8n60s!qnVYc|*2_v}&9n4-C@WzeD(g^L z3H{1be>>1o>oC|$&ictnt$sXAC@Ma_Mq%|d%Bv*`{S8rALoMZ2i9&z06t+mS_>zRv z-;f0xuTlO-qR?L#+z!-I{-iS`zb`kIi-WSq)PT+kJy{`$pC)4}hz`L>|b>0J_d*U&o_cwbEK z8v^ec@D}$v<9C@AiY`{DsmiFkxJ<#KDdt9XH^2Ws=H3I&&Z7Dozqxf=LN>eE-4v1# zl5p9Qwv^CAhft&wdhg(dXA|0b*NBRs1O?HbA_7K4iZns0A|gepQ3Mnv6cJFQ7sUeq z@AsUU^UU+yyV>CT^Z&m4`RtwNoS8W@bLLDtb7lsI?!{a)*Y`Sb*P%b zy_|u^;@f-IimpPUIOHtPDId}}W<=Eges)p01-b{d1keC@h4~{yKV;J37WU8@fvd-| z`&7VlTeD94H~4C!AN9)WK}de|Vn$66878 zM_u_cF6ubrX~DzprM{m4CF?w$>}Z&|FJiu<=F#Xqm~ZwXjwEQ7>@KEY;Lw2Kv>4M| z#tpi9B@%|g#F%u0Ft%3XyqGHKOOf|59k(s9qs~Y%8GQ-!iSAK#i|NYd*T}AkbxW2) zEd}iN=!&)E$gX1lgDCD9HW1b80OY2b*VmqAip*+VjLGbMOh)FJG&wI{0mhfFWQ73i zpN5Zo`6`0P+Yo#x%7&%5Y<(O?KB7F-ZR`b?f5~~!>fZ@B1Ibi`xYtO?K@Ld*#*p_r zNvE4I)4!V8LtQeeZ;P}GyNohD!02j|#EWEXT1>RFN#aaPB_#+=o21}~5oyZ|iSgXl zUDbT&0hdF%>9+VoW^xs6(WX+@GvG?k?0(uGRgOZUxsF~cKx9AWXuz2C976}wjz6;{ z9t(hTg}m(Zgll!G(ZV2|Up9%NIbIs+>d&)^J=7Hllu*HRH+$DxQ zlBryW$H`n(@`f5>IapJSOP68k`n(t9>;UJce$k|HY)Z3?)?^Ei-K?zGRr?A&ojg!XuN1@?*z8BEp*Vzw%Q)H0G5i(Hb>#dt#+ z{kJ)}mdN0e1V_F(hv#fA$tQ*~J~3#5Pedd*5nC3W0591}{Tb5(-3hqUf~xTE*q9LX zRJp!8(cQT2YFoE}rnbB(SEmPV2#mDu$k$4pNG@unUO$5CC|p-{Q|+$G&xIwM?u^Bn zncY8`@oQu87>s_-!Tskb!qSsapy*`-KgsgNikCis;Qb9>_!&|(uKZ?)ZJnU%G zO?O6*kbJG_&cpOr#pa{T7id2a+DPl!n~kdH3q7!GZYy`PD>)hY>}vBC&tkzP_y~A6 zVfd+^FoZ_Ue!j4+vmXF2NQyjRRIE9N7`GWJ9Fs9_6BUffN+Aq`ahpVgFmBvNRXyt1 zNjEUXe~Juq_v7sVzVJ_lD&IXl-?tCEC-zRv_w9=hvDp)Qy9g_mMRFB6ZVYc+$8<`# z{1@p%IxBEsl+>Cl|Aq-1o}HNM&gEc8%831Y0#|;59@3wE32DY_L)Rg#-Z^wARQ&l~ANLVt6CEaq%d$6SIl>?HDz-p4BK!Hv-#Ri$nD#TmG|slxK`kw8#`eX z^x$j$4ny7={P>$5%E>kd-nWl7czwho4JLLWdGnZ$R5XTvjCl~8f%tzKj>ia z^`%b_-IsP`I=9lb7tPyWVYckr3$a3y(y?htq(b8Jd?9Tu5;_bWOZ&zJ^23d?bqE_fhT=`ujR}mbfMqCt)t{9+0lr)o^ zr%^txAa6`u99BWNz&}9Pm;#F zqUHBV4kMay6;n>S!HD(&y<2U$m+ya-tBcQ~bkI7UN#^*Kpj&u^UNRp2pRNOC8Nrln zN-c{Bro(0`dB8S5VL4}3?m`afBO!uC8$-%0i5_m21QYtlDNZOjT}aX%1ikt2M=bp+ zmT6q)Qj2D<{#eoF76)d^s&N%ZXA5O$(c2}89;brDrKZk+A={>>X9?r_3K+WaZc)81 z*?(Pbg% zG6Qs(GF_%gmo?_*w1*(;{7cMR{G5E%Mh>X@3qin>6HFmZu@je9l$ z_e{r4sc?ni<8alif*npx!>VL34a~?498VQ_NLb2|&G1hDt0|XDev2w<$ad%Ok`Tw= zT_}<0HR<-xV1!llnmTsv1{qK5rR=?uHHR_$09U?&O!^&u>hiG1k}JYiu^|xkZz2qY z!8Ha#i7+y>T$IL&@P8|f75TmxSa^2lpFldmV{mI%9Ba!Z8KSa5K*=B`|+Tt*_uKgZ=m;VzK57VX>d zYGQp07G5=8O@t-!c(Do-#e@0e%XC zr21wNfqZc7z&*boNIk}}Tf*3XLg0p#iTHB`)eg%Rya^fHmf!!rY$`Zg^Gv3ax0v6LN+XxV*;(34_rv1^xPnprUwO;3*jQH;>tb@<4?0bgx> zO0b5B(UmNt%mt~FDt!ZkCA70dsCHK4COkiCWysN`5q*`9b~QgxZ`8GYM`{ptIKXteXJ-ePOm{guz*M@Y zWCutVJ@WwRbdSyskPH^b1EhkrR&ialUJ`rpHdgvnZU8J?`T;*K$_^0Wl{`67QRn+_N8{+f z32SR*Kg~cB!5o^*y57^f&VO9%KW_3LH~Wtp{l^da0lpS9{{mkrC)oi~B40^}d?g+7 zm1M|QQXyZNaq^Wp0$&G>ul}0z>;MZbOk-H#D~ZW9Vx%q%WO8oXz;yPSm?qVKt(8CU zXQF|nRd#?yN=PjcUZh#fgeMW9NSEcVI-550?nzFYpKlC2??*@vebX&;3YA;o_&(`&@cmkwcWW=R>gie1V6mr7_rP2SBW7Got=QOg z0Cu8f4o=f(XIG652gcK4mdea@^{Rz6?*IW_3{sgpcLzvq^J_Vfp*iinn7s|tqf3f( zRyy=4f5Mq=-#5x-+_UssW|vMkW^Zwwz|F?YEkq%{a*zI z#jhMQGHUFErF(Ei3#`I6DGvTVh>HWxH6ypS9Rc>XH`t@b*nXIlBqF=stj=f3yMp%3tFywE+`nsLEZxz<(r zI3`2>{sei~_EF4y09x0}oPt%xeup*2euve8erEs$(Efb9_2;Z?>30}M`W;4+euuGa zmy#8kkV7K89I`^Y_s}X;y(5=1rP8(Oss@8?hYTS)*!~o813A7Mpz!Qx{^K5gm_YyBqvgZU_j;32A{x3-}g{+Fved458>hqGnDqqFBl2oIc6US3As_~ zklF2?mmOekImR%v9AlU}jxo#*#~9|O2TUdv)-|($x_-mz+KZM(mAYnJ9e^9+5s2&( zU#2XQz@$YIm^MZr_bdWb*-W&%z2s|65h@K`t%e>vhL=If(+Gys40^#K2fHVlC(YD} z3Oc9k0GS(xL79n4gdvadz@^U*?&~5Z5R;OMiA*=PijL_*Ly)V=A40HrG5r}fD-34O zyTOcZV)FP|24MYehx+1Qyti^XY1+F@=NQB{L%(GZ*RWN zD&oGyIkAT16EC9bZ&*39G1>?vD)q~gZe)V;09;n%pvOO1 zv%lz?Bi*z*>te>K^|ZMVTgAeia+c5h8)^KI{jJ`w@D@3($Nh9W?`w|py3~;{_eU01$5%VdBw>I-)XQUgFOc+YNTnuSu#0sgQYno#q zkF8)FA)OKwRPsI{w*>XtVSRV_H?=lKkq@;q*&;K$PxnSAU`=*1@Hf@0#~>$A)eB>s zMO4{YL@_ToEhucvt1eKiQY}Bu=xIfbYbAV}&SttY>mB0lWMK>Poz>>u=`=6ql@gWz zjCW@szFf)s{|N5}68ZUocYi>ON^|Su1>Kwe?=?222I*cdQ^^= znz3A>*_oZO%5!_>bKlaoM>}sA=4F0Fc^0vhIdv}noSALwbUtR`*U&YqM%$8dYD{fq zI)dffnpUpq><@nFn^|D|-QJ0FUYf72%qB;xT)XNh|A3-BHQQFcMnBs1L-d-oIk|;( zu_**PSq(j_tOntEuD1@aP>OMclbeTXw7H_@z~ygDW}}@nf7DyHA^ls)H(iFXY2&59 zw!S=sQpc7NnddRb=3jIiM_QQ%{t99i4H)=qg4Zwc@7X*~@XO}=8-h=q;(a--kN#}n zlLYs)xK9!MuEqT=!CMXFvNd|hz^4g5Yakb<(K`nIfnce}=lL0e6AWBQaF&7365QIr z=Lqg=;PV7eFz^L}pEmH11ixzFiv*9d0{)5M_s#buf_EDDGQr0Te1+gU2L74gxS75P ze<8Sqfv*xg!oa^0{DOh65xmC0*9rdAz&8j!Zs3~$d9#6xR__3Cs)u)pN8NKw<4LQR zF~=_>efb9M%5C0KU!NJnc?b_Ke892z-$}yv17u&s2BNCx#yfV+StA)WHevRhW25tD_>SS<3evRSRX8da57d@7?;wL)DNOAQNebvA=fbGkE59wS= zDd>L^BDJ)`zQ)9`wuR#Wp6;AX3X!U&x-KFA0BpyoQL=YZJ;zU*+PvS&EewW0F zAe`BRN7v#sL>it=h7Byl3u_l`+~6T!bENl)6wbIG{UxbPZVm_KQMoyl+%^5{$}FNH8IYl2J3 zn&47$CAgGa2`(j9f=kJj;8JoRxReYDE+s>3F6lfAE|q7&rSdGeRGtNw%Cq27c@|tM z&up;KO%N4TNr;RK?pETMA(eZ<-ANo9Y=HYIam-|ZyN@_#GQd6k(uhTa%w&Ljh~b#Y z0QW26L?aUC#IgSha4o&Si3%o;d+^RkHx+Ii!?99=xN8x|MjYVg5XVLw z;I<`>jX1#VOB@?*zDq?ZUn*TvOAWg=2>pOfOx z$?{375S^#xG6!M4ejDfXs}~I_)+wOjwKgLVyGm=r*UYdzG4Hn-TsBzO$M=e2bqE% zSZ2dqqvC$L%EqtS@fc8g84$Qrg5N(x+afeRfgqqCv`}9?wz>WzI-!sImnJZSN=IOjNO%>P4ov`Q;HT>+k zWBlhvvrB4&(TO~5jmWB6;mUhDYI7q{%4uyLYbznOSMGqY-SIKxXH;GoUFd%brEHit zSsM1!_?|v_Gr1qKu{5@~F**V%YMY&oLu|(*(I#xeOCd&P>+Ow3Mc|HEZ%MbazJ;r@YGf-BFU(a@qHX*nntg5~HdpCETXg@trBR`# z_7+?qG^*=ZEmiX*YjcUemDl$QqxO30RHaF-{(A-#&aiF=W!iZG=F_`E^p>Jv}{{lR4YgwLa zyc4n`MWD6gf?RiNP9x~00;1^Zo~2oH_Y6R*HlnF6`mRZLU7cPTI^*zyoeK=gJSUGIBl8MCP)+*>>n7txoa!Vhm7MiTXJ>tQ)zS zO2fFC5gmM;Dknv`Nlpc|mJ`+mh>`W>huI_$SZ_U@dr7;K4c;+x7xKB9nJdb28JiKz zf1A{oW=+3Uj_TW*iX+=`%~n13U~vEF*p_@Gi`D1 z_nUlb8-u=OfUO(Ljp5cN@*)~ zy322HfP&9==ZtlB!_6-*;};Kwd*E# zYmV!R7{*f}{JnTeW$xp3dIWbnH=m+Dto$pKp>qM=x}e=aET)~4a^)*H8-k(N?# zv%uAr4(&dq9>x{jN-`jf9cPiw&3a)^#+Z{2RHk;ViAhs0jB!}5$z3xssE6JPSu$Od z>n9)Bn@2-z!xV^7W@2p<O>h$f=MemafpY;4@+Ue0INf{@qP^yEa?)cxdhjPYJ?XK&d89~fKo9;b z-H=}lw{#wU#Fi;>KH@K!sc<1r7j_lP2;zzPwP(VjawR1_b)4u~;#Og15g%0CNYl$@ zPG_azFLAbDmFL9WK?2E5&&24{D78bSUo^4<3e0e2VqF`)0tuECq^> zMM&^`MZ&<6MluYSX!e)fGa|2kE^U;d^uWz~;1QZ7ZvG^SH*7R@wL+-?aUEHdPPkt9 zx4cgGgI`?PT36#bQPFqkp6leylr41W{h($8RUp|B4MV4&^=a0`l8Q-t11gU9Tav-} z6XndSu1@Ku>+j`Z>JK#7H+=y2UY1*oW84XkRbEfz^e?J;!0WiekMc7}uCggIJMU6Z zbjaX>Y&!xRuK-I@qXWcEEqv-n`&~*HO#qsmf-c(siKSTCzF8U2x*DJdIVq z1;NefdkJIw0zZ}c#Nn=O7i3FjW1zd8EH9yni<(4Fh-krJ0jw)72 z6!$zy`ZUL4S?SWBE~C+9{^&9~UB;7stuBLW#L{-)HcwZA-h7foyVo*L-s?-0T!fIY zk7TMTBXFV;VVI*JOgp-Eq7q@4+wQ4xf-tlss=fa^;BO)%%M(%?uSE>PnEeCg^$L`k zf6yV&jMLEp5;_VggVw8sv>x$!5_ z#$I!6jBeb<^m3?oq>T;zObE)&HikK^{CP=p=M*MVoOeXB){}{u=K{gFW1=(#tLy}f zKNW$qhvW1_!)}!Potf(kJYl7luLy~P#G}YcAe_ZPoRJeY=0rFH8!@ZVwaj8=QzrVQ$;vJWILM!L zb?s^%siE={=JCg*tn6kUDIwY&9x`51_rO2tTi3&0~p(W?oz;D zY_$G7BF0Hrha4{tAM5kQ{!FGGxZ0Z~d(e@W+1I!^ZP6wmF;3zp3?js)wIWeA&koR) zVzqvl<9iN-7qghs9Ui24~WIqmd|iWvc`(=(hwz`=CFIPd{M@ z0eUJByhO&3(pDH$+6sdWImW-`ct$tPv!-Eqc9+k->v7}~wEd8p8|QJ%)>)WW_6Ih& zE02MKbEO0^7D^x#R(#jV*a;8mQUXc~G z2A=zDP-RR3RmKQGy%HOM;){wDG+cqDKKDd9??*Xf;PTK5_>}QdxRHP_j`h-wv!E?fOdi`tMyq+xT0VONEbyp zli+&UC7*@cGew7yo{p?;E{@L10|?N`E;*jzaB!XB`=?8hhrYz>c%C)baw9K}?rcAo zO+m#UK@QlJQ~KDg;E;K`+RJ;O4zm!nC)(s5i4C*|AQyQ#_r1|WtU`HrRCX>K3R%_D zC{Xsw!*@{2!#czyeV zQe)RP0mre^RoAn20sCGqCqpoMbaN@!T!Y;=KQjxrJJewJr)%Z2KF;TykD1Sg<_6}o ze%O50=b)0W5{sLk`9iT~KH0FlH!DnVkA!D2fJa**Zy3MxvgskZVoc0*E;fC<$no;> zSgJ3DXQ-4DNMyStk)u2jddjJgmc}uSa@qYb)TEbWmUOBpSvu8Iv;L`?$Xh0i$kP7I z(qVbI!A-7NYiY{$l;noXuDWb<&~eeVf*apF5*Gou zvL_Of_gfMPjS3SQr3tN(Oz0+;(5M;-tuaJG$FW48$}gtdGP-%RTom7eJ)^i(&6?Pl z!lbZNPr1aJgT%UW8C3CjP~k=MuCNnaVJ9|^Sw4NuT7~Ur9#YcsHzl86Oi$@vSv5PJ zE(z3fxxjICm8br?bMCiFXM9!{35XAS4RRvTkQ;bSy0q5+v1(Gga=ZG>US9m~opZnCNDT@;>d#;y7e^2~5 z***WD-<+3?#-7P9FfY^n(n8-e=&v^7kqv`+_SS z@9|)(4rjyU@0XJ635C9uEE+B6mQSDP#@?_??&LiUoPp2&x;J@i&V1_!nUT8BtalEA zb+}uNMd_ZV{F4E&Ei1(f3gmW>qhBHQtkhYV)_rnjY9=Sxx<;G~wv%Q+E2pPQl`noH zn(O8l5cZd-w?LLhXG9YEL55GG%JI}3o*Uh7@{~DS72O28n8SW|`P(SCwuPe9f%_J} z+17fCLQnm=jtD3S)qse=Oo;6B#25B4^FHc$e&zIO;MP)L%>mSIy6hdzVA#x8We@7+Y?_XuIF z$-KabukYS4=66$`*k%jTeS^NrkJG>p{^^=G-`%CkC%trW?w9})_2HbxXvAiInONxV zD#VJs_PJvM$cO%fg$DbMMOL9-IF3%Cay%T_>&`*&A7-71;tY>t{TUhZx97=}wH^2J ziT*+s(L!h5-9aE(fwAZE!H8(oTkEm%tHpw?(({0lO6}`RT?wC%v+98}=E| z5g-vfGp>3FC}YTBs@_=&x{k*~+$Y4)3Ed14UN=J$fo_KTNkj#kHcCDW1O73^AdJ)B zXu1C3%0)L_uAQV@H`Xc_`+yx$x%_jw8E2F|I(lGI?fWofTci(p@!HBVw?*_;=tV#W zS}zHOhb4#w%LvjH_`G;~m3Yy?(nAjFIsL1a?Vqk}bkk+qUCP$DMU6URfBquM^@z#8 z>RGvmtVTPkw-f#H$w)bYT>!$B2-s57JX+*IZ9y%c>bqLA4pjAFKZ12F_93KM#UX_J zVuskmhme(L9D+9xRF*KrY#%}{V4mtAdH2&@1=}-{m%Ls?wfQNCA;Up&i$f^jFK7k& z>!q|rQUr7i%py7l=7W1sOpUv$q`?|tV7e?YT?VJi@N^lTu7n3Sc!$olaJlak*CVM& zJ(7$mn@KCt6o~Lmfe9o$iSV9GwHx*;bY(G~2uZ9D$$W*a1ucrGp<2tooJ7%0OVj}( zQHRx%DBGNN3jD9HhiW(#>39Wx{Nl~EbK!Lwyn@!ikf;j5f|mrzQ-Ou2weV@u2r8ydNPY98 z&fQ@C8AOI{18%01Hh3n%3DMr*$q+ZwsgAV?I}O{iM;SzflB%AFlcvuMl~m16oRniJ zaLSL3_h#c3`N*dCuH8*?WFF=K8Ik_-o@bf@m-ND1>gP-GfUcS}ldqcDn{>ef5rHrdz45(j> z9t}Xw1~0_d;M7U*=z~N>-y-g7#I0?(JBj-`anlUq ziCf2T6Mun|f)^22Hryr*_buYqHQWKjT})i3;RcBNHgR2s+m!S!A+FnS-(t8+iR&@k zfed#UaWf5fC&PV*xLF=Y9*)3mPnpcqTsxNg*=^y}Rk0l5%fCgmCj95(9s=QhR_%;0 zL6;~Y`xfI)PlVh*sJQrqP3Lw}eJ&D>lRLK(Oy6j%YV_iix4rry`aN<;@jmxCwGyDR z^DW@;RuPYhQui}$EhrkxRLM$a#opm29ty)>^d7?MUh7#bCV!&RRtcNMFPKMj(&KFN zn2_{1$2_JdJ-$c}{-o`HzGNOL(~Wb@BW1d=j2@ERS;;icqX&P|d&XZjkJO&=SB%s~ zNmA$2gFk6f7tn)0X^*ecgFk5xX-MLcN?cl#c%(`$O-ejcC6{(39@{6gD~(G$c1e0j z3lon$lOEE{#ACmthqN{EI3(#I4Ng3cN_t4E6OWUU9@6y0V@c9O+Mjq-k{;3s#pCly z54Ob4eFnGW?Fq}t>0|lzU1A~2+;2S!F8^dMGNPb!5xVKQNQI3xyW~nvS0-i`)9t$j z&9Y4nj_Mjs!mO4Z?Dfn7*EhThZUyEbYI~36Zh0vZ;&~(W`$N{BZ;Jgmhr$WG%&!nH z*MpbfNllb(4PC9yoboJCY4m3$b*%1rapi$}^;hsneOj3qJIB?_5prTm!EmxD0Zjz0?mFZEX_0mS5BObsfGsqwF9> zBG-2wN~t$P^8V;D?~m?$$t_o$g|X=MWbdwWi^P$8*y1-N#lLbZ$zJDHs@PcnJ~JV= zL1O;HczJBh>t4Tx)nn5+Cv|kwQujIJtuy)=35mf7*hoU0!bob6;ac-@hOzkx112UG zM5O2C9HX|%=%3ch4G5+6awET_UVezLfVVf%LwI{Lzl66x!dK@fvjexm^#{vx@{Wuq z*?CLS&o9vA(p#~U(&e=ay?hm+69K^yCdvDLU_9K_-^g_)QLY>pSx`d^)Op&dm1kJjRlut2?@#?itVvrOsk8SodrGi8YA9?abr*vFBU;5Mz}Q z&k3D3V~o!A)zw2ZaZbmbXdM{1$T3QgXQ5|nL0zxm22g`idrJ`tc-?2ce@!4x3?97 zc`2@ujeXj~8LK~rC~V_}(5;2?MLs{&eEizhZ~p-gsxs|a!2CAiVrX2(=uLD^(G zTJ{MDVW47ve>iA7&aw&(*V)f?i$rcmNEhT+isMS6mT@b^TyK4yn0$;}ImHbH_uDOy zI4g=90P=bRKx-%75tg-bHq(^Ze1YzRplJ#JuO7TZ+EcJ@_%RTE-Eb$r!*zq7GwK?F zarKJ<^^4J?%l64E8vHrF24{25d^rjo-AvrQ#LY3>FNpgUadQp#2jYHBT(9BYB<_CV z)-zmwU*PT|Zhgab5cfE78yK#exZe=Bq2cBe_Y86K47V3?PY}0};f^KlN#Zs(+^2|p zfVfQz_Z8w+61S=0E+_6O;x;qfZN&YSxXlgsFmXR4ZVSUbN8CNcZDqK3iF=5+Z4Fnq z5V(hlTVS|}#N9>QCk!{6xStZYm*KV{?ia-EXSjvLJwn{UhC7kCM~OSka7&4MjJP8W zcOh{rh&#q`R}yzOamO3($He`TxRVUGg185XiwyT7ala$(RKxw9xTlFb!*EUe0rz|2 zDu$av+#iTL)8o=>wksi%x@P-6o1}X`*4Atk=%LqaaidAB*(m$TH5)O(noar+Se3|M zv?Y6SITH30W|cqbC4 z@uQ@N^lswulca}qXX0^R(nI<*@pvTZAsv=@JdyN}UQ0ZlNqR^V6^}n9J*1tA$7@Ls zX{_S$UeZHa>;ur5E`5d#;t_taSJm?&o1oSFhU4XudQ8ny@1VhUx>V}Fj!ilGH>d_X zYQYsnXn(oPHq!c5fB#AJ!p|Zbw*SOyhAPi7WAPzF36NJTMpuHI(o3k|Jxt<76-f`b z>xBH!wtNe?dOwYx)KLrYQ7CKWc?8CNGq3>XSJ7>amLElNm%9_T^f>Rh-e>SowL7%X zcRf^pi*ej;g2d-B4hD+Rm=|!3Fbe6OC-V?`Hx&D?Me)S%J3#NGUo28zR!SuBR2D|na?(5<>a zpMga<7+Uny4CbT+#U1I2OEj5n;bsszX^0?RcUPgT5!Yc&wl|R!dRQ>{|P<{k) zb9_^TA^FY(eX;ade;dC(6}<)LN|dWJU+X|NWyc*5}q@f zt+W|8)WAayi3-*Ywh`v{!JZ_adPa1rC3QpBmgy;d`C2d?CJi^h8Qc`w3suOBEA`z7 zjNI_jlx;j58)bn!7Hl-7u- zGUQd1&TlWmR>LiAxLKvG_^9C(e!b?lJt@Nz82U@Nal!utI>z6(&qxILvNxmo%gs}^9@dPLb9+$TWf>L;9l0V3^^JBHdKu0Iu$ul z<52G9Rhom~T@4AP=l^(H1>@-XJ?To?TT%Nj!U@Au$rXwZ69|&AoeJ4frc-x z*rQb52FBjy&Q&CU8keXSDy!L57Tt7ZJwHrkp;3_}rHm=brg>aC^_0@l*9{pnpj|0n zLVg|ZFHq1cnj9-%W}3*?7?&@)>3qF1Ouq1X=yIeWRT|`{?=m2nAMthhK~gO)DZ1&T zUK=JU=}$iX{7r_Tcfb{^FWK>am)tzwcPbSLphxU0;uTNr)Jw6b27>J4B$UaQ;-v=Y z;Yy6Ryvmod0#Nj^uIO~rMSp*oqI0ftAj;1_pJithvL>JGd@m?oe43;3KG1HcMI&*e zaNL3`e`8UygCF9FSpEK?C$1FTWD$pACJ3!;;rQ|z^+-=5f(J~O6H6wf6HA6AcO(S* z|ANf1lKmZH38xs%DMLk{sL>=pGA8zn54t~6l>R=^2eJapQKxEMlMMqejf zl2;w;e;beW?I?9(tk2Ja{KeAz4-mkJ{ZBYtSLHKjfzBbZ4tOYgyu`itE`Sa{s&Fc!i1L`Iut=J09|kl8&SNXQCxb5FG}l2nihUfOz2nJwhG? z^-uew4sd`rmvqzhUr%NXKPK``pySg#@o$HZpHnqBTKBpmN4|d}f4+P=jrb6lR@}qo z=e=WGTWoOi-^Q+W)vII96z8P|It@NxSDpK6EMihoRI(p|YzbhgEQ1oB$*2-H$%_*= z<^qy{L7@R`@Y5v{f$1^~kIRij!-hu)Z50Pp1Z0!cOi)Qq1r@U$QsHcet|D8xXGBVv zIf*;?FZx|g`{j0ILvVPYn%GW-WPSu$OxgJ{RjGKUX!9dUF`OR}p?yQP+>Da+gr3Yu zqT|?Sa9yAV4~CMVpJU`w$%nM5^qn2Gr#|B_N8h<>?jwux$_SA59WRXZ+|2^-QOdLM z3YsHBqB#l{GEb1QFEIO}>iOb0-BQEYDxr-ZjFQ+CB*GV2rqHRLC@)FtMFu&h`+v~) z2`#_ylkrt3V%Qt+S|i zqYSr~;npzRLc@(V+`)!xHr(ywaC$?^HpXyAUWVh*f@?9{Pc2-l;qEisSi?PJxHjOT zD~z2T1Xmb1p5Q+WoIr5ecAobW3GQm(ngmZXa1z1G4V+AHg@IED{>wlPI8k|fPkC*E zyBau+;9>)35WL91bqL;VV42`c2C_?tns)G%I|HL!=^l?Kit_-g}a z6a1Hfa|q7Z(I+&Q;BE%?5WAYT)S9yO3pibQ`ma2~;_3q0kG2<~j)#sp6> za1(-;8AxSB^q_%!q9l6Pz|9Fx+R0Pig5UxJ=My}|z%2=cf1z!R;^I8h8biym?RejQ_XaMy#frKw!M_-|kl>_UJlFOk zxQBuJ6Fl3%0|?$_;6Vi6Ht=AAGj{c)4k5U|frk=2&%nb7-ech51m8FCNP;sy;Yl4u zaDM}jCU~BK#}K^NK-zLe|1j`4g0pw?q>d+ew1FoOyvV>439c~kB!b1=ecVqH+|2A)FjuLhn;AaP{Q(oge?d|A4bUu4PB&+v=IUwS5f zq8}idj+~z(_?&^CC)m1|_dT270t3$>xYWQe61>I0FA@B!f#(vOy0<5_jNn28zfACK z1HVG>HUrNm_=VEo9%+MIfLo1ckpjzZU~NM|qr%w_PZ{d9gh zD=--Rd>w?c$Oeu=_vN9!(skX}h%Hq9hpEUK@*5evtvQ75G0-H+JXM(6UK!DU`0$1pGtoB$ni zJMz!Bdb54&qWldjn`T7!keTmeTZtDp`+J+~>-GEv=m}lg743nzT=RRiU!Z+snxbcC zqBePD%#@y;sA@g?U8##oXR~frv7n1@x%m=idzEj3Xs{wbh`4V6mvyQ-@z;6q_9z4Y zbos8c`S#wHJ9r5{za^iS^7CT+ z!1~f{JZc~pprD>85A`bFgnOa2iR^GRvFCZDKL<+jwR502%!`V_KTpF?!9QM5!2O>W zVI3!_cdct6v&mz|&X-y3YK;CtNf!Id;NWKOSGn|J5$Q4_T`3%rpj=-Jx2j$kK}w=J ztBIzw;;tn<11VOr!oaG~SkN)eL}(^HNFG;(hSHm!L1?!V#kJ4Y$S3~>A7uP^jmtV5 zlvM`5bluC!99#oGZOcA|-6ZMF)Q9QDJ?7>V6yIY`b`nL`_n7k;fPBiP_Sn&9UItQF z=6;7xp|YF~^bFq>w@|rU++yW>;+85`h+9|rK3vh!zo5nOZ86w#ly;<@XJa&GUtg;U z^^1hjEV!k3paYdG`E5uxU=1x<#3Ly@gc*dE9Oova(Ncii#57vUlUp;5mg40mrO{Ga z2poAu!DG(oGAneMHeDu0m(=N!99@Y|{;N)pESp^Kj2+_+xV$B*N%g4HJF?}iVrU#* z0f?dT*eZ;n3EA?tF*Gq--Y$mL%$B#0p-I{D4hHE?y~@Ovz7DCQo8sh$Zn{U>1<_a4 zr9bL>q#vN*l`HX+9lVyGSIOsf{JdH|ujl7A_z5mamGCZXLBl~3B@pwO%iM~5hJDoP zr-JV4)Y{!u9yG)5Y8GHTALKhF=BaC*fh>piV7wMt@~AzSfXwQUJ=jtT0?E-O9lB%& zT`eU0u?LZURX@gPgDh=TUxR*(o_TSm>%tyKSm+tpiD((09rM(+PW^${jzm_s*YNWlC$p&ND4FJ(`-AJdk z^24D$3+kyd#5;2N=ZC~#JF_Ab{rrHp8|cP5Q>aoI%8hJF81=`PtVaf=E4hKp7UUvr z)@Qt@%&^dkq2?Ic+0D337RF0x3W-R}8N3a_)A7E-RJ7E@zQRFlrglWRauaBPQ8&{m zRDMJU?dleB3zb{Nh50^Qr)OLN{tRKh|QNtDK%dvDrgs)N*D(1k_iW4Y^I`F@gg9~VyJG{ zcAYfcbSHhxFrD<!Gigy}+9Fqeu$P`Y}3%$_hGY*1uu~bPP=1Z|>K~<)0&k zibVF+CXG_)_}Te!=(L5T8xZHfctP*Im-g9S-WIcRO$%*+#Ml-{f-dtyI~lraV+o{Y zjO`??n@|EG2&5qGgi)=XFlr#>98-y^mU28mA~`FcMJ`tHeI3Vlx@o?jz1n>LHIfG3 zAE#5O{Duzr{sdgd_hVIb{aQ)(^T)5krd8N4RDFd=$0Z5)olC(;TCN`S)(A-z%w=qH zo^j|hBwg{pXS_WWz;ME71{6j!q+GoG1Jbql^>;)N}6H%(HGIuG-g^mS7VI> z<&D@O&_#W7WP$caB)I?lVd@*qW8uj}$;GY^I^l+ZB6_H9=;`$RzOSUm$*w*(|5+Wi z$?oive~aY0HsTsYRvEt|D37Xi()VeC6Qa9Ne!Yt;U49+odd~4Ss=>9&$f&-5Gcq%9 zww)bjdMq9jqRSM}W=e9FxN2>}(5W^^RL};MQWyrK5s4?lFqJS2Rv$zKVG`>J8wYwO z`0n`+2p+v+J?=9A2L+cpp|jFFQYUntHILK@o#)IWbwcNP^GKc0dBHqVCv^S@k9Zuo zgu+%m4s<#Bq?_)KE*nNZ&(k)_%f`p-2iEvA(Jvxl^iF?b`hW3bg|k$9hi!@hv{&z- zNm^iE++JSE01_4Qz<`tsfhiaBA@7unSk=iO)=M*7ShHv_L{-HILo7aY(m_WyuoXQ-i=b0-5xd@zLp$sB>fm)iVcDB}-< zruakDD)@8V5d4|x_(M0%pBq-6Kih@;c^z2+f8KyoB{v*RD-19cYvgJqi3*l5AXy`D zZN4yw@rB`1d?BiuFC5R01h02yUrQa^6DT#NvrdU&~FrXgL;F&G+Uwe$Y+xjS?Ew`%UdV)cwsLQ<3}ts=$>rV_UKSQEo^rSh4uOj?<;Ujj4r zu=_xZAu1%LOW?Vxf?vv-iihUMRCuanXRebSx@p<@^)Rvnv;WreuNWv8r59PN!fwnz zkO#=rKbe)(Xrxuf09rZibJk3a(ztK7*guX|=Mo<^z|gD-frl827{>Zs1`L@7{u5Qr zG;3r}4Z){g$0xdJK0UoUeEMCAPv?bv`WG?~F8KamqYa}p* zLC72-!gjfllhJq{!yv{RhD#`CiSU}aYry+hc%BueRLRbIjwf`}Jb7Ulo~XgY^9<$g z_vH99@hn_vBD}^;@+Yf( z5>QT#3yvyicOa{MAq_qT; zCy#(X3Z11>sO0FNPtJ>5s1)FW3FN^I;DyW=l01+ZjS%s}&;{VQ((^hH={iYTxiWsv zoRkhk)@72W-=+*YPsxMh=bYK0^2AL;dPZe2^Dr8ngrwV*nAYxI6%nf*+tzn7MmH^E ze;!80PgePv^>hlA1~}TD{*&>% zkwpA>PWpa4w*)z!8{o!ZRa8t2M|Y=n+nb%fWUy*9XMR=OkOmuY^>{92LESPVtYZ?Q z%cykYvX(O6b9J7ue_=$)t&HD1tjq$2wTN+qfr47pWWq40X{H>633fr47eBHyKVd}7 zjEM>(CP#KMQri89%mK(h|DrqCSBn0)3BJ+m296{+b${K@5QHuJt_!`<`A2zpBoLq;!doYfm(${#^eqc;hzz!?e!|3&aY z1M4;c__Tqo1bJVB2A)FjE(5y>K4#!Ng17fA*KWAjKDfhh@%e*shKuc-#~UuTbDm(h*v@&P z;o|cLYZ@-LeV$~v*!Fp{;o|cLQw$fMKUj-6;X&$2->LNAPx``}wap`?PMc;PDRtU( z^GK=FW|&7xowkm7q||9;^GK=F)-{ig0}{8?behLW$*W9wzo8azNz$X+JSs_#9`i`u zIWyBdmL+4%GLNq%J!YH7lw@}2m`6G3!HXF+yR(xXz2-45>9L-9%ujl(Zyq}&JvK0p z-I5*~(nF*qRkicz!Jo90Y-AoODcRUOQlvI9kCc>b3J;#n-PjG}bkhTQJ$s92A#$zP z%0w&I$t;qWh;$nKpe@!n12x;}lG`pe7mPa)DUUX9!4xsxF)Uq%pey)0vP(8`IiZ`* z$r_TAdyo@NdC;e+IhsN~&1=?O!=?ElnXj@A}V$~&c;DfnKgum!$W>CiUtr2jLKS7_qjp5=xeOtrD zefoBWi~IEL4Hx&-I~XqRt9LY9+}|!RTzuYZC*Y#usfZiai>aJw7sMZ@g@T=Z9fOZTKNf1=R`p);L^^PtMfy@;C%+|s=ngg?7vB@RFTvdqLS=5^NVW9gO};G2}5Yo2D>2cR8B^jlbwbcx$On zV9xjxoeP{Y?L@4 zmX;7)_!htCd^V}YgUJjUhzSlOueeYp(bbDgs&s1Gx=heb4_Q5uiJ@&~(6%@Z?*y5B z#`N)CH!~qRXe@0CcU>^Z0-e-b5N+R z^$fQYGF$l~aZ{pCe<>4ENGI>i*=nS_ZzA3H-q!ym^0>%g8}Om>CFIW;%}t0tjV7*n zDDQ;xF*;y~`ce0w)&_s&{yKmBge8Uwg@w!(aG%}P=nsV?XIb>5OW#h|PvkTEBmPR( z%K(#=ideQ2s+sRLDT=SiGD%c2 zyWE%TL%LP-5N0n_IzXdARG@UwtcPKs(O_wUFo8ycWvZUXBy91wbFxi0E!*p@o@^hF zvcz^aD$NbW_L;?E$IP*?YR@eAYMbRyS^xQ zup@D=;g5h(fbYtG>)tx&J!#h*QFJM5Ck4@-zhn(Pe9AoH2e@ldRtx7q#@=+1({dQhgAA;MJ#0Ur#Eq(MTRJ4qy-=OEZfIiEy^_zsWBVLv1 z=Eg_x-8W}3fWDatqQ03B&L@y0s-3ik2vg87tr`aMLjsf|QlLu`bcF^=*fP5=vm9>K z9EcISr`jBbMo2_y?-k5)lyo=~!WIovON3#v-IHQ!I6+2K5T+|Qu?t`3FYry+gC@oR zP7-;~7~Ql?9khBfbshSy7gI7dVRb}l=(+iVgk2AA6yOLv#PKEU4a$1pS`@hkML!+C z&b-r|B`tZn+4sq`{d$CBXE{JDJ4=pJ+F9N}FLahW`UqlCej~A~-&tbWvkKB;f5(oS zAC=W09d?!=E%8T&@wKz8>c(CFvKeGIvF;!jv%ElC793<+0lcvl2)RQu0kVQ`p)!X$ z&nacDtkn)kFO+Vq1&9h|GoHFKIp29Qr9|gRg!g3fiO!b@ZCgGFbC!rtM56OWGnVYb zWtMDy{3n^KF)unleh*b)^JAjj{FsY(KR>q6oF7ZSkQdvLmxLCx-cxE@CO5(2#VI3A zgpnrNk*0~CCvBlg8hK?=Wsdjol$K|?d8D*F-!+evmgjQwNNIV#XC5gn&lTp8((-)Y zJW^VoE6wAer26M7^EfK$akY7T4$GiGDRqr`oSXFc0X(QWg6WO)&~(v5CsaqrNDsX_ zs-qv0T1s^!I7pPZm>JVm)sf6e6XV1#E*EsuTy%QFexVTD@v3pb0ebKb8PW=_fDNA8W(Zjz zFox_w-6;qVrnmNW98$I7;;zKC8U>YJdQ4^EIG$E z75%!iV{ro}>2+t@a5<*D4>ccodz<=y4KhXDz8tf-vfLQmjOr904dIBx5-2 z%T$Yi~djJ}f`pObfS#$ae+q&R!X4x@LE!Q_h{2_I%zg&mI)e8SZj-QZDz zGst4Rs>69+K65$TSIB2Ig00*J3Qp|0>vYM6dio0mPP80~qJ)&qJ^$nstLWZ)= z!~(qo+CO7U7+U7b!y8S!2$^N)Y@YK3ucguG(jXWM^MyM&WZ9z@yE%r^4H)_v&(Qy1 zPghUt-GS5+oj~PIU`!>Y3aN^O%BvTON-!uY8oWdbjN=(XN<$A<47TfgQEvW42cimf zJLks;G02}_gYGB9@h8CDMI3(u+)oV`@2TExxOh+XXNHUSRPQldY$x+`!^L(o_Y%jS zAl>@_;)KPLJzTZW4XWiFUo9f%FQUAE4&?j+L|(O=5BWklqq;e{J2$RZe*GfGyQL)O z-cVIDg49%ee|C3Aio%7I;s=?jl1$Lb=K|rrmr>vPmI0&|Hde%j?<~ zHq~jwxzBb!?b}IQ$OI-=VOFt(B%v(YmL!Ik5?%8OqPcg)1(S?c(A-+=i*g-v3%SXo z=S++~39*_yS~e}BhnJ05RKAWo$+|Is7HRC@#E&_l%dF5P3$$-4WH`3|g>@#rO?A=` z8)E$y35k4@2=rTMs`8kiQt2LRuLdeY=gInHU~tpeWoYA-hd=@L8S?!wv#_eR{3yy7 z$xD;+(xY{EqWlv|zP}TU(1V=r>Ex7dAg5ndIR#@F)zo{8r9jZ48A3`--^5tGm<<|# z(Zs`in|=gg2KkeoMn7sEscH0M=8>94uP~3)H2PQYka>H>&D*0*E&X4^FFMk|#|fTm z;BN@tX5bS9Uor4Wf};=jMR|(g#s>bD;IRh&j^G6bK27j$1AkBOZ3F*6aM}@`@-qbY zF>ocpvkiQf;ExS_j^LXHK2LDkk)G5G1Q#0kM}p@X_#(l(4g3?qcMW`rVEHId>Scm^ z82Ador3U^P;2?j3&hRe)JFgym6;8tP^fe&-qmh5*w|g{_^6l@@Q_E9E)h~wAFUF3p zM#6*59Z2&le6#OT$ZNEMHmD;8EB~Uqjb*PR*dTwR=YUhYi8l=QSHrz&xW60jEyLxH z_Ho}f+-SqSW4MWid)IJf!@Xy?^$hpE;pQ9eZ-(31aDO-4Lc@JvxFZes55p}o+&>NX zDZ~BCaAzCt--f%;a331(GQ)jjxE~lULy-_Z-)6WGhP&5rS;MU`T+VQRFkIenuNbai zxOWX#G+gEwUq>awH5snXaN`YEZ@9AI8Vt9A;TjFMo#C1cx2xf#SqKmIG2AE%cevr! zFx)2%H`;J#7*3iVJ%Z*whT#Mk&$(I*7vEFdYPc^Ny|ISdWxVHAo8d07aP5Y>$Z#Eo zTW+{<@h7kgpJw42EZlU%jWOH|!;LrGI)Ky0G>Gt0se7kx` zzQwwSIV=>mO=SgNmUt+HV3oItH1~ID(oNUZk0i~eJEO4v}8Oyny}3paA%c>XeBl>U68YHq1TxFXrPggNO{Ax!-!}#H@b+XnI8=~EAh^6DjJXzL zLOdkFA=)izSi5DwL>&{6sAKTGs!k7bbxJo~r;kaU-aK5L{%`bwvZcB)GVCiW?gPbZ z6LyBSF>W=6db!VYhQFlz) z>W&c-bw|Xob$5uXJG$w*`@PiNS;N)cBFHKKhUiO&9bA3y8IOIH&5?Cqi`HER{#(F5 zU6qU@`l_+W3w8g#5&(YGBg|Mum^=&!%%VV2VjQ(aeN*Ivl(Z&gvf*t}iS{)a z$cKflDIZKg<%3@}*At+Da~rE(B9s8-VF%=qe@=!I;d3jv zomFna6CCA-@_6EIbaX6;DMhCyE;nGxCMVN1S6*J;5_w@dTC=2N{Rz>oW?5R_Yg=e% zKq0w&fAApOpRsgHL>WAoUt96(5PogVuS5B@4ZjZK*S7pRoL}4FOKmn2YmUQRz0ytB z>#I_)zeX8#eORMjIergj^e^UFSg$-=5v)KyUN4|_pxYzswR-_s$5wV=(d6Qt*O=pr z;*88cF|Od=(me&ZF%MimkjSv`OPQx(Pb{H_xc8Ex{9m&Sq%*J(bHVzN7u_L1J zY@|-tDhmLzUUHe!|J!_I%ASulpOIGPa-n@#)_x21m~O8X~LV*j)z&sGqv z{gZadEVA#UEXv#`WO*P|Yt+wCu72pI>*ph>pC|u2^)qJp`q}y8)X)4+R@aXbs9isC z_}q$P)Ah3u#3Bh%T|Yw9*UvjrKSXK$kdoC8(P90t$i99oimM-?TBClBcJ)IyT|WiT z>x`~IUTe2=X^%O1%NU=**qI&&I%13M)gA}rqQuHBD55DApXF+6S75X=>!5-vJb3X5 zcsUJ8iCJG6_rxCtwWmb${V#ZO1@y`Vy%=3cpxzCR&gC#;6(iJ;=@i413J zQ;_{O>P%vL6H<_7Bb&OUV?CYF3D3O~k?iTJ`nh9VJ<(0q(@3eOF@3A3C*E0nA?j%8 zd6-4GE%ZONOaf+SyJByEehKpgo&^m zAFDARW5cFhJKc2swn+Wnv+DZIW-dkjzQ??(zP{!>`)D`M=Glema*(0X9b~n`5WJ5Y zN8mENh`QW_q$|54-(7g8p|gfN=E2jD?WVyEf-NDvVkGDQVava z?v9C62V|0AKv?P!l@4gf7OLkd6dKkq-E{qqm-^iSEL>$j`(K=Imp5fy?u8=xd17kS zou~ia@YnhFMCSOsSkRUu@4jIQ8PuYLMs<-Yt4(0e1Gjc{7H`Wii15<7NCxg6Z&j$V zHAr6*8lmSj?GkvvhkyFQ=01q2FKq71uRgAU7V>KmzxLzT$^6=%UlG3!;8#Dt4&>Kj zejUWGCHy*=U#IZv5PqG?uS5BD8ov(X*XjH^9AD87$p^WiGs9P~h7AAcG|PK?Y9rgGAKq2UF`}F678(x@kUd zAbdXa|0bV>kH?`bL-1J+Q63L}<@3B0pPvl*OfulJga&^JlFtIy<}-sN`OLrxJ`+*R z=Lh8u`aZ{7y5McXMqqR16mL4h>ED9iXT{z0j!*cL9?mkLasu<}=08+Yh9Rmv-wq3X zB4Z9_2k3H5Lbq>wCK&7h;*R=+{|=J50j8=u^0=cu5ugr3EA|Z~Th(LNB3Ev@X_?xF zq@!a0Fm3n0Fm}mVo0Cwa*i74mIC<9QMC8_5t5DD_YmFA%jz4TPjRBz} z6%K$*SXmqlfb^6BkiKT(Tg~T_9iQo@`Mi_xdFgO`KIVUYj-V>pKIA;X=gJ~rLKZ)1 zOyzN=_YJ~~K_Y9b(r929acr$ZCg2tE!Yg{Lf>)8_72Pzib{AfaUObFU{R=Peel7b%uIEILoVjcU@}iAzYUY689*NdbkB1u$2J$1OosBmrPvHh`R1bA zwXCl!LGimHCD@X0*2P3^l6*^Wc#_Te$|Szc2x8j?BY@4&;o)^~} zcGj&yk`IXn$wENw!`w@|K0~OOUb(wBx8nMAQ@WpJoOFscrCiXIGyycg8IY(%1DuHn z(HG-bVFL_v5x2v?OS>UOZ7s}*t&NBdTMH$@uZ=89+zz?#@`2D}T1t;uGYB16a!$1v2R3Z%1Nol}{644I=#(J65dSr=f z-E`Aq&#`Rf(Z#5bRqDUKmXrtd^Hq9}|6rd%N}!XQ(@>zqfGyMb%IQGskkl~;YBAk$ z&}j0g&KdA`+YZOGB$RvBaUl1|>%S;&Vt>G~e%h%X!dNfq<|UoPHhig2hZxz*u_f9rCir@eh$(hSBkZUn;>&gc2;bvJtHk zT>dOr;)T~j%dHa}J2)m$X5)PmrYn;fCM;aGk%Z9`i!`CfHA`YRA^$(&WrgS4PjRwG z7qTa!2%B!Y{Sj*{yJUN`=k8+v$s&o5f-|)x(OY=8RtAulaOJl7X+edGCwM3B@#=Ds zMp%l}Der4`zAXdasV;kTebXpq`%jU)91gm*^MX3b$vMg=;{H`eDR(b3UpY^_J0dT- ze2V$DN6}!ve;YchN<~U@7t#vMcYI-U6^Rss5*o!5G+coxr$u|`wTuz8OO9+dXt?e* zO_>XIJY(wf=%UT-nqZ#jdq^(u^j!+}>T{XfQLq1u%d3jGd7lS1*x0Zuo@`H}83Cr? zzw7_w?oHt2Dyp{ep4;8Gx7lubrh8_ROizG>W_psz%qRv3tBA^r;46wVLAIy}s0{WH z-&fi@1{YLh5i&-NBp_~x3JNZ$h=_`ah=3c423cfP!3`A^{?Btx)xEcG&m{Q$eZSxL zefed&s!mm%I(4efsZ;Ac(!pa+k8{a#7NyjV2!d~6@PN$pf1x+wJ(`?;?RF!ePJ_QA zyQwRkeaTpi$PZ;{6}B?@~JQ9wwqN zPUS#AdZZ_93MxbjO5!_nN$Ed&>w;BC0j7OQVXQ|QuyjO0k^W&dvi{rjHM-WwdNVs3 znvv+}5(Qn!2AVjw&@OHnTbLm_ZlGZaiVO#eESd)GOZ-h~gujvZps>3_P$W&z2PoSI zl2Q04!b7#gbuPMAcp%$U%rkEn30m`}1to}eOD0-%Ys1Z5wVNIXE8!h-O`Neos8g59M!uR!Jl}czJL)@cnsBrjNnha@J&HPEXQ0B5i9(CK}4+Z z%|S%$b))wq0=7q6VjXO7=?@PD{o#X%tEbMe-D3-by9B`xF?c`_yokZ|L2xUB8-w6B z2Db&liy8b%5WIxJp9H}VGx*macqxMe4NJyH7+f0!Kg!^-LGWV?ZVZASXYkS>_z4ET z6$CG1@PQ!sNd~iTwgp|z;BXN96oZEa!A~=IY7qQPbLdzuVeV+?_S26E&l;dBPe{z%ljj?S8MzRu**4e|)7K*o zORS6WGV&}-nPok*(++mz{zr=;hfFbx-ePNWrS;|Ohi$aLhplhH+MIQ!N!wZ*Hj^o4 z*SA`X*IQq{e$3k}@JZ{76*II9-^>$UyKi5x7&h?#hGN*uw3u1;jrvDGku;dJm%@HV z7^@wDb-e>HW{$v~M;Kcn0y~p1)2P5u5vn)4yOJCBdL@_si)2H4q=MpVeYh8egJn(%4+sk~x-k;TK3qO8sA?-<%A) zn*L4`@p%cDCw#vo0avqJgMjFVWa6AA{5peNvZ}lOok5t{;kt~y{-Ey#N%8iL5qV@u zh-f}K23aGkocbW+9Zc> zvc5;HPZNI~iDya6EQi=x7Nk-vFpjgc#20~aIGtrSg|SBU$<5FxL=b_UO&AeGVAm2x z1OkKbvJ@k{8`+!(%@W`AS8-!v=4ZGuq30F?oxsSrP9O@S69ffyLM&aV0X`9SBPOQ( zFPWST@;0iq|3A5KH@a0j4i;aoCox8>zd^r|_Z#T9^8QT(U|S^6jCcR0=Kg1VYQ?L4YYW@RNZ+YMD*my_cTN%p$tXD5A?u zaY6lT$l)^$hv~)z_3DK=tT&afVuHv=ZL1I2EpV=a{Rtf@*ns^O$iO!Kx9Oz)8{rr| zdPoz`t-91XmSi#vRS5Ij)w3IDc9$%zl(TFxsEV56D7!hn<1ZWocyovg#2J& zxSk0?AB&+Y$Rl(TE_5=&&>1dBeb12cc0&r?I4R%W2`Oq5EOd8JNguO^-pLd9N*zO7$;2yw>#1Np%l7T+50TBk1!&6o+MecV z0Q3EsmD$XO_pzRQ0s8slNcVlDtFF`)#81w;Dg@)-;5&LGk6My$iZu&o^D&+-6F_gK68oc`PYchOMAwe#Q|__n2izmr zaPP};?t%a5#NNO~87&7Ij>Q?#bifk*2f)|5%5rc7%Y5weFlWA*1+>Ort+-W%zA{vAkX_ek@IoOekz5AJh&w2Z$! z@V5{C4#nTG_*a{ zzl2MX{!aj@y@g1)eqAlI$N!YD*K+MvlHAGQE12ZZxFGBQjKLQ%_#krlKWA{iAb1yp zqYTQIw|~LlQ2iat@UE+zgqODsWyLIFqnmZzN1wvpsi%9VO-I@j2QEQHK{oe3mw_d=bm|#CviAjqI4j`5Unc!l?k}4Bif>@Gff=dx3eI_`FAc-`= zN)BO?Dq&RzRm%798#_}YeMu`c=@d-AA3<7mOa}waD;)lV$jo8y-KI(D#>bjJiF_|S zYVUZgkrKc|JJzV)By=8aN$^7260INNauV+cPX4PO@f@gfIi>y(a?kRo9=_4~Fk$?O zyh-*5Vf=}}9t~jOJ7vEKVBy=azYSpF+pxbQs)ISA2pNwdNCo;H!&ABuG5Lpz3GHvZ zr7Zt!bC~a0?TQ_8|8ZbZ4P71^H8!EVQ?;@fsB-yK$M0F31^F84Q8zT8hz-wENo)+7 zQYhHVMA-UmFjdb}N$7a-N~sJZi6D@1YYdb(k6X;%s;-$Mrmm6SNxab3eZx71Pju1u zm6EV$NkkOo!;sWCT`iXT12sPW=bgBMknLK~#$_tAV?3^umG= z7cr9IYy-y5CZly{lY-7zksg^d@eIjaFwT_nH9z{H`f#(3qY8DX-K^s`WB0>f?S-PP zIXwIch--TX!9O!t3sn0P3@!;`|H2^l@=DcbaUA$7f;5aw;lj1O>)5HYZ!c9JV6wj< z8T+EJ4ki=bNM9_FiTtLmBllQ9o|y}Fx|qieI82IZmf3 z5B-Fx*(2}K8I;tc=5ABMh;a(85w|(JZb*nY8vWr9b7)SXhQ8wGk z1pkhpxkGl79dPAai*^^)?xC)Ip$@aUyNMGQV&>AdyPG9882H8#=n^$;+>GqG#`!17 zqWhKLCv!%ssVJgpz-3~Mq%n3ThKchHNp!8KLLe!!GfPNXeMiFt=uFDDo}zD->3jLX z-Zo8+UGP_1h0WnN(MC!Gum3dbi3x>v{vh-;`?!SWeMG;04tubi3JKMLBtP7$-0D*S z3Y;%zoa!SyqHlt7Al@kt_mSU{S?Uq2*+nvS(hy)0RTohNoh9%!j4Gk`hN1WzRaQ6? z{SYa;x+0UIHb6L7!_1YAK{q~F@4Ay#Kplu!&%o>tMkid{v1|~v&SU7)k$E%F2lE($ z&B%NNifEbzMrO9eEw($;FE9g_Bkm63gW8FzN&>>#LD-~rbmO(F?xc3X415nJJlvW6 zDUc>-wn5vbsw0GjgP%~4@}*dCg+aEkgd;T~Tx!G!QzQ0c&IrPOjLyoA?B|fkY4A7i zKFsK@_tyPZ%t$q;MoOHM;jsv8otZzYYkF2H~ zVn0;@!e&-SD_>SRlbR2eCc&({lz2EgvDSk@?aH*@(usG2_%`+zF(2`apg!}bL-wIb z7augu%No6C1Tz+n4ApM~VLODKza%Nnj2sBa;ZGD{#@h$Ad2|x|hi#dX<(0K~cSG z?Q_LxMy3$R0-A;^_PhT=Sx(Rf!8@kf1_!w@&i8!a8F5|=$xal9l^3^4;qki=3Iy~C z&P2NbA;)3;h=9_Kb9}#@a6A-0mIix5kcLnx)j+{wCL*f|rYou07c+_V^YNVNBVTGG z&k2g~ycT__fM{E|&N7;~&hqqKn^t-6MPjGHU&uQ)PQ>Kvgo_!p{NY>5ayrg0A&p4- z8ge%XjRhf@wJWa3tUVmTz?oEJ;k4!?)&g!3nw-d*yA<_J-i`(=$uDsdK? zRA@?}Xaiwlwn+P`Hsf%IcLY=mafiygp#6NjF~2qokS(e+N8fDCkDOViam6_4FfPiup@O zZrFg5Af-?+ia|D@q>7Amgv&_Bh?Z69rOXwWO*3ENXeThtE{N(X0(0 z6|r;wq}UqFr61NI3jzy+VDnL(mmy=5g#l`9`88ZfKr0=D?|A!zqzOFcor;&jO^IIA z6w@9^s2*sOC8rl5oX3IQ>ENbAmE{z$)ck6=#z6nodV9G&v$E5K zle%G<*&sctueug><;PV%jg86`_#~3JwXV$RFT<$aZUH86XaT2Rg-cK?2(zv7? zX2`o6m~Ui}EBQ;)Ujy3HrPI3VP*_eR$>4uF@mAo-fad7@P3Ts1Snn5fFHmx(`_PQ- zwI$|*=tSEQOw@9!e$6-0f3bZetM@ya&Yor>8&(-1$S7^pN!x2AQGKbNNoD^)>4}3d zk1H8=$|(;aqfpxw{f_ixmBwy2D|Md!5~@6zugOF^qgP>myxq$PHIWrlUP&@#789eU zk6>q$ttK6n+nfx{+zEt8On!YDd9w5ID@xd@&4e9l=pyqvYJ)kUx(M>j-hr2rzNU=G zDZxMAzDG{km-f;)x|`NXXOJfw$ztkw_VymFW3f5QaGR_P@0A#SrSjFm5O>CA^^ZH% z*P%1ayn;RA3{&3|5Lk`}fWHi#I`eV_rYUN}>!Z=8lVox1i+rSPod%cxbRg+WtxR>g zBSkD}!o|A8dgx(2`hp%f3xu*0;a9+6ECmnIN&CCd!3xE$bW{E^38wws#C84U;%596 z;%5Eb;X?M(iEgZQV8De>vYd#mYj(0maAC=;Sq)D>H<65JDySI>xe^kI zQ2UnDMu4q2Wj}#+iKYV1&!GBJsVF?7ra?&2%UCk298HDXa*%{9(4pBK>$A&8rYe$A zcoW#lGi*UUu=F9L_vyxmvNteU{U#2X@lQoVo0EqegUBViY#zGg16|gXE}M%kX{SqC z=?Y2cE1ATf&`)T4TNzN?W~|o&VpcfIj97$`JvLGyBOu98DN<6R7%-0~bx{mq*`(KI zB+b!`nDP@ee@0f!W@P1}8L_rSP&DJr6=+epOZWxUKgV%sC6+9p+@?p+`=(!x=t6CE zpgzP@T$Ytq#l1hyRr@BmA8P{r6RH0E_CccnZVD7Ylgf3bSBAKEQ`}S$+S`g=TF?vf zaudEE&5uv@rs$MnV(k%Dr%WeSU#$LFr>cXwUq$^fRvrnuRS5S0fE__xj+w8e!oWYL z?AMsMF^u1pp5ru_S91CUX~c#jA;}|aHE=ou({Bdum00v)B7s!8OVd6JJRH$jJZFS_ zE}~ik8(`S{&S|iyl^LgcCVKmdos@a{i$gqIe@P||5Q;(bj)@&vYN%=qAr2JKM(*7tN z3_+{KP5Wcw;xiL)G1jCKPXkw;vKy?Y1S=@A{Q%okdpprbRJTSNEx&8?xI+?JlG?$C zgv}TEWwe}-+Y;GQh>QrVQA<)gp0JvBJlS=gRMDYDSP={@=dc6m(6ZGGEp+2U%h^m; zPkeCxp@qDnW*{Tzvd(nb8gxlJU6M&xNMK*dB)*FFXdX+5EEr3OF{+m__a!K*m%~#G zELO%6mTNUT%Z_5eSVB+~LpYX@K%0?7Ml(YE2#RLZAt6+m6Nqn8na=`%6&6=yBce0+ zWa`GV@hcL>%&Id9(uhE364b0S14vwFG9s=sSrm2V`_YWhnM|@^nO0{q5%uj36H_TM zfmPV_&s@jO0;NP<5WK0lV?0_>CN#Srf(nk$O|WNQ9}RCjuO6>DOS_BFMVV5?ML4@ zef!flLEi!NJ&V2r>3cbS2hlf0-*f3(N8iEp9Zlc!;H$5Jtm@|YA&lTpdW!mofbUNiy|$e~rHxOC<-GFY)qf;}Z;_C)NR!;sWS zvvwz`*NZ}^bb1+r{lftz0n9^}sptw^)$2!0E$PNo`j|Gio3tO%sP_Q+rA^+^>fe+kwZ=R!Ywxu z{1>yb;o27wqO%ATEMSnVkTB%Hm9u=!I-h9*ozH|L;e}qPd_rcviK0|DyQ+6TZcSBf zGdUmopGavnFx7|u5&&2_BRC0WSa;p%Lv?9xMvl@Q2`GqvDV?ppCpyZ3+XT&gE6(kw=Hd2HNZBeOFAt$IWciZ-kUl1-%LF(q(jXkW zDbfNDI2%4;7(qAAh;Iuco|umj@|MrH82=M(96sQ)VhgmNeykxilI*Lsna>wbp-AYn zb#zkx(IiA|*4SMeplG?nYbER%JQQOkOwWR9p+-51-N*75>K|h531wgvvyx@ZKv&?j zn_AnKNu_<6HfUdFh_)}xAA(xj*POA(x1%~!)gObMy2A4cBnHEdp_B5DrIYrLqXR4Z zc(}s9@UD-Q4`PuO)@O!F7it20X?bfpJlBj#cEqaHA%~PjfUWB{vL-~rqp7S}E;Wfn zRHa>5F>RLx)@6jkKqcSGUWdi_%S_LuJFH)k)8~h7VFEN8X{AeQ=(2RWERU{MobAdr z-Dcg$yg_pkL9{s`t^`Gm(oo`Aiu4E;W6fF?6~%xKK~NNfs#mU=wk2K+dJ3}EkxY#^ zeZxsv=g8NFbWy*05|<}V=FjomPX8gUsg9)j3fq^O#r-?yS==uTXUu!uU5Sx>bbUWG zqE7%dR)x#r-+BPZBynTw4zFV3#w+nF79sPh4NZ_n1U585%{FuZiQCYOh}+OCiZ=9} zXj9nGOtN5^)`n&x+R!^pOdFaBtPM?nlMNltr+178wks3B1QvAjna|;woL7@H`*Nf# zAmQVGI3w|Gw52bR*dM&ybZoj%$!7Pn`UVURGrwftu5ZdVO$j4sA<$xi27@l$kxp(6 z(p=;hLP1U6Uc8s3#P;CyW&aadRco(EM|lmabc)qLz9cXgvm`1s zQ8daIDClI6Jxs!p?K#3lfEZ!6=gf1Q_5se55Cg?{GM%)43LLc;;%8ONB_4THl6h3i ztESQnt?5Vz{%#wz!Nm1RCttF)ftY9Xk$6DWEqWYd3 z7v<5B@Y2SkWU<;JpEm7HH$DVEEbYA>2Crh)_vrq9nhxWl>>=Iej$A@$r z>2&(ES>K49I0R)ZbcWE#|3xR||2Lhq|0Xy)mu<~zWcygQrC@22Z9&*1+k#uw-)Bu* z(2ci6LE7S^1=@l|ljkguE{mZn$RpCsbiyts6lrEkk!B_}(tKeshMfT**wCPp_TNkg zecgv^`ubc`Uk~OT|HKIGGjrMA;~U-0c53VEK=%R1Y(BZ`jx-$dJ;cU2_yatT!j1c2&_`FF+cV?-kYdVBh zA*?=d(fm3>h(8t2YN4XGObJNAXo6c!oZ#F|1ES;X0HCQEU8+6`E+NmLQ(eJQ?}+AI z9?x6Gp|fb_F=pxExeOAc>fW+7>AwXqbo7mE5Zd_MV-3%}T5CycrS~C<=X`N~Bq1-i znG=~pwmAU{8`5>ltGe|zhfJwi0=`I7s!B)-s;>vz;-_ToF$ZHcXw3r*fteM7E3PfT z6*sM9*HU%M)oe%{wWAx?Eqh2C-n2j)3gPIxhBph`J7B7a)~2ydP(*7hhG-gSb|Q_W zG4~EaBl=9l<8_0FsZZVte~T?H7L%m1D`0X~SkgkW^wQ-xE2w;s4h=rg4f&wc<<-K6 zCl}xY3!w}P>WGz2xTpn27!4}+&w=P5{3r7F1;c;3VYxcaK1a%pEx$$#n=Mu!n?50{ zes4o*wm0~1Cv9PGmbjEcK{11*TvA0SCtN6JgrPh{@(utY5@#`Ui~@apL=qUTYqEgh z`?E%T%WEm>-x1EQzKGg4&9C-lLXbvWbfvTiiG&M@jA$Y8odANwcQNz4BuWBHq9hAQ zJcK1+gak({UjVS{=2wvfRBjlE>hg*?1uum}EXtK3r6 zLAlc@Dcr5Tj)6aMij0^SF>nN9RL>08pF9fY!4o))ii4Ugvf9oh9ZZ6@35a0ZkiIv} zL*L|1=*uI|BK!@Iz9B>3Fm9KSG)ooT{TQB~qTxN0N!j+R{()6N(~~r9db3&xg?a&C zP^cHuN&B1N@crtZp6Y4DY?W|w<~^J$%#&Dk>-=kEdP0(!tkw4~uaS|i*czG87-$n& zBNOVaVwN>BNmO^YwHk6Wte0xrYfVR_8}Ep35XK%11oN$tu};(?LLOWx4sA968W~gD zIZ&uWnO8IpGdE3rFqD4HkVZE$l)i~nne!Mln)y%1Gh;bx_pb%BN3QRdt5;A7&!HI0 zHa+?JK0t=C#;h@F5k+EFI6cW~gC$zcm(-*wUvi?}%t<~-7_@Ml`46}pXPVBkGht+O z;c^8*(a|M5yF+YEg9_HKuQLpx8*i((Nn8E%xlL^q84O65EB69IemQt5`Ey`Px--?8 zuAT`D{uUGqiTDtmlz$POw7-=OChFV7P5T#Xc*6EQwV+F?>9Rz+#7&o3F=l0WpG9OiT(Kbv(N@GED>g(DSdYXsa*)$tg<^LI85P;2 zu7$6Ab7m{CKf>T*cQr{1F|qPdOqk&^Y5`0(HpCR%(a>sHeIiG{zgU*_%8l%$x+1-i z-B$M`HnN8=)&wFw;04F=VEt2H7WDLG@#z<$O+llG6Vu0S*4@9x99h z1|oZ?*l`RXO(*p*J}`o#4*8HwY=FyuPJ_i@+3b3bvQjS`AOARDib}Rr1M*u)n1~c8 z$H&VP&y)rya`u}v!02wUT+ouZIG{!9vmg<&uN&Fe_yqC?<6L0j3lw!_`#0J6*PG#p zE*iec#-G#9AWt8lGtixRpTe4K{LO^b*Ms5~6JtN8!J-2je@i4x8=sNQHoj1bW~Hk( z9%*ixPkqDCOgBD+ZWCH|G=vHdIJWbjokLH50QpuX%e6MMv2z)U#~AuaIw}8hI%)q? zbTEc~THLh%8F5|z3b@=0(EDZoGG0AtvH)_8)DpDcK7s=7ik!7ua13A_V!HnQsHRjZ z2A3r>*3!Ur6tDvTzLRYlNfsSR>3sRgmRb>VCRNGkq5*-i#LtGN5#A{rhYif26IsBN z3Imn6P$R4h)d?GfE{mW`n(4AB=(0GvhG857xF10~E*t}hOvV6WlQDp3f-!)&BQ_qj zJ3&z!FSLGHpx`0}R`;{?C4EsmVX@?fvmkdX zi%HpfN7T(#I~PFzyb@TgK06-uJQVd*EM0B&ToK<%_!;zcbpu~hzjzUXyTL-pyQP8Y zQ{buo29br#(6&q>F`mr~wPh2Du@1+bsd17dxE;4|dIeI=+!KJB`Z?DLZZPsl7xGAY zIe5^Wxr`Na^w9p9DGeJO`n3zbEUkQ^8JxkaU zE;)RbEpUg`Bhk4BV|2dQ7rE@t4{7UScKi`UQB&u%b%ut91Tfb%4 zN;ksRF9d8QLDUi~hAvUj6$Gp^-(+iEV`NP&k3&sDL?ZpfB$|Y%4A;Y^Al@d!jWWdb zo{gAS*;B0kwMb=bDD&Vs0D9d`PJZDsws08wvMM{C*R;fo;kFd|lwXjl3M;?dlITzs zQ1^6t{I4K>_&W2nCdt>lnNm{W5gPeyQgDe|zF~-C z97G`}C9=wq&!S3~?%)zPb&1Zqh7zMk=)5af-@cLjK=-=QbT7J*?)5G0Ua)mp>hzV+ znx~gRK5=s2gAan>6))%~#+z?=2BuolzYb6c;@9B}KN3?Y+^v!XTJtiGaOYwrW*@d_y3*>!6Su0O3<1HokfBN}idAC)bOmkX zrUv6hwwXX=n<-kB)W6B>pys=V8oF_6ezFs4z*l{P*^~8OqSPLKE06_mV-Rd!-+B@V z<8NaKA=1~9i3{O|_b~#UeIK&<-vSylE{&gN2Pk{ZLJm^ePpmC6*D2(EMgQBZsDwSX&d>Cc=GHTP$x4f-=P#QHNqk^Zd6qG@375q~6&*~O;b=UamO zXUMmw8tg-Nl!EUdGtM>hf;P`An5cI0{3b@pD?u6`uAW5RxdW5GXP8VEOm5nUxOXQ^ zwr6m`+46<7mJIU%7vnVqUU1Ak0B&e! zP^DAJm&fKi>?Ys+`z|oRbkG}K@;2VhWDY8Si>W-_cn^DcCzS^+@$WBlLVo%AmJ!M5 z7hi=2tIT~VpR&9^>as{=nF;iE4}B`tw}GrcstGnyO?}rS)q!3p3NE5o4BwApAlP7d z9F=RvpgMcrwQQCg>$L<$du?dKun=p)$kYY2CFND@w*+&JK+lM6_&wwZRQYCh>stWP zR_z~ux$#U4oBa-0H)82w{-OIVw<0ySita+4{O?P^ZjA&W$9_~oEJDeF<|lV}u!U~C z`5)U!^W(+I6n2gNz+~iIWQ|7GT+tVH3;I2K#+o1m5s^x#q^3|lq?*>W5C)lGER_%$ zL04+UzHiT)h4V@#mC=W3t>GC)Gp9rob(57Z?Xti-@WQ1ZAV<(H(o(kpVg`b-;QJC) zX|mf9HH>9Ge!|fnFc$>o6g#tq=PY!0Egla>2pY5u$1}DJ-FVCVWhX5Iei1YICZ)m^ zwB+C3kT>e^kU>l;3}RZ#zpy(qXEWQtx3uiq7X*LF;59*TJA=Onf_F2R zxYQQ(D+X5t!Fw1yEC}AqU_A)l$KVHo;Qb6<7X*LJ;Qc}H0S5CQu?0QI;CK*xh{1J1 z@L>ku8U!C<@bVz|D1&zd!QU|WWDxuIpFUZgp}N2 zx)0s3`{yUWT7F55Hw1qzEqk7V$a3T5B-A ziE8`<(BSQyRmK9rVkxh4$Tv(xtNs!3@(q*2IrjYtq3AbEzRTMF(A1W0ytdstsjXVV zMW%{a!gcc7TEe6dmM{r{4kiVZ975?5OjqDi-%yW+T7s#q`V6%z^NMz5<|aKFDv>`E zKPvenQ%SnBto^#e}eLYHYeD$`K~Cl$wmSX z1XoD<6NdC38`9~=12MAmvkVe?dlTMdK!& zE*SWKHI*ZOI2O~5S8kV`R4zP7!7{K;FGyq1ltRH?CSq5UR2;+hLfxC^Tufs6nWl@p z?5BXHu}XNCOneUR+ye6XH()I1^*FYfBycVoKF*&+X5MgP2dm<*wwHZ_SQZ|hME=?# z79{hFzY{dk1o{U-L-O!={MdHnU4n?@??27WY{_3qT&-f$w4Sci1e+ogIz$;`*qu*gG-f3Eq zZoC!8cHWA_&Q>H^v)*p!0ulSpA(xo6x~Jt5Ge{_6`>{gJQo=df{C5v^j)jAH;aot> z+BSih?=D9%N4q3?@W)$rJmv6a{Jjl-XXEbz{Cxm_7vt~a z`1=h0K94`XdbQ?j_(@i8dc#ASmS=A&Q0^Byj@G6 z3Ieh(tJ9&*^VNBeI{oSls^h8iQ_cQy4P8P<^l zPOBEN5i1*v;hAw-hZLq?nu6)Zh3N<>eg~%-xc_-5%H6#!)O&I+z&>@X9}OzhKTrEm zZd>c-`^w;{;{r~{ne%p7$5=~N*}agC#BO7{7ZN`G{7DF{rov$jrk0@rZy8GCY3&BUS0^qzsi+-L=9E^TG&)6+G=KvtI28+HAexN{%UXqvU4+5k=zlKkL8WUVJ zcsRbJ5k!2j2_pxj*T8)~{*J=mtMPX_{wNk}_klGo{BEdr#lyA35@c9hl+ifQH1q|ZbZ6^3a2J!8-a`i=Eihn4B_;y=at|j^Z z!Qj7SP9%&uvEB3^y7B&Vl=Pp4yKm$>ep8Y(&{EP6DPOps_Q`TKBcXH&rfcEk9mC`p zUGj-88AO+yp-Yy~B`@fb34slxc03uOb_ad)Sj7a-XBCg*iAdpf8lN|$(F%@ zbjx5s!qpPtx1dRW^)+C?a_9!uK?ATtSP>228CKRt0|Qzm4dDCGtd|CsXyr73mpfTQ z4WPOtT>^RtA6Z0#1M=&hD7mM$3CpnVUgYmVtp6OGGgz5fszSz@j z>`Ug0t=rfm=Zihv#=dmE*f-kPmq{!sI7)on&}<-b`V6LE=*>Zhsa`Ir2AvtIB(b4f znO~G(zxL#vk@3)w!ujP|DPvjfWVfiblr2xTXPxs-9=|^$Es~crCA6s@NB^Pi8ulSF zRr(OwDt(BIjaswhZ*>+ViZx3fn-KaDd1^xFNaUdjp(l}NCWNj;9+?pO5_w`m=uG5` z386Q!{u=7hw(aqyVSBU%dwglC9$(s|#~0@J_`>BLWpR)2Pz~(r%gJTx=Q`>h-ggbw zJ{a#$qRc=)A3(?yAbt7T-bNM6qFYoS>xZ%A8#e2ZR6mR*+c-xf7?~f9e~o+WzcSj4 zZe)-BEhG*nIB6%*0*bB+C{Zb)1pS?*;IZ&7tiRh81C}(*1^#qT^-N+ii~ZsUCs`}1 zBi4m3QK&BAd`S0mh(q-fee=w%2%c|lMZNSyxPrp6q#v=cPzABb>bpT3RS;20K=nkp zKJf}f&}O*DaEWeQ=bz0A?qE4pc(~BoiWGo4+x4`v%moS68nan~86d%?#v4)SrJ3?% zArr2r2`-4O*!k7>lB}>MuQN5d&(wr2Y9cFXI4?$bMzZXnCNMyVMvmCC*#swPZ%Z7G zI`Cg<=6sa9@zqFHR_}@M_Nn(Z@b;_sBzOnZdosL>)q4uOOVs;XcthKb>ws*B`wjJU zo9c*S%m3Q6Jl%N9Uo0)Zu+@e7vrKkbmPA+38h*6yX)(3v3??^>iA?{Q zd4aXq8R7@I4;XUk#>xHIPROM$AWeOu3y4v5K_AXIQ5P(A@hwe)&2kFQ_Ej$f(oiA% zQpe|10v1Z*60XrG3W_;V6oJBM5;j1X@j;nANG(F$ak{D0gQik+)D%r zsTYwdQQW8tbR5BkvP4sr^!w*RN=VrTL)k-yGP-ffuGkr6R`&{@8bsO5tUmIa;CVTw zbO|BxtIRTjzY!UO-Yz5fe;J}5Hbm2n6MfZAhz?hP1%JvHr0CcTvV%)Fa$T8l>C%ia zt1;3h$;2se`OnTpj841&B>4Z0)B*L^b6xID0x|Q$J*c(L5Qtf~5=a9OmFEHOa}Ss$ zEq<)?&4{9aJYp(OH(vQ`c2ap%k94t`q=qhOpv#i!N-?Mt^&QVEQ{ROTYcaPlgW1Kl zWPVw!B7#}Pru1Jk9{f&^>0BQ?9Dyfo(_sE z{Hq}wJdXgeLgIb*rGPpfP;g^jknKNB7Mi5^d z)m#t}L-oEOB8F-+B8D%YeLozhdN95|mz=%^N8e{Z2td+N{|D$#iGTRk>H$c!k?GaP zNcAyG{YRj5b_;y77Yrie7wnekS8cKb@^i?hQ~ecScrqyCR_|u4Sr6d5LgTnkF-wGw ze7^4VZ8R*Ia{6@rNY1(lp_+s*Ck-DW-GIS?p4$A!ir{rIOID8XuZ`@ad&%Iz|1ow&H z!}TzRZ{O-PK1+{=5mZlkQgX`JG?aiyj9(|~T*<@(s5AdLGy6RoR?Me~OH!PB7s&Ei ziV1ILSjy6P39~R~=q1>pJy*h?i-oTW^KWGSFEG4h$N>q}-=Kp27vq30#R1m{K)B?8 znf_k?S~_L_TXd?AfM=N9ex89I|7tqP>R*7{sXivZkIQcY)iZVG{>oD7mvb{_=F#D1 zl2U>WcFy=?(X@k-wkw*Jm5rr!9R-tH>n!b^76#;Or<_Cl&w5(VsWmrW}@V!DleYs_R>S|1;PnDIsFGD9R@8Ei!+r2 zCra7M)P$F-te9v=$|EOSFI|~h)lvOZlt8EY4+Q;hgEpsJ{VV+Ci5$rPBmlJxsHVrM zKFvH0_T=gPSsU#r()OwF{T-9y0HpB0!+Z_F+n|3{y834#!5MRe%InpwR98u07FQFm(Urj4A+Un~aP)j!M6UQAd*Z?K&!AUJb0?F}DX|&zC!2q4YMB1jC+X_k=QiN~EM%>e z?@SkJLs*u_haIzL4KlIV7B%OJ(M!COeXu zTzP6+uDrg(l5kIF8cUl*n-{O7uC{mN*8Ihy2tN9k`5gpEObb8{-cN(MbZmKmV;kQ0xX>-aix1*cCvht zFs{-)ez!$<3zRHq(4nMnvgkVf(vFb$N|*Z5K+Q%-F|$Ry>JLtX13)Hw`&Pl_rN{4D zA_GM+Un;ia6_>o%?zM0A+RKx-7vb|#{Y}12fFZ@EA{KTeDFWrGO-w%}=}W60 z^719GfMJg#PX<0)(6yzG+H;-7N?r$$t~6w=%z7Q=$zn&%g*#R32&lc=&27ne9hO#i z{MWhiWJeA(T?1SvSB8q2QZWlmyD{M=FFTeIPcf_E%%}-xlm>VFr;rH_a5=nMz;TT( zhqK%k6wY#B%Xt}e7A^5Y$`8NqI+wzU4fF+RL1A5f=#sPApffH*mUU<~FOlQC6R;A0qIKaQkcW@X-k zAQj!pco8q@fLB;9BAY#TQxOkMkY+DCSIjwHPT8DaL+$RN62)BYB_;4yG@5FlVn?Wg zypE_2@;Zv`ffn-GcczBQ;~$Hvp|Yx>gFE_XE zG1%_bW*`7@Y#EK4nnQD^_t`ax^A{r!-UH5qB=#1&%Ej*7%AD8bbx#(%@U2S>J6>0x z*S!uwue)zuv3tkNf<++A^5%+*9B+{_tEkLc1ZFKFvoPzU$~Vj^MVM7;Vpgfx8#1f+ zf0bE1F=iFPte)eGMGqI=g<0MfZ&4Go06?5DOXA3^y?*`F(@*Eh`)r5fb)hC*YL2?4 zO`D2PE9`P!r%|C^*W^oUyP{n7E?A^=aD!TYrNeb@1&%4Ow5zoGPEF>e_CE!8Ug}-jLPkepw z^^30`z5)2~)1K{LeMha`rbqJjY-#o5ZpkZe-ElX-_N{b-zPVz*;~5<~u;#6lnSL;@ zzjkn`h~3#pH&`0!21|=e!iHb6^M=2AUMbFCD*xedgMcT$pRKvdz_tu|}bWHrrfLNZz} zocnt)nxx=0wofp$2__RK5N>8pi`wSe@gIi4eAu*?j(r8k1T-t&odJS5|5p5>jGNW@ zE*+uUzlGigE!B};B=~_QxQ$M=4aVrOQ+4Qovs?@LEm@3zPD5~r?Ckqp0&oconf&iD zr>z7_-K0fWatJcyG+5ZmXF0Q+Vd4&y#0UWzfJ_P<5;MfPDGc?J!f%RKc{|gmY z=FLacl7EFLw#RP*nv?@%|EgZ6Pw|ws!A(Ot4K_cDm0lo$f&D+MZKrBa+v^Ub3cAn# zP*R-m-{f zTGXFTfU~(VjEHDKD1l|YEhwvr$BUbJEK-6pT6sLa55Uia!AljR;egDqhaFRlk-~pd z-3`+D>mJIxBi|OyabA;L-IuK7R?{q?rMDV}3f)R>1&=Jzn_Ss8EVf{BUEXnZ{Y7f+ zihh-)5IKjl3;4-(iC!+CmK?D#@^0^{u4E=P>E59ehxGUZ8JSx(tvB6|a&*1vKKOLK z>DTZ%4aUfN(*yKqSk{{ufi{gEHn&*i->#Z>iW>qSe>|9368oXgbR4i=AF)X7zsf86A*fIx$bw0z2pC zMqLkKq=8`>0LQzTAAg-7vJ*3wFG;v-8_NVdT4r~t=#`3#V5uTaH|$KW8)bT)$1*)z zrWcgyNtp;EO%9fxkOZKVNgN)^^ore5X1BLUrqo_O>*aIq@?vqDhyOX(%Vpo zjXvt2S50~8+qZh@^jNZtNssMiV>jY8(NUrpLb0j2!B-a3WiQ=#G;;&srJMTXU29(R zPuNGeU{}di%T%Z`mjBu6HC=1HmvW@@I$3L_gqg6crHY(syo4!e(Y4kGW8sG+%%xS8 z|Hl~a_5Vz#(kZazw{5n|%>F+Jx2vZQGtlEdqRyl0{1#5Ka?tc+SU^fv)`^R?)m=~_ zr!ww8j%etkG5mEqsq$#D+>N(n{a-S3b)1Q+OXYV^IH0;6OXG63UFwyb6z3S|Hd5KU z>TvbA6RV-Yp8yDogpLM=o#6K3=z=@iv3MHE35F zYAgaZ(UOGK2Bg)!ee3WuN%Tz8{M!&cv%(Co*hB+U<%^z4rvG!&DAipDORUJbl{3~8;L5dzS`^+v?sb2C)&8? z&NW1WLP0O>W5 zBWE~m%vWz#zLMTFP31Jthp38y^_~^bP<*Xmcd}O^woNF1=hpT5r=cwDU-!M zug@!wV(pmA;Ny7y+e?q_;q`jmt9JEz%c};xZm)N$@0jvLPbAwEvf;y=z{)4?un^y! z@!Zt~7dfW3WJ+6WdE<@n;7&#sdxeBFNb8#_g1*weN5S5U?BN!@C1P9@7cDvWSLkxZ zVyT#4^EZs8;4N&+Y-yV?)9W7pgXOk|1y{Qk?OARk!F^~OE?Dz9cxBGobAbrEf#Z{; z-h+BzdyGR^=t_-P3Kr(K2Bmo2OAgouc9xbG2bUL@E-x-wUR=DqI8f~O(jB;1)%Xpv z<}NH&yneT|#j9*OY4Rk*4Y*|+81NRmSnSf6#oiLP-v*X=OWgq*Sn3VBi)~;~7w_G% zi#_nEf2)Uv9Kdg%w-~?u-V*!{cuVoS*c;qh+l#b}2DEVZqz~0NpDbMd0(3`jh;$uk zYjvMRf6LI*-`%oLG1rSax7T`+=Rz+xN)}vL%w>yNo8bZMFytm-#bUM-T?3`v$k`9< z+yczs0_j+cnL-x36Uvw{wJq~k+6mU22+JCU_K-ZTnYUMZs=d&dw#)~y>ORRO_ksPN zh6&tL^m>Ymda$hAJ!njEuP~I@2sy~X!*c^;Dp+P)Xc=}|^4_vs?shE8ax0{J{PzI8 z&}oqB+@|6#m=t=;yws-RZeSPmAA-9TcQqh7-mY7{UA)~U?)8?Hyxp)fM7tO^y2V%+ zzbe{!dr+O@v9}|Wwhrv=WVhrtd7aqXp{LlX;STKWNEnO%B&&V=r(S2J#}JSC-KfzI zUQc!lQexWH>9tpvMOgD8yM?zL6&m%H=SmlGf{U9v9H(>GeDhM17mTD4Q@+T~Jh%-f zCBkzH@-0E^1^CK<85_gV&?dSYiT0I56U1JPVV@^wq^LVAmg}5;uUpk`rOPXb4~T0- z*=Y;684ZUwjXz+AX5~>~{5J3w3+G!(n~E!(#oh{wXRXuMCw^}Q8gPZTLU=p=FmU(v z+lZ+kV)et#h}*}%Z~NP&m}f_n#pp>p)D-OL6An~}h(On-pu=zSdRl>VLW$PJ9lOb> zLD}V~orle!0=D)!xx|(13iR_Y(2CXF5q7E*@>^vb*S@Er!M+S7mP$^s^Yo3j4U>_s zG7v8mASWi3x$)ltGF42i*$Wv0a61;!^KNS2K>>1VhM8*`&ko?E8$;NX6DN!1@=O-* z3Lt%X3h#S{@bn~Rw3F2_5VZ1U1NPD~r3d0~LsKg7--~$l^uHgg)A&8Aj3;RDyWfM{ z4{H1o-o1VS@33;uOO@7sok6iHc;A3_7A)d1B_}zDv4b2-s*}PlgM?G=wq$v-yA4XE z+rbFjolKWje{cAW$<&yeOm(+mlA9iLQ|WG}I|*1a2>{wRlNiRlZ#mbr9)joGE8K*` zL9D&j4K3R~Q-2Q5&~k^H8{Covrw5>w3tnbR(!UT#)WnW>n_yUY z8O^8tO}AntQ-j%yT+7OAX)u2gYL$K>fEvbf)>Nfu-1YL6{Ma52R!DMQzBMWIP!WOTWpDa&qY69lw0|Nad)?zeybp*vgJ7<@-gOKGN1vj&LDvHB3 z3BA-5hx?UdST@s^KtHrT1!Qd-VJ%FI30m8=D?Bt1K8XqMN8-pct;n%ADT0CpIpb3& zXOUy=4IA)NIIS^N5ai>oc!}I}9#Dpf714l$ip}&MoE#8=VvaQ)ETmj^bW9q<%Z9D& z<-%s>P#JA$Eb=6>XfQWBg#%jIDIBIisF+5x!NkMDRJ8_KgXO+BcF(WnBa>s7Ll?4n7g4!5yCM5fzl2pt3xneJCS^Ju@ z`dF4J1r{O?d=OW#2|D#s?ezvc*Tk6duP7F!1!Uu7moT`zX%Z8z9U{^^+k{;y*PxYY z-PmL0Vtc>WzRoC6_LZ^6y!QU1sZaB@lRb`y1&oJf4+ntoznudiehc`)K)9b4ZDPuk zgX^)mE8Nty2tzFi0OoKQTVTZMPcdIX+h6H9A6O4~GX%VpU$czL8RfT^3Tw`x_ztem zOhQ2r8y3A2iJ`=C^1JHw0r2Uk?|%9?Y7t3<1$mtA00h#C9RjaoY?VXfv9G#PgqI4xhKxoRaYlqfhe-!^2o_a(Mqybg zK-(B231akwRQLF`*ru2=hxU;X3_`-zom8WpJRs?sOhZN!LN2qLN&G-jFAI@ozWst}~AX}I}c9%*V z#eTmZiQ?m0$0h`IT?t=9TWF;Y5hrEvaWU@IXXkD&h{Zc3oAOSnouiDAS)5(O$kDd^ zg_&}&vwLJbPB?bl?SSj*HuWB8+k|exJvy!Z*!gNRT?YDOZQN;ajb9_ziK2t*Q$^=< zkq)b(q6n+2Viv_17B{7TV)=BGaZr^7$(d0!WzBCCspjwXX+opkIKU%ncWz}4EBFM~ zI-+F$N{#Ja9AOpvn`?C^LK1h!SfUk&9mlgAtR)79P3@WNs&pp%lrtO}c>j+j)FBX- zE$h5s^;Hy;bI?AN$<$ntGvie*e*P8a{NITN_CC2Z)@3|X-EB!&`E90yk98T(6nC@m z;|}1>H`ThZci8RS(%KJUW>FIRC7Jjy$O-2b(KU7K#Fr;wW9W9gm=`XC8zG{)y=Hdj z*~6WoHVkJPM`fa|hqqj$b@1|p$N`>M6jigr>2ue~3Y*Vm8kN<%F&tI{8;Xh`?^Jt4 z9Cah!p8n+WVX)$s8T(y{3yeIr8#w@~tD@t-!)SIN>gF_L%h4D~My0|)DB-3rr01d44vDeFzCanCvV=zU*;Yu75UA3GG z(yWT-mbS|D8j6T?mO>R=TV|8sbRAd=V^@-t!z4gDp2yEr-_gZ%4T~yRIaI75@T8_( z0EGFBc4wd1j|MyGJmr5Mot8*1(@bM@0CGIn=Q5|Zb)V^PP?24Dj1a3uvQr?cF+KiU zyed(xVQ0yy^4bFq&iDFHG4C#T91!k_ygX|FNsR$Mjz`?*U_aJqEWamDz~Q{n>=11& zcalQDe1q#}{|U#PJ3(`wD)G{Lm*4gVyRW>FX-Kb=7y;gN5_m^;ANuyzC1>*ZNe`~) z!&1t-Ck$;u=UcwNIDZvc{sV@@4QRtu5?Nug^69w z@@EHGj&&NNq%Mhf=A6cA>*a2xz`Fns0$;_!02IRU_qiw|i$0W;8+<0Ks~6<3|I}8< z=sjU##K(mMI}v6ii6YMkT>B2{_Kfg_IGFF5&_TOTb14->t1V@j;cHp&4Dlj0wnb5OwH4H$!{(mU1YMD#O%!S8= zrhgJiGE%6&eW4_W@+qR35p=~Kynnf#V!u8Bb*3byGp!NYPG^I!!?crZ@A(>vOs(v2 zX3iT$*SZd&+RIWKehuwEQgr&{Rl=F~22p#bPRGcA-ZTBtEWdZygN?K4kHI_Bhn`u$ z$6Y?c04d7M+>UHB=i9sx;;#cch4^}L)BZQ$4u2ev!m+{hOEr7zm|HFkOM;O;VHTyG)((Z>E#>zeflBxP^&% ztWV(LlPK{q(vfp~>(O@nhf{=vHJEz(#yr}gP+xx-zAj>V5o4!s0DQTooG8?92zn4; z%;)cwPNd*xIsV@2XG#7(@UuT(59L>Ks`-Af@+xNK-DA{qF-G2Bikw5yN4BYN~Yx{W0{RRzK(;!DYQ`>v63`tL|Fl1a||qMUHg!1Ko}TAlJK zn9lhGxGOW5pD`r_r`P`n)AaiPq$511zRbumC6LK8A52kt3jf>cou9zn^bbOK0A>yY zUJ(I51u(v(P=9d%69k(64plicDH z4B`_kI!5dcy0H`QB{5Iz@rk(BKXW}gYTiv&4`n}fr~iufmMCZVl;p}%{S=U!s(+M3 zpM;buGLbe&0t@>r-Q@J&O`nwz`s_a#K9(m89_1xXd>kr?n)OZpg$>E$erv0jQ01(5 zQUjCH*OE>(3lV}OwNsL$9r@y}_B%?|0Hx{)Qdr-%Guf?$9byQC<9WSe5&ZvLqH$gk^6ZMSI-XBFwR!r2F6Uko%%(* zebeuNpFQYmbd$d|7iPAE8v{~)|a%J%~w4+P5FnU;8QX8RENUcmK z2iMiwlI_k@?&pAc<}4IbeJ6faVB_|nM7cTzNs#-*miEl5hpo2&ZQ|xKcU)BK$qgQj zDIFFyz0?Ke^_lW<$KP?0?15&-Z*D+qwTbM(iR1t}!lA|}>L)J({gRSz&5Ve> z!ABeXFgiI+>v0-$ntZ;thkn2JV;gBHIt`}EoWnp;9WfH+^#}9l@DJ3sP06>==EvVy zU%)UJDP+}xg-Fr`O1fF?N_+o-7Tb-`9{L1wa-=^wFowgi`;VrRmDLz%^Ops20~3qu zrz1EZHL1_RTfKrhM_y0XS|%kZRj+3?Ij-S* zL|D69#XiztDyS5uD$JhHnMk$IuE%c&-h!;;R=G1bqmE}}&O3Rr^(RZ4i&*a3TudkX zHW%Gw|7M=rc1xRiE+p-iH)r7GA#K;~+ng!Wj|E}3AMrR5o?UY-X1Lg8!zEU1mCj+u zG+pWBaqh|G#Z>h#LwwD^%T&6#iVTpeAY6v6JPWA^GO2K)syPO z1=r$MRLkS2AdWdxCtk1JobmFuUS6(G!ho9EdAa_{&0h9Y1W8waD-p|Dh^VY;rJ_Af zMY^(gE3Q&2uAx?3LvdWJ5lNPIYOVuYOX`4HqHaO02DDZ%aagfz-z4^`vXw>q?}IhD z6keFPIE9mQ7pHL0?c!9wm$_JVL^^T8zqfx?aMEhcE%AVxAO=y%cja2K|@K0L>k zL7K2WxLS=q1-4cH%07oK>}3QKV6MV|1e?IfDUD!ZD2(Yc6|{oQ3*=G)o7BPrd}vdf zH^7GuVqpP3^bniZ;FB(Bt7p5Qtz6gzZRJcCl$xQ3TVw$t=;F4}fDnj_g$0B_UTof= zVh}zH3-CeuY~BDLMA^aue2`_E*WkltUv{MO+7a|4Q65@LRUTSHRUTTm{>`Y=j{4g& z>}!v<>a*jT^_gdN*v|A>a$s{Yn_RrPm`g6%T+AnzZpN9tsE)JxEu!0SWMBZYg##Jx zVxt3b^21$XbYR{qxJwaVz~1VbgK=sli_1?%o@>L&3-mB5gP0E7EiUG{N|EPDpzyM) z7IE~XvK)753IOF5gk|6gbxo66EL0XFBU71-xO)Yyi$fw|M!bbk!Fiszip7~j!DTX1 zH;*AB6|pH13(J+=kde5IZYEv3g9w&rG&t!RK}OPLGNzFV+aQw4WF%dCA|r8`jHGJ~ zh+v6^2#z;ihgD>FS^{2?_zvnW74;5CgXk=zgw$)pcpZzWxI3xf*f?It5(%p!XA^lH zOQG`GsmMw3?yapd*xD+)w6;oLYpZm$w#s;GtKcAKyj8r`R_SkTm8Gq%Lh56!Qfq0I z!PZ9EwY5>!v^GjEQ8%D+= zobtk0gwqHZi>}7S`1y20YQW20oLcPVE>11+@)xI;dWB$oI`Ds9Utr8?U-PQCptIwG zM@FfWM@FBszZyl({z@foctll+dw-FxI%PU<$fGIPQS7`SkEYmv(Y96_L-Hh11&ymP zXf&@tLhxFY)zCOOCZEz2lWAh8N7P;^;_C>h&Q(rAH_u`MNyrY$9nrY&WajBTf|cS{qXos5!^ zMxt8Ol6fuCv=SI+sR>#MiqTRXv=TIukE9l`z;@d_gN=v{P8nO6{;E zpa{xq=b#6gYzb>eXk&>DA%nE^DKkiG6X_tWjk6T8SNK=;$vt>v4#(@_^Qq&T?T=;u zf9#Ls;O1gGZnthOb|fqL&Be}SrLei!m8`UHE_Np?9h-|@veLP^xF}ia+Kl7>|BAVy zqu~;$W2zA`Q@nO}5aD*O!$p~RyvgfyQ7kV^ceyB8-r;dk_$2PtcrMDgJ^qmhQXtAwVlYoeJv0p{EjV>UaQkD+t%EVLyRNfEFpJ=yg<9fGXlLMo9-U z7C{v=8l%JmdXCgYZ>*Uv;Cc=yB`!m05o%=&M37QL1de`Ia8X=pXo#TwR0a{Oq9FoL zB4N7QF03&XqOruQ7Q_`AO9Rx`fJAJi2`U1B0$Yh{HfDDfp#i&vQbPl-q*wL;4XmP} zfmPfGG_Z<>2HdI_rjj?NJ{`PTlM+;hsv`2?4wd9HWRdf$K?AWHZh1hp2Ph>fLum&p zJqj9VAsQNRn6|P6G_Z<>2AYH2;3=zUXuxSfj7&KC4Unl1t#z*#9S_}$x2$Msi1O|Y zEyUi?LhKDK#9pyV#0Kew-d2h5dZDms5w-&v##ogLueXw;pP~VOo_m!sC06GOg`tT+dqy?ZZ*f~8kK#O3=9<2hxF}hhm(1%+jq|zcG6==!0 zh>W(1$VjV*47Q3$cdLl(0=i-%vZhr;*gcy?WS~_-p4}=T!>tmsN2`QXS|kLcYm11C zwu;EARuRDss#y2(leioh-j#kh-j#kga*5chL|`i8e-z8XsDEkXo&f#qM=fvqQT(3`X z5fc#&BPI}yKun@iVFU$I0m;$%fDx2#6%?5e;MN-^1U+6)rDy*S{Oy@f2vQg~F2-{T zUI%{jUMGGFUKf7by>9$M_2akGTZCUI_+b99Ec<`jcwZ@EguOUE!cq&04NFmJpfP4g}cEXH!|qCl}u9_Bd4O7tjE zq`d>$V6yfD+QYUDQU> zC>Rk9&1e-IXa~(57&r}m9aP`sp9f38(8q=WJ}?pUK|@Oy6*&1PJMo2)YtaP~6!gZ(yccG!ri(}r>|BLKBnXDC!Xgp`OIKkL3BvqAVG#+! z)WE_53BugK;tM1wSh0vm5M~FOE|efn4-^&=APep6m`Kd~YnV+(=%KQ|9@k}TD z|Ej%!C$!(lW2x9n=DzC$+%c>Z^yFuLvIyS@J!Tm{ZeP!T61&MC!4a;RHz6_ZPGqKU z!(p<_^zHa{XHFr8RWr9>|90bhxt%Mx)*4)O?{bqnKlAGL5a}x|c!x-TK%^HCDc`~V z5^#z0y5%HO>gu*M2JS_nrFyjxH@P)z1lG`2JD-i;-ZE=H3VpX`)%`ou3YH z)(;5%L!Si+GsmDFg_%q7o2ecP9<^udb)*S-)RE0)g-6+D9^Jv}T-eH^{?7zF`a*<9 zueIPE^61Azx=DGIP6T{kbVY#k@d(aWS?~^V-btKu^YFcJWyqJ;hyH-4KL}yud)sG& zkG^(QQ0e;U)qy{#|A#{ud30AK7^EqGKFG&3{~vMZ9UnyzHvYN0z0I{G z*K)bg5+H%ldqo!Lm0P}A_S(DZOR=|;GW7DblPagh0+%jhg-=c5

    CE_;`~jDiD*Y{LFRuhqYIdwSud7Rr>|8RwFRrP9j%x6U)#}TH2N_w zqlokOn{SlOnGrUlH%A8gPvw3MZO(qd=Cm!!=Fte7=OzBvIB%fMIWO3Jx=q=v78}m{ ztK0ueoVU^D+!t*AD3xt#ts-nD?)Wb@@1f0kFW8(bm2GK@BW(UH@xSK%A=>=p1)Iaa zRe9eWVe==6|JCLbv^ihejJWn%oZ(`8edmA4@^dt`08M4Q_Qvc|@#T&%+Ck!fjn7yX zj4qV%sq0GYZe_DVgw2i;|Eo)W4dHpiNsPV`DVl*2X{Va>T8Y0H1 z1rGcdQ#sMpiWlSi>7a@)TZGX(Km8Y@Noe%*EaK}HVQSBz|6(dHnp*i{e9ogPz7Y{d zJ4yVnZ6zNXU6n17cm5^9Uq_V+Mp(K{wHwRv@Mul9d_u$bNzI2Xz5igFefn9iUbS+Xi zio3X_{jNs;1Xv*7kiG$h_)L=2QV=w}J8l|Ekp8B|;Je4PZyNd)$fo0;f)nA32e9?| zdVa!F@tE?_LHH_6IW$yD9GQ_=zH?&Lp0B@&FNvcTOwy&zjNDix+hP9b>!v;^kyyS{ zhfi=;Qp919sP?+A=QC5m)271N#Gy$TdP)P*M}ZE_3uZb3M)BXa*PFj+Z^Zv(Z^S>^ zdmHTG{ogL|T8e%r#^R_j5q1-(JYn`HkHj}4uFvbA=pwJa8Hq`q3BYn!Ja@Qf>S>2{ zzF;8|%ZygAjAGO$@FrttzFq;mw_6exTR~YLyo?LdiAkN{?OaH7kYz4SQ8{3CUx!z9 zNk9~bZ$`A$)CZT6psmE%{y z4h}9?A2;>IZ{wzx1!{A%)Isp7GkhaA^er98W=t&~c_8&ByiQ&4vN5d$(DaSqL`^B! zggY8P7rw?ce7gfS6MMky2x^y`VUNE*-T(?0|3SMXN&1^=#db;irlH?}Y&!k{5!8bT zg7B9&UA~XLO+)c-uq4ESb0262TRcyif@Lu6BRf>bBfuxF=eDCJ7U0#q&UsMFlH@ zNwZ%3U5e!c5es|<1yqNwj-|7R(rY0ta#IOZf>)t4fRN!-!K_2>(50TMP3m1Z01cAX ztiVIiz)nWkY3v!S< zv1*Sjh>{n1gz>=&SWqS^JDgx5rn_wcW$3B4;s)kA;sz#|Y^N>Eb%ZTWEJ7(0&D+Mw zaI^;#i{8REhI7UmK`eZp4Ibhv4G%@#V73BS%V<6IE11LsugRlnJ#Ab;C@()9L?GnQ zJx`{>89}qm#3Z(F;Rw!9#qH2#PS`0LItDF2?agGEOa_x~M0R$kX9Q9;CnHbfGwMurzI#qZ$=xcvb)=JY+d0k?Z;3o|BRi|+Ao z*gfq@_k6Bg8kFM(_?9OZ6|tbU2msv-{S9(oxD-s*lsh!XH~2I!lxXjg@Br*07*_s1XTM7-M8!!jm5M!x6~K0odR*3wLq*BW@u+{087y*p{X~7?1LK=Qy<- z){#hE57nHG!d%4^yav4#v0nZ;e){)Ah;_OaQ(SQ*SSKT4TS4Pj&t;TXoOm)$&N7XEd4OVWYo2^_#9B& zM{viSeiS!wlKo6ubNVsb>gmU68D% z+;Kp=2%kG}Vw^%fbNX+%fpg(BZO!Sw(^gMEL))nIv$!1&ckoafc#N7$`X7)I5EaAc zAk15beR1{;MI*4P0!ivY4f2%!C!j)aaUBrI4{2p;-7v*5#`hQ1LN zvxlCYG4>VGzO%-@e718ml`%pgl%qXpd1@w?|m(2#rCNV|#?tbK`Qz zs)pC$Ldh=_lN(mQ$W<8nyRa0`o$iBM51Ovc_k&L%gAOk=IIO_J)iQ+)(|>qd73U#u zswnER@La%xdlZ+I;)>=iRn|E+1m03L-crr*)dpa&bfDQn?bJ%m)MGoH%VQ7S*$WpC zds-~i{}7KO)M6j(I{2;&*HfuZ*I(Yh!mM3}|Hr~EUS~Pwth?a*pc_7~#%<@oF`NK@ z;l@l+rJu(%H0leqHK$*st)6}fwm6zX+3;wJ_T*@)tTD9*j&}Jd60hGDRvktJHR_$I z7q$jr#;>i&&eLA&09Yr&055EsVbv;g5bDNuDiwz4h0^SNbVvr_!^|2@X7=d(gN}T% zasNiR8Zb=m3wDA$VGpL<(;4Q9q8^Gm48B+nUPf@SN0P&9j}UQL!@Z~;KcNO(Pg8tw zjQYEwSi|`GNpK1j=fa=^B7^e}vrsVvx74R$5&tZ*A-v=Y$6g3teW&8;zaM&Tk1g!U z7F?g%bde+fXcy~6Px}V0A)+!7h~|NNRwJ>anpZ3j-EYq0b6*#E$r3fTXS&%d?ld?pnf5P8Lr#t3vQ`{@Fd0tUl7X5UljKj zRWP%|xws4+l?(n(&hKAU?6`gxet+IadDfG*gGez4tfq**%a4IQJ?VG&TRg9kA8d__ zwJP;iq|l0_3$^DfhnA`eC7>h{{gLvC&Q2X74(7_R*MXby!J`_gfOs9&5yg*&6ZhdN zFR4EGMFR$I^sOCSNCT?y8ax|;&M9~Yw#MLX+=GCz9pF7OvYeL$IzG4h${BMI_ICZ!KDM(v|M*yeRb&gnq01a1>-A%v5z6@{ixDF`oY zKN#}l|^j3Cw;Nyg~O3+)1 zExwo*rL`^y4{pBAsBMnaHVbWYE0Dz)a6KJ-c9H0#I)V00wL+eCpC~Y@W_vz{nFw;mc1L$51?+b`%1&ne-sT zfMKN`5%2?4g>pBsc#&sZ(%>D)4J?+Yr;dU|`a>aOW~ZPLRU-SS7kn>2(-Ym5J_k+s z?2#n!9;-dRb$r<*cyrU)IsoO!obW%cAq1BkRzU0*DjAygGh`ie4IkOA85(payjM09 z^DA^$*}%b&P`z++Imkq~8V{!yT+pHLxTrWZ2Gro?N^88!7Ex#}t10+1jt+&?6p#uI zg5v0Z60F!lgCDcLsf!_+6g^lHu$Bg&9@2xGK_$2a{-gx!!{7dMjLc{c*2CmnNW!I? za*jR;1Pg&yR4@|<>XC<^)^M)FO{uaIVB#x zV<_zuk)};xG%55yGz92j@tIUn2v|dmb>MW~=y?>9?4}n2v@CeT$ z=nQDvQ$1~X3fO20z5)Y)^k*o7*M*kgs|xvgj)#Zhfl|2K)=(0M)u;eKjkHR~L{zXI zjw18{ufR~MutV>U+hAQ_1@!^13WnR@Ys4@Lv{Nt~1)QB2MLUeb0BOi<#yE^9Fcc5* zI7q=b6fwntiKt-f|L-`^4)1^ZK%T2Yo=x=p!KTs14lNbiEDS{6?o~G-W(W{^bQ5lT=^AceNh;U`;~}&3j3HfzU8=XbkOzKEBzah~ z3XafK5EHryek>#lL-Fv$9;Fgt`6@`kB3>bs~&4g)3}xcs+vaA=#y++2NLq zt8;n&dj_t2EsQ$3Q5cPpsX~oS!U308*G&qk70*(Juu8(G`u;U6xZJ{bMesUn_Pz8b zjLMSynN5Z=6L(;kuh$@7D-FyQ+6bqjc&o}b{Fw%gDwOR6TmaTW2N#+Q zDf!CPt#BIFWjt$xZZp*EWaLl4dQ|9Z1;i_!)1e)Vh=RhUb{*l@aY~u~cfWnYg39kt zz{0Oyf#0&fNg({rM8B3S{Eh+1|CHa$VL|1$!D;CRUuy-wYZVZFXQN+h7JjwgU+_B| z5HDxf8Fer;E}T|=&1W##=R({_F zmcg&%q6EV4r|36Y`n9lj@;rJCB$eOicpfD!f@AUiT%q;hLm}HGB?ev}(pl62SO%|O zDo|@Gy3clJ`~y*PAi`=S2Fta%6GC?qN`ZSU5ky2e*qbjkYDY3(=a2TNa97G+s(gLo3Hp&8*Lp$FkK__|Nk*XHkxzCzm- z5Y@KR|i8im?i~PxjqDzWfl*iyX;w&>w1GSV@v8AQLcS?9-D`H8I?q+ph=}w9xnmQ z(&nyc60Qk#<^@21JGf&(uCe zarD^<4n!76S~nP!!L*`N7+oG&9%lCc>Dy{k{z7fT>5RTt!hx)O|Bk-%X5qV;U0KbP z?+xK2A-_XOg@%OF8GWCE16le01AQm|uYE6y4*P~>sUsSFM45Mk16le03w@_#;k#(8 zvXm*`^TS6%Zl{t8jSi zJjzn0d>8VnBcW9h=@M~@XY{=u4rJx~I{HriU;F;Xr~HMg#H(~h-#g$yR=#hd?*du) z{=u&-Wy*K21a%}7lP#QH6HaIJ-7I_7zVD##g8ysZvvY)fSIMc;8GWCH16k$!KKd?{ zh40ivWhqm>uY`|;RwXH^P`}(NozZv6JX!mGguV;^uYGUItNewAC98Bs-&Iqx_Wcxn z7sXR{lb#il}r(-@g~l z+P4XP7YqCD3D>b|@T@F!zBnqtbtsfnLZob=HZo}sO`|0Ibm$13mo%Clu)w3|C|LJ_ zU&$8Gl`N@bq<4Js3<4H;OQvHC#ltc5eldm_WB_d0LO;nQEF@h@n018OQ4$2A#o#!L zC}v1;nj4Tg3M)oY0;9m^N2(n1H8zNH=+H={Y@vlRX%Elkb%f4I`j6$1afWZ^2pkwe z$t=nt9D}2@s*8p)X%9`NB-O0boVg9eVFYEuZ9ug{RsNy#G8$W`ysQ*^ zNX>0_gg%h;A7jWk<2iE-evF~4j3J^87+c8P^EQwWZUgh1i$mcy@P9rp`XAar#`)1N zw1MoH`*JU|fd?&R8#t^=AyisIdq~Zjc7$d~`j6$GaW-}4^3R14l+U94tF+Eo{@KIj z|3j-6%K!g-&ha#i|}ZP{Sx6TmN+isPjxd+M$hcJ6uPd;UBmOU z2;T#xX5c(RU5y+rsdDF&dN3=&AC3N+#_gHH+O5 z%G2wGd?$?pZGS>8o_GF(M8*m3nf+Hl|ADOhcbDdEp;av0^J4)Y;WqISEKHRpBDo5&eD(MntvR-5+ zGtTzU?5H6+>a6NkXRk|N_%pmMR4*hlV-Kl`|BlcuNh6B)Mb8u z*niMPJDkVGX|gcGdBooxlIFpm$ZTd@G$6CHX6URZFHip4Wfs0h_kYn>c6dmgJ!hgL z@?_1pra)#_Ez#ARB3~ADJ>dO9D1Lw{Pqny!BlMZ15#^bc=Zp&vWcJ(!J%=Ld@*mpG zqJb~wa~9+?v1Md|W?Y#dv#<8(Yfyx*OzkE#Naa&4Qs4*$220QCvXk_p=Zwo2WcJ(v zJr7aki@!r>QJ2HtlAgltrV_kl>(8DDvwZOi%davS*Eh)Q>kagku6%WrzWBMZYpBYj zTIj$LS};U<4(Bl|&lwj%$n3c*dVWWhFMRt)_zv|Q4)*62hi5()hKZCd)H7Wq?QqSx zCU>$J(#!?Llu*W16EgemfxahY<$DD_lpx>HWkt#s3d$tNTTmiawiMlCqOYJq*wem-$C>}1$~EqP@0arFv%FVGz~%R zd;qUtd~hgPWfe)Eq3OF8O(W`H)Z|@vGfjY-rCLU)`VlJus``_ z1It^ZcMyM9!hc3)HniNfu&UJ#JC6*dm=9iDgyci`{|LO531PB<0z74}W?;==l1eN)nFlRG-_05Ty8<%~b#_;!j;WLmy8P%=u*Xv? zRO($NR~}M-C84*stIE_Sb#y+Y*1e8CHqA4zVUTg14I5|_sm*5$?1$y3yCWNCHnx1O zf%U6xWHIcc#|HMvXn6CG&Hj!v8+&=Zk&fEfSU7@mI;#L@H@E!Wx7>$~6;N{VBBiql zb|bq|A6gB2Z;aIa#3iGe3GbX1IttB*l~cM&Dm6%Wv$5P=rEZ1s2DWb{YP=7hWyDx) zthhQl;xs?1vvYH}j~Mn=DFeF!i$v&b#uR=uhB+1(1sfxn&I%fg!t$Yt(sBb4vyB}y z%F=jOl}l9>>EKmTqdY{wqx$PtnfhDU(^+Yl(7Js$#?q;|ky0_totv?ji(=Ui-(sYc z&VK%g%f+yF;1j4=A2BQuN}Q)Qf<2xxDK-nrnOms?^E)whgw6g2+c>m#mek0=CU?PF zEe0AGpPPLM(?~fx_n|D^6lhIYt1)aHq-H(Dma`X9*ot8!3Mt;QYg{p~A=KKd>@lzr z(4J%1xJoKgXn#Du(i5vk6GLyK+uBYM-9N*~ol?d$BhwnzFn;bhdaP6Sdz&)V|K{DRvRcowto! z1&matI{U>VOMKrp8P!%dZ#gh*ggoSJhox(Pyy01)vjy8_eoH-(5v0zS>?dXUY(B}F zkB~h`31}g_Bom>Z<*EJcd2iuk)1Vf%Lz~vw2jZ;N*$)YfL6KyRkpwS(`Eac2(5(oDlMSJp!i)v81%zNt~f>)*S}N z{AfRQ))s}gJ<#${R!y7>&~Jb}euj32*2GhX;OLW2u`hW?^-@=6%igiH=wEECsz~YV zo8Gd-D}xVS_A@*39^`$tR(ONnr<0K_d)L6mDWWbJz@$R4RPOseHA;t;fKO!=5rR~}8M&f7r@YrKnzel6Q|p3+&N zLNdS4A-}whuM{aC^Z(A7kNv6G_aYU;zEk~Q1!x<*SIMSQqaYu=*BcG5qG2i<8v(ca zn9|wK0`h2sIG#GfdW)PV8k(roeCYr1pUyV^3fFrmVH&jYX}k{~BoVvW zc+K4SM5gv6$ev*Uv{Qbx+6kHJT8!70&a#Pm(^+0`yq~xb80lVf+a7tF!a(^Ay(mW_+|n|7bi1jiJC2 z#%8XCu_2SB+e}Gp!0^9;Fa?auD8c~y812Al`hGPdy9TW(z!t*%3ImWg z7aNE)W{cQdB7-zZmIFhX+>kHSYRtZ2%Zb!bGFRCNA}5ud$LuVTo)4tfMMEhF*~v!q z;NBavYld=$5fEYasoYn9Jup;(5S?sfZX;_BJsXm$kX0v}38Nh()eVmfFO!{77Y!^2 z+yVsHV?!+>IZZ}Eo*3F17C>G{mE$r{Qid)>YQwk)wU7)TU$M`mou`Jk$c{U|v|}(1 zGZ?^o{~y9+1j(d4ms$qnC?fF?C|ZVPEsW!d;58q~Vwm|cmB@Hq+OZoq5E=SZ+KD!9 zAyQYx<1&6vq}W(#$8G$PNN*TxaLYd9IU;{5JK2oa4I`lphe6+fG69xod`L1cn>ew! z5@Grtmh;MdGM)lP=-T058AS>jql{QzQ)8q|5n~LI?xIu|vl7M}M1D{*rHy5Y*qu_V zg0U8nl}e_Hv5gUHXNTX&w!&2bdTL`oBIjXGk`R%uEyFTtMnjU5?SWncWp02L5Qwl1 z^m9l8Kn4;is7O8IBqB8xdBylK<^4)wZYRLn8h4P)P~j`U+8K8eiBnqbjo*>?4Z?d5 z*4=odPyYWxb8U(M+=7)B+-rXJ6bifE(3sTe5-FSsaBWPnN697BcjaXm5 z_BFCSDcI(_8*dY-+bB#5m_~ric(?*_nI6U>CM?6AFdjp~SPx@K6WVE@w0amzLybGx zwjEq%fT4%69NGD9E++xdDo5p@-f`?a$+$}B(g_o6*NsFQU{E2nI@*W}}z^^Beg^lgu%w!{m$W9qSt-dOB1Ifh zCPq6-Bn6&&ahX`{SF-%>U`d?XNs2i|5SYlTT_Kq_zLzpC?GCjlx3cWf%w}wv{gq6d z7H!7b=^%VPFvMwzBy$Gtu(@}iR*+=s2^nVeX_ZN)po%A6t3@(pgp9=)uQewU`pU?b zAH(wTYp)S$wUCp=EJ5o`#ORYU*|h;gPL?tVtwe1EkwI{E;C6Cr9}u~+K+2?Q9}=nR zk}`$0Pl&|BD3EJa(3V5YjD1^6%2d+6GUM5F70v>b>A`Agn?Q@P_urFRwY1G7Q(DNB zHrCU=Bg?P#HL^G1ZZ^Q`YkR0Pn!`N^C$DM;NM`SuFgZ+QpjB!$(takgA4b5aHQLxn zI}U`gg)kQ9cA98sNahb^rSZmF!W81h4t(V8sPO}q9QKXYrfXGs1xsz5z$5QPpEcal& zwXP)7puM!yTkA%o7?U}DN1Fx@PT@*4T#~WcQj$3XXA}26PFqDX4;7iL9VMA~ct*u# zCTpjOd;{a3ci>L=bK?x{qK-Y}WVi|=39yf}>mUQG;zBz_Qr!EIc8j#S{K<$cHqOyZ zQFx~8-6OT;XpSf>jT11A;CAL}9wO7Bb~srEE2*K34iR#)LMsu4-e)QAE40!i6Q?3v zp_PwX0Pz%uzQqgI6~;c-s*ubYr;$hiNYyAT)!W;+Oh?0NEdVlbe*rx$YRv&sI|>Sv zy$rR3B*4~a&BzY+y-4O8)@ZGX)Q3Jn%CsZP-)uLq>hPqfqhYi529Y{j!=wx3g0Wty zFun$v0Nbo}BeE2Hak540Lu9Iw*`^Jmyth?khc=Qd4}$9#YV}|{v>BvjjgXl|GR1|A z#k5OXMx-3HDAYo-f)gS0z_?3WMRqzt$@6%2X=_M^iF`dU?$$Pu%yAX-Zf!G>x0TlS z+I}ETHVW#U+c}{9NhB0Ou2C7bnZx5*!VYM+$=7QtUxziT1?%gyD8mQF!~6$)J=urL`r? z522hf6OP+2~$g^08k-UIBcmQJLnlKDe>k9_5Yo)#?+HeJ-l z5Gf@HjJ33}7B~smOejMh^L6b5vQzO_>HVfQnMn0LJQs`EEo~Z+<&$K-ZfmoNB#C^r zGu_b^5Gkk1=dQMtNSyHA&U8;(33+Gi#uWqW483-M-P2Z4gulYrn3Du^f^`Ixn5m9| zjarH4PEKZRovxBS})sWr*N#joZm*?n2}&`~oIPA0nT^{GN>gc^6jK<|Nhp0g*)`;AtMo6f{q@Er1$qD`eo89`i>; z%14k{MAir`l$lMWSA@)5vRp*@DrBB#!xnz&Wq8W<4#rd1yoe$!To0b=2(pn#hx(j6 zFjY4HMq1qkc>?4N$s{Y8YUXPsQ&ALbm7RX(xrN7Lg{~Mj0ENO&DR4 zHs73wNM9Atd^3D$3}o&>--9v%w#ZzDh(p;~ZmvaSp~}|^b9*AmDxMW)__i3>sjlK# zW$sI4h_bWJJc>vQm9H<&9~1dp#q*^ZzUl>b%*xJ2^GYIll%1{Stwc_%cy^e7CNf;b zv%?JE@d7)Il$~AXi$o?XJA2HJiL6%f>@&y5pw>4ko_*#dB3@|8aUCem5ixo*Brq=2$>!)%U4tKp;+%hK-DJ5do;O+~)nFU&1gq>9FuDKzRdrIc68NPu9GO41irfT=iU5T9f zTei&m=DtMEjg`J0nMV`Rm7T|C`0f?hDX)AzHN$5XfLu^APtEWhDhO&zuv1ROW7TUDIekOs-KsYx(pkl0*Sio2DqjvAzAFWG7ARja`iDfk%2$jI--!a5 zTFRGGUqR%n8`76k|B^_m^5xd|5P4hW-J`=tqQK4?mG?OP0g)Oio;V#=j0TzhDxP@V zNyGwU65iXy>)D7bQoa)OqC|dGzOw1?!6&d|S9Wsf?TH+^A?@VQyAf%m>?G>Lh|E=X zl63gk6WBSZV$P$lAksm_oJWUmH-XGl$r;*_rvu$&9Z)KEoBmsC=>lo_q})Yp4(#Q3I& z2Y$EEzap~B!|fp1OyugAFxg7v_BCz?Wp)sm22ZijGLr9!_#2HwMRwywf0oG6N zLNXiQ=Oh_qx_L){uRm5unYZ*2B(tfCBqR07L^{62i9c$jK9$HPc6eKoERWQu5y^d7 zlF|ASB3;bV*JynukrR)k%nW@W5hi^3qdwA)5%KMkG9T%`5*hNYBpdWol&|aX+>3kP zsQ*qfXJ<*7ul2u3=F68Q`Bpzqr0;l6R+rS<^r96c*{fTK{Io#& z+7F+HM;UzD!@VEW7!0Pvm$NsdYxLKxCcD#r3F4MA|BHGpaI?1`R=CUVF6}&v zszNda?n++<%d150-;%^+X+)%WL8)c7G>*gbtNt9Gcle#i(u8s`N3=srl+DtT$Z^pQ z9Z@lsHe_e7XopT9X(aQGXk$5m3?rFAqWz>sxh!v!Ois~SiUXMlgt5mrWjsF1hm@}+ zDqnufEF$Mb%lwk%w5%XI}N z^IG;&ge!zrfaSI9BdrhN-ke)bwj3ssSC?%gzvVcQ*k~zJ*>a6YwlAbiEsMd2ZEU=X zr=G=3q`fF-_=Uw1@546sr>f-!mYhVcs9J7lNhGp5On&x8%$P2e zWy)C>kc<(Y@^P7R*2NU_udOAiWL-g8Ic7+$8rCmKD^=BCE$aq~`LH^7>R7js%%Uq& ztB!RWkrgWMuUK~yX{GYs$oeDs`W8k(Jf5c3<0P{M#(kW$w*EroCR}ql>0teXwA`v~ zbh7?MGDogTJ8xLe`>_96BzhYdEm^M;xhzTp$u-g%3Rh2V`AzHJB-7vqCyWiSJ|J>h z^ifD26FDUEh2#m5d*WJ&BnFm2ce2>A+>SR237)wd#hIJKI>73T#|S&Fm%fHs6Ny|_ zc7|DV6WJkpHhAmLT8Qj0p%nm9n8*wpx3k~!jvvwhwpwgOV?Ljhc3d`p#)2&m9+_!S?Nl`Pbvxpd#oq5)! zl#8*V4`*zi^)r&04x>1Xr=ww>bp`pVnJOckXZ@UH_RQwwhGm}h6pvJLvRXH!W zYJRM*0;0_`w%i)!$5Q=7_4CWEF@CJ&&qP1J-g3g)khE@#F$rTQtc{3t6=w>PW~8-6 z)z=AY3nDcYxoquBB$ukM>()Nxy@{%w>(+r}dAK;g7`twLi^xvZqOM!V!LJfd_Gk>x zyEh66#ymu|%r}TLrwB(*;J#ME z;z6g#PNF!M11!pRg|rH)HWqEWNis0SUfA*41}0#gzL#GTpKU1gu})TRk8D5jwqZnG zh7tb3rZ|31u)R&h3#GwH4%=8FWQCdZ9UlC~p_cGjjaogquY^&7-fiEW5z9kuxvQygj9g&}vomXtfiR^?taXTGs z=ZQF!R&U!CB5x>PLv7E2z?Tn|Ou9|Wh9$Q5q0H$!HYbsExU+lM1@By@*s>FusmO=6 zoJ8PDF+yg#Es02iA~S6HvSIBkgc{^_=Gcm7n-AX42|J9)izf#*7KE_1TaHW*}J)*T$@WWQ}VXT_PcE|$&6|Nzo^3d@~$%^wkpD0_J$<$K6vK&O0qX4QbgF9Y)iJcBeG6tO}3@jUnlZZl}0{$CnEJ!gaz$A zi3}30CBTZ>LqwtlS!OF?A4nuwX_d4OCQ@0EQuZN4=E1W#9$^`KI+4~&rmTGgktd?9 z23R@!C?Y{s?-lK1h}2W%T-iR3$e*g5tJo(K`CO3ww(9n2M2c)>kfwJ#;IU6k`iTYdX-BBvE;U|&V#J(aIl?5l~~QZ@LheI1d7 zssq z6L<%MzZ*ZW1NKop?S>rKi@uR=WJp%BK6YykJO^KaQ8$+f+Tr`GK<2`Ahm$mW4kB;C z(@RbU*b_+))0FE(&_*`Kesc~UYN+MkoPTlFv4N>VnoWr z_>hx#>=lRiBwf~HrmJL!1`J!2wchR zACgQtrS+|SK9LrR9JPN%B%88x(!PsGHAQaOPZKGi$bI{HBCjd(%zl%|RjZK=nTppY zlj9+gp7&vXDiO``B*zG-i?T2tsB7evY`%L5%7iBy0w?awRm-T0A?9b9XoB=0+p64^LTk`Ekz z5virLCOGa9ncy|DN_56ec0}dEe&g~-l1y{hb7Ad_gfSAzJg_fy#1Z*akP-S)M*@+7 z9;vm|0n28C*1pFEVfj->63J9jGRqvvL@L5lYwmry1C|&DtuspNb4NjvX{fYTJBkr$ zq_oyL$`DCaGMgMP6Pc*U7DqiI?<%dWj#r4pDw!RQMnn#%()iZVl*l4Qc01Yw;qy zkpjt*JaTL&;!wmLeVE8bp>@@fC;BgHQM>X;tvu1^Nyev0$>`fe9w=W`qAiKo>fTj$ zYDecLGA6gQQ#(3OBDU4f1R3pU8C{xW4hy11zZU%x5tHzRq$ZKxg3NKe7Ttizr^X+naCOCYeV#pL@Fp>+oF#WDXe7nMxQ2Yj0NFznE#q=REO_7{2{gbfYcuSGoF~dkEMUmu~QACQXcv51<66vU9O2y0}GE>BJ z)ln(tizIAg*+mQYMpueioiq}BwJRapVWpV$q;*8usTp&G$e+qr{g~f@Ft$|5G>^GN zmM;rm-sqk&4~cA0GCgCSk)41dAI12=CcJMfEEkTR6O%}!m>?REJVYJ{5@2&;@)60? z9%hnP#B+IZ43>kF%}``zOl2VO^+-k5#z3n8^kzADhZ^3QguBt0wxl(0u95xxCffNn zrh9HIjg6m3ax4bhiIXKNnG-P+Nv47#*JGBD%xOVdML&x9ipVR9JdW8)WRkM{BxV=c z8KQ_DdyZs6%Cax^36ZY_X%w9pYlqTvvR#UljLku0_dFSM-Poc;zEhU##g-*v5;BdV z>&I3h607VqiETyXfFf;Tdl7j)hg)tG-6i&2B1M%?tCZ=X3Afqi4pRBeF^4qI2}Z*uROquJXPx_7Raw zD({P9jnF1xB@_6|Yk66043S|f!cDO$K%DHZ(%KPQKCc1P4k>al_7#$uF~-RH!~bvv ziS0z>q#{>hyAs*nP|943?MY;tl1X&-C9+VFBxipjPXsv{o!dE>NYk;>PG09wB0fRR zL?=5(5E=KLk##wSBiMY-QAF}+l9X~zAhHtT;WE{nA8|YI1csC5&e=qcy2Avo9q^6^ z+{bllf|gr3R}gs;D@i-&8X}Jr>FE5D$dGr9><@U~G{CwzHxYSu+#pE0b2pJcAs#L> z!nv2oMOZz7lTl8*MmyPKMaDP}6Nxz?WyU#=P+KudTb*!C9 zPPqOi!5eqm4Mc{;Om;q^I`uLxQ=LtAKFzxT+D6eBPGHq1An1L-ZYJzZcRnMs!@*^0 z#>{qFq5pKUYfrf44nU%bOn@h5=)GplBBzf?Pk5?^q<_p3XRc(7@bNBbd5JTLNJSw7 zGkTnPNvoOizSfySWU25TVC$TPiTtd*uXh$D(pz{Bu=UOoL`py75eC=>XBi?+WqG5s z9Fcy)a{rjk&T2%qD$ARl0U`~A<^C}{oDGOHQ!(#$Hiuj=wh>0TyyQ!V4w1!hU%-7` zbiPk^?!-zvm!0F2=Y!=15o7{sjZh_j**Td=8=*d^)R>bgoY`BiDyT{oySmZ{Rn?RrY3ab_FW>S!qJicZ1y^9S6^@LUvjIa9E0 zluMO)FXr+Qxej-cT&9>SnY7L+UnN}mh-_1&q^lrljhW0XcQ=%B6-&X=I3?`B6LMEc zk|_b_JGWfgRf_CP-^jK6u@zhuNye>YD!M9@%wQ!`)m4*Z>MNP*u2)EArIM-TYDzMX zCdqheyIPV=k;(ilIK%3=+7LMjPrrFQbzJR<bts-Ok3saRaY+} zHANd65!1-khe*o^l18Mn^4`cbn98TA$OU7KUFj*_%5Ne91$^pE?2+idn zQgR2k(;)U!my5_-imY&DBa%yy{;{9Cl86*n`1HqP=3$9J4jzV_W0QcV{Q)4&u^*}m12e@w#83)%mBrxm8 zeJ3AYmlI$_gru@_i2D(>v3Wu(z=pV=lGg7^E8T5?--zK2e|X=9TYk^&&X0C}7j}BE zG42GC`F<3)+}SzCoiqPP&?*Jb)VcSu?p!1@HA<36?nIJV*;Z;zai@^X0T@+sttsvT z|E(?pC9j_cmBe?2iPiiXOj6qlwon_Dt9*`Yqm+tU%2}adGL)S zYuzCt+m+T9_W~m6qBI&fx4M@Tx$BnkY;&*YT05nk9q!#kZY!;w?uSGiFlypC-R-ud zVh#RYRFd!A2}C-=6@<&2a91XhU*+_iyD5=B;aMD)`ODpgNPWK~=iNaf>55!%k0ufa z&-A#~MfV4(SYkurDLN;Y+!IKquJV4_y@+IzVLZ=eZn{?y$pIrGPHwq3kX8qH-ixHS z;g)*~5jW(k9sD+YD)zQ}8<8qdVv=kp@=6h-BD;uu3N^@O?zs06Sq@L_BsoZ=A+%me zju3hHgVcKLK2D@bO)2xteVRzjZ{&)nyU_?53`?#o2piXhjCl#j4; zi^w8qnbOWZA|`kmZ_93EPUkcC<5WE3;+!z2*n`hEOdb=we+$1Q#ls9@B4!V~k(&hT z9&F(<9Syq2QvkJIf^&z<=pG+wRfBN?lHP_WPj-^Y`#vX0E~}>ik%IlXmIX*5A{9D^ zWl9&oK5EKSP9RQC6|&qCMuTYiqRZx~O7Y}{u`!aL4K`18vUC11%qa$v1Tr-4`FbX_0zkTwR=S8e$rbAflGZe(<@O9Ctuy6i zX}CSZiHteIUo<;er36+X9SUXBJYb`#XX~lEQV1f#^VJthDcdahDTkcJX46g zDYVYGN_(ag`2%`C)au|W>zPmFQ{}6yX9FhWC_i>`8>Wkm8n;St^d@)?ooa9_af zl=rM5(o)$e?^#D=;agnhiK~KV1CgC@zH_aLo~=Zlit-7tik|I6J`rW;bXW51B(g%u zRPuaZ0Pkf!n!qFMY^dV-k;rM$qUyM-dw$|}M5!jZYI=@yJEAl!?%JO7L|VPU?O5FP zJokuP`-GDuSAEY@A_*5{Yia1Q7Q{B6GD^xc@_30H5_z|{ntSpQX`MsLwD1%lGO&~M z)zVY3Af6X%R1LQB)F7Fz9i>cLPaPt+J4n*b(};+ERa$QEX-lMvsP`PM*F0T`3{rMF zczP3g>5kOu=ov_4m?({8R~OGXBAZnWcJWLia!<5`-iEH8sYGrn%UwNliPRNsqqM7= z=Tjn|iMFxJ)!nm-NDpPXhi4s;uSMIa?CR;+K;(#M8@pV+Jllxap7WStj)rF!l~^Bm zl8o&q$@Qk^dy-kA%I8hbJ|bU;_EX2z$8&_p`>N#oc#ac^Q?=9A^E;6|DqsCPe-rU_ z;l3>HkmnweV#-dM=UGAQe=H(jjP>_K6+$xXA#W{6EJWUd>jlOfCTm5^NUZR!T$sr< zk;~L^_xIQeVH>L~h~G8P<0P4YItK@OyhJvr^J|bNTcHu4^^VZ$Y#8iGB0Ft$e#XJ* z%afN#k=90*(gjxq9OlVKq}JDxjP#TsQmM8i?|8}*84_b4tpFSCd5OruA2_kNMtfc+ z^4mU1-t*KcWPqXL^RnDdfQ|JuB$+kMq~-CR7DV#alUfrzuMrv5T*^%LbS{Kv%8rZD z`wUNilIilHl=;Xrh{#vtB>C9$Hj#PbnaJsE&uFsK*vMr9Y_4ZKkzX5y$z;-6xD%Fl zgt>MW*YBRGL?+#q;?+$tBMkA`8k%J6Aj# zi8R?G$#u_mBJH4@Q7gdidwwLcsH61tz;l#HfqPQxq30x#r9Gw06VF8=<6*4Dy+8BZ zB=R}51WpXz=S1ozOJeex3uCMEP2n-0a%tXZB4wsa8O<9*B=>LJ`%f;jH;%|JyE$16 z#82e$0U4pwn}bLlczc$6cYE^^IX6v`1aAQ%mlLE`4sR(UC!h!5T1noQh}<+ulGhs` z(mGy}6mKIUUlx>>i+ei|2^ghJ32%2Ize0=RmP>p45qbKB)GF^CPGssxDO1HeipT&J zb9L{y!Z`B025k)OoO0Fi&LkOJM-ItiS99;jME+2<^O_f*y*OE07=du_9lT44oKq#% z$@>M7A2&+xJ-i!pibl1hx8imNM^qZA7Xo?_<2NM278^GSj??Lm3F@Lwj`1R-Voq28@-)~=rE4r zWSh4y5m#|Z_IZaBaj0DE_l_Vk#>i#ncn*3e6TwySxt)XFsYHs^;W8H2A@9dTHh87w z+ul_`;2l-3jPR~^eUXt+hW&))0LvYBgtWSg^Bu`?lGzD;9ru+IcamgE!Dwg3BJArb z#QjF((sxXd%5mq5U<)tZ*hnP6YQ)_jnQZW^d)x1*RX6SyS_yR+LD^{=hj(7!9a;<5dM(aNgemVG;&Kp4 zg)4O_C>4wAjkvsIrx5&RwLArXsp%Y7fJiY#y2X_wEnEo`Wmd9oaixj8^_7uL0y> zd)&)JdO`2UNieP+k(<951nC#oh)AvDk_?J#L*$nOlDrky0SIF`;dkLLmSQ}k;`&fL zuR%^Zc`t5oQLMpaIKMhW3x+k2s;JsB39@nxXgvP-9)}P zAjy@u14Irym*iU9Q6l@{X$IH25qE;f4rS+N+*u+wvvaL!?%Qz}h%7%T?c9#LN+jFQ z+|D%j-MHICuI`kU@5bFF5(U5FabFMOo)9?z;}%XH#TkoX%XHU} zAGVV+%Y5~STx=m_R{NR}83pGK*IMUmOC)B$l-cC#LZlkxee^1<@#vfK(v17!m2q;EFK z^nljFwa)qG67iIlzRvp=6R95LGOJw|eJhCA;Q1lfy6#&^6{(?q7I(lEqdB=Ww>g&u#4 za{4Fa)bc6z0FL-4#qf-K8_u|F)F-&(p8y^S&ViqB1C5?CGrXAAr)6rY#KUXVFMx#%CCLUs-Z6rcQ@o639L>T{~pQo8z{BDiyuRzBE-YB_Qg*nt+${IFF~CK*pKlui97&1 zO+UwSJ{1j>wNt8eFTQ{{WH0id6O=CGrH`KIJl1{3nQX zENf) z`3m~$5i!3c^WM+jhzQmNx0B{?L1eZn=K=oLiFAag&0J=%zZ;Qb&=NQq>hDXW0E`?s z8Rj2Ai(aw&Cm3YD}inG62!yF zYX1bXvk$IBNGz^({%J(6!qtWPVgy+x<(4bZaHGcKN>`vLDJY zmDQd{1{|=SLUr;`12i67kKO~tUaE;@ZZ}=Y*`E85Ty5%>Q#I`y`<>HRt zP9zAUIIi``?;}#Wfh14-*@--ao`lP=guFzOl^tV3Dv>F>q?VRYoX9uZC9x-zCGzDm zNn#SJ5cwF+N^aSeP>aYC=+!uhPiRPFhlP`$TnPzHh?J^fU_U{LSX|i?niGkFD=a5D z6WS8Nrx{2BELTDYB7(zvnM9RU_W^Si(!g?aL zl}yuwuZSclnHC9KiQwpz+i9KfEfJ3*?GpA9*`d65OgKiQ56H883P1-^ZotqA6{?oz1QAruRX0jeD)ca*3>dzY03|# zwX)0}^b}5KVp@C4%+zvCPU~!$2AcAev>ulE>1WA(YTB)qnO8>Ac_eMPWsKj;DbGl| z&ocLET`WqQV3|*Tl601*Jz^Q-8?)4kw7HfsI}FUMNn382P7eyRHf^%w2hWY)q3BQw$(BtT{9hCVo?E=fRROaWjQkJPaMRGrx7O~8? z7};2#U((82=3I^QYg#4CG=vw&aehyWTPA^(3p12n$1+cB5GI^{xn-Wy+}-r6EK_4U zr?Vv0O>bqHJ6DR-W$D*g=HkyJuZHPK%T)M+nda0wy{~1SEhKR|rr&3oF_?*1pDyX+ zYni$7&)b-3LS54*+c-5Z5UE~1GXkxSr3R!=w{c2q*$1Z2w@eph?nqy1nfY3-!Rae4 zbEU=^lD^t9b!Uk_L(`wO%x@|+Jbi;@hF>mmMx?*YQku?v>Dw&RU&}r!{cX$i(>P<( z-?MGw=(Q;{%rl^=Iw3eCaAHy2Bt%})`nK|iS+jQRSgI|Ypjnv%q zZ!B}|B=id~PtvmVgO=$(S(x|IFRX1&PhK01U)Zx!zo$2XGz>@P zTd7y@3LmEvjx4s!`^prGEVoPuUM0slH?qnyKkgT%Sma5|l+`%JBWo;^h7(nmDj9jo z)bIsYQ{LY%~6pRjI|1 z0+xA7<1C4sW0{&7XKADe$I+CRMT%Kwq)IK1q*^9bnH7l?%tDQ`GLmi? zN10WT2s2+v*`J7%vCLFW=gCN>WfCg2I#S*;WmRfTq*AsSkzRkE(`im?BUQ0l#0$EZ zskuEr6{&9H%or+h)7MpW z=76SCGWwcj>T5csqHkE{F_lV-?y$^iWzwT>TV{eXrK7to^Mx`Q(LI)_{x!G5;l(4- z4{W_p#MvmJ0P=t0Zu)i@QRM=VoEnTpZxE#qh@Dn*Z5=3UjNa`c2{MyOPk=r5K@RitAFZ<(5^ zbFFA`%lx5C?dZjpxk9C~qopjaPOIo; zET#IijW)K-iz?MVdWB_1sZ^(EbIa`0I5$LFSZ12WxiNaRWqN4JH$~f6W|d0yjwUR# zRpZcFE6{W%`%J1bQ=i2rOX$G!W2 zGd+5TWxR%GGLceeGPhlRCNs3hnT)>#p&;eO_!7tb1-dC zI%k!=-C1_N=B%>E^3;y;{hlhqnKdWV4ht5HZ6(?RdnCOtp1`jvtuUxEd=f@=Lc)!^ zOi)h^U5Q%cc>h==C>6;YE_ceeP9v&eQ_kKfsP8#~Y7`dq4fYK<-u;<^=E4xn^@80P z9o5kK(2BX9mkWAyjG$Ca@BGEW{j6xw65(1XTCb>!q8*Cfoh1?_lpCmMzoHt79#nKn zQCXaN8J%-m=xgkcWLXP6H=I%K&<<@63dDCkm^?V@P*3<*8FLD26SxscOG3HT2u3B(#ib^{$p}isn0H zlf*N>&%){TEF-8)MM3N93%aSXps#ZT-O@?Wr0#+`p;vHvV_y{1T1z=xE%~hK+)}kl zQJqtt5!rP!1r^a$R;k1XiZ*DSXK5Z?HMEk-?$LN7G<2?V->Ah8X(~@CdSj00(&BkR z=dKiVy|##z8n1`On>A1374q$pyDz-73h$P#Fyr`oMJJXCcT`a$jM*J*yc|W<6t#dX zhraRx_Q^||^xk|~&}vwhxgTLugA(4d4J_f%ZA%=>IrL%Q6uKUHI5d5XLpNA-a;czZ zh}Xk%jeu^p=+3Z1w^;Py*1t++2xcKp@6Z~23vDH;b;qy7S#%Rt!;G4Z6%>9%P`{0W z7Th3c+F(IL6def(_tP>#n^oe{9{9yKLZ@5q=!+>d-=cB&f{@X~Qd083lC6=)5*u&ie1}$8bn#*GQT^d5KAQe?3azrC zpO2SRf?DVbS+-TH1!BJ(MGX~oQPcwxt8IF5aO*6p{dkI>N*!=qgEhc0$^qh+*1P;?#ch}d{l6(FZWE6Z?X&S#{NVWQ z{@4QP0k3rt?g#A^YkK2;oRtWAMTZ9*`pR7Ub;$|7Qh?baPxzFrW6oSXYc?`qNW=3OxINtqhMdEHC4&4G- zMhz7mI8V3>kRHqa2#(Q`TSbGXfLQh=AP&7AnzDXvRfEo|!N*#nL0Y0}YJ-|;g9d7= z#%hh9E)rY)2E_TE#GN9}tvS3%M$;~F=%}rQtG1>1=p;CnC{RYMaRB|CC4L9`(Mp_O zK}ud4h)Z-TL%486xMoF#yB3J!6i{vAvQW75fSCJigm8y|n0sxQ zaIXU~SMPZ#Z!;iHxh)WfUWNNYT%sHx4($fSp|d+k=m53zNVRT$BVjQ9twS&4^iE(5 z<2>%c#su4WXm#>YMf7Cme!x7)=nqJ+>^T@qSeGN{6`acbDqCA+e?cfqgfOnLMDxBP zaR<(0xzCIM;&`((m1dgC@IDfH9}uT9-gLlcV1YrGj6Z<2=IsmS~q8*6o3XRzMyOI!OK8yy_FsUm)-&gNTNQ~vED;R-Ym z)S#@OJ@C<4q7+KW=&7<|$vTy!uXf24RCtNxc4VobUr`HeNe7{9p$1r~b1l^GCZTU?O+(XI@0%F-xDtn{G z>#Om`t1b_#F0EAJTzHI}O5ocD{;u0iLPM|>mnap8wf{;}{z+4AtnseVc$X+wL%E74 zWuB?8X#7H%!9E!(cCKGa;%&ox#F{>fv3b=se8s+z!fPRmr1IZ_GW6-g!@SuKI%HF?5sI?|a*V$)*8Vo=7qi~{yOEESH!;xQVHg=-XDtw zYkwA0;wtgx&VyIa`sJ5L+c8|CRQh7RLj|FID*bq=Lq#ka3)u^RGU>oUhc2?{O?)Yr z2ISJY7qhSDQcLt{vqE#}Lgm`|T%79u37-uT_}+OtQCW*VogseM-ihq5xzq=1mkKuJ zgBWS5TC^UUP;rZ9O`OO1MC#B58UQ`v{=j4m?0K=elEU30_W1Q zD)6-}A_s5ZTa;BIg$7xPc}Q=lMSq=MAYnAP``?!EtVI9s{<+Rbbq?0fHr|r&i5|4b zwDCz6{fru%X3?-uu)49RL=~}1T3bP16-=SIHuRTLDYU?%N7DpdeiE{FHDOw@vAsiY z*5lUc&?(I~1udH`Zt~?e6twmP#zYS7a!fQ0wAwjTBsTsmxs|}3+ND;P=9AP0oMdugvHg ztT`Dqe?ic_8v4!y!Y#zu&hakvQ;E|HxV85@@{QBDoAHGyP{O+hEtccm785k`kjUPo z+=ds0drk9re2Z|s6#cwVxDOTWP;^kyRzMA#9w!~Yi=y6%=jVBHW=xg7#}I47paUwjxJDD>;G|brw`# z%iB!Ry0H>ENbB;q^}?m924O{wpO?_$$_<<&+zoy?LbMBW)GMgp5KSA%tu93KuH*g@ zqI-RvL-Z78abw94eba@@5u%4a6ZAx7UfYN0uAlL;=n50BQ-2BlNmIG0kED`%pM+kz zhWkQ@zSnqD;Fr8%wOa8J`Dg=LB5N>1<8A6K=@ruSKD$r2pJoYq5$j);UD{hv9BrJr zwAm8xTa|bO`Euw{m3>3eT1{o@SV?95Ym&+^4IQQE0UU92iTWyf+Y#PgQnNj?`0wS4kJC=?>%izO^XZn53KSzbS=CBu8%G|@M5*CnGV>AVN@8F z+zSq~$fF|BMcZjx#N$-9_mWhCzEJ#xgl^H6IKQE2a6bH(k8N(9{MjHxcceJw(zU#el0k()NhFn zO++b;bun}LwSdBay*&Aay*&Aa=fit%DW$wQvUDyM{l*{!#J5@o2J(n)VG45Z=-_Z z=L^ayD5$RXt->nXP-VMEB;I7~*Kr-gxBh0);>;69+I(c-6`(paoX&U0`Qhr zaZip@W3)QcPUGbHT*B+?`&VeY=)c^GhdjyguqS}=p1C`)x?^-J=0Qd|&oD}Owb!vH znDj35eT$^``Z(4v>Gf1j{J*3pepu2IKP>5qAC}ZsoYYpF)K;9-R-DvUoYb*B>4_hf z^u!NKdg6yAJ@Lbmp7>!&PyDc?Cw^Gc3;eLay9s=nz|RSMn!wKy?F}PaE34kmHGWm_@_TD~x_w)KAf9MW+vO|H$#g+syI0`QvjIU58QA^qwqg zp=b?!8cwga-(o}bxmu&UKLUqnt8c3?ZQ7M$J;pHQ_`XlV%bvrUhUrD$cXTMDIG+%O z>8=lu2fT;>M7GxZEQ{Z$T)}$^39nWgu7&*43p5Dl(%}4_EE}d>NQHHo@r|s!{yQm0 zaF&`k<=nGI1HW}9w7(^^za_N4CA7aKw7=zE)BUezje_*v5^ftn{+w5kUIS;w;)1jh z$c)qlY4>vW)(g@X8gCmoj<*Sj<4u6KZq}<3? zryRs{>2vJOnf<10x*n?&M(a)!l|(ApWKaf>ON;*DSk9%`gO1(t%A|e$1f4{E7+bk? z4&!dJ#=VBL! zchIsCT1!JsdJc`~&go%y9-~S<8+v-7LyaslYuKh14XmF+EiC$FyVOUA)D*hLayK`V znl2X;G`NM7sPH0(+994xf9$}z$D-=H@cyqw?@Yljs@qg*Tq2(32Mq*W@7n;oM9`G? zF=xMmU2H3H2)l#a)>5%rw6>wJwTox7E z!X?k5PjISlYA}oD>AX5!(PypkW}9uNKR}LK`)YX7j3W2T?q#dR!Yy1QD1=lv-d2^! zQi&T>;u&8e=@s+m-=y~sjAmv`#Cbz^>1E66izR#Jh=uxnA#>hnw0q8N>;d78P~L^W9Uw^X zxV91_znSwe=Rb;>&gy(Q=BTwm*|b2%7Yu(^BAbq3AJfQY)0c{-XuRkAc-WKIl!M&X z=(*5iugZ8T`Q|>e2~Kas&bdPauHcnyzc^i}sB~T7f>Z+ZV;v4ncngbhITGG>tgKCm z65fzff@)wMG+gd{or*l0#9Q2|pyIS0$k;DN+i))QEKr=*pXbmEKv~+FFb?@G zCrH_~bK@q&bE)7C{JO72SNh|#L&q`G@m%}kWTI^dO?rE9TiEF5(&A&-iv*WV#ZO{I z3WWU^%*5|o6r@ro4QIWU`?Hm#XXfO6;F4Y!l-IPYq!(YvEiCD6!)VJ~yFVrLM}H1T zdMl2|yzrmP1~v$68rL4h<@g->WvX2=ZFvt^uI4-VEg*|bIgSBkQO{db=!8YJZsL_! z!drq{yT)ftc#DC4MQEJLIlPXF(}Uxy61&7n?2_<)Lq9ThPI#A97mJI232zQUIP~8|S(GS4l!BQz zi%M5y6r&q{6!f0wP$7iI=qubXFgA$Mnmuf*q*s0x+dk>-MNME4oH+P zssvENdlBQQ(IrN^KV;b$eSw~AWMfo#X9|@@Jcr&M;@EbY@K*Q|E_I&Ib>vd13po{x zDz2cuuob6lQYnK}T-xKO?2_5PGI_XUcC8FbdRhK%chYO1sE&^uio76gL-Iu%!mgjO zINA_WDTh2RqOLCzRR$_Y_gwAJr4}v5`G>JpIl2z<82tnDCC9t$8J_bB&~fxA_DVa= z#BakxB2N8)OdfF>p=h$Ag+OMfGU3HH@aULD-Qe4r-i=$kIH@+FXd4)nO}+sNQ(^2| z)B_i$WBxfJjOkfJC7b`gpPbRcW7^$?_X7KIm`cb`+~czN5bA96^6Kw*z@BY0iQERb8H) z+rP43Bu^f9|BXEQ;B=i!)X%qC!aKV}m}f5GR+oPpx;sxh_5P!L|5e$t^OSAu-^k(<;N`7G*7QxWVshH*0GoIS~W&-Dupr8 zq!P2^5T~~;PkPI(Y~?)ZJz=@gs6kHeQ6J@>-jO_g`Y9`WX&#F|XSptU@_5m5o3LZU zd58^iYuY1EDlc1!A$d}H&2oDRODe~GOXg1H-8}leX(dYLNqLv$rueo`cq1@>8m(}G zfEk;u)+dkE_E?FX?ImBSxBM*>&LjJgm2H_vgU>8?pIThXkz0edc~bexO6<>*%0bJC zY{Kh;GMIAYuhoJ)b~$Qgcjn3CM{rqm(+HwpESiEdb%S!xWvB9J@SBZy_H6Z^^x8>z zYTCiMVK90pbQFk_%*i<^@52P zrvbjlnDh?8TPg@$lHMCW%BCL+Vow2FHc>l=&bO!$_BNR-;&bK6oR*sO%9A-&WetA8 zO4ID-xl{wMDluyGGVe0E^!5+9tBdp)r2)Z6ihBNWn{u+N;b^=t^*;qK2%3gz z^=S4=!!*&~5#bUUty~&|RU5}!^9J4s2N$O2SEW!Li!z(@ZeEyf$6ki<7{k;8=VdGr zQ50{)`h{ux2_kd$9PC!ObP_v2W{<+97P{}#2>xVa#KZ3cKJ8F5i?%%_=;?LXL9^U< zLsIN*mKg0iSMmt7GMctQyfEd}KF4yBa+qdgADFd&82j?9eIx8l7@t2(!@uTz%rH#` zGTMi!hjKw~k1O}r){t_9DX(43*$&PiTS~s7ebSrv8s9!idbbzmGa!5uyo+zkCB2`% z6qLkz#-x(;9;qhrMk(4>Pq_Jt)+ic^y>*t|f^sm*+$IvM&;yw3jCqUEvHgPfVt0nQ z{UvH7=$^MF_*7l6jGG*s!YFR=1QzZ29GQy36 zU5rG+Yp{bkht}(fb`&->p$^qSi5NYIP_tu=onG|)j%Zg&Z`A-P$IBSQjLz9~+fv*R zM<`ZVOYjAmMb}s5a>Pj5UyRl3omZRa`SS^pLt7 zxJJ<3IL$DjF^XWfk@>YBMx!w%_OWP)qCT5>q`}^ZkCNV?_au*v z%f*tQ7Re|3nUsB)tf-O^V=y9eAL;kw--Xy0H#ZSN4YTtibej|LjAzJ_jAuDZ&O z)X)wDf&@MzEZhHSBh-)s|1x$ zu7Gl{G?&n%a&I>kE~A;CWy<}eXoR9>8gH{&?H5Ih6n&&)rSY!Rc%wDm0FBp3Yso9C#082z z)_iMfZu1rWq&gQ>4TdUuS*`nymb|{|H%9Zlv!!U-y@jA>v<=nN(1sdXOt}-^-->?a!)I_T)7^qa|hMAk#bqer7L&7 za^I_dy=zL@j;QTFSME)X*HpQ;HQp=Ac^dCmE$=jqH%{X%=qtHR*4EigTVmz_30Ywej97cIsa1O`YU&taP;QfQKPY!Vxv-}9tCljZTzSo-t8(p>drG-w%H5@T+@^UXl)F;7 zipoWl`&{Rv`dYv1l}lBwr*fOreiM}YM!ERoVh!^i4A-0a`jgQ(B@~( z&U_unvLCB#E9J~Sh>fh$~vGb)&^YOt{;g8 zbenkQZypfuwc~x_KhMFbC416~6>Y;EIp+2#YCc|MyD7R;(PWkVQ6;|c5wE*>H9NI2 z*;iG<RSf4=YqsREw1BKm4vZ5N_}(APl@cw+DHO|o_@>BKzeBwLB6Vf`Auk)n zDE?py4S2%%{Jnw9Dkf(41$Z5hpMGO2 zZzI=7U=7@|!#e67NZ_6?)@o+Wj{9~<&(vUyQf5iYPgmy^pG!rtP96yfmny@$CZ0K{wI8vl0$a$XXK=^RtRQi3vlrhpN_c%1u~sk-w;i=x*YjZQ0cV}&9&Sm_&JR5#WX^V)o=&zJx17P#XSmM zCyNG2Z;B@^wx6P*WrV9*R$B2uoR)IS{t`B2)J5YJ*Lb^@OFw@rMbL`t1?^F;;7H-N zdV)GAccr4!8v3cCtvVK)ubFv#Ii#UG6*bgU25UU8yGVSiWAPy!ftLsI6pd{l5+5f7 zy{5?9&*#ZWZ=j;L?&Vu>Nw3IqzHyZFMq{VaoI5AIA)^G1Eh=ar_76;GHa)GfaqQD@ z**?Pe0gT=nFX&U8t~2++F43yiV&SgtF7amX5^jQ`a1{w{ijjd+c@g`Lj7DL%kRDbiY~A074GfIf}T@kZeX+Q>#Dsex#4hA2e)@PH1!=p z?MFyxd(}Cjp}R{-o7|NyXddc_+v$*Mf)>NZ%$0|&7|lj1j3y{D-@P-Jg*swXTqPD@ zUzxdwbU*PbjW-VMfJ677wipe@ooGhaX(})33}MQ~p>Ju*YZ^-`BQP^@X#c8$HnkPB zvyPxmB^kx2=bwUt{U-Ng**&_%zsZ~QnyM~dEz$JTpCr8>6$O3zNI0!jC z&7ppNIpCYs<#m8#+XhQq>FbQ|qi}9zxTF`Xl%~HTW5iHJgMAdEwy=S*UyO`rZcvjHiO z)1~^ia@)YazD-eE<(P|6)i+ocU)o}ZHEk{FP3|gv>&^y@VicUV6l*QAzxtjQpTL+? z=@^+47)ICsE|zSrs0`*>lSl6KD)<`2=-SQP)?(V~IAwDt%qcV4hFbW;a;nb zsYR{*9+j2rF7brj?B!g~?$&mYRo1hr+(%G-O<)q;vCIt{OdL(f4!V)QM18bF_j1AIUdKOo4&I4I>JE*<{sE(oU&`A4ee_0Nz2A(!Z$>@b1Hg>f z5)xs08RJzmn}^(r2dF4DlOlS8-e3x}rdk$03?z7RS+gPnk z@5!-fp+Cm{{dm`4x2z*%@x?kuuC6wfV7xLZ_pqFdQehg0S=Y3eF#X<_cSJHN#~0LIhaHs4F2Uw?}hHH6jdEWRJJAEReRizQ_Q$vt!K_2b3# zzK=^ie`Vh+cTYAa_~v#IkMfMp?%grU_?=r$HWkU{e6wle0DfyIn_lk2_i3_eA-=UV zH{J0Soj;#v(fvn$KE`-D8613c>`)oIxb!1tXM-H74bRt zhyGrPlHS$6CzJFp*Lth3^>%&{shOkK2%20%(3jbQ_UP{AtyP2@p{Q{i=He87kH2GK zs~Mjaqrk;{g5c7UvVyLjFFtF2wI9@Z5v~2|igw@0vj*DG%~D&hX?rQ<_ip?Wv$hRm zU84(H!$+uTwCA9|;qGNwZhv?!;C+4-Gw4S_--^?B@U+a{|NqXW`S*%XrebAed+lGf zlH7M29~sLQa;YR1w=FTzeXWnrzT*ABKWiDI7yI;|FD6bho5?%q!3kKo!+f2NX zX~$F1%BAh_=1h7(iv=})M)G(~N5@BeTjA9WwRliUQ?@7blnwXwv}~W1WUIw#j;~*w zRw}y0*Dp@BRntJfK<5(vNa#{m9rXfReZNI&=4_oEx)1wx#`}uX4e*OidE+#^0iU+S zsVBT)=2oj#^;E0puHtwu-W!&l9Ox$+1X?*1XwYF%(YM3`jB;P((B-_Ym;7YA0@nNQ2VBB#OWwn6U+AQ z#;ZG*0yOq0zsibNbNroSmmdC*#}}7Y;vCG3G_H<0E)^RpoP0^hZ;)_H{NXvY538Si znds8}yP$zhCFptPD{Pi9x@@!(f|8yS;+~T9s`)5)9%epg+4=r{ldHG9(c0Ha%0W3~ z#LQhHqv@7^OH)Z1FYa8;-$sT=N))oTGG7hiWf|Y!z&oFV#a7>4kwUNA-0EZGH?IZo zm(=Dh3s=AH=bFhIkKcL;YQf~e@ph=y7zO1G>dm|k!?wz=K8(fR$)gpgd?pv999Xi> z4zx+Dy|Lupe_~1OB^Hvg&b+^7baCi%^a>ucTf-6txwLmKY-Pu*@;`B(c1dPLm&}*r zCKRu+;7e9U@B80@V;$L+ONkS0MN%^kor}4GC2D@1yB~3G5)Y%mOS~I^?`t;;`at&u z-g`lI2m&r>f9tA9s|#!|?Etg$2^pzJ!cJ_pS0Q2cuG!)rTl7x`OMx|0RMR*u-l;oa&n~+vfY{L_t!HR2n=?xI?!JsyRu}MG0xo`L&3W zW(Knz_s4WW#jtO|++u(9=8_vv z#?}6oyLYcJqm*q;GGgZTmdpv|errFm?%#chJVsOg;n3H%wmMG|PfOm*aLIi6!r#D1 z$}Vle9Lf^r?hL=36>vc+rjA%P2+dDI;^DUgbQWK$=!l{v{=O8iPKMvO zy83mEOIPX|BKW38<{k&HZ=o)2AC$Srp+8U}Zo6i-;%{%vix_;q5a_o|wc4jhbb(Ku zk1oQo_J?e31zH86vJdCb9L%PyUtjFaF$zi)==_+LQocXJjglig<^-k0s|WdLm3hjc z@2xIVF-!h*hE|ookyL`*>f_xM)+Ikn?q4LD)+;C|&@a$_wC~NqKgG#Bra{60`liFZ6xigAeQ%v_FU9 z{#p%Q0Z#u-`^zt$Yv24anz}S;xmYO3&3H!Ug#*k9Xmti9yiRB@{Ed4v_$vGj>baQT zINpLwq!xnyYhFeZ))1f$+s%=_lsNc^shKT;<=bI!@@cyrEakgGd}E=_DBp7|Po<>k;d4RG3L%hth1 zE?$=5a=3Jt?hXbT1X=}}{&l+=o=J8EiG83-jPjr9?z}=QnFSBt^aboNVHb>1N7N;w zH!2Fcpn;$Y8n3g)dt2jOsPSA)*}Q?n>Gg00nKy8l8=&J=x%*_^N>|zP#U)-%mAzSI z4`LQFsl@F2&t@FQZIM$vqT^;TQZZv)*uKKUsEKmlqa4hYht(KWg4GzA^)I7R{@59& z^Zb!N>4n>J9!c*a-9!GMGIP8GUeeaISugMokXbJ1xb$W_*s*^Th;x5EXP|1xENS7wm!=*@SmsnV{YgLCp}4LoeLQ$hCdir0nWT zIyv4bjE*KAUV`@5Bst!_if-^j9lCg$LoV!`WnX?RZ|ht*oMvD}Wm3U6^!{E(uuh3n z`a0AvMiuO2VKru6NsE)bl7{^Qyq9L)1`6Kx;@qm(JOWFav6%DN4!i%e-0&+vC^`FZ zveOalOz?Wk>`dS!*WbYiH069RwfX*4i8x;EGvf8wD_R|Sl=n{^nv5NAbE4zWg$u<( z!5+Y?+86H1lJOuYudL{UbC)=o)i#gM#`g80L7ZMH#v@#u7AY!$Q(tpeHyEjtUf)ry zLDE|{QqW623gWr;bp&Hw*S?OxNVMWJD&Fgpo#=#jXBqC73GY#iQruU~dX;y|Wd#|h zkI)lLO?XTFkrgjk_#9S?o*fH$k`f^B`_< z>5M3AQ``o{DI<@Vw_*>O?Q*NXd*sj>wR1mzk1_YW`q!y^swv;DDVy{-kGAk+IN$#0 zmyE80#Tf--gjol)wBw5z(ao6%-YAD>)W&kMlZu_4?y}=`6m7^@(j{~2-u&J+kKTsE zFGb9eSx9{OINdXn?`p)UT2r=0oIZf8k%-e%SbZ|uj&YpPpXaf45vrq42OWJb^y>)c zuznrIskdK8aXRJKQJmWNbrh!+(^#wAyCf}^i>8OLN-(cGal2qmv{%O^J zJH6cFP|%*=UM8(ce%a8a`y9u9qv+C`?QnA$ws-AL0{bdvE!o3zm+9Id=!1v--Cu{^ zQ)FtoHzeZJ*7rN(bg`bwEI^B8Tg|{J1tW8k#J<4fw*;B9BIbg(^kodg?=<*hm}B=8xW$scDssr!nQdiu zw|EpV=dg?d`?d2&Z?u6I#mA&HX(eGF1$_{+xLWemNsfo#a>$d4xycr%%d7J`8LuV# z=&w_WpOK2`({Vam7mSk_<+&U|od-5G?T_bxV0^jmCwSMeAFsQ4&n*~{f_TzbaT?^$ zhWqRPmKRP!xHdZXDtz}KFBZVr8=Be1EX zVYU^oEgB(7+ z?j+=R2mGEF))TfciENnqAz#yC!}K)tWAr%mW8@)UgMx7*PTSDJ%r9&?bQRhVYtUIe zqmh}yby3eqPSfyJvTw%9Tc{&yfzdU7s6$hA1b+TQ2|auK zOM0KSVV#rSN6^Y>pY)bgmU0Z*An2|2g2dlQc;athhg2oR7sZSIDYDUqaWOfXVKZG8S7RJbU`i#u1Hq!P5X~lTW9=rSZgG+dr z?EU)K0^4)VboWb{@HWHt%zXmeGs;5w8BIJ#(5FFch?IdaTn~# zvf~uRF>5f_SW%xf!u_DAk?#xSo(G$wS8&T-hu+9&H+mzZ&gd14ien~bv;#gSqtvly z&ShbH55Vl9gl%1#@g;0`5}1=+)3B})|9MX_CE^*8M}bOc2aK-3z5t`Mdj)UBYGq3jG48IV^2oUymKt+ zCB4F!?afYB!mBfoM*-}4e2y<4p32@&ZOe%ofF)&L;0Eez_+AJ zn+8i8H>V>UYHz_=*$VFq7u;)Z?Ar=AQvCA9`PV!k5x1uvW;Gkvd~>5ySVNc*9jj;z zk7i_m$EbETUcCv$+oV{%8(r{K5By@&io>)S9HS>u=Zv2B_cy{cAINa{YVuY=`PIS| z@axzQ8(o$WexVy@$EIdNbTv*D7}dvU#;71hU`B^9mod5tdjO1n?kMPL>;V|gv9(~z zfiocAR#~=w4VUo7`P%1hiAA??%{cUqw#1-?jR`nd+}OpTnpz9eB7&6h`(7v!Tf>xy zktq=)QzAwtUml+&U%cV0Gh!#5->#0aM8eCeEU1dkYU?%L?Hcc8od+C0XVeQ$^G1@aS+A}iRGcwxq*e=?~NwklXXpeIyKesrE_Hh#J@e4w}_Hh#J<0RUn zJ^R|nNwklXXdfrhK29HMyo%{;p*Xqa1a0?A8KZCK$<5_!aI?YOy2@Q|*}mWTuWB&A zdJF9LcT@T6cJP0bp6Myv!c0$LWO~X!Z*~8>+)TgZe9QI{^w;(?z31<=KU2zo))Eum zvsgKp(1iDdu53p8tr)+b;6lEy-$?tg%mAZpxh`)R0|JU&n zdQ%p^7Br7r7;dD@6eKrbvA?!~JuP@6{cu`}S<=QCF`-F_d({l9pTyZa4XF9VBX7UJT#9+Qm zc++4>)2DNvVTf0X9e;R1>|2BkZ-{oe8~-QEDciNZ{5j>fFdW^!qYS1?M3cADAnR@5UGn zgBQfe)V}$CA1~bFYXtK}y+e05M;b`@O8mU9JmF{TCE95$|W`5x_-)WTBY$e zRgrkNYP@k8?PcU}Y+A1tnxgUUSG&|xuB%$(OO<`d zw?P3izxZfgM{pDc_d$Zwf&x^hDekS?aU-|~FJ}q(Ed#Ux)55~~HBp#u7%tpR*lgj@ zyY3YvU#f)l_a?%8`fpSD@;r&RIx6T{Xv(R`eT%Su5tP3M^7|FJ;{~!kRKKCB)vOVc zoBRsK-_oIDgTtd05N)p-& zGa|<`vmYa~!Zq{OU+0@mGtt(TpoeDDLufgSo@GRn>(KS z8h+>2mhFVbI}h>LYS*f*TJD7BVr#~PG7?<^`(@Dy+{H0_RoS%U9o9aZ9`g}iq}nYd zTBD(1pUb8U<#s6gNl_6+FDNRnvd_LJ7C)hAj-tJazEt#pqE{3ZL1SjG;DL669`R8o z-O!!C{L3UcmkiO`^HXRi?8mo6cLU+fu&#W^ysI*!O#O}KO#L=8ljJv=UAi=z$Jm6o z%HIQZY2$_1FGhMUy`bE#71%AaGyCyxxIN=W%0KYpn~nF~q!jub2y2R0i4Is4^fE&4 zIc&L0fd<0u^-7SNLz9rlF`Hgt^nIQKjzEJGmW$mg_bncZ z%CDLKi9A??)97#9&nFHS^q5~FtZY=5R7JP=DA2&AJ-${h4fpfFxBq^=u$o^E+%CfI zIq!u_i;dF+NSLn>X<9w8)pkW&s|hE+${wcz&6rDgwfs>Ew^WXCZulB{ ziF`v@q%-#|{ta&SEt(eRlLnUp^dv?kb7I1EZu%BhL|gegdVGO0fm24RKVt9ShR&QV zGl{u#{D&>CX~itN^&$Rd9>3nMXs~Zdht?Fr%Wi8-9!B;Yiw@&Emh*seYtUtG3Kh4Z z9sTb<9oqOa-hETqrKlNBr6joAw{kx0&voR|qkg@))M_U@rZY5seU_Bt?DFzA)fqOo z4ky_o!wZhbkQ2BN9rnlZ5Uo4kq4G9f$6c81tq=G8{U|B)3+x;s^R8}v+nUP2R#j{& z+3yqH)-dVax&UuiLcb98_mM+wF|%`z8mvg-IT|nMs~9bg;g^Mx9^0k9MH}ZxDOdaT z=29DfJizvGD_T6R9Y$`v57JP_oET>3#x}i2;CXOpdNI80Xh*nGK62>-UsIRP zwn6T1eT!%D>=&oCkmdA(aW`YOoUq*i@0$0_pT?oE@q%!V0{a5ZtS*gD$e8n8TalRf z8Mk|fT4?Bbt0Xj4Q+AhfD?#pK*uR4PCa}e`>E5R}l{oG6^+Su8#C^*lbLREWwd&%3 z<$|w0;fu1)L5TugD!5X=#j8kew~iC^%q$+8;vUIEGp<7D{?ukuoE*CSghv{<+c0}j3ghZY+xsM|t8#WeI0O)q_cq;fZW29~|Q zjG%02#oSxaiqTz-1)au;1an>|K})&|x(z2V99kDWjM21n7~u?D+d)v%W{1ke!*8Hs z<;rLNLA@>=`kaSSu^$ znNJBSi!s}@-GnzUgY!*#N8q;`4U%4azjY?P3aDx3&RrttVcgYV?&_1wg~*Jyh6~w! z71QoR`U*;j(y@okq4)eLsf>zAZaZ*4jMLkS+A;_)9^aipLv48r!MEkPEEeK;4n?Np zmOVlp>NXTR$`;8@%G|Zkxx7fUiHelDQ@DhZqe+{W5BD zzMxlB;`4*T)rKF-@n&F*V6+@#4x?Y+5Y+fe300Li2g{In)S80JefIzuJTOhp|Hnj9U)V@U> zF(WeC`?a9-V~jGj=jFC;cg*{yl_b5pFl#V+1m{PLF1cK|-}_0tY|PypI!EIT=q&Nx z#5}{H@oNSBtg`Q5&BUS4YP?t5GMBqep51m`k~Z$rQ1ldTFHL%-&|GMrY5UefAbg4B zx2xE{Xji{Ac8Ddu#mLX;nbBvNO~s5a#*c7m(lgROI$;)K|K(^MK4%NFyyu*%|SJ~rUgm^F5eE-0GQTFApn86lz zb;XC5eK8A}P#!Uj2JFdf2Es3~Voc=Gq8{c7Mw71=?z0r(z8)!Dd9)W35ATA(cYM{R zcg~Y3v>nKylep{0xh*~>>$0GZf{~#&yhD?UL(kXbzK_)f#w#w{Etr4bw&~R^l|t`X zl&wg1U6S6l+fwL5geJYa;YBhUc_aDgD~!Nq?aU?LXXE`{38^>O)3-QV?Q^7($Irot zdBExyjE?g94|~_9hq`np`uSlidjm$`A1r!oD*G>36YKaa?+?Xka#g+&h22s0bAnOy zzB|}{xD^Hs%-9~HF+e|CGzhtwS_si{>}oI?f*lb?w`gb&AK{x0Xm#3ZB{k^M9)$7> zO-0d@jV!o(;q%*gLG1?;1^n7~>C>}hlV1Oc(uR_Xp4NG5;(J1Uy_F|*|hu#))~K~d|a$s6SE&%y!usQ`!95~IHaS+pIUEK z{Ba}c6~nm8vI}n&^qY_3B)_#jk+l{T$QJ@q1Z5!WR!1 zkxYxl>q!_V%~(Riic`*12<6!q26nwrX;ipDGI+*4#PSBVw}MblTc z_M3mg9IsbRZZ2K@Cw{xZw)WNt<&l3qS`MRxZ{2MB?m`;kCA>cdac(YMd=q|6VWml> zm7hvBg|GsTBHo!?W*!cG8v1b_-S%;Mj;0dGIy4?LC&$|}k!S3#3=PZ2EtFFzrd2Q)ilCn#EPRg9Te*=eNuVo|8gIuD9kag`_B~2|7S+3t( zY)@{DKFx2{<*oe|R^sf?plm@cFvsOM+XnfS(xC@+v>k^%cy1fh_whJ{-zfAE-lth2 z`*1RD;Qiub;t$F9QS4Ee+TxcF8JRUFBlA)#qZ={CUSs2#T_)ztD;e!9mzu&{?lX1s zA{y^R7sf7j2gKu3c;;Tgc|7lDZ-~hL{nvE_nLGYG?{{u0?L}Tpb@jzmm)c;zozHt# zU=O~F%|qhhoc(6xXgPUD6W{6&M$56Ia`487`G#_vtyR-bSwG|XUb@QYY}VrD#Z-s3 zU*}L!AeW41$+r`XtZCypUNW7nn@tY@nb2&ywH)i0P1TMI_lcq(8}K`>*_3jbpwm8w z-x;mI?KGPP0dacYUcjl~R{|?b=vW{Q{p@*3Wjgjom@A5%F-Eo83Tj$MQAt6KT1hIc zuNL(1#S;1!?$>cDe^wM!sDz-~HQsuScSz$^Xdv;*VTH!26j#}eD*K_zo?A)c)l}I_ zRra__{HEw#MG;MTANH>}w}V=?5gKo+=5|6g-KL>mY3RkO%W@4(!wwav{Ig#l*>q=V zvD#!ss};SgsH(P&C*dh@Dm~HK8MWUdDGzv9LN8k*p@&l?^mDD>D>XEhDWTt~rnjSY za>~W=9kW3$4fvVk;a?;%tDh)nuwh-2HhOJ8Ajz8S3@Z|!2I zgVDzoMfOFU9hllY&lFQj~jQkPNDm3yj~dZO`p!B ze+$!#AW>w)s>U*JdwGq49`^Uw}X!Mi)MnG1}vGZS0X%1&8yg+IU^x zhVI{hna!qbd^n?D(t8X(HTyKJFo!Z~sL1(LLZcY7IrQ%5CEmk73ODgV;hb%PF7;Ev zn-cJS`2A;dlZa;$c?~w{eb!whnyQaf^hV)Is0X$C8s;*|oMjnZGVM;ytz?ytGU)=eh?Uj`2ap@v;ODpDw_91+2TpoVz~^EOlHW;P*1b_Q_;#n*?@RQV z7HEGVdf-Z-h^qHXxyYqn(P#S$;B=nAZRIJBmZaN2%|Y#)RVi@s%gqf5(P zz&?*fPqyU|BR5f^6L^iTYg=_H}GwRS4I>` zZuniSa{LPKZKw#caHc zZ2ASa5>21Ru9ZJBWYdH&j}h54()Yfy=?cs<9IvXPWjH@)&izzEU%`nibL$lKMvG;x zOkt52f_Z_t>tJU_Uut@jFhelcGA5{FeLR}lNsxK#l(|)yT^VIzuZqzv@GKdb@243}REfUotzU{Z&Y_ny6xo6B(wJNA zuRgOW?F|W?q;)hCBRa=xIbTqn!Gh8h{Qw`B<2ic;y?R=-x?baT#mvd^9=KTIrSB7T zDqYY7jn`M>HCOKB97(y%C_%&g`7KUqwb657=WIH7c?x}i{+msk6}_!!7FH7`)Fr7S zmlma@&?mOX8=r>j?Zn6O%C(I5j_oOCMs!GaA@JgH5k5P?>o7;~tG7r6zjr)UJd_)? z78YnJH!7NnqCU_1eu$uCGUVbH(ZVvYRmpwj(5;sVdQux+AtUFQ-`P* zMwMTYM~G(Nw3O#s^NS${;Wt!q_GHq7zws9PNZC|DbxEEtCA#bqiC5`_l&xMR_Ue<~ z3Cu!!;MXO+O}^h5Xu$h$e;~IwUE;Ex6W+BrUp4JC;f-z0vN8J>2=C-KzC`r<20J#a zY2P-C+IzFWncUiYFDj~qQ05x>2rQWKx5wvx>#Otp8vbDx5s_{y~`{!0y zTz5q7Qi-ewBsAF5+E7NgYQ-eC-HNVJbX-waMgNDrH;?zJdjG%Id++_;`>l*+PB$vlNhhC-AMB14ohQHZFJN+|bht?RnhdzZeS z`}4hj-{1Ym{kzYj9$h{6wXU_+wdS?gUhjylVM8rTu)3U{um9t?tSn0Ucn{3%**79B(_9LtJtbKafvR*dqefH@wE5+G2w{^+vnLz%- zulArH*Q*mxeX#@gW#cJ+`S?p(-FfN=-Vo{4U3je)UwQT4CMz$!hM@gFy^o~pT7uFi zruDj(PLt{$gns9YB>mfB)T`*zEHom7fRh}avm*!U%`QtLlwAH*03k=wu)lYU&By{mP7Ki!5_M)8)hzCUHlV+l*GlJ;VLO8aXc&zBG% zVirkZk8Bmm!Tgz6!x17~TTN1{r14Kn3QpO!`aOCs3i0S0BJI5<-pyu5?A7eaM0Lg1 z@uim~j$?0%mFePI0cF7zB?q2`O`&O`i1D#uOzI$mG)qjMd_PlrA9WyL@N!p z(u+0)Z{m~>g&k?xD$9zrkf%RSko-=!Y3^#%Jc(1~;U-Gka^zVG@Q3zw(C7P}ObE*ol9=@q&J^YRs_P%tD zz^Q{evQs%0{Sb}k@iocSy24}}Oio}RC|~kW8}w2inYnHJ?WW%4)N`Z+wYrz=c1s!I-Dh`MPjBuaQhenlr?}|cjh-#x z`+zaD?oLqc`P~zK9fVhCEs|znZbmKOjswzC>h6~`@4qh6TchP^whAIO?Jv@G+lRHz zL@ho+y^dZv5oMI1#$ugZ)krOSJF13}-op&94y0B|?J;x1fB>o7oAT~tYfPj^ZphQ) zC*{q>BJ`{}1l~-c-`HvV_hAFsAJ-=;DCdLjrt~GKF-Wtn2e_Lro2))xMVry5Uc&3z zOXKm4v9b5~^Yq39_qdjpQn*-8;`rFEa4Tluyp_q3>`BAB@PVEKyGlycwePImP^s!! zGo`+JA4fGcR`h;0?bzu3Y?9vPc*CiWx1);rpl8y2dcLIe274o-`eD|mbD5|v?vb+0 zWTmxMI&Mee6f13JDZJj2^E8QSCuUXDDn{G>KB1|^QP$3u%JOUp=f3Whr!%e8p^30} zEbC|4)kJx^FtT-CB9shW(e7_E{^7Y}hhZnrlyJWGy8*O0+qzWBpu*{frZ} z7(?|62)}xXF_gaC9fR|AdiM?cKF`ZaM8+ff9!Iy2MD=+w@kSRr@4RB$ep~b@ml*}@_*RpGoSgC`VFWGzU8DUL}37hkB>-&Ay_gmQat&-9( zu2OIIFHfYGF}o&q2=B2;(%1}RL^aXApDAYB!VO#3{)E>k?7HP*x$s$$(lL{!r=O&YwB z7=0pzt!-zyqcM{q7C9%D3s)5OM+pi0yd7~0*t|9ECwhn0h?Lfbqy%+wt?X=X+KE2f z^n_y|wKVhOm^XKOVtJLbSm|HFtsJ<5TP|kY67AS^Uz= zJ{^P6kDeBKK%`6&2~o}JbvP_fhg!BliQYKNTG+6US@y4U61KKwc`bX}vICq_jHcGR z6Kjbl>lYNM16nQlW$ULhLs^K@CvU`OGTkwgp>sy-W;lHMX(=RPgE6veDLm`ji1F=- zW!mGfAP(9kIfgkV^<4kL?h*NFyi{gz^utIuAHi?vdo=6p55UELhk*>QW zwMt5FLTx&ns?k5o4D=iHVNaqCVTTDh?{1`7@8EkBBaL23QliTBiCErk_Z}8zm(tI1 zUh?sX?Q^;>lMr8}i(aYsMKAXg^7J}-e#)EP^B_ro15J|NB_XLQYBou4*fA>WUeQ}* zd(0MA>S6Wn-XnVb?9)P4dd2E}VfDt@r%;TTl2RPV$ zBP))zT>W#gSEijv%1Yna^ewdcz12QFYTpse${}Ij?IhAqHtY{JY;GI&I~#U^4ZGfk z{oRKB&4w*%!(O&w-?m}5+OR+6m(r>{QSw{XN~zDv)AATR$Q$<^mNegD{jwFiZ}jvX ztOrRNX2;~>m>&=;GF9x2vU;z#685f@CY2B?y=mlF1t9VOS>QSvPwB@@**wr1xW zCGmc5pXP2RR^G5_UcOFJFw&-ZKkqE!Otek&Je#UPRvK=lb~dHcZ2G3zc8I4|$_M4zO<8%UzrjsvG2%KsMqccjCFiWGSGb@So2KrOlgKvoT+t+yQUfZMV zl|O};f-z-)c{&%;P$MOwCw$pRRngmyG}1-HI~G!+dgY+hoK^Qo>WA4~rpk6_Y#Hx2 zC8~G65WQwdAGLs&taQNcht0533mam(m0q^eJv{qLP~VKdc`fl2;q_{(r1KMGhb1GB5Q}$<^z9yzCJ&JM z*TC*TwznawSk}n0lQzWnHg8#85_=s-h_w54k!D%FEq0A_r`6kQpI)|4>)NNu_UR(~ z^gPcA6IBV$Z+ZI$zr1;etKa39H)o=?RMdO}qi1eK&Al@u>3bVV8vmI{`rcJy@vnqr zy^4F3u&bd3^ za4wDw-$Aj*u`6`1vJJ+Wkf9(IYkv%z@c5ZsW6(#6fR!wO?>&uss`fhwVi_ z8Y8{(nm0wdk9QUmRpuSS>Nb)#Gjbf&ahyKh9Z?^foa^uNsATkwklPGPuZ=UaM#^Ws zHp5DvZt>POlefA4~rn?;Dq;K3Bo`tK+~o zk67IuMI4Fho&ymhVXP=YWrN%Jtd*A#Ez(JoIQRpB@~p+28B%>P!tjg%c%?Dy`Z+wHy+5~z zw9!g4UXXYjRS>E6L6XA$8$4CYV+Q;}rJ%oir=E3?eL5Xa^?k4LS#$iHM{0gPo)f{rmEj5Rp)bmA2-@ z^VZSUoT#lim98oEi%GqlK8e^b6!1MOdMT=t3#y={n6alE=0jIah{71o?2U9Te24yOLbK;(CvsX1Sv(g5i!7w@mc{35$EP`}n$gqu*wCDzBxW8p4b%6F zQrLW0OVZQAcgkE(zi*^jUwmHodLM^R)b}I5tz8BTU|CTR;=BT2^&%F|Amb`ZOGpGdFG66yPbBF*+hI$KGsy#J=K`|Z3go1NFyxAVHe z6C?$tKbEjp(N9vmhcM?SsWe&uNn^%Qi1-{ce46iETZl}b~SvGy4u$=bkLi<$T7fc}vp}!{S5v#Y|>M6@^ zwR+Vp+qzW3-mua+D;={^4b1o`j>=<1`ZisppKV$e!#kwc*oOGPrbXZPt)IeoTWL0o zeq$|-3$2nI_?f~!*k7bO-jum_VeBo@(;6rRk{V#tAZhwekw$Nqr=8Gq(bGy_iuBBJ zd0GK|Cp|4~!}k6|SmqoOVkve+NU!c9VRzc6m+*dzo_>#7Ow!J?!V<~}>w>oh^mO_; zc{(sfSigUXbQ|iu)^pW_Dpdax)wL;fu0Byc+=ap>!h<9wsC8I81758ZnA<`;D0M z#k&25?+I*&lBu;sx52)J9F{(LKf+Rnt|A@lDAM6oB7MdzQ9TJO9T6|SUw{>ocEbuu zPr(XF7Z8G^i?Bk{qx=--X)u21a*KqdB3&Y;55qme$SCl0JO%__>S*N3V#~G>1q-nu_#lMJweIsY)r4&e*pKL-Go{YT0

    e|>=>=iv_ zSr;pPW}g;h7T%Zor}tK~`OQkJq^gajC0Cy=?Yx)mMSH&}tOfSms6RNnPNc>*g#W&< ztX5jLmRO=n!Hqj~fA)%*)Hk6u<`*gZiTk05B-q74+{4jTWMWBtU3%Ui}?#lRToNHUhk}!wcH`U)TwVZyKF*CUMA8g z%qWPZ*?jbWP3|Q6;gY1e@?lD8^Q2MJDCf`E zi>R_z8f~SAtdy7_dgbswMVA(CSwcQYDrcV_dO<8dfgK=vTG5Vgw^>%%hS0x0q;G_5 znY3yF#nCcpiItw-DC{vS&3jYW6f3pl`hq$2*W$JRv_?!rxlv00_tg#kJG@j&UVTMs zNd)sws=Epj{R(|+TVI}>EgqkVT1R>n^GHeuVns@6u8ev`(w8V1y6dVgYCAvWnu8l; z`bda0+ZLwV@@-|M65MLBj<+>&0cQU?1&Qix7D|h&dZ5kdILb$UoS{^Aw4U;jTae~w zjdXh}rTQA_>f=fcFw#%Wg?&>~siB4)jVkrBk)9u>)JP*Gy)4omjPYX)`{*f=wmqO! zs$r+_COyqa%`!=dhpk?XCndHmusp-)bsi*XN%oXVH|$VL?4BFxuDc{v+p9@zV_p%d zHBv=s?lM5qJpU!}!A~jjbRF`x#Mt`~-YHf_`{nmZ^0Y)7@zo&2Oa5DLQ?Io;H~%o^01m%HsljMJYIiGWyuWRs_DH zTJk)~h?ej&YBWqBI8TVgu|w#|e+hw`P;8iyK2Vc&oi&M&M`ZMp(aQvF*2D^${( zQI?dW4M;PkKC3IzO2k2VD-)AAZfhZyE1`_2c5Z1amJg!7Pznm8hLMMEz<(6)Nt6u5 zdmSZ1u`MVdPZ!x%k@pdKy7^J5Iem~zvV6*s6x@OGpjKgSb ziAXb*RvUPT!e)in$lg7ubyPPxp%D_xK*><*TUU}06O!`}XH2`iNIc8Hh4 z{({<0>;&|P?R{LVOhUgw-k5{-cGTFrg0YdxEt{<+7ax$4PDh%_ih~eT`bQBjwX)aY zNwT*MJ=qCkFX~I`Ys{2*FLV&;p_bycl9NU6Eu@}&uoZgLOXWs>$pEXBt(#K%6#RU_gdGT9k>2;HSJckupI~OGxiP zJ1Mu$QHi%2`Y=jCf3!hL!GdBE@74k0jk)kC>D^LN>@`FjS4|wlkaJ4kpLj~`qczHx zy@ohQT8?)lA0THnb=jHICdNR?<-(RF=oB|6W3DWUpg> zkq+7Nt@(&}qY}!O!WKo&DMYg_QcKd27D{t5%!jCzHMvW?b`8B5g?Oy8r0+h|c4`$H zP+C+*dC>Bx&HReA5bJ7FngFj+3LZo&BYQpHjck!7L&9>$H0m_4Xy33~CN8QM4Qgx=P#G%@YpYKB6 zsEo>?JSg7outHK+?&ZTfHjk{t7eR~kj?KE#_`1eOzswP-`|UWZ0OqPG&(lobRl~5h z(y7NSUzQD;FHiNC-ufx_peEpb1yYJPb4Bo$0utTcN+KWLch=!leSp?j z93fgIy@iq{DPL2OZh_Z`5Bwbp>hM?Av zq|1$@601b2_`XP8H;MGA4N=;Lcx#9})g?_=M?qO#j9nSzc|~oHvBMKU<_PtW?TAt#76ERyt&*r>!)?N*Aq_td_l% zRpR)~vJ0p~l&Ys~s;;*YHo~%0E0u@uDMSOyX0jCa7BMI_`>SlY2*DAHJkJ% zSiMKA-eSvoSavZ{Ld>>dN7_^+TD|O;DUs!)XpLG5duY*erRo?DjkMA%D-E;KBrA2W zQXeZdU@1ZEx)9;tm1)z7-iy2Dty=@c;VSvA5<4+fXrJ0O_XO%U9O1hh^?N!B5kH|e z{{eZ={t$MQ=&R|63*!VV+8k~zK7y5!r={Z&8b3UB!g0(^-=4~Hg+>ieRhf;O$d>9` zP>NoOsN9h74H2H|-vD*hsgbys=`Ae<*e8q`X)Dgj)JJdVs&j1}Rok!@C-D1}CP&-K z&@Pj!c46?=DR9*geC?@699LzrQqA#{K36q?J-y?F@eN%eNniG+T`=6jI7Fm7^!sEJ zTh`SPb(@iXfL0QPoT-bghivwu6+Q zbn2^^oa-~6dM1O@OJ`*#b#-;wJ8Xp0Cps){r+i7iVro)}tl*5oXTs|45~&})H6joF ziP?kxwHBP?nF;?b(b6RBhU#)lP??*Fck|$U;v}Q@Pft(0;g}khpypqfdb-#C(!r~J z#Y)j#N_}tg_V4xT{}fRLjb84jsm%YqW#k{enrnQ}{!9FtfRW^cF7*fWYhT-uhqk6a z_!_e`lBSO!shFyWRxu52rkI+I6B=4-p7g9wb**{Q+H4{Xw(Jwj##{EeWiu`N+Oox# zowsbYWxreYv1QrO$Lc!XJZX<*cUtyO>041qLZlQI>7UZP-s(-XdjFJC)%#EVSD}hnzK&6n z%A;Qkk({<7{ilAeY3*ftP{Jl#d)chL|Fk@sSbMpxy>ZrF0c-C+Ew^^oUQugrhP8K( zwfCQvZ#QeNthKk&+Do+d{?mH!g0=U6wYS0At7Yx|r}gD!Yp;Q|_o=nl%-Z`;>(zK` zueG&zz}kD9?a{A_cX$_jDCW0%{(niS|Besvjx2C#@NEX(=jFl7FQR%4r7z}i+Hjc6L560cunFp; zSLy9=_*crGPLHT=#>yxwrCO=;I7juuQ~HIi=Z&3W- z6Rci>I%f4G1pS_kKG{WQy!5Dx-+;*;QA12@`gb$vX?#X2PZP|{GTFqoalbOZW{zL{ z{u#bD@qYa(ePNWKDp;ur-j?ds7rvFT(jRy)seeJdsA}92zu^OWMO8ekp1r;mKlwL%|y*q$?6;W|t>0i{Q-(KGE zGSvh88e=b-wKPvE(nzG~Rx19o%uDv-WCPu-I_40~eejmn&QwqHOx06|KBYS3+24%y zl>SxScgze=em&MzUDi3~mm%pFTlFuk;Ve!W+Q|yfWLhKV6O8|K&gops$`w*O<%VJ^ z%OYkCar4uNdIu*ZbW1^-X(6+;C2wK|Wh|$lu1$yZe@5RFUN`Dnsoy}(TP0OGND^kl z_!3zEZrcAD-uR!%W%HzVZ%FI;co<1>%m4Y)ytm67>4^l9y7L_FpY8pBCB*-V*Z%i~ z{eQ!||0}8gpG{x5XSj~~JkRtDh49TIN&0qtErs=LHvEa*@cfocU5T&G|3cnof~{2iX*=t2woB)*X$i>8*eMNYLHyhy^Iwv#&xg=%NXH*BYq zC0}Dl_XULNYRO8(J`AM0B|{KOlb)6gMC_wLdRtN%v1>bhE%6b%4%Oe1&)Lo(OU|;L zp_UYZHzp!fvL*YGp4lKNmZZauCSxp_20M#D##u5H>Ctv3T2dS7(V?bVk{y*@lbMzz zEFe4SmK=tERzU|5;7@yXDblkEggP=!`XfD>EVnxSpuPhHTl^fV0@8C3WQ`>eq~{xu z^_F}FJDO~=(Ow*tr4nnI%skUz+T(q!;oPyrV z%Ohat36O%8JkNHDTJi$h!SKVOYOu<1P6Y-Zw>8 zD>a2lYT=Dod1e8b7THr+TS`-!+b()pNOacU(0STm|$-h9bAjV&kN-aDB-+pV$ zZ!t+Ltgu7!Ajk?!mcQtzMj-E5Qfs=ST7j&yc6xuQ)Z-u@M5-lFT$*$P`OxajfSrCI zA4mGJjwZuEwpyLbD1=u*c0`u2jwX{qc3Yhk%v)xId>&cLI-^16g6w0Rw8A&w!$lzb zBimR{wCiF>~x|6jyQQY)MVxu@`rodks-39=^7Ko#IY5CKo=U^b~jU8j`Gz44}A* zJNl%i9)BdRdz>?d#N#UIoT#LA($v7KXxXq_(z$L(Job`K8#7HxQD@paYLd~JV5UjQ zDgz^k&R03-IFo}%iIjIS=)}xaDp_s7F56O&%1(vq z6zYfHv2zI5S8M3%BnBWDwn4?(m}BWGD-(wWfRF>y6^Dm5W8 z7ewncc8WD6a+TBE#974TAm_B1)1?{de8)PEIA@q#WgoV5CNw9VubH%R%0EJ+0f%bi z)L_y*zoS;71RrxQGZ_oA4y2v4vK56&h?l88OVUo%V*r+gD#_fFa3hI=7v^&K}ZHk0GZ&BCZ#lgG@Gadw;<>&Y`5e zzu+`a(Q(Do)8FZ1NW8rdaDIJF>%?Opz`bZ{;U(K0^@WQQjZOhG6;DAZMasmn<7P^T~x@z^k@ER&VE`RY1!lASJ0p6^e+ z#0Y2YB(jq_m`IAVZ7PvUOh!4GrxPj6WQ@~jHj!CuXRLFb$w?;ToTKTavxUh7XXhLu zx3Hbpoka_X+=g>0*&$AH24Hm2d9Q#8ln-gLvyw?}kmy=X^xFWf(~?VYx>IZgks(ZG zIzySPV=~)W$z&9#C*7&{HieqY>6zmczzS4b9?WE(lNY0^CS8~;aI#~(*5qxrv&cEm zR8m$^uX^WAwBDyZ6Q(sYT$Ykla{ z+e73bCYznwdx>;p^0Cv+ER>Q}T~6~SPCAn@Y&3_Bx$T5_y2hK4;W-L_THmg>&*Ok>Z@f z15UH=iLBrr>5y~u9FZwZjyMy3AhHDZsv|vLIY*hyV#{AU`+p*x`Rt7oPM?cJK4J2$ zllf;NuQ560q+ce|pUHPlg|+wR$C=#DWs%7p z5z(V@iu&wfnz!8QZgMn9R;xILx4Qj2BA+tJ;+8NAHi7s7x*}qtBG7{bH7N4O*#beLq)-xm?dv14py4Fcm$L2-M$e7!uS@&?8p4{#N zqcbs9{ai$~L3(n#pEEg(W%{BlnjB(s8l;2KIbldzEawOZzm};~9`}qP@lh|2d%=+S zxSYrJ-_+@$*q@*6^-o&(A2)(DZoAo<;yA@VZF9q#H784XgvJxL^1@t%mPjyMXt zIWe-rtFg(`$*YCk+C)^ZbVup$f(pBRSZC!}D&@lNG((crw2~NXVY#roh)JHMSWkl_ zxUsp~ahNP$__d04V$X)I&C<9%}Yg{4ah{T>b5>X!- zoz{k&j%+Q4dw-yQm)nO!J%??KPmE4FRIm}cae(W!b6PonBfZXGj}f_uheBVez6z7*S^UD#H#d>9eQ~0$2+;L^o^BztW>Q#v) z(NY*CehuqHJL9dAp4*g@P=@>goj4hdJsDjy@3T51aFW1V7bXLaVCD{;@>VBHK}X#R zojAFOZ^-{jde_DI;lJo;k{6_cn{GT$ty0g&?sqdUrc(aCFgB2&ljycLWVmXGd+ker zRCKQ!lBUWHNBaV)-Ey_gAduQO<)V)JmeGm#b#>g0hLBf> zBUBytbFyP{ItHY!doe^_2dU>~*KeoLYyE)nRF4G>++svjMk3B^K&OG*)sPHTqMxJQ zG~{_hMpz#LDUxnBkyU#I6K)*`lB_`6A8@m&jNLy~~&LI-H z9i^;WL1T9n6KOk*-OU_oVs7gB8@mUYOg>LuZS4NUp`Ln(#)8If{#BHVM6~YrO$tjf z8DdFwB9SIu#Pk4--S$ilxDmCvmzH`-B{Zj5B0Q5anrTf_Lg`JM>EoR$1MSTfU0i=_g zkIA`?6nkg4L`X-6dcxfl($TR$c~k6N-1DSk`h;o-)y3_%NvC;>tz%u?sfJ`kq;$Hv zdzeVw=;|H|5nVT)a<7mbTQ{C|U)yZTE0gpI-Q4L+qzCBcE@aZA3XR>}+;vQbgVaI_ zySc{=Nmd21GpR?kZf=*4jOEBhlumu4bA`!acwXytck_NsI%DQj>+bHhWFoypcegW< zOwvnqce^u@UZT63#G#~@=FG8yBv}QRL+U=Wx4V;c(DsDvHzZ!Bz1@?n zBW2p#EwJ6hWoMqf-O@}V@T#6i^>%A8DcFGKHoe_uhGZzoS8uoMj(D2&+@`l%IYji{ zdvCX%A<63H(Gk@Jx#;8eW3mpU7szw&c_v?hya@8V`@l|Zc}wITkRgWDF$AM9$SWXy z-Ih%1)}(gP&+QV@(Q&=tj`+-^P-z|AE?#usG9=yx`|~_%OH_K={_ZBDvn6sjW>&Ak zPJg%dE^Q|xA~UN2Zeu1g`x@Z3GURkb=2`>XF03PSt%2Ms<0JJTcbw6oa@TPTa%WK} zJH8Kgml!fpt!Rz614z$cSO3oi>@hla zr*xQG_9jx`3$k+?_92(S&M>#CArsXTKPa^tB-!oB)_>6W-f2re&&jv@kHHjcvnk|oZn=mPH6n8el&S-ZKlarWB=#|SDcNCMU z_ePYSlf3HAVDd9o0h)|;moq7Y`GyYln!BD!1&pV9jy=xx4w&?)d}+8B5Gfn)_GD6} zYDAqz>=WDxN|5o_2qN z`v?&P5(hI{*Alb(poA!oXU zLqwO(OjqAQtkb-7azvFtzGk@-SVwy7S?(+*G7`;lSBHomiDtWd42jQD-f)wSQ0&tC zrMs^g67M0?-E`KG)nB@MK1B5DFWnu5`iB(Sp8rjEEfeYa=eVC360gs5+;554`aH+I z#^lR0xIYs)o#STxN?T4*o6(0?0GaFF%|z<_Jhw6vsp0e8MogrJFK|0Ck=nb^-NK~O zgIIsT@*?*rlVV?D^#iilJ;S8(qKJAJWQqGnh%^Iv%f0OwrBJtmHXtkA0wK}~}iUBg8B)x+*5 zOr&2u;vQroUOnp8_?A320V9a6hhMoZnY3ea%E8i0HC7?fNI`!-uA+)=a8J7QaGoRL$NCdpkM3hnd_3qP?2adz8t*XJ~gNm-jf6aUj}aE^jcC&55+? z&+QFovKK_ZQ^@U&Wm27MW*%=6lNMYv^LVqEB)bu_uFUH#VUh;Y8M(;ot!1KXre2Zd z^ENTjHB-+s^Lg8uy!|BYx8(PZGie4pdM7!*_XCs1L3DqZ-@C@-)it!Ly~B&0*ZE6{ zrGe*f$zQyqP~~Z%kCrJdHC9&?)LIHzZXJUhSx{Aa{A2m=qc0sEHtV zd!I3JFz25MQrtVrq|#!nn?Oo7TAT-s9?O_`b*(c6f7v;R8Os->=s^3Z7=bdDd z1+zlki{9t`z~nR5DewKlQLu4<5#jkYJ2Amp-{T_tK(e_5xw%Q>&1SH=R#Y4*ehU2s`~x|{3#NCwAUy^DuQ(Ll0xJ`kRINu5UB&w(>oI)jX`>Q1+K>}w*cwmH4Bk;Abq{5 zA<`M7pLdLjo(<}gy8XQiA<`W>1H9aSkY%m&Jjfuggdr1^CIdkRdsRX@NgzYKMj%0lrAJHRzCG<8mptH_%JR&KH_?iIY*9TrPCNDjVw*$~w@3m!;twcmM2ib6w<&9{E z`Y$88BLlZdK_^c1K4b?&IvYD_YB`85uMfTFm=sPTviT;lLOut zOni(ft6=BQO=WS|`^MTB;flV>>8aqou^(VXLRCuKjpPFWVjli4`u$3q0V}ZGU@chL!I^J z-J%K2jkV>oURj)f1yS{f(~kXFFP51|b4w;M$@~(X?>*}kFdw80SAF;4J7~my)>~xA zMD;et-XkFAyo0RsWrTEo@{VUE%iBPzBi4&v7xU4|aCIkkPS#}8wZWQchJgyZMM_xVrI)qs}9gigwCLI)4m}s7oMDv|BDBi%L=`FM5>^X}U7dEnKnu;WErGijRPm^p0_oyuh1DV!QY{fR~AV70G99YyRqRHo>9 zCO6-TL}wHu zQUEm}@*%$6jxG+7TR?I}*D~o)1kXY8M2p=`p^oFr=z<`3Mwc!HXgG{Dwb<|x5l@L|;kj~~R5vAiQ7F~}$9i-W;w#tCq9j#P~bbR#cl|b%^ZejA& z7udxCxi>nn3h4|&5!VFyS9B7Sj}VuxQKh4sn6#fv`x51%dzd_g64Z9eMe9}5cH*t6 zeDv?9G0R5>7@gs&B|KISp~^?sGSTU24N@ga-#ZM)2|-HF1JSY%Qwryxbe@1t_2{dO z{~A}_=sZJ)s~^~_b)!D^p>zozfmgMkAC4AdQUbB-G}nvHW3rch*dUtyQ3~}I`?*nc zEt7|lLT#sM^ut!9vt%NbV6*6XL*hMB^Qdb5*AzC77B(bVjY4|*!A|pNvvy=>*VDLD z2&8>Q}U(&p`%6y)HybV6LU-8-s63&(LUDqZ5yPX!M#Pl+%T1 zgF~Z!S8a#LjV735M{|bA5yX`gebSJO*x7@$Iv#FGZS*ap(X$PYKE*n<9}v==$-G{; zRRD1fj|z!y5JGh|BX%3eCZp4bLaAx6qub6138fk$u43qoM{*6%P?In>)}cmAdQ_W3 zm@R^giMD!5=PN^1;~w(0=#xygKZJX~VCS{y5JOT_an>0Zt%aHdZ>T(&_v-O$T(qYl z8R|34QiyCK9s3@3Ty$rMoP@{5TW^TRQYD2k@mPqk$5JJyG4WWOh{sYT@780MSdYCf zcC5!HODOBHDbd>9$Uow-snHHNaUS;A3>!*3HY3`Db;KJpqc1V(4zE^6_?gi+4M|lm zzKUP)g*RqKR~izpb+e-Hhluvr?C8!A`57cV`UKX};hH%o+9yPG&72qg$&k~wW-equ zpSFGu5%%-K=v5OcUZx8AXgSs1;uhw(ycSs^ zksVuC7e`0*B+rWvmx&!)f^i~setGmw3YBTm8`PRsM3*z^xe&LkpcSmJ zcBD0}xT$pBiGE;0#Y^Yi=qDkfOJ`Mde~9SPSsks}>#wD=Hrgmebm_cr%R*Yg21}$B zY>3V=p-^62Ivb*I84@p@4bd%zB&!d(4Q`0$eb#s^BJFfTv<(w!%NwFKdy`kC2iOp8 zLd2HohG;7$Ql=ZkW425;S|Vi{CsL-C*fRZ4LfI1h$Py{REzyn~yOiK3(Vk4C1V4!m zA!1wiC(&2>P`;#9Zi~(~Bt_|QS+~LM(M2Kh2g+i5^xY8Av#(F18$!g{gjs&{7!y63 zYn{)cSD5HIfVR9Vn)f+V?n;m5M9MMIBYq5ac10U8(epZOXHT?si0HWXMxP9kY#{rh z&xS}YkT0SWnCKarwsSDLgo(`b4n?;!(K9`5=TP({6Ft+@={XWr_|9C9r^nkR<1N#~nrHA7O>15Cb+u4J9O!zk3r=oKbqn4F5%enHzwRRyt|QD76^zeXn*g4kP< z>e!#r z9;_ohz>S-{q5NS+C*G?oe;kFfV`apj!9@HM@fQi4y}#r%hvh<|SN zd7i0+WVS>?W$_<1p~z#p2gvR}9wK_SoZaummL>Ka{#YiG!W{k@B9RX<7uEBGoc`gE z9c?+6|4oSKeZO4(xe(FsfO7k^`is8<%IjY-I%#V0eA+R~>lYrVJ(i}%V=uSJCcM-2 zYcNT~7p^5i^7~IR$&}%!@*oBLJ|R*Kq@X{O$!yqp7^H~5he;jSX%14%FF1(e`erL` z$^t3w7dM1F_7uoH{sV@@ThqOMdnV$ad;PIY#D}H*HGi{H+W+itcFOwam`Hh*^)n5o z+9G9I-v9f%whI2=-?dfn|NgG+e!r-(L%GPW@HWt|OqMg~~`#U*1*r-!UXvX`NK;B3JQ0G=$>n1CLepcZEoQkO%w=L}Ewqu0((1Q^UW) z4-j$lngu2F@G7+n~9HcW2Di!mF$=?ZX8HW zzXV(Ea16KWfIQ@vC1Sqq(v~0c#~PBXx?$9sVaT&XO?r%-IUu$CMMPqS@RndPNNs;5 z5%ob6tb7d_i@gTD+PV$tSq)OhZ;5>teKNMj5!5)exVrv2CbwWT*Dd8?|4Sw%nAE$e zrPTL-Hacl)cPFe6(Fp7NH$tQ@R(}orOi4PfH1#%GseY5y*v}Or`rSa2LOVA*UlJJLA@5=sfM~ zUvtoYUOp6SG?4E8>Xdk>-$0)A_ZdRz`4i+h-y5lQQj~|CQhzhv5Bgo0Ja#{BIRJUl zuYliLmsOh%HQ4V$#D*H`Z($;#l5Q%&SNut%wVgCvtw$yJik}`Lx&%}F6-=ZANBiqT zM3>+g|GN;;CHR{Edx&I!jQ2B-p}3?3C;Bx)M3>+szfXwh5}fS6WJr8>Wr{!6ka(F+ z@hiU?_l9neQ~W-L#LIMw|DGYKY9-3_DZHhc;qPG`Dbtz$kg?iMyadzzhh8I+voWo^ z=lJ!QXm9AUnB&u)%xQdRPdW?znXIENYn_Gc`FO2c<`+Ys65fYgW_uE;hjAh)TxoTr zj;*ppQmAkE*MAvNNnxBw3O}$qlEM%C8YVsQcDl)*6e7AzH~Wj2=uo;Xf9zim5v{Yu z&puw~D@|z~U8Wg+rx4L)y7eY+Z1Fu>JZWA)wlbf5Q*vWLVqvw zslUgN_-UU{Z>sa3`sa;Kn(AD@QTb3hpZXOhP@26vBdRdS4!=E<=b@wD=Ir#l84^$7 zPJamNEXLc?;s~|V-^nCa9AgT|F27hRS-u;y0{zZzk6$W8szPV4Um-;F`KZtRYE1Mu zKDD8Iex9?TKBF(! z6=lEwAz9AU4W&IOqREb%EFUn0%1fWv-0xqeP&PeZ_>tGOH{xabg`YD-bf_=CarV8-_Im^n0obt{s|`f#KH+ga?t;Y$*tRPryOEE=~J^ zPNwzy5kET-o5CZ05!Ttgi@b5fzmG}TMzrI4#D9=UVU(%fl|AA&VlooD-$dFHi8QPi zF?ahN@w+j3k8^RJx(O=$E=Rz{cB4k@0MhdTpSmjERu^jkz803 zl{CkRr1^yZiAi(31i$gW<$UQhKZY6gH~tMKlERaIo=L{@5lP`mzXTI0om2hY26Dh$TrT#>v1mi?X@F&s9BJJy9;RsR|j z$>~);h8{%gNKUW%xtK^!ulhv{*`g#DS8p0qu1Vfa->WC`aUwP0x_I8!ggB9${vkTH zCfpEW%Dp(!8YlY9iH_@rjs2?`c+aRa6yRU{W!ReF1pNNX)&$4uh<}_w>a*0SINAC< zohxu{DDj~elqHXuwmcoNdt%4b1f8BJhoYLGb%LO>2}L!b4O(t2s7H2eO~@3qVj}*z zCFn}T)`ZN#^Qx;57~Q zmYNVJGNR=SJ~IBH64dAUa|L_JhqeTB2VXOheB}v#Bw|Z2UvQ0eqy+N?v8ix3TBVG_ z`GQJED%|3mOuMeOHiXGWmlJOkS%hN6jURku2jaV1hE$iilGOAj=kNYNKnp@;j!xV=pK(EL3KkiGRc?qMS}W7 zA~}{v)F{{~5_D#wzd+YJLPdjT4T*oXS~PgkkQDU?(yVt*iUuQ?6h#ViffNf~XChzB z-4)CW5&eB!i9q*ys4Wq#qraiMH~1k$^cQobgPb!dUwW@86)7wi6b_N;AmxK8hGdu> zss$j4!GaKZ8>CXOnnKxkE>(m5A@U(~ss`6XM3;NDAlobxy9uSs{ehsEA*t#ioQBFk zsOrH8(uv*Dn`+&I!Av6Rwl1{K_F(WQlXKf6YBxeX7~C`4SdQ&@6K`q^sX)Y(=@CO3 zzCn4HFNkXdZHSokd;^^tL6;CY5AsmZCq#Y+sT0gMBw0B~k1ntJ!Dc2KF49hNgJ3_C zK|68o{Ue;84<1Dw)ip|cKAR!kLZl!_lc3L=r1N%p-0}_5JlILZq_7f5%iw5;JP7h= z&}FU(6?^v4sU?QG>ESN>a z5Z7>!F2O7&YmgpIx&{lF6evXF@>9VICZAL#@^rA4Nj>yq5u~hJu$jqoov3|v4?bnm z>tkiU1bimg&qSBk7{t{hSii`m$E0~0$g@Fqtax=#(()v&+Ij~?m~=*4PKQqKpbV22 zu`^(953FCGogktk)Ex0kj~_A8hw4= zJ9vkQ^qIYbT|{i3**iGSL`tW3@B@e1zYD)WX5zYHNPHil_f2zv-of8@^?L_@-_`FO z{C!uyPf%c~gB-^#KOY=_OOrG;8s)VXu|FRaTS25oMXba@`Ud+AnP_gwPFaI8}{MF9v0p=(|34gY*v?FwyscXfhz^%0&0r2SEmMPHFto z)6hXdlF=cedw@Z~gb+D_P=kYXBC!tq-eG94h>5P@xxrQlN{rXK3_46`$$krHjn0L49K?V(BOp=Kyb(8fV^lD2mDb6K=pG<9bVl8zGbZTwp4LfIy-*fKpfe_z zXbAc6UXWLV_YBF%^jvS+1$`~pz+^axZn>`oUl57(!Z{b6({aH!OkM)fv#)W%bwjqO zBDEZKKP-BZ(`3>sS15BJUPfo#NI(MIT+1E-cqFnQ;FCcoYDeZ z{A>KI+i4r^&0ywwvb?A?%`T<{%M8KYy#4T7;fQ@oaE8g_2-O&5YEWzg*^yG77WCPu z$re-Yk3whqO(i%hD6vWF#9P6vplpcfRxm5593uMN=ooSPIVa^#hp~ z^fV+shn#m)&75azc*Ws#B05gSgoya=J*4W@3_Iuliqd+|*%$a}#RCi8KkbtA}{;Eqp8r{{2d zxd5^@sKq4qJ@&9c)&*^twEP(}G?4d$Nlc2O#T*0qAXvqu?rNOO2U#Cf+Mz9{s=P<> z3z#4qgZ73@RGSAn>N3cO!AT|s(MS9NvMDIBlS0)+3bSAq@^LWLkcny>N+vJJCqesN zl;$c0Fn0#|G^n(jNV`7xW*=l%Fk}yrS*SI2Kt2y@>?Lw&L_{?O*&keB5-sDX_8

    zRiBg2zDf928st#WXCINVn70f7`6?K)pGX;yQ6MLRgI{QpsvbmTo&s_*xM0Xcr7h0} zITft>l0q$n6xlqd?9ECz%`v`55GfpvythDTRLQbC8R{c_#Wkt79NP z-&E&+2{Iot>9KcA{SvG+BqK5$X+DckzXaN5AHpx?WCxUOK=h#v&uh%DomC$xe+unB-!ZXM<^9bXQFj9 zabjnfR9lKw6o?l~`ifGx8#-k{{MdCS4Y04Sbz-qT$4DmtsRnXOY!j1hE67gfSnaP# zXBtRd=wyw}Wb$eze4z%CJ+_C*R3^8@x*exb$8Zj<9dvTWrZSmc%~4%Ia>rsPNM~dL zd|3~YH@1k$iC1uo8c2cIbtb!*6pYpWhC+=(dPYE}aBLEj0ZfX-jxt&MEyhyl6pJo@nGAAwY!j0)IJ=@riCFuSq%#ryijKWxYzvc@nUspQ^go@&w{*8T#K%udAA)rPSh7s>JjynUO8*c-);8`K8cl5-awzCaG%S3dei_+BDXN$uD#1o6zR5F--R0Y|lFg)grcx$zkjj z=4MZLl^&(^V%hGdxYEqY989qV_QQdsVThEUKr1Lv^ z_07;}8!P@Rk+TmvY6nQWSSKd?QO6!|aerp)3X@E*ycaqhVm*J;q2l9v$JpQ31s!8u ze%CtGC+JyRr`SnDGBQ;?LF0Sp*m))`K=iIi=h!by8lEDZCt`mv=?0>8o{0HZP3)PD z;I|3%JmJY$RwkE0w9b>UJWR&0PM26ACJR}oORNNw%HNTluCcOA+JI;~U1OD*OvJdO zXZTOWYBHG#qG$L|#TpQa{N9mfuusR@Fv--3X0T7k&M>LogYIwX7W1x|Ttr%f9E4Z9 z#fmX`ycpT(9&5y;4~X_*_t;t{OL{SuKWH2G7a;My|@USQ+--%?fZA_v(M#Wvu=2(`UT;&2?#g=i3^f)T_aJ$5uy1= zPQX(Z>>58m^d^#y8G<|#T8HHC4AF{5Lth|Chd8WVkA}V#M7@ADd^Gd}+FW%|)bP>J zVI-;0tG__o9}8XbAFpAGi~amqs5X+xI9?+|O^_4=Vf{QZv;oP`CSoi`g?1pB4usi^ z3bj{Yc|fjALz~f|o=94u&FIi(BvW8?*wxLL&>kdnfv`AZLU}1Xj(XuS(W_%a`A9Y{ zN#Wll92wAdIMtNN5 zJtTXsCa(=heh0#8I4-mu$t};q*GM+P)p6)sBzFKg2K_ufRKbZ@?|%WA5NeYu`e!g) zX)>Fsp&m%`kxUEq7sT7IP7mdy4ZDu}AqKf5lzEAWL$h~AC<_VOv$Oil2<_oS+)-uo za7O5`kFaa%g3xh6l;^v^GYn;nXw_KcX`#=6u-(BZ(#Fes2!4D!Nvhn z7|P)UcKAT90PMsZgZ*zD{GE2Zwlm6ATvYzR6)9qh2Q=H z@?7YUCde<(Lw*BN6v~YWG6i2W8hR+7_dMMXnq*!?kc6x6Ec{?;QDdO~c0`}KH-Vd#* zCCJyX7u^kHZD`mPf-C}Z6v!u`Z1#u`w6p-~Qwij=P;VsJ(9+N*STmuLtAx$tVc7cs z*%q3ZCdeIE2=Y}ZyS5C+tGqfB@F7zQQ{X{6Qu82Gy`lmIJQ=vmhlF-slK+cAe^@UCI>5$EU{1@ukK#=uI zK|z6}szZ_N0m80sYN(Tu{Pq&;*uh3u#eF@wGmonKxQ(2vQ8mAzh`j1vIBNl~sM;b! z5H=HD24bis*9p=h3+4t8SDnd!tO34_kPR~hNKLf@iPIXMe%uK6iPW+DXBXxuU)K}l z3bh2uvvuH_61=WbPa)|FB325dwz}5)K*CT9t<@EeQu_3XrryQL z6y?AW@fD+HY9ZQe2GYMe?1a_%oX9;=rh4a%vd-))J(=o2A5k~MSCuXzCXnXpC}9&~ zPkpd+fR^fHPUOC>rTQikI%{f$Jtm)EZ>5%Sn|aE|U!^ElK;%~HS3Ytbkek&*KGFtA zd$mh*J{I0JV<)xhSBN{Q**7s8`SeI&el~O>myyD z^gGl_AL$3AhdTCVRu=r$*tArIk>2XxoWPr;>qY@}F-Xnu5!M@n)hr)*4#+Sy`xepCws1AUW?jD86-jJ~n3?%%A0K%c zydF_=Ihn!Fk=T`erfbjCp!zZXGePlD(Oi-(J zV0A7{so4vzN`O4B=G`htI*`3UCaE(yDNug;4(=BKnWir9ELyr`Bm9azkQwS1NE*ON z6>MUa0`)AC14y1!lUB<>h|l@z=R)e24uLa)K@l(nl+Jt>H?wU&res9Ie`S?o6s z{syn7)X7L*2b)SDPpcE}5H@|_+We9);LKdD*Ike{P`VCern(5pQ6MIeXVvz13Y$BD zu(Qe{wZ&b6G=ry1uL7Ir)j}j`-Nml5Se-41_k2RJx(ID9+y+lkf)|iJEY2L|>FuC} zKwePyaZ;qDLMFcj$jfS0UtX3sI!o011mX7-?gX19>SIVozm%f%;^c88-4+P4RDBZ3 z(tasQ4%jSHi#VC5tRF6(C4Nm^?IVN1=Jh}>SRT;2OJ9cc69o;I&-6vA-na zfUHonePlY2|EVu>BGxJU8rxgyDj%5*Hg8`wPto6Zk&cD9FM>S{rhej~-Rg=Ol*JXZP?C4X(IvKws5)RjnnLb6F+hvY}NYgPd^o7HL$ z2`~1W0>1+JLhXX&uEnX!Ng!L)*+^b)o}&BU*gN*a)zYFfUqY2Pm5<*o4A{!3tP{1TWO zhXXdh25gQ7R^>6Zv`SgW)N3ANrO#8^K9#C;f>s<;GkxSPAit~MAz6G^igGWIKhz^W zG62YNHGiatbI=vPuy9f>}eq8&l90BrsbNHy&r zB=H)l%4Q(dwa~MohKzg-ftYfF8k##Z>Yv$he*H{cZq645G=oEi;RHbA19I$K0$qz;gn=J-fMAaN}n zNzUEy?Q0+jZMu)N0b*!fibNb{b1M*2vz}+9NNEhGBHe&k+Wkltz?*=*fjC;#Cox>D z>WQnXRecg885pn2w3#BZx85()!V5&{)$78Q3zT)4mW|})c_~UBkXqVgBwLVNsck^= zumg9*z$Q(*aUqK{M`;KdpPjVV(Yhk3j^t`Bmy>zQhu}2=ywbIiJ~9?aT`l>t=$~Iq z_;MhSYqWYkQV8T)?JOsAl)`Rs{}f0)E%b^goe{R;>T8d3QlyMR(m;}t9oy}saEyg`t^bF%G6eiR(Ru;seQ3n z^v|7NfpS9IGqpWF@+y!UwE4?~4e8;H+S^E0!M^TwuxYOCK*HAhJ3v}#fBDEqKw1Y{ z(I(J}Hi1^$6lg`Z7J7}I*fre(^%<(Q@sVyohHHb6oa&RR z+zaFpZM2UJ1~O7B@R89##%havWD1b++FBo(1>|vUvyZ$8WU{vKQ&FEM>!c{J1DUR^ z^pRCSW@x8;WDSr4?UIecs|oHCp44h_QUs%ys(b`Cg@Ms|TAPYq#juCm2sTe^#XhnX z$TQk^@k|RK#(_9}p38YA?%Sn;Kyv_reqcuaDx(;-&Wp5(K5`AjS*+FD#%frktSL%S8UtCP6(U&% z@Jt2RyslNCjWZ}k>C8#JFGbt;+yK9(2c<99+9P4l zkM#hXH?{6QavzZYX>TK`xerdZfvnQjaUwPRE$u5GNryt-(th=kJn(v3JI6^`$}zaZ zI|9gR?b7Y6K4mGjAu{uNN3(on1CV#MI)W%0SBU3!-qV`+NPn<-Pb>D3*ao<2)Ak_Q z3oT`lKhS;=B!!VU=-7waX|#FSNKr;Xeb#E>ufP=Q(|v|0Yps@rV2*9j3aiv-gEsRA)(WXn8?9o4b z0(IV`wcs|g4>xIpe-U2wD&d!gAkHRjq>n5CvRNB>SlCcL{X%<&6FCpJXmfmo?IpHo z3w?y`CAJ27{>wnme;Mfc?SZm(1j^bGDC_Hh*RFuqu7Fp0!0X$9*S7($-GO#}7iiaa zfp&ebz3%Iu70}Q7v{FHo4sh1Q&NKIG$`RJ{1>QR&`?Z=#R(}iY7`*mt4UyadZ*sBc zvG;4)NcO<#+y~sI5J_oA@vg^yZ7wJBt&RQK%V_h2BToMJYip29IR;O=Kt1+rTLn?_ zpoZ&tv_Hy!M*7bG=_%^ebQB+Qpu_uLIiT?6MyJ> z;$;bq8V_Yf^|yV5<))av-bda564$qJBH!Ce=vl{Eo#B28+*4qy($FUg;;l+Ue+h|I z6Tb5gXAXwG2EBH}DwqPL8+ytK9w#*GcCiKxJ;{k&gNB}lHnidl{Z>H~T3?2q%ZXfH zhFyI>$tfS%0Hn5Fb*0qRJD%oo_)1~dxpnnEKJqnq)zydi2%8Dl=wp3^&4g?9LQdpN zsHg7{Hr|_D_4VU|D5vnex4xctMzn(Zu)aQ)6S-3A>&ubQN@<{%pciZV9;jghTo*FK zX6RXGS!8)uY{UL56YWOR7HP*)pqLjhvJ`SXb{YD^nHel9ks(*(zl=YhG$Izzwbt3CE)iW>fu?SJtYpS>9M3&xE?<8#aY&j35 zH`ROl2%FE>>%)A6ok%y+%LUM;8YN6kYq0jflsR?mf=x+$(jYUg+9TN65 zIC~1NrG5e9(C=Kg)Z+>q9>IQte&@QSej}1saOcoczl9Uohb{Ha!p2*1E%lz9$a&aO zzr6;FT%`O6_qN`?nw8#z6L>me6WmjPI=9kuI1wxES|F|UGn|MXW4p?m^lBkqLtfU8 zptLvZ`I;nbEw|Mt`v|+@Xr~X;Md@c0xUz%D9dt7+y;=b2sHgkL%|LF~i+!XckURA3 zi1g|Xq`UrTloRC?+|y)l81Y}7m;6vdoGOh*5OC)_~__B*tp-T=W;SnNy2p#>(zVp)tnS5 zpTZZahk)08x^4)s_kb|3etI@1bChO_#aQ&yXK^w`X);F4vHSIGY1N012)R}or1Tt8k%*hm`)djf!3?xs_vxN;KtX)HN_}M$w zE@i~8DauSBL-iw^$kjAVPji{g6s0=!*gUX#SkLFAKo_=J{xl&Pv|3SvB*VAznXBx4|I~g49SM;;7%#nOx6z}8TBXJ z7X>m!&%Q!-r5wl%y%KGjfK3IEC-sq639mXp{si*09!eAB z{q1nCZ3o<=*PGN4 ze7$cvvzem&dy^Qi1^Plxij>P?{?r1S1$stZ5$97Vy)KYf^kdfuvI0mmAj@>6z91XZ zQk0v4tkAPKDNtBhtPfY|p$5#RKw)kf;rF5Qr^)kI4R7d z7PDb>UZ)pxQlvBon}I;q>zPeO91F<9KsM<4oD?V-lZDr3diU#joKOciA7krlqu!g7 zB4zVqsme(3+NhTZ8%|ieHtFq~iO4U^5Hn%3K8TY7h5fn>+jVczM<7}7lejwGqL1Zd z3b&aAk+S9=GvuOj6DJlnGa$S-;xlKB|th`z0zuz3-@_JGZ=dgd*HG{E}&p%-@$t{uPpM;QI7WASd-BNG30W=Ny2X)|=cayqK!j_!@pCN6$gh1L8!1{2SOCSL)vj z8}D9HrC#ke7H5ufC>!oWf>)*99Lacy!^nAkERvI;qDdeZ^ixRg?gQWX0P>%{sH2F} zz)Vr<0!a;5y{f$=oY9Hd%u^06NL3nu%_ZU9wB^yXA+yY5yIh-~FF~b{>WI$f-4I~+;Pt9Kkr^gguA90Z2|b%SXNd zG9cUs3H$ZTuYn8<4?yxI%&6T!28D+qS+f&XB#^=3g+6i!$V1^hNSZ*Me+M!w9J*7~ zhmpU5j0m?tG8caR`2vu~!Z}C|{Fb8Bfas&cB}lr1O2mPT4If7`0(KY7YkWBEE)kin zFBfbc4|n$w)~l1kGm+c~rC$j)Q^V_g$EjkF*6+6yAp9Q<$0EfXojkdtwbw!(0XOYPgG!3d!@;>3k$gg0Nj4Vg86h`?JkSiibeB?Zkv`C9S!i(J% z3GITDoX9XAF@e;NtVEIqqg)$ElgKF_X#gZM(y_0Ia|X0G6G+QQp^q@HtjG=|cfOp$ z%gT;~`w1^bSXu2OJ(0|Wva*15jx6$#4nVp^&LX)Syt)DD8Ogd|#9@Sa^@dN`~jNqAdtr* zl}MtnDu)6Y6{(uP#zbo6h_YCAcob~LL<*5GRcB;;B-CHnFr}RcI!@*ek628hy`X4YrdDUoy}26$}%o8m}EBuqs&1DO|Dh{Oe(9Y9`) z97jUBIzN)0D_ajaY-$7fEYf?Zuqg!607zM69g=s@W=kY}n6TN6Hrpd3k$eeS z*9^RNMwTOCn!sklw~;Qxg%=}jz-CXx$`^zwz->VGMJD^moj?vm;0I87re^Du+58-t zj)bkR`+*#Z9QTnyK#oR+Ju1A|y2uCeM`SsYdN9gkf&3Zy2?<*%lYtx$tdtXxvuHyr zP9ohiO4ipFN^LNF9^-mv}nZyN!VPyIvRdl5Spv?qZLSKt~QCzenQyLT)iQh zoFoX%)t1qTNNBFMi5@~ibG2;BG&3KHHhEeSHZzAtk07C$nIA2EM%d8I92q@|gfx6~^a2u^t7D^= z&JqKkZl&H2J;ITD)lGo$eH++2T1!)HY^kkBf4HrgEtY4~%|kw|D= z%#PNZE#lC+m=m?07lhWui_tD~Bw_1fVRTusAha%)L>J8!gx1B1X#PAwXkEM&J&T0a z#k3FHvo8rRS_K=TOks!1Rc0|j4gsp;|(Za>ThE~D1(NZL&*t?_uA)$4#C$KKQi`H5q;?TPIF1p!A zSg-DjE?+8aXr&yCj$I}Rv-vq%{F)%Nc7BUyzb*+|JHJP*Hw2-zb24f!7lhW%>FCW! zXr-Ku-iCzM#o1_gB(w_7MkgYnRd6A?2no%3C3Xr4&G3|1y%nN#n&Fqkdiw~Q;nia^ zktosP3mcl@H^!DD zp&8yPwhsx-@S9>QKN4Ov!?R->)(b*2ynSrgCz7xkep{@|{|Q1fylbr120>_scaLrM z5jMl`ip~F2*w75WC$FkEh?3S z+2qC!eJ%*i=OMA>WsM;0(O#Wq__!GD)hQQ@ zi(UGKh(mLJTr7r!a>2Nmi-cCexLA86vWNe|2u$A&uYzGorDYIggNGKOP8>_cfM5eX#T&xQc$_2Ay`ABFr6~z{P zDZFSk6~~f01fkXRQf$%JlCTkcIo5rbAhep6#ukQpMAV07%b{3DBs4dEjtxUX zb^aw#!^5%VXhZYoaIE*QA~N;-(SX;n*tcjy?K&1qJu1AYU4O(hB-E}yVipo=*B`MK zNT^-MV>6LZyH3PPkWjl$#`YnhcKsEo;i*{iH&GvI*QwZMB-E}m0k3nhTaO7ZYS+2g z6G*6C|Hhs~LhbrDHX8}G>)+TKB-F0+vC!`#GPUbMEE5T}>%UlUB-Ab?URAME;>Bq5 z+6g#afVr9yKaQjUkXL}D2D~nbcl?8uE}ycvBtDE2@hIskG6ucm=}Bz=uScE#W$al@qK4S97ZMrxd~U3e7>%2 zyy6_QnWuaWZ@)eRHf`g7aU!0$o6QLrz+YLUQx~x=+R;3$&h`>7fQ=+q%}nJ_s@xJ! z{f9*^OX=GvMOg$k?c=qOu>N_Sla@a6E|6Q}y^uI)(<%O-k1(6gSbAyo|89q;5rEu* zhG3lcM|tB*?O)M~ z7lHf*q<1_A37ah!fb@yKgXI6@y9E9WYvb* z%k-yzdmvh!JR1Lj6A^hVkTLP&K2iu|Lj2Yg5t-)Ll=vf@ zlqob@ro^8RM7{eRk!7aF3j_(#C{K+)i-gwB)c697Lu+Sh{B2G?S7`Q5i?8(&HhT-= zo6(DA-P7^AQdte>DL2AN`zuiAXX1IB6e(B1jCvEuv+*A}5iPwb1n2zmzc`V7I4^Ep z!s3)EY{jwl^+J3sC$d*xil!+c~1kj3$tK5`Jq8}XGsavaF2cxM-SGTRd^;zl3XRVC zc=Z~h6*M~Q;|3?C3a$4~;`M}0h{ocRcoX!ZvG^q3ofA10{}=D$BWx@_i|1h+8s##K zTo8KTP4VlrW$}D&1JBRH&fzI|?zAjELy*w2FxkvPl79t}xk$QR>k+;x3qpfei8)q= z>%AcK`4S?~Iq+9jo$c_MCX{(Lw|3tD1$hBazBYsJU&!3bhk?f2ok!*$M z*_we(dAv1}8gL(kmHth}c;^|24u7vy8(9g%>o8!!;G-V2`9rnEFpYcj0Ps7`t>hyRIB6(oht!(6EIzwt$AL-VjQzJ?Pqe};lhW&A;lMHXZlJ~a|~Hmh?Pe}apRmzsD33C&C`@i`KjnOb5y5}KKM;u1&1p_v&@#F5a< zj3rhgp_yqU#P5KYDKs<9#3r<%nQ10YAfcIQCMuE8%(N5JT~RuzjhlEM3C-1H;s6qw ztI33(UJ`puW};-mL>tOG$;1^%DDNZ_nMf$_BokdYkuxfp7%2#!QFEZ@ zYbG|L4b7;_5{Eb`R{EyF(`#UJSz=U8Rzs1ymjSsvQOJqVsCR)}l_=q4hBC|*JBRcH zxWHd&_4}b+Oli{-C%H|5@*V6C+5R~_@gFB;Y9?LDezte%RA|b7DyJJA#y8{GLQ5`Qsj}oNIv#Rt{^Et17R5?Juw-{ zaOj^>AaxTW&WzA1^s1W>ab|>ed*nmzH6t|6^ZGwdN>hgX2B!#@3t z(B*tarL^fTdZTWlJ0}}2VPq>W{T)t9Q;tHfmIJvav5%92&_8gU!s66RoIvu{FCuci z#5qBfj6aFgsU^xf486)C*Gu$55{6!7q<&(iAYQI)kXVQ|Ort8mreR|G6+Djjh4YNW zJ|vVYGZF)?6lGDa%)r@FR-F;{L^P4lBW*!5St}ZOHY|U!t2RlPCNOfHXT#Pqn?H>c zBeAR&@NU6js9|Hz=2v(coY^$-2vd?jz@|y!P4s$cxQN^|QGz7Dp_skbCqCswo?=~} z*v^UgLL*x#*C+P+2wN#PCXR_X{P*lwOIs%juM#~*rDr7;aw1n;o5TtqVR70fN;vsE zME!GXVlyYD3az+X6MND`Wa^(=6UR9b+2IVtxh+xYBdpH1C$6l`yyWV>BhiSHQiWD! zk3?He$`o1`JrX%cXmole4%HQ1uX_^vu4AM$ zr90#umK}N}enzqwPWc$=oj8T$;mbwFzc+D7W8tMv7UaH!fn*;%U0iJsT=gfKa3YkS z&4dRM3(+PCtAOn)A4r6nh&auFFm36d$V9T@0DR#I;`9%U*Moua8kDHll*jQ#XJ}&0 z^^BA$wBm*)W;PRqR@|__2tJ%RC2UeUu7s~xL+Qg4Ycjc4N(Jn4ujXXj4UEW99+8;g zBW#o(O>E#qj`HZlS3a8t5NAT-drsuIPfQ%=q%1@VIWduQBP&bJ!-w``mLojfo9NEUJM%AqlqX7%Fg0d2-zH|?DQxP3%}yZSCCWJ|Qie@WRlWnVH*prp$+PfI36P4! z=DV0zky58wigE(T&xvD5YCtO(Ihx4mA#75?rV_}XiG@g(LH~rlgRc}O%8?|{=HEoE zp2DkPGF7p_CdJ6(q(Er{*XFDhHH>m355t*58rY~t=G~$dY){K5ngqTQY0_jE4;2Tj{6AnYG};vEh6uFRn#!USmz@xq4evG7WWF9|KKT8 zR-a5`7?J}>ZZI};QlPM_Hr5+A8ZG-UFS%Q8VRRIP@0M?dI4zB0w4vQ{D`Ph&1qyp+ zfUUt+#xb;^-A*ebuP?8U_r^*qBhil$p<}l~E0UHJqm`-wN+d0O?{hL2_F=crq49SL_WLr<>6< z=i<@nX0+i%*o+6SZbm*Qvh8;ozx!-heR>#Yd<4<~ka+)#d+ctbM358>>O37H_cFo{ zUTkx3pbz^PBdgf-3E1>ADyrD@3)nnh+%e$dvK|Q7^f!7}vFUFt%H>`ud+!jVJRsne zYb@tBa+Gt8)ktWRbB&LXWZWxe!a(CwB&~t4nK01Uf@JSGu`?fJ>_qZ25O&vNP+$ZH z8~eD;Jms@HQfG9%FAbKWeP>k&R&U zn6U$i`E81_1;{94_aj$3U|c7 zYjR+{Pc@W>c^prFrW)Njk@I<~QO?N}2x(z&_xqz_`ye8jZL( z@=T*8Ct@Z=zl)eAWt4pR2*^c_WLHvJ|o@HhvaFrO0y)x=T)x=NiYkO=-%@ zaHp>k#F=YkJt8Bw0y5ti$4Qy0!?!BgIsdE16eNS-DqE1JkTj3MP6p=ut40x$6IT*> z5lJrGi4b0kk=y`xA_Q51|o@7#@|TTPME!a@s?5RG1e~d`c1s~vfAj00M*hI~5ed60VO}2@%19BJ?FJe7*jR?-_L`vjFv{zV&?sTU_FBy5|BMVI`LG|m z4{Sa)1|ebB=B)HmV=R*Au=GvFi%8gY6N|IO*uY7VlCn94zsIr7utu}8ij*;M#lha} z_%fi7+l@S7<0-&)<3mowOkmeU+l{|{gk`j^jL;YsS)67JfI5F=xSW)Q=uCKrk&cAU zjdvJL1@ZRtJB)Tn=#+Se(G9)mlz4}64-%R`JB(cPqPrD4jAA5oCj7Or4hfwJe{CE? z!p4-H4D2*&jb*KXH|t@%7};g?MndPk<;G+rblzKTEJs2ox8+7T5<0mpH@+ArBD1rv zA5-Dl;UdxsuCl)|b_*N6hkOY7@LS_=^rAiFZX-6HkDxa?yN$~^5u?LSX?7b`Piek4 zs-DvPU|h?+- zSN{$4YNgQ=ZKzi(jY3XjuT~n-f{S~#GSI7)hRtncubww*3F7tYc_SSO_3C+}i6CCD zo;O->B760Maf^?zUQIE(b0T}Sx;dB=sn6BTVkD%`A@eX2(r4YYo@DKk`W!JkA|ZW_ znv;=`KF7^vNJyVe^KT@i&yHyoipZqTNpl|((&x*}_*24$^tqOqiG=j|N^>|8(&yUd zlSoLP)6I{NkUn2)R^8jwH;-@|*<Dxi?sK8^L0+-=v;5U%ZXHp>&>d#dxKe3ds~{Ha4)G6H<{&F z7M+LRWGP*^uvswJSAf&xFn^mtd)&EtfQ%uPPRRHB1f&WY^RPUdf%NR{YhCW~1s z<|(8SUCg0KNF}kn~%xZH*98!s%W<4aN61~iENJu5_Gv^~AmFR2! zjD%F;ezVp*5t&pX$IM1TD)FE>9to+$KywZfQi(kCb0nk^Ljx-Duz8Bx$R2yxZ2y8B zWu_7jn^S#+sl;$|E+l2kt#7d zpc3N(D)G4a0QZtAG1VN2WsyouHM3q3btaXVW@auDgj8Z$KqaP|lhKA$V!FA86R8r@ z&1)93I8r612UKFZ*@)Xnm6%~>3gW563^NM}&4d|dM?t*3#0;}LCsHK}%sxKCRN^T! zj}zIev&>1HNR^mnu0%pAG28qP38};!Gh+#Bm)uLtHFJ=VO3X9oBO#TTZ>~c^DzU(f zEERD`C0;QzkdR6&GRGkyl~`h~MnWpF%q&MjD)G7*T_z%vN~|!iMM5gE(!3W5sl?j> zm3YT2FL{2PC8t@0oWA;;F=Y z<^Uw567QM$=tU~=o;d~y&5ifW>F7l&@t(N`30=pnG4~-Ml~`kjUuUf-kl|%~ME7B|bDqEf-~xN?c5sN|cz>gbi1TCqN}W zG8dy4sl;0IV@~AgtTi`rB2{8-Kqb}(RN_-}7x$7XQDz>&vPdP$%+>!BbtaYAWDZ*; z2&u%TfJ$sOOVEZ?VzYUS6FFNpn~%Q5;z*U)98ihP<~VL6RpJYCvLK#Hd|?(Mp_%Z7 zSuBXB5?`1LIgu){#eBm@m`Z$UuHi)X>euF0PNYhFZ5~HLDp79U@-}M){00r42<XQNF@%KomPv;q!I_sJS3zNhs@G{cRN*py`LP9F>ySWkxsl;*f2PC8tf0@F(BEcnBy=KlI-n$H%$35%J99W= zp65g=$r-ct8Wvg3jkD$*oJb`(Yxd(rD#2oh3~bLJR9JS91279t@fIcLsAFH(|o z=0YSif6kf9(TkMioVf=HDak*k@;<9`8UI2f(~W=3CP-+%@voVKgp{PxT!@5}6DqF7gRBImqf zHRePriDFf~D!Ig}dR0=xYR$c*l7y}9SQaTs*h;PyrIV6GtoS-XNJ%1A)vJ=I)fa6@ zNut(lPULKfTB++<9H}HxtLjxr)Ka;PRFaq#7sOMNn3Y6AGa+WB3*sqB%*xR>S6HD>Si9tY<0>l)2`NdMH4+IaNgZoG z5>k@7)~`rNN$Odl{}Yi(Ng7ypBOxWpux275CArR8jf9k>iFFhSDM>Tyk_{p?%x}q1UL>sFo5}F%rtQ_4=OB`zjRCE8gZ3LCBxGeIS8 zvA#hsQi=A~pPb0iX>TPyXOX2!v=6AnZ2^_&Y+b>ko&)*AA{ zJ5U3xBS=Uka;>y&tgLx_m&@(}4YJxJA(eQ@nu~-~VwklC38}kng)|FogFH(syRud$o66380k&sF}ZWVGO_ZyR}V@PPfF*%?lQ>^YgF7DMS z)?!Yil1#A<_y|*ysn$tOq>@avQod$!q>@atqDV+drdgK@;wi~AD+38B$uz4adXbV$ zv$B!U{F!ETK`&C0Y1Tv}q$Ja=Wk^U#rd#DmNJ(Z`)pqhadv~A;tZXEtBu`p-NJvSZ zv}PkAC3(_XhlG^mNvqi|5t)?aV#1W9&}u7exRT5PC3(tv0KG^_p0*}(Ql#7k_bb_# z`kuDRk@SVP;a&o-XRP++d<2zqZ!5}5AkSN`BdNI-p0R@2`+`-0qyXN#SqnA`tRdfU zFK?guiZz-OsZp;4G-`1`qh7P7axbY-Z(8#?ks9@;m9t0m25Hp)tlr-XLK^kIfJUvf zmZ1%4)Jkg)CsLzUTDR|Iaim7A3~1C!>rQSXcQUK2-hy}oy-QS0tsojwoP{kfPh{i(3l z2pg_HrJxBvT07B;^yi>;j1xIJ2d%T5NR>DkP>G)dD)FmT?I%_rsS_^Ia`ifOE{4#aXg?B$E_9IMykXKYqcPr zN}RAtkkCvxVU-Hvsl*9u8z)jFPFlNtgsH^e)*()0ub#91sBiJt`uTO4P8MBO#U0?A}O7CBk;aZ^DaIB5JQZ zCJ3oS+}?qNRKl>e--QjSgl*SCLMoB8TOc8oxZKX+MDAp+u$4bp9QiEGm3Gx@qO0sh z!p6&JSJ_{2B9-JSJMt%sBj-k%oyLh&k~F(9CsIjj+gV6RNow1j1o4!lwtXKGQj*&C zVDus-scjEOLi4A#JrTV~Now0Gk&u$qvCEOrPNt4s?Ko?NJcGU3&O|~=l5XcCAtkA6 z&qqQ^QrF&qgp{PNeGCaHNnQKh6QV3ql8Xsbl56Y@!iFo!R#1{_?H|yKl%$@0mJ>PW z>)F*#%CTV2($ur7o}4tatDc-Rw&UDODoLiD&WTi#O#9d=QD;(;8|*`;1tBH5!LE98 za--ekjIbdkxzWz$M9!8Q?W3GXCArbAdUA53eL}?Xu8Er4X9e+;q`9q}Dh4B75~_`xZ{5lH6?PBcc69J9{G%Qj!k#G4jG|qTB3@ zbF7B*6jG9ob{-N^lH2W>NJuxj+N+U}ZgjJ^{VU>-Zro`Ps}zKEqlY~k3F*e&_BJG> z8@=rcB%~XCY~#F$L%MOloyCdNjU2lK30(p859r2&cIE{ZNA}@^b^#|+Hy*T0eS}>B z4Y0rCMC!%>`v@meH*)PWNJuww?Mwe-WtDllk!!n1NH=orYXtGWA&_e~LPENcYiFSs z=|--dkA!q%pgkW6>Bc~N8xq=q46?-=uJSBpu$|4{d6n;6=h=BkNH_BA*+@t?^6Yg; zNH_BAWGd??`PRn8gz3gZ_BFzW>&8ydjUo1}=ta6Q)b7uT9G#)|!<>lGVY)Fipc}&j zy78zzj(bVn7-P@IvREIox7fzm6RV3llWvT)C)W^!bYpBlH^$l9(1vtloUMeIm(-1M zb^#|+H^v2YW1KyU+sGZrc)M5-PdCQf3z5)F7;i5Z#M6!O_G(U~ZcMO0_7SEVPuQC| zk-a+AuHZ!K##B2?Wv!4`B{S^VNNB(Dq+N=HRHD#6j)YX=Y1`6798!r{b_*n=63^Mo zkxWR3C*|Q;*&;in3olZM=j{w6q!Pt;9uiWC7wqLoNE2SN_i$3I6ymeQ3+;HAMJ`ru z!)JhB4QRq*JDc0c{#k6_%Zb#4#r6w6!XhrQS8^gXVTt`QCsGrZ+FOv2CM>nT6U5Vm zrS?%IqzOyybLd5TiKVs@VP%$i8Dyy)7R38j!%{mN32DMII}ZtI!ZLdy64Hd%>>WsG zFY&q^kMgp-?=ZY!w?IOg@P?g(gf!s|dnOXngg5MCNN6u{F=3jp-2O+{a839QR^|%( zvY05HG~rGA22SMYylJ=PL~6pD0ZmvH(1dsFuG~v%!UuLPmPMNIf!)OrrIRLnX!o=P zAx-!&pa~`RBD5h*D6z{q5$mf0+Erp7MZ)qjBOlwA%_55x$9|>a6T2=Fw&K{YLTs=z zk+6PdHlNyukgySCaW>i^N5o+}d`8Ob3?yvDF|RM|g-CAAf@gBUW~;pi2^%kF^QB$S z6>-=oGxC+)1xXG>X5?!-9|>EPCm_x)`%NUH;o10qfP8DO;Y6%KR-fH=VUk5IRu;pX z(F%N7;CuVNnu4%Z$s+#{Sd|raKDUu;u)==RN0|SQ_Iggl8dM?jkM=fB%0jf_4%*)# zp{L~!+P?_mt-*u#86>m@58Bl(V(NNAn@W>@`Q$}u~1Ij=MS{lPkL*Y%iP^?NDD>?UYK z-%I(!o{ogRmvY=*jf7VB340F`THPn?cC%nCl`@sSmvVyoN2M=!ov_afFO|NRa>5<} z@4zrG`d*48^u3f5c1kVL3et^>3Db>}c1+lC-H5@s|7ABqFVc-uc6&}_UOr`SHuFgVZX0;%HAu8mxcePc6r+SxBU}(v31Ixg#X+AjT4!LPur(`gk|A#)bZ+zo-E#zIv?o6^AyMHLrJI)&)b(=!TL}tU88perG^+7I7lKGoU)5tTZu#q@tSBx3(apqMB3fYC%Xdbti`t zIbOPRm=if(x>I$$bmtEd#~ZJ(Q+1t&ovPy%c209IIbIPbC7snr5H?;Z5j+fASh$&eWx(4V$Wz3W(Hnf2N^$)ttn$I#V9( zFnUoQe88#XMC$4T&WsyaOQo(p5YW{JoSEFF%+u8zYL}M>bDUyf z<6VvBI14$Ey4v4)!$+8|=8_(Ix|&Cky&lUW82%%nS5kp0kFRE_F38 zpsPazx;g@g=pXvd(nzPA6RE2sos1iqjm(21og7Z&$>d09a|4~}+@aU#cSv@0C)Q8^aj0ud+7-u4nBS&Yf^Q4ck(V5^Bb0Wum z5{-p7UX!RSZ@fGkZ@eZ2#%oewye0+4Ym&2&moCR^QeeEM2F9zvSzBXuM`RW7`Qr<25Ug2WL6ExQ)1* z!>)j42lC(?Cvgjl1KAVv;9MsS3FX0g&LJd}2j@GX_QH$u-~uND3FX08oMZ=K(|mx) zgNvNrNGK03amtZU9$e;}MM8P-b*I*?A`a!j<<31wC=dS6$>T)k!Ie%q5_ST^+P=zJ z-HFAKSAVOWVYdrHd2mf24}RdR;5IT3e&Bq{iI^KK4}RcW@DUdALnqOh{Zr<_51lkl zWF9PW8X=)PSmLx2#LI&vPG=;P2TPpZ=tX(3#CZS-<-rms54|W4mN@f~(DmR)fjsz; zvjJ@=53UX5!H=EeXhV7MlRzH)G>`{Bb9#1Ry;0^}4}KQNgP%DQ(T4J1sj~wK<-szi z5((wOO-_1O5t;JfCU14q_24GzA5SHu4dua2PA3t^+Z%6kx*(xExXI~;Wl2cpkhO^57TF1oWajxW$>xiPY6C&IL}Su5JnF>K3Q^9jvAD+t*v2Feg$Ww^BmO&CkFfDNPh;VYSBi@o?u}Q9 zOD9yc^GtDRhfnJ(#jUDZDQ;EON^#%erOWY3ajRa@S97bLz=YiO+)IvE#4YDUj#tFZ z=*xOlj#tFZ;Y5yC#4WvFj0KHX)ZP4mAT(Z4w|9R*XuM)Bol&#=#d3GdUBhkUPR4L+ zJjlG{skQBt-UMolMd_f`oQ5m$~5qA`b0ju5gcyAR2jx?(3&$4$!> zUbK@*cb6lfoy;}vHYBu@splR?LOYoTZq-xkMsCJH7Fq6Ou5&jax%@A2ir&~wA0%vO zZ`0H*94yH6o!|_4C(|9BCkX9rTDVoO@msmCavL!>*iNREyU$0Me{1(oPUKFewR?dR zxs%Cq^@o_Pyx)}NCI#_!GFfhYB(#&sa&JU0+R0?OZIIATCd+M)UbK_Raz`SeolG0I z>J@z(cOlx)PUa@J>J|OX?l!ccolHBo>J@zlx9S!Bt!|Scyrtew=2o}r75%MlZ?vJE zOhEvJ;%M| zcnx-|J;v%I2pg{<)X&~{4X4Q7cnuGX*YLo24W~HXcu7LzHQY_`(&cy!4~*9%f$PcZ0C;#%sJ=Z}i3EHNovT=Hl_1;2s})@pw%PzBy>gplDmf!nFklRc~7v&#R}!Y zh3+;alm}mNn@koqlm{2Pl}IQLz81)XZ@9NiVP0ZxusryNJK0Cr|6A_P;Y8-aY0NGK1kaF3uD<-rwhaw@BrJlTFT zkO$v%v(bj~;Qs=7aHX4%Hk1e74&=di19|X0w;a9bWc$599(>QOL>tP3@4MZni8@mr z{Lr0pB7xYj*~UX%wvcH`6K{9*t0v0K22)YXpzy85wO^@@HSwae4hb?z)42X@qWhj*Pj zmlLV0>)k~@!gO_myGnR@id{-7>M3n0mF4xJXX9NVmIivYG|;P(P_LG{@AJ~7(v}94 zc2huUx4NHlFR8RU+&$O|Iy>FrHkrYCS6*@KaC144R~$Rsk|)I+qs;iVyQfeP%8XyT zIZq2hnQ^DPjuV*~ce<^gVK#CEcLqjqr`wL($ScHM)T`bI?h1_HF86lsB}cH_z1v6F z2=1nS_Qq>3MfS#PFO8`;UV8)MwU^>}nNboNuf6VrymUEUdjsS3LtwlPy2H7b9IwOf zbWUVuJnZfh?ea3?VK+Wg^gPosc8~tBJMvjUXuOWNW1ka*#_Nb1DiVao>(@YL{MF6n zHZn6F3uMMW-A~bmGUEw%2NKGRC*5_=v$DiHnC#l~lv{y>GUFMy+8kj+neiX@7?MYN zip*H)W)=$@%8VD><#Pq0%%~){A)(Benmmq#GGn!5gL%S>GGmQoHYYMOhLSswP-aw< znJ+Lec^6nu&Yv#`WyWZ7;){Y%W;Bv#uK_3DIf<3r$Zce1w35n8%uB8mJ85zvGoziX z!->p{PO>o)%8X7jOAs$JI?1j`C^I_A`_PLrqm%59gfgR(%tJ5Aj81Ys61qZklU1(} z-Q)(eq0E>}R=q;3nLLg*lo@L!t6m{qm8^P&n3n9hfc1|&>rP8ny+TY&PDC5ZjCGPb zkWgk!PgWwK%vd*>zEDJ_%vd*B^$M{r^^d0#b(5WhmzNpqCh25}t`H?5O{kmfj%871 zyqK`ecun$tVZ$?H3&@PuCMTj7WyX5RVov02sh5nr%vvFJwO+F76=J<))y!BwX>l*9 zwDqZ_p3>G&))F>euB@L-=R_)PgJfeLVM^O5iPwXk(l({YULQ6k8&7GQ270w=pjRcK zUTvDp;-yQaZJMll7MGcO7>kW2r2DN$wNy7A*H=JNzc--^~Ln?=4AF#W+RohUGfbiY{jvsYdR#iAR(o_ zEx8W~DQ(B(hGilSU4z`7JcNXlwreu%(8^VT^ z_MT)e5>ndU$wDNgwD%=Tk&x2%OO|sYmG=JR%;hYyyast78D1d>U4!&bPX3=D^t?@O zvgb-cNNMu|N;@PugWJgaj6;$yb0W2ONb-9hVG)NWf9FJM@6co=CsKQdCDm2TR-Voc zOFDvh+B+kApcUZDLdXe@HOO8ZB+WT-odmm0NL>toH;Q{R( zk=%whq`i*@w0BfMdq*dmyv1AUoz9I8Xz%D`Z?qxp9h+QnSr2VUB_<>@uq@KviwV=-iOE*NhHLN5 zpuLYLd!rX=?-R*y%c-cy(mxZdtk?dq*b3 z-uDw?@AyzmYWcBuN~oG7e(aqRnuzW4V(*kt4$643cSJ_vmkAfmrM z;=b_uYbIOv`fDc3c)4qX%C85v; zA>-%D&qLLTaIRbtdYuU8%9WvkL^xM|6>7T??QpLAIy96B=gPIAxkNZuZV2UVLalCe z0%udGTs9KUm77D=HzVO(xh2$*2dRUfkf!=o8M2XG8s|EY6Ji ziO7tYAyfxtyr+^2p{FJBBkgaY<^dui?WKgwc!e!{KD@#*UZlN};MFS$UiArk^-8Fd zEZvW^R}v!awS-9fPv{M)7zq;-|V@4+PPj3j;!CTRtqE0eT~XvbU06w(UL+(KHx{wk#XCAIwi zDy*sdM1A~~OcAZ%HyTCRve#clwSsRRi)saDK~c8j?brE)`>UvShb-OiucBJPr^q|B zf=`hpHC<}?{Z(44B#GZ&rL|GmF0a2zYwJ*$lqTfZRNrI{iSIo z4hiCCMop_K$s}p{MVP0C){)3>@Jp0}*jgrO@pl~MwADm7d)}}8LWHyD1KK4boIM}Z zE*-|wIeS*pN_~%nvu72p8WGN(k7(s`QRYkd)k5*MtD4q>2xrg7HRTA(aQ3XOxkNa7 z*3=pj;p|yk8%BhmG@sO_N#gI<)zkJL6_zs<&WsJT?LQ#l%=oN!{az3WWWC1PMJeMy zMK;!o91~hNT12jFtknw;@!y(gFG}L)$|l-tlK8puIqhvCoGYKxh9dED<#XC3BAhFq z(`J$u=gQ}_c|6yc%UUz3<>$(mxussNd|7LaGG4BHS?eT; zAA4WXdIX5bm9KGJ^`1()vt`eR-MzRvl%68HCwR4cf>*mIc(uFMUzYC2-tGyp_l<>-YWcDE9c_jre(ZfmyMpcVV(&Xzx#KvZI9I--4LpH_bLG3*jFU(>SH7#cr;u>2 z?57Qt#P7j=+C@qH9_*LUgZ;FtXvfQy{n@KtfAvr3um0M z`YW9+d;OKpGTz!IJ)ytS6Z$JXp}*3#yJhKqJWSW>OXBxndO{CoB=q1Yt(nyFdvKiA zRT94k$7$J;_|KK&v@0m%WzTV1qhIs);CQX!x%@piUfX{@e-BR3DqIl6@4*S$3Q7DP zoS+rF5om(8M#}g%drZ`_k$8PNQQJ<0qwz%TAQEp5PSlP`;`iw!?M#4(Ihd(kk;M1& zG_B}wqRyD{#a*V;w16jWr=Jq$b9WNB4QQ@%L}!hL_~fUWU+SqchurLf|hDaE+G+-U&wr}?I$8~cNm6A1gJ3$OJ0=Ypog)F;9h^wOU6>{5yiyYs#O(j(@k(S~d~RxjEVeBAjz`v}S){S)3X36OkFWY8_BUX2#bcGsd++q{W$W zoA!Yu{+QpU&5^{9E!(t$cZ==R3f?WYSNmLQ`LX4ImP2K6rAQo(M;h-?d`@Vd)%6{?G;z*$;33 z#V>wd)^-!&NOD!XM1&*BHSNAzXon-o4Xp+djwJtT&lBNDqUe1jnWPMYr=;F6GL!W6 zM6MAjq*qmnfPWy`z;A#yhTjD)tPdpeI+0|(;IqSR`el^yqRnl(tqMDSw7E_17$Bnd zMfA5N@uN)S{!Xs zbR|jD**_PTs+S|e(I!=IMTGa+Zr4W<;b>D-&mqFmrkH+#2uGV@dZ|KK7Dt<6dTk;c zZHnoe3!@B2oBTvXn>2kN%E)Nb5Bl^D{WsF$Xj5D-k}T}_^P;$3UJ^gr6xRzzo059L zXmgMLu+;LSO;~?glDKl}nxa&J`h@k4L^%E!dczcK1;-y#&mh9_$JDDP#G z{IT>3slrZ<8p>9bA<$AwpGKq#koSQ^_5DN^{tRENO0v4B(8^NYxB<6H1BvO|B*C`N z2IA-!BuNi_dry+G5J(xlSTUiMu53wDCAn8GE6E6DFOcORQ&w+FM6~p4Am#M*0LcbY zUY|!qv|szk)76EY9# zodZP3RMZC%*)b$Z*13|NMPxtB_kAGqkiI-X2Ey$zmGvD&K1)fGzy4fBKSpH075qKu zDtfUyWPMWZZ=lNGgRY`$MAp<-mGy;SH0bvdSqdJj3AL}HSCRzo?t4X59+ISCabd^5 zbFYg2J`ogcg$HKpxSD5)n204aj5qr8`k(C9J+~0I9Bb zE{S9@{3d&`WAMue`uMw$G+dIT+zq6jK8;9SAQq7N`q2O>1LP_F*8r&iq=9~g$W$Xq zc?d{Dy=N)3JZNc>@&u4)_5DP)^ih>3fi%`f-HkGWGzQW{Pq{~sOy$MW_#5%f^xBeS zDL<`;U%CgG=k=RJ?t$M@?+&Du-n2B@X#wONAZ_%aMCt(<2BfWilgRtf_HjVk>peBp z`VW3feKwHJ2~qtueZQ3Pm^a7Q5@mNM<3(h+kKKUC)!m9~-ahg$+@9h9cr&&+UrRLoX#sT;b93 zhF(z;tl=uC&l`Fplt~#}8b{rmdTY{pba;}o0c76P2N7w}7{_W){e2>zHBpsLFrItr z(}=7i(o3IDr0|ofa@%G_>8-C0kgZ_3uU^;`b&e}-9!^qr0eMG%B|z=~t^RsHA}Pb6 zEVyoSu)aD#gw|j^WT71)ladXwNiR!8f!Qtc>2STOB-r+Ypfy~7Qj+0H?G4zj4EHPvk z^zs}%#YGwR#ylMy0Dti`9?u?0=9c<|TlyJmC3Cxc!fjvR$#4%Y)GJ}>Dz|-+-kpf( z(_+vWOFb>_12V!t8}wpj zq<>VQCCb{Q8v!E9`o^=vKHNsJ&L2_R^afJPk9FJh=91tTI}et(=>yTSH^#Q>!;vWL z`R(3JVbAZ>r;!YMey1nHp5LYCk_>x(w|dJ1 zB-n~Sp%n-8Pf*5d#X)@uX>ltKdNt%$9M<=f47b83+=}n@10=(($kopUh=`C!^b%#U z72K|4`V#>n`s-)C4G|t2d3u)s5hEc_A4Y^*dPbih$rR=M8>;d*$ehuq2gofTzv@ef ztmvgGg8Y_{_5RQ|NE!5)h&F%dyCoSevz02zUnrCE(%TqU|J46OB1b~Xk8r=AZj=)( z%~9`!EF;Key}BeLlrJ_W$vA&SA4M{YJ<|M&D8VoNirzLrO2B`+qQ4p-BZ|V^efo5? zENdw0d`+JdAVTY!z9c||)^(m2UL?7}#ET?88A6%yrYAEgfz%nK${gp*h!G{)e#_Gu zRwPL&4nzsV|KKk!%ep%sd9e|CRrO>Bj80MvknxCD=Oj;tN3TzK^cH5BwAL$=z_L$xM5VA+a^-iizw#3ie>~#V=XOtv>*EuyPccu1XOmBOHl=woJe%&wN5pI@ z?h%g0CG!z6Q|`(~M1;I29}zQ7^9av4D<2WjI6o1VBl%>6H|%^wl;!3lqO7tWVLw;! zi11iN=nIdeg=Z!yj{teVlli_%lCl!kV;=E5U&)gh0xLA}#Nm@)-YiJw!V_7fcu=M; zkP>jU=R=+y;SJHQsvhAwKf=T--6P)I@kxsZRi!$#q8e)@AFZe=^?^LbBrRV*r&pZaVkEmS*68319g0h8phwkqsG8W7|3&;9pyc2 zsYkqadBkg%PfpiWmCjJZW}Y1}-@5^M-XmP+7d?^(dmy4+`AHujtysqM{7Xzc&-=vQ zk)#X+EsuD0ZtH1rtnEsbHqQqS8?2#J_aCUbIuL@+V;ZS<_@I@pk z=clX67$7~ue-VjL7VeQS4tpew!yXCa@Qv_)fwDyQd@Fogd6By@3ybXeR=9Y8i0s)j zjJu%z8nSm-lQMBtcw-XOuy?p6lGMAdD{|EJ4ZnhRly^MxI?40|Eip3thWnAs29FFS znJ!sLGP3pcJa(>SlJXIhm7mN8@=iXPg+Th{BVPa+;E~E?XHa;QEGtVnUNuR{-U!d0 z;g15ug8mv3UP7ciL}MW{G`uB1giLz)D3P6HXIMBdK-NO(!^7q7^ZhKIA0QQhEDhfz@_a?eWM0z~+EYq$-OW#s4W;kN@s_<2V-GeCr&cZIV9qzRC{;R^xM z8pwfgv?7+C3#E&`I2^7KAfhk655Eu~qA!kwdjyE+i(}!50V4Y1$ME_9c^Sy@@L3`q zsCQ0fSmVY!Z=uU_XBb%JVwg+vF?xX6iMRh6Thj- zP>}h9=2zg!B|JmQ1j)hx83S5Z!mB08QEx0#mB~P^hIbRm1@a+~YvI2n!MHjb$lu{x zMBb08$^sxa!buN_mc~;bT%jtKbfYX@({t53OnX?g$;s1o&43{!$`w6fLhIsf-_*;@` zS5sABv7_7!A0?t*h1GO%xZNw9M`X{_@M{HWaLzScrLt_7`qnnc+pvDV<@L_0qN=hE z>Z2H#f_3f~x{gCb`^T+%db|C^(yn8l9zOnqOe2s4-BI9My&O>K#DRj3tubEGP}+4lX^p zUrpQrE^cH!Ec-&8UrkjkkST6_LS#J1lmSx0;91ZT#*f%(ztdPsGKGMM708`NHj&yu zM6SHk_>M>)AfLf_zSAqc+w3Hz0$46-@c1bK`}0EUE>GrOAfoiUJejJGVGT=pGF!>= z-3G^&q+(dsJ)X>H@S&(-X>NsDF@miqZRAl6JAJJxcSGr=JuM#dA&>Bw4|(-Db_(85 zK@ENK{W*B90%CYFhv40WXqT1H%a-wnEZvWFmhoSJh*)PCc#1nG^|!t7+qvNR2(=<7 z^~xS5B_0tyn4`{v2p}R-gzB8*MVp9$(I!LTXcI9WLao%+G%q3s#<84Kj$;v{8d+{p zCP}Fa?TQ%xlLSZ9GeBZS29cXI<7{Ibky{Wmg;yP8DUoFm{Wd`KbB%3GAo__|SH{>+ zq$$Kz5y$Q|dOnIH^Dx!0tdUFPDTs$P!E#xnYc-U~gSU9ipgv`d3x@{%NA9{%FV95a18dtmf-k}@1=H-cpmY0G-!urZC*az?+$ zWDUJ2THcsJghy0);~)|>1W~jLST1jzAR?X%#LO*koF}pZo;}|Ha-Y`idyAIPIdF_NiuTauJ{%##sB$UN?m&^mmx zRy|>a*YISjKtvKdLN$zg&~oa9ELB+nc4{U>wwi`3WwMlBnyRdpGMAqab6s00c)ht?bP~p>r#xZ+5u^7h zW0};7t4Vt?+B7g$5g9ZXBV>bw(i<2XrA(G`2!0{xa|iY=j5C4KMcim;TnP{e06Z@``Arjhr#Gcq}35v&qCXq z8JCEZg!krqfwVAs){=IVadF7oP-;u#Xn+W<7mX_catO#vMycAU)fCz;TG7r(N8;@^ zw=*&&iKlW6+fl5Gr~I0Wk*ys^?38+7M?^ngrd|yultGm0J-Dm~UzfkOlQQ=WJXg@p zn2TkpwZP6Xs9`&UWs*0bOnZ-%1dZqmO18>sBo8s4uu0%eBc8L+y#TY=A1rdGP)p(!C z4k$~k{a!cbNRp*g_+3#>Kn;5&jIlS26;cLA%NdY)!`O#*)X{SxUjTX2_@2nB-bu<| zlKg@sRrpY}>n-Cvk$o`2MPIySTqmtBU}T8={+2PfuJA^d@SeT*g!15VMd@Yqmn5EAzXHytK1Mo`4fSC609L1cjL}5CEXO1hiOTiq zV`SI!>r)ae_cfZ;7X-_)fV^uAl_Z|}PdQa)kp9LfB0Z|8a*wgUF%gM+3y2F^{f*T` zxUBw$@|0iJeIPTycwCZ9rFVH%sRHDGMr%p@(gzu%B=JihVoW5WK$a0ZoI{LhNYquI zCMl1Bogqdx5iWg*p)~MIuLUwgjY^XErKcy1jp0Pd^9t;)7)_-Xl7?VsxG_(Xc z`sY1kDUq$vr=l<3Ggc$g#J@ z9}>t%Ms*_Z!aC|bAk&ReMASD`WeSj4#sVUz7bYpwfqZJ@63K?>Hy_A+LvJK3`=fVZ zf>#$B<)loO(gRNNECa1XnMDa&|2I-YTE-_S5my%(?E>UWC~J{1RT6*Azu2H}j?{lo z!uxQLSz^p2nIRuwBw6BRwAY`)9Jkb1L^7A!sZz@)Uv^XF8dVH<}XRcM2 zt%+zU&VoarwaK_HNj!z02R9qabJ80M@1<-u8WG{0lW&ZVn+lm6b-)Ex`5EkNHL{6J zC9>T(N#uhk;EO_#*=3w3(qOWxTn4h+P@AEhe~IifN)uVR3--Q1<~!p-BH1K!$f!r8 z9PH%$2Qs-vSJwI+-hcf9C##LYM4pEFlmv3j_>@Qy()!tm6Nx*jVuH*s#vURiY$gYZ zyatw0<`*Jup+1h(x=5tt6ej-=*#WIUnLD1xmLB!A!bFsdY`Gkfe>_r^$N?z5ye#Vp zBD*}9hD55(gm;lrX0{}LTs>hdOdwwbhZMDmOYM1Dy{nN!B+L|T%}X=5Leia^AU&>7>HBv|JfVEK&kc5_jdKQhl5 z|3jkizQj2rQxd!eoDG-F?&`RhiH0BN-uPHPwgC5fx6KS)w~KxA0C0sC|2gFW(`S(EB`@Em;fHT-F#LOzrTu_F9b*y$P_i-l_Z{; zm5EQsY32|j`yark$TV{#5^t@QW-gHgSKXh0ojc52NwBQCJ0TmHd8G9?y!~GcGIyG8 z2T|uOg~q3;%GW^dGOH4q0^}PY_n6l^W4kJEO;Yv(37Mf+k-WNJRgM7B&4I5W5qoiY zKn!y>ky)^JdI5-O<`Vf5*0h&_SZ28{s5KGxTLg)k9f@3rRqjn7wwX;t8H6&fd4Y)7 ztGw+5>=BvOx}u%up+3S+IkVC0NW`wAAorPlh=~1gK`NLth+K!Ar8~jSgXVEbGL`IN zs?u!(obfQ5_Yih)7KA~jvN;!ta``AeGgdXXAW3;2a-7%?uWIfhvimiBZmMb?Ao349 z<2zuds`&$vU7j5%2>#;9bzx0gYoCxgDP?eXSM*>tQ+Wg1)e+XtVyEIUvzjDRl$1q~ zo51oDW)Dd+m3a%{+%k|F=3FApA61naKI123<`TKPCY&k<@}&8;|)wcwEjSCx&;Y$S3Y zpfkucHmmg%GFuA011l>P{$DfmNhC!NlMkOan-clwb9}?{yxE3G(dD>@|GfDs+4+^o z3uaFuS{L|s3Ce12&LHx_7***Hq=i|$7nc4HlqFVZEzQc3#8qDVwKO{r;k92&b1V^F z`?WM%^$~XBDzE+8nCFP_+OM5?S6?ja0+cMuYG+m=GUq*v8|}<~L_UqfJ2H@KZ)Ql6 zu2hF#tQJ}w&0HcI;n%Un{&PpO#5=-ry3!rSk64R#Hn$Ub6vzm$)78v+SIA6Keu7aq z0Z0#Xt|ZvYQ-Qo`{)t2>3VRNste$3aKcO`|Wm{K#3g~I3AyKRzOv({C52sl^0Xsd- z$wWR}og~k7_coUk833nZ=7Y@JW{>{TvQif8h_c=`mlBE0!j`^mu9YNRdHV(2Cwbf4 zO=QSWl<8wu7=UdbO_uwZDG?P)Uj;G) z%-uxZ0Lz@D3J8 zx;cu-U#Ath*EGzuhoB74l;LJoN&I{<+^iQMA|?zsn@bW;ec(;plgTjK5~&SD?7e50 zU6IH&zzHb*J+seHQP!41T_Db11TxahAkqWK-$33sn`Q`^996{dWO!~IYmOq4F&o}V z0U2j5Ao2>t@X|mgnA?e*8JMKlKqi@IiPVJn`~Z+CX0?%MS?rKM3?$QBPDH%lsRbm< z%q7wY@=ik_)6DEqsMR0r2$|_-=l79_H$H-VY>p+eaT`QYAfK2kh`azR;pRYQo4X{z zG5->fPtBu}`15^^d4>qj_c`VjB0S&cnEl3x(*61VnR%TE&-X=U@>n6`@6IhU3%==F z{Qny%CCl>HhyP!eqX{yV3e+%BYe_;4mzcFli+9?Wn6rrRPWw`GACaYy9mLM$vIIMy zo2R7=j&QMR`rJ$#C%u|l`WC*;S#I8q#9QqwHyufEwevFc;1_0XNzl&gKvtM516pqb z`O1ur$G#9dlY@YKozOe06Kc37L1s;Y%-a7G89}A4h8SIh6M7Gw!n7Q3NMdVRf z6^w=@$aeF0BKxYd%nc;U_p}1pZW@zBoku87HB*((p+4Kqjzl^V*`r@5A7 z#P?`IYZtY`{~m3(xnIg;DdME=Dv;T2cAqTD^1p)IYxa?3lF|d(z7b^hn%PLa@2S5v z>rat2lxwYRAoH#HLV)ZA@}2pLB>tYmL9-tbeqKIk(z|tq&x#y0mq?i$bph=s95fFG zEa!sdL*|J9`5DMzvXi6oGk&gF@QFT`>XYL=(dU|1s6PBepKDgiL~n2nbIs0@`1Q#( zGbO<||0|S!#4IvZXl*IPZ&Z(&PZAOP&tm-iXg*7X*P=g~{g4#pmFG|9P$InY{K*_m zTD0Iyg3m`QC{ht zH>VMK=@y>&+1L!LlBJ zvi>qhNaDX;x@OLm1WOmYPk)=6C5fm0d>`h58|H2#UMp^xJwEm=KLVEjF@KR{l2Q)p zd<&k$Z<VQZiy=${v%tYmA6B$%x_0=dm9^ob~a zgu>%F&C-bMg0D7uflQk943ZQc&uP~4M0h->S#5~$SWUBDCh|D=N1P~2v$_-EahPWH zCc@(|%^HA2=|JaX(yW53(==-u%E$~N&NZc3HzkRuHh||rao(o5Rd^P9RqRk9DTYLT zbNvg1pyF0TBE$ZJ6CdD(5>^`|o)1e{eI!92z6;*C)5?@&xH9ktJPQLUX%*Z00~*^B=J|vn)QPus3mq+H0$>O`3$te z)~x_p0mQQKTwG47wis6qwpH#^S(cZ-Y^xd(J}+up&4}=cP21{6gfp6B70kJg^_i5( zQIAp1b*ycYV4bs}KCX2rK(+xXLw5YV_p%=0ef6@|DYWd>xvX_vlDNWWvC3L$bFf`} z@~WKGhzRH9a#ki0Zbdn3izI%X%O#Al^45=123sL^O3PbC=HiIr)BE>X77}^FUwo-_ zpH-a*f0uN>^)wOQ-M!y>kqGbZR$I_-2ISs?>tfZBxOCELirYa_>lE5 z5^rTy#d<*!taCNkud8BplO&#+Tn2N>!&WaM3%6k0csQZ$4_o~Mc5rA0v57}Gu0H1x zj;l>AeUY@Bx)$D>UxWHIvuq+YJyJmu^v1tZrtp&db$-!mON8s(%Br+1f1TS|`#;Az z-vj3}?}W3JFIzp9BWVxo@Gy`r)95wjcQ+y zi1nd3G2YK3d}6#mlQcdt?h`(N>=QmQ?h)@arcd}ZrcXFZ_=L}p`-IPj58(PF^ZD@q zd4$i05A+B}n?W8C`{5!}5B3Pp+#w#}HNQ`eftEP+;S)alJ;eH2_709-angGzMaXyx zpV=N}ZI&`PS{&%pVb-nyc>qX;bvQu8PS;55xFm5^yuWxHWJXzAzK~->X-RA2(bh#I zDNEt>NF9)2vgLMrzN$2km82%nbs37?kt347irJXU?eXXAasC*gg<=iYt7=iWV%%;(-G zdo|=!4O6Xb*>>!A(e|m>UNEEKmJnI+{uFpKH+&5SjpN*eyy-kEq!hdEhA;Rb0 z7gz^~@Y(o<)>$Ha5`K|oY(dL>5`MAOT9Ta9=U&4nsl`@DB}oUvDg|e$t0!8 z@+4&{kR?_o5q&v)c?M*uwN{cWWzRBInFC~*^&OG+up(LlWVv;Lhygn%D}k)AO5}+8 zWGPEQW<8KEt*S&WgPs3<4d-^O7l~wm%odRO%IZL5KFO@I`Vx5*WOjhe*VZ5+OTUNR zcp$5-^+b-r$@9ZN)>wH&#?-`JwYAogIM%1hi%E(&)4$FtybZ~Bqmq=^$3xli^5q)Ae*fYL`)(%)+i#vtHn;keIV9xA~oU3?rtF4txDUmtTphIZ2{R~ z)g-b5NLe5|6IKqptwvJDU%~FSj!P0(_%!%#tHKUpIj->8?|oJ`B7D;OfYp}>pX)wk zrAv~d{?!(4rh?MHw=#(If_3;4K#tJt&PiK571#VfGD#jkN>!c)nIEm2Qp^AT>nE%5 zPOJ}~82`yCE=i8UT0dKO`*cnUTRv{Zq>LXoj$7p=$x@P+z}Z45>$p{uNO&oZ!xL6> zB27W2HOS;y{fN8_GGZK_vOXkI9%MR!%xP-{ks2T)#^D)jKat}w#=3&cSxeuA{dFC* zgv_s26(WP5QI%hSoU4eJ2Skn3 zCUOC0N*qX`NLwOerhEq^Ig%;K6h+LGlR#1Trsz8j$cp?jERz@N-h^&ROYJp5F^4WJqpsXzAE%4a0K-|bGB6C1S zlvOrT@F}}|s&LkmI&v;T9FGxI1kp2C`Zr^=fOIWIz%`R z){P7%!V#%%WV9rHM0zrUcjo&Msa~XDM5-5oju3s}eXmz9a=ssId{7UHZ~yB@rc29N z$}KTZVOBPXd`6_&$RwFP8%EX>*;hD8X3u9L-xB%hGklxeC~}HOZODV-{c_{T-$d3x z)Oz&{+$IsZL zv|2^_5@`q7JRL}z$Y>(HsD^DLGl+DAc8N&aE|N{;8dw$?zkMW+$XTfK7_ieJlJY|l zS?6<5XCc!uQjUlVBokyhMH&$)L6%>R^d#~bS$-vwN#tv&^K{Va99c;u6Y4w{$g7cq zL`s8&?hYBJV;=zX9@=SNa$#y=UZSDKklV0cyAtWO_z;Wi^Z1)hptyte{@z2WhYXKRd zH8_&?QxRx|FEhlO-5mXV!e4tSxrszw3VT-KE0T$kjGtvM ztN&WCdIvjGBT2^v$x$0-;m*>G$X!GZ!?_gk_2S2o2PMJM0Vp#gPXvhgs%2)RRe%&d z3#U*bC4RxOc!%oKNHrq7Lp3LoNrZQ(7DVXwJnva}sYm!(cp1$CzdoOP9^-GEeZt>3 z`-H!7UhZk}7pXoG&qLyjnNRo|=arrof8)F=Qu2goDb~jU%~g?TfQY@F)scY#BKCIH zk)510-nUs#WJ_`0w_%c##``wwBe$fT9Q9NR+>`}1TpzjjB=+F+B6yl^V+6kq%uyeN zlWC&AHbv@@%$M-KQoNbn6q!e4{zg>^L4RdOvWdL*0BUXF8Yc4|(U!<{k`ZSwh2^c0 z#(7wJ8obXHmbXSa65$=Hc;pC?foZ4}kEEPJtw%l5`LrPKDdMc!2*^9}NcA&Kq zMjHK!^*KoIm%okdCsGdTBg*zBxBA`3_>FLK*Ov~z~E@*?FW!8327rDq}?i41}9BX;@D zL>3VFVmOYLvytmWlHfGBII(#?Qt5YLIY+%8#-X@T;kU?KA|+`YUW^QY4e?Y=X z5orrreSs*^=w;Muy$$x2ffS0)ATku*?7t5rIjUb1GJgCi5-k%TBL1XCK>+^Z$^12U zv8V(<_-k&T@YmdFo(zA@?UNG|@y)(Zgp9}+Y0*l7(kDX=?}(0(B(8Aoz9;$#5zgKB zM0XS6yj(gu@w#YNT;Xh9I$HH_NxWyPP_z{iZ-+A!{e=i;YAwod6*({K(F-KQSvVZM za0AQYENn#g|AU0HuohWQY*Sy66}jsu!|n?>cef1 zMt4aW|EV?_y-tK%8jFtl7fa_>*wKQ|uugO{$#5&&=rJPPiZapAfB9Q+Z$h2#jXp{; zyoXjc`U(-=L%T0JjP1Z~*nF7X4@PGa;XSlU(M3e~xw3LJTap}=_t2_DpSp!UoG}X4 z{NS-iqqt+{XY)s+&81A1at{2wTFRUy;=+uJ19?1Ja6h4jH&(@pQQXnt6TYLPrYFO9 zbky<)-_cRqCv-MvKH)n$ ze8TUoe8P8h_+%qk7UR$-d`Cw;ug-k`M*V2PH(B+g^n04#o2&-W93@2wMw9 zlqS)e$!M8ZL`|bTZj(giwl|CB5vdE=O60ibqbWsDrb;T37owMlIIz|dGR>nCQ&DCM zWOG4UL>u0Y_6 zH@du>kBA#xUiApy=+Z485izQ}NBBmU9{GrndBYh{NFPa%3#eP+kLD7qn#O00I;%O^A zTC{|)?B~;A(I^qlAj6_7iExG;?#*R>7S4#CB^l1S8PQ93qGf*a&G7OUXQKBK^67|Z z%3Y|%nP_CRAra0*qoNCla6TO!EnG@y`FpUVqctQ!|7g(mvC%e?!0AVLw^atngy_pe z_!iI!(e6aP{sX>PffH^MqP-=_QkubY${d)d6QZMt^Z_Dv=O#rL66pj)>}ySqt|wBP z$do9*rE0Ihi9}dgW=8of)muQy0+|{;Pg+}Q;=73t5^~eD=nazj5G>yht(X=qakprD zmXZVHVIUtxs}flXq$ZH*(LO{nfIJ0cMuO#!qr0RG&fF#-^Kta3B>sIeGoy5mnRlPe zOizaIlbIPkhgu4+v1dmACBkd$nNhwyX6_sKC7@6EJ{h0zeKIqnx8H+fgKv-dBx(@h z+haau%iirVKH=MA=0@v~7T*jrFWQU<-wd-L+Cvf?KP|u;3!^Ja%hJ7bM9ZT&M0gkC zi)hsl%J444s^|hqa@3z;=cGH>Sr^SCa@!`Dqd>Mq@6fOZf9(Wo4OrB~qtO6K2bpcr z%0%kdL7DB*dI2J2c0^keDgFS;?2L8|5FxWG3cv6vN6TdmWwMDWgI+MtV zib(cGmlIh7HC%RFQT9dG2gnGpvp>3n$o)`5A@gnYP=E-T@1iG&T&;jI2cj1PM93VB z{zK#l)KHK^(ZV{``7qQ_ki!&z;D!*Wp&;K!OOebIV_-iVNNzMnq$4O#267}?B|wDC z(P(WV?LsK?L-hFo5i-Z39flBn8j*SYC3qXw6L?Th>_sc-6*y;ee0VERJPUIYTRmj9*Hv>e-*s)Lq zYq%Fif_e_#gvMG2ND7cLu?!-+U?d2cvauxrB4oh*6KM!vcEo@@8oM4K_W^kR^4!d;oh^Ak#3`h)8$P>I~$WSZ^ZV z!Iz|O0BIcKsAZkUsP$azeP9n(g(;G zkZB%Eaj`x>K`W*JX%SmbM1?xf1kx%NErT+@z}b}rK-$EP6X`G$PA36r8*6wk$~5>I zzFYv(Db`bxDT*MwfV>*JNu=!CaB>gcWOa*GEi1I9C?mS6ir6K8J(fr0A=v541M*g^ zLOGP#ISB4X0MaYgk4WD8s&W;`+p!AeQKl9=xLUIFVf^IlbX7RZR$O(HKo1$S%$85QgJ0G739SCafD z^!->*BAej3paaN^iOrQ{lJe~QB;_?AV`ImOEQzX04@oYO*79=j<(&g(FJt{4M9alK zL^3{B>0u;OpqGWrgxK{bkbISiWMZsbT_g?Q8@ji_@}$^CB86xLJ2|$4$P6M=Vh4$Q zP9!sSoXC0@V*|j>)Y#l7(Q;Gx>Tnp44`Qo{yazH*Y=%r6E4Xj-QLJ7)q2-?g`6#wh z5?sZJyC^@3h3X5LcAj96Dm@Y{;_p*|lcl>SL< zx0J!MvOwmO*dtG2S(D4-oz=5rHHqBngJsQ*JtYZh%>=F4v9=_`r}yW?h9dFq=bsb1 zN`%kq&x;jmAj?wutp5C1DI)yq8w+DSi14p(EQ}o|!l(Ba#eS0{U0DWqNi2Z+EQ*zC zC@iNd-GGQ+R9O;xNfNBH*mGDKdow`31g)j9L6XG18)lZpGLU$!SQabwG}f7at7UoY z7!m%hmM>xpo)I!R>hX`@?lrKyGPaLMOZbj#E09&Oua*UJbX#juYV;Zj0@IE`JTTC)8&bjaA=2yJCl%N-fVD zyJE+YcxCO1b!~>0xvV|0uFvN$Yj1+(Z)4BCAY`ztBhdD5W1S`O+jSte9En%ffmoU5 zXqm_Jp;#3nJf087>Jbt35%cs&ERzV2=OeKSEzk~+=cBR5B*FTK`E@k*9LjiYKNjml zT4HBO{QkwU*snymK0n2-5#jp$97}15WpRB@#Fi7``kaVWeKCK1PR8mW@k&1#Ye+I& z`pMXKBJBB7v1zT)4v)jr37-EowyCv{!In<=1)e5iwBwpO>L9+!Iv2YoW$@Oili-bW zv0`n6)@j)nzX7=ryZ#cERrxb`y9;|DzsHPrf}|@I-%C>d2ASVu@K5-Qr?KTrOyn== z2+R42u>7Yd!uoJeO`#s6dB*Oh($j&3eW9&A& z?aQdeBjGlCb!Q|z5^l3szJ??lc4Z;;C`Ih`lB6p)KZo0i_6c&7NFg{MF76pfwL@Km zR=U#SE_g{fMx~!uD<=>@mx(-UGGRW0qa&O(g6w%Rbu^>(j9c z{#I1PPVR*=?8B&CLXt_!)Kz<40rLeu%UN{sT`6pk>>Q0;B;D*X|$*+7W&(Z@(2FVyxb84+)S~KpwO+ z1Ee#MhwS+Q(i_Ob_J#mS2lAM`H$cV#sbL?N1iz4-0i>?o|840XFSa~wPekJN^3w@@ z`mFtQAM`5sU?clQBHV+G?Jh*P2bG!g zI_82w`A9ZohrxDjsTEg$fD**%Kv+dmfu+=LU#q*N1lWJ<$rkFFvv#2oPa;x?N3@bY(a6 zmmo9k?ULXdjjK@BZ2J;wDKS{(32)4^tB;VDB@t!Kw?`4-R(xic8i_K32+IrX$A}0Y zit`(b?S@FyYGiqdy+9Iw94@t21&A2)OYO4(Qs_6h!O1Q)N|ZH1Ir}o)>;YuCZ4vqS zZMX**$QO1wB6q>gr64Qp%0yPcGpq*WOS?0Xg*yBS43Jg!G$IrwBYJs{ zeNB={$|uF(DONb2n6Lyt={A7nFiqg^Y z1R%fIt0hTSKAaA#CLm|*s*{9Fx>5{cf*|MYOGJi%jPTEIcGbx!leQA}EkNd?-I2() zZ7B1nJ(dXnM(SmIC6TqytI8tKx@MNW(f7^wp3YpWXe>TEX zlsD}XNL1198$s))JuOShc(du2JzJ7=W#~8XHVkAGXB&|(U|#G6qB>WI+_MpX^{J3k z^#iQWtPSw>BFGeWicJ&5UlpV{jS@)74~5JWMOYSV$P}kSfE))qsZM7iqdo>71G(M7 zF*d~;V`)yob!Ks=^GEqhFYYv-E(rGEpJ1oBQ+tLWzJE$NO_6y1DdlYaSjeO++!v*t z3qt|+CW-3Hv{A;AT1qte*Ru=?bMb8{nG?wT01R~q!fW)O>GHlt(Tnkl1x!*!8~mR zGA}s;B*B$T2Ow>o(E-v0NPA~i0Xv;h$vKR6iUPCBara^F6%Laq0v}tHbc+l+!ps`h(?e&MN^j6381) zp8&}M(%TsuAPa%K>+D$|doblr*gX*YHiMl*MEG{5!Oo9FT71DWr-*zvhske5IxNDw zh6X!Vi9EG{$-hJ%YLldFgwh8)DGNpEzQ+bT4@#1wiktd!KxT;3gJjraL!AYZpnrCO z%ur`dfE)rc%-Mw`@IB`s*%6k1fsy&1b3>90**hmdYlIV8g!SRFMmiNFnWS8Y zuTg#lnUT&{lK7>Mc6JAdD1D5Rhjvm`$UDNTkeTT8Mxto2wh?h-vXg-%o6$5qBQK z$#Cf(Ig8PbEWJF)eB`VNkSaiCI;T-9l}FSZ=OU3VOL2_NasDE*b~$=uj`JUpNpQwq z_-BrD+fv!fsr>uYbDTRQK|hQ6H3xn?PqtmwrzVs>-+2d#H&YflgNg9GSmcZ#!gFVl zGoFYT^G(3cB4?T;zJC@u8zsTsX$~@roxe$j{jzorrxR=*C7m#@KYn@Ya zxo8DOk|9u^^-eWO{Q0%P=^zRA`v{QP;Jg(eQ-EYULjz#&f%AUw?q-Km z=nLtw6w&VnjGrA&Q6gewiU_d7xr@lwPnm>~cyoD&Q%(}!t2>;gl3**og3@<73rU8( zy309{|Iu;oKejwF7&4msx}!O?OSv<^EdUy2&~z4N_eNHSbW zdkKCq4P?G|YDqFhDH>80H~^{SI(>+I1~S({=7^IkiNE$c>fF6jwq5#1y#&uqjvF9F zfgE!h2FTq&esa17NEFB~&L|`)Urojy%yTA6;weHWA0jfLwGoB1sVuNsPlkob8hMHT=W5 zC<)fEEolAe6kCT}cmv2)r=}#hj(S^?Hj?1@835!jr+Wdd z>rNj@{Q6vXK0+-ybBBS}-_B~1VUOK#PNE&zgJMN=!?_qBqe1JYQ}%1=LoYtxaw-zx zXnf0gln7^#TTX3B{QBH-UXuj z$WK5@xC14@wS=%-(#;^kmP@*0CGjnnbaPQg)>-7`yWG40ISqF1aci#4-|xEn6cNtL zy4!?Ey?1fu>TXLSA}{|1c67I+B>qUy-4T+YS8sw$*xgJr>{Y`(i*{rU3;hAJ&aJ&p z)<+T%TP!yVi8nT)?#zIU(2Bap0z_!puD%}I#W~k?Z6wmN3IWh{s|83J*tyqjLRzUA zxFRa&wj|O8w!*~vr<~iK$eZx4c0D{rmUCYtQq3bhCGovc&fQFe+g{$iA_=}rx(iA# z@4mdjZ@btvdcb{Ck}TyjxYx)6nM!VdBB|}*o*W>R-3&?M>Sowk5^LHj?j$6sKf@_6 z@!qqF`yt6}fcHBnGoQ%UyIJc?NpS8=`cY`@N1|+pQ`7P(+s!5Nl}C;vNvZT4?kqjx zo(-iYM{M-I7SWZ2p9+2V}(V$`fuSl9>o!mWle*aH|n{ zhU!zptsT&k&-iZF0Flr5?taqxbPL+4bfO2$vS&Atna!=MR?I|I#tJmVf9^3o*Xzllk zTWGWNe9CyJ;UbWE#VtXk&OE%O`4u;WME1pUDRXattO4?>+YyPvqoteMo9u|yR}RQ@ za|Z;pc1p4&K*T++ue)o>&K5WgH3moz_Zzaq&qO`kokZAj5BIx(9Z|y`?(qN-HGI=8 z_6?3Po~OOtQb=S@5jE`X8c4jB_I4|iR^FF5p8L3u7treC)(vQh5#Gn`6d+=R_jLyc zhG> zzoH)Nh9tpx`VW*f*8K)a3b!lM-AROZmNMP%h;UxcbdM6*x(xGjrh9_OtmRD35qSd6 zbqkMWx>qFe>zwH>kBb`m>!_*lQ}?pYO8xq(QX1ZTOm&}>1nVr`3QcpHN`m=I{9@5G zw*$&38z5W#z8!Wd+%7~o(thX;A#!jH=A94S4~Ue7_XQ%Vf9NhJ^6gcY*+GQ&dp~qf zAd&qg*0dkG*OADlNYT>iuCiUUVnhl*MNW59kVvg4v}?NSkPPoXf9&2*Wb8Xw`o}I9 zfxoysXC=Oe^+;N@G@fXk>B)?2t12nku;1d5!ddWb191uQQ}u)NTX?vOr|9xD$X zTj(|kkRME+?|C3HT7A%`*2okVX10-IZx45%NhU>f~q2ISASdP1= z3fPG!_$TgOC}4S;TWYWLn96nDkzjeJTV2ZdQER7L^?=Ztq!fWMKW{DUrMM{v1(~9h zyhl}L0@>vnhhVu0G9{mcyWoKAc4v^x%dnnZ1!S+go5<;Luww*dpX(k%JLBLt7q$WU zHlaS>x(`bkj6dRD{cqiRlEl5=wg1i|{AJ=H_gRwRuMQ8n9f#5mGUn6`Gk9? zBzPV`c=d!^L6Xzn{Wd4vsz_7?PNEKg?mg+&DWG-IZAvng-^Cc7=XMMb5fAg+3`wvD zMJrCbD+1&xAZOj}sO7cdoV%awa4XKaS0wT4e9kTYy=a$T=kso9Bwn4*yRIa@)_J!I z$>c$7ZV&#s;MNO}K0tnRdrE?JF1!X#*t$bV#@+$H(hf3zkXJ`Yua;Z~J3?+|Kubi( zKi%Ju!25ap)#l6Yb+W@JkT1IH+Yps-RacU@Fkacj=So9j52DA#`v^#)m=oS z4xF$p1NFJ;?jpjc#r}3vjtI-?N+!wt?G7a}fXKgYiK9XWTPo_TmKi8XT;)0^mB}E& zbxtbN@&}>ipVKQ`<_#oX4GWhUK%`Y&yy2>FnNdVKR>AWL$z`Sy;areX<})Ik3yPN6 zPK0woi88l{a7#;;x%Zf?kJ@Y>KCzZ8LuVaT&O0T`R3{nEO?QV@ci# zA)%61)?1+!p(qmNvIz;>t_^J>lCrWDMM+|9s!f!w)xsOs^q=oNcQX9^xvA)v6{RHuQ(X?=uAmr!!K~GwE0}(Ga8icnB zLgNLFrwzil{(^axdAAK4hN+M8W20fXFUfeGZx|lTM8-zL@H9cDdXW$bXZ(tqrz$cM z%y9Ui$SWkh8V~mn#E*@5xKNN1MS9fSmO*dS5Hb%P6*h-tJhu%`V9Dbys-%aVqJ2Xax^IjP(px zIDy2k!Cv920WuV1?h6kT#P@UW@Hj!rJU{miPa+vF#(IadnMgnP4&Q(3(o*yZPhcW# z?h{_iM3yTve3FUuYTs~=KS_`DYQOMCLHrsV818YJWTc-5hUYPnejXIAd(j( z&(d%YK@!T{&%&)wh{HF+V^Tz3A?dLd;VDd{$KDPv6=bS{BcoW6g}YvXsS*mt2FCo_ za48e)MR6bL<8b?mq*?lTWB4g1($Aa1@}*Ge=S|^hEF=BAIh@Bt`nlMPF#}eJ7-PlZ z>ZxSUx(s-E0LW+I6N30-?&smEl~Bg7i_gPDiFj@2i|`mh{I>H&_#Yx(U6dxZozigC zD^YWqS39NQ8<~{BY-bSor!*X4f?h?BeHG3YBwP82Wxfely^8e67WZv#1b3GWm#RMG@^V^8?C%Bb0&#qA5fMZ_!DzHl+i$Tqky z+_eg(Dh{a^;B*(FWq(r7|3mots-#)g=?~$iOk@rI5FW!s*7A?xLMAd+e+nOBB4hPH zIK3KamXY~ucpMWMnPuUfOk|854gYr?rIH@|U$|m*Dn*5TeCIY?i^T|zXEHfmF-3VEYVe=%G(o6NvEMis z{*j0my%)lV1o5NyLU=|k%*&rKUQCMKi{ZCP#*5yI;k8U;99|61xIyUgW<=%G)q?n~ zshoOsZIqen*;8JvA&8%QdG+%7YI)Tp887$p>a9#irtc0ZZ^BEvY3gc0a+U7TN8#)4Y3ddx4?PTT zV+xt?m=rdH-_a1{Fq69>)t}I_rKx`e$b6`ao7D3G68RCXkgK(CMw@dLOtlzf8mbMM zJdAk(QPs8qQUpX(yE0h?xvvGHt3w6JSCD)H#8Ahu%**h~3bq|nEeMeLV6&wTYDl@G z%wiyM^%#?U*fXC5cd1>qdYEL8V5&xH8zy)6Cz;0T@Bl%XCh9yU=A;zmG5ETpsd^|t zCVir^>Kc3#B0){`@564*b ziHy~rNiw}WA|vxYHA`srqc=lc%S7twt)}W&iiC0)z9hw&RiC7I&QvpnjISqC-ELs2 zvXIQHZ&Ip$YMUs@VC%+G^i!M0E=|=xDb)Zq#X=ds_Zy(r3=rHQAE+7uf<5+wYSRGu z9>`#Iwjh2FnWYvG5nnjsIb)Xk4iou%kwew>Oyt*sL)Gdw*(|>nd|2JiM2?J)sJU^H zk-g1Gb-f_|m@-nW?vRY^>mF5eh#**sYtN5u2$Wc39m z(yLR{c}%2Nr>G~HNUvtAtJA3z(yPy@{Tg3duIcJjLHyX5uFeY(jD#6#k0zH|I8z-U zNRA@s05jD*Cbt&SZ+6U54^S$v6tmUgw@~h~6m!%uOk^qMsHIF~DRR_lO)o7)p6cFu zX({s6`-yly%vT2rLgm6Xn6FOaR2VH7t1qdk%`UZPo?4ZO%zd6Zn2EITWi^|L^lE|n z7ZVw)3)OgY)SOUu!Hfxeq=o8oCisOBexJKgZP5Z{*g`PzRdux>)F+^Yi`A=I3Jbk* zy{2AEBqV+Knp&5MwD2`Gi-|17617q*vZovGCoEH2Fu`8*9Mtl1b+{n@4#P^dR%?;F zH;-DSCIlgyEB*<$i`Cfyat)9obvdV!etuW|hlp2-_tY9~NV6=(dun|qvJ~&BF($GU ztJOA4q~||SCoqwoU#HF#ge*kQuTu{QlA}!62w%07AxUdXxl0Q_RM!#lEc{5_$THHx zkJMs863RO};f1t~@Is?Hp&jZ;C>6egTWL`CkJUYb@2@QEQMQH*twnNQgBE7LgeeHIU%8RjY)VG*O3%^md2)XtcS2==1;)!G4qJ<^YABtUR% zI-o8Q#2=e}RSSuD{m-xJOI=WNnOClZ>LMnxTnE*&Ok}x!Q`g@?sbskhsh@QvBFl9| zJt2r6bw||e@AON7-W3CreS%p>|HI;|1}{^_Q9* zAb2D3FLi++evF+}*QR5hC7z$psyj)>tBbR0)B7;@60a2hs1umTQv9n9&mbA}Jlc%!^_KoCF1Dro6_P>)}y6|_PovfsEuTgOCNc!gHNL`K~e+D<02>=m_x zOk~tusht+2#M=R`taa}%yx~R5HCitsp69R8GMUKMeT`Or0H#VP<=`7bjJhgX#z3LR z>*uR!+nGoUt7!)wBpGSpwc6z?yBgZ{gHVQi*cLoiLu*SU_2*+Dr5li1T4yGm;8c-F zPeDo)c>-QbD`Fzw@2#b^985N6-b-iMb+mCzn(_W~9ZeY`EL7yVc^$126M1f4Pn$s` z^)U25c-mE8TgpV9o7dO)^v!#_xV}cO5SMx9=01_<=01_<=JmCWoV$GAI8D3yA+k`O zq^C*E-buPo1SPg zkBRh{uKmD7dd$==67f71(<*0)Qlv_c#k3nF;hP3AO=Ti)8pO0lOr*zRS{o+PV==88 z5${E4OB={Udd$*BFu4QrYFGtU$J#_D(qnP$c|piy1HogCwwz=_cffw{2q5WN5tFSR zS<8B)$I`WvOr*zd(QY1kX^h>X-N{6HteG~Fi0859+5{%jW6ibclCZ~`Yxzv1$C_(P zm`IN`*NT`(k2Tje5b-?LLfgSadaQ-^BNOSd7TW)qNRPGB&Iv*u8w37nt<`#1lr(hP zzwrBmK-y_(O!7SvA>!R;X{QZfB0bhY%Vi>Ctb_J36X~%|+D}A0k9F3LF_9kYto9Nk*bxfqkI%{c6q{li#i=!Hpt+I>OmWlLO7p)r;>9HAKHhjx->cEc?K`~{^RTH8m^9=ef;qvkzY77-<9 zA$%bUn(xtynN+O;zt0Gyr`CRiNToDtK|8?rY1^5Mfw=^(Pw&$rBT43-fpkKbq4gL= zWGbwH3P4YWHt10zuftfd3`nN7_Aw;+;%yClCAGiSbTkrwFXaJkpCD9rwD|$;7eVNz z3UsSLjtNq%RD--y!5a^11!GW8v9bbgmE(!wAngZ1d_9A--vsgX4AM?=Dye6%*8cHJ z^$gL*2vQ4g{ zf7Z$+Fjby-C8IXTyrA762>b#v?3ChLxO22P%X|fUwD_h$j@CyIzw9q+SpiZNG`^_K z6vVHKT&-X-=2aGwb&;oC{+ei>HfRdU;}d+*sx^Lkk; z6(pfFg)g~ofl@5g=1fDGgwlEwj7vaX(|SHnWYk3HiGeKBdcHv9Ryf_h56GKZ#%v-N zroan55UYjSdO@ZtSPJ|??d>Fc-qsG!!BkXV7@2Qtm2;3#WMV(RN-Gc~q5M7?dN#s~vxcLXU>j`T`V7C@@+wDke97|1T| zK!CgnWRF&T5$d5-?*Q4Sb!6hQo*%S6g7|Uxqn0g5LdjVMeK?f#C+##7wC6jp@E7fY zCB9~~=b$z&K+vAww1NOZdw$n;1_;`7Si5E^>5=vv(;5om+w(syT@dmHj_=2lym4GB zW9H`^>yDu%>55-cz|H;e`;Hq$lU+ZDlEfPetrF|T^k_SPXE?g2m=0rdDK$y z&snYV8<@(kuM0^Q{--S$GE^66;YF=9K+wWaL|N|Jj24!QxJ;ylS43_X#Gn6EjPzw9 z=Rc{D;ezBV9pMH#jt;4j^GrVcG)0g~kw@OdymFMcVBUKr+;+Y)a`~*Oa%7T_q5c{7 zjVnivF*#F{zM#1}a(QdII@0?sQ3`L?baiA76WQLciR@p2GR2`5X)q%KA6}EBr)ngt zP*~`-<*Jcwf>5jc5K>i*93UCx>`N&MlA4h*E2&&nZ-o25Fwd+TDPU6hJ?M==rha7R z+ayyB$aWw%N6s?AUF#o!L?Sn>BAE(sU*eAru&WqJXY$?Dka7rQVo5ezk=`t`2ljtX zf{Yaz#-!q>@XaxtJjNs0OoqeE0f`eSV)E#7Awk^8F(w7D*Mu^SB5jJ$9(V;EcANhK z&FM+GH;If}gEBON;2o+ak-bE`ot&l--i7ea=$l3^zsJ}#a)9;7bE~Ei`Cg^mYibd> z`+c(K3%(iBA~KsvDU()_QYLw@mvRwoZWB4Uo>Jl610-!D=Qkno=e_NceAq6@hwUTN zHj7m7tLo&R4w2PNqz^krPBM``ygkysm~xjs?3CogE|CeJqm1vvE=fM@n&iW-Nj~fv zDP}#=hh39=*dx;93$jQ0ut#Jx6Y0adBSlQ44|_&NeNCyP5AThbJCXQ4?3LuhUP(U8 zi1hqUr1E^&J2HvM;~aiY$xb4N1ff|Iw!vYMTMnZhe|Ps0E~$TC{gFr;k_pLjJ;LQG^Y%_3jnMA5 zf4}b0NP$R2BN49XAC2s1B3JZ}MFt(Aa^YD3uHPSz95_k@%Z_gnJ`u?}Mg+@_WPIeL zAb#1Oj?Dib%H$|RU=52s+tZO1O!_dH6xqmR&mMT;>KpiuHIj9lQhmqdxk%L$L>`6T z6+)SrkzytznB+vpog|qr=cXv-euP<9WD%2^O;VJjFcQs+Y-M6VKYzs;__ zdRIiw6Y=`hl}XXNGAVjjM#}$(noGP|UYQiV??eU&8Q=5oBzgXwB+tJWIYy}z>G?I0 zyo;Dujv_t(VWfp}r6AJtpF~bFk)AJ(EDe#2^!(?MQYO;#Uq=2E1iU&BR)ugzwk=X2 z1yd#9Ejbv0!OzOk4gQ)`U%w{R*RM(S^=o9i(Bs$puMwpxYW8dJx1<_8 z9LW?iehnUu%ofDA=WwJTiIlQtTqR+@aX6w@6M1VuM5@i@WS?*%(z5~PwYePj3D_=9Mhciqn>T3BCSBZzNdeLb=Y?J7w}mKhqoWGpT8+7_Xhe5AwwR6 z1*_6P&lSYC=VrZ-^~l_B)(_GO^&|w7GY1wf_oSE zrJJLlZAzpilXQJjGbC{1ZXvx`dyD=VlhCUn@w*;P^*w^XO^n8L+qs!usrjY$G}m=O z{OE12w-ux$G#lpgn|H$PN4+x>*#k7!ClT>%ZmC~Bdv7T{=C$sY`ZU%fJ=Ris%$rNJ z)prV+Jh7T+53$--U)~aJ&Q;9s;H?xOx9OL!>^kX9+n|hJicb2dwth)5qB`m6?UDGN z@2sEifFz;JTMs7#p!p7cXGbETCGc)4kURBhorwGj_b#zLbk}zZ;`g-O^){VJruIB~ zOZgtXfQiE7KK(2c2WCT+;NEE;UGGAv2E&{MHD~HAncVA8j`;H z0VcPx=6-thJ4ka=*cHLD_t$$cSO}4R z0eu^j|8AFLKa;s|cXt5z@BzK&ous)D>`OcZqOWHnTV?Hw4U2r5M?v$9y|hm9<47E#2<+s*VhZ;w}Qv@2kyVr=CMg$9h=ma$Lhl=l{dbR zP4fIx`g$Rg5ckl=fIUy?<@;b>31uPQD4VFSXR-%+8oW{VjDGozvTXhG8)Z}V!c5eY zuN;Ju;(q3IeU~6PVh(`&5;OE;OmGf>pl^7Q*T)p*c@tDAg%GLt(%50aPkw>Z^b2IW3ae~(FOEh6*v^-R{n zn_yEQ_XYY^*0US@GaX2QUfPdr#=aL@N`c;Z0204l6zDC8crjL>e=0~qsS00P+y(oh z3-$9XBfoE2s6RMR=<)jACHgQX@~fyN`V)fq@v~Gf6eOWY3zzDvAH3AUrTQ0xFST%~ zzLSV&;ZnW#5K1L2T&Cv5?@0vyaInV9lBYn|OBKU^?3lJL{^{j`9+ySo!;rlJ0>R&Qx&t#Ln zhe;gHyYnE`W_{6cN`<>3*eZ+l4+Zgik`jHpAmqcBL8e6iFF=+9`CLzb1oco)vKGi! zdWIkg@s)ZBkRAH|5tJ9sSCM?D4;n?}9w_?`Aba(Bg3x%1ecktZtw(*$xZ?Ox&txL& z{eWJ`L`KWc`kjx7R9+31={<>f5niSb5`@;>I2SF`PmU&gmcaQKwy)pyhL00@1^Si; zVbuR!pZf$7KcWuls|4{qc1YhWh(CfH(n|&Ld)h-XHY&}57u#xp#v}UnvBG9=EI6tw zZjqw&*#f5w`XMG0KZmsi6zmUu=~F0^ zqf9;=QhtF{r;^&mX}!$^l<`Y?S|2Tl-`ku{Y8R*F%EcR(PwNvXmDk=+>)V;gmhzYM zhF3fP>bFe9-2K}5S0Be@F|YN`>3L6+%yUdG>ieG|@++K;Vtth}GA9wa2~I+fLrKdU z|6>xnmSnClY9>gg@l8Z38ts^Lfj0OTq)Ih<3gXxDmB!^W&nt~_LdLJ z1o7>O88Za&?THzm5%GLz8{1h%_DHrdW)9gSd!)G0J%@-KzZx3@1fl!S*#9(6@=p_^ z%8QuFx2K6wM-boUCPq{czg0F#s?#P(b=t&8r&M061Q{kW>Y66SPYYweknwG9VN}f{ zugYDBmPP>+xeL+O2+t)MT)AMhbTC>n!Fd#t+l_mf$dR$LF_VcL8SgNP1o6Gm%_tGX z_eM8kmmt13x+Qs|oACq5crC7*afpeW19UTP%cuI1-sq9!jh@CJA>(_ar&0LQrQW#L zXg`mL^hR&vdnV|O@-PqRYgCv|GUyE?{f#&i^v0F&&p=}k6ZA$kAP*WZ2;zHVNK*U^ zF*XPp-y1`cyfMVsLNcB=h8WwKNN)@=YAv|b8(B%-7;a1uGQKy48>KH_>WxQ?v{x?m z#-qlBg+yd*JZ>yzB4cB$v6YF8jVF!sOk`|4WrSZvJ-#=dHu?xcv4P(pJZ+2;#Ba;b z7+(_c+H%4;#4@sPNf~AWtVN-{~8is^K-@|L43{AjFcrJm8W@zQI&|dlQYBU zvGh{SFBqS_jwGS9yIE0gfLfko9AskZL~;ye8Of{}OyotQ29p_Z3jo?kbn37Lc&Y4>oT$N(J$2r^MJFAQ<5#M*4@B+VdHY-NlvU-uvf9!;gfF z7eAjHnM6Wz2J*SFR*+)YyrjK?FN~8cBj+Sv7_Y3SyyTqZYh$$_#UZ(i{PsTsQ^Q%$0m^6prjfFlyelwafX}TE3f0!R0GP0TAovsH#=CJV*lhSI6 z@-UEN#&=9Mq!Brp6q%=uvqHxA>S-f;3+C=e=4m5OkYc4Xm;JP{=xdZI7BA7^`TH58 zbT1J(!~e(FdiYX37dUtSb%G1Vb|K@};02@M5lrRJQZ6Rd;6)=!GTtoZqLD60nOB1s zlWMSBl;V)SbaNn+a#4Br31=5bDnyqHJ=w}t@El$%xD8%0TK*{7ldV)_a#b{oNgnta zWvWECGMU5Vx@h__O0_19WUh}cW%3S_I?=lSBbm+-lBplfW72`i&C$xoN#;N^lF_0Q znCxc~jhVu5(Vv7KKMs3D4+-MOMvv&0 zKQS*qHtvpIzGA&Qdijd=?r15c@?zue=;bTuUQzQjYKEKD(7tdD(kr@DkdlyG%Vb2? zo*|i^;B6L^$&8wR3420vKHo2T`98n{(Kdghj9;z?qM3sD?dyT)FhTrsJ&;tc2a?M5 zKy(bH^5zK-L^m?QkqA$~2PKs>D;hparNH|MxYEpuW-?jKsfI=mFp+yHk3_TnxwI6I zMo$Vtr3gU@AC0d4m%JfI&&Q%4pF=W5+?Ia~dZaPY{esZC08gpLM#r2ddtQb2x{-{F z{vn9(jVF`5@nrPM3zV0f#XXr+(kG+USw?!}$>?f9rij*j2|tz(e_~^WnR7KMwbxrM!mW0G5@~S+-M=ElHQmb zy-FoLa>Sn>rIFFUuQfl~P{{b}xcSjV2BxCdXtC#C5Upwwk)>D|ofIQ-7EUx~fX7~o z_KXu*1m}*}c9urxFnKPQ-WXpNJ<8;TYiNvnBl;hcHT8%rkJfca&o7_@$H6zF8k34J zvqJJ#v>B5s&|@Q65xtGcJm{a16h^x-S(ip+W%Pa~cS7HbGH*w-m`sDw9LcKab|#D9 zt_YH%sNAXe8s3w}J^Xi~a;IW0@8Q1}ZQ`QMeh=_|^d3R{2!B7CNyMwu_oGT9OjR5@ z2kjK^*sqQDOh@9MgM1k6*O-W`!B3)Nn8>-`CrLfh#%PBoB9(WCVPmwbAjOKzYh%=H ziZXuGZHhJ%#EH5W%$3gUaCIH|oCC-r{C z(bbg7^H_0IX-3|V5nhtiCwvjj5;Fcy@)yxPOl0r(Wwd>B)RRzT@Aq|dl_2Deov^n0 zHo8HOGOxw$jDANl;uW=b55X4@(E}voS-3OWrUhy)^VU|oqFGGjYGPM(jv!N&@DMtq z-xXcXq&ARNkbZZxh*M!najmyIx?PZjG6-%mBiR>CZ$+iZVDdxsSZgGH93F_aX@kTs z*MVsF0NHyK=Bv^B10(}}+4r8;n%_bG}!!i^wADT z@>AbG0QX7D;3imfJd2^U;q4@jZ4vx<5d2ps%|SE#DC}lgxY|7o&}d zc>W2QEd}xY6Eb@e@%$4q&oYr~&vItk?WnmdB>hv)yq$^kPdRgtAijUDFdKHlR5?m| z-;na}VYp>t<_Q9~a0@6}t}=&rMj79S*O=|Q5P1a7l3s&SR5NLA<9{W3ojGMQbg`hh zTTzNK_cu7bHd8002y!LtEWHV-s+%tgJvqwNaPs&rkQ(L+CV#>&NNxafy}6x<1>;Ex zkQ>Z~caY5=!oA8JKY3%cqfEZizBb%+`T~Ay%uHue1HK@^@BZqWeVO1$ zg}+~rW{zR<=neEc2sfEiiKJHMcl8^Xd4f<4?uFbNm|J_0H$H+pR7h?%C)|aEWN`k| z(42M;62DHv<{Uvvytiw@X04tmlPz9D!gd-l$1%Yg#P=$rX4btzkN3Jo%v{}zi0tQW zQ@@YMGw^#H*eBSg!{p}?lC)qVU#_stJV6o)-mbwLIB|0)lZmj>MB1C+k-OcX06^N)2j&9xZsV(W>+Q!?-04gT+L)5$Y82l&67;_feeynX7qk4#g}j+ zC}RWMC^OTUU`hK4(p?bx4jKkxrG@!mfEl`cPi- z)sEKYPC=$B+Hl&LY-e7Vi83YL$zwaSsUT$`>D6{72*BUwiWUBb-(7_I@=3-hxHky1 zg7%&a)+yTDfrL=fo${KetOg6{LS|H(Lk`bCm0|;V#lqxX)&02||&H zxdZ8o|+jM(imF7l|cG>Wta8d z-+W2Pl!atn^fwnVk#*7EJTOFP_WGy+=6OMA#{)e-K-Qr5s`fxhDoD)(&4PzekN>{S zz@#{Q&`Tw2=RtE$)}>{C&^!cd224GuPo1)*;=#0t@z@EFP@ zlqxWv$GPZGb2$^NK_tV>wxda=|4Mj^5qjH4%t=ftKq_o0qs(Igf~g)eBV#BP-b6(* z#_S=8KjuDRwtfO-{F&zyW=BE%2!F!7CqS-+8hnClutbsm8Ea;d9!0jVv1T3<>G>zk z0zv%TpETEyj5k|;(p)cypZk;M=K*p9r{1dq^Y`%vFMv zcr)0EW(g6my-zf^Gm+6U(LBgRM$6OY2`1933G?bFF|T4Verb@`6!TU={C@R0^L8e( zeLZLP6eJ<`3a}KYZ<@a{X$TY0@D5nfn<>*NRZE!RBUx$Q z#N;0sg^;{$Hf1uo8j)3I4?+C#y-4<}UjOV7Z>08#jCr5P*8Q&3ADgw9 z$msppY$S-^`)x403*viYgZXfP+yQ0ZU``W+yn*Bs^G`wi(P1Nd!|!`Hn&*Yg<`fy3 z8_glJ(8A3ra?ZBN%o8M`Y=Zd+{x-p8bFCmH-gr@BR-cWjO1y7#wwm&8n7pyD)qFz8 z(CB$LSonoGiAmGNih|@T^93fjlZ<4$nJ38R6xj;CHM`|gUebr(ni))_55F}>3*vih zr#UM?dV}VjW}zVDF(lua*S{n*dn4MeB#-Sf(}axgv0Y{+6X~%%W-;mU{Il1rJMU8e zd~ed3i+^kSd-G`_lOx_D7y$PCU`}I#{y}oUe31$I2g$GId?roaAW~*76~y=0VRQLw zmwN25S;Rzo?66rXh#z%F%nnO175NZfOE_XaAc#LQ9yLc2@kYj@<^(2kWISrlU?N+} zF>?VE*-M---((_N+#lxqOk_L#!`v*0-@5-W>5Rkgqy8|zAQ{h|Kg>N$q&QmZ^~P7pGFtGsCLVIsX6ipf^lXgQtKgkrMA;g^8e;>yKj zJH@X6kX#XKwhVJmDEK8Hl1j05Ov*JQQaRR@3F;XEGF4)OnV=pdHDcKTJxJ=rmIU-5 zxyjR$$$GTdCYDiIPb~H`6AkRaRE=WF8)RV$*n{NOSehVyD`*{i{ymf_@#dMWV|h$u zD`*{CC5T_kZDL;p$T-m4CU!^=s#7FwWBpeP&0fFJF2-+cdUNb{u`D6u*J-=hH%w%| z(LQ#0Pun4;tRb6aWOj-TXCmvgOH!S7NvhMXNp;#isZQ@ss?&R8dqrLer3^Mwu--Fb z2LH`y)|i>X0O_W+i!bSdv#qBzg7G z*tL5xuY~yS24i(hEXqW-l<~1HOt8hF%%s>*CfMSTO!f50mNGLojb&s@c`^0|6WLPc z#Y&jSma;H*ND#kHm&R63SI$aw3nuu4Yug7+=jGSw|9@{5~U#G9f&IHI* zD8=is>c5jWaQ%g3S!}Byex1G%a}S}6-}}9pRHtvn1_&9yPFKd#4pS*)ovuo%(^W}z z`c6`vu1>1c50dKi!=#q-ajaP6?t67(Z0?oNr3Lz*jj=^cq*ph_J`%+D*r%~w0rCR) z=hN6}L8uiV*%TXgmC)?f#pa~`XLD?fknz2`Iab6(wv;Wg{iMg6x0J-%S0^OGf6-SY<(cZ|sb9Vj{hjBx$-Z}Y>^u|cjlHq# z>ZsW-*WOrgjfQ348w;+{knE3Ds)ea?6kMa>cXmI;G$y!4LvkS2o{7RTKgTkeOoufZ z%KQ?0LJ)sM`!zO+iS*&Gv6m^8x3)SMTP=w1)q}CG1LS3}@L=qiAmmjfzr~)rLHN+~ zYFSbrUKX1pWPGod#Y&k-uO5n>B|Tn@9gfYaO|>JvdNj6H5O~=G&Ny)Wbu^Y%=Tbi( zjm7Gb4+~)}j9xt&yNAj5uogygJjsWDB>C`EY@$fz`|!`$G$zuAf5w)OX3vMGW9tR+ zeRw)n93Zbj?x$m4ksi-uXJR{vc(Z~tu{}&=jGc+~sDG(9{*HamM6P%KjvWlh;O^z$ zF(r+>@ipuo;H#2nWA_N+Tli0GK!Cu8kn&G#M1Z^rHvbzND~LZkJr|or#H+7!u|O)HCt*cHK7h-+C-G5Hs6 z7bB@-%@f3rgnCvX5s_*)p0yiWFpsb zy7eIwxsEfeQYNx?V%F6<=I*cKY^ydCxvsP=O%RR^aG7o079fYgLdVJs=)o4}S_vky zT#c-mM7(|DM%IrkBjcx$b(D$By^(cR5PFyIB;?h|y27~B=5*^iCbI15)=f-g*&AC9 z6Iu4ARvSV56@4>nY!o%;C|^Tl{tbCGv+|e>J`G@L70q!unAV|5T`hb%=?K=MI(;6Pi=!@mXz0%VlzkUr_02 zwIL#QztKM(twn+)6!SKCAM$GWD#{vTp`L{DIg|^>i%wQ&TWI$7qdHk51W70tVUM~g z+pQ`3HW%7WLd=t!8o@&hUwRF340x*2NvxF9CwP=v^%(PPxmv z=x(hSB%#!Vd-yfLKX+M~4$AnobFZ~i5b`tTb+47?3O(Z2qv}Dbd#zD|kmr%~vOW>S zZ_D>tm#?kvvr0(DTlwB+ZD%6u;y&wifMD(!*0@HPyFa7Ou+q|z_~ZNi)*vQwe9yGb z3j*)%f)f0$zpvG>F{VmDCr6~8CHEXGkijgan{*3L~vKO8vHZP>fV-!tc$0tOeXRie}eUrApW`V1ZxiyIetBD z4Qz*c{FeK)HJpizmZvS{Hk9$B_Ze$k5-~fVj9(YeSp7PRRLWks&u>CqJY&sa(mg@* zmglV1f>5faAT!N!ZWs1={pxhDc4U14AsKHEf4Vh}i7eOiR;^B`C!suaguME^HA;{i zWf73nBk--I*qb#No-1uI>Ugo3B-*e>Q+*W4-W@y-I~Se*ocU*eug^VJ+{ zKFi2R$gx(lj69>yv$}R8d(Og~4d24e^U5VhhdgVtkn!sx&zi|Z)b%Z#LlyxU~(V##`CQ_ zCa9+_$jndDv%tFi?$ZLR{oSZJN7=Oq`c%mMW$QjBjo*RaE&%e1HHt}_dsD=_%!`sV zzh=!N8E+o`n$_vvOKpD58pcH0yu_NuMB2P0N%K9(TD5wSW~t|OE1ikd^Lmn= zW!6VRhN5>6lxvxFl2R!$)p9H2KGd90>cX80{3h#7YqB7|=ijnkXCiZ7VQpn1^{lWm zGRUj1LR}1pyb6=-dDptXH_G_-ylc%Aq{OplwRKt$-<~x|dfvBgzMs5-H`ucwulKEX z0g?ygLo0*HU#(zV2J*30#AMOL6!ERuMyq@u)KeVF>OhhCsnt-Bgfi+QII~&{`y1A3 zK}tg1u8=a-aae%Jbb;i<*!`(BfywQg=!KjO&81eGex&CSwy@M%&g42S#aC8pf0B_lf0fiy zzOwoV8JM9hg0nBMa9dKjwp*h}#%l%Jtx7l~!hJvG4R|RWQf;@YGdT)#)!%`9Yo#$c zzY$h`Kz3WxnA`((an(PtFJWzE(xH7wxe>?#>ll;mFwfF~{Nj;urFc7npDz%{~yvxq@tG63N-&~ z^$(CcfLyS~Fe&~cB;xR*wOkNt1^0qXioH5O`U9z8?7B}PZhi2V4>O5Q`Jr<;=R~k)m|zH=@|wkz0Q6wKpq29 z!`>Po6M)pRrw$>_x513M71(j3J%>nW63pplg3OKf+J~rIVHi1I6l7i&kp&<#A4olW z(oiD3LFQFKG9M=LJB;|);_BOVhY?u~sg{9EeS0mF7a-LtAZhlD;V9$JHyYTR1)*|f z?1Gi1y*)tIL8`F5;Sr&^QZ=}7hk5CC36pza+##}!$;m~MTs|`D_8uYQ=dRmhMxbWO z{WHi*w`+`~yw>i9^&<@o_q!4umg}xJA+9Jm<^V}{>B6LlT5D8 zCNjug!{lCgRl6^w8e$hSc^o|UAdoD($!M~0(z+C7B9KvbFG2E^As{mi$Yb_ImicdC zin0XAQ}*)#vJ%KddtrdA0rHIfE|afeK8C3h_Qn9gR8#D40|Zk&YyZt;$u`)10`i<) zVGR2a$W|cJ?OFk{9mw;x$>cE1gdc$0U@zFzF8ps)XW8i_@I@PJuAHNGRy8Q zNLgscBKk$A+4c}YC=PK(J=-1;AXNn!8z58R7-xSb>^y=I8t^h%=uCfmX2*y|uw-i6Z-?2wcM0@-Z4Got-*~Y?gJp&aTEp*3O4^ zBtSZYp7nN-Ak^DnUZ2?U1nH5#%D2&ONyM{oqkTt!V5(2;%m6_jZnD24lKL&T_s#YX zOx`_4?R~R-f`}LMo9(|@MtXI#eUW8OJJh;2+chVXh0@QPlVWUhQjBf38;Vrax_d&| zi|w;hNDtPylJ+gf=49Ms9A|hVdOYNcn!Lom4-~Oyf<&|`s-JOXn={9>1lPTQZ zx7pK(cxB&a&tW1&!9o`7=guv-xE zTK5jyd=B+cd&kzj)1EhtG|TweW0wX9w(foQIU-)`{=rV2E>a1Ct@{VN0g=?;r;q3HAIlq0ipq^ z63>`}78WbF_n6;Lg{g-L6;KTqUh9FFv11|oZjYH|2a_}g3&NgOPcq@)7=A}Y4!YgwkG0`|1y z!7kxsUBByu7hf_(-wc=fwNX@n41DHt7H^j37dax8X#K&Hyr*{0=%ktF!vka>kOuLm0tCz6Fg`s%hJj2tz9v8(2cpFf1_+K;di;)DVUOq` zaV2iV2N6-ehPmi7kjjX6%@Z<;ZNt}skjjXUW73I9G`^I{sKMHzok2egEeIRpZymf#a0djYIV1S$hk`bQ}AeAq` z`BywQKFCgMY@09qSg=Djg-YM}4uM&~bn;mzV$mo4G zK0pw-MG3!hi|eMT@vS72Dx-I5d^@Mw2hoeO)2Z={MW~q~b1v9CHGY5zM&?o=)8oSy zqYQinIS$T%fXs?dB;u`eXUC@t;>YUj_{RZ)u{t|`iijfTKXc;en4EbeMcD+JbK>P+ zqmm-g*2Ahcp20*$cy4@XfMA5@$0q~`M(=|7+yKGoeKlSbAQ+ji$G;2^jLf&UcAB*vJmaTR`5Z*UVvacuaDmvAQ;b|#(M~oPjPD7Ma{s~3c6`9=Xmdh2 z^gs9-4*u=?_#7s?7p4fZKYm(}DPm1s4O0COPg_Q*z9;1CZb2y@`17b2y%rLS+9HA>;4K9F6Y}5RAj4@mecU^OjHv{DSR3&~q%_hsi*Q@R2}H z#2*o4s`7;e@Ag3aoQzLm(jD3bl0V{kOlrcIg5*>@@;2Fg0{Z!Jpy$u{945+$6y?NL zn6Jj^MXAl@WWAq`zanIEmAx>heFjpUiN6&f(}4UHUn_{;NBtcyUPXRB*f2$z12TWd zPZIIG`fq%|`zSL-sdzola^u-du7|wlL#lJ}TO>T;u!_AlM47 zagGKE&Zw(6qd&sDC>8eV)tu)8X$Cq?QvABuB`c19F3t zCrG}s5q2gUY=qxtatZ>(08+C7nsy@Qa2F!8-A7eYLKb# zjAK&ybs}lbAwhDLy6{U(H9_Vk=PZ*}@sQF0NZ6_T36)~m_aP+;L`|w4&1oWJXkT;` zSg1K&1@ZSqb!Vs`ehuo*gaAng&APKlkm8VYO-N}D#Bf?{#N10la$hv+bP>eYV>*2U z1ofECBteQp-9S%!ATejDAPL0=awibWdHmB$HOHMPf>0^&Ov-UyBpK!Nb|IxctSen- z5ffY&;BBZz7$9h21-S#m^z`;{>7Hp8}bdPO%^*${C2> zXMwa%vapSlS&Vw7q`nQgKeZmd19Ap4>Bpq4GlI!L7|mzHiD^4$0+UzZg|u0q`8H>o zAimA*okgFK%~RLITQMNh(b-GHv-x)CkRZ8YO}!9gZg;kC750esz5+-W=d2)bLkaYJ z1f-iY@N<+&D2sr62Be2Gg~^R`;7l0E-Od~)e}bR)1G&d(@dc$C1LQD}Ud{wTrYO$> z`4dQn6ZsNle2?``^4R^(Q$l7+>f&2-KR z;`^tsGrtt`^2dVy&T>Jh2G4^%{hgj)kU{{X28_6&EX2~r{=JPpVQ=VL+0W>t_7)ypDXA;w!JEuNrX>^E21hv^naDQysMA9bzrG%G zs(pib`Smr%xls_xs~Kn>t;I9-W&ZSV=F#kal>akpoz(=|YFw`aW5 zCqQtwXM!^%KybI`8E2Frn^WZOO2T<7AcLAGJ0AuJYJN6J^K(g>XE>i*41(+b$sq!7!GXUCqH;~D7u4nQ;-u=#X>NEN580`b(I_XSaZbxT8xlV>4Q`HmSNBOuj$CsPpL&kLLaCeqIflKlL#XEXYF zEa-XJIW1C=pPvP?&{6iFJw#>$S>)UmAPayjaV8Q`D&7LWBna*Ojigz@a%ZZLnW_wg zR{0jBTJFqY60ee?yaVJ-X91HtnY`sJWilDQ#s3gwRyg|uqy)%HN7;)OCX_TtwFAg1 zCsPoz`3E5HID__)SO2l#m$P6;ag8&a3C`>A4$K;743nx5KX{tH#+kqbckHqETjS(1 zxpFq0pRRFUW>N{(U+B;^P7#y$Iil7$JBcWZ`CNF7^AF3&bD1?x=zFs8-D6Tubtdw( zVvW<3NliY5S>p_3lIf8dMBtp8TICw2fJrY{1>hbUSh!#0r9>eWw%j#NsUQhu?3NT| z6s%>|IC~DD4BQ2U)Bpd058rnVF&PT~bsGNpz)Aa=WPX8iW&Z?cWX_;pNOLyp`N)|W zAX^|d);k|Dsay(goq?W@onk@Y8>rSHB_)Jp+^?khwj1G9Hz1!l#e(E3qrv8D1xY)I zGWkj+*zKtYun*uA3R2?D7`Hmdn8-2rbI1H$_R!H&&lSwnFrR;K6F}aXNJ?$=MEtCDArz7OP%c**lG~WgHRY$VVhtQ*Z3j}3;a~28W*ZXhI$v??vXok&t@<}?a8OxmiF`4y6 zipagpNj*a{cj5X1qz^f!AbunqcJc+uRq)qIhJZbXot2bIL==|vh_hZ0--kz?15Bh3 zkMc@$sxo^j^&7_>`!6b2C3u$)S2xF<+X4i~_dlE-Oxk3?TnutQBKw5OZXZE5m#b0$d#8|B758x_^`E8h zcdELJm~4jc3pPSsRCCV=GFABzJpUP_y4L+qkST&}19F{P{UYW*Rk;?83IH z?7-T0prlo@=@Hu#Eh+qLw?1Wn?_pa%T%dz2EPkrD%h9{x%y$a=rQEfzBVE?;f8lv0WMLVIev2Urh&mjr`3kfsWBH;mvNg zknt_N*)3usExg&?KzdU5Z=}2$x}^cl=#7SMG)0s`52P3}j z_Ghv$KcrL#8QpzI$}E6hRFIKGL~o3(TX&ZW0wd8&6k~?Fok@k4B{?I=vtHQ^_dh|X zy{CcZsGC~Ox6l9*bFUSI;s;A%yKMsmQ^nl}0t8dJNj^+>#|atVhw1K8CenxL?hiyN zeUwW#>KnViG3kFy5wpt1?ny!Nl=dS+N;>4#*lkwcw;3&L;&uxVtkYYP>}l!_5;DF$ zP2D+6q&-dDg+waJI=$6h5zvfz-RkZR5WGv=EGe&+Zutsmp`TYvH!jH3R2jW3-Ih#b zgtv6NFp<&Q(!G!MNDEuKlSsy^(^hU?fMD5MC)v}+UCx?ix!SmES+nd(+PDXq$h_LP zrv#xMsRekxt$Xzq!t<&3+()C;ZEg)BN{5GOCVZQ#2~y(4>TR-*x?1)C?cElX$}2^C z_YT&BXY?H*uMTccLHz!(gZnMXq@o_2+jMllXEFn3x$B`1@96%@%u zk<`vA_2IqTEll=7-|`^H^m4zFg!`Xf?srUb_P}ZbO4`dkAc${IFZbRnF)zv;d!+kh zEmsgHbf7uIBXW$(a4$cJ$Z*F5^q_w-;Q1E66eB@TZ?{EdLA;aVOt(D~X|w4iT^I40IO> z;#>HD`=%fihiKu0?&`}@4RN;wWYDV*xxWQS7x?NR%dJp_yt?ZJ>U$q{uVwNjoX24t zKAhB(JnW_k8NX+H*zL+hww;IF;iSiFU&Gu;Ro|=FXAXBuiKNQBM!JWYTm$FtnEOcg zFD4C(XoMZ?$4YGZKcdFD6Qk_2SA>7uc$$uKM(B-=Oo$gHB7EAN2SPiYZ6hU&DrkFEYkwc@jn--qD(eF zm7;ttNFz>#=g(NuY_|my*)Fo({et+V$aaqj;+NuC_Y9>HQHQ0N>XxtRmkUeryjw#M zUr&x35yaQ?qC2LxpXxhEmFvz6kP|>&b~gq{IVk@Uw?Q59kL)E1U4x12dkbBciR`rs z-4;ZYVgJzBROn8rOL}DgT!;l@i? z$V8aT^GKXX>Nh-k7P?IZ@%>ZiPOOJ|a+Kp+;3N?AtaRrv`5g2#2C~X679^pxg1!#d z7e#KR`k0Dlo~=Np$h8ESnmP@33p)c@?KUBz*pq0VWVPFhN!O8*bY$|<=M)>O-3%t! zDzOc&b_b@3l8Smqvc?@nM8OqwcgX8~_sa$-lTh9-fv{KK2`tY|D7>-V`Sg;LG~hg-}l`wQIsu|2}LDYhNh4`ib0c@ zm}!tbp&Dz}NQjIvgp?&&B3n}kA#3@+mUG|d;QM<#{vMytqk4Ls*LL=E&%N*P6GXBL z40<(IO9qk^ZY4-C7i5JyGKrZD=g-)lv%;f@NLyLqi3)ii^lS^yCz7tAtu!Dz0$VXf zvf+Fh$j=y(j^q5!aCsuKJ?{$FyGLesxTius0nI;z$1@29z5Azd zh9E)D{V63JqC#-*xi8$GiT29JoU#4k z_lQV6`@>U}QW)uha9jb1?i05pJ35K<1ZlZ-s0D zaya}xmnwj5br+Cd!xNdr1nuzG@Kiy9cKBoYTMM2S91BksBzSgnJiL_%w*+jf z$HV(rCI;K;Ua<9Bct2OCu7LMoJ8mGfM6g|Iy&!@xt6mlHMnQ)zlDGIuo zkN355!^0Jl3o?I%4-$c2#hT0G#@TSvBUtK8Ot4}+8{SBSea5lnY&csXn2odH9~6Q& zRnCQfA;P`jGT8bnoJ&OBcD@k4%B8eQx%^w17s8=B>@%Ld<1>y6;dhwO*m4u}TnNuq zNK9Oeb}_tLAq9Z^9loHD5w?T$603!Q+zAgMGFn>+dORR8`Z`5VQy_8rDI&?*YvNnedG*SVqCd&n z&>b;aE0D>jCkTS8_YOcp`l-h_8%SOQQb@m`5Ujz%`fVbzzKZB;!!lBAV@33_IuUwi z_Xg-Gs?T7eof{mhO@}kRV)}d`vjV;?kL#A=Q4%~sD6TITGC%C*+9|GY7JBBu$y;%F zE?iu{_f3J~`n_)o6xZ*4Q=o*tTWC)B7FNp8q)O=rm{5IT6s7cgPg6_l7ZjNR5LanE zZ$!qP45XaiP$B6+9@G<bE7dM`mXY=kGOMEVio_Kdxtl0KA3 zhV~JxqrM=SNrFuMJXTu1yV(yN`!mUP9W9w^$Ix&q^^EkA-8~- zdb}y)Dw#J%YowwTb} z&m~*YGlxNX2|s`x~S`E@Xmnb&%dlkYHRLB-)r9>jvow zEJOa_`;3G1ZbXtbIz@*_2kTiv5BAe7K!)j!JkAf2pMZ?iGZk_I$a{Jg5!rLc>StLd z8v9t`k8E`x=y5)2CK;T+KG4f51W!fA>9v?>)8K^s0@xa_`wiKjghBjn#dy7mAp4-_ zZi2f#pcYt_HmQ- z0Ra)`EtB;zOrodXllA$61Z#=O`Whyb=REn~J0|)bg%kqvv7XC>#?|6Lrs{tSJvgo+ znWoK`Dx?;^4AJ+D3b zMN#SlSZKuq`AP5mJln!jXlvhH1a1ASCz1?&gA_`ktwZ`gQ3^dQ4SJ61joM2+NRH_T zJ0OwI)_>D465$s95Xk(dYaK~On*lwy4v>@ja3aZCA6T8fd=zd7=$nb8MBCVDeK!;B zCpdjFpwwyoh#)wUGz4-+PkRwH!xJ$Wk)8(fyWY7o+p0S-Mr#8kS6@JcXILEh&+2Q5 zu!kKt!`?y9QDktAJFgFa3H4;h)P$R;xI+6&PgBSXp!qNTiXd(KacjAt$Gyy@f|hVW zuO>*)5-#YeM5bu3gXS)v=b~Qr6)ZJH>-PDdawD6Z>A6oPLL-Owj>L0c)IV0O3}CBf`)Q~#7@v_Bk<>!!X^A=sO4>Khd@ z0{pq9?^MY9K>pP?y-Kz;%pqn>i&X2%WCE<&(tyN7mI?Cn)3Mso6Y%Aw$a+D79Oj7} z5hTcAo=C!LoUtcB&&QxAE|MikFG2D}>UTpKuH|_k6N)rb$Pyq0BW-(-KQx2j+PHXR zfI@I>Ts|^YA-FcK8p%=!u8r$Pa*435??AH|Dce(O#?^A8NF#;dYPm%uNg=peem*jZ z2)sUJud<| z6saHx>OpcO@`xa)r#p~eBQ_D%(-+9`NYY^TIbV|)Z8(sVk%xyMk)!eN5t|5)bz?y$ zH`1Dj9P9p!bXEwCb!Q_xhN2$$oi#CHpNpIjWEZR@J_0@GB3A|3B1Y_Uk+`?H6v|8` znM6Sz5i;i^Lj(y%r1O!ff&}$`KGI|u>Y1W7gi@b?p1&eH1;LiE2*|}qm*FgP2yATx zay4>AkY$2gi?n+OW#l-2BhrhAjQv(*h(a*-+mTd-;5h$pq{+J!S9F~JFG_-O{=dkx zEE65)|BJk)5FF?Ki@d229Ov&uhARZe`52?`2(qOGIgB&*2@=;CPPHM@yhh?kmI=oB ze8vDlf~@8@CJ7Q`HNO#`jHRY%YhhIX5%h$N;es3!q@a;Ygxe3E+r%5U6mk?w6*lsY zLOm>V3djS7OC(vF1*=?K&lfei5|JzFqDCJd_C^Q=VkvrDnMiW7T9cu}r3laW~G_G4p7=0CjJJyoMGC_jV%QD7k zp~ueB=quJ`jA~=p)?ye*aDP$G=td+(n+rbw1=%QXTvW()AQg=|?_nvH(F(?B|1-KM zq#%&W#%dk?*s{EhbqPoqST}CoCtR%Rg9m7Ot4R>V*DXwf+u2CjDLho6*$$$ ztX45frLaHvY^xYpuVT~^1fOj&@rc0pd&|aZWk{x(kO}T}KV%#fBxrRH8P^2~THQlN zo%cCom)6Bc76%{nQHTemw$W-V zM-jAyIz|s7vL)0trVA3Zgh!3Vf-Dv18;=^N^nr|F3>O67Zb$%P8kyr+PdR8UFA~X7NH-w1VW&!&zCc`~wL*pi z@r^D-lC>bK4UCzBEQP24?}1E1BS(<*;qVSGkVeLNL4x-Dgi+^1w3Vy{?YW7OL`3dE zni@liaP7cVqKka@-^K7n)i1Dxe<0@B8)CCKN{ceVj} z&S)UWAVCt0=L9JQWEaS^H+l-0+ExNRg}X{X-)(k$o-#Z;0fAOgE#4Abp?|#@@piCdfaqN4p3l(Z~>_ zYIclA`i7>0@LG(kLC?2>|kzaYPVonb_Y47!RkBby~gS7(T#gK!nHn z*g`1Nie%phDZyWJMk z$S7mT$1HPXJV-g`X<;(C^gTx zE=XCp#dHqHe52$nmU#wl1YHI4x$zhgIeRWJdNYa6o{Nkj3c=ZPiIFQvFncaDVrQdf zIeRWQOhJO#bA{1NkYM&)VRR!RS5_;HRSLn`bCscef|^sbU}jun)Da|@8Q0#|qShJ} z=U}NR+B0zS9~%$vJQ(i^(jVRdF976gV}l?A-r}~g&bT7TBxoDOLFOBy&Zn%W^eAZ0 zunyl~WD!Z%zIqOxD1yvJqsCm6k+a@+_xbakVY7@@1@2Kl0;Rq)5{YDJi(Z8l0gx_;LOX&5~K;#mj^OAMzMKlD?_W~$7*vn!XDMAB}hR*b{LNn;W}*srM@@X z5Xpu;C$F)08J!gwyn(aJNFtK1{j@q(YYnCL7~}4d`O%o75S&x?8DB8bsubt3_kgiV z=$Qg~w!qzk1I8w$6x#aP*rgDha}OEEn1pJqXFW%Zb4;`)FfS*7KSvC0KE|G`Ed=rc zkfX*2L}ccV8Iy=i(w0Zy{U(q(W}GC#*+A>Zjf)Dw8SSJI_Zezd&OD9Jh)jZ=A?rD9 zY-br7$5781-Z8sv>{rMeU|lnFg&qgyZk#>ynAH}r zhd~?5V?IGdW+TpQqY!Lk`OTn>1+!-Xv)es-3YepmQkb8D<^+YHp2AT*HAFUwm~%*m zYk4sET*N%8ltMj4%|8@^>$(!=O(t4!ySS8jZ)+)KMix?5qphX1*+?PSTFRLTOhQ3x zsbDT90$NHoDHY5UN-6ZGqIp3fxEicv#x3F+4DKUUF`E+M`WgXoRWUoTOw^yM z=4%SURc;M)Ad}F4;u%nF^F2Y@z}+xh+tfBEE2VJ1Q`?-Q5L}BsY*tz zbnP6B2`S*uqvj|g@?Lj+bDSVgzr;_V>YE=ii75~58QWofb2{sZer=<^nMp*R1lBh< zDWoI#T;Dt=Nbkd}=P|SL67=v)^u7Ma%=&@^_s1SHK>+?_=dCq>->eUt_ufJYn@Ln^ ziZ-$s%=Qph*gQyt+w(Lax_O0(cI*(m`wk>xR$I#TRcB-OvkAm-${DCs(h;YX6 z46UJgOCfh!!#g!**)L^_!dBPVtV0CeKLzWVke?^aTq2{j~ED2bW+!#n}v*Ie0;XM)VlAbmBcha*p_cb1SpEawI%oJ@H^b{T6 zQZq*iayk{hyaallGefYB$JQIP%yuHrTk_+{$z_lUNLJoo;X5Zcfg}i-ti12SY7zVL z^X6LiM>`~Bo;NoO^0ts^Z*C_d-)C%Z?i2pJaTC6zRT$RmW@t6WHAO>G2uMfsc_JJs z*4GQ>0EJ*{dC|-wawcZ$hum5^iMUci{ot#%#X(Oe^CyzYj#&%)K^y@(nTLpEX+ad7 z%v?c&NIRLuze0axRy#-AVPLDXS({{JtLtn=L@9i?bO}sfFPUQ$8LY3D%~XZp?Z=nR z$qK>SkFS_>h;TN_LKLr>o!7|xR07h~+((4(!GbBRo0&@_JKA%*n^%dXXa(Vn2>Wt( z^Iw)JfcdEndb*o=*HWYf@QWNcN_02N5=qhSyv5^253>rB=q|FSSzD9}#*Ln)O+;q3 zrOQBjwHkRX+Wgp zI+>p)KwdX55|R0N!;JfeB8}$fO|uvgnV&b!ax4?g#+zmxAroYyk7+Q8W}~m!K$Hry z(bsInBxcT6a6=N>YF{&1l)}un1`qq1sYGPP`kJ=|2{P8#Oj>_;#`>9QMBdX1&g6IP z-!dQHfHE?NZ<(!$$Q<^+FNgijP9!5+Z-2A5LU7C+V1A|$?1O{MwM0g1dE3Ew08tD! z%Wg#LqqQ-~v05h}L(FA@On~}&4anPOqi;F$K@AQ!_iW<0st<;{nNWVXd6CFyElrHQ z@0fKqqfCZo=fc;LK+iko>qNNT`vVzarYPhcAj#$`B0SoR0W!)wsE|}3W6b#PP;-_R zEkYo-!O(H29bxDp;~z6N6o?ko3-XRKq*NkYbln{xPj z3S-U1tS9Ej|6tb-*2kKKw@@~sBlftUb_xf!q9kunYMfX(aDCxOl4>?4JxpeS=2WvK z5gs!?12VyUmB^WxAoFSFn}P%*f0~)1=)vDQOf%CIg7yB9IZYur+GLn>6@sJjBy$mw zEwRB2GTHovh+G3qF;6I^4#Szk$EKFW*$75}>1GK*f;GSlvw|SO8eoQ5l?Z%U@esfN zKErH6WQ^AIS0*#fIfCq13pZ>bidp6|L5f`Fn}oB?e~HMf&NlOIMSu8Y2_v0tK0rjq z^@&-Jh}<*IF?}LawDPbjSOS@!W6oh2t$_j0g@Jr(#%H5uwuM=pYnD<7KIxlhKCF<9 zP-?!ZD+KfWSumq%!Ho8~*_dSHn(cG5E0>Cn{GXdiM3S|P*Z9Wf=jJ{lGOo|fZrh}X zn6WR+feOL;$~4C^(JZk-TVzgG3HZFoT&WPe0l3&)PlQ|MPLNq*eosWs-Am1bf&?vd z>3uWoQnOkPx0Yar{n8vjWQtZ9o)hf_&CAU3L}Z;VH!~E1Ib3eeR0yu0SD2qEmO>dS7j}BEq&XW2?=V6oMK1%Ir%-#{RWAf{5&u>&#R^g4oxYvx#tA zC&8a}=4v7t6zMr2-1K1xj=LlM z&P*dBBmK_&R3RAY7IPI58ELk;g@}xFo4H4jAkuB-NktEi*xStW3c(S3yLnw9*eiFM zq3_W{>GLkL)lMXA{XZzR+w7{4{13oWXLAIRlu!ib6dc3%neP*kwet(%~nIq;%BJxW$ zM@;PpEG0D`G1G{Q)~>?}A4ig7X4yTYS;O@Pu5yo?bBV~ddffbyWoZ9i6tZ#L+)0G% z6n`c8r1`T#ur5xUrxb#9@w?gTN3_MIaNhaT%psDj<$&*#mO zf&||gIB!;D5-JB@&cWTpd9#|331-jpW<()n!RPblNFuV{|1y^mk+b;)^SU6xY<|(K zzZd;U)>^~)o@~`U_%uoZt;W_1XV2dpQEa1_|0 zidvl&f?u2{X7yDFX1=(!he`As6eX;qL}XkgtcyfsTqUjYN6@-#Kc%c%L^z63;7=)Q zJP{d1X=^4C_7LZk($?sslvNsA#zCnv)=Y&=2U5Y>Lqz&h*{b#H-PWsEV+09WZx!nT zk(AJn<#j(mCBp3|8}!t%${xo^ znd|~m*J?|IYX|#aJ!_^y{#^^_nbucCc&^0u^O&`RWkQX*@+c9u_A#L|YCPu;TUUNV zTglqXBly>C!q(d-kfdv8XTY~`*PzTyBCw|x&&_pf@kuV#5}r~mg|SYzjtJ5NZ2b&A zN33S2NG6o067Q`ns}qyxD%Y|SiOBY2Swo1(_H0{o1qu48V|_`4^K%?*Io3gi{0_vm z9ypEG<+$Nn6%~RxY+yM= z*vcf5uI+ylp3;DaO{_aaGPGw7!+ZkdDXa1s^m#N9oV%M_pAuo2Jn(#?rL~L*$Nm72 z)>h2oJ*2FpZ!?qp>Wkv?~_ z))J9EceZi_34HEsT_G|Bj{Re_{m@fhvL5XVg7yBUHJ*s9_r6vJ%S7wFuQi8=jH0i#jEL-&{j4KI zrf6eDEx%<|JSRQu2)6oLy%h2akO9^pBJ4AIILKN>gvZrhAT!vCJJO}Mh{!0$Sv!dE_q9F(&Eu^DL^y}DfK0Sb6Om^QY1TzSf}LHO<^PQy zvUS|ir&-O2B-3b&eL3Cwgve-kn#1>UKe9F`WIouMWSvsT<1jvdY-yKK^Jr}@e0wbh z6wR=P3W9nTL#bKT$3(_xb>8P&7IUmjBH1y)iN_r4x0xGTp<|yQtP5Z@FeF;tJ*)Z z261(|%o;;P`m@~9uAz)?u2~ zrbJ{`cUsSLsc7HXWpyJWd&(|r0?W`&0ncQ1TT>N+XEJ-Nc?!WXYOl45h_toOs&@;0 z=D7ZbDE3<&6>>hmvF1tQYcFIF8QGKxc1dm^&O z9k%)qVSn<#zUZ(uRUrj|9I^HgVSg~Izgo5am6^xA%rWa(BHUWg=i^p)mWl2`ezS%M zatUr#;hPJ;S*b*lHQa-g1Y5sZ%UCA513GD){*P>hYC$R70iCoi3eraGl1^Gx?x0L^ zG#e+aM~TR6oU|Gdk=Zz9^%f*pHJ!Ew6Ol9QX=?-#&QC?~@U)ew5Zpnqo~ zsu0ZBA69Yg0r;n^!9T5vM5I4|T2B#?KA*L^5Mk?e!PYtJltLmv&RgYUP_wjt!FrU4 zv~|()SSFgEi&irt($+<*BN5pLFIkC#1S^nB)+8eAPeZW&w{=q?O@Umt^2gro&sD3G zLNFWuSYaa4!)unyGEon&Sx*y@9$vFL5|J6ZZjBNosKFc2(I$A-CP^?xNfL}mH>`=I zhg&b63E!|*GSP;Ezj$VK%le*3veqGi&#Z1+ae25-gVW~QRu4gf)8;!?Dv@L@^$9*d zykpHHBJ1mpwOApz+R^OQM7G2R_giA@?*s|%x5U~%5RpADkA0j-vUXV94vn*$#F2;5 z`$%ziJ0@Civna3qs*nkuo9DIr5|NqDYiALWw({Bgh)7%cZ9DJXw({FgGl|*?+0P4^ zz*flaMnu{Q*=vc&x+q}pW|=%QUf~=TvJVi+ig^`oRblNEvi~6>$EbKaZ$9)VB{Un} zgT^z)!gfg}TCur2k`%T_5aIUR23l`nJ53=k04ZW0=TbECcL7q=Zjv80^Lb`(82w7w zw~3@{n-;`s{XwR*T_VKR@k_;cLRH4DAjriz0jVkoetDZ^9uefHc>&P{c?O~w2Aa#* zJ`s5yRmNUMgri6%nN12A52T!3xB&S>QQ-MldHZ1|p_uR3Rs}(%<_dP0WLWb@pr?Y} zNFg(UJZOKYXr2e;fA%IKGC!5=$^|(at6+`24pu}}>{^1v#KuzWRqXmir1dIxTOw1m zCh(>}JiMP=#hxlizjE-_FYMnRvX2XL;5h?Z`U@h0Q{}<0u;MX?rgtL}iLy*BSa5D``)v_NY zBBQ8fKf^MV`3)qKq!85ni2aw)^W+ckb|=WxvHua|xg1!l68TS%l~EEZjQ&Vlbwpg8 zd0ea4vEL+_bnS8rcz5|9Br};r?_SokCl%q01$nM#uM#B4VSW3kAVHoVv#$se)J53N zSCsTb^Q_xtnb3{0JrIR%&m_Wm{uxNbUZxN{B{uFNxRWyNZ&@a^0iwXZY}r2uQYn$2 zAzJn^LGrifbK`)>{8;wyimitaqMj=X`4#-J?asxhmZ`pe2jbdoN)QP}!1}jvg5cX7 zm}upW@J&?T?nXq~^6jD}IjeY^?h@$n?FbQ$9qYY;U8$6`m2v^@^VxM2ave%Fwq1o} zfJ{@nnL_3PX>NB`NC@t*wzeylzT4+^b~Qn8{Hb^Ves#`%Opu;S_&dPuY)6o-a|61fYmqGiEz2RxH`(O%6YG$$jL z^7EpdE6BHJxQ)GNmo1CdWfU*km5FejKJ^Rgsi%-8V5^heTp_K2yksXbp)^nWdRv&u?5gAus`!EsC{F@-t&%VSY_+?BJ`w3pf4egg&fyTS)!*)|kWoMe+T)3^KRAvJvZpHq z*S&-7r3(1~N)55Ii12C$$Aq`-dR5570>LaZEJ|9Waa_Y}OUPh-Wq_Vxb|WUyr&Po2 zkwn<%X(SW>kj&~FAj9o)MA+wrK;E?-g)9d$!tTT*bO~l^v^COxjfiX;Bkd$2Y-=sa ze65ggfh5~GL}U$)wyRb}f7tqVkQrk;OhP}xUT-gu6uYq?S^o=2b0X4uik(P=t^Y!$ z))JAn-nUCsleUh7%vifNlhCeO+zZCpk1^5un|xn%oZV2!EC%u?lp1G0MMPR3XLl#U z)-RGw3YVf8f}!-31;&+c;{-OT~3fillk`mt8@aIV zgHjpxPl8}e!1u&5>_dX=smnfR*e3+(4R<_P&!2+qfL>XXO8qU!%KGqInM7_1Vt&Z$ z!wfsNCi~N{S**4TV$ZPSiO5JZ?D;H1dHxg*0PZF_Xr5%RRb=oSaqP|_ z9VHJEk=a;nHzUGzv71UwB_bpJ%1(StW_~}&tg%NDk$S$iPq9pBEbLL1f z?_{FQe?3;K1Z1mSDuT9T#7h_PS6i$9_*C7LXlw77_NaA&~FwBSd62 zcG-`al-1C(3H;lpyKRR_^cRA5+l`6HZ0xoZS%&6<1t&Faw|!M1SUY>{M=a7zGEal` zA8ojG0)N9kw+8Z)J(P&lyw^_QQqh}xd+iLR)bmhkul=b)UIDV-K2Ai&b-?ayOY1#A z=4X2-lh7GB&FBy0kew_@3d{u$X2ac7`vXCSic$2CJ&B0)@Q_{ELCx~i`jDMNBw70& z-u@U$nk&09(osNuwd*S+707Y>9U@#i_>AK>J3}G3K0Im9ViIcpFrUSpvOg1~L@8Ji zfXpd-iBc*9G@r6h5s^Nhwyz5kwBFP9a1T9{KA*Pt5#idI4toBuPbg$Qkh69rUuG45 z6X%@Wiipho1$!gQM1M8xqW!%f!EfGOv=0h`yJPGr7wywTq|X=a!VP2&7lHMQc14A( z2J*K(oQSl3*}hGLv$`H+uGq~RN}scUT(uJvg6|;wW9Kr_@djkl5|M|LIo=NlUodI%DhBwfi0fMygG$Q$&^@7X+nX_QMfOA`rHHop>B_IWzNE6m$ zC&2gZfE0F;nj(?;dB7P6{MdxEdM$G2IwQk9$y3V8}hWoIvw=r@@kat?9(`mWQ2|ZOA(L^ESvl;=Ia)cIy~dU8k2IgOYhiR@dn#$p8N0-Bw*^I1%Yj zU1tXo_Gb)euIn6B$OItuoLX(A^~pf$JN2JMB0V&n63>xL=vI=rQ|eR@k@Pq|gl;wDVjF>Ae=Sdzws^HR@3(DS&H zN`!j>juMTW`1X`Bs?+5l)7UAk5d3=QlTITd$yy;83%>!GrcN@;gc`$KfP3nvoDT%4 z6D5;~$oxFz+$NH)&4SxLS)k`BXKDv&eHW0Yoi7yf5zI2pov#$KA7olO`-sSTf5wS) zl#w0-nbywpM6wG^UI)+2fwXbDFo~H7ziNGs$O0zORd*XFN6~YcWJ2d9W2E#}11 z-l~IBmWa$@2WL1DX{&?t2bZE6#FM~|&UJ;90_!h04|I}IR07h;sY@g!wD}63M|E}# zL7s2Rb=ui!L_}Ke?7YV^(GjV$Gf5$M2J(_KM2Q&v<&-#Tlm%>^ohZ#YAK_UUTxlBqOZ>k#=)x5y>v_1FUT@^WB~Lf>@V$4cXnX znM7Mccc-JGr!MH}?yM&wZS`>cm$?SVJ;JAjJ)I_koY7$H1)qC5t%%6jd*0WVdy2ly zkz!v?bXHI)9swd?y_d6(HB;t2AibShuaI>jI148^VTE9R-f&tGkv_laoMf3$12Kd2 zan1^I5wzl|bsy(46K%NozC<4Gdg5{!O*oHt&Tb>8u_imj`B2x2E=Q_)T@I(>MNrpOkyU9pj0$W3! zk_zbwWSEmegl*xu)^KN@LUuw8zT>P>$eTdkb-rg3J?R?Z>?I=o8Q~l!GDT~B74Aoa ztr1SHAaw;9>Db-T!*tr!4hETIXAlw2&j=u+oG}Xd0LU2UGa~GB8j$y#O$xz1_502d zBC@_daQq%}AcjU)8?S)Knc+!sNNaLKBiO9IdIqwi*52u6man5=o zYztR<f1lvIK!j~A0zDI) zsYGO46P-*h6?6SHc*h51(ws{~I6q$#$(tzs*#sorDM3WW^^sG72;0g5nU9Sd&Tm9m^8u2%ppfH0K6Z-sLJ#FLps7yp-dtb7 zdEGSUT|tbayo#IVqzDq6v`=#;2ojvePjjXS5}fi)b7l+jgvqCT)11!*S#JbnsUV{V z@!8-s=PN;8g!>7J&@;uuaE=X{iI@=i|NN}1u+eu{-J@1|E{3b|n-aFg5 zElLHE&UWJ7L=R=8vz>S%9O-q4YqnF42=@ZKK{3ZkPzc`G{M6Z`l!`44C;v{BJ`{WO zU9)*kf*`?rWb>T$M5Oh3PL?3SEHls9$)%`H3xMW%&IyH-0P>l0MIpHE{lfXGFIwj) zDu7I;^D~j`0=u7seIAen&M`qAUKC4f$OTR=lW31y;56z-QIK`K1GB(+k%?9do;%>( zrv=Vyf=sCgcT(WJ!-YmJ$k^_AQWtKXV z6@oHfI`ahC47~|8FLM?PG68xM&MC{CwSwG+Hg7_y6;AiJ?v7%G^8pj>06dTLN#-L# zZ1`&HI2f^4I$tZ~Nsw9X>=7i0{VV4eL4w%VI41Gz z>zscD=>+{9*GS(u`TBGFsox@2E3_NF>gyC0q{ViA%DKTQI{;<4mY)SZ8=M*n=>+6k z=V>C`dU21x$$3s8T|s8E^O8c6fNXIR6*36OR%a{`Ifmyr&kQ6FLp#dyu7A7pydc5J zz;@>)L4tFD?M@;Q+2*%9XIUoN#zOhoQQ`sU5Goao{a0rjlW70?)!8FRkd0%`FMhc{SPNekf2xo>D+s7@K0yo+vtznCH?7~Cc-Uz75Mz8b6Fu9ft+(n4wE_D3go<# zNJO^Pi_Q*~3H>3)giFp(f&{CAOU^Mtf;GS;=bRwHOmxY)AxJReUvlydC+neL#=qp0 z5G0uKFFBP331<9DPF+EQCy$pLLy+Lf<0Yp7lj!|~OHK|8E6 zUEYz|z!CehlcRyzf@t~=cX!TU((f!uHgDC8QDTh0+8vIcKE z*GI^>aNqr}6E{+l|De==&U}U7*^cH$lBEpp-(%fI3JH~o(ek**6@q6(dELIFsFd~* z{OTNjWiG$_4wKL^@q0k|-El&u*iyLv0z0Yv?i?brc0%re(X6M}SlCH{t&kf(hDi<3 zTnVo^t+#>Hb%#$OqV1o@PoN%iKM-W? z{D4eSND7pC%#HgPOUYIjc0*HH54O6AAQN_%Ddb}y5jSfZ%A{-Wy728;_&39io6e+q zTj)2jaGTd{E6723?l~Ju+3rk1mQ)4-_@Cq6CX%cbhFevifsE@OnZed^1-k-BL-*oL zB=Y38ksCV;$rx?)Vb~pmOe43HAjP4NjsXXra6th6WakY=wkO?t@2@s>AEZ*ew!!*p z>ef=occA$xw=ENGu6T2ynVTp`@a96Z`!qLmr_QEqM0-;+_xLABxUJ@Z=4Ni=IY`+0 z4?vo`ZHdTHtA)E?kwFhzx+fKK07|uTZ!if}fp?{k1A$%6r=&U5y+T0ZnP_!kt#yWE zMiPvGq z-Ljt{;kX_k4-<*VxH`ByiEv$%0-28PC52Q6(%CKbImI5j4dY4}$SdxHg5YoC)`HRR z6}P$|Z4-Icd&R9QNY8=L1E`cuL`Lz-eeLHJH;rUu6tB2NzmQQhBt0XEu+PxswJz?T z3c=R$s{3Fj`iVUinJB>llz<_-5}h4ccMH{J6JL7)4&w-tgSUzgYmU#|r6t{e9? zk}2AJkXf}+(?+?^C?pePM!Ovq@+FWl?ieEJT6ZY521trKU>$3o`YPNSDgs|Ob(b@V zj{M{A^KiVoiDaf|zs`p@%Rvvw5aGUzZylz(`M*KU*`Yt6tzun#=#~_u3EZh*QY9b_ z0`jOJ^WWg#O8C(A1j)N0Ak73R4rCM9`p|99B>GDh6Wm^c_(}ZLg$eE;L0W?KY7prJ z_dP)-^<_P2ZiXPiJDBP2JVAnYFekao1epdt<8P5nayJRG9p1{U1e!l~_YmQ1WI=wW zx(Vws8?wL8a9`WNHHf=_A3jA5+vU*aASx{eI`h7!kOtVBO-mybbD=W*a+&CeP)O^_fzYuu@Vj2HP?U~886t6UeXbB!#R5@|)}bh^4Y)=5FCN+GP0Z)E{n$G|Qg*ryF4s?HA|WEBiRBLC-z!mfX)I=(&Hn4Fm~#?gckNkf7&Y zbbBy~_S{P%3fbc>xkE@swy{g@vV&|3=hMxQRVYP7j$3YYljwU} zSKS_h1aE0wb>Ac+TliHsP0@qB>8g8JAvs|EANL9qZSih6K?icp4IM)3QqMKF8WGv* zuDL@M@-vjW?oMP9>YK)W@TU8*AU1sO6rZ-=bUz^?HQ#izh;R%44fNb}@BPh=TkdJr zL%k^%WNx`}hh=^+uK(N~OtgIPbm=O{+;QJz5(-Xk@3?~m2~KYBxbKQm!8;>&-0?)D zhj-kSMA*YyqZpyhDNnr_FKR2|<~Z+9 zLGVTgzIhktT_Ga*f9RZh!K5j}ze<#8E51 z_dJu(-rBt1Dd4>%$a?sV3_Le3;3X1~)(dzmRXrEstG3=LgraF|dZ}+D6m!9 zTgOEEax1?zU)tM7MA|CtonaYjQCK^ry^BQTGy1Y#p%ds2+p@t{Ij;qglu$u9_rv~G z-s?a_YA){$Qc67zrOJD2iO9BE!3&+F`XcN7pav^?RTc6Sl=`3NFbUxec6@WHve#IU z{o2GG;Q`+`VHXmv|&bxplhOtcp8T{`^gLQ`)u5oxQbci)-0 zcbsHoq)ojWf1`D_l?Aq%digI)vKz?LUM(V=4ZJDW%+nRJA7om1U5Lmip7G+Ypq}gk z)(p;k>nK?^f!{}K?ZvZ9jQuT-Hm$wNqSS_s0Z9-fn7>+kotZ>edab>6L^z5Q;7@Ds zPa^Cy-bifY{ihK8!f;!!@>TRu`uv>NpGZn5bvd`FcHTH9(LA^FW)hKkZs(mN!q)!) z>+QTp{z1)b9rsoVUV=g{f=q%pKq1)1I(X%-QK{%DL`ScRAce&&)6uIf$WxO!s~x=v z5$R7y?+6iD%N@N(uA^r5@L#ar(Q_1%ANu@@US}fg^DTHQs*|@^A?V?2-t-&n;rDNH zJM8Ao6(qQ=+Ra-i$OAAB(l>s+6@ug`&hv6NZ=E1om4JLF$iwi8F_+pQ$muTkjzH|nc;%e zXdI9+f_(c-KvIcFpNDu=H8^S%?YRwjIK=Bpgne!gWT-bsA(*j|-joO-rK=4TGMQ(5s*m@Na(RB`ANv+5zpFEJwc*7 zsZ{Tfkof>^65_5uNm(!dlj^n4 zi*a%6Gs)*}3i%w!1aCPJZc$5sO!N*Ck+ElZt@2TRqNBtlFF}y}z4#g8B(Jj|vtJKL zH$j54%1K@l5$WM1Zx+i?+rSxQlD9@71%E)YOCk7f>16MeLhugx$6i8y8R-UyVygEk z5&0(RG;e_*c)E*wv}xXQBGR8}UJlDdN62a3$PmZ=@Hl=pI^7#9$g}WU6JK0n{wp>U8fk5w5Q+h+?{TMIpO^%=8);B!9@m{Xk}U-HFKh z`ox>VGNFNUW3^)-GsnvmWYD8xLy|5d;AK@JrWL^vYddyNUmx%Om zsTV0Mt=9$3OTGC-*cP5Tet8$6ySv_IrBnn;E%$a4$&UE}dJ3*-S9%wi6bN>RE4@Mw zpe<>ArDqV~+Gz-SR(eeo(hSIIFP(_!%dj{9%F7}mV_)l)EP|R-LcQQ^Q=Ct~_9_aJ zq;t>x+N(xHTL0R6k_cOG1Gc{Q5)|?RkZ-(CSr4_$E_Dda;SIo?qsoK?KZyxsdB^jZ>uH)zC| zu*+*F$ce3R;~q-w@;Vcd9`5ooiLgKONoK7=mIC>~%Uc3%u|L?x_IO1UvKnN5^mHQ9 zpS@lp%g}qicnY!4>nljh0=x&==M5nu{n_VjAj1B93!3+NI~B4W$N{fhN$JlXAU}K6 z6mkg2FJ2cS(w`&VT9%2g^XY!K`=GJ5EIUeAF{aNq>F^ z>qotA3c>Zp39oW#l;OB;g3L*;zCz-l&Q5#p5J?Fc2jO>&VU#%Iy(dVkzHnb1WX^aW z3W9HKV9Pw?O%?>-+F&wEklCVTp7An?NT1Jm50{bt6eG>HLMi~s_1+`G_5Ki$KfGl` zWLD34L(5X^(e>(iFIkY1u;Rw&dgr|l1la~Rv~lHd-b)wcLoxcD_hu529-jA}DTkV6 z-#LHZjCS7Z{Qr<)4{?4!?`>fjZC%A!?MHYLao#(1PpJ!DZh6i|@RZ?#m%jp&;3>mJ zuZSSQQ-(`k4MBpZ41aqzlju{1%fe^r&t!zUrk5@+y44A8%D%^`;TwR%e3dt6mPv(3pAqFZhm!mrF#}>2=Sp zjQ*rV_vSae7ED5TB80c0Zg`!ENPlj4!-%l024L%kw~$MbEj%l@>1`w;ZQb&IW0|O} z+un5|QZtYmU{aG$YHoXxD(Ioi;cf5Ux7}}h{I)yi5a0gz*PBxnOUXNv|9Sg}uuK#1 z`9JT(Ju-LhleyzvxkpCx@AXjgL)Gr~@c)vT`Ts*^{e3bEYM^G$b4&19^K*%CR`Jec zjDL*?$A!0sV*NrjDfR-}*YMrKJbno#(bJwheq|!8`8m*>$L~u-)>oXLQw#O5<`+OF zuYZk5c7X-(b};t$kbg&zK|p$fOvn$_rc&BW*n7S~WF!$;%OU?Z5w<>nWLiCprKI%& z{&z&!`Y@0w=pQ5^^~C$N9^ps>f8zc6Ok%piDc^fgD&8MTg!MoMflN{e-aszwUsVXs z!bSY}I;fdFOa(nf{TGO^hqx~&=BE;o{uK8o5lIOht_C-+pj2^xKFbui4!1+GHx>5} z3Q_@{W#b50+>fivQ3SU`i~IG7u=Q!AXCx7spA!CgA{^HokSXbxf0Xs$Z9}}-SjMj@ zNO0S*j2{ssxNTU*Z_FgxHp=)(MA-Tlpt+3ywL+ExDeLDDk^YqTi`8fAo5i#K3Vu03 z5*G3O)e3$UK}N%V2R*Fd*CxVItOd;#{AMf@_2+;779w&4_@95A2z$5%O8w8T{}@`A z{#5eIg^{r49UxQLZ=jIr-vw4oI;SUw$ z(sS@V1GuAD!ym&W>T?Z0qN8>8@Hp5486widntmfgdiXoY)bdk_$QD)CZ)BoOc7f$P zc>P@0Zzf34TF1+m~J7`_ux*S{i4J$;ljU)R4)L}s@$uwkNROEoK+lc>iJI*$u3X^?gV1S>ieykM6*%f?@WZV5%WKkSxiJ` z<1s(pmD#|jcwxU8ljzAn#BVFe^KdeNyPJsLm59t(#2-t9ZH2&A#Q#GfMSvK7oG0VL zzHIs3iEvzBzzWv(2PmW*lydyBOsIE11jO^_FwwTa-V^=t{M$sNKc3&rmszbvrILuq z*nPiZ0~!18$KYGszE32(K=5`|L%%i4XivcV-4{Tnq2Gx}y0#qFTJ=D4LqCyAMKk}n zKaB`y!v&eg{q;no^+tYtLutJ+$TaqAG70sA)`FwflfEO!HaHi>C$mrbjfu!epS*8o zeA4eiGO~?5>DPZ;W}`XSdeToIBK>LNH)$mOX$vw<{b35}1mtP|Ya+>7nb!PEoh|(1 zEJLePJpFFzpBLoy%Y35P(!a_?`>{8CGXwOr^#2ty4@3XzOC;17t;@Jt`iVriZIp+< zYw3?AB7J_wKS+f0JP7o(_HVGBn29U6$F=eEJwcjd1}_Up2`16{YI9!>+xQWZkvaUo zWLEt@WY|Mo8@KWAy-nA~zxS3-TfadQ^ibZ?dDc&461}C9;IAhle+MDKKO#u5etzE1 z+Z6Ro(Sr4Jd%vO}!TPy_|0t8_`nltMv3K+vk&KMJqu;p&YsOnT??9eA`iqIkx_H6Q z+Y)8CzVNo#i+%-#jDb>}{KuF?ZzH_qJA&kHfs;#+dC6}=M7D&N{7FQ(mM4+SZ(NGj zy?9FVvVTz_xDtNF|BnfMUmg2S7eS=vE`F$$jB5sH?&5bO!cpM9;8lOCLQr#8{}+YK zg;KBiSD0wM#Q9HmKjs`5$SUuzj_<=N4AYV zzDs%$$MDYl=t{r42|8^{dvXEGsMxj=^dxq<|?hWma3>XEjF`(uc( ztqW9Y9}(GF-tpT$FRlLrGVl7`6!I^S5&l?(>&NY8Fq|6RU!D5%lG_qOtfb8c!o{!jgEK6o^sz9mEt!b z8QBg~{NY5{pGx3QiocVHtoQf*_Af|(aEu!3cTos_mFolleI}uU;+tUO{fUA!y#%W> z*gK5(rxKCb81Eld^q}VP{_hIGTTH2b$rq({Y#S5&nMBy<8sPIp{|}Z44f&hTa?|`v zg5YkQc{GZ2t_FhNl^)`#cQ3M)BDpc$H6g^1NPH2FCq zr0YziseQSTY;`@99D@jX{yd-=mRu1+jIM{1)vrK%)POpUx(H~7CvQi@>KdNxjR@&# zfi%kyvAP~fUUQ{QS1X`-G}$SHTo1_O$>#|vG%x6ymC_N(ml-(?RtnAU(2Yn=XQcOP zIzcfaxdIVu&xmC8Rz?@u(-kC-NOniW+A}g){VHou51<*9Y#BmK+Mh}m6Qah$-f>@` zc{=$kB39Sa$+E4jt^r8X5)rHGndCuNTU|qeW_0poLJEI46jp!%8IyDwaUf5hL*y(* zI=|$ov4}K6#A+Xt+=vLJbOO>O+ZbI|`}4^XL@1Z10L=@@B_U)MATK7j5>i+bTJ^U9 z8Jpa}$R|+3-$f+R)=0M6$EMZyvB{=LW9$3akxaVQgPfO>Z4j~EcqLiBouMIJn}KFR zvR()=`93i@oDj7R_Beh3npczS5V5*mO>RYmbp47n^{z`z*K5f|h>)(lN-#G_t_UGz z0eL;SgOI{WFb+QekSWQ;^=M(?2+oTs$+C!8?NgF15h3jrk?SQyY)YplPr1RS)a3iL zq#r^m1J@hLHiQ(O3nLg^1O)Fj)@~($xfXEldtY#Ohj< zEa+(cY;-M7YC;M>VqNbh&t~Lk*7a_(AtF}SyUC7-kgiKX*SpD?h*(`qljn7^x=i2n zUb1NjxeB;W_%Cad3KkpX~woSaAq@WXG%0P<-vaVy!g5s*=cTtrA= z%yrZlL|P(Z?fEph5fQRy9MUAa8adXUwaJeVp_1?_(0rC$A3|mT@C&=1Q$8cmy? zMteF9S!nY8r{p`mqBOI6Q@YGb#rDmHW*H&DD#Xvp^-N>-2P;F`e@-6Shqz?zVn?zD zBeK5nOVVS+tV>h_u3wWEgpk^RD7QZ%R9emeB<5}mAtsj#+}?eSuD-!pwL*6=Bl7D2 zh3=D#)ay#8It$&G5V2k@bbmsG%EpDDtI#dHmr`LYYyn6aw>}~^Pxo?%BVy&0b!oTD zdbOf7q>wso&x8{AsB|hB8{TCy~!j3?* zuX|w#xgC)G-2RA=4|@T!zdI8Vn~DQmeLwlI%7wIgd7yhXBj)!{&D!9BZWBhts|UKR z7!j`?=ypKFdgDO%X++4Y13~+N?#m(M5kL-hH<271CyWH-5ckIr@&X_g-P#YJg-B!a z{Rp=&A%#_Lqua`r+y@zP0%RB?Q@RPwNJOlKmE28;SZ`EvEA%Hn8?R0R?MJ#z5g{L% zm->!!uMQ!mE?04HL!_k0>|~jfJjb}b7%}fznG(xs4F9x~jQXB0{+`K}HTC#{qJhTOE;-qT+#cvO4M3W@P2*zyUN#H_1o=%mSewU%3BdMDkR-Co$q(O6zReJ%bT>FHXB> zGSU=w=*|Vn+C85Uxv!_)CX8G(#liPrwR;&O$HU5rIR~rVs~Kq$AU7}~H_)})nUEl* z+P#C2*o;@;g?Q9{KO^P^%VvOh?odV=LMpBV#CM-$#Jn!p4v>GjV;JcPspteqUH28C zf$^%LIn$lSNNu>WdpjWY+!98TVDmkIoaHWIq%|XFyQ>&6?*#S-nseOG8M*sAg?U=v zeR7D&i(cyBd*FO4(A4KvoyvykD;v1eh$d)}8n|yGLU}q0xGr$Z4mEO!YYZR_-CBs0 z#14VlWJ>RaZYM$lA7041?1_#G-R?+Zdyos=BObElrx@k9g!T2~43A4Y1x%7AI>nz=g& z3DVWfO%Ag*uRzIz5g`jd0pt>QWC&RYNON~QA|*u+Kr3prw{WL0BJFAm_gz8)T`k2-T)) zpuN3236YYb2~+5#cL#SSA+b(ya^?h}>EQ15IObp=xr18`5nB>ExXlnD$#sD1M)#o* z;sJ7#`!phy_HzO0o#`_A~x-}xqY6ry4rx` z+ugY#Sp8ELpk`#?bMb{m9{M*!*Vwnn6+=m&WD&5VEgy4N#u$6}?P z2AaO^&5TGN*VpY%NZ_Bo?nXpxUi5W4jk5lE9^~BX79&FTn3lhv`&I}k2AY2Enh-Jx zko(+ih}isk!2OjGAMQAt7V-f%|EW~}Jm4OJi1p6{?uCeue`bK>{_casRaEUYO8WqJ zctp+scX>z-G?{9E`!UPWjp0-^$a&D+`)Q-y_9+A1s)&%Tg+MdVy#*0UyQ!6f+)*LK zyyr03okU3Rp2HA#1|#yG!w`2KB6h?$#9fC7rSx=YwT8Ig6Bo91=9gZFx<${}yjTYI zJmgkKq$IWhZkBxr$S}79AwixFb8kU}Y&P$&rXuDY*N5HyAsVA=xVs~S7<(RZ&l+vC zlbp4n>ruBkBE6J(uX_U^kGb=SrtrZb@N05_JnlNrA{YJ^twEk}%QEtDUpVy%$dm3% zgap6xHo~p+9C697(~fX!Fe1NTJHkyeB5$*daLbJ$u1CQeP8HbEa1UeTlT~oi5RoJ! z=huhxZh(w(n-hY5J`9kj++~Q^Qul(p<#{8SO2TPC^P>A}2ssmwvF;f!p!VQw^EmfR zMyk9MQF z)0vUu;Uu^@Au!IpgOS8lLem=&Tk6KSy)Tx}VVmCe(xzw+au7*&4id~6j~ST(>1qzTirtFiNX`$C zE|Sxck;aQDUB&J*jFg9T5zSUY(B>;pjz8YWu{rpfdw#J&ClXSO?r z5s^IGEha?u1<9uL&URl%glv8Zk?%vu1VHAviPwzHwq(BPK7k0et7he-#GOD$aI$E= zJCzZ6zh%BV7ZIC^`R=}xtXECVo$sDTNFZl{`!7P&Z7>dR3iWh>dufR44d8mq?G{2z zUMzH%AVTSS3uqR(d%sSemltLhyA>Fz%y(}WyN5Bd&p;aUFLtXUVr^dR-bplp=NG$g zFqcSP;=ajAq%_uS@)*t}To zZb5|3Oq#os@4MR>S;@8geOFB}l1qxlbKCpATS!RI=f3Y=jtJ%H2GI4sJ3NH^2*@gT zeF!mr{@Cp|)kvmP6dfH?pSZ(9$Ugx2)SZNgZKKw@GZ>LJYOOnu5ox2=x{Dc+RIGJB zU_?@})?I^$&7HMw$7y7b=^YLM?Q7lDh)}vr8T-QBK}b*s*SU!|(DOlyw9dVQ5$PS) zxsw>F$1T!2cPk@vx#eHyo;e-mVA(hpw6Ak7LWJ_m%*eiUZ$gATc0ACmcgG=8QdAXk z?_@wWxUUfswVr1=pMN|(utuiT?&SncNJoUdI!gqW9ezHyro61<$V*}Z}h zS)tnOUW17B>Sni3NKReQzS$iULX7tB+=esB^Jc}hA<+ECZ5cwE1M)+FP z+HLMAMuwbBce}Q^&oi>ux3IDVT-)4 zlRF@UbO&UI`xbEpCE*u$DI!K_%0crApVH$)hdjP}_tuvoLN>1gntk+eq6sYA zSC3?*E9|j;3N-ubF^q^k`|4swBnS7^uOnjZ*;j8M8now2lvA$6*kjw?f9PUF$etg7 zro3K;h?P@8SDt6MN{Uu|NiX_V(6tybzm{h9D=X+ajC=#_leyPcLHmr%m;-m40Ii_w zBVtQS1${{fF)KL-=(Zu`SFq!*xGKdd+cEWkd!sa^o~X-bBRu z@Nm79XfQ91L$389#MJjn`uPRM9*X|D&mj@2_lNJBu5(>sW(a2U@os_Der9UB}v{%#B5h2MJgPdymHsV5W814VmBSVN8k5$*N5mNXlybfY^vX0l&8EFb9 z(@cIHuS*cIx{lXhMC2T=e-0r=S1o#G3H)4J_d|sIY*JBMKZ%H~ai{1v5g~7M09~i*_d-ZlKu*(J5h*F^(wTM) zPuDvb=`)|SpRN-NQ*-%rT^SM5Zq5;%uFnb~JwP%XzzHG78=g)qvfg+AXnehY2zdyQ zy81#y?D*$QeF-Cj_;sc;^_7fB8+E3>mJw;A&eRQ_UEX_3xL zp)sw^`T8BCp&WbzbT!b)CC28yh2CmvAurGk7?HN+0^JP}tNjAqhiI@C%mq0Y=%FFx zZ9p387edHVKrYlXL&!=%8tL~#$QnQzr${z7U!*r84cYu9&@|EY-zA%6w$)UxU_?^U zRIg`5N?lXkcB$d&rJjO)&rKkwsqT!3P1nV`CnA(PKLE|e`iT%??jSVRV?u}-kG0V6 zgb-6QTk4zNvn3$`_3(1tGlc8|$d&pHMEVw*_8ISJ=rc_(p3l6dt2-AA*3R3U9I0lq@+lVa&YF`Rxf14yrf~~ z!fo{mLV|Xqt**J;YCi_#wACFEAzd{9xkj%+q?a=D0w0hYbm9ZbiGp&K z?P^Eeeubg2HMf)Q!ic<8)k$|}L}u%qbZW$R{Wv1l ztDW>+D~)!$Qqf5lBSPh{1=!q4|Aq*q)XZ*f)<>*LwYjrCmJsy?ysu?epE~Q)7?E{= z&bkpJ<`w|ayv~R@BTY#1LzJu*^NLw#-H#CTm}vnz>xV;#X#u*V(3skEi!MeQN<}M3 z#jU#1YO-1CPFG!v5orOs>Prx@{^_dQAVPAk1vy>yMB+kwZUm&8F8dKmMx-|&J#@zq zVroinea*+I9_yoTWTf06c#8Q| zyzbRUk3__#tB>|SG4@cpMxyo$5TRT)KD<}=3nAvWMEmKjA+8sI>pp$)8cLVnnr`0R zulq4#YPUISeZSslm5;81*Tm^cF;H85^aO>#Uzm9UP@^M}%}$1IbV6 z$%vE`9X}5Cg#me5&tl}+&F~vWh%8{Fen9gsAwf!?);}U*)Ah72{L*MAU8jPaXLNl; zN@AP9V;Ydr`aVJeIivMZM68_A`o#5C&RM|qtnP#ed9?u`&*|lA1ufM&cth>-$#%gfj^URNR{&^}(*N5pz#ydH`OY3~VK z#d;Ycr2Sq%Ue@KmMqRN34ud%eAQN;eMk>{Yl8eYQgao=K=pBeyT@&<>jn?y{fNP>& ziU{c%1IVj-O$d1fkV(4wH}yF&qsjF((Mr`DXIl$zs=}tw(i1+SU6jEXQTz} zTNOcTJX`lBB(P_;eg_e2&um?Fv-QvCplgo47Lk&o85h$o!(82wkU-8{y$}(y*_`5@ zt5=5*^FF|vI-8Y030P>E08Ih8rcAPtl^<+jC{YqtQv7W_<_8nCo zxEAYo2np<2toPrVny$tANJJ=IhXB_S-3k%T9YEgIy%8yioeHhiaeyqOhE(=YBIkD2q><{a8qJ%JI~Rotql5)x?Nsuv?d+8+ctTQ&WP2kA2Bf4w6u2U+a4veP3&vF2`KvS4z#xIX~#r5g}a>)0`B^7^#r!IK<$Ox%jsW=ye%s5WeTUwUY0OELvB0%MS0O|#fxD9i`9;@2#Fo`x zbsa=(Y57(6`_1SgnoTFYsC-?Hb9gO_2o=!34 zdkJM;$0;e=crTr4&-cnQG8|6Zy$AI@-z(3^Yg`NRy^4&iyr0fXZnG_(^8R<4q zXlgUEc84HIMqUb#dW^Jxf!f}DuK^*ki3?yw7SfgP4JRZh3HjbxF_VhHcyie6>E?S^ z5fZ!yQsmu(i1k>JHv|#uv9ewzXYV5H8*&HwA&J1#cP%@2$k^qz;(3O z4H3$(3jsOCn-D@;0aDGI5kfiuQp0;2k&>bX@FI}WUekMzkwNg~yylIF~DtZG_+gn4DWAot` zz54@lvUg;Ds;-m0;}9XqLy+dw5c1+aa0|ja8xhj=DA1hh^&vS$=4`6DJygg0Hz7eP z>UfVMVn=9oylo*lqd-m_FHvCg;zdAC_v#@+sW9!~8QupW1X>@J^u7)uuK<_pp=6pJmbzYjL~ILL*Lw*O>-oCguZWO0 z-UMA|dTtSVHMm7m&pV5ecNF!E^}GuhS@#1(rB?AcfzR`tCnB6806Mn~kF@4Xw6 z^ApHv;FT+D^VHP13%p|xu{G{O?|4R}#$D*0LP%iqge0K_jlDXA1okxc1|eeY zY3$8MgzVV|v|r>E>|@hj0gxu%ej%hHAWgkv5h*EZ33CT?Q>mF(laU7jSqSC1nOBF9 zKzlQ<8zNSFGw%~bNc%A$`4X?vzUYlu-Hxy$4@h&b4I=|OII1=x#f+F0U^A0y?(HBX z(A7MxHE!EHv-byYfMOxiq>9q?%CRFi8Qul zYwbl}5^L>6UlP08D=cqx*_XuHcqb7Oj2y1@+96_J61&#x$B4Wn*3NsG5xFILoj0Em zxs7|hw~CP9w&@L=3Th#Z#{?md5%M*1*>nj_m}^HG&87E%I7nA>*oAql&`3V00;Tl) zClw==5b345HH0_nQG0hpNV55L;~Tt=2N0%pR2=bf6d7CS zV7fYb+gVO=f00xBVAA!#09fIJbanI^Fj99S+zJAuledwPy;i~Q0i^3@ZyO_%c|3o! zcjO@?=Kz>R8LpeXYK+V|7!CtLnmc>78Mz*Q_4_`M)7dL`C~@5di1G97Ud6)*>8!}Y z+r7_^B%~bs2WTo2a&$MvTnAMlq#<1YAQq(l1T-3=sJh>0aJ7 z#1;Hrc5m-$M&$RhLkN@vXmC_-(N!qFmu(UGz3kqit5AL~TadwOzhzYB`*?#mrBdem zcpDKJsxCOgQNtm>`gp6W8E@EHaG$q6g#6YJc38ZP|1>luN`4Ewzt^QY`S5Eft0tER zcn=>>Gz(#+l#rQ-^i{{U7vv|V5kC*`3Tl!ZsXGI_I*dr&8Q}F}MC#4}uU;+U`gVdy z9?r*;#NY?=GJw~J!{M*~gh}4uJUaJ#G&LuOIih<{cc-t8{0P2M)8xMJj6NzRv z)C+?Q^BOZ^)*ubn!(K~9PC13j{3G7nI>dF|f2d?W;;muiXINvL1QXmxyq2dE&H2k< zeHD<$y{8zt81{U}LMldhGZ|S6h@pAP+wKxq{^O);w6~=$ArErfGTIw-CLzDPPW~C~ z)vHIyw(0Qp2K*cCy?!$yy8to#P(JbycLKHQD0vNtNxIK z6TEWg8E??9I!*>;qDLz^gc!+_JvT&S-T<89H3=c+rM{_Ndqn!GLGYTdS=*WBO=sl! zhiT1xn)fjy^3LQm?>9n%cP6KKmCm>JBw&O#%{wiGnDZNNc=ZV>{0e?W(Y%H<-D`wM ziMsn&^4N5*6(d_kF@)d>r_nyg zD+wX)wr1#dee$3v}r8;}z3&tZe=3p|Yo zm9g~;;g_$y#vx=oAWOXVh|t((5ollTISnygY6*-|J_TfzSDg^Fc_6G;uJY`Rb}MG z(?L6w&JEr$M94yu?;E_)gsAEBX#BImTNRCDxTRF zPN#cKnMT9vli}LtwPeJsHaCXXGPikc7%_8CQ%|>f?L%^m`b_3YJstRY%%goIkbJ)~Bl|5PngYKDBTX17 z^y@J4?T^g=v=ayFC^CJ414MgPe-~qY*hr z_|HV-9N{mD$T`A)9}!CX%r)@dj{h?v>tY)rHJ@)(sbDBf zJOVVw`2!*}$NLiy>7};7cy%mPjGF#3;!+!-)zaU<$zi|J#YR^z^%Wy0rj^Xv{(Pjd zWwo}yI)s>;zqS2jGi&n}s8J{T&k&+&-tMSp!NODgy)Qu;^*o$29}h?!|3F5*oD3%# z06ERC5<(^ca=Ks4hsH82v>c-)un_8*LloErOt3Q z@Rzhq(jVubs9il*ZMhTXtQokS45a zOb%QV)400cmR(nGqzUVKCkL(-X z{O%#d(6sbNvK%A%KIpq!`mZqZIUtLHtEIn!k;|W@G34d`7DlcGqyosf+^>2MrQ(ab zX@&C&-)CeqAcp1&zZ)T{)*H0)cBNmxH*%>ul^nGUbhYvuA!2_&u9ZKAXwVxgk>+#e zGU@shkk)>(56LlznG;>@w`AlQm_@D!nl}D=M0%-z!Dy!l#((Yno_&d{@E$_0^Jfu) zy1oOh>-|lL*b)9s{tiZDgx}FGd#{mGqGVmPv)>L88WH8yfHiZ!DFZ zZndtc-!1U&92nij?@ctYqy{^#aQdN(KPV)pEXcXVe-#mH&u#u3M#P@m{r4CVd+ziL z`e8~jT@^vjoqlaZtem_3x{QdNd;F%1h@8Iudx%iFYJ!};{su&By88LwG9u~f=kFjS zNLN39{(Z(CE9XA{V??Z+2mE!6h@1!fErbMe9`NftVC9?!_Vo8BhLFa94E1aGN1DPi z1L?HbqyG7f900#>-u-8|U*R`lq-B7#Bt(^c2i`CPIgk41JZN>@3dj@w<%AT<{fiNP zmk>=4pc&!!A85GN#ZEs1ZihhGeAcf&*dWvb3;~+w{ksvdc`@D}#E9fYu|JX#$%_eo zF(SRxjM}soH^Hwu)JPtzuGtUX`3K1p{N#5qU12|)eWF+W21sLfJzn!$B0_obGH^}y zyEBdKe@*k>iEvHx{fCUMUTR7QTDzFx$A{T;8C^5{vWVDvG1D&}qWN%!QZxM{A~bXS zT8NN6M$R0+KO()nsr$xAy_-hd9rJe+P%zI}`{rQiQS04am6(Gy}L5~q~Fx)gL3r+TN ze>EZ{N_4&N@Bg@=Azf>M>jVF2L`n+HnaOG3!&QC_M5xr66ECa$`iQKHT@Ejaow_%i zR`p+Gq$(ih-S`jv2_Y`?p4Er`k_gvo|D-33_L7)zt@e|Mtc#rttCAbRp4I+qi1bpI zKLM>Z%uzp1n|H7A7a|R%;yd74O@*Hs5;!n#J}!1YoZSJ~0o zbsdB>VO`yF;Od>m^;HgB+taw3KbzgcHb@h;aBdDWE0VesxELT1fNz7wh~75V5;&U#7KwU-}~> zlE3u#c_B6JrEyh68f(v&{{1;{4Nv3Be=)nR@<*vzE(Jzf_TMk@_u~A(&BeHW{J=3^0<-oNgjqCbx**)J4X~Ldgmjl<*|g)VO{NC&Cb;gX~JBaa^TvL#9p*++96F?*UB8Y)~9hbeIvWBR!9@pwIm0w)oEM}rf1jH z9BIP3Ud@4PZW>q38QFCuktVF`@f^6uq;VC@%&x0E(u8&O%7JT88rL^DaP3Irx^`A} z3%ejq*uwX6;98T$b;0cHx>_PlSl5CaxK^Zboi!)BuBJ#6)-@}QD|+hVOMfBK&{HFQG1)uUSjN+1OE)id#w$1T;2bpi6_*1i07&O z-ZVI@1-@2BfXLP0{YESE!M#2QsOuDBDoSy{fPYc z2%JzbdRo6ie*6gSaMbG%8aryurSwU-;VmQIQ4icqe(ATE_@*r+`4Zj^`4b1aCpR1F zxbhoVc?OYm9SP|vEnQo{9?`!u`t>0@cOPB8S~52`{giL{Dpz|AeJ<$|Iw=RwaycM< zi9laz-^1l6%$FHY1nDhJo++P_zS6#DmTSv#svYV2-r@Ak!O+%+sNT}(!uo&T_q??9 zmnO&5yT96=Z{YNuDTy86tgdMX$dBp%*%_Vj&ma3v{xR)}kz?xF&g{ufmrc&jzdMi* zrhXbd%h{fA`I7RQ`Fke5(s9#1{WtWLmTy!p6N>7I?FXb>M)SEe`dsDaPDkx!Y5887 zesj9t*qb|jdU+^aZfTthQ}*=1^K>v z<))9T{+OM+SDvHx3i=na%TXtzpW>=Mh6yzU{gsFQGUf9lI0nep8SC zTE4=deyw`WXor)uu;*$@#05Csi>uRMzuS~!bBEdBradqtMl=33@x>g@YC-z4$zO=$=X`Z2@)aOI{Jt#fDMCHQ?p>8*^hf0w z`^YW_^%%LEdA>E1{ayA}O8-dkmr4KAFkUzQZq5FS(!X;n`Fp>{l-}_7sC+Z-H}XvX zS(?1?_tNBy1AyiM&B$<2lC-(0TB!uo_s`Dm>7adqS=ls_jOLij)MdrZB-?Z|N( zjQ#N15ZAN1Z7DsO@XO&nP(wc%$Hj3q7sG_w7v<)uqj7yDUp-&=2sA9{M#N zmrUg=YB$nV0+IL!?x?^GO(TE$ zu-}*eU&9MB#sdqv9h?K}M7h`-wQG0B55f8ZubuZa_P~w25hjeQ{r86e+TTh?nlMjY z4fnnO7wkQd?cLpe$R@8P>V?;YZlHYYJ(~O_@ofBizLUSCo&Ue?kNP-Xhnt`r{?+M~ zc22@<`h||xz2HUOl~m5ZK8W(I>uQQmhSwrYJ8&1ALN{T<Lf05=Os^Jjs`+y;APP9?1vcqtH=x@xF0f)#38;$Ui83qEFHxd}5D; zLMP!_J;@*9R|)$R5&l(86TOd}8G>5rRuo?40fU2qzo>z~vIDbEs8{es_R=JH*07}-hk;3PWAh4lxN3pX|v zklh`yKEt@|QqoW9f)n6eUfXjyehBWMnDQb17rhc@DsSR9$-gh)?NcL1(jn;*ITDKf zZe61P08W&L>j&jeT=hD8=XkdCiyfj@!eMY9-{jM=@XEW%m&PTer*u4_Zbdry4T16H|BL=i`oykmbeZ`7C@%WVI*F-YW}U>?Euo}C+G)b!*Nw2>iwFI7d>Z*f z@96eoT-=frX)y;8q-HU3yfsvo<`S314a4|w;P z^MlrnV4sTPHF3SrQN`np-gq!xIt0&WIZE0mio@&Pd~QqXxAgNXalGQFD!5)5Q_*<; zYf{UD_-ArC!livV|7}XYv~Lm$UNVoqi(S!B>?#BAq?vLh?RTblvk4?mzF)&}Y4=Dz zyx?4u=&Im4ApA}bhoZk0ulweTKeOGW+fh{h_4Siu{V=w%}Fs=$Pv~q-Q2==p%s)+MZ+ulfj)E&!(?XL)T*dBO?w>Q}- z>yiJ0JLg949C!oM*wLTU(E&qvM~~~fSuZ!`ZNSH5Z#!)7;7zFZ6c@U>Oefzn;ld~3 zfNM$4VyyR$8r+BU4aR+081JXx(Rf_l{=Kn3q1wVeh?$pMf&BSu67FLPy@ZY$#PVND z`R*txuW@x#$5ea7&NuL!oul@Bn(PyQ3oiK}akF1z{7P}SP0Hs3CI6&eN9nKQd};)* zE*rl$c);jOsJF1(<*E57Ctr=gctIdv%0J1An2?8BpnN| z+(^39{hG=z<<(I?VS3`+-X*v_%VWRg^E!TkqIRQ@>s68ZX_@g)8TBgW%UYl9-fWL_^p~zo(it-_!^PzzKU&wNb0y&xdOZjE> zm1}JD!FzjfzuD-06w7T~RXfqd6YArE%HJ<@;F zexK+mbpEhD8GlFZ6Md2%Sudc_>Xo>ZM~PGW1MLN_Gi3IUq&t%xyXq&g_b@oYZSsvm zYp=w`UWtpnsqysu6nit}Qzm;er7!AdX$L5@c1wFe?JK;9$nC4xO`)ZixU~PNahon_ zm*u;(_fb944@tW#=Mc>KZ{z1&!;u3Fy`wVm|6c!Q%8%VGkMu~rw(W`N$&~+@?8}6U zJSiWU=%gLX^j-L6yeaD$gJx4Z@-FZ9riPAMdN<`O;WBQ6Us>aQeku=fp10X?oP1xO zB3I-=zreVZC#r9@o%nZT+!Sq>q<#wB?@c$Yvp77Sv-=X_PnqZU9z=eSc%qSs$CcnR zZXU|xI@xDv058#+dLiE*9!dU|akJ1#m^$yY^IaKd=Jwrz^E9MK=6m8ll4H)>gukcH zYg4~R?XdhZPRmV?!}BBPUwOPMe4>v+N3Fp9i?~`;3ET($_(ixcou|Gy-NeP-ba^M2 zG5&Ux&+GBh?@)P(tI16$-GbkTaT)(7RKJrAe_lYBNgmPdy1d--&!#Um-z+Zv691*r z+5Ab>x9j}7n!jRK)W1^hqW;a5F1K`ME~mo(=h|oeEA3mV|6zTT+r3Qq8r&TRMT4#ZC8)XTn{dIUFhu0fvJ_P$tIKQ#|k>uY~KNFv{YqEYS`}7k3*CeVx zG%vU7%u%{%T=)g2`8)iY3C|y7J|C4Ycxq_ZFRtQqf4fVb=n;QOJd<6LE(xP_g3G#( z#3dwL)`cXr>67o0Z^E~8J(=?*6QATuH2rN!fFEc-Q;F0PJ7za>1xGx-6cXPXt38(X!j#~7s;g2hkH*FEg9SHXyja(UTL_^tU zpnYCAe~J6XarFuAcPG>a4B@?ST<^*BJx?8roEy+0H0H!^CxnyzzO^#eE0MEb5#CyCx`RdQ527}zY@HD48PledSO0{dgFm!N}r?1 zk5<2=bH+?C7yKxGkWkJ!9CSPRwfHq-hxo(NzmD?&SP$m)r>~Bp^nVL7ja-VuJ#LOm zKOuBqE;V!s)fCr@VBCr2!}b$VI?@wUub^KXMdy@Y9EyCf&c^#FR34nbKjdFqPNjd} zbgQu!&V|&VbY6~jz&y{RbkM$QA}EjYo%F@kDR>?tp~R0AhhO@b31XofY<|v!aGsXW zQ$_V%%K9Wf$S#Nd2I<1~8}3VR{}KJ(8_#zo)KdOVcG-M78OKLXu%BEN$5)Obe~A6? zJ2okJOnuINIfVW4Z|>)s^1PJdF(u)zc)!UB;xFPk8XM2_{pyiaPUQO!==Ycs{&sy+ zzxUyGQobL(oW3hO2j!^qjwF9a<3#7E&3NAjcp~(pIleE3arFYqNvIYqPwW$WM8Cx4 zyVxV&B`*3e8BFDj_#7qihjINAenX4bK}DYUSL8{&7Teny?Tf3t=O9f`&NAU5@1Uzm ze>QoSV0p0lFzObPFLJ&)BUO%kkLnjW!Y6bT+VrpC`XT2&BqY9=lDK~i*&*dn@{RH< zrgk+>=N9aE@>KTg?daE-dWz%sa$NFL%AxFUO8YAPQ?B6`Jin3i9rxgP2wp;MLjJuD z_X}-57nOS^*U$R!ZimT#374;>dLVMgTuJhts6}B@4xeW|QMnTT3ish)pQ?+I5BDE< zyhihqJoOy5|M_Yqj_(SToG0wg<2MN}?n`>NH=yueyuTR@qwTA-o6=8G`xjTUi%3o? zZpRTqcM97}{YDDS`(VA7_X$O>^b^v5QNNa_NPa%cFW`QyP))@4t0>Sz{MIhwPpD$tzsggOO*Qse zyHfoH=i#uwPH_L7r`%Rlj-vgT*eCgs?R!)Y`9Gn`v)|>rq@VID!S=#=(1VN}`J9gQ ze2vPH{1*E~zTl;omv~SPQt8w6J#-WKC6z9&O2^arYn)5vr3=@$sGMC*kCb2Hll)KD zn@KL&kx*op<&*q~Pv#TkM?3G3ag=9NL#baY_4j-qpN@c=)%f+?TrxU92FyCd_~ z{ZAr!(YVZm#yv*z*5N*KT)lY@mEZArFO1$bGWP5)x}qgizoO^K5ZO~|D);Hd3s?V zj@LCLl>C)-s7#@px4e?``(D1^@+!}l$=?pYM-@}Q;JSmO`kzSY+>{cBaWkGLNvMsS zpHcpmJl@F`Qhx*Uz!Z8%jd+Xn67HyN7>}zSJZ_HCKUs~+)f0oMJd=I)yqm0}QTdLm zLmoEr6P%7bPDg%l4)c~bNsgQ+Pfc%LKu3Orc`^Dmro^AM|3UUp=%}~(-h6wGC3zGIUHW>NjH@&GD-$mDm)cu<-{8GRD80QOG9kP}$8n)Q z=Sli5@l<}hPx3wU3BBBFh|)`YFYU0bGgIgU_i2{%{88?$Nq8%-Ys$Df8h?nt_kW-4 zj>hF)!-;&JJk{?pl?kWwarV50$j{_&I+x)nTHlBDNW2&Az%N2jK1bu?7x^xJlQ5J2 zGkqud@S8A^`xjELb`{T-pN(;z1MjEcIVHFsw-|~O)FTRQzGl)J^+(iylFnm!Kf>X2 zvxGxS!tvDaaX$Z*!1ofv;|-!u|1SL0p2GQ8?vF)J6u<02lTLeIOz5ONq!4}+xD%Df zXk7A%_7Utp3+YL4dy=PU+!Rw%zr-Ke!anRT>7PW7*cruzUi!JjB~)IcIQ1t9CEvvl z#0S4h#eNYv(w~c7!G%AHN9B`#kt^dyX~)Db_CCo`3#k0bc^nxZN`DybAM=@BzW>;t z@=M|;!>^}=%Manw-X}PJc70rXat1qPyej3fFP`^}2ltJu9AfNqR2lfCYh%~7cwf

    $OdR%Wct0XF9#<21 zzcY%DJl*6|BIEZP_&d?%1$5uCJekMPcsQ;uznRL%|fz{+sc>x{p?}VL-X2raG#gr_8eF_p2uE``?~N>6OO-Np9<&OmM@yGvcD<& z@e)cq(T?x&M)T>s6_h^|!v4&8__2~awK8YZYfW) zk9~h_vQO?&OMRjH)v(^ZlD^A%8p#J4A4_=@xhL|xjPCn7!F^w`rwN`PkExS5oQ~s1 zN6l((^u*PfmykXg$I>|nN1Zc){3+`V6x#FK(mrLvX}wa$>+l{Fu3t(#y`LxhY`>k4 z{WHuD7a2S3{4RPwO6*>Q_aW@~obI#8zN6J&xtQcp`eVWU1o7vA_}x)W@ZFoZIt=3p zMeTh|W&1An5I^kGVLu`FYiua`h|bzg>4o34!*s)b=$BN^B~Iloo&mRfQ97|pLV7O; z`fsjZ63RIu3B&$2^D+G#l?$<(>aV=NBj<;ueV6-9a9)7l5t4U$z9}$r;2m+?&&@CvT?T<)cPA$sdSDNk}gNW#?f_10hV zUF?|4?V4;c2y~MaG z!{`2`d`826^FFW0kA4?CQ%LU}$#^WTj^pvxrqhhyrQM0EHT>=Y;W4%I?~Xd-EXp_1 z>je9nYKH14Zm9<_Y~zj&F7$9!h0YI)#?H&|MH#2 ziE$Rx`C>_r+%uH?mwH7w{2l<7W7~d8JxZm^{(S?^SL1vy zJQ3WZ68Se`yAf9{Mj5{*xP8e}U-COMVlRz{E+&Vr#`}XKKrL2qul>?x+MQIrH8)f{mtx`{EdcEe+0MXFX{)1 z$J5G@;8e~smq+Oj=suL_k^1eZp1r7ji27al1drO4T3&5B#I9)l5PawMS~=P3=QJKS ziG5;Ert(kp1!^s~SHegAbe!9V1h=<&+`nh9H`(f=e5ZOS_c-%2mgC<`PyS7BZ^Z9% zE?&|txa3FlyZDoE+rA3Fd>4NcUFP(OJ}QR^z9(z*TfU1uM3H4euF6ozarusA8?|)YQMAM&YN9KGLzHIFVea{Qp z3F3owO6>3B!8k*3%7-|AmwJ-9pOX4b{!I6q5O`&9jT>PB8Kpz*h(W@3LE=X+5JRl@zR z*b$W*jf);BUzz$*kwiS1qk^b!S1hKa}+85kJcNC=!qQH9MZ0-alTSGnI4FZ^yw>&PuPZyStuRe`P8UWJiMM&wJ|SpIxsr z<-^~lUPkLvs=xks>SNT-KUP1b9!dJ5;qI=t>GH+Tnaa?g(OLW=B z>3hZjGGG6r^XzE8WGYvJ?`bd0{#B;(ncfda{VVm8aH(HXe{C4$i^eHGEWL~~N)M&J zq^}D_+t>efJ)d1i`-kKC9pEeQ9?^h>D z-;>1Dkr^VQ85##GdQsqwg~%J)VDzy3Xw zzIfp8%TFW!AJNc+arMtSln;_$J1^%_FKoHj6HA+yv5%f7svLxl5B{9Z@vBaPqS{TKfIKHs=RPU_ES_4!fo<)X*=)IL)f)oc5cOy6nz zkQekj^nL-H-yKWk@IpS{T!(-6LdFjgM*aW!I?7*3mxOX3LgEr;vP=5OOy8q+i(V;j znfP{9?#}IusokYV{4V+=6u(LN%oL`U&$z1lxyc834-CVYI%>9wJL)u!*Pm(PyU%_p z4-$&~Qf^E4)9%wx@}=Fip|qQI@jPuz&F1kDh0*a5yf4;=%02yVPAqs=Th5`kVL4J? zWgbT7l3{#(7x72GQ~N0Mv^+k?4D&yxr* z7rpmaD&6kV`Lo+a>6Q6yL2zz6YTxD9FC^5FxXzrX?!o>cUmc6_biVuecgL=%V9IYo zjX27L;?MMZf^<$ap~mreTHZ02dxUbXJ`*0TSKp5``6K55^VB71r;L;3zKETFh<~ZS z$&O3EB=f~g{8757{WK4>_dG=2@1@&;_ZYIv6MvI^dBHp^liuU;9B&@qM}c>gc%B@k z7rB&=+36+yRIbzMqvbGK&bwnh&kyQh)ZcP1f^eI!Q99An0p;0y5|U2&F6~IBcH&!p ze>69Gsh`o%wj-tMiPB4aSNXEh=d1Qdq_#JyanWn%G2*Z2ctiRdY3HMH!r}LxcpUmi zprRTarj+d&Nu1*WW6G4$1gvab`0L9!qDC~5xZsGN9HwA{y!R*{wA6( ziHjXn4y`|5xW=@Hj(V~SjYBih2~KvxJuY6i5WN&SYBsOWNP0*g+@r$#f(b?IJJvs` z-{tq@cQg}e_eIEC<@ z5&9R_J6JEx@2!2CxF0+Q`^`L6d4FSfzB>L$6BY#Rmy{c7Kcs%``g(`7Kh$2@b?S?F zp3t4o+wFWk*y^Wt$i|~`qxv$*75!0p+2YiW+jKA)+cFS zAzD6n*ZQR7L#B1-)cmmP)TwxSKP7U7E}H*>N9iP&L-bWHU<$I=hYJNDX^n90mvgItwm+B8WXJYwM=>^Z0@6q#Q zLZ1m2xngH}T+Rb!>R)zOz5ct7d;e;?rCg?#ANZZQzj!}S^htgBv+Gl8eUS2+zFwK? zmp%3BuP&c|*Y;pfy-Hn=%2eN|p6{twd+L=bFA2T}WzVDkS>yh{+TVNHgVN^Hd-`3u zj}R>%biX0nd6@tGb=*Dm%#?e1x8={9A4dCE8AnIURg`Ye_?G$|sfT}cdEGO<-Fd%| ztsMWi=Z)Fyi`KtA<6TG|;g-#W*h@=EQE^n23oN6W{a@t3Km(RJSJ^RuWQ zrMyWy-TnXQ`h0X;CFzd(L+GaC@9o+7&z^qaztb=LUmJf(d6WBu)Xrsp7cE!%|LgTw z{3rdxp8A^FU+(D_e_y}2yV{v(`ILUdOW*H~_KUfX(?!38q*wN# zW&b*Jm}y`7ub!{$DKDk33;bE-McR2OHxmE5l%GuR$7FijC)+6~nKzjGY#>Xv% z;XkZf%KpnLrjz*Z4JrTZ?}N(k*-E{m`_*#4Ii@5o_pEQ>cZt5rH}=8r=$12KoathG z&)@$3=Hd9eF82O5z0Z&z{63e+r~BS=uUyvEW2$RcBj1KXPxrIq>Vp~dU2u6PhT4mm zYSV!F3z8EL-Zx9VFK^!sk$2jD#djU^I9=A>O!vxD?ROOU%lc35v(tU~gzAcZ%u{#Z zdt>?P+1Zp1kxzESSdPQLgA-Ff{6^`i3BEUeq2KAYzn3ldl^1QH@%$}s6207Sm)}>G zkbd{m;otp?tI7PH3gIy&-|s^_9{lcn>3D+W=nBtjN1SE z?20LoAC)J1B$RZKeg8dwMD1+Eev>fjhu>>&>3lZ7$S;}lHFNoh=I_q^nqA+iRZ1_< z;tvU4Zuylde=MF`K4;2LD@Xhy<#Bh{6Y+1V+-SR%9n(;{6+1^Bv<_URZS|l5=P6(&iT{xF`wUcEyM5c%KK%auZB@VpNd6o57^O$z6gp~I!_vOT16=4yeoW;SI%?w*lAEbL-qn1g@vfuf_s&z}aYgwU z3%(Pbyh~_*pFWjOaFJ`}?2Etm8B-Lde-}HVdQ#(Y<`+E@io9t2&(@z^Z>Ds~eB;06 zKk=)_<5$X;gt{N&_T56ElX@+`bHBUomvZqq+fxJUcY@1bo*IUD=JFV|Q_7p*#4qJ1 zp-4}jB0ccF<}|9`74Y7wqsBdA>RVjBIh5+%=K1vff~qF&s8RE&J>UC0gFA}wm?Hj| zs`Lu+-8hiwx@w9a`F)r#rkOuU6mZk6Q&Z4-q6JqBFbx8hmI`#W!qbT0gqpyCbpscq~(u}}DE z{^zJkI1i60X|D;7s}FA=xov8b{(f(mFrG$F-{XqDCjvg1U#7~9F`d;%d=?kI92)9l`f$wFDE@h zCwhfm+6NhL3q8f1fS>4NO3JUqOP3R4dmZ)pXwoly(*9)Qm-V0%u-?YhdBjKjarN|z22Zd*^Md@3(jAZOUpgI)J7B#9*G=Mz_!6oNuX~9c ziOV=;5YA^DwX_7(L;a%sO7Qr?+OdAI`R)XENu21VA5R3|MW3Wk%JXO3&dNIj;+M}J zru>mm{7s=9hl(8Xvt5UgcMkkjl#a77OsLauB)O%R--LSV49btvzsJ;D*seOkdR4Z5 zNbD4Q!JfyzQY~TBo_UK0BchtMr5k2XNDJh>4?rJ#|J}R%a zACmcAruKuz9WnLAy(S&-dqa;?dio}feU3UQ-^AlVf0c^Il*HSXt3`P>loIf}+F zaYf_DMBrB{$1$}xk1uK5=mg)_RU^BkA5M*@x32?nJt$v&bTjFve1&-&w)1gy0{)&& zLb)gx#wpx?NI&~yG4Va~4TU@Sd+F_2_VzAyyyNgVF{ZMOAG7Hr`yK9I()$a^zZXBE zbV$9HaxQ+9@<;KQ8q4kXcRi_`Zov7y!{sC0-_n1it~c2A1RNTrbolm|? zy~(_uo2_5n%;P<2kELCVh8v-dntCejqO`X%?yAQ9{qZ-YmYXR3r$^KG`M*)Um-@cw zJi;aPkD>UaL6nazdEOV5_X3U&9rYW}bE4mAztK_h`&*}QJ0_v*cS(3zA?X{1A-rFn z5|6896Da>H;k-lUXO5D%^uOJ|Ci|&hg?5bN^8M-`&373e#{<7g|CXtJS-zJ1))D8o zj%vpHbYF3OmHeRmvGW(fX?z=3cVT;%P#`9-qu7qw{!Hd+Q9o0DSwCm{ z9*d0Ar92JA^$bTz{>!{u>fwU1CjItZZCW=@sM~vxU!rIFi!&d)L`%eC7nd3vvS1 zYe&gCxAYrbu|JHfwiqUOT%D()yu)Kj8BA4+JPANZ-eo7J!7iM`Nlq&e>EgK zCI0ybls<|JT`ZuJ@3Q_Yq2P&HBrjNp!2K~NIIl$gjGgZX`&4y_FEwua&rGW;wi`6tfn>h`;o6G@kpmuOt@)b;szulZtAUnurTx+Q%wACvTmonoJ~8@oG{c?X4#x`Ow^1ebCm?VyB$ zOF7Nf|4F|m^+oD0$#E2oi{pywe?l#9V)8Xl-OlGIqT@s=XLcVz)|+yp%U7S`e7Qi4 z;B~N3JRhU|SXpnf@Hd@&WBZxer<_l@lSi^z@g@8J22d{5mM zwEM>U;e5{SM@sqHRh;x>_Ft-BWxvI)ubztQX)#`pb$C72t_z6#dPk7IYwkzw**3lM`(&3~CE_T%y% zZC9i}l72+WeWp!`0=P<@efQ$GFgp39K+;?#PQKCXI=$?xO1+D&yOq9v zRiG;VLiYVx>qXJ=(wP^V`jJp=hMRhkrzU-8^yjPd5HC>ma9mcXei}*jsPuCeF(v13 z{#Qb&-?IOZDNgp<`I^KjUuB#j>HGWBNqLoiFk5`q4W?Y!bW1$yAHhYg#Q$tMk}u;& z8_In-vIBlc71LqIdy;Od*MB}P`#jQaMdMlk>hHO}7?Y2OF(_a8qr{PuhF z+zrip;aooJC4F{1On$$(?lmSoc04ckEJQws*VSPD%yvq87U1`oqEP6p97)HII3KX* zd*u8O&G+Hl$qkhLLF_LI({WiJpmCa`WSl_qW!)>LCdocChqBKn^M>CW%D!Wd)5u>E zm-ESe8DDe1Ne{dm&*_$SO8h4E=Z)j2K9#+N)BiK^$v&Q}FUvZ&@KI>b?aBO6_BCZ+ zNcJ(MzP(t6?2gJ!J+A@l&W9ShxDtLjr!REnvD`W8I1FQIcgekZD5an7yT(*h&#v0N ztMqiAP}Ym!erV*LQ?C9Ww43rVs$cw1VR}AExsm*$^>BMHgwDmu`E)p!hv%T|_iXes z9+UO76L4KCp+@!Ma)sv>#D8$Uir2lO>4>&d)q7C+m-3sdpJn{ihWD-7KS1S2;&RXa zv;W85`M_&6rG0)QBlELStewLQH6Qf7f-b-`?k5_u1|f=6ycz^FE*R*=K$C+Uw7?uJwQIwb!lV z%A6bJzpG$<3DZ+|I?Btz4<$d-&3vO-Di`ASdVOTF)yu>6Jv90cO;5p%*L^3cySl?c zf8y6W86NYI^C8;T9Zwp5_&oH_a4o)knS7!DtaO~JzoVXWQ?@~KgnrJ_UGV8B`tQ^5 zd+JPoP+zIv?^>QJm7n_7GvOH^j-12m*e|6hOems+!9rrZ7*;shqFBB;`4Fp+A!c`@H=AYNmrG)03qi_Rp?`#moG&@l~A2cgIgGf2^I(CHoIJ zPhQ?HgEd0$Qo&hn|~ z^%}YOc}pkt{NyQ?eYwztapLs9>v$Qu-!KQocCk@ zi`JXSv7S_l-_im1nx5GGLce!R-{3izt8fszR#Io zm-ul9-&@ds-OuZIFZQhEKi3(;a7yjzpXDdKPwl@we!5G~TVnlZISSib?myvtjppP2 zJCeHZbM7iX9^gEc`R+l?`cdzz&XXD~5e|cy1rclvc zWBner;MP3$?eUd{S9IpDLE*7 z)o1y+P^EgpcL*}eh1mhAIib=`Yate|GRoT*DEd0Hm=S)p2tf>V_>R%{O6j`PJ{McMIM3z#P0P<*qQB7I{FUpiG#rcrHGK9*aS|TCpX76f&-pm@ z9NN=;m@d|LGt+o@Pk#)L;*tbOUB?MPZK zU-jp**!So7KK4o}?|HY|B5SYt-0U&G2<%JmBX_|Q;xG35HgoQ$`rU1oJ--7;=R>=# zG&%WQbl7i){V(e=+mo<=efw#vzvt_|g2vo5Apy2u7t<636 z{WjX%?!Wo9m~6Lm{v4yc??=<}{=UA4!Fsr2w>!I1>dom3-=eE)3d1v*z z;KxZtx4G_*Z{SXNSn{*V9qqsGXE?04_T5>|J^!k>OZ8m(9TW8yyQw;E;{N1x9&nAH zzi__5eB=7dhCb)K{N=t@-#M=e&$;6ICr!p@^M&wy!|*)=-yfytIdYyc)2HYArsMni zKk!$UFGu=ywd2%8Kk3h>+Pa15XYguq7dzhDx;^qO*q_I9f3obkZpQCNY(A3i-=Ln^ zABW!)aQ_z5JxA9e@E+Nl;rVt9C)}sSd-|ivbvrZDbv?>Oe>|@&tK6`hSh?i;&-5I= z@c9^BU#b7|Z;v-}zxLEx)0AJ9iNKl2op={Mvnb-UY*@$?zF3&o8Xo zzPx_${F%M9e&pPTlcoIS-611t*He6Vq2G6*e|=W$({WuGkJY#O>oxQr<_q=C@<5aR zeyDbV@r3EyQqMnOyZHU{+460}^O@g2hUJLovDkPdO2%P)f6jHMFkLJ^G)m9tG>Dy)M+1C5H&myfaT)!(Fca@jtrgN>`G<~J})=KTsjt1^5+;ksx zR(W8#V|}x9q~*P|UZb77&FV{-Z()AaSN~x+rSUPn8(zK+_2)&}I&ZoTO#3W(Lw&G3 zeR;2qlY01eCDw6Z-nTETPv!X>hR1d>EKi}kta4XhcX#XhA;dTkuc=PY08J>Rofe#Fkc zTQ1j2n2u1t%+E^h!g|C0_EO*Oh5p0-uhMhM5ylhx3+1Pt&e!j=Q$4+Pr|Fl^OU>Bv z_YSh`nU6f*(c(?N|2BVNIQ;z%x~p`by33Ns)+y+YW_i3UZVq~^pzb>ed8;27rFZ8U+8Y6-xm|+cX-e8#rje@e~Vp}e_zDsc8~8-{XEa+ z>ufJ*rt>zoH(`6g@ajA64C@Wgzo;bt;X3cim8GN9KK}!yCw-4dy|MjbJ+XS5&f9rk zcR!EwJ#@a1&JPCo{gS16FV{E24fRg@UuihlpXuM zALMv-fKNBeBlTMv4##cf{T}z3Q0@)&e~6xw#Pb`|_Zp#oSzlT2SUyYdf2ew$mT#`d z@%`?Grf=tFmXCY35i>1seD9v6H(Liu&*crvOWplKqlw%NXsk7UuXG!rRVv5(FZlN^2hfXb|1TckF50+(j<@9ggsx<=5VObDbRD4e5Ju{yuD)KHImC z-(`BqG z->aIxbiaeWKPot$bIjjCpnI$5T)*V|`1E@oTVGA}clAe>kH4E|`l7s*(!=LR{zUYf zOWyyNzR%0KSNuK=b04|y_B_j9sJ|%r-h%0{av3{&KN$9pX}`&Q3{8d;?#IrmS9EXt z%F=Rq%%`U3y|=LX!h5d2XVsT1`@j4BYdnvQ=a?-}d;b1J`R`nmh8MXnwSSKsf4_q3 z@4Pp&{=a`g{c#`pK7Rbdb%*n`f5Z19dXDuEA1~$pq0({Xlag?|GFzoPGH^Zq-Sf`3m~ zbd>-5x@S0cz9G*4@cCaFZ{*KEjNK!fh<DDe{A?VPU(I*?yu&1DD1=5eWa=RKTSUB_5ZdWzw3Hc zrSZ-+`rbQsXX`$%oSUxux$|z1hpjwSdT#pQ??I;PM*QAv`fnwi*frDd;&Sd2U!M2X z{VE0bFTIc4f0sL^kNZv^^uL#6dPu)hwe(>9M)$AgT(jQRUeP`m*fYP_j@dYc^L&n1 z()S>ho-;hQdzIY(|B^2}KiJ9-%U`+4eENSS|28zgS1J{mX{t|M&e}I_lL-)mB4Tk0{e_kuwW4>o$I=^qeRmvCc|JZj6OF#DkR`O@% zH%&j?b6q%VJ=oUW)AitR-cY(OpZ&hyN_4_UOe7SzF6KDP&wz<#B&#d)q&g0T~wDk+Ao~R#|FSakG^(I}{v~~^O$@z8t zE^Q>;QSu$%Ic-EAv0LHyM~C5udI-x4+wV&5Dm~|Zd#;n%cZZzsre;{~zMH&pvOjr4 z{fF^~>9X>kwu_aXf8X|<`e*;ge!1>+m6tnf|Fg?o-QlG5roQE2L-i8sIlSli?ifEm zWIM%q*?r#rf91D!^S?{~-2cXM&h@#ly<&TrWgmva_Ajho3@6K;>#p@RFYx=K!gZ=Q zue5fQ_J{lLCup)>zU$v>ZfH5Iw2nr(64UP^rhc=2hn;d%a>w71AL_q{p+D+9D}2u5 zO#kKmUzWd7=UG2*zoV3ME&X~W=SN}u3_mO{93O?_jt!k(h3yUZ)r4|{=?QOPbwY|p~*sfSALDn0*GM!!UPES_BQJsacY_idHJ zZ`0c56$hwU{vL?qHS6d2JBDlz`92i(`hGauo^plxvZ3u2(_P>8it)1D{;un(Z1>J= zY2%4DzWr{Y`{|hOAKv7;sqLqTT-N$(sF$!G4fW3c*YuyxW6d4Tu?hBJh4*26mC70O zp_02w&$)jujK8C=Ct*6dZWh{C8hS`QR)uA`>W?n=9A}?m*crG zos?%o?Zf>Y+su{niQm)ocm{pGfyTvVPciz}P>y%H-$0?H9^r*hk6lR&rkvf5(#d+#f>ovJEV6 zb?YhI*TZ>#`n#hx&Stxku3yrgzh}zz>bmdK@OX|5&zYoY`e*#Dwd!e{*HdjWgjmvg_<@{IlHdY)6kuLq{?OUqBTUb!#kQr#aDIWxJ>1m`J# zY~|)$zyBdjAD?HXhx3n5y#LboPLbQwpA*6F6YV^e^jsR+)1U3LjvVj#`I>PWu@3Bu#_eJ6RHeVkY&;I+G9{Jr*_#GAPIgentS?rF7WSln13vnG_&-ORsK(yEqcVhPBp{&S^nOl?(bsguiT_QX8QFp${CuW zyGrR``J(yl`d~YNb?Bj%pBxX`csG5|5X!;v68FoUqvzTpA2k1Rj^p$Vwck*A|8L2a zl@7}LsqPogYOm7$oT0p2{|d(iY-cPV%G+O-6DtotTs|^i>n_jipXyuw%iVwb`a!{2 z{Ke!P?EiHy?GV=wzQ2B0URi!<{=Zg^vdZcIl=S^?x&L9y{f6rEe@Z#}q3TK4Z)Np| z8*0CydJg5tO5eBJmygHHeLBu&yGS#uef**23H1?%&*vPk(d2kPbYFU3KAva#O5LS; zVE9??_}s>U_&vcbWxbK>i23Aq(kngxzUeyDuWyv5Bj>X0!+A~J{_=kQQ%L4NHqHz8 zn{eF6aag+Vqcq&|?<~3A!1Qz7liyp`cU)-aJz$>czx(F;!FK-qrcP=`j^95|_47Ht z&!x$E+b?xrU|J3+7fr6)aJ|XyBe$V)pSoV!dHf!nehdQ0bVp?;{h3CEkh z8}}A7=dSyyn0fd1K4KQ!QSHPmx+hzU*}yGmDrS{ys_WsDKXUi_?_$GvcwXCaM@Tym zx%d43(mnKhnDl(|O8TI@EN@rq`6#jD@3GK+z)XvW>xSd~cSU>LA#z8q^d9F`>N$g{ zJVs*k8}O~efS+T%VXX4d3R_RYj-He0Y8#> za;}$te~#a0((eZgZtT_;Ki%0pB)jQI)hC=00|p6m5KH z{@`EpyWrhNiJUjjHF+z=`<#B?RrKL7-thbDoDVneEZt~-hl(7688E1J9ZM zY0i4dp7Xo((c>iFV*Fl;xXZcsCfjq`-|?aOZ}V)aN&j8_d9*A2x$&#~ckf|%wC|$l z*ydax-LIZ^P5k+De9rhv@9~|IKewClKJR~*m?qP8x|j1tKhC55pRbT~Mvm#a!KaJv zX)-;#T_<{o-BJD=Uf#c=_qoKL-{Xh+VZ4-=@ml(_^&Glmy2J1pF6E{EDQ6fD?ce;h zOO3DK=H6`nvfK?jTimDaEM2j?;VBER0rnxp2+zu4jUjmlkc}_TKSFLqnnsKTWfia{kinH#Gd<3&5RxEY3Vr)Irq?SM85P~hvz0* zxb=0%-(j)*7a>mL1 z;%!Us`Fx^pe`tpG^vCBkIsXmK>*pa_#QTR1CO7Ywo@M#EnerY(B z%NfJ%+Fax=xc${k^EE46b6+fT&+-$dllG8>=sg3FSd<+qai zm;86>Y~R^Wvz(UR=iK|(TREYAscL8-_#o1z(RM_ona1-}38L z+nrY5CsI*VBXj_>uby2eKX2^Qj_tmhTt3 z`}?-uq~5GNMQ+w-7QXf4oHtOGqyBcb>HWbexLn4&4K>= zclt9kb{s$NAL#j=Q%x@)dXwi(9IfX*<=hNCKQ`~!K2iTP8=fHY#>sb^XEiqYIe(#9 zw|(rM_v;#T_kjPs3GM?aT{lkGPdI)J%^CW=Zh9UZ*K4>R*M46p9q-XT3@5w~!{zT) zWQ`XY&$W7PTh4u;JjeI+?5 zSAECT^>xSbcYWR0*B!%U`lzQcogZlVPs`_x&zSz0UYeYD&unSWLzCgN-JPZLv79^C z@5|cL{~k@}1?Io>9`oZ}EPrU<`YXB5xpQN3-26JhpSY`0pvY>-Q8ncV!!h zfqBnVUGGlMabde|X6#lUW#RC>63@5g`Gi^a?DuWGBW*{`9(wodCHbBfKG&n{y+-8T z{jKSX=?tH9T(H=WgAe!PmMnQ_AMSrO`^cT-=erzNmzp>)v5(2abtb##duFT)oNwu< z`#I*rDksCq`QKZL+YGmHJHyY4H|sgqbwhuAuSR<_V@G?2 zci9fs9+_TqejN_u2LE2*zW1e_Nb3i~qknT3`|)fp8JC6bI4-)XwZw<=@6V_DuI{*> zh3jHrI6U{(@`dN*rs-h2!Erd{-sjvFdOlz3pXq<>QYlyXor{|+T_@}B-sS!8 z7ZzND7fgSlyS6!TpLgaS?e7B;PBC#GrYH3OpNi*%?X5gmzNY2D%16PSqU&iz*H6s` z?g6crRZ0K1=cDG|!ohl`mLsH7>ubTc>qU3uR^slv`!_incsZ)P9My>&)ZZv=*VFmJ znZ7^cJnP_*B1g_0f3BG6@4BDu-!rg3J}sxY%<}f$*OI>S z@_xW+){auY)Fa<(@V<-cGnJeAQxI-z{l9r5U@uM_78O7p{---k#@@bz$0@JG>Y1{r-EqSv+RO?kc}O zC%m7j?$YPHzgO+?d)?k2+s9=uSh#GDXwUJ4?LSDz6Q%a$`k`KVPB_ghy)l0n|B41y zj;$T%I!5gG zRT56@&eVBH&RIFZIX#+>1!wv#x*8ofHE<8AS(W5hef=+NBIUh-52wn9Q(f()BHV!Ijn_6+N9yIK19oO-8x*6!upV}G!6Mtk#DZvXA> z`JOgT;%9j5hfD9v!{5+&L%De$mJ{~(EKmIXiO}SC^!ED^Irp5NV;K40ZI9fKb$?Oh zSU+qW%Kk8Ntxm9hh4~!bvmPzc{El6t4@~b||6#bCe~k3|l+27>jo;T+dXM)Xew;vg zXj*ws<=a-@yW@8vRL;nS_e(C5@`8QQf0A;A`l9`A+7Da*i1YU}zJjk`X@6qlmnwIX zU+-f-$^QMj_Oq4z*SDX|3g^4_vsvM7Xg^yi9Baoa_g|It&Hm8Z%^xnj@7ix?rJHir zx8JUBx*4A7v;O0YP)_Ub3&}VjEB;b<#bjJS_tq}u{5Uu7>s!J1GezHyHt^%pDnBl& zJRbV4;aWY~$d9)g`t&tQ##^Spv|r`ClD@w7u~Brmv*j!yTq?c*0!TuwOgR&wG}tnRgreaXsf@?1$>>uD=iO`3m8M?yQ^@eEh{kj~{6J zi0@_S^`y|B)tmD6+59)~{;LxI%s;h)yMn(D`(^g4EN^@H{=S3nPxtfR#Z)R+ZN0yHX4?2Hynpk*d3>;$ z*5`D5z}7IJ{$k0 z>B&kT-FMSbEEJLh`0 z5O?_Qnk>g*x#qm5)Wlkt zo)gFUV!F@7`els&`y)Dx|Jna?U6=iKeeKyUhwjZjpR~{X-msa@WAQz+&QsF!pi1rW zyIp==mivcoJwDw}H17<{FV3f|pNsr@Nt#~MTkP8Ce&@8Fhk7h+4R&vjFi|?l^ zxo106$=!Py?TgvRzTL?s?GEGTdk_o1{QXk+yn7pKN9&s}YzO(izfwBbKX6^Fl6$uE z8>)YxX{bI!q_+ znLoTY`D4fOKzpX2<;B8J_wDeW;f;R9Y*zcKmwKAY#dvK(|iy)@rh9$2oqZ;Ns< zKFY`PNVBN>ydw9I&ku$-YnjQhnIC7f9L@Fbml+;S`l}=dzfXGd7(cG?=?%*x>p8>c zJ%Q_- z53E0z>3%-`&RUvJ7EjvFZD>7V_>`Y=mxb%wO_qE5V}8*e`}fd4#|eB+e+-BA3@6J! z!{PhDFq|d+y~^B{)-KHXO4^gy{ZY-Fi*#RO-hJ-pJ6X@I{VXKz!gwfeC6o1w{lWD* z|4hG+WI4@BH^)CTnQq>5Un~1pzURG5zrQLkM_KVOUulNvt<;X$x>b745!+p>ALzgR zypZ*U_w+}1?ANp8WWN^5m*t-6DK)Wk!>;S7ADJ$u zpW&F9uDjd*U+zDU_v$7O`$M+ZVL9UcukIE(vdSBOe>4r>=2aZGM6UEc4To}nyIHFp z4%$mgf93pSzsz`ePm_A9R3GV|?F;>znfB*&SNiA$|? z2D;CRFN`P4J=<5BEYA!4zWBeW`Q6)Brjzny$x+|-j`g1Pj3&cpd>r?1J~u|XN36$X zjgvUv<9slj*Kz+0`!~jyWgo_WyY36+es+#)(sDw*g!|R)+?l*+jcfIZiK~ zZ@)@*I&;;%DHF!c}S(< zVtv$q4_Eqo1*v|*_$lux$C{ik9cJw%?fJV1X2#Ca6}hQnEq#oi?s-r5{62u+U({`% zcXn<))-MmYex%f2eV-Q+`My1z)SZ=!^!%Qc?@79_FGYW6Do*y-@Sfk{Eb#L!mMhxZ zIp`S2`0tKRX(Qp`9H4e$@*JSZ?V{(#MXuC+c#reQO8n!yTtAPbzMqdRzf8V#U1X~v zW>0tY$Ns$LvD(km^#i)Ma>#Xdnm8ZucukJ5dXoKKu(^38qI;<5Kwk)xUA-`+#;`}8zk zt~Ynm-wB8u&0c5L)&t8~dHH94xh+JV*sbd!{&Md2ocZT`|EeYOJm>Qf-+hd(t*7#E zDHruclY0HG;j$g#d1}^vruxXzAJaK`TT54HZm!?4M(#S*1N$qkN2Kd;Ob5r&yl1*T z)N-HdW4l*PPX}CX`n~LR)1!^wBWKTJ7uuWq$o1CmQ`6^{`SSu8F5?Z;O}W@UG5s{R z{gKJ@tJ_ST`_;sL1GSHweHWXybEWY_&eECcy@~(M+|1b7_d=2To7bnAsr_d!NxZ55 z((qILQQptAJjQO?DDxMlm;V1XLGm|tKhpCQa_%dwZ+Z8Kmg|CBufHQxbWi#3$r*m7 z@>p8GBX?D`$w8CxGrX^Le?jc-e*@wmo#Fj)z8pU3zgxQd2?-D9Fa`GyWZW|z##?Hp z`F3P`3->u4$K;%SznypgHQDL`!=c&gGfS75_xQ~D)`#Br8Mvf-!v%+C}&i!ZMJ>{aDtZ!kv%I72edV6SQJlF`KX2SH`@Fl*>pAqt^wX@Qze@S^sMjk^<{QJ$((~E3 zN_u1WiTcku?xUjq!u;m@XXbx+&-~kC+PCK~!>4@L^fP_){x5u84Tx|DB?{n@>KR*xCReGPgYt+)@ zGBZy6+qfF>Cg6C zVgIC!^yq)DVAQ{%PL!)Xb)Bc+*iMH2ex>K; z#O_P~-9q@hmzEQ()BAHotUt=TEA+d~g1bWFD>`e}8aRu$%H8~o#9y7nYwKv~ywB=o z_`9cUhv_c8|FWl~J9ba_eZ|ag>gSyoE&oc**d3zpVIntaJ9|#|)BSgnT!&(Kp?~I^ z*{ADP6JNJ{=&s>l9PLep!+5yg`h8tTOZRn~eHtF`ZM>RG*2hZyW!sy-bYCR*F;MSZ zcjP)Hf8T)Z{)Xm9n9gurjp?^@%hGms(Ksm=$QR$gGMsI6Jei({!toiyp*tIY#_oXy zqW_#@ze;z!r+eD-d@Y_w%5@H|5A*jl=swH;gEw2e42SOR{J?abm;R6Q>18>idp@U0 zd*;Wn!8#uA>CWbZY557m8L#@m`pT73?$h&*LwEK(PR>K-^G<%<`YP=Y)BNLe$`Sf6 zz0bK(=UF|e+dl6;>0S48+A|(I=R0<5wOzq_k){jh-23?g-BCU>%jc_{2lBh<();rA z#PIk%(v*iq-Z=TbD2$iw^fnW%oSc7?rLWXo+8;9f(s^{wZKM4*-YYdjbXf0i*hb8v z>#X}e8@P+Nk^3rlx%O}6`4h^q>rjy+@3#3w{H5+WKB63@_c=G#e_vfHKYquR`ySQb{HgbVm@@1$;0 zbts0zb$i~2>++ZA_YSeUR>y5&xaIl8a`DOa5CeKX@jQ_y@0#r_X2E^j-Q=_9v44(w ztIzYvbEZE_u4nwY6K2M4FF%j3pP0kZ&GMP+d>SyOZ>NS;0O3f~BAS?wMuxG-*${*)9&!b}`kDxl7Y| zgzjTV&mrYH>n*{)Wro|!ueZ)PzEmDQze?qe-Cqx``}sAWiapke&a~&H_xOE9pH4dm z1N*xkG56Qhn0v;<^l}{ieaFo#Hw@p#rI9~J73=8FSp0OycAF;c>7VCwn~8HTO5We3 z_38rcuOiHwp%&AtL zy=~p~V~~zNB1e(@!|QZwg9maMy`df(UA4>M!;vDZTw z-aFbKv%f8u=U+dubkYp{zo7LI_21XahkU%DyAymlH8U-jbhn4Dmtp+r%`Y>;VY~FT zZy&;YhDUuKvxDd#zjxyED}4U3f8K1ry31Ww`OLBp!(XZ2O<{k4ni$Xcc(Uw6|5cxv z{Nud-O7Afb^Y0n6>>1wqeqE6FH1mG^{dz}BKlL_k3yXJwni!`9>z?#a_h0+==UQLy zDvdA9fBASS{9SCD59FQgTS$M`jr;2ue^z*W9?HXUPL@CW-6-^@OGOVnFBRuYyeRE# zTFyMO!lpJt}t4fFmq|N9l}H~G6_ll{K-FrJpb zuzGZ>nmPC9Ig;+Y%by_j1-EpZ+!x*H-hY^mEct2A@t6HB7xsj{grSNa}?^!Ir({tiOf9>Bly)ob4dl_OuF5WZUl&9C_ z;y!(^u<^5Xr=RtQCjB%1aJ`f3jx3LK&;5Wj`JC?=XwUY7?N4YjzV{9>`R$&+&w%vm zdxV^Oc7i<5`+X<{_oc2Q;diZcUt$AizYkI6w$=NvzNYy^`EL&Dwf!DM8sAQS-N(Ym z?%<7hC>@>k9NoIn7Mv=ksvgm-e>5EFE_rmhM59eEcm>IjJ{Yw3Z`s(ZTMR%2+GhU`I)I;c>;nH7c{oX8cVLhPybZ6~noa_q; z@40W(_MPM$-}BOcmV8t6d!N|-*6Y`PU!}a=zX z-lq;N%?E}T#$&(xQc1qZt=99aWB2#XES|60iizLF_UqB5dMIBn~|O|`yBFpc*HursOY$pSXQjI@b$uSc>d-!g5- z%G<}V-h}a2x?kbHi!?L#=K|;4jxU;gVgJD23u>wF1wwfu*Lus+@)pL=asLf|{9JmE z_00z2KkxqJb?@`r`R`{9U5UbUi=sP8n=^tNVH6O6}`kF1dcddQX%2SE(G(y_vDwW`Nb3 z()*nIS1>PO_+k2aPqUIcJ`dAh$^T&APMC>(nHlXyR=$PlKFqJfJ$UQhngPitiWr9pyPbJkwL`zX!$qz_(*B4U>3s&d%k>x|rAh z{cT_kd+Iq{?_~Hb{dl{%nmN}*&B*Pn`$jMh*Ko4GtNyO~y~MvqdGvIVpWll{?ziX3 zee5oOS;_@|cSP^=?vme&eZd{*{XOOTKYP!O-^KLre|YXE$CIp&%lvzmQZrrmv~%qv z*QcMw&;3^R-8jx&{khnu=P75|TfM{Yed@R+eecfwlUdLCUjDnfqrWRQxB9ebKT8Mi zFK=!4EA)G(oclO3cW=jH#%|+vFp$1|^gFY>+jgC}kGwtBmHGXdx99K9v)u7qNAAZC zfA7!E)xbHdYb73hpXT@P(Y#md8TJ$GXnMB(2Ia1o$+3H}w!ApU_6$pp#g}syU*7RN z*$(HJzh#=f$nOU(-?zKNJahN%{$|=bQsjPrnZDj-{e&DpWoi%Gn4HH&U^Fk1K#|lJwIcTnE3rn-M^J{Eqj{%mRg_6 z?fJWzHjcpgL8prQyqkZ%`CG61eIxh!ORz?`mE2AJ$l~8l+i$!d^81A?+(KEnll~^* zMs9Q`Nhi)jo@D6_?>BkHkp<`(eMFY3^+P8@rqJy;08ndyUz1{es^ubNqDM zgBCx}SL|?^rQ?9sCQo=@U-wscv3UQ}?x&t^a)x@D>ia?JDKuw&Y5Lzw*PYO>`TlBw z_8(l&X1z@NQL9h*-KTpk-q4);E7PB?+hTw5WVz3~F=`gvcr|&hEB2Y_cQ@tru)nS| z^Y>BG-zlA~{?l;l8y?#=J6|UC|JDY|#r3d8O)P(Je8%*UWzTr6oaUVUUVPsF9(ciZ z(%+@U@9^pRSOeEX%_{frjV*loe_FrKNd24pf_Gm`+?TFTr|0Y*(cALnEsZa740pri zO4ql;-xX$f)bA@A57vdeelJ$DSnvFQu8+yPO#7kqeBG@6#D4D}_P^JfbDy7W`pX&z zmX_PtjlW9V=UlfX=8xxfWyNQ|OP`*LyyZ4r-xv1-+=S>%H#<59*ST(9bdftT8tyJ|7sI^7t;W?0*NM@kFfWBU!X1yR7p@bd z|8h6uy1-oqyUSpA8SF;7V{rAtbz*b{{9ggS0{jT#c^ud0ZguW+w*uG7+`rta+&Y+F z;r=U_>v1)XI_5XQ)guZKSu~-+7q~W$Csu74_p5Fb&n~u&Cs%D3 z&#u}5=8kcT>Yd_QRUP7KxMo%D8qcWO7tgxJHN|dtelYHjf}5Ur)+_E>-3w;#xJUJ| zaB~u#pBgVL4v420Ps4ROt}}2Agxw%qXM)d)YpTzV7ZuOO{W&ntfjI=%P}rXb^L$*x z;#tKDa9tR$s=f%r zz7tPq_#Vu^!(4^yedNIhc=ivNt8smZ>z}wj!nFq1$GASh^(n5kxIV-6Ij*nbsl{*N zam6S%u9(MF#MJ;-HLixasl~>)HUV#rt7UFtaSL2O#Wb?CxH}Mb2je;f*UxZu$8{L4!}07$m`A}~Ph7ol{XAELt4Y)wW^b6sz&r-#u`rK? zc|6SHVg3Tlb1)lYVpT6LJ`OZ!I!8|qJwdtua zPlNl@U|x*p7sI>^&o6^H3eQKuydvMJ*|jil&39;aH?GHV&BQee*DJV|;ramAN4VDF z`b@7*&Ds?@G}{H&&u|@y>s(wH;u?$VdR#Z)x(U~PxE{py2(Bk^J&9{JuDQ5g#I*?5 z>$uhzPK@%!RmCR7`3+hYXB4-<_2c5o>Q=b6#C2G4V&fxl9f_+~vF#=&7CSdRvDmTM zNyV;BPl9=JaanY6@xscsO?@A2MAbh8XR1!JQ9 zYq=L0-iQ6icRF{p=V5!qt`GQa#QWlNIM)d*e(%73@T)!VfHfgGo$JTd!kPiN4Y)bn%kn~d@G#6LWXkgeu2(vl-Xu(6(f`A^D8tNJEOOIc z}UI;ftFnf*xSM+(9pTBhTB-Se%dpG@RtjvqwH<4b+ zm%S0@e^p^#1U|rrkDxUC*Du2FDuNI7_S<;-xA0BvF5v#K|8i)g^+?jv=Jm+!>D_E} zq^0)`*pGiMa{I!5s1N5r@WtTf_!gwQ=N-Rs?kMmba6inu7aoFeD1QS~h-2aA8u)$d zb?5qe_g6NL+$o+LU>quG5x@U>H07h8!rp4Qk+g3Q-HIFG-MyagK$tB5@56o|^6?V5 zmohW5J-zA--i9a-@5-KU;hPqiuI7MyoF2KgKAc0pfPb*Kc?1P!SA??w-1I?Mq70%~ zXqZyQsv*P8SQjLB8Eo}J?EmEJ2vn@@3-Eh9SlxT3d$Ff`(aD9-iO7EkF3Q#h_TQj9 zOMR5I-{jj9X*W6}?fWB4wmCh(qR&AG#qKzDX_P)-8oWhAtz|||9)?abY@TD$H@b=>VQp_7)f?uh>QfDR4 z#hz(t>ht|;*ngb2a6~7PFH%SHF!zQVrc28CC!1Os{sKJfzSwOJHwVB?;ZqwUNWFU+ z^=>QJ5AuH7dN(Y$(hu%30P7nt53Lox@H1#b`on%a{BDVcRNAzruzw4M{1)$i5A4UE45mC%wplmtfxXn(h0@?7?X0H{!d~iH zA2eFiJxiZH3oP=ShX7`KZgU;p#e*gM*PoA^geh)Xqh7xVMmD%tAg7cQ;cjEieFQh6 zTgq?=+Jwb$FSlJ?hqIQ$RK&~N8jIx`#D$xecQX2vBZ1cJ$2p&alJh; z#!MWtK?de&(^}lJ7Pt4Z!AjfM&F_xfr|>IfY#sK0d*<4ZzYa zOAG>3!CqXz7_VuPoNzpKeZ6y zz?WhRi!5oIBw6&&YS__a&Tv zE;oJ~JjgTa$bN7y^0Pe@`8XyNd$wJp5LUl!V|Nhj`Xk=MQC1HHOZdll{q)EErpP+!H(0Dc=~>^IkSV*U7%@jQ|za$Sthr1)3o8e|vt#REEXx~%@*dKxb zVYoZsj`_P77Dqo3yQ5&Y41DI#aApnoUR)pk!?_b+K8)*xE&Ln-ZeCen`7d%x+b(Ug z$hiy+*m&4UxtfK2WV<3Ral`SLFxzc$BjcF|5w_I9t1#x5a@QW=NLoIJ-P_>NgCdtl zV<*h?(!LSw=fEA?fd#dAaV=g}i{Gxr(*A7zu#G*W{dowwk~T;3w{f+V;fE3L7Ts)Y zEPOlOW5Uq(?KA9=kT&goSWt%defUxz#lAV(ic=ux$ASGR7>Evny|{S;{jb!QF9J8` z zFx$fHh5HNezU~XS5qr^<^ryo8(I!LRUw1|v#0&S@RHp>TgZ{IbjoOZYN2XfNT!k-HLZq;0Wd;S2;Hd0ke!cE$2(wu#(Nk~!;RGEw@~PA_52e|5N`Lp29wGu;01{HP4w6If%}7{Jk)?k zc}5U!0sj3O{lW~`%b5I%uaRdk$KzrdJ08LgLLW!_+UrO%9^RoE^7t^NZ<2OI{0bi+ z?E-jQE2{*!vFpixAejEHe%GD)s|2E

    I?GmOo4t!2L#_!_vE`N$#QI}kqW_`_h4=NAo; zUtso+!czD9dHeN4Vs{#tdbk=aX%RO%rvv9+#`iq1r%vdGVJ?OYq7$)~{`CD(7>8pL zD*5=Y?d6@G@lbpVxGUVgk9+F*W29?Q9J|vuHor37ILouF2@C;`f}b}!Meaf{Wq>!e ze{N5dRoF`$%wOR(hnV~#!=vb@B#)}m#x-eU^8(>J z&l2WF3nKSC>>ozEwA<^L*MKE_Ny}T_UdDKT1HTV@nJ0eWS=LKG@qFOPwvIX;VfMy% z*D@z+1Dzc87|sK4Y-R7Bhhq0Pu#|ZTU-Yx9*PH4JGDsfDxKw12wEP?Hr7sct%{MW> z3n0(dp1Wb}A^9R8}!a4&1Q zGCw!~{6T9gd)09NDOl<z|5h44k6vfgz*Si+GoVQ5|EcvW;I_97ekaq$a#S?gfE z<5=+y*mFHu+;r?==@o8`d5WZ6-2Cz%)}DyH%xh#_PVA>(AE>k&_ktPb+u$!y&R;^j zVo&#bd!2|3)Q_Z5!jy5>QZMJRds^KWzZ~ZaQ#Q#vN$+3bUg~(;IgvX9ij(}6HI2qi zEncp@h+nQ9NxSrvZ|nB1Rlg3X#ZvdB?Yb0;R1&6?d8zv%{}wYXy~0hpS(|wc!e{$A z9!%K|g z2f?q@$A`8;|Kr0EH=;vXFOt4e!jbweeT{@KeqU;x@)EGPS&O}>4{eLQ1GE2qAMySQ zwWaoZnKgT)^{CsPDBrbYBO?em%F81>9&V(KlDu1nOUmbX$RcHuafzQ0T(Dq>V-H#k<`MVM3Acr3Y84y1E#P$eF!t8zo z=FVOZ-yCUjK7_S0JXYDHFP8Enb&YGS5)Q}ecR+rwt%?0sTSjj1&(Vg!Ugn7tjx$|J z8F(E`9liy=7j8rb>Bq%hBvSQ&n1l+|n2{qeA; z-GMvhX^B zTIkbGpe>a;gSJuX0@^{TE2x7~H_)z1DDrMkr5+%Yr6kZmhpQ32Fu1bAD2P^dh z9j1hT?kJ^!px#P@LB}f%0iC2IHSkoW;h=#^BS2>>jRc*iG#Ye~(iqSPrLmwVYxa$ZqSjQd9N#4}XRq6+NUTFYmq0&ImVx_^L*OV|^bZ;mP1FcXR4*HwY2+#*gBS9Z2 zjRvh%8Uy-5X)Ne#rE#F#X;R-NfU1-xf;Lu~1Zt)<8ML|56i_Rrsh~DW(?HuR)qr+V znhxryGy}AU(kzgbwb>vmYx6)>*5-q(tStoXqdpdaeyX$t)J0bQ%q z9CW=>3(y253@qHuO07Y+DYXUNrPK~IRjC8$0i}+hN0d5&9#@i2wr44I0nJhB3VKed z8|XzPEK9mYNk~kfmr6=yDBZay3@Fm1;oOC`|`lr!)g(?f5LvjcPX= zWVLY~$YPrhGOaBHSsaT%7Vq-p>5Am(%H-)PkhM~)L6)L5iMzFlyLBMn)+OXHX0_Pz zAd5}bRV=(lAk#q;koj#6G9N8K=A#wJ($*R@QB&C#^gE??pgWa1fbLQ12%4tU31q!X zXOOi%T|f`()2<-XP&bfC&>dtF^Z=OzJ(H)slc#->r+q<|zx@�P^i0=rN6LFvwCq z1Z1^w80blTIviyAHUczT?M8y0RT>R?L1_%gYWG;s%W5|cv_xq_@^pl(|CkSurEM(8 z(l!ocX`28t?M?)lb|-;MyOTkt-6a5O!{shlfFC1 zr0)T;kb8nG#!+cRt8;wGd>rVol;MkC%q_ zv>nJo?f|loJAx$S#%>ts2FE)vgK1N?mJ^`R(AT+I0mjxUE?gl1L zhk$Ow;m+5tlCwzv>7C707%-1yz30ALCAU61@s80;QC@2f4WjX&|^viKr@sE zf}T(s44S1h1oX7hFwktJ;h?!nBS7<%MuMJG8V#DSGzRp7(pbXAURRn1TCP+B`m54(& zxKe9SPo=h?W0cx~excL>bh1)M&;X@Qpg~HVLAD;&1!U`CT|wvQ({7;imAZp$4Za6x zxZ3pu{g+a2&=pF3K)+P#3mU7`4>VqB0O&VL13|Yc4F*kC8Up&g(lF3{O2a`9DUAS4 zR~iYLsWck&w9**RGfHDY^OeSd{-iVk^k=1spuZ?h0xegX40>B>3g|thsi1!-O#`h_ zssY(L;dIbvYBvM)rP3_WH%hZX`7@>D%mY;`%?CABS_s-yX%VP}(h|^?N=rf8C@lx= zptJ(iL1`suSEW^;J(X62_ElN~>Z-IBbg5`ky2~W2&J~5QA+JVS1WZ8(mL1?WN#!o3F*_$pm9oFKsPCM z1>K_54RpJbybGS9)B|*{Qcuu>O1(jkD)j-)Q0fbMN~s@cuF?R|^GX9j3zY_g7Ap+_ z+1y|l=ry$)4thgr1ZaiQNYLMuMuR?38Uy-BX)I{1(m2o;N)td|D@_FD&XTe*2~?#t z8Dy*CQ$SNxS5rZ@Dn1QltKu~vTNR%UvQ_aJAX^om1+rD~*`SRz=%-4nLEV(rfDTn!3p!G19q8vu>p^{# z9NyX6s(l`GqS{q~9@UgL0-d6EO+aTTH3tn=Y5^Lm)CzQ=QfttqN^LQtAM@ zR;eTCdZkXF2}+$oH!F1k-KNwPbeB>$&{U=Fpa+zCfF4om33^Z>$ng!Zh zX*OtorFo!(l;(rFD=h>ap|l8ew9*pLaY{=;eU+Aj`YWvfovySJbe7U8&=957pbM1N zfG$y53%Xos9cZ-DdeAjWZfm>+P|AaDRH_0^RB8nJol+Cfol4C?_b9ahO;c(GdRVD7 z=rN_XpeL2ufo3ap06nYJ5%hvmC(z4Eok2^Kx`37`bp`!ZsT=5BrS70rN7a9!W`JxgItyfD(b*swi{ey2kd1fegKWIJ5M(3TMTy;##BM2Q7(y<%c~ zcdbBEKn2$kWV-4EGF^2}?7Ad&T|uU+ZXnZh_rzTf@2<-A1X+4}gDj8wfNZ|d7i9B= zejrQH0FccW27+w9Fc@U>g&`oDFAM|Od|^1q<_jZ0HeVPCviZVjkZEWP$mR=UK{j6) z2Qs}(0NH$DBFN?olR!3Km<+P{!W59r7p8)2q%aL6BZbDU2J`?l+1O17EmWET`iIgi zQ1KjjIvdnRX&$JD(tOYbN((_ZfG|4&nf{i7On=KkroR;+)89&v>2DRt^tT#h`db4s z{jCL={?>s^f9pY}Ker7j4>CMu6rhjRZZSZNzAh)!#87tG{DGR)5EV zOqK~CtH~2VCe=E zkd>z8AS+EPKvtSof~+*H0$FKV4YJa-24tmaEyzmKI*^s7^&l%vZrh{`fqWSP`7#9Z zWeDWU5XhGykS{|ZUxq-w41s(Z0{Joo@?{9*%Mi%QP-l?M-n)P-3JT=^gJJAdR_>!TDu5jt0YT6wo0-T^bBfGm0J$7k-`d)j1&rP zB}nQ*m0Jh0+*%JZ{kgW(Uk8x%bXb`Mnbtai%tvRC`RD=?Jr`WncC2NMK$dS!K$dUK zL6UD(t_R5c_5@jO^#)lSeL$8oeLKp#Kz~)54SHK? z9%!Y~e9+&O7J@!dS_Jw~X$feJ(o)c;O3Oi?E3E*1p|ldTUTGD`BwYLRfQm6I|uQSNP>jJXy zx`HgcZXgS=oC=F4FjE}G#qp`2qg?;vaA4!dPI z$L`c~Pmph$K-R(y0bK@nNH0i6D46+!M#8Sz)qt*2nhv^FX$DAIbqRIbgHQW{tTgolncu0&)82d1-TZ_)?L~KeKvs79fh@L(o%wWOLTf zX4O!Wz3HO^$ewoecGa#ENZeJs&Y;`WM{khd-2t)^(HCT8s2|9r9{}?82xPfGIH4gR z+l@QSQ$sf#beG044P+^*0a+cKp3scs>8yliCr{@kG(UN|Frh`s(VWZ%?DZ9I_yX4 z4zl)sAjqVj0J2<|@1NrRGziDpq8_aV6_nP1Hd0y(+606VBgjUU?e=GQeL&We^aY9j z{ttWa8D>TCx9fIXYssWF2nYfSl7r+ZAX#z-$uI;J1QY}W1z`{nkSIa243d)skthO^ zB}$MW;E)6a1SE)xvhVKSbl1F|c|Cd^_y6pDUGIncS2)8mrP zPW-S6zN>*_r|zp%@@k_xPWJBFI2pt0 zt?k1-M~Z0ekngfo=9uh;Wyj6HaoobmbKEPcc&^tAUj4=6r0$2{WNpK7vbIq; z>Eq*Ydn7;H0oPr`Ns22tNpT$~DQ@AUE$`x_-#@^~oc|$C_8G03w@+I**(*XgX{|_{ z>;biLQquZ3S#M*UthX6X*4qjv>y5+7dOPA|y`6Bf-mW+qbGqYXy}fX<-o7|lZ-1N| z5#w>|+8{}9KHYVk+^4&RllydcadMyT0q%^OUzO@!jaSD>yVb_YR@TSKwl&5{ zS(^DvTj8V*df_B(U!2_A>5n@vW%lDG;v~O|IBESWIBEUsIBES`IBEU6IBD|-IBD~T zIB9dOhS%m6PU=2{lRAyWNu7pqa`v7ECui^JaWW2N!pYft7Mz^DXUECedv4q|cV?L% zCr_sq!pXC%#c(obEroMNDO;<6yUdo`S{0mJDX)!l&hl-oK2FZX8{_0$yctfep|rwX zb!)8?PU^HPPTHe8E~&jgQj`60Qj_sGsmUQYsmb9u*^fryq)x}-q)sQ|q)w;c zlCGxUWIx)6lM-aF>ABoEDNBBwl%Nn!)=>;6?NJKn9J@`eJMJ3WW@^1~Kf10j?lvx3 z>yNwZh7IxK4fo@X^5cz5iWkx{)$(d63ofaAI4M;$#Flgp;xy#YtIC;G~95u84S?Ut%9PEz#8Ns5Vn*c3l(22OHGz)3E1aZ=KSI4S8; zoRoA0PR5AUxTM~RlXYCgNq$#wPJYo^mIl|TH&NU;&9T3I^rbf zPBD!6VUuAS@F;of!KQQQL8 zrEku@>bmT>pIz4s_so1Jm+rU*t{a7mcU@!)o;-71dfZvpWy0ADoD`*SC0y6FCF{k7 zv;>@N`COdT%R-#g=~A5ZzZE#?b*pjG>qfQq+HD+8+HE3E>S_v3+HD3-+ARSm?KT%D z>sW}B^`>ttDWbKw_B?;(mhV;vuY7lL67K;{(uO;FOVi+za>2>cOgJfh7M!fN3Qo4S zI!;p5#z~6$I7t!aNH6iy;F5C2CFP7u${8m)XU9nmInS6&4dutlepv`7bx;hKG?w6G zEGdhVV|N9djET;3;_E06#|7Lb*VV>->ALzjsolo7eQsDYoQ&hGa59d^;ba`|h?8-= z6HdnQt~eRTyW?aW?}d|byf041@gX?bLx}&TyT(lXBL(1t(|1+i?rrc)M{+UAGUn z(shS$Yg~5}x6yScaB{u)G;WI963VPhQ8#o_7}~WqyE@vOL5|S+pKrSwc987m1U2VVuNEZ%w{MuAc|83oGX*17Fg0k_F@Rd7=G)p5Jru-dqN zuB(reQJ^tSMuBEHX_;0y83p2SG75CWNw4dKlTn~6PDX+5I2i?c;bb<~7q`tlqw0^7 zGpcx;%y03 zb)1yt7Ea1?7bj(TfRnO3#7S8+u69XTES!`jgp;yF;-sa+IBDrLIBDthIBDrjIBDrD zIB99;I-0a}Zk)7qew?&)A)K^yF`Tq?DV(%)S)8mDaI)S*I9c0KoYdqAoNU`^ zoP6aW5hrbV5hw4gT)|1s*KzVCqFXq5p8qaRdeZ}(ytDEUSJAB({vlja3JWKFJcN_+ zDiSAc9>z&uOM{amaeAEe&P+HdRTiAoUv`}AJ-KmGs{APD)i4 zCv{o@CnczYlM+td6%cYAJ!NrWod?!Tw39zp5t)x)uxU(X@yQW*^aI_d6%a< zPHMLoPWG9;IO#+Eani%$anf!>aMGWLmI2o_j;baf^9GA3*;v~g(ob-d;IH`?&I2p|j;iP9D z#YxU5aMFiPBuz{1Je zLO3ZwBu@68Fiu)44Nh`NkCPOcaI(EwaI%%zaZ+o!ani%`N>^L%7?nJBs_&ofEF^FXZ>*74qX1^W&BB<5j?Y;`XpA z{?h6=8Fy>r+Z+v<;UxfOK|%^JWh^L!~L*Pe%M4@ zi24g@Q*cqPOYpdrSg<^iZQc3X&(5)ljt)l!ldVU{=cawZZ{Oly34Zk?a=fiJE@;pr9 z`!dOV;rj~)Z(;Ly zn)15l_>p*L`yD?a$(!bX^-laI#NQL(*$VvD3ViK0B>pvJch{B7XKNtgotlX5nhq65>03DLzj5gk*k8 zGM|{tC$v-XwFk=!A1LMg_hsZB62BIK0z8J5E>LoF#Ey=1cW?W{WRH{5&6vuY(^< zMLGG*V7uld^NF8Gc!uIS7dDl@xmwQmmItm16Pdv$g7ONoDz_z8Q( zS7E!doZ$_;r24#ycgml(vaUULR(w^w_MP~4#7{UUejI*FGM|{_*Abq0QQ|oDmgTa_ zKg%Nte?)j(k}t!*|Lbhf9;~+$>#7hGA4mA2DDh4{dRTn#a{PyC;(6OOH<`bf%xABn z;tb*o+D`t?e~6o%%x_KR&n5GEH5ET=GG8&7ZorxJ ztjT=EWWHT8KPZ{6SYM@Wm&^}J=4U7KTa)>7$-Le`<&!m;ub9jyHkCLVXqPO_lKD2u zZ|NxhN8-fupCFw&&s&nV+rfYK!aMtH)?~h-Zn$yQ(Jot)`HFm@+ezz$pDQQ+fzx(; zV$lf?KTn>$#TUY7;ggC^cpcUim*ii?CnWj7_{3yBZm7gx?!-yvXYZEq#^ia9uP{4# z_IB2FNc?ns)+E0jUopwwz{l~g-JJL*oON{&pP>}{&P&S2_Yhx~@c1`OzfKZ+O88rZ zS2!r%DRX=>pE%lb^LNUujZuC}lAlJ}gt3;NXO?lwZ%O7We2^@BnaU?InUDKKg~uoJ zTeeF0M%I;hSo|6MmPGNP(vRZ`q~av>6hDgiTi#OfE4(e?8=O2xsPK5av#wK4{xei~+yV*z ziEwST3eS?vS4igL@J>Fl9Pi?Hh%e{(o#LJ2;Fg2pr#az=#c#tWB>D6B#AIGOB5~aC z<0^i9qIkD#SHzboOFiEd-w~gXll(?}g6@N=l6(0Y-c&9&f{8*Le z;ymR$?o@tAGCwz&ukwwGbMcFqxmG{M=;z z;tUl&WS;Wd`3$>vtjvB&`60>u_bNR5b>(kc&h=Wv)71^7>L{I1|PlHZm5GG*6R z@%uQxpYofA-_`swW!FCAHxs{W_OjMcv2w*tSL`K`k57Jiv(^IwK^jcK#?CBJd}ZsV5=Y}$5ynX+m-`0dZ{PJZM0 z-Ni4PqV0D6=64Uj6Z!p$-$(rJb(R}k5ptIEyWjcS;>k$oZ+;Ite~0)+f%D6Tf9?FT zp@#!b>5D@pa7xCcU1Nf-y##|`3haR+(49o9;3ymi=X=Pl;RBcjb6_FxFCMf{VLk9~ z3bn7`D0~kQG)G=20hOUTG=iqk6^c;W_RtBY!E#s!x4`+|b1^hyW_T9L!pp#5r76((I-GV3 zwo;?JU_YFM^KcV>10HJD!jKL!LRNSdio+Z577T=uFcD_J0@w?Qa2I}ss8qa52eqL& zw1qC&;@$J02mF<7jNglC$I%} z!X>x|&aM*y1)&@`Uw3^C-hu@91lEA_ZC2-7tj@PrFToGsd_mQSqK+XFVj(>|1=%4l z6oFDu1L{LlXamFHL)Z__7ear5M_@;j7sNtF$O?I&Ae4YA;Cz#_0lWx(!1-3@hp-q{ z!45bM*WezQoYjXQ3i3k{C=KPIDl~*P&<}>g1egU2;1l=)cEM4&0N3F@JOrCPFBYDJ zoRA-?Kz-;6gJBYEhtqHg(!{cUs0|IF7Yv0-FbmegX4nPaK_E5T3$MWI&>P-?(J&D{ zf}L;@Zi2z^7Y)xq5vT;OKtC7_GhqqrgadF6uEH;1F=RSln#=&XpfFU02G9mNLKk=w zoG(be4>Mp6EC%PxkQ>1H^5af81SjA;+=TmJa5W_cDnlO_1Lxr`80lzhcpmCNH~0{K zfIlGS3HlY32j^>souDVY3&UVM%!l*v3s{VZVJHVLKs{&;ox%Ac-+I^#U%@dr16ScL z#AM*i6FNaJ=m(=N+V*?b0vQQVAL3`)~Z^9s$ z3?IW{aK2gOd`aj$INuEV6-*A5(U1k|LQ{x?m!TI7fFbZcOn|kp1)ML(9Dy_7dZ=ygRC=XSkE;NPC z@Hz~DAutjqz)V;TU%+-a3_rv0oE*C$LoV(X!JF_7jDQKS1%86)+>HHD7`}o$dAKVB z17Qp}@9)lorLYQ4!XJ<;FWU)ap$)tYJzy}*gr%?z_QP4Y0pWZcvmhTl57nVD^nn>L z2iCxsa2Bq^0|@75eb5QUz(KeTsh;J`4SK*BSPl2!i30R9C;+d+Bv=ji;E949Ga(n` zhmueps>6#g88*Qmkfjjcaf0439Tvkih%HRtg}yKlhQKJ83UgouY=o~Mwg~$kyaDgS za<~M+q8!5^HqY0*@e6ihEO#5uSlU zPy)(BeRvVtz#A|ZR>N0t8ZN;NcmR57@`3b_9STBOs0GczdH=K<^ntN32b{M=Pr?mw z-qQRX0?*NRpfr?+I?x(khj(BwjDqnn1LnYDSPpAoBW!~`a2QTPOd0wv6o3-&JXC?2 zP#<1|4)7}Ug~2cyCc$i225Vs}?1SU*J^TnigH@Kk3R$2Kl!Y452wFi0=mG=aLvY@d zTnn3ECme>;a0Pw>y&QcIGDA)%4&|U4G=%2R9=gIC@IK6govp*?hlo-iE7!)#az8(<6U zhhuOW&chY>5$?jTpjDvU5DBRvJrsbFP!1|X4X6iApe3|}SD+j8gtuS-41sa50M^1b zI0WCp4Y&gj!LG=*K^`arRiG9$fmYBSIztZ_1fyXBOob)zDeQy;a1_3St8gF8O4J=Z z4jCXjJPXC)d8h@Ape?)#@h}P|!a`UH&RdNSAXM48!@xcY`Jg0}gGSIF=E8c|3_BoP zg<~&dgZxkynm`-q1H)hH6t2M?c(N*EJUk1!XY>Tm*6%$Tb<(+)P)Z48uW%iFd8O80xW^;@D&_|b8ruw+rW>5^EO)^C=O+z z5;*Ui#lfrKyhHXTyaVrp^A6aDFbfvJI@k%$J70(41e}G7@B`d}M_|`veUJg3h8&O& z3PVXK2hE{9bb~%H5Qf4WSPUy*J#2;@Z~#uh1qjq){sQUYDRAE1DghOtF|>hhFdtUI z7qB0Ggmks32gnB{pgJ^$IOqxkU@dHe!|*$pbvRx@YDf=HL2f7r#i0^3g*MO~M#Dll z4-X+jUFreyLusf1^`Hmzg#j=crohLr7}mmJI19HRSdX$pKBxe7pb>P0SD_yahA}V^ z7Q$t?0fGALe~=5xLRDx8ZQxCahxcF<2*atTuq6vKivO*px0?$KTXbCSvHy8$!!Fjvq6kLGo@DLtIkk-9=J7z8t6KCFi?VK*FubMOP)h2J6AoH~c6ArBOT3h)Bd zg~retIzSib0exT)jD!zhGR%NIa2RgFJ@^gG7PJe*!V{1gvca=Z9Lhsgr~xgZ8}x*s zFcRj%Vpsv|;0xFeU&9Hw1lQp%`~rGQ#tC=^@<3523zeZBya*lPbr=Be!3QuEoOh#E z!45bMm*6M(15&qQ41pX_6v{v~Xbi33Wq1SnLOcwIi7*X5h9&SR?0}O%|Y1aHD%cpt{Y6!-|{!AjT) zd*Ew03FqJ{+=1WVv3B%X$N*U(4-|ruPyw1iA9x3*!hW~_zk}VLaRf5JGf)L;LL9sS z!(l$Ggw3!EPQiV6x&!?RIze}M6Q;rfSO%+MGaP|58vp-YGq@pQX&E$I%gDw1tlTDf zMvK+5X_>X0+S6Jt^jR$rPsruvGgU>n+f$TJNfpydaQCF7R))Ji&!csNF?Ud! zXdSc{wJ!YCQ)|IJotD}=guJVD)P`uUXv4Hl+Hmgpj9|(8JoYz|r@=npj?YA5&CmvD zv$cWRA}wB9&OMmVNVT3P+%}VPyEatYMd|~jJVdIa+E^ZM8K)(Z^1L=lyTJXLOFS9( zJ-J*Zm+RWc+CA<_{;ti}9%&0SOJAbd`cf^Vuh3HIYqbb{qZX}yuEpp(wXnWNi`DmO zsr94UECJD^+YX)eoo7&U(oXC7q$HQ_gX>yzE({C zSu3qS(4NzO(aP$-YR~JxY322YS_Sdo|vdUO4{-a`M8lHJ!^>klZMZnV`OGvf3Jqn-Y^(LqmZ zbkv_RUea?KFYCFDSM)+gC%uT#S%1#xqL($g>Q#+ydL836y`J&9-qh%!H#gqU+Z#Rg zSB+kJSEIMy%jl!OY4p_x8gJ>tjDGqEqrX1hct@XR4A5s71NFJaAbq~^uD;wDtgkhO z=7~}NI#(4b)W1{|}FJN;M^k0kw{a0g-{+lshe`qY!|1cKokBp_<99^dC<|n#g zuFx%Wm2R7#>H+gJJ!r1cL*_dDF>`~S%KTi9FgNQ_<`z9{Zr5YY9eP@Gr=Ho|tv_Xc zr9W-%)3cdh>)Fl2dJglbp3gj{KWl!Y7c!6QMa)xrG4q^W!u(z@XsvzqaNSnc30!#C*wEZoX`+FkdlNnw^YQW@qD5 z^HpQD*~R$G>}sqryBTZE*Nk;$cVoTT!`NWHVQe&e8lRi-#wK&H@r60m*lfOMY%zx! zTg~Cdm*yyAyE)p}VU96&nPZIu<~ZY^`GIlB9B+JWPB0Fe6OAM0B;$nnp>f)rY@9Kt z7-!9?Mxr^*xM)r{zBgwWSIwEm59UY4HFK76-ApiUn6r&r=EufubB^(oIoG&r&NJ?t z^NnB41;%gYLgS&i$k43ChHfn}3~Pm9S}To!waN%tpBfR?Y9reE%!swt7^$tbMjC6K zk=9yoq_Z{{Pgom`^w#Iblh!69ll6u1l(ogkZf!MkT3;Hut!+jgYrB!x+G*sob{YAt z-Nv)l9;1M@*C=T1Gm7!=#YszCWb=s(EoiVCeXN~ICcScPs(Wq@*HR@VF81<}cMg!}*(a^eKG_rm)8e2Dw zCe|(EMeDZF)cVP2X5BHGTX&5X);*)8b>C=Z{cNnW>~B3~4zQj!U@o&Nnx9ye%oSEubCvaix!S5` zuCc0{>#Q2)2CJsI(W+%`vTB=OSar+0Z^` zHnuOAP3%kNi}n?>xqa1aVgG2hv2U8~?Azu`_D^Of`;OV&zH9cf@0)$?pUnaGujW8o zw+7jkHN<|*8fr&d@7Xcd`*vz;q@B(hV`sEJurpbc?5C}%b{1=foz>R+wIcU4*Pj)r(MC?WmmNJ*p;olc2(#W_yO0>IL=j?9QdHZ$ivfazN zYWK0O+3#7`?Qzyk`vdE?J;AzTPqgmZldNCt53OJA$<{-AiuJoa)p}%4vy8xW%M8r0 z0)d%UFz}HT9hhas1QM*+z-%jZV6K%WFwaUCm~UkWEU=yoEVMEO7FkaP7F$^Z%dEVC zPptfb<<_%-6;`ppYO6$Gja4$R&MFmHZOD+64Alae)I?`@lh~W8jeWa^SG_O5ljqIq;3u zC2-v86F6bL9XMqT3Y@V92hLgV1uj_Q0vE0EflJne!1va~zz^1>z%^@f;D$9baMPL{ zxMj@^+_n}3?pTWgcdf;N2iCH{FV?ESuhwUQ->fx(ht}tT->okKe^|Q%roAT+wD$%c zv-bre>;r*F`%oatJ{*X)zX`F7UXW7)WcM52Uj%2A;4l1=8D> z0~zdVfhX-7flT&~fz0+#fv4;{fv4^Jfh_hPfvmO>e8#qe+3bj5b~|-2r=2F4%T6E6 zZD$JRv7ZX&v$F>C+u4Ez>>R;@cCKI{J9n_Koi|v-E*LCo7Y-J)iw29^C4wdFGQm=I z`QUSQg7OZa93f8de25Z_4g0<`>!P<7SU>&=8u&&)Q zSkG=1tZ%mtHniIYU$ol?o7o+L&Fzi`^&K&3-HRn%yt>y8TYDyFDP-!yXuX!yXjuWe*Pawuc1YwBHN%v4;iw+9QH* z*`tE}?J>c3?6JXt_V{4DJs~*Ao*aDFo)#Qz&j=2+KMKBQCj^JtbAlu7Wx-MQ%HU}G z)8H6;eQ>P3F*wfN6#T&cA~@dO5}aUv8JuYE2u`wh2S2pG3Qn>22B+EkgVXJU!5Q|6 z;7t2u@FP1hINLrK{Mf!2oMV3y%MfUyRV*BUd68k}L zsr_qknf-h46I%~0x6RNBI}}=JM}}6};n1gc+R$qIiO^?uhR_;2V`#0NIke7xI<(%- z7TRFv2yL`;g+90QhBn#HhQ6>1hS-}!TkH~{t#+x$(EW!DVt zwrhvJvg?KR+6_bd?Z%-4cGJ*7yG7`b-7<8(ZWlUkcL<%ZUkaVHUkRPEyM)fz z-9l&W?x94xU+988Aav0l7`kM?8@g%_4gFvb3th8Eg>KnnLU-)3p}Y3P(69E?&~Ns% z&_jEA$O?QE3I=9{LV=G%QGt1(=)i(dhQQ*`lYyn7s)0{JF9eo{ss&btY6ez^>IBw= z>IT+@>IF80>IXK3S_Zxd9SLj>afbYWv(y5*#`*6xo}hDGOkrJ%a9!IWh8F9(GI?|@ zo$HoPW4iCU)uX($ub$SmC*81gpL+3B*z|lnTjwsl&pDX5lUH;tryKTzX=wRex1Pt! z3c2pdAHAHb6wONO? z+^{S>eJM_@SFJ7XId9u0;cB}nQd-Bs5j;QWE>-oCp6Ae|HlC^JZF#@EhSt!Hr`D!Y zq*QAuZKbNoOdsl6GdDk#b4sq;G(&6S#`})Cm+g4pcPXt`mFiT$&^owjFY~})XV;C& z;JG~ab?$FFJ#7A~Mp7S|P}-~0%l-=u#&ddvwB=_Vyw)0J>Dt@w(wggxqn5+5V=NcDJ8)!9A}8_9jCc=;l&z3|G!vm!XYUmiSCw3+`!aXd~UFv1h!Vectcm zEl44CmG&IhI^1|4`L6dwBWZglo%fb5@zdTo;e}Nn;Pr^=JP$0n40%J>K5+Bvw#jq< zc8aEtxHj*uBc-)1o#m~!`vN1WEPq{se>=aFO7+(z_;*q~c+%@@Q>uAxPF~MFtY`3q zhSQ7tkMr7h$XQ*R?uJ#>4Q;mToV2n}4<2J^3*4~Wlf8a_ux~^7X zLp$QSw|&>_qSs^JT5D)0Woc$_4|s#H@7yqF%$8EAk-Gaf?i;vERY{Lc_KsF+i%uNS zwQFv?_J4RImviKlW0WfWu-CnrN8RVVV`$5Q-d;PutFGO4b9wbKZ=Y6SQ&)L)&{5a5 zpWS#*gbeL>*EvTGv!Ju@H}yyPu9v(me{jWfOMKVrvKJQbm-L#SHuX@iq=tWlc&wKf zcJ5<6X$DX*-fOoH>wCw%{nV+{6|s9J9H~Zdn%iX;sdu z%&MfT{k`Y69bWt9-0Ag=lxCYB`&${qQA3XG4|$P8TtUWcahs}oNA?;ocwq@gy)h#5 z0xzt|PuwGN%RGsFLDFueC)WE@SW59y$}go{Qi|7tBciNL+h=G^+_hEq%hJ9tcgfta zw+DFc?p1GY*82$~X{>8E(aYu3N^jd#erg?yd4E#&9u=nIP2+4r%Ca!hbGeX}Xm!3=b*>hj{Znf{u`fjD~zV+QZSq$wJcO8E)w~)GD^}V*IdE|F>J= z|Lz+4PxPVx#5(?`6?hKQpB<(&TKw;;q5s5Q_CI~-|G)PAPt^T?Vjchc_JIFH>Hib! z_@5g3f7{FcPdeL4=?cpkz6>U3q<4?-WVd^^xV|h8V zB~Y$0ZW-)dZB*9;)jEo-(zQwMI*d;}clAxL{%WrD!mfo4ZMqvzU2QDSUA)JK?HcIC7*5Ta0l)ig`tIo3J&b3mx8dYkx=hQXJ!5h7OFr_l9 z^0nt1YO*h+RF-31yb?HVF1;!960iPL-^iWA+w!?zdF$QH9(By!j#|F^>pfoW$x%xU z?OQi(&iQ-~&vp5K(6!61`%jDqjb8TJ+=ldi7}_0o9iiS{nCe&mjvK|D5ZQ9&{yOKsj`t&XUmv(-o>s@}_kZo2du@NX zDFXhTkQN-ltU}J%sa)S1-jgdIt?>3~wRfwT(VaQoQgxlH<3jJwMV%IgmdedJlI#33 zMmX2`#TDbOn~aXmdc%GR#Hn1Iu|(p1vBFC+iBU?z)Nx;xRFzMa*(po9zfl&o4t2l6 z$wjX2t8q=;i>cDw&@#C>=YGpbdfrF1s

    k1~h*Oq@sIJlFOi($w^5bi^yaV8Es&xZ>UtaXHoN1quMmMK?O)9 zcOsL>-qh#aq0h1PSsnSNwddU#lKedl#zJ_rd)_^)kvl+MaGx(vr9#0k2vl=lVq)N3 z)3~3cn%k5~q>WW``w*EK8V+Bad%&K*YVHt8CIN9CL6Sg3^={M6tctd{C2WK!O!uTl zu55dUOD5G}4Ij*k}9I+iYts41E{$NXR-2)m)2O`{LQ^{c4c*$L+k^LZ3!>w;A z8C+qg<+jtvX^^Sy_SFd9JzK{esgW#@spn4C$W+<8Ps8%55;FMb1g&5g5_tsMDb zP1to@B1X{!{wCGJeMOT0BBY5%Vxd$EcMB2K>RP&K9_ztYR|sTUy1j%VPXlS?j`ERA zHLetgU-E+gwRX2iQs@=f=LjFO+q!weERzCXLd!v^H{8~eOvx2ZGVR<{BBPCFu+OS8 z$h_&!dWmh}4AuwI$z4_*iCVdR%iT;Q!6*fLfNO)yTkbwdhUbPIi(vh27m8r1oWaP} zRX#6NOX%hvp;A2ZV|{gV&uXM0XzuRjslopAm1h}xx@9B@&NB3TNOMoOMNNu5(wlm^ z$uA?}w%QCd_jK>~{oGBG zY=D-+WET?yzf1Hb8NW8#QuW@??MpeHxIV zZgd@z2{ncFL)`f=)Xgo)!gqMxZ>XDJl0+cr;ZV1*B(pR5gve00RG{aTXem>Xi1K-; z%shLT3p^X@maL1`)hIF4JwSxxnnkwC)I%8+*DyDU2*>pW$P9OvYh)#mk?uYwp=Y+;28HeNouv@r`{O%q9n_^!5w&1Dw~LkV$4JBXN=ph{{2ymaWjZ; z6uU@||0?B~MlERa##r}jjbM9DaE~wv;o2c=2sg&L7bR%`1W)jdbMHu!6A0eCG|tW6 z05vNQ$GIhmu=TxQeVp5uh{|E2dxi+-@DRw1cVilohoSUOqK#8PCb;<|DLaIBc};MO zOLC%jKq?SX)+e|vh_Ll@q-Q=6W&I;}AM2rP;5z?A_q0ZEh5TdpUnZeb2YIb~vim#-2&Dz~O2uXbTQYuv_?-r{zVB&kF|dP%b6g@6nsqFU4z_XZJey`4ex7Pnfb`>k(vKP18) z;yV8}_X{SW;8~F7E@EP=gWnv$b1rG_N+QZun!BF}+v*Os(%jh2_uJax8gC(CTYW($ z-F2DJiZn*L+pQ_d@ImmK^&qp`tuM)&F!o|U-R(A&Lf|9 z!nxb+MMU|$+b!EgWqvZ1>P$q{PKNs_5%zf|$n0^KGYREy3SS4{E5lxQoh0=q!Cq|e zX|KD5h_bcU4ZW>w%>zAq-6=$rtxWfHSCyYdAhXY{{SJ{xevY~gB?@5*ckyx_7&C#)1=t zC*7hwm;@&ZPr0v15}YVJ?Y5I7I8peU+nY(`MBy2Cq*f{&B0VEVHm>Dd;Mv)S#=5ia zMk=MAm4S?!ho5zaze{mNqB!f$Aj19PXRvkF&Dk4e*cLud&$)3-j4ruhXO@2~0$cSPTE8*1c9D0SOir;#E+?z&qvQWnVn+}Z<_ zo~l5iye1k61IgjtB$6IAe;&^vLtg2DSc-q~9KWB2ycZA9Nv?ukVJ4B2T=8BhNrH1* z@m_f%s)fgU4K+R3TH?J=HPQ^M7xGe=7$euiorOROdub2oDeRrrN}-;@p83A=uoILj z;x%9rY9deY74w=)(#?-D@N0W9?+qf#!(!ejBHY4zf}UdDgTLZY+?&sOs5kWond06S zji5hId!;@ge~cp##Ym7T<&|d=3RZ4Qc~vC|R&Gmqo-7rdA}Qt7C89hm<@F)L9*!f; zQ@9lQGZ9E>FN=t(!DqZlBgvo0lkr(^rX;~?^RwRPk_4;G&w5`=f;&2TLA^igr4Uj6 zJnO}dLd{c+Qw5`q*zCujut*8H&BrpIB<1MzAg_dykA^&0nwJ6V_F{SV@AN=T*F7lAQQD zkf}yQ*{b4=A;NJjg1D-9X+%_9FL-6gk}dLQ1;|wOUS|>t;xfJNlKeD|R}V~Ygd`X# zu9=(OS45O`(@P_wY?)qMg0h8kQOm1LggyKotUF$BmI(#6TyGE)<0yPB#M!CqjU}RN zx!wYnp(wC+TyGf>^^IP5JBhHZZD7mya*g9WpJ~Y>ZPm@IZ^^o=BP=nRIQyR&HQZ>EnOhUMW9d}36^6p7e5WX+t+_;vPGZFn!)@ylXh^Q!P zJrrqeuM)|yheyFy9j_M=sLw7VIs=PBPenK(+}vv~Nlln}Jwc=^5oN2n zmqdhZ6(E_zT#9U=<`&+k6Yh_zrMF%q_|DkM+oO@9pr@^OS|iT_Y42TS63IpK4aFwr<*Mf+OtCRNw5%oOnCE53lU|ji?>?SgZ19UJ3vIWjjmpqkI@$A zxi08=$9s!NV#ut_t*)Ebmx(bP-fVCL=;pmoMA_>0(9EHmmrOD$(r(_mPn50Kz*aYJ zyGB|A>EWFv!aW6d%JuXvYor6nyz3R6iF#BNeZ4J2(qqabapwC)$dr#^trzN|pSO!; zqU>ZIZTfk~WvPvG0uuWvYEF*{o?rdEcqWmVUO#UT5zbgI@TZ^mH4*k1cO>@rzS9Wa zdpW>6PDJ_qo>zGm+DZ&Pk<2Y>kXMIEB+rAq)^sA}gG?f;5W~F_lH5+<91i!+N%EpR?LOSQLPYs9+?(|o+ETSV z+`B-8Jsc0#hkMsGG8M@CUi=*8;r>f-SFqPjBj{nG_j)qtC)lkz-fJ&Ouv>M!*Hw~I z@EpW12;;rplC00i&*kynAV~(549EwP9F7Y}q9jM34#*@)K7A+9Jd22meY{t3E_%q3 z&VsncdqatEOTfBF@|J7l3y?|j4rl};o#=h~IY%0-2z~5*AxTgdAA5@=NryEwd|G|% zt(4>d%wm|N5>Xz0>`nOsHLKeB*gH;yJ;ZtM$KEZCtOO4yd-3zgpU8+b&FjM?lngsD zaIQ7o8!X8w_#TIIq(esm(HuBu|$ONDWDbBgxAVJrjwjC>DAZzfwNqH=c!FLye%% zUwg?+B4;occ}pY-=Dmx&Z;2?)iyj*J7kP(CMzy*{-t4c@I_K~|h<%Z_SR*k7VTIhg zPJ~-#ERb)!qKmMUY6&a6L?VesU-*^Mk|47(Afa{m z&*Mi(D0sJ8>3uF`f_JNx-cm`%H|CQa5fbVLC!X;9&Ps1B$*BCS^ztuOu|GpTm()lV zAgjE0iE!*Tkk#G{A}aQ8z0eY>!N`cc-iwvwlKh6a-iw!{1FXj5d%=3Iq$I&w<$A9i z5#`}}uMNvYo*?VJ0UCJf|PO;f#j8o@o}-+8g$s7UKV6yJMq5>Y2fH+pYN zf~&i@w`ZgGE)nI=MlXS7BID0S&tJ;1_ZiIJMmKr2C3y+95a8&y$!jRdx3D^eE3TWo z7DSZhO%JuzP2OpeQEhdTH-DLm;x&k3lb52A)HuVm_w;fsrRr;&*N#YH zXyce@qdUlK_qs?@y9|7dC(?_E@^HJCN`!mLdnB_U7UX#f$o%MymgG6OV|*r&iA0q3AH4_f8TiqA@ScI6yu(zAJxm5YyS*%pd<|re zXRcHpE(h|n*M^AlFw>jCGNC@h;j2CDJKg6cOH$=|zE5VKw~&bPaG!UD2wPtdn)i7f zQL=kGtskL^!U; zpF+(IHS!dYKfT#RI4<1De98M#BgH}HFK;Ii71w3&(RCbG4w&hn&sV%BBssnU)|sHx z6)&EM^6-k+g$VoeJjo2yhy&!Bx0Ur!AH+8HkGESR)j=lPyG%s+^RHLtTlOc|=Xt}c zD9Pc=Jde8JRU@MOx#0~Z!v53;%{ROxjWh>x%R9(=$e*@AZhNOS(gny}ujqQTuKfAW z8%QKE@?s zA{d;&5tqP`?}Y6ELIMl_WKPi-)1 zBS~%9GGjy+BFg6&ah?eKGlw*1Yvd~+kBOS!sVJ5K$s>9ZQCWRLnBTL{!F)AVge5rz zyQ=WyRIGSKlDvuBcVa~&Neau+FIKcBqCAWhF&j~{>N~OG!P^&OMg0GV411Uh%EyY4 zEMshpjyAr6FA=d~-UFrbi-nuemio$&Uu>5o_{#94*eyx$l_5@?ktF!aP(WleiF{=! zD1BD`6cnM&_s3OG?B2@O@higy$a6uFdm9oS0kHi%CBj5he&WR|EE5V=q~k>+Nq)+~ zGlzK5k_gxG7SJ3o5?F>>Ca#kd5(|l_IxQlyStjysUR31TPX2^&MF@986&3MBls`p< zO@wXj1Y1Q#S1v`iaIK)27)C_dDlX=-OvF|Rv6hI^T;id6FCngwjA|Pt#Dk~ZO9(#g z&N;->A04!WlEz(FvdH8?HwBCvS z{Qt`gc}V8%AF&kY`5^dQS}Y{OS;ak*WyBgH92f2yDl2vpNsp<&fcF+YBla?hJn^3q z$BD4!e}5UE7i`u|8KwC8^76~zZc*m}-**r6?E5K($6i?d83{!|v1m_%KM z(dG##Rauxnt0-{aS7p&eBe(;(iddx)d6ZMEFe@xMY zNMh(}VfbPOrA*P0WnxxOpoV7H+su1FH>HuS_jCXu$`iE{hU7F&M-G<)JbjW|Gr zNFbtGOIYmr1xuyJ%$MK#UlIo;$@>xSUwuiOkYv|j-sAd`I7ft|co{UmBy#L0JrRFu zijhQA->E5*iLi%_pj1t9iHP#&WpVHT>S4_-K&FWE?o+2@r|7nrg7qO2s- zVIGD1a_fsqk~CY%&$#-+l;j+o1f=_0L=7eppX-Y&MA*X~V5`2UaR_ZG4__5`e^nm# z1DOV*-eK}5qNj4uyyRqZN<|k$re4oVqo3x4N*lSUqY#NqBaxi-OGTq7wwoB z_2JzU-?rL|R3gfs_9DkAmDSZ$svHp&dk1lt2*>^}{C;jnag#`TOmMoYlgNFVJT(5T z6K(ttWIBnbh)gwZ!fCh-pt+MMLqu8cELsxbY@~rqXEB6`vi_FXMTD*I2AMA6cP63L z&{}W~&{bTQB#+>B*j3ykqHJ}2=*ies6#Wf-R&A`SxI~2g*$=k5ir6zKqx^YC7{61b zR2N4#ez$t*+fdbnoZTP%^}!cksP>@8L?F{ZVLQ;DFb zx7Z+M?yZJ*3nFPmR9wA9nX}5D!r*IfQJaYJxv!W(gyS*_!PgV9j!1e`{<+-a`ipIn z-2N;edznOfO8B8I{BTOQ!F+`|}*gu!p(8=lqPmWz_^dNx~l1`=Re6Xb_DA9|ji5gti-H>QflL;)m_$bPX`%s>h|kkRYbg`>JWX^Y zqI{kvej}pV#x#*lglnfB*qSD4UsE1p4yTI~8bP0Dh-(@_4`+(J|4^w=9vCI?8|!Ql zW)ksmwiqmB0uN`4QACu7v&AkV>`!CRJX^$P-|x?7Vw^@^2bnn{nTdg`@oxf27Fm+a zjftikVv~h`9rY+%$s&OW+v-B44iHi8XRfIEud?0~WIh+InUJmiK)w(QB?)YOA#M^; zw!RQGZlE5vHIzzCA);E#Jdx+7vNZ~1=8KXV84qNEsI8I7K)w`1n28A-pj>eF%#ow__Bsi*d^jB5f%HA zhsLNS;uguMcDO`1cT|3sfImw_5)oAw--!Hol|MK}EfqyIg12%l6SbIxQstdsD?|fH zwjPFWGVt!OLbM>FJX|4WYkE-g3h|{za2L}`k*N{v7pp|;d&=h&@OicPib!H8`v|Y) zt`W;6!F#dr+vpmRN<>*-BaHtkJ?lZw8qtJ^s*ANEjRd9+i+M!2-uIBq6(Y)3s_0_mjf|oPKxTuOp%Jw8oycNhJXtK-I1V!3 z3o8msDO=x*8bsLE?<6yYh_ba&l!{ii{s5UxqLN0kf&3ueW)i|Xb#cGeHu0_`ALH9b zV3YDCkoy+w+ZJFw66TwF0zPlo9%~q8Ah6 z8~An{3o_~AJ0i+fy4Xd8Z9PRY@j36ewNo4*!nTTo%r0@2N$6Hov{3=bZgESJ98jk( z5Q)k~{)8&Q&S9HK9wN&6Zn2mMTMv`WO(H7N3^C?W6<2ML*&`-uqydnhMGBM9O?Y=` z2_#dbO7g~0IGamk3lU{K^P&EpDPlutOZE3mkwSz$>_mEunEUgyPYfZ#`RN8SzldZe zp%s((OT+=OP!jwSfi2;HSVctnb3kMgVO#w{&jC>~_x-jGicBJGYbeMZ62@aF!vyR7 zSJ8rr@nwE^rhv?0v4DuOby%bjVOvQgW8}Ht))6s*2y31UGDpP>jm!jcOr$aiy$C1x z<^ee&wn)+up0HRKC&Vry%K8Zr|2W!W>tB;hHzKOuPl{_q*gDqxDREaL%YmF0CG%43 zq1-SdLR)7pg2V5y=S5>8%KCZHiwIla0ea4hjYL%J7euvK(oFu~OeRb8)JO)D`a{fR z5}9jV5??WiSidAz6H(SLi33E~`XSJBNtDTlwv_e1#HU0!^Y~2pTl~xpiPJpc|q6raY>#EpJMA^C~ZZiq(mA0})^pl+Dd(u|6 z$W27q$`%!gu&uLTD_e{pqHJ9kx#Cn-@!9mRh}FoSQ0j(gq7m#(w?sRQ+yI%|B8v&l zWbpZQS2zVovk}Z>?uscyl!tf4K_cv7R1qwdO+A?1!u~iUbCZbjC#OHVu=1xm$mH@D zYNS4pke{uQRzM!}-zmb@dmZQ2lGpDeNpW=W8VoU zK=b*%h_Ef3N9Fg2YotHCJ3Q%6Ad((45Y7(ZoGs3uCP_UY6G3yFpUfn(4iM+x)%2j| zIR8L#mFHt=74y$aa$U|Ci}`;OQMQWt4}R$@=Epvb z*3}dC|B@+L`u~<;53$~h`AKCSl==uZ)Qeco?D zMCqw4Ye!|ZvOkbyRP9vuXH-yG{R1>t_P=Hl$!ZlpRmxyi{{fjQ{-2TrIefvtCkbZk zHpo=5m|yqHz7&EE9^a&8wH5A6@DGta|!{;QIF79q_fX%->vh$s(h`QH#x*{J33Bf>t{1naf^*ve#!Jj9#&Uhzw41fS-0 zeUnIf41USNow4=(uq1e&RRNHx@4vz%GHTWLyAV;<>-$rPu=RRi{Z)UjMj8WY;GbYU zF}QmKzbZEJ&q)&O?rY@##Ux^@k)NjuMxksq@{15*TWvt|YkoT-+*&#UY3z?8k{Hrh|V|l4y7zOebQzc)vd#{CY%`KOOwF)l_~m zpj1cyAQA2Rg?~YkpiVpamnC_zF|V_A@^45I>?7*r|0hW{e4*P9nmhTAn&eMRa9*#I z|AZuUK8>dPU_1FwNs<>0{QAP=n z=_yBbZY{asZ+-kBEJI@gj!1p{@kF?dRe(}`{ar-3R8=7T{7XdAqmrOEVe9ShSF-PK zE&U&QzW4VXl2K2P{{Ar{Y|8`9{r$T{R2v)McXUuQTdxT+1N}i7sR!h}`$#h&gZ+sl zlOBU-VcG#1>d%m5_%S};G}Qk>l9nw4vQiTKl~Nq*hWe>YB5h-+f0GFN+?g~ta+QbO zfeiE8X{0ZZ;eJmd=`oowisB73Bm6;<1mo%m|6?W*TO<4wA}Sjr{C7OG#nuOd=J)+1 zBAlNOfPCQpN+dnz-fP^y68uw=^pQO-!M`BMw$J%D1rq$rk{pT1+>qpCKi;dK;QuGd z=MV+4$pbu+-91b-frNE;jP$NMUZFF+>Aw~3_3;GOySOK>0h)g{3@ z^O@9R63Nep{t8Xc*P!P^{|XV#7=GcM;P(ux+F1@VAKgdr{e7Z8Op_@9`Tf|RM1-G% z_$73bzfzK*z9#vpOd|eF@D^U4`Ee z`5t7Z_&b?IG*9u*6H%I{`1z}=9BzYBQ~jnI`4Px8zXK6&8~cIG@CRrF_f^jHKO~YK zvj)z>;8%}X{!~c@%37Y~&t?+wXO^EzMCEyw-@b9x@OZ?|037&CFe1}QIpC$fcBC0Ny_?2p_{JaQy zzVUkzVe2^ZFZB~O;(^RkKUpI+fh_Y^6H)cG!v9W^_}BTo!wP>JlZZbn{6j=keXZ~x zdqw$EA2hG@UnP7a0ge4|C!WNwGPbSK+h`wMAt-pW>dx*d5 z`mMi;OVL<|zx}%2-$8`iMtkrl)z4x*QGMWK+1o%i_|Mfv50&N({tHC7zSe=}`w8CT z`kh}-lR;bG`>7g1e>VD2^;GP=z}6-|j>u>O@9Q1_WV4^ZGNFu7@azKegTI*x{W>j@ zE&eV^Iu3+y)IhfS-RhI($nU;w^N%wzg5Rs%=3kT~_)Xhw{!K}OyIHpR8LyHaqahRkx5}fJtd3u+$ExF@QD9tbB+}I^8Y~Q zs9!)Mp%QRr#BWAK)!+%gtt3GWp71+M64c-czlS6{Ac`kI&k4W3Bth+*@P|nf)XoWi zj3hzrobV?SQMGfzZ{Fhmx;WtvU=pc|ll}-Mk-9kP|079I7bpG7Ejfp0z{3LI;Yq)j zBtf1}`dcIk@_f?ImL$mY$%p3QC;eKlqh>W`{$Daf9+D~9O2t)#{CQa;IIf=dM-ky3 zR~BS`^CxMfGLYZ>-CQb?jkErKNtVl}@LB(uB(>Lb-#P35PDJJTte>Z~@(0`eS-%~V zh~{&C7fAxm=lotwj5eSdTkko4AQAT20uRsmt27b@a^BxUM77K;zfBuu9al~+`hA#0 zb{75V50)gjzvWMV6cH80pZ;!54@U8)fBgYHm;8H7jE`X+ehB*MCBI->WxXzV_?KTz zBUl$#{E0+3t`;D3)&G%YA|77z_el~f&)#11k4RFgFVFd}`DckJpRf7u8_GKRe9a%q zB%=8rf3zfl=70PTnHV-`#wh;rXAxl!-vAG@{a;vy#)Qs5uKUL|(jCaZeq1}WuIl2Z zzl;d4IpEpJTmD)}mdW0I%ik!;Ryp?G^3#|^<{P*CLT{?L27s+wehZC^1#-_{s1eL_ zRJe9~EX7ew2bt(_GmXpzk|R8Th#I4EhKEZMj8QqmV# zG7(ifIl~n@us`^8SP0g0hG!Asxdhf%D4fb9(oTbM*fq?oYXk+NX~BT`IwfFw^r z-@y?nCY&P4A;>C@{4wGGm{1L_BAL9MP!HD^zLDh)S0KU}O9h$7!aazj#|+Lkj30pH z3HN6bshvFGiCQVVODIox9TAQT>*De7ZyLdybMl7oY6Nf2i4EuPOmRhS&dDDxEJ?6J zl|NjHh{|gIa7~t>xH7e7Gf%#L$`Jyq~sE z_)STQRDkc)Fp?Aszb(ml_3KO?5$0;4OTm!#y>ExA2t-4`UL-dj`rtsj}fQk~{(@4$2dmKtx$D z8(yyIsX{WRHG=thF8qF1m7f|QQ$GBWMqUL{F}#b2%1@5W!g?^sR064YST@IWHUpQ_=nScYn+AL+>;qQ+h;+^f6tXEeyz z;VDFv9w&T?Nz4;x_(oqRd`XfIp}phRNhh2w$sZVE6E>QVTA@pEhn6#hsqDO z7AO3qMsOv^4L_}sB=E-z+Zve+MBJwbf0xRaM2%75a3dArdMVsZBlCdN2w!5& zp*LVv7FP>vhO;FJ+G@>kY)|qzlC(=-o&a(qDnuy9_&G00a zp}JT@r50)g+eWSM+r3m>Yyz3u;Q<=i38YRqg-Bv3xJ9IHI8~D17LmH)Eku;{y5VQu zRhh>v{eM2l=aX)9^4!UWc7&SYJ)UV~8kQO~dma z(9<-$UL$C$dH5s|j`TeE(;|FHBUgaD9xl)aJxq^T1uIYZ9j#Tkm?Vt^uPwI@^DF8BWg@4va2_SEWAL~bY zBJ+)|;U^_|e;mJ8b`2MiBp9Q*hD%Elj8R>~6^W?&>KdL&MCGSzcpDM+=NYj6PB>E| zRe*F47wfO$vVrsnzsMwnEB`ft^a=|}0_(lPwTLL|y~3R}Jvbuu3is0pj!5s`CxfF+ z?{E^yu!nWQR-f=qE)_Znzw3ct2l|FX12|*B*wQy#jfk?|H(ZltXiRtw^z{9I>|JNT zRmIWXQ|`+P_8RPf1yExpipn_$5j!fjsIhmW#@@w(AOb2jqG;?DBPy0Cc2t7I7<(+S zD`F$|g2wXA&dhW6p1t>Q?+d6gANSAReRg(sc6PRxlk~4bwk71yWS=TzCqfQO22>$? z5^{KQZWXdWAx9KATbYkcMl+4bd??WzmBdFB%k=1Eq$0@0(aF_{!0L`pIv;6c4Kzp6 zzUMK-=jdc*MqIv*NqR9Nb~un|j!AZ?LhK!c9sE=m?S$)@G>b5YWX5#jR*@wq5Dgb~rkG(!HAOsYcW?m{;* zk`+&OGTTzVF6lCmkz8Y=ljRlpc!V*_P^{6(YKq`>uhGfcieSxibkau=yzVtR*+db% z?ln5uN)f#7H9Fae5tpyg$+wJ1zLw|I+n?fOwmSTC(zgn+-x9qc8Ow;o>Orx_B=ZfD zeEsgXa`W!Sq^}~jcH6VoHzs2kajD;!+%7bEJ-sn`m=RZ(Z%U>yB5AEdY2BPGGT5d? zx9>+tJsq2LR%F0Yf$2juW0MsH$!qS|Q!s3ObJEPHRJIa~PT^4yVp&WNOLYttRc z;2|#c11Q#=$?c4|)W;?FDuUFwRZd~%1Ai+AC`ncpPMkMct5$AD9%V}I* ztoh>zxhv_!h||X1$>ofQHU<*SJ;_Z~$mxXKmpsA9#NaDBpKvZA_a~DD$#Z&t@;xJx z`h`rh;82^oOKW_x1tXHyRYdb(vU3%3BOwnb7cnxV_4ZLRdY_P7smNc3%6xD_GKLXn zV-u2TjJUKWBx?+FdcK`F|1~+1k%{e(Ka=)_37MFjpvVdIs)rz_D)Psi=1f8IoK8&s z!iY<2Vlsgd$=8F#`H>_ZZd0Ea>_lIDm_*2=WPL$$K9iFEj5t1%k`EaXK2K1rza_su z-Id^Tgglz`tU_KPyo=_EeWrscHpbkd&@(MAVK>zU+iMkMw52zfSnl97qQg7nqGB?x&gS$u?O z{toKjmtkZ#LGrYoOU5zc(t0l0;w+cb6)4v8$p}Uyt`2HP$$N~5 ze)c6~a?kj}{Sm29P`-B>fnf7@R?M+1>(}nw%*}p4QZ46eEt$)MQ!}pFzau-^rTi zTh5}5;e>pc^r=G5A>^av4~$G~zmAs9r^%6uEHO<=@YCc3Mb=s-G?!AWPm`g7@RD#V>I3+(5|ZNpD6b2G>wKe;XlRBm)J>Ie(E1W5jX(A{oVq zaK4*jeVM$#h~(6A{wn!a_~e|YCCMn8x@*IyCF?WdI8RHCWJEYWNPNCdZf8U|+gq96 zB#%}hc8>p_>PTf0{9UGlCXpRXgc_3x681OUka z{fSfOvxWAQ*AGcQLGrmnnBK#P$nzZWiPCQvnb>|uJ!2N9;l(1M{Yu3vL=&fT3X-Q4 zr+!*-x)am5ythm5WJJ<>i}0FoCv;_Hzkh#*;7@64q?!9Ckd%kpS zMbJvjm-bP_z9esVm*z`1QN->G+Y?jsrCSM-%RFB?h!K&e-7*2uJj95|Y>7f9#4)Jk}c8B3NhH^o{g-S;xlk3ElV&!PP)Jy;R!D*h@xT97>TU!|urBB^&I zKEF!kD;}B_@#&aO@M3jL{r9yxrvCd{i=>ZfEc=yG`*O~r>6cY$Ek$W9n#Pw~nI-k^ zge;!+Wkgc9Gma(FF;&PaM6+Z%UXa#*^p>11l_Q@W6>{E}O8=oW_N2<16lFbJI zkR$IZvi%6qe5}Z-WR-U9qI)_`k^j&-fgt88v7cVUrS0vWwh9uQMk_G3&Fr3TBS>yP z-P7P|8|xgd-8)m>yQfPCl7F>l#WZ8YX>7%G3r3vAR!$FOWMc3w<$XWmvs!wTBBLqq zhZ3@Sda@#qP)?5{q(?fk3OR+4-=vo+a<$T|k=|N`oK7@rruQncKk3Kv>6t!Rg;+jo zrTRY8} zDe^tNHWn;PHz3jr6bY`CQ^8xMmkSaM(mrLY^aDY18{4YJ#1vy z`CYm$BNN-(v#It@){g1sg5;ccOt)vmjnH;XZ>{390`b`~9bbj~hLD|8^Jkluw@CI)gE7pf{RQtxd$@1fUXe#` zlGOK27ZfDd*uLrS7;$OsoBo~=N$aCwBt>j zdeD>PIcgqS)lYX2B+uzV>F$g;c@9d?WJKf{OneSbA7ex;!PdA#(l>=qUgHi+-&X`R z?y&SzLGrW?OBcM^%Hz^HEFI2>q;)!_b$I$WMkexT@LWQUNS{&!qpu^<7lBZJYJ00A z(l-=2K+h)}k-n$M*GtQ*$Va4~3zExoMA~m`QJy2x!HkGJqbT(w(}x+6ykADhQRzRb zkZTD!I(>@~S`VkWgT2*qZ2EyB!w6ZK?D^RAb3yXdk4<~rQcV5W^iPaP>SKxXap}v9 zObj;JDl~Tza(vq9Rw>ha=>?wq897i9y8>)yQpcy`1j*AnzNR%kKK)i>+4HM^B|ayn z3*IK2E%G=aC#44~asjOk{)>=-=}<*%JO36Tr=*>4x3NS&E%fh{bO%OUDW8(=$B5+X zJ&H9b9bFacV?qX}k1;|yC0m_F$f@aEe_?s@T%4NvbI()Lj!ffPwo_C8C9zXe|0S^@ z>4ZBhXZO9o)6$Ow$wv;u(`D|oH0~v_;b~t*@RHc+=^qrqEzvX5!HVEE?wRTNg5%tPV${*KsVDFVIxS8dpQ};(HXC^7Uai8lgm%&$B{fR=C6{@-ia>%{1B_ zkhFS^b0uiMZagAg@h*#;XHKHB_<_petaN)tx)9QCIl9M@4rXMc!MB6YOFw30pjmEx z`6}^w>GpS9J_F5f4g}Ke9zi-E0A#Qt16Bh9nIE}Xa&casi`}SyxA}5NzmI_2u6#Z` z7JNQdb5Y-BoGk^LT`6SkDEKc=@T@(&%)|1o_1(7-MYjis5 zA2z2_zpS;4Nw2O#CT&8yFzM*WMH~1Q_RZ-kPl#6UCtJ0pJT~3>DWTbRc_0HA8Dd`9 z704Y*13iyTA7;eWow4cXilFX{P5VAAX`$|nP0cfc9C0Z)Z==X9?LxC6L}_@*bCtSL8XW7Z$lIo$H?xYkR5}HrCx~ zM@8;kRBZm<^yHU>ruVFuvetRck5YJO5W=50ZC)7msC?Kee`6Rr~dOiJlVT%sLly3(w7 z^}B7XBi<8a!}*2Jqvl`Pz#Uk}ACT*Q+Q+NHvv+2T&3^ILAk+OI;T}qKl2(jxn z&!*iJ8I&WdC~`I-w%nghdnwXik$^JqE0oPJ$JW8VOLC7tKrHWxx;U+Q}`?Z(IuvoEbq*|nY5(&H34f3U2Xzm{I4 z2;P}|ExkvO{GG|y(w7+#&Iiz}MPOM z8|mVTd_d#OOQ>&pBkjk?5VHr>9c!6yrh73mCD`m!`tm9xhYC&WWE$5kMnrF>Cu=Nw zd#E4j=gssw^QV0vQ^7xO1hUItY@40l=PG;WJ}^R zB|V3cDebpa9ln!ZDo8Mp))@csJnbo@w=445z4S^JA@8NnD-u#YwaC=;8%D&&zMDi} zzE0=**je3Nf1@vSq}>>ivCa0B`n2?Zp)vc=UeW=Ce3!mk73(sJ^TuM zKcowPVmY5@?Du(&W@ITvj{A;o7&FpMk;A46jmcJJL{c9@G$z}Sks+;XP%Jwe4YMs2 zS#ou`^&Do~DRK_+v3n(9b|52SEhC6em<>~!mlqN~mFyfv_IXjPrIKB!$OZ4pYGEb2 zqKeNb;#0{c3XR!xAf-h}`|L?Yz8FsJAt4>Ie<`xXYqZx*$Q;>ZMLN;j2#-8T->}ZM z`jl-oFZVgK-32k{jFs`voY{yfnhRg1lhfHHj7&7>(dN!>Pz0^kJeiETT}v{5c25-_ z+w#w!J;lh7*7R6e1zj+EQIU-Zv9)`_>`g^Zq`8A_Z5GPjS7ZnwmS&;sGe$(u%XXmC z>Dj!WiOpX}t4}u8B3Va8>}vCF^b+PGStmv8+|#~vy-3!L5#eJwFOu~T#5_S|y4S0; zCY$ML?oiwnop(Wt~5FwaM1y<+7fF7(4$u=rxPnsmR(r zXa|`1ESEi~$QGy4yAXtQ&Hk>)e7l9_bwavj|5W6iU(?%cgmlkdQ)JYig=YEeJw^Vd z$O_r#iVUIm96q5~D`s84uo4b5e^{C7a)r*BXMGqE%?}_6SI)L%#M#&?*{+Jf##YS^ zW<+%O4RP*~VN{7R(wf<6Rh;LbF~FMHxmCzcuNc!a>p(U^{RQ{Awhdo98zVGkPns9> zm`tC<$-bzH6?dim+HC$WZ7$wu-+5oz8_lvs1qlXSB^H%st18Xk`idQ9*;GeC%r^mS(r?Xhn8;MPluqoubI;v>tA0_Q=ju#MYfn z3E4Bdh>^kEX0Aweeox!L(C^`P`_PQlB75gZKSlP<#tNT2*6*`>8F@HFtOK&ezq1lP z93s{qG?rM4<$Q2<#t%Y+Schi!M)MS69bS{xk=dNBLW5XGXW!0KjCE|*y`x3kdcyHp z4@M@Kxz`EJO>@v1QFb^ZZp?OkomeN=#G2GZtY>RtU9gCiXZmSf%{0{#PHiIAw3=AG z7j2wYKc=ZpYo5g#$6B0es$=cdM65$0?S&NhnP_`Hr|p(1t(@bs}M_bQnr&I{B50`sqa21J4lgl zXuP>S#X2b)smRqsWDI$7Hb#+~2w8~uoSaQo|N< zW##RZEbc1EVlA}KNNEkq=48ZuKWa|H z_~&Jl6v4Xa`PnkdTh1~fI+OUEpRLZwl=irJcR_Z;Gj?t@rTuQ(h31Hu?kQxwg(mnt ztsl=rt1uU2{i^tkBtE0ELm6@MT%4Vx2;{jWJ4+GBb9weKBVu(|6Q9eok3BxuWZ!#y zuFd9M!RBJ30iWx$vlx+l-AR0|&#qy_Xf|pPRDJf9?1@NPKS24q3?|FA{QR_OT$X@6&y1ds^(itli2?(|R$z z1H1u^q3_G)QRK}W=_rVKjb5Soi1^%>MXNf_-xD%ETSSmn+`o7zTcwJor5mm8W*e<$ zV@(NeCOho(A7lQO#XT${Ww991JeH-5xH5e@>!%3H^qFiYMNk&cWd|}c&}^uy@y}(G z*RY(=F@OCkFe?$~=dyQ4&Pj-rmtFaPA!}XJ(zsoZ7qgCx2u)9l^>WrzX|VtGS~k>+ z^;-5VBLmGLyUU#M&Fq1mE?+jSH?v8MIQw}kd$NkA%RRKun!V)FOv$D);$)tZZM2r< zJka!cTGDza8_kH@p?fDYYZvqNPBxg4L1qw4*R*Q#tudcu`!OQ9 zckN&WNP-dy4f<_J+{3+B1{1>}kHs-eW|p&YpPrE{ikEc}nmbdP(fAc63@b+gA}o zh8>ig^rFV+v)M~qCQ!$A`3hisbCbnQ&19!Q=avcq~yE;gZczqM(< zBR(D4c2R%);3I2o!0$L#CohI)*5{qr`4Bfs?)luiCFj6 z#9D6s#%c9nn(DMJZX(v`npo{NXq?u9OjDiK;Z4LkxhB?>CSrYF6Klr}8%ww!(^N}1 zsfk$6*2LR!>Hxg|y$lXy1E7M%?aOhnm)} zL+_oK#>vy6_oE)?da+)piM7FIMS1GQ+JtLttMiPu8GxYo5pFa$TZbyUD-seu{E)}ZQD4l z9!yi6)-u0s9BUP(sg8AR6R~cuiM9N8jnnGMG}UQ!+rDwE9!ygm>(5QZ8dno*^bU>F zx}9mN(^~#_jbrs>n(A2Hc5EE02h&u?`g0Sp#?{1HX{W|%^3GE7sQ)*qXQb#+awd3S4^*5XW4 zoz@vm#2Qr-t9AFrX)VY!)oC5tM68o*Vtvp=tZ6l|w%?<%gnKbfwS*5h5$nmCSjnD^ z)9S}G)oESdM67W&v6kMeaayY|O?6slH4*FLnpo}kZk$#}rm0Tr)Fxt$tcexu(>Sep znWj3e6KZ1lbNmjyhcS(eU{9ereuv(p7?~1`8YXMYbM(Fj2(9kgHJLej-zrG^0rZxI zT`8TTw>?wyekZ%q8=7nA3tPrS<`CM4Hzqc_{f^EsQTVBJhttw+HAeiy)Ez_j2yFP( zwB~HX4?im;KYfdBg3!Zn<5h=)AHp|3xESvHm-FKL{x`>3>FGB1hgKfi?f*#R^8I_! zp1zeMptrDXj0foZVYJd>4u0LHADj6Yub8P=?sB5DdKtElCrDo^3Hm? z7ITA^!>pFqmUA=mf(~|YuG)dvNo=5>df}FT+weHgZ@qZdK7Z`=#%ca;X4lmRKiztC z)%l&V@Jdbo>+!Mm?x&WgePZhet?klTUE2eY|(@UnRIaog_N_Mn`f)Q|G;`h3gikzT!W6T6I!)Dzba zz%KoAu1DW2-{$G0y|nr9?W11$_H@6Mw|V+z`8G#qMQ8zrAd&Y;P_a zVCg&Pcx8^f+-EJ{+Huv)$vJEJg=UVte-XJt^B(IdGT*Wrn-f@H71o!v&kx?RdTXb8 zYt8$e8HsP}@lPACHLqWt=_^t8oXC=Na@ShK-+8C&+H@jw;g%9# z(yy5Af3W@*^Ae>Okp9C5W-I2x~8`F^YV zd&8r@n!dPb=_?!5^7HxIalhqf`?Grds>AE?v*9*98~>3y@>GYH#Yg_?h1>F%aJoTE z_nfT!aQ`vJ`sjA?**2e%`Ld7X*Wxxug425=JP!@cEn7>t_1kz$YP=6Lp2clE!RbbY z@?YX0;eVgUUvPTejpspho1wqeLuBqIJy?BgK(lDuPCu)9@#$>1%>nRp=;ox2-&f=J zr1_|gzYF_Y%wU?=(amYIIs049B|QIbZw9fygE=y=>CItoWB;6HDUv%hbD2G<{R++8 zS`TZ}lXPOU2lKC(GyiVWX;J>|ly9r@Yp?t|)bNvZP~Yhb$aMPN=5Ok%Rt|cjaHw@d zvn=V|=JN%@ZMdDE`>v(4^HWPF^V68;r=YXpG7qX9Z%g|me4C-WNbPE6TA#2vUz*xA zo9=aVAI_$CF8M6J28YwP*r*uZ-VV33k-1FU+toPziaBLIp`SMr`RuxbjknVd;>!4rZUgargl>DyWAV_8 z({-1%=(ek+?{}!s_g+fEuRqPYk-3&$`M2%It0x!fq+JQkDjN#kZQi20;Bn$deT945 z`;rdQ^ZAs;+nL)rx>L1^#D_b8*F)$IhlazAxu2pFS;q-IT;vySbc}?jz&pD}a`vD!sGpf|`j z^%0@F{6%rEp3laouf2A%E`48`PLo>yZFD}(`tSHqT=4Ppf%K6NxX6d^A{?$C4t^*X zUtZW9tdZfK6} zBjvW_vyxty;o^2>e`t1GPw2nYdcMsR8y*_pzZrcm!rD)AiRBlYSB6=C#q7iDepIiu z{-Hj=p5aQppcmfNz84=P=?Xu(f6095wKe7&n2)a!x&KWs99nr++(Ocqd^tPqqjubb z?qXSeK>tV=ZkfG7Zz#WWxt*go)wEtCU*H25@?S--$=h_7_`SHoFEmmdTT>f^Ebp6O^D?8UofCDHSZJT9fTrLZ zXgeUT>$jJ^TkHh%Xvdp%Cu#o-7yaa$^vlwNT#e|;;?FFO^zC@j z)-O9=v~t5mKG04J9vbmSd3${CHKGrc2mC*Fz94^D`O7%M^$V9DA@%H&)1`cFr<))) zzuC&-4nJRT-w!&3!$o@sJBPc5_E)}Mf0=&lZ@{JT&&F0?5s$B}{$%_P_s0*vLdVC& zbdkRAh6eP|f9qH&??(QcH?efCUSPlG+Px+Itnwc+T=cn^wpZXgv$({kw?LFH@{9W2 zR{vExziMl|`t)=Qo7){)Nzw9<`46?<>i^H#qW@<`*m@b|<0bngbXzWHpTtk!SJeG$ z)Nl0jOYwLmG#BxFjNah&{3rcR%F~y#OMAi5zI^RuY zr)_=zJKf5$^4oQZYQL0QWP0&9H8v;jTMWOH_PH&6hgQpvX7ubvrailkFX+A>_{KKF9H56y257e4E6YUQJEu@rFMADJybvhv4f z5nj)(n2_VQm~*eJj_>02Q2yr>!b2nW8kuGHD#`;n`|^1MYX7+0Y5hX=4IJeFzg@So z@{6BdR?%}3C_mI|pMDK3r)hNW$m;VPp4Z3bezv=c*_QdVnDf}*F6S@y9jc$!m%Q}b z%2)Wc=KPV5q8rxgf%^&MyH>Bo_^{W|e8~BUw7rY9J*%kRT6F!Xoso8{Vvg7KFR7_^I7tJz^izm5V>Vk@cj|yv+J`^!L;4I@_LLy=f_x z2mR~h`$Z0MslA`c^f3PR^+yIc z;!VjT4TSbTHp5@`=6hTE5N3 z$2hIIbZA`9`i;!wU5oM|J#p!)P`rOZ`<$If&D4)yW}ma9e*BBItP6Q-`91Wp>bF_C=JM&+7vIiZzMD$d*LyxieFo$vSg$^1Rc z=MR|A`}~0yT`EW27d`S|$^We4hjgGX_{-!%zTogWq59Q^Tzfb=$m%rP0o?Ficz?J$y>uNe5{$zQvm+RYGH!|1V%pbdgz<^%k2&SCn|YwwLtmc^j6K`QuzhWS-M@LDH?o z<(vxL!}-9*r}Z-Bch;T4_wI*;FUA|bi+u*!=cVt!@i~ylJizS=jkhdMU{A zLw>Md@4K*9-}U+4$Lp$Yeh#~RM)%eC-p!^LnT^?v&5ivfKO6A+1D!8ax`kAqg2(0{ zrl&6xu}d!?DLvd3*0X#Lnf@b(tshn|b)9O$0TR-zA#L*a*hfFoUz z6Y@m4oW5Q#e}Mc`J`_FN$m=n&>7eHn{*dM9B z;=G@dbcrvg8|CRr{z4;qbm=3X@6&m@YCC~GaL!@uj-uDquds4JAK*h@XzU^3m+1P_ z)OOY%nU&d3=i1m$uh6O={RHUlzQ^*V^;TZLspR%rMkndeyFGjkfli=te;;W)x>u(A zC}Iz;9~b@7*P_%;(ZAop=V?Oo#e9;FE-XiA?pRv#A^Wa$PEqX=;i9L=+|P2v26_}f zeaV>h8kzI1rR*6x5zKPZxg#&Vr8GV87rE%1kLvLXZogyGOZy=|d`CXt6`OT59Oa$! zL%W&}5s>F!yi5=V+Y2 zEc^pKcZ2XxS?_diSmVFX>+6nxWi=@$g#VNE7ns}Um-NSXvTm(k=t6S?pL?zi-<{7< zh2~-A6Pd1^EuYvt(aE|leaM6K;fMT?2jTD|{R0jY`6XUx;6F?E<1W&5Q1F9(!4Lk) zn%|FEJ~~f(j;%*@ZnXplzn65Ksu90H$KjxRXFuT&KJRM3<%j#}gAd|?kGL-X%WD0= zxevG!kG?>z=S4PHT;zZqqTHms=$$ex$7cO)Rc?sr-beb;Ya(Qcxjl=d$&TktxE8#kam_vuzpd8OZ=d&%6cwwRlAJX)5Xq)Xo{ z()I;@wEH{pcqTUAU25}F(e}Q@%%|fJ(7&qtENk+(kJ|MsB>zYk{epk{bFq9=XRuG&KhOYb8`9m5q-o4`q@LrpMF0E`A{B>!u@oF ze{4=sy(1j?m-35M-io<;9&67nnh(F6qZ&T23&;=t!0X#fl-og(zBav0_muioq@(ka zb@AHxck}!vHsiIv`Fwo6K<={qz>59RSE9`|8<>FSM?V>=`D zDlo%&d=u(8C(6f37@vL0=P&*7S*3>VKXvJxT+oN4@8%PtM>p@lxCiqM?)CjBN6`EHP|pRAw4HGET;yue`rS_JcWW-+oqRqcG#l&u=hu86 zfzFxoc{<9s;tR}a?XwogIy>4OaYHkT-gmbBfbYjV=ubn1-+*q`jm$iITl(0HrZ+ro zdk22Aitc5d&-&-daUL7@G_dX<=ZizWS7qgs^Wd@Ot75+9bKp4t-I%WOiR4$#{g(5? zxpV*gKF-O9%ZXn7bMiBrkLl+(Fj&`si}J;|zs$vX%YItkN9g^QlXSi;`lhd`e@ewp z_VOf`Q)uQ_`+2b7kCZMp58P$->Grb_|0NyoG;*cCq3>T6=;@nB*NJ`w56$`PkIYdz zZuaTV?j&-&bfT26$l=brVckvao6d_IBX%xy70pLWzVCGKO~MD~$%PL2t>ko~N4h`6 zdZl;ERiAszA@YbDn(bAus83Sg=ur7lAKygF!?ux9IIHNA+1DDMuaxAlj+(%np*BO?iuVLBt zP})D2PfKsxukG|)kCY#M&zIu6c8>0=y(@AytB+%JTqiE{Tf1I{adnx#%5cw*e+%o-_g$sWwAMgGJ>Q!6uM&-FM&vT-@T&Mg)%1K;T-eu|f z`tbFKe9oi$5kq;OInZ{9+7a~^!y`Ta74y4M)^3Ck=xf6fU)oc8xk>wD#PjiW=pBAr zu4w;22fw)V#YsJv?)yrHpTGxl`Z(y( z&-Gth?AOPoKZy;(p$CZW?IPCI#C7-1%F>@zcv-qF<3-QdFT^|mWkd34h-^-b2cakjE`ZD;9JplT<-gZ`F&r=(~i%N2j-oPML(Bue-)a) zY-Y=e#?k$xyfBWHa}YEi)cs4WH;C)bZ=-!G!)3h^<8>;hv&B9zewXv4ZX6);xqkaz zJ_j6{!}dV}$4h`dpjCL-Rc6KQg`9 z9~)`!X`iw|IMSE+^b!g86S!aFT%;#-ZeAhzrLWO)zG)xx4apb$Vs}vq?&A4$kPEKd zJECv6YW;$Xb3|~f^=;n=IrTKr7vz@u8|Hj)9$awTZ=$c3vpzu=nR|F&JvLp>5PtRJ z#pZB6UqJ5#vAxo|&qhLjEw5jN=0Ed_ALq&;7t%vNjdSt9CBKoGV<)kH+`DTJ>f`R-;UhW^hn^m1zpEdJzY4c2q3NydOS@Oaj?u0h#P@A*FOk+kbln~H z>ARc%LCOjI{czxA?!|mQH`IAYWG3l&YftWf(e6ZMx0OXdg44HdryEZDXlqx?73TYz zq93#`bk33AJwbhtcZck{1hE>`4dF6Qj12DAh#&XR zVMmQzcTep3jU<1_5AGSF{86t24~!o!_8RB+pqdSThv%!2-g~W$-;LXi$h>i;l`q!z zrDE=VM(hmo%J|o{=e|6Cxa21`Q&q2J;i4B>H=izDp!Yys`rr?}`urQoH-XCo^{rx_ zVt7jeJG@Z`W>1__mK9?*E`|?FDoA(hg>rzugiC%`njHtn;;+B8`z7;@9bab+nMLI zy+Ss5+ool~@{=c{X{$I^kqjHk)^75AO^8Oj&Qm<;;Z`f^_9L4y4J#>D= zhuunf)!K6z?#GAS7t^P9Sl0_={7vuma(_$jpYnK|&L3(23psqgz8~qpzRLPh@Dn;W zzA5^F!*%1IviSAWNBl-E)^{Rsxx&lzCwN?{_gQ0?we_uxZ+-nhk9Z#ieqXPR@#fN<`TAUD z=aRk~2gA_Oy+b^biNUjEqix~v?2DfQB?PepzG_tZyU&Y7#9s7J`3 z@6PIaTgxAMF0-H6^|*R{7UhM02G(@%u}mYcx(rzkz)F?(A`Z=(T)35B1wGmomEoKD)iJ`&VW5iFOk9 z==R;9Z`99X{Q|vn{c`dBQXY;TPzjqkl()kx2LmqKiNOLi&OZR^aa?VgHW4tD)iY-jNH( zyF0XtmzoI`f3+Xv^;K{uD{Bnr5sRR z)3uM~VD6Ct37IW~9EKgYuhC-87bp2}Uog@0;?Sp0C*jWSaXzR%9-F(KvU(}&ci&ZppfCElB@#fx_4w;O>u-#fR9`Ug8hJ%C-n54#6GtKLfe!V<$ECk^^%&=3p^xdiwdF4K zWq7R}h&*VI%I)I9-lAV|eg3XLDGQfzLM88aHPvd-~58!XU6yeZjJum zkn;8QgZmIZUM3g%$+B=??p~TM?5!+bTlqrX`uqY@AD?l(BR#m#8|<^pE!t;fF5+{^ zvAIgmCvP_1mJ8jhQvb2{OF7Ld`C$)mAwSx)`svI%{Rw}xyUsK4a_1sJ`&d- zAJMt!ePnzn-_4=#!|A))IDbA>`JjGc9wz6KW3%<{65kJ(_R+0_2z^UVFYOn#k9;qj z?kjCtpO4Jf-2R@=$4|ErJ<|O{OIy-&?G^Ixrz82r{I*?wZrhiy!@|}MW3v$N&sWU5 zU97*wEXMxYc>D1==*Y~;{RzEO%=DF9jPSA7NIKQ^3 zo(q8yY~bA`gBO=3$`0~PXhD^M?ETQ zC$8H~`uXPQQ9pf`?rX5UVtvVPk9>Og+ZwMCeT&(mQfzOEex&Q>N6?o)-avnYcHZ|3 z?!Hqsv;Ow$N;&xVbg=GIoR5d*Vl6lHe^{^Z<+z>a`=Pm3=ly;-)_pLq@xy1fn}qWN_xv_H~bq8$m$b2?9m z^t|2l*MnX9m^YU3_3<*kNZ;qz$S>`<%ZHyH;)8#q{DB^>@I!vxxD?}K-}T!!>Ho{d z$z^!k=O4Ztv&vpz-=YV%K2jh5?~!|E?Vwohwfi@I{qfWLZ@2Se{{H{jwO?MS@6EOo zMg7gTkN>rHZ?=8d@l5SLG3rUt{%5xz(97)hL&m|-2i)2AV)f$2>(I+=dl7q?Z6CAk zV|x7!>I>XiWiQ~9^15_r7Hntd-I4hfyRo^3=i?PKQRn4Pvy1OJ2L|zkE>gPK2wf$g z_v0NDygwx0myPpq@WDPXzBgBYp7q~9Zxp@GZtu$Gfv`Kc{`}qd&mLb(`&hsJ|L@Je zkWaX<6S%&8`2N}UGHdJw`o}m8ekq4qyYs_muTRRpf^VO*YJC#rP_`adEDx;X)|OkN z_ zPc1j>vS>d){eIq0U7w2e0rpzEURl)3?0WT6+vhK}J(yjuitABj^-cQ6+4X96y|VTa z>pduU9{tA}_y5%Tp4}eQn@`W~cX1!Vw-34B(C9qOfB!n}?0RPH9`CmNc=JQQfA!~` z7{~f_z-RZvvd;8V+w1J{?ezPFMt1yj&l?-b=eO&#>)Fp!&+3=M|G#yP+4d^!4f?&= z<1ecZoXc)B-fTQSn_bVQ-=AUpbq{}U&&_{k_X|Hyzwo~{{zCo3JwIvZ+TZrQ%{FLhl2dY^4Cw*7(~xbrr!6O7Az|1ZUU@NSR4UsCq& zi+o3xzAvor0m{24&Ohc!QWxn9{MJ)C_-E9W`tH6DitpK?-pT!H+;0vH{J3ZRklw$3 zzs1TInyu%xZlrYdU0i-|%6)(H2Yw&W-QSk?8Cvr1bAi9y_r|?)tg8oR~fzzHWOHn6>}-SH`ZdF8ZY?-e~}|lKB0aGCom69k^b)+b_4xRxBFf;?kjKdf{f=6 zzDekDzkS#~g2R>Xeunzp&&b@U=cfb@48l*)cPspOMLbqM6^~D7K=)^Tzh|XkGEYN# zkQe;n`tr}1T!8_9pC8hJi~NdwKc7B)IbTq{!S(epqw>~|=gLd;QdX|z_TiWB^!3^} zyg45llYqSW1#o-kNo4EWIsKhKkUz!ql_=~I(k{LTe!ZROh0~YIj*Yjy6&Lw@3!CA z@^^aewv5>G3ELF)CF#`axePDrBQj6b?JpfJ-*XSmCi?!5ufNs}L=Qd=y{^gcvV~?I z{_cHbMjtKt7|~ba{b{J=2Yzwsd*tiY3#ad&D-L?$ADHIc&^(~;BbT+uZ7nw$?}i57 zJ1_bpBjp(6;X;RZ3ElVUi}8Siuj6x;es5Xa+HlC>r&IJt27EAH|9R6#KFaf5mam^% ze&}^|9lwfRV{;<=-MfXLL%qg#?q{|9u#2-*p1*MYj@AAuW;o;J_UOwAI{_~7VL!2v zbSg&Dq4zW|l=}U|>DCR+pN80a9GP1ON`1cY8VS#qlzRWzL}|}2`nAvt9vF!qn5!<9 zc$<$9x>r^g|FjRQ;|1pFzl#5*U4;KO!-W4{`tH_wmqw1~^@t)UOhY5X{1M0{uJ?Vv9!4VRyt{i(N6~EKUYZn?uSb{oo}>m zq~jsF2fTc}aGJ-eJ{RJ5??bc329gfsLcV+KFYz~DP{MD~_xakdB>v7?4v-J=lS^!P zXb#|ccwo?83m%z^cNMl8+Dc9pw7s-@r&e9U2)QM#dj!V0?i1MY`BLbDyLGI;0DF zv=4aS67=E^^Y}s^7}ziT_4x!UZ)jdVThd27v_FmFV?AhTuD5}CYq01I>r%cwcb`x6 zF7+ic_s=EtpcDHFb^afiC6}^tg{G6*Ip|Q&{BZcMA5`S)(<40YEc{nKwMg&F0lWWn zPoe9>_q9SJ@guV{w`;NLvyzv;Pxo#Kos2s|omWIg;>Bh=UH1YX_%TkogXc4$`ECNK ziRzb>SFGa;C&!e3*zhoy3x1);I3mu&ksk5~d)~N**a_YlfL@*)EI3@~TU<8|1s^HL zFrQ!Hor8Cumwf!2-PnA*yYQ`Vzp=SwDJhTo;ep9kmhwe=(x@Lox%cOBsOz7mkE34- z4dQiQSLF8N%`A@o5`29>()V%r;i7+#{wpwLF47S_M)|rQ`oEdwQ=flqR#tmLd;UCs z4<;~gju*Wa-)DC3eWE?uk>iKvqMfVDAuzB{xNWsl#1ngU{SfARXrGWT@RxB%U^@NY z+G}V&7$9~#bycy?Po`Qo%KNJ#9vJw0Us;SN{1EQDq1jB=I}rb;_TQ@Gt8Us(^{q&G zY`3H28|@hUW$h94C-R4;v(Ae}Z`2O&EqtHi^k^Q%;}?1lpU01Ju2-?+!1UB{jf@+K zACId7`c8|;g?_l`uWeuF;dkF#%;vhTCFL6GI5je_^7m}Wo|!L=N45VzKRe)0BKNBQ z6n6uCcfNjm*0{YxKE$Q{kU;o08b3BlPvj4^f2r*+P<~VYD(S)gVdu~z>`(lG8LjPi zuRX-BU*UOtXoO#_zR`amUqzSJ6SzF0ygb?~U%1Qa_ln@cu23F(ay^{U`ic4%8jSBz z@4ncwSZ^^Ok#H9e<7~u(zKZ_Hyr}J35qEs*$3u8vq~4UT=QiqB-_Y?M+GDhfzPmhs z*C5dS88@%Nxa(={?UXeXg}XsOu~QlwH+S>d3}E`6CCaai;Ms7hgyAy=5w9* z`TRcN@nLAr(0Ps@F8htN-ZY=^yGz?KxY+N4`^|@zE;PMA68fT_+I4;>IWX7#S?oai z%`o?)|Ly*a#78*%2;b;+Nk{Y&<$9I+R^Gn+`W4aJXZ#(q(7g4$q_e_AaZw)Ni+ToJ z#{T@3|dw{Tb$IzMiGLoSqwnZ=~}JpKksUq8F4u=G~}= zyN$8=ckgP;x^Zj{IYIQ|^OJFIX!bkR@}+T)=KGspTYp8%t;M{@<=M_G%Kc2B^ViT| zJb?XepFh^ErT$R6%JXB4Z$h)v*OIP`(=k7V8|LepuoIcTMm6}kFA5(CkMnTp7u~q; zV9)O0$2tJ)um3=?-x*zJm+=|BBY%wW*^ujXsPktxj*huMjLfIcTKQugS67Tbex5#E zi#d3jl<$udJA^JsM?mwMm^-(dy*lp4L2Ij|-yR5&zt&i9@^ep=qikLAH@wd0`b)%<`bX<{yv`Vzr`M7Cv566I%ipY=oNN~ z{ub>f)+Zqc#wVadJMhKXBG0_~{mxssUk%NcI&Xu2=y)kV@dpMj=n#(eU%0@B>pCUY zA^dru^fO^TPsKjfv&)HmMZfDm%W&jx>J<_n`NsJ==%sA^6L{G=C&IBl0YCan>_0Ai zpXd$YN1tisiFBVdHVDV~3-RHH{$)KFdUxx>CK>d;RYgd1s(fLM^ z&V>&gRo&jXbqeqsvwJao`uyoTIXeDD{P}gAyMFqRW7fHl5BWy^u>OMlKu*Yqc4Jn% zn0Mss9lB2d9Cm_s5H4`oX`}uR{T}KI>aXyjbzdGAM@H&@Z2qSEydlp^0$tB{`vqcW zZodHQP5yYYK3$8sU{7l|?aZT-$f5Djb~+!E{aB2n;nIF9k1J{alHDI~{09BNozeZv zwvNw=>sxN$?>9Q{&FzEN!|1z8YA619uH{Y9=dMRu{g$tHZLyZr+xp{Zx2{s$=L?KK z-sAb2rupny7iU&pBDKMANJK&T+)F)v7YGkSJW%^Tip8U7axe8 zWFATD@jOp<>jL0EY9Wz##8*Q9$Ti}keqsIz|EoLM@W}l2Nufi1ge&$J=HttvpS~-` z`@a}xhxvLi_;0KGT+P}c_KRhnUE5E}x=(CmJ*T4M_ZB1lTRZJPTWk8yM(q;n8S;H7 zw+pn+r{h(eOYqw{zd!c*AU?*M{=Po&86DT6{{^42@hr+Cx{#)?C z%;@KLWcib5TB6H^zGLmyy`J%ztU$x0j5!kZ&oc z|K4*MST8QtliK>?uUGl=S6SDJ_1s1!U)S>Kz~>=PPpDU@7pOnbyFc$mc-goW>v)%A zy=`wP7mU-8UyRe>$9M?*{qZ{Hx!^PDLFu2sXW%2^2On7<_RoLdT%kLcBK<<`xeu|& zT6*lOqTV&Pe$~z#@TJK2W36NPvGpT1TODilUoj)5+VopY%6L1|lgDMP<`h2v zhWi=*xeIsh2j_5pZWr|%`wwM)k<-oB;Fog6I0O0n<Krc|%=Si*h+Yw>yUiMqJRjd9CD=&ROt$z@6{G`5~F_ z)AyM5Jn9LmFL7&etPjXIEi@P>2!E`51?E0o_koLjKFk|t)WyEz$ND{F_;EgYn&QhI zW6PcHduqO+Z|Dv6?T>Ryd$-koVkbwwDeckJ#75z7X~?QQvxg zBI)>i{c{@r{T7VBy6>}AUhrJ7$9()9^~fyH z#kM!Gk$hJ)-z|DStzFLFuP@N=jM`Hp`)RhGpLC699gbE~?I;&nbq>I34fzmKG|sovAGv$s^;Vz%=5&+;^5gjd#|QbPx}2 zqxfa{oy_y`(1@J$F2y63e{7CXJ%c}7q=Rv^zut^|o;kESzhTbrc;+9N#kP}ttfluw zPtp6ju-7M9t|*TOJ9}|sDK80ka=!4Gwdc_I@kAave|dt)gM7e6e#-QN{(0B$t-O)y z$*mJZPrJ--`I8;;IpipRF9q{7@IPGb4|-p0bKwgN_oVZ&x)2)i|REnf4NHX2|fSww^EKGZ>a0cQT|Q{>_En&zJ6jO_aOr_Nza?j zy@TZ!ntQpQr+aIsNqTr^<+J-JnCuhxpmV(>qQ`}QC*_RvBz>1($RqaT`WMN+TPHu^ zJ&{B9?IQF1{nj6wL3%F|=l$g!8P~2}cd*E@l%8Mp%N_PDdWJp4s^?0s=Q8<4PodeL z~l8*+;Mg?er;%JW+v zkIhoUr97JrM|okNRpOysL*0jsOflTu)5E+5>0zD0=TpQH-=$LwcX)mI{P`5`y=xQ9S>lhigU}IPm*%R`#+cHJ0C?qoqv6(9v$%5+`{8x zyrbmK*-E_FNWG~vq}zt?TUN~BS4=;>BEJ?R@!I9_{Cr|v9r`Ky%k?Agr-cUR$KVH_ zqQ9IE+RJuYkA3<4a`ns8r~l8j)?Pv*=b9t49Pekwx{gBkhNl}&>*8lgJwrK5IYq`V z{~{h613%b_pAK-)`|0?0kNA!3A9m~8E6N@1k)K{$?bMI&%L_m92iKP$ zeuTqCKAnR|`K`Ka9-keT7eb9QOd+d}{csA}8)e`~9}x|4KW8__g!T z*Z(Br&%^j!0qvs{{E_+lC}}qzxj^XPhaJd!IIcZDabBUHet5-PsQoVX?_tMir&{z~ z3&Gv@LIsb_S)5MAbmV(3fwtp~>7>5VeLKBpUi3%iE*}5JW{U2YB3$wlf5hhtuT;g(WQF|YF9xx%;_F6JdNU+~{I zgq(O^1?Q>VdybfA;N3>pANZc2^EAwhe(dlr!=+r7)OEG4?1pAXU9b6aZqd&+Q!HI* z;FtZE!1(9za387+$NT{IM`XU?&Tl}^d4J6Bv$*@|IKKtG{Ds#cXnwD*|Gpjg_~*3X zM?AP#w-eX3tB?!v@LpM&-4x3c`=9O|K0kbJUSDZGeER89yTI#q&K_|O66s2M&VGG* zd3P{2Lg(yP{O-LA@P!NhV#kre`-S!K+WLX_XI9{P5Sb&ny{7ZU2UOS7&>Y%F{C<7) z(~=tOq~qsrF@FEVwS#`S`Q^~4oQ1yajtrdY1KmoU?HG%-8QWwsweh z_*#4JHD20H(HH0fQ^b9L?YjhJ_5iy>eUp4RdoS8YV6No%q-)E~FOO#R|6|$L5&ABM ztn<2cVBlr)`uc!9y);b5NxijQ8LsV$v@fVnwdL&dL%ZnPlTTM>cg@o6&+CVDZbRio zK72a`4!5j)`}ULk<38;4?aAo_c2$-i^yhxQd^@~mRT=MY&G(^com}tj`{gL(!XSUY z3HcKKPA-2v5$Q|1uATyKln-C8xPO9m7e5^B!%4c{iG4w|7s#)Sg98Ix_&7iIS)@Ed zBlnhT-{tl5A$(jtM|n1)^YxAX_Ta*}(~TSa{?F&{heHlO9Y3BgKlF6|2(eS>>G~^d z`|0j$gAVfxeD9zPM>&d%`t9>`-%|izSyuoZzUNWqcX*jRMSf-UnCH51vA@U^`IgB; z@7i)X#wH#iVzqrZr^XVSdb1{B-`+nFL>PvC{M(v937a?5ykpZ2| z*U^r^b@q<-M(odxbHT6Kai?D|@cu<3`7@q(MK$>-;_)oXkK0Ft-u!k->aCl%!(SX% zxN(i-+v%;NmPb+VwfY8MU+=&(=0o@4b^oTwue=;3KGMT@l+F!kzbfIeeqW(tR@L(l zz8rqJ)z4SC96rDGFPHuh`Pgv*87E@>=w_bx;+$-x^3{$n{rsW-m-Jjei1F(7ns3-6 z^jqZP%F~w{=S(1XTjPJo?lgJE^$zw~^v|k#?d%)tadJ)o21m9 z5+d^iyFY&ZR)0h0o2Rk+WdtnDf`*8M(@z+>AS9(Ms`xRmzp@F}x z-@kzVa1MSY9lxNReql{3pPM%!omrLctmb$3UAEk?KTZ2@de2kF&2D}2D&41?Rq1c7 z=cCXL!xcT!{p&wSIfD*%H-y_)(y!jTT7vicLL>Qz^xRHtq@AhgK4FW2{4+}rKJvaH zy>F}KFY81|m(FSP`-h>~XCABH$Sk##b?Lm;cS4E8*u_4%oDY=1=OE402|!fs&NiuY;}K7H7Y z4DRh*n+bjsyAI!HqTtfsyLyNIU&f<2hts%SYNUs5M@xFrFGuFMLDnB@J}bGr&C>bn z4^qDagL6^S4|nTm=wI4e{xkbsI@k~TwJ&)e)_td{t?~@h@jCbp<@V9#Q}(-R_w{8R zwRT(rxkl@|{l33ZdpLlswMoZNam z(t*8}t@r!oyDryr=*_wFTqbq{d0|KQ@plVCbN_}qKGgF=_3^moJI`D6wtVS*-nFb7 zn+q~Y=Ygkfd+zEp&P8B9u&4)|1B>&0%td)V8s_)Q>(iH&XW6*uT1?xg)Mx4Zg$T)k=5 z9@?rGU(dcD~8RrNejR_tN_? zhzGrw@y9$)^k3WmmBss%-%X}_?5m2s-m;tY)0iLm>4U#-FBl*BOnSN)bFY*{9V89w`a%kI$LP2;dYG9)ABugN56#L6MKdC>*<_%Ao^Ne zaS4yiBMVwPrTeH%7nnxjuv@?W`0ae7aLn&uFOBG-@8Y=I_0t#^VE!-Xv15aC3A4j( zIfr_GJ<@aQ|2z7bRd(su-$r(c?>$_m`}jV+->6lV?19&zGuCQbyGP{5ty>|RbMZDKkDlp{jccX z&0~cwFn)aB@2A(u&QK1G=o*FN{GOlwWPLBw&nMQ+e7w>46Y1a_p#Pqi_~||U<;3ob zbdgz=-lLD{EgLf0LaHq`^z{8a+lS&M*8i+?}LQ~ z{M%X%_}&EWJ>a`p^8SQ7_lWu-_kcrlu72kLemO4`mEiQg(tMI%oGbGEI3EIcHEoyu z{FLdVK3;qNQuxvS2#>Fwi}nZWc*StKkFM+1_`Ye;@A%*y8@w|K7wI;apCEsKO4<*1 z4jcSd({mv3H^(3A9@rnkespBc;qi5>-+QX)Ib}y*l)GH7I2Us(pO2yU>-3zA;I#hs zg4n_3{Ek*FAB30X2lJ1m_54I}-zhNv(sv?oKT+OOaqrRqM?5)a9T@m!pUdr=$vTRY z+b<8ui}%8I;P>_d1GiB=e11hgy_?MEeq(cm)(50>+bTMb;`?8JGr`hZ=+Ez?6;y*-1=H#CE_oQw6dcHctkt&f+F7oZQE z%Z8l3>(e#L2kZ;(^!0)DLs#FiekbEyx6k0q0e#^7csG8xfzC6s8ySq#+lseU-k(aY zvV1_^-SwP!S^1#d@a4t&mp?85y_7?3`wKgf^k!W-qFn3SGxpbfJ8vGJ{`x>g=NBz{ zUI+UPW%KFT^ljBA>=pI{_m^fzWp?_%lE1c=>uh>EZ^t^@%(n~wD|R%i>WSZPmGy^h z#oMZ9Uyic;O&>2Gm;K!G`04xkML5Rca53KZ>5Kl_@jTl9BAuIWfPWbs!ety78o3{j zb;LOTPI{y8na$Tzy1r4&2i;>Y!Totn{dlp?e=7O>N5*;nc@xZ2F%EO*K8kz;*3c5WV+}^@AHa%KGo!?9%rrc^(&I#4*2!G`SI%X+mTv6kQ3{= znAeug3o!pgI%D|WBjgQDnIHSzq6armLw)r11HB!+z3BUgt*lG;CR6Li=99IoTQL`R zwQh@9wUc$*nG<-wvenGT>*28Tz;rlS)Op z^x_ZA_xIZL=pKT;+a9u8F)Op%Vpi96s7CyY?;J+@9SirqF}}Ab?TNc@ihG9geZ?sM zF66Q&h#r<)Qe2FAM_%Ni^5XN~vEIw74VV1Ye)qCIeF>`kly-lCaeLo282l9h^z!E<&C@=WS>;d*C_XOSizCIqCgKm-aKk&uA zM{&Kvtp_$s_tZaa{=?i(i~dOSL-!mCbiixvb=}FL&m-0CdWgt9=UP zw9|H@HE%bBp1v#nZ=26ZwdVO0yL0a% z%pAY==2*2Ksb`@Xt=|)Yzg5c-e%bGL?OC(*c$X3M@Pj}6;E(Yk>Oc0~uy5C@_kq!W zzA!=b5BID)Mc=rWKI%|wZ=s2%Sh~m@q~m+w!`_kj{T?p5h~GosqaCoL)exX9NzD(4G2?gPHK-k(9fj?;XB z9xn28$njQBp;=kq;f4P;_D4C6`}n?okS^p!x{|+gJ^OUXx6dDZAusd~IsJ5i-*<-9 zTdn>P4*eJXwfcu0t~Ef)UB+*r+4DImmwrP=Y=+%*tFyHD(2=P60eNzsx2(Nqmz7vX2?Yrr|-4UIfRh-i5&(8;RAG@ z^a$4n;LgQskrXme({}#$oTI!+;*z)ZI%w-VUhB~ z`J}*n#@{^(%tdnuKXF6z+`8gNIOY*D55c}N&J6_S7=7>89AfoI-{DgK#MYu8;SX#3 z1J}n958-ez|MlIwAEIO_-P^l}-0-iwxs+?iWvv^V1GxNy{QV8QdoT7HnFq99`}i@8 z$2H*_pKa5vjR(9eUNODcbmxAfV!CSoG5z!_O5ajLk8~v;<$OU`l&_qxFYjvHA5_dL z+AlPcSLj=6=phH>E#nJ1UtXW@a?_;zA9x4$MC~$fy3|HFZ{3YxEXd#-xnqsZ2t+ozCBlRy1U<&eE9vq z@L2f3g?>=3_-><*OZyk+-*xoEC0@Cmfq#)tV><)i%f7MsshCUHrTbg@&R!W`p>L_7 zhyD2Z1YVTSrGs$DQ&vxXx-z*zS4^*B%H)RqHlklpzr%p`9sM-ywCIma*Av7}fQ!95 zJFkz&c|7P5F6ig(Wch**=qp-}0`phx$9L87-8TKLUE+Ka-j4{(KlvPgXddlM!DRpV z-odeRiQKU7l{vl8ETrQ{oG;uT?I^!b6`1|CU)WInOREdLi9ONxo^?DT{W#_gkr{fE zq#LUI3-UOC&cpPSdi9aYh4F#R=kXncz)1ZL&3QT=F7q#^>vnH*KjrA};r@%>lhSZ} zS5?MQVcsv5jr&(RPUJ_v>ieU--$#EBH$6k*Bc8Z4zR~e>;_3PP4MZ}=4Z9b*wWH+F@Vsnun=Rk_<#%}!t z<5%Cklke-g_u#NzBl@Rz=J@>V$8q9@<^rxC^u3(FNWOhN!{10w$kpt)x>-7mzni6RmJWQ8Kj_KN z=c{c0&OXn*T=aB@J(+`5f~(>zS&$G!yGt06qT49)R#O8hgfv@U&@XQ}-K?cB=kY`YhlZ}~n&WK3u4r|&^^wXS=|1?{@Hq_@?D5B8PtzAfG- zEW^?7OFQk_QNih*H(f93ul%tdCHoqId2+Dm0r~X9v2OZ^+T*YRLSH5iaR2Xg*BD!sq6D zknX#zW%)sUN4Q^JI4|nEvd$Z5K0~t^@9RZ*zJl!}e<+`=v_3*_C@0`$>&7@=k9eTR z`niu|Tyo@5q8G6XdJl)!i(I*ZPmw+_@V|b9$lolTF9+h4$%*`8KcLxsqTIp1EZwqj ztn2#mu&)MOTzX&hFtKCs8@z<|(|60czC}jX+hTJ(ugg`;xVLQk;PecBh%a=Zk#P^* z%h7R}PxpVsy$^g}(;4`GK7W#a(pI$;MUhejMGzD*p+!qklod6hK{~Ys9Wj}u))8b| zY+*$aWR{WKA5~LPeQM436x3yN(R$EzTzxR2b^W6K%r#@@#`~ALtue_d|_dWOg zdCqhG+;h)8_kL_%)V{UPFBN{LJ5JZq+thHjpT*X%bMv$B-fF$rcXH$WY~0ZNY(5_U z?x5+RzeC9P&E>m$aeUMF#It?7O1l2nXt{nN_gm@k`-QA0bgTVx!=1j~`=_0TF9_ia zqwu-q$&LU2DxY(QYkSaojoX8^j{^6jr@h{V?nZI@xrNd%Gtu?$@jEoWrjrWoC>`1r zzb`KBtkB&v)Q9`uHZ$xN60-sNy5eF?f3}s zPet);-r4@BrfcJo`P)20_aCI9^7r-M&^~5Y`%bvI`Rr!(WBEV$k=G~XbR3VzO`Z3$ zo_e>hw{&#g_6?mDepl4;&vyNjm0zU&|CDQG-N!#?S-ykT|A5PUen~g2#UJziL1`!H zP=Ee8uRmYts-#`^bLWYhiRx=pMKK-1gmkH?=h4lJw za(db>3PU>oyIwZl{@>Ee($n(x3--?hJ&Qtl`-k!l*yQqBx?1jy+fUnJ!l`TXm-txg zF%|U4=bw)5GxD{6Yp1#M`}<_RpK{yFeI38czNN4KxWCzXy>H=n5iaoO3pN@~(<#`X zKU;eCJkI*1-S^n@e$)4huh{wdcLzPBC5U2T7f&|di7XBaR0j(>@89Zb0I$@8k8LBE02z+e2-k_2`RTEl+)~%8}EHN&%BNC%GakKul)F94<@ClX;^9J|`y zWBpE+=k7`O{fU}y?(y_W)l09hJZG2dZZhnPO@-@YI`p#wr}K;WdZP1}j5}Mds|jb< zNxQ!Puh-d)#oyHHY`%2<*XwM)^uFqKc4O(Noi~2{+L*oVdiYhZ+xhgf^#0fD_QulP z)a&-9mfO-(dv5ytB3DnH2NXo}fPDG)4ObY=3oN{jORUSux>!2&w}LRwEezvxztHb8 z;X1eR`OyEGuJ)t;VZJpWly6`(-^#tN+I`CfC;Rcl)?eav3LS?F-J)^+d_R}`v5q^N zdfm3`ugyzTzogUog{_mui(q_gL5SBH6x+A|f#*K`v4_jYIJNuAyq4A;}IhwrX$ zto@}!yeFmK^SnOi_@w`z=LesL^4R>qj&1&O%M?FP;P+g`O}e9GJ{`Y5WAkToH+EmJ z@HyWSxb|tbN)%*!F*Fe@Qr7ueN;p z9>?$9Sb6@t8{hZX_a5{*z;_SAI+v|~>wGBIU+2;BalZ0ddDcmKtZao3+vTuI7=bS$xqvhCZbML0zpAYLBK6jne(#^NtYV&Zd zAKRa^p__Z&)-}7g_xUH?DPbS0jZ5ZQJI-y_di{*=3+;NU--R>(c%O-mvq@J|Np|#a z3vcVXHV$v9zm3be;nm-+Z}InoIbgo? z=5OPOjUVQpo1XbwxV|p?R_jzByDnS!eCb#?d!Kh>;ceWq=hGVtZ{yI$!kv_7d{O_T z({YFQxWc$&`P*|4O@G7ZOS$K_>8JMD)OxXT(4O~itQ>ZIuywJGg|~73tJ>ezlQx#V zjr()9^8F|2Zr)k@(Z=HCUbpP|l0I*WpY!F8!@0*c9^1HW>o`__`-FLkxwg(}Zoc(m zo5xtX)-P>*vw5-YkF@i)55V?8+B)pGu+JjbwSAKs&-Ta0`z|L)Jm&pje~qTgb4Kw` zMgC?#dmjD=SqDwH%}&?$Xys6sXEU-t)85D9J=ieLSU8K9`@Aooy)2%k|Mhz{-@pD+ zU9-2jmcG?j-}t5%&+-4qbn@+Ewf6Gqp?bY)d{5i0*+2JqZ&~l<9!~7Vd?2h_=a$p_ zt$yrS^-nr$59V*>xAtQ7k$Y_EUGtLmD?7jSpH+XY_oTD$x>`F}9lrBw`B{6gc5VB% zOfSpd!kazJ9eb7LcV4IuOK;bw)qhdg2W;)=@|^rFU5mFdJ?#CYhvfHI6VA$;+a9f- zTl#iv?xyBv>03N?ldd^@zvIi(kI#SAe5_tA-F)pt!zG-h|KkbX-br`&Gv4L>@=!0< zZq47yW9`N2*ZlMCE3Yy%=%%-C*%gyAjWN|NQ55{49vV<>q7h zZp^j*W!HnV_wsth??+lY%~x)l|Cnp#wqx7ZYS&kL?pkxnm$##Q`B=T0n_J$Ejbpj{ zIBeXtc5ixHf3ahWXW{I+o=;D^uI1{NFT9nfugiO#`+m87EL^_ya_ig5k*iPc^~2hE zzH}|$zV27o)8-K?a^C+rIo$V|dy%YL$M4VHakaMxE5TvDkbB%5=2^Mr)b!X-_+9O9 zmao~x`lFT0%5UkY8?U?T{$JaFkZ^B`UI}N{LmRJi+mRi=e680b71r_N{lTh_{r+g2 zzTQ{ayd~lK9>?jJ-v8arKVEA2H(sB1UABDe*j%&Q#`>ehxADc|s~ca>EnMI8iSS+C zINbl5ucfbUe*0MZ)=%vEXz@37-eBSL<(HdJzVJ4_nrrR(cXItmx);Tb=PRanzVxj9 zn`_}spM3E)b-c5FZ|R$B>05p_@3H&226~IX4(6LD+5Mi~59Z$2+5Q>3zFB_x{B!fa z^dTLG?Y*kpdNaG^?pN3E%B0;SxliHySaMxWIGd;Uz2A!4ouy~{-Sg$QEc{Nv@|CKe zrEBjcn!dTmwjSAURo{5a=j-@d_ON$T?iO)leeHb_O*i*<3GBUq4S$!w%JZQ7PG-Wb zIzsa`fBRhob(2oZ#qW9C=?f1;`GosFJ6{m#_utcr z!)d#Szu!~-t}mB;&mkG@uhHL~iq|=x4EI~suI&9B{SJE4>F>Ct+|pv7UfTU8ymw^b zx*qiY3D-A#?s0DXxW3Ka1+uT+^o`d=mdL(ro8QOr?ER1f?#`~~c>TcA)pls>?B*t; z^;@fF3$Je6Pf7;s^}P9p?0ih0I6q70VA)TYbbD;oH@uzi+0pwa-I3dCx|VOs-Z%Y$ zKcC|JM;hPa0UFvWB z*pBVHFzRj?-pXg=cdnj?$#=E*eTGZ3?H1cVH+=5#@oRiLO}a<-RQ>F{x^aEmICjpx zeeG}SqZU4&of^D`;sY(8-R~dwq(4rDdQ8Xf8_9KLLpz&ZW-oIs-~TmT8;AOSFD0$#uo%+k6K>&hvhMj=zRaxZUM_)%d)9_tVlf`{vrg^tJKI>|yTb14I4asP)_^ zZo;WQ_6_;kx>4VJtekN@tdZ+x!l{e>?(pgIe(jKKH}>xi-y<`9`lcVZFFXIJv`@zA zZ)S39J!d=lHYmo|B!oW6Q_#?d!(lS4H^F&3#fo zDW~sqr`_B2I$l^h=FVQO z9f#QeD)kiir;ppbo=LYv+G}D1*Wzn>al5hfKbffUxBPbB^4fWeZ|_-~n=d`vS75GP z_jDecaORqSzI1GSxBY0j$EKI*spE?6U$E;*_WkJ%s;3>>{aD}h64AWD-pAMepKyQLOWT#XXN6;PTPJJ!JIj4VBKjRO zo6p!f)x8I6IyN84mye};Lin!6!~1CZ`RwwW%{5(hlVLn$JxTnjw=nM6v5uEqXLH8G zTzz`?)pWNC`*w1VcMZ?kcHGB@OS*@|E~#j~@zwm(?u%g8+;~=gb2nzcjn&i7f?dtE zdb9NN+4)2HPDs+d9KLI4`>L!R<<_@7kGA^HJ+^lGahO--%h%F3{T`g8_O|0W@;*t@ zRfqY!`EM+o&ByI~-MYUi;WRzF&t;#Q>;p-;ndRCZtem<2R?dx;!}PLoukSI>1;YJ$ zZn^p%$KhTN?O$EKOC93tJUi*^eBa|ZzWE<6^N&;%UgtAOr~ZjBZ?|I$myYu5YtN*+ z>m{|9**Ew5Q+8iu_enM`*}P!sNZ;?7Cx`bI?RksotLGDLx3C{o*K6bF>Q+xyFQ%XQ zfBuQ;XYH^|p6|!=D?5Hx=2J;GB-q))Te}=7@sjSsr9M60r;+uCwEMZZ1@4cFy?>#b zdUWLf$ApRKELT}A1m)K-t_+buGQvR9zAB?S2(tGr*E(E|Mn+>GcPrNb>sPx z)w{V(7plH{$bF(cr%XF-7xDF2!=;>tOS^*K_0=~wKMj{~mcFf{s=MLy*01fP<+FBb z?MT~M(k*Y&{LDY!x@A6pi>LdqlI~r}FXdK+_vg*t_Whj54eMmKukX2kt9^6N|2WLc zH<$WPxyAqR;nMD|g8wMNz)Gt`^__X}{d`^~R5m_T}LE9=@|-^=)>$M&_{z*Vm=p z%5#~7o6%qE*TOf4_a^PTKbBr@e5*J0kJqu5g?cHGbP{gg;95GCkL|y{t4j5^V|C;7 z>{#cksc5~dZ@m2e8ZX`_Y5N+??zRqT>z4L=2R811)%wUSXYM+im0!PO7PqI4pZIo> zbeD(gtEKa)%+KQQquBh+(y?$l|4h32N4!1x4pn#`)WX@Zg*Siu-d6N|(oU@pTW7Z4 z*Rb&U;@^I4$oG=I?Mc5U7_a+U{DVVzt)1njZ{f_}>f`4*>w0!<;q-nmZa=x{REd3f z|KNPDXZ-!++;H|g3-*0vJHNB6->_~U))y>aJ8#Fi@%tX9+~3ak_DTdj_}+Wim#qHm zLm&U;=gr^p(eHjI-A+%FTvmFO`}VB|(@)(E@4xIm(B6~od%R(Lvh?izq}}IeyRl=_ z&%)U_z4;Hdom5_<4x}sSVnpT_-O&#g{kb zbUh;NbbX@0ow14Kw0g>Yev%xl^|E)^x6+tX?{*#1@xbP7cAvcAv9%MkyUjCooJ>a7 zfiFKF_di?jHP`MF%(Z+j3D1knHGfP0*tyf8WB>C)d(JJd+9T<%*j?Mzv9g}ReZsRoy#jaJqu!0nb;5mmY;JCPHZFcm#>F^Z zZaG(nb$a{Ws6Ed*ah&$&+;j_$RsZ%A`|4x%dQS9Bx?K+Y^794ZzV+U3==r|K{C-3z zr+ybB;fllcY~bx0-tsZMY##l8I&ZdqVd?93KbpKsEA)*kW??aRh(b93X{_qx?h zy6NB6_@=kzbC6uG63*tScC2n3ukZO(lwNMW7S6t_*!MVpylZ7XOnVOHGyUe|@we~8 z+I8B#>pi#V%iGPzGXF?8b93$RTzD?2F7M6BI!?k3c|+}{F7wRre8u#$bj&sXLzAk9 zxw+?e4)1ZAn|ofL3$uQEP$9PE&r-qUhDw(ISN`plE-Z^D_I8~+&Tj|rzP?_-91bHfb}?Nr^kU0S#jSuaaC zbAOvB9UGU%gz+Kw*wQn5p0$Iwf6^Tm>MQsB`{Dd%Bfi{@`Pyeb|J?N7Dfa2|JWyP| z^BnTY=bsyY)^gSVc+Qy5-_kow)_damHUAs7(sEY@*X*`UST8LTH?_gK zr^UDM&xPlgg`t0KY<{8fH=HNt{*Jib52T&$V~BrO+xFX8{`u0g^SS!yJjm>^p&t4> zQhYDE)7#&^pUQnq_`a*9n=jv&&(wPVmAK4n`y8j-wBT>)m}_>m`!%~h*mc#8bHke+ zHgC^8KPIe$=KANx({;t9yX|o;_Y_%gi03J$-?u`2UstN(HkbRtgv;ljo9_jyeY}L* zHoT9u<4O)WwtBJW33hDHg|7_X$uze)?9;UUD7rot|Biy`o16dLGXJ*vkIT0>JpWWT zevjCW%Ll36cAc}|8T->A!9UCwE#J*f^8S4PTwHz+`cB_2(r$$u7r523-c;xw2=Q~v zVd>=RZ~iv_(%%gjTbilGOM)V*kQTPT%ZVE$cl=_pO}g z^dHFhvf;RE@l4NL{q4NXt8Lxa{B@sMJnt?I>$(%fUb%LOk1d|%+xf88hq_7k!I-}N zDc4^6hIKLvx3Tl4uaz(NK0Y_TrEBr7TT8VwUgq`#)8E3`{l4ut$UU}wq`L2f-|-If zW{aOszghDB56>fmef9TNVteL`Xa07bGJWm-#-6+A@3bV{?;CtQq(VMvckZcu>%r2? zwV(bD%*OOfxLw}!cI5lX12vx^+iO2tztH>VmdC#9v+1s0C*pQ)*A2Vhv3dT+>}~G> z*uJNYg*UrexEgsboOI_U)P7HfdGDEF9&O?B+4F~|`FN~*hU;T)_}u!`c99If!^6IV zFb;gx_Oh{j?0Jc`KU>Glbf9fw z-R;=Ib<6sE(&_UPe*ahQkJI74vB25yr|9pBCBr&oDx6Qdv%>w5xu&0$(~fiPXvY@L z^f_PVWy!GK&v%DqU7z2_lX~ZOsAavsFk0{bs^Lwa-1eDo-`t3&d_Uf>|Gp^uF?hf5 zY2Ux&-@7>}jHi9`iQk{Ma-I_Axes36H+>z4H@wdNezw-%b25(Q>a$_^-269oT=`v} ze!{8CzMeb$F~4se*1>YG54KKsYlxSd{*Ect*VtESyXA)O z4C^VI>VMge+78s^d(B@up2qv-?fxX6{+l}gx973HJX8h%8qmUdG5HW>Ev(6wlBfn=QB6gzKvl%sPlflt2IsQC!c>lJLL!myZ_ud z+=u3Kr-l1Zb9Fxs>-4fOXG7QCGkGt}x3>(>D|SCr+s!Y6e_`;?SFT)p+4u77cZx>J zdVbp76!zzT`T2zF>%Zyk($){G-1X5!T^SwOan%{I3q_|KEBp@ygYj&skeCOfY{- zjPP#4t`+FQx&19V=74qYKQOTe0^Ll2Dc`F6k2AM-r-9X+r9yyqtViOAo6hu+$qedp2kW9R<#oj8g6`i^68^>|fqZ`)gs@0ROf(p~)* z4QK6mWA?D`c#aM2{NW7_1FNCd>jSdxo_2%fdRO4K71zG=YTxbIupfR$ z_AA=&u*APxI!@xp>27LzHm>RSX5#o4enq`(J?uLfwXgkdZ$5v^SKDdI>F>w$eun%$ zZGjsqZlRkf>tp@giQ;D51%;Zv#c!AQGvfFfz957zjKcR_pN_w~d*pbn7tNP(TgE~A zPI#Q|f7dHs-_HG=VN1{K`>2#F?XHwklWe~eVBdkZaVa;Peup{! z4!i!|PMl8e@xfs|#axST?M?T?@!rrrYA3A+tKWpv-%VxSD%X{S+c~VW{36`<*>{Vz zoN>Rja`)}`==~G5kN+;smaYSN+zrJYio2DY>~=v)+$3bO8--sf=Sp$+!`%;ef870X z4{-BbnVatpdx(s)QTauXJp2c0}zJvQ6+{@jo z$g{{YcZJ(FaRp&(@vFtJ7QgShMaZ+rGFM0ZI=BvQC!dFrHEv02jq65wQlGfRslVZV z%JHYT|3ET{Vd)~If1)%!C^0EL4A~ypDN&m)PShc_>7OPV3vWp@6h4@kSNQA1?7}A! zorMb$b(sZ;w#<`>#>`WRCd3u}F43Cl#BX6@3DTB%IKAw~?CU z;-X8C?;uwq-%FfPbItD(p%26uy|O zFZ@Gt;($NmzJ&WS@(TPa?rX`;!q?!};ib6CkT;MwleGhuC+i0E;=YUf9`ZhQu!3`c z!u>Py7i1-}3i$x}E3z8-5cvrC7+HgSnrtfkELmIlFXRivrD_WkND3)PH5F!%B6tY0 zWvae#D6$o@4KfVb7TF#tPAx7Rfx9!Z3p_G4qi|Pvw^V20?nnu|C+=SOkAn9`_CfX~ zY$^Wx!TTczAZ7R+h#UkTO!(2rp~zu`E648$qyjk-ISLtz9L>3LxZ??T9CAEzLTWa$ z&Yg&RBJN4JC*e-SorrrX?y0zwa3|rOhI<JT@boe_ zCOvq_7*WCHF9$i(zuWY`vyICna6PKVD-7Y{iT_w01Zkh5{m zA^bVGmvR0wTt=NCwYXPt{wmzM^zbca;oh7cxTfKmJIni?&QL=6PFe) zbM#2w?sKk``&EC1@yiXK3vss%+#h$3z=Lu3%i=?__{c0CpT#F<@flfsZs4tOr)BwH zlEqhM@g68>y7_6o=j}LuNS6PRS?s4GK1?xTW(M~9FAD7QeJQXn?;cD&e0U$mZwENx zZ`^Og7T1Tl9yyGAJkK{FK0HCie-ig{`@_pf=daA?4~5@_&qR?UU<>cl{{;Wv-tF9} zfj{T|%iCrdiCukfl54HTJ(Bk!uM506YefDryifBk_-F8E@MQ%FcSqns&HVNN?9+Lh zHK(V8|8q}jn3p)VGWxQ3_GKBE#Y3}rcow5>6yEFL_4yP(pXR~5&+5xQBt?0DoOJ(! z_k-{JIN|&!y$*pJxVP9IwzxaPKFl}HPf8fC!+ESfczwJM#$E^G@r2J*ICo@LI)2LP z{nxT)kj#d9lqevZG->+SuM?mw_^OTS_bCyn2^=yTZ(NzrE-TwI!vw(R-bkDRn; z&#&&J`V{jOk$IIvjsr_Iueo;mhvJ;>$P& zHxa@!&vBoTuJ`v#n4Sl|?wtQQCeKmXVc##R@b~$aoS$&jfzP=r;Vy=~4!@!e`+V<) z&kA<);eW$ma4G(ukj}G|%j)sK&|kd&HCJjnH~DhW&V4!*&n;iAZPk~hl!oD7W%M?@ zgKyyY$Bv%84eMc_&erJW^}IEt4ek-)ht=5e)xqC`~-VS2L!&7=fzvV-fmT6 z;<6;!2e2*vBM9%ugq=c|b*ww?2JaWr^kwmJf7k2W-XY9)Y5!KPgR!kIm)CP_u=63r zeQZ$DmEq_43dY0HfuDJZb_*}WkV9y1V*<~=hu^k<$K&to=oENbU|)A9lg^EN!{JQ) z{W$N(s5=6`#2RDv^+?7d!u;{z_&Sw+&GO^SABg*SNZ;4v8KJzMkEG0A2Y)R#_Wm}8 z>_u4L_aEk2m~X>3k&d_F82ss?ZYgVl7Y4qU{(dpM4F9)SBbx!=3fFP%FrH0Y^65=gamKz@68UdSqe3*ABgTID88^T-qFQLEnQ)3H% zz*P1e^wak6Z`P>2KE7>?W1q5&fv}J3?SCcZ`SB|JGn&`8Svxp5@N0j=cJNHXO=WyI z3O3zPNBk#jpLECL@AbF#;Q2tF`S^1Ae4DutNS%_`!Q1FqdJ{aLNUssM!lut>gtu}T zLcAurF?HvF~3!W;YW#+MQPWIQ@|V}Bm(?fK2sjN5^izNd@{oG<%z_p~5!lavK87t!ib=drXJ7Oj5P0j0weGzC{al-TJ$ioNKE2*~o)1?C{~ZWFIK(}! zO8p<^oY&L0x5p`$={yAXb5VZ{8i5RrproX>k5ZS8$W##zaI8&$+xR_;8lcqhsp4-hN(TR{eKeT z`fIN5FE93I{2|OG_zz(W>4t}prnEi6c>7y_`3&~s#z90*6vSbCeffJ0KR58{__4@e zD}DMt?it(=8J`3DF#kv<-Jv^CFR;xkJ|W*l3?A9{wpZ;J_up6Go3eB>_O{wK=;QfT z!uavix081f-!Hy)n2u?dm$#Mo|0Di0vvq*2?6(H?X$~R$cV1>61?f@E&i9cQ%e7qN zw{>m_Y<b<$ow+$P%9_ie4((!pcLzO^N{n8*1Em{9sUFFLHc$bPmsRU^?3Rq{+_#!Q=QL0SI0na6F;x;ZOQk2 zKi2vF?$b#yKll32C5+u?dH+kdOt|qU#dYCr>%%Dsn83uB89@7rpt_YZN~Vc$Nj{V&7c z)^^5|ug%{)+q~{G!r1)H``bLw=WF-iK8$YzzFm2?d7}^G$NztvLB8}IZ`*p(ID>Ne zYoEUdJR_@3o{Rsvud_bF{J`_oRLGA5-v~Fu)A0B9_xBf%W;BC>t zhj{|FHskMkZ^eH$_2Tu+@J9_-dZMYgY9W6$Q1a^^7mFVQh`UsXt{$iuxi{-6&K6H3^M{ZWbB`-6k{vQe7rOn%gAkE;&0HY89FS%@yLG zdr+tfdQ_+ynlCgRdQzwcdRk}(^t@0l)FV^}y(Cl*y(TmZdQ+$Y>J@5){v^}{eIV2f zeJnH^S}W87eJ0cjeIe8irOx%X?|?Ew^PtUy=0jTuEr7NW>Vl?L`WW4iT6b~ewK|d5~hi(w+fPNx04{8>g58W!X z07?mULfY24AZ=^ikhZlR=+1M!trkP~3N3-!gqA|T5?T&DBGe0M8(#rECVnfS1wyN# zg+gnf=Y-ZmzZY5uEf!i2y(;7wquvloL+=P>pcO&`p;bbIp^t=yLVp+XpGjILG#vW3 zP%)G|&zEQ<)K91c8Ynah8X{B*Z7oy=Z7(z$Di$h-b``3C_7oZm?JG16DifLj9U{bZ z(tS;6GBj0M=M+eL3Inj4DSlOu?@>i^$KrcHk(-X6Z{tO-CZZY8nDe-ga<$MnAuhY_ z5}|siPG}bN5LDzEAWg3kS|WZ;&@w3Fnp0M9v!S=eZw{nmXA88K*sm4R{?-O*4{e8L ziuN6lmS`UIzNF$;T~-QpLmvwDKz|cj3~8@j0{v6`mO|Pa{mP8y)(cIQJXS!OhhLwW zDSm6Cv+JU>>!Y)5Ne!b^8qyMFAWdZ;q^S&sG>@SX4U57JkHQs0*Gj%4A+|{tSGzC%( zDk0UN3Q`TKqqEbavo+D#8Iaa*ZA5jDj(_#gc9PpH=vvXG0n*;s2<;?in;@;XW@x1N z&4%_6ngi`4)B_~FOQW;PA=R%J z(zq)kS{a2~9fey1sdd*vH;P@>K^k{Gr1^3o3Mr={%{K#S$p=DO^1+and?=(P9|md3 zheO&Xiy<9fMnXE~lt4PZjDmE`DTQ>TDTB0rDle? zysCpj?}0SNEJ(-G21rNIMo34|mgsCNq_dVD=me>)6%nnA&JOQy;mRS^xgw&mklJ}1 zq;{SFX$?+5$e@4WxB61JXLGg|v?9Ag!Zr z$d_%9TLYa!*#^0_&@?IKdPrv(V+UG48VAjlmeUQXRy~kv)v*~QapyrZCB3piluc+f zbhA)7)GAZ~JuFlYbwU}}0%^*vkfz)QX?fcrwN(eCJ!&4LBg1@1<1TM~OYKf>dqPB?q+OChmXaQ*{dmt_4Vn|E51kzG2g|sy-hqS!CklJbmq`e|D z*uo8m^lSyBDUXFT<#CWtd5~*_{vo;y9-?Q9+(^i`x*}HsX{#F@&Su=$DBNVox7Z># zC8A2Gw#t{SCJHwzI@=IYBlJB9Hzx|$5uKeE(R}C{3D+HkTOOV54a8k^bT++(X_bj+ zAatFiQVe+;6uGkK?C3xlH!eCmB|2LfQ5DoEsmzGN&5F)8K-z0(M`zokvmJplt}~p? z$Zr$gM0x|Z7v_ z&}VYC5z_L`4rduRqHt|c@_cWhc1UxZ7lm68h3g7u2e@u%05LLdNfd5*L~9_eeZR5E z*H)2B2gVS2F?5X35@?*zQs_9L<N9=k#H!~B!0u7n}vo$IuaH`{t8y$ zMnhUh<&frE6;X9`c6#Jj19`0qTyyZtxY^KD$zu+r`n5o+Un`{gwLz+1JEZz`KsQU= zd64QiAJXg00_X}k+X?A>w+qtwZa1XY=^jYuyNe-ROIrfz3}q>#SFq)f&VqU&odvCc z^h&o9^4If>TMeBlwqFCCBeWK(5?TjcDq5|Friq{9`Np?|($Hl>8K_ohAoM+l|U^*qo7|1l|uIml|c^)jfUn4l|zpU`RA2S35|uG z5gG?|3r&Dt6q*Pcsh0sc-XoNT?h?vCtwIB# zxk7`X2Ze@0j|vTg<_isno)jvEo)#JjJug%O^$3lEUJ@#WUK1*V-V_=Q^$L|ke-f&I zJ`ft~Nm|Z0=wqP?p5*LAXsysB=rf_o&=*2epwxxFZB#-Tp(Hq~|SwbXB|)(pB*;NLR(XAzc;kf$o(Uiy>VVUjpf> z_)_Q+NqISRxlk{3mCy>PUT7usL!s5s4MJ<6p9rmmnuXRuw+gL??iBJH@$VH%Lv2DC z=vP7mp+|%ULyrj!g%$`6^Jhi-;m|_yD~7fazmd>$;#UIwUT74wSf~_wRj3SlLufSg zj!-$YLZ|{-B{UZLNN61NccBT;I-!ZszlA12$!g!$CPV#%ra%LQDxo1lRnXQ#)zJ1r z)1hLa8faIc8PJ|Wwa~sobx@g5J#>iBENBe#E5<+QYvR}F{e+sJaYD_|2|}}>Q-tO~ zUl(eDrUcccp?iduL%$U2h1!KyKo1M8gnlEm8v3o!8mLofE%dC=I_L$V_0S)M{Kn2D zLTPB3PzHKiXdv{y&|qk#&`{_@p<&S9goZ=^6e@<+3yp+$?U4E?feM92K?8(Jp}|6B z&{jgDq3wjqp`C;(ppimjp*@7gLHh_zfDRCv2#pq+1RX9k89GX63UsVcB{V^(3OZS+ z8aiEQI&_v$4OA&K13F)*7W$@89rSIXdT55wEa*z12Iy*`M(77ZO;CeSGxQ^&+0ajg z=0HCeYJuhmwL*6bwL$j@wL=dGbwC|L^Ppb~&4->4S^)h{s1xcE>Vg&tbwhs;>VaMn zS`1Bzd)*U3FLJyaHAl-Q!0h@PN@viJEhUk z3Q4aV`ZJVqwa|@H@_CTXhUY^oIosbYfIbxJg#IBhGQ(|NJP`6T>He-1`j3PwgEHUr zx{QO=Rudq#)x^keQsg%oQd>=dw3L-mxT+8?Ex z{X#u-vz(m;-6qrk>HR_@r1uL=&|Px28EO@p4e9;D97rwH0_puiE2Q@eZIIqCv_pEo z&;jZF!aPXt7v@8Hzpwz(`-M(OX9``ApD7G--Ovy$Imq=ur9z9LlZ2K)-xOL3{ZME* z)FIRhEfZP+{R86e1ez)(S_7&5)i>-mQbVukoMmeNc(Rqr2V%IQeE01?a3XGYBdj1t>#0j z)dEPh>V!0I7o;(|Asvx=ARUo#G(^^Pd(>h37(|Sl-liSf+ zQyS9Vn1Qr44TQ8c4Th?vZ48C9H4THbH4TSC8-hX`fx2#v z>Vggu>V^&x>Ve9I7DGn}ErE^_S_&O4v>X~I)C(Oiv;sO&XeD&A&}wLs&>HCLLTjNj zh1Nl53$2GLh1|}jX&O>ZGmzJ`z}4)cv!#q%3F%7FYG^8F8JnPLp|#M(LhGPQh1Nq? z2)U8iN+=D@6q*2OdJ`c{ZxW>GO@=hRDUhaD32Ay&kfv7+X?n9EO>YjQ>9s(bUMr;O zwLzL*JEZA#K$_k>NYk4ST`QU{fNm7(gqolN*A3k)e#N_5z9S*cw*=CBM?sozDWv(9 zL7MMqNb@a+G~Wuy=iA@aKtC7ihFXMrpt+LoVo3L@ErA{pzt-KzL)vZ|R4vpF>A2Ae zrOx&Bwhq#^yB?Y;;p$7!UT7AiBU}TdsWd`5N;N^6UNfX4&1^{5Pv=0oI@7#|g&Vdf zYYL*@aA<+hEXb!)?Y zK}#iEJM@-N)jnqDYDn!o9lBPuZ-Cw-9OZ@l3?<{*p%qY(>xNbd^*|p9Er$H4T;!HO ze;2={&^jpN)~b2GY1QAdOoKY1}$UP;xFR2ASoeqWF9gwz&8IZQ2T1ZP?2ZeqFY3WzRoCI7o>BaZb)s=1L@3iaTIPzbapAE=`DwJw%H45*~X4Gs)TgB zuZL9ocIY+HuQ!}6Vrs)26RYuj8k#1Qfxaa)5V}lkIvCQKWd#(h0qK=w2ITEGz|}&v z5~B^$w$To0Z|s1yH_ngFE{M){MrXUAsiJ8&q^+q3(%cq9dfi$NsV@HGD{6z`kk(}> zq*vHUk>BKqra;;bDj{t-O^{D-kQ-Kx{V2yEHyrxGw>*u68iYzBzf$OiOZ?fg$gdn~ z{EqjlfPQ?Hr*Y8FgeF9Olc1Y_;LlEu{3@ZJ|HS)MLAT!JTho-o%^H=E_U_|v^ zKovAq{Hh_%cRDmv{AwW0cLt>S) zt8*Y7OIjek<72tb)kUpmy3>_)yO@Y+nmC)2mpIa5ArL2auY||mtr6xK%1DYu@8X=9_ z1nIM#X6Tp}pWa$X!>xlfz4egRz8h<`pN3SI45YO`5Yjpy3~8MYg|yCxL0ad-A+>!m zq&6K1sZC2Dy?Y-8>D_xNq~lN-q<8P5A-#JqhxG2f0@5*dETp?r$3ePxbpoVw)`^fG zr3&0+=y*zA;HE&jQeFl5yZi!I4e7o3bV%>TYam@inE{<3R;!1mk{+umkk&^76f6#@ zC7U3%WHY4wXf~vloCB#PTOjR6t&rNZ4N{x7Lu%6wNNqX~(tfl8QVq(FHmZPBm$8s) zFb>i@CO}#r6QQ+~Bjp;PlPFutHA1HdH9@CAgIqH-S^VZi;aZ|_tx>qP5H91&jxh_3 zhJt>OYE=QL24f-ZjpHEgjT0d4gA<`}J%Y3yOop^pr$BlwtAzAAT?OeiuNu;;+5$*N zkd=_?vKmrd)<9~ZwUAn99i;lLhr;#pSexghA&rrNG?jsYxaL9A#A+o_4a9x{Nb{`< z;dl-KU0dnTPKPwT8c18o3`ko^Eu>o2LE0kfA=PhIL=BKyvN572NNw5-sZD1?+6U)A z+6P-8?Srk5_Q5ttZQl;5?K>dtgYzKmgYzNng9{+-d7Y59(=JHu*9~cX^gzDValZ=r zx1##H)^W6Zv0CGJb_58uL$?dfhn|2kZq)JCu1X=bX&I!oFd9;umP2aO3P^1_7E+sz zgQ_cidJ`b+ZxbQ4ZY4BT&Q?L1M>V8*Ooud&8fckl)dXpbW=LbSM}8fV-#kcDnGb0y z3n10B6H-mPAl0-R(lMe3sur!*Lz;)1VCkhHpWYx>4!tc})j(?J8Qu>&^PCRS`ly4n z4b?-M@+?SoX@FGIMo4pOf^-(t3Tb)UqO$=-;BjN=P+W4XFleAk|3u)ZNk>8TwH^`Nq%6x;kym1JfDO3-AU#Jyo73zSV6P@R;c8q)NpLmFe$R0~%M zX}B^-!}+&aLduY)Tmh+t#zJbLagg@Q36R=gB6Nl1I|8kExs8IZt zK)x&)x0L^S*Sj3jJKQELaLwNk9w`Nwc(J)ErwLTk&xz5 z0%_az`$E-{)1hM}j~Yl@;tWVNt%WpSze6<4K_GpjdGSRSZV99%@-sBmYB{7@^+KwZ zzlTz-Rzj-PYDl$O164~o)(!GzvE?3O76oR}85x zetk@JDS=d%QIP6V3aKt-km@oTQX7;*+PfH7 zq}J_*)Ve*8T6Zy|)?EUrb(ce`OE09ltbkOPm5}PP8d6=>K&s1HNOf5UsV?gw)x}+G zx}+i1B?GB010mIAFr>N+g|w!JL0Z$pA+70RNNai|q%~avX-$uUw5CfTt?4pIYkD-K zHC+yAO;2Z+O^aMz2dLpDXJqgm9o(ySCS3+vPDoE{D4XOR6Lu$VoNbNTR zQv20HYQH*2?N<+}{boU0mkp5GuMtxFH9=~>W=QQf8&dntfz*C2klL>mQv0<*YQJ_! z?biXR{pLYxzxj~bZvmwC>x9&PU69(Z8&doAKx)4wklJM_q;^>jsa<*@waW@f?XnV5 zyR3%PE^8of7xra*+g2B9AzfXlgZ%0OyKEsXc_XCdZG!YYjAlsRub2&KIp#pGk#feh zK$>qW^t|}BL0YzUNc(RGr2E_FL2CQ?kiM_608(3ZLJvwRT@iId8n*{}TFx$p)b>jt z&37rJxh;p(lD&|YZ3WaTaaTfGm#ZOt7iA5kDX)cIl5p#w4}{i3+L~OAy^E5D^bM2@ zq%j6U+QtV%I$jNhw9bb?+SZ0c*NN?mA#I%_A=Rn`Qu~d9wD*)knnxM*C(&v&q^-Ri zdQ$u5$e!4W#9m z0r?pO_j!<7w+_-iQx9nyngwYKYk(e=^co>;&rOiN5!4KY9tx>V=Rj{tj239bg+8}d zDD+TB+hjYW{jvknHJN#k#+?so$rnI6UUfp+1G=ElLm`dP18F;045>AiKsuT&g|uZa zhcxA0NZZf~NZZCrNb^_?X^GZAT5oG1E%`b~t+5`uMQrLWu~wXhRI3c68VrOqx51EV zFci|>GYrz&8V+e+D26n~NJz_D0%<8nL29*9NLyGLr1dr$3fBclHK>5pE@L5Y`vGnV zG@;egQs^|H<d*n9{ zx?IlAhx9F+PUtG}>w>f&bwgUB9!T5xk|^BLDBSWWTyGR^B~&lzt%iOmv^Mfv7y0=g zQ@BCSrXj7P45S(igmiov8igAcg&Q7)D~`gIKvT7TA#E?EkfuBu((fshN8u_$xIG+W zJhIz9{BkMo0OX6kmA8cZ1^?}{!t4U?8~pczj|hA~79WB{Y_F??zH;c!NQ~yPj(XTA}@K=#eCHw&F+f3() zG52P%J1O=r&f?xIb`#?;Q(>R}N96T`^OOs*)h@MhU5vbv>n>q@+nDwJm{T+3Fnhp0 zohod*DDc(rGuOmnrp}7_-s@t1zai#bu8(=lO)*c+;#EJ@yzVCb;yaY@^!1g+WA0S{ zzaGd>gWawCB;kwhQGOX-fx=diQ=&%+chVdMfU} z_rext(bF1c24O0H&l`g1>Fc!OMfLx)Z>xV)mS4_Y9CLBt!zp9&E9&pdTls37&Z4)} z|2EQJ75D{s;Y#)Y{9wX=s630fErC1X`cKvWPw@C8;|RKaNZji;Q}%fsxs&paqZ97j zES{OgcW3d!EPgkO6UA{lBeMA1on!x*S$uaEFU;b1vpBI!9Ct((ADP9oc27j@tt*Su zC9(h5EKcl^m1Y(nnZ@U3@ysl~JBt@)@w-`^;A^+u&fcD5N5wkK%HrZGQ(`BMDdXIbF~7l^-4zhZ0U+kKkb zC@+Rv0!x@}WB>ZVqFb^0e?s`)5pkHxU6g&A#k&_o_H>8E;p>l#!}Ol3JcR3utB%9h z!(RU*@UOfg_V0wf|2g68Mp64n1>s|3v z$~zr|f2Z;|*ez7P5U$AL$}FyUE)L)O2W8RiHRVp?cD|*&%BT6Z@|KM46@e?@mcUi; z*nbp6^_$+kFyhKX3nM#M99Aghnnn1|z}|+v$Ev^AzvVb(uTSU6%J&n#_!Q+g;mS#I zcz1dnzWBV@zqeM|w})BR#`>ghhYl=_ z!~Gp@J#Hs1MR5!LG49j2&A89t{s*_qpHK1}+MmaL&L5{)oAAfD-TpYkd(_^g;4gTW zg8sg6Z&GLS@5Uhhu8K*xI|t!Wle-4F6?p;q04X987j}0HQjJ`M+>G3VJdS*V^e6Y9 zB2zK@H00aJRmd#lCgdLEm&juX7YO$>(v2)ZmLuDuZ85SNvOjVdG7dQvxeECyav$;l z@+9&R@^7R+)w?;e9kMgB7jghH8aWO*2RR?P2x&rYM_Q3bkmr#l2m^xq7+HsWfsEkp za1W#m8H1dNoPkV5=zQ*KA3lRUsN&gMWCdA(j{~B3@yn?)re1NP) zK0}7}XZD5citL5#hkOn3--5gZxf;11xf!_wX+`ECze8R|-bFq@{(<=KGZqZs{b^)7 zWH)3KG8UPLT#U>@Zb6BwawT#Taxd}_@;vfKSiC7axXF$c^G*N@!x6s2-$}b^ERXfc@*(q>-huXzqj)q z;=iZ!4ywnM&# z9E+TaoQYH+7a^A;{<|HG$W6%4kq3}R5&z|k7m!zww~&7#h1)ZJAcrI4k#8bbAoWNC zauf0k#D72H8RQShQsiyqLu4)TFQkae;~->PWCXGoaxii}auIR^awp=yt>C|<@CW2o zUfM`RbI1lbQc2ss=XgPeq%iA+VliTJnte}LS8{2aL( zc?@|LS&Xbg{M+qmF5|^WDRMY61*t|ZL9Rf)hx`D!8MzzzCGs0&A@VMg*opYa5y;8N zCCHDF2at!6r;u)B8PbbA}e1NELED@(A)2@;tH%`2<;y4B8Eykb{vEk;%w3q!zgynTz}e zS%kcTyn`fn=NS~T4{{`O0x}J`0{H=QJMswfcVycV>Kv&yZbL-ywclw;OUGayc>wc?(JH zjh&Fqk!_HX$Uewn$T7%i$Q+~#`8TrFK0LEQYLK5I_acuXUC3XNwMfCfT#u1$k)4r! zkP75Pq!PIsc^-KY*|L=Wi|mFRkDQE5MJ`2dLGD8yNBrB5FCuRse?>k=2JS~5$d1U~ z$Wh2?$XQ4g;@^|J6uA~@M4FJ<$bCpV@+h(Z=|=uP_U;ABruy;!|Gu7c%J+>%?8B*`r#Nz;(r5|Sh&Bq6`&-n)I? zziz=dJWjl1oCQ8mUh@l1Iq^ zGK7pIFO%tHE?Gq0ChwEIB%u<^MMC5@QjI)7I+7mb3GxgXL1vKoWI1`4Y#_TxF*!)i zkPGA*aoj$Y!#O>?g+Cj=vDOGV7ce?;{%T6&h~}b|6oa zv80I1AoIxv@)h}-{79~onA=%rqyh<&iljQJLmH4Kq!npL9wLvBzT_FQg1k#UC40$X za-4im&XG$*uEKUs5=lAXPQtQ zh7J-%Vu|q{UwLA@yO&1_No7)-7;oJ@LY^YS$s{tHEFjCtyJQDBNPZ-j$#vqW!FnTc z#78QSTS-lFH@S}(@9Y`x=nWvl$Vf7Y%pi-&JLCiM5&4AdBVUv6$a!*|Xf^pkN&KWD zsX^+Iw&Wo)oGc;h$aYdf4wLW6Iil5KUqo7wN68c9X|kE@AzzZCFl0 z6{$dSNJVlNX-Ha<&g3cb5}8WoktO6qvY!}lwHfcJ>2+B*B!|={4M=m+nRF+{n`9%% zIPxl4K)xZ@h z7m`9UNG`dB)F5?91Jay4NP3ZhWEdGq#*xWn8kt4rlefuxWIOqkd_leyd_cC4U8I=oC&$S5;vWNUYej@t) z9Ggf5Qjy$6nvwRzxYPVNd5TORQ_0(8AGtuJW~^J{B|efvs+0Rj8`6 zj*#=j(VTTd{3MH1B3;N6%+J4p%oo)~Y?Tqn+!93x2*$tDG)D!H4qAe~5GGLVcW3&?V^iR>hM z$k*gYa+%1jSl1+x1jsF<8mUK`kv60g=|&zWPmyQI^JFx6nY>0`CvTADkw-{> zGK7pFMPw$KPnMFkWCPhoJ|ka}@5vQ%gE-pK&q)@kPVOabNJsJ{8AfK4MPx16MD~(H zUIfovoD$w_jCTp>4z+Mel>SdvUK zNCBxy?jcP{EAlYuONNkwhdB& z;sMJDwQfes; zkXmsMq=PhE>d5n5U8EQJbd>bCG@4JxaJOWv)L)t;J{RV2V|8LA+M35<#(kRd6VRpw@My)yX2KWlVasP z{A;(LOFp?oDktxi(&c?p1^IxKAs>`7w* z{EQqU50uNwgJr)wR4y+Mlhfqka=JW1t{{(oxqL!yA)k?3%4g+P@@2V=d_{ghmXx-#OKB%ZDDCA~rGp%=bd*z+ zPI5r$EN3fS^VB_ZzWTXbs20l=)xB~h^^jay{YJiBJt0?7Ps(?wr{rqtX}P+3 zMy{crlWVKzZ?wrfm%jss75Kx)M%xp8l!Yl-AZTGqdcU> zDqYn$rH7iJ^j6C%eN?~lgj!DNtEMac)J&znnx#CWW-9~LT;*9cPkBKtP)4eS$|&^~ zWwcsJ8Kd5&j8*SY#;H}6m(=RYc=b+Yf?8Xdq}Ef4)P~AbwUIJSZLG{tn<%fT_bap2 z7Rns8r7~A-qs&*^DQ~C`DsQSClx1p1Wx3i(S)q1TR;pc;x73G}Rccq|ZS`Sgwc1U2 zNA0exQF|!ws*fmZ)kl^0)LzOu^)cmrwYRcf9i)7q4pBC!!;}xz=ah}=aAlMFys}w+ zQQ4}FQa(~gE8EpE%5HV6@|ikL*`vOse6EgHiq#3q7wSZ1zdA`dq)t{2t1l}@)G5kQ z^%doWTBMv*rz+p8)0ETdtI7}RbmfdXL-|pishn3|Q+`rsDHqh)%0+dKa#@|LTvg{O zzp1Y)*VOsSO?81HX$uuuds9)grHZaCQ=HmzB|=-FL~AP*kM@@0)mABS+S^LJwpvNh z-cb^@HA<59u9B>+Rs7m}N{aTrlA*0v0@?>kwzfgZ(LPjiwM|N%wpj^kTa(|%IgYZsIUwV#!)+C}9N?UK@4yR1B^>1sdCr9P#_sr|Kh zb%2(j4%Cv=!CF~$h?cAl)BNgit(-bSOHp6Y%BwGGsp=>#O&zVJt7EhZ>NqV!9j|4o z6SROjQOi;%YuW0{T8=tJ%TtTApgL8{S6|f%)EQbxeN8J=XKS~pbF_-;T>SZk{8)b3Y5(VD5d zwC3ukS_^fz)>8dUYo+edTC1OHZPa4z0rd;5ty-eBQ}=4^)qUE7>X%vvb-&h8{YvYk z9?&|g2emHhA?+dcu+~*QqCKpBt#wn6YTeauv>xg)?Gg33)>HjfdsIEC^-{mn2CApD zLF#F3u=<1cta?TpqW-82Q_pM9sh70j>J@F2dQ}^vUe_k5H?=9Mq!+2GK2>$-(^RKE zLv`tM)o6X5>elD0@%j=qNq(y-iLp4X=q~_|I)dGFH zTBz?(tLuBzJM}Nr8hVLZQ{SuB)%U6O^!@6+`d4a0{eaq7Kd3g-52-EmBWg?isM<;uj)Q+rta4k=qcJly}Y(qPt#WE>Dp>NLwjEj zXdmi@+9v%LZL?lc+oIp9ZPhDjAL(~!+w^MMcD=gxv0g*_M6ado*6V7Y>GicedIPOQ zZ=~(l8*5+bowNgb7wwS#kak$_svXh0X-D<$+BbR+?U>$E`%Zsc`(E#>{h&Xmozcf? z=k#&fPx^T6XMKWpQJ<*&s!!6c>XWr=`pepNeTw$G{)#3$iZsPBRnr~QG>79=E!r_% zi*d}*JdT-~*D+g*bIj2a9CNj@j(J+L<8{sNn6ITc7HDaX#agc84K3(cqUAf@)G9ev zXq6prX}3Gx)~YyGYti+Xtf;gYIix_)9N_ZY4sfMYYiOhwT6xlv?h*?T1&?! zt+ivb*2b|#Ywy^mb#QFgIypYpx;S=fT^*lj-5j54-5tBNM;xDPk2;FAryXBt108#{ z=N$XB=N*T%k&YwUM90_KWXDnMWyd$#6vwyPD~^-eRL3dpHOFafuHy%7zT=Fx$Z=MC z!*Nbq;`mux=D4V>a$M5haa`8cIDXOAJFaLO9KUKi95*zcG0{J9sQNC4uJ3j@^gRxz zUhHt``y6HT{f-Fzpd(U0;)v3}c0}t(9d7-Y!=s;Yc=c}`vHEw8IQ<7ly#AvjQ9tWQ z(l0p5>OVV@^~(;Qe#7C{WoJ2EbEfDK&hom~nWo1%)Ab~01>Nt=&{LcNJDV((5|! z((5^E>-RY8==VA6>W!Uu>-RhB=`Ef2=xvg}8j^!CpC^aq`d^p4K^^)All z`a{kZ`oqqadN*e)y}Pru{)qEI{ZVHJ{V``}{c-0*dS7Q({V8WR{b^?p{Tb&Y`XFad z{aNRu`VeO?eW>#>{W<63`t!~{`UvL}`bcMA{YB@K`enRBYX-#JbH%K55()HzfC#`&6l z!Z}Mn>71>fa?a7ech1$%IOpkSov-UZIp^z_oeT6|oD20U&PDoF=VJZ3^9@~cEzuR% zo4V7rRF8Bm)7`G+dc13ep6FVsmvz0R`&_H^a;~@a@~+i-1=l-zrfZF!<$71ob*9*LuB*>jS-}YlD85>qEVcYomUTYqQ?KwMB2}`bcl$+NL*i?a*7e zKGs{icIs_ipXlveyY&vP&-Ko(V*Mf47y84l61}@?ul}fOzy6r(E4`2FpgzcTL?7b% zS|92l=~G-6^;cb&^y#k4`V7|%eU?jd%y!9+ zc`k=zfy?PwyJ|UBxbAYi<*Msg?YhUY##P_3)^)FAovVT416NDO z2G^&K4_*8!{(|Sdb7YC%fLXFM(JamGrf}!d7*@a&+%wG5^ii@j+bq2@j^A`r<+gNr58V!r4{C|H-6yRXR~x_ydu44mXz=9DJ#_FgFk&b zy_9(jUBYz;^LsnPrPAj6I8U@&bsqkmJ&&3%aXrc$w_mta_b0ABn8V)SIc=*X<}2p5 zkEiynWsBf>#u9Uk(&iCAK>lOdM7zul+T*S)u$TNEw;~-dry}Mi#we}TN?S_Nl4VB7 z(ou7IV#=kJ&JI$fljiq!(Dv4HJQ*&PHeXSzSI^4Q57s<*sPDX4IukA}JR(b%&0#kh zDSz}07p-Qs>7MXBj$G$zs`)*mM_B7}PaAt}#oeG2<{CZmy&~n0?`52}YbxsU+5^fT z;~o!>n-Q+T)#-|)n^SR*=h}c-I?>#&%idUf4IZkaNM7^P=G*L^oe?f&wvhj5tKNsG zk6Gtm!lg0&l|PpE>|y)UAH&EHVU7FO zV~8pL-RW&=VfXAVe!Fz$Ia#V`)>PDa$znyi-5fS)o?RDX*{oW{gopjxH7IR*rL{|G z%Te06f8DyqlHd8KbtGD{wE2p8{Pmjo=i`<(hEKP9&cRf>biATn5=V%`;bYn3>>aJ+ z+b6$pW!K!!CvLX;+M%6sfIQ zl6X7FD!ui!-D6L^qDY<0Pd|&Zw}5XL*3BGd?6d!TrZ96ecV*2_MNPN7U>~i-5-nXT zOMT7nt-50Gxr`&Hb&L|VuhG>$^Vn40K87BPv$xs@JIm4lb1EgWy-kZ@<0si|@cM6D zlQ+M2@Eq?MnkD0?F~%&d4DaPXI%+Su?rY2EPAVAqp&P1}Ws z4eDVJ>oigR;|$=b$L;lYoV|~AY^)w`$p`tKb?o`oWq=m&EoV zj`8)!$kIY{jL^^A;W10o2iPrsI8WgTIOE7(TIspdvh?nsJ{A3b++OZln4eZ_sr<3u z-9}xun8RMkw|jfr@L6B)@RlOZf+mKCiSr0Ck4tX(kA6BRy!D8wymQ1}(_(s}Pqyc5 zZl_t7+rs0DDT_Lbn!4ict>^Lzd;O-ZwEISBXPftim-0rqP2Yal9-|ZcZ0l&R@NTVj zMlpesHEhBc_CDf^$@Z}PAGzyk*13dj!TR2>^u&FC8dlo(N}FD3Qz`9x{W&69bDPVX ze}~Mu`NDO{8NhQ3=CCJ**rj>J_PN>K8+NJ5aC<7jx9nvT(-ZTkxXj)@#4z!_iu{JK z>M|+HF8xr>F3rxeOP!b5^H?&^F13oXwWQ`emNtf{{XZXf!UDSu z{_b*&yi1l&nXOwc+&)-X{L(-XstGdF9^tol%vE}7Gt!@m8`!zwkgKYjWlcN@*`8Dm^COSgW& zEgyc@aSxf2HQ&;PRoiK=)gs!!I-2_3+%-4H-CEu*-A^yEK3z#Ku}XK|XYb*}x)eQ3 z^bOGuMBn)99#Ps<{uA@~cWU}SQ{m}}@E-2p?g#%bwyx;+qV}b20snlzR$4oYJ-^sH zt`DDS{q_F7v^~;)Vjll*w~*-LqOJbzwebIT3yF3SZS`-r(0^hc|FagjrW`&yENyS` zf3Af@&k<|-fBMk>zCJ{|h_?E-Tj>AX`u$JT{y#B~|7oHBy-)sU_Ywbz_4}Wg$Nx>g zc1pX#a*xCQMS8rLXPnL7oT=R9u}X2_`#s;s*w+gFdFk`+_B=`(_t<3nH@5h+!Ei-# zo4;JeFi~pM!yZGf_y3)8Ql@s4OM?X?mr7uXv1o{jYZTDyMNJ(7MJL!98ZH zB(4dHd8~O&mVD+sM$WQJxsTev*>}&hhuwEY=G|H27rnUJ*o?b)S>~`G&)8##sT75$ z96Ou8hGKqiTN`^RjjNZpn!~oL_PFOiwXae9vdb=g6Rv@%O9EH1?=Z)mRK{*eQTpfi zvcxqHanGTw*KW1sT>BdL;%K`R$KCpxW(~H}_pEz1Vpy{g_EH-6x2*4_jkL!VZ77#%><>#KU*ZF5@_OR0Ga@TkE7SQZX`)W@O{)Uw`z2+nBC3=Fp@Yb-gUF=ePXS=2! zvVB-vz|?T5LPvYpOr~sodL&$Wa)u(cG?%MZK_LxH_5lvbCio$MMI>)cu&AM)pQtgC9GZ`AbLOTOo0d%oM*qS~3u z(I8y<>n&bv$veg=QfG7ApC`#uce8YWE5eVNrT@hKz}diF=f+bO){={o*l&nop5^xU zL`i(Fd?$NN$A|a8f4!7q4}9_)dygch_jlXsZtn3}J!}R0D{H-#HcV{sVjhP#$Q#P*i|8d1Se2x1i&ofy2D`UPz;Tl*aF%@H9VtsGKM0;B($1@Jr zFmc=$H5K&}bvEiU^KaBe%tPF-Fs5>dV;pZGQx|JF#J!l-cPi36bIP0ADStfgBi5?1 zY=8c=c(Oeeqo&rBjqfcEw}Dj>OC**s{gYuSvpTK(U) z)u0jf`sn4bONp#=>)80sLc6r9m3>spx!YdTb;6}RGZkr_IggI7*`@bhRiusPu(i|d zk{Bk|d2f%s_9t@`x3(zJLcg4~Yjv8VxV1!a;q^9xakrWCcqx1~VzkgMbC~E&VpwUV zobY{@`np{g<9JzYPUXSyokFdTT?0{jQL7r^PsR62TQi-P+iNBxyfwb`l09Xy-XDKq0N(&`7|*)nmqZrr`L?o^9oiuhCv6L-1Ac2wGL zjlcWpzx}<^>hgDo{qwqrG5+n+(7m#>-|Vpw`|Q#`U%&r%jv;=BmR1ri`FGdbf8u+h zR#U@AXEE%rOMkb1rA?)@asT=EriAy!V%*ZE{C9_msfg0w9k;aaiK&Rv-~HZSuaDBE z@^26Ocj{bPt;Ce`c=GIsxjzuYDsa5C_Ss_C|CIO}6Lsx#8ga(`*X?3lx3HcDe=&R( zRNB62eMNi9rJW0iqy5%>_PYgV672JX4=UKD+TkZi&V`>K5o3sRz0tB_KWP%4-gAxY z-&PBFg57$uztea2+@9xI$zx_ODecpiS&DSZ{8W5zZ+I&2mNJ#nKAjbwit!}dS#x?9 zF3ZwIvt(S?v!3)6zX!#2J)@niPv>w3YL$#()^a=?zWOGfk;@I&>NMB1taWsObF-^| zS`IPBP|bcCQjAf7>s;2{ZXax4vH6PEU~igJsdbPSqj{o~zhXGY{tb3;ti2pBQ?lmU zI$V0Csr~G9pL6`H7UsBD2is3qR^@Edy3%XBdEhobeT{2D)>4)>5Ao?X#;|_%-aV1O zsA7&=99~DO!>utRycUe-G5zNE#Iu*{GwpM4W67=Bizj(STb&C}`Eq#5Yr<3h>$P9n z^T478##+rZYh^q&Zv7q<>s)LprEN#X^Jdm>12Km9MRoRD`>LPuv~Zp|k6%aecdX5l z7^CDV`z*X6%VxEK_*6_!3=?$`_516(yx3TlZvWGKjpestuyX5;b#Jk*07eX z1y}B@@71EM?lh+&mZ(4PiCE)`wIzlbt!s@TJ{7~ZgrDd(erwb*r!0QOh~GG3$;Gg& z@b8`tE9|wfGyKa&4wsU{PggGGzQLc@mT_I#S~jsn#$Lc$q7TAvpxhX4ueZk6?O%rT z_*HbTS?5k26sd_>5=$vsO|(X7?N`KewAS2)vfpTFPUWS$6{($B5^W`FAm%IPW{lf8 zJciYujqR?ABRa(=tnvw6C z^2c4g8180FF~4V&rkka|9`~<5HKsDhoJ#q(?7E0jpYYofVpvHF`+HvYtkxdn@V#~$ zh&!!uHSE?9`_o2}eRlK3C3}A_+F;5P_NUkR)H-YF-`YMa_%8s zu-ymjw^l#@-aZc#zX*)2(K_ZC*K)0MkiGB8{GDLqJSTURJ#1{aB*r~l%WmE19`;pn z<4T)#?kKLkijqrKOZMm?dM%Tg_6Zr|swd{m1P28tcP) z?*B{9jI1RRb*XaRUegKl?6)+;l7}YRpBiKAH0NQwTWXbZ*~jiNhm~V{vr1db+w-`c zx8wGipVp;?4w)tKF6~3~jgNDTmNd3EYke5+$Q}#N~%G!FwyR^o;BYM73 zXX8y}t7N?8Y`tA=yya|_PHwa3b}4*z*v~_|nB$7KiCTo~S1ZllR*id*R_ls$DRC8B zoK=bKLu~tE+&S6yx_n}sU6&WaC9#M5n)lDWX07TmU#qRw@(U=*9M*9OzY@$AIu$eMImEvejxK&g!kbK#eALNxZlHd3e~b{kfN5&LjO6``xPgE_+?x8ZITX zZ%;A5XS_Y1VU~<{=B-|Ayhm^KjpFB&KWZ@Qu-*TRH@>XCv6FY4tT7U}uV%Hb@y@r^ zV~scJt&;KYWm(I%E6Q#^ab73R|BPN|y|pFQZ*A_#T5a&jCVSjEtn*&xofXmIgXkMp zFBbh-^l{PGjP1qhVJ*TX@n-hJ?1!wkutmQYZ{CY7ASPtb&3NC>nx6Qyv|5!`m(u#Z zn9BD0{0o2Pn)!aL^2gd*>b84{=wYH?&8Aj`<`|*|qBZ_`8M4H=3vS`>@|oir=R;OMt^c51msOAOrl|R8$MAjA&XlaFl%ZtpeLg8tq{im=hH!>r z)j-@?xxiHot7qTxuHCaIAF{WAd&BRRwhTWxaEv#ktufa8ZL&mBK|o-+Wm2KQ$2 zhO}8~+>GZL%u+#Fo-i;={kS@~*er=RfkiLwSI*w+8PDrk{a&=%cAn2!ZjNibF>LJ_ zjJKSvW&5x14qKlZZw#+C#}LP(i|6gND%wh%$BMR!WY22Vv^#CE&YX&I47H|goI6@2 z@!qkh=_QVwz07ll^cU^=iKp+xen^}Fe5={5YixtoQKQ>@`^a<~=Wy2ajDG=iqt$-l zVa8RaZRW6dU$V#D$Zrj+UBr>jI0{)urqYf=3&VTN*m3sJ?^D*fHO9wG&nit@Vb`iP zt!vflG-nUi8R+QM_IeXFeTlOrYuw6h>~Td;4AB#@t_bXi2LL-ep{?fBM}r?j4(-it~t0ee61mx`<&Oo;$RrEQWm$K4;y= zd4$!vzj7{W9l?yVQfqHv{35XS%9Gj0zG3d4A7VMII^W=K#u2kFE=7?}n5Bw5DRJ5? zU8gn9o25=H+hw!#_J8U3*7T}yesInF^kHghjS<6^{KvSZESp%$hADQPe`sUxpG(5S z_#>`=EQge?NOFO3F7?D=dyKlw!)Xr7W&4OWOV1?OeXS9tICEGeM<%Pqv%@9htjcP& zRpE2_tF)xmYGS>KJ)HQ>B<==@?}>X8IA=lF{p|HE8q=YhP#VEv%j` z_KC)MPO`adMeAfK)hxZjnz7D;2C+W~n8O_G`GaOj^kOlUdQI(qCH6=e{9>tSjv>w{ zjB9w-Z-Z2No%NffUbrOAc#I=#6?5ES^a$%$TiaH4$+%WvEz#bp_As%Oa=0%2!lmuA z?cZQW!o!Y-&p}>iDpp;LUtZQP5#yJaRT5Xb#XPDkw2u{)!@r`R2~VZ8G5U{Iq#EWD zMY2TJHYk44f6O_$wPuEJo>SNSo@gsEy_WQ1Yspv5wZ|y!tk1YE)xeyJ_$@B>Q}{VW!AXH8QG)e z7*39ZPyA`zeHUcuX>-`=KK9(iRPN*NzgYV_jC-l0%}-z8p2GyQw1B_NW0guf12wJ$TFYx}Dc1JeJ^Y)q z9mgYU9&5tKfM(V0{l@rK_Aj)f@7cq|Qi}Vvr7fkg_j$#vpIGwaT&=bCQexS}^u(uP zZsOjtSikM6*z4DLhr{aQ#u?+Ed%HMC7u$kpp^hAXt!=fmb97Oc(rRklMV?_U+dn^p z7gx`XC9;m^;&*bz0kSmLobt9u>>eTWdux$7O#B|K$yTxKFTXd%-1`_$r&@hu9sR)S z?Zd_^(%a^^!};5RR%v>8So1+#^)o*;jxHaXrL&x0ePou5cVMhB#_>JtQ*j&=zx;F0 z$97~*?f*t1$!2-e_TbKlfD>ek3q zq|eQHJQ}`Y?Fb*mMO|tz6|2sj!bdgZ_x_jWxW*G2R=bG07{8dUc^La~YwHn57qQ1I z?Ov8~OgU^$c@$>~)>OoCYf?}9T>d6!ht~dTX}DIOjIoazi^HYf^fjw~Ex77pm7>F? z2e@8mwZXXUvUI|n@4ZtwpEOI!i|iw|aZI+(K#g{>N`()|e~i2NZTov-9nIv(Zq@$o zmG<{an};#I^XA+{o3;%9LhC~>w3hNlhW&S_+OyuQv!(HrtiQx2&g=g9HLZU>hB&J? z?rK@TKg8eCGuGf`bBV-X2NX|Ey?(=P$qJS1v#O#W?b47$`_umH>#Qj+``-Q)vuB`v z7w_DU_SHdoi~Xt5!>spbj5TPD`)zl7tC)JX{k_tLP4(Ghh<<9UbMf2iH*<-0@r%^j z%Jx5D*I67P#Ir|#cbIr~#&{COdiu%u%Xn5voFj?n9_+ua$TrEpKEiYSk}k>on;$ym zHIfrINM-OtDH1nH(YS+un?#ZJ^KX_Y(pUV8C0qmM-z-t2gHjS6l9KT-|AL7keZ#+B z!tWOT!B<6c$m!^mGcZyPV3eGV(Q+=v$U$_=1?Z6rF;1?C@p2_hlq+Kr|2QM(^Kw

    6rOs7Rh@mmaS_hfAK8vR)$^YP+?MMX0I};yU50(nAL_>`x{Q!PH0WlAgOl8{>uycKOwdI<;2 z1AhTy^rsk}4}{;18wNKQB3x`>W+yaP|u zV8dwX<{1#ORW>rVe5@((23dfk|Mm_N@17u0o7`bAgI3t_r&Sx@h}k>Yypn;q?wLAz z?n0&yVwaf(lXi`Tw{MjwpD{yjl{xHMXAxCJyitg}?CmhL&hH1ar(q%0MMaozsc-?N zxiQkR%VRklVODNK-1Jqwn&%!Qo6&1fbv+K%z#Ejm&3a^pdk9%T1{AMz(HBq|l#f*` z8%2Ca5fsthodVxE%3utrj4gG14p2KDZCd{dwrJqg2({l-9O)j$rNs`09EQSJfJ13A zE%2Cg*udLV_%xFzsvx=v>l|+|z95CGu_24%V8_sNm*opL_y4JVKmT)W4t(lH(-MhN$U2&kT=(7;q?7J0G zh_JM?3is%pUzg_Hs+d ze6okAy0`rUPrFaxgmnN8$h6ObNDqQQ5R-Q(l}R9sk|a=N->tZvDa4LGcAA|xVGIb% zJF5sJLU7j!$12_^u_b9+3oN;#yL+crjQh8Z$nM-G%NMdsEaMTYDHOD#B0Hxto%rzK zUQVF%Q(*F7Y%iB4z$FV4XE(yi_};OzfmNcmo5>kjYT_o-KL z3fXu5S->IgjXnRu(|L?j1PlEO+pvIY)twbw8v8ro5TjYC@MQ4Lq-e&=Lc#R+8Nl?N zJ$Q$aE998z@gVCN7!AqR^PK>qU)-pW^7yA-r8immE-L{D8nyGPm|y<}c}^w#`Xbi<;P#k@S~&cO>PhYkjo7q zHejrr4WiBdtgRP|hj)SGwoH60X<>`aF}K*{clO|K(PLNf@Yx6&y`2`&kn`pkzE0Lg zdH&72FgW44Z|peS^=*HQ`?t!4k0H#o+L#j^f|c~@Wxb3+5J@%sN>34*!O9!pq5ioE z%M*KJG62i3{3hH3d#e!B4|V|Xf;O(|E7&uDwL2WSR%g1$&>I%ebubE|G@s{u{8~7d z=I_gwY%OB7jU}meARuzhJ&TJ;NQ+TDruYT)x|P=>o-1Y5tvgl!GT)#nbkn+Fahj(l zaB`;&QIN&~j$o+UYmgf2w!M1zexN6o6R6`&*W!}S3(i1tKq}GiDoC|+HdLl3wP0S_~8>xPs7q&Pw#1erd?3Rn>vuvSMae12X-+6 z767)xm?!`300t*{h(!oqu?Lwj6}LET$7{oFoI*qkqQExpqR3j);N{?B*e04OQ zdto=-JDJSE_p>`;lC7+~4<>X{780yP2szg%9b)j6_rj|I-OY`p5?Cpi8^eeLMl?T`H#uy@CsrqjboBEA49kr2A4l@Nn4xGK5tRmj_VfO z!$IFosC9u+3&%-$XYWP);LhHQ^)0XN*4JOXMBiZbQhZq^#^RUJ_+>nP8INDa}ykV_NA`Qfj9K=(-ViC z17FK|+4EsKs%I~VjoHIq69@kSjRnX%X76TAs3a^Wv!6XvR`Dl5+`<3Duu?A`Y@mo( z+ep)Ruu02Roda|KCtK7btkmopS1zaE`M>R>rSV(3|9K7`*SL(e-2}IJz~pZ;(T_0H z8!Xh+E#3b(XKU&3gBa@F4AnaPV3=>ZRv)Z`(4gC9*Cud5ZE0`B*mt+%0J2q>VD@1xO$Pffkxx+rRGCz=yVCp^hh2ue-HEUG_r58>?J* zE4D$v-1Nq)FvEDA7k!fOgaO)rk zbMsIMIENVhgXVa{vPJzGAY}S`=6hKbr5*% z`p*6ZE^8T+B`6^f{WCNU>ycGj>Az+|ovyNWmPtFD8w$}FP@J$tEHaD^;ve2g#l zou%)@f%hO^41OvLCucW*pMiRdZsj@<$QRaH%QBELsz!gx1oxVh_gC=l#4s44qr_(P#p$^`$kVVuK>kk zZ&~7;RSct^(dBChdoQg^ShSk2mc#|%5gU=$#i;FZyewiq0lqA}92>z{CHf|8m7tQk zHY*cVxmNKS55raGSdFwr%@N)t$?!KDjj4yW_ z=$=C^HsfnK?A)mM$6d-Jv%8=}W_N#~%;|M8X2n@vI|FQ1Uz21jP^+~n_Nm$jEnw%w zamH)DRaNDISxaVU&OH#yv1VA7HEbH~D+qwi4`dkZELJ0Af;hXSfGD!tW!T(6Fuy6V zw1+G99l_y?8g@_nmf(nMUz`9Lv5?`grI87uG)F9fa75l#9d0Pb0p5tc8T-FCaXWXo z$*iGG@EzD~rg!&A$ES&_*xww6E#+^iVY5A4MlJg)PGPi={ARP_Tz$kYiX2A4id=o* zS`HkokBT&oYEBMoVmh3V*c7%^KdYUY5z#rSxT6*p7lt_Juwzl=Yi6VqL|;({h<&-> z2}6rJ7S^{(F*2db==P`m~r#qKg z6A)TMCKP>%P9=*LSPS6HPgu{iw3#7ia*k@tzK)JnbXkNoU?bD~W=7)9Q9Zypq8DaD zR;?gSN5-akeGA3jjzd1OIeIxSCIzV%G+6P)Tg_uV?OrVG#yr8ljo-;?JfIs{IkdT3 z2VU-OOu|i-yl%h+A{Q}`yF&&?#I+ZMW1}QMHXgbtyp_+`C|63udz9PruXy+o7@ktR zH;s{a^-*vtX5Qnrw~>oeCfqUH=dj)1YVrG-u`! zS<`t$RzJEghBnM2_u;2vpQ?R&=aFkrA3oULuk0`clkueLVLfbqdUq{P~Z!(Om zpGU;{e_eAU8z% zktppOrMb#1xj=y!24|$=;XhCqOS!ToEMpd^*ep=7*kz+1bUI z7+3<@0cs_!WullFi91I%hI54eA`{ZLbn1>Ib@O@_+St7*GL9LElyIeR0hl0)4oy=$ z7u4gqAa1+6ZZ5c!!@LTRm+3v4J>gND4=B^ygTk*~4kya=c787_D9g+Ap4-RIjr(`x zyatc^_d;G6_gMgr`^*(%IjzaKe<_35xPKLm@wop4S}4lngQ z5C>t;%#9|0t0giua%Z>ZoV~=Ey==<4zCLkf$LcSD+XJ6O0Jn-^ATNNs4;p3lD#lI( za9nYjQ!0Q{2uRiV6`xYXCd&l~O#vJ&?dUw%oB&R~kEZX$fsY|y3|T6R3E*;aFXjlT z2V;1LW--ai=tnzIIRD@S$TvCpTPD08ot*{(EjN_zg=v%xg}+}ud?J5SIn+^e#dh*H zR>zNWaWitYTpi9$Gf*7{g}Z-GxQzTQElW&2lfQ|2Mi*=oDa>;nB=SQ3#sP=&H@2bV zZ%l;pH|9h68w;-$h~#eq zP$-|XYdrODLf@Zil=A=o+5L^ zcuGzUYX#yd7etMP9VR(@9#1K4;3<7mJf#FiEDwjLRW3|O{jHlSk zGjcguH;SiNM@ucnQ_3#IQ?e3IvFi@RQ=IaEr`QJ_o?>aOc5N#;@su1@zEKNncuF>*!d;9OrHClkdzLd-2h?3}o!G4x?i!s=ZI5S_0-lWwf`rZjK*j`3<7;GQR zz+n7jF_<|I#$fC6_tN|aVz4w)<1oz|#$XJ5r!g4CM;pOlca|FKFc?dh#b80<60FZ| z1qR#7mML<*-;OTD`l2QWAGQZ@wUI3UQ^EjIGfqrR0U;%VI1k)d9Je;)K1}I^fk?1Pk3KK|O5W7z+i7 zD~r(|3oXMZ!9wT!YcCdB0WDT3r|Q8%a!Rp~tbjlKCRj+87z@#o!$R_PSm*`F7ej{1 zG8hXnhIi;pOpwaQkA4A#GeKKlEX44BbbT5~ypq|A;PA$}bSWN8(%nFKN$n)?Lpkj3 zL-C^F4>nY;*bWO>@p5t3V;l=a0ktcT#z{Z5>wBx5arr#+~9+m zJA{Rp>+!JAGZ2Ybh=tcm1aEySbDX719dRg4jyP_YIsy@mV+rz$hzU6_OiV+FXbONx z&IX9+Zh&YUAV?nEzm-Xeh-e6iNPgJN1*0NCBZ>1lT_7R(7(9|sz@sqTi?Fhh4=gas zr$T&$yS~f=4-VDLy~fK|yLg1cJb3MV-F)g;R657h4N_g_hQntr++^a0x0?pW4S+7{ zQ0J4hcy%HLXmw*O0yMJz%F7U-2cU_8t?v=n0idZT89<|F2B1mZMei7(XQ>mGfV_Dzr$k@P5cV||yFnF&6FI5gS+(~Hm8wFclbdZqY`wn6xe zG{FePE}X?@w8!{NER^Ci#c)HXIxt2gM^@o8^T!~?sm|dujaNWtDL#{m(&013u)!;b z&lsi$pDCJCco{xpWEI~jr?hWEj%sOBQuR1G)u`b!<=(KNNKwoze5Q0%c;`rbmL^^` zjT!Kn5^0*(vruf|Gden5ne$>&1Mpeg?msqsrUDR~r28SBOxh;8vOh!NSDyl>KKmi! zw~e<$v9{{;Vz0vrDcvGJ7>m6c=>m%}Gh#93fQ1#UiC*k?8N@KzCuoc@*(YfMCJX*8 zo7E8|B~12Mt;kDTOfPmV(u|hjG~b-u`X}KaOvdZiqF66hmtL$trOr}H-=V=>@(~HTBE`D?f(V?GmWXWT)To@yr zFqz_*y$6%Awkhw$m`wbp?doSZ7IK{BFj>l34wI>woqp;>#K>c^$r~57Km3ac%p#X` z8_xMni8Hx9-XOl1xRSy9W3mWyHl)u%FcqMy17v@oX>lPLr+8NcEe z>ZfFRGD1^7MN2!n8aAh&lJ5=lojC9=eE38^rSR%7x#S%tV|Dx}7dL~+GI{yY z?P&(Rm@F6Wtv%r~m@F+zOg+P7qMq^E(-Ta_q5+e!<5NGyHk5vfiBLbqe2B?d_=t|g zWOO7ZOB|b(@oMxoxKc$$R~*9A_Heq{_Heptd-yZ}nVb!f(LDuZ@(>_P(w2&91Sm{? z2FMi20NLpPWb!dUCLaT2mtiR*9|L6a5g_ZffWzbi*)xptF-SHFEF~XutbW9S7<&xK zLD*xcPt`uXdkk4i>BMA6bz-zaCq}BqIx#sltVO63b3xQX)QM&7d7T)2h`IDlbz+Jz zVtF{7n4E?!59-8R5aj`#SjKAAiFINeSu#2?Swov(xyR6E+5vmjSw~AP)`=;*R3|1Y zbz&SYoKB3Z1GmTU3K~bFx6rdDrgJ(mmey+5wvtmPCP$TT)WVuhOf~Cde9bJK*qfL# zbz+LknHM@SjxV_C-1e#~wri0w3#LMwPE5XzmKopU=)^vW#BB}2J%+n7eB6t<$Z!KN z7rj!yP+zK($8LTBBlj4liQ6=bOZF}2 zx_P|=r8l$*++=R96fOW09I(eQZo3~FZc+jAdab9C!U=9_G_lY*2q)^b{vwA|@_McF z{%;n=AeLgTSP;>gV5#phh+(NFN|s=$AzFZ?{xg@=5he9< zBBBhI!fD|{NYk(s&s{RjoL;LxhI%?9ISlm-n1P}A$zmvTb{OjAJs7IxW%Kpoe6#wj z9Ck_z*-*p{V<$$u)7a_jq{0TU)19TlI_$*KWwDc2cqGQHvpH^IJ7JC63G3WW*wA)D zY$~jAQ(+P44M&Z!Ai}X?9wcrB*k_27aNK8zQ^vYr<~oU+vBi+?*kXvY$Z+>MAx;rP z4lNHKkKAE|uJZPX3Xi-dk*|kH+6Aic=&Or8o{R0{>PmN0RfT7uEw(q24OHRgNEdrc z)&uGDLK_IduV=ZinK~_3WgZ#nta4IfD-L3KV_^*;YgU8GJRtG7n9SkHzMN%kc`eq; z)D^b(*NXEO0EgakeerspbarQfc}5x+YV|uKZQ;^m(i_cII5W`?=5QuXZX25&7mG4X z7K_rJVo{x$78XU{{VtRHU^fdwb6qn9p{{Eh2wm$1p?xVx+><}=jAP50Gt{Bq_Y5_T zTIY^Y&sQgl)?AVm^ro3VLp?A}9+^&$W?Pz88PL)z#PW_9BfmF+z3guZMt(u!%zoUh zI_UhVM9WDs^#{q%giivJ_x^h?Nd6L9V)a>!od?NsNY^WSx z$%pU3$Qrh@#da9kikFMK9wS?zuca9bz{nQvn?2#yVPp-`j(UcXMLio+-i5U9!|_@H z24Z9_=^8-D%#BEyRp1%wf5ex2IBBm;1hNMe=Re)!-yP`*(B0Y_Vs~$di(&_54LBYH z&A^y|IFszLQsuJY8M!mjYGh+ihcm@&hBN7z!I@lM9HDoNGqon^!I@k^r8x7xnf3XG za3;$c<4l@koJn(xGilD?Oj%Q$DeIlVnXIL7rVJ_0q!l=m%^BlNIW^RhI?LvQuw`K{ ziH?XOdmd*hZQx9OQ=F*;Ml279GvzdFX%J_+AW9QBGh;On5#vnu&J50!b)z_wb+puC zoT=8K(oT-|1GQMUO&ipDg;O8h-j+URoj-;}#71;`n>lh%9A;+3qs#$o4_XsEdKQBi9(^#4v2O1n zv;dF(%ztFFI-;bc+j}+yQ8@E9X}Z0`NHe+-PV>#Ft*@9Eq}vh_w_?G2Ra4A0tE=3S?j&*xescujCdxzKMKR~zlVid9FGZN0crI8vk`_VCY_t))BWp#Uu z=tZPJZEB!y?^o$f-QLS!z)JsKr09Bl`U?0`xA$MB2Jq>xAr0#GUWf0jssaKXg+=T2 z%zjI@Op#S-N4LPcrlz89?|;GuEOsJlO1Gy(5a*Q}i{sXD37#^#_|dBo9lAY7mOP%y zg)!0zPbrSsQ#_@!XRK|?d$Dd${N{9fInHvhD&;IgB5zYOJKf%ih>>s0cnjsa9=9+<==K=FJ9IuKMH&65i?aC# zcaigRxFr+bk4{YkiB~fFCo|!4>CUB5a=2ws_%rh16WpTk>M*(F9d2QD{3sVUgIh9r z`O&sC1IO>le#>0Ad-sIP;Fh#3G4%|$h%spgt|TE zL&U8IGLc zwR>|%Bp4aT?ta3xE9Svl_2gdFPRkY)d&&dbGhs|K;bu#mFf&in?I|_W?cru|^PwQT zX88nItkk+!KtHDhwQ@0^IuJmkI|?nGeDH)bj7qIBo;ap%c*xZSOx-3Dw@MNh29ho0 zElao!Ll!`V=tXP-1T$_A8;75VCQ4%s3OG7TEXOXh@&F{;gXPqrtd}x<=nT~X4a?E9 zJ>_(U&)2kmgx>K;^wDG_Vo_p*r&+!S;c@+esR?7S?cY2%vo_uk#$)+oj7M{f@o0`Q z9?cnyCu@rFWc4Es{Lm$mL7_|3r)r;GT_S5Qj3+~i@o06;5@S3$xwfY+(FGAN5aVU- zd5lLN>Js%$F`gof7#}!{C#PZKFJe3wM0o(?Wvo`67~^py%V0cNLz~d4OSGANfG&}I zXsN{*PuZmyPgY_)4o?o_aW&#}iO->NG>Yh16W=nrY}X=V7EFaUj3-}5%Z%@FFy2Fuc&bZ0FT=;Z7>^7$ z0OQds#dx$ejm*#`sz^p0b2D9H+7y6pR%|1n=@Lb0-ze>Li3((c;#5|b$kwowE7;$j zy{|;=R5tpVE|F*nz&8t)FmpB zx_NC!=`*@Sdbv`#08DUzE-`Mq9~(|n0rI-U7m&gUPJ1B=zxqNrQI~i+RzxWX%j*(v z>Eq}2Wd=XUMjNb4d^GX`c4GmE-Iyz|8?6a;yN*E&yS<3U7`wfg7GSq$=CV4Xq@+vC zU^nOzUxYLby8)$K%eXmRVt>r`Vn%Y9?Ikb+v+Qk^c9(Wy*S^jE-{DI z(!dQx+%Q&S#5;}EmPm#C`ku&j9ag)uR9J`ASh_4$^LT%E;e3u;R2$Z$HLMrA4XG2G zyrTr_#bBYcAMfB%$q0QM-p9eUCC~@@P$=R#1}PLvc+(N)>#o;=Ypb58mPWBm4`>u| zM={R4I1gzN9oa+2p7_^cO1f!WQzZ7c`{)LRCHx zKxKTObV7l7`!aQ)d{Qr?UsUnucZ4W7uJ~P7eqD$RS1Y`g5y^PtA#Pm8r3O~Zd4Tna zSnEh|H-HDd!VOppU4S-_&he4Bmsx5@R5j5$+6}~cts~s>H#5@#1cVMZxtE#oHdGAZ z;X#<$vFC9yGs9#tGwms6mJU*w8GU{~x&4FPELhHU=@cxxE^T0Wtrsj0q$lsVeok_a zb6#I~T7Mm6PFYB0wkaju_0}X~b*gBsxeeo$SIFm)*K=+>kN93^T(q6!VYOu*v5qoc zVSh7OVY446SpT{N)N_33)}098(}^?5*dOb^6g~;o{|3hIJl1~_T59#z7(0*k<&SpjD6Frt48;13;2pXMiz8(NWdq9QA6y|X^~3rM4;@Y# zNO)sC)?b(IlhY{uu>QL6d-LIYu)d~)Y_T2Ix8mjEuE+WoXfe$|br=+GxhLE@tgpe} zQO~fxsAu!e&m-*%IS(kn@vuJ2W0UDI95Zfc@!0gE=fZh=b#%5;5!D0W{TIM#{#$rN zQbnr>vvT`t)tZe+lnuJ_9E9sZq9U^~ltZFo4@08#OpvH(QYt(Q--}Rw6{n_OJTVzP zAD9Erx^9JRf=0iCYqIt(`O!7V5)zAuEui;Yr*?hT@9uRT5^!)`?-iDiF8_u~r6CJG zY5JE5^Fijg{KcW#xbfs8Aq=y`}Hdkkgp z<`W)=tg7_9<6Eu4kSw%GmgYNRs}QR?vS+Dkh3U-NgEY8!Xy2~)wB4%o2>BrvGH5y4 zBV^#>Su`~n!zHBYow-|^oEgg)XpUtJG{-Uqnlmy6SyLHQ;Py!>Chm$eLY1s0hjKKv_9*{9)tZM02 zEMwpZnvpTcx=|Se>u9OPG6rRr${1v&jDf?@Kp6wM7BU8oZ%)R*(pv4>R&vT152o8J}kL;hmW-?EY(QDimC>h_zoY%s3{O0giQ6wY*t7wvU+5-bYLxDdSphn zmabc6c!!T1RiwU-j#W&LtlS%!C}x%(S?Q?o&XIcLG;y2Rc!!S?X_^;DTIrGLSj~Ac zsR4TAxZQtj@(C3nuSb3vX`9F=K7hinz5-5t^vM10%zjg_FXGljcUDyafj$n)Hj}Adg7wC&ytjufQ)E@z(FfpNlLPh0ABGKj_ap$Cj^zPl7G?0ORGc zaR0)f-TW;%KH$w2XdJwopo zfoT%%L10`Sp#K>D`kBnSbwfH{7Bj|QG{^Xh<`{p`oWWnRrua)%KjNSa9WS{FI$nLM z_UYB}vXa7IGNky6RuGd!jq#V99QBF6ToAPob-Y=79)Hn?I$nKK{G|vZmWRV%avHW4 zCjN3kln3xv#%k4x@fSy#4E~Zew8@q_UYm6X=y+L2OD)D<$}YuUvJ!uB=y3RpD+Q0;NwXNjDUvgCWMlG!2FV(D*@invX*D3ErjWmC0GspFNS z+NrN&UOC7HgshiguQTmLImtL+EE&vl8pyQ3( z?#G6qRDisW_f@2Df}u_s!kXt+I8n#@A*@yg>3APnIAxum)A4>R=QUWz`!RCz#9%k^1$mrf2RrGXoYxM7^c zh<6$%{XJ{>egZ{7qYc(^9SUOJDGK8HsZ@9-)=v-QxB~?&RJ72(LPZO8ElzymkS9)j zLS2h#5PN$0xNLU_AHN6^<9S(sa{r#14<#qg4?#s)sV-2}$!BC2u#*jMDlTBc!zJ!~ zN*?3t0$$*2hLt_7Vd!>8!V&3q>wCgsXi!IR{&EER%@OK1>Bj@3NUyOc9Flh@?@c9d zZ6R#RZ!GUeJ#QT^$cDoUF7kLj0JXgh2Jo?-QVJ9K0Mz+58K5TLEqPz4eZwJ3p9P=H z`$DCy_jZwXZ4b)NAXB*@lh6*Mig*CyAK0vJegB8}#(LWG{wFMnsy1^#lzP10M|9!V zUsX#LZ$`(6c&IqsCX$C|asLq=wxkZIn^eP-sgrc{2sM>BIZ)iU%N!Tiij7s@%-bA2 zxRznExR&-5*GktbT#LT{6_W3I>-z$&i*&9~){5rE zl;%8+jMP(_^Pn}hK)@{}IyXj`l9*JNPB>q_yGZZ6@$&H$ZEyKlW|i;VG0^{b0`xi5 zBtZXLi8BY}{)qlH@JSH;r!f=c5&d7Ityf>m*m*=Rrxel43J}k4g6L(55j`zAL@!^5 z=ua=6!V|43ix9nG%;f!EF7Scr8O1wv85UYH`q5vYbpF9_k{|nFdWQF-ze)qC53I-Z z>(c!~8l@kmUl;zf`S3lMUQ%)-Kd%anLxu(0xpb&-l)woJw>m4b()=N! z<8pudTP4IyJeeHs(cyq_|U3RyzD!NxU--zY%8WC;3VAlL%tYPCt2!`9~iH_TJw1bonc?_p;f0mOa-wyHJK> z)Xg0MI4wpWK&+atNK@U0pNTZoZOG;us%PQZj@uFc0OA8-cJ^*>AnUdl{kd>I%!=XZ zTHYGU;76a4kLv9e#$4XrvFJU_m)gpIz_JhI*+TN%gcPEW!e_pU$k7jBnsuc>1qnm8 zX}#XW+g`%e-4OxnP{4YVfOSj2dengRW&_r^3y8oPxVIGubOS|mXLLo-n;^O>^i9wT zC=I9%3{F#B7cdcM1AGf;?*Y)Rgw2H<&>qI^OMOvxumDUBtWEDeD7y^5J;2)Z?gO-e zaqC3d^j;6MQPwgr_CiRQuQ2P8w$IE7<{JvI9&A^zF`NE%`LBoD*n^Gz+0Hu;wJFr_ z7f{2J_GyoJ(>WwAaYqHd0P0G-TkY|OAf$riA!rDPEJUp*1cW5;$2*rMr|8ym{@e*} zSbs99#I!qY%f@%TRCrB{xoeG6CWo_q$_G5&w=ve5A5rdw?Hx4l>g|kuc`;h!Tglyq##M7nfxE(-58B;8lLpw? z)cU6!WucCzUpx9^*r<+A{eM9Ji36`j{+KLPCI{ao+t~&ha6WN)1Hm&P@6bcBJe1Lo zMp01zU}T+?7=BCNIDXX51SE|&kajl{WuxU8?~N1BiE$ll7Ry$_p?Ox#k9y({uFpg! zqvO?kDi_WxZ0(_s$`e!55WT2L8a*1*_=CBg7qQVpu+s%Cwp}K+E%o%SVi>5zAegoF zZMtu(1USw@5a_dZ1p3qX66n*8z2WqxGGEp$Re4j5PkVI>*6IvzI($0e9nxW!1{^Kc zn8gaJmPxfcX$}?aG*`0S3-ak!TIFi@m!SPu+T|)tO1s=0P8=xK!E zVzWT(I2|ZWRFCxn(JIj&k!n!62ga$CGLVN?&PRaR!3mUYt>=86v$ZXK=)Vu#J);AByV6+X%8d%s^);Aj%N zZGvE+3AMYqg`q7>$GZ)`ny1!dqqARuPII8Np?BV`k5;#Fe|$R?CX)4Wbaxh0#RqYVe4^I}p1WD~{(oELXv+~Xex zS#+v$9o(_*$Vc4UiqSVP@~pfFKl4Rz*7~5g@&nlM-n~005;IXT`a0ZQlwXnYoBI7{ z{2o*R^0J9HleUR$;ulf))wjZlvWefr0%(wI;)DKrKPQ{`WRUe5EStCtc|kV80#G)= zTrqXfn#d;hF^I_~eu>6dHt|eaAe;DXC7aa|C58EWm9 zrph(V49Y7RMHLgFlTma-Ka)TOR>=pFIdcke4pJ_GO4U$N04ho)>P)t?9CSO&`;syz za)?tk3P=v|L=X{}>2ajxO)$QT*c z1HW5cUZ@A8dqlM<%#PajCAD*OK~P5*7jiEv5IDMAp5&)GGWBBgE~IO1x3^#N#SGOj zr;ikk>`C&V7n29wGuSkyiyu9SWbuqF3X@>do-jr_VN=C1dx}lThg@e@alY61kdTzE zMK%Q3^4mL%+5V7(atxF*8{?mzuYVClUNWHScb4{vQX=nO(W_dxcO0Ie7}KkGgW1(f z-L2pYFDQbSqdy}BgR2%Ce^d(8NlM1$MgN#aV~oxcpfRF+icx$HR($1CVirzR0o^x^31#(dwo@3Sgs3(2~&*k#;qboBRR}{c{ofXr(w&3n8pQB9>6piYh0li)38TnG^w<9 z!xYYhCxSD^Oh%*_&M4ay&R8k%dS_q-tZ8s?h=oP7s6(EZt>6hhZZ}AG>Tug0*zTRie`{TzK+Nl-{U|Ut-+{Y{l8dD zJv_tb@lv#At5A)j1Mm!aHN`WuHRHyF;Luv292|o44T^Hd%~k7$}2h6vsvg z$2G(=qM-1M`2)|WaqP?|2?Lf%@ys^(Kc0=}0F5Hm)bB zwTB)3WCF$`b*mL2jT}|7zK)K`4AQ6sjZ73X3(_bZHLi0cq)8L6T0sD5lt|OOo`8Z2 z($KM*^I}p1AdR@d=EU6?$NBf)jA>MY$CcW}_L|pTTRd9o6gz8P2d3HA_j4_c701@R zF@_v3j<0#+40)-?_?`WWM?FSAI*WzJ2o^#!?dVrgdFkMep>B^5pLgIh?;q@*Qm8#E zs=`v!FK=;p5lMyb^Z4ztjt9|8;7pMty@NoZgQBxe`SOOp#qJLEgzrxFhB&t;gr^j> zM)3-5l=qP+Z&YUqsd>DKg(^iaz{iE5Zf1R$5&}I(fhe0>LYPOf-t9H$7S`$@Uju|| z2G#EHQnfp_w76KWRJ%KutKDdMaS@V5xL4#}3o3B0$Q__y=W?rr*Ga=Mu0$-T%blwaYU$3-bk`GXM$=wdMRsGsg9Xp zF{mt7CuFX6)~e_(IJnkcgLry;t>srI*1|Fxaj_Ltx2%P}jFnQGYGcw8oiGfhmT|^x z7cFBj3@zh{`8nF~27Pz)GU;0`d=Pbd4C*wkg4Fzuchn#AJ8PY#qyD&$e!6(npTL*) zE&hb;lm58uQ~o6F#p~+r{Y^iZ+Pl^&bfxq7EdiyMz-!gQaEL=H?`Eg`0BmW2vNd; zmz2s!OXUu(J6TsBq<876lOuHaiXNnR-{Q9dYv6mSlK+{ zDDTGkm@c+|c0Ij+1xdO_Q8@>Ndtn-Gs9V*&x@_8&x4^w;J1Kd_Gd3C`qg=lAY43`; zpgk5nQwkooZCQ80A=^T+`?PMg-HsM1XDp769(*s7U41tak`NJmHb{v0Z+-ln5b>OP zHkuP6{;^jmt^NQ%#mUtl;xjvO@NKNZY2M`7#m;P-VnpUUJMA5OIXz5t_&yqA(c$}P zITM=(%I!!V&!-ue9i0v#Y-#idri|C$ox?+;FCLwU`0_!EFPuT)u>J4MCbikUJia!QBm-U>gBz>3$Y*cWBI2+p$} z_8IeQSv89h1<37JV(MOD-mL^`;$U*gv|>R8r;V|i4ukD@`3$b?U~obQG$T&zS;!iW z5m$jSYY2!l&E{LjebLT{o2kR9XocNJ^{`^bp>W8RHEg=V=2cNvh4cOw*>UAt$b4qy z%lNIYe1!$sgtD~&lv+wH5UpEKMy)&#zWA_d0{!|cyJ5CWhr?mZYr+qQ{gq4T@dEr5 zBgxXmJmF}7P>ipdICHp3PO!06onvdnKl}kOt?ol@h3E1J2CBs(=qOX&Xt5apx?;vQ zF`^kaRF)=^6X9_k`1X3(iD}vi+wfr_!wy?S#l4C7j)WcDg%lug7`GJ8Rt<+E3GNGz zx$3Ilfailk2)y^W44?IKmt(7#os5lodA?N&OWUDMSApkFf!-T-SV@k#Q>ra=6}AK} zzAT}10C^U$7zV9M#oDcGRdOr>td_J^bx>o#ok#&9N42+}D0mNCLpBa)~3F45lj>$sf`?$|hCUgY8t-1?k z_3jDG7o;mIFJZU_-eWYTYl3l&Se9X?&o*42^;U}1bh&XRbk68rjX@38P+I8p;_G1y z4#whfrXz9@L#rhH<{XaJo#%`~CvBcH>fAHW zY5c!S<~eJylQ7SzsZP#3r=$-bU${E^@#Fia!q?J75rUlwieazn5yN_v)k+w<1TYF= z?AL8dLjUv%ufhCn^4M$PnaE?G081_6FXge{L;wpda zk<9r+{hbfM!<@Mgcmb6OL4>OWyO;Dtz!?tsn~Wuq6F!M0q&)UJ@PnxJYYL(|CGyx@ z7|LV6;L<45b2IB_?8mK7r$^F(t0!MskV#- zx~#Dzx^*8CU0k`pw68JKhGcg+$Ov_hf^AIh%TUdk4g(xL{D)Wwd1@)I?eeZHUg>q5 zxw?2|jKAZy+7kT%Bz840&_A=Synbz!4@1Fk+*ZZH4%C5in|v78<`VoWUE_gN@OwF` zi;A)lP!lu^rNE@`;_=$PxCQcAykZ@6=g~sNPS72NEE`k@IVgj#PN4N5BBjH4wR^!b zS`gAuIE|nkixaS(v3#_+rM(}m$u=k#J_nh?0~G z)~)X3^Yq8-0BcRiqai~WLm83d7&FhM!JW_ZVAgyp5aOAwt3bTBI<8C#4`99||G5rU^b6&sxJ~-vZ-EI26|5 zJhsM0kVJbC&>M&bwsCW$SbGt|3hcsNl)NGYLFf>sBtRTUGUSeL#vP$L%i$(Sdnsi{ zuuZVGVk=}Hon@qnKjy)2NQ%gS5}5%V(+u5_#I)5+nVgVx7*D=Cfe{}X|$JMuHKJnIMR~N_2 z+3&{ci*~HOz&;dip4$3c5DOZN9gSWM#+N|R)%P;;L)|$Yjp62$YA_T6N(+9YpTnd` z9fd5M(5bbpd^)J?TI{$`9KUU^s_89y%aSQd-SVg6;vbO_6cS^p&BYl=cJ=*eHEJ$y0e=nBT>MQRKPR0zwV91JSUS^Y6(F5q zc2rn=AC+}dni+b?Fu&)Kn)&Micju`3u%n!w~J`OJji0i^PB?o%yTU3J@ed8x6WOBaW|RgtSl#Wo>SNO z$(`qnLMLsWGwR$k&)s$NoHf`Kg1kvUELWl4$e1jglk4@h>{~kL8i#-8)9sKT=-Vi+we)lnP2v3C=q;I&A z1uaF7z(;z0Pj~ZZUtyweU>NEf9;86T%YO@6{O>{f2FaYcnRW_-RY>C@d+naC-!n|v z04qhkTcLtLApK5amw1zk3dF&&M1(FWPN~Z{cv%8g3W6C2f%MBb4X7-ppt3-WDkD@C z9?A;@hbz<<42(-Q5Vl@{V+%)9ab$xMRtjAy>*kJWDle$EkPI?F?X>kA<7~NbAJ{Vb z3#5_VdrsvA5($uo(^q7ZI5|3t4`Eqkt$HGzMY31j+R~36&*t{x=9WAt)@wxBFjQGs zb0du1rJUgjmyWTGR2E9t?5WD)e5x$Q*4P5JWnJ{#3wjRJRi*lhbEuMlzM=}n!kIKf zU$F^oIzuy56)uhU385BWkP!BV*SH97y_q~r|k9eNUV5;XeJWhj_`@QG~desX;a z^x!lQlJ2MLSeGu>B1yX0a}^8;okUUu=p+(zIW;ykLr5j@a3lpa06!U(1Q!udNvPy3 z(|Q@cm0gRZIGDqInuD3Wvp6O9Me=TT|6+T?6)N;(NraOIca)1#A6vluryoy6OpO`QbYb2dgL-J-`!3wgLC&k?PnowBRl;lXCZ7OcyjV!b8-s8 zod^&!{0PFBm!g1o{s6>)Vw_YtjJg2EuAuO*DD$4o-u{zw_91`3!5v2luvPy>*m6G) z3gB!7kE7%o!fpHqdg?teQLWe}f7`EE!wCkr>EBYuu6^#V$Ci5TqsPvFoZzX)d)vcm zyt!ROAPrVeDHN{C(BSTNzJXV~sVbR64eq=^?2$RZ0J!N6F!1P6_5cG8G#J4&I{>i#fXnRL+MGJ;ao$24^NIf zCFb?4-hd05+?;e9#{AWfYEJ4L_+D<_$?FXsHk_T4%+F0%x8=MBPgk$t{DOIk*}3`Y z7@gwz={2;t`AHr<^ApQ@x0|2tIji^IdR9+-@gq!CcjZ|N z7|G6igD1D&=H!IQjd{4q?cH>WC%50D#Z7MV=$YJDK$8*Oz0T<29Qsc?{(3!G>Mq1z z{ZFBbDefjSo0a9H&TQ%rAS}m(@8gSg6z)h!&hPd+Sp6fOLq9$iL!&q>mc1Il2yq-h z)^pe#M``S^xk0c5w-AZd)*~@T1k&J_@4;erX+;dt&>#+rt#6Q%1;{e(@hI@*U3;e7 z5~ptRK}ef_KZ>rqG+D%@NjSlBboM~svvwZuM3YMVcd>~YC+_}KGYn;{9MDWB{)g~N z&fC2emRiJLp11oLf>S5{XZ%7Z{$YHn6VKYI6VKTvd+gmtuLDl*UG!`JK$X? z6&Yhh<_@&Cvy?n@_h}Za6n!KOlbpHBg`p1o0}4di{|4&*&g1I9LDv?Pem)P>;fx(_ zV1{`JielXH57REFk#IN6a+rf(C{bb8jH7>8#`p3;TGvw_2Tt$@nx z0H>62y_y}s7GibF;w(i))ux( zx69g$!`3yOZsz_qYa2hhgU#o~&DXDuEev(q)_e$)(P`(>F*cA+Tj`oT)oB|oUa+yY zFHWuDtu3Cu+liV{n>`HG^Jz3gn>`JUm{iu#W^YG@c?zuDy)S*K(#Balzq?Itb)Ln; z*`)5oGMXA%$D_qb819Xec~d%>$M)eF6P}ICp3CE%d|(l$-{ysS9?m`Pgw`8vo^>4y zx~HLNXo{@sc%|DyA-5w#)2CmFx#fwNUnlHtHv6!Te+q5j1^VEuThLy^mCK)DyL8rq z&RVHsma(;9Y^^kAmhrVIwhg24kCQ@2V zlfp@@MI?tr7F{Y+O{7wdQ>l(Im1<{Cv)Zv#aKsBKF&_FIlH(0_WhBZZTKW8A);R8ovtc`N_L@>Tu2p;^9#{_b z!#|Ef>y$Rit=S_lrH2@7hZ}vVA3)fo~ySXm?o($P+W?!ZZU~Wbe>5 z)a^2wAN>*g#KFH}bLaG_h@!mJZ|xqOaxLGU$la577P8*T75ChK=iepw0$GEd1ev;;itTjQ%PQhNQZ5{C&YR+# zcZZwv?!Rg9oOfFvKR4$Et!%WxbKWrLD$IGz&dqhxbc*HcU0U2+Cy$=Fj%B@PuH)^m zSP=g7-t{WhxSPy%R+f`G*Qr+U-Ju{GF9nCsM3CugpU`$)O) z7=w3rkzBqs1wo>Rd!@2M_#K>vh=t#eyiO>C--*z?^KPDBKgwAldOsV^yaJEjc!PxA zyueOYyg@>5O70b#Z;%`>e0N=h^Lrw65A`JJDMzmBqC0+KX54EX@C7?@i$3s;d0)%6qTgtF_aW>QwcT?rH)Z9@W)Z zIuH_qYzhkgL`21E7|B8e6D3c(gQF>{iOVRcL_iZ21JO9@fE(hDqvPPn==hsaaoi!e zfQUFQh`5dL|9;Q8@71g7?tnj%8UCLSfv$I#bI(2Z-gCEe&b_w)?EyJ3I&$ZAToXu{ zSajYl)G4e%3X@RRj5G94u1^^1CX{v2HnZp^1dnzB(M`nsE!{+T-VQt!J8$<|)aIkm zQ?+yzYpGu-djrr1;5?S7Dl(ASiV6d&iuvSUxlNE-iXQU%kp$zxJKQYks(xb;97F6# zJX~oF!g08H-{l<8b6`Ei!=CCX)^74}^`ucqNFdY{t3VdmIvxr&g%K+Al0x?VIrS8) zSl6D>a>PcirTvqh?exOJuy0<6=igjl;tZZ+lQo;;7X7G*iWc{HPtz_6FG z7r7UklWBu`GHs9El{dGJ;$9$!j^bkMPuq1ARn%tlyWEDh>nJ3srK1op)DrwgItuZG zItqH)bQBV6bQGUKzR*#Sidl6OgtfQ5h&l>7UH?dsqN8B_ z1rrGG&{0VC%1K5?@%<|fH!a_xqu7Ex`Ogy8shknlQEUO`=J(NTIDq!W@BtHZ04;VR z%}8dxIg4bbe~bSrbexW-d(I=p&_k@{SM?AtqBE4uyjbF`2D1)jGy>2eqal4dPCdSC zAWwV3267Ks>ao~B;tE~!2+xdjU&0EHK_+vMj-M$Rhg2LR9f4z89rg2getU;kOiMYj z!wFy7k!P;t1fD5v>~z{ecwPq`$2_lNjtgpw9Rg`fj86}~ZXs;rWMWEYs@dnNS7R<{ z-mY_1=V9sc&M#T;LlTvoN}rE0lmOmIh%0*`9t)vN7M`K1~l~oSMlrm zZC>aF-i~1E1sDyz0HdiF5HH01jHX^dQd2K*Ab9Ep+7fhRS6TZA>HoGPy)E=eS!e1D z_K-Bke+xb`x5n&R`jJ0HQ5e#_PdoCtN8YOw9iQ zC3*t@sm6dXgmwic$uj_e5#0e`L~8&L!Xkp0A=V&-=nnuPX8-^JNQ47xy0WZIgFxK@ zv; z<9gL6%xCq9!D!LzRTV<1a^!U*<;u&iE2c`t^y>Gc9U;3(MG&B=w5VA&t zfUvj*L4tAHMWjJMd{i4~Gl@sbv;nj<2smp*yabG6=#Nwk00>nK&|E;jkuId5VmOm3 z2G16Tom0htI-fx5k799g&sAEu87d+AX^P#Rn@MxD29Yf6D(lPKob3Q`^ zuH)5yi(Bsy@#&AhO3!e->KXbW&|j^32A+sGnog)0a%^&WmxyYHZmJnX=|D9DlnyRm z3gR&cm+uC7y!KJm42#0M|DFqa9zoAAU-b;fZ}M>VBGf1_5PF8yn|MMc9tbtV(I60} z@X=dHbLtu1$@=zuej+`?we*B~2JwV?2JwV?273M~J%d5ju4iE2!P7GkTf3ftA)%f@ z+y_<9a1F34FDDbL1>WT5jISU2D7kL4sQP2k}Dxz;C2~5KpLopr=j$AhAaOa5?gY z{()4?s(&D?z3rvcKhTMH?m?D2wT~R3Gv4D4}^sNAtC|# zhsd35Ib-^VtC2fo{`|!B4_s_O{~(mlu76P4WtA0z3GFTYLnkdUQd;_lw;?0wAENB3 ze_-b65b50d2dNdakP7Q!rd~nmyb>r)Lr5LZ1-GjO*FSt6+j*5`U&1O3K98sl6@*Zr z%w$v$4}Ijt^R)3}DhSj|Qr`OmKIkCGK7u>0hWHw=H-CiIdsJ$O_ka;QFTvV>aoo~=%Bs&t(A=x2)!o!cJcX*!AL998HItbx|#~{slGZ_6K zT!E)#98y7!aR1{~2chNv-_=2A1wEmI2rS+!8cKO`k=CeP2ca!?2y_rJK7A%S*TKDu zA#CGh;ymEyzk_oZL(AsV8M20U+jw;pPc|Oleg?eU*sr%V`~Zg!aZAIGIQf7ct_8S; zR$0&;h>Y%O_%1vdpT9iA{SzdhENDN!xLx6Hd@1~)pYI~mPic?D<6Y#ocu$g3I3(be zLI->Y`pV%Q=_{ulIKl80C_+aXys8V5!ZJoOpzpC%yw~Ag672XtR3O$vWH;IdLmANb z1&C{oamX}2_bBZ~(K5vpHt;ZN#7`B6^;6uX;&+9)=0U6P*-AvOW6|djYQmT-K9bZ8=zvig~ z+NSQcu{j@x=)#ldo@LE8j)qeE)PCMI0ZcLbR2ua0tpuDa2MLfX_1E3D^lst?q~|>o z!k3|O>R@VfQ5XCd|^bkP~<)iO%R< zBJz=#dQv`vr#iri1f+bXN?wM{PUSNY<;m3_))2Y^?)gZ=E_yGr1#_K9(T(sB?_V=_ zjm&({ymg_)!}C;tvt|={DwNeQ5CWWW5RS`M;-Qe>jG_n&+e7>DXb20#$0SVt7s5_w z9olI?@43(q$HQidn5>B6&_GQug1gGk_TR`mU}R8&n-qNfr0Ts4sV1Tcn9XT8Vq@L zs*+Q;hq_f4q^zk*x44~Bs)W~*D+oyM-V1jMIgg}Jlo22S-FdvnoZp-3+nr)5x>A+w zZeWCSKCZQ$&lj<~@f?KHTPW-;bZtlt>`w7vZ9EOVA%*!bRmlUq3n9gkLXo9}7Y}QL zR)qBwdNvdn;!Wp;dsBm`T886+Zsc4*Y{?lal=c!)Wj<1MBdA;`Zz%RUgN5F`gF29aQ)(o!5M3~eY@ z@Q`$c6`(W-u?y*umf&q8!_K0@Fdmw|2RvhV?pE;p!IN|0wvXj=ThY4SB3|nOj-T6} zwi3SQ06|wG)jfRDj>Nom_Miy5hD6X+2ygjdKjbAJ=tOHaai-9I>&)n#-6r%zIL;buaAev0d{aCKET@!1DL8I*%~Z$O15rC zwKnf&;z+W^RgMO=BwGRj$riuwk}9#MH0Z>TR;E7`*HMpaq2b#b zRdOQRVig9t0$Q>C!D*JzRu1|;dF1Tj53C$Djb9pwt^koaZVU3|KT8;BU=Ty=1{l3r zR!`5=AW%2&0kTIW*m@24@X-mjx=1nvTSQI4)-O@I@C-DgLcvyrp70Db-5r80(g&7D zIUZj&OHatQ4ykNwh|T`LFWXWw4ykNQIsp0m@n~PG<^SK6ZD|EPA=`R%vMp_~Lm=CV z@#(>rZG~+dx3A@5r+uzE27^NLUY)CE+SiuK@wutZzV`aIsJZQHkL0L>NsD=y$!ZmY z!pZ7bddy@c5gn5i36%BO<7=*Z!oK!@$i7y1;xWux2h+Y*X*r}*mvjeNn?0WGYqcT{ znSHIPgeUB4QP+Sh7>94hZ=}J=hvTLG#pbUa}M4KpyL9N9o^-xJW;97d#oCzghXs zK>~R?Qt>wJr}GPK%v12?ZQ5}^Z_{q`<2LO!KX234fRrGBunTWh6JrI6pLS4OtKA;3 zz9V4x3!uIuEM*H`-6O{A5$|S+sGE5vGjsgY@R7MWrkiPlp>F0R0b=_ejn&7av(L34 zSJbI)&)wz7WyL;N8?h5-e8`?aDm82i!@lLQAP`W|8P-`r^8oj=MvE68f1%s-F=I zDw}s(ZSdFL10HH+G6%RfB-F{E%XHi^Qsk52ZI_I==uy!H<3*2Gi{ly<$fltg)4Rp# z61^L0M+~m1Gvloli0|XoB1VaZ0Em~FsvlvnFLmfkRaO#^H*e?pF1h#?0RTQ%d}du4 z>3;H&?&n!#aN96=o9?F_hPoeN@HX8~JB;ZlqWclN+HqRCANGxTXqOEfLrS}6>P$NB zyAi#m(e;qEGtv{X(rI!Q7y}3gKNs zsBvIX&4+_QB3yWOJI9OC^Sl@zVR)gBH>Kyxydu4lm)p>lPd^A=Kkys%azB4eoAm#D z?MSF&A_8cWYGj|DmXe9V0|+{jN-{hc9|vEApv6>|(N-TaVJC4M=-!BS98}$teyDpo z6C4HI6F;Tg=zPdXcRMNnEO>EOO)fP!{$F^29X{d7Wa3WXxd3>E6pvfB_qx5%2$eVP zb^DJR$k4bSz;^{h8|;wETuc`v<_SOO~N)H5uCo}rRMV~2`{xv%PY2l@~c3di?$ zDilsZy*7Wr4QQlL;IynkEro(WK!?Du|1$tkp&%a4>r^Pv)22|6*q<}DfATWq3xxuy zV7X#)e_07=YI|FQ`UIwP{S!f#JM~<)dYe8W2JiYOw}4Pjj|wkW6%pRJK7rXnpAeA% zeM00;ww$?&j$oosI2Fhs!{#96YlnJcA;H3!f zP$sZ=wsOx;$scDA-}Ax~Ov{%BBV_`|{w>Ip|19C1%Jbqzvabf_<}ZQkQRx!)fdwC( zE@6rkLo7qo)FnKdel?PP4V|HQ=C$;M$Dir$5YLc43|ZjI$CrHO30=Y=)g=gzJO-)E zL9&xoG7hOgMmhlb`|+qt(DMK9>Jqeqp3o&cI$eUc*dfp*#Q5~!%V@$jj_VS*&S{^k zuEAW;{I$+iGj$0s?TgP%ZMuY~^v9#-)+M}&lMN;<=3yqQcQPoPtoG1jCM${Pn5;;k z+4DV~&U8GXOZXqsB?wPEhFR-i>JpTeLppUycaXK&<5`!W6>-RP38oUB&?P)-U4k~q zq0%M9+T-BQQ;M8>ssqXW(~$e~{)1uk4I_6bbva#0w+`8MeYXQgq$5a=-z~6y3wB6h zjSYD$$%f~uULiex2htpvh6O@{lNdC3BQ-=hGn%ofs4z;3^!RV85K;UVdq`*jYyMn<%9De^ilKh0e+z_xGC-jn1m0shkG4< z98L%UQj!3dRk(_&f}*i7(gjG1?u!cXY__Jcuh76>x zt@97K!&t21bCvF5a`YstkldZM3(290S<~)CJPdMYOOJ;`Cm>EsRx-BYY&pY9+3jFmDdT(`gABGFzCUx4rRrhkjIpE3ev?|;vR zr0iiKu<&e#X=~U2B-z0Z*+KZBgJ%?mSd<+A6T7=xdB)&Twh{@x;8lN1f-m=K4DBYL zfKA9aJjB5{r;1fF&Lb3tuLOZA%Z1Fkl7_|X;zS}-$_^Ht(G^~0K^<~(r~)r2Z9ymf z5iVCPC(b?l$QUSyK}Q(%)#N7`b%4IjNu-ptjy0>R)a6k zDi__+aa`KC8?{au??`%G(d*xY-xSamymMh?Ur3z`NpE?=e;={Cy>-ZX5jpKsvL1$7RnGm043u;4P63=scY zAzfOLuPlgTPXjv+k(8GGgOPvVi|V=v^;Q{f3BY@EqrDi(QsoOo%niA@o1&mQ)e8Z7 zWqAB2r7hV~e)Tm-YT+OZD(Pap5XvJ|m36x}WFY~^;Dc-79q2DeG6dopS9Cqdx)}(i z9`s6Z8$ma8Oal;f<0aFt;AWapA4c>08^8M8@A0z^FZe{n=g1-;qOZN#PcEgb}%BuVpWFbB>F-8oU(9K-hI`Lm9$jJ$k)H!2RZeF z;G!Mu6bG=hUyB1V5R8`xItAm`qsf~OFmWUp=iH$|Ey1`zKo-ug{{R3e7#9yG9}33l zX%mb~?1PN$pS%G1LNHD$WbTUW;bpec#P+sVQ7+D8uJmem>a!qD`gR}cMEZ6N-u3?h z(FO?dZF2D#TpM1Q+d{nYJ0zGb)*TX^w8TisO8%6Je-s%(DjsD|sW>xFhe%l;!=~Qs@-oY+>S%3h z+sxKsUBu+wvAT2p8-Oxi$8*7bqy^Vi$%tH>^%r~x;T>{u7SC4Zxu5KD&hY;|;(4a! zOBfYjVI|xR`d;xC(9eICuuks)jxt3y_CEvW=7YfXsN~{JaNwhpi+_(4L&QMTl#73c zewB;gOJ^u*_&GgB)F2TZq6X5ZefkNx_~Y!Iu|s)(gs{S6kT4u1xww*XNQDd10Uob% zaV`JFc#KaEzPur9<78r^PF1tcRr3~LuKI({RULBi=|3X4 zXHqfQK0PWW37&6%IA*gi_6$t zs{?y>sYh(AVMZIiE5YX_`0PSK-?RuLVy`X0=+?Y<0ZT*k1chSE7xHE>C>X6<)gbvjf{FjF z(oMJO~zM(O_p zo+Y82Y7@qZ7jm2!+O-vO^YpH*us_c1+6w#Q?5?eOnD*}43JGu}j}I*CyYPV>{(O8O z%dDr;e4Y`~Gm6S!s4t?yf>+*H$2HHHdNIdapX-HOy-2&&u0oep+O@TiuNRVa03%tw z*kzXrT^C&+(HGnP5L=LK`~|e}@u=_8mW;LL z9q?FNvv|#N*H+X;1`_3quY-L2f{a_kOP8n#gq5Q(8zuK95Y*cWLYXCHUldeZ>DnkM z!1|*w8zn=)Kq~;{K>(i7Gx?!2D5AkA=zu*Wl-0-h)%E``I16HUVOJC_l*7-2QI-}t zyrfZoOAdb;d7XU9u0F!L+p1mt7w9jsKK%*lKG#SOyA$pMk}Q3Us{dDEEki~uZ>eWs zU>{Zis@#$)w^~(hp~}l!Q0G>w&MnkAk|M0F(k-cUt5xZiRJzrwbW1ATYE`<0N>@y* zb>WY8`X(M7eWaz6KGJ+}=p!bf@8+Q^Hpok{Z;h^o;h0?MHo;4yV2;1l2Q7a$rX;&o zwu4L1IHmC}d)i7SoZxuzbx+=pk-z;h#$L2_(*{gSkbNWAK!aL>Y=MC6nqL{@D99Gi zKLVP9Yof z5J|iQ=DgmNKMY?A((@=ZpXyCZXxd9ls0VTWqJkq~1qZ6i7A)8CIJc72I39{fN@T&| z83`QO(gy_kW%2$FojNH{_`r8f>MKL)nsK`(Cnd#8V+MH5yDAQ5qiRG zp*ZuTd8V-14Ix|UkuD4jlc(fag^bYTLP7TlRM(i*Q!S*lnt1^<**7>I*>=e9$jqxjSd5r`y?Ucfy?UV#L1~JxkKhMJ6a1w0!d23tT1Xf3g`{{3d2Q(w0P+f2$Z7q@K%_Zws4z?-epfTWYNxiqQ{3}Y`t2Tl zN+E*_)?7`{ZMX?HuXQVAVZP=O0}-6vilERf(OR5BVLmoP1)rlwA%zRtx(oTj0`(Sj z=~sqd*MMf%7heCGE*5cbT2b;>Y&`{r^l0|!;zD@m7Z$1)x4QWp5|Bd=7@w=s!b1Gl z<6lo_k1THr8DY9&sj#3>lJaTk)QyBDP{{33*fNlq__8LESak!B=MOMjuV7-ivM3ZZ zZEqnv)?et=nlz23J|()V6>F+H7F)jJFIakwlnTB3ihXXOR45nvjHu*fUiEz!F@WJy}dgL1~$;FzVoVgYT3X$OOc*F_IcuO{6>Q}VY#|qGesu%636vgS0-Z2Wkf)W9 zys5^#A~_snkM$MQXX?vD5fuahgC7y2;$y-J=QQSRcQOZ z{wK4W_Pma6M=C@1r?^4R`CUgk$%()%RgTFk`b$x^=U@WXLW>oAm?k)z4*- zUmfn%=PJOAy*aaL-D<#vXL9)0jCB9%z3kRb<+T?;pw9Rb?J#59#=XiSG~TZ|x7yi1vqIi4DRM zXU8^(2;3-v)6vdwE=FNn^4@fis+hL*^%l=n@Y%7pK;=5j?M>WM(&_qVgFJU?Gkzl*sn%XD1bR*j z2s}319&rZV^IJ(C75wws;XC$}G7`qgHhW4fLtEOJdqoABXk{Q}m<#T2I^bsPDP^cM zwWoVZsXeV1+zFaER`!(4^+0<{=EFTDiT5yu`V4?oq6A2D(HM(?X*b;p#E!BL>!9Z& zynyTD9f=XGP(OB%5}brARDyLc36ob1m%Svjlf7hRK9;uvuPZ)A@L6tbCvhpa#=rxo z#CY6UR*uI4PSS9jsZ?Rvg^Sv zM?5aR+z-}Lg`9F_Avc{vRRUP(m>aN1?8V61K?7y!*l!AhYKJoWP3bGT-(+O8-+Y~{ zEp{+E6gZs{4Fe=4+=a?gqhlA!HB$9VyUbnY<#c1J{25kSD(_Avet^B{i(_m0NH2Dv zy(!BS?oH`#t?cQ;?o`(NbcZT1=_)OSvw9D>H#OQuZcTfzp=6DqjgsofW8a9qXDE+&<|__vO$~_P#MU(C z)qPF4HRT`_+nS2^5w@m^KzFC?eCiK(r;=l9cPd`)PC2;DxjQ|Nks0A;vpXfhTELPL z&)um63W+@mtGiPvTsao2ZrPpIiJ7}oNy{|~cBdSTirk&{VRy<1(`@R|O4QA%pfeLHSuBqAUN~-0 zr?*wc4VsW--10S&Rn{BpamyC0OvKwG?KG0zXVQ6z+c6&nk}et}V9X-o1CokSMNLv9 zc}~ZyP*h+z!*D9>5HQD8_4(}cRhdxpz>f^oD7(QZjo)I4M}wATC*K?)s@`U|W40A^C1)_fW&$SKiL(8jpw2)D zT(As8YhtB*XIpwnJ_F`_g$Xuwq=l?GxSBk7CF@`|On=*v;=`DlXOOfp0#d^2O4&w3 zSW5 zvj{8)p%qbJ(?J#s^I`DvRAvsZWOU2YE?$}FJmS0=I(H|^$G1iR# zlE-pNP`1!s0OLyl!YoHRdqLuk1^9a$bOPq-6SttL(wz)aEO7uFwc=VX1nisT*CLvS2vMAb4MjHoTKE zl14v5^;eiO8-@%ZTtaeogKqtmkg{-Q-YT!`_EJ)NX|2Q2inUO}*f3#OcC!D7aP)}g z=4T`SNtDaBgI#FctnJ7*=jgW_yaSL=+P;NI+k>=)I8sL8sd5#l zO55TQ^O%p@uBn?rkghA7#0$}$+fd(K&Op8Qysjh!B)H#nqIV)$4>)jSZBJNdq{|V1 z&Pjnb>{F3Nt`mDKT%=cR|x#+R^-(U4Y0L*ghV zs1w01UJV;s?o<|!+HQaSihbzVS)LA6KF3B!xVxBK{WcT<=NL8Pv%HklCR#J8>@MTT zbdj}mCP)*n3~Lwd@lscoS3&_-3NAwo4p4TGoyw0oUaGW*tWnlddgwf4Ay0~rBxE5S ztBM9jrlw+&*YTkiqETy29g92=aqQv3`!|v%Vo$ua0mW39;q4evV)|QZFDG*6s=HY6gRAw zLXt~6cOT|zCou)Ox3gY^7)R)UK~3GB$c}hQM-F3B3jdjWQ{_|}3G^{9S18B}Sp;r{ zY5q=_f124lXc*34s6IJAYSk85(i{7i6)mZsjN8j8&4ps7w>tTps5;4~UgASY*8tsJ zsHCoB>6)aWA~TvZK29;2F2^oQvzD*PT8Qu*yDRCxpY@IuEnhCx<@oPIaNfeUgHxU~ zv~=QLWfkVYRasibgH|-cV=0hFCjf_~*jVT$c&Feig;!|vzwOWDR^^eA*?A-vTnNCt z?RppCwX=+W69|QU0Cq$lhfCzCTyr(saSAT~1Awsof50!+VE!jU_=^EQ9l-}DkPwG! z2P;TmG!Qq2L3`)s@eb1x%*IA#J(sjn1>=XtLN!E0#1;;dJzu zQ>7IUH7a;C7hH&O`BLWnD8^;Cve>DQCNVNQW^BfA%LxOk4mJ~pX)ZpBP6;FQFHxwp z4$y1fOE=~N(~#uGq;yyw7f%^E`ho%i$tXHd7rjyFi95-N<5M#6EL6u1)VW>rru$G~qsi$qJ{cUvFW1YP zu3+0|y^^&L0lB{X=mIZY-h{qzjj+tVbT4i?NFDog-6+D`2rHK3!86hR|K(^?{?pl* zB<|qSLRTE(<@#azR<5nZy8vGE9{LVWnm8qXC1@DY1-cYVI?cY3zG=eBO2vc>h$kL0 zDEY=hc9f82=!y*94;d+!W#SttmG=N!pYbf*Gt$d|fiR$K0tWkA5Pg8y!HRlB^0;zp zCodLa$ZLh{=sh^(Ed+UN&gwbgKD)_Yf!#MbQQF>0oT^QeP!K!#Ckz6$?#VY{NS*vN z$JLKwcd*@&@Uia6?=sw75{6?#zerII5+$}}^ztiyXqG4i0Mw8PmM_Ql9_0Hf^4uj? zw{|72|IZwQPOut;v*j0ik>c`siTQxX!@JnyF)Fhl;s4D%Z0{y5{~;u?F{%2b>PAwF z{3^^3$}4_@0EN7m9T1gXB)pkaUkJ#TMB^p6cV%T zB!evdoOhCmCxOOS%h(nC8boDW41hhOu6qT9bo21^tXB%|M>yW;Tv1NB%Ze$9z-yc7 zQc7;nNM}u-aTDC*5En~!)vkmoSrVt;d#YA)cKo=dxD-72h&fAl8 z&)1OtQt&Ha5$Z58l!8COm-W#5mlZt;MG;aZPiRhM%-HQFo@3It(+p}`*pjG{(kSWz z7ZWM1S9~@QG1mYQudusIj z)C&H>)D6ai6RHRVUqsOM7$}}su1mq2hXKecH6;VCk+>#K3tuwGYA}B1=JD+0Dzf8| zz_ncifszoAn${(?YwzhXeDhr3;6H8Mj@pw{$$E%+MI5tjGE~$_X%CZ6Qgi94eqJL> z%f0C%k^g9~7ESS$G%^@tnWY-4G&@fQ51>YtSi$e{fhN!AktA}bs$8`T-|DOEt!@}p-QOMV@X&Er2YSCypT0@7v}I+pdP`ayf`O2`QB9+ zltiivaZ>P0FiOUZOIRwbn9rfblM3OhZFf^dc}*#zrqJn)4J3X*{I&5HVtmL|qsk&5eJ(qL|;Q}IRpXJ|b&noIFY*=&^emWX= z@k~OZ91JNb(|%-*O`R+*||9!Y_z3>uGPpG{nkz_1$>fYupRt{d?+H$B&vEww{+15eJl|Whrz-w zVGAQe9i|ZRAe!^1w5yXiI>Kv4M8%BD^?;&SJP8nA-4$**u zwt)kc8&TLI>c0gG)PI!k;h9i%I@HhU%k$n!ZW;?W|dqX zt(Q(aGPYjw3D-aQ;0=kFz(mMy9>wOR&;JnY-*L#2Yc|%0@(01OFnJD9xR?dDV;m*+ zU_J8L4EbGy2*#3brDvjwpE@d70PNslKw#qI+zIiv{A-`_L}&DBVwTZG2AeP46%ID& zty*O}BM5^TZG?4Ji2HD07M@VLQXmrBSDoldy<0-<2d7rh*oL&ymLPecCFLkmafabH z_*?ScTuVwqpc!9In2e3%ozfN~m~15`cm*Q%RNs))g+go6a4=rQAj&#VXq&Svx;{t> zHdL`@!*$elAatwS8DFX4JEr4~^8O`@*0T33kLGqVcI6A4z znCdCEQ@6mbUUFu@P5^I5O_rNWQFvYU!=5zm#m!CKlfOi(O^*9$T-jHE)0VMXv1F6) z%g73sKPz1BVw@Fpb}&q0@WOF$863?T^MHaI?!o%ddCf86AdlKDyX6K`)>bIuGA69E znX52sh<5759)~XGJoS3ul3c7{G4ndZYDg{(;`Uz%KoIF4&Zxyuh8;o25>%Z(Lf3w? zeFF8vZwsk+q5{7?USJHg+=H#ahvlZ1U*q?egjsOys9E@Q-OsA|{M#es@ZCVPX2;`0 zQ0F$s1-H6a(w%G`P5fw6Mo9!R3$7+c1QI3+d@BP%iKIBq8uN4vfeP&w;Ksr*7V<@g zoZAZVA3)c$0^H=8nI-rz1~0Zs{=1n4+R05E8}`qd3!W-3%j+_`SD3rXpnC7Q%IW^| zWu1vIu=@FM^OP~iqmy;`NLbpznyXl1*>SS2TKhp=c9xfRPktOVrV%0g9mDFu2*7V_ z8A-1$M{lwk#9QL(kD>U7>=^xzN*;y=o`++7py)-*-Gxp=5}bal(4@>rI(`o{$)&6C6cfr) z>E5{B>P1=BTYXopuVOzh5iFQQ*}Zj%wEIv}sdGop+=Y2S&ujZ1Ll)QB$YY-5!Ljxp zGe(4UGSsS*PYJ!}Sh$xHCzU@8pLMa_FLZ)1300~Q48k>n^&6IdsJ;B35qz_je>cj{ z?3|(Y@@so>zar=6{hLTczmy}h759v~Tf?&Q9zKE5Qd%fwCm7mhmOA+?P~sxh_BtVh z2^WyBgu&ortBaouh9*Hx0Hwal&gfl!fY5%-ZESU<`T|h zA8*xf2Y-D@@|d-L$zLR4HvZC*fVYH?`p8zwUtzH<@|H3gm`kEr&ROd6Uy;SE{N+Sz zH1PXEUcd})?11ia#(%17Aifv%9_Z2?IX{d$R7atMYfB(cOkuGyjuRT~bspp2f0z0= z2i)o30;h6pztjWx7d$IY!^mJ4R*|wysm8-uAyV?(*Z5* zgZbX>K{YL|oHcc38S9&IYw9ip_}>R=%o+X=JXpaTi&+7Sqe^CF+VOu>!br};Lb1Bz z_=rmTWG`3hwFQ>r20s9bu~cQ5BIc5!xteIOe8u$qLuSxF{cj#Z1Wz*Y27F(KJ!TIU zeuNC(hK&5r0%Z+!ehS~_8U(xk5Gcidph2Jij|jJdyMfOCDd20TTfJ9cXE|@AR4HFK zQm*t~*E|kzR-cT75Qam{-Mgo`wha>@{2w4WurkKKoo>+gWzu)P75oJF?cmmhQl!&N zk%n|qmZCigsl;&t9n!C#jPmfGT|3dTEBWAd;D95ejs{cs_mJc+bcX$KG>=EnXc{ot z5O|?Ds^fMIiZ7Eb*9Fvfy`Hk82J=IeFu0j|IqIf5bsex(!!~8#t^s~M+Q`yu zZ)ZCh_kOrxB*Z4xdWWp?Vy0hu>4_xqOzs$%=S9GA8S|9&N5B6cMB)a|Lb0T7X~VFR z>lkjB#!zWxB+7gZ~CGcEL&dUqssKQlHhj zgN+u`hddQtRO!kv=1jG0RA3=ykP}jeOC{a&VVn5*DNO-#` z38Y`*$OU`mnhzjSlN|RMaWcQGSDrYPSNijMWDfrnd+B5Vz+XK0hiSiw1pV;>~4=OI{z zxRFegZVp3V;V{Iu;GSYV$J#O1znh&D1N>s!eJiXfK8yy$Np$}s{H8qrUPRYuK~Sz| zTnH4#zgv<%^K@p*&hvlhn6@GG4wi73Z!jSES4mzu$IyNu0H1+y5XO&;vCZc&B~hG7 z2kE*Rbnzd;o{2Df&1=QuAC2Ltc@{!2#4V-!S#&q}TN;P7fR5Yz4m<7T=XI zzDBJXy(8IX9Ure6#!Btreb6YPVkQIN=UVPH_+BA>i?sT8gZ2z?2~`c!6ZptKYXwK( z!#nt&o=U$JwhU6aFlc~o%B`*R#-O^Fxnb zg=AF>oG_-0e z7oh>3Wa4Jv;XkXv#;grn!C}BxgQkV~`#&N@DAnNz^bbShg-txB4*$gj7>>6$76}3# zh8-cP*yc4@z$_;A5MfoKSbH_>8zn=TH%B@r_2&U3#7ehJDOs7hQru>)WY4u4>`38UxvI2f`kN^TSw04ylCJSLh{ajy9_+YJL}9Rv zg)Qzd@##%PoxFIkB%LLVV@UODZQ_pt6OrDJ?+4a{TV%&eughXvu| zsWu#U;_q(!-G{%`xC;a^LldWRr}aks9f^QP`nw8nH1WF@f6VQA{Cxy}pTOT|@%PX8 z`&az^JN~|jKdW;5+Hc7Bw6$Nucl83v^_*h{t;$o^eoc<(##@B7{v z5x8kBD$(5rxcRBeC`JIyAtK|0+^7}3M zomV5wi2OcTelL*Ux5)2j<@YD@n;j$MGWk7KemBT(Lw?^Tzn_!eJLNaKl<-H%@2T>8 zk^H_ze!nEY_sZ{4%LutnelM5bPx1HW{wuH}$C}jgpN__c1=!@jB7EOSuk|Ks&S94^ z`Bet^%PB{iglUj#^>RTs`8C0Er~G!}I`dKBn%3nS22~NCO_Oz1AlAH;EZU0y3WkH` zjCib_7{=w7!0*GY1Q)FDPFPm2e){z@q@PN+e9Lu+c!m>BBH^D)?#4lQHIt~NY*{J6 z0Ehjhc{y?K3}eNM)yf-4WwQB3e#*@^5r%ytnfM%-0qan#V;NY>PTq%#G3%j*q-rox zo!VrghAj6YOM;ShzYa>cZ!i%@nPsa6SdttjKmsi*FUu2pMp1MoQ3!Rnft7?_>VM*3 zN{1o}Nstn;DjA6)p-fKVx%l!Q(ldC)>X2C`S1u=yl$|$mLjz`+e1-({DWHZ5$7l^e zL(w9@5mkZakxXpUED~4;I1|ZbPZ}`%IQde|0^w06S7|0m6VN~TRR(B2qOZ{GyND<| z`8`C24baNH%c*0ulfq+tpmvtrGlRsAGNxBZ8SN-aikV- zjl$GAZe65~&kxH#Bmcwy%KQ(IF~q{6vhvq~(V(sZ%WWX@BX9C<5ntISO9!CF6g%dP z0FZUI>gJWVS+udD)#@P-=aady3}I9UBQIO}C>c4#f&=n@z%XM?O(65;6-11AmEYj` zF?vTpFWW2@1vc^j2}!Y9A~-HGECnnqCGDzeL`9>@rM!pFOrLB^4GmSG<=-94W6WBJ zauR*H6kGu0rK^UaQA@1TdbAS5Gx6GSyl%i+r!?OX395s?VZlx?A()57ztQ9)4Kf1x zcd4uq$62NElvRGnf>IcQ4wztZ^rFc9WUx!9kZ4}Ts)I1&RYbnTYS3?A6S|;)U8-R_ zi6$|C_2HGE{YqJX5Eixh5e&LmmMI(;gd?f+HIvRWaOmY_J`EjtI0AEUW(jWB-MP81 zUe{-7xYYZW=U;?%6)ygq#>Wk?9X02AdFmdsTJQ=OrrJMcgZW<}%QFm8>1#2^3r_O<&0Z<2svt2q;Zqdd_71 z52FORQ9L>JJ_Pz7!cS2S%s)`W9!e<>EObOqG^gX=Nd>nc-4#D@5>_5otD|KcqfdcA zY{xU(7`jhwI}s|7<9DW~wzGoKo~*Rs(*(?-Y}M0Bf<~fu2yLdNunoBypqNSC!cVgK zRuYbJm!bSJm|qD;IoUR_0Zm*jZ9}M9TA_E2rE#z8b`)zAdt=7f{u|*_99TXJE`WSN z0*Mf7b3rWRmzSjw`AS5Bs~Ibyt#+3nwp?y>NlM%8cvM1*1@buCqt%$+xw#kZpVGFx zZGTTno03+^yn9)i((_+{yucI8Qh6dbifff)9PxU@7$o=1j-)ydhrO)C%M;@_h#4c? zw}yYXSO)61{;cbCAPibmA<9*S6*4Pv;(o^e(y4D5=T>&aovTx-qhtR z=ysS%XY5NzPtQYkb@E}B^YHPooUMA;9jk{mQ9SD5ZCVd+H|3|7^&o!M10BAk&Q6}r zgr*)CzRiPCsi}t*Xn(B-q6q7OZq~yBMI;IA;IrHkg&QoSWBHH3x4ryn%l}6JwwLfFbw4t7(X zh09lP5Wy*?t%BEl4?zlU^Y8H;g=7RVxEYTj8skZf)gY>J0mg0&p31^1I(P_HF;;_! zO9c${#L$YUmh4LR1nR?0OrSpA&iXJ|uzn?yU>_#h}^Py3ru?`Xvy9Zl3?k3uKnB{a^l2+f6PPcjU8xK_0g9lQrf zGq%&?Y8BDw2Qt#XN2sjrX`A*kz*cg)u*Eq-|L@2VqUd`w_qQWYb-b%K+;+BzmnymO zpQ)bD6`?Qlshkw1rO{Go?^CJ_3r9iQ4ntW@lT4h5{H{S=O{E4o_1M8W66881tdD~C zgDQ(vfQnQ%L*FN%2%^LFkD{#$`j;aU8uNFy_+O=*-&Uik3*eUiz;R0UEv%=2!Cknu z3Wl|{ZhLw!s;^Y(b|)kP@V3}WOL_89d895JcgSy`POJtyQ1Eu}GM-)ZKZ+n&kYz>q z4}1K|d`Y&0n5$=7vhH1)!bbX>L_#m<3%BcKQNJ|5lj{8H_)JNIMODAuP!d_>cui+-Y;JL^S13N2- z*0$ouJ;ils1ho|BMDzr7Do>pWT7rm{U>DlD@hb@ML*`;3YzI#mOL1)fH!h|Jg8;#DsZ9ph!8qKgdgfol^T+RG_gCOx1)^Mk z4@0C6pNe%m|2ZP>#O6Yzp%Hdc_F!tUUkErek(Q<~u5YZ{#lz7?iP2Hy_DzC%Yi z#lHcsD}5gU<~JGqgdY7kQx|}js|2}IK;(Be5IhHR9kHGR&>sjWf1Tu1od_6uyM*#L z3_Ta2cStCIon-ISLPu74$A}>?KNcAIZNpOOR_y&#OR!AA(yL768rG*B8_va;^0aoNc`&7!%E&Mt7!{#`# z0Dpb>8^#|_k5_fVsOnr%RqcIsKxU5WBK?Fs0BeiyqK~1&`rqRhbAuX$oQe5~qR5f2 zkA^q3nQ>_sa#2~4m^IviTEs?R0-B9P0t+2^D<#wMCACN4uk*{W@Qee!}t`ho#dR%&0w6?_o)=!)nkJV=7CA zIY7L_c!k+;TZXO1yC386n|G zYs~#mjF}j7zr|0o`E7hS^wP`OS7I9s-9}`#e=q4qQ&(7JZ0cb;`loO2LV`0Z3rvfj z8nrmfxE1Bo_7=TZ)ZSS8h>rRMe24MJFH{-{tZ|kub}NO6Q$zk_EL#;=5|FS5zh$mC z_!m4thZQ`ipWpElHl*$yTfEku_aWo8KMN@^w=mzonD0aK4IbtvB=Jme6IH)BScYI_ zxQ?)h>jW;Q8@3wHYvZ~(;zO=uv~rz12H4}z<3?NS=zi2H|5^SSAmczhcq6$^RsiI| z);eJ>9<)`C)6?ZZ(DI*LLo7HZ!XW$!nb_1lV5;U1z+|JRCNH^?iw6XLAKgs@mnU^a zfxv+X@_=mJATm1`!oY%M#dqKVi+`7&Wb=FcbUDrM<4aa&FzR6d>-*DD2Ut5`oxvnZ zIu7{}nbjb?)nIB^-*d#;UkRf$up)t(Y~?I(>Y1Q(JF8dD@vv^6^rS@QojBQx93^M= ziv}a`Po!HrZU^dV`AN;k`bMO9>d$ugyE^=Z4u4OFzue*PkNg;qBn#goH^AD28+laO z9iT;J&`$+@SUsUm7$y=67;L*LvA7v+#dEwt8p&%;Ik$h%Rnf)%{RLM<7x{DzBFRla zdwZ#h17a#W&Lx(NtK8!AwzKpoY!FYyjOWO2kRdW$XB|96!uTs;kgb<79y?1@P?KNJ z%|ki7SIwFlLZapmL89f~gvDO-M|3W1{+I>%H&d>j8348bSPeqkqFi-?B6l9#;oQlz zY^Ud-4z86tV34fQgFhiZNV!L*ZbX;Cncap&-2{)-AQ@gT2na9u7(y`h_}>I~Xl7P} zMBNrFLcCSos^I8Nr?F?K1kIL6aAz<8AlWN&?!HcFkkr&nl4w_m4!(ri*!DiKmu%7? zU?2%J&uWnZv0x6!aNbiW%@Z+jav%D%5VvG!=)-zikSug%zBf2cu^`r;JA0wG4xD?1 z-d5eV$VANzOuiKbw*5UIWb!6BWk0ADfLG4A{R~Mk<#44+UD*O*m$^TxFUs1Ui~KN- zflq~MNZR?;<5k!Tkci+gw5;J^=rTm+#yZoTqhVag+>~*%UJcDBj2rf2E3qUo_+;f< zju({o#PY3#dk@2O8uT^a=8Ts?O*Gq0YktiJw`17?uFQl61f1vm zRpEXZ{rxAXM9dR+;lqi6UVg>@I`y+lG29NuFg7W;ds|}=sh4{*qHuJr7^J>6A5ZHVRz6qYIJrZe)$^FOUAwUmT_XTGm zuV4uR3pnqOw+PM>&-S9%@>I?$gcD`(ARuptVH)PkqfrsC<;ne1qGvUx7jb_xk%cWI zcJ2t@pD1CCKhJ{ufbzneG9>oXaPcrdoEH2-}`qT<|5EYP7w==a4K$x~{ zE$UJ5<(%oSqGEzG;r8%^@CEz^FTihp^js(SKX4dCe*hxft(^(YyN$)V(-S-cK$e{j zevftumcmoS3#D2A7`pH}@kRK0xFs}>I~_a-;J&5Ts-t(MuXz>omW?+|k46$)(=1d) zm{%YW${u4o3Oy--+{W)fzJDUzcH*!%Z~-Wuw>)?Dp|+ZVy`K z+o%&mok`QR5|?C>|8~~8Lmf|xQdpm{_0m?w&VI{lN0bb*I^=oc8IlB5_mfF#@m zilPd*03I+wl?h$1f_udc18ro82h!PS1y7l?c|S)p9l)e@{7)nOEDSE$PAa9BoW&i+ z3)HiXo+1bmv_=2ZbGg> zw_czo7*xQ}!`b{r>@|{iHbm2xs7mlV=734^D7793t$}S=p|H?jzj*~D{$ZzFS1X|gTT!sBQIs{`1Sg>8krZPQqy$Bf3g`N7W($}j z!MlYJ{<>nAqD0klXd+VQ|06iu)Ue71C>3nAfp%OsxUdEGZEakP)jHV>u?l*W1+*3s zBMn_99X-MTl*QYLQw(k$V$fvf41}X59vM^syN~N%hT*Qs0SK4!A?I-TkRfR!0YmlC{%vSfQ0b z0n@=NNT=uDjQVSG#L{uAw%Lqdx1#&Y_7GPa9%GC$-b)EKOa)TXZkHv9X#F`7u%iaR>zwMyh^hrb9 zKaqt0VqTS8^OyK?FVRhX!T7vWw#{3JGD%+?z?b7$G$zQp0al<$ucM3hS?Uq4Z}mg} zvxvtALVGJ$m1fN08LJzjK895T8CG6^aDqR>sY#sRWlZ8Z!B++g-!nB|S2oo0C4 z(aM;JED|4N9h-RpMjEaRRatE@3?`c~w4hqULv(Cw8`2tMk5L*w%#IF@8S|v_kX^4- z)@?+U2WOxPOnV-MG_Pm7%Lz1GSvbDP)uh<_k9FgESe{H8O7`3uxSB$xd;J&u@t zH1DIk!RV4R^{btJCN{&Ho#f$`3X~hvHTeZSOIZWe^yhgcVtj)DjdZL(wT}`@R;U?W4MVWtH$XqSG=y3@XrRjVk!%>KHR*!@*uVW2 z@M49efKvPuM{#v*^%@g006=w?!m5k6h4SHxQ8xZFHuMjmKB5+dJqLTz{rn`GzvZX= zP_g+(I?%2!1;kraA_ z%#{X}T^m8Cei&&(`XRkRMI7fO+~FP9+X)O9^B7VJ%de!wOJ040)nFrU_A%_(gWRMej?a{!C3gJ8UvPc#(=*x19$*;X+uVrfDt?7dr2!e z8>j_OC120-SpCk;-ZIZzatF?5VQT|YLaV{Dt>{7%N)_}prSvWg{P30!@Z?f3R`^IKgl(Lhi_!tl2edFTCR~ ze|h-fQZYZe1TO*QrBTWd{b=XOfg#yRq=y#rxO_T~SJ{yN_-%K53F%lMq8Y>aTHz5S zt?2R0@tQa&#uowY;2$n^T~uD9}@9L}HOYJ5=od=w7H`kp zCYVMVqPisloG)YLgGghdbl<}{oc|)YA*G974j{WwM{kR|tY}1y^=xH;FTq$8w zzPuEMkd7w7U65+4*@knJ*ok8-WtDoAJ{@JgjDe$-4NHW!;93+@Ribi~;%EJHzY11` z&Wda(r@?|I_)stX!rH^$eWiZx*?hP0MgxvcC#9sO5_+;X~j7u^!3PJ z$&XhQ4VavvsZuX43RwrzQY9HI+M(ULjAPK$5Ez!idf3XV>d2|I-HOzCj6~zhY^Rc~ z>zLzIa8)~QoWNwf0%rm=c_CSce?rbj6_WY1u5)hz-5(|0s5wqHV_07}^l-GsuGy^2 z@Js=&Kda!1k}xDT34v@GsEh*W7|)Odk7i0xs)T})Sr?<#v=Y)K_RN1pCE%#mmW5l_RhDnG^$x1o zdRo=bE_#nyz@_LcH`5X#`gN!2&@+_$UvN$SI_uL4pEVxLA!0+_-?F-lW5`ov8No*JMR^e z+DmEejh3t)A>C?tER<(W{Yk4zs0z*kcCNJ8K5E{3oZWlw@cN%aNcT@*A+DFGr#=PW z`=!s5MS@7?fUDqCV=58{tC2Y`gE61yiVnMQV6$vtP24qPmKDnLBp2x)p4TutMtcf|RVtV?xkYP-pB z6q4_aoQ_H6lc1rLSq(L80*m%ay6*2m2g`buTs?=oiBGgOqO9S0z${WH+tsV5pY&rC z1fjazfk3pzz(bpJTe@)VLR-2nj_Jr?i5I)5mBfQK z95K11E&G?kWe2}waK8+XC2x@gG8#t{7_YqFGD26s9+41Bb&=VV|6d{eFFpO)C_^PT z0dWD&u$b{*$=SIXPpWvS30+`AA&Q5WUjpb;ls)$6lUa8%AP@?xU7<<#mVh3MC{q%FE_gZ8k$^SI;B^Pyu^WWQC|KP zd_TkT!Rlf;%OjGgS#2;%YJ>6L;1JqiTo18iWP|Y+PRlnS1YD&y81%$!FjTyr(BO46ZNCdA$Yv*B4;lKmQh1gRx5LR%EJq116@ra@rSI`4{ili|-RC@}ny0GpP zdx{;2>>ERS3b^-%_7rg65ZY7hNSyQqtl{x5W>3)sV)WZ&;tQCrVeSWAf{<o8Z59M6MW@9K1mR*!!LQh3^g?{D1{t(< zup6xG;CHAusN@!;RdWsYDHpP;b2SiuU^9G@_1e&1$%E>Ch?xb)gM|1LAVefi#~4J+ z1Qsp-=!!5Uqk_L-%7!?3;}_>CRdDC1;8weiPQ!qYBca{kZ*7Um^!Gr+?I5nEqK(I; ztc)(NQi5Rx3u*FSM=0v%Gng?U@YX11UVCLo{vS#HrzHpe)-KSt5wjz^!62~{z%kg? zN;)iP!eGZ^tqlMvW!`@jqXb{z)6YhnlvixshT$)RP7$wBaHKpF(yF$R1cf?EuT zrxW2XQhh*%C>T2zV@kjvt)tMCKsY6`l>z%+hUB${(D92sOcBpVj3RP&GuAN06|N0(INk$((OZ*j&5dTS(FiM|H zoMPejsE#p4MCUM%k#hWom4kk#_1vb74c89ZsG;tK)g&4jPxSttUdf1Q`yu2U*Z6y) z%QxBFk8HrIA4cNYHIotAP%~+A#}Y;~lSZXx(ES$ZFs^(A=pxOeNnn(2xPXrrFr+SUyPhJY7I}k8MofgCptg7ag)$>qx>>2l)RJ?cpZ{cKye`cil|G0Y-IJv4Sf4uTu)q7RdOS;mX zs!Dg#)ghB`W^ zF|8P6G;;U2fOqWH^pPOIqvYG0$7GA zd0*sHi1$gMcMh`l#4NsY}Vn0GkyphA%<43?G5UmEc^+HuLtFmAW(dHtGjP8H!EdO634_5gbT@eGqQkt*y}$ z(Y-y}`@PBdh<8?o1e$Y*rt>Iv^b%&B88 zrYj?QtB0zR^P-cLLj6{F!Zy&8D^Fx{rL)n9M(Kr{E1%&7??$pVyR9ee030f~uQ2&T z`KcFN&nWDQ;4v3Q03~6f8YdcDfS^;kE&9gS+R8kn-O>+#5w*IG5h8Fc91P(v5md-z zmCIJfER7OAkVwPQ!w1EKu*R%Ecv_;=W>?qp6CIuUcgQEez=EFGPg>xEE)+xcg>q=PEfBC(xCYuD%7FV-FFF zmlU}A#ul2U9QH&G?gyoBP%iq@pc##%$9g>W$?rWB$9_!c>!NrPp8j_A0-G_N+i~W} z7{*ySB^wLm%nOh){`&jvdKmTtQ@uR@5&yNR66u!w{U^fXGf5c2(~$e#Lvb|3>wi>3!8ym4Z*|`BQ zR5w=2JD1bgMF|K^qn0;5?CEVcneLxV*+O~jTfJ?p95!xZu2WMrs*rzxdT~ZIan#+L|4P)6r|JR}$v<1jyR?uz^6$|1 zlE=a622ku)6xJiG~fju93Y5pwD{f4n@}&H?Xxi0 zsC3d4_XX;9gPnpU`WX=mwk0W6@EW|C!J+^v@2Mu$IRBe9|Ie9x>16)m*7o^0^7*Xv zZ3a>a7fm@RE8ziK)reI)Q&~%)oCK#Cj9~Z}4uVppSZ9+b5+H_AAj)RqD_)FOwQe&eBMvVsGlFDjubE+>kzasunbw{XQLd2kvmt_EkgW+OVbf?lZCq6EvwND~)Z9)=M) zRce0)z@tt78wPPrCzadL96k@CIASx(`7jmSggizl^#W~oE1Vs-AsTE|4Oj&0cD%F0 zj_Np7N2D{>c&geu@eY6^I#lFLR5El!W{WpEs&4pM*qngBQ^1Qd1>@beG}Y_D6pBb%xJ%x8z4SLV8;&eZdqC$x9&$ z&IdT|2W6xi4^TxPvfl#5o|JtN^iom7ymN z8maZ$7Gcr%kY3iXZ*i%h=j{nS1z=PtuY($%GMFa3@axRb9$ddAQVzg;2XLuBLrK6F zxI&7+`KASD1S@iYa|gjunjDYHPROmJ?9w_M)XpFG2|$h#@ZU;8plM^cJJTlM{(dsm zhm9CI044-bIDycl9&#gVF2DmW;^snWQ4m?vS&J3*-At#}d&EjfyY>%gEwz74!-^Jv zla6%zTQoB5Z_^O1+U@Vs3h8JV?eB@b`6#BS_77pNJ^)ER@9A+JtNp#2Th$xT&rdASYU>DpGVUL~Ipocjt5@N)IWTZ__wrwIv z)IuRe)Dmn82vj;K7!)AD?9vh(iVKH?hJ6xOf>N&mtrzlk<<1C?oPh^Zxk2*5?}SK* ziLr`X3f_x}=c17mt{5&pTRQqhqQV3Ez_7`UFBkeC?mou#o+gB zJf1yMv-jswHe~ThHo@DN7bb=xhGBsQr@x)>fIn##cs5vgEc+5jhH#LP2y&mW)k@T$ zKMQPz!>Su?n}E*2nLi=QhCc_axXB}N`^qP9HK-LY7LvbrH{ibo@MqF8B?ArYE_mBz z-dc>B+9JNu=|mnVPW<4FWgNwV_6i8u!YjNQF?zs$L&tbI7cU8N;UCfIoZz>BMYAB8 zSB3?V$TH%puzd7NH(siMozJa+4}7^u0Im!d2QX}2aA!zYfs>6f8)JsjmH@UJfT3E5Muyu1;fCJ>%pF5;1xtyq7RMlMGs2>70Z3ReIHo8o25lS{tSJN2x#~t2 zmx#iWAra8#yf;J<@@GgFSCz^e1nxkV8$=#xjCqD%tEWf#5itFxdWO}G{UGBjTo)Kp z;K{36t?>6oD*0cuF5)7FrsdUs+OQNi98oO>-3nr=o;-B+2TjE&R?G_i+?bRHp!=7` ze88AC{;!Pt*T$qY9^?Pkn7^a>9%x};#xR&K3}y#|xxt`(fKCocM(`tEXH}44ko_Z~ zFkdl&O^!$FV5&|q`i4uPN>U?)N5PsO4aZ@)!Iwdk;mXKrd}NMwh5zcs)GHQzNk~@= ztbggkDmOr~=8^abz6g(|i=Tw{*d92o_Snr_ZV0D5p#2joly3jo08J->7x%T;;L#FD z>aNCfn9yiVrT?}wK?NA|T)A&novF;g>P)4bS|>CYi5;NldZX;!@ddg{q}ydlgs-Fy z)v?98cQPr>FNAmNUlwRiN63^R$WZA7x`aa z4)ZpQHM+5qb7{QXF&~A9=uLO6X0#8_$6~t2&xKh81q<*4p2DbxIWO#jm(ff7mD%+Y zKgRaU-ouwuhny_iO2N}s!1o1?g|Z7uDoai7r&LtOsr6tE@v66~+YOG#+zGZhgjqYoUAg`MhiT-mb3ge_r&41eVBNjs>Kx4y+G5b z_q-V#)r{4WoFxQo8{#8bwIq)gb7(FhbU+0Y&}0&t%#J3L(PToJOiIm^Ow0okwW;)p zoEq!ChOEZ?)4ICyZViTno6!dvZ{rKiDm>HSFB&I|P)%Rs$BY_#q0e-qNT937Ktd-W z5;yV7y(-`1axYzo4#G8%yNx!?p%hVemcw%v8GqzV$(}4V1LT4Ii`(p3i*6}uHFP{Co57dZuNN%?f#5w7QOXex!KK#b zZx^!Mp`m8|g4$nc59-wIiD2sg#yjGZOdLreB(3szYC|zYq|B^NOya`t0TQ}rvj95?uy;uXk^eXG2Wk?U={pEgA?FYU+J{yTQ6bp#cb3W))>7kZvJA@ zXqxp8=^959W>25o8!yz869<9V6pBj3S|4}UM-f~nJUUrd&|?xeo%twko|KG#f!SUw zd`^o{HCGZV@%X+Bey-@b1)qJ+sRZri@ToeLRchJnv=~Jd=@vKO*k?J`syu<(1_@s$ z{56*;LJgyc=7dit09Z3hBI?XV3y8z0$=zsNMhOwev$SY9m9y12ne98w2YrV+Zqaw> za#}12>lqs8J!J9I5Yd{80M;Pk9diQOvL!nM>qF`(th0|50=%F#o7p z^aC-pj_RHOU3{wz+s(;6*fqGe1pPom|(bPFZwXmi#__g&DZ z-eS(BfK54U2oF^+Mp}RB2zF(i7ghHAwwWo!n#qgy!5Hw z;@6{od%OGdUhMIDaN+TW}8D=bHgkQm=fA zq+x5L^_Pu_beEv_Y8~=>;vP9??0suTdVlCdsvRQl{xjlb7YuH|2ydAPy}